Location of CID String

[sjbale]

Hi,

Probably a bit of a newbie question but I can't find a definitive answer anywhere else on the forums. Where is the CID actually stored, is it part of the IPL, SPL or Radio ROM? If I perform and upgrade that replaces the Radio ROM but not the IPL/SPL will this change my CID? If I use the new Linux ROM flasher to dump the radio ROM is it possible to restore my CID at a later date.

[pof]

The CID is stored on the security area found in radio. When the SPL checks the CID it queries the radio and is it who tells the SPL which is your current CID.

Modified bootloaders such as SSPL or Hard-SPL are patched to always show "SuperCID" when the CID is queried, but they don't "ask the radio" which is your real CID, they just return always "SuperCID" without asking the radio for the real CID.

People who has what we call a "corrupted CID" doesn't really mean their CID is corrupted, it means that when the SPL asks the RADIO which is the device's CID, the radio is not able to answer, so the bootloader shows a "F" meaning Failure and a crc32 checksum of this failure, it this case it is really the radio which is corrupted (and fails to answer) and not the CID. If the radio bootloader is not corrupted (which is not in most of the cases) you are able to flash a radio again and "recover your CID", which means the radio is recovered and returns the proper answer to bootloader again.

Now answering your questions:

If I perform and upgrade that replaces the Radio ROM but not the IPL/SPL will this change my CID?
No, unless the radio is patched to do so... but even the patched radio, doesn't really change your CID, just "returns" a security level=0 which the SPL interprets as SuperCID.

That's why you see your devcice as SuperCID while running the patched radio, but if you flash another radio after, you go back to your normal CID.

If I use the new Linux ROM flasher to dump the radio ROM is it possible to restore my CID at a later date.
No, HERMflasher (http://forum.xda-developers.com/showthread.php?t=296436) is able to dump a radio with 'rrbmc' command, but the dumped radio is not useful for anything as not all parts are dumped with this command. I just did it because I wanted to see what was dumped, and learn a bit of C programming with it :)

[sjbale]

Thanks for the info, so as things stand at the moment there is no way to dump a backup version of the IPL, SPL or Radio ROM. If I used the Hard-SPL to flash a ROM without the Radio portion is this likely to cause compatibility problems ie do the updated OS images require an updated radio?

[pof]

Thanks for the info, so as things stand at the moment there is no way to dump a backup version of the IPL, SPL or Radio ROM.
You can dump IPL and SPL using 'rbmc' command, but there's no need to dump them from a live device because you can extract all available versions from a shipped rom.

If I used the Hard-SPL to flash a ROM without the Radio portion is this likely to cause compatibility problems ie do the updated OS images require an updated radio?
Depending on how much "outdated" radio and "updated" OS you have flashed, but generally you don't have to worry about that.