[how to] Convert M8 to Developer Edition

Search This thread

sailas2006

Member
Jun 7, 2010
47
15
Bucuresti
Disclaimer - I am not responsible for any damage that might appear to your phone , soft or hard brick.

Note : This will work only for GSM M8 models.

1 - You will need to be S-OFF
2 - Unlock bootloader ( I used the WinDroid Tool ) - link : http://xdaforums.com/showthread.php?t=2499926
3 - Install custom TWRP recovery ( I used the WinDroid Tool )
4 - Instal SuperSU ( I used the WinDroid Tool )
5 -Change CID and MID
- You will need adb for this
Change CID :

1 - In your adb folder hold shift and right click and press Open command window here
2 - type : adb devices - it will confirm that the device is connected to the PC ( enable developer options and check the USB Debugging box )
3 - type : adb reboot bootloader
4 - type : fastboot oem writecid BS_US002
you can use BS_US001 - BS_US002 or supercid.
5 - type : fastboot reboot

Change MID:

enter the following:
adb shell
su (if needed to get a # prompt)

Code:
Code:
echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x32\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384
(the above is one big long command. make sure you copy it all,and dont get extra spaces when you paste it.)

exit
adb reboot bootloader
fastboot getvar mid (or getvar all)
verify 0P6B12000 for modelid

fastboot reboot

- thx to this post ( I'm not taking any thing for granted ) http://xdaforums.com/showthread.php?t=2708581

6 - Flash 4.16.1540.8 TWRP Back-up that can be found in this thread ( http://xdaforums.com/showthread.php?t=2701376 )

Always REMEMBER to do a TWRP back-up of your own system in case something goes wrong.

7 - Download , rename to recovery.img , and copy to your adb folder the 4.16.1540.8 recovery from here ( https://www.androidfilehost.com/?fid=95897840722642232 ).
8 - Flash stock recovery

fastboot flash recovery recovery.img

9 - Now you can OTA to 4.16.1540.9 - after the update you will get 3 more mini updates to prepare for the MM Update.

Any questions - just ask .
 
Last edited:

KevYoshi

Senior Member
Nov 5, 2015
104
17
Code :
echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x32\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384

Oh, ok, its now working, i will test now again :)

---------- Post added at 09:00 PM ---------- Previous post was at 08:58 PM ----------

Oh and you forgot on the cid change tutorial to write "fastboot oem writecid BS_US002", you forgot the oem :p
 

KevYoshi

Senior Member
Nov 5, 2015
104
17
when i use your comamnd

echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x32\x00\ x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384

then my mid is 0PB12\x000, wtf am i doing wrong :(

---------- Post added at 11:03 PM ---------- Previous post was at 10:46 PM ----------

and when i try this command

echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x30\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384

i have five 0's behind the 0P6B12 (so 0P6B1200000)
 

sailas2006

Member
Jun 7, 2010
47
15
Bucuresti
The first comand has an "space" misplaced ( 2\x00\ x30\ ) between \ and x - No GOOD

echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x32\x00\ x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384

The second one has an 0 instead of a 2 ( 0\x30\x0 ) shod be ....0\x32\x0...... - No GOOD

echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x30\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384

This shod be GOOD. Just copied from the link I provided. ( http://xdaforums.com/showthread.php?t=2708581 )

echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x32\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384
 

sailas2006

Member
Jun 7, 2010
47
15
Bucuresti
The first comand has an "space" misplaced ( 2\x00\ x30\ ) between \ and x - No GOOD

echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x32\x00\ x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384

The second one has an 0 instead of a 2 ( 0\x30\x0 ) shod be ....0\x32\x0...... - No GOOD

echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x30\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384

This shod be GOOD. Just copied from the link I provided. ( http://xdaforums.com/showthread.php?t=2708581 )

echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x32\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384

It seams that when i press Submit Reply the browser automatically inserts a space between \ and x at the second \x30.
 

Anakha56

Senior Member
Aug 10, 2008
927
132
Durban
@sailas2006 wrap it in code tags ;).

Code:
echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x32\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384

The above line is for the AT/T Developer Edition taken from the url you provided.
 

lu_peng2

Senior Member
Jun 19, 2007
204
24
shanghai
It seams that when i press Submit Reply the browser automatically inserts a space between \ and x at the second \x30.


i get too also to may 0 even with deleting the space:

echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x32\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384

so 0P6B1200000

also when i tray a other one like this:

echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x30\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384

0P6B1000000

what can i do?
 

sailas2006

Member
Jun 7, 2010
47
15
Bucuresti
i get too also to may 0 even with deleting the space:

Code:
echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x32\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384[/code\

so 0P6B1200000

also when i tray a other one like this:

echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x30\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384

0P6B1000000

what can i do?[/QUOTE]

The Code For Developer Edition is :

[code]echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x32\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384

There not any trick to the numbers. 30=0,31=1 and so on. 41=A,42=B and so on. Its important to keep the 00s, which are a . in the hex editor. The mid is kept in the partition in a somewhat strange fashion,and it you cant change the orientation,or the offsets:

That is translated to :

00004000 30 00 50 00 36 00 42 00 31 00 32 00 30 00 30 00 0.P.6.B.1.2.0.0.
00004010 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0...............

I guess that when you paste the command there are 5 - \x00\x30\ at the end in stead of 3. Otherwise I can't explain , I have used the same command on my M8 and worked like a charm.
 

lu_peng2

Senior Member
Jun 19, 2007
204
24
shanghai
The Code For Developer Edition is :

Code:
echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x32\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384

There not any trick to the numbers. 30=0,31=1 and so on. 41=A,42=B and so on. Its important to keep the 00s, which are a . in the hex editor. The mid is kept in the partition in a somewhat strange fashion,and it you cant change the orientation,or the offsets:

That is translated to :

00004000 30 00 50 00 36 00 42 00 31 00 32 00 30 00 30 00 0.P.6.B.1.2.0.0.
00004010 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0...............

I guess that when you paste the command there are 5 - \x00\x30\ at the end in stead of 3. Otherwise I can't explain , I have used the same command on my M8 and worked like a charm.

believe me i double checked every single letter one by one guess tomorrow i will tray to modify it by taking away first one \x00\x30\ to see if i get lesser 0. there are many starnge things since it came back from fixing the screnn. suddenly i got 3g in china mobile (before not) and it calls htc_tl not htc_ul and i can't boot any costume rom
 

Me20056

Member
Dec 27, 2015
5
1
believe me i double checked every single letter one by one guess tomorrow i will tray to modify it by taking away first one \x00\x30\ to see if i get lesser 0. there are many starnge things since it came back from fixing the screnn. suddenly i got 3g in china mobile (before not) and it calls htc_tl not htc_ul and i can't boot any costume rom

Check the IMEI , maybe they swapped your board.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 3
    Disclaimer - I am not responsible for any damage that might appear to your phone , soft or hard brick.

    Note : This will work only for GSM M8 models.

    1 - You will need to be S-OFF
    2 - Unlock bootloader ( I used the WinDroid Tool ) - link : http://xdaforums.com/showthread.php?t=2499926
    3 - Install custom TWRP recovery ( I used the WinDroid Tool )
    4 - Instal SuperSU ( I used the WinDroid Tool )
    5 -Change CID and MID
    - You will need adb for this
    Change CID :

    1 - In your adb folder hold shift and right click and press Open command window here
    2 - type : adb devices - it will confirm that the device is connected to the PC ( enable developer options and check the USB Debugging box )
    3 - type : adb reboot bootloader
    4 - type : fastboot oem writecid BS_US002
    you can use BS_US001 - BS_US002 or supercid.
    5 - type : fastboot reboot

    Change MID:

    enter the following:
    adb shell
    su (if needed to get a # prompt)

    Code:
    Code:
    echo -ne '\x30\x00\x50\x00\x36\x00\x42\x00\x31\x00\x32\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p5 bs=1 seek=16384
    (the above is one big long command. make sure you copy it all,and dont get extra spaces when you paste it.)

    exit
    adb reboot bootloader
    fastboot getvar mid (or getvar all)
    verify 0P6B12000 for modelid

    fastboot reboot

    - thx to this post ( I'm not taking any thing for granted ) http://xdaforums.com/showthread.php?t=2708581

    6 - Flash 4.16.1540.8 TWRP Back-up that can be found in this thread ( http://xdaforums.com/showthread.php?t=2701376 )

    Always REMEMBER to do a TWRP back-up of your own system in case something goes wrong.

    7 - Download , rename to recovery.img , and copy to your adb folder the 4.16.1540.8 recovery from here ( https://www.androidfilehost.com/?fid=95897840722642232 ).
    8 - Flash stock recovery

    fastboot flash recovery recovery.img

    9 - Now you can OTA to 4.16.1540.9 - after the update you will get 3 more mini updates to prepare for the MM Update.

    Any questions - just ask .
    1
    Why all this when the full RUU is available ?

    In my case the RUU did not work.