[NOT WORKING(FOR NOW)][BOOTLOADER] SuperCID 11111111

Search This thread

MaartenXDA

Senior Member
Oct 2, 2012
1,971
1,159
Amsterdam
DO NOT TRY, THIS WILL NOT WORK FOR NOW.

Hey guys, here's the manual for how to get SuperCID WITHOUT S-OFF.

NOTE: THIS IS NOT FOR BEGINNING USERS, YOU WILL CHANGE THE BOOTLOADER WHICH MIGHT BRICK YOUR DEVICE, BE CAREFUL

Thanks to vogonpoetlaureate for finding where the CID is, he's a great guy so go thank him!


Assuming you have ADB (Android Debugging Bridge) installed, open up your command prompt and type this:

Code:
su
dd if=/dev/block/mmcblk0p7 of=/sdcard/mmcblk0p7
Now you have it dumped on your SD-Card

Next, type "exit" and again, "exit".

Type
Code:
adb pull /sdcard/mmcblk0p7
BE SURE YOU KNOW WHAT SIZE IT IS BEFORE CONTINUING

Open the file with your HEX-Editor, assuming you have one downloaded. I personally use XVI32.

You will see your CID on the fourth line, in my case it's HTC__E11.

Change it to 11111111 and save the file as mmcblk0p7MOD. BE SURE IT'S THE EXACT SAME SIZE AS BEFORE.

When you're back in command prompt, type
Code:
adb push mmcblk0p7MOD /sdcard/mmcblk0p7MOD

Type
Code:
adb shell
su
dd if=/sdcard/mmcblk0p7MOD of=/dev/block/mmcblk0p7

Reboot to bootloader, (adb reboot-bootloader) and go into fastboot.

Type
Code:
fastboot oem readcid

It should read 11111111.

Thanks to grankin01 for the base thread: http://xdaforums.com/showthread.php?p=26516911#post26516911

I AM NOT RESPONSIBLE FOR BRICKED DEVICES



It works with me, PLEASE, if it works with you reply here!
 
Last edited:

gbueno6

Senior Member
Nov 20, 2011
405
140
Barcelona
Just to be sure, I need to be in "normal" system (not fastboot or hboot or recovery) to do this steps right?
I'm asking that because I'm facing this error:

root@android:/ # su
root@android:/ # dd if=/dev/block/mmcblk0p7 of=/sdcard/mmcblk0p7
dd if=/dev/block/mmcblk0p7 of=/sdcard/mmcblk0p7: cannot open for write: Read-only file system

I should say I have neXus last kernel and TWRP installed.

Thank you very much!!
 

MaartenXDA

Senior Member
Oct 2, 2012
1,971
1,159
Amsterdam
Re: [BOOTLOADER] SuperCID 11111111

Just to be sure, I need to be in "normal" system (not fastboot or hboot or recovery) to do this steps right?
I'm asking that because I'm facing this error:

root@android:/ # su
root@android:/ # dd if=/dev/block/mmcblk0p7 of=/sdcard/mmcblk0p7
dd if=/dev/block/mmcblk0p7 of=/sdcard/mmcblk0p7: cannot open for write: Read-only file system

I should say I have neXus last kernel and TWRP installed.

Thank you very much!!

Try using those commands in recovery, then it'll work.

Sent from my awesome fridge
 

MaartenXDA

Senior Member
Oct 2, 2012
1,971
1,159
Amsterdam
Re: [BOOTLOADER] SuperCID 11111111

I found out which was the mistake: I was in Hard Disk mode. In charge only mode it worked. Now I'll transfer the file again, reboot to bootloader and see if it worked!

By the way, did it work for you?

Thank you

Yep, worked for me.
But still, please report.

Sent from my awesome fridge
 

Len

Senior Member
Dec 4, 2010
265
60
32
So, just in case... restoring old CID = changing value to old CID?
 

rey71ng

Senior Member
Jan 16, 2013
105
11
Great job, but I don't think I will need this thing. Nevertheless it's great job done, because AFAIK changing CID will help to get rid of sim lock by such operators as Verizon, Orange, Vodafone. Am I thinking the right way?
 

gbueno6

Senior Member
Nov 20, 2011
405
140
Barcelona
Please, to all the guys that have made it, can you tell me what kernel and recovery did you have installed?
Because I've tried it again, every single step, and I'm still with my carrier CID: ORANG309.

Thank you very much!
 

meyssam

Member
May 8, 2008
12
0
Tehran
HT__044

Hello and thank you for the nice info...
I have tried several times on CID HTC__044 and still i'm on the same CID...
is there any comment or solution for this?
anyway thanks a lot...
 

gbueno6

Senior Member
Nov 20, 2011
405
140
Barcelona
Thanks!

I see "ro" so that's why is not working. It seems strange considering I have flashed neXus V3 kernel which has System Protection Disabled but I've flashed it again and see if I see "rw" instead of "ro".

Thank you again!

EDIT: Tried again with a "fresh" flash of neXus kernel and no way to make it work. I'm getting kind of desperate :(
 
Last edited:

meyssam

Member
May 8, 2008
12
0
Tehran
I have tried it with system protection off even and still the same...
What I need is just to flash back to the the factory firmware, My phone is Asian (Singapore) and I coudnt find the Asian RUU till now...
I cant flash the European version because of the CID...
I dont know what to do...
 

Top Liked Posts

  • There are no posts matching your filters.
  • 12
    DO NOT TRY, THIS WILL NOT WORK FOR NOW.

    Hey guys, here's the manual for how to get SuperCID WITHOUT S-OFF.

    NOTE: THIS IS NOT FOR BEGINNING USERS, YOU WILL CHANGE THE BOOTLOADER WHICH MIGHT BRICK YOUR DEVICE, BE CAREFUL

    Thanks to vogonpoetlaureate for finding where the CID is, he's a great guy so go thank him!


    Assuming you have ADB (Android Debugging Bridge) installed, open up your command prompt and type this:

    Code:
    su
    dd if=/dev/block/mmcblk0p7 of=/sdcard/mmcblk0p7
    Now you have it dumped on your SD-Card

    Next, type "exit" and again, "exit".

    Type
    Code:
    adb pull /sdcard/mmcblk0p7
    BE SURE YOU KNOW WHAT SIZE IT IS BEFORE CONTINUING

    Open the file with your HEX-Editor, assuming you have one downloaded. I personally use XVI32.

    You will see your CID on the fourth line, in my case it's HTC__E11.

    Change it to 11111111 and save the file as mmcblk0p7MOD. BE SURE IT'S THE EXACT SAME SIZE AS BEFORE.

    When you're back in command prompt, type
    Code:
    adb push mmcblk0p7MOD /sdcard/mmcblk0p7MOD

    Type
    Code:
    adb shell
    su
    dd if=/sdcard/mmcblk0p7MOD of=/dev/block/mmcblk0p7

    Reboot to bootloader, (adb reboot-bootloader) and go into fastboot.

    Type
    Code:
    fastboot oem readcid

    It should read 11111111.

    Thanks to grankin01 for the base thread: http://xdaforums.com/showthread.php?p=26516911#post26516911

    I AM NOT RESPONSIBLE FOR BRICKED DEVICES



    It works with me, PLEASE, if it works with you reply here!
    6
    A few things I've learned about this partition ( /dev/block/mmcblk0p7 ).

    • It has a secure_flag that acts like the system write protection. This flag is set from the bootloader before the kernel loads. So even though you appear to be able to overwrite the file using dd, it does nothing.
    • The partition houses the CID, IMEI, and radio config data ( rcdata.img ).
    • It is entirely likely that S-OFF is achieved through this file as well.
    • A hardware device exists that claims to support setting the Desire X to SuperCID. Others have achieved this on other devices using a procedure probably such as the one described here.
    • Your local mobile phone repair technician may be able to get you SuperCID if they have such a device.
    • Software hacks have been devised to defeat the secure_flag on other HTC devices by means of a kernel module.
    • It's possible that such solutions might work on the Desire X platform, but the software would need to be ported and tested by an experienced kernel hacker/developer.
    • SuperCID is desirable for two main reasons. First, it's good for non-European users who need to use the European RUU (the only one we have available atm) to restore their phones to stock ROM. Second, it will potentially enable the Facepalm S-OFF folks to port their S-OFF utility to the Desire X.

    So when will a software solution to SuperCID be available for the Desire X? Probably not for a while. A hardware solution is reported to exist, and may be the only solution for now.
    5
    Great work! I have contacted the devs of facepalm to get us S-OFF. They were waiting for us to get superCID .
    4
    now read the thread again and carry on...
    it istn't possible yet to write to those partitions due to S-On till now.
    We need some people from the Revolutionary team to investigate our chances, but till now we're trapped with the device we have.

    Hi
    I have Super CID on Desire_X ....i did via Jtag..(Device is S-On)
    So,,What's You Need? Partition Info?System Dump?? or Anything...??

    if i can Help,Plz let me know How can i help....


    Thanks

    C:\Users\Babak>fastboot getvar all
    (bootloader) version: 0.5
    (bootloader) version-bootloader: 1.24.0000
    (bootloader) version-baseband: 1.10.40.23
    (bootloader) version-cpld: None
    (bootloader) version-microp: None
    (bootloader) version-main: 1.18.401.1
    (bootloader) version-misc: PVT SHIP S-ON
    (bootloader) serialno: SH2A1LY0xxx
    (bootloader) imei: 352795056xxxxxx
    (bootloader) meid:
    (bootloader) product: proto
    (bootloader) platform: HBOOT-8225
    (bootloader) modelid: PM6610000
    (bootloader) cidnum: 11111111
    (bootloader) battery-status: good
    (bootloader) battery-voltage: 0mV
    (bootloader) partition-layout: HTC
    (bootloader) security: on
    (bootloader) build-mode: SHIP
    (bootloader) boot-mode: FASTBOOT
    (bootloader) commitno-bootloader: dirty-46aff746
    (bootloader) hbootpreupdate: 12
    (bootloader) gencheckpt: 0
    all: Done!
    3
    Re: [BOOTLOADER] SuperCID 11111111

    Thanks for the step-by-step Maarten. Very helpful.

    Sent from my HTC Desire X using xda premium