[Change CID and MID][S-ON]An interesting way to modify cid and mid on s-on devices

[bnwg]

@bnwg



Tried booting to temporary TWRP, failed


fastboot flash boot "C:\Program Files (x86)\Minimal ADB and Fastboot\twrp-3.2.3-5-ime.img"

target reported max download size of 995200000 bytes
sending 'boot' (31032 KB)...
OKAY [ 2.113s]
writing 'boot'...
(bootloader) HOSD CL#1067605
FAILED (remote: 9 RU_SECURITY_FAIL boot and bootloader isn't BL_UNLOCKED)
finished. total time: 3.200s



even tried boot_a & failed too




My phone status

Locked bootloader
S-On
Software: Official




Are there any method we can temporary boot TWRP with Locked bootloader ?

---------- Post added at 11:02 PM ---------- Previous post was at 10:48 PM ----------

C:\Program Files (x86)\Minimal ADB and Fastboot>fastboot boot "C:\Program Files (x86)\Minimal ADB and Fastboot\twrp-3.2.3-5-ime.img"
downloading 'boot.img'...
OKAY [ 2.025s]
booting...
FAILED (status read failed (Too many links))
finished. total time: 147.912s

As far as I understand U11+ can't boot TWRP even it's bootloader unlocked. It needs to flash.

 

[handsome_hell]

@bnwg



Tried booting to temporary TWRP, failed


fastboot flash boot "C:\Program Files (x86)\Minimal ADB and Fastboot\twrp-3.2.3-5-ime.img"

target reported max download size of 995200000 bytes
sending 'boot' (31032 KB)...
OKAY [ 2.113s]
writing 'boot'...
(bootloader) HOSD CL#1067605
FAILED (remote: 9 RU_SECURITY_FAIL boot and bootloader isn't BL_UNLOCKED)
finished. total time: 3.200s



even tried boot_a & failed too




My phone status

Locked bootloader
S-On
Software: Official




Are there any method we can temporary boot TWRP with Locked bootloader ?

---------- Post added at 11:02 PM ---------- Previous post was at 10:48 PM ----------

C:\Program Files (x86)\Minimal ADB and Fastboot>fastboot boot "C:\Program Files (x86)\Minimal ADB and Fastboot\twrp-3.2.3-5-ime.img"
downloading 'boot.img'...
OKAY [ 2.025s]
booting...
FAILED (status read failed (Too many links))
finished. total time: 147.912s

Try to unlock the bootloader before booting into TWRP.
Use ADB or Terminal in TWRP.

 

[foosoomin]

@handsome_hell


Thank you for your advice.



1) I cannot unlock my bootloader in my Exodus 1, or else i will lose/break Zion wallet full security function

Link: https://forum.xda-developers.com/u12-plus/how-to/exo-htc-exodus-s-unlock-relocked-t3899432


2) Example if i flash RUU.zip file through fastboot rebootRUU, will the unlocked bootloader go back to Locked bootloader ?

3) How to use ADB or Terminal in TWRP ?

---------- Post added at 03:22 PM ---------- Previous post was at 03:21 PM ----------

[/COLOR @handsome_hell


U12+ / Exodus 1 partition table is the same as U11

https://forum.xda-developers.com/u12-plus/how-to/partitions-table-u12-t3798804

 

[TheCounqer]

Well i followed your guide and end up with my phone screen shut and i can't access any thing but fastboot so is there any possible solution except customer service cuz i don't think there is any in my region

 

[handsome_hell]

@handsome_hell


Thank you for your advice.



1) I cannot unlock my bootloader in my Exodus 1, or else i will lose/break Zion wallet full security function

Link: https://forum.xda-developers.com/u12-plus/how-to/exo-htc-exodus-s-unlock-relocked-t3899432


2) Example if i flash RUU.zip file through fastboot rebootRUU, will the unlocked bootloader go back to Locked bootloader ?

3) How to use ADB or Terminal in TWRP ?

---------- Post added at 03:22 PM ---------- Previous post was at 03:21 PM ----------

[/COLOR @handsome_hell


U12+ / Exodus 1 partition table is the same as U11

https://forum.xda-developers.com/u12-plus/how-to/partitions-table-u12-t3798804

1) You have to unlock your bootloader to modify these "dangerous" things I afraid.

2) I didn't tried to relock it.

3) ADB works as soon as you boot into TWRP.

 

[handsome_hell]

Well i followed your guide and end up with my phone screen shut and i can't access any thing but fastboot so is there any possible solution except customer service cuz i don't think there is any in my region

If you can still access your phone through fastboot, you can try
fastboot continue
Otherwise, give up and send it to the HTC.

 

[TheCounqer]

@handsome_hell i gave up and sent phone to htc and as i thought they didn't understand any thing and told me board needs to be changded

 

[XeLiOs512]

Hello, quick question.

If I change my CID (HK->TW), flash a different RUU, will it wipe the data on my phone?
I'm looking to upgrade to android 9. HK model is taking too long for the update.

 

[BlackTigerR]

Hello, quick question.
If I change my CID (HK->TW), flash a different RUU, will it wipe the data on my phone?

Yes

 

[valvaher]

Good evening, when entering the file with the cid I modified the following error:

dd: /dev/block/sdf1: Read-only file system

Already try this method, which appears in the HTC U11 forum and with htcdevinfo program

WARINING!!!!
Flashing TWRP before doing anything, or you may lose your phone!
And NEVER flash ENTIRE SDE and SDF parititions from OTHER phone!
------------------------------------
In sdf1, there are some information after the IMEI2
After I bricked my phone, I think these information is unlock code
------------------------------------
Hello guys!
After the last time I successfully downgraded by modifying /dev/sde1, I tried to modify cid and mid in the same way. I successfully done this today, but I encountered some problems while flashing the RUU pack.

It seems that HTC has some cryptographic verifications for this, so I cannot modify everything.
The following is the method of modification. I hope people who are familiar with these can find things that I didn’t notice.
-------------------------------------
Changing mid:
1.Get image of sdf2 partition by

and then pull it to your computer by

2.Open the image file by hex editor, find the mid of your phone. For me, it is

change it to the mid you want.
3.Push the image back to your phone by

the flash it back to the sdf2 partition by

4.Done. You can check it by

-------------------------------------
Changing cid:
1.Get image of sdf1 partition by

and then pull it to your computer by

2.Open the image file by text editor, find the cid of your phone. For me, it is

change it to the cid you want.
3.Push the image back to your phone by

the flash it back to the sdf1 partition by

4.Done. You can check it by

(Yes, I copied the above )
-------------------------------------
For changing version number to downgrade, here is the link:
https://forum.xda-developers.com/htc-u11/how-to/downgrade-downgrade-flashing-version-t3762172
I noticed that there is also a cid in sde1, but modifying it does not make me to pass the checking of HTC.
-------------------------------------
After I failed on flashing the other RUU pack, I restore cid, mid and version number, and I pass the checking this time, so I don't think modifying them will cause trouble.
There are many things in the extracted image, maybe some encrypted data is hidden inside.

Hope this can help you.

 

[sonVNCb]

If you can still access your phone through fastboot, you can try
fastboot continue
Otherwise, give up and send it to the HTC.

hey buddy, thanks for your instruction . i know it is not smart but i had edited mid on notepad so now i get my phone completely black screen, only responds with vol- and power but no booting on. pc detected as fastboot devices but cant flash anything (not allowed on production devices)
i still can flash hosd_signed.img file but can not boot in download mode.
can you help me to do smthing with my devices, thanks a lots.