How to change CID with S-ON, without SunShine

[tomitoek]

Only some versions can be changed ,what cid was your phone and what were you trying to change to ,restore your original file and see if you can run the matching RUU

my CID was HTC__060 and i want to change it to HTC__621, and its work! its got changed to HTC__621, but red message appear then and it cant boot on OS (bootloop on Bootloader) i've restore the original file and the problem still exist. please help me T-T

 

[mehrdad_esmaeeli]

my CID was HTC__060 and i want to change it to HTC__621, and its work! its got changed to HTC__621, but red message appear then and it cant boot on OS (bootloop on Bootloader) i've restore the original file and the problem still exist. please help me T-T

You have to flash Ruu for cid htc__060

 

[felixpaz1992]

Good with everyone, I have read all the thread and I wanted to know if they could clear me the doubt, I have an HTC 10 that is from the Claro operation of Colombia and has a very special CID, so as not to lengthen the cell phone stays in the logo of HTC and I can't find the rom for my CID and I wanted to know if with this procedure it is possible to install a rom stock with another CID since I'm S-ON

 

[chu32951]

Just to sort out the steps

To change CID and MID, we only need modify three file: misc, board_info and mfg. sdxx are not needed, because
/dev/block/bootdevice/by-name/misc -> /dev/block/sde1
/dev/block/bootdevice/by-name/board_info -> /dev/block/sdf1
/dev/block/bootdevice/by-name/mfg -> /dev/block/sdf2

misc for Software Version
board_info for CID
mfg for MID

Steps with TWRP:
0. Connect the phone to the PC and reboot to TWRP

adb reboot recovery
adb shell​

you can also do the following steps with rooted android and busybox. In this way you need to add prefix "busybox " to dd

1. Check your original data
Software Version:

dd if=/dev/block/bootdevice/by-name/misc bs=1 skip=2208 count=11​

CID:

dd if=/dev/block/bootdevice/by-name/board_info bs=1 skip=20 count=8​

MID:

dd if=/dev/block/bootdevice/by-name/mfg bs=1 skip=16384 count=16​

2. If the original data match your current value, then you can do the following step.
Just in case, back up the original file

dd if=/dev/block/bootdevice/by-name/misc of=/external_sd/misc.img
dd if=/dev/block/bootdevice/by-name/board_info of=/external_sd/board_info.img
dd if=/dev/block/bootdevice/by-name/mfg of=/external_sd/mfg.img​

Set a lower version than your RUU which will be flashed.

printf 1.01.001.01 | dd conv=notrunc of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208​

or just clear it.

dd if=/dev/zero of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208 count=11​

Set your desired CID. (HTC__001 below)

printf HTC__001 | dd conv=notrunc of=/dev/block/bootdevice/by-name/board_info bs=1 seek=20​

Set your desired MID. (2PZC1000 below) Please note that each character is separated by \x00

printf "2\x00P\x00Z\x00C\x001\x000\x000\x000\x00" | dd conv=notrunc of=/dev/block/bootdevice/by-name/mfg bs=1 seek=16384​

3. Repeat commands in step 1 to check the result.


P.S.
If you got "dd: conv option disabled" in step 2, you need to download busybox to enable this feature.
download link
adb push ./busybox-armv8l /tmp/
adb shell "chmod 755 /tmp/busybox-armv8l;mv /tmp/busybox-armv8l /tmp/busybox"

then add prefix "/tmp/busybox " to all dd command.

 

[tomitoek]

To change CID and MID, we only need modify three file: misc, board_info and mfg. sdxx are not needed, because
/dev/block/bootdevice/by-name/misc -> /dev/block/sde1
/dev/block/bootdevice/by-name/board_info -> /dev/block/sdf1
/dev/block/bootdevice/by-name/mfg -> /dev/block/sdf2

misc for Software Version
board_info for CID
mfg for MID

Steps with TWRP:
0. Connect the phone to the PC and reboot to TWRP

adb reboot recovery
adb shell​

you can also do the following steps with rooted android and busybox. In this way you need to add prefix "busybox " to dd

1. Check your original data
Software Version:

dd if=/dev/block/bootdevice/by-name/misc bs=1 skip=2208 count=11​

CID:

dd if=/dev/block/bootdevice/by-name/board_info bs=1 skip=20 count=8​

MID:

dd if=/dev/block/bootdevice/by-name/mfg bs=1 skip=16384 count=16​

2. If the original data match your current value, then you can do the following step.
Set a lower version than your RUU which will be flashed.

printf 1.01.001.01 | dd conv=notrunc of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208​

or just clear it.

dd if=/dev/zero of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208 count=11​

Set your desired CID. (HTC__001 below)

printf HTC__001 | dd conv=notrunc of=/dev/block/bootdevice/by-name/board_info bs=1 seek=20​

Set your desired MID. (2PZC1000 below) Please note that each character is separated by \x00

printf "2\x00P\x00Z\x00C\x001\x000\x000\x000\x00" | dd conv=notrunc of=/dev/block/bootdevice/by-name/mfg bs=1 seek=16384​

3. Repeat commands in step 1 to check the result.

I have following the steps, and now my screen turn into black and only response with vibrate.
It cannot boot. What should i do now? Please help me. Im really appreciate for any help ?

 

[valvaher]

To change CID and MID, we only need modify three file: misc, board_info and mfg. sdxx are not needed, because
/dev/block/bootdevice/by-name/misc -> /dev/block/sde1
/dev/block/bootdevice/by-name/board_info -> /dev/block/sdf1
/dev/block/bootdevice/by-name/mfg -> /dev/block/sdf2

misc for Software Version
board_info for CID
mfg for MID

Steps with TWRP:
0. Connect the phone to the PC and reboot to TWRP

adb reboot recovery
adb shell​

you can also do the following steps with rooted android and busybox. In this way you need to add prefix "busybox " to dd

1. Check your original data
Software Version:

dd if=/dev/block/bootdevice/by-name/misc bs=1 skip=2208 count=11​

CID:

dd if=/dev/block/bootdevice/by-name/board_info bs=1 skip=20 count=8​

MID:

dd if=/dev/block/bootdevice/by-name/mfg bs=1 skip=16384 count=16​

2. If the original data match your current value, then you can do the following step.
Set a lower version than your RUU which will be flashed.

printf 1.01.001.01 | dd conv=notrunc of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208​

or just clear it.

dd if=/dev/zero of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208 count=11​

Set your desired CID. (HTC__001 below)

printf HTC__001 | dd conv=notrunc of=/dev/block/bootdevice/by-name/board_info bs=1 seek=20​

Set your desired MID. (2PZC1000 below) Please note that each character is separated by \x00

printf "2\x00P\x00Z\x00C\x001\x000\x000\x000\x00" | dd conv=notrunc of=/dev/block/bootdevice/by-name/mfg bs=1 seek=16384​

3. Repeat commands in step 1 to check the result.

very good day.

I followed all the steps and I get error 14, if you change CID and MID but do not load the new RUU

 

[chu32951]

I have following the steps, and now my screen turn into black and only response with vibrate.
It cannot boot. What should i do now? Please help me. Im really appreciate for any help

Can you enter TWRP? Try modifying it back to the original value.

---------- Post added at 12:34 AM ---------- Previous post was at 12:22 AM ----------

very good day.

I followed all the steps and I get error 14, if you change CID and MID but do not load the new RUU

strange, these steps should be the same as AHMADHAFEZY‘s, just replacing the hex editor with printf.

BTW, I tested this steps with RR and TWRP, not stock ROM. I don't know if this will lead to different results.

 

[tomitoek]

Can you enter TWRP? Try modifying it back to the original value.

---------- Post added at 12:34 AM ---------- Previous post was at 12:22 AM ----------



strange, these steps should be the same as AHMADHAFEZY‘s, just replacing the hex editor with printf.

BTW, I tested this steps with RR and TWRP, not stock ROM. I don't know if this will lead to different results.

No, it cant enter TWRP. The phone cant turn on, and it only vibrate when i push power button (also vol up+power button). Please help me ?

 

[valvaher]

I have a htc u11 whl, I change CID and MID of Taiwan and change it, the problem is that when loading the RUU of Taiwan I get an error FAILED 14 android_info.txt missing or malformed

 

[chu32951]

I have a htc u11 whl, I change CID and MID of Taiwan and change it, the problem is that when loading the RUU of Taiwan I get an error FAILED 14 android_info.txt missing or malformed

Did you load RUU in ruu mode?
In download mode, run
htc_fastboot oem rebootRUU
to enter ruu mode.

---------- Post added at 05:31 AM ---------- Previous post was at 05:23 AM ----------

No, it cant enter TWRP. The phone cant turn on, and it only vibrate when i push power button (also vol up+power button). Please help me ?

Sorry, if you can't even enter the bootloader with vol up+power, I don't know how to fix it.

BTW, did you completely power off before entering BL?

 

[tomitoek]

Did you load RUU in ruu mode?
In download mode, run
htc_fastboot oem rebootRUU
to enter ruu mode.

---------- Post added at 05:31 AM ---------- Previous post was at 05:23 AM ----------



Sorry, if you can't even enter the bootloader with vol up+power, I don't know how to fix it.

BTW, did you completely power off before entering BL?

Yes, i completely power off it.

 

[zjjshxh]

Can this tutorial can use for a5dug? I am quiet enjoyable to my u11 US Unlocked but i am using an a5dug and i wanna change cid for more roms XP (HTC Desire 816 Dualsim)

 

[sonVNCb]

I have following the steps, and now my screen turn into black and only response with vibrate.
It cannot boot. What should i do now? Please help me. Im really appreciate for any help

i had the same problem, wait for help...

 

[Drago3110]

To change CID and MID, we only need modify three file: misc, board_info and mfg. sdxx are not needed, because
/dev/block/bootdevice/by-name/misc -> /dev/block/sde1
/dev/block/bootdevice/by-name/board_info -> /dev/block/sdf1
/dev/block/bootdevice/by-name/mfg -> /dev/block/sdf2

misc for Software Version
board_info for CID
mfg for MID

Steps with TWRP:
0. Connect the phone to the PC and reboot to TWRP

adb reboot recovery
adb shell​

you can also do the following steps with rooted android and busybox. In this way you need to add prefix "busybox " to dd

1. Check your original data
Software Version:

dd if=/dev/block/bootdevice/by-name/misc bs=1 skip=2208 count=11​

CID:

dd if=/dev/block/bootdevice/by-name/board_info bs=1 skip=20 count=8​

MID:

dd if=/dev/block/bootdevice/by-name/mfg bs=1 skip=16384 count=16​

2. If the original data match your current value, then you can do the following step.
Just in case, back up the original file

dd if=/dev/block/bootdevice/by-name/misc of=/external_sd/misc.img
dd if=/dev/block/bootdevice/by-name/board_info of=/external_sd/board_info.img
dd if=/dev/block/bootdevice/by-name/mfg of=/external_sd/mfg.img​

Set a lower version than your RUU which will be flashed.

printf 1.01.001.01 | dd conv=notrunc of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208​

or just clear it.

dd if=/dev/zero of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208 count=11​

Set your desired CID. (HTC__001 below)

printf HTC__001 | dd conv=notrunc of=/dev/block/bootdevice/by-name/board_info bs=1 seek=20​

Set your desired MID. (2PZC1000 below) Please note that each character is separated by \x00

printf "2\x00P\x00Z\x00C\x001\x000\x000\x000\x00" | dd conv=notrunc of=/dev/block/bootdevice/by-name/mfg bs=1 seek=16384​

3. Repeat commands in step 1 to check the result.


P.S.
If you got "dd: conv option disabled" in step 2, you need to download busybox to enable this feature.
download link
adb push ./busybox-armv8l /tmp/
adb shell "chmod 755 /tmp/busybox-armv8l;mv /tmp/busybox-armv8l /tmp/busybox"

then add prefix "/tmp/busybox " to all dd command.

Thank you for this easy way.

I decided to go completely to stock. But with my nandroid backup i was not able to get OTA Updates. And i don't know why, but i couldn't flash the updates manually.

Original CID was VODA102; MID 2PZC10000 and Software 2.33.161.11.
Bootloader is unlocked, too.

I changed my CID to CID HTC__034 (Europe) and used dd if=/dev/zero of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208 count=11 to clear the version.

And no problems here. I flashed the RUU without problems and ow i get OTA-Updates and my Phone is unbranded :good::good:

Thank you very much!!!!!

 

[phatoutpac]

Hi Devs,

I made the mistake of relocking my bootloader however I've another problem that is stopping me from restoring my phone thru RUU. Before my phone got locked, I was messing around with CID & MID using the adb shell command and screwed up my numbers - CID now reads HTC__001 (double underscore instead of HTC_001) and MID now reads 20P0Z0C030000000 (instead 2PZC3000)

Is there anything I can do? Is there any method to pull the sde/sdf file from bootloader without adb shell? Will sde/sdf from another HTC u11 help? I'm screwed or Will HTC service center will be able to fix this?

Any advice is much appreciated

 

[Jonas22]

I've a very similar problem as you phatoutpac. My bootloader is still unlocked, but I'm stucked in the bootloader, no possibility to get in DownloadMode or Recovery, everytime I try, I got redirected to the Bootloader. Long story short:
- Is there any possibility to get access to the partitions, the emmc, use adb shell, etc. without recovery and downloadmode?
- The Phone is a U12+, I've got another u12+ here so a emmc-dump would not be a problem
- Explained my problem here: https://xdaforums.com/t/stuck-in-fastboot-mode-no-download-mode-partition-failure.4197203
- hope it's fine for you, me posting it here, but after months I don't see an alternative, if there are some out there that need a u12+ emmc-dump I can upload mine

Thank you very much!

 

[the_steve1]

This process is fatal on a U11 life
I bricked 2
Soon as i reboot it goes into bootloaser with the msg that incorrect firmware was flashed to this device and phone has been locked
From there RUU can't read battery status and refuses to flash
I can delete partitions, but any remedies I thought of were blocked

 

[Eiad Ajam]

I have bricked my htc 5g hub
it is stuck in fastboot with red text "Security error, this phone has been flashed with unauthorized software"
can't reboot to download
when trying to boot twrp it gets blank screen (device still recognized in fastboot)

When I try to flash a boot I get the message "FAILED (remote: Flashing is not allowed on PRODUCTION device)"

Any help how can I restore my device ?