How to change CID with S-ON, without SunShine

tomitoek

Member
Jul 12, 2019
5
0
0
Only some versions can be changed ,what cid was your phone and what were you trying to change to ,restore your original file and see if you can run the matching RUU
my CID was HTC__060 and i want to change it to HTC__621, and its work! its got changed to HTC__621, but red message appear then and it cant boot on OS (bootloop on Bootloader) i've restore the original file and the problem still exist. please help me T-T
 

mehrdad_esmaeeli

Senior Member
Nov 30, 2017
114
38
28
my CID was HTC__060 and i want to change it to HTC__621, and its work! its got changed to HTC__621, but red message appear then and it cant boot on OS (bootloop on Bootloader) i've restore the original file and the problem still exist. please help me T-T
You have to flash Ruu for cid htc__060
 

felixpaz1992

Member
May 18, 2014
28
2
0
Good with everyone, I have read all the thread and I wanted to know if they could clear me the doubt, I have an HTC 10 that is from the Claro operation of Colombia and has a very special CID, so as not to lengthen the cell phone stays in the logo of HTC and I can't find the rom for my CID and I wanted to know if with this procedure it is possible to install a rom stock with another CID since I'm S-ON
 

chu32951

New member
Apr 11, 2013
4
4
23
Beijing
Just to sort out the steps

To change CID and MID, we only need modify three file: misc, board_info and mfg. sdxx are not needed, because
/dev/block/bootdevice/by-name/misc -> /dev/block/sde1
/dev/block/bootdevice/by-name/board_info -> /dev/block/sdf1
/dev/block/bootdevice/by-name/mfg -> /dev/block/sdf2

misc for Software Version
board_info for CID
mfg for MID

Steps with TWRP:
0. Connect the phone to the PC and reboot to TWRP

adb reboot recovery
adb shell​

you can also do the following steps with rooted android and busybox. In this way you need to add prefix "busybox " to dd

1. Check your original data
Software Version:
dd if=/dev/block/bootdevice/by-name/misc bs=1 skip=2208 count=11​
CID:
dd if=/dev/block/bootdevice/by-name/board_info bs=1 skip=20 count=8​
MID:
dd if=/dev/block/bootdevice/by-name/mfg bs=1 skip=16384 count=16​

2. If the original data match your current value, then you can do the following step.
Just in case, back up the original file

dd if=/dev/block/bootdevice/by-name/misc of=/external_sd/misc.img
dd if=/dev/block/bootdevice/by-name/board_info of=/external_sd/board_info.img
dd if=/dev/block/bootdevice/by-name/mfg of=/external_sd/mfg.img​

Set a lower version than your RUU which will be flashed.
printf 1.01.001.01 | dd conv=notrunc of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208​

or just clear it.
dd if=/dev/zero of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208 count=11​

Set your desired CID. (HTC__001 below)
printf HTC__001 | dd conv=notrunc of=/dev/block/bootdevice/by-name/board_info bs=1 seek=20​

Set your desired MID. (2PZC1000 below) Please note that each character is separated by \x00
printf "2\x00P\x00Z\x00C\x001\x000\x000\x000\x00" | dd conv=notrunc of=/dev/block/bootdevice/by-name/mfg bs=1 seek=16384​

3. Repeat commands in step 1 to check the result.


P.S.
If you got "dd: conv option disabled" in step 2, you need to download busybox to enable this feature.
download link
adb push ./busybox-armv8l /tmp/
adb shell "chmod 755 /tmp/busybox-armv8l;mv /tmp/busybox-armv8l /tmp/busybox"

then add prefix "/tmp/busybox " to all dd command.
 
Last edited:

tomitoek

Member
Jul 12, 2019
5
0
0
To change CID and MID, we only need modify three file: misc, board_info and mfg. sdxx are not needed, because
/dev/block/bootdevice/by-name/misc -> /dev/block/sde1
/dev/block/bootdevice/by-name/board_info -> /dev/block/sdf1
/dev/block/bootdevice/by-name/mfg -> /dev/block/sdf2

misc for Software Version
board_info for CID
mfg for MID

Steps with TWRP:
0. Connect the phone to the PC and reboot to TWRP

adb reboot recovery
adb shell​

you can also do the following steps with rooted android and busybox. In this way you need to add prefix "busybox " to dd

1. Check your original data
Software Version:
dd if=/dev/block/bootdevice/by-name/misc bs=1 skip=2208 count=11​
CID:
dd if=/dev/block/bootdevice/by-name/board_info bs=1 skip=20 count=8​
MID:
dd if=/dev/block/bootdevice/by-name/mfg bs=1 skip=16384 count=16​

2. If the original data match your current value, then you can do the following step.
Set a lower version than your RUU which will be flashed.
printf 1.01.001.01 | dd conv=notrunc of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208​

or just clear it.
dd if=/dev/zero of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208 count=11​

Set your desired CID. (HTC__001 below)
printf HTC__001 | dd conv=notrunc of=/dev/block/bootdevice/by-name/board_info bs=1 seek=20​

Set your desired MID. (2PZC1000 below) Please note that each character is separated by \x00
printf "2\x00P\x00Z\x00C\x001\x000\x000\x000\x00" | dd conv=notrunc of=/dev/block/bootdevice/by-name/mfg bs=1 seek=16384​

3. Repeat commands in step 1 to check the result.
I have following the steps, and now my screen turn into black and only response with vibrate.
It cannot boot. What should i do now? Please help me. Im really appreciate for any help ?
 

valvaher

Member
May 17, 2015
28
2
0
To change CID and MID, we only need modify three file: misc, board_info and mfg. sdxx are not needed, because
/dev/block/bootdevice/by-name/misc -> /dev/block/sde1
/dev/block/bootdevice/by-name/board_info -> /dev/block/sdf1
/dev/block/bootdevice/by-name/mfg -> /dev/block/sdf2

misc for Software Version
board_info for CID
mfg for MID

Steps with TWRP:
0. Connect the phone to the PC and reboot to TWRP

adb reboot recovery
adb shell​

you can also do the following steps with rooted android and busybox. In this way you need to add prefix "busybox " to dd

1. Check your original data
Software Version:
dd if=/dev/block/bootdevice/by-name/misc bs=1 skip=2208 count=11​
CID:
dd if=/dev/block/bootdevice/by-name/board_info bs=1 skip=20 count=8​
MID:
dd if=/dev/block/bootdevice/by-name/mfg bs=1 skip=16384 count=16​

2. If the original data match your current value, then you can do the following step.
Set a lower version than your RUU which will be flashed.
printf 1.01.001.01 | dd conv=notrunc of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208​

or just clear it.
dd if=/dev/zero of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208 count=11​

Set your desired CID. (HTC__001 below)
printf HTC__001 | dd conv=notrunc of=/dev/block/bootdevice/by-name/board_info bs=1 seek=20​

Set your desired MID. (2PZC1000 below) Please note that each character is separated by \x00
printf "2\x00P\x00Z\x00C\x001\x000\x000\x000\x00" | dd conv=notrunc of=/dev/block/bootdevice/by-name/mfg bs=1 seek=16384​

3. Repeat commands in step 1 to check the result.
very good day.

I followed all the steps and I get error 14, if you change CID and MID but do not load the new RUU
 

chu32951

New member
Apr 11, 2013
4
4
23
Beijing
I have following the steps, and now my screen turn into black and only response with vibrate.
It cannot boot. What should i do now? Please help me. Im really appreciate for any help
Can you enter TWRP? Try modifying it back to the original value.

---------- Post added at 12:34 AM ---------- Previous post was at 12:22 AM ----------

very good day.

I followed all the steps and I get error 14, if you change CID and MID but do not load the new RUU
strange, these steps should be the same as AHMADHAFEZY‘s, just replacing the hex editor with printf.

BTW, I tested this steps with RR and TWRP, not stock ROM. I don't know if this will lead to different results.
 

tomitoek

Member
Jul 12, 2019
5
0
0
Can you enter TWRP? Try modifying it back to the original value.

---------- Post added at 12:34 AM ---------- Previous post was at 12:22 AM ----------



strange, these steps should be the same as AHMADHAFEZY‘s, just replacing the hex editor with printf.

BTW, I tested this steps with RR and TWRP, not stock ROM. I don't know if this will lead to different results.
No, it cant enter TWRP. The phone cant turn on, and it only vibrate when i push power button (also vol up+power button). Please help me ?
 

valvaher

Member
May 17, 2015
28
2
0
I have a htc u11 whl, I change CID and MID of Taiwan and change it, the problem is that when loading the RUU of Taiwan I get an error FAILED 14 android_info.txt missing or malformed
 
Last edited:

chu32951

New member
Apr 11, 2013
4
4
23
Beijing
I have a htc u11 whl, I change CID and MID of Taiwan and change it, the problem is that when loading the RUU of Taiwan I get an error FAILED 14 android_info.txt missing or malformed
Did you load RUU in ruu mode?
In download mode, run
htc_fastboot oem rebootRUU
to enter ruu mode.

---------- Post added at 05:31 AM ---------- Previous post was at 05:23 AM ----------

No, it cant enter TWRP. The phone cant turn on, and it only vibrate when i push power button (also vol up+power button). Please help me ?
Sorry, if you can't even enter the bootloader with vol up+power, I don't know how to fix it.

BTW, did you completely power off before entering BL?
 

tomitoek

Member
Jul 12, 2019
5
0
0
Did you load RUU in ruu mode?
In download mode, run
htc_fastboot oem rebootRUU
to enter ruu mode.

---------- Post added at 05:31 AM ---------- Previous post was at 05:23 AM ----------



Sorry, if you can't even enter the bootloader with vol up+power, I don't know how to fix it.

BTW, did you completely power off before entering BL?
Yes, i completely power off it.
 

zjjshxh

Member
Mar 10, 2019
9
0
0
Can this tutorial can use for a5dug? I am quiet enjoyable to my u11 US Unlocked but i am using an a5dug and i wanna change cid for more roms XP (HTC Desire 816 Dualsim)
 

Drago3110

Member
Oct 18, 2011
19
6
0
To change CID and MID, we only need modify three file: misc, board_info and mfg. sdxx are not needed, because
/dev/block/bootdevice/by-name/misc -> /dev/block/sde1
/dev/block/bootdevice/by-name/board_info -> /dev/block/sdf1
/dev/block/bootdevice/by-name/mfg -> /dev/block/sdf2

misc for Software Version
board_info for CID
mfg for MID

Steps with TWRP:
0. Connect the phone to the PC and reboot to TWRP

adb reboot recovery
adb shell​

you can also do the following steps with rooted android and busybox. In this way you need to add prefix "busybox " to dd

1. Check your original data
Software Version:
dd if=/dev/block/bootdevice/by-name/misc bs=1 skip=2208 count=11​
CID:
dd if=/dev/block/bootdevice/by-name/board_info bs=1 skip=20 count=8​
MID:
dd if=/dev/block/bootdevice/by-name/mfg bs=1 skip=16384 count=16​

2. If the original data match your current value, then you can do the following step.
Just in case, back up the original file

dd if=/dev/block/bootdevice/by-name/misc of=/external_sd/misc.img
dd if=/dev/block/bootdevice/by-name/board_info of=/external_sd/board_info.img
dd if=/dev/block/bootdevice/by-name/mfg of=/external_sd/mfg.img​

Set a lower version than your RUU which will be flashed.
printf 1.01.001.01 | dd conv=notrunc of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208​

or just clear it.
dd if=/dev/zero of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208 count=11​

Set your desired CID. (HTC__001 below)
printf HTC__001 | dd conv=notrunc of=/dev/block/bootdevice/by-name/board_info bs=1 seek=20​

Set your desired MID. (2PZC1000 below) Please note that each character is separated by \x00
printf "2\x00P\x00Z\x00C\x001\x000\x000\x000\x00" | dd conv=notrunc of=/dev/block/bootdevice/by-name/mfg bs=1 seek=16384​

3. Repeat commands in step 1 to check the result.


P.S.
If you got "dd: conv option disabled" in step 2, you need to download busybox to enable this feature.
download link
adb push ./busybox-armv8l /tmp/
adb shell "chmod 755 /tmp/busybox-armv8l;mv /tmp/busybox-armv8l /tmp/busybox"

then add prefix "/tmp/busybox " to all dd command.
Thank you for this easy way.

I decided to go completely to stock. But with my nandroid backup i was not able to get OTA Updates. And i don't know why, but i couldn't flash the updates manually.

Original CID was VODA102; MID 2PZC10000 and Software 2.33.161.11.
Bootloader is unlocked, too.

I changed my CID to CID HTC__034 (Europe) and used dd if=/dev/zero of=/dev/block/bootdevice/by-name/misc bs=1 seek=2208 count=11 to clear the version.

And no problems here. I flashed the RUU without problems and ow i get OTA-Updates and my Phone is unbranded :good::good:

Thank you very much!!!!!
 

phatoutpac

Member
Sep 6, 2011
23
3
23
34
Kuala Lumpur
Hi Devs,

I made the mistake of relocking my bootloader however I've another problem that is stopping me from restoring my phone thru RUU. Before my phone got locked, I was messing around with CID & MID using the adb shell command and screwed up my numbers - CID now reads HTC__001 (double underscore instead of HTC_001) and MID now reads 20P0Z0C030000000 (instead 2PZC3000)

Is there anything I can do? Is there any method to pull the sde/sdf file from bootloader without adb shell? Will sde/sdf from another HTC u11 help? I'm screwed or Will HTC service center will be able to fix this?

Any advice is much appreciated