[Q] How can change the Cid Number HTC__622 to HTC__J15 ??? - HTC Incredible S

Hello,
i need change cid number from HTC__622 to HTC__J15 ...
i follow the instructions applied for Sensation (with adb tools) in windows 7
My incredible s respond to the adb method but give me Error after last step as following:
Code:
Code:
C:\adb>fastboot oem writecid HTC__J15
...
[bootloader] [ERR] Command error !!!
OKAY [ -0.000s]
finished. total time: -0.000s
Any idea PLz???
HTC Incredible S 2.3.3
HBOOT 1.09.1000
AlphaRev S-offed & Rooted

UP
Sent from my HTC Incredible S using XDA Premium App

I am too uninformed to help you so all I can do is give a +1 to help your cause.
Your welcome.

itsbeertimenow said:
I am too uninformed to help you so all I can do is give a +1 to help your cause.
Your welcome.
Click to expand...
Click to collapse
Thank u

up
Sent from my HTC Incredible S using XDA Premium App

any ideas please ???

>>> up <<<

Stop doing that.

we cant do that at this time with the IS we dont have the same amount of access we do on sensation

Thanks..
Sent from my HTC Incredible S using XDA Premium App

See the list of available commands: fastboot oem h

thats all i get when i type in the command fastboot oem h
Code:
C:\adb>fastboot oem h
...
(bootloader) command list
(bootloader) keytest
(bootloader) heap
(bootloader) boot
(bootloader) reset
(bootloader) powerdown
(bootloader) rebootRUU
(bootloader) heap_test
(bootloader) rtask
(bootloader) task
(bootloader) enableqxdm
(bootloader) gencheckpt
(bootloader) list_partition_emmc
(bootloader) load_emmc
(bootloader) check_emmc
(bootloader) check_emmc_mid
(bootloader) read_mmc
(bootloader) get_wp_info_emmc
(bootloader) send_wp_info_emmc
(bootloader) get_ext_csd_emmc
(bootloader) get_sector_info_emmc
OKAY [ 0.031s]

UP
إرسلت من HTC Incredible S باستخدام برنامج XDA Premium App

1) execute:
Code:
dd if=/dev/block/mmcblk0p17 of=/sdcard/cid.img
2) edit cid.img with any hex editor (but don't use notepad or any other text editor)
3) write it back:
Code:
dd if=/sdcard/cid.img of=/dev/block/mmcblk0p17
4) reboot and check. your cid should now be changed.
It worked for me, but I'm not responsible if your device will become a brick (which is unlikely anyway)
Good luck.

NeverGone\RU said:
1) execute:
Code:
dd if=/dev/block/mmcblk0p17 of=/sdcard/cid.img
2) edit cid.img with any hex editor (but don't use notepad or any other text editor)
3) write it back:
Code:
dd if=/sdcard/cid.img of=/dev/block/mmcblk0p17
4) reboot and check. your cid should now be changed.
It worked for me, but I'm not responsible if your device will become a brick (which is unlikely anyway)
Good luck.
Click to expand...
Click to collapse
i try but i get
$ dd if=/dev/block/mmcblk0p17 of=/sdcard/cid.img
dd if=/dev/block/mmcblk0p17 of=/sdcard/cid.img
/dev/block/mmcblk0p17: cannot open for read: Permission denied

moustafatch said:
i try but i get
$ dd if=/dev/block/mmcblk0p17 of=/sdcard/cid.img
dd if=/dev/block/mmcblk0p17 of=/sdcard/cid.img
/dev/block/mmcblk0p17: cannot open for read: Permission denied
Click to expand...
Click to collapse
You need to have a rooted system and running the adb shell as Superuser to issue these commands.

it is temporary or not?
thanks

goki1 said:
it is temporary or not?
thanks
Click to expand...
Click to collapse
On a properly rooted system this would make a permanent change.

I have read about this method causing a USB brick in some cases on other models. Would be interested if anyone has similar issues.
Edit: if you're going to change the Cid might as well supercid it (11111111).

Related

Bootloader and S-OFF

Just a question, can anybody execute this on an XL with unlocked bootloader using HTCDev and tell me the output please?
Code:
fastboot oem h
cause I was wondering, if we can execute this to get S-OFF as the bootloader is unlocked so it may give us more permissions?:
Code:
fastboot oem writesecureflag 0
Just wondering if it asks for SMART_IO.CRD or not
Any idea guys?
About htc sensation xl s-off
hi there if you could write set on teminal app see what is writen ?
turkish0852 said:
hi there if you could write set on teminal app see what is writen ?
Click to expand...
Click to collapse
I don't understand what you mean, can you please say it in a clearer way?
thank you
about s-off sensation xl
sorry about that,there's that app called termanel emulater in the market,I was messing around with it, I wrote ( set ) & it showed lots of data, wich I asked what it realy ment if anything,my phone is HTC sensation xl with beats audio permanetly rooted ,bootloader unlocked, s-on,sorry for sbelling.
---------- Post added at 01:04 AM ---------- Previous post was at 12:53 AM ----------
hope it's something worth looking into,type ( set ) then enter,
turkish0852 said:
sorry about that,there's that app called termanel emulater in the market,I was messing around with it, I wrote ( set ) & it showed lots of data, wich I asked what it realy ment if anything,my phone is HTC sensation xl with beats audio permanetly rooted ,bootloader unlocked, s-on,sorry for sbelling.
---------- Post added at 01:04 AM ---------- Previous post was at 12:53 AM ----------
hope it's something worth looking into,type ( set ) then enter,
Click to expand...
Click to collapse
maybe this can help
Code:
ort PATH=/data/local/bin:$PATH
$ su
# set
ANDROID_ASSETS=/system/app
ANDROID_BOOTLOGO=1
ANDROID_DATA=/data
ANDROID_PROPERTY_WORKSPACE=9,65536
ANDROID_ROOT=/system
ANDROID_SOCKET_zygote=10
ASEC_MOUNTPOINT=/mnt/asec
BOOTCLASSPATH=/system/framework/core.jar:/system/framework/bouncycastle.jar:/system/framework/ext.jar:/system/framework/framework.jar:/system/framework/android.policy.jar:/system/framework/services.jar:/system/framework/core-junit.jar:/system/framework/HTCDev.jar:/system/framework/HTCExtension.jar:/system/framework/com.htc.framework.jar:/system/framework/com.scalado.util.ScaladoUtil.jar:/system/framework/com.orange.authentication.simcard.jar:/system/framework/android.supl.jar:/system/framework/com.ecrio.sip.jar
EXTERNAL_STORAGE=/mnt/sdcard
IFS='
'
LD_LIBRARY_PATH=/vendor/lib:/system/lib
LOOP_MOUNTPOINT=/mnt/obb
OPTIND=1
PATH=/data/local/bin:/sbin:/vendor/bin:/system/sbin:/system/bin:/system/xbin
PS1='# '
PS2='> '
PS4='+ '
TERM=screen
#
turkish0852 said:
sorry about that,there's that app called termanel emulater in the market,I was messing around with it, I wrote ( set ) & it showed lots of data, wich I asked what it realy ment if anything,my phone is HTC sensation xl with beats audio permanetly rooted ,bootloader unlocked, s-on,sorry for sbelling.
---------- Post added at 01:04 AM ---------- Previous post was at 12:53 AM ----------
hope it's something worth looking into,type ( set ) then enter,
Click to expand...
Click to collapse
nicky1980 said:
maybe this can help
Code:
ort PATH=/data/local/bin:$PATH
$ su
# set
ANDROID_ASSETS=/system/app
ANDROID_BOOTLOGO=1
ANDROID_DATA=/data
ANDROID_PROPERTY_WORKSPACE=9,65536
ANDROID_ROOT=/system
ANDROID_SOCKET_zygote=10
ASEC_MOUNTPOINT=/mnt/asec
BOOTCLASSPATH=/system/framework/core.jar:/system/framework/bouncycastle.jar:/system/framework/ext.jar:/system/framework/framework.jar:/system/framework/android.policy.jar:/system/framework/services.jar:/system/framework/core-junit.jar:/system/framework/HTCDev.jar:/system/framework/HTCExtension.jar:/system/framework/com.htc.framework.jar:/system/framework/com.scalado.util.ScaladoUtil.jar:/system/framework/com.orange.authentication.simcard.jar:/system/framework/android.supl.jar:/system/framework/com.ecrio.sip.jar
EXTERNAL_STORAGE=/mnt/sdcard
IFS='
'
LD_LIBRARY_PATH=/vendor/lib:/system/lib
LOOP_MOUNTPOINT=/mnt/obb
OPTIND=1
PATH=/data/local/bin:/sbin:/vendor/bin:/system/sbin:/system/bin:/system/xbin
PS1='# '
PS2='> '
PS4='+ '
TERM=screen
#
Click to expand...
Click to collapse
thanks a lot guys! but unfortunately that's nt what I needed
I wanted to know if executing the command in the first post from your SDK tools will get you S-OFF or not with unlocked bootloader!
bootloader and s-off
hi there again,i exacuted those commands in the first posts the outcome is as follows;
fastboot oem h
...
(bootloader) command list
(bootloader) get_identifier_token
(bootloader) keytest
(bootloader) heap
(bootloader) boot
(bootloader) reset
(bootloader) powerdown
(bootloader) rebootRUU
(bootloader) heap_test
(bootloader) gotohboot
(bootloader) rtask
(bootloader) task
(bootloader) enableqxdm
(bootloader) gencheckpt
(bootloadre) lock
(bootloader) list_partition_emmc
(bootloader) load_emmc
(bootloader) check_emmc
(bootloader) check_emmc_mid
(bootloader) read_mmc
(bootloader) get_wp_info_emmc
(bootloader) send_wp_info_emmc
(bootloader) get_ext_csd_emmc
(bootloader) get_sector_info_emmc
OKAY [ 0.031s]
finished. total time: 0.031s
fastboot oem writesecureflag 0
...
(bootloader) [ERR] Command error !!!
OKAY [ -0.000s]
finished. total time: -0.000s
hope this helps..
bootloader s-off
so any more idea's there,did that help in anyway?
turkish0852 said:
so any more idea's there,did that help in anyway?
Click to expand...
Click to collapse
I'm thinking of something, I dunno
turkish0852 said:
hi there again,i exacuted those commands in the first posts the outcome is as follows;
fastboot oem h
...
(bootloader) command list
(bootloader) get_identifier_token
(bootloader) keytest
(bootloader) heap
(bootloader) boot
(bootloader) reset
(bootloader) powerdown
(bootloader) rebootRUU
(bootloader) heap_test
(bootloader) gotohboot
(bootloader) rtask
(bootloader) task
(bootloader) enableqxdm
(bootloader) gencheckpt
(bootloadre) lock
(bootloader) list_partition_emmc
(bootloader) load_emmc
(bootloader) check_emmc
(bootloader) check_emmc_mid
(bootloader) read_mmc
(bootloader) get_wp_info_emmc
(bootloader) send_wp_info_emmc
(bootloader) get_ext_csd_emmc
(bootloader) get_sector_info_emmc
OKAY [ 0.031s]
finished. total time: 0.031s
fastboot oem writesecureflag 0
...
(bootloader) [ERR] Command error !!!
OKAY [ -0.000s]
finished. total time: -0.000s
hope this helps..
Click to expand...
Click to collapse
thanks a lot, HTC has limited the oem commands on their bootloader :/
can you try this please?
fastboot oem rebootRUU
fastboot oem h
fastboot oem writesecureflag 0
to restart your phone:
fastboot reboot
and copy and paste me the output, thank you
C:\Users\Turkish>fastboot oem rebootRUU
...
(bootloader) erase sector 163328 ~ 163839 (512)
OKAY [ 0.484s]
finished. total time: 0.484s
C:\Users\Turkish>fastboot oem h
...
(bootloader) command list
(bootloader) get_identifier_token
(bootloader) keytest
(bootloader) heap
(bootloader) boot
(bootloader) reset
(bootloader) powerdown
(bootloader) rebootRUU
(bootloader) heap_test
(bootloader) gotohboot
(bootloader) rtask
(bootloader) task
(bootloader) enableqxdm
(bootloader) gencheckpt
(bootloader) lock
(bootloader) list_partition_emmc
(bootloader) load_emmc
(bootloader) check_emmc
(bootloader) check_emmc_mid
(bootloader) read_mmc
(bootloader) get_wp_info_emmc
(bootloader) send_wp_info_emmc
(bootloader) get_ext_csd_emmc
(bootloader) get_sector_info_emmc
OKAY [ 0.031s]
finished. total time: 0.031s
C:\Users\Turkish>fastboot writesecureflag 0
usage: fastboot [ <option> ] <command>
commands:
update <filename> reflash device from update.zip
flashall flash boot + recovery + system
flash <partition> [ <filename> ] write a file to a flash partition
erase <partition> erase a flash partition
getvar <variable> display a bootloader variable
boot <kernel> [ <ramdisk> ] download and boot kernel
flash:raw boot <kernel> [ <ramdisk> ] create bootimage and flash it
devices list all connected devices
continue continue with autoboot
reboot reboot device normally
reboot-bootloader reboot device into bootloader
help show this help message
options:
-w erase userdata and cache
-s <serial number> specify device serial number
-p <product> specify product name
-c <cmdline> override kernel commandline
-i <vendor id> specify a custom USB vendor id
-b <base_addr> specify a custom kernel base address
-n <page size> specify the nand page size. default:
2048
C:\Users\Turkish>fastboot reboot
rebooting...
finished. total time: 0.312s
hope this helps,if anything else please let me know...
turkish0852 said:
C:\Users\Turkish>fastboot oem rebootRUU
...
(bootloader) erase sector 163328 ~ 163839 (512)
OKAY [ 0.484s]
finished. total time: 0.484s
C:\Users\Turkish>fastboot oem h
...
(bootloader) command list
(bootloader) get_identifier_token
(bootloader) keytest
(bootloader) heap
(bootloader) boot
(bootloader) reset
(bootloader) powerdown
(bootloader) rebootRUU
(bootloader) heap_test
(bootloader) gotohboot
(bootloader) rtask
(bootloader) task
(bootloader) enableqxdm
(bootloader) gencheckpt
(bootloader) lock
(bootloader) list_partition_emmc
(bootloader) load_emmc
(bootloader) check_emmc
(bootloader) check_emmc_mid
(bootloader) read_mmc
(bootloader) get_wp_info_emmc
(bootloader) send_wp_info_emmc
(bootloader) get_ext_csd_emmc
(bootloader) get_sector_info_emmc
OKAY [ 0.031s]
finished. total time: 0.031s
C:\Users\Turkish>fastboot writesecureflag 0
usage: fastboot [ <option> ] <command>
commands:
update <filename> reflash device from update.zip
flashall flash boot + recovery + system
flash <partition> [ <filename> ] write a file to a flash partition
erase <partition> erase a flash partition
getvar <variable> display a bootloader variable
boot <kernel> [ <ramdisk> ] download and boot kernel
flash:raw boot <kernel> [ <ramdisk> ] create bootimage and flash it
devices list all connected devices
continue continue with autoboot
reboot reboot device normally
reboot-bootloader reboot device into bootloader
help show this help message
options:
-w erase userdata and cache
-s <serial number> specify device serial number
-p <product> specify product name
-c <cmdline> override kernel commandline
-i <vendor id> specify a custom USB vendor id
-b <base_addr> specify a custom kernel base address
-n <page size> specify the nand page size. default:
2048
C:\Users\Turkish>fastboot reboot
rebooting...
finished. total time: 0.312s
hope this helps,if anything else please let me know...
Click to expand...
Click to collapse
Thank You!
Seems like there is no real way of gaining S-OFF using oem..
I'll get an XL in several days and will see if I can do anything (but I don't really think I'll be able to anyway)!
We'll need to find a signed Engineering hboot that can be flashed to gain S-OFF after that!
Doesn't seem fair from HTC anyway.. They should unlock and S-OFF too in their unlocking process..
it was supposed to be "fastboot oem writesecureflag 0" I wrote it wrong, but anyway, as writesecureflag isn't accessible using oem, so it's useless to try it.
If anybody has any other idea, please share
bootloader and s-off
i exacuted the wright command again "fastboot oem secuerflag 0" but it gave me that same error "bootloader err Command error !!! "
But when i exacuted command " fastboot oem rebootRUU " the sensation xl screen whent black with black and white HTC letters in the midle of the screen,haven't seen that before...
I have XL with bootloader S-Off....tell me please, what I can do, to let you see, what the difference is
bootloader and s-off
icecream 4.0.1 has just been realeased for the sensation xe 1.0 beta version,i'd like to see this rom on the xl,iv had devices with bootloader s-off its bloody fantastic ,all htc's should come with bootloader s-off its a shame,i sapouse it's a waiting game,im shore great minds a working on it, I don't know if the sensation xl came with bootloader s-off in Australia......
jammysunny said:
I have XL with bootloader S-Off....tell me please, what I can do, to let you see, what the difference is
Click to expand...
Click to collapse
Ship s-off or Eng s-off?
ship s-off.....
turkish0852 said:
i exacuted the wright command again "fastboot oem secuerflag 0" but it gave me that same error "bootloader err Command error !!! "
But when i exacuted command " fastboot oem rebootRUU " the sensation xl screen whent black with black and white HTC letters in the midle of the screen,haven't seen that before...
Click to expand...
Click to collapse
yea, it wont work I know!
Its totally normal abt the rebootRUU thing, it just puts the phone in a state that accepts the flashing of any signed (or unsigned I think) images and many other things we may not know! Haha
jammysunny said:
ship s-off.....
Click to expand...
Click to collapse
interesting! may I ask how did you get it?
Would be good to acheive s-off but unlocked bootloader isnt half bad. We have permanent root and at least one custom rom so guess things will get up to speed as more people get the device. Alpha rev should do their thing soon so we can get full control over this device
Sent from my EPAD using xda premium
I got it with it....so, where you can see the difference between a normal and a ship s-offed Bootloader??
tapatraced with Sensation XL
pull the battery and then boot into hboot.Volume down and power.
eng hboot with S-off is hboot version 1.25.2003.

[DEV] S-OFF (wirte permission to NAND)

i started, this in the dev section, to have a CLEAN THREAD, with ONLY RELEVANT info.
if mod gives me permission i will clean this thread several times each day (if someone posts nonsense)
FOR DEVS ONLY! theres alot of other threads about this for Q&A etc..
thanks to orb3000 for making it a stickie..
reserved for later
What we got so far:
fastboot oem h
...
(bootloader) command list
(bootloader) get_identifier_token
(bootloader) keytest
(bootloader) heap
(bootloader) boot
(bootloader) reset
(bootloader) powerdown
(bootloader) rebootRUU
(bootloader) heap_test
(bootloader) gotohboot
(bootloader) rtask
(bootloader) task
(bootloader) enableqxdm
(bootloader) gencheckpt
(bootloadre) lock
(bootloader) list_partition_emmc
(bootloader) load_emmc
(bootloader) check_emmc
(bootloader) check_emmc_mid
(bootloader) read_mmc
(bootloader) get_wp_info_emmc
(bootloader) send_wp_info_emmc
(bootloader) get_ext_csd_emmc
(bootloader) get_sector_info_emmc
OKAY [ 0.031s]
finished. total time: 0.031s
fastboot oem writesecureflag 0
...
(bootloader) [ERR] Command error !!!
OKAY [ -0.000s]
finished. total time: -0.000s
Click to expand...
Click to collapse
C:\Users\Turkish>fastboot oem rebootRUU
...
(bootloader) erase sector 163328 ~ 163839 (512)
OKAY [ 0.484s]
finished. total time: 0.484s
C:\Users\Turkish>fastboot oem h
...
(bootloader) command list
(bootloader) get_identifier_token
(bootloader) keytest
(bootloader) heap
(bootloader) boot
(bootloader) reset
(bootloader) powerdown
(bootloader) rebootRUU
(bootloader) heap_test
(bootloader) gotohboot
(bootloader) rtask
(bootloader) task
(bootloader) enableqxdm
(bootloader) gencheckpt
(bootloader) lock
(bootloader) list_partition_emmc
(bootloader) load_emmc
(bootloader) check_emmc
(bootloader) check_emmc_mid
(bootloader) read_mmc
(bootloader) get_wp_info_emmc
(bootloader) send_wp_info_emmc
(bootloader) get_ext_csd_emmc
(bootloader) get_sector_info_emmc
OKAY [ 0.031s]
finished. total time: 0.031s
C:\Users\Turkish>fastboot writesecureflag 0
usage: fastboot [ <option> ] <command>
commands:
update <filename> reflash device from update.zip
flashall flash boot + recovery + system
flash <partition> [ <filename> ] write a file to a flash partition
erase <partition> erase a flash partition
getvar <variable> display a bootloader variable
boot <kernel> [ <ramdisk> ] download and boot kernel
flash:raw boot <kernel> [ <ramdisk> ] create bootimage and flash it
devices list all connected devices
continue continue with autoboot
reboot reboot device normally
reboot-bootloader reboot device into bootloader
help show this help message
options:
-w erase userdata and cache
-s <serial number> specify device serial number
-p <product> specify product name
-c <cmdline> override kernel commandline
-i <vendor id> specify a custom USB vendor id
-b <base_addr> specify a custom kernel base address
-n <page size> specify the nand page size. default:
2048
C:\Users\Turkish>fastboot reboot
rebooting...
finished. total time: 0.312s
Click to expand...
Click to collapse
We have tested to do these commands on the s-offed device of jammysunny.
cd/
cd SDK
cd platform-tools
adb devices
adb shell
su
dd if=/dev/block/mmcblk0p18 of=/sdcard/backup.img
This worked successfully and we got an hboot.img file of his Device on the SD.
On the next step i tried to install his s-off hboot.img to my s-on device with the following commands:
cd/
cd SDK
cd platform-tools
adb devices
adb shell
su
dd if=/sdcard/hboot.img of=/dev/block/mmcblk0p18
This worked successfully too, but my bootloader is the same as before. Its s-on
Click to expand...
Click to collapse
hboot is useless from S-off device, as our bootloaders are unlocked.
What needs to be done is: get rid of Nand write protection, so we can flash radio's
Click to expand...
Click to collapse
Stickied, thanks!
waiting boot.img s-off
Im pretty sure s-off invokves the security flag on hboot not the boot.img
Sent from my HTC Sensation XL with Beats Audio X315b using XDA
Hi booyaga,
where I can find the s-off hboot.img file ?
thanks.
bye
Would love to see s-off lol
not sure if this can help...but my desire was s-off using alpharev
http://alpharev.nl/
maybe they can give some info ...?!?
with kind regards
It would be great to get alpharev on board. Seems everyone is neglecting our xl lol.
Sent from my GT-N7000 using xda premium
shingers5 said:
It would be great to get alpharev on board. Seems everyone is neglecting our xl lol.
Sent from my GT-N7000 using xda premium
Click to expand...
Click to collapse
yep...if they dont want or do it (if we ask) maybe we can give a bit support...real s-off is nice...
Alex-V said:
yep...if they dont want or do it (if we ask) maybe we can give a bit support...real s-off is nice...
Click to expand...
Click to collapse
Willing to donate if needs be.
Sent from my GT-N7000 using xda premium
shingers5 said:
Willing to donate if needs be.
Sent from my GT-N7000 using xda premium
Click to expand...
Click to collapse
i also
with kind regards
Setting up a S-OFF donation thread to see who wants to donate and how much, might trigger there interest.
This is been seen on many dev treads, and can run up to few hundrerd euros
DutchDanny said:
Setting up a S-OFF donation thread to see who wants to donate and how much, might trigger there interest.
This is been seen on many dev treads, and can run up to few hundrerd euros
Click to expand...
Click to collapse
yea but not many devs even looking at xl and dont wanna line someones pocket who doesnt deliver!
shingers5 said:
yea but not many devs even looking at xl and dont wanna line someones pocket who doesnt deliver!
Click to expand...
Click to collapse
Guide them to the thread, and money will only be deliverd when s-off is deleverd
iḿ for that what DutchDanny says...and want give 20€ for s-off...who go with me...???!!!!!!!???!!
with kind regards
Alex-V said:
iḿ for that what DutchDanny says...and want give 20€ for s-off...who go with me...???!!!!!!!???!!
with kind regards
Click to expand...
Click to collapse
im in, with 10
DutchDanny said:
Guide them to the thread, and money will only be deliverd when s-off is deleverd
Click to expand...
Click to collapse
cool I shall donate soon as with 20 when needs be
Sent from my GT-N7000 using xda premium
30
Just because I want to learn more on this device and it will make life much easier!
Nice to See Some ideas, but Please make a bounty thread as its not really related to Development progress.
Sent from my HTC Sensation XL with Beats Audio X315e using xda premium

Don't care about this thread , please close it !

This thread was something , now it is not so please close it !
Ohh , Just found out that I built a universal tutorial i will add it to General android hacking and stuff
Reserved !
seaskyways said:
Ohh , Just found out that I built a universal tutorial i will add it to General android hacking and stuff
Click to expand...
Click to collapse
Theres already a tool out that does this for you :lol
Sent from my HTC Sensation XL with Beats Audio X315e using Tapatalk 2
That tool created by simon , it is only for the MTD based devices , where as this is for the eMMC based devices !
just tried the commands 4a & 4b, dont see anything mentioning mmcblk:
C:\Users\Shami\nb>fastboot oem listpartitions
...
(bootloader) [ERR] Command error !!!
OKAY [ 0.000s]
finished. total time: 0.000s
C:\Users\Shami\nb>fastboot oem boot
...
(bootloader) setup_tag addr=0xC0000100 cmdline add=0x8D0C4094
(bootloader) TAG:Ramdisk OK
(bootloader) TAG:smi ok, size = 0
(bootloader) TAG:hwid 0x0
(bootloader) TAG:skuid 0x2DD01
(bootloader) TAG:hero panel = 0x89003A
(bootloader) TAG:engineerid = 0x1
(bootloader) MCP dual-die
(bootloader) MCP dual-die
(bootloader) TAG:mono-die = 0x0
(bootloader) TAG: PS ID = 0x0
(bootloader) Device CID is not super CID
(bootloader) CID is super CID
(bootloader) Backup CID is HTC__001
(bootloader) setting->cid::HTC__001
(bootloader) serial number: HT1BVVZ03075
(bootloader) commandline from head: no_console_suspend=1
(bootloader) command line length =634
(bootloader) active commandline: board_runnymede.disable_uart2=0 board_ru
(bootloader) nnymede.usb_h2w_sw=0 board_runnymede.disable_sdcard=0 diag.e
(bootloader) nabled=0 board_runnymede.debug_uart=0 smisize=0 userdata_sel
(bootloader) =0 androidboot.emmc=true androidboot.pagesize=4096 skuid=0 d
(bootloader) dt=20 androidboot.lb=1 androidboot.baseband=3822.10.10.12_M
(bootloader) androidboot.cid=HTC__001 androidboot.devicerev=2 androidboo
(bootloader) t.batt_poweron=good_battery androidboot.carrier=HTC-WWE andr
(bootloader) oidboot.mid=PI3920000 androidboot.keycaps=qwerty androidboot
(bootloader) .dq=PASS androidboot.mode=normal androidboot.serialno=HT1BVV
(bootloader) Z03075 androidboot.bootloader=1.25.0004 androidboot.nledhw=0
(bootloader) zygote_oneshot=off kmemleak=off no_console_suspend=1
(bootloader) aARM_Partion[0].name=misc
(bootloader) aARM_Partion[1].name=recovery
(bootloader) aARM_Partion[2].name=boot
(bootloader) aARM_Partion[3].name=system
(bootloader) aARM_Partion[4].name=cache
(bootloader) aARM_Partion[5].name=userdata
(bootloader) aARM_Partion[6].name=devlog
(bootloader) aARM_Partion[7].name=pdata
(bootloader) aARM_Partion[8].name=modem_st1
(bootloader) aARM_Partion[9].name=modem_st2
(bootloader) partition number=10
(bootloader) Valid partition num=10
(bootloader) jump_to_kernel: machine_id(3597), tags_addr(0x14400100), ker
(bootloader) nel_addr(0x14408000)
(bootloader) -------------------hboot boot time:22891 msec
FAILED (status read failed (Too many links))
finished. total time: 10.920s
C:\Users\Shami\nb>
http://forum.xda-developers.com/showthread.php?t=1619986
edit:
Well, I've got some comments on that..
For whom is interested of knowing the OEM commands, in fastboot write "fastboot oem h".
"adb pull /dev/block/"""mmcblock123""" misc.img" won't work as this is a partition, not a folder.
I suggest using this:
Code:
adb shell
su
dd if=/dev/block/mmcblk0p17 of=/sdcard/misc.img
exit
exit
adb pull /sdcard/misc.img misc.img
adb shell rm /sdcard/misc.img
Well, basically, my bootloader is locked, but for some reason, I have "HTCUUpdate", so it's kinda strange.
It would be great if anybody could post his misc.img of his unlocked bootloader so I can compare and tell what's wrong.
Cheers!
Thanks claudenegm ! will add the code !
I doubt if this works, the unlock_status flag is stored in radio NVRAM and what is stored in misc partition is for RUUs to check it.
Since I don't have a locked device, I can't test it but what claudenegm said kinda confirms this.
EDIT
I can confirm patching the misc partition doesn't have any effects on unlock status.
Hi.....seaskyways i am follow the step by step to done it extract misc.img from my htc sensation xl...but i can't get the part,
'9- Around the 10th line you will find at the right HTC.......... , now edit this and type after the C :
U , so that it is HTCU....... , for Unlocking the bootloader .
R , so that it is HTCR....... , for ReLocking the bootloader .
. , that it is HTC....... , for reversing the bootloader to original state ***LOCKED OOW***"
HTCxxxxx.......it is HTC_044,behind HTCU_044?
Sorry that my poor english hope you understand what i ask and thanks for reply ^^
kenny_chai_2071 said:
Hi.....seaskyways i am follow the step by step to done it extract misc.img from my htc sensation xl...but i can't get the part,
'9- Around the 10th line you will find at the right HTC.......... , now edit this and type after the C :
U , so that it is HTCU....... , for Unlocking the bootloader .
R , so that it is HTCR....... , for ReLocking the bootloader .
. , that it is HTC....... , for reversing the bootloader to original state ***LOCKED OOW***"
HTCxxxxx.......it is HTC_044,behind HTCU_044?
Sorry that my poor english hope you understand what i ask and thanks for reply ^^
Click to expand...
Click to collapse
First of all, this method ain't gonna work since the locked flag is stored in Radio NVRAM and what is stored in misc partition is for RUUs.
Second, "OOW" in "LOCKED OOW" means "Out Of Warranty"!
Oh i.c thanks fardjad , it mean it is still need to using Htc Dev to unlocking bootloader for done all?
kenny_chai_2071 said:
Oh i.c thanks fardjad , it mean it is still need to using Htc Dev to unlocking bootloader for done all?
Click to expand...
Click to collapse
If you need warranty, you shouldn't unlock your bootloader at all.
You can also S-OFF your device by flashing unlimited.io HBOOTs. For doing so, you only need to temp-root your device.
There is also a detailed guide in Sensation XL General Section that might help.
Thanks fardjab i am get my devices s-off with every thing.
fardjad said:
First of all, this method ain't gonna work since the locked flag is stored in Radio NVRAM and what is stored in misc partition is for RUUs.
Second, "OOW" in "LOCKED OOW" means "Out Of Warranty"!
Click to expand...
Click to collapse
It worked for me on my previous Wildfire S , all I did is take mtd0 as misc.img , edit it , flash it with flash_image , all done , i have my bootloader Unlocked without HTC ! Anyways it misses alot , I will just delete it ...
seaskyways said:
It worked for me on my previous Wildfire S , all I did is take mtd0 as misc.img , edit it , flash it with flash_image , all done , i have my bootloader Unlocked without HTC ! Anyways it misses alot , I will just delete it ...
Click to expand...
Click to collapse
I didn't mean to offense or anything , just wanted to report that it's not working on SXL and tried to explain why.
I my self really like to try and discuss these things...
And if I were you I'd rather not to delete it. It may be useful for many people in many ways...

[Q] Please Help, Broke my HTC One

So yesterday i bought myself a new HTC ONE phone from Egypt, the original owner used it for just 48 hours then sold it. When i received it i found the SuperUser installed and the OTA updates were not installing sin11ce the phone has been modified.
I followed a tutorial on XDA about getting back to stock rom and after flashing custom recovery and moving the stock rom to SD card i flashed it from recovery and it failed in the process.
Now the phone just boots into recovery, can anyone please post me a quick tutorial on getting the stock firmware back? i would really appreciate it.
Here is the info from the recovery:
*** UNLOCKED ***
M7_U PVT SHIP S-OFF RH
CID- 11111111
HBOOT- 1.54.0000
RADIO- 4A.21.3263.04
OpenDSP- v31.120.274.0617
OS- 2.24.401.9
eMMC-boot 2048MB
AUG 9 2013, 16:20:20.0
hello 1.....relock bootloader with htcdev from google
2.....download this ruu and run it from fastboot http://www.htc1guru.com/dld/ruu-zip...1-27_10-31-1131-05_release_310878_signed-zip/ sorry i fixed the link
3..change cid to 0_32 as bellow
now let's change CID so we can run the RUU.EXE for your ModelID: PN0712000
in bootloader/FASTBOOT USB, change your CID:
Code:
C:\ADB3>fastboot oem writecid CWS__0_32 <-- two underscores
...
(bootloader) Start Verify: 0
OKAY [ 0.023s]
finished. total time: 0.023s
C:\ADB3>fastboot reboot-bootloader
rebooting into bootloader...
OKAY [ 0.041s]
finished. total time: 0.041s
then take all the avalible updates
good guid here http://forum.xda-developers.com/showthread.php?t=2541082
bygrave said:
hello 1.....relock bootloader with htcdev from google
2.....download this ruu and run it from fastboot http://www.htc1guru.com/dld/ruu-zip...1-27_10-31-1131-05_release_310878_signed-zip/ sorry i fixed the link
3..change cid to 0_32 as bellow
now let's change CID so we can run the RUU.EXE for your ModelID: PN0712000
in bootloader/FASTBOOT USB, change your CID:
Code:
C:\ADB3>fastboot oem writecid CWS__0_32 <-- two underscores
...
(bootloader) Start Verify: 0
OKAY [ 0.023s]
finished. total time: 0.023s
C:\ADB3>fastboot reboot-bootloader
rebooting into bootloader...
OKAY [ 0.041s]
finished. total time: 0.041s
then take all the avalible updates
good guid here http://forum.xda-developers.com/showthread.php?t=2541082
Click to expand...
Click to collapse
Thanks a lot for your reply. I am downloading the RUU now and till it finishes i have a quick question. Why should i change the CID to (0_32) instead of (11111111)?
Thanks again.
because you cant update with cid 11111111
once you have updated you can change it bk to 11111111 if you like:
---------- Post added at 05:25 PM ---------- Previous post was at 05:21 PM ----------
bygrave said:
because you cant update with cid 11111111
once you have updated you can change it bk to 11111111 if you like:
Click to expand...
Click to collapse
also write cid like this fastboot oem writecid HTC__032
capital HTC, two underscores, then 032
bygrave said:
because you cant update with cid 11111111
once you have updated you can change it bk to 11111111 if you like:
---------- Post added at 05:25 PM ---------- Previous post was at 05:21 PM ----------
also write cid like this fastboot oem writecid HTC__032
capital HTC, two underscores, then 032
Click to expand...
Click to collapse
Thanks a lot, now i get it.
One last question, should i change the CID before running the RUU or after running it?
yes it needs to be changed before u run the ruu. i always run the ruu from in fastboot mode
Sent from my HTC One using Tapatalk
let us know how u got on
Sent from my HTC One using Tapatalk
bygrave said:
let us know how u got on
Sent from my HTC One using Tapatalk
Click to expand...
Click to collapse
Unfortunately although i changed the CID but the RUU failed with an error that the RUU doesn't match my phone model number. :crying:
fastboot getvart all
and give us the results.
u did relock you're bootloader didn't u
Sent from my HTC One using Tapatalk
C:\mini-sdk>fastboot getvart all
usage: fastboot [ <option> ] <command>
commands:
update <filename> reflash device from update.zip
flashall flash boot + recovery + system
flash <partition> [ <filename> ] write a file to a flash partition
erase <partition> erase a flash partition
format <partition> format a flash partition
getvar <variable> display a bootloader variable
boot <kernel> [ <ramdisk> ] download and boot kernel
flash:raw boot <kernel> [ <ramdisk> ] create bootimage and flash it
devices list all connected devices
continue continue with autoboot
reboot reboot device normally
reboot-bootloader reboot device into bootloader
help show this help message
options:
-w erase userdata and cache (and format
if supported by partition type)
-u do not first erase partition before
formatting
-s <specific device> specify device serial number
or path to device port
-l with "devices", lists device paths
-p <product> specify product name
-c <cmdline> override kernel commandline
-i <vendor id> specify a custom USB vendor id
-b <base_addr> specify a custom kernel base address.
default: 0x10000000
-n <page size> specify the nand page size. default:
2048
-S <size>[K|M|G] automatically sparse files greater th
an
DArkSm4sh said:
C:\mini-sdk>fastboot getvart all
usage: fastboot [ <option> ] <command>
commands:
update <filename> reflash device from update.zip
flashall flash boot + recovery + system
flash <partition> [ <filename> ] write a file to a flash partition
erase <partition> erase a flash partition
format <partition> format a flash partition
getvar <variable> display a bootloader variable
boot <kernel> [ <ramdisk> ] download and boot kernel
flash:raw boot <kernel> [ <ramdisk> ] create bootimage and flash it
devices list all connected devices
continue continue with autoboot
reboot reboot device normally
reboot-bootloader reboot device into bootloader
help show this help message
options:
-w erase userdata and cache (and format
if supported by partition type)
-u do not first erase partition before
formatting
-s <specific device> specify device serial number
or path to device port
-l with "devices", lists device paths
-p <product> specify product name
-c <cmdline> override kernel commandline
-i <vendor id> specify a custom USB vendor id
-b <base_addr> specify a custom kernel base address.
default: 0x10000000
-n <page size> specify the nand page size. default:
2048
-S <size>[K|M|G] automatically sparse files greater th
an
Click to expand...
Click to collapse
fastboot getvar all
NOT getvarT
Remove your imei and serial number
sorry its fastboot getvar all
Sent from my HTC One using Tapatalk
bygrave said:
sorry its fastboot getvar all
Sent from my HTC One using Tapatalk
Click to expand...
Click to collapse
The bootloader is still unlocked, should i relock it first?
C:\mini-sdk>fastboot getvar all
(bootloader) version: 0.5
(bootloader) version-bootloader: 1.44.0000
(bootloader) version-baseband: 4A.21.3263.04
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main: 1.29.401.12
(bootloader) version-misc: PVT SHIP S-OFF
(bootloader) serialno:
(bootloader) imei:
(bootloader) meid: 00000000000000
(bootloader) product: m7_u
(bootloader) platform: HBOOT-8064
(bootloader) modelid: PN0711000
(bootloader) cidnum: HTC__032
(bootloader) battery-status: good
(bootloader) battery-voltage: 4324mV
(bootloader) partition-layout: Generic
(bootloader) security: off
(bootloader) build-mode: SHIP
(bootloader) boot-mode: FASTBOOT
getvar:all FAILED (status read failed (Too many links))
finished. total time: 0.063s
yes needs to be locked for it to work
---------- Post added at 11:21 PM ---------- Previous post was at 11:14 PM ----------
just looking for a ruu u are in tawian is that write
did you get this sorted

New to forum - Help Required

I got a HTC phone from a friend and I do not know how to find out the model. Also it does not have an OS on it and I am looking to find out how to install one. I read a few of the threads and could not figure out what the terms meant. Such as OTG, RUU,ADB, TWRP, ETC. So I am not able to follow. Please assist me if you can.
You say it doesn't have an OS on it, so it's basically a blank device that you need to install an OS on.
Th easiest way for us to identify it would be for you to take a photo of it and post it here for us to look at. Once we know what model of HTC you have, we can easily help you get Android back on there.
Or if you can find it on the HTC website, that would help. Or even Google somewhere.
the_scotsman said:
You say it doesn't have an OS on it, so it's basically a blank device that you need to install an OS on.
Th easiest way for us to identify it would be for you to take a photo of it and post it here for us to look at. Once we know what model of HTC you have, we can easily help you get Android back on there.
Or if you can find it on the HTC website, that would help. Or even Google somewhere.
Click to expand...
Click to collapse
I found that it is an HTC One M7.
Ah in that case, take a look in our HTC One M7 forums: https://forum.xda-developers.com/htc-one
In "HTC language", an RUU is a ROM, which is what you need in order to flash the OS back onto your device.
I haven't owned an HTC for a number of years now, so I can't recall the place place to find stock firmware (RUU) files.
I will move this thread to the M7 Q&A forum for you, so that hopefully someone else can assist you further.
It will probably help if you can let us know which region you are from, as firmware is often region specific. Which country?
the_scotsman said:
Ah in that case, take a look in our HTC One M7 forums: https://forum.xda-developers.com/htc-one
In "HTC language", an RUU is a ROM, which is what you need in order to flash the OS back onto your device.
I haven't owned an HTC for a number of years now, so I can't recall the place place to find stock firmware (RUU) files.
I will move this thread to the M7 Q&A forum for you, so that hopefully someone else can assist you further.
It will probably help if you can let us know which region you are from, as firmware is often region specific. Which country?
Click to expand...
Click to collapse
I am located in the United States. Montana.
Prayerwimp said:
I am located in the United States. Montana.
Click to expand...
Click to collapse
We"ll need a bit more info to indentify your phone. If you dont already have adb and fastboot installed on your computer, Google search for "minimal adb and fastboot". You should find an xda thread explaining how to set up adb and fastboot. Once done youll also need to install HTC drivers. It can be done by installing HTC Sync manager from htc's website. Then connect your phone using the usb calbe, boot in bootloader mode (power + volume down). Start the minimal adb and fastboot terminal window and type "fastboot getvar all" (without the quotes. Post the output of that command in this thread (take care to remove the imei and serialno lines before posting).
alray said:
We"ll need a bit more info to indentify your phone. If you dont already have adb and fastboot installed on your computer, Google search for "minimal adb and fastboot". You should find an xda thread explaining how to set up adb and fastboot. Once done youll also need to install HTC drivers. It can be done by installing HTC Sync manager from htc's website. Then connect your phone using the usb calbe, boot in bootloader mode (power + volume down). Start the minimal adb and fastboot terminal window and type "fastboot getvar all" (without the quotes. Post the output of that command in this thread (take care to remove the imei and serialno lines before posting).
Click to expand...
Click to collapse
I have installed the "minimal adb and fastboot" and HTC Sync manager.
This is what I came up with:
(bootloader) version: 0.5
(bootloader) version-bootloader: 1.56.0000
(bootloader) version-baseband: 4T.24.3218.09
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main: 4.20.502.1
(bootloader) version-misc: PVT SHIP S-OFF
(bootloader) meid: 00000000000000
(bootloader) product: m7_ul
(bootloader) platform: HBOOT-8064
(bootloader) modelid: PN0713000
(bootloader) cidnum: T-MOB010
(bootloader) battery-status: good
(bootloader) battery-voltage: 3774mV
(bootloader) partition-layout: Generic
(bootloader) security: off
(bootloader) build-mode: SHIP
(bootloader) boot-mode: FASTBOOT
(bootloader) commitno-bootloader: dirty-c6bbb6d4
(bootloader) hbootpreupdate: 11
(bootloader) gencheckpt: 0
Thank you for your time and assistance. Next step please.
Prayerwimp said:
I have installed the "minimal adb and fastboot" and HTC Sync manager.
This is what I came up with:
(bootloader) version: 0.5
(bootloader) version-bootloader: 1.56.0000
(bootloader) version-baseband: 4T.24.3218.09
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main: 4.20.502.1
(bootloader) version-misc: PVT SHIP S-OFF
(bootloader) meid: 00000000000000
(bootloader) product: m7_ul
(bootloader) platform: HBOOT-8064
(bootloader) modelid: PN0713000
(bootloader) cidnum: T-MOB010
(bootloader) battery-status: good
(bootloader) battery-voltage: 3774mV
(bootloader) partition-layout: Generic
(bootloader) security: off
(bootloader) build-mode: SHIP
(bootloader) boot-mode: FASTBOOT
(bootloader) commitno-bootloader: dirty-c6bbb6d4
(bootloader) hbootpreupdate: 11
(bootloader) gencheckpt: 0
Thank you for your time and assistance. Next step please.
Click to expand...
Click to collapse
There is a mismatch between your version-main and your cid/mid. The version-main (firmware version) is an old at&t version but your cid/mid are set to accept t-mobile firmware. That will be easy to fix but first what OS do you want on your phone? The latest official Sense rom (lollipop 5.0.2), latest GPE rom (lollipop 5.1) or latest custom rom (Nougat 7.1)?
alray said:
There is a mismatch between your version-main and your cid/mid. The version-main (firmware version) is an old at&t version but your cid/mid are set to accept t-mobile firmware. That will be easy to fix but first what OS do you want on your phone? The latest official Sense rom (lollipop 5.0.2), latest GPE rom (lollipop 5.1) or latest custom rom (Nougat 7.1)?
Click to expand...
Click to collapse
From what I understand it originally was an AT&T phone that was switched to T-Mobile. As for which OS. I am not picky so whichever is easiest and then I guess the newest.
Thanks again.
Prayerwimp said:
From what I understand it originally was an AT&T phone that was switched to T-Mobile. As for which OS. I am not picky so whichever is easiest and then I guess the newest.
Thanks again.
Click to expand...
Click to collapse
Is there a custom recovery installed on your phone, like TWRP or CWM?
Boot your phone in bootloader mode then select "recovery" and hit the power button. If you don't see "recovery'' that's because you"re booted in "fastboot" menu, in this case select "bootloader" and you should see the "recovery" option.
Your phone will reboot in recovery mode, just need to know what recovery is installed for now. If your phone is running stock recovery you will see an exclamation mark in a red triangle, otherwise you'll see TWRP splash screen or CWM menu. If booting to TWRP or CWM please report back what version number it is.
alray said:
Is there a custom recovery installed on your phone, like TWRP or CWM?
Boot your phone in bootloader mode then select "recovery" and hit the power button. If you don't see "recovery'' that's because you"re booted in "fastboot" menu, in this case select "bootloader" and you should see the "recovery" option.
Your phone will reboot in recovery mode, just need to know what recovery is installed for now. If your phone is running stock recovery you will see an exclamation mark in a red triangle, otherwise you'll see TWRP splash screen or CWM menu. If booting to TWRP or CWM please report back what version number it is.
Click to expand...
Click to collapse
Chose recovery from boot screen. ClockworkMod Recovery v6.0.4.3 is at top of screen with a list of options:
- Reboot system now
- Install zip
- Wipe data/factory reset
- Wipe cache partition
- Backup and restore
- Mounts and storage
- Advanced
Thanks.
Prayerwimp said:
Chose recovery from boot screen. ClockworkMod Recovery v6.0.4.3 is at top of screen with a list of options:
- Reboot system now
- Install zip
- Wipe data/factory reset
- Wipe cache partition
- Backup and restore
- Mounts and storage
- Advanced
Thanks.
Click to expand...
Click to collapse
Good, we can fix your CID and MID first. You can use this guide to write supercid to your phone. WIth your phone in bootloader mode (in the fastboot menu) Start the minimal adb and fastboot terminal then follow the guide from step 9 - 12.
Then to change your MID reboot in recovery and type:
Code:
adb shell
and
Code:
echo -ne '\x50\x00\x4e\x00\x30\x00\x37\x00\x31\x00\x30\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p6 bs=1 seek=16384
Better to copy/paste that one...
Then reboot in bootloader mode again and confirm your mid is now PN0710000 (your can use the "fastboot getvar all" command)
Download this firmware and save it in the same location where minimal adb and fastboot.exe is installed on your computer
WIth your phone in bootloader mode (fastboot menu) type (the command is case sensitive btw):
Code:
fastboot oem rebootRUU
Your phone will reboot in RUU mode, you should see a black screen with a silver HTC logo
type:
Code:
fastboot flash zip M7_UL_Firmware_7.19.401.2.zip
Should take a few seconds before saying : FAILED (remote: 90 hboot pre-update! please flush image again immediately).
So do the same command again:
Code:
fastboot flash zip M7_UL_Firmware_7.19.401.2.zip
The second time, it should take a few minutes and you'll see "okay" at the end, then proceed with
Code:
fastboot reboot-bootloader
Back in bootloader mode again, confirm your version-main is now 7.19.401.2 (use "fastboot getvar all")
If everything went fine you can proceed to the final steps:
Download this RUU and this version of htc_fastboot.exe and save both files in the same folder where you already have minimal adb and fastboot.exe.
reboot again in ruu mode:
Code:
fastboot oem rebootRUU
and once there type:
Code:
htc_fastboot flash zip RUU_M7_UL_L50_SENSE60_MR_HTC_Europe_7.19.401.51_Radio_4T.35.3218.16_10.33Q.1718.01L_release_458803_signed.exe
The flash should take a while and your phone will reboot once during the process. Once 100% done you can reboot the phone and it will boot in the OS (android 5.0.2 with HTC Sense)
alray said:
Good, we can fix your CID and MID first. You can use this guide to write supercid to your phone. WIth your phone in bootloader mode (in the fastboot menu) Start the minimal adb and fastboot terminal then follow the guide from step 9 - 12.
Then to change your MID reboot in recovery and type:
Code:
adb shell
and
Code:
echo -ne '\x50\x00\x4e\x00\x30\x00\x37\x00\x31\x00\x30\x00\x30\x00\x30\x00\x30' | dd of=/dev/block/mmcblk0p6 bs=1 seek=16384
Better to copy/paste that one...
Then reboot in bootloader mode again and confirm your mid is now PN0710000 (your can use the "fastboot getvar all" command)
Download this firmware and save it in the same location where minimal adb and fastboot.exe is installed on your computer
WIth your phone in bootloader mode (fastboot menu) type (the command is case sensitive btw):
Code:
fastboot oem rebootRUU
Your phone will reboot in RUU mode, you should see a black screen with a silver HTC logo
type:
Code:
fastboot flash zip M7_UL_Firmware_7.19.401.2.zip
Should take a few seconds before saying : FAILED (remote: 90 hboot pre-update! please flush image again immediately).
So do the same command again:
Code:
fastboot flash zip M7_UL_Firmware_7.19.401.2.zip
The second time, it should take a few minutes and you'll see "okay" at the end, then proceed with
Code:
fastboot reboot-bootloader
Back in bootloader mode again, confirm your version-main is now 7.19.401.2 (use "fastboot getvar all")
If everything went fine you can proceed to the final steps:
Download this RUU and this version of htc_fastboot.exe and save both files in the same folder where you already have minimal adb and fastboot.exe.
reboot again in ruu mode:
Code:
fastboot oem rebootRUU
and once there type:
Code:
htc_fastboot flash zip RUU_M7_UL_L50_SENSE60_MR_HTC_Europe_7.19.401.51_Radio_4T.35.3218.16_10.33Q.1718.01L_release_458803_signed.exe
The flash should take a while and your phone will reboot once during the process. Once 100% done you can reboot the phone and it will boot in the OS (android 5.0.2 with HTC Sense)
Click to expand...
Click to collapse
The first step changing the CID worked. But when I tried to change the MID I had a problem. When you say boot into recovery do you mean go into recovery from the hdboot screen? The only way adb can find the phone is from the fastboot screen. here is what I get when in recovery :
adb shell
adb server is out of date. killing...
ADB server didn't ACK
* failed to start daemon *
And when in Fastboot:
adb shell
adb server is out of date. killing...
* daemon started successfully *
error: device '(null)' not found
Also, When I boot into fastboot the phone is identified as Android in devices and the HTC Sync Manager finds it. In hdboot or recovery it is identified as "one" and HTC Sync Manager cannot find it.
Sorry for all the difficulties.
Thank you.
Prayerwimp said:
The first step changing the CID worked. But when I tried to change the MID I had a problem. When you say boot into recovery do you mean go into recovery from the hdboot screen? The only way adb can find the phone is from the fastboot screen. here is what I get when in recovery :
adb shell
adb server is out of date. killing...
ADB server didn't ACK
* failed to start daemon *
And when in Fastboot:
adb shell
adb server is out of date. killing...
* daemon started successfully *
error: device '(null)' not found
Also, When I boot into fastboot the phone is identified as Android in devices and the HTC Sync Manager finds it. In hdboot or recovery it is identified as "one" and HTC Sync Manager cannot find it.
Sorry for all the difficulties.
Thank you.
Click to expand...
Click to collapse
try with twrp recovery instead, you can download it from here and as usual, save it in the same folder where you have your minimal adb/fastboot.exe installed
to flash twrp, boot in bootloader mode (fastboot menu)
Code:
fastboot flash recovery twrp-3.2.1-0-m7.img
fastboot erase cache
fastboot reboot-bootloader
then select "recovery" and wait for twrp to boot (you'll see a twrp splash screen, then the twrp main menu. With your phone in twrp main menu, you should be able to use the adb commands.
I cannot figure out where ADB is located. The program I have installed allows me to use it from anywhere. Here is what shows up when I open the powershell. Isn't there a way to open the shell in any folder?
Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.
PS C:\WINDOWS\system32>
Thank you.
alray said:
try with twrp recovery instead, you can download it from here and as usual, save it in the same folder where you have your minimal adb/fastboot.exe installed
to flash twrp, boot in bootloader mode (fastboot menu)
Code:
fastboot flash recovery twrp-3.2.1-0-m7.img
fastboot erase cache
fastboot reboot-bootloader
then select "recovery" and wait for twrp to boot (you'll see a twrp splash screen, then the twrp main menu. With your phone in twrp main menu, you should be able to use the adb commands.
Click to expand...
Click to collapse
I figured out how to start shell in a folder and was able to get TWRP to install. This is what I got.
target reported max download size of 1514139648 bytes
sending 'recovery' (12756 KB)...
OKAY [ 1.526s]
writing 'recovery'...
OKAY [ 0.870s]
finished. total time: 2.400s
******** Did you mean to fastboot format this partition?
erasing 'cache'...
OKAY [ 0.059s]
finished. total time: 0.061s
rebooting into bootloader...
OKAY [ 0.039s]
finished. total time: 0.039s
Now with TWRP loaded I get a message about a partition. DoI want to have a parition??
Unmodified system partition
Keep system read only?
TWRP can leave your system partition unmodified to make it easier for you to take official updates. TWRP will be unable to prevent the stock ROM from replacing TWRP and will not offer to root you device.
installing zips or performing adb operations may still modify the system partition.
Now when I run code: "adb shell" this is what shows:
adb server is out of date. killing...
* daemon started successfully *
~ # 
And it just stays there.
Prayerwimp said:
I figured out how to start shell in a folder and was able to get TWRP to install. This is what I got.
target reported max download size of 1514139648 bytes
sending 'recovery' (12756 KB)...
OKAY [ 1.526s]
writing 'recovery'...
OKAY [ 0.870s]
finished. total time: 2.400s
******** Did you mean to fastboot format this partition?
erasing 'cache'...
OKAY [ 0.059s]
finished. total time: 0.061s
rebooting into bootloader...
OKAY [ 0.039s]
finished. total time: 0.039s
Now with TWRP loaded I get a message about a partition. DoI want to have a parition??
Unmodified system partition
Keep system read only?
TWRP can leave your system partition unmodified to make it easier for you to take official updates. TWRP will be unable to prevent the stock ROM from replacing TWRP and will not offer to root you device.
installing zips or performing adb operations may still modify the system partition.
Click to expand...
Click to collapse
You can swipe the slider to "allow system modification"
Now when I run code: "adb shell" this is what shows:
adb server is out of date. killing...
* daemon started successfully *
~ # 
And it just stays there.
Click to expand...
Click to collapse
That is exactly what you want, you can now type your commands.
~ #  is the prompt telling you that you are root user from adb shell.
Is this correct?
PS C:\Users\praye\Desktop\HTC One M7> .\fastboot getvar all
(bootloader) version: 0.5
(bootloader) version-bootloader: 1.61.0000
(bootloader) version-baseband: 4T.35.3218.16
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main:
(bootloader) version-misc: PVT SHIP S-OFF
(bootloader) serialno: HT36YW903409
(bootloader) imei: 354439050980004
(bootloader) meid: 00000000000000
(bootloader) product: m7_ul
(bootloader) platform: HBOOT-8064
(bootloader) modelid: PN0710000
(bootloader) cidnum: 11111111
(bootloader) battery-status: good
(bootloader) battery-voltage: 4129mV
(bootloader) partition-layout: Generic
(bootloader) security: off
(bootloader) build-mode: SHIP
(bootloader) boot-mode: FASTBOOT
(bootloader) commitno-bootloader: dirty-0e2a13e5
(bootloader) hbootpreupdate: 11
(bootloader) gencheckpt: 0
all: Done!
finished. total time: 0.105s
You can swipe the slider to "allow system modification"
I skipped this because I was not sure. Is there a way to go back and do this???
So I made it all the way to the last step and this is what I get:
PS C:\Users\praye\Desktop\HTC One M7> htc_fastboot flash zip RUU_M7_UL_L50_SENSE60_MR_HTC_Europe_7.19.401.51_Radio_4T.35.3218.16_10.33Q.1718.01L_release_458803_signed.exe
htc_fastboot : The term 'htc_fastboot' is not recognized as the name of a cmdlet, function, script file, or operable
program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ htc_fastboot flash zip RUU_M7_UL_L50_SENSE60_MR_HTC_Europe_7.19.401.5 ...
+ ~~~~~~~~~~~~
+ CategoryInfo : ObjectNotFound: (htc_fastboot:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
Suggestion [3,General]: The command htc_fastboot was not found, but does exist in the current location. Windows PowerShell does not load commands from the current location by default. If you trust this command, instead type: ".\htc_fastboot". See "get-help about_Command_Precedence" for more details.
I followed the suggestion and this is the result:
PS C:\Users\praye\Desktop\HTC One M7> .\htc_fastboot flash zip RUU_M7_UL_L50_SENSE60_MR_HTC_Europe_7.19.40
1.51_Radio_4T.35.3218.16_10.33Q.1718.01L_release_458803_signed.exe
htc_fastboot v3.0.9.2 (2015-05-29)
error: cannot load 'RUU_M7_UL_L50_SENSE60_MR_HTC_Europe_7.19.401.51_Radio_4T.35.3218.16_10.33Q.1718.01L_release_458803_signed.exe'
htc_fastboot finished. total time: 0.355s
The phone has been powered down over the weekend.
Thanks for all the help.
Prayerwimp said:
Is this correct?
PS C:\Users\praye\Desktop\HTC One M7> .\fastboot getvar all
(bootloader) version: 0.5
(bootloader) version-bootloader: 1.61.0000
(bootloader) version-baseband: 4T.35.3218.16
(bootloader) version-cpld: None
(bootloader) version-microp: None
(bootloader) version-main:
(bootloader) version-misc: PVT SHIP S-OFF
(bootloader) serialno: HT36YW903409
(bootloader) imei: 354439050980004
(bootloader) meid: 00000000000000
(bootloader) product: m7_ul
(bootloader) platform: HBOOT-8064
(bootloader) modelid: PN0710000
(bootloader) cidnum: 11111111
(bootloader) battery-status: good
(bootloader) battery-voltage: 4129mV
(bootloader) partition-layout: Generic
(bootloader) security: off
(bootloader) build-mode: SHIP
(bootloader) boot-mode: FASTBOOT
(bootloader) commitno-bootloader: dirty-0e2a13e5
(bootloader) hbootpreupdate: 11
(bootloader) gencheckpt: 0
all: Done!
finished. total time: 0.105s
You can swipe the slider to "allow system modification"
I skipped this because I was not sure. Is there a way to go back and do this???
So I made it all the way to the last step and this is what I get:
PS C:\Users\praye\Desktop\HTC One M7> htc_fastboot flash zip RUU_M7_UL_L50_SENSE60_MR_HTC_Europe_7.19.401.51_Radio_4T.35.3218.16_10.33Q.1718.01L_release_458803_signed.exe
htc_fastboot : The term 'htc_fastboot' is not recognized as the name of a cmdlet, function, script file, or operable
program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ htc_fastboot flash zip RUU_M7_UL_L50_SENSE60_MR_HTC_Europe_7.19.401.5 ...
+ ~~~~~~~~~~~~
+ CategoryInfo : ObjectNotFound: (htc_fastboot:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
Suggestion [3,General]: The command htc_fastboot was not found, but does exist in the current location. Windows PowerShell does not load commands from the current location by default. If you trust this command, instead type: ".\htc_fastboot". See "get-help about_Command_Precedence" for more details.
I followed the suggestion and this is the result:
PS C:\Users\praye\Desktop\HTC One M7> .\htc_fastboot flash zip RUU_M7_UL_L50_SENSE60_MR_HTC_Europe_7.19.40
1.51_Radio_4T.35.3218.16_10.33Q.1718.01L_release_458803_signed.exe
htc_fastboot v3.0.9.2 (2015-05-29)
error: cannot load 'RUU_M7_UL_L50_SENSE60_MR_HTC_Europe_7.19.401.51_Radio_4T.35.3218.16_10.33Q.1718.01L_release_458803_signed.exe'
htc_fastboot finished. total time: 0.355s
The phone has been powered down over the weekend.
Thanks for all the help.
Click to expand...
Click to collapse
Will be easier to use the old terminal window (cmd.exe) instead of the powershell. You can call cmd.exe directly from the powershell by typing cmd.exe
alray said:
Will be easier to use the old terminal window (cmd.exe) instead of the powershell. You can call cmd.exe directly from the powershell by typing cmd.exe
Click to expand...
Click to collapse
PS C:\Users\praye\Desktop\HTC One M7> CMD.exe
Microsoft Windows [Version 10.0.16299.192]
(c) 2017 Microsoft Corporation. All rights reserved.
C:\Users\praye\Desktop\HTC One M7>fastboot oem rebootRUU
< waiting for device >
...
(bootloader) Start Verify: 0
OKAY [ 0.094s]
finished. total time: 0.095s
C:\Users\praye\Desktop\HTC One M7>htc_fastboot flash zip RUU_M7_UL_L50_SENSE60_MR_HTC_Europe_7.19.401.51_Radio_4T.35.3218.16_10.33Q.1718.01L_release_458803_signed.exe
htc_fastboot v3.0.9.2 (2015-05-29)
error: cannot load 'RUU_M7_UL_L50_SENSE60_MR_HTC_Europe_7.19.401.51_Radio_4T.35.3218.16_10.33Q.1718.01L_release_458803_signed.exe'
htc_fastboot finished. total time: 0.302s
Here is the result. Not sure what I am doing wrong.
Thank you.

Categories

Resources