As our friend telling this few days ago, mentioning days had comes...
Originally Posted by the_laser
get from phone phone_acc.cxc
find Cops_HandleSignal (pattern: 00xxxxxxxxxxxxxxxxxxxxxxxxxx00), find and patch COPS_IMEI_Read (pattern: 0Fxxxxxxxxxx)
patch cops handler, insert own imei
recalc sha1 signatures
upload phone_acc.cxc back to phone
say thanks to stupidness of semc .cxc security developers
notice, that phone must be brown or have patched semcboot from setool2 (most 3rd-party developers using it in own products)