DFP-188, DFP-231, DFP-2311 BL7 Finally Rooted

---

Finally with help from people from many other forums Defy with BL7 was rooted.
For now we have no script to make it on the phone without wipe but I'm very happy that it's working.

Rooting Procedure

1. Wipe phone twice (2x make Wipe Data/Cache in stock recovery)
2. Flash 4.5.1-134 DFP-231 CN or 4.5.1-134 DFP-231 Retail.en.EU CEE (It doesn't matter what version of this two You flash but it must be the same with version from point 4).
3. Wipe again (Data/Factory Reset)
4. Flash rooted SBF 4.5.1-134 DFP-231 CN Rooted SBF Part.1, 4.5.1-134 DFP-231 CN Rooted SBF Part.2 or 4.5.1-134 DFP-231 Retail.en.EU CEE Rooted SBF

Thanks List:
- People from http://bbs.mfunz.com for ShellRoot and Rooted SBF
- coelho_ from XDA for help and translation ShellRoot procedure
- Joe31 from XDA for CEE Rooted SBF
- Math43 from XDA for links to CN Rooted SBF
- free2livefrom XDA for testing and helping with patching under linux
- and everyone who tried to help in this thread - THANK YOU

Old Post to let everyone know what we worked here.

I couldn't find any thread about rooting it and only few posts under roms threads so maybe we can start here. I was making backup of rooted DFP-231 en.EU but after this by mistake I restored 2.3.5 DFP-125 and I needed to reflash my Defy with full sbf of DFP-231 cause to make OTA I had to upgrade to BL7 so any chance to restore my backup is root full sbf DFP-231.

I was trying:
Root Tools:

- (XT800+)ROOT_MOTO_2.3.6
- Defy_2.3.6Root
- DooMLoRD_v4_ROOT-zergRush-busybox-su
- DROID 3 easy root script v7
- ME525 2.3.6 Root
- ROOT_MOTO_2.3.6
- root4defy134
- SuperOneClickv2.3.3-ShortFuse
- ZOC_FlashMasterV1.70
- unlockroot23-eng
- Motofail for Droid 4 and Razr
- SuperOneClick with new Exploit motofail hangs on 5th step

Downgrade to:
Every verion MB525, MB526, ME525, ME525+ starting from early versions of Eclair ending on DFP-2311 but only DFP-188 and DFP-231/DFP-2311 has BL7 and on all other verion phone is dead.

I was trying also modding sbf files by myself and few from Walter79 on DFP-188 thread and trying to force reflash under stock recovery but unfortunately still no luck and every time I had bootloader error or just dead phone.
From last few days I'm monitoring all German, Chinese, Spain and Russian forums about rooting this but still even no clue.
Only thing I learn is that every tool for root has problems with writing su app to phone so I think script to make it is wrong but I'm new in android and I have no idea how to edit it. I tried superuser under Ubuntu 11.04 also but I couldn't mount phone so another fail.

I'm screwed with BL7 so if someone have some ideas I'm opened for most options.

are you try this ...3 link attached from xda http://www.android-hilfe.de/2729429-post10.html

All tries to repack and pack back sbf ending with bootloader error.

and if you flash the su zip http://www.android-hilfe.de/2742491-post20.html

Signature Verification failed. Walter79 posted recovery from 4.5.1-134-DFP-74 for root with stock recovery but bootloader error after flash.

Someone (walter79 I think) was talking of a tweaked sbf that could do the trick. Basically to create this you need to
1) unpack the bl7 sbf to a folder and get cg39.smg.
2) Mount cg39.smg as ext4 in ubuntu (sudo mkdir /mnt && sudo mount cg39.smg /mnt -o loop).
3) Now place su binary(su) in /mnt/xbin and Superuser.apk in /mnt/app (To find these files look inside superonclick zip archive)
5) Set perm (sudo chmod +x /mnt/xbin/su)
6) Unmount (sudo umount /mnt)
7) Repack sbf.
8) Flash your phone with new sbf using Rsdlite
9) See if it's booting, if yes, let us know.
10) If no, reflash orginal sbf again.

Find most tools you need here : http://forum.xda-developers.com/showthread.php?t=966537

Ok, I'll try it and maybe it gonna work but I'm afraid that bootloader error shows after repacking sbf.

Originally Posted by Chamelleon

Ok, I'll try it and maybe it gonna work but I'm afraid that bootloader error shows after repacking sbf.

If this fails with bl error it means that bl7 somehow checks the patency of mmcblk1p31 during boot. If that's the case then rooting these new sbf will be very very very difficult.

---------- Post added at 10:44 PM ---------- Previous post was at 10:36 PM ----------

Edit : use motoandroidepacker 1.3 from http://and-developers.com/sbf

Originally Posted by royale1223

If this fails with bl error it means that bl7 somehow checks the patency of mmcblk1p31 during boot. If that's the case then rooting these new sbf will be very very very difficult.

---------- Post added at 10:44 PM ---------- Previous post was at 10:36 PM ----------

Edit : use motoandroidepacker 1.3 from http://and-developers.com/sbf

Hi.
Yes it is like this,i tried a things above, the result is boot err.
Tried, mount CG39.smg (no moding) umount than flash, Bootloader err.

I could try 1 more thing, from rooted telephone (bl7) you can pull CG39.smg by ADB.
adb shell:
su
dd if=/dev/block/system of=/sdcard/CG39.smg
Edit this, than flash.
Thanks

Ok, I did what You said and used files from superuser site (bin su ofc) and unfortunately Bootloader error Err:A5,69,35,00,27 and after simple repack and build again without modification CG39.smg phone booting normally.