[Tutorial] - Flash ICS v9 Bootloader manually under Linux.

Search This thread

Oberkellner

Member
Jun 22, 2013
5
8
Tutorial - Flash ICS v9 Bootloader manually under Linux.

I am writing this tutorial, because I was unable to replace the HC 3.01 bootloader under Windows with the ICS Bootloader.
This is a translation from the German tutorial at Android-Hilfe.de written by me (aka Brickerl).

Preparation: Tablet must be in APX Mode.

Turn your table off!
Use a paper clip and press the Reset Button softly. You can feel a soft resistance.
As you press the Reset button hold also the Power button. Do this 3 seconds long.
Now release the power button and the paper clip.
The light of the powerbutton glows now white (at least it does for me) und the display is black.


Files needed (see attachment):
bct.bct
flash.cfg
nvflash for Linux
bootloader_apx.bin
bootloader_v9.bin


Your SBK number!

We write a script. I call it a500.sh.
Make a new file. e.g. with vi.
Code:
vi a500.sh

Write this into the script file.
Code:
#!/bin/sh 
./nvflash --bct bct.bct --setbct --bl bootloader_apx.bin --configfile flash.cfg --odmdata 0x300d8011 --sbk 0x12345678 0x12345678 0x12345678 0x12345678 --sync
Modify your SBK.


Make the file executable.
Code:
chmod +x a500.sh

Execute the scipt as root. Dont worry there is no flashing yet. If there are some status messages all is ok. Otherwise cancel NOW or your tablet is bricked afterwards.

The status messages can look like this.

Code:
# ./a500.sh  
 Nvflash started 
 rcm version 0X20001 
 System Information: 
    chip name: t20 
    chip id: 0x20 major: 1 minor: 4 
    chip sku: 0x8 
    chip uid: 0x0xxxxxxxxxxxxxx
    macrovision: disabled 
    hdcp: enabled 
    sbk burned: true 
    dk burned: true 
    boot device: emmc 
    operating mode: 4 
    device config strap: 0 
    device config fuse: 0 
    sdram config strap: 0 
  
 sending file: bct.bct 
 - 4080/4080 bytes sent 
 bct.bct sent successfully 
 odm data: 0x300d8011 
 downloading bootloader -- load address: 0x108000 entry point: 0x108000 
 sending file: bootloader_apx.bin 
 | 714981/714981 bytes sent 
 bootloader_apx.bin sent successfully 
 waiting for bootloader to initialize 
 bootloader downloaded successfully


Step 5:
Now the actual flashing begins. We add 3 lines to the script.

Code:
#!/bin/sh 
./nvflash --bct bct.bct --setbct --bl bootloader_apx.bin --configfile flash.cfg --odmdata 0x300d8011 --sbk 0x12345678 0x12345678 0x12345678 0x12345678 --sync
[B]./nvflash -r --format_partition 4 
./nvflash -r --download 4 bootloader_v9.bin 
./nvflash -r --go
[/B]

The output can look like this:

Code:
# ./a500.sh  
 Nvflash started 
 rcm version 0X20001 
 System Information: 
    chip name: t20 
    chip id: 0x20 major: 1 minor: 4 
    chip sku: 0x8 
    chip uid: 0x0xxxxxxxxxxxxx
    macrovision: disabled 
    hdcp: enabled 
    sbk burned: true 
    dk burned: true 
    boot device: emmc 
    operating mode: 4 
    device config strap: 0 
    device config fuse: 0 
    sdram config strap: 0 
  
 sending file: bct.bct 
 - 4080/4080 bytes sent 
 bct.bct sent successfully 
 odm data: 0x300d8011 
 downloading bootloader -- load address: 0x108000 entry point: 0x108000 
 sending file: bootloader_apx.bin 
 | 714981/714981 bytes sent 
 bootloader_apx.bin sent successfully 
 waiting for bootloader to initialize 
 bootloader downloaded successfully 
 [B]Nvflash started 
 [resume mode] 
 Formatting partition 4 please wait.. done! 
 Nvflash started 
 [resume mode] 
 sending file: bootloader_v9.bin 
 | 1191932/1191932 bytes sent 
 bootloader_v9.bin sent successfully 
 Nvflash started 
 [resume mode]
[/B]

Ready. On the device „Pass“ is displayed and it can be rebooted.
 

Attachments

  • ICSv9.zip
    1.2 MB · Views: 1,399

dibb_nz

Senior Member
Sep 23, 2010
1,636
466
Shake City
Yeah good stuff, will post a link from the root guide when I get back to my pc...

This is perfect for those running ics/jb roms BUT still on the HC bootloader and custom recovery, you may want to make that clear.

The other thing you may like to do is to add instructions to flash a custom recovery. The .img files can be found in the v8 bootloader.zip (not sure about v9.zip) This would be perfect for those who just cannot get flashed using windows for whateva reason.



Sent from my GT-I9300 using Tapatalk 4
 

KaijiKun

Member
Aug 10, 2013
29
29
Excellent Tutorial for NVFlash in Linux :) Great job, Very helpful! I especially like the extra detail in showing the output after you enter the commands.

- Kaiji
 

Fiedler5895

Member
Jul 4, 2012
8
0
Error

What I've done wrong?

[email protected]:~$ sudo '/home/christian/Arbeitsfläche/ICSv9/a500.sh' [sudo] password for christian:
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 3
chip sku: 0x8
chip uid: 0x037c61854400e097
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 3

sending file: /home/christian/Arbeitsfläche/ICSv9/bct.bct
- 4080/4080 bytes sent
/home/christian/Arbeitsfläche/ICSv9/bct.bct sent successfully
odm data: 0x300d8011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: /home/christian/Arbeitsfläche/ICSv9/bootloader_apx.bin
| 714981/714981 bytes sent
/home/christian/Arbeitsfläche/ICSv9/bootloader_apx.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
failed executing command 25 NvError 0x120002
command failure: sync failed (bad data)
bootloader status: partition table is invalid, missing required information (code: 14) message: nverror:0x4 (0x4) flags: 0

Nvflash started
[resume mode]
Formatting partition 4 please wait.. Command Execution failed cmd 13, error 0x120002
FAILED!
command failure: format partition failed (bad command)
bootloader status: unknown operation (code: 1) message: flags: 0

Nvflash started
[resume mode]

/home/christian/Arbeitsfläche/ICSv9/bootloader_apx.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
failed executing command 25 NvError 0x120002
command failure: sync failed (bad data)
bootloader status: partition table is invalid, missing required information (code: 14) message: nverror:0x4 (0x4) flags: 0
 
Last edited:

rhodry

New member
Sep 14, 2007
2
1
Reboot

Hello.

Very good job. Thank you.
But i don't know how to reboot.

Someone can help me?
 

rhodry

New member
Sep 14, 2007
2
1
Tutorial - Flash ICS v9 Bootloader manually under Linux.

I am writing this tutorial, because I was unable to replace the HC 3.01 bootloader under Windows with the ICS Bootloader.
This is a translation from the German tutorial at Android-Hilfe.de written by me (aka Brickerl).

Preparation: Tablet must be in APX Mode.

Turn your table off!
Use a paper clip and press the Reset Button softly. You can feel a soft resistance.
As you press the Reset button hold also the Power button. Do this 3 seconds long.
Now release the power button and the paper clip.
The light of the powerbutton glows now white (at least it does for me) und the display is black.


Files needed (see attachment):
bct.bct
flash.cfg
nvflash for Linux
bootloader_apx.bin
bootloader_v9.bin


Your SBK number!

We write a script. I call it a500.sh.
Make a new file. e.g. with vi.
Code:
vi a500.sh

Write this into the script file.
Code:
#!/bin/sh 
./nvflash --bct bct.bct --setbct --bl bootloader_apx.bin --configfile flash.cfg --odmdata 0x300d8011 --sbk 0x12345678 0x12345678 0x12345678 0x12345678 --sync
Modify your SBK.


Make the file executable.
Code:
chmod +x a500.sh

Execute the scipt as root. Dont worry there is no flashing yet. If there are some status messages all is ok. Otherwise cancel NOW or your tablet is bricked afterwards.

The status messages can look like this.

Code:
# ./a500.sh  
 Nvflash started 
 rcm version 0X20001 
 System Information: 
    chip name: t20 
    chip id: 0x20 major: 1 minor: 4 
    chip sku: 0x8 
    chip uid: 0x0xxxxxxxxxxxxxx
    macrovision: disabled 
    hdcp: enabled 
    sbk burned: true 
    dk burned: true 
    boot device: emmc 
    operating mode: 4 
    device config strap: 0 
    device config fuse: 0 
    sdram config strap: 0 
  
 sending file: bct.bct 
 - 4080/4080 bytes sent 
 bct.bct sent successfully 
 odm data: 0x300d8011 
 downloading bootloader -- load address: 0x108000 entry point: 0x108000 
 sending file: bootloader_apx.bin 
 | 714981/714981 bytes sent 
 bootloader_apx.bin sent successfully 
 waiting for bootloader to initialize 
 bootloader downloaded successfully


Step 5:
Now the actual flashing begins. We add 3 lines to the script.

Code:
#!/bin/sh 
./nvflash --bct bct.bct --setbct --bl bootloader_apx.bin --configfile flash.cfg --odmdata 0x300d8011 --sbk 0x12345678 0x12345678 0x12345678 0x12345678 --sync
[B]./nvflash -r --format_partition 4 
./nvflash -r --download 4 bootloader_v9.bin 
./nvflash -r --go
[/B]

The output can look like this:

Code:
# ./a500.sh  
 Nvflash started 
 rcm version 0X20001 
 System Information: 
    chip name: t20 
    chip id: 0x20 major: 1 minor: 4 
    chip sku: 0x8 
    chip uid: 0x0xxxxxxxxxxxxx
    macrovision: disabled 
    hdcp: enabled 
    sbk burned: true 
    dk burned: true 
    boot device: emmc 
    operating mode: 4 
    device config strap: 0 
    device config fuse: 0 
    sdram config strap: 0 
  
 sending file: bct.bct 
 - 4080/4080 bytes sent 
 bct.bct sent successfully 
 odm data: 0x300d8011 
 downloading bootloader -- load address: 0x108000 entry point: 0x108000 
 sending file: bootloader_apx.bin 
 | 714981/714981 bytes sent 
 bootloader_apx.bin sent successfully 
 waiting for bootloader to initialize 
 bootloader downloaded successfully 
 [B]Nvflash started 
 [resume mode] 
 Formatting partition 4 please wait.. done! 
 Nvflash started 
 [resume mode] 
 sending file: bootloader_v9.bin 
 | 1191932/1191932 bytes sent 
 bootloader_v9.bin sent successfully 
 Nvflash started 
 [resume mode]
[/B]

Ready. On the device „Pass“ is displayed and it can be rebooted.

Hello.

The flash was easy, thank you. but i can't reboot
Can you help me please?
 
  • Like
Reactions: dwnorman58

Top Liked Posts

  • There are no posts matching your filters.
  • 6
    Tutorial - Flash ICS v9 Bootloader manually under Linux.

    I am writing this tutorial, because I was unable to replace the HC 3.01 bootloader under Windows with the ICS Bootloader.
    This is a translation from the German tutorial at Android-Hilfe.de written by me (aka Brickerl).

    Preparation: Tablet must be in APX Mode.

    Turn your table off!
    Use a paper clip and press the Reset Button softly. You can feel a soft resistance.
    As you press the Reset button hold also the Power button. Do this 3 seconds long.
    Now release the power button and the paper clip.
    The light of the powerbutton glows now white (at least it does for me) und the display is black.


    Files needed (see attachment):
    bct.bct
    flash.cfg
    nvflash for Linux
    bootloader_apx.bin
    bootloader_v9.bin


    Your SBK number!

    We write a script. I call it a500.sh.
    Make a new file. e.g. with vi.
    Code:
    vi a500.sh

    Write this into the script file.
    Code:
    #!/bin/sh 
    ./nvflash --bct bct.bct --setbct --bl bootloader_apx.bin --configfile flash.cfg --odmdata 0x300d8011 --sbk 0x12345678 0x12345678 0x12345678 0x12345678 --sync
    Modify your SBK.


    Make the file executable.
    Code:
    chmod +x a500.sh

    Execute the scipt as root. Dont worry there is no flashing yet. If there are some status messages all is ok. Otherwise cancel NOW or your tablet is bricked afterwards.

    The status messages can look like this.

    Code:
    # ./a500.sh  
     Nvflash started 
     rcm version 0X20001 
     System Information: 
        chip name: t20 
        chip id: 0x20 major: 1 minor: 4 
        chip sku: 0x8 
        chip uid: 0x0xxxxxxxxxxxxxx
        macrovision: disabled 
        hdcp: enabled 
        sbk burned: true 
        dk burned: true 
        boot device: emmc 
        operating mode: 4 
        device config strap: 0 
        device config fuse: 0 
        sdram config strap: 0 
      
     sending file: bct.bct 
     - 4080/4080 bytes sent 
     bct.bct sent successfully 
     odm data: 0x300d8011 
     downloading bootloader -- load address: 0x108000 entry point: 0x108000 
     sending file: bootloader_apx.bin 
     | 714981/714981 bytes sent 
     bootloader_apx.bin sent successfully 
     waiting for bootloader to initialize 
     bootloader downloaded successfully


    Step 5:
    Now the actual flashing begins. We add 3 lines to the script.

    Code:
    #!/bin/sh 
    ./nvflash --bct bct.bct --setbct --bl bootloader_apx.bin --configfile flash.cfg --odmdata 0x300d8011 --sbk 0x12345678 0x12345678 0x12345678 0x12345678 --sync
    [B]./nvflash -r --format_partition 4 
    ./nvflash -r --download 4 bootloader_v9.bin 
    ./nvflash -r --go
    [/B]

    The output can look like this:

    Code:
    # ./a500.sh  
     Nvflash started 
     rcm version 0X20001 
     System Information: 
        chip name: t20 
        chip id: 0x20 major: 1 minor: 4 
        chip sku: 0x8 
        chip uid: 0x0xxxxxxxxxxxxx
        macrovision: disabled 
        hdcp: enabled 
        sbk burned: true 
        dk burned: true 
        boot device: emmc 
        operating mode: 4 
        device config strap: 0 
        device config fuse: 0 
        sdram config strap: 0 
      
     sending file: bct.bct 
     - 4080/4080 bytes sent 
     bct.bct sent successfully 
     odm data: 0x300d8011 
     downloading bootloader -- load address: 0x108000 entry point: 0x108000 
     sending file: bootloader_apx.bin 
     | 714981/714981 bytes sent 
     bootloader_apx.bin sent successfully 
     waiting for bootloader to initialize 
     bootloader downloaded successfully 
     [B]Nvflash started 
     [resume mode] 
     Formatting partition 4 please wait.. done! 
     Nvflash started 
     [resume mode] 
     sending file: bootloader_v9.bin 
     | 1191932/1191932 bytes sent 
     bootloader_v9.bin sent successfully 
     Nvflash started 
     [resume mode]
    [/B]

    Ready. On the device „Pass“ is displayed and it can be rebooted.
    1
    Tutorial - Flash ICS v9 Bootloader manually under Linux.

    I am writing this tutorial, because I was unable to replace the HC 3.01 bootloader under Windows with the ICS Bootloader.
    This is a translation from the German tutorial at Android-Hilfe.de written by me (aka Brickerl).

    Preparation: Tablet must be in APX Mode.

    Turn your table off!
    Use a paper clip and press the Reset Button softly. You can feel a soft resistance.
    As you press the Reset button hold also the Power button. Do this 3 seconds long.
    Now release the power button and the paper clip.
    The light of the powerbutton glows now white (at least it does for me) und the display is black.


    Files needed (see attachment):
    bct.bct
    flash.cfg
    nvflash for Linux
    bootloader_apx.bin
    bootloader_v9.bin


    Your SBK number!

    We write a script. I call it a500.sh.
    Make a new file. e.g. with vi.
    Code:
    vi a500.sh

    Write this into the script file.
    Code:
    #!/bin/sh 
    ./nvflash --bct bct.bct --setbct --bl bootloader_apx.bin --configfile flash.cfg --odmdata 0x300d8011 --sbk 0x12345678 0x12345678 0x12345678 0x12345678 --sync
    Modify your SBK.


    Make the file executable.
    Code:
    chmod +x a500.sh

    Execute the scipt as root. Dont worry there is no flashing yet. If there are some status messages all is ok. Otherwise cancel NOW or your tablet is bricked afterwards.

    The status messages can look like this.

    Code:
    # ./a500.sh  
     Nvflash started 
     rcm version 0X20001 
     System Information: 
        chip name: t20 
        chip id: 0x20 major: 1 minor: 4 
        chip sku: 0x8 
        chip uid: 0x0xxxxxxxxxxxxxx
        macrovision: disabled 
        hdcp: enabled 
        sbk burned: true 
        dk burned: true 
        boot device: emmc 
        operating mode: 4 
        device config strap: 0 
        device config fuse: 0 
        sdram config strap: 0 
      
     sending file: bct.bct 
     - 4080/4080 bytes sent 
     bct.bct sent successfully 
     odm data: 0x300d8011 
     downloading bootloader -- load address: 0x108000 entry point: 0x108000 
     sending file: bootloader_apx.bin 
     | 714981/714981 bytes sent 
     bootloader_apx.bin sent successfully 
     waiting for bootloader to initialize 
     bootloader downloaded successfully


    Step 5:
    Now the actual flashing begins. We add 3 lines to the script.

    Code:
    #!/bin/sh 
    ./nvflash --bct bct.bct --setbct --bl bootloader_apx.bin --configfile flash.cfg --odmdata 0x300d8011 --sbk 0x12345678 0x12345678 0x12345678 0x12345678 --sync
    [B]./nvflash -r --format_partition 4 
    ./nvflash -r --download 4 bootloader_v9.bin 
    ./nvflash -r --go
    [/B]

    The output can look like this:

    Code:
    # ./a500.sh  
     Nvflash started 
     rcm version 0X20001 
     System Information: 
        chip name: t20 
        chip id: 0x20 major: 1 minor: 4 
        chip sku: 0x8 
        chip uid: 0x0xxxxxxxxxxxxx
        macrovision: disabled 
        hdcp: enabled 
        sbk burned: true 
        dk burned: true 
        boot device: emmc 
        operating mode: 4 
        device config strap: 0 
        device config fuse: 0 
        sdram config strap: 0 
      
     sending file: bct.bct 
     - 4080/4080 bytes sent 
     bct.bct sent successfully 
     odm data: 0x300d8011 
     downloading bootloader -- load address: 0x108000 entry point: 0x108000 
     sending file: bootloader_apx.bin 
     | 714981/714981 bytes sent 
     bootloader_apx.bin sent successfully 
     waiting for bootloader to initialize 
     bootloader downloaded successfully 
     [B]Nvflash started 
     [resume mode] 
     Formatting partition 4 please wait.. done! 
     Nvflash started 
     [resume mode] 
     sending file: bootloader_v9.bin 
     | 1191932/1191932 bytes sent 
     bootloader_v9.bin sent successfully 
     Nvflash started 
     [resume mode]
    [/B]

    Ready. On the device „Pass“ is displayed and it can be rebooted.

    Hello.

    The flash was easy, thank you. but i can't reboot
    Can you help me please?