Develop Bugs

Flashing a new Bootloader BML

Hi All,
Just curious how I would go about flashing a replacement bootloader to a Samsung Galaxy S?
I am trying to do this because my phone doesn't allow the 3 button boot mode into recovery or download mode.
I know you can activate it by running
adb reboot recovery
or
abd reboot download
However if I end up with a bad flash I will never be able to do that 3 button recovery so in essense I will brick my phone.
From the BML map
http://forum.xda-developers.com/wiki/index.php?title=Samsung_Galaxy_S#Modifications
My guess is the bootloader I am looking for is at BML5
I have sucessfully backed up my BML5 from my 'neutered' phone and tonight will be backing up a BML5 from a phone which has 3 button mode active.
I backed them up using this command
dd if=/dev/block/bml5 of=/sdcard/bml5.bak
I will compare the two after this but am pretty confident they will be different. If they are different how can I go about copying a 3 button recovery mode bootloader to my device?
This post
http://forum.xda-developers.com/showpost.php?p=7610625&postcount=29
suggests there is a way to write to the bml however it is strongly discouraged.
Is there another way I can copy a non 'neutered' bootloader?

keep up the good work,
it'll be cool if you or anyone with that knowledge can get it working.
then we wont have to go back to the stores to exchange the Neutered phones

Odin?
Sent from my GT-I9000 using XDA App

it may be unwise to flash only the bml5. if the bml4 is different between the two phones, and references something in the bml5 that is also different, it may cause a brick state.
i would suggest backing up bml1-12 and comparing them. at the least bml4 and bml5 as they both deal with the secondary program loader, which should enable the 3button boot to recover if there is an error.
good work none the less

Odin doesn't work because one essential condition for Odin working is phone conected in download mode. Or, without phone in downloadmode Odin is no working.

Oef, difficult one. But what is the chance of having a bad flash by flashing a tar-ed Sbl.bin and/or boot.bin with Odin? Just wondering...

dentimarius said:
Odin doesn't work because one essential condition for Odin working is phone conected in download mode. Or, without phone in downloadmode Odin is no working.
Click to expand...
Click to collapse
Well you can get the phone into download mode by running
adb reboot download
so that isn't a problem... however I still am unsure how to flash it...
I suppose this would possibly work (in su)
dd if=/sdcard/bm5.bak of=/dev/block/bm5
but I am not game to run that until someone here with a bit more knowledge knows if it will work.

phoenixdigital said:
Hi All,
Just curious how I would go about flashing a replacement bootloader to a Samsung Galaxy S?
I am trying to do this because my phone doesn't allow the 3 button boot mode into recovery or download mode.
I know you can activate it by running
adb reboot recovery
or
abd reboot download
However if I end up with a bad flash I will never be able to do that 3 button recovery so in essense I will brick my phone.
From the BML map
http://forum.xda-developers.com/wiki/index.php?title=Samsung_Galaxy_S#Modifications
My guess is the bootloader I am looking for is at BML5
I have sucessfully backed up my BML5 from my 'neutered' phone and tonight will be backing up a BML5 from a phone which has 3 button mode active.
I backed them up using this command
dd if=/dev/block/bml5 of=/sdcard/bml5.bak
I will compare the two after this but am pretty confident they will be different. If they are different how can I go about copying a 3 button recovery mode bootloader to my device?
This post
http://forum.xda-developers.com/showpost.php?p=7610625&postcount=29
suggests there is a way to write to the bml however it is strongly discouraged.
Is there another way I can copy a non 'neutered' bootloader?
Click to expand...
Click to collapse
I see that you are going in a very good hackable way ...
Contact @ Cotulla

phoenixdigital said:
Well you can get the phone into download mode by running
adb reboot download
so that isn't a problem... however I still am unsure how to flash it...
I suppose this would possibly work (in su)
dd if=/sdcard/bm5.bak of=/dev/block/bm5
but I am not game to run that until someone here with a bit more knowledge knows if it will work.
Click to expand...
Click to collapse
i would definitely recommend odin for that! did you try to flash a international firmware version like XWJM2 as it contains a bootloader that allows the 3 button goto download/recovery mode? you can use odin to just flash boot.bin and Spl.bin to just replace the 1st and 2nd bootloader...
what is your exact hardware version of the device? i think you have to be very careful when you want to replace the bootloader(s) to not brick your phone!!

jodue said:
i would definitely recommend odin for that!
Click to expand...
Click to collapse
how would I package up the backup via dd into something that odin would be able to use?
jodue said:
did you try to flash a international firmware version like XWJM2 as it contains a bootloader that allows the 3 button goto download/recovery mode? you can use odin to just flash boot.bin and Spl.bin to just replace the 1st and 2nd bootloader...
what is your exact hardware version of the device? i think you have to be very careful when you want to replace the bootloader(s) to not brick your phone!!
Click to expand...
Click to collapse
My device is
My phone specs
Model: GT-I9000
Firmware: 2.1-update1
Baseband: I9000DTJG3
Kernel: 2.6.29 [email protected] #2
Build Number: ECLAIR.DTJG4
Would that be suitable for the XWJM2?
Thanks for the response too.

Ok I have backed BML4 and BML5 for the following
1) My 'neutered' phone on DTJG4 - I will call this NEUT1
2) A 3 click working phone on DTJG3 - I will call this 3Click1
3) A 3 click working phone on DTJG4 - I will call this 3Click2
the BML5 backup from all of the phones just contains FFFFFFFFFF data and nothing else
BML4 is definitely different between NEUT1 and 3Click2
BML4 is the same for 3Click1 and 3Click2 so the JG4 update doesn't touch the bootloader...
Soooooooo.... How do I write this working BML4 to my NEUT1 device
Anyone? Bueller?

phoenixdigital said:
how would I package up the backup via dd into something that odin would be able to use?
My device is
My phone specs
Model: GT-I9000
Firmware: 2.1-update1
Baseband: I9000DTJG3
Kernel: 2.6.29 [email protected] #2
Build Number: ECLAIR.DTJG4
Would that be suitable for the XWJM2?
Thanks for the response too.
Click to expand...
Click to collapse
i think so but i am curious why your device doesn't allow the 3 button combo in the first place? is it provider bound? if yes, which one? i'm not sure if you can flash a open firmware onto a branded sgs but i think so! does anybody else has experience with that? btw. you can find boot.bin & Spl.bin in the pda archive of the firmwares but i wouldn't flash them before you can be sure it won't brick your sgs...

jodue said:
i think so but i am curious why your device doesn't allow the 3 button combo in the first place? is it provider bound? if yes, which one?
Click to expand...
Click to collapse
It is OPTUS Australia... in recent weeks there have been a few phones being released by Optus which have the 3 button click disabled. So it appears either Samsung or Optus are disabling it.
If someone else in Australia who has rooted their phone and knows a bit of unix can run this command from a terminal on their phone
su
dd if=/dev/block/bml4 of=/sdcard/bml4.bak
then post the bml4.bak file up somewhere I can compare it to the ones I have.
It doesn't even have to be australia anyone's would be good to compare.. just let me know what firmware you are running too.. and if the 3 click mode works for you.
jodue said:
i'm not sure if you can flash a open firmware onto a branded sgs but i think so! does anybody else has experience with that? btw. you can find boot.bin & Spl.bin in the pda archive of the firmwares but i wouldn't flash them before you can be sure it won't brick your sgs...
Click to expand...
Click to collapse
I have heard of people in Australia using these Eurpoean firmwares so I should be safe there.
I wont be flashing anything until we get some advice from some senior members of this forum. I am still thinking
dd if=/sdcard/bml4.bak of=/dev/block/bml4
should do the trick but I am too scared to run it

Ok I grew a pair and flashed JM5... It flashed successfully but the 3 button mode still doesn't work...
Hmmmmmm... so the 3 button mode isn't in boot.bin or Spl.bin???
I extracted bml4 and it has not changed at all?

phoenixdigital said:
Ok I grew a pair and flashed JM5... It flashed successfully but the 3 button mode still doesn't work...
Hmmmmmm... so the 3 button mode isn't in boot.bin or Spl.bin???
I extracted bml4 and it has not changed at all?
Click to expand...
Click to collapse
strange because it should be in the 1st bootloader ...
sorry for the stupid question but i haveto ask the obvious. are you sure pressing the 3 buttons doesn't work at all? it can be tricky and often it doesn't work so maybe you are just doing something wrong? have you tried holding home+voldown and then just press power once? this is all very strange! why forbid the key combination and still allow adb boot download? makes no sense to me!

jodue said:
sorry for the stupid question but i haveto ask the obvious. are you sure pressing the 3 buttons doesn't work at all?
This is all very strange! why forbid the key combination and still allow adb boot download? makes no sense to me!
Click to expand...
Click to collapse
Yep definitely pressing them right. I performed it perfectly on the non neutered phone just an hour ago and it worked perfectly.

phoenixdigital said:
Yep definitely pressing them right. I performed it perfectly on the non neutered phone just an hour ago and it worked perfectly.
Click to expand...
Click to collapse
have you tried re-extracting the bml4 from your neut1 phone and see if it is identical to the bml4 you extracted from the 3click phones? maybe it didn't flash correctly if at all?

phoenixdigital said:
Ok I grew a pair and flashed JM5... It flashed successfully but the 3 button mode still doesn't work...
Hmmmmmm... so the 3 button mode isn't in boot.bin or Spl.bin???
I extracted bml4 and it has not changed at all?
Click to expand...
Click to collapse
Here's a Quote from another thread:
mike.sw said:
Hey again
I'm looking the flash.bat and see it need two files that my firmware (I9000JPJG8) don't have in zip/tar file:
-boot boot.bin -sbl Sbl.bin
How heimdall will handle it? Is it safe to go on?
Click to expand...
Click to collapse
Seems like some firmwares out there don't contain the bootloader. Therefore, when you flash such a firmware, the bootloader section will remain unchanged even after flashing. Maybe you should check JM5 if it even contains the bootloader section in it or not.

wang1chung said:
have you tried re-extracting the bml4 from your neut1 phone and see if it is identical to the bml4 you extracted from the 3click phones? maybe it didn't flash correctly if at all?
Click to expand...
Click to collapse
I think that was the issue actually. When I flashed JM5 in odin I selected the
PIT
PDA
PHONE
CSA
I also ticked Re-Partition (Is this really needed if you are remaining on 512-PIT?)
When it rebooted the phone went through some terminal screens and appeared to give an error. Something to do with there being two CSC config files... can't remember the exact error. So it's possible it never got to the section where it replaced the bootloader...
It did however manage to update the firmware for PDA as the JM5 European firmware was definitely installed.
So a few questions about ODIN
Is it flashing the phone directly or just uploading the .bin and .rfs files to the phone?
If it's just uploading the .bin and .rfs files when the phone reboots after a flash does the phone then install/flash these .bin and.rfs files to the final location when it reboots after ODIN?
So in short is ODIN flashing or is the phone actually flashing after ODIN has uploaded the update files?
Do you really need to tick re-partition if you are staying on 512-PIT?

just a FYI
according to a post in the General forums, Samsung is aware of the problem, and might release the fix with their next official ROM

Bootloop and Recovery (No command) - GT-I9195

Hello guys!
I have problem with my GT-I9195.
Phone just turned off and I was not be able to turn it on. It was hard bricked.
Now I managed to unbrick it with SD card and debrick.img. Problem is, phone is in bootloop now.
I tried:
- Flash few firmwares with Odin, everything goes OK but I am still in bootloop.
- Flashed few custom recoverys with Odin. (After flashing I am still at stock recovery and No command).
Is there any way to rid of that bootloop and put custom recovery to mobile phone?
Sorry for my bad English.
Thanks!

xqee said:
Hello guys!
I have problem with my GT-I9195.
Phone just turned off and I was not be able to turn it on. It was hard bricked.
Now I managed to unbrick it with SD card and debrick.img. Problem is, phone is in bootloop now.
I tried:
- Flash few firmwares with Odin, everything goes OK but I am still in bootloop.
- Flashed few custom recoverys with Odin. (After flashing I am still at stock recovery and No command).
Is there any way to rid of that bootloop and put custom recovery to mobile phone?
Sorry for my bad English.
Thanks!
Click to expand...
Click to collapse
I have the same problem, have you found a solutions?

Please :crying::crying::crying::crying::crying:

You need to give people full info, tell them exactly what the phone was like before, what you did and what files you flashed etc. What debrick image did you use, one from net? Then maybe someone will be able to help you (probably above my skill level though )

IronRoo said:
You need to give people full info, tell them exactly what the phone was like before, what you did and what files you flashed etc. What debrick image did you use, one from net? Then maybe someone will be able to help you (probably above my skill level though )
Click to expand...
Click to collapse
I didn't try any debrick image yet, where can I start?
I already tried this guide, but my bootloader is a v2: http://forum.xda-developers.com/showthread.php?p=52648525#post52648525

v2 bootloader ..... oh I see your problem
Look I'm no expert about this sort of thing as I've never had to do it luckily.
The thread you linked before has a source for JB with V2 bootlaoder, I'd try that first (he gives a little more info lower down how to do it)
http://forum.xda-developers.com/showpost.php?p=58494316&postcount=41
If all else fails try to find a debrick image
If I recall correctly there is a link to one in the following thread someone posted (even though the thread is about making your own debrick.img)
http://forum.xda-developers.com/showthread.php?t=2625628

IronRoo said:
v2 bootloader ..... oh I see your problem
Look I'm no expert about this sort of thing as I've never had to do it luckily.
The thread you linked before has a source for JB with V2 bootlaoder, I'd try that first (he gives a little more info lower down how to do it)
http://forum.xda-developers.com/showpost.php?p=58494316&postcount=41
If all else fails try to find a debrick image
If I recall correctly there is a link to one in the following thread someone posted (even though the thread is about making your own debrick.img)
http://forum.xda-developers.com/showthread.php?t=2625628
Click to expand...
Click to collapse
Thank you @IronRoo, I'll try!
Unfortunately it seems that it's not easy to find a ready debrick image for my situation...
Code:
CURRENT BINARY: Samsung Official
SYSTEM STATYS: Official
KNOX KERNEL LOCK: 0x0
KNOX WARRANTY VOID: 0x0
CSB-CONFIG-LSB: 0x30
BOOTLOADER AP SWREV: 2
WRITE PROTECTION: Enable

shady9090 said:
Thank you @IronRoo, I'll try!
Unfortunately it seems that it's not easy to find a ready debrick image for my situation...
[/CODE]
Click to expand...
Click to collapse
I have up loaded some debrick images, but probably won't work for you .... I don't know what they are and have never used them (use at your own risk)
http://forum.xda-developers.com/showpost.php?p=65961339&postcount=68

[ROOT][Samsung Galaxy Tab E][sm-t377p/sm-t560nu]

WHATS THIS?
This is my port of CF-AUTOROOT for the Samsung Galaxy TAB E.
You flash this at your own risk. Please ensure you have the stock ROM to hand downloaded from SAMMOBILE or a TWRP backup in case of problems. This will trip the knox counter.
Flash with ODIN 3.10.7 in the AP slot.
Load the respective file below into the AP slot and hit start.
cfautoroot_sm-t377p.tar
cfautoroot_sm-t560nu.tar
NOTE: ON SOME 5.1.1 DEVICES IT IS NECESSARY TO GO TO:
Settings -> Developer Options -> OEM unlocking
AND ENABLE OEM UNLOCK FIRST OR YOU MAY ENCOUNTER 'BLOCKED BY FRP LOCK' WHEN FLASHING.
STOCK TWRP IMAGE FOR SM-T377P
This is a link to the stock system, boot, modem image for the T377P in case anyone needs it. Needs to be restored with twrp.
Thanks to @shawn1976 for providing this.
https://www.dropbox.com/s/skuwsbzm2zigd83/sm-T377PVPU1AOJ5-boot-system-modem-only.zip?dl=0
Credits: Chainfire and my testers - Phrozen99 and nates730
Please note I don't own this device and spend a lot of my free time bringing these builds for you to use and benefit from.
THANKS.
DONATE ME HERE IF YOU WANT TO BUY ME A BEER OR HIT THE THANKS BUTTON IF I HELPED YOU
.

FRP lock
Any suggestions on getting pass an FRP lock? My niece tried to root it but didn't turn on the enable OEM unlock. I just literally got it so don't have a back up and stock rom is no where I can find online even tried the Samsung Switch software and the T377P is not an option.

Jasn7766 said:
Any suggestions on getting pass an FRP lock? My niece tried to root it but didn't turn on the enable OEM unlock. I just literally got it so don't have a back up and stock rom is no where I can find online even tried the Samsung Switch software and the T377P is not an option.
Click to expand...
Click to collapse
Isn't there a recovery mode in the SS software that allows the firmware to be reflashed?

ashyx said:
Isn't there a recovery mode in the SS software that allows the firmware to be reflashed?
Click to expand...
Click to collapse
That was my plan ...however they do not support this model number yet so its not available to be reflashed. I checked sammobile as well figuring I could download firmware and use Odin to reflash and same situation.

There's a chance the sm-t377R4 firmware may flash as it's practically identical to the sprint firmware just a different csc.

Okay....will try and find that one.

Hi, I had a question. The Samsung Tab E is my first android device (I am a IOS user, so i know how to Jailbreak, but I don't know how to root!). My friend told me to root it, but I don't really know how to do it. Can you post a step by step tutorial. Also, after i rooted can i update my device to a newer version or do i have to remove the root. Lastly, how do you back up your device? Thank you! I appreciate your hard work!

Badob said:
Hi, I had a question. The Samsung Tab E is my first android device (I am a IOS user, so i know how to Jailbreak, but I don't know how to root!). My friend told me to root it, but I don't really know how to do it. Can you post a step by step tutorial. Also, after i rooted can i update my device to a newer version or do i have to remove the root. Lastly, how do you back up your device? Thank you! I appreciate your hard work!
Click to expand...
Click to collapse
You can follow the tutorial below, it's for the Tab A but the procedure is identical.
Obviously don't use the cf_autoroot file in the tutorial use the one here. Also note the PDA button in Odin is now called AP.
http://techchomps.com/how-to-root-the-samsung-galaxy-tab-a-9-7/

ashyx said:
You can follow the tutorial below, it's for the Tab A but the procedure is identical.
Obviously don't use the cf_autoroot file in the tutorial use the one here. Also note the PDA button in Odin is now called AP.
Click to expand...
Click to collapse
Thanks Man!!! Had some last questions: Can i update my device to a newer version (if available) or do i have to remove the root and how do you back up your device? Thank you again!

Badob said:
Thanks Man!!! Had some last questions: Can i update my device to a newer version (if available) or do i have to remove the root and how do you back up your device? Thank you again!
Click to expand...
Click to collapse
You can update your device with odin anytime you want but not via ota.
To back up you device you need to install TWRP.
Search Google for info on using TWRP.

ashyx said:
You can update your device with odin anytime you want but not via ota.
To back up you device you need to install TWRP.
Search Google for info on using TWRP.
Click to expand...
Click to collapse
Thanks For the help!

Where do I get TWRP for Tab E T560, and how do I install it?
Thank you.
Edit: Found the answer.

ashyx said:
There's a chance the sm-t377R4 firmware may flash as it's practically identical to the sprint firmware just a different csc.
Click to expand...
Click to collapse
I tried the t377R4 firmware that didn't work. Any idea on where I could track down a copy of the t377p? Odd I can't even use the Samsung Smart Switch or even Kies as it doesn't recognize the model number. Or if anyone has a backup available they can share please let me know.

I have a US Cellular Samsung Tab E SM-T377R4 and I rooted it using the procedure below. The root process went fine and everything is working well except Recovery Mode does not work. It just boots to a black blank screen when I try to go to Recovery Mode. But that's no big deal to me.
ashyx said:
You can follow the tutorial below, it's for the Tab A but the procedure is identical.
Obviously don't use the cf_autoroot file in the tutorial use the one here. Also note the PDA button in Odin is now called AP.
http://techchomps.com/how-to-root-the-samsung-galaxy-tab-a-9-7/
Click to expand...
Click to collapse

Stevenwsmith said:
I have a US Cellular Samsung Tab E SM-T377R4 and I rooted it using the procedure below. The root process went fine and everything is working well except Recovery Mode does not work. It just boots to a black blank screen when I try to go to Recovery Mode. But that's no big deal to me.
Click to expand...
Click to collapse
Surprised recovery doesn't work, considering the 2 devices are identical specs.
Try installing Twrp, you'll probably find that works OK.

Jasn7766 said:
I tried the t377R4 firmware that didn't work. Any idea on where I could track down a copy of the t377p? Odd I can't even use the Samsung Smart Switch or even Kies as it doesn't recognize the model number. Or if anyone has a backup available they can share please let me know.
Click to expand...
Click to collapse
Same problem here... I've been looking all over for a copy of the SM-T377P stock ROM. Anyone that happens to have a copy/link for it please share.

JohnICon said:
Same problem here... I've been looking all over for a copy of the SM-T377P stock ROM. Anyone that happens to have a copy/link for it please share.
Click to expand...
Click to collapse
What's the issue?

Rooting gone bad... Rooted my SM-T377P with KingRoot and there is an FRP Lock that comes up a week later. All of the custom ROM versions I have keep getting rejected by ODIN every time I try to flash them. The only other way I can think of doing this is to flash the stock ROM for the device.

JohnICon said:
Rooting gone bad... Rooted my SM-T377P with KingRoot and there is an FRP Lock that comes up a week later. All of the custom ROM versions I have keep getting rejected by ODIN every time I try to flash them. The only other way I can think of doing this is to flash the stock ROM for the device.
Click to expand...
Click to collapse
You realise you can't flash a custom rom with odin?
Also when you flash the stock t377r4 firmware what part fails?

The aboot fails every time I try to flash it

How To Get Working Apn + Hotspot After Upgrade to NCQ26.69-64+ or With SPerry XT1766.

You Need From firmware.center / firmware / Motorola / Moto%20E4 / Stock / XT1766 /
SPERRY_SPRINT_NCQ26.69-48_cid50_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml.zip Which Is Not For The XT1766 if You Flash This You Will Loose The Baseband And SoftBrick The Phone .
And From firmware.center / firmware / Motorola / Moto%20E4 / Stock / XT1766 /
XT1766_SPERRY_SPRINT_7.1.1_NCQ26.69-56_cid50_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml.zip This One Have The Ratio And Modem And FsG images Of Your Phone Thats Why We Need It .
Lets Begin , if You Have This Phone You Had Noticed That After Upgrade To The Last Version The Ability To Add Apn And Modify Them And The Hotspot Wont Work Any More This Is Because The Locked Everything Up For No Reason Well Money Is the Reason , We need to Extract XT1766_SPERRY_SPRINT_7.1.1_NCQ26.69-56_cid50_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml.zip in a folder and SPERRY_SPRINT_NCQ26.69-48_cid50_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml.zip
in other folder , you must know your way to flash servicefile.xml on linux or windows no details here and bootloader unlocked , well that is easy , now we have to put the files : the 2 OEM files , the 4 System Files , boot.img ,
{{{ bootloader "NO NEED" This Work Before Just Because v48 and v56 have the same bootloader version }}} , recovey.img from SPERRY_SPRINT_NCQ26.69-48_cid50_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml.zip inside the folder that have the XT1766_SPERRY_SPRINT_7.1.1_NCQ26.69-56_cid50_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml.zip firmware and replace those files , optional for rooting you can replace recovery.img with the Squid2 TWRP recovery.img file and The boot.img Patched Fixed F2FS kernel which is based in the stock firmware kernel sources that we are going to flash here and then flash supersu inside twrp , Well Thats It after Flashing This Downgrade Custom stock you will have back the ability to ADD apn's Again And Use The Hotspot included in the Stock Firmware , Cheers , Thanks To All The People Involved in the development for Perry Moto E4 Thanks Everybody i hope this help somebody with the XT1766. :laugh:
EDIT HELLO
Things Have Changed Dont Try To Downgrade Bootloader or The Phone Will Get Hard Bricked , Why well bootloader versions on new firmwares have been upgraded please check all the information on the Bootloader/Fastboot
MODE Of The Phone Which Version You Have , Now For Example If You Are On Version NCQS26.69-64-5 you will need SPERRY_SPRINT_NCQS26.69-64-5_cid50_XT1766-SS_7.1.1_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml full package then extract and now you will need SPERRY_SPRINT_NCQ26.69-48_cid50_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml extract it too , Now Just Move The 2 Oems Images And 4 System Images And Boot Image To SPERRY_SPRINT_NCQS26.69-64-5_cid50_XT1766-SS_7.1.1_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml Folder Next Look for RSD_Lite_Motorola_XML_To_Batch_Script on Google Download it And Watch The Video Of Rootjunky on how to use it. Very Simple Wish All Of You Luck And im Not Responsible Of Any Damage Of Your Phone Use This Guide On Your Own Terms.

ozmage said:
You Need From firmware.center / firmware / Motorola / Moto%20E4 / Stock / XT1766 /
SPERRY_SPRINT_NCQ26.69-48_cid50_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml.zip Which Is Not For The XT1766 if You Flash This You Will Loose The Baseband And SoftBrick The Phone .
And From firmware.center / firmware / Motorola / Moto%20E4 / Stock / XT1766 /
XT1766_SPERRY_SPRINT_7.1.1_NCQ26.69-56_cid50_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml.zip This One Have The Ratio And Modem And FsG images Of Your Phone Thats Why We Need It .
Lets Begin , if You Have This Phone You Had Noticed That After Upgrade To The Last Version The Ability To Add Apn And Modify Them And The Hotspot Wont Work Any More This Is Because The Locked Everything Up For No Reason Well Money Is the Reason , We need to Extract XT1766_SPERRY_SPRINT_7.1.1_NCQ26.69-56_cid50_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml.zip in a folder and SPERRY_SPRINT_NCQ26.69-48_cid50_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml.zip
in other folder , you must know your way to flash servicefile.xml on linux or windows no details here and bootloader unlocked , well that is easy , now we have to put the files : the 2 OEM files , the 4 System Files , boot.img , bootloader , recovey.img from SPERRY_SPRINT_NCQ26.69-48_cid50_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml.zip inside the folder that have the XT1766_SPERRY_SPRINT_7.1.1_NCQ26.69-56_cid50_subsidy-DEFAULT_regulatory-DEFAULT_CFC.xml.zip firmware and replace those files , optional for rooting you can replace recovery.img with the Squid2 TWRP recovery.img file and The boot.img Patched Fixed F2FS kernel which is based in the stock firmware kernel sources that we are going to flash here and then flash supersu inside twrp , Well Thats It after Flashing This Downgrade Custom stock you will have back the ability to ADD apn's Again And Use The Hotspot included in the Stock Firmware , Cheers , Thanks To All The People Involved in the development for Perry Moto E4 Thanks Everybody i hope this help somebody with the XT1766. :laugh:
Click to expand...
Click to collapse
I flashed the Sprint firmware and had data working on my XT1766 after it got it's carrier update, the Sprint firmware does not soft brick the phone as I flashed it and can confirm it doesn't soft brick it, so you are incorrect in saying that.

I'm not sure if I did something wrong but after trying this, my phone kept saying, "phone stopped working". I had backed up my phone so I restored it. Any ideas on what might have happened?

dlinderaz said:
I'm not sure if I did something wrong but after trying this, my phone kept saying, "phone stopped working". I had backed up my phone so I restored it. Any ideas on what might have happened?
Click to expand...
Click to collapse
Yeah, don't try to restore system apps. Phone app has some quirks, it's in oem. There are oem hide xml files and so on. Why try to restore phone?

madbat99 said:
Yeah, don't try to restore system apps. Phone app has some quirks, it's in oem. There are oem hide xml files and so on. Why try to restore phone?
Click to expand...
Click to collapse
I restored the entire thing after flashed the indicated files causing the error message.

dlinderaz said:
I restored the entire thing after flashed the indicated files causing the error message.
Click to expand...
Click to collapse
Oh, I never tried this method. I used rsd lite to flash the firmware (the one op says will brick you, it didn't by the way). After flashing new firmware I restored only data, nothing system or boot related, and have had no issues.

madbat99 said:
Oh, I never tried this method. I used rsd lite to flash the firmware (the one op says will brick you, it didn't by the way). After flashing new firmware I restored only data, nothing system or boot related, and have had no issues.
Click to expand...
Click to collapse
Thank you so much for the info. I'll give that a try tomorrow. I appreciate your time and help.

dlinderaz said:
Thank you so much for the info. I'll give that a try tomorrow. I appreciate your time and help.
Click to expand...
Click to collapse
Keep in mind I have the virgin mobile version (sprint xt1766). Don't know which one you have. Some have had trouble with rsdlite on Windows 10, it worked fine for me though.
I used rsdlite from here
The newest one, 6.2.4 I think

Apn Xt1766
I just want to add apn and want to use hot spot again
As the phone is updated on latest build ..
I don't want the root access..
What's should I try then from previous build , can anyone
Guide me easy steps plz.

Xt1766 how to get working apn
Will anyone confirm

danishamini.saifi said:
Will anyone confirm
Click to expand...
Click to collapse
The steps are there. Just don't use the root part if you don't want root. Once you switch the files, flash the service file.xml with rsdlite.

madbat99 said:
The steps are there. Just don't use the root part if you don't want root. Once you switch the files, flash the service file.xml with rsdlite.
Click to expand...
Click to collapse
Thanks, ill try and share the result.

I've tested it.. It worked for me but there is an issue
With this method occurred as well..
While Turing on the phone " BAD KEY" msg pops up on
Black display for 4-5 seconds and then mobile shows Motorola logo...
Now what is suppose to be done to get rid off BAD KEY msg.

danishamini.saifi said:
I've tested it.. It worked for me but there is an issue
With this method occurred as well..
While Turing on the phone " BAD KEY" msg pops up on
Black display for 4-5 seconds and then mobile shows Motorola logo...
Now what is suppose to be done to get rid off BAD KEY msg.
Click to expand...
Click to collapse
That's normal if you unlock the bootloader. Flash the no verity opt encrypt, or magisk, and it will change from bad key to n/a. But there will always be a message if you unlock the bootloader.
I know you said you don't need root, so that bad key message is there to stay.

madbat99 said:
That's normal if you unlock the bootloader. Flash the no verity opt encrypt, or magisk, and it will change from bad key to n/a. But there will always be a message if you unlock the bootloader.
I know you said you don't need root, so that bad key message is there to stay.
Click to expand...
Click to collapse
oh... i got it, thanks...
just one thing more please, if i go towards rooting the phone as well, will this be removed or N/A or something will be there?

danishamini.saifi said:
oh... i got it, thanks...
just one thing more please, if i go towards rooting the phone as well, will this be removed or N/A or something will be there?
Click to expand...
Click to collapse
N/A will be there. But you can flash a new boot logo to kinda hide it. Instead of a black screen, any logo you want, maybe with a white strip at the top to hide it. I'll get you a link.
Here are some good ones. https://forum.xda-developers.com/mo...om-boot-logos-converted-t3759320/post75787882
And here is the guide to make your own
https://forum.xda-developers.com/moto-e4/how-to/replace-n-boot-image-t3687212/post74118155

@madbat99
Everything you shared was perfect I made my own logo to hide bad key apn working ..
Now I want to have thebroot access in my phone XT1766..
TWRP IS ALREADY ISTALLED ON THE PHONE AS I AM FLASHING LOGOS..
WHAT SHOULD I INSTALLED TO GET ROOT ACCESS ..
SUPER USER ETC.. PLZ SHARE WITH ME..
and the main reason to have the root access is, I want to block or disable OTA update ..
Plz confirm, how will it be possible ..as I downgraded to get working APN But phone updated again now.
I want the phone to be stopped from being updated..
Plz help me out fixing this..
Thanks

danishamini.saifi said:
@madbat99
Everything you shared was perfect I made my own logo to hide bad key apn working ..
Now I want to have thebroot access in my phone XT1766..
TWRP IS ALREADY ISTALLED ON THE PHONE AS I AM FLASHING LOGOS..
WHAT SHOULD I INSTALLED TO GET ROOT ACCESS ..
SUPER USER ETC.. PLZ SHARE WITH ME..
and the main reason to have the root access is, I want to block or disable OTA update ..
Plz confirm, how will it be possible ..as I downgraded to get working APN But phone updated again now.
I want the phone to be stopped from being updated..
Plz help me out fixing this..
Thanks
Click to expand...
Click to collapse
Just don't accept the update. You can root by flashing magisk. You will still receive update notification. You'll need to disable the moto update app. I forget which one exactly. But your phone shouldn't be able to do ota updates once you are rooted with twrp installed. The update will fail.
here is the root thread.

madbat99 said:
Just don't accept the update. You can root by flashing magisk. You will still receive update notification. You'll need to disable the moto update app. I forget which one exactly. But your phone shouldn't be able to do ota updates once you are rooted with twrp installed. The update will fail.
here is the root thread.
Click to expand...
Click to collapse
Thank you. I wish I had known this. I had to flash the stock recovery, etc for the updates to work. A little bit of an unnecessary hastle.

dlinderaz said:
Thank you. I wish I had known this. I had to flash the stock recovery, etc for the updates to work. A little bit of an unnecessary hastle.
Click to expand...
Click to collapse
Ota updates will likely always fail if you have twrp, or have modified the system in any way. The ota performs many checks (assert props) to see if the system is clean. If any asserts fail, the ota will fail. Even restoring the stock recovery doesn't guarantee the ota will work.

Possible brick or semi brick

Well let me explain this question, i bought this device in aliexpress cause i live in mexico, so, my device version is the chinese (this for the network compatibility).
when the new software version roll out i downloaded in the realme web i tried to install it. But i was not able to, so i unlocked the bootloader to try some custom roms, i install the recovery TWRP , and then i downloaded the pixwel experience, before installing i checked and the realme ui update was released, so i tried to install it, but i couldn't cause i had the bootloader unlocked and the custom recovery.
Next thing i did was install the stock recovery, and then i locked again the bootloader, but now the cellphone dont start, it only shows the screen of "The current image (boot/recovery) have been destroyed and can not boot. Please flash the correct image or contact customer service to fix it" .
The problem here is, the recovery dont start and the fastboot its locked and i can't bypass that.
I'm looking for a solution, but i want to know if anyone have solve this before or have any idea to do it. Thanks guys!

well it happened to me same the only way is to take it to realme service center or finde some one who have the oppo realme server to flash it like i did ifound a guy who have an official server the flash my device am from algeria

Update
Irvinukis said:
Well let me explain this question, i bought this device in aliexpress cause i live in mexico, so, my device version is the chinese (this for the network compatibility).
when the new software version roll out i downloaded in the realme web i tried to install it. But i was not able to, so i unlocked the bootloader to try some custom roms, i install the recovery TWRP , and then i downloaded the pixwel experience, before installing i checked and the realme ui update was released, so i tried to install it, but i couldn't cause i had the bootloader unlocked and the custom recovery.
Next thing i did was install the stock recovery, and then i locked again the bootloader, but now the cellphone dont start, it only shows the screen of "The current image (boot/recovery) have been destroyed and can not boot. Please flash the correct image or contact customer service to fix it" .
The problem here is, the recovery dont start and the fastboot its locked and i can't bypass that.
I'm looking for a solution, but i want to know if anyone have solve this before or have any idea to do it. Thanks guys!
Click to expand...
Click to collapse
i´ve been "searching" (not too much to be honest) a way to flash my device, or even easier, to unlock the bootloader, once that is done, i will be able to do the next thing.
There are ways to "force" flashing modifying the hardware (i really don't want to that), other places suggest flashing a vbmeta.img, but i get back to the same, i need the bootloader
im actualy downloading UFI android tool, any update i will post it

Irvinukis said:
i´ve been "searching" (not too much to be honest) a way to flash my device, or even easier, to unlock the bootloader, once that is done, i will be able to do the next thing.
There are ways to "force" flashing modifying the hardware (i really don't want to that), other places suggest flashing a vbmeta.img, but i get back to the same, i need the bootloader
im actualy downloading UFI android tool, any update i will post it
Click to expand...
Click to collapse
well, my research and asking lead me to teh JIG usb to force the download mode, but i need to build it, does anyone have experience with this?

Firstly u need to flash twrp with adb and then use twrp to flash the rom. Then wipe and clean cache and you are done

eni_pog said:
Firstly u need to flash twrp with adb and then use twrp to flash the rom. Then wipe and clean cache and you are done
Click to expand...
Click to collapse
How can i do that with the bootloader blocked?
Can u explain me please?

The solution may be QFI and EMMC download tool, if unbrick the device i'll post a guide

i made a EDL cable that i'm gonna use to try, i don't even know if the device have that mode, i'm actually searching a micro usb to type c usb to try

Irvinukis said:
Well let me explain this question, i bought this device in aliexpress cause i live in mexico, so, my device version is the chinese (this for the network compatibility).
when the new software version roll out i downloaded in the realme web i tried to install it. But i was not able to, so i unlocked the bootloader to try some custom roms, i install the recovery TWRP , and then i downloaded the pixwel experience, before installing i checked and the realme ui update was released, so i tried to install it, but i couldn't cause i had the bootloader unlocked and the custom recovery.
Next thing i did was install the stock recovery, and then i locked again the bootloader, but now the cellphone dont start, it only shows the screen of "The current image (boot/recovery) have been destroyed and can not boot. Please flash the correct image or contact customer service to fix it" .
The problem here is, the recovery dont start and the fastboot its locked and i can't bypass that.
I'm looking for a solution, but i want to know if anyone have solve this before or have any idea to do it. Thanks guys!
Click to expand...
Click to collapse
I think EDL mode flashing stock ROM is a good way, but is there compatible download tool or image? I have ever used Miflash to downgrade my bootloader locked Xiaomi 4c for unlocking bootloader in EDL mode (maybe "fasboot oem edl" ,"fastboot reboot-edl", or "fastboot reboot edl" command).
Unlocking the Mi4c Bootloader: https://forum.xda-developers.com/mi-4c/general/guide-unlocking-mi4c-bl-verification-t3336779
Miflash guide: https://xiaomi.eu/community/threads/miui-10-developer-rom-8-9-13-with-miflash.47542/

Did you get the solution same problem
Well let me explain this question, i bought this device in aliexpress cause i live in mexico, so, my device version is the chinese (this for the network compatibility).
when the new software version roll out i downloaded in the realme web i tried to install it. But i was not able to, so i unlocked the bootloader to try some custom roms, i install the recovery TWRP , and then i downloaded the pixwel experience, before installing i checked and the realme ui update was released, so i tried to install it, but i couldn't cause i had the bootloader unlocked and the custom recovery.
Next thing i did was install the stock recovery, and then i locked again the bootloader, but now the cellphone dont start, it only shows the screen of "The current image (boot/recovery) have been destroyed and can not boot. Please flash the correct image or contact customer service to fix it" .
The problem here is, the recovery dont start and the fastboot its locked and i can't bypass that.
I'm looking for a solution, but i want to know if anyone have solve this before or have any idea to do it. Thanks guys!
did u get the solution bro

Not yet, i have some steps to do it, but now im facing the last step, the file don´t get recognized by the tool, this tool ask for a scatter file, and the one with QFIL, i need a xml firehose fle, and i havent found it

did u get the solution bro[/QUOTE]
What i got is this:
Emergency download: press vol + and vol - then connect it to the pc, the pc will recognize it as port 9008 com in the device manager of your pc, if yor phone reboots u have to disconnect the battery cause the battery forces the reboot of the EDL mode, maybe if you put the phone on EDL mode an then quickly flash would work with out tearing appart the device
Files: you need to install qualcomm drivers (https://gsmusbdrivers.com/download/android-qualcomm-usb-driver/), download the .ofp file of your device (i get if from here https://oppostockrom.com/oppo-realme-x-rmx1901 ), then you need to download the tool you will use
here is where things are gonna get a bit harder
MSMDownload: this is the official tool, it came withe ofp file from the link i put before, the proble is you need a user and password, i haven't found where to get one official, its from oppo workers i guess
There is a cracked version, but don't recognizes the file
QFIL: its for qualcom devices (found it here https://androidmtk.com/download-qualcomm-flash-image-loader-qfil), this will let you flash every qualcomm device (or thats what they tell you), it shows the port, but ask for a xml file and a programer path (thing that i haven't found it yet)
Cracked MSMDownload: i found this https://www.techoxygen.com/msm-download-tool/ , https://romprovider.com/2020/02/flash-qualcomm-devices-using-msm-download-tools/, or this https://www.youtube.com/watch?v=0CKsEOfGGaQ
now, in my case the file its not recognized, it says incorrect scatter file, from here you can start diggin around, if you solve this please let me know

What i got is this:
Emergency download: press vol + and vol - then connect it to the pc said:
https://gsmusbdrivers.com/download/android-qualcomm-usb-driver/),[/url] download the .ofp file of your device (i get if from here https://oppostockrom.com/oppo-realme-x-rmx1901 ), then you need to download the tool you will use
here is where things are gonna get a bit harder
MSMDownload: this is the official tool, it came withe ofp file from the link i put before, the proble is you need a user and password, i haven't found where to get one official, its from oppo workers i guess
There is a cracked version, but don't recognizes the file
QFIL: its for qualcom devices (found it here https://androidmtk.com/download-qualcomm-flash-image-loader-qfil), this will let you flash every qualcomm device (or thats what they tell you), it shows the port, but ask for a xml file and a programer path (thing that i haven't found it yet)
Cracked MSMDownload: i found this https://www.techoxygen.com/msm-download-tool/ , https://romprovider.com/2020/02/flash-qualcomm-devices-using-msm-download-tools/, or this
now, in my case the file its not recognized, it says incorrect scatter file, from here you can start diggin around, if you solve this please let me know
Click to expand...
Click to collapse
Hi man , did you try this method?

devilkar said:
Hi man , did you try this method?
Click to expand...
Click to collapse
yeah, i tried, but my bootloader its blocked

zaki789 said:
well it happened to me same the only way is to take it to realme service center or finde some one who have the oppo realme server to flash it like i did ifound a guy who have an official server the flash my device am from algeria
Click to expand...
Click to collapse
Hi bro i from algeria too can you tell where you flashed your phone, please adresse phone number any help, thank you