[Acer Iconia A500] Oberkellner:
Tutorial - Flash ICS v9 Bootloader manually under Linux.

I am writing this tutorial, because I was unable to replace the HC 3.01 bootloader under Windows with the ICS Bootloader.

This is a translation from the German tutorial at Android-Hilfe.de written by me (aka Brickerl).

Preparation: Tablet must be in APX Mode.

Turn your table off!

Use a paper clip and press the Reset Button softly. You can feel a soft resistance.

As you press the Reset button hold also the Power button. Do this 3 seconds long.

Now release the power button and the paper clip.

The light of the powerbutton glows now white (at least it does for me) und the display is black.

Files needed (see attachment):

bct.bct

flash.cfg

nvflash for Linux

bootloader_apx.bin

bootloader_v9.bin

Your SBK number!

We write a script. I call it a500.sh.

Make a new file. e.g. with vi.

vi a500.sh

Write this into the script file.

#!/bin/sh
./nvflash --bct bct.bct --setbct --bl bootloader_apx.bin --configfile flash.cfg --odmdata 0x300d8011 --sbk 0x12345678 0x12345678 0x12345678 0x12345678 --sync

Modify your SBK.

Make the file executable.

chmod +x a500.sh

Execute the scipt as root. Dont worry there is no flashing yet. If there are some status messages all is ok. Otherwise cancel NOW or your tablet is bricked afterwards.

The status messages can look like this.

# ./a500.sh
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 4
chip sku: 0x8
chip uid: 0x0xxxxxxxxxxxxxx
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0

sending file: bct.bct
- 4080/4080 bytes sent
bct.bct sent successfully
odm data: 0x300d8011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader_apx.bin
| 714981/714981 bytes sent
bootloader_apx.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully

Step 5:

Now the actual flashing begins. We add 3 lines to the script.

#!/bin/sh
./nvflash --bct bct.bct --setbct --bl bootloader_apx.bin --configfile flash.cfg --odmdata 0x300d8011 --sbk 0x12345678 0x12345678 0x12345678 0x12345678 --sync
[B]./nvflash -r --format_partition 4
./nvflash -r --download 4 bootloader_v9.bin
./nvflash -r --go
[/B]

The output can look like this:

# ./a500.sh
Nvflash started
rcm version 0X20001
System Information:
chip name: t20
chip id: 0x20 major: 1 minor: 4
chip sku: 0x8
chip uid: 0x0xxxxxxxxxxxxx
macrovision: disabled
hdcp: enabled
sbk burned: true
dk burned: true
boot device: emmc
operating mode: 4
device config strap: 0
device config fuse: 0
sdram config strap: 0

sending file: bct.bct
- 4080/4080 bytes sent
bct.bct sent successfully
odm data: 0x300d8011
downloading bootloader -- load address: 0x108000 entry point: 0x108000
sending file: bootloader_apx.bin
| 714981/714981 bytes sent
bootloader_apx.bin sent successfully
waiting for bootloader to initialize
bootloader downloaded successfully
[B]Nvflash started
[resume mode]
Formatting partition 4 please wait.. done!
Nvflash started
[resume mode]
sending file: bootloader_v9.bin
| 1191932/1191932 bytes sent
bootloader_v9.bin sent successfully
Nvflash started
[resume mode]
[/B]

Ready. On the device „Pass“ is displayed and it can be rebooted.