SBF

SBF seems to stand for Single Binary File, containing the firmware image. None of the SBFs contain a subsidy lock and flashing a SBF will not unlock the phone. These files could be flashed into the milestone via RSD Lite Interface. The updates of thes page can be seen above the download page links.

The device should be put into Bootloader Mode and then attached via USB to the PC. After the PC recognizes the phone, you could use this programs for flashing the SBF to your Milestone.

SBF-Recalc

The latest SBF-Recalc (1.2.9.1) is available for windows here 1): http://www.megaupload.com/?d=Y8RDIZGA
Previous version 1.2.9 for windows and OS X: http://www.megaupload.com/?d=7J9EOZT0
Previous version 1.2.9 for Linux 2): http://www.megaupload.com/?d=03M0GM36
Note: Everything works except checksums recalculating. RSD Lite prints the correct ones in its log though, so the SBF file can be edited by hand to use those CRC codes if really needed (by tryout & error).

SBF / MBN Depacker

The latest version (1.3) is availabe for .NET 3.5 here 3): http://rapidshare.com/files/453821014/MotoAndroidDepacker.zip
Mono version: http://rapidshare.com/files/453821032/MotoAndroidDepackerMono.zip

Supports repacking for the Milestone SBF, including the checksum recalculation.

Comments

Flashing the “Service” version will not wipe userdata partition. Looking on the flex version (ro.gsm.flexversion): B1B8 is for WCDMA 900 / 2100 and B1B2B5 is for WCDMA 850 / 1900 / 2100, some firmwares doesn't have that string in the flex version, so it cannot be determined from that (All Latin American firmwares and Retail Thai are WCDMA 850 / 1900 / 2100).

Flashing an SBF file from a different country could cause problems with cellular communications. For example, some people have applied the HK SBF in Europe and in Latin America and their phones stopped working with 3G (due to different frequencies, presumably).

Here's an attempt to parse the firmware filename structure with an informal shell/re syntax: ${ro.build.id}_${ro.gsm.flexversion}_${ro.build.config.version#3}_${ro.build.config.version#4}_A[0-9][0-9][0-9]_HWp2a_{Service|}1FF.sbf

RSD web service

Officially distributed builds are exposed by a public web service at https://rsd.motorola.com/cs/servlets/SRPConsumerServlet used by Motorola's end-user update tool. Motorola's internal service tool use a similar service at https://rsd.motorola.com/cs/servlets/SRPServlet, but it appears to be restricted to authorized sessions.

Request
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/">
 <soap-env:Body>
  <srpmessage>
   <srpoperation>
    <fungrp></fungrp>
    <opcode></opcode>
    <parameterlist>
     <parameter><name></name></value></parameter>
    </parameterlist>
   </srpoperation>
  </srpmessage>
 </soap-env:Body>
</soap-env:Envelope>

Known functions

Function fungrp opcode Parameter name Parameter value
MSU version check 02 01 consumerclientversion Version string, e.g. C01.11.79
Use_case_set Inapplicable
countrycode Three-letter code
USB driver version check 02 05 hardware 00
OS Four-digit MS Windows version, e.g. 0601 for Win7
driverversion Version string, e.g. DD04.05.00
Warranty status 07 13 serialnumbertype IMEI
serialnumber IMEI string
Firmware version check 10 01 flex ro.gsm.flexversion
firmware ro.build.id+gsm.version.baseband
apversion ro.build.id+gsm.version.baseband
apsetup Inapplicable
apresourceflex Inapplicable
aplogo Inapplicable
apsecuresetup Inapplicable
rofs Inapplicable
rofsextension Inapplicable
apflex ro.build.config.version
bootloader Four-digit version, eg. 9073
lang Inapplicable
kjava Inapplicable
pri Inapplicable

The only parameter required for firmware version checks is flex. The service will only respond successfully if the query is unambiguous and matched phone model is cleared for user upgrades. (see Known return codes)

Known return codes

fungrp opcode operation status Returned message Comment
06 50 00 success Update URL to .sbf included in return xml scheme
06 50 01 Cannot ID the phone as the flex is blank.
06 50 02 No Phone found with the given phone parameters
06 50 03 Multiples phones found with the same configuration. This needs to be investigated, since the rsd servers reply this for some phones. For example for a brazilian Milestone with flex version USASHLSRETBRLA02C.0R (Vivo). Trying to fetch .sbf files from the servers for the DroidX shows the same results. (Note - for NA queries, you must always supply firmware version along the flex, otherwise you get the Multiples phones found with the same configuration. as result, even if the flex version is invalid (like just NA).)

Example queries

GB Retail (SM1658AXXB1)

$ curl -H 'Content-Type: text/xml' -d '<?xml version="1.0" encoding="UTF-8"?>
<soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/">
<soap-env:Body><srpmessage><srpoperation><fungrp>10</fungrp><opcode>01</opcode><parameterlist>
<parameter><name>flex</name><value>UCASHLSEMEAB1B803F.0R</value></parameter>
<parameter><name>apflex</name><value>GAS_EMEA_USASHLS00RTGB_P008</value></parameter>
</parameterlist></srpoperation></srpmessage></soap-env:Body></soap-env:Envelope>' \
https://rsd.motorola.com/cs/servlets/SRPConsumerServlet

CA Telus (81130CHEPA)

$ curl -H 'Content-Type: text/xml' -d '<?xml version="1.0" encoding="UTF-8"?>
<soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/">
<soap-env:Body><srpmessage><srpoperation><fungrp>10</fungrp><opcode>01</opcode><parameterlist>
<parameter><name>flex</name><value>USASHLSTLSB1B2B5051.0R</value></parameter>
</parameterlist></srpoperation></srpmessage></soap-env:Body></soap-env:Envelope>' \
https://rsd.motorola.com/cs/servlets/SRPConsumerServlet

OTA updates

Just downloaded on phone in /cache/fota/update.zip and have this structure:

  • CERT.RSA
  • CERT.SF
  • MANIFEST.MF
  • binary_firmware_file
  • boot.img
  • bp.img
  • mbm.img
  • cdt.bin
  • lbl.bin
  • logo.bin
  • install-recovery.sh
  • recovery-from-boot.p
  • updater-script
  • mtd.cfg

CERT.SF - contain sha1 digest of all files in update.zip

CERT.RSA - certificate ASN1.DER ( parsed struct http://pastebin.ca/1849789 ). It parsed by command “openssl asn1parse -inform DER -in CERT.RSA”

If any files unneeded in update - update.zip does not include this file. This is a sample OTA update package(SHOLS_U2_01.03.1_to_SHOLS_U2_01.14.0_REQ563): update.zip

Retail SBF Files

Updates

03/10/2011: Added Milestone 2 Chinese Gingerbread leak firmware (4.5.3-109)
10/04/2011: Added Claro Brazil firmware Milestone 2.2.1 (SHLA_U2_05.15.0)
01/04/2011: Added French and Latin American Milestone 2.2.1 firmwares
25/03/2011: Added XT711 2.1 firmware, Flipout 2.1 firmwares and Milestone 2.2.1 Brazilian firmware
24/03/2011: Added African 2.2.1 firmware (SHOLS_U2_05.27.5), Vivo Brazil 2.2.1 userdebug firmware, Defy T-Mobile DE firmwares
22/03/2011: Added O2 DE Defy firmwares and updated T-Mobile Defy firmware
21/03/2011: Added several Milestone 2.1 and 2.2.1 firmwares
18/03/2011: Added several Milestone 2.1 and 2.2.1 firmwares
17/03/2011: Added Era Poland Defy firmware
15/03/2011: Added several Milestone 2.2.1 firmwares
14/03/2001: Added Milestone 2.2.1 RTEU (5.26.3) and Arabia (5.27.2) firmwares
13/03/2011: Added a bunch of Defy firmwares
10/03/2011: Added Milestone O2 DE 2.2.1 firmware (5.26.0)
08/02/2011: Added Orange Poland Defy firmware
31/01/2011: Added Defy and Flipout Central Europe firmware
20/01/2011: Added Milestone 2 Vodafone Australia firmware
17/01/2011: Added Milestone 2 Brazil firmware
10/01/2011: Added China Defy 2.2 firmware
02/01/2011: Added AT&T Flipside firmware
17/12/2010: Added Optus AU Milestone 2 firmware
26/11/2010: Added Defy DE, AT, CH firmware
25/11/2010: Added Milestone 2 RTDACH, O2 DE and UK firmwares
12/11/2010: Added Droid 2 bootloader flash
07/11/2010: Added a bunch of XT720 firmwares and Arabia MR2.5 firmware for Milestone
05/11/2010: Added Ruth Central Europe firmware (w/o Motoblur)
30/10/2010: Added Defy France firmware
28/10/2010: Added Defy UK firmware
26/10/2010: Added Flipout and XT720 UK firmwares
19/10/2010: Added Milestone Turkish firmware
08/10/2010: Added Milestone SHLA_U2_03.06.2 for Movistar Latin America firmware
01/10/2010: Added XT711 bootloader and firmware; Milestone A854 firmware
28/09/2010: Added XT720 Russian and US firmwares; MB502 T-Mobile US firmware
25/09/2010: Added Milestone SHOLS_U2_02.34.3 Optus Australia firmware
19/09/2010: Added Milestone SHOLS_U2_02.36.2 Starhub Singapore firmware
15/09/2010: Added Milestone 02.38.1 Spain firmware and SHOLS_U2_02.27.9 & SHOLS_U2_02.27.B Russian firmwares
14/09/2010: Added Milestone SHOLS_U2_02.36.0 UK firmware and Droid 2.2 firmware
13/09/2010: Added Droid 2 firmware and bootloader and Milestone XT720 Italian firmware
09/09/2010: Added Milestone French SHOLS_U2_02.38.1 firmware
03/09/2010: Added XT720 Central Europe firmware
23/08/2010: Added Flipout Italian firmware
11/08/2010: Added Milestone Telus SHOLS_U2_03.11.0 firmware
07/08/2010: Added Droid X firmware (604)
03/08/2010: Added Milestone XT720 firmware for South-East Asia (STR_U2_01.18.2)
28/07/2010: Added Blur_Version.0.18.4.ME511.ChinaRetail.en.CN and bootloader for ME511
24/07/2010: Added STR_U2_01.18.2 (Singapore) for XT720
23/07/2010: Added SHOLS_U2_02.38.0 (Italy)
21/07/2010: Added SHOLS_U2_02.36.0 (DACH, O2 DE, VF DE)
16/07/2010: Added XT800 firmwares and Droid X bootloaders
11/07/2010: Added Thai 02.36.0 firmware
10/07/2010: Added bootloader 90.78ch and new XT702 firmware
05/07/2010: Added SHOLS_U2_02.36.0 (Starhub SG)
01/07/2010: Added SHOLS_U2_02.36.0 (Central Europe, Southeast Asia)
21/06/2010: Added SHOLS_U2_02.27.6 (Israel)
09/06/2010: Corrected - XT701 firmwares are Taiwan.
09/06/2010: Corrected - XT701 firmwares are not signed.
06/06/2010: Added XT701 new 2.1 Taiwan firmware and bootloader 80.99
31/05/2010: Added XT701 new 2.1 firmware and bootloader 80.98
26/05/2010: Added SHOLS_U2_02.34.3 (Hong Kong / Maccau); SHLA_U2_03.05.0 (TIM Brasil, Service Version only)
26/05/2010: Initial creation.

Downloads

Custom SBF Files

Vulnerable Recovery SBF Flash

This SBF file will flash only the vulnerable recovery from 2.0.1 without modifying other partitions.
Download (Milestone): MediaFire
Download (XT800): Droid-Developers

2.1 kernel fix of scheduled CPU wake-ups

This SBF file will flash only the boot.img (kernel+init) from SHOLS_U2_03.10.0: mediafire, rapidshare

1) see http://modmymoto.com/forums/showthread.php?t=525344 for the original post by its author and for Linux/OS X versions
2) According to the developer you need libstdc++5 for the linux version

SBF Firmwares

Skrilax_CZ, 2010/08/07 17:09

So anybody did some digging in the Droid X firmware? There is a game NFS Shift in the preinstall ext3 image partition (for those with APPS2SD).

alaa khanjar, 2010/09/05 19:42

i have 2 phones milestone and and motoroi 1st question y there is no rom that support Arabic language for motoroi 2nd question is the official froyo for milestone out yet thank you in advanced

wissam muslimany, 2010/09/22 19:25

i have a bricked motorola charm MB502 :-( telus ROM ,can anyone please upload the sbf file for it, i tried everywhere i even tried motorola support but no support was given :(

Skrilax_CZ, 2010/10/01 14:13

Well I have uploaded T-Mobile ROM for MB502 at least, don't have the Telus one.

wissam muslimany, 2010/10/15 13:04

many thanks :) , its working , do u have the arabic rom : BASEM_U3_01.13.0EPU93_U_02.33.00 , USABASIL01RINT150AI015.0R

chosangho, 2010/10/29 12:38

thanks…but plz add korean milestone sbf firmware… sorry for my poor English

sicat, 2010/11/19 05:15

i actually have a very weird/different question.

i bought the milestone online because i thought we werent getting it in canada so therefore i have the uk version. and so my 3G doesnt work here due to different frequency(wanted a new phone too much to care). and i realized you were talking about how if they flashed HK version for a different country it doesnt work because its as if it replaces their original frequency?

So my question is if i flash mine with the canada version where i actually am (different build number) does that mean i can use 3G here. or do i end up just messing up my phone ?

thanks and much appreciated, sicat

UPDATE.. i decided to go through with it. and it loaded everything fine and now my build number is the same as the sbf i downloaded. but now i have no signal. no idea how to fix. help plsss..

i would flash the uk version if i have to its just i cant unzip the gzip file i only manage to do it once.. and so it still ends with .sbf.gz .

Brent, 2010/11/19 20:43

I have an Alltel Milestone A854 using CDMA and android 2.1 update 1.

I was able to flash the phone using MILER_X1_00.26.0 version of the sbf but after rebooting, all of my settings were lost on my phone, MDN/MIS/PRL. I was able to fix the MDN and MIS but the PRL, from my knowledge, can only be set from the home location (which i cant get to). But, the sbf somehow changed it to 11111. Is there anyway to change my prl back to what its supposed to be?

Also, to top it off, i rebooted and tried doing the apply update from SD card and it failed due to incorrect signature.

Any suggestions?

seven, 2010/11/26 16:13

What is the diference between the firmware 2.1(service version) and 2.1 for milestone?Which is better?

red sensei, 2010/12/16 12:43

Milestone SBF Flashfiles (A853, XT702)

Model : France

Provider : Virgin Mobile

There is a problem within this file. The Azerty layout is wrong for the physical keyboard : A and Q are reversed. Every other keys are ok.

2.2.1 (G.O.T. Beta version) France SHOLS_U2_05.06.0 900 / 2100 Vulnerable Recovery G.O.T. N/A N/A Vulnerable Recovery included. AZERTY keyboard layout. N/A

Kevin Garvington, 2011/01/07 19:02

I'm still looking for a TELUS ROM for the Charm. There's been a TELUS software update for the Charm: http://www.telusmobility.com/en/ON/motorola_charm_support/trouble09.shtml, so there must be an SBF somewhere! Thanks!

melkor76, 2011/02/01 15:11

Hi Skrilax_CZ and all the and-devs team. Your job is amazing.

I got two Milestones bricked in a strange way:

- Both are SJUG5605A HW (mmj 0R2 B90, made in china)

- None of them complete the boot process, stick in M logo and re-start over and over. But I could put them into BootLoader mode and use RSDLite to reflash (I'd already try some of the SBF files from this forum)

- In one sample is not possible to get into Recovery Mode, the other one it's ok in this and I could load OpenRecovery and other ROMs, but it doesn't complete the boot.

I guess that both samples has some corrupted images. Is there a way to completely erase the ROM and reflash from zero? Maybe some “blanking” sbf files to erase the phone before to load a valid 1FF.

Thanks a lot in advanced. (and excuse my English, I'm from LatinAm)

Gaston, 2011/02/16 21:47

Anybody working on recovering the Milestone sbf's?

Moto had been working hard onto removing traces on the internet of them, but you nothing can be complete erased form the internet, nuttin moto :-D

I would like to have at hand the retail brazilian sbf for 2.1

Jonathan Fuchs, 2011/02/17 09:52

There is a problem with the server. I tried to download the newest Defy sbf DE/AT (2.1; DE, AT, CH; JRDNEM_U3_2.21.0) and I got the notification “NOT FOUND” “The requested URL /download/JRDNEM_U3_2.21.0_SIGNED_UCAJRDNEMARAB1B80AA028.0R_USAJORDANRTDACH_P017_A003_HWp3_Service1FF.sbf.gz was not found on this server.” can anybody help? tx

alaa khanjar, 2011/03/18 19:02

the froyo arabia rom for milestone is not mirror SHOLS_U2_05.27.2_SIGNED_UCASHLSMR2EMEAB1B806E.0R_PDS003_USAMS1FRYORTARAB_P013_A011_HWp2a_WIG146134_1FF.sbf.gz

plz guys any one has the link

Skrilax_CZ, 2011/03/21 17:11

That sbf isn't online yet.

Skrilax_CZ, 2011/03/25 01:54

SHOLS_U2_05.27.5 added.

Android Gold, 2011/04/12 20:43

Seems the links for the 90.78ch bootloader are not working on this page:

http://and-developers.com/sbf:milestone

The links go to: https://www.droid-developers.org/files/uploads//BL_9078_umts_sholes_GC_HS_Consumer_replacer.zip but this just takes you to the HOME page.

I see above (above this thread): “10/07/2010: Added bootloader 90.78ch and new XT702 firmware”

Can someone please correct this (or send me the cracked 90.78ch bootloader?) Thanks

Marcio, 2011/04/15 13:31

Some of the Defy firmware links are not working… could you check that please? Also, were you able to find any Latin America (Brazil, Argentina…) SBFs?

Mart Y, 2011/05/05 17:40

Hi all… I have got an A1680 (android phone in greater China) with android 1.6. While A1680 with froyo has now been released in Taiwan/HK, no upgrade file is available. Can anyone share the link for the sbf files of A1680? The filename should either start with/contain “E28.0006_A”, “MOTO.0010_A”, or probably just “A1680”

Thank you very much for your kind help.

ensonyan, 2011/05/18 06:56

A1680 in taiwan or HK,Build number is MOTO.0010_A2.2_01.20R

Mart Y, 2011/05/21 18:06

One more information that might be relevant… when connecting a switched-off A1680(mainland China version) to computer via USB with “volume down” pressed, the device name is displayed as TAVOR (though it seems to be CPU codename).

Thanks all.

David Jaramillo, 2011/06/17 07:24

someone can help me with the baseband WCDMA 850/1900

my phone is this

System version: Blur_Version.2.3.9007.mb502.t-mobile.en.us

Firmware Version: 2.1 update 1

Baseband Version: EPU93_U_02.3B.02

Build Version: BASIL_U3_03.90.7

thanks for your help

Mart Y, 2011/06/26 05:39

By the way, is there any special method for entering this website? https://rsd.motorola.com/cs/servlets/SRPConsumerServlet

Always get this error: “HTTP method GET is not supported by this URL

Thanks for your kind help.

Jim Mangan, 2011/09/22 03:37

Has anyone been able to locate the SBF for the Milestone X by Appalachian Wireless? Cant find it anywhere.

Rodrigo Fuentes, 2012/03/09 02:01

Excelent program! Could you add the Droid Pro XT610 to a new version of the program? Thank you very much!

xar xes, 2012/04/07 21:28

:( Recovery Disappeared :(

After SBF; my D2G won't let me to recovery ~ stuck at the M LOGO I tried everything including X+Power but it's as if Recovery is fried , it's lost.. Is it possible that the Keyboard is burned? Is there any other way ; any other key or button combination to boot into recovery? Maybe ADB Shell SU from off power?

So far only Software Upgrade mode works ( BootLoader Mode ) ; VolumeUp+VolumeDown+Power

I need another way of entering stock recovery ( other than Xkey+PowerButton )

Please help..

P.S. Why do they call RSD Lite? Is there a non-lite full version which may let me boot into recovery using the computer and USB cable?

Thank you in advance

Skrilax_CZ, 2012/04/17 11:12

Pages are currently being deprecated as the firmwares can be found here http://sbf.droid-developers.org/

Luke Smith, 2012/04/27 22:10

I have been told to flash an sbf file because my phone keeps randomly rebooting. I have looked through them and have no idea what one to use.

Motorola Milestone Android Version: 2.2.1 Baseband Version: 3GSMEPU91A_U_91.09.04I Provider: Unlocked with Virgin SIM (originally T-Mobile)

I am in the UK and would like your help please. Thank you :)

Andre, 2012/07/02 11:22

There is a tool which can unlock these smartphones:

Motorola: MB200 Cliq, MB200 / MB220 Dext MB300 Backflip MB501 Cliq XT, ME501 Quench ME600 Motus, ME600 Backflip XT300 SPICE, XT311 FIRE, XT316 SPICE Key, XT316 MOTO, XT317 FIRE, XT319 MOTO, XT320 DEFY MINI, XT321 DEFY MINI XT530 FIRE XT, XT531 SPICE XT, XT531 MOTO, XT532 MOTO, XT535 DEFY XT XT615 MOTOLUXE, XT615 MOTO, XT615 MOTOSMART PLUS

http://sigmakey.com/en/Sigma-Overview/Supported-Models.html

johan, 2012/07/03 20:57

Hi there can someone please please help me bought a phone online after a couple of months did a hard reset now the fone is not working and the phone is from over seas somewhere no as im reading i need to install a rom from south-africa because im living in south-africa could someone tell me if that is correct and how and were to get everything please.

You could leave a comment if you were logged in.
sbf.txt · Last modified: 2011/10/03 23:56 by dangpzanco
 
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Noncommercial-Share Alike 3.0 Unported
Recent changes RSS feed Donate Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki