101 replies to this topic

[Jurij]

You don't even know what you've flashed to your phone? Fantastic

 

Do you have trim area backup from your phone from working state?

[riki03]

You don't even know what you've flashed to your phone? Fantastic

 

Do you have trim area backup from your phone from working state?

Yes. I have my phone TA.img

[Jurij]

Post it here then, i can make a fixup script for you.

[riki03]

Post it here then, i can make a fixup script for you.

Thanks so much, i'll pay you a coffe give me by PM your paypal adress.

Pay attention at theese last operation please.

 

XDA USER:

 

Hi again

 

after so many try to unbrick my lt25i 

 

finaly i got it

 

the prolem was becuase of  wrong TA data  (i flashed another TA on my phone )

therefore i got this error :  [ 0x0508:_sin_header_verification, err: 000A ]

but How?

this is the story:

i just have TA backup in " .ta (text)" format (using FlashTool S1 Dump in Advance menu -> Trim Area)

 

but how use it in S1Tool??

after some study in this thread (on posts #201 to #211 of this thread)

and download the script that user  @

Please Login or Register to see this Hidden Content

made for  another user @

Please Login or Register to see this Hidden Content

 

 

i Extracted (zip) that script an found 7D3.gdfs , 7DA.gdfs and 851.gdfs ,,,, then  opened them with notepad

and compared with 2.ta from S1 dump of  my Device.

i find  7d3 ,7da,851 lines in 2.ta  too

from script file of Sony SP:
tawrite:00020[B][U]7d3[/U][/B][COLOR="Red"]0353494E000004000000002 . . . . .[/COLOR]
tawrite:00020[B][U]7da[/U][/B][COLOR="red"]F648C1307F7E05891D3FE03 . . . . . .[/COLOR]
tawrite:00020[B][U]851[/U][/B][COLOR="red"]02000907DA270F0015024E0 . . . . .[/COLOR]
 
from  2.ta file of Sony V:
 
02
000007D2 0001 01
00000[B][U]7D3[/U][/B] [COLOR="Lime"]05CE[/COLOR] [COLOR="Red"]02 00 00 00 03 FC 04 00 00 00 00 00 00 00 29 . . . . .[/COLOR]
00000[B][U]7DA[/U][/B] [COLOR="Lime"]0287[/COLOR] [COLOR="Red"]9E 2B 0C FB 72 37 68 54 76 E7 15 D4 BA 9C 8E . . . . . .[/COLOR]
.
.
.
00000[B][U]851[/U][/B] [COLOR="Lime"]03CA[/COLOR] [COLOR="Red"]02 00 09 07 DA 27 0F 00 15 02 4E 00 03 BC 00 . . . . .[/COLOR]
.  . .
. 
.

but the number  (count) of data after 7d3 and 7da in gdfs script was different from 2.ta file (i think because they are different phone type)

, 851 data was not same in data but same in number

 

now what u think ?  a little risk? again?

 

ok i made another script with my own TA data

first use c# and wrote simple app to remove spaces of  data(red area) in each field(under lined)

then open each script and replace new data, i mean this:

7d3.gdfs:
tawrite:00020[U][B]7d3[/B][/U][COLOR="DarkOrange"]0200000003FC040000000000 . . . . . [/COLOR]
 
7da.gdfs:
tawrite:00020[U][B]7da[/B][/U][COLOR="darkorange"]9E2B0CFB7237685476E715D . . . . . [/COLOR]
 
851.gdfs:
tawrite:00020[U][B]851[/B][/U][COLOR="darkorange"]02000907DA270F0015024E0 . . . . .[/COLOR]

 

now it's time to repack it.

i putted all file to zip archive   and changed  zip  to   sin_file_set

OK connect test point and flow the instruction in first post ,, but now use the file that recently created

 

after that i could write Boot on my phone

All Done .

 

Thanks to all member of xda  Specially @

Please Login or Register to see this Hidden Content

for his Sofware  and script and helps

 

here is  S1Tool Log:

 
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
 
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
 
will use DLOAD protocol ... 
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3       OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
 
Emergency loader uploaded ...
 
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
llbug: blk write fail.fatal
can't send S1 command data [00000006/00000007]
error while uploading DATA block [000001/000001]
LOADER NOT STARTED
Elapsed:99 secs.
 
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
 
TO CONNECT NEXT PHONES
X10 Xperia,E10 Mini,E15 Xperia X8,U20 Mini Pro
LT15 Xperia ARC,MT15 Xperia NEO,R800 Xperia PLAY
PRESS AND HOLD "BACK" BUTTON...
 
ST18 Xperia RAY,ST15 Xperia Mini,SK17 Xperia Mini Pro
and Sony Xperia phone
PRESS AND HOLD "Volume Down" BUTTON...
 
PLEASE ATTACH TURNED OFF PHONE NOW
Waiting for phone ...
PROCEDURE STOPPED BY USER
supported phone was not detected
Elapsed:260 secs.
 
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
 
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
 
will use DLOAD protocol ... 
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3       OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
 
Emergency loader uploaded ...
 
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: F9E5CF03
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"
 
WRITING PACKAGES ...
Processing package
C:\Users\AbdoRahman_Amani\Desktop\R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN_FILE_SET
 
Processing ACPU files
PROCESSING: R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN
ERROR [ 0x0508:_sin_header_verification, err: 000A ]
HDR block not accepted
Break.
ERROR [ S1_TA_Close,limited, err: 0010 ]
FINISHED
Elapsed:29 secs.
 
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
 
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
 
will use DLOAD protocol ... 
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3       OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
 
Emergency loader uploaded ...
 
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: F9E5CF03
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"
 
WRITING PACKAGES ...
Processing package
C:\Users\AbdoRahman_Amani\Desktop\TA-backup-20140301.101415.sin_file_set
 
package not contains ACPU files.
Processing update files
PROCESSING: 7d3.gdfs
Writing TA var 0002/07D3/05CE
PROCESSING: 7da.gdfs
Writing TA var 0002/07DA/0287
PROCESSING: 851.gdfs
Writing TA var 0002/0851/03CA
FINISHED
Elapsed:155 secs.
/*
*      ^^^^^^^
*      |||||||
*  writeing TA fields
*----------------------
*  writeing boot
*  ||||||||
*  ????????
*/
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
 
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
 
will use DLOAD protocol ... 
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3       OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
 
Emergency loader uploaded ...
 
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: F9E5CF03
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"
 
WRITING PACKAGES ...
Processing package
C:\Users\AbdoRahman_Amani\Desktop\R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN_FILE_SET
 
Processing ACPU files
PROCESSING: R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN
no update files in package
FINISHED
Elapsed:55 secs.
 

 hit thanks if it was useful

 

 

 

ME:

 

Hi, I hope somebody can help me.

I didn't understand how you get text file from your TA.img backup.

I have the TA backup of my phone lt25, I would kindly ask if every lt25 have the same TA or are different because I don't know what is it, i'm a noob about this.

Anyway I used the Tool for converting TA.img founded the link to another thread, and i have obtained the sin unbricked file to flash with s1tool.

Than I lunch s1tool 2015 with EDL MODE and i flashed that file.

This is what i get.

Welcome S1 Tool [19.05.2015].
That is small and crippled subset of SETOOL2 service tool.
 
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
 
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
 
will use DLOAD protocol ... 
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3       OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
 
Emergency loader uploaded ...
 
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: 96887E09
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"
 
WRITING PACKAGES ...
Processing package
C:\Users\rikic\Desktop\Unbrick Xperia V\MSM8960\TA_unbrick.SIN_FILE_SET
 
package not contains ACPU files.
Processing update files
PROCESSING: 02.ta
Writing TA var 0002/07D3/05CE
ERROR [ S1_TA_WriteUnit,06_:_TA_write_unit_failed, err: 0026 ]
Fail
Writing TA var 0002/0851/03CA
ERROR [ S1_TA_WriteUnit,limited, err: 0010 ]
Fail
Writing TA var 0002/07DA/0287
ERROR [ S1_TA_WriteUnit,limited, err: 0010 ]
Fail
ERROR [ S1_TA_Close,limited, err: 0010 ]
FINISHED
Elapsed:126 secs.

Thanks in advance.

 

And this is the link to my TA.img on my GDRIVE.

Please Login or Register to see this Hidden Content

 

Regards

Edited by riki03, 16 April 2017 - 19:07.

[riki03]

Post it here then, i can make a fixup script for you.

UP Please

[Jurij]

Yeah, i remember about your trim area, but have no time recently. I will try to do that tomorrow, Sorry for delay

[Jurij]

Sorry for delay, but better later than never

 

Here is security units fixup file for Xperia V LT25i IMEI number: 35510105844541   TA-backup-35510105844541.rar   2.92K   66 downloads

[agusq]

my lt25i usb driver not detec with test point. i use titorial and change the cable data and pc but its same no driver detec. only red indicator show 30 second.please help

[Jurij]

Maybe you are not connecting testpoint properly. Try to change wire, usb port, usb cable. What happened to the phone? If was for example water damaged, you must clean the main board first. Not enough informations i'm affraid

[agusq]

testpoint i try with ur picture in tutorial and i was change the usb cable. usb port with other pc but nothing. only the red indicator show if the usb cable pluged. i think the xperia not voltage coz i try with power supply no response.

[Jurij]

Phone should be detected with testpoint without battery connected. I still do not know how did you killed your phone, so i can't help you more. Visit good service centre, they will inspect your phone then.

[agusq]

at least after clean mainboard, device can detec in computer but any errors with emergency flash above. any solution jurij? thanks

Attached Files

•  tmp-cam-2109965686.jpg   114.09K   1 downloads

[Jurij]

So phone was water damaged? Did you cleaned it properly with isopropanol / ethanol and left it for dry? You should be able to flash it without battery using testpoint. But in some cases you can attach charged battery before pressing testpoint ready button if for example there is not enough power from usb port.

 

P.S.

 

You can copy log file and paste it on forum. S1tool create folder with logs automatically

[riki03]

Reminder for TA. I'm still waiting

[Jurij]

It's done long time ago: http://sony.yt/topic...ge-3#entry46192

[riki03]

It's done long time ago: http://sony.yt/topic...ge-3#entry46192

O my god.. the problem continue

 

Welcome S1 Tool [28.02.2015].
That is small and crippled subset of SETOOL2 service tool.


SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...


DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE


will use DLOAD protocol ... 
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3       OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"


Emergency loader uploaded ...


RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: 96887E09
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"


WRITING PACKAGES ...
Elapsed:35 secs.


SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...


DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE


will use DLOAD protocol ... 
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3       OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"


Emergency loader uploaded ...


RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: 96887E09
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"


WRITING PACKAGES ...
Elapsed:20 secs.

Edited by faflak, 19 May 2017 - 10:04.

[Jurij]

Use current S1tool and check skip ta open errors option.  s1tool 19V2015.exe   3.52MB   2956 downloads

[riki03]

Use current S1tool and check skip ta open errors option.

Welcome S1 Tool [19.05.2015].
That is small and crippled subset of SETOOL2 service tool.
 
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
 
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
 
will use DLOAD protocol ... 
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3       OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
 
Emergency loader uploaded ...
 
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: 96887E09
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"
 
WRITING PACKAGES ...
Processing package
C:\Users\Giorgio\Desktop\xperia v\TA-backup-35510105844541.sin_file_set
 
package not contains ACPU files.
Processing update files
PROCESSING: 7da.gdfs
Writing TA var 0002/07DA/024F
ERROR [ S1_TA_WriteUnit,06_:_TA_write_unit_failed, err: 0026 ]
Fail
PROCESSING: 851.gdfs
Writing TA var 0002/0851/0418
ERROR [ S1_TA_WriteUnit,limited, err: 0010 ]
Fail
PROCESSING: 7d3.gdfs
Writing TA var 0002/07D3/02E1
ERROR [ S1_TA_WriteUnit,limited, err: 0010 ]
Fail
ERROR [ S1_TA_Close,limited, err: 0010 ]
FINISHED
Elapsed:26 secs.
 
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
 
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
 
will use DLOAD protocol ... 
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3       OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
 
Emergency loader uploaded ...
 
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: 96887E09
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"
 
WRITING PACKAGES ...
Processing package
C:\Users\Giorgio\Desktop\xperia v\R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN_FILE_SET
 
Processing ACPU files
PROCESSING: R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN
ERROR [ 0x0508:_sin_header_verification, err: 000A ]
HDR block not accepted
Break.
ERROR [ S1_TA_Close,limited, err: 0010 ]
FINISHED
Elapsed:28 secs.

[Jurij]

Trim area is damaged, you can't even flash backup. Time to buy new main board

[riki03]

Trim area is damaged, you can't even flash backup. Time to buy new main board

Shit.
Thank you as well