[GUIDE] Z Ultra and Z1 HARD BRICK RECOVERY

Search This thread

xaoup

Senior Member
Mar 5, 2008
393
46
Hi sir,

I flash a old 4.4.4 rom (Spirit ROM) on my ZU and can't enter recovery.

I flashed the latest ftf, it flashed okay but i cant enter recovery

I tried nuts and flashing TWRP using fastboot but i still can't get to recovery

Any idea sir?

Thanks.
 

A.Rahman.A

Member
Sep 16, 2013
20
3
S1Tool Error

hi there
I faced a problem with my __lt25i__
when I try this method (I do not have TA dump just a backup with FlashTool : 1.ta & 2.ta (see Attachment ) )
this is s1tool log:

Welcome S1 Tool [19.05.2015].
That is small and crippled subset of SETOOL2 service tool.

SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...

DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE

will use DLOAD protocol ...
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3 OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"

Emergency loader uploaded ...

RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: F9E5CF03
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"

WRITING PACKAGES ...
Processing package
C:\Users\AbdoRahman_Amani\Desktop\R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN_FILE_SET

Processing ACPU files
PROCESSING: R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN
ERROR [ 0x0508:_sin_header_verification, err: 000A ]
HDR block not accepted
Break.
ERROR [ S1_TA_Close,limited, err: 0010 ]
FINISHED
Elapsed:49 secs.
 
Last edited:

A.Rahman.A

Member
Sep 16, 2013
20
3
SOLVED

Hi again

after so many try to unbrick my lt25i

finaly i got it

the prolem was becuase of wrong TA data (i flashed another TA on my phone )
therefore i got this error : [ 0x0508:_sin_header_verification, err: 000A ]
but How?
this is the story:
i just have TA backup in " .ta (text)" format (using FlashTool S1 Dump in Advance menu -> Trim Area)

but how use it in S1Tool??
after some study in this thread (on posts #201 to #211 of this thread)
and download the script that user @the_laser made for another user @NiM72NiK

i Extracted (zip) that script an found 7D3.gdfs , 7DA.gdfs and 851.gdfs ,,,, then opened them with notepad
and compared with 2.ta from S1 dump of my Device.
i find 7d3 ,7da,851 lines in 2.ta too
Code:
from script file of Sony SP:
tawrite:00020[B][U]7d3[/U][/B][COLOR="Red"]0353494E000004000000002 . . . . .[/COLOR]
tawrite:00020[B][U]7da[/U][/B][COLOR="red"]F648C1307F7E05891D3FE03 . . . . . .[/COLOR]
tawrite:00020[B][U]851[/U][/B][COLOR="red"]02000907DA270F0015024E0 . . . . .[/COLOR]

from  2.ta file of Sony V:

02
000007D2 0001 01
00000[B][U]7D3[/U][/B] [COLOR="Lime"]05CE[/COLOR] [COLOR="Red"]02 00 00 00 03 FC 04 00 00 00 00 00 00 00 29 . . . . .[/COLOR]
00000[B][U]7DA[/U][/B] [COLOR="Lime"]0287[/COLOR] [COLOR="Red"]9E 2B 0C FB 72 37 68 54 76 E7 15 D4 BA 9C 8E . . . . . .[/COLOR]
.
.
.
00000[B][U]851[/U][/B] [COLOR="Lime"]03CA[/COLOR] [COLOR="Red"]02 00 09 07 DA 27 0F 00 15 02 4E 00 03 BC 00 . . . . .[/COLOR]
.  . .
. 
.
but the number (count) of data after 7d3 and 7da in gdfs script was different from 2.ta file (i think because they are different phone type)
, 851 data was not same in data but same in number

now what u think ? a little risk? again?

ok i made another script with my own TA data
first use c# and wrote simple app to remove spaces of data(red area) in each field(under lined)
then open each script and replace new data, i mean this:
Code:
7d3.gdfs:
tawrite:00020[U][B]7d3[/B][/U][COLOR="DarkOrange"]0200000003FC040000000000 . . . . . [/COLOR]

7da.gdfs:
tawrite:00020[U][B]7da[/B][/U][COLOR="darkorange"]9E2B0CFB7237685476E715D . . . . . [/COLOR]

851.gdfs:
tawrite:00020[U][B]851[/B][/U][COLOR="darkorange"]02000907DA270F0015024E0 . . . . .[/COLOR]

now it's time to repack it.
i putted all file to zip archive and changed zip to sin_file_set
OK connect test point and flow the instruction in first post ,, but now use the file that recently created

after that i could write Boot on my phone
All Done .

Thanks to all member of xda Specially @the_laser for his Sofware and script and helps

here is S1Tool Log:
Code:
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
 
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
 
will use DLOAD protocol ... 
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3       OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
 
Emergency loader uploaded ...
 
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
llbug: blk write fail.fatal
can't send S1 command data [00000006/00000007]
error while uploading DATA block [000001/000001]
LOADER NOT STARTED
Elapsed:99 secs.
 
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
 
TO CONNECT NEXT PHONES
X10 Xperia,E10 Mini,E15 Xperia X8,U20 Mini Pro
LT15 Xperia ARC,MT15 Xperia NEO,R800 Xperia PLAY
PRESS AND HOLD "BACK" BUTTON...
 
ST18 Xperia RAY,ST15 Xperia Mini,SK17 Xperia Mini Pro
and Sony Xperia phone
PRESS AND HOLD "Volume Down" BUTTON...
 
PLEASE ATTACH TURNED OFF PHONE NOW
Waiting for phone ...
PROCEDURE STOPPED BY USER
supported phone was not detected
Elapsed:260 secs.
 
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
 
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
 
will use DLOAD protocol ... 
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3       OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
 
Emergency loader uploaded ...
 
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: F9E5CF03
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"
 
WRITING PACKAGES ...
Processing package
C:\Users\AbdoRahman_Amani\Desktop\R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN_FILE_SET
 
Processing ACPU files
PROCESSING: R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN
ERROR [ 0x0508:_sin_header_verification, err: 000A ]
HDR block not accepted
Break.
ERROR [ S1_TA_Close,limited, err: 0010 ]
FINISHED
Elapsed:29 secs.
 
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
 
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
 
will use DLOAD protocol ... 
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3       OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
 
Emergency loader uploaded ...
 
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: F9E5CF03
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"
 
WRITING PACKAGES ...
Processing package
C:\Users\AbdoRahman_Amani\Desktop\TA-backup-20140301.101415.sin_file_set
 
package not contains ACPU files.
Processing update files
PROCESSING: 7d3.gdfs
Writing TA var 0002/07D3/05CE
PROCESSING: 7da.gdfs
Writing TA var 0002/07DA/0287
PROCESSING: 851.gdfs
Writing TA var 0002/0851/03CA
FINISHED
Elapsed:155 secs.
/*
*      ^^^^^^^
*      |||||||
*  writeing TA fields
*----------------------
*  writeing boot
*  ||||||||
*  ˅˅˅˅˅˅˅˅
*/
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
 
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
 
will use DLOAD protocol ... 
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3       OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
 
Emergency loader uploaded ...
 
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: F9E5CF03
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"
 
WRITING PACKAGES ...
Processing package
C:\Users\AbdoRahman_Amani\Desktop\R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN_FILE_SET
 
Processing ACPU files
PROCESSING: R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN
no update files in package
FINISHED
Elapsed:55 secs.
hit thanks if it was useful ;)
 
  • Like
Reactions: amir871

dyiG

Member
Oct 20, 2015
7
0
THIS TUTORIAL IS ONLY FOR HARD BRICKED DEVICES.
HARD BRICK MEANS NO FLASHMODE AND NO FASTBOOT.
IN ORDER TO PROCEED DISASSEMBLY OF YOUR DEVICE IS REQUIRED.
IF YOU HAVE WARRANTY,STOP READING THIS, GO THE SONY SERVICE AND PLAY STUPID.
AS AFTER OPENING YOUR DEVICE, YOUR WARRANTY IS 100% VOID.
I AM NOT RESPONSIBLE FOR ANY DAMAGE.
YOU'VE BEEN WARNED.


Let's get started.
1. Download tools.7z from attachments and pack for your device.
2. Install ggsetup-3.0.0.7.exe
3. Open the back cover of your device.
4. Find the test point (See attachments).
5. Disconnect a battery, connect a usb cable. LED RED will start to blink.
6. Using the paper clip connect your test point with the GND. I used the metal shield in the middle of the motherboard.
7. Open the device manager, you should see SEMC Flash Device. If no, you did something wrong.
8. Disconnect your phone from computer.
9, Repeat the step 5.
10.Run the s1tool and select S1 MSM8974 EMERGENCY for the phone type.
11. Press the flash button, and choice the APP file for your device.
12. Press testpoint ready and repeat the step 6.
13. Remove the testpoint and press READY, when program will ask you to do so.
14. If flash was successful, you may disconnect your phone from usb, connect your battery and try to boot.You may have to charge your battery.
15. Now you can flash your device normally using software.


P.S.
I was not be able to flash on windows 8 64bit, but I flashed without problems on XP.

I would like to thank:

the_laser for making the software.


myevilface from support.setool.net for finding testpoint for c69xx.

and my poor Z Ultra which I sacrificed trying to find the test point :(
Actually I finished him when I wanted to fix audio jack.
Was to happy that my device is fixed and damaged the screen connector :D

UPDATE:
Tool for converting TA.img to TA_unbrick.SYN_FILE_SET------------------------------------------------------------------------------------------------------------
If I helped you to save money, you can buy me a beer or two, which is cheaper than a new motherboard. :)




where can i get .sin_file_set for e3,any link to download for other device for example e3
or how to get semc pakage file for e3 devices
 

Ksix007

Member
Jul 13, 2014
22
3
Hash not supported

Hello, friends. I have a Z1S (C6916) and I put a C6903 firmware. Yes, I Know. I did what I should not. Now my phone is Hard Birked. Not into in Fastboot or Flash Mode. So, I search how to unbrick, I followed all the steps but, always diplay this.

Code:
25/11/2015 14:00:48 Welcome to S1 tool.
25/11/2015 14:00:48 That is small and crippled subset of SETOOL2 service tool.
25/11/2015 14:00:51  
25/11/2015 14:00:51 SELECT FIRMWARE PACKAGES
25/11/2015 14:00:52 YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
25/11/2015 14:01:04 CHECKING PACKAGES ...
25/11/2015 14:01:04  
25/11/2015 14:01:04 DETACH USB CABLE FROM PHONE
25/11/2015 14:01:04 REMOVE BATTERY FROM PHONE
25/11/2015 14:01:04 ATTACH TESTPOINT
25/11/2015 14:01:04 PRESS "READY", THEN ATTACH USB CABLE TO PHONE
25/11/2015 14:01:04  
25/11/2015 14:01:25 will use Sahara protocol ... 
25/11/2015 14:01:25 REMOVE TESTPOINT NOW, THEN PRESS "READY"
25/11/2015 14:01:25  
25/11/2015 14:01:30 PROCESSING ...
25/11/2015 14:01:30 SERIAL NUMBER : 0EBEDB03
25/11/2015 14:01:30 HARDWARE ID : 04000100E1007B00
25/11/2015 14:01:30 PRODUCT DETECTED: "MSM8974 OEM1 fused"
25/11/2015 14:01:30 HASH 0D3C1887A888609DFAE7FCD7A00292B23FD107DC1E02C0956A04DB7B59C71D99 NOT SUPPORTED
25/11/2015 14:01:30 Elapsed:38 secs.

Please, help me! :crying:

I have TA Backup.
 
Last edited:
  • Like
Reactions: Zzinou502

moses_dx

Senior Member
Aug 23, 2014
571
52
Hello, friends. I have a Z1S (C6916) and I put a C6903 firmware. Yes, I Know. I did what I should not. Now my phone is Hard Birked. Not into in Fastboot or Flash Mode. So, I search how to unbrick, I followed all the steps but, always diplay this.

Code:
25/11/2015 14:00:48 Welcome to S1 tool.
25/11/2015 14:00:48 That is small and crippled subset of SETOOL2 service tool.
25/11/2015 14:00:51  
25/11/2015 14:00:51 SELECT FIRMWARE PACKAGES
25/11/2015 14:00:52 YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
25/11/2015 14:01:04 CHECKING PACKAGES ...
25/11/2015 14:01:04  
25/11/2015 14:01:04 DETACH USB CABLE FROM PHONE
25/11/2015 14:01:04 REMOVE BATTERY FROM PHONE
25/11/2015 14:01:04 ATTACH TESTPOINT
25/11/2015 14:01:04 PRESS "READY", THEN ATTACH USB CABLE TO PHONE
25/11/2015 14:01:04  
25/11/2015 14:01:25 will use Sahara protocol ... 
25/11/2015 14:01:25 REMOVE TESTPOINT NOW, THEN PRESS "READY"
25/11/2015 14:01:25  
25/11/2015 14:01:30 PROCESSING ...
25/11/2015 14:01:30 SERIAL NUMBER : 0EBEDB03
25/11/2015 14:01:30 HARDWARE ID : 04000100E1007B00
25/11/2015 14:01:30 PRODUCT DETECTED: "MSM8974 OEM1 fused"
25/11/2015 14:01:30 HASH 0D3C1887A888609DFAE7FCD7A00292B23FD107DC1E02C0956A04DB7B59C71D99 NOT SUPPORTED
25/11/2015 14:01:30 Elapsed:38 secs.

Please, help me! :crying:

I have TA Backup.
You are failing at some point, you also need another pair of hands to make it work. Don't try to do it alone, you can slip and cause serious damage to the board

Enviado desde mi D6633 mediante Tapatalk
 

Ksix007

Member
Jul 13, 2014
22
3
You are failing at some point, you also need another pair of hands to make it work. Don't try to do it alone, you can slip and cause serious damage to the board

Enviado desde mi D6633 mediante Tapatalk

So, I tried for many times but, always says "hash not supported". The Z1S test point is the same of Z1? My PC show me "SEMC FLASH DEVICE". Is correct?

Sorry for my bad English.
 

moses_dx

Senior Member
Aug 23, 2014
571
52
There's two test points for that phone, check in the first pages. The one that was in the first page didn't work for me, but I found another one on Google, I shared the image of course. Try both of them

Enviado desde mi D6633 mediante Tapatalk
 

Ksix007

Member
Jul 13, 2014
22
3
There's two test points for that phone, check in the first pages. The one that was in the first page didn't work for me, but I found another one on Google, I shared the image of course. Try both of them

Enviado desde mi D6633 mediante Tapatalk

I was tested on both Test Points. But always says "Hash not Suported". If I restore my TA Backup, could fix it? Or run any script.... I don't know more what i do!

TA Backup download
 

moses_dx

Senior Member
Aug 23, 2014
571
52
I used the one provided by op, wich was z1 standard salvage package, try that one

Enviado desde mi D6633 mediante Tapatalk
 

moses_dx

Senior Member
Aug 23, 2014
571
52
I don't know whether it's c6906 or c6903, but it worked for me. It's in the op

Enviado desde mi D6633 mediante Tapatalk
 

farox_5zan_93

New member
Jan 8, 2013
1
0
My Z1 c6903 cannot use the s1tool

I have gone through over 2 night to find the solution for my phone. Xperia z1 c6903, Please any one can help me? T.T

My log in s1tool:

30/11/2015 10:04:34 PM Welcome to S1 tool.
30/11/2015 10:04:34 PM That is small and crippled subset of SETOOL2 service tool.
30/11/2015 10:04:44 PM
30/11/2015 10:04:44 PM SELECT FIRMWARE PACKAGES
30/11/2015 10:04:44 PM YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
30/11/2015 10:04:49 PM CHECKING PACKAGES ...
30/11/2015 10:04:49 PM
30/11/2015 10:04:49 PM DETACH USB CABLE FROM PHONE
30/11/2015 10:04:49 PM REMOVE BATTERY FROM PHONE
30/11/2015 10:04:49 PM ATTACH TESTPOINT
30/11/2015 10:04:49 PM PRESS "READY", THEN ATTACH USB CABLE TO PHONE
30/11/2015 10:04:49 PM
30/11/2015 10:05:09 PM will use Sahara protocol ...
30/11/2015 10:05:09 PM REMOVE TESTPOINT NOW, THEN PRESS "READY"
30/11/2015 10:05:09 PM
30/11/2015 10:05:11 PM PROCESSING ...
30/11/2015 10:05:11 PM SERIAL NUMBER : 1A467F02
30/11/2015 10:05:11 PM HARDWARE ID : 04000100E1007B00
30/11/2015 10:05:11 PM HASH :49109A8016C239CD8F76540FE4D5138C87B2297E49C6B30EC31852330BDDB177
30/11/2015 10:05:11 PM Emergency loader uploaded ...
30/11/2015 10:05:12 PM
30/11/2015 10:05:12 PM RUNNING S1_PRELOADER VER "LOADER_RELEASE_MSM8974_23_4_AID_4"
30/11/2015 10:05:12 PM LOADER AID: 0004
30/11/2015 10:05:12 PM DEVICE ID: 027F461A
30/11/2015 10:05:12 PM FLASH ID: "0015/01000001"
30/11/2015 10:05:12 PM LOADER VERSION: "LOADER_RELEASE_MSM8974_23_4_AID_4"
30/11/2015 10:05:12 PM
30/11/2015 10:05:12 PM WRITING PACKAGES ...
30/11/2015 10:05:12 PM Processing package
30/11/2015 10:05:12 PM C:\Users\FaroxMyra\Downloads\s1\14_2_A_0_290.APP_SW_Honami_GENERIC_1272_6084_S1_SW_LIVE_6732_PID1_0005_MMC.SIN_FILE_SET
30/11/2015 10:05:12 PM
30/11/2015 10:05:13 PM MINOR ERROR [ 0x80080021_, err: 0017 ]
30/11/2015 10:05:13 PM error while uploading final HDR block
30/11/2015 10:05:13 PM Break.
30/11/2015 10:05:13 PM FINISHED
30/11/2015 10:05:13 PM Elapsed:29 secs.
30/11/2015 10:05:36 PM
30/11/2015 10:05:36 PM SELECT FIRMWARE PACKAGES
30/11/2015 10:05:36 PM YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
30/11/2015 10:05:39 PM CHECKING PACKAGES ...
30/11/2015 10:05:39 PM
30/11/2015 10:05:39 PM DETACH USB CABLE FROM PHONE
30/11/2015 10:05:39 PM REMOVE BATTERY FROM PHONE
30/11/2015 10:05:39 PM ATTACH TESTPOINT
30/11/2015 10:05:39 PM PRESS "READY", THEN ATTACH USB CABLE TO PHONE
30/11/2015 10:05:39 PM
30/11/2015 10:06:22 PM will use Sahara protocol ...
30/11/2015 10:06:22 PM REMOVE TESTPOINT NOW, THEN PRESS "READY"
30/11/2015 10:06:22 PM
30/11/2015 10:06:24 PM PROCESSING ...
30/11/2015 10:06:24 PM SERIAL NUMBER : 1A467F02
30/11/2015 10:06:24 PM HARDWARE ID : 04000100E1007B00
30/11/2015 10:06:24 PM HASH :49109A8016C239CD8F76540FE4D5138C87B2297E49C6B30EC31852330BDDB177
30/11/2015 10:06:24 PM Emergency loader uploaded ...
30/11/2015 10:06:25 PM
30/11/2015 10:06:25 PM RUNNING S1_PRELOADER VER "LOADER_RELEASE_MSM8974_23_4_AID_4"
30/11/2015 10:06:25 PM LOADER AID: 0004
30/11/2015 10:06:25 PM DEVICE ID: 027F461A
30/11/2015 10:06:25 PM FLASH ID: "0015/01000001"
30/11/2015 10:06:25 PM LOADER VERSION: "LOADER_RELEASE_MSM8974_23_4_AID_4"
30/11/2015 10:06:25 PM
30/11/2015 10:06:25 PM WRITING PACKAGES ...
30/11/2015 10:06:25 PM Processing package
30/11/2015 10:06:25 PM C:\Users\FaroxMyra\Downloads\s1\14_2_A_0_290.APP_SW_Honami_GENERIC_1272_6084_S1_SW_LIVE_6732_PID1_0005_MMC.SIN_FILE_SET
30/11/2015 10:06:26 PM
30/11/2015 10:06:26 PM MINOR ERROR [ 0x80080021_, err: 0017 ]
30/11/2015 10:06:26 PM error while uploading final HDR block

30/11/2015 10:06:26 PM Break.
30/11/2015 10:06:26 PM FINISHED
30/11/2015 10:06:26 PM Elapsed:50 secs.
:confused::confused::confused::confused::confused::confused:
 

Damyanof

Member
Feb 11, 2011
45
7
Troyan, Bulgaria
Windows 8.1 64bit

Firstly thank you very much for the guide!

Second - I was able to perform the unbrick on Winodws 8.1 64bit. All it has to be done is to ENABLE TEST MODE!

Thats it!
 

aspiens

Senior Member
Sep 8, 2010
58
4
Moscow
Sony Z 3 Dual (6633) after a failed upgrade firmware via recovery.I flash cyanogen boot.img in TWRP :((( . Its brick. If smartphone is charging, it blinked red . I can use your way to my Sony? There are files for my model?
 

[NUT]

Senior Member
Sony Z 3 Dual (6633) after a failed upgrade firmware via recovery.I flash cyanogen boot.img in TWRP :((( . Its brick. If smartphone is charging, it blinked red . I can use your way to my Sony? There are files for my model?
If you have a locked bootloader, boot to flashmode/fastboot and flash a known working kernel (stock, Sony). If it's unlocked, the kernel flash failed most likely. Try flashing it again.
 
  • Like
Reactions: adfurgerson

zakiyy

Senior Member
Dec 1, 2008
165
11
Please HELP :
All went FINE but still not entering FLASH MODE after successful BOOT repair ! Does not detected by FLASH TOOL and PC when press VOL - and connect PC . Batt 3.76v on meter !

SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...

DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE

will use DLOAD protocol ...
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1907100
PRODUCT DETECTED: "SONY APQ8064-3 ES1 OEM1 Fused"
1801001EA8B0C1B209C88CBB3E220F0AC00F6E6520A273D516B40E7F2EAEB0E5B3DB8B
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"

Emergency loader uploaded ...

RUNNING S1_PRELOADER VER "APQ8064_39"
LOADER AID: 0001
DEVICE ID: 07B48058
FLASH ID: "0011/01000010"
LOADER VERSION: "APQ8064_39"

WRITING PACKAGES ...
Processing package
E:\Sony\c6602\dead\Xperia Z series Dead Boot repair\Xperia Z series Dead Boot repair\C6602\C6602\10_5_A_0_230.APP_SW_Yuga_GENERIC_1269_5309_S1_SW_LIVE_5CA3_PID1_0002_MMC.SIN_FILE_SET

WILL UPDATE BOOT TO : 1264-2309 S1_BOOT_LAGAN_1.1.1_1
PARSING: "DEVELOPMENT"
value OTP_LOCK_STATUS_1 : UNLOCKED, not match LOCKED
PARSING: "TEST_OEM0_007190E1"
value OTP_LOCK_STATUS_1 : LOCKED, match LOCKED
value OTP_DATA_1 : 00000100, not match 01000100
value IDCODE_1 : 007190E1, match 007190E1
PARSING: "PRECOMMERCIAL_007190E1"
value OTP_LOCK_STATUS_1 : LOCKED, match LOCKED
value OTP_DATA_1 : 01000100, match 01000100
value IDCODE_1 : 007190E1, match 007190E1
PROCESSING : emmc_appsboot_signed_1.1.1_1_S1-BOOT-5CA3-0001-MMC.sin
PROCESSING : s1sbl2_signed_1.1.1_1_S1-BOOT-5CA3-0001-MMC.sin
PROCESSING : sbl1_signed_1.1.1_1_S1-BOOT-5CA3-0001-MMC.sin
PROCESSING : sbl2_signed_1.1.1_1_S1-BOOT-5CA3-0001-MMC.sin
PROCESSING : sbl3_signed_1.1.1_1_S1-BOOT-5CA3-0001-MMC.sin
PROCESSING : tz_signed_1.1.1_1_S1-BOOT-5CA3-0001-MMC.sin
PROCESSING : Yuga_S1BootConfig_MiscTA_121203_1222.ta
Writing TA var 0002/084F/0060
Writing TA var 0002/08FD/0001
BOOT UPDATED
Processing ACPU files
PROCESSING: cache_S1-SW-LIVE-5CA3-PID1-0002-MMC.sin
PROCESSING: apps_log_S1-SW-LIVE-5CA3-PID1-0002-MMC.sin
PROCESSING: kernel_S1-SW-LIVE-5CA3-PID1-0002-MMC.sin
PROCESSING: fotakernel_S1-SW-LIVE-5CA3-PID1-0002-MMC.sin
SKIP: partition-image_S1-SW-LIVE-5CA3-PID1-0002-MBR.sin
PROCESSING: rpm_S1-RPMFW-LIVE-5CA3-PID1-0002-MMC.sin
no update files in package
FINISHED
Elapsed:65 secs.
 

aspiens

Senior Member
Sep 8, 2010
58
4
Moscow
If you have a locked bootloader, boot to flashmode/fastboot and flash a known working kernel (stock, Sony). If it's unlocked, the kernel flash failed most likely. Try flashing it again.
bootloader unlocked. Stock firmware.
The smartphone does not respond to pressing a button. "Volume - " and connect to the computer will not turn on bootloader mode .Not glow blue. Constantly flashes red and the sound of the computer in time to the blinking. USB Connected device/USB disconnected device.
 

DimmosGeeknd

Member
Dec 10, 2015
37
2
Nexus Player
Huawei Mate 20 X
HELP flashed t2u file instead of zu recovery kingroot 5.1.1 z ultra, rooted, backedup

im rooted by kingroot app last week, now i want to install recovery, i have backed up my TA.backup already and now rebooted into recovery i just finished backup to sd card

im still in recovery backup complete screen

after backing up system on z ultra i have seen that i have installed T2U-lockeddualrecovery2.8.21-RELEASE.ins recovery instead of
ZU-lockeddualrecovery2.8.21-RELEASE.installe


NOW ,? should i know reboot into sony dashboard and install correct recovery for ZU
I HAVE 90% BATTERY PLEASE REPLY
,THANKYOU

ZU 5.1.1 rooted kingroot
kingroot supersu
option 2 for recovery superuser
backed up TAbackup
backup to sd
complete in recovery screen

---------- Post added at 09:08 PM ---------- Previous post was at 08:50 PM ----------

i have not installed recovery in recovery mode should i

reboot and install zu recovery zip in windows
OR
install zxdual recovery t2u in zu recovery THEN reboot AND install.bat ZU recovery in windows
 

Top Liked Posts

  • There are no posts matching your filters.
  • 119
    THIS TUTORIAL IS ONLY FOR HARD BRICKED DEVICES.
    HARD BRICK MEANS NO FLASHMODE AND NO FASTBOOT.
    IN ORDER TO PROCEED DISASSEMBLY OF YOUR DEVICE IS REQUIRED.
    IF YOU HAVE WARRANTY,STOP READING THIS, GO THE SONY SERVICE AND PLAY STUPID.
    AS AFTER OPENING YOUR DEVICE, YOUR WARRANTY IS 100% VOID.
    I AM NOT RESPONSIBLE FOR ANY DAMAGE.
    YOU'VE BEEN WARNED.


    Let's get started.
    1. Download tools.7z from attachments and pack for your device.
    2. Install ggsetup-3.0.0.7.exe
    3. Open the back cover of your device.
    4. Find the test point (See attachments).
    5. Disconnect a battery, connect a usb cable. LED RED will start to blink.
    6. Using the paper clip connect your test point with the GND. I used the metal shield in the middle of the motherboard.
    7. Open the device manager, you should see SEMC Flash Device. If no, you did something wrong.
    8. Disconnect your phone from computer.
    9, Repeat the step 5.
    10.Run the s1tool and select S1 MSM8974 EMERGENCY for the phone type.
    11. Press the flash button, and choice the APP file for your device.
    12. Press testpoint ready and repeat the step 6.
    13. Remove the testpoint and press READY, when program will ask you to do so.
    14. If flash was successful, you may disconnect your phone from usb, connect your battery and try to boot.You may have to charge your battery.
    15. Now you can flash your device normally using software.


    P.S.
    I was not be able to flash on windows 8 64bit, but I flashed without problems on XP.

    I would like to thank:

    the_laser for making the software.


    myevilface from support.setool.net for finding testpoint for c69xx.

    and my poor Z Ultra which I sacrificed trying to find the test point :(
    Actually I finished him when I wanted to fix audio jack.
    Was to happy that my device is fixed and damaged the screen connector :D

    UPDATE:
    Tool for converting TA.img to TA_unbrick.SYN_FILE_SET



    ------------------------------------------------------------------------------------------------------------
    If I helped you to save money, you can buy me a beer or two, which is cheaper than a new motherboard. :)
    20
    Tool for converting TA.img to TA_unbrick.SYN_FILE_SET

    Since I bricked my TA I was not able to repair TA by using gdfs, do not know why, but I created tool for unbricking TA partition, TA backup is required to get tool working! Here is tool for all who have TA.img and bricked TA partition inside phone, tool will convert your TA.img to TA_unbrick.SIN_FILE_SET so you can easily repair your TA partition and flash the rest of firmware, enjoy! ;) Windows machine is required!

    How to use:
    - put TA.img to the same folder
    - run ta_gen.exe
    11
    D
    Deleted member 3665957
    @bejibx:

    i'm assuming that your problem is because you wrote foreign trim area into your phone.
    if your phone have damaged trim area ( format/rewrite trim area partition ) - phone is brick.

    but if not, then using View attachment s1tool.zip
    7
    Maybe stupid question : Do you think with this testpoint mode there is a way of unlocking Bootlader although it is not permitted by the provider?

    Sent from my C6903 using XDA Premium 4 mobile app

    There is option to unlock boot, and it asks to do the testpoint trick, but I did not test it,as mine bootloader is unlocked and screen is dead now. :)
    6
    So who else thinks this thread should be featued on the portal?
    Ive already submitted via the news tip button and pmed @SammiSaysHello since she writes alot of xperia articles.