Welcome S1 Tool [19.05.2015].
That is small and crippled subset of SETOOL2 service tool.
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
will use DLOAD protocol ...
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3 OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
Emergency loader uploaded ...
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: F9E5CF03
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"
WRITING PACKAGES ...
Processing package
C:\Users\AbdoRahman_Amani\Desktop\R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN_FILE_SET
Processing ACPU files
PROCESSING: R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN
ERROR [ 0x0508:_sin_header_verification, err: 000A ]
HDR block not accepted
Break.
ERROR [ S1_TA_Close,limited, err: 0010 ]
FINISHED
Elapsed:49 secs.
from script file of Sony SP:
tawrite:00020[B][U]7d3[/U][/B][COLOR="Red"]0353494E000004000000002 . . . . .[/COLOR]
tawrite:00020[B][U]7da[/U][/B][COLOR="red"]F648C1307F7E05891D3FE03 . . . . . .[/COLOR]
tawrite:00020[B][U]851[/U][/B][COLOR="red"]02000907DA270F0015024E0 . . . . .[/COLOR]
from 2.ta file of Sony V:
02
000007D2 0001 01
00000[B][U]7D3[/U][/B] [COLOR="Lime"]05CE[/COLOR] [COLOR="Red"]02 00 00 00 03 FC 04 00 00 00 00 00 00 00 29 . . . . .[/COLOR]
00000[B][U]7DA[/U][/B] [COLOR="Lime"]0287[/COLOR] [COLOR="Red"]9E 2B 0C FB 72 37 68 54 76 E7 15 D4 BA 9C 8E . . . . . .[/COLOR]
.
.
.
00000[B][U]851[/U][/B] [COLOR="Lime"]03CA[/COLOR] [COLOR="Red"]02 00 09 07 DA 27 0F 00 15 02 4E 00 03 BC 00 . . . . .[/COLOR]
. . .
.
.
7d3.gdfs:
tawrite:00020[U][B]7d3[/B][/U][COLOR="DarkOrange"]0200000003FC040000000000 . . . . . [/COLOR]
7da.gdfs:
tawrite:00020[U][B]7da[/B][/U][COLOR="darkorange"]9E2B0CFB7237685476E715D . . . . . [/COLOR]
851.gdfs:
tawrite:00020[U][B]851[/B][/U][COLOR="darkorange"]02000907DA270F0015024E0 . . . . .[/COLOR]
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
will use DLOAD protocol ...
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3 OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
Emergency loader uploaded ...
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
llbug: blk write fail.fatal
can't send S1 command data [00000006/00000007]
error while uploading DATA block [000001/000001]
LOADER NOT STARTED
Elapsed:99 secs.
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
TO CONNECT NEXT PHONES
X10 Xperia,E10 Mini,E15 Xperia X8,U20 Mini Pro
LT15 Xperia ARC,MT15 Xperia NEO,R800 Xperia PLAY
PRESS AND HOLD "BACK" BUTTON...
ST18 Xperia RAY,ST15 Xperia Mini,SK17 Xperia Mini Pro
and Sony Xperia phone
PRESS AND HOLD "Volume Down" BUTTON...
PLEASE ATTACH TURNED OFF PHONE NOW
Waiting for phone ...
PROCEDURE STOPPED BY USER
supported phone was not detected
Elapsed:260 secs.
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
will use DLOAD protocol ...
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3 OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
Emergency loader uploaded ...
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: F9E5CF03
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"
WRITING PACKAGES ...
Processing package
C:\Users\AbdoRahman_Amani\Desktop\R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN_FILE_SET
Processing ACPU files
PROCESSING: R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN
ERROR [ 0x0508:_sin_header_verification, err: 000A ]
HDR block not accepted
Break.
ERROR [ S1_TA_Close,limited, err: 0010 ]
FINISHED
Elapsed:29 secs.
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
will use DLOAD protocol ...
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3 OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
Emergency loader uploaded ...
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: F9E5CF03
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"
WRITING PACKAGES ...
Processing package
C:\Users\AbdoRahman_Amani\Desktop\TA-backup-20140301.101415.sin_file_set
package not contains ACPU files.
Processing update files
PROCESSING: 7d3.gdfs
Writing TA var 0002/07D3/05CE
PROCESSING: 7da.gdfs
Writing TA var 0002/07DA/0287
PROCESSING: 851.gdfs
Writing TA var 0002/0851/03CA
FINISHED
Elapsed:155 secs.
/*
* ^^^^^^^
* |||||||
* writeing TA fields
*----------------------
* writeing boot
* ||||||||
* ˅˅˅˅˅˅˅˅
*/
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
will use DLOAD protocol ...
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1506B00
PRODUCT DETECTED: "SONY MSM8960-3 OEM1 Fused"
1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
Emergency loader uploaded ...
RUNNING S1_PRELOADER VER "R5F001"
LOADER AID: 0001
DEVICE ID: F9E5CF03
FLASH ID: "0015/00000000"
LOADER VERSION: "R5F001"
WRITING PACKAGES ...
Processing package
C:\Users\AbdoRahman_Amani\Desktop\R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN_FILE_SET
Processing ACPU files
PROCESSING: R11AB029.S1_MSM8960_R3_S1Boot_1264_2289_Live_HWID6B50E1.SOFTWARE.SIN
no update files in package
FINISHED
Elapsed:55 secs.
THIS TUTORIAL IS ONLY FOR HARD BRICKED DEVICES.
HARD BRICK MEANS NO FLASHMODE AND NO FASTBOOT.
IN ORDER TO PROCEED DISASSEMBLY OF YOUR DEVICE IS REQUIRED.
IF YOU HAVE WARRANTY,STOP READING THIS, GO THE SONY SERVICE AND PLAY STUPID.
AS AFTER OPENING YOUR DEVICE, YOUR WARRANTY IS 100% VOID.
I AM NOT RESPONSIBLE FOR ANY DAMAGE.
YOU'VE BEEN WARNED.
Let's get started.
1. Download tools.7z from attachments and pack for your device.
2. Install ggsetup-3.0.0.7.exe
3. Open the back cover of your device.
4. Find the test point (See attachments).
5. Disconnect a battery, connect a usb cable. LED RED will start to blink.
6. Using the paper clip connect your test point with the GND. I used the metal shield in the middle of the motherboard.
7. Open the device manager, you should see SEMC Flash Device. If no, you did something wrong.
8. Disconnect your phone from computer.
9, Repeat the step 5.
10.Run the s1tool and select S1 MSM8974 EMERGENCY for the phone type.
11. Press the flash button, and choice the APP file for your device.
12. Press testpoint ready and repeat the step 6.
13. Remove the testpoint and press READY, when program will ask you to do so.
14. If flash was successful, you may disconnect your phone from usb, connect your battery and try to boot.You may have to charge your battery.
15. Now you can flash your device normally using software.
P.S.
I was not be able to flash on windows 8 64bit, but I flashed without problems on XP.
I would like to thank:
the_laser for making the software.
myevilface from support.setool.net for finding testpoint for c69xx.
and my poor Z Ultra which I sacrificed trying to find the test point
Actually I finished him when I wanted to fix audio jack.
Was to happy that my device is fixed and damaged the screen connector
UPDATE:
Tool for converting TA.img to TA_unbrick.SYN_FILE_SET------------------------------------------------------------------------------------------------------------
If I helped you to save money, you can buy me a beer or two, which is cheaper than a new motherboard.
25/11/2015 14:00:48 Welcome to S1 tool.
25/11/2015 14:00:48 That is small and crippled subset of SETOOL2 service tool.
25/11/2015 14:00:51
25/11/2015 14:00:51 SELECT FIRMWARE PACKAGES
25/11/2015 14:00:52 YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
25/11/2015 14:01:04 CHECKING PACKAGES ...
25/11/2015 14:01:04
25/11/2015 14:01:04 DETACH USB CABLE FROM PHONE
25/11/2015 14:01:04 REMOVE BATTERY FROM PHONE
25/11/2015 14:01:04 ATTACH TESTPOINT
25/11/2015 14:01:04 PRESS "READY", THEN ATTACH USB CABLE TO PHONE
25/11/2015 14:01:04
25/11/2015 14:01:25 will use Sahara protocol ...
25/11/2015 14:01:25 REMOVE TESTPOINT NOW, THEN PRESS "READY"
25/11/2015 14:01:25
25/11/2015 14:01:30 PROCESSING ...
25/11/2015 14:01:30 SERIAL NUMBER : 0EBEDB03
25/11/2015 14:01:30 HARDWARE ID : 04000100E1007B00
25/11/2015 14:01:30 PRODUCT DETECTED: "MSM8974 OEM1 fused"
25/11/2015 14:01:30 HASH 0D3C1887A888609DFAE7FCD7A00292B23FD107DC1E02C0956A04DB7B59C71D99 NOT SUPPORTED
25/11/2015 14:01:30 Elapsed:38 secs.
You are failing at some point, you also need another pair of hands to make it work. Don't try to do it alone, you can slip and cause serious damage to the boardHello, friends. I have a Z1S (C6916) and I put a C6903 firmware. Yes, I Know. I did what I should not. Now my phone is Hard Birked. Not into in Fastboot or Flash Mode. So, I search how to unbrick, I followed all the steps but, always diplay this.
Code:25/11/2015 14:00:48 Welcome to S1 tool. 25/11/2015 14:00:48 That is small and crippled subset of SETOOL2 service tool. 25/11/2015 14:00:51 25/11/2015 14:00:51 SELECT FIRMWARE PACKAGES 25/11/2015 14:00:52 YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON 25/11/2015 14:01:04 CHECKING PACKAGES ... 25/11/2015 14:01:04 25/11/2015 14:01:04 DETACH USB CABLE FROM PHONE 25/11/2015 14:01:04 REMOVE BATTERY FROM PHONE 25/11/2015 14:01:04 ATTACH TESTPOINT 25/11/2015 14:01:04 PRESS "READY", THEN ATTACH USB CABLE TO PHONE 25/11/2015 14:01:04 25/11/2015 14:01:25 will use Sahara protocol ... 25/11/2015 14:01:25 REMOVE TESTPOINT NOW, THEN PRESS "READY" 25/11/2015 14:01:25 25/11/2015 14:01:30 PROCESSING ... 25/11/2015 14:01:30 SERIAL NUMBER : 0EBEDB03 25/11/2015 14:01:30 HARDWARE ID : 04000100E1007B00 25/11/2015 14:01:30 PRODUCT DETECTED: "MSM8974 OEM1 fused" 25/11/2015 14:01:30 HASH 0D3C1887A888609DFAE7FCD7A00292B23FD107DC1E02C0956A04DB7B59C71D99 NOT SUPPORTED 25/11/2015 14:01:30 Elapsed:38 secs.
Please, help me! :crying:
I have TA Backup.
You are failing at some point, you also need another pair of hands to make it work. Don't try to do it alone, you can slip and cause serious damage to the board
Enviado desde mi D6633 mediante Tapatalk
There's two test points for that phone, check in the first pages. The one that was in the first page didn't work for me, but I found another one on Google, I shared the image of course. Try both of them
Enviado desde mi D6633 mediante Tapatalk
I used the one provided by op, wich was z1 standard salvage package, try that one
Enviado desde mi D6633 mediante Tapatalk
If you have a locked bootloader, boot to flashmode/fastboot and flash a known working kernel (stock, Sony). If it's unlocked, the kernel flash failed most likely. Try flashing it again.Sony Z 3 Dual (6633) after a failed upgrade firmware via recovery.I flash cyanogen boot.img in TWRP (( . Its brick. If smartphone is charging, it blinked red . I can use your way to my Sony? There are files for my model?
SELECT FIRMWARE PACKAGES
YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
CHECKING PACKAGES ...
DETACH USB CABLE FROM PHONE
REMOVE BATTERY FROM PHONE
ATTACH TESTPOINT
PRESS "READY", THEN ATTACH USB CABLE TO PHONE
will use DLOAD protocol ...
0808010600900000
0D0F50424C5F446C6F6164564552322E30
162001000100
17004001000100E1907100
PRODUCT DETECTED: "SONY APQ8064-3 ES1 OEM1 Fused"
1801001EA8B0C1B209C88CBB3E220F0AC00F6E6520A273D516B40E7F2EAEB0E5B3DB8B
PROCESSING ...
REMOVE TESTPOINT NOW, THEN PRESS "READY"
Emergency loader uploaded ...
RUNNING S1_PRELOADER VER "APQ8064_39"
LOADER AID: 0001
DEVICE ID: 07B48058
FLASH ID: "0011/01000010"
LOADER VERSION: "APQ8064_39"
WRITING PACKAGES ...
Processing package
E:\Sony\c6602\dead\Xperia Z series Dead Boot repair\Xperia Z series Dead Boot repair\C6602\C6602\10_5_A_0_230.APP_SW_Yuga_GENERIC_1269_5309_S1_SW_LIVE_5CA3_PID1_0002_MMC.SIN_FILE_SET
WILL UPDATE BOOT TO : 1264-2309 S1_BOOT_LAGAN_1.1.1_1
PARSING: "DEVELOPMENT"
value OTP_LOCK_STATUS_1 : UNLOCKED, not match LOCKED
PARSING: "TEST_OEM0_007190E1"
value OTP_LOCK_STATUS_1 : LOCKED, match LOCKED
value OTP_DATA_1 : 00000100, not match 01000100
value IDCODE_1 : 007190E1, match 007190E1
PARSING: "PRECOMMERCIAL_007190E1"
value OTP_LOCK_STATUS_1 : LOCKED, match LOCKED
value OTP_DATA_1 : 01000100, match 01000100
value IDCODE_1 : 007190E1, match 007190E1
PROCESSING : emmc_appsboot_signed_1.1.1_1_S1-BOOT-5CA3-0001-MMC.sin
PROCESSING : s1sbl2_signed_1.1.1_1_S1-BOOT-5CA3-0001-MMC.sin
PROCESSING : sbl1_signed_1.1.1_1_S1-BOOT-5CA3-0001-MMC.sin
PROCESSING : sbl2_signed_1.1.1_1_S1-BOOT-5CA3-0001-MMC.sin
PROCESSING : sbl3_signed_1.1.1_1_S1-BOOT-5CA3-0001-MMC.sin
PROCESSING : tz_signed_1.1.1_1_S1-BOOT-5CA3-0001-MMC.sin
PROCESSING : Yuga_S1BootConfig_MiscTA_121203_1222.ta
Writing TA var 0002/084F/0060
Writing TA var 0002/08FD/0001
BOOT UPDATED
Processing ACPU files
PROCESSING: cache_S1-SW-LIVE-5CA3-PID1-0002-MMC.sin
PROCESSING: apps_log_S1-SW-LIVE-5CA3-PID1-0002-MMC.sin
PROCESSING: kernel_S1-SW-LIVE-5CA3-PID1-0002-MMC.sin
PROCESSING: fotakernel_S1-SW-LIVE-5CA3-PID1-0002-MMC.sin
SKIP: partition-image_S1-SW-LIVE-5CA3-PID1-0002-MBR.sin
PROCESSING: rpm_S1-RPMFW-LIVE-5CA3-PID1-0002-MMC.sin
no update files in package
FINISHED
Elapsed:65 secs.
bootloader unlocked. Stock firmware.If you have a locked bootloader, boot to flashmode/fastboot and flash a known working kernel (stock, Sony). If it's unlocked, the kernel flash failed most likely. Try flashing it again.
Maybe stupid question : Do you think with this testpoint mode there is a way of unlocking Bootlader although it is not permitted by the provider?
Sent from my C6903 using XDA Premium 4 mobile app