Xperia v hard brick recovery - Sony Xperia T, TL, TX, V

Xperia v hard brick recovery - Sony Xperia T, TL, TX, V

THIS TUTORIAL IS ONLY FOR HARD BRICKED DEVICES.
HARD BRICK MEANS NO FLASHMODE AND NO FASTBOOT.
IN ORDER TO PROCEED DISASSEMBLY OF YOUR DEVICE IS REQUIRED.
IF YOU HAVE WARRANTY,STOP READING THIS, GO THE SONY SERVICE AND PLAY STUPID.
AS AFTER OPENING YOUR DEVICE, YOUR WARRANTY IS 100% VOID.
I AM NOT RESPONSIBLE FOR ANY DAMAGE.
YOU'VE BEEN WARNED.
you need to write back original security units.
this is only possible, if you do have original trim area backup.
you can make it with this way :
using winhex save all unit data as "hex ascii" and add command
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Code:
tawrite:0002<unit number, 4 hex digits><unit data>
you need to find and prepare like this 3 critical units : 07D3, 07DA, 0851
then copy result units into file with extension .gdfs and zip it into file with extension .SIN_FILE_SET
and you can use this way.
Let's get started.
1. Download HARD BRICK RECOVERY & ggsetup :
Code:
http://www.mediafire.com/download/cqk9sl2ec56c65j/ggsetup-3.0.0.7.zip
http://www.mediafire.com/download/d0c01h9i9biqxc7/HARD+BRICK+RECOVERY.zip
2. Install ggsetup-3.0.0.7.exe
3. Open the back cover of your device.
4. Find the test point (See attachments).
5. Disconnect a battery, connect a usb cable. LED RED will start to blink.
6. Using the paper clip connect your test point with the GND. I used the metal shield in the middle of the motherboard.
7. Open the device manager, you should see SEMC Flash Device. If no, you did something wrong.
8. Disconnect your phone from computer.
9, Repeat the step 5.
10.Run the s1tool and select S1 EMERGENCY MODE for the phone type.
11. Press the flash button, and choice the repair script file for your device.
12. Press testpoint ready and repeat the step 6.
13. Remove the testpoint and press READY.when program will ask you to do so.
14. Press the flash button, and choice the APP & FSP file for your device.
15. Press testpoint ready and repeat the step 6.
16. Remove the testpoint and press READY, when program will ask you to do so.
17. If flash was successful, you may disconnect your phone from usb, connect your battery and try to boot.You may have to charge your battery.
18. Now you must root phone, restore full trim area backup.
P.S.
I was not be able to flash on windows 8 64bit, but I flashed without problems on 7 .
I would like to thank:
http://forum.xda-developers.com/member.php?u=3665957 for making the software.
http://forum.xda-developers.com/member.php?u=3508509 for text.
in HARD BRICK RECOVERY package there are some other things :
1-XperiFirm_2.5 → for download FILE of rom .
2-ma3d.exe →for make APP & FSP from FILE (you have it when you download package).
3-DooMLoRD_Easy-Rooting-Toolkit_v18_perf-event-exploit → for root your phone.
4-Backup-TA-9.11 → for restore your orginal TA backup after your phone get start and work normally.

Amazing. Unfortunately I have hard bricked V.
So to unbrick my sxv I just need script made from TA backup?
Nice to see so useful info. :good: Thanks for TestPoint location.
Here is my TA backup.
View attachment TA-backup-20131114.094208.zip

ElArchibald said:
Amazing. Unfortunately I have hard bricked V.
So to unbrick my sxv I just need script made from TA backup?
Nice to see so useful info. :good: Thanks for TestPoint location.
Here is my TA backup.
View attachment 2982634
Click to expand...
Click to collapse
I have just told him .so plz wait until he makes it for you.

here is script, however it is very easy to make script yourself :
using winhex save all unit data as "hex ascii" and add command
Code:
tawrite:0002<unit number, 4 hex digits><unit data>
you need to find and prepare like this 3 critical units : 07D3, 07DA, 0851
then copy result units into file with extension .gdfs and zip it into file with extension .SIN_FILE_SET

Just a question, if there is no TA Backup, we can't restore phone?

nope, this is not possible.
at least for now.

I didn't brick my XV right now
I just forgot to backup TA before unlocking bootloader, I'm just thinking about a backup for ultra emergency situations
Can I somehow take backup now?

Aria.A97 said:
I didn't brick my XV right now
I just forgot to backup TA before unlocking bootloader, I'm just thinking about a backup for ultra emergency situations
Can I somehow take backup now?
Click to expand...
Click to collapse
You can make a backup but it will not contain DRM keys as you has unlocked bootloader.
You can backup via Backup TA v9.11, or use FlashTool (File > Switch Pro then Advanced > Trim Area > Backup), you also can make S1 Dump (Advanced > Trim Area > S1 Dump), i think S1 Dump can be used in *.ftf file since it has an *.ta extension.

ElArchibald said:
You can make a backup but it will not contain DRM keys as you has unlocked bootloader.
You can backup via Backup TA v9.11, or use FlashTool (File > Switch Pro then Advanced > Trim Area > Backup), you also can make S1 Dump (Advanced > Trim Area > S1 Dump), i think S1 Dump can be used in *.ftf file since it has an *.ta extension.
Click to expand...
Click to collapse
OK. Thanks. I backed up with TA Backup on Carbon ROM (BTW F*** those DRM keys, I never use Sony Stock ROMs, I flashed CM 10.2 just 6 hours after buying my phone at 3:35 A.M )
BTW whats difference between with flashtools & making S1 Dump and just backing up with TA Backup?

Aria.A97 said:
OK. Thanks. I backed up with TA Backup on Carbon ROM (BTW F*** those DRM keys, I never use Sony Stock ROMs, I flashed CM 10.2 just 6 hours after buying my phone at 3:35 A.M )
BTW whats difference between with flashtools & making S1 Dump and just backing up with TA Backup?
Click to expand...
Click to collapse
No difference between TA Backup and FlashTool, they make raw TA partition dump.
S1 Dump makes flashable *.ta file which can be added into FTF bundle.
Example: Part of the contents of my S1 dump. said:
Code:
000007D3 05CE 02 00 00 00 03 FC 04 00 00 00 00 00 00 00 29 00 00 00 00 00 00 01 D2 20 66 76 CC DF EB 3D C9 D5 65 95 74 A4 2D 9F 1C 21 B6 4C 93 93 81 55 F6 39 07 1D 19 10 02 28 C0 49 00 00 03 C0 00 01 02 B9 02 B7 30 82 02 B3 30 82 01 9B A0 03 02 01 02 02 01 01 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 00 30 17 31 15 30 13 06 03 55 04 03 14 0C 53 31 5F 52 6F 6F 74 5F 37 30 35 34 30 1E 17 0D 31 31 30 38 30 38 31 35 30 30 32 32 5A 17 0D 33 31 30 38 31 30 31 35 30 30 32 32 5A 30 14 31 12 30 10 06 03 55 04 03 14 09 53 31 5F 48 57 43 6F 6E 66 30 82 01 22 30 0D 06 09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F 00 30 82 01 0A 02 82 01 01 00 B5 09 41 7A C8 78 96 19 06 B7 13 4F 1E D3 28 13 4E 03 E3 A9 B6 AF 45 95 D6 07 E8 22 E8 BE F6 A3 1C AE 86 54 16 87 85 6D 44 81 20 B6 43 5B 26 AB 4B 3C 21 8A 75 A7 EA 8E 3A 3C 5F 02 CF 0A 9B A3 7A 22 CC AF 5D 9B 70 29 18 D6 57 78 57 FD AE 38 1B 3F 15 9E 83 BE 92 30 F9 11 C6 30 D6 D6 01 E3 DA D7 AA 66 5C 8D E3 D8 93 E0 DE DE 96 37 3D 68 47 82 E2 93 E9 09 70 CA 04 07 EF CD 99 7A 70 3D 50 A8 D1 00 45 E8 27 C8 86 79 9D E4 7C A4 78 AE 5E BD 79 52 B4 F5 C2 E8 D3 51 57 76 B7 7E 38 20 79 E5 AE 48 1F D6 3D 54 76 BF 30 2F 76 AD 5D 3E BB B4 E5 0C D0 0E 53 04 95 D0 A1 0E ED E1 58 D1 7E 35 27 13 37 EF 6C AB 07 95 FD C1 12 E3 3C 19 66 5E FD D3 00 AE 4B 56 38 22 CA CC 9A E0 7C DB E3 B2 F1 36 26 96 E5 0E F6 E7 5E AF 73 51 7B AA D1 03 C1 B8 9F 24 DB 85 E2 85 45 ED 98 B0 75 A5 02 03 01 00 01 A3 0D 30 0B 30 09 06 03 55 1D 13 04 02 30 00 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 00 03 82 01 01 00 1B 90 C7 B0 E8 20 0E 1B 83 50 3A C9 E4 1E B6 DA 46 46 AB 55 CA B7 87 CF E7 B0 B5 FA 6E EE 11 19 87 FC 85 00 94 4C 61 B5 60 43 19 BC 4E B3 E7 0D A1 64 37 E0 21 6D B7 E9 E6 58 22 C3 C4 93 B4 C3 0E 05 A7 63 14 02 6E AD 3C 89 CE 54 3D E6 26 43 B0 5C 2D F4 2B DF 9B 59 73 DF 68 B8 FC 20 D8 20 26 70 D7 8E 97 83 04 43 3B 2F B1 5C A7 16 45 8A 7E FB 6F 71 03 EB 4B 5D 18 C0 88 C9 BC 15 DA E9 9B AA F8 08 33 A4 32 6F 40 15 7B B3 86 07 1E D9 1A A1 24 4E EB D1 86 8F F4 90 62 4D 77 3E 5E 89 8A 09 A9 51 25 B6 CF CC D8 14 3B E5 5D B0 98 71 16 B6 B7 69 B3 1C 60 6C A0 83 5A 6C A7 EE A5 BB 71 11 2D 21 83 5D 33 D9 22 E9 D1 94 2E 70 16 AF E8 AA 06 54 56 D3 22 36 FE BF 47 6A 20 A1 30 27 06 06 AA 9A E4 DB 64 96 68 DD 27 C0 63 11 1C 2C 59 BD B4 01 D1 8B CB 53 E4 17 4A 73 53 F7 41 A7 02 01 00 9B 69 55 E8 B2 4E 56 1F 90 9F 54 B9 C3 E9 AF D4 3E CA EB 2A 5B F6 A0 2B C7 71 2D 50 DA D8 98 2F 29 1C E1 77 65 6A CA C9 0A 79 4A FD 34 F6 7E 34 92 C7 4D 54 D7 C7 51 53 9F 82 E8 11 0D 41 42 18 ED 5B 0E 0A A6 A4 75 1E D2 C8 7A D5 1C 77 BB 04 B9 56 DB 95 42 21 42 CB 75 50 AE 87 EE 2F 46 45 15 6D A0 B5 5A 52 95 29 5B D9 CE 6B 89 93 A6 13 65 B8 1D 75 C9 2D AA E2 4B 54 62 2C 9F 62 12 07 EC 6B 55 D9 AF FB 39 3B 0D BD 52 A7 9D 9A CD 0E DB D2 7C 60 09 F8 24 69 70 C9 EE 8D 39 ED FC E3 5E A0 9F F2 CA 9F 9E BB 17 99 61 DC EB F3 D6 FE D0 96 23 F6 DE 38 96 43 B8 29 8A 3D B2 A6 BE F9 47 59 E9 83 DE 53 84 F2 39 DC 4C 93 DE A3 49 7C BA E2 47 7D 5E B3 1A 04 6F E8 E1 A3 8E E6 15 18 9D 98 BE ED AF 10 79 09 9A 2A 43 2B 44 B8 5B A3 71 65 16 EE E5 FB 8C 8D EE 9B 85 C8 21 AA 01 0A 00 05 00 00 00 00 00 4E 02 00 4B 52 45 56 3D 22 52 35 45 22 3B 53 45 52 56 45 52 3D 22 62 6D 63 73 65 63 73 30 34 22 3B 41 55 54 48 43 45 52 54 3D 22 55 4E 4B 4E 4F 57 4E 22 3B 54 49 4D 45 53 54 41 4D 50 3D 22 31 33 30 36 30 33 20 30 39 3A 35 31 3A 33 37 22 00 0B 00 00 08 35 51 01 05 49 30 68 00 00 00 01 51 00 01 00 07 53 31 5F 42 6F 6F 74 00 01 00 13 00 08 00 00 00 01 00 00 00 1A 00 01 00 09 53 31 5F 4C 6F 61 64 65 72 00 01 00 0B 00 00 00 01 00 05 53 31 5F 53 57 00 02 00 13 00 20 00 00 00 03 00 00 00 04 00 00 00 09 00 00 00 0B 00 00 00 0F 00 00 00 10 00 00 00 11 00 00 00 12 00 01 00 08 53 31 5F 52 50 4D 46 57 00 02 00 23 00 00 00 01 00 07 53 31 5F 43 75 73 74 00 01 00 13 00 08 00 00 00 09 00 00 00 12 00 01 00 05 53 31 5F 53 4C 00 01 00 43 00 00 00 01 00 0A 53 31 5F 4D 6F 64 65 6D 4F 53 00 02 00 23 00 00 00 01 00 0A 53 31 5F 4D 6F 64 65 6D 53 57 00 02 00 13 00 0C 00 00 00 07 00 00 00 08 00 00 00 13 00 01 00 08 53 31 5F 53 50 53 53 57 00 02 00 23 00 00 00 01 00 07 53 31 5F 46 4F 54 41 00 02 00 23 00 00 00 01 00 0C 53 31 5F 48 65 78 61 67 6F 6E 53 57 00 02 00 23 00 00 00 01 00 07 53 31 5F 52 49 56 41 00 02 00 23 00 00 00 01 00 06 53 31 5F 45 54 53 00 02 00 13 00 08 00 00 00 03 00 00 00 04 00 01 00 09 53 31 5F 52 41 4D 45 54 53 00 02 00 0B 00 00 00 01 00 09 53 31 5F 54 5A 45 78 65 63 00 02 00 A3 00 00 00 06 00 04 71 C5 8D 09 00 10 10 FE D0 A0 26 F6 D5 08 65 DF EC 9F 76 F2 95 E7
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
00000851 03CA 02 00 09 07 DA 27 0F 00 15 02 4A 00 03 BC 00 01 02 B5 02 B3 30 82 02 AF 30 82 01 97 A0 03 02 01 02 02 01 01 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 00 30 17 31 15 30 13 06 03 55 04 03 14 0C 53 31 5F 52 6F 6F 74 5F 37 30 35 34 30 1E 17 0D 31 31 30 38 30 38 31 35 30 30 32 30 5A 17 0D 33 31 30 38 31 30 31 35 30 30 32 30 5A 30 10 31 0E 30 0C 06 03 55 04 03 14 05 53 31 5F 53 4C 30 82 01 22 30 0D 06 09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F 00 30 82 01 0A 02 82 01 01 00 95 7C 28 6C 4F 12 7D E5 DA D2 5F 83 0D 7F A2 B4 0B 0A 26 DB 56 89 0E 7E B5 F9 58 F7 60 3F D6 16 21 BA 75 B4 98 17 C6 23 A0 EB 4A DE 89 99 B8 24 53 21 B6 AE 53 FB 9D 3B C8 64 6E 72 5C A5 B5 43 04 C3 4B 59 76 0F B7 0C 52 CE 17 20 00 52 9D 65 17 F9 A7 56 A4 2F DB BF D7 20 E2 42 25 BF 71 A9 A1 DD 25 06 C3 28 68 DA D8 24 16 61 D8 E4 A8 3B DB 39 E7 89 E4 B8 BC 51 4C 8B C8 24 18 C4 5B C8 AF 1B 31 9D 4B E4 7A 37 F6 2B 9E A9 E7 E2 15 7E E8 35 87 A8 35 B1 2C E5 2E EA CE 3E 01 7B E9 7E 93 EF 81 68 08 4D 5A 82 02 A3 36 FF 60 41 8D FD BC B3 E2 71 77 DE ED C7 3A A2 26 9C A9 91 50 6D 64 72 7F 21 3F 02 51 85 F2 EE 4C 49 92 A1 F2 54 30 E1 60 11 2A EA DB 37 05 76 08 D8 13 58 37 1F EE 22 70 3E 94 15 22 E8 B6 73 73 7D 8F CF 34 DE C2 CA 1C 7D B1 80 2B 69 74 ED 30 52 1D 26 40 F7 02 03 01 00 01 A3 0D 30 0B 30 09 06 03 55 1D 13 04 02 30 00 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 00 03 82 01 01 00 2B 54 DE B3 43 0A EF 6D 18 CB E4 EB F5 DC 5D 18 E4 A6 4C 15 A2 5A 09 DA AE C3 FD 2C 3F B6 0B 89 BF 35 F7 57 E7 0E 4F 88 25 74 3B B5 2B 64 F2 2F B9 FB 4D DA B2 3A 2B 00 2D F2 5C 6A 37 46 FC 82 66 CB 93 58 74 4E E7 FC 71 E9 CA 5D 4F 66 9C 2E 2D 34 4C 71 86 79 DE 54 44 A6 47 A3 44 E8 F3 BD 67 46 E7 E2 02 2B F8 AA 0C FD 5E C2 A9 CE 41 82 3D F7 C7 65 D2 0B 8A AE 23 C5 A6 2F 9A 9A 23 18 F6 96 C7 0B E5 8A 78 A5 77 B4 04 12 95 45 09 E8 B9 7A 13 6C D7 A6 90 D1 44 0F 11 3B 32 D7 99 C5 14 A3 00 B5 BE F2 95 E0 82 51 68 AB DE 02 A8 9B 48 86 BB C9 DF 9F C9 25 FB 3A FF 1C 43 50 D5 68 1B ED 69 EB FE CE 44 C6 69 A1 B4 58 F3 AB 4A 23 50 5D 3B 6C 32 16 73 FF DB 14 8D 59 14 35 AA 34 CD 1F 00 C0 5E 79 D2 FE B3 FA 2F 19 90 BB 53 89 E6 65 E1 C5 71 7B 66 A2 B7 50 D3 7C 2B 5F 6D 2B 02 01 00 52 D9 86 32 22 BC 56 9D 50 94 C6 05 55 A5 40 37 52 DF DE 9F 05 9D 23 CE 51 5D E3 24 21 3F 94 8C 3C F5 C9 D7 B4 97 1E 51 BC 14 2E E3 88 8F 65 17 1A 0E 9B D9 0B A2 57 66 90 49 30 EC 9B BE 82 06 3C 75 9A 02 4E 9D CC 0B D8 A5 89 B7 25 1B B1 1C B4 C5 9D 35 5B 0E 62 89 00 3C 82 04 97 83 39 8F 43 63 DB 19 21 9D B0 BF 61 45 4C 2B 7B 06 12 D0 8F 78 16 29 55 23 EC 01 0A 8D 91 38 2D AE 3B 12 23 68 18 A5 2B 11 53 8D DE F3 C7 D3 60 9B 78 02 C1 46 5D FD B3 89 A8 E1 D6 F0 E1 14 31 88 DB C9 5A BC E0 00 2A 7D 76 D8 E0 88 73 A9 2A C7 6A 1A 87 55 B8 90 45 59 0E B5 EF DC CE A3 9D 32 41 36 3F 9B 23 16 66 34 62 2D 28 21 7C 6D 5B ED C4 6F B6 BA F8 28 4D 08 DF 71 1F 82 69 6D 3C DE 79 F9 CD F9 0E B5 A3 DC 43 23 84 66 79 57 C6 49 3E C5 9D D3 66 1B 24 72 5F 4B 18 A2 49 1B 08 6D E2 5B
Click to expand...
Click to collapse

sony v hard brick
hi every body
special thanks to friend with good information. I have root my Sony xperia V and no problem about root after that I try to make 2 partition in SD card my Sony going to loop the boot when device is booting i disconnect the battery to exit the SD card to back in 1 partition .my Sony not start again no on,no response to charger ,to computer ,and flash tools,completely dead.
I use your site information but I don't have blink in Led. when I try to connect to PC the PC hang it and no response.please help I repair my device.
thanks

the_laser said:
here is script, however it is very easy to make script yourself : View attachment 2983316
using winhex save all unit data as "hex ascii" and add command
Code:
tawrite:0002<unit number, 4 hex digits><unit data>
you need to find and prepare like this 3 critical units : 07D3, 07DA, 0851
then copy result units into file with extension .gdfs and zip it into file with extension .SIN_FILE_SET
Click to expand...
Click to collapse
I tried to repair phone, but seems something wrong. It wont start flashing process.
Phone recognized as ZEUS Flash Device (USB\VID_05C6&PID_9008&REV_0000) when i connect testpoint.
After these steps
10.Run the s1tool and select S1 EMERGENCY MODE for the phone type.
11. Press the flash button, and choice the repair script file for your device.
12. Press testpoint ready and repeat the step 6.
13. Remove the testpoint and press READY.when program will ask you to do so.
Click to expand...
Click to collapse
Device recognized as SOMC Flash Device (USB\VID_0FCE&PID_ADDE&REV_0100
)
Here S1Tool log:
Code:
29.10.2014 14:56:50 Welcome to S1 tool.
29.10.2014 14:56:50 That is small and crippled subset of SETOOL2 service tool.
29.10.2014 14:57:10
29.10.2014 14:57:10 SELECT FIRMWARE PACKAGES
29.10.2014 14:57:10 YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
29.10.2014 14:57:13 CHECKING PACKAGES ...
29.10.2014 14:57:13
29.10.2014 14:57:13 DETACH USB CABLE FROM PHONE
29.10.2014 14:57:13 REMOVE BATTERY FROM PHONE
29.10.2014 14:57:13 ATTACH TESTPOINT
29.10.2014 14:57:13 PRESS "READY", THEN ATTACH USB CABLE TO PHONE
29.10.2014 14:57:13
29.10.2014 14:57:23 will use DLOAD protocol ...
29.10.2014 14:57:23 0808010600900000
29.10.2014 14:57:23 0D0F50424C5F446C6F6164564552322E30
29.10.2014 14:57:23 162001000100
29.10.2014 14:57:23 17004001000100E1506B00
29.10.2014 14:57:23 PRODUCT DETECTED: "SONY MSM8960-3 OEM1 Fused"
29.10.2014 14:57:23 1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
29.10.2014 14:57:23 PROCESSING ...
29.10.2014 14:57:25 REMOVE TESTPOINT NOW, THEN PRESS "READY"
29.10.2014 14:57:25
29.10.2014 14:57:29 Emergency loader uploaded ...
29.10.2014 14:57:30
29.10.2014 14:57:30 RUNNING S1_PRELOADER VER "R5F001"
29.10.2014 14:57:30 LOADER AID: 0001
29.10.2014 14:57:33 DEVICE ID: 71C58D09
29.10.2014 14:57:33 FLASH ID: "0015/00000000"
29.10.2014 14:57:33 LOADER VERSION: "R5F001"
29.10.2014 14:57:33
29.10.2014 14:57:33 WRITING PACKAGES ...
29.10.2014 14:57:33 Elapsed:23 secs.
29.10.2014 14:57:57
29.10.2014 14:57:57 SELECT FIRMWARE PACKAGES
29.10.2014 14:57:57 YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
29.10.2014 14:58:33 CHECKING PACKAGES ...
29.10.2014 14:58:33
29.10.2014 14:58:33 DETACH USB CABLE FROM PHONE
29.10.2014 14:58:33 REMOVE BATTERY FROM PHONE
29.10.2014 14:58:33 ATTACH TESTPOINT
29.10.2014 14:58:33 PRESS "READY", THEN ATTACH USB CABLE TO PHONE
29.10.2014 14:58:33
29.10.2014 14:58:48 will use DLOAD protocol ...
29.10.2014 14:58:48 0808010600900000
29.10.2014 14:58:48 0D0F50424C5F446C6F6164564552322E30
29.10.2014 14:58:48 162001000100
29.10.2014 14:58:48 17004001000100E1506B00
29.10.2014 14:58:48 PRODUCT DETECTED: "SONY MSM8960-3 OEM1 Fused"
29.10.2014 14:58:48 1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
29.10.2014 14:58:48 PROCESSING ...
29.10.2014 14:58:49 REMOVE TESTPOINT NOW, THEN PRESS "READY"
29.10.2014 14:58:49
29.10.2014 14:58:53 Emergency loader uploaded ...
29.10.2014 14:58:54
29.10.2014 14:58:54 RUNNING S1_PRELOADER VER "R5F001"
29.10.2014 14:58:54 LOADER AID: 0001
29.10.2014 14:58:56 DEVICE ID: 71C58D09
29.10.2014 14:58:56 FLASH ID: "0015/00000000"
29.10.2014 14:58:56 LOADER VERSION: "R5F001"
29.10.2014 14:58:56
29.10.2014 14:58:56 WRITING PACKAGES ...
29.10.2014 14:58:56 Elapsed:59 secs.
29.10.2014 14:59:12
29.10.2014 14:59:12 SELECT FIRMWARE PACKAGES
29.10.2014 14:59:12 YOU CAN SELECT SEVERAL PACKAGES WITH CTRL BUTTON
29.10.2014 14:59:18 CHECKING PACKAGES ...
29.10.2014 14:59:18
29.10.2014 14:59:18 DETACH USB CABLE FROM PHONE
29.10.2014 14:59:18 REMOVE BATTERY FROM PHONE
29.10.2014 14:59:18 ATTACH TESTPOINT
29.10.2014 14:59:18 PRESS "READY", THEN ATTACH USB CABLE TO PHONE
29.10.2014 14:59:18
29.10.2014 14:59:36 will use DLOAD protocol ...
29.10.2014 14:59:36 0808010600900000
29.10.2014 14:59:36 0D0F50424C5F446C6F6164564552322E30
29.10.2014 14:59:36 162001000100
29.10.2014 14:59:36 17004001000100E1506B00
29.10.2014 14:59:36 PRODUCT DETECTED: "SONY MSM8960-3 OEM1 Fused"
29.10.2014 14:59:36 1801000F43240892D02F0DC96313C81351B40FD5029ED98FF9EC7074DDAE8B05CDC8E1
29.10.2014 14:59:36 PROCESSING ...
29.10.2014 14:59:38 REMOVE TESTPOINT NOW, THEN PRESS "READY"
29.10.2014 14:59:38
29.10.2014 14:59:41 Emergency loader uploaded ...
29.10.2014 14:59:42
29.10.2014 14:59:42 RUNNING S1_PRELOADER VER "R5F001"
29.10.2014 14:59:42 LOADER AID: 0001
29.10.2014 14:59:44 DEVICE ID: 71C58D09
29.10.2014 14:59:44 FLASH ID: "0015/00000000"
29.10.2014 14:59:44 LOADER VERSION: "R5F001"
29.10.2014 14:59:44
29.10.2014 14:59:44 WRITING PACKAGES ...
29.10.2014 14:59:44 Elapsed:32 secs.
Last thing that i've done before brick, is wipe in cwm, and accidentally format sdcard0. Could it damage or format whole eMMC? If so, can i repair GPT table, partitions and restore TA somehow?
Is there any way to recover it?

sony v hard brick
last remember is my device have same message as last friend said (ZEUS flash device) when it connect to PC the message come and after that PC hang it until I push the reset push button.please answer to solve this problem.I don't have information about these 07D3-07DA-0851 ????? please somebody guide step by step how we can alive the device back

@ElArchibald:
did you selected .SIN_FILE_SET package ?
if yes - then your phone have damaged trim area structure and only way to fix it - use JTAG interface to copy first ~8 mb from working phone, then using s1tool to restore security units backup.

the_laser said:
@ElArchibald:
did you selected .SIN_FILE_SET package ?
if yes - then your phone have damaged trim area structure and only way to fix it - use JTAG interface to copy first ~8 mb from working phone, then using s1tool to restore security units backup.
Click to expand...
Click to collapse
Yes. I selected .SIN_FILE_SET. Thanks for help and info. As i understand, I only can buy working main board (or cracked phone with working board), and/or find JTAG pinouts to repair my eMMC.

sony v hard brick
I think I cant alive my phone back because our friend here didn't have any solution about to repair my phone

the_laser said:
@ElArchibald:
did you selected .SIN_FILE_SET package ?
if yes - then your phone have damaged trim area structure and only way to fix it - use JTAG interface to copy first ~8 mb from working phone, then using s1tool to restore security units backup.
Click to expand...
Click to collapse
@the_laser
Sorry to bother you.
Can i simply do "dd if=/dev/block/mmcblk0 of=/storage/sdcard1/dump.bin bs=8M count=1" on working device to get dump? Or this is not enough and need dump made through JTAG?
Don't want to disassemble the donor if I find it. And which JTAG solution can i use for Xperia devices 2012-2014?
If so can somebody make a dump for me?

dump is enough
about JTAG - i'm recommend RIFF box.

removed

GDFS is not worked on my Xperia Z1 Compat, I have created gdfs and was not able to repair bricked ta, status was "writing packages" without any error but nothing is writen, status allways was error in header when trying to flash any sin! This might help you -> http://forum.xda-developers.com/showpost.php?p=56571705&postcount=314

Related

WIFI not turn on.

Hi!
I can't turn on wifi. When I touch in switch it do not on. I already made several hard resets and this does not result.
How I can resolve this?

I have the same problem, anyone help us ?

1
must install slp-1.40.olinex
2
enter into bootloader
3
connect to usb (disable activesync usb)
3
open eprom.nb with an hex editor and replace 78 with your mac adress in revers mode :
for exaple
real mac is 00 - 18 - 41 - c0 - 68 - f1
be written f1 68 c0 41 18 00
at 50h - 60h
Code:
00 00 01 0D 56 40 00 00 - 00 02 6D 54 [COLOR="Red"]78 78 78 78 [/COLOR]| [email protected][COLOR="red"]xxxx[/COLOR]
[COLOR="Red"]78 78[/COLOR] 00 00 01 15 58 A4 - 00 00 00 01 31 56 01 02 | [COLOR="red"]xx[/COLOR]....X.....1V..
so will become
Code:
00 00 01 0D 56 40 00 00 - 00 02 6D 54 [COLOR="Red"]F1 68 C0 41 [/COLOR]| [email protected][COLOR="red"]ñhÀA[/COLOR]
[COLOR="Red"]18 00[/COLOR] 00 00 01 15 58 A4 - 00 00 00 01 31 56 01 02 | [COLOR="red"]..[/COLOR]....X.....1V..
4
copy eprom.nb into directory of mtty
5
open mtty
command :
task 32
lnb eprom.nb 880fc000 320
lnb eprom.nb 8839d9c0 320
reset
Tell me if solved

hi all
I have done exactly as laid out above but its doesn't seem to work. would it make any difference if the spl is signed or unsigned version?
Also does it matter what version of mtty you use?
any help you could shed on this would be great.
thanks in advance.

mrlard12 said:
hi all
I have done exactly as laid out above but its doesn't seem to work. would it make any difference if the spl is signed or unsigned version?
Also does it matter what version of mtty you use?
any help you could shed on this would be great.
thanks in advance.
Click to expand...
Click to collapse
i use unsigned version

i have the same problem, except that wifi can recive a small part of the signal..
I have a 300n router and i can see its signial only staying next to it...tne phone gives a low level data reception and has difficulties to get the ip....
i 'll change hard spl soon

LucaAL said:
i have the same problem, except that wifi can recive a small part of the signal..
I have a 300n router and i can see its signial only staying next to it...tne phone gives a low level data reception and has difficulties to get the ip....
i 'll change hard spl soon
Click to expand...
Click to collapse
but this solution is only wlan not turn on

not to turn on it is very similar to not to connect....by the way no changes after having installed the radio 1.17... i donnow if i have installed the hard spl 1.93 ..i did it but he is always 1.4...

LucaAL said:
not to turn on it is very similar to not to connect....by the way no changes after having installed the radio 1.17... i donnow if i have installed the hard spl 1.93 ..i did it but he is always 1.4...
Click to expand...
Click to collapse
ita :
allora da quello che ho capito
hai un router sitecom 300n
e il diamond non si connette anche se lo vede come segnale ?
eng :
then from what I understand
you have a router Sitecom 300N
and the diamond does not connect even though it sees as a signal?

I am sorry for my error....i have solved my problem disassembling the device and reassembling the cpu zone; there were a cple not enough plugged in his hole
Ita: inoltre ciao e scusate per il disturbo

gruptnt said:
1
must install slp-1.40.olinex
2
enter into bootloader
3
connect to usb (disable activesync usb)
3
open eprom.nb with an hex editor and replace 78 with your mac adress in revers mode :
for exaple
real mac is 00 - 18 - 41 - c0 - 68 - f1
be written f1 68 c0 41 18 00
at 50h - 60h
Code:
00 00 01 0D 56 40 00 00 - 00 02 6D 54 [COLOR="Red"]78 78 78 78 [/COLOR]| [email protected][COLOR="red"]xxxx[/COLOR]
[COLOR="Red"]78 78[/COLOR] 00 00 01 15 58 A4 - 00 00 00 01 31 56 01 02 | [COLOR="red"]xx[/COLOR]....X.....1V..
so will become
Code:
00 00 01 0D 56 40 00 00 - 00 02 6D 54 [COLOR="Red"]F1 68 C0 41 [/COLOR]| [email protected][COLOR="red"]ñhÀA[/COLOR]
[COLOR="Red"]18 00[/COLOR] 00 00 01 15 58 A4 - 00 00 00 01 31 56 01 02 | [COLOR="red"]..[/COLOR]....X.....1V..
4
copy eprom.nb into directory of mtty
5
open mtty
command :
task 32
lnb eprom.nb 880fc000 320
lnb eprom.nb 8839d9c0 320
reset
Tell me if solved
Click to expand...
Click to collapse
It don't work...
People, pls another solution?

I did as mention but honestly I don`t know where to find the MAC address of my device. In wireless, because it cannot be turned on, I cannot see the MAC address. Anyway, I try and change it like in your example, using the same MAC as you provided, but nothing happens. Any help appreciated!

Big Problem - Not Possible to Flash

Hello guys
After i Installed CM10, the Auto Rotating dont Works.
For this reason, I wanted to go back to ICS.
Unfortunately, not everything went well on ICS after the down grade of JB and the IMEI was not recognized. Now I tried again to flash JB, and he always stops at "iParam207". The boot loader also writes Critical Error unable to start kernel boot unrecoverable error
I have always respected all the steps when flashing. But now it no longer works, even in emergency mode. Even with the LG update tool it is not because he supposedly always loses the connection to the phone.
Does anyone have an idea? Thank you and sorry for the Google English
BTW: Offical LG Update Tool means, that the Connection break all 1 min... Not possible to Update with this or make emergeny Flash... :/

Use search before posting.
Search for the thread rollback to ICS and follow the Instructions there.
There you go http://forum.xda-developers.com/showthread.php?t=2179126
It should work with post 1 but you can look at the post 7 as well and don't forget to say thanks to the original authors.
Sent from my LG-P880 using xda premium
Hit the Thanks Button in each and every reply that you get against your queries.

Read First!!!!
sPEADy said:
Use search before posting.
Search for the thread rollback to ICS and follow the Instructions there.
There you go http://forum.xda-developers.com/showthread.php?t=2179126
It should work with post 1 but you can look at the post 7 as well and don't forget to say thanks to the original authors.
Sent from my LG-P880 using xda premium
Hit the Thanks Button in each and every reply that you get against your queries.
Click to expand...
Click to collapse
This Tread i have already USE !!!! But not works by me.. Please Read my Question right before answer!!!!
i CANT!!!! Flash anyway... With Flashtool,or with KDZUpdate it dont works anyway... Perhabs i have lose my
IMEI ... i need a way to programming complete my Bootloader... dnt knw...
PS. Deutsch?

Have you changed the port number to 41?
Take the battery out before you connect your phone with PC and be quick to insert it back as soon you see the LG logo. After that just wait and let windows install drivers.
You need the correct dll file as well which is similar to the version you want to install.
Sent from my LG-P880 using xda premium

Joshy6 said:
This Tread i have already USE !!!! But not works by me.. Please Read my Question right before answer!!!!
i CANT!!!! Flash anyway... With Flashtool,or with KDZUpdate it dont works anyway... Perhabs i have lose my
IMEI ... i need a way to programming complete my Bootloader... dnt knw...
Click to expand...
Click to collapse
did tried reinserting the battery? I khow, this may sound wierd, but when I flasher CM no app was recognising my phone. I even couldn't get into S/W mode. I wanted to flash back to stock. I just reinserted the battery and everything was fine about getting into S/W mode. I don't know about IMEI though.

Subhajitdas298 said:
did tried reinserting the battery? I khow, this may sound wierd, but when I flasher CM no app was recognising my phone. I even couldn't get into S/W mode. I wanted to flash back to stock. I just reinserted the battery and everything was fine about getting into S/W mode. I don't know about IMEI though.
Click to expand...
Click to collapse
I Have Port change yes.
I have tried so much DLL with other .DZ files... NO WAY!!! it breaks everytime by 10%... Fail to Download...
Reinserting Battery i have tested too... Not any Change.
PS. the SW Update Mode starting, but is no way possible to flash ... With LG Mobile Support Tool too...

Joshy6 said:
I Have Port change yes.
I have tried so much DLL with other .DZ files... NO WAY!!! it breaks everytime by 10%... Fail to Download...
Reinserting Battery i have tested too... Not any Change.
PS. the SW Update Mode starting, but is no way possible to flash ... With LG Mobile Support Tool too...
Click to expand...
Click to collapse
Try Kdz updater again. I never had this problem. I am really sorry for you.

try to see log file inside log folder created in the same folder of the dll you used -may be it has more info

Subhajitdas298 said:
Try Kdz updater again. I never had this problem. I am really sorry for you.
Click to expand...
Click to collapse
Sorry. Dont Work.
And the Fastboot menu dont work too...
i come not in the Menu with "-" and Power.... Write only unable to start Kernel....
Is there a way to only flash a new bootloader?
Only way i can anything do is S/W Upgrad, but dont works with normal flashtools...

[17:02:22.616]Selected 7 Binary : c:\users\siciliana\desktop\lg flashtool and accessories\dll and dz file\gp880at-00-v20a-eur-xxx-mar-04-2013+0.dz
[17:02:22.616]DoDownload : Retry(1)
[17:02:22.616]###### Port Opend(41) ######
[17:02:22.616]Opened COM41
[17:02:22.616]=====================================================
[17:02:22.616]= DLL Info : Dec 12 2012 11:01:58
[17:02:22.616]=====================================================
[17:02:22.648] MODEL880
[17:02:22.804] IMEI:
[17:02:22.960] PID:
[17:02:23.116] SWV:
[17:02:23.116][VerReq]
[17:02:23.116]Model Name : Target(P880)
[17:02:23.116][FeatureQuery]
[17:02:23.131]This firmware supports the following features:
[17:02:23.131] - Protocol Version : 3
[17:02:23.131] - CP Download : TRUE
[17:02:23.131] - AP Download : TRUE
[17:02:23.131] - ROM Download : TRUE
[17:02:23.131] - MaxPacketLength : 0x40000
[17:02:23.131] - Battery Level : 87%
[17:02:23.131] - OperatingMode : 4
[17:02:23.131] - AutoUpdateBuffer : 1
[17:02:23.131] - ThreadOn : 1
[17:02:23.131] - Flashless : 0
[17:02:23.131] - UpdateBct : 0
[17:02:23.350] Dz Information
[17:02:23.350] - Model Name : Binary(P880)
[17:02:23.350] - SWV : GP880AT-00-V20a-EUR-XXX-MAR-04-2013+0
[17:02:23.350] - BuildTime : 2013-03-04 05:54:18
[17:02:23.350] - SecureType : 1
[17:02:23.350] - TotalFiles : 10
[17:02:23.350] Loading FLS
[17:02:23.677]IntelFlash::GetDownloadSize
[17:02:23.677] - PSI : 35316
[17:02:23.677] - EBL : 157172
[17:02:23.677] - Hardware : 172
[17:02:23.677] - Security : 2048
[17:02:23.677] - DownloadData : 20572
[17:02:23.677] - Security : 2048
[17:02:23.677] - DownloadData : 167768
[17:02:23.677] - Security : 2048
[17:02:23.677] - DownloadData : 697892
[17:02:23.677] - Security : 2048
[17:02:23.677] - DownloadData : 356380
[17:02:23.677] - Security : 2048
[17:02:23.677] - DownloadData : 7864472
[17:02:23.677] Loading CFG
[17:02:23.708]NvidiaFlash::GetDownloadSize
[17:02:23.708] - BCT : 6128
[17:02:23.708] - EBT : 1132440
[17:02:23.708] - EKS : 684
[17:02:23.708] - SOS : 8232960
[17:02:23.724] - LNX : 7124992
[17:02:23.724] - APP : 941138264
[17:02:23.724]TotalSize : 84628329
[17:02:23.724]CP Download Starting : 0
[17:02:23.724]CP Binary has been loaded(9349520)
[17:02:23.724][Intel] MemoryMap
[17:02:23.724] FlashStartAddr : 0x40000000
[17:02:23.724] CUST : StartAddress(0x63000000), Length(0x00500000) : LINUX
[17:02:23.724] CUST : StartAddress(0x38000000), Length(0x08400000) : CLONE
[17:02:23.724] CUST : StartAddress(0x30000000), Length(0x08400100) : PREFLASH
[17:02:23.724] CUST : StartAddress(0x20000000), Length(0x00500000) : USBRO_ISO
[17:02:23.724] CUST : StartAddress(0x90000000), Length(0x001FE000) : CUSTDATA
[17:02:23.724][CMD_Intel_DownloadMode]
[17:02:24.301] - Device synchronized
[17:02:24.301][Injecting PSI RAM] : 35316
[17:02:24.301] - Sending PSI RAM
[17:02:27.374] - Receiving CRC
[17:02:27.390] - Received CRC OK : 01
[17:02:27.390] - Receiving ACK
[17:02:27.406] - Received ACK : 01 00 AA
[17:02:27.406] - PSI RAM Running
[17:02:27.406][Injecting EBL] : 157172
[17:02:27.406] - Sending EBL Length
[17:02:27.421] - Receiving ACK
[17:02:27.437] - Received ACK : 0xCCCC
[17:02:27.437] - Sending EBL : 157172
[17:02:41.212] - Sending CRC : FA
[17:02:41.227] - Receiving ACK
[17:02:41.274] - Received OK : 51 A5
[17:02:41.274] - Receiving Capabilities : 76
[17:02:41.290] - Boot-loader is active
[17:02:41.290] - EBL version: XMM6260_20.21_M1S1
[17:02:41.290] - Boot mode is: 00BB
[17:02:41.290] - EBL Running
[17:02:41.290][ReqSetProtConf]
[17:02:41.290] == prot_capabilities_t ==
[17:02:41.290] - protocol_version : 11
[17:02:41.290] - package_size : 2 -> 8
[17:02:41.290] - crc_type : 1
[17:02:41.290] - skip_writeblock_tx : 0
[17:02:41.290] - compression : 11 -> 10
[17:02:41.290] - compression : 10
[17:02:41.290] - flags : 1
[17:02:41.290] - erase_sector_verify : 0
[17:02:41.290] - flash_debug : 0
[17:02:41.290] - protocol_crc : 0
[17:02:41.290] - skip_erase : 1 -> 0
[17:02:41.290] - skip_wr_pack_crc : 0
[17:02:41.290] - Sending capabilities
[17:02:41.321] - Receiving ACK
[17:02:41.336] - Received : ACK 0100
[17:02:41.336][CnfBaudChange] : 3250000
[17:02:41.336] - Sending BaudRate
[17:02:41.352] - Receiving ACK
[17:02:41.399] - Received BaudRate : 3250000
[17:02:41.399] - Changing BaudRate
[17:02:41.414] - Changed BaudRate : 3250000
[17:02:41.414][ReqFlashId]
[17:02:41.414] - Platform : 14
[17:02:41.414] - ProjectName : XMM6260
[17:02:41.414] - Sending HardWare Info
[17:02:41.430] - Receiving ACK
[17:02:41.446][ERROR] Type : 0041 <> 0801
[17:02:41.446] - IndErrorMsg
[17:02:41.461]File_id(34), Line_number(291), Error_class(1), Error_code(70)
[17:02:41.461]File_id(16), Line_number(546), Error_class(1), Error_code(7)
[17:02:41.461]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:02:41.461]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:02:41.461]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:02:41.461]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:02:41.461]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:02:41.461]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:02:41.461] - Failure!
[17:02:41.461]ERROR : _Func_02_Ebl_3_ReqFlashId - Line(266)
[17:02:41.461]__Proc_NormalDownload : 0
[17:02:41.461]Error! IntelFlash:__Proc_NormalDownload
[17:02:41.461]_DoDownload : 0
[17:02:41.461]
-----------------------------------------Trace Last 100 Message-------------------------------------------------
[17:02:33.895][T008207] 44 00 00 00 00 20 00 00 10 27 00 00 D4 1D 7E 0E E1 8B E0 24 C0 9D E5 07 C0 CE E5 03 C0 D5 E3 1B D........'.........$............
[17:02:34.613][R000010] 44 00 00 00 00 20 00 00 67 F3 D.......g.
[17:02:34.613][T008207] 44 00 00 00 00 20 00 00 10 27 00 00 D4 1D 7E 4C 12 9F E5 80 00 81 E0 B0 00 D0 E1 01 10 45 E2 01 D........'.....L.............E..
[17:02:35.330][R000010] 44 00 00 00 00 20 00 00 67 F3 D.......g.
[17:02:35.330][T008207] 44 00 00 00 00 20 00 00 10 27 00 00 D4 1D 7E 03 11 83 E0 90 3D 1F E5 01 21 D3 E7 70 1D 1F E5 70 D........'..........=...!..p...p
[17:02:36.048][R000010] 44 00 00 00 00 20 00 00 67 F3 D.......g.
[17:02:36.048][T008207] 44 00 00 00 00 20 00 00 10 27 00 00 D4 1D 7E B0 10 D1 E1 9C C2 9F E5 81 30 8C E0 05 11 85 E0 C8 D........'..............0.......
[17:02:36.766][R000010] 44 00 00 00 00 20 00 00 67 F3 D.......g.
[17:02:36.766][T008207] 44 00 00 00 00 20 00 00 10 27 00 00 D4 1D 7E 00 41 00 00 4F 00 00 00 01 00 00 00 00 11 00 00 01 D........'......A..O............
[17:02:37.483][R000010] 44 00 00 00 00 20 00 00 67 F3 D.......g.
[17:02:37.483][T008207] 44 00 00 00 00 20 00 00 10 27 00 00 D4 1D 7E 01 00 00 1A 00 00 A0 E3 CE FF FF EA 00 00 D2 E5 58 D........'.....................X
[17:02:38.201][R000010] 44 00 00 00 00 20 00 00 67 F3 D.......g.
[17:02:38.201][T008207] 44 00 00 00 00 20 00 00 10 27 00 00 D4 1D 7E 00 F0 20 E3 00 00 A0 E3 30 80 BD E8 00 F0 20 E3 00 D........'.............0........
[17:02:38.918][R000010] 44 00 00 00 00 20 00 00 67 F3 D.......g.
[17:02:38.918][T008207] 44 00 00 00 00 20 00 00 10 27 00 00 D4 1D 7E 06 10 A0 E1 00 00 42 E0 05 00 80 E0 01 50 80 E2 01 D........'...........B......P...
[17:02:39.636][R000010] 44 00 00 00 00 20 00 00 67 F3 D.......g.
[17:02:39.636][T008207] 44 00 00 00 00 20 00 00 10 27 00 00 D4 1D 7E 64 08 1F E5 10 20 90 E5 0C 10 90 E5 07 30 A0 E1 06 D........'.....d............0...
[17:02:40.354][R000010] 44 00 00 00 00 20 00 00 67 F3 D.......g.
[17:02:40.354][T008207] 44 00 00 00 00 20 00 00 10 27 00 00 D4 1D 7E 06 F1 93 E7 38 70 9D E5 00 00 57 E3 02 00 00 1A 01 D........'.........8p....W......
[17:02:41.071][R000010] 44 00 00 00 00 20 00 00 67 F3 D.......g.
[17:02:41.071][T001539] 44 00 00 00 F4 05 00 00 10 27 00 00 B1 DB 7E 10 00 00 00 EC B1 01 01 02 02 00 00 00 08 00 00 20 D........'......................
[17:02:41.212][R000010] 44 00 00 00 F4 05 00 00 26 CC D.......&.
[17:02:41.212] - Sending CRC : FA
[17:02:41.212][T000016] 44 00 00 00 01 00 00 00 E8 03 00 00 41 0D 7E FA D...........A...
[17:02:41.227][R000010] 44 00 00 00 01 00 00 00 E7 EC D.........
[17:02:41.227] - Receiving ACK
[17:02:41.227][T000015] 43 01 00 00 02 00 00 00 E8 03 00 00 98 50 7E C............P.
[17:02:41.274][R000012] 43 00 00 00 02 00 00 00 51 A5 B4 76 C.......Q..v
[17:02:41.274] - Received OK : 51 A5
[17:02:41.274] - Receiving Capabilities : 76
[17:02:41.274][T000015] 43 01 00 00 4C 00 00 00 88 13 00 00 15 19 7E C...L..........
[17:02:41.290][R000086] 43 00 00 00 4C 00 00 00 BB 00 00 00 14 00 00 00 15 00 00 00 58 4D 4D 36 32 36 30 5F 32 30 2E 32 C...L...............XMM6260_20.2
[17:02:41.290] - Boot-loader is active
[17:02:41.290] - EBL version: XMM6260_20.21_M1S1
[17:02:41.290] - Boot mode is: 00BB
[17:02:41.290] - EBL Running
[17:02:41.290][ReqSetProtConf]
[17:02:41.290] == prot_capabilities_t ==
[17:02:41.290] - protocol_version : 11
[17:02:41.290] - package_size : 2 -> 8
[17:02:41.290] - crc_type : 1
[17:02:41.290] - skip_writeblock_tx : 0
[17:02:41.290] - compression : 11 -> 10
[17:02:41.290] - compression : 10
[17:02:41.290] - flags : 1
[17:02:41.290] - erase_sector_verify : 0
[17:02:41.290] - flash_debug : 0
[17:02:41.290] - protocol_crc : 0
[17:02:41.290] - skip_erase : 1 -> 0
[17:02:41.290] - skip_wr_pack_crc : 0
[17:02:41.290] - Sending capabilities
[17:02:41.290][T000101] 44 00 00 00 56 00 00 00 20 4E 00 00 CE 88 7E 02 00 86 00 4C 00 BB 00 00 00 14 00 00 00 15 00 00 D...V....N.........L............
[17:02:41.321][R000010] 44 00 00 00 56 00 00 00 D0 6E D...V....n
[17:02:41.321] - Receiving ACK
[17:02:41.321][T000015] 43 01 00 00 0C 00 00 00 88 13 00 00 E4 7C 7E C............|.
[17:02:41.336][R000022] 43 00 00 00 0C 00 00 00 02 00 86 00 02 00 01 00 89 00 03 00 B5 2C C....................,
[17:02:41.336] - Received : ACK 0100
[17:02:41.336][CnfBaudChange] : 3250000
[17:02:41.336] - Sending BaudRate
[17:02:41.336][T000029] 44 00 00 00 0E 00 00 00 20 4E 00 00 FB 9B 7E 02 00 82 00 04 00 50 97 31 00 9E 01 03 00 D........N...........P.1.....
[17:02:41.352][R000010] 44 00 00 00 0E 00 00 00 1E 5E D........^
[17:02:41.352] - Receiving ACK
[17:02:41.352][T000015] 43 01 00 00 06 00 00 00 10 27 00 00 EF B4 7E C........'.....
[17:02:41.368][R000016] 43 00 00 00 06 00 00 00 02 00 82 00 04 00 C7 FA C...............
[17:02:41.368][T000015] 43 01 00 00 04 00 00 00 88 13 00 00 58 51 7E C...........XQ.
[17:02:41.383][R000014] 43 00 00 00 04 00 00 00 50 97 31 00 9E D9 C.......P.1...
[17:02:41.383][T000015] 43 01 00 00 04 00 00 00 10 27 00 00 80 BF 7E C........'.....
[17:02:41.399][R000014] 43 00 00 00 04 00 00 00 9E 01 03 00 B7 96 C.............
[17:02:41.399] - Received BaudRate : 3250000
[17:02:41.399] - Changing BaudRate
[17:02:41.399][T000011] 45 00 00 00 50 97 31 00 F3 0E 7E E...P.1....
[17:02:41.414][R000010] 45 00 00 00 50 97 31 00 F3 0E E...P.1...
[17:02:41.414] - Changed BaudRate : 3250000
[17:02:41.414][ReqFlashId]
[17:02:41.414] - Platform : 14
[17:02:41.414] - ProjectName : XMM6260
[17:02:41.414] - Sending HardWare Info
[17:02:41.414][T000197] 44 00 00 00 B6 00 00 00 20 4E 00 00 2D 90 7E 02 00 01 08 AC 00 0E 00 00 00 00 00 00 02 00 C2 01 D........N..-...................
[17:02:41.430][R000010] 44 00 00 00 B6 00 00 00 5A DA D.......Z.
[17:02:41.430] - Receiving ACK
[17:02:41.430][T000015] 43 01 00 00 0C 00 00 00 88 13 00 00 E4 7C 7E C............|.
[17:02:41.446][R000022] 43 00 00 00 0C 00 00 00 02 00 41 00 40 00 22 00 23 01 01 00 B1 EB [email protected]".#.....
[17:02:41.446][ERROR] Type : 0041 <> 0801
[17:02:41.446] - IndErrorMsg
[17:02:41.446][T000015] 43 01 00 00 3E 00 00 00 88 13 00 00 03 9A 7E C...>..........
[17:02:41.461][R000072] 43 00 00 00 3E 00 00 00 46 00 10 00 22 02 01 00 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C...>...F..."...................
[17:02:41.461]File_id(34), Line_number(291), Error_class(1), Error_code(70)
[17:02:41.461]File_id(16), Line_number(546), Error_class(1), Error_code(7)
[17:02:41.461]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:02:41.461]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:02:41.461]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:02:41.461]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:02:41.461]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:02:41.461]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:02:41.461] - Failure!
[17:02:41.461]ERROR : _Func_02_Ebl_3_ReqFlashId - Line(266)
[17:02:41.461]__Proc_NormalDownload : 0
[17:02:41.461]Error! IntelFlash:__Proc_NormalDownload
[17:02:41.461]_DoDownload : 0
[17:02:41.461]
-----------------------------------------Trace Last 100 Message-------------------------------------------------
[17:02:41.461]
------------------------------------------Trace Last 100 Message-------------------------------------------------
[17:02:41.461] ErrorCode(207)

If I am not mistaking you had flashed CWM Recovery? Or installed cm 10.1? Or can you reboot into Recovery?
Sent from my LG-P880 using xda premium

sPEADy said:
If I am not mistaking you had flashed CWM Recovery? Or installed cm 10.1? Or can you reboot into Recovery?
Sent from my LG-P880 using xda premium
Click to expand...
Click to collapse
After i have installet CM10.1 with CWM, i go back to stock JB and with the Manual u send before, i make a downgrade to ICS: But in the Version of ICS i had the Problem, that i had no IMEI number, and no Mobile Network.. So I tried to turn back to Stock JB with Emergency Flash of official LG Mobile Support tool and since there is nothing more ...
I Cant Reeboot in Recovery, the Recovery Menu dont works...

Can you boot into software update mode with phone turned off by pressing volume down key and inserting the usb in PC?
Sent from my LG-P880 using xda premium app.
If you ask for help and you get a Reply or anything productive in return then please hit the Thanks Button.

yes that work, but everytime while Flashing comes error messages...
Wie ich schon geschrieben habe , ist es mit keiner Software möglich zu flashen.
Weder mit LGFLashtool , noch mit KDZUpdate noch mit LGMobile support tool...
Aktuell bleibt er beim LG tool Immer hier stehen...

I have send you a private message reply me please. I would try to help you out of this.

Joshy6 said:
Sorry. Dont Work.
And the Fastboot menu dont work too...
i come not in the Menu with "-" and Power.... Write only unable to start Kernel....
Is there a way to only flash a new bootloader?
Only way i can anything do is S/W Upgrad, but dont works with normal flashtools...
Click to expand...
Click to collapse
Only way it will be with LGFlash Tool. I saw a "Intel Flash error"...
Try to go in S/W mode without battery, after fail, take out the battery, put it back again, reboot in S/W mode and try it.
Maybe it works...
Don't forget to use the correct .dll for the .dz file.

No Sir, Dont work. Sorry.
Is a connection Problem i think
Because everytime i upload the Flash, it's stop the Upload. Strange...
Thank for any Help...

hey I'm having the same problem here. Have u had any luck in fixing this...?

fix
Likhit6 said:
hey I'm having the same problem here. Have u had any luck in fixing this...?
Click to expand...
Click to collapse
did anyone had this errors and fixed it ???

To fix this problem may flash cp image with prog-box (example-octoplus).
Type 3845#*880# - port settings - cp image download, than connect prog-box,
than use box-software...
Sorry for my english.

[HELP] P880 lock in download/SWUpgrade mode

hi ,
i've installed CM 10.1 on my p880 but I made the error to try upgrade to CM 10.3 ... all work fine but after a reboot i lost my imei number and so I can't use the phone .
I've tried to restore the previous ROM but it still don't work ...
So i tried to install the original rom and i put the phone in download mode ( vol down + usb cable ). Now i can't exit from this mode
( if i start my phon i can see lg logo and then "S/W Upgrade Please wait while upgrading....").
I tried with LG Flash Tool and with KDZ_UPDATE ... but always it stop at 10% ....
this is the LG Flash Tool log :
[17:53:42.612]DoDownload
[17:53:42.612]=====================================================
[17:53:42.612]= DLL Info : May 8 2012 13:09:31
[17:53:42.612]=====================================================
[17:53:42.613]###### Port Opend(41) ######
[17:53:42.613]Opened COM41
[17:53:42.618] MODEL880
[17:53:42.621] IMEI:352967057613485
[17:53:42.628] PID:YE05S130528000075
[17:53:42.631] SWV:LGP880AT-00-V20a-EUR-XXX-MAR-26-2013+0
[17:53:42.631][VerReq]
[17:53:42.631]Model Name : Target(P880)
[17:53:42.631][FeatureQuery]
[17:53:42.644]This firmware supports the following features:
[17:53:42.644] - Protocol Version : 3
[17:53:42.644] - CP Download : TRUE
[17:53:42.644] - AP Download : TRUE
[17:53:42.644] - ROM Download : TRUE
[17:53:42.644] - MaxPacketLength : 0x40000
[17:53:42.644] - Battery Level : 86%
[17:53:42.644] - OperatingMode : 4
[17:53:42.644] - AutoUpdateBuffer : 1
[17:53:42.644] - ThreadOn : 1
[17:53:42.646] Dz Information
[17:53:42.646] - Model Name : Binary(P880)
[17:53:42.646] - SWV : LGP880AT-00-V10a-EUR-XXX-MAY-23-2012+0
[17:53:42.646] - BuildTime : 2012-05-23 03:22:15
[17:53:42.646] - SecureType : 1
[17:53:42.646] - TotalFiles : 10
[17:53:42.646] Loading FLS
[17:53:42.793]IntelFlash::GetDownloadSize
[17:53:42.793] - PSI : 35316
[17:53:42.793] - EBL : 157172
[17:53:42.793] - Hardware : 172
[17:53:42.793] - Security : 2048
[17:53:42.793] - DownloadData : 20572
[17:53:42.793] - Security : 2048
[17:53:42.793] - DownloadData : 167768
[17:53:42.793] - Security : 2048
[17:53:42.793] - DownloadData : 697904
[17:53:42.793] - Security : 2048
[17:53:42.794] - DownloadData : 358028
[17:53:42.794] - Security : 2048
[17:53:42.794] - DownloadData : 7978564
[17:53:42.794] Loading CFG
[17:53:42.807]NvidiaFlash::GetDownloadSize
[17:53:42.807] - BCT : 6128
[17:53:42.807] - EBT : 1142868
[17:53:42.807] - EKS : 684
[17:53:42.807] - SOS : 7577600
[17:53:42.807] - LNX : 6496256
[17:53:42.807] - APP : 679695740
[17:53:42.807]TotalSize : 67130255
[17:53:42.807]CP Download Starting : 0
[17:53:42.807]CP Binary has been loaded(9465272)
[17:53:42.807][Intel] MemoryMap
[17:53:42.807] FlashStartAddr : 0x40000000
[17:53:42.807] CUST : StartAddress(0x63000000), Length(0x00500000) : LINUX
[17:53:42.808] CUST : StartAddress(0x38000000), Length(0x08400000) : CLONE
[17:53:42.808] CUST : StartAddress(0x30000000), Length(0x08400100) : PREFLASH
[17:53:42.808] CUST : StartAddress(0x20000000), Length(0x00500000) : USBRO_ISO
[17:53:42.808] CUST : StartAddress(0x90000000), Length(0x001FE000) : CUSTDATA
[17:53:42.808][CMD_Intel_DownloadMode]
[17:53:43.367] - Device synchronized
[17:53:43.367][Injecting PSI RAM] : 35316
[17:53:43.367] - Sending PSI RAM
[17:53:46.427] - Receiving CRC
[17:53:46.440] - Received CRC OK : 01
[17:53:46.440] - Receiving ACK
[17:53:46.453] - Received ACK : 01 00 AA
[17:53:46.453] - PSI RAM Running
[17:53:46.454][Injecting EBL] : 157172
[17:53:46.454] - Sending EBL Length
[17:53:46.461] - Receiving ACK
[17:53:46.474] - Received ACK : 0xCCCC
[17:53:46.474] - Sending EBL : 157172
[17:54:00.181] - Sending CRC : FA
[17:54:00.192] - Receiving ACK
[17:54:00.241] - Received OK : 51 A5
[17:54:00.241] - Receiving Capabilities : 76
[17:54:00.254] - Boot-loader is active
[17:54:00.254] - EBL version: XMM6260_20.21_M1S1
[17:54:00.254] - Boot mode is: 00BB
[17:54:00.254] - EBL Running
[17:54:00.254][ReqSetProtConf]
[17:54:00.255] == prot_capabilities_t ==
[17:54:00.255] - protocol_version : 11
[17:54:00.255] - package_size : 2 -> 8
[17:54:00.255] - crc_type : 1
[17:54:00.255] - skip_writeblock_tx : 0
[17:54:00.256] - compression : 11 -> 10
[17:54:00.256] - compression : 10
[17:54:00.256] - flags : 1
[17:54:00.256] - erase_sector_verify : 0
[17:54:00.256] - flash_debug : 0
[17:54:00.256] - protocol_crc : 0
[17:54:00.256] - skip_erase : 1 -> 0
[17:54:00.257] - skip_wr_pack_crc : 0
[17:54:00.257] - Sending capabilities
[17:54:00.267] - Receiving ACK
[17:54:00.280] - Received : ACK 0100
[17:54:00.280][CnfBaudChange] : 3250000
[17:54:00.280] - Sending BaudRate
[17:54:00.291] - Receiving ACK
[17:54:00.327] - Received BaudRate : 3250000
[17:54:00.327] - Changing BaudRate
[17:54:00.337] - Changed BaudRate : 3250000
[17:54:00.337][ReqFlashId]
[17:54:00.337] - Platform : 14
[17:54:00.337] - ProjectName : XMM6260
[17:54:00.338] - Sending HardWare Info
[17:54:00.348] - Receiving ACK
[17:54:00.431] - Received ACK : 0000
[17:54:00.431][ReqCfiInfo_1]
[17:54:00.431] - Sending CfiInfo1
[17:54:00.442] - Receiving CfiInfo2
[17:54:00.480] - Received CfiInfo2 : 256
[17:54:00.480][ReqCfiInfo_2]
[17:54:00.480] - Sending CfiInfo2
[17:54:00.490] - Receiving ACK
[17:54:00.502] - Received ACK : FFFF
[17:54:00.502][Downloading BOOT CORE PSI(0)] : psi.fls
[17:54:00.502][ReqSecStart]
[17:54:00.502] - BootCoreVersion : 131072
[17:54:00.502] - Sending Security Start
[17:54:00.518] - Receiving ACK
[17:54:00.605][ERROR] Type : 0041 <> 0204
[17:54:00.605] - IndErrorMsg
[17:54:00.615]File_id(34), Line_number(415), Error_class(1), Error_code(79)
[17:54:00.615]File_id(16), Line_number(617), Error_class(1), Error_code(10)
[17:54:00.615]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.615]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616] - Failure!
[17:54:00.616]ERROR : _Func_03_Ebl_0_ReqSecStart - Line(326)
[17:54:00.619]__Proc_NormalDownload : 0
[17:54:00.619]Error! IntelFlash:__Proc_NormalDownload
[17:54:00.619]_DoDownload : 0, ErrorCode(210)
[17:54:00.620]
-----------------------------------------Trace Last 100 Message-------------------------------------------------
[17:54:00.242][T000015] 43 01 00 00 4C 00 00 00 88 13 00 00 15 19 7E C...L..........
[17:54:00.254][R000086] 43 00 00 00 4C 00 00 00 BB 00 00 00 14 00 00 00 15 00 00 00 58 4D 4D 36 32 36 30 5F 32 30 2E 32 C...L...............XMM6260_20.2
[17:54:00.254] - Boot-loader is active
[17:54:00.254] - EBL version: XMM6260_20.21_M1S1
[17:54:00.254] - Boot mode is: 00BB
[17:54:00.254] - EBL Running
[17:54:00.254][ReqSetProtConf]
[17:54:00.255] == prot_capabilities_t ==
[17:54:00.255] - protocol_version : 11
[17:54:00.255] - package_size : 2 -> 8
[17:54:00.255] - crc_type : 1
[17:54:00.255] - skip_writeblock_tx : 0
[17:54:00.256] - compression : 11 -> 10
[17:54:00.256] - compression : 10
[17:54:00.256] - flags : 1
[17:54:00.256] - erase_sector_verify : 0
[17:54:00.256] - flash_debug : 0
[17:54:00.256] - protocol_crc : 0
[17:54:00.256] - skip_erase : 1 -> 0
[17:54:00.257] - skip_wr_pack_crc : 0
[17:54:00.257] - Sending capabilities
[17:54:00.257][T000101] 44 00 00 00 56 00 00 00 20 4E 00 00 CE 88 7E 02 00 86 00 4C 00 BB 00 00 00 14 00 00 00 15 00 00 D...V....N.........L............
[17:54:00.267][R000010] 44 00 00 00 56 00 00 00 D0 6E D...V....n
[17:54:00.267] - Receiving ACK
[17:54:00.268][T000015] 43 01 00 00 0C 00 00 00 88 13 00 00 E4 7C 7E C............|.
[17:54:00.280][R000022] 43 00 00 00 0C 00 00 00 02 00 86 00 02 00 01 00 89 00 03 00 B5 2C C....................,
[17:54:00.280] - Received : ACK 0100
[17:54:00.280][CnfBaudChange] : 3250000
[17:54:00.280] - Sending BaudRate
[17:54:00.281][T000029] 44 00 00 00 0E 00 00 00 20 4E 00 00 FB 9B 7E 02 00 82 00 04 00 50 97 31 00 9E 01 03 00 D........N...........P.1.....
[17:54:00.291][R000010] 44 00 00 00 0E 00 00 00 1E 5E D........^
[17:54:00.291] - Receiving ACK
[17:54:00.291][T000015] 43 01 00 00 06 00 00 00 10 27 00 00 EF B4 7E C........'.....
[17:54:00.301][R000016] 43 00 00 00 06 00 00 00 02 00 82 00 04 00 C7 FA C...............
[17:54:00.303][T000015] 43 01 00 00 04 00 00 00 88 13 00 00 58 51 7E C...........XQ.
[17:54:00.315][R000014] 43 00 00 00 04 00 00 00 50 97 31 00 9E D9 C.......P.1...
[17:54:00.315][T000015] 43 01 00 00 04 00 00 00 10 27 00 00 80 BF 7E C........'.....
[17:54:00.327][R000014] 43 00 00 00 04 00 00 00 9E 01 03 00 B7 96 C.............
[17:54:00.327] - Received BaudRate : 3250000
[17:54:00.327] - Changing BaudRate
[17:54:00.328][T000011] 45 00 00 00 50 97 31 00 F3 0E 7E E...P.1....
[17:54:00.337][R000010] 45 00 00 00 50 97 31 00 F3 0E E...P.1...
[17:54:00.337] - Changed BaudRate : 3250000
[17:54:00.337][ReqFlashId]
[17:54:00.337] - Platform : 14
[17:54:00.337] - ProjectName : XMM6260
[17:54:00.338] - Sending HardWare Info
[17:54:00.339][T000197] 44 00 00 00 B6 00 00 00 20 4E 00 00 2D 90 7E 02 00 01 08 AC 00 0E 00 00 00 00 00 00 02 00 C2 01 D........N..-...................
[17:54:00.348][R000010] 44 00 00 00 B6 00 00 00 5A DA D.......Z.
[17:54:00.348] - Receiving ACK
[17:54:00.349][T000015] 43 01 00 00 0C 00 00 00 88 13 00 00 E4 7C 7E C............|.
[17:54:00.431][R000022] 43 00 00 00 0C 00 00 00 02 00 01 08 02 00 00 00 0B 00 03 00 4F 25 C...................O%
[17:54:00.431] - Received ACK : 0000
[17:54:00.431][ReqCfiInfo_1]
[17:54:00.431] - Sending CfiInfo1
[17:54:00.433][T000027] 44 00 00 00 0C 00 00 00 20 4E 00 00 94 90 7E 02 00 84 00 02 00 00 00 86 00 03 00 D........N.................
[17:54:00.442][R000010] 44 00 00 00 0C 00 00 00 68 67 D.......hg
[17:54:00.442] - Receiving CfiInfo2
[17:54:00.443][T000015] 43 01 00 00 06 00 00 00 10 27 00 00 EF B4 7E C........'.....
[17:54:00.455][R000016] 43 00 00 00 06 00 00 00 02 00 84 00 00 01 B4 C7 C...............
[17:54:00.455][T000015] 43 01 00 00 00 01 00 00 88 13 00 00 53 D8 7E C...........S..
[17:54:00.467][R000266] 43 00 00 00 00 01 00 00 00 00 00 00 AD 00 B1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C...............................
[17:54:00.468][T000015] 43 01 00 00 04 00 00 00 10 27 00 00 80 BF 7E C........'.....
[17:54:00.480][R000014] 43 00 00 00 04 00 00 00 E3 01 03 00 7D 47 C...........}G
[17:54:00.480] - Received CfiInfo2 : 256
[17:54:00.480][ReqCfiInfo_2]
[17:54:00.480] - Sending CfiInfo2
[17:54:00.481][T000281] 44 00 00 00 0A 01 00 00 20 4E 00 00 F0 12 7E 02 00 85 00 00 01 00 00 00 00 AD 00 B1 00 00 00 00 D........N......................
[17:54:00.490][R000010] 44 00 00 00 0A 01 00 00 2E 76 D........v
[17:54:00.490] - Receiving ACK
[17:54:00.490][T000015] 43 01 00 00 0C 00 00 00 88 13 00 00 E4 7C 7E C............|.
[17:54:00.502][R000022] 43 00 00 00 0C 00 00 00 02 00 85 00 02 00 FF FF 85 02 03 00 0B 76 C....................v
[17:54:00.502] - Received ACK : FFFF
[17:54:00.502][Downloading BOOT CORE PSI(0)] : psi.fls
[17:54:00.502][ReqSecStart]
[17:54:00.502] - BootCoreVersion : 131072
[17:54:00.502] - Sending Security Start
[17:54:00.503][T002073] 44 00 00 00 0A 08 00 00 20 4E 00 00 C9 53 7E 02 00 04 02 00 08 00 00 00 00 00 00 00 00 00 00 00 D........N...S..................
[17:54:00.518][R000010] 44 00 00 00 0A 08 00 00 30 EA D.......0.
[17:54:00.518] - Receiving ACK
[17:54:00.518][T000015] 43 01 00 00 0C 00 00 00 88 13 00 00 E4 7C 7E C............|.
[17:54:00.605][R000022] 43 00 00 00 0C 00 00 00 02 00 41 00 40 00 22 00 9F 01 01 00 19 1D [email protected]".......
[17:54:00.605][ERROR] Type : 0041 <> 0204
[17:54:00.605] - IndErrorMsg
[17:54:00.606][T000015] 43 01 00 00 3E 00 00 00 88 13 00 00 03 9A 7E C...>..........
[17:54:00.615][R000072] 43 00 00 00 3E 00 00 00 4F 00 10 00 69 02 01 00 0A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C...>...O...i...................
[17:54:00.615]File_id(34), Line_number(415), Error_class(1), Error_code(79)
[17:54:00.615]File_id(16), Line_number(617), Error_class(1), Error_code(10)
[17:54:00.615]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.615]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616] - Failure!
[17:54:00.616]ERROR : _Func_03_Ebl_0_ReqSecStart - Line(326)
[17:54:00.619]__Proc_NormalDownload : 0
[17:54:00.619]Error! IntelFlash:__Proc_NormalDownload
[17:54:00.619]_DoDownload : 0, ErrorCode(210)
[17:54:00.620]
-----------------------------------------Trace Last 100 Message-------------------------------------------------
[17:54:00.632]
------------------------------------------Trace Last 100 Message-------------------------------------------------
can someone help me :crying::crying:.... please
there's a way to exit from this mode ??

narkos said:
hi ,
i've installed CM 10.1 on my p880 but I made the error to try upgrade to CM 10.3 ... all work fine but after a reboot i lost my imei number and so I can't use the phone .
I've tried to restore the previous ROM but it still don't work ...
So i tried to install the original rom and i put the phone in download mode ( vol down + usb cable ). Now i can't exit from this mode
( if i start my phon i can see lg logo and then "S/W Upgrade Please wait while upgrading....").
I tried with LG Flash Tool and with KDZ_UPDATE ... but always it stop at 10% ....
this is the LG Flash Tool log :
[17:53:42.612]DoDownload
[17:53:42.612]=====================================================
[17:53:42.612]= DLL Info : May 8 2012 13:09:31
[17:53:42.612]=====================================================
[17:53:42.613]###### Port Opend(41) ######
[17:53:42.613]Opened COM41
[17:53:42.618] MODEL880
[17:53:42.621] IMEI:352967057613485
[17:53:42.628] PID:YE05S130528000075
[17:53:42.631] SWV:LGP880AT-00-V20a-EUR-XXX-MAR-26-2013+0
[17:53:42.631][VerReq]
[17:53:42.631]Model Name : Target(P880)
[17:53:42.631][FeatureQuery]
[17:53:42.644]This firmware supports the following features:
[17:53:42.644] - Protocol Version : 3
[17:53:42.644] - CP Download : TRUE
[17:53:42.644] - AP Download : TRUE
[17:53:42.644] - ROM Download : TRUE
[17:53:42.644] - MaxPacketLength : 0x40000
[17:53:42.644] - Battery Level : 86%
[17:53:42.644] - OperatingMode : 4
[17:53:42.644] - AutoUpdateBuffer : 1
[17:53:42.644] - ThreadOn : 1
[17:53:42.646] Dz Information
[17:53:42.646] - Model Name : Binary(P880)
[17:53:42.646] - SWV : LGP880AT-00-V10a-EUR-XXX-MAY-23-2012+0
[17:53:42.646] - BuildTime : 2012-05-23 03:22:15
[17:53:42.646] - SecureType : 1
[17:53:42.646] - TotalFiles : 10
[17:53:42.646] Loading FLS
[17:53:42.793]IntelFlash::GetDownloadSize
[17:53:42.793] - PSI : 35316
[17:53:42.793] - EBL : 157172
[17:53:42.793] - Hardware : 172
[17:53:42.793] - Security : 2048
[17:53:42.793] - DownloadData : 20572
[17:53:42.793] - Security : 2048
[17:53:42.793] - DownloadData : 167768
[17:53:42.793] - Security : 2048
[17:53:42.793] - DownloadData : 697904
[17:53:42.793] - Security : 2048
[17:53:42.794] - DownloadData : 358028
[17:53:42.794] - Security : 2048
[17:53:42.794] - DownloadData : 7978564
[17:53:42.794] Loading CFG
[17:53:42.807]NvidiaFlash::GetDownloadSize
[17:53:42.807] - BCT : 6128
[17:53:42.807] - EBT : 1142868
[17:53:42.807] - EKS : 684
[17:53:42.807] - SOS : 7577600
[17:53:42.807] - LNX : 6496256
[17:53:42.807] - APP : 679695740
[17:53:42.807]TotalSize : 67130255
[17:53:42.807]CP Download Starting : 0
[17:53:42.807]CP Binary has been loaded(9465272)
[17:53:42.807][Intel] MemoryMap
[17:53:42.807] FlashStartAddr : 0x40000000
[17:53:42.807] CUST : StartAddress(0x63000000), Length(0x00500000) : LINUX
[17:53:42.808] CUST : StartAddress(0x38000000), Length(0x08400000) : CLONE
[17:53:42.808] CUST : StartAddress(0x30000000), Length(0x08400100) : PREFLASH
[17:53:42.808] CUST : StartAddress(0x20000000), Length(0x00500000) : USBRO_ISO
[17:53:42.808] CUST : StartAddress(0x90000000), Length(0x001FE000) : CUSTDATA
[17:53:42.808][CMD_Intel_DownloadMode]
[17:53:43.367] - Device synchronized
[17:53:43.367][Injecting PSI RAM] : 35316
[17:53:43.367] - Sending PSI RAM
[17:53:46.427] - Receiving CRC
[17:53:46.440] - Received CRC OK : 01
[17:53:46.440] - Receiving ACK
[17:53:46.453] - Received ACK : 01 00 AA
[17:53:46.453] - PSI RAM Running
[17:53:46.454][Injecting EBL] : 157172
[17:53:46.454] - Sending EBL Length
[17:53:46.461] - Receiving ACK
[17:53:46.474] - Received ACK : 0xCCCC
[17:53:46.474] - Sending EBL : 157172
[17:54:00.181] - Sending CRC : FA
[17:54:00.192] - Receiving ACK
[17:54:00.241] - Received OK : 51 A5
[17:54:00.241] - Receiving Capabilities : 76
[17:54:00.254] - Boot-loader is active
[17:54:00.254] - EBL version: XMM6260_20.21_M1S1
[17:54:00.254] - Boot mode is: 00BB
[17:54:00.254] - EBL Running
[17:54:00.254][ReqSetProtConf]
[17:54:00.255] == prot_capabilities_t ==
[17:54:00.255] - protocol_version : 11
[17:54:00.255] - package_size : 2 -> 8
[17:54:00.255] - crc_type : 1
[17:54:00.255] - skip_writeblock_tx : 0
[17:54:00.256] - compression : 11 -> 10
[17:54:00.256] - compression : 10
[17:54:00.256] - flags : 1
[17:54:00.256] - erase_sector_verify : 0
[17:54:00.256] - flash_debug : 0
[17:54:00.256] - protocol_crc : 0
[17:54:00.256] - skip_erase : 1 -> 0
[17:54:00.257] - skip_wr_pack_crc : 0
[17:54:00.257] - Sending capabilities
[17:54:00.267] - Receiving ACK
[17:54:00.280] - Received : ACK 0100
[17:54:00.280][CnfBaudChange] : 3250000
[17:54:00.280] - Sending BaudRate
[17:54:00.291] - Receiving ACK
[17:54:00.327] - Received BaudRate : 3250000
[17:54:00.327] - Changing BaudRate
[17:54:00.337] - Changed BaudRate : 3250000
[17:54:00.337][ReqFlashId]
[17:54:00.337] - Platform : 14
[17:54:00.337] - ProjectName : XMM6260
[17:54:00.338] - Sending HardWare Info
[17:54:00.348] - Receiving ACK
[17:54:00.431] - Received ACK : 0000
[17:54:00.431][ReqCfiInfo_1]
[17:54:00.431] - Sending CfiInfo1
[17:54:00.442] - Receiving CfiInfo2
[17:54:00.480] - Received CfiInfo2 : 256
[17:54:00.480][ReqCfiInfo_2]
[17:54:00.480] - Sending CfiInfo2
[17:54:00.490] - Receiving ACK
[17:54:00.502] - Received ACK : FFFF
[17:54:00.502][Downloading BOOT CORE PSI(0)] : psi.fls
[17:54:00.502][ReqSecStart]
[17:54:00.502] - BootCoreVersion : 131072
[17:54:00.502] - Sending Security Start
[17:54:00.518] - Receiving ACK
[17:54:00.605][ERROR] Type : 0041 <> 0204
[17:54:00.605] - IndErrorMsg
[17:54:00.615]File_id(34), Line_number(415), Error_class(1), Error_code(79)
[17:54:00.615]File_id(16), Line_number(617), Error_class(1), Error_code(10)
[17:54:00.615]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.615]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616] - Failure!
[17:54:00.616]ERROR : _Func_03_Ebl_0_ReqSecStart - Line(326)
[17:54:00.619]__Proc_NormalDownload : 0
[17:54:00.619]Error! IntelFlash:__Proc_NormalDownload
[17:54:00.619]_DoDownload : 0, ErrorCode(210)
[17:54:00.620]
-----------------------------------------Trace Last 100 Message-------------------------------------------------
[17:54:00.242][T000015] 43 01 00 00 4C 00 00 00 88 13 00 00 15 19 7E C...L..........
[17:54:00.254][R000086] 43 00 00 00 4C 00 00 00 BB 00 00 00 14 00 00 00 15 00 00 00 58 4D 4D 36 32 36 30 5F 32 30 2E 32 C...L...............XMM6260_20.2
[17:54:00.254] - Boot-loader is active
[17:54:00.254] - EBL version: XMM6260_20.21_M1S1
[17:54:00.254] - Boot mode is: 00BB
[17:54:00.254] - EBL Running
[17:54:00.254][ReqSetProtConf]
[17:54:00.255] == prot_capabilities_t ==
[17:54:00.255] - protocol_version : 11
[17:54:00.255] - package_size : 2 -> 8
[17:54:00.255] - crc_type : 1
[17:54:00.255] - skip_writeblock_tx : 0
[17:54:00.256] - compression : 11 -> 10
[17:54:00.256] - compression : 10
[17:54:00.256] - flags : 1
[17:54:00.256] - erase_sector_verify : 0
[17:54:00.256] - flash_debug : 0
[17:54:00.256] - protocol_crc : 0
[17:54:00.256] - skip_erase : 1 -> 0
[17:54:00.257] - skip_wr_pack_crc : 0
[17:54:00.257] - Sending capabilities
[17:54:00.257][T000101] 44 00 00 00 56 00 00 00 20 4E 00 00 CE 88 7E 02 00 86 00 4C 00 BB 00 00 00 14 00 00 00 15 00 00 D...V....N.........L............
[17:54:00.267][R000010] 44 00 00 00 56 00 00 00 D0 6E D...V....n
[17:54:00.267] - Receiving ACK
[17:54:00.268][T000015] 43 01 00 00 0C 00 00 00 88 13 00 00 E4 7C 7E C............|.
[17:54:00.280][R000022] 43 00 00 00 0C 00 00 00 02 00 86 00 02 00 01 00 89 00 03 00 B5 2C C....................,
[17:54:00.280] - Received : ACK 0100
[17:54:00.280][CnfBaudChange] : 3250000
[17:54:00.280] - Sending BaudRate
[17:54:00.281][T000029] 44 00 00 00 0E 00 00 00 20 4E 00 00 FB 9B 7E 02 00 82 00 04 00 50 97 31 00 9E 01 03 00 D........N...........P.1.....
[17:54:00.291][R000010] 44 00 00 00 0E 00 00 00 1E 5E D........^
[17:54:00.291] - Receiving ACK
[17:54:00.291][T000015] 43 01 00 00 06 00 00 00 10 27 00 00 EF B4 7E C........'.....
[17:54:00.301][R000016] 43 00 00 00 06 00 00 00 02 00 82 00 04 00 C7 FA C...............
[17:54:00.303][T000015] 43 01 00 00 04 00 00 00 88 13 00 00 58 51 7E C...........XQ.
[17:54:00.315][R000014] 43 00 00 00 04 00 00 00 50 97 31 00 9E D9 C.......P.1...
[17:54:00.315][T000015] 43 01 00 00 04 00 00 00 10 27 00 00 80 BF 7E C........'.....
[17:54:00.327][R000014] 43 00 00 00 04 00 00 00 9E 01 03 00 B7 96 C.............
[17:54:00.327] - Received BaudRate : 3250000
[17:54:00.327] - Changing BaudRate
[17:54:00.328][T000011] 45 00 00 00 50 97 31 00 F3 0E 7E E...P.1....
[17:54:00.337][R000010] 45 00 00 00 50 97 31 00 F3 0E E...P.1...
[17:54:00.337] - Changed BaudRate : 3250000
[17:54:00.337][ReqFlashId]
[17:54:00.337] - Platform : 14
[17:54:00.337] - ProjectName : XMM6260
[17:54:00.338] - Sending HardWare Info
[17:54:00.339][T000197] 44 00 00 00 B6 00 00 00 20 4E 00 00 2D 90 7E 02 00 01 08 AC 00 0E 00 00 00 00 00 00 02 00 C2 01 D........N..-...................
[17:54:00.348][R000010] 44 00 00 00 B6 00 00 00 5A DA D.......Z.
[17:54:00.348] - Receiving ACK
[17:54:00.349][T000015] 43 01 00 00 0C 00 00 00 88 13 00 00 E4 7C 7E C............|.
[17:54:00.431][R000022] 43 00 00 00 0C 00 00 00 02 00 01 08 02 00 00 00 0B 00 03 00 4F 25 C...................O%
[17:54:00.431] - Received ACK : 0000
[17:54:00.431][ReqCfiInfo_1]
[17:54:00.431] - Sending CfiInfo1
[17:54:00.433][T000027] 44 00 00 00 0C 00 00 00 20 4E 00 00 94 90 7E 02 00 84 00 02 00 00 00 86 00 03 00 D........N.................
[17:54:00.442][R000010] 44 00 00 00 0C 00 00 00 68 67 D.......hg
[17:54:00.442] - Receiving CfiInfo2
[17:54:00.443][T000015] 43 01 00 00 06 00 00 00 10 27 00 00 EF B4 7E C........'.....
[17:54:00.455][R000016] 43 00 00 00 06 00 00 00 02 00 84 00 00 01 B4 C7 C...............
[17:54:00.455][T000015] 43 01 00 00 00 01 00 00 88 13 00 00 53 D8 7E C...........S..
[17:54:00.467][R000266] 43 00 00 00 00 01 00 00 00 00 00 00 AD 00 B1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C...............................
[17:54:00.468][T000015] 43 01 00 00 04 00 00 00 10 27 00 00 80 BF 7E C........'.....
[17:54:00.480][R000014] 43 00 00 00 04 00 00 00 E3 01 03 00 7D 47 C...........}G
[17:54:00.480] - Received CfiInfo2 : 256
[17:54:00.480][ReqCfiInfo_2]
[17:54:00.480] - Sending CfiInfo2
[17:54:00.481][T000281] 44 00 00 00 0A 01 00 00 20 4E 00 00 F0 12 7E 02 00 85 00 00 01 00 00 00 00 AD 00 B1 00 00 00 00 D........N......................
[17:54:00.490][R000010] 44 00 00 00 0A 01 00 00 2E 76 D........v
[17:54:00.490] - Receiving ACK
[17:54:00.490][T000015] 43 01 00 00 0C 00 00 00 88 13 00 00 E4 7C 7E C............|.
[17:54:00.502][R000022] 43 00 00 00 0C 00 00 00 02 00 85 00 02 00 FF FF 85 02 03 00 0B 76 C....................v
[17:54:00.502] - Received ACK : FFFF
[17:54:00.502][Downloading BOOT CORE PSI(0)] : psi.fls
[17:54:00.502][ReqSecStart]
[17:54:00.502] - BootCoreVersion : 131072
[17:54:00.502] - Sending Security Start
[17:54:00.503][T002073] 44 00 00 00 0A 08 00 00 20 4E 00 00 C9 53 7E 02 00 04 02 00 08 00 00 00 00 00 00 00 00 00 00 00 D........N...S..................
[17:54:00.518][R000010] 44 00 00 00 0A 08 00 00 30 EA D.......0.
[17:54:00.518] - Receiving ACK
[17:54:00.518][T000015] 43 01 00 00 0C 00 00 00 88 13 00 00 E4 7C 7E C............|.
[17:54:00.605][R000022] 43 00 00 00 0C 00 00 00 02 00 41 00 40 00 22 00 9F 01 01 00 19 1D [email protected]".......
[17:54:00.605][ERROR] Type : 0041 <> 0204
[17:54:00.605] - IndErrorMsg
[17:54:00.606][T000015] 43 01 00 00 3E 00 00 00 88 13 00 00 03 9A 7E C...>..........
[17:54:00.615][R000072] 43 00 00 00 3E 00 00 00 4F 00 10 00 69 02 01 00 0A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C...>...O...i...................
[17:54:00.615]File_id(34), Line_number(415), Error_class(1), Error_code(79)
[17:54:00.615]File_id(16), Line_number(617), Error_class(1), Error_code(10)
[17:54:00.615]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.615]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:54:00.616] - Failure!
[17:54:00.616]ERROR : _Func_03_Ebl_0_ReqSecStart - Line(326)
[17:54:00.619]__Proc_NormalDownload : 0
[17:54:00.619]Error! IntelFlash:__Proc_NormalDownload
[17:54:00.619]_DoDownload : 0, ErrorCode(210)
[17:54:00.620]
-----------------------------------------Trace Last 100 Message-------------------------------------------------
[17:54:00.632]
------------------------------------------Trace Last 100 Message-------------------------------------------------
can someone help me :crying::crying:.... please
there's a way to exit from this mode ??
Click to expand...
Click to collapse
Mate, you're trying install KDZ V10A? Right?
You must install KDZ V20A, V20B, V20C or V20D because V10A will not work (It's possible)
Try remove the battery for a few minutes, do a factory reset, then after flash KDZ V20xx.
If you want to downgrade again to V10A follow this.
Hope this helps you. :fingers-crossed:

thank's for the answer.
i tried to install both 10A_00, 10H_00, 20A_00, 20B_00, with the same result....
to do a factory reset i must press vol down + power button ?
i tried but at boot i see just for a moment the LG logo and then the written : SW Upgrade ....
Now i'll try 20C_00 or 20_D ... i hope it will work
I want try with nvflash to rewrite all... do you agree ?

Well, try to follow this tutorial or try to downgrade, if you try to burn some V10xx KDZ in the normal method will not work.
to do a factory reset i must press vol down + power button ?
Click to expand...
Click to collapse
See this
i tried but at boot i see just for a moment the LG logo and then the written : SW Upgrade ....
Click to expand...
Click to collapse
The usb cable was connected? If so, unplug.
About nvflash, I've never tried, so do not know what to say.
I believe it is better you attempt downgrade, then try installing again some V20xx.
Good luck mate.

Buuzzaa said:
Well, try to follow this tutorial or try to downgrade, if you try to burn some V10xx KDZ in the normal method will not work.
See this
The usb cable was connected? If so, unplug.
About nvflash, I've never tried, so do not know what to say.
I believe it is better you attempt downgrade, then try installing again some V20xx.
Good luck mate.
Click to expand...
Click to collapse
I've re-tried the guide that you link me without success :crying::crying::crying::crying::crying:
the hard reset don't work for me ..... the phone always start in s/W update mode.
I supposed that my phone was void in this moment....
When I try to install KDZ by LG Mobile Support Tool i've this error :
...
Step : TYPE_WPARAM_UPGRADE_ERROR
CleanModelDll() : Free Model.dll
_DetachDLL Call
_DetachDLL Call End
Page_Error ºÎºÐÀÔ´Ï´Ù
¿©±â´Â Retry ºÎºÐÀÔ´Ï´Ù
both with 10_A, 10_H, 20_A, 20_B, 20_D .
what other can I try ?

narkos said:
I've re-tried the guide that you link me without success :crying::crying::crying::crying::crying:
the hard reset don't work for me ..... the phone always start in s/W update mode.
I supposed that my phone was void in this moment....
When I try to install KDZ by LG Mobile Support Tool i've this error :
...
Step : TYPE_WPARAM_UPGRADE_ERROR
CleanModelDll() : Free Model.dll
_DetachDLL Call
_DetachDLL Call End
Page_Error ºÎºÐÀÔ´Ï´Ù
¿©±â´Â Retry ºÎºÐÀÔ´Ï´Ù
both with 10_A, 10_H, 20_A, 20_B, 20_D .
what other can I try ?
Click to expand...
Click to collapse
Well, there is one other option to install KDZ... Try this.
Remember, try install only V20xx with this method.
Good luck mate... Hope is the last one to die. :fingers-crossed:

Need Help LG P880 Stuck in software upgrade screen. Tried most of the things here

My phone got stuck in s/w upgrade screen the one with the blue one. Let me give you some history first.
My phone was working fine. Then i tried to update the software via LG Tool. Then the problem came with no sim card error. After researching a lot i found that there was IMEI number error. Then looked into many threads tried flashin with LG flash tool. I did everything as mentioned in the thread. But LG flash tool did not flash my phone. Only sign came READY in the flash tool, it did nothing.
No i am in need of help. Can anyone help me.
PS: Sent to service center they said that they did some hardware change and they solved the issue but after 2 days they said that again the problem persists.
Waiting for your help guyz....

Which operating system are you running your flash tool from?
Had a similar issue trying to flash my phone on Windows 8.1 64x, while using the exact same method and software on Windows 7 64x worked perfectly.

fugitive666 said:
My phone got stuck in s/w upgrade screen the one with the blue one. Let me give you some history first.
My phone was working fine. Then i tried to update the software via LG Tool. Then the problem came with no sim card error. After researching a lot i found that there was IMEI number error. Then looked into many threads tried flashin with LG flash tool. I did everything as mentioned in the thread. But LG flash tool did not flash my phone. Only sign came READY in the flash tool, it did nothing.
No i am in need of help. Can anyone help me.
PS: Sent to service center they said that they did some hardware change and they solved the issue but after 2 days they said that again the problem persists.
Waiting for your help guyz....
Click to expand...
Click to collapse
Once you get S/w on phone and ready on port-xx and after removing cable your phone will be stuck on s/w dont worry its normal, just pull the battery out and re-insert it again. REMEMBER : Do not close FLASH-TOOL
Now you need to follow this steps for flashing
*After inserting battery again connect usb cable to PC holding Volume down button and after that you will able to see port xx will be in blue colour (mean while your phone will be in s/w mode) Please do not remove cable untill the process is completed.
Still having problem please let us know, I recommend use WIN-7.

Try flash data from APX mode using
this
http://forum.xda-developers.com/optimus-4x-hd/general/maybe-nvflash-method-t3159853
or this
https://mega.nz/#!Udk3VT7R!64nsZEOxSfE2ppSiqz15O-N5Vlf6cHDG7Oh3a6A15GU
second link based on data from first link but contains newer firmware images

[17:43:43.162]Selected 7 Binary : e:\p880\lgp880at-00-v20a-262-000-mar-26-2013 0\lgp880at-00-v20a-262-000-mar-26-2013+0.dz
[17:43:43.163]DoDownload : Retry(1)
[17:43:43.163]###### Port Opend(41) ######
[17:43:43.163]Opened COM41
[17:43:43.163]=====================================================
[17:43:43.163]= DLL Info : Dec 12 2012 11:01:58
[17:43:43.163]=====================================================
[17:43:43.178] MODEL880
[17:43:43.194] IMEI: xxxxx I hide this
[17:43:43.209] PID:
[17:43:43.225] SWV:LGP880AT-00-V20c-EUR-XXX-OCT-07-2014+0
[17:43:43.225][VerReq]
[17:43:43.225]Model Name : Target(P880)
[17:43:43.225][FeatureQuery]
[17:43:43.256]This firmware supports the following features:
[17:43:43.256] - Protocol Version : 3
[17:43:43.256] - CP Download : TRUE
[17:43:43.256] - AP Download : TRUE
[17:43:43.256] - ROM Download : TRUE
[17:43:43.256] - MaxPacketLength : 0x40000
[17:43:43.256] - Battery Level : 21%
[17:43:43.256] - OperatingMode : 4
[17:43:43.256] - AutoUpdateBuffer : 1
[17:43:43.256] - ThreadOn : 1
[17:43:43.256] - Flashless : 0
[17:43:43.256] - UpdateBct : 0
[17:43:43.738] Dz Information
[17:43:43.738] - Model Name : Binary(P880)
[17:43:43.738] - SWV : LGP880AT-00-V20a-262-000-MAR-26-2013+0+0
[17:43:43.738] - BuildTime : 2013-03-26 23:28:12
[17:43:43.738] - SecureType : 1
[17:43:43.738] - TotalFiles : 10
[17:43:43.738] Loading FLS
[17:43:43.871]IntelFlash::GetDownloadSize
[17:43:43.871] - PSI : 35316
[17:43:43.871] - EBL : 157172
[17:43:43.871] - Hardware : 172
[17:43:43.871] - Security : 2048
[17:43:43.871] - DownloadData : 20572
[17:43:43.871] - Security : 2048
[17:43:43.871] - DownloadData : 167768
[17:43:43.871] - Security : 2048
[17:43:43.871] - DownloadData : 697892
[17:43:43.871] - Security : 2048
[17:43:43.871] - DownloadData : 356380
[17:43:43.872] - Security : 2048
[17:43:43.872] - DownloadData : 7864428
[17:43:43.872] Loading CFG
[17:43:43.880]NvidiaFlash::GetDownloadSize
[17:43:43.880] - BCT : 6128
[17:43:43.880] - EBT : 1132440
[17:43:43.880] - EKS : 684
[17:43:43.880] - SOS : 8228864
[17:43:43.880] - LNX : 7120896
[17:43:43.880] - APP : 914424152
[17:43:43.880]TotalSize : 82950461
[17:43:43.880]CP Download Starting : 0
[17:43:43.880]CP Binary has been loaded(9349476)
[17:43:43.880][Intel] MemoryMap
[17:43:43.880] FlashStartAddr : 0x40000000
[17:43:43.881] CUST : StartAddress(0x63000000), Length(0x00500000) : LINUX
[17:43:43.881] CUST : StartAddress(0x38000000), Length(0x08400000) : CLONE
[17:43:43.881] CUST : StartAddress(0x30000000), Length(0x08400100) : PREFLASH
[17:43:43.881] CUST : StartAddress(0x20000000), Length(0x00500000) : USBRO_ISO
[17:43:43.881] CUST : StartAddress(0x90000000), Length(0x001FE000) : CUSTDATA
[17:43:43.881][CMD_Intel_DownloadMode]
[17:43:44.440] - Device synchronized
[17:43:44.441][Injecting PSI RAM] : 35316
[17:43:44.441] - Sending PSI RAM
[17:43:47.510] - Receiving CRC
[17:43:47.526] - Received CRC OK : 01
[17:43:47.526] - Receiving ACK
[17:43:47.541] - Received ACK : 01 00 AA
[17:43:47.541] - PSI RAM Running
[17:43:47.541][Injecting EBL] : 157172
[17:43:47.541] - Sending EBL Length
[17:43:47.557] - Receiving ACK
[17:43:47.573] - Received ACK : 0xCCCC
[17:43:47.573] - Sending EBL : 157172
[17:44:01.368] - Sending CRC : FA
[17:44:01.384] - Receiving ACK
[17:44:01.431] - Received OK : 51 A5
[17:44:01.431] - Receiving Capabilities : 76
[17:44:01.446] - Boot-loader is active
[17:44:01.446] - EBL version: XMM6260_20.21_M1S1
[17:44:01.446] - Boot mode is: 00BB
[17:44:01.446] - EBL Running
[17:44:01.446][ReqSetProtConf]
[17:44:01.446] == prot_capabilities_t ==
[17:44:01.446] - protocol_version : 11
[17:44:01.446] - package_size : 2 -> 8
[17:44:01.446] - crc_type : 1
[17:44:01.446] - skip_writeblock_tx : 0
[17:44:01.446] - compression : 11 -> 10
[17:44:01.446] - compression : 10
[17:44:01.446] - flags : 1
[17:44:01.446] - erase_sector_verify : 0
[17:44:01.446] - flash_debug : 0
[17:44:01.446] - protocol_crc : 0
[17:44:01.446] - skip_erase : 1 -> 0
[17:44:01.446] - skip_wr_pack_crc : 0
[17:44:01.446] - Sending capabilities
[17:44:01.462] - Receiving ACK
[17:44:01.478] - Received : ACK 0100
[17:44:01.478][CnfBaudChange] : 3250000
[17:44:01.478] - Sending BaudRate
[17:44:01.493] - Receiving ACK
[17:44:01.540] - Received BaudRate : 3250000
[17:44:01.540] - Changing BaudRate
[17:44:01.556] - Changed BaudRate : 3250000
[17:44:01.556][ReqFlashId]
[17:44:01.556] - Platform : 14
[17:44:01.556] - ProjectName : XMM6260
[17:44:01.556] - Sending HardWare Info
[17:44:01.571] - Receiving ACK
[17:44:01.650] - Received ACK : 0000
[17:44:01.650][ReqCfiInfo_1]
[17:44:01.650] - Sending CfiInfo1
[17:44:01.665] - Receiving CfiInfo2
[17:44:01.712] - Received CfiInfo2 : 256
[17:44:01.712][ReqCfiInfo_2]
[17:44:01.712] - Sending CfiInfo2
[17:44:01.728] - Receiving ACK
[17:44:01.743] - Received ACK : FFFF
[17:44:01.743][Downloading BOOT CORE PSI(0)] : psi.fls
[17:44:01.743][ReqSecStart]
[17:44:01.743] - BootCoreVersion : 131072
[17:44:01.743] - Sending Security Start
[17:44:01.759] - Receiving ACK
[17:44:01.853][ERROR] Type : 0041 <> 0204
[17:44:01.853] - IndErrorMsg
[17:44:01.868]File_id(34), Line_number(415), Error_class(1), Error_code(79)
[17:44:01.868]File_id(16), Line_number(617), Error_class(1), Error_code(10)
[17:44:01.868]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:44:01.868]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:44:01.868]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:44:01.868]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:44:01.868]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:44:01.868]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:44:01.868] - Failure!
[17:44:01.868]ERROR : _Func_03_Ebl_0_ReqSecStart - Line(300)
[17:44:01.868]__Proc_NormalDownload : 0
[17:44:01.868]Error! IntelFlash:__Proc_NormalDownload
[17:44:01.868]_DoDownload : 0
[17:44:01.868]
-----------------------------------------Trace Last 100 Message-------------------------------------------------
[17:44:01.431][T000015] 43 01 00 00 4C 00 00 00 88 13 00 00 15 19 7E C...L..........
[17:44:01.446][R000086] 43 00 00 00 4C 00 00 00 BB 00 00 00 14 00 00 00 15 00 00 00 58 4D 4D 36 32 36 30 5F 32 30 2E 32 C...L...............XMM6260_20.2
[17:44:01.446] - Boot-loader is active
[17:44:01.446] - EBL version: XMM6260_20.21_M1S1
[17:44:01.446] - Boot mode is: 00BB
[17:44:01.446] - EBL Running
[17:44:01.446][ReqSetProtConf]
[17:44:01.446] == prot_capabilities_t ==
[17:44:01.446] - protocol_version : 11
[17:44:01.446] - package_size : 2 -> 8
[17:44:01.446] - crc_type : 1
[17:44:01.446] - skip_writeblock_tx : 0
[17:44:01.446] - compression : 11 -> 10
[17:44:01.446] - compression : 10
[17:44:01.446] - flags : 1
[17:44:01.446] - erase_sector_verify : 0
[17:44:01.446] - flash_debug : 0
[17:44:01.446] - protocol_crc : 0
[17:44:01.446] - skip_erase : 1 -> 0
[17:44:01.446] - skip_wr_pack_crc : 0
[17:44:01.446] - Sending capabilities
[17:44:01.446][T000101] 44 00 00 00 56 00 00 00 20 4E 00 00 CE 88 7E 02 00 86 00 4C 00 BB 00 00 00 14 00 00 00 15 00 00 D...V....N.........L............
[17:44:01.462][R000010] 44 00 00 00 56 00 00 00 D0 6E D...V....n
[17:44:01.462] - Receiving ACK
[17:44:01.462][T000015] 43 01 00 00 0C 00 00 00 88 13 00 00 E4 7C 7E C............|.
[17:44:01.478][R000022] 43 00 00 00 0C 00 00 00 02 00 86 00 02 00 01 00 89 00 03 00 B5 2C C....................,
[17:44:01.478] - Received : ACK 0100
[17:44:01.478][CnfBaudChange] : 3250000
[17:44:01.478] - Sending BaudRate
[17:44:01.478][T000029] 44 00 00 00 0E 00 00 00 20 4E 00 00 FB 9B 7E 02 00 82 00 04 00 50 97 31 00 9E 01 03 00 D........N...........P.1.....
[17:44:01.493][R000010] 44 00 00 00 0E 00 00 00 1E 5E D........^
[17:44:01.493] - Receiving ACK
[17:44:01.493][T000015] 43 01 00 00 06 00 00 00 10 27 00 00 EF B4 7E C........'.....
[17:44:01.509][R000016] 43 00 00 00 06 00 00 00 02 00 82 00 04 00 C7 FA C...............
[17:44:01.509][T000015] 43 01 00 00 04 00 00 00 88 13 00 00 58 51 7E C...........XQ.
[17:44:01.525][R000014] 43 00 00 00 04 00 00 00 50 97 31 00 9E D9 C.......P.1...
[17:44:01.525][T000015] 43 01 00 00 04 00 00 00 10 27 00 00 80 BF 7E C........'.....
[17:44:01.540][R000014] 43 00 00 00 04 00 00 00 9E 01 03 C0 BB 50 C............P
[17:44:01.540] - Received BaudRate : 3250000
[17:44:01.540] - Changing BaudRate
[17:44:01.540][T000011] 45 00 00 00 50 97 31 00 F3 0E 7E E...P.1....
[17:44:01.556][R000010] 45 00 00 00 50 97 31 00 F3 0E E...P.1...
[17:44:01.556] - Changed BaudRate : 3250000
[17:44:01.556][ReqFlashId]
[17:44:01.556] - Platform : 14
[17:44:01.556] - ProjectName : XMM6260
[17:44:01.556] - Sending HardWare Info
[17:44:01.556][T000197] 44 00 00 00 B6 00 00 00 20 4E 00 00 2D 90 7E 02 00 01 08 AC 00 0E 00 00 00 00 00 00 02 00 C2 01 D........N..-...................
[17:44:01.571][R000010] 44 00 00 00 B6 00 00 00 5A DA D.......Z.
[17:44:01.571] - Receiving ACK
[17:44:01.571][T000015] 43 01 00 00 0C 00 00 00 88 13 00 00 E4 7C 7E C............|.
[17:44:01.650][R000022] 43 00 00 00 0C 00 00 00 02 00 01 08 02 00 00 00 0B 00 03 00 4F 25 C...................O%
[17:44:01.650] - Received ACK : 0000
[17:44:01.650][ReqCfiInfo_1]
[17:44:01.650] - Sending CfiInfo1
[17:44:01.650][T000027] 44 00 00 00 0C 00 00 00 20 4E 00 00 94 90 7E 02 00 84 00 02 00 00 00 86 00 03 00 D........N.................
[17:44:01.665][R000010] 44 00 00 00 0C 00 00 00 68 67 D.......hg
[17:44:01.665] - Receiving CfiInfo2
[17:44:01.665][T000015] 43 01 00 00 06 00 00 00 10 27 00 00 EF B4 7E C........'.....
[17:44:01.681][R000016] 43 00 00 00 06 00 00 00 02 00 84 00 00 01 B4 C7 C...............
[17:44:01.681][T000015] 43 01 00 00 00 01 00 00 88 13 00 00 53 D8 7E C...........S..
[17:44:01.696][R000266] 43 00 00 00 00 01 00 00 00 00 00 00 AD 00 B1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C...............................
[17:44:01.696][T000015] 43 01 00 00 04 00 00 00 10 27 00 00 80 BF 7E C........'.....
[17:44:01.712][R000014] 43 00 00 00 04 00 00 00 E3 01 03 00 7D 47 C...........}G
[17:44:01.712] - Received CfiInfo2 : 256
[17:44:01.712][ReqCfiInfo_2]
[17:44:01.712] - Sending CfiInfo2
[17:44:01.712][T000281] 44 00 00 00 0A 01 00 00 20 4E 00 00 F0 12 7E 02 00 85 00 00 01 00 00 00 00 AD 00 B1 00 00 00 00 D........N......................
[17:44:01.728][R000010] 44 00 00 00 0A 01 00 00 2E 76 D........v
[17:44:01.728] - Receiving ACK
[17:44:01.728][T000015] 43 01 00 00 0C 00 00 00 88 13 00 00 E4 7C 7E C............|.
[17:44:01.743][R000022] 43 00 00 00 0C 00 00 00 02 00 85 00 02 00 FF FF 85 02 03 00 0B 76 C....................v
[17:44:01.743] - Received ACK : FFFF
[17:44:01.743][Downloading BOOT CORE PSI(0)] : psi.fls
[17:44:01.743][ReqSecStart]
[17:44:01.743] - BootCoreVersion : 131072
[17:44:01.743] - Sending Security Start
[17:44:01.743][T002073] 44 00 00 00 0A 08 00 00 20 4E 00 00 C9 53 7E 02 00 04 02 00 08 00 00 00 00 00 00 00 00 00 00 00 D........N...S..................
[17:44:01.759][R000010] 44 00 00 00 0A 08 00 00 30 EA D.......0.
[17:44:01.759] - Receiving ACK
[17:44:01.759][T000015] 43 01 00 00 0C 00 00 00 88 13 00 00 E4 7C 7E C............|.
[17:44:01.853][R000022] 43 00 00 00 0C 00 00 00 02 00 41 00 40 00 22 00 9F 01 01 00 19 1D [email protected]".......
[17:44:01.853][ERROR] Type : 0041 <> 0204
[17:44:01.853] - IndErrorMsg
[17:44:01.853][T000015] 43 01 00 00 3E 00 00 00 88 13 00 00 03 9A 7E C...>..........
[17:44:01.868][R000072] 43 00 00 00 3E 00 00 00 4F 00 10 00 69 02 01 00 0A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C...>...O...i...................
[17:44:01.868]File_id(34), Line_number(415), Error_class(1), Error_code(79)
[17:44:01.868]File_id(16), Line_number(617), Error_class(1), Error_code(10)
[17:44:01.868]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:44:01.868]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:44:01.868]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:44:01.868]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:44:01.868]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:44:01.868]File_id(0), Line_number(0), Error_class(0), Error_code(0)
[17:44:01.868] - Failure!
[17:44:01.868]ERROR : _Func_03_Ebl_0_ReqSecStart - Line(300)
[17:44:01.868]__Proc_NormalDownload : 0
[17:44:01.868]Error! IntelFlash:__Proc_NormalDownload
[17:44:01.868]_DoDownload : 0
[17:44:01.868]
-----------------------------------------Trace Last 100 Message-------------------------------------------------
[17:44:01.868]
------------------------------------------Trace Last 100 Message-------------------------------------------------
[17:44:01.868] ErrorCode(210)
Can please someone help me with reading this error message I have almost tried every solution except the Nvidia flash and I am using windows 10 64 bit.

fugitive666 said:
My phone got stuck in s/w upgrade screen the one with the blue one. Let me give you some history first.
My phone was working fine. Then i tried to update the software via LG Tool. Then the problem came with no sim card error. After researching a lot i found that there was IMEI number error. Then looked into many threads tried flashin with LG flash tool. I did everything as mentioned in the thread. But LG flash tool did not flash my phone. Only sign came READY in the flash tool, it did nothing.
No i am in need of help. Can anyone help me.
PS: Sent to service center they said that they did some hardware change and they solved the issue but after 2 days they said that again the problem persists.
Waiting for your help guyz....
Click to expand...
Click to collapse
Don't know if will work, please check: https://forum.xda-developers.com/op...to-unbrick-stuck-s-update-mode-t2871951/page2 specially communication #17.
GL.

[solved] Relocking S1 v37

@RO.maniac ask how to relock his v37 bootloader on another thread:
RO.maniac said:
I have a little situation here. on a D6603.
Was running LP, unlocked, andropluskernel, root, xposed. happy.
Relocked bootloader with flashtool.
Updated to N preview using xperia companion.
Unlocked bootloader with flashtool.
That new bootloader, nexus style, was telling me safe boot off and unlocked bootloader.
Wasn't satisfied with the lack of root on N preview, so I decided to go back to stock LP via Xperia Companion. Then I found out the lastest update Xperia would flash is MM. I said fine.
Tried to relock bootloader with flashtool, I got ok message but it didn't relock the bootloader. tried a lot of times, different pc, flashtool version, regenerated code. nothing. so no Xperia Companion - no big deal, I just have an obsession with latest official builds, since my main device is a Nexus5. oh, what a nice girl that is. and easy to undress.
flashed a LP .ftf, tried to relock bootloader, no success.
[...]
What the heck happened with the relocking of the bootloader??!!
I'm thinking it has something to do with the new bootloader from N preview which I was running when I unlocked it. Now it won't relock on any version.
Click to expand...
Click to collapse
The idea of this dev-thread is understanding why S1 v37 is not re-lockable and if there is a way to relock it or downgrade it then relock, without bricking the phone obviously.
@RO.maniac can you, please, provide
- the S1boot part of your cmdline,
- backups of your TA partition before, after upgrading the bootloader,
- any flashtool log?
Thanks in advance.

N preview TA backup & flashtool log
Here you have the flashtool log and two backups of the current TA partition. One is pulled with ADB and one is from TWRP.
https://drive.google.com/file/d/0B0YzIybNxHcQa3E0Q1JJZlBkUU0/view?usp=sharing - TWRP ver.
https://drive.google.com/file/d/0B0YzIybNxHcQRXR2MjQ0Y3UzOWM/view?usp=sharing - ADB ver.
I don't have a TA backup of my old bootloader.
https://drive.google.com/file/d/0B0YzIybNxHcQcWNMMUtWeF9RNFk/view?usp=sharing - flashtool log. Tried to relock three times.
https://drive.google.com/file/d/0B0YzIybNxHcQVk1CZ1RISmhLMWM/view?usp=sharing - current bootloader mode photo.
I am now running N Preview 3, rooted, permissive.

RO.maniac said:
Here you have the flashtool log and two backups of the current TA partition. One is pulled with ADB and one is from TWRP.
Click to expand...
Click to collapse
Thanks! And no worries for the old TA. Just we can't revert to old version without it.
Can you send me your s1boot partition and the cmdline part with 's1boot'?
Also can you provide me your oem unlock code? (I should be able to find it in your ta partition)
P.S. your name is in plain text in your flashtool log.

nailyk said:
Thanks! And no worries for the old TA. Just we can't revert to old version without it.
Can you send me your s1boot partition and the cmdline part with 's1boot'?
Also can you provide me your oem unlock code? (I should be able to find it in your ta partition)
P.S. your name is in plain text in your flashtool log.
Click to expand...
Click to collapse
My name is no secret.
I'm not familiar with pulling s1boot partition and the cmdline part with 's1boot'. Do you need anything more than the photo I just popped in the post? - oh, you mean the boot partition and the code in the photo. That s1 upfront blinded me.
https://drive.google.com/open?id=0B0YzIybNxHcQMGxSTUdtdzBzTjQ - boot TWRP backup
Unlock code: C88FB2FFCCE72540

RO.maniac said:
My name is no secret.
I'm not familiar with pulling s1boot partition and the cmdline part with 's1boot'. Do you need anything more than the photo I just popped in the post?
Unlock code: C88FB2FFCCE72540
Click to expand...
Click to collapse
Awesome! I miss the picture, sorry.
Your fastbootlog also says: S1_Boot_MSM8974AC_LA3.0_L_Hero_17 which make me doubt....
Never read this version before. and never seen the screen you post before....
For me, fastboot mode was only blue light.... on this bootloader version.
I will start re with this elements, thank you.
Do you know exactly when this Hero_L17 version get installed on your phone? Is it coming from a custom rom?

nailyk said:
Awesome! I miss the picture, sorry.
Your fastbootlog also says: S1_Boot_MSM8974AC_LA3.0_L_Hero_17 which make me doubt....
Never read this version before. and never seen the screen you post before....
For me, fastboot mode was only blue light.... on this bootloader version.
I will start re with this elements, thank you.
Do you know exactly when this Hero_L17 version get installed on your phone? Is it coming from a custom rom?
Click to expand...
Click to collapse
This is the bootloader mode from N preview. Just like the Nexus line. I was really surprised to see it just as on my Nexus5.
Other than stock LP and MM , the only custom rom I've had is RXSW 3.0 which is MM.
I think this Hero_L17 is coming with N preview.
This is what I may seem not to understand. When I flash a complete .ftf doesn't EVERYTHING change, including the bootloader?
You are asking like it's there for some time, surviving .ftf flashes.
---------- Post added at 06:19 PM ---------- Previous post was at 06:17 PM ----------
nailyk said:
Awesome! I miss the picture, sorry.
Your fastbootlog also says: S1_Boot_MSM8974AC_LA3.0_L_Hero_17 which make me doubt....
Never read this version before. and never seen the screen you post before....
For me, fastboot mode was only blue light.... on this bootloader version.
I will start re with this elements, thank you.
Do you know exactly when this Hero_L17 version get installed on your phone? Is it coming from a custom rom?
Click to expand...
Click to collapse
Also, you should watch my past posts here because I tend to edit them a lot and add things instead of writing a new reply. I will let go of this habit, I promise.

RO.maniac said:
This is what I may seem not to understand. When I flash a complete .ftf doesn't EVERYTHING change, including the bootloader?
You are asking like it's there for some time, surviving .ftf flashes.
Click to expand...
Click to collapse
afaik ftf files are almost the same that flashable zip files: partition binaries and script files.
To check that, some tools give you the ability of unpack ftf files.
So some ftf custom rom only flash kernel and system, some other flash everything on the phone. Some other add ta partitions modifying.
But as the full boot process is signed, maybe other process are in cause. That's why i'm digging on.
I hope i didn't miss the point. (my English is really bad )
RO.maniac said:
Also, you should watch my past posts here because I tend to edit them a lot and add things instead of writing a new reply. I will let go of this habit, I promise.
Click to expand...
Click to collapse
No worries, but as I'm really slow to write my answers I miss some edits From now I will double check

Your English is not that bad. Yes, you got the point and I got it about the .ftf files.
From what I can remember when I flashed a .ftf of N preview 3, the flashtool log listed everything, from boot to some TA. I'll do a backup and reflash just to check. Will post log.
---------- Post added at 07:20 PM ---------- Previous post was at 06:49 PM ----------
nailyk said:
afaik ftf files are almost the same that flashable zip files: partition binaries and script files.
To check that, some tools give you the ability of unpack ftf files.
So some ftf custom rom only flash kernel and system, some other flash everything on the phone. Some other add ta partitions modifying.
But as the full boot process is signed, maybe other process are in cause. That's why i'm digging on.
I hope i didn't miss the point. (my English is really bad )
Click to expand...
Click to collapse
https://drive.google.com/open?id=0B0YzIybNxHcQNVA3OTZCM2ZqTm8 - flashtool log of N preview 3 flash

You can continue this little study but just so you know, the screen just died on me. It started flicking all of a sudden and in under an hour is gave away for good. Now is backlit but no color.
So the test object is dead.
For the second time, after the main board water damage. I'm officially done with it. When my friend gets back in the country he'll find out his phone died again. ))

As I've said, my screen died. So I decided to dump the phone and cleaned my pc of flashtool, xperia companion and all that.
Some minutes ago I decided to try another flash because my mind was running scenarios about the facts before the screen just died. What happened exactly before: TWRP backup, updated flashtool at startup, flashed N preview 3, in order to get the log so I can see if that Hero7 bootloader is coming with N preview. And it is indeed.
Booted and the screen was flicking with white flashes on the edges. In a few minutes I saw a vertical black line and then it turned black, but backlight on.
Today I thought, what the hell, flash it again, maybe it's not a hw problem. But now I know it is
So I installed an older version of flashtool, 0.9.18.6, and flashed N preview. Still dead screen
But this version of flashtool RELOCKED my bootloader. I could see the code written to TA and I can flash with Xperia Companion. Too bad I don't have a screen.
One in all, just dump this discussion and everything about my friend's damned Z3. Just close the drawer, as I've done.

RO.maniac said:
https://drive.google.com/open?id=0B0YzIybNxHcQNVA3OTZCM2ZqTm8 - flashtool log of N preview 3 flash
Click to expand...
Click to collapse
I see from the github there is a branch 0.9.16 so that is a good idea to test with this version.
First, we see the ta block between your two tries are different. First try block n° 8B2, second try 8FD. I can't understand why (same version of flashtool used).
It take me a lot of time because that was not a hexadecimal place in the ta partition but an unit in the ta partition.
Investigations:
For memory, your unlock code is C88FB2FFCCE72540 (in hex: 43 38 38 46 42 32 46 46 43 43 45 37 32 35 34 30),
my unlock code is 481FD30094B6F2FC (in hex: 34 38 31 46 44 33 30 30 39 34 42 36 46 32 46 43)
If we look in the 8B2 unit we found that:
my ta partition after unlocking
Code:
[COLOR="Magenta"]B2 08 00 00[/COLOR] [COLOR="SeaGreen"]10 00 00 00[/COLOR] [COLOR="Blue"]C1 E9 F8 3B FF FF FF FF[/COLOR] 34 38 31 46 44 33 30 30 39 34 42 36 46 32 46 43
your ta partition after unlocking:
Code:
[COLOR="magenta"]B2 08 00 00[/COLOR] [COLOR="SeaGreen"]10 00 00 00[/COLOR] [COLOR="Blue"]C1 E9 F8 3B FF FF FF FF[/COLOR] 43 38 38 46 42 32 46 46 43 43 45 37 32 35 34 30
So our unlock code is present. Why it doesn't work?
If I take a look in my ta partition, before unlocking my bootloader, there is no 8b2 unit.
For the 8FD unit, i cannot find it.
So I cannot understand why your first try did not lock the bootloader. Maybe an issue with the usb cable and/or the booted mode, or just with the download of flashtool.
RO.maniac said:
You can continue this little study but just so you know, the screen just died on me. It started flicking all of a sudden and in under an hour is gave away for good. Now is backlit but no color.
So the test object is dead.
For the second time, after the main board water damage. I'm officially done with it. When my friend gets back in the country he'll find out his phone died again. ))
Click to expand...
Click to collapse
That's sad. I read some thread about dead backlights but not about screen. Did you think software cause this?
RO.maniac said:
As I've said, my screen died. So I decided to dump the phone and cleaned my pc of flashtool, xperia companion and all that.
Some minutes ago I decided to try another flash because my mind was running scenarios about the facts before the screen just died. What happened exactly before: TWRP backup, updated flashtool at startup, flashed N preview 3, in order to get the log so I can see if that Hero7 bootloader is coming with N preview. And it is indeed.
Booted and the screen was flicking with white flashes on the edges. In a few minutes I saw a vertical black line and then it turned black, but backlight on.
Today I thought, what the hell, flash it again, maybe it's not a hw problem. But now I know it is
So I installed an older version of flashtool, 0.9.18.6, and flashed N preview. Still dead screen
But this version of flashtool RELOCKED my bootloader. I could see the code written to TA and I can flash with Xperia Companion. Too bad I don't have a screen.
One in all, just dump this discussion and everything about my friend's damned Z3. Just close the drawer, as I've done.
Click to expand...
Click to collapse
Maybe it is just a connection problem between the motherboard and the screen. I read your other post so it maybe is 'just' a bad connection (cleaning or flyed-up)?
Anyway thanks a lot for your time, I learn a lot with information you provide! I will mostly help me for this project.
P.S.: don't forget I'm looking for a dev z3, broken screen is not a big deal for me Contact me privately if your friend is ok to sell that phone to me.
P.S.2: just for fun:
if you take a look in the (critical) 7DA ta unit it look like:
Code:
hexdump -C TA.img -s 0x0002073c -n 664
0002073c [COLOR="Magenta"]da 07 00 00[/COLOR] [COLOR="SeaGreen"]87 02 00 00[/COLOR] [COLOR="Blue"] c1 e9 f8 3b ff ff ff ff[/COLOR] |...........;....|
0002074c 73 eb 3d 40 59 80 18 1a 68 1a 33 84 5b a6 ad c3 |[email protected][...|
0002075c 45 d3 66 47 02 00 05 0a 02 00 00 00 0a db 37 24 |E.fG..........7$|
0002076c 02 0c b2 c4 85 f4 c9 6c 21 f1 84 33 29 4d 27 ff |.......l!..3)M'.|
0002077c 81 20 a3 65 b6 40 3c 80 16 c9 4a e3 1b 59 d6 54 |. [email protected]<...J..Y.T|
0002078c fa 50 37 82 f9 50 53 ce 1c dc aa fb 0b 98 96 e3 |.P7..PS.........|
0002079c 22 6a 02 00 00 00 0a d2 d9 95 24 b0 77 2b 91 59 |"j........$.w+.Y|
000207ac 59 f2 ee 30 a1 dc d9 88 c7 79 51 20 a2 19 73 0e |Y..0.....yQ ..s.|
000207bc 30 4c a1 29 94 4c 43 2b 8a cd 23 e9 3a 09 0b 03 |0L.).LC+..#.:...|
000207cc 06 74 6a 86 1f ce 97 ea 6c d0 b7 ba 00 90 4f 50 |.tj.....l.....OP|
000207dc 5f 49 44 3d 22 34 33 35 22 3b 4f 50 5f 4e 41 4d |_ID="435";OP_NAM|
000207ec 45 3d 22 43 75 73 74 6f 6d 69 7a 65 64 22 3b 43 |E="Customized";C|
000207fc 44 41 5f 4e 52 3d 22 31 32 38 38 2d 35 30 32 38 |DA_NR="1288-5028|
0002080c 22 3b 52 4f 4f 54 49 4e 47 5f 41 4c 4c 4f 57 45 |";ROOTING_ALLOWE|
0002081c 44 3d 22 31 22 3b 52 43 4b 5f 48 3d 22 46 41 45 |D="1";RCK_H="FAE|
0002082c 46 35 31 39 39 31 34 31 39 34 36 38 43 41 37 38 |F51991419468CA78|
0002083c 43 39 43 33 37 30 38 35 36 31 36 43 42 33 31 39 |C9C37085616CB319|
0002084c 42 39 46 36 36 45 30 35 30 45 34 33 31 38 34 37 |B9F66E050E431847|
0002085c 41 39 41 34 36 46 43 33 39 44 42 41 34 22 00 43 |A9A46FC39DBA4".C|
0002086c 53 45 52 56 45 52 49 44 3d 22 62 6d 63 73 65 63 |SERVERID="bmcsec|
0002087c 73 30 33 22 3b 41 55 54 48 43 45 52 54 3d 22 55 |s03";AUTHCERT="U|
0002088c 4e 4b 4e 4f 57 4e 22 3b 54 49 4d 45 53 54 41 4d |NKNOWN";TIMESTAM|
0002089c 50 3d 22 31 35 30 34 30 39 20 32 30 3a 33 31 3a |P="150409 20:31:|
000208ac 35 38 22 00 09 00 07 30 30 31 30 31 2d 2a 00 00 |58"....00101-*..|
000208bc 00 00 00 00 00 00 00 00 00 00 02 00 00 00 0a 4e |...............N|
000208cc d0 29 6b 2c bf 7b ec 14 0b bb 94 f5 9c fa 62 6a |.)k,.{........bj|
000208dc 1c 02 61 20 6d 79 f5 a7 3e ca c6 6e 30 69 30 f7 |..a my..>..n0i0.|
000208ec c3 a4 80 1e 60 bc ba e8 59 7d 5e 99 55 c4 47 e9 |....`...Y}^.U.G.|
000208fc f5 f5 58 be 02 00 00 00 0a 36 04 d9 c2 fd 86 a1 |..X......6......|
0002090c a1 3c 91 c1 d0 8d bb 35 ab a6 b1 10 f0 20 67 0e |.<.....5..... g.|
0002091c dc a5 62 dd 45 db 51 1e eb 6e f7 c6 95 58 f1 d4 |..b.E.Q..n...X..|
0002092c 39 73 5d 53 c5 22 14 b2 06 be 0c 01 ea 5f 02 00 |9s]S."......._..|
0002093c 00 00 0a 22 39 fe 4a f7 2e 93 6d a7 70 5d 3e 53 |..."9.J...m.p]>S|
0002094c a3 11 6c 96 70 84 18 20 3a 17 7b 00 05 63 1b fc |..l.p.. :.{..c..|
0002095c 6b 96 a4 e2 22 33 e2 05 7a 38 7b 72 81 60 ee ec |k..."3..z8{r.`..|
0002096c f9 da 55 c8 c1 81 e7 bd 02 00 00 00 0a cc 10 ff |..U.............|
0002097c a1 49 75 63 f3 c9 ee 40 fa d8 ac 09 65 b6 e6 dc |[email protected]|
0002098c a3 20 9c 57 33 bf 51 c3 ff 29 20 78 fa 57 2c 69 |. .W3.Q..) x.W,i|
0002099c a5 97 52 fc 33 fa 97 f6 3d 5d 38 89 e0 d7 34 1c |..R.3...=]8...4.|
000209ac 95 eb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
000209bc 00 00 14 57 0a e6 ee af 30 a1 e8 57 69 59 10 22 |...W....0..WiY."|
000209cc 6f 78 32 5c 5c f4 0b ff |ox2\\...|
000209d4
There is a RCK_H key. With the script provided here i enter your unlock code and the script answer that:
Code:
RCK_H="FAEF51991419468CA78C9C37085616CB319B9F66E050E431847A9A46FC39DBA4"
When you enter 'fastboot oem unlock <key>' the key is computed by s1 and compared to this information.

Database Develop

welcome