Satio Repair

[algerienbox]

Originally Posted by ruchito

HELP ME PLEASE THANK YOU MR THIS IS ME READ OUT FILE

read_80021000_00200000_35681103018449.rar

try this one............................

[kamel2003]

Originally Posted by :Aishur:

PART I

here is solution for omap3430 phones with valid hwconfig, but damaged trim area.

first, make flash readout with options: signed mode,use alternative security bypass.
start 80021000
len 00200000
"read as ssw" UNCHECKED

you will get trim area image readout.

now lets determine if hwconfig present and not mismatched.
get and hex editor (hiew, winhex or simular)

using editor search function, locate in readout bytes d3 07 00 00
now check attached picture.

if imei is your, then you can try to fix phone.
if imei is not your and you do not have backup - send phone to semc.

now, lets extract needed trim area units and build script.

1.
you need to copy binary data from "data start" till "data end" (inclusive)
then convert binary data to its ASCII values (with same winhex)

add script command to data

example, from attached example file read_80021000_00200000_35681003102941.bin:

tawrite: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

2. using editor search function, locate in readout bytes da 07 00 00.
extract binary data ( method very same as shown on picture ), add script command

tawrite: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

3. using editor search function, locate in readout bytes 51 08 00 00.
extract binary data ( method very same as shown on picture ), add script command

tawrite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

4. you have now 3 big string.
copy them into one file (each string should be on one line !)
add 4-th script command in the end of file

tawrite:0002FDE800

you have own fixup file.
proceed to
1. pda tab, u1_satio, options: signed mode,altbypass,format gdfs when writing
2. add to misc.edit satio_ta.zip, write gdfs
3. add to misc.edit fixup_35681003102941.txt, write script
4. your phone is locked, so unlock phone (signed mode+do full unlock)

ps.
get satio_ta.zip from any simular post.

notice, that is you will get simlock tampered message after fix procedure, you NEED to unlock phone using signature server.

Samples
Readout and fixup

the samples are taken from
U1i SATIO DEAD


PART II

Tools
WinHex v15.6
install and register it

Video Tutorial
Satio_fixup_video

please fix this and i need it soon as possible

Multiupload.com - upload your files to multiple file hosting sites!

[:Aishur:]

@kamel2003
hw config from 35681003218532, so it is a brick

[.::MD_AKTER::.]

Originally Posted by algerienbox

sorry you can not repair this one .

Please explain Why not repair this one ?

[ui_comm]

This can fix vivaz u5??

EROM "R8A017" AID: 0001
SOFTWARE AID: FFFF
SIMLOCK STATE: "TAMPERED"
LOADER AID: 0002
FLASH ID: "0020/0040"
LOADER VERSION: "R4A012"

[ikram tabassum1]

Brother i send read out pls help me

[algerienbox]

Originally Posted by akter_hosain

Please explain Why not repair this one ?

Because imei is not your.

if imei is your, then you can try to fix phone.
if imei is not your and you do not have backup - send phone to semc.

[algerienbox]

Originally Posted by ui_comm

This can fix vivaz u5??

EROM "R8A017" AID: 0001
SOFTWARE AID: FFFF
SIMLOCK STATE: "TAMPERED"
LOADER AID: 0002
FLASH ID: "0020/0040"
LOADER VERSION: "R4A012"

Plz read the first poste

Originally Posted by ikram tabassum1

Brother i send read out pls help me

enjoy

[umarmsn]

Originally Posted by :Aishur:

Sorry, I can't make it and I also deleted my video until we get exact starting ad******* and lengths

Anyway you can ask at the official setool support.

Best regards

Please fixup for me this file
read_80021000_00200000_35681003494015.rar

[yarra]

when i read i have this error ....what this problem .

SIGNED MODE (USING SERVER)
ALTERNATIVE SECURITY BYPASS ENABLED
CFG:110000000000
PLEASE ATTACH TURNED OFF PHONE NOW
PRESS AND HOLD "GREEN" BUTTON ...

RUNNING S1_EROM VER "R6A032"
SOFTWARE AID: FFFF
SIMLOCK STATE: "TAMPERED"
LOADER AID: 0002
FLASH ID: "0020/0040"
LOADER VERSION: "R4A012"

PHONE IMEI:3568100???????
Will read 00200000 bytes,starting from 80021000
GOT SEED:CD13606F80CA713580E3A104
OMAP P96 AUTH PASSED
GOT SEED:63D476066F80CA713580E3A1
CCPU P96 AUTH PASSED
MINOR ERROR [ MEMORY_CLASS: READ_MEM, Invalid_memory_range ]
phone detached
.........................

[sipra1234]

plz fix this one

read_80021000_00020000_012251001.zip

[yarra]

please repair this for me.............

[arantima]

PLEASE ATTACH TURNED OFF PHONE NOW
PRESS AND HOLD "GREEN" BUTTON ...

RUNNING S1_EROM VER "R6A032"
SOFTWARE AID: FFFF
SIMLOCK STATE: "TAMPERED"
LOADER AID: 0002
FLASH ID: "00EC/0040"
LOADER VERSION: "R4A012"

PHONE IMEI:01225100009662
writing "F:\resp\ariel\CELULAR\SONYERICSSON\SETOOL KEY flash\FLASH\u1i\U1a_AMERICA_CDF1228_7661.zip"
Processing package
F:\resp\ariel\CELULAR\SONYERICSSON\SETOOL KEY flash\FLASH\u1i\U1a_AMERICA_CDF1228_7661.zip

Processing ACPU files
PROCESSING: R1AA006_APP_SW_KOKORO_CRASHDATA_1227_0058_S1_SW_LI VE_1F6D_0001_XSR.software
FATAL ERROR [ SECURITY_CLASS: SIN_HEAD_VER, Failed_to_verify_sin_header ]
error while uploading HDR block
Break.
Elapsed: 10 secs.

reading

[algerienbox]

Originally Posted by umarmsn

Please fixup for me this file
read_80021000_00200000_35681003494015.rar

is not a good readout

first, make flash readout with options: signed mode,use alternative security bypass.
start 80021000
len 00200000
"read as ssw" UNCHECKED

[algerienbox]

Originally Posted by sipra1234

plz fix this one

read_80021000_00020000_012251001.zip

not good read out sorry

Originally Posted by yarra

please repair this for me.............

you can't slove this one imie is not a same sorry