Service Menu
- In lock screen Menu, Back, Back, Menu, Back, Menu, Menu, Back
The phone info
Safe Mode
- Turn the phone off
- Power the phone back on
- When it vibrates, press and hold the left menu button until it boots up and says SAFE MODE in the bottom left corner of the screen
SE Flashing Mode
- Turn the phone off
- Remove the battery for at least 5 seconds
- Hold the right menu button (back) and insert the USB cable
X10 Fact
- Flash only signed firmware
- Firmware comes to you from SE already signed so there is no chance to get the private key
- Signature is checked by loader. Loader can be flashed but must have signed with actual signature. We are not able to overflash it atm.
- The nand has, at least all this:
initial bootloader
amss filesystem
amss log
radio firmware (based on linux) & bootloader
boot image
recovery image
/system fs
/data fs
/cache fs
imei & sp lock area rom
boot data rom (shutdown data, radio calibration, serial numbers...)
When you use the x10flash app, you do this:
- Boot on bootloader mode.
- Start java app:
-> Read bootldr info
-> Send a second loader (loader.sin) to the RAM, check signature, check hash, execute.
-> Second loader waits for first file to process
-> Files are sent, checked header, signature, and flashed
-> You get out of bootloader and reboot the phone
-> On next boot, bootloader checks signatures and crcs of all files, if any fail, it shows the exclamation mark.
- But, to flash the bootloader through usb, the bootloader would have to check the file before flashing it, instead of doing it on next reboot, otherwise it would risk itself to have some bad packet and render the phone unusable.
- What's the conclussion of all this crap I just typed? To flash the bootloader we would need a signed loader wich lets us flash whatever we want so the bootloader allows its execution, and then a patched bootloader to leave the door open when we leave.
Backup and Flash
- Need SEUS : Download
- Take a backup of everything on your Xperia X10. ( what so ever is important to you! ) To find Best Apps to BackUp data on your Xperia X10, please head to this post.
- Download and install SEUS on your computer.
- Delete the db folder from the SEUS directory in the Program Files.
( C:\ -> Program Files -> Sony Ericsson -> Update Service -> db )
- Open SEUS and Update( or repair ) your X10. After the Update is Complete, Exit SEUS.
- Open the C:\ -> Program Files -> Sony Ericsson -> Update Service -> db -> 13740270 -> blob_fs and view files in Detail View and sort them using File Size.
- You’ll Find a ~110MB File and a ~15MB file. ( size may vary according to different operators and regions. )
- BackUp those two files if you want. And replace them with the R2BA020 files downloaded. ( 15.8Mb File and 127Mb file )
- Update Using SEUS again and your Xperia X10 should now update to the Latest Firmware R2BA020.
- If you are experiencing problems with SEUS not updating your Xperia X10 at the Second time when you replaced the R2BA020 Firmware Files giving you the error as ” Update Failed and Recharge you Battery to atleast 50% and contact Sony Ericsson Support if problem Persists or Starts to download the Firmware Files Again. In these cases, Rename the two files you downloaded ( R2FB020 Firmware Files, 15.8Mb File and 127Mb File ) with the two Files you replaced in the earlier step. ( Please make sure to Rename the smaller 15.8Mb File with the name of the smaller ~15MB File that SEUS Downloaded ( of R1FA016 Firmware File ) and do the same with the bigger File. PLEASE DO NOT Interchange the File names, else it might brick your phone! )
- Restart your Xperia X10 and choose English as the Default Language in the Locale Settings. Enjoy!
rip_loader_cert.sh
dd if=loader.sin bs=1 skip=54 count=446 > S1_Loader_Root_f851.cer
dd if=loader.sin bs=1 skip=503 count=128 > loader.hashRSA
dd if=loader.sin bs=1 skip=631 > loader.bin
extract-ramdisk.sh
dd if=boot.sin bs=1 skip=4916769>ramdisk.gz
mkdir boot.sin-ramdisk
cd boot.sin-ramdisk
gzip -d -c ../ramdisk.gz | cpio -i
rip_boot_cert.sh
dd if=boot.sin bs=1 skip=1272 count=438 > S1_SW_Root_ac120.cer
dd if=boot.sin bs=1 skip=1713 count=128 > boot.hashRSA
openssl asn1parse -in S1_SW_Root_ac120.cer -inform der
openssl x509 -in S1_SW_Root_ac120.cer -inform der -text
openssl x509 -in S1_SW_Root_ac120.cer -inform der -pubkey -noout > S1_SW_Root_ac120.pub
openssl rsautl -in boot.hashRSA -out boot.hash -inkey S1_SW_Root_ac120.pub -verify -pubin
openssl asn1parse -in boot.hash -inform der
rip_boot_cert2.sh
dd if=boot.sin bs=1 skip=2088 count=438 > S1_SW_Root_ac120b.cer
openssl asn1parse -in S1_SW_Root_ac120b.cer -inform der
openssl x509 -in S1_SW_Root_ac120b.cer -inform der -text
openssl x509 -in S1_SW_Root_ac120b.cer -inform der -pubkey -noout > S1_SW_Root_ac120b.pub
Using X10 without SIMCARD
- Turn it on with the SIMcard
- Put the flight mode on
- Turn it off
- Turn it on without the SIMcard
