yashsingh1/xdaforums huggingface dataset:
[Xperia Play Android Development] zaith1234:
Good I may try this tonight once I get off work. Could someone please link the post where there is a GSM TA backup. I shouldn't have to flash the generic UK firmware either if all I am after is unlock? What I going to try is.

First recover from the GSM TA (greenlight). Then I'll identify and should get the correct IMEI. Get unlock code from SE with IMEI. Boot into fastboot (bluelight) and run unlock. Then Recover TA from my Verizon Backup (greenlight). If all goes well I should have an unlocked bootloader and still run the Verizon firmware.

I leave work at 12am EST so look for an update around 1am EST.
[Xperia Play Android Development] Mills00013:
We will be watching....
[Xperia Play Android Development] zaith1234:
Before I can try anything I need someones TA backup from a GSM phone with fastboot enabled. I thought I saw them somewhere posted once before but I guess I was wrong.
[Xperia Play Android Development] MAster224:
Well if this is the game plan then i will volunteer my Xplay to help gain root and FREEDOM!
[Xperia Play Android Development] zaith1234:
We just need a GSM TA to restore from. One that allows Fastboot
[Xperia Play Android Development] Blagus:
i'll PM you one later... i have few from GSM users for fixing bricked plays project...
[Xperia Play Android Development] Mills00013:
Blagus if you get a chance you can send it to me too, I'll be more than happy to try the flash as well.
[Xperia Play Android Development] denpad2010:
Hi everybody my english is not good....so can someone tell me with an easy yes or not.... i have a verizon xplay R800x i guess with 2.3.2 os can this phone be rooted yes or not if so can give me a link to try it thanks
[Xperia Play Android Development] Mills00013:
Not yet. Could be soon but it will probably be a bit.
[Xperia Play Android Development] denpad2010:
Thanks
[Xperia Play Android Development] zaith1234:
Still waiting for that GSM TA
[Xperia Play Android Development] MAster224:
Same here
[Xperia Play Android Development] Blagus:
TA restore is paid function. That's why I'm working with Androxyde on TA tool.

If I had some more credits left on my reseller account, I'd send you licenses but right now I can't.

Anyways, you got PMs with link to TA backup, provided by waz000000 (thanks), state: BL locked, SIM-unlocked, not bricked, fastboot available.
[Xperia Play Android Development] Mills00013:
Blagus, how close do you think that tool is to being ready for use?
[Xperia Play Android Development] Blagus:
Androxyde is a bit busy right now to help me out... I'd like to make it ready as soon as possible, though... ;)
[Xperia Play Android Development] Mills00013:
Yeah wouldn't we all :)

Zaith, you had a chance to do the flash yet?
[Xperia Play Android Development] zaith1234:
Not yet. I broke my display yesterday and waiting for replacement. FYI Shirt pockets are not good pockets.:(
[Xperia Play Android Development] :
Keep up the good fight my X-Play brethren! Ill see if there is any way I can assist.
[Xperia Play Android Development] d2theaher69:
^what he said :-)
[Xperia Play Android Development] MAster224:
So were not using the TA back up but instead w8ing for another tool to flash the Gsm phones file?
[Xperia Play Android Development] Blagus:
I've found out the structure of FXtool TA file. In next few days I'll try to convert GSM TA backup into FXtool file to be compatible with FlashTool.
[Xperia Play Android Development] Mills00013:
So that means that flashtool will be able to restore a TA?

In that regard, it means that we more or less will have an absolute full recovery method no matter what, similar it seems to motorola's sbf method?
[Xperia Play Android Development] Blagus:
Yes, that means we will have absolutely full recovery method because we can't damage bootloader (smart SE ;) ).

OK, it's a bit complicated to convert this decrypted backup into FXtool format... I'll just modify FlashTool sources to accept this one, shouldn't be a big deal because it's only a small difference. ;)
[Xperia Play Android Development] Mills00013:
Youve also concluded that the lock and unlock state itself is in TA, right? So once we actually get a true unlock it should be possible to lock again. This is huge. Cant wait to see a recovery and CM7 running on here.
[Xperia Play Android Development] EZ14U2NV:
This is my first post in PLAY boards... luvin the new phones thanks to slide me emulators!! Owned G1 // My Touch // eris // droid // increible // nexus one // an own a vibrant // aria // atrix // and a new PLAY! Good luck everyone and THANKS!
[Xperia Play Android Development] zaith1234:
Ok got the replacement phone. I think I will hold off until I can restore the TA for free.... something about paying to possibly brick phone. Anyway I have also found another testing menu on the phone. To access it *#*#4636#*#* under phone information there are a few options one area is greyed out thats the OEM-specific info/settings wondering how to access that menu and also if there are still other menus like this one.
[Xperia Play Android Development] kamileon:
after reading this I had a flashback from my Droid 1 days. I tried the code used then in the dialer ##PROGRAM and it worked, use 000000 for the spc code. It brings up the following options in the menu:

user activation

SID/NID pair

AKEY

Test Mode

Vocoder

Mobile P_REV

I know the vocoder changes the voice codec for calls, but not sure about the rest. Anyone know about the rest?
[Xperia Play Android Development] kamileon:
Under this menu in the phone information section it lists my IMEI as well as toward the bottom it allows me to set my radio type listing several options like GSM, EVDO, WCDMA, CDMA...does this mean it will work on a GSM network. I dont have a sim card from a GSM network or I would try.
[Xperia Play Android Development] zaith1234:
I have an old SIM I am going to try. As of now when I select GSM from that menu it reverts back to CDMA.
[Xperia Play Android Development] gergenhime:
but that imei number is the same as the meid.....
[Xperia Play Android Development] d2theaher69:
Where do you plan on putting the sim card?
[Xperia Play Android Development] MAster224:
its covered by a piece of plastic under the sd card
[Xperia Play Android Development] kirbnite:
I think most android cdma or gsm have the same hidden menu with the same options in the "*#*#info#*#*" aka "*#*#4636#*#*" screen. My droid x and sony play both have identical menus.
[Xperia Play Android Development] GavinMazey:
Would the imei number be acessible using a program like cdma workshop. I know it can tell you your esn/min not sure about imei.
[Xperia Play Android Development] zaith1234:
I am trying to figure out the GSM IMEI number for my Verizon Play I have tried several things and several unlock codes and nothing has worked so far. What I would like to try now is to go over a few of the IMEI's and serials from the devices and see if there are enough similarities to put one together for the Verizon Play.

Example of IMEI number 35 780502 398494 2 structure:

35 is reporting body identifier.

I think this will be different depending on country. I'm fairly sure 35 is for USA and Canada

780502 manufacturer and brand (phone type)

This number may be the same on all Plays.

398494 serial number.

I'm hoping that this is just a shortened version of the of the device actual serial number. Command ADB Devices will give you the serial #.

2 check digit.

I will not need this as the unlock code only requires the first 14.

Thanks in advance

If you don't want to post that information in a reply then you can always PM me.
[Xperia Play Android Development] d2theaher69:
Wow that's crazy never saw that sim slot
[Xperia Play Android Development] d2theaher69:
I have active ATT and T-Mobile sim cards if I can help in any way by all means pm me.
[Xperia Play Android Development] Blagus:
Just as a reminder that I didn't forget you ;)

I think you'll have to add GSM IMEI in TA in order to unlock BL.

zaith1234's description is more or less correct... first eight digits are the same for all Plays (starting either with 35 or 01). Then generate 6 random numbers and calculate check digit.
[Xperia Play Android Development] zaith1234:
Cool thanks for clarifying about the first 8. My thought though was more on the last 6 digits. I have read a few different sources that say that the last 6 are the manufacturer serials. I was thinking that maybe the last 6 are actually just a string of 6 that is pulled from the devices serial #. If that's the case then spoofing ones IMEI shouldn't be to hard. I won't know though until I compare some serials and IMEIs.
[Xperia Play Android Development] d2theaher69:
Any good news? :-)
[Xperia Play Android Development] typikal82:
I'm cheering from the sidelines here.
[Xperia Play Android Development] Blagus:
I need R800x firmware. Please connect your phone to SEUS, start update. When firmware download finishes, go to SEUS/blob/fs (something like that) folder and get three files, one about 100-150MB, second less that 50MB and third 64KB.
[Xperia Play Android Development] ryocoon:
Just to confirm, you need the US-CDMA R800x firmware via SEUS?

I know when I had it search for an update, it claimed we were on most recent. I'll look further to see if there is a way to download anyways.
[Xperia Play Android Development] zaith1234:
I'm at work but as soon as I get home I'll get what you are looking for. I got it to somehow flash the same firmware a few days ago so the files you need should already be on my system.
[Xperia Play Android Development] gamescan:
Just as a heads up, the R800x appears to have gotten an OTA update. It's showing up on the handset automatically giving the option to apply or not. No change info listed.

If someone pulls a SEUS update they will likely be giving you the newest files, not the shipping ROM image.
[Xperia Play Android Development] gotoman00:
blagus... sent... pm.
[Xperia Play Android Development] ryocoon:
I just ran SEUS and it still claims I have most recent, yet I haven't received any OTA updates yet. So I'm not sure as to what you are referring to. The thing to look for OTA comes up on my phone two or three times a day (shutting off my WiFi in the process of searching for updates...). I sent a PM to Blagus asking how he wants me to deliver the described files.
[Xperia Play Android Development] Mills00013:
Upload them all to mediafire. Even if blagus wants them a different way, it would be helpful to have a place for anyone who wants/needs them to access them.
[Xperia Play Android Development] ryocoon:
I PM'd the same to Blagus, and he said MediaFire also.

So temporarily at least:

http://www.mediafire.com/?6049bpil3yobpv0

Should be named Blob_FS.zip

I don't know how much it can support as I only just made a free account. This should be the current Firmware batch for the R800x on Verizone Wireless (CDMA) here in the USA. If it is the wrong files, let me know and I can look for different ones based on descriptions if you could provide them.
[Xperia Play Android Development] JDMpire:
I just picked up a xperia play r800x today, used, off craigslist. Its not connected to Verizon and I have no intentions of using it for verizon.

Did Blagus ever get his Xperia play? I didn't read every page of this thread. I would be willing to sell this for cheap or trade for a GSM variant since I use T Mobile. I'll do an even trade for a unlocked GSM version an I'll even cover the shipping to Croatia for Blagus if need be.

Likewise since this phone is not being used on a network, I'll be willing to be a bit of a guinea pig and flash it with say GSM variant firmwares and what not.

Let me know guys what you want to do. thanks.
[Xperia Play Android Development] Mills00013:
I'm slowly dying on the inside without root.

Blagus, are you still out there?
[Xperia Play Android Development] gokuden:
From what i understand the freexperia team including blagus has stopped all efforts to root or unlock the boot loader.
[Xperia Play Android Development] icebear8:
yea all of euro and Can have there phones rooted =/ i miss flashing custom roms and junk on my epic =(
[Xperia Play Android Development] NeoandGeo:
That blows. Hopefully someone will pick up the slack. All I want is the ability to remove the large chunk of internal space that the useless preloaded games are taking up.
[Xperia Play Android Development] ace518:
Yeah. Sony kinda failed with the internal storage space. We need root to reclaim space.
[Xperia Play Android Development] J-tek:
So are we to understand there are no development efforts to unlock the bootloader at all on the r800x??

As much as I like this phone I may just get rid of it.
[Xperia Play Android Development] ryocoon:
Even if we can't get bootloader's unlocked (so that we can try CM7 on XPlay, or other stuff), I would still want root. Ability to remove bloat, as well as to force-move stuff to SD (or possibly load extra kernel modules) is really key.

I guess that we just need to wait to see the next big rooting method and hopefully it works for us.
[Xperia Play Android Development] axiomjunglist:
This guy might be your salvation. Has anybody in this thread actually tried using flashtool to flash anything on the R800x? Flashtool works on all other variants without root and without need for an unlocked bootloader.

The worst that probably could happen is bricking the CDMA radio, but if this guy won't even use it on Verizon doesn't sound like it matters... but could be interesting to see if it somehow enables the hidden GSM slot in the phone, or still allows the CDMA radio to function.
[Xperia Play Android Development] Blagus:
please be patient. i'll work on this when i get back home in august. or try to find someone else, with will, knowledge and time to work on this.

a question: verizon sells the phones under contract or?
[Xperia Play Android Development] typikal82:
Verizon sells them for a fraction of the retail price with a 2 year contract usually.

Amazonwireless (where I purchased mine) also sells them at a lesser price than Verizon with the 2 year.

We're all as anxious as the next person for root of the R800x, keep up the good work.
[Xperia Play Android Development] ace518:
yeah, the OP from this thread had another thread

http://xdaforums.com/showthread.php?t=1148665

it ended with a brick. read the thread for details. very sad. but here's to hoping :)
[Xperia Play Android Development] axiomjunglist:
Ouch, ok guess not!
[Xperia Play Android Development] Mills00013:
Hey its okay though cause I got my replacement today! And just like I suspected, the phone was too new to have refurb units so I got a brand new one with the box and everything. Ready to try whatevers next :-)

Bring it on; this phone isnt gonna root itself!
[Xperia Play Android Development] Mogul345:
I didn't want a contract with them and paid the full price on launch day, it came out to like $450 with shipping.

And take your time dude, enjoy your trip. Then crack this thing.
[Xperia Play Android Development] ijustwantthedownload:
Blagus,

I don't know if anyone else has offered this, or if it is something you'd be willing to try. But if you'd like I'll set up a Windows or Linux box for you (whatever you prefer) and hook up my R800x to it and you can RDP in to it and do what you like. Anything I can contribute to help get this thing rooted :)
[Xperia Play Android Development] pumacat311:
Im just curious, why is Blagus the only developer that could possibly root this thing. They are tons of developers all over XDA and beyond, surely there must be more than one person with the talent and experience to Root this phone.. Maybe extending the bounty and/or asking around in places other than just in this part of XDA.. Just wondering.
[Xperia Play Android Development] Mills00013:
I think the problem generally comes from no one actually owning the device. Our root will come when the find a new exploit for current builds of android. I think the popularity of the D3 will help that search a bunch.

As far as the bootloader is concerned, we might never be able to do anything without se's help. As I see it, we will probably need a custom 2nd init process similar to the DX and D2 to get our cyanogen mod on.
[Xperia Play Android Development] Sess:
I hate to be the bearer of bad news, but most of the rooting groups, including but not limited to andirc believe this device is garbage and not worth their time. Be thankful anyone cares about us at all (and I do mean we, the minority cdma USA owners)
[Xperia Play Android Development] Mogul345:
Heh, this is why I donated for Blagus' dev phone, I'm hoping money can entice him to take care of us CDMA guys too :)
[Xperia Play Android Development] ace518:
I see there is a new exploit being used for a temp root on the evo3d and the sensation. Any chance this could be used for our phone. I'm looking through the init scripts that are used for these two phones (admittedly not understanding too much yet).

But yeah, the thread is here. http://xdaforums.com/showthread.php?t=1159354 if anyone that knows a bit more than me wants to look and see how feasible it would be to port it to our phone, that would be awesome.
[Xperia Play Android Development] giventofly17:
Error "this devices does not support this exploit"
[Xperia Play Android Development] kamileon:
Maybe some good news, but the Play is now official for AT&T. So maybe now it will get more notice from dev's.
[Xperia Play Android Development] ace518:
I wish i could use ATT in the city. Used to have ATT... had to switch to verizon so i'd have reception at home and at work. This news won't do much for us. There is already a GSM xperia play.

Used to have Captivate on ATT, my best friend had Fascinate on CDMA Verizon. Ask anyone with a Fascinate how much ATT (or everyone else for that matter) helped with development. The Fascinate got left way behind.

Sorry to be a pessimist. And really do hope you are right. We really really need root.
[Xperia Play Android Development] giventofly17:
This probably won't help us CDMA users at all. The ATT version will probably be along the same lines with the European version, but having a different radio is going to leave us out.

I agree with above, my wife has the fascinate, and there is nothing compared to the GSM versions of the phone available.

I see the same happening here.
[Xperia Play Android Development] NeoandGeo:
I don't believe developers are gamers after this fiasco. This phone is the perfect device for any game pre-1999. :p
[Xperia Play Android Development] Logseman:
The fact that only carrier-free phones can be developed on is a big drawback. Many devs don't have $500 floating around to pay for a phone, they get their phones with carrier subsidies.
[Xperia Play Android Development] Mills00013:
In case anyone is bored, I dont think it would hurt to try to make some (peaceful) noise over at the official Ericsson forums. Here's a thread created by Zaith that already has some attention:

http://talk.sonyericsson.com/message/86877

Let's remind Sony why we supported them when we bought this product.
[Xperia Play Android Development] ace518:
Very good idea. If we keep it constructive there, maybe that will make some difference. I will leave a note there when I get a chance to setup a user name.
[Xperia Play Android Development] Mills00013:
There is also an official Google group with questions and answers about the bootloader unlock process. It is linked to on the official unlockbootloader.sonyericsson.com page. Heres the link: http://groups.google.com/group/android-developers/browse_thread/thread/e3748ae6f8f4925b#
[Xperia Play Android Development] JDMpire:
<< Still awaiting my chance to be a guinea pig lol!

If I manage to get my hands on a AT&T xperia play they I'll at least be able to use the device as a phone and limited internet toy (remember I have Tmobile).

That said, if Blagus still needs a CDMA play for himself I'll be willing to help him out. Blagus, give me a fair offer including shipping and I might just accept it!
[Xperia Play Android Development] giventofly17:
I would pretty much consider this a lost cause. It seems like Blagus is going to start working on porting Sense, which doesn't leave much hope for us CDMA folks Until the next exploit comes out, hopefully it will work on our phones.
[Xperia Play Android Development] ijustwantthedownload:
Has Blagus actually stated that he has dropped us, or is it because he hasn't responded, as stated in the quoted post he won't work on it till August?
[Xperia Play Android Development] Gilgamesh1:
No he has not stated that he dropped, but since he is planning on working a sense port many are assuming he won't get to it.
[Xperia Play Android Development] Mills00013:
I don't think Blagus has forgotten about us. The next kernel exploit will work for our devices. Verizon couldn't protect against what couldn't be found. The only thing that Blagus would have going for us would be help in unlocking the bootloader.

I see a lot of people on here feeling that we will get nothing out of the community. Even though Blagus and others have been an immense help in eliminating the possibilities we have had at hand.

If you want to help make a difference go to either of the threads I linked to above on the and talk to SE directly and tell them you want the bootloader unlocked or you will never support Ericsson again.

Links again:

http://talk.sonyericsson.com/message/86877

http://groups.google.com/group/android-developers/browse_thread/thread/e3748ae6f8f4925b#
[Xperia Play Android Development] Blagus:
let's see... if i have a value and a hash, how do i find out the hash method (rsa, sha, etc.)? anyone? some app, or what?
[Xperia Play Android Development] ijustwantthedownload:
You can tell by the length of the hash
[Xperia Play Android Development] Mogul345:
You can tell by the size of the hash.

SHA-1 hashes should be 160bits long

SHA-256 hashes should be 256bits long

MD5 hashes are 128bits long

RSA is an encryption scheme, not a hashing scheme.

Hope this helps!
[Xperia Play Android Development] Blagus:
thanks. and if i have a list of hashes and their decrypted values, can it speed up proces of decrypting an unknown hash of the same type with decrypted value being same length as already known ones?
[Xperia Play Android Development] ryocoon:
If you have a precalculated hash table for a certain algorithm ("Rainbow Tables" as some call them, I believe), but the particular hash you are looking for is not in it, the hash table can only serve to speed up the brute force by eliminating values.

At least this is how I view it. I'm not a cryptologist so I'm no exactly the best source. However, based upon the usage I have done to do basic penetration testing, if the hash doesn't match an entry in your pre-calc'd hash-table, then you have only eliminated possible entries, and you must hope for a better vector or you will just end up brute-forcing anyways.

However, there is the thought that if you know the hash method, and you have enough corresponding valid values, then you can figure out the salt, and thereby hopefully be able to reverse the hash...

*shrugs* I don't know... I'm just guessing at this point. I probably have made things less clear than prior to posting.
[Xperia Play Android Development] Mills00013:
Blagus, care to enlighten us on what you got up your sleeve? This sounds like you might be onto something really worth watching...
[Xperia Play Android Development] Logseman:
What is the difference, simply put?