yashsingh1/xdaforums huggingface dataset:
[Xperia Z5 Android Development] wc_how:
Hi all.

I flash my own TA poc kernel, using Rootkernel by serajr in post #2793.

I follow every instructions to create the rootkernel.

After that, these are my steps to flash my phone.

1. Flash FTF with full wipe.

2. Fastboot twrp image.

3. Fastboot rootkernel.

4. Fastboot format userdata

5. Flash Magisk v16.3

6. Wipe cache.

My phone is boot successfully. But with no network.

The sim is detectable (because it asks sim pincode.)

But it is no network. (showing emergency call only). Another weird thing is, it will ask my sim pincode twice.

Inside the service menu *#*#7378423#*#*, under the security, all the info either is error/not found.

I repeat these steps for many times, but no luck.

But, i am using this rootkernel with DRM fix, it works.

Am i missing anything?

Anyone can assist me on this issue.

Thanks in advance.

Edit:

I tried reflash kernel and modem again, but no luck.

And TWRP always asking for password.
[Xperia Z5 Android Development] AirysDark:
Sony Xperia XZ dual sim

i really need help. were do i get my boot.img from. i got the elf but im a little lost and when i do try and set it out the tool says

detected android version 8.0.0 and just sits there for 3 hours before i close it down. would running it on linux work better?
[Xperia Z5 Android Development] mbc07:
Assuming your ELF file is a boot image for a Snapdragon-based Xperia device, the tool will work just fine, giving you a standard boot.img file as output...
[Xperia Z5 Android Development] AirysDark:
yes i figure that the boot.img was made from the .elf i extracted from the .sin from my .ftf.

but i'm still having the hang problem
[Xperia Z5 Android Development] AirysDark:
Sony Xperia XZ dual sim

okey now iv tried it on debian 9

and still get the detecting android version 8.0.0 hang

i really don't know what to do it seems this program is being uncooperative

if there anyone that can flash my kernel.elf file for me please
[Xperia Z5 Android Development] seyrarms:
Can glash this from Device locked bootloader??
[Xperia Z5 Android Development] Duvel999:
No.

Read first post well or Google.

Bootloader has to be unlocked (if possible) for flashing Rom, Kernel etc.

Please don't quote (whole) first post.
[Xperia Z5 Android Development] donedos:
Hi [MENTION=3989065]serajr[/MENTION] .

I hope you can help us SO-01J users (Xperia XZ docomo) to root our device in Oreo 8.0.

Looking at your guide, I will be needing the kernel.elf but unfortunately DoCoMo has ftf for 7.0 39.2.B.0.336 and the rest of the update from xperia companion is in *.pkg file.

Maybe you can help us with this one.

Regards.
[Xperia Z5 Android Development] YasuHamed:
for some reasons MUNJINI's Method of TA restoration withing script doesnt work properly! ( ON OREO)

you will have to try the traditional drmfix YES method!

---------- Post added at 12:02 PM ---------- Previous post was at 11:45 AM ----------

please download the ftf file from

http://www.xperiablog.net/2016/12/23/xperia-xz-x-performance-update-39-2-a-0-361/
[Xperia Z5 Android Development] donedos:
Thanks for the reply. I already root my xperia xz SO-01J 8.0.. And as I have said, there is no available Oreo ftf for SO-01J.
[Xperia Z5 Android Development] floporin:
hi,

i got the same hang, just getting:

but i unstuck it by ctr+c in the windows command prompt. I think the first part of the tool, "Sony RIC is enabled. Disable?", gets stuck and is unable to pass to next steps.

After that the next steps of the script went fine.
[Xperia Z5 Android Development] fauntelroy:
i accidentally delete my ta backup, now i only have dk.ftf.

can i extract that to get my ta backup img again?
[Xperia Z5 Android Development] Berni-0815:
I don't think so! My ta backup image file has about 2mb, my dk.ftf only about 570b...
[Xperia Z5 Android Development] fauntelroy:
now i have working device with dk.ftf applied,can i run backup ta again?or is it just useless?
[Xperia Z5 Android Development] Berni-0815:
In my eyes useless. Where should any information comes from only 570b? I think this dk.ftf flashes just some byte that fakes an original ta partition (will say: Those informations the original ta partition had contained to let all things work as expected).

Surely you can extract the ta partition from your device again. But if it will contain the original information? Can't believe it...
[Xperia Z5 Android Development] levone1:
Hi Serajr - quick question... Is Rootkernel currently working for XZ1C or XZ2C, (pie)? I don't see any root threads in those forums... Thanks
[Xperia Z5 Android Development] serajr:
Hi bro. No, it's not (in fact, it is not necessary on these devices).

XZ2/C need only twrp and magisk to get root (see post #3). But drmfix doesn't work on android pie yet (camera still works with some few hacks).

XZ1/C have an TA backup root exploit tool, so you don't need to worry about drm stuff, and also, like XZ2/C, only trwp and magisk are needed to get root!
[Xperia Z5 Android Development] Saint Arnoulf:
I have the same problem and I can't describe it any better. I have a neat TA.img from a Nandroid back-up made by TWRP. I also get the message that flash_dk can't find a device key of the Digital Rights Management in it. Very confusing...

rootkernel already used the same TA.img for Munjeni's TA PoC solution. Hence a lot isn't clear to me about flash_dk:

· Why is this extra ftf necessary when rootkernel already used TA.img for the boot.img?

· Why can't flash_dk find a device key in a neat TA.img?

· To which partition should one flash DK.ftf if flash_dk would succesfully find a device key?

Another thing that isn't clear to me is why nobody responded to the clear question of butilities since he posted it on the 11th of April 2016? We're already three years later now and we still don't know what to do when this surprising problem occurs. The problem is surprising because we do a Nandroid back-up to save device keys and DRM.

Happy to read an answer,

kind regards,

Hr. F.J. Roebersen.

---------- Post added at 11:14 PM ---------- Previous post was at 10:42 PM ----------

In flash_dk.sh I read the following:

ui_print "- Extracting device key"

DK=$("$BOOTIMG" readta -i $TA_IMAGE -u 0x1046b -h)

if [ $? -ne 0 ]; then

ui_print "Could not find device key in $TA_IMAGE (Unit 0x1046B)"

exit 1

fi

Hence I conclude that there is no more unit 0x1046b in the back-up of the TA.img of my Sony F8331 Xperia XZ (Kagura). It seems to me that the back-up has a very regular size of 2 MB. The back-up of the TA.img of my Sony D6603 Xperia Z3 (Leo) also had a size of 2 MB.

Because I would like to restore the device key when I root my smartphone I would like to know how to solve this issue.

Kind regards,

Hr. F.J. Roebersen.
[Xperia Z5 Android Development] shoey63:
[MENTION=9088255]Saint Arnoulf[/MENTION]

If the key is missing, that means you are using a backup made AFTER unlocking the bootloader which wipes the key in the unlocking process.

Clearly this is the case with a nandroid backup. Any Sony phone after Z3 can't have TWRP installed without unlocking the bootloader first.

Munjeni's tool works whether the key is present or not, although drm functions obviously won't work if made with a TA.img where keys are wiped.
[Xperia Z5 Android Development] Saint Arnoulf:
In flash_dk.sh I read this:

ui_print "- Extracting device key"

DK=$("$BOOTIMG" readta -i $TA_IMAGE -u 0x1046b -h)

if [ $? -ne 0 ]; then

ui_print "Could not find device key in $TA_IMAGE (Unit 0x1046B)"

exit 1

fi

Now it seems to me that there is no unit 0x1046b in a TA.img when the TA.img is made by TWRP instead of iovyroot. Hence I need another solution to extract my device key from a neat TA.img with a size of 2 MB. I lack the expertise to make such an utility and do not know why this problem exists with models like Sony Xperia Z5 and Sony Xperia XZ.

It also isn't clear to me why rootkernel also has to read TA.img to produce a boot image. Why flash the information from TA.img two times, once in boot.img and once in DK.ftf?

And when will some drmfix pick up that DK.ftf is installed? Must I force some kind of drmfix?

Please help me out because currently I'm quite stuck without a device key in a DK.ftf when I try to repack my stock kernel with dm-verity and SONY RIC off. It seems to me that I need this device key when I want to use my smartphone optimally after gaining root privileges.

Thanks in advance,

kind regards,

Hr. F.J. Roebersen.
[Xperia Z5 Android Development] Klaus N.:
[MENTION=9088255]Saint Arnoulf[/MENTION]

As [MENTION=4675598]shoey63[/MENTION] already said, it's not possible to install TWRP on a locked device later than the Z3. Means, you've unlocked it before running the exploit (iovy), and therefore the drm-keys of your device are lost forever.

So the only solution for you is to use the modified rootkernel tool [MENTION=3989065]serajr[/MENTION]. Just follow the steps there exactly, but when asked in the prodedure, say "yes (Y)" to drm fix.
[Xperia Z5 Android Development] djembuuut:
can i apply it on x compact japan version? i on nougat wit unlockbootloader, but i forgot to back up ta partition before.
[Xperia Z5 Android Development] yannis_gr:
Dear serajr , tobias.waldvogel, thank for your work and rootkernel!

I wonder, is it possible to add Cpu Voltage Control to your kernel?

Thank you!
[Xperia Z5 Android Development] zputnyq:
Hi guys,

Sorry if this question has been asked before.

I have read that it's possible to root xperia m4 stock kernel with this tool.

My question is, can I skip patching supersu to kernel step, since I wanna flash magisk ?

Edit: does this tool work on win xp ?
[Xperia Z5 Android Development] IceDreams:
how to fix this problem

[IMG="Image"]https://i.postimg.cc/WbSX6bxc/Screenshot-1.png[/IMG]
[Xperia Z5 Android Development] YasuHamed:
for z3+ use the older version of script

scrip 5.25 was intented for OREO on X Xz Xzs Xzc Xp xc etc
[Xperia Z5 Android Development] IceDreams:
that's just the name of the folder sir, the kernel that I use is Suzu Oreo 8.0 34.4.A.2.118
[Xperia Z5 Android Development] ToastedToast:
I am trying to use this on a Xperia 10, and the program hangs after detecting the platform as 64-bit
[Xperia Z5 Android Development] trunghxf:
is it normal for me when everytime i create a kernel using the same choices, MD5 of the output kernel keep changing?
[Xperia Z5 Android Development] Klaus N.:
How about using the search function? If you you had, you would have found the answer to your question inside this thread ;)
[Xperia Z5 Android Development] trunghxf:
thanks dude, i forgot to use it, sorry >.<
[Xperia Z5 Android Development] akak1:
Hi guys!

I'm a noob and I have three issues:

1. I have a z5 docomo (SO-01H) with bootloader unlock allowed: Yes. I'm on nougat but it only updates via OTA so I only have marshmallow FTF.

How do I extract kernel and system.sin from my phone? If I unlock bootloader on marshmallow I'll be stuck on 6.0 because OTA won't work. Can I use other FTF kernel? I have customized AU ftf on 7.0 or 7.1 for e6653.

2. BackupTA never works, I've been trying for the whole week with no luck. I used flashtool to backup TA partition and now I have two files (1.ta and 2.ta) I don't know what to do with them. Please guide.

3. Can I flash e6653 ftf after bootloader unlock (it gives device not compatible error on flash tool now) and/or use custom roms e6653?

Please guide, I wanna root. Thanks
[Xperia Z5 Android Development] casouzaj:
Don't unlock your phone's bootloader before you achieve a backup of its TA partition. Backup TA V2 will be able to perform such a backup only if you downgrade to a stock Marshmallow firmware. Use Flashtool to flash it in flashmode. Wipe its data partition, in order to have a stable Marshmallow setup (you'll loose your data during the bootloader unlocking procedure, anyway). Whilst on Marshmallow, activate USB debugging connect your phone to your computer and run the backup TA tool. It will be successful if it produces a 2MB-long TA img file. Run flash_dk with this TA img file to create your DK.tft file.

You can now flash your Nougat ROM back, again through Flashtool.

Copy that ROM's ftf file to the unpacked rootkernel folder, and rename its extention to zip. Extract kernel.sin out of it. In Flashtool, click on Tools > Sin editor, select that kernel.sin file and click on Extract data. A kernel.elf file will be produced. You can use it in rootkernel to produce a new_boot.img. Choose to disable Sony RIC during the process. Say No to all the other questions.

Now unlock your phone's bootloader. Use fastboot commands to flash a TWRP img file to the FOTAKernel partition and the new_boot.img file to the boot partition. To enter TWRP, hold both the power and the volume down buttons. When your phone vibrates, release the power button. When the screen lights up, release the volume down button. Install Magisk. In my Z5 Compact phone I used the stable 19.2 version (had issues with the Canary builds). Install also the DRM fix zip file.

Now copy the DK.tft file produced by flash_dk to C:\Users\your_username\.flashTool\firmwares, and select Device keys in Flashtool, in flashmode. Flash it.

OK, turn your phone on and tweak Magisk Manager the way you have, most probably, read a lot about.

Hope to have not forgotten something important.
[Xperia Z5 Android Development] akak1:
Thank you so much. But as I stated, I don't have nougat ROM ftf file and its available nowhere. The only ftf files available are lollipop and marshmallow.

I downgraded it to lollipop and marshmallow countless times but backupTA doesn't work at all. So I can't have a TA backup except with flash tool which gives me two files with the extension .ta. I don't know which one to use and what to do with the .ta file.

So j have to extract kernel from my phone which is running nougat. I can downgrade to lollipop or marshmallow but to get back to nougat I have to download OTA. With bootloader unlocked, OTA won't work and i will be stuck with marshmallow, unless I could use ftf files for other models such as e6653, Which currently I can't.

Hope you understood the issue. Thanks
[Xperia Z5 Android Development] casouzaj:
After you manage to get a backup of your TA partition through Backup TA v2, whist running Marshmallow,, prior to unlocking the bootloader, you can perform the OTA upgrade to Nougat and move on.
[Xperia Z5 Android Development] akak1:
Tried that hundreds of times even on lollipop. No success. Back TA V2 doesn't work for my phone
[Xperia Z5 Android Development] casouzaj:
I'll try to make some tests with TA backup performed by Flashtool, thing I've never made so far, and return to you with my findings.
[Xperia Z5 Android Development] akak1:
Thank you sir. I finally managed to get the TA backup successfully. I downloaded all MM roms and tried with each one of them. One worked and I got ~2MB img file.

Then i proceeded to unlock the bootloader as stated on Sony's website. The phone did a factory reset (telling from the time it took to bootup).

Did the process and got the modified boot.img while being on MM. Also got the DK.ftf file.

fastboot flash boot boot.img command didnt work while being in the same command window so copied the boot.img in the ADB tools folder, flashed the boot.img via fastboot. No errors.

But when the phone turns on there is no Super SU, i cant manage to boot into TWRP and it seems as if nothing happened. Even the OTA is downloading.

Should i try unlocking the bootloader again? The service menu--> configuration still shows Bootloader unlock allowed: yes and all keys in security test are [Key OK] [Active] except FIDO_KEYS: Not provisioned, provision failed.

I havent flashed the DK.ftf yet.

If the boot.img got pushed successfully, I dont know what i did wrong. the phone works fine as it did before. Even flashtool says root access denied.

Thank you, once again for your support.
[Xperia Z5 Android Development] casouzaj:
As I stated in my first (long) reply to you, use Magisk (stable v19.2) to get root access. SuperSU is deprecated. Yes, flash the DK.tft file in flashmode, through Flashtool. Use a fastboot command to flash a TWRP img file to the FOTAKernel (the exact way it's written) partition. Then, enter TWRP by holding both the power and the volume down buttons. Once in TWRP, install the Magisk zip file and the DRM fix zip file, as well.
[Xperia Z5 Android Development] akak1:
Thank you sir. I finally managed to get root and TWRP. But i am stuck on MM because i cant flash any other variant's FTF or even international one. It always gives errors and OTAs wont work.

All custom roms bootloop so no use.

But at least Im rooted and debloated on stock MM.

Thank you for your help.
[Xperia Z5 Android Development] casouzaj:
If I remember it right, I stated that you did the OTA upgrade right after you managed to have a backup of your TA partition, prior to unlocking the bootloader. Well, since you have that backup, you could use either Flashtool or a dd command to re-lock your bootloader, then start the whole thing all over again, but now from Nougat. It's your choice.
[Xperia Z5 Android Development] ZoHere:
I just flashed drm fix via twrp for my Xperia X android 8.0.0 doesn't fix x-reality, vivid mode
[Xperia Z5 Android Development] seyrarms:
Hello sir. I have problem to put aditional filesystem_files folder to rootkernel. can you explain more please, because i'm tired where put this folder and code to run this script just until :

Rootkernel V5.23

- Unpacking kernel
Found elf boot image
Kernel version: 3.18.66-perf-g6b8cda40c6b9
Found appended DTB
- Detected vendor: somc (Sony), device: kagura, variant: kddi
- Unpacking initramfs
- Detected platform: 64-bit
- Detected Android version: 8.0.0

I have waited about five minutes and nothing happened

I know what happen can't use, because i use official root kernel and thanks for this tool to give my sony japan can do use this tool :good:
[Xperia Z5 Android Development] randisaaputra:
hey, so my phone was on Nougat 39.2.B.0.36, am i still need to follow this steps or just using the tutorial on 1st page?
[Xperia Z5 Android Development] seyrarms:
You can't use this tutor cause for oreo maybe from first page can do. I can help for make this boot for you
[Xperia Z5 Android Development] foudremars:
I need TWPR for L2 H4331. Can you help me? Thanks.
[Xperia Z5 Android Development] RintSo:
NOTED
[Xperia Z5 Android Development] zputnyq:
Hi guys,

I want to use root kernel for rooting, but I only have windows xp now. Does this tool works on windows xp ?
[Xperia Z5 Android Development] rumcum:
Congratulation

Nice job! Very useful.
[Xperia Z5 Android Development] rumcum:
When there is a risk, there is fun!

Your method works fine with me. Good job!

After flash boot.img system starts twice.

The first boot takes about 3-5 minutes.

If the boot lasts more than 5 minutes, you should check the data format in TWRP partition. It should be ext4 (instead of emmc).

That's the way it's supposed to be.
[Xperia Z5 Android Development] shohabmsk:
pubg, pubg lite, free fire not working if I patch boot.img with root kernel. the games work fine on both locked and unlocked bootloader. but whenever I rootkernel boot.img and flash, those games gets black screen and doesn't run. just black screen when opening, no logo, not running, anything. (free fire on white screen, same) pubg worked fine till 0.18, until 0.19 update. pubg lite, free fire also worked on earlier versions(past years). dont know if patching boot.img or just modifying boot.img causes the issue, I heard those games checks things at kernel level.
[Xperia Z5 Android Development] sanekplus:
I tried to use this great package for getting root+TA in my Xperia X Compact (latest Android 8 34.4.A.2.118) but got strange problems:

1) patched kernel during init cannot copy /sbin/TA.img to /data/local/tmp/TA.img

2) after manual copying daemon cannot read /data/local/tmp/TA.img

08-30 21:20:58.735 9319 9319 I tad : Trim Area daemon starting.
08-30 21:20:58.735 9319 9319 I tad : Using trim area info (0,16) from arguments.
08-30 21:20:58.724 9319 9319 W tad_static: type=1400 audit(0.0:419): avc: denied { read write } for name="TA.img" dev="mmcblk0p51" ino=514083 scontext=u:r:tad:s0 tcontext=u:object_r:system_data_file:s0 tclass=file permissive=0 ppid=1 pcomm="init" pgid=1 pgcomm="init"
08-30 21:20:58.735 9319 9319 E tad : Failed to open /data/local/tmp/TA.img (Permission denied)
08-30 21:20:58.735 9319 9319 E tad : Failed to configure TA library.

It seemed selinux was broken. I made some investigation and finally have found that seinject option in bootimg.exe does not work properly on Windows (without any error messages sadly). Rebuilding kernel on Linux gives me correct selinux settings and working root+TA.
[Xperia Z5 Android Development] softrulez:
Sorry of topic... Hello dear people. Maby someone with SONY DEV account can help me unlock bootloader? Looks like sony not interested in new developer registration, and i need it only for one OLD Z3+ phone. PM plz.
[Xperia Z5 Android Development] olekolekolek78:
please i want 376 firmawe kernel i got unlocked bl i want to magisk on 7.0
[Xperia Z5 Android Development] alemaoao:
How can i get the kernel.elf directly from my phone? It's a docomo (SO-02J) running stock Oreo rom 34.4.B.1.135 with TWRP too. I already backed up boot sector with twrp by dd command like:

dd if=/dev/block/bootdevice/by-name/boot of=/sdcard/bootXcStock.img

So, i intend that I have the 2nd file needed for rootkernel command run like:

rootkernel file1.elf bootXStock.img

Missing file1.elf for me because I don't have firmware .ftf file for this version because it is only sent by FOTA.

I would like if it is possible get kernel elf file directly from the phone.
[Xperia Z5 Android Development] olekolekolek78:
i got IT i need XZ KERNEL OREO WITH XPOSED SOLUTION
[Xperia Z5 Android Development] USBLeonel:
I ran all over the internet, but I didn't find a solution.

I bought an xperia x compact SO-02J on aliexpress, and the SO-02J ntt docomo came, entering the service menu, I am graced with the line written "Bootloader unlock alowed: no".

so far I haven't found any solution, I read all possible forums, and at some point, someone always said that there is no way to change this line and enable the bottloader unlock.

Is it possible to change the firmware for an F5321 model? I'm getting hopeless, but I'll keep trying...
[Xperia Z5 Android Development] alemaoao:
There are some topics here about change firmware of docomo version to global versions, but, it is not so common. You have to download firmwares using Xperifirm and change some xml files, but I really never tested this, or, if you prefer, it is possible to unlock bootloader only. There is a tool (paid, named qunlocktool) that you can use to change rooting status to "bootloader unlock allowed: Yes", so, after do this you can unlock bootloader by default procedure by Sony. I think 1st option it is more interesting, because it is not paid.
[Xperia Z5 Android Development] Bronnel:
Hi Before I flash the DK.ftf file, I checked service tests and noticed the keys are alrwady there , where are these come from, is this normal?
[Xperia Z5 Android Development] tobias.waldvogel:
There is also a solution included for people who unlocked their bootloader earlier and could not extract their device key before (like myself). But with this solution not everything works. E.g widevine will only work if you flash your deivce key.

Gesendet von meinem E6683 mit Tapatalk
[Xperia Z5 Android Development] mrLu:
in Titanium Backup I can delete any app, but can't to restore it then (only system). Is it normal? Anyone try?

upd: and can't integrade update in system app
[Xperia Z5 Android Development] Masoud.Ser:
Thank you tobias

I've tested on Z5Dual(E6633)

And it worked well without problem
[Xperia Z5 Android Development] Bronnel:
Hello tobias can you please comment on this,

before I flash the DK.ftf file, I checked service tests and noticed the keys are alrwady there , where are these come from, is this normal?
[Xperia Z5 Android Development] jugglerpl:
Can someone confirm that Style Portrait works after rooting? I have a problem with camera addons

Wysłane z mojego E6653 przy użyciu Tapatalka