yashsingh1/xdaforums huggingface dataset:
[Sony Cross-Device General] eXI911:
My device is not supported.

Sony Xperia Z5 (32.4.A.1.54)

How can i backup my TA? Actual my bootloader is locked and the device is on stock and like a new one.
[Sony Cross-Device General] Klaus N.:
What device is it exactly? E66

XX

???
[Sony Cross-Device General] chronicfathead:
I think you would have to downgrade the software on your phone before the tool can work.
[Sony Cross-Device General] wihushae:
hello! I've a Z5c (E5823) and downgraded it to 32.0.A.5.32 to use iovyroot but the console gives this error message:

whats wrong here, how can i backup my keys?

Edit: with the version 32.0.A.6.200 on my device it worked flawlessly! Strange that the earlier version I tried didn't work...
[Sony Cross-Device General] Macsek:
Thanks for the tool, [MENTION=3975929]zxz0O0[/MENTION]

I had problems with Universal (Dirtycow-based) TA Backup v2 (trying on two different Z5c E5823 (32.0.A.6.200) phones created empty backups, but backing up Xperia Z was fine), then tried your tabackup v0.4 (modified to run on linux, attached) and it worked well. :good:
[Sony Cross-Device General] MaStErB_1984:
Worked like a charm for me.... using a Sony Xperia Z5 Premium dual (E6833) downgraded to 32.0.A.6.170... really nice work! Thank you :)
[Sony Cross-Device General] flaxx187:
hey my flashtool doesn't work he is freezing

and my imei number doesn't show in the flashtool

adb && oem is activ.

when i use the volume down taste i found nothing (under fastboot devices)

when i use the volume up taste i found my device (under fastboot devices) but it can't work because i get the error:

idk is my bootloader open ? in the config isn't the line "booatloader allowed" there stay only "root status: unknown"

target reported max download size

sending 'recovery' (15472 KB)...

OKAY [ 0.416s]

writing 'recovery'...

FAILED (remote: Command not allow

finished. total time: 0.439s
[Sony Cross-Device General] hylde:
You are the legend! :good:

My phone keeps crashing and reboot with 0.4, now trying with 0.2 and it works! got the TA backup now.

Cheers!
[Sony Cross-Device General] ivanmemento:
Hello, I have a special question, is possible to use my TA backup of Z5 6653 on my Z1 compact ?

And if i flash complete original firmware it have back all bionz features? (I mean if i don't restore ta)
[Sony Cross-Device General] flaxx187:
No you get a hardbrick, you can't share the TA to other phones.

take a custom kernel, many fixed the camera.
[Sony Cross-Device General] Yaguznal:
Would anyone be so kind to reupload v0.4? The link in the OP is dead and v0.2 does not apear to work for my z3+.

Many thanks in advance!
[Sony Cross-Device General] Yaguznal:
Never mind! I found them somewhere else. I have attached them here for your leisure.
[Sony Cross-Device General] javiwz:
Hello, my phone reboot when it's Removing JOP , it's a E6653 with 32.0.A.6.200
[Sony Cross-Device General] Fricksinator:
In my PC it only generates a file with about 96 bytes is that normal? I'm using version 0.4, and have a E6833. Android version is lollipop. I just want to make sure before I unlock bootloader.
[Sony Cross-Device General] e-ghost:
How to add support to Xperia device with similar Xperia kernel?

Hi all, I see

I have a JP Docomo version of Z4Tablet LTE, SO-05G (equal SGP771).

I downgraded to lowest ROM of Android 5.0.2 28.0.B.1.135 from https://androidfilehost.com/?fid=24549084345926132 :

SO-05G at 28.0.B.1.135 with kernel 3.10.49 built on Jun 12 19:38:37 2015

Then I comparing:

SGP771 28.0.A.8.260 is with kernel 3.10.49 built on Jun 5 18.:09:09 2015

As they look so alike and released at the same time to different region, I believe iovyroot should able to enable a temp root to SO-05G's 28.0.B.1.135 as well. However I tried both v0.2, v0.3 and latest v0.4 all said

Device not supported

. So I want to see if it is possible to modify any script so that I add support to it.

(NB. I have tried to flash the global 28.0.A.8.260 to SO-05G but always got an error at the following step:

"

Processing of b2b.sin finished with errors

"

then stop flashing and causing the Z4Tablet stop boot up. Seems it is impossible to use the

global 28.0.A.8.260 onto SO-05G. Please help me. Thanks!

:crying:
[Sony Cross-Device General] mbc07:
If you are sure your SO-05G is the same as SGP771, flashing the entire FTF of build 28.0.B.1.135 for SO-05G then flashing only the kernel from the build 28.0.A.8.260 for SGP771 should be enough to start the tablet and run iovyroot...
[Sony Cross-Device General] e-ghost:
actually I am not sure if SO-05G is completely the same as SGP771, but they just functionally the same. So when I tried to cross flash global ROM onto SO-05G, I referred some previous similar cross-flash article below for the flashtool options to try:

https://xdaforums.com/z3/help/01g-flashtool-generic-global-fw-bundle-t3845599

https://xdaforums.com/xperia-z4/help/03g-to-e6553-ftf-t3265050/amp/

https://www.stationtekno.com/2018/02/flashing-xperia-z4-tablet-SO-05G.html

https://www.martview-forum.com/threads/international-rom-for-sony-z5-japan-501so-sov32.5147/

https://cellphones.com.vn/sforum/sforum-huong-dan-mang-ban-rom-quoc-te-len-sony-z4-nhat

I tried:

- used flashtool v0.9.18.6 to cross-flash Customized-HK with wipe everything and excluded "TA, FOTA, PARTITION. BASEBAND" and no final verification

- used flashtool v0.9.23.1 to cross-flash Customized-HK with wipe everything and excluded

-- SIN section: AMSS_FSG, AMSS_FS_1, AMSS_FS_2, FOTAKERNEL, PARTITION

-- Misc TA section: exclude everything except AUTO_BOOT (to flash the machine will automatically restart)

both end up flash error in early stage ("

Processing of b2b.sin finished with errors

") and cannot proceed. So up to now I am still not able to cross flash to SGP771 ROM to use the iovyroot yet. :crying:
[Sony Cross-Device General] Sci-Man85:
The link for iovyroot_v0.4 gives me a empty file.

Is there another 0.4 version to download?

Edit: It seems not to be empty, but detected as virus :(

Edit 2: Never mind. Get it! :D
[Sony Cross-Device General] bertschwert:
I know that I am a bit late to the party, but:

Does someone have a copy of this download? Obviously Google didn´t like it an deleted it ;)

Ok, found it!
[Sony Cross-Device General] idler1984:
Nice job :good::good:
[Sony Cross-Device General] tobias.waldvogel:
Congratulations, really an excellent job :D

For the DRM fix I plan to release an alternative solution, which will use your original device key from the TA backup rather then injecting the credentials. This will make absolutely everything work.

Future versions of my kernel repack tool will then accept an additional parameter with the TA backup and incorporate it into your kernel image.

Unfortunately I unlocked my phone already long time ago, so would need a volunteer to PM me a TA backup of an unlocked phone for test purposes. I promise not to share it with anyone or publishing any parts of it.
[Sony Cross-Device General] zxz0O0:
Yeah that's exactly what I thought. :highfive:

Just don't flash the TA image to your device, otherwise you'll brick it.
[Sony Cross-Device General] 3Shirts:
That's would be perfect! A proper workaround :good:

I get my Z5 tomorrow (held off until a locked BL root solution was found) so I am happy to provide this if no-one else has done so before me.
[Sony Cross-Device General] RyTekk:
Just do it (restore TA and get hard brick) then send device to service, I heard that warranty in Germany is awesome, they will give you another with any issue (as long as your device can be recognized it's a phone :laugh:)
[Sony Cross-Device General] anjelz2012:
send me by private email message and send you my TA backup my xperia z5 E6653 extracted with the recent method :laugh:
[Sony Cross-Device General] devilmaycry2020:
Here is my result in Z5D E6683

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\iovyroot_v0.2>tabackup.bat
* daemon not running. starting it now on port 5037 *
OK
* daemon started successfully *
450 KB/s (23064 bytes in 0.050s)
66 KB/s (683 bytes in 0.010s)

poc by idler1984

[+] Changing process priority to highest
[+] Getting pipes
[+] Allocating memory
[+] Installing JOP
[+] Patching address 0xffffffc00194f630
[+] Start map/unmap thread
[+] Start write thread
[+] Spraying kernel heap
[+] Start read thread
[+] Done
[+] Patching addr_limit
[+] Patching address 0xffffffc0138dc008
[+] Start map/unmap thread
[+] Start write thread
[+] Spraying kernel heap
[+] Start read thread
[+] Done
[+] Removing JOP
got root lmao

TA.img copied successfully
pull: building file list...
pull: /data/local/tmp/tabackup/TA-01042016.img -> ./TA-01042016.img
1 file pulled. 0 files skipped.
2027 KB/s (2097152 bytes in 1.010s)
Press any key to continue . . .

C:\iovyroot_v0.2>

Very good job. Thank you very much. You are so genius

---------- Post added at 09:46 PM ---------- Previous post was at 09:40 PM ----------

@zxz0O0

Do you need my TA backup for research ?
[Sony Cross-Device General] OtaruM:
Titanium Backup/Lucky Patcher with temp root?

Great job guys! I have my precious TA backed up (woot)

Question regarding temp root. I'm not very keen on unlocking bootloader immediately at the moment and do have an interest initially in having a semi-rooted phone with non-persistent root allowing me and apps accessing necessary data (primarily RO access to /system and RW access to /data since it is not a subject of verity-boot). So, the question here: is it possible? I know there were similar scenarios when HTC phones have had S-ON couple of years ago preventing modification of /system and with temp root users were able to run Titanium Backup and other apps able to locate su in /data/bin/su and NOT in the /system partition. I'm perfectly OK with doing some temp-root procedure after each boot, since I do not reboot phone for weeks. This would very cool to be able to backup/restore apps with Titanium Backup and fool around with Lucky Patcher which targets primarily dalvik-cache (again, not a subject to dm-verity) :cool:
[Sony Cross-Device General] iSpammer:
Z3+?
[Sony Cross-Device General] RyTekk:
Can you try to unlock bootloader then restore to sure it work properly?
[Sony Cross-Device General] devilmaycry2020:
my phone still under warranty so i can't do it now.sorry
[Sony Cross-Device General] ctap001:
This is excellent.

Now that we can backup the TA Partition, I'm thinking the steps to be followed to have a permanent root for MM would be as follows:

1.) Downgrade to LP from MM (OP says LP kernel only)

2.) Root, backup TA Partition, then Unlock

3.) Follow http://xdaforums.com/z5-compact/general/root-e5823-marshmallow-t3336346

4.) Follow http://xdaforums.com/xperia-z5/development/sony-credentials-restore-unlocking-t3296383 or wait for the proposed alternative

5.) Unfudge Android """""""features""""""" (looking at you, forced lock screen album art)

I haven't done this. Just posting to check with you guys if this is a good idea.
[Sony Cross-Device General] zohaib0001:
[MENTION=3975929]zxz0O0[/MENTION]

i download 0.2 pack

but inside it i did not find any bat file to root my device

Can any one help me

how to use this pack for root
[Sony Cross-Device General] amintox:
Thanks for the hard work. I was able to restore my TA after rooting and backuping the TA. Now im using LP LOCKED BOOTLOADER with my DRM KEYS. I did it to confirm that the TA restore works. My device is E6653.
[Sony Cross-Device General] zohaib0001:
Please help me i did not understand that how can i use this pack to root my device

i am on 200 firmware just need to know how to use this pack to get root ???????
[Sony Cross-Device General] RoberM:
Hello, THANKS!, for the work!!, i tried flashing LP kernel over my MM firmware and the phone (Z5 E6653) does not boot (infinite booting animation), so it seems people like me need to downgrade to the full LP firmware, not only kernel, probably needing a factory reset losing user data.
[Sony Cross-Device General] ninestarkoko:
Thank you for testing and exposing to the risk!

Did you verify the DRM keys by entering service menu *#*#7378423#*#* -> Service tests -> security ?

Can you share links to the threads on HTC phones?

Seems good to me. To backup TA, just use the tabackup.bat from latest version of the pack (v0.2).

Tobias has said that he'll update his DRM simulating patch with more advanced techniques.

(i've already changed my lockscreen with one downloaded from the playstore, i hate Lollipop lockscreen XD)

Please, read the first page: you cannot get permanent "root" using this pack. If you want "root" (SuperSU, root apps,...) you should backup the TA partition using Tabackup.bat inside the pack and then, if successfull, you need to unlock the bootloader

Unfortunately you need to downgrade to a Lollipop firmware, because supported kernels are only Lollipop ones. MM roms will bootloop on LP kernel, as you see
[Sony Cross-Device General] amintox:
U flash the LP KERNEL only if you are on lollipop on a different version than 200. If you are on the version 200 of lollipop you dont need to flash the kernel from lollipop. BUT IF YOU ARE on marshmallow you NEED to downgrade the whole firmware not only the kernel. U misunderstand the instructions.

---------- Post added at 06:28 PM ---------- Previous post was at 06:23 PM ----------

I did this after the restoring of the TA *#*#7378423#*#* -> Service tests -> security

Everything is active. No issues to report
[Sony Cross-Device General] OtaruM:
Sure, here you go "temp root" for Titanium Backup:

http://xdaforums.com/showthread.php?t=1151735
[Sony Cross-Device General] zohaib0001:
[MENTION=5571967]ninestarkoko[/MENTION] [MENTION=3975929]zxz0O0[/MENTION] [MENTION=4625631]amintox[/MENTION]

I backup my TA then i unlocked my boatloaer

now i am trying to restore my TA back but every time i open tarestore.bat

it says

Please specify a TA image to restore

press any key to continue........

and then after pressing any key it close , Please tell me how can i restore my TA back
[Sony Cross-Device General] Duvel999:
Reboot your pc, try again. Antivirusscanner? Windows 10?
[Sony Cross-Device General] ninestarkoko:
Drag and drop with your mouse the file TA-xxxxxx.img into tarestore.bat and follow the instructions :)
[Sony Cross-Device General] zohaib0001:
[MENTION=3975929]zxz0O0[/MENTION]

[MENTION=5571967]ninestarkoko[/MENTION]

I do it but nothing happened

a small popup window open & close quickly

Please Help me

This is what i am doing

My phone in on connect with my PC with USB Debugging on

TA.img is available in iovyroot_v0.2 Folder

But nothing happened when pick & drop TA.img file on ta restore bat
[Sony Cross-Device General] Bronnel:
is it possible to extract our own drm keys from the backed up TA partition, and use it in drm restore after unlocking the bootloader?
[Sony Cross-Device General] zxz0O0:
I tried it and Titanium Backup works but most apps probably won't (e.g. root explorer does not).
[Sony Cross-Device General] serajr:
iovyroot

[MENTION=3975929]zxz0O0[/MENTION] your work is always so f****** awesome... you just rock my friend!!

Respect!!!
[Sony Cross-Device General] zohaib0001:
[MENTION=3975929]zxz0O0[/MENTION]

Please Help me i failed to restore my TA.img back

every time i open tarestore.bat it says

Please specify a TA image to restore

press any key to continue........

i also try to Drag and drop ta.img file on tarestore.bat

but a small window open & close quickly and nothing happened
[Sony Cross-Device General] zxz0O0:
Open Windows Explorer and go into the folder iovyroot. Hold Shift and click on white background inside explorer. Click on "Open shell here". Then inside shell, type

tarestore.bat [TA.img file name]

Now the window will not close automatically and you can copy the output
[Sony Cross-Device General] ninestarkoko:
Try this:

- Open the task manager and kill adb.exe if it is still running

- Disconnect the phone and reboot it

- Reboot your computer

- Try again: connect the phone, go to iovyroot 0.2 folder and drag e release TA-xxxxxx.img onto TARESTORE.bat

Let me know

Tobias is working on this
[Sony Cross-Device General] zohaib0001:
[MENTION=3975929]zxz0O0[/MENTION]

I do it But after i enter these words " Yes I want " It says device not supported
[Sony Cross-Device General] OtaruM:
Oh wow, how did you manage to remount data partition? I have Operation not permitted error in # console

root@E5823:/data/local/tmp # mount -o remount,suid /dev/block/bootdevice/by-name/userdata /data
mount: Operation not permitted
[Sony Cross-Device General] zohaib0001:
I was unable to restore my TA.img after unlocked my bootloader but i retore it by my way

If any one from you was not able to restore your TA then do this

Download Backup-TA-9.11 pack

open it and copy your ta.img into this folder, now run backup ta bat and choose option 4 to convert your TA.img

it will ask you to copy your ta.img in " convert-this folder " just drag your ta.img in this folder and hit yes

after convert is complete now run Dry restore , if no error occurred then you can run restore TA option

I do this and my phone is back online [MENTION=3975929]zxz0O0[/MENTION]
[Sony Cross-Device General] zxz0O0:
I didn't remount it, just put su inside /data/bin and then use

/data/bin/su --auto-daemon &

to launch the daemon (with root).

Then use

/data/bin/su

to get root shell
[Sony Cross-Device General] jackq:
We can try to gain root for some apps by this way. Now the system partition is mounted read-only. We can try to push the binary to /data/local/tmp. Then make su executable and eventual run it. But it doesn't mean we can have root. To become root we need to push an exploit to /data/local/tmp and run it. It crashes the shell and reopen a new one with root rights. Then we can remount the system-partition read-write and install su.
[Sony Cross-Device General] bruno$0:
Yes! i sent the kernel file yesterday for dev for he add support to the Z3+ too. :p Only build 266 is compatible with this method.;)

happy (downgrade) backup!
[Sony Cross-Device General] amintox:
this is what i did to restore my TA. and it's the best way.

edit for noobs. please if you unlocked your bootloader and you want to restore the TA. you HAVE to flash lollipop full firmware using flashtool then you can use the restore method. dont restore the TA after you have made modification to the system you will hard brick the device. you HAVE to flash full lollipop 200. then restore the TA using drag and drop.

save your TA backup online too dont forget that computer hard drives get crazy sometimes.
[Sony Cross-Device General] engineer000:
hi.. I flashed the .170 firmware for my z5 premium dual and I got a TA backup of 2MB. Is it normal size? thanks

---------- Post added at 04:15 AM ---------- Previous post was at 03:37 AM ----------

I was able to backup and restore TA. Now I am getting a new error when I try to backup again:

iovyroot by zxz0O0

poc by idler1984

[+] Changing fd limit from 1024 to 4096

[+] Changing process priority to highest

[+] Getting pipes

[+] Allocating memory

[+] Installing JOP

[+] Patching address 0xffffffc001950630

[+] Start map/unmap thread

[+] Start write thread

[+] Spraying kernel heap

[+] Start read thread

[+] Done

[+] Patching addr_limit

[+] Patching address 0xffffffbf9adf0008

[+] Start map/unmap thread

[+] Start write thread

[+] Spraying kernel heap

[+] Start read thread

[+] Done

[+] Removing JOP

error: protocol fault (no status)

error: device not found

error: device not found

error: device not found

Press any key to continue . . .

Edit:

I cannot unlock my BL now:

D:\angler\angler-mhc19i>fastboot -i 0x0fce oem unlock 0x68D772EFDCD47588

...

FAILED (remote: Command not allowed)

finished. total time: 0.008s

Edit : Was able to unlock again > forgot to enable OEM unlocking

Super Thank you guys! Now downloading MM firmware and will root
[Sony Cross-Device General] frostmore:
[MENTION=3975929]zxz0O0[/MENTION]

I think it would be nice if we can have a test TA restore option.

i remember when you release giefroot,there was such an option.

this would help the noobs to ensure they were really able to backup and test their TA backup.

that will also reduce the need for you to respond to noob questions.
[Sony Cross-Device General] najoor:
Can I have that version please? With [MENTION=3975929]zxz0O0[/MENTION] permission of course.
[Sony Cross-Device General] zxz0O0:
Added new version with support for

- E6553 (28.0.A.8.266)
- SGP771 (28.0.A.8.260)
- SGP712 (28.0.A.8.260)

That was not in giefroot but in BackupTA. Anyway I added more information in the second post and to the script. My script is basically just for testing on locked bootloader. It won't work if you flashed a custom kernel after unlocking.
[Sony Cross-Device General] karrouma:
Please add E6683 version .209 it is same as z5 dual premium e6883
[Sony Cross-Device General] ninestarkoko:
We can't edit /system partition and we can't even just remount it R/W , as it will result in dm-verity check failing and phone bootlooping. Temporary root is because of this limitation, as written in the 2nd post
[Sony Cross-Device General] Raz0Rfail:
Hi,

can someone give me a download link for the e5823 32.0.a.6.200 ftf file ?

regards

Raz0Rfail
[Sony Cross-Device General] RyTekk:
Do we have to disable myxperia before unlock? Or do just do enable oem unlock in developer option (?)? (Z5 has a little differences in unlocking bootloader??)
[Sony Cross-Device General] devilmaycry2020:
Example :my phone was unlocked bootloader so do i have to flash original stock rom then restore TA by using tarestore.bat tool ? Or just use BackupTA instead and choose "Convert v4 Backup".
[Sony Cross-Device General] amintox:
To everyone who has difficulties in unlocking the bootloader or if you get the message FAILED (remote: Command did not succeed). you have to use flashtool to unlock your device.

follow this.

in flashtool the latest version now is (0.9.20.0)

install flashtool and turn off the phone.

open flashtool and go to BLU button (bootloader unlock)

it will ask you to connect your phone in Download Mode. do it connect the phone in download mode. it will read the ta and serial number of your device. and it will ask you again to connect the phone in fastboot mode. do it

after you have connected the phone in fastboot mode it will ask you to go to sony's website to get the unlock code for your device. follow the website's instructions. and get your code.

put your code in flashtool now and click unlock. it should say unlocked.

IF IT GIVES YOU SOME ERRORS. OR FAILS. FOLLOW THIS.

go to C:\Users\(USERNAME)\.flashTool\registeredDevices

you will find a folder over there which has as a name the serial number of your device. open that folder, in my case this was the folder.

C:\Users\ToX\.flashTool\registeredDevices\BH9069****

create a new text file inside it and name it ulcode

open the text file and paste the unlock code you got from sony. save the file and close flashtool and reopen it.

go to BLU button, click it.

connect in flashmode and after that it will ask for fastboot mode. after that flashtool will give you to unlock your device without issues.

this was done in windows 10 x64 and the device was E6653. installed fastboot drivers from flashtool driver folder inside C:

you have to disable driver signature verification in windows 10 before installing the fastboot driver otherwise it will not install the driver.

I do confirm again the TA backup and restore works. if you have issues restoring the TA close adb in the task manager

drag the TA image and drop it on tarestore.bat it should work. IF it doesn't work maybe for you. Open Windows Explorer and go into the folder iovyroot. Hold Shift and click on white background inside explorer. Click on "open command window here". then type tarestore.bat (TA.img file name)

If the device restarts or freezes and reboots. just repeat the restore. you have to be on stock rom without any changes to the system if you have made changes to the system please flash a new lollipop rom and then restore.