yashsingh1/xdaforums huggingface dataset:
[Sony Cross-Device General] Superblond:
[SOLVED] Xperia Z5, E6653, 32.0.A.6.152 (5.1.1.): TA Backup not working, error

Hey guys!

I got the same error, unfinished backup problem (s. 1st log)

- USB-Debug: ON

- correct ROM E6653, 32.0.A.6.152 (5.1.1.) from here

http://www.xperiablog.net/2015/10/29/new-update-32-0-a-6-152-rolling-for-xperia-z5-and-z5-compact-full-stagefright-fix/

LOG 1: ERROR

Solved it with that procedure:

1) opened a cmd window in Win7

2) changed dir to the ADB folder

3) switched off phone (Z5)

4) type "adb devices" (Enter)

result: empty List of devices

5) turned on phone

6) type "adb devices" in cmd windows (Enter) over and over, until device is listed

7) then immediately(!) double clicked on "tabackup.bat" batch/script

8) got this success message

all best :good:

SB
[Sony Cross-Device General] danilo_scala:
good morning, some friend put link download a firm work xperia z5 premium 6883, i found this but in flashtools show to z5 and not premium http://www.xperiablog.net/forum/res...dual_e6883_32-0-a-6-209_malaysia_generic.519/, i dont no if bug flashtools
[Sony Cross-Device General] WhenIWake:
Still cannot get this to work on my E5823 running 32.0.A.6.152 ... By far the most frustrating phone I have bought.
[Sony Cross-Device General] purplesaint7:
How to restore

[MENTION=3975929]zxz0O0[/MENTION]

Can someone do a proper tut for restoring the DRM Keys? When i drag and drop mine nothing happens it only show cmd in split second. I'll be quite critical and careful on this one because one mistake in messing with these TA can HARD BRICK your device
[Sony Cross-Device General] Muhammad amine:
thanks bro
[Sony Cross-Device General] Mastermagnus:
I have a Xperia z5 compact E5803 32.0.A.6.209 build, I get device not supported error, any help please?
[Sony Cross-Device General] Klaus N.:
Just flash 32.0.A.6.200 fw and it should work.
[Sony Cross-Device General] Muhammad amine:
I successfully restored my TA backup after unlocking bootloader ......

here is the log:

my device is Z5p E6833 running on lollipop 5.1.1
[Sony Cross-Device General] ciopik:
Please help

iovryroot don't see my devices

I flashed it FlashTool on .200 and .224 and all it's ok but when I try us Iovryroot it don't see it.

What I must do, which drivers must install

I have Win10
[Sony Cross-Device General] Yverson:
I am on a E5823 on 32.0.A.6.200

and it works after some trys - thanks
[Sony Cross-Device General] Guilherme Pacheco:
But you made the backup of your drm Keys before you unlock bootloader?
[Sony Cross-Device General] Muhammad amine:
Yes
[Sony Cross-Device General] z720:
possible to make it use on this device sharp 404SH

Linux version 3.10.49 (sharp@TG832612) (gcc version 4.9.x-google 20140827 (prerelease) (GCC) ) #1 SMP PREEMPT Fri Jun 5 14:21:54 JST 2015

Thanks in advance.
[Sony Cross-Device General] ogunja:
What's the first order.

Locking the bootloader and restore the keys. Or restore the keys and lock the bootloader in sequence?
[Sony Cross-Device General] Sithu Htun:
Can I restore TA-backup.img using TWRP 3.0.x.x after upgrading to Marshmallow, unlocked bootloader and flashed this RIC and DM-verity off kernel.
[Sony Cross-Device General] Klaus N.:
It's not possible to restore the ta-backup.img by TWRP, but you can try it with tobias.waldvogel's tool (see bottom of the OP there, begin to read of "If you managed to backup for TA partition before...").
[Sony Cross-Device General] Sithu Htun:
I have successfully backup TA image. Can I use iovy root tool in marshmallow to restore/get original keys after flashing permissive boot/rooting? Or would it hard brick for flashing TA image on permissive kernel? I am trying to restore original DRM keys because emulated DRM keys cause "Fingerprint hardware not available" error. Thanks for the reply.
[Sony Cross-Device General] Klaus N.:
If you do it like in the mentioned thread, by flashing the DK.ftf via FlashTool all should work. In case of restoring the ta-backup with ta-restore.bat, you will loose root, the bootloader will be relocked, and you will run subsequently in a softbrick with the used custom kernel.
[Sony Cross-Device General] DiLeon:
will it just be a matter of time/a usable exploit before we could have a temp root for the Xpera X range to be able to do a TA-backup or are there restrictions on newer firmwares who block this kind of 'temp root'?
[Sony Cross-Device General] aidy.lucas:
For the xa aswell please
[Sony Cross-Device General] eqbirvin:
For some reason Flashtool doesnt have the pre marshmellow firmware for z5p, any advice on where to look for it??
[Sony Cross-Device General] aidy.lucas:
Look for one on here, 4pda or Google search, Sony don't keep old firmware on there server's. Only up to date roms. I usually find a old one then keep it in the cloud if downgrading is always a option. Always come in handy at some point
[Sony Cross-Device General] eqbirvin:
Found one that works, Thank you for the speedy reply!
[Sony Cross-Device General] aidy.lucas:
No problem
[Sony Cross-Device General] MasalaMan:
hey can you share the link to the firmware
[Sony Cross-Device General] eqbirvin:
I used the .200 firmware from this website!

http://xperiafirmware.com/8-firmware/128-sony-xperia-z5-premium-e6853
[Sony Cross-Device General] silencer51:
So it is not possible to backup TA partition, flash latest firmware, unlock bootloader, root, then relock bootloader? Is there an integrity check in place with locked bootloader that will result in error when booting with SuperSU installed?
[Sony Cross-Device General] eqbirvin:
Yeah there is a system check that will cause large issues (probability of a hard brick) when you try to relock with modified system. (and yes even systemless root will still cause the issue)
[Sony Cross-Device General] rrdna:
Can anybody help me?

I am on E6653 and 32.0.A.6.152 firmware, which is supported by iovyroot.

My settings:

USB-Debugging allowed

When i run tabackup.bat , it will always crash at the same position and the phone reboots. (Everytime i try this).

Is there a workaround for this?

iovyroot by zxz0O0
poc by idler1984

[+] Changing fd limit from 1024 to 4096
[+] Changing process priority to highest
[+] Getting pipes
[+] Allocating memory
[+] Installing JOP
[+] Patching address 0xffffffc001950630
[+] Start map/unmap thread
[+] Start write thread
[+] Spraying kernel heap
[+] Start read thread
[+] Done
[+] Patching addr_limit
[+] Patching address 0xffffffbfb4408008
[+] Start map/unmap thread
[+] Start write thread
[+] Spraying kernel heap
[+] Start read thread
[+] Done
[+] Removing JOP
error: protocol fault (no status)
error: device '(null)' not found
error: device '(null)' not found
error: device '(null)' not found
Drücken Sie eine beliebige Taste . . . (--> german cmd: press any key to continue)

Greetings

rrdna

EDIT: OK, found the solution at page 20 in this thread, even though the search function did not return any good solution by searching "error" or "no status". Cheers
[Sony Cross-Device General] mbc07:
Hey [MENTION=3975929]zxz0O0[/MENTION], could you upload a pre-compiled binary of current Git version? I tried to compile myself but encountered some errors...
[Sony Cross-Device General] linuxct:
I can do it for you in a couple of hours.

Still, if you want to try on your own, you'll need Android NDK r10e, the rest should be pretty easy :)

edit: Done, attached it for you.
[Sony Cross-Device General] mbc07:
Thank you for the binary and also for the info!!! I was using an old NDK version, that's probably why it was failing to compile...
[Sony Cross-Device General] ilovebrazil:
Hi. I have this problem when creating DK.ftf. Please help.

[IMG="TA key error"]http://i.imgur.com/5aauO7r.png[/IMG]
[Sony Cross-Device General] Pascal257:
Thanks a lot for this tool. Worked like a charm on my Z5C.

I was wondering if someone figured out how to do a full backup with temp root? I'd really like to backup my Google Authenticator (and if possible other apps) before unlocking the bootloader. (Which would wipe my phone).

Thanks a lot in advance.
[Sony Cross-Device General] zxz0O0:
You can backup every partition manually with dd for example or tar. Just use the temp root shell to do it. I don't know if there is a root app which does it for you.
[Sony Cross-Device General] CloudOneX:
I have the .253 firmware. Is there a way to root with dmr codes?
[Sony Cross-Device General] Klaus N.:
Maybe this thread will make it clear: http://xdaforums.com/showthread.php?p=66252713
[Sony Cross-Device General] rajaganesan7:
Can i use this tool for Xperia Z3 Plus Dual E6533 32.2.A.0.253 Firmware
[Sony Cross-Device General] thE_29:
Any chances that a new xploit of stagefrith/quad-root could be used for newer firmwares (so no need anymore to flash back)?
[Sony Cross-Device General] Wess.a:
i have a question, the process was successful and its about 2 mg. is there any chance that this backup failed in any way or corrupted?? ( i did it twice and got the same result )
[Sony Cross-Device General] decayed.cell:
Can't seem to get this to work on Xperia Z5. Tried doing mount -o remount,suid /dev/block/bootdevice/by-name/userdata /data but I get operation not permitted.
[Sony Cross-Device General] klausstoertebeker:
Support request for Sony Xperia Z3 Tablet compact (SGP621)

Hello zxz0O0!

I used your tool for backing up the TA-partition from my Sony Xperia Z5 compact (firmware version E5823_32.0.A.6.200_R4B_customized_GE) and it worked perfect. Excellent work :good:

And now I'd like to backup my TA-partition of my Sony Xperia Z3 Tabelt compact (model number SGP621). Therefore I downgraded it to firmware SGP621_23.1.A.0.200_customized_FR which contains the exploit your tool uses. But your tool reports an error when trying to backup the TA-partition.

I read somewhere in the thread that if I want your tool to support my device and it's not listed in the "supported device" list, you'll need the Lollipop kernel for analysis.

How can I send you this? Via eMail? Or attached file to another reply?

I'm sorry that I can't provide you with the exact firmware versions in this post, but I'm writing from office and my tabled is at home.

Regards from Dresden

"Klaus"
[Sony Cross-Device General] uripiruli:
Hi !

I used iovyroot to backup my TA partition. It made a TA12102015.img. This file has 2 mb. Is it correct?? I read many time ago that TA image was about 500 Kb.... Is it wrong my TA backup???

Thanks
[Sony Cross-Device General] :
Stupid question but, how do I use this?
[Sony Cross-Device General] grinna:
already possible root in some versions of this marshmallow 253 or 305?
[Sony Cross-Device General] Klaus N.:
No, only the lp-versions mentioned in the op.

Particularly people with new devices, which come with mm, have to cross their fingers that "dirty COW" does the trick for - at least temporally - getting root to make a ta-backup.

[MENTION=3975929]zxz0O0[/MENTION]

If you'll find the time, it'd be awesome to take a look into it. So we could do a ta-backup, e.g. for Xperia XZ etc.

Thanks in advance!
[Sony Cross-Device General] zxz0O0:
dirtycow lets you write to files with read only permission. I was able to escalate to system privileges with it. An additional kernel exploit would be required to get root though
[Sony Cross-Device General] Klaus N.:
Ok, thank you very much for explanation and your quick reply! So let's hope that someone finds the needed kernel exploit.
[Sony Cross-Device General] theduke7:
I'm getting error: protocol fault (no status)

error: device not found

error: device not found

error: device not found

I'm on E6833 (32.0.A.6.170)

edit/ big thanks to [MENTION=1300524]Superblond[/MENTION] the solution on page 20 worked.
[Sony Cross-Device General] MysticEnforcer:
No chance with rowhammer?
[Sony Cross-Device General] serajr:
Maybe Drammer (and some source of it)!
[Sony Cross-Device General] cocagenda2:
hey guys can someone help me...i cant restore TAimage it always gives me that "aborted" message...i downgraded to LP fw, i was on MM with unlocked bootloader and rooted and now i want it to be stock but i cant do it.a would apriciate any help THANKS.really dont know what im doing wrong.
[Sony Cross-Device General] nabeelrazanaqvi:
On the lollipop unlock the boot loader first then with iovyroot running first use tabackup command and when it gives you success message instantly use tarestore TA-XXX XXX.IMG

Like this you will be able to inject ta partition
[Sony Cross-Device General] cocagenda2:
do i have to unlock bootloader again when i install LP fw? cuz now im on MM fw and unlocked bootloader(i also backed up TA partition at first time)...ill isntall LP fw again and try few more ways...thanks for the info ill let u know if it worked. ;)
[Sony Cross-Device General] Klaus N.:
No, if you flash another fw (e.g. downgrade to lp), the bootloader is in the same state as before flashing.
[Sony Cross-Device General] cocagenda2:
thanks.... u cleared my mind but i somehow already knew that but u did add a cherry on top of the cake :) thanks again
[Sony Cross-Device General] thE_29:
Any chances the Dirty Cow root Exploit works for z5c @ android 6.0?
[Sony Cross-Device General] Klaus N.:
Why? :confused: You only have to downgrade your device to 32.0.A.6.200 fw with FlashTool and follow the instructions in the op...
[Sony Cross-Device General] Nayibmc:
I could restore the TA on the stock .152 firmware. Can I upgrade to MM via OTA or Flashtool and keep the bootloader locked?
[Sony Cross-Device General] Klaus N.:
If you've really restored your TA-backup, then the bootloader is relocked again and your device has lost root access, indeed. And yes, then your device's behaviour is like a new one out of the box, and you can upgrade to MM via ota or FlashTool.
[Sony Cross-Device General] Pouya Rezaei:
Hi guys

This script is used for xperia x?

If not,this script maybe update for support xperia x?
[Sony Cross-Device General] aidy.lucas:
Nope as it needs a lollipop kernel dated before dec15 for the xploit to work. There's still currently no way to back up the ta keys on any of the x range devices unfortunately though I think there is something slightly different in the pipeline if it works that is...
[Sony Cross-Device General] Klaus N.:
My nephew has made a TA-backup.zip of his Xperia Z1C device, using the Backup TA v9.11 tool by DevShaft.

So my question is, is it possible to convert that TA-backup.zip into a DK.ftf, so that it is possible to flash it with FlashTool (my intention is to repack the stock kernel with the tool of tobias.waldvogel).

Or do I have to relock the bootloader first by using the Backup TA v9.11 tool, restore the backup, and then using iovyroot?

Thanks in advance!
[Sony Cross-Device General] zxz0O0:
Just unpack the TA-backup.zip, there should be an TA.img file inside. Use this file to generate DK.ftf
[Sony Cross-Device General] Klaus N.:
Thank you very much for your reply - it worked :good:
[Sony Cross-Device General] whalesplaho:
i got dis error while backing up, my phone den reboot.... adb devices shows my device!

please help... usb debugging on!

iovyroot by zxz0O0
poc by idler1984

[+] Changing fd limit from 1024 to 4096
[+] Changing process priority to highest
[+] Getting pipes
[+] Allocating memory
[+] Installing JOP
[+] Patching address 0xffffffc001950630
[+] Start map/unmap thread
[+] Start write thread
[+] Spraying kernel heap
[+] Start read thread
[+] Done
[+] Patching addr_limit
[+] Patching address 0xffffffbfad4e4008
[+] Start map/unmap thread
[+] Start write thread
[+] Spraying kernel heap
[+] Start read thread
[+] Done
[+] Removing JOP
error: protocol fault (no status)
error: device not found
error: device not found
error: device not found
Press any key to continue . . .
[Sony Cross-Device General] whalesplaho:
after so many restart & trial.... it works!

backup successful!
[Sony Cross-Device General] Baradoura:
Hi , i want to root my device and backup my ta partition , but your link is dead can you reupload it please ?

Thanks in advance
[Sony Cross-Device General] kevin.kvik:
I´m sorry, I can´t download last iovyroot. My browser (Opera, Edge) say: "Sorry, but this file is infected with a virus.". I would like to ask you can anyone upload last version iovyroot to another server. Thank you very much.
[Sony Cross-Device General] Baradoura:
For thoses who encounter troubles to download Iovyroot here's the mirror link to iovyroot v.03 provided by josephnero on this thread :

http://xdaforums.com/xperia-z5/help/iovyroot-v0-3-v0-4-please-t3526743

It works like a charm , Tested and Approved by myself here's the direct link:

https://www.mediafire.com/?x817w0mu7m7ulb9
[Sony Cross-Device General] kevin.kvik:
Thank you very much, but utility don´t support my phone (Sony Xperia Z5 E6653) :(

Screenshot
[Sony Cross-Device General] Baradoura:
It did that to me too, But then i try a couple of time and it work pretty fine.

Just retry and if it dont work use version 0.4 here (thanks to sxtester)

xdaforums.com/xperia-z5/help/iovyroot-v0-3-v0-4-please-t3526743
[Sony Cross-Device General] kevin.kvik:
Thank you very much, finnaly I used TA Backup v2 to create *.img DRM backup. Would I ask you after unlock bootloader and root I flash this *img in Flashtool?
[Sony Cross-Device General] Baradoura:
Actually bro i don't know at all

Because when I rooted my phone I checked on services info it was Saying Bootloader Unlocked YES, So I assumed that my bootloader was unlock, and root granted.

But after a restart for some reason I had ALL of my function related to DRM, I kept my root and on services info it says Bootloader Unlock Allowed: Yes

Just like my bootloader wasn't unlocked and my TA still here
[Sony Cross-Device General] munjeni:
Solution for all unlocked devices, enjoy!

https://xdaforums.com/showpost.php?p=70330773&postcount=1575
[Sony Cross-Device General] rubiicon59:
[MENTION=4120742]munjeni[/MENTION]

I've downloaded the linked zip several times but it's empty.......
[Sony Cross-Device General] munjeni:
http://munjeni.myiphost.com/busybox.rar
[Sony Cross-Device General] scandiun:
Ok, but can I restore the phone to factory exactly like I bought it? I mean, that if I send it to repair Sony will not know that was ever rooted. This is very important.

My phone is the Xperia Z5 Compact E5823 compilation 32.2.A.5.11
[Sony Cross-Device General] scandiun:
Ok I think it's possible:

http://4pda.ru/forum/index.php?showtopic=713830&st=700#entry55863131
[Sony Cross-Device General] arshia.sunboy:
hi.I cant restore my backup

same android and original android

Error: Please specify a TA image to restore

Press any key to continue . .
[Sony Cross-Device General] Baradoura:
Wich version of iovyroot are you actually using ?
[Sony Cross-Device General] Nyuubi:
I'm really new to rooting a Z5. Is there someone who can give me a step-by-step as to how to use this?
[Sony Cross-Device General] Nyuubi:
Can you please tell me step-by-step how to use this? I don't even understand how to obtain temp root!!!

When I try it says:

error: device not found

error: device not found

error: device not found

error: device not found

error: device not found

error: device not found

error: device not found

Press any key to continue . . .

Edit: Forget it, I got it to work !
[Sony Cross-Device General] mobiware:
Hi there,

Awesome thread!!!

I backed up my TA keys, unlocked the bootloader and flashed the E6683_Customized MY_1298-9654_32.3.A.0.376_R1D firmware. I flashed the FTF removing the "fwinfo.xml" and excluding the TA files, and everything worked fine.

I have a few noob questions, if you don't mind:

1. Does the "tarestore.bat" process create the FTF that I can use to restore the TA partition?

2. Would munjeni's proof of concept that restores the TA partition work in a similar way?

3. Do I need to flash a patched kernel first, which will give me TWRP?

4. If so, can we use Tobias Waldvogel's method, or if not can you elaborate on how we can do it?

5. If I use TWRP, can I flash "superuser" instead of "SuperSU" which has a lot of battery drain?

6. Can we remove "DM-Verity" and "Sony RIC" for sure?

7. Is access to the external microSD card missing?

Thank you so much in advance,

MW
[Sony Cross-Device General] Nyuubi:
Answers:

1. Nope! tarestore.bat can only be used when you're on lollipop fw. If you want to create a flashablel ftf file use https://xdaforums.com/xperia-z5/development/root-automatic-repack-stock-kernel-dm-t3301605

2. I don't know about 'similar' but it will trick your phone into thinking that its bootloader is locked and still has its key.

3. Answer in https://xdaforums.com/xperia-z5/development/root-automatic-repack-stock-kernel-dm-t3301605

4. Use the tool in https://xdaforums.com/xperia-z5/development/root-automatic-repack-stock-kernel-dm-t3301605

5. It's possible with https://xdaforums.com/xperia-z5/development/root-automatic-repack-stock-kernel-dm-t3301605

6. Yes we can!

7. I don't clearly understand this one. If you want access to your files in external sd then, yes you can.

---------- Post added at 11:04 AM ---------- Previous post was at 11:02 AM ----------

Answers:

1. Nope! tarestore.bat can only be used when you're on lollipop fw. If you want to create a flashablel ftf file use this tool

2. I don't know about 'similar' but it will trick your phone into thinking that its bootloader is locked and still has its key.

3. Answer in here

4. Use the tool in here

5. It's possible with this

6. Yes we can!

7. I don't clearly understand this one. If you want access to your files in external sd then, yes you can.
[Sony Cross-Device General] mobiware:
Thanks for your answers.

I noticed in post #272 above that you are new to this also, so it would be nice to get some answers from someone that knows about rooting. You quoted Tobias Waldvogel's work; I am aware of that thread and I have posted in that as well, if you look at the end.
[Sony Cross-Device General] sercangogercin:
Downgraded to lollipop and used tarestore.bat. It says succesful but still have errors on service menu/security. I tried same ta backup with proof of concept and it works. Why cant I restore My ta backup for full locked state? Am using E6633 XZ5 Dual

EDIT: Tried with iovyroot v0.2 worked like a charm.:good: Idk why but v0.4 didn't work . In v0.4 it said succesful but my bootloader didnt get locked. in v0.2 it locked my bootloader and without any reset, I checked my security infos and keys were back to OK :).

Try also with v0.2

v0.2 attached below :victory:
[Sony Cross-Device General] achmthidyt:
guys help

no error with (adb device)

but when i type ta backup

Error: Device not supported

rm: /data/local/tmp/tabackup/TA-*.img: No such file or directory

Press any key to continue . . .

im on marshmallow xperia z3+
[Sony Cross-Device General] Nyuubi:
You need to be on lollipop for ta backup to work! If you wanna restore your ta partition on marshmallow or nougat then use tools like poc tool or rootkernel.
[Sony Cross-Device General] Raihan14z:
After backup TA must flash kernel bro?
[Sony Cross-Device General] dadreamer:
Hi!

I tried to check this tool to see how it goes on my device (which's not on the list but anyway). But I receive this error when launching tabackup.bat:

C:\adb>tabackup.bat
/system/bin/sh: /data/local/tmp/iovyroot: not executable: magic 7F45
rm failed for /data/local/tmp/tabackup/TA-*.img, No such file or directory

My dev's arch is ARMv7 (armv7l, armeabi-v7a). Is this iovyroot for arm64 or x86 only? Could anyone recompile, please?..

upd: I've got it compiled for armeabi from the sources.
[Sony Cross-Device General] Zero-21XX:
first relock or first restore backupTA?
[Sony Cross-Device General] Klaus N.:
When restoring your ta backup, the bootloader will be relocked automatically.

Btw, that question has already be answered in the 2nd post ;)
[Sony Cross-Device General] dadreamer:
zxz0O0

Please, could you help me with the rooting of my device? It has PXN enabled even when it's on 32-bit arch. I want to defeat that with some JOP/ROP chain approach. Here you wrote that it's not so hard to do on 32-bits. Is that possible without pulling boot.img (cause no root and no public firmwares)?..
[Sony Cross-Device General] 4RM4N1:
How to restore? When I doubleclick the .bat it says Error: Please specify a TA image to restore

when I drag the .img into the .bat the window appears and then close quickly...