yashsingh1/xdaforums huggingface dataset:
[Nokia Lumia 800] ultrashot:
CE Remote Tools are included in official WM6 SDK (or even to VS2008 - don't remember)... They won't work unless you have my WmdcLauncher installed on the phone.
[Nokia Lumia 800] surya467:
http://go.microsoft.com/fwlink/?LinkId=201927

WPDT offline installer

http://download.microsoft.com/download/0/2/0/02013E44-FC92-477F-90F5-A50351480497/ZunePackage.exe

Zune offline installer if anyone missed it.

http://www.microsoft.com/en-us/download/details.aspx?id=13276

VS2008 SP1
[Nokia Lumia 800] biktor_gj:
About QPST:

Unlocked bootloader-> In osbl mode, QPST detects it and lets use eMMC download, and create RAM Dumps. Quite useful if you ask me ;)

While Windows Phone is running: Those 4 ports you can get by setting usb mode to Serial on Diagnostics App (1.0.0) or via registry edit on a full unlocked rom, enables Qalcomm diagnostics port. The only port I've been able to use is the modem port. Every other port, no matter what, wouldn't reply. I think that's due to debugging disabled in the AMSS firmware.

Tried quite a bunch of OSes and drivers:

Windows 7 x64

Windows 7 x86

Windows 8 x86

Windows XP x86

Windows Server 2003 x86

Linux (by force-loading usbserial) x86/amd64

Some of them would deal better with the drivers than others, but in every case, only modem would respond to any command, and QPST would only find the modem port, and couldn't switch it to diagnostics mode.

@g-gabber: Seems like you did invest quite a few hours with the OSBL. Even if we have the public key, we can do nothing more than decypher the signatures/crcs of the .esco files. Do you see any other attack point from that side, besides asking Nokia what the private key is ;) ?

On another post you said there was some debugging available through serial/usb, but it needed authentication... any ideas on how to put that to work? even if it asks for some kind of password, or some magic hex, it might be possible to bruteforce it... Next to Nokia DLOAD I also found a string called "Nokia Configuration", does it have anything to do with that?
[Nokia Lumia 800] ultrashot:
VS2010 + WP Developer Tools don't include CE Remote Tools. VS2008 does.
[Nokia Lumia 800] _Madmatt:
I can provide you VS2010 Pro if that's okay...
[Nokia Lumia 800] Briefcase:
Indeed, I suggest we first mimic the setup as in the slides (VS2008 + CE Remote tools, qualcomm loader). Although i'm not sure if qualcomm loader is required (lets hope not!).
[Nokia Lumia 800] ikinkyxd:
I tried VS2008 with the remote tools and first i tried without zune and then it refused to open, now i tried with zune up and synced with my phone, and nothing happens .. with locked bootloader
[Nokia Lumia 800] Briefcase:
Good job! Maybe the phone needs to be in a special bootloader mode? That was in the slides, will look it up. Don't know if Nokia DLOAD has these same modes, for sure it lacks Mass Storage Mode (doh). Is your phone in serial or in Zune mode according to Diagnostics app?

Edit: Modes I mentioned @ slide 17 at http://www.docin.com/p-323426686.html
[Nokia Lumia 800] ikinkyxd:
Thanks mate

i tried in DLOAD mode, but my phone is in zune mode because my diagnostic cant change that, my phone is 12072 :/

maybe i could try some of the others..

i tried to get into SLDR mode, but then i came to the "phone to pc" image dont know which mode that is.

but it still refused it.

and cant enter Big boss mode :b
[Nokia Lumia 800] Briefcase:
11500 for sure had Diagnostics with the option to switch between serial and zune. Are you having any active firewall enabled on your pc? This could also be in the way, see this: http://stackoverflow.com/questions/...ecause-the-target-machine-actively-refused-it
[Nokia Lumia 800] ikinkyxd:
Do you think if i downgraded it would go through with serial connection ?

well i tried to remove my windows firewall and AVG, and still same sign's .

i could downgrade but i doubt it would work..
[Nokia Lumia 800] biktor_gj:
@Everyone waiting for the 12140 Full unlock:

It does not work because it requires latest AMSS & ADSP firmware. I didn't understand why it wouldn't boot, that's why it took me so long. If anyone knows how to un-encode those firmwares please drop me a line (either here or PM, don't care)

That, or if anyone knows a way to extract it from the phone...

I tried 12070/11500/11414/11412 amss & dsp. None will work with it.

I can port the drivers from the older version and mantain the XIP, but I don't think that's a great approach. Tomorrow I'll try to post a clean full unlocked rom based on 12070. If anyone wants some packages included, or can tell me a simple way to include XAPs to be autoinstalled on first boot, please tell me how to do it since I cannot find any instructions anywhere (I'd like to include the alternate market app, HeathCliff's root tools etc)
[Nokia Lumia 800] Briefcase:
One way to find out. I have no idea, it sounds like a setting that could have influence on the process. It would be better if we first find someone who could try with a unlocked (qualcomm) bootloader before you proceed to flash 11500 for an older diagnostics version. If qualcomm also does not work we are missing something, or the slides are produced with an even older bootloader or something.
[Nokia Lumia 800] g-gabber:
Till now I managed to find 2 possible bugs that MAYBE!!! allow to run own code, first requier debugging authentication :(

The second is ... under reversing :)

In few post above you mentioned that nokia released 3 different versions of nokia_osbl.mbn, maybe you can send me them, and I can compare them.

The usb debuggin is based on ECC authentication. ECC seems to be very strong. Maybe some one knows a possible implementation errors?

BR g
[Nokia Lumia 800] ChrisKringel:
Thanks for your offer. I already have VS2010 from my school. Besides, I want to setup a System comparable to the one mentioned in the slides.

Also, there seems to be a Special OEM Version of Visual Studio. You can Google for the Name of the Tools stated in the presentation, and you'll find AppHub threads stating that These Softwares cannot be discussed publicly.
[Nokia Lumia 800] rescbr:
You might want to check this: http://www.microsoft.com/windowsembedded/en-us/downloads/download-windows-embedded-compact-ce.aspx

It is not a special version of Visual Studio, it is the Windows CE/Phone Platform Builder add-in + OEM BSP. The public software we have is the CE trial platform builder + remote tools.
[Nokia Lumia 800] luckydog98:
It helps the ones with unlocked bootloaders flash stock roms. The qpst program is a little more difficult to use and NSS makes it easy.
[Nokia Lumia 800] memnoch2099:
I have a Lumia 610 and Im hoping that we get the Interop for our phones as well.
[Nokia Lumia 800] biktor_gj:
Zip attached :)

Versions:

RM801_11w50_1_prod_generic_nokia_osbl

Dates:

Certificate: December 15, 2011

OSBL file: December 9, 2011

OSBL compilation date: Dec 9 2011, 11:39:44

RM801_12w07_prod_generic_nokia_osbl

Dates:

Certificate: February 17, 2012

OSBL: February 17, 2012

OSBL Compilation date: Feb 17 2012, 10:35:39.

RM801_12w14_prod_generic_nokia_osbl

Dates:

Certificate: April 6, 2012

OSBL file: April 6, 2012

OSBL Compilation date: Apr 6 2012, 12:46:21.

Hope it helps!
[Nokia Lumia 800] ikinkyxd:
anyone tried the Phoenix software ?

Phoenix Service Software

should be similar to NSC

even with Serial connection instead of Zune, it still won work.
[Nokia Lumia 800] biktor_gj:
Doesnt work with Windows phone...It uses QPST :)

Did anyone manage to get NV item manager working in qpst, or able to get the radio loader to show up?
[Nokia Lumia 800] ultrashot:
If you still have my unlock and xapdeployer (native version), then you should just make a package with XAP inside and add following registry tweak:

[HKEY_LOCAL_MACHINE\Software\OEM\FirstBoot\InstallApps]
"\\Windows\\XapName.xap"=""
[Nokia Lumia 800] ikinkyxd:
i could get NV Item Manager to show up, but still cant get my Lumia to connect to QPST. so cant do much with it, as it wont read information from my phone :/
[Nokia Lumia 800] biktor_gj:
I have uploaded the first image to Mediafire (as always)

Based on 12070 again, without foursquare, tunein radio or Nokia survey.

It has ultrashot's full unlock packages (again, kudos to you ;))

Tomorrow I'll try to pack all the XAP's inside the rom and post a new one.

NOTICE

This time you'll have to write TWO files:

sdb3.rar: Flash it to PARTITION #3. It contains 12070's amss & adsp. Not absolutely required but if you have an older version this should give you better battery life.

http://www.mediafire.com/?kwjladlgvq81rha

OS-NEW:

As always, flash it to PARTITION #9.

Part1: http://www.mediafire.com/?21by2oj7acnhkhw

Part2: http://www.mediafire.com/?wkeduvp9l4199qh

Part3: http://www.mediafire.com/?cnbkms40dy4y06z

Part4: http://www.mediafire.com/?rabunpmnaqclq3o

Complete Mediafire folder access: http://www.mediafire.com/?uo2dqcl34b9cy

Enjoy!

PS: need to find a way to decrypt those amss & adsp esco files. Any help would be appreciated ;)
[Nokia Lumia 800] tboy2000:
is this of use to anyone?

http://www.mygsmindia.com/vbb/mxkey-nokia-flasher-unlocker/83426-how-flash-nokia-wp-based-lumia.html
[Nokia Lumia 800] cdbase:
No,we already can do all this stuff without mx key
[Nokia Lumia 800] biktor_gj:
Hi,

First thank you (again) ultrashot, it did the trick :)

Fully unlocked 12070 with apps is being uploaded to mediafire right now.

Files are called FU_12070_with_apps.part*.rar

Folder access: http://www.mediafire.com/?uo2dqcl34b9cy

Part1: http://www.mediafire.com/?8gnqm418v32im3e

Part2: http://www.mediafire.com/?bgtg2t5infrnua1

Part3: http://www.mediafire.com/?l0sl5hbr0v9gfi1

Part4: http://www.mediafire.com/?emt2dfswdhn0z0w

It's the same build as before, but with the following apps included:

DS Supertool

File Deployer

Metro Theme

WebServer

WinTT

WM Device Center

WP7 Root Tool

It seems you cannot build an image larger than 400Mb or the phone will refuse to boot. That's why I haven't included the homebrew market and other stuff.
[Nokia Lumia 800] GeBoe:
Hey guys. I discovered that instead of DD in Linux, you can also flash your lumia using NSSPro v0.48! http://www.genieprojects.co.uk/files/NssPro_0.48.zip

And there are also some options that indicate the activation of NAND access on a Lumia 800!!!!!!! I dont have a Lumia 800 DLOAD so i can test, but someone should.

---------- Post added at 06:07 PM ---------- Previous post was at 05:59 PM ----------

People, now i think i've ACTUALLY FOUND A WAY TO GET RID OF DLOAD ON LUMIA!!!! AND I'M KINDA REALLY SURE ITLL WORK!!! i just need a few testpeople.
[Nokia Lumia 800] ChrisKringel:
Feel free to PM me instructions
[Nokia Lumia 800] _Madmatt:
Risk of bricking? I'd like to test but I don't want to brick it (have no backup phone). You can PM your instructions, I'll see what I can do.
[Nokia Lumia 800] biktor_gj:
I really wished you had... :( (sorry to dissappoint)

This actually downloads the RM803 (lumia 710) qualcomm loader, found by someone over the general forum, and flashes it on top of original OSBL... in a Lumia 710... if you pay an anual subscription to NSS.

They have implemented NB firmware flashing for Qualcomm based loaders from the information on this thread, and added some more options... you would still need a signed loader to 'downgrade' nokia Dload on a lumia 800/900...

EDIT: To be fair, it's not required to pay a subscription. If you don't want to pay, you can download the file from any other place and put it in the directory yourself.

Open file...Cancelled.
Preparing update...Missing loader!
Please use the 'Download' button from the Options Tab or put manually
the 'RM803_12w07_prod_generic_nokia_osbl.esco' in 'special//wp7//' directory
Preparing download...Error1!
This function require Annual Subscription.----------------------------------------------------
Looking for NAND disk...Not found.
Things to check:
1. Is the phone connected?(Plug to the USB)
2. Is it in the correct mode?(Try to switch to OSBL mode)
3. Have you installed the Qcom loader ?(Use the Install button)
Preparing update...Missing loader!
Please use the 'Download' button from the Options Tab or put manually
the 'RM803_12w07_prod_generic_nokia_osbl.esco' in 'special//wp7//' directory
[Nokia Lumia 800] load"":
Can't we just brute the cert? So we can sign own bootldrs
[Nokia Lumia 800] Briefcase:
By the time we succeed with that (by using brute force, not any (for now unknown) weakness in the algorithm) we may well be playing with Windows phone 75000000000.0 Infinite ;-).
[Nokia Lumia 800] Bph&co:
Hi,

No need to pay, it was posted here, including the file as attachment. The Download

button in the soft is disabled, just can't provide the bandwidth for thousands of users.

I made those features originally for my experiments, but seen many people killing

phones with linux, so decided it might be good to release to the public. It costed

me few hours work and one brand new phone dead, but even if it was useful to

one guy - it is still worth it.

Off course - all thanks to your great find!

BR
[Nokia Lumia 800] EmaTheLegend:
Give me the instructions... I've a Lumia 800 DLOAD ;)
[Nokia Lumia 800] surya467:
i tried it mate...did not work.

we are back to ground zero.
[Nokia Lumia 800] crnkoj:
Yeh i have a water damaged lumia 800 with dload now, if you give the instructions i can try it out (all but speakers and mics work on it, so it wont really hurt me if it gets bricked).

Edit: eh just saw the above post after finished writing mine :/
[Nokia Lumia 800] biktor_gj:
Hi

Attached the files involved in full flash update through MTPz. If we cannot write the bootloader from the OSBL maybe we can find a hole in Microsoft's firmware update implementation. These files can actually write to the bootloader area, so might be worth trying...
[Nokia Lumia 800] surya467:
give me instructions...
[Nokia Lumia 800] EmaTheLegend:
I can't see the files into the folder once extracted :confused:
[Nokia Lumia 800] surya467:
thats beacuse they are system files.

You need to goto folder options and remove tick from "Hide protected operating system file (Recommended)"
[Nokia Lumia 800] g-gabber:
I have decrypted those files from 1750.0805.8773.12140.

Here you go: http://depositfiles.com/files/9dgfuxena

Ps. would be good if you could also make a custom rom for Nokia 710 RM803
[Nokia Lumia 800] trenbeth:
When trying to analyse these files with IDA Pro, it asks for the corresponding coredll.dll. Can you also attach it?

For IDA Pro (Evalutation), which supports ARM, see

http://www.hex-rays.com/products/ida/support/download_demo.shtml
[Nokia Lumia 800] EmaTheLegend:
Doesn't work... files are invisible :( I'll try with command prompt
[Nokia Lumia 800] surya467:
check this Screenshot, this is how my folder options are set.
[Nokia Lumia 800] Jason_Forever:
Good jobs!I wanna know how is the progress in unlocked bootloader?
[Nokia Lumia 800] rwmanos:
no progress yet. Just some ideas here and there. And please stop asking here there is a QA thread about that .
[Nokia Lumia 800] zjw831:
:D I have a tools for FFU from DVP WP7 ROM tools.

BUT i don't try update to nokia 800!
[Nokia Lumia 800] surya467:
lend the tool mate..
[Nokia Lumia 800] zjw831:
I don't use the tool,please exercise caution.
[Nokia Lumia 800] hiemanshu:
I want to help with this too. I have a 800 provided to me by Nokia, and would love to help the cause. Those 800s came with Nokia DLOAD and I am waiting for an interop unlock (or a possibility to run a different OS on the device).
[Nokia Lumia 800] surya467:
well i dont know how much does a phone "provided from nokia" or a phone "bought from nokia" with a DLOAD can make much a difference, but 800 with a DLOAD is right now stuck, with no interop nor any access for full unlock.
[Nokia Lumia 800] ikinkyxd:
If there were a qualcomm bootloader laying around for the lumia 800 then we can flash it with NSS, i just tried with another DLOAD Bootloader. so if we able to get a qualcomm it would be possible :b
[Nokia Lumia 800] tjramage:
We established that fact a long time ago...
[Nokia Lumia 800] ikinkyxd:
well..it was said earlier in the thread that it wasnt possible with nss and the lumia 800.
[Nokia Lumia 800] cdbase:
I Wonder if anyone tried bruteforce the cert ???

Sent from my Lumia 800 using Board Express
[Nokia Lumia 800] suzughia:
Bruteforce the cert is a no go; Nokia didn't made the mistakes made by Sony or Microsoft with cryptographic key, so it will be a long way, years of trying... The purpose was already discussed.
[Nokia Lumia 800] beka909:
anyone have idea which is possible ? to reach ?
[Nokia Lumia 800] jerrino77:
**deleted by me**
[Nokia Lumia 800] g-gabber:
Why do you post this in DEV thread????

Please delete your post, use search button next time.
[Nokia Lumia 800] ChrisKringel:
Did you notice the title of this post? It states "DEV ONLY". Everytime I come to this thread for new input and approaches on unlocking I have to dig through tons of questions that haven't got anything to do with DEVELOPMENT. There is a post (in fact there are multiple posts) in the general section talking about unlocking the 710. Please post in one of them.

Did someone get this thing working with his Lumia? I only get errors. I guess its device specific.
[Nokia Lumia 800] jerrino77:
ok, sorry, don't have a cow guys....
[Nokia Lumia 800] hiemanshu:
Well you have to put it into FTM mode and such to get it working, did you do that?

SwitchMode.exe seems to help getting the connection set. I am still trying to get all this working as of now.
[Nokia Lumia 800] ChrisKringel:
I switched to FTM with NSS (so the device shows the factory) but nothing happened with the provided tools. Maybe I'm doing it wrong...
[Nokia Lumia 800] biktor_gj:
To be fair I didnt try, but if you want to flash a ffu you dont have to put the phone in factory test mode, you'll have to put it in ULDR/SLDR mode (hold power+camera,then after long vibra keep holding camera until it shows a pc and the phone on the lcd)
[Nokia Lumia 800] biktor_gj:
Still analyzing all the ffu process, I found differences between the CAB file handlers across firmware versions. I think it's what handles the package files (.cab.pkg) and might also handle the hashblobs inside the ffus (what stores the signatures on the rest of the ffu. Attached CABAPI.dll from version 11412 and 12070. Let's see if anyone can find something in here...

Btw, another cert inside this file...
[Nokia Lumia 800] inket:
I have a few questions.

If I can get Nokia Network Setup to install on my Lumia, would heathcliff74's interop unlock still work ?

Also, if I understand correctly, those who installed Nokia Network Setup before it was removed can still reinstall it, right ? (I noticed it's still on Microsoft's servers)

Assuming both answers are positive, I'm thinking someone who can reinstall Network Setup sniffs the connection between Microsoft's servers and his Lumia then provide us the packets so we can emulate the server-side which basically tells our Lumias to install an interopservices-enabled app.

Maybe it's a long shot, I don't know.
[Nokia Lumia 800] surya467:
ok , well a friend of mine and myself tried doing this with the Heatcliff interop for nokia, seems we cannot deploy an Network setup app to the firmware and cannot find any firmware which has it pre built in.

The only reason we need a pre inbuilt one is that it can be a an older version.

In the newer firmware the network setup is not inside the firmware, and has to be installed form the marketplace.

So if anyone can tip us with a firmware like 11412,11414,11451 or even 11501, with a network setup pre installed(old version) then maybe an interop could be possible.

Edit : Attaching the Network Setup 1.0.0.0 and heathcliff interop for nokia.

Edit : Attached Nwtwork setup 1.0.0.0 which deploys to device but gives an error wen its executed : "There is a problem with the system. Please reboot your phone"

Edit : After i deploy this app i come to know its a 1.0.6.0 network setup.

I tried this http://xdaforums.com/showpost.php?p=19673194&postcount=509
[Nokia Lumia 800] iawa:
Not sure if I can be of help here as have been following thread (although just about keeping up) and have been waiting for some movement on Nokia DLOAD devices.

I have the Network Setup App (got it from Marketplace) and is version 1.6.3.0 and works as it did when I installed.

My device details are;

Nokia Lumia 800 (DLOAD bootloader)

OS 7.10.8107.79

Firmware rev 1600.2487.8107.12070

HW rev 112.1402.2.4

Radio SW 1.6.00.24

Radio HW 8255

Bootloader version 7.35.0.0

Chip SOC version 0.74.2.1

Not sure if you need all that or if you need more. I am kinda new here and only been using this device for a week or so, please be gentle. :)
[Nokia Lumia 800] surya467:
Was the network setup app already in your firmware when u bought it and turned it ON or did u have to download it from the maretplace?

If u downloaded from marketplace then it is of no use..

thanks for letting know :)
[Nokia Lumia 800] mariosraptor:
I think it was on mine preinstalled but cannot remember cause deleted what I did not wanted the second I bought it. Although it came with version 12070 from what I can tell Cosmote group Romania.
[Nokia Lumia 800] *Detection*:
in the OP it says 710 "No full unlock yet"

I thought it had been full unlocked for a while ?
[Nokia Lumia 800] surya467:
thread is not updated.

it is full unlocked!
[Nokia Lumia 800] inket:
1.6.3.0 doesn't allow interop unlock ? I guess there's no way to install the old version then...

But I'm interested in your idea. Are you sure there's firmwares that have Network Setup built-in ?

If there are, they must be unbranded old firmwares because Network Setup is only useful for unlocked Lumias (which are unbranded). My Vodafone Spain Lumia (came with 11414) doesn't have it.
[Nokia Lumia 800] surya467:
i hav attached a network setup (working) that can be deployed to the device but it does not work..as i hav mentioned it gives an error...can u deply it to ur device and check?

i hav a developer unlocked device..so i can deploy apps.

edit : also it would be awesoms if sumone can help with any firware that has network setup.
[Nokia Lumia 800] inket:
I'm student-developer unlocked too. The reason why that .xap can be deployed and ran is because it doesn't have the interopservices capability in the AppManifest. And obviously the app can't function without that capability that's why it shows an error.
[Nokia Lumia 800] _Madmatt:
Unzip the XAP file, edit the AppManifest and add the capability, zip it again, change extension to XAP and you're done. But I'm afraid it still won't work...
[Nokia Lumia 800] inket:
Duh. Of course it won't work. You can't deploy apps with interop capability...
[Nokia Lumia 800] biktor_gj:
Okay, Nokia connection setup is a no go. How about STK? Sim Application Toolkit does use Interop Services, and it's bundled in 11412 ROM, and probablt all the rest too... may be worth checking it!

EDIT: Well, there are a few apps that use interop that come bundled with the phone:

Bluetooth contact transfer

On Device Diagnostics tool (1.0.0)

Nokia Music (though not too sure, it has the DLL inside, but doesn't say anything in WMAppManifest)

And some nokia app that seems to run when you start the phone for the first time (that app that asks you to accept Nokia's license terms? that (if you're looking for the xap, it's called 2ce4cccc05a24a849e82467892a47f1b.xap)
[Nokia Lumia 800] surya467:
nice idea..worth a try..:D

and is there a way we could sign the 1.0.0.0 network setup, which is in the post i have made and deploy it to the device?
[Nokia Lumia 800] inket:
"SIM applications" in Settings you mean ? I have it. If it does really use interopservices, how can we take advantage of that ?
[Nokia Lumia 800] rescbr:
Probably by using a custom SIM card with some kind of software which exploits the STK. Also, STK should run with pretty high privileges, as it has to call the radio interface.