yashsingh1/xdaforums huggingface dataset:
[Windows Phone 8 Development and Hacking] error0x0000034:
Samsung Bootstrap uses some Samsung-specific DLLs as far as I know. This won't help you, tried this already on my Huawei Ascend W1. This won't work on your Lumia either I think. But its worth a try of course.

You'll have to edit the registry key I mentioned before to be able to sideload EnableAllSideloading.xap. You need to load the SOFTWARE file from Windows/System32/config again into your registry and edit following key. Maybe try using a registry editor on your phone before using the method you described above, but I don't think that this will work. So, you probably have no other choice than opening up your device again and edit the SOFTWARE reg-file. Then sideload EnableAllSideloading.xap and you'll be able to sideload pretty much everything you want.

Question for more experienced devs and hackers:

Is there a registry tweak or some settings anywhere else on the phone that we can access though JTAG and that allows us to boot the phone (Lumia in this case) as a mass storage device with full filesystem access? Like on the Huawei Ascend W1. This would simplify the process of changing registry keys a lot.

Best regards and good luck.
[Windows Phone 8 Development and Hacking] -W_O_L_F-:
Bootstrap Samsung will not work on Lumia.
[Windows Phone 8 Development and Hacking] lordmaxey:
Like this then, right?

Ok, I'll try this next week, i sadly won't have time this weekend.

No. once JTAG halts the phone, it's halted. You can't just "pause" the phone, make changes and continue booting. Sadly.

So, only chance is by writing the modified dump back.
[Windows Phone 8 Development and Hacking] reker:
It's not for Lumia only, it's a universal method for every WP8 devices (including emulator) that could enter MassStorage mode

And the Bootstrap app is not a magic, it use the system service by Samsung to modify the CapabilityClasses registry key mentioned by above and this could be done by modify reg hive directly
[Windows Phone 8 Development and Hacking] error0x0000034:
exactly. I have done this on my Ascend W1 several times, but its easier, because I can enter Mass Storage Mode through bootloader.

I don't know how JTAG method works exactly, I only know that the device needed isn't cheap and can restore bricked phones. How it works? I have no idea, but I'm sure I'll learn quickly.

I will do some research on that soon. I'm a learning noob. :cyclops:

best regards,

error0x0000034
[Windows Phone 8 Development and Hacking] lordmaxey:
Me neither :D

Most credits go to X-Shadow from advance-box team.

Because i had the Idea of modifying the phone dump and read/write via JTAG.

But usually, ATF only supported bootloader repair via JTAG. So i contacted X-Shadow and within only two weeks he updated the jtag-application, and added Custom Read/Write to every part of the EMMC.

That's how i could dump the rom, modify it and write it back.

Absolutely awesome work from that team, just releasing a software because of ONE single inquiry. :) :good::good::good:
[Windows Phone 8 Development and Hacking] GoodDayToDie:
Aw crap, I totally forgot to tell you to test a pure-interop app (like the bootstrap one). You interop-unlocked but failed to capability-unlock, and most WP8 homebrew requires both so of course you couldn't sideload it. DERP :(

But hey, if you successfully edited the capability class of ID_CAP_DEVELOPERUNLOCK_API - and it looks like you did, or could - then you can use EnableAllSideloading to capability-unlock the phone (it just edits all the other capabilities' classes). I could probably also write a "BootstrapNokia" app if you'd like; I think we have interop-based registry functions for WP8 Lumias, which would allow (for example) making SamWP8 Tools work on your Nokia as well.
[Windows Phone 8 Development and Hacking] lordmaxey:
SamWP8 tools on Nokia would be great. :)

I'll check that monday evening, when i'm back at my computer.

I'll keep you informed :)
[Windows Phone 8 Development and Hacking] ngame:
isn't it better to put FCROUTER and other samsung dlls in Windows folder?

as far as i know ID_CAP_INTEROPSERVICES allow it
[Windows Phone 8 Development and Hacking] GoodDayToDie:
Flashing official non-AT&T firmware for the Lumia 925 should be done using Nokia Care Suite. There's a (HUGE!) thread on un-branding WP8 devices by flashing a different official ROM to them.

Technically you *could* un-brand an AT&T ROM via JTAG, but it wouldn't be worth the time.
[Windows Phone 8 Development and Hacking] beka909:
I am getting FFU error via NCS
[Windows Phone 8 Development and Hacking] HATA28:
Off Topic

Off topic: Can anyone tell me if a developer device (a Lumia 920.3 dev kit for example) would give full access to the filesystem and registry?

Thanks in advance
[Windows Phone 8 Development and Hacking] wcomhelp:
Nope!
[Windows Phone 8 Development and Hacking] Sakura_PL:
Which entries in the registry have to change to get full access to file system in WP8 or WP8.1 by MTP or by File Manager from phone?
[Windows Phone 8 Development and Hacking] marcio-msa:
ATF NITRO activation J-TAG :crying::crying:

I bought a ATF NITRO but do not have the JTAG activation.

I have some other program that to use the JTAG dolf clip without activation
[Windows Phone 8 Development and Hacking] GoodDayToDie:
Interopservices doesn't allow *anything* like that by itself. You would need to find a privileged service/driver (capable of moving files and making registry edits) already on the phone and use that. One almost certainly exists, of course; we just haven't tested yet. Also, don't forget that just moving the driver into the relevant folder won't actually do anything. You'll need to essentially install the driver by hand, which means making sure all of its dependent libraries are also in place, then adding and configuring the service to make it get loaded (probably kernel-mode NT driver service rather than the more well-known user-mode Windows services). Possible, of course, expecially by checking the registry on an Ativ S, but not trivially easy.
[Windows Phone 8 Development and Hacking] lordmaxey:
SUCCESS!!

SUCCESS!!!

After adding

i could successfully sideload "EnableAllSideloading.xap"

After executing enableallsideloading i could sideload latest WPHTweaks build.

Now i have 3rd tile row enabled! :)

awesome!
[Windows Phone 8 Development and Hacking] megasounds:
SUPER

WELL DONE !!! :good:

Now all LUMIA guys and girls are jealous !! including me !
[Windows Phone 8 Development and Hacking] lordmaxey:
I'm curious how this will work with windows phone 8.1 update.

I'll interop-unlock my Lumia 920 first, then i'll try updating to 8.1 (dev preview should be released today).

We'll see. :laugh:
[Windows Phone 8 Development and Hacking] ngame:
surely works on 8.1

please test it 920 if you have.

i'm going to find someone with these tools to interop unlock my phone
[Windows Phone 8 Development and Hacking] ultrashot:
Sorry, chinese guys were doing this for ages and hit news multiple times with it :D

Also, I was constantly reminding everyone that unlock via JTAG is possible ;)

There is one *bad* point in making this method public: according to docs, JTAG must be disabled. But Nokia doesn't really disable it the way Microsoft wants everyone to follow. I wouldn't tell you what can happen after this becoming public.
[Windows Phone 8 Development and Hacking] lordmaxey:
Oh, i just read that they had a developer device.

Well, nevermind, it's just confirmed now, that it's really working.
[Windows Phone 8 Development and Hacking] skiddd:
Hi,

Just some info about JTAG on Nokia Lumias...

Nokia Disables it in the QFUSE, but there is a bug/hole in Qualcomm SOCs that enables you to still use JTAG Debugging by using unorthodox ways of HALTING (Entrer DEBUG Mode).

This bug/hole was already rectified starting Snapdragon 800 (MSM8974 and its "family members), that is why there is currently no 3rd Party JTAG Box that can support these new SOCs if the Device Manufaturer sets the correct JTAG disable bits in QFUSE. I heard it is still possible via SWD but will very limited memory access. This holds true not only for Nokia, but for all other Manufacturers as well (Samsung, LG, HTC etc). Anything below Snapdragon 800 (with very few exceptions) can be debugged via JTAG even if the Manufacturer disables all JTAG bits in the QFUSE.

For Snapdragon 800, not all is lost. One can still use ISP for the eMMC if the CLK, CMD, DATA0 lines are exposed on the PCB (which is usually the case because of external pull-up resistors to VccQ).

Now as this method (Interop Unlock via JTAG) might be frowned upon because of the "hardware-approach" nature of the hack, it may still prove to be useful for developers who still want to explore a software-approach hack. I mean the developer will have more control "exploring" the possibilities when he is working on an already "unlocked" device.

Anyway, I am willing to donate my Engineering Lumia 925 with "z" apps to any Senior Developer who is determined to find a "software only" hack.

I will also provide a complimentary JTAG Box + Complete set of JIGS to allow "solderless" JTAG connection for the Lumia 925 (Just in case the Developer needs to revive the phone or if he wants to perform the hardware-method interop unlock on it).

The reason for my generosity is nothing sinister. I simply have no practical use for this phone anymore and I am always a big supporter to anything Nokia...

Best Regards,

ATF Developer
[Windows Phone 8 Development and Hacking] ceesheim:
wow , not bad that you want to help us all here :good:
[Windows Phone 8 Development and Hacking] ultrashot:
Thanks for perfect clarification.

While such 925 alongside with the box would have been very interesting for me to work with, I would just suggest to contact Heathcliff74 directly :)

I have too little spare time, unfortunately.
[Windows Phone 8 Development and Hacking] ceesheim:
Me go for Heathcliff74 too
[Windows Phone 8 Development and Hacking] xboxmod:
Hi skiddd

Thanks a lot for your generosity.

i'm totally agree with Ultrashot ,

Heathcliff74 is your guy!
[Windows Phone 8 Development and Hacking] skiddd:
Hi,

Some Pictures of said phone.

I will try to contact Heathcliff74 via PM if he is interested... but I bet that guy has too much PM in his inbox to actually see my message :(
[Windows Phone 8 Development and Hacking] ceesheim:
we are in contact with him , so he WILL read your pm :laugh:
[Windows Phone 8 Development and Hacking] lordmaxey:
[MENTION=238362]skiddd[/MENTION] (or better said, advance-box/x-shadow)

Thank you for your effort and donating your phone to [MENTION=3254428]Heathcliff74[/MENTION]. if he's interested :)

And thanks again for releasing/updating your tool just because of my inquiry.

This is just real awesomeness :)

THANKS!!! :good:
[Windows Phone 8 Development and Hacking] sensboston:
Great job, lordmaxey, congrats!

Will be great to have "step-by-step" exact instructions for jailbreaking using JTAG (including handset disassembling, connecting etc. and so on) with hi-res pics and video ;) Also, add "Donate to me" button to your profile - I hope, xda members will be glad cover your time and hardware expences :)
[Windows Phone 8 Development and Hacking] Hyp3rh4ck:
I'd like to ask the question: do you think it will be better for us to wait to upgrade our LUMIAs to windows 8.1 to be sure to use this IU in the future?
[Windows Phone 8 Development and Hacking] ngame:
WP8.1 Registry is same as WP8.

this will work after wp8.1 too . don't be worry
[Windows Phone 8 Development and Hacking] lordmaxey:
Thank you, i'm happy you see and appreciate my effort.

And just to simply appreciate is enough "thanks" for me. I'm glad i can do this for this great community.

Yes, i will do a tutorial, which i will add in second post of this thread. But this will take a couple of days. This is much work to do.

I got very much from this community already, maybe this way, i can give back a little :)

So, there's no need for a "donate to me button" ;)

I don't know yet, sorry. But I'm going to do the same procedure i did for my 520, for my Lumia 920.

I guess interop-unlocking BEFORE updating to 8.1 should be probably "safer"...

But i'll reflash my 520 to total stock and i will test what's happening when i'm updating to 8.1 BEFORE interop-unlocking it.

But i guess, both methods will just work. Or better said, i hope so :)

Edit: the 520 is updating now. i guess it should keep the interop. I'll report.
[Windows Phone 8 Development and Hacking] Heathcliff74:
I answered [MENTION=238362]skiddd[/MENTION] in PM.
[Windows Phone 8 Development and Hacking] lordmaxey:
Ok, i successfully updated my interop unlocked Lumia 520 to WP8.1.

And it stays interop unlocked. Perfect.

I have updated my Lumia 920 to 8.1 now aswell.

Now i'm trying to interop unlock it, i guess there won't be complications. Hopefully :good:
[Windows Phone 8 Development and Hacking] lordmaxey:
Ok, i failed completely interop unlocking the Lumia 920 after updating it to 8.1. :rolleyes:

I could still sideload the "EnableAllSideloading.xap" but when i execute it, i'm getting the following error:

Error unlocking capability
"CapabilityMapping"!
Whe Win32 error code is 5

So trying to sideload WPHTweaks fails...

[MENTION=3529492]GoodDayToDie[/MENTION]: what caps is the EnableAllSideloading.xap adding to the registry?

I guess it might work after i'm adding them all manually.

Any suggestions?

Damn, would be annoying reflashing to GDR3 and loosing all Data :D
[Windows Phone 8 Development and Hacking] MameTozhio:
You're most likely going to need to interop before updating to 8.1. So you may have to reflash GDR3.
[Windows Phone 8 Development and Hacking] ngame:
where you add ID_CAP_DEVELOPERUNLOCK_API go there again .

manually edit all capabilities to THIRD_PARTY exactly like what I do on Emulator and you can see the shot below :
[Windows Phone 8 Development and Hacking] lordmaxey:
Thanks!

So, i'll do this for every available key?

I added THIRD_PARTY, FIRST_PARTY was already there
[Windows Phone 8 Development and Hacking] ngame:
No remove THIRD_PARTY, FIRST_PARTY

only write THIRD_PARTY
[Windows Phone 8 Development and Hacking] lordmaxey:
OK, i'll do it like this:

Also it seems, that "developerunlockstate" has moved from "SecurityManager" to "SecurityManager\DeveloperUnlock" in WP8.1
[Windows Phone 8 Development and Hacking] ngame:
OK .

after set all caps to Third_Party Unload Hive and other steps you know .

for DevState Yes it's here in 8.1 . I accept
[Windows Phone 8 Development and Hacking] myst02:
Hey, I also bought ATF Box and I know how [MENTION=238362]skiddd[/MENTION] did this. [MENTION=4630012]lordmaxey[/MENTION] can send me a PM, I can tell you how to do. Enabling Developer ROM is easy :D
[Windows Phone 8 Development and Hacking] nence:
Chinese did the same thing many years ago.

Chinese did the same thing many years ago.

http://jingyan.baidu.com/article/fcb5aff7ee4368edab4a716d.html
[Windows Phone 8 Development and Hacking] lordmaxey:
Wow, congratultions.

This is for Lumia 800. WP7.
[Windows Phone 8 Development and Hacking] GoodDayToDie:
"CapabilityMapping" is something new and unexpected. Not sure what its purpose is yet; I'll need to investigate. I can modify EnableAllSideloading to not mess with anything that doesn't look like a Capability, though (i.e. doesn't start with ID_CAP_).

EnableAllSideloading doesn't actually *add* anything to the registry at all. It just modifies all the existing capabilities so that they are in CAPABILITY_CLASS_THIRD_PARTY_APPLICATIONS.

Can somebody please send me their CONFIG hive, or at least a registry export of the relevant keys for dev-unlock, on WP8.1? That'll speed up my research. I'm currently working on something with my phone that I can't risk updating to 8.1 in the middle of, and while I plan to get a second phone (for pure testing) I don't have one yet.

Thanks!
[Windows Phone 8 Development and Hacking] hashmiakbar:
Please try this on your lumia 520- Getting virtual buttons

http://wmpoweruser.com/virtual-navigation-buttons-enabled-on-the-samsung-ativ-s/
[Windows Phone 8 Development and Hacking] fonix232:
What would be the point? The screen of the 520 is already small enough - and you want to take away further precious screen real estate to mirror the functions of already existing keys?

Yes I get it, at night it's hard to see those buttons (I wish Nokia made those into a notification light + backlight combo), but using this solution would be stupid in my opinion.

I would be more interested in generic hackability - e.g. custom accent colour, enabling some settings, apps, maybe even having some redesign (the clutter of the Settings app is terrible, we need further sub-sections). But mostly I'd like to remove some apps pre-installed (I don't use any of the Nokia extra stuff I have on my 520, only Maps and the generic Lumia additions, e.g. Display, double tap to unlock, etc.), and add some of mine (FB, some of the Rudy Huyn apps, and so on). So in case of a hard reset, I have them back instantly :D
[Windows Phone 8 Development and Hacking] lordmaxey:
So, in my case, it just should do the trick when i'm editing the values as [MENTION=4542506]ngame[/MENTION] suggested?

Here you find software reg file of 8.1:

edit: [MENTION=3529492]GoodDayToDie[/MENTION] - links removed again. I hope you've already downloaded. If not, pls just contact me. :)
[Windows Phone 8 Development and Hacking] ngame:
Why you need this ?

I tried this Registry key on my hacked Emulator VHD that I installed on Hyper-V many days ago

It works but not needed at all .

You can use 3rd Column Tiles or other tricks on any phone but maybe the result is not good at all .

for example when you turn 3rd column on in Lumia 520 you can't see small tiles at all think you active navigation bar too . You will get Blind looooooool :laugh: :D
[Windows Phone 8 Development and Hacking] -W_O_L_F-:
But you can use 3 columns of medium tiles, which are live.
[Windows Phone 8 Development and Hacking] ngame:
sure . I tried it on my 920 but I think 2nd columns are still have a better view ! I don't know why ?
[Windows Phone 8 Development and Hacking] lordmaxey:
Oh, brick - great :D

Microsoft has humor, btw :D
[Windows Phone 8 Development and Hacking] ngame:
What did you do and you brick it ?

It's a soft brick I think you can flash it by Care Suite
[Windows Phone 8 Development and Hacking] marass82:
This is a new key for dev-ulock WP8.1

[HKEY_LOCAL_MACHINE\Software\Microsoft\SecurityManager\DeveloperUnlock]
"DeveloperUnlockState"=dword:00000001
[Windows Phone 8 Development and Hacking] ngame:
It mentioned before in whole thread !
[Windows Phone 8 Development and Hacking] lordmaxey:
i added "THIRD_PARTY" to all CAPs and tried writing only the modified parts of the dump, and not the whole OS partition.

Might made a mistake somewhere.

I'm writing the whole OS partition now, i'll report if it's solved then.
[Windows Phone 8 Development and Hacking] lordmaxey:
Crap.

The good thing: writing back the whole MainOS partition revived my 920.

Another good thing: the changes were successfull, so every CAP is now THIRD PARTY

BUT, the bad thing: Sideloading the Tweaks.xap is still not working...

I'm confused... :confused:
[Windows Phone 8 Development and Hacking] GoodDayToDie:
Please try this version of the EnableAllSideloading app. It's experimental (read: really poorly tested) right now, but it *should* work on 8.0 or 8.1, and since you have the ability to edit the registry directly or re-flash an older image you're in a better place to mess with such things.

Source code will go up soon for those who want it.
[Windows Phone 8 Development and Hacking] -W_O_L_F-:
Error reading current category classes for capability "ID_CAP_ACCESSIBILITY_CLIENT" The error code is 2.
[Windows Phone 8 Development and Hacking] ngame:
Ok ok ?

It's very nice ?

Emmmm, your max unsigned app is over 400?
[Windows Phone 8 Development and Hacking] lordmaxey:
[MENTION=3529492]GoodDayToDie[/MENTION]: same error for me, sorry :(

Of course :)

I just added those changes to the already interop-unlocked modified dump.

I also could sideload EnableAllSideloading.xap, so interop values etc. is fine.

i'm just wondering, if i might have forgotten any other value i didn't know the xap is also changing... :confused:
[Windows Phone 8 Development and Hacking] ngame:
Did you try other high-cap xaps? Like installing ? manager

Maybe you forget only one capability to make it third_party or maybe we should add one capability manually.
[Windows Phone 8 Development and Hacking] lordmaxey:
No, didn't check. ;)

I need to go to work now, maybe i have time to test again this evening, but probably not.

Will be back for testing in about 5 days, tuesday next week.
[Windows Phone 8 Development and Hacking] ngame:
Ok ?

I'll go out home ? and search for JTAG again.

It's so expensive for a student like me ?
[Windows Phone 8 Development and Hacking] lordmaxey:
OK, quickly checked with PDF-To-Office.xap, latest version.

520: sideloading successful, but app crashes when i start it

920: sideloading failed
[Windows Phone 8 Development and Hacking] lordmaxey:
Hm... it seems i'll have to reflash anyway.

The last operation screwed up half my phone. Some apps are reporting "error - buy app or uninstall" when opening...

That's stupid for the included calendar app - can't really uninstall and reinstall that one :D

So, as the 920 is my productive phone, i'll flash it back to GDR3, interop, and update to 8.1 then, as i did for my 520.

I'll do the "direct 8.1 interop"-testing with the 520 then.

I hope i'll find time on the weekend :good:
[Windows Phone 8 Development and Hacking] ngame:
maybe I have to review in Capabilities .

maybe it necessary to save for example SECOND_PARTY then add THIRD_PARTY or something else .

I need more researches about it .

I will work on Emulator again (but now in WP8.1)
[Windows Phone 8 Development and Hacking] lordmaxey:
I dumped MainOS partition of my interop 8.1 520 again that night, and extracted the software reg file.

Now i can check what [MENTION=3529492]GoodDayToDie[/MENTION]s xap is doing exactly and can compare it to the GDR3 version.

This should help setting regkeys manually on 8.1
[Windows Phone 8 Development and Hacking] ngame:
You're right .

Good way. if you can upload this SOFTWARE Hive I will check it too .

I wanna to go to a mobile repair center and work with them on Interop Unlock .

I need such things
[Windows Phone 8 Development and Hacking] GoodDayToDie:
Try this version

Aaagh, my bad. Stupid error on my part. BUT I fixed two other bugs as well, in the course of fixing that one.

Newer, better, less buggy! Still not guaranteed to work but much more likely to do so!

By the way, the reason some apps work after you edit the capability classes and other apps don't work is that some capabilities do not, by default, *have* a class. Apps which use those can't be sideloaded until those capabilities are added under the CapabilityClasses key. EnableAllSideloading does that (enumerating from the Capabilities key). The problem was that the Capabilities key now has a sub-key that is *not* a capability. However, it (and anything like it) should get filtered out now.
[Windows Phone 8 Development and Hacking] Mattemoller90:
On my Ativ S (8.1) I have a error:

Error unlocking capability "ID_CAP_ACCESSIBILITY_CLIENT"!

The Win32 error code is 5
[Windows Phone 8 Development and Hacking] GoodDayToDie:
You're sure you are using the newest version? Error 5 means access denied, and should not happen unless they totally changed the ACLs. Which they might have done, but then I'll need to figure out something else.

[MENTION=4630012]lordmaxey[/MENTION]: Can you please post the extracted registry hive for me to examine?
[Windows Phone 8 Development and Hacking] -W_O_L_F-:
Yep, newest version gives a error.
[Windows Phone 8 Development and Hacking] GoodDayToDie:
Well, darn. That means either ID_CAP_DEVELOPERUNLOCK_API got nerfed or the relevant registry values got tightened. I'll need to investigate.

I *can* make a version that works like the bootstrap, except for every capability. I'm hesitant to, though; the bootstrap hack is kind of ugly (it writes a string where the system expects a multi-string).