DEV ONLY - NAND access + Full Unlock for Lumia 710 & 800

Briefcase · Apr 24, 2012

ombadboy said:
That is true, but was that true even before we put the custom bootloaders?

Because IF one had a Qualcomm bootloader and then flashed and got a NOKIA DLOAD, then most probably it was done using NCS. Unless the only way to 'lock' you Qualcomm bootloader is by actually flashing a NOKIA DLOAD ROM using QPST for the first time, and then NCS would work thereafter

We do not even have custom boot loaders at the moment because we do not have a valid private key to create the required associated certificate, but I may be wrong. The Qualcomm loader also requires a certificate, but for the Lumia 710 Nokia has (presumably by error) put the Qualcomm Loader + associated certificate on their firmware repository. Someone got the hands on that before Nokia removed it. So if you got a 710 you can flash the Qualcomm Loader on your phone.

It may be the fact that we overwrite the OS partition with dd that changes something so that NCS refuses to flash. Because indeed it can update from Qualcomm to Nokia DLOAD BL. Or maybe the supplied Qualcomm Loader is an very early version that never got on a production phone and therefor NCS does not support this version?

ombadboy · Apr 24, 2012

Briefcase said:
We do not even have custom boot loaders at the moment because we do not have a valid private key to create the required associated certificate, but I may be wrong. The Qualcomm loader also requires a certificate, but for the Lumia 710 Nokia has (presumably by error) put the Qualcomm Loader + associated certificate on their firmware repository. Someone got the hands on that before Nokia removed it. So if you got a 710 you can flash the Qualcomm Loader on your phone.

It may be the fact that we overwrite the OS partition with dd that changes something so that NCS refuses to flash. Because indeed it can update from Qualcomm to Nokia DLOAD BL. Or maybe the supplied Qualcomm Loader is an very early version that never got on a production phone and therefor NCS does not support this version?

sorry what I meant was custom ROMS.. Exacltly what I was saying before.. Something happens when we flash using dd, which doesnt allow NCS to flash anymore, whereas before any custom flashing (using dd) was made, NCS could flash a Lumia (with Qualcomm bootloader) to any ROM without any issues..

beidl · Apr 24, 2012

biktor_gj said:
HeathCliff, Im trying (hard) to run native executables in system mode. Im trying to make haret run in system mode to be able to run telnetd and do some hardware digging. So far I was able to autorun it when the phone boots, got to replace the search button to be another start button (i think you can get four or five touch buttons if you want) but I cant find a way to run the damn thing with permissions. I know you were looking into it to code into your root tools, but I was wondering, do you know anyway to patch it somehow on the registry, or on policies db, just to make it work, at least once? I need to find mddi regs and gpio config for this phone...

Sent from my GT-I9100 using XDA

I've found something interesting in the registry which could help us with LK.
Take a look at HKEY_LOCAL_MACHINE\Drivers\Display\Primary\<MaybeThePanelName>.
It has the configuration for VSync and HSync of the display. Might be useful.

Sent from my Lumia 710 using XDA Windows Phone 7 App

biktor_gj · Apr 24, 2012

beidl said:
I've found something interesting in the registry which could help us with LK.
Take a look at HKEY_LOCAL_MACHINE\Drivers\Display\Primary\<MaybeThePanelName>.
It has the configuration for VSync and HSync of the display. Might be useful.

Sent from my Lumia 710 using XDA Windows Phone 7 App

Nice to see you're on it too

(Note this is for lumia 800 only) So far, about the lcd, the lumia 800 uses a Samsung display, codenamed 'Pyrenees'. Its an amoled display, it uses some gpios for enabling or disabling it, but the thing is it has some kind of power regulator that needs to be initialized, and communication is done over MDDI, for which I cannot find the addresses. Reset commands and init sequence can be ported from the N9 kernel source, but since the N9 uses an omap cpu, it communicates in another way with the lcd (DSS). Thats the main reason why I need to get haret running in system mode, to be able to sniff that out. Im also checking on winmo drivers for clues, but without any idea of assembler (even less arm assembler) that is hard to say the least. I think I figured out (at least in part) why I cant start a kernel from LK (machtypes messed out and badly declared memory base and addresses). If I enable MDDI on LK it doesnt even start for now.
On hklm/drivers/display/primary, it only shows it uses ddi.dll (i guess direct draw interface) and resolutions which dont make sense (640x480)
However, on hklm/drivers/touch, you can find parts of the settings for the actual lcd, along with the settings to change the behaviour of the soft keys (back, win, search)

Each time I look at this phone, I feel ashamed for Nokia. And sorry for all the fired developers too. For what Ive seen on codeaurora, it seems like the lumia was going to be the N9. There are references of commits by people inside Nokia fixing things both in LK and the msm kernel for the Searay (lumia). Each day I work with this thing, I hate Stephen Elop a little more...

Sent from my GT-I9100 using XDA

beidl · Apr 24, 2012

biktor_gj said:
Nice to see you're on it too
(Note this is for lumia 800 only) So far, about the lcd, the lumia 800 uses a Samsung display, codenamed 'Pyrenees'. Its an amoled display, it uses some gpios for enabling or disabling it, but the thing is it has some kind of power regulator that needs to be initialized, and communication is done over MDDI, for which I cannot find the addresses. Reset commands and init sequence can be ported from the N9 kernel source, but since the N9 uses an omap cpu, it communicates in another way with the lcd (DSS). Thats the main reason why I need to get haret running in system mode, to be able to sniff that out. Im also checking on winmo drivers for clues, but without any idea of assembler (even less arm assembler) that is hard to say the least. I think I figured out (at least in part) why I cant start a kernel from LK (machtypes messed out and badly declared memory base and addresses). If I enable MDDI on LK it doesnt even start for now.
On hklm/drivers/display/primary, it only shows it uses ddi.dll (i guess direct draw interface) and resolutions which dont make sense (640x480)
However, on hklm/drivers/touch, you can find parts of the settings for the actual lcd, along with the settings to change the behaviour of the soft keys (back, win, search)

Each time I look at this phone, I feel ashamed for Nokia. And sorry for all the fired developers too. For what Ive seen on codeaurora, it seems like the lumia was going to be the N9. There are references of commits by people inside Nokia fixing things both in LK and the msm kernel for the Searay (lumia). Each day I work with this thing, I hate Stephen Elop a little more...

Sent from my GT-I9100 using XDA

Ok, I think I've looked at the wrong place...
When I take a look at HKEY_LOCAL_MACHINE\Drivers\Display\Settings\ILCDC I can see the right V/HSync configs (it shows the right resolution in VisibleDisplayHeight and Width).
I'll try these values tomorrow and see if I can get further in progress (I guess the ILCDC tree name MIGHT indicate that the 710's screen is connected through the LCDC interface...

I've always guessed it thanks to some nice papers and documents that I've found on the interwebs...

)
Edit: The only thing bugging me is that its ID is shown as a 4.3" display... I guess that means digging deeper.
Edit2: I'll try the values from the tree I mentioned earlier, the treename says INONE_COOPER7430, might be the panel name, and it shows the right values (what the hell was I reading at the beginning of this post).
When I once misconfigured my hackintoshes display sync and lines settings, not even the backlight would turn on, so this might be the key to get the display at least somewhat working.
If you get some information about running haret with full system privileges, tell me, I'd need it as well. ^^

biktor_gj · Apr 24, 2012

beidl said:
Ok, I think I've looked at the wrong place...
When I take a look at HKEY_LOCAL_MACHINE\Drivers\Display\Settings\ILCDC I can see the right V/HSync configs (it shows the right resolution in VisibleDisplayHeight and Width).
I'll try these values tomorrow and see if I can get further in progress (I guess the ILCDC tree name MIGHT indicate that the 710's screen is connected through the LCDC interface... I've always guessed it thanks to some nice papers and documents that I've found on the interwebs... )
Edit: The only thing bugging me is that its ID is shown as a 4.3" display... I guess that means digging deeper.

On lumia 800:
HLKM\Drivers\Display\Settings:
Debug -> Empty
EBI2 -> ID=2.2in QVGA Toshiba/Rodem2 (240x320) <-- Could this be msm7630surf's MDDI Toshiba display shown in LK?
LCDC -> ID=4.3in WVGA Optrex
ILCDCgordon -> VGA Sharp Gordon (640x480) <-- Could this be msm7630surf's default Sharp display shown in LK?

Since 710's LCD is different, and it has hardware buttons instead of using part of the LCD and the touchscreen as soft buttons, maybe the implementation is 'cleaner' in the 710 and uses that code... god knows what the did in there..

The second problem with 800's lcd is that it's not 800x48, but 865x480, so, even if we get to power it up, we'll still need to patch a lot of stuff so it doesn't end up showing things under the covered part of the screen... will keep digging!

Anyway, you might want to take a look at n9's source code just in case...
http://harmattan-dev.nokia.com/pool/harmattan/free/k/kernel/
And also. Desire HD's source (also based on msm7630):
http://dl4.htc.com/RomCode/Source_and_Binaries/ace30-gb-mr-2.6.35-f654f7b.tar.gz
Last but not least, codeaurora sources:
https://www.codeaurora.org/gitweb/q...it;h=43e90f352509a1715366a871001d43050f2e859c (just one of the reasons why I think the original N9 is the lumia...)

beidl · Apr 24, 2012

biktor_gj said:
On lumia 800:
HLKM\Drivers\Display\Settings:
Debug -> Empty
EBI2 -> ID=2.2in QVGA Toshiba/Rodem2 (240x320) <-- Could this be msm7630surf's MDDI Toshiba display shown in LK?
LCDC -> ID=4.3in WVGA Optrex
ILCDCgordon -> VGA Sharp Gordon (640x480) <-- Could this be msm7630surf's default Sharp display shown in LK?

Since 710's LCD is different, and it has hardware buttons instead of using part of the LCD and the touchscreen as soft buttons, maybe the implementation is 'cleaner' in the 710 and uses that code... god knows what the did in there..

The second problem with 800's lcd is that it's not 800x48, but 865x480, so, even if we get to power it up, we'll still need to patch a lot of stuff so it doesn't end up showing things under the covered part of the screen... will keep digging!

Anyway, you might want to take a look at n9's source code just in case...
http://harmattan-dev.nokia.com/pool/harmattan/free/k/kernel/
And also. Desire HD's source (also based on msm7630):
http://dl4.htc.com/RomCode/Source_and_Binaries/ace30-gb-mr-2.6.35-f654f7b.tar.gz
Last but not least, codeaurora sources:
https://www.codeaurora.org/gitweb/q...it;h=43e90f352509a1715366a871001d43050f2e859c (just one of the reasons why I think the original N9 is the lumia...)

I've got the same entries, might be true to every msm8x55/msm7x30 chipset based WP7 phone.
As long as the 800 does not have the tree HKLM\Drivers\Display\Primary\INONE_COOPER7430, I can be 99.9% sure that it's the correct config for the 710.
It may be the cheaper looking phone, but I hope it's more hackable

Faruk88 · Apr 25, 2012

Are you guys digging out this information by hooking up your phones in mass storage mode and searching through the registry on your PCs?

If so, let me know if there's anything useful I might be able to dig up for you guys, as a Lumia 710 user. I have no experience with this stuff but I'll be willing to get my hands a little dirty if it means I can contribute anything. (This is my primary phone though, so I'd prefer not to flash anything at this point since I'd like to keep it in working order)

If I understand correctly, it seems you guys are more focused on getting Linux running than developing custom WP ROMs, right?

Briefcase · Apr 25, 2012

Faruk88 said:
Are you guys digging out this information by hooking up your phones in mass storage mode and searching through the registry on your PCs?

If so, let me know if there's anything useful I might be able to dig up for you guys, as a Lumia 710 user. I have no experience with this stuff but I'll be willing to get my hands a little dirty if it means I can contribute anything. (This is my primary phone though, so I'd prefer not to flash anything at this point since I'd like to keep it in working order)

If I understand correctly, it seems you guys are more focused on getting Linux running than developing custom WP ROMs, right?

They are trying to develop a boot loader using the standard qualcomm sources. This way we I assume they can left out the 'certificate checking before flashing'-mechanism. Once that's done we can load whatever we like to our phones. For example a customized WP7.5 ROM(*) or even Android. Android will only be possible if android itself has the required drivers available, so that's one step further away from WP7.5 custom roms. As the Lumia series use pretty standard hardware i guess once we have the unlocked boot loader a andriod rom for the lumia series is not far ahead though.

They now face the problem of getting the display and buttons to work with the qualcomm sources. This requires specific settings which are unknow. We have to revive these settins from the Nokia altered Qualcomm and/or Nokia DLOAD loader but that requires some serious ARM disassembly skills. Alternative way is looking in the WP7 registry (dumped from the phone) and see if that gives us any useful information. Once the display and buttons are working, debugging becomes a lot easier (because we can actually see what happens/where it's stuck) and from then on I guess it's not that hard to complete the loader for our experts here ;-).

Please note that the unlocked loader is just one part of the puzzle. We also need a method for getting the thing onto our devices. Lumia owners with the Nokia Qualcomm loader are in luck because that allows overwriting the loader by dd-ing over another partition. Owners of Nokia DLOAD bootloaders are in luck if they own a 710 because we captured the Nokia Qualcomm loader from the Nokia repository along with a valid certificate and so anyone can flash this loader. Lumia 800 owners with DLOAD are OUT of luck because we have no way to get the newly created unlocked loader (once ready) onto their phones.

It seems this last mentioned problem for the Lumia 800 is hard to tackle (no recent posts about it). But hey we know they are working hard!

(*) Note custom rom means a flashable format ROM, eg, the onces you can find on the Nokia firmware repository. The method available now (overwriting a partition using dd) is just bypassing the bootloader and not a preferred method.

Note: this is just how I see the current situation, I may be wrong. Please correct.

surya467 · Apr 25, 2012

youv explained a lot and makes sense to me too

but bit annoying about the 800 DLOAD, sad to see people around with a 710 unlocked and dunno wat to do after they unlock it!

while im actually waiting for it to go head on!

breakneck001 · Apr 25, 2012

surya467 said:
youv explained a lot and makes sense to me too

but bit annoying about the 800 DLOAD, sad to see people around with a 710 unlocked and dunno wat to do after they unlock it!

while im actually waiting for it to go head on!

im with you on that one

rOzzy1987 · Apr 25, 2012

surya467 said:
but bit annoying about the 800 DLOAD, sad to see people around with a 710 unlocked and dunno wat to do after they unlock it!

Well that's not rare. Once I met a guy who was excited about that his iPhone would be jailbroken that day by his friend. I asked why he would like it to be jailbroken. He said "I don't know yet, it could be useful sometime".

I can assure you that I do know what to do with my 710

. Since I know C# pretty well but never made games, I will learn XNA deveopment (for free, yay

).

Oh, and please XDA, create a forum for the 710 already!

vnvman · Apr 25, 2012

rOzzy1987 said:
Oh, and please XDA, create a forum for the 710 already!

Please vote in the new device poll thread then, if you haven't already, I support that too

surya467 · Apr 25, 2012

rOzzy1987 said:
Well that's not rare. Once I met a guy who was excited about that his iPhone would be jailbroken that day by his friend. I asked why he would like it to be jailbroken. He said "I don't know yet, it could be useful sometime".

I can assure you that I do know what to do with my 710 . Since I know C# pretty well but never made games, I will learn XNA deveopment (for free, yay ).

Oh, and please XDA, create a forum for the 710 already!

ur right....for ppl who knw wat it is.its a huge advantage...for ppl who dont knw...

they DONT KNW!

ultrashot · Apr 25, 2012

Latest version of the full unlocked ROM by lucifer3006
For Lumia 710 only
Based on belgium 1600.3030.8773.12120
OS: 7.10.8773.98 aka Tango
24 languages.

full unlock by ultrashot
no Nokia OEM applications built in.
search key remapping
Bazaar
WP7 Root Tools
WPH Tweaks
Some new themes
XAP Deployer
Google and Yandex added as search providers
WiFi "n"-mode
xb0xmod certificate
cab-updatable.
updatability via Zune or official cabs ISN'T GUARANTEED.

Known issues:

Included applications may return after uninstallation even after deleting.
No Live ID - get new from MS or use DppImplant.
ODDT (Diagnostic Tools) not included - download it from attachments.

Always backup all the data on your phone!
Only for Lumia 710.
Author isn't responsible for any damage to your device. Sharing on other sites is possible if you keep author's name.
(C) lucifer3006

Download:
Mediafire
Mirror

beidl · Apr 25, 2012

ultrashot said:
Latest version of the full unlocked ROM by lucifer3006
For Lumia 710 only
Based on belgium 1600.3030.8773.12120
OS: 7.10.8773.98 aka Tango
24 languages.

full unlock by ultrashot

no Nokia OEM applications built in.

search key remapping

Bazaar

WP7 Root Tools

WPH Tweaks

Some new themes

XAP Deployer

Google and Yandex added as search providers

WiFi "n"-mode

xb0xmod certificate

cab-updatable.

updatability via Zune or official cabs ISN'T GUARANTEED.

Known issues:

Included applications may return after uninstallation even after deleting.

No Live ID - get new from MS or use DppImplant.

ODDT (Diagnostic Tools) not included - download it from attachments.

Always backup all the data on your phone!
Only for Lumia 710.
Author isn't responsible for any damage to your device. Sharing on other sites is possible if you keep author's name.
(C) lucifer3006

Download:
Mediafire
Mirror

Awesome, downloading as i type.
How's the progress on running Hare7, or rather running it with full system privileges? Seems like it doesn't want to run on my 710.

djtonka · Apr 25, 2012

how the hell I have to keep pressing POWER at least 10s to out from bootloader if Lumia 710 does not support it?

surya467 · Apr 25, 2012

great work!

just pls manage the 800 locked bootloader pls :/

waiting like hell..with these pages on auto refresh.

Faruk88 · Apr 25, 2012

surya467 said:
just pls manage the 800 locked bootloader pls :/

waiting like hell..with these pages on auto refresh.

I wouldn't count on it any time soon... I don't think anybody here is working on that right now.

djtonka · Apr 25, 2012

Ok I did it by pulling out battery and then HR. But I cant find any of this apps or extra themes etc...I can install many apps but not the ones with fullinterop required...any clue?

---------- Post added at 05:57 PM ---------- Previous post was at 05:50 PM ----------

ultrashot said:
Latest version of the full unlocked ROM by lucifer3006
For Lumia 710 only
Based on belgium 1600.3030.8773.12120
OS: 7.10.8773.98 aka Tango
24 languages.

full unlock by ultrashot

no Nokia OEM applications built in.

search key remapping

Bazaar

WP7 Root Tools

WPH Tweaks

Some new themes

XAP Deployer

Google and Yandex added as search providers

WiFi "n"-mode

xb0xmod certificate

cab-updatable.

updatability via Zune or official cabs ISN'T GUARANTEED.

Known issues:

Included applications may return after uninstallation even after deleting.

No Live ID - get new from MS or use DppImplant.

ODDT (Diagnostic Tools) not included - download it from attachments.

Always backup all the data on your phone!
Only for Lumia 710.
Author isn't responsible for any damage to your device. Sharing on other sites is possible if you keep author's name.
(C) lucifer3006

Download:
Mediafire
Mirror

Are You sure You uploaded correct file? I have nothing from Your list

DEV ONLY - NAND access + Full Unlock for Lumia 710 & 800

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Member

Member

Senior Member

Senior Member

Inactive Recognized Developer

Attachments

Senior Member

Senior Member

Senior Member

Senior Member

Senior Member

Similar threads

Top Liked Posts