[JAILBREAK][GUIDE] Interop Unlock for Windows 10 Mobile + All Capabilities

Search This thread

djamol

Senior Member
Jun 3, 2014
444
405
29
Pune
www.twitter.com
Hello Folks,
Yeah this is the First thread, First Post about the Windows 10 Mobile Hacking.


Now the First Interop Unlock hack for W10M is now available. It's currently limited to LUMIA/SAMSUNG phones, although we're trying to extend it to other OEM Device, of course. (It requires specific Driver/Services to "RUN" into "SYSTEM" Privileges. Hence, other OEM Device is lack of these. I.e HTC/Micromax etc. etc.)

*** UPDATE : Microsoft is trying to break our hack through blocking "NdtkSvc" on Lumia. So the hack currently doesn't work directly on Lumia 950/550 or later. Even if you updated extras+info on any lumia you will loss Service Access. So Stay Away from Extras+Info***

A brief summary, for those unfamiliar with interop-lock:
Windows Phone allows a number of high-privilege app capabilities, which can be used to make changes to the OS which are normally not possible for a third-party Applications.
The limitation on whether we can use these capabilities or not is based on what "level" of developer unlock the phone has.
ON WP7/8/8.1
Standard "ISV" (Independent Software Vendor) Dev Unlock (max 10 apps or less) is what pretty much everybody gets.
OEMs, however, get a special OEM Developer Unlock (300 apps or more) which gives them the ability to use much higher-privilege app capabilities than the standard ISV unlock permits. The name comes from ID_CAP_INTEROPSERVICES, the capability which was most important in WP7/WP8/8.1.
However, there are a great many interesting capabilities. Note that Interop-unlock by itself does not enable all of these. However, at least on Lumia/Samsung phones, it is now possible to enable *all* the capabilities.
As per my Research Microsoft has give up some FREEDOM to the 3rd Party Developers. Now the "ISV" Developers can sideload apps with the All "SECOND PARTY CAPABILITIES". However, having a Some hive privilege "SYSTEM" Resource that we can expand it to Enable All Capabilities.

The instructions are as follows:

1. Turn "ON" Developer Unlock Mode. (Go to Settings> Update & Security> For Developers)
2. Download "Root Tool.xap" from attachments and deploy It.

Recommended:
Go to "JailBreak Tool"
Select your choice, That's It !

Custom:
Go to Device Specific Registry Editor Tool.
Select "HKEY_LOCAL_MACHINE"
Write default values.

(For Lumia)
Code:
"SOFTWARE\Microsoft\DeviceReg\Install"
"MaxUnsignedApp"=DWORD:7FFFFFFF

(For Samsung)
Code:
"SOFTWARE\Microsoft\DeviceReg\Install"
"MaxUnsignedApp"=DWORD:2147483647

Preventing Unlock:
Code:
"SOFTWARE\Microsoft\DeviceReg"
"PortalUrlInt"="https://127.0.0.1"
"PortalUrlProd"="https://127.0.0.1"

Unlocking NEW Capability Engine:

Write these values:
Code:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AuthorizationRules\Capability\capabilityRule_DevUnlock]
"CapabilityClass"="capabilityClass_DevUnlock_Internal"
"PrincipalClass"="principalClass_DevUnlock_Internal"


ENJOY :)

Hence, this is not a Complete "Root Access" but we are working on it to gain Full SYSTEM Access.
Still, If you got any Issue's after this tutorial then ask your "Questions" In Q/A Thread.

SPECIAL Thanks to @vcfan (Without the RPC Code from "vcFAN" was Impossible to Interop Unlock or Capability Unlock)
Thanks to @ngame and @GoodDayToDie
Thanks Everybody for your Big Support.
 

Attachments

  • RootTool.xap
    401.5 KB · Views: 161,434
  • screenshot.png
    screenshot.png
    211.5 KB · Views: 54,847
Last edited:

djamol

Senior Member
Jun 3, 2014
444
405
29
Pune
www.twitter.com
Questions and Answers

Will this work on other OEM Device / Are you working on this for other OEM Device / What about HTC, or some other OEM?
The current hack relies on a Lumia/Samsung-specific component. Adding support for other phones will require new hacks. We are looking into it.

Can I re-lock my phone if I want to?
Yes, easily. The simplest method is to turn off the "Developer mode" in Settings> Update & Security> For Developers. This doesn't remove any changes that were made using the interop-unlock, though (for example, it won't undo the Capability-Unlock hack, not will it set back the Full FS Access hack). Apps that require interop-unlock will still be installed, but may no longer run. To manually remove interop-unlock, you can reset all the registry values that were changed by the interop-unlock hack to their original values, and remove all the apps. There still may be a great many other changes that also need reverting, though, if you want to get back to stock settings.

Can I get my phone completely back to stock settings without knowing every little thing I changed?
Yes, a hard (factory) reset will undo all changes made by interop-unlock, or any apps (including ones that require interop-unlock), and will remove all apps. If you need to send your phone in for warranty servicing and are worried that they won't take it because you interop-unlocked it, this approach will fix that (they would probably tell you to hard-reset anyhow, if it's conceivably a software problem).

Will the interop-unlock survive a hard reset?
Not using this method! Read the question above. This unlock is purely in software, not firmware; it is reset along with everything else.
 
Last edited:

oelapoel

Senior Member
Apr 29, 2006
486
24
Hi djamol,

Thanx for this. So after doing this, are we able to say put HOSTS to block ads? I have not had the time to try this, gonna do this after work
 

ngame

Senior Member
Mar 13, 2012
1,126
545
Mashad
Hi djamol,

Thanx for this. So after doing this, are we able to say put HOSTS to block ads? I have not had the time to try this, gonna do this after work

It's a full interop/cap unlock based on VCREG 1.1 project
you can navigate Lumia registry editor -> templates -> check the check boxes -> apply
then use Custom PFD to set these values :
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityMana ger\AuthorizationRules\Capability\capabilityRule_D evUnlock]
"CapabilityClass"="capabilityClass_DevUnlock_Inter nal"
"PrincipalClass"="principalClass_DevUnlock_Interna l"
if you see any SPACE in values above they are seems xda bug . no spaces in above strings
 

Ranomez

Senior Member
Jun 1, 2010
1,224
300
HTC One X+
HTC Desire HD
Do I need to use the WP10 deployer or does the 8.1 work too?
I am asking because I don't yet have VS2015 installed and would like to not require it (first because I am used to VS2013 and second because the dreamspark servers seem to be incredibly slow)
 

oelapoel

Senior Member
Apr 29, 2006
486
24
It's a full interop/cap unlock based on VCREG 1.1 project
you can navigate Lumia registry editor -> templates -> check the check boxes -> apply
then use Custom PFD to set these values :
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityMana ger\AuthorizationRules\Capability\capabilityRule_D evUnlock]
"CapabilityClass"="capabilityClass_DevUnlock_Inter nal"
"PrincipalClass"="principalClass_DevUnlock_Interna l"
if you see any SPACE in values above they are seems xda bug . no spaces in above strings

amazing. confirmed interop unlock works on my NL1520. no more ads.. this is the most annoying thing using w10m. cheers

I'll play around a bit more later on when i have time
 
  • Like
Reactions: Claudio Santos

oelapoel

Senior Member
Apr 29, 2006
486
24
@souma_rox
The instructions are as follows:

1. Turn "ON" Developer Unlock Mode. (Go to Settings> Update & Security> For Developers)
2. Download "Root Tool.xap" from attachments and deploy It.

Recommended:
For Lumia:
Open "vcReg" Tool.
Hit the Application Bar and select "Templates".
Here will see two options, Interop/Capability Unlock and "Full File System" Access through the MTP Protocol.
Check your options, and click "Apply".
You are Done !

basically: you run root tools and go to "LUMIA REGISTRY EDITOR". bottom right corner. click the "..." and "TEMPLATES", tick interop unlock + full fs access" and click APPLY. restart. thats it
@onecosmic
try using WP SDK 8.0. Do not use 8.1
 
  • Like
Reactions: jimmymaximus5130

ADeltaX

Senior Member
Feb 16, 2015
130
89
Somewhere
www.adeltax.com
@souma_rox
The instructions are as follows:

1. Turn "ON" Developer Unlock Mode. (Go to Settings> Update & Security> For Developers)
2. Download "Root Tool.xap" from attachments and deploy It.

Recommended:
For Lumia:
Open "vcReg" Tool.
Hit the Application Bar and select "Templates".
Here will see two options, Interop/Capability Unlock and "Full File System" Access through the MTP Protocol.
Check your options, and click "Apply".
You are Done !

basically: you run root tools and go to "LUMIA REGISTRY EDITOR". bottom right corner. click the "..." and "TEMPLATES", tick interop unlock + full fs access" and click APPLY. restart. thats it
@onecosmic
try using WP SDK 8.0. Do not use 8.1

I installed root tool on my lumia 920 but when i tap to "lumia registry editor" it crash!
What i can do?
 

Top Liked Posts

  • There are no posts matching your filters.
  • 64
    Hello Folks,
    Yeah this is the First thread, First Post about the Windows 10 Mobile Hacking.


    Now the First Interop Unlock hack for W10M is now available. It's currently limited to LUMIA/SAMSUNG phones, although we're trying to extend it to other OEM Device, of course. (It requires specific Driver/Services to "RUN" into "SYSTEM" Privileges. Hence, other OEM Device is lack of these. I.e HTC/Micromax etc. etc.)

    *** UPDATE : Microsoft is trying to break our hack through blocking "NdtkSvc" on Lumia. So the hack currently doesn't work directly on Lumia 950/550 or later. Even if you updated extras+info on any lumia you will loss Service Access. So Stay Away from Extras+Info***

    A brief summary, for those unfamiliar with interop-lock:
    Windows Phone allows a number of high-privilege app capabilities, which can be used to make changes to the OS which are normally not possible for a third-party Applications.
    The limitation on whether we can use these capabilities or not is based on what "level" of developer unlock the phone has.
    ON WP7/8/8.1
    Standard "ISV" (Independent Software Vendor) Dev Unlock (max 10 apps or less) is what pretty much everybody gets.
    OEMs, however, get a special OEM Developer Unlock (300 apps or more) which gives them the ability to use much higher-privilege app capabilities than the standard ISV unlock permits. The name comes from ID_CAP_INTEROPSERVICES, the capability which was most important in WP7/WP8/8.1.
    However, there are a great many interesting capabilities. Note that Interop-unlock by itself does not enable all of these. However, at least on Lumia/Samsung phones, it is now possible to enable *all* the capabilities.
    As per my Research Microsoft has give up some FREEDOM to the 3rd Party Developers. Now the "ISV" Developers can sideload apps with the All "SECOND PARTY CAPABILITIES". However, having a Some hive privilege "SYSTEM" Resource that we can expand it to Enable All Capabilities.

    The instructions are as follows:

    1. Turn "ON" Developer Unlock Mode. (Go to Settings> Update & Security> For Developers)
    2. Download "Root Tool.xap" from attachments and deploy It.

    Recommended:
    Go to "JailBreak Tool"
    Select your choice, That's It !

    Custom:
    Go to Device Specific Registry Editor Tool.
    Select "HKEY_LOCAL_MACHINE"
    Write default values.

    (For Lumia)
    Code:
    "SOFTWARE\Microsoft\DeviceReg\Install"
    "MaxUnsignedApp"=DWORD:7FFFFFFF

    (For Samsung)
    Code:
    "SOFTWARE\Microsoft\DeviceReg\Install"
    "MaxUnsignedApp"=DWORD:2147483647

    Preventing Unlock:
    Code:
    "SOFTWARE\Microsoft\DeviceReg"
    "PortalUrlInt"="https://127.0.0.1"
    "PortalUrlProd"="https://127.0.0.1"

    Unlocking NEW Capability Engine:

    Write these values:
    Code:
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AuthorizationRules\Capability\capabilityRule_DevUnlock]
    "CapabilityClass"="capabilityClass_DevUnlock_Internal"
    "PrincipalClass"="principalClass_DevUnlock_Internal"


    ENJOY :)

    Hence, this is not a Complete "Root Access" but we are working on it to gain Full SYSTEM Access.
    Still, If you got any Issue's after this tutorial then ask your "Questions" In Q/A Thread.

    SPECIAL Thanks to @vcfan (Without the RPC Code from "vcFAN" was Impossible to Interop Unlock or Capability Unlock)
    Thanks to @ngame and @GoodDayToDie
    Thanks Everybody for your Big Support.
    5
    Questions and Answers

    Will this work on other OEM Device / Are you working on this for other OEM Device / What about HTC, or some other OEM?
    The current hack relies on a Lumia/Samsung-specific component. Adding support for other phones will require new hacks. We are looking into it.

    Can I re-lock my phone if I want to?
    Yes, easily. The simplest method is to turn off the "Developer mode" in Settings> Update & Security> For Developers. This doesn't remove any changes that were made using the interop-unlock, though (for example, it won't undo the Capability-Unlock hack, not will it set back the Full FS Access hack). Apps that require interop-unlock will still be installed, but may no longer run. To manually remove interop-unlock, you can reset all the registry values that were changed by the interop-unlock hack to their original values, and remove all the apps. There still may be a great many other changes that also need reverting, though, if you want to get back to stock settings.

    Can I get my phone completely back to stock settings without knowing every little thing I changed?
    Yes, a hard (factory) reset will undo all changes made by interop-unlock, or any apps (including ones that require interop-unlock), and will remove all apps. If you need to send your phone in for warranty servicing and are worried that they won't take it because you interop-unlocked it, this approach will fix that (they would probably tell you to hard-reset anyhow, if it's conceivably a software problem).

    Will the interop-unlock survive a hard reset?
    Not using this method! Read the question above. This unlock is purely in software, not firmware; it is reset along with everything else.
    4
    After searching, downloading, deploying again searching, downloading, deploying & again & again... for 2 days I got to interlop and deploy "CustomWPSystem_0500.xap".
    To avoid this pain in ***, detailed steps for newbies like me.


    Software's needed :
    1.Windows Phone 8.0 SDK Lite(Custom)(Link:http://www48.zippyshare.com/v/61043840/file.html) / Windows Phone 8.0 SDK Full.
    2. Visual studio (I used Visual studio 2012)may be needed.?
    STEPS

    1. Turn "ON" Developer Unlock Mode on Phone.(Windows 10 Mobile) (Go to Settings> Update & Security> For Developers>Developer Mode)
    2. Download "Root Tool.zip". (Link:http://forum.xda-developers.com/win.../jailbreak-interop-unlock-windows-10-t3178140) Rename extension "zip" to "xap".
    3. Open "XapDeploy.exe" on PC.(C:\Program Files\Microsoft SDKs\Windows Phone\v8.0\Tools\XAP Deployment)
    4. Deploy Root Tool.xap.
    5. From "Root tool Menu" select corresponding Registry editor. Select "templates" from "..." and select & apply interop.
    6. Restart.
    7. Download "customPFD_0005.zip". (Link:http://forum.xda-developers.com/windows-phone-8/development/xap-custompfd-registry-editor-tweaks-t2981057) Rename extension "zip" to "xap".
    8. Open "XapDeploy.exe" on PC.(C:\Program Files\Microsoft SDKs\Windows Phone\v8.0\Tools\XAP Deployment)
    9. Deploy "customPFD_0005.xap".
    10. Do your tweaks &/ registry edits.

    NB: I did this because I needed Software Navigation Key asap.(CustomPFD Reg>General tweaks>Enable Nav)
    4
    Hi djamol,

    Thanx for this. So after doing this, are we able to say put HOSTS to block ads? I have not had the time to try this, gonna do this after work

    It's a full interop/cap unlock based on VCREG 1.1 project
    you can navigate Lumia registry editor -> templates -> check the check boxes -> apply
    then use Custom PFD to set these values :
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityMana ger\AuthorizationRules\Capability\capabilityRule_D evUnlock]
    "CapabilityClass"="capabilityClass_DevUnlock_Inter nal"
    "PrincipalClass"="principalClass_DevUnlock_Interna l"
    if you see any SPACE in values above they are seems xda bug . no spaces in above strings
    4
    It doesn't work ( :c ) because it has INTEROPSERVICES....
    I have tried to replace WMAppManifest with one from RootTool.xap, deployed successfully but when I open it, it crash.

    Sorry I updated xap very fast because of a real bad bug in my new updated codes I forget about capabilities
    here it is the new xap with same RootTools capabilities
    try it and let know the result .
Our Apps
Get our official app!
The best way to access XDA on your phone
Nav Gestures
Add swipe gestures to any Android
One Handed Mode
Eases uses one hand with your phone