[SUCCESS] Interop-Unlocking LUMIA - with JTAG

Search This thread

lordmaxey

Senior Member
May 6, 2012
314
303
Ok, i successfully updated my interop unlocked Lumia 520 to WP8.1.
And it stays interop unlocked. Perfect.

I have updated my Lumia 920 to 8.1 now aswell.
Now i'm trying to interop unlock it, i guess there won't be complications. Hopefully :good:
 

lordmaxey

Senior Member
May 6, 2012
314
303
Ok, i failed completely interop unlocking the Lumia 920 after updating it to 8.1. :rolleyes:
I could still sideload the "EnableAllSideloading.xap" but when i execute it, i'm getting the following error:
Code:
Error unlocking capability
"CapabilityMapping"!
Whe Win32 error code is 5
So trying to sideload WPHTweaks fails...
@GoodDayToDie: what caps is the EnableAllSideloading.xap adding to the registry?
I guess it might work after i'm adding them all manually.

Any suggestions?
Damn, would be annoying reflashing to GDR3 and loosing all Data :D
 
Last edited:

MameTozhio

Senior Member
Apr 27, 2013
2,457
1,365
23
Ok, i failed completely interop unlocking the Lumia 920 after updating it to 8.1. :rolleyes:
I could still sideload the "EnableAllSideloading.xap" but when i execute it, i'm getting the following error:
Code:
Error unlocking capability
"CapabilityMapping"!
Whe Win32 error code is 5
So trying to sideload WPHTweaks fails...
@GoodDayToDie: what caps is the EnableAllSideloading.xap adding to the registry?
I guess it might work after i'm adding them all manually.

Any suggestions?
Damn, would be annoying reflashing to GDR3 and loosing all Data :D

You're most likely going to need to interop before updating to 8.1. So you may have to reflash GDR3.
 

ngame

Senior Member
Mar 13, 2012
1,126
550
Mashad
Ok, i failed completely interop unlocking the Lumia 920 after updating it to 8.1. :rolleyes:
I could still sideload the "EnableAllSideloading.xap" but when i execute it, i'm getting the following error:
Code:
Error unlocking capability
"CapabilityMapping"!
Whe Win32 error code is 5
So trying to sideload WPHTweaks fails...
@GoodDayToDie: what caps is the EnableAllSideloading.xap adding to the registry?
I guess it might work after i'm adding them all manually.

Any suggestions?
Damn, would be annoying reflashing to GDR3 and loosing all Data :D

where you add ID_CAP_DEVELOPERUNLOCK_API go there again .
manually edit all capabilities to THIRD_PARTY exactly like what I do on Emulator and you can see the shot below :
 

Attachments

  • Regedit.jpg
    Regedit.jpg
    211.1 KB · Views: 264
  • Like
Reactions: lordmaxey

myst02

Senior Member
Feb 20, 2014
170
111
Hey, I also bought ATF Box and I know how @skiddd did this. @lordmaxey can send me a PM, I can tell you how to do. Enabling Developer ROM is easy :D


Sent from my Windows Phone 8X by HTC using Tapatalk
 

GoodDayToDie

Inactive Recognized Developer
Jan 20, 2011
6,066
2,933
Seattle
"CapabilityMapping" is something new and unexpected. Not sure what its purpose is yet; I'll need to investigate. I can modify EnableAllSideloading to not mess with anything that doesn't look like a Capability, though (i.e. doesn't start with ID_CAP_).

EnableAllSideloading doesn't actually *add* anything to the registry at all. It just modifies all the existing capabilities so that they are in CAPABILITY_CLASS_THIRD_PARTY_APPLICATIONS.

Can somebody please send me their CONFIG hive, or at least a registry export of the relevant keys for dev-unlock, on WP8.1? That'll speed up my research. I'm currently working on something with my phone that I can't risk updating to 8.1 in the middle of, and while I plan to get a second phone (for pure testing) I don't have one yet.

Thanks!
 
  • Like
Reactions: lordmaxey and ngame

fonix232

Senior Member
Jun 20, 2009
1,202
718
London

What would be the point? The screen of the 520 is already small enough - and you want to take away further precious screen real estate to mirror the functions of already existing keys?

Yes I get it, at night it's hard to see those buttons (I wish Nokia made those into a notification light + backlight combo), but using this solution would be stupid in my opinion.


I would be more interested in generic hackability - e.g. custom accent colour, enabling some settings, apps, maybe even having some redesign (the clutter of the Settings app is terrible, we need further sub-sections). But mostly I'd like to remove some apps pre-installed (I don't use any of the Nokia extra stuff I have on my 520, only Maps and the generic Lumia additions, e.g. Display, double tap to unlock, etc.), and add some of mine (FB, some of the Rudy Huyn apps, and so on). So in case of a hard reset, I have them back instantly :D
 

lordmaxey

Senior Member
May 6, 2012
314
303
"CapabilityMapping" is something new and unexpected. Not sure what its purpose is yet; I'll need to investigate. I can modify EnableAllSideloading to not mess with anything that doesn't look like a Capability, though (i.e. doesn't start with ID_CAP_).

EnableAllSideloading doesn't actually *add* anything to the registry at all. It just modifies all the existing capabilities so that they are in CAPABILITY_CLASS_THIRD_PARTY_APPLICATIONS.

Can somebody please send me their CONFIG hive, or at least a registry export of the relevant keys for dev-unlock, on WP8.1? That'll speed up my research. I'm currently working on something with my phone that I can't risk updating to 8.1 in the middle of, and while I plan to get a second phone (for pure testing) I don't have one yet.

Thanks!
So, in my case, it just should do the trick when i'm editing the values as @ngame suggested?

Here you find software reg file of 8.1:
edit: @GoodDayToDie - links removed again. I hope you've already downloaded. If not, pls just contact me. :)
 
Last edited:

ngame

Senior Member
Mar 13, 2012
1,126
550
Mashad

Why you need this ?
I tried this Registry key on my hacked Emulator VHD that I installed on Hyper-V many days ago
It works but not needed at all .
You can use 3rd Column Tiles or other tricks on any phone but maybe the result is not good at all .
for example when you turn 3rd column on in Lumia 520 you can't see small tiles at all think you active navigation bar too . You will get Blind looooooool :laugh: :D
 

-W_O_L_F-

Senior Member
Jul 10, 2010
1,030
940
Moscow
Why you need this ?
I tried this Registry key on my hacked Emulator VHD that I installed on Hyper-V many days ago
It works but not needed at all .
You can use 3rd Column Tiles or other tricks on any phone but maybe the result is not good at all .
for example when you turn 3rd column on in Lumia 520 you can't see small tiles at all think you active navigation bar too . You will get Blind looooooool :laugh: :D
But you can use 3 columns of medium tiles, which are live.
 
  • Like
Reactions: ngame

Top Liked Posts

  • There are no posts matching your filters.
  • 29
    Hi there:)

    Well, as we really need Interop Unlock for our Lumia phones, i decided to check this out myself.
    As i already have ATF Box for a long time, i decided to buy JTAG activation and dolphin clip + lumia jigs, that i do not have to solder my phone.
    Also i have ordered a Lumia 520 testing phone on ebay.

    So, as the ATF Team made an awesome JTAG software update, i'm trying to interop unlock that Lumia 520 the hardware way, as just software seems to be too tough...

    Well, what i did so far:
    1. Freshly flashed Lumia 520 RM-914 with latest stock rom
    2. Did the setup/beginning after turning it on for 1st time
    3. developer unlocked it with SDK on PC
    4. Made Full Dump with JTAG from dev-unlocked phone
    5. Mounted MainOS partition of dump with program "OSFMount" (-->appears as Local harddisk example drive E: )
    6.Loaded the SOFTWARE hive with regedit on PC from "E:\Windows\System32\config"
    7. Edited the following values:
    PortalUrlInt = http://127.0.0.1
    PortalUrlProd = http://127.0.0.1
    MaxUnsignedApp = 10003
    8. unloaded SOFTWARE hive
    9. unmounted dump-image
    10. wrote image back via jtag

    I thought it might be a good Idea to dev-unlock the phone before messing with the registry, to make sure "DeveloperUnlockState = 1" gets written the "legal" way, as the key is not available in registry before.
    Maybe it's better to just modify an existing key, than adding a new one...


    Well, long story short: The result is not totally satisfying.:(

    After writing the modified image back to the EMMC, the phone is booting up, but i can NOT deploy homebrew apps that require interop unlock, like @GoodDayToDies "EnableAllSideloading.xap" for example.
    But i can deploy "nomal" apps like @cpuguys "Toastlauncher" and @GoodDayToDies "Webserver"

    The weird thing: If i check the reg-values via WebServer on the Phone, i can see my edited values.
    So the changes ARE written to the phone. The phone just doesn't use them...

    So, the good thing: phone is booting with modified rom :good:
    But, the bad thing: Changes are not working. :confused:


    EDIT:

    SUCCESS!!!
    After adding
    ID_CAP_DEVELOPERUNLOCK_API.jpg

    i could successfully sideload "EnableAllSideloading.xap"

    After executing enableallsideloading i could sideload latest WPHTweaks build.

    Now i have 3rd tile row enabled! :)
    Lumia_520_3rd_tile_row.jpg


    awesome!


    Also member @myst02 is working on interop-unlocking the lumia phones. So we decided to make this a together-project.
    See his achievements here: http://forum.xda-developers.com/showthread.php?t=2713098&page=10
    :good:
    15
    Ok - i finally received my AT&T Lumia 520 (RM-915) from ebay :)

    So - as i don't really need 2 520s, i'm willing to donate my interop unlocked RM-914 phone - the one with the broken screen - to a clever developer ;)
    So, i first though about @GoodDayToDie: Would you like to have my Rm-914 Lumia 520?
    Maybe this would help you researching the not-working EnableAllSideloading on 8.1...

    So, if you would like to have it, i'd be happy to send it to you.
    I just need to know, if it's better to give it interop unlock on GDR3 or 8.1 to you.

    Just let me know if you're interested or name another dev who might need the phone.
    15
    Interop-unlocked Lumia 520 has arrived! I haven't had time to hack on it yet, but I've got plans. HUGE thanks to @lordmaxey for this!
    12
    Sorry, chinese guys were doing this for ages and hit news multiple times with it :D
    Also, I was constantly reminding everyone that unlock via JTAG is possible ;)

    There is one *bad* point in making this method public: according to docs, JTAG must be disabled. But Nokia doesn't really disable it the way Microsoft wants everyone to follow. I wouldn't tell you what can happen after this becoming public.



    Hi,

    Just some info about JTAG on Nokia Lumias...

    Nokia Disables it in the QFUSE, but there is a bug/hole in Qualcomm SOCs that enables you to still use JTAG Debugging by using unorthodox ways of HALTING (Entrer DEBUG Mode).

    This bug/hole was already rectified starting Snapdragon 800 (MSM8974 and its "family members), that is why there is currently no 3rd Party JTAG Box that can support these new SOCs if the Device Manufaturer sets the correct JTAG disable bits in QFUSE. I heard it is still possible via SWD but will very limited memory access. This holds true not only for Nokia, but for all other Manufacturers as well (Samsung, LG, HTC etc). Anything below Snapdragon 800 (with very few exceptions) can be debugged via JTAG even if the Manufacturer disables all JTAG bits in the QFUSE.

    For Snapdragon 800, not all is lost. One can still use ISP for the eMMC if the CLK, CMD, DATA0 lines are exposed on the PCB (which is usually the case because of external pull-up resistors to VccQ).

    Now as this method (Interop Unlock via JTAG) might be frowned upon because of the "hardware-approach" nature of the hack, it may still prove to be useful for developers who still want to explore a software-approach hack. I mean the developer will have more control "exploring" the possibilities when he is working on an already "unlocked" device.


    Anyway, I am willing to donate my Engineering Lumia 925 with "z" apps to any Senior Developer who is determined to find a "software only" hack.

    I will also provide a complimentary JTAG Box + Complete set of JIGS to allow "solderless" JTAG connection for the Lumia 925 (Just in case the Developer needs to revive the phone or if he wants to perform the hardware-method interop unlock on it).


    The reason for my generosity is nothing sinister. I simply have no practical use for this phone anymore and I am always a big supporter to anything Nokia...



    Best Regards,
    ATF Developer
    10
    SUCCESS!!

    SUCCESS!!!
    After adding
    ID_CAP_DEVELOPERUNLOCK_API.jpg

    i could successfully sideload "EnableAllSideloading.xap"

    After executing enableallsideloading i could sideload latest WPHTweaks build.

    Now i have 3rd tile row enabled! :)
    Lumia_520_3rd_tile_row.jpg


    awesome!