Windows Phone Internals - Unlock bootloader, enable Root Access, create Custom ROM

[_wook_]

What if I cannot get into any kind of flashmode? No QHSUSB, as phone boots, and neither Lumia flashmode or MS FFU Mode are accessible by buttons or commands

Check device manager if there's some missing drivers. If you are able to: detach the battery from the phone, reboot the pc, start the Windows device recovery tool, press volume - and attach phone to USB, click device not recognized in WDRP > Lumia (or Nokia, I am not sure)... and see if it works.
If nothing of that works, then...

 

[xandros9]

Sorry for ETA, but does technicay real to hack Microsoft Lumia 535 or it has new version of bootrom/hardware that won't has unlocked boot? Maybe I can do some testing for check this?

From his FAQ:
"Other Lumia's have different CPU architectures. And these come with different bootloaders. Some of my hacks depend on the implementation of these bootloaders. Some of my hacks won't work on different bootloaders. I need to find new hacks for these bootloaders. I will try that, but I can't predict when that is ready. The tool has implemented all the basics. So adding new hacks will be easier. "

 

[canapo92]

i have just cooked my first rom in my entire life thanks!! It is for nokia lumia 820 based on cyan, unfortunately audio doesn't work like everybody. what is the way to change the name of firmware version??

 

[_wook_]

Problem is that phone skips all the stuff and starts the UEFI app I installed on EFIESP
Is there an alternative way to enter emergency mode?

Oh, I don't know weather you will be able to fix it...
Try booting phone with volume up / down and detecting it with WDRT.
Once it is detected with WDRT it should switch device to flash mode.
If you can't get exclamation mark or cogs then I think only solution is JTAG.
Seems like bad code in EFIESP...
Maybe this would help:

thor2 -mode retail -erasepartition EFIESP

 

[MrCego]

Oh, I don't know weather you will be able to fix it...
Try booting phone with volume up / down and detecting it with WDRT.
Once it is detected with WDRT it should switch device to flash mode.
If you can't get exclamation mark or cogs then I think only solution is JTAG.
Seems like bad code in EFIESP...
Maybe this would help:

thor2 -mode retail -erasepartition EFIESP

Or maybe hard brick the device

 

[MrCego]

You mean, works fine?

 

[_wook_]

When gpt is gone, emergency mode is ON. That is what I do to my phone to fix it....

---------- Post added at 07:43 PM ---------- Previous post was at 07:20 PM ----------

You mean, works fine?

Power button inits EFI on EFIESP and EFIESP manages weather boot normally, MMOS / MSC...
He is stuck in bad EFIESP and can't go further. once he deletes EFIESP / GPT he will be able to end up in emergency mode and then He will be able to flash the phone and then it will work fine.

 

[MrCego]

When gpt is gone, emergency mode is ON. That is what I do to my phone to fix it....

---------- Post added at 07:43 PM ---------- Previous post was at 07:20 PM ----------



Power button inits EFI on EFIESP and EFIESP manages weather boot normally, MMOS / MSC...
He is stuck in bad EFIESP and can't go further. once he deletes EFIESP / GPT he will be able to end up in emergency mode and then He will be able to flash the phone and then it will work fine.

Make sense now.
I was just a little doubtful because, following logic rules, erase or format a partition turn device bricked irrecoverably.
My question is: when some Lumias were dead via WDRT on early builds from Windows Insider, why just we didn't do that? lol!

 

[_wook_]

Make sense now.
I was just a little doubtful because, following logic rules, erase or format a partition turn device bricked irrecoverably.
My question is: when some Lumias were dead via WDRT on early builds from Windows Insider, why just we didn't do that? lol!

I am not sure, one of reasons should be:
Early tools didn't provided thor2 AFAIK so that people wasn't able to do that procedure.
I am sure there are other reasons as well...

 

[domi.nos]

Hey, so what profit do we have gain by this tool? Or it is too early to say?

 

[_wook_]

Okay, solved, but kind of tricky method: Open WPInternals, click on relock bootloader
Connect phone without battery
insert battery
WPInternals crashes, but phone enters Flashmode
Reopen WPInternals
Flash EFIESP

Good job!
Don't mess with EFIESP any more

 

[_wook_]

Just created startup.nsh, if there is a file called ldr.nsh on microSD, it is started, else phone boots from eMMC

I use 1020...no eMMC, maybe I should mount some directory as D: drive lol...

 

[MrCego]

Okay, solved, but kind of tricky method: Open WPInternals, click on relock bootloader
Connect phone without battery
insert battery
WPInternals crashes, but phone enters Flashmode
Reopen WPInternals
Flash EFIESP

That's the same procedure I made when Vol+ from my Lumia 620 was broken.

Hey, so what profit do we have gain by this tool? Or it is too early to say?

in WPinternals.net you can see two instructive videos explaining what can you do with the soft. Plus, in "Getting Started" section from the soft, you can find most info about your question.

Regards.

 

[Heathcliff74]

I used an Engineering SBL3 from a L820, and yes it is in MassStorage mode... Drive letter G: (as stated in the log file)

11/29/2015 12:20:27.92: Found device on interface: 71de994d-8b7c-43db-a27e-2ae7cd579a0c
11/29/2015 12:20:27.92:   Device path: \\.\G:

I tried to root it by using another pc but it didnt work either.

The only thing I can think of is that you altered some of the files on MainOS yourself. The tool needs to patch some stuff and tries to recognize everything by file-hash. If it can't find the right combination, it will abort.

 

[Heathcliff74]

@Heathcliff74 I have tested root acces on multiple WP8.1 versions (6-7 versions) on my phone and the issue where the phone has no sound and can't play any media seems to not be related to the OS version as it happens on all of them so it seems the files that your tool modifies on the EFIESP and/or MainOS partitions have different contents on some phones.
I just did this thinking it might be related to people being on old OS versions but seems not, hope this helps you in some way.

I know where the audio problem comes from. It is not a bad patch or anything. It has to do with audio-decoding. The decoder is protected (for the purpose of DRM). And it has extra restrictions on system-integrity. With Root Access enabled, these checks fail. So, I'm working on signing levels now. It is not easy. So, if you really want your audio back, disable Root Access for now.

 

[Heathcliff74]

First I tried zip flash, then I tried flash separate partitions (EFIESP -> ok, then MainOS+Data -> fails). Same error.

Last edit : I found several errors when Unlock Root Access on ROM images :

What is the error when flashing MainOS and Data? Do errors come immediately, or after a while of flashing?

Not sure, but I think the errors in the log are not related. Some are verbose messages while enumerating devices. Those errors can be ignored.

 

[Heathcliff74]

Sorry for ETA, but does technicay real to hack Microsoft Lumia 535 or it has new version of bootrom/hardware that won't has unlocked boot? Maybe I can do some testing for check this?

No ETA for other devices.

Ask a gold-digger when he will be a millionair. What will he answer?

 

[Heathcliff74]

@Heathcliff74, any chance I can get my ATIV S fixed with your tool?
After a Win10-Update, it doesnt even start.

Nope. No Ativ-support. Again, I have no ETA on Ativ-support.

 

[Heathcliff74]

Oh, I don't know weather you will be able to fix it...
Try booting phone with volume up / down and detecting it with WDRT.
Once it is detected with WDRT it should switch device to flash mode.
If you can't get exclamation mark or cogs then I think only solution is JTAG.
Seems like bad code in EFIESP...
Maybe this would help:

thor2 -mode retail -erasepartition EFIESP

I vote against every use of thor2. Too many things can go wrong. And what would you think to achieve by erasing the EFIESP partition? (Erasing that partition only works when the bootloader is unlocked).

 

[_wook_]

I vote against every use of thor2. Too many things can go wrong. And what would you think to achieve by erasing the EFIESP partition? (Erasing that partition only works when the bootloader is unlocked).

I've noticed that thor2 tends to be weird too. You have a point.