Windows Phone Internals - Unlock bootloader, enable Root Access, create Custom ROM

Search This thread

tan90.

New member
Dec 24, 2019
1
0
Hello,how can I unlock the bootloader of my lumia 638?When I click on "unlock",the application show "Booting phone" but don't make any difference on my phone.
Here is some log.

2019-12-24 17:16:24.248: Phone type: RM-1010
2019-12-24 17:16:24.248: Product code: 059W0P1
2019-12-24 17:16:24.248: Root key hash: 0E70B35B83FD6BF98F66E064609A25520F0BA9BF8F7C492663C4BBCB050AE256
2019-12-24 17:16:24.248: Firmware version: 02040.00019.15235.28000
2019-12-24 17:16:24.248: IMEI:
2019-12-24 17:16:24.248: Flash app: 2.57
2019-12-24 17:16:24.248: Flash protocol: 2.34
2019-12-24 17:16:24.248: SecureBoot: Enabled
2019-12-24 17:16:24.248: Flash app security: Enabled (FFU security: Enabled, RDC: Not found, Authenticated: False)
2019-12-24 17:16:24.248: JTAG: Disabled
2019-12-24 17:16:24.248: Bootloader: Lumia Bootloader Spec B
2019-12-24 17:16:24.248: ProductCode: 059W0P1
2019-12-24 17:16:24.248: ProductType: RM-1010
2019-12-24 17:16:27.301: FFU not added, because it was already present in the repository.
2019-12-24 17:16:27.301: Emergency files not added, because they were already present in the repository.
2019-12-24 17:16:27.339: FFU not added, because it was already present in the repository.
2019-12-24 17:16:27.339: Unlock Bootloader
2019-12-24 17:16:27.339: Processing resources:
2019-12-24 17:16:27.339: Profile FFU: D:\Downloads\hbu\RM-1010\RM1010_02040.00019.15235.28004_RETAIL_prod_signed_1003_026CEB_CMC-CN.ffu
2019-12-24 17:16:27.339: EDE file: D:\Downloads\hbu\RM-1010\MPRG8x26_fh.ede
2019-12-24 17:16:27.339: Donor-FFU with supported OS version: D:\Downloads\hbu\RM-1085\RM1085_1078.0053.10586.13169.12547.035242_retail_prod_signed.ffu
2019-12-24 17:16:27.732: Assembling data for unlock
2019-12-24 17:16:27.732: Assembling data for unlock
2019-12-24 17:16:27.755: Attempt patch: SecureBootHack-V2-EFIESP
2019-12-24 17:16:27.758: Pattern: 0, 0
2019-12-24 17:16:27.758: Pattern: 1, 0
2019-12-24 17:16:27.758: Pattern: 2, 0
2019-12-24 17:16:27.758: Pattern: 3, 0
2019-12-24 17:16:27.758: Pattern: 4, 0
2019-12-24 17:16:27.758: Pattern: 5, 0
2019-12-24 17:16:27.758: Pattern: 6, 0
2019-12-24 17:16:27.758: Pattern: 7, 0
2019-12-24 17:16:27.758: Pattern: 8, 0
2019-12-24 17:16:27.758: Pattern: 9, 0
2019-12-24 17:16:27.758: Pattern: 10, 0
2019-12-24 17:16:27.758: Pattern: 11, 0
2019-12-24 17:16:27.759: Pattern: 12, 0
2019-12-24 17:16:27.759: Pattern: 13, 0
2019-12-24 17:16:27.759: Pattern: 14, 0
2019-12-24 17:16:27.759: Pattern: 15, 0
2019-12-24 17:16:27.759: Pattern: 16, 0
2019-12-24 17:16:27.759: Pattern: 17, 0
2019-12-24 17:16:27.759: Pattern: 18, 0
2019-12-24 17:16:27.759: Pattern: 19, 0
2019-12-24 17:16:27.759: Donor-FFU: D:\Downloads\hbu\RM-1085\RM1085_1078.0053.10586.13169.12547.035242_retail_prod_signed.ffu
2019-12-24 17:16:27.770: Taking mobilestartup.efi from donor-FFU
2019-12-24 17:16:27.773: Attempt patch: SecureBootHack-V2-EFIESP
2019-12-24 17:16:27.776: Pattern: 0, 0
2019-12-24 17:16:27.776: Pattern: 1, 0
2019-12-24 17:16:27.776: Pattern: 2, 0
2019-12-24 17:16:27.776: Pattern: 3, 0
2019-12-24 17:16:27.776: Pattern: 4, 0
2019-12-24 17:16:27.776: Apply: 10.0.10586.318
2019-12-24 17:16:27.778: Edit BCD
2019-12-24 17:16:27.924: Error: Sequence contains no elements
2019-12-24 17:16:27.924: Sequence contains no elements
2019-12-24 17:16:27.924: Booting phone...
---------------------------------------
And here is the output when I operate it in command line.

D:\Desktop>WPinternals.exe -unlockbootloader D:\Downloads\hbu\RM-1085\RM1085_107
8.0053.10586.13169.12547.035242_retail_prod_signed.ffu


Windows Phone Internals version 2.8.7288.39025
Copyright Heathcliff74 / wpinternals.net
Command: Unlock Bootloader
Connected device: Lumia
Mode: Flash
Phone type: RM-1010
Product code: 059W0P1
Root key hash: 0E70B35B83FD6BF98F66E064609A25520F0BA9BF8F7C492663C4BBCB050AE256
Firmware version: 02040.00019.15235.28000
Flash app: 2.57
Flash protocol: 2.34
SecureBoot: Enabled
Flash app security: Enabled
JTAG: Disabled
Assembling data for unlock
Error: Sequence contains no elements
------------------------------------------
Is this a bug?
 
Last edited:

AMRooke

New member
Jan 27, 2014
2
0
Austin
Dual-boot via WoaDeployer

Hi,

Yesterday I unlocked and installed WoA on my 950xl, all went well and my 950xl is now running WoA.

I've been looking around the Web and can't seem to find any information on how to return to win10 mobile as losing the camera is a problem for me.

Can anyone tell how to reload Windows 10 Mobile back to my handset please?

Thanks and apologies if I've missed the info elsewhere.

Assuming that you used WoaDeployer 2.6 to load WOA on your phone, and that you selected "Keep Windows 10 Mobile" (on the Advanced tab, but I believe it is the default), your Mobile OS is still on the phone. You just need to enable Dual Boot (another tab in WoaDeployer). You can only enable dual-boot after WOA has been successfully installed on the phone (complete the setup after the app has deployed WOA on the phone). You'll need to enable Mass Storage mode first, but the process is pretty quick and painless. Then you can boot into either version of Windows, mobile or desktop.
 
Last edited:

Pierreo80

New member
Dec 16, 2017
3
0
Is there a plan for an Update?
I have trouble to unlock on the latest Win10M build 15254.603.

WPI doesn't find flashing profile
 
Last edited:

AMRooke

New member
Jan 27, 2014
2
0
Austin
Is there a plan for an Update?
I have trouble to unlock on the latest Win10M build 15254.603.

WPI doesn't find flashing profile

I assume that you are talking about the initial steps in the process, where WPinternals 2.8 only works with Win mobile up thru OS build 15254.547. If you have a later OS build, you will not be able to proceed with installation of the bootloader. You would need to reset your phone, which will probably take it back to around build 10586.318 (that's where mine reset to). You can either run WPinternals at that point (might be the simplest option) or run through a series of Windows mobile updates to get to a version no newer than 15254.547 (was 3 updates for me, called "2019-01 Update for Win10 ver 1709"). Then run WPinternals to install the unlocked bootloader (needed to be able to enter Mass Storage mode). Installation of the WOA "desktop" builds and implementing dual-boot are done with the WOAdeployer application. Once the bootloader has been installed, you don't need WPinternals again, and you can proceed to update to the latest version of Windows mobile (15254.603 is the terminal build), regardless of the versions of Win mobile and WOA installed.
 

Pierreo80

New member
Dec 16, 2017
3
0
I assume that you are talking about the initial steps in the process, where WPinternals 2.8 only works with Win mobile up thru OS build 15254.547. If you have a later OS build, you will not be able to proceed with installation of the bootloader. You would need to reset your phone, which will probably take it back to around build 10586.318 (that's where mine reset to). You can either run WPinternals at that point (might be the simplest option) or run through a series of Windows mobile updates to get to a version no newer than 15254.547 (was 3 updates for me, called "2019-01 Update for Win10 ver 1709"). Then run WPinternals to install the unlocked bootloader (needed to be able to enter Mass Storage mode). Installation of the WOA "desktop" builds and implementing dual-boot are done with the WOAdeployer application. Once the bootloader has been installed, you don't need WPinternals again, and you can proceed to update to the latest version of Windows mobile (15254.603 is the terminal build), regardless of the versions of Win mobile and WOA installed.


The Last time i install 10536.318 then unlock and then with woa Windows 10 and dual Boot. After That i Updated to the newest Version. Than dualboot stops working. U really mean when i First update to 15254.547 then it works all after update to .603?
 

gmirz2005

Senior Member
Jun 18, 2017
134
39
Yerevan
Please help me, I am trying to unbrick my Lumia 920...
Shorting the R3209 resistor on my Lumia 920 (RM-821) and connecting the phone to the computer, it shows up! (I was super excited)
Trying to flash using WDRT, clicking RM-821 as I have the flash files in the folder so WDRT shows my device there. Starts the process then fails. Tried using THOR2.. here (The phone shuts off from the QHSUSB_DLOAD and you need to reconnect it to make it work)
__

[13:42:48.778] D_MSG : THOR2 1.8.2.18
[13:42:48.778] D_MSG : Built for Windows @ 13:36:46 Jun 16 2015
[13:42:48.779] D_MSG : Thor2 is running on Windows of version 6.2
[13:42:48.779] D_MSG : thor2 -mode emergency -hexfile C:\ProgramData\Microsoft\Packages\Products\RM-821\FAST8960_PHI.hex -mbnfile C:\dump\RM-821.bin -ffufile C:\ProgramData\Microsoft\Packages\Products\RM-821\RM821_3051.50009.1424.0008_RETAIL_eu_euro1_276_08_438459_prd_signed.ffu
[13:42:48.779] D_MSG : Process started Sun Apr 05 13:42:48 2020
[13:42:48.782] D_MSG : Debugging enabled for emergency

[13:42:48.782] D_MSG : Initiating emergency download
[13:42:49.793] D_MSG : Using default emergency protocol
[13:42:49.797] D_MSG : ALPHA EMERGENCY FLASH START
[13:42:49.798] D_MSG : Emergency Programmer V1 version 2014.10.31.001
[13:42:49.798] D_MSG : Hex download selected
[13:42:49.799] D_MSG : Check if device in Dload
[13:42:49.800] D_MSG : Connection to DLOAD mode succeeded
[13:42:49.801] D_MSG : Get Dload parameters
[13:42:49.802] D_MSG : Sending HEX flasher to the device
[13:42:50.118] D_MSG : Sending GO command if HEX flasher successfully uploaded.
[13:42:50.757] D_MSG : Emergency Programmer V1 version 2014.10.31.001
[13:42:50.759] D_MSG : Mbn download selected
[13:42:50.760] D_MSG : Reading FFU partition table
[13:42:51.558] D_MSG : FFU RKH: 00E9427DF118D9E27D098D13BECB6C6C89CE59F4ECCF5549C49BC0DB952A6BB4
[13:42:51.560] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.561] D_MSG : -- GPT STARTs--
[13:42:51.561] D_MSG : name: DPP
[13:42:51.562] D_MSG : startLBA: 4096
[13:42:51.563] D_MSG : endLBA: 20479
[13:42:51.563] D_MSG : size: 0x0000000000800000 bytes
[13:42:51.565] D_MSG : attributes: 0x0
[13:42:51.566] D_MSG :

[13:42:51.566] D_MSG : name: MODEM_FSG
[13:42:51.567] D_MSG : startLBA: 20480
[13:42:51.568] D_MSG : endLBA: 26623
[13:42:51.568] D_MSG : size: 0x0000000000300000 bytes
[13:42:51.569] D_MSG : attributes: 0x0
[13:42:51.571] D_MSG :

[13:42:51.571] D_MSG : name: SSD
[13:42:51.572] D_MSG : startLBA: 28672
[13:42:51.572] D_MSG : endLBA: 28703
[13:42:51.576] D_MSG : size: 0x0000000000004000 bytes
[13:42:51.576] D_MSG : attributes: 0x0
[13:42:51.578] D_MSG :

[13:42:51.578] D_MSG : name: SBL1
[13:42:51.579] D_MSG : startLBA: 32768
[13:42:51.580] D_MSG : endLBA: 35767
[13:42:51.580] D_MSG : size: 0x0000000000177000 bytes
[13:42:51.581] D_MSG : attributes: 0x0
[13:42:51.583] D_MSG :

[13:42:51.583] D_MSG : name: SBL2
[13:42:51.584] D_MSG : startLBA: 36864
[13:42:51.584] D_MSG : endLBA: 39863
[13:42:51.585] D_MSG : size: 0x0000000000177000 bytes
[13:42:51.586] D_MSG : attributes: 0x0
[13:42:51.587] D_MSG :

[13:42:51.588] D_MSG : name: SBL3
[13:42:51.588] D_MSG : startLBA: 40960
[13:42:51.592] D_MSG : endLBA: 45055
[13:42:51.593] D_MSG : size: 0x0000000000200000 bytes
[13:42:51.594] D_MSG : attributes: 0x0
[13:42:51.596] D_MSG :

[13:42:51.596] D_MSG : name: UEFI
[13:42:51.597] D_MSG : startLBA: 45056
[13:42:51.598] D_MSG : endLBA: 50055
[13:42:51.598] D_MSG : size: 0x0000000000271000 bytes
[13:42:51.599] D_MSG : attributes: 0x0
[13:42:51.600] D_MSG :

[13:42:51.601] D_MSG : name: RPM
[13:42:51.601] D_MSG : startLBA: 53248
[13:42:51.602] D_MSG : endLBA: 54247
[13:42:51.603] D_MSG : size: 0x000000000007d000 bytes
[13:42:51.603] D_MSG : attributes: 0x0
[13:42:51.604] D_MSG :

[13:42:51.610] D_MSG : name: TZ
[13:42:51.611] D_MSG : startLBA: 57344
[13:42:51.612] D_MSG : endLBA: 58343
[13:42:51.613] D_MSG : size: 0x000000000007d000 bytes
[13:42:51.613] D_MSG : attributes: 0x0
[13:42:51.615] D_MSG :

[13:42:51.616] D_MSG : name: WINSECAPP
[13:42:51.617] D_MSG : startLBA: 61440
[13:42:51.617] D_MSG : endLBA: 62463
[13:42:51.618] D_MSG : size: 0x0000000000080000 bytes
[13:42:51.618] D_MSG : attributes: 0x0
[13:42:51.620] D_MSG :

[13:42:51.623] D_MSG : name: BACKUP_SBL1
[13:42:51.624] D_MSG : startLBA: 65536
[13:42:51.624] D_MSG : endLBA: 68535
[13:42:51.626] D_MSG : size: 0x0000000000177000 bytes
[13:42:51.626] D_MSG : attributes: 0x0
[13:42:51.627] D_MSG :

[13:42:51.628] D_MSG : name: BACKUP_SBL2
[13:42:51.629] D_MSG : startLBA: 69632
[13:42:51.629] D_MSG : endLBA: 72631
[13:42:51.630] D_MSG : size: 0x0000000000177000 bytes
[13:42:51.631] D_MSG : attributes: 0x0
[13:42:51.632] D_MSG :

[13:42:51.633] D_MSG : name: BACKUP_SBL3
[13:42:51.634] D_MSG : startLBA: 73728
[13:42:51.634] D_MSG : endLBA: 77823
[13:42:51.635] D_MSG : size: 0x0000000000200000 bytes
[13:42:51.636] D_MSG : attributes: 0x0
[13:42:51.640] D_MSG :

[13:42:51.641] D_MSG : name: BACKUP_UEFI
[13:42:51.641] D_MSG : startLBA: 77824
[13:42:51.642] D_MSG : endLBA: 82823
[13:42:51.643] D_MSG : size: 0x0000000000271000 bytes
[13:42:51.644] D_MSG : attributes: 0x0
[13:42:51.645] D_MSG :

[13:42:51.646] D_MSG : name: BACKUP_RPM
[13:42:51.646] D_MSG : startLBA: 86016
[13:42:51.647] D_MSG : endLBA: 87015
[13:42:51.648] D_MSG : size: 0x000000000007d000 bytes
[13:42:51.648] D_MSG : attributes: 0x0
[13:42:51.649] D_MSG :

[13:42:51.650] D_MSG : name: BACKUP_TZ
[13:42:51.651] D_MSG : startLBA: 90112
[13:42:51.651] D_MSG : endLBA: 91111
[13:42:51.652] D_MSG : size: 0x000000000007d000 bytes
[13:42:51.655] D_MSG : attributes: 0x0
[13:42:51.657] D_MSG :

[13:42:51.658] D_MSG : name: BACKUP_WINSECAPP
[13:42:51.658] D_MSG : startLBA: 94208
[13:42:51.659] D_MSG : endLBA: 95231
[13:42:51.660] D_MSG : size: 0x0000000000080000 bytes
[13:42:51.660] D_MSG : attributes: 0x0
[13:42:51.661] D_MSG :

[13:42:51.662] D_MSG : name: UEFI_BS_NV
[13:42:51.663] D_MSG : startLBA: 98304
[13:42:51.663] D_MSG : endLBA: 98815
[13:42:51.665] D_MSG : size: 0x0000000000040000 bytes
[13:42:51.665] D_MSG : attributes: 0x0
[13:42:51.667] D_MSG :

[13:42:51.667] D_MSG : name: UEFI_NV
[13:42:51.668] D_MSG : startLBA: 102400
[13:42:51.671] D_MSG : endLBA: 102911
[13:42:51.673] D_MSG : size: 0x0000000000040000 bytes
[13:42:51.674] D_MSG : attributes: 0x0
[13:42:51.675] D_MSG :

[13:42:51.675] D_MSG : name: PLAT
[13:42:51.676] D_MSG : startLBA: 106496
[13:42:51.677] D_MSG : endLBA: 122879
[13:42:51.677] D_MSG : size: 0x0000000000800000 bytes
[13:42:51.678] D_MSG : attributes: 0x0
[13:42:51.679] D_MSG :

[13:42:51.680] D_MSG : name: EFIESP
[13:42:51.680] D_MSG : startLBA: 131072
[13:42:51.681] D_MSG : endLBA: 262143
[13:42:51.681] D_MSG : size: 0x0000000004000000 bytes
[13:42:51.683] D_MSG : attributes: 0x0
[13:42:51.684] D_MSG :

[13:42:51.688] D_MSG : name: MODEM_FS1
[13:42:51.688] D_MSG : startLBA: 262144
[13:42:51.691] D_MSG : endLBA: 268287
[13:42:51.691] D_MSG : size: 0x0000000000300000 bytes
[13:42:51.693] D_MSG : attributes: 0x0
[13:42:51.694] D_MSG :

[13:42:51.694] D_MSG : name: MODEM_FS2
[13:42:51.696] D_MSG : startLBA: 270336
[13:42:51.697] D_MSG : endLBA: 276479
[13:42:51.697] D_MSG : size: 0x0000000000300000 bytes
[13:42:51.698] D_MSG : attributes: 0x0
[13:42:51.699] D_MSG :

[13:42:51.700] D_MSG : name: UEFI_RT_NV
[13:42:51.701] D_MSG : startLBA: 278528
[13:42:51.703] D_MSG : endLBA: 279039
[13:42:51.704] D_MSG : size: 0x0000000000040000 bytes
[13:42:51.705] D_MSG : attributes: 0x0
[13:42:51.707] D_MSG :

[13:42:51.708] D_MSG : name: UEFI_RT_NV_RPMB
[13:42:51.708] D_MSG : startLBA: 282624
[13:42:51.709] D_MSG : endLBA: 282879
[13:42:51.709] D_MSG : size: 0x0000000000020000 bytes
[13:42:51.710] D_MSG : attributes: 0x0
[13:42:51.711] D_MSG :

[13:42:51.712] D_MSG : name: MMOS
[13:42:51.712] D_MSG : startLBA: 286720
[13:42:51.713] D_MSG : endLBA: 446591
[13:42:51.714] D_MSG : size: 0x0000000004e10000 bytes
[13:42:51.715] D_MSG : attributes: 0x0
[13:42:51.716] D_MSG :

[13:42:51.719] D_MSG : name: MainOS
[13:42:51.720] D_MSG : startLBA: 458752
[13:42:51.721] D_MSG : endLBA: 4973119
[13:42:51.721] D_MSG : size: 0x0000000089c48000 bytes
[13:42:51.722] D_MSG : attributes: 0x0
[13:42:51.723] D_MSG :

[13:42:51.724] D_MSG : name: Data
[13:42:51.726] D_MSG : startLBA: 4980736
[13:42:51.727] D_MSG : endLBA: 20967423
[13:42:51.727] D_MSG : size: 0x00000001e7e00000 bytes
[13:42:51.728] D_MSG : attributes: 0x0
[13:42:51.729] D_MSG :

[13:42:51.730] D_MSG : -- GPT ENDs --
[13:42:51.731] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.733] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.734] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.735] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.735] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.736] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.737] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.737] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.738] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.740] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.740] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.741] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.742] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.742] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.743] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.744] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.744] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.746] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.746] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.747] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.750] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.751] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.752] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.753] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.753] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.754] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.754] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.755] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.756] D_MSG : Waiting for connection to flash programmer
[13:42:54.268] D_MSG : Connecting to flash programmer
[13:42:55.262] D_ERR : Message send failed with error code -1
[13:42:55.263] D_ERR : Failed to get response to HELLO_REQ
[13:42:55.771] D_MSG : Connecting to flash programmer
[13:42:56.762] D_ERR : Message send failed with error code -1
[13:42:56.763] D_ERR : Failed to get response to HELLO_REQ
[13:42:57.271] D_MSG : Connecting to flash programmer
[13:42:58.262] D_ERR : Message send failed with error code -1
[13:42:58.263] D_ERR : Failed to get response to HELLO_REQ
[13:42:58.773] D_MSG : Connecting to flash programmer
[13:42:59.762] D_ERR : Message send failed with error code -1
[13:42:59.763] D_ERR : Failed to get response to HELLO_REQ
[13:43:00.264] D_MSG : Connecting to flash programmer
[13:43:01.262] D_ERR : Message send failed with error code -1
[13:43:01.263] D_ERR : Failed to get response to HELLO_REQ
[13:43:01.767] D_MSG : Connecting to flash programmer
[13:43:02.762] D_ERR : Message send failed with error code -1
[13:43:02.763] D_ERR : Failed to get response to HELLO_REQ
[13:43:03.272] D_MSG : Waiting to reconnect: 7 of 80
[13:43:03.273] D_MSG : Connecting to flash programmer
[13:43:04.262] D_ERR : Message send failed with error code -1
[13:43:04.263] D_ERR : Failed to get response to HELLO_REQ
[13:43:04.767] D_MSG : Waiting to reconnect: 8 of 80
[13:43:04.768] D_MSG : Connecting to flash programmer
[13:43:05.762] D_ERR : Message send failed with error code -1
[13:43:05.763] D_ERR : Failed to get response to HELLO_REQ
[13:43:06.271] D_MSG : Waiting to reconnect: 9 of 80
[13:43:06.272] D_MSG : Connecting to flash programmer
[13:43:07.262] D_ERR : Message send failed with error code -1
[13:43:07.263] D_ERR : Failed to get response to HELLO_REQ
[13:43:07.773] D_MSG : Waiting to reconnect: 10 of 80
[13:43:07.775] D_MSG : Connecting to flash programmer
[13:43:08.762] D_ERR : Message send failed with error code -1
[13:43:08.763] D_ERR : Failed to get response to HELLO_REQ
[13:43:09.278] D_MSG : Waiting to reconnect: 11 of 80
[13:43:09.278] D_MSG : Connecting to flash programmer
[13:43:10.278] D_ERR : Message send failed with error code -1
[13:43:10.279] D_ERR : Failed to get response to HELLO_REQ
[13:43:10.781] D_MSG : Waiting to reconnect: 12 of 80
[13:43:10.782] D_MSG : Connecting to flash programmer
[13:43:11.778] D_ERR : Message send failed with error code -1
[13:43:11.779] D_ERR : Failed to get response to HELLO_REQ
[13:43:12.295] D_MSG : Waiting to reconnect: 13 of 80
[13:43:12.296] D_MSG : Connecting to flash programmer
[13:43:13.294] D_ERR : Message send failed with error code -1
[13:43:13.295] D_ERR : Failed to get response to HELLO_REQ
[13:43:13.797] D_MSG : Waiting to reconnect: 14 of 80
[13:43:13.798] D_MSG : Connecting to flash programmer
[13:43:14.793] D_ERR : Message send failed with error code -1
[13:43:14.796] D_ERR : Failed to get response to HELLO_REQ
[13:43:15.298] D_MSG : Waiting to reconnect: 15 of 80
[13:43:15.301] D_MSG : Connecting to flash programmer
[13:43:16.293] D_ERR : Message send failed with error code -1
[13:43:16.296] D_ERR : Failed to get response to HELLO_REQ
[13:43:16.807] D_MSG : Waiting to reconnect: 16 of 80
[13:43:16.810] D_MSG : Connecting to flash programmer
[13:43:17.223] D_ERR : Message send failed with error code -1
[13:43:17.225] D_ERR : Failed to get response to HELLO_REQ
[13:43:17.732] D_MSG : Waiting to reconnect: 17 of 80
[13:43:17.735] D_MSG : Connecting to flash programmer
[13:43:17.735] D_ERR : Message send failed with error code -1
[13:43:17.736] D_ERR : Failed to get response to HELLO_REQ
[13:43:18.242] D_MSG : Waiting to reconnect: 18 of 80
[13:43:18.242] D_MSG : Connecting to flash programmer
[13:43:18.243] D_ERR : Message send failed with error code -1
[13:43:18.244] D_ERR : Failed to get response to HELLO_REQ
[13:43:18.757] D_MSG : Waiting to reconnect: 19 of 80
[13:43:18.758] D_MSG : Connecting to flash programmer
[13:43:18.760] D_ERR : Message send failed with error code -1
[13:43:18.760] D_ERR : Failed to get response to HELLO_REQ
[13:43:19.271] D_MSG : Waiting to reconnect: 20 of 80
[13:43:19.272] D_MSG : Connecting to flash programmer
[13:43:19.273] D_ERR : Message send failed with error code -1
[13:43:19.274] D_ERR : Failed to get response to HELLO_REQ
[13:43:19.785] D_MSG : Waiting to reconnect: 21 of 80
[13:43:19.786] D_MSG : Connecting to flash programmer
[13:43:19.786] D_ERR : Message send failed with error code -1
[13:43:19.787] D_ERR : Failed to get response to HELLO_REQ
[13:43:20.297] D_MSG : Waiting to reconnect: 22 of 80
[13:43:20.298] D_MSG : Connecting to flash programmer
[13:43:20.299] D_ERR : Message send failed with error code -1
[13:43:20.300] D_ERR : Failed to get response to HELLO_REQ
[13:43:20.813] D_MSG : Waiting to reconnect: 23 of 80
[13:43:20.814] D_MSG : Connecting to flash programmer
[13:43:20.816] D_ERR : Message send failed with error code -1
[13:43:20.817] D_ERR : Failed to get response to HELLO_REQ
[13:43:21.332] D_MSG : Waiting to reconnect: 24 of 80
[13:43:21.333] D_MSG : Connecting to flash programmer
[13:43:21.334] D_ERR : Message send failed with error code -1
[13:43:21.334] D_ERR : Failed to get response to HELLO_REQ
[13:43:21.847] D_MSG : Waiting to reconnect: 25 of 80
[13:43:21.848] D_MSG : Connecting to flash programmer
[13:43:21.849] D_ERR : Message send failed with error code -1
[13:43:21.850] D_ERR : Failed to get response to HELLO_REQ
[13:43:22.363] D_MSG : Waiting to reconnect: 26 of 80
[13:43:22.364] D_MSG : Connecting to flash programmer
[13:43:22.365] D_ERR : Message send failed with error code -1
[13:43:22.366] D_ERR : Failed to get response to HELLO_REQ
[13:43:22.876] D_MSG : Waiting to reconnect: 27 of 80
[13:43:22.876] D_MSG : Connecting to flash programmer
[13:43:22.877] D_ERR : Message send failed with error code -1
[13:43:22.878] D_ERR : Failed to get response to HELLO_REQ
[13:43:23.390] D_MSG : Waiting to reconnect: 28 of 80
[13:43:23.392] D_MSG : Connecting to flash programmer
[13:43:23.393] D_ERR : Message send failed with error code -1
[13:43:23.393] D_ERR : Failed to get response to HELLO_REQ
[13:43:23.903] D_MSG : Waiting to reconnect: 29 of 80
[13:43:23.904] D_MSG : Connecting to flash programmer
[13:43:23.905] D_ERR : Message send failed with error code -1
[13:43:23.906] D_ERR : Failed to get response to HELLO_REQ
[13:43:24.419] D_MSG : Waiting to reconnect: 30 of 80
[13:43:24.420] D_MSG : Connecting to flash programmer
[13:43:24.421] D_ERR : Message send failed with error code -1
[13:43:24.421] D_ERR : Failed to get response to HELLO_REQ
[13:43:24.931] D_MSG : Waiting to reconnect: 31 of 80
[13:43:24.931] D_MSG : Connecting to flash programmer
[13:43:24.933] D_ERR : Message send failed with error code -1
[13:43:24.933] D_ERR : Failed to get response to HELLO_REQ
[13:43:25.448] D_MSG : Waiting to reconnect: 32 of 80
[13:43:25.449] D_MSG : Connecting to flash programmer
[13:43:25.449] D_ERR : Message send failed with error code -1
[13:43:25.450] D_ERR : Failed to get response to HELLO_REQ
[13:43:25.961] D_MSG : Waiting to reconnect: 33 of 80
[13:43:25.962] D_MSG : Connecting to flash programmer
[13:43:25.963] D_ERR : Message send failed with error code -1
[13:43:25.963] D_ERR : Failed to get response to HELLO_REQ
[13:43:26.473] D_MSG : Waiting to reconnect: 34 of 80
[13:43:26.473] D_MSG : Connecting to flash programmer
[13:43:26.474] D_ERR : Message send failed with error code -1
[13:43:26.475] D_ERR : Failed to get response to HELLO_REQ
[13:43:26.985] D_MSG : Waiting to reconnect: 35 of 80
[13:43:26.985] D_MSG : Connecting to flash programmer
[13:43:26.986] D_ERR : Message send failed with error code -1
[13:43:26.986] D_ERR : Failed to get response to HELLO_REQ
[13:43:27.494] D_MSG : Waiting to reconnect: 36 of 80
[13:43:27.495] D_MSG : Connecting to flash programmer
[13:43:27.496] D_ERR : Message send failed with error code -1
[13:43:27.497] D_ERR : Failed to get response to HELLO_REQ
[13:43:28.007] D_MSG : Waiting to reconnect: 37 of 80
[13:43:28.009] D_MSG : Connecting to flash programmer
[13:43:28.010] D_ERR : Message send failed with error code -1
[13:43:28.010] D_ERR : Failed to get response to HELLO_REQ
[13:43:28.521] D_MSG : Waiting to reconnect: 38 of 80
[13:43:28.523] D_MSG : Connecting to flash programmer
[13:43:28.523] D_ERR : Message send failed with error code -1
[13:43:28.524] D_ERR : Failed to get response to HELLO_REQ
[13:43:29.039] D_MSG : Waiting to reconnect: 39 of 80
[13:43:29.039] D_MSG : Connecting to flash programmer
[13:43:29.040] D_ERR : Message send failed with error code -1
[13:43:29.041] D_ERR : Failed to get response to HELLO_REQ
[13:43:29.548] D_MSG : Waiting to reconnect: 40 of 80
[13:43:29.549] D_MSG : Connecting to flash programmer
[13:43:29.550] D_ERR : Message send failed with error code -1
[13:43:29.551] D_ERR : Failed to get response to HELLO_REQ
[13:43:30.061] D_MSG : Waiting to reconnect: 41 of 80
[13:43:30.063] D_MSG : Connecting to flash programmer
[13:43:30.063] D_ERR : Message send failed with error code -1
[13:43:30.064] D_ERR : Failed to get response to HELLO_REQ
[13:43:30.573] D_MSG : Waiting to reconnect: 42 of 80
[13:43:30.573] D_MSG : Connecting to flash programmer
[13:43:30.574] D_ERR : Message send failed with error code -1
[13:43:30.575] D_ERR : Failed to get response to HELLO_REQ
[13:43:31.086] D_MSG : Waiting to reconnect: 43 of 80
[13:43:31.086] D_MSG : Connecting to flash programmer
[13:43:31.087] D_ERR : Message send failed with error code -1
[13:43:31.088] D_ERR : Failed to get response to HELLO_REQ
[13:43:31.598] D_MSG : Waiting to reconnect: 44 of 80
[13:43:31.599] D_MSG : Connecting to flash programmer
[13:43:31.600] D_ERR : Message send failed with error code -1
[13:43:31.600] D_ERR : Failed to get response to HELLO_REQ
[13:43:32.111] D_MSG : Waiting to reconnect: 45 of 80
[13:43:32.113] D_MSG : Connecting to flash programmer
[13:43:32.113] D_ERR : Message send failed with error code -1
[13:43:32.114] D_ERR : Failed to get response to HELLO_REQ
[13:43:32.625] D_MSG : Waiting to reconnect: 46 of 80
[13:43:32.626] D_MSG : Connecting to flash programmer
[13:43:32.627] D_ERR : Message send failed with error code -1
[13:43:32.628] D_ERR : Failed to get response to HELLO_REQ
[13:43:33.135] D_MSG : Waiting to reconnect: 47 of 80
[13:43:33.136] D_MSG : Connecting to flash programmer
[13:43:33.137] D_ERR : Message send failed with error code -1
[13:43:33.137] D_ERR : Failed to get response to HELLO_REQ
[13:43:33.650] D_MSG : Waiting to reconnect: 48 of 80
[13:43:33.651] D_MSG : Connecting to flash programmer
[13:43:33.652] D_ERR : Message send failed with error code -1
[13:43:33.653] D_ERR : Failed to get response to HELLO_REQ
[13:43:34.168] D_MSG : Waiting to reconnect: 49 of 80
[13:43:34.168] D_MSG : Connecting to flash programmer
[13:43:34.169] D_ERR : Message send failed with error code -1
[13:43:34.170] D_ERR : Failed to get response to HELLO_REQ
[13:43:34.674] D_MSG : Waiting to reconnect: 50 of 80
[13:43:34.675] D_MSG : Connecting to flash programmer
[13:43:34.676] D_ERR : Message send failed with error code -1
[13:43:34.677] D_ERR : Failed to get response to HELLO_REQ
[13:43:35.191] D_MSG : Waiting to reconnect: 51 of 80
[13:43:35.192] D_MSG : Connecting to flash programmer
[13:43:35.193] D_ERR : Message send failed with error code -1
[13:43:35.193] D_ERR : Failed to get response to HELLO_REQ
[13:43:35.702] D_MSG : Waiting to reconnect: 52 of 80
[13:43:35.703] D_MSG : Connecting to flash programmer
[13:43:35.703] D_ERR : Message send failed with error code -1
[13:43:35.705] D_ERR : Failed to get response to HELLO_REQ
[13:43:36.219] D_MSG : Waiting to reconnect: 53 of 80
[13:43:36.220] D_MSG : Connecting to flash programmer
[13:43:36.220] D_ERR : Message send failed with error code -1
[13:43:36.222] D_ERR : Failed to get response to HELLO_REQ
[13:43:36.730] D_MSG : Waiting to reconnect: 54 of 80
[13:43:36.731] D_MSG : Connecting to flash programmer
[13:43:36.731] D_ERR : Message send failed with error code -1
[13:43:36.732] D_ERR : Failed to get response to HELLO_REQ
[13:43:37.244] D_MSG : Waiting to reconnect: 55 of 80
[13:43:37.245] D_MSG : Connecting to flash programmer
[13:43:37.246] D_ERR : Message send failed with error code -1
[13:43:37.247] D_ERR : Failed to get response to HELLO_REQ
[13:43:37.753] D_MSG : Waiting to reconnect: 56 of 80
[13:43:37.754] D_MSG : Connecting to flash programmer
[13:43:37.756] D_ERR : Message send failed with error code -1
[13:43:37.756] D_ERR : Failed to get response to HELLO_REQ
[13:43:38.266] D_MSG : Waiting to reconnect: 57 of 80
[13:43:38.267] D_MSG : Connecting to flash programmer
[13:43:38.268] D_ERR : Message send failed with error code -1
[13:43:38.269] D_ERR : Failed to get response to HELLO_REQ
[13:43:38.776] D_MSG : Waiting to reconnect: 58 of 80
[13:43:38.777] D_MSG : Connecting to flash programmer
[13:43:38.778] D_ERR : Message send failed with error code -1
[13:43:38.779] D_ERR : Failed to get response to HELLO_REQ
[13:43:39.289] D_MSG : Waiting to reconnect: 59 of 80
[13:43:39.290] D_MSG : Connecting to flash programmer
[13:43:39.291] D_ERR : Message send failed with error code -1
[13:43:39.292] D_ERR : Failed to get response to HELLO_REQ
[13:43:39.804] D_MSG : Waiting to reconnect: 60 of 80
[13:43:39.805] D_MSG : Connecting to flash programmer
[13:43:39.806] D_ERR : Message send failed with error code -1
[13:43:39.807] D_ERR : Failed to get response to HELLO_REQ
[13:43:40.307] D_MSG : Waiting to reconnect: 61 of 80
[13:43:40.309] D_MSG : Connecting to flash programmer
[13:43:40.309] D_ERR : Message send failed with error code -1
[13:43:40.310] D_ERR : Failed to get response to HELLO_REQ
[13:43:40.819] D_MSG : Waiting to reconnect: 62 of 80
[13:43:40.820] D_MSG : Connecting to flash programmer
[13:43:40.821] D_ERR : Message send failed with error code -1
[13:43:40.822] D_ERR : Failed to get response to HELLO_REQ
[13:43:41.331] D_MSG : Waiting to reconnect: 63 of 80
[13:43:41.331] D_MSG : Connecting to flash programmer
[13:43:41.332] D_ERR : Message send failed with error code -1
[13:43:41.332] D_ERR : Failed to get response to HELLO_REQ
[13:43:41.846] D_MSG : Waiting to reconnect: 64 of 80
[13:43:41.846] D_MSG : Connecting to flash programmer
[13:43:41.847] D_ERR : Message send failed with error code -1
[13:43:41.848] D_ERR : Failed to get response to HELLO_REQ
[13:43:42.358] D_MSG : Waiting to reconnect: 65 of 80
[13:43:42.358] D_MSG : Connecting to flash programmer
[13:43:42.359] D_ERR : Message send failed with error code -1
[13:43:42.360] D_ERR : Failed to get response to HELLO_REQ
[13:43:42.871] D_MSG : Waiting to reconnect: 66 of 80
[13:43:42.872] D_MSG : Connecting to flash programmer
[13:43:42.872] D_ERR : Message send failed with error code -1
[13:43:42.873] D_ERR : Failed to get response to HELLO_REQ
[13:43:43.383] D_MSG : Waiting to reconnect: 67 of 80
[13:43:43.384] D_MSG : Connecting to flash programmer
[13:43:43.384] D_ERR : Message send failed with error code -1
[13:43:43.386] D_ERR : Failed to get response to HELLO_REQ
[13:43:43.897] D_MSG : Waiting to reconnect: 68 of 80
[13:43:43.898] D_MSG : Connecting to flash programmer
[13:43:43.899] D_ERR : Message send failed with error code -1
[13:43:43.900] D_ERR : Failed to get response to HELLO_REQ
[13:43:44.411] D_MSG : Waiting to reconnect: 69 of 80
[13:43:44.411] D_MSG : Connecting to flash programmer
[13:43:44.412] D_ERR : Message send failed with error code -1
[13:43:44.413] D_ERR : Failed to get response to HELLO_REQ
[13:43:44.913] D_MSG : Waiting to reconnect: 70 of 80
[13:43:44.914] D_MSG : Connecting to flash programmer
[13:43:44.917] D_ERR : Message send failed with error code -1
[13:43:44.918] D_ERR : Failed to get response to HELLO_REQ
[13:43:45.429] D_MSG : Waiting to reconnect: 71 of 80
[13:43:45.429] D_MSG : Connecting to flash programmer
[13:43:45.430] D_ERR : Message send failed with error code -1
[13:43:45.431] D_ERR : Failed to get response to HELLO_REQ
[13:43:45.934] D_MSG : Waiting to reconnect: 72 of 80
[13:43:45.939] D_MSG : Connecting to flash programmer
[13:43:45.939] D_ERR : Message send failed with error code -1
[13:43:45.945] D_ERR : Failed to get response to HELLO_REQ
[13:43:46.447] D_MSG : Waiting to reconnect: 73 of 80
[13:43:46.448] D_MSG : Connecting to flash programmer
[13:43:46.449] D_ERR : Message send failed with error code -1
[13:43:46.450] D_ERR : Failed to get response to HELLO_REQ
[13:43:46.960] D_MSG : Waiting to reconnect: 74 of 80
[13:43:46.961] D_MSG : Connecting to flash programmer
[13:43:46.962] D_ERR : Message send failed with error code -1
[13:43:46.962] D_ERR : Failed to get response to HELLO_REQ
[13:43:47.475] D_MSG : Waiting to reconnect: 75 of 80
[13:43:47.476] D_MSG : Connecting to flash programmer
[13:43:47.477] D_ERR : Message send failed with error code -1
[13:43:47.478] D_ERR : Failed to get response to HELLO_REQ
[13:43:47.989] D_MSG : Waiting to reconnect: 76 of 80
[13:43:47.990] D_MSG : Connecting to flash programmer
[13:43:47.991] D_ERR : Message send failed with error code -1
[13:43:47.992] D_ERR : Failed to get response to HELLO_REQ
[13:43:48.503] D_MSG : Waiting to reconnect: 77 of 80
[13:43:48.504] D_MSG : Connecting to flash programmer
[13:43:48.505] D_ERR : Message send failed with error code -1
[13:43:48.507] D_ERR : Failed to get response to HELLO_REQ
[13:43:49.020] D_MSG : Waiting to reconnect: 78 of 80
[13:43:49.021] D_MSG : Connecting to flash programmer
[13:43:49.022] D_ERR : Message send failed with error code -1
[13:43:49.022] D_ERR : Failed to get response to HELLO_REQ
[13:43:49.536] D_MSG : Waiting to reconnect: 79 of 80
[13:43:49.537] D_MSG : Connecting to flash programmer
[13:43:49.537] D_ERR : Message send failed with error code -1
[13:43:49.539] D_ERR : Failed to get response to HELLO_REQ
[13:43:50.053] D_MSG : Waiting to reconnect: 80 of 80
[13:43:50.054] D_MSG : Connecting to flash programmer
[13:43:50.055] D_ERR : Message send failed with error code -1
[13:43:50.056] D_ERR : Failed to get response to HELLO_REQ
[13:43:50.057] D_MSG : Failed to connect to the flash programmer.
[13:43:50.058] D_MSG : If you have device with secure boot enabled. You must use signed hex file.
[13:43:50.059] D_MSG : If you have HW without secure boot enabled. Please remove USB cable & power and try again.
[13:43:50.060] D_MSG : ALPHA EMERGENCY FLASH END
[13:43:55.073] D_MSG : Emergency messaging closed successfully
[13:43:55.077] D_MSG : Operation took about 1 minute, 7 seconds.
[13:43:55.082] D_ERR : THOR2 1.8.2.18 exited with error code 85033 (0x14C29)

__

Please help, I used every available HEX File and MBN. I used WPInternals 1.2, it was sending the loader and the phone was like crazy (disconnect, disconnect, disconnect...)
 

gmirz2005

Senior Member
Jun 18, 2017
134
39
Yerevan
Please help me, I am trying to unbrick my Lumia 920...
Shorting the R3209 resistor on my Lumia 920 (RM-821) and connecting the phone to the computer, it shows up! (I was super excited)
Trying to flash using WDRT, clicking RM-821 as I have the flash files in the folder so WDRT shows my device there. Starts the process then fails. Tried using THOR2.. here (The phone shuts off from the QHSUSB_DLOAD and you need to reconnect it to make it work)
__

[13:42:48.778] D_MSG : THOR2 1.8.2.18
[13:42:48.778] D_MSG : Built for Windows @ 13:36:46 Jun 16 2015
[13:42:48.779] D_MSG : Thor2 is running on Windows of version 6.2
[13:42:48.779] D_MSG : thor2 -mode emergency -hexfile C:\ProgramData\Microsoft\Packages\Products\RM-821\FAST8960_PHI.hex -mbnfile C:\dump\RM-821.bin -ffufile C:\ProgramData\Microsoft\Packages\Products\RM-821\RM821_3051.50009.1424.0008_RETAIL_eu_euro1_276_08_438459_prd_signed.ffu
[13:42:48.779] D_MSG : Process started Sun Apr 05 13:42:48 2020
[13:42:48.782] D_MSG : Debugging enabled for emergency

[13:42:48.782] D_MSG : Initiating emergency download
[13:42:49.793] D_MSG : Using default emergency protocol
[13:42:49.797] D_MSG : ALPHA EMERGENCY FLASH START
[13:42:49.798] D_MSG : Emergency Programmer V1 version 2014.10.31.001
[13:42:49.798] D_MSG : Hex download selected
[13:42:49.799] D_MSG : Check if device in Dload
[13:42:49.800] D_MSG : Connection to DLOAD mode succeeded
[13:42:49.801] D_MSG : Get Dload parameters
[13:42:49.802] D_MSG : Sending HEX flasher to the device
[13:42:50.118] D_MSG : Sending GO command if HEX flasher successfully uploaded.
[13:42:50.757] D_MSG : Emergency Programmer V1 version 2014.10.31.001
[13:42:50.759] D_MSG : Mbn download selected
[13:42:50.760] D_MSG : Reading FFU partition table
[13:42:51.558] D_MSG : FFU RKH: 00E9427DF118D9E27D098D13BECB6C6C89CE59F4ECCF5549C49BC0DB952A6BB4
[13:42:51.560] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.561] D_MSG : -- GPT STARTs--
[13:42:51.561] D_MSG : name: DPP
[13:42:51.562] D_MSG : startLBA: 4096
[13:42:51.563] D_MSG : endLBA: 20479
[13:42:51.563] D_MSG : size: 0x0000000000800000 bytes
[13:42:51.565] D_MSG : attributes: 0x0
[13:42:51.566] D_MSG :

[13:42:51.566] D_MSG : name: MODEM_FSG
[13:42:51.567] D_MSG : startLBA: 20480
[13:42:51.568] D_MSG : endLBA: 26623
[13:42:51.568] D_MSG : size: 0x0000000000300000 bytes
[13:42:51.569] D_MSG : attributes: 0x0
[13:42:51.571] D_MSG :

[13:42:51.571] D_MSG : name: SSD
[13:42:51.572] D_MSG : startLBA: 28672
[13:42:51.572] D_MSG : endLBA: 28703
[13:42:51.576] D_MSG : size: 0x0000000000004000 bytes
[13:42:51.576] D_MSG : attributes: 0x0
[13:42:51.578] D_MSG :

[13:42:51.578] D_MSG : name: SBL1
[13:42:51.579] D_MSG : startLBA: 32768
[13:42:51.580] D_MSG : endLBA: 35767
[13:42:51.580] D_MSG : size: 0x0000000000177000 bytes
[13:42:51.581] D_MSG : attributes: 0x0
[13:42:51.583] D_MSG :

[13:42:51.583] D_MSG : name: SBL2
[13:42:51.584] D_MSG : startLBA: 36864
[13:42:51.584] D_MSG : endLBA: 39863
[13:42:51.585] D_MSG : size: 0x0000000000177000 bytes
[13:42:51.586] D_MSG : attributes: 0x0
[13:42:51.587] D_MSG :

[13:42:51.588] D_MSG : name: SBL3
[13:42:51.588] D_MSG : startLBA: 40960
[13:42:51.592] D_MSG : endLBA: 45055
[13:42:51.593] D_MSG : size: 0x0000000000200000 bytes
[13:42:51.594] D_MSG : attributes: 0x0
[13:42:51.596] D_MSG :

[13:42:51.596] D_MSG : name: UEFI
[13:42:51.597] D_MSG : startLBA: 45056
[13:42:51.598] D_MSG : endLBA: 50055
[13:42:51.598] D_MSG : size: 0x0000000000271000 bytes
[13:42:51.599] D_MSG : attributes: 0x0
[13:42:51.600] D_MSG :

[13:42:51.601] D_MSG : name: RPM
[13:42:51.601] D_MSG : startLBA: 53248
[13:42:51.602] D_MSG : endLBA: 54247
[13:42:51.603] D_MSG : size: 0x000000000007d000 bytes
[13:42:51.603] D_MSG : attributes: 0x0
[13:42:51.604] D_MSG :

[13:42:51.610] D_MSG : name: TZ
[13:42:51.611] D_MSG : startLBA: 57344
[13:42:51.612] D_MSG : endLBA: 58343
[13:42:51.613] D_MSG : size: 0x000000000007d000 bytes
[13:42:51.613] D_MSG : attributes: 0x0
[13:42:51.615] D_MSG :

[13:42:51.616] D_MSG : name: WINSECAPP
[13:42:51.617] D_MSG : startLBA: 61440
[13:42:51.617] D_MSG : endLBA: 62463
[13:42:51.618] D_MSG : size: 0x0000000000080000 bytes
[13:42:51.618] D_MSG : attributes: 0x0
[13:42:51.620] D_MSG :

[13:42:51.623] D_MSG : name: BACKUP_SBL1
[13:42:51.624] D_MSG : startLBA: 65536
[13:42:51.624] D_MSG : endLBA: 68535
[13:42:51.626] D_MSG : size: 0x0000000000177000 bytes
[13:42:51.626] D_MSG : attributes: 0x0
[13:42:51.627] D_MSG :

[13:42:51.628] D_MSG : name: BACKUP_SBL2
[13:42:51.629] D_MSG : startLBA: 69632
[13:42:51.629] D_MSG : endLBA: 72631
[13:42:51.630] D_MSG : size: 0x0000000000177000 bytes
[13:42:51.631] D_MSG : attributes: 0x0
[13:42:51.632] D_MSG :

[13:42:51.633] D_MSG : name: BACKUP_SBL3
[13:42:51.634] D_MSG : startLBA: 73728
[13:42:51.634] D_MSG : endLBA: 77823
[13:42:51.635] D_MSG : size: 0x0000000000200000 bytes
[13:42:51.636] D_MSG : attributes: 0x0
[13:42:51.640] D_MSG :

[13:42:51.641] D_MSG : name: BACKUP_UEFI
[13:42:51.641] D_MSG : startLBA: 77824
[13:42:51.642] D_MSG : endLBA: 82823
[13:42:51.643] D_MSG : size: 0x0000000000271000 bytes
[13:42:51.644] D_MSG : attributes: 0x0
[13:42:51.645] D_MSG :

[13:42:51.646] D_MSG : name: BACKUP_RPM
[13:42:51.646] D_MSG : startLBA: 86016
[13:42:51.647] D_MSG : endLBA: 87015
[13:42:51.648] D_MSG : size: 0x000000000007d000 bytes
[13:42:51.648] D_MSG : attributes: 0x0
[13:42:51.649] D_MSG :

[13:42:51.650] D_MSG : name: BACKUP_TZ
[13:42:51.651] D_MSG : startLBA: 90112
[13:42:51.651] D_MSG : endLBA: 91111
[13:42:51.652] D_MSG : size: 0x000000000007d000 bytes
[13:42:51.655] D_MSG : attributes: 0x0
[13:42:51.657] D_MSG :

[13:42:51.658] D_MSG : name: BACKUP_WINSECAPP
[13:42:51.658] D_MSG : startLBA: 94208
[13:42:51.659] D_MSG : endLBA: 95231
[13:42:51.660] D_MSG : size: 0x0000000000080000 bytes
[13:42:51.660] D_MSG : attributes: 0x0
[13:42:51.661] D_MSG :

[13:42:51.662] D_MSG : name: UEFI_BS_NV
[13:42:51.663] D_MSG : startLBA: 98304
[13:42:51.663] D_MSG : endLBA: 98815
[13:42:51.665] D_MSG : size: 0x0000000000040000 bytes
[13:42:51.665] D_MSG : attributes: 0x0
[13:42:51.667] D_MSG :

[13:42:51.667] D_MSG : name: UEFI_NV
[13:42:51.668] D_MSG : startLBA: 102400
[13:42:51.671] D_MSG : endLBA: 102911
[13:42:51.673] D_MSG : size: 0x0000000000040000 bytes
[13:42:51.674] D_MSG : attributes: 0x0
[13:42:51.675] D_MSG :

[13:42:51.675] D_MSG : name: PLAT
[13:42:51.676] D_MSG : startLBA: 106496
[13:42:51.677] D_MSG : endLBA: 122879
[13:42:51.677] D_MSG : size: 0x0000000000800000 bytes
[13:42:51.678] D_MSG : attributes: 0x0
[13:42:51.679] D_MSG :

[13:42:51.680] D_MSG : name: EFIESP
[13:42:51.680] D_MSG : startLBA: 131072
[13:42:51.681] D_MSG : endLBA: 262143
[13:42:51.681] D_MSG : size: 0x0000000004000000 bytes
[13:42:51.683] D_MSG : attributes: 0x0
[13:42:51.684] D_MSG :

[13:42:51.688] D_MSG : name: MODEM_FS1
[13:42:51.688] D_MSG : startLBA: 262144
[13:42:51.691] D_MSG : endLBA: 268287
[13:42:51.691] D_MSG : size: 0x0000000000300000 bytes
[13:42:51.693] D_MSG : attributes: 0x0
[13:42:51.694] D_MSG :

[13:42:51.694] D_MSG : name: MODEM_FS2
[13:42:51.696] D_MSG : startLBA: 270336
[13:42:51.697] D_MSG : endLBA: 276479
[13:42:51.697] D_MSG : size: 0x0000000000300000 bytes
[13:42:51.698] D_MSG : attributes: 0x0
[13:42:51.699] D_MSG :

[13:42:51.700] D_MSG : name: UEFI_RT_NV
[13:42:51.701] D_MSG : startLBA: 278528
[13:42:51.703] D_MSG : endLBA: 279039
[13:42:51.704] D_MSG : size: 0x0000000000040000 bytes
[13:42:51.705] D_MSG : attributes: 0x0
[13:42:51.707] D_MSG :

[13:42:51.708] D_MSG : name: UEFI_RT_NV_RPMB
[13:42:51.708] D_MSG : startLBA: 282624
[13:42:51.709] D_MSG : endLBA: 282879
[13:42:51.709] D_MSG : size: 0x0000000000020000 bytes
[13:42:51.710] D_MSG : attributes: 0x0
[13:42:51.711] D_MSG :

[13:42:51.712] D_MSG : name: MMOS
[13:42:51.712] D_MSG : startLBA: 286720
[13:42:51.713] D_MSG : endLBA: 446591
[13:42:51.714] D_MSG : size: 0x0000000004e10000 bytes
[13:42:51.715] D_MSG : attributes: 0x0
[13:42:51.716] D_MSG :

[13:42:51.719] D_MSG : name: MainOS
[13:42:51.720] D_MSG : startLBA: 458752
[13:42:51.721] D_MSG : endLBA: 4973119
[13:42:51.721] D_MSG : size: 0x0000000089c48000 bytes
[13:42:51.722] D_MSG : attributes: 0x0
[13:42:51.723] D_MSG :

[13:42:51.724] D_MSG : name: Data
[13:42:51.726] D_MSG : startLBA: 4980736
[13:42:51.727] D_MSG : endLBA: 20967423
[13:42:51.727] D_MSG : size: 0x00000001e7e00000 bytes
[13:42:51.728] D_MSG : attributes: 0x0
[13:42:51.729] D_MSG :

[13:42:51.730] D_MSG : -- GPT ENDs --
[13:42:51.731] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.733] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.734] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.735] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.735] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.736] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.737] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.737] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.738] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.740] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.740] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.741] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.742] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.742] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.743] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.744] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.744] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.746] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.746] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.747] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.750] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.751] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.752] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.753] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.753] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.754] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.754] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.755] D_MSG : FFU Platform ID: Nokia.MSM8960.P4301
[13:42:51.756] D_MSG : Waiting for connection to flash programmer
[13:42:54.268] D_MSG : Connecting to flash programmer
[13:42:55.262] D_ERR : Message send failed with error code -1
[13:42:55.263] D_ERR : Failed to get response to HELLO_REQ
[13:42:55.771] D_MSG : Connecting to flash programmer
[13:42:56.762] D_ERR : Message send failed with error code -1
[13:42:56.763] D_ERR : Failed to get response to HELLO_REQ
[13:42:57.271] D_MSG : Connecting to flash programmer
[13:42:58.262] D_ERR : Message send failed with error code -1
[13:42:58.263] D_ERR : Failed to get response to HELLO_REQ
[13:42:58.773] D_MSG : Connecting to flash programmer
[13:42:59.762] D_ERR : Message send failed with error code -1
[13:42:59.763] D_ERR : Failed to get response to HELLO_REQ
[13:43:00.264] D_MSG : Connecting to flash programmer
[13:43:01.262] D_ERR : Message send failed with error code -1
[13:43:01.263] D_ERR : Failed to get response to HELLO_REQ
[13:43:01.767] D_MSG : Connecting to flash programmer
[13:43:02.762] D_ERR : Message send failed with error code -1
[13:43:02.763] D_ERR : Failed to get response to HELLO_REQ
[13:43:03.272] D_MSG : Waiting to reconnect: 7 of 80
[13:43:03.273] D_MSG : Connecting to flash programmer
[13:43:04.262] D_ERR : Message send failed with error code -1
[13:43:04.263] D_ERR : Failed to get response to HELLO_REQ
[13:43:04.767] D_MSG : Waiting to reconnect: 8 of 80
[13:43:04.768] D_MSG : Connecting to flash programmer
[13:43:05.762] D_ERR : Message send failed with error code -1
[13:43:05.763] D_ERR : Failed to get response to HELLO_REQ
[13:43:06.271] D_MSG : Waiting to reconnect: 9 of 80
[13:43:06.272] D_MSG : Connecting to flash programmer
[13:43:07.262] D_ERR : Message send failed with error code -1
[13:43:07.263] D_ERR : Failed to get response to HELLO_REQ
[13:43:07.773] D_MSG : Waiting to reconnect: 10 of 80
[13:43:07.775] D_MSG : Connecting to flash programmer
[13:43:08.762] D_ERR : Message send failed with error code -1
[13:43:08.763] D_ERR : Failed to get response to HELLO_REQ
[13:43:09.278] D_MSG : Waiting to reconnect: 11 of 80
[13:43:09.278] D_MSG : Connecting to flash programmer
[13:43:10.278] D_ERR : Message send failed with error code -1
[13:43:10.279] D_ERR : Failed to get response to HELLO_REQ
[13:43:10.781] D_MSG : Waiting to reconnect: 12 of 80
[13:43:10.782] D_MSG : Connecting to flash programmer
[13:43:11.778] D_ERR : Message send failed with error code -1
[13:43:11.779] D_ERR : Failed to get response to HELLO_REQ
[13:43:12.295] D_MSG : Waiting to reconnect: 13 of 80
[13:43:12.296] D_MSG : Connecting to flash programmer
[13:43:13.294] D_ERR : Message send failed with error code -1
[13:43:13.295] D_ERR : Failed to get response to HELLO_REQ
[13:43:13.797] D_MSG : Waiting to reconnect: 14 of 80
[13:43:13.798] D_MSG : Connecting to flash programmer
[13:43:14.793] D_ERR : Message send failed with error code -1
[13:43:14.796] D_ERR : Failed to get response to HELLO_REQ
[13:43:15.298] D_MSG : Waiting to reconnect: 15 of 80
[13:43:15.301] D_MSG : Connecting to flash programmer
. . .
[13:43:49.020] D_MSG : Waiting to reconnect: 78 of 80
[13:43:49.021] D_MSG : Connecting to flash programmer
[13:43:49.022] D_ERR : Message send failed with error code -1
[13:43:49.022] D_ERR : Failed to get response to HELLO_REQ
[13:43:49.536] D_MSG : Waiting to reconnect: 79 of 80
[13:43:49.537] D_MSG : Connecting to flash programmer
[13:43:49.537] D_ERR : Message send failed with error code -1
[13:43:49.539] D_ERR : Failed to get response to HELLO_REQ
[13:43:50.053] D_MSG : Waiting to reconnect: 80 of 80
[13:43:50.054] D_MSG : Connecting to flash programmer
[13:43:50.055] D_ERR : Message send failed with error code -1
[13:43:50.056] D_ERR : Failed to get response to HELLO_REQ
[13:43:50.057] D_MSG : Failed to connect to the flash programmer.
[13:43:50.058] D_MSG : If you have device with secure boot enabled. You must use signed hex file.
[13:43:50.059] D_MSG : If you have HW without secure boot enabled. Please remove USB cable & power and try again.
[13:43:50.060] D_MSG : ALPHA EMERGENCY FLASH END
[13:43:55.073] D_MSG : Emergency messaging closed successfully
[13:43:55.077] D_MSG : Operation took about 1 minute, 7 seconds.
[13:43:55.082] D_ERR : THOR2 1.8.2.18 exited with error code 85033 (0x14C29)

__

Please help, I used every available HEX File and MBN. I used WPInternals 1.2, it was sending the loader and the phone was like crazy (disconnect, disconnect, disconnect...)
 

konker

Senior Member
Jan 9, 2006
325
2
Failed to read sectors. Exception: 0x000001B1 unlocking Lumia 950 Dual-SIM bootloader

I have a Lumia 950 Dual-SIM that I am trying to unlock in order to load Windows 10 ARM.
However, I have not been able to successfully unlock the bootloader despite repeated attempts.
Kept getting the error: Failed to read sectors. Exception: 0x000001B1
Search this forum but could't find any post related to this issue.
I noticed that this error usually occur after trying to get into the Mass-Storage-Mode
Here's the information of my phone:
General info:
Brand/model: Nokia Lumia RM-1118_11280
Operating Mode: Normal (Windows Phone OS)
Product code: 059X4Z0
Operator: 000-88
Firmware version: 01078.00053.16236.35017

Anyone can advice me how I can proceed from here?
Phone is currently booted back into Windows 10 Mobile after restoring the bootloader.
TIA!
 

mivas

Member
Jul 23, 2018
36
5
Has anyone tried the AutoPatcher Tool? Can it detect and patch (root) unsupported WP8/8.1 builds?

WPI can't root, I have also tried with dump MainOS and EFI partitions and root there, but nope... Maybe there is still some hope with Autopatcher?
 

darksfatality

New member
Aug 9, 2020
1
0
Cannot unlock lumia 950xl using a never version than original ffu

Hi everybody,
I have issues unlocking my lumia 950xl using wpinternals. Every time I try an unlock I receive the following error: could not find a part of the path K:\Windows\system32\boot\winload.efi. This happens every time i try to unlock using a never version that the original ffu. If I do the same procedure using the orginal firmware everything works fine, any ideas?

Working version: 10.0.14393.1066
 

rhiakath

New member
Mar 17, 2009
2
0
Failed to unlock bootloader on Lumia 640

Hi there.
I need some help with this. I've been trying to fiddle around with my Windows Phone ( Nokia Lumia 640 RM 1075, Product code 059X407 )
I downloaded Windows Phone Internals v2.8, downloaded all the files from LumiaFirmware ( www[dot]lumiafirmware[dot]com/model/RM-1075/hwid/059X407 ), then proceeded to try to unlock the bootloader.

I flashed the stock FFU into the phone ( I had it fully updated before ), but still, it mostly hangs with the message "Rebooting phone to Flash mode...", even though the phone already rebooted and is showing the sync symbol. Why does this happen? I have to kill the app and open it again.

Nevertheless, after that, I select the FFU, and the EDE files that I downloaded from the previous website, press unlock bootloader, and it says "Assembling data for unlock". And it stays there for a long time before failing with the message "Failed to write to pipe: 4E4F4B58434242". At this point, the phone reboots.


What am I doing wrong?
 

boortok

New member
Nov 27, 2020
2
0
I had an old Nokia Lumia 925 lying around which is on on windows 8.1 Cyan and thought I would try the WPInternals tool, I have managed to install rom RM-892 and I have unlocked boot loader and have root access and can switch into mass storage etc.
So is there any way to get apps onto the phone ? as I can not download from app store to phone and also lumia 925 does not have an sd card
 
Last edited:

davepascual39

Member
Nov 22, 2017
7
1
Hi, I have a Lumia 635 RM-975 512MB RAM T-Mobile US White (WP 8.1)

I'm having a problem unlocking its bootloader. I have the required files and drivers such as:
  • WPInternals 2.8 and 2.9
  • Windows Phone Recovery Tool
  • Windows Image Designer Tool
  • FFU-image for RM-975 (RM975_01061.00074.14391.37104_RETAIL_prod_signed_1020_00FD3B_TMO-US.ffu)
  • Emergency files (MPRG8x26_fh.ede)
  • Donor FFU-image (RM1085_1078.0053.10586.13169.12742.034EE8_retail_prod_signed.ffu)
I followed the given steps in unlocking the bootloader. From switching Lumia phone to Flash mode and loading the necessary files.
Whenever I click the "Unlock" button in Unlock Bootloader it gives me an error message
"Sequence contains no elements".

Is anyone here can give me a solution for my problem? I really want to unlock its bootloader so I can sideload apps given the Store app is shutdown since. And I can't upgrade to Win10M since supported models that can upgrade must be atleast 1GB RAM vairants and has a Windows 8.10.14xxxxx.

Thanks.
 

davepascual39

Member
Nov 22, 2017
7
1
I had an old Nokia Lumia 925 lying around which is on on windows 8.1 Cyan and thought I would try the WPInternals tool, I have managed to install rom RM-892 and I have unlocked boot loader and have root access and can switch into mass storage etc.
So is there any way to get apps onto the phone ? as I can not download from app store to phone and also lumia 925 does not have an sd card

Have you try this?

 

georgex

Member
Mar 17, 2006
17
0
Athens, Greece
admin.techlink.gr
Hello,

Summary: Got into problems trying to unlock the bootloader, can't get to Windows Phone OS now.

I followed the guide on guides/BL-unlock.md at master · WOA-Project/guides · GitHub to unlock the bootloader on my 950xl, so I can install WoA with dual boot (I want to keep Windows Phone OS).

The Windows Phone OS is version .603

On the Download section of WPInternals I used Search & Download All and this proceeded without problems. Then on Unlock bootloader the phone entered (after many attemps) Mass Storage mode and I assigned a letter to the main OS partition (26GB) but I got a message: "Could not find a part of the path Z:\Windows\System32\BOOT\winload.efi"

I checked on the file system and see that there was no BOOT directory under System32.

I rebooted the phone, then I tried to select Unlock Bootloader again and it says Bootloader is already unlocked.

I try to take a backup of the phone and the phone can't get into Storage Mode.

I also cannot boot Windows Phone, I get in a boot loop with the spinning gears.

I run WPInternals again and select Interrupt Boot process and I get into flash mode, I think (the 2 arrows forming a rectangle).

On the General Info screen of WPInternals I see:

Bootloader: Lumia Bootloader Spec B

On section Bootloader Security:
QFuse: Blown (red)
Valid RDC certificate: Not present (red)
Super dongle: Not authenticated (red)
Effective bootloader security: Enabled (red)

On section Secure Boot technology:
UEFI: Not blown (green)
Secure Boot platform: Enabled (red)
Effective Secure Boot status: Disabled (green)

On section Hardware debugging:
Native JTAG debugging: Disabled (red)

Any suggestions please? Can I at least get back to Windows Phone OS? I get in the spining gears boot loop if on this screen I select boot to Normal mode.
 
Last edited:

georgex

Member
Mar 17, 2006
17
0
Athens, Greece
admin.techlink.gr
Hello,

Summary: Got into problems trying to unlock the bootloader, can't get to Windows Phone OS now.

I followed the guide on guides/BL-unlock.md at master · WOA-Project/guides · GitHub to unlock the bootloader on my 950xl, so I can install WoA with dual boot (I want to keep Windows Phone OS).

The Windows Phone OS is version .603

On the Download section of WPInternals I used Search & Download All and this proceeded without problems. Then on Unlock bootloader the phone entered (after many attemps) Mass Storage mode and I assigned a letter to the main OS partition (26GB) but I got a message: "Could not find a part of the path Z:\Windows\System32\BOOT\winload.efi"

I checked on the file system and see that there was no BOOT directory under System32.

I rebooted the phone, then I tried to select Unlock Bootloader again and it says Bootloader is already unlocked.

I try to take a backup of the phone and the phone can't get into Storage Mode.

I also cannot boot Windows Phone, I get in a boot loop with the spinning gears.

I run WPInternals again and select Interrupt Boot process and I get into flash mode, I think (the 2 arrows forming a rectangle).

On the General Info screen of WPInternals I see:

Bootloader: Lumia Bootloader Spec B

On section Bootloader Security:
QFuse: Blown (red)
Valid RDC certificate: Not present (red)
Super dongle: Not authenticated (red)
Effective bootloader security: Enabled (red)

On section Secure Boot technology:
UEFI: Not blown (green)
Secure Boot platform: Enabled (red)
Effective Secure Boot status: Disabled (green)

On section Hardware debugging:
Native JTAG debugging: Disabled (red)

Any suggestions please? Can I at least get back to Windows Phone OS? I get in the spining gears boot loop if on this screen I select boot to Normal mode.

Ok I fixed it by selecting Restore Bootloader ... It took a while though.

Still If anyone has any suggestion how to proceed with WoA...

Thanks
 

Top Liked Posts

  • There are no posts matching your filters.
  • 161
    I am proud to announce the immediate availability of Windows Phone Internals 1.0. This tool allows you to unlock the bootloader of selected Lumia Windows Phone models. After unlocking the bootloader, you can enable Root Access on the phone or create and flash Custom ROM's. I created two video's to demonstrate the features of the tool.

    Root Access allows you to load your own homebrew software onto the phone with high privileges. Apps can escape from their sandboxes. The tool can also create backup-images of the phone and access the file-system in Mass Storage mode. The tool supports most versions of Windows Phone 8.1 and Windows 10 Mobile. For a complete list of supported phones and Operating Systems have a look at the Getting Started section of the tool.

    The download package also contains an SDK, which helps you to easily access the filesystem and registry on the phone from your own homebrew app.

    The tool, SDK and video's are available on my new website:

    www.wpinternals.net

    Update december 23rd:

    Windows Phone Internals version 1.1 is released. It has a fix for the audio-issue when Root Access is enabled and it supports Root Access on the latest Windows 10 Mobile build 10.0.10586.36. You can find the new version of the tool in the Download section on wpinternals.net

    It seems there were extra integrity checks for playing media. I fixed this for audio-playback. I will create a generic fix later, but this will work for now. If you already have Root Access and you experience the Audio-issue, just "Enable Root Access" again on the phone.

    Update december 29th:

    A small update this time. Changes in this version:

    • Compatibility improvement for Windows 7. In previous versions "Enable Root Access" could result in "Failed to enable Root Access on MainOS".
    • "Restore bootloader" now uses a different Flashing interface. Previously, when you restored the bootloader, you were forced to do a full flash afterwards. With this new method you can keep your current Windows Phone installation. Remember that you need to disable Root Access before you restore the bootloader.
    • Many small fixes and tweaks.
    30
    FAQ

    If your question is not answered here, please watch my instruction video's and read the "Getting started" section in my tool. I spent a lot of time to explain everything. If you have more questions, they are probably already answered there.

    Can we run Android on Lumia now?

    Why people ask this is beyond me. If you want Android, buy an Android phone. If you still want it, it will be a big challenge. You can remove UEFI, EFIESP, MainOS and Data partitions and then add hboot and other Android partitions. But then you would still need Android drivers for the Lumia components.

    Which Lumia's are supported by the tool?

    Lumia 520, 521, 525, 620, 625, 720, 820, 920, 925, 928, 1020 and 1320 are supported. These bootloaders can be unlocked.

    Which OS versions are supported?

    For these OS versions Root Access can be enabled. To enable Root Access, the bootloader must be unlocked first.

    • 8.10.12393.890
    • 8.10.12397.895
    • 8.10.14219.341
    • 8.10.14226.359
    • 8.10.14234.375
    • 8.10.15116.125
    • 8.10.15148.160
    • 10.0.10512.1000
    • 10.0.10536.1004
    • 10.0.10549.4
    • 10.0.10581.0
    • 10.0.10586.11
    • 10.0.10586.36
    I will add support for new versions when they get released.

    Why are other Lumia's not supported?

    Other Lumia's have different CPU architectures. And these come with different bootloaders. Some of my hacks depend on the implementation of these bootloaders. Some of my hacks won't work on different bootloaders. I need to find new hacks for these bootloaders. I will try that, but I can't predict when that is ready. The tool has implemented all the basics. So adding new hacks will be easier.

    Why are other brands not supported?

    Same reason. Some hacks work different. I will try to add support for other brands. But I don't know when it is ready.

    I need Emergency Flash Loaders. Where can I get them?

    This search should yield relevant results:

    https://www.google.com/search?q=%22lumia%22+%22emergency%22+%22hex%22

    I need an Engineering SBL3. Where can I get it?

    This search should yield relevant results:

    https://www.google.com/search?q=%22engineering+sbl3s%22

    You can download a full Engineering ROM or a separate SBL3 file. If you select an FFU file in the tool, the tool will extract the SBL3 from the FFU. SBL3 contains hardware-profiles of the phone and it initializes the hardware. Therefore you should only use an alternative SBL3 if it came from a phone that is at least the same brand and CPU architecture as your phone.

    I can't find a matching Engineering SBL3. Can I still unlock my phone?

    Yes. The alternative SBL3 is optional. You can still unlock your bootloader and flash Custom ROM's. But you will not have Mass Storage Mode. So you won't be able to enable Root Access directly on the phone or make a full backup-image of the phone. But you can still flash Custom ROM's and enable Root Access on the Custom ROM's. Use the second method from my "Unlock" video.

    I unlocked my phone and now my audio is gone. Why?

    This is an issue with Root Access in Windows Phone Internals 1.0. Update to Windows Phone Internals 1.1 and then choose "Enable Root Access" again.

    Can I SIM-unlock my phone with this tool?

    No. SIM-unlock is illegal in some countries. I don't support SIM-unlock.
    23
    Engineering SBL3s

    Here are engineering SBL3s for quite a few models that WPInternals currently supports ;)
    Precisely, the 520, 620, 625, 810, 820, 822, 920, 925 and the 1020
    15
    I found a solution for the Audio-issue when enabling Root Access. It is actually a work-around. It needs a better solution. But for now, it will do. Will take me a bit of time to implement it, but a new version of the tool is in the making. :)
    14
    Windows Phone Internals 1.1 released

    This is my Xmas-present for you! Version 1.1 has a fix for the audio-issue when Root Access is enabled and it supports Root Access on the latest Windows 10 Mobile build 10.0.10586.36. You can find the new version of the tool in the Download section on wpinternals.net

    It seems there were extra integrity checks for playing media. I fixed this for audio-playback. I will create a generic fix later, but this will work for now. If you already have Root Access and you experience the Audio-issue, just "Enable Root Access" again on the phone.

    Best Wishes for Peace, Joy and lots of Hacking in this Holiday Season!
Our Apps
Get our official app!
The best way to access XDA on your phone
Nav Gestures
Add swipe gestures to any Android
One Handed Mode
Eases uses one hand with your phone