Database Users

Installation Failures for Insanely Large Apps

Over the past few months since 'Grocery iQ' has been out, I have been trying to install it. Despite trying it on several different ROMs on my old G1 and now several different ROMs on my Slide (including now Froyo) it seems that it doesn't like to install. From my experience it is the biggest direct-download from the Market that I have come across weighing in at 8.01MB - by 'direct-download' I mean that the application itself is downloaded entirely from the Market and the size I reference isn't from 'additional' files downloaded to the SD card after running the program.
Everytime I try to install it the system just says 'Installation Unsuccessful' and one time I got an error code: -18 (on Eugene's Froyo Kanged RC1). Fortunately I'm fluent enough with the device to have my SDK setup and I grabbed a logcat from the adb server. Using what debugging mind-set I've had from coding I was able to find the problem is:
Code:
D/VoldCmdListener( 122): asec list
I/PackageHelper( 1703): Size of container 10 MB 8401843 bytes
D/VoldCmdListener( 122): asec create smdl2tmp1 10 fat {} 10010
E/Vold ( 122): ASEC file '/mnt/secure/asec/smdl2tmp1.asec' currently exists - destroy it first! (No such file or directory)
W/Vold ( 122): Returning OperationFailed - no handler for errno 98
E/PackageHelper( 1703): Failed to create secure container smdl2tmp1
E/DefContainer( 1703): Failed to create container smdl2tmp1
What exactly is happening here? It almost looks like it's trying to create a secure environment for the install or the program uses copy-protection. Can someone please elaborate on this - hopefully a dev?
Thanks!

Im not a dev but i think its a copy-protection because some copy-protected apps dont install correctly for me from the market/through backup/ but they tend to work when i get it off a site hope this helps or the app has a problem itself, some apps do.

TakoLuffer said:
Im not a dev but i think its a copy-protection because some copy-protected apps dont install correctly for me from the market/through backup/ but they tend to work when i get it off a site hope this helps or the app has a problem itself, some apps do.
Click to expand...
Click to collapse
It's strange that they would copy-protect a free application, but not much surprises me now-days, lol.

nbetcher said:
It's strange that they would copy-protect a free application, but not much surprises me now-days, lol.
Click to expand...
Click to collapse
See my post on your thread in development.

[app2sd] Installing applications on a flash card

App2sd from 4PDA
Fundamentally new script!
Harder! Better! Faster! Stronger! (c)
!!!Only for LG GT540 Optimus!!!
!!!Only for Android 2.1 version!!!
Applications are installed on a memory card full! Internal memory is when you install the application does not decrease!​
Hi All!
I am glad to introduce you to a completely new script to install applications on your memory card.
Installation manual​Mandatory conditions:
1. To create two partitions on the card. First - fat32, second - ext2.
If you already have a partition ext2, it MUST re-create!
2. Place on sdcard into your fat32 partition two folders from archive - gsript and app2sd. Path must by: sdcard/gscript and sdcard/app2sd.
3. Reflash your phone using the formula: Hard reset -> Firmware -> Hard reset.
4. Make root.
Do not use z4root software
5. Install GScript Lite software from Market.
6. Use GScript Lite for run script.
During installation, you should see only two messages: "ext2 partition mounted, copying applications" and "Done! You can restart". If you see other messages - nothing happened.
7. Wait the bottom will be "Close" button to count down, click on it and then - reboot (not the phone itself will reboot and you need torestart the the phone !). Reloaded by phone (with knock drop call ... press and hold and select "Disable Phone" ... No script to reboot DO NOT USE!
Recommendations:​1. Script may work fine with a memory card that is supplied when you buy the phone. But I recommend you use a memory card from a class 6 and above.
2. If you notice that when you unlock the device gave reports of mounting a memory card, these cards can not be used!
3. Do not remove sdcard! Did it, if your phone is power off.
4. You may turn on your device without sdcard, but programms installed after apply script will not work yet.
Liryc: When testing the script was installed applications totaling more than 600 megabytes, and the unit at the same time felt great! Naturally we must understand that the cold boot the phone itself slightly increased, but at the time of the machine is behaving very well, fast and stable.
Reference to the original post: http://4pda.ru/forum/index.php?s=&showtopic=187486&view=findpost&p=6426539

RaiBinger said:
leaving parts of the program into your phone.
Click to expand...
Click to collapse
Im assuming you ment to type 'WITHOUT leaving parts of the program in your phone'?
So you are saying that nothing at all will be taking from the phones internal memory no matter how many apps you install to the SD? Well if thats the case then you have solved my problem. I think I may give this one a shot... Thanks!

skribbler86 said:
Im assuming you ment to type 'WITHOUT leaving parts of the program in your phone'?
So you are saying that nothing at all will be taking from the phones internal memory no matter how many apps you install to the SD? Well if thats the case then you have solved my problem. I think I may give this one a shot... Thanks!
Click to expand...
Click to collapse
Yes, after using this script - the application will be placed on a flash card memory is full and will not diminish.
skribbler86 said:
Im assuming you ment to type 'WITHOUT leaving parts of the program in your phone'?
Click to expand...
Click to collapse
Yes, that's what I meant
Once again I apologize for my English

Thanks for the information

We are all waiting for that app.
So all my programs will be instaled on memory card and i will have more room for games
We are talking about android 1.6 ??

plutonxp said:
We are all waiting for that app.
So all my programs will be instaled on memory card and i will have more room for games
We are talking about android 1.6 ??
Click to expand...
Click to collapse
No! Only for Android 2.1!
If You need, i will place here rar pack for Android 1.6.

If you use this method, don't ever remove the SDcard. If you remove, your phone will not work.
This method also move /data/data to SDcard. That means data of stock apps was moved to SDcard, and stock apps can't run without it.
Don't ever do a factory reset too. App2sd will gone after factory reset, that means there's no data for stock apps too.
The old method is safer than this one.

Could also find yourself in a big problem if you had an sdcard failure

doubletakeit said:
If you use this method, don't ever remove the SDcard. If you remove, your phone will not work.
This method also move /data/data to SDcard. That means data of stock apps was moved to SDcard, and stock apps can't run without it.
Don't ever do a factory reset too. App2sd will gone after factory reset, that means there's no data for stock apps too.
The old method is safer than this one.
Click to expand...
Click to collapse
Not exactly. Memory card can pull out your phone and boot the phone without the memory card is also possible, only you will not run any application installed from the Market or by appinstaller. However, all applications that are installed in the firmware the phone will function normally. If you think that I'm wrong, then ask yourself .... why did my phone after many tests still work? About resetting to factory ... it should be done after you remove the memory card from your phone. It's simple ... need only think of his head However, use this script or not - you decide!

RaiBinger said:
Not exactly. Memory card can pull out your phone and boot the phone without the memory card is also possible, only you will not run any application installed from the Market or by appinstaller. However, all applications that are installed in the firmware the phone will function normally. If you think that I'm wrong, then ask yourself .... why did my phone after many tests still work? About resetting to factory ... it should be done after you remove the memory card from your phone. It's simple ... need only think of his head However, use this script or not - you decide!
Click to expand...
Click to collapse
Sorry, I didn't read the script carefully, it will just copy data to SDcard and will not move anything so data of stock apps is still on the phone memory.
busybox cp -r -p /data/app /system/sdcard ;
busybox cp -r -p /data/dalvik-cache /system/sdcard ;
busybox cp -r -p /data/data /system/sdcard ;
busybox cp -r -p /system/media /system/sdcard ;
Click to expand...
Click to collapse

Quick question.. how did the gt540 jump that high on the benchmark?
I'm sure putting and using apps on the sdcard can't surely increase its performance that drastically. Or can it?

skribbler86 said:
Quick question.. how did the gt540 jump that high on the benchmark?
I'm sure putting and using apps on the sdcard can't surely increase its performance that drastically. Or can it?
Click to expand...
Click to collapse
Only green bar was increased.
Look at the bottom of the images, you will see the I/O was increased from 352 to 3512

doubletakeit said:
Only green bar was increased.
Look at the bottom of the images, you will see the I/O was increased from 352 to 3512
Click to expand...
Click to collapse
Exactly! such a result from the use of an ext2 file system on your sdcard.

Last edited by RaiBinger; 16th October 2010 at 04:33 PM. Reason: Update is coming soon!
^^
What will change with the update?
As for the high benchmark points in I/O. Does the phone overall feel faster or can you just see it in benchmarks?
Thx in Advance
Skip

Skkip said:
Last edited by RaiBinger; 16th October 2010 at 04:33 PM. Reason: Update is coming soon!
^^
What will change with the update?
As for the high benchmark points in I/O. Does the phone overall feel faster or can you just see it in benchmarks?
Thx in Advance
Skip
Click to expand...
Click to collapse
Please Wait. Update coming soon again. Speed will be felt not only in the test.

RaiBinger said:
On your phone, you need to Hard Reset and install appinstaller and GScript Lite (as well as to use a script to install a third-party Launchers and keyboard and other system applications, replacing the default application).
Click to expand...
Click to collapse
Does this mean i can not simply install a keybord like "swift keybord" or "swipe",
or at least normaly over the market like without the App2SD modification?

OxKing said:
Does this mean i can not simply install a keybord like "swift keybord" or "swipe",
or at least normaly over the market like without the App2SD modification?
Click to expand...
Click to collapse
This warning is no longer relevant! You can use the script immediately after a hard reset and install any application in any desired order.
But please wait!
Follows the date of updating the first post.

In your first post you have mentioned that ext2 filesystem should be first. But later on you say fat32 should be first?

RaiBinger said:
No! Only for Android 2.1!
If You need, i will place here rar pack for Android 1.6.
Click to expand...
Click to collapse
I would like to know, how can i install applications in SD card. I am using LG Optimus (GT540), Android 1.6. And i am not an expert in installation and write scripts

my phone does a funny thing where every time i unlock it it takes a few minuites to find teh memory card, could this be a problem if i were to install this script?

WP8 SYSTEM registry files from FFU

I found where the system registry files are stored inside the ffus. This is from my Lumia 928 factory ffu.
Code:
\Windows\System32\config - DEFAULT, DRIVERS, FP, ProvisionStore, SAM, SECURITY, SOFTWARE, SYSTEM
\Windows\System32\config\MOUNTMGR - SYSTEM
\Windows\System32\config\unmodified - BCD, DEFAULT, DRIVERS, NTUSER.DAT, SAM, SECURITY, SOFTWARE, and SYSTEM
\EFIESP(Different Partition)\Windows\System32\config\unmodified - BCD, DEFAULT, DRIVERS, NTUSER.DAT, SAM, SECURITY, SOFTWARE, and SYSTEM
BCD, DEFAULT, DRIVERS, NTUSER.DAT, SAM, SECURITY, SOFTWARE, and SYSTEM
All of these files contain regf as the first few characters in hex. Beyond that, the files are mostly garbage looking at them in Notepad++.
I haven't been able to find any registry editors yet that can edit them, including ones built for Windows CE/Mobile or even Win7/8.
Anyone know of something that can display it in a normal fashion? (without needing a WP8 device to attempt to edit it on.)
EDIT: The files from \Windows\System32\config have been zipped for simplicity reasons (for those of you who don't have a ffu handy)
EDIT2 (August 22): The files from the GDR2/Amber update from my phone's rom have been added.
WalkingCat said:
OK, this is a reply to this thread, but apparently I can't post in that forum yet.
So, you've found registry file inside \Windows\System32\config, and this is the way to open and edit it.
No third-party tools needed, just use regedit.exe in your Windows system
1. Run regedit.exe
2. Click on any root key, like HKEY_LOCAL_MACHINE
3. Open File menu, select Load Hive
4. Select a file in your mounted ROM \Windows\System32\config, like SOFTWARE or SYSTEM, open it
5. In the dialog asking for a name, input any text, like WP8Software
6. Registry is now loaded under HKEY_LOCAL_MACHINE\WP8Software, you can edit it.
7. Open File menu, select Unload Hive, then its written back to disk.
reference: http://technet.microsoft.com/en-us/library/cc732157.aspx
Click to expand...
Click to collapse

Check this post : http://forum.xda-developers.com/showpost.php?p=44312736&postcount=41
I used 7zip to extract the file

vivekkalady said:
Check this post : http://forum.xda-developers.com/showpost.php?p=44312736&postcount=41
I used 7zip to extract the file
Click to expand...
Click to collapse
That works fine for .wim or a .zip, but these files are the complete registry store that's same format that Windows 2000, XP, Vista, ect. uses to store the settings for hardware/drivers, windows itself, and other apps that have that kind of access (e.x. Tier3 Applications)

If it's same format as XP/Vista type it should be easy openable, look for the application on the internet.

GodlikePL said:
If it's same format as XP/Vista type it should be easy openable, look for the application on the internet.
Click to expand...
Click to collapse
Apparently it isn't. I used RegistryEditorPE, that's supposed to work with offline registries for 2000 to 7, but it kept erroring out.
Sent from my RM-860 (Lumia 928) using the OFFICIAL Tapatalk app.

This is good stuff to know. Something that should be good to note is that while I decompiled the .NET for a few of the Verizon Xaps from the 928 ROM, I discovered some Nokia-specific COM Interop that interfaces with the registry. I'm hoping I can try something out and put up a test program within the next few days and make some registry changes.

Hi
I found a registry key
[HKEY_LOCAL_MACHINE\Software\Microsoft\Office Mobile\SPMC\Action\doc]
"Application"=dword:00000005
"ApplicationCommand"="app://5B04B775-356B-4AA0-AAF8-6491FFEA5617/Default?CmdLine=-url %s"
"Action"=dword:00000003
this is for Microsoft office Word
I think we can open word using the link i guess (app://5B04B775-356B-4AA0-AAF8-6491FFEA5617/)
so is this part useful?
can external commands executable through this part (CmdLine=-url %s) ??
something like this
http://dotnet.dzone.com/articles/windows-phone-7-tip-day-know

@snickler: Let me know if you succeed with that. I managed to sideload an app using one of those libraries (after removing nearly all the interesting capabilities...), but immediately got an error about the component not being registered. I didn't try running regsvr or anything, though...

GoodDayToDie said:
@snickler: Let me know if you succeed with that. I managed to sideload an app using one of those libraries (after removing nearly all the interesting capabilities...), but immediately got an error about the component not being registered. I didn't try running regsvr or anything, though...
Click to expand...
Click to collapse
Hmmm, which phone do you have?
Edit: I tried to deploy just a sample app with one of the .winmds referenced, and got the 0x81030120 error
Holy fuzzle.. ANOTHER EDIT: I was able to do it. I had to remove all the damn Capabilities that I added from the Nokia Maps xap though.
I referenced the NokiaRegistryUtils.winmd and just ran this sample code
MessageBox.Show(NokiaRegistryUtils.Registry.IsChinaFirmware().ToString());
It returned "false" as expected.
I'm going to try something else now.
Something to note, in the WMAppManifest.xml, the following needs added after the <Tokens> declaration
<ActivatableClasses>
<InProcessServer>
<Path>NokiaRegistryUtils.dll</Path> <-- or whatever dll you're adding
<ActivatableClass ActivatableClassId="NokiaRegistryUtils.Registry" ThreadingModel="both" />
</InProcessServer>
</ActivatableClasses>

vivekkalady said:
Hi
I found a registry key
[HKEY_LOCAL_MACHINE\Software\Microsoft\Office Mobile\SPMC\Action\doc]
"Application"=dword:00000005
"ApplicationCommand"="app://5B04B775-356B-4AA0-AAF8-6491FFEA5617/Default?CmdLine=-url %s"
"Action"=dword:00000003
this is for Microsoft office Word
I think we can open word using the link i guess (app://5B04B775-356B-4AA0-AAF8-6491FFEA5617/)
so is this part useful?
can external commands executable through this part (CmdLine=-url %s) ??
something like this
http://dotnet.dzone.com/articles/windows-phone-7-tip-day-know
Click to expand...
Click to collapse
Where did you find that key?

in ffu file
location <ffu mount>\Windows\Packages\RegistryFiles\Microsoft.Office.Word.reg

Perfect. That's what I'm doing now, but just from my 920 ROM dump. I can access the registry sections that Nokia provides in their app, but I can't from the one you provided me. I'm going to do more tests to see if this is using HKCU rather than HKLM. It could also be that the registry keys have permissions placed on them.

Hmm,
I'm able to get the value of SOFTWARE\Classes\MIME\Database\Codepage\1254 -> BodyCharset

I may write a simple app that reads registry from Lumia devices... I think that's going to happen today.

found these things dont know it is of any use
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.4.1.311.10.3.3]
"$DLL"="C:\\Windows\\System32\\WINTRUST.DLL"
"CallbackAllocFunction"="SoftpubLoadDefUsageCallData"
"CallbackFreeFunction"="SoftpubFreeDefUsageCallData"
"DefaultId"="{573E31F8-AABA-11D0-8CCB-00C04FC295EE}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.5.5.7.3.1]
"$DLL"="C:\\Windows\\System32\\WINTRUST.DLL"
"CallbackAllocFunction"="SoftpubLoadDefUsageCallData"
"CallbackFreeFunction"="SoftpubFreeDefUsageCallData"
"DefaultId"="{573E31F8-AABA-11D0-8CCB-00C04FC295EE}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.5.5.7.3.2]
"$DLL"="C:\\Windows\\System32\\WINTRUST.DLL"
"CallbackAllocFunction"="SoftpubLoadDefUsageCallData"
"CallbackFreeFunction"="SoftpubFreeDefUsageCallData"
"DefaultId"="{573E31F8-AABA-11D0-8CCB-00C04FC295EE}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.5.5.7.3.3]
"DefaultId"="{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Usages\2.16.840.1.113730.4.1]
"$DLL"="C:\\Windows\\System32\\WINTRUST.DLL"
"CallbackAllocFunction"="SoftpubLoadDefUsageCallData"
"CallbackFreeFunction"="SoftpubFreeDefUsageCallData"
"DefaultId"="{573E31F8-AABA-11D0-8CCB-00C04FC295EE}"
Click to expand...
Click to collapse
http://support.microsoft.com/kb/287547

vivekkalady said:
found these things dont know it is of any use
http://support.microsoft.com/kb/287547
Click to expand...
Click to collapse
I did find THIS..
Code:
[HKEY_LOCAL_MACHINE\Software\Microsoft\DeviceReg\Install]
"MaxUnsignedApp"=dword:7FFFFFFF"
That translates to the value of InterOp unlock by default which means we should be able to sideload more than 10 apps at a time.
I also found these within policy xml files
Code:
Microsoft.BaseOS.SecurityModel.policy.xml
<Capability ElementID="2EF45E94A01864DE3387212D6E73AEA885E709AD0F24FB97FE2E84728CB09D14" AttributeHash="49B8EC80A54998B68D7F65A44A340FD28B535494B7A41D650FD94851E38A6B6B" Id="ID_CAP_DEVELOPERUNLOCK" AppCapSID="S-1-15-3-1024-2489250862-3731101856-757172019-2830005102-2903107461-2549818383-1921265406-345878668" SvcCapSID="S-1-5-21-2702878673-795188819-444038987-1443" FriendlyName="Enable bearing chamber to load unsigned modules" Visibility="Internal" />
<Capability ElementID="BAFBED1970753822A266C1985F4A2CA2BA7A97CCE149F874743D00F678643C26" AttributeHash="54A2744DE064E139FD4403623C2AB9F1E130BC5C0786F56C1CE39AC814DC3F03" Id="ID_CAP_DEVELOPERUNLOCK_API" AppCapSID="S-1-15-3-1024-435026874-574125424-2562811554-2720811615-3432479418-1962428897-4127210868-641492088" SvcCapSID="S-1-5-21-2702878673-795188819-444038987-1450" FriendlyName="Enable setting of registry key protecting developer unlock mode." Visibility="Internal">
<CapabilityRules>
<Rules>
<RegKey ElementID="F0921CC3ADB2FEE5B7DC90F9F2BBDDB6E4D7BFAF9CE189C1585A90CD71E36882" DACL="(A;CI;KRKW;;;S-1-15-3-1024-435026874-574125424-2562811554-2720811615-3432479418-1962428897-4127210868-641492088)(A;CI;KRKW;;;S-1-5-21-2702878673-795188819-444038987-1030)(A;CI;KRKW;;;S-1-5-21-2702878673-795188819-444038987-1450)" Flags="515" Path="HKEY_LOCAL_MACHINE\Software\Microsoft\SecurityManager" />
</Rules>
</CapabilityRules>
</Capability>
<Capability ElementID="BAFBED1970753822A266C1985F4A2CA2BA7A97CCE149F874743D00F678643C26" AttributeHash="54A2744DE064E139FD4403623C2AB9F1E130BC5C0786F56C1CE39AC814DC3F03" Id="ID_CAP_DEVELOPERUNLOCK_API" AppCapSID="S-1-15-3-1024-435026874-574125424-2562811554-2720811615-3432479418-1962428897-4127210868-641492088" SvcCapSID="S-1-5-21-2702878673-795188819-444038987-1450" FriendlyName="Enable setting of registry key protecting developer unlock mode." Visibility="Internal">
<CapabilityRules>
<Rules>
<RegKey ElementID="F0921CC3ADB2FEE5B7DC90F9F2BBDDB6E4D7BFAF9CE189C1585A90CD71E36882" DACL="(A;CI;KRKW;;;S-1-15-3-1024-435026874-574125424-2562811554-2720811615-3432479418-1962428897-4127210868-641492088)(A;CI;KRKW;;;S-1-5-21-2702878673-795188819-444038987-1030)(A;CI;KRKW;;;S-1-5-21-2702878673-795188819-444038987-1450)" Flags="515" Path="HKEY_LOCAL_MACHINE\Software\Microsoft\SecurityManager" />
</Rules>
</CapabilityRules>
</Capability>

Need a Nokia Device?
snickler said:
I may write a simple app that reads registry from Lumia devices... I think that's going to happen today.
Click to expand...
Click to collapse
Thats great! If anyone needs a Nokia device to test on, Nokia has Remote Device Access to those who need it. Its a free service to anyone who has a Nokia DEVELOPER account, which is separate but free as well. The devices they mostly have are Lumia 820s, but the have a few others (620, 720, 920 and the 928.) The great thing about them, you can deploy an xap and run the apps. Some of those phones have sims in them and some of them have a "Nokia On-Device Diagnostic Tool". The only drawback, is that the connection can be SLOW.

Huh, you had to add the InProcServer manually? That may be the problem, then. I'm not sure why they're using COM - it works just fine to simply use the native Win32 APIs (add references to ADVAPI32LEGACY.LIB and/or KERNELBASE.LIB; that's what my NativeAccess library does and it works fine) - but it's good to know that COM is, in fact, usable.

Yeah, I already found those policy files. As I've said in other posts, if you can find a way to sideload an app that uses them, we can do a lot more than is currently possible - the internal and private capabilities (and some of the so-called public ones, most of which still won't install) have all kinds of cool potential.
One advantage of the WP8 app model, as opposed to the WP7 model that used ID_CAP_INTEROPSERVICES for everything, is that an app like you're making may well work on other devices. The fact that you got the interop-lock error means that the app did have ID_CAP_INTEROPSERVICES specified, so it may use it for some things, but the registry access is probably not one of them.

GoodDayToDie said:
Yeah, I already found those policy files. As I've said in other posts, if you can find a way to sideload an app that uses them, we can do a lot more than is currently possible - the internal and private capabilities (and some of the so-called public ones, most of which still won't install) have all kinds of cool potential.
One advantage of the WP8 app model, as opposed to the WP7 model that used ID_CAP_INTEROPSERVICES for everything, is that an app like you're making may well work on other devices. The fact that you got the interop-lock error means that the app did have ID_CAP_INTEROPSERVICES specified, so it may use it for some things, but the registry access is probably not one of them.
Click to expand...
Click to collapse
The best part is that the Nokia CityLens uses ID_CAP_INTEROPSERVICES, but I can't find anything that references it.
The winmds use System.Runtime.InteropServices though.
The Nokia app I got the RegistryRT from didn't use the INTEROP Capability at all, but I did notice that I had to add that extra stuff in the AppManifest.

SUCCES! Adding content to HTC 8S stock Rom

Hey guys, I don't know if this is of any use for you, but I think it won't hurt to share it.
Based on some posts and ideas I read in different threads, I managed to write to the EFIESP and the PLATpartition of the stock rom of my HTC 8S. I changed the bootimages in the PLAT partition to a custom one,flashed the image and it worked. I'll attach a picture to prove it and if that's not enough, I will post a video.
So, the first step is to download the stock rom (obviously...) and extract the .exe file. (I use 7-ZIP) Then there is a file called "RUU_signed.nbh". If you open it with a Hex Viewer, like HxD, you can find multiple partition Headers. I found 4 that I can use, the rest is encrypted with what appears to be Bitlocker, hence the different headers. Now, what I did was mark the area of the first partition (starts approximately at offset 228BEF90 and is a FAT16 Partition) and continued the selection until the end of the file. Then I created a new one and pasted it. I ddid the same with the rest, always selecting and copying from where the partition starts until the end of the whole file and pasted it into a new one. Then I mounted the files using OSFMount and voilà, you can put stuff and files in there! If you finished, you just unmount the files. Then I opened each file again with HxD, selected EVERYTHING and pasted it
to the according area in the original RUU_signed.nbh. I started with the first one, then the second and so on, so you don't overwrite the changes you have made if you start in reverse order. After packing the file, I tried to flash it and to my surprise, IT WORKED! After rebooting I saw my custom bootimage! Downside of this is obviously that it requires you to use the stock firmware and it will be overwritten once you update your device. But I hope our skilled Devs here have some use for those 2 partitions. Theres 2 more that are usable, but I don't know their names, but you can still put files in them.
Now again, I don't know if this is of any use for you devs, but I still felt kind of obligated to share it
Stupid thing, I put my HTC 8S into Diag Mode and THEN flashed it, now it doesn't connect as MTP but as HTC Diagnostic Interface and I can't change it back because I can't deploy anything to the device. It works perfectly, boots and everything, but no USB Connection via MTP. So be very careful before flashing, since the mode is determined by a NV value which you can't edit afterwards.
This is not a tutorial to be followed by everyday users, but something ment for developers. You do everything at your own risk! And keep in mind that this has only been tested on an HTC 8S!
cheers, hutchinsane_

Yeah, I heard that it is possible, though I hadn't had a chance to test it on my 8X.
As for EFIESP: you can edit \efi\Microsoft\Boot\BCD to enable Kernel Debugger functionality and it is basically enough to hack the whole OS even with actions currently performed.
The most interesting partitions are MainOS (second to last), and Data (last one). Interop Unlock can be done in MainOS.
Thing is that newest ROMs are encrypted (not hard to crack but still)

Darn, hoped I was the first to come up with the idea. I do have acces to the file you're talking about. MainOS seems to be encrypted with Bitlocker since their headers start with -FVE-FS-. I could take a look into the 8X Rom aswell, I expect the situation to be the same. So is there a thread on the Kernel Debugger thing?
EDIT: I just did what you set, although I used a program called "Visual BCD Editor" since I don't know about editing the BCD Store just YET. Now I edited some values from "False" to "True" and for 1 second it showed me what appeared to be a windows boot selection. Now when I boot up, and once the "Windows Phone" blueish logo appears, it shows "Not for resale", meaning that we actually can edit BCD on this device!

Very nice Work
I run in Nokia Lumia 920 RM-821 APAC Malaysia Amber ROM
I find the same
Maybe we can edit Lumia 920 FFU and get first Custom ROM

that's enough to enable WinDbg operopability.
Code:
bcdedit /store F:\EFIESP\efi\Microsoft\Boot\BCD /dbgsettings usb targetname:woatarget
bcdedit /store F:\EFIESP\efi\Microsoft\Boot\BCD -set {default} debug on
bcdedit /store F:\EFIESP\efi\Microsoft\Boot\BCD -set {default} dbgtransport kdusb.dll

Sorry for my Question but how can we find that here is the end of a file in HxD .
I'm now looking for it to flash a Custom Rom on my Lumia 920 but I can't build images correctly using HxD and OSFMount.
Thanks .

@ngame Thanks If you look at your first 2 screenshots, you didn't select the "ë" You MUST select and copy it aswell, it's always the start of a partition, fot FAT aswell as for NTFS. After that, you should be able to mount. For finding the end, I didn't. I just Selected until the end of the file and pasted it back in. It should work, Afterall, my HTC has a "custom" rom aswell now, since there's a custom bootimage
@ultrashot Thanks! I used the commands and it worked succesfully. Waiting on the phone to flash now
EDIT: It doesn't boot once you set a) the target b) the type or something else. but enabling the kernel debugger itself works. Trying to figure out which value makes it unbootable.

ngame said:
Sorry for my Question but how can we find that here is the end of a file in HxD .
I'm now looking for it to flash a Custom Rom on my Lumia 920 but I can't build images correctly using HxD and OSFMount.
Thanks .
Click to expand...
Click to collapse
u must ask me dude .
zimone die

amir323b said:
u must ask me dude .
zimone die
Click to expand...
Click to collapse
PM Me please if you know
Thanks
hutchinsane_ said:
@ngame Thanks If you look at your first 2 screenshots, you didn't select the "ë" You MUST select and copy it aswell, it's always the start of a partition, fot FAT aswell as for NTFS. After that, you should be able to mount. For finding the end, I didn't. I just Selected until the end of the file and pasted it back in. It should work, Afterall, my HTC has a "custom" rom aswell now, since there's a custom bootimage
Click to expand...
Click to collapse
I will test again

Sorry in advance if this is a stupid question ...
Here is a list of partitions from my 928 .ffu but which ones are needed to edit? Just the FAT and NTFS partitions? Are any of the others of any interest?

As far as I know, you have to look for the specific headers, since some are encrypted with Bitlocker, therefor have the "-FVE-FS-" header. Easiest way is to use the search function of HxD and search for NTFS, FAT12 and FAT16 partitions Also, there are no stupid questons

hutchinsane_ said:
As far as I know, you have to look for the specific headers, since some are encrypted with Bitlocker, therefor have the "-FVE-FS-" header. Easiest way is to use the search function of HxD and search for NTFS, FAT12 and FAT16 partitions Also, there are no stupid questons
Click to expand...
Click to collapse
:highfive: Here's a better list including the device layout and read and write partitions if it helps anyone. Also when mounting FAT16 or FAT12 partitions it says it needs to be formatted or is unsupported. What am I doing wrong???

Can you ost a screenshot of the file you use as a partition? I don't know if it even works with Nokia Roms. Which one are you using exactly? I might be able to have a look at it.

feherneoh said:
Don't try it on Lumias, as your phone will stuck in Quallcomm HS-USB QDLoader mode, like my L520 did
Click to expand...
Click to collapse
You tried this way ?
now you can't flash your Phone using Care Suite ?
did you try Reffbox or ATF to repair your Boot Loader and flash your phone again ?

Hey, Lumia owners, get out of here!
By the way, Huawei W1 has same access to partitions. You can join forces and develop one hack for both phones.

-W_O_L_F- said:
Hey, Lumia owners, get out of here!
By the way, Huawei W1 has same access to partitions. You can join forces and develop one hack for both phones.
Click to expand...
Click to collapse
I think @reker can help us . he created a W1 Custom Rom

ngame said:
I think @reker can help us . he created a W1 Custom Rom
Click to expand...
Click to collapse
Not rom any more, I'm making tool can directly operate NTFS, so I can modify everything without losing any data. A hard work XD

reker said:
Not rom any more, I'm making tool can directly operate NTFS, so I can modify everything without losing any data. A hard work XD
Click to expand...
Click to collapse
Can't you publish it ? or Private send it to me ?
This tool can modify every NTFS Partition ?

@-W_O_L_F- They do? Didn't know that, thanks for the info! Yeah, might be a good idea, actually.
@reker how do you plan on doing this? adding the tool to the rom or deploying it as a xap? I actually need a way to use hidden pages without the toast launcher, or to include the toast launcher into the rom since I can't deploy it anymore

ngame said:
Can't you publish it ? or Private send it to me ?
This tool can modify every NTFS Partition ?
Click to expand...
Click to collapse
Proto-type now, NTFS is a biiiiiig thing. I will release it when finish.

Install location of the appx?

Hi guys,
I just unlocked Sammy Odyssey (thanks WOLF & GoodDayToDie) and upgraded to PfD 8.1 (all done without using MBN Creator). Full FS access is enabled and I can see the handset file system (but partially probably?)
I can access installed (sideloaded or from store) apps in "Data\programs" but when I sideloaded an appx bundle app (just for educational purposes, I'll not provide any link because of xda's anti-warez policy), I can't find installed application...
Does anyone know where they are (appx applications) installed?

sensboston said:
Hi guys,
I just unlocked Sammy Odyssey (thanks WOLF & GoodDayToDie) and upgraded to PfD 8.1 (all done without using MBN Creator). Full FS access is enabled and I can see the handset file system (but partially probably?)
I can access installed (sideloaded or from store) apps in "Data\programs" but when I sideloaded an appx bundle app (just for educational purposes, I'll not provide any link because of xda's anti-warez policy), I can't find installed application...
Does anyone know where they are (appx applications) installed?
Click to expand...
Click to collapse
Because installation Directory of appx files are different .
as I remember it was in :
C:\ProgramFiles (or Programs)\WindowsApps(or Windows Apps)
in SD Card :
D:\WPSystem\Windows Apps
hope you find the directory
so sorry , my phone didn't Unlocked yet and I don't know many things

Thanks. Looks like this folder is invisible via MTP (full FS access), probably, some WP8-specific file attributes are set.

Your MTP service is probably running under the PROTOCOLS account, rather than as SYSTEM. PROTOCOLS (the normal account for MTP) can't see that folder, but SYSTEM can. No WP8-specific attributes, just very tight permissions. If you try to browse to it using Native Access Fileserver (AllCapabilities version, of course) you may be able to read there, though (haven't actually checked).

GoodDayToDie, unfortunately all caps not working on PfD 8.1 And "yes", I agree, looks like it's a permission issue...

sensboston said:
GoodDayToDie, unfortunately all caps not working on PfD 8.1 And "yes", I agree, looks like it's a permission issue...
Click to expand...
Click to collapse
did you unlock RPCComponents via creating Non-Production file ?

ngame said:
did you unlock RPCComponents via creating Non-Production file ?
Click to expand...
Click to collapse
Yes I did but EnableAllSideloading is not working (but BootstrapSamsung is working).
Sounds like we should rename proud name "Full FS access" to "Partial FS access" - it will be more realistic

sensboston said:
Yes I did but EnableAllSideloading is not working (but BootstrapSamsung is working).
Sounds like we should rename proud name "Full FS access" to "Partial FS access" - it will be more realistic
Click to expand...
Click to collapse
In WP8.1 I tried to unlock capabilities and yes it doesn't work with the old ways
I need an Ativ S to unlock Capabilities on GDR2 or GDR3 and then update to 8.1 and see what changed in registry !
for full fs you are a developer you can downgrade to GDR2 and then upgrade to 8.1
develop an app that get folders from Path ("C:") then using Directory Info class change all folder type as Normal I think .
you can see all of them using MTP connection
but please pay attention I didn't test this way and it may not work or it can brick your phone I don't know it . 
 @GoodDayToDie : Any Idea ?

@ngame, do you know how to downgrade Verizon's ATIV Odyssey SCH-i930? I can't find firmware for this handset...
BTW, do we have an advanced file manager for interop unlocked phones (for sideload only of course)? I think, even if appx folder isn't available to get in (like on desktop Windows, C:\Program Files\WindowsApps), it should be visible somehow in the Program Files...
I will try to insert sd-card to the phone, and select default installation patch to the sd-card - maybe this solves appx location problem...

ngame said:
In WP8.1 I tried to unlock capabilities and yes it doesn't work with the old ways
I need an Ativ S to unlock Capabilities on GDR2 or GDR3 and then update to 8.1 and see what changed in registry !
for full fs you are a developer you can downgrade to GDR2 and then upgrade to 8.1
develop an app that get folders from Path ("C:") then using Directory Info class change all folder type as Normal I think .
you can see all of them using MTP connection
but please pay attention I didn't test this way and it may not work or it can brick your phone I don't know it .
@GoodDayToDie : Any Idea ?
Click to expand...
Click to collapse
It was already about this
http://forum.xda-developers.com/showpost.php?p=52097953&postcount=134

@marass82, about what? Please try to read topic before posting...

For WP8.1.1 Full FS access requires changes to the registry

So, with the sd-card, simple WPSystem_Folder_Unlocker and Pocket File Manager 4.3.4 I achieved my goal: I'm able to view/modify/copy installed appx. But WPSystem on sd-card still invisible via MTP (fortunately, PFM has builtin ftp server so I still can use my favorite Far Manager )

marass82 said:
For WP8.1.1 Full FS access requires changes to the registry
Click to expand...
Click to collapse
Hmm... I'm not talking about "full FS access" (I already have one!), this topic is about access to the appx installation folder (which is not accesible even with "full FS access" because it's not a full).
On the sd-card, all apps (xaps and appxes) are installed to the "SD Card/WPSystem/Apps/WindowsApps", on the internal phone storage, installed xaps are stored to the "Phone\Data\programs", but appxes should be stored to "Phone\PROGRAM FILES\WindowsApps or something like this, but nobody knows exactly...

full FS access

sensboston said:
Yes I did but EnableAllSideloading is not working (but BootstrapSamsung is working).
Sounds like we should rename proud name "Full FS access" to "Partial FS access" - it will be more realistic
Click to expand...
Click to collapse
It's FULL, but second part of the hack is unstable.

@marass82, I'm sorry, looks like I misunderstood you. You mean with these registry changes I'll be able to access to full file system, correct?
By the way, how did you added these settings to the registry? Via WOLF's "MBN Creator" tool?

sensboston said:
@marass82, I'm sorry, looks like I misunderstood you. You mean with these registry changes I'll be able to access to full file system, correct?
By the way, how did you added these settings to the registry? Via WOLF's "MBN Creator" tool?
Click to expand...
Click to collapse
for odyssey there's no rom to create flashable rom or downgrade
use Capability Hack trick to use registry editor .
I think it's the best way for you to done it

1) Yes
2) Yes, is it possible

@ngame, could you please be a little bit more specific? What is "Capability Hack trick"? How to add these settings (provided by @marass82) to the registry?