[SUCCESS] Interop-Unlocking LUMIA - with JTAG - Windows Phone 8 Development and Hacking

Hi there
Well, as we really need Interop Unlock for our Lumia phones, i decided to check this out myself.
As i already have ATF Box for a long time, i decided to buy JTAG activation and dolphin clip + lumia jigs, that i do not have to solder my phone.
Also i have ordered a Lumia 520 testing phone on ebay.
So, as the ATF Team made an awesome JTAG software update, i'm trying to interop unlock that Lumia 520 the hardware way, as just software seems to be too tough...
Well, what i did so far:
1. Freshly flashed Lumia 520 RM-914 with latest stock rom
2. Did the setup/beginning after turning it on for 1st time
3. developer unlocked it with SDK on PC
4. Made Full Dump with JTAG from dev-unlocked phone
5. Mounted MainOS partition of dump with program "OSFMount" (-->appears as Local harddisk example drive E: )
6.Loaded the SOFTWARE hive with regedit on PC from "E:\Windows\System32\config"
7. Edited the following values:
PortalUrlInt = http://127.0.0.1
PortalUrlProd = http://127.0.0.1
MaxUnsignedApp = 10003
8. unloaded SOFTWARE hive
9. unmounted dump-image
10. wrote image back via jtag
I thought it might be a good Idea to dev-unlock the phone before messing with the registry, to make sure "DeveloperUnlockState = 1" gets written the "legal" way, as the key is not available in registry before.
Maybe it's better to just modify an existing key, than adding a new one...
Well, long story short: The result is not totally satisfying.
After writing the modified image back to the EMMC, the phone is booting up, but i can NOT deploy homebrew apps that require interop unlock, like @GoodDayToDies "EnableAllSideloading.xap" for example.
But i can deploy "nomal" apps like @cpuguys "Toastlauncher" and @GoodDayToDies "Webserver"
The weird thing: If i check the reg-values via WebServer on the Phone, i can see my edited values.
So the changes ARE written to the phone. The phone just doesn't use them...
So, the good thing: phone is booting with modified rom :good:
But, the bad thing: Changes are not working.
EDIT:
SUCCESS!!!
After adding
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
i could successfully sideload "EnableAllSideloading.xap"
After executing enableallsideloading i could sideload latest WPHTweaks build.
Now i have 3rd tile row enabled!
awesome!
Also member @myst02 is working on interop-unlocking the lumia phones. So we decided to make this a together-project.
See his achievements here: http://forum.xda-developers.com/showthread.php?t=2713098&page=10 :good:

reserved

to be able to sideload EnableAllSideloading.xap you need to change following registry key:
Software\Microsoft\SecurityManager\CapabilityClasses
add: MultiSz String
name: ID_CAP_DEVELOPERUNLOCK_API
value: CAPABILITY_CLASS_THIRD_PARTY_APPLICATIONS
have fun.

I have found this during smurfing on the internet.
Dont know if this is something worth trying, but maybe it gives you some pointers or help.
http://windowsphonehub.in/tutorials...eloper-unlock-windows-phone-sideload-10-xaps/

lordmaxey said:
Well, as we really need Interop Unlock for our Lumia phones, i decided to check this out myself.
Click to expand...
Click to collapse
Good job!
lordmaxey said:
Let's get this rolling, guys! :good:
Click to expand...
Click to collapse
BTW, it's not a real "hack", and not acceptable/affordable for the 99.9% Lumia users and developers...

Wow you did a fantastic job
as @error0x0000034 mentioned you forget to open DeveloperUnlock_API
Software\Microsoft\SecurityManager\CapabilityClass es
add: MultiSz String
name: ID_CAP_DEVELOPERUNLOCK_API
value: CAPABILITY_CLASS_THIRD_PARTY_APPLICATIONS

sensboston said:
BTW, it's not a real "hack", and not acceptable/affordable for the 99.9% Lumia users and developers...
Click to expand...
Click to collapse
Yeah, but it's at least something worth trying
ngame said:
Wow you did a fantastic job
as @error0x0000034 mentioned you forget to open DeveloperUnlock_API
Software\Microsoft\SecurityManager\CapabilityClass es
add: MultiSz String
name: ID_CAP_DEVELOPERUNLOCK_API
value: CAPABILITY_CLASS_THIRD_PARTY_APPLICATIONS
Click to expand...
Click to collapse
Oh, i see...
I'm just wondering that this CAP was not secessary on Ativ S?
Or am i wrong?
I really thought it was just the 3 regkeys quoted in the first post...

lordmaxey said:
Yeah, but it's at least something worth trying
Oh, i see...
I'm just wondering that this CAP was not secessary on Ativ S?
Or am i wrong?
I really thought it was just the 3 regkeys quoted in the first post...
Click to expand...
Click to collapse
I don't remember Ativ S Interop but I know it had a BootStrap app
maybe that app unlock this api i'm not sure but I know you have to open this cap first to run EnableAllCapabilities

Nice work :good:
so now , you can make a small bussines with this
interop unlock for only *** $
and you are now the one and only interop unlocked retail Lumia owner

ceesheim said:
Nice work :good:
so now , you can make a small bussines with this
interop unlock for only *** $
Click to expand...
Click to collapse
Haha Yay, i'm going to be rich *lol*
ceesheim said:
and you are now the one and only interop unlocked retail Lumia owner
Click to expand...
Click to collapse
No, not yet.
I'm trying to deploy the bootstrap samsung app to the 520 this afternoon. If it works, i maybe can deploy the other apps.
If not, i'm trying to open that CAP by editing the Dump again and writing it back via JTAG.
We'll see, but i'm curious
btw: Why are these damn smileys always displayed in the next line?

btw: Why are these damn smileys always displayed in the next line?
don't know , i just seen that too

lordmaxey said:
Haha Yay, i'm going to be rich *lol*
No, not yet.
I'm trying to deploy the bootstrap samsung app to the 520 this afternoon. If it works, i maybe can deploy the other apps.
If not, i'm trying to open that CAP by editing the Dump again and writing it back via JTAG.
We'll see, but i'm curious
btw: Why are these damn smileys always displayed in the next line?
Click to expand...
Click to collapse
Samsung Bootstrap uses some Samsung-specific DLLs as far as I know. This won't help you, tried this already on my Huawei Ascend W1. This won't work on your Lumia either I think. But its worth a try of course.
You'll have to edit the registry key I mentioned before to be able to sideload EnableAllSideloading.xap. You need to load the SOFTWARE file from Windows/System32/config again into your registry and edit following key. Maybe try using a registry editor on your phone before using the method you described above, but I don't think that this will work. So, you probably have no other choice than opening up your device again and edit the SOFTWARE reg-file. Then sideload EnableAllSideloading.xap and you'll be able to sideload pretty much everything you want.
Question for more experienced devs and hackers:
Is there a registry tweak or some settings anywhere else on the phone that we can access though JTAG and that allows us to boot the phone (Lumia in this case) as a mass storage device with full filesystem access? Like on the Huawei Ascend W1. This would simplify the process of changing registry keys a lot.
Best regards and good luck.

lordmaxey said:
Haha Yay, i'm going to be rich *lol*
No, not yet.
I'm trying to deploy the bootstrap samsung app to the 520 this afternoon. If it works, i maybe can deploy the other apps.
If not, i'm trying to open that CAP by editing the Dump again and writing it back via JTAG.
We'll see, but i'm curious
btw: Why are these damn smileys always displayed in the next line?
Click to expand...
Click to collapse
Bootstrap Samsung will not work on Lumia.

error0x0000034 said:
Samsung Bootstrap uses some Samsung-specific DLLs as far as I know. This won't help you, tried this already on my Huawei Ascend W1. This won't work on your Lumia either I think. But its worth a try of course.
You'll have to edit the registry key I mentioned before to be able to sideload EnableAllSideloading.xap. You need to load the SOFTWARE file from Windows/System32/config again into your registry and edit following key. Maybe try using a registry editor on your phone before using the method you described above, but I don't think that this will work. So, you probably have no other choice than opening up your device again and edit the SOFTWARE reg-file. Then sideload EnableAllSideloading.xap and you'll be able to sideload pretty much everything you want.
Click to expand...
Click to collapse
Like this then, right?
Ok, I'll try this next week, i sadly won't have time this weekend.
error0x0000034 said:
Question for more experienced devs and hackers:
Is there a registry tweak or some settings anywhere else on the phone that we can access though JTAG and that allows us to boot the phone (Lumia in this case) as a mass storage device with full filesystem access? Like on the Huawei Ascend W1. This would simplify the process of changing registry keys a lot.
Best regards and good luck.
Click to expand...
Click to collapse
No. once JTAG halts the phone, it's halted. You can't just "pause" the phone, make changes and continue booting. Sadly.
So, only chance is by writing the modified dump back.

It's not for Lumia only, it's a universal method for every WP8 devices (including emulator) that could enter MassStorage mode
And the Bootstrap app is not a magic, it use the system service by Samsung to modify the CapabilityClasses registry key mentioned by above and this could be done by modify reg hive directly

lordmaxey said:
Like this then, right?
Ok, I'll try this next week, i sadly won't have time this weekend.
Click to expand...
Click to collapse
exactly. I have done this on my Ascend W1 several times, but its easier, because I can enter Mass Storage Mode through bootloader.
No. once JTAG halts the phone, it's halted. You can't just "pause" the phone, make changes and continue booting. Sadly.
So, only chance is by writing the modified dump back.
Click to expand...
Click to collapse
I don't know how JTAG method works exactly, I only know that the device needed isn't cheap and can restore bricked phones. How it works? I have no idea, but I'm sure I'll learn quickly.
I will do some research on that soon. I'm a learning noob. :cyclops:
best regards,
error0x0000034

error0x0000034 said:
I don't know how JTAG method works exactly, I only know that the device needed isn't cheap and can restore bricked phones. How it works? I have no idea, but I'm sure I'll learn quickly.
I will do some research on that soon. I'm a learning noob. :cyclops:
Click to expand...
Click to collapse
Me neither
Most credits go to X-Shadow from advance-box team.
Because i had the Idea of modifying the phone dump and read/write via JTAG.
But usually, ATF only supported bootloader repair via JTAG. So i contacted X-Shadow and within only two weeks he updated the jtag-application, and added Custom Read/Write to every part of the EMMC.
That's how i could dump the rom, modify it and write it back.
Absolutely awesome work from that team, just releasing a software because of ONE single inquiry. :good::good::good:

Aw crap, I totally forgot to tell you to test a pure-interop app (like the bootstrap one). You interop-unlocked but failed to capability-unlock, and most WP8 homebrew requires both so of course you couldn't sideload it. DERP
But hey, if you successfully edited the capability class of ID_CAP_DEVELOPERUNLOCK_API - and it looks like you did, or could - then you can use EnableAllSideloading to capability-unlock the phone (it just edits all the other capabilities' classes). I could probably also write a "BootstrapNokia" app if you'd like; I think we have interop-based registry functions for WP8 Lumias, which would allow (for example) making SamWP8 Tools work on your Nokia as well.

SamWP8 tools on Nokia would be great.
I'll check that monday evening, when i'm back at my computer.
I'll keep you informed

GoodDayToDie said:
Aw crap, I totally forgot to tell you to test a pure-interop app (like the bootstrap one). You interop-unlocked but failed to capability-unlock, and most WP8 homebrew requires both so of course you couldn't sideload it. DERP
But hey, if you successfully edited the capability class of ID_CAP_DEVELOPERUNLOCK_API - and it looks like you did, or could - then you can use EnableAllSideloading to capability-unlock the phone (it just edits all the other capabilities' classes). I could probably also write a "BootstrapNokia" app if you'd like; I think we have interop-based registry functions for WP8 Lumias, which would allow (for example) making SamWP8 Tools work on your Nokia as well.
Click to expand...
Click to collapse
isn't it better to put FCROUTER and other samsung dlls in Windows folder?
as far as i know ID_CAP_INTEROPSERVICES allow it

Related

[Q] Any method to clear "other" storage?

My ATIV S racked up 4GB in other storage and I only have 1GB left memory so is there a way to clean up the other storage, from either an XAP file or file explorer?
It's certainly *possible* with the full filesystem access, but I'm not sure where to look. That's the problem; we need to *find* anything in order to delete it.
Wrong forum, should be moved to Q&A.
2 TS: try to clean browser cache first, and check again...
This is an interesting topic.
Unlocked WP7 had CacheCleaner, WP8 Lumias and HTCs can do that by default... And Samsung WP8 are the only who can't!
It may be interesting for the future to have an app similar to CacheCleaner!
Sent from my GT-I8750 using Tapatalk
djadry said:
This is an interesting topic.
Unlocked WP7 had CacheCleaner, WP8 Lumias and HTCs can do that by default... And Samsung WP8 are the only who can't!
It may be interesting for the future to have an app similar to CacheCleaner!
Sent from my GT-I8750 using Tapatalk
Click to expand...
Click to collapse
your wrong!
lumia devices and HTC Devices only can delete temporary files not Other Storage!
temp files are also about 0-100 MB but other storage gets at least 300 MB and it comes up to 3GB or 4GB!
Lumia and HTC devices are not able to clean that
as i mentioned only you can clean up temp files
To be honest, ALL of the files in Data partition except that in Public folder and programs folder are in "Other".
hjc4869 said:
To be honest, ALL of the files in Data partition except that in Public folder and programs folder are in "Other".
Click to expand...
Click to collapse
it means that if we get a file via bluetooth but windows phone can't detect the file type it will make our phone storage full.
or when we get files from net it will stored but we can't delete them at all.
ngame said:
it means that if we get a file via bluetooth but windows phone can't detect the file type it will make our phone storage full.
or when we get files from net it will stored but we can't delete them at all.
Click to expand...
Click to collapse
Well…bluetooth is but files from net is not. U can delete all of your internet temporary files in one click in IE.
hjc4869 said:
Well…bluetooth is but files from net is not. U can delete all of your internet temporary files in one click in IE.
Click to expand...
Click to collapse
Yes you're right .
I tried copying unsupported files in my phone storage and after i delete them . Details shown in this picture:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
ngame said:
Yes you're right .
I tried copying unsupported files in my phone storage and after i delete them . Details shown in this picture:
Click to expand...
Click to collapse
I may put this problem into the first place in my research about wp8 jailbreak. I really wanna know what MS has done to have made our disk space so easy to be filled with cache.
maybe I will publish a cache clearer here as soon as possible after heathcliff74's policy engine hack is done..
before that, maybe a full registry browser and editor will be my target, including some tweaks specially designed for WP8 or from WP7.
I'm still wondering how much it can do with GoodDayToDie's registry library after the ID_CAP_DEVELOPERUNLOCK_API was added.:laugh:
ID_CAP_DEVELOPERUNLOCK_API just enables writing to the section of HKLM which is responsible for app policies; it's very handy, to be sure, but it doesn't actually give you any write access to the *rest* of the system. There are a ton of other capabilities, though, and many of them unlock chunks of the registry... sometimes large ones.
I need to write a tool that does a really proper job of mapping the capabilities to permissions that they enable, and vice versa. So you could, for example, say "I need access to <PATH>" and it would tell you the capability required.
GoodDayToDie said:
ID_CAP_DEVELOPERUNLOCK_API just enables writing to the section of HKLM which is responsible for app policies; it's very handy, to be sure, but it doesn't actually give you any write access to the *rest* of the system. There are a ton of other capabilities, though, and many of them unlock chunks of the registry... sometimes large ones.
I need to write a tool that does a really proper job of mapping the capabilities to permissions that they enable, and vice versa. So you could, for example, say "I need access to <PATH>" and it would tell you the capability required.
Click to expand...
Click to collapse
I have a 6gb of others in a 16 gb phone
htctouchelfin said:
I have a 6gb of others in a 16 gb phone
Click to expand...
Click to collapse
I had 3.3 GB .
I found that i was copied a file that it was a Driver pack for pc and it was in my storage It listed in my Other's Storage.
connect your phone to pc and check if you have any unsopported files.
If there was something delete that
ngame said:
I had 3.3 GB .
I found that i was copied a file that it was a Driver pack for pc and it was in my storage It listed in my Other's Storage.
connect your phone to pc and check if you have any unsopported files.
If there was something delete that
Click to expand...
Click to collapse
I have none so where do I look?
AlvinPhilemon said:
I have none so where do I look?
Click to expand...
Click to collapse
oh your phone is Ativ S .
I don't know what is the other files that system create them .
I want to but Ativ s but i have no money so i have to first publish an app then i maybe answer this question.
even you have file system access in Ativ S it *maybe* very helpful to delete this other storage.
ngame said:
I had 3.3 GB .
I found that i was copied a file that it was a Driver pack for pc and it was in my storage It listed in my Other's Storage.
connect your phone to pc and check if you have any unsopported files.
If there was something delete that
Click to expand...
Click to collapse
how to find them?
htctouchelfin said:
how to find them?
Click to expand...
Click to collapse
you have to backup your Phone and try.
I think this Other storage files include : Temporary Internet Files, Maybe Store Cache (Softwares you start download them but you don't complete the installation or screenshots of apps and other things), maybe app data !
for example your alarms or your saved games and your settings .
I do not surely know them even i test .
GoodDayToDie said:
ID_CAP_DEVELOPERUNLOCK_API just enables writing to the section of HKLM which is responsible for app policies; it's very handy, to be sure, but it doesn't actually give you any write access to the *rest* of the system. There are a ton of other capabilities, though, and many of them unlock chunks of the registry... sometimes large ones.
I need to write a tool that does a really proper job of mapping the capabilities to permissions that they enable, and vice versa. So you could, for example, say "I need access to <PATH>" and it would tell you the capability required.
Click to expand...
Click to collapse
I might have misunderstood that ..
how many capabilities are related to registry?is it possible to enable them all in one app? I want to write an registry editor and browser so that I can do some researches into the registry more conveniently. Maybe more of the registry operation will be able to be done on device.
any new news for this problem
assyriska said:
any new news for this problem
Click to expand...
Click to collapse
if your phone is Ativ + Interop Unlock & Full FS , yes .
but for other devices no.

Everything on the HTC 8XT Obtained in 3 days...

Okay, I picked one of these meh HTC 8XT units up from Sprint. I've done some coverage for this at the general Diagnostic dial codes page, but I've handed them money, to try some stuff once I get it developer unlocked... have to return it before Wednesday at 6PM EST (18:00 -500Z) to waive the $35 restocking fee. After that I still have 14 days from Monday when this post originally was made, but I'll probably need donations to keep it a bit longer. I'm hoping some of this will apply to the HTC 8X and 8S, but there aren't any guarantees.
I first tested these dial codes without any updates, so this may change very soon.
It seems there are THREE apps that have been mapped to the dialer menu: CSDiag, DiagnosticTool_Sprint, and HFA
##DIAG# launches HTC Function Test (CSDiag 1.01.01g)
##PST# launches Service Tools (DiagnosticTool_Sprint)
##DATA# launches Service Tools as well...
##786# does too....
##522# launches then crashes....
##72786# launches Service tools.
##6343# launches DiagnosticTool (the same page that gets launched from the DiagnosticTool tile)
##33284# launches EmbeddedTool (Diag and FieldTrial)
##611 launches, but prompts a search for an app in the store, but no results. When no is pressed, it just shows a sample page.
##737425# launches the DiagnosticTool again...
##43424# the same happens as above...
##873283# launches the prl (what Sprint calls Network Profile) update procedure. (app is called HFA)
##MFG# launches EmbeddedTool (DiagnosticTool_Sprint)
Both apps are installed to the app list.
I'll just start with some pictures to start....
EDIT: All of the accessible diagnostic pages were saved in a zip, due to the vast number of screenshots.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Any hints on what to do next?
I've got some drivers to list too.
Normal (MTP Mode)
USB\VID_0BB4&PID_F0CA&REV_0100&MI_00 - Windows Phone
USB\VID_0BB4&PID_F0CA&REV_0100&MI_01 - HTCPO881
##MFG# -> Diag -> DM Mode
USB\VID_0BB4&PID_0BFF&REV_0100&MI_00
USB\VID_0BB4&PID_0BFF&REV_0100&MI_01
USB\VID_0BB4&PID_0BFF&REV_0100&MI_02
USB\VID_0BB4&PID_0BFF&REV_0100&MI_03
(All DM Mode Drivers are unrecognized, but they will take the generic WinUSB driver when manually "updating" the drivers)
Disassembly video!
CODENAME:
HTC Tiara
Power+VolDown+CameraFull=flashing mode
USB\VID_0BB4&PID_00CE&REV_0000
Windows 8 just installed Windows Mobile Device Manager and the HTC USB SYNC mode driver!
Power+VolUP apparently is Qualcomm MSM mode.
USB\VID_045E&PID_062A&REV_0000
No driver is getting installed.
Photos are on the way...once I can strip the EXIF data off if it.
List of apps that shipped with this phone.
HTC Converter
HTC Flashlight
HTC
HTC Burst
HTC Camera
Make More Space
Photo Enhancer
Check out "DiagnosticTool_Sprint" for Windows Phone http://www.windowsphone.com/s?appid=e69a2877-59b8-43ed-898d-554fbc4b8b2b
Check out "activate your device" for Windows Phone http://www.windowsphone.com/s?appid=c7095f7f-263f-408c-afab-eccdb03ef4c6
Check out "attentive phone" for Windows Phone http://www.windowsphone.com/s?appid=59fba4ce-c8d6-df11-a844-00237de2db9e
Check out "Beats Audio" for Windows Phone http://www.windowsphone.com/s?appid=54b4b23e-c2cd-4433-9c34-17a4105d1679
Check out "hearing aids" for Windows Phone http://www.windowsphone.com/s?appid=39a21410-f59b-43b0-826e-356c211d4fa8
Check out "HTC Fetch" for Windows Phone http://www.windowsphone.com/s?appid=d762309e-ef1e-4967-9025-86bed588fa16
Check out "privacy alert" for Windows Phone http://www.windowsphone.com/s?appid=276bcc31-4365-45cf-ba0d-6199d288a688
Check out "Sprint Music Plus" for Windows Phone http://www.windowsphone.com/s?appid=8b30dccf-6fd1-482f-ae0a-b76b98978095
Check out "Sprint TV and Movies" for Windows Phone http://www.windowsphone.com/s?appid=ce3b4564-8555-e011-854c-00237de2db9e
Check out "Visual Voicemail" for Windows Phone http://www.windowsphone.com/s?appid=ee89621f-ffc6-4701-9bce-c0ffa0661861
Check out "Scout" for Windows Phone http://www.windowsphone.com/s?appid=d9deb87b-7c01-469c-abeb-416614fb6742
List of apps that have updates, but need to be manually triggered:
Sprint TV+Movies
DiagnosticTool_Sprint
HTC Fetch
Sprint Music Plus
Visual Voicemail
activate your device
We will probably need the XAPs. Can you install the standard-capabilities version of the webserver and go check the Windows folder and its subfolders for .XAP files? If you can't find any, we will probably need a ROM dump (do we have one already?)
GoodDayToDie said:
We will probably need the XAPs. Can you install the standard-capabilities version of the webserver and go check the Windows folder and its subfolders for .XAP files? If you can't find any, we will probably need a ROM dump (do we have one already?)
Click to expand...
Click to collapse
That's probably going to be the first thing I'll try. It'd be convenient if someone could reversion your webserver to generate a txt file that is similar to 'more' output or something similar to that; show all the files that are available from the directory that also shows the sub directories simultaneously, e.g. File tree. My command/dos skills are a tad rusty, so I'm not sure if I'm thinking if its either more or dir.
Hello there sneaky little files...
Code:
<Setting Name="841.05.06_0_PartnerImmediateDialStrings" Value="##634#;##778#;##786#;##3424#;##3282#;##522#;##72786#;##6343#;##33284#;##611#;##737425#;##43424#;##873283#" />
<Setting Name="841.05.07_0_PartnerNonImmediateDialStrings" Value="##634;##778;##786;##3424;##3282;##522;##72786;##6343;##33284;##611;##737425;##43424;##873283" />
<Setting Name="841.05.08_0_PartnerAppProvisioningFilePath" Value="C:\Programs\CommonFiles\Provisioning\OEM\DiagnosticTool_Sprint_01.provxml" />
GoodDayToDie said:
We will probably need the XAPs. Can you install the standard-capabilities version of the webserver and go check the Windows folder and its subfolders for .XAP files? If you can't find any, we will probably need a ROM dump (do we have one already?)
Click to expand...
Click to collapse
That's a no for both. I couldn't find any xaps anywhere, and couldn't find anything worth looking at in the 2 hours I had spent looking.
moved to post 3
thals1992 said:
That's a no for both. I couldn't find any xaps anywhere, and couldn't find anything worth looking at in the 2 hours I had spent looking.
Click to expand...
Click to collapse
thals1992 said:
Hello there sneaky little files...
Code:
<Setting Name="841.05.06_0_PartnerImmediateDialStrings" Value="##634#;##778#;##786#;##3424#;##3282#;##522#;##72786#;##6343#;##33284#;##611#;##737425#;##43424#;##873283#" />
<Setting Name="841.05.07_0_PartnerNonImmediateDialStrings" Value="##634;##778;##786;##3424;##3282;##522;##72786;##6343;##33284;##611;##737425;##43424;##873283" />
<Setting Name="841.05.08_0_PartnerAppProvisioningFilePath" Value="C:\Programs\CommonFiles\Provisioning\OEM\DiagnosticTool_Sprint_01.provxml" />
Click to expand...
Click to collapse
if you want I can upload HTC 8x xaps.
I download them from a thread in xda but I don't remember where was it !
if You want please reply to this post to upload them for you
Sure, go ahead and attach them to your post. I just sat back down to work on it again.
thals1992 said:
Hello there sneaky little files...
Code:
<Setting Name="841.05.06_0_PartnerImmediateDialStrings" Value="##634#;##778#;##786#;##3424#;##3282#;##522#;##72786#;##6343#;##33284#;##611#;##737425#;##43424#;##873283#" />
<Setting Name="841.05.07_0_PartnerNonImmediateDialStrings" Value="##634;##778;##786;##3424;##3282;##522;##72786;##6343;##33284;##611;##737425;##43424;##873283" />
<Setting Name="841.05.08_0_PartnerAppProvisioningFilePath" Value="C:\Programs\CommonFiles\Provisioning\OEM\DiagnosticTool_Sprint_01.provxml" />
Click to expand...
Click to collapse
Code:
C:\Programs\CommonFiles\Provisioning\OEM\DiagnosticTool_Sprint_01.provxml
Download this file. It contains path to XAP.
OK I'm going to go to upload xap files in 7 parts !!!
maybe you know i'm from iran and iran internet is most likely a ****
Part 1:
http://d-h.st/TzA
Part 2:
http://d-h.st/KnR
Part 3:
http://d-h.st/EdQ
Part 4:
http://d-h.st/SQO
Part 5:
http://d-h.st/Zvz
-------------------------------------
Final Edit :
Part 6:
http://d-h.st/N3t
Part 7:
http://d-h.st/Fbg
-W_O_L_F- said:
Code:
C:\Programs\CommonFiles\Provisioning\OEM\DiagnosticTool_Sprint_01.provxml
Download this file. It contains path to XAP.
Click to expand...
Click to collapse
Unfortunately, I don't think I can access that with the Webserver. The second biggest challenge with this is that it doesn't have a rom for it yet..... But I have some app-ids that make it a little more helpful. I've got a complete list to post soon, which will be forwarded to whomever made the SysApp Updater.
thals1992 said:
Unfortunately, I don't think I can access that with the Webserver. The second biggest challenge with this is that it doesn't have a rom for it yet..... But I have some app-ids that make it a little more helpful. I've got a complete list to post soon, which will be forwarded to whomever made the SysApp Updater.
Click to expand...
Click to collapse
I updated my post and put Part 6 and 7 .
excuse me for my low speed net.
for Bold part of quote. do you mean you can't find official htc rom ?
check this two links :
http://www.fshare.vn/file/JBGVWXGXU4/
http://www.fshare.vn/file/TEWJCLCVT8/
I think these links are for HTC 8x but I think there's no difference between wp8 nbh files.
I will search for 8XT and 8S Roms for you and I will provide links even I find any link .
Pretty much... There hasn't been a HTC WP8 rom that's been leaked for US models. I know in the HTC 8X forum there are two roms available, but they both were European roms that were leaked. I have no clue about the HTC 8S, but bing doesn't come up with any results on the 8XT.
EDIT: looks like the ones that @ngame had linked to are asian and european roms
I'm sure HTC still uses the same format nbh that they have been using with their other WP8 devices.
thals1992 said:
Pretty much... There hasn't been a HTC WP8 rom that's been leaked for US models. I know in the HTC 8X forum there are two roms available, but they both were European roms that were leaked. I have no clue about the HTC 8S, but bing doesn't come up with any results on the 8XT.
EDIT: looks like the ones that @ngame had linked to are asian and european roms
I'm sure HTC still uses the same format nbh that they have been using with their other WP8 devices.
Click to expand...
Click to collapse
@thals1992
I think the best work is download this leaked nbh and try to extract it.
maybe we can get more files . I'm not sure these xaps are full package of them or not .
These files are provided from a topic who said can unlock the htc 8x bootloader and get a Super CID and he take some screenshots that shows he can directly access to system files ! maybe he didn't find all xaps but if we can extract one rom we can access to all files and maybe can find a solution to cook unofficial roms at least like Samsung Ativ S (that it only Interop Unlock your phone)
Regards .
Updating OP with disassembly video!
EDIT: added the alternative name to the OP as well.
Insert any four letter curse word here.....
I have to go to work tonght, so I'll only have ~ 6 hours to work on it tommorrow, and that's if I don't have any time to mess with it tonight after work.
I'm hoping someone will see this and possibly donate a bit of money for this.
I have already decompiled the dlls from the 8x XAPs...most of them have the capabilities we need...and there are some interesting XAML pages in there...but I couldn't test it because I don't have a HTC
Sent from my RM-821_eu_euro2_248 using Tapatalk
I have a TMO branded 8x. (currently in for service). The only files I ever could get to load via dial codes is CSDDiag. I do have a dump of the xaps from an engineering 8x I found on the DFT forums. It is most definitely the old version of it. I tried every single AppID I could find in there, but nothing exciting launched...only CSDDiag and the standard pre-installed xaps worked.
I have been waiting patiently for someone to see if they can download a copy of CSDDiag onto their ativ S via the Microsoft store Proxy trick (Unlike the Samsung xap, the HTC one is listed as published, and you can click the "install" link if you go directly to it in the Windows store).
I will try and install the sprint tool into my 8x and see if it lets me do anything special. (when I get it back).
Habib.Mouissat said:
I have already decompiled the dlls from the 8x XAPs...most of them have the capabilities we need...and there are some interesting XAML pages in there...but I couldn't test it because I don't have a HTC
Sent from my RM-821_eu_euro2_248 using Tapatalk
Click to expand...
Click to collapse
I can test on my 8S everything just say.
compu829 said:
I have a TMO branded 8x. (currently in for service). The only files I ever could get to load via dial codes is CSDDiag. I do have a dump of the xaps from an engineering 8x I found on the DFT forums. It is most definitely the old version of it. I tried every single AppID I could find in there, but nothing exciting launched...only CSDDiag and the standard pre-installed xaps worked.
I have been waiting patiently for someone to see if they can download a copy of CSDDiag onto their ativ S via the Microsoft store Proxy trick (Unlike the Samsung xap, the HTC one is listed as published, and you can click the "install" link if you go directly to it in the Windows store).
I will try and install the sprint tool into my 8x and see if it lets me do anything special. (when I get it back).
Click to expand...
Click to collapse
I tried all codes on my 8S and only show CSDDiag like you said. I already installed sprint tool on my 8S by windows phone store and only got window with MEID(hex), MEID(dex), imei, sim id and version. Nothing special.

Lumia 1520 Starting work on custom ROM !

Hi Everyone !!
Work on the first custom rom WP8 for Huawei w1 been completed successfully .
Time for something new !
I would like to announce that I start work on Custom ROM for nokia lumia 1520. First attempt at flashing the modified file ffu done successfully .
Unfortunately, in another attempt something went wrong. I switched the phone in Download mode, QPST can repair the phone but I dont have appropriate files (currently). I have Riff Box JTAG but this programator does not support L1520 and i need ATF jtag.
I'll keep you informed about the progress !! :fingers-crossed:
I collect money for the ATF and the new phone, otherwise I can't continue to work. In the future, project will be developed for many other devices with WP8.
Interesting. First of all: Congrats on the succesfull flash,
second of all: I hope you can resurrect your Lumia 1520 how did you get the 1520 to accept the modified rom though? Though Lumias check the signature after the flashing process has completed?
Thanks for congrats
I can ressurect my lumia in 2 ways:
1. I need have repair boot files for QPST
2. I need AFT JTAG
I have methods to cheat the verification process. In the same way I did in Huawei W1. :victory:
These are my priorities:
1. Development and refinement the ability to flash the modified FFU file.
2. Ability to run the phone in mass storage mode
3. Modification software
4. Adapting WP8CRUU for Luma 1520
WojtasXda said:
Thanks for congrats
I can ressurect my lumia in 2 ways:
1. I need have repair boot files for QPST
2. I need AFT JTAG
I have methods to cheat the verification process. In the same way I did in Huawei W1. :victory:
These are my priorities:
1. Development and refinement the ability to flash the modified FFU file.
2. Ability to run the phone in mass storage mode
3. Modification software
4. Adapting WP8CRUU for Luma 1520
Click to expand...
Click to collapse
Getting the boot files might be the trickier method, but you could try what I described in your other post. I guess the ATF Box is your best chance. I'll look through the 1520 update cabs maybe theres something in there that'll help you build the mbn boot image, like on htcs. (which are, for the 8s encrypted, for the 8x not, as far as I know.) If you feel okay with it you can shoot me a message with tips on how you managed to do that, if not, that's not a problem
WojtasXda said:
Thanks for congrats
I can ressurect my lumia in 2 ways:
1. I need have repair boot files for QPST
2. I need AFT JTAG
I have methods to cheat the verification process. In the same way I did in Huawei W1. :victory:
These are my priorities:
1. Development and refinement the ability to flash the modified FFU file.
2. Ability to run the phone in mass storage mode
3. Modification software
4. Adapting WP8CRUU for Luma 1520
Click to expand...
Click to collapse
Are you reading this thread: http://www.coolxap.com/forum-199-1.html ?
I received a lot of information about huawei w1 on this site. When read about it in December 2013.
Actually if the verification bypass works (which, knowing MS's tight security on Nokias, I highly doubt), it just needs to be released as a method, and after that, anyone can make their own custom ROM.
I'd definitely make some changes to the system (clear out some default apps, add some of my own, change the accent colours, allow interop and other caps to any apps, increase custom app limit), but that would break the built-in system updater. So beware modders, DO NOT use official updates when on modded firmware!
WojtasXda said:
Hi Everyone !!
Work on the first custom rom WP8 for Huawei w1 been completed successfully .
Time for something new !
I would like to announce that I start work on Custom ROM for nokia lumia 1520. First attempt at flashing the modified file ffu done successfully .
Unfortunately, in another attempt something went wrong. I switched the phone in Download mode, QPST can repair the phone but I dont have appropriate files (currently). I have Riff Box JTAG but this programator does not support L1520 and i need ATF jtag.
I'll keep you informed about the progress !! :fingers-crossed:
Click to expand...
Click to collapse
Hi,
I have an ATF Box (lordmaxey & me interop unlocked our Lumias with it, do you remember me ) and would like to help you. Feel free to PM me
Another question, did you just modify the .ffu file via Hex Editor? I've tried it myself a long time ago, but it didn't work and I had to repair it with my ATF. Is there a bug in newer Nokia FFU files?
myst02
feherneoh said:
Flashing the custom ROM is not hard, so I would give it a try
Just be sure you don't touch boot partitions, so you will be able to boot into flashmode
On L520, I could simply flash ANY ffu using CareSuite, so flashing works, just need idea, what to change in ROM
Click to expand...
Click to collapse
How are you able to bypass signature checking though? Funny how on Lumias you can apparently edit the MainOS Partition but cannot touch the Boot ones, and on HTC it's exactly the reverse.
Guys ... the only barrier that separates us from the Custom ROM are 2 files that i need to create and adapt to the device. I mean MPRG8974.mbn ((hex) and msimage8974.mbn . Anyone who has knowledge on this topic, please help !!
This is my other topic about mprg/misimage
http://forum.xda-developers.com/hardware-hacking/hardware/qpst-help-create-mprg-msimage-mbn-t2949492
Here is a lot of information about QPST
http://forum.xda-developers.com/showthread.php?t=2136738
how to build mprg and msimage [/url]
http://blog.csdn.net/ziyouwa/article/details/16331545
feherneoh said:
Start phone recovery process in CareSuite, select official firmware, press start
When it asks you, to connect the phone, just replace the ffu file with the modified one
Boot partition should not be touched, as the SoC checks its signature, and your phone will be stuck in quallcomm's DLMODE
Click to expand...
Click to collapse
how to modify FFU ? have you any tool for it ?
I know we can Convert it using ImgMounnt but how to reconvert it to ffu ?
feherneoh said:
Start phone recovery process in CareSuite, select official firmware, press start
When it asks you, to connect the phone, just replace the ffu file with the modified one
Boot partition should not be touched, as the SoC checks its signature, and your phone will be stuck in quallcomm's DLMODE
Click to expand...
Click to collapse
Okay, good, Are you sure that your phone will not reject the file when it encounters an error?
How do you think why was invented HSPL ?
For Huawei just enough to crack the flash tool in PC to be able to upload an unsigned app / ffu file. Phone does not validate the data but Huawei is different story. While working on the Custom ROM I used QPST with MPRG ,MSIMAGE, xml's and other files. JTAG also be useful. Without QPST not have been possible creating Custom ROM for Huawei.
Therefore necessary there is start working on the most needed things.
ngame said:
how to modify FFU ? have you any tool for it ?
I know we can Convert it using ImgMounnt but how to reconvert it to ffu ?
Click to expand...
Click to collapse
Do you think it is that simple? If yes, where are the custom roms? Where these modified files? Of course there are tools to build files ffu, signing and opening them, but they are not available for "ordinary" people.
Well ... I go learn and explore the dark side of QPST
Regards
WojtasXda said:
Okay, good, Are you sure that your phone will not reject the file when it encounters an error?
How do you think why was invented HSPL ?
For Huawei just enough to crack the flash tool in PC to be able to upload an unsigned app / ffu file. Phone does not validate the data but Huawei is different story. While working on the Custom ROM I used QPST with MPRG ,MSIMAGE, xml's and other files. JTAG also be useful. Without QPST not have been possible creating Custom ROM for Huawei.
Therefore necessary there is start working on the most needed things.
Do you think it is that simple? If yes, where are the custom roms? Where these modified files? Of course there are tools to build files ffu, signing and opening them, but they are not available for "ordinary" people.
Well ... I go learn and explore the dark side of QPST
Regards
Click to expand...
Click to collapse
I know it's not easy and simple and I know there's at least one tool to create and edit ffu files and it's also not public but i thought he developed a FFU Editor app ! or he flashed Custom Rom many times !
and also I think you mean Phone Image Designer of Microsoft :
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
feherneoh said:
I have used HxD hex editor to find the partition headers, then used OSFMount to mount them. You can either mount a part of the ffu, or copy the partition to a separate image
As far as I know (my bricked 520 proves it) SoC's built-in ROM checks the first partition's signature using the public key in Q-Fuse, so let's crack RSA and stuff like that. SPL/HSPL was used to load CE, NT on ARM uses UEFI
Click to expand...
Click to collapse
you bricked your phone when you try this way ?
If( YourAnswer == "Yes" )
{
MessageBox.Show("Surely This way can't be useful or it's not the complete way and we need to research more");
}
else
{
//More Details go here
}
feherneoh said:
This happened when I tried to modify first partition (shown in attachments in previous post)
I'm not sure, if I added that in this thread, too, but only try, if you have JTAG box, so you won't mess up everything
Click to expand...
Click to collapse
Unfortunately I have no JTAG box (riff , atf and etc.)
I will look for way you provide and check it .
I have to find someone with JTAG in Mashad,Iran . Is there anyone ?
it is necessary to learn how to create MPRG / MSIMAGE and use QPST Then jtag will not be needed. These files are obtained by reading the data from the memory EMMC in this case VHD would be the best solution.
OK OK your way worked
I could create 3 Partitions from my L920 (RM-821) Rom .
I couldn't access MainOS partition in this ROM .
sounds good to find this working way but need to work on it hours and hours .
feherneoh said:
Once found something like MPRG in ffu
Open another SoC's MPRG, and look for the first 8 0r 16 bytes in ffu file
Click to expand...
Click to collapse
I do not know if this is true, but MPRGXXXX.bin or MPRG.hex (Intel hex) suitable for many devices. Msimage is built only for the appropriate device.
@WojtasXda : Are you using caresuite to flash the rom, or do you have another tool?
Click to expand...
Click to collapse
Yes i have own tools for example WP8RUU or WP8CRUU
Things that might be of interest to a custom ROM developer:
* I've just made big progress in figuring out how capabilities work on the phone. Setting them via custom ROM is definitely one of the easier ways it might be done, if you can create arbitrary registry keys and set arbitrary values in them.
* One particularly valuable thing you could add to a non-Samsung ROM is the RPC driver/service/whatever that lets Samsung's RCPComponent library work. I don't know how hard it would be to hack that in, though. The binaries and the registry keys for the service shouldn't be hard to obtain, but I don't know if there will be problems with signatures or anything. Still, if you can get it working, this would mean that Samsung homebrew, and everything we can do with it (such as write arbitrary places in the registry and move files around as SYSTEM) becomes available on the 1520.
Somewhat relatedly, I find myself in need of a new phone (I think my ATIV S may be unrecoverable, and it wasn't even due to a hack I was doing!) and this piques my interest in getting a 1520...
feherneoh said:
Also (just an idea) RT certificates could be added. Maybe some(!) RT apps could run on the phones
Click to expand...
Click to collapse
These apps work now on WP8.1
wp8.1 supports appx and appxbundle formats so we don't have problem with running them on phones .
If you mean running apps like Multimedia 8 on phone I think we will run into resolution problem .
Not going to happen. First of all, the ported desktop apps only work when signature enforcement is off ("jailbroken") even *on RT*; until/unless we get a signature bypass for WP8 that's a complete non-starter.
The other major problem is that all the base libraries for RT are different than for WP. This extends all the way down to the really core stuff like Kernel32.DLL; RT (like normal Windows) has one, but WP8 doesn't (the functions are split into kernelbase.dll and kernel32legacy.dll). Then there's all the code (like support for the normal desktop interface) that WP8 just flat out doesn't have.
I'm not saying it's impossible to get RT code running on WP8... but it's probably easier to port the entire RT OS to the phone (which is *not* easy, but is possible) than it is to get RT software running on WP8 OS.

Universal ReadBack Extractor for mtk feature watchphones

Update Mar-12/2016: as long as on the market appeared a long line of new types of mtk6260 mtk6261 mtk2502C mtk2502A (etc) watches equipped with strange new PCB or flash_ID parameters, the new release <Readback Extractor mtk 2.0> now has the capacity to identify, to read, check, rebuild firmware and collect and insert in the .cfg files the flash_ID's coded inside the ROM dump for almost all types of mtk watchphones or smartwatches based on RTOS Nucleus
NOTE: being tested already for mtk6260 mtk6261 mtk2502C and mtk2502A
In short - if you intend to install in your smartwatch new firmwares, mods etc, before to initiate any flashing with the Flash Tool app (pushing that goddamn < Download > button) think twice, 'bove all better DO a backup for the original firmware, why so? because it's containing all original drivers hence you'll be able to recover 100% your watch in case of bricking.
How to:
First you have need of a full dump of your ROM. Assuming that you already got a Flash Tool 5.15.16 and drivers, and you were at the point of flashing something (already chose the download agent and scatter file)
preparations:
a. Set options/backup and restore on no action
b. load the download agent (you find this file inside the flash tool folder)
c. load a scatter firmware - for initialization flash tool needs a scatter file (.cfg) - for dz09 you get this one - for any other than mtk6260A get here and get a firmware compatible with your PCB
d. in case you have W10 - go to the start menu and click on power and hold down the shift key while clicking on restart. A screen then comes up and you need to choose troubleshooting and then startup options. It will then reboot and give you a menu. press 7 which is ignore signed drivers and then when windows comes up, you will be able to install the drivers.
for instance let's say you have a DZ09 smartwatch:
1 - press < Readback > in upper menu and so < Add > in the middle menu
2 - click twice on the item appears in the main window, set name as ROM_DZ choose in browser the path and save
3 - set as Physical start address 0x00000000 and as Length 0x01000000 or 0x00800000 or 00400000 (try them in this order) then ok
4 - turn off the watch, press < Readback > in the middle menu wait 2 seconds and connect through USB your watch
5 - wait until the upload is complete (big green ring)
Now second stage:
1 - download the app I've built attached here (Readback Extractor mtk) and unzip it
2 - create a folder where you intend to keep in safe the original firmware and name it for instance DZ09-Orig
3 - do a copy of Readback Extractor mtk 2.0.exe and place it inside the DZ09-Orig folder then click twice on it
4 - press <Load Readback file> and browse after the ROM_DZ file created before with the Flash Tool then open
5 - Wait about a minute while the app will check bit by bit the integrity of your file
6 - If everything went ok and your file is healthy then app will show " health 100% " so you can proceed to the next step
7 - Press <Rebuild Firmware> and wait about one minute (it shows a progress counter)
8 - When appears the message " - ALL DONE!!!" close app and go back in the DZ09-Orig folder, now you'll find there a set of new files which are the original firmware kit ready to be flashed back in your phone anytime you want
9 - Enjoy flashing anything you like without any fear that something bad can happen
Some tricks for writing IMEI in your watch NVRAM:
you connect to usb your watch (turned on this time) and set the com port on the watch screen, go in device manager and check the port number your watch is connected, then you open Tera Term hyperterminal (google for this app), connect it as serial com on watch com port and then give the command:
AT + EGMR = 1, 7, " imei number "
if on screen appears OK then ready, you've changed your imei
AFTERWARDS READ ME story - Anywhere you search, there is no one to tell you explicitly how to extract from your mtk smartwatch the firmware kit
All says a halfmouth: Do a full < Readback > in Flash Tool, you'll do it being confident that from now on you say goodbye to any risk because you have A BACKUP hence you start flashing new firmwares. And the Big Brick is coming , you smile and get back to your < Readback > backup discovering that, sadly, you have a binary bulk at first sight good for nothing. It cannot be so useless, isn't it? after all it contains full dump of your ROM! I was in exactly the same situation, so 'cause I didn't find any answer I've started reverse engineering . . . and it worked, first I did it manually for guys being in the same situation, 've noticed that is a common issue so I had to choose how to help, simpler but dangerous (for you) way, to create a tutorial <how to> or the hard way (hard for me), to develop an app which will do all "cooking" automatically and I choose the second because in manually way there is a quite big "chance" to mess up with your primary bootloader which could get to a real tragedy - no modem - brickest brick you saw in your entire life
Readback extractor mtk 2.1 beta
Flash Tool and drivers
Lil to late for me XD.... *just ordered a new one btw*
franc33s said:
Lil to late for me XD.... *just ordered a new one btw*
Click to expand...
Click to collapse
Sorry man, couldn't earlier because I have mine either of two weeks or so. . . still a beginner
Look at the bright side, best lessons we learn from our own mistakes, best part is that if you buy the new one from the same seller, you'll have the firmware hence two working watches!
Are there apps in the works to change watch faces without flashing?
kyitech said:
Are there apps in the works to change watch faces without flashing?
Click to expand...
Click to collapse
Unfortunately, yet, there is no way to get in contact with the watch else than through proprietary mediatek drivers so that the only ways to communicate for now are Flash Tool app and bluetooth modem proprietary commands (the most important of them being secret as well)
To do such a reverse engineering is way way way over my pay grade
Still I'm working for an app which could replace any media in the watch (backgrounds, icons) but through flashing method of course
Thanks for the info...I just think this watch have great potential
Golem_ said:
Unfortunately, yet, there is no way to get in contact with the watch else than through proprietary mediatek drivers so that the only ways to communicate for now are Flash Tool app and bluetooth modem proprietary commands (the most important of them being secret as well)
To do such a reverse engineering is way way way over my pay grade
Still I'm working for an app which could replace any media in the watch (backgrounds, icons) but through flashing method of course
Click to expand...
Click to collapse
Sorry for not knowing, but what about bluetooth app transfer in the Google play store. How can they be used on dz09-?
kyitech said:
Sorry for not knowing, but what about bluetooth app transfer in the Google play store. How can they be used on dz09-?
Click to expand...
Click to collapse
. . . bluetooth modem AT commands, just I told this before, generally speaking, in this way all bluetooth app are working, in our case they are proprietary and most of them SECRET. For more information please check this link, it is an older tutorial posted by me on that site
franc33s said:
Lil to late for me XD.... *just ordered a new one btw*
Click to expand...
Click to collapse
I'm almost sure you found these before me, still, here link you have more than 10 versions of dz09 firmwares (others than we checked before)
It looks like they made a firmware for each phone ) very prolific guys when about dz09
Hope this time you catch the right one!
Golem_ said:
I'm almost sure you found these before me, still, here link you have more than 10 versions of dz09 firmwares (others than we checked before)
It looks like they made a firmware for each phone ) very prolific guys when about dz09
Hope this time you catch the right one!
Click to expand...
Click to collapse
yup already did try them all, they boot fine, just no luck getting the Padgene (padgeME) one yet (so my touchscreen driver would work), the guy is still uploading more firmwares tough *fingers crossed*
Golem_ is a hero!
Thanks for all the time you spend with the gt08
flashtool
Hy ,
I am trying to search for the wright flashtool to make my backup.
And where can i find a tutorial?
I have a gv08s.
Wich drivers do i need, and wich version of flashtool?
Thanks in advance
xeph20 said:
Golem_ is a hero!
Thanks for all the time you spend with the gt08
Click to expand...
Click to collapse
thank you for kind words!
Golem_ said:
thank you for kind words!
Click to expand...
Click to collapse
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
carlospaco said:
Hy ,
I am trying to search for the wright flashtool to make my backup.
And where can i find a tutorial?
I have a gv08s.
Wich drivers do i need, and wich version of flashtool?
Thanks in advance
Click to expand...
Click to collapse
here link you find a good tutorial but instead <download> you have to use <readback>
Golem_ said:
here link you find a good tutorial but instead <download> you have to use <readback>
Click to expand...
Click to collapse
Yes , i have done everything like its said, for couple off days, but i keep getting this error always.
lashtool error: S_BROM_DOWNLOAD_EPP_FAIL (2036)
[EPP] FlashTool environment preparation failed
It May be caused from DRAM initialization failed
Pleace check the EMI information of the MAUI load is correct and fit the target.
Hope that someone can help me with this, i am desperated.
Thanks
carlospaco said:
Yes , i have done everything like its said, for couple off days, but i keep getting this error always.
lashtool error: S_BROM_DOWNLOAD_EPP_FAIL (2036)
[EPP] FlashTool environment preparation failed
It May be caused from DRAM initialization failed
Pleace check the EMI information of the MAUI load is correct and fit the target.
Hope that someone can help me with this, i am desperated.
Thanks
Click to expand...
Click to collapse
give me in PM a skype ID
Golem_ said:
give me in PM a skype ID
Click to expand...
Click to collapse
Oh, i am sorry, but i don't have a skype id.
carlospaco said:
Oh, i am sorry, but i don't have a skype id.
Click to expand...
Click to collapse
Alternatives for live screen sharing like, for instance TeamViewer?
Golem_ said:
Alternatives for live screen sharing like, for instance TeamViewer?
Click to expand...
Click to collapse
i have send you id teamviewer

[ROOT][TOOL]AutoRoot

AutoRoot
MAJOR UPDATE AUTOROOT 1.1 WITH UI.!!
CHANGELOG
V 1.1 30/1/2017
1. Made an UI
2 .Now Download automatically TWRP and SuperSU
Instructions :
1.You MUST to have adb installed on your PC.
2.Connect your phone to your PC via USB cable.(type C to microUSB adapter costs~9.99).
3.Run AutoRoot
4.Click Download button. (This will download TWRP and SuperSU app)
5.Click Root button
Enjoy
PLEASE ASK ME IF YOU HAVE ANY TROUBLE.
DOWNLOAD
SCREENSHOTS
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
dimkyr said:
AutoRoot
I have developed this exe to help you to root your Nexus 5X.
Instructions :
1.You MUST to have adb installed on your PC.
2.Connect your phone to your PC via USB cable.(type C to microUSB adapter costs~9.99).
3.Run AutoRoot.exe.
4.Follow Instructions.
Enjoy
PLEASE ASK ME IF YOU HAVE ANY TROUBLE.
USEFULL LINKS
Twrp
SuperSU
ΤΗΕ VIRUS ALERT IS FAKE ! VIRUS TOTAL SCAN : https://www.virustotal.com/en/file/...9c40c8e11ca931c2cd1fa289/analysis/1484572253/
DOWNLOAD
Click to expand...
Click to collapse
Hi! Could you explain a little bit more about this tool. What does it do? Does it unlock bootloader? Does it flash TWRP? Does it root? How? Thanks!
CLPose said:
Hi! Could you explain a little bit more about this tool. What does it do? Does it unlock bootloader? Does it flash TWRP? Does it root? How? Thanks!
Click to expand...
Click to collapse
Hello, this tool unlock bootloader, install twrp and root your phone but you have to manually download twrp img and superSU zip.Now i am working to do this automatically.. I write it in batch and just using adb commands. Soon i will upload the code in github, it's a very easy code at all.
I am here to help everytime you want .
dimkyr said:
Hello, this tool unlock bootloader, install twrp and root your phone but you have to manually download twrp img and superSU zip.Now i am working to do this automatically.. I write it in batch and just using adb commands. Soon i will upload the code in github, it's a very easy code at all.
I am here to help everytime you want .
Click to expand...
Click to collapse
Why is this a thing? Why not just stick to the tried and true method of unlocking or use Nexus ToolKit?
v.0.0.0.1 ? What?
bradhoschar said:
Why is this a thing? Why not just stick to the tried and true method of unlocking or use Nexus ToolKit?
Click to expand...
Click to collapse
is it bad make your own tool?
dimkyr said:
is it bad make your own tool?
Click to expand...
Click to collapse
No, it isn't bad. But usually when someone makes a tool it has a high level of flexibility and the program is usually very dynamic. Yours is like 100% static. It's like written in stone what the program is going to execute so that makes this program not user-friendly at all. To be honest with you, it's a nice try. I mean it proves you know and know how to use various batch functionalities. But it's nothing to write home about. I'd suggest diving into something like Java or Python and let the user decide more options so eventually you have a dynamic, but very robust tool for people to use.
2¢
sprremix said:
No, it isn't bad. But usually when someone makes a tool it has a high level of flexibility and the program is usually very dynamic. Yours is like 100% static. It's like written in stone what the program is going to execute so that makes this program not user-friendly at all. To be honest with you, it's a nice try. I mean it proves you know and know how to use various batch functionalities. But it's nothing to write home about. I'd suggest diving into something like Java or Python and let the user decide more options so eventually you have a dynamic, but very robust tool for people to use.
2¢
Click to expand...
Click to collapse
Thank you for your advices! I am begginer with all this thing and i am looking to learn more and make more dynamic tools. I am searching but it's hard to find information about programming for smartphones. So i am looking for help but i don't know where to search.
[Sorry for my bad english]
very cool
thanks for your contribution, everybody started somewhere and there are tons of folks who want a quick no frills method of rooting phones of all makes, Ive done rooting for $ for folks who dont want to learn how for whatever reason and woulduse a tool like this to just get the job done quick & easy.
keep plugging away at it add as much functionality as you want, people just like to troll and down anybody on the 'net but would never have the balls to do it IRL.
Ive been around this forum since before android and have seen it grow, I wish people would be more appreciative and troll less, maybe this tool isnt for you, but it may be just what somebody else is looking for....
I know how to root and have done it many times, Im about to root a bullhead and im glad this tool is here, why do it by hand if somebody else automated it?
work smarter not harder.
bhang
bhang said:
thanks for your contribution, everybody started somewhere and there are tons of folks who want a quick no frills method of rooting phones of all makes, Ive done rooting for $ for folks who dont want to learn how for whatever reason and woulduse a tool like this to just get the job done quick & easy.
keep plugging away at it add as much functionality as you want, people just like to troll and down anybody on the 'net but would never have the balls to do it IRL.
Ive been around this forum since before android and have seen it grow, I wish people would be more appreciative and troll less, maybe this tool isnt for you, but it may be just what somebody else is looking for....
I know how to root and have done it many times, Im about to root a bullhead and im glad this tool is here, why do it by hand if somebody else automated it?
work smarter not harder.
bhang
Click to expand...
Click to collapse
Hi! Thanks for encouriging @dimkyr developing a easy-to-use and useful tool like this one. I think you're 100% right! :highfive: Did you try it yourself? OP, on how many devices did you test your tool? What about drivers for Windows? Could you add some screenshots? I'm trying to root my N5X (MM-MDA89E) and I just can't. I've successfully unlocked its bootloader with NRT, but NRT keeps failling when rooting (tried in my PC with Windows 10, in two other PC with W7, and other PC with Xubuntu) :crying:. I'd be glad to test this tool if it's 100% sure! I WANT ROOT! In case you don't notice, I'm a noob! But I can't afford bricking my new N5X. Thanks!
CLPose said:
Hi! Thanks for encouriging @dimkyr developing a easy-to-use and useful tool like this one. I think you're 100% right! :highfive: Did you try it yourself? OP, on how many devices did you test your tool? What about drivers for Windows? Could you add some screenshots? I'm trying to root my N5X (MM-MDA89E) and I just can't. I've successfully unlocked its bootloader with NRT, but NRT keeps failling when rooting (tried in my PC with Windows 10, in two other PC with W7, and other PC with Xubuntu) :crying:. I'd be glad to test this tool if it's 100% sure! I WANT ROOT! In case you don't notice, I'm a noob! But I can't afford bricking my new N5X. Thanks!
Click to expand...
Click to collapse
Thank you everybody !!
I tested this tool to my N5X and work perfectly. But it's weird that NRT failed..
It's always a chance to fail or brick.
I will post screenshot later in this day!
With regards
CLPose said:
Hi! Thanks for encouriging @dimkyr developing a easy-to-use and useful tool like this one. I think you're 100% right! :highfive: Did you try it yourself? OP, on how many devices did you test your tool? What about drivers for Windows? Could you add some screenshots? I'm trying to root my N5X (MM-MDA89E) and I just can't. I've successfully unlocked its bootloader with NRT, but NRT keeps failling when rooting (tried in my PC with Windows 10, in two other PC with W7, and other PC with Xubuntu) :crying:. I'd be glad to test this tool if it's 100% sure! I WANT ROOT! In case you don't notice, I'm a noob! But I can't afford bricking my new N5X. Thanks!
Click to expand...
Click to collapse
im on linux atm so no i havent tried it, if the toolkit isnt working just do it manually, follow a walk thru to the letter take your time, as long as u follow instructions for your build you will be fine(settings>about phone>build number.... mine is NBD90W which is 7.0 security patch level 0ct. 5,2016)
doing a root tutorial that matches your build will prevent most if not all of the hiccups that can come from incompatibilities in roms that are more complex than a noobie rooter needs to know.
bhang
Does it work on 7.1.1 (N4F26I)?
Thanks!
x987z said:
Does it work on 7.1.1 (N4F26I)?
Thanks!
Click to expand...
Click to collapse
Works on every edition of android

Categories

Resources