Database Users

WP8 SYSTEM registry files from FFU

I found where the system registry files are stored inside the ffus. This is from my Lumia 928 factory ffu.
Code:
\Windows\System32\config - DEFAULT, DRIVERS, FP, ProvisionStore, SAM, SECURITY, SOFTWARE, SYSTEM
\Windows\System32\config\MOUNTMGR - SYSTEM
\Windows\System32\config\unmodified - BCD, DEFAULT, DRIVERS, NTUSER.DAT, SAM, SECURITY, SOFTWARE, and SYSTEM
\EFIESP(Different Partition)\Windows\System32\config\unmodified - BCD, DEFAULT, DRIVERS, NTUSER.DAT, SAM, SECURITY, SOFTWARE, and SYSTEM
BCD, DEFAULT, DRIVERS, NTUSER.DAT, SAM, SECURITY, SOFTWARE, and SYSTEM
All of these files contain regf as the first few characters in hex. Beyond that, the files are mostly garbage looking at them in Notepad++.
I haven't been able to find any registry editors yet that can edit them, including ones built for Windows CE/Mobile or even Win7/8.
Anyone know of something that can display it in a normal fashion? (without needing a WP8 device to attempt to edit it on.)
EDIT: The files from \Windows\System32\config have been zipped for simplicity reasons (for those of you who don't have a ffu handy)
EDIT2 (August 22): The files from the GDR2/Amber update from my phone's rom have been added.
WalkingCat said:
OK, this is a reply to this thread, but apparently I can't post in that forum yet.
So, you've found registry file inside \Windows\System32\config, and this is the way to open and edit it.
No third-party tools needed, just use regedit.exe in your Windows system
1. Run regedit.exe
2. Click on any root key, like HKEY_LOCAL_MACHINE
3. Open File menu, select Load Hive
4. Select a file in your mounted ROM \Windows\System32\config, like SOFTWARE or SYSTEM, open it
5. In the dialog asking for a name, input any text, like WP8Software
6. Registry is now loaded under HKEY_LOCAL_MACHINE\WP8Software, you can edit it.
7. Open File menu, select Unload Hive, then its written back to disk.
reference: http://technet.microsoft.com/en-us/library/cc732157.aspx
Click to expand...
Click to collapse

Check this post : http://forum.xda-developers.com/showpost.php?p=44312736&postcount=41
I used 7zip to extract the file

vivekkalady said:
Check this post : http://forum.xda-developers.com/showpost.php?p=44312736&postcount=41
I used 7zip to extract the file
Click to expand...
Click to collapse
That works fine for .wim or a .zip, but these files are the complete registry store that's same format that Windows 2000, XP, Vista, ect. uses to store the settings for hardware/drivers, windows itself, and other apps that have that kind of access (e.x. Tier3 Applications)

If it's same format as XP/Vista type it should be easy openable, look for the application on the internet.

GodlikePL said:
If it's same format as XP/Vista type it should be easy openable, look for the application on the internet.
Click to expand...
Click to collapse
Apparently it isn't. I used RegistryEditorPE, that's supposed to work with offline registries for 2000 to 7, but it kept erroring out.
Sent from my RM-860 (Lumia 928) using the OFFICIAL Tapatalk app.

This is good stuff to know. Something that should be good to note is that while I decompiled the .NET for a few of the Verizon Xaps from the 928 ROM, I discovered some Nokia-specific COM Interop that interfaces with the registry. I'm hoping I can try something out and put up a test program within the next few days and make some registry changes.

Hi
I found a registry key
[HKEY_LOCAL_MACHINE\Software\Microsoft\Office Mobile\SPMC\Action\doc]
"Application"=dword:00000005
"ApplicationCommand"="app://5B04B775-356B-4AA0-AAF8-6491FFEA5617/Default?CmdLine=-url %s"
"Action"=dword:00000003
this is for Microsoft office Word
I think we can open word using the link i guess (app://5B04B775-356B-4AA0-AAF8-6491FFEA5617/)
so is this part useful?
can external commands executable through this part (CmdLine=-url %s) ??
something like this
http://dotnet.dzone.com/articles/windows-phone-7-tip-day-know

@snickler: Let me know if you succeed with that. I managed to sideload an app using one of those libraries (after removing nearly all the interesting capabilities...), but immediately got an error about the component not being registered. I didn't try running regsvr or anything, though...

GoodDayToDie said:
@snickler: Let me know if you succeed with that. I managed to sideload an app using one of those libraries (after removing nearly all the interesting capabilities...), but immediately got an error about the component not being registered. I didn't try running regsvr or anything, though...
Click to expand...
Click to collapse
Hmmm, which phone do you have?
Edit: I tried to deploy just a sample app with one of the .winmds referenced, and got the 0x81030120 error
Holy fuzzle.. ANOTHER EDIT: I was able to do it. I had to remove all the damn Capabilities that I added from the Nokia Maps xap though.
I referenced the NokiaRegistryUtils.winmd and just ran this sample code
MessageBox.Show(NokiaRegistryUtils.Registry.IsChinaFirmware().ToString());
It returned "false" as expected.
I'm going to try something else now.
Something to note, in the WMAppManifest.xml, the following needs added after the <Tokens> declaration
<ActivatableClasses>
<InProcessServer>
<Path>NokiaRegistryUtils.dll</Path> <-- or whatever dll you're adding
<ActivatableClass ActivatableClassId="NokiaRegistryUtils.Registry" ThreadingModel="both" />
</InProcessServer>
</ActivatableClasses>

vivekkalady said:
Hi
I found a registry key
[HKEY_LOCAL_MACHINE\Software\Microsoft\Office Mobile\SPMC\Action\doc]
"Application"=dword:00000005
"ApplicationCommand"="app://5B04B775-356B-4AA0-AAF8-6491FFEA5617/Default?CmdLine=-url %s"
"Action"=dword:00000003
this is for Microsoft office Word
I think we can open word using the link i guess (app://5B04B775-356B-4AA0-AAF8-6491FFEA5617/)
so is this part useful?
can external commands executable through this part (CmdLine=-url %s) ??
something like this
http://dotnet.dzone.com/articles/windows-phone-7-tip-day-know
Click to expand...
Click to collapse
Where did you find that key?

in ffu file
location <ffu mount>\Windows\Packages\RegistryFiles\Microsoft.Office.Word.reg

Perfect. That's what I'm doing now, but just from my 920 ROM dump. I can access the registry sections that Nokia provides in their app, but I can't from the one you provided me. I'm going to do more tests to see if this is using HKCU rather than HKLM. It could also be that the registry keys have permissions placed on them.

Hmm,
I'm able to get the value of SOFTWARE\Classes\MIME\Database\Codepage\1254 -> BodyCharset

I may write a simple app that reads registry from Lumia devices... I think that's going to happen today.

found these things dont know it is of any use
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.4.1.311.10.3.3]
"$DLL"="C:\\Windows\\System32\\WINTRUST.DLL"
"CallbackAllocFunction"="SoftpubLoadDefUsageCallData"
"CallbackFreeFunction"="SoftpubFreeDefUsageCallData"
"DefaultId"="{573E31F8-AABA-11D0-8CCB-00C04FC295EE}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.5.5.7.3.1]
"$DLL"="C:\\Windows\\System32\\WINTRUST.DLL"
"CallbackAllocFunction"="SoftpubLoadDefUsageCallData"
"CallbackFreeFunction"="SoftpubFreeDefUsageCallData"
"DefaultId"="{573E31F8-AABA-11D0-8CCB-00C04FC295EE}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.5.5.7.3.2]
"$DLL"="C:\\Windows\\System32\\WINTRUST.DLL"
"CallbackAllocFunction"="SoftpubLoadDefUsageCallData"
"CallbackFreeFunction"="SoftpubFreeDefUsageCallData"
"DefaultId"="{573E31F8-AABA-11D0-8CCB-00C04FC295EE}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Usages\1.3.6.1.5.5.7.3.3]
"DefaultId"="{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Providers\Trust\Usages\2.16.840.1.113730.4.1]
"$DLL"="C:\\Windows\\System32\\WINTRUST.DLL"
"CallbackAllocFunction"="SoftpubLoadDefUsageCallData"
"CallbackFreeFunction"="SoftpubFreeDefUsageCallData"
"DefaultId"="{573E31F8-AABA-11D0-8CCB-00C04FC295EE}"
Click to expand...
Click to collapse
http://support.microsoft.com/kb/287547

vivekkalady said:
found these things dont know it is of any use
http://support.microsoft.com/kb/287547
Click to expand...
Click to collapse
I did find THIS..
Code:
[HKEY_LOCAL_MACHINE\Software\Microsoft\DeviceReg\Install]
"MaxUnsignedApp"=dword:7FFFFFFF"
That translates to the value of InterOp unlock by default which means we should be able to sideload more than 10 apps at a time.
I also found these within policy xml files
Code:
Microsoft.BaseOS.SecurityModel.policy.xml
<Capability ElementID="2EF45E94A01864DE3387212D6E73AEA885E709AD0F24FB97FE2E84728CB09D14" AttributeHash="49B8EC80A54998B68D7F65A44A340FD28B535494B7A41D650FD94851E38A6B6B" Id="ID_CAP_DEVELOPERUNLOCK" AppCapSID="S-1-15-3-1024-2489250862-3731101856-757172019-2830005102-2903107461-2549818383-1921265406-345878668" SvcCapSID="S-1-5-21-2702878673-795188819-444038987-1443" FriendlyName="Enable bearing chamber to load unsigned modules" Visibility="Internal" />
<Capability ElementID="BAFBED1970753822A266C1985F4A2CA2BA7A97CCE149F874743D00F678643C26" AttributeHash="54A2744DE064E139FD4403623C2AB9F1E130BC5C0786F56C1CE39AC814DC3F03" Id="ID_CAP_DEVELOPERUNLOCK_API" AppCapSID="S-1-15-3-1024-435026874-574125424-2562811554-2720811615-3432479418-1962428897-4127210868-641492088" SvcCapSID="S-1-5-21-2702878673-795188819-444038987-1450" FriendlyName="Enable setting of registry key protecting developer unlock mode." Visibility="Internal">
<CapabilityRules>
<Rules>
<RegKey ElementID="F0921CC3ADB2FEE5B7DC90F9F2BBDDB6E4D7BFAF9CE189C1585A90CD71E36882" DACL="(A;CI;KRKW;;;S-1-15-3-1024-435026874-574125424-2562811554-2720811615-3432479418-1962428897-4127210868-641492088)(A;CI;KRKW;;;S-1-5-21-2702878673-795188819-444038987-1030)(A;CI;KRKW;;;S-1-5-21-2702878673-795188819-444038987-1450)" Flags="515" Path="HKEY_LOCAL_MACHINE\Software\Microsoft\SecurityManager" />
</Rules>
</CapabilityRules>
</Capability>
<Capability ElementID="BAFBED1970753822A266C1985F4A2CA2BA7A97CCE149F874743D00F678643C26" AttributeHash="54A2744DE064E139FD4403623C2AB9F1E130BC5C0786F56C1CE39AC814DC3F03" Id="ID_CAP_DEVELOPERUNLOCK_API" AppCapSID="S-1-15-3-1024-435026874-574125424-2562811554-2720811615-3432479418-1962428897-4127210868-641492088" SvcCapSID="S-1-5-21-2702878673-795188819-444038987-1450" FriendlyName="Enable setting of registry key protecting developer unlock mode." Visibility="Internal">
<CapabilityRules>
<Rules>
<RegKey ElementID="F0921CC3ADB2FEE5B7DC90F9F2BBDDB6E4D7BFAF9CE189C1585A90CD71E36882" DACL="(A;CI;KRKW;;;S-1-15-3-1024-435026874-574125424-2562811554-2720811615-3432479418-1962428897-4127210868-641492088)(A;CI;KRKW;;;S-1-5-21-2702878673-795188819-444038987-1030)(A;CI;KRKW;;;S-1-5-21-2702878673-795188819-444038987-1450)" Flags="515" Path="HKEY_LOCAL_MACHINE\Software\Microsoft\SecurityManager" />
</Rules>
</CapabilityRules>
</Capability>

Need a Nokia Device?
snickler said:
I may write a simple app that reads registry from Lumia devices... I think that's going to happen today.
Click to expand...
Click to collapse
Thats great! If anyone needs a Nokia device to test on, Nokia has Remote Device Access to those who need it. Its a free service to anyone who has a Nokia DEVELOPER account, which is separate but free as well. The devices they mostly have are Lumia 820s, but the have a few others (620, 720, 920 and the 928.) The great thing about them, you can deploy an xap and run the apps. Some of those phones have sims in them and some of them have a "Nokia On-Device Diagnostic Tool". The only drawback, is that the connection can be SLOW.

Huh, you had to add the InProcServer manually? That may be the problem, then. I'm not sure why they're using COM - it works just fine to simply use the native Win32 APIs (add references to ADVAPI32LEGACY.LIB and/or KERNELBASE.LIB; that's what my NativeAccess library does and it works fine) - but it's good to know that COM is, in fact, usable.

Yeah, I already found those policy files. As I've said in other posts, if you can find a way to sideload an app that uses them, we can do a lot more than is currently possible - the internal and private capabilities (and some of the so-called public ones, most of which still won't install) have all kinds of cool potential.
One advantage of the WP8 app model, as opposed to the WP7 model that used ID_CAP_INTEROPSERVICES for everything, is that an app like you're making may well work on other devices. The fact that you got the interop-lock error means that the app did have ID_CAP_INTEROPSERVICES specified, so it may use it for some things, but the registry access is probably not one of them.

GoodDayToDie said:
Yeah, I already found those policy files. As I've said in other posts, if you can find a way to sideload an app that uses them, we can do a lot more than is currently possible - the internal and private capabilities (and some of the so-called public ones, most of which still won't install) have all kinds of cool potential.
One advantage of the WP8 app model, as opposed to the WP7 model that used ID_CAP_INTEROPSERVICES for everything, is that an app like you're making may well work on other devices. The fact that you got the interop-lock error means that the app did have ID_CAP_INTEROPSERVICES specified, so it may use it for some things, but the registry access is probably not one of them.
Click to expand...
Click to collapse
The best part is that the Nokia CityLens uses ID_CAP_INTEROPSERVICES, but I can't find anything that references it.
The winmds use System.Runtime.InteropServices though.
The Nokia app I got the RegistryRT from didn't use the INTEROP Capability at all, but I did notice that I had to add that extra stuff in the AppManifest.

[REQUEST] latest extras+info

I need for someone to possibly dump the latest version of the app from their development/pre-production edition of their Nokia Lumia. I don't think it matters if its a BUILD 920 or if its a developer 822, or whatever. I have a few ideas of some things that can be done via this app, as almost all of the dial codes on the 928 launch extras+info. One of them involves launching the service tools (including EPST) menu and stuff of that nature. I could probably just experiment with the one that launched with the 928 GDR2 rom, but its probably missing some "features" that have been worked on, but still incomplete.
Its also possible that these are baked inside the rom and completely inaccessible to the app and will only be updated when Nokia Black update releases.
ANY HELP WOULD GREATLY APPRECIATED!!!
Sent from my RM-860 using Tapatalk

dumped from ROM .
but I don't know whether it is the latest one or not.
Also, I think you won't be able to deploy it to any NOKIA devices cause it requires INTEROP UNLOCK which is impossible on NOKIA now.

hjc4869 said:
dumped from ROM .
but I don't know whether it is the latest one or not.
Also, I think you won't be able to deploy it to any NOKIA devices cause it requires INTEROP UNLOCK which is impossible on NOKIA now.
Click to expand...
Click to collapse
did you extract it from GDR2 (Amber Rom) ?
It's not the last version .
maybe we have to wait for GDR3 then we can extract last version of Extras + Info.
or maybe someone who have Samsung Ativ S can try proxy and try to download Extras + Info from market place using Sysapp Pusher (to find market link)
Then Using Full File Access to copy app files.

ngame said:
did you extract it from GDR2 (Amber Rom) ?
It's not the last version .
maybe we have to wait for GDR3 then we can extract last version of Extras + Info.
or maybe someone who have Samsung Ativ S can try proxy and try to download Extras + Info from market place using Sysapp Pusher (to find market link)
Then Using Full File Access to copy app files.
Click to expand...
Click to collapse
That's essentially why I said I needed it from a developer lumia, I don't even think it will install on ATIVs, due to OEM drivers required. Those devices have the option to have their full filesystem exposed when changed via the "Diagnostics" app that only available on developer/pre-production handsets.
Besides that what ROM did you dump this from hjc?

thals1992 said:
That's essentially why I said I needed it from a developer lumia, I don't even think it will install on ATIVs, due to OEM drivers required. Those devices have the option to have their full filesystem exposed when changed via the "Diagnostics" app that only available on developer/pre-production handsets.
Click to expand...
Click to collapse
I haven't read your posts here, so not sure if my post is still relevant, but one great chinese guy asked me to send this to you:
from R&D Lumia
https://www.dropbox.com/s/pf31egysniuschp/extras-hongkong.zip

Is your dump from the first GDR2 that appeared on NCS for the 928 or the actual release? I have the 2nd update but not sure if extras&info updated since then??? Found this in a wim which gives me new hope that the tool is buried somewhere in this mess...
RegKeyName="$(hklm.microsoft)\Shell\OEM\Start"
RegName="AltLayoutID"
RegType="REG_DWORD" />
<!-- -->
<SettingMapping Name="FeatureTileID"
RegKeyName="$(hklm.microsoft)\Shell\OEM\Start"
RegName="FeatureTileID"
RegType="REG_DWORD" />
<!-- -->
<SettingMapping Name="DiagnosticEnabled"
RegKeyName="$(hklm.microsoft)\Shell\OEM\Start"
RegName="DiagnosticEnabled"
RegType="REG_DWORD" />
</SettingsGroupMapping>
</ComponentMapping>
Click to expand...
Click to collapse

Guys a little question
Why don't we use the first lumia 920 rom ?
maybe we can find something that can help us to Interop Unlock but Microsoft and Nokia delete that in next rom releases .
Then we can Prevent Re-lock and update phone again !
I'm not sure but it seams to be some different between GDR2 rom of Nokia Lumia 920 (Apac Malaysia White is mine) and it's first Rom .
I have some problems in these days and I don't see all the differents but In first view you can find that there is no test folder in first rom but GDR2 have a folder named test and includes "QCFMFTMApp.exe"
or another thing is all of the programs are listed in :
PROGRAMS\CommonFiles\Xaps
but in GDR2 there's some xap files in this address too :
PROGRAMS\CommonFiles\OEM\Public\PreloadedApps\tier3Apps
did anyone checked the older Roms?

Thats it! I needed ver. 3.0.6.1 (because I can't deploy this to it and I'm not reflashing to just have an older version) to first see if there were any changes to Nokia.FUE.WinPRTRegistry, and possibly launch that registry script that's been embedded in it. Now all I need to do is see if there is a URI that links to the page, but I believe all bets are off. Nokia has been good about cleaning up their tracks.
THe version from the other extras was 2.6.1.18.

ngame said:
Guys a little question
Why don't we use the first lumia 920 rom ?
I have some problems in these days and I don't see all the differences but in first view you can find that there is no test folder in first rom but GDR2 have a folder named test and includes "QCFMFTMApp.exe"
or another thing is all of the programs are listed in :
PROGRAMS\CommonFiles\Xaps
but in GDR2 there's some xap files in this address too :
PROGRAMS\CommonFiles\OEM\Public\PreloadedApps\tier3Apps
did anyone checked the older Roms?
Click to expand...
Click to collapse
QCFMTMApp.exe seems to be a driver level executable that physically tunes the FM Radio in Nokia's various phones.
tier3apps, seem to be xaps that need additional permissions that essentially use provxml like in WP7 days. The NFL app that @tonbonz had done some looking into had a settings page that changes the WAP address for Verizon devices.It was interesting at the very least to see the differences between HTC and Nokia. The difference? @wap vs no @wap

Dump files from 2nd 928 GDR2 .... http://sdrv.ms/1hnqgNA

This package(extra+info) contains a silent installer and it is worth doing some research around it.
I opened it using ilspy only to find it called AddPackageAsync(), which is available in Windows Runtime to deploy enterprise xap and nobody knows how it works. @GoodDayToDie @ultrashot how do you think about it? Nokia use this API to install and update xap in settings page. It seems to be a service agent,too ,which is very interesting. How did it call the API silently...when we call the API, user will notice a notification asking whether he/she wants to install the enterprise app but no matter how you call it, the deployment won't succeed

hjc4869 said:
This package(extra+info) contains a silent installer and it is worth doing some research around it.
I opened it using ilspy only to find it called AddPackageAsync(), which is available in Windows Runtime to deploy enterprise xap and nobody knows how it works. @GoodDayToDie @ultrashot how do you think about it? Nokia use this API to install and update xap in settings page. It seems to be a service agent,too ,which is very interesting. How did it call the API silently...when we call the API, user will notice a notification asking whether he/she wants to install the enterprise app but no matter how you call it, the deployment won't succeed
Click to expand...
Click to collapse
I am also wondering about details of Enterprise deployment - I haven't looked into it too much, but as i remember you have to install .cer provided by MS to device and then sign your xap with it, and such apps will get installed.
(I was wondering if such signing can "unlock" any of interesting capabilities)

Sadly, enterprise apps (CAPABILITY_CLASS_ENTERPRISE_APPLICATIONS) just uses the same capability list as CAPABILITY_CLASS_THIRD_PARTY_APPLICATIONS; nothing useful there. It's a shame.

GoodDayToDie said:
Sadly, enterprise apps (CAPABILITY_CLASS_ENTERPRISE_APPLICATIONS) just uses the same capability list as CAPABILITY_CLASS_THIRD_PARTY_APPLICATIONS; nothing useful there. It's a shame.
Click to expand...
Click to collapse
After diving into a Lumia 521 ROM, I am not 100% sure that's the case....
I was poking around in the tier3apps directory (\PROGRAMS\CommonFiles\OEM\Public\PreloadedApps\tier3Apps\), and I noticed that some of these apps ("Nokia Accessories" and "Network Settings" apps) have interesting capabilities such as <Capability Name="ID_CAP_CELL_API_OEM_PASSTHROUGH"/>, <Capability Name="ID_CAP_INTEROPSERVICES"/>, and <Capability Name="ID_CAP_OEM_DEPLOYMENT"/>. These apps can be installed/updated via Nokia's "SilentInstaller" app. Nokia's "SilentInstaller" app just calls into AddPackageAsync(), which is available to us "normal folk" for Enterprise app deployment.
I am wondering if we could create some sort of a "shell" xap with a giant "Install button" that contains a payload such as an unaltered copy of the Samsung Diagnostics xap and appropriate license file. Clicking on the Install button would then install the signed "elevated app" onto any device. We could then launch a toast that will launch the "Registry Editor" page in the Samsung app, allowing for us to interop unlock.
The only thing that I can think of that would make this fruitless is if somehow "AddPackageAsync()" is being called "elevated" by Extras + Info (maybe it inherits whatever capabilities the parent process launched as?), and that is why Nokia can deploy things like this.
What do you guys think? This is all speculation, but I think it could be worth exploring.
**EDIT**
My phone will be back from service Wednesday, so maybe I will whip something up next weekend, if no one tries before then.

compu829 said:
After diving into a Lumia 521 ROM, I am not 100% sure that's the case....
I was poking around in the tier3apps directory (\PROGRAMS\CommonFiles\OEM\Public\PreloadedApps\tier3Apps\), and I noticed that some of these apps ("Nokia Accessories" and "Network Settings" apps) have interesting capabilities such as <Capability Name="ID_CAP_CELL_API_OEM_PASSTHROUGH"/>, <Capability Name="ID_CAP_INTEROPSERVICES"/>, and <Capability Name="ID_CAP_OEM_DEPLOYMENT"/>. These apps can be installed/updated via Nokia's "SilentInstaller" app. Nokia's "SilentInstaller" app just calls into AddPackageAsync(), which is available to us "normal folk" for Enterprise app deployment.
I am wondering if we could create some sort of a "shell" xap with a giant "Install button" that contains a payload such as an unaltered copy of the Samsung Diagnostics xap and appropriate license file. Clicking on the Install button would then install the signed "elevated app" onto any device. We could then launch a toast that will launch the "Registry Editor" page in the Samsung app, allowing for us to interop unlock.
The only thing that I can think of that would make this fruitless is if somehow "AddPackageAsync()" is being called "elevated" by Extras + Info (maybe it inherits whatever capabilities the parent process launched as?), and that is why Nokia can deploy things like this.
What do you guys think? This is all speculation, but I think it could be worth exploring.
**EDIT**
My phone will be back from service Wednesday, so maybe I will whip something up next weekend, if no one tries before then.
Click to expand...
Click to collapse
Samsung Diagnosis uses RPC (Remote Procedure Call) to access high privileged functions. We are not sure if Server exists on other phones.

-W_O_L_F- said:
Samsung Diagnosis uses RPC (Remote Procedure Call) to access high privileged functions. We are not sure if Server exists on other phones.
Click to expand...
Click to collapse
I don't know is it that thing you want or no but check it :
http://d-h.st/Me3

ngame said:
I don't know is it that thing you want or no but check it :
http://d-h.st/Me3
Click to expand...
Click to collapse
Yep! That's it. But I'm not sure it'll work.

-W_O_L_F- said:
Yep! That's it. But I'm not sure it'll work.
Click to expand...
Click to collapse
No problem I can test for you . my device is a Lumia 920 with Malaysia GDR 3 (Developer test) rom. and surely it's dev unlock
please tell me what can I do and how can I help you ?

I could test too... I don't know if the fact this is a dual CDMA+GSM device will change any parts of the app, but I can always try!
Sent from my RM-860 using Tapatalk

I have uploaded Extras And Info v3.0.6.1.xap here:
https://hotfile.com/list/2278056/5476aae

Install location of the appx?

Hi guys,
I just unlocked Sammy Odyssey (thanks WOLF & GoodDayToDie) and upgraded to PfD 8.1 (all done without using MBN Creator). Full FS access is enabled and I can see the handset file system (but partially probably?)
I can access installed (sideloaded or from store) apps in "Data\programs" but when I sideloaded an appx bundle app (just for educational purposes, I'll not provide any link because of xda's anti-warez policy), I can't find installed application...
Does anyone know where they are (appx applications) installed?

sensboston said:
Hi guys,
I just unlocked Sammy Odyssey (thanks WOLF & GoodDayToDie) and upgraded to PfD 8.1 (all done without using MBN Creator). Full FS access is enabled and I can see the handset file system (but partially probably?)
I can access installed (sideloaded or from store) apps in "Data\programs" but when I sideloaded an appx bundle app (just for educational purposes, I'll not provide any link because of xda's anti-warez policy), I can't find installed application...
Does anyone know where they are (appx applications) installed?
Click to expand...
Click to collapse
Because installation Directory of appx files are different .
as I remember it was in :
C:\ProgramFiles (or Programs)\WindowsApps(or Windows Apps)
in SD Card :
D:\WPSystem\Windows Apps
hope you find the directory
so sorry , my phone didn't Unlocked yet and I don't know many things

Thanks. Looks like this folder is invisible via MTP (full FS access), probably, some WP8-specific file attributes are set.

Your MTP service is probably running under the PROTOCOLS account, rather than as SYSTEM. PROTOCOLS (the normal account for MTP) can't see that folder, but SYSTEM can. No WP8-specific attributes, just very tight permissions. If you try to browse to it using Native Access Fileserver (AllCapabilities version, of course) you may be able to read there, though (haven't actually checked).

GoodDayToDie, unfortunately all caps not working on PfD 8.1 And "yes", I agree, looks like it's a permission issue...

sensboston said:
GoodDayToDie, unfortunately all caps not working on PfD 8.1 And "yes", I agree, looks like it's a permission issue...
Click to expand...
Click to collapse
did you unlock RPCComponents via creating Non-Production file ?

ngame said:
did you unlock RPCComponents via creating Non-Production file ?
Click to expand...
Click to collapse
Yes I did but EnableAllSideloading is not working (but BootstrapSamsung is working).
Sounds like we should rename proud name "Full FS access" to "Partial FS access" - it will be more realistic

sensboston said:
Yes I did but EnableAllSideloading is not working (but BootstrapSamsung is working).
Sounds like we should rename proud name "Full FS access" to "Partial FS access" - it will be more realistic
Click to expand...
Click to collapse
In WP8.1 I tried to unlock capabilities and yes it doesn't work with the old ways
I need an Ativ S to unlock Capabilities on GDR2 or GDR3 and then update to 8.1 and see what changed in registry !
for full fs you are a developer you can downgrade to GDR2 and then upgrade to 8.1
develop an app that get folders from Path ("C:") then using Directory Info class change all folder type as Normal I think .
you can see all of them using MTP connection
but please pay attention I didn't test this way and it may not work or it can brick your phone I don't know it . 
 @GoodDayToDie : Any Idea ?

@ngame, do you know how to downgrade Verizon's ATIV Odyssey SCH-i930? I can't find firmware for this handset...
BTW, do we have an advanced file manager for interop unlocked phones (for sideload only of course)? I think, even if appx folder isn't available to get in (like on desktop Windows, C:\Program Files\WindowsApps), it should be visible somehow in the Program Files...
I will try to insert sd-card to the phone, and select default installation patch to the sd-card - maybe this solves appx location problem...

ngame said:
In WP8.1 I tried to unlock capabilities and yes it doesn't work with the old ways
I need an Ativ S to unlock Capabilities on GDR2 or GDR3 and then update to 8.1 and see what changed in registry !
for full fs you are a developer you can downgrade to GDR2 and then upgrade to 8.1
develop an app that get folders from Path ("C:") then using Directory Info class change all folder type as Normal I think .
you can see all of them using MTP connection
but please pay attention I didn't test this way and it may not work or it can brick your phone I don't know it .
@GoodDayToDie : Any Idea ?
Click to expand...
Click to collapse
It was already about this
http://forum.xda-developers.com/showpost.php?p=52097953&postcount=134

@marass82, about what? Please try to read topic before posting...

For WP8.1.1 Full FS access requires changes to the registry

So, with the sd-card, simple WPSystem_Folder_Unlocker and Pocket File Manager 4.3.4 I achieved my goal: I'm able to view/modify/copy installed appx. But WPSystem on sd-card still invisible via MTP (fortunately, PFM has builtin ftp server so I still can use my favorite Far Manager )

marass82 said:
For WP8.1.1 Full FS access requires changes to the registry
Click to expand...
Click to collapse
Hmm... I'm not talking about "full FS access" (I already have one!), this topic is about access to the appx installation folder (which is not accesible even with "full FS access" because it's not a full).
On the sd-card, all apps (xaps and appxes) are installed to the "SD Card/WPSystem/Apps/WindowsApps", on the internal phone storage, installed xaps are stored to the "Phone\Data\programs", but appxes should be stored to "Phone\PROGRAM FILES\WindowsApps or something like this, but nobody knows exactly...

full FS access

sensboston said:
Yes I did but EnableAllSideloading is not working (but BootstrapSamsung is working).
Sounds like we should rename proud name "Full FS access" to "Partial FS access" - it will be more realistic
Click to expand...
Click to collapse
It's FULL, but second part of the hack is unstable.

@marass82, I'm sorry, looks like I misunderstood you. You mean with these registry changes I'll be able to access to full file system, correct?
By the way, how did you added these settings to the registry? Via WOLF's "MBN Creator" tool?

sensboston said:
@marass82, I'm sorry, looks like I misunderstood you. You mean with these registry changes I'll be able to access to full file system, correct?
By the way, how did you added these settings to the registry? Via WOLF's "MBN Creator" tool?
Click to expand...
Click to collapse
for odyssey there's no rom to create flashable rom or downgrade
use Capability Hack trick to use registry editor .
I think it's the best way for you to done it

1) Yes
2) Yes, is it possible

@ngame, could you please be a little bit more specific? What is "Capability Hack trick"? How to add these settings (provided by @marass82) to the registry?

[XAP][Source] Resource Hacker for Lumia

Hi,
After a getting FS Access using InteropServices on Lumia, I've just made small app. That allows us to import any OEM package to Lumia Device.
So, I've Implemented Samsung Resources like "FCRouter" IDrivers/Services and much more from samsung SPH - I800 and it works like a charm.
But I've not got any uses of Samsung one but it would be worth for research and development with appropriate resources.
We can even Import Packages from Engineering, Developer ROM. I.e. for DISABLE_ID_CHECK, DISABLE_SIGNTEST_ENVIRONMENT and much more.
1. Placed "Windows" Folder on SD Card. (Do not Interfere with the folder. It should be like this "D:\Windows")
2. Install XAP.
3. Run Auto Patcher.
In order to apply those packages to the System, you need to make HARD RESET.
If all the result value's gets "TRUE" then make reset, otherwise don't.
You can Import any OEM Package to Lumia Device. Such as, Huawei, HTC, Samsung.
But note that, Do Not Modify any package. It will break the signature and you will brick your device.
Having a Heavy Service of Samsung will Drain your battery fast.

Will a soft reset by pressing volume down+power button do the work???

souma_rox said:
Will a soft reset by pressing volume down+power button do the work???
Click to expand...
Click to collapse
no it won't because the packages need to be installed and by doing a hard reset the phone installs them

Are you suggesting that we can flash engineering images on retail devices, from the device? If so, have you tried this on anything Samsung?

But the xap is not installing ? =/

Damn this life
I want such thing for my L920

djamol said:
Hi,
After a getting FS Access using InteropServices on Lumia, I've just made small app. That allows us to import any OEM package to Lumia Device.
So, I've Implemented Samsung Resources like "FCRouter" IDrivers/Services and much more from samsung SPH - I800 and it works like a charm.
But I've not got any uses of Samsung one but it would be worth for research and development with appropriate resources.
We can even Import Packages from Engineering, Developer ROM. I.e. for DISABLE_ID_CHECK, DISABLE_SIGNTEST_ENVIRONMENT and much more.
1. Placed "Windows" Folder on SD Card. (Do not Interfere with the folder. It should be like this "D:\Windows")
2. Install XAP.
3. Run Auto Patcher.
In order to apply those packages to the System, you need to make HARD RESET.
If all the result value's gets "TRUE" then make reset, otherwise don't.
You can Import any OEM Package to Lumia Device. Such as, Huawei, HTC, Samsung.
But note that, Do Not Modify any package. It will break the signature and you will brick your device.
Click to expand...
Click to collapse
Your app can't be deployed because it has interop services as capability

ya it's not installing

You have to replace it with extras + info
Freely remove interop services , deploy and then replace
@djamol as you know I have Ativ S now and I can send you any thing you want from my I8750
And even from GDR2 , 3 or later roms
And I know there's a way to ruin huawei w1 in mass storage mode .
Let's do a research with reker

and how exactly do I replace it? none of what I've been doing seems to work.

djamol said:
Hi,
After a getting FS Access using InteropServices on Lumia, I've just made small app. That allows us to import any OEM package to Lumia Device.
So, I've Implemented Samsung Resources like "FCRouter" IDrivers/Services and much more from samsung SPH - I800 and it works like a charm.
But I've not got any uses of Samsung one but it would be worth for research and development with appropriate resources.
We can even Import Packages from Engineering, Developer ROM. I.e. for DISABLE_ID_CHECK, DISABLE_SIGNTEST_ENVIRONMENT and much more.
1. Placed "Windows" Folder on SD Card. (Do not Interfere with the folder. It should be like this "D:\Windows")
2. Install XAP.
3. Run Auto Patcher.
In order to apply those packages to the System, you need to make HARD RESET.
If all the result value's gets "TRUE" then make reset, otherwise don't.
You can Import any OEM Package to Lumia Device. Such as, Huawei, HTC, Samsung.
But note that, Do Not Modify any package. It will break the signature and you will brick your device.
Click to expand...
Click to collapse
This should allow us to install the WiFi Calling service from their phones and install it on others!

@G.moe : Actually It is Policy vulnerability i think so, that the OS Component Doesn't check the any OEM ID or key.
and having legal signed packages will be the "TRUSTED" packages. OS Component will respect them to Install because of they are signed with valid signature.
Also it will work on any OEM Device not specific for the Lumia. On other OEM Device need FS Access to place any appropriate packages to their System.
If we get at least any "TESTING" certificate (provided by MSFT in 10 Environment publicly) to sign own builded packages , then we will get the COMPLETE Control on the OS as a ROOT ACCESS. (like a First-Ever Custom ROM at runtime)
@souma_rox : It is required InteropServices Capability. If anyone don't have Interop Unlocked their Device. Then It is a possible hijacking Extras+Info App. as ngame told you before.
@ngame : Thanx Bro for everything. Can you send me the Packages and Config folder from GDR 2 and 8.1 ?
I want to do a research on it.
@thals1992 : Do you have that packages ? I'll try it and may be that is possible to bring those features on other Device. Thnx

djamol said:
@G.moe : Actually It is Policy vulnerability i think so, that the OS Component Doesn't check the any OEM ID or key.
and having legal signed packages will be the "TRUSTED" packages. OS Component will respect them to Install because of they are signed with valid signature.
Also it will work on any OEM Device not specific for the Lumia. On other OEM Device need FS Access to place any appropriate packages.
If we get at least any "TESTING" certificate to sign own builded packages , then we will get the COMPLETE Control on the OS as a ROOT ACCESS. (like a Custom ROM at runtime)
@souma_rox : It is required InteropServices Capability. If anyone don't have Interop Unlocked their Device. Then It is a possible hijacking Extras+Info App. as ngame told you before.
@ngame : Thanx Bro for everything. Can you send me the Packages and Config folder from GDR 2 and 8.1 ?
I want to do a research on it.
@thals1992 : Do you have that packages ? I'll try it and may be that is possible to bring those features on other Device. Thnx
Click to expand...
Click to collapse
yeah sure .
let me see can I extract the Rom or not if I couldn't I will flash for you to GDR2
you are already using W10 TP ?
If yes let me know . I'll send you a better trick to work on it

ngame said:
yeah sure .
let me see can I extract the Rom or not if I couldn't I will flash for you to GDR2
you are already using W10 TP ?
If yes let me know . I'll send you a better trick to work on it
Click to expand...
Click to collapse
Hey, Do not flash your Device. You can extract ROM using wolf's tool. They are really awesome. After then you can mount with OSFMount .bin files.
I never Install WP 10. Because of it's very buggy and initial Build. I'll get it later pre-Installed Device. Anyway can you tell me your trick? Then it will be useful for everyone. Especially for @GoodDayToDie for his HTC M8. and we all know that he is genius man.

Its inside of the ROMs for The Lumia 521, 925, and I believe the OneM8 for T-Mobile as well (might be a few devices I'm missing.) Unfortunately my 3TB hard-drive crashed and the VHD of it that I had is gone.

ngame said:
You have to replace it with extras + info
Freely remove interop services , deploy and then replace
@djamol as you know I have Ativ S now and I can send you any thing you want from my I8750
And even from GDR2 , 3 or later roms
And I know there's a way to ruin huawei w1 in mass storage mode .
Let's do a research with reker
Click to expand...
Click to collapse
Good work but....
I have extras + info in SD but If I try to replace app files manually, the application does not start

djamol said:
@G.moe : Actually It is Policy vulnerability i think so, that the OS Component Doesn't check the any OEM ID or key.
and having legal signed packages will be the "TRUSTED" packages. OS Component will respect them to Install because of they are signed with valid signature.
Also it will work on any OEM Device not specific for the Lumia. On other OEM Device need FS Access to place any appropriate packages to their System.
If we get at least any "TESTING" certificate (provided by MSFT in 10 Environment publicly) to sign own builded packages , then we will get the COMPLETE Control on the OS as a ROOT ACCESS. (like a First-Ever Custom ROM at runtime)
@souma_rox : It is required InteropServices Capability. If anyone don't have Interop Unlocked their Device. Then It is a possible hijacking Extras+Info App. as ngame told you before.
@ngame : Thanx Bro for everything. Can you send me the Packages and Config folder from GDR 2 and 8.1 ?
I want to do a research on it.
@thals1992 : Do you have that packages ? I'll try it and may be that is possible to bring those features on other Device. Thnx
Click to expand...
Click to collapse
Ok i did everything successfully but the problem is the HARD RESET part u know my device is perfect now if I hard reset then I will have to download all the apps again...
Hey insted of hard reset if I update my phone to win10 will it work????

@WojtasXda : Thnx. Did you copied files without modifying "Apps" Folder ?
If you modified "Apps" folder, it'll get encrypted.
And one more tip for you. Do not place your Huawei OEMSettings.reg on Lumia. It will work on unlocked bootloaders only.
@souma_rox : Do not try if you're not a cool developer. Yeah, really. If something goes wrong, you will get soft brick your device.
Right now, this resources is not use full or I've not find any use from Samsung one. So, I think you have to wait for any cool findings.
Anyway. If you want to try. You can do it using language update. Let me know.

djamol said:
@WojtasXda : Thnx. Did you copied files without modifying "Apps" Folder ?
If you modified "Apps" folder, it'll get encrypted.
And one more tip for you. Do not place your Huawei OEMSettings.reg on Lumia. It will work on unlocked bootloaders only.
@souma_rox : Do not try if you're not a cool developer. Yeah, really. If something goes wrong, you will get soft brick your device.
Right now, this resources is not use full or I've not find any use from Samsung one. So, I think you have to wait for any cool findings.
Anyway. If you want to try. You can do it using language update. Let me know.
Click to expand...
Click to collapse
yeah as djamol mentioned please do not try STUPID COPY PASTES ! It's not a funny game .
and if you think this app can do a REAL full unlock or something else you are surely WRONG . so wait .
this app and this trick will not do any special interesting work on your phone without Capability Unlock . this hack maybe the best hack that I've ever seen for Lumia phones but it's only a base . @djamol : finally I had downgraded to GDR2 for you and I packed same files you archived in windows zip .
some of those files weren't exists on GDR2 .
I packed the dll files and package files in this zip . I will wait on gdr2 while you confirm you don't need any more files
(because of file size restrictions here I renamed rar file to apk .
after download rename it again to rar or simply open it using WinRAR , 7-Zip or etc.

@ngame
Yes, Yes, Yes
What I'm Looking For.
Today something going to be happen... Yeah!
I can't wait for it... Very excited...
Thanks Bro.. Muhha...
Wait I'll send you a PM for required Stuff.

need an help to interop n unlock cap WP8.1

before some days extra+info get upadated WP10TP and also on Wp8.1. aftrer update we can't install extra+info to SDcard..now how to mod vcreg with extra+info.. for WP8.1 ..
any one can give me the list of cap. and path of cap_ so i will try to edit CAp_ with modded PDF 3. i think this might be worked

you cant do anything... be patient and wait news...

I think it's better to wait for w10 .

ngame said:
I think it's better to wait for w10 .
Click to expand...
Click to collapse
ya we understand:::;;
waiting for new tweaks:::
done:good::good::good::good::good::good:

A AJAY said:
ya we understand:::;;
waiting for new tweaks:::
done:good::good::good::good::good::good:
Click to expand...
Click to collapse
You are not alone my friend T_T

ciao!! Good news for you, some weeks ago i patched an old version of extra & info, deploy and move it to sd!! try!!
https://mega.nz/#!R5YmVTLI!NpzDEkY80rcqYKaDV94UmFbDagvatsH2IzMTWDA5wQk

canapo92 said:
ciao!! Good news for you, some weeks ago i patched an old version of extra & info, deploy and move it to sd!! try!!
https://mega.nz/#!R5YmVTLI!NpzDEkY80rcqYKaDV94UmFbDagvatsH2IzMTWDA5wQk
Click to expand...
Click to collapse
no luck with the windows application deployment tool, error 0x81030120
I believe this error is related to having interop capabilities in one of the libraries included in your XAP.
is there another deployer tha would work? (i already tested WPV xap deployer, also, no luck with that)

i'm not correct, maybe it's impossible to move e&i into sd, sorry

rickastillo said:
no luck with the windows application deployment tool, error 0x81030120
I believe this error is related to having interop capabilities in one of the libraries included in your XAP.
is there another deployer tha would work? (i already tested WPV xap deployer, also, no luck with that)
Click to expand...
Click to collapse
Have you tried with wppt ??? Or with this modified version of deployment tool http://forum.xda-developers.com/windows-phone-8/development/tool-appdeploy-8-1-capabilities-t3158053

ca_guri01 said:
Have you tried with wppt ??? Or with this modified version of deployment tool http://forum.xda-developers.com/windows-phone-8/development/tool-appdeploy-8-1-capabilities-t3158053
Click to expand...
Click to collapse
nah, tested both tools and nothing

I tried full FS access by patching an old version of CustomPFD to see if i could replace extras&info directly from phone memory.
I think some directories are hidden so i could not find the directory where the apps use to be installed.
However, i found a directory with the OEM apps (touch, extra&info, etc), but it seems that it's there only to be applied after a hard reset or something like that, so just replacing files wasn't enough. Extras&Info wasn't the only app with Interop Caps, but almost any app that is under settings has that cap.
So i unistalled touch settings and downloaded it from SD then i used MetroCommander to replace the SD files the old way (before CustomWPSystem was created, lol). Got nothing but an endless "Loading..." screen, but i guess i did something wrong.
But technically (someone correct me if i'm wrong) we can do Interop+Caps unlock using some other app from settings, right?
I'm pretty sure i've seen a settings app with a lot of capabilities in the manifest, not just InteropCapabilities, i don't remember exactly but it had something to do with SMS

TheBITLINK said:
I tried full FS access by patching an old version of CustomPFD to see if i could replace extras&info directly from phone memory.
I think some directories are hidden so i could not find the directory where the apps use to be installed.
However, i found a directory with the OEM apps (touch, extra&info, etc), but it seems that it's there only to be applied after a hard reset or something like that, so just replacing files wasn't enough. Extras&Info wasn't the only app with Interop Caps, but almost any app that is under settings has that cap.
So i unistalled touch settings and downloaded it from SD then i used MetroCommander to replace the SD files the old way (before CustomWPSystem was created, lol). Got nothing but an endless "Loading..." screen, but i guess i did something wrong.
But technically (someone correct me if i'm wrong) we can do Interop+Caps unlock using some other app from settings, right?
I'm pretty sure i've seen a settings app with a lot of capabilities in the manifest, not just InteropCapabilities, i don't remember exactly but it had something to do with SMS
Click to expand...
Click to collapse
Well , i think that we just have to remain with vanilla wp 8.1 until they fix wp10 annoying bugs, everytime i think i found a work around for a bug, there appear more bugs, my fault though, i chose the fast ring...

Now that Groove supports gapless playback, i'm considering going back to W10M (downgraded last week to WP8.1). But it's a hard choice, it sure has nice features but some bugs are just too annoying.
Did they fix the screenshots not appearing in Messenger/WA bug in 10549?

any updates on this? i have WP8.1 Update 2 and i'm having the same issues, not being able to install extras&info to SD card. i read somewhere on reddit (i think) that someone found a method that works currently, but searching around, i can't seem to find out the procedure..

cpshelley2 said:
i read somewhere on reddit (i think) that someone found a method that works currently, but searching around, i can't seem to find out the procedure..
Click to expand...
Click to collapse
And marmot puts it chocolate in the alu-foil...

dxdy said:
And marmot puts it chocolate in the alu-foil...
Click to expand...
Click to collapse
thank you for that wholly worthless response to an honest inquiry..

Try to push this cab using this metod: http://forum.xda-developers.com/win...ile/guide-deploying-astoria-packages-t3214481
Read this http://forum.xda-developers.com/showpost.php?p=63446863&postcount=58 , in cab folder put this unarchived :

augustinionut said:
Try to push this cab using this metod: http://forum.xda-developers.com/win...ile/guide-deploying-astoria-packages-t3214481
Read this http://forum.xda-developers.com/showpost.php?p=63446863&postcount=58 , in cab folder put this unarchived :
Click to expand...
Click to collapse
not work .gives an error and not restart as like project astoria cabs..so it not work.