yashsingh1/xdaforums huggingface dataset:
[Windows Phone 7 Development and Hacking] AndrewSh:
http://xdaforums.com/showpost.php?p=6507834&postcount=247

Look at my post. Read it. Think. Take at least that one dll from xip. Now please teach me how to reloc it. If you do that - I will tomorrow come to your place (luckily not more than 500 km with a box of vodka and we will celebrate.
[Windows Phone 7 Development and Hacking] ceesheim:
dos your post mean that the only way to reloc it is to look at it on a life operating phone (MONDRIAN ) ?
[Windows Phone 7 Development and Hacking] Nokser:
Heh... ok, ok.... but i want only file xip.bin.... ;) no more
[Windows Phone 7 Development and Hacking] Hikey:
I have a ce6 based phone(meizu m8), and I'd like try the calc7.exe on my phone.

but how can I recmod the modulus to one exe file?

maybe we can refer to the file structure in emulator (x86)
[Windows Phone 7 Development and Hacking] domineus:
weren't there issues in the rec'mod process that renders taht useless?

heck I'm not even 100 percent confident that ce 6 even translates to ce 7 due to silverlight...I mean code may be similar but there are a lot of issues involved in porting programs to ce5...I can assume the same for ce6

though I have always wanted to give the meizu a shot... =)
[Windows Phone 7 Development and Hacking] RustyGrom:
These things take time. People need to figure out the best route to take. Normally the course of action would be to get a modified rom/boot loader/SPL working on a retail device, the same device it was made for. The Mondrian isn't exactly readily available so this is a very different situation.

Before anyone compares this to the Tom Codon WP7 on HD2 debacle, don't even think about it. Everything is out in the open. If Da_G's work and transparency in this thread is any indication, things will progress and the info will be posted. I'm sure some of the others are working on stuff and will share their results when they're ready. It's only been out for a few days.
[Windows Phone 7 Development and Hacking] pupakota:
look, you ever wondered why there's NO wince port for ANY wm device so far?

nie odpowiadaj...to jest to samo. tylko gorzej.

[topic unsuscribed, reason, interest lost]
[Windows Phone 7 Development and Hacking] Diewi:
Although I guess it won't help much as we don't have proper drivers for any released deviced, I know there IS a way to create the reloc table.

I have lost the document, but it describes how to create the reloc information. It's an old document from the time before the reloc information was left in the xip file from the manufacturers.

If I remember correctly killer8nl got a copy. Sombody who wants to do this may ask him to provide it. But be warned: It's a LOT of work ;)
[Windows Phone 7 Development and Hacking] murattiss:
I personally appreciate and have respect for the effort and time spent by the developers in this thread and others who let us enjoy our devices with updated, beautiful and new software effortless and for free.
[Windows Phone 7 Development and Hacking] pupakota:
Praise them then,

did you bought ridiculous device without promised upgrade?

oooh, advert campaign worked, rest will be made by xdadev for ya.

for free.

btw, have you ever had PDA(not fockin SCREEN for 500+$ named hd2), dude?

(sorry, devs, for ot, couldn't resist today).
[Windows Phone 7 Development and Hacking] Da_G:
The MSFT tool "dumpbin.exe" can be used to regenerate a reloc table, but as you said it's not exactly a trivial thing :)

I'm breaking out the various partitions in the flash.store.bin (os.nb) to post up right now, SDLR, BLDR, ULDR1/2, NK, OS, etc... but that's about as far as I can go with things, as I don't have access to a device capable of working with these files. But at least I can document the format and build a tool to work with it for future ROMs :)

Anything further will be up to someone with access to an ARMv7 device and more than likely require a JTAG pinout, and tools to JTAG the device, as it will almost certainly result in a brick more than once in the process :)
[Windows Phone 7 Development and Hacking] murattiss:
did I say something wrong? are we guilty of using software which is offered by developers for free to the public?
[Windows Phone 7 Development and Hacking] Diewi:
Good news: I found the complete tutorial, also with examples. If I read correctly cmonex is the author. Good luck with that one.

The tool mentioned in the document is a self-written one. But thanks, Da_G, I didn't know about the little ms tool, could be helpful.

And thanks for the progress information.
[Windows Phone 7 Development and Hacking] Nokser:
Good Work Bro ;)

Very Thanks
[Windows Phone 7 Development and Hacking] Da_G:
Here's a layout of what i've figured out so far. More than likely most of the partitions I marked as "UnknownData" are really part of the previous partition, I just haven't figured out the FAT exactly right yet.

I'm uploading these raw partitions and the dumped NK/ULDR now, link coming shortly.

Edit: here's the link, sticking it in post 2 as well - this contains all raw partitions and also a dump of NK and ULDR using dumprom.exe

http://hotfile.com/dl/43557999/23bc8cb/Mondrian-raw-parts-and-dump.rar.html
[Windows Phone 7 Development and Hacking] imfloflo:
Thanks @DA_G hope it 'll help people to decrypt all of this stuff

So there will be SD card support for sure
[Windows Phone 7 Development and Hacking] pupakota:
nah, sorry for being harsh ;/
[Windows Phone 7 Development and Hacking] inf3rno1:
Your willing to travel 500 km and buy a box of vodka to celebrate? Wonder what you wouldn't be willing to do then :p

Da_G thanks for the reloc and the progress! Hopefully we get some progress on the bootloader as well, thanks everyone working on this!!!
[Windows Phone 7 Development and Hacking] inf3rno1:
Thank you! Da_G maybe you could borrow his device to get a little further with your investigations, since you mentioned you can't go any farther without an actual armv7 device
[Windows Phone 7 Development and Hacking] domineus:
you sure da_g wasn't referring to the mondrian device?

Also unique would be the use of jtag flash...can't be a coincidence that two developers are in need of this resource...

specially if the majority of the community says the developer did it for a publicity stunt...interesting results nonetheless
[Windows Phone 7 Development and Hacking] inf3rno1:
Da_G mentioned a few posts back that he needs a "ARMv7" device to hopefully JTAG, ofcourse he didn't request the actual Mondrian device, which has never even been photographed or leaked as of yet. JTAG allows developers to flash roms to a device even if the device is bricked, it is also something that has been done to MANY different devices of all sorts to "hack", and even though it i guess is a coincidence, it certainly isn't unique.
[Windows Phone 7 Development and Hacking] Da_G:
Hey, no, I meant an ARMv7 device. There wouldn't be any porting to do on a Mondrian device. Simply flash the nbh and go :) The reason for the need of JTAG is because the bootloader, radio rom, etc must be replaced in a manner not compatible with the current bootloader on the device. Also the chance of a brick is practically 100% for the first few tries, a JTAG connection would be required in the case of this eventuality (or youd have a true brick on your hands)

For this reason borrowing a device is not practical, as I most certainly would need to open it up and do some poking around with an occiliscope, and likely some soldering as well. I'm sure the device owner would not appreciate that very much :)

But at least all the raw data is there dumped from the flash.store.bin for you guys to play around with :)

Note that all the *LDRs in this dump will need to be ported as well. Thats in addition to the various drivers in NK and ULDR, and IMGFS as well! :) It certainly would be unlike any previous cooking experience anyone's gone thru before.
[Windows Phone 7 Development and Hacking] RustyGrom:
No, he's referring to any Arm v7 device. The reason being that the binaries in WP7 are compiled to Armv7 and therefore cannot run on lower devices. Any Armv7 can, in theory, run those binaries. JTAG is a common interface used in debugging and repairs. It would allow a fully bricked device to be reflashed back to stock or with a new hacked bootloader.

edit: what Da_G said.
[Windows Phone 7 Development and Hacking] shu8i:
We could start a donation post if it's required. The HD2 community has proven once that it care's about dev's having the appropriate device by donating like 2-3 HD2s for HSPL back in November.
[Windows Phone 7 Development and Hacking] warenbe:
i can donate a very (very) small amount (like 5 or 10 euros) to help

edit: will follow the forum and if a donation thread open, i'll donate then :)

edit2: very exciting project!
[Windows Phone 7 Development and Hacking] jdep1:
same here if donation threat is open :p
[Windows Phone 7 Development and Hacking] Cosmocronos:
If you guys open a donation I am ready to contribute to it. Just open it and give us details bout how to to donate
[Windows Phone 7 Development and Hacking] vladimir2989:
+1 on that,

Gladly donate like 100$ if it gona speed up the process of geting it on HD2s.. :)
[Windows Phone 7 Development and Hacking] norgan:
+2 on donation, a small price to pay for a possible working wp7 in my device :)
[Windows Phone 7 Development and Hacking] Da_G:
Well guys, the only JTAG unit i'm aware of that is supported on Win CE/WP7 for debugging is TRACE32, and it costs more than a brand new in box HD2.. so unless someone is aware of a cheaper alternative, or has access to one of those units, it's not very likely that getting donations going to get me a device is going to go far enough to purchase one of those too..

Take a look here for some info about the software (note that it is a hardware module and software to drive it) http://www.lauterbach.co.uk/intexdi2.html - Edit: more info, if anyone's aware of a cheaper alternative, let me know :)
[Windows Phone 7 Development and Hacking] norgan:
so this provides a hardware JTAG interface and software to drive it yes?

i am aware of dev on things like the xbox etc where you can patch into the drive to read the key etc.

is there anyway of manually patching into the mainboard to get this data? do we have enough info on the mainboard schematics to even attempt this?
[Windows Phone 7 Development and Hacking] RustyGrom:
That's basically what the JTAG would allow.
[Windows Phone 7 Development and Hacking] norgan:
yeah i guess i am thinking along the lines of homebrew jtag unit. the local Jaycar or in the state is think radio shack? might have the components required?

of course software is another thing, just trying to think outside the box.
[Windows Phone 7 Development and Hacking] vladimir2989:
interesting question, is there no one in XDA forum/community works in HTC repair centre or someting? surly there must be tools there that can help software and hardware...

(just a thought, sorry if comment is useless)
[Windows Phone 7 Development and Hacking] ElCondor:
I should go for it. If you get enough donations, it is possible.

You can also ask no donations but sell eventual ROMs / techniques (on another site of course).

In that way, everyone contributes to the process.

Olipro sold his unlockers too, so why not selling
[Windows Phone 7 Development and Hacking] da_gluck:
i'm sure that in most progress depends on donations, because coders make their work in their 3 time, i'll donate for new OS on my HD2. I think it'll be rather hard and it can be done only of making this job by competent people. thx 2 bepe, cotulla, olinex, da_g, l2tp, tom 4 their work.

Best regrads, Dmitry.
[Windows Phone 7 Development and Hacking] HD2Owner:
please post your donations in the dedicated thread
[Windows Phone 7 Development and Hacking] HackDragon:
ODROID?

How about the hardkernel ODROID system? The only one available at the moment is the developer version at $350. It's based on a Samsung ARM Cortex-A8, which I think uses the ARM-v7 instruction set. The JTAG connection seems easy enough to get at, just a bit of soldering required, and you'd still need something to connect to the JTAG port for reading/writing data. Hope this helps.
[Windows Phone 7 Development and Hacking] Da_G:
I checked it out just now, looks like a nice development platform. However it's not based on a Qualcomm SoC, but rather samsung as you state. That means that essentially no part of the Mondrian ROM would be portable to that device (as Mondrian is all based on Qualcomm SoC), so rather than a porting project that would become a ground-up coding project, developing a BSP from scratch. Probably not the right direction to go. Good thought, however!
[Windows Phone 7 Development and Hacking] efjay:
I have a quesiton, I remember reading not too long ago from some WP7 documentation that was leaked about WP7 devices using some kind of certificate/hardware ID to authenticate? In the event of a successful port wont this be an issue with the functionality, being unable to connect to certain services, eg marketplace, since the majority of applications wont be available outside of that delivery mechanism?
[Windows Phone 7 Development and Hacking] akimp3:
Cheap JTAG for ARMv7

Hi,

@Da_G

Just my two cents : You can use OPENOCD, its free, open source and support ARMv7. For the hardware (JTAG interface) it supports a large number of hardwares. You can buy one from amontec for 130Euros.

Take a look at it : openocd.berlios.de/web/

amontec.com/openocd.shtml

I have used Trace32 for another platform and it was really crappy.

Hope you good luck,

Akimp3
[Windows Phone 7 Development and Hacking] DunkDream:
The second link doesn't work for me.

Somehow it needs the www to work...here: http://www.amontec.com/openocd.shtml

Here's what the website says:

It supports a number of different ARM cores (Flash programming / core debugging):

* OpenOCD for ARM ARM7TDMI (-s)

* OpenOCD for ARM ARM9TDMI

* OpenOCD for ARM ARM920t

* OpenOCD for ARM ARM922t

* OpenOCD for ARM ARM926ej-s

* OpenOCD for ARM ARM966e

* OpenOCD for ARM Cortex-M3

And here's the documentation:

http://www.amontec.com/openocd/doc/openocd.pdf
[Windows Phone 7 Development and Hacking] RustyGrom:
Looks like the software definitely supports Cortex A8 but nothing to verify that the hardware does. It supports the Cortex-M3 which is similar but is a simpler and slower platform so it might not be capable of keeping up with the A8.
[Windows Phone 7 Development and Hacking] Da_G:
Yes, using marketplace is one thing to consider, any future hacked device may not be allowed on marketplace. It all depends how MSFT handles their authentication in that regard. We might need to look into developing something akin to "Cydia"
[Windows Phone 7 Development and Hacking] vangrieg:
Well, if they ban people from Marketplace they'll leave pirated apps as the only source. That would be a very silly decision, I think. XBox is somewhat different really as your XBL account isn't the main (sole) source of ISV revenue.

Anyway, we need to have the thing jailbroken first, let's worry about potential retaliation later. :)
[Windows Phone 7 Development and Hacking] HazzBazz:
Exactly...they got round it with android marketplace troubles...finding holes. With JTAG you can try lots more than you would otherwise, risks etc, because we can reincarnate the device...so this is more of an investment in the future of WP7 !

Its interesting m$ are making such a deal outta the certificate. Hopefully we could forge one for our device and copy it on if reflashing. Again it will be interesting if an RUU or something comes out to see how it works around that !
[Windows Phone 7 Development and Hacking] RustyGrom:
Anyone know have a datasheet on the snapdragon platform or know what voltage it runs at? This could be a sticking point as I'm sure it's rather low and the JTAG tool would have to be capable of running at that low voltage.

Yup. And one thing benefiting us vs iPhone... MS has to give out source and other info to 3rd parties whereas Apple does not. Much more info/tools are available here.
[Windows Phone 7 Development and Hacking] HD2Owner:
lets see... 6.5.X should already be on our flagship wm device officially..

our device looks old/vintage (os) compared to a midrange-se-x2-device (6.5.3)..

htc should really move... or do we need to get a hdmini to get 6.5.3.. dont try this pokemon-magic-Yu-Gi-Oh-collector sh1t on us...

my next device will be a android device if the wp7-on-hd2-project fails... :)

linux/android development for leo is also making good progress (thanks to dcordes and others). very nice..
[Windows Phone 7 Development and Hacking] ND4SPD:
well i just had an interesting discussion with da_g about this and while both of us have reservations about this, he has given me some confidence that this is somewhat feasible :D

does anyone work at a phone repair center that would have access to diagnostic tools to find JTAG points? It will definitely move things along considerably quicker in order to do initial tests

edit: I would like to remind everyone as da_g and several others (myself included) have said, there are absolutely NO guarantees that this will work or is even possible. It is currently based on certain assumptions about the similarity of the devices and the amount of modification to XIP that has to be done in order for the phone to even boot, not to mention function properly.
[Windows Phone 7 Development and Hacking] Nokser:
I test basis, of the kernel library.

I must say that some of the work, the old coating.
[Windows Phone 7 Development and Hacking] Cablekevin:
Can you clearify your post? - I can't seem to make up anything from your post. :confused:
[Windows Phone 7 Development and Hacking] bugsykoosh:
push notifications (MS's version of multitasking if we're going to call it that) also goes over their servers and provides a unique ID to get updates. It checks that the apps are legit I beleive...that's part of their right to wipe/revoke a license. Not sure how easy it will be to get past that
[Windows Phone 7 Development and Hacking] Nokser:
Checking operation of libraries with WP7.

And I say that some work with the old base.

I'll give more details when I have more results.
[Windows Phone 7 Development and Hacking] Cablekevin:
Yep i saw an presentation about it on the Devdays 2010 in The Netherlands, it was recorded, but until now i could not find it back on the web, was very interesting.
[Windows Phone 7 Development and Hacking] RustyGrom:
But if we had it fully unlocked we wouldn't need their push notification service since we could just use multitasking :) and/or we could have our own notification server(s).
[Windows Phone 7 Development and Hacking] HD2Owner:
i'm going to ask someone i know who's working for acer (repair center).

he is repairing laptops but i will ask him if they repair phones there too.

a software like this?

or are you talking about a hardware tool?
[Windows Phone 7 Development and Hacking] ND4SPD:
Good news! I was referring to the hardware to test - da_g mentioned oscilloscopes and other fun stuff :D
[Windows Phone 7 Development and Hacking] hdubli:
I have access to some repair tools.Will try my best to find out the jtag points :)
[Windows Phone 7 Development and Hacking] mazzarin:
Might the PSAS/QMAT guys be able to help with JTAG work?

http://psas.revskills.de/
[Windows Phone 7 Development and Hacking] Da_G:
@Mazzarin:

I've already sent a PM to the author of PSAS, just awaiting a reply :)
[Windows Phone 7 Development and Hacking] RustyGrom:
This one might work...

http://www.tincantools.com/product.php?productid=16134&cat=0&page=1&featured

It definitely supports the Cortex-A8 as it seems to be one of the favorites of the beagleboard people (which is running a A8 based TI OMAP). Waayyyy cheaper than a lot of the other stuff out there. Some more good info here...http://elinux.org/BeagleBoardJTAG
[Windows Phone 7 Development and Hacking] mightymn:
Guys what about this one? It specifically mentions QSD8250 / QSD8650 and Scorpion in the supported chips list.

http://www.lauterbach.com/frames.html?bdmusb2.html

Sorry if this has been mentioned before
[Windows Phone 7 Development and Hacking] hoss_n2:
are there any 3rd party apps from htc in this rom or just windows :confused:
[Windows Phone 7 Development and Hacking] HazzBazz:
When it arrives, we should start a dedicated thread of progress...and Da_G should keep a blog of the work (a sticky closed thread here plus a discussions thread). How much has Da_G used Google Wave? That would be great in a project like this...
[Windows Phone 7 Development and Hacking] Badwolve1:
I think thats the one hes looking at :)
[Windows Phone 7 Development and Hacking] NarSan:
can anyone give me all graphic form "Metro" skin? (from Windows Phone) because I have some project (I can't tell anymore, now) but I must have all graphics for this...
[Windows Phone 7 Development and Hacking] akimp3:
Finding JTAGpin

Hi,

you can use JTAGenum to find JTAG pins on the HD2. its cheap and it works.

Cheers,

akimp3
[Windows Phone 7 Development and Hacking] HD2Owner:
you figured out the xip-memory-remapping??
[Windows Phone 7 Development and Hacking] HazzBazz:
looks like the original mapping
[Windows Phone 7 Development and Hacking] HD2Owner:
but.. is this a step in the re-locating direction?
[Windows Phone 7 Development and Hacking] Nokser:
Now I'm trying to do it, but it's not the end, there are many differences.
[Windows Phone 7 Development and Hacking] Nokser:
There was a lot of different

See all Map.txt:
[Windows Phone 7 Development and Hacking] HazzBazz:
This should be fun... :/

So like the entire thing XIP to be redone? Can we take inspiration from the current one for wm6.5Leo? How have the android porters done it?
[Windows Phone 7 Development and Hacking] Da_G:
With CE6 MSFT totally changed the process VM model (now no longer do we have the 32 process slot x 32MB per slot limit)

Take a look here for some more info:

http://msdn.microsoft.com/en-us/library/aa914933.aspx

What needs to happen is we need to drop the concept of 32x32MB slots, with Slot 1 and Slot 0 being used by XIP modules, and slot 63, 61, 60, 1 being used by user modules. Now we need to adopt the new concept of XIP being alloced to a single 256MB "slot" and user modules being alloced to a single 512MB "slot" :) (assuming that has not changed since CE6)

It will be easier to work with once some CE7 documentation comes out, as that will detail the VM layout etc. (but for now i'm pretty certain it's not changed majorly since CE6)
[Windows Phone 7 Development and Hacking] Nokser:
I understand that no tool does not reduce the system?

As for relocation ...
[Windows Phone 7 Development and Hacking] aeroflyluby:
I found in nk.exe:

So.

We know where it was compiled (yes it is really useful, lol)

and timebomb is in nk.exe

enjoy
[Windows Phone 7 Development and Hacking] Da_G:
Hi Nokser,

I think you mean to say "Do we have a new tool for relocing modules to this new memory boundary yet?"

If that's what you meant, the answer is no, not yet :)

Regarding the timebomb strings in nk.exe, I believe that is to artificially force the system clock back (workaround) during the initial loading stages, so that the AK (Adpatation Kit) built in timebomb does not trigger before the system completes booting.
[Windows Phone 7 Development and Hacking] Nokser:
Well it is, at this moment, only a manual relocation:D
[Windows Phone 7 Development and Hacking] HD2Owner:
@da_g:

can you please write down the steps you are doing once the two devices arrive?
[Windows Phone 7 Development and Hacking] Nokser:
Dump XIP in Old Structure packages:
[Windows Phone 7 Development and Hacking] inf3rno1:
:D thank you kind sir
[Windows Phone 7 Development and Hacking] Moridin:
Not sure if any of you devs are in or around Switzerland but I received this MSDN TechTalk invite if any are interested in checking it out.

Moridin
[Windows Phone 7 Development and Hacking] HD2Owner:
thanks for the link. maybe i will join this presentation. :)
[Windows Phone 7 Development and Hacking] itsme:
my analysis can be found here: http://www.xs4all.nl/~itsme/projects/xda/wm7.html

willem
[Windows Phone 7 Development and Hacking] Nokser:
Thanks Bro for this ;)