[Windows Phone 7 Development and Hacking] HD2Owner:
@ 911sniper and ondraster:

thanks for sharing. downloading now... :D

very intresting..

[HKEY_LOCAL_MACHINE\Software\HTC\operatorpkg]
"Version"="7.4.651.13284"

difference in 2D6168DD-3ACB-43bd-BCA7-4033C89E9745.rgu

old:

[HKEY_LOCAL_MACHINE\System\Versions]
"Label"="WM7_7.0_Ship"
"ParentBranchBuild"="7004"
"TimeStamp"="20100916-1429"

new:

[HKEY_LOCAL_MACHINE\System\Versions]
"Label"="WM7_7.0_11_JAN"
"ParentBranchBuild"="7389"
"TimeStamp"="20110124-1636"

------------

difference in FEE507C4-1F41-46F2-A341-62B4BC1A9D80.rgu (net.cf):

old:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETCompactFramework]

"3.7.10218.00"=dword:1

new:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETCompactFramework]

"3.7.10302.00"=dword:1

-----------

new files in build:

doBootstrap.dll

HandsFreeActivation.dll

HandsFreeActivationRes.dll

HfaHost.exe

HTCConnectionSetUp.dll

ImportXmlContacts.exe

ImportXmlContactsRes.dll

ImportXmlContactsRes.dll.0409.mui

moscontactsdataprovider.dll

moscsp.dll

MOSPlugin.dll

MOSPluginRes.dll

MOSPluginRes.dll.0409.mui

MOSService.dll

omadssyncprovider.dll

SQADriverUtility.dll

windiag.dll

WISPrService.dll

wl_server_serial.dll

wlan_oem.dll

8BA872A2-01D5-44D4-98A7-DDF561744635.exe

BCM4329B1_002.002.023.0589.0608.hcd

EmbeddedTool.provxml

EmbeddedTool.xap

EmbeddedTool_License.xml

HandsFreeActivationRes.dll.0409.mui

IMSI_Mapping.db

IOTable_USC.c

mpap_HTC_MASD_01.provxml

Query_QUERYALL.xml

servicetools.xap (+provxml+license)

.....

----------------

difference in 8C9C0C34-B77D-45FB-9E4E-D53AC5900244.policy.xml (this whole part is new)

<!--Begin Generated accounts and routing/authz rules for S-1-5-112-0-0X10-0X00000035 -->
<Macro Id="ABOUTCPL_EXE_SID" Value="S-1-5-112-0-0X10-0X00000035" />
<Account Id="$(ABOUTCPL_EXE_SID)" FriendlyName="AboutCPL.exe" Description="Autogenerated chamber for AboutCPL.exe" Type="User">
<MemberOfGroup GroupAccountId="$(ELEVATED_RIGHTS_CHAMBER_GROUP_NAME)" />
</Account>
<!--Begin Generated routing/authz rules for AboutCPL.exe -->
<Rule Description="Route AboutCPL.exe" ResourceIri="$(LOADERVERIFIER_ROUTE_BY_NAME)/PRIMARY/WINDOWS/ABOUTCPL.EXE" SpeakerAccountId="$(SYSTEM_USER_NAME)" PriorityCategoryId="PRIORITY_LOW">
<Authorize>
<Match AccountId="$(ABOUTCPL_EXE_SID)" AuthorizationIds="LV_ACCESS_EXECUTE" />
</Authorize>
</Rule>
<Rule Description="Authorize AboutCPL.exe be loadable to $(ABOUTCPL_EXE_SID) and chambers" ResourceIri="$(LOADERVERIFIER_EXE_AUTHZ_INROM_ROOT)/WINDOWS/ABOUTCPL.EXE" SpeakerAccountId="$(SYSTEM_USER_NAME)" PriorityCategoryId="PRIORITY_STANDARD">
<Authorize>
<Match AccountId="$(ABOUTCPL_EXE_SID)" AuthorizationIds="LV_ACCESS_EXECUTE,LV_ACCESS_LOAD" />
</Authorize>
</Rule>
<!--End Generated routing/authz rules for AboutCPL.exe -->
<!--End Generated accounts and routing/authz rules for S-1-5-112-0-0X10-0X00000035 -->

----------------

difference in 36F324B9-6355-436a-B205-100D53E4B914.rgu

old:

[HKEY_LOCAL_MACHINE\System\Events]
"System/ColdInitPhase2Complete"="Owned by coldinit.exe. This signals that coldinit phase 2 is complete."
[HKEY_LOCAL_MACHINE\System\EventLog\Provider\{C8B65545-E2B2-4f95-A1AA-B8E88EE0A6FA}\Channels\System]
"Value"=dword:8

new:

[HKEY_LOCAL_MACHINE\System\Events]
"System/ColdInitPhase2Done"="Owned by coldinit.exe. This signals that coldinit phase 2 is done excluding guid_ui.exe."
"System/ColdInitPhase2Complete"="Owned by coldinit.exe. This signals that coldinit phase 2 is completed including guid_ui.exe."
[HKEY_LOCAL_MACHINE\System\EventLog\Provider\{C8B65545-E2B2-4f95-A1AA-B8E88EE0A6FA}\Channels\System]
"Value"=dword:00000008
[HKEY_LOCAL_MACHINE\System\EventLog\Provider\{C8B65545-E2B2-4f95-A1AA-B8E88EE0A6FA}\Channels\Microsoft-WindowsMobile-DeviceManagement-Channel]
"Value"=dword:00000010

----------------

difference in 36F324B9-6355-436a-B205-100D53E4B914.policy.xml

old:

<Rule Action="CreateNew" Description="Allow access to events coldinit phase2 completion event. Only System can write to them, but normal+ can read them" ResourceIri="policy:/KERNEL/EVENT/SYSTEM/ColdInitPhase2Complete" SpeakerAccountId="$(SYSTEM_USER_NAME)" PriorityCategoryId="PRIORITY_HIGH">

new:

<Rule Action="CreateNew" Description="Allow access to events coldinit phase2 done event (excluding guid_ui.exe). Only System can write to them, but normal+ can read them" ResourceIri="policy:/KERNEL/EVENT/SYSTEM/ColdInitPhase2Done" SpeakerAccountId="$(SYSTEM_USER_NAME)" PriorityCategoryId="PRIORITY_HIGH">

<Rule Action="CreateNew" Description="Allow access to events coldinit phase2 completion event (including guid_ui.exe). Only System can write to them, but normal+ can read them" ResourceIri="policy:/KERNEL/EVENT/SYSTEM/ColdInitPhase2Complete" SpeakerAccountId="$(SYSTEM_USER_NAME)" PriorityCategoryId="PRIORITY_HIGH">
<Authorize>
<Match Action="Add" AccountId="$(SYSTEM_RESOURCE_GROUP_NAME)" AuthorizationIds="ALL_ACCESS"></Match>
<Match Action="Add" AccountId="$(STANDARD_RIGHTS_RESOURCE_GROUP_NAME)" AuthorizationIds="READ_CONTROL"></Match>
</Authorize>
<Stop>
<Match AccountId="$(EVERYONE_GROUP_NAME)"></Match>
</Stop>
</Rule>

----------------

difference in 95E4E653-133E-4529-9387-19B4756D82B4.policy.xml (this whole part is new):

<Rule Description="Restrict Touch Input API usage to TCB only" ResourceIri="$(GLOBAL_RESOURCES)/GWEINPUT/TOUCH" SpeakerAccountId="$(SYSTEM_USER_NAME)" PriorityCategoryId="PRIORITY_STANDARD">
<Authorize>
<Match AccountId="$(SYSTEM_RESOURCE_GROUP_NAME)" AuthorizationIds="GENERIC_ALL"></Match>
</Authorize>
</Rule>

<Rule Description="Restrict Text Input API usage to TCB only" ResourceIri="$(GLOBAL_RESOURCES)/GWEINPUT/TEXT" SpeakerAccountId="$(SYSTEM_USER_NAME)" PriorityCategoryId="PRIORITY_STANDARD">
<Authorize>
<Match AccountId="$(SYSTEM_RESOURCE_GROUP_NAME)" AuthorizationIds="GENERIC_ALL"></Match>
</Authorize>
</Rule>

--------------

difference in 0889BCD2-6269-4828-B179-4941C977F84D.rgu (keys missing in NoDo):

[HKEY_CLASSES_ROOT\http\Extensions]
".mpg"="{6949148B-D79D-4f29-A1CF-2B8E9B675F32}"
".mpeg"="{6949148B-D79D-4f29-A1CF-2B8E9B675F32}"

--------------

difference in 969eb155-55ff-4884-9ecb-241c8a4b6e09.policy.xml (new part):

<!-- ACLs the \Applications\Installer directory to be TCB accessible only -->
<Rule Action="CreateNew" Description="ACL the decrypted XAP file repository to be TCB only" ResourceIri="$(FILESYS_PRIMARY_ROOT)/APPLICATIONS/INSTALLER/(*)" SpeakerAccountId="$(SYSTEM_USER_NAME)" PriorityCategoryId="PRIORITY_HIGH">
<Authorize>
<Match AccountId="$(SYSTEM_RESOURCE_GROUP_NAME)" AuthorizationIds="FILE_ALL_ACCESS"></Match>
</Authorize>
<Stop>
<!-- Everybody else is denied acess -->
<Match AccountId="$(EVERYONE_GROUP_NAME)"></Match>
</Stop>
</Rule>

------------------

difference in 8832CC7E-2E59-4dba-8C93-9FEF47A1E390.rgu (new keys):

[HKEY_LOCAL_MACHINE\Drivers\BuiltIn\SQADriverUtility]
"Dll"="SQADriverUtility.dll"
"Prefix"="HQU"
"Index"=dword:2
"Order"=dword:A
"IClass"=multi_sz:"{4619249B-6362-4520-B700-984C8E7BC7A4}"

------------

differences in 969eb155-55ff-4884-9ecb-241c8a4b6e09.policy.xml (new part):

<!--Begin Generated routing/authz rules for IMPORTXMLCONTACTS.EXE -->
<Rule Description="Route IMPORTXMLCONTACTS.EXE" ResourceIri="$(LOADERVERIFIER_ROUTE_BY_NAME)/PRIMARY/WINDOWS/IMPORTXMLCONTACTS.EXE" SpeakerAccountId="$(SYSTEM_USER_NAME)" PriorityCategoryId="PRIORITY_LOW">
<Authorize>
<Match AccountId="$(OM_USER_NAME)" AuthorizationIds="LV_ACCESS_EXECUTE" />
</Authorize>
</Rule>
<Rule Description="Authorize IMPORTXMLCONTACTS.EXE be loadable to $(OM_USER_NAME) and chambers" ResourceIri="$(LOADERVERIFIER_EXE_AUTHZ_INROM_ROOT)/WINDOWS/IMPORTXMLCONTACTS.EXE" SpeakerAccountId="$(SYSTEM_USER_NAME)" PriorityCategoryId="PRIORITY_STANDARD">
<Authorize>
<Match AccountId="$(OM_USER_NAME)" AuthorizationIds="LV_ACCESS_EXECUTE,LV_ACCESS_LOAD" />
</Authorize>
</Rule>
<!--End Generated routing/authz rules for IMPORTXMLCONTACTS.EXE -->

--------------

difference in 47124C2D-F925-48e2-A1E5-A5428F8994AB.rgu (new keys):

[HKEY_CURRENT_USER\Software\Microsoft\Inbox\Settings\IE\WordSelect]
"Enable"=dword:00000001

--------------

difference in BFCC0130-B02D-4b5a-BF04-089C93073D97.policy.xml (new part):

<!--Begin Generated accounts and routing/authz rules for S-1-5-112-0-0X10-0X0000034 -->
<Macro Id="HFAHOST_EXE_SID" Value="S-1-5-112-0-0X10-0X0000034" />
<Account Id="$(HFAHOST_EXE_SID)" FriendlyName="hfahost.exe" Description="Autogenerated chamber for hfahost.exe" Type="User">
<MemberOfGroup GroupAccountId="$(ELEVATED_RIGHTS_CHAMBER_GROUP_NAME)" />
</Account>
<!--Begin Generated routing/authz rules for hfahost.exe -->
<Rule Description="Route hfahost.exe" ResourceIri="$(LOADERVERIFIER_ROUTE_BY_NAME)/PRIMARY/WINDOWS/HFAHOST.EXE" SpeakerAccountId="$(SYSTEM_USER_NAME)" PriorityCategoryId="PRIORITY_LOW">
<Authorize>
<Match AccountId="$(HFAHOST_EXE_SID)" AuthorizationIds="LV_ACCESS_EXECUTE" />
</Authorize>
</Rule>
<Rule Description="Authorize hfahost.exe be loadable to $(HFAHOST_EXE_SID) and chambers" ResourceIri="$(LOADERVERIFIER_EXE_AUTHZ_INROM_ROOT)/WINDOWS/HFAHOST.EXE" SpeakerAccountId="$(SYSTEM_USER_NAME)" PriorityCategoryId="PRIORITY_STANDARD">
<Authorize>
<Match AccountId="$(HFAHOST_EXE_SID)" AuthorizationIds="LV_ACCESS_EXECUTE,LV_ACCESS_LOAD" />
</Authorize>
</Rule>
<!--End Generated routing/authz rules for hfahost.exe -->
<!--End Generated accounts and routing/authz rules for S-1-5-112-0-0X10-0X0000034 -->

<Rule Description="Only System authorized to execute hfahost.exe" ResourceIri="$(WINDOWS_DIRECTORY_PATH)/HFAHOST.EXE" SpeakerAccountId="$(SYSTEM_USER_NAME)" PriorityCategoryId="PRIORITY_HIGH">
<Authorize>
<Match AccountId="$(SYSTEM_RESOURCE_GROUP_NAME)" AuthorizationIds="FILE_ALL_ACCESS"></Match>
</Authorize>
<Stop>
<Match AccountId="$(EVERYONE_GROUP_NAME)"></Match>
</Stop>
</Rule>

--------------

differences in BFCC0130-B02D-4b5a-BF04-089C93073D97.rgu (new keys):

[HKEY_LOCAL_MACHINE\System\EventLog\Channel\Microsoft-WindowsMobile-DeviceManagement-Channel\Logging]
"Level"=dword:00000004 (was level 1)

[HKEY_LOCAL_MACHINE\System\EventLog\Provider\{2CA9261F-3EC4-4816-A1FA-89DBF573F286}]
[HKEY_LOCAL_MACHINE\System\EventLog\Provider\{2CA9261F-3EC4-4816-A1FA-89DBF573F286}\Channels\Microsoft-WindowsMobile-DeviceManagement-Channel]
"Value"=dword:00000010
[HKEY_LOCAL_MACHINE\System\EventLog\Provider\{2CA9261F-3EC4-4816-A1FA-89DBF573F286}\Channels\System]
"Value"=dword:00000008
[HKEY_LOCAL_MACHINE\System\EventLog\Provider\{2CD55076-3ECA-4cba-B146-B61D3B7694F7}\Channels\Microsoft-WindowsMobile-DeviceManagement-Channel]
"Value"=dword:00000010
[HKEY_LOCAL_MACHINE\System\EventLog\Provider\{2CD55076-3ECA-4cba-B146-B61D3B7694F7}\Channels\System]
"Value"=dword:00000008
[HKEY_LOCAL_MACHINE\System\EventLog\Provider\{08DDE8CC-029F-4e95-9D84-259CCF3A6808}\Channels\Microsoft-WindowsMobile-DeviceManagement-Channel]
"Value"=dword:00000010
[HKEY_LOCAL_MACHINE\System\EventLog\Provider\{08DDE8CC-029F-4e95-9D84-259CCF3A6808}\Channels\System]
"Value"=dword:00000008
[HKEY_LOCAL_MACHINE\System\EventLog\Provider\{613EEF6B-1DE4-4ab1-8D3B-6758E8991701}\Channels\Microsoft-WindowsMobile-DeviceManagement-Channel]
"Value"=dword:00000010
[HKEY_LOCAL_MACHINE\System\EventLog\Provider\{613EEF6B-1DE4-4ab1-8D3B-6758E8991701}\Channels\System]
"Value"=dword:00000008
[HKEY_LOCAL_MACHINE\System\EventLog\Provider\{521D5AA6-AC67-449f-9592-4CB80BEA3126}\Channels\Microsoft-WindowsMobile-DeviceManagement-Channel]
"Value"=dword:00000010
[HKEY_LOCAL_MACHINE\System\EventLog\Provider\{521D5AA6-AC67-449f-9592-4CB80BEA3126}\Channels\System]
"Value"=dword:00000008