WM5 ROM image patents with precious information. - Windows Mobile Development and Hacking General

Some of you already know me from the MiTAC Scoter device comunity (offered as Mio A701, Mio A700, Medion MDSP1000 and Medion MD95856). We have been researching a lot and now we have the same amount of control over our device than you have over your HTC devices. I even build a nice kitchen based on the Bepe's Kitchen, very similar but adapted to our device and drivers.
It seems that WM5 is capable of safely upgrade the ROM by package instead of doing a full CEimage flash. We already knew that when we finally were able to acces the SRPX segments. SRPX is the new compressed format for the XIP chains, used in recent designed devices. The first one, SRPX0, was the Update Loader (UL) and the second, SRPX1, the upgradeable OEM Kernel (KN) segment.
I was researching on how to relocate modules in order to avoid module overlaps when I found 5 interesting patents by M$. Yes, they describe the Upgrade Loader, the format of DSM files, PKG, PKU, PKS and the MSFLSH50 image format specification. It seems that they have designed 3 kind of upgrade files, they can upgrade the ROM image package by package offering full package replacement, incremental replacement or both.
I have uploaded the text files in HTML and the original applications in PDF format to ShareBig. So you can get all the info from a single download point:
http://tinyurl.com/y6cnpy
Enjoy!
Oki

Thanks for sharing.
This could do a lot for the community!
Cheers and Happy New Year!!!

Oki said:
I have uploaded the text files in HTML and the original applications in PDF format to ShareBig. So you can get all the info from a single download point:
http://tinyurl.com/y6cnpy
Enjoy!
Oki
Click to expand...
Click to collapse
Sorry, but seems like this URL is not working now. Can you re-upload these files anywhere? Thanks in advance!

No download from this url.
Anybody can upload it?

Related

MS Cloning Method to Quickly Restore Data After ROM Upgrade

I'd like to toss this out for discussion. This might already exist, it might not.
Microsoft had system builders use a Disk Differencing technique to extract what exactly had changed after installing applications and customizations.
First, we'd install the OS and create a base image.
Second, we'd install the apps & customizations we wanted for our customers.
Third, we'd create another image. An app would then compare these two images and determine what files were added/changed and what registry additions, deletions, alterations were performed.
I'm hoping we can do the same for ROM upgrades.
1. OLD ROM - Base image.
2. Install apps and customizations - Image "Apps". This will give us our customizations.
3. Install new ROM - NEW base image created. Compare to OLD ROM base image to see what has changed (that we need to look out for that our APPs image might adversly change).
4. Apply Apps image to restore all customizations & applications.
Ideas anyone?
The theory sounds good.
Maybe buzz can comment?
The theory is very feasable, ive used similar building Win PE rescue disks, you have a app that gives you the base bootable image made from a Win XP install CD. then you add home made "modules" ie, your installed apps or networking capabilities etc. then it makes an image for you to use,
that cant really be that difficult to do the same for Win CE,
Ive also seen a M$ webcast thing where the guy took 45 mins to build an entire image for a win ce device,
so yer, it is very feasible that such dev apps exist, after all, they were made and then sold to the hardware vendors before ever being a rom image.
check in msdn for win ce 5 stuff, its a very intresting read, :shock:
it is a good idea, but only for linear ROMs, where each file has always it's own and same place in the rom and such rom is not compressed.
hmm...
but you can do partial rom upgrades with wm5 roms...
...and it would be possible to make registry diff + DOC Storage partition backup, where you actually install programs (so called \Device) and userdata.
buzz
buzz_lightyear said:
it is a good idea, but only for linear ROMs, where each file has always it's own and same place in the rom and such rom is not compressed.
hmm...
but you can do partial rom upgrades with wm5 roms...
...and it would be possible to make registry diff + DOC Storage partition backup, where you actually install programs (so called \Device) and userdata.
buzz
Click to expand...
Click to collapse
Ok...Since I'm not a programmer and somewhat of a noob with respect to WinCE, I am NOT constrained by what might be a logical limitation to a programmer or someone in the "know". So, below is my thinking ... outside of the box (er, PDA) style.
But first, I need to grasp further Buzz's post above about the locations of things in ROM. Does this mean that there isn't, for lack of a better example, a FAT for the ROM? That every individual thing is expected to be at some specific, static location that can't change? If so, I see your point. But that tells the system that this location is static? Also, doesn't that make bug fixes difficult as the fix might exceed the designated space in ROM? Or do bug fixes always get re-applied after each reset? Patching in memory is how I'm looking at this. (Remember, I'm a non-programmer...deal with me, please.) LOL
Ok..out of the box time.
1. Can a shim be used to capture calls to a certain location in the ROM and redirect to another location (within the ROM or even the storage card. Linux builds anyone?). Like what HD disk managers did to get around LBA limitations or even boot sector viruses did.
2. Can an emulator be used to simulate/backup/build/test the ROMs on a PC before wiping the PDA? Don't laugh, but if not, could something be done with Virtual PC? Oh..Ok, laugh.
(Should I go hide somewhere?)

[REF] Technical Terms

ULDR
“ULDR” stands for “Update Loader”, and is part of the Image Update system. This system allows deployed devices to be updated with new software after they ship. The Update Loader reads a configuration stored in persistent memory and downloads and installs new versions of operating system or OEM files
IPL
Initial program load - usually paired with Secondary Program Load (SPL), is the boot loader of your phone, much like the BIOS is the boot loader for your PC. Note: IPL/SPL are highly hardware dependent, flashing the wrong IPL/SPL is much more serious than a flashing the wrong ROM. It may be noted that, sometimes a ROM package also contains the IPL/SPL which will be flashed into your phone. Hence be extra careful what you are flashing. Note: although a ROM may also contains the IPL/SPL, `ROM` usually refers just to the OS (eg. the Windows Mobile 5, not the IPL/SPL) and the ExtRom
SPL
Refer to IPL
XIP
(eXecute In Place) is a useful option available with uClinux systems. Its main value lies in providing a means of allowing several copies of a program to be running without duplicating the text segment. Indeed the text segment can reside in flash memory and need not be copied to the system Ram at all. This is useful for tasks that have large program bodies with many executable instances running in the system.
Only the Stack, BSS and data segments of an executable needs to be produced for each running program. The text segment can then reside in flash memory or, if execution speed is an issue, then copy the file system to ram first and mount it from there. If executables in the file system are compiled to support XIP and also flagged in their headers as XIP they will load and execute with just a single copy of the text segment
SYS
HardSPL
SoftSPL
sunny_ag said:
ULDR
XIP
SYS
HardSPL
SoftSPL
Thanks.
Click to expand...
Click to collapse
i double that or at least updating the wiki will be appreciated:
http://wiki.xda-developers.com/index.php?pagename=FAQ
can someone explain me the rest...
sunny_ag said:
can someone explain me the rest...
Click to expand...
Click to collapse
Ameet has updates Post #1 with most of them.
Have a look at the SPL Questions wiki page for the difference in Hard / Soft SPL.
SYS (IIRC) is the folders from a dumped ROM that contain all of the files / configurations for the Windows Mobile OS components. Have a look at the cooking sections of the wiki for more info.
Ta
Dave
DaveShaw said:
Armeet has updates Post #1 with most of them
Click to expand...
Click to collapse
Dave, not you too brother Its Ameet
Hey sunny, moved this thread to dev & hacking since it may attract more customers here than the device specific section
ababrekar said:
Dave, not you too brother Its Ameet
Hey sunny, moved this thread to dev & hacking since it may attract more customers here than the device specific section
Click to expand...
Click to collapse
Very sorry my friend, I have updated my post.
I see words and read what I want, rather than what it says.
Dave

[PROJ]WMPoweruser Series ROM

Hi,
My name is Wen from WMPoweruser and we recently decided to take up your case and try our best and get a ROM for the TG01. At the current status the chances of the TG01 getting a cooked ROM is currently low because the lack of a HardSPL, but I got word of another method of flashing.
EDIT: I3v5y is working on it, and soon enough we will have enough for his test device, and the ROM status is currently unknown, just doing some research as to if we can move some things around and tweak it to get a result. He is a professional at that.
Total $250.... We have enough for a UK TG01
Status
Unlocker/Flasher:Searching for a method of unlocking.. with the help of some people and Flar
ROM:We have more than enough cooks for that sadly only one in the UK​Thanks,
Wen
Hi wen, i'm very glad to hear this news you are giving us.
TG01 users will be very excited and happy when the custom works on the TG01
i don't mind donating to help the TG01 be able to have custom roms on it.
Also is it possible to hardspl the TG01 like you can hardspl the xperia x1 (my old phone)
Thanks, sam
sagam12 said:
Hi wen, i'm very glad to hear this news you are giving us.
TG01 users will be very excited and happy when the custom works on the TG01
i don't mind donating to help the TG01 be able to have custom roms on it.
Also is it possible to hardspl the TG01 like you can hardspl the xperia x1 (my old phone)
Thanks, sam
Click to expand...
Click to collapse
Thats is what I am trying to find, and is what our biggest problem is
There is a method to push the rom flashing using the pins beside sim card holder.
Read here:
FINALLY!! there is a way to ressurect dead TG01's after flashing:
1. Format SD card (FAT32)
2. Copy SDDL+.exe(not sure if it's needed)
3. Copy whole PRG folder with desired .tsw update (i think best will be the one dedicated to your language version
4. under sim card slot you'll find black plastic sticker (little bit hard to remove)
5. after removal of plastic sticker there are 3 pins
6. put battery back turn phone on
7. shorten 1 and 3 pin with cable and push reset button
8. white screen should come up and bootloader will load rom from your SD
9. Voila! Your TG01 is alive
tested by 2 spanish TG01 users and by polish TG01 user.
In case I'm not responsible for any damage you make by trying this method.
Hi Wen,
Custom ROM can be possible.The rom is decrypted by cotulla, but the resultant .nb0 has a wiered structure.It is still has some extra bytes, which has a weired parition table.Working on it as how to normalise.Hex copy paste also doesnt work properly.If this is done, then I am risking my tg01 for custom rom development.
Wen(WM) said:
Hi,
My name is Wen from WMPoweruser and we recently decided to take up your case and try our best and get a ROM for the TG01. At the current status the chances of the TG01 getting a cooked ROM is currently low because the lack of a HardSPL, but I got word of another method of flashing.
I want to get all the current information about ROMz for the TG01 like HardSPL status, Cooks, Dumps and anything else that could help us get this ROM started and cooking. We currently have 8 cooks at hand and if we can get some help getting a HardSPL or anything going, we can have a good ROM released fast from someone like NRG, Shadowline, Ark, Captain Throwback or any of our good cooks, but they do need a test device. So if anyone wants to donate let me know so I will add a Cotton, but I am sure no one does.
​
Thanks, and I hope we get cooking soon
Wen
Click to expand...
Click to collapse
Hi Wen,
I think there is no need to create HardSPL for TG01. Protection of TG01 is half-broken.
First, we've got program called ".TSW Tools", that helps to decrypt encoded .TSW image file. You can get the software here: http://cotulla.pp.ru/Misc.html
Second, when we have .bin image, we need to decrypt it.
@Globalbus form forum.pdaclub.pl told us something about the .bin:
1. The block of image that could be intresting begins at 0x50F4000 and goes to the end.
2. MBR tells us the following arrangement: ULDR, XIP, IMGFS, FAT (with initiation sector)
3. Checksums:
Every 0x200 bites some trash (0xFF)
Every 0x200 bites some checksum (CRC32?)
And NAND control blocks.
I translated it the best i could. I hope, that I helped you.
Come on, everybody with expert knowledge get it on now, i will donate..
get this started
RE
kosiek said:
Hi Wen,
I think there is no need to create HardSPL for TG01. Protection of TG01 is half-broken.
First, we've got program called ".TSW Tools", that helps to decrypt encoded .TSW image file. You can get the software here: ...
Second, when we have .bin image, we need to decrypt it.
@Globalbus form forum.pdaclub.pl told us something about the .bin:
1. The block of image that could be intresting begins at 0x50F4000 and goes to the end.
2. MBR tells us the following arrangement: ULDR, XIP, IMGFS, FAT (with initiation sector)
3. Checksums:
Every 0x200 bites some trash (0xFF)
Every 0x200 bites some checksum (CRC32?)
And NAND control blocks.
I translated it the best i could. I hope, that I helped you.
Click to expand...
Click to collapse
WOW this sounds good even though i don't understand half of it lol
also, wen i've donated $5 hope it helps, only small but i don't even work so sorry can't be more than $5
Good luck!
So here is a resume of all work made by TG01 user or not:
1- Dump OEM/SYS TG01 (by ABM30) =
http://forum.xda-developers.com/showpost.php?p=5500122&postcount=253
2- Tool to extract file from .TSW (by cotulla) =
http://cotulla.pp.ru/Misc.html
Quote:
we can decode tsw files to bin but TG01 bin differs little bit from standard bin images here is what an experienced cook said:
The important to us part of image starts 0x50F4000 till endof
MBR looks:
-ULDR, XIP, IMGFS, FAT (with initiation fragment)
Checksums:
every 0x200 bajts (0xFF)
every 0x200 bajts checksum (CRC32?)
And standard NAND control blocks.
3- Force bootloader to flash any official rom after wrong flash (by nico101)=
http://forum.xda-developers.com/showpost.php?p=5487567&postcount=245
i have my own sim unlocked TG01 that i am also will to donate for testing purposes if needs be.
but i would like it back and hopefully not bricked either, but we apparently have debricking instructions!!
come on cooks lets get cooking!!!
And the ball is rolling Will be donating as soon as payday hits
I can provide Wm6.5 O2 21856 DE dump and rare WM 6.1 PL (wasn't relased officially it's from show off phone for polish orange
We have I3v5y working on the ROM and we he says it should not be too hard, so lets just hope and he is going to need a test device
Very good news.
Thank you so much!
Fantastic news Thankyou very much!!!!!
well so far I have 20 and the device is 450 and I guess if we are close, I will take over the rest, also the flash method is the one that you guys said, so ya.
Wen(WM) said:
We have I3v5y working on the ROM and we he says it should not be too hard, so lets just hope and he is going to need a test device
Click to expand...
Click to collapse
Thats Good News
so good
It is a fantastic news really and thx to Wen, I hope the ROM will be release very soon.
And my device is a japanese version, hoping the unlock method.
Wen(WM) said:
well so far I have 20 and the device is 450 and I guess if we are close, I will take over the rest, also the flash method is the one that you guys said, so ya.
Click to expand...
Click to collapse
Don't panic it will come.
I plan to pay 50e but i forget my account paypal since longtime.
I just need to active it.
I have $110 so far, so 1/3 of the way there.

[Release] [Kitchen] - SuperJustKitchen v0.9 - Engage!

SuperJustKitchen v0.9 Released.
Go to my site: http://justkitchen.info to get the updates and the info. It takes to long to update every device's forum that is supported, and I plan to support all devices, eventually.
Word of warning:
Not all EXT's have been tested or modified for the every device. Please test test and test and then let me know which packages don't work and what YOU've done to fix them. (I don't have time to fix ALL of them by myself.) Some packages will only be compatible with some devices.
(I'm no longer updating each thread separately for each device but just updating my site and posting the release info here. I will only update each thread to say that a new version is out.)
**Warning**
Before using this kitchen, you MUST read the whole thread. Any questions that have been answered will be ignored. This is your only warning.
**Disclaimer**
I am not responsible for any damage that may be done to your phone with a ROM created in this kitchen.
I am not responsible for any damage done to your computer.
I am not responsible for anything... at all.
Introducing SuperJustKitchen!
​ SuperJustKitchen is based on [http://forum.xda-developers.com/member.php?u=843218"]airxtreme[/URL]'s osKitchen Zero. All credit on for the kitchen backend goes to him.
Features
A completely stripped ROM. (Work in progress for some devices.)
LZX and XPR compression (Also option for No compression.)
Auto clean files that are language specific or DPI specific that your ROM does not need
Auto port missing language MUI files
Automatic rec'loc'ing for devices without native 6.5 nk's
6.1 and 6.5 support
Auto XIP and SYS porting
Auto NBH packing
Tool to convert OEM packages to EXT packages
Auto file conflict fix (don't have to removing older file that conflict (not that there are any. )
Save custom ROM settings (for cooks for multiple ROMs)
Cook multiple languages at the same time with the same ROM settings (Have to add language support yourself. I removed the required MUI's a while back because they made updating the kitchen and adding devices a nightmare.)
MUCH better organization of EXT packages
Active development instead of a program that is no longer being developed
Cleaner and easier to use interface
A built-in and customizable Tutorial section
And more!
Builds included
21056 - WM6.1
23658 - WM6.5 with new redesigned GUI
​
At the moment, this is an ENGLISH (WWE) only kitchen. This might change...
NOTE: In order for me to keep track of whether my time was well spent or wasted, if you use this kitchen to make a ROM, please either include SJK in the name or just mention that it was SJK cooked in your ROM's thread.
NOTE: This kitchen assumes that you know how to flash through SD, recover from a bad flash and are able to backtrack your steps to figure out how you broke your own ROM. If you do not understand these, please learn them first. Do not PM me asking me. I have written numerous walkthroughs on all these except on how to backtrack your steps. For that, just remember what you're doing as you do it and keep backups.
If you find any issues, PLEASE report them to the bug tracker in my website. It will help me make this kitchen better!
ENJOY!!!​
thanks i will try....
oh!!!!! it takes a long time as Compaed to earvius kitchen.....also i am not able to flash .nbh file it stops at 1% in ruu and then device restarts.......
Not working
indresh88 said:
oh!!!!! it takes a long time as Compaed to earvius kitchen.....also i am not able to flash .nbh file it stops at 1% in ruu and then device restarts.......
Click to expand...
Click to collapse
same here...the final ROM when flashed says image corrupt
Same here all the rom file made by sjkv0.8 gives unflashable rom.
Something might be broken then. I changed the executable last minute. What size is the NBH you are all producing?
ivan the output nbh size is ok it seems for a lite rom it produces about 56mb and remember the one nbh u provided for testing is also having prob it says its corrupt.
help me...SJK won't cook
i cannot make it work...
i get an error while cooking about some files (ringtones) not able to be copied and then hangs.
i tried it on Windows7 and it says that the some payload.nb file is not found in temp folder.
gui-wise/appearance wise...this is the best kitchen ever!!
can someone please tell me where i went wrong? i download four files from the SJK website: ext package, sys package, opal package and the SJK package and extracted to the same folder.
Update:
v0.8.1 - Fixed unflashable ROM bug
Thanks ivan now finally i can use sjk v0.8 (now 0.8.1) after using sjk 7 for so long time.
v0.8.2
Fixed LZX
still gives an error...
ivanmmj said:
v0.8.2
Fixed LZX
Click to expand...
Click to collapse
last night, i cooked 3-4 times using different settings, compression, rom version but it still gives a flash write error for me
cooking works fine except for some errors regarding some *.wma ringtone files inside SYS/PhoneRedist folder not being able to be copied (i overcame them by deleting)
flashing goes upto 100% (i used RUU via the usb cable) but the device reboots and goes to tri-color screen and says Rom Code Error.
btw...do i have to re-download every thing (SYS, EXT, *device_specific*) and the SJK_0.*.* or just the single SJK_0.*.* file?????
+1 Exactly same result since v8 and above
freelancer81 said:
last night, i cooked 3-4 times using different settings, compression, rom version but it still gives a flash write error for me
cooking works fine except for some errors regarding some *.wma ringtone files inside SYS/PhoneRedist folder not being able to be copied (i overcame them by deleting)
flashing goes upto 100% (i used RUU via the usb cable) but the device reboots and goes to tri-color screen and says Rom Code Error.
btw...do i have to re-download every thing (SYS, EXT, *device_specific*) and the SJK_0.*.* or just the single SJK_0.*.* file?????
Click to expand...
Click to collapse
No, if you already had the *_0.8 for all the files, just download the SJK_0.8.3. If you didn't have anything, download EVERY file that's not device specific and your device's file.
You're getting a flash write error?
Still error
what might be the problem????
flashing goes upto 100%, device reboots and goes to tri-color screen
and displays a "ROM CODE ERROR".
i tried all compression methods including UPX on EXT packages but same problem.
freelancer81 said:
what might be the problem????
flashing goes upto 100%, device reboots and goes to tri-color screen
and displays a "ROM CODE ERROR".
i tried all compression methods including UPX on EXT packages but same problem.
Click to expand...
Click to collapse
I think I know what happened. Please hold while I work with airxtreme to fix it.
gooooddddyyyy....i am looking forward to it!!!
Try this:
http://justkitchen.info/main/rokdownloads/SJK_0.8.5.7z
Please let me know ASAP if it works.
thank you for your promptness...i will surely try and let you know.
freelancer81 said:
thank you for your promptness...i will surely try and let you know.
Click to expand...
Click to collapse
Did you ever get a chance to try it out?

Now I have 7704 rom!

I hope this rom can hlep us make the DVP best!
I am so excited that is 7004
Thank for every one
I hope someone sotp the spread of this rom without my permission!!!
IF you want to knew more about DVP you can gou to [email protected]/forum-27-1.html
You can also join the QQ GROUP 193983101,i can help you with dvp
It seems I have 7720...
Are you talking about ATT DVP?
snailium said:
It seems I have 7720...
Are you talking about ATT DVP?
Click to expand...
Click to collapse
sure
you can use it to make your phone back to 7004 and Jailbreak your phone
From opening up the rar, the file mentions:
"US_TMO_SIGNED"
Is there a different ROM for each US carrier?
In other words, the Venue Pro appears to be sold in the US only as an unlocked device, but there is a version for AT&T bands and a version for T-Mobile bands. Is the ROM the same for both, so this would work for both?
jhoff80 said:
From opening up the rar, the file mentions:
"US_TMO_SIGNED"
Is there a different ROM for each US carrier?
In other words, the Venue Pro appears to be sold in the US only as an unlocked device, but there is a version for AT&T bands and a version for T-Mobile bands. Is the ROM the same for both, so this would work for both?
Click to expand...
Click to collapse
ALL DVP can use this rom
So is this ROM the missing link we needed to hack the DVP or do we gain nothing lol
We need a full image dump and not a backup file. And yeah. This is likely the only way to hack the phone.
MJCS said:
We need a full image dump and not a backup file. And yeah. This is likely the only way to hack the phone.
Click to expand...
Click to collapse
isnt "webseraph" claiming this to be the Image?
raiderfan247365 said:
isnt "webseraph" claiming this to be the Image?
Click to expand...
Click to collapse
From what I saw, it's an .ffu file, which it's my understanding that this is a full firmware image.
I would need the link again to verify but last time it was a backup.
Does this mean .....
MJCS said:
I would need the link again to verify but last time it was a backup.
Click to expand...
Click to collapse
Hey guys, does this mean I can unbrick my dvp ?
It's been sitting there for ages and I have went out to buy a omnia 7 but I really love the phone.... .... please keep me posted and tell me how to upload the image onto the phone so I have a working firmware again ^_^.
PM me or whatever ^_^
I'm so excited, DVP is no longer a dead phone and can have developments ^^
hihi2u2 said:
Hey guys, does this mean I can unbrick my dvp ?
It's been sitting there for ages and I have went out to buy a omnia 7 but I really love the phone.... .... please keep me posted and tell me how to upload the image onto the phone so I have a working firmware again ^_^.
PM me or whatever ^_^
I'm so excited, DVP is no longer a dead phone and can have developments ^^
Click to expand...
Click to collapse
does anyone have the image file and can post it to a standard upload service (mediafire, fileserve, etc.). webseraph where did the link go?
I've got it saved on my computer at home, I can reupload it later tonight if people still need it by the time I get home. It came with a bunch of Eastern-language files, Chinese or Japanese I believe, old versions of x86 Zune software, old versions of x86 drivers, and the .ffu file.
Since I believe the .ffu is the ROM itself (hopefully not a backup, I don't know much about this stuff and my Dell Venue Pro that I decided to order is still with Fedex), I'll just upload that, and anything else can be sourced at a million other locations.
Thanks ! !
jhoff80 said:
I've got it saved on my computer at home, I can reupload it later tonight.
Click to expand...
Click to collapse
Thanks, looking forward to it ... ... btw can you give some guidance as to how to flash the phone with the firmware ?
hihi2u2 said:
Thanks, looking forward to it ... ... btw can you give some guidance as to how to flash the phone with the firmware ?
Click to expand...
Click to collapse
I updated my previous post, I've got no idea. The instructions weren't in English and I don't even have a WP7 device (yet). I believe it would involve using UpdateWP.exe though.
cheers ^^
jhoff80 said:
I updated my previous post, I've got no idea. The instructions weren't in English and I don't even have a WP7 device (yet). I believe it would involve using UpdateWP.exe though.
Click to expand...
Click to collapse
It'll be nice to have a look at it anyways, thank you sooooo much !
Can you upload the file somewhere? I would like to disect it.
Here's a repost of only the .ffu from the original post:
http://www.multiupload.com/5YT27EHLZV
The original rar also contained instructions in Chinese, plus other folders:
1 start, which included the VC redist files
2 Zune 4.7, (x86 only)
3 ZuneDesktop UpdateTool 1404, (x86 only)
4 Tool FFU _FinalCheck_CheckPVK, which I believe is just a wrapper to run the UpdateWP.exe command I mention below. If anyone wants this folder too, let me know.
5 FFU-Deploy, which contained only the .ffu file I zipped up and reposted.
From my brief research into the matter, it appears that you can use Zune 4.7 with an older UpdateWP.exe with the following command:
UpdateWP.exe /ffu <filename>
Zune 4.7 and the older UpdateWP.exe are available all over so I didn't bother uploading those.
Machine translation of instruction file:
Brush process
Computer system XP SP3 (win7 system similar)
By folder order in 1234 to install
A: Click the folder to install the three files in 1 start
B: Download and install this zune4.7 me
C: install about 3 ZuneDesktop UpdateTool 1404 folder in the Setup-UpdateWP-x86.exe
D: Open the folder 4 Tool FFU _FinalCheck_CheckPVK in the file FFUDownload_ShareU.exe,
Tap Browse, find the 5 FFU-Deploy folder of the Rom file
Then began to brush machine,
1 cell phone off, remove the battery
2 believe the key to holding down the data cable to the computer
3 Wait a moment, the computer will automatically find the drivers. (Note to zune off, preferably in the Task Manager in the zune process off)
4 drive automatically installed after the point about brush machine software in the download, and then will begin to brush machine, brush machine program into the background of green.
After a good brush, the phone will automatically restart, like, Brush some tips that appear on the software window, all the way to determine the fine.
Brush, do not pull the data line.
Click to expand...
Click to collapse
Again though, this isn't my file, and I haven't tested it, so don't blame me if something goes wrong.
time to do some reading ^^
jhoff80 said:
Here's a repost of only the .ffu from the original post:
http://www.multiupload.com/5YT27EHLZV
The original rar also contained instructions in Chinese, plus other folders:
1 start, which included the VC redist files
2 Zune 4.7, (x86 only)
3 ZuneDesktop UpdateTool 1404, (x86 only)
4 Tool FFU _FinalCheck_CheckPVK, which I believe is just a wrapper to run the UpdateWP.exe command I mention below. If anyone wants this folder too, let me know.
5 FFU-Deploy, which contained only the .ffu file I zipped up and reposted.
From my brief research into the matter, it appears that you can use Zune 4.7 with an older UpdateWP.exe with the following command:
UpdateWP.exe /ffu <filename>
Zune 4.7 and the older UpdateWP.exe are available all over so I didn't bother uploading those.
Machine translation of instruction file:
Again though, this isn't my file, and I haven't tested it, so don't blame me if something goes wrong.
Click to expand...
Click to collapse
ACE will try it out ^^
Actually, can you upload the whole original .rar cause I can read chinese and want to flash my phone anyways cause its bricked so I just want to see if this will help and it looks like i need the whole package in order to do so ^^
The FFU works. It is 7704 and it is amazing how much Windows Phone 7 has advanced. Now the trick is to find a way to install an exploit before Mango that sets the interop unlock at every boot or something and then find a way to restore a backup. I am not really sure how the backup/restore process works. It did require me have the latest updates before restoring so it is possible it just restores non /windows files and folders. So if we can find something in the system that can provision the provxml files then we are golden. The problem is I have no idea what would do that in the system. If you dare to do what I just did, make sure you have a back up and a backup of that backup stored elsewhere as you never know if zune will delete your backup.

Categories

Resources