[Q] How do you re-brand to T-Mobile USA? - Windows Phone 7 Q&A, Help & Troubleshooting

I tried the de-branding hack (MobileOperator = "000-88"), but I was only able to update to 7008. Since T-Mobile USA is going to start pushing updates, I want to "rebrand" my phone back to what it was. Does anybody know what the MobileOperator string is for T-Mobile USA?

The string is TMO-US

jsmarcus said:
The string is TMO-US
Click to expand...
Click to collapse
Thanks! I'll give it a whirl.

is there any reason to want to rebrand the device? does anything stops from working after unbranding? thx

I also want to rebrand my HD7 but the registry editors ive used dont show it. How can I change it back to TMO-US?

omaropa said:
I also want to rebrand my HD7 but the registry editors ive used dont show it. How can I change it back to TMO-US?
Click to expand...
Click to collapse
You'll need to run this XAP called HTC-ProvXml-Deploy.
This XAP will load a self-contained CustClear.provxml file into the registry. You'll just need to create your own CustClear.provxml file and overwrite the one that's already in the XAP.
You'll need to create a .reg file with the following contents:
Code:
REGEDIT4
[HKEY_LOCAL_MACHINE\System\Platform\DeviceTargetingInfo]
"MobileOperator"="TMO-US"
Then run rgu-2-xml to convert it to an XML file.
The XML file should look like this:
Code:
<wap-provisioningdoc>
<!-- *** COMMENTO *** -->
<characteristic type="Registry">
<characteristic type="HKLM\System\Platform\DeviceTargetingInfo">
<parm name="MobileOperator" value="TMO-US" datatype="string" />
</characteristic>
</characteristic>
</wap-provisioningdoc>
Rename the file generated by rgu-2-xml to "CustClear.provxml" (without quotes obviously). BTW, you can just take the XML above paste it into NotePad and save it as "CustClear.provxml" if you want to skip the rgu-2-xml conversion.
Next you'll need to open up "HTC-ProvXML-Deployn.n.n.xap" as an archive file. You can either change the extension to "zip" and open it up in Windows (you'll need to change the extension back to "xap" later, obviously), or you can use 7-Zip. If you have 7-Zip, right-click on the xap file and select "Open archive".
Drag your new CustClear.provxml file into the archive and overwrite the file already contained therein. Double check that the file was overwritten by dragging the file from the archive to another folder (e.g. your desktop) and open it up in NotePad to inspect.
Next change the extension of the zip file back to xap if you have to, and then deploy the xap to your device. Run the app, and you should have a rebranded HD7.
Unfortunately, I don't think there's anyway to tell if the changes stuck.

Thank you. This was very easy to follow and I was able to follow your instructions and deploy the registry settings!

I already customized myself a provxml to rebrand my HD7 back to TMO-US. Attached it for download. Just deploy to your device and hit the green button to provision.
Note that this is specifically to rebrand back to TMO-US.

Hi,
Slight highjacking, but I also rebranded mine to 000-88, and want to change back. I was too stupid to write my old registry down.
I have an Samsung Omnia with 3 for Sweden. Could any swedish guy check that out?

I'd like to ask the same question for my O2 Germany HD7.
I know, one probably just has to change TMO-US into something like O2-DE or else, but I don't want to mess around with these reg files so I rather ask.
O2 Germany pushed the update yesterday and since my general reception got worse after forced NoDo I want to try it with the official one.
So it'd be nice if anyone could tell, what providerIDs one has to use for certain countrys/providers.
Big thanks in advance!

Hi all!
Does anyone know what is the entry - instead of "TMO-US" - for debranded devices in the registry?
I would like to rebrand my mozart for an update and after the installation I would like to redebrand my device ... to be free again ... ;-)
Thanks in advance!!

blaster88 said:
Hi all!
Does anyone know what is the entry - instead of "TMO-US" - for debranded devices in the registry?
I would like to rebrand my mozart for an update and after the installation I would like to redebrand my device ... to be free again ... ;-)
Thanks in advance!!
Click to expand...
Click to collapse
good question, has anyone an idea?

Related

PROVXML question in OEM Folder Cooking!!!

Ok, I am going absolutely crazy here...I am no noob to cooking but I am having a horrible time for some reason. First let me set up the ROM for you...
I am running CE OS 707 WWE ported with Build 19965 (Raphael) and it is working fine. I have always made a provxml file to make my necessary registry changes instead of going through all the rgu's.
I have named this provxml file mxipupdate_oemoperators_108.provxml which I have attached for reference... This file is placed into the OperatorPKG folder and should, I say should run along with the other mxiupdate files...
Please look at this file and please explain why it is not happening. THe only thing I am thinking is that the ported SYS folder is causing some errors???
THanks in advance.
The file was made using rgutoXML in Unicode with wordwrap turned off
I have also tried running the file, converted to a xml file in my user customizations when it starts but still a no go...
Check youre sys if you got coldinit.lnk/coldinit.exe present.
My config_operator.txt
Code:
LOCK:Enabled
XML: \WINDOWS\mxipupdate_dialer_runback.provxml
TSK: \WINDOWS\IBI.tsk
XML: \WINDOWS\Menu_Operation.xml
CAB: \WINDOWS\PP_AKv33-DefaultPage_WWE-0409.CAB
XML: \WINDOWS\xml_reg.provxml
CAB: \WINDOWS\Raiisak`s IBI visual.cab
CFG: \Windows\config_PT.txt
config_operator.txt & xml.reg.provxml in C:\kaiserkitchen\OEM\OperatorPKG
xml.reg.provxml is where I have some of my reg stuff.
Yeah both those files are present in the SYS\Shell folder...
See whats confusing me about the whole thing is that the other ProvXML files in the OperatorPKG are working???? So I am assuming it might be something to do with the file.???
ryncppr said:
Yeah both those files are present in the SYS\Shell folder...
See whats confusing me about the whole thing is that the other ProvXML files in the OperatorPKG are working???? So I am assuming it might be something to do with the file.???
Click to expand...
Click to collapse
Wel, I poped it open to see if you had "Registry" present twice wich would make a error but it seemed good to me so its something that makes it not run. Try to set it up like I did above and give it a spin. Letme know if it worked.
Well that was a NO go so I am going to see if it has too do with the SYS files.... possible causing the error , I am not too sure...Very dumbfounded right now
Just for additional info.
To make *.provxml to be loaded on cold-boot, the said file must exist is any *.dsm.
Hope this help
And please check ur file, there were some errors in it & will be bypassed during cold-boot
Here some hints:
-check ur header
-remove semicolon or use html code
-check ur HKLM & "HKEY_LOCAL_MACHINE"
hang.tuah said:
And please check ur file, there was some error in it
Click to expand...
Click to collapse
Ah, yes. Didnt think of that.... Yet look for it ..
Ok I'm dying over here...what is the error please???? And by placing the *.provxml file into the OperatorPKG file isn't a DSM file attached to it???
I made sure any settings were not duplicated on a newer version...and by the way I tried to change the Coldinit files back to the original but no go either...I am trying a different SYS now
i think u missed my previous edited post
What do you mean by "Check my header"....
It says version="1.0" encoding="utf-8" I know.... do you mean I have to change the source file (text file) to unicode to get rid of this???
Basically if I open the file, click on View Source it opens in a notepad format...Should I save the file as *.provxml in Unicode??? because when I look at all the files that ATT puts out, once I change these files it makes them have the same header....
I also looked at raiisak xml.reg.provxml file and it too has the same header???
Ok I have attached my newest version of the Provxml...the header is gone as I changed the file type to Unicode and saved....
Also I have removed all the different HKLM files to the same and got rid of the ";" but it appears it is still not working???
I have the file named mxipupdate_oemoperators_108.provxml and it is set to run in the OperatorPKG file which has all the files the same up to 107....
ryncppr said:
I also looked at raiisak xml.reg.provxml file and it too has the same header???
Click to expand...
Click to collapse
For one time I prolly didnt use XML Notepad And I saw in EditPad
_ . _
so can someone please help me here....I am just asking what I am doing wrong...I have search the file, looked a hundreds of provxml files and still can not understand why this is not working???
ryn, for me, the header is not mandatory, it is ok, but will give error if u use some xml compiler.
here my attached edited file & u can compare with yours.
Hope this helps
hang.tuah said:
Here some hints:
-check ur header
-remove semicolon or use html code
-check ur HKLM & "HKEY_LOCAL_MACHINE"
Click to expand...
Click to collapse
Code:
translation="filesystem">
Code:
<characteristic type="HKLM\Software\OEM\RIL ; HSDPA indicator">
Code:
<characteristic type="HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Power\Timeouts">
This is what hang tried to explain.
I already changed the HKLM and the ";" problems...the translation=filesystem I did not change.....what would it be changed too???
have u compared ur with mine mate
and please test it can work or not | sorry i cant test it
I have compared yours with mine...
I am seeing you took out the translation section which I had done before...I am going to try and load yours in a rom...just trying to find a program that I can use instead of burning the rom completely over..
i dont think having translation section is problem. i'm also using a provxml that i created for myself, it has the provxml section in it and it does work properly. what i suspect is integer" value="0.0 sec". if it is integer, shouldn't it be integer" value="0" ?

SMS Reply Space Enlarging

If your SMS Reply area is too small and/or covered by the keyboard, you can adjust the space where you type in your reply by doing the following:
1. Connect your phone via Active sync to your PC.
2. In activeSync window, click on Tools/ExplorePocketPC/MyWindowsBasedDevice/Windows and,
3. locate a file with the name "thread_sms.htm", copy then paste in a folder on your PC.
4. Right Hand click on the "thread_sms.htm" the one you copied on your PC and Click Open with Notepad.
5. Locate the line that reads "<Inbox:content id="COMPOSESUBJECT" width="98%" height=## spell" ( ## maybe 30 or 40 or whatever).
6. Change the height=## spell" to 90.
7. Click on save and exit.
8. copy the file you just modded to your Windows directory on your device via ActiveSync. It will replace the existing file and now you increased the SMS typing area by at least 75%.
open the attached htm with note pad and you will see what I mean.
Here is the content of the HTM file:
<html XMLNS:Inbox>
<head>
<object id="HTMLFormFactory" CLASSID="clsid:29d48cf7-ed6a-4a9d-a17a-ae9115c07a90" />
<?IMPORT NAMESPACE="Inbox" IMPLEMENTATION="#HTMLFormFactory" />
<link rel="stylesheet" href="file://\windows\thread_style.css" type="text/css" />
</head>
<body>
<Inbox:ThreadIFrame>
<Inbox:content id="THREADIFRAME" links />
</Inbox:ThreadIFrame>
<div id="threadbottom">
<hr class="divider" size="1" />
<Inbox:ComposeBodyCount>
<Inbox:content ID="COMPOSEBODYCOUNT" format="%1!d!/%2!d!%4 (%3!d! messages)" title />
</Inbox:ComposeBodyCount>
<Inbox:ComposeSubject class="sms">
<Inbox:content id="COMPOSESUBJECT" width="98%" height=90 spell focus count links noclearonbackpresshold limit=0 autocap inserttab scroll />
</Inbox:ComposeSubject>
</div>
</body>
</html>
Here is the HTM file:
After using your file i can no longer tap on messages in my inbox, i have replaced backup file soft-reset, deleted all messages and used PIM to restore and still the same, no worries bruv, just a hard-reset needed
stylez said:
After using your file i can no longer tap on messages in my inbox, i have replaced backup file soft-reset, deleted all messages and used PIM to restore and still the same, no worries bruv, just a hard-reset needed
Click to expand...
Click to collapse
sorry to hear about your issue Stylez... Have you tried to do it the manual way? Just locate the htm file by the name of thread_sms.htm in your device windows directory, copy it onto your pc then open it with note pad. After that just change the hight value where it is at hight=30 now as shown here: COMPOSESUBJECT" width="98%" height=90. Click on save then copy the saved file to the device windows directory to replace the existing htm and you are set.
Again, sorry for the mishap with the provided copy.
asfoor said:
sorry to hear about your issue Stylez... Have you tried to do it the manual way? Just locate the htm file by the name of thread_sms.htm in your device windows directory, copy it onto your pc then open it with note pad. After that just change the hight value where it is at hight=30 now as shown here: COMPOSESUBJECT" width="98%" height=90. Click on save then copy the saved file to the device windows directory to replace the existing htm and you are set.
Again, sorry for the mishap with the provided copy.
Click to expand...
Click to collapse
No worries bruv didn't try manual but had saved my file before i used yours, it was time for me to try some new ROMs and you just got me back in the game was getting complacent
stylez said:
No worries bruv didn't try manual but had saved my file before i used yours, it was time for me to try some new ROMs and you just got me back in the game was getting complacent
Click to expand...
Click to collapse
Don't we all get that way sometimes ?
asfoor said:
Don't we all get that way sometimes ?
Click to expand...
Click to collapse
yes we do, now is time for you to release custom rom brother
msd24200 said:
yes we do, now is time for you to release custom rom brother
Click to expand...
Click to collapse
Working on one .... now you have let the cat out of the bag...
asfoor said:
Working on one .... now you have let the cat out of the bag...
Click to expand...
Click to collapse
wha? custom rom from asfoor? worrrrrrrrrrrrrrrrd...should be great, yeah? love to try it bruv...
asfoor said:
Working on one .... now you have let the cat out of the bag...
Click to expand...
Click to collapse
i got dibs on it, i'll test that thang!!!
stylez said:
After using your file i can no longer tap on messages in my inbox, i have replaced backup file soft-reset, deleted all messages and used PIM to restore and still the same, no worries bruv, just a hard-reset needed
Click to expand...
Click to collapse
You don't need a hard reset. Just delete the file and restart, Windows will automatically create a new default one
thedrizzle said:
wha? custom rom from asfoor? worrrrrrrrrrrrrrrrd...should be great, yeah? love to try it bruv...
Click to expand...
Click to collapse
It is gonna take a while as I started the project months ago, then put it off, and now I am re-thinking it and testing various options and setting my kitchen.
Thank you
Asfoor,
Another good tips. Thanks!
I use Xplore (from LonelyCatGames.com) and copy the file from Windows, do edit (it has nice text editor) and replace original. I kill Tmail.exe from process first, and replace the file. It works great (but I think I'll change that to 60 .. too big for me )
Now on your new ROM, can I request some enhancement from Athine Jan 22?
Upon booting, the SIM lock input always got superseded by the M2D. When I used L26's TF3D V4, it stays on SIM lock until I keyed in the PIN and then it continues. I think as a phone, this is a more usual behaviour.
For Athine, I do a workaround by invoking green phone button, put the PIN, and press red button to exit, but it's not as smooth as expected.
Also, do you have idea why autopick on network (ISP) not working? It goes to the first on the list, failed (because I'm on another ISP SIM), but doesn't change or pick the next (which is the correct ISP). I have to manually select.
I tried searching around the forum, it seems that it never works .. ??
anagarika said:
Asfoor,
Another good tips. Thanks!
I use Xplore (from LonelyCatGames.com) and copy the file from Windows, do edit (it has nice text editor) and replace original. I kill Tmail.exe from process first, and replace the file. It works great (but I think I'll change that to 60 .. too big for me )
Now on your new ROM, can I request some enhancement from Athine Jan 22?
Upon booting, the SIM lock input always got superseded by the M2D. When I used L26's TF3D V4, it stays on SIM lock until I keyed in the PIN and then it continues. I think as a phone, this is a more usual behaviour.
For Athine, I do a workaround by invoking green phone button, put the PIN, and press red button to exit, but it's not as smooth as expected.
Also, do you have idea why autopick on network (ISP) not working? It goes to the first on the list, failed (because I'm on another ISP SIM), but doesn't change or pick the next (which is the correct ISP). I have to manually select.
I tried searching around the forum, it seems that it never works .. ??
Click to expand...
Click to collapse
Will look into it....I will keep you posted as I have the GoogleGPRS Communicator ( Not the Nokia Symbian Communicator) to test and give results to. I get paid for that
asfoor,
I found that if the Phone's lock (simple PIN from Setting, not S2U2 pswd) is activated, it'll stay longer on SIM lock PIN screen after reboot. Not sure if the info is useful
Thank you!
Edited and saved it on the device itself using TC... this tweak is just one of those things that make life a little bit easier... thanks

[APP Needed] Auto email-account creator/restorer

Well i tried searching a lot, but can't find anything. Is there an app anywhere that you can backup the mail settings (or save a copy of a file that includes them somewhere) so you can restore them later (after flash)?
nicandris said:
Well i tried searching a lot, but can't find anything. Is there an app anywhere that you can backup the mail settings (or save a copy of a file that includes them somewhere) so you can restore them later (after flash)?
Click to expand...
Click to collapse
Bengalih Makusi XML editor
nicandris said:
Well i tried searching a lot, but can't find anything. Is there an app anywhere that you can backup the mail settings (or save a copy of a file that includes them somewhere) so you can restore them later (after flash)?
Click to expand...
Click to collapse
Try Sashimi it has that function or else try provisioning the settings so that you can always restore from the provisioning file. For Email2 CSP see http://msdn.microsoft.com/en-us/library/aa455896.aspx or xda forum
As mentioned, try writing a provisioning XML, or, if you're not comfortable with this idea, try OEMizer.
Long time ago I find this little prog from Steganos.
Maybe you give it a Try.
1.
download the zip
2.
Unzip to a folder.
3.
Connect PDA via Activesync.
4.
start "start.bat" (!!!!!!!!!don't press any key!!!!!!!).
5.
go back in the mail_settings-folder and you will find "_setup.xml" open with notepad
search for
<parm name="AUTHNAME" value="USERNAME" />
beneath it enter a new line
<parm name="AUTHSECRET" value="PASSWORD" />
Do this for every mail-address.
6.
Save the "_setup.xml"
8.
go back to "start.bat"-Window and press a key
9.
press the key again
10.
with the new "Mail_Settings.cab" you can allways restore your mail-settings
Hey KUR0I,
you can´t imagine how long I looked for a solution of MailSettingsRestore of my CE Devices, because I like to try new ROMs and every time this boring E-Mail Settings Input procedure. Have not tested yet my created Mail_Settings.cab. But I´m sure it works if I flash again.
Vielen Dank.
Thank you very much.
ArnoMaF
KUR0I said:
Long time ago I find this little prog from Steganos.
Maybe you give it a Try.
1.
download the zip
2.
Unzip to a folder.
3.
Connect PDA via Activesync.
4.
start "start.bat" (!!!!!!!!!don't press any key!!!!!!!).
5.
go back in the mail_settings-folder and you will find "_setup.xml" open with notepad
search for
<parm name="AUTHNAME" value="USERNAME" />
beneath it enter a new line
<parm name="AUTHSECRET" value="PASSWORD" />
Do this for every mail-address.
6.
Save the "_setup.xml"
8.
go back to "start.bat"-Window and press a key
9.
press the key again
10.
with the new "Mail_Settings.cab" you can allways restore your mail-settings
Click to expand...
Click to collapse
Kuroi, thank you for this excellent upload, exactly what I needed, worked perfectly.
Damn! that's what I want but I can't make it works!
iggy, I'm under WM6.5.3 and try as it's explained. But the config file (_setup.xml after first step) is empty, no params at all!
Did anyone else tried?
The lightest solution:
Setup your email account, connect ppc to pc, launch rapiconfig from pc and download your email settings as xml file you can restore using any autoconfig method: sashimi, uc_xda, config.txt, etc. You can also use rapiconfig to test the xml file without reflashing or using any regedit program.
The same applies for any other settings: wifi network, owner information, etc.
thanks cruiserrr, but what are the query to pass to rapiconfig to download settings?
As I said, when I tried the DOS .bat script, my xml file is empty. Nothing extracted!
EDIT: it's OK, as I want to get exchange data, the query is not EMAIL2 but Sync (be careful it's case sensitive!)
Now I go to msdn to find query for others data :-D
Hi
KUR0I's method worked well and created the cab, my only worry is when I try to open it with wince cab manager, I get the message "this is not a valid Windows Ce cabinet file".
Edit: Nevertheless it installs without problems
try the app: PIM Backup (freeware)
this backs up your pim info, which includes your mail accounts (i think)
edit: link to app: http://forum.xda-developers.com/showthread.php?t=299705
So does a rapiconifg/email2 .xml still work with winmo 6.5.3 and the new htc email in 23158? I used to use this method back on my touch pro running 6.1 back in the day but have never tried it lately... guess ill try and find out..
Thanks for this tool, it works very well
Nevertheless, do you know the XML lines to backup for an email account :
- The signatures,
- The network connection (in email Setup/Advanced server settings).
Thanks for your help
KUR0I said:
Long time ago I find this little prog from Steganos.
Maybe you give it a Try.
1.
download the zip
2.
Unzip to a folder.
3.
Connect PDA via Activesync.
4.
start "start.bat" (!!!!!!!!!don't press any key!!!!!!!).
5.
go back in the mail_settings-folder and you will find "_setup.xml" open with notepad
search for
<parm name="AUTHNAME" value="USERNAME" />
beneath it enter a new line
<parm name="AUTHSECRET" value="PASSWORD" />
Do this for every mail-address.
6.
Save the "_setup.xml"
8.
go back to "start.bat"-Window and press a key
9.
press the key again
10.
with the new "Mail_Settings.cab" you can allways restore your mail-settings
Click to expand...
Click to collapse
TheBeO said:
thanks cruiserrr, but what are the query to pass to rapiconfig to download settings?
As I said, when I tried the DOS .bat script, my xml file is empty. Nothing extracted!
EDIT: it's OK, as I want to get exchange data, the query is not EMAIL2 but Sync (be careful it's case sensitive!)
Now I go to msdn to find query for others data :-D
Click to expand...
Click to collapse
Hi, you can query whatever you want: email, wifi, and whatever application. The output should be a valid provxml/xml file to load with rapiconfig at any time or to load in your ROM or customization. Wifi, email and owner are easy to find with google, sorry I do not recall the key.
example
Code:
<wap-provisioningdoc>
<characteristic type="Registry">
<characteristic-query type="HKLM\Software\Apps\whatever" />
</characteristic>
</wap-provisioningdoc>
Hi,
You say we can query whatever we want, but i can't find the query for the signatures and the type of network connection in Poutlook.
Do you know it plz ?
poussinou69 said:
Hi,
You say we can query whatever we want, but i can't find the query for the signatures and the type of network connection in Poutlook.
Do you know it plz ?
Click to expand...
Click to collapse
Sorry, can not help with this. I usually google something like provxml + whatever or wm6.5 xml + whatever. You can also use a program like sk tools to compare registry after and before the manual changes or install. You can also look for the keys in reg file format and convert to xml...
Thanks a lot! :-D
Pimbackup is what you need
So tell me how to backup email accounts only with it ?

How to delete a registry value with a .reg file?

Hi XDA ppl,
How to delete a registry value with a .reg file? The standard hyphen approach doesn't seem to work. I tried it like this:
[HKEY_LOCAL_MACHINE\Software\Test]
"TestItem"=-
This should delete the TestItem but it refuses to do so. Does anyone knows the trick?
I don't know how to do it with a reg key, but you can do it this way with a mortscript:
Code:
RegDelete("HKLM","\Software\Test","TestItem")
here you go!
cruiserrr said:
here you go!
Click to expand...
Click to collapse
Like I said in my first post: "The standard hyphen approach doesn't seem to work."
gotobigo said:
Like I said in my first post: "The standard hyphen approach doesn't seem to work."
Click to expand...
Click to collapse
Sounds odd! can you tell me the heading of your provxml file? it is xml or provxml? what tool do you use to import? can you post the actual code of the file?
Hi, usually I create a cab file from .reg files with CeRegEditor (ceregeditor.mdsoft.pl). If I create new keys/ values everything works just fine. Just deleting doesn't work.
In the end I installed the kilmist registry editor trial to double check cause it can import .reg files directly, but its the same problem: deleting doesn't work.
Here the exact code of the files I tried:
-- File 1: create a test key with 2 values... works fine ------------------
REGEDIT4
[HKEY_LOCAL_MACHINE\Software\Test]
[HKEY_LOCAL_MACHINE\Software\Test]
"TestItemOne"=dword:00000001
"TestItemTwo"=dword:00000001
-- File 2: try to delete 1 value... fails ---------------------------------
REGEDIT4
[HKEY_LOCAL_MACHINE\Software\Test]
"TestItemOne"=-
-- File 3: try to delete the whole key... fails too ----------------------
REGEDIT4
[-HKEY_LOCAL_MACHINE\Software\Test]
your files seem ok.
while you find th solution I recommend to add postxml to your cab to delete the unwanted keys. nocharacteristic and nopar should allow you to delete whatever needed.
two hints: check the encoding of the files and check the order. make one cab for the additions and another for the substractions just in case the cab tries to delete the key before it is created. sorry i can not help more !! please, pm when you find what was it
Try:
Save your .reg file as Unicode not ANSI, start your .reg file with
Windows Registry Editor Version 5.00
In the first line. And leave one blank empty line at the end of the .reg file.
Did it work?
fluffiey said:
Try:
Save your .reg file as Unicode not ANSI, start your .reg file with
Windows Registry Editor Version 5.00
In the first line. And leave one blank empty line at the end of the .reg file.
Did it work?
Click to expand...
Click to collapse
Nope, doesn't work either.
I put Windows Registry Editor Version 5.00 in the first line, encoded it 8-bit unicode and made sure theres a blank line at the end (always did that). all to no avail.
Btw, I'm running WM 6.1 on a TP2. I really wonder if its working at other phones / WM versions, or this is a "universal" problem.
thx anyway, Tobias

.cab-file to use for Jailbreak

Hello
These are just my assumptions.. and I'll edit this post with everything I found out. If you find wrong information, please correct and help me solving this "problem". I'd be relly glad if someone could clarify this whole thing:
If you're updating your phone to Mango (maybe all other updates too), there'll be a .cab file which provisions your registry with some new entries that are needed for Zune to recognize your phone as a developers device and show up the update message. This .cab file (which is basically comparable with a little update) can edit entries in the phones registry without having a developer unlock. A good example is this method to get the Mango update: @windowsphonehacker.com. Even with the value "DeveloperUnlockState" set to 0 you can use this tool to update to Mango.
In our example the "prov.cab" which is part of the tool "says" the phone to change/create the following registry entries:
Code:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\DeviceUpdate\Agent\Protocol]
"TestTarget"="15c00000-0003-0001-c0d4-m4a1f005ba11"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\DeviceUpdate\Agent\Settings]
"GuidOfCategoryToScan"="0fdd4743-cba1-4a2b-af7c-5af9fd93951a"
With this two keys changed and your phone plugged to your PC you'll be able to get the update.
Now.. if we could edit this .cab file so that it tells the phone something like this...
Code:
[HKEY_LOCAL_MACHINE\Comm\Security\LVMod]
"DeveloperUnlockState"=dword:1
[HKEY_LOCAL_MACHINE\Software\Microsoft\DeviceReg]
"PortalUrlProd"=""
"PortalUrlInt"=""
[HKEY_LOCAL_MACHINE\Software\Microsoft\DeviceReg\Install]
"MaxUnsignedApp"=dword:7fffffff
...we should be able to jailbreak any version of WP7
What I figured out is that you can easily unzip the .cab file. You'll get a .pkg file which is also an archive. After extracting this one there are three more files:
61784efe-031a-4673-b7a0-16d3f78efc2e.dsm
61784EFE-031A-4673-B7A0-16D3F78EFC2E.rgu
mxipupdate_DeviceUpdateSelfhost_200.provxml
Okay, in short:
prov.cab
|
UNZIP
|
v
DeviceProvisioning.cab.pkg
|
UNZIP
|
v
61784efe-031a-4673-b7a0-16d3f78efc2e.dsm
Code:
[COLOR="DarkRed"]IN EDITOR:[/COLOR]
[COLOR="Gray"]Nothing useful :o Just hieroglyphs.. maybe it's encrypted :(
EDIT: I found a tool which can read/write/save this .dsm files: [URL="http://forum.xda-developers.com/showthread.php?t=523139"]DSM Editor[/URL]. But the information it shows me is still worthless for me.. I don't understand anything of it =/[/COLOR]
61784EFE-031A-4673-B7A0-16D3F78EFC2E.rgu
Code:
[COLOR="DarkRed"]IN EDITOR:[/COLOR]
[COLOR="Gray"]REGEDIT4
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\DeviceUpdate\Agent\Protocol]
"MuReDirCabUrl1"="http://download.windowsupdate.com/WM/MicrosoftUpdate/redir/duredir.cab"
"MuReDirCabUrl2"="http://download.microsoft.com/WM/MicrosoftUpdate/redir/duredir.cab"
"MuReDirCabUrl3"="http://www.update.microsoft.com/WM/MicrosoftUpdate/Redir/duredir.cab"
"TestTarget"="15c00000-0003-0001-c0d4-m4a1f005ba11"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\DeviceUpdate\Agent\Settings]
"GuidOfCategoryToScan"="0fdd4743-cba1-4a2b-af7c-5af9fd93951a"[/COLOR]
mxipupdate_DeviceUpdateSelfhost_200.provxml
Code:
[COLOR="DarkRed"]IN EDITOR:[/COLOR]
[COLOR="Gray"]<!--
Copyright (c) Microsoft Corporation. All rights reserved.
-->
<!--
Use of this source code is subject to the terms of the Microsoft
premium shared source license agreement under which you licensed
this source code. If you did not accept the terms of the license
agreement, you are not authorized to use this source code.
For the terms of the license, please see the license agreement
signed by you and Microsoft.
THE SOURCE CODE IS PROVIDED "AS IS", WITH NO WARRANTIES OR INDEMNITIES.
-->
<wap-provisioningdoc>
<characteristic type="Registry">
<characteristic type="HKLM\Software\Microsoft\Windows\DeviceUpdate\Agent\Protocol">
<parm name="ClientServerUrl" value="" datatype="string"/>
<parm name="IdentCabFileSize" value="0" datatype="integer"/>
<parm name="IdentCabUrl" value="" datatype="string" />
<parm name="IdentCabFileSize" value="0" datatype="integer"/>
<parm name="ReDirCabFileSize" value="0" datatype="integer"/>
<parm name="ReDirectorId" value="0" datatype="integer"/>
<parm name="ReportingServerUrl" value="" datatype="string" />
<parm name="SelfUpdateCabUrl" value="" datatype="string" />
</characteristic>
</characteristic>
</wap-provisioningdoc>[/COLOR]
Another thing I noticed was that some of those files where digitally signed with a certificate (e.g. right click the prov.cab and you'll see a tab showing the certificate). After modifying any of these files they loose their signature and you can't "update" them via the UpdateWP.exe - it throws out an error. I searched for quite a long time on how to resign the modified files.. I came over a tool named "signcode.exe" - it seems to be able to sign files (.exe, .dll, .cab). I was able to sign the original prov.cab but not my modified one. But after replacing Microsofts signature of the original prov.cab file with mine (<- found a .cer + .pvk) in the internet, I wasn't able to get the prov.cab "updated" to my phone.
Maybe this is way to complicated and there's a much easier solution.. but any help is appreciated
Thanks in advance,
experience7
I can't clarify it for you but .pkg file (from .cab) contains 3 files inside:
Code:
61784efe-031a-4673-b7a0-16d3f78efc2e.dsm
61784EFE-031A-4673-B7A0-16D3F78EFC2E.rgu
mxipupdate_DeviceUpdateSelfhost_200.provxml
(also see attached archive)
I believe guys with WinMo ROM knowledge could explain us what does it mean...
P.S. He-he, we reply simultaneously
sensboston said:
I can't clarify it for you but .pkg file (from .cab) contains 3 files inside:
Click to expand...
Click to collapse
Yup, that's what I also found out already Anyway, thank you very much
sensboston said:
(also see attached archive)
Click to expand...
Click to collapse
Which attached archive?
EDIT: Ah, now it's there
sensboston said:
I believe guys with WinMo ROM knowledge could explain us what does it mean...
Click to expand...
Click to collapse
Yes, especially the use of the .dsm file would be interesting
experience7
File mxipupdate_DeviceUpdateSelfhost_200.provxml looks very promising Unfortunately I don't have unupdated handset now to try...
Application for testing
I'm in the middle of reflash so if you want me to test please provide instructions in PM. Where should I put the CAB file and how should I "force" an update, etc.
Note: Isn't the DSM file contains a signature that tells Zune if the update is valid or modified/hacked?
Very promising and hard at willing to test this.
Cina.
cina said:
I'm in the middle of reflash so if you want me to test please provide instructions in PM.
Click to expand...
Click to collapse
Well, I think this could take a while to complete But thanks for your help and hey.. We don't have to developer unlock the device to see if it works We can also try to edit some other registry values like accent colors or search providers
cina said:
Where should I put the CAB file and how should I "force" an update, etc.
Click to expand...
Click to collapse
Later, when our files are changed we just have to install the "Windows Phone Support Tools". Then the file "UpdateWP.exe" is in the directory. This one has to be started with the parameters "/iu /enablebackup ~MODiFiED-FiLE.cab~"
cina said:
Note: Isn't the DSM file contains a signature that tells Zune if the update is valid or modified/hacked?
Click to expand...
Click to collapse
I hope this is not the case =/ Would only make things more difficult
cina said:
Very promising and hard at willing to test this.
Click to expand...
Click to collapse
Wow thanks! I'm glad for everyone who's helping me
If this method works, we'd be able to edit the complete registry of every phone with any OS version
experience7 said:
I hope this is not the case =/ Would only make things more difficult
Click to expand...
Click to collapse
I'm afraid, it is the case And it make things impossible, unfortunately, not a "more difficult"...
Yep A few minutes ago I played around a bit with the files: I extracted both the prov.cab and the DeviceProvisioning.cab.pkg and zipped them again: Although I didn't use compression to zip the files back again to get one prov.cab the size of the original and the "extracted and rezipped" file don't match The new one is much smaller. I right clicked the original and found out, that it's signed with a certificate. The new file wasn't.. it lost the signature. And I guess even the files inside the archive are signed with certificates =/ I'm pretty sure it works.. but we have to find out how to modify the files, how to resign them and how to pack them together to one .cab file =/ Long story short: We'd need a genius :S
He-he... If u'll find an easy way to crack MS certificates/signatures, u'll be a rich man (or in most wanted criminals list on FBI website )
Sounds strange but I already found some certificates "from Microsoft". When I open them on my Windows PC it says for example: Microsoft Windows Mobile Firmware CA. But I think the whole story is way to complicated for me. I never had anything to do with certificates, .dsm files/.cab files, ... I just had this random idea =/ Well, modifying the .cab file or.. a second method maybe would be to edit the UpdateWP.exe so that it even transfers unsigned .cab files.. but this would require good skills in reverse engineering, ...
I'm afraid, you need to modify not an UpdateWP.exe but WP7 firmware code what is really responsible for changes in file system/registry. I believe that part is checking downloaded data integrity (based on .cab signature).
I haven't got any information about the firmware checking changes of the registry or file system
Okay, at the end I can say that I'll be never able to do this =/
It's hard to believe that WP7 is still as good as unjailbroken I hope that time will bring some new ways to jailbreak our phones.. I'd really love to flash some new ROMS (with new amazing improvements, but NoDo installed ) and then be able to jailbreak them Hope this will work one day..
experience7
all the pkg (cab) files are signed by M$, u can't and propoblely never be able to make a cer accepted by the phone. the validation part is from the phone not the updatewp.exe

Categories

Resources