Develop Bugs

[16 JAN][VIDEO TUT]How To Unlock/Jailbreak WP7 & Sideload Apps

In this video i show you how to jailbreak and sideload apps to your windows phone 7 device. This procedure should work on any WP7 device and not just the HD2
Before Doing Anything You Need To Install The WP7 SDK So That Your Computer Can Connect To Your Device
WP7 SDK
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=04704acf-a63a-4f97-952c-8b51b34b00ce
ZUNE SOFTWARE
http://www.mediafire.com/?pesqg3asdoghea3
WP7 Unlock Tools
http://www.mediafire.com/?r3cx4mfeecuieo0
How To Install WP7 (Windows Phone 7) On Your HTC HD2
http://www.youtube.com/watch?v=Nac3Fnf-lY4

EDIT: Whoops meant to post this on the other thread. Going to put it there instead...
http://forum.xda-developers.com/showthread.php?p=10661354#post10661354

Hi Tom - thanks for this, it worked fine for me yesterday. Today, having done some changes to my app, I tried again and it won't work. Got a message on the phone (Samsung Omnia 7) saying that Microsoft had revoked the application!
I have applied and paid for App Hub registration (over a week ago) but not received it yet, so I was just wanting to try things out in the meanwhile.
Cheers.......Wilf Healy

Please ignore my previous post....
Hi again Tom - mea culpa. I had not run ChevronWP7.exe correctly! It's fine now.
Cheers...........Wilf Healy

Great stuff!
Hi Tom,
This is great stuff, many thanks for this. I just bought a HTC Surround (AT&T locked) and I'm in the process of unlocking it. My question is can I use either of of the ROMs (android or WP7) on my HTC Surround?
Thanks

hmmm, Tom's XAP installer keeps giving me error messages -
************** Exception Text **************
System.IO.FileNotFoundException: Could not load file or assembly 'Microsoft.SmartDevice.Connectivity, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a' or one of its dependencies. The system cannot find the file specified.
File name: 'Microsoft.SmartDevice.Connectivity, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a'
Is this to do with zune? or my phone? It's a HTC Mozart that i just unlocked with the chevron tool...
TIA!

Can't unlock Omnia M by any method . It's version is 8773 preloaded from company

bvneet said:
Can't unlock Omnia M by any method . It's version is 8773 preloaded from company
Click to expand...
Click to collapse
dude, this thread is over a year an a half old and didn't need the bump!
it is miss leading tho as it wont work with every device but that the way it is

Can 2.36.207.16 be downgraded?

Hi,
I've got a DHD from O2 Germany (unbranded, can't see any O2 stuff in it), running 2.36.207.16. GingerBreak simply hangs when doing the magic as per jkoljo's thread [1]. What I want to do is install Revolution HD.
Now, while digging that thread, I found a post complaining about that behavior, but the guy (Ginevra) was running 2.37.x [2]. On the next page, 2 people on 2.36.207 report the same issue.
Is this something known? I got my 2.36.207.16 pretty late OTA, I guess after June 1st.
In case it makes any difference, Win 7 x64, got the Android SDK for 2.2, did some development a few months back; it's not added into PATH (so I'm running the adb jkoljo supplied).
Any ideas?
Edit
According to this German forum [3], 2.36.207.16 is O2. Should I take it the phone is branded?
Shouldn't the gingerbreak procedure work even without a goldcard?
[1] http://forum.xda-developers.com/showthread.php?t=905003
[2] http://forum.xda-developers.com/showthread.php?t=905003&highlight=2.36.207&page=157
[3] http://www.android-hilfe.de/htc-des...61-12-vf-2-36-207-16-o2-2-37-111-6-tm-22.html

Did it. 2.36.207.11 is O2 and I managed to root it and install Revolution HD.
goldcard - http://www.addictivetips.com/mobile/how-to-make-gold-card-for-htc-desire-hd/
download and install the newest downgrade-able RUU (2.36.405.8), for example from http://forum.xda-developers.com/showthread.php?t=824357
I used an EXE image taken from some other place.
follow the ROM guide at http://forum.xda-developers.com/showthread.php?p=11557769
follow the Revolutin HD guide at - http://forum.xda-developers.com/showthread.php?t=840040
Awesome support from xda! Thank you guys (I also cast the appropriate "thanks" in the appropriate threads )!

doesn't work for me, still i have the same build, DAMNIT!
will try all night long

allright, fixed it with you tip, got the latest rom, downgrade worked at third try (with this: http://forum.xda-developers.com/showthread.php?t=905003 )
thanx a lot!

Telus HTC Desire HD 2.3.3 Root and Flash

Hello XDA forum!
I've been researching my topic for some time now and I noticed alot of vague information and the only usefull info seemed to be specific to each model... So, I have a Desire HD and my carrier is telus.
1. Is my phone branded or not? (There's not a bunch of telus apps or wallpapers, there is just one telus scene. Also it says HTC on the back where you would expect it to say telus)
2. Can you downgrade the Telus HTC Desire HD running 2.3.3 Gingerbread at this time? If so what tools would you use?
The reason I am doing this is because everything seems to be very vague information that, like stated above, seems to be specific to each post. However all the posts that I've read don't describe the methods used to identify key information or how to troubleshoot what to do if a step doesn't work (ex. Getting $ instead of #)
If someone could post back on this it would aid me greatly. I aim to downgrade, root, and flash Android Revolution HD and possibly a new radio to improve battery life and signal strength (which is non-existent in my basement)
My phone info is...
Android version:
2.3.3
HTC Sense version:
2.1
Baseband version:
12.56.60.25U_26.10.04.03_M
Kernel version:
2.6.35.10-gdc4b908
[email protected] #1
Fri May 20 22:02:48 CST 2011
Build Number:
2.43.661.1 CL70542 release-keys
Software number:
2.43.661.1
Browser version:
Webkit/533.1
Please if you have an answer or anything to say regarding my post please use full explanations so that this thread can be useful to other members/guests.
Thanks in advance!
PS. Any additional information you require from me don't hesitate to ask!

Now running Android Revolution HD!!
Ok so I found some key factors in this that I'd like to point out to anyone looking into rooting and flashing a custom rom.
First Downgrade
Settings > About Phone > Software Information > "Build number"
That is what you're looking at when searching for a downgrade. 1.32.405.6 is what you want to be at.
The downgrade guide I used is here.
Remember if your build number is above 2 you'll need to use section 2b and skip 2a
Make sure you download the attached folder at the bottom of the first post and the stock 1.32 ROM (link in section 1)
After this point I had a stock phone with 2.2 Froyo build number 1.32.405.6. My speakers did not work (no sound at all) and I could not connect to the mobile network which alarmed me at first thinking that Telus wouldn't like me hacking my phone or something x3
Second Root
Telus Desire HD - Rooting and Flashing
This was the first guide I tried to follow and it would have worked if it had simply added in that extra file and the commands:
Code:
adb push misc_version /data/local/tmp
adb push fre3vo /data/local/tmp
adb shell chmod 777 /data/local/tmp/fre3vo
adb shell chmod 777 /data/local/tmp/misc_version
adb shell
./data/local/tmp/fre3vo -debug -start FBB00000 -end FFFFFFFF
Anyways I downloaded the files for this one (the light version since I had previously downloaded the PD98IMG.zip) and skipped to step B.b
I did the temproot successfully but the easy radio tool wouldn't work for me so I just used Visionary+ to permroot and Then I got the superuser request on my phone and the radio finished rapidly.
Went very smoothly after that.
Third Flashing!
Finally the time came when I was ready to flash my shiny new ROM. I read through step C of the above mentioned guide but decided to go through with the proccess mentioned in [ROM] Android Revolution HD™ 6.1.3 since it was more of a do it yourself thing and I like starting clean (it wants you to run superwipe from cwm before flashing the new rom)
I would recommend using a card reader rather than mounting as a disk drive cause it's more reliable.
Hope this helps someone!

Not sure if this has been said or not but:
http://www.xda-developers.com/android/how-to-root-the-htc-desire-hd/
It's as easy as "download, run" and it works brilliantly!
I suggest you just boot a Ubuntu Live CD (it's not as bad as it sounds, I actually liked it the first time I tried it and now I have it installed by my Windows) and just run the command:
wget http://droid.neolobster.com/roms/aahk-25102011.zip && unzip aahk-25102011.zip && sudo ./hack-ace.sh
Click to expand...
Click to collapse
in terminal, press "1" and be afk for 5 mins.
Doesn't erase your data, doesn't format your phone, doesn't downgrade your Android OS. It...it just works!
Good luck with it

does the method dragancla posted work for the Telus Desire HD?

milestoned said:
does the method dragancla posted work for the Telus Desire HD?
Click to expand...
Click to collapse
I was just about to ask the same question, and if you can return to stock, but then I checked the Advanced ACE Hack Kit (AAHK) thread:
http://forum.xda-developers.com/showthread.php?t=1259821
Where it says:
Easy return to stock for AT&T, Telus and WWE CID HTC__001
Click to expand...
Click to collapse
Might be worth a shot

I worked for me. thx

which method worked? the one mentioned by dragancla or Nekura7?

root
I wanna root my desire hd can anyone help me , its my first time to root my phone. Can somebody messge me the full steps for first timer , my current version 2.3.3 sense 2.1 i was thinking to root it to sensation xl rom??? 2.3.4 sense 3.5 and beats enable? And usb host capable? Please try to help me thnks , [email protected] heres my email,

milestoned said:
does the method dragancla posted work for the Telus Desire HD?
Click to expand...
Click to collapse
Yeep! It sure does work I tried it and flashed the android revolution hd rom. Brilliant thanks a lot! Only thing is the sound seems a little different. It is much louder but also has this tinny effect at times. I will patch the cm7 audiofix and see how it goes.

Go to htcdev dot com, you'll find the official way to do it by HTC

luismontreal said:
Go to htcdev dot com, you'll find the official way to do it by HTC
Click to expand...
Click to collapse
I tried that, but the HBOOT update failed every time
I can confirm that the Advanced Ace Hack Kit works

how to root desire hd
I want to root my Htc desire hd . Please guide me in right way
My phone info is...
Android version:
2.3.3
HTC Sense version:
2.1
Baseband version:
12.54.60.25U_26.09.04.11_M2
Kernel version:
2.6.35.10-gd2564fb
[email protected] #1
Thu Jun 9 14:20:29 CST 2011
Build Number:
2.50.61.3 CL123205 release-keys
Software number:
2.50.61.3
Browser version:
Webkit/533.1
Please if you have an answer or anything to say regarding my post please use full explanations so that this thread can be useful to other members/guests.

[XAP + SDK] WP7 Root Tools 0.9

Download: www.wp7roottools.com
Today I am proud to announce the immediate availability of WP7 Root Tools 0.9 alpha and WP7 Root Tools SDK 0.1!
WP7 Root Tools 0.9 brings true Root Access to devices with stock ROM's, but it also works on devices with custom ROM's and Full Unlock. Your device needs to be Interop Unlocked to use WP7 Root Tools!
This is still an alpha-release, because there are a lot of new hacks and the tools are still not feature complete! I have rewritten about 75% of all code from the previous release. So before you install WP7 Root Tools you should make a backup of your device. WP7 Root Tools will make changes to system settings and, although this has been tested, it is still possible that a problem occurs. In that case you want to have a recent backup of your device. Installing WP7 Root Tools will be your own responsibility. The author of WP7 Root Tools and the SDK cannot be held responsible for any damages caused directly or indirectly by installing and using WP7 Root Tools or the SDK!
Windows Phone is a closed system to protect the user and his/her personal data from malware and to protect the intellectual property of the developers. The downside of this closed system is that homebrew developers are very limited in their ability to control and tweak a Windows Phone device. With WP7 Root Tools I attempt to open up the system in a gentle way, so that users stay in control of their device, while homebrew apps can get more control to get the maximum power out of your Windows Phone device!
WP7 Root Tools 0.9 now has a File Explorer, Registry Editor, Certificate Installer and a Policy Editor! Thanks to true Root Access on Windows Phone, this new version of WP7 Root Tools will work a lot faster than previous releases and it supports a lot more devices!
WP7 Root Tools should work on these devices:
- Samsung first and second generation devices
- LG devices
- HTC first generation devices with Mango v1 drivers (SPL 4.x or lower)
- Samsung first generation devices with custom ROM and Full Unlock
- HTC first generation devices with custom ROM and Full Unlock
On devices with stock ROM's WP7 Root Tools need to install Root Access. The first time it runs, a 2-phase-installation will start. The app will inform you to start the first install-phase. Then the device will reboot after a few seconds. After the reboot you need to start WP7 Root Tools again immediately! Then the second phase of the installation will start and your device will be rebooted again. After the second reboot you are ready to use WP7 Root Tools. You can use the Policy Editor to give other homebrew app a "trusted" status. With this you will give the app Root Access privileges. So be very careful to which app you give Root Access!! You are responsible for giving access to an app! If you are not sure, read the forums to decide if an app is trust-worthy.
I also created an SDK, which developers can use to profit from Root Access. It provides a way to gain access to the filesystem and the registry (and more) from their managed Silverlight application. No need to worry about COM interop and C++ anymore! The package contains a read-me with short instructions. More details and examples will follow soon! Over the last days Rafael Rivera from the Chevron WP7 team has tested the SDK and he is finishing up the first homebrew app that will use my SDK. He is planning to release his Backup-app soon.
I also need to thank some people for making this possible:
- My wife! (for having to put up with me while doing all this hacking!)
- YukiXDA (for helping me with research on policies)
- Justin Angel (for sending me a NOKIA)
- Cees Heim (for supplying an HTC device for testing)
- Rafael Rivera and Chevron WP7 team (for pioneering WP7 Unlocking)
- HD2Owner (for helping me make custom ROM's for testing)
- fiinix (for helping me with research on policies)
- Ultrashot
- xb0xm0d
- AndrewSh
- Ondraster
- Barin
- Football
- Cmonex
- GoodDayToDie
- Jaxbot
- Dennis Wilson
I will update the guides and manuals on www.wp7roottools.com and here on XDA in the next coming days. I need some time to update all of it.
Have fun with Homebrew now!
Heathcliff74

reserved*****

reserved***** (2)

reserved***** (3)

reserved***** (4)

thank you for your hard work

SO AWESOME!!! Thank You SOOOO Much!!!

big thx 4 all your work man!thxthxthx...
Sent from my OMNIA7 using Board Express

Previous Versions
Thanks for your great work. Do we need to uninstall previous versions before installing the latest version? I have .8, how do I install .9?

Great news, thanks a lot! Successfully installed on Focus and Surround, no problems at all.
But I've tried "BT file transfer" and "Opera mini" (after install I've enabled "trusted" status for the apps): both apps not working properly. Should we expect updated versions of these apps (built with your SDK) or it's some another issue?

Fantastic work, Heathcliff74. Oh man, this is going to be awesome.
Suggestion: use one of your reserved posts to compile a list of trusted apps that benefit from policy elevation.
Two that I've found so far (one of mine):
Root Webserver (in my sig) - runs better with Root Tools than ever before.
TouchXperience - gives way more access through WPDM.
Two others that are in development:
LockWidgets - the preview build has some bugs, but it can be run with Root Tools.
XapHandler - the test build has some known issues (can't install or update if the app is already installed) but fresh install works at least some of the time.

Awesome work! I can confirm that the install works perfectly on an LG Quantum.

Big day!
I need some free space in C:/ to make backup.

sensboston said:
Great news, thanks a lot! Successfully installed on Focus and Surround, no problems at all.
But I've tried "BT file transfer" and "Opera mini" (after install I've enabled "trusted" status for the apps): both apps not working properly. Should we expect updated versions of these apps (built with your SDK) or it's some another issue?
Click to expand...
Click to collapse
WP7 Root Tools will give Root Access to Silverlight apps. DFT BT and Opera Mini both use native executables. You can't give the executables root access with WP7 Root Tools (in fact, you only give the launchers Root Access). These apps could possibly be recompiled to run under TaskHost.exe (as all Silverlight apps do), but I'm not sure about the inner workings of the apps. You'd have to ask the developers.
I will investigate this matter. With all the hacks I have now, I should be able to give Root Access to executables too, but that needs more research.
Ciao,
Heathcliff74

@sensboston: Those tools both require additional native binaries. WP7 Root Tools elevates apps, including all the DLLs they load (which is how the SDK works - it's a homebrew DLL, similar to the old Native.dll and company). However, it doesn't work with out-of-process binaries. Opera requires an EXE (which is obviously its own process) and BT File Transfer requires a driver.
In theory, supporting these would be possible. They'd need to be signed, and the certificates added to the Code Integrity store, but that's already possible. However, they'd also need new policies added. The current version of Root Tool only supports modifying the policies for installed TaskHost (Silverlight/XNA, possibly including some native code) apps, not adding policies for other apps.
BTW, although it's very limited, it turns out that Application.GetResourceStream can be used on files outside the app (with sufficient permissions). That means, if you want to write an app that only needs to access existing files at known locations, you don't even need to mess with native code... although the Root Tools SDK will make it quite easy to do such apps anyhow.

Thanks HeatCliff
Thanks man for this wonderfull pice off work

Heathcliff74 Installed on My Omnia 7 Thanks a lot for your Hard Work

JamesAllen said:
Thanks for your great work. Do we need to uninstall previous versions before installing the latest version? I have .8, how do I install .9?
Click to expand...
Click to collapse
You can just reinstall. No need to uninstall. From this new version on (version after 0.9) you better do an "UPDATE". Not all xap-installers support updating. A lot of them will do a full-install-cycle. If you do a full-install-cycle, you'll loose the permissions and you will have to do the 2-phase-install sequence again. If you do an in-place-update, you will keep the permissions and everything keeps working as expected.
Heathcliff74

Damn, doesn't work for me.
Verizon HTC Trophy
OS 7.10.8107.89
Firmware: 2305.13.20110.605
Hardware: 003
Thanks for the work! Hopefully I'll see support later. I probably updated to the HTC v2 drivers at some point.

dreamcaster012 said:
Damn, doesn't work for me.
Verizon HTC Trophy
OS 7.10.8107.89
Firmware: 2305.13.20110.605
Hardware: 003
Thanks for the work! Hopefully I'll see support later. I probably updated to the HTC v2 drivers at some point.
Click to expand...
Click to collapse
Hmm. are you interop unlocked? I'm no expert with HTC's but that versionnumber looks like your drivers are not that new and could possibly be supported. If you are not Interop Unlocked, then read the opening post of my Interop Unlock thread. At the end of that post is a section specifically for Verizon Trophy's
Heathcliff74

[Testing Finished] Root exploit - iovyroot for Xperia M5 family

So, good news everybody, @zxz0O0 recently released a root exploit based on CVE-2015-1805 entitled iovyroot that allows getting temporary root on Xperia Z3+/Z4/Z5 family (they can't get permanent root with locked bootloader because of dm-verity). For our luck, this same vulnerability is also present on some firmwares of Xperia M5, and unlikely the flagships, those exploitable firmwares doesn't have dm-verity, which means we can get full root access on locked bootloader without depending of proprietary stuff like KingRoot with its dubious root managing app.
How to test
First, please note this is just a test version, it won't actually root the device, only check if the exploit works. After confirming the exploit is working as intended, an official iovyroot update will be released with support to Xperia M5 family. Following this update, I'll release a simple SuperSU installer on top of iovyroot so we can easily get root and SuperSU without depending of KingRoot and its dubious stuff.
To test, enable USB Debugging on your device and make sure ADB drivers are installed, then download and run the ZIP package attached at this thread. If the exploit works for you, the output should be something like this:
Code:
iovyroot by zxz0O0
poc by idler1984
[+] Changing fd limit from 1024 to 4096
[+] Changing process priority to highest
[+] Getting pipes
[+] Allocating memory
[+] Installing JOP
[+] Patching address 0xffffffc0011f52b0
[+] Start map/unmap thread
[+] Start write thread
[+] Spraying kernel heap
[+] Start read thread
[+] Done
[+] Patching addr_limit
[+] Patching address 0xffffffc003618008
[+] Start map/unmap thread
[+] Start write thread
[+] Spraying kernel heap
[+] Start read thread
[+] Done
[+] Removing JOP
got root lmao
Press any key to exit...
After testing, reply to this thread listing your firmware version and variant and confirming whether the exploit worked or not. Please note also that only the firmwares listed below either on "Confirmed working" or "Needs Testing" are supported, because Sony already fixed this exploit on the newer firmwares. All supported firmwares tested. SuperSU installer coming soon...
Furthermore, if anyone is seeking for FTFs of the older firmwares to test, they are still available on XperiFirm under some regions/carriers. Also, if you're wiling to downgrade your device with Flashtool for testing, make sure you're using version 0.9.20.0 or newer and answer yes when it asks if you want to use the .fsc script, otherwise you may brick your phone. If you already have Flashtool installed, it's recommended to trigger a manual devices sync (Devices => Devices Sync => Manual Sync) to make sure you get the .fsc script for M5 since its inclusion in the database was something done recently...
Supported Firmwares
For single SIM variants (E5603, E5606 and E5653):
- 30.0.A.1.23
- 30.1.A.1.33
For dual SIM variants (E5633, E5643 and E5663):
- 30.0.B.1.23
- 30.1.B.1.33

I downgraded my phone and confirmed 30.0.B.1.23 firmware is also working, just the single SIM firmwares remaining to be tested.
@crisaegrim, @pren22, @ParotZ, could you guys test this if possible?

@mbc07 thank you so much for your work on this - really appreciated!
I'm on 30.1.A.1.46
If you need me to check something please let me know and I can take a look this weekend.

@icstm, could you downgrade to 30.1.A.1.33 and run a test with the tool I attached? Since both 30.1.A.1.33 and 30.1.A.1.46 are from Android 5.1 release, you can downgrade with Flashtool without affecting your personal data...
And, in case you have spare time, could you backup your personal data and try the old 30.0.A.1.23 firmware too? This one is the old Android 5.0 release, so you'll need to wipe your data to test, if you just downgrade to this version (without wiping data) you'll probably get in a bootloop...

Working :
[email protected]:/data/local/tmp $ ./iovyroot
./iovyroot
iovyroot by zxz0O0
poc by idler1984
[+] Changing fd limit from 1024 to 4096
[+] Changing process priority to highest
[+] Getting pipes
[+] Allocating memory
[+] Installing JOP
[+] Patching address 0xffffffc0011a72b0
[+] Start map/unmap thread
[+] Start write thread
[+] Spraying kernel heap
[+] Start read thread
[+] Done
[+] Patching addr_limit
[+] Patching address 0xffffffc054200008
[+] Start map/unmap thread
[+] Start write thread
[+] Spraying kernel heap
[+] Start read thread
[+] Done
[+] Removing JOP
got root lmao
[email protected]:/data/local/tmp #

@Androxyde, thanks for testing. What firmware version were you running when you tested? 30.0.A.1.23 or 30.1.A.1.33?
Thanks again

mbc07 said:
@Androxyde, thanks for testing. What firmware version were you running when you tested? 30.0.A.1.23 or 30.1.A.1.33?
Thanks again
Click to expand...
Click to collapse
30.1.A.1.33
Envoyé de mon E6653 en utilisant Tapatalk

Thread closed at OPs request