WP8 ROM analysis [UEFI and RUU nbh] by ansar

Search This thread

swefla

Senior Member
May 18, 2010
70
8
it's very interesting to see a "non compatible phone" from WP7 running WP8, clearly Microsoft lied to us in the face about the upgrade process to jump from winphone7 to winphone8.

I don't think that this ROM for Leo is a real WP8 ROM. Infoscreen and Marketplace looks a bit different on WP8. (e.g. screen resolutions is missing in infoscreen and win WP8 marketplace is called store). I think ansar has done some registry editings, maybe bit more, and now WP8 marketplace is available in WP7.8.
 
  • Like
Reactions: AndrewSh

Niddu85

Senior Member
Dec 2, 2010
50
2
I found an ntfs partition inside, some fat and fat32 and i am able to read/modify them.

Sent from my Windows Phone 8S by HTC using XDA Windows Phone 7 App
 

warriorvibhu

Inactive Recognized Developer
Aug 28, 2007
1,525
395
Somewhere Amazing
HTC One (m7)
LG V10
Well not many updates since long.. but Ansar as far as my understanding / Knowledge goes .. The compatibility warning should still not prevent you from being able to install apps .. If you please you can enlighten/ tell us more .. what exactly is happening with the issue ..
 
  • Like
Reactions: pdaimatejam

GodlikePL

Senior Member
Dec 12, 2011
54
7
I don't think that this ROM for Leo is a real WP8 ROM. Infoscreen and Marketplace looks a bit different on WP8. (e.g. screen resolutions is missing in infoscreen and win WP8 marketplace is called store). I think ansar has done some registry editings, maybe bit more, and now WP8 marketplace is available in WP7.8.

Just look at this if you don't know. It's possible :
http://www.twitter.com/CotullaCode/status/274149541404610560
https://twitter.com/CotullaCode/status/274145147393040384
http://www.twitter.com/CotullaCode/status/274145044217335808

WP8 can't run on HTC HD2 and it's clones (HTC Mozart, HTC Trophy) = LIE
 
Last edited:

dazza9075

Senior Member
Jul 22, 2007
2,858
493
Suffolk

To be fair, its a bit academic if its a lie or not, not having it in the public essentially means it can't happen, or won't happen to be more exact. There are a bunch of things that can be done, but haven't been done, win mob 5 on the alpine being one, wm running as an app within wp being another, both of these have been shown to be working , both never were released. Does that mean DFT an co are full of BS lying to us all? No, in my opinion it does not, in my opinion it shows us that they are unwilling to release buggy incomplete code. The only thing they are guilty of is showing proof of concept work as working code without explaining that its going to need a lot more work to actually get finished


Sent from my Arc using xda app-developers app
 
  • Like
Reactions: fengsam

mike253

Senior Member
Aug 19, 2012
51
4
Spanaway
I have a couple of questions that I can't find anywhere else..

Is it possible (even the slightest) to port drivers for a phone to WP8?

Or would it require a bootloader unlock/wipe of a phones system and internal emmc storage?

If that's the case I'm f*cked considering I'm using a motorola device.. lol.

Sorry guys, just had to ask. I don't think its been asked before or not.

Sent from my XT894 using xda app-developers app
 

dazza9075

Senior Member
Jul 22, 2007
2,858
493
Suffolk
To my knowledge there is no means to tinker with the innards of any WP8 device AND have it persist and be usable. Its Tighter than a ducks bottom ;)

Sent from my SGH-i937 using XDA Windows Phone 7 App
 

reker

Senior Member
May 23, 2009
124
168
Shanghai
Within wp7 nbh, the block informations is in the header, but I cannot find them in wp8 nbh file.
How did you get them?
 

jessenic

Senior Member
Sep 9, 2010
479
315
// Production Self Test Log

// This log file describes test failures from the Production Self Test.
// If you see this log file, it means that this device is not ready to ship
// because some of the production self tests are failing. If this is a pre-production
// device, this is an expected result and this file can be ignored (or deleted). If this
// is supposed to be a production ready device, check the log below to identify tests that
// are failing, and see the Windows Phone documentation for information on how to fix the
// issues identified by these tests.

TEST FAIL: BCD: Found banned Element BCDE_OSLOADER_TYPE_KERNEL_DEBUGGER_ENABLED
TEST FAIL: BCD: Found banned Element BCDE_LIBRARY_TYPE_ALLOW_PRERELEASE_SIGNATURES
TEST FAIL: UEFIVariable: SecureBoot is not enabled
TEST FAIL: UEFIVariable: SetupMode IS enabled
TEST FAIL: UEFIVariable: Unable to enumerate certificates in store 'db'
TEST FAIL: UEFIVariable: Unable to enumerate certificates in store 'db'
TEST FAIL: UEFIVariable: Unable to enumerate certificates in store 'PK'
TEST FAIL: UEFIVariable: Unable to enumerate certificates in store 'KEK'
TEST FAIL: UEFIVariable: Unable to read UEFI variable 'dbx'
TEST FAIL: UEFIVariable: Unable to read UEFI variable 'PK'
TEST FAIL: UEFIVariable: Unable to read UEFI variable 'KEK'
TEST FAIL: SOC SelfTest failed. Details below.
TEST FAIL: SOC Secure Boot Fuse has not been blown
TEST FAIL: JTAG Fuses have not been blown
:)
 
  • Like
Reactions: ilam82 and Robbie P

kkmobile

Member
Feb 27, 2010
8
0
Waiting for wp8 rom on hd2

Dear ansar,

is wp8 ready to work on htc hd2. I am waiting for your positive response. As i am waiting for rom for so long.

Thanks.
 

netham45

Inactive Recognized Developer
Jun 24, 2009
886
569
Denver

davitdavtyan@gmail.com

Senior Member
Oct 11, 2012
85
11
Ashkelon
Hi Guys,

Please see my post above, link here: http://xdaforums.com/showpost.php?p=38145514&postcount=23.

Please refrain from constantly asking for updates, such posts will be deleted, thanks.
There is nothing strange to ask about releasing the ROM. You should not tell such things. People want to ask a question and that's the reason people ask to get answered. But if somebody asks does not mean every second person is going to ask. I understand you are Moderator but it does not mean that you should impose something too much.
 

timmymarsh

Senior Moderator - Emeritus
Mar 26, 2007
5,137
1,186
Just one More
There is nothing strange to ask about releasing the ROM. You should not tell such things. People want to ask a question and that's the reason people ask to get answered. But if somebody asks does not mean every second person is going to ask. I understand you are Moderator but it does not mean that you should impose something too much.

Hey Davit,

Because im a moderator, i can see all the posts that have been deleted in this thread that asked the very same thing (and in other threads). We ask members not to continuously ask for updates as it it completely dilutes the usefulness of the thread, makes it way too long to navigate and quite frankly is a waste of server space and screen real-estate.

This isn't a new request, one or two are tolerated, what isn't tolerated is hundreds of members asking the same thing repeatedly; this upsets not only more seasoned members, but also the Developers in question and us Mods; with 5 million members im sure you will appreciate that if this isn't controlled it can easily get out of hand.

Cheers.

(btw, this thread will again be cleaned once this post has been viewed):cool:
 

DomZ

Senior Member
Aug 28, 2007
150
2
Paris
Hi Ansar,

Since Cottula dropped his work on HD2, you're our (HD2 owners) last chance to get WP8 on it :) !
 

GoodDayToDie

Inactive Recognized Developer
Jan 20, 2011
6,066
2,933
Seattle
No. Such files only contain public keys. Unless you could replace the files with ones containing our own public keys, that doesn't help us; we need to be able to use or control the private keys (or bypass the code signing entirely).
 

Top Liked Posts

  • There are no posts matching your filters.
  • 47
    Hi to all,


    Update on 17.02.2013, WP8 LEO ROM development

    I am developing a new WP8 ROM for LEO and can access all WP8 STORE apps

    as HTC apps, apps, games, music and podcasts, under the name of MARKETPLACE

    Up to now all music and podcasts work ok but for HTC apps, apps and games

    there is a pop up of comparibility warning as can be seen in the following screen shots

    In the ROM are also included all WP8 lock screens, wallpapers and sounds, and more items

    I hope to develop this LEO ROM as further as posible


    //// ROM Screen Shots ////

    LEO_Screen_Shots_17_2_2013.png



    End of 17.02.2013 update


    ********************************


    Update on 28.12.2012, The WP8 Partitions

    The WP8 Partitions, as identified up to now

    There are 28 [0x1C] in total, 21 [0x15] Read-Only and 7 Read-Write


    READ-ONLY SECTION START

    Device Provisioning Partition (FIRST READ-ONLY)
    01 DPP 16384 Unknown FS

    QUALCOMM 8960 SPECIFIC READ-ONLY PARTITIONS

    Modem golden file system - MUST FOLLOW DPP
    02 MODEM_FSG 6144 Unknown FS

    Secure Software Download
    03 SSD 16 Unknown FS

    Bootloaders
    04 SBL1 3000 Unknown FS
    05 SBL2 3000 Unknown FS
    06 SBL3 4096 Unknown FS
    07 UEFI 5000 Unknown FS
    08 RPM 1000 Unknown FS
    09 TZ 1000 Unknown FS

    fTPM Application
    0A WINSECAPP 1024 Unknown FS

    Bootloaders Backup Section (Sizes must match)
    0B BACKUP_SBL1 3000 Unknown FS
    0C BACKUP_SBL2 3000 Unknown FS
    0D BACKUP_SBL3 4096 Unknown FS
    0E BACKUP_UEFI 5000 Unknown FS
    0F BACKUP_RPM 1000 Unknown FS
    10 BACKUP_TZ 1000 Unknown FS

    fTPM Application Backup Section (Sizes must match)
    11 BACKUP_WINSECAPP 1024 Unknown FS

    UEFI Variable Services Partitions - Read-Only
    12 UEFI_BS_NV 512 Unknown FS
    13 UEFI_NV 512 Unknown FS

    ACPI table storage
    14 PLAT 16384 FAT

    EFI System Partition (LAST READ-ONLY)
    15 EFIESP 131072 FAT ByteAlignment 0x4000000

    READ-ONLY SECTION END


    START QUALCOMM 8960 SPECIFIC READ-WRITE PARTITIONS

    Modem live file systems
    16 MODEM_FS1 6144 FAT ByteAlignment 0x4000000
    17 MODEM_FS2 6144 FAT

    UEFI Variable Services Partitions - Read-Write
    18 UEFI_RT_NV 512 FAT
    19 UEFI_RT_NV_RPMB 256 FAT

    END QUALCOMM 8960 SPECIFIC READ-WRITE PARTITIONS


    MICROSOFT READ-WRITE PARTITIONS

    1A MMOS 8192 FAT
    1B MainOS 1343488 NTFS ByteAlignment 0x800000
    1C Data 0x4000 NTFS ByteAlignment 0x800000

    END MICROSOFT READ-WRITE PARTITIONS


    SectorSize 512 bytes
    ChunkSize 128 Kb


    End of 28.12.2012 update

    ********************************

    This thread is devoted to WP8 ROM analysis
    .
    .
    1. The hTC structure of WP8 ROM version 1.00
    .
    .
    A. The Block structure of the WP8 UEFI_signed.nbh
    .
    .
    1st Block, the new file header // Identical to RUU, except 2 bytes
    .
    .
    Start 0x00000000 End 0x000001FF Length 0x200 bytes
    .
    0x00000000 Htc@egi$ // file name ID
    .
    0x00000008 0x008F // word:ID [TBN]
    .
    0x0000000A 0x0500 // word:0x05 [TBN]
    .
    0x00000014 1.00.401.24 // ROM version
    .
    0x0000001F 0x08 // byte:0x08 [TBN]
    .
    0x00000020 PM232000* // Device ID [TBN]
    .
    0x00000040 WWE // ROM language
    .
    0x000000D0 HTC__001 // CID list start
    .
    0x000000D8 HTC__203 // CID list
    .
    ... ... // CID list
    .
    0x00000120 HTC__K18 // CID list end
    .
    .
    .
    .
    2nd Block // [TBN]
    .
    .
    Start 0x00000200 End 0x0001001FF Length 0x100000 bytes
    .
    .
    .
    .
    3rd Block // Identical to the 3rd Block of RUU [TBN]
    .
    .
    Start 0x00100200 End 0x0003067FF Length 0x206600 bytes
    .
    .
    .
    .
    4th Block // Identical to the 10th Block of RUU [TBN]
    .
    .
    Start 0x000306800 End 0x000322662 Length 0x1BE63 bytes
    .
    This block ends with non unicode text hTCVer001.532.009 and a trailing 0x0A
    .
    .
    5th Block // Identical to the 11th Block of RUU [TBN]
    .
    .
    Start 0x000322663 End 0x0004594D1 Length 0x136E6F bytes
    .
    This block ends with non unicode text hTCVer001.532.010 and a trailing 0x0A
    .
    .
    6th Block // Identical to the 12th Block of RUU [TBN]
    .
    .
    Start 0x0004594D2 End 0x00063A129 Length 0x1E0C58 bytes
    .
    This block ends with non unicode text hTCVer001.532.015 and a trailing 0x0A
    .
    .
    7th Block // [TBN]
    .
    .
    Start 0x00063A12A End 0x00081E815 Length 0x1E46EC bytes
    .
    This block ends with non unicode text hTCVer001.532.008 and a trailing 0x0A
    .
    .
    .
    .
    B. The Block structure of the WP8 RUU_signed.nbh
    .
    .
    1st Block, the new file header // Identical to UEFI, except 2 bytes
    .
    .
    Start 0x00000000 End 0x000001FF Length 0x200 bytes
    .
    0x00000000 Htc@egi$ // File name ID
    .
    0x00000008 0x008F // word:ID [TBN]
    .
    0x0000000A 0x0A00 // word:0x0A [TBN]
    .
    0x00000014 1.00.401.24 // ROM version
    .
    0x0000001F 0x13 // byte:0x13 [TBN]
    .
    0x00000040 WWE // ROM language
    .
    0x000000D0 HTC__001 // CID list start
    .
    0x000000D8 HTC__203 // CID list
    .
    ... ... // CID list
    .
    0x00000120 HTC__K18 // CID list end
    .
    .
    .
    .
    2nd Block // [TBN]
    .
    .
    Start 0x00000200 End 0x0001001FF Length 0x100000 bytes
    .
    .
    .
    .
    3rd Block // Identical to the 3rd Block of UEFI [TBN]
    .
    .
    Start 0x00100200 End 0x0003067FF Length 0x206600 bytes
    .
    .
    4th Block // the Radio part 01 (Holds hTC certificates)
    .
    .
    Start 0x000306800 End 0x00031E815 Length 0x18016 bytes
    .
    This block ends with non unicode text hTCVer001.532.008 and a trailing 0x0A
    .
    .
    5th Block // the Radio part 02 (Holds hTC certificates)
    .
    .
    Start 0x00031E816 End 0x00033682B Length 0x18016 bytes
    .
    This block ends with non unicode text hTCVer001.532.008 and a trailing 0x0A
    .
    .
    6th Block // the Radio part 03 (Holds hTC certificates)
    .
    .
    Start 0x00033682C End 0x00034E841 Length 0x18016 bytes
    .
    This block ends with non unicode text hTCVer001.532.008 and a trailing 0x0A
    .
    .
    7th Block // the Radio part 04 (Holds hTC certificates)
    .
    .
    Start 0x00034E842 End 0x000366857 Length 0x18016 bytes
    .
    This block ends with non unicode text hTCVer001.532.008 and a trailing 0x0A
    .
    .
    8th Block // the Radio part 05 (Holds hTC certificates)
    .
    .
    Start 0x000366858 End 0x00037E86D Length 0x18016 bytes
    .
    This block ends with non unicode text hTCVer001.532.008 and a trailing 0x0A
    .
    .
    9th Block // the Radio part 06 (Holds hTC certificates)
    .
    .
    Start 0x00037E86E End 0x000396883 Length 0x18016 bytes
    .
    This block ends with non unicode text hTCVer001.532.008 and a trailing 0x0A
    .
    .
    10th Block // Identical to the 4th Block of UEFI [TBN]
    .
    .
    Start 0x000396884 End 0x0003B26E6 Length 0x1BE63 bytes
    .
    This block ends with non unicode text hTCVer001.532.009, an 0x0D and a trailing 0x0A
    .
    .
    11th Block // Identical to the 5th Block of UEFI [TBN]
    .
    .
    Start 0x0003B26E7 End 0x0004E9555 Length 0x136E6F bytes
    .
    This block ends with non unicode text hTCVer001.532.010 and a trailing 0x0A
    .
    .
    12th Block // Identical to the 6th Block of UEFI [TBN]
    .
    .
    Start 0x0004E9556 End 0x0006CA1AD Length 0x1E0C58 bytes
    .
    This block ends with non unicode text hTCVer001.532.015 and a trailing 0x0A
    .
    .
    13th Block // the WP8 image
    .
    .
    Start 0x0006CA1AE End 0x00322D53EF Length 0x31C0B242 bytes
    .
    This block will be developed in more detail
    .
    .
    .
    Both will be more detailed in the next posts #2 and #3
    .
    .
    Notes
    ,
    ,
    1. that there are certain differences between hTC and Nokia structures
    .
    2. all info is provided on a development base only
    .
    .
    Regards, ansar
    10
    Info on WP8 LEO ROM development

    Hi to all,

    I am developing a WP8 ROM for LEO, see post #1

    Regards, ansar
    6
    They are really W8 NTFS ;)
    4
    RUU.nbh ROM detailed analysis development

    Also this post is reserved
    4
    no, you can't use osbuilder because this rom isn't built like other winCE's roms (wm6.x, wp7). This rom has got his own filesystem (I think it should be ReFS), and his own structure. You have to wait because some developers are digging into it. Right now we only know that the system structure is similar to a Windows PC, even drivers are in sys format (this is a bad news for those who are waiting a porting to older devices).
    Main partitions are always NTFS