iPhone 1.1.1 restore mode verbose boot captured on video

Tags: boot, firmware, hacking, iphone, verbose
Hey guys,

This won't mean jack squat to most of you but I've managed (with the help of the iPod Touch dev team) to boot the iPhone in restore verbose mode which will hopefully give us some insight into what we can do to crack the new firmware.

I trained my trusty Canon XH A1 HD videocamera at it with a high shutter speed to make sense of the quickly passing images. Check out the video and stills below.

I'll go through and translate it by hand to make things clearer.

Full resolution MPEG file here

And here are the screenshots:

Darwin Kernel Version 9.0.0d1: Wed Sep 19 00:08:43 PDT; rootj=xnu-933.0.0.203.obj-21/RELEASE_ARM_S5L8900XRB
standard timeslicing quantum is 10000 us
vm_page_bootstrap: 23866 free pages and 5830 wired pages
mig_table_max_displ = 79
iBoot version: iBoot-204
73 prelinked modules
AppleS5L8900XClockController: Dynamic Performance State Management Enabled with max state 3
AppleS5L8900XClockController: Turbo Mode Supported with ratio 0x011c28f5 and mask 0x00008000
AppleS5L8900XUSBWrangler::start starting
AppleS5L8900XUSBWrangler::start registers at 0xeee99000, 0x38400000 physical
+ AppleMPVDDriver[0xc17c4200]::init(properties 0xc18f1ac0)
+ AppleMPVDDriver[0xc17c4200]::start(provider 0xc184af80)
AppleS5L8900XUSBPhy::start called
AppleS5L8900XUSBPhy::start registers at 0xeff36000
AppleMBXDevice(0xc19ec000): Init
AppleMBX: Enabling auto clock-gating: 1


AppleS5L8900XUSBWrangler::setPowerState state = 1
AppleImage2NORAccess::probe(raw-device)
AppleImage2NORAccess::start(raw-device) <1>
AppleSimpleNORAccess::start imageVersion: 2
AppleImage2NORAccessUserClient::probe(AppleImage2NORAccess)












Return to Nate True's blog

Comments:

Posted by jzelaya 40 weeks ago ( 27-Sep-2007 21:16:14 )

Nate True: This is very important work. I recieved an iphone with the new 1.1.1 firmware in it. My guess is the person did the update before it is out on Tuesday or Wednesday, of course i tried iBricking it and you are right nothing there. Do you think with this new info you will be able to make a new iBrickr version to jailbreak and Install PXL packages with it. Do you think once jailbroken and everything that unlocking procedures will be the same or a patched NOR will not work on this firmware version?

Posted by tooxclusive 40 weeks ago ( 28-Sep-2007 06:53:49 )

Lets say if an iPhone already has the new 1.1.1 firmware.. can you head over to where iPhone updates are stored (on Windows, Run "application data\Apple Computer\iTunes\iPhone Software Updates") and delete the 1.1.1 and paste the 1.0.2 firmware but rename it to the new update namimg scheme. then go to itunes and hit restore.

Posted by dereed 40 weeks ago ( 28-Sep-2007 08:56:18 )

Dumb question... Nate, any idea if trying to hack via the tftp server route would work? It would be annoying to setup an isolated network w/ a 17.202.24.178 tftp server, but has anyone tried that route?

Posted by thesolomon 40 weeks ago ( 28-Sep-2007 13:11:45 )

tooxclusive- No need to go through such lengths. (FYI- When I symlinked using the new name to the 1.0.2 firmware, iTunes just started to download a new copy. It may work if you actually rename a file, but I think part of the filename is part of the CRC, so it probably wouldn't work.)

Even though it wont do you any good, you can just hold down Command (on 'OS X') or Shift (on the PC) while clicking 'Restore' or 'Restore/Update' in iTunes, and it will prompt you to pick the file to use. Then just navigate to the iPhone Software Updates folder (on the Mac, its ~/Library/iTunes/iPhone Software Updates", I believe).

The problem with this method is once your iPhone is 1.1.1, it no longer recognizes the older firmware, so your iTunes Restore will fail with an unknown error (1). Using iPHUC and manually pointing to the firmware file results in a "Bus error," which is probably what iTunes is encountering when you attempt to use older firmware. The iPHUC "setafc" command doesn't seem to work the same either.

It should be noted the new firmware bundles come with *three* dmg files, instead of the previous two. The numbering on them is also somewhat different, so its difficult to discern a pattern.

I thought if iTunes got the phone ready for the restore, maybe one could kill the iTunes process and use one of the manual methods to get into the phone. Every time I killed the iTunes process just as it was about to start sending the firmware (after it went through its one or two prepare steps), however, the iPhone would immediately reboot and go back to the 'restore needed' stage.

I never thought to look at the network activity to see if there was a tftp-like session going on. That might be worth looking at.

Posted by sundaystudios 40 weeks ago ( 28-Sep-2007 14:28:31 )

Dear Nate, and all you other hacking geniuses. I was only able to enjoy your wonderful creations for a few days as I had just recently discovered ibricker. I just updated to the new 1.1.1. software update and regret it.
Suggestion: When you figure out how to make our iphones lovable again do you think it would be possible to write a pxl that could take the wifi itunes music samples and transfer them into the ringtone file? They seem to have done all the work of sampeling the best part of the songs that are offered.
Thank you for all your hard work and yes we are happy making donations in appreciation of your valued labor.
Susan & Charles

Posted by drgurupc 40 weeks ago ( 28-Sep-2007 15:39:51 )

OK for what it is worth:

Genuis Bar states the reason for the failure is that the "IMEI NUMBER" on the back of your iPhone does not match that of the firmware. This was verified by touching the italic I in the upper right and matching numbers!

For what it is worth

Posted by blackstar 40 weeks ago ( 28-Sep-2007 16:02:19 )

I knew not to update my iPhone right away (i was about to) knowing I had all this shizz in it (jailbreaked, ssh server, ringtones, ibrickr, summerboard, winscp access bla bla bla...) so i still have the (iPhone1,1_1.0.2_1C28_Restore.ipsw) and Ill check out the new (iPhone1,1_1.1.1_3A109a_Restore.ipsw) by restoring from ,1_1.0.2, from what ive heard here you can restore back to ,1_1.0.2 from 1_1.1.1, you guys shouldnt have updated from a modified iphone; too excited about the itunes mobile update, as its more money for Apple anyway, purchasing songs on the go. Heres a list of some new shizz apple came out with (excluding mashing up all the hacker stuff)...

-itunes
-re-order stocks and weather lists
-see battery level of your battery level of bluetooth headset
-double-click home button updates
-double click-spacebar update (wow)
-landscape email attachments
-connect iphone to tv
-receiver/speakerphone louder (thank god)
-alert volkumes match ringer volumes
-turn off edge date

Glad I didnt. Ill just wait for Nate and Co. to release jailbreaking technology for the new 1_1.1.1. Thanks guys aweomse stuff and we'll wait for the updates...

If you havent updated your iphone to the new 1_1.1.1 with a modified iphone then **DONT!!** I personally dont wana resort to the microwave plan b. You can either wait for a hack from Nate with your modified iphone or do what i did:

1) To be on the safe side (if you have this) restore your summerboard theme to the default stocky iphone one.
2) Use Ulctl to stop the com.openssh.sshd service (if your using SCP) (I heard some people didnt do this and restored their phone even while having version iPhone1,1_1.0.2_1C28_Restore.ipsw and jacked up their phone)
3) Choose a factory ringtone
4) Then restore and update to the new shizz to have itunes store update and all the other meh updates. They are ok.

anyway your still in dangerous waters (even if you havent updated to 1,1_1.1.1) if you have a modified phone and try to restore casue if you havent noticed i think there was also a itunes update along with the iphone update, so be cautious. hopefully people like us with a modified iphone havent blindly cornered ourselves into a trap.

Lates!

BlackStar

apcircle@proventus.org



Posted by gabar 40 weeks ago ( 29-Sep-2007 09:25:03 )

i got a new phone and I did every thing till i reach the i tunes restore screen then i restore it but it said that it has newer version so i canceled reading the hazared on this site. I pastd the old firmware from nate's given link. but i dont know how it work i saved it in the same path and making the folder iphone software updates. so how can i do it can u plz explain and when can we except the new software to unlock

Posted by evster 39 weeks ago ( 04-Oct-2007 09:07:23 )

i am having some difficulty installing the ibrickr after i have supposedly successfully restored my iphone from 1.1.1 to 1.0.2 but now everytime i try to install the ibrickr and i get to the stage where you have to wait for 3-4 mins.... well it starts doing something because itunes starts throwing windoes open saying new version is available and it looks like the phone restarts its self into normal mode and then thats it. i left it on for 20 mins and then when i restart the phone and try again it still says that the phone is not freed yet! please help!

Posted by harshalhere 36 weeks ago ( 25-Oct-2007 06:34:34 )

Great job at all of this Nate.
It will be a big deal once you can fix iBrickr on firmware 1.1.1, as most of us need the 1.1.1 primarily for the better speakerphone and better sound features of the iPhone
Cant wait for this one.

cheers

Posted by kandarp 30 weeks ago ( 07-Dec-2007 00:22:57 )

i hit 'boot your iphone' while i was trying to downgrade my iphone for ringtones.The processof booting was start then and still not stopping.it's starting again and again continuously.Yesterday it lasts for 4hrs untill the battery was discharged.Plz help me out guys.

Posted by nandosreis 29 weeks ago ( 12-Dec-2007 15:43:08 )

I did the exact same thing as kandarp did and now I can't use my iPhone at all!!! Please, Nate True help me, i'll even paypal you $40 if you want. I just need to know how I can reverse my iphone from this!!! just for you to know exactly what I did, this is what happened. I upgraded to version 1.1.2 and connected my iPhone to ibrickr. It offered me to jailbreak my iphone for me and I accepted. when it was finished it said that all was left was to boot up the iphone from recovery mode. It offered to boot up the iphone for me and I accepted. But when it it was done, exactly what you were able to do in this post happened to my iphone. Please, I llllllloooooovvvvvveeeeeeeee iBrickr, but something happened to my iphone and I need to reverse it. Please I beg you a million times please help me!!! Please please please please!!!!

Posted by aldenrose 29 weeks ago ( 16-Dec-2007 17:26:07 )

sorry to be a non-creator and post here, but my phone is doing that little scrolling thing too, how do i get it to stop? the iphone support people hung up on me when I asked for help cause its third party.... HELP PLEASE. They said i had to just buy a new one...

-Alden

Posted by vadim 28 weeks ago ( 17-Dec-2007 00:46:09 )

Hey I also had something like that I upgraded my phone to the 1.1.2 and then used ibrickr to jailbreak the phone and then i guess it kinda messed it up and the screen turned green and then i exited ibrickr and opened it up again and clicked the retore button thing the one that says click here if ur not sure what ur doing or something like that.... so then it was fixing my phone and on the phone all those words were typing like it was booting but all it does is that and then it restarts and does that again and aagain and i itunes or ibrickr cant read my iphone :( so can u guys please help us out :) it would be greatly appreciated and thatnk u soo much

Posted by aldenrose 28 weeks ago ( 17-Dec-2007 16:46:21 )

Me again... same thing happened to me and i followed this: docs.info.apple.com/article.html?artnum=305797
Worked very well for me. Let me know if it works.

This comment was edited at 2007-12-17 16:47:42


Posted by vadim 28 weeks ago ( 17-Dec-2007 23:51:31 )

Um well that wont work for me because my itunes nor my computer cant read my iphone right now because all it does is shows that boot screen thing or whatever it is like it tyes a lot of words or something really fast like it is writing something to the system and then it just restarts and does the same thing over and over again

Posted by vadim 28 weeks ago ( 18-Dec-2007 12:23:45 )

Nevermind I did that and it worked :) Thanks a lot man :)

Posted by prinze 27 weeks ago ( 24-Dec-2007 03:31:17 )

Hi,
Nate firstly i m very impressed by your work. I have a really big problem please help me and I promise to paypal you my friend. I purchased a unlocked phone in the UAE and it was working fine all these days, until i saw this new update pop up in itunes [Ver.1.1.2]. I updated it like a fool and now the phone is locked and does not reconize my sim. I then used Ibrickr to downgrade to 1.0.2 and it went in verbose mode rebooting and so I restored it back to original factory settings like vdim and alden rose did. how can I unlock the phone again so dat I can use it anywhere. The Screen shows "No Sim card installed" "Insert an unlocked and valid SIM to activate phone. Please help me nate.

Posted by sanchy 25 weeks ago ( 07-Jan-2008 16:13:05 )

aldenrose you save me NATE you the MAN

Posted by rickyispissed 25 weeks ago ( 10-Jan-2008 20:14:27 )

Hi, nate i am having the poblems with my iphone with all the codes scrolling down the screen and was wondering how to fix it?

Posted by sike 23 weeks ago ( 23-Jan-2008 22:34:33 )

hi, nate im having problems with my iphone, all the codes scrolling down my screen and i dont know what to do now? can you help me out?

Posted by dendesss 23 weeks ago ( 25-Jan-2008 01:26:04 )

hey nate i really need yo help man , my iphone was unlocked n i tried to update it to da newest firmware, n now it's locked, i don't really know what to do, please man man help me !!!

Posted by ncore 6 weeks ago ( 19-May-2008 08:07:15 )

Hello Nate,

Well, I don't quite know what has happened to my phone. It was on firmware 1.1.4 Unlocked, Jailbroken & Activated by ZiPhone. I wanted to install 3rd party applications on my phone without a wifi connection so i downloaded and run ibrickr. It said that my iPhone was not free so i downloaded firmware 1.0.2 and clicked continue. After that the work which should have been completed withen 3-4 mins took more than 10 mins. so as instructed...i restarted my iPhoneand did it again. I also tried restoring it to 1.0.2 firmware from iTunes, but was unsuccessful. After that....I see exactly the same codes scrolling down the screen and restarting again and again.

What do i do ? I am very confused and tensed...? is my iPhone broken....:(...

Please help me Nate...

Regards,
Akash

Log in or register to post comments.
You are not logged in.
Log inRegister now!