The iPhone Wiki - User contributions [en]

Useful Links

2008-08-01T11:30:32Z

Master-lex-: /* Websites */

== Wikis ==
* [http://www.deloware.com/iphone/doku.php iPhone Information Wiki (Outdated)]
* [http://wikee.iphwn.org/ iPhone Dev Team Portal]
* [http://iphonedevwiki.scribblewiki.com Snapshot of original Dev Team fiveforty wiki]
* [http://chronic-dev.org/userwiki/ Chronic Dev User Wiki]
* [http://www.modmyifone.com/wiki/index.php/Main_Page ModMyiFone Wiki] (Good n00b starting point)

== Forums ==
* [http://www.hackint0sh.org/forum/forumdisplay.php?f=123 Hackint0sh Forums (iPhone)]
* [http://www.hackint0sh.org/forum/forumdisplay.php?f=135 Hackint0sh Forums (iPod Touch)]
* [http://haklabs.com/appstore/ DRM Decryption Technique Investigation Forum]
* [http://www.modmyifone.com/forums/ ModMyiFone Forums]
* [http://www.iphone-hacks.com/forums/ iPhone Hacks Forums]

== International ==
* [http://iPhone-Forums.de/ iPhone forum for the German community]
* [http://iPhones.ru/forum/ iPhone forum for the Russian community]

== iPhone Downloads ==
* [http://www.iphone-hacks.com/downloads iPhone Hacking Downloads]

== Websites ==
* [http://iphonejtag.blogspot.com/ geohot's blog on the iPhone]
* [http://www.iclarified.com/tutorials/iphone/index.php iClarified iPhone tutorials]
* [http://hacktheiphoneitouch.blogspot.com/ Fozystyles iPhone/iPod Touch/Mac Tutorials]
* [http://www.iphone-hacks.com iPhone Hacks]
* [http://george.insideiphone.com George Zhu's Blog]

== File Resources ==
* [http://www.iphonefix.de/ Large iPhone and iPod related Filebase]

BootNeuter

2008-07-28T17:28:25Z

Master-lex-: New page: '''BootNeuter gives you total control of your first-gen iPhone's S-Gold bootloader and baseband.''' It's an application you run right on your iPhone that lets you: '''Neuter''' your bo...

'''BootNeuter gives you total control of your first-gen iPhone's S-Gold bootloader and baseband.'''

It's an application you run right on your iPhone that lets you:

'''Neuter''' your bootloader

'''Unlock''' your baseband

'''Reflash''' your bootloader to 3.9BL or 4.6BL no matter what version you're at now (even if you're at 3.8BL)

'''Fakeblank''' your bootloader to let you run serial payloads directly on your S-Gold

[[Image:Bootneuter.png]]
----

'''Neutering'''

A neutered bootloader gives you absolute control over your baseband. The restrictions normally applied by the bootloader are completely lifted! With a neutered bootloader:

The baseband is no longer integrity-checked
Can be patched (unlocked or other custom modifications)
4.6BL will even run with patched baseband – no need to revert to 3.9BL even with most recent firmware
Secpack restrictions are removed
You are free to downgrade your baseband using bbupdater without having to run ieraser/ienew first.
No longer does the “greater than” (4.6BL) or “greater than or equal” (3.9BL) rule apply. You can arbitrarily go up and down regardless of what secpacks you use.
Secpack signatures are ignored
The RSA encrypted header is no longer checked for correct hash values by the bootloader
The *.fls files can be patched and fed to bbupdater directly
A copy of the last used secpack will be saved at a03c0000, retrievable via norz or similar dumpers. Not that secpacks even matter anymore.

----

'''Unlocking
'''

BootNeuter gives you the option to unlock your 1.1.4 or 2.0 1G baseband. An unlocked baseband is patched, and would normally fail the integrity check done by the bootloader on recent firmware releases. The anySIM app written by gray forges the token in the baseband, which will trick 3.9BL but not 4.6BL. With a neutered phone, the integrity check is skipped completely. So now you can run recent firmware releases with a 4.6BL even if you've unlocked your baseband!

A neutered bootloader will let you use bbupdater on modified ICE*.fls files, so now you don't even need a separate app to unlock. As discussed on the simple_unlock page, you can now unlock the baseband before it even gets put on your iPhone!

----

'''Bootloader Version'''

If you found yourself downgraded to 3.9BL (without your consent) by running buggy software, the iPhone Dev Team comes to the rescue. With BootNeuter you can freely go back and forth between bootloader versions. Now you can truly restore your iPhone to its out-of-box condition.

----

'''Fakeblank'''

For iPhone hackers who want to be able to run serial payloads directly at S-Gold reboot time, BootNeuter lets you choose a fakeblank bootloader. If BootNeuter detects that your iPhone is currently fakeblanked, it will do all of its bootloader operations via serial payload and won't need to erase/reprogram the baseband to make bootloader changes.

----

----

'''Credits:'''
MuscleNerd, gray, chris, wizdaz, planetbeing, and the entire iPhone Dev Team. Thanks to geohot for the extended secpack erase method for those with 4.6 bootloaders.

----

File:Bootneuter.png

2008-07-28T17:25:39Z

Master-lex-: BootNeuter

BootNeuter

Toolchain

2008-07-28T13:44:57Z

Master-lex-:

'''Build iPhone Toolchain on Mac OS X Tiger'''

This is a brief description about how to install iPhone toolchain on Mac OS X Tiger.
Needed Packages

1. llvm source
2. iphone-dev source
3. iphone-filesystem

Put all the packages in your $HOME folder.
How To Build

Make sure you’re running Mac OS X 10.4, and have installed Xcode development environment.
1. Extract packages

$ cd ~
$ tar xjvf llvm-svn.tar.bz2
$ tar xjvf iphone-dev.tar.bz2
$ cd /usr/local
$ sudo tar xjvf ~/iphone-filesystem.tar.bz2
$ sudo mkdir -p /usr/local/arm-apple-darwin
$ LLVMOBJDIR=~/llvm-svn
$ HEAVENLY=/usr/local/iphone-filesystem

2. Build LLVM

$ cd ~/llvm-svn
$ ./configure --enable-optimized
$ make ENABLE_OPTIMIZED=1
$ sudo make install

3. Build odcctools

$ mkdir -p ~/iphone-dev/build/odcctools
$ cd ~/iphone-dev/build/odcctools
$ ../../odcctools/configure --target=arm-apple-darwin --disable-ld64
$ make
$ sudo make install

4. Install headers

$ cd ~/iphone-dev/include
$ ./configure --with-macosx-sdk=/Developer/SDKs/MacOSX10.4u.sdk
$ sudo bash install-headers.sh

5. Install csu (binary)

$ mkdir -p ~/iphone-dev/build/csu
$ cd ~/iphone-dev/build/csu
$ ../../csu/configure --host=arm-apple-darwin
$ sudo make install

6. Build LLVM-GCC

$ mkdir -p ~/iphone-dev/build/llvm-gcc-4.0-iphone
$ cd ~/iphone-dev/build/llvm-gcc-4.0-iphone
$ ../../llvm-gcc-4.0-iphone/configure --enable-llvm=`llvm-config --objc-root` \
--enable-languages=c,c++,objc,obj-c++ --target=arm-apple-darwin --enable-sjlj-exceptions \
--with-heavenly=$HEAVENLY --with-as=/usr/local/bin/arm-apple-darwin-as \
--with-ld=/usr/local/bin/arm-apple-darwin-ld
$ make LLVM_VERSION_INFO=2.0-svn-iphone-dev-0.3-svn
$ sudo make install

Done.
Build iPhone Toolchain on Mac OS X Leopard

'''HOWTO build the toolchain for 1.1.1 on Leopard by drudge with pure ownage by lupinglade'''

Ensure that you have a copy of bison and flex installed on your system. All major systems should have these tools installed or available in package management systems.

$ bison --version
GNU Bison version 1.28
$ flex --version
flex version 2.5.4

Check out a copy of LLVM SVN, and build a release build (as opposed to a debug one). Currently, due to Issue 70, we are limited to revision 42498.

$ svn co http://llvm.org/svn/llvm-project/llvm/trunk llvm-svn -r 42498
$ pushd llvm-svn
$ ./configure --enable-optimized
$ make ENABLE_OPTIMIZED=1
$ sudo make install
$ LLVMOBJDIR=`pwd`
$ popd

Check out a copy of the iphone-dev SVN repository.

$ svn checkout http://iphone-dev.googlecode.com/svn/trunk/ iphone-dev
pushd iphone-dev

Make a directory to hold the toolchain.

$ sudo mkdir /usr/local/arm-apple-darwin

Build odcctools.

$ mkdir -p build/odcctools
$ pushd build/odcctools
../../odcctools/configure --target=arm-apple-darwin --disable-ld64
export INCPRIVEXT="-isysroot /Developer/SDKs/MacOSX10.4u.sdk"
$ make
$ sudo make install
$ popd

Get a copy of the iPhone root filesystem. This is usually obtained by decrypting and extracting the iPhone restore software using these tools, but there are many other methods to obtain this, including simply using scp to download all the files from the iPhone over Wi-Fi. I would use the method describled here: http://www.touchdev.net/wiki/Jailbreak_Guide to get the dmg.

To unpack the root filesystem, mount the dmg, open terminal and run

$ sudo mkdir /usr/local/share/iphone-filesystem
$ sudo cp -Rp /Volumes/Snowbird3A110a.N45Bundle/* /usr/local/share/iphone-filesystem/

Now, set the environment variable $HEAVENLY to its path:

$ HEAVENLY=/usr/local/share/iphone-filesystem

Patch the system headers

$ pushd include
$ ./configure --with-macosx-sdk=/Developer/SDKs/MacOSX10.4u.sdk
$ sudo bash install-headers.sh
$ popd

Install csu, which includes crt1.o, dylib1.o, and bundle1.o. Don’t rebuild them from source, as this requires a working cross-GCC, which you don’t have yet (and the build-from-source process for csu is broken right now anyway). Binaries are provided for this reason.

$ mkdir -p build/csu
$ pushd build/csu
$ ../../csu/configure --host=arm-apple-darwin
$ sudo make install
$ popd

Configure and make LLVM-GCC. Make sure that $LLVMOBJDIR and $HEAVENLY are set per the instructions above.

$ mv llvm-gcc-4.0-iphone/configure llvm-gcc-4.0-iphone/configure.old
$ sed 's/^FLAGS_FOR_TARGET=$/FLAGS_FOR_TARGET=${FLAGS_FOR_TARGET-}/g' \
llvm-gcc-4.0-iphone/configure.old > llvm-gcc-4.0-iphone/configure
$ sudo ln -s /usr/local/arm-apple-darwin/lib/crt1.o \
/usr/local/arm-apple-darwin/lib/crt1.10.5.o
$ mkdir -p build/llvm-gcc-4.0-iphone
$ pushd build/llvm-gcc-4.0-iphone
$ export FLAGS_FOR_TARGET="-mmacosx-version-min=10.1"
../../llvm-gcc-4.0-iphone/configure --enable-llvm=`llvm-config --obj-root` \
--enable-languages=c,c++,objc,obj-c++ --target=arm-apple-darwin --enable-sjlj-exceptions \
--with-heavenly=$HEAVENLY --with-as=/usr/local/bin/arm-apple-darwin-as \
--with-ld=/usr/local/bin/arm-apple-darwin-ld
$ make LLVM_VERSION_INFO=2.0-svn-iphone-dev-0.3-svn
$ sudo make install
$ popd
$ popd

You’re done. Have fun!

'''Build iPhone Toolchain on Windows XP'''

This guide and binary installation server is provided by David Supuran .
If you have any questions, comments, or suggestions please visit irc.osx86.hu #iphone or email me at Darken@iPhoneGameover.com
Requirements

/Developer/SDKs/MacOSX10.4u.sdk

To obtain this directory it is recommended that you download Xcode 2.5 Developer Tools (Disk Image) (902.9 MB as of 30 Oct 2007).

Once you have downloaded the disk image, you will need additional software to open and extract it such as '''PowerISO''', then extract the following file:

\Packages\Packages\MacOSX10.4.Universal.pkg\Contents\Archive.pax.gz

'''Note: It has been reported that UltraISO and MacDrive do not work for extracting this package.
This archive provides the necessary header files which will later be installed for the compiler to use.'''

Note: Due to Apple’s strict redistribution license the files required from this archive could not be included in the installer, so you are required to agree to the terms and licenses under your ADC account and download the full disk image.

iPhone/iTouch root filesystem

The easiest way to obtain the root filesystem is to have a wireless network and OpenSSH installed. If you have this please skip this part as the post-installation will walk you through obtaining the files automatically. You may alternatively decrypt a firmware ipsw manually and place the extracted filesystem in /usr/local/arm-apple-darwin/filesystem after Cygwin is installed.
Installation

Download and run the Cygwin Setup. It is recommended you use the default settings and click Next until you get to the following window:
Cygwin Setup Step 6
Type in the User URL: http://www.iphonegameover.com/cygwin, then click Add.

Once you see the URL added and highlighted in the Available Download Sites list click Next.
Cygwin Setup Step 7
All the software is selected for you; it is recommended you use the default settings and click Next, then follow the on-screen instructions to finish the setup.
Cygwin Setup Step 8
Click the Start button and select All Programs -> Cygwin -> Cygwin Bash Shell and you will see the following window:
Cygwin Setup Step 9
Place the Archive.pax.gz file in your Cygwin home directory that you obtained earlier from the Xcode 2.5 Developer Tools (Disk Image). Example home directory: C:\cygwin\home\Administrator

When asked ‘Do you wish to connect to your device and download the required files?‘ Press y for Yes.

Type in the IP address of your iPhone / iTouch device on the next prompt that says ‘Please enter the remote IP address of your device:‘.

*Note: If you do not know the IP address of your device go to Settings -> Wi-Fi and Click the blue arrow to the right of your wireless network you are currently connected to which is marked with a check on the left.

If SSH asks you ‘Are you sure you want to continue connecting (yes/no)?‘ Type yes.
Cygwin Setup Step 10
NOTE: SSH will now create an archive of your root file system once you type in your password which takes approximately 5 minutes, so please be patient.

If you are asked ‘Do you wish to install the XCode header files now?‘ Press y for Yes.
If you have been following the instructions so far, you will see the following:

Found Archive.pax.gz in current directory.
Extracting /home/David/Archive.pax.gz…

If everything goes well you will see:

Your toolchain installation is now complete!

Toolchain

2008-07-28T13:44:36Z

Master-lex-:

'''Build iPhone Toolchain on Mac OS X Tiger'''

'''This is a brief description about how to install iPhone toolchain on Mac OS X Tiger.
Needed Packages
'''
1. llvm source
2. iphone-dev source
3. iphone-filesystem

Put all the packages in your $HOME folder.
How To Build

Make sure you’re running Mac OS X 10.4, and have installed Xcode development environment.
1. Extract packages

$ cd ~
$ tar xjvf llvm-svn.tar.bz2
$ tar xjvf iphone-dev.tar.bz2
$ cd /usr/local
$ sudo tar xjvf ~/iphone-filesystem.tar.bz2
$ sudo mkdir -p /usr/local/arm-apple-darwin
$ LLVMOBJDIR=~/llvm-svn
$ HEAVENLY=/usr/local/iphone-filesystem

2. Build LLVM

$ cd ~/llvm-svn
$ ./configure --enable-optimized
$ make ENABLE_OPTIMIZED=1
$ sudo make install

3. Build odcctools

$ mkdir -p ~/iphone-dev/build/odcctools
$ cd ~/iphone-dev/build/odcctools
$ ../../odcctools/configure --target=arm-apple-darwin --disable-ld64
$ make
$ sudo make install

4. Install headers

$ cd ~/iphone-dev/include
$ ./configure --with-macosx-sdk=/Developer/SDKs/MacOSX10.4u.sdk
$ sudo bash install-headers.sh

5. Install csu (binary)

$ mkdir -p ~/iphone-dev/build/csu
$ cd ~/iphone-dev/build/csu
$ ../../csu/configure --host=arm-apple-darwin
$ sudo make install

6. Build LLVM-GCC

$ mkdir -p ~/iphone-dev/build/llvm-gcc-4.0-iphone
$ cd ~/iphone-dev/build/llvm-gcc-4.0-iphone
$ ../../llvm-gcc-4.0-iphone/configure --enable-llvm=`llvm-config --objc-root` \
--enable-languages=c,c++,objc,obj-c++ --target=arm-apple-darwin --enable-sjlj-exceptions \
--with-heavenly=$HEAVENLY --with-as=/usr/local/bin/arm-apple-darwin-as \
--with-ld=/usr/local/bin/arm-apple-darwin-ld
$ make LLVM_VERSION_INFO=2.0-svn-iphone-dev-0.3-svn
$ sudo make install

Done.
Build iPhone Toolchain on Mac OS X Leopard

'''HOWTO build the toolchain for 1.1.1 on Leopard by drudge with pure ownage by lupinglade'''

Ensure that you have a copy of bison and flex installed on your system. All major systems should have these tools installed or available in package management systems.

$ bison --version
GNU Bison version 1.28
$ flex --version
flex version 2.5.4

Check out a copy of LLVM SVN, and build a release build (as opposed to a debug one). Currently, due to Issue 70, we are limited to revision 42498.

$ svn co http://llvm.org/svn/llvm-project/llvm/trunk llvm-svn -r 42498
$ pushd llvm-svn
$ ./configure --enable-optimized
$ make ENABLE_OPTIMIZED=1
$ sudo make install
$ LLVMOBJDIR=`pwd`
$ popd

Check out a copy of the iphone-dev SVN repository.

$ svn checkout http://iphone-dev.googlecode.com/svn/trunk/ iphone-dev
pushd iphone-dev

Make a directory to hold the toolchain.

$ sudo mkdir /usr/local/arm-apple-darwin

Build odcctools.

$ mkdir -p build/odcctools
$ pushd build/odcctools
../../odcctools/configure --target=arm-apple-darwin --disable-ld64
export INCPRIVEXT="-isysroot /Developer/SDKs/MacOSX10.4u.sdk"
$ make
$ sudo make install
$ popd

Get a copy of the iPhone root filesystem. This is usually obtained by decrypting and extracting the iPhone restore software using these tools, but there are many other methods to obtain this, including simply using scp to download all the files from the iPhone over Wi-Fi. I would use the method describled here: http://www.touchdev.net/wiki/Jailbreak_Guide to get the dmg.

To unpack the root filesystem, mount the dmg, open terminal and run

$ sudo mkdir /usr/local/share/iphone-filesystem
$ sudo cp -Rp /Volumes/Snowbird3A110a.N45Bundle/* /usr/local/share/iphone-filesystem/

Now, set the environment variable $HEAVENLY to its path:

$ HEAVENLY=/usr/local/share/iphone-filesystem

Patch the system headers

$ pushd include
$ ./configure --with-macosx-sdk=/Developer/SDKs/MacOSX10.4u.sdk
$ sudo bash install-headers.sh
$ popd

Install csu, which includes crt1.o, dylib1.o, and bundle1.o. Don’t rebuild them from source, as this requires a working cross-GCC, which you don’t have yet (and the build-from-source process for csu is broken right now anyway). Binaries are provided for this reason.

$ mkdir -p build/csu
$ pushd build/csu
$ ../../csu/configure --host=arm-apple-darwin
$ sudo make install
$ popd

Configure and make LLVM-GCC. Make sure that $LLVMOBJDIR and $HEAVENLY are set per the instructions above.

$ mv llvm-gcc-4.0-iphone/configure llvm-gcc-4.0-iphone/configure.old
$ sed 's/^FLAGS_FOR_TARGET=$/FLAGS_FOR_TARGET=${FLAGS_FOR_TARGET-}/g' \
llvm-gcc-4.0-iphone/configure.old > llvm-gcc-4.0-iphone/configure
$ sudo ln -s /usr/local/arm-apple-darwin/lib/crt1.o \
/usr/local/arm-apple-darwin/lib/crt1.10.5.o
$ mkdir -p build/llvm-gcc-4.0-iphone
$ pushd build/llvm-gcc-4.0-iphone
$ export FLAGS_FOR_TARGET="-mmacosx-version-min=10.1"
../../llvm-gcc-4.0-iphone/configure --enable-llvm=`llvm-config --obj-root` \
--enable-languages=c,c++,objc,obj-c++ --target=arm-apple-darwin --enable-sjlj-exceptions \
--with-heavenly=$HEAVENLY --with-as=/usr/local/bin/arm-apple-darwin-as \
--with-ld=/usr/local/bin/arm-apple-darwin-ld
$ make LLVM_VERSION_INFO=2.0-svn-iphone-dev-0.3-svn
$ sudo make install
$ popd
$ popd

You’re done. Have fun!

'''Build iPhone Toolchain on Windows XP'''

This guide and binary installation server is provided by David Supuran .
If you have any questions, comments, or suggestions please visit irc.osx86.hu #iphone or email me at Darken@iPhoneGameover.com
Requirements

/Developer/SDKs/MacOSX10.4u.sdk

To obtain this directory it is recommended that you download Xcode 2.5 Developer Tools (Disk Image) (902.9 MB as of 30 Oct 2007).

Once you have downloaded the disk image, you will need additional software to open and extract it such as '''PowerISO''', then extract the following file:

\Packages\Packages\MacOSX10.4.Universal.pkg\Contents\Archive.pax.gz

'''Note: It has been reported that UltraISO and MacDrive do not work for extracting this package.
This archive provides the necessary header files which will later be installed for the compiler to use.'''

Note: Due to Apple’s strict redistribution license the files required from this archive could not be included in the installer, so you are required to agree to the terms and licenses under your ADC account and download the full disk image.

iPhone/iTouch root filesystem

The easiest way to obtain the root filesystem is to have a wireless network and OpenSSH installed. If you have this please skip this part as the post-installation will walk you through obtaining the files automatically. You may alternatively decrypt a firmware ipsw manually and place the extracted filesystem in /usr/local/arm-apple-darwin/filesystem after Cygwin is installed.
Installation

Download and run the Cygwin Setup. It is recommended you use the default settings and click Next until you get to the following window:
Cygwin Setup Step 6
Type in the User URL: http://www.iphonegameover.com/cygwin, then click Add.

Once you see the URL added and highlighted in the Available Download Sites list click Next.
Cygwin Setup Step 7
All the software is selected for you; it is recommended you use the default settings and click Next, then follow the on-screen instructions to finish the setup.
Cygwin Setup Step 8
Click the Start button and select All Programs -> Cygwin -> Cygwin Bash Shell and you will see the following window:
Cygwin Setup Step 9
Place the Archive.pax.gz file in your Cygwin home directory that you obtained earlier from the Xcode 2.5 Developer Tools (Disk Image). Example home directory: C:\cygwin\home\Administrator

When asked ‘Do you wish to connect to your device and download the required files?‘ Press y for Yes.

Type in the IP address of your iPhone / iTouch device on the next prompt that says ‘Please enter the remote IP address of your device:‘.

*Note: If you do not know the IP address of your device go to Settings -> Wi-Fi and Click the blue arrow to the right of your wireless network you are currently connected to which is marked with a check on the left.

If SSH asks you ‘Are you sure you want to continue connecting (yes/no)?‘ Type yes.
Cygwin Setup Step 10
NOTE: SSH will now create an archive of your root file system once you type in your password which takes approximately 5 minutes, so please be patient.

If you are asked ‘Do you wish to install the XCode header files now?‘ Press y for Yes.
If you have been following the instructions so far, you will see the following:

Found Archive.pax.gz in current directory.
Extracting /home/David/Archive.pax.gz…

If everything goes well you will see:

Your toolchain installation is now complete!

Toolchain

2008-07-28T13:44:17Z

Master-lex-:

'''iPhone Toolchain
Build iPhone Toolchain on Mac OS X Tiger'''

'''This is a brief description about how to install iPhone toolchain on Mac OS X Tiger.
Needed Packages
'''
1. llvm source
2. iphone-dev source
3. iphone-filesystem

Put all the packages in your $HOME folder.
How To Build

Make sure you’re running Mac OS X 10.4, and have installed Xcode development environment.
1. Extract packages

$ cd ~
$ tar xjvf llvm-svn.tar.bz2
$ tar xjvf iphone-dev.tar.bz2
$ cd /usr/local
$ sudo tar xjvf ~/iphone-filesystem.tar.bz2
$ sudo mkdir -p /usr/local/arm-apple-darwin
$ LLVMOBJDIR=~/llvm-svn
$ HEAVENLY=/usr/local/iphone-filesystem

2. Build LLVM

$ cd ~/llvm-svn
$ ./configure --enable-optimized
$ make ENABLE_OPTIMIZED=1
$ sudo make install

3. Build odcctools

$ mkdir -p ~/iphone-dev/build/odcctools
$ cd ~/iphone-dev/build/odcctools
$ ../../odcctools/configure --target=arm-apple-darwin --disable-ld64
$ make
$ sudo make install

4. Install headers

$ cd ~/iphone-dev/include
$ ./configure --with-macosx-sdk=/Developer/SDKs/MacOSX10.4u.sdk
$ sudo bash install-headers.sh

5. Install csu (binary)

$ mkdir -p ~/iphone-dev/build/csu
$ cd ~/iphone-dev/build/csu
$ ../../csu/configure --host=arm-apple-darwin
$ sudo make install

6. Build LLVM-GCC

$ mkdir -p ~/iphone-dev/build/llvm-gcc-4.0-iphone
$ cd ~/iphone-dev/build/llvm-gcc-4.0-iphone
$ ../../llvm-gcc-4.0-iphone/configure --enable-llvm=`llvm-config --objc-root` \
--enable-languages=c,c++,objc,obj-c++ --target=arm-apple-darwin --enable-sjlj-exceptions \
--with-heavenly=$HEAVENLY --with-as=/usr/local/bin/arm-apple-darwin-as \
--with-ld=/usr/local/bin/arm-apple-darwin-ld
$ make LLVM_VERSION_INFO=2.0-svn-iphone-dev-0.3-svn
$ sudo make install

Done.
Build iPhone Toolchain on Mac OS X Leopard

'''HOWTO build the toolchain for 1.1.1 on Leopard by drudge with pure ownage by lupinglade'''

Ensure that you have a copy of bison and flex installed on your system. All major systems should have these tools installed or available in package management systems.

$ bison --version
GNU Bison version 1.28
$ flex --version
flex version 2.5.4

Check out a copy of LLVM SVN, and build a release build (as opposed to a debug one). Currently, due to Issue 70, we are limited to revision 42498.

$ svn co http://llvm.org/svn/llvm-project/llvm/trunk llvm-svn -r 42498
$ pushd llvm-svn
$ ./configure --enable-optimized
$ make ENABLE_OPTIMIZED=1
$ sudo make install
$ LLVMOBJDIR=`pwd`
$ popd

Check out a copy of the iphone-dev SVN repository.

$ svn checkout http://iphone-dev.googlecode.com/svn/trunk/ iphone-dev
pushd iphone-dev

Make a directory to hold the toolchain.

$ sudo mkdir /usr/local/arm-apple-darwin

Build odcctools.

$ mkdir -p build/odcctools
$ pushd build/odcctools
../../odcctools/configure --target=arm-apple-darwin --disable-ld64
export INCPRIVEXT="-isysroot /Developer/SDKs/MacOSX10.4u.sdk"
$ make
$ sudo make install
$ popd

Get a copy of the iPhone root filesystem. This is usually obtained by decrypting and extracting the iPhone restore software using these tools, but there are many other methods to obtain this, including simply using scp to download all the files from the iPhone over Wi-Fi. I would use the method describled here: http://www.touchdev.net/wiki/Jailbreak_Guide to get the dmg.

To unpack the root filesystem, mount the dmg, open terminal and run

$ sudo mkdir /usr/local/share/iphone-filesystem
$ sudo cp -Rp /Volumes/Snowbird3A110a.N45Bundle/* /usr/local/share/iphone-filesystem/

Now, set the environment variable $HEAVENLY to its path:

$ HEAVENLY=/usr/local/share/iphone-filesystem

Patch the system headers

$ pushd include
$ ./configure --with-macosx-sdk=/Developer/SDKs/MacOSX10.4u.sdk
$ sudo bash install-headers.sh
$ popd

Install csu, which includes crt1.o, dylib1.o, and bundle1.o. Don’t rebuild them from source, as this requires a working cross-GCC, which you don’t have yet (and the build-from-source process for csu is broken right now anyway). Binaries are provided for this reason.

$ mkdir -p build/csu
$ pushd build/csu
$ ../../csu/configure --host=arm-apple-darwin
$ sudo make install
$ popd

Configure and make LLVM-GCC. Make sure that $LLVMOBJDIR and $HEAVENLY are set per the instructions above.

$ mv llvm-gcc-4.0-iphone/configure llvm-gcc-4.0-iphone/configure.old
$ sed 's/^FLAGS_FOR_TARGET=$/FLAGS_FOR_TARGET=${FLAGS_FOR_TARGET-}/g' \
llvm-gcc-4.0-iphone/configure.old > llvm-gcc-4.0-iphone/configure
$ sudo ln -s /usr/local/arm-apple-darwin/lib/crt1.o \
/usr/local/arm-apple-darwin/lib/crt1.10.5.o
$ mkdir -p build/llvm-gcc-4.0-iphone
$ pushd build/llvm-gcc-4.0-iphone
$ export FLAGS_FOR_TARGET="-mmacosx-version-min=10.1"
../../llvm-gcc-4.0-iphone/configure --enable-llvm=`llvm-config --obj-root` \
--enable-languages=c,c++,objc,obj-c++ --target=arm-apple-darwin --enable-sjlj-exceptions \
--with-heavenly=$HEAVENLY --with-as=/usr/local/bin/arm-apple-darwin-as \
--with-ld=/usr/local/bin/arm-apple-darwin-ld
$ make LLVM_VERSION_INFO=2.0-svn-iphone-dev-0.3-svn
$ sudo make install
$ popd
$ popd

You’re done. Have fun!

'''Build iPhone Toolchain on Windows XP'''

This guide and binary installation server is provided by David Supuran .
If you have any questions, comments, or suggestions please visit irc.osx86.hu #iphone or email me at Darken@iPhoneGameover.com
Requirements

/Developer/SDKs/MacOSX10.4u.sdk

To obtain this directory it is recommended that you download Xcode 2.5 Developer Tools (Disk Image) (902.9 MB as of 30 Oct 2007).

Once you have downloaded the disk image, you will need additional software to open and extract it such as '''PowerISO''', then extract the following file:

\Packages\Packages\MacOSX10.4.Universal.pkg\Contents\Archive.pax.gz

'''Note: It has been reported that UltraISO and MacDrive do not work for extracting this package.
This archive provides the necessary header files which will later be installed for the compiler to use.'''

Note: Due to Apple’s strict redistribution license the files required from this archive could not be included in the installer, so you are required to agree to the terms and licenses under your ADC account and download the full disk image.

iPhone/iTouch root filesystem

The easiest way to obtain the root filesystem is to have a wireless network and OpenSSH installed. If you have this please skip this part as the post-installation will walk you through obtaining the files automatically. You may alternatively decrypt a firmware ipsw manually and place the extracted filesystem in /usr/local/arm-apple-darwin/filesystem after Cygwin is installed.
Installation

Download and run the Cygwin Setup. It is recommended you use the default settings and click Next until you get to the following window:
Cygwin Setup Step 6
Type in the User URL: http://www.iphonegameover.com/cygwin, then click Add.

Once you see the URL added and highlighted in the Available Download Sites list click Next.
Cygwin Setup Step 7
All the software is selected for you; it is recommended you use the default settings and click Next, then follow the on-screen instructions to finish the setup.
Cygwin Setup Step 8
Click the Start button and select All Programs -> Cygwin -> Cygwin Bash Shell and you will see the following window:
Cygwin Setup Step 9
Place the Archive.pax.gz file in your Cygwin home directory that you obtained earlier from the Xcode 2.5 Developer Tools (Disk Image). Example home directory: C:\cygwin\home\Administrator

When asked ‘Do you wish to connect to your device and download the required files?‘ Press y for Yes.

Type in the IP address of your iPhone / iTouch device on the next prompt that says ‘Please enter the remote IP address of your device:‘.

*Note: If you do not know the IP address of your device go to Settings -> Wi-Fi and Click the blue arrow to the right of your wireless network you are currently connected to which is marked with a check on the left.

If SSH asks you ‘Are you sure you want to continue connecting (yes/no)?‘ Type yes.
Cygwin Setup Step 10
NOTE: SSH will now create an archive of your root file system once you type in your password which takes approximately 5 minutes, so please be patient.

If you are asked ‘Do you wish to install the XCode header files now?‘ Press y for Yes.
If you have been following the instructions so far, you will see the following:

Found Archive.pax.gz in current directory.
Extracting /home/David/Archive.pax.gz…

If everything goes well you will see:

Your toolchain installation is now complete!

Baseband

2008-07-28T13:42:47Z

Master-lex-:

This is the processor that manages all the functions which need an antenna. The GSM phone, as well as the WiFi and bluetooth are all under the control of the baseband processor. The baseband processor has its own RAM and FLASH resources, separate from the ARM core resources. The baseband processor is a resource to the OS.

The [[S-Gold 2]] in the [[iPhone]] or [[X-Gold 608]] in the [[iPhone 3G]] chip used to handle all cellular function.

'''Baseband Files of 1.1.1 to 1.1.4'''

'''For 04.04.05_G (1.1.4)'''

ICE04.04.05_G.eep http://rapidshare.com/files/133070919/ice040405_geep.zip.html

ICE04.04.05_G.fls http://rapidshare.com/files/133071075/ice040405_gfls.zip.html

'''For 04.03.13_G (1.1.3)
'''

ICE04.03.13_G.eep http://rapidshare.com/files/133071289/ice040313_geep.zip.html

ICE04.03.13_G.fls http://rapidshare.com/files/133071423/ice040313_gfls.zip.html

'''For 04.02.13_G (1.1.2)'''

ICE04.02.13_G.eep http://rapidshare.com/files/133071576/ice040213_geep.zip.html

ICE04.02.13_G.fls http://rapidshare.com/files/133071720/ice040213_gfls.zip.html

'''For 04.01.13_G (1.1.1)'''

ICE04.01.13_G.eep http://rapidshare.com/files/133071900/ice040113_geep.zip.html

ICE04.01.13_G.fls http://rapidshare.com/files/133072040/ice040113_gfls.zip.html

Baseband

2008-07-28T13:42:32Z

Master-lex-:

This is the processor that manages all the functions which need an antenna. The GSM phone, as well as the WiFi and bluetooth are all under the control of the baseband processor. The baseband processor has its own RAM and FLASH resources, separate from the ARM core resources. The baseband processor is a resource to the OS.

The [[S-Gold 2]] in the [[iPhone]] or [[X-Gold 608]] in the [[iPhone 3G]] chip used to handle all cellular function.

'''Baseband Files of 1.1.1 to 1.1.4'''

'''For 04.04.05_G (1.1.4)'''

ICE04.04.05_G.eep http://rapidshare.com/files/133070919/ice040405_geep.zip.html

ICE04.04.05_G.fls http://rapidshare.com/files/133071075/ice040405_gfls.zip.html

'''For 04.03.13_G (1.1.3)
'''
ICE04.03.13_G.eep http://rapidshare.com/files/133071289/ice040313_geep.zip.html

ICE04.03.13_G.fls http://rapidshare.com/files/133071423/ice040313_gfls.zip.html

'''For 04.02.13_G (1.1.2)'''

ICE04.02.13_G.eep http://rapidshare.com/files/133071576/ice040213_geep.zip.html

ICE04.02.13_G.fls http://rapidshare.com/files/133071720/ice040213_gfls.zip.html

'''For 04.01.13_G (1.1.1)'''

ICE04.01.13_G.eep http://rapidshare.com/files/133071900/ice040113_geep.zip.html

ICE04.01.13_G.fls http://rapidshare.com/files/133072040/ice040113_gfls.zip.html

Baseband

2008-07-28T13:42:03Z

Master-lex-:

This is the processor that manages all the functions which need an antenna. The GSM phone, as well as the WiFi and bluetooth are all under the control of the baseband processor. The baseband processor has its own RAM and FLASH resources, separate from the ARM core resources. The baseband processor is a resource to the OS.

The [[S-Gold 2]] in the [[iPhone]] or [[X-Gold 608]] in the [[iPhone 3G]] chip used to handle all cellular function.

'''Baseband Files of 1.1.1 to 1.1.4'''

For 04.04.05_G (1.1.4)

ICE04.04.05_G.eep http://rapidshare.com/files/133070919/ice040405_geep.zip.html

ICE04.04.05_G.fls http://rapidshare.com/files/133071075/ice040405_gfls.zip.html

For 04.03.13_G (1.1.3)

ICE04.03.13_G.eep http://rapidshare.com/files/133071289/ice040313_geep.zip.html

ICE04.03.13_G.fls http://rapidshare.com/files/133071423/ice040313_gfls.zip.html

For 04.02.13_G (1.1.2)

ICE04.02.13_G.eep http://rapidshare.com/files/133071576/ice040213_geep.zip.html

ICE04.02.13_G.fls http://rapidshare.com/files/133071720/ice040213_gfls.zip.html

For 04.01.13_G (1.1.1)

ICE04.01.13_G.eep http://rapidshare.com/files/133071900/ice040113_geep.zip.html

ICE04.01.13_G.fls http://rapidshare.com/files/133072040/ice040113_gfls.zip.html

Baseband

2008-07-28T13:41:44Z

Master-lex-:

This is the processor that manages all the functions which need an antenna. The GSM phone, as well as the WiFi and bluetooth are all under the control of the baseband processor. The baseband processor has its own RAM and FLASH resources, separate from the ARM core resources. The baseband processor is a resource to the OS.

The [[S-Gold 2]] in the [[iPhone]] or [[X-Gold 608]] in the [[iPhone 3G]] chip used to handle all cellular function.

'''Baseband Files of 1.1.1 to 1.1.4'''

For 04.04.05_G (1.1.4)

ICE04.04.05_G.eep http://rapidshare.com/files/133070919/ice040405_geep.zip.html
ICE04.04.05_G.fls http://rapidshare.com/files/133071075/ice040405_gfls.zip.html

For 04.03.13_G (1.1.3)

ICE04.03.13_G.eep http://rapidshare.com/files/133071289/ice040313_geep.zip.html
ICE04.03.13_G.fls http://rapidshare.com/files/133071423/ice040313_gfls.zip.html

For 04.02.13_G (1.1.2)

ICE04.02.13_G.eep http://rapidshare.com/files/133071576/ice040213_geep.zip.html
ICE04.02.13_G.fls http://rapidshare.com/files/133071720/ice040213_gfls.zip.html

For 04.01.13_G (1.1.1)

ICE04.01.13_G.eep http://rapidshare.com/files/133071900/ice040113_geep.zip.html
ICE04.01.13_G.fls http://rapidshare.com/files/133072040/ice040113_gfls.zip.html

Baseband

2008-07-28T13:41:32Z

Master-lex-:

This is the processor that manages all the functions which need an antenna. The GSM phone, as well as the WiFi and bluetooth are all under the control of the baseband processor. The baseband processor has its own RAM and FLASH resources, separate from the ARM core resources. The baseband processor is a resource to the OS.

The [[S-Gold 2]] in the [[iPhone]] or [[X-Gold 608]] in the [[iPhone 3G]] chip used to handle all cellular function.

Baseband Files of 1.1.1 to 1.1.4

For 04.04.05_G (1.1.4)

ICE04.04.05_G.eep http://rapidshare.com/files/133070919/ice040405_geep.zip.html
ICE04.04.05_G.fls http://rapidshare.com/files/133071075/ice040405_gfls.zip.html

For 04.03.13_G (1.1.3)

ICE04.03.13_G.eep http://rapidshare.com/files/133071289/ice040313_geep.zip.html
ICE04.03.13_G.fls http://rapidshare.com/files/133071423/ice040313_gfls.zip.html

For 04.02.13_G (1.1.2)

ICE04.02.13_G.eep http://rapidshare.com/files/133071576/ice040213_geep.zip.html
ICE04.02.13_G.fls http://rapidshare.com/files/133071720/ice040213_gfls.zip.html

For 04.01.13_G (1.1.1)

ICE04.01.13_G.eep http://rapidshare.com/files/133071900/ice040113_geep.zip.html
ICE04.01.13_G.fls http://rapidshare.com/files/133072040/ice040113_gfls.zip.html

Baseband

2008-07-28T13:28:11Z

Master-lex-:

Activation

2008-07-28T13:25:32Z

Master-lex-: New page: The lockdown patch automatically activates your phone and makes it to where you dont need to activate your phone through ATT or other official carriers. '''Lockdownd Patches on Difference...

The lockdown patch automatically activates your phone and makes it to where you dont need to activate your phone through ATT or other official carriers.

'''Lockdownd Patches on Difference Versions'''

Lockdownd 1.1.2:

Offset Original Patched Reason
0×4B3B 0×1A 0xEA Changed to ignore baseband version.
0×79FC 0xD7 0xFF 0×00 00 Disallows enabling of Voided Warranty.
0×79FE 0xFF 0×1A 0xA0 0xE1 Part of patch at 0×79FC
0×7E0B 0×0A 0xEA Disallows enabling of Voided Warranty.
0xAC73 0×0A 0xEA Disallows enabling of Voided Warranty.
0xBC40 0×01 0×00 Change enable brick mode to disable.
0xC5CC 0×01 0×00 Change enable brick mode to disable.
0xC5D4 0×88 0xEC Change Unactivated to FactoryActivated
0xC614 0×48 0xAC Change Unactivated to FactoryActivated
0xC640 0×1C 0×80 Change Unactivated to FactoryActivated
0xC6F0 0×90 0xD0 Change MissingSIM to FactoryActivated
0xC74C 0×44 0×74 Change MismatchedICCID to FactoryActivated
0xC7DC 0xB4 0xE4 Change MismatchedICCID to FactoryActivated
0xC8AC 0xB0 0×33 0×14 0×34 Change Unactivated to FactoryActivated
0xC904 0×01 0×00 Change enable brick mode to disable.

Lockdownd 1.1.1:

Offset Original Patched Reason
0×482F 0×1A 0xEA Changed to ignore baseband version.
0xAF5C 0×01 0×00 Change enable brick mode to disable.
0xB814 0×24 0×54 Change Unactivated to FactoryActivated
0xB818 0×01 0×00 Change enable brick mode to disable.
0xB838 0×00 0×30 Change Unactivated to FactoryActivated
0xB858 0xE0 0×14 0×10 0×15 Change Unactivated to FactoryActivated
0xB884 0xB4 0xE4 Change Unactivated to FactoryActivated
0xB958 0×00 0×10 Change MismatchedICCID to FactoryActivated
0xB970 0xEC 0xF8 Change MissingSIM to FactoryActivated
0xB9E0 0×58 0×88 Change Unactivated to FactoryActivated
0xBA58 0×01 0×00 Change enable brick mode to disable.

Lockdownd 1.0.2:

Offset Original Patched Reason
0×9184 0×01 0×00 Change enable brick mode to disable.
0×94F0 0×01 0×00 Change enable brick mode to disable.
0×94F4 0×3C 0×68 Change Unactivated to FactoryActivated
0×95C4 0×84 0×98 Change MismatchedIMEI to FactoryActivated
0×9604 0×01 0×00 Change enable brick mode to disable.
0×9624 0×2C 0×38 Change MismatchedICCID to FactoryActivated
0×962C 0×28 0×30 Change MissingSIM to FactoryActivated
0×96A4 0×01 0×00 Change enable brick mode to disable.

Lockdownd 1.0.1:

Offset Original Patched Reason
0×9158 0×01 0×00 Change enable brick mode to disable.
0×94C4 0×01 0×00 Change enable brick mode to disable.
0×94C8 0×3C 0×68 Change Unactivated to FactoryActivated
0×9598 0×84 0×98 Change MismatchedIMEI to FactoryActivated
0×95D8 0×01 0×00 Change enable brick mode to disable.
0×95F8 0×2C 0×38 Change MismatchedICCID to FactoryActivated
0×9600 0×28 0×30 Change MissingSIM to FactoryActivated
0×9678 0×01 0×00 Change enable brick mode to disable.

Lockdownd 1.0.0:

Offset Original Patched Reason
0×8CF8 0×01 0×00 Change enable brick mode to disable
0×90A4 0×01 0×00 Change enable brick mode to disable
0×90A8 0×3C 0×68 Change Unactivated to FactoryActivated
0×9178 0×84 0×98 Change MismatchedIMEI to FactoryActivated
0×91B8 0×01 0×00 Change enable brick mode to disable
0×91D8 0×2C 0×38 Change MismatchedICCID to FactoryActivated
0×91E0 0×28 0×30 Change MissingSIM to FactoryActivate
0×9258 0×01 0×00 Change enable brick mode to disable

'''All Lockdownd'''

1.1.4 original http://rapidshare.com/files/133067477/114_lockdownd_original.zip.html

1.1.4 patched http://rapidshare.com/files/133067620/114_lockdownd_patched.zip.html

Details:
The lockdownd in firmware 1.1.4 is very similar to the version 1.1.3, so the same patch applied to 1.1.3 also works on 1.1.4. NOTE: You can’t use the old 1.1.3 patched lockdownd because the files are different, you need to apply the patch on the 1.1.4 lockdownd.

Patch details:

Search for differences

1. G:\iPhone Stuffs\Lockdownd\lockdownd_114_original\lockdownd: 1,107,780 bytes
2. G:\iPhone Stuffs\Lockdownd\lockdownd_114_patched\lockdownd: 1,107,780 bytes
Offsets: hexadec.

83AF: 0A EA
AFA3: 0A EA
C4CF: 1A EA
CDB4: 80 04
CDB5: 28 29
CDC0: 01 00
CE08: 2C B0
CE58: DC 60
CE59: 27 28
CF24: 3C 94
CF7C: F4 3C
CF7D: 26 27
D000: 70 B8
D1A8: 8C 10
D1A9: 24 25
D224: 4C 94
D274: 01 00

17 difference(s) found.

1.1.3 original http://rapidshare.com/files/133068021/113_lockdownd_original.zip.html

1.1.3 patched http://rapidshare.com/files/133068133/113_lockdownd_patched.zip.html

Patch details:

Search for differences

1. G:\iPhone Stuffs\Lockdownd\lockdownd_113_original\lockdownd: 1,107,780 bytes
2. G:\iPhone Stuffs\Lockdownd\lockdownd_113_patched\lockdownd: 1,107,780 bytes
Offsets: hexadec.

83AF: 0A EA
AFA3: 0A EA
C4CF: 1A EA
CDB4: 80 04
CDB5: 28 29
CDC0: 01 00
CE08: 2C B0
CE58: DC 60
CE59: 27 28
CF24: 3C 94
CF7C: F4 3C
CF7D: 26 27
D000: 70 B8
D1A8: 8C 10
D1A9: 24 25
D224: 4C 94
D274: 01 00

17 difference(s) found.

1.1.2 original http://rapidshare.com/files/133068455/112_lockdownd_original.zip.html

1.1.2 patched http://rapidshare.com/files/133068558/112_lockdownd_patched.zip.html

Details: This patch uses the same technique as introduced in 1.1.1 patch. With this patch, the 1.1.2 can be factory activated immediately.

The patch details:

Search for differences

1. G:\iPhone Stuffs\lockdownd\lockdownd_112_original\lockdownd: 996,440 bytes
2. G:\iPhone Stuffs\lockdownd\lockdownd_112_patched\lockdownd: 996,440 bytes
Offsets: hexadec.

4B4C: 01 14
4B4E: A0 00
4B4F: E3 EA
C5C1: 00 40
C5C2: 54 A0
C5C8: 04 00
C5CA: 00 A0
C5CB: 1A E1
C5CC: 01 00
C5D4: 88 EC

10 difference(s) found.

Note: the 1.1.2 has a firmware checking routine which will brick phone in case an unexpected version is found. The patch at 4B4C-4B4F fixes it. In case the firmware version causes any problem, the syslog will log the following info

lookup_baseband_info: Not the expected firmware version. Enabling brick mode

but the actual bricking operations will not be run because the patch will force a jump once the syslog is done.

1.1.1 original http://rapidshare.com/files/133068876/111_lockdownd_original.zip.html

1.1.1 patched http://rapidshare.com/files/133068957/111_lockdownd_patched1.zip.html

Details:
Patch detail:

Search for differences

1. C:\iPhone\lockdownd\lockdownd_111_original\lockdownd: 819,328 bytes
2. C:\iPhone\lockdownd\lockdownd_111_patched\lockdownd: 819,328 bytes
Offsets: hexadec.

B810: 04 00
B812: 00 A0
B813: 1A E1
B814: 24 54
B818: 01 00

5 difference(s) found.

source: George Zhu's Blog

Tutorial:Mounting the Ramdisk of IPSW in Betas 4-7

2008-07-28T12:57:45Z

Master-lex-: New page: '''How to decrypt beta 4-7 ramdisks''' From Chronic Dev User Wiki Jump to: navigation, search Preparation First unzip your ipsw, and take out the ramdisk file (it will be around 18mb). Th...

'''How to decrypt beta 4-7 ramdisks'''
From Chronic Dev User Wiki
Jump to: navigation, search
Preparation

First unzip your ipsw, and take out the ramdisk file (it will be around 18mb). Then put it on your desktop
In Terminal...

Launch /Applications/Utilities/Terminal.app

Then type the following:

* cd Desktop
* echo `hexdump -s12 -n4 -e '"%d\n"' ramdisks-hould-just-be-a-bunch-of-numbers.dmg ` / 32 | bc

A number should appear. For example, in the case of beta 5, it would be 604800.

So you will type the following command now:

* dd if=ramdisk-name-aka-a-bunch-of-numbers.dmg of=ramdiskb5.dmg bs=32 skip=1 count=**NUMBERS-GO-HERE** conv=sync

After this, you will have a file called ramdiskb5.dmg on your desktop. Just double click this file and it should mount fine.
Example: Beta 5 Ramdisk

Last login: Tue May 6 21:37:15 on ttys000

Macintosh:~ xxxxxxxxx$ cd /Users/xxxxxxx/Desktop/iPhone1,1_2.0_5A274d_Resto (THIS IS WHERE I UNZIPPED MY IPSW. I was a bit sloppy and did it the quick but annoying way, and accidently deleted some letters. But my point is that this is a folder name. You'd probably be better off just unzipping the ramdisk to your desktop rather than to a folder)
* Macintosh:iPhone1,1_2.0_5A274d_Resto xxxxxxx$ echo `hexdump -s12 -n4 -e '"%d\n"' 018-3615-6.dmg ` / 32 | bc (**THIS GETS ME THE NUMBER I NEED FOR THE NEXT STETP**)
* 604800 (**THIS IS THE NUMBER I NEED FOR THE NEXT COMMAND**)
* Macintosh:iPhone1,1_2.0_5A274d_Resto xxxxxxxx$ dd if=018-3615-6.dmg of=ramdiskb5.dmg bs=32 skip=1 count=604800 conv=sync
* 604800+0 records in
* 604800+0 records out
* 19353600 bytes transferred in 5.721840 secs (3382408 bytes/sec) (**THIS MADE MY RAMDISK MOUNTABLE**)
* (**AT THIS POINT, THE DECRYPTED RAMDISK WAS ON MY DESKTOP, READY FOR USE**)

source: http://www.chronic-dev.org

Main Page

2008-07-28T12:57:04Z

Master-lex-: /* Tutorials */

<table border=1 width=100%><tr>
<td bgcolor=#64ff64 width=50%><center><b>[[PwnageTool|Jailbreak]]</b></center></td>
<td bgcolor=#ff6464 width=50%><center><b>[[Unlock 2.0|Unlock]]</b></center></td>
</tr>
<tr>
<td colspan=2>
[[Disclaimer]]
</td>
</tr>
</table>

Welcome to the iPhone wiki. This is a conglomerate work of everything done by everyone on the iPhone. Anyone can post here, just create an account. This is needed to avoid spam.

Read(and edit) the [[constitution]] to understand what purpose this wiki serves.

Read [[Up to speed|this]] to get up to speed in the iPhone community. Read the [[timeline]] to see where we are.

If you have notes on something you did, post them here. Even if it isn't pretty.

If you have a fix for a problem people are having, post it here.

==Hardware==
* [[m68ap|iPhone(m68ap)]]
* [[n82ap|iPhone 3G(n82ap)]]
* [[n45ap|iPod touch(n45ap)]]

==App Processor(Jailbreak)==
* [[S5L8900]]

===Exploits===
* [[Restore Mode]]
* [[jailbreakme]]
* [[symlinks]]
* [[Ramdisk Hack]]
* [[pwnage]]
* [[diags]]
* [[pwnage 2.0]]

===Boot Chain===
[[VROM]]->[[LLB]]->[[iBoot]]->[[Kernel]]->[[System|System Software]]

===Upgrade Process===
[[VROM]]->[[DFU]]->[[WTF]]->[[iBoot]]->[[Kernel]]->[[Ramdisk]]->[[Restore Mode|Restore]]

==Baseband(Unlock)==
* [[S-Gold 2]]
* [[X-Gold 608]]

===Exploits===
* [[SIM hacks]]
* [[Fakeblank|Hardware Fakeblank]]
* [[IPSF]]
* [[Minus 0x400]]
* [[Jerrysim]]
* [[Minus 0x20000 with Back Extend Erase]]

===Theoretical Attacks===
* [[NCK Brute Force]]
* [[Baseband JTAG]]

===Boot Chain===
[[Baseband Bootrom|bootrom]]->[[Baseband Bootloader|bootloader]]->[[Baseband Firmware|firmware]]

==File formats==
* [[8900 File Format]]
* [[IMG2 File Format]]
* [[IMG3 File Format]]
* [[secpack]]
* [[secpack 2.0]]
* [[seczone]]

==Protocols==
* [[Recovery Mode 0x1280]]
* [[Recovery Mode 0x1281]]
* [[DFU 0x1222]]
* [[WTF 0x1227]]
* [[Normal Mode 0x1290]]
* [[Restore Mode]]
* [[Baseband Bootrom Protocol]]
* [[Interactive Mode|Baseband Bootloader Protocol]]

==Keys==
* [[AES Keys]]
* [[Apple Certificate]]
* [[Baseband RSA Keys]]
* [[Baseband TEA Keys]]
* [[VFDecrypt Keys|Root Filesystem DMG Keys]]

==Application Development==
* [[Toolchain]]
* [[Frameworks]]
* [[Apple Certification Process]]
* [[Distribution Methods]]

==Tutorials==
* [[Toolchain Tutorial]]
* [[Decrypt iPhone ipsw Beta 4-7 ramdisk]]

==Definitions==
* [[jailbreak]]
* [[activation]]
* [[unlock]]
* [[baseband]]
* [[Baseband Bootloader|bootloader]]

Toolchain

2008-07-28T12:43:18Z

Master-lex-:

iPhone Toolchain
Build iPhone Toolchain on Mac OS X Tiger

'''This is a brief description about how to install iPhone toolchain on Mac OS X Tiger.
Needed Packages
'''
1. llvm source
2. iphone-dev source
3. iphone-filesystem

Put all the packages in your $HOME folder.
How To Build

Make sure you’re running Mac OS X 10.4, and have installed Xcode development environment.
1. Extract packages

$ cd ~
$ tar xjvf llvm-svn.tar.bz2
$ tar xjvf iphone-dev.tar.bz2
$ cd /usr/local
$ sudo tar xjvf ~/iphone-filesystem.tar.bz2
$ sudo mkdir -p /usr/local/arm-apple-darwin
$ LLVMOBJDIR=~/llvm-svn
$ HEAVENLY=/usr/local/iphone-filesystem

2. Build LLVM

$ cd ~/llvm-svn
$ ./configure --enable-optimized
$ make ENABLE_OPTIMIZED=1
$ sudo make install

3. Build odcctools

$ mkdir -p ~/iphone-dev/build/odcctools
$ cd ~/iphone-dev/build/odcctools
$ ../../odcctools/configure --target=arm-apple-darwin --disable-ld64
$ make
$ sudo make install

4. Install headers

$ cd ~/iphone-dev/include
$ ./configure --with-macosx-sdk=/Developer/SDKs/MacOSX10.4u.sdk
$ sudo bash install-headers.sh

5. Install csu (binary)

$ mkdir -p ~/iphone-dev/build/csu
$ cd ~/iphone-dev/build/csu
$ ../../csu/configure --host=arm-apple-darwin
$ sudo make install

6. Build LLVM-GCC

$ mkdir -p ~/iphone-dev/build/llvm-gcc-4.0-iphone
$ cd ~/iphone-dev/build/llvm-gcc-4.0-iphone
$ ../../llvm-gcc-4.0-iphone/configure --enable-llvm=`llvm-config --objc-root` \
--enable-languages=c,c++,objc,obj-c++ --target=arm-apple-darwin --enable-sjlj-exceptions \
--with-heavenly=$HEAVENLY --with-as=/usr/local/bin/arm-apple-darwin-as \
--with-ld=/usr/local/bin/arm-apple-darwin-ld
$ make LLVM_VERSION_INFO=2.0-svn-iphone-dev-0.3-svn
$ sudo make install

Done.
Build iPhone Toolchain on Mac OS X Leopard

'''HOWTO build the toolchain for 1.1.1 on Leopard by drudge with pure ownage by lupinglade'''

Ensure that you have a copy of bison and flex installed on your system. All major systems should have these tools installed or available in package management systems.

$ bison --version
GNU Bison version 1.28
$ flex --version
flex version 2.5.4

Check out a copy of LLVM SVN, and build a release build (as opposed to a debug one). Currently, due to Issue 70, we are limited to revision 42498.

$ svn co http://llvm.org/svn/llvm-project/llvm/trunk llvm-svn -r 42498
$ pushd llvm-svn
$ ./configure --enable-optimized
$ make ENABLE_OPTIMIZED=1
$ sudo make install
$ LLVMOBJDIR=`pwd`
$ popd

Check out a copy of the iphone-dev SVN repository.

$ svn checkout http://iphone-dev.googlecode.com/svn/trunk/ iphone-dev
pushd iphone-dev

Make a directory to hold the toolchain.

$ sudo mkdir /usr/local/arm-apple-darwin

Build odcctools.

$ mkdir -p build/odcctools
$ pushd build/odcctools
../../odcctools/configure --target=arm-apple-darwin --disable-ld64
export INCPRIVEXT="-isysroot /Developer/SDKs/MacOSX10.4u.sdk"
$ make
$ sudo make install
$ popd

Get a copy of the iPhone root filesystem. This is usually obtained by decrypting and extracting the iPhone restore software using these tools, but there are many other methods to obtain this, including simply using scp to download all the files from the iPhone over Wi-Fi. I would use the method describled here: http://www.touchdev.net/wiki/Jailbreak_Guide to get the dmg.

To unpack the root filesystem, mount the dmg, open terminal and run

$ sudo mkdir /usr/local/share/iphone-filesystem
$ sudo cp -Rp /Volumes/Snowbird3A110a.N45Bundle/* /usr/local/share/iphone-filesystem/

Now, set the environment variable $HEAVENLY to its path:

$ HEAVENLY=/usr/local/share/iphone-filesystem

Patch the system headers

$ pushd include
$ ./configure --with-macosx-sdk=/Developer/SDKs/MacOSX10.4u.sdk
$ sudo bash install-headers.sh
$ popd

Install csu, which includes crt1.o, dylib1.o, and bundle1.o. Don’t rebuild them from source, as this requires a working cross-GCC, which you don’t have yet (and the build-from-source process for csu is broken right now anyway). Binaries are provided for this reason.

$ mkdir -p build/csu
$ pushd build/csu
$ ../../csu/configure --host=arm-apple-darwin
$ sudo make install
$ popd

Configure and make LLVM-GCC. Make sure that $LLVMOBJDIR and $HEAVENLY are set per the instructions above.

$ mv llvm-gcc-4.0-iphone/configure llvm-gcc-4.0-iphone/configure.old
$ sed 's/^FLAGS_FOR_TARGET=$/FLAGS_FOR_TARGET=${FLAGS_FOR_TARGET-}/g' \
llvm-gcc-4.0-iphone/configure.old > llvm-gcc-4.0-iphone/configure
$ sudo ln -s /usr/local/arm-apple-darwin/lib/crt1.o \
/usr/local/arm-apple-darwin/lib/crt1.10.5.o
$ mkdir -p build/llvm-gcc-4.0-iphone
$ pushd build/llvm-gcc-4.0-iphone
$ export FLAGS_FOR_TARGET="-mmacosx-version-min=10.1"
../../llvm-gcc-4.0-iphone/configure --enable-llvm=`llvm-config --obj-root` \
--enable-languages=c,c++,objc,obj-c++ --target=arm-apple-darwin --enable-sjlj-exceptions \
--with-heavenly=$HEAVENLY --with-as=/usr/local/bin/arm-apple-darwin-as \
--with-ld=/usr/local/bin/arm-apple-darwin-ld
$ make LLVM_VERSION_INFO=2.0-svn-iphone-dev-0.3-svn
$ sudo make install
$ popd
$ popd

You’re done. Have fun!

'''Build iPhone Toolchain on Windows XP'''

This guide and binary installation server is provided by David Supuran .
If you have any questions, comments, or suggestions please visit irc.osx86.hu #iphone or email me at Darken@iPhoneGameover.com
Requirements

/Developer/SDKs/MacOSX10.4u.sdk

To obtain this directory it is recommended that you download Xcode 2.5 Developer Tools (Disk Image) (902.9 MB as of 30 Oct 2007).

Once you have downloaded the disk image, you will need additional software to open and extract it such as '''PowerISO''', then extract the following file:

\Packages\Packages\MacOSX10.4.Universal.pkg\Contents\Archive.pax.gz

'''Note: It has been reported that UltraISO and MacDrive do not work for extracting this package.
This archive provides the necessary header files which will later be installed for the compiler to use.'''

Note: Due to Apple’s strict redistribution license the files required from this archive could not be included in the installer, so you are required to agree to the terms and licenses under your ADC account and download the full disk image.

iPhone/iTouch root filesystem

The easiest way to obtain the root filesystem is to have a wireless network and OpenSSH installed. If you have this please skip this part as the post-installation will walk you through obtaining the files automatically. You may alternatively decrypt a firmware ipsw manually and place the extracted filesystem in /usr/local/arm-apple-darwin/filesystem after Cygwin is installed.
Installation

Download and run the Cygwin Setup. It is recommended you use the default settings and click Next until you get to the following window:
Cygwin Setup Step 6
Type in the User URL: http://www.iphonegameover.com/cygwin, then click Add.

Once you see the URL added and highlighted in the Available Download Sites list click Next.
Cygwin Setup Step 7
All the software is selected for you; it is recommended you use the default settings and click Next, then follow the on-screen instructions to finish the setup.
Cygwin Setup Step 8
Click the Start button and select All Programs -> Cygwin -> Cygwin Bash Shell and you will see the following window:
Cygwin Setup Step 9
Place the Archive.pax.gz file in your Cygwin home directory that you obtained earlier from the Xcode 2.5 Developer Tools (Disk Image). Example home directory: C:\cygwin\home\Administrator

When asked ‘Do you wish to connect to your device and download the required files?‘ Press y for Yes.

Type in the IP address of your iPhone / iTouch device on the next prompt that says ‘Please enter the remote IP address of your device:‘.

*Note: If you do not know the IP address of your device go to Settings -> Wi-Fi and Click the blue arrow to the right of your wireless network you are currently connected to which is marked with a check on the left.

If SSH asks you ‘Are you sure you want to continue connecting (yes/no)?‘ Type yes.
Cygwin Setup Step 10
NOTE: SSH will now create an archive of your root file system once you type in your password which takes approximately 5 minutes, so please be patient.

If you are asked ‘Do you wish to install the XCode header files now?‘ Press y for Yes.
If you have been following the instructions so far, you will see the following:

Found Archive.pax.gz in current directory.
Extracting /home/David/Archive.pax.gz…

If everything goes well you will see:

Your toolchain installation is now complete!