MUX_API void itmd_run(pfn_javaMobileDeviceCallbackProc_t callback, void* context)
{
void* unkOut = NULL;
#ifdef WIN32
win32_dispatch_thread_init(); // otherwise we lose the first event if the device is already connected
#endif
s_restoreContext = (PITMD_CONTEXT) malloc(sizeof(ITMD_CONTEXT));
s_restoreContext->restoreOptions = NULL;
s_restoreContext->javaCallback = callback;
s_restoreContext->javaContext = context;
AMRestoreRegisterForDeviceNotifications(dfuConnect, recoveryConnect, dfuDisconnect, recoveryDisconnect, 0, s_restoreContext);
AMDeviceNotificationSubscribe(mux_notification_callback, 0, 0, s_restoreContext, &unkOut);
#ifdef WIN32
win32_dispatch_thread_run();
#else
CFRunLoopRun();
#endif
}
int main(int argc, char* argv[])
{
struct stat st;
init_libxpwn(&argc, argv);
libxpwn_log(logCB);
libxpwn_loglevel(2);
printf("---------------------------PLEASE READ THIS---------------------------\n");
printf("Please make certain that all iTunes related processes are not running\n");
printf("at this time (use Task Manager, etc. to end them).\n");
printf("---------------------------PLEASE READ THIS---------------------------\n\n\n");
if(argc < 3) {
printf("usage: %s <custom.ipsw> <n82ap|m68ap|n45ap> [loglevel]\n", argv[0]);
printf("n82ap = 3G iPhone, m68ap = First-generation iPhone, n45ap = iPod touch\n");
return 0;
}
if(argc >= 4) {
int logLevel;
sscanf(argv[3], "%d", &logLevel);
libxpwn_loglevel(logLevel);
}
if(stat("restore.img3", &st) < 0) {
fprintf(stderr, "missing restore.img3\n");
return 1;
}
Stage = 0;
Status = Disconnected;
char ibssName[100];
char wtfName[100];
sprintf(ibssName, "Firmware/dfu/iBSS.%s.RELEASE.dfu", argv[2]);
sprintf(wtfName, "Firmware/dfu/WTF.%s.RELEASE.dfu", argv[2]);
data = NULL;
loadZipFile(argv[1], &data, "Firmware/dfu/WTF.s5l8900xall.RELEASE.dfu");
loadZipFile(argv[1], &data, ibssName);
loadZipFile(argv[1], &data, wtfName);
loadZipFile(argv[1], &data, "Restore.plist");
AbstractFile* xallFile = getFileFromOutputState(&data, "Firmware/dfu/WTF.s5l8900xall.RELEASE.dfu");
AbstractFile* wtfFile = getFileFromOutputState(&data, wtfName);
AbstractFile* ibssFile = getFileFromOutputState(&data, ibssName);
AbstractFile* restoreFile = getFileFromOutputState(&data, "Restore.plist");
GetTempPath(MAX_PATH, tmpFilePath);
strcat(tmpFilePath, "/restore");
if(stat(tmpFilePath, &st) < 0) {
mkdir(tmpFilePath, 0755);
}
strcpy(tmpFirmwarePath, tmpFilePath);
strcat(tmpFirmwarePath, "/Firmware");
if(stat(tmpFirmwarePath, &st) < 0) {
mkdir(tmpFirmwarePath, 0755);
}
strcpy(tmpDFUPath, tmpFirmwarePath);
strcat(tmpDFUPath, "/dfu");
if(stat(tmpDFUPath, &st) < 0) {
mkdir(tmpDFUPath, 0755);
}
strcpy(tmpXALLPath, tmpFilePath);
strcat(tmpXALLPath, "/");
strcat(tmpXALLPath, "Firmware/dfu/WTF.s5l8900xall.RELEASE.dfu");
strcpy(tmpWTFPath, tmpFilePath);
strcat(tmpWTFPath, "/");
strcat(tmpWTFPath, wtfName);
strcpy(tmpIBSSPath, tmpFilePath);
strcat(tmpIBSSPath, "/");
strcat(tmpIBSSPath, ibssName);
strcpy(tmpRestorePath, tmpFilePath);
strcat(tmpRestorePath, "/");
strcat(tmpRestorePath, "Restore.plist");
FILE* file;
void* buffer;
size_t length;
length = xallFile->getLength(xallFile);
buffer = malloc(length);
xallFile->read(xallFile, buffer, length);
file = fopen(tmpXALLPath, "wb");
fwrite(buffer, 1, length, file);
fclose(file);
free(buffer);
xallFile->close(xallFile);
length = wtfFile->getLength(wtfFile);
buffer = malloc(length);
wtfFile->read(wtfFile, buffer, length);
file = fopen(tmpWTFPath, "wb");
fwrite(buffer, 1, length, file);
fclose(file);
free(buffer);
wtfFile->close(wtfFile);
length = ibssFile->getLength(ibssFile);
buffer = malloc(length);
ibssFile->read(ibssFile, buffer, length);
file = fopen(tmpIBSSPath, "wb");
fwrite(buffer, 1, length, file);
fclose(file);
free(buffer);
ibssFile->close(ibssFile);
extractedIPSWPath = argv[1];
length = restoreFile->getLength(restoreFile);
buffer = malloc(length);
restoreFile->read(restoreFile, buffer, length);
file = fopen(tmpRestorePath, "wb");
fwrite(buffer, 1, length, file);
fclose(file);
free(buffer);
restoreFile->close(restoreFile);
extractedIPSWPath = tmpFilePath;
bootImagePath = "restore.img3";
fprintf(stdout, "\nGetting iPhone/iPod status...\n");
fflush(stdout);
if(LoadWindowsDLL() < 0) {
printf("Failed to load iTunes Mobile Device driver!\n");
cleanup_and_exit();
}
mach_error_t ret;
struct am_device_notification *notif;
ret = AMDeviceNotificationSubscribe(notification, 0, 0, 0, ¬if);
if(ret < 0) {
printf("Failed to subscribe for device notifications!\n");
cleanup_and_exit();
}
ret = AMRestoreRegisterForDeviceNotifications(
dfu_connect_callback,
recovery_connect_callback,
dfu_disconnect_callback,
recovery_disconnect_callback,
0,
NULL);
if(ret < 0) {
printf("Failed to subscribe for device restore notifications!\n");
cleanup_and_exit();
}
sleep(2);
char responseBuffer[10];
int countdown;
if(Status == Disconnected) {
connectDevice:
fprintf(stdout, "Is your iPhone/iPod connected to your computer via USB?\n");
fprintf(stdout, "Please answer (y/n): ");
fflush(stdout);
fgets(responseBuffer, 10, stdin);
if(responseBuffer[0] == 'y' || responseBuffer[0] == 'Y') {
goto isPoweringOn;
} else if(responseBuffer[0] == 'n' || responseBuffer[0] == 'N') {
fprintf(stdout, "Please connect your iPhone/iPod to your computer\n");
fprintf(stdout, "Press enter when you have connected your iPhone/iPod... ");
fflush(stdout);
fgets(responseBuffer, 10, stdin);
sleep(2);
if(Status != Disconnected) {
goto turnOffDevice;
} else {
isPoweringOn:
fprintf(stdout, "Is your iPhone currently powering on?\n");
fprintf(stdout, "Please answer (y/n): ");
fflush(stdout);
fgets(responseBuffer, 10, stdin);
if(responseBuffer[0] == 'y' || responseBuffer[0] == 'Y') {
fprintf(stdout, "Waiting for iPhone/iPod to power on...\n");
fflush(stdout);
while(Status == Disconnected) {
sleep(1);
}
goto turnOffDevice;
} else if(responseBuffer[0] == 'n' || responseBuffer[0] == 'N') {
goto beginDFU;
} else {
goto isPoweringOn;
}
}
} else {
goto connectDevice;
}
} else {
turnOffDevice:
fprintf(stdout, "Please turn off your iPhone/iPod without disconnecting the cable connecting it to the computer\n");
fprintf(stdout, "Press enter when you have turned off your iPhone/iPod... ");
fflush(stdout);
fgets(responseBuffer, 10, stdin);
fprintf(stdout, "Waiting for iPhone/iPod to power off...\n");
fflush(stdout);
while(Status != Disconnected) {
sleep(1);
}
}
beginDFU:
fprintf(stdout, "\n!!! Your device should now be off. If it is not, please make sure it is before proceeding !!!\n\n");
fprintf(stdout, "Timing is crucial for the following tasks. I will ask you to do the following (DON'T START YET):\n");
fprintf(stdout, "\t1. Press and hold down the power button for five seconds\n");
fprintf(stdout, "\t2. Without letting go of the power button, press and hold down the power AND home buttons for ten seconds\n");
fprintf(stdout, "\t3. Without letting go of the home button, release the power button\n");
fprintf(stdout, "\t4. Wait 30 seconds while holding down the home button\n");
fprintf(stdout, "\nTry to get the timing as correct as possible, but don't fret if you miss it by a few seconds. It might still work, and if it doesn't, you can always try again. If you fail, you can always just turn the phone completely off by holding power and home for ten seconds, then pushing power to turn it back on.\n");
fprintf(stdout, "\nAre you ready to begin?\n");
fprintf(stdout, "Please answer (y/n): ");
fflush(stdout);
fgets(responseBuffer, 10, stdin);
if(responseBuffer[0] != 'y' && responseBuffer[0] != 'Y')
goto beginDFU;
for(countdown = 5; countdown > 0; countdown--) {
fprintf(stdout, "Beginning process in %d seconds...\n", countdown);
fflush(stdout);
sleep(1);
}
fprintf(stdout, "\nPress and hold down the POWER button (you should now be just holding the power button)... ");
fflush(stdout);
for(countdown = 5; countdown > 0; countdown--) {
fprintf(stdout, "%d... ", countdown);
fflush(stdout);
sleep(1);
}
fprintf(stdout, "\n\nPress and hold down the HOME button, DO NOT LET GO OF THE POWER BUTTON (you should now be just holding both the power and home buttons)... ");
fflush(stdout);
for(countdown = 10; countdown > 0; countdown--) {
fprintf(stdout, "%d... ", countdown);
fflush(stdout);
sleep(1);
}
fprintf(stdout, "\n\nRelease the POWER button, DO NOT LET GO OF THE HOME BUTTON (you should now be just holding the home button)... ");
fflush(stdout);
Stage = 2;
for(countdown = 30; countdown > 0; countdown--) {
if(Status != Disconnected)
goto waitForFinish;
fprintf(stdout, "%d... ", countdown);
fflush(stdout);
sleep(1);
}
fprintf(stdout, "\n\nEither you did not follow instructions correctly or your USB hardware is malfunctioning. Please use another USB port to connect your iPhone/iPod (NOT through a USB hub) and consider restarting your computer before trying again.\n");
fflush(stdout);
cleanup_and_exit();
waitForFinish:
while(1) {
msleep(1);
}
}
