Main Page

emBIOS on the 4G Nano

This is the wiki for the freemyipod project. Freemyipod is a project for reverse-engineering iPods with clickwheel and creating tools and documentation so that other people can port alternative firmwares to them such as rockbox.

Updates

• 2010/08/13 - emBIOS is continually being improved and the next step is porting tools like iLoader to use it.
• 2010/08/06 - The wiki has now been moved to www.freemyipod.org
• 2010/08/05 - Recently we've been working on a hardware abstraction project called emBIOS. Follow development here
• 2010/08/03 - We can now access the Nano 4G accelerometer.
• 2010/08/02 - serpilliere managed to decrypt the NOR flash on the Nano 3G.
• 2010/08/01 - serpilliere managed to access and dump the NOR flash on the Nano 3G. This code could possibly work on the Classics.
• 2010/07/27 - The server got zapped by lightning but a new one was up and running within a day.
• 2010/02/23 - We can now execute code on everything besides the Nano 5G! Minimalistic iBugger working on Nano 3G!
• 2009/11/01 - iBugger core v0.1 successfully running on Nano 4G! [1]

Follow our Twitter feed to get status updates automatically. See the Status page for more detailed information.

Project info Status Contact Contributing SVN Todo list Project summary Released Software iLoader iBugger emBIOS emBIOS Monitor Protocol Basic skills Working with binaries Dumping firmware Extracting firmware

Reverse engineering results Firmware Bootstrapping sequence Firmware decryption GUID table Nano 2G Nano2G clock gates‎ Nano2G LCD init Nano2G FTL Nano 4G Nano4G firmware upgrade process Exploiting Pwnage 2.0 Notes vulnerability Address bruteforcing Nanotron 3000

Hardware Hardware Nano 1G Nano 2G Nano2G HW analysis S5L8701 analysis Nano 3G Nano 4G Nano 5G Classic 1G Classic 2G Classic 3G Chronology S5L8700 datasheet Other guides MPEG movies Modes