Hacking Question How to check if I have the correct BOOT0/BOOT1?

arabtm · Sep 22, 2021

Hi All,

I made a backup of BOOT0/BOOT1 and after some point I made another backup just to be sure.
After that I checked the old and new BOOT0 are different, but both BOOT1 are identical.
Is this expected?

I made sure AUTORCM is turned off during both backup.

another question would be, how can I know which BOOT0/BOOT1 to use if at some point I need to restore NAND? do I need to make backup every firmware update (I'm still using sysNAND).

if I turn on AUTORCM and make a BOOT0/BOOT1 backup, can I also use it for NAND restore? as I understand, AUTORCM modify the BOOT0/BOOT1.

any explanation or link guide would be really appreciated, so I can make sure I have the proper backup. thank you!

Draxzelex · Sep 29, 2021

arabtm said:
Hi All,

I made a backup of BOOT0/BOOT1 and after some point I made another backup just to be sure.
After that I checked the old and new BOOT0 are different, but both BOOT1 are identical.
Is this expected?

I made sure AUTORCM is turned off during both backup.

another question would be, how can I know which BOOT0/BOOT1 to use if at some point I need to restore NAND? do I need to make backup every firmware update (I'm still using sysNAND).

if I turn on AUTORCM and make a BOOT0/BOOT1 backup, can I also use it for NAND restore? as I understand, AUTORCM modify the BOOT0/BOOT1.

any explanation or link guide would be really appreciated, so I can make sure I have the proper backup. thank you!

Was AutoRCM turned off in between the backups? That would explain the difference as AutoRCM modifies BOOT0. Also BOOT0/BOOT1 are firmware specific so they should match the eMMC backup they were made with. Lastly, you can use a BOOT0 that was dumped with AutoRCM so long as you were mindful that AutoRCM was enabled.

arabtm · Sep 29, 2021

Draxzelex said:
Was AutoRCM turned off in between the backups? That would explain the difference as AutoRCM modifies BOOT0. Also BOOT0/BOOT1 are firmware specific so they should match the eMMC backup they were made with. Lastly, you can use a BOOT0 that was dumped with AutoRCM so long as you were mindful that AutoRCM was enabled.

cool. thanks for the info @Draxzelex ! I think I understand now.
as I remember, I did backup BOOT0/1, then turn ON AUTORCM...then turn OFF AUTORCM, then did the BOOT 0/1 backup again, but after doing diff, it is different.

but based on what you said, as long as I dumped the BOOT 0/1 along with the eMMC, it should work fine.
I also dump the keys with Lockpick_RCM, so I should have everything I need incase something goes wrong.

Hacking Question How to check if I have the correct BOOT0/BOOT1?

Well-Known Member

Well-Known Member

Well-Known Member

Similar threads

Popular threads in this forum