Recovery Mode (Protocols)

An iPhone 14 Pro Max running in Recovery Mode, recreated using an extracted graphic.

Recovery Mode 1.x (DevID=0x1280)

This is the old Recovery Mode protocol.

Implementions

• kernel driver Archived 2008-11-19 at the Wayback Machine
• iBooter Archived 2008-09-13 at the Wayback Machine

Recovery Mode 2.x (DevID=0x1281)

This is the new Recovery Mode protocol used in 2.0 iBoots.

Recovery Mode 3.x (DevID=0x1282)

This is the new Recovery Mode protocol used in 3.0 iBoots.

Recovery Mode 4.x (DevID=0x1283)

This is the new Recovery Mode protocol used in 4.1 iBoots.

Commands

usb_control_msg(idev, 0xA1, 3, 0, 0, buf, 6, 1000); //get status
usb_control_msg(idev, 0x40, 0, 0, 0, buf, strlen(buf), 1000); //send command
usb_control_msg(idev, 0x21, 1, x, 0, fbuf, s, 1000); //send file

After sending a file, request the status several times. Also increment x as you send.

It also has another interface which appears like a USB to serial converter.

Implementations

• [https://web.archive.org/web/20090203182646/http://chronicdev.googlecode.com/svn/trunk/iRecovery/ Archived 2009-02-03 at the Wayback Machine iRecovery]
• OpeniSend_rec

The mode an iOS or later iPod device boots into when the operating system fails to boot, known by its "connect to computer" graphic

The bootloader on iOS devices and some later iPods, or a general name for the pre-kernel boot process