Uploaded August 2011 | Updated September 2026, 22 minutes ago
A special thanks to LXShadow, who worked very hard to hack level editor's code in the game. Also, another special thanks to him for the editor guide (explanations you see at the beginning of each tutorial videos about the editor). It helped me a lot to understand how the editor works.
Français:
-Contenu de la vidéo en Anglais seulement-
La troisième partie du guide de l'éditeur de niveau caché du jeu Crash Bandicoot 4: The Wrath Of Cortex (Ps2). Cette partie présente l'éditeur de caisses (Crate Editor) qui est, selon moi le plus complet d'entre eux. Cet éditeur permet de placer, n'importe où dans le niveau, des caisses que Crash doit briser pour avoir le diamant à la fin du niveau. Dans cet éditeur, tous les types de caisses sont disponible, même une caisse bêta: La Proximity Crate, qui n'a aucun effet programmé, donc elle est comme une caisse normale. Le nombre de caisses par niveau ne doit pas dépasser 255, les caisses d'acier sont incluses, mais elle ne comptent pas au niveau du nombre de boîtes que Crash doit briser pour avoir le diamant. L'éditeur peut nous révéler beaucoup de secrets sur ce jeu de Crash Bandicoot; Par exemble, dans le niveau Tsunami, celui auquel je vous présente l'éditeur de caisses, il y a une petite portion du niveau, à l'arrière du Bonus Round, qui contient un Check-Point et quelques fruits wumpa. C'est une portion du niveau qui n'a pas été incluse par les développeurs du jeu. Aussi, l'éditeur de caisses est le seul qui peut sauvegarder! Mais attention, IL FORMATE LA CARTE MÉMOIRE AVANT DE SAUVEGARDER LES DONNÉS DES CAISSES.
English:
The third part of the guide of Crash Bandicoot 4: The Wrath Of Cortex (Ps2) hidden level editor. This part will present to you the Crate Editor, which is the most complete editor of the game. This one will let you to place, anywhere in all levels of the game, some crates that Crash needs to break for get the gem at the end of a level. In this editor, all crate types are availables, even a beta crate: The Proximity Crate. This crate do nothing; effects have niot been programmed by the developers of the game. The maximal amount of crates that can be in a level is about 255 crates, seel crates are included, but not count in the gem crate count. The level editor can reveal a lot of Crash Bandicoot secrets, like the hidden part of the Tsunami level, which is presented in this video. Look at the back of the Bonus Round, a Check-Point and some wumpas are there, impossible to go there with Crash. Also, the Crate Editor is the only one that can save your editing process. But WARNING: This editor will FORMAT your memory card and ALL YOUR SAVEDGAMES WILL BE LOST. Backup your memory card before use it;)
A special thanks to LXShadow, who worked very hard to hack level editor's code in the game. Also, another special thanks to him for the editor guide (explanations you see at the beginning of each tutorial videos about the editor). It helped me a lot to understand how the editor works.
Français:
-Contenu de la vidéo en Anglais seulement-
La troisième partie du guide de l'éditeur de niveau caché du jeu Crash Bandicoot 4: The Wrath Of Cortex (Ps2). Cette partie présente l'éditeur de caisses (Crate Editor) qui est, selon moi le plus complet d'entre eux. Cet éditeur permet de placer, n'importe où dans le niveau, des caisses que Crash doit briser pour avoir le diamant à la fin du niveau. Dans cet éditeur, tous les types de caisses sont disponible, même une caisse bêta: La Proximity Crate, qui n'a aucun effet programmé, donc elle est comme une caisse normale. Le nombre de caisses par niveau ne doit pas dépasser 255, les caisses d'acier sont incluses, mais elle ne comptent pas au niveau du nombre de boîtes que Crash doit briser pour avoir le diamant. L'éditeur peut nous révéler beaucoup de secrets sur ce jeu de Crash Bandicoot; Par exemble, dans le niveau Tsunami, celui auquel je vous présente l'éditeur de caisses, il y a une petite portion du niveau, à l'arrière du Bonus Round, qui contient un Check-Point et quelques fruits wumpa. C'est une portion du niveau qui n'a pas été incluse par les développeurs du jeu. Aussi, l'éditeur de caisses est le seul qui peut sauvegarder! Mais attention, IL FORMATE LA CARTE MÉMOIRE AVANT DE SAUVEGARDER LES DONNÉS DES CAISSES.
English:
The third part of the guide of Crash Bandicoot 4: The Wrath Of Cortex (Ps2) hidden level editor. This part will present to you the Crate Editor, which is the most complete editor of the game. This one will let you to place, anywhere in all levels of the game, some crates that Crash needs to break for get the gem at the end of a level. In this editor, all crate types are availables, even a beta crate: The Proximity Crate. This crate do nothing; effects have niot been programmed by the developers of the game. The maximal amount of crates that can be in a level is about 255 crates, seel crates are included, but not count in the gem crate count. The level editor can reveal a lot of Crash Bandicoot secrets, like the hidden part of the Tsunami level, which is presented in this video. Look at the back of the Bonus Round, a Check-Point and some wumpas are there, impossible to go there with Crash. Also, the Crate Editor is the only one that can save your editing process. But WARNING: This editor will FORMAT your memory card and ALL YOUR SAVEDGAMES WILL BE LOST. Backup your memory card before use it;)





![Home Screen Glitch in iOS 9.2.1 Setup.app - iCloud Locked iPad 4 (P102AP)
Two weeks ago, I accidently bought an iCloud locked cellular iPad 4 (P102AP) on local classifieds. There is not much things to do with an iCloud locked device, except playing with iOS low-level components or with the first screens of the setup application (setup.app).
Ive heard and seen some videos about a home screen glitch in iOS 9.2.1 setup application. Setup.app is the application used to configure the device at first boot. The glitch is trigerred when doing a hard reset by pressing both power and home button while the device is changing its display language. When the devices boot sequence is almost finished, it will be possible to see the home screen for around a second then it will go back to the setup application.
The soundtrack of this video is a mix made by me with the following tracks :
A) Different Heaven - Nekozilla [NCS Release], https://www.youtube.com/watch?v=6FNHe3kf8_s
B) Jim Yosef - Firefly [NCS Release],
https://www.youtube.com/watch?v=x_OwcYTNbHs
C) Unison - Aperture [NCS Release],
https://www.youtube.com/watch?v=8VDjPYcL-oU Home Screen Glitch in iOS 9.2.1 Setup.app - iCloud Locked iPad 4 (P102AP)](https://i.ytimg.com/vi/Uu-N7ppUiBU/mqdefault.jpg)
![Untethered Triple Boot iOS 7.1.2, 6.1.3 and 5.1.1 on iPhone 4 (N90AP)
For this video, I implemented an untethered triple boot involving iOS 7.1.2, iOS 6.1.3 and iOS 5.1.1 on my iPhone 4 (N90AP).
I wrote a tutorial about how to implement an untethered iOS Multi-Boot here,
http://www.pmbonneau.com/apple/ios/multiboot.php.
Its a testing version, currently only supports iOS 7.1.2 and 6.1.6 on iPhone 4 (N90AP).
The iOS device normally do a signed boot to iOS 7.1.2 untethered jailbroken at userland level. I resized the data partition, then I created four new partitions (system, data for iOS 6 and system, data for iOS 5). I formatted new partitions in HFS+ volumes, then I mounted them. Into those new volumes, I copied the content from respective file system .dmg images. I did adjustements to the fstab and fixed that kb_load() fatal error (incompatible system keybag format between iOS 7.1.2 and older). The iOS 6 and iOS 5 bootstrap applications I made are only a script launcher. There is a system() call with the command line to execute as argument. Something like system(Bootstrap.sh), where Bootstrap.sh is a script stored in /bin. The script only launches kloader with the unsigned bootloader image to bootstrap. When I launch a bootstrap application, the device (should) execute the LLB (Low-Level Bootloader) file set in the script which will execute the appropriate iOS specific iBoot (second stage bootloader), which will display the classic apple logo, load the devicetree and boot the kernel with the boot-args (verbose boot, root device and so) set in the appropriate string.
The whole bootchain of a subsequent operating system does chainload untethered when kloader successfully executed the first stage bootloader (LLB).
Kloader tends to crash around one time on two, depending on many factors.
Please note that this video is a demonstration, not really a tutorial. Set up a dual-boot like this one can take few hours, depending on many technological factors.
Special thanks to @xerub, @iH8Sn0w and @JonathanSeals for many advices to help me solve some problems I encountered during the multi-boot implementation.
The soundtrack of this video is a mix made by me with the following tracks :
A) Jim Yosef - Eclipse [NCS Release]
https://www.youtube.com/watch?v=1WP_YLn1D1c
B) Different Heaven - Nekozilla [NCS Release], https://www.youtube.com/watch?v=6FNHe3kf8_s
C) Jim Yosef - Firefly [NCS Release],
https://www.youtube.com/watch?v=x_OwcYTNbHs
D) Unison - Aperture [NCS Release],
https://www.youtube.com/watch?v=8VDjPYcL-oU
E) Tobu - Candyland [NCS Release]
https://www.youtube.com/watch?v=IIrCDAV3EgI
F) Spektrem - Shine [NCS Release]
https://www.youtube.com/watch?v=n4tK7LYFxI0
G) Spektrem - Shine (Gabriel Drew & Bloom Remix) [NCS Release]
https://www.youtube.com/watch?v=rWVjht-MIto
H) Itro & Tobu - Cloud 9 [NCS Release]
https://www.youtube.com/watch?v=VtKbiyyVZks
I) Spektrem - Shine [NCS Release]
https://www.youtube.com/watch?v=n4tK7LYFxI0
J) Jim Yosef - Lights [NCS Release]
https://www.youtube.com/watch?v=vb3ks4WllXA
K) Ahrix - Nova [NCS Release]
https://www.youtube.com/watch?v=FjNdYp2gXRY Untethered Triple Boot iOS 7.1.2, 6.1.3 and 5.1.1 on iPhone 4 (N90AP)](https://i.ytimg.com/vi/Ux9kgfbRYSY/mqdefault.jpg)

![Semi-Untethered Dual Boot iOS 7.1.2 and 6.1.3 on iPhone 4 (N90AP)
IMPORTANT!!! Please note that this video is for educational purpose only. By watching this video, you agree that Im not responsible of what might happen with the use of informations provided.
Please note that this video is a demonstration, not really a tutorial. Set up a dual-boot like this one can take few hours, depending on many technological factors.
I wrote a tutorial about how to implement an untethered iOS Multi-Boot here,
http://www.pmbonneau.com/apple/ios/multiboot.php.
Its a testing version, currently only supports iOS 7.1.2 and 6.1.6 on iPhone 4 (N90AP).
For this video, I implemented a semi-untethered iOS 7.1.2 and iOS 6.1.3 dual boot on my iPhone 4 (N90AP). This is semi-untethered because kloader actually needs to be executed from an external SSH connection. Otherwise, the first stage bootloader (LLB) of subsequent (unsigned) operating systems will not execute and the device will stay on a black screen. Using a computer or another iOS device with a SSH terminal application can be used to execute kloader on that device and bootstrap to others operating systems. With some further research, I may be able to figure out why this kloader bootstrap does not execute from the device itself. Also, kloader tends to fail sometimes, even if the bootstrap is initialized from an external SSH connection or the device itself.
However, the whole bootchain of a subsequent operating system does chainload untethered when kloader successfully executed the first stage bootloader (LLB).
When I send the command kloader /LLB.n90ap.RELEASE.img3, the device (should) execute LLB (Low-Level Bootloader) which will execute iBoot (second stage bootloader), which will display the classic apple logo, load the devicetree and boot the kernel with the boot-args (verbose boot, root device and so) set in the appropriate string.
Special thanks to @xerub, @iH8Sn0w and @JonathanSeals for many advices to help me solve some problems I encountered during the multi-boot implementation.
The soundtrack of this video is a mix made by me with the following tracks :
A) Jim Yosef - Eclipse [NCS Release]
https://www.youtube.com/watch?v=1WP_YLn1D1c
B) Different Heaven - Nekozilla [NCS Release], https://www.youtube.com/watch?v=6FNHe3kf8_s
C) Jim Yosef - Firefly [NCS Release],
https://www.youtube.com/watch?v=x_OwcYTNbHs
D) Unison - Aperture [NCS Release],
https://www.youtube.com/watch?v=8VDjPYcL-oU
E) Tobu - Candyland [NCS Release]
https://www.youtube.com/watch?v=IIrCDAV3EgI
F) Spektrem - Shine [NCS Release]
https://www.youtube.com/watch?v=n4tK7LYFxI0
G) Spektrem - Shine (Gabriel Drew & Bloom Remix) [NCS Release]
https://www.youtube.com/watch?v=rWVjht-MIto
H) Itro & Tobu - Cloud 9 [NCS Release]
https://www.youtube.com/watch?v=VtKbiyyVZks Semi-Untethered Dual Boot iOS 7.1.2 and 6.1.3 on iPhone 4 (N90AP)](https://i.ytimg.com/vi/W49WNjUsrz4/mqdefault.jpg)

