NativeCn_1.01 中文輸入法 出了! NativeCN 1.2 版
Oct 25

完全升級,破解1.1.1手冊

iPhone 升級,破解
Tags: , , , ,
Add comments

  

完全升級,破解1.1.1手冊

原文: http://iphone.i-bloog.com/read-11.html 

經過測試和我覺得最易的方法

如果是原生的1.0.2/1.1.1 請跳至PART2

PART1

修復非anysim1.1 軟破解的iPhone(IPSF 除外)， 而造成的IMEI 錯誤問題

步驟一：下載下載檔案revirgin.rar (1.63 MB , 下載:387次)

步驟二：解壓縮後把６個檔案

eliteloader.bin

iUnlock

ICE03.14.08_G.fls

ICE03.14.08_G.eep

Bbupdater

norz

 

上傳到iphone 根目錄下的 /revirgin

步驟三：重新開啟iPhone

步驟四：SSH 登錄到 iPhone 備份受損了的NOR(只需輸入紅色字眼

# cd /revirgin

# chmod 755 iUnlock bbupdater norz

# launchctl unload -w /System/Library/LaunchDaemons/com.apple.CommCenter.plist

# ./norz seczone_backup 0×3FA000 0×2000

geohot's nor dumper
- ~8 X: \$ B, F8 Z: x0 N9 f# p+ r6 Zall your norz are belong to us
2 o$ V' S% d$ c( Q6 u' asuper fast…just the way i like it
Dumping: A03FA000-A03FC000
3 u4 V& F: L# |8 `Waiting for data…
, K9 m/ C3 I* D: z8 zGot Header: 77 0b cc
, j. L" H8 y/ o9 GIncreasing baud rate…

…..

………….

Dumped

resetbaseband

完成後會生成8KB 的檔案 請備份到電腦

步驟五：

# ./iUnlock *fls elite*bin

１００％後

出現

FW are equal!
  T- f4 r5 ]. G; d4 X- qCompleted.
  |% l% I- Q: U6 A' [7 kEnjoy!

即ok了

步驟六：

# ./bbupdater –v

出現

Resetting target…

pinging the baseband…

baseband unresponsive to pinging
Done

步驟七：

# ./bbupdater -f *fls -e *eep

出現Done後

步驟八:

# ./bbupdater –v

會出現

Resetting target…
& F* J8 k# M0 z, c# Qpinging the baseband…

issuing +xgendata…

 6 h8 N4 R. f) M  ~firmware: DEV_ICE_MODEM_03.14.08_G
! G* ?/ A' N& F9 y  `* geep version: EEP_VERSION:207

eep revision: EEP_REVISION:7

bootloader: BOOTLOADER_VERSION:3.9_M3S2
, }9 C1 I( R" _/ i  j: hDone

# launchctl load -w /System/Library/LaunchDaemons/com.apple.CommCenter.plist

 

完成!

PART2(jailbreak)

請確定使用的是最新版itunes 7.4.3　及　要使用ＷＩＦＩ

請選其中一個方法 

方法一： 

    步驟一：Restore(回復)  1.1.1Firmware

    步驟二：下載並解壓下載檔案CARNAVAL_by_brasuco__EN_-v0.7.rar (1.57 MB , 下載:218次)

    步驟三：請確認usb 線仍然插住電腦 (前置USB 可能不隱定)

    步驟四：運行(CLICK HERE) by brasuco.bat  中途叫你上 http://jailbreak.toc2rta.com 請改上 http://iphone.org.hk/jailbreak.html

    步驟五：應該已經可以正常進入畫面

                        差unlock sim card

方法二：(建議)

    步驟一：Restore(回復)  1.1.1Firmware

    步驟二：slide to emergency ＞ 按＊＃３０７＃ ＞ＣＡＬＬ　＞　ＡＮＳＷＥＲ　＞　取消＊＃３０７＃　再輸入０按ＣＡＬＬ　＞　再按ＨＯＬＤ　＞　再０按ＣＡＬＬ　＞　ＤＥＣＬＩＮＥ

    步驟三：新增聯絡人＞ADD URL＞ prefs://1F ＞save ＞再add一個 http://jailbreakme.com＞save＞完成

    步驟四：slide to emergency ＞按０＞ＣＡＬＬ＞再按ＨＯＬＤ　＞　再０按ＣＡＬＬ　＞　ＤＥＣＬＩＮＥ＞按第一條link  prefs://1F 開啟wifi

    步驟五：slide to emergency ＞按０＞ＣＡＬＬ＞再按ＨＯＬＤ　＞　再０按ＣＡＬＬ　＞　ＤＥＣＬＩＮＥ＞按第二條link  http://jailbreakme.com

    步驟六：拉到最底按 install那個～等一會重啟就完成
 

PART3

Unlock Simcard 

下載及解壓下載檔案anySIM-1.1p.rar (238.03 KB , 下載:328次)

步驟一：執行 installer 先不要升級installer !!!!

步驟二：安裝 BSD Subsystem 慢慢等因為6mb

步驟三：升級installer, 安裝 community sources, 再安裝 OpenSSH

步驟四：重新開機(iPhone)

步驟五：上傳 anySIM.app 到 iPhone 的 /Applications

並且把anySIM.app資料夾及裡面的文件權限改為0755

步驟六：重新開機(iPhone)，運行 anySIM 解lock 完成!

anySIm 可刪除了

 

註: SSH 登錄 可用 WINSCP / putty   下載檔案winscp404setup.rar (1.84 MB , 下載:1695次)  下載檔案Putty.rar (212.15 KB , 下載:601次)

1.1.1 / 1.0.2 用戶名= root 

1.0.2密碼 = dottie

1.1.1密碼 = alpine 

 

18 Responses to “完全升級,破解1.1.1手冊”

  1. william Says:
    August 1st, 2008 at 9:26 am

    how to Restore(回復) 1.1.1Firmware???can someone teach me??tell more detail about how to do the part 2 first step plz thank you…

    [Reply]
  2. admin Says:
    February 2nd, 2008 at 1:58 am

    不同的呀
    http://www.iphone.org.hk/cgi-bin/ch/topic_show.cgi?id=67&bpg=1&age=0
    restore完 1.0.2 後只需 patch activation
    不用unlock sim card :)

    [Reply]
  3. nightakhouse Says:
    February 2nd, 2008 at 1:45 am

    想問一下,1.0.2的jailbreak 都是跟1.1.1的jailbreak 一樣嗎?

    [Reply]
  4. admin Says:
    February 2nd, 2008 at 1:24 am

    不好意思
    ２天不在家=.="
    你試試做一個 1.0.2 的 restore
    之後jailbreak 看看有沒有問題

    [Reply]
  5. nightakhouse Says:
    February 1st, 2008 at 8:00 pm

    求救啊!!!網主!!!!
    當我進行到part 1的第5步時,winscp自己disconnect了
    then我的iphone就再search不到電話網絡= ="
    setting 的wifi 沒有了on和off而變成了no wifi 的灰色字樣..
    即是現在,我無法search到網絡,左上名字.並無法開始wifi=.=""

    [Reply]
  6. nightakhouse Says:
    January 31st, 2008 at 4:20 pm

    login到了…但怎樣進行"步驟四：SSH 登錄到 iPhone 備份受損了的NOR(只需輸入紅色字眼"
    不明白要如何做…

    [Reply]
  7. nightakhouse Says:
    January 31st, 2008 at 3:41 pm

    help= ="
    我不懂得如何用winscp login iphone啊= =""

    [Reply]
  8. admin Says:
    January 24th, 2008 at 12:23 am

    hi
    你可以由part2 直接開始 :)

    [Reply]
  9. micah Says:
    January 24th, 2008 at 12:02 am

    Hello, how to know whether I should do this step?
    My one is an 1.02 version.

    Or can I just use the iTune to reload the firmware back to original 1.02 and upgrade to 1.1.1?

    Thanks so much!

    [Reply]
  10. admin Says:
    November 12th, 2007 at 2:15 pm

    找到一些方法
    方法一
    How to solve 300 mB memory problem:
    4.1 Open winSPC ,login iphone
    4.2 On iPhone (right side) find var/root
    4.3 Find folder "Media" <- Delete it
    4.4 Rename folder "Mediaold" to "Media"
    4.5 Restart (switch off your iPhone and switch on)
    4.6 Your iPhone have 7.3 GB memory
    4.7 DONE
    方法二
    再次 restore + jailbreak
    restore前
    "Setting>Genernal>Reset>Erase all Content and Settings"
    Restore~
    方法三
    用舊版的 firmware1.1.1
    因為新出的 firmware1.1.1 修正了一個tiff 漏洞

    [Reply]
  11. leo Says:
    November 12th, 2007 at 5:06 am

    大大….可能有人會出現300MB 問題….突然機子SYNC ITUNES 以後出現硬盤只得300MB.

    有技術文件將此問題解決…..

    [Reply]
  12. admin Says:
    November 11th, 2007 at 1:07 pm

    leo 應該是沒事了吧？
    另外如果升級了之後才發現的話
    我自己是會downgrade firmware 和 modem firmware再verginize

    [Reply]
  13. Leo Says:
    November 11th, 2007 at 9:55 am

    Sending baudrate command speed 921600
    Sending Begin Secpack command
    Sending Erase command
    Waiting For Erase Completion…
    OK
    Flashing
    09%
    18%
    28%
    37%
    46%
    56%
    65%
    75%
    84%
    93%
    OK
    Sending End Secpack command
    Validating the write command
    FW differences found
    Completed.
    Enjoy!
    #

    # ./iUnlock *fls elite*bin
    iUnlock v43.hiBaud — Copyright 2007 The dev team

    Credits: Daeken, Darkmen, guest184, gray, iZsh, pytey, roxfan, Sam, uns, Zappaz, Zf

    Sending baudrate command speed 921600
    Sending Begin Secpack command
    Sending Erase command
    Waiting For Erase Completion…
    OK
    Flashing
    09%
    18%
    28%
    37%
    46%
    56%
    65%
    75%
    84%
    93%
    OK
    Sending End Secpack command
    Validating the write command
    FW differences found
    Completed.
    Enjoy!
    #

    [Reply]
  14. Leo Says:
    November 11th, 2007 at 9:54 am

    如果當做iUnlock 時 出現FW differences found…怎辦

    跟著最後一步都不能成功

    [Reply]
  15. Leo Says:
    November 11th, 2007 at 9:25 am

    大大…當我用STEP 1 …時..做到LAUNCHCTL PROCESS..出現No such process的問題

    Using username "root".
    root@192.168.0.13's password:
    # cd /revirgin
    # lcd
    zsh: command not found: lcd
    # chmod 755 iUnlock bbupdater norz
    # launchctl unload -w /System/Library/LaunchDaemons/com.apple.CommCenter.plist
    No such process
    #

    [Reply]

Leave a Reply

Bad Behavior has blocked 1862 access attempts in the last 7 days.