|
楼主 |
发表于 2007-10-12 09:36
|
显示全部楼层
上文中提到的一个具体的操作方法在这里...
5 N9 p( x9 M# A' \, m; y% j
. a3 J" ]1 t, Q7 D8 q; y1 y
7 l) y/ |& E! ^, Y8 V! H [size=120%]DowngradingBaseband How to Downgrade screwed up baseband 4.0 (after anySIM and 1.1.1 firmware upgrade).
3 o5 d, T$ i/ _ : c& O; P7 z4 K1 B& W
UNBRICKING 1.1.1 UPGRADEHere's the procedure to downgrade after you upgraded (by mistake) to firmware 1.1.1 on a anySIM unlocked iPhone.
6 q/ k& X. u! f5 O5 E# r9 _/ CHOW TO0. Download iPhone 1.0.2 firmware from Apple Here 9 p& B" h$ `# x! `7 I3 R
1. Change ipsw to zip then unpack it.
% u, q; c- I2 q! V& {
1 L0 p2 J1 R1 n& l3 c" D2. Extract the ramdisk file from it by typing
) J5 O, I/ }; O; d, L) ^dd if=009-7698-4.dmg of=ramdisk.dmg bs=512 skip=4 conv=sync1 s0 f/ v- }/ |- ]
. i/ b% z7 G- J: T7 w
3.Mount the ramdisk by double-clicking it (on Mac). On Windows use someHFS tools to peek inside it or get the files from someone who extractedit already.
- R3 W5 g& j) h' k4 U$ K1 a6 e* F' U) T6 W& u% d
4. Put your phone into DFU modeand do option-restore in iTunes. This will reflash everything to 1.0.2.You will get an error at the end because it couldnt reflash thebaseband. You will end up with a yellow triangle.
3 v) o, ~: W: a
2 j$ f# \5 w+ l% u5.Quit iTunes, launch iNdependence then quit it again. Now relaunchiTunes. Press the power button on the iPhone for 3-4 seconds. Afterabout 10 seconds you end up on the activation screen. ( N% f3 `* \/ V1 R/ V% x3 p u+ v
8 \0 E& ^! D' y" y9 O
6.Complete the baseband downgrade by jailbreaking/activating, installingSSH on to the iPhone etc. There are tons of wiki's about that so Iwon't repeat. (Probably also true for step 4 and 5.)
2 _$ F5 u1 u3 k7 z: X$ s; Q/ v. N8 k) ?/ |' o+ E, s( h
7. Extract the baseband firmware and EEPROM files of 3.14 from the ramdisk of firmware 1.0.2. The files are named ICE03.14.08_G.eep and ICE03.14.08_G.fls and are located under /usr/local/standalone/firmware. $ b% ~- w* x; m+ o- e
$ E# q! c% t4 P2 g8 k4 G
8.Get the secpack of baseband firmware 4.0 (some people have that, I haveno idea how they got it but its needed). I can't give that one outunfortunately. Name it "secpack".
8 r& K9 X! Z) M. Y5 I/ o) _
7 W1 w/ I5 x. g8 N! y% V% c! {) Y$ J- }9. Download iEraser2 here or from Geohot's blog.
2 o# k5 k4 v2 b# P6 w* g1 X2 o9 m5 S
10.Install all the tools onto the iPhone (I use the location/usr/local/bin.) You need to have SSH access to the 1.0.2 firmwareiPhone and upload iEraser2, the secpack, ICE03.14.08_G.eep, ICE03.14.08_G.fls and anySIM 1.0.2. , n7 V. o0 C! T; [5 T
4 e- U3 `/ R2 b& P7 X11. SSH to the phone. Stop CommCenter by typing:
. R% v$ x1 g2 x7 D4 [launchctl remove com.apple.CommCenter12. Now run: 1 T% C* M0 h9 Y$ C8 E2 S6 _
bbupdater -vIt will tell you you run version 4.01 of the baseband. "bbupdater" is a tool by Apple which is also on the ramdisk.
5 {+ E j5 ?1 V; n P4 M
$ F4 E9 T Y1 v1 W/ q: O13. run iEraser2. This will WIPE your baseband, given a file "secpack" is in the same directory and this is a version 4 secpack. , ?+ {% K8 `/ F& V- f
2 H- C' |2 B! Z
14. Run the bbupdater command again: # X$ `! O/ h$ }+ y6 ^; l- X
bbupdater -vThis time it will not find any baseband firmware
9 I! U! a; ^8 V5 N+ y
2 {$ ^) s% y3 J1 ?4 W15. Now do: , y5 @: R0 {* R) B! D0 }
bbupdater -e ICE03.14.08_G.eep -f ICE03.14.08_G.flsThis will flash the 3.14.08 baseband firmware back to the iPhone. ( H1 u# M' g/ j" n/ A
. [$ m& i F5 T) N16. Now check to make sure it worked:
& ~( x5 v; i& ~' k$ @bbupdater -vIt should tell you the version is 3.14 + I1 `/ E, ?/ ~ v [
Atthis point you will still have an IMEI number starting with 004999...and its not of use yet. So still bricked but at least downgraded toversion 3.14. ' q6 O' E. z: E7 t! \7 N5 z
( d8 X0 p, b ^( C- z( W
17. run anySIM Version 1.0.2 (note that older versions might not be good here as 1.0.2 has a lot of fixes for this kind of stuff). " L. X6 Z" X' [( j/ W9 \
Now you have an unlocked 3.14 baseband with IMEI being your original one! ! f* [2 y1 \1 ]& X' A
Congratulations you now fully recovered from your botched update to 1.1.1 and are back to 1.0.2.
1 t! M6 f3 Y. l, ^9 A9 l( w+ Q You can stop here if you want to remain unlocked with iPhone firmware 1.0.2 with working phone. | Do you want to completely virginize and remove all traces of anySIM?Simply do: - \; f8 u% P Q( W) ~' h! |7 t
launchctl remove com.apple.CommCenterTo stop commCenter
! X, G% J2 x( }3 j, kthen do:
5 g: h) W: c! X; n/ k; lbbupdater -e ICE03.14.08_G.eep -f ICE03.14.08_G.flsThis will reflash the "locked" version of the baseband removing any sign that anySIM ever touched your phone. Enjoy! , ], I5 i0 f; f% @3 K* q, S" }
Ifyou don't want to pay for iPhoneSIMFree to have a less ...bad... unlocksolution then stay tuned as we are actively working on our own safeunlock for both 1.0.2 and 1.1.1! $ I* e' w* O# j8 l$ E4 O
A tool automating all this is in the workings....
9 L- N1 e4 @8 Y+ u4 y& W- ]; e' v% |Discuss this here: http://rdgaccess.com/iphone-elite/viewtopic.php?t=27 |
-
-
ieraser
19.11 KB, 下载次数: 620
相关的软件 ieraser2
|