I. Backupowanie sec-zone

Proszę, zrób backup swojego sec-zone zanim zaczniesz przywracać oryginalną wersję pamięci! Wykonaj ten krok!

1. Pakiet do przywracania dziewictwa znajduje się pod adresem: http://rapidshare.com/files/64647223..._pack.zip.html Ściągnij go, rozpakuj i wrzuć poprzez SFTP do iPhone'a, do teczki /usr/bin/virginizer_pack

2. Połącz się z iPhone'em poprzez SSH (Terminal/Putty...) i wykonaj polecenia:

cd /usr/bin/virginizer_pack

launchctl unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist

chmod +x ./norz

3. Wykonaj backup swojego sec-zone wpisując polecenie:

./norz seczone.backup 0x3FA000 0x2000

4. Powinieneś zobaczyć:

# ./norz seczone.backup 0x3FA000 0x2000
geohot's nor dumper
all your norz are belong to us
super fast...just the way i like it
Dumping: A03FA000-A03FC000
Waiting for data...
Got Header: 77 0b cc
Increasing baud rate...
02 00 82 00 04 00 00 10 0E 00 A4 00 03 00
02 00 01 08 14 00 00 00 00 00 A4 00 03 00 09 00
00 00 33 2E 39 5F 4D 33 53 32 C3 0A 03 00
02 00 84 00 00 01 01 00 00 00 89 00 00 00 62 88
00 00 03 00 00 00 00 00 00 00 01 00 00 00 02 00
00 00 00 00 40 00 3F 00 00 00 00 00 01 00 08 00
00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 A6 03 03 00
02 00 85 00 02 00 FF FF 85 02 03 00
02 00 02 08 06 00 00 00 01 02 03 00 0E 08 03 00
Wrote: 0xa03fa000
Wrote: 0xa03fb000
Dumped

Backup sec-zone został wykonany. Znajduje się w pliku seczone.backup w teczce /usr/bin/virginizer_pack/. Skopiuj go gdzieś na dysk twardy.


II. Przywracanie dziewictwa

1. Będąc nadal połączonym z SSH i będąc w teczce /usr/bin/virginizer_pack/ nadaj plikowi iUnlock prawa wykonywalne:

chmod +x ./iUnlock

2. Teraz wpisz:

./iUnlock ./ICE03.14.08_G.fls ./eliteloader.bin

3. Powinieneś zobaczyć:

iUnlock v42.PROPER -- Copyright 2007 The dev team


Credits: Daeken, Darkmen, guest184, gray, iZsh, pytey, roxfan, Sam, uns, Zappaz, Zf

* Leet Hax not for commercial uses
Punishment: Monkeys coming out of your ass Bruce Almighty style.

Sending Begin Secpack command
Sending Erase command
Waiting For Erase Completion...
Sending Write command
00%
05%
15%
25%
35%
45%
55%
65%
75%
80%
90%
Sending End Secpack command
Validating the write command
FW are equal!
Completed.
Enjoy!

4. Nadaj prawa wykonywalne plikowi bbupdater:

chmod +x ./bbupdater

5. Sprawdź status baseband'u:

./bbupdater -v

6. Powinno wyskoczyć:

Resetting target...
pinging the baseband...
baseband unresponsive to pinging
Done

7. Przeflashowujemy firmware modemu poleceniem:

./bbupdater -f ./ICE03.14.08_G.fls -e ./ICE03.14.08_G.eep

8. Powinieneś zobaczyć:

Preparing to flash using /dev/tty.baseband at 750000 baud
Please reset target
Resetting target...
ProcessDetailUpdated: Boot-loader is active
ProcessDetailUpdated: EBL version: 3.9_M3S2 3..9
ProcessDetailUpdated: Boot mode is: CC
ProcessDetailUpdated: Baud rate set to 750000
ProcessDetailUpdated: Get flash id.
ProcessDetailUpdated: CFI stage 1
ProcessDetailUpdated: Flash ID is: 88620089
ProcessDetailUpdated: CFI stage 2
ProcessDetailUpdated: Boot process finished
ProcessOutlineUpdated: Reading SW version data
ProcessDetailUpdated: Receiving data.
ProgressUpdated: 100
ProcessDetailUpdated: Upload OK
ProcessOutlineUpdated: Process time was 133 msec.
Upgrade from to
Downloading EEP
ProcessOutlineUpdated: Start downloading from file ICE03.14.08_G.eep.
ProcessDetailUpdated: Sending sec-pack.
ProcessDetailUpdated: Load region 0
ProcessDetailUpdated: Sending end-pack.
ProcessDetailUpdated: Checksum OK.
ProcessDetailUpdated: Verify OK
ProcessOutlineUpdated: Process time was 1795 msec.
Downloading FLS
ProcessOutlineUpdated: Start downloading from file ICE03.14.08_G.fls.
ProcessDetailUpdated: Erasing the dynamic eeprom area
ProgressUpdated: 100
ProcessDetailUpdated: Sending sec-pack.
ProcessDetailUpdated: Load region 0
ProcessDetailUpdated: Sending data.
ProgressUpdated: 0
ProgressUpdated: 2
ProgressUpdated: 4
ProgressUpdated: 5
ProgressUpdated: 7
ProgressUpdated: 8
ProgressUpdated: 10
ProgressUpdated: 11
ProgressUpdated: 13
ProgressUpdated: 15
ProgressUpdated: 16
ProgressUpdated: 18
ProgressUpdated: 19
ProgressUpdated: 21
ProgressUpdated: 22
ProgressUpdated: 24
ProgressUpdated: 25
ProgressUpdated: 27
ProgressUpdated: 29
ProgressUpdated: 30
ProgressUpdated: 32
ProgressUpdated: 33
ProgressUpdated: 35
ProgressUpdated: 36
ProgressUpdated: 38
ProgressUpdated: 40
ProgressUpdated: 41
ProgressUpdated: 43
ProgressUpdated: 44
ProgressUpdated: 46
ProgressUpdated: 47
ProgressUpdated: 49
ProgressUpdated: 50
ProgressUpdated: 52
ProgressUpdated: 54
ProgressUpdated: 55
ProgressUpdated: 57
ProgressUpdated: 58
ProgressUpdated: 60
ProgressUpdated: 61
ProgressUpdated: 63
ProgressUpdated: 65
ProgressUpdated: 66
ProgressUpdated: 68
ProgressUpdated: 69
ProgressUpdated: 71
ProgressUpdated: 72
ProgressUpdated: 74
ProgressUpdated: 75
ProgressUpdated: 77
ProgressUpdated: 79
ProgressUpdated: 80
ProgressUpdated: 82
ProgressUpdated: 83
ProgressUpdated: 85
ProgressUpdated: 86
ProgressUpdated: 88
ProgressUpdated: 90
ProgressUpdated: 91
ProgressUpdated: 93
ProgressUpdated: 94
ProgressUpdated: 96
ProgressUpdated: 97
ProgressUpdated: 99
ProgressUpdated: 100
ProcessDetailUpdated: Load region 1
ProcessDetailUpdated: Sending data.
ProgressUpdated: 0
ProgressUpdated: 1
ProgressUpdated: 2
ProgressUpdated: 3
ProgressUpdated: 4
ProgressUpdated: 5
ProgressUpdated: 6
ProgressUpdated: 7
ProgressUpdated: 8
ProgressUpdated: 9
ProgressUpdated: 10
ProgressUpdated: 11
ProgressUpdated: 12
ProgressUpdated: 13
ProgressUpdated: 14
ProgressUpdated: 15
ProgressUpdated: 16
ProgressUpdated: 17
ProgressUpdated: 18
ProgressUpdated: 19
ProgressUpdated: 20
ProgressUpdated: 21
ProgressUpdated: 22
ProgressUpdated: 23
ProgressUpdated: 24
ProgressUpdated: 25
ProgressUpdated: 26
ProgressUpdated: 27
ProgressUpdated: 28
ProgressUpdated: 29
ProgressUpdated: 30
ProgressUpdated: 31
ProgressUpdated: 32
ProgressUpdated: 33
ProgressUpdated: 34
ProgressUpdated: 35
ProgressUpdated: 36
ProgressUpdated: 37
ProgressUpdated: 38
ProgressUpdated: 39
ProgressUpdated: 40
ProgressUpdated: 41
ProgressUpdated: 42
ProgressUpdated: 43
ProgressUpdated: 44
ProgressUpdated: 45
ProgressUpdated: 46
ProgressUpdated: 47
ProgressUpdated: 48
ProgressUpdated: 49
ProgressUpdated: 50
ProgressUpdated: 51
ProgressUpdated: 52
ProgressUpdated: 53
ProgressUpdated: 54
ProgressUpdated: 55
ProgressUpdated: 56
ProgressUpdated: 57
ProgressUpdated: 58
ProgressUpdated: 59
ProgressUpdated: 60
ProgressUpdated: 61
ProgressUpdated: 62
ProgressUpdated: 63
ProgressUpdated: 64
ProgressUpdated: 65
ProgressUpdated: 66
ProgressUpdated: 67
ProgressUpdated: 68
ProgressUpdated: 69
ProgressUpdated: 70
ProgressUpdated: 71
ProgressUpdated: 72
ProgressUpdated: 73
ProgressUpdated: 74
ProgressUpdated: 75
ProgressUpdated: 76
ProgressUpdated: 77
ProgressUpdated: 78
ProgressUpdated: 79
ProgressUpdated: 80
ProgressUpdated: 81
ProgressUpdated: 82
ProgressUpdated: 83
ProgressUpdated: 84
ProgressUpdated: 85
ProgressUpdated: 86
ProgressUpdated: 87
ProgressUpdated: 88
ProgressUpdated: 89
ProgressUpdated: 90
ProgressUpdated: 91
ProgressUpdated: 92
ProgressUpdated: 93
ProgressUpdated: 94
ProgressUpdated: 95
ProgressUpdated: 96
ProgressUpdated: 97
ProgressUpdated: 98
ProgressUpdated: 99
ProgressUpdated: 100
ProcessDetailUpdated: Sending end-pack.
ProcessDetailUpdated: Checksum OK.
ProcessDetailUpdated: Verify OK
ProcessOutlineUpdated: Process time was 1 min 52 sec.
Resetting target...
pinging the baseband...
issuing +cpwroff...
Done

9. Wykonujemy ponownie polecenie:

./bbupdater -v

10. Powinniśmy zobaczyć teraz:

Resetting target...
pinging the baseband...
issuing +xgendata...
firmware: DEV_ICE_MODEM_03.14.08_G
eep version: EEP_VERSION:207
eep revision: EEP_REVISION:7
bootloader: BOOTLOADER_VERSION:3.9_M3S2
Done

11. Uruchamiamy CommCenter:

launchctl load -w /System/Library/LaunchDaemons/com.apple.CommCenter.plist

Resetujemy iPhone'a i już znów mamy blokadę kart SIM. Telefon jest czysty jak po wyjściu z "łona mamy Apple" [bp_replacer_img]

Pamiętajcie! Nie wolno wyłączać mózgu podczas robienia tego typu operacji na iPhone. Zawsze myślnie na trzeźwo, jeśli czegoś nie wiecie - pytajcie!

Można, można. Ale mniejsza frajda z tego i mniejszy dreszcz emocji

Terminal mi się zatrzymuje na:

# ./norz seczone.backup 0x3FA000 0x2000
geohot's nor dumper
all your norz are belong to us
super fast...just the way i like it
Dumping: A03FA000-A03FC000
Waiting for data...

i dalej nic

What 2 do?

A działał Ci wcześniej normalnie telefon? Bo mam u siebie 2 z uszkodzonym modemem i jest tak samo. Ale to dlatego, że były uszkodzone już wcześniej.

Telefon działał bez problemu. Po update firmware do 1.1.1. pokazal sie blad po zdjeciu simlocka incorect SIM.

Dlatego chce na nowo przeprowadzic update, ale nie moge.. bo zatrzymuje sie wyzej wspomnianym miejscu. Telefon aktywowany pod 1.1.1, smilock zdjety.. incorect sim

ja mam pytanie odnosnie tego

"Resetujemy iPhone'a i już znów mamy blokadę kart SIM. Telefon jest czysty jak po wyjściu z "łona mamy Apple" "

otoz mam teraz blokade sim , ale nie jest jak po wyjeciu z pudelka tzn. nie mam ekranu z prosba o aktywacje i wszystko z wyjatkiem telefonu dziala bezproblemu ...

Czy tak powinno byc ?

Tak. Masz blokadę SIM, a to, że telefon jest aktywowany... to inna sprawa.

ok czyli super latwo i przyjemnie

rozumiem ze teraz wystarczy postepowac zgodnie z tym tutorialem
http://www.myapple.pl/showthread.php?t=46259
i moge sie cieszyc z iphona z najnowszym oprogramowaniem , tak?

co nalezy zrobic jesli juz mam z'backup'owany i rozdziewiczony iphone, co dalej? (chodzi mi o wersje na mac'a )