life

[3GS 6.1.2 and 4.1] has lock version activation, perfect jailbreak

Recently, some friends came to me to ask some questions about the iPhone. What they all have in common is that they all have locks, and they are both ios4.1. Some notes before brushing [...]

article directories

Recently, some friends came to me to ask some questions about the iPhone. What they all have in common is that they all have locks, and they are both ios4.1.

Some precautions before brushing(Newbies, please read it carefully before operating it. The method to brush 6.1.2 is the same as the method to brush 6.1. You only need to select the 6.1.2 firmware package when brushing the computer. However, since Apple has turned off the verification of 6.1, if you don't backup the SHSH of 6.1, you can only brush 6.1.2. It is recommended to brush the latest 6.1.2 version):?

1This tutorial is applicable to2011years34Locked version before the week3GSOr your baseband is already04.26.08、05.11.07、05.12.01、05.13.04、06.15.00the3GS(You can check the number of cycles directly on your phone, set->general->about this Mac->Serial number, the third digit is9is2009In the year, the third place is0is2010In the year, the third place is1is2011Year, the fourth and fifth place is the cycle number), if your mobile phone is2011years34After weeks (i.e., the serial number3-5Bit greater than or equal to135) and the baseband is05.XXBaseband mobile phone, sorry! upgrade0615The baseband is likely to turn the phone into three bricks (someFYThere are also some successful ones, it depends on luck!).

2The steps of this method are quite cumbersome and the purpose is to adapt to most locks.3GSNewbies, some steps can be skipped or there are sharper ways to operate them, but if you areNewbie, please follow every step strictly.

3If you are using other tools such as Apple Brush Assistant (now renamed Aisi Assistant) to operate your mobile phone, please don't ask me why the error occurred. There are many unexpected results. After all, it is not a tool launched by God, and it is difficult for me to give an explanation.


4At present, Apple has not been closed yet4.1systemSHSHVerification (but 6.1 has been turned off), so it is strongly recommended that you use 91, Little Red Umbrella, PP Assistant and other tools to back up all the files first.SHSH, at least the SHs that can be backed up are 4.1 and 6.1.2. Apple is about to launch 6.1.3. It is estimated that it will block the current loopholes used by perfect jailbreak. If you don't backup it quickly, then you will say goodbye to the perfect jailbreak under 6.X.。

5, currentlyXPBasically, users under the program complete this tutorial in one go,WIN7When a user has problems, you can check through Baidu. Many of the reasons are due to the system or you haven't set compatibility well.

6If you encounter a condition where the next operation cannot be performed in recovery mode (The last step of swiping the fake activation file), I will only detail two methods here. solution1:You can force the shutdown (press and hold the shutdown button + menu button) and quickly enterDFUMode (Please ignore the confirmation box that pops up halfway and count silently,1Press and hold the power button3Seconds;2Press and hold the main menu button again10seconds, but do not release the power button;3Release the power button, but continue to press and hold the Menu button20seconds, and then click the confirmation box that pops up halfwayI started swiping fake baseband files); solution2: Use a small red umbrella directly orPPTools such as assistants kick out the recovery mode, and then proceed to the next step. This method will be described in detail in this tutorial because it is convenientQQRemote operation.

7The entire brushing process requires a network. If the computer cannot access the Internet, it cannot be successful. If something goes wrong at any step, it is recommended that you re-operate this step. If you cannot upgrade the baseband, you just need to operate the upgrade step again. If it really doesn't work, start from the first step.

8Please prepare in advance4.1、6.0or 6.1.2Official firmware, do not download the wrong, otherwise, you understand! Download address ishttp://www.weiphone.com/ios/

9When the machine is finished, prompt“itunescannot readiPhonecontent”, please use 91, PP and other tools to delete the/var/mobile/Mediadirectory under theiTunes_ControlJust the entire folder.?



10. If the mobile phone happens to be the 3GS in the 41st week of 2009, or if you get an iPhone, how can you determine whether it is a magical machine?

Method 1 (sometimes it cannot be successful and is not recommended): Open the soft USB View device on the computer, and enter the DFU on your mobile phoneMode, check the mobile phone information on the computer, and search for it yourself if you don't know how to do it; Method 2 (super simple): Open Red Snow 0.9.15b3, then the mobile phone enters DFU mode, and you can see it on Red Snow. If the old BR is a divine machine, the new BR is a non-divine machine.If it is determined that your mobile phone is a magic machine, it is recommended to use the method to complete the brush, otherwise it is likely to appear when the baseband is upgraded to 6.X."cloudn’t find recovery mode device"Mistake.

11. I made a pseudo-activation file of 6.1.2 (tested). If you have any questions, please give feedback. Thank you! If it is a 6.1.2 system, but you use a 6.1 pseudo-activation file to activate 3GS, 6.1 will be displayed on your mobile phone or computer. It is strongly recommended to correspond to the version before operating.

12. It was not until today that I discovered that there was a problem with updating the attachments in the forum. For example, the originally uploaded attachments had been updated N times, but I found that only the attachment name had been changed, but the content was still old data. After testing, you need to upload the same attachment at least 3-4 times to succeed. The latest uploaded content is downloaded immediately, but after a while, it will be found that it is still the previous content. You can only delete the old attachment and upload the new attachment. Oh, my God!?

13. Recently, I found that many FY directly copied the content of this tutorial. This tutorial is basically typed word by myself. If you really want to quote it, please indicate the source and address of the quote. Thank you!


14. Since I am also a novice and my level is limited, if there are any mistakes in this tutorial, please correct me, thank you!?


Ultrasn0w?Support the following baseband unlocking:?
01.59.00? (Baseband of iPhone 4)
04.26.08? (Baseband for iPhone 3G and iPhone 3GS)
05.11.07? (Baseband for iPhone 3G and iPhone 3GS)
05.12.01? (Baseband for iPhone 3G and iPhone 3GS)
05.13.04? (Baseband for iPhone 3G and iPhone 3GS)
06.15.00? (iPad baseband, GPS cannot be used. It has been determined that it cannot be unlocked under 6.X using Super Snow)

If the baseband of your mobile phone can correspond to the above basebands (except the 0615 baseband), congratulations, you can directly go to the section of this tutorial.34Step security baseband upgrade6.1.2system.

Welcome to reprint, but please keep this information. The original post address ishttp://bbs.weiphone.com/read-htm-tid-5962084.html?

4.1 A simple method for brushing the system:
1. After 3GS enters DFU mode, swipe the official 4.1 firmware through iTunes;
2. Upgrade the baseband to0615 (Red Snow 0.9.6rc8 or 0.9.15b3 can be used, and boot with 4.1 firmware), and then lower the baseband to0513 (You need Red Snow 0.9.15b3 and use 4.1 firmware to boot.If it is already0513can float).
3Jailbreak through red snow (in the detailed tutorial, I have integrated this step into the step of upgrading the baseband).
4. Install ultrasn 0w 1.2.8 by cydia or other means to unlock it.
5. The signal comes when you restart.



6.1.2The system's simplified method 1 (if the baseband is 0513 or before, directly jump to the official 6.1.2):?
1After 3GS enters DFU mode, passiTunesBrush official4.1Firmware;
2. Upgrade the baseband to0615 (Red Snow 0.9.6rc8 or 0.9.15b3 can be used, and boot with 4.1 firmware), and then lower the baseband to0513 (You need Red Snow 0.9.15b3 and use 4.1 firmware to boot.If it is already0513can float).
3. Brush the official through the Red Snow Insurance baseband6.1.2Firmware.

4. AdoptedBypassUdid-iOS6.1.2To activate the phone (you need Red Snow 0.9.15b3 and use 6.0 firmware to boot).
5. Adoptedevasi0nBreak out of prison.
6. Adoptedcydiaor otherwise mountedultrasn0w 1.2.8Unlock it.
7. The signal comes when you restart.

6.1.2 The second method for briefly brushing the system (if you encounter a problem, the order of steps 2 and 3 can be reversed; if you encounter a problem before 41 weeks of 2009, this method is recommended):
1After 3GS enters DFU mode, passiTunesBrush official6.1.2Firmware;

2. Upgrade the baseband to 0615 (need Red Snow 0.9.15b3 and use 6.0 firmware to boot), and then reduce the baseband to 0513 (need Red Snow 0.9.15b3 and use 6.0 firmware to boot)<Thanks to the 992nd floormarsatmo, otherwise there will be an error when booting with 4.1 firmware>;
3. Activate your phone through Bypass Udid-iOS 6.1.2 (you need Red Snow 0.9.15b3 and use 6.0 firmware to boot);
4, adoptedevasi0nBreak out of prison.
5, adoptedcydiaor otherwise mountedultrasn0w 1.2.8Unlock it.
6The signal comes when you restart.

6.1.2 Simple system brushing method three:
If you encounter problems based on Method 1 or Method 2, you can try using Aisi Brush Assistant to operate (including brushing, maintaining baseband, upgrading and downgrading baseband, jailbreaking, etc.), but there are some functions that are not yet available in 6.X. Use, but the update speed is quite fast, go experience it yourself!?


6.1.2 Simple system brushing method four:
1. After 3GS enters DFU mode, swipe the official 4.1 firmware through iTunes;
2. Upgrade the baseband to0615 (Red Snow 0.9.6rc8 or 0.9.15b3 can be used, and boot with 4.1 firmware), and then lower the baseband to0513 (You need Red Snow 0.9.15b3 and use 4.1 firmware to boot.If it is already0513can float).
3. After entering DFU mode with iREB, use iTunes to swipe the 6.1.2 homemade firmware upgraded in the baseband.

4. AdoptedBypassUdid-iOS6.1.2To activate the phone (you need Red Snow 0.9.15b3 and use 6.0 firmware to boot).
5. Adoptedevasi0nBreak out of prison.
6. Adoptedcydiaor otherwise mountedultrasn0w 1.2.8Unlock it.
7. The signal comes when you restart.?

In fact, there are other methods that will not be described here. I believe that one of the above methods will suit you.

If newbies don't understand the above simple brushing steps, please refer to the following modular detailed brushing steps.
I only described Method 1. If Method 1 fails, please follow Simple Brush Method 2 and compare the following modular brushing steps to complete the brushing. It's very simple! Please believe that all roads lead to Rome. As long as you can succeed, you can try any method. I wish you success!
Since I am busy at work, I would like to thank those FY people who responded to solve problems (such aslianghao449?)。

4.1and6.1.2Super-detailed system flash method:?
[1. Brush back to omnipotent4.1Firmware (all3GSGeneral)]?
1. Download and install the latest iTunes, open it after installation, connect to 3GS via the data cable, and enter DFU mode (1. Press and hold the power button for 3 seconds;2. Press and hold the main menu button for another 10 seconds, but do not release the power button;3. Release the power button, but continue to hold and hold the menu button until iTunes prompts you to find an iPhone in recovery mode)

2. Click "OK", then hold down the "shift" key on the computer keyboard, and click "Restore iPhone".

3. Select the official 3GS 4.1 firmware and click "Open".

4. When you are prompted that you will restore to the 4.1 system, click "Restore" directly.

5. Now the system will automatically restore the system. Please wait a moment. The picture on the phone is an apple that has been bitten, and there is also a progress bar below it. If the brush finally prompts you for a 1015 error, you can use a tool such as a small red umbrella or PP assistant to kick it out (refer to step 53 of this tutorial), or simply ignore it. If you are prompted for a 3194 error when brushing, please refer to this post,《Many people have encountered workaround for 3194 errors, except for downgrades. 100% effective!"

6. After swiping the 4.1 firmware, the recovery mode interface is displayed on the phone (that is, the top is a CD and the bottom is a piece of data)
?

[2. Upgrade baseband]
7. Start upgrading the baseband, decompress and open redsn0w_win_0.9.6rc8, and click "Browse"(Note: The old version of Hongxue is used here to upgrade the baseband. When I upgraded using redsn0w_win_0.9.15b3, I encountered the program automatically shutting down and the mobile phone once, and the mobile phone crashed once, so it is recommended to use the old version, of course, you can choose to use the new version).

8. If your mobile phone is older than 41 weeks in 2009, please click "Yes"; if your mobile phone is older than 41 weeks in 2009, please click "No".

9. Select the official 3GS 4.1 firmware and click "Open".

10. Click "Next".

11. Check "Install iPad baseband".

12. Reminds that the baseband will be upgraded, please do not operate after 34 weeks of 2011.

13. Click "Next";

14. Click "Next" again;

15. Press and hold the power button for 3 seconds;

16. Press and hold the main menu button for another 10 seconds, but do not release the power button;

17. Release the power button, but continue to press and hold the menu button until the progress bar appears.

18. Everyone needs to wait for a while, and pictures such as hard drives and pineapples will appear one after another on the mobile phone (borrowing pictures from the Internet).

19. So far, the baseband upgrade has been completed.
?

[3. Downgraded baseband]
20. Start to downgrade the baseband, decompress and open redsn0w_win_0.9.15b3, and click "Extras".

21. Click "Select IPSW";

22. Select the official 3GS 4.1 firmware and click "Open".

23. Click "OK";

24. If your mobile phone is older than 41 weeks in 2009, please click "Yes"; if your mobile phone is older than 41 weeks in 2009, please click "No".

25. Click "Back";

26. Click "Jailbreak";

27. Cancel the default check of "Install Cydia" and check "Downgradefrom iPad baseball" at the same time;

28. After turning off the phone, click "Next"(if the phone is not turned off, this button will be gray and not optional);

29. Press and hold the power button for 3 seconds (refer to previous screenshots and steps);

30. Press and hold the main menu button for another 10 seconds, but do not release the power button (refer to previous screenshots and steps);

31. Release the power button, but continue to press and hold the menu button until the progress bar appears (refer to previous screenshots and steps);

32. Everyone needs to wait for a while, and images such as hard disk and pineapple will appear one after another on the mobile phone (refer to the previous screenshots and steps);

33. Now that the baseband downgrade is complete, click "Quit".
?

[4. Upgrade6.1.2System or direct use4.1System]
34、? Starting from this step,(1) If you only want a 4.1 system, please jump directly to step 63 of this tutorial.(2) If you want to upgrade to a 6.1.2 system, go ahead and open redsn0w_win_0.9.15b3?, Click on "Extras".

35. Click "Even more";

36. Click "Restore";

37. Click "IPSW";

38. Choose the official 3GS6.1.2Firmware and click "Open". Note that the default file name is "iPhone2,1_6.1.2_10B146_Restore”;
?

39. Click "Yes";

40. The 6.1.2 firmware has started. Please wait a moment, but the picture on the phone is an apple being bitten, and there is also a progress bar below.

41. After the flash is completed, you will be prompted to complete the flash and click "OK";
?

[5. Activate]
42. After swiping the 6.1 firmware, the program in recovery mode is displayed on the mobile phone (that is, the top is a CD and the bottom is a data interface).

43. Now you need to swipe the pseudo-activation package. After brushing it, you can enter the desktop. Open redsn0w_win_0.9.15b3?, Click on "Extras".

44. Click "Select IPSW";

45. Choose the official 3GS6.0Firmware and click "Open". Note that the default file name is "iPhone2,1_6.0_10A403_Restore”;

46. Click "Yes";

47. If your mobile phone is older than 41 weeks in 2009, please click "Yes"; if your mobile phone is older than 41 weeks in 2009, please click "No".

48. Click "Back";

49. Click "Jailbreak";

50. Check "Install custom bundle";

51. Extract the pseudo-activation files of "Bypass Udid-iOS 6.1 and 6.1.2 (pseudo-activation files, made by joki78, please feedback if you have any questions)". After decompression, there are two folders containing the pseudo-activation files of 6.1 and 6.1.2 respectively. Select "Bypass Udid-iOS 6.1.2 (Joki). tar.gz";

52. Click "Next"(Please see clearly,"Install Cydia" will automatically uncheck, please don't check again!!Because we are not trying to escape imperfect through red snow, and the escape tutorial will be described in detail later);

53. After turning off the phone, click "Next"(If the phone is not turned off, this button will be gray out and not selectable.) Many friends are stuck here. Try using a small red umbrella to kick out the recovery mode. The specific method is: First unzip the "umbrella-4.1.4_+Java Environment" installation package, then install "jre-6u21-windows-i586-s", then run "umbrella-4.1.4", directly click "Kick Device Out of Recovery", and quickly switch back to the red snow interface. When you see that "Next" returns to normal, you can click directly. Then you are prompted to enter DFU mode again (please refer to steps 15 - 17). The operation here must be fast, otherwise it will fail.

54. The progress bar appears, wait a moment;

55、After waiting for a long time, 3GS will enter the activation interface. Please set the language, positioning, WIFI and other settings and you will enter the long-lost desktop. Please don't skip this step, otherwise you will understand! (Thanks to the 772nd floorgmyisme?Suggestion, I estimate that many FY people may have problems here. I didn't give special reminders for this step, so I'm really sorry!)?
?

[6. Prison Break]
56. The next step was escape. Open the long-lost "evasi 0n-win"(updated) and click "Jailbreak";

57. The brush tool will automatically brush the machine;

58. If the prompt appears in the figure below, please run the 3GS desktop to generate the evasi0n icon. At this time, evasi0n will start working again. (I have encountered that jailbreak does not exist on the iPhone desktop. I suggest turning off all anti-virus software, restarting the phone and computer, and operating it a few more times.)
?

59. Wait a moment and the jailbreak will be completed, but the mobile phone still needs to wait a while.

60. After the jailbreak was completed, the "Cydia" program finally appeared;

[7. Unlock]
62. Run the "Cydia" program on the 3GS desktop and enter the long process of waiting for updates;

63. Start unlocking the mobile phone.Method 1:You can directly install the unlocking package of ultrasn0w_1.2.8 (use tools such as 91 Assistant, PP Assistant, iTools or iFunbox to place mobilesubstrate_0.9.3999_iphoneos-arm and substrate.safemode_0.9.3999_iphoneos-arm in/var/root/Media/Cydia/AutoInstall. After restarting the phone, place ultrasn0w_1. 2.8_iphoneos-arm in/var/root/Media/Cydia/AutoInstall. Restart the phone and send a signal immediately. Thanks to the 25th floorwu54Provide unlocking package);Method 2:You can also install through Cydia (you need to connect to WIFI). The Cydia installation method will be explained in detail below.

64. Run the "Cydia" program;

65. After entering "Cydia", click "Search" in the lower right corner;

66. Click the search box;

67. Enter "ultrasn" and directly click "ultrasn 0w" below;

68. Click "Install" in the upper right corner;

69. Click "Confirm" in the upper right corner;

70. The next step is to download and install the unlock package. Due to the great pressure on the Cydia server, it will be impossible to download it. Please download and install it again;

71. After completing, click "Restart SpringBoard";

72Wait a moment to return to standby mode and find that the information icon in the upper left corner is searching for information. After a while,“China Mobile”It came out. If there is no signal yet, please check whether the baseband of your 3GS is 0615. If it is, I'm sorry, you didn't follow every step of my tutorial. Please use red snow to reduce the baseband to 0513 (According to my statistics, at least dozens of Fys are all wrong here).

73. After you have the signal, it is recommended to add the following source address (I forgot to bring it on my phone, so I won't take a screenshot. If you don't know, you can directly ignore it).
cydia.myrepospace.com/suik
apt.weiphone.com
apt.17 com (including 6.1 weather flashback fix)

74. Finally, I would like to strongly request to install AppSync for IOS 6.deb again (please refer to step 63 of this tutorial for installation methods). If you don't install it, you can't use non-genuine software and games.

75. This is the end of the entire tutorial. If you encounter blank text messages or other problems, it is recommended to restart your mobile phone again. If you have any problems, please reply to your comments. Thank you!

76. Using SAM to repair the push, the prompt was successful, but there was no way to push it. Since the 3GS is a standby machine, there is no time to trouble. I hope everyone can study it yourself. I also lazy and went to X-ray and spent 1 yuan to buy an independent certificate to repair the push. If I don't want to push it, don't waste this precious one yuan.
?

77、If this tutorial is helpful to you, please rate it!

[Weather flash repair tutorial, look at the screenshot yourself, without written explanation]

?


This tutorial is very comprehensive and detailed. Suggest novices to watch more