count me in.. no imei, no iccid after restore with 1.1.1. ziphone pooped my phone

Originally Posted by jameszjca

You need to do A17 testpoint(circuit shortcut A17 line and a capacitor in comm board) within 45 seconds after you issue this command. You can set sleep waiting to another number if 45 seconds doesn't suit to you.
Once testpoint success, you will get the message testpoints works 55 and be promted to press anykey followed by enter.

The tool only helps if you want to do testpoint to fix bootloader, which is the most cases for us. If you restore to 111, 112 and 113 all ended up to 1011 error, then your bootloader is neither 3.9 nor 4.6. Without a right bootloader, there is no way to install baseband, that is 1011 error means.

You can find a simple guide in README file. While you can get a full guide about hw unlock 112 in somewhere else such as www.hackthatphone.com.

I was wrong to assume the tool could run in 111. The terminal won't show up. Since I have updated my iphone to 113 and installed lots of others, so currently I won't fix it to adapt 111.

Anyway, I'm not iphone hacker, neither profession unlocker. As an iphone user, I tried hw unlock but followed wrong guide and flushed wrong nor. I tried all software ways to fix the bootloader or jailbreak it. None of them worked. Since occasionally I used ziphone did one successful jailbreak. But I can't redo it again after I tried downgrade bootloader by ziphone. So I checked out the ziphone source code and fixed the bug, and put terminal and hw unlock files into package.
That is unbrick112. Not a software way to unbrick iphone, but enable it to do testpoint again.

Ok i did the HW testpoint but i dont get any message



I did it with diferent times and after the Testpoint
the loading logo show and freze my iphone and the after 5 min it reboot

Originally Posted by jameszjca

= Same problem as I've described?

I am talking the same problem. I have 51 week set which can't restore to 102. For 111, 112 and 113 restoring all ended up with 1011 error.

Ziphone is the only tool to jailbreak our basebandless ibricks. However, you must only use ziphone -a -j to activate and jailbreak it(works in 111 and 112, not 113). If you tried unlock or downgrade bootloader, then you would trigger the bug which only affects basebandless iphones. Which means you can't jailbreak with ziphone again even you restore firmware. Because some env info has been saved in nvram, ziphone script pick it up again and redo unlock and bootloader downgrade, until it gets success, it release the env info.

If you are programmer, you can revise ziphone by yourself. Strip zibri.dat file from offset 0xCC2000 to the end, save it as a .dmg file. Open this dmg file by TransMac.
Open /etc/profile, you will understand what I mean. By changing this file you can fix the bug I presented before.

BSD-subsystem can not be installed within this /etc/profile script. Don't know why yet. Looks like once console shows a bit much information, the script execution will throw error before end. You know what, from ziphone's src code, Zibri tried to bring BSD-subsystem in, but at last he commented it, maybe he met the same problem as mine.

I can use iphuc to putfile to /media/iphone folder. I think I should try to change jailbreaked /etc/profile to unzip BSD by following restart. Once BSD-Subsystem get installed, I can remove the zip file and change profile to normal.

Wish you guy's have progress as well. BTW, the method here is no harm to the iphone. Because it only touchs firmware rather than bootloader or baseband. You can always restore it to square one (end with 1011 error).

Hi,
Thanks for your reply. I'm not a programmer and it seems like others have (or will very soon) found an sw solution for our problem. hopefully thtat they will release a simple guide soon.

D.

Originally Posted by macchap

Hi,

After being highly disappointed because I could not get any furitful support from anybody, I decided that I would not resign without solving this and finally succeeded after 13 hours of no stop efforts.

You Rock
...
...
!!!
...
...
...

Originally Posted by macchap

Really sorry if this sounds greek and latin. I will try to put up a decent step by step guide along with the zibri.dat I used after some rest "

Cheers,
Sara

Will be useful for me and many others

Thanks

sorry, im stuck at the Spamming AT, waiting for a response part. I can restore the phone to 1.1.1 but then itll give me the repair error, and when i do
*3001#12345#* the phoone shows nothing where when i check the firmware.. sighhhhhhh.. we need this bootloader fix

Originally Posted by macchap

Hi,

[snip]
So, I

DFU Restored the phone to 1.1.1 with error 1011
Ran Ziphone -e with original zibri.dat

Everyone please notice the error which runs very quickly on the screen

Code:

AppleMRVL868x: Reading EEPROM data
AppleMRVL868x: Starting
AppleMRVL868x: Invalid calibration data in device tree

Thats our first problem. The EEPROM is completely corrupt. So....

I modifyed Ziphone 2.0's zibri.dat (as discussed in my earlier post) with bbupdater -e eeprom.eep

Well that fixed the error. But again restoring through iTunes would not work. Even restore to 1.1.3 gave me 1603 error in both recovery & DFU mode. I discovered that was my our next problem. So added iUnlock ICE03.14.08_G.fls eliteloader.bin (I didnt mind if it would zero out my seczone). That was the first time it ran successfully and ended with

Code:

FW are equal

Which is really a very very happy news. But still iTunes restore was not successful. So finally did

bbupdater -f ICE03.14.08_G.fls (dont use the .eep file at all)

But this particular command kept repeating itself to infinity even though it was supposed to be executed only once. I'm still trying to figure out why. But here is the MAJOR TRICK YOU SHOULD FOLLOW CAREFULLY IF YOU ARE TRYING WITH THIS. When bbupdater flashes .fls, it generally displays many lines of status. It would run like ProgressUpdated: 1, ProgressUpdated: 2.... All the way upto ProgressUpdated : 100
This would actually run twice for one single execution of the command (one for loading the fls and one for flashing it) But I let it ran twice (2 command executions) and before the 3rd flash could be executed, I switched off the phone by pressing the home and power button. YOU NEED TO START PRESSING THEM TOWARDS THE END OF THE SECOND EXECUTION ITSELF. Then only it will switch off before the 3 flash.

Then I rebooted the phone and it gave "BSD root: md0, major 2, minor 0" error. Restart again yielded in activate screen. But now, the information button showed IMEI: Unknown ICCID Unknown. Thats was it. I DFU restored to 1.1.1 and BOOM it went through without any error this time. Slide to emergency *3001#12345#* and version showed firmware 3.14.08. Then jailbroke with #301 method and oktoprep and 1.1.2 and unlocked with anysim1.2.1 and its working now.

I need some rest before going to 1.1.3. Note: After you successfully restore to 1.1.1, dont update to 1.1.3 and try to use ziphone it again takes us back to square one.

Really sorry if this sounds greek and latin. I will try to put up a decent step by step guide along with the zibri.dat I used after some rest.

Cheers,
Sara

Hi Sara, hi all of you! I'm having the same problem... I was also trying a similar solution modifying ziphone, but without success, when I found your post. So I tried to follow your same steps, but I'm stuck with two problems: when I run bbupdater -e eeprom.eep it keep trying to flash the eeprom for ten times then it exits saying the bootloader is too old, so I can't get off of the "AppleMRVL868x: Invalid calibration data in device tree" error. Subsequently when I try to go with iUnlock ICE03.14.08_G.fls eliteloader.bin it just stucks on the phrase "Monkeys coming out of your ass Bruce Almighty style"... Do you have any suggestions? Anyway I will keep on trying, your example teach me there still is a chance to recover this brick!! Thanks!

Ludo

Originally Posted by macchap

Hi,

After being highly disappointed because I could not get any furitful support from anybody, I decided that I would not resign without solving this and finally succeeded after 13 hours of no stop efforts.

This is what I did in short. The problem we have (I prefer to say had) is not just one its multiple.

The first symptom we all so far missed out is actually very easy. When your phone is on the "Slide to emergency" screen, press the circled i portion. The IMEI and ICCID is BLANK. But actually it should be Unknown for both of them. So, I

DFU Restored the phone to 1.1.1 with error 1011
Ran Ziphone -e with original zibri.dat

Everyone please notice the error which runs very quickly on the screen

Code:

AppleMRVL868x: Reading EEPROM data
AppleMRVL868x: Starting
AppleMRVL868x: Invalid calibration data in device tree

Thats our first problem. The EEPROM is completely corrupt. So....

I modifyed Ziphone 2.0's zibri.dat (as discussed in my earlier post) with bbupdater -e eeprom.eep

Well that fixed the error. But again restoring through iTunes would not work. Even restore to 1.1.3 gave me 1603 error in both recovery & DFU mode. I discovered that was my our next problem. So added iUnlock ICE03.14.08_G.fls eliteloader.bin (I didnt mind if it would zero out my seczone). That was the first time it ran successfully and ended with

Code:

FW are equal

Which is really a very very happy news. But still iTunes restore was not successful. So finally did

bbupdater -f ICE03.14.08_G.fls (dont use the .eep file at all)

But this particular command kept repeating itself to infinity even though it was supposed to be executed only once. I'm still trying to figure out why. But here is the MAJOR TRICK YOU SHOULD FOLLOW CAREFULLY IF YOU ARE TRYING WITH THIS. When bbupdater flashes .fls, it generally displays many lines of status. It would run like ProgressUpdated: 1, ProgressUpdated: 2.... All the way upto ProgressUpdated : 100
This would actually run twice for one single execution of the command (one for loading the fls and one for flashing it) But I let it ran twice (2 command executions) and before the 3rd flash could be executed, I switched off the phone by pressing the home and power button. YOU NEED TO START PRESSING THEM TOWARDS THE END OF THE SECOND EXECUTION ITSELF. Then only it will switch off before the 3 flash.

Then I rebooted the phone and it gave "BSD root: md0, major 2, minor 0" error. Restart again yielded in activate screen. But now, the information button showed IMEI: Unknown ICCID Unknown. Thats was it. I DFU restored to 1.1.1 and BOOM it went through without any error this time. Slide to emergency *3001#12345#* and version showed firmware 3.14.08. Then jailbroke with #301 method and oktoprep and 1.1.2 and unlocked with anysim1.2.1 and its working now.

I need some rest before going to 1.1.3. Note: After you successfully restore to 1.1.1, dont update to 1.1.3 and try to use ziphone it again takes us back to square one.

Really sorry if this sounds greek and latin. I will try to put up a decent step by step guide along with the zibri.dat I used after some rest.

Cheers,
Sara

Hi Sara
I am very happy that you found solution and repair your phone.
is it possible to share these files with us, so me and others who have same problems will be able to fix there iphones.

best regards
MAK

And....that's it???, all this silence....., there's no way to fix our brick???, are u still there?

Please Help Us Sara please plase plase

yep can you explain the steps a little bit more, and share with us the modified files?
thanks