it's done by Gbootloader on the first day hot posted it.
anyone help? how can i restore to 3.9 or 4.6? I also tried all virginize methods to restore my IMEI but i think it has been completely erased...

Now my phone is in 1.1.3, anysim unlocked, i have everything working but i don't think a 3.8BL and 0049IMEI will take me anywhere in the future?

Originally Posted by luchao18

it's done by Gbootloader on the first day hot posted it.
anyone help? how can i restore to 3.9 or 4.6? I also tried all virginize methods to restore my IMEI but i think it has been completely erased...

Now my phone is in 1.1.3, anysim unlocked, i have everything working but i don't think a 3.8BL and 0049IMEI will take me anywhere in the future?

Take a look at ZiPhone 2.3. http://www.ziphone.org/

You may be the first guy to try it, and I can't bear responsibility if this doesn't work... but consider this:

1) Ienew erased parts of the BB FW, so that the A17 pull-up would fool the bootrom into thinking the "bootrom locations" were blank.

2) Iunew, with the A17 testpoint, fooled the bootrom into flashing a new BL.

3) Geohot states that in Gbootloader he has protections to prevent a BL without the bootrom locations blank from being uploaded.

4) THEREFORE, if my logic is correct, you now have the bootrom locations blank and can simply run iunew without the testpoint and with the NOR corresponding to your chosen BL.

5) If my logic is correct, anyone with a downgraded BL39 can do this too.

I would love to hear feedback from anyone trying this. Again, I cannot bear responsibilty if this doesn't work. You may be the first to try.

where did u get a 3.8 bootloader nor ?? It`s supposed to be 3.9

Originally Posted by drg

You may be the first guy to try it, and I can't bear responsibility if this doesn't work... but consider this:

1) Ienew erased parts of the BB FW, so that the A17 pull-up would fool the bootrom into thinking the "bootrom locations" were blank.

2) Iunew, with the A17 testpoint, fooled the bootrom into flashing a new BL.

3) Geohot states that in Gbootloader he has protections to prevent a BL without the bootrom locations blank from being uploaded.

4) THEREFORE, if my logic is correct, you now have the bootrom locations blank and can simply run iunew without the testpoint and with the NOR corresponding to your chosen BL.

5) If my logic is correct, anyone with a downgraded BL39 can do this too.

I would love to hear feedback from anyone trying this. Again, I cannot bear responsibilty if this doesn't work. You may be the first to try.

Nevermind, I just got confirmation from Zibri that the bootrom locations are NOT blank.