How to unlock 1.1.3 firmware with the 4.6 bootloader (Windows XP / Vista)

How to unlock 1.1.3 firmware with the 4.6 bootloader. This would work on any phone out of the box from February 10, 2008 thats running 1.1.2 or 1.1.3 iPhone firmware and 4.06 boot loader.

(Windows XP / Vista)

1. If you aren't sure your brand new shiny iPhone is on 1.1.3 firmware there is an easy way to check. You should do this if in doubt since you can't use the unlock method I will use in this guide on iPhones with the 3.9 bootloader. Turn on the iPhone. You'll be at the slide for emergency screen, so slide. At the keypad dial *3001#12345#* then press the green phone button.
2. Press Versions. If you see 04.03.13_G, then you have a 1.1.3 iPhone. Press the Home button.
3. Plug the iPhone into your computer. Launch iTunes. You should see the Welcome to your new iPhone screen.
4. Put the iPhone into DFU mode. Do this by pressing and holding both the Sleep/Wake button and the Home button for 10 seconds. At this point the screen will turn black, and the iPhone will appear to be off.
5. Let go of the Sleep/Wake button and continue to hold the Home button. In approximately 10 seconds iTunes will give an alert sound and a pop up will appear announcing that it has detected an iPhone in recovery mode. Dismiss the pop up.
6. Now press the Option key on your keyboard and click the Restore button. A file browser window will open. Point it to where you have the 1.1.1 firmware file downloaded to your computer already. Select the .ipsw file and click Open. Note: if you do not have this firmware file downloaded already, then click here to download it.
7. Various messages will appear throughout the restore process.
8. When it has completed you will get a pop up indicating error 1015. You will also get the graphic of a cable pointing to the iTunes icon on the iPhone.
9. You'll now get a pop up about recovery mode. Dismiss it.
10. Eject the iPhone from iTunes and then close iTunes.
11. Download iBrickr here. Launch iBrickr. It will tell you that recovery mode was detected. Click the Boot the phone link. Your iPhone's screen should turn red and iBrickr will give you this message. Note: if your iPhone's screen turns green, then you MUST restore to 1.1.1 firmware again. It will turn red the next time you do this. This is a common problem when downgrading 1.1.3 firmware.
12. The iPhone should chirp and then display this screen.
13. Now it is time to jailbreak the 1.1.1 firmware. You should be at the activate iPhone screen. Slide the emergency slider. Enter the following into the keypad: *#307# then press Call.
14. The iPhone will ring, press the X button at the top to delete all the characters you just entered. Now enter: 0 then press Call again while it is still ringing. Now press Answer.
15. Press hold. Press Decline.
16. You will now be at the iPhone's main keypad.
17. Press the Contacts button below.
18. You are now at the contacts screen. Press the + in the upper right corner to make a new contact. Press the First Last button.
19. Enter A for the first name then press Save in the upper right corner. Now press the Add new URL button.
20. Enter: prefs: then press Save in the upper right corner. It will take you back a screen.
21. Press the Add new URL button. Enter http://jailbreakme.com Then press Save.
22. Press the Save button.
23. Press the home page prefs: button. You will now be at the Settings screen. Press General.
24. Press the Auto-Lock button. Now press Never.
25. Then go back to the Settings screen. Press the Wi-Fi button. Select your network from the list.
26. Enter your password and press Join. You should now be connected to your Wi-Fi network.
27. Press the Home button and you will be taken back to the activate iPhone screen. Slide the emergency slider again. Enter: 0 then press Call.
28. Now press Answer. Press hold.
29. Press Decline. You will now be at the contacts screen again. Press the A button.
30. Press the home http://jailbreakme.com button.
31. Scroll down the screen. Press the Install AppSnapp button. Safari should crash after a few seconds.
32. Once Safari crashes it will send you back to the activate iPhone screen. Wait about 20 seconds and the slide to unlock animation should freeze, then the iPhone will reboot. You'll see the Apple logo, then you will be at the screen with the slide to unlock slider again. Slide it and you will be at the SpringBoard.
33. You will now have access to the SpringBoard. The iPhone is now jailbroken and activated.
34. Launch the Installer. Click the Install icon and scroll down the list of folders to Tweaks (1.1.1). Press it.
35. Press OktoPrep and install it. You'll get this message once it has been installed. Press the Home button when done.
36. Launch iTunes and connect your iPhone. Since 1.1.3 firmware (or even newer) is available, you must ensure that you have already downloaded 1.1.2 firmware and saved it on your computer. If you do not already have the 1.1.2 firmware file on your computer then you can download it here. Press the Shift button on your keyboard and click Update.
37. A file browser window will appear. Navigate to where your 1.1.2 firmware file is, select it and click Open.
38. If you did this correctly you will see an updating message, and not a restoring message. Various messages will appear as the process continues. Note: if you get an Error 6 message, restore to 1.1.1 firmware, and try again.
39. When the update process has completed you will get a 1015 error. Click OK. The iPhone will now display a graphic of a cable pointing to the iTunes icon.
40. You'll now get a pop up about recovery mode. Dismiss it.
41. iTunes will now look like this.
42. Eject the iPhone from iTunes and then close iTunes.
43. Launch iBrickr. It will tell you that recovery mode was detected. Click the Boot the phone link. Your iPhone's screen should turn red and iBrickr will give you this message.
44. The iPhone should chirp and then display this screen.
45. Download the 1.1.2 jailbreak program here. Decompress the file and open the folder. Double click the windows.bat file. If nothing happens when you click this file, then you do not have a Java Runtime Environment installed on your computer. No problem, go here to download Java for free.
46. If you do have Java installed you'll see this screen and a DOS window which I won't display but will give you status for this upcoming final step. This is the 1.1.2 jailbreak program. Make sure you check the box for installing SSH (if you want SSH installed on your iPhone). You could add this later with the Installer. Note: If installing SSH this is the best time to set your root password on the iPhone. The program is showing alpine (by default), you can set this to your own password now. When you are ready, click the Jailbreak! button. Note: if your are unable to connect to the iPhone, there are two solutions: - press CTRL + ALT + DEL and end the process for the iTunesHelper.exe, otherwise create a new user account, and attempt the jailbreak again.
47. A few status messages will appear.
48. The iPhone will then reboot a couple of times and this message will appear. When you have access to the SpringBoard click OK on the pop up.
49. iTunes should recognize your iPhone. Ignore the content on the iPhone, yours should obviously not have any at this point.
50. Press Settings, General, Auto-Lock and make sure it is set to Never. Launch the Installer and go to the Sources folder.
51. Install Community Sources. When it has finished, you should be prompted to update the Installer so do that too.
52. Now press the All Packages folder. Press Bigboss's Beta/Experi... Install it. Scroll back down to the Unlocking Tools folder. Press Geohots Gunlock Script. Install it. Next, go to the System folder and install BSD Subsystem. You can also find Term-vt100 in the System folder. Install it. Now press the Home button to relaunch the Springboard. Press Settings, then turn on Airplane Mode.
53. Press the Home button and launch the Terminal on the iPhone. Enter the following commands: first this: cd /usr/bin then this: geounlock
54. The airplane graphic will fly away and you will see no signal bars again, but you are still in airplane mode. This process should take about 2 minutes to complete. A lot of code will scroll by on the screen. Do not interrupt it. When you see "Enjoy your unlocked iPhone..." you can press the Home button to get back to the SpringBoard.
55. Press Settings, then turn Airplane Mode off.
56. Launch the Installer and go to the System folder. Press Official 1.1.3 Upgrader and install it.
57. Press OK at the notice, then press the Home button and you'll see the Upgrade icon on the SpringBoard. Launch it.
58. At the patch lockdownd question, press Yes if you DO NOT use AT&T, or O2, or any other authorized Apple cell phone service provider. Press No if you do use an Apple authorized cell phone service provider. For most of us hackers out there, we do not use iTunes to activate our iPhones so you should press Yes.
59. You will then be asked if you would like to restore your iPhone first. For the purposes of this tutorial you can say no since you have a phone with nothing on it anyway. If you have been using 1.1.2 for a while and have added applications and data (and don't mind losing it) then you should probably choose Yes to avoid any conflicts with this jailbreak.
60. You will see a progress display for several processes.
61. The screen will go black and the iPhone will reboot. You'll see the Apple logo for about a minute then you will be taken to the slide to unlock screen. My T-Mobile SIM was recognized immediately. The edit home screen pop up will appear next. Note: there was a big jump in time to the slide to unlock screen when the phone adjusted automatically to the local time zone I believe. It did not take an hour to write the image.
62. Pressing and holding an icon makes them all wiggle. Press an icon and drag it anywhere on the screen or to another screen.