Posted on October 25, 2010 by   iOS 4.1, iPhone 3gS, iPhone 4, iRecovery, Jailbreaking, PwnageTool, PwnStrap, Windows   2 Comments

Use PwnStrap to install pre-jailbroken firmware on Windows 3Gs+

    So a few days ago, I made a post with a bunch of pre-jailbroken firmware. Some people have been having issues restoring this firmware since they do not have access to a Mac and cannot use the special Pwnage Tool DFU button to bootstrap. This method is for Windows users with a 3Gs or newer device that would like to install our pre-jailbroken 4.1 firmware files.

    *PLEASE NOTE* This method is for advanced users only, if you do not understand these instructions, please wait for a more user-friendly method to be released.

    Required files:

    Automated Procedure:

    1. Place your device into Recovery Mode.While the phone is off, hold down the Home button and immediatly plug it into your computer.
    2. In a command prompt (Start>Run>"cmd"), change to the directory where you extracted irecovery, run irecovery.exe -p Path\To\Firmware.ipsw
    3. Follow the instructions.

    Manual Procedure

    1. Put phone into Recovery mode (NOT DFU) While the phone is off, hold down the Home button and immediatly plug it into your computer.
    2. From a command prompt (Start>Run>"cmd"), change to the directory where you extracted irecovery, and enter
      irecovery -s
      followed by:
      setenv boot-args 2
      setenv auto-boot false
      saveenv
      /exit
    3. Run greenpois0n - it will guide you to DFU mode, then it will stop on a white screen after you click "Jailbreak". It should say "Jailbreak Complete!" and NOT "Jailbreak Failed!" next to the progress bar at the bottom.
    4. Extract the iBSS from your custom PwnageTool image (firmware.ispw/Firmware/dfu/iBSS.BoardID.RELEASE.dfu) into your irecovery folder. (You can use WinRAR or another ZIP extractor to do this. IPSW files are really just ZIP files!)
    5. In the command prompt enter irecovery -f iBSS (iBSS should be replaced with the name of the iBSS that you just extracted from the pwnagetool image - ie iBSS.n88ap.RELEASE.dfu)
    6. In the command prompt enter:
      irecovery -s
      setenv boot-args 0
      saveenv
      go image decrypt 0x41000000
      go jump 0x41000040
      /exit

      At the "go jump" point your device should appear to reboot. Whether it goes back to a white screen or shows the Connect to iTunes screen depends on the firmware image used.

    7. Restore your iPhoneBlogr pre-jailbroken firmware using shift+restore in iTunes.
    , , , , , , , ,
    • dyglesias

      I don’t get the timing of the step 1… It’s confusing…

      I have to get iPhone in recovery mode (with itunes and usb on screen)… and while the iphone is off, press home button and connect to computer…. so…. which one is first?

      Could you please explain a little this first step, and how critical it is, for this method to work…

      THANKS!!!

    • Pingback: Great news for Windows users looking to restore pre-jailbroken firmware | iPhone Blogr