Sn0wbreeze 1.7 for iOS 4.0 has been released. This jailbreak supports following iDevices
1. iPhone 3GS (Old bootrom)
2. iPhone 3GS (New bootrom having SHSH stored on cydia for 3.1.2 or running jailbroken 3.1.2)
3. iPod touch 2G (non-MC models)
4. iPod Touch 2G (MC models having SHSH stored on cydia for 3.1.2 or running jailbroken 3.1.2)
5. iPod Tocuh 3G (having SHSH stored on cydia for 3.1.2 or running jailbroken 3.1.2)
2nd, 4th and 5th will be tethered jailbreak, means you need to re-connect to computer whenever you reboot iDevice.
I have jailbroken iPhone 3GS(New bootroom having jailbroken 3.1.2, SHSH not saved for 3.1.2) by following these instructions.
Step 1. Download following software
- iTunes 9.2
- Payload Pwner-r3 for the 3GS
- iBooty V1.3
- LibUSB Installer (Step 4)
- iPhone 3.1.2 and iOS 4 for iPhone 3GS
- Download 7-Zip or another un-archiver
Step 2. Install iTunes 9.2
Step 3. Connect iPhone to PC and take backup of iPhone using iTunes. You can remove iPhone after backup is over.
Step 4. (Installing LibUSB)
Windows XP Users download this installer — LibUSB Installer. Install it as you install any other program.
Windows Vista & Windows 7 (32 Bit)
I am running Windows Vista 32 bit, I downloaded LibUSB from here. Right click on LibUSB installer(libusb-win32-filter-bin-0.1.12.1.exe), Go to compatibility tab and check “Run this program in compatibility mode for Windows XP (Service Pack 2) “. Press ok. Again right click on LibUSB installer (libusb-win32-filter-bin-0.1.12.1.exe). Click on run as Administrator option and install it. Windows 7 (32 Bit) can follow above instructions.
Windows Vista & Windows 7 (64 Bit)
If you are on Windows Vista (64 bit) or Windows 7 (64 bit), read instructions carefully.
Step 5. Extract iBooty-V1.3, Extracted folder will contain following files
iBooty.exe
irecovery.exe
readline5.dll
sn0w.img
wait.img
Step 6. Click on Payload Pwner-r3. It will ask for 3G[S] 3.1.2.ispw. Locate "iPhone2,1_3.1.2_7D11_Restore.ispw" file on the disk (Downloaded earlier). This will create a payload + iBEC. Save them in a location where you saved all above download and give folder a name say “payload”.
This folder will contain two files ibec.40 and iboot.payload, move them to the folder where you extracted iBooty-V1.3 (Previous step).
Step 7. Click on sn0wbreeze-V1.7 to create a custom firmware
- Connect iPhone to your PC
- Select Expert Mode and click on Blue Arrow at right bottom, Installer will now ask for OS 4.ispw, after verifying ispw, it may show a waring in case if you are on jailbroken 3.1.2 and don’t have SHSH for 3.1.2. Ignore this warning
- Select general option and click on Next. This will show you an option window and first option “Activate The iPhone” selected. Check “Disable NOR Flash” (This is must for new bootrom)
- If you are jailbreaking iPhone 3GS then all other options are implicitly checked (UI doesn’t show checked)
- Click next and again next and then select Cydia(need for carrier unlock) and Rock(If you need it)
- Select any custom app if you want them part of custom firmware and move to next step
- Uncheck Boot logo and Recovery Logo and click on next(Blue) button.
- You’ll get the same screen as on 3rd step. Select “Build ISPW” option now and click Next button.
- This will create a sn0wbreeze_iPhone 3GS-4.0.ispw file on your desktop.
Step 8. Extract sn0wbreeze_iPhone 3GS-4.0.ispw created by sn0wbreeze with 7-Zip or another un-archiver.
Step 9. Grab
kernelcache.release (In root directory where you extracted )
DeviceTree.n88ap (\Firmware\all_flash\all_flash.n88ap.production\)
move these files to the folder where you extracted iBooty-V1.3 (Step 5) and rename kernelcache.release to kernal.40 and DeviceTree.n88ap to devtree.40.
Step 10. iBooty-V1.3 extracted folder will contain following files
irecovery.exe <-- Comes with iBooty.
readline5.dll <-- Comes with iBooty.
iBooty.exe <-- Comes with iBooty.
sn0w.img3 <-- Comes with iBooty.
wait.img3 <-- Comes with iBooty.
iboot.payload <-- Created with Payload Pwner.
ibec.40 <-- Created with Payload Pwner.
devtree.40 <-- Grabbed from Custom IPSW made by sn0wbreeze.
kernel.40 <-- Grab from Custom IPSW made by sn0wbreeze.
Step 11. Connect iPhone if you disconnected and run iBooty.exe and Select “Prepare Device for Custom Firmware”. Run the Process and if you see the image, you can proceed!
Step 12. Now open iTunes 9.2 and restore to the sn0wbreeze_iPhone 3GS-4.0.ispw by using Shift + Restore option.
Step 13. Wait for iTunes to complete restore process. After the process is finished, your device WILL NOT BOOT. Close iTunes and check your process list if iTuneHelper.exe is running then kill this process too. Now re-run iBooty.exe (tethered) and now select on “Boot It”.
Step 14. If all goes well it will boot!
To unlock iOS 4, follow step by step guide posted here
Some more tips if you are stuck in show boot image logo
- Close itunes and Kill iTunesHelper from task list.
- hold Home + Power button until screen flashing and automatic go into recovery mode
- Again close iTunes detect recovery mode.
- Run ibooty wait until everything is done.
- Stuck on logo snow now. Now run iTunes then finally you got log screen