We have already shared a method to jailbreak iOS 4.3 b1 on iPhone 4 using PwnageTool but that method makes a broken ramdisk causing many problems after jailbreak. Moreover the baseband is not preserved when you restore the custom iOS 4.3 to your phone in that method.
To resolve such problems, PwnageTool bundle is now available. However the jailbreaking procedure with this bundle is complex and hence is meant for advanced users only.
Part 1: Copying PwnageTool Bundles to PwnageTool
Step 1: Download Pwnagetool for iOS 4.3 jailbreak.
Step 2: Download PwnageTool bundles (direct download link) and unzip the file.
Step 3: Copy PwnageTool that you downloaded in Step 1 to a folder on your desktop. Right click, and then click on “Show Package Contents”.
Step 4: Read the ReadMe file included in zipped foler for more details.
Par 2: Modifying the Restore ramdisk Manually
As we have told you that the original PwnageTool breaks the ramdisk on iOS 4.3, so you will have to make the ramdisk manually. Again it is to remind you that these steps are for advanced users only.
Step 1: Launch PwnageTool modified in Part 1.
Step 2: Follow the below mentioned instructions to modify ramdisk. For more details visit here.
Tools needed: OS X, xpwntool
- Unpack the original ramdisk:
xpwntool orig_restore_rd.dmg restore_rd.dec.dmg -iv .. -k ..(use the keys from wiki)- Mount the ramdisk:
hdiutil attach restore_rd.dec.dmg- Free up some space:
rm /Volumes/ramdisk/(some unneeded large-ish file)- Patch asr:
mv /Volumes/ramdisk/usr/sbin/asr /tmp/; bspatch /tmp/asr /Volumes/ramdisk/usr/sbin/asr (bundle_path)/asr.patch- Change the restore options: edit
/Volumes/ramdisk/usr/local/share/restore/options.plistwith Property List Editor, add ‘UpdateBaseband’ = false – see http://theiphonewiki.com/wiki/index.php?title=Preventing_Baseband_Update for details- Unmount the ramdisk:
hdiutil detach /Volumes/ramdisk- Re-encrypt the ramdisk:
xpwntool restore_rd.dec.dmg pwned_restore_rd.dmg -t orig_restore_rd.dmg -iv .. -k ..- Replace the ramdisk inside of CFW produced by the Pwnage Tool with
pwned_restore_rd.dmgYou can either unzip and re-zip the CFW or replace it inside of /tmp/ipsw dir when PwnageTool is running.
Part 3: Cooking Custom iOS 4.3 beta 1 firmware and Restoring it on iPhone 4
The remaining steps are same as we have mentioned in our previous post. Follow the steps posted here to make custom iOS 4.3 and restore it on iPhone 4.
Note:
- Cydia is said to be working on iOS 4.3 Beta.
- It is a semi-tethered jailbreak.
- Your baseband will not be upgraded during restore process.
- Use a utility like tetheredboot to boot into tethered mode.
Disclaimer: This guide is posted for educational and testing purposes only. Use it at your own risk. Please don’t follow it if you don’t know what you are going to do. General unlockers and jailbreakers MUST NOT try it.
