I have an iPhone 3GS 3.1.2 stuck in DFU mode and home+power won't work. I'm trying to manually bring it back with iRecovery + the USB exploits. It seems that you can bootstrap the system to iBoot by sending a file with iRecovery, which should be the payload injection used in redsn0w. Does any have an idea how I can extract this? Thanks.