Line 1: |
Line 1: |
| | === Downgrade or Restore iPhone 4 running iOS 7 to iOS 6 === |
| | |
| | * iPhone 4 GSM version |
| | * macOS Big Sur |
| | * Pluvia |
| | * iOS 6.1.3 ipsw |
| | |
| | # [http://appldnld.apple.com/iOS6.1/091-2610.20130319.Bedr4/iPhone3,1_6.1.3_10B329_Restore.ipsw Download] iOS 6.1.3 from Apple |
| | # [https://github.com/parrotgeek1/Pluvia Download] Pluvia from GitHub |
| | # Open Terminal |
| | # ‘cd’ to extracted folder with Pluvia |
| | # Type ‘./make’ then tab or fully type out “make_ipsw.sh” then drag and drop the path to the .ipsw file, hit enter to run the script. Takes about 2 minutes |
| | # Put iPhone into DFU mode (this can be done while waiting for the script above to finish) |
| | ## Connect iPhone by USB to Mac (it will power on if not already) |
| | ## Power off iPhone |
| | ## Hold the Power button for 3 seconds. |
| | ## Hold the Home button without releasing the Power button for 10 seconds |
| | ## Release the Power button but keep holding the Home button |
| | ## Keep holding until iTunes/Finder alerts saying iPhone is in recovery mode |
| | # Type “./restore” then tab or fully type out “restore.sh” then drag and drop the path to the patched .ipsw file, hit enter to run the script. Takes about 5 minutes. There will be one expected error message involving FDR. Ignore it. |
| | |
| | <syntaxhighlight lang="shell"> |
| | Last login: Tue Dec 28 18:31:42 on ttys000 |
| | user@Jesses-MacBook-Pro ~ % cd /Users/user/Downloads/Pluvia-main |
| | user@Jesses-MacBook-Pro Pluvia-main % ./make_ipsw.sh /Users/user/Downloads/iPhone3\,1_6.1.3_10B329_Restore.ipsw |
| | Getting iBoot keys for iPhone3,1 iOS 6.1.3 (10B329) |
| | Downloading 7.1.2 IPSW for n90ap to get bootchain files |
| | ######################################################################### 100.0% |
| | Extracting 7.1.2 bootchain components |
| | Extracting iBoot from IPSW |
| | Patching iBoot |
| | Creating patched IPSW (this will take several minutes) |
| | Replacing bootchain components |
| | Extracting ramdisk from IPSW |
| | Patching ramdisk |
| | Adding patched ramdisk to IPSW |
| | Created patched IPSW at: /Users/user/Downloads/iPhone3,1_6.1.3_10B329_Restore_Patched.ipsw |
| | user@Jesses-MacBook-Pro Pluvia-main % ./restore.sh /Users/user/Downloads/iPhone3\,1_6.1.3_10B329_Restore_Patched.ipsw |
| | Downloading SHSH for ECID 0x000003E99103150E |
| | Version: 9ce5e00fdeaba8d7e763a028d32b11937839d2f9 - 268 |
| | [TSSC] manually specified ecid to use, parsed "0x000003E99103150E" to dec:4301695161614 hex:3e99103150e |
| | [TSSC] opening BuildManifest.plist |
| | [TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2 |
| | [TSSR] Sending TSS request attempt 1... success |
| | also requesting APTicket for installType=Update |
| | [TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2 |
| | [TSSR] Sending TSS request attempt 1... success |
| | [TSSR] User specified not to request a Baseband ticket. |
| | [TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2 |
| | [TSSR] Sending TSS request attempt 1... success |
| | Saved shsh blobs! |
| | |
| | iOS 7.1.2 for device iPhone3,1 IS being signed! |
| | *** based on SHAtter exploit (segment overflow) by posixninja and pod2g *** |
| | Found: CPID:8930 CPRV:20 CPFM:03 SCEP:01 BDID:00 ECID:000003E99103150E IBFL:00 SRTG:[iBoot-574.4] |
| | Device is now in pwned DFU Mode. |
| | |
| | IMPORTANT: an "FDR" error is normal, ignore it |
| | |
| | Found device in DFU mode |
| | Identified device as n90ap, iPhone3,1 |
| | Extracting BuildManifest from IPSW |
| | Product Version: 6.1.3 |
| | Product Build: 10B329 Major: 10 |
| | Device supports Image4: false |
| | Variant: Customer Erase Install (IPSW) |
| | This restore will erase your device data. |
| | Extracting filesystem from IPSW: 048-2748-005.dmg |
| | [==================================================] 100.0% |
| | Found ECID 4301695161614 |
| | Getting ApNonce in DFU mode... |
| | checking for local signing tickets |
| | Using cached signing tickets |
| | Extracting iBSS.n90ap.RELEASE.dfu... |
| | Personalizing IMG3 component iBSS... |
| | reconstructed size: 67853 |
| | Sending iBSS (67853 bytes)... |
| | [==================================================] 100.0% |
| | Nonce: e7 b6 43 52 b3 8e b5 36 05 21 22 f5 90 69 b3 a1 84 ec ce c9 |
| | checking for local signing tickets |
| | Using cached signing tickets |
| | Extracting iBEC.n90ap.RELEASE.dfu... |
| | Personalizing IMG3 component iBEC... |
| | reconstructed size: 280845 |
| | Sending iBEC (280845 bytes)... |
| | [==================================================] 100.0% |
| | INFO: device serial number is 7V101W89A4S |
| | Getting ApNonce in recovery mode... e7 b6 43 52 b3 8e b5 36 05 21 22 f5 90 69 b3 a1 84 ec ce c9 |
| | Sending APTicket (2741 bytes) |
| | Recovery Mode Environment: |
| | iBoot build-version=iBoot-1537.9.55 |
| | iBoot build-style=RELEASE |
| | Sending AppleLogo... |
| | Extracting applelogo@2x.s5l8930x.img3... |
| | Not personalizing component AppleLogo... |
| | Sending AppleLogo (15172 bytes)... |
| | ramdisk-size=RELEASE |
| | Extracting 048-2441-007.dmg... |
| | Not personalizing component RestoreRamDisk... |
| | Sending RestoreRamDisk (16099476 bytes)... |
| | Extracting DeviceTree.n90ap.img3... |
| | Not personalizing component RestoreDeviceTree... |
| | Sending RestoreDeviceTree (74248 bytes)... |
| | Extracting kernelcache.release.n90... |
| | Not personalizing component RestoreKernelCache... |
| | Sending RestoreKernelCache (7415924 bytes)... |
| | About to restore device... |
| | Waiting for device... |
| | Device 9b8949962bcbeaeb0e10dfb68a757f01145e5cb2 is now connected in restore mode... |
| | Connecting now... |
| | Connected to com.apple.mobile.restored, version 12 |
| | Device 9b8949962bcbeaeb0e10dfb68a757f01145e5cb2 has successfully entered restore mode |
| | Hardware Information: |
| | BoardID: 0 |
| | ChipID: 35120 |
| | UniqueChipID: 4301695161614 |
| | ProductionMode: true |
| | Starting FDR listener thread |
| | ERROR: Unable to connect to FDR client (-2) |
| | ERROR: Failed to start FDR Ctrl channel |
| | Waiting for NAND (28) |
| | Creating partition map (11) |
| | Creating filesystem (12) |
| | Creating filesystem (12) |
| | Checking filesystems (15) |
| | Mounting filesystems (16) |
| | Checking filesystems (15) |
| | Mounting filesystems (16) |
| | Unmounting filesystems (29) |
| | Unmounting filesystems (29) |
| | About to send RootTicket... |
| | Sending RootTicket now... |
| | Done sending RootTicket |
| | About to send filesystem... |
| | Connected to ASR |
| | Validating the filesystem |
| | Filesystem validated |
| | Sending filesystem now... |
| | [==================================================] 100.0% |
| | Done sending filesystem |
| | Verifying restore (14) |
| | [==================================================] 100.0% |
| | Checking filesystems (15) |
| | Mounting filesystems (16) |
| | Checking filesystems (15) |
| | Mounting filesystems (16) |
| | About to send KernelCache... |
| | Extracting kernelcache.release.n90... |
| | Not personalizing component KernelCache... |
| | Sending KernelCache now... |
| | Done sending KernelCache |
| | Installing kernelcache (27) |
| | Fixing up /var (17) |
| | Modifying persistent boot-args (25) |
| | About to send NORData... |
| | Found firmware path Firmware/all_flash/all_flash.n90ap.production |
| | Getting firmware manifest from Firmware/all_flash/all_flash.n90ap.production/manifest |
| | Extracting LLB.n90ap.RELEASE.img3... |
| | Personalizing IMG3 component LLB... |
| | reconstructed size: 133593 |
| | Extracting DeviceTree.n90ap.img3... |
| | Not personalizing component DeviceTree... |
| | Extracting applelogo@2x.s5l8930x.img3... |
| | Not personalizing component AppleLogo... |
| | Extracting batterycharging0@2x~iphone.s5l8930x.img3... |
| | Not personalizing component BatteryCharging0... |
| | Extracting batterycharging1@2x~iphone.s5l8930x.img3... |
| | Not personalizing component BatteryCharging1... |
| | Extracting batteryfull@2x~iphone.s5l8930x.img3... |
| | Not personalizing component BatteryFull... |
| | Extracting batterylow0@2x~iphone.s5l8930x.img3... |
| | Not personalizing component BatteryLow0... |
| | Extracting batterylow1@2x~iphone.s5l8930x.img3... |
| | Not personalizing component BatteryLow1... |
| | Extracting glyphplugin@2x~iphone-30pin.s5l8930x.img3... |
| | Not personalizing component BatteryPlugin... |
| | Extracting iBoot.n90ap.RELEASE.img3... |
| | Not personalizing component iBoot... |
| | Extracting recoverymode@2x~iphone.s5l8930x.img3... |
| | Not personalizing component RecoveryMode... |
| | Sending NORData now... |
| | Done sending NORData |
| | Flashing firmware (18) |
| | [==================================================] 100.0% |
| | Updating gas gauge software (46) |
| | Updating gas gauge software (46) |
| | Creating system key bag (49) |
| | Resizing system partition (51) |
| | Unmounting filesystems (29) |
| | Unmounting filesystems (29) |
| | Got status message |
| | Status: Restore Finished |
| | Cleaning up... |
| | DONE |
| | Finished! Enjoy iOS 6.1.3 |
| | user@Jesses-MacBook-Pro Pluvia-main % |
| | |
| | </syntaxhighlight> |
| | |
| === iTunes === | | === iTunes === |
| 7.2 first oldest version of itunes to function, doesn't connect to itunes store, doesn't support audiobooks | | 7.2 first oldest version of iTunes to function (probably because it's the first with Vista support), doesn't connect to iTunes store, supports Audiobooks (needs to be checked in Preferences) |
|
| |
|
| 7.4 has better GUI (selected menu is blue) and audiobooks | | 7.3.2.6 (last version for Windows 2000) appears to work and be stable and has a slightly different GUI where the selected menu option is blue instead of grey |
|
| |
|
| 7.2.0.35 actually does support audiobooks but does not have high quality aac encoder and GUI isn't updated like 7.4 where selected menu is blue
| | ==== Troubleshooting ==== |
| | | For the "itunes.exe has been set to run in compatibility" prompt on startup, find the regkey (Computer\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers) and delete the one with iTunes. For me, Last.FM added it. |
| 7.2.0.35 only uses 26MB of memory!
| |
|
| |
|
| Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers | | Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers |
Line 16: |
Line 214: |
| also remove manually all folders, Common files application support etc. | | also remove manually all folders, Common files application support etc. |
|
| |
|
| itunes 7.4 CD configuration error on startup, just create an empty folder named "CD Configuration" in the iTunes folder in profram files
| | iTunes 7.4 CD configuration error on startup, just create an empty folder named "CD Configuration" in the iTunes folder in program files |
|
| |
|
| i've spent a lot of time on itunes in my life
| | I've spent a lot of time on iTunes in my life |
|
| |
|
| <nowiki>https://www.theiphonewiki.com/wiki/ITunes</nowiki> | | <nowiki>https://www.theiphonewiki.com/wiki/ITunes</nowiki> |
Line 26: |
Line 224: |
| C:\Users\scrip\AppData\Roaming\Apple Computer\iTunes\iPod Software Updates\ | | C:\Users\scrip\AppData\Roaming\Apple Computer\iTunes\iPod Software Updates\ |
| iPod_25.1.3.ipsw iPod photo | | iPod_25.1.3.ipsw iPod photo |
|
| |
|
| |
|
| == FileBot == | | == FileBot == |