Old software

From Jesse's Wiki
Jump to navigation Jump to search

Downgrade or Restore iPhone 4 running iOS 7 to iOS 6

  • iPhone 4 GSM version
  • macOS Big Sur
  • Pluvia
  • iOS 6.1.3 ipsw
  1. Download iOS 6.1.3 from Apple
  2. Download Pluvia from GitHub
  3. Open Terminal
  4. ‘cd’ to extracted folder with Pluvia
  5. Type ‘./make’ then tab or fully type out “make_ipsw.sh” then drag and drop the path to the .ipsw file, hit enter to run the script. Takes about 2 minutes
  6. Put iPhone into DFU mode (this can be done while waiting for the script above to finish)
    1. Connect iPhone by USB to Mac (it will power on if not already)
    2. Power off iPhone
    3. Hold the Power button for 3 seconds.
    4. Hold the Home button without releasing the Power button for 10 seconds
    5. Release the Power button but keep holding the Home button
    6. Keep holding until iTunes/Finder alerts saying iPhone is in recovery mode
  7. Type “./restore” then tab or fully type out “restore.sh” then drag and drop the path to the patched .ipsw file, hit enter to run the script. Takes about 5 minutes. There will be one expected error message involving FDR. Ignore it.
Last login: Tue Dec 28 18:31:42 on ttys000
user@Jesses-MacBook-Pro ~ % cd /Users/user/Downloads/Pluvia-main 
user@Jesses-MacBook-Pro Pluvia-main % ./make_ipsw.sh /Users/user/Downloads/iPhone3\,1_6.1.3_10B329_Restore.ipsw
Getting iBoot keys for iPhone3,1 iOS 6.1.3 (10B329)
Downloading 7.1.2 IPSW for n90ap to get bootchain files
######################################################################### 100.0%
Extracting 7.1.2 bootchain components
Extracting iBoot from IPSW
Patching iBoot
Creating patched IPSW (this will take several minutes)
Replacing bootchain components
Extracting ramdisk from IPSW
Patching ramdisk
Adding patched ramdisk to IPSW
Created patched IPSW at: /Users/user/Downloads/iPhone3,1_6.1.3_10B329_Restore_Patched.ipsw
user@Jesses-MacBook-Pro Pluvia-main % ./restore.sh /Users/user/Downloads/iPhone3\,1_6.1.3_10B329_Restore_Patched.ipsw
Downloading SHSH for ECID 0x000003E99103150E
Version: 9ce5e00fdeaba8d7e763a028d32b11937839d2f9 - 268
[TSSC] manually specified ecid to use, parsed "0x000003E99103150E" to dec:4301695161614 hex:3e99103150e
[TSSC] opening BuildManifest.plist
[TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2
[TSSR] Sending TSS request attempt 1... success
also requesting APTicket for installType=Update
[TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2
[TSSR] Sending TSS request attempt 1... success
[TSSR] User specified not to request a Baseband ticket.
[TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2
[TSSR] Sending TSS request attempt 1... success
Saved shsh blobs!

iOS 7.1.2 for device iPhone3,1 IS being signed!
*** based on SHAtter exploit (segment overflow) by posixninja and pod2g ***
Found: CPID:8930 CPRV:20 CPFM:03 SCEP:01 BDID:00 ECID:000003E99103150E IBFL:00 SRTG:[iBoot-574.4]
Device is now in pwned DFU Mode.

IMPORTANT: an "FDR" error is normal, ignore it

Found device in DFU mode
Identified device as n90ap, iPhone3,1
Extracting BuildManifest from IPSW
Product Version: 6.1.3
Product Build: 10B329 Major: 10
Device supports Image4: false
Variant: Customer Erase Install (IPSW)
This restore will erase your device data.
Extracting filesystem from IPSW: 048-2748-005.dmg
[==================================================] 100.0%
Found ECID 4301695161614
Getting ApNonce in DFU mode... 
checking for local signing tickets
Using cached signing tickets
Extracting iBSS.n90ap.RELEASE.dfu...
Personalizing IMG3 component iBSS...
reconstructed size: 67853
Sending iBSS (67853 bytes)...
[==================================================] 100.0%
Nonce: e7 b6 43 52 b3 8e b5 36 05 21 22 f5 90 69 b3 a1 84 ec ce c9 
checking for local signing tickets
Using cached signing tickets
Extracting iBEC.n90ap.RELEASE.dfu...
Personalizing IMG3 component iBEC...
reconstructed size: 280845
Sending iBEC (280845 bytes)...
[==================================================] 100.0%
INFO: device serial number is 7V101W89A4S
Getting ApNonce in recovery mode... e7 b6 43 52 b3 8e b5 36 05 21 22 f5 90 69 b3 a1 84 ec ce c9 
Sending APTicket (2741 bytes)
Recovery Mode Environment:
iBoot build-version=iBoot-1537.9.55
iBoot build-style=RELEASE
Sending AppleLogo...
Extracting applelogo@2x.s5l8930x.img3...
Not personalizing component AppleLogo...
Sending AppleLogo (15172 bytes)...
ramdisk-size=RELEASE
Extracting 048-2441-007.dmg...
Not personalizing component RestoreRamDisk...
Sending RestoreRamDisk (16099476 bytes)...
Extracting DeviceTree.n90ap.img3...
Not personalizing component RestoreDeviceTree...
Sending RestoreDeviceTree (74248 bytes)...
Extracting kernelcache.release.n90...
Not personalizing component RestoreKernelCache...
Sending RestoreKernelCache (7415924 bytes)...
About to restore device... 
Waiting for device...
Device 9b8949962bcbeaeb0e10dfb68a757f01145e5cb2 is now connected in restore mode...
Connecting now...
Connected to com.apple.mobile.restored, version 12
Device 9b8949962bcbeaeb0e10dfb68a757f01145e5cb2 has successfully entered restore mode
Hardware Information:
BoardID: 0
ChipID: 35120
UniqueChipID: 4301695161614
ProductionMode: true
Starting FDR listener thread
ERROR: Unable to connect to FDR client (-2)
ERROR: Failed to start FDR Ctrl channel
Waiting for NAND (28)
Creating partition map (11)
Creating filesystem (12)
Creating filesystem (12)
Checking filesystems (15)
Mounting filesystems (16)
Checking filesystems (15)
Mounting filesystems (16)
Unmounting filesystems (29)
Unmounting filesystems (29)
About to send RootTicket...
Sending RootTicket now...
Done sending RootTicket
About to send filesystem...
Connected to ASR
Validating the filesystem
Filesystem validated
Sending filesystem now...
[==================================================] 100.0%
Done sending filesystem
Verifying restore (14)
[==================================================] 100.0%
Checking filesystems (15)
Mounting filesystems (16)
Checking filesystems (15)
Mounting filesystems (16)
About to send KernelCache...
Extracting kernelcache.release.n90...
Not personalizing component KernelCache...
Sending KernelCache now...
Done sending KernelCache
Installing kernelcache (27)
Fixing up /var (17)
Modifying persistent boot-args (25)
About to send NORData...
Found firmware path Firmware/all_flash/all_flash.n90ap.production
Getting firmware manifest from Firmware/all_flash/all_flash.n90ap.production/manifest
Extracting LLB.n90ap.RELEASE.img3...
Personalizing IMG3 component LLB...
reconstructed size: 133593
Extracting DeviceTree.n90ap.img3...
Not personalizing component DeviceTree...
Extracting applelogo@2x.s5l8930x.img3...
Not personalizing component AppleLogo...
Extracting batterycharging0@2x~iphone.s5l8930x.img3...
Not personalizing component BatteryCharging0...
Extracting batterycharging1@2x~iphone.s5l8930x.img3...
Not personalizing component BatteryCharging1...
Extracting batteryfull@2x~iphone.s5l8930x.img3...
Not personalizing component BatteryFull...
Extracting batterylow0@2x~iphone.s5l8930x.img3...
Not personalizing component BatteryLow0...
Extracting batterylow1@2x~iphone.s5l8930x.img3...
Not personalizing component BatteryLow1...
Extracting glyphplugin@2x~iphone-30pin.s5l8930x.img3...
Not personalizing component BatteryPlugin...
Extracting iBoot.n90ap.RELEASE.img3...
Not personalizing component iBoot...
Extracting recoverymode@2x~iphone.s5l8930x.img3...
Not personalizing component RecoveryMode...
Sending NORData now...
Done sending NORData
Flashing firmware (18)
[==================================================] 100.0%
Updating gas gauge software (46)
Updating gas gauge software (46)
Creating system key bag (49)
Resizing system partition (51)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
Cleaning up...
DONE
Finished! Enjoy iOS 6.1.3
user@Jesses-MacBook-Pro Pluvia-main %

iTunes

7.2 first oldest version of iTunes to function (probably because it's the first with Vista support), doesn't connect to iTunes store, supports Audiobooks (needs to be checked in Preferences)

7.3.2.6 (last version for Windows 2000) appears to work and be stable and has a slightly different GUI where the selected menu option is blue instead of grey

Troubleshooting

For the "itunes.exe has been set to run in compatibility" prompt on startup, find the regkey (Computer\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers) and delete the one with iTunes. For me, Last.FM added it.

Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers

remove items from add and remove programs

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products

also remove manually all folders, Common files application support etc.

iTunes 7.4 CD configuration error on startup, just create an empty folder named "CD Configuration" in the iTunes folder in program files

I've spent a lot of time on iTunes in my life

https://www.theiphonewiki.com/wiki/ITunes

https://ipsw.me/iTunes

C:\Users\scrip\AppData\Roaming\Apple Computer\iTunes\iPod Software Updates\ iPod_25.1.3.ipsw iPod photo

FileBot

Useful for renaming tv shows and movies by querying theMovieDB

Oldest free version is 4.7.7

Install. Likely will get warning that Java Runtime 1.8 is required. Download Java SE 8 JRE

Use TheMovieDB for both movies and tv shows