./restore.sh: line 75: 53236 Abort trap: 6

Last login: Fri Dec 20 13:46:53 on ttys000 Nattaphons-MacBook-Pro:~ nattaphonsuparsri$ ./pwn.sh -bash: ./pwn.sh: No such file or directory Nattaphons-MacBook-Pro:~ nattaphonsuparsri$ cd /Users/nattaphonsuparsri/Desktop/Desktop/1033-OTA-Downgrader-e6307ea2b18025c42745911b418230193f27d4b7 Nattaphons-MacBook-Pro:1033-OTA-Downgrader-e6307ea2b18025c42745911b418230193f27d4b7 nattaphonsuparsri$ ./pwn.sh

**** Matty's iPhone 5s 10.3.3 OTA Downgrader ****

Plug device into computer in DFU Mode

THIS WILL FAIL UP TO 40 TIMES, THIS IS NORMAL JUST RE-RUN THIS SCRIPT

There is no current way around this, it's just the nature of the exploit on the 5s

Thanks to Merc (@Vyce_Merculous) for helping me fix stuff with this script!

... Waiting 10 seconds for you to actually read this before continuing ... [Log] Removing old files

[Log] Entering PWNDFU Mode No matching processes belonging to you were found checkm8 exploit by axi0mX modified version by Linus Henze Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:000004364B37F8D0 IBFL:1C SRTG:[iBoot-1704.10] Device is now in pwned DFU Mode. (15.76 seconds) 1 SecureROM Signature check remover by Linus Henze Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:000004364B37F8D0 IBFL:1C SRTG:[iBoot-1704.10] PWND:[checkm8] Applying patches... Successfully applied patches Resetting device state

This will effectiveley disable pwned DFU Mode
Only the signature patches will remain Device is now ready to accept unsigned images [Log] Device is in PWNDFU Mode with Sigchcks removed

[Log] Putting device into PWNDREC mode [==================================================] 100.0% [==================================================] 100.0% [Log] Device is now in PWNDREC mode

**** PWNing Completed. Please run restore.sh **** Nattaphons-MacBook-Pro:1033-OTA-Downgrader-e6307ea2b18025c42745911b418230193f27d4b7 nattaphonsuparsri$ ./restore.sh

**** Matty's iPhone 5s 10.3.3 OTA Downgrader **** [Log] Removing old files Please enter device ID (iPhone6,1 or iPhone6,2 only) ONLY THE iPHONE 5s IS SUPPORTED iPhone6,1 [Log] Vaild device, continuing [Log] Getting current APNonce 4631236704464 391dbe55bd07dbcdd48a092059eefd38c9a40d1d Version: c0b554e83f54d39d90cac9791160bf2ccb062aed - 355 [TSSC] manually specified ECID to use, parsed "4631236704464" to dec:4631236704464 hex:4364b37f8d0 [TSSC] manually specified ApNonce to use, parsed "391dbe55bd07dbcdd48a092059eefd38c9a40d1d" to hex:391dbe55bd07dbcdd48a092059eefd38c9a40d1d [TSSC] opening restore/BuildManifest_iPhone6,1_1033_OTA.plist [TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2 [TSSR] Sending TSS request attempt 1... success also requesting APTicket for update installing [Error] [TSSR] Error: could not get id0 for installType=Update [WARNING] [TSSR] faild to build tssrequest for alternative installType [TSSR] User specified not to request a baseband ticket. [TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2 [TSSR] Sending TSS request attempt 1... failure [Error] ERROR: TSS request failed (status=128, message=An internal error occurred.) Saved signing tickets!

Build 14G60 for device iPhone6,1 IS being signed! Do you want to save a copy of the OTA SHSH to somewhere on your computer? (y/n) n [Log] SHSH saved [Log] Starting restore process

[Log] Copying SEP and Baseband cp: 10.3.3.custom/Firmware/Mav7Mav8-7.60.00.Release.bbfw: No such file or directory cp: 10.3.3.custom/Firmware/all_flash/sep-firmware.n53.RELEASE.im4p: No such file or directory cp: 10.3.3.custom/Firmware/all_flash/sep-firmware.n51.RELEASE.im4p: No such file or directory [Log] SEP and Baseband copied

[Log] Cleaning up un-needed files [Log] Clean up done [Log] Starting futurerestore Version: 536fee9e67dbc2842b2e461bb0d23cfd0f6cf903 - 246 Odysseus support: no INFO: device serial number is C37LX509FNJJ [INFO] 64-bit device detected futurerestore init done reading signing ticket shsh/OTA.shsh is done Found device iPhone6,1 n51ap [TSSC] opening restore/BuildManifest_iPhone6,1_1033_OTA.plist [TSSR] User specified not to request a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Did set SEP+baseband path and firmware [WARNING] Failed to read BasebandGoldCertID from device! Is it already in recovery? [WARNING] Using tsschecker's fallback BasebandGoldCertID. This might result in invalid baseband signing status information [WARNING] Failed to read BasebandSerialNumber from device! Is it already in recovery? [WARNING] Using tsschecker's fallback BasebandSerialNumber size. This might result in invalid baseband signing status information [TSSC] opening restore/BuildManifest_iPhone6,1_1033_OTA.plist [TSSR] User specified to request only a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Found device in Recovery mode Device already in Recovery mode Found device in Recovery mode Identified device as n51ap, iPhone6,1 Extracting BuildManifest from iPSW Product version: 10.3.3 Product build: 14G60 Major: 14 Device supports IMG4: true Got ApNonce from device: 39 1d be 55 bd 07 db cd d4 8a 09 20 59 ee fd 38 c9 a4 0d 1d checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID [Error] im4m_buildidentity_check_cb: can't find any identity which matches all hashes inside IM4M [Error] getBuildIdentityForIM4M: found buildidentity, but can't read information BuildIdentity selected for restore: BuildNumber : 14G60 BuildTrain : Greensburg DeviceClass : n51ap FDRSupport : NO RestoreBehavior : Erase Variant : Customer Erase Install (IPSW)

To exit recovery mode, use --exit-recovery

Done: restoring failed. Failed with errorcode=-8 [Log] Futurerestoring complete

**** Downgrade complete! Enjoy 10.3.3 =) **** **** Follow me on twitter @mosk_i for help/updates ** Nattaphons-MacBook-Pro:1033-OTA-Downgrader-e6307ea2b18025c42745911b418230193f27d4b7 nattaphonsuparsri$ ./pwn.sh

**** Matty's iPhone 5s 10.3.3 OTA Downgrader ****

Plug device into computer in DFU Mode

THIS WILL FAIL UP TO 40 TIMES, THIS IS NORMAL JUST RE-RUN THIS SCRIPT

There is no current way around this, it's just the nature of the exploit on the 5s

Thanks to Merc (@Vyce_Merculous) for helping me fix stuff with this script!

... Waiting 10 seconds for you to actually read this before continuing ... ^[ [Log] Removing old files

[Log] Entering PWNDFU Mode No matching processes belonging to you were found ERROR: No Apple device in DFU Mode 0x1227 detected after 5.00 second timeout. Exiting. 0

[ERROR] EXPLOIT FAILED PLEASE ENTER DFU MODE AGAIN AND RUN ./pwn.sh AGAIN [ERROR] EXPLOIT FAILED PLEASE ENTER DFU MODE AGAIN AND RUN ./pwn.sh AGAIN [ERROR] EXPLOIT FAILED PLEASE ENTER DFU MODE AGAIN AND RUN ./pwn.sh AGAIN [ERROR] EXPLOIT FAILED PLEASE ENTER DFU MODE AGAIN AND RUN ./pwn.sh AGAIN Nattaphons-MacBook-Pro:1033-OTA-Downgrader-e6307ea2b18025c42745911b418230193f27d4b7 nattaphonsuparsri$ ./pwn.sh

**** Matty's iPhone 5s 10.3.3 OTA Downgrader ****

Plug device into computer in DFU Mode

THIS WILL FAIL UP TO 40 TIMES, THIS IS NORMAL JUST RE-RUN THIS SCRIPT

There is no current way around this, it's just the nature of the exploit on the 5s

Thanks to Merc (@Vyce_Merculous) for helping me fix stuff with this script!

... Waiting 10 seconds for you to actually read this before continuing ... [Log] Removing old files

[Log] Entering PWNDFU Mode No matching processes belonging to you were found checkm8 exploit by axi0mX modified version by Linus Henze Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:000004364B37F8D0 IBFL:1C SRTG:[iBoot-1704.10] Device is now in pwned DFU Mode. (15.74 seconds) 1 SecureROM Signature check remover by Linus Henze Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:000004364B37F8D0 IBFL:1C SRTG:[iBoot-1704.10] PWND:[checkm8] Applying patches... Successfully applied patches Resetting device state

This will effectiveley disable pwned DFU Mode
Only the signature patches will remain Device is now ready to accept unsigned images [Log] Device is in PWNDFU Mode with Sigchcks removed

[Log] Putting device into PWNDREC mode [==================================================] 100.0% [==================================================] 100.0% [Log] Device is now in PWNDREC mode

**** PWNing Completed. Please run restore.sh **** Nattaphons-MacBook-Pro:1033-OTA-Downgrader-e6307ea2b18025c42745911b418230193f27d4b7 nattaphonsuparsri$ ./restore.sh

Version: c0b554e83f54d39d90cac9791160bf2ccb062aed - 355 [Error] [TSSC] manually specified ECID=, but parsing failed mv: rename shsh/* to shsh/OTA.shsh: No such file or directory Do you want to save a copy of the OTA SHSH to somewhere on your computer? (y/n) n [Log] SHSH saved [Log] Starting restore process

[Log] Cleaning up un-needed files [Log] Clean up done [Log] Starting futurerestore Version: 536fee9e67dbc2842b2e461bb0d23cfd0f6cf903 - 246 Odysseus support: no ERROR: Device is in an invalid state [INFO] 32-bit device detected [Error] can't init, no device found Failed with errorcode=-3 [Log] Futurerestoring complete

**** Matty's iPhone 5s 10.3.3 OTA Downgrader ****

Plug device into computer in DFU Mode

THIS WILL FAIL UP TO 40 TIMES, THIS IS NORMAL JUST RE-RUN THIS SCRIPT

There is no current way around this, it's just the nature of the exploit on the 5s

Thanks to Merc (@Vyce_Merculous) for helping me fix stuff with this script!

... Waiting 10 seconds for you to actually read this before continuing ... [Log] Removing old files

[Log] Entering PWNDFU Mode checkm8 exploit by axi0mX modified version by Linus Henze Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:000004364B37F8D0 IBFL:1C SRTG:[iBoot-1704.10] Device is now in pwned DFU Mode. (15.74 seconds) 1 SecureROM Signature check remover by Linus Henze Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:000004364B37F8D0 IBFL:1C SRTG:[iBoot-1704.10] PWND:[checkm8] Applying patches... Successfully applied patches Resetting device state

This will effectiveley disable pwned DFU Mode
Only the signature patches will remain Device is now ready to accept unsigned images [Log] Device is in PWNDFU Mode with Sigchcks removed

[Log] Putting device into PWNDREC mode [==================================================] 100.0% [==================================================] 100.0% [Log] Device is now in PWNDREC mode

**** PWNing Completed. Please run restore.sh **** Nattaphons-MacBook-Pro:1033-OTA-Downgrader-e6307ea2b18025c42745911b418230193f27d4b7 nattaphonsuparsri$ ./restore.sh

**** Matty's iPhone 5s 10.3.3 OTA Downgrader **** [Log] Removing old files Please enter device ID (iPhone6,1 or iPhone6,2 only) ONLY THE iPHONE 5s IS SUPPORTED iPhone6,1 [Log] Vaild device, continuing [Log] Getting current APNonce 4631236704464 7dacc14b24d600742adea5cce9e061e008efefea Version: c0b554e83f54d39d90cac9791160bf2ccb062aed - 355 [TSSC] manually specified ECID to use, parsed "4631236704464" to dec:4631236704464 hex:4364b37f8d0 [TSSC] manually specified ApNonce to use, parsed "7dacc14b24d600742adea5cce9e061e008efefea" to hex:7dacc14b24d600742adea5cce9e061e008efefea [TSSC] opening restore/BuildManifest_iPhone6,1_1033_OTA.plist [TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2 [TSSR] Sending TSS request attempt 1... success also requesting APTicket for update installing [Error] [TSSR] Error: could not get id0 for installType=Update [WARNING] [TSSR] faild to build tssrequest for alternative installType [TSSR] User specified not to request a baseband ticket. [TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2 [TSSR] Sending TSS request attempt 1... failure [Error] ERROR: TSS request failed (status=128, message=An internal error occurred.) Saved signing tickets!

Build 14G60 for device iPhone6,1 IS being signed! Do you want to save a copy of the OTA SHSH to somewhere on your computer? (y/n) n [Log] SHSH saved [Log] Starting restore process

[Log] Cleaning up un-needed files [Log] Clean up done [Log] Starting futurerestore Version: 536fee9e67dbc2842b2e461bb0d23cfd0f6cf903 - 246 Odysseus support: no INFO: device serial number is C37LX509FNJJ [INFO] 64-bit device detected futurerestore init done reading signing ticket shsh/OTA.shsh is done Found device iPhone6,1 n51ap [TSSC] opening restore/BuildManifest_iPhone6,1_1033_OTA.plist [TSSR] User specified not to request a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Did set SEP+baseband path and firmware [WARNING] Failed to read BasebandGoldCertID from device! Is it already in recovery? [WARNING] Using tsschecker's fallback BasebandGoldCertID. This might result in invalid baseband signing status information [WARNING] Failed to read BasebandSerialNumber from device! Is it already in recovery? [WARNING] Using tsschecker's fallback BasebandSerialNumber size. This might result in invalid baseband signing status information [TSSC] opening restore/BuildManifest_iPhone6,1_1033_OTA.plist [TSSR] User specified to request only a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Found device in Recovery mode Device already in Recovery mode Found device in Recovery mode Identified device as n51ap, iPhone6,1 Extracting BuildManifest from iPSW Product version: 10.3.3 Product build: 14G60 Major: 14 Device supports IMG4: true Got ApNonce from device: 7d ac c1 4b 24 d6 00 74 2a de a5 cc e9 e0 61 e0 08 ef ef ea checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID [Error] im4m_buildidentity_check_cb: can't find any identity which matches all hashes inside IM4M [Error] getBuildIdentityForIM4M: found buildidentity, but can't read information BuildIdentity selected for restore: BuildNumber : 14G60 BuildTrain : Greensburg DeviceClass : n51ap FDRSupport : NO RestoreBehavior : Erase Variant : Customer Erase Install (IPSW)

BuildIdentiy valid for the APTicket: IM4M isn't valid for any restore with this BuildManifest This APTicket can't be used for restoring this firmware IM4M isn't valid for any restore with this BuildManifest Variant: Customer Erase Install (IPSW) This restore will erase your device data. Extracting filesystem from iPSW [==================================================] 100.0% Extracting iBEC.iphone6.RELEASE.im4p... Personalizing IMG4 component iBEC... Sending iBEC (653333 bytes)... waiting for device to reconnect... Getting SepNonce in recovery mode... 01 08 11 3c d7 41 ae 05 20 52 0a ea 64 66 ba 7e d2 b2 ae 29 Getting ApNonce in recovery mode... 7d ac c1 4b 24 d6 00 74 2a de a5 cc e9 e0 61 e0 08 ef ef ea [WARNING] Setting bgcolor to green! If you don't see a green screen, then your device didn't boot iBEC correctly Recovery Mode Environment: iBoot build-version=iBoot-3406.60.10 iBoot build-style=RELEASE Sending RestoreLogo... Extracting applelogo@2x~iphone.s5l8960x.im4p... Personalizing IMG4 component RestoreLogo... Sending RestoreLogo (11640 bytes)... ramdisk-size=0x10000000 Extracting 058-74940-063.dmg... Personalizing IMG4 component RestoreRamDisk... Sending RestoreRamDisk (41583638 bytes)... Extracting DeviceTree.n51ap.im4p... Personalizing IMG4 component RestoreDeviceTree... Sending RestoreDeviceTree (107919 bytes)... Extracting kernelcache.release.iphone6... Personalizing IMG4 component RestoreKernelCache... Sending RestoreKernelCache (12178427 bytes)... Trying to fetch new signing tickets Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Received signing tickets About to restore device... Waiting for device... ./restore.sh: line 75: 32515 Abort trap: 6 bin/futurerestore -t shsh/OTA.shsh -s restore/sep-firmware."$device".RELEASE.im4p -m restore/BuildManifest_"$device"_1033OTA.plist -b restore/Baseband.bbfw -p restore/BuildManifest"$device"_1033_OTA.plist 10.3.3.custom.ipsw [Log] Futurerestoring complete

**** Matty's iPhone 5s 10.3.3 OTA Downgrader ****

Plug device into computer in DFU Mode

THIS WILL FAIL UP TO 40 TIMES, THIS IS NORMAL JUST RE-RUN THIS SCRIPT

There is no current way around this, it's just the nature of the exploit on the 5s

Thanks to Merc (@Vyce_Merculous) for helping me fix stuff with this script!

... Waiting 10 seconds for you to actually read this before continuing ... [Log] Removing old files

[Log] Entering PWNDFU Mode No matching processes belonging to you were found ERROR: No Apple device in DFU Mode 0x1227 detected after 5.00 second timeout. Exiting. 0

Installing dependencies for Futurerestore You need to have Brew and git installed If a popup about developer tools needing to be installed pops up then install that as well Waiting 10 seconds to make sure you actually read this [Log] Installing/updating Brew ==> This script will install: /usr/local/bin/brew /usr/local/share/doc/homebrew /usr/local/share/man/man1/brew.1 /usr/local/share/zsh/site-functions/_brew /usr/local/etc/bash_completion.d/brew /usr/local/Homebrew

Press RETURN to continue or any other key to abort ==> Downloading and installing Homebrew... HEAD is now at af98c1594 Merge pull request #6860 from Homebrew/dependabot/bundler/docs/html-pipeline-2.12.3 Already up-to-date. ==> Installation successful!

==> Homebrew has enabled anonymous aggregate formulae and cask analytics. Read the analytics documentation (and how to opt-out) here: https://docs.brew.sh/Analytics

==> Homebrew is run entirely by unpaid volunteers. Please consider donating: https://github.com/Homebrew/brew#donations ==> Next steps:

Run brew help to get started
Further documentation: https://docs.brew.sh [Log] Installed/Updated Brew [Log] Installing wget Error: wget 1.20.3_1 is already installed To upgrade to 1.20.3_2, run brew upgrade wget. [Log] Installing dependencies Error: No such keg: /usr/local/Cellar/libusbmuxd Error: No such keg: /usr/local/Cellar/libimobiledevice ==> Cloning https://github.com/libimobiledevice/libusbmuxd.git Updating /Users/nattaphonsuparsri/Library/Caches/Homebrew/libusbmuxd--git ==> Checking out branch master Already on 'master' Your branch is up to date with 'origin/master'. HEAD is now at 563cd25 Bump version to 2.0.2 ==> ./autogen.sh ==> ./configure --disable-silent-rules --prefix=/usr/local/Cellar/libusbmuxd/HEA ==> make install Error: The brew link step did not complete successfully The formula built, but is not symlinked into /usr/local Could not symlink bin/iproxy Target /usr/local/bin/iproxy already exists. You may want to remove it: rm '/usr/local/bin/iproxy'

To force the link and overwrite all conflicting files: brew link --overwrite libusbmuxd

To list all files that would be deleted: brew link --overwrite --dry-run libusbmuxd

Possible conflicting files are: /usr/local/bin/iproxy /usr/local/include/usbmuxd-proto.h /usr/local/include/usbmuxd.h /usr/local/lib/libusbmuxd.a /usr/local/lib/libusbmuxd.dylib -> /usr/local/lib/libusbmuxd.4.dylib /usr/local/lib/pkgconfig/libusbmuxd.pc ==> Summary 🍺 /usr/local/Cellar/libusbmuxd/HEAD-563cd25: 14 files, 165.2KB, built in 30 seconds ==> Installing dependencies for libimobiledevice: libxml2 and libtasn1 ==> Installing libimobiledevice dependency: libxml2 ==> Downloading https://homebrew.bintray.com/bottles/libxml2-2.9.10.mojave.bottl ==> Downloading from https://akamai.bintray.com/47/472ed1a73a91c49fd9f39bd8cc4a7 ######################################################################## 100.0% ==> Pouring libxml2-2.9.10.mojave.bottle.tar.gz ==> Caveats libxml2 is keg-only, which means it was not symlinked into /usr/local, because macOS already provides this software and installing another version in parallel can cause all kinds of trouble.

If you need to have libxml2 first in your PATH run: echo 'export PATH="/usr/local/opt/libxml2/bin:$PATH"' >> ~/.bash_profile

For compilers to find libxml2 you may need to set: export LDFLAGS="-L/usr/local/opt/libxml2/lib" export CPPFLAGS="-I/usr/local/opt/libxml2/include"

For pkg-config to find libxml2 you may need to set: export PKG_CONFIG_PATH="/usr/local/opt/libxml2/lib/pkgconfig"

==> Summary 🍺 /usr/local/Cellar/libxml2/2.9.10: 280 files, 10.5MB ==> Installing libimobiledevice dependency: libtasn1 ==> Downloading https://homebrew.bintray.com/bottles/libtasn1-4.15.0.mojave.bott ######################################################################## 100.0% ==> Pouring libtasn1-4.15.0.mojave.bottle.tar.gz 🍺 /usr/local/Cellar/libtasn1/4.15.0: 60 files, 393KB ==> Installing libimobiledevice --HEAD ==> Cloning https://git.libimobiledevice.org/libimobiledevice.git Updating /Users/nattaphonsuparsri/Library/Caches/Homebrew/libimobiledevice--git From https://git.libimobiledevice.org/libimobiledevice 8872aec..d04f8ff master -> origin/master ==> Checking out branch master Already on 'master' Your branch is behind 'origin/master' by 13 commits, and can be fast-forwarded. (use "git pull" to update your local branch) HEAD is now at d04f8ff cython: Update diagnostics_relay with diagnostics_relay_action_t enum too ==> ./autogen.sh ==> ./configure --disable-silent-rules --prefix=/usr/local/Cellar/libimobiledevi ==> make install Error: The brew link step did not complete successfully The formula built, but is not symlinked into /usr/local Could not symlink bin/idevice_id Target /usr/local/bin/idevice_id already exists. You may want to remove it: rm '/usr/local/bin/idevice_id'

To force the link and overwrite all conflicting files: brew link --overwrite libimobiledevice

To list all files that would be deleted: brew link --overwrite --dry-run libimobiledevice

Possible conflicting files are: /usr/local/bin/idevice_id /usr/local/bin/idevicebackup /usr/local/bin/idevicebackup2 /usr/local/bin/idevicecrashreport /usr/local/bin/idevicedate /usr/local/bin/idevicedebug /usr/local/bin/idevicedebugserverproxy /usr/local/bin/idevicediagnostics /usr/local/bin/ideviceenterrecovery /usr/local/bin/ideviceimagemounter /usr/local/bin/ideviceinfo /usr/local/bin/idevicename /usr/local/bin/idevicenotificationproxy /usr/local/bin/idevicepair /usr/local/bin/ideviceprovision /usr/local/bin/idevicescreenshot /usr/local/bin/idevicesyslog /usr/local/include/libimobiledevice/afc.h /usr/local/include/libimobiledevice/debugserver.h /usr/local/include/libimobiledevice/diagnostics_relay.h /usr/local/include/libimobiledevice/file_relay.h /usr/local/include/libimobiledevice/heartbeat.h /usr/local/include/libimobiledevice/house_arrest.h /usr/local/include/libimobiledevice/installation_proxy.h /usr/local/include/libimobiledevice/libimobiledevice.h /usr/local/include/libimobiledevice/lockdown.h /usr/local/include/libimobiledevice/misagent.h /usr/local/include/libimobiledevice/mobile_image_mounter.h /usr/local/include/libimobiledevice/mobileactivation.h /usr/local/include/libimobiledevice/mobilebackup.h /usr/local/include/libimobiledevice/mobilebackup2.h /usr/local/include/libimobiledevice/mobilesync.h /usr/local/include/libimobiledevice/notification_proxy.h /usr/local/include/libimobiledevice/preboard.h /usr/local/include/libimobiledevice/property_list_service.h /usr/local/include/libimobiledevice/restore.h /usr/local/include/libimobiledevice/sbservices.h /usr/local/include/libimobiledevice/screenshotr.h /usr/local/include/libimobiledevice/service.h /usr/local/include/libimobiledevice/syslog_relay.h /usr/local/include/libimobiledevice/webinspector.h /usr/local/share/man/man1/idevice_id.1 /usr/local/share/man/man1/idevicebackup.1 /usr/local/share/man/man1/idevicebackup2.1 /usr/local/share/man/man1/idevicecrashreport.1 /usr/local/share/man/man1/idevicedate.1 /usr/local/share/man/man1/idevicedebug.1 /usr/local/share/man/man1/idevicedebugserverproxy.1 /usr/local/share/man/man1/idevicediagnostics.1 /usr/local/share/man/man1/ideviceenterrecovery.1 /usr/local/share/man/man1/ideviceimagemounter.1 /usr/local/share/man/man1/ideviceinfo.1 /usr/local/share/man/man1/idevicename.1 /usr/local/share/man/man1/idevicenotificationproxy.1 /usr/local/share/man/man1/idevicepair.1 /usr/local/share/man/man1/ideviceprovision.1 /usr/local/share/man/man1/idevicescreenshot.1 /usr/local/share/man/man1/idevicesyslog.1 /usr/local/lib/libimobiledevice.6.dylib /usr/local/lib/libimobiledevice.a /usr/local/lib/libimobiledevice.dylib -> /usr/local/lib/libimobiledevice.6.dylib /usr/local/lib/pkgconfig/libimobiledevice-1.0.pc ==> Summary 🍺 /usr/local/Cellar/libimobiledevice/HEAD-d04f8ff_6: 68 files, 1.1MB, built in 35 seconds ==> Caveats ==> libxml2 libxml2 is keg-only, which means it was not symlinked into /usr/local, because macOS already provides this software and installing another version in parallel can cause all kinds of trouble.

If you need to have libxml2 first in your PATH run: echo 'export PATH="/usr/local/opt/libxml2/bin:$PATH"' >> ~/.bash_profile

For compilers to find libxml2 you may need to set: export LDFLAGS="-L/usr/local/opt/libxml2/lib" export CPPFLAGS="-I/usr/local/opt/libxml2/include"

For pkg-config to find libxml2 you may need to set: export PKG_CONFIG_PATH="/usr/local/opt/libxml2/lib/pkgconfig"

Warning: libzip 1.5.2 is already installed and up-to-date To reinstall 1.5.2, run brew reinstall libzip Warning: openssl@1.1 1.1.1d is already installed and up-to-date To reinstall 1.1.1d, run brew reinstall openssl@1.1 [Log] Creating folders for dylibs Password: mkdir: /rsu: File exists [Log] Created /rsu mkdir: /rsu/lib: File exists [Log] Created /rsu/lib mkdir: /rsu/local: File exists [Log] Created /rsu/local mkdir: /rsu/local/lib: File exists [Log] Created /rsu/local/lib mkdir: /rsu/local/opt: File exists [Log] Created /rsu/local/opt mkdir: /rsu/local/opt/openssl: File exists [Log] Created /rsu/local/opt/openssl mkdir: /rsu/local/opt/openssl/lib: File exists [Log] Created /rsu/local/opt/openssl/lib mkdir: /rsu/local/opt/usbmuxd: File exists [Log] Created /rsu/local/opt/usbmuxd mkdir: /rsu/local/opt/usbmuxd/lib: File exists [Log] Created /rsu/local/opt/usbmuxd/lib mkdir: /rsu/local/opt/libzip: File exists [Log] Created /rsu/local/opt/libzip mkdir: /rsu/local/opt/libzip/lib: File exists [Log] Created /rsu/local/opt/libzip/lib [Log] Created folders [Log] Moving dylibs into place [Log] Copying libcompression and libz [Log] Copying libfragmentzip, libimobiledevice, libirecovery and libplist [Log] Copying openssl [Log] Copying usbmuxd [Log] Copying libzip [Log] Cloning and building other dependencies [Log] Cloning ipwndfu_public fatal: destination path 'ipwndfu_public' already exists and is not an empty directory. [Log] Cloned ipwndfu_public [Log] Doing libirecovery fatal: destination path 'libirecovery' already exists and is not an empty directory. glibtoolize: putting auxiliary files in '.'. glibtoolize: linking file './ltmain.sh' glibtoolize: putting macros in AC_CONFIG_MACRO_DIRS, 'm4'. glibtoolize: linking file 'm4/libtool.m4' glibtoolize: linking file 'm4/ltoptions.m4' glibtoolize: linking file 'm4/ltsugar.m4' glibtoolize: linking file 'm4/ltversion.m4' glibtoolize: linking file 'm4/lt~obsolete.m4' configure.ac:26: installing './compile' configure.ac:6: installing './missing' src/Makefile.am: installing './depcomp' checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... ./install-sh -c -d checking for gawk... no checking for mawk... no checking for nawk... no checking for awk... awk checking whether make sets $(MAKE)... yes checking whether make supports nested variables... yes checking whether make supports nested variables... (cached) yes checking for gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking whether gcc understands -c and -o together... yes checking whether make supports the include directive... yes (GNU style) checking dependency style of gcc... gcc3 checking for g++... g++ checking whether we are using the GNU C++ compiler... yes checking whether g++ accepts -g... yes checking dependency style of g++... gcc3 checking build system type... x86_64-apple-darwin18.7.0 checking host system type... x86_64-apple-darwin18.7.0 checking how to print strings... printf checking for a sed that does not truncate output... /usr/bin/sed checking for grep that handles long lines and -e... /usr/bin/grep checking for egrep... /usr/bin/grep -E checking for fgrep... /usr/bin/grep -F checking for ld used by gcc... /Library/Developer/CommandLineTools/usr/bin/ld checking if the linker (/Library/Developer/CommandLineTools/usr/bin/ld) is GNU ld... no checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B checking the name lister (/usr/bin/nm -B) interface... BSD nm checking whether ln -s works... yes checking the maximum length of command line arguments... 196608 checking how to convert x86_64-apple-darwin18.7.0 file names to x86_64-apple-darwin18.7.0 format... func_convert_file_noop checking how to convert x86_64-apple-darwin18.7.0 file names to toolchain format... func_convert_file_noop checking for /Library/Developer/CommandLineTools/usr/bin/ld option to reload object files... -r checking for objdump... objdump checking how to recognize dependent libraries... pass_all checking for dlltool... no checking how to associate runtime and link libraries... printf %s\n checking for ar... ar checking for archiver @FILE support... no checking for strip... strip checking for ranlib... ranlib checking command to parse /usr/bin/nm -B output from gcc object... ok checking for sysroot... no checking for a working dd... /bin/dd checking how to truncate binary pipes... /bin/dd bs=4096 count=1 checking for mt... no checking if : is a manifest tool... no checking for dsymutil... dsymutil checking for nmedit... nmedit checking for lipo... lipo checking for otool... otool checking for otool64... no checking for -single_module linker flag... yes checking for -exported_symbols_list linker flag... yes checking for -force_load linker flag... yes checking how to run the C preprocessor... gcc -E checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking for dlfcn.h... yes checking for objdir... .libs checking if gcc supports -fno-rtti -fno-exceptions... yes checking for gcc option to produce PIC... -fno-common -DPIC checking if gcc PIC flag -fno-common -DPIC works... yes checking if gcc static flag -static works... no checking if gcc supports -c -o file.o... yes checking if gcc supports -c -o file.o... (cached) yes checking whether the gcc linker (/Library/Developer/CommandLineTools/usr/bin/ld) supports shared libraries... yes checking dynamic linker characteristics... darwin18.7.0 dyld checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes checking how to run the C++ preprocessor... g++ -E checking for ld used by g++... /Library/Developer/CommandLineTools/usr/bin/ld checking if the linker (/Library/Developer/CommandLineTools/usr/bin/ld) is GNU ld... no checking whether the g++ linker (/Library/Developer/CommandLineTools/usr/bin/ld) supports shared libraries... yes checking for g++ option to produce PIC... -fno-common -DPIC checking if g++ PIC flag -fno-common -DPIC works... yes checking if g++ static flag -static works... no checking if g++ supports -c -o file.o... yes checking if g++ supports -c -o file.o... (cached) yes checking whether the g++ linker (/Library/Developer/CommandLineTools/usr/bin/ld) supports shared libraries... yes checking dynamic linker characteristics... darwin18.7.0 dyld checking how to hardcode library paths into programs... immediate checking for ANSI C header files... (cached) yes checking for stdint.h... (cached) yes checking for stdlib.h... (cached) yes checking for string.h... (cached) yes checking for an ANSI C-conforming const... yes checking for size_t... yes checking for ssize_t... yes checking for uint16_t... yes checking for uint32_t... yes checking for uint8_t... yes checking for stdlib.h... (cached) yes checking for GNU libc compatible malloc... yes checking for stdlib.h... (cached) yes checking for GNU libc compatible realloc... yes checking for strdup... yes checking for strerror... yes checking for strndup... yes checking readline/readline.h usability... yes checking readline/readline.h presence... yes checking for readline/readline.h... yes checking for platform-specific build settings... darwin18.7.0 checking CoreFoundation/CoreFoundation.h usability... yes checking CoreFoundation/CoreFoundation.h presence... yes checking for CoreFoundation/CoreFoundation.h... yes checking IOKit/usb/IOUSBLib.h usability... yes checking IOKit/usb/IOUSBLib.h presence... yes checking for IOKit/usb/IOUSBLib.h... yes checking whether gcc is Clang... yes checking whether Clang needs flag to prevent "argument unused" warning when linking with -pthread... no checking for joinable pthread attribute... PTHREAD_CREATE_JOINABLE checking whether more special flags are required for pthreads... no checking for PTHREAD_PRIO_INHERIT... yes checking for pkg-config... /usr/local/bin/pkg-config checking pkg-config is at least version 0.9.0... yes checking for supported compiler flags... -Wall -Wextra -Wmissing-declarations -Wredundant-decls -Wshadow -Wpointer-arith -Wwrite-strings -Wswitch-default -Wno-unused-parameter -fvisibility=hidden -pthread checking for special C compiler options needed for large files... no checking for _FILE_OFFSET_BITS value needed for large files... no checking for native large file support... yes checking for _LARGEFILE_SOURCE value needed for large files... no checking whether make supports nested variables... (cached) yes checking that generated files are newer than configure... done configure: creating ./config.status config.status: creating Makefile config.status: creating src/Makefile config.status: creating include/Makefile config.status: creating tools/Makefile config.status: creating libirecovery.pc config.status: creating udev/Makefile config.status: creating config.h config.status: config.h is unchanged config.status: executing depfiles commands config.status: executing libtool commands

Configuration for libirecovery 0.2.0:

Install prefix: .........: /usr/local USB backend: ............: IOKit

Now type 'make' to build libirecovery 0.2.0, and then 'make install' for installation.

/Library/Developer/CommandLineTools/usr/bin/make all-recursive Making all in src make[2]: Nothing to be done for all'. Making all in include make[2]: Nothing to be done forall'. Making all in tools make[2]: Nothing to be done for all'. Making all in udev make[2]: Nothing to be done forall'. Making install in src .././install-sh -c -d '/usr/local/lib' /bin/sh ../libtool --mode=install /usr/bin/install -c libirecovery.la '/usr/local/lib' libtool: install: /usr/bin/install -c .libs/libirecovery.2.dylib /usr/local/lib/libirecovery.2.dylib libtool: install: (cd /usr/local/lib && { ln -s -f libirecovery.2.dylib libirecovery.dylib || { rm -f libirecovery.dylib && ln -s libirecovery.2.dylib libirecovery.dylib; }; }) libtool: install: /usr/bin/install -c .libs/libirecovery.lai /usr/local/lib/libirecovery.la libtool: install: /usr/bin/install -c .libs/libirecovery.a /usr/local/lib/libirecovery.a libtool: install: chmod 644 /usr/local/lib/libirecovery.a libtool: install: ranlib /usr/local/lib/libirecovery.a make[2]: Nothing to be done for install-data-am'. Making install in include make[2]: Nothing to be done forinstall-exec-am'. .././install-sh -c -d '/usr/local/include' /usr/bin/install -c -m 644 libirecovery.h '/usr/local/include/.' Making install in tools .././install-sh -c -d '/usr/local/bin' /bin/sh ../libtool --mode=install /usr/bin/install -c irecovery '/usr/local/bin' libtool: install: /usr/bin/install -c .libs/irecovery /usr/local/bin/irecovery make[2]: Nothing to be done for install-data-am'. Making install in udev make[2]: Nothing to be done forinstall-exec-am'. make[2]: Nothing to be done for install-exec-am'. ./install-sh -c -d '/usr/local/lib/pkgconfig' /usr/bin/install -c -m 644 libirecovery.pc '/usr/local/lib/pkgconfig' [Log] Doing libfragmentzip fatal: destination path 'libfragmentzip' already exists and is not an empty directory. configure.ac:8: warning: AM_INIT_AUTOMAKE: two- and three-arguments forms are deprecated. For more info, see: configure.ac:8: https://www.gnu.org/software/automake/manual/automake.html#Modernize-AM_005fINIT_005fAUTOMAKE-invocation configure.ac:8: warning: AM_INIT_AUTOMAKE: two- and three-arguments forms are deprecated. For more info, see: configure.ac:8: https://www.gnu.org/software/automake/manual/automake.html#Modernize-AM_005fINIT_005fAUTOMAKE-invocation checking build system type... x86_64-apple-darwin18.7.0 checking host system type... x86_64-apple-darwin18.7.0 checking how to print strings... printf checking for gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking whether gcc understands -c and -o together... yes checking for a sed that does not truncate output... /usr/bin/sed checking for grep that handles long lines and -e... /usr/bin/grep checking for egrep... /usr/bin/grep -E checking for fgrep... /usr/bin/grep -F checking for ld used by gcc... /Library/Developer/CommandLineTools/usr/bin/ld checking if the linker (/Library/Developer/CommandLineTools/usr/bin/ld) is GNU ld... no checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B checking the name lister (/usr/bin/nm -B) interface... BSD nm checking whether ln -s works... yes checking the maximum length of command line arguments... 196608 checking how to convert x86_64-apple-darwin18.7.0 file names to x86_64-apple-darwin18.7.0 format... func_convert_file_noop checking how to convert x86_64-apple-darwin18.7.0 file names to toolchain format... func_convert_file_noop checking for /Library/Developer/CommandLineTools/usr/bin/ld option to reload object files... -r checking for objdump... objdump checking how to recognize dependent libraries... pass_all checking for dlltool... no checking how to associate runtime and link libraries... printf %s\n checking for ar... ar checking for archiver @FILE support... no checking for strip... strip checking for ranlib... ranlib checking for gawk... no checking for mawk... no checking for nawk... no checking for awk... awk checking command to parse /usr/bin/nm -B output from gcc object... ok checking for sysroot... no checking for a working dd... /bin/dd checking how to truncate binary pipes... /bin/dd bs=4096 count=1 checking for mt... no checking if : is a manifest tool... no checking for dsymutil... dsymutil checking for nmedit... nmedit checking for lipo... lipo checking for otool... otool checking for otool64... no checking for -single_module linker flag... yes checking for -exported_symbols_list linker flag... yes checking for -force_load linker flag... yes checking how to run the C preprocessor... gcc -E checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking for dlfcn.h... yes checking for objdir... .libs checking if gcc supports -fno-rtti -fno-exceptions... yes checking for gcc option to produce PIC... -fno-common -DPIC checking if gcc PIC flag -fno-common -DPIC works... yes checking if gcc static flag -static works... no checking if gcc supports -c -o file.o... yes checking if gcc supports -c -o file.o... (cached) yes checking whether the gcc linker (/Library/Developer/CommandLineTools/usr/bin/ld) supports shared libraries... yes checking dynamic linker characteristics... darwin18.7.0 dyld checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes checking target system type... x86_64-apple-darwin18.7.0 checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... ./install-sh -c -d checking whether make sets $(MAKE)... yes checking whether make supports the include directive... yes (GNU style) checking whether make supports nested variables... yes checking dependency style of gcc... gcc3 checking for gcc... (cached) gcc checking whether we are using the GNU C compiler... (cached) yes checking whether gcc accepts -g... (cached) yes checking for gcc option to accept ISO C89... (cached) none needed checking whether gcc understands -c and -o together... (cached) yes checking whether to enable WIN32 specific flags... no checking for pkg-config... /usr/local/bin/pkg-config checking pkg-config is at least version 0.9.0... yes checking for libcurl >= 1.0... yes checking for libzip >= 1.0... yes checking for zlib >= 1.0... yes checking for stdlib.h... (cached) yes checking for string.h... (cached) yes checking stdio.h usability... yes checking stdio.h presence... yes checking for stdio.h... yes checking for stdbool.h that conforms to C99... yes checking for _Bool... yes checking for size_t... yes checking for uint16_t... yes checking for uint32_t... yes checking for uint64_t... yes checking for bzero... yes checking for strdup... yes checking that generated files are newer than configure... done configure: creating ./config.status config.status: creating Makefile config.status: creating include/Makefile config.status: creating libfragmentzip/Makefile config.status: creating libfragmentzip.pc config.status: creating config.h config.status: config.h is unchanged config.status: executing libtool commands config.status: executing depfiles commands /Library/Developer/CommandLineTools/usr/bin/make all-recursive Making all in libfragmentzip make[2]: Nothing to be done forall'. Making all in include make[2]: Nothing to be done for all'. Making install in libfragmentzip .././install-sh -c -d '/usr/local/lib' /bin/sh ../libtool --mode=install /usr/bin/install -c libfragmentzip.la '/usr/local/lib' libtool: install: /usr/bin/install -c .libs/libfragmentzip.0.dylib /usr/local/lib/libfragmentzip.0.dylib libtool: install: (cd /usr/local/lib && { ln -s -f libfragmentzip.0.dylib libfragmentzip.dylib || { rm -f libfragmentzip.dylib && ln -s libfragmentzip.0.dylib libfragmentzip.dylib; }; }) libtool: install: /usr/bin/install -c .libs/libfragmentzip.lai /usr/local/lib/libfragmentzip.la libtool: install: /usr/bin/install -c .libs/libfragmentzip.a /usr/local/lib/libfragmentzip.a libtool: install: chmod 644 /usr/local/lib/libfragmentzip.a libtool: install: ranlib /usr/local/lib/libfragmentzip.a make[2]: Nothing to be done forinstall-data-am'. Making install in include make[2]: Nothing to be done for install-exec-am'. .././install-sh -c -d '/usr/local/include' .././install-sh -c -d '/usr/local/include/libfragmentzip' /usr/bin/install -c -m 644 libfragmentzip/libfragmentzip.h '/usr/local/include/libfragmentzip' make[2]: Nothing to be done forinstall-exec-am'. ./install-sh -c -d '/usr/local/lib/pkgconfig' /usr/bin/install -c -m 644 libfragmentzip.pc '/usr/local/lib/pkgconfig'

[Log] Installed and built dependencies [Log] Installed everything [Log] Done, exiting... Nattaphons-MacBook-Pro:1033-OTA-Downgrader-e6307ea2b18025c42745911b418230193f27d4b7 nattaphonsuparsri$ sudo ./install_2.sh sudo: ./install_2.sh: command not found Nattaphons-MacBook-Pro:1033-OTA-Downgrader-e6307ea2b18025c42745911b418230193f27d4b7 nattaphonsuparsri$ sudo ./install_2.sh sudo: ./install_2.sh: command not found Nattaphons-MacBook-Pro:1033-OTA-Downgrader-e6307ea2b18025c42745911b418230193f27d4b7 nattaphonsuparsri$ ./prep.sh

**** Matty's iPhone 5s 10.3.3 OTA Downgrader **** [Log] Removing files from previous runs [Log] Downloading programs from S0uthwest's Github releases [Log] Downloading igetnonce Warning: Failed to set locale category LC_NUMERIC to en_TH. Warning: Failed to set locale category LC_TIME to en_TH. Warning: Failed to set locale category LC_COLLATE to en_TH. Warning: Failed to set locale category LC_MONETARY to en_TH. Warning: Failed to set locale category LC_MESSAGES to en_TH. igetnonce_macOS_v14 100%[===================>] 1.34M 385KB/s in 3.6s
Archive: igetnonce_macOS_v14.zip inflating: igetnonce
[Log] Done igetnonce [Log] Downloading tsschecker Warning: Failed to set locale category LC_NUMERIC to en_TH. Warning: Failed to set locale category LC_TIME to en_TH. Warning: Failed to set locale category LC_COLLATE to en_TH. Warning: Failed to set locale category LC_MONETARY to en_TH. Warning: Failed to set locale category LC_MESSAGES to en_TH. tsschecker_macOS_v3 100%[===================>] 87.16K 159KB/s in 0.5s
Archive: tsschecker_macOS_v355.zip inflating: tsschecker
[Log] Done tsschecker [Log] Downloading futurerestore Warning: Failed to set locale category LC_NUMERIC to en_TH. Warning: Failed to set locale category LC_TIME to en_TH. Warning: Failed to set locale category LC_COLLATE to en_TH. Warning: Failed to set locale category LC_MONETARY to en_TH. Warning: Failed to set locale category LC_MESSAGES to en_TH. futurerestore_macOS 100%[===================>] 1.71M 251KB/s in 6.8s
Archive: futurerestore_macOS_v245.zip inflating: futurerestore
[Log] Done fututrerestore [Log] Unzipping IPSW Archive: iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/058-74917-062.dmg
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/._058-74917-062.dmg
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/058-74940-063.dmg
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/058-75381-062.dmg
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/BuildManifest.plist
creating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/ creating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/ inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/applelogo@2x~iphone.s5l8960x.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/applelogo@2x~iphone.s5l8960x.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/applelogo@2x~iphone.s8000.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/applelogo@2x~iphone.s8000.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/applelogo@2x~iphone.s8003.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/applelogo@2x~iphone.s8003.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterycharging0@2x~iphone.s5l8960x.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterycharging0@2x~iphone.s5l8960x.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterycharging0@2x~iphone.s8000.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterycharging0@2x~iphone.s8000.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterycharging0@2x~iphone.s8003.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterycharging0@2x~iphone.s8003.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterycharging1@2x~iphone.s5l8960x.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterycharging1@2x~iphone.s5l8960x.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterycharging1@2x~iphone.s8000.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterycharging1@2x~iphone.s8000.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterycharging1@2x~iphone.s8003.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterycharging1@2x~iphone.s8003.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batteryfull@2x~iphone.s5l8960x.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batteryfull@2x~iphone.s5l8960x.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batteryfull@2x~iphone.s8000.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batteryfull@2x~iphone.s8000.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batteryfull@2x~iphone.s8003.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batteryfull@2x~iphone.s8003.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterylow0@2x~iphone.s5l8960x.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterylow0@2x~iphone.s5l8960x.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterylow0@2x~iphone.s8000.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterylow0@2x~iphone.s8000.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterylow0@2x~iphone.s8003.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterylow0@2x~iphone.s8003.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterylow1@2x~iphone.s5l8960x.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterylow1@2x~iphone.s5l8960x.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterylow1@2x~iphone.s8000.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterylow1@2x~iphone.s8000.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterylow1@2x~iphone.s8003.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/batterylow1@2x~iphone.s8003.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/DeviceTree.n51ap.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/DeviceTree.n51ap.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/DeviceTree.n53ap.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/DeviceTree.n53ap.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/DeviceTree.n69ap.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/DeviceTree.n69ap.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/DeviceTree.n69uap.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/DeviceTree.n69uap.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/glyphplugin@1136~iphone-lightning.s5l8960x.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/glyphplugin@1136~iphone-lightning.s5l8960x.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/glyphplugin@1136~iphone-lightning.s8000.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/glyphplugin@1136~iphone-lightning.s8000.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/glyphplugin@1136~iphone-lightning.s8003.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/glyphplugin@1136~iphone-lightning.s8003.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/iBoot.iphone6.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/iBoot.iphone6.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/iBoot.n69.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/iBoot.n69.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/iBoot.n69u.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/iBoot.n69u.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/LLB.iphone6.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/LLB.iphone6.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/LLB.n69.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/LLB.n69.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/LLB.n69u.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/LLB.n69u.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/recoverymode@1136~iphone-lightning.s5l8960x.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/recoverymode@1136~iphone-lightning.s5l8960x.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/recoverymode@1136~iphone-lightning.s8000.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/recoverymode@1136~iphone-lightning.s8000.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/recoverymode@1136~iphone-lightning.s8003.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/recoverymode@1136~iphone-lightning.s8003.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/sep-firmware.n51.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/sep-firmware.n51.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/sep-firmware.n53.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/sep-firmware.n53.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/sep-firmware.n69.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/sep-firmware.n69.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/sep-firmware.n69u.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/all_flash/sep-firmware.n69u.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/aopfw.im4p
creating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/dfu/ inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/dfu/iBEC.iphone6.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/dfu/iBEC.iphone6.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/dfu/iBEC.n69.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/dfu/iBEC.n69.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/dfu/iBEC.n69u.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/dfu/iBEC.n69u.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/dfu/iBSS.iphone6.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/dfu/iBSS.iphone6.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/dfu/iBSS.n69.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/dfu/iBSS.n69.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/dfu/iBSS.n69u.RELEASE.im4p
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/dfu/iBSS.n69u.RELEASE.im4p.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/Mav10-5.62.00.Release.bbfw
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/Mav10-5.62.00.Release.plist
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/Mav7Mav8-7.60.00.Release.bbfw
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/Mav7Mav8-7.60.00.Release.plist
creating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/usr/ creating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/usr/local/ creating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Firmware/usr/local/standalone/ inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/kernelcache.release.iphone6
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/kernelcache.release.iphone8b
inflating: iPhone_4.0_64bit_10.3.3_14G60_Restore/Restore.plist
[Log] IPSW unzipped [Log] Copying iBEC [Log] Copying iBSS [Log] Patching files [Log] Making sure permissions are set for binaries [Log] Files patched [Log] Creating new IPSW adding: 058-74917-062.dmg (stored 0%) adding: 058-74940-063.dmg (stored 0%) adding: 058-75381-062.dmg (stored 0%) adding: BuildManifest.plist (stored 0%) adding: Firmware/ (stored 0%) adding: Firmware/all_flash/ (stored 0%) adding: Firmware/all_flash/applelogo@2x~iphone.s5l8960x.im4p (stored 0%) adding: Firmware/all_flash/applelogo@2x~iphone.s5l8960x.im4p.plist (stored 0%) adding: Firmware/all_flash/applelogo@2x~iphone.s8000.im4p (stored 0%) adding: Firmware/all_flash/applelogo@2x~iphone.s8000.im4p.plist (stored 0%) adding: Firmware/all_flash/applelogo@2x~iphone.s8003.im4p (stored 0%) adding: Firmware/all_flash/applelogo@2x~iphone.s8003.im4p.plist (stored 0%) adding: Firmware/all_flash/batterycharging0@2x~iphone.s5l8960x.im4p (stored 0%) adding: Firmware/all_flash/batterycharging0@2x~iphone.s5l8960x.im4p.plist (stored 0%) adding: Firmware/all_flash/batterycharging0@2x~iphone.s8000.im4p (stored 0%) adding: Firmware/all_flash/batterycharging0@2x~iphone.s8000.im4p.plist (stored 0%) adding: Firmware/all_flash/batterycharging0@2x~iphone.s8003.im4p (stored 0%) adding: Firmware/all_flash/batterycharging0@2x~iphone.s8003.im4p.plist (stored 0%) adding: Firmware/all_flash/batterycharging1@2x~iphone.s5l8960x.im4p (stored 0%) adding: Firmware/all_flash/batterycharging1@2x~iphone.s5l8960x.im4p.plist (stored 0%) adding: Firmware/all_flash/batterycharging1@2x~iphone.s8000.im4p (stored 0%) adding: Firmware/all_flash/batterycharging1@2x~iphone.s8000.im4p.plist (stored 0%) adding: Firmware/all_flash/batterycharging1@2x~iphone.s8003.im4p (stored 0%) adding: Firmware/all_flash/batterycharging1@2x~iphone.s8003.im4p.plist (stored 0%) adding: Firmware/all_flash/batteryfull@2x~iphone.s5l8960x.im4p (stored 0%) adding: Firmware/all_flash/batteryfull@2x~iphone.s5l8960x.im4p.plist (stored 0%) adding: Firmware/all_flash/batteryfull@2x~iphone.s8000.im4p (stored 0%) adding: Firmware/all_flash/batteryfull@2x~iphone.s8000.im4p.plist (stored 0%) adding: Firmware/all_flash/batteryfull@2x~iphone.s8003.im4p (stored 0%) adding: Firmware/all_flash/batteryfull@2x~iphone.s8003.im4p.plist (stored 0%) adding: Firmware/all_flash/batterylow0@2x~iphone.s5l8960x.im4p (stored 0%) adding: Firmware/all_flash/batterylow0@2x~iphone.s5l8960x.im4p.plist (stored 0%) adding: Firmware/all_flash/batterylow0@2x~iphone.s8000.im4p (stored 0%) adding: Firmware/all_flash/batterylow0@2x~iphone.s8000.im4p.plist (stored 0%) adding: Firmware/all_flash/batterylow0@2x~iphone.s8003.im4p (stored 0%) adding: Firmware/all_flash/batterylow0@2x~iphone.s8003.im4p.plist (stored 0%) adding: Firmware/all_flash/batterylow1@2x~iphone.s5l8960x.im4p (stored 0%) adding: Firmware/all_flash/batterylow1@2x~iphone.s5l8960x.im4p.plist (stored 0%) adding: Firmware/all_flash/batterylow1@2x~iphone.s8000.im4p (stored 0%) adding: Firmware/all_flash/batterylow1@2x~iphone.s8000.im4p.plist (stored 0%) adding: Firmware/all_flash/batterylow1@2x~iphone.s8003.im4p (stored 0%) adding: Firmware/all_flash/batterylow1@2x~iphone.s8003.im4p.plist (stored 0%) adding: Firmware/all_flash/DeviceTree.n51ap.im4p (stored 0%) adding: Firmware/all_flash/DeviceTree.n51ap.im4p.plist (stored 0%) adding: Firmware/all_flash/DeviceTree.n53ap.im4p (stored 0%) adding: Firmware/all_flash/DeviceTree.n53ap.im4p.plist (stored 0%) adding: Firmware/all_flash/DeviceTree.n69ap.im4p (stored 0%) adding: Firmware/all_flash/DeviceTree.n69ap.im4p.plist (stored 0%) adding: Firmware/all_flash/DeviceTree.n69uap.im4p (stored 0%) adding: Firmware/all_flash/DeviceTree.n69uap.im4p.plist (stored 0%) adding: Firmware/all_flash/glyphplugin@1136~iphone-lightning.s5l8960x.im4p (stored 0%) adding: Firmware/all_flash/glyphplugin@1136~iphone-lightning.s5l8960x.im4p.plist (stored 0%) adding: Firmware/all_flash/glyphplugin@1136~iphone-lightning.s8000.im4p (stored 0%) adding: Firmware/all_flash/glyphplugin@1136~iphone-lightning.s8000.im4p.plist (stored 0%) adding: Firmware/all_flash/glyphplugin@1136~iphone-lightning.s8003.im4p (stored 0%) adding: Firmware/all_flash/glyphplugin@1136~iphone-lightning.s8003.im4p.plist (stored 0%) adding: Firmware/all_flash/iBoot.iphone6.RELEASE.im4p (stored 0%) adding: Firmware/all_flash/iBoot.iphone6.RELEASE.im4p.plist (stored 0%) adding: Firmware/all_flash/iBoot.n69.RELEASE.im4p (stored 0%) adding: Firmware/all_flash/iBoot.n69.RELEASE.im4p.plist (stored 0%) adding: Firmware/all_flash/iBoot.n69u.RELEASE.im4p (stored 0%) adding: Firmware/all_flash/iBoot.n69u.RELEASE.im4p.plist (stored 0%) adding: Firmware/all_flash/LLB.iphone6.RELEASE.im4p (stored 0%) adding: Firmware/all_flash/LLB.iphone6.RELEASE.im4p.plist (stored 0%) adding: Firmware/all_flash/LLB.n69.RELEASE.im4p (stored 0%) adding: Firmware/all_flash/LLB.n69.RELEASE.im4p.plist (stored 0%) adding: Firmware/all_flash/LLB.n69u.RELEASE.im4p (stored 0%) adding: Firmware/all_flash/LLB.n69u.RELEASE.im4p.plist (stored 0%) adding: Firmware/all_flash/recoverymode@1136~iphone-lightning.s5l8960x.im4p (stored 0%) adding: Firmware/all_flash/recoverymode@1136~iphone-lightning.s5l8960x.im4p.plist (stored 0%) adding: Firmware/all_flash/recoverymode@1136~iphone-lightning.s8000.im4p (stored 0%) adding: Firmware/all_flash/recoverymode@1136~iphone-lightning.s8000.im4p.plist (stored 0%) adding: Firmware/all_flash/recoverymode@1136~iphone-lightning.s8003.im4p (stored 0%) adding: Firmware/all_flash/recoverymode@1136~iphone-lightning.s8003.im4p.plist (stored 0%) adding: Firmware/all_flash/sep-firmware.n51.RELEASE.im4p (stored 0%) adding: Firmware/all_flash/sep-firmware.n51.RELEASE.im4p.plist (stored 0%) adding: Firmware/all_flash/sep-firmware.n53.RELEASE.im4p (stored 0%) adding: Firmware/all_flash/sep-firmware.n53.RELEASE.im4p.plist (stored 0%) adding: Firmware/all_flash/sep-firmware.n69.RELEASE.im4p (stored 0%) adding: Firmware/all_flash/sep-firmware.n69.RELEASE.im4p.plist (stored 0%) adding: Firmware/all_flash/sep-firmware.n69u.RELEASE.im4p (stored 0%) adding: Firmware/all_flash/sep-firmware.n69u.RELEASE.im4p.plist (stored 0%) adding: Firmware/aopfw.im4p (stored 0%) adding: Firmware/dfu/ (stored 0%) adding: Firmware/dfu/iBEC.iphone6.RELEASE.im4p (stored 0%) adding: Firmware/dfu/iBEC.iphone6.RELEASE.im4p.plist (stored 0%) adding: Firmware/dfu/iBEC.n69.RELEASE.im4p (stored 0%) adding: Firmware/dfu/iBEC.n69.RELEASE.im4p.plist (stored 0%) adding: Firmware/dfu/iBEC.n69u.RELEASE.im4p (stored 0%) adding: Firmware/dfu/iBEC.n69u.RELEASE.im4p.plist (stored 0%) adding: Firmware/dfu/iBSS.iphone6.RELEASE.im4p (stored 0%) adding: Firmware/dfu/iBSS.iphone6.RELEASE.im4p.plist (stored 0%) adding: Firmware/dfu/iBSS.n69.RELEASE.im4p (stored 0%) adding: Firmware/dfu/iBSS.n69.RELEASE.im4p.plist (stored 0%) adding: Firmware/dfu/iBSS.n69u.RELEASE.im4p (stored 0%) adding: Firmware/dfu/iBSS.n69u.RELEASE.im4p.plist (stored 0%) adding: Firmware/Mav10-5.62.00.Release.bbfw (stored 0%) adding: Firmware/Mav10-5.62.00.Release.plist (stored 0%) adding: Firmware/Mav7Mav8-7.60.00.Release.bbfw (stored 0%) adding: Firmware/Mav7Mav8-7.60.00.Release.plist (stored 0%) adding: Firmware/usr/ (stored 0%) adding: Firmware/usr/local/ (stored 0%) adding: Firmware/usr/local/standalone/ (stored 0%) adding: Restore.plist (stored 0%) adding: kernelcache.release.iphone6 (stored 0%) adding: kernelcache.release.iphone8b (stored 0%) [Log] Preperations complete **** Modified IPSW created successfully **** **** Prep Completed. Please run pwn.sh **** Nattaphons-MacBook-Pro:1033-OTA-Downgrader-e6307ea2b18025c42745911b418230193f27d4b7 nattaphonsuparsri$ ./pwn.sh

**** Matty's iPhone 5s 10.3.3 OTA Downgrader ****

Plug device into computer in DFU Mode

THIS WILL FAIL UP TO 40 TIMES, THIS IS NORMAL JUST RE-RUN THIS SCRIPT

There is no current way around this, it's just the nature of the exploit on the 5s

Thanks to Merc (@Vyce_Merculous) for helping me fix stuff with this script!

... Waiting 10 seconds for you to actually read this before continuing ... [Log] Removing old files

[Log] Entering PWNDFU Mode checkm8 exploit by axi0mX modified version by Linus Henze Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:000004364B37F8D0 IBFL:1C SRTG:[iBoot-1704.10] Device is now in pwned DFU Mode. (14.62 seconds) 1 SecureROM Signature check remover by Linus Henze Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:000004364B37F8D0 IBFL:1C SRTG:[iBoot-1704.10] PWND:[checkm8] Applying patches... Successfully applied patches Resetting device state

This will effectiveley disable pwned DFU Mode
Only the signature patches will remain Device is now ready to accept unsigned images [Log] Device is in PWNDFU Mode with Sigchcks removed

[Log] Putting device into PWNDREC mode [==================================================] 100.0% [==================================================] 100.0% [Log] Device is now in PWNDREC mode

**** PWNing Completed. Please run restore.sh **** Nattaphons-MacBook-Pro:1033-OTA-Downgrader-e6307ea2b18025c42745911b418230193f27d4b7 nattaphonsuparsri$ ./restore.sh

**** Matty's iPhone 5s 10.3.3 OTA Downgrader **** [Log] Removing old files Please enter device ID (iPhone6,1 or iPhone6,2 only) ONLY THE iPHONE 5s IS SUPPORTED iPhone6,1 [Log] Vaild device, continuing [Log] Getting current APNonce 4631236704464 a028ec0e64c72b9bb8d2eddc282883a305d7f1f4 Version: c0b554e83f54d39d90cac9791160bf2ccb062aed - 355 [TSSC] manually specified ECID to use, parsed "4631236704464" to dec:4631236704464 hex:4364b37f8d0 [TSSC] manually specified ApNonce to use, parsed "a028ec0e64c72b9bb8d2eddc282883a305d7f1f4" to hex:a028ec0e64c72b9bb8d2eddc282883a305d7f1f4 [TSSC] opening restore/BuildManifest_iPhone6,1_1033_OTA.plist [TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2 [TSSR] Sending TSS request attempt 1... success also requesting APTicket for update installing [Error] [TSSR] Error: could not get id0 for installType=Update [WARNING] [TSSR] faild to build tssrequest for alternative installType [TSSR] User specified not to request a baseband ticket. [TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2 [TSSR] Sending TSS request attempt 1... failure [Error] ERROR: TSS request failed (status=128, message=An internal error occurred.) Saved signing tickets!

Build 14G60 for device iPhone6,1 IS being signed! Do you want to save a copy of the OTA SHSH to somewhere on your computer? (y/n) n [Log] SHSH saved [Log] Starting restore process

[Log] Copying SEP and Baseband [Log] SEP and Baseband copied

[Log] Cleaning up un-needed files [Log] Clean up done [Log] Starting futurerestore Version: 536fee9e67dbc2842b2e461bb0d23cfd0f6cf903 - 246 Odysseus support: no INFO: device serial number is C37LX509FNJJ [INFO] 64-bit device detected futurerestore init done reading signing ticket shsh/OTA.shsh is done Found device iPhone6,1 n51ap [TSSC] opening restore/BuildManifest_iPhone6,1_1033_OTA.plist [TSSR] User specified not to request a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Did set SEP+baseband path and firmware [WARNING] Failed to read BasebandGoldCertID from device! Is it already in recovery? [WARNING] Using tsschecker's fallback BasebandGoldCertID. This might result in invalid baseband signing status information [WARNING] Failed to read BasebandSerialNumber from device! Is it already in recovery? [WARNING] Using tsschecker's fallback BasebandSerialNumber size. This might result in invalid baseband signing status information [TSSC] opening restore/BuildManifest_iPhone6,1_1033_OTA.plist [TSSR] User specified to request only a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Found device in Recovery mode Device already in Recovery mode Found device in Recovery mode Identified device as n51ap, iPhone6,1 Extracting BuildManifest from iPSW Product version: 10.3.3 Product build: 14G60 Major: 14 Device supports IMG4: true Got ApNonce from device: a0 28 ec 0e 64 c7 2b 9b b8 d2 ed dc 28 28 83 a3 05 d7 f1 f4 checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID [Error] im4m_buildidentity_check_cb: can't find any identity which matches all hashes inside IM4M [Error] getBuildIdentityForIM4M: found buildidentity, but can't read information BuildIdentity selected for restore: BuildNumber : 14G60 BuildTrain : Greensburg DeviceClass : n51ap FDRSupport : NO RestoreBehavior : Erase Variant : Customer Erase Install (IPSW)

**** Matty's iPhone 5s 10.3.3 OTA Downgrader ****

Plug device into computer in DFU Mode

THIS WILL FAIL UP TO 40 TIMES, THIS IS NORMAL JUST RE-RUN THIS SCRIPT

There is no current way around this, it's just the nature of the exploit on the 5s

Thanks to Merc (@Vyce_Merculous) for helping me fix stuff with this script!

... Waiting 10 seconds for you to actually read this before continuing ... [Log] Removing old files

[Log] Entering PWNDFU Mode No matching processes belonging to you were found checkm8 exploit by axi0mX modified version by Linus Henze Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:000004364B37F8D0 IBFL:1C SRTG:[iBoot-1704.10] Device is now in pwned DFU Mode. (14.91 seconds) 1 SecureROM Signature check remover by Linus Henze Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:000004364B37F8D0 IBFL:1C SRTG:[iBoot-1704.10] PWND:[checkm8] Applying patches... Successfully applied patches Resetting device state

This will effectiveley disable pwned DFU Mode
Only the signature patches will remain Device is now ready to accept unsigned images [Log] Device is in PWNDFU Mode with Sigchcks removed

[Log] Putting device into PWNDREC mode [==================================================] 100.0% [==================================================] 100.0% [Log] Device is now in PWNDREC mode

**** PWNing Completed. Please run restore.sh **** Nattaphons-MacBook-Pro:1033-OTA-Downgrader-e6307ea2b18025c42745911b418230193f27d4b7 nattaphonsuparsri$ ./restore.sh

**** Matty's iPhone 5s 10.3.3 OTA Downgrader **** [Log] Removing old files Please enter device ID (iPhone6,1 or iPhone6,2 only) ONLY THE iPHONE 5s IS SUPPORTED iPhone6,1 [Log] Vaild device, continuing [Log] Getting current APNonce 4631236704464 f23e2a8f2da957c1b69d34e46e3c96b441f7d46e Version: c0b554e83f54d39d90cac9791160bf2ccb062aed - 355 [TSSC] manually specified ECID to use, parsed "4631236704464" to dec:4631236704464 hex:4364b37f8d0 [TSSC] manually specified ApNonce to use, parsed "f23e2a8f2da957c1b69d34e46e3c96b441f7d46e" to hex:f23e2a8f2da957c1b69d34e46e3c96b441f7d46e [TSSC] opening restore/BuildManifest_iPhone6,1_1033_OTA.plist [TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2 [TSSR] Sending TSS request attempt 1... success also requesting APTicket for update installing [Error] [TSSR] Error: could not get id0 for installType=Update [WARNING] [TSSR] faild to build tssrequest for alternative installType [TSSR] User specified not to request a baseband ticket. [TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2 [TSSR] Sending TSS request attempt 1... failure [Error] ERROR: TSS request failed (status=128, message=An internal error occurred.) Saved signing tickets!

Build 14G60 for device iPhone6,1 IS being signed! Do you want to save a copy of the OTA SHSH to somewhere on your computer? (y/n) n [Log] SHSH saved [Log] Starting restore process

[Log] Cleaning up un-needed files [Log] Clean up done [Log] Starting futurerestore Version: 536fee9e67dbc2842b2e461bb0d23cfd0f6cf903 - 246 Odysseus support: no INFO: device serial number is C37LX509FNJJ [INFO] 64-bit device detected futurerestore init done reading signing ticket shsh/OTA.shsh is done Found device iPhone6,1 n51ap [TSSC] opening restore/BuildManifest_iPhone6,1_1033_OTA.plist [TSSR] User specified not to request a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Did set SEP+baseband path and firmware [WARNING] Failed to read BasebandGoldCertID from device! Is it already in recovery? [WARNING] Using tsschecker's fallback BasebandGoldCertID. This might result in invalid baseband signing status information [WARNING] Failed to read BasebandSerialNumber from device! Is it already in recovery? [WARNING] Using tsschecker's fallback BasebandSerialNumber size. This might result in invalid baseband signing status information [TSSC] opening restore/BuildManifest_iPhone6,1_1033_OTA.plist [TSSR] User specified to request only a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Found device in Recovery mode Device already in Recovery mode Found device in Recovery mode Identified device as n51ap, iPhone6,1 Extracting BuildManifest from iPSW Product version: 10.3.3 Product build: 14G60 Major: 14 Device supports IMG4: true Got ApNonce from device: f2 3e 2a 8f 2d a9 57 c1 b6 9d 34 e4 6e 3c 96 b4 41 f7 d4 6e checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID [Error] im4m_buildidentity_check_cb: can't find any identity which matches all hashes inside IM4M [Error] getBuildIdentityForIM4M: found buildidentity, but can't read information BuildIdentity selected for restore: BuildNumber : 14G60 BuildTrain : Greensburg DeviceClass : n51ap FDRSupport : NO RestoreBehavior : Erase Variant : Customer Erase Install (IPSW)

BuildIdentiy valid for the APTicket: IM4M isn't valid for any restore with this BuildManifest This APTicket can't be used for restoring this firmware IM4M isn't valid for any restore with this BuildManifest Variant: Customer Erase Install (IPSW) This restore will erase your device data. Extracting filesystem from iPSW [==================================================] 100.0% Extracting iBEC.iphone6.RELEASE.im4p... Personalizing IMG4 component iBEC... Sending iBEC (653333 bytes)... waiting for device to reconnect... Getting SepNonce in recovery mode... be 16 b6 5d 35 23 f4 80 29 29 8b 1a 58 80 03 d9 21 32 46 6f Getting ApNonce in recovery mode... f2 3e 2a 8f 2d a9 57 c1 b6 9d 34 e4 6e 3c 96 b4 41 f7 d4 6e [WARNING] Setting bgcolor to green! If you don't see a green screen, then your device didn't boot iBEC correctly Recovery Mode Environment: iBoot build-version=iBoot-3406.60.10 iBoot build-style=RELEASE Sending RestoreLogo... Extracting applelogo@2x~iphone.s5l8960x.im4p... Personalizing IMG4 component RestoreLogo... Sending RestoreLogo (11640 bytes)... ramdisk-size=0x10000000 Extracting 058-74940-063.dmg... Personalizing IMG4 component RestoreRamDisk... Sending RestoreRamDisk (41583638 bytes)... Extracting DeviceTree.n51ap.im4p... Personalizing IMG4 component RestoreDeviceTree... Sending RestoreDeviceTree (107919 bytes)... Extracting kernelcache.release.iphone6... Personalizing IMG4 component RestoreKernelCache... Sending RestoreKernelCache (12178427 bytes)... Trying to fetch new signing tickets Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Received signing tickets About to restore device... Waiting for device... ./restore.sh: line 75: 60284 Abort trap: 6 bin/futurerestore -t shsh/OTA.shsh -s restore/sep-firmware."$device".RELEASE.im4p -m restore/BuildManifest_"$device"_1033OTA.plist -b restore/Baseband.bbfw -p restore/BuildManifest"$device"_1033_OTA.plist 10.3.3.custom.ipsw [Log] Futurerestoring complete

MatthewPierson / 1033-OTA-Downgrader

./restore.sh: line 75: 53236 Abort trap: 6 #97

Configuration for libirecovery 0.2.0: