It's inside FirmwareUpdate.pkg, you need to extract it first then reopen it on Pacifist. Then somewhere on that file is 0085.Okay, I'll download the combo.
I've downgraded several times, but I have the means to replace the SPI flash/reprogram it externally.Talk about frustrating! I did as you suggested, and when I did the reboot, I got the firmware update screen for a few seconds, then the cMP crashed.
Yikes. Will your cMP not boot now? There have been several reports of this, but I'm not sure any common thread was identified (and on the ones whose flash chip was damaged I think that the firmware update process got stuck and they had to manually power off).
Zeke I would say if your cMP actually still boots then you should just replace your CPU and forget about trying to downgrade firmware. It seems too risky!
If you really want to try, downgrade to 0087 then to 0085. Do this by baby steps since the LOCKED.fd file don't contain the complete BootROM. Do a backup before, using ROMTool.Well, I guess that pretty much finishes up the i7 then, since I can't SPI/flash etc. Thanks for the advice though.
same steps? find 87, rename it to 90, then rename 85 to 92 or something?If you really want to try, downgrade to 0087 then to 0085. Do this by baby steps since the LOCKED.fd file don't contain the complete BootROM. Do a backup before, using ROMTool.
1) Do a full BootROM dump with dosdude1 ROMToolsame steps? find 87, rename it to 90, then rename 85 to 92 or something?
Board.Another thought. Is the firmware chip on the logic board, or on the tray?
Shouldn't 85 be renamed "88"?1) Do a full BootROM dump with dosdude1 ROMTool
2) rename 0087 to 0090, then "upgrade" it to the previous version
3) rename 0085 to 0086, then "upgrade" it to the previous version
The problem is that the LOCKED.fd file it's a unpersonalised one. You can boot with a SPI flash restored to it, but you will loose iCloud/Facetime/iMessage.LOL well my worry came from tsialex. If he's worried then I'm worried, because he knows a hell of a lot more about this stuff than I do.
Also, I don't have 10.13.5 saved anywhere so I can't help you find 0087. Maybe someone else has it.
Yes, sorry.Shouldn't 85 be renamed "88"?
I'm running 10.13.3 right now, but I doubt I can get just 10.13.5 either.LOL well my worry came from tsialex. If he's worried then I'm worried, because he knows a hell of a lot more about this stuff than I do.
Also, I don't have 10.13.5 saved anywhere so I can't help you find 0087. Maybe someone else has it.
You can get it hidden on the 10.13.5 ComboUpdate. Extract RecoveryHDMeta.dmg, then re-open it on Pacifist, on the Firmware folder you will have the MP51.0087.B00.LOCKED.fd file.I'm running 10.13.3 right now, but I doubt I can get just 10.13.5 either.
If you overwrite your personalised by Apple BootROM with the LOCKED.fd file you will loose access to iCloud/Facetime/iMessage. Read again my previous post about it.LOL. downloading 10.13.5 combo update!
[doublepost=1533436792][/doublepost]since dosdude's ROMTool can write firmware, is that an option?
with no way to re-add it?If you overwrite your personalised by Apple BootROM with the LOCKED.fd file you will loose access to iCloud/Facetime/iMessage. Read again my previous post about it.
Without knowing what to add, what to remove, what to overwrite on the LOCKED.fd file, no.with no way to re-add it?
[doublepost=1533437193][/doublepost]I could temporarily use the LOCKED vie dosdude to verify that the i7 works again, then use the dump to restore cloud/face/message.
RecoveryHDMeta.DMG, extract it, reopen it on Pacifist, go to the Firmware folder, extract the LOCKED.fd file.with no way to re-add it?
[doublepost=1533437193][/doublepost]I could temporarily use the LOCKED vie dosdude to verify that the i7 works again, then use the dump to restore cloud/face/message.
[doublepost=1533437259][/doublepost]I've got the 10.13.5 combo, plus pacifist 3.6, so I guess when you're off youriPhone, you can walk me through it.