My iPod Touch 4 refuses to restore to beta versions. #532

AHH-LONG-DEE · 2024-07-14T04:19:43Z

AHH-LONG-DEE
Jul 14, 2024

Well i'm trying to restore to a beta version of iOS 5 on my iPod Touch 4. 5.0 9A5220p refuses to work, it has succeeded to start the restore but failed at around 10%. 5.1 refuses to work also and LiK says it failed to find a custom IPSW.

Here is the full output:

 *** Legacy iOS Kit ***
 - Script by LukeZGD -

* Version: v24.07.22 (ec8a7bf)
* Platform: linux (Linux Mint 21.3) 

* Device: iPod touch 4 (iPod4,1 - n81ap) in DFU mode
* iOS Version: Unknown
* To get iOS version, go to: Other Utilities -> Get iOS Version
* ECID: xxxxyyyyzzzz

* Only select unmodified IPSW for the selection. Do not select custom IPSWs

* Selected Target IPSW: /media/longnguyenvintagemobile/Meine Private Datene/iPod4,1_5.1_9B5127c_Restore.ipsw
* Target Version: 5.1-9B5127c
[WARNING] This is a tethered downgrade. Not recommended unless you know what you are doing.
* Tethered downgrade: you need to use Legacy iOS Kit every time to boot the device.
* Booting can be done by going to: Other Utilities -> Just Boot

 > Main Menu > Restore/Downgrade > Other (Tethered)
[Input] Select an option:
1) Select Target IPSW
2) Start Restore
3) Go Back
#? 2
[WARNING] iOS beta detected. Disabling jailbreak option
[Input] Memory Option for creating custom IPSW
* When this option is enabled, system RAM will be used for the IPSW creation process.
* I recommend to enable this option to speed up creating the custom IPSW.
* However, if your PC/Mac has less than 8 GB of RAM, disable this option.
* This option is enabled by default (Y). Select this option if unsure.
[Input] Enable this option? (Y/n): n
[Log] Memory option disabled by user.

[Log] Checking firmware keys in ../resources/firmware/iPod4,1/9B5127c
[Log] Preparing config file
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>FilesystemJailbreak</key>
    <false/>
    <key>needPref</key>
    <false/>
    <key>iBootPatches</key>
    <dict>
        <key>debugEnabled</key>
        <false/>
        <key>bootArgsInjection</key>
        <false/>
        <key>bootArgsString</key>
        <string>-v</string>
    </dict>
</dict>
</plist>
[Log] Generating firmware bundle for iPod4,1-5.1 (9B5127c) ...
Archive:  /media/longnguyenvintagemobile/Meine Private Datene/iPod4,1_5.1_9B5127c_Restore.ipsw
  inflating: manifest                
Archive:  /media/longnguyenvintagemobile/Meine Private Datene/iPod4,1_5.1_9B5127c_Restore.ipsw
  inflating: 038-3875-003.dmg        
  inflating: 038-3877-003.dmg        
  inflating: 038-3895-003.dmg        
  inflating: BuildManifest.plist     
  inflating: [email protected]  
  inflating: [email protected]  
  inflating: [email protected]  
  inflating: [email protected]  
  inflating: [email protected]  
  inflating: [email protected]  
  inflating: DeviceTree.n81ap.img3   
  inflating: [email protected]  
  inflating: [email protected]  
  inflating: iBoot.n81ap.RELEASE.img3  
  inflating: LLB.n81ap.RELEASE.img3  
  inflating: manifest                
  inflating: recoverymode@2x~iphone.s5l8930x.img3  
  inflating: iBEC.n81ap.RELEASE.dfu  
  inflating: iBSS.n81ap.RELEASE.dfu  
  inflating: kernelcache.release.n81  
  inflating: Restore.plist           
error: cannot open infile
error: Cannot open image-file.
rm: cannot remove 'options.n81.plist': No such file or directory
error: Cannot open image-file.
mv: cannot stat 'options.plist': No such file or directory
cat: options.n81.plist: No such file or directory
<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict>
<key>Filename</key><string>/media/longnguyenvintagemobile/Meine Private Datene/iPod4,1_5.1_9B5127c_Restore.ipsw</string>
<key>RootFilesystem</key><string>038-3895-003.dmg</string>
<key>RootFilesystemKey</key><string>998f85f93c88e4dbcd2995e69c40b46c33f6ae4beb5fc0e0719ad2b2a12165e9ba3a71b6</string>
<key>RootFilesystemSize</key><integer>30</integer>
<key>RamdiskOptionsPath</key><string>/usr/local/share/restore/options.n81.plist</string>
<key>SHA1</key><string>a0436b05c930bda3743f2c15103f23ab047deffd</string>
<key>FilesystemPackage</key><dict/><key>RamdiskPackage</key><dict/>
<key>Firmware</key><dict>
<key>iBSS</key><dict><key>File</key><string>Firmware/dfu/iBSS.n81ap.RELEASE.dfu</string><key>IV</key><string>2dfb4bdae82ae7549e88430882215329</string><key>Key</key><string>93f7f1eca0418eaa937c7ea9b1e39d5d2280cdaddc2a1cda023bc73f796a1d5e</string>
<key>Patch</key><true/>
<key>Decrypt</key><true/>
</dict>
<key>iBEC</key><dict><key>File</key><string>Firmware/dfu/iBEC.n81ap.RELEASE.dfu</string><key>IV</key><string>7e26d08fd8c0f88030a19523f953b188</string><key>Key</key><string>dd512fd8ba4088d90517ea5ce845b8a0a32b5dac3e6f9af1da165159221a1dfb</string>
<key>Patch</key><true/>
<key>Decrypt</key><true/>
</dict>
<key>RestoreDeviceTree</key><dict><key>File</key><string>Firmware/all_flash/all_flash.n81ap.production/DeviceTree.n81ap.img3</string><key>IV</key><string>0aeab8cc0de20d5b5cda439188c797b2</string><key>Key</key><string>d451bf890e450508084aa8f728570109f91ef6431ac7c40ae3c577d834631748</string><key>DecryptPath</key><string>Downgrade/RestoreDeviceTree</string>
<key>Decrypt</key><true/>
</dict>
<key>RestoreLogo</key><dict><key>File</key><string>Firmware/all_flash/all_flash.n81ap.production/[email protected]</string><key>IV</key><string>5b46d639c0174474e0d9448b21f170bb</string><key>Key</key><string>179d60fea2bffc6e65924366ed69f011cbe234a815dd98a3cbe1b9fbb879f2d4</string><key>DecryptPath</key><string>Downgrade/RestoreLogo</string>
<key>Decrypt</key><true/>
</dict>
<key>RestoreKernelCache</key><dict><key>File</key><string>kernelcache.release.n81</string><key>IV</key><string>a6917966e928abca57b75e35e3bdd26c</string><key>Key</key><string>8074192b89d4c51fa0f5006891f56df493a3ae75726c150ee94c866800346340</string><key>DecryptPath</key><string>Downgrade/RestoreKernelCache</string>
<key>Decrypt</key><true/>
</dict>
<key>Restore Ramdisk</key><dict><key>File</key><string></string><key>IV</key><string></string><key>Key</key><string></string>
<key>Decrypt</key><true/>
</dict>
</dict>
</dict></plist>
[Log] Beta iOS detected, preparing modified SystemVersion.plist
<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict>
<key>ProductBuildVersion</key><string>9B5127c</string>
<key>ProductCopyright</key><string>1983-2012 Apple Inc.</string>
<key>ProductName</key><string>iPhone OS</string>
<key>ProductVersion</key><string>5.1</string>
</dict></plist>
System/
System/Library/
System/Library/CoreServices/
System/Library/CoreServices/SystemVersion.plist
[Log] Preparing custom IPSW: ../bin/linux/x86_64/powdersn0w /media/longnguyenvintagemobile/Meine Private Datene/iPod4,1_5.1_9B5127c_Restore.ipsw temp.ipsw  -ramdiskgrow 10 systemversion.tar 
Hashing IPSW...
Matching IPSW in FirmwareBundles/... (a0436b05...)
checking: FirmwareBundles//iPod4,1_5.1_9B5127c.bundle/Info.plist
loading: 038-3875-003.dmg (17242308)
loading: 038-3877-003.dmg (17238212)
loading: 038-3895-003.dmg (776810496)
loading: BuildManifest.plist (21527)
loading: Firmware/ (0)
loading: Firmware/all_flash/ (0)
loading: Firmware/all_flash/all_flash.n81ap.production/ (0)
loading: Firmware/all_flash/all_flash.n81ap.production/[email protected] (15172)
loading: Firmware/all_flash/all_flash.n81ap.production/[email protected] (11844)
loading: Firmware/all_flash/all_flash.n81ap.production/[email protected] (37124)
loading: Firmware/all_flash/all_flash.n81ap.production/[email protected] (654276)
loading: Firmware/all_flash/all_flash.n81ap.production/[email protected] (170692)
loading: Firmware/all_flash/all_flash.n81ap.production/[email protected] (39812)
loading: Firmware/all_flash/all_flash.n81ap.production/DeviceTree.n81ap.img3 (52996)
loading: Firmware/all_flash/all_flash.n81ap.production/[email protected] (7364)
loading: Firmware/all_flash/all_flash.n81ap.production/[email protected] (7044)
loading: Firmware/all_flash/all_flash.n81ap.production/iBoot.n81ap.RELEASE.img3 (240132)
loading: Firmware/all_flash/all_flash.n81ap.production/LLB.n81ap.RELEASE.img3 (121348)
loading: Firmware/all_flash/all_flash.n81ap.production/manifest (349)
loading: Firmware/all_flash/all_flash.n81ap.production/recoverymode@2x~iphone.s5l8930x.img3 (129732)
loading: Firmware/dfu/ (0)
loading: Firmware/dfu/iBEC.n81ap.RELEASE.dfu (240132)
loading: Firmware/dfu/iBSS.n81ap.RELEASE.dfu (64004)
loading: Firmware/usr/ (0)
loading: Firmware/usr/local/ (0)
loading: Firmware/usr/local/standalone/ (0)
loading: kernelcache.release.n81 (6080260)
loading: Restore.plist (2003)
checking: FirmwareBundles/config.plist
[+] debugMode ? 0...
[+] needPref ? 0...
[+] jailbreak ? 0...
[*] restore bootArgs: cs_enforcement_disable=1 amfi_get_out_of_my_way=1 amfi=0xff
iBSS: encrypted input... /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: adfd83469f6f4a03ca7a2f6df60d94116cec23b414885681fe8eb79de12e31664a4505007b4061f35a4f25f5deef0fde
/home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: adfd83469f6f4a03ca7a2f6df60d94116cec23b414885681fe8eb79de12e31664a4505007b4061f35a4f25f5deef0fde
encrypted output... /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: adfd83469f6f4a03ca7a2f6df60d94116cec23b414885681fe8eb79de12e31664a4505007b4061f35a4f25f5deef0fde
[patchiBoot] filesize: f000
[patchiBoot] version: 1219
[patchiBoot] iboot_type: iBSS
[patchiBoot] iboot_base: 84000000
[patchiBoot] verify_shsh: 000054ac
[patchiBoot] writing buf
writing... success
iBSS: /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: adfd83469f6f4a03ca7a2f6df60d94116cec23b414885681fe8eb79de12e31664a4505007b4061f35a4f25f5deef0fde
/home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: adfd83469f6f4a03ca7a2f6df60d94116cec23b414885681fe8eb79de12e31664a4505007b4061f35a4f25f5deef0fde
/home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: adfd83469f6f4a03ca7a2f6df60d94116cec23b414885681fe8eb79de12e31664a4505007b4061f35a4f25f5deef0fde
writing... success
[*] restore bootArgs: cs_enforcement_disable=1 amfi_get_out_of_my_way=1 amfi=0xff
iBEC: encrypted input... /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: fb890504b9e89f311eff946633d043e4d39eadd4e696f1036d9fbf3e647e626ce6414bd22d74f67212db6c068d8370cb
/home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: fb890504b9e89f311eff946633d043e4d39eadd4e696f1036d9fbf3e647e626ce6414bd22d74f67212db6c068d8370cb
encrypted output... /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: fb890504b9e89f311eff946633d043e4d39eadd4e696f1036d9fbf3e647e626ce6414bd22d74f67212db6c068d8370cb
[patchiBoot] filesize: 3a000
[patchiBoot] version: 1219
[patchiBoot] iboot_type: iBEC
[patchiBoot] iboot_base: 5ff00000
[patchiBoot] verify_shsh: 00013acc
[patchiBoot] debug_enabled: 000140cc
[patchiBoot] ticket_patch1: 000167ce
[patchiBoot] ticket_patch2: 00016844
[patchiBoot] boot_args_null: 00014fe8
[patchiBoot] boot_args: 00014fe4
[patchiBoot] reliance_str: 00037ef8
[patchiBoot] bootArgs: cs_enforcement_disable=1 amfi_get_out_of_my_way=1 amfi=0xff -progress rd=md0 nand-enable-reformat=1
[patchiBoot] writing buf
writing... success
iBEC: /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: fb890504b9e89f311eff946633d043e4d39eadd4e696f1036d9fbf3e647e626ce6414bd22d74f67212db6c068d8370cb
/home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: fb890504b9e89f311eff946633d043e4d39eadd4e696f1036d9fbf3e647e626ce6414bd22d74f67212db6c068d8370cb
/home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: fb890504b9e89f311eff946633d043e4d39eadd4e696f1036d9fbf3e647e626ce6414bd22d74f67212db6c068d8370cb
writing... success
RestoreDeviceTree: /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 43787f62e0844314ffd9d1edcef62454f3acfe9bed8b738604745488f2d78caad564c12c1d47a4c1fd0474b666c5a5f5
/home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 43787f62e0844314ffd9d1edcef62454f3acfe9bed8b738604745488f2d78caad564c12c1d47a4c1fd0474b666c5a5f5
/home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 43787f62e0844314ffd9d1edcef62454f3acfe9bed8b738604745488f2d78caad564c12c1d47a4c1fd0474b666c5a5f5
writing... success
RestoreLogo: /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 0042f4f67e1ec5459d26bc7643909848ec22a6aa98b89e5dc04c050b617d44dba0c5a05296da7d3c89aaae7d9614653c
/home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 0042f4f67e1ec5459d26bc7643909848ec22a6aa98b89e5dc04c050b617d44dba0c5a05296da7d3c89aaae7d9614653c
/home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 0042f4f67e1ec5459d26bc7643909848ec22a6aa98b89e5dc04c050b617d44dba0c5a05296da7d3c89aaae7d9614653c
writing... success
RestoreKernelCache: /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 22aeacb588c4156e47bf629423c3f7f138a56956c2f56ed7b2aa4b1db20fd24a59b816cf52ee7a04ca5bdc821e96a3f7
/home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 22aeacb588c4156e47bf629423c3f7f138a56956c2f56ed7b2aa4b1db20fd24a59b816cf52ee7a04ca5bdc821e96a3f7
/home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 22aeacb588c4156e47bf629423c3f7f138a56956c2f56ed7b2aa4b1db20fd24a59b816cf52ee7a04ca5bdc821e96a3f7
writing... success
Restore Ramdisk: /home/longnguyenvintagemobile/Desktop/Legacy-iOS-Kit_linux_x86_64_v24.07.16/restore.sh: line 3070:  7135 Segmentation fault      (core dumped) "$dir/powdersn0w" "$ipsw_path.ipsw" temp.ipsw $ExtraArgs ${JBFiles[@]}
[Error] Failed to find custom IPSW. Please run the script again
* You may try selecting N for memory option
* Legacy iOS Kit v24.07.22 (ec8a7bf)
* Platform: linux (Linux Mint 21.3)

Here is the full output of the toolkit when it tries to restore to 5.0 9A5220p:
*** Legacy iOS Kit ***

Script by LukeZGD -

Version: v24.07.22 (ec8a7bf)
Platform: linux (Linux Mint 21.3)
Device: iPod touch 4 (iPod4,1 - n81ap) in Normal mode
iOS Version: 5.1.1 (9B206)
ECID: xxxxyyyyzzzz
Only select unmodified IPSW for the selection. Do not select custom IPSWs
Selected Target IPSW: /home/longnguyenvintagemobile/Downloads/iPod4,1_5.0_9A5220p_Restore.ipsw
Target Version: 5.0-9A5220p
[WARNING] This is a tethered downgrade. Not recommended unless you know what you are doing.
Tethered downgrade: you need to use Legacy iOS Kit every time to boot the device.
Booting can be done by going to: Other Utilities -> Just Boot

Main Menu > Restore/Downgrade > Other (Tethered)
[Input] Select an option:

Select Target IPSW
Start Restore
Go Back
#? 2
[WARNING] iOS beta detected. Disabling jailbreak option
[Input] Memory Option for creating custom IPSW

When this option is enabled, system RAM will be used for the IPSW creation process.
I recommend to enable this option to speed up creating the custom IPSW.
However, if your PC/Mac has less than 8 GB of RAM, disable this option.
This option is enabled by default (Y). Select this option if unsure.
[Input] Enable this option? (Y/n): n
[Log] Memory option disabled by user.

[Log] Found existing Custom IPSW. Skipping IPSW creation.
[Log] Starting multipatch
[Log] Checking URL in ../resources/firmware/iPod4,1/9B206/url
[Log] Checking firmware keys in ../resources/firmware/iPod4,1/9A5220p
[Log] Checking firmware keys in ../resources/firmware/iPod4,1/9B206
[Log] Getting 5.1.1 restore components
[Log] iBSS
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 72cfe517e7bfb47c0ba53cc56a95e75d380f4181ab36e5a130ce953aa6836213ac3e1d499090db5a87eaccde938e929b
[Log] Patch iBSS
main: Starting...
main: iBoot-1219 inputted.
patch_rsa_check: Entering...
find_bl_verify_shsh_5_6_7: Entering...
find_bl_verify_shsh_5_6_7: Found MOVW instruction at 0x4f26
find_bl_verify_shsh_5_6_7: Found BL verify_shsh at 0x54b8
find_bl_verify_shsh_5_6_7: Leaving...
patch_rsa_check: Patching BL verify_shsh at 0x54b8...
patch_rsa_check: Leaving...
main: Writing out patched file to iBSS.patched...
main: Quitting...
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 72cfe517e7bfb47c0ba53cc56a95e75d380f4181ab36e5a130ce953aa6836213ac3e1d499090db5a87eaccde938e929b
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 72cfe517e7bfb47c0ba53cc56a95e75d380f4181ab36e5a130ce953aa6836213ac3e1d499090db5a87eaccde938e929b
updating: Firmware/dfu/iBSS.n81ap.RELEASE.dfu (stored 0%)
updating: Firmware/dfu/iBSS.n81.RELEASE.dfu (stored 0%)
[Log] iBEC
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: bf715157bd195b488e24048afade0887c5dacf5040742f2291defcdc4e3567a404193bbac2eea07c89fe0f7276f70670
[Log] Patch iBEC
main: Starting...
main: iBoot-1219 inputted.
patch_boot_args: Entering...
patch_boot_args: Default boot-args string is at 0x324f9
patch_boot_args: boot-args xref is at 0x150a4
patch_boot_args: Relocating boot-args string...
patch_boot_args: "Reliance on this certificate" string found at 0x38188
patch_boot_args: Pointing default boot-args xref to 0x5ff38188...
patch_boot_args: Applying custom boot-args "rd=md0 -v nand-enable-reformat=1 amfi=0xff amfi_get_out_of_my_way=1 cs_enforcement_disable=1 pio-error=0"
patch_boot_args: Found LDR R6, =boot_args at 0x14e12
patch_boot_args: Found CMP R4, #0 at 0x14e50
patch_boot_args: Found IT EQ/IT NE at 0x14e52
patch_boot_args: Found MOV R6, R1 at 0x14e54
patch_boot_args: Found LDR R1, =null_str at 0x14e4e
patch_boot_args: Pointing LDR R1, =null_str to boot-args xref...
patch_boot_args: Leaving...
patch_debug_enabled: Entering...
find_dtre_get_value_bl_insn: Entering...
find_dtre_get_value_bl_insn: debug-enabled string is at 0x31f6c
find_dtre_get_value_bl_insn: "debug-enabled" xref is at 0x149a0
find_dtre_get_value_bl_insn: Found LDR R0, ="debug-enabled" at 0x14176
find_dtre_get_value_bl_insn: Found BL instruction at 0x1418c
find_dtre_get_value_bl_insn: Leaving...
patch_debug_enabled: Patching BL insn at 0x1418c...
patch_debug_enabled: Leaving...
patch_ticket_check: Entering...
patch_ticket_check: Found iBoot baseaddr 0x5ff00000
patch_ticket_check: Found iboot_vers_str at 0x280
patch_ticket_check: Found str_pointer at 0x308
patch_ticket_check: Found iboot_str_3_xref at 0x1691c
patch_ticket_check: Found ldr_intruction at 0x16882
patch_ticket_check: Found last_good_bl at 0x1688a...
patch_ticket_check: Found next_pop at 0x16910...
patch_ticket_check: Found next_pop at 0x5ff16910...
patch_ticket_check: Found last_branch at 0x16902...
patch_ticket_check: Patching in mov.w r0, #0 at 0x1688e...
patch_ticket_check: Patching in mov.w r1, #0 at 0x16892...
patch_ticket_check: NOPing useless stuff at 0x16896 to 0x16904 ...
patch_ticket_check: Leaving...
patch_rsa_check: Entering...
find_bl_verify_shsh_5_6_7: Entering...
find_bl_verify_shsh_5_6_7: Found MOVW instruction at 0x13372
find_bl_verify_shsh_5_6_7: Found BL verify_shsh at 0x13b8c
find_bl_verify_shsh_5_6_7: Leaving...
patch_rsa_check: Patching BL verify_shsh at 0x13b8c...
patch_rsa_check: Leaving...
main: Writing out patched file to iBEC.patched...
main: Quitting...
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: bf715157bd195b488e24048afade0887c5dacf5040742f2291defcdc4e3567a404193bbac2eea07c89fe0f7276f70670
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: bf715157bd195b488e24048afade0887c5dacf5040742f2291defcdc4e3567a404193bbac2eea07c89fe0f7276f70670
updating: Firmware/dfu/iBEC.n81ap.RELEASE.dfu (stored 0%)
updating: Firmware/dfu/iBEC.n81.RELEASE.dfu (stored 0%)
[Log] DeviceTree
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 61bf90e067624cc1a699851713e03ca0730f0669f2bea7339f7cc0421310913b50bf35183e95c420886448d565bc0e1f
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 61bf90e067624cc1a699851713e03ca0730f0669f2bea7339f7cc0421310913b50bf35183e95c420886448d565bc0e1f
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 61bf90e067624cc1a699851713e03ca0730f0669f2bea7339f7cc0421310913b50bf35183e95c420886448d565bc0e1f
updating: Downgrade/RestoreDeviceTree (stored 0%)
[Log] Kernelcache
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: dc649a94d7cbd986406df7fc93158abe5fa10faf69e249873a0fa269a7ad375e667f7fc8e10b23153ae0ff54e4f62241
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: dc649a94d7cbd986406df7fc93158abe5fa10faf69e249873a0fa269a7ad375e667f7fc8e10b23153ae0ff54e4f62241
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: dc649a94d7cbd986406df7fc93158abe5fa10faf69e249873a0fa269a7ad375e667f7fc8e10b23153ae0ff54e4f62241
updating: Downgrade/RestoreKernelCache (stored 0%)
[Log] RestoreRamdisk
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: cb9851000a277400aaf92c58b8156f1cf819a8ec489ad16396872a8ea93e2c035fb47a68b8464c73a64b3409d5af9b94
[Log] Grow ramdisk
grew volume: 30000000
[Log] Patch ASR
cp: cannot stat '../resources/firmware/FirmwareBundles/Down_iPod4,1_5.1.1_9B206.bundle/asr.patch': No such file or directory
bspatch: fopen(asr.patch): No such file or directory
file to add not found/home/longnguyenvintagemobile/Desktop/Legacy-iOS-Kit_linux_x86_64_v24.07.16/restore.sh: line 3360: 12323 Segmentation fault (core dumped) "$dir/hfsplus" "$1" add "$3".patched "$2"/"$3"
[Log] Extract options.plist from 5.0 IPSW
Archive: temp.ipsw
extracting: 038-1678-023.dmg
[Log] Modify options.plist
[Log] Repack Restore Ramdisk
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: cb9851000a277400aaf92c58b8156f1cf819a8ec489ad16396872a8ea93e2c035fb47a68b8464c73a64b3409d5af9b94
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: cb9851000a277400aaf92c58b8156f1cf819a8ec489ad16396872a8ea93e2c035fb47a68b8464c73a64b3409d5af9b94
[Log] Add Restore Ramdisk to IPSW
updating: 038-1678-023.dmg (stored 0%)
[Log] Found existing saved 6.1.6 blobs: ../saved/shsh/716053499178_iPod4,1_n81ap_6.1.6-10B500_3a88b7c3802f2f0510abc432104a15ebd8bd7154.shsh2

The device needs to be in recovery/DFU mode before proceeding.
[Input] Send device to recovery mode? (Y/n): y
[Log] Entering recovery mode...
[Log] Finding device in Recovery mode...
[Log] Found device in Recovery mode.
Get ready to enter DFU mode.
If you already know how to enter DFU mode, you may do so right now before continuing.
[Input] Select Y to continue, N to exit recovery mode (Y/n) y
Get ready...
02 01
Hold TOP and HOME buttons.
10 09 08 07 06 05 04 03 02 01
Release TOP button and keep holding HOME button.
08 07 06 05 04 03 02 01
[Log] Finding device in DFU mode...
[Log] Found device in DFU mode.
[Input] PwnDFU Tool Option
Select tool to be used for entering pwned DFU mode.
This option is set to ipwndfu by default (1). Select this option if unsure.
If the first option does not work, try the other option(s).
[Input] Select your option:

ipwndfu
ipwnder (limera1n)
ipwnder (SHAtter)
#? 1
[Log] Placing device to pwnDFU mode using ipwndfu
[Log] python2 from pyenv detected
[Log] Placing device to pwnDFU Mode using ipwndfu
Acquiring device handle.
Releasing device handle.
*** based on SHAtter exploit (segment overflow) by posixninja and pod2g ***
Acquiring device handle.
Found: CPID:8930 CPRV:20 CPFM:03 SCEP:01 BDID:08 ECID:000000A6B81D4D2A IBFL:00 SRTG:[iBoot-574.4]
Resetting USB counters.
Getting 0x40 of data from device.
Performing USB port reset.
Releasing device handle.
Acquiring device handle.
Requesting image validation.
Performing USB port reset.
Releasing device handle.
Acquiring device handle.
Getting 0x2c000 of data from device.
Releasing device handle.
Acquiring device handle.
Resetting USB counters.
Getting 0x140 of data from device.
Performing USB port reset.
Releasing device handle.
Acquiring device handle.
Requesting image validation.
Performing USB port reset.
Releasing device handle.
Acquiring device handle.
Sending 0x1cc of data to device.
Getting 0x2c000 of data from device.
Releasing device handle.
Acquiring device handle.
Releasing device handle.
Device is now in pwned DFU Mode.
[Log] Device iPod4,1 has no baseband/disabled baseband update
[Log] Extracting IPSW: ../iPod4,1_5.0_9A5220p_CustomT.ipsw
Archive: ../iPod4,1_5.0_9A5220p_CustomT.ipsw
inflating: ../iPod4,1_5.0_9A5220p_CustomT/038-1667-026.dmg
extracting: ../iPod4,1_5.0_9A5220p_CustomT/038-1678-023.dmg
inflating: ../iPod4,1_5.0_9A5220p_CustomT/BuildManifest.plist
creating: ../iPod4,1_5.0_9A5220p_CustomT/Downgrade/
extracting: ../iPod4,1_5.0_9A5220p_CustomT/Downgrade/RestoreDeviceTree
extracting: ../iPod4,1_5.0_9A5220p_CustomT/Downgrade/RestoreKernelCache
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Downgrade/RestoreLogo
creating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/
creating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/
creating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/all_flash.n81ap.production/
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/all_flash.n81ap.production/DeviceTree.n81ap.img3
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/all_flash.n81ap.production/LLB.n81ap.RELEASE.img3
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/all_flash.n81ap.production/applelogo-640x960.s5l8930x.img3
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/all_flash.n81ap.production/batterycharging0-640x960.s5l8930x.img3
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/all_flash.n81ap.production/batterycharging1-640x960.s5l8930x.img3
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/all_flash.n81ap.production/batteryfull-640x960.s5l8930x.img3
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/all_flash.n81ap.production/batterylow0-640x960.s5l8930x.img3
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/all_flash.n81ap.production/batterylow1-640x960.s5l8930x.img3
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/all_flash.n81ap.production/glyphcharging-640x960.s5l8930x.img3
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/all_flash.n81ap.production/glyphplugin-640x960.s5l8930x.img3
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/all_flash.n81ap.production/iBoot.n81ap.RELEASE.img3
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/all_flash.n81ap.production/manifest
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/all_flash/all_flash.n81ap.production/recoverymode-640x960.s5l8930x.img3
creating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/dfu/
extracting: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/dfu/iBEC.n81ap.RELEASE.dfu
extracting: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/dfu/iBSS.n81ap.RELEASE.dfu
creating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/usr/
creating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/usr/local/
creating: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/usr/local/standalone/
inflating: ../iPod4,1_5.0_9A5220p_CustomT/Restore.plist
inflating: ../iPod4,1_5.0_9A5220p_CustomT/kernelcache.release.n81
extracting: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/dfu/iBSS.n81.RELEASE.dfu
extracting: ../iPod4,1_5.0_9A5220p_CustomT/Firmware/dfu/iBEC.n81.RELEASE.dfu
[Log] Running idevicerestore with command: sudo ../bin/linux/x86_64/idevicerestore -ew "../iPod4,1_5.0_9A5220p_CustomT.ipsw"
Found device in DFU mode
Found ECID 716053499178
Identified device as n81ap, iPod4,1
Extracting BuildManifest from IPSW
Product Version: 5.0
Product Build: 9A5220p Major: 9
Device supports Image4: false
Variant: Developer Erase Install (IPSW)
This restore will erase your device data.
Getting ApNonce in dfu mode...
checking for local shsh
Using cached SHSH
Using cached filesystem from '../iPod4,1_5.0_9A5220p_CustomT/038-1667-026.dmg'
Extracting iBSS.n81ap.RELEASE.dfu...
Personalizing IMG3 component iBSS...
reconstructed size: 63813
Sending iBSS (63813 bytes)...
[==================================================] 100.0%
Nonce: 0d d4 77 09 89 ea 78 a4 d2 4a 7f 5b 9b 1e 23 93 cc 68 d8 ae
checking for local shsh
Using cached SHSH
Extracting iBEC.n81ap.RELEASE.dfu...
Personalizing IMG3 component iBEC...
reconstructed size: 239941
Sending iBEC (239941 bytes)...
[==================================================] 100.0%
INFO: device serial number is CCQHKSXWDT77
Getting ApNonce in recovery mode... 0d d4 77 09 89 ea 78 a4 d2 4a 7f 5b 9b 1e 23 93 cc 68 d8 ae
Sending APTicket (2764 bytes)
Recovery Mode Environment:
iBoot build-version=iBoot-1219.62.15
iBoot build-style=RELEASE
ramdisk-size=RELEASE
Extracting 038-1678-023.dmg...
Personalizing IMG3 component RestoreRamDisk...
reconstructed size: 30002217
Sending RestoreRamDisk (30002217 bytes)...
Extracting RestoreDeviceTree...
Not personalizing component RestoreDeviceTree...
Sending RestoreDeviceTree (53000 bytes)...
Extracting RestoreKernelCache...
Personalizing IMG3 component RestoreKernelCache...
reconstructed size: 6090441
Sending RestoreKernelCache (6090441 bytes)...
About to restore device...
Waiting for device...
Device 72b55ceedcad1d75a41d46aa09daed6b88986a17 is now connected in restore mode...
Connecting now...
Connected to com.apple.mobile.restored, version 12
Device 72b55ceedcad1d75a41d46aa09daed6b88986a17 has successfully entered restore mode
Hardware Information:
BoardID: 8
ChipID: 35120
UniqueChipID: 716053499178
ProductionMode: true
Waiting for NAND (28)
Creating partition map (11)
Creating filesystem (12)
Creating filesystem (12)
Checking filesystems (15)
Mounting filesystems (16)
Checking filesystems (15)
Mounting filesystems (16)
Unmounting filesystems (29)
Unmounting filesystems (29)
About to send RootTicket...
Sending RootTicket now...
Done sending RootTicket
About to send filesystem...
ERROR: Unable to connect to ASR client
ERROR: Unable to connect to ASR
ERROR: Unable to send filesystem
ERROR: Unable to successfully restore device
Got status message
Status: Fail
Log is available:
d, Compute locally
AppleAP3GDL::handleStart _calibrationInverseMatrix [69054 -391 -3172] [628 66235 2042] [2945 -1858 64060]
_odr200HzSampleInterval = 4735
AppleAP3GDL::probe -- Failed to Probe hardware or not the right version res=device error, ID=0x0
AppleEmbeddedI2CGyro::free .. why is someone calling free on me
AppleNANDLegacyFTL started with IOFlashStoragePartition provider
AppleNANDLegacyFTL located at physical nand block offset 16
metadata-whitening was found and it's set to 1
default-ftl-version was found and it's set to 1
diag-bits is supplied by AppleNANDFTL
[FTL:MSG] Apple NAND Driver (AND) RW
[FTL:MSG] FIL_Init [OK]
[FTL:MSG] BUF_Init [OK]
[FTL:MSG] FPart Init [OK]
BSD root: md0, major 2, minor 0
com.apple.AppleFSCompressionTypeZlib kmod start
com.apple.AppleFSCompressionTypeZlib load succeeded
virtual bool AppleMobileFileIntegrity::start(IOService*): built Apr 17 2012 13:32:54
L2TP domain init
L2TP domain init complete
PPTP domain init
AppleSamsungSerial: Identified Serial Port on ARM Device=uart1 at 0x82600000(0xcd6dd000)
AppleSamsungSerial: Identified Serial Port on ARM Device=uart2 at 0x82700000(0xcd6df000)
ApplePinotLCD: _lcdPanelID: 0xb2a40b88 _lcdPanelClass: 2
virtual bool AppleCLCD::start_hardware(IOService ), clcdDitherCfg: 0x80000001 mIsCLCDDitherFor8Bits: 1
IOReturn AppleCLCD::set_ditherTable_state(bool), mIsCLCDDitherFor8Bits is true, no dynamic dither table.
AppleM2ScalerCSCDriver: Added framebuffer device: AppleCLCD id: c39e0000
AppleRGBOUT: TVOUT device is detected
AppleMultitouchN1SPI: successfully started
IOSDIOController::enumerateSlot(): Searching for SDIO device in slot: 0
IOSDIOController::enumerateSlot(): Found SDIO I/O device. Function count(1), memory(0)
IOSDIOIoCardDevice::parseFn0CISTuple(): Device manufacturer ID 0x2d0, Product ID 0x4329
IOSDIOIoCardDevice::parseFn0CISTuple(): Manufacturer: ""
IOSDIOIoCardDevice::parseFn0CISTuple(): Product: ""
IOSDIOIoCardDevice::parseFn0CISTuple(): ProductInfo0: "s=B1"
IOSDIOIoCardDevice::parseFn0CISTuple(): ProductInfo1: "P=N81 m=2.2 V=m"
AppleBCMWLANBusInterfaceSdio::start(): Started by: IOSDIOIoCardDevice, AppleBCMWLANV2-91.25 Apr 8 2012 21:53:02
AppleBCMWLANCore::init(): AppleBCMWLANV2-91.25 Apr 8 2012 21:53:07
AppleBCMWLANCore::attachBusGated(): Bus Driver Initialization Time 39.805807125
AppleBCMWLANCore:attachBusGated(): Starting with MAC Address: 44:d8:84:c1:6b:fc
AppleBCMWLANCore::powerStateWillChangeToGated(): Received power state change before driver has initialized, ignoring
AppleBCMWLANCore::powerStateDidChangeToGated(): Received power state change before driver has initialized, ignoring
AppleMultitouchN1SPI: detected HBPP. driver will be kept alive
AppleD1815PMUPowerSource: AppleUSBCableDetect 1
AppleD1815PMUPowerSource: AppleUSBCableType USBHost
AppleSynopsysOTGDevice::init : Logging Buffer Length = 4K
AppleSynopsysOTGDevice::start : buffer-options 0x00000400
AppleSynopsysOTGDevice::start : object is 0xc0738200, registers at 0xcdebe000, 0x86100000 physical
AppleSynopsysOTGDevice::findMaxEndpoints: in EPs: 7, out EPs: 7, max_endpoint: 8, num_endpoints: 14
AppleSynopsysOTGDevice::handleUSBCableConnect cable connected, but don't have device configuration yet
AppleSynopsysOTGDevice::start : start finished
display-scale = 2
display-rotation = 0
found suitable IOMobileFramebuffer: AppleCLCD
display: 640 x 960
found PTP interface
AppleSynopsysOTGDevice - Configuration: PTP
AppleSynopsysOTGDevice Interface: PTP
AppleSynopsysOTGDevice - Configuration: iPod USB Interface
AppleSynopsysOTGDevice Interface: USBAudioControl
AppleSynopsysOTGDevice Interface: USBAudioStreaming
AppleSynopsysOTGDevice Interface: IapOverUsbHid
AppleSynopsysOTGDevice - Configuration: PTP + Apple Mobile Device
AppleSynopsysOTGDevice Interface: PTP
AppleSynopsysOTGDevice Interface: AppleUSBMux
AppleSynopsysOTGDevice - Configuration: PTP + Apple Mobile Device + Apple USB Ethernet
AppleSynopsysOTGDevice Interface: PTP
AppleSynopsysOTGDevice Interface: AppleUSBMux
AppleSynopsysOTGDevice Interface: AppleUSBEthernet
AppleSynopsysOTGDevice::gated_registerFunction Register function USBAudioControl
AppleSynopsysOTGDevice::gated_registerFunction Register function USBAudioStreaming
IOAccessoryPortUSB::start
AppleSynopsysOTGDevice::gated_registerFunction Register function IapOverUsbHid
virtual bool AppleUSBDeviceMux::start(IOService) build: Apr 8 2012 21:53:25
init_waste
AppleSynopsysOTGDevice::gated_registerFunction Register function AppleUSBMux
AppleSynopsysOTGDevice::gated_registerFunction Register function AppleUSBEthernet
AppleUSBEthernetDevice::start: Host MAC address = 02:00:00:00:00:00
unrecognized request 'GetValue'
AppleSynopsysOTGDevice::gated_registerFunction Register function PTP
AppleSynopsysOTGDevice::gated_registerFunction all functions registered- we are ready to start usb stack
IOReturn AppleUSBDeviceMux::setPropertiesGated(OSObject*) setting debug level to 7
read new style signature 0x43313100 (line:389)
[FTL:MSG] VSVFL Register [OK]
[WMR:MSG] Metadata whitening is set in NAND signature
[FTL:MSG] VFL Init [OK]
AppleSynopsysOTGDevice::handleUSBReset
[FTL:MSG] VFL_Open [OK]
[FTL:MSG] YAFTL Register [OK]
AppleSynopsysOTGDevice::handleUSBReset
AppleUSBDeviceMux::handleConnectResult new session 0x842c44d0 established 62078<-lo0->49152 62078<-usb->1
AppleUSBDeviceMux::handleConnectResult new session 0x842c4370 established 62078<-lo0->49153 62078<-usb->2
void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0x842c4370
[FTL:MSG] FTL_Open [OK]
AppleDiagnosticDataAccess started: 0x84cc5840
AppleDiagnosticDataAccess started with AppleNANDConfigAccess
unrecognized request 'GetValue'
client protocol version 12
*** UUID E420E9EA-B9A8-388B-8ADC-D010E7BFB69F ***
Restore options:
UpdateBaseband => <CFBoolean 0x34fa18 [0x34f650]>{value = false}
UUID => <CFString 0x1cd842a0 [0x34f650]>{contents = "E420E9EA-B9A8-388B-8ADC-D010E7BFB69F"}
SystemPartitionSize => <CFNumber 0x1cd82960 [0x34f650]>{value = +1531, type = kCFNumberSInt64Type}
FlashNOR => <CFBoolean 0x34fa18 [0x34f650]>{value = false}
CreateFilesystemPartitions => <CFBoolean 0x34fa10 [0x34f650]>{value = true}
entering partition_nand_device
device supports boot-from-NAND
nand device is already partitioned
entering wait_for_storage_device
entering format_effaceable_storage
effaceable storage is formatted, clearing it
AppleUSBEthernetDevice::messageGated: kIOUSBDeviceInterfaceMessageTypeSetAlternateSetting, new alt-setting 1
AppleUSBDeviceMux::handleConnectResult new session 0x84cc5630 established 62078<-lo0->49154 62078<-usb->3
[effaceable:INIT] found current generation, 157, in group 0
[effaceable:INIT] started
[effaceable:INIT] started
LwVM::_partitionsFromConfig - loaded configuration for 2 partitions
AppleUSBDeviceMux::handleConnectResult new session 0x84cc5528 established 62078<-lo0->49155 62078<-usb->4
effaceable storaged cleared
entering ramrod_probe_media
device partitioning scheme is GPT
find_filesystem_partitions: storage=/dev/disk0s1 system=/dev/disk0s1s1 data=/dev/disk0s1s2
entering check_for_restore_log
executing /sbin/fsck_hfs -fy /dev/disk0s1s1
recv(11, 4) failed: connection closed
unable to read message size: -1
could not receive message
void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0x84cc5630
unrecognized request 'GetValue'
AppleUSBDeviceMux::handleConnectResult new session 0x84cc5738 established 62078<-lo0->49156 62078<-usb->5
** /dev/rdisk0s1s1
Executing fsck_hfs (version diskdev_cmds-547.123).
** Checking Journaled HFS Plus volume.
** Detected a case-sensitive volume.
The volume name is Hoodoo9B206.N81OS
** Checking extents overflow file.
** Checking catalog file.
** Checking multi-linked files.
** Checking catalog hierarchy.
** Checking extended attributes file.
** Checking volume bitmap.
** Checking volume information.
** Trimming unused blocks.
** The volume Hoodoo9B206.N81OS appears to be OK.
executing /sbin/mount -t hfs /dev/disk0s1s1 /mnt1
restore log does not exist
entering clean_NAND
NAND format complete
entering ramrod_probe_media
find_filesystem_partitions: storage=/dev/disk0 system= data=
entering format_storage_for_LwVM
entering ramrod_probe_media
device partitioning scheme is GPT
unexpected partition 'LwVM' - skipping
find_filesystem_partitions: storage=/dev/disk0s1 system= data=
entering create_filesystem_partitions
User specified system partition size, skipping firmware extras size.
No padding dictionary specified, returning default padding value 0
system partition padding size is: 0 bytes
unable to open : No such file or directory
creating 2 partitions
creating encrypted data partition
LwVM::_partitionsFromConfig - loaded configuration for 1 partitions
entering ramrod_probe_media
device partitioning scheme is GPT
find_filesystem_partitions: storage=/dev/disk0s1 system=/dev/disk0s1s1 data=/dev/disk0s1s2
wipe entire partition: 1 (old = 0 new = 1531)
block size for /dev/disk0s1s1: 8192
/sbin/newfs_hfs -s -v System -J -b 8192 -n a=8192,c=8192,e=8192 /dev/disk0s1s1
executing /sbin/newfs_hfs -s -v System -J -b 8192 -n a=8192,c=8192,e=8192 /dev/disk0s1s1
LwVM::_partitionsFromConfig - loaded configuration for 2 partitions
Initialized /dev/rdisk0s1s1 as a 1 GB HFS Plus volume with a 8192k journal
block size for /dev/disk0s1s2: 8192
/sbin/newfs_hfs -s -v Data -J -P -b 8192 -n a=8192,c=8192,e=8192 /dev/disk0s1s2
executing /sbin/newfs_hfs -s -v Data -J -P -b 8192 -n a=8192,c=8192,e=8192 /dev/disk0s1s2
Initialized /dev/rdisk0s1s2 as a 28 GB HFS Plus volume with a 8192k journal
entering ramrod_probe_media
device partitioning scheme is GPT
find_filesystem_partitions: storage=/dev/disk0s1 system=/dev/disk0s1s1 data=/dev/disk0s1s2
entering mount_filesystems
executing /sbin/fsck_hfs -fy /dev/disk0s1s1
** /dev/rdisk0s1s1
Executing fsck_hfs (version diskdev_cmds-547.123).
** Checking Journaled HFS Plus volume.
** Detected a case-sensitive volume.
The volume name is System
** Checking extents overflow file.
** Checking catalog file.
** Checking multi-linked files.
** Checking catalog hierarchy.
** Checking extended attributes file.
** Checking volume bitmap.
** Checking volume information.
** Trimming unused blocks.
** The volume System appears to be OK.
executing /sbin/mount -t hfs /dev/disk0s1s1 /mnt1
executing /sbin/fsck_hfs -fy /dev/disk0s1s2
** /dev/rdisk0s1s2
Executing fsck_hfs (version diskdev_cmds-547.1~23).
** Checking Journaled HFS Plus volume.
** Detected a case-sensitive volume.
The volume name is Data
** Checking extents overflow file.
** Checking catalog file.
** Checking multi-linked files.
** Checking catalog hierarchy.
** Checking extended attributes file.
** Checking volume bitmap.
** Checking volume information.
** Trimming unused blocks.
** The volume Data appears to be OK.
executing /sbin/mount -t hfs /dev/disk0s1s2 /mnt2
entering resize_system_partition_to_options
entering unmount_filesystems
entering ramrod_ticket_update
root-ticket-hash: <CFData 0x1cd86780 [0x34f650]>{length = 20, capacity = 20, bytes = 0x5623f0fd76ba57dddcc0057266d4e6785f0f1d5d}
ticket_hash: 5623F0FD76BA57DDDCC0057266D4E6785F0F1D5D
received valid ticket (2764 bytes)
entering restore_images
Successfully marked device node /dev/rdisk0s1s1 as static data
executing /usr/sbin/asr -source asr://localhost:12345 -target /dev/disk0s1s1 -erase -noprompt --chunkchecksum --puppetstrings
ASR: execv: /usr/sbin/asr: Exec format error

ERROR: Unable to restore device

[Log] Restoring done! Read the message below if any error has occurred:

If the restore failed on updating baseband:
-> Try disabling baseband update: ./restore.sh --disable-bbupdate
Please read the "Troubleshooting" wiki page in GitHub before opening any issue!
Your problem may have already been addressed within the wiki page.
If opening an issue in GitHub, please provide a FULL log/output. Otherwise, your issue may be dismissed.
Save the terminal output now if needed.
Legacy iOS Kit v24.07.22 (ec8a7bf)
Platform: linux (Linux Mint 21.3)

Answered by LukeZGD

Jul 14, 2024

just checked the apple wiki, there are no ramdisk keys for the iPod4,1 5.1 beta 1 and 2, only beta 3

that's why it's not working, and that out of the 5.1 betas, only beta 3 will work

for the 5.0 beta, i need to see the ipsw creation log/output

View full answer

LukeZGD · 2024-07-14T10:09:33Z

LukeZGD
Jul 14, 2024
Maintainer

just checked the apple wiki, there are no ramdisk keys for the iPod4,1 5.1 beta 1 and 2, only beta 3

that's why it's not working, and that out of the 5.1 betas, only beta 3 will work

for the 5.0 beta, i need to see the ipsw creation log/output

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

My iPod Touch 4 refuses to restore to beta versions. #532

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Uh oh!

My iPod Touch 4 refuses to restore to beta versions. #532

Uh oh!

AHH-LONG-DEE Jul 14, 2024

Replies: 1 comment

Uh oh!

LukeZGD Jul 14, 2024 Maintainer

AHH-LONG-DEE
Jul 14, 2024

LukeZGD
Jul 14, 2024
Maintainer