Replies: 3 comments 34 replies
-
|
same issue, i downgraded my newbootrom iphone 3gs to 3.1.3 before, about two years ago using this same tool and now it just doesnt work, did you figure it out or it's still giving you that issue? |
Beta Was this translation helpful? Give feedback.
-
|
I would need someone to test this out: update to the latest v25.06.34 then try installing alloc8 exploit i think this issue is exclusive to intel macs only on macos 12+ so only those users should test this, probably |
Beta Was this translation helpful? Give feedback.
-
|
I stopped charging, and a few minutes later, the screen went off |
Beta Was this translation helpful? Give feedback.
-
|
this issue doesnt happen only on intel macs on 12+, i also happen to get this issue on many different linux distros and different macs, i tried on 10.13, 10.14, 10.15 and 11 and also on different recommended linux distros, live and installed environments, still got the alloc8 issue... i haven't tried with the new update but i'll let you know... (unrelated, will there be also a fix for activating ipod touch 3 untethered ios 3.1.x?) |
Beta Was this translation helpful? Give feedback.
-
|
No matter what you do, alloc8 is not installed. |
Beta Was this translation helpful? Give feedback.
-
|
i downgraded my iphone 3gs new bootrom untethered about one or two years ago if i remember correctly, never heard or seen alloc8 or any issues about it, i wonder if it's a new add to the tool that's causing issues with it, i thought it was about my phone having a corrupted baseband but it looks like it isn't as i even tried with other 3gs's |
Beta Was this translation helpful? Give feedback.
-
What is the issue you have exactly? Is it the same? I have been testing on macos and linux and they work just fine also no, ipod touch 3 3.1.x will not be fixed, see the pinned issue |
Beta Was this translation helpful? Give feedback.
-
|
it's the same alloc8 issue, i tried many iphone 3gs's even installing the alloc8 before doing anything but it keeps failing, i also used different cables in case it was that the issue but it looks like it isnt..
|
Beta Was this translation helpful? Give feedback.
-
|
i restored to ios 6.1.6 and tried to install alloc8, it just fails |
Beta Was this translation helpful? Give feedback.
-
well yeah, youre not supposed to use alloc8 on 6.1.6 or 4.1. |
Beta Was this translation helpful? Give feedback.
-
|
Is there a case of an error because of the Thunderbolt hub? |
Beta Was this translation helpful? Give feedback.
-
|
i honestly have no idea why your mac is not detecting your device in recovery mode. there is something you can try: while its in "Waiting for iBSS to enter Recovery Mode" and the device is on the white screen, quickly unplug and replug your device. if it still doesnt work, then it might be better to just boot a linux live usb and do the alloc8 install from there, i'll try investigating this on a later date (it works just fine on my arm mac tho) |
Beta Was this translation helpful? Give feedback.
-
|
I will try Linux tomorrow.. |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
*** Legacy iOS Kit ***
Version: v25.06.31 (688129c)
Platform: macos (Ventura 13.7.6 - x86_64)
Device: iPhone 3GS (iPhone2,1 - n88ap) in DFU mode
This iPhone 3GS is a new bootrom model
Cannot check for manufacturing date in DFU mode
iOS Version: Unknown
To get iOS version, go to: Misc Utilities -> Get iOS Version
ECID: 3043271441741
Pwned: limera1n
Only select unmodified IPSW for the selection. Do not select custom IPSWs
Selected Target IPSW: ../iPhone2,1_3.1.3_7E18_Restore.ipsw
Selected Target IPSW is validated
Hacktivation is supported for this restore
You can select your own custom logo and recovery image. This is optional and an experimental option
Note: The images must be in PNG format, and up to 320x480 resolution only
Note 2: The custom images might not work, current support is spotty
No custom Apple logo selected
No custom recovery logo selected
This restore will have baseband update disabled
[Log] Jailbreak option is not available for this version. You may jailbreak (and hacktivate) later after the restore
[Input] Memory Option for creating custom IPSW
[Input] Enable this option? (Y/n):
-> Yes
No
[Log] Memory option enabled.
[Input] Verbose Boot Option
[Input] Enable this option? (Y/n):
-> Yes
No
[Log] Verbose boot option enabled.
[Log] Device seems to be already in pwned DFU mode
- Pwned: limera1n
FilesystemJailbreak needPref iBootPatches debugEnabled bootArgsInjection bootArgsString -v [Log] Generating firmware bundle for iPhone2,1-3.1.3 (7E18) old... Archive: ../iPhone2,1_3.1.3_7E18_Restore.ipsw inflating: manifest Archive: ../iPhone2,1_3.1.3_7E18_Restore.ipsw inflating: 018-6495-022.dmg /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 657029ec782d39a538418c0305cf98a7b8a7f38fcfa602e4dad677de90ee4bf91f3a81918aeded7b8bf1388f511aaf4f No such file or directory Filename../iPhone2,1_3.1.3_7E18_Restore.ipsw RootFilesystem018-6483-022.dmg RootFilesystemKey9b3fd35bad7d5307d85ce4b38b8e56bd680ef5a72a8f3b615f8d4f16c14bdcf3c3b24c6c RootFilesystemSize780 RamdiskOptionsPath/usr/local/share/restore/options.plist SHA18cb3775e62c6f72059a962bf891b4e145b965052 RamdiskPatches asr Fileusr/sbin/asrPatchasr.patch FilesystemPatches FirmwarePatches iBSSFileFirmware/dfu/iBSS.n88ap.RELEASE.dfuIVbb70b0109c0f6a323dba00df5806b111Keya95c62b3665493c92eebf3d471ea5949827fd9aab4248cd99d66bc2edf7ac4fe PatchiBSS.n88ap.RELEASE.patch RestoreDeviceTreeFileFirmware/all_flash/all_flash.n88ap.production/DeviceTree.n88ap.img3IV10ec8038e1464807987c360d3cf84de8Key2427e2c9330e9fdbc1b48111fe5c0c1e48f3460774079ebe5db8d504463e38dbDecryptPathDowngrade/RestoreDeviceTree RestoreLogoFileFirmware/all_flash/all_flash.n88ap.production/applelogo.s5l8920x.img3IV106f935de2be3fcc56fc018124b6799bKeyf662084d788a33650f441451106a6b628051fc7f7697a0eb6948abcf3d151a15DecryptPathDowngrade/RestoreLogo RestoreKernelCacheFilekernelcache.release.s5l8920xIV1d269ab89cb5d86caf9c24927be9a04bKeycb626d43047477c2f376def673ed8c226b6b2f180ee65f7c2997b666273d695eDecryptPathDowngrade/RestoreKernelCache Restore RamdiskFile018-6495-022.dmgIV50a5d7418e3091a2c1d878495a6dbc6aKey217c7c38387264f2a2fef7a661d1bbeb705e7c90581c5b73055fe44f5bbc0498 iBootFileFirmware/all_flash/all_flash.n88ap.production/iBoot.n88ap.RELEASE.img3IV5ff65ada6a48ea38adad2df3390d64acKey88d0a0c2f05f3e54168eef00eed7958467503a204619be95dccca4606f857b2a PatchiBoot.n88ap.RELEASE.patch KernelCacheFilekernelcache.release.s5l8920xIV1d269ab89cb5d86caf9c24927be9a04bKeycb626d43047477c2f376def673ed8c226b6b2f180ee65f7c2997b666273d695e Patchkernelcache.release.patch [Log] Preparing custom IPSW: ../bin/macos/ipsw ../iPhone2,1_3.1.3_7E18_Restore.ipsw temp.ipsw -memory -ramdiskgrow 10 Hashing IPSW... Matching IPSW in FirmwareBundles/... (8cb3775e...) checking: FirmwareBundles//Down_iPhone2,1_3.1.3_7E18.bundle/Info.plist loading: .fseventsd/ (0) loading: .fseventsd/63657330b00ebb38 (187) loading: .fseventsd/fseventsd-uuid (36) loading: 018-6483-022.dmg (275537920) loading: 018-6489-023.dmg (12319044) loading: 018-6495-022.dmg (12323140) loading: BuildManifest.plist (21288) loading: Firmware/ (0) loading: Firmware/all_flash/ (0) loading: Firmware/all_flash/all_flash.n88ap.production/ (0) loading: Firmware/all_flash/all_flash.n88ap.production/applelogo.s5l8920x.img3 (9668) loading: Firmware/all_flash/all_flash.n88ap.production/batterycharging0.s5l8920x.img3 (19780) loading: Firmware/all_flash/all_flash.n88ap.production/batterycharging1.s5l8920x.img3 (24964) loading: Firmware/all_flash/all_flash.n88ap.production/batteryfull.s5l8920x.img3 (76164) loading: Firmware/all_flash/all_flash.n88ap.production/batterylow0.s5l8920x.img3 (56836) loading: Firmware/all_flash/all_flash.n88ap.production/batterylow1.s5l8920x.img3 (65348) loading: Firmware/all_flash/all_flash.n88ap.production/DeviceTree.n88ap.img3 (45252) loading: Firmware/all_flash/all_flash.n88ap.production/glyphcharging.s5l8920x.img3 (20420) loading: Firmware/all_flash/all_flash.n88ap.production/glyphplugin.s5l8920x.img3 (19396) loading: Firmware/all_flash/all_flash.n88ap.production/iBoot.n88ap.RELEASE.img3 (178564) loading: Firmware/all_flash/all_flash.n88ap.production/LLB.n88ap.RELEASE.img3 (67972) loading: Firmware/all_flash/all_flash.n88ap.production/manifest (341) loading: Firmware/all_flash/all_flash.n88ap.production/needservice.s5l8920x.img3 (20484) loading: Firmware/all_flash/all_flash.n88ap.production/recoverymode.s5l8920x.img3 (47940) loading: Firmware/dfu/ (0) loading: Firmware/dfu/iBEC.n88ap.RELEASE.dfu (100740) loading: Firmware/dfu/iBSS.n88ap.RELEASE.dfu (100740) loading: kernelcache.release.s5l8920x (4116996) loading: Restore.plist (1764) iBSS: Firmware/dfu/iBSS.n88ap.RELEASE.dfu (FirmwareBundles//Down_iPhone2,1_3.1.3_7E18.bundle/iBSS.n88ap.RELEASE.patch)... encrypted input... /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: e69869c8271000824f6063c05d34c2fe1b272795e1db76be4781ba68f2ebe86b63c63e080e6fc44c2b81aff20b3b2220 /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: e69869c8271000824f6063c05d34c2fe1b272795e1db76be4781ba68f2ebe86b63c63e080e6fc44c2b81aff20b3b2220 encrypted output... /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: e69869c8271000824f6063c05d34c2fe1b272795e1db76be4781ba68f2ebe86b63c63e080e6fc44c2b81aff20b3b2220 writing... success RestoreDeviceTree: /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 52758b124c8ebb92f10390e8c2a2f9a4d3fb604454a8598ec9a7a804e780f87d988bc12b6206d269f570cbabb42fc13c /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 52758b124c8ebb92f10390e8c2a2f9a4d3fb604454a8598ec9a7a804e780f87d988bc12b6206d269f570cbabb42fc13c /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 52758b124c8ebb92f10390e8c2a2f9a4d3fb604454a8598ec9a7a804e780f87d988bc12b6206d269f570cbabb42fc13c writing... success RestoreLogo: /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 12ceabc88f00c387edf2e773222ff11c312067b2b48b295651957d7b2342814ee84b3d00915d1954cba1e01eb4b345ec /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 12ceabc88f00c387edf2e773222ff11c312067b2b48b295651957d7b2342814ee84b3d00915d1954cba1e01eb4b345ec /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 12ceabc88f00c387edf2e773222ff11c312067b2b48b295651957d7b2342814ee84b3d00915d1954cba1e01eb4b345ec writing... success RestoreKernelCache: /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 4e5fc89b9bd7dd956acc6c0ccb27b2fd5c6c426172046498d48dcc7d2e1296a2eb3b58dd47017fbb86f1636a675b2ded /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 4e5fc89b9bd7dd956acc6c0ccb27b2fd5c6c426172046498d48dcc7d2e1296a2eb3b58dd47017fbb86f1636a675b2ded /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 4e5fc89b9bd7dd956acc6c0ccb27b2fd5c6c426172046498d48dcc7d2e1296a2eb3b58dd47017fbb86f1636a675b2ded writing... success iBoot: Firmware/all_flash/all_flash.n88ap.production/iBoot.n88ap.RELEASE.img3 (FirmwareBundles//Down_iPhone2,1_3.1.3_7E18.bundle/iBoot.n88ap.RELEASE.patch)... encrypted input... /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: df54f8382231104dd7eb30ed9e02d29284d1d811dc9bf70b7f89814bacc86d63a0e0bd5e648c162524f7ff72b8762c6b /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: df54f8382231104dd7eb30ed9e02d29284d1d811dc9bf70b7f89814bacc86d63a0e0bd5e648c162524f7ff72b8762c6b encrypted output... /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: df54f8382231104dd7eb30ed9e02d29284d1d811dc9bf70b7f89814bacc86d63a0e0bd5e648c162524f7ff72b8762c6b writing... success KernelCache: kernelcache.release.s5l8920x (FirmwareBundles//Down_iPhone2,1_3.1.3_7E18.bundle/kernelcache.release.patch)... encrypted input... /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 4e5fc89b9bd7dd956acc6c0ccb27b2fd5c6c426172046498d48dcc7d2e1296a2eb3b58dd47017fbb86f1636a675b2ded /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 4e5fc89b9bd7dd956acc6c0ccb27b2fd5c6c426172046498d48dcc7d2e1296a2eb3b58dd47017fbb86f1636a675b2ded /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/lzssfile.c:createAbstractFileFromComp:118: match: 4114216 7966720 7966720 dc f0 encrypted output... /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 4e5fc89b9bd7dd956acc6c0ccb27b2fd5c6c426172046498d48dcc7d2e1296a2eb3b58dd47017fbb86f1636a675b2ded /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/lzssfile.c:createAbstractFileFromComp:118: match: 4114216 7966720 7966720 dc f0 writing... success Writing out data.. run 100: start=25952256 sectors=512, length=19224, fileOffset=0x5355b9 run 200: start=52166656 sectors=512, length=204179, fileOffset=0x1397b46 run 300: start=78381056 sectors=512, length=228524, fileOffset=0x24d60d9 run 400: start=104595456 sectors=512, length=174401, fileOffset=0x363bc01 run 500: start=130809856 sectors=512, length=166990, fileOffset=0x466dfb5 run 600: start=157024256 sectors=512, length=123330, fileOffset=0x55c89fa run 700: start=183238656 sectors=512, length=147357, fileOffset=0x666ba59 run 800: start=209453056 sectors=512, length=112909, fileOffset=0x74a1743 run 900: start=235667456 sectors=512, length=134491, fileOffset=0x80176da run 1000: start=261881856 sectors=512, length=38588, fileOffset=0x898f35e run 1100: start=288096256 sectors=512, length=23614, fileOffset=0x92fae1d run 1200: start=314310656 sectors=512, length=113442, fileOffset=0x9c78ae6 run 1300: start=340525056 sectors=512, length=71671, fileOffset=0xabaff28 run 1400: start=366739456 sectors=512, length=7093, fileOffset=0xb8361c4 run 1500: start=392953856 sectors=512, length=67468, fileOffset=0xbbb8665 run 1600: start=419168256 sectors=512, length=113314, fileOffset=0xcba40c3 run 1700: start=445382656 sectors=512, length=32659, fileOffset=0xdcbe35d run 1800: start=471597056 sectors=512, length=144339, fileOffset=0xe62359f run 1900: start=497811456 sectors=512, length=146368, fileOffset=0xf3cecdb run 2000: start=524025856 sectors=512, length=88082, fileOffset=0x1006c38c Growing root to minimum: 780 /Users/lukee/Desktop/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 657029ec782d39a538418c0305cf98a7b8a7f38fcfa602e4dad677de90ee4bf91f3a81918aeded7b8bf1388f511aaf4f growing ramdisk: 12320768 -> 12361728 patching usr/sbin/asr (FirmwareBundles//Down_iPhone2,1_3.1.3_7E18.bundle/asr.patch)... retrieving...patching...writing... success got /usr/local/share/restore/options.plist from ramdisk start create restore options MinimumSystemPartition 780 CreateFilesystemPartitions SystemPartitionSize 780 UpdateBaseband Creating and writing DDM and partition map... run 0: sectors=1, left=1 run 0: sectors=60, left=60 malloc: 0x7feebd808200 4096 run 0: sectors=4, left=4 Writing main data blkx... run 100: sectors=512, left=1546752 run 200: sectors=512, left=1495552 run 300: sectors=512, left=1444352 run 400: sectors=512, left=1393152 run 500: sectors=512, left=1341952 run 600: sectors=512, left=1290752 run 700: sectors=512, left=1239552 run 800: sectors=512, left=1188352 run 900: sectors=512, left=1137152 run 1000: sectors=512, left=1085952 run 1100: sectors=512, left=1034752 run 1200: sectors=512, left=983552 run 1300: sectors=512, left=932352 run 1400: sectors=512, left=881152 run 1500: sectors=512, left=829952 run 1600: sectors=512, left=778752 run 1700: sectors=512, left=727552 run 1800: sectors=512, left=676352 run 1900: sectors=512, left=625152 run 2000: sectors=512, left=573952 run 2083: skipping sectors=531440, left=531456 run 2084: skipping sectors=14, left=16 Inserting main blkx... Inserting cSum data... Inserting nsiz data Writing free partition... Writing XML data... making size data we know to flip this size resource Generating UDIF metadata... Master checksum: 28482175 Writing out UDIF resource file... Cleaning up... Done. packing: .fseventsd/ (0) packing: .fseventsd/63657330b00ebb38 (187) packing: .fseventsd/fseventsd-uuid (36) packing: 018-6483-022.dmg (275375135) packing: 018-6489-023.dmg (12319044) packing: 018-6495-022.dmg (12364100) packing: BuildManifest.plist (21112) packing: Downgrade/ (0) packing: Downgrade/RestoreDeviceTree (45088) packing: Downgrade/RestoreKernelCache (4116820) packing: Downgrade/RestoreLogo (9472) packing: Firmware/ (0) packing: Firmware/all_flash/ (0) packing: Firmware/all_flash/all_flash.n88ap.production/ (0) packing: Firmware/all_flash/all_flash.n88ap.production/DeviceTree.n88ap.img3 (45252) packing: Firmware/all_flash/all_flash.n88ap.production/LLB.n88ap.RELEASE.img3 (67972) packing: Firmware/all_flash/all_flash.n88ap.production/applelogo.s5l8920x.img3 (9668) packing: Firmware/all_flash/all_flash.n88ap.production/batterycharging0.s5l8920x.img3 (19780) packing: Firmware/all_flash/all_flash.n88ap.production/batterycharging1.s5l8920x.img3 (24964) packing: Firmware/all_flash/all_flash.n88ap.production/batteryfull.s5l8920x.img3 (76164) packing: Firmware/all_flash/all_flash.n88ap.production/batterylow0.s5l8920x.img3 (56836) packing: Firmware/all_flash/all_flash.n88ap.production/batterylow1.s5l8920x.img3 (65348) packing: Firmware/all_flash/all_flash.n88ap.production/glyphcharging.s5l8920x.img3 (20420) packing: Firmware/all_flash/all_flash.n88ap.production/glyphplugin.s5l8920x.img3 (19396) packing: Firmware/all_flash/all_flash.n88ap.production/iBoot.n88ap.RELEASE.img3 (178564) packing: Firmware/all_flash/all_flash.n88ap.production/manifest (341) packing: Firmware/all_flash/all_flash.n88ap.production/needservice.s5l8920x.img3 (20484) packing: Firmware/all_flash/all_flash.n88ap.production/recoverymode.s5l8920x.img3 (47940) packing: Firmware/dfu/ (0) packing: Firmware/dfu/iBEC.n88ap.RELEASE.dfu (100740) packing: Firmware/dfu/iBSS.n88ap.RELEASE.dfu (100740) packing: Restore.plist (1764) packing: kernelcache.release.s5l8920x (4117012) [Log] Patch LLB Archive: ../iPhone2,1_3.1.3_7E18_Restore.ipsw inflating: LLB.n88ap.RELEASE.img3 updating: Firmware/all_flash/all_flash.n88ap.production/LLB.n88ap.RELEASE.img3 (stored 0%) [Log] Checking firmware keys in ../saved/firmware/iPhone2,1/7E18 [Log] Patch iBoot: -b pio-error=0 -v amfi=0xff cs_enforcement_disable=1 Archive: ../iPhone2,1_3.1.3_7E18_Restore.ipsw inflating: iBoot.n88ap.RELEASE.img3 /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: df54f8382231104dd7eb30ed9e02d29284d1d811dc9bf70b7f89814bacc86d63a0e0bd5e648c162524f7ff72b8762c6b main: Starting... main: iBoot-636 inputted. patch_boot_args: Entering... patch_boot_args: Default boot-args string is at 0x256a8 patch_boot_args: boot-args xref is at 0x16800 patch_boot_args: Relocating boot-args string... patch_boot_args: "Reliance on this certificate" string found at 0x28fc8 patch_boot_args: Pointing default boot-args xref to 0x4ff28fc8... patch_boot_args: Applying custom boot-args "pio-error=0 -v amfi=0xff cs_enforcement_disable=1" patch_boot_args: Found LDR R0, =boot_args at 0x160be patch_boot_args: Found CMP R1, #0 at 0x160c6 patch_boot_args: Found IT EQ/IT NE at 0x16b46 patch_boot_args: Found MOV R4, R6 at 0x16b48 patch_rsa_check: Entering... find_rsa_check_4: Entering... find_rsa_check_4: Found RSA check at 0x1d864 find_rsa_check_4: Leaving... patch_rsa_check: Patching RSA at 0x1d864... find_ldr_ecid: Entering... find_ldr_ecid: Found LDR instruction at 0x15a1c find_ldr_ecid: Found BL ECID at 0x15a2c find_ldr_ecid: Leaving... patch_rsa_check: Patching BL ECID at 0x15a2c... find_ldr_bord: Entering... find_ldr_bord: Found LDR BORD instruction at 0x159f2 find_ldr_bord: Found BL BORD at 0x15a04 find_ldr_bord: Leaving... patch_rsa_check: Patching BL BORD at 0x15a04... find_ldr_prod: Entering... find_ldr_prod: Found LDR PROD instruction at 0x15962 find_ldr_prod: Found BL PROD at 0x1596c find_ldr_prod: Leaving... patch_rsa_check: Patching BL PROD at 0x1596c... find_ldr_sepo: Entering... find_ldr_sepo: Found LDR SEPO instruction at 0x159d8 find_ldr_sepo: Found BL SEPO at 0x159e2 find_ldr_sepo: Leaving... patch_rsa_check: Patching BL SEPO at 0x159e2... main: Writing out patched file to iBoot.pwned... main: Quitting... /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: df54f8382231104dd7eb30ed9e02d29284d1d811dc9bf70b7f89814bacc86d63a0e0bd5e648c162524f7ff72b8762c6b /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: df54f8382231104dd7eb30ed9e02d29284d1d811dc9bf70b7f89814bacc86d63a0e0bd5e648c162524f7ff72b8762c6b updating: Firmware/all_flash/all_flash.n88ap.production/iBoot.n88ap.RELEASE.img3 (stored 0%) [Log] Extracting IPSW: ../iPhone2,1_3.1.3_7E18_CustomV.ipsw Archive: ../iPhone2,1_3.1.3_7E18_CustomV.ipsw creating: /Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/iPhone2,1_3.1.3_7E18_CustomV/.fseventsd inflating: ../iPhone2,1_3.1.3_7E18_CustomV//.fseventsd/63657330b00ebb38 inflating: ../iPhone2,1_3.1.3_7E18_CustomV//.fseventsd/fseventsd-uuid inflating: ../iPhone2,1_3.1.3_7E18_CustomV//018-6483-022.dmg inflating: ../iPhone2,1_3.1.3_7E18_CustomV//018-6489-023.dmg inflating: ../iPhone2,1_3.1.3_7E18_CustomV//018-6495-022.dmg inflating: ../iPhone2,1_3.1.3_7E18_CustomV//BuildManifest.plist creating: /Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/iPhone2,1_3.1.3_7E18_CustomV/Downgrade inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Downgrade/RestoreDeviceTree inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Downgrade/RestoreKernelCache inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Downgrade/RestoreLogo creating: /Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/iPhone2,1_3.1.3_7E18_CustomV/Firmware creating: /Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/iPhone2,1_3.1.3_7E18_CustomV/Firmware/all_flash creating: /Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/iPhone2,1_3.1.3_7E18_CustomV/Firmware/all_flash/all_flash.n88ap.production inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/all_flash/all_flash.n88ap.production/DeviceTree.n88ap.img3 extracting: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/all_flash/all_flash.n88ap.production/LLB.n88ap.RELEASE.img3 inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/all_flash/all_flash.n88ap.production/applelogo.s5l8920x.img3 inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/all_flash/all_flash.n88ap.production/batterycharging0.s5l8920x.img3 inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/all_flash/all_flash.n88ap.production/batterycharging1.s5l8920x.img3 inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/all_flash/all_flash.n88ap.production/batteryfull.s5l8920x.img3 inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/all_flash/all_flash.n88ap.production/batterylow0.s5l8920x.img3 inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/all_flash/all_flash.n88ap.production/batterylow1.s5l8920x.img3 inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/all_flash/all_flash.n88ap.production/glyphcharging.s5l8920x.img3 inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/all_flash/all_flash.n88ap.production/glyphplugin.s5l8920x.img3 extracting: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/all_flash/all_flash.n88ap.production/iBoot.n88ap.RELEASE.img3 inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/all_flash/all_flash.n88ap.production/manifest inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/all_flash/all_flash.n88ap.production/needservice.s5l8920x.img3 inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/all_flash/all_flash.n88ap.production/recoverymode.s5l8920x.img3 creating: /Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/iPhone2,1_3.1.3_7E18_CustomV/Firmware/dfu inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/dfu/iBEC.n88ap.RELEASE.dfu inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Firmware/dfu/iBSS.n88ap.RELEASE.dfu inflating: ../iPhone2,1_3.1.3_7E18_CustomV//Restore.plist inflating: ../iPhone2,1_3.1.3_7E18_CustomV//kernelcache.release.s5l8920x [Log] Running idevicerestore with command: ../bin/macos/idevicerestore -ec "../iPhone2,1_3.1.3_7E18_CustomV.ipsw" Found device in DFU mode Found ECID 3043271441741 Identified device as n88ap, iPhone2,1 Extracting Restore.plist from IPSW Product Version: 3.1.3 Product Build: 7E18 Major: 7 Device supports Image4: false Custom firmware requested. Disabled TSS request. Variant: Customer Erase Install (IPSW) This restore will erase your device data. Using cached filesystem from '../iPhone2,1_3.1.3_7E18_CustomV/018-6483-022.dmg' connecting to DFU Extracting iBSS.n88ap.RELEASE.dfu... Not personalizing component iBSS... Sending iBSS (100740 bytes)... [==================================================] 100.0% INFO: device serial number is XJ232079EDG Recovery Mode Environment: iBoot build-version=iBoot-636.66.33 iBoot build-style=RELEASE ramdisk-size=RELEASE Extracting 018-6495-022.dmg... Not personalizing component RestoreRamDisk... Sending RestoreRamDisk (12364100 bytes)... Extracting DeviceTree.n88ap.img3... Not personalizing component RestoreDeviceTree... Sending RestoreDeviceTree (45252 bytes)... Extracting kernelcache.release.s5l8920x... Not personalizing component RestoreKernelCache... Sending RestoreKernelCache (4117012 bytes)... About to restore device... Waiting for device... Device c00653a7dbe5f7d0d269c1f7cbeb90dc001f6a80 is now connected in restore mode... Connecting now... Connected to com.apple.mobile.restored, version 12 Device c00653a7dbe5f7d0d269c1f7cbeb90dc001f6a80 has successfully entered restore mode Hardware Information: BoardID: 0 ChipID: 35104 UniqueChipID: 3043271441741 ProductionMode: true Previous restore exit status: 0x100 Waiting for NAND (28) Creating partition map (11) Creating filesystem (12) Creating filesystem (12) About to send filesystem... Connected to ASR Validating the filesystem Filesystem validated Sending filesystem now... [==================================================] 100.0% Done sending filesystem Verifying restore (14) [==================================================] 100.0% Checking filesystems (15) Mounting filesystems (16) Checking filesystems (15) Mounting filesystems (16) About to send KernelCache... Extracting kernelcache.release.s5l8920x... Not personalizing component KernelCache... Sending KernelCache now... Done sending KernelCache Installing kernelcache (27) Fixing up /var (17) Modifying persistent boot-args (25) About to send NORData... Found firmware path Firmware/all_flash/all_flash.n88ap.production Getting firmware manifest from Firmware/all_flash/all_flash.n88ap.production/manifest Extracting LLB.n88ap.RELEASE.img3... Not personalizing component LLB... Extracting iBoot.n88ap.RELEASE.img3... Not personalizing component iBoot... Extracting DeviceTree.n88ap.img3... Not personalizing component DeviceTree... Extracting applelogo.s5l8920x.img3... Not personalizing component AppleLogo... Extracting recoverymode.s5l8920x.img3... Not personalizing component RecoveryMode... Extracting needservice.s5l8920x.img3... Not personalizing component NeedService... Extracting batterylow0.s5l8920x.img3... Not personalizing component BatteryLow0... Extracting batterylow1.s5l8920x.img3... Not personalizing component BatteryLow1... Extracting glyphcharging.s5l8920x.img3... Not personalizing component BatteryCharging... Extracting glyphplugin.s5l8920x.img3... Not personalizing component BatteryPlugin... Extracting batterycharging0.s5l8920x.img3... Not personalizing component BatteryCharging... Extracting batterycharging1.s5l8920x.img3... Not personalizing component BatteryCharging... Extracting batteryfull.s5l8920x.img3... Not personalizing component BatteryFull... Sending NORData now... Done sending NORData Flashing firmware (18) Updating gas gauge software (46) Got status message Unhandled status message (29) common.c:printing 18561 bytes plist: AMRError 29 Log iBoot version: iBoot-636.66.33 Seatbelt MACF policy initialized AppleS5L8920XPerformanceController: Dynamic Performance State Management Enabled with 3 voltage and 4 perfomance states AppleS5L8920XPerformanceController: Dynamic Voltage Control Enabled with 10000us activity timeout and 100us grace period IOSDIOController::init(): IOSDIOFamily-24.7 Dec 18 2009 01:49:51 AppleS5L8920XIOPSDIO::start(): AppleS5L8920X-164.12.2 Dec 20 2009 17:01:06 AppleBaseband: Could not find mux function AppleS5L8900XSerial: Identified Serial Port on ARM Device=uart0 at 0x82500000(0xecf5d000) AppleS5L8900XSerial: Identified Serial Port on ARM Device=uart4 at 0x82900000(0xecf65000) AppleImage3NORAccess::start imageVersion: 3 AppleS5L8920XIOPFMI: Found Chip ID 0x7294D7EC on FMI0:CE0 AppleS5L8920XIOPFMI: Found Chip ID 0x7294D7EC on FMI1:CE8 IOSDIOController::enumerateSlot(): Searching for SDIO device in slot: 0 AppleNANDFTL started with IOFlashStorageDevice provider AppleNANDFTL located at physical nand block offset 1 default-ftl-version was found and it's set to 1 [FTL:MSG] Apple NAND Driver (AND) RW [FTL:MSG] FIL_Init [OK] [FTL:MSG] BUF_Init [OK] [FTL:MSG] FPart Init [OK] IOSDIOController::enumerateSlot(): Found SDIO I/O device. Function count(1), memory(0) BSD root: md0, major 2, minor 0 com.apple.AppleFSCompressionTypeZlib load succeeded virtual bool AppleMobileFileIntegrity::start(IOService*): built Dec 21 2009 08:27:49 virtual bool AppleMobileFileIntegrity::start(IOService*): cs_enforcement disabled by boot-arg L2TP domain init L2TP domain init complete PPTP domain init Jettisoning kext bootstrap segment. AppleSerialMultiplexer: adap::start: Frame size is 2044, Rx Buffer count is 16 AppleSerialMultiplexer: mux::start: created new mux (13) for spi-baseband with adapter BasebandSPIDevice AppleSerialMultiplexer: debugparams::init: Parsed flags "" ( 0 ) AppleS5L8900XSerial: Identified Serial Port on ARM Device=uart1 at 0x82600000(0xed2f5000) AppleS5L8900XSerial: Identified Serial Port on ARM Device=uart2 at 0x82700000(0xed2fd000) AppleS5L8900XSerial: Identified Serial Port on ARM Device=uart3 at 0x82800000(0xed306000) AppleMultitouchN1SPI: successfully started AppleMultitouchN1SPI: using DMA for bootloading AppleMultitouchN1SPI: Logging is ENABLED IOSurface: buffer allocation size is zero AppleSynopsysOTGCore::start - iAP over USB enabled IOAccessoryPortSerial::start: could not set up serial port: device is offline AppleSynopsysOTGDevice::findMaxEndpoints: in EPs: 5 out, EPs: 5, max_endpoint: 7, num_endpoints: 12 AppleMultitouchN1SPI: detected HBPP. driver will be kept alive IOSDIOIoCardDevice::parseFn0CIS(): Device manufacturer ID 0x2d0, Product ID 0x4325 IOSDIOIoCardDevice::parseFn0CIS(): Manufacturer: "" IOSDIOIoCardDevice::parseFn0CIS(): Product: "" IOSDIOIoCardDevice::parseFn0CIS(): ProductInfo0: "s=D1" IOSDIOIoCardDevice::parseFn0CIS(): ProductInfo1: "P=N88 m=3.1" AppleBCMWLAN::init(): AppleBCMWLAN-1.25 Dec 18 2009 01:58:12 AppleBCMWLAN::init(): Starting with debug level: 4, debug flags: 00000000 AppleBCMWLAN::init(): AppleBCMWLAN-1.25 Dec 18 2009 01:58:12 AppleBCMWLAN::init(): Starting with debug level: 4, debug flags: 00000000 AppleD1755PMUPowerSource: AppleUSBCableDetect 1 AppleSynopsysOTGDevice::handleUSBCableConnect cable connected, but don't have device configuration yet found suitable IOMobileFramebuffer: AppleM2CLCD AppleSynopsysOTGDevice - Configuration: PTP AppleSynopsysOTGDevice Interface: PTP AppleSynopsysOTGDevice - Configuration: iPod USB Interface AppleSynopsysOTGDevice Interface: USBAudioControl AppleSynopsysOTGDevice Interface: USBAudioStreaming AppleSynopsysOTGDevice Interface: IapOverUsbHid AppleSynopsysOTGDevice - Configuration: PTP + Apple Mobile Device AppleSynopsysOTGDevice Interface: PTP AppleSynopsysOTGDevice Interface: AppleUSBMux AppleSynopsysOTGDevice - Configuration: PTP + Apple Mobile Device + Apple USB Ethernet AppleSynopsysOTGDevice Interface: PTP AppleSynopsysOTGDevice Interface: AppleUSBMux AppleSynopsysOTGDevice Interface: AppleUSBEthernet AppleSynopsysOTGDevice::gated_IOAccessoryPortUSB::start virtual bool AppleUSBDeviceMux::start(IOService*) build: Dec 18 2009 01:58:38 registerFunction Register function USBAudioControl AppleSynopsysOTGDevice::gated_registerFunction Register function USBAudioStreaming AppleSynopsysOTGDevice::gated_registerFunction Register function IapOverUsbHid init_waste AppleSynopsysOTGDevice::gated_registerFunction Register function AppleUSBMux AppleSynopsysOTGDevice::gated_registerFunction Register function AppleUSBEthernet AppleUSBEthernetDevice::start: Device MAC address = 0a:0b:ad:0b:ab:e0 AppleUSBEthernetDevice::start: Host MAC address = 84:29:99:8c:48:9f AppleSynopsysOTGDevice::gated_registerFunction Register function PTP AppleSynopsysOTGDevice::gated_registerFunction all functions registered- we are ready to start usb stack AppleSynopsysOTGCore::setCurrentLimit: current:0, suspended:0 read new style signature 0x43313133 (line:375) [FTL:MSG] VSVFL Register [OK] [FTL:MSG] VFL Init [OK] virtual IOReturn AppleUSBDeviceMux::setProperties(OSObject*) setting debug level to 7 [FTL:MSG] VFL_Open [OK] [FTL:MSG] YAFTL Register [OK] [FTL:MSG] FTL_Open [OK] AppleSynopsysOTGDevice::handleUSBReset AppleSynopsysOTGCore::setCurrentLimit: current:100, suspended:0 AppleSynopsysOTGCore::setCurrentLimit: current:100, suspended:0 recv(5, 4) failed: connection closed unable to read message size: -1 could not receive message close(caller = 0x3afd): remote port = 49152 recv(9, 4) failed: connection closed unable to read message size: -1 close(caller = 0x3afd): remote port = 49154 unrecognized request 'GetValue' recv(15, 4) failed: connection closed recv(5, 4) failed: connection closed recv(12, 4) failed: connection closed could not receive message recv(13, 4) failed: connection closed recv(27, 4) failed: connection closed recv(30, 4) failed: connection closed recv(33, 4) failed: connection closed recv(36, 4) failed: connection closed recv(39, 4) failed: connection closed unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 close(caller = 0x3afd): remote port = 49153 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 could not receive message could not receive message could not receive message could not receive message could not receive message could not receive message could not receive message could not receive message could not receive message close(caller = 0x3afd): remote port = 49156 close(caller = 0x3afd): remote port = 49155 close(caller = 0x3afd): remote port = 49159 close(caller = 0x3afd): remote port = 49160 close(caller = 0x3afd): remote port = 49161 close(caller = 0x3afd): remote port = 49162 close(caller = 0x3afd): remote port = 49163 close(caller = 0x3afd): remote port = 49164 close(caller = 0x3afd): remote port = 49165 AppleSynopsysOTGCore::setCurrentLimit: current:500, suspended:0 AppleSynopsysOTGCore::setCurrentLimit: current:500, suspended:0 AppleSynopsysOTGDevice::stallBadSetupRequest request: 80 06 0f00 0000 0005 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4aa00 established 62078<-lo0->49152 62078<-usb->512 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4aa00 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4ae80 established 62078<-lo0->49153 62078<-usb->768 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4aa00 established 62078<-lo0->49154 62078<-usb->1024 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4ae80 AppleSynopsysOTGDevice::stallBadSetupRequest request: 80 06 0f00 0000 0005 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a900 established 62078<-lo0->49155 62078<-usb->1280 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4aa00 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4ae80 established 62078<-lo0->49156 62078<-usb->1536 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4ab00 established 62078<-lo0->49157 62078<-usb->1792 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4ae80 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a900 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4ae80 established 62078<-lo0->49158 62078<-usb->2048 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a800 established 62078<-lo0->49159 62078<-usb->2304 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a800 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a900 established 62078<-lo0->49160 62078<-usb->2560 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a900 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a800 established 62078<-lo0->49161 62078<-usb->2816 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a800 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a900 established 62078<-lo0->49162 62078<-usb->3072 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a900 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a800 established 62078<-lo0->49163 62078<-usb->3328 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a800 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a900 established 62078<-lo0->49164 62078<-usb->3584 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a900 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a800 established 62078<-lo0->49165 62078<-usb->3840 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a800 client protocol version 12 Restore options: SystemPartitionSize => <CFNumber 0x903960 [0xcff80]>{value = +780, type = kCFNumberSInt64Type} UpdateBaseband => <CFBoolean 0xd090c [0xcff80]>{value = false} CreateFilesystemPartitions => <CFBoolean 0xd0904 [0xcff80]>{value = true} MinimumSystemPartition => <CFNumber 0x9033c0 [0xcff80]>{value = +780, type = kCFNumberSInt64Type} entering partition_nand_device device is not a boot-from-NAND device entering wait_for_storage_device entering check_for_restore_log could not find partition, unable to check for restore log entering create_filesystem_partitions creating encrypted data partition AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a900 established 62078<-lo0->49166 62078<-usb->4096 wipe entire partition: 1 (old = 0 new = 780) creating 1048576 byte wipe buffer erasing 817889280 bytes from /dev/disk0s1 unrecognized request 'StartSession' 817889280 bytes written in 109 seconds (7327 KiB/s) block size for /dev/disk0s1: 8192 /sbin/newfs_hfs -s -v System -b 8192 -n a=8192,c=8192,e=8192 /dev/disk0s1 executing /sbin/newfs_hfs Initialized /dev/rdisk0s1 as a 780 MB HFS Plus volume creating 1048576 byte wipe buffer block size for /dev/disk0s2s1: 8192 /sbin/newfs_hfs -s -v Data -b 8192 -n a=8192,c=8192,e=8192 /dev/disk0s2s1 executing /sbin/newfs_hfs Initialized /dev/rdisk0s2s1 as a 6891 MB HFS Plus volume entering restore_images executing /usr/sbin/asr void AppleUSBDeviceMux::handleConnectResult(BulkUSBMuxSession*, errno_t) new session to port 12345 failed: 61 ASR STATUS: start 108 multicast-client ASR: Waiting for connection attempt from server ASR STATUS: setup ASR: Validating target... ASR: done ASR STATUS: metadata ASR: Validating source... AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a800 established 12345<-lo0->49168 12345<-usb->4608 ASR: done ASR: Warning: the target volume may not be bootable ASR: Erasing target device /dev/disk0s1... recv(18, 4) failed: connection closed unable to read message size: -1 could not receive message close(caller = 0x3afd): remote port = 49157 unrecognized request 'GetValue' void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4ab00 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a780 established 62078<-lo0->49169 62078<-usb->4864 ASR: done ASR: Retrieving scan information...done ASR: Validating sizes... ASR: done ASR STATUS: restore ASR RESTORE PROGRESS: 2% ASR RESTORE PROGRESS: 4% ASR RESTORE PROGRESS: 6% ASR RESTORE PROGRESS: 8% ASR RESTORE PROGRESS: 10% ASR RESTORE PROGRESS: 12% ASR RESTORE PROGRESS: 14% ASR RESTORE PROGRESS: 16% ASR RESTORE PROGRESS: 18% ASR RESTORE PROGRESS: 20% ASR RESTORE PROGRESS: 22% ASR RESTORE PROGRESS: 24% ASR RESTORE PROGRESS: 26% ASR RESTORE PROGRESS: 28% ASR RESTORE PROGRESS: 30% ASR RESTORE PROGRESS: 32% ASR RESTORE PROGRESS: 34% ASR RESTORE PROGRESS: 36% ASR RESTORE PROGRESS: 38% ASR RESTORE PROGRESS: 40% recv(21, 4) failed: connection closed unable to read message size: -1 could not receive message close(caller = 0x3afd): remote port = 49158 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4ae80 ASR RESTORE PROGRESS: 42% ASR RESTORE PROGRESS: 44% ASR RESTORE PROGRESS: 46% ASR RESTORE PROGRESS: 48% ASR RESTORE PROGRESS: 50% ASR RESTORE PROGRESS: 52% ASR RESTORE PROGRESS: 54% ASR RESTORE PROGRESS: 56% ASR RESTORE PROGRESS: 58% ASR RESTORE PROGRESS: 60% ASR RESTORE PROGRESS: 62% ASR RESTORE PROGRESS: 64% ASR RESTORE PROGRESS: 66% ASR RESTORE PROGRESS: 68% ASR RESTORE PROGRESS: 70% ASR RESTORE PROGRESS: 72% unrecognized request 'GetValue' ASR RESTORE PROGRESS: 74% ASR RESTORE PROGRESS: 76% ASR RESTORE PROGRESS: 78% ASR RESTORE PROGRESS: 80% ASR RESTORE PROGRESS: 82% ASR RESTORE PROGRESS: 84% ASR RESTORE PROGRESS: 86% ASR RESTORE PROGRESS: 88% ASR RESTORE PROGRESS: 90% ASR RESTORE PROGRESS: 92% ASR RESTORE PROGRESS: 94% ASR RESTORE PROGRESS: 96% void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a800 ASR RESTORE PROGRESS: 98% ASR RESTORE PROGRESS: 100% ASR: Copied 545784832 bytes in 79.15 seconds, 6734.09 KiB/s ASR STATUS: verify ASR VERIFY PROGRESS: 2% ASR VERIFY PROGRESS: 4% ASR VERIFY PROGRESS: 6% ASR VERIFY PROGRESS: 8% ASR VERIFY PROGRESS: 10% ASR VERIFY PROGRESS: 12% ASR VERIFY PROGRESS: 14% ASR VERIFY PROGRESS: 16% ASR VERIFY PROGRESS: 18% ASR VERIFY PROGRESS: 20% ASR VERIFY PROGRESS: 22% ASR VERIFY PROGRESS: 24% ASR VERIFY PROGRESS: 26% ASR VERIFY PROGRESS: 28% ASR VERIFY PROGRESS: 30% ASR VERIFY PROGRESS: 32% ASR VERIFY PROGRESS: 34% ASR VERIFY PROGRESS: 36% ASR VERIFY PROGRESS: 38% ASR VERIFY PROGRESS: 40% ASR VERIFY PROGRESS: 42% ASR VERIFY PROGRESS: 44% ASR VERIFY PROGRESS: 46% ASR VERIFY PROGRESS: 48% ASR VERIFY PROGRESS: 50% ASR VERIFY PROGRESS: 52% recv(10, 4) failed: connection closed unable to read message size: -1 could not receive message close(caller = 0x3afd): remote port = 49169 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a780 unrecognized request 'GetValue' ASR VERIFY PROGRESS: 54% AppleUSBDeviceMux::handleConnectResult new session 0xc33bab80 established 62078<-lo0->49170 62078<-usb->5120 ASR VERIFY PROGRESS: 56% ASR VERIFY PROGRESS: 58% ASR VERIFY PROGRESS: 60% ASR VERIFY PROGRESS: 62% ASR VERIFY PROGRESS: 64% ASR VERIFY PROGRESS: 66% ASR VERIFY PROGRESS: 68% ASR VERIFY PROGRESS: 70% ASR VERIFY PROGRESS: 72% ASR VERIFY PROGRESS: 74% ASR VERIFY PROGRESS: 76% ASR VERIFY PROGRESS: 78% ASR VERIFY PROGRESS: 80% ASR VERIFY PROGRESS: 82% ASR VERIFY PROGRESS: 84% ASR VERIFY PROGRESS: 86% ASR VERIFY PROGRESS: 88% ASR VERIFY PROGRESS: 90% ASR VERIFY PROGRESS: 92% ASR VERIFY PROGRESS: 94% ASR VERIFY PROGRESS: 96% ASR VERIFY PROGRESS: 98% ASR VERIFY PROGRESS: 100% ASR: Verified SHA-1 checksum 545784832 bytes in 72.25 seconds, 7377.51 KiB/s ASR STATUS: finish entering mount_filesystems executing /sbin/fsck_hfs ** /dev/rdisk0s1 ** Checking Non-journaled HFS Plus volume. ** Detected a case-sensitive catalog. ** Checking Extents Overflow file. ** Checking Catalog file. ** Checking multi-linked files. ** Checking Catalog hierarchy. ** Checking Extended Attributes file. ** Checking volume bitmap. ** Checking volume information. ** The volume SUNorthstarTwo7E18.N88OS appears to be OK. executing /sbin/mount_hfs executing /sbin/fsck_hfs ** /dev/rdisk0s2s1 ** Checking Non-journaled HFS Plus volume. ** Detected a case-sensitive catalog. ** Checking Extents Overflow file. ** Checking Catalog file. ** Checking multi-linked files. ** Checking Catalog hierarchy. ** Checking volume bitmap. ** Checking volume information. ** The volume Data appears to be OK. executing /sbin/mount_hfs entering install_kernel_cache entering get_hardware_platform platform-name = s5l8920x writing kernelcache to /mnt1/System/Library/Caches/com.apple.kernelcaches/kernelcache.s5l8920x entering install_secure_vault_daemon entering get_hardware_platform platform-name = s5l8920x linking /mnt1/usr/sbin/securekeyvaultd to /mnt1/usr/sbin/securekeyvaultd.s5l8920x entering fixup_var remove_path /mnt1/private/var executing /bin/rm creating directory (owner=0 mode=755) /mnt1/private/var entering modify_fstab entering clear_persistent_boot_args executing /usr/sbin/nvram entering update_NOR entering img3_update_NOR img3_flash_NOR_image: flashing LLB data unrecognized request 'StartSession' img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data entering update_gas_gauge_software gasgauge_swupdate failed: -1 attempting to dump restore log writing log file: /mnt1/restore.log MsgType StatusMsg Status 29 Log is available: iBoot version: iBoot-636.66.33 Seatbelt MACF policy initialized AppleS5L8920XPerformanceController: Dynamic Performance State Management Enabled with 3 voltage and 4 perfomance states AppleS5L8920XPerformanceController: Dynamic Voltage Control Enabled with 10000us activity timeout and 100us grace period IOSDIOController::init(): IOSDIOFamily-24.7 Dec 18 2009 01:49:51 AppleS5L8920XIOPSDIO::start(): AppleS5L8920X-164.12.2 Dec 20 2009 17:01:06 AppleBaseband: Could not find mux function AppleS5L8900XSerial: Identified Serial Port on ARM Device=uart0 at 0x82500000(0xecf5d000) AppleS5L8900XSerial: Identified Serial Port on ARM Device=uart4 at 0x82900000(0xecf65000) AppleImage3NORAccess::start imageVersion: 3 AppleS5L8920XIOPFMI: Found Chip ID 0x7294D7EC on FMI0:CE0 AppleS5L8920XIOPFMI: Found Chip ID 0x7294D7EC on FMI1:CE8 IOSDIOController::enumerateSlot(): Searching for SDIO device in slot: 0 AppleNANDFTL started with IOFlashStorageDevice provider AppleNANDFTL located at physical nand block offset 1 default-ftl-version was found and it's set to 1 [FTL:MSG] Apple NAND Driver (AND) RW [FTL:MSG] FIL_Init [OK] [FTL:MSG] BUF_Init [OK] [FTL:MSG] FPart Init [OK] IOSDIOController::enumerateSlot(): Found SDIO I/O device. Function count(1), memory(0) BSD root: md0, major 2, minor 0 com.apple.AppleFSCompressionTypeZlib load succeeded virtual bool AppleMobileFileIntegrity::start(IOService*): built Dec 21 2009 08:27:49 virtual bool AppleMobileFileIntegrity::start(IOService*): cs_enforcement disabled by boot-arg L2TP domain init L2TP domain init complete PPTP domain init Jettisoning kext bootstrap segment. AppleSerialMultiplexer: adap::start: Frame size is 2044, Rx Buffer count is 16 AppleSerialMultiplexer: mux::start: created new mux (13) for spi-baseband with adapter BasebandSPIDevice AppleSerialMultiplexer: debugparams::init: Parsed flags "" ( 0 ) AppleS5L8900XSerial: Identified Serial Port on ARM Device=uart1 at 0x82600000(0xed2f5000) AppleS5L8900XSerial: Identified Serial Port on ARM Device=uart2 at 0x82700000(0xed2fd000) AppleS5L8900XSerial: Identified Serial Port on ARM Device=uart3 at 0x82800000(0xed306000) AppleMultitouchN1SPI: successfully started AppleMultitouchN1SPI: using DMA for bootloading AppleMultitouchN1SPI: Logging is ENABLED IOSurface: buffer allocation size is zero AppleSynopsysOTGCore::start - iAP over USB enabled IOAccessoryPortSerial::start: could not set up serial port: device is offline AppleSynopsysOTGDevice::findMaxEndpoints: in EPs: 5 out, EPs: 5, max_endpoint: 7, num_endpoints: 12 AppleMultitouchN1SPI: detected HBPP. driver will be kept alive IOSDIOIoCardDevice::parseFn0CIS(): Device manufacturer ID 0x2d0, Product ID 0x4325 IOSDIOIoCardDevice::parseFn0CIS(): Manufacturer: "" IOSDIOIoCardDevice::parseFn0CIS(): Product: "" IOSDIOIoCardDevice::parseFn0CIS(): ProductInfo0: "s=D1" IOSDIOIoCardDevice::parseFn0CIS(): ProductInfo1: "P=N88 m=3.1" AppleBCMWLAN::init(): AppleBCMWLAN-1.25 Dec 18 2009 01:58:12 AppleBCMWLAN::init(): Starting with debug level: 4, debug flags: 00000000 AppleBCMWLAN::init(): AppleBCMWLAN-1.25 Dec 18 2009 01:58:12 AppleBCMWLAN::init(): Starting with debug level: 4, debug flags: 00000000 AppleD1755PMUPowerSource: AppleUSBCableDetect 1 AppleSynopsysOTGDevice::handleUSBCableConnect cable connected, but don't have device configuration yet found suitable IOMobileFramebuffer: AppleM2CLCD AppleSynopsysOTGDevice - Configuration: PTP AppleSynopsysOTGDevice Interface: PTP AppleSynopsysOTGDevice - Configuration: iPod USB Interface AppleSynopsysOTGDevice Interface: USBAudioControl AppleSynopsysOTGDevice Interface: USBAudioStreaming AppleSynopsysOTGDevice Interface: IapOverUsbHid AppleSynopsysOTGDevice - Configuration: PTP + Apple Mobile Device AppleSynopsysOTGDevice Interface: PTP AppleSynopsysOTGDevice Interface: AppleUSBMux AppleSynopsysOTGDevice - Configuration: PTP + Apple Mobile Device + Apple USB Ethernet AppleSynopsysOTGDevice Interface: PTP AppleSynopsysOTGDevice Interface: AppleUSBMux AppleSynopsysOTGDevice Interface: AppleUSBEthernet AppleSynopsysOTGDevice::gated_IOAccessoryPortUSB::start virtual bool AppleUSBDeviceMux::start(IOService*) build: Dec 18 2009 01:58:38 registerFunction Register function USBAudioControl AppleSynopsysOTGDevice::gated_registerFunction Register function USBAudioStreaming AppleSynopsysOTGDevice::gated_registerFunction Register function IapOverUsbHid init_waste AppleSynopsysOTGDevice::gated_registerFunction Register function AppleUSBMux AppleSynopsysOTGDevice::gated_registerFunction Register function AppleUSBEthernet AppleUSBEthernetDevice::start: Device MAC address = 0a:0b:ad:0b:ab:e0 AppleUSBEthernetDevice::start: Host MAC address = 84:29:99:8c:48:9f AppleSynopsysOTGDevice::gated_registerFunction Register function PTP AppleSynopsysOTGDevice::gated_registerFunction all functions registered- we are ready to start usb stack AppleSynopsysOTGCore::setCurrentLimit: current:0, suspended:0 read new style signature 0x43313133 (line:375) [FTL:MSG] VSVFL Register [OK] [FTL:MSG] VFL Init [OK] virtual IOReturn AppleUSBDeviceMux::setProperties(OSObject*) setting debug level to 7 [FTL:MSG] VFL_Open [OK] [FTL:MSG] YAFTL Register [OK] [FTL:MSG] FTL_Open [OK] AppleSynopsysOTGDevice::handleUSBReset AppleSynopsysOTGCore::setCurrentLimit: current:100, suspended:0 AppleSynopsysOTGCore::setCurrentLimit: current:100, suspended:0 recv(5, 4) failed: connection closed unable to read message size: -1 could not receive message close(caller = 0x3afd): remote port = 49152 recv(9, 4) failed: connection closed unable to read message size: -1 close(caller = 0x3afd): remote port = 49154 unrecognized request 'GetValue' recv(15, 4) failed: connection closed recv(5, 4) failed: connection closed recv(12, 4) failed: connection closed could not receive message recv(13, 4) failed: connection closed recv(27, 4) failed: connection closed recv(30, 4) failed: connection closed recv(33, 4) failed: connection closed recv(36, 4) failed: connection closed recv(39, 4) failed: connection closed unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 close(caller = 0x3afd): remote port = 49153 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 unable to read message size: -1 could not receive message could not receive message could not receive message could not receive message could not receive message could not receive message could not receive message could not receive message could not receive message close(caller = 0x3afd): remote port = 49156 close(caller = 0x3afd): remote port = 49155 close(caller = 0x3afd): remote port = 49159 close(caller = 0x3afd): remote port = 49160 close(caller = 0x3afd): remote port = 49161 close(caller = 0x3afd): remote port = 49162 close(caller = 0x3afd): remote port = 49163 close(caller = 0x3afd): remote port = 49164 close(caller = 0x3afd): remote port = 49165 AppleSynopsysOTGCore::setCurrentLimit: current:500, suspended:0 AppleSynopsysOTGCore::setCurrentLimit: current:500, suspended:0 AppleSynopsysOTGDevice::stallBadSetupRequest request: 80 06 0f00 0000 0005 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4aa00 established 62078<-lo0->49152 62078<-usb->512 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4aa00 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4ae80 established 62078<-lo0->49153 62078<-usb->768 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4aa00 established 62078<-lo0->49154 62078<-usb->1024 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4ae80 AppleSynopsysOTGDevice::stallBadSetupRequest request: 80 06 0f00 0000 0005 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a900 established 62078<-lo0->49155 62078<-usb->1280 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4aa00 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4ae80 established 62078<-lo0->49156 62078<-usb->1536 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4ab00 established 62078<-lo0->49157 62078<-usb->1792 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4ae80 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a900 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4ae80 established 62078<-lo0->49158 62078<-usb->2048 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a800 established 62078<-lo0->49159 62078<-usb->2304 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a800 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a900 established 62078<-lo0->49160 62078<-usb->2560 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a900 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a800 established 62078<-lo0->49161 62078<-usb->2816 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a800 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a900 established 62078<-lo0->49162 62078<-usb->3072 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a900 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a800 established 62078<-lo0->49163 62078<-usb->3328 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a800 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a900 established 62078<-lo0->49164 62078<-usb->3584 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a900 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a800 established 62078<-lo0->49165 62078<-usb->3840 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a800 client protocol version 12 Restore options: SystemPartitionSize => {value = +780, type = kCFNumberSInt64Type} UpdateBaseband => {value = false} CreateFilesystemPartitions => {value = true} MinimumSystemPartition => {value = +780, type = kCFNumberSInt64Type} entering partition_nand_device device is not a boot-from-NAND device entering wait_for_storage_device entering check_for_restore_log could not find partition, unable to check for restore log entering create_filesystem_partitions creating encrypted data partition AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a900 established 62078<-lo0->49166 62078<-usb->4096 wipe entire partition: 1 (old = 0 new = 780) creating 1048576 byte wipe buffer erasing 817889280 bytes from /dev/disk0s1 unrecognized request 'StartSession' 817889280 bytes written in 109 seconds (7327 KiB/s) block size for /dev/disk0s1: 8192 /sbin/newfs_hfs -s -v System -b 8192 -n a=8192,c=8192,e=8192 /dev/disk0s1 executing /sbin/newfs_hfs Initialized /dev/rdisk0s1 as a 780 MB HFS Plus volume creating 1048576 byte wipe buffer block size for /dev/disk0s2s1: 8192 /sbin/newfs_hfs -s -v Data -b 8192 -n a=8192,c=8192,e=8192 /dev/disk0s2s1 executing /sbin/newfs_hfs Initialized /dev/rdisk0s2s1 as a 6891 MB HFS Plus volume entering restore_images executing /usr/sbin/asr void AppleUSBDeviceMux::handleConnectResult(BulkUSBMuxSession*, errno_t) new session to port 12345 failed: 61 ASR STATUS: start 108 multicast-client ASR: Waiting for connection attempt from server ASR STATUS: setup ASR: Validating target... ASR: done ASR STATUS: metadata ASR: Validating source... AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a800 established 12345<-lo0->49168 12345<-usb->4608 ASR: done ASR: Warning: the target volume may not be bootable ASR: Erasing target device /dev/disk0s1... recv(18, 4) failed: connection closed unable to read message size: -1 could not receive message close(caller = 0x3afd): remote port = 49157 unrecognized request 'GetValue' void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4ab00 AppleUSBDeviceMux::handleConnectResult new session 0xc2b4a780 established 62078<-lo0->49169 62078<-usb->4864 ASR: done ASR: Retrieving scan information...done ASR: Validating sizes... ASR: done ASR STATUS: restore ASR RESTORE PROGRESS: 2% ASR RESTORE PROGRESS: 4% ASR RESTORE PROGRESS: 6% ASR RESTORE PROGRESS: 8% ASR RESTORE PROGRESS: 10% ASR RESTORE PROGRESS: 12% ASR RESTORE PROGRESS: 14% ASR RESTORE PROGRESS: 16% ASR RESTORE PROGRESS: 18% ASR RESTORE PROGRESS: 20% ASR RESTORE PROGRESS: 22% ASR RESTORE PROGRESS: 24% ASR RESTORE PROGRESS: 26% ASR RESTORE PROGRESS: 28% ASR RESTORE PROGRESS: 30% ASR RESTORE PROGRESS: 32% ASR RESTORE PROGRESS: 34% ASR RESTORE PROGRESS: 36% ASR RESTORE PROGRESS: 38% ASR RESTORE PROGRESS: 40% recv(21, 4) failed: connection closed unable to read message size: -1 could not receive message close(caller = 0x3afd): remote port = 49158 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4ae80 ASR RESTORE PROGRESS: 42% ASR RESTORE PROGRESS: 44% ASR RESTORE PROGRESS: 46% ASR RESTORE PROGRESS: 48% ASR RESTORE PROGRESS: 50% ASR RESTORE PROGRESS: 52% ASR RESTORE PROGRESS: 54% ASR RESTORE PROGRESS: 56% ASR RESTORE PROGRESS: 58% ASR RESTORE PROGRESS: 60% ASR RESTORE PROGRESS: 62% ASR RESTORE PROGRESS: 64% ASR RESTORE PROGRESS: 66% ASR RESTORE PROGRESS: 68% ASR RESTORE PROGRESS: 70% ASR RESTORE PROGRESS: 72% unrecognized request 'GetValue' ASR RESTORE PROGRESS: 74% ASR RESTORE PROGRESS: 76% ASR RESTORE PROGRESS: 78% ASR RESTORE PROGRESS: 80% ASR RESTORE PROGRESS: 82% ASR RESTORE PROGRESS: 84% ASR RESTORE PROGRESS: 86% ASR RESTORE PROGRESS: 88% ASR RESTORE PROGRESS: 90% ASR RESTORE PROGRESS: 92% ASR RESTORE PROGRESS: 94% ASR RESTORE PROGRESS: 96% void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a800 ASR RESTORE PROGRESS: 98% ASR RESTORE PROGRESS: 100% ASR: Copied 545784832 bytes in 79.15 seconds, 6734.09 KiB/s ASR STATUS: verify ASR VERIFY PROGRESS: 2% ASR VERIFY PROGRESS: 4% ASR VERIFY PROGRESS: 6% ASR VERIFY PROGRESS: 8% ASR VERIFY PROGRESS: 10% ASR VERIFY PROGRESS: 12% ASR VERIFY PROGRESS: 14% ASR VERIFY PROGRESS: 16% ASR VERIFY PROGRESS: 18% ASR VERIFY PROGRESS: 20% ASR VERIFY PROGRESS: 22% ASR VERIFY PROGRESS: 24% ASR VERIFY PROGRESS: 26% ASR VERIFY PROGRESS: 28% ASR VERIFY PROGRESS: 30% ASR VERIFY PROGRESS: 32% ASR VERIFY PROGRESS: 34% ASR VERIFY PROGRESS: 36% ASR VERIFY PROGRESS: 38% ASR VERIFY PROGRESS: 40% ASR VERIFY PROGRESS: 42% ASR VERIFY PROGRESS: 44% ASR VERIFY PROGRESS: 46% ASR VERIFY PROGRESS: 48% ASR VERIFY PROGRESS: 50% ASR VERIFY PROGRESS: 52% recv(10, 4) failed: connection closed unable to read message size: -1 could not receive message close(caller = 0x3afd): remote port = 49169 void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0xc2b4a780 unrecognized request 'GetValue' ASR VERIFY PROGRESS: 54% AppleUSBDeviceMux::handleConnectResult new session 0xc33bab80 established 62078<-lo0->49170 62078<-usb->5120 ASR VERIFY PROGRESS: 56% ASR VERIFY PROGRESS: 58% ASR VERIFY PROGRESS: 60% ASR VERIFY PROGRESS: 62% ASR VERIFY PROGRESS: 64% ASR VERIFY PROGRESS: 66% ASR VERIFY PROGRESS: 68% ASR VERIFY PROGRESS: 70% ASR VERIFY PROGRESS: 72% ASR VERIFY PROGRESS: 74% ASR VERIFY PROGRESS: 76% ASR VERIFY PROGRESS: 78% ASR VERIFY PROGRESS: 80% ASR VERIFY PROGRESS: 82% ASR VERIFY PROGRESS: 84% ASR VERIFY PROGRESS: 86% ASR VERIFY PROGRESS: 88% ASR VERIFY PROGRESS: 90% ASR VERIFY PROGRESS: 92% ASR VERIFY PROGRESS: 94% ASR VERIFY PROGRESS: 96% ASR VERIFY PROGRESS: 98% ASR VERIFY PROGRESS: 100% ASR: Verified SHA-1 checksum 545784832 bytes in 72.25 seconds, 7377.51 KiB/s ASR STATUS: finish entering mount_filesystems executing /sbin/fsck_hfs ** /dev/rdisk0s1 ** Checking Non-journaled HFS Plus volume. ** Detected a case-sensitive catalog. ** Checking Extents Overflow file. ** Checking Catalog file. ** Checking multi-linked files. ** Checking Catalog hierarchy. ** Checking Extended Attributes file. ** Checking volume bitmap. ** Checking volume information. ** The volume SUNorthstarTwo7E18.N88OS appears to be OK. executing /sbin/mount_hfs executing /sbin/fsck_hfs ** /dev/rdisk0s2s1 ** Checking Non-journaled HFS Plus volume. ** Detected a case-sensitive catalog. ** Checking Extents Overflow file. ** Checking Catalog file. ** Checking multi-linked files. ** Checking Catalog hierarchy. ** Checking volume bitmap. ** Checking volume information. ** The volume Data appears to be OK. executing /sbin/mount_hfs entering install_kernel_cache entering get_hardware_platform platform-name = s5l8920x writing kernelcache to /mnt1/System/Library/Caches/com.apple.kernelcaches/kernelcache.s5l8920x entering install_secure_vault_daemon entering get_hardware_platform platform-name = s5l8920x linking /mnt1/usr/sbin/securekeyvaultd to /mnt1/usr/sbin/securekeyvaultd.s5l8920x entering fixup_var remove_path /mnt1/private/var executing /bin/rm creating directory (owner=0 mode=755) /mnt1/private/var entering modify_fstab entering clear_persistent_boot_args executing /usr/sbin/nvram entering update_NOR entering img3_update_NOR img3_flash_NOR_image: flashing LLB data unrecognized request 'StartSession' img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data img3_flash_NOR_image: flashing NOR data entering update_gas_gauge_software gasgauge_swupdate failed: -1 attempting to dump restore log writing log file: /mnt1/restore.log[Log] Checking firmware keys in ../saved/firmware/iPhone2,1/7E18
[Log] Preparing config file
ERROR: Unable to successfully restore device
ERROR: Unable to restore device
Proceed to install the alloc8 exploit for the device to boot:
-> Go to: Useful Utilities -> Install alloc8 Exploit
[Log] Do not disconnect your device, not done yet
[Log] Finding device in DFU mode...
[Log] Found device in DFU mode.
[Log] Placing device to pwnDFU mode using ipwnder
[main] enabled: debug log
[main] Waiting for device in DFU mode...
[io_get_serial] Found serial number!
[main] CONNECTED
[main] CPID: 0x8920, BDID: 0x00, STRG: [iBoot-359.3.2]
** exploiting with limera1n
[limera1n] reconnecting
[io_reset] ResetDevice: 0
[io_reset] USBDeviceReEnumerate: 0
[limera1n] sending exploit payload
[limera1n] 0, 1392
[limera1n] sending fake data
[limera1n] 0, 1
[limera1n] e0004051, 0
[limera1n] executing exploit
[limera1n] e0004051, 0
[limera1n] reconnecting
[io_reset] ResetDevice: 0
[io_reset] USBDeviceReEnumerate: 0
[limera1n] 0, 0
[limera1n] 0, 6
[limera1n] 0, 6
[limera1n] 0, 6
[limera1n] exploit sent
[limera1n] reconnecting
[io_reset] ResetDevice: 0
[io_reset] USBDeviceReEnumerate: 0
[io_get_serial] Found serial number!
[limera1n] pwned!
[Log] Checking for device
[Log] Found device in pwned DFU mode.
Pwned: limera1n
[Log] Installing alloc8 to device
Acquiring device handle.
Releasing device handle.
Installing alloc8 exploit to NOR.
Acquiring device handle.
Resetting USB counters.
Performing USB port reset.
Sending 0x11 of data to device.
Traceback (most recent call last):
File "/Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/saved/ipwndfu_python3/./ipwndfu", line 44, in
dump = device.nor_dump(saveBackup=False)
File "/Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/saved/ipwndfu_python3/dfuexec.py", line 108, in nor_dump
(bdev, _) = self.execute(struct.pack('<2I5s', self.config.get_block_device, self.config.load_address + 12, b'nor0\x00'), 0)
File "/Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/saved/ipwndfu_python3/dfuexec.py", line 75, in execute
dfu.send_data(device, EXEC_MAGIC + cmd)
File "/Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/saved/ipwndfu_python3/dfu.py", line 44, in send_data
assert device.ctrl_transfer(0x21, 1, 0, 0, data[index:index + amount], 5000) == amount
File "/Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/saved/ipwndfu_python3/usb/core.py", line 1091, in ctrl_transfer
self._ctx.managed_claim_interface(self, interface_number)
File "/Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/saved/ipwndfu_python3/usb/core.py", line 113, in wrapper
return f(self, *args, **kwargs)
File "/Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/saved/ipwndfu_python3/usb/core.py", line 180, in managed_claim_interface
self.backend.claim_interface(self.handle, i)
File "/Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/saved/ipwndfu_python3/usb/backend/libusb1.py", line 833, in claim_interface
_check(self.lib.libusb_claim_interface(dev_handle.handle, intf))
File "/Users/namin/Downloads/Legacy-iOS-Kit_macos_v25/saved/ipwndfu_python3/usb/backend/libusb1.py", line 604, in _check
raise USBError(_strerror(ret), ret, _libusb_errno[ret])
usb.core.USBError: [Errno 19] No such device (it may have been disconnected)
[WARNING] ipwndfu alloc8 seems to have failed. Just force restart the device, enter DFU, and try again.
You may also need to force restart the device and re-enter DFU mode before retrying.
To retry, just go back to: Useful Utilities -> Install alloc8 Exploit
Save the terminal output now if needed. (macOS: Cmd+S, Linux: Ctrl+Shift+S)
Legacy iOS Kit v25.06.31 (688129c)
Platform: macos (Ventura 13.7.6 - x86_64)
namin@seonnam-in-ui-MacBookPro ~ %
Beta Was this translation helpful? Give feedback.
All reactions