p0wdersnow restore freezes with iPhone 4 to iOS 7.0b1

[Thathip]

Log: Legacy iOS Kit

• Script by LukeZGD -

• Version: v24.05.14 (ae64966)

• Platform: linux (Debian GNU/Linux 12 (bookworm))

• Device: iPhone3,1 (n90ap) in Recovery mode

• iOS Version: :: BUILD_TAG: iBoot-1940.10.58

• ECID: 2539877367052

• Only select unmodified IPSW for the selection. Do not select custom IPSWs

• Selected Target IPSW: /media/user/Data/ipsw/iPhone3,1_7.0b1_11A4372q_Restore.ipsw

• Target Version: 7.0-11A4372q

• Selected Base (iOS 7.1.2) IPSW: /media/user/Data/ipsw/iPhone3,1_7.1.2_11D257_Restore.ipsw

• Base Version: 7.1.2-11D257

  Main Menu > Restore/Downgrade > powdersn0w (any iOS) [Input] Select an option: 1) Select Target IPSW 3) Start Restore 2) Select Base IPSW 4) Go Back

  ? 3

  [Input] Jailbreak Option

• When this option is enabled, your device will be jailbroken on restore.

• I recommend to enable this option to have the jailbreak and Cydia pre-installed.

• This option is enabled by default (Y). Select this option if unsure. [Input] Enable this option? (Y/n): n [Log] Jailbreak option disabled by user.

[Input] Memory Option for creating custom IPSW

• When this option is enabled, system RAM will be used for the IPSW creation process.
• I recommend to enable this option to speed up creating the custom IPSW.
• However, if your PC/Mac has less than 8 GB of RAM, disable this option.
• This option is enabled by default (Y). Select this option if unsure. [Input] Enable this option? (Y/n): y [Log] Memory option enabled.

[Input] Verbose Boot Option

• When this option is enabled, the device will have verbose boot on restore.
• This option is enabled by default (Y). Select this option if unsure. [Input] Enable this option? (Y/n): n [Log] Verbose boot option disabled by user.

[Log] Checking firmware keys in ../resources/firmware/iPhone3,1/11A4372q [Log] Preparing config file <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

FilesystemJailbreak needPref iBootPatches debugEnabled bootArgsInjection bootArgsString -v

[Log] Generating firmware bundle for iPhone3,1-7.0 (11A4372q) target... Archive: /media/user/Data/ipsw/iPhone3,1_7.0b1_11A4372q_Restore.ipsw inflating: manifest
Archive: /media/user/Data/ipsw/iPhone3,1_7.0b1_11A4372q_Restore.ipsw inflating: 048-3577-029.dmg
/home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 3887ef9111947ba4e4fca2841ae7bbdd2c96c7e423fc6236c0ce8060f7444c2430b7e94dc81750363c6208cd961b8c69 <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

Filename/media/user/Data/ipsw/iPhone3,1_7.0b1_11A4372q_Restore.ipsw RootFilesystem048-4872-028.dmg RootFilesystemKeyb32667c94fd28fe8a1ebdb0c1c25cc02466adefb0fa9e359fc2a9a22d2bd05a8d9f6f2fe RootFilesystemSize1474 RamdiskOptionsPath/usr/local/share/restore/options.n90.plist SHA186d8140538bc715a81f6eb1b84d1fc647f115f67 FilesystemPackagebootstrapfreeze.tar RamdiskPackagepackagesrc/bin.tariosios7 Firmware iBSSFileFirmware/dfu/iBSS.n90ap.RELEASE.dfuIV05f582d22f1ad1f5653082a347e23471Key3254e8e8a1d119cb157fa6ac4834e9eeafa1c05c0517c7920945fec60736985b Patch Decrypt iBECFileFirmware/dfu/iBEC.n90ap.RELEASE.dfuIV6e7b39296d898b8437043dd4f45d66c3Keycfe76cc45790b18fdec10ecf43b58a9fb977d9b82410aa04d52caf6a80231280 Patch Decrypt RestoreDeviceTreeFileFirmware/all_flash/all_flash.n90ap.production/DeviceTree.n90ap.img3IVbf4838ee9477e9d26e4bfc4b0a741f6fKeyb03e8d460eee695245ff881953ac83138b2fa98a5804290bebe0ed937436ae44DecryptPathDowngrade/RestoreDeviceTree Decrypt RestoreLogoFileFirmware/all_flash/all_flash.n90ap.production/applelogo@2x~iphone.s5l8930x.img3IVb35bf3110a0ab3ff7d9fde2e1219e2d4Keye8c23ee0fe2a7b50b276107d0a07658373a7ceab5ae4c62eb9f46ee1ad36b034DecryptPathDowngrade/RestoreLogo Decrypt RestoreKernelCacheFilekernelcache.release.n90IVfd56d2f5d8be8b4dc432cc665d3ee292Key4d556220b021a3913228183793cae0a6814cfed3e1750a25cb0e38ce0e6572beDecryptPathDowngrade/RestoreKernelCache Decrypt Restore RamdiskFile048-3577-029.dmgIV26726f7e18e6adf81b3db7085dee2eb2Key1eaa3824cfc23cfbf225b2bbad9c57f1d728ac219a6552a802fefff81da0f2c4 Decrypt FirmwareReplace AppleLogoFileFirmware/all_flash/all_flash.n90ap.production/applelogo7@2x~iphone.s5l8930x.img3 NewAppleLogoFileFirmware/all_flash/all_flash.n90ap.production/applelogo@2x~iphone.s5l8930x.img3 BatteryCharging0FileFirmware/all_flash/all_flash.n90ap.production/batterycharging0@2x~iphone.s5l8930x.img3 BatteryCharging1FileFirmware/all_flash/all_flash.n90ap.production/batterycharging1@2x~iphone.s5l8930x.img3 BatteryFullFileFirmware/all_flash/all_flash.n90ap.production/batteryfull@2x~iphone.s5l8930x.img3 BatteryLow0FileFirmware/all_flash/all_flash.n90ap.production/batterylow0@2x~iphone.s5l8930x.img3 BatteryLow1FileFirmware/all_flash/all_flash.n90ap.production/batterylow1@2x~iphone.s5l8930x.img3 BatteryPluginFileFirmware/all_flash/all_flash.n90ap.production/glyphplugin@2x~iphone-30pin.s5l8930x.img3 RecoveryModeFileFirmware/all_flash/all_flash.n90ap.production/recoverymode7@2x~iphone-30pin.s5l8930x.img3 NewRecoveryModeFileFirmware/all_flash/all_flash.n90ap.production/recoverymode@2x~iphone-30pin.s5l8930x.img3 LLBFileFirmware/all_flash/all_flash.n90ap.production/LLB.n90ap.RELEASE.img3 iBootFileFirmware/all_flash/all_flash.n90ap.production/iBoot.n90ap.RELEASE.img3 NewiBootFileFirmware/all_flash/all_flash.n90ap.production/iBoot2.n90ap.RELEASE.img3IVce0d54366ee18accfd0c277a5f145d42Key2435acb7e936656cc2b6f110b99fadcc0cc01e773ca1ec8410ae4abb630ac457 manifestFileFirmware/all_flash/all_flash.n90ap.production/manifestmanifestmanifest [Log] Checking firmware keys in ../resources/firmware/iPhone3,1/11D257 [Log] Generating firmware bundle for iPhone3,1-7.1.2 (11D257) base... Archive: /media/user/Data/ipsw/iPhone3,1_7.1.2_11D257_Restore.ipsw inflating: manifest Archive: /media/user/Data/ipsw/iPhone3,1_7.1.2_11D257_Restore.ipsw inflating: 058-4107-013.dmg /home/runner/work/daibutsuCFW/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 8196f7a169a4dc0d728066fc5a2ac2e48255551bfe77448b12b193db45404104a9d999236099bda390cb4bc16ea760ce Filename/media/user/Data/ipsw/iPhone3,1_7.1.2_11D257_Restore.ipsw RootFilesystem058-4520-010.dmg RootFilesystemKey38d0320d099b9dd34ffb3308c53d397f14955b347d6a433fe173acc2ced1ae78756b3684 RootFilesystemSize1561 RamdiskOptionsPath/usr/local/share/restore/options.n90.plist SHA181da17b3e893a61508fe203849b7e1f60e2127b1 RamdiskExploit exploitsrc/target/n90/11D257/exploit injectsrc/target/n90/11D257/partition Firmware FirmwarePath AppleLogoFileFirmware/all_flash/all_flash.n90ap.production/applelogo@2x~iphone.s5l8930x.img3 BatteryCharging0FileFirmware/all_flash/all_flash.n90ap.production/batterycharging0@2x~iphone.s5l8930x.img3 BatteryCharging1FileFirmware/all_flash/all_flash.n90ap.production/batterycharging1@2x~iphone.s5l8930x.img3 BatteryFullFileFirmware/all_flash/all_flash.n90ap.production/batteryfull@2x~iphone.s5l8930x.img3 BatteryLow0FileFirmware/all_flash/all_flash.n90ap.production/batterylow0@2x~iphone.s5l8930x.img3 BatteryLow1FileFirmware/all_flash/all_flash.n90ap.production/batterylow1@2x~iphone.s5l8930x.img3 BatteryPluginFileFirmware/all_flash/all_flash.n90ap.production/glyphplugin@2x~iphone-30pin.s5l8930x.img3 RecoveryModeFileFirmware/all_flash/all_flash.n90ap.production/recoverymode@2x~iphone-30pin.s5l8930x.img3 LLBFileFirmware/all_flash/all_flash.n90ap.production/LLB.n90ap.RELEASE.img3 iBootFileFirmware/all_flash/all_flash.n90ap.production/iBoot.n90ap.RELEASE.img3 [Log] Beta iOS detected, preparing modified SystemVersion.plist ProductBuildVersion11A4372q ProductCopyright1983-2014 Apple Inc. ProductNameiPhone OS ProductVersion7.0 System/ System/Library/ System/Library/CoreServices/ System/Library/CoreServices/SystemVersion.plist [Log] Preparing custom IPSW: ../bin/linux/x86_64/powdersn0w /media/user/Data/ipsw/iPhone3,1_7.0b1_11A4372q_Restore.ipsw temp.ipsw -base /media/user/Data/ipsw/iPhone3,1_7.1.2_11D257_Restore.ipsw -memory systemversion.tar Hashing IPSW... Matching IPSW in FirmwareBundles/... (86d81405...) checking: FirmwareBundles//BASE_iPhone3,1_7.1.2_11D257.bundle/Info.plist checking: FirmwareBundles//config.plist/Info.plist checking: FirmwareBundles//iPhone3,1_7.0_11A4372q.bundle/Info.plist loading: 048-3577-029.dmg (13082892) loading: 048-3668-029.dmg (13078796) loading: 048-4872-028.dmg (1103750656) loading: BuildManifest.plist (61112) loading: Firmware/ (0) loading: Firmware/all_flash/ (0) loading: Firmware/all_flash/all_flash.n90ap.production/ (0) loading: Firmware/all_flash/all_flash.n90ap.production/applelogo@2x~iphone.s5l8930x.img3 (6796) loading: Firmware/all_flash/all_flash.n90ap.production/batterycharging0@2x~iphone.s5l8930x.img3 (9740) loading: Firmware/all_flash/all_flash.n90ap.production/batterycharging1@2x~iphone.s5l8930x.img3 (35020) loading: Firmware/all_flash/all_flash.n90ap.production/batteryfull@2x~iphone.s5l8930x.img3 (83980) loading: Firmware/all_flash/all_flash.n90ap.production/batterylow0@2x~iphone.s5l8930x.img3 (43532) loading: Firmware/all_flash/all_flash.n90ap.production/batterylow1@2x~iphone.s5l8930x.img3 (1996) loading: Firmware/all_flash/all_flash.n90ap.production/DeviceTree.n90ap.img3 (74252) loading: Firmware/all_flash/all_flash.n90ap.production/glyphplugin@2x~iphone-30pin.s5l8930x.img3 (12044) loading: Firmware/all_flash/all_flash.n90ap.production/iBoot.n90ap.RELEASE.img3 (278924) loading: Firmware/all_flash/all_flash.n90ap.production/LLB.n90ap.RELEASE.img3 (131468) loading: Firmware/all_flash/all_flash.n90ap.production/manifest (379) loading: Firmware/all_flash/all_flash.n90ap.production/recoverymode@2x~iphone-30pin.s5l8930x.img3 (69836) loading: Firmware/dfu/ (0) loading: Firmware/dfu/iBEC.n90ap.RELEASE.dfu (278924) loading: Firmware/dfu/iBSS.n90ap.RELEASE.dfu (65932) loading: Firmware/ICE3_04.12.06.Release.bin (16777216) loading: Firmware/ICE3_04.12.06_BOOT_02.13.Release.bbfw (3815988) loading: Firmware/ICE3_04.12.06_BOOT_02.13.Release.plist (860) loading: Firmware/usr/ (0) loading: Firmware/usr/local/ (0) loading: Firmware/usr/local/standalone/ (0) loading: kernelcache.release.n90 (8237004) loading: Restore.plist (2091) Hashing IPSW... Matching IPSW in FirmwareBundles/... (81da17b3...) checking: FirmwareBundles//BASE_iPhone3,1_7.1.2_11D257.bundle/Info.plist loading: Firmware/all_flash/all_flash.n90ap.production/applelogo@2x~iphone.s5l8930x.img3 (6796) loading: Firmware/all_flash/all_flash.n90ap.production/batterycharging0@2x~iphone.s5l8930x.img3 (9740) loading: Firmware/all_flash/all_flash.n90ap.production/batterycharging1@2x~iphone.s5l8930x.img3 (35020) loading: Firmware/all_flash/all_flash.n90ap.production/batteryfull@2x~iphone.s5l8930x.img3 (84044) loading: Firmware/all_flash/all_flash.n90ap.production/batterylow0@2x~iphone.s5l8930x.img3 (43596) loading: Firmware/all_flash/all_flash.n90ap.production/batterylow1@2x~iphone.s5l8930x.img3 (2060) loading: Firmware/all_flash/all_flash.n90ap.production/DeviceTree.n90ap.img3 (74764) loading: Firmware/all_flash/all_flash.n90ap.production/glyphplugin@2x~iphone-30pin.s5l8930x.img3 (11852) loading: Firmware/all_flash/all_flash.n90ap.production/iBoot.n90ap.RELEASE.img3 (283020) loading: Firmware/all_flash/all_flash.n90ap.production/LLB.n90ap.RELEASE.img3 (131468) loading: Firmware/all_flash/all_flash.n90ap.production/recoverymode@2x~iphone-30pin.s5l8930x.img3 (69452) checking: FirmwareBundles/config.plist [+] debugMode ? 0... [+] needPref ? 1... [+] jailbreak ? 0... [*] Found AppleLogo: Firmware/all_flash/all_flash.n90ap.production/applelogo7@2x~iphone.s5l8930x.img3 [*] Found NewAppleLogo: Firmware/all_flash/all_flash.n90ap.production/applelogo@2x~iphone.s5l8930x.img3 [*] Found BatteryCharging0: Firmware/all_flash/all_flash.n90ap.production/batterycharging0@2x~iphone.s5l8930x.img3 [*] Found BatteryCharging1: Firmware/all_flash/all_flash.n90ap.production/batterycharging1@2x~iphone.s5l8930x.img3 [*] Found BatteryFull: Firmware/all_flash/all_flash.n90ap.production/batteryfull@2x~iphone.s5l8930x.img3 [*] Found BatteryLow0: Firmware/all_flash/all_flash.n90ap.production/batterylow0@2x~iphone.s5l8930x.img3 [*] Found BatteryLow1: Firmware/all_flash/all_flash.n90ap.production/batterylow1@2x~iphone.s5l8930x.img3 [*] Found BatteryPlugin: Firmware/all_flash/all_flash.n90ap.production/glyphplugin@2x~iphone-30pin.s5l8930x.img3 [*] Found RecoveryMode: Firmware/all_flash/all_flash.n90ap.production/recoverymode7@2x~iphone-30pin.s5l8930x.img3 [*] Found NewRecoveryMode: Firmware/all_flash/all_flash.n90ap.production/recoverymode@2x~iphone-30pin.s5l8930x.img3 [*] Found LLB: Firmware/all_flash/all_flash.n90ap.production/LLB.n90ap.RELEASE.img3 [*] Found iBoot: Firmware/all_flash/all_flash.n90ap.production/iBoot.n90ap.RELEASE.img3 [*] Found NewiBoot: Firmware/all_flash/all_flash.n90ap.production/iBoot2.n90ap.RELEASE.img3 [*] Found manifestPath: Firmware/all_flash/all_flash.n90ap.production/manifest [+] Added: Firmware/all_flash/all_flash.n90ap.production/manifest [*] Replacing flash_nor... [+] Added: Firmware/all_flash/all_flash.n90ap.production/applelogo7@2x~iphone.s5l8930x.img3 [*] Rewrite img3 TYPE tag: logo -> logb [+] Added: Firmware/all_flash/all_flash.n90ap.production/applelogo@2x~iphone.s5l8930x.img3 [*] Replacing flash_nor... [+] Added: Firmware/all_flash/all_flash.n90ap.production/batterycharging0@2x~iphone.s5l8930x.img3 [*] Replacing flash_nor... [+] Added: Firmware/all_flash/all_flash.n90ap.production/batterycharging1@2x~iphone.s5l8930x.img3 [*] Replacing flash_nor... [+] Added: Firmware/all_flash/all_flash.n90ap.production/batteryfull@2x~iphone.s5l8930x.img3 [*] Replacing flash_nor... [+] Added: Firmware/all_flash/all_flash.n90ap.production/batterylow0@2x~iphone.s5l8930x.img3 [*] Replacing flash_nor... [+] Added: Firmware/all_flash/all_flash.n90ap.production/batterylow1@2x~iphone.s5l8930x.img3 [*] Replacing flash_nor... [+] Added: Firmware/all_flash/all_flash.n90ap.production/glyphplugin@2x~iphone-30pin.s5l8930x.img3 [*] Replacing flash_nor... [+] Added: Firmware/all_flash/all_flash.n90ap.production/recoverymode7@2x~iphone-30pin.s5l8930x.img3 [*] Rewrite img3 TYPE tag: recm -> recb [+] Added: Firmware/all_flash/all_flash.n90ap.production/recoverymode@2x~iphone-30pin.s5l8930x.img3 [*] Replacing flash_nor... [+] Added: Firmware/all_flash/all_flash.n90ap.production/LLB.n90ap.RELEASE.img3 [*] Replacing flash_nor... [*] Creating new iBoot... [*] Rewrite img3 TYPE tag: ibot -> ibob [+] Added: Firmware/all_flash/all_flash.n90ap.production/iBoot2.n90ap.RELEASE.img3 [*] Patching iBoot... iBoot: encrypted input... /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: c11054d37aae6efb79e09efbf19d449f00df4512cb21c70a5b71e153bc8e91512445bcb9f2a4962671415ed0bd8c5c0c /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: c11054d37aae6efb79e09efbf19d449f00df4512cb21c70a5b71e153bc8e91512445bcb9f2a4962671415ed0bd8c5c0c encrypted output... /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: c11054d37aae6efb79e09efbf19d449f00df4512cb21c70a5b71e153bc8e91512445bcb9f2a4962671415ed0bd8c5c0c [patchiBoot] filesize: 44000 [patchiBoot] version: 1940 [patchiBoot] iboot_type: iBoot [patchiBoot] iboot_base: 5ff00000 [patchiBoot] verify_shsh: 000190cc [patchiBoot] boot_partition: 00000a6c [patchiBoot] boot_ramdisk: 00000b0c [patchiBoot] boot_args_null: 0001ae28 [patchiBoot] boot_args: 0001ae24 [patchiBoot] reliance_str: 00042820 [patchiBoot] writing buf writing... success iBoot: /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: c11054d37aae6efb79e09efbf19d449f00df4512cb21c70a5b71e153bc8e91512445bcb9f2a4962671415ed0bd8c5c0c /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: c11054d37aae6efb79e09efbf19d449f00df4512cb21c70a5b71e153bc8e91512445bcb9f2a4962671415ed0bd8c5c0c /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: c11054d37aae6efb79e09efbf19d449f00df4512cb21c70a5b71e153bc8e91512445bcb9f2a4962671415ed0bd8c5c0c writing... success [*] Done: Firmware/all_flash/all_flash.n90ap.production/iBoot2.n90ap.RELEASE.img3 [+] Added: Firmware/all_flash/all_flash.n90ap.production/iBoot.n90ap.RELEASE.img3 [*] restore bootArgs: cs_enforcement_disable=1 amfi_get_out_of_my_way=1 amfi=0xff iBSS: encrypted input... /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 03901e74cb42ee2aa3062b37bd4b0c2846c8fb2c8a133b959b0cc30b9e145785532284b07186f9567b444b73f1d541b8 /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 03901e74cb42ee2aa3062b37bd4b0c2846c8fb2c8a133b959b0cc30b9e145785532284b07186f9567b444b73f1d541b8 encrypted output... /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 03901e74cb42ee2aa3062b37bd4b0c2846c8fb2c8a133b959b0cc30b9e145785532284b07186f9567b444b73f1d541b8 [patchiBoot] filesize: 10000 [patchiBoot] version: 1940 [patchiBoot] iboot_type: iBSS [patchiBoot] iboot_base: 84000000 [patchiBoot] verify_shsh: 00005864 [patchiBoot] writing buf writing... success iBSS: /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 03901e74cb42ee2aa3062b37bd4b0c2846c8fb2c8a133b959b0cc30b9e145785532284b07186f9567b444b73f1d541b8 /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 03901e74cb42ee2aa3062b37bd4b0c2846c8fb2c8a133b959b0cc30b9e145785532284b07186f9567b444b73f1d541b8 /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 03901e74cb42ee2aa3062b37bd4b0c2846c8fb2c8a133b959b0cc30b9e145785532284b07186f9567b444b73f1d541b8 writing... success [*] restore bootArgs: cs_enforcement_disable=1 amfi_get_out_of_my_way=1 amfi=0xff iBEC: encrypted input... /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 3716d7974ccdd96f6e9029719bfdae18fdae328ffebb2c27443ed4e65db03e4267c91c4ca72254de838706b31394ad89 /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 3716d7974ccdd96f6e9029719bfdae18fdae328ffebb2c27443ed4e65db03e4267c91c4ca72254de838706b31394ad89 encrypted output... /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 3716d7974ccdd96f6e9029719bfdae18fdae328ffebb2c27443ed4e65db03e4267c91c4ca72254de838706b31394ad89 [patchiBoot] filesize: 44000 [patchiBoot] version: 1940 [patchiBoot] iboot_type: iBEC [patchiBoot] iboot_base: 5ff00000 [patchiBoot] verify_shsh: 0001911c [patchiBoot] debug_enabled: 00019bc6 [patchiBoot] ticket_patch1: 0001d2fa [patchiBoot] ticket_patch2: 0001d30c [patchiBoot] boot_args_null: 0001af14 [patchiBoot] boot_args: 0001af10 [patchiBoot] reliance_str: 000426a0 [patchiBoot] bootArgs: cs_enforcement_disable=1 amfi_get_out_of_my_way=1 amfi=0xff -progress rd=md0 nand-enable-reformat=1 [patchiBoot] writing buf writing... success iBEC: /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 3716d7974ccdd96f6e9029719bfdae18fdae328ffebb2c27443ed4e65db03e4267c91c4ca72254de838706b31394ad89 /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 3716d7974ccdd96f6e9029719bfdae18fdae328ffebb2c27443ed4e65db03e4267c91c4ca72254de838706b31394ad89 /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 3716d7974ccdd96f6e9029719bfdae18fdae328ffebb2c27443ed4e65db03e4267c91c4ca72254de838706b31394ad89 writing... success RestoreDeviceTree: /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 994c3a162d1a177b708c4b7d33d9c01cd7cc03ce57f3ffac6ec7bd1bec4a06d11f64f1080c4a698e6ea01ababb8d8349 /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 994c3a162d1a177b708c4b7d33d9c01cd7cc03ce57f3ffac6ec7bd1bec4a06d11f64f1080c4a698e6ea01ababb8d8349 /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 994c3a162d1a177b708c4b7d33d9c01cd7cc03ce57f3ffac6ec7bd1bec4a06d11f64f1080c4a698e6ea01ababb8d8349 writing... success RestoreLogo: /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 484a7e63afb40c42504f85ab56308e476c002b14fba91f9956b527fe6672c8f2b31abb681a636271dda668ee7552b982 /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 484a7e63afb40c42504f85ab56308e476c002b14fba91f9956b527fe6672c8f2b31abb681a636271dda668ee7552b982 /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 484a7e63afb40c42504f85ab56308e476c002b14fba91f9956b527fe6672c8f2b31abb681a636271dda668ee7552b982 writing... success RestoreKernelCache: /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 92e7d5835654ac1205196ae5441b7e62e3576c705a7dcea3a835e244ef6c1e18e8075a4b3c8f87b680c81c5e803304d5 /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 92e7d5835654ac1205196ae5441b7e62e3576c705a7dcea3a835e244ef6c1e18e8075a4b3c8f87b680c81c5e803304d5 /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 92e7d5835654ac1205196ae5441b7e62e3576c705a7dcea3a835e244ef6c1e18e8075a4b3c8f87b680c81c5e803304d5 writing... success Restore Ramdisk: /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 3887ef9111947ba4e4fca2841ae7bbdd2c96c7e423fc6236c0ce8060f7444c2430b7e94dc81750363c6208cd961b8c69 /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 3887ef9111947ba4e4fca2841ae7bbdd2c96c7e423fc6236c0ce8060f7444c2430b7e94dc81750363c6208cd961b8c69 /home/runner/work/powdersn0w_pub/powdersn0w_pub/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:593: 3887ef9111947ba4e4fca2841ae7bbdd2c96c7e423fc6236c0ce8060f7444c2430b7e94dc81750363c6208cd961b8c69 writing... success [*] Found: ramdisk package: src/bin.tar Writing out data.. run 0: start=0 sectors=512, length=24556, fileOffset=0x138 run 100: start=26214400 sectors=512, length=207899, fileOffset=0xa40e9a run 200: start=52428800 sectors=512, length=249457, fileOffset=0x204b4e9 run 300: start=78643200 sectors=512, length=124232, fileOffset=0x36ff9cf run 400: start=104857600 sectors=512, length=79188, fileOffset=0x3d8fdb8 run 500: start=131072000 sectors=512, length=262144, fileOffset=0x4f0a683 run 600: start=157286400 sectors=512, length=262144, fileOffset=0x6479db2 run 700: start=183500800 sectors=512, length=48869, fileOffset=0x7d74d28 run 800: start=209715200 sectors=512, length=262144, fileOffset=0x8f53f03 run 900: start=235929600 sectors=512, length=112610, fileOffset=0xa6b6ff0 run 1000: start=262144000 sectors=512, length=251415, fileOffset=0xbcf5dcd run 1100: start=288358400 sectors=512, length=262144, fileOffset=0xd5c30f3 run 1200: start=314572800 sectors=512, length=185796, fileOffset=0xec1484d run 1300: start=340787200 sectors=512, length=191080, fileOffset=0xfd90244 run 1400: start=367001600 sectors=512, length=193297, fileOffset=0x10f3908f run 1500: start=393216000 sectors=512, length=178329, fileOffset=0x1208d6a3 run 1600: start=419430400 sectors=512, length=187582, fileOffset=0x1316e246 run 1700: start=445644800 sectors=512, length=186174, fileOffset=0x142d9f83 run 1800: start=471859200 sectors=512, length=174975, fileOffset=0x1542c08c run 1900: start=498073600 sectors=512, length=262144, fileOffset=0x16ba309a run 2000: start=524288000 sectors=512, length=262144, fileOffset=0x1847a500 run 2100: start=550502400 sectors=512, length=209330, fileOffset=0x198ac7b3 run 2200: start=576716800 sectors=512, length=1167, fileOffset=0x1a8aa1c8 run 2300: start=602931200 sectors=512, length=172459, fileOffset=0x1b176a13 run 2400: start=629145600 sectors=512, length=262144, fileOffset=0x1c5f93de run 2500: start=655360000 sectors=512, length=184680, fileOffset=0x1d5d3c6e run 2600: start=681574400 sectors=512, length=262144, fileOffset=0x1edae560 run 2700: start=707788800 sectors=512, length=250251, fileOffset=0x2048faed run 2800: start=734003200 sectors=512, length=262144, fileOffset=0x21c4618d run 2900: start=760217600 sectors=512, length=262144, fileOffset=0x23334929 run 3000: start=786432000 sectors=512, length=262144, fileOffset=0x24b49881 run 3100: start=812646400 sectors=512, length=262144, fileOffset=0x263ff73a run 3200: start=838860800 sectors=512, length=241027, fileOffset=0x27acbcb1 run 3300: start=865075200 sectors=512, length=262144, fileOffset=0x28968752 run 3400: start=891289600 sectors=512, length=192761, fileOffset=0x29bfe358 run 3500: start=917504000 sectors=512, length=5714, fileOffset=0x2af51e24 run 3600: start=943718400 sectors=512, length=168065, fileOffset=0x2bf825b6 run 3700: start=969932800 sectors=512, length=48817, fileOffset=0x2ca6a820 run 3800: start=996147200 sectors=512, length=262144, fileOffset=0x2dddd887 run 3900: start=1022361600 sectors=512, length=262144, fileOffset=0x2f5de5b3 run 4000: start=1048576000 sectors=512, length=242078, fileOffset=0x30d4f513 run 4100: start=1074790400 sectors=512, length=262144, fileOffset=0x322f1c61 run 4200: start=1101004800 sectors=512, length=262144, fileOffset=0x33a30c16 run 4300: start=1127219200 sectors=512, length=228064, fileOffset=0x351e9e61 run 4400: start=1153433600 sectors=512, length=253846, fileOffset=0x3693841a run 4500: start=1179648000 sectors=512, length=262144, fileOffset=0x380d0ff3 run 4600: start=1205862400 sectors=512, length=249789, fileOffset=0x3923a289 run 4700: start=1232076800 sectors=512, length=146566, fileOffset=0x3a2a6313 run 4800: start=1258291200 sectors=512, length=201102, fileOffset=0x3b0b29e6 run 4900: start=1284505600 sectors=512, length=118530, fileOffset=0x3bebc829 run 5000: start=1310720000 sectors=512, length=75871, fileOffset=0x3cd64484 run 5100: start=1336934400 sectors=512, length=177415, fileOffset=0x3dac9342 run 5200: start=1363148800 sectors=512, length=133539, fileOffset=0x3e8036d9 run 5300: start=1389363200 sectors=512, length=108603, fileOffset=0x3f3d505b run 5400: start=1415577600 sectors=512, length=148972, fileOffset=0x3ff927d2 run 5500: start=1441792000 sectors=512, length=126195, fileOffset=0x4093cada run 5600: start=1468006400 sectors=512, length=24855, fileOffset=0x410defd7 run 5700: start=1494220800 sectors=512, length=49420, fileOffset=0x4176fe8d Growing root to minimum: 1475 merging systemversion.tar ignoring System, type = 5 ignoring System/Library, type = 5 ignoring System/Library/CoreServices, type = 5 replacing System/Library/CoreServices/SystemVersion.plist file: System/Library/CoreServices/SystemVersion.plist (0644), size = 400 [*] Executing needPref... unencrypted ramdisk growing ramdisk: 13082624 -> 17752064 retrieving...patching... [patchASR] sz: 2d240 [patchASR] magic: feedface [patchASR] text_vmaddr: 1000 [patchASR] cmdsize: 00000010 [patchASR] dataoff: 0002ce10 [patchASR] datasize: 1072 [patchASR] text_base: 00001000 [patchASR] image_passed_signature: 00014cf6 [patchASR] image_failed_signature: 00014c7a [patchASR] patched: 00013c7a: b83cf000 [patchASR] csdir_start: 0002ce34 [patchASR] hashOffset: 66 [patchASR] nSpecialSlots: 2 [patchASR] nCodeSlots: 2d [patchASR] codeLimit: 2ce10 [patchASR] hashSize: 14 [patchASR] hashType: 1 [patchASR] pageSize: 1000 [patchASR] checking cs slots... [validateHash] b1149cc5a863b26aa882542082b3564a554f8356 != dcfadaae9e1e971fbb4523d75b7ede865d515c93 [patchASR] writing buf writing... success [*] Installing Package merging src/bin.tar ignoring bin, type = 5 file: bin/bash (0755), size = 567632 file: bin/bspatch (0755), size = 17440 file: bin/cp (0755), size = 162560 file: bin/dd (0755), size = 124896 file: bin/echo (0755), size = 104480 file: bin/sleep (0755), size = 105184 file: bin/tar (0755), size = 353136 file: bin/touch (0755), size = 125248 ignoring usr, type = 5 ignoring usr/bin, type = 5 file: usr/bin/gptfdisk (0755), size = 164368 file: usr/bin/hfs_resize (0755), size = 12960 ignoring usr/lib, type = 5 file: usr/lib/libhistory.6.0.dylib (0755), size = 54752 file: usr/lib/libiconv.2.dylib (0644), size = 1012656 file: usr/lib/libncurses.5.dylib (0755), size = 335968 file: usr/lib/libreadline.6.0.dylib (0755), size = 198112 [+] ramdiskVolume ... Moved: /sbin/reboot -> /sbin/reboot_ [+] ramdiskVolume ... Added: /sbin/reboot [+] ramdiskVolume ... Added: /exploit [*] ramdiskVolume ... chmod: /sbin/reboot -rwx/-r-x/-r-x [*] ramdiskVolume ... chown: /sbin/reboot root:root got /usr/local/share/restore/options.n90.plist from ramdisk start create restore options SystemPartitionPadding 128 1280 16 160 32 320 64 640 8 80 MinimumSystemPartition 1475 CreateFilesystemPartitions SystemPartitionSize 1475 UpdateBaseband Creating and writing DDM and partition map... run 0: sectors=1, left=1 run 0: sectors=60, left=60 malloc: 0x560bdd9432e0 4096 run 0: sectors=4, left=4 Writing main data blkx... run 100: sectors=512, left=2970112 run 200: sectors=512, left=2918912 run 300: sectors=512, left=2867712 run 400: sectors=512, left=2816512 run 500: sectors=512, left=2765312 run 600: sectors=512, left=2714112 run 700: sectors=512, left=2662912 run 800: sectors=512, left=2611712 run 900: sectors=512, left=2560512 run 1000: sectors=512, left=2509312 run 1100: sectors=512, left=2458112 run 1200: sectors=512, left=2406912 run 1300: sectors=512, left=2355712 run 1400: sectors=512, left=2304512 run 1500: sectors=512, left=2253312 run 1600: sectors=512, left=2202112 run 1700: sectors=512, left=2150912 run 1800: sectors=512, left=2099712 run 1900: sectors=512, left=2048512 run 2000: sectors=512, left=1997312 run 2100: sectors=512, left=1946112 run 2200: sectors=512, left=1894912 run 2300: sectors=512, left=1843712 run 2400: sectors=512, left=1792512 run 2500: sectors=512, left=1741312 run 2600: sectors=512, left=1690112 run 2700: sectors=512, left=1638912 run 2800: sectors=512, left=1587712 run 2900: sectors=512, left=1536512 run 3000: sectors=512, left=1485312 run 3100: sectors=512, left=1434112 run 3200: sectors=512, left=1382912 run 3300: sectors=512, left=1331712 run 3400: sectors=512, left=1280512 run 3500: sectors=512, left=1229312 run 3600: sectors=512, left=1178112 run 3700: sectors=512, left=1126912 run 3800: sectors=512, left=1075712 run 3900: sectors=512, left=1024512 run 4000: sectors=512, left=973312 run 4100: sectors=512, left=922112 run 4200: sectors=512, left=870912 run 4300: sectors=512, left=819712 run 4400: sectors=512, left=768512 run 4500: sectors=512, left=717312 run 4600: sectors=512, left=666112 run 4700: sectors=512, left=614912 run 4800: sectors=512, left=563712 run 4900: sectors=512, left=512512 run 5000: sectors=512, left=461312 run 5100: sectors=512, left=410112 run 5200: sectors=512, left=358912 run 5300: sectors=512, left=307712 run 5400: sectors=512, left=256512 run 5500: sectors=512, left=205312 run 5600: sectors=512, left=154112 run 5700: sectors=512, left=102912 run 5781: skipping sectors=61424, left=61440 run 5782: skipping sectors=14, left=16 Inserting main blkx... Inserting cSum data... Inserting nsiz data Writing free partition... Writing XML data... making size data we know to flip this size resource Generating UDIF metadata... Master checksum: f1ce80cf Writing out UDIF resource file... Cleaning up... Done. packing: 048-3577-029.dmg (17752156) packing: 048-3668-029.dmg (13078796) packing: 048-4872-028.dmg (1103538059) packing: BuildManifest.plist (60926) packing: Downgrade/ (0) packing: Downgrade/RestoreDeviceTree (74064) packing: Downgrade/RestoreKernelCache (8236828) packing: Downgrade/RestoreLogo (6632) packing: Firmware/ (0) packing: Firmware/ICE3_04.12.06.Release.bin (16777216) packing: Firmware/ICE3_04.12.06_BOOT_02.13.Release.bbfw (3815988) packing: Firmware/ICE3_04.12.06_BOOT_02.13.Release.plist (860) packing: Firmware/all_flash/ (0) packing: Firmware/all_flash/all_flash.n90ap.production/ (0) packing: Firmware/all_flash/all_flash.n90ap.production/DeviceTree.n90ap.img3 (74252) packing: Firmware/all_flash/all_flash.n90ap.production/LLB.n90ap.RELEASE.img3 (131468) packing: Firmware/all_flash/all_flash.n90ap.production/applelogo7@2x~iphone.s5l8930x.img3 (6796) packing: Firmware/all_flash/all_flash.n90ap.production/applelogo@2x~iphone.s5l8930x.img3 (6796) packing: Firmware/all_flash/all_flash.n90ap.production/batterycharging0@2x~iphone.s5l8930x.img3 (9740) packing: Firmware/all_flash/all_flash.n90ap.production/batterycharging1@2x~iphone.s5l8930x.img3 (35020) packing: Firmware/all_flash/all_flash.n90ap.production/batteryfull@2x~iphone.s5l8930x.img3 (84044) packing: Firmware/all_flash/all_flash.n90ap.production/batterylow0@2x~iphone.s5l8930x.img3 (43596) packing: Firmware/all_flash/all_flash.n90ap.production/batterylow1@2x~iphone.s5l8930x.img3 (2060) packing: Firmware/all_flash/all_flash.n90ap.production/glyphplugin@2x~iphone-30pin.s5l8930x.img3 (11852) packing: Firmware/all_flash/all_flash.n90ap.production/iBoot.n90ap.RELEASE.img3 (283020) packing: Firmware/all_flash/all_flash.n90ap.production/iBoot2.n90ap.RELEASE.img3 (278720) packing: Firmware/all_flash/all_flash.n90ap.production/manifest (484) packing: Firmware/all_flash/all_flash.n90ap.production/recoverymode7@2x~iphone-30pin.s5l8930x.img3 (69452) packing: Firmware/all_flash/all_flash.n90ap.production/recoverymode@2x~iphone-30pin.s5l8930x.img3 (69836) packing: Firmware/dfu/ (0) packing: Firmware/dfu/iBEC.n90ap.RELEASE.dfu (278720) packing: Firmware/dfu/iBSS.n90ap.RELEASE.dfu (65728) packing: Firmware/usr/ (0) packing: Firmware/usr/local/ (0) packing: Firmware/usr/local/standalone/ (0) packing: Restore.plist (2091) packing: kernelcache.release.n90 (8237004) [Log] Found existing saved 7.1.2 blobs: ../saved/shsh/2539877367052_iPhone3,1_n90ap_7.1.2-11D257_3a88b7c3802f2f0510abc432104a15ebd8bd7154.shsh2 * Get ready to enter DFU mode. * If you already know how to enter DFU mode, you may do so right now before continuing. [Input] Select Y to continue, N to exit recovery mode (Y/n) y * Get ready... 02 01 * Hold TOP and HOME buttons. 10 [Log] Found device in DFU mode. [Input] PwnDFU Tool Option * Select tool to be used for entering pwned DFU mode. * This option is set to ipwndfu by default (1). Select this option if unsure. * If the first option does not work, try the other option(s). [Input] Select your option: 1) ipwndfu 2) ipwnder (SHAtter) 3) ipwnder (limera1n) #? 1 [Log] python2 from pyenv detected [Log] Placing device to pwnDFU Mode using ipwndfu *** based on SHAtter exploit (segment overflow) by posixninja and pod2g *** Found: CPID:8930 CPRV:20 CPFM:03 SCEP:01 BDID:00 ECID:0000024F5C7CFD0C IBFL:00 SRTG:[iBoot-574.4] Device is now in pwned DFU Mode. [Log] Device iPhone3,1 has no baseband/disabled baseband update [Log] Extracting IPSW: ../iPhone3,1_7.0_11A4372q_CustomP.ipsw Archive: ../iPhone3,1_7.0_11A4372q_CustomP.ipsw inflating: ../iPhone3,1_7.0_11A4372q_CustomP/048-3577-029.dmg inflating: ../iPhone3,1_7.0_11A4372q_CustomP/048-3668-029.dmg inflating: ../iPhone3,1_7.0_11A4372q_CustomP/048-4872-028.dmg inflating: ../iPhone3,1_7.0_11A4372q_CustomP/BuildManifest.plist creating: ../iPhone3,1_7.0_11A4372q_CustomP/Downgrade/ inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Downgrade/RestoreDeviceTree inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Downgrade/RestoreKernelCache inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Downgrade/RestoreLogo creating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/ inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/ICE3_04.12.06.Release.bin inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/ICE3_04.12.06_BOOT_02.13.Release.bbfw inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/ICE3_04.12.06_BOOT_02.13.Release.plist creating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/ creating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/ inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/DeviceTree.n90ap.img3 inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/LLB.n90ap.RELEASE.img3 inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/applelogo7@2x~iphone.s5l8930x.img3 inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/applelogo@2x~iphone.s5l8930x.img3 inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/batterycharging0@2x~iphone.s5l8930x.img3 inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/batterycharging1@2x~iphone.s5l8930x.img3 inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/batteryfull@2x~iphone.s5l8930x.img3 inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/batterylow0@2x~iphone.s5l8930x.img3 inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/batterylow1@2x~iphone.s5l8930x.img3 inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/glyphplugin@2x~iphone-30pin.s5l8930x.img3 inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/iBoot.n90ap.RELEASE.img3 inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/iBoot2.n90ap.RELEASE.img3 inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/manifest inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/recoverymode7@2x~iphone-30pin.s5l8930x.img3 inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/all_flash/all_flash.n90ap.production/recoverymode@2x~iphone-30pin.s5l8930x.img3 creating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/dfu/ inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/dfu/iBEC.n90ap.RELEASE.dfu inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/dfu/iBSS.n90ap.RELEASE.dfu creating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/usr/ creating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/usr/local/ creating: ../iPhone3,1_7.0_11A4372q_CustomP/Firmware/usr/local/standalone/ inflating: ../iPhone3,1_7.0_11A4372q_CustomP/Restore.plist inflating: ../iPhone3,1_7.0_11A4372q_CustomP/kernelcache.release.n90 [Log] Running idevicerestore with command: sudo ../bin/linux/x86_64/idevicerestore -ew "../iPhone3,1_7.0_11A4372q_CustomP.ipsw" Found device in DFU mode Found ECID 2539877367052 Identified device as n90ap, iPhone3,1 Extracting BuildManifest from IPSW Product Version: 7.0 Product Build: 11A4372q Major: 11 Device supports Image4: false Variant: Developer Erase Install (IPSW) This restore will erase your device data. Getting ApNonce in dfu mode... checking for local shsh Using cached SHSH Using cached filesystem from '../iPhone3,1_7.0_11A4372q_CustomP/048-4872-028.dmg' Extracting iBSS.n90ap.RELEASE.dfu... Personalizing IMG3 component iBSS... reconstructed size: 67853 Sending iBSS (67853 bytes)... [==================================================] 100.0% Nonce: 5d 5f a3 c5 46 74 b6 e7 0e 7b 9d 3b 44 e0 a4 99 24 98 97 c8 checking for local shsh Using cached SHSH Extracting iBEC.n90ap.RELEASE.dfu... Personalizing IMG3 component iBEC... reconstructed size: 280845 Sending iBEC (280845 bytes)... [==================================================] 100.0% INFO: device serial number is 7913439CA4S Getting ApNonce in recovery mode... 5d 5f a3 c5 46 74 b6 e7 0e 7b 9d 3b 44 e0 a4 99 24 98 97 c8 Sending APTicket (2741 bytes) Recovery Mode Environment: iBoot build-version=iBoot-1940.1.8 iBoot build-style=RELEASE ramdisk-size=0x4000000 Extracting 048-3577-029.dmg... Not personalizing component RestoreRamDisk... Sending RestoreRamDisk (17752156 bytes)... Extracting RestoreDeviceTree... Not personalizing component RestoreDeviceTree... Sending RestoreDeviceTree (74064 bytes)... Extracting RestoreKernelCache... Not personalizing component RestoreKernelCache... Sending RestoreKernelCache (8236828 bytes)... About to restore device... Waiting for device... Device f2e5df5a2dc4f7513a2b4837e7f8e91c36d68d71 is now connected in restore mode... Connecting now... Connected to com.apple.mobile.restored, version 13 Device f2e5df5a2dc4f7513a2b4837e7f8e91c36d68d71 has successfully entered restore mode Hardware Information: BoardID: 0 ChipID: 35120 UniqueChipID: 2539877367052 ProductionMode: true Waiting for NAND (28) Unmounting filesystems (29) Unmounting filesystems (29) Creating partition map (11) Creating filesystem (12) Creating filesystem (12) Mounting filesystems (16) Mounting filesystems (16) Unmounting filesystems (29) Unmounting filesystems (29) About to send RootTicket... Sending RootTicket now... Done sending RootTicket About to send filesystem... Connected to ASR Validating the filesystem Filesystem validated Sending filesystem now... [==================================================] 100.0% Done sending filesystem Verifying restore (14) [==================================================] 100.0% Mounting filesystems (16) Mounting filesystems (16) About to send KernelCache... Extracting kernelcache.release.n90... Not personalizing component KernelCache... Sending KernelCache now... Done sending KernelCache Installing kernelcache (27) About to send NORData... Found firmware path Firmware/all_flash/all_flash.n90ap.production Getting firmware manifest from Firmware/all_flash/all_flash.n90ap.production/manifest Extracting LLB.n90ap.RELEASE.img3... Personalizing IMG3 component LLB... reconstructed size: 133593 Extracting DeviceTree.n90ap.img3... Not personalizing component DeviceTree... Extracting applelogo@2x~iphone.s5l8930x.img3... Not personalizing component AppleLogo... Extracting batterycharging0@2x~iphone.s5l8930x.img3... Not personalizing component BatteryCharging... Extracting batterycharging1@2x~iphone.s5l8930x.img3... Not personalizing component BatteryCharging... Extracting batteryfull@2x~iphone.s5l8930x.img3... Not personalizing component BatteryFull... Extracting batterylow0@2x~iphone.s5l8930x.img3... Not personalizing component BatteryLow0... Extracting batterylow1@2x~iphone.s5l8930x.img3... Not personalizing component BatteryLow1... Extracting glyphplugin@2x~iphone-30pin.s5l8930x.img3... Not personalizing component BatteryPlugin... Extracting iBoot.n90ap.RELEASE.img3... Not personalizing component iBoot... Extracting recoverymode@2x~iphone-30pin.s5l8930x.img3... Not personalizing component RecoveryMode... Extracting applelogo7@2x~iphone.s5l8930x.img3... Not personalizing component AppleLogo... Extracting recoverymode7@2x~iphone-30pin.s5l8930x.img3... Not personalizing component RecoveryMode... Extracting iBoot2.n90ap.RELEASE.img3... Not personalizing component iBoot... Sending NORData now... Done sending NORData Flashing firmware (18) [==================================================] 100.0% Updating gas gauge software (46) Updating gas gauge software (46) Fixing up /var (17) Creating system key bag (49) Modifying persistent boot-args (25) Resizing system partition (51) Unmounting filesystems (29) Unmounting filesystems (29) Got status message Status: Restore Finished Cleaning up... DONE [Log] Restoring done! Read the message below if any error has occurred: * Please read the "Troubleshooting" wiki page in GitHub before opening any issue! * Your problem may have already been addressed within the wiki page. * If opening an issue in GitHub, please provide a FULL log/output. Otherwise, your issue may be dismissed. * Save the terminal output now if needed. * Legacy iOS Kit v24.05.14 (ae64966) * Platform: linux (Debian GNU/Linux 12 (bookworm)) So from the log, everything seems normal, but on the phone, it is stuck with the progress bar almost complete, I've left it for 2 hours still connected and it is still stuck.

[Thathip]

[Thathip]

log.txt

[LukeZGD]

7.0b1 is known to not work, idk if i can fix this

7.0b2 will work so select that instead for now