Closed Jefferyat closed 2 months ago
oops mb, try this again in v24.06.28 (delete the existing custom ipsw first before retyring)
also, after the restore succeeds, the device might boot loop on apple logo, to attempt fixing this, enter dfu mode and got to other utilities -> disable/enable exploit -> enable exploit
edit: most likely no need to do this anymore as of latest update
update: just re-do it in v24.06.30, delete the custom ipsws as usual, no need to manually enable exploit anymore hopefully
Tried Downgrading iPhone3,3 to iOS 4.2.10 with v24.06.30 it restores successfully on the first restore but on the second restore it errors out, i also tried enabling exploit after second restore and then after that it sent the phone into DFU Mode Jailbreak option was enabled
Legacy iOS Kit
Version: v24.06.31 (a10a1ac)
Platform: macos (11.7.10)
Device: iPhone3,3 (n92ap) in Recovery mode
iOS Version: :: BUILD_TAG: iBoot-1940.10.58
ECID: 2728127595308
Main Menu [Input] Select an option: 1) Restore/Downgrade 3) Save SHSH Blobs 5) Exit 2) Jailbreak Device 4) Other Utilities
? 1
Legacy iOS Kit
Version: v24.06.31 (a10a1ac)
Platform: macos (11.7.10)
Device: iPhone3,3 (n92ap) in Recovery mode
iOS Version: :: BUILD_TAG: iBoot-1940.10.58
ECID: 2728127595308
Main Menu > Restore/Downgrade [Input] Select an option: 1) powdersn0w (any iOS) 5) Other (Tethered) 2) Latest iOS (7.1.2) 6) DFU IPSW 3) Other (Custom IPSW) 7) IPSW Downloader 4) Other (Use SHSH Blobs) 8) Go Back
? 1
Legacy iOS Kit
Version: v24.06.31 (a10a1ac)
Platform: macos (11.7.10)
Device: iPhone3,3 (n92ap) in Recovery mode
iOS Version: :: BUILD_TAG: iBoot-1940.10.58
ECID: 2728127595308
Only select unmodified IPSW for the selection. Do not select custom IPSWs
Select Target IPSW to continue
Any iOS version from 5.0 to 7.1.1 is supported
Select Base (iOS 7.1.2) IPSW to continue
Main Menu > Restore/Downgrade > powdersn0w (any iOS) [Input] Select an option: 1) Select Target IPSW 2) Select Base IPSW 3) Go Back
? 1
[Input] Select your target IPSW file in the file selection window.
[Log] Selected IPSW file: /Users/theapplepie/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw
[Log] Getting version from IPSW
Archive: /Users/theapplepie/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw
inflating: ./Restore.plist
[Log] Getting SHA1 hash for /Users/theapplepie/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw...
[Log] Getting SHA1 hash from The Apple Wiki...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 65756 100 65756 0 0 181k 0 --:--:-- --:--:-- --:--:-- 182k
[Log] Using saved SHA1 hash for this IPSW: 789ee18ee9659c87cfff304f69fd7ea4c205693b
[Log] IPSW SHA1sum matches
Legacy iOS Kit
Version: v24.06.31 (a10a1ac)
Platform: macos (11.7.10)
Device: iPhone3,3 (n92ap) in Recovery mode
iOS Version: :: BUILD_TAG: iBoot-1940.10.58
ECID: 2728127595308
Only select unmodified IPSW for the selection. Do not select custom IPSWs
Selected Target IPSW: /Users/theapplepie/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw
Target Version: 4.2.10-8E600 [WARNING] Selected target version is not supported. It will not restore/boot properly
Select Base (iOS 7.1.2) IPSW to continue
You can select your own custom Apple logo image. This is optional and an experimental option
Note that the images must be in PNG format, and up to 320x480 resolution only
No custom Apple logo selected
Main Menu > Restore/Downgrade > powdersn0w (any iOS) [Input] Select an option: 1) Select Target IPSW 3) Select Apple Logo 2) Select Base IPSW 4) Go Back
? 1) Select Target IPSW 3) Select Apple Logo
2) Select Base IPSW 4) Go Back
? 2
[Input] Select your base IPSW file in the file selection window.
[Log] Selected IPSW file: /Users/theapplepie/Desktop/iPhone3,3_7.1.2_11D257_Restore.ipsw
[Log] Getting version from IPSW
Archive: /Users/theapplepie/Desktop/iPhone3,3_7.1.2_11D257_Restore.ipsw
inflating: ./Restore.plist
[Log] Getting SHA1 hash for /Users/theapplepie/Desktop/iPhone3,3_7.1.2_11D257_Restore.ipsw...
[Log] Getting SHA1 hash from The Apple Wiki...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 130k 100 130k 0 0 588k 0 --:--:-- --:--:-- --:--:-- 597k
[Log] Using saved SHA1 hash for this IPSW: aaeda3c8e1979189faa153cdf43e817a3f81f74c
[Log] IPSW SHA1sum matches
Legacy iOS Kit
Version: v24.06.31 (a10a1ac)
Platform: macos (11.7.10)
Device: iPhone3,3 (n92ap) in Recovery mode
iOS Version: :: BUILD_TAG: iBoot-1940.10.58
ECID: 2728127595308
Only select unmodified IPSW for the selection. Do not select custom IPSWs
Selected Target IPSW: /Users/theapplepie/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw
Target Version: 4.2.10-8E600 [WARNING] Selected target version is not supported. It will not restore/boot properly
Selected Base (iOS 7.1.2) IPSW: /Users/theapplepie/Desktop/iPhone3,3_7.1.2_11D257_Restore.ipsw
Base Version: 7.1.2-11D257
You can select your own custom Apple logo image. This is optional and an experimental option
Note that the images must be in PNG format, and up to 320x480 resolution only
No custom Apple logo selected
Main Menu > Restore/Downgrade > powdersn0w (any iOS) [Input] Select an option: 1) Select Target IPSW 3) Start Restore 5) Go Back 2) Select Base IPSW 4) Select Apple Logo
? 1) Select Target IPSW 3) Start Restore 5) Go Back
2) Select Base IPSW 4) Select Apple Logo
? 3
[Input] Jailbreak Option
When this option is enabled, your device will be jailbroken on restore.
I recommend to enable this option to have the jailbreak and Cydia pre-installed.
This option is enabled by default (Y). Select this option if unsure. [Input] Enable this option? (Y/n): Y [Log] Jailbreak option enabled.
[Input] Memory Option for creating custom IPSW
[Input] Verbose Boot Option
[Log] Found existing saved 7.1.2 blobs: ../saved/shsh/2728127595308_iPhone3,3_n92ap_7.1.2-11D257_3a88b7c3802f2f0510abc432104a15ebd8bd7154.shsh2 [Log] Found existing Custom IPSWs. Skipping IPSW creation. [Log] Found existing saved 7.1.2 blobs: ../saved/shsh/2728127595308_iPhone3,3_n92ap_7.1.2-11D257_3a88b7c3802f2f0510abc432104a15ebd8bd7154.shsh2
[Log] Placing device to pwnDFU mode using ../bin/macos/ipwnder32 -p ** iPwnder32 - RELEASE v3.2.0 [3C152] by @dora2ios Waiting for device in DFU mode... DFU device infomation iPhone 4 (CDMA) [iPhone3,3] CPID:0x8930 CPRV:0x20 BDID:0x06 ECID:0x0000027B3113832C CPFM:0x03 SCEP:0x01 IBFL:0x00 SRTG:[iBoot-574.4] exploiting with limera1n
[Log] Placing device to pwnDFU mode using ../bin/macos/ipwnder32 -p ** iPwnder32 - RELEASE v3.2.0 [3C152] by @dora2ios Waiting for device in DFU mode... DFU device infomation iPhone 4 (CDMA) [iPhone3,3] CPID:0x8930 CPRV:0x20 BDID:0x06 ECID:0x0000027B3113832C CPFM:0x03 SCEP:0x01 IBFL:0x00 SRTG:[iBoot-574.4] exploiting with limera1n
Log is available: tion inverse matrix or the data is invalid, Compute locally AppleAP3GDL::handleStart _calibrationInverseMatrix [64545 -17 678] [94 71003 -700] [-366 1160 68559] _odr200HzSampleInterval = 4636 BSD root: md0, major 2, minor 0 com.apple.AppleFSCompressionTypeZlib kmod start com.apple.AppleFSCompressionTypeZlib load succeeded virtual bool AppleMobileFileIntegrity::start(IOService): built Apr 17 2012 13:32:54 L2TP domain init L2TP domain init complete PPTP domain init AppleS5L8920XBasebandSPIController::loadConfiguration: NCLK Frequency 48857142, Prescaler 6 BasebandSPIDevice::exitLowPower: Invalid state inactive AppleSerialMultiplexer: adap::start: Frame size is 2048, Rx Buffer count is 16 AppleSamsungSerial: Identified Serial Port on ARM Device=uart1 at 0x82600000(0xd260e000) AppleSamsungSerial: Identified Serial Port on ARM Device=uart2 at 0x82700000(0xd2616000) AppleSamsungSerial: Identified Serial Port on ARM Device=uart3 at 0x82800000(0xd2765000) AppleSamsungSerial: Identified Serial Port on ARM Device=uart6 at 0x82b00000(0xd276d000) AppleSerialMultiplexer: mux::start: created new mux (19) for spi-baseband with adapter BasebandSPIDevice IOSDIOController::enumerateSlot(): Searching for SDIO device in slot: 0 IOSDIOController::enumerateSlot(): Found SDIO I/O device. Function count(1), memory(0) AUD10::start: 0xc08b3000, highland-park mIISNub: 0x83687000, sampleRate = 44100, ol=10, oi=12 AppleSerialMultiplexer: debugparams::init: Parsed flags "" ( 0 ) AppleSerialMultiplexer: !! mux::setPowerStateGated: Skipping power state change AppleBaseband: Could not find mux function AppleMultitouchN1SPI: successfully started AppleRGBOUT: TVOUT device is detected ApplePinotLCD: _lcdPanelID: 0xa2c205c8 _lcdPanelClass: 2 virtual bool AppleCLCD::start_hardware(IOService ), clcdDitherCfg: 0x80000001 mIsCLCDDitherFor8Bits: 1 IOReturn AppleCLCD::set_ditherTable_state(bool), mIsCLCDDitherFor8Bits is true, no dynamic dither table. AppleM2ScalerCSCDriver: Added framebuffer device: AppleCLCD id: c7cb8000 IOSDIOIoCardDevice::parseFn0CISTuple(): Device manufacturer ID 0x2d0, Product ID 0x4329 IOSDIOIoCardDevice::parseFn0CISTuple(): Manufacturer: "" IOSDIOIoCardDevice::parseFn0CISTuple(): Product: "" IOSDIOIoCardDevice::parseFn0CISTuple(): ProductInfo0: "s=C0" IOSDIOIoCardDevice::parseFn0CISTuple(): ProductInfo1: "P=N92 m=2.2 V=m" AppleBCMWLANBusInterfaceSdio::start(): Started by: IOSDIOIoCardDevice, AppleBCMWLANV2-91.25 Apr 8 2012 21:53:02 AppleBCMWLANCore::init(): AppleBCMWLANV2-91.25 Apr 8 2012 21:53:07 AppleBCMWLANCore::attachBusGated(): Bus Driver Initialization Time 31.97552250 AppleBCMWLANCore:attachBusGated(): Starting with MAC Address: 24:ab:81:ac:e9:49 AppleBCMWLANCore::powerStateWillChangeToGated(): Received power state change before driver has initialized, ignoring AppleBCMWLANCore::powerStateDidChangeToGated(): Received power state change before driver has initialized, ignoring AppleMultitouchN1SPI: detected HBPP. driver will be kept alive AUD10::start: 0xc08b3000, highland-park mIICNub: 0x83199620, mIISNub: 0x83687000, mSerialNub: 0x83678480, sampleRate = 44100, ol=10, oi=12 AUD10::setPowerState() function called whereas Start() is not finished AppleD1815PMUPowerSource: AppleUSBCableDetect 1 AppleD1815PMUPowerSource: AppleUSBCableType USBHost AppleSynopsysOTGDevice::init : Logging Buffer Length = 4K AppleSynopsysOTGDevice::start : buffer-options 0x00000400 AppleSynopsysOTGDevice::start : object is 0xc0a6f200, registers at 0xd32ac000, 0x86100000 physical AppleSynopsysOTGDevice::findMaxEndpoints: in EPs: 7, out EPs: 7, max_endpoint: 8, num_endpoints: 14 AppleSynopsysOTGDevice::handleUSBCableConnect cable connected, but don't have device configuration yet AppleSynopsysOTGDevice::start : start finished display-scale = 2 display-rotation = 0 found suitable IOMobileFramebuffer: AppleCLCD display: 640 x 960 found PTP interface recv(10, 4) failed: connection closed unable to read message size: -1 could not receive message read new style signature 0x43313132 (line:389) [FTL:MSG] VSVFL Register [OK] [WMR:MSG] Metadata whitening is set in NAND signature [FTL:MSG] VFL Init [OK] AppleSynopsysOTGDevice - Configuration: PTP AppleSynopsysOTGDevice Interface: PTP AppleSynopsysOTGDevice - Configuration: iPod USB Interface AppleSynopsysOTGDevice Interface: USBAudioControl AppleSynopsysOTGDevice Interface: USBAudioStreaming AppleSynopsysOTGDevice Interface: IapOverUsbHid AppleSynopsysOTGDevice - Configuration: PTP + Apple Mobile Device AppleSynopsysOTGDevice Interface: PTP AppleSynopsysOTGDevice Interface: AppleUSBMux AppleSynopsysOTGDevice - Configuration: PTP + Apple Mobile Device + Apple USB Ethernet AppleSynopsysOTGDevice Interface: PTP AppleSynopsysOTGDevice Interface: AppleUSBMux AppleSynopsysOTGDevice Interface: AppleUSBEthernet AppleSynopsysOTGDevice::gated_registerFunction Register function USBAudioControl AppleSynopsysOTGDevice::gated_registerFunction Register function USBAudioStreaming IOAccessoryPortUSB::start AppleSynopsysOTGDevice::gated_registerFunction Register function IapOverUsbHid virtual bool AppleUSBDeviceMux::start(IOService) build: Apr 8 2012 21:53:25 init_waste AppleSynopsysOTGDevice::gated_registerFunction Register function AppleUSBMux AppleSynopsysOTGDevice::gated_registerFunction Register function AppleUSBEthernet AppleUSBEthernetDevice::start: Host MAC address = 26:ab:81:ac:e9:49 [FTL:MSG] VFL_Open [OK] [FTL:MSG] YAFTL Register [OK] AppleSynopsysOTGDevice::gated_registerFunction Register function PTP AppleSynopsysOTGDevice::gated_registerFunction all functions registered- we are ready to start usb stack IOReturn AppleUSBDeviceMux::setPropertiesGated(OSObject) setting debug level to 7 AppleSynopsysOTGDevice::handleUSBReset [FTL:MSG] FTL_Open [OK] AppleDiagnosticDataAccess started: 0x853c3d68 AppleDiagnosticDataAccess started with AppleNANDConfigAccess AppleSynopsysOTGDevice::stallBadSetupRequest request: 80 06 0f00 0000 0005 AppleUSBDeviceMux::handleConnectResult new session 0x853c3b58 established 62078<-lo0->49152 62078<-usb->58115 void AppleUSBDeviceMux::handleMuxTCPInput(mbuf*) received reset, closing 0x853c3b58 AppleUSBDeviceMux::handleConnectResult new session 0x853c3b58 established 62078<-lo0->49153 62078<-usb->58371 void AppleUSBDeviceMux::handleMuxTCPInput(mbuf*) received reset, closing 0x853c3b58 client protocol version 12 UUID 3693A849-FAC6-A256-D150-B6B2C47C2429 Restore options: UpdateBaseband => <CFBoolean 0x2cfa18 [0x2cf650]>{value = false} UUID => <CFString 0x1fd5e160 [0x2cf650]>{contents = "3693A849-FAC6-A256-D150-B6B2C47C2429"} CreateFilesystemPartitions => <CFBoolean 0x2cfa18 [0x2cf650]>{value = false} SystemImage => <CFBoolean 0x2cfa18 [0x2cf650]>{value = false} entering partition_nand_device device supports boot-from-NAND nand device is already partitioned entering wait_for_storage_device entering format_effaceable_storage effaceable storage is formatted, nothing to do entering ramrod_probe_media device partitioning scheme is GPT unexpected partition 'Apple HFS+' - skipping unexpected partition 'Apple HFS+' - skipping find_filesystem_partitions: storage=/dev/disk0 system=/dev/disk0s1 data=/dev/disk0s2s1 entering check_for_restore_log executing /sbin/fsck_hfs -fy /dev/disk0s1 [effaceable:INIT] found current generation, 26, in group 1 [effaceable:INIT] started [effaceable:INIT] started AppleUSBDeviceMux::handleConnectResult new session 0x853c3cb8 established 62078<-lo0->49154 62078<-usb->58627 /dev/rdisk0s1 Executing fsck_hfs (version diskdev_cmds-547.1~23). Checking non-journaled HFS Plus Volume. Detected a case-sensitive volume. The volume name is Phoenix8E600.N92OS Checking extents overflow file. Checking catalog file. Checking multi-linked files. Checking catalog hierarchy. Checking extended attributes file. Checking volume bitmap. Checking volume information. Trimming unused blocks. The volume Phoenix8E600.N92OS appears to be OK. executing /sbin/mount -t hfs /dev/disk0s1 /mnt1 restore log does not exist entering clean_NAND entering format_storage_for_LwVM entering create_filesystem_partitions entering ramrod_probe_media device partitioning scheme is GPT unexpected partition 'Apple HFS+' - skipping unexpected partition 'Apple HFS+' - skipping find_filesystem_partitions: storage=/dev/disk0 system=/dev/disk0s1 data=/dev/disk0s2s1 entering ramrod_ticket_update root-ticket-hash: <CFData 0x1fd5fbc0 [0x2cf650]>{length = 20, capacity = 20, bytes = 0xf2cbfa5904eef1eb8c003ede348c1722f191689c} ticket_hash: F2CBFA5904EEF1EB8C003EDE348C1722F191689C received valid ticket (2741 bytes) entering restore_images entering ramrod_probe_media device partitioning scheme is GPT unexpected partition 'Apple HFS+' - skipping unexpected partition 'Apple HFS+' - skipping find_filesystem_partitions: storage=/dev/disk0 system=/dev/disk0s1 data=/dev/disk0s2s1 entering mount_filesystems executing /sbin/fsck_hfs -fy /dev/disk0s1 /dev/rdisk0s1 Executing fsck_hfs (version diskdev_cmds-547.1~23). Checking non-journaled HFS Plus Volume. Detected a case-sensitive volume. The volume name is Phoenix8E600.N92OS Checking extents overflow file. Checking catalog file. Checking multi-linked files. Checking catalog hierarchy. Checking extended attributes file. Checking volume bitmap. Checking volume information. Trimming unused blocks. The volume Phoenix8E600.N92OS appears to be OK. executing /sbin/mount -t hfs /dev/disk0s1 /mnt1 executing /sbin/fsck_hfs -fy /dev/disk0s2s1 /dev/rdisk0s2s1 Executing fsck_hfs (version diskdev_cmds-547.1~23). Checking Journaled HFS Plus volume. Detected a case-sensitive volume. The volume name is Data Checking extents overflow file. Checking catalog file. Checking multi-linked files. Checking catalog hierarchy. Checking extended attributes file. Checking volume bitmap. Checking volume information. Trimming unused blocks. The volume Data appears to be OK. executing /sbin/mount -t hfs /dev/disk0s2s1 /mnt2 entering fixup_var remove_path /mnt1/private/var executing /bin/rm -rf /mnt1/private/var creating directory (owner=0 mode=755) /mnt1/private/var entering clear_persistent_boot_args executing /usr/sbin/nvram entering update_device_firmware entering update_iBoot write_image3_data: flashing LLB data (length = 0x209d9) write_image3_data: flashing NOR data (length = 0xb00) ticket updated write_image3_data: flashing NOR data (length = 0x22) AppleImage3NORAccess::_getSuperBlock imageVersion: 3 AppleImage3NORAccess::_getSuperBlock imageVersion: 3 0: RamrodErrorDomain/3e9: update_iBoot: error writing image 1: NSMachErrorDomain/e00002c2: write_image3_data: AppleImage3NORAccess returned an error when writing image3 object attempting to dump restore log writing log file: /mnt1/restore.log
ERROR: Unable to successfully restore device ERROR: Unable to restore device
[Log] Restoring done! Read the message below if any error has occurred:
For device activation, go to: Other Utilities -> Attempt Activation
If the restore failed on updating baseband: -> Try disabling baseband update: ./restore.sh --disable-bbupdate
Please read the "Troubleshooting" wiki page in GitHub before opening any issue!
Your problem may have already been addressed within the wiki page.
If opening an issue in GitHub, please provide a FULL log/output. Otherwise, your issue may be dismissed. [WARNING] Do not uninstall Cydia Substrate and Substrate Safe Mode in Cydia!
Save the terminal output now if needed.
Legacy iOS Kit v24.06.31 (a10a1ac)
Platform: macos (11.7.10)
ok, maybe v24.06.34 will fix this, hopefully
Tested restoring iPhone3,3 to iOS 4.2.10 with Legacy iOS Kit, after the second restore instead of entering recovery mode, it entered DFU Mode and after enabling the exploit it entered dfu mode
Found the issue, sorry about all this.. Hopefully everything is fixed now in v24.06.35 I just pushed.
Legacy iOS Kit
Version: v24.06.35 (0a2cd51)
Platform: macos (11.7.10)
Device: iPhone3,3 (n92ap) in Recovery mode
iOS Version: Unknown
ECID: 2728127595308
Main Menu [Input] Select an option: 1) Restore/Downgrade 3) Save SHSH Blobs 5) Exit 2) Jailbreak Device 4) Other Utilities
? 1
Legacy iOS Kit
Version: v24.06.35 (0a2cd51)
Platform: macos (11.7.10)
Device: iPhone3,3 (n92ap) in Recovery mode
iOS Version: Unknown
ECID: 2728127595308
Main Menu > Restore/Downgrade [Input] Select an option: 1) powdersn0w (any iOS) 5) Other (Tethered) 2) Latest iOS (7.1.2) 6) DFU IPSW 3) Other (Custom IPSW) 7) IPSW Downloader 4) Other (Use SHSH Blobs) 8) Go Back
? 1
Legacy iOS Kit
Version: v24.06.35 (0a2cd51)
Platform: macos (11.7.10)
Device: iPhone3,3 (n92ap) in Recovery mode
iOS Version: Unknown
ECID: 2728127595308
Only select unmodified IPSW for the selection. Do not select custom IPSWs
Select Target IPSW to continue
Any iOS version from 5.0 to 7.1.1 is supported
Select Base (iOS 7.1.2) IPSW to continue
Main Menu > Restore/Downgrade > powdersn0w (any iOS) [Input] Select an option: 1) Select Target IPSW 2) Select Base IPSW 3) Go Back
? 1
[Input] Select your target IPSW file in the file selection window.
[Log] Selected IPSW file: /Users/theapplepie/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw
[Log] Getting version from IPSW
Archive: /Users/theapplepie/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw
inflating: ./Restore.plist
[Log] Getting SHA1 hash for /Users/theapplepie/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw...
[Log] Getting SHA1 hash from The Apple Wiki...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 65756 100 65756 0 0 166k 0 --:--:-- --:--:-- --:--:-- 167k
[Log] Using saved SHA1 hash for this IPSW: 789ee18ee9659c87cfff304f69fd7ea4c205693b
[Log] IPSW SHA1sum matches
Legacy iOS Kit
Version: v24.06.35 (0a2cd51)
Platform: macos (11.7.10)
Device: iPhone3,3 (n92ap) in Recovery mode
iOS Version: Unknown
ECID: 2728127595308
Only select unmodified IPSW for the selection. Do not select custom IPSWs
Selected Target IPSW: /Users/theapplepie/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw
Target Version: 4.2.10-8E600 [WARNING] Selected target version is not supported. It will not restore/boot properly
Select Base (iOS 7.1.2) IPSW to continue
You can select your own custom Apple logo image. This is optional and an experimental option
Note that the images must be in PNG format, and up to 320x480 resolution only
No custom Apple logo selected
Main Menu > Restore/Downgrade > powdersn0w (any iOS) [Input] Select an option: 1) Select Target IPSW 3) Select Apple Logo 2) Select Base IPSW 4) Go Back
? 1) Select Target IPSW 3) Select Apple Logo
2) Select Base IPSW 4) Go Back
? 2
[Input] Select your base IPSW file in the file selection window.
[Log] Selected IPSW file: /Users/theapplepie/Desktop/iPhone3,3_7.1.2_11D257_Restore.ipsw
[Log] Getting version from IPSW
Archive: /Users/theapplepie/Desktop/iPhone3,3_7.1.2_11D257_Restore.ipsw
inflating: ./Restore.plist
[Log] Getting SHA1 hash for /Users/theapplepie/Desktop/iPhone3,3_7.1.2_11D257_Restore.ipsw...
[Log] Getting SHA1 hash from The Apple Wiki...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 130k 100 130k 0 0 448k 0 --:--:-- --:--:-- --:--:-- 454k
[Log] Using saved SHA1 hash for this IPSW: aaeda3c8e1979189faa153cdf43e817a3f81f74c
[Log] IPSW SHA1sum matches
Legacy iOS Kit
Version: v24.06.35 (0a2cd51)
Platform: macos (11.7.10)
Device: iPhone3,3 (n92ap) in Recovery mode
iOS Version: Unknown
ECID: 2728127595308
Only select unmodified IPSW for the selection. Do not select custom IPSWs
Selected Target IPSW: /Users/theapplepie/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw
Target Version: 4.2.10-8E600 [WARNING] Selected target version is not supported. It will not restore/boot properly
Selected Base (iOS 7.1.2) IPSW: /Users/theapplepie/Desktop/iPhone3,3_7.1.2_11D257_Restore.ipsw
Base Version: 7.1.2-11D257
You can select your own custom Apple logo image. This is optional and an experimental option
Note that the images must be in PNG format, and up to 320x480 resolution only
No custom Apple logo selected
Main Menu > Restore/Downgrade > powdersn0w (any iOS) [Input] Select an option: 1) Select Target IPSW 3) Start Restore 5) Go Back 2) Select Base IPSW 4) Select Apple Logo
? 1) Select Target IPSW 3) Start Restore 5) Go Back
2) Select Base IPSW 4) Select Apple Logo
? 3
[Input] Jailbreak Option
When this option is enabled, your device will be jailbroken on restore.
I recommend to enable this option to have the jailbreak and Cydia pre-installed.
This option is enabled by default (Y). Select this option if unsure. [Input] Enable this option? (Y/n): N [Log] Jailbreak option disabled by user.
[Input] Memory Option for creating custom IPSW
[Input] Verbose Boot Option
[Log] Found existing saved 7.1.2 blobs: ../saved/shsh/2728127595308_iPhone3,3_n92ap_7.1.2-11D257_3a88b7c3802f2f0510abc432104a15ebd8bd7154.shsh2 [Log] Found existing Custom IPSWs. Skipping IPSW creation. [Log] Found existing saved 7.1.2 blobs: ../saved/shsh/2728127595308_iPhone3,3_n92ap_7.1.2-11D257_3a88b7c3802f2f0510abc432104a15ebd8bd7154.shsh2
[Log] Placing device to pwnDFU mode using ../bin/macos/ipwnder32 -p ** iPwnder32 - RELEASE v3.2.0 [3C152] by @dora2ios Waiting for device in DFU mode... DFU device infomation iPhone 4 (CDMA) [iPhone3,3] CPID:0x8930 CPRV:0x20 BDID:0x06 ECID:0x0000027B3113832C CPFM:0x03 SCEP:0x01 IBFL:0x00 SRTG:[iBoot-574.4] exploiting with limera1n
Tried Restoring to iOS 4.2.10 on iPhone3,3 and comes with this on the log above
Hmm I'm not sure what happened there, try restoring to 7.1.2, clear NVRAM, and re-do the downgrade, along with deleting the custom IPSWs before doing so
I pushed an update (v24.06.41) that hopefully addresses the issue of getting stuck at the first restore, let me know if it works
Delete the existing custom IPSWs before the re-attempt
If it doesn't succeed on first restore, do not continue since it's a failed attempt, let me know when this happens and send terminal output if you can
If it succeeds though, the device may get stuck at recovery mode after the second restore, but it should hopefully boot after going to Other Utilities -> Disable/Enable Exploit -> Enable Exploit
iPhone 4 Restored to iOS 4.2.10 both successfully and enabled exploit successfully but now it is stuck in a verbose boot loop
oof, that sucks.. i really thought that since ipad 1 4.2.1 is fixed, 4.2.x for the 3,3 will be fixed as well, but apparently not.. do you have a video of the verbose boot loop? although it might be something that i cant fix, since 4.2.x will be unusable anyway due to activation issue
ill close the issue for now since the asr and stuck restore issues are fixed, and the current issue now might be unfixable
Legacy iOS Kit
Version: v24.06.27 (21a60c2)
Platform: macos (10.15.7)
Device: iPhone3,3 (n92ap) in DFU mode
iOS Version: Unknown
To get iOS version, go to: Other Utilities -> Get iOS Version
ECID: 2728127595308
Legacy iOS Kit
Version: v24.06.27 (21a60c2)
Platform: macos (10.15.7)
Device: iPhone3,3 (n92ap) in DFU mode
iOS Version: Unknown
To get iOS version, go to: Other Utilities -> Get iOS Version
ECID: 2728127595308
Legacy iOS Kit
Version: v24.06.27 (21a60c2)
Platform: macos (10.15.7)
Device: iPhone3,3 (n92ap) in DFU mode
iOS Version: Unknown
To get iOS version, go to: Other Utilities -> Get iOS Version
ECID: 2728127595308
Only select unmodified IPSW for the selection. Do not select custom IPSWs
Select Target IPSW to continue
Any iOS version from 5.0 to 7.1.1 is supported
Select Base (iOS 7.1.2) IPSW to continue
[Log] Selected IPSW file: /Users/apple/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw [Log] Getting version from IPSW Archive: /Users/apple/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw inflating: ./Restore.plist
[Log] Getting SHA1 hash for /Users/apple/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw... [Log] Getting SHA1 hash from The Apple Wiki... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 65756 100 65756 0 0 178k 0 --:--:-- --:--:-- --:--:-- 177k [Log] Using saved SHA1 hash for this IPSW: 789ee18ee9659c87cfff304f69fd7ea4c205693b [Log] IPSW SHA1sum matches
Legacy iOS Kit
Version: v24.06.27 (21a60c2)
Platform: macos (10.15.7)
Device: iPhone3,3 (n92ap) in DFU mode
iOS Version: Unknown
To get iOS version, go to: Other Utilities -> Get iOS Version
ECID: 2728127595308
Only select unmodified IPSW for the selection. Do not select custom IPSWs
Selected Target IPSW: /Users/apple/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw
Target Version: 4.2.10-8E600 [WARNING] Selected target version is not supported. It will not restore/boot properly
Select Base (iOS 7.1.2) IPSW to continue
You can select your own custom Apple logo image. This is optional and an experimental option
Note that the images must be in PNG format, and up to 320x480 resolution only
No custom Apple logo selected
[Log] Selected IPSW file: /Users/apple/Downloads/iPSW/iPhone 4 iPSW/iPhone 4 CDMA/iPhone3,3_7.1.2_11D257_Restore.ipsw [Log] Getting version from IPSW Archive: /Users/apple/Downloads/iPSW/iPhone 4 iPSW/iPhone 4 CDMA/iPhone3,3_7.1.2_11D257_Restore.ipsw inflating: ./Restore.plist
[Log] Getting SHA1 hash for /Users/apple/Downloads/iPSW/iPhone 4 iPSW/iPhone 4 CDMA/iPhone3,3_7.1.2_11D257_Restore.ipsw... [Log] Getting SHA1 hash from The Apple Wiki... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 130k 100 130k 0 0 475k 0 --:--:-- --:--:-- --:--:-- 475k [Log] Using saved SHA1 hash for this IPSW: aaeda3c8e1979189faa153cdf43e817a3f81f74c [Log] IPSW SHA1sum matches
Legacy iOS Kit
Version: v24.06.27 (21a60c2)
Platform: macos (10.15.7)
Device: iPhone3,3 (n92ap) in DFU mode
iOS Version: Unknown
To get iOS version, go to: Other Utilities -> Get iOS Version
ECID: 2728127595308
Only select unmodified IPSW for the selection. Do not select custom IPSWs
Selected Target IPSW: /Users/apple/Desktop/iPhone3,3_4.2.10_8E600_Restore.ipsw
Target Version: 4.2.10-8E600 [WARNING] Selected target version is not supported. It will not restore/boot properly
Selected Base (iOS 7.1.2) IPSW: /Users/apple/Downloads/iPSW/iPhone 4 iPSW/iPhone 4 CDMA/iPhone3,3_7.1.2_11D257_Restore.ipsw
Base Version: 7.1.2-11D257
You can select your own custom Apple logo image. This is optional and an experimental option
Note that the images must be in PNG format, and up to 320x480 resolution only
No custom Apple logo selected
When this option is enabled, your device will be jailbroken on restore.
I recommend to enable this option to have the jailbreak and Cydia pre-installed.
This option is enabled by default (Y). Select this option if unsure. [Input] Enable this option? (Y/n): N [Log] Jailbreak option disabled by user.
[Input] Memory Option for creating custom IPSW
[Input] Verbose Boot Option
[Log] Found existing saved 7.1.2 blobs: ../saved/shsh/2728127595308_iPhone3,3_n92ap_7.1.2-11D257_3a88b7c3802f2f0510abc432104a15ebd8bd7154.shsh2 [Log] Found existing Custom IPSWs. Skipping IPSW creation. [Log] Found existing saved 7.1.2 blobs: ../saved/shsh/2728127595308_iPhone3,3_n92ap_7.1.2-11D257_3a88b7c3802f2f0510abc432104a15ebd8bd7154.shsh2 [Input] PwnDFU Tool Option
? 1
[Log] Placing device to pwnDFU mode using ../bin/macos/ipwnder32 -p ** iPwnder32 - RELEASE v3.2.0 [3C152] by @dora2ios Waiting for device in DFU mode... DFU device infomation iPhone 4 (CDMA) [iPhone3,3] CPID:0x8930 CPRV:0x20 BDID:0x06 ECID:0x0000027B3113832C CPFM:0x03 SCEP:0x01 IBFL:0x00 SRTG:[iBoot-574.4] exploiting with limera1n
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/038-2275-001.dmg
extracting: ../iPhone3,3_4.2.10_8E600_CustomPV/038-2280-001.dmg
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/BuildManifest.plist
creating: ../iPhone3,3_4.2.10_8E600_CustomPV/Downgrade/ extracting: ../iPhone3,3_4.2.10_8E600_CustomPV/Downgrade/RestoreDeviceTree
extracting: ../iPhone3,3_4.2.10_8E600_CustomPV/Downgrade/RestoreKernelCache
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Downgrade/RestoreLogo
creating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/ inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/ICE3_01.51.00.Release.bin
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/ICE3_01.51.00.fls
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/ICE3_01.51.00_BOOT_02.08.Release.bbfw
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/ICE3_01.51.00_BOOT_02.08.Release.plist
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/ICE3_BOOT_01.91_G2M1S2.fls
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/Phoenix-1.0.06.Release.bbfw
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/Phoenix-1.0.06.Release.plist
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/Phoenix-1.0.06.zip
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/Phoenix-Latest.txt
creating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/ creating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/all_flash.n92ap.production/ inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/all_flash.n92ap.production/DeviceTree.n92ap.img3
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/all_flash.n92ap.production/LLB.n92ap.RELEASE.img3
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/all_flash.n92ap.production/applelogo-640x960.s5l8930x.img3
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/all_flash.n92ap.production/batterycharging0-640x960.s5l8930x.img3
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/all_flash.n92ap.production/batterycharging1-640x960.s5l8930x.img3
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/all_flash.n92ap.production/batteryfull-640x960.s5l8930x.img3
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/all_flash.n92ap.production/batterylow0-640x960.s5l8930x.img3
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/all_flash.n92ap.production/batterylow1-640x960.s5l8930x.img3
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/all_flash.n92ap.production/glyphcharging-640x960.s5l8930x.img3
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/all_flash.n92ap.production/glyphplugin-640x960.s5l8930x.img3
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/all_flash.n92ap.production/iBoot.n92ap.RELEASE.img3
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/all_flash.n92ap.production/manifest
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/all_flash/all_flash.n92ap.production/recoverymode-640x960.s5l8930x.img3
creating: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/dfu/ extracting: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/dfu/iBEC.n92ap.RELEASE.dfu
extracting: ../iPhone3,3_4.2.10_8E600_CustomPV/Firmware/dfu/iBSS.n92ap.RELEASE.dfu
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/Restore.plist
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/kernelcache.release.k48
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/kernelcache.release.n81
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/kernelcache.release.n90
inflating: ../iPhone3,3_4.2.10_8E600_CustomPV/kernelcache.release.n92
[Log] Running idevicerestore with command: ../bin/macos/idevicerestore -ew "../iPhone3,3_4.2.10_8E600_CustomPV.ipsw" Found device in DFU mode Found ECID 2728127595308 Identified device as n92ap, iPhone3,3 Extracting BuildManifest from IPSW Product Version: 4.2.10 Product Build: 8E600 Major: 8 Device supports Image4: false Variant: Customer Erase Install (IPSW) This restore will erase your device data. checking for local shsh Using cached SHSH Using cached filesystem from '../iPhone3,3_4.2.10_8E600_CustomPV/038-2273-001.dmg' Extracting iBSS.n92ap.RELEASE.dfu... Personalizing IMG3 component iBSS... reconstructed size: 149745 Sending iBSS (149745 bytes)... [==================================================] 100.0% INFO: device serial number is C8QF23JJDDP7 Recovery Mode Environment: iBoot build-version=iBoot-931.72.14 iBoot build-style=RELEASE ramdisk-size=RELEASE Extracting 038-2280-001.dmg... Not personalizing component RestoreRamDisk... Sending RestoreRamDisk (30002196 bytes)... Extracting RestoreDeviceTree... Not personalizing component RestoreDeviceTree... Sending RestoreDeviceTree (58436 bytes)... Extracting RestoreKernelCache... Not personalizing component RestoreKernelCache... Sending RestoreKernelCache (5779716 bytes)... About to restore device... Waiting for device... Device 3e788b16aa0a8b7417ab5b26e455a28d13648ecc is now connected in restore mode... Connecting now... Connected to com.apple.mobile.restored, version 12 Device 3e788b16aa0a8b7417ab5b26e455a28d13648ecc has successfully entered restore mode Hardware Information: BoardID: 6 ChipID: 35120 UniqueChipID: 2728127595308 ProductionMode: true Waiting for NAND (28) Creating partition map (11) Creating filesystem (12) Creating filesystem (12) About to send filesystem... ERROR: Unable to connect to ASR client ERROR: Unable to connect to ASR ERROR: Unable to send filesystem ERROR: Unable to successfully restore device Got status message Status: Fail Log is available: 0XSerial: Identified Serial Port on ARM Device=uart3 at 0x82800000(0xd2935000)AppleS5L8900XSerial: Identified Serial Port on ARM Device=uart6 at 0x82b00000(0xd293d000) BasebandSPIDevice::exitLowPower: Invalid state inactive AppleSerialMultiplexer: adap::start: Frame size is 2048, Rx Buffer count is 16 AppleSerialMultiplexer: mux::start: created new mux (13) for spi-baseband with adapter BasebandSPIDevice
AUD10::start: 0x8310b000, highland-park mIISNub: 0x835a9900, sampleRate = 44100, ol=10, oi=12 AppleSerialMultiplexer: debugparams::init: Parsed flags "" ( 0 ) AppleSerialMultiplexer: !! mux::setPowerStateGated: Skipping power state change
AppleBaseband: inconsistent mux function setup (0 0 0 0 0 0) virtual bool AppleCLCD::start_hardware(IOService*), ditherCfg: 0x80000001 mIsDitherFor8Bits: 1 IOReturn AppleCLCD::set_ditherTable_state(bool), mIsDitherFor8Bits is true, no dynamic dither table. IOSurface: buffer allocation size is zero AppleM2ScalerCSCDriver: Added framebuffer device: AppleCLCD id: c7ce5000IOSDIOController::enumerateSlot(): Searching for SDIO device in slot: 0
IOSDIOController::enumerateSlot(): Found SDIO I/O device. Function count(1), memory(0) AppleRGBOUT: TVOUT device is detected AppleS5L8920XIOPFMI: Found Chip ID 0x7294D7EC on FMI0:CE0 AppleS5L8920XIOPFMI: Found Chip ID 0x7294D7EC on FMI0:CE1 AppleS5L8920XIOPFMI: Found Chip ID 0x7294D7EC on FMI1:CE8 AppleS5L8920XIOPFMI: Found Chip ID 0x7294D7EC on FMI1:CE9 AppleMultitouchN1SPI: successfully started IOSDIOIoCardDevice::parseFn0CISTuple(): Device manufacturer ID 0x2d0, Product ID 0x4329 IOSDIOIoCardDevice::parseFn0CISTuple(): Manufacturer: "" IOSDIOIoCardDevice::parseFn0CISTuple(): Product: "" IOSDIOIoCardDevice::parseFn0CISTuple(): ProductInfo0: "s=C0" IOSDIOIoCardDevice::parseFn0CISTuple(): ProductInfo1: "P=N92 m=2.2 V=m" AppleBCMWLAN::init(): AppleBCMWLAN-76.3 Jul 8 2011 18:43:18 AppleBCMWLAN::init(): Starting with debug level: 4, debug flags: 00000000 AppleBCMWLAN::init(): AppleBCMWLAN-76.3 Jul 8 2011 18:43:18 AppleBCMWLAN::init(): Starting with debug level: 4, debug flags: 00000000 AppleD1815PMUPowerSource: AppleUSBCableDetect 1 AppleD1815PMUPowerSource: AppleUSBCableType USBHost AppleEmbeddedUSBArbitrator::handleUSBCableTypeChange : Connected to a USB host, entering device mode AppleEmbeddedUSBNub::withProvider : allocated new nub 0x83691900 AppleEmbeddedUSBNub::initWithProvider : finished nub init AppleEmbeddedUSBArbitrator::_publishNubs : nub published AppleSynopsysOTGDevice::init : Logging Buffer Length = 4K AppleSynopsysOTGDevice::start : object is 0x83a7c000, registers at 0xd367c000, 0x86100000 physical AppleSynopsysOTGDevice::findMaxEndpoints: in EPs: 7, out EPs: 7, max_endpoint: 8, num_endpoints: 14 AppleSynopsysOTGDevice::handleUSBCableConnect cable connected, but don't have device configuration yet AppleSynopsysOTGDevice::start : start finished AUD10::start: 0x8310b000, highland-park mIICNub: 0x82ebef00, mIISNub: 0x835a9900, mSerialNub: 0x8358ba00, sampleRate = 44100, ol=10, oi=12 AppleMultitouchN1SPI: detected HBPP. driver will be kept alive AppleNANDLegacyFTL started with IOFlashStoragePartition provider AppleNANDLegacyFTL located at physical nand block offset 16 metadata-whitening was found and it's set to 1 default-ftl-version was found and it's set to 1 diag-bits is supplied by AppleNANDFTL [FTL:MSG] Apple NAND Driver (AND) RW [FTL:MSG] FIL_Init [OK] [FTL:MSG] BUF_Init [OK] [FTL:MSG] FPart Init [OK] display-scale = 2 display-rotation = 0 found suitable IOMobileFramebuffer: AppleCLCD display: 640 x 960 found PTP interface AppleSynopsysOTGDevice - Configuration: PTP AppleSynopsysOTGDevice Interface: PTP AppleSynopsysOTGDevice - Configuration: iPod USB Interface AppleSynopsysOTGDevice Interface: USBAudioControl AppleSynopsysOTGDevice Interface: USBAudioStreaming AppleSynopsysOTGDevice Interface: IapOverUsbHid AppleSynopsysOTGDevice - Configuration: PTP + Apple Mobile Device AppleSynopsysOTGDevice Interface: PTP AppleSynopsysOTGDevice Interface: AppleUSBMux AppleSynopsysOTGDevice - Configuration: PTP + Apple Mobile Device + Apple USB Ethernet AppleSynopsysOTGDevice Interface: PTP AppleSynopsysOTGDevice Interface: AppleUSBMux AppleSynopsysOTGDevice Interface: AppleUSBEthernet AppleSynopsysOTGDevice::gated_registerFunction Register function USBAudioControl AppleSynopsysOTGDevice::gated_registerFunction Register function USBAudioStreaming IOAccessoryPortUSB::start AppleSynopsysOTGDevice::gated_registerFunction Register function IapOverUsbHid virtual bool AppleUSBDeviceMux::start(IOService) build: Jul 8 2011 18:45:58 init_waste AppleSynopsysOTGDevice::gated_registerFunction Register function AppleUSBMux AppleSynopsysOTGDevice::gated_registerFunction Register function AppleUSBEthernet AppleUSBEthernetDevice::start: Host MAC address = 26:ab:81:ac:e9:49 AppleSynopsysOTGDevice::gated_registerFunction Register function PTP AppleSynopsysOTGDevice::gated_registerFunction all functions registered- we are ready to start usb stack AppleS5L8930XUSBPhy::powerUp : with_hsic: 0 AppleEmbeddedUSBArbitrator::enableDeviceClock : enable: 1, index: 0 AppleS5L8930XUSBPhy::enableDeviceMode : enable: 1 IOReturn AppleUSBDeviceMux::setPropertiesGated(OSObject) setting debug level to 7 AppleSynopsysOTGDevice::handleUSBReset recv(10, 4) failed: connection closed unable to read message size: -1 could not receive message close(caller = 0x5d2f): remote port = 49152 close(caller = 0x5d2f): remote port = 49153 unrecognized request 'GetValue' client protocol version 12 unable to open /usr/local/share/restore//options.n92.plist: No such file or directory UUID A852CC5E-F320-BC08-B444-9B410238B3DC Restore options: UpdateBaseband => <CFBoolean 0x20a460 [0x2099fc]>{value = false} UUID => <CFString 0xc1e2e0 [0x2099fc]>{contents = "A852CC5E-F320-BC08-B444-9B410238B3DC"} MinimumSystemPartition => <CFNumber 0xc1dfc0 [0x2099fc]>{value = +1054, type = kCFNumberSInt64Type} SystemPartitionSize => <CFNumber 0xc1e280 [0x2099fc]>{value = +1054, type = kCFNumberSInt64Type} FlashNOR => <CFBoolean 0x20a460 [0x2099fc]>{value = false} CreateFilesystemPartitions => <CFBoolean 0x20a458 [0x2099fc]>{value = true} entering partition_nand_device device supports boot-from-NAND AppleSynopsysOTGDevice::stallBadSetupRequest request: 80 06 0f00 0000 0005 AppleUSBDeviceMux::handleConnectResult new session 0x8518ad00 established 62078<-lo0->49152 62078<-usb->33799 void AppleUSBDeviceMux::handleMuxTCPInput(mbuf*) received reset, closing 0x8518ad00 AppleUSBDeviceMux::handleConnectResult new session 0x84f25000 established 62078<-lo0->49153 62078<-usb->34055 AppleUSBDeviceMux::handleConnectResult new session 0x8518ad00 established 62078<-lo0->49154 62078<-usb->34311 void AppleUSBDeviceMux::handleMuxTCPInput(mbuf*) received reset, closing 0x84f25000 AppleUSBDeviceMux::handleConnectResult new session 0x8518ac80 established 62078<-lo0->49155 62078<-usb->34567 irst Failing CE: 0
AppleS5L8920XIOPFMI: ERROR: First Failing CE: 0
AppleS5L8920XIOPFMI: ERROR: First Failing CE: 0
AppleS5L8920XIOPFMI: ERROR: First Failing CE: 0
AppleS5L8920XIOPFMI: ERROR: First Failing CE: 0
AppleS5L8920XIOPFMI: ERROR: First Failing CE: 0
[FTL:MSG] VSVFL Register [OK] [FTL:MSG] VFL Init [OK] [WMR:INF] Formatting with metadata whitening [FTL:MSG] Calling VFL_FactoryReformat() irst Failing CE: 0
AppleS5L8920XIOPFMI: ERROR: First Failing CE: 0
AppleS5L8920XIOPFMI: ERROR: First Failing CE: 0
AppleS5L8920XIOPFMI: ERROR: First Failing CE: 0
AppleS5L8920XIOPFMI: ERROR: First Failing CE: 0
AppleS5L8920XIOPFMI: ERROR: First Failing CE: 0
[VFL:INF] BBT found for CS 0 [VFL:INF] BBT found for CS 1 [VFL:INF] BBT found for CS 2 [VFL:INF] BBT found for CS 3 [FTL:MSG] VFL_Format [OK] [FTL:MSG] YAFTL Register [OK] [FTL:MSG] FTL Init [OK] [FTL:MSG] FTL Format [OK] [FTL:MSG] Write Signature OK 0x43313132 [FTL:MSG] Read back Signature OK [FTL:MSG] VFL_Open [OK] yaFTL::YAFTL_Open(l:2988): CXT is not valid . Performing full NAND R/O restore ...
[FTL:MSG] FTL_Open [OK] [NAND] _borrowSpareBlocks:325 found 0 previously allocated [NAND] _stressBlock:842 CE 3 Block 4149 PASSED [NAND] _stressBlock:842 CE 3 Block 4143 PASSED [NAND] _stressBlock:842 CE 3 Block 4141 PASSED unrecognized request 'GetValue' AppleUSBDeviceMux::handleConnectResult new session 0x84f25000 established 62078<-lo0->49156 62078<-usb->34823 [NAND] _stressBlock:842 CE 3 Block 4139 PASSED [NAND] _stressBlock:842 CE 3 Block 4137 PASSED [NAND] _stressBlock:842 CE 3 Block 4135 PASSED AppleS5L8930XUSBArbitrator::handleUSBCableTypeChange : no change in cable-type recv(13, 4) failed: connection closed unable to read message size: -1 could not receive message close(caller = 0x5d2f): remote port = 49154 unable to check is-bfn-partitioned property nand device is already partitioned entering wait_for_storage_device entering format_effaceable_storage void AppleUSBDeviceMux::handleMuxTCPInput(__mbuf*) received reset, closing 0x8518ad00 AppleImage3NORAccess::start imageVersion: 3 effaceable storage formatted successfully entering ramrod_probe_media find_filesystem_partitions: storage=/dev/disk0 system= data= update= entering check_for_restore_log partition path has not been populated (partition may not exist) entering clean_NAND NAND format complete entering ramrod_probe_media find_filesystem_partitions: storage=/dev/disk0 system= data= update= entering format_storage_for_LwVM use-lwvm property not found entering create_filesystem_partitions unable to open : No such file or directory creating 2 partitions creating encrypted data partition entering ramrod_probe_media device partitioning scheme is GPT find_filesystem_partitions: storage=/dev/disk0 system=/dev/disk0s1 data=/dev/disk0s2s1 update= wipe entire partition: 1 (old = 0 new = 1054) block size for /dev/disk0s1: 8192 /sbin/newfs_hfs -s -v System -b 8192 -n a=8192,c=8192,e=8192 /dev/disk0s1 executing /sbin/newfs_hfs -s -v System -b 8192 -n a=8192,c=8192,e=8192 /dev/disk0s1 Initialized /dev/rdisk0s1 as a 1 GB HFS Plus volume block size for /dev/disk0s2s1: 8192 /sbin/newfs_hfs -s -v Data -J -P -b 8192 -n a=8192,c=8192,e=8192 /dev/disk0s2s1 executing /sbin/newfs_hfs -s -v Data -J -P -b 8192 -n a=8192,c=8192,e=8192 /dev/disk0s2s1 Initialized /dev/rdisk0s2s1 as a 14 GB HFS Plus volume with a 8192k journal entering restore_images executing /usr/sbin/asr -source asr://localhost:12345 -target /dev/disk0s1 -erase -noprompt --chunkchecksum --puppetstrings ASR: execv: /usr/sbin/asr: Permission denied
ERROR: Unable to restore device [Log] Do not disconnect your device, not done yet