https://pastein.ru/t/QrW
Загрузка данных
surrealra1n - v2.0 beta 27 re-release 4
Tether Downgrader for some checkm8 64bit devices, iOS 7.0 - 16.6.1
This build is an early beta. Use at your own risk, and expect bugs.
Uses latest SHSH blobs (for tethered downgrades)
iSuns9 fork of asr64_patcher is used for patching ASR
Huge thanks to bodyc1m for iPod touch 6 support, including the Arch Linux/Fedora port they did.
Huge thanks to Mineek for seprmvr64.
Device: iPhone X (Global, d22ap) - iPhone10,3
ECID: 8568511710085166
Device is in Normal mode.
seprmvr64 restores to iOS 7 and 9 are not removed.
The separate seprmvr64 restore options was removed because the functionality was migrated to this menu
Options:
1. Select Target IPSW
2. Select Base IPSW
3. Start Restore
4. Back
Please input an option (1-4): 3
You need to put your device into DFU mode.
Would you like instructions on how to do this? (y/n): y
Put your device into recovery mode, then continue
Press enter to continue once Device is in Recovery
Instructions will begin in:
3
2
1
Hold volume down + power buttons.
4
3
2
1
Release the power button now, but keep holding volume down button.
8
7
6
5
4
3
2
1
Checking for DFU devices
The device has entered DFU successfully!
Checking if this device is in pwned DFU already
Device is not pwned yet, attempting to pwn
usb_timeout: 5
usb_abort_timeout_min: 0
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8015
Found the USB handle.
Stage: RESET
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8015
Found the USB handle.
Stage: SETUP
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8015
Found the USB handle.
Stage: SPRAY
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8015
Found the USB handle.
Stage: PATCH
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8015
Found the USB handle.
Now you can boot untrusted images.
usb_timeout: 5
usb_abort_timeout_min: 0
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.
[==================================================] 100.0%
usb_timeout: 5
usb_abort_timeout_min: 0
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.
Checking if this device has pwned successfully
Device is pwned!
Fetching shsh blobs for iOS 16.7.16
tsschecker version: 0.413-dd7e883adc94e2289e492b196bfbf67c7e18a544
libfragmentzip version: 0.Debug-Build: Nov 26 2022 09:41:43-RELEASE
[TSSC] manually specified ECID to use, parsed "0x001e710418bbc02e" to dec:8568511710085166 hex:1e710418bbc02e
[JSON] counting elements
[JSON] parsing elements
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
also requesting APTicket for installType=Update
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... Saved shsh blobs!
Firmware version 16.7.16 20H392 IS signed!
iOS 16.7.16 for device iPhone10,3 IS being signed!
Restore files already exist
Would you like to make new ones? (y/n): y
Archive: /home/raebae/ipsw/iPhone10,3_14.0b4_18A5342e.ipsw
inflating: tmp1/038-44103-116.dmg
inflating: tmp1/038-44206-117.dmg
extracting: tmp1/038-44249-077.dmg
inflating: tmp1/BuildManifest.plist
creating: tmp1/Firmware/
inflating: tmp1/Firmware/038-44103-116.dmg.trustcache
inflating: tmp1/Firmware/038-44206-117.dmg.trustcache
inflating: tmp1/Firmware/038-44249-077.dmg.mtree
inflating: tmp1/Firmware/038-44249-077.dmg.root_hash
inflating: tmp1/Firmware/038-44249-077.dmg.trustcache
creating: tmp1/Firmware/AOP/
inflating: tmp1/Firmware/AOP/aopfw-iphone10baop.im4p
inflating: tmp1/Firmware/D221_CallanFirmware.im4p
inflating: tmp1/Firmware/D221_Multitouch.im4p
inflating: tmp1/Firmware/D22_CallanFirmware.im4p
inflating: tmp1/Firmware/D22_Multitouch.im4p
inflating: tmp1/Firmware/ICE17-3.50.05.Release.bbfw
inflating: tmp1/Firmware/ICE17-3.50.05.Release.plist
creating: tmp1/Firmware/Maggie/
inflating: tmp1/Firmware/Maggie/AppleMaggieFirmwareImage.im4p
inflating: tmp1/Firmware/Mav17-6.03.01.Release.bbfw
inflating: tmp1/Firmware/Mav17-6.03.01.Release.plist
creating: tmp1/Firmware/SE/
inflating: tmp1/Firmware/SE/Stockholm4.RELEASE.sefw
inflating: tmp1/Firmware/SE/Stockholm4.RELEASE.sefw.plist
creating: tmp1/Firmware/Savage/
inflating: tmp1/Firmware/Savage/Savage.B0-Dev.fw
inflating: tmp1/Firmware/Savage/Savage.B0-Dev.fw.plist
inflating: tmp1/Firmware/Savage/Savage.B0-Dev.vt.fw
inflating: tmp1/Firmware/Savage/Savage.B0-Dev.vt.fw.plist
inflating: tmp1/Firmware/Savage/Savage.B0-Prod.fw
inflating: tmp1/Firmware/Savage/Savage.B0-Prod.fw.plist
inflating: tmp1/Firmware/Savage/Savage.B0-Prod.vt.fw
inflating: tmp1/Firmware/Savage/Savage.B0-Prod.vt.fw.plist
inflating: tmp1/Firmware/Savage/Savage.B2-Dev.fw
inflating: tmp1/Firmware/Savage/Savage.B2-Dev.fw.plist
inflating: tmp1/Firmware/Savage/Savage.B2-Dev.vt.fw
inflating: tmp1/Firmware/Savage/Savage.B2-Dev.vt.fw.plist
inflating: tmp1/Firmware/Savage/Savage.B2-Prod.fw
inflating: tmp1/Firmware/Savage/Savage.B2-Prod.fw.plist
inflating: tmp1/Firmware/Savage/Savage.B2-Prod.vt.fw
inflating: tmp1/Firmware/Savage/Savage.B2-Prod.vt.fw.plist
inflating: tmp1/Firmware/Savage/Savage.BA-Dev.fw
inflating: tmp1/Firmware/Savage/Savage.BA-Dev.fw.plist
inflating: tmp1/Firmware/Savage/Savage.BA-Prod.fw
inflating: tmp1/Firmware/Savage/Savage.BA-Prod.fw.plist
creating: tmp1/Firmware/all_flash/
inflating: tmp1/Firmware/all_flash/DeviceTree.d221ap.im4p
inflating: tmp1/Firmware/all_flash/DeviceTree.d22ap.im4p
inflating: tmp1/Firmware/all_flash/LLB.d22.RELEASE.im4p
inflating: tmp1/Firmware/all_flash/LLB.d22.RELEASE.im4p.plist
inflating: tmp1/Firmware/all_flash/applelogo@3x~iphone.im4p
inflating: tmp1/Firmware/all_flash/batterycharging0@3x~iphone.im4p
inflating: tmp1/Firmware/all_flash/batterycharging1@3x~iphone.im4p
inflating: tmp1/Firmware/all_flash/batteryfull@3x~iphone.im4p
inflating: tmp1/Firmware/all_flash/batterylow0@3x~iphone.im4p
inflating: tmp1/Firmware/all_flash/batterylow1@3x~iphone.im4p
inflating: tmp1/Firmware/all_flash/glyphplugin@2436~iphone-lightning.im4p
inflating: tmp1/Firmware/all_flash/iBoot.d22.RELEASE.im4p
inflating: tmp1/Firmware/all_flash/iBoot.d22.RELEASE.im4p.plist
inflating: tmp1/Firmware/all_flash/liquiddetect@2436~iphone-lightning.im4p
inflating: tmp1/Firmware/all_flash/recoverymode@2436~iphone-lightning.im4p
inflating: tmp1/Firmware/all_flash/sep-firmware.d22.RELEASE.im4p
inflating: tmp1/Firmware/all_flash/sep-firmware.d22.RELEASE.im4p.plist
inflating: tmp1/Firmware/all_flash/sep-firmware.d221.RELEASE.im4p
inflating: tmp1/Firmware/all_flash/sep-firmware.d221.RELEASE.im4p.plist
creating: tmp1/Firmware/dfu/
inflating: tmp1/Firmware/dfu/iBEC.d22.RELEASE.im4p
inflating: tmp1/Firmware/dfu/iBEC.d22.RELEASE.im4p.plist
inflating: tmp1/Firmware/dfu/iBSS.d22.RELEASE.im4p
inflating: tmp1/Firmware/dfu/iBSS.d22.RELEASE.im4p.plist
creating: tmp1/Firmware/isp_bni/
inflating: tmp1/Firmware/isp_bni/adc-nike-d22.im4p
creating: tmp1/Firmware/usr/
creating: tmp1/Firmware/usr/local/
inflating: tmp1/Restore.plist
inflating: tmp1/kernelcache.release.iphone10b
Archive: /home/raebae/ipsw/iPhone10,3_16.7.16_20H392.ipsw
inflating: tmp2/087-86593-047.dmg
inflating: tmp2/087-86622-047.dmg
extracting: tmp2/087-86698-044.dmg
inflating: tmp2/087-86715-047.dmg
inflating: tmp2/087-86719-047.dmg
inflating: tmp2/BuildManifest.plist
creating: tmp2/Firmware/
inflating: tmp2/Firmware/087-86593-047.dmg.root_hash
inflating: tmp2/Firmware/087-86593-047.dmg.trustcache
inflating: tmp2/Firmware/087-86622-047.dmg.trustcache
inflating: tmp2/Firmware/087-86698-044.dmg.mtree
inflating: tmp2/Firmware/087-86698-044.dmg.root_hash
inflating: tmp2/Firmware/087-86698-044.dmg.trustcache
inflating: tmp2/Firmware/087-86715-047.dmg.root_hash
inflating: tmp2/Firmware/087-86715-047.dmg.trustcache
inflating: tmp2/Firmware/087-86719-047.dmg.trustcache
creating: tmp2/Firmware/AOP/
inflating: tmp2/Firmware/AOP/aopfw-iphone10baop.im4p
inflating: tmp2/Firmware/D221_CallanFirmware.im4p
inflating: tmp2/Firmware/D221_Multitouch.im4p
inflating: tmp2/Firmware/D22_CallanFirmware.im4p
inflating: tmp2/Firmware/D22_Multitouch.im4p
inflating: tmp2/Firmware/ICE17-6.01.02.Release.bbfw
inflating: tmp2/Firmware/ICE17-6.01.02.Release.plist
inflating: tmp2/Firmware/Mav17-9.00.02.Release.bbfw
inflating: tmp2/Firmware/Mav17-9.00.02.Release.plist
creating: tmp2/Firmware/SE/
inflating: tmp2/Firmware/SE/Stockholm4.RELEASE.sefw
inflating: tmp2/Firmware/SE/Stockholm4.RELEASE.sefw.plist
creating: tmp2/Firmware/Savage/
inflating: tmp2/Firmware/Savage/Savage.B0-Dev.fw
inflating: tmp2/Firmware/Savage/Savage.B0-Dev.fw.plist
inflating: tmp2/Firmware/Savage/Savage.B0-Dev.vt.fw
inflating: tmp2/Firmware/Savage/Savage.B0-Dev.vt.fw.plist
inflating: tmp2/Firmware/Savage/Savage.B0-Prod.fw
inflating: tmp2/Firmware/Savage/Savage.B0-Prod.fw.plist
inflating: tmp2/Firmware/Savage/Savage.B0-Prod.vt.fw
inflating: tmp2/Firmware/Savage/Savage.B0-Prod.vt.fw.plist
inflating: tmp2/Firmware/Savage/Savage.B2-Dev.fw
inflating: tmp2/Firmware/Savage/Savage.B2-Dev.fw.plist
inflating: tmp2/Firmware/Savage/Savage.B2-Dev.vt.fw
inflating: tmp2/Firmware/Savage/Savage.B2-Dev.vt.fw.plist
inflating: tmp2/Firmware/Savage/Savage.B2-Prod.fw
inflating: tmp2/Firmware/Savage/Savage.B2-Prod.fw.plist
inflating: tmp2/Firmware/Savage/Savage.B2-Prod.vt.fw
inflating: tmp2/Firmware/Savage/Savage.B2-Prod.vt.fw.plist
inflating: tmp2/Firmware/Savage/Savage.BA-Dev.fw
inflating: tmp2/Firmware/Savage/Savage.BA-Dev.fw.plist
inflating: tmp2/Firmware/Savage/Savage.BA-Prod.fw
inflating: tmp2/Firmware/Savage/Savage.BA-Prod.fw.plist
inflating: tmp2/Firmware/Savage/Savage.BE-Dev.fw
inflating: tmp2/Firmware/Savage/Savage.BE-Dev.fw.plist
inflating: tmp2/Firmware/Savage/Savage.BE-Prod.fw
inflating: tmp2/Firmware/Savage/Savage.BE-Prod.fw.plist
inflating: tmp2/Firmware/Savage/Savage.BF-Dev.fw
inflating: tmp2/Firmware/Savage/Savage.BF-Dev.fw.plist
inflating: tmp2/Firmware/Savage/Savage.BF-Prod.fw
inflating: tmp2/Firmware/Savage/Savage.BF-Prod.fw.plist
creating: tmp2/Firmware/all_flash/
inflating: tmp2/Firmware/all_flash/DeviceTree.d221ap.im4p
inflating: tmp2/Firmware/all_flash/DeviceTree.d22ap.im4p
inflating: tmp2/Firmware/all_flash/LLB.d22.RELEASE.im4p
inflating: tmp2/Firmware/all_flash/LLB.d22.RELEASE.im4p.plist
inflating: tmp2/Firmware/all_flash/applelogo@3x~iphone.im4p
inflating: tmp2/Firmware/all_flash/batterycharging0@3x~iphone.im4p
inflating: tmp2/Firmware/all_flash/batterycharging1@3x~iphone.im4p
inflating: tmp2/Firmware/all_flash/batteryfull@3x~iphone.im4p
inflating: tmp2/Firmware/all_flash/batterylow0@3x~iphone.im4p
inflating: tmp2/Firmware/all_flash/batterylow1@3x~iphone.im4p
inflating: tmp2/Firmware/all_flash/glyphplugin@2436~iphone-lightning.im4p
inflating: tmp2/Firmware/all_flash/iBoot.d22.RELEASE.im4p
inflating: tmp2/Firmware/all_flash/iBoot.d22.RELEASE.im4p.plist
inflating: tmp2/Firmware/all_flash/liquiddetect@2436~iphone-lightning.im4p
inflating: tmp2/Firmware/all_flash/recoverymode@2436~iphone-lightning.im4p
inflating: tmp2/Firmware/all_flash/sep-firmware.d22.RELEASE.im4p
inflating: tmp2/Firmware/all_flash/sep-firmware.d22.RELEASE.im4p.plist
inflating: tmp2/Firmware/all_flash/sep-firmware.d221.RELEASE.im4p
inflating: tmp2/Firmware/all_flash/sep-firmware.d221.RELEASE.im4p.plist
creating: tmp2/Firmware/ave/
inflating: tmp2/Firmware/ave/AppleAVE2FW_H10.im4p
creating: tmp2/Firmware/dfu/
inflating: tmp2/Firmware/dfu/iBEC.d22.RELEASE.im4p
inflating: tmp2/Firmware/dfu/iBEC.d22.RELEASE.im4p.plist
inflating: tmp2/Firmware/dfu/iBSS.d22.RELEASE.im4p
inflating: tmp2/Firmware/dfu/iBSS.d22.RELEASE.im4p.plist
creating: tmp2/Firmware/isp_bni/
inflating: tmp2/Firmware/isp_bni/adc-nike-d22.im4p
inflating: tmp2/Restore.plist
inflating: tmp2/RestoreVersion.plist
inflating: tmp2/SystemVersion.plist
inflating: tmp2/kernelcache.release.iphone10b
krnl
main: Starting...
Kernel: Adding tbypassFirmwareValidate patch...
bypassFirmwareValidate: Entering ...
bypassFirmwareValidate: Found "trust evaluation succeeded" str loc at 0x402039
bypassFirmwareValidate: Found "wrapped Image4 payload" xref at 0x118d4e8
bypassFirmwareValidate: Patching "wrapped Image4 payload" at 0x118d4c8
main: Writing out patched file to work/kernelboot.patch...
main: Quitting...
none
adding: 038-44103-116.dmg (stored 0%)
adding: 038-44206-117.dmg (stored 0%)
adding: 038-44249-077.dmg (stored 0%)
adding: BuildManifest.plist (stored 0%)
adding: Firmware/ (stored 0%)
adding: Firmware/isp_bni/ (stored 0%)
adding: Firmware/isp_bni/adc-nike-d22.im4p (stored 0%)
adding: Firmware/dfu/ (stored 0%)
adding: Firmware/dfu/iBEC.d22.RELEASE.im4p.plist (stored 0%)
adding: Firmware/dfu/iBSS.d22.RELEASE.im4p.plist (stored 0%)
adding: Firmware/dfu/iBSS.d22.RELEASE.im4p (stored 0%)
adding: Firmware/dfu/iBEC.d22.RELEASE.im4p (stored 0%)
adding: Firmware/Savage/ (stored 0%)
adding: Firmware/Savage/Savage.B2-Prod.fw (stored 0%)
adding: Firmware/Savage/Savage.BA-Dev.fw.plist (stored 0%)
adding: Firmware/Savage/Savage.B0-Prod.vt.fw (stored 0%)
adding: Firmware/Savage/Savage.BA-Prod.fw.plist (stored 0%)
adding: Firmware/Savage/Savage.B2-Dev.fw.plist (stored 0%)
adding: Firmware/Savage/Savage.B0-Dev.fw (stored 0%)
adding: Firmware/Savage/Savage.B2-Dev.vt.fw.plist (stored 0%)
adding: Firmware/Savage/Savage.B2-Prod.vt.fw (stored 0%)
adding: Firmware/Savage/Savage.B0-Prod.vt.fw.plist (stored 0%)
adding: Firmware/Savage/Savage.BA-Prod.fw (stored 0%)
adding: Firmware/Savage/Savage.B2-Dev.fw (stored 0%)
adding: Firmware/Savage/Savage.B2-Dev.vt.fw (stored 0%)
adding: Firmware/Savage/Savage.B0-Dev.vt.fw.plist (stored 0%)
adding: Firmware/Savage/Savage.BA-Dev.fw (stored 0%)
adding: Firmware/Savage/Savage.B0-Dev.fw.plist (stored 0%)
adding: Firmware/Savage/Savage.B0-Prod.fw (stored 0%)
adding: Firmware/Savage/Savage.B2-Prod.vt.fw.plist (stored 0%)
adding: Firmware/Savage/Savage.B0-Dev.vt.fw (stored 0%)
adding: Firmware/Savage/Savage.B2-Prod.fw.plist (stored 0%)
adding: Firmware/Savage/Savage.B0-Prod.fw.plist (stored 0%)
adding: Firmware/038-44249-077.dmg.trustcache (stored 0%)
adding: Firmware/Mav17-6.03.01.Release.bbfw (stored 0%)
adding: Firmware/ICE17-3.50.05.Release.bbfw (stored 0%)
adding: Firmware/038-44103-116.dmg.trustcache (stored 0%)
adding: Firmware/D22_CallanFirmware.im4p (stored 0%)
adding: Firmware/ICE17-3.50.05.Release.plist (stored 0%)
adding: Firmware/038-44249-077.dmg.root_hash (stored 0%)
adding: Firmware/D22_Multitouch.im4p (stored 0%)
adding: Firmware/Mav17-6.03.01.Release.plist (stored 0%)
adding: Firmware/all_flash/ (stored 0%)
adding: Firmware/all_flash/batterylow0@3x~iphone.im4p (stored 0%)
adding: Firmware/all_flash/batteryfull@3x~iphone.im4p (stored 0%)
adding: Firmware/all_flash/applelogo@3x~iphone.im4p (stored 0%)
adding: Firmware/all_flash/sep-firmware.d221.RELEASE.im4p (stored 0%)
adding: Firmware/all_flash/LLB.d22.RELEASE.im4p.plist (stored 0%)
adding: Firmware/all_flash/LLB.d22.RELEASE.im4p (stored 0%)
adding: Firmware/all_flash/DeviceTree.d221ap.im4p (stored 0%)
adding: Firmware/all_flash/batterylow1@3x~iphone.im4p (stored 0%)
adding: Firmware/all_flash/liquiddetect@2436~iphone-lightning.im4p (stored 0%)
adding: Firmware/all_flash/batterycharging1@3x~iphone.im4p (stored 0%)
adding: Firmware/all_flash/sep-firmware.d22.RELEASE.im4p.plist (stored 0%)
adding: Firmware/all_flash/sep-firmware.d22.RELEASE.im4p (stored 0%)
adding: Firmware/all_flash/glyphplugin@2436~iphone-lightning.im4p (stored 0%)
adding: Firmware/all_flash/batterycharging0@3x~iphone.im4p (stored 0%)
adding: Firmware/all_flash/iBoot.d22.RELEASE.im4p (stored 0%)
adding: Firmware/all_flash/iBoot.d22.RELEASE.im4p.plist (stored 0%)
adding: Firmware/all_flash/DeviceTree.d22ap.im4p (stored 0%)
adding: Firmware/all_flash/sep-firmware.d221.RELEASE.im4p.plist (stored 0%)
adding: Firmware/all_flash/recoverymode@2436~iphone-lightning.im4p (stored 0%)
adding: Firmware/038-44249-077.dmg.mtree (stored 0%)
adding: Firmware/SE/ (stored 0%)
adding: Firmware/SE/Stockholm4.RELEASE.sefw.plist (stored 0%)
adding: Firmware/SE/Stockholm4.RELEASE.sefw (stored 0%)
adding: Firmware/Maggie/ (stored 0%)
adding: Firmware/Maggie/AppleMaggieFirmwareImage.im4p (stored 0%)
adding: Firmware/038-44206-117.dmg.trustcache (stored 0%)
adding: Firmware/D221_Multitouch.im4p (stored 0%)
adding: Firmware/D221_CallanFirmware.im4p (stored 0%)
adding: Firmware/usr/ (stored 0%)
adding: Firmware/usr/local/ (stored 0%)
adding: Firmware/AOP/ (stored 0%)
adding: Firmware/AOP/aopfw-iphone10baop.im4p (stored 0%)
adding: kernelcache.release.iphone10b (stored 0%)
adding: Restore.plist (stored 0%)
renamed 'custom.ipsw' -> 'restorefiles/iPhone10,3/14.0/custom.ipsw'
'tmp1/kernelcache.release.iphone10b' -> 'work/kernel.im4p'
krnl
Starting KPlooshFinder
patch_trustcache_old: Found trustcache
patch_amfi_sha1: Found AMFI hashtype check
patch_vnode_lookup: Found vnode_lookup
patch_shellcode_area: Found shellcode area
patch_ret0_gadget: Found ret0 gadget
patch_vnode_getpath: Found vnode_getpath
patch_vnode_getaddr: Found vnode_getattr
patch_kernel: Disabled snapshot temporarily
Patching completed successfully.
0x39a64d 0x63 0x78
0xb53894 0xffffffff 0x20
0xb53895 0xffffff83 0x20
0xb53896 0x0 0xffffff80
0xb53897 0xffffffd1 0xffffffd2
0xb53898 0xfffffffd 0xffffffc0
0xb53899 0x7b 0x3
0xb5389a 0x1 0x5f
0xb5389b 0xffffffa9 0xffffffd6
0x1131781 0x8 0x0
0x1131783 0x71 0x6b
krnl
rdsk
getting get_asr_patch()
[*] Image failed signature verification string at 0x4077d
[*] Image passed signature verification string at 0x40759
[*] xref to Image failed signature verification string at 0x24c2c
[*] Assembling arm64 branch
[*] Writing out patched file to work/asr_patched
getting get_signature_check_patch()
[*] firmware authenticated string at 0x16334
[*] firmware authenticated xref at 0x9320
[*] next b at 0x9334
[*] target offset: 0x90f4
[*] next b.cond at 0x9110
[*] patching b.cond to nop
[*] next mov at 0x9114
[*] patching return value to 0
[*] Writing out patched file to work/libimg4.patch
restored patcher by @mineekdev
getting get_faceid_patch()
[+] Patching decompressReferenceFrames patch point at 0x65f8c
[+] Patched decompressReferenceFrames
Patched file to work/restored_patch
none
rdsk
getting get_asr_patch()
[*] Image failed signature verification string at 0x4077d
[*] Image passed signature verification string at 0x40759
[*] xref to Image failed signature verification string at 0x24c2c
[*] Assembling arm64 branch
[*] Writing out patched file to work/asr_patched
getting get_signature_check_patch()
[*] firmware authenticated string at 0x16334
[*] firmware authenticated xref at 0x9320
[*] next b at 0x9334
[*] target offset: 0x90f4
[*] next b.cond at 0x9110
[*] patching b.cond to nop
[*] next mov at 0x9114
[*] patching return value to 0
[*] Writing out patched file to work/libimg4.patch
restored patcher by @mineekdev
getting get_faceid_patch()
[+] Patching decompressReferenceFrames patch point at 0x6714c
[+] Patched decompressReferenceFrames
Patched file to work/restored_patch
none
img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f-RELEASE
Compiled with plist: YES
Saved IM4M to iPhone10,3-im4m
Archive: /home/raebae/ipsw/iPhone10,3_14.0b4_18A5342e.ipsw
inflating: work/iBSS.d22.RELEASE.im4p
Archive: /home/raebae/ipsw/iPhone10,3_14.0b4_18A5342e.ipsw
inflating: work/iBEC.d22.RELEASE.im4p
Version: 3fc8c093f4660f6c6e07c0c9214618733da01ffc - 36
libfragmentzip version: 0.60-120447d0f410dffb49948fa155467fc5d91ca3c8
init pzb: https://updates.cdn-apple.com/2020WinterFCS/fullrestores/001-87865/458334F5-D8E1-498A-A9FD-08BBD20FE007/iPhone10,3,iPhone10,6_14.3_18C66_Restore.ipsw
init done
getting: Firmware/dfu/iBSS.d22.RELEASE.im4p
0% [ 100% [============================================================================================== 1% [> 3% [==> 4% [===> 6% [=====> 7% [======> 9% [========> 10% [=========> 12% [===========> 13% [============> 14% [=============> 14% [=============> 16% [===============> 17% [================> 19% [==================> 20% [===================> 22% [=====================> 23% [======================> 25% [========================> 26% [=========================> 28% [===========================> 29% [============================> 31% [==============================> 32% [===============================> 34% [=================================> 35% [==================================> 37% [====================================> 38% [=====================================> 40% [=======================================> 41% [========================================> 43% [==========================================> 44% [===========================================> 46% [=============================================> 47% [==============================================> 48% [===============================================> 49% [================================================> 51% [==================================================> 52% [===================================================> 54% [=====================================================> 55% [======================================================> 57% [========================================================> 58% [=========================================================> 60% [===========================================================> 61% [============================================================> 62% [=============================================================> 64% [===============================================================> 65% [================================================================> 67% [==================================================================> 68% [===================================================================> 70% [=====================================================================> 71% [======================================================================> 73% [========================================================================> 74% [=========================================================================> 76% [===========================================================================> 77% [============================================================================> 79% [==============================================================================> 80% [===============================================================================> 82% [=================================================================================> 83% [==================================================================================> 85% [====================================================================================> 86% [=====================================================================================> 88% [=======================================================================================> 89% [========================================================================================> 91% [==========================================================================================> 92% [===========================================================================================> 94% [=============================================================================================> 95% [============================================================================================== 96% [============================================================================================== 97% [============================================================================================== 99% [==============================================================================================100% [===================================================================================================>]
download succeeded
Version: 3fc8c093f4660f6c6e07c0c9214618733da01ffc - 36
libfragmentzip version: 0.60-120447d0f410dffb49948fa155467fc5d91ca3c8
init pzb: https://updates.cdn-apple.com/2020WinterFCS/fullrestores/001-87865/458334F5-D8E1-498A-A9FD-08BBD20FE007/iPhone10,3,iPhone10,6_14.3_18C66_Restore.ipsw
init done
getting: Firmware/dfu/iBEC.d22.RELEASE.im4p
0% [ 100% [============================================================================================== 1% [> 3% [==> 4% [===> 6% [=====> 7% [======> 9% [========> 10% [=========> 12% [===========> 13% [============> 15% [==============> 16% [===============> 18% [=================> 18% [=================> 18% [=================> 19% [==================> 21% [====================> 22% [=====================> 24% [=======================> 25% [========================> 27% [==========================> 28% [===========================> 30% [=============================> 31% [==============================> 33% [================================> 34% [=================================> 36% [===================================> 37% [====================================> 39% [======================================> 40% [=======================================> 42% [=========================================> 43% [==========================================> 45% [============================================> 47% [==============================================> 48% [===============================================> 49% [================================================> 51% [==================================================> 52% [===================================================> 54% [=====================================================> 55% [======================================================> 57% [========================================================> 58% [=========================================================> 60% [===========================================================> 61% [============================================================> 63% [==============================================================> 64% [===============================================================> 66% [=================================================================> 66% [=================================================================> 67% [==================================================================> 69% [====================================================================> 70% [=====================================================================> 72% [=======================================================================> 73% [========================================================================> 75% [==========================================================================> 76% [===========================================================================> 78% [=============================================================================> 80% [===============================================================================> 81% [================================================================================> 83% [==================================================================================> 84% [===================================================================================> 86% [=====================================================================================> 87% [======================================================================================> 89% [========================================================================================> 90% [=========================================================================================> 92% [===========================================================================================> 93% [============================================================================================> 95% [============================================================================================== 96% [============================================================================================== 97% [============================================================================================== 99% [==============================================================================================100% [===================================================================================================>]
download succeeded
ibss
ibec
Version: 7fd877ee7d57a91d2506155752077aad51f896aa-39
main: Starting...
iOS 14 iBoot detected!
getting get_debug_enabled_patch() patch
getting get_sigcheck_patch() patch
applying patch=0x180032914 : 000080d2
applying patch=0x180032960 : 000080d2
applying patch=0x18003443c : 200080d2
main: Writing out patched file to work/iBSS.patched...
main: Quitting...
Version: 7fd877ee7d57a91d2506155752077aad51f896aa-39
main: Starting...
iOS 14 iBoot detected!
getting get_debug_enabled_patch() patch
getting get_unlock_nvram_patch() patch
getting get_sigcheck_patch() patch
applying patch=0x180032914 : 000080d2
applying patch=0x180032960 : 000080d2
applying patch=0x18001f908 : 000080d2c0035fd6
applying patch=0x18001f958 : 000080d2c0035fd6
applying patch=0x18006ba84 : 000080d2c0035fd6
applying patch=0x18003443c : 200080d2
applying patch=0x180038c58 : 1f2003d5
main: Writing out patched file to work/iBSS.patched...
main: Quitting...
Version: 7fd877ee7d57a91d2506155752077aad51f896aa-39
main: Starting...
iOS 14 iBoot detected!
getting get_boot_arg_patch(rd=md0 debug=0x2014e -v wdt=-1 nand-enable-reformat=1 -restore amfi=0xff cs_enforcement_disable=1) patch
getting get_debug_enabled_patch() patch
getting get_unlock_nvram_patch() patch
getting get_sigcheck_patch() patch
applying patch=0x180032914 : 000080d2
applying patch=0x180032960 : 000080d2
applying patch=0x18001f908 : 000080d2c0035fd6
applying patch=0x18001f958 : 000080d2c0035fd6
applying patch=0x18006ba84 : 000080d2c0035fd6
applying patch=0x18003443c : 200080d2
applying patch=0x180035828 : 29535230
applying patch=0x1800da28d : 72643d6d64302064656275673d30783230313465202d76207764743d2d31206e616e642d656e61626c652d7265666f726d61743d31202d726573746f726520616d66693d307866662063735f656e666f7263656d656e745f64697361626c653d3100
applying patch=0x180035834 : f30309aa
applying patch=0x180035924 : 534b5230
applying patch=0x180038c58 : 1f2003d5
main: Writing out patched file to work/iBEC.patched...
main: Quitting...
none
none
Version: v2.0.0(45d0267ee24854d8bb9f5dbef29c3226af0d48db-329)
img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f-RELEASE
libipatcher version: 0.88-1e855d70c84419014e363bdbcaead7b145fe3e1f-RELEASE
Odysseus for 32-bit support: yes
Odysseus for 64-bit support: yes
WARNING: User specified to enable Deprecated/Legacy options, at risk of boot loop!
[INFO] 64-bit device detected
futurerestore init done
reading signing ticket shsh/8568511710085166_iPhone10,3_16.7.16-20H392_5311198dbe66fee8e1505352849e7b5a7fe717d35929b2e1f8c86750866ef29d.shsh2 is done
User specified to use latest signed SEP
Using cached SEP.
Checking if SEP is being signed...
Sending TSS request attempt 1... response successfully received
SEP is being signed!
User specified to use latest signed baseband
Using cached Baseband.
Checking if Baseband is being signed...
Sending TSS request attempt 1... response successfully received
Baseband is being signed!
Downloading the latest firmware components...
Downloading SE firmware
100 [===============================================================================================000 [ 000 [ 000 [
099 [===============================================================================================099 [===============================================================================================099 [===============================================================================================099 [===============================================================================================099 [===============================================================================================100 [===================================================================================================>]
Using cached Savage,B0-Prod-Patch.
Using cached Savage,B0-Dev-Patch.
Using cached Savage,B2-Prod-Patch.
Using cached Savage,B2-Dev-Patch.
Using cached Savage,BA-Prod-Patch.
Using cached Savage,BA-Dev-Patch.
Checking for cached Cryptex1...
Using cached Cryptex1,SystemOS.
Using cached Cryptex1,SystemVolume.
Using cached Cryptex1,SystemTrustCache.
Using cached Cryptex1,AppOS.
Using cached Cryptex1,AppVolume.
Using cached Cryptex1,AppTrustCache.
Finished downloading the latest firmware components!
Found device in DFU mode
requesting to get into pwnRecovery later
Found device in DFU mode
Identified device as d22ap, iPhone10,3
Extracting BuildManifest from iPSW
Product version: 14.0
Product build: 18A5342e Major: 18
Device supports Image4: true
checking if the APTicket is valid for this restore...
Verified ECID in APTicket matches the device's ECID
checking if the APTicket is valid for this restore...
Verified ECID in APTicket matches the device's ECID
[IMG4TOOL] checking buildidentity 0:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 1:
[IMG4TOOL] checking buildidentity matches board ... YES
[IMG4TOOL] checking buildidentity has all required hashes:
[IMG4TOOL] checking hash for "AOP" OK (untrusted)
[IMG4TOOL] checking hash for "Ap,SystemVolumeCanonicalMetadata"BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "AppleLogo" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "AudioCodecFirmware" OK (untrusted)
[IMG4TOOL] checking hash for "BasebandFirmware" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "BatteryCharging0" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryCharging1" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryFull" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryLow0" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryLow1" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryPlugin" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "DeviceTree" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "ISP" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "KernelCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "LLB" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "Liquid" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "Multitouch" OK (untrusted)
[IMG4TOOL] checking hash for "OS" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RecoveryMode" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreDeviceTree" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreKernelCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreLogo" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreRamDisk" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreSEP" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreTrustCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "SE,UpdatePayload" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "SEP" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "Savage,B0-Dev-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,B0-Dev-PatchVT" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,B0-Prod-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,B0-Prod-PatchVT" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,B2-Dev-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,B2-Dev-PatchVT" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,B2-Prod-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,B2-Prod-PatchVT" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,BA-Dev-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,BA-Prod-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "StaticTrustCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "SystemVolume" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "ftap" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "ftsp" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "iBEC" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "iBSS" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "iBoot" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "rfta" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "rfts" IGN (no digest in BuildManifest)
failed verification with error:
[exception]:
what=verification failed!
code=84279308
line=1286
file=img4tool.cpp
commit count=197
commit sha =aca6cf005c94caf135023263cbb5c61a0081804f
[IMG4TOOL] checking buildidentity 2:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 3:
[IMG4TOOL] checking buildidentity matches board ... YES
[IMG4TOOL] checking buildidentity has all required hashes:
[IMG4TOOL] checking hash for "AOP" OK (untrusted)
[IMG4TOOL] checking hash for "Ap,SystemVolumeCanonicalMetadata"BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "AppleLogo" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "AudioCodecFirmware" OK (untrusted)
[IMG4TOOL] checking hash for "BasebandFirmware" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "BatteryCharging0" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryCharging1" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryFull" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryLow0" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryLow1" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryPlugin" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "DeviceTree" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "ISP" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "KernelCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "LLB" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "Liquid" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "Multitouch" OK (untrusted)
[IMG4TOOL] checking hash for "OS" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RecoveryMode" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreDeviceTree" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreKernelCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreLogo" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreRamDisk" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreSEP" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreTrustCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "SE,UpdatePayload" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "SEP" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "Savage,B0-Dev-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,B0-Dev-PatchVT" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,B0-Prod-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,B0-Prod-PatchVT" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,B2-Dev-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,B2-Dev-PatchVT" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,B2-Prod-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,B2-Prod-PatchVT" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,BA-Dev-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "Savage,BA-Prod-Patch" IGN (hash not found in im4m, but ignoring since not explicitly enforced through "Trusted"="YES" tag)
[IMG4TOOL] checking hash for "StaticTrustCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "SystemVolume" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "ftap" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "ftsp" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "iBEC" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "iBSS" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "iBoot" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "rfta" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "rfts" IGN (no digest in BuildManifest)
failed verification with error:
[exception]:
what=verification failed!
code=84279308
line=1286
file=img4tool.cpp
commit count=197
commit sha =aca6cf005c94caf135023263cbb5c61a0081804f
[WARNING] NOT VALIDATING SHSH BLOBS IM4M!
[Error] BuildIdentity selected for restore does not match APTicket
BuildIdentity selected for restore:
BuildNumber : 18A5342e
BuildTrain : AzulSeed
DeviceClass : d22ap
FDRSupport : YES
MobileDeviceMinVersion : 1170
RestoreBehavior : Erase
Variant : Developer Erase Install (IPSW)
BuildIdentity is valid for the APTicket:
IM4M is not valid for any restore within the Buildmanifest
This APTicket can't be used for restoring this firmware
[WARNING] NOT VALIDATING SHSH BLOBS!
Variant: Developer Erase Install (IPSW)
This restore will erase all device data.
Device found in DFU Mode.
Sending iBSS (1471404 bytes)...
[==================================================] 100.0%
Booting iBSS, waiting for device to disconnect...
Booting iBSS, waiting for device to reconnect...
ApNonce pre-hax:
INFO: device serial number is G0PW23F5JCL7
Getting ApNonce in recovery mode... cc 03 fb 9b cf 96 a6 6b 83 59 af 38 c9 16 10 d1 a2 84 54 3b 5d 84 03 ab 2c bd de 4f e5 16 b2 23
ApNonce from device doesn't match IM4M nonce, applying hax...
Writing generator=0x3b5b8cbf3954fb06 to nvram!
Sending iBEC (1471404 bytes)...
[==================================================] 100.0%
Booting iBEC, waiting for device to disconnect...
Booting iBEC, waiting for device to reconnect...
APnonce post-hax:
Getting ApNonce in recovery mode... 53 11 19 8d be 66 fe e8 e1 50 53 52 84 9e 7b 5a 7f e7 17 d3 59 29 b2 e1 f8 c8 67 50 86 6e f2 9d
Successfully set nonce generator: 0x3b5b8cbf3954fb06
Extracting filesystem from iPSW
[==================================================] 100.0%
Getting SepNonce in recovery mode... f9 2a 24 f4 09 3f 4c f7 3e ef 4c 58 9f 87 dc 45 36 f2 77 25
Getting ApNonce in recovery mode... 53 11 19 8d be 66 fe e8 e1 50 53 52 84 9e 7b 5a 7f e7 17 d3 59 29 b2 e1 f8 c8 67 50 86 6e f2 9d
Recovery Mode Environment:
iBoot build-version=iBoot-6723.62.3
iBoot build-style=RELEASE
Sending RestoreLogo...
Extracting applelogo@3x~iphone.im4p (Firmware/all_flash/applelogo@3x~iphone.im4p)...
Personalizing IMG4 component RestoreLogo...
Sending RestoreLogo (20683 bytes)...
ramdisk-size=0x20000000
1337 CUSTOM RAMDISK!
Personalizing IMG4 component RestoreRamDisk...
Sending RestoreRamDisk (102575919 bytes)...
Extracting adc-nike-d22.im4p (Firmware/isp_bni/adc-nike-d22.im4p)...
Personalizing IMG4 component ISP...
Sending ISP (13269662 bytes)...
Extracting 038-44206-117.dmg.trustcache (Firmware/038-44206-117.dmg.trustcache)...
Personalizing IMG4 component RestoreTrustCache...
Sending RestoreTrustCache (12257 bytes)...
Extracting DeviceTree.d22ap.im4p (Firmware/all_flash/DeviceTree.d22ap.im4p)...
Personalizing IMG4 component RestoreDeviceTree...
Sending RestoreDeviceTree (40470 bytes)...
Personalizing IMG4 component RestoreSEP...
Sending RestoreSEP (1415361 bytes)...
1337 CUSTOM KERNEL!
Personalizing IMG4 component RestoreKernelCache...
Sending RestoreKernelCache (37841847 bytes)...
getting SEP ticket
Trying to fetch new SHSH blob
Sending TSS request attempt 1... response successfully received
Received SHSH blobs
About to restore device...
Connecting now...
Connected to com.apple.mobile.restored, version 15
Device ffffffffffffffffffffffffffffffff00000001 has successfully entered restore mode
Hardware Information:
BoardID: 6
ChipID: 32789
UniqueChipID: 8568511710085166
ProductionMode: true
Starting Reverse Proxy
ReverseProxy[Ctrl]: (status=1) Ready
Checkpoint 1621 complete with code 0
Checkpoint 1540 complete with code 0
Checkpoint 1679 complete with code 0
Checkpoint 1544 complete with code 0
About to send RootTicket...
Sending RootTicket now...
Done sending RootTicket
Checkpoint 1547 complete with code 0
Waiting for NAND (28)
Checkpoint 1549 complete with code 0
Updating NAND Firmware (58)
Checkpoint 1550 complete with code 0
Checkpoint 1551 complete with code 0
Checkpoint 1628 complete with code 0
Checkpoint 1552 complete with code 0
Checkpoint 1555 complete with code 0
Checkpoint 1662 complete with code 0
About to send NORData...
Found firmware path Firmware/all_flash
Getting firmware manifest from build identity
Extracting LLB.d22.RELEASE.im4p (Firmware/all_flash/LLB.d22.RELEASE.im4p)...
Personalizing IMG4 component LLB...
Extracting applelogo@3x~iphone.im4p (Firmware/all_flash/applelogo@3x~iphone.im4p)...
Personalizing IMG4 component AppleLogo...
Extracting batterycharging0@3x~iphone.im4p (Firmware/all_flash/batterycharging0@3x~iphone.im4p)...
Personalizing IMG4 component BatteryCharging0...
Extracting batterycharging1@3x~iphone.im4p (Firmware/all_flash/batterycharging1@3x~iphone.im4p)...
Personalizing IMG4 component BatteryCharging1...
Extracting batteryfull@3x~iphone.im4p (Firmware/all_flash/batteryfull@3x~iphone.im4p)...
Personalizing IMG4 component BatteryFull...
Extracting batterylow0@3x~iphone.im4p (Firmware/all_flash/batterylow0@3x~iphone.im4p)...
Personalizing IMG4 component BatteryLow0...
Extracting batterylow1@3x~iphone.im4p (Firmware/all_flash/batterylow1@3x~iphone.im4p)...
Personalizing IMG4 component BatteryLow1...
Extracting glyphplugin@2436~iphone-lightning.im4p (Firmware/all_flash/glyphplugin@2436~iphone-lightning.im4p)...
Personalizing IMG4 component BatteryPlugin...
Extracting DeviceTree.d22ap.im4p (Firmware/all_flash/DeviceTree.d22ap.im4p)...
Personalizing IMG4 component DeviceTree...
Extracting liquiddetect@2436~iphone-lightning.im4p (Firmware/all_flash/liquiddetect@2436~iphone-lightning.im4p)...
Personalizing IMG4 component Liquid...
Extracting recoverymode@2436~iphone-lightning.im4p (Firmware/all_flash/recoverymode@2436~iphone-lightning.im4p)...
Personalizing IMG4 component RecoveryMode...
Extracting iBoot.d22.RELEASE.im4p (Firmware/all_flash/iBoot.d22.RELEASE.im4p)...
Personalizing IMG4 component iBoot...
Personalizing IMG4 component RestoreSEP...
Personalizing IMG4 component SEP...
Sending NORData now...
Done sending NORData
Checkpoint 1545 complete with code 0
Checkpoint 1683 complete with code 0
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Checkpoint 1637 complete with code 0
Checkpoint 1556 complete with code 0
Checkpoint 1620 complete with code 0
Checkpoint 1557 complete with code 0
About to send FDR Trust data...
Sending FDR Trust data now...
Done sending FDR Trust Data
Checkpoint 1558 complete with code 0
Checkpoint 1559 complete with code 0
Checkpoint 1560 complete with code 0
Checking for uncollected logs (44)
Checkpoint 1561 complete with code 0
Checking for uncollected logs (44)
ERROR: Could not read data (-256). Aborting.
ReverseProxy[Ctrl]: (status=2) Terminated
Cleaning up...
[exception]:
what=ERROR: Unable to restore device
code=99090486
line=1512
file=/tmp/Builder/repos/futurerestore/src/futurerestore.cpp
commit count=329
commit sha =45d0267ee24854d8bb9f5dbef29c3226af0d48db
Done: restoring failed!
Restore has completed! Read above if there is any errors
Archive: /home/raebae/ipsw/iPhone10,3_14.0b4_18A5342e.ipsw
inflating: work/iBSS.d22.RELEASE.im4p
Archive: /home/raebae/ipsw/iPhone10,3_14.0b4_18A5342e.ipsw
inflating: work/iBEC.d22.RELEASE.im4p
Archive: /home/raebae/ipsw/iPhone10,3_14.0b4_18A5342e.ipsw
inflating: work/DeviceTree.d22ap.im4p
Version: 3fc8c093f4660f6c6e07c0c9214618733da01ffc - 36
libfragmentzip version: 0.60-120447d0f410dffb49948fa155467fc5d91ca3c8
init pzb: https://updates.cdn-apple.com/2020WinterFCS/fullrestores/001-87865/458334F5-D8E1-498A-A9FD-08BBD20FE007/iPhone10,3,iPhone10,6_14.3_18C66_Restore.ipsw
init done
getting: Firmware/dfu/iBSS.d22.RELEASE.im4p
0% [ 100% [============================================================================================== 1% [> 3% [==> 4% [===> 6% [=====> 7% [======> 9% [========> 10% [=========> 12% [===========> 13% [============> 15% [==============> 16% [===============> 18% [=================> 19% [==================> 21% [====================> 22% [=====================> 24% [=======================> 25% [========================> 27% [==========================> 28% [===========================> 30% [=============================> 31% [==============================> 33% [================================> 34% [=================================> 36% [===================================> 37% [====================================> 39% [======================================> 40% [=======================================> 42% [=========================================> 43% [==========================================> 45% [============================================> 46% [=============================================> 48% [===============================================> 49% [================================================> 51% [==================================================> 52% [===================================================> 53% [====================================================> 55% [======================================================> 56% [=======================================================> 58% [=========================================================> 59% [==========================================================> 61% [============================================================> 62% [=============================================================> 64% [===============================================================> 65% [================================================================> 67% [==================================================================> 68% [===================================================================> 70% [=====================================================================> 71% [======================================================================> 73% [========================================================================> 74% [=========================================================================> 76% [===========================================================================> 77% [============================================================================> 79% [==============================================================================> 80% [===============================================================================> 82% [=================================================================================> 83% [==================================================================================> 85% [====================================================================================> 86% [=====================================================================================> 88% [=======================================================================================> 89% [========================================================================================> 91% [==========================================================================================> 92% [===========================================================================================> 94% [=============================================================================================> 95% [============================================================================================== 97% [============================================================================================== 98% [==============================================================================================100% [===================================================================================================>]
download succeeded
Version: 3fc8c093f4660f6c6e07c0c9214618733da01ffc - 36
libfragmentzip version: 0.60-120447d0f410dffb49948fa155467fc5d91ca3c8
init pzb: https://updates.cdn-apple.com/2020WinterFCS/fullrestores/001-87865/458334F5-D8E1-498A-A9FD-08BBD20FE007/iPhone10,3,iPhone10,6_14.3_18C66_Restore.ipsw
init done
getting: Firmware/dfu/iBEC.d22.RELEASE.im4p
0% [ 100% [============================================================================================== 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 1% [> 1% [> 1% [> 1% [> 1% [> 2% [=> 4% [===> 5% [====> 7% [======> 8% [=======> 10% [=========> 11% [==========> 13% [============> 14% [=============> 16% [===============> 17% [================> 19% [==================> 20% [===================> 22% [=====================> 23% [======================> 25% [========================> 27% [==========================> 28% [===========================> 30% [=============================> 31% [==============================> 33% [================================> 34% [=================================> 36% [===================================> 37% [====================================> 39% [======================================> 40% [=======================================> 42% [=========================================> 43% [==========================================> 45% [============================================> 46% [=============================================> 48% [===============================================> 49% [================================================> 51% [==================================================> 52% [===================================================> 54% [=====================================================> 55% [======================================================> 57% [========================================================> 58% [=========================================================> 60% [===========================================================> 61% [============================================================> 63% [==============================================================> 64% [===============================================================> 66% [=================================================================> 67% [==================================================================> 69% [====================================================================> 70% [=====================================================================> 72% [=======================================================================> 73% [========================================================================> 75% [==========================================================================> 76% [===========================================================================> 78% [=============================================================================> 78% [=============================================================================> 80% [===============================================================================> 81% [================================================================================> 83% [==================================================================================> 84% [===================================================================================> 86% [=====================================================================================> 87% [======================================================================================> 89% [========================================================================================> 90% [=========================================================================================> 92% [===========================================================================================> 93% [============================================================================================> 95% [============================================================================================== 96% [============================================================================================== 98% [============================================================================================== 99% [==============================================================================================100% [===================================================================================================>]
download succeeded
ibss
ibec
Archive: /home/raebae/ipsw/iPhone10,3_14.0b4_18A5342e.ipsw
inflating: work/038-44103-116.dmg.trustcache
inflating: work/038-44206-117.dmg.trustcache
inflating: work/038-44249-077.dmg.trustcache
trst
Archive: /home/raebae/ipsw/iPhone10,3_14.0b4_18A5342e.ipsw
inflating: work/kernelcache.release.iphone10b
Version: 7fd877ee7d57a91d2506155752077aad51f896aa-39
main: Starting...
iOS 14 iBoot detected!
getting get_debug_enabled_patch() patch
getting get_sigcheck_patch() patch
applying patch=0x180032914 : 000080d2
applying patch=0x180032960 : 000080d2
applying patch=0x18003443c : 200080d2
main: Writing out patched file to work/iBSS.patch...
main: Quitting...
Version: 7fd877ee7d57a91d2506155752077aad51f896aa-39
main: Starting...
iOS 14 iBoot detected!
getting get_boot_arg_patch(-v) patch
getting get_debug_enabled_patch() patch
getting get_sigcheck_patch() patch
applying patch=0x180032914 : 000080d2
applying patch=0x180032960 : 000080d2
applying patch=0x18003443c : 200080d2
applying patch=0x180035828 : 29535230
applying patch=0x1800da28d : 2d7600
applying patch=0x180035834 : f30309aa
applying patch=0x180035924 : 534b5230
main: Writing out patched file to work/iBEC.patch...
main: Quitting...
Version: 7fd877ee7d57a91d2506155752077aad51f896aa-39
main: Starting...
iOS 14 iBoot detected!
getting get_boot_arg_patch(-v) patch
getting get_debug_enabled_patch() patch
getting get_sigcheck_patch() patch
getting local_boot_patch() patch
applying patch=0x180054ef4 : 00008052
applying patch=0x180054ef8 : c0035fd6
applying patch=0x180032914 : 000080d2
applying patch=0x180032960 : 000080d2
applying patch=0x18003443c : 200080d2
applying patch=0x180035828 : 29535230
applying patch=0x1800da28d : 2d7600
applying patch=0x180035834 : f30309aa
applying patch=0x180035924 : 534b5230
main: Writing out patched file to work/iBSS.patch...
main: Quitting...
none
none
dtre
krnl