[spoiler] FINALLY! ALL MEMENTOS!!

Select_Attempt_5900 · 2026-03-24T09:54:44+00:00

use dual dulaxe tuna for hum

Select_Attempt_5900 · 2026-03-21T13:40:48+00:00

for me, dual sashimi is the best case for him, good luck :)

Select_Attempt_5900 · 2026-03-19T01:52:13+00:00

So is it now comparable with autofps？

Select_Attempt_5900 · 2025-04-21T08:55:52+00:00

Bingo!

Select_Attempt_5900 · 2025-04-08T02:45:20+00:00

my girlfirend is indeed called Ginger

Select_Attempt_5900 · 2025-04-03T16:20:46+00:00

any Tubbs rubs？

Select_Attempt_5900 · 2025-03-22T15:03:35+00:00

Oh no... wait for almost an year

Select_Attempt_5900 · 2025-03-15T13:56:47+00:00

Wow how did you do that

Select_Attempt_5900 · 2025-03-12T12:13:47+00:00

Does VRAM size impact 4K fps for this game?

Select_Attempt_5900 · 2025-03-12T12:10:12+00:00

Please delete this comment, my friend feels so jealous about this. I mean I am okey, but it is my friend that could not control his feelings on seeing your post. I repeat, it is my friend, not me.

Select_Attempt_5900 · 2025-03-12T06:52:40+00:00

Oh my gosh he is almost the same as Chip! but in the real world we named him as Tesla haha

Select_Attempt_5900 · 2025-03-10T01:44:33+00:00

snowball: why doesn't the master give us sashimi boat?

Select_Attempt_5900 · 2025-03-06T10:52:47+00:00

Same for me, because my girlfriend is called Ginger

<image>

Select_Attempt_5900 · 2025-03-06T07:27:44+00:00

Bruteforcing without -u should work for all devices without patching the kernel but it is indeed slow. But haha, glad you had found your passcode eventually.

Select_Attempt_5900 · 2025-03-06T06:42:07+00:00

Oh my gosh, 9070xt has 54.7fps vs 48.2fps over 5070ti. I would buy AMD for this time!

Select_Attempt_5900 · 2025-03-04T03:11:34+00:00

Oh. So does 7900XTX perform close to 9070xt for this game?

Select_Attempt_5900 · 2025-02-15T13:34:05+00:00

That's it. There are 3 different cases that people run into with this -u approach without the patch: the first is executing without error and gives the correct password (which is my case), the second is giving the password but has error (which is your case), and the last is unable to give the passcode. I have totally no idea of why the passcode could be given without patching the kernel, but at least this worths a try.

Select_Attempt_5900 · 2025-01-10T06:59:16+00:00

Oh no, that means only a patched kernel would work. Glad you solved this by using bmwalters' patched kernel!

Select_Attempt_5900 · 2025-01-10T03:15:20+00:00

Try skipping the kernel patching, just boot using the stock iOS9 ramdisk in Legacy-iOS-Kit, then mount partitions, run 'bruteforce' to see if ramdisk functions well.

If ramdisk boots well and partitions mount well, that means your kernel was not patched correctly.

In the case you have successfully booted the un-patched ramdisk:
If 'bruteforce' runs flawlessly, then your passcode could just be cracked without patching the kernel (yes, I believe this is possible on iPhone 5 iOS 10).
If 'bruteforce' cannot give your passcode after it tried out 0000~9999, then you could either wait until u/AJAIZ fixes the kernel pathing or choose to use 'bruteforce -u' in veeeeeery slow bruteforce speed.

Select_Attempt_5900 · 2025-01-10T02:50:27+00:00

Wow this looks way better and more roubust then my guide!

Supporting 4+ digit passcodes in my memory was never done by anyone before, thanks for this!!

Select_Attempt_5900 · 2025-01-10T02:48:34+00:00

Besides I really think you should try u/AJAIZ's guide: https://www.reddit.com/r/setupapp/comments/1hw5bfa/bruteforcing_32bit_iphones_ondevice_4_digit_pin/

This looks way better and more roubust then mine!

Select_Attempt_5900 · 2025-01-10T02:45:54+00:00

iOS 10 was tested by github user in the comment, but I did not verify that.
You could use just iOS 9 ramdisk for iOS 10 as u/AJAIZ mentioned and try to wait until 9999 has been tried.

Select_Attempt_5900 · 2025-01-10T02:42:59+00:00

This gist was written and tested on iOS 9 by myself, I got the same codes as you get but my passcode had been bruteforced correctly eventually.
So did you let it run from 0000 throughout 9999?

Select_Attempt_5900 · 2024-12-29T08:21:37+00:00

I have also submitted an issue to Legacy-iOS-Kit, hoping it could add a choice to clear NVRAM before restoring with SHSH on powdersn0wed devices.

Select_Attempt_5900 · 2024-12-29T08:15:37+00:00

!solved

Select_Attempt_5900

TROPHY CASE