but when run btcrecover.py there only comes out two combinations ee and tt, and that does not align with what is said in the document. the right output is eett ee tt ttee
python btcrecover.py --listpass --passwordlist token.txt
That's the issue, you're using
--passwordlist instead of
--tokenlist.
The former will take each line as the complete possible password while the latter generates a number of possible combination of each lines.