iPod Touch 4 DRA v6 issue booting on some devices

[Jefferyat]

-> Select Base IPSW
Download Base IPSW
Custom Bootargs
Select Apple Logo
Go Back

[Input] Select your Base IPSW file in the file selection window.

[Log] Selected IPSW file: /Users/apple/Desktop/iPod4,1_6.1.6_10B500_Restore.ipsw
[Log] Getting version from IPSW
x Restore.plist
[Log] Getting SHA1 hash for /Users/apple/Desktop/iPod4,1_6.1.6_10B500_Restore.ipsw...
[Log] Getting SHA1 hash from AppleDB...
[Log] AppleDB request: https://api.appledb.dev/ios/iOS;10B500.json

07/11 13:05:24 [NOTICE] Downloading 1 item(s)

07/11 13:05:24 [NOTICE] Download complete: /Users/apple/Downloads/Downgrade Tools/Legacy iOS Kit/Legacy-iOS-Kit_macos_v23.07.15/tmp28630/tmp.json
[Log] Using saved SHA1 hash for this IPSW: 693bb78c8f6baf4186f7797bf3a0ef7d3b18255e
[Log] IPSW SHA1sum matches

*** Legacy iOS Kit ***

• Script by LukeZGD -

• Version: v26.07.17 (c237736)

• Platform: macos (iMac21,1 - Tahoe 26.3.1 - arm64)

• Device: iPod touch 4 (iPod4,1 - n81ap) in Recovery mode

• Manufactured in 2nd half 2012

• iOS Version: :: BUILD_TAG: iBoot-1537.9.55

• ECID: 4167192372239

• Only select unmodified IPSW for the selection. Do not select custom IPSWs

• Selected Target IPSW: /Users/apple/Desktop/iPod4,1_6.1.5_10B400_Restore.ipsw

• Target Version: 6.1.5-10B400

• Selected Target IPSW is validated

• Selected Base IPSW (iOS 6.1.6): /Users/apple/Desktop/iPod4,1_6.1.6_10B500_Restore.ipsw

• Base Version: 6.1.6-10B500

• Selected Base IPSW is validated

• You may enter custom bootargs (optional, experimental option)

• Default Bootargs: pio-error=0 debug=0x2014e serial=3

• You can select your own custom Apple logo image. This is optional and an experimental option

• Note: The images must be in PNG format, and up to your device resolution

• Note 2: The custom images might not work, current support is spotty

• No custom Apple logo selected

Main Menu > Restore/Downgrade > DRA v6 (any iOS)
[Input] Select an option:
Select Target IPSW
Select Base IPSW
Download Base IPSW
Custom Bootargs
Select Apple Logo
-> (*) Start Restore
Go Back

[Input] Jailbreak Option

• When this option is enabled, your device will be jailbroken on restore.
• I recommend to enable this option to have the jailbreak and Cydia pre-installed.
• This option is enabled by default (Y). Select this option if unsure.
  [Input] Enable this option? (Y/n):
  -> Yes
  No

[Log] Jailbreak option enabled.

[Input] Memory Option for creating custom IPSW

• When this option is enabled, system RAM will be used for the IPSW creation process.
• I recommend to enable this option to speed up creating the custom IPSW.
• However, if your PC/Mac has less than 8 GB of RAM, disable this option.
• This option is enabled by default (Y). Select this option if unsure.
  [Input] Enable this option? (Y/n):
  -> Yes
  No

[Log] Memory option enabled.

[Input] Verbose Boot Option

• When this option is enabled, the device will have verbose boot on restore.
• This option is enabled by default (Y). Select this option if unsure.
  [Input] Enable this option? (Y/n):
  -> Yes
  No

[Log] Verbose boot option enabled.

[Log] Found existing saved 6.1.6 blobs: ../saved/shsh/4167192372239_iPod4,1_n81ap_6.1.6-10B500_3a88b7c3802f2f0510abc432104a15ebd8bd7154.shsh2

• DFU Mode Helper - Get ready to enter DFU mode.

• If you already know how to enter DFU mode, you may do so right now before continuing.
  [Input] Select Y to continue, N to exit recovery mode (Y/n):
  -> Yes
  No

• Get ready...
  3 2 1

• Hold TOP and HOME buttons.
  8 7 6 5 4 3 2 1

• Release TOP button and keep holding HOME button.
  8 7 6 5 4 3 2 1
  [Log] Finding device in DFU mode...
  [Log] Found device in DFU mode.
  [Log] Placing device to pwnDFU mode using ipwnder_lite

• If pwning fails and gets stuck, you can press Ctrl+C to cancel, then re-enter DFU and retry.
  [main] enabled: verbose log
  [main] Waiting for device in DFU mode...
  [io_get_serial] Found serial number!
  [main] CONNECTED
  [main] CPID: 0x8930, BDID: 0x08, STRG: [iBoot-574.4]
  ** exploiting with limera1n
  [limera1n] reconnecting
  [io_reset] ResetDevice: 0
  [io_reset] USBDeviceReEnumerate: 0
  [limera1n] sending exploit payload
  [limera1n] 0, 1392
  [limera1n] sending fake data
  [limera1n] 0, 1
  [limera1n] e0004051, 0
  [limera1n] executing exploit
  [limera1n] e0004051, 0
  [limera1n] reconnecting
  [io_reset] ResetDevice: 0
  [io_reset] USBDeviceReEnumerate: 0
  [limera1n] 0, 0
  [limera1n] 0, 6
  [limera1n] 0, 6
  [limera1n] 0, 6
  [limera1n] exploit sent
  [limera1n] reconnecting
  [io_reset] ResetDevice: 0
  [io_reset] USBDeviceReEnumerate: 0
  [io_get_serial] Found serial number!
  [limera1n] pwned!
  [Log] gaster reset
  usb_timeout: 5
  usb_abort_timeout_min: 0
  [IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
  Found the USB handle.
  [Log] Checking for device
  [Log] Found device in pwned DFU mode.

• Pwned: limera1n
  [Log] Found existing Custom IPSW. Skipping IPSW creation.
  [Log] Device iPod4,1 has no baseband/disabled baseband update
  [Log] Extracting IPSW: ../iPod4,1_6.1.5_10B400_CustomJP6V.ipsw
  x 048-2914-001.dmg
  x 048-2918-001.dmg
  x 048-5280-001.dmg
  x BuildManifest.plist
  x Downgrade/
  x Downgrade/RestoreDeviceTree
  x Downgrade/RestoreLogo
  x Firmware/
  x Firmware/all_flash/
  x Firmware/all_flash/all_flash.n81ap.production/
  x Firmware/all_flash/all_flash.n81ap.production/DeviceTree.n81ap.img3
  x Firmware/all_flash/all_flash.n81ap.production/LLB.n81ap.RELEASE.img3
  x Firmware/all_flash/all_flash.n81ap.production/applelogo7@2x.s5l8930x.img3
  x Firmware/all_flash/all_flash.n81ap.production/applelogo@2x.s5l8930x.img3
  x Firmware/all_flash/all_flash.n81ap.production/batterycharging0@2x.s5l8930x.img3
  x Firmware/all_flash/all_flash.n81ap.production/batterycharging1@2x.s5l8930x.img3
  x Firmware/all_flash/all_flash.n81ap.production/batteryfull@2x.s5l8930x.img3
  x Firmware/all_flash/all_flash.n81ap.production/batterylow0@2x.s5l8930x.img3
  x Firmware/all_flash/all_flash.n81ap.production/batterylow1@2x.s5l8930x.img3
  x Firmware/all_flash/all_flash.n81ap.production/glyphcharging@2x.s5l8930x.img3
  x Firmware/all_flash/all_flash.n81ap.production/glyphplugin@2x.s5l8930x.img3
  x Firmware/all_flash/all_flash.n81ap.production/iBoot.n81ap.RELEASE.img3
  x Firmware/all_flash/all_flash.n81ap.production/iBoot2.n81ap.RELEASE.img3
  x Firmware/all_flash/all_flash.n81ap.production/manifest
  x Firmware/all_flash/all_flash.n81ap.production/recoverymode7@2xiphone.s5l8930x.img3
  x Firmware/all_flash/all_flash.n81ap.production/recoverymode@2xiphone.s5l8930x.img3
  x Firmware/dfu/
  x Firmware/dfu/iBEC.n81ap.RELEASE.dfu
  x Firmware/dfu/iBSS.n81ap.RELEASE.dfu
  x Firmware/usr/
  x Firmware/usr/local/
  x Firmware/usr/local/standalone/
  x Restore.plist
  x kernelcache.release.n81
  [Log] Running idevicerestore with command: ../bin/macos/arm64/idevicerestore -ew "../iPod4,1_6.1.5_10B400_CustomJP6V.ipsw"
  Found device in DFU mode
  Found ECID 4167192372239
  Identified device as n81ap, iPod4,1
  Extracting BuildManifest from IPSW
  Product Version: 6.1.5
  Product Build: 10B400 Major: 10
  Device supports Image4: false
  Variant: Customer Erase Install (IPSW)
  This restore will erase your device data.
  Getting ApNonce in dfu mode...
  checking for local shsh
  Using cached SHSH
  Using cached filesystem from '../iPod4,1_6.1.5_10B400_CustomJP6V/048-2914-001.dmg'
  Extracting iBSS.n81ap.RELEASE.dfu...
  Personalizing IMG3 component iBSS...
  reconstructed size: 67853
  Sending iBSS (67853 bytes)...
  [==================================================] 100.0%
  Nonce: 36 ee 84 89 4e 2f dd 22 bf ef 18 ea 5b 35 1b 93 11 8a 23 34
  checking for local shsh
  Using cached SHSH
  Extracting iBEC.n81ap.RELEASE.dfu...
  Personalizing IMG3 component iBEC...
  reconstructed size: 272653
  Sending iBEC (272653 bytes)...
  [==================================================] 100.0%
  INFO: device serial number is CCQJ54YMDNQW
  Getting ApNonce in recovery mode... 36 ee 84 89 4e 2f dd 22 bf ef 18 ea 5b 35 1b 93 11 8a 23 34
  Sending APTicket (2764 bytes)
  Recovery Mode Environment:
  iBoot build-version=iBoot-1537.9.55
  iBoot build-style=RELEASE
  ramdisk-size=RELEASE
  Extracting 048-5280-001.dmg...
  Personalizing IMG3 component RestoreRamDisk...
  reconstructed size: 14624937
  Sending RestoreRamDisk (14624937 bytes)...
  Extracting RestoreDeviceTree...
  Not personalizing component RestoreDeviceTree...
  Sending RestoreDeviceTree (64872 bytes)...
  Extracting kernelcache.release.n81...
  Personalizing IMG3 component RestoreKernelCache...
  reconstructed size: 7271369
  Sending RestoreKernelCache (7271369 bytes)...
  About to restore device...
  Waiting for device...
  Device 75e876e63feb08c99cae0bbd07099a05bdea242a is now connected in restore mode...
  Connecting now...
  Connected to com.apple.mobile.restored, version 12
  Device 75e876e63feb08c99cae0bbd07099a05bdea242a has successfully entered restore mode
  Hardware Information:
  BoardID: 8
  ChipID: 35120
  UniqueChipID: 4167192372239
  ProductionMode: true
  Waiting for NAND (28)
  Creating partition map (11)
  Creating filesystem (12)
  Creating filesystem (12)
  Checking filesystems (15)
  Mounting filesystems (16)
  Checking filesystems (15)
  Mounting filesystems (16)
  Unmounting filesystems (29)
  Unmounting filesystems (29)
  About to send RootTicket...
  Sending RootTicket now...
  Done sending RootTicket
  About to send filesystem...
  Connected to ASR
  Validating the filesystem
  Filesystem validated
  Sending filesystem now...
  [==================================================] 100.0%
  Done sending filesystem
  Verifying restore (14)
  [==================================================] 100.0%
  Checking filesystems (15)
  Mounting filesystems (16)
  Checking filesystems (15)
  Mounting filesystems (16)
  About to send KernelCache...
  Extracting kernelcache.release.n81...
  Personalizing IMG3 component KernelCache...
  reconstructed size: 7271369
  Sending KernelCache now...
  Done sending KernelCache
  Installing kernelcache (27)
  Fixing up /var (17)
  Modifying persistent boot-args (25)
  About to send NORData...
  Found firmware path Firmware/all_flash/all_flash.n81ap.production
  Getting firmware manifest from Firmware/all_flash/all_flash.n81ap.production/manifest
  Extracting LLB.n81ap.RELEASE.img3...
  Personalizing IMG3 component LLB...
  reconstructed size: 133593
  Extracting iBoot.n81ap.RELEASE.img3...
  Not personalizing component iBoot...
  Extracting DeviceTree.n81ap.img3...
  Not personalizing component DeviceTree...
  Extracting applelogo@2x.s5l8930x.img3...
  Not personalizing component AppleLogo...
  Extracting batterylow0@2x.s5l8930x.img3...
  Not personalizing component BatteryLow0...
  Extracting batterylow1@2x.s5l8930x.img3...
  Not personalizing component BatteryLow1...
  Extracting glyphcharging@2x.s5l8930x.img3...
  Not personalizing component BatteryCharging...
  Extracting batterycharging0@2x.s5l8930x.img3...
  Not personalizing component BatteryCharging...
  Extracting batterycharging1@2x.s5l8930x.img3...
  Not personalizing component BatteryCharging...
  Extracting glyphplugin@2x.s5l8930x.img3...
  Not personalizing component BatteryPlugin...
  Extracting batteryfull@2x.s5l8930x.img3...
  Not personalizing component BatteryFull...
  Extracting recoverymode@2xiphone.s5l8930x.img3...
  Not personalizing component RecoveryMode...
  Extracting recoverymode7@2xiphone.s5l8930x.img3...
  Not personalizing component RecoveryMode...
  Extracting iBoot2.n81ap.RELEASE.img3...
  Not personalizing component iBoot...
  Sending NORData now...
  Done sending NORData
  Flashing firmware (18)
  [==================================================] 100.0%
  Updating gas gauge software (46)
  Updating gas gauge software (46)
  Creating system key bag (49)
  Resizing system partition (51)
  Unmounting filesystems (29)
  Unmounting filesystems (29)
  Got status message
  Status: Restore Finished
  Cleaning up...
  DONE

[Log] Restoring done! Read the message below if any error has occurred:

• For device activation, go to: Main Menu -> Attempt Activation

• Make sure that you are using a USB dock or hub to connect your device. Do not use USB dongles.

• Please read the "Troubleshooting" wiki page in GitHub before opening any issue!

• Your problem may have already been addressed within the wiki page.

• If opening an issue in GitHub, please provide a FULL log/output. Otherwise, your issue may be dismissed.

• Save the terminal output now if needed. (macOS: Cmd+S, Linux: Ctrl+Shift+S)

• Legacy iOS Kit v26.07.17 (c237736)

• Platform: macos (iMac21,1 - Tahoe 26.3.1 - arm64)

[Jefferyat]

Enabling the exploit after the restores doesn't work either

[LukeZGD]

not sure what the issue is tbh, just restored to 6.1.5 and it works fine for me

[Jefferyat]

*** Legacy iOS Kit ***

• Script by LukeZGD -

• Version: v26.07.18 (0ad7d06)

• Platform: macos (iMac21,1 - Tahoe 26.3.1 - arm64)

• Device: iPod touch 4 (iPod4,1 - n81ap) in Recovery mode

• Manufactured in 2nd half 2012

• iOS Version: :: BUILD_TAG: iBoot-1537.9.55

• ECID: 4167192372239

Main Menu > Useful Utilities
[Input] Select an option:
Enter pwnDFU Mode
Clear NVRAM
-> Disable/Enable Exploit
SSH Ramdisk
Update DateTime
DFU Mode Helper
Go Back

*** Legacy iOS Kit ***

• Script by LukeZGD -

• Version: v26.07.18 (0ad7d06)

• Platform: macos (iMac21,1 - Tahoe 26.3.1 - arm64)

• Device: iPod touch 4 (iPod4,1 - n81ap) in Recovery mode

• Manufactured in 2nd half 2012

• iOS Version: :: BUILD_TAG: iBoot-1537.9.55

• ECID: 4167192372239

Main Menu > Useful Utilities > Disable/Enable Exploit
[Input] Select an option:
Disable Exploit
-> Enable Exploit
Go Back

[Log] Checking firmware keys in ../saved/firmware/iPod4,1/10B500
[Log] Checking URL in ../saved/firmware/iPod4,1/10B500/url
[Log] iBSS
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 2acaf189ad4cdfce8a7e4044137943f2f7ffc37d596fc6b14fb813cd375bc8d78520ebf0ba8e511421240dbf498dd5eb
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 2acaf189ad4cdfce8a7e4044137943f2f7ffc37d596fc6b14fb813cd375bc8d78520ebf0ba8e511421240dbf498dd5eb
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 2acaf189ad4cdfce8a7e4044137943f2f7ffc37d596fc6b14fb813cd375bc8d78520ebf0ba8e511421240dbf498dd5eb
[Log] iBEC
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 3fb63a40e8106dcb2a87448fcbacfb04eb7ec5e7bc690aec67d094fdc4c5ee69c77a920809040f360f64f5ca85d37590
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 3fb63a40e8106dcb2a87448fcbacfb04eb7ec5e7bc690aec67d094fdc4c5ee69c77a920809040f360f64f5ca85d37590
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 3fb63a40e8106dcb2a87448fcbacfb04eb7ec5e7bc690aec67d094fdc4c5ee69c77a920809040f360f64f5ca85d37590
[Log] DeviceTree
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: f10de029b125ebbe429476db1dc2ead2dde08931f2fefcc15ea1f1eed6e1e44e9a4a73a847f8d1a0bdd1a2022e8f926d
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: f10de029b125ebbe429476db1dc2ead2dde08931f2fefcc15ea1f1eed6e1e44e9a4a73a847f8d1a0bdd1a2022e8f926d
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: f10de029b125ebbe429476db1dc2ead2dde08931f2fefcc15ea1f1eed6e1e44e9a4a73a847f8d1a0bdd1a2022e8f926d
[Log] Kernelcache
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: c9268591bf935836f8dff678f31f1e98bef32ecf6876dd81ccb0f04cec6c4e625bd388e2797a2b8155d5a23c98ab0413
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: c9268591bf935836f8dff678f31f1e98bef32ecf6876dd81ccb0f04cec6c4e625bd388e2797a2b8155d5a23c98ab0413
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: c9268591bf935836f8dff678f31f1e98bef32ecf6876dd81ccb0f04cec6c4e625bd388e2797a2b8155d5a23c98ab0413
[Log] RestoreRamdisk
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 8b967d3a7861e1699851ff1ffd2c299966909745084488599c2208102e4edd15e3e971a6ceaecbc0267757d39803c685
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 8b967d3a7861e1699851ff1ffd2c299966909745084488599c2208102e4edd15e3e971a6ceaecbc0267757d39803c685
/Users/lukee/Documents/daibutsuCFW/src/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 8b967d3a7861e1699851ff1ffd2c299966909745084488599c2208102e4edd15e3e971a6ceaecbc0267757d39803c685
[Log] Patch RestoreRamdisk
grew volume: 32000000
file: com.apple.springboard.plist (0644), size = 333
ignoring usr, type = 5
ignoring usr/bin, type = 5
file: usr/bin/toe (0755), size = 51792
file: usr/bin/gptfdisk (0755), size = 164368
symlink: usr/bin/infotocap (0777) -> tic
file: usr/bin/ncursesw5-config (0755), size = 4996
file: usr/bin/du (0755), size = 178736
file: usr/bin/df (0755), size = 143296
symlink: usr/bin/captoinfo (0777) -> tic
file: usr/bin/nano (0755), size = 209008
file: usr/bin/tset (0755), size = 52288
symlink: usr/bin/reset (0777) -> tset
file: usr/bin/date (0755), size = 140704
file: usr/bin/device_infos (0755), size = 75936
file: usr/bin/ncurses5-config (0755), size = 4995
file: usr/bin/clear (0755), size = 50336
file: usr/bin/tic (0755), size = 87856
file: usr/bin/infocmp (0755), size = 87584
file: usr/bin/scp (0755), size = 49008
file: usr/bin/tput (0755), size = 51712
file: usr/bin/hfs_resize (0755), size = 12960
symlink: usr/bin/rnano (0777) -> nano
directory: usr/libexec (0755)
file: usr/libexec/sftp-server (0755), size = 44240
directory: usr/include (0755)
file: usr/include/termcap.h (0644), size = 3476
file: usr/include/cursesp.h (0644), size = 8473
file: usr/include/cursesf.h (0644), size = 27630
file: usr/include/etip.h (0644), size = 9207
file: usr/include/form.h (0644), size = 17190
file: usr/include/cursesw.h (0644), size = 49264
file: usr/include/nc_tparm.h (0644), size = 3947
file: usr/include/unctrl.h (0644), size = 3005
file: usr/include/cursesapp.h (0644), size = 6582
file: usr/include/term.h (0644), size = 38205
file: usr/include/cursslk.h (0644), size = 7304
file: usr/include/panel.h (0644), size = 3770
symlink: usr/include/ncurses.h (0777) -> curses.h
file: usr/include/tic.h (0644), size = 12181
file: usr/include/eti.h (0644), size = 2891
file: usr/include/ncurses_dll.h (0644), size = 3898
file: usr/include/term_entry.h (0644), size = 7056
file: usr/include/menu.h (0644), size = 11845
file: usr/include/cursesm.h (0644), size = 19486
directory: usr/include/ncursesw (0755)
file: usr/include/ncursesw/termcap.h (0644), size = 3485
file: usr/include/ncursesw/cursesp.h (0644), size = 8491
file: usr/include/ncursesw/cursesf.h (0644), size = 27648
file: usr/include/ncursesw/etip.h (0644), size = 9225
file: usr/include/ncursesw/form.h (0644), size = 17208
file: usr/include/ncursesw/cursesw.h (0644), size = 49282
file: usr/include/ncursesw/nc_tparm.h (0644), size = 3947
file: usr/include/ncursesw/unctrl.h (0644), size = 3014
file: usr/include/ncursesw/cursesapp.h (0644), size = 6591
file: usr/include/ncursesw/term.h (0644), size = 38214
file: usr/include/ncursesw/cursslk.h (0644), size = 7313
file: usr/include/ncursesw/panel.h (0644), size = 3779
symlink: usr/include/ncursesw/ncurses.h (0777) -> curses.h
file: usr/include/ncursesw/tic.h (0644), size = 12190
file: usr/include/ncursesw/eti.h (0644), size = 2891
file: usr/include/ncursesw/ncurses_dll.h (0644), size = 3898
file: usr/include/ncursesw/term_entry.h (0644), size = 7065
file: usr/include/ncursesw/menu.h (0644), size = 11863
file: usr/include/ncursesw/cursesm.h (0644), size = 19522
file: usr/include/ncursesw/curses.h (0644), size = 80016
file: usr/include/curses.h (0644), size = 64745
ignoring usr/lib, type = 5
file: usr/lib/libpanelw.5.dylib (0755), size = 34288
symlink: usr/lib/libpanel.dylib (0777) -> libpanel.5.dylib
symlink: usr/lib/libformw.dylib (0777) -> libformw.5.dylib
symlink: usr/lib/libncursesw.dylib (0777) -> libncursesw.5.dylib
file: usr/lib/libncurses.5.dylib (0755), size = 335968
file: usr/lib/libiconv.2.dylib (0755), size = 1022528
file: usr/lib/libncurses.5.4.dylib (0755), size = 206416
file: usr/lib/libhistory.6.0.dylib (0755), size = 29984
file: usr/lib/libform.5.dylib (0755), size = 93728
symlink: usr/lib/libpanelw.dylib (0777) -> libpanelw.5.dylib
symlink: usr/lib/libmenuw.dylib (0777) -> libmenuw.5.dylib
symlink: usr/lib/libform.dylib (0777) -> libform.5.dylib
symlink: usr/lib/terminfo (0777) -> ../share/terminfo
file: usr/lib/libmenu.5.dylib (0755), size = 54480
file: usr/lib/libreadline.6.0.dylib (0755), size = 193920
file: usr/lib/libformw.5.dylib (0755), size = 77888
file: usr/lib/libpanel.5.dylib (0755), size = 34288
directory: usr/lib/_ncurses (0755)
symlink: usr/lib/_ncurses/libcurses.dylib (0777) -> libncurses.5.dylib
symlink: usr/lib/_ncurses/libncurses.dylib (0777) -> libncurses.5.dylib
file: usr/lib/libmenuw.5.dylib (0755), size = 54592
file: usr/lib/libcrypto.0.9.8.dylib (0755), size = 1604336
symlink: usr/lib/libmenu.dylib (0777) -> libmenu.5.dylib
file: usr/lib/libncursesw.5.dylib (0755), size = 390032
ignoring usr/share, type = 5
directory: usr/share/nano (0755)
file: usr/share/nano/asm.nanorc (0644), size = 783
file: usr/share/nano/ocaml.nanorc (0644), size = 791
file: usr/share/nano/ruby.nanorc (0644), size = 1475
file: usr/share/nano/java.nanorc (0644), size = 610
file: usr/share/nano/cmake.nanorc (0644), size = 828
file: usr/share/nano/debian.nanorc (0644), size = 680
file: usr/share/nano/perl.nanorc (0644), size = 1438
file: usr/share/nano/man.nanorc (0644), size = 264
file: usr/share/nano/pov.nanorc (0644), size = 682
file: usr/share/nano/objc.nanorc (0644), size = 1696
file: usr/share/nano/tcl.nanorc (0644), size = 2110
file: usr/share/nano/sh.nanorc (0644), size = 691
file: usr/share/nano/groff.nanorc (0644), size = 723
file: usr/share/nano/awk.nanorc (0644), size = 1504
file: usr/share/nano/gentoo.nanorc (0644), size = 3139
file: usr/share/nano/html.nanorc (0644), size = 124
file: usr/share/nano/mutt.nanorc (0644), size = 95
file: usr/share/nano/php.nanorc (0644), size = 687
file: usr/share/nano/xml.nanorc (0644), size = 260
file: usr/share/nano/mgp.nanorc (0644), size = 219
file: usr/share/nano/fortran.nanorc (0644), size = 2032
file: usr/share/nano/nanorc.nanorc (0644), size = 1110
file: usr/share/nano/c.nanorc (0644), size = 1514
file: usr/share/nano/makefile.nanorc (0644), size = 248
file: usr/share/nano/python.nanorc (0644), size = 527
file: usr/share/nano/css.nanorc (0644), size = 331
file: usr/share/nano/patch.nanorc (0644), size = 242
file: usr/share/nano/tex.nanorc (0644), size = 141
directory: usr/share/tabset (0755)
file: usr/share/tabset/vt300 (0644), size = 64
file: usr/share/tabset/std (0644), size = 135
file: usr/share/tabset/vt100 (0644), size = 160
file: usr/share/tabset/stdcrt (0644), size = 95
directory: usr/share/terminfo (0755)
symlink: usr/share/terminfo/61 (0777) -> a
symlink: usr/share/terminfo/67 (0777) -> g
directory: usr/share/terminfo/r (0755)
file: usr/share/terminfo/r/rxvt-xpm (0644), size = 2207
file: usr/share/terminfo/r/rxvt-16color (0644), size = 2479
file: usr/share/terminfo/r/rxvt-cygwin-native (0644), size = 2249
file: usr/share/terminfo/r/rxvt-88color (0644), size = 2405
file: usr/share/terminfo/r/rxvt-cygwin (0644), size = 2231
file: usr/share/terminfo/r/rxvt (0644), size = 2205
file: usr/share/terminfo/r/rxvt-color (0644), size = 2209
file: usr/share/terminfo/r/rxvt-256color (0644), size = 2407
file: usr/share/terminfo/r/rxvt-basic (0644), size = 2125
file: usr/share/terminfo/r/rxvt+pcfkeys (0644), size = 1240
directory: usr/share/terminfo/u (0755)
file: usr/share/terminfo/u/unknown (0644), size = 320
symlink: usr/share/terminfo/45 (0777) -> E
symlink: usr/share/terminfo/73 (0777) -> s
directory: usr/share/terminfo/g (0755)
file: usr/share/terminfo/g/gnome+pcfkeys (0644), size = 2075
file: usr/share/terminfo/g/gnome-rh72 (0644), size = 1606
file: usr/share/terminfo/g/gnome-rh80 (0644), size = 1641
file: usr/share/terminfo/g/gnome-fc5 (0644), size = 2943
file: usr/share/terminfo/g/gnome (0644), size = 3029
file: usr/share/terminfo/g/gnome-2007 (0644), size = 3011
file: usr/share/terminfo/g/gnome-2008 (0644), size = 3049
file: usr/share/terminfo/g/gnome-256color (0644), size = 3186
file: usr/share/terminfo/g/gnome-rh90 (0644), size = 2959
file: usr/share/terminfo/g/gnome-rh62 (0644), size = 1524
directory: usr/share/terminfo/s (0755)
file: usr/share/terminfo/s/screen-16color (0644), size = 1990
file: usr/share/terminfo/s/sun-17 (0644), size = 967
file: usr/share/terminfo/s/sun (0644), size = 997
file: usr/share/terminfo/s/screen-16color-bce-s (0644), size = 2030
file: usr/share/terminfo/s/screen-256color-bce (0644), size = 1840
file: usr/share/terminfo/s/sun-cgsix (0644), size = 972
file: usr/share/terminfo/s/screen.rxvt (0644), size = 2082
file: usr/share/terminfo/s/sun-type4 (0644), size = 1007
file: usr/share/terminfo/s/sun-e-s (0644), size = 1024
symlink: usr/share/terminfo/s/sun-cmd (0777) -> sun-c
file: usr/share/terminfo/s/screen.xterm-r6 (0644), size = 1503
file: usr/share/terminfo/s/sun-c (0644), size = 1027
file: usr/share/terminfo/s/screen-w (0644), size = 1566
file: usr/share/terminfo/s/screen.xterm-xfree86 (0644), size = 3263
symlink: usr/share/terminfo/s/sun-ss5 (0777) -> sun-cgsix
file: usr/share/terminfo/s/sun-e (0644), size = 1009
symlink: usr/share/terminfo/s/sun-nic (0777) -> sun-e
file: usr/share/terminfo/s/sun-34 (0644), size = 967
file: usr/share/terminfo/s/screen-16color-s (0644), size = 2020
file: usr/share/terminfo/s/screen.linux (0644), size = 1710
file: usr/share/terminfo/s/sun-12 (0644), size = 967
file: usr/share/terminfo/s/screen-256color-bce-s (0644), size = 1866
file: usr/share/terminfo/s/sun-24 (0644), size = 967
file: usr/share/terminfo/s/sun-48 (0644), size = 967
file: usr/share/terminfo/s/screen (0644), size = 1550
file: usr/share/terminfo/s/sun-il (0644), size = 997
file: usr/share/terminfo/s/screen-bce (0644), size = 1562
file: usr/share/terminfo/s/screen-256color-s (0644), size = 1856
file: usr/share/terminfo/s/screen.mlterm (0644), size = 2590
file: usr/share/terminfo/s/screen-s (0644), size = 1584
file: usr/share/terminfo/s/screen.teraterm (0644), size = 1548
file: usr/share/terminfo/s/screen-16color-bce (0644), size = 2002
file: usr/share/terminfo/s/sun-s (0644), size = 1012
file: usr/share/terminfo/s/sun-1 (0644), size = 987
file: usr/share/terminfo/s/sun-color (0644), size = 1378
symlink: usr/share/terminfo/s/screen.xterm-new (0777) -> screen.xterm-xfree86
file: usr/share/terminfo/s/screen-256color (0644), size = 1828
file: usr/share/terminfo/s/screen+fkeys (0644), size = 474
symlink: usr/share/terminfo/s/sun-s-e (0777) -> sun-e-s
symlink: usr/share/terminfo/75 (0777) -> u
directory: usr/share/terminfo/A (0755)
file: usr/share/terminfo/A/ansi+idl1 (0644), size = 138
file: usr/share/terminfo/A/ansi+idc (0644), size = 263
file: usr/share/terminfo/A/apple-soroc (0644), size = 382
file: usr/share/terminfo/A/apple-videx2 (0644), size = 452
file: usr/share/terminfo/A/apple-vm80 (0644), size = 203
file: usr/share/terminfo/A/apple-videx3 (0644), size = 364
symlink: usr/share/terminfo/A/ansi-mono (0777) -> ansi-m
file: usr/share/terminfo/A/ansi+pp (0644), size = 295
file: usr/share/terminfo/A/ansi+idl (0644), size = 270
file: usr/share/terminfo/A/ansi+csr (0644), size = 349
file: usr/share/terminfo/A/ansi-generic (0644), size = 733
file: usr/share/terminfo/A/ansi+sgr (0644), size = 368
file: usr/share/terminfo/A/ansi+cup (0644), size = 69
file: usr/share/terminfo/A/ansi-emx (0644), size = 1582
file: usr/share/terminfo/A/ansi+sgrbold (0644), size = 463
file: usr/share/terminfo/A/ansi+sgrul (0644), size = 143
file: usr/share/terminfo/A/ansi+sgrso (0644), size = 139
file: usr/share/terminfo/A/ansi (0644), size = 1481
file: usr/share/terminfo/A/ansi-color-2-emx (0644), size = 1580
file: usr/share/terminfo/A/ansi-color-3-emx (0644), size = 1577
file: usr/share/terminfo/A/ansi-mtabs (0644), size = 444
file: usr/share/terminfo/A/ansi+sgrdim (0644), size = 463
file: usr/share/terminfo/A/apple-uterm-vb (0644), size = 498
file: usr/share/terminfo/A/apple-ae (0644), size = 421
file: usr/share/terminfo/A/ansi+erase (0644), size = 55
file: usr/share/terminfo/A/apple-uterm (0644), size = 438
file: usr/share/terminfo/A/ansi+rep (0644), size = 286
file: usr/share/terminfo/A/ansi+tabs (0644), size = 306
file: usr/share/terminfo/A/ansi+local1 (0644), size = 80
file: usr/share/terminfo/A/ansi+rca (0644), size = 308
file: usr/share/terminfo/A/ansi-mini (0644), size = 418
file: usr/share/terminfo/A/ansi+enq (0644), size = 685
file: usr/share/terminfo/A/ansi-nt (0644), size = 476
file: usr/share/terminfo/A/ansi-mr (0644), size = 377
file: usr/share/terminfo/A/ansi.sys (0644), size = 1257
file: usr/share/terminfo/A/ansi.sys-old (0644), size = 1255
file: usr/share/terminfo/A/apple-videx (0644), size = 466
file: usr/share/terminfo/A/ansi.sysk (0644), size = 1518
file: usr/share/terminfo/A/apple-80 (0644), size = 207
symlink: usr/share/terminfo/A/Apple_Terminal (0777) -> ../n/nsterm
file: usr/share/terminfo/A/ansi+inittabs (0644), size = 314
file: usr/share/terminfo/A/ansi+local (0644), size = 306
file: usr/share/terminfo/A/ansi-m (0644), size = 1370
file: usr/share/terminfo/A/ansi+arrows (0644), size = 222
symlink: usr/share/terminfo/72 (0777) -> r
symlink: usr/share/terminfo/6b (0777) -> k
symlink: usr/share/terminfo/65 (0777) -> e
symlink: usr/share/terminfo/6d (0777) -> m
symlink: usr/share/terminfo/6c (0777) -> l
symlink: usr/share/terminfo/63 (0777) -> c
symlink: usr/share/terminfo/64 (0777) -> d
directory: usr/share/terminfo/m (0755)
file: usr/share/terminfo/m/mach-color (0644), size = 1095
file: usr/share/terminfo/m/mach (0644), size = 617
file: usr/share/terminfo/m/mach-bold (0644), size = 652
symlink: usr/share/terminfo/41 (0777) -> A
directory: usr/share/terminfo/c (0755)
symlink: usr/share/terminfo/c/cons25-koi8r-m (0777) -> cons25r-m
file: usr/share/terminfo/c/cons25-m (0644), size = 1478
symlink: usr/share/terminfo/c/cons25-iso-m (0777) -> cons25l1-m
symlink: usr/share/terminfo/c/cons25-koi8-r (0777) -> cons25r
symlink: usr/share/terminfo/c/cons25-iso8859 (0777) -> cons25l1
file: usr/share/terminfo/c/cons25 (0644), size = 1502
file: usr/share/terminfo/c/cygwin (0644), size = 1529
symlink: usr/share/terminfo/70 (0777) -> p
directory: usr/share/terminfo/d (0755)
file: usr/share/terminfo/d/dumb (0644), size = 308
directory: usr/share/terminfo/v (0755)
file: usr/share/terminfo/v/vt102 (0644), size = 1188
file: usr/share/terminfo/v/vt100-putty (0644), size = 1199
file: usr/share/terminfo/v/vt100-nav-w (0644), size = 1093
file: usr/share/terminfo/v/vt100-s (0644), size = 1272
file: usr/share/terminfo/v/vt102-w (0644), size = 1210
file: usr/share/terminfo/v/vt102-nsgr (0644), size = 1167
symlink: usr/share/terminfo/v/vt100+ (0777) -> ../m/ms-vt100+
file: usr/share/terminfo/v/vt220+keypad (0644), size = 506
file: usr/share/terminfo/v/vt220 (0644), size = 1279
file: usr/share/terminfo/v/vt100-vb (0644), size = 1207
file: usr/share/terminfo/v/vt220-nam (0644), size = 1345
file: usr/share/terminfo/v/vt100+enq (0644), size = 682
file: usr/share/terminfo/v/vt220-w (0644), size = 1303
file: usr/share/terminfo/v/vt102+enq (0644), size = 680
symlink: usr/share/terminfo/v/vt100-s-top (0777) -> vt100-s
file: usr/share/terminfo/v/vt220-8bit (0644), size = 1249
symlink: usr/share/terminfo/v/vt100-nam-w (0777) -> vt100-w-nam
symlink: usr/share/terminfo/v/vt220-js (0777) -> vt200-js
file: usr/share/terminfo/v/vt100+fnkeys (0644), size = 450
file: usr/share/terminfo/v/vt100-w (0644), size = 1203
file: usr/share/terminfo/v/vt52 (0644), size = 466
file: usr/share/terminfo/v/vt100 (0644), size = 1194
symlink: usr/share/terminfo/v/vt100-w-nav (0777) -> vt100-nav-w
symlink: usr/share/terminfo/v/vt100-bot-s (0777) -> vt100-s-bot
file: usr/share/terminfo/v/vt100-w-nam (0644), size = 1221
file: usr/share/terminfo/v/vt100+pfkeys (0644), size = 422
symlink: usr/share/terminfo/v/vt100-top-s (0777) -> vt100-s
file: usr/share/terminfo/v/vt100-nav (0644), size = 1059
symlink: usr/share/terminfo/v/vt100-nam (0777) -> vt100nam
symlink: usr/share/terminfo/v/vt100-bm-o (0777) -> ../n/nwp512-o
symlink: usr/share/terminfo/v/vt220-8 (0777) -> vt220-8bit
file: usr/share/terminfo/v/vt220-old (0644), size = 1475
file: usr/share/terminfo/v/vt100+keypad (0644), size = 368
symlink: usr/share/terminfo/v/vt100-am (0777) -> vt100
file: usr/share/terminfo/v/vt100-s-bot (0644), size = 1256
symlink: usr/share/terminfo/v/vt100-w-am (0777) -> vt100-w
symlink: usr/share/terminfo/v/vt100-bm (0777) -> ../n/nwp512
directory: usr/share/terminfo/x (0755)
file: usr/share/terminfo/x/xterm-256color (0644), size = 3322
file: usr/share/terminfo/x/xterm+r6f2 (0644), size = 1094
file: usr/share/terminfo/x/xterm-color (0644), size = 1551
file: usr/share/terminfo/x/xterm-16color (0644), size = 3402
file: usr/share/terminfo/x/xterm-xf86-v40 (0644), size = 2207
file: usr/share/terminfo/x/xterm+88color (0644), size = 1051
file: usr/share/terminfo/x/xterm+pce2 (0644), size = 1091
file: usr/share/terminfo/x/xterm+app (0644), size = 422
file: usr/share/terminfo/x/xterm-8bit (0644), size = 1903
file: usr/share/terminfo/x/xterm-xi (0644), size = 1981
file: usr/share/terminfo/x/xterm+pcc0 (0644), size = 1153
file: usr/share/terminfo/x/xterm+pcf2 (0644), size = 1049
file: usr/share/terminfo/x/xterm (0644), size = 3258
file: usr/share/terminfo/x/xterm+noapp (0644), size = 420
file: usr/share/terminfo/x/xterm-basic (0644), size = 1799
file: usr/share/terminfo/x/xterm+pcc1 (0644), size = 824
file: usr/share/terminfo/x/xterm-r6 (0644), size = 1501
file: usr/share/terminfo/x/xterm-88color (0644), size = 3320
file: usr/share/terminfo/x/xterm-xf86-v333 (0644), size = 2001
file: usr/share/terminfo/x/xterm-xfree86 (0644), size = 2235
file: usr/share/terminfo/x/xterm-vt220 (0644), size = 1983
file: usr/share/terminfo/x/xterm-hp (0644), size = 1845
file: usr/share/terminfo/x/xterm-new (0644), size = 3252
file: usr/share/terminfo/x/xterm-noapp (0644), size = 3232
file: usr/share/terminfo/x/xterm+pc+edit (0644), size = 404
file: usr/share/terminfo/x/xterm-1003 (0644), size = 3269
file: usr/share/terminfo/x/xterm+sl-twm (0644), size = 3296
file: usr/share/terminfo/x/xterm-pcolor (0644), size = 3324
file: usr/share/terminfo/x/xterm-1002 (0644), size = 3269
file: usr/share/terminfo/x/xterm-sco (0644), size = 2021
file: usr/share/terminfo/x/xterm+vt+edit (0644), size = 464
file: usr/share/terminfo/x/xterm-xf86-v43 (0644), size = 2221
file: usr/share/terminfo/x/xterm-xf86-v44 (0644), size = 2255
file: usr/share/terminfo/x/xterm+pcc3 (0644), size = 902
file: usr/share/terminfo/x/xterm-24 (0644), size = 1525
symlink: usr/share/terminfo/x/xterm-old (0777) -> xterm-r6
file: usr/share/terminfo/x/xterm+pcf0 (0644), size = 1011
file: usr/share/terminfo/x/xterm+256color (0644), size = 1053
file: usr/share/terminfo/x/xterm-r5 (0644), size = 1301
file: usr/share/terminfo/x/xterm+pcc2 (0644), size = 1205
file: usr/share/terminfo/x/xterm+pcfkeys (0644), size = 2069
file: usr/share/terminfo/x/xterm+sl (0644), size = 3268
file: usr/share/terminfo/x/xterm+edit (0644), size = 418
file: usr/share/terminfo/x/xterm-sun (0644), size = 2105
file: usr/share/terminfo/x/xterm-bold (0644), size = 1535
file: usr/share/terminfo/x/xterm-nic (0644), size = 3268
file: usr/share/terminfo/x/xterm-vt52 (0644), size = 484
file: usr/share/terminfo/x/xterm-xf86-v32 (0644), size = 2001
file: usr/share/terminfo/x/xterm-xf86-v33 (0644), size = 1991
directory: usr/share/terminfo/E (0755)
file: usr/share/terminfo/E/Eterm-88color (0644), size = 2409
file: usr/share/terminfo/E/eterm (0644), size = 842
file: usr/share/terminfo/E/Eterm-256color (0644), size = 2417
symlink: usr/share/terminfo/E/Eterm-color (0777) -> Eterm
symlink: usr/share/terminfo/76 (0777) -> v
directory: usr/share/terminfo/k (0755)
file: usr/share/terminfo/k/konsole-vt100 (0644), size = 1759
file: usr/share/terminfo/k/konsole-base (0644), size = 1655
file: usr/share/terminfo/k/konsole-vt420pc (0644), size = 1753
file: usr/share/terminfo/k/konsole (0644), size = 2419
file: usr/share/terminfo/k/konsole-solaris (0644), size = 1759
file: usr/share/terminfo/k/konsole-linux (0644), size = 1749
file: usr/share/terminfo/k/konsole-16color (0644), size = 2838
file: usr/share/terminfo/k/konsole+pcfkeys (0644), size = 1413
file: usr/share/terminfo/k/konsole-xf3x (0644), size = 1769
file: usr/share/terminfo/k/konsole-256color (0644), size = 2692
file: usr/share/terminfo/k/konsole-xf4x (0644), size = 2459
directory: usr/share/terminfo/l (0755)
file: usr/share/terminfo/l/linux-lat (0644), size = 1782
file: usr/share/terminfo/l/linux-koi8r (0644), size = 1774
file: usr/share/terminfo/l/linux-vt (0644), size = 1652
file: usr/share/terminfo/l/linux-basic (0644), size = 1626
file: usr/share/terminfo/l/linux (0644), size = 1740
file: usr/share/terminfo/l/linux-c-nc (0644), size = 1726
file: usr/share/terminfo/l/linux-c (0644), size = 2080
file: usr/share/terminfo/l/linux-m (0644), size = 1730
file: usr/share/terminfo/l/linux-nic (0644), size = 1772
file: usr/share/terminfo/l/linux-koi8 (0644), size = 1768
symlink: usr/share/terminfo/78 (0777) -> x
directory: usr/share/terminfo/p (0755)
file: usr/share/terminfo/p/pcansi-43-m (0644), size = 735
file: usr/share/terminfo/p/putty-vt100 (0644), size = 1957
file: usr/share/terminfo/p/putty (0644), size = 1977
file: usr/share/terminfo/p/pcansi-43 (0644), size = 1204
file: usr/share/terminfo/p/pcansi-33 (0644), size = 1204
file: usr/share/terminfo/p/pcansi-25-m (0644), size = 737
file: usr/share/terminfo/p/pcansi-m (0644), size = 741
file: usr/share/terminfo/p/putty-256color (0644), size = 2021
symlink: usr/share/terminfo/p/pcansi-mono (0777) -> pcansi-m
file: usr/share/terminfo/p/pcansi (0644), size = 1198
file: usr/share/terminfo/p/pcansi-25 (0644), size = 1204
file: usr/share/terminfo/p/pcansi-33-m (0644), size = 737
ignoring bin, type = 5
file: bin/mount.sh (0755), size = 1366
file: bin/bash (0755), size = 546768
symlink: bin/sh (0755) -> bash
file: bin/dd (0755), size = 124896
file: bin/ls (0755), size = 152096
file: bin/cp (0755), size = 162560
file: bin/chown (0755), size = 125616
file: bin/chmod (0755), size = 125168
file: bin/tar (0755), size = 430304
ignoring sbin, type = 5
file: sbin/sshd (0755), size = 722848
ignoring etc, type = 5
file: etc/nanorc (0644), size = 8728
directory: etc/profile.d (0755)
file: etc/profile.d/nano.sh (0755), size = 19
file: mktar.sh (0755), size = 204
ignoring private, type = 5
ignoring private/etc, type = 5
replacing private/etc/rc.boot
file: private/etc/rc.boot (0755), size = 369
directory: private/etc/ssh (0700)
file: private/etc/ssh/ssh_host_rsa_key (0600), size = 1675
file: private/etc/ssh/ssh_host_dsa_key.pub (0644), size = 590
file: private/etc/ssh/sshd_config (0644), size = 3227
file: private/etc/ssh/ssh_host_key.pub (0644), size = 627
file: private/etc/ssh/ssh_config (0644), size = 1526
file: private/etc/ssh/ssh_host_dsa_key (0600), size = 668
file: private/etc/ssh/ssh_host_rsa_key.pub (0644), size = 382
file: private/etc/ssh/moduli (0644), size = 125811
file: private/etc/ssh/ssh_host_key (0600), size = 963
ignoring private/var, type = 5
directory: private/var/root (0700)
file: private/var/root/.profile (0644), size = 391
[Log] Patch iBSS
main: Starting...
main: iBoot-1537 inputted.
patch_rsa_check: Entering...
find_bl_verify_shsh_5_6_7: Entering...
find_bl_verify_shsh_5_6_7: Found MOVW instruction at 0x4d12
find_bl_verify_shsh_5_6_7: Found BL verify_shsh at 0x50a0
find_bl_verify_shsh_5_6_7: Leaving...
patch_rsa_check: Patching BL verify_shsh at 0x50a0...
patch_rsa_check: Leaving...
main: Writing out patched file to iBSS.patched...
main: Quitting...
[Log] Patch iBEC
main: Starting...
main: iBoot-1537 inputted.
patch_boot_args: Entering...
patch_boot_args: Default boot-args string is at 0x3a482
patch_boot_args: boot-args xref is at 0x19cc4
patch_boot_args: Relocating boot-args string...
patch_boot_args: "Reliance on this certificate" string found at 0x406b8
patch_boot_args: Pointing default boot-args xref to 0x5ff406b8...
patch_boot_args: Applying custom boot-args "rd=md0 -v amfi=0xff amfi_get_out_of_my_way=1 cs_enforcement_disable=1 pio-error=0"
patch_boot_args: Found LDR R1, =boot_args at 0x19a72
patch_boot_args: Found IT instruction at 0x19a78
patch_boot_args: Found CMP Rx, #0 at 0x19a74
patch_boot_args: Found MOV R6, R1 at 0x19a7a
patch_boot_args: Found LDR R6, =null_str at 0x19a76
patch_boot_args: Pointing LDR R6, =null_str to boot-args xref...
patch_boot_args: Leaving...
patch_debug_enabled: Entering...
find_dtre_get_value_bl_insn: Entering...
find_dtre_get_value_bl_insn: debug-enabled string is at 0x3a027
find_dtre_get_value_bl_insn: "debug-enabled" xref is at 0x196bc
find_dtre_get_value_bl_insn: Found LDR R0, ="debug-enabled" at 0x18da2
find_dtre_get_value_bl_insn: Found BL instruction at 0x18dba
find_dtre_get_value_bl_insn: Leaving...
patch_debug_enabled: Patching BL insn at 0x18dba...
patch_debug_enabled: Leaving...
patch_rsa_check: Entering...
find_bl_verify_shsh_5_6_7: Entering...
find_bl_verify_shsh_5_6_7: Found MOVW instruction at 0x17da6
find_bl_verify_shsh_5_6_7: Found BL verify_shsh at 0x183f0
find_bl_verify_shsh_5_6_7: Leaving...
patch_rsa_check: Patching BL verify_shsh at 0x183f0...
patch_rsa_check: Leaving...
main: Writing out patched file to iBEC.patched...
main: Quitting...

• DFU Mode Helper - Get ready to enter DFU mode.

• If you already know how to enter DFU mode, you may do so right now before continuing.
  [Input] Select Y to continue, N to exit recovery mode (Y/n):
  -> Yes
  No

• Get ready...
  3 2 1

• Hold TOP and HOME buttons.
  8 7 6 5 4 3 2 1

• Release TOP button and keep holding HOME button.
  8 7 6 5 4 3 2 1
  [Log] Found device in DFU mode.
  [Log] Placing device to pwnDFU mode using ipwnder_lite

• If pwning fails and gets stuck, you can press Ctrl+C to cancel, then re-enter DFU and retry.
  [main] enabled: verbose log
  [main] Waiting for device in DFU mode...
  [io_get_serial] Found serial number!
  [main] CONNECTED
  [main] CPID: 0x8930, BDID: 0x08, STRG: [iBoot-574.4]
  ** exploiting with limera1n
  [limera1n] reconnecting
  [io_reset] ResetDevice: 0
  [io_reset] USBDeviceReEnumerate: 0
  [limera1n] sending exploit payload
  [limera1n] 0, 1392
  [limera1n] sending fake data
  [limera1n] 0, 1
  [limera1n] e0004051, 0
  [limera1n] executing exploit
  [limera1n] e0004051, 0
  [limera1n] reconnecting
  [io_reset] ResetDevice: 0
  [io_reset] USBDeviceReEnumerate: 0
  [limera1n] 0, 0
  [limera1n] 0, 6
  [limera1n] 0, 6
  [limera1n] 0, 6
  [limera1n] exploit sent
  [limera1n] reconnecting
  [io_reset] ResetDevice: 0
  [io_reset] USBDeviceReEnumerate: 0
  [io_get_serial] Found serial number!
  [limera1n] pwned!
  [Log] gaster reset
  usb_timeout: 5
  usb_abort_timeout_min: 0
  [IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
  Found the USB handle.
  [Log] Checking for device
  [Log] Found device in pwned DFU mode.

• Pwned: limera1n
  [Log] Sending iBSS...
  [==================================================] 100.0%
  [Log] Sending iBEC...
  [==================================================] 100.0%
  [Log] Finding device in Recovery mode...
  [Log] Found device in Recovery mode.
  [Log] Sending ramdisk...
  [==================================================] 100.0%
  [Log] Running ramdisk
  [Log] Sending DeviceTree...
  [==================================================] 100.0%
  [Log] Running devicetree
  [Log] Sending KernelCache...
  [==================================================] 100.0%
  [Log] Booting, please wait...
  [Log] Running iproxy for SSH...
  [Log] iproxy PID: 36370
  Creating listening port 6414 for device port 22
  waiting for connection
  [Log] Waiting for device...

• You may need to unplug and replug your device.
  New connection for 6414->22, fd = 4
  waiting for connection
  Requesting connection to USB device handle 184 (serial: 75e876e63feb08c99cae0bbd07099a05bdea242a), port 22
  [Log] Sending commands for setting NVRAM variables...
  New connection for 6414->22, fd = 4
  waiting for connection
  Requesting connection to USB device handle 184 (serial: 75e876e63feb08c99cae0bbd07099a05bdea242a), port 22
  New connection for 6414->22, fd = 4
  waiting for connection
  Requesting connection to USB device handle 184 (serial: 75e876e63feb08c99cae0bbd07099a05bdea242a), port 22
  [Log] Done
  New connection for 6414->22, fd = 4
  waiting for connection
  Requesting connection to USB device handle 184 (serial: 75e876e63feb08c99cae0bbd07099a05bdea242a), port 22
  [Log] Done. Your device should reboot now

• Save the terminal output now if needed. (macOS: Cmd+S, Linux: Ctrl+Shift+S)

• Legacy iOS Kit v26.07.18 (0ad7d06)

• Platform: macos (iMac21,1 - Tahoe 26.3.1 - arm64)

this is the enabling exploit log, just tried restoring to 6.1.5 again same issue

[Jefferyat]

The 8GB Models are the ones that aren't working, it works on the 16GB/32GB models just fine to 5.x and 4.3.x, it was the 8GB models to any version iOS 4, iOS 5 etc

[Jefferyat]

No iPod Touch 4 Restores to iOS 4.1/4.2.1 work regardless of the model being 8GB or 32GB - they send device to recovery mode after restore and even after enabling the exploit it still doesn't work i had tested it

[EfazDev]

Got the same issue on same model, iPod Touch 4th gen, black, 8GB, tried iOS 4.3.5 and 5.1.1. Noticed that booting in tethered boot (or Just Boot) works and boots to iOS while untethered doesn't work.

[LukeZGD]

my test touch 4 is 8gb and i was able to restore to 4.3.5, 5.1.1, and 6.1.5 just fine. not sure about 4.1 and 4.2.1 i think those are just broken right now

[Jefferyat]

its every time i restore to iOS 6.1.5 on a 8GB iPod Touch 4 manufactured 2nd half 2012, it goes into recovery mode after the restore and then i enable the exploit and then it enters recovery mode after that

[LukeZGD]

mine is a 1st half 2012 and it works fine so yea idk if it has something to do with manufacture date or capacity or whatever. there might be something else that prevents it from working and right now i dont really know how to help anyone having this issue

[EfazDev]

mine is like on July 2011 so should support 4.3.5? also, tried the ios 7 thing also and it also can't boot untethered (with/without the exploit enabled) so unsure what happened.

[Pingzi610]

@LukeZGD I changed reboot4 for iPod4,1 in my fork of kit. Now it can directly get into system.

[LukeZGD]

@LukeZGD I changed reboot4 for iPod4,1 in my fork of kit. Now it can directly get into system.

what changes did you make?

[Pingzi610]

@LukeZGD I changed reboot4 for iPod4,1 in my fork of kit. Now it can directly get into system.

what changes did you make?

Directly write iPod4,1 exploit into nand. The old reboot4 writes iPhone3,1 11D257 exploit.

[LukeZGD]

yeah the base reboot4 does that, but the script modifies the reboot4 with the correct exploit