Sundance 10A316

This article discusses software internally used by Apple. Acquiring a copy without Apple's consent is illegal and may result in being scammed. Engaging in illegal activity is not condoned. This information is provided for educational purposes only.

Background

This is an internal build of iOS 6.0 which runs SwitchBoard. A dump of its filesystem weighs in at around 4.1 gigabytes. This build also contains internal firmware for Haywire.

Kernels for Apple's A6X, A6, A5X, A5 and A4 processors, as well as the iPod Touch 3G and iPhone 3GS, are included. Interestingly, there is also a kernel file for an unused processor type - s5l8740x.

Haywire Firmware Findings

In /var/mobile/Library/Assets, you will find a folder containing the name haywire. Inside, you'll find multiple folders seemingly used for restoring. When looking in these folders, you'll find the codenames B137 and B135, with encrypted development components for each, as well as an encrypted ramdisk, with no known keys. They also have iBSS, DeviceTree, and Kernelcaches, but nothing more. Upon further exploration, the heavy lifting is done by a modified version of PurpleRestore built into /System/Library/AccessoryUpdaterBundles/Haywire.bundle. A form of this bundle can also be found in certain production firmwares in the same directory.

iPhone 5 running 10A316

Applications

After booting up, SwitchBoard.app lets you choose from a slew of apps. They are:

• BatterySet (hidden)
• BurnIn (hidden)
• GrapeCal
• LCDMura
• LcdUTest
• LCMFlicker
• Operator
• QRCode
• WiPASmini
• ThermalDOE
• Reliability