Which iOS Firmware File to Download based on your iPad Model Based on the model number of your iPad, you will be able to identify which iOS firmware file you need to download. You can find model number on the iPad’s back cover as highlighted below.
Original source: https://github.com/0xced/iOS-Artwork-Extractor/wiki/Extracting-more-artwork
You can extract even more artwork if you decrypt and mount an iOS firmware (.ipsw file).
Requirements
- Python 3.2 (required by ipsw_decrypt.py)
- VFDecrypt (required by ipsw_decrypt.py)
Make sure to install thevfdecrypt
binary somewhere in your PATH or use the-d
option of the theipsw_decrypt.py
script.
VFDecrypt Usage:
How to decrypt and mount an iOS firmware
- Download an iPhone or iPad firmware that matches your simulator version and make sure that there is a VFDecrypt Key by checking the corresponding Build column. For beta versions, check the VFDecrypt Keys page instead.
System Firmware Image ipsw
Version | Build | Codename | Baseband | Release Date | IPSW Download URL | SHA1 Hash | File Size |
---|---|---|---|---|---|---|---|
9.0 | 13A343 | Monarch | 1.00.05 | 16 Sep 2015 | iPhone8,2_9.0_13A343_Restore.ipsw | 62c84322d95913ddcee8337c0998988c6acd330e | 2,369,374,167 |
9.0.1 | 13A405 | Monarch | 1.00.05 | 24 Sep 2015 | iPhone8,2_9.0.1_13A405_Restore.ipsw | c13f78d5967632732841fcae9840bfd37d09b5af | 2,368,629,853 |
9.0.2 | 13A452 | Monarch | 1.02.00 | 30 Sep 2015 | iPhone8,2_9.0.2_13A452_Restore.ipsw | 46b922b4755fcb66e9f33dd491002e120b88908a | 2,369,099,889 |
9.1 | 13B143 | Boulder | 1.14.00 | 21 Oct 2015 | iPhone8,2_9.1_13B143_Restore.ipsw | 634807da8e723d688419b56f14b0913aee317760 | 2,383,904,492 |
9.2 | 13C75 | Castlerock | 1.23.00 | 8 Dec 2015 | iPhone8,2_9.2_13C75_Restore.ipsw | f89ea6f273dde92167c408decdb5db3daa756a19 | 2,382,945,535 |
Backup Firmware Image
- Start iTunes on your computer, and then connect your iPhone to your computer using its sync cable.
- Click the button for your device near the upper-right corner of the iTunes screen, and then click the 'Summary' tab if it isn't already selected.
- Select 'This Computer' in the Backups section, and then click 'Back Up Now.' ITunes backs up your entire iPhone, including iOS, to the hard drive.
- Confirm that the backup was successful by selecting 'Preferences' from the main iTunes menu, clicking the 'Devices' tab, and then making sure that the time and date next to your iPhone's entry correspond to when you finished the backup.
- Disconnect your iPhone from your computer.
Decrypting with ipsw_decrypt.py
- Run the
ipsw_decrypt.py
script on the firmware you downloaded or backed up.The output should look like this: - Go into the
iPhone 4, 5.1 (9B176)
folder or whatever folder was created depending on the firmware you chose. - Open the biggest file ending with
.decrypted.dmg
in order to mount the disk image. In this example:038-1768-165.decrypted.dmg
- Run iOS Artwork Extractor. If the mounted iOS firmware version matches your simulator version, then you will discover much more artwork.
iOS 8 firmware
VFDecrypt Keys are not widely available for iOS 8. You will have to use
vfdecrypt
directly on the unzipped iPhone 4S ipsw with the key provided by @iH8sn0w:@Jato_BZ which keys? Or just rootfs like the 4S one? 5059b2da95c93f754ce4a701cf6564877dfee899ad884d78f3403dcec7bbd6fe6d3079a8
Before the redsn0w jailbreak was public you could see a video on iH8snow`s twitter blog at http://www.twitvid.com/UI21P showing him modifying the root_fs.dmg from an .ipsw file:All the guides you find on the net are not complete, missing a few important steps and, most important, the reason why it cant`t be done this way. Complete Guide:
![File File](/uploads/1/2/5/8/125861616/554687508.png)
- Rename your .ipsw file to .zip and unzip it
- Download vfdecrypt here: vfdecrypt.zip
- Place the .dmg you want to decrypt in the vfdecrypt folder
- Open Terminal, cd (switch) to the vfdecrypt folder by typing in 'cd'{space} and dragging the vfdecrypt folfer into the Terminal, press enter
- Type in './vfdecrypt -i {dmg) -o rootfs.dmg -k {key}' replace {dmg} with the filename of the .dmg that you want to decrypt and {key} with the key for the firmware you want to edit. Firmware keys can be found here. Press enter
- Your decrypted .dmg will be created in the vfdecrypt folder under the name 'rootfs.dmg'
- Right click on it and open it with hdd utility. Click on 'convert' and choose 'read/write' and 'without' in the encryption tab.
That`s it. Save the .dmg to a new file and mount it. Your are now able to browse and edit the .dmg (for example edit the SystemVersion.plist like shown in the video). The problem and the reason why this guide can`t be used to create custom .ipsw files is that you can not re-encrypt .dmg files with the same key you used to decrypt them after changing something! Your created .ipsw files will be corrupted.
To finish the custom .ipsw you have to be able to re-encrypt the .dmg with the same key which is not possible and to add it back to the .ipsw (.zip) without changing the checksum which is impossible too (iH8sn0w posted a few days after the video that you also need to patch a few system files to make this work.)