Editing Talk:IDPS

Jump to navigation Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
= Experimental table for frontpage with bytes, bits, labels, and examples =
<pre>0x00, 0x00, 0x00, 0x01, 0x00, 0x81, 0x00, 0x01,
{| class="wikitable" style="text-align:center; font-size:1em"
0x03, 0xFF, 0xFF, 0xFF, 0x18, 0x43, 0xC1, 0x4D
! Magic !! Company !! [[Product Code]] !! [[Product Sub Code]] !! colspan="2" | Factory Code + PS Flags !! Serial number !! Unknown ID
|-
| style="border-right:0px" | 00 00 || style="border-left:0px; border-right:0px" | 00 01 || style="border-left:0px; border-right:0px" | 00 89 || style="border-left:0px; border-right:0px" | 00 0B || colspan="2" style="border-left:0px; border-right:0px" | 14 || style="border-left:0px; border-right:0px" | 00 EF DD || style="border-left:0px" | CA 25 52 66
|-
| style="border-right:0px" | 00 00 || style="border-left:0px; border-right:0px" | 00 01 || style="border-left:0px; border-right:0px" | 00 89 || style="border-left:0px; border-right:0px" | 00 0B ||  000101 || 00 || style="border-left:0px; border-right:0px" | 00 EF DD || style="border-left:0px" | CA 25 52 66
|}


= IDPS Examples =
0x00, 0x00, 0x00, 0x01, 0x00, 0x85, 0x00, 0x0A,
0x14, 0x05, 0x67, 0xA0, 0x79, 0x37, 0xDC, 0x17


The reason of why ordering the examples this way is because Product Code and Product Sub Code are known, and Chassis Check is the only thing left we can deduce from the examples...
00000000  00 00 00 01 00 89 00 0B 14 00 EF DD CA 25 52 66</pre>


== Full ==
You’re probably wondering: “What the hell is this sequence of bytes?”. This is the IDPS, a sequence of bytes which determine console type. This structure is relatively undocumented until now, anyway. The IDPS is contained in EID0. EID0 is on the console internal flash as the file eEID and has multiple sections. I had made a splitter application to make your life easier a long time ago. Now, EID is decrypted by metldr, and is passed over to the isolated loader, which may pass it to a self. We can see this in graf_chokolo’s original payload. The IDPS is also used in various other parts of the system which could be of interest to you, but I will not discuss those right now. The IDPS itself, isn’t decrypted.


{| class="wikitable sortable"
The IDPS contains your target ID, motherboard? and BD? revision. The IDPS shown at the beginning of this article is the dummy IDPS, the one that’s used when your IDPS fails to be decrypted. That IDPS belongs to a DECR-1000A. The one below belongs to a European PS3, and the one below that belongs to a Australian/NZ PS3.
! IDPS !! 6th<br />byte !! [[Product Code]] !! 8th<br />byte !! [[Product Sub Code]] !! Chassis Check !! Notes
|- bgcolor="#CCCCCC"
| &nbsp;<code>00 00 00 01 00 81 00 01 03 FF FF FF 18 43 C1 4D</code>&nbsp; || {{TID81}} || 0x01 || [[DECR-1000|DECR-1000(A/J)]] / [[DEH-Z1010]] ([[TMU-520]]) || 03 FF || Static Dummy IDPS
|-
| &nbsp;<code>00 00 00 01 00 83 04 00 03 FF FF FF D4 16 F2 BB</code>&nbsp; || {{TID83}} || 0x00 || 04  00  || 03 FF  || TestBench IDPS
|-
| &nbsp;<code>00 00 00 01 00 84 00 01 04 00 F3 44 AC 4F 8D 2F</code>&nbsp; || {{TID84}} || {{HWID01}} || 04 00 (1) ||
|-
| &nbsp;<code>00 00 00 01 00 8A 00 01 10 00 52 BC C7 11 6D B2</code>&nbsp; || {{TID8A}} || {{HWID01}} || 10 00 (4) ||
|-
| &nbsp;<code>00 00 00 01 00 84 00 01 10 19 15 0C 45 9F 1C 2A</code>&nbsp; || {{TID84}} || {{HWID01}} || 10 19 (4) ||
|-
| &nbsp;<code>00 00 00 01 00 84 00 01 10 1B 23 A2 EA C6 4D D0</code>&nbsp; || {{TID84}} || {{HWID01}} || 10 1B (4) || 
|- bgcolor="#CCCCCC"
| colspan="7" |
|-
| &nbsp;<code>00 00 00 01 00 84 00 02 10 01 15 ED DE D8 06 8B</code>&nbsp; || {{TID84}} || {{HWID02}} || 10 01 (4) ||
|- bgcolor="#CCCCCC"
| colspan="7" |
|-
| &nbsp;<code>00 00 00 01 00 85 00 03 10 00 3D F9 65 97 B6 EA</code>&nbsp; || {{TID85}} || {{HWID03}} || 10 00 (4) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 03 10 11 62 95 56 FF DB FD</code>&nbsp; || {{TID85}} || {{HWID03}} || 10 11 (4) ||
|- bgcolor="#CCCCCC"
| colspan="7" |
|-
| &nbsp;<code>00 00 00 01 00 A0 00 04 04 00 04 1B 13 AB 46 25</code>&nbsp; || {{TIDA0}} || 0x04 ||  [[GECR-1100]] ([[COK-00x#COK-002|COK-002]]) || 04 00 (1) || ([[COK-00x#COK-002|COK-002]] without [[Bluetooth]]/[[Wifi]])
|-
| &nbsp;<code>00 00 00 01 00 ?? 00 04 ?? ?? ?? ?? ?? ?? ?? ??</code>&nbsp; || ? || ? || 0x04 ||  [[CECHExx|CECHE]] || ?? ||
|- bgcolor="#CCCCCC"
| colspan="7" |
|-
| &nbsp;<code>00 00 00 01 00 85 00 05 04 00 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID05}} || 04 00 (1) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 05 04 00 33 A3 44 9D 57 2B</code>&nbsp; || {{TID85}} || {{HWID05}} || 04 00 (1) ||
|-
| &nbsp;<code>00 00 00 01 00 8C 00 05 10 00 D1 F3 55 2D DA BC</code>&nbsp; || {{TID8C}} || {{HWID05}} || 10 00 (4) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 05 10 01 5F 01 12 FF 56 4F</code>&nbsp; || {{TID85}} || {{HWID05}} || 10 01 (4) ||
|-
| &nbsp;<code>00 00 00 01 00 87 00 05 10 02 3A 2D 53 AF 66 28</code>&nbsp; || {{TID87}} || {{HWID05}} || 10 02 (4) ||
|-
| &nbsp;<code>00 00 00 01 00 87 00 05 10 0A EE 67 DD 75 86 DA</code>&nbsp; || {{TID87}} || {{HWID05}} || 10 0A (4) || (original label stated [[CECHCxx|CECHC]] model!)
|-
| &nbsp;<code>00 00 00 01 00 85 00 05 14 02 F7 06 9F 10 B6 22</code>&nbsp; || {{TID85}} || {{HWID05}} || 14 02 (5) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 05 14 09 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID05}} || 14 09 (5) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 05 14 0E F0 DF DC DD 5E 56</code>&nbsp; || {{TID85}} || {{HWID05}} || 14 0E (5) ||
|-
| &nbsp;<code>00 00 00 01 00 84 00 05 F4 00 41 86 55 9B D3 52</code>&nbsp; || {{TID84}} || {{HWID05}} || F4 00 (0) ||
|-
| &nbsp;<code>00 00 00 01 00 87 00 05 F4 01 E9 4F 17 DB D9 5D</code>&nbsp; || {{TID87}} || {{HWID05}} || F4 01 (0) ||
|- bgcolor="#CCCCCC"
| colspan="7" |
|-
| &nbsp;<code>00 00 00 01 00 85 00 06 04 00 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID06}} || 04 00 (1) ||
|-
| &nbsp;<code>00 00 00 01 00 ?? 00 06 ?? ?? ?? ?? ?? ?? ?? ??</code>&nbsp; || ?  || ? || {{HWID06}} || ||
|- bgcolor="#CCCCCC"
| colspan="7" |
|-
| &nbsp;<code>00 00 00 01 00 85 00 07 04 00 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID07}} || 04 00 (1) ||
|-
| &nbsp;<code>00 00 00 01 00 87 00 07 10 00 A3 15 8F 61 36 85</code>&nbsp; || {{TID87}} || {{HWID07}} || 10 00 (4) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 07 14 02 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID07}} || 14 02 (5) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 07 14 03 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID07}} || 14 03 (5) ||
|- bgcolor="#CCCCCC"
| colspan="7" |
|-
| &nbsp;<code>00 00 00 01 00 A0 00 08 04 00 13 69 BC E4 78 80</code>&nbsp; || {{TIDA0}} || 0x08 ||  [[GECR-1500]] ([[VER-00x#VER-001|VER-001]]) || 04 00 (1) || ([[VER-00x|VER-001]] without [[Bluetooth]]/[[Wifi]])
|-
| &nbsp;<code>00 00 00 01 00 85 00 08 10 05 52 88 E8 AF 75 0D</code>&nbsp; || {{TID85}} || {{HWID08}} || 10 05 (4) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 08 10 07 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID08}} || 10 07 (4) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 08 10 0C XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID08}} || 10 0C (4) ||
|-
| &nbsp;<code>00 00 00 01 00 87 00 08 14 01 B7 A7 1F C8 3A EA</code>&nbsp; || {{TID87}} || {{HWID08}} || 14 01 (5) ||
|-
| &nbsp;<code>00 00 00 01 00 89 00 08 14 01 01 06 1B 91 1C 5C</code>&nbsp; || {{TID89}} || {{HWID08}} || 14 01 (5) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 08 14 08 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID08}} || 14 08 (5) ||
|-
| &nbsp;<code>00 00 00 01 00 84 00 08 14 0B 80 7A 2E 4F AA C7</code>&nbsp; || {{TID84}} || {{HWID08}} || 14 0B (5) ||
|-
| &nbsp;<code>00 00 00 01 00 84 00 08 14 11 D8 06 97 94 B6 80</code>&nbsp; || {{TID84}} || {{HWID08}} || 14 11 (5) || <!-- graf_chokolo PS3 -->
|-
| &nbsp;<code>00 00 00 01 00 85 00 08 F4 01 AA 02 51 EE 33 7B</code>&nbsp; || {{TID85}} || {{HWID08}} || F4 01 (0) ||
|- bgcolor="#CCCCCC"
| colspan="7" |
|-
| &nbsp;<code>00 00 00 01 00 85 00 09 10 01 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID09}} || 10 01 (4) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 09 10 0A 27 3E 8E 1D DF 65</code>&nbsp; || {{TID85}} || {{HWID09}} || 10 0A (4) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 09 10 0B XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID09}} || 10 0B (4) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 09 10 0D XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID09}} || 10 0D (4) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 09 10 14 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID09}} || 10 14 (4) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 09 10 1B 69 BD CA CC BE 85</code>&nbsp; || {{TID85}} || {{HWID09}} || 10 1B (4) ||
|-
| &nbsp;<code>00 00 00 01 00 84 00 09 10 1C B0 13 5F 2C 17 AF</code>&nbsp; || {{TID84}} || {{HWID09}} || 10 1C (4) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 09 10 1D XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID09}} || 10 1D (4) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 09 10 22 4D 7A 32 A4 11 F4</code>&nbsp; || {{TID85}} || {{HWID09}} || 10 22 (4) || <!-- Serial: 02-27453973-2332262-CHECH-2004B -->
|-
| &nbsp;<code>00 00 00 01 00 85 00 09 14 0C XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID09}} || 14 0C (5) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 09 14 12 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID09}} || 14 12 (5) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 09 F4 02 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID09}} || F4 02 (0) || Refurbished
|- bgcolor="#CCCCCC"
| colspan="7" |
|-
| &nbsp;<code>00 00 00 01 00 85 00 0A 14 03 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID0A}} || 14 03 (5) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 0A 14 05 67 A0 79 37 DC 17</code>&nbsp; || {{TID85}} || {{HWID0A}} || 14 05 (5) ||
|- bgcolor="#CCCCCC"
| colspan="7" |
|-
| &nbsp;<code>00 00 00 01 00 A0 00 0B 04 00 XX XX XX XX XX XX</code>&nbsp; || {{TIDA0}} || 0x0B || [[GECR-2500]] ([[JTP-00x|JTP-001]]/[[JSD-00x|JSD-001]]) || 04 00 (1) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 0B 10 07 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID0B}} || 10 07 (4) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 0B 10 18 EC 96 E4 A8 BE EF</code>&nbsp; || {{TID85}} || {{HWID0B}} || 10 18 (4) ||
|-
| &nbsp;<code>00 00 00 01 00 8C 00 0B 14 00 E1 1D 11 03 C8 65</code>&nbsp; || {{TID8C}} || {{HWID0B}} || 14 00 (5) || used by PS-Unban
|-
| &nbsp;<code>00 00 00 01 00 89 00 0B 14 00 EF DD CA 25 52 66</code>&nbsp; || {{TID89}} || {{HWID0B}} || 14 00 (5) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 0B 14 02 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID0B}} || 14 02 (5) ||
|-
| &nbsp;<code>00 00 00 01 00 85 00 0B 14 05 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID0B}} || 14 05 (5) ||
|-
| &nbsp;<code>00 00 00 01 00 89 00 0B 14 05 18 95 D3 EE D0 76</code>&nbsp; || {{TID89}} || {{HWID0B}} || 14 05 (5) ||  <!--// bluemimmo 3.56 factory //-->
|-
| &nbsp;<code>00 00 00 01 00 87 00 0B 14 0C 84 81 81 33 FA 68</code>&nbsp; || {{TID87}} || {{HWID0B}} || 14 0C (5) ||
|-
| &nbsp;<code>00 00 00 01 00 87 00 0B 14 0E 71 DF 87 E5 A2 4D</code>&nbsp; || {{TID87}} || {{HWID0B}} || 14 0E (5) || <!--// CECH2501B (JTP-001) bingoman with metldr2 //-->
|-
| &nbsp;<code>00 00 00 01 00 85 00 0B 14 15 XX XX XX XX XX XX</code>&nbsp; || {{TID85}} || {{HWID0B}} || 14 15 (5) ||
|- bgcolor="#CCCCCC"
| colspan="7" |
|-
| &nbsp;<code>00 00 00 01 00 84 00 0C 10 11 21 52 A6 EB 62 10</code>&nbsp; || {{TID84}} || {{HWID0C}} || 10 11 (4) ||  used by PS-Unban
|-
| &nbsp;<code>00 00 00 01 00 84 00 0C 10 19 15 0C 45 9F 1C 2A</code>&nbsp; || {{TID84}} || {{HWID0C}} || 10 19 (4) || used by PS-Unban
|-
| &nbsp;<code>00 00 00 01 00 84 00 0C 10 22 CE B2 EB 40 D9 EB</code>&nbsp; || {{TID84}} || {{HWID0C}} || 10 22 (4) ||
|-
| &nbsp;<code>00 00 00 01 00 87 00 0C 14 06 C3 90 35 41 45 18</code>&nbsp; || {{TID87}} || {{HWID0C}} || 14 06 (5) || <!--// http://www.mediafire.com/?2j9el16bsdwqm9d //-->
|-
| &nbsp;<code>00 00 00 01 00 8C 00 0C 14 0E 7D FA F1 5F 9F 3F</code>&nbsp; || {{TID8C}} || {{HWID0C}} || 14 0E (5) || <!--// CECH3008B (KTE-001) Kill17 copypaste, no flashdump proof. Ok  http://narod.ru/disk/39647482001/bkpps3.bin.html  PASS: PS3 //-->
|- bgcolor="#CCCCCC"
| colspan="7" |
|-
| &nbsp;<code>00 00 00 01 00 89 00 0D 14 00 93 75 A9 00 4C 96</code>&nbsp; || {{TID89}} || {{HWID0D}} || 14 00 (5) ||
|}


== Partial ==
Source: http://rms.grafchokolo.com/?p=116


{| class="wikitable sortable"
----
! IDPS !! 6th<br />byte !! [[Product Code]] !! 8th<br />byte !! [[Product Sub Code]] !! Notes
|-
| &nbsp;<code>00 00 00 01 00 80 00 01 xx xx xx xx xx xx xx xx</code>&nbsp; || {{TID80}} || 0x01 || [[DECHSA00A/J]] ([[COK-00x#COK-001|COK-001]]) || -
|-
| &nbsp;<code>00 00 00 01 00 82 00 01 xx xx xx xx xx xx xx xx</code>&nbsp; || {{TID82}} || 0x01 || [[DECHSA00A/J]] ([[COK-00x#COK-001|COK-001]]) ||
AV Testing Tool labeled as DECHSA00A<br />
Stock Firmware 2.41 (ros0), ros1 is empty<br />
Product Code 0x82, installation of DEX PUPs still impossible.<br />
NAND patched with 3.55 downgrade file.<br />
Installation of CEX and DEX PUPs was successful after FSM.
|-
| &nbsp;<code>00 00 00 01 00 82 00 01 xx xx xx xx xx xx xx xx</code>&nbsp; || {{TID82}} || 0x01 || [[DECHA00A/J]] ([[COK-00x#COK-001|COK-001]]) || -
|-
| &nbsp;<code>00 00 00 01 00 8A 00 01 xx xx xx xx xx xx xx xx</code>&nbsp; || {{TID8A}} || {{HWID01}} || -
|-
| &nbsp;<code>00 00 00 01 00 8B 00 01 xx xx xx xx xx xx xx xx</code>&nbsp; || {{TID8B}} || {{HWID01}} || -
|-
| &nbsp;<code>00 00 00 01 00 83 00 01 xx xx xx xx xx xx xx xx</code>&nbsp; || {{TID83}} || {{HWID01}} || -
|-
| &nbsp;<code>00 00 00 01 00 86 00 04 xx xx xx xx xx xx xx xx</code>&nbsp; || {{TID86}} || {{HWID04}} || -
|-
| &nbsp;<code>00 00 00 01 00 88 00 04 xx xx xx xx xx xx xx xx</code>&nbsp; || {{TID88}} || {{HWID04}} || -
|-
| &nbsp;<code>00 00 00 01 00 8D 00 0C xx xx xx xx xx xx xx xx</code>&nbsp; || {{TID8D}} || {{HWID0C}} || -
|-
| &nbsp;<code>00 00 00 01 00 8F 00 0E xx xx xx xx xx xx xx xx</code>&nbsp; || {{TID8F}} || {{HWID0E}} || -
|}


= registry location ? =
Note: The Reference Tool IDPS from above is static. aim_iso uses it. Retail/3.55 doesn't have it.
It can also be found in registry/application_persistent file inside playstation Store folder (as DeviceID)?


----


= Changing IDPS ? =
other example:
Theory: If you give a slim console a fat IDPS, would that console have 3.15 OtherOS functionality?<br>
  00000000  00 00 00 01 00 87 00 08 14 00 EF DD CA 25 52 66
I would say it would, because most likely the check is done in firmware to either en/disable that option. However, it would still require a console that can be downgraded to that version (only CECH-20xx/DYN-001, because CECH-21xx/SUR-001 use different drivers for RSX). So classic OtherOS on a CellBE 45nm/RSX 40nm would be impossible (of course you can use OtherOS++).
Please note that all contributions to PS3 Developer wiki are considered to be released under the GNU Free Documentation License 1.2 (see PS3 Developer wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following hCaptcha:

Cancel Editing help (opens in new window)