Editing Update Manager

Jump to navigation Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 2: Line 2:


  Update Manager service is accessed by GameOS '''syscall 863'''
  Update Manager service is accessed by GameOS '''syscall 863'''
Process is inside lv1.self ss_server1.fself
<br>


== 0x6000 - Update Manager  ==
== 0x6000 - Update Manager  ==
Line 10: Line 10:
! Packet ID  
! Packet ID  
! Description
! Description
! Lv1 Parameter Usage
! Lv2Syscall Parameter
! notes
|-
|-
| 0x6001  
| 0x6001  
| Update Package Tophalf
| Update Package Tophalf
|
|
|
|-
|-
| 0x6002  
| 0x6002  
| Inspect Package Tophalf
| Inspect Package Tophalf
|
| uint64_t Package_Type, sys_addr_tr * alloc_addr,size, uint64_t system_type (9-cex)/(5-dex/tool),uint64_t* out
|
|-
|-
| 0x6003  
| 0x6003  
| Get Package Info
| Get Package Info
|
| uint64_t Package_Type, uint64_t *out
|
|-
|-
| 0x6004  
| 0x6004  
| Get Fix Instruction
| Get Fix Instruction
|
|
|
|-
|-
| 0x6005  
| 0x6005  
| Extract Package Tophalf
| Extract Package Tophalf
|
|
|
|-
|-
| 0x6006  
| 0x6006  
| Get Extract Package
| Get Extract Package
|
|
|
|-
|-
| 0x6007  
| 0x6007  
| Is Flash Initialized (Not Implemented)
| Check Integrity too
|
|
|
|-
|-
| 0x6008
| 0x6008
| Set Flash Initialized (Not Implemented)
| Check Integrity too
|
|
|
|-
|-
| 0x6009  
| 0x6009  
| Get Token Seed
| Get Token Seed
|
| uint8_t token[0x50], uint64_t token_size(0x50), uint8_t seed[0x50], uint64_t seed_size(0x50), 0,0
|
|-
|-
| 0x600A  
| 0x600A  
| Set Token
| Set Token
|
| uint8_t token[0x50], uint64_t token_size(0x50), 0,0,0,0
|
|-
|-
| 0x600B  
| 0x600B  
| Read EPROM
| Read EPROM
|
| uint64_t offset, uint8_t value,0,0,0,0
|
|-
|-
| 0x600C  
| 0x600C  
| Write EPROM
| Write EPROM
|
| uint64_t offset, uint8_t value,0,0,0,0
|
|-
|-
| 0x600D  
| 0x600D  
| Get Status
| Get Status
|
|
|
|-
|-
| 0x600E  
| 0x600E  
| Allocate Buffer
| Allocate Buffer
|
|
|
|-
|-
| 0x600F  
| 0x600F  
| Release Buffer
| Release Buffer
|
|
|
|-
|-
| 0x6010  
| 0x6010  
| Check Integrity
| Check Integrity
|
|
|
|-
|-
| 0x6011  
| 0x6011  
| Get Applicable Version
| Get Applicable Version
|
| 1,uint64_t out[0x20],0,0,0,0,0
|
|-
|-
| 0x6012  
| 0x6012  
| (Re?)Allocate Buffer (only lv2kernel)
| (Re?)Allocate Buffer
|
|
|
|-
| 0x6013
|
|
|
|
|}
|}


Line 207: Line 144:
| 5  
| 5  
| 0xDEADBEAFFACEBABE  
| 0xDEADBEAFFACEBABE  
| Raw Image
| -
| NAND_UPDATE.pkg.XX
| -
|-
|-
| 6  
| 6  
Line 222: Line 159:
| 8  
| 8  
| Invalid Parameter  
| Invalid Parameter  
| Update Package List
| -
| UPL.xml.pkg
| -
|-
|-
| 9  
| 9  
Line 476: Line 413:
00000370  F2 BE 11 BB 3C 52 52 DC  A9 68 E5 24 AD 4F F3 48  ò¾.»&lt;RRÜ©hå$­OóH
00000370  F2 BE 11 BB 3C 52 52 DC  A9 68 E5 24 AD 4F F3 48  ò¾.»&lt;RRÜ©hå$­OóH
</pre>
</pre>
=== 0x6005 - Extract Package Tophalf  ===
=== 0x6005 - Extract Package Tophalf  ===


Line 491: Line 427:
==== EEPROM Offset Table  ====
==== EEPROM Offset Table  ====


Here is the table of EEPROM offsets that can be accessed through Update Manager (3.15): [[SC_EEPROM#SC_EEPROM_Offset_Table_-_Flags_and_Tokens| EEPROM Offset Table]]
Here is the table of EEPROM offsets that can be accessed through Update Manager (3.15):  
 
[[SC_EEPROM#EEPROM_Offset_Table_-_Flags_and_Tokens| --> EEPROM Offset Table]]


=== 0x600C - Write EEPROM  ===
=== 0x600C - Write EEPROM  ===
Line 532: Line 470:
===== BD Drive Type Table  =====
===== BD Drive Type Table  =====


Here is the BD Drive Type Table extracted from HV Process 6 (3.15) / ss_server1.fself :  
Here is the BD Drive Type Table extracted from HV Process 6 (3.15):  


{| class="wikitable FCK__ShowTableBorders"
{| class="wikitable FCK__ShowTableBorders"
Line 603: Line 541:
| <pre>"SONY    PS-SYSTEM  306R"</pre>
| <pre>"SONY    PS-SYSTEM  306R"</pre>
| 0x1200000000000007
| 0x1200000000000007
|-
| 16
| <pre>"SONY    PS-EMBOOT  308R"</pre>
| 0x2200000000000008
|-
| 17
| <pre>"SONY    PS-SYSTEM  308R"</pre>
| 0x1200000000000008
|-
| 18
| <pre>"SONY    PS-EMBOOT  310R"</pre>
| 0x2200000000000009
|-
| 19
| <pre>"SONY    PS-SYSTEM  310R"</pre>
| 0x1200000000000009
|-
| 20
| <pre>"SONY    PS-EMBOOT  312R"</pre>
| 0x220000000000000A
|-
| 21
| <pre>"SONY    PS-SYSTEM  312R"</pre>
| 0x120000000000000A
|-
| 22
| <pre>"SONY    PS-EMBOOT  314R"</pre>
| 0x220000000000000B
|-
| 23
| <pre>"SONY    PS-SYSTEM  314R"</pre>
| 0x120000000000000B
|-
<!--// not in 3.15 but should be expected in 4.40+
| 24
| <pre>"SONY    PS-EMBOOT  316R"</pre>
| 0x220000000000000C
|-
| 25
| <pre>"SONY    PS-SYSTEM  316R"</pre>
| 0x120000000000000C
|-
//-->
<!--// not in 3.15 but should be expected in 4.60+
| 26
| <pre>"SONY    PS-EMBOOT  318R"</pre>
| 0x220000000000000D
|-
| 27
| <pre>"SONY    PS-SYSTEM  318R"</pre>
| 0x120000000000000D
|-
//-->
|}
|}


Line 671: Line 556:


send_atp_command - 0x80023B10 (3.15)
send_atp_command - 0x80023B10 (3.15)
{{Reverse engineering}}<noinclude>[[Category:Main]]</noinclude>
Please note that all contributions to PS3 Developer wiki are considered to be released under the GNU Free Documentation License 1.2 (see PS3 Developer wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following hCaptcha:

Cancel Editing help (opens in new window)

Templates used on this page:

Retrieved from "http://www.psdevwiki.com/ps3/Update_Manager"