PUP
Jump to navigation
Jump to search
PUP (Playstation Update Package) is the file format of the PSP, PS3, PSVita and PS4 system software update packages.
PUP embed updates for devices such as the GameOS, Syscon, Wi-Fi, Bluetooth, Communication Processor, Southbridge, BD drive.
Structure
PS4 PUP is special because it embeds single other PUPs.
Header
Have a feeling the header for the new PS4 PUPs ends with a LZMA dictionary and file size… (ie a normal lzma header without the properties byte) anyone else done research into that? As in:
struct PUPPS4Header {
uint32_t magic; // PS4PUPMAGIC "\x4F\x15\x3D\x1D"
uint16_t version; // Big Endian (??)
uint16_t unknownOne;
uint16_t unknownTwo;
uint16_t unknownThree;
uint32_t dictSize; // LE afaics
uint32_t uncompressedSize; // LE afaics
}
Tools
Decrypter (first step)
Unpacker (second step)
- ps4-pup-unpack by idc
- ps4-pup-unpacker by Zer0xFF (based on ps4-pup-unpack by idc)
Indices
| Index | Decimal | Description | Perconsole? | Notes | Added | Deprecated? | Cipher Note | Component Name |
|---|---|---|---|---|---|---|---|---|
| 1 | 1 | EMC IPL | No | sflash0s0x32/b Aeolia 1st Revision | 0.910.040 | Yes , since 2.00 | Same body as 0x0D | ?? |
| 2 | 2 | EAP KBL | No | sflash0s0x33 Aeolia 1st Revision | 0.910.040 | Yes , since 2.00 | Same body as 0x0E | ?? |
| 3 | 3 | WIFI FW | No | torus2 | 0.910.040 | -- | ||
| 4 | 4 | SAM IPL | Yes | sflash0s1.cryptx2/b 1st SOCUID | 0.910.040 | (Confirmed by anon) Same body as 0x23 | CXD90026G | |
| 5 | 5 | COREOS | No | secure_modules | 0.910.040 | GEN1,2,3 Universal | ||
| 6 | 6 | SYSTEM | No | system fs (FAT32/TEXFAT later) | 0.910.040 | GEN1,2,3 Universal | ||
| 7 | 7 | EAP KERNEL | No | da0x2 | 0.910.040 | GEN1,2,3 Universal | ||
| 8 | 8 | EAP VSH | No | eap_vsh fs (FAT16) | 0.910.040 | GEN1,2,3 Universal | ||
| 9 | 9 | PREINST | No | preinst fs (FAT32) | 0.910.040 | GEN1,2,3 Universal | ||
| 0xA | 10 | ??? | No | sflash0s1.cryptx40 | No | ?? | ||
| 0xB | 11 | PREINST2 | No | preinst2 fs (FAT32) | 0.910.040 | GEN1,2,3 Universal | ||
| 0xC | 12 | SYSTEM_EX | No | system_ex fs (FAT32/TEXFAT later) | 0.910.040 | GEN1,2,3 Universal | ||
| 0xD | 13 | EMC IPL | No | sflash0s0x32/b Aeolia 2nd Revision | 0.910.040 | Same body as 0x1 | CXD90025G | |
| 0xE | 14 | EAP KBL | No | sflash0s0x33 Aeolia 2nd Revision | 0.910.040 | Same body as 0x2 | CXD90025G | |
| 0xF | 15 | ??? | No | test | No | ?? | ||
| 0x10-0x16 | 16-22 | ??? | No | sbram0 | No | ?? | ||
| 0x20 | 32 | EMC IPL | No | sflash0s0x32/b Belize 1st Revision | 2.00 | Same body as 0x2A | CXD90036G | |
| 0x21 | 33 | EAP KBL | No | sflash0s0x33 Belize 1st Revision | 2.00 | Same body as 0x2B and 0x25 | CXD90036G | |
| 0x22 | 34 | WIFI FW | No | torus2 | 2.00 | ?? | ||
| 0x23 | 35 | SAM IPL | Yes | sflash0s1.cryptx2/b 2nd SOCUID | 2.00 | (Confirmed by anon) Same body as 0x04 | CXD90026AG | |
| 0x24 | 36 | EMC IPL | No | sflash0s0x32/b Belize 2nd Revision? | 3.00 | CXD90046GG | ||
| 0x25 | 37 | EAP KBL | No | sflash0s0x33 Belize 2nd Revision? | 3.00 | Same body as 0x2B and 0x21 | CXD90046GG | |
| 0x26 | 38 | SAM IPL | Yes | sflash0s1.cryptx2/b 3rd SOCUID | 3.00 | (Confirmed by anon) Same body as 0x2D and 0x32 | CXD90037G | |
| 0x27 | 39 | SAM IPL | Yes | sflash0s1.cryptx2/b 4th SOCUID | 3.00 | (Confirmed by anon) Same body as 0x31 | CXD90043GB | |
| 0x28 | 40 | EMC IPL | No | sflash0s0x32/b Baikal 1st Revision | 3.00 | Same body as 0x2C | ||
| 0x2A | 42 | EMC IPL | No | sflash0s0x32/b Belize 2 1st Revision | 4.00 | Same body as 0x20 | ||
| 0x2B | 43 | EAP KBL | No | sflash0s0x33 Belize 2 1st Revision | 4.00 | Same body as 0x25 and 0x21 | ||
| 0x2C | 44 | EMC IPL | No | sflash0s0x32/b Baikal2 1st Revision | 4.00 | Same body as 0x28 | ||
| 0x2D | 45 | SAM IPL | Yes | sflash0s1.cryptx2/b 5th SOCUID | 4.50 | (Confirmed by anon) Same body as 0x26 and 0x32 | CXD90044GB | |
| 0x2E | 46 | EMC IPL | No | sflash0s0x32/b Belize2 3rd Revision? | 5.00 | |||
| 0x30 | 48 | WIFI FW | No | sflash0s0x38 trooper | 5.00 | -- | ||
| 0x31 | 49 | SAM IPL | Yes | sflash0s1.cryptx2/b 6th SOCUID | 5.50 | (Confirmed by anon) Same body as 0x27 | CXD90051GB | |
| 0x32 | 50 | SAM IPL | Yes | sflash0s1.cryptx2/b 7th SOCUID | 6.50 | (Confirmed by anon) Same body as 0x26 and 0x2D | CXD90055GB | |
| 0x101 | 257 | EULA.XML | No | Sony Agreement XML | 1.00 | Universal | ||
| 0x200 | 512 | ORBIS_SWU.SELF | No | Sony SoftWareUpdater (ELF) | 0.910.040 | Universal | ||
| 0x202 | 514 | ORBIS_SWU.SELF | No | Sony SoftWareUpdater (Encrypted SELF) | 0.920.030 | Universal | ||
| 0x301 | 769 | ??? | No | /update related | No | ?? | ||
| 0x302 | 770 | ??? | No | /update related | No | ?? | ||
| 0xD00 | 3328 | SYSCON FW | No | sc_fw_update0 firmware (4000XXXX) | 0.915.010 | Universal Syscon | ||
| 0xD01 | 3329 | BLURAY FW | No | bluray firmware (all revisions) (4XXR) | 0.920.030 | Universal Bluray | ||
| 0xD02 | 3330 | USB SATA BRIDGE FW | No | usb sata bridge firmware (da0) | 1.00 | MB86C311B | ||
| 0xD07 | 3335 | SYSCON PATCH | No | sc_fw_update0 patch (4001XXXX) | 2.50 Test/Retail | Universal Syscon | ||
| 0xD08 | 3336 | SYSCON FW | No | sc_fw_update0 firmware (4000XXXX) | 1.00 Devkit | Universal Syscon | ||
| 0xD09 | 3337 | COMMUNICATION PROCESSOR FW | No | cpfirm | 3.50 Devkit | Neo Devkit Component (unknown) |
