PUP
Jump to navigation
Jump to search
PUP (Playstation Update Package) is the file format of the PSP, PS3, PSVita and PS4 system software update packages.
PUP embed updates for devices such as the GameOS, Syscon, Wi-Fi, Bluetooth, Communication Processor, Southbridge, BD drive.
Structure
PS4 PUP is special because it embeds single other PUPs.
Header
Have a feeling the header for the new PS4 PUPs ends with a LZMA dictionary and file size… (ie a normal lzma header without the properties byte) anyone else done research into that? As in:
struct PUPPS4Header {
uint32_t magic; // PS4PUPMAGIC "\x4F\x15\x3D\x1D"
uint16_t version; // Big Endian (??)
uint16_t unknownOne;
uint16_t unknownTwo;
uint16_t unknownThree;
uint32_t dictSize; // LE afaics
uint32_t uncompressedSize; // LE afaics
}
Tools
Decrypter (first step)
Unpacker (second step)
- ps4-pup-unpack by idc
- ps4-pup-unpacker by Zer0xFF (based on ps4-pup-unpack by idc)
Indices
| Index | Decimal | Description | Perconsole? | Notes | Added | Deprecated? | Cipher Note |
|---|---|---|---|---|---|---|---|
| 1 | 1 | EMC IPL | No | sflash0s0x32/b Aeolia 1st Revision | 0.910.040 | Yes , since 2.00 | Same body as 0x0D |
| 2 | 2 | EAP KBL | No | sflash0s0x33 Aeolia 1st Revision | 0.910.040 | Yes , since 2.00 | Same body as 0x0E |
| 3 | 3 | WIFI FW | No | torus2 | 0.910.040 | ||
| 4 | 4 | SAM IPL | Yes | sflash0s1.cryptx2/b 1st SOCUID | 0.910.040 | ||
| 5 | 5 | COREOS | No | secure_modules | 0.910.040 | ||
| 6 | 6 | SYSTEM | No | system fs (FAT32/TEXFAT later) | 0.910.040 | ||
| 7 | 7 | EAP KERNEL | No | da0x2 | 0.910.040 | ||
| 8 | 8 | EAP VSH | No | eap_vsh fs (FAT16) | 0.910.040 | ||
| 9 | 9 | PREINST | No | preinst fs (FAT32) | 0.910.040 | ||
| 0xA | 10 | ??? | No | sflash0s1.cryptx40 | No | ||
| 0xB | 11 | PREINST2 | No | preinst2 fs (FAT32) | 0.910.040 | ||
| 0xC | 12 | SYSTEM_EX | No | system_ex fs (FAT32/TEXFAT later) | 0.910.040 | ||
| 0xD | 13 | EMC IPL | No | sflash0s0x32/b Aeolia 2nd Revision | 0.910.040 | Same body as 0x1 | |
| 0xE | 14 | EAP KBL | No | sflash0s0x33 Aeolia 2nd Revision | 0.910.040 | Same body as 0x2 | |
| 0xF | 15 | ??? | No | test | No | ||
| 0x10-0x16 | 16-22 | ??? | No | sbram0 | No | ||
| 0x20 | 32 | EMC IPL | No | sflash0s0x32/b Belize 1st Revision | 2.00 | Same body as 0x2A | |
| 0x21 | 33 | EAP KBL | No | sflash0s0x33 Belize 1st Revision | 2.00 | Same body as 0x2B and 0x25 | |
| 0x22 | 34 | WIFI FW | No | torus2 | 2.00 | ||
| 0x23 | 35 | SAM IPL | Yes | sflash0s1.cryptx2/b 2nd SOCUID | 2.00 | ||
| 0x24 | 36 | EMC IPL | No | sflash0s0x32/b Belize 2nd Revision? | 3.00 | ||
| 0x25 | 37 | EAP KBL | No | sflash0s0x33 Belize 2nd Revision? | 3.00 | Same body as 0x2B and 0x21 | |
| 0x26 | 38 | SAM IPL | Yes | sflash0s1.cryptx2/b 3rd SOCUID | 3.00 | ||
| 0x27 | 39 | SAM IPL | Yes | sflash0s1.cryptx2/b 4th SOCUID | 3.00 | ||
| 0x28 | 40 | EMC IPL | No | sflash0s0x32/b Baikal 1st Revision | 3.00 | Same body as 0x2C | |
| 0x2A | 42 | EMC IPL | No | sflash0s0x32/b Belize 2 1st Revision | 4.00 | Same body as 0x20 | |
| 0x2B | 43 | EAP KBL | No | sflash0s0x33 Belize 2 1st Revision | 4.00 | Same body as 0x25 and 0x21 | |
| 0x2C | 44 | EMC IPL | No | sflash0s0x32/b Baikal2 1st Revision | 4.00 | Same body as 0x28 | |
| 0x2D | 45 | SAM IPL | Yes | sflash0s1.cryptx2/b 5th SOCUID | 4.50 | ||
| 0x2E | 46 | EMC IPL | No | sflash0s0x32/b Belize2 3rd Revision? | 5.00 | ||
| 0x30 | 48 | WIFI FW | No | sflash0s0x38 trooper | 5.00 | ||
| 0x31 | 49 | SAM IPL | Yes | sflash0s1.cryptx2/b 6th SOCUID | 5.50 | ||
| 0x32 | 50 | SAM IPL | Yes | sflash0s1.cryptx2/b 7th SOCUID | 6.50 | ||
| 0x101 | 257 | EULA.XML | No | Sony Agreement XML | 1.00 | ||
| 0x200 | 512 | ORBIS_SWU.SELF | No | Sony SoftWareUpdater (ELF) | 0.910.040 | ||
| 0x202 | 514 | ORBIS_SWU.SELF | No | Sony SoftWareUpdater (Encrypted SELF) | 0.920.030 | ||
| 0x301 | 769 | ??? | No | /update related | No | ||
| 0x302 | 770 | ??? | No | /update related | No | ||
| 0xD00 | 3328 | SYSCON FW | No | sc_fw_update0 firmware (4000XXXX) | 0.915.010 | ||
| 0xD01 | 3329 | BLURAY FW | No | bluray firmware (all revisions) (4XXR) | 0.920.030 | ||
| 0xD02 | 3330 | USB SATA BRIDGE FW | No | usb sata bridge firmware (da0) | 1.00 | ||
| 0xD07 | 3335 | SYSCON PATCH | No | sc_fw_update0 patch (4001XXXX) | 2.50 Test/Retail | ||
| 0xD08 | 3336 | SYSCON FW | No | sc_fw_update0 firmware (4000XXXX) | 1.00 Devkit | ||
| 0xD09 | 3337 | COMMUNICATION PROCESSOR FW | No | cpfirm | 3.50 Devkit |
