Таблица тегов и ключей

ErikPshat · 17.12.2009, 14:53

Таблица тегов и ключей

Все теги лежат группами по их Скрамблер-кодам, в порядке убывания групп скрамблеров.
Внутри каждой группы ключи отсортированы в порядке нумерации тегов.

16 байтные (тип 2)

32 байтные

//////////Decryption Cipher//////////

/* 0x6A f5psp.sprx */
u8 key_40780AF0[16] = {0x9E,0x26,0xFC,0xCE,0x2A,0xB6,0xC0,0x00,0x7B,0xF9,0x76,0xEE,0xC3,0xB9,0xEE,0x1A};
u8 xor_40780AF0[16] = {0x84,0x7B,0xF5,0xFE,0xE8,0x4D,0xAD,0x7A,0xB5,0x06,0x28,0x0E,0x09,0xFA,0x81,0xE1};

u8 key_407810F0[16] = {0xAF,0xAD,0xCA,0xF1,0x95,0x59,0x91,0xEC,0x1B,0x27,0xD0,0x4E,0x8A,0xF3,0x3D,0xE7};
u8 xor_407810F0[16] = {0x84,0x7B,0xF5,0xFE,0xE8,0x4D,0xAD,0x7A,0xB5,0x06,0x28,0x0E,0x09,0xFA,0x81,0xE1};


/* 0x48 UMD EBOOT.BIN (OPNSSMP.BIN) */
u8 key_2E5E0AF0[16] = {0xAC,0xD7,0x6D,0x90,0x33,0x37,0x38,0x92,0x31,0x41,0xD6,0x36,0xAF,0x9F,0x17,0x15};
u8 xor_2E5E0AF0[16] = {0x69,0xBA,0x55,0x34,0xF0,0xC0,0xD6,0x71,0xE3,0x1F,0xDB,0x97,0xE0,0x7C,0xD2,0x2A};

u8 key_2E5E10F0[16] = {0x9D,0x5C,0x5B,0xAF,0x8C,0xD8,0x69,0x7E,0x51,0x9F,0x70,0x96,0xE6,0xD5,0xC4,0xE8};
u8 xor_2E5E10F0[16] = {0x69,0xBA,0x55,0x34,0xF0,0xC0,0xD6,0x71,0xE3,0x1F,0xDB,0x97,0xE0,0x7C,0xD2,0x2A};

u8 key_2E5E11F0[16] = {0x75,0xEB,0xE8,0x43,0xF4,0x87,0x8F,0xD0,0x14,0x7F,0x7E,0x39,0xAD,0xAF,0x04,0x9D};
u8 xor_2E5E11F0[16] = {OPNSSMP.BIN};

u8 key_2E5E12F0[16] = {0x8A,0x7B,0xC9,0xD6,0x52,0x58,0x88,0xEA,0x51,0x83,0x60,0xCA,0x16,0x79,0xE2,0x07};
u8 xor_2E5E12F0[16] = {OPNSSMP.BIN};

u8 key_2E5E13F0[16] = {0xFF,0xA4,0x68,0xC3,0x31,0xCA,0xB7,0x4C,0xF1,0x23,0xFF,0x01,0x65,0x3D,0x26,0x36};
u8 xor_2E5E13F0[16] = {OPNSSMP.BIN};

u8 key_2E5E80F0[16] = {0x0F,0x74,0xAF,0x43,0x75,0xCD,0xDA,0x39,0x81,0x56,0xD9,0x61,0x3E,0x16,0xC8,0x92};
u8 xor_2E5E80F0[16] = {OPNSSMP.BIN};

u8 key_2E5E90F0[16] = {0x67,0xE4,0x8F,0x4C,0x08,0xA0,0x7D,0xB1,0x5F,0x51,0xA7,0x72,0x98,0xA8,0x2D,0x7E};
u8 xor_2E5E90F0[16] = {OPNSSMP.BIN};


/* 0x47 Unknown keys */
u8 key_2FD30BF0[16] = {0xD8,0x58,0x79,0xF9,0xA4,0x22,0xAF,0x86,0x90,0xAC,0xDA,0x45,0xCE,0x60,0x40,0x3F};
u8 xor_2FD30BF0[16] = {0xA9,0x1E,0xDD,0x7B,0x09,0xBB,0x22,0xB5,0x9D,0xA3,0x30,0x69,0x13,0x6E,0x0E,0xD8};

u8 key_2FD310F0[16] = {0xD2,0xDC,0xFB,0x7A,0xFE,0xFA,0x2E,0x2E,0x2C,0x8C,0xE8,0xE4,0xBD,0x7E,0xD7,0x31};
u8 xor_2FD310F0[16] = {0xA9,0x1E,0xDD,0x7B,0x09,0xBB,0x22,0xB5,0x9D,0xA3,0x30,0x69,0x13,0x6E,0x0E,0xD8};

u8 key_2FD311F0[16] = {0x3A,0x6B,0x48,0x96,0x86,0xA5,0xC8,0x80,0x69,0x6C,0xE6,0x4B,0xF6,0x04,0x17,0x44};
u8 xor_2FD311F0[16] = {0xA9,0x1E,0xDD,0x7B,0x09,0xBB,0x22,0xB5,0x9D,0xA3,0x30,0x69,0x13,0x6E,0x0E,0xD8};

u8 key_2FD312F0[16] = {0xC5,0xFB,0x69,0x03,0x20,0x7A,0xCF,0xBA,0x2C,0x90,0xF8,0xB8,0x4D,0xD2,0xF1,0xDE};
u8 xor_2FD312F0[16] = {0xA9,0x1E,0xDD,0x7B,0x09,0xBB,0x22,0xB5,0x9D,0xA3,0x30,0x69,0x13,0x6E,0x0E,0xD8};

u8 key_2FD313F0[16] = {0xB0,0x24,0xC8,0x16,0x43,0xE8,0xF0,0x1C,0x8C,0x30,0x67,0x73,0x3E,0x96,0x35,0xEF};
u8 xor_2FD313F0[16] = {0xA9,0x1E,0xDD,0x7B,0x09,0xBB,0x22,0xB5,0x9D,0xA3,0x30,0x69,0x13,0x6E,0x0E,0xD8};


/* ??? */
u8 key_89742B04[16] = {0xD7,0xEB,0xC9,0x24,0x7E,0x23,0x3D,0x89,0x46,0xE7,0x2E,0x47,0xAD,0xDB,0x0D,0x09};
u8 xor_89742B04[16] = {0xFF,0x5E,0xF1,0xE9,0xB1,0xC9,0x3E,0xC5,0xDB,0xE0,0x67,0x82,0x95,0x3A,0x8E,0xA5};


/* 0x40 DRM keys */
u8 key_E92405F0[16] = {0x9E,0x5B,0x08,0x0F,0xAB,0x84,0x40,0x7E,0x52,0x43,0x0D,0x41,0x28,0xDF,0x3A,0x27};
u8 xor_E92405F0[16] = {0x79,0xB7,0xDE,0xA9,0xAD,0x67,0x41,0x19,0x94,0x9A,0xC3,0x54,0xDD,0xD4,0x89,0x03};

u8 key_E92406F0[16] = {0x0A,0x3B,0x71,0x28,0x2A,0x78,0xE7,0x62,0xB1,0x1A,0x7F,0x13,0x92,0x67,0xA1,0xCC};
u8 xor_E92406F0[16] = {0xE7,0xFD,0xE0,0x41,0xBA,0x70,0x21,0x61,0xB0,0x2C,0x92,0xFB,0x10,0x52,0xDE,0x0C};

u8 key_E92408F0[16] = {0x24,0x84,0xBE,0x35,0xF0,0xC5,0x91,0xA3,0x3D,0xA5,0x94,0x12,0x8F,0xD0,0x4C,0x01};
u8 xor_E92408F0[16] = {0x2A,0x1B,0xF2,0xD5,0x11,0xF8,0x93,0x04,0x9B,0xF7,0xB1,0x7F,0xC7,0x8F,0x6A,0x11};

u8 key_E92410F0[16] = {0x71,0xBE,0x93,0xCD,0x96,0x65,0xBC,0x57,0xF6,0xE5,0xE9,0xD7,0x1C,0x6A,0xD5,0xAA};
u8 xor_E92410F0[16] = {0x36,0xEF,0x82,0x4E,0x74,0xFB,0x17,0x5B,0x14,0x14,0x05,0xF3,0xB3,0x8A,0x76,0x18};

u8 key_E9241EF0[16] = {0xEF,0x4A,0x8E,0x6B,0x24,0x1A,0xD5,0xDC,0xE0,0xE5,0x9D,0xAD,0xE6,0x7F,0xBD,0x0E};
u8 xor_E9241EF0[16] = {0x02,0x99,0xCE,0xA6,0x38,0x38,0x32,0x84,0x0E,0xCF,0x86,0x6B,0xB4,0xEE,0x3C,0x77};

u8 key_E92428F0[16] = {0xAA,0x14,0x26,0xB4,0x4C,0xB9,0xF4,0x58,0xC1,0x6F,0xCD,0x42,0x70,0x2E,0x12,0x6A};
u8 xor_E92428F0[16] = {0xCB,0x81,0xEE,0x3B,0xDC,0x87,0x1E,0xA1,0xC8,0x14,0xB8,0xFF,0x92,0x3F,0xB7,0xC0};


/* ??? */
u8 key_F5F12304[16] = {0xC0,0xF0,0x2D,0x65,0xC6,0xA6,0x56,0x9B,0xB8,0xE8,0x0E,0x82,0x3B,0x56,0xE2,0xA9};
u8 xor_F5F12304[16] = {0x21,0xEA,0xBE,0x48,0x63,0xDE,0x22,0x4B,0x3A,0xDB,0x81,0x53,0x30,0x03,0x54,0x92};


/* ??? */
u8 key_692805F0[16] = {0x74,0xF0,0x3E,0xBD,0x44,0x18,0xC1,0xD5,0xE4,0xBA,0x64,0x84,0x98,0x72,0xAC,0xFA};
u8 xor_692805F0[16] = {0x9E,0x4F,0xAA,0xC4,0x05,0xA0,0x8F,0xB3,0xA7,0x5C,0xF8,0x1F,0x53,0xB1,0xB2,0xB2};

u8 key_692806F0[16] = {0xD0,0xC1,0x82,0xB5,0xFD,0x59,0x9C,0xBD,0xCC,0x3C,0x8E,0xFB,0xCF,0x34,0xBA,0xD2};
u8 xor_692806F0[16] = {0x3E,0xF9,0x88,0xD0,0x42,0xEF,0x06,0x4A,0x03,0x07,0x62,0x78,0x51,0x9B,0xC8,0xC2};

u8 key_692808F0[16] = {0x77,0x66,0xAD,0xF8,0x69,0x1D,0x04,0x6A,0x37,0xFE,0x46,0x4C,0xEB,0xE2,0x4C,0xDC};
u8 xor_692808F0[16] = {0xB6,0x67,0x15,0x92,0x49,0x3D,0x4D,0x8A,0x21,0xE2,0xF9,0x0B,0x7E,0x24,0x64,0xF3};

u8 key_692810F0[16] = {0xB8,0xE7,0xAC,0xEE,0x3F,0x50,0xB9,0xA0,0x66,0xC8,0xBD,0x5E,0x21,0x53,0xF1,0xD5};
u8 xor_692810F0[16] = {0x21,0x52,0x5D,0x76,0xF6,0x81,0x0F,0x15,0x2F,0x4A,0x40,0x89,0x63,0xA0,0x10,0x55};

u8 key_69281EF0[16] = {0x05,0x94,0x7F,0xE2,0x80,0x5C,0x7E,0xAB,0x03,0x66,0x40,0x85,0x3C,0xD1,0x2C,0xFA};
u8 xor_69281EF0[16] = {0x10,0xCD,0x0D,0xD5,0x25,0xC6,0x28,0x87,0x34,0xC6,0x0E,0xBE,0x6D,0xE7,0x19,0x7D};

u8 key_692828F0[16] = {0x49,0x85,0x86,0x1E,0xB9,0x99,0xBD,0xA5,0x92,0xE9,0xF9,0xD1,0x26,0x43,0x7E,0xB5};
u8 xor_692828F0[16] = {0x88,0xD5,0x04,0xD5,0xF8,0x27,0x24,0x13,0x62,0x4B,0xBB,0x16,0x44,0x1E,0x43,0x50};


/* PSX-PSN Games */
u8 key_0DAA06F0[16] = {0xCA,0x26,0x7D,0xA2,0xB9,0xCE,0x24,0x6E,0xFD,0x32,0xA8,0x97,0xF4,0x7C,0x19,0x19};
u8 xor_0DAA06F0[16] = {0x77,0x32,0x20,0x31,0xDF,0x7F,0x4B,0x1C,0x8D,0xD7,0xD2,0xC3,0x23,0xA9,0xF8,0xA9};

u8 key_0DAA10F0[16] = {0xA9,0x81,0x71,0x9D,0x92,0x2D,0xCC,0xEE,0x44,0x1C,0x0E,0x37,0x7A,0xF6,0xE2,0x3E};
u8 xor_0DAA10F0[16] = {0xD3,0x43,0xA8,0x49,0x79,0x61,0x82,0x63,0x40,0xBF,0xA3,0xEF,0xB0,0x99,0xED,0x48};

u8 key_0DAA1EF0[16] = {0x1C,0x3B,0xD7,0xA4,0xA6,0x41,0x62,0x98,0xA7,0xDF,0x5B,0x16,0xDA,0x53,0x62,0xF1};
u8 xor_0DAA1EF0[16] = {0x87,0x66,0x42,0x6E,0x6D,0xB8,0xC6,0x28,0x10,0x7F,0xFD,0xBD,0x10,0x7E,0x7E,0x31};

u8 key_0DAA28F0[16] = {0x81,0x79,0xDB,0x6B,0xC1,0x04,0x71,0xE7,0x64,0x90,0xAA,0x71,0xC2,0x94,0x92,0x76};
u8 xor_0DAA28F0[16] = {0x3C,0x8B,0xAB,0xB0,0x07,0x92,0xAC,0x1B,0x2B,0xCF,0x10,0xAA,0xBD,0x9F,0x5B,0xD8};


/* ??? */
u8 key_E1ED06F0[16] = {0x2D,0xB6,0x4D,0x66,0xCB,0xA3,0x8E,0x4D,0x13,0x6F,0xB1,0x63,0x4C,0xCC,0x21,0xF2};
u8 xor_E1ED06F0[16] = {0xA5,0xAC,0x61,0x8A,0x6B,0xD2,0x4A,0xC4,0x96,0x75,0x3B,0x5A,0x8C,0xF6,0x46,0x2F};

u8 key_E1ED10F0[16] = {0x2A,0xCE,0x63,0xF9,0xA7,0x93,0x2A,0x6B,0xF1,0xDB,0x41,0x70,0x21,0xB7,0x21,0x77};
u8 xor_E1ED10F0[16] = {0xE8,0x21,0xA6,0x81,0xBC,0xC8,0x4A,0x09,0x88,0x92,0x78,0x65,0x3A,0x3B,0x3C,0x4E};

u8 key_E1ED1EF0[16] = {0x50,0xAC,0x80,0x31,0x36,0x27,0xCE,0x39,0x43,0xDA,0xC7,0x77,0x6A,0x1F,0x8B,0x1D};
u8 xor_E1ED1EF0[16] = {0x0A,0x97,0x2A,0x3C,0xAD,0x20,0x09,0xAC,0xB0,0x72,0xB8,0xBF,0x1A,0x01,0x42,0x8B};

u8 key_E1ED28F0[16] = {0xF2,0x1A,0x92,0x0C,0x33,0xC2,0x5C,0xFF,0x30,0x73,0xF6,0x94,0x50,0xAD,0x33,0x34};
u8 xor_E1ED28F0[16] = {0xE2,0x04,0x7A,0xE7,0x51,0x69,0xE2,0xF5,0xC5,0x94,0xDF,0xC9,0x18,0x90,0x43,0xC8};


/* 0x70 - Unknown scrambler */
u8 key_EB6984AC[16] = {0x19,0x51,0xEE,0xE3,0xFD,0x5D,0x93,0xF8,0xAB,0x97,0x47,0x56,0x00,0x77,0x3A,0x39};
u8 xor_EB6984AC[16] = {0x2A,0xFC,0x47,0x6D,0x16,0x3D,0x43,0x7E,0xEF,0xEF,0xC3,0x50,0x2E,0x2C,0x67,0x81};


/* 0x70 - Unknown scrambler */
u8 key_80B60DB2[16] = {0x7D,0x99,0xEB,0x04,0x5F,0xC3,0x37,0xB0,0xF5,0x44,0x2F,0xEF,0xDE,0x1F,0x9A,0x4A};
u8 xor_80B60DB2[16] = {0x01,0x8A,0x2E,0xBF,0x82,0x4A,0x74,0x95,0x71,0x1F,0xF2,0x29,0xCB,0x23,0xC2,0x6D};


typedef struct
{
    u32 tag;  // 4 byte value at offset 0xD0 in the PRX file
    u8* key; // 16 bytes keys
    u8 code;  // code for scramble
    u8 type;
} TAG_INFO2;

static TAG_INFO2 g_tagInfo2[] =
{
    /* 0x70 - Unknown scrambler */
    { 0x80B60DB2, key_80B60DB2, xor_80B60DB2, 0x70, 5}, //[32]6.00

    /* 0x70 - Unknown scrambler */
    { 0xEB6984AC, key_EB6984AC, xor_EB6984AC, 0x70, 5}, //[32]6.00

    /* 0x70 - Unknown scrambler */
    { 0xE1ED28F0, key_E1ED28F0, xor_E1ED28F0, 0x70, 5}, //[32]5.70 PSPgo
    { 0xE1ED1EF0, key_E1ED1EF0, xor_E1ED1EF0, 0x70, 5}, //[32]5.00 PSP-3000
    { 0xE1ED10F0, key_E1ED10F0, xor_E1ED10F0, 0x70, 5}, //[32]3.60 PSP-2000
    { 0xE1ED06F0, key_E1ED06F0, xor_E1ED06F0, 0x70, 5}, //[32]3.00

    /* PSX-PSN Games ?0x5D? */
    { 0x0DAA28F0, key_0DAA28F0, xor_0DAA28F0, 0x5D, 5}, //[32]5.70 PSPgo
    { 0x0DAA1EF0, key_0DAA1EF0, xor_0DAA1EF0, 0x5D, 5}, //[32]5.00 PSP-3000
    { 0x0DAA10F0, key_0DAA10F0, xor_0DAA10F0, 0x5D, 5}, //[32]3.60 PSP-2000
    { 0x0DAA06F0, key_0DAA06F0, xor_0DAA06F0, 0x5D, 5}, //[32]3.00 Super Mario Bros 2,3

    /* 0x70 - Unknown scrambler */
    { 0x692828F0, key_692828F0, xor_692828F0, 0x70, 5}, //[32]5.70 PSPgo
    { 0x69281EF0, key_69281EF0, xor_69281EF0, 0x70, 5}, //[32]5.00 PSP-3000
    { 0x692810F0, key_692810F0, xor_692810F0, 0x70, 5}, //[32]3.60 PSP-2000
    { 0x692808F0, key_692808F0, xor_692808F0, 0x70, 5}, //[32]3.10
    { 0x692806F0, key_692806F0, xor_692806F0, 0x70, 5}, //[32]3.00
    { 0x692805F0, key_692805F0, xor_692805F0, 0x70, 5}, //[32]2.80

    /* Known TAGs - Unknown scrambler) */
    { 0xF5F12304, key_F5F12304, xor_F5F12304, 0x70, 5}, //[32]2.70

    /* 0x40 DRM keys */
    { 0xE92428F0, key_E92428F0, xor_E92428F0, 0x40, 5}, //[32]5.70 PSPgo
    { 0xE9241EF0, key_E9241EF0, xor_E9241EF0, 0x40, 5}, //[32]5.00 PSP-3000
    { 0xE92410F0, key_E92410F0, xor_E92410F0, 0x40, 5}, //[32]3.60 PSP-2000
    { 0xE92408F0, key_E92408F0, xor_E92408F0, 0x40, 5}, //[32]3.10
    { 0xE92406F0, key_E92406F0, xor_E92406F0, 0x40, 5}, //[32]3.00
    { 0xE92405F0, key_E92405F0, xor_E92405F0, 0x40, 5}, //[32]2.80

    /* 0x70 - Unknown scrambler */
    { 0x89742B04, key_89742B04, xor_89742B04, 0x70, 5}, //[32]2.70

    /* 0x47 Unknown keys */
    { 0x2FD313F0, key_2FD313F0, xor_2FD313F0, 0x47, 5}, //[32]6.36
    { 0x2FD312F0, key_2FD312F0, xor_2FD312F0, 0x47, 5}, //[32]5.70 PSPgo
    { 0x2FD311F0, key_2FD311F0, xor_2FD311F0, 0x47, 5}, //[32]5.05
    { 0x2FD310F0, key_2FD310F0, xor_2FD310F0, 0x47, 5}, //[32]5.00
    { 0x2FD30BF0, key_2FD30BF0, xor_2FD30BF0, 0x47, 5}, //[32]6.20

    /* 0x48 UMD EBOOT.BIN (OPNSSMP.BIN) */
    { 0x2E5E90F0, key_2E5E90F0, 0x48 }, //[32]
    { 0x2E5E80F0, key_2E5E80F0, 0x48 }, //[32]6.30
    { 0x2E5E13F0, key_2E5E13F0, 0x48 }, //[32]
    { 0x2E5E12F0, key_2E5E12F0, xor_2E5E12F0, 0x48, 5}, //[32]
    { 0x2E5E11F0, key_2E5E11F0, xor_2E5E11F0, 0x48, 5}, //[32]6.00
    { 0x2E5E10F0, key_2E5E10F0, xor_2E5E10F0, 0x48, 5}, //[32]5.00 PSP-2000 (Game PSN Update 2 LBP)
    { 0x2E5E0AF0, key_2E5E0AF0, xor_2E5E0AF0, 0x48, 5}, //[32]6.20

    /* 0x6A Unknown keys */
    { 0x407810F0, key_407810F0, xor_407810F0, 0x6A, 5}, //[32]3.80 f5psp.sprx
    { 0x40780AF0, key_40780AF0, xor_40780AF0, 0x6A, 5}, //[32]5.02 Jig Stick //6.20
};

144 байтные (тип 8)

////////// Decryption 1 //////////

// use pre-calculated keys (step1 results)

// 0x42 0x00000000 1.xx systems fw files
u32 g_key00[] = {
  0x7B21F3BE, 0x299C5E1D, 0x1C9C5E71, 0x96CB4645, 0x3C9B1BE0, 0xEB85DE3D,
  0x4A7F2022, 0xC2206EAA, 0xD50B3265, 0x55770567, 0x3C080840, 0x981D55F2,
  0x5FD8F6F3, 0xEE8EB0C5, 0x944D8152, 0xF8278651, 0x2705BAFA, 0x8420E533,
  0x27154AE9, 0x4819AA32, 0x59A3AA40, 0x2CB3CF65, 0xF274466D, 0x3A655605,
  0x21B0F88F, 0xC5B18D26, 0x64C19051, 0xD669C94E, 0xE87035F2, 0x9D3A5909,
  0x6F4E7102, 0xDCA946CE, 0x8416881B, 0xBAB097A5, 0x249125C6, 0xB34C0872,
};
// 0x45 0x02000000 1.xx modules and library fw files
u32 g_key02[] = {
  0xCCFDA932, 0x51C06F76, 0x046DCCCF, 0x49E1821E, 0x7D3B024C, 0x9DDA5865,
  0xCC8C9825, 0xD1E97DB5, 0x6874D8CB, 0x3471C987, 0x72EDB3FC, 0x81C8365D,
  0xE161E33A, 0xFC92DB59, 0x2009B1EC, 0xB1A94CE4, 0x2F03696B, 0x87E236D8,
  0x3B2B8CE9, 0x0305E784, 0xF9710883, 0xB039DB39, 0x893BEA37, 0xE74D6805,
  0x2A5C38BD, 0xB08DC813, 0x15B32375, 0x46BE4525, 0x0103FD90, 0xA90E87A2,
  0x52ABA66A, 0x85BF7B80, 0x45E8CE63, 0x4DD716D3, 0xF5E30D2D, 0xAF3AE456,
};
// 0x46 0x03000000 1.xx usersystemlib.prx
u32 g_key03[] = {
  0xA6C8F5CA, 0x6D67C080, 0x924F4D3A, 0x047CA06A, 0x08640297, 0x4FD4A758,
  0xBD685A87, 0x9B2701C2, 0x83B62A35, 0x726B533C, 0xE522FA0C, 0xC24B06B4,
  0x459D1CAC, 0xA8C5417B, 0x4FEA62A2, 0x0615D742, 0x30628D09, 0xC44FAB14,
  0x69FF715E, 0xD2D8837D, 0xBEED0B8B, 0x1E6E57AE, 0x61E8C402, 0xBE367A06,
  0x543F2B5E, 0xDB3EC058, 0xBE852075, 0x1E7E4DCC, 0x1564EA55, 0xEC7825B4,
  0xC0538CAD, 0x70F72C7F, 0x49E8C3D0, 0xEDA97EC5, 0xF492B0A4, 0xE05EB02A,
};
// 0x47 0x04000000 OK!
u32 g_key04[] = {
  0x64729CAF, 0x3F3451F5, 0x6559EBD2, 0xC3CBFA21, 0x8A780196, 0x1C749BC9,
  0xC5A99155, 0xFA85E422, 0x82E004FB, 0xEA65BD10, 0x20A96148, 0x0E46EEE0,
  0x68EDD594, 0xA466FF1A, 0x764CB496, 0x51884D6A, 0x9A0F2EF9, 0x0AFCBF1D,
  0x75A46057, 0xC205F3D7, 0xDD326F34, 0x0C10CF75, 0x7A60A3F5, 0x52483851,
  0x824673A8, 0xA16975CA, 0x0468574A, 0xC2D94194, 0xC8414EAA, 0xC8C6DCC9,
  0xFA7029CE, 0xAA203837, 0x6C94EC06, 0xCBD0719C, 0x7CFD62C8, 0xB551EBB4,
};
// 0x48 0x05000000 OK!
u32 g_key05[] = {
  0xF00AB649, 0x3DC93A44, 0x47CD63CF, 0x03767816, 0x593AAE9F, 0xF7F9CC8A,
  0x9DB5DA91, 0x9E67B676, 0x28DBE9E8, 0xB388EDDB, 0x6D26FB21, 0x7CE9C56A,
  0xC158EF21, 0xEA73BAFD, 0x057C8350, 0xEE9920DB, 0xE2D8A595, 0x0A848D9E,
  0x3BE5F557, 0x428FA065, 0xE64EBE93, 0x517A240A, 0xDBE9916C, 0xE4E129C3,
  0x103F362A, 0xAB906310, 0x4A124DFA, 0xFD015D42, 0x64991E5C, 0xBC60C13C,
  0x98937BF8, 0x0D29756C, 0xB5FE1ED7, 0x19C242FF, 0x8911F8A6, 0xDD1C3CBA,
};
// 0x49 0x06000000 OK!
u32 g_key06[] = {
  0x499E8617, 0x6F83909F, 0x388D9D19, 0xE82C3CCC, 0xC318ECEB, 0xAC7985E8,
  0x41376431, 0x29DCBDA5, 0xD5D327C7, 0xD2B3E4BD, 0x835F549D, 0xB8FD557D,
  0x4731EF1C, 0xA9E2DB95, 0xC5BF55BF, 0x40B9291E, 0xD470AF4B, 0xD44D096A,
  0xA9EBDF7B, 0xECD1D3E8, 0xD50EDB47, 0x8502CE1F, 0x8E87A3E5, 0x21D20C8A,
  0x0C4BB1D6, 0x342DD7B8, 0xBD1A3231, 0xF32BB408, 0x66CFDFD1, 0x367F9951,
  0xEBD037A9, 0x0DADBAA1, 0x2701FFE2, 0x8844AE3F, 0x8D1ACA23, 0x32049549,
};
// 0x4A 0x07000000 OK!
u32 g_key07[] = {
  0x76CB00AF, 0x111CE62F, 0xB7B27E36, 0x6D8DE8F9, 0xD54BF16A, 0xD9E90373,
  0x7599D982, 0x51F82B0E, 0x636103AD, 0x8E40BC35, 0x2F332C94, 0xF513AAE9,
  0xD22AFEE9, 0x04343987, 0xFC5BB80C, 0x12349D89, 0x14A481BB, 0x25ED3AE8,
  0x7D500E4F, 0x43D1B757, 0x7B59FDAD, 0x4CFBBF34, 0xC3D17436, 0xC1DA21DB,
  0xA34D8C80, 0x962B235D, 0x3E420548, 0x09CF9FFE, 0xD4883F5C, 0xD90E9CB5,
  0x00AEF4E9, 0xF0886DE9, 0x62A58A5B, 0x52A55546, 0x971941B5, 0xF5B79FAC,
};
// 0x4B 0x08000000 1.xx game EBOOT.BIN (for example WipEout PurE UCES-00001)
u32 g_key08[] = {
  0x18CB69EF, 0x158E8912, 0xDEF90EBB, 0x4CB0FB23, 0x3687EE18, 0x868D4A6E,
  0x19B5C756, 0xEE16551D, 0xE7CB2D6C, 0x9747C660, 0xCE95143F, 0x2956F477,
  0x03824ADE, 0x210C9DF1, 0x5029EB24, 0x81DFE69F, 0x39C89B00, 0xB00C8B91,
  0xEF2DF9C2, 0xE13A93FC, 0x8B94A4A8, 0x491DD09D, 0x686A400D, 0xCED4C7E4,
  0x96C8B7C9, 0x1EAADC28, 0xA4170B84, 0x505D5DDC, 0x5DA6C3CF, 0x0E5DFA2D,
  0x6E7919B5, 0xCE5E29C7, 0xAAACDB94, 0x45F70CDD, 0x62A73725, 0xCCE6563D,
};
// 0x4C 0x09000000 OK! gameshare
u32 g_key09[] = {
  0x721B53E8, 0xFC3E31C6, 0xF85BA2A2, 0x3CF0AC72, 0x54EEA7AB, 0x5959BFCB,
  0x54B8836B, 0xBC431313, 0x989EF2CF, 0xF0CE36B2, 0x98BA4CF8, 0xE971C931,
  0xA0375DC8, 0x08E52FA0, 0xAC0DD426, 0x57E4D601, 0xC56E61C7, 0xEF1AB98A,
  0xD1D9F8F4, 0x5FE9A708, 0x3EF09D07, 0xFA0C1A8C, 0xA91EEA5C, 0x58F482C5,
  0x2C800302, 0x7EE6F6C3, 0xFF6ABBBB, 0x21100DD0, 0xD3297A88, 0x980012D3,
  0xDC59C87B, 0x7FDC5792, 0xDB3F5DA6, 0xFC23B787, 0x22698ED3, 0xB680E812,
};
// 0x4D 0x0A000000 OK!
u32 g_key0A[] = {
  0x26DB83C4, 0x4BF4E7E7, 0xBFF54E61, 0xFEB5E83C, 0x49D0502F, 0x7676A194,
  0x457EF3EF, 0xF8FF292C, 0x1D22EE76, 0xC51FD7AE, 0xDC93E1B3, 0xA295BDA7,
  0xE8B906A0, 0x681C2D0E, 0xE46F46E0, 0x9AE49C1A, 0x08777693, 0x810E9D06,
  0xD6B2DBAB, 0x3CA3E3D1, 0xE13DD704, 0xFA1560D1, 0xA425B3A9, 0xDEA1D27F,
  0xE8F95068, 0x2A305A10, 0xCC711917, 0xF13246C5, 0x04D61DAF, 0x0D6F461D,
  0x897861B4, 0xA2AC7AEB, 0xD323093B, 0xA2544FB8, 0x279E9162, 0x321E93C7,
};
// 0x4E 0x0B000000 updaters key DATA.PSP
u32 g_key0B[] = {
  0xA5603CBF, 0xD7482441, 0xF65764CC, 0x1F90060B, 0x4EA73E45, 0xE551D192,
  0xE7B75D8A, 0x465A506E, 0x40FB1022, 0x2C273350, 0x8096DA44, 0x9947198E,
  0x278DEE77, 0x745D062E, 0xC148FA45, 0x832582AF, 0x5FDB86DA, 0xCB15C4CE,
  0x2524C62F, 0x6C2EC3B1, 0x369BE39E, 0xF7EB1FC4, 0x1E51CE1A, 0xD70536F4,
  0xC34D39D8, 0x7418FB13, 0xE3C84DE1, 0xB118F03C, 0xA2018D4E, 0xE6D8770D,
  0x5720F390, 0x17F96341, 0x60A4A68F, 0x1327DD28, 0x05944C64, 0x0C2C4C12,
};
// 0x4F 0x0C000000 Game Demos 2.71 DATA.PSP key - Locoroco, Kazuo
u32 g_key0C[] = {
  0x1ABF102F, 0xD596D071, 0x6FC552B2, 0xD4F2531F, 0xF025CDD9, 0xAF9AAF03,
  0xE0CF57CF, 0x255494C4, 0x7003675E, 0x907BC884, 0x002D4EE4, 0x0B687A0D,
  0x9E3AA44F, 0xF58FDA81, 0xEC26AC8C, 0x3AC9B49D, 0x3471C037, 0xB0F3834D,
  0x10DC4411, 0xA232EA31, 0xE2E5FA6B, 0x45594B03, 0xE43A1C87, 0x31DAD9D1,
  0x08CD7003, 0xFA9C2FDF, 0x5A891D25, 0x9B5C1934, 0x22F366E5, 0x5F084A32,
  0x695516D5, 0x2245BE9F, 0x4F6DD705, 0xC4B8B8A1, 0xBC13A600, 0x77B7FC3B,
};
// 0x50 0x0D000000 OK!
u32 g_key0D[] = {
  0x3B45E6FD, 0x6246E3DC, 0xBAEA4F91, 0x42854D9E, 0x1529D135, 0xDFD0B7F6,
  0xFCA48679, 0x1916A435, 0x0CC52DB5, 0x68C00C9C, 0xFF23AA16, 0x6897DFE9,
  0x91328106, 0x421EF140, 0xDE746F8F, 0xCF04DCE1, 0xB95B7B66, 0xA9BDFFC8,
  0x8894BA38, 0xD7D36158, 0x7E7538CA, 0x709B5021, 0x4A07AF69, 0xC54872C8,
  0xF070CC24, 0xF715D693, 0xB5E92F9C, 0x204CFBD0, 0x752D6960, 0xB3538CC5,
  0xED1BDE56, 0x897D1AC1, 0x51AEA81F, 0xFE37B72D, 0x1A9C0DE9, 0x2FD95F8F,
};
// 0x51 0x0E000000 OK!
u32 g_key0E[] = {
  0x95FF0CA0, 0x7ED02497, 0x3163071F, 0x6E26FBC0, 0xF9CC9C87, 0xA69D3ED2,
  0xF004C647, 0x0156A37F, 0x9F3D338B, 0x75E41C30, 0xE6BE144B, 0x35F6355B,
  0x81662E13, 0xDB6695B5, 0xCBBD0916, 0xABA4909A, 0x921FF555, 0x8904E655,
  0x64E60EC3, 0x8537997C, 0xFF785ED3, 0x0F77D11C, 0x47E1E82D, 0x7A346190,
  0xD56FC4E6, 0xE9AB0EE4, 0x2F2EA61E, 0x74387C37, 0x735397DB, 0x594CB6DB,
  0x5324753B, 0x0D88768C, 0xE32C2B41, 0x1E94EEBA, 0x175DCF73, 0x1A14F0B6,
};
// 0x52 0x0F000000 2.50 meimg and me_sdimg
u32 g_key0F[] = {
  0xA381FEBC, 0x99B9D5C9, 0x6C560A8D, 0x30309F95, 0x792646CC, 0x82B64E5E,
  0x1A3951AD, 0x0A182EC4, 0xC46131B4, 0x77C50C8A, 0x325F16C6, 0x02D1942E,
  0x0AA38AC4, 0x2A940AC6, 0x67034726, 0xE52DB133, 0xD2EF2107, 0x85C81E90,
  0xC8D164BA, 0xC38DCE1D, 0x948BA275, 0x0DB84603, 0xE2473637, 0xCD74FCDA,
  0x588E3D66, 0x6D28E822, 0x891E548B, 0xF53CF56D, 0x0BBDDB66, 0xC4B286AA,
  0x2BEBBC4B, 0xFC261FF4, 0x92B8E705, 0xDCEE6952, 0x5E0442E5, 0x8BEB7F21,
};
// 0x52 0x862648D1 2.60 meimg and me_sdimg
u32 g_key86[] = {
  0x11BFD698, 0xD7F9B324, 0xDD524927, 0x16215B86, 0x504AC36D, 0x5843B217,
  0xE5A0DA47, 0xBB73A1E7, 0x2915DB35, 0x375CFD3A, 0xBB70A905, 0x272BEFCA,
  0x2E960791, 0xEA0799BB, 0xB85AE6C8, 0xC9CAF773, 0x250EE641, 0x06E74A9E,
  0x5244895D, 0x466755A5, 0x9A84AF53, 0xE1024174, 0xEEBA031E, 0xED80B9CE,
  0xBC315F72, 0x5821067F, 0xE8313058, 0xD2D0E706, 0xE6D8933E, 0xD7D17FB4,
  0x505096C4, 0xFDA50B3B, 0x4635AE3D, 0xEB489C8A, 0x422D762D, 0x5A8B3231,
};
// 0x59 0x4467415d 2.xx systems and drivers fw files
u32 g_key44[] = {
  0xEF80E005, 0x3A54689F, 0x43C99CCD, 0x1B7727BE, 0x5CB80038, 0xDD2EFE62,
  0xF369F92C, 0x160F94C5, 0x29560019, 0xBF3C10C5, 0xF2CE5566, 0xCEA2C626,
  0xB601816F, 0x64E7481E, 0x0C34DEBD, 0x98F29CB0, 0x3FC504D7, 0xC8FB39F0,
  0x0221B3D8, 0x63F936A2, 0x9A3A4800, 0x6ECC32E3, 0x8E120CFD, 0xB0361623,
  0xAEE1E689, 0x745502EB, 0xE4A6C61C, 0x74F23EB4, 0xD7FA5813, 0xB01916EB,
  0x12328457, 0xD2BC97D2, 0x646425D8, 0x328380A5, 0x43DA8AB1, 0x4B122AC9,
};
// 0x5A 0x207BBF2F 2.xx vsh fw files
u32 g_key20[] = {
  0x33B50800, 0xF32F5FCD, 0x3C14881F, 0x6E8A2A95, 0x29FEEFD5, 0x1394EAE3,
  0xBD6BD443, 0x0821C083, 0xFAB379D3, 0xE613E165, 0xF5A754D3, 0x108B2952,
  0x0A4B1E15, 0x61EADEBA, 0x557565DF, 0x3B465301, 0xAE54ECC3, 0x61423309,
  0x70C9FF19, 0x5B0AE5EC, 0x989DF126, 0x9D987A5F, 0x55BC750E, 0xC66EBA27,
  0x2DE988E8, 0xF76600DA, 0x0382DCCB, 0x5569F5F2, 0x8E431262, 0x288FE3D3,
  0x656F2187, 0x37D12E9C, 0x2F539EB4, 0xA492998E, 0xED3958F7, 0x39E96523,
};
// 0x5B 0x3ACE4DCE 2.xx modules and library fw files
u32 g_key3A[] = {
  0x67877069, 0x3ABD5617, 0xC23AB1DC, 0xAB57507D, 0x066A7F40, 0x24DEF9B9,
  0x06F759E4, 0xDCF524B1, 0x13793E5E, 0x0359022D, 0xAAE7E1A2, 0x76B9B2FA,
  0x9A160340, 0x87822FBA, 0x19E28FBB, 0x9E338A02, 0xD8007E9A, 0xEA317AF1,
  0x630671DE, 0x0B67CA7C, 0x865192AF, 0xEA3C3526, 0x2B448C8E, 0x8B599254,
  0x4602E9CB, 0x4DE16CDA, 0xE164D5BB, 0x07ECD88E, 0x99FFE5F8, 0x768800C1,
  0x53B091ED, 0x84047434, 0xB426DBBC, 0x36F948BB, 0x46142158, 0x749BB492,
};
// 0x5C 0xB818624D
u32 g_keyB8[] = {
  0x51FA7415, 0x538411BA, 0x58171A2E, 0x0FA0B35C, 0xBBFFA1F3, 0xB0386FBF,
  0x0633DF2A, 0x26CE46AD, 0xA25E64EE, 0x3937B415, 0x5E4BAF55, 0x507BBE43,
  0xBBAC0050, 0xEA310152, 0xC700099B, 0x73B75192, 0xE09049C3, 0x20209748,
  0x4304EF85, 0xB0BAC80C, 0x78674127, 0x32502F65, 0x6B71CF23, 0xE3E85B8B,
  0x7D045F52, 0x074C24A9, 0x9325371C, 0x09F586B7, 0x4F6DA2F2, 0xD808C1AE,
  0x64115E1B, 0x53553C04, 0xC012CE52, 0xE998C929, 0x63B09F11, 0xCF54F7E4,
};
// 0x5D 0xC0CB167C 2.xx+ game eboot.bin
u32 g_keyC0[] = {
  0xDA8E36FA, 0x5DD97447, 0x76C19874, 0x97E57EAF, 0x1CAB09BD, 0x9835BAC6,
  0x03D39281, 0x03B205CF, 0x2882E734, 0xE714F663, 0xB96E2775, 0xBD8AAFC7,
  0x1DD3EC29, 0xECA4A16C, 0x5F69EC87, 0x85981E92, 0x7CFCAE21, 0xBAE9DD16,
  0xE6A97804, 0x2EEE02FC, 0x61DF8A3D, 0xDD310564, 0x9697E149, 0xC2453F3B,
  0xF91D8456, 0x39DA6BC8, 0xB3E5FEF5, 0x89C593A3, 0xFB5C8ABC, 0x6C0B7212,
  0xE10DD3CB, 0x98D0B2A8, 0x5FD61847, 0xF0DC2357, 0x7701166A, 0x0F5C3B68,
};
// 0x5E 0xBB67C59F gameshare 2.xx
u32 g_keyBB[] = {
  0x94A757C7, 0x9FD39833, 0xF8508371, 0x328B0B29, 0x2CBCB9DA, 0x2918B9C6,
  0x944C50BA, 0xF1DCE7D0, 0x640C3966, 0xC90B3D08, 0xF4AD17BA, 0x6CA0F84B,
  0xF7767C67, 0xA4D3A55A, 0x4A085C6A, 0x6BB27071, 0xFA8B38FB, 0x3FDB31B8,
  0x8B7196F2, 0xDB9BED4A, 0x51625B84, 0x4C1481B4, 0xF684F508, 0x30B44770,
  0x93AA8E74, 0x90C579BC, 0x246EC88D, 0x2E051202, 0xC774842E, 0xA185D997,
  0x7A2B3ADD, 0xFE835B6D, 0x508F184D, 0xEB4C4F13, 0x0E1993D3, 0xBA96DFD2,
};
// 0x5F 0x4C74CBA9 Updater
u32 g_key4C[] = {
  0x05A838BD, 0x81DE7645, 0xD53D505D, 0x9D6F0F7E, 0x4D863816, 0xC94795B9,
  0x1E3D925E, 0xEBDB398C, 0x77FA188D, 0xD4E34688, 0xE337FCF1, 0xD5E9DD10,
  0xD635B768, 0x4038A375, 0x33A6A599, 0xE537DBC5, 0x65637369, 0x905BC1C5,
  0xBE7A739E, 0xB69F4CD4, 0x24546705, 0x0FAD6036, 0xF3C01ECF, 0x84095A9D,
  0x81147182, 0x508DF151, 0xE46B6B92, 0x9C45B85C, 0x1669DF78, 0xB0ED16B2,
  0x6CF3AF47, 0xCF8B5475, 0x414E54EC, 0xAFA16FA9, 0x54132B7F, 0xE4093930,
};
// 0x60 0x7F24BDCD Demo Games
u32 g_key7F[] = {
  0x2A5282B4, 0x8706DDA5, 0x4C88EC1C, 0xD504708E, 0x72634DD2, 0xDD2E2F60,
  0xE3D5FDB5, 0xE050637D, 0x295C69AC, 0x7B61F57D, 0x594412B0, 0x13D925CE,
  0x2A6BE8DD, 0xBC9594E6, 0x1F4A8A39, 0xC56B5909, 0x52CFB2F7, 0x03EE089F,
  0x5CA57A21, 0xDB64090F, 0x5E9A56F3, 0x13C56633, 0xD9C48D1D, 0xCDA05972,
  0xD09E13B2, 0x7DEDD3DF, 0x364387BB, 0xCB207488, 0xBEC14B3F, 0x7C9C0D11,
  0x9916ED40, 0x65909519, 0xC55BB1B3, 0xE997E084, 0xB483438B, 0xB8A2D255,
};
// 0x61 0x1BC8D12B 1seg
u32 g_key1B[] = {
  0x7DC1B266, 0x5B45FF43, 0x5CF9FAA6, 0x7945DA40, 0x6937FDA2, 0x4E54B274,
  0x0CC3F5EC, 0xCA7AB768, 0xF9C8D518, 0xC8ABBF41, 0xEC175D91, 0x59ABFEC5,
  0x6422AC33, 0x8FAD686E, 0xF22281C9, 0xB5F311B5, 0x1090EF17, 0x971EE73D,
  0xF74659A7, 0xDF62E802, 0x617CAED2, 0xDD73A68D, 0x7E21F118, 0x86FABA9D,
  0x77FA7101, 0xDB5BFBE4, 0x4A6FA578, 0x8C3EF59A, 0x19EDFCD8, 0x54C96A8B,
  0x8D7AD098, 0xD406BE03, 0x3397EE1E, 0x36DA4F21, 0x4DF9F731, 0xF0B6CF60,
};

typedef struct
{
    u32 tag;      // 4 byte value at offset 0xD0 in the PRX file
    u8* key;      // "step1_result" use for XOR step
    u8 code;      // Code for scramble
    u8 codeExtra; // Extra code for ExtraV2Mangle
} TAG_INFO;

// tags and corresponding keys & scramble codes
static const TAG_INFO g_tagInfo[] =
{
    /* 1.00 FW */
    { 0x00000000, (u8*)g_key00, 0x42 }, //1.00 Kernel system and driver fw
    { 0x02000000, (u8*)g_key02, 0x45 }, //1.00 User module and library fw

    /* 1.50 FW */
    { 0x03000000, (u8*)g_key03, 0x46 }, //1.50 Library
    { 0x04000000, (u8*)g_key04, 0x47 }, //1.50
    { 0x05000000, (u8*)g_key05, 0x48 }, //1.50
    { 0x06000000, (u8*)g_key06, 0x49 }, //1.50
    { 0x07000000, (u8*)g_key07, 0x4A }, //1.50 index.dat
    { 0x08000000, (u8*)g_key08, 0x4B }, //1.50 Game EBOOT.BIN
    { 0x09000000, (u8*)g_key09, 0x4C }, //1.50 Gameshare
    { 0x0A000000, (u8*)g_key0A, 0x4D }, //1.50
    { 0x0B000000, (u8*)g_key0B, 0x4E }, //1.50 DATA.PSP Updater
    { 0x0C000000, (u8*)g_key0C, 0x4F }, //1.50 DATA.PSP Demo Game (locoroco, kazue, etc)
    { 0x0D000000, (u8*)g_key0D, 0x50 }, //1.50
    { 0x0E000000, (u8*)g_key0E, 0x51 }, //1.50
    { 0x0F000000, (u8*)g_key0F, 0x52 }, //1.50 meimg and me_sdimg

    /* 2.60 FW */
    { 0x862648D1, (u8*)g_key86, 0x52, 0x52 }, //2.60 meimg and me_sdimg

    /* 2.00 FW */
    { 0x4467415D, (u8*)g_key44, 0x59, 0x59 }, //2.00 Kernel system and driver fw
    { 0x207BBF2F, (u8*)g_key20, 0x5A, 0x5A }, //2.00 User vsh
    { 0x3ACE4DCE, (u8*)g_key3A, 0x5B, 0x5B }, //2.00 User module and library fw
    { 0xB818624D, (u8*)g_keyB8, 0x5C, 0x5C }, //2.00 index.dat
    { 0xC0CB167C, (u8*)g_keyC0, 0x5D, 0x5D }, //2.00 Game EBOOT.BIN
    { 0xBB67C59F, (u8*)g_keyBB, 0x5E, 0x5E }, //2.00 Gameshare
    { 0x4C74CBA9, (u8*)g_key4C, 0x5F, 0x5F }, //2.00 Updater
    { 0x7F24BDCD, (u8*)g_key7F, 0x60, 0x60 }, //2.00 Demo Games
    { 0x1BC8D12B, (u8*)g_key1B, 0x61, 0x61 }, //2.00 1seg
};

KIRK

// ECDSA param of kirk1
ECDSA_PARAM ecdsa_kirk1 = {
	.p  = {0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x01,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF},
	.a  = {0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x01,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFC},
	.b  = {0x65,0xD1,0x48,0x8C,0x03,0x59,0xE2,0x34,0xAD,0xC9,0x5B,0xD3,0x90,0x80,0x14,0xBD,0x91,0xA5,0x25,0xF9},
	.N  = {0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0x00,0x01,0xb5,0xc6,0x17,0xf2,0x90,0xea,0xe1,0xdb,0xad,0x8f},
	.Gx = {0x22,0x59,0xAC,0xEE,0x15,0x48,0x9C,0xB0,0x96,0xA8,0x82,0xF0,0xAE,0x1C,0xF9,0xFD,0x8E,0xE5,0xF8,0xFA},
	.Gy = {0x60,0x43,0x58,0x45,0x6D,0x0A,0x1C,0xB2,0x90,0x8D,0xE9,0x0F,0x27,0xD7,0x5C,0x82,0xBE,0xC1,0x08,0xC0},
};

// ECDSA private key of kirk1
u8 priv_key_kirk1[20]  = {0xF3,0x92,0xE2,0x64,0x90,0xB8,0x0F,0xD8,0x89,0xF2,0xD9,0x72,0x2C,0x1F,0x34,0xD7,0x27,0x4F,0x98,0x3D};

// ECDSA public key of kirk1
u8 pub_key_kirk1_x[20] = {0xED,0x9C,0xE5,0x82,0x34,0xE6,0x1A,0x53,0xC6,0x85,0xD6,0x4D,0x51,0xD0,0x23,0x6B,0xC3,0xB5,0xD4,0xB9 };
u8 pub_key_kirk1_y[20] = {0x04,0x9D,0xF1,0xA0,0x75,0xC0,0xE0,0x4F,0xB3,0x44,0x85,0x8B,0x61,0xB7,0x9B,0x69,0xA6,0x3D,0x2C,0x39 };


u8 kirk1_ec_m_header[20] = {0x7D,0x7E,0x46,0x85,0x4D,0x07,0xFA,0x0B,0xC6,0xE8,0xED,0x62,0x99,0x89,0x26,0x14,0x39,0x5F,0xEA,0xFC};
u8 kirk1_ec_r_header[20] = {0x66,0x4f,0xe1,0xf2,0xe9,0xd6,0x63,0x36,0xf7,0x33,0x0b,0xca,0xb9,0x55,0x6d,0xb6,0xeb,0xe8,0x05,0xdc};

u8 kirk1_ec_m_data[20] = {0x15,0xee,0x16,0x24,0x12,0x09,0x58,0x16,0x0f,0x8b,0x1a,0x21,0x33,0x7a,0x38,0xf8,0x29,0xf7,0x2e,0x58};
u8 kirk1_ec_r_data[20] = {0xcd,0xe3,0x88,0xa6,0x3c,0x1d,0x57,0xdc,0x5e,0x94,0xee,0xac,0x2e,0x6c,0x9f,0x2e,0x81,0xc7,0x1c,0x58};

// ECDSA param of applations
ECDSA_PARAM ecdsa_app = {
	.p  = {0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x01,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF},
	.a  = {0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x01,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFC},
	.b  = {0xA6,0x8B,0xED,0xC3,0x34,0x18,0x02,0x9C,0x1D,0x3C,0xE3,0x3B,0x9A,0x32,0x1F,0xCC,0xBB,0x9E,0x0F,0x0B},
	.N  = {0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xB5,0xAE,0x3C,0x52,0x3E,0x63,0x94,0x4F,0x21,0x27},
	.Gx = {0x12,0x8E,0xC4,0x25,0x64,0x87,0xFD,0x8F,0xDF,0x64,0xE2,0x43,0x7B,0xC0,0xA1,0xF6,0xD5,0xAF,0xDE,0x2C},
	.Gy = {0x59,0x58,0x55,0x7E,0xB1,0xDB,0x00,0x12,0x60,0x42,0x55,0x24,0xDB,0xC3,0x79,0xD5,0xAC,0x5F,0x4A,0xDF},
};

// ECDSA private key of EDATA
u8 priv_key_edata[20] = {0xe5,0xc4,0xd0,0xa8,0x24,0x9a,0x6f,0x27,0xe5,0xe0,0xc9,0xd5,0x34,0xf4,0xda,0x15,0x22,0x3f,0x42,0xad};


// AES key for kirk1
u8 kirk1_key[16] = {0x98,0xC9,0x40,0x97,0x5C,0x1D,0x10,0xE8,0x7F,0xE6,0x0E,0xA3,0xFD,0x03,0xA8,0xBA};

// AES key for kirk4/7
u8 kirk7_key00[16] = {0x2C, 0x92, 0xE5, 0x90, 0x2B, 0x86, 0xC1, 0x06, 0xB7, 0x2E, 0xEA, 0x6C, 0xD4, 0xEC, 0x72, 0x48};
u8 kirk7_key01[16] = {0x05, 0x8D, 0xC8, 0x0B, 0x33, 0xA5, 0xBF, 0x9D, 0x56, 0x98, 0xFA, 0xE0, 0xD3, 0x71, 0x5E, 0x1F};
u8 kirk7_key02[16] = {0xB8, 0x13, 0xC3, 0x5E, 0xC6, 0x44, 0x41, 0xE3, 0xDC, 0x3C, 0x16, 0xF5, 0xB4, 0x5E, 0x64, 0x84}; //New from PS3
u8 kirk7_key03[16] = {0x98, 0x02, 0xC4, 0xE6, 0xEC, 0x9E, 0x9E, 0x2F, 0xFC, 0x63, 0x4C, 0xE4, 0x2F, 0xBB, 0x46, 0x68};
u8 kirk7_key04[16] = {0x99, 0x24, 0x4C, 0xD2, 0x58, 0xF5, 0x1B, 0xCB, 0xB0, 0x61, 0x9C, 0xA7, 0x38, 0x30, 0x07, 0x5F};
u8 kirk7_key05[16] = {0x02, 0x25, 0xD7, 0xBA, 0x63, 0xEC, 0xB9, 0x4A, 0x9D, 0x23, 0x76, 0x01, 0xB3, 0xF6, 0xAC, 0x17};
u8 kirk7_key06[16] = {0x60, 0x99, 0xF2, 0x81, 0x70, 0x56, 0x0E, 0x5F, 0x74, 0x7C, 0xB5, 0x20, 0xC0, 0xCD, 0xC2, 0x3C};
u8 kirk7_key07[16] = {0x76, 0x36, 0x8B, 0x43, 0x8F, 0x77, 0xD8, 0x7E, 0xFE, 0x5F, 0xB6, 0x11, 0x59, 0x39, 0x88, 0x5C}; //New from PS3
u8 kirk7_key08[16] = {0x14, 0xA1, 0x15, 0xEB, 0x43, 0x4A, 0x1B, 0xA4, 0x90, 0x5E, 0x03, 0xB6, 0x17, 0xA1, 0x5C, 0x04};
u8 kirk7_key09[16] = {0xE6, 0x58, 0x03, 0xD9, 0xA7, 0x1A, 0xA8, 0x7F, 0x05, 0x9D, 0x22, 0x9D, 0xAF, 0x54, 0x53, 0xD0};
u8 kirk7_key0A[16] = {0xBA, 0x34, 0x80, 0xB4, 0x28, 0xA7, 0xCA, 0x5F, 0x21, 0x64, 0x12, 0xF7, 0x0F, 0xBB, 0x73, 0x23};
u8 kirk7_key0B[16] = {0x72, 0xAD, 0x35, 0xAC, 0x9A, 0xC3, 0x13, 0x0A, 0x77, 0x8C, 0xB1, 0x9D, 0x88, 0x55, 0x0B, 0x0C};
u8 kirk7_key0C[16] = {0x84, 0x85, 0xC8, 0x48, 0x75, 0x08, 0x43, 0xBC, 0x9B, 0x9A, 0xEC, 0xA7, 0x9C, 0x7F, 0x60, 0x18};
u8 kirk7_key0D[16] = {0xB5, 0xB1, 0x6E, 0xDE, 0x23, 0xA9, 0x7B, 0x0E, 0xA1, 0x7C, 0xDB, 0xA2, 0xDC, 0xDE, 0xC4, 0x6E};
u8 kirk7_key0E[16] = {0xC8, 0x71, 0xFD, 0xB3, 0xBC, 0xC5, 0xD2, 0xF2, 0xE2, 0xD7, 0x72, 0x9D, 0xDF, 0x82, 0x68, 0x82};
u8 kirk7_key0F[16] = {0x0A, 0xBB, 0x33, 0x6C, 0x96, 0xD4, 0xCD, 0xD8, 0xCB, 0x5F, 0x4B, 0xE0, 0xBA, 0xDB, 0x9E, 0x03};
u8 kirk7_key10[16] = {0x32, 0x29, 0x5B, 0xD5, 0xEA, 0xF7, 0xA3, 0x42, 0x16, 0xC8, 0x8E, 0x48, 0xFF, 0x50, 0xD3, 0x71};
u8 kirk7_key11[16] = {0x46, 0xF2, 0x5E, 0x8E, 0x4D, 0x2A, 0xA5, 0x40, 0x73, 0x0B, 0xC4, 0x6E, 0x47, 0xEE, 0x6F, 0x0A};
u8 kirk7_key12[16] = {0x5D, 0xC7, 0x11, 0x39, 0xD0, 0x19, 0x38, 0xBC, 0x02, 0x7F, 0xDD, 0xDC, 0xB0, 0x83, 0x7D, 0x9D};
u8 kirk7_key13[16] = {0x51, 0xDD, 0x65, 0xF0, 0x71, 0xA4, 0xE5, 0xEA, 0x6A, 0xAF, 0x12, 0x19, 0x41, 0x29, 0xB8, 0xF4};
u8 kirk7_key14[16] = {0x03, 0x76, 0x3C, 0x68, 0x65, 0xC6, 0x9B, 0x0F, 0xFE, 0x8F, 0xD8, 0xEE, 0xA4, 0x36, 0x16, 0xA0};
u8 kirk7_key15[16] = {0x7D, 0x50, 0xB8, 0x5C, 0xAF, 0x67, 0x69, 0xF0, 0xE5, 0x4A, 0xA8, 0x09, 0x8B, 0x0E, 0xBE, 0x1C};
u8 kirk7_key16[16] = {0x72, 0x68, 0x4B, 0x32, 0xAC, 0x3B, 0x33, 0x2F, 0x2A, 0x7A, 0xFC, 0x9E, 0x14, 0xD5, 0x6F, 0x6B};
u8 kirk7_key17[16] = {0x20, 0x1D, 0x31, 0x96, 0x4A, 0xD9, 0x9F, 0xBF, 0x32, 0xD5, 0xD6, 0x1C, 0x49, 0x1B, 0xD9, 0xFC};
u8 kirk7_key18[16] = {0xF8, 0xD8, 0x44, 0x63, 0xD6, 0x10, 0xD1, 0x2A, 0x44, 0x8E, 0x96, 0x90, 0xA6, 0xBB, 0x0B, 0xAD};
u8 kirk7_key19[16] = {0x5C, 0xD4, 0x05, 0x7F, 0xA1, 0x30, 0x60, 0x44, 0x0A, 0xD9, 0xB6, 0x74, 0x5F, 0x24, 0x4F, 0x4E};
u8 kirk7_key1A[16] = {0xF4, 0x8A, 0xD6, 0x78, 0x59, 0x9C, 0x22, 0xC1, 0xD4, 0x11, 0x93, 0x3D, 0xF8, 0x45, 0xB8, 0x93};
u8 kirk7_key1B[16] = {0xCA, 0xE7, 0xD2, 0x87, 0xA2, 0xEC, 0xC1, 0xCD, 0x94, 0x54, 0x2B, 0x5E, 0x1D, 0x94, 0x88, 0xB2};
u8 kirk7_key1C[16] = {0xDE, 0x26, 0xD3, 0x7A, 0x39, 0x95, 0x6C, 0x2A, 0xD8, 0xC3, 0xA6, 0xAF, 0x21, 0xEB, 0xB3, 0x01};
u8 kirk7_key1D[16] = {0x7C, 0xB6, 0x8B, 0x4D, 0xA3, 0x8D, 0x1D, 0xD9, 0x32, 0x67, 0x9C, 0xA9, 0x9F, 0xFB, 0x28, 0x52};
u8 kirk7_key1E[16] = {0xA0, 0xB5, 0x56, 0xB4, 0x69, 0xAB, 0x36, 0x8F, 0x36, 0xDE, 0xC9, 0x09, 0x2E, 0xCB, 0x41, 0xB1};
u8 kirk7_key1F[16] = {0x93, 0x9D, 0xE1, 0x9B, 0x72, 0x5F, 0xEE, 0xE2, 0x45, 0x2A, 0xBC, 0x17, 0x06, 0xD1, 0x47, 0x69};
u8 kirk7_key20[16] = {0xA4, 0xA4, 0xE6, 0x21, 0x38, 0x2E, 0xF1, 0xAF, 0x7B, 0x17, 0x7A, 0xE8, 0x42, 0xAD, 0x00, 0x31};
u8 kirk7_key21[16] = {0xC3, 0x7F, 0x13, 0xE8, 0xCF, 0x84, 0xDB, 0x34, 0x74, 0x7B, 0xC3, 0xA0, 0xF1, 0x9D, 0x3A, 0x73};
u8 kirk7_key22[16] = {0x2B, 0xF7, 0x83, 0x8A, 0xD8, 0x98, 0xE9, 0x5F, 0xA5, 0xF9, 0x01, 0xDA, 0x61, 0xFE, 0x35, 0xBB};
u8 kirk7_key23[16] = {0xC7, 0x04, 0x62, 0x1E, 0x71, 0x4A, 0x66, 0xEA, 0x62, 0xE0, 0x4B, 0x20, 0x3D, 0xB8, 0xC2, 0xE5};
u8 kirk7_key24[16] = {0xC9, 0x33, 0x85, 0x9A, 0xAB, 0x00, 0xCD, 0xCE, 0x4D, 0x8B, 0x8E, 0x9F, 0x3D, 0xE6, 0xC0, 0x0F};
u8 kirk7_key25[16] = {0x18, 0x42, 0x56, 0x1F, 0x2B, 0x5F, 0x34, 0xE3, 0x51, 0x3E, 0xB7, 0x89, 0x77, 0x43, 0x1A, 0x65};
u8 kirk7_key26[16] = {0xDC, 0xB0, 0xA0, 0x06, 0x5A, 0x50, 0xA1, 0x4E, 0x59, 0xAC, 0x97, 0x3F, 0x17, 0x58, 0xA3, 0xA3};
u8 kirk7_key27[16] = {0xC4, 0xDB, 0xAE, 0x83, 0xE2, 0x9C, 0xF2, 0x54, 0xA3, 0xDD, 0x37, 0x4E, 0x80, 0x7B, 0xF4, 0x25};
u8 kirk7_key28[16] = {0xBF, 0xAE, 0xEB, 0x49, 0x82, 0x65, 0xC5, 0x7C, 0x64, 0xB8, 0xC1, 0x7E, 0x19, 0x06, 0x44, 0x09};
u8 kirk7_key29[16] = {0x79, 0x7C, 0xEC, 0xC3, 0xB3, 0xEE, 0x0A, 0xC0, 0x3B, 0xD8, 0xE6, 0xC1, 0xE0, 0xA8, 0xB1, 0xA4};
u8 kirk7_key2A[16] = {0x75, 0x34, 0xFE, 0x0B, 0xD6, 0xD0, 0xC2, 0x8D, 0x68, 0xD4, 0xE0, 0x2A, 0xE7, 0xD5, 0xD1, 0x55};
u8 kirk7_key2B[16] = {0xFA, 0xB3, 0x53, 0x26, 0x97, 0x4F, 0x4E, 0xDF, 0xE4, 0xC3, 0xA8, 0x14, 0xC3, 0x2F, 0x0F, 0x88};
u8 kirk7_key2C[16] = {0xEC, 0x97, 0xB3, 0x86, 0xB4, 0x33, 0xC6, 0xBF, 0x4E, 0x53, 0x9D, 0x95, 0xEB, 0xB9, 0x79, 0xE4};
u8 kirk7_key2D[16] = {0xB3, 0x20, 0xA2, 0x04, 0xCF, 0x48, 0x06, 0x29, 0xB5, 0xDD, 0x8E, 0xFC, 0x98, 0xD4, 0x17, 0x7B};
u8 kirk7_key2E[16] = {0x5D, 0xFC, 0x0D, 0x4F, 0x2C, 0x39, 0xDA, 0x68, 0x4A, 0x33, 0x74, 0xED, 0x49, 0x58, 0xA7, 0x3A};
u8 kirk7_key2F[16] = {0xD7, 0x5A, 0x54, 0x22, 0xCE, 0xD9, 0xA3, 0xD6, 0x2B, 0x55, 0x7D, 0x8D, 0xE8, 0xBE, 0xC7, 0xEC};
u8 kirk7_key30[16] = {0x6B, 0x4A, 0xEE, 0x43, 0x45, 0xAE, 0x70, 0x07, 0xCF, 0x8D, 0xCF, 0x4E, 0x4A, 0xE9, 0x3C, 0xFA};
u8 kirk7_key31[16] = {0x2B, 0x52, 0x2F, 0x66, 0x4C, 0x2D, 0x11, 0x4C, 0xFE, 0x61, 0x31, 0x8C, 0x56, 0x78, 0x4E, 0xA6};
u8 kirk7_key32[16] = {0x3A, 0xA3, 0x4E, 0x44, 0xC6, 0x6F, 0xAF, 0x7B, 0xFA, 0xE5, 0x53, 0x27, 0xEF, 0xCF, 0xCC, 0x24};
u8 kirk7_key33[16] = {0x2B, 0x5C, 0x78, 0xBF, 0xC3, 0x8E, 0x49, 0x9D, 0x41, 0xC3, 0x3C, 0x5C, 0x7B, 0x27, 0x96, 0xCE};
u8 kirk7_key34[16] = {0xF3, 0x7E, 0xEA, 0xD2, 0xC0, 0xC8, 0x23, 0x1D, 0xA9, 0x9B, 0xFA, 0x49, 0x5D, 0xB7, 0x08, 0x1B};
u8 kirk7_key35[16] = {0x70, 0x8D, 0x4E, 0x6F, 0xD1, 0xF6, 0x6F, 0x1D, 0x1E, 0x1F, 0xCB, 0x02, 0xF9, 0xB3, 0x99, 0x26};
u8 kirk7_key36[16] = {0x0F, 0x67, 0x16, 0xE1, 0x80, 0x69, 0x9C, 0x51, 0xFC, 0xC7, 0xAD, 0x6E, 0x4F, 0xB8, 0x46, 0xC9};
u8 kirk7_key37[16] = {0x56, 0x0A, 0x49, 0x4A, 0x84, 0x4C, 0x8E, 0xD9, 0x82, 0xEE, 0x0B, 0x6D, 0xC5, 0x7D, 0x20, 0x8D};
u8 kirk7_key38[16] = {0x12, 0x46, 0x8D, 0x7E, 0x1C, 0x42, 0x20, 0x9B, 0xBA, 0x54, 0x26, 0x83, 0x5E, 0xB0, 0x33, 0x03};
u8 kirk7_key39[16] = {0xC4, 0x3B, 0xB6, 0xD6, 0x53, 0xEE, 0x67, 0x49, 0x3E, 0xA9, 0x5F, 0xBC, 0x0C, 0xED, 0x6F, 0x8A};
u8 kirk7_key3A[16] = {0x2C, 0xC3, 0xCF, 0x8C, 0x28, 0x78, 0xA5, 0xA6, 0x63, 0xE2, 0xAF, 0x2D, 0x71, 0x5E, 0x86, 0xBA};
u8 kirk7_key3B[16] = {0x83, 0x3D, 0xA7, 0x0C, 0xED, 0x6A, 0x20, 0x12, 0xD1, 0x96, 0xE6, 0xFE, 0x5C, 0x4D, 0x37, 0xC5};
u8 kirk7_key3C[16] = {0xC7, 0x43, 0xD0, 0x67, 0x42, 0xEE, 0x90, 0xB8, 0xCA, 0x75, 0x50, 0x35, 0x20, 0xAD, 0xBC, 0xCE};
u8 kirk7_key3D[16] = {0x8A, 0xE3, 0x66, 0x3F, 0x8D, 0x9E, 0x82, 0xA1, 0xED, 0xE6, 0x8C, 0x9C, 0xE8, 0x25, 0x6D, 0xAA};
u8 kirk7_key3E[16] = {0x7F, 0xC9, 0x6F, 0x0B, 0xB1, 0x48, 0x5C, 0xA5, 0x5D, 0xD3, 0x64, 0xB7, 0x7A, 0xF5, 0xE4, 0xEA};
u8 kirk7_key3F[16] = {0x91, 0xB7, 0x65, 0x78, 0x8B, 0xCB, 0x8B, 0xD4, 0x02, 0xED, 0x55, 0x3A, 0x66, 0x62, 0xD0, 0xAD};
u8 kirk7_key40[16] = {0x28, 0x24, 0xF9, 0x10, 0x1B, 0x8D, 0x0F, 0x7B, 0x6E, 0xB2, 0x63, 0xB5, 0xB5, 0x5B, 0x2E, 0xBB};
u8 kirk7_key41[16] = {0x30, 0xE2, 0x57, 0x5D, 0xE0, 0xA2, 0x49, 0xCE, 0xE8, 0xCF, 0x2B, 0x5E, 0x4D, 0x9F, 0x52, 0xC7};
u8 kirk7_key42[16] = {0x5E, 0xE5, 0x04, 0x39, 0x62, 0x32, 0x02, 0xFA, 0x85, 0x39, 0x3F, 0x72, 0xBB, 0x77, 0xFD, 0x1A};
u8 kirk7_key43[16] = {0xF8, 0x81, 0x74, 0xB1, 0xBD, 0xE9, 0xBF, 0xDD, 0x45, 0xE2, 0xF5, 0x55, 0x89, 0xCF, 0x46, 0xAB};
u8 kirk7_key44[16] = {0x7D, 0xF4, 0x92, 0x65, 0xE3, 0xFA, 0xD6, 0x78, 0xD6, 0xFE, 0x78, 0xAD, 0xBB, 0x3D, 0xFB, 0x63}; //New from PS3
u8 kirk7_key45[16] = {0x74, 0x7F, 0xD6, 0x2D, 0xC7, 0xA1, 0xCA, 0x96, 0xE2, 0x7A, 0xCE, 0xFF, 0xAA, 0x72, 0x3F, 0xF7};
u8 kirk7_key46[16] = {0x1E, 0x58, 0xEB, 0xD0, 0x65, 0xBB, 0xF1, 0x68, 0xC5, 0xBD, 0xF7, 0x46, 0xBA, 0x7B, 0xE1, 0x00};
u8 kirk7_key47[16] = {0x24, 0x34, 0x7D, 0xAF, 0x5E, 0x4B, 0x35, 0x72, 0x7A, 0x52, 0x27, 0x6B, 0xA0, 0x54, 0x74, 0xDB};
u8 kirk7_key48[16] = {0x09, 0xB1, 0xC7, 0x05, 0xC3, 0x5F, 0x53, 0x66, 0x77, 0xC0, 0xEB, 0x36, 0x77, 0xDF, 0x83, 0x07};
u8 kirk7_key49[16] = {0xCC, 0xBE, 0x61, 0x5C, 0x05, 0xA2, 0x00, 0x33, 0x37, 0x8E, 0x59, 0x64, 0xA7, 0xDD, 0x70, 0x3D};
u8 kirk7_key4A[16] = {0x0D, 0x47, 0x50, 0xBB, 0xFC, 0xB0, 0x02, 0x81, 0x30, 0xE1, 0x84, 0xDE, 0xA8, 0xD4, 0x84, 0x13};
u8 kirk7_key4B[16] = {0x0C, 0xFD, 0x67, 0x9A, 0xF9, 0xB4, 0x72, 0x4F, 0xD7, 0x8D, 0xD6, 0xE9, 0x96, 0x42, 0x28, 0x8B}; //1.xx game eboot.bin
u8 kirk7_key4C[16] = {0x7A, 0xD3, 0x1A, 0x8B, 0x4B, 0xEF, 0xC2, 0xC2, 0xB3, 0x99, 0x01, 0xA9, 0xFE, 0x76, 0xB9, 0x87};
u8 kirk7_key4D[16] = {0xBE, 0x78, 0x78, 0x17, 0xC7, 0xF1, 0x6F, 0x1A, 0xE0, 0xEF, 0x3B, 0xDE, 0x4C, 0xC2, 0xD7, 0x86};
u8 kirk7_key4E[16] = {0x7C, 0xD8, 0xB8, 0x91, 0x91, 0x0A, 0x43, 0x14, 0xD0, 0x53, 0x3D, 0xD8, 0x4C, 0x45, 0xBE, 0x16};
u8 kirk7_key4F[16] = {0x32, 0x72, 0x2C, 0x88, 0x07, 0xCF, 0x35, 0x7D, 0x4A, 0x2F, 0x51, 0x19, 0x44, 0xAE, 0x68, 0xDA};
u8 kirk7_key50[16] = {0x7E, 0x6B, 0xBF, 0xF6, 0xF6, 0x87, 0xB8, 0x98, 0xEE, 0xB5, 0x1B, 0x32, 0x16, 0xE4, 0x6E, 0x5D};
u8 kirk7_key51[16] = {0x08, 0xEA, 0x5A, 0x83, 0x49, 0xB5, 0x9D, 0xB5, 0x3E, 0x07, 0x79, 0xB1, 0x9A, 0x59, 0xA3, 0x54};
u8 kirk7_key52[16] = {0xF3, 0x12, 0x81, 0xBF, 0xE6, 0x9F, 0x51, 0xD1, 0x64, 0x08, 0x25, 0x21, 0xFF, 0xBB, 0x22, 0x61};
u8 kirk7_key53[16] = {0xAF, 0xFE, 0x8E, 0xB1, 0x3D, 0xD1, 0x7E, 0xD8, 0x0A, 0x61, 0x24, 0x1C, 0x95, 0x92, 0x56, 0xB6};
u8 kirk7_key54[16] = {0x92, 0xCD, 0xB4, 0xC2, 0x5B, 0xF2, 0x35, 0x5A, 0x23, 0x09, 0xE8, 0x19, 0xC9, 0x14, 0x42, 0x35};
u8 kirk7_key55[16] = {0xE1, 0xC6, 0x5B, 0x22, 0x6B, 0xE1, 0xDA, 0x02, 0xBA, 0x18, 0xFA, 0x21, 0x34, 0x9E, 0xF9, 0x6D};
u8 kirk7_key56[16] = {0x14, 0xEC, 0x76, 0xCE, 0x97, 0xF3, 0x8A, 0x0A, 0x34, 0x50, 0x6C, 0x53, 0x9A, 0x5C, 0x9A, 0xB4};
u8 kirk7_key57[16] = {0x1C, 0x9B, 0xC4, 0x90, 0xE3, 0x06, 0x64, 0x81, 0xFA, 0x59, 0xFD, 0xB6, 0x00, 0xBB, 0x28, 0x70};
u8 kirk7_key58[16] = {0x43, 0xA5, 0xCA, 0xCC, 0x0D, 0x6C, 0x2D, 0x3F, 0x2B, 0xD9, 0x89, 0x67, 0x6B, 0x3F, 0x7F, 0x57};
u8 kirk7_key59[16] = {0x00, 0xEF, 0xFD, 0x18, 0x08, 0xA4, 0x05, 0x89, 0x3C, 0x38, 0xFB, 0x25, 0x72, 0x70, 0x61, 0x06};
u8 kirk7_key5A[16] = {0xEE, 0xAF, 0x49, 0xE0, 0x09, 0x87, 0x9B, 0xEF, 0xAA, 0xD6, 0x32, 0x6A, 0x32, 0x13, 0xC4, 0x29};
u8 kirk7_key5B[16] = {0x8D, 0x26, 0xB9, 0x0F, 0x43, 0x1D, 0xBB, 0x08, 0xDB, 0x1D, 0xDA, 0xC5, 0xB5, 0x2C, 0x92, 0xED};
u8 kirk7_key5C[16] = {0x57, 0x7C, 0x30, 0x60, 0xAE, 0x6E, 0xBE, 0xAE, 0x3A, 0xAB, 0x18, 0x19, 0xC5, 0x71, 0x68, 0x0B};
u8 kirk7_key5D[16] = {0x11, 0x5A, 0x5D, 0x20, 0xD5, 0x3A, 0x8D, 0xD3, 0x9C, 0xC5, 0xAF, 0x41, 0x0F, 0x0F, 0x18, 0x6F}; //2.xx + game eboot.bin
u8 kirk7_key5E[16] = {0x0D, 0x4D, 0x51, 0xAB, 0x23, 0x79, 0xBF, 0x80, 0x3A, 0xBF, 0xB9, 0x0E, 0x75, 0xFC, 0x14, 0xBF};
u8 kirk7_key5F[16] = {0x99, 0x93, 0xDA, 0x3E, 0x7D, 0x2E, 0x5B, 0x15, 0xF2, 0x52, 0xA4, 0xE6, 0x6B, 0xB8, 0x5A, 0x98};
u8 kirk7_key60[16] = {0xF4, 0x28, 0x30, 0xA5, 0xFB, 0x0D, 0x8D, 0x76, 0x0E, 0xA6, 0x71, 0xC2, 0x2B, 0xDE, 0x66, 0x9D};
u8 kirk7_key61[16] = {0xFB, 0x5F, 0xEB, 0x7F, 0xC7, 0xDC, 0xDD, 0x69, 0x37, 0x01, 0x97, 0x9B, 0x29, 0x03, 0x5C, 0x47};
u8 kirk7_key62[16] = {0x02, 0x32, 0x6A, 0xE7, 0xD3, 0x96, 0xCE, 0x7F, 0x1C, 0x41, 0x9D, 0xD6, 0x52, 0x07, 0xED, 0x09};
u8 kirk7_key63[16] = {0x9C, 0x9B, 0x13, 0x72, 0xF8, 0xC6, 0x40, 0xCF, 0x1C, 0x62, 0xF5, 0xD5, 0x92, 0xDD, 0xB5, 0x82};
u8 kirk7_key64[16] = {0x03, 0xB3, 0x02, 0xE8, 0x5F, 0xF3, 0x81, 0xB1, 0x3B, 0x8D, 0xAA, 0x2A, 0x90, 0xFF, 0x5E, 0x61};
u8 kirk7_key65[16] = {0xBC, 0xD7, 0xF9, 0xD3, 0x2F, 0xAC, 0xF8, 0x47, 0xC0, 0xFB, 0x4D, 0x2F, 0x30, 0x9A, 0xBD, 0xA6};
u8 kirk7_key66[16] = {0xF5, 0x55, 0x96, 0xE9, 0x7F, 0xAF, 0x86, 0x7F, 0xAC, 0xB3, 0x3A, 0xE6, 0x9C, 0x8B, 0x6F, 0x93};
u8 kirk7_key67[16] = {0xEE, 0x29, 0x70, 0x93, 0xF9, 0x4E, 0x44, 0x59, 0x44, 0x17, 0x1F, 0x8E, 0x86, 0xE1, 0x70, 0xFC};
u8 kirk7_key68[16] = {0xE4, 0x34, 0x52, 0x0C, 0xF0, 0x88, 0xCF, 0xC8, 0xCD, 0x78, 0x1B, 0x6C, 0xCF, 0x8C, 0x48, 0xC4};
u8 kirk7_key69[16] = {0xC1, 0xBF, 0x66, 0x81, 0x8E, 0xF9, 0x53, 0xF2, 0xE1, 0x26, 0x6B, 0x6F, 0x55, 0x0C, 0xC9, 0xCD};
u8 kirk7_key6A[16] = {0x56, 0x0F, 0xFF, 0x8F, 0x3C, 0x96, 0x49, 0x14, 0x45, 0x16, 0xF1, 0xBC, 0xBF, 0xCE, 0xA3, 0x0C};
u8 kirk7_key6B[16] = {0x24, 0x08, 0xDC, 0x75, 0x37, 0x60, 0xA2, 0x9F, 0x05, 0x54, 0xB5, 0xF2, 0x43, 0x85, 0x73, 0x99};
u8 kirk7_key6C[16] = {0xDD, 0xD5, 0xB5, 0x6A, 0x59, 0xC5, 0x5A, 0xE8, 0x3B, 0x96, 0x67, 0xC7, 0x5C, 0x2A, 0xE2, 0xDC};
u8 kirk7_key6D[16] = {0xAA, 0x68, 0x67, 0x72, 0xE0, 0x2D, 0x44, 0xD5, 0xCD, 0xBB, 0x65, 0x04, 0xBC, 0xD5, 0xBF, 0x4E};
u8 kirk7_key6E[16] = {0x1F, 0x17, 0xF0, 0x14, 0xE7, 0x77, 0xA2, 0xFE, 0x4B, 0x13, 0x6B, 0x56, 0xCD, 0x7E, 0xF7, 0xE9};
u8 kirk7_key6F[16] = {0xC9, 0x35, 0x48, 0xCF, 0x55, 0x8D, 0x75, 0x03, 0x89, 0x6B, 0x2E, 0xEB, 0x61, 0x8C, 0xA9, 0x02};
u8 kirk7_key70[16] = {0xDE, 0x34, 0xC5, 0x41, 0xE7, 0xCA, 0x86, 0xE8, 0xBE, 0xA7, 0xC3, 0x1C, 0xEC, 0xE4, 0x36, 0x0F};
u8 kirk7_key71[16] = {0xDD, 0xE5, 0xFF, 0x55, 0x1B, 0x74, 0xF6, 0xF4, 0xE0, 0x16, 0xD7, 0xAB, 0x22, 0x31, 0x1B, 0x6A};
u8 kirk7_key72[16] = {0xB0, 0xE9, 0x35, 0x21, 0x33, 0x3F, 0xD7, 0xBA, 0xB4, 0x76, 0x2C, 0xCB, 0x4D, 0x80, 0x08, 0xD8};
u8 kirk7_key73[16] = {0x38, 0x14, 0x69, 0xC4, 0xC3, 0xF9, 0x1B, 0x96, 0x33, 0x63, 0x8E, 0x4D, 0x5F, 0x3D, 0xF0, 0x29};
u8 kirk7_key74[16] = {0xFA, 0x48, 0x6A, 0xD9, 0x8E, 0x67, 0x16, 0xEF, 0x6A, 0xB0, 0x87, 0xF5, 0x89, 0x45, 0x7F, 0x2A};
u8 kirk7_key75[16] = {0x32, 0x1A, 0x09, 0x12, 0x50, 0x14, 0x8A, 0x3E, 0x96, 0x3D, 0xEA, 0x02, 0x59, 0x32, 0xE1, 0x8F};
u8 kirk7_key76[16] = {0x4B, 0x00, 0xBE, 0x29, 0xBC, 0xB0, 0x28, 0x64, 0xCE, 0xFD, 0x43, 0xA9, 0x6F, 0xD9, 0x5C, 0xED};
u8 kirk7_key77[16] = {0x57, 0x7D, 0xC4, 0xFF, 0x02, 0x44, 0xE2, 0x80, 0x91, 0xF4, 0xCA, 0x0A, 0x75, 0x69, 0xFD, 0xA8};
u8 kirk7_key78[16] = {0x83, 0x53, 0x36, 0xC6, 0x18, 0x03, 0xE4, 0x3E, 0x4E, 0xB3, 0x0F, 0x6B, 0x6E, 0x79, 0x9B, 0x7A};
u8 kirk7_key79[16] = {0x5C, 0x92, 0x65, 0xFD, 0x7B, 0x59, 0x6A, 0xA3, 0x7A, 0x2F, 0x50, 0x9D, 0x85, 0xE9, 0x27, 0xF8};
u8 kirk7_key7A[16] = {0x9A, 0x39, 0xFB, 0x89, 0xDF, 0x55, 0xB2, 0x60, 0x14, 0x24, 0xCE, 0xA6, 0xD9, 0x65, 0x0A, 0x9D};
u8 kirk7_key7B[16] = {0x8B, 0x75, 0xBE, 0x91, 0xA8, 0xC7, 0x5A, 0xD2, 0xD7, 0xA5, 0x94, 0xA0, 0x1C, 0xBB, 0x95, 0x91};
u8 kirk7_key7C[16] = {0x95, 0xC2, 0x1B, 0x8D, 0x05, 0xAC, 0xF5, 0xEC, 0x5A, 0xEE, 0x77, 0x81, 0x23, 0x95, 0xC4, 0xD7};
u8 kirk7_key7D[16] = {0xB9, 0xA4, 0x61, 0x64, 0x36, 0x33, 0xFA, 0x5D, 0x94, 0x88, 0xE2, 0xD3, 0x28, 0x1E, 0x01, 0xA2};
u8 kirk7_key7E[16] = {0xB8, 0xB0, 0x84, 0xFB, 0x9F, 0x4C, 0xFA, 0xF7, 0x30, 0xFE, 0x73, 0x25, 0xA2, 0xAB, 0x89, 0x7D};
u8 kirk7_key7F[16] = {0x5F, 0x8C, 0x17, 0x9F, 0xC1, 0xB2, 0x1D, 0xF1, 0xF6, 0x36, 0x7A, 0x9C, 0xF7, 0xD3, 0xD4, 0x7C};

// AES key for kirk9
u8 kirk9_key[16]  = {0x9F,0x46,0xF9,0xFC,0xFA,0xB2,0xAD,0x05,0x69,0xF6,0x88,0xD8,0x79,0x4B,0x92,0xBA}; //PSPSpockMasterKey

// AES key for kirk16
u8 kirk16_key[16]  = {0x47,0x5E,0x09,0xF4,0xA2,0x37,0xDA,0x9B,0xEF,0xFF,0x3B,0xC0,0x77,0x14,0x3D,0x8A}; //PSPIDStorageKey


u8* kirk_4_7_get_key(int key_type)
{
    switch(key_type)
	{
		case(0x00): return kirk7_key00; break;
		case(0x01): return kirk7_key01; break;
		case(0x02): return kirk7_key02; break;
		case(0x03): return kirk7_key03; break;
		case(0x04): return kirk7_key04; break;
		case(0x05): return kirk7_key05; break;
		case(0x06): return kirk7_key06; break;
		case(0x07): return kirk7_key07; break;
		case(0x08): return kirk7_key08; break;
		case(0x09): return kirk7_key09; break;
		case(0x0A): return kirk7_key0A; break;
		case(0x0B): return kirk7_key0B; break;
		case(0x0C): return kirk7_key0C; break;
		case(0x0D): return kirk7_key0D; break;
		case(0x0E): return kirk7_key0E; break;
		case(0x0F): return kirk7_key0F; break;
		case(0x10): return kirk7_key10; break;
		case(0x11): return kirk7_key11; break;
		case(0x12): return kirk7_key12; break;
		case(0x13): return kirk7_key13; break;
		case(0x14): return kirk7_key14; break;
		case(0x15): return kirk7_key15; break;
		case(0x16): return kirk7_key16; break;
		case(0x17): return kirk7_key17; break;
		case(0x18): return kirk7_key18; break;
		case(0x19): return kirk7_key19; break;
		case(0x1A): return kirk7_key1A; break;
		case(0x1B): return kirk7_key1B; break;
		case(0x1C): return kirk7_key1C; break;
		case(0x1D): return kirk7_key1D; break;
		case(0x1E): return kirk7_key1E; break;
		case(0x1F): return kirk7_key1F; break;
		case(0x20): return kirk7_key20; break;
		case(0x21): return kirk7_key21; break;
		case(0x22): return kirk7_key22; break;
		case(0x23): return kirk7_key23; break;
		case(0x24): return kirk7_key24; break;
		case(0x25): return kirk7_key25; break;
		case(0x26): return kirk7_key26; break;
		case(0x27): return kirk7_key27; break;
		case(0x28): return kirk7_key28; break;
		case(0x29): return kirk7_key29; break;
		case(0x2A): return kirk7_key2A; break;
		case(0x2B): return kirk7_key2B; break;
		case(0x2C): return kirk7_key2C; break;
		case(0x2D): return kirk7_key2D; break;
		case(0x2E): return kirk7_key2E; break;
		case(0x2F): return kirk7_key2F; break;
		case(0x30): return kirk7_key30; break;
		case(0x31): return kirk7_key31; break;
		case(0x32): return kirk7_key32; break;
		case(0x33): return kirk7_key33; break;
		case(0x34): return kirk7_key34; break;
		case(0x35): return kirk7_key35; break;
		case(0x36): return kirk7_key36; break;
		case(0x37): return kirk7_key37; break;
		case(0x38): return kirk7_key38; break;
		case(0x39): return kirk7_key39; break;
		case(0x3A): return kirk7_key3A; break;
		case(0x3B): return kirk7_key3B; break;
		case(0x3C): return kirk7_key3C; break;
		case(0x3D): return kirk7_key3D; break;
		case(0x3E): return kirk7_key3E; break;
		case(0x3F): return kirk7_key3F; break;
		case(0x40): return kirk7_key40; break;
		case(0x41): return kirk7_key41; break;
		case(0x42): return kirk7_key42; break;
		case(0x43): return kirk7_key43; break;
		case(0x44): return kirk7_key44; break;
		case(0x45): return kirk7_key45; break;
		case(0x46): return kirk7_key46; break;
		case(0x47): return kirk7_key47; break;
		case(0x48): return kirk7_key48; break;
		case(0x49): return kirk7_key49; break;
		case(0x4A): return kirk7_key4A; break;
		case(0x4B): return kirk7_key4B; break;
		case(0x4C): return kirk7_key4C; break;
		case(0x4D): return kirk7_key4D; break;
		case(0x4E): return kirk7_key4E; break;
		case(0x4F): return kirk7_key4F; break;
		case(0x50): return kirk7_key50; break;
		case(0x51): return kirk7_key51; break;
		case(0x52): return kirk7_key52; break;
		case(0x53): return kirk7_key53; break;
		case(0x54): return kirk7_key54; break;
		case(0x55): return kirk7_key55; break;
		case(0x56): return kirk7_key56; break;
		case(0x57): return kirk7_key57; break;
		case(0x58): return kirk7_key58; break;
		case(0x59): return kirk7_key59; break;
		case(0x5A): return kirk7_key5A; break;
		case(0x5B): return kirk7_key5B; break;
		case(0x5C): return kirk7_key5C; break;
		case(0x5D): return kirk7_key5D; break;
		case(0x5E): return kirk7_key5E; break;
		case(0x5F): return kirk7_key5F; break;
		case(0x60): return kirk7_key60; break;
		case(0x61): return kirk7_key61; break;
		case(0x62): return kirk7_key62; break;
		case(0x63): return kirk7_key63; break;
		case(0x64): return kirk7_key64; break;
		case(0x65): return kirk7_key65; break;
		case(0x66): return kirk7_key66; break;
		case(0x67): return kirk7_key67; break;
		case(0x68): return kirk7_key68; break;
		case(0x69): return kirk7_key69; break;
		case(0x6A): return kirk7_key6A; break;
		case(0x6B): return kirk7_key6B; break;
		case(0x6C): return kirk7_key6C; break;
		case(0x6D): return kirk7_key6D; break;
		case(0x6E): return kirk7_key6E; break;
		case(0x6F): return kirk7_key6F; break;
		case(0x70): return kirk7_key70; break;
		case(0x71): return kirk7_key71; break;
		case(0x72): return kirk7_key72; break;
		case(0x73): return kirk7_key73; break;
		case(0x74): return kirk7_key74; break;
		case(0x75): return kirk7_key75; break;
		case(0x76): return kirk7_key76; break;
		case(0x77): return kirk7_key77; break;
		case(0x78): return kirk7_key78; break;
		case(0x79): return kirk7_key79; break;
		case(0x7A): return kirk7_key7A; break;
		case(0x7B): return kirk7_key7B; break;
		case(0x7C): return kirk7_key7C; break;
		case(0x7D): return kirk7_key7D; break;
		case(0x7E): return kirk7_key7E; break;
		case(0x7F): return kirk7_key7F; break;
		default:
			return NULL;
			//need to get the real error code for that, placeholder now :)
	}
}
Sources:
https://www.psdevwiki.com/ps3/Keys#KIRK
https://twitter.com/DaveeFTW/status/1155577298818600965 (DFA -Differential Fault Analysis)
@DaveeFTW
SHA256 of all PSP KIRK keys (0 -> 0x80) concatenated: d7775d16dd5798c6bb5bf13a54bc0d95af4e2ee8e1d2b48c827ebdec4eb0b186
(cd /mnt/c/Users/user_name/Desktop && sha256sum kirk47keybuf.bin)

http://pastebin.com/PzVAS4De

OPNSSMP

ErikPshat · 17.01.2010, 06:04

Дата выхода: 12 декабря 2004
Была установлена на первые консоли выпущенные на рынок Японии

Самая первая версия;
Отсутствует проверка контента на подлинность.

Присутствуют следующие 3 тега у файлов прошивки:

tag 0x00000000 - kernel
tag 0x02000000 - user
tag 0x03000000 - usersystemlib.prx (sceKernelLibrary)

tags 1.00

ATA.PRX                    -> tag 0x00000000 (sceATA_ATAPI_driver)
AUDIO.PRX                  -> tag 0x00000000 (sceAudio_Driver)
audiocodec.prx             -> tag 0x00000000 (sceAudiocodec_Driver)
auth_plugin.prx            -> tag 0x02000000 (auth_plugin_module)
BLKDEV.PRX                 -> tag 0x00000000 (sceBLK_driver)
CHKREG.PRX                 -> tag 0x00000000 (sceChkreg)
CHNNLSV.PRX                -> tag 0x00000000 (sceChnnlsv)
CLOCKGEN.PRX               -> tag 0x00000000 (sceClockgen_Driver)
CODEC.PRX                  -> tag 0x00000000 (sceWM8750_Driver)
common_gui.prx             -> tag 0x02000000 (sceVshCommonGui_Module)
common_util.prx            -> tag 0x02000000 (sceVshCommonUtil_Module)
CTRL.PRX                   -> tag 0x00000000 (sceController_Service)
dialogmain.prx             -> tag 0x02000000 (sceDialogmain_Module)
DISPLAY.PRX                -> tag 0x00000000 (sceDisplay_Service)
DMACMAN.PRX                -> tag 0x00000000 (sceDMAManager)
DMACPLUS.PRX               -> tag 0x00000000 (sceDMACPLUS_Driver)
EMC_DDR.PRX                -> tag 0x00000000 (sceDDR_Driver)
EMC_SM.PRX                 -> tag 0x00000000 (sceNAND_Driver)
exceptionman.prx           -> tag 0x00000000 (sceExceptionManager)
FATMSMOD.PRX               -> tag 0x00000000 (sceMSFAT_Driver)
game_plugin.prx            -> tag 0x02000000 (game_plugin_module)
GE.PRX                     -> tag 0x00000000 (sceGE_Manager)
GPIO.PRX                   -> tag 0x00000000 (sceGPIO_Driver)
heaparea1.prx              -> tag 0x02000000 (scePafHeaparea_Module)
heaparea2.prx              -> tag 0x02000000 (scePafHeaparea_Module)
HPREMOTE.PRX               -> tag 0x00000000 (sceHP_Remote_Driver)
I2C.PRX                    -> tag 0x00000000 (sceI2C_Driver)
idstorage.prx              -> tag 0x00000000 (sceIdStorage_Service)
IFHANDLE.PRX               -> tag 0x00000000 (sceNetIfhandle_Service)
IMPOSE.PRX                 -> tag 0x00000000 (sceImpose_Driver)
impose_plugin.prx          -> tag 0x02000000 (impose_plugin_module)
INIT.PRX                   -> tag 0x00000000 (sceInit)
interruptman.prx           -> tag 0x00000000 (sceInterruptManager)
iofilemgr.prx              -> tag 0x00000000 (sceIOFileManager)
ISOFS.PRX                  -> tag 0x00000000 (sceIsofs_driver)
LCDC.PRX                   -> tag 0x00000000 (sceLCDC_Driver)
LED.PRX                    -> tag 0x00000000 (sceLED_Service)
LFATFS.PRX                 -> tag 0x00000000 (sceLFatFs_Driver)
lflash_fatfmt.prx          -> tag 0x00000000 (sceLflashFatfmt)
libatrac3plus.prx          -> tag 0x02000000 (sceATRAC3plus_Library)
LIBHTTP.PRX                -> tag 0x02000000 (SceHttp_Library)
libparse_http.prx          -> tag 0x02000000 (SceParseHTTPheader_Library)
libparse_uri.prx           -> tag 0x02000000 (SceParseURI_Library)
libupdown.prx              -> tag 0x02000000 (SceUpdateDL_Library)
LOADCORE.PRX               -> tag 0x00000000 (sceLoaderCore)
LOADEXEC.PRX               -> tag 0x00000000 (sceLoadExec)
me_for_vsh.prx             -> tag 0x00000000 (me_for_vsh)
me_wrapper.prx             -> tag 0x00000000 (sceMeCodecWrapper)
MEBOOTER.PRX               -> tag 0x00000000 (sceMeBooter)
mebooter_umdvideo.prx      -> tag 0x00000000 (sceMeBooter)
MEDIAMAN.PRX               -> tag 0x00000000 (sceUmd_driver)
mediasync.prx              -> tag 0x00000000 (sceMediaSync)
MEMAB.PRX                  -> tag 0x00000000 (sceMemab)
MEMLMD.PRX                 -> tag 0x00000000 (sceMemlmd)
MESG_LED.PRX               -> tag 0x00000000 (sceMesgLed)
MGR.PRX                    -> tag 0x00000000 (sceMgr_Driver)
modulemgr.prx              -> tag 0x00000000 (sceModuleManager)
MPEG_VSH.PRX               -> tag 0x02000000 (sceMpeg_library)
MPEGBASE.PRX               -> tag 0x00000000 (sceMpegbase_Driver)
MSAUDIO.PRX                -> tag 0x00000000 (sceMsAudio_Service)
MSCM.PRX                   -> tag 0x00000000 (sceMScm_Driver)
msgdialog_plugin.prx       -> decrypted (ELF)
MSSTOR.PRX                 -> tag 0x00000000 (sceMSstor_Driver)
msvideo_plugin.prx         -> tag 0x02000000 (msvideo_plugin_module)
music_plugin.prx           -> tag 0x02000000 (music_plugin_module)
netconf_plugin.prx         -> tag 0x02000000 (sceVshNetconf_Module)
netplay_client_plugin.prx  -> tag 0x02000000 (sceVshGSPlugin_Module)
netplay_server_utility.prx -> tag 0x02000000 (sceVshGSUtility_Module)
opening_plugin.prx         -> tag 0x02000000 (opening_plugin_module)
OPENPSID.PRX               -> tag 0x00000000 (sceOpenPSID_Service)
osk_plugin.prx             -> tag 0x02000000 (sceVshOSK_Module)
PAF.PRX                    -> tag 0x02000000 (scePaf_Module)
PAFMINI.PRX                -> tag 0x02000000 (scePaf_Module)
PEQ.PRX                    -> tag 0x00000000 (scePEQ_Library_driver)
photo_plugin.prx           -> tag 0x02000000 (photo_plugin_module)
POWER.PRX                  -> tag 0x00000000 (scePower_Service)
PSPBTCNF.TXT               -> tag 0x00000000 ()
pspbtcnf_game.txt          -> tag 0x00000000 ()
pspbtcnf_updater.txt       -> tag 0x00000000 ()
pspcnf_tbl.txt             -> tag 0x00000000 ()
PSPNET.PRX                 -> tag 0x02000000 (sceNet_Library)
pspnet_adhoc.prx           -> tag 0x02000000 (sceNetAdhoc_Library)
pspnet_adhoc_auth.prx      -> tag 0x00000000 (sceNetAdhocAuth_Service)
pspnet_adhoc_download.prx  -> tag 0x02000000 (sceNetAdhocDownload_Library)
pspnet_adhoc_matching.prx  -> tag 0x02000000 (sceNetAdhocMatching_Library)
pspnet_adhocctl.prx        -> tag 0x02000000 (sceNetAdhocctl_Library)
pspnet_ap_dialog_dummy.prx -> tag 0x02000000 (sceNetApDialogDummy_Library)
pspnet_apctl.prx           -> tag 0x02000000 (sceNetApctl_Library)
pspnet_inet.prx            -> tag 0x02000000 (sceNetInet_Library)
pspnet_resolver.prx        -> tag 0x02000000 (sceNetResolver_Library)
PWM.PRX                    -> tag 0x00000000 (scePWM_Driver)
REBOOT.PRX                 -> tag 0x00000000 (sceReboot)
REGISTRY.PRX               -> tag 0x00000000 (sceRegistry_Service)
RTC.PRX                    -> tag 0x00000000 (sceRTC_Service)
savedata_auto_dialog.prx   -> tag 0x02000000 (sceVshSDAuto_Module)
savedata_plugin.prx        -> tag 0x02000000 (sceVshSDPlugin_Module)
savedata_utility.prx       -> tag 0x02000000 (sceVshSDUtility_Module)
SEMAWM.PRX                 -> tag 0x00000000 (sceSemawm)
SIRCS.PRX                  -> tag 0x00000000 (sceSIRCS_IrDA_Driver)
STDIO.PRX                  -> tag 0x00000000 (sceStdio)
SYSCLIB.PRX                -> tag 0x00000000 (sceSysclib)
SYSCON.PRX                 -> tag 0x00000000 (sceSYSCON_Driver)
sysconf_plugin.prx         -> tag 0x02000000 (sysconf_plugin_module)
SYSMEM.PRX                 -> tag 0x00000000 (sceSystemMemoryManager)
sysmem_uart4.prx           -> tag 0x00000000 (sceSystemMemoryManager)
SYSREG.PRX                 -> tag 0x00000000 (sceSYSREG_Driver)
SYSTIMER.PRX               -> tag 0x00000000 (sceSystimer)
threadman.prx              -> tag 0x00000000 (sceThreadManager)
UART4.PRX                  -> tag 0x00000000 (sceUart4)
UMD9660.PRX                -> tag 0x00000000 (sceUmd9660_driver)
UMDMAN.PRX                 -> tag 0x00000000 (sceUmdMan_driver)
update_plugin.prx          -> tag 0x02000000 (update_plugin_module)
USB.PRX                    -> tag 0x00000000 (sceUSB_Driver)
USBSTOR.PRX                -> tag 0x00000000 (sceUSB_Stor_Driver)
usbstorboot.prx            -> tag 0x00000000 (sceUSB_Stor_Boot_Driver)
usbstormgr.prx             -> tag 0x00000000 (sceUSB_Stor_Mgr_Driver)
usbstorms.prx              -> tag 0x00000000 (sceUSB_Stor_Ms_Driver)
usersystemlib.prx          -> tag 0x03000000 (sceKernelLibrary)
UTILITY.PRX                -> tag 0x00000000 (sceUtility_Driver)
UTILS.PRX                  -> tag 0x00000000 (sceKernelUtils)
VAUDIO.PRX                 -> tag 0x00000000 (sceVaudio_driver)
vaudio_game.prx            -> tag 0x00000000 (sceVaudio_driver)
video_plugin.prx           -> tag 0x02000000 (video_plugin_module)
videocodec.prx             -> tag 0x00000000 (sceVideocodec_Driver)
vshbridge.prx              -> tag 0x00000000 (sceVshBridge_Driver)
VSHMAIN.PRX                -> tag 0x02000000 (vsh_module)
WLAN.PRX                   -> tag 0x00000000 (sceWlan_Driver)

ErikPshat · 20.01.2010, 06:02

Дата выхода: 1 сентября 2005
Была установлена на первые консоли выпущенные на рынок Великобритании

Настройки
- Добавлен корейский язык;
- Добавлен пункт Настройки Системы → Набор символов;
- Добавлен пункт Настройки темы;
- Добавлен пункт Настройки безопасности → Управление запуском веб-браузера;
- Добавлена поддержка WPA-PSK в меню Настройки сети;
- Добавлена раскладка ввода веб-адреса на экранной клавиатуре.
Фото
- Добавлена функция установки обоев;
- Добавлена функция передачи изображений через Wi-Fi;
- Добавлена поддержка TIFF, GIF, PNG и BMP;
Музыка
- Сочетание SonicStage версии 3.2 (или выше) и PSP с прошивкой 2.00 (или выше) позволило воспроизводить файлы формата ATRAC3 Plus;
- Добавлена поддержка аудиокодека MPEG-4/AAC (для музыки, сохраненной на Memory Stick Duo);
Видео
- Добавлено соотношение сторон экрана 4:3 (для видео сохраненном на Memory Stick Duo);
- Добавлена функция перехода (для UMDVIDEO и UMDMUSIC);
- Добавлена функция повтора A-B (для UMDVIDEO, UMDMUSIC и видео, сохранённом на Memory Stick Duo);
- Добавлены аудиоопции (для видео, сохраненные на Memory Stick Duo);
- Добавлен формат MPEG-4/AVC (для видео, сохраненном на Memory Stick Duo);
Сеть (Пункт впервые появился только в этой прошивке)
- Добавлен интернет-браузер;

О чудо! Появились новые теги с ключами, помимо тех, которые были в прошивке 1.5.
Причём первые 3 используются для декриптовки файлов прошивки.

tag 0x4467415D // 0x59 systems and drivers fw files - обнаружен в ipl_part3 / memlmd.prx / reboot.bin
tag 0x207BBF2F // 0x5A User vsh
tag 0x3ACE4DCE // 0x5B modules and library fw files
tag 0xB818624D // 0x5C
tag 0xC0CB167C // 0x5D Game EBOOT.BIN
tag 0xBB67C59F // 0x5E Gameshare
tag 0x4C74CBA9 // 0x5F
tag 0x7F24BDCD // 0x60
tag 0x1BC8D12B // 0x61

mesg_led.prx по порядку

main.bin в ipl

Наконец я увидел этот файл main.bin, который находится в IPL и в котором по легенде содержатся ключи к системным файлам. PSARDumper декриптует IPL и выводит его на 3 части в папку "PSARDUMPER".

part1_psp_ipl.bin
part2_psp_ipl.bin
part3_psp_ipl.bin

Все 3 части заполнены данными. Причём main.bin присутствует в первой и второй части - это GZIP-архивы.

Скрин main.bin

А в третьей части обнаружен блок Boot.
Самое интересное, что тег №1 5D416744 с ключём я обнаружил в "part3_psp_ipl.bin" и он там единственный из всех остальных. Этот ключ характерен только данной прошивки и в каждой новой прошивке он обязательно меняется в IPL, как и шифрование файлов, зависящих от этого ключа.

Этим ключём декриптуются системные файлы прошивки, необходимые для старта системы.
После старта, IPL выгружается из памяти и впоследующем, ключ уже берётся из memlmd.prx, т.к. он содержит этот ключ к системным файлам и может открывать другие важные файлы, в частности mesg_led.prx.
А mesg_led.prx уже имеeт все остальные ключи ко всем несистемным файлам прошивки, играм и пр..
reboot.bin, содержащийся в loadexec.prx в зашифрованном виде, пока не понятно, какую выполняет функцию. Но он тоже содержит этот тег №1 вместе с ключём. Предполагаю, что он подключается после выгрузки игр и приложений, т.к. память очищается при их загрузке, а может быть при выходе из спящего режима, т.к. в этом случае система так-же загружается.
По поводу MAIN.BIN. Сразу возник вопрос: откуда взялся IPL_PART3, в котором обнаружился ключ? Ведь, как говорят языки, ключ должен находиться в main.bin, да ещё не только в main.bin, а внутри него вдобавок должен быть какой-то payload.bin.
Я выделил весь файл ipl_part3 и посмотрел его размер. Потом, зная, что в GZIP-архиве всегда в самые последние 4 байта записывается размер распакованного файла. Так вот, решил поискать эти 4 байта в ipl_part1,2 и они там обнаружились - это конец. Начало уже известно - 1F8B. Я выделил этот файл и сохранил как *.gz, а затем распаковал. Странно, что part1 распаковался с ошибкой, а вот part2 безошибочно извлёкся. Выходит, что PSARDumper извлекает поочереди. Сначала part1, затем его как-то преобразует в part2, а уже из него извлекает main.bin и дешифрует в декриптованный part3.

Теги и название модулей

ATA.PRX                       -> tag 0x4467415D, modname (sceATA_ATAPI_driver)
AUDIO.PRX                     -> tag 0x4467415D, modname (sceAudio_Driver)
audiocodec.prx                -> tag 0x4467415D, modname (sceAudiocodec_Driver)
auth_plugin.prx               -> tag 0x3ACE4DCE, modname (sceVshAuthPlugin_Module)
BLKDEV.PRX                    -> tag 0x4467415D, modname (sceBLK_driver)
cert_loader.prx               -> tag 0x4467415D, modname (sceCert_Loader)
CHKREG.PRX                    -> tag 0x4467415D, modname (sceChkreg)
CHNNLSV.PRX                   -> tag 0x4467415D, modname (sceChnnlsv)
CLOCKGEN.PRX                  -> tag 0x4467415D, modname (sceClockgen_Driver)
CODEC.PRX                     -> tag 0x4467415D, modname (sceWM8750_Driver)
common_gui.prx                -> tag 0x3ACE4DCE, modname (sceVshCommonGui_Module)
common_util.prx               -> tag 0x3ACE4DCE, modname (sceVshCommonUtil_Module)
CTRL.PRX                      -> tag 0x4467415D, modname (sceController_Service)
dialogmain.prx                -> tag 0x3ACE4DCE, modname (sceDialogmain_Module)
DISPLAY.PRX                   -> tag 0x4467415D, modname (sceDisplay_Service)
DMACMAN.PRX                   -> tag 0x4467415D, modname (sceDMAManager)
DMACPLUS.PRX                  -> tag 0x4467415D, modname (sceDMACPLUS_Driver)
dnas_plugin.prx               -> tag 0x3ACE4DCE, modname (sceVshDNASPlugin_Module)
EMC_DDR.PRX                   -> tag 0x4467415D, modname (sceDDR_Driver)
EMC_SM.PRX                    -> tag 0x4467415D, modname (sceNAND_Driver)
exceptionman.prx              -> tag 0x4467415D, modname (sceExceptionManager)
FATMSMOD.PRX                  -> tag 0x4467415D, modname (sceMSFAT_Driver)
game_plugin.prx               -> tag 0x207BBF2F, modname (game_plugin_module)
GE.PRX                        -> tag 0x4467415D, modname (sceGE_Manager)
GPIO.PRX                      -> tag 0x4467415D, modname (sceGPIO_Driver)
heaparea1.prx                 -> tag 0x207BBF2F, modname (scePafHeaparea_Module)
heaparea2.prx                 -> tag 0x3ACE4DCE, modname (scePafHeaparea_Module)
HPREMOTE.PRX                  -> tag 0x4467415D, modname (sceHP_Remote_Driver)
htmlviewer_plugin.prx         -> tag 0x207BBF2F, modname (htmlviewer_plugin_module)
htmlviewer_ui.prx             -> tag 0x3ACE4DCE, modname (sceHVUI_Module)
htmlviewer_utility.prx        -> tag 0x3ACE4DCE, modname (sceVshHVUtility_Module)
http_storage.prx              -> tag 0x4467415D, modname (sceHttpStorage_Service)
I2C.PRX                       -> tag 0x4467415D, modname (sceI2C_Driver)
idstorage.prx                 -> tag 0x4467415D, modname (sceIdStorage_Service)
IFHANDLE.PRX                  -> tag 0x4467415D, modname (sceNetIfhandle_Service)
IMPOSE.PRX                    -> tag 0x4467415D, modname (sceImpose_Driver)
impose_plugin.prx             -> tag 0x207BBF2F, modname (impose_plugin_module)
INIT.PRX                      -> tag 0x4467415D, modname (sceInit)
interruptman.prx              -> tag 0x4467415D, modname (sceInterruptManager)
iofilemgr.prx                 -> tag 0x4467415D, modname (sceIOFileManager)
ISOFS.PRX                     -> tag 0x4467415D, modname (sceIsofs_driver)
LCDC.PRX                      -> tag 0x4467415D, modname (sceLCDC_Driver)
LED.PRX                       -> tag 0x4467415D, modname (sceLED_Service)
LFATFS.PRX                    -> tag 0x4467415D, modname (sceLFatFs_Driver)
lflash_fatfmt.prx             -> tag 0x4467415D, modname (sceLflashFatfmt)
libatrac3plus.prx             -> tag 0x3ACE4DCE, modname (sceATRAC3plus_Library)
LIBDNAS.PRX                   -> tag 0x3ACE4DCE, modname (sceDNAS_Library)
libdnas_core.prx              -> tag 0x4467415D, modname (sceDNASCore_driver)
libfont_hv.prx                -> tag 0x3ACE4DCE, modname (sceFont_Library_HV)
LIBHTTP.PRX                   -> tag 0x3ACE4DCE, modname (SceHttp_Library)
libparse_http.prx             -> tag 0x3ACE4DCE, modname (SceParseHTTPheader_Library)
libparse_uri.prx              -> tag 0x3ACE4DCE, modname (SceParseURI_Library)
LIBSLIM.PRX                   -> tag 0x3ACE4DCE, modname (sceHVSlim_Library)
LIBSSL.PRX                    -> tag 0x3ACE4DCE, modname (sceSsl_Module)
libupdown.prx                 -> tag 0x3ACE4DCE, modname (SceUpdateDL_Library)
LIBWWW.PRX                    -> tag 0x3ACE4DCE, modname (sceHVWWW_Library)
LOADCORE.PRX                  -> tag 0x4467415D, modname (sceLoaderCore)
LOADEXEC.PRX                  -> tag 0x4467415D, modname (sceLoadExec)
MCCTRL.PRX                    -> tag 0x4467415D, modname (sceMcctrl)
me_for_vsh.prx                -> tag 0x4467415D, modname (me_for_vsh)
me_wrapper.prx                -> tag 0x4467415D, modname (sceMeCodecWrapper)
MEBOOTER.PRX                  -> tag 0x4467415D, modname (sceMeBooter)
mebooter_umdvideo.prx         -> tag 0x4467415D, modname (sceMeBooter)
MEDIAMAN.PRX                  -> tag 0x4467415D, modname (sceUmd_driver)
mediasync.prx                 -> tag 0x4467415D, modname (sceMediaSync)
MEMAB.PRX                     -> tag 0x4467415D, modname (sceMemab)
MEMLMD.PRX                    -> tag 0x4467415D, modname (sceMemlmd)
MESG_LED.PRX                  -> tag 0x4467415D, modname (sceMesgLed)
MGR.PRX                       -> tag 0x4467415D, modname (sceMgr_Driver)
modulemgr.prx                 -> tag 0x4467415D, modname (sceModuleManager)
MPEG_VSH.PRX                  -> tag 0x3ACE4DCE, modname (sceMpeg_library)
MPEGBASE.PRX                  -> tag 0x4467415D, modname (sceMpegbase_Driver)
MSAUDIO.PRX                   -> tag 0x4467415D, modname (sceMsAudio_Service)
MSCM.PRX                      -> tag 0x4467415D, modname (sceMScm_Driver)
msgdialog_plugin.prx          -> tag 0x3ACE4DCE, modname (sceVshMSDPlugin_Module)
MSSTOR.PRX                    -> tag 0x4467415D, modname (sceMSstor_Driver)
msvideo_plugin.prx            -> tag 0x207BBF2F, modname (msvideo_plugin_module)
music_plugin.prx              -> tag 0x207BBF2F, modname (music_plugin_module)
netconf_plugin.prx            -> tag 0x3ACE4DCE, modname (sceVshNetconf_Module)
netconf_plugin_auto_bfl.prx   -> tag 0x3ACE4DCE, modname (sceVshNetconfAoss_Module)
netconf_plugin_auto_nec.prx   -> tag 0x3ACE4DCE, modname (sceVshNetconfRaku_Module)
NETFRONT.PRX                  -> tag 0x3ACE4DCE, modname (sceHVNetfront_Module)
netplay_client_plugin.prx     -> tag 0x207BBF2F, modname (sceVshGSPlugin_Module)
netplay_server_utility.prx    -> tag 0x3ACE4DCE, modname (sceVshGSUtility_Module)
opening_plugin.prx            -> tag 0x207BBF2F, modname (opening_plugin_module)
OPENPSID.PRX                  -> tag 0x4467415D, modname (sceOpenPSID_Service)
osk_plugin.prx                -> tag 0x3ACE4DCE, modname (sceVshOSK_Module)
PAF.PRX                       -> tag 0x207BBF2F, modname (scePaf_Module)
PAFMINI.PRX                   -> tag 0x3ACE4DCE, modname (scePaf_Module)
PEQ.PRX                       -> tag 0x4467415D, modname (scePEQ_Library_driver)
photo_plugin.prx              -> tag 0x207BBF2F, modname (photo_plugin_module)
POWER.PRX                     -> tag 0x4467415D, modname (scePower_Service)
PSPBTCNF.TXT                  -> tag 0x4467415D, modname ()
pspbtcnf_game.txt             -> tag 0x4467415D, modname ()
pspbtcnf_updater.txt          -> tag 0x4467415D, modname ()
pspcnf_tbl.txt                -> tag 0x4467415D, modname ()
PSPNET.PRX                    -> tag 0x3ACE4DCE, modname (sceNet_Library)
pspnet_adhoc.prx              -> tag 0x3ACE4DCE, modname (sceNetAdhoc_Library)
pspnet_adhoc_auth.prx         -> tag 0x4467415D, modname (sceNetAdhocAuth_Service)
pspnet_adhoc_download.prx     -> tag 0x3ACE4DCE, modname (sceNetAdhocDownload_Library)
pspnet_adhoc_matching.prx     -> tag 0x3ACE4DCE, modname (sceNetAdhocMatching_Library)
pspnet_adhoc_transfer_int.prx -> tag 0x3ACE4DCE, modname (sceNetAdhocTransInt_Library)
pspnet_adhocctl.prx           -> tag 0x3ACE4DCE, modname (sceNetAdhocctl_Library)
pspnet_apctl.prx              -> tag 0x3ACE4DCE, modname (sceNetApctl_Library)
pspnet_inet.prx               -> tag 0x3ACE4DCE, modname (sceNetInet_Library)
pspnet_resolver.prx           -> tag 0x3ACE4DCE, modname (sceNetResolver_Library)
PWM.PRX                       -> tag 0x4467415D, modname (scePWM_Driver)
REGISTRY.PRX                  -> tag 0x4467415D, modname (sceRegistry_Service)
RTC.PRX                       -> tag 0x4467415D, modname (sceRTC_Service)
savedata_auto_dialog.prx      -> tag 0x3ACE4DCE, modname (sceVshSDAuto_Module)
savedata_plugin.prx           -> tag 0x207BBF2F, modname (sceVshSDPlugin_Module)
savedata_utility.prx          -> tag 0x3ACE4DCE, modname (sceVshSDUtility_Module)
SEMAWM.PRX                    -> tag 0x4467415D, modname (sceSemawm)
SIRCS.PRX                     -> tag 0x4467415D, modname (sceSIRCS_IrDA_Driver)
STDIO.PRX                     -> tag 0x4467415D, modname (sceStdio)
SYSCLIB.PRX                   -> tag 0x4467415D, modname (sceSysclib)
SYSCON.PRX                    -> tag 0x4467415D, modname (sceSYSCON_Driver)
sysconf_plugin.prx            -> tag 0x207BBF2F, modname (sysconf_plugin_module)
SYSMEM.PRX                    -> tag 0x4467415D, modname (sceSystemMemoryManager)
SYSREG.PRX                    -> tag 0x4467415D, modname (sceSYSREG_Driver)
SYSTIMER.PRX                  -> tag 0x4467415D, modname (sceSystimer)
threadman.prx                 -> tag 0x4467415D, modname (sceThreadManager)
UART4.PRX                     -> tag 0x4467415D, modname (sceUart4)
UMD9660.PRX                   -> tag 0x4467415D, modname (sceUmd9660_driver)
UMDMAN.PRX                    -> tag 0x4467415D, modname (sceUmdMan_driver)
update_plugin.prx             -> tag 0x207BBF2F, modname (update_plugin_module)
USB.PRX                       -> tag 0x4467415D, modname (sceUSB_Driver)
USBSTOR.PRX                   -> tag 0x4467415D, modname (sceUSB_Stor_Driver)
usbstorboot.prx               -> tag 0x4467415D, modname (sceUSB_Stor_Boot_Driver)
usbstormgr.prx                -> tag 0x4467415D, modname (sceUSB_Stor_Mgr_Driver)
usbstorms.prx                 -> tag 0x4467415D, modname (sceUSB_Stor_Ms_Driver)
usersystemlib.prx             -> tag 0x3ACE4DCE, modname (sceKernelLibrary)
UTILITY.PRX                   -> tag 0x4467415D, modname (sceUtility_Driver)
UTILS.PRX                     -> tag 0x4467415D, modname (sceKernelUtils)
VAUDIO.PRX                    -> tag 0x4467415D, modname (sceVaudio_driver)
vaudio_game.prx               -> tag 0x4467415D, modname (sceVaudio_driver)
video_plugin.prx              -> tag 0x207BBF2F, modname (video_plugin_module)
videocodec.prx                -> tag 0x4467415D, modname (sceVideocodec_Driver)
vshbridge.prx                 -> tag 0x4467415D, modname (sceVshBridge_Driver)
VSHMAIN.PRX                   -> tag 0x207BBF2F, modname (vsh_module)
WLAN.PRX                      -> tag 0x4467415D, modname (sceWlan_Driver)

DATA.PSP                      -> tag 0x0B000000, modname (updater)
IplUpdater @ 0x002F4F80
LeptonUpdater for 103 @ 0x002F7DC0
LeptonUpdater for 150 @ 0x002F9A40
sceChkuppkg @ 0x002EACC0
sceLflashFatfmt @ 0x002ECB40
sceLoadExecUpdater @ 0x002FB780
scePSAR_Driver @ 0x002E8B00
sceSuspendCaneler @ 0x002F5F00
sceTestMode_driver @ 0x002EFF00
sceUmdEx_driver @ 0x002F6980

Все необходимые файлы 2.00 с закладками HBK во вложении.

ErikPshat · 04.02.2010, 04:43

Дата выхода: 3 Октября 2005 г.

Настройки
- Закрыта уязвимость переполнения буфера при просмотре изображений в формате TIFF. Как выяснилось позднее, уязвимость всё же осталась в прошивке вплоть до версии 5.03 (в 5.50 она была «прикрыта» за счёт исключения поддержки формата TIFF).

Изменены только 2 файла:

Flash0:/vsh/etc/index.dat
Flash0:/vsh/module/paf.prx

Вот и весь патч на эксплоит TIFF.

ErikPshat · 05.03.2010, 08:24

Дата выпуска: 13 Октября, 2005 г.

Изменения:

[LocationFree™ Player] added.
[Auto-Select] and [Unicode (UTF-8)] added to the browser.
Settings for [Text Size] and [Display Mode] and the history is saved.
Copyright-protected video can now be played.
[Set via Internet] has been added to [Date and Time] in [Date & Time Settings].
[WPA-PSK (AES)] has been added as a security method under [Network Settings].
Korean input mode has been added to the on-screen keyboard.

По русски:

Настройки
- Добавлен пункт «Установить время через Интернет» в меню Настройки даты и времени → Дата и время;
- Добавлена поддержка WPA (AES) в меню Настройки сети;
- Добавлен Корейский режим ввода на экранной клавиатуре.
Видео
- Добавлена поддержка файлов с защитой от копирования;
Сеть
- Добавлен LocationFree Player;
- Добавлены Авто-выбор кодировки и Unicode (UTF-8) кодировка в браузер;
- Добавлены Параметры Размер шрифта и Режим отображения в браузер;
- Добавлена история ввода форм в браузер;

Из ключей ничего нового. Всё по прежнему.

Yoti · 11.08.2011, 01:26

6.60 от neur0n

0x380290F0: scramble 0x5A: key F9 4A 6B 96 79 3F EE 0A 04 C8 8D 7E 5F 38 3A CF //vshmain

0x457B90F0：scramble 0x5B: key BA 76 61 47 8B 55 A8 72 89 15 79 6D D7 2F 78 0E

{ 0x4C9494F0, keys660_1k, 0x43},

u8 keys660_k2[0x10] = { 0x7A, 0x3E, 0x55, 0x75, 0xB9, 0x6A, 0xFC, 0x4F, 0x3E, 0xE3, 0xDF, 0xB3, 0x6C, 0xE8, 0x2A, 0x82 };

ErikPshat · 17.01.2010, 06:04

Дата выхода: 24 марта 2005.
Была установлена на первые консоли выпущенные на рынок США

Настройки
- Добавлена поддержка других языков;
- Добавлена проверка кода на подлинность.
Видео
- Поддержка новых видеокодеков;

tag 0x0B000000 //только у DATA.PSP, modname (updater)
Обнаружены теги с ключами от 00 до 0F:

keys 1.50

00 00 00 00 { 0x00000000, (u8*)keys150_00, 0x42 }, /* 1.50 kernel PRXs */

u32 keys150_00[] =
{
0x7b21f3be, 0x299c5e1d, 0x1c9c5e71, 0x96cb4645, 0x3c9b1be0, 0xeb85de3d,
0x4a7f2022, 0xc2206eaa, 0xd50b3265, 0x55770567, 0x3c080840, 0x981d55f2,
0x5fd8f6f3, 0xee8eb0c5, 0x944d8152, 0xf8278651, 0x2705bafa, 0x8420e533,
0x27154ae9, 0x4819aa32, 0x59a3aa40, 0x2cb3cf65, 0xf274466d, 0x3a655605,
0x21b0f88f, 0xc5b18d26, 0x64c19051, 0xd669c94e, 0xe87035f2, 0x9d3a5909,
0x6f4e7102, 0xdca946ce, 0x8416881b, 0xbab097a5, 0x249125c6, 0xb34c0872,
};

00 00 00 02 { 0x02000000, keys150_02, 0x45 }, /* 1.50 kernel PRXs */

u32 keys150_02[176] =
{
0xB32F8172, 0xBD3D5A39, 0x74108A38, 0xDFB15596, 0xA1EE9F88, 0x897471B5,
0xBBA3E156, 0xC2C39F7E, 0xB99BF89E, 0x8822BD87, 0x881BDE57, 0x1A3B9AC9,
0xA6C7BDBA, 0xA18FCB58, 0x3B64DF0E, 0xCB96964A, 0x2D4FD036, 0xAB19DD32,
0xFE54D6E1, 0x5C571397, 0x7105687A, 0x1E317D34, 0x6DDD6633, 0x1B17767B,
0x21AF9B25, 0x10721779, 0x3555B5FD, 0xAE55BEA9, 0x55CE4572, 0xE58070A2,
0xB9BED0AD, 0xA9027EE4, 0x35C34692, 0x937AF105, 0x481A3AC1, 0x1B3C3B99,
0xEAD34966, 0x3376821C, 0xCCC59172, 0x5F8C5B96, 0xD4CA0D97, 0x4D4610A2,
0x93F2E966, 0xBC17B699,
};

00 00 00 03 { 0x03000000, keys150_03, 0x46 }, /* 1.50 kernel PRXs */

u32 keys150_03[144] =
{
0x013B4E22, 0x2C3FC8DE, 0x9E070025, 0xCBBC4816, 0x4B131DAE, 0x8373BB34,
0xA1F96AFA, 0xB78EAEF3, 0x6B73256A, 0x1D7AB70A, 0x34753ACA, 0x52D56946,
0x80EC626D, 0x64D0B15E, 0x291E1CE4, 0xC57D9F65, 0xA94F714D, 0xB4F9BEB8,
0x6399A89E, 0x688A262C, 0x8E6BF577, 0x8A15ACAC, 0xE040D61E, 0x8DB7E011,
0x73370430, 0xCE5E263A, 0x3C733166, 0xD0FF5AAB, 0x4E38F887, 0x65450F88,
0xD7DF5D26, 0xB8CC7649, 0xCB9F21C5, 0xAF196F85, 0x9F724F39, 0x07FD0779,
};

00 00 00 04 { 0x04000000, keys150_04, 0x47 },

u32 keys150_04[144] =
{
0x418EA0A3, 0xC9BCE082, 0xC57F229D, 0xBE9C3C9C, 0x604F72C3, 0x8CD24869,
0xCF4A3AAD, 0x31803FAF, 0x2A558D3C, 0x3A3BBFD4, 0x57F32F5C, 0x35FFAD20,
0xD4D24F71, 0x8152C9E8, 0xB90E14A5, 0x2F07ED8E, 0x546B7FAE, 0x9186CD0C,
0xDA488487, 0xA56BA4ED, 0x4E5A44B5, 0x580044D5, 0xC8E8E54D, 0x39D26862,
0x818625C7, 0x5D4CFF27, 0x2DBB50FE, 0x4F5C08B7, 0x0314857E, 0x84265A91,
0x02A2E3F5, 0x4F964944, 0xDBCF7E66, 0x02B4CBFE, 0x926F66ED, 0x63804E7F,
};

00 00 00 05 { 0x05000000, keys150_05, 0x48 },

u32 keys150_05[144] =
{
0xDD5E43F3, 0x41CA413A, 0x56BD22C6, 0xB31842A5, 0x6FA7DB8C, 0x83B24187,
0xB007AB84, 0xBE1B403D, 0xD66C2406, 0xB647EAAD, 0xD963EED0, 0x1E3A0E75,
0x5A4EAA80, 0x9840EDD9, 0xBF2D14D4, 0xA246E7C5, 0x19F2CDCD, 0xE474DC38,
0xC9515DC5, 0x268CA6A5, 0x857A3649, 0x4C5B7D05, 0x67849F24, 0xEFC38323,
0xF93C6A6C, 0x83CA6E9F, 0xDDC198AC, 0xEA91D4E6, 0xC995AA77, 0xDA400302,
0x8BC7F940, 0x34CA6095, 0x0C191703, 0x3D51E6FC, 0x72C3F3C5, 0xD5C46B2D,
};

00 00 00 06 { 0x06000000, keys150_06, 0x49 },

u32 keys150_06[144] =
{
0x8C121584, 0x80D783A8, 0xDB881EEF, 0x239661BC, 0xFC88F32B, 0xDEB53FE5,
0x6BA05A98, 0xDB550ADE, 0x3644F8F2, 0x5594D1EB, 0x933E394A, 0x2E33D7C,
0xF5E78812, 0xEBC1F0F8, 0xC68D1B25, 0x442B1EB8, 0x7E6AB7A5, 0x924639D0,
0x07DE716D, 0x102FB897, 0x53DDBA18, 0x982B07C6, 0xD748A24, 0xFE5D645C,
0x4367E78E, 0xA1B39693, 0x12ECA8A1, 0x4458FBC4, 0x9C0A55FC, 0xFA37301E,
0x03D32454, 0x31BD92E2, 0xF7EA0323, 0x09DE73E7, 0x7983B33B, 0x0E8517DA,
};

00 00 00 07 { 0x07000000, keys150_07, 0x4A },

u32 keys150_07[144] =
{
0x46CAF8BC, 0x336213AF, 0xD79CD5C8, 0x4A772A4A, 0xBFBE551A, 0x352A5AA5,
0x04983E8E, 0xC496FFA0, 0x37096E63, 0xA698EC46, 0xBA8C39D6, 0xB75EA05A,
0x2D816460, 0xA68E6620, 0x2A635E89, 0x3087B913, 0xA9A0F420, 0x0FA41036,
0x4E14B992, 0x25E08441, 0x6672C0ED, 0x233D922D, 0x19FC1F64, 0x0581A79F,
0x22F3D628, 0xECEC6A86, 0x9EA853B7, 0x35357037, 0x777657F0, 0x4968CFB3,
0xCF2D0B19, 0x3331B01E, 0x362A451D, 0x5EAD313A, 0xF6936A22, 0x32DA82AE,
};

00 00 00 08 { 0x08000000, keys150_08, 0x4B }, /* 1.50 GAME EBOOT.BIN */

u32 keys150_08[144] =
{
0x7591165B, 0x02C5C544, 0xC094766C, 0x9512F155, 0x7E919371, 0x3177D281,
0x703028F1, 0x4A77739B, 0xF156D711, 0xB0C14C0E, 0xE2E40492, 0x0746A8AC,
0x9A69EA85, 0xF1ECD2D7, 0x1C4243A0, 0x21C6AFC6, 0x290624E8, 0x59B6BC01,
0x000D784D, 0xE795FDD3, 0x1645D13F, 0x18010ADB, 0x8DE4700B, 0x5AC4F98B,
0x78DB1085, 0x4AFBDF05, 0xC631DDA9, 0xB498C16A, 0xF5589065, 0xB0CD3C65,
0xFDF62F6A, 0x6286C7A4, 0xE85EF8E6, 0x92201666, 0x17EA8EF0, 0xDDF31A9F,
};

00 00 00 09 { 0x09000000, keys150_09, 0x4C },

u32 keys150_09[144] =
{
0xF576D788, 0x0EEC6DB7, 0xE6850B00, 0xC99B374A, 0x7AEA9500, 0x096766AD,
0x5209F205, 0x4E8E2747, 0x5DF78357, 0x0E11901F, 0x3997F6EF, 0xD065A183,
0x9664CA11, 0x18C9EF7A, 0x7A977D6B, 0xA62832F0, 0x6486E3E2, 0xD203AEDF,
0x467F7EAD, 0x95025F2E, 0x175C35E9, 0x625442AD, 0x35C96684, 0xFA2A7B9C,
0x2BD0DCD7, 0x7C3289DA, 0xEEE677D0, 0xE02BCDFE, 0xB5E1BB87, 0x9A1129CE,
0x71A8F179, 0x39655EC0, 0x37B96DFB, 0x447452D4, 0xBABAC2E1, 0x354A2D3D,
};

00 00 00 0A { 0x0A000000, keys150_0A, 0x4D },

u32 keys150_0A[144] =
{
0x5A89E480, 0x7D39DB27, 0xF27B7B6B, 0xDD92DF3D, 0x72B5D450, 0x7CF86AAC,
0x32422967, 0x13793761, 0xB95FE474, 0x141A5657, 0x8B5D10F3, 0x2F5C747C,
0xE46B96BB, 0xF6EC6700, 0x61FC8128, 0x8342F001, 0xB6CE7F71, 0xCE8459D4,
0x5B38ABE9, 0xFBB7D17C, 0xDF87DC30, 0xC8780C3B, 0xC7A8F735, 0xA0C7332F,
0x4023DD31, 0xC2DF77E2, 0x784ED706, 0x22D4A44C, 0x982D4973, 0x9AA117EE,
0x4896F790, 0x71816DDB, 0x8507DBF1, 0x26E56891, 0xEEDFEA95, 0x369DB8A1,
};

00 00 00 0B { 0x0B000000, keys150_0B, 0x4E }, /* updaters DATA.PSP */

u32 keys150_0B[176] =
{
0xE71C010B, 0x836B1531, 0xCC0D263E, 0xCB123669, 0x6626FDA7, 0x1A6E2A93,
0xFCC62E91, 0x13002FD8, 0xB6DFE25A, 0xC827E4A2, 0x5050C318, 0xED4AE9B7,
0xFD303CCC, 0x0A2B6A10, 0xE0C6CB22, 0xEB126520, 0x372A4E7D, 0x88EF0A0B,
0xD45406DA, 0xCACDAF30, 0x1ADAF99A, 0x62BB1BB0, 0x44F8DB0C, 0x8E145673,
0xFD2CB193, 0xCB5DE267, 0xB3D95B48, 0x9FD71454, 0xE9249C79, 0x8C4E7AC2,
0x9419244D, 0x2DC2C9FF, 0xB8516323, 0xE67FD6FA, 0xB232BC5E, 0x76C41302,
0xC25F1148, 0x6384EB50, 0x782754A5, 0xF1EE1694, 0x2AF3D73A, 0x7E01B120,
0x5D1CA2B9, 0x71771C3E,
};

00 00 00 0C { 0x0C000000, keys150_0C, 0x4F }, /* locoroco, kazue, demos */

u32 keys150_0C[144] =
{
0x18A54C82, 0xEA6EC8D3, 0xDC044117, 0xFC01C5EA, 0x5494B197, 0xEE221971,
0x83E92DE0, 0xE630643D, 0x5F305C42, 0xE0A041EB, 0xEE63C662, 0x1E0DA55D,
0x491410C2, 0x8493C606, 0x6342A571, 0xD5B6F013, 0xFA9E5143, 0xE17C0A91,
0x25951B58, 0x8DF11140, 0x048D01B1, 0x545C5409, 0xB00853F5, 0xCEB48553,
0xFBC3F50B, 0x0B2455C6, 0xE42CC6F2, 0x3C05F00C, 0xD5396CD7, 0xF7092287,
0xFDA2C53D, 0xB13F9255, 0x18C8FEF6, 0x52046B1D, 0xE7E88C5F, 0x5A6E5A26,
};

00 00 00 0D { 0x0D000000, keys150_0D, 0x50 },

u32 keys150_0D[144] =
{
0x47A407F5, 0x2529E0D7, 0x95E3C8B2, 0xE0695E3E, 0xCF0DA56F, 0x6CB56A2D,
0xD2657DF1, 0xDABED581, 0x4FBEE9FC, 0x849525CE, 0x4A2394E7, 0x6F482699,
0xDBC7CBFC, 0x5D547A99, 0xD8DF0706, 0x19489750, 0x160F7249, 0x4194E60F,
0x69C26470, 0xA49722CD, 0xF83FBDB7, 0x3EBA60D9, 0x985ECE7C, 0x915BACBF,
0x42F1F301, 0x2CDAE9B0, 0xA17562E1, 0x57CE3C35, 0x4AC1B01D, 0x98D0C2D5,
0x847864AF, 0x575BDFB7, 0x20F17467, 0xFF5F7A57, 0x29E48A20, 0xF45E12EB,
};

00 00 00 0E { 0x0E000000, keys150_0E, 0x51 },

u32 keys150_0E[144] =
{
0x77B757DE, 0xEE62DD17, 0x5D03787B, 0x59CA8644, 0x93F68D20, 0x21819328,
0x86A74E71, 0x1B2482CA, 0x5F74AE58, 0x568D016C, 0x9A4D8832, 0x2EA24372,
0x820CF484, 0xFCFC06B9, 0x8A5BFB6A, 0xBF9F9CD7, 0x15850D01, 0x39ED5FBA,
0x4CC38393, 0xED3ADEAF, 0x1AA768BF, 0x89BD8A77, 0x46564165, 0x7333DBD9,
0x62E86C81, 0x03299B96, 0x73AFAE5A, 0x40A05320, 0x10664BE8, 0xE5B76A99,
0x29E0DD70, 0xEA602428, 0x2042AE30, 0x946F8D32, 0xA29E5F71, 0x7C0C7FD5,
};

00 00 00 0F { 0x0F000000, keys150_0F, 0x52 },

u32 keys150_0F[144] =
{
0xA2FD7360, 0x11F1CE2D, 0xF57882E3, 0xE69DAA34, 0xBE342DD2, 0x7F57BB55,
0x2170639B, 0x4FEB3194, 0xA3B797DB, 0x19E4641D, 0x5E1613F7, 0x3E0FC9B3,
0xB541C6BE, 0xB47FD013, 0x95461655, 0xF7E69A22, 0xC4CB67AA, 0x6770B7DD,
0x26B34852, 0xFF38A95E, 0xD4EA625F, 0x49D0AC47, 0x487CC7AB, 0x8302831B,
0xC1331B30, 0xD4520B7D, 0x3910EABB, 0x96F63D59, 0x4250F02F, 0xEEC487F4,
0xA74A9829, 0xAF113677, 0x429CF9E7, 0x782A3AB6, 0x558EFE0C, 0x4A116682,
};

Теги и названия модулей

ATA.PRX                    -> tag 0x00000000, modname (sceATA_ATAPI_driver)
AUDIO.PRX                  -> tag 0x00000000, modname (sceAudio_Driver)
audiocodec.prx             -> tag 0x00000000, modname (sceAudiocodec_Driver)
auth_plugin.prx            -> tag 0x02000000, modname (auth_plugin_module)
BLKDEV.PRX                 -> tag 0x00000000, modname (sceBLK_driver)
CHKREG.PRX                 -> tag 0x00000000, modname (sceChkreg)
CHNNLSV.PRX                -> tag 0x00000000, modname (sceChnnlsv)
CLOCKGEN.PRX               -> tag 0x00000000, modname (sceClockgen_Driver)
CODEC.PRX                  -> tag 0x00000000, modname (sceWM8750_Driver)
common_gui.prx             -> tag 0x02000000, modname (sceVshCommonGui_Module)
common_util.prx            -> tag 0x02000000, modname (sceVshCommonUtil_Module)
CTRL.PRX                   -> tag 0x00000000, modname (sceController_Service)
dialogmain.prx             -> tag 0x02000000, modname (sceDialogmain_Module)
DISPLAY.PRX                -> tag 0x00000000, modname (sceDisplay_Service)
DMACMAN.PRX                -> tag 0x00000000, modname (sceDMAManager)
DMACPLUS.PRX               -> tag 0x00000000, modname (sceDMACPLUS_Driver)
EMC_DDR.PRX                -> tag 0x00000000, modname (sceDDR_Driver)
EMC_SM.PRX                 -> tag 0x00000000, modname (sceNAND_Driver)
exceptionman.prx           -> tag 0x00000000, modname (sceExceptionManager)
FATMSMOD.PRX               -> tag 0x00000000, modname (sceMSFAT_Driver)
game_plugin.prx            -> tag 0x02000000, modname (game_plugin_module)
GE.PRX                     -> tag 0x00000000, modname (sceGE_Manager)
GPIO.PRX                   -> tag 0x00000000, modname (sceGPIO_Driver)
heaparea1.prx              -> tag 0x02000000, modname (scePafHeaparea_Module)
heaparea2.prx              -> tag 0x02000000, modname (scePafHeaparea_Module)
HPREMOTE.PRX               -> tag 0x00000000, modname (sceHP_Remote_Driver)
I2C.PRX                    -> tag 0x00000000, modname (sceI2C_Driver)
idstorage.prx              -> tag 0x00000000, modname (sceIdStorage_Service)
IFHANDLE.PRX               -> tag 0x00000000, modname (sceNetIfhandle_Service)
IMPOSE.PRX                 -> tag 0x00000000, modname (sceImpose_Driver)
impose_plugin.prx          -> tag 0x02000000, modname (impose_plugin_module)
INIT.PRX                   -> tag 0x00000000, modname (sceInit)
interruptman.prx           -> tag 0x00000000, modname (sceInterruptManager)
iofilemgr.prx              -> tag 0x00000000, modname (sceIOFileManager)
ISOFS.PRX                  -> tag 0x00000000, modname (sceIsofs_driver)
LCDC.PRX                   -> tag 0x00000000, modname (sceLCDC_Driver)
LED.PRX                    -> tag 0x00000000, modname (sceLED_Service)
LFATFS.PRX                 -> tag 0x00000000, modname (sceLFatFs_Driver)
lflash_fatfmt.prx          -> tag 0x00000000, modname (sceLflashFatfmt)
libatrac3plus.prx          -> tag 0x02000000, modname (sceATRAC3plus_Library)
LIBHTTP.PRX                -> tag 0x02000000, modname (SceHttp_Library)
libparse_http.prx          -> tag 0x02000000, modname (SceParseHTTPheader_Library)
libparse_uri.prx           -> tag 0x02000000, modname (SceParseURI_Library)
libupdown.prx              -> tag 0x02000000, modname (SceUpdateDL_Library)
LOADCORE.PRX               -> tag 0x00000000, modname (sceLoaderCoreTool)
LOADEXEC.PRX               -> tag 0x00000000, modname (sceLoadExec)
me_for_vsh.prx             -> tag 0x00000000, modname (me_for_vsh)
me_wrapper.prx             -> tag 0x00000000, modname (sceMeCodecWrapper)
MEBOOTER.PRX               -> tag 0x00000000, modname (sceMeBooter)
mebooter_umdvideo.prx      -> tag 0x00000000, modname (sceMeBooter)
MEDIAMAN.PRX               -> tag 0x00000000, modname (sceUmd_driver)
mediasync.prx              -> tag 0x00000000, modname (sceMediaSync)
MEMAB.PRX                  -> tag 0x00000000, modname (sceMemab)
MEMLMD.PRX                 -> tag 0x00000000, modname (sceMemlmd)
MESG_LED.PRX               -> tag 0x00000000, modname (sceMesgLed)
MGR.PRX                    -> tag 0x00000000, modname (sceMgr_Driver)
modulemgr.prx              -> tag 0x00000000, modname (sceModuleManager)
MPEG_VSH.PRX               -> tag 0x02000000, modname (sceMpeg_library)
MPEGBASE.PRX               -> tag 0x00000000, modname (sceMpegbase_Driver)
MSAUDIO.PRX                -> tag 0x00000000, modname (sceMsAudio_Service)
MSCM.PRX                   -> tag 0x00000000, modname (sceMScm_Driver)
msgdialog_plugin.prx       -> tag decrypted (ELF)
MSSTOR.PRX                 -> tag 0x00000000, modname (sceMSstor_Driver)
msvideo_plugin.prx         -> tag 0x02000000, modname (msvideo_plugin_module)
music_plugin.prx           -> tag 0x02000000, modname (music_plugin_module)
netconf_plugin.prx         -> tag 0x02000000, modname (sceVshNetconf_Module)
netplay_client_plugin.prx  -> tag 0x02000000, modname (sceVshGSPlugin_Module)
netplay_server_utility.prx -> tag 0x02000000, modname (sceVshGSUtility_Module)
opening_plugin.prx         -> tag 0x02000000, modname (opening_plugin_module)
OPENPSID.PRX               -> tag 0x00000000, modname (sceOpenPSID_Service)
osk_plugin.prx             -> tag 0x02000000, modname (sceVshOSK_Module)
PAF.PRX                    -> tag 0x02000000, modname (scePaf_Module)
PAFMINI.PRX                -> tag 0x02000000, modname (scePaf_Module)
PEQ.PRX                    -> tag 0x00000000, modname (scePEQ_Library_driver)
photo_plugin.prx           -> tag 0x02000000, modname (photo_plugin_module)
POWER.PRX                  -> tag 0x00000000, modname (scePower_Service)
PSPNET.PRX                 -> tag 0x02000000, modname (sceNet_Library)
pspnet_adhoc.prx           -> tag 0x02000000, modname (sceNetAdhoc_Library)
pspnet_adhoc_auth.prx      -> tag 0x00000000, modname (sceNetAdhocAuth_Service)
pspnet_adhoc_download.prx  -> tag 0x02000000, modname (sceNetAdhocDownload_Library)
pspnet_adhoc_matching.prx  -> tag 0x02000000, modname (sceNetAdhocMatching_Library)
pspnet_adhocctl.prx        -> tag 0x02000000, modname (sceNetAdhocctl_Library)
pspnet_ap_dialog_dummy.prx -> tag 0x02000000, modname (sceNetApDialogDummy_Library)
pspnet_apctl.prx           -> tag 0x02000000, modname (sceNetApctl_Library)
pspnet_inet.prx            -> tag 0x02000000, modname (sceNetInet_Library)
pspnet_resolver.prx        -> tag 0x02000000, modname (sceNetResolver_Library)
PWM.PRX                    -> tag 0x00000000, modname (scePWM_Driver)
REBOOT.PRX                 -> tag 0x00000000, modname (sceReboot)
REGISTRY.PRX               -> tag 0x00000000, modname (sceRegistry_Service)
RTC.PRX                    -> tag 0x00000000, modname (sceRTC_Service)
savedata_auto_dialog.prx   -> tag 0x02000000, modname (sceVshSDAuto_Module)
savedata_plugin.prx        -> tag 0x02000000, modname (sceVshSDPlugin_Module)
savedata_utility.prx       -> tag 0x02000000, modname (sceVshSDUtility_Module)
SEMAWM.PRX                 -> tag 0x00000000, modname (sceSemawm)
SIRCS.PRX                  -> tag 0x00000000, modname (sceSIRCS_IrDA_Driver)
STDIO.PRX                  -> tag 0x00000000, modname (sceStdio)
SYSCLIB.PRX                -> tag 0x00000000, modname (sceSysclib)
SYSCON.PRX                 -> tag 0x00000000, modname (sceSYSCON_Driver)
sysconf_plugin.prx         -> tag 0x02000000, modname (sysconf_plugin_module)
SYSMEM.PRX                 -> tag 0x00000000, modname (sceSystemMemoryManager)
SYSREG.PRX                 -> tag 0x00000000, modname (sceSYSREG_Driver)
SYSTIMER.PRX               -> tag 0x00000000, modname (sceSystimer)
threadman.prx              -> tag 0x00000000, modname (sceThreadManager)
UART4.PRX                  -> tag 0x00000000, modname (sceUart4)
UMD9660.PRX                -> tag 0x00000000, modname (sceUmd9660_driver)
UMDMAN.PRX                 -> tag 0x00000000, modname (sceUmdMan_driver)
update_plugin.prx          -> tag 0x02000000, modname (update_plugin_module)
USB.PRX                    -> tag 0x00000000, modname (sceUSB_Driver)
USBSTOR.PRX                -> tag 0x00000000, modname (sceUSB_Stor_Driver)
usbstorboot.prx            -> tag 0x00000000, modname (sceUSB_Stor_Boot_Driver)
usbstormgr.prx             -> tag 0x00000000, modname (sceUSB_Stor_Mgr_Driver)
usbstorms.prx              -> tag 0x00000000, modname (sceUSB_Stor_Ms_Driver)
usersystemlib.prx          -> tag 0x03000000, modname (sceKernelLibrary)
UTILITY.PRX                -> tag 0x00000000, modname (sceUtility_Driver)
UTILS.PRX                  -> tag 0x00000000, modname (sceKernelUtils)
VAUDIO.PRX                 -> tag 0x00000000, modname (sceVaudio_driver)
vaudio_game.prx            -> tag 0x00000000, modname (sceVaudio_driver)
video_plugin.prx           -> tag 0x02000000, modname (video_plugin_module)
videocodec.prx             -> tag 0x00000000, modname (sceVideocodec_Driver)
vshbridge.prx              -> tag 0x00000000, modname (sceVshBridge_Driver)
VSHMAIN.PRX                -> tag 0x02000000, modname (vsh_module)
WLAN.PRX                   -> tag 0x00000000, modname (sceWlan_Driver)

DATA.PSP                   -> tag 0x0B000000, modname (updater)

scePSAR_Driver @ 0x002F5180
sceChkuppkg @ 0x002F7240
sceLflashFatfmt @ 0x002F8E40
sceTestMode_driver @ 0x002FC200
LeptonUpdater @ 0x00301280
IplUpdater @ 0x00303100
sceSuspendCaneler @ 0x0033B580

Yoti · 23.07.2012, 14:09

Чуть-чуть инфы: http://wololo.net/talk/viewtopic.php?f=5&t=12365

ErikPshat · 23.07.2012, 23:45

Оу, про это я забыл.

release:6.60:
build:1,0,3,1,0:emubuild@rd.scei.sony.co.jp
system:57716@release_660,0x06060010:
vsh:p6616@release_660,v58533@release_660,20110731:
target::WorldWide

Из них только эти новые ключи:

0x4C949AF0 [16] 0x43 new {0x48,0x58,0xAA,0x38,0x78,0x9A,0x6C,0x0D,0x42,0xEA,0xC8,0x19,0x23,0x34,0x4D,0xF0 }; //1.6x kernel PSVita
0x38029AF0 [16] 0x5A new {0x4B,0x6B,0xC8,0x98,0xE7,0xBC,0x6A,0xA3,0xEF,0x63,0x72,0x7F,0xFD,0x0E,0x9E,0x8C };
0x457B9AF0 [16] 0x5B new {0x08,0x57,0xC2,0x49,0x15,0xD6,0x2C,0xDB,0x62,0xBE,0x86,0x6C,0x75,0x19,0xDC,0x4D };
0x0B2B9AF0 [16] 0x5C new {0x8B,0xD6,0x7C,0x17,0x49,0x93,0x6E,0x36,0xE9,0x70,0xC0,0xB0,0xB2,0xA9,0x82,0x28 };
0xD91612F0 [16] 0x5D new {0x9E,0x20,0xE1,0xCD,0xD7,0x88,0xDE,0xC0,0x31,0x9B,0x10,0xAF,0xC5,0xB8,0x73,0x23 };
0xD91613F0 [16] 0x5D new {0xEB,0xFF,0x40,0xD8,0xB4,0x1A,0xE1,0x66,0x91,0x3B,0x8F,0x64,0xB6,0xFC,0xB7,0x12 };
0xD91614F0 [16] 0x5D new {0xFD,0xF7,0xB7,0x3C,0x9F,0xD1,0x33,0x95,0x11,0xB8,0xB5,0xBB,0x54,0x23,0x73,0x85 };
0xD91617F0 [16] 0x5D new {0x02,0xFA,0x48,0x73,0x75,0xAF,0xAE,0x0A,0x67,0x89,0x2B,0x95,0x4B,0x09,0x87,0xA3 };
0xD91618F0 [16] 0x5D new {0x96,0x96,0x7C,0xC3,0xF7,0x12,0xDA,0x62,0x1B,0xF6,0x9A,0x9A,0x44,0x44,0xBC,0x48 };
0xD9161AF0 [16] 0x5D new {0x27,0xE5,0xA7,0x49,0x52,0xE1,0x94,0x67,0x35,0x66,0x91,0x0C,0xE8,0x9A,0x25,0x24 };

mesg_led

scePauth NID
0x4E3A1105
0x08000000 [144] 0x4B
0xC0CB167C [144] 0x5D
0x8004FD03 [16]  0x5D
0xD91605F0 [16]  0x5D
0xD91606F0 [16]  0x5D
0xD9160AF0 [16]  0x5D
0xD9160BF0 [16]  0x5D
0x2E5E10F0 [32]  0x48
0xEB6984AC [32]  0x??
0x80B60DB2 [32]  0x??
SceUtils5120
0x407810F0 [32]  0x6A
0x2FD311F0 [32]  0x47
0x2FD312F0 [32]  0x47
0x2FD313F0 [32]  0x47
0x38029AF0 [16]  0x5A new {0x4B,0x6B,0xC8,0x98,0xE7,0xBC,0x6A,0xA3,0xEF,0x63,0x72,0x7F,0xFD,0x0E,0x9E,0x8C};
0x457B9AF0 [16]  0x5B new {0x08,0x57,0xC2,0x49,0x15,0xD6,0x2C,0xDB,0x62,0xBE,0x86,0x6C,0x75,0x19,0xDC,0x4D};
0x380293F0 [16]  0x5A
0x457B28F0 [16]  0x5B
0x457B93F0 [16]  0x5B
0x628928F0 [16]  0x5A
0x8B9B28F0 [16]  0x5B
0x5A5C28F0 [16]  0x5C
0xD91628F0 [16]  0x5D
0x7B0528F0 [16]  0x5E
0xEFD228F0 [16]  0x5E
0xADF328F0 [16]  0x60
0x279D28F0 [16]  0x61
0xD82328F0 [16]  0x51
0xD13B28F0 [16]  0x52
0xE92428F0 [32]  0x40
0x692828F0 [32]  0x?
0x0DAA28F0 [32]  0x5D
0xE1ED28F0 [32]  0x?
0x3C2A28F0 [16]  0x67
0x380292F0 [16]  0x5A
0x457B1EF0 [16]  0x5B
0x457B92F0 [16]  0x5B
0x62891EF0 [16]  0x5A
0x8B9B1EF0 [16]  0x5B
0x5A5C1EF0 [16]  0x5C
0xD9161EF0 [16]  0x5D
0x7B051EF0 [16]  0x5E
0xEFD21EF0 [16]  0x5E
0xADF31EF0 [16]  0x60
0x279D1EF0 [16]  0x61
0xD8231EF0 [16]  0x51
0xD13B1EF0 [16]  0x52
0xE9241EF0 [32]  0x40
0x69281EF0 [32]  0x?
0x0DAA1EF0 [32]  0x5D
0xE1ED1EF0 [32]  0x?
0x3C2A1EF0 [16]  0x67
0x380291F0 [16]  0x5A
0x457B10F0 [16]  0x5B
0x457B91F0 [16]  0x5B
0x628910F0 [16]  0x5A
0x8B9B10F0 [16]  0x5B
0x5A5C10F0 [16]  0x5C
0xD91610F0 [16]  0x5D
0x7B0510F0 [16]  0x5E
0xEFD210F0 [16]  0x5E
0xADF310F0 [16]  0x60
0x279D10F0 [16]  0x61
0xD82310F0 [16]  0x51
0xD13B10F0 [16]  0x52
0xE92410F0 [32]  0x40
0x692810F0 [32]  0x?
0x0DAA10F0 [32]  0x5D
0xE1ED10F0 [32]  0x?
0x3C2A10F0 [16]  0x67

0x02000000 [144] 0x45
0x380290F0 [16]  0x5A
0x03000000 [144] 0x46
0x3ACE4DCE [144] 0x5B
0x76202403 [16]  0x5B
0x457B05F0 [16]  0x5B
0x457B06F0 [16]  0x5B
0x457B08F0 [16]  0x5B
0x457B0AF0 [16]  0x5B
0x457B80F0 [16]  0x5B
0x457B0BF0 [16]  0x5B
0x457B0CF0 [16]  0x5B
0x457B8AF0 [16]  0x5B
0x457B90F0 [16]  0x5B
0x04000000 [144] 0x47
0x05000000 [144] 0x48
0x06000000 [144] 0x49
0xE42C2303 [16]  ?
0x0B2B9AF0 [16]  0x5C new {0x8B,0xD6,0x7C,0x17,0x49,0x93,0x6E,0x36,0xE9,0x70,0xC0,0xB0,0xB2,0xA9,0x82,0x28};
0x09000000 [144] 0x4C
0xBB67C59F [144] 0x5E
0x0A35EA03 [16]  0x5E
0x7B0505F0 [16]  0x5E
0x7B0506F0 [16]  0x5E
0x7B0508F0 [16]  0x5E
0x0A000000 [144] 0x4D
0x0B000000 [144] 0x4E
0x0C000000 [144] 0x4F
0x7F24BDCD [144] 0x60
0xD67B3303 [16]  0x60
0xADF305F0 [16]  0x60
0xADF306F0 [16]  0x60
0xADF308F0 [16]  0x60
0x0D000000 [144] 0x50
0x1BC8D12B [144] 0x61
0xD66DF703 [16]  0x61
0x279D05F0 [16]  0x61
0x279D06F0 [16]  0x61
0x279D08F0 [16]  0x61
0x0E000000 [144] 0x51
0x63BAB403 [16]  0x51
0x0F000000 [144] 0x52
0x862648D1 [144] 0x52
0x1B11FD03 [16]  0x52
0xD13B05F0 [16]  0x52
0xD13B06F0 [16]  0x52
0xD13B08F0 [16]  0x52
0x89742B04 [32]  0x??
0xE92408F0 [32]  0x40
0xF5F12304 [32]  0x??
0x692808F0 [32]  0x40
0x0DAA06F0 [32]  0x5D
0xE1ED06F0 [32]  0x??
0x3C2A08F0 [16]  0x67
0xD91611F0 [16]  0x5D
0xD91612F0 [16]  0x5D new {0x9E,0x20,0xE1,0xCD,0xD7,0x88,0xDE,0xC0,0x31,0x9B,0x10,0xAF,0xC5,0xB8,0x73,0x23};
0xD91613F0 [16]  0x5D new {0xEB,0xFF,0x40,0xD8,0xB4,0x1A,0xE1,0x66,0x91,0x3B,0x8F,0x64,0xB6,0xFC,0xB7,0x12};
0xD91614F0 [16]  0x5D new {0xFD,0xF7,0xB7,0x3C,0x9F,0xD1,0x33,0x95,0x11,0xB8,0xB5,0xBB,0x54,0x23,0x73,0x85};
0xD91617F0 [16]  0x5D new {0x02,0xFA,0x48,0x73,0x75,0xAF,0xAE,0x0A,0x67,0x89,0x2B,0x95,0x4B,0x09,0x87,0xA3};
0xD91618F0 [16]  0x5D new {0x96,0x96,0x7C,0xC3,0xF7,0x12,0xDA,0x62,0x1B,0xF6,0x9A,0x9A,0x44,0x44,0xBC,0x48};
0xD9161AF0 [16]  0x5D new {0x27,0xE5,0xA7,0x49,0x52,0xE1,0x94,0x67,0x35,0x66,0x91,0x0C,0xE8,0x9A,0x25,0x24};
0xD91680F0 [16]  0x5D
0xD91681F0 [16]  0x5D
0xD91690F0 [16]  0x5D
0x2E5E11F0 [16]  0x48
0x2E5E80F0 [32]  0x48
0x2E5E90F0 [32]  0x48

Вот навыдёргивал ключиков из дампа эмуля PSP:

Keys

ErikPshat · 24.07.2012, 00:59

А как бы сдампить адрес 0xBFC00200

frostegater · 24.07.2012, 02:11

ErikPshat,

SceUID fd = sceIoOpen("ms0:/iram.bin", PSP_O_WRONLY | PSP_O_CREAT | PSP_O_TRUNC, 0777);
if(fd >= 0)
{
	sceIoWrite(fd, (void *)0xBFC00200, 0xFFE00); // такой размер, т.к. на сколько я понимаю ты хочешь сдампить IRAM с 0x200 адреса
	sceIoClose(fd);
}

Yoti · 24.07.2012, 18:42

ErikPshat,
ключики может лучше записывать как key_F0???????

frostegater,
на момент полной зашрузки консоли там уже нет ничего, насколько я помню.

ErikPshat · 24.07.2012, 18:53

Сообщение от Yoti

ключики может лучше записывать как key_F0???????

Да я тоже так подумывал, для удобства копирования из хекса, чтобы не разворачивать.
Но всё-таки ключи распределяются по группам:

4C94 - kernel
457B - user
3802 - vsh

Поэтому думаю так всё-таки лучше оставить.

Сообщение от Yoti

frostegater,
на момент полной зашрузки консоли там уже нет ничего, насколько я помню.

Да, я уже вчера весь мозг себе вынес.
Думаю лучше воспользоваться этой темой: https://www.pspx.ru/forum/showpost.ph...12&postcount=4
Там мы как раз дампили 0хBFC00000

А кстати, PRXDecrypter-mod тоже ведь хеш извлекает, когда натравливаем на декриптовку зашифрованного файла.
Поэтому я просил недекриптованный файл Flash0 от эмуля Виты, там в теме.
Правда Фрост сказал, что это невозможно. Но кто-то же извлёк их и декриптовал, наверное Davee.

Yoti · 29.07.2012, 15:45

Красота же =)

Cipher g_cipher[] = {
	{ 0x4c941df0, key_4c941df0, NULL, 0x43, 2},
	{ 0x0b000000, key_0b000000, NULL, 0x4e, 0},
	{ 0x2fd30bf0, key_2fd30bf0, xor_2fd30bf0, 0x47, 5},
	{ 0x2fd312f0, key_2fd312f0, xor_2fd312f0, 0x47, 5},
	{ 0x2fd311f0, key_2fd311f0, xor_2fd311f0, 0x47, 5},
	{ 0x407810f0, key_407810f0, xor_407810f0, 0x6a, 5},
	{ 0x2e5e10f0, key_2e5e10f0, xor_2e5e10f0, 0x48, 5},
	{ 0x2e5e12f0, key_2e5e12f0, xor_2e5e10f0, 0x48, 5},
	{ 0xd91612f0, key_d91612f0, NULL, 0x5d, 2},
	{ 0xd91613f0, key_d91613f0, NULL, 0x5d, 2},
	{ 0x380210f0, key_380210f0, NULL, 0x5a, 2},
	{ 0x4C949AF0, key_4C949AF0, NULL, 0x43, 2},
	{ 0x457B9AF0, key_457B9AF0, NULL, 0x5B, 2},
};

http://wololo.net/talk/viewtopic.php?f=5&t=12365
http://wololo.net/talk/viewtopic.php?p=260858#p260858
http://wololo.net/talk/viewtopic.php?p=261391#p261391

ErikPshat · 12.04.2013, 05:37

Новый ключик в прошивке 2.10 на PS Vita http://wololo.net/talk/viewtopic.php?p=258277#p258277

0x4C949BF0 [16] 0x43 new {0x??}; //2.02 kernel PSVita
0x4C949CF0 [16] 0x43 new {0x3F,0x67,0x09,0xA1,0x47,0x71,0xD6,0x9E,0x27,0x7C,0x7B,0x32,0x67,0x0E,0x65,0x8A }; //2.10 kernel PSVita

**BlackDaemon** · 14.04.2014, 00:40

Сообщение от ErikPshat

0x4C949BF0 [16] 0x43 new {0x??}; //2.02 kernel PSVita

u8 key_4C949BF0[0x10] = {0x20, 0x00, 0x5B, 0x67, 0x48, 0x77, 0x02, 0x60, 0xCF, 0x0C, 0xAB, 0x7E, 0xAE, 0x0C, 0x55, 0xA1};

Спасибо разработчику Hykem за предоставленный ключ.

ErikPshat · 14.04.2014, 00:54

BlackDaemon, отлично, теперь можно декриптовать системные модуди:

    /* 0x43 Kernel modules fw keys */
    { 0x4C949CF0, key_4C949CF0, 0x43 }, //2.10 psvita
    { 0x4C949BF0, key_4C949BF0, 0x43 }, //2.02 psvita
    { 0x4C949AF0, key_4C949AF0, 0x43 }, //1.6x PSVita

И из них повыдёргивать все остальные ключи. А других прошивок на Вите вроде и не было?

**BlackDaemon** · 14.04.2014, 18:53

Сообщение от ErikPshat

А других прошивок на Вите вроде и не было?

М-м-м...со времён 2.02 вышло уже немало прошивок, но на данный момент Hykem разобрал то, что у меня есть сейчас - вита с прошивкой 2.02 и UNO/TN-V. У меня пока что необходимости обновляться выше нет, учитывая, что обновление вручную + закачка игры с эксплойтом с пом. PS3 - те ещё танцы с бубном.

ErikPshat · 14.04.2014, 19:10

BlackDaemon, ааа, ты имеешь в виду это: http://www.zload.net/v2/archives/ofws/
Интересно, так вытаскивать файлы из обновлений пока никак не умеют?
И даже в самой Вите нет доступа к файлам эмулятора flash0,1,2,3?