SceSblSsMgr: Difference between revisions

From Vita Development Wiki
Jump to navigation Jump to search
Line 91: Line 91:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x01 ===
=== execute_dmac5_command_0x01 ===
Line 101: Line 103:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x01 ===
=== execute_dmac5_command_0x01 ===
Line 111: Line 115:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x02 ===
=== execute_dmac5_command_0x02 ===
Line 121: Line 127:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x02 ===
=== execute_dmac5_command_0x02 ===
Line 131: Line 139:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x02 ===
=== execute_dmac5_command_0x02 ===
Line 141: Line 151:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x03 ===
=== execute_dmac5_command_0x03 ===
Line 151: Line 163:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x09 ===
=== execute_dmac5_command_0x09 ===
Line 161: Line 175:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x09 ===
=== execute_dmac5_command_0x09 ===
Line 171: Line 187:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x21 ===
=== execute_dmac5_command_0x21 ===
Line 181: Line 199:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x22 ===
=== execute_dmac5_command_0x22 ===
Line 191: Line 211:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x23 ===
=== execute_dmac5_command_0x23 ===
Line 201: Line 223:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x23 ===
=== execute_dmac5_command_0x23 ===
Line 211: Line 235:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x33 ===
=== execute_dmac5_command_0x33 ===
Line 221: Line 247:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x3B ===
=== execute_dmac5_command_0x3B ===
Line 231: Line 259:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x3B ===
=== execute_dmac5_command_0x3B ===
Line 241: Line 271:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x3B ===
=== execute_dmac5_command_0x3B ===
Line 251: Line 283:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x41 ===
=== execute_dmac5_command_0x41 ===
Line 262: Line 296:
Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command


<source lang="c">
<source lang="c">int execute_dmac5_command_0x41(int *buff1, int *buff2, int size, int a4, int key_size, int a6);</source>
int execute_dmac5_command_0x41(int *buff1, int *buff2, int size, int a4, int key_size, int a6);
</source>


=== execute_dmac5_command_0x42 ===
=== execute_dmac5_command_0x42 ===
Line 275: Line 307:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x49 ===
=== execute_dmac5_command_0x49 ===
Line 285: Line 319:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0x4A ===
=== execute_dmac5_command_0x4A ===
Line 295: Line 331:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0xA ===
=== execute_dmac5_command_0xA ===
Line 305: Line 343:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command_0xA ===
=== execute_dmac5_command_0xA ===
Line 315: Line 355:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== execute_dmac5_command ===
=== execute_dmac5_command ===
Line 325: Line 367:


Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command
<source lang="c"></source>


=== sceSblSsMgrGetConsoleIdForDriver ===
=== sceSblSsMgrGetConsoleIdForDriver ===

Revision as of 20:41, 24 August 2017

Module

Known NIDs

Version Name World Privilege NID
1.69 SceSblSsMgr Non-secure Kernel 0xFDDD93FA
3.60 SceSblSsMgr ? Kernel 0x4E913538

Libraries

Known NIDs

Version Name World Visibility NID
1.69 SceSblSsMgrForKernel Non-secure Kernel 0x74580D9F
1.69 SceSblSsMgrForDriver Non-secure Kernel 0x61E9428D
3.60 SceSblSsMgrForDriver ? Kernel 0x61E9428D
1.69 SceSblSsMgr Non-secure Kernel 0xEC86E4B0
1.69 SceSblQafMgr Non-secure User 0x756B7E89
1.69 SceSblRng Non-secure User 0x1843F124
1.69 SceSblDmac5Mgr Non-secure User 0x437366A2
1.69 SceSblAimgr Non-secure User 0xD473F968

SceSblSsMgrForKernel

get_syscon_data

Version NID
3.60 0xC2EC8F5A

for example gets 0x20 bytes of data for act_sm.self command 0x4 call.

this is done by passing offset 0x520 as first argument. 

int get_syscon_data(int offset, char *buffer, int size);

SceSblSsMgrForDriver

execute_dmac5_command_0x04

Version NID
3.60 0xAC57F4F0

Generates random data of length 0x40 by executing Dmac5 command 

int execute_dmac5_command_0x04(char* dest);

execute_dmac5_command_0x04

Version NID
3.60 0x4DD1B2E5

Generates random data of length 0x40 by executing Dmac5 command

Data is then cropped to fit the size in outputBuffer. 

int execute_dmac5_command_0x04(char* outputBuffer, int size, int unk);

execute_dmac5_command_0x01

Version NID
3.60 0x01BE0374

Executes Dmac5 command 



execute_dmac5_command_0x01






Version
NID




3.60
0x0F7D28AF



Executes Dmac5 command





execute_dmac5_command_0x01






Version
NID




3.60
0xC517770D



Executes Dmac5 command





execute_dmac5_command_0x02






Version
NID




3.60
0x197ACF6F



Executes Dmac5 command





execute_dmac5_command_0x02






Version
NID




3.60
0x7C978BE7



Executes Dmac5 command





execute_dmac5_command_0x02






Version
NID




3.60
0x8B4700CB



Executes Dmac5 command





execute_dmac5_command_0x03






Version
NID




3.60
0xEB3AF9B5



Executes Dmac5 command





execute_dmac5_command_0x09






Version
NID




3.60
0x711C057A



Executes Dmac5 command





execute_dmac5_command_0x09






Version
NID




3.60
0xE6E1AD15



Executes Dmac5 command





execute_dmac5_command_0x21






Version
NID




3.60
0x82B5DCEF



Executes Dmac5 command





execute_dmac5_command_0x22






Version
NID




3.60
0x7D46768C



Executes Dmac5 command





execute_dmac5_command_0x23






Version
NID




3.60
0x6704D985



Executes Dmac5 command





execute_dmac5_command_0x23






Version
NID




3.60
0x92E37656



Executes Dmac5 command





execute_dmac5_command_0x33






Version
NID




3.60
0x79F38554



Executes Dmac5 command





execute_dmac5_command_0x3B






Version
NID




3.60
0x1B14658D



Executes Dmac5 command





execute_dmac5_command_0x3B






Version
NID




3.60
0x83B058F5



Executes Dmac5 command





execute_dmac5_command_0x3B






Version
NID




3.60
0xEA6ACB6D



Executes Dmac5 command





execute_dmac5_command_0x41






Version
NID




3.60
0x37DD5CBF



Executes Dmac5 command



int execute_dmac5_command_0x41(int *buff1, int *buff2, int size, int a4, int key_size, int a6);


execute_dmac5_command_0x42






Version
NID




3.60
0x8EAFB18A



Executes Dmac5 command





execute_dmac5_command_0x49






Version
NID




3.60
0x05B38698



Executes Dmac5 command





execute_dmac5_command_0x4A






Version
NID




3.60
0x926BCCF0



Executes Dmac5 command





execute_dmac5_command_0xA






Version
NID




3.60
0x121FA69F



Executes Dmac5 command





execute_dmac5_command_0xA






Version
NID




3.60
0x1901CB5E



Executes Dmac5 command





execute_dmac5_command






Version
NID




3.60
0x9641374E



Executes Dmac5 command





sceSblSsMgrGetConsoleIdForDriver






Version
NID




3.60
0xFC6CDD68



//buffer is of size 0x10
int sceSblSsMgrGetConsoleIdForDriver(void* cid);


sceSblSsMgrGetOpenPsIdForDriver






Version
NID




3.60
0xA5B5D269



typedef struct SceKernelOpenPsId {
	char id[16];
} SceKernelOpenPsId;

//buffer is of size 0x10
int sceSblSsMgrGetOpenPsIdForDriver(SceKernelOpenPsId *id);


dec_aes_key_msif






Version
NID




3.60
0x934db6b5



decrypts or derives aes key that is used in msif to decrypt static sha224 table

communication with F00D is done with command 0x2000A from encdec_w_portability_sm.self



typedef struct input_data //size is 0x24
{
  uint32_t size;
  uint8_t unk_4[0x20];
}input_data;

typedef struct output_data //size is 0x24
{
  uint32_t size;
  uint8_t unk_4[0x10];
  uint8_t aes_key_14[0x10];
}input_data;

//arg1 - size is 0x10
int dec_aes_key_msif(int num, char* arg1, input_data* in, output_data* out);


SceSblSsMgr


SceSblQafMgr


sceSblQafManagerGetQafNameForUser






Version
NID




1.69
0xF7EA8C2



sceSblQafManagerIsAllowKernelDebugForUser






Version
NID




1.69
0x11D30766



sceSblQafManagerSetQafTokenForUser






Version
NID




1.69
0x56A16392



sceSblQafMgrIsAllowForceUpdate






Version
NID




1.69
0x63F29BA0



sceSblQafMgrIsAllowAllDebugMenuDisplay






Version
NID




1.69
0x66843305



sceSblQafMgrIsAllowNpTest






Version
NID




1.69
0xA9EBCBAC



sceSblQafMgrIsAllowNonQAPup






Version
NID




1.69
0xB5621615



sceSblQafMgrGetQafToken






Version
NID




1.69
0xB6BAE81D



sceSblQafMgrIsAllowLimitedDebugMenuDisplay






Version
NID




1.69
0xC456212D



sceSblQafMgrIsAllowScreenShotAlways






Version
NID




1.69
0xD22A8731



sceSblQafManagerDeleteQafTokenForUser






Version
NID




1.69
0xD542583F



sceSblQafMgrIsAllowRemoteSysmoduleLoad






Version
NID




1.69
0xF45AA706



SceSblRng


_sceKernelGetRandomNumber






Version
NID




1.69
0xC37E818C



SceSblDmac5Mgr


sceSblDmac5HashTransform






Version
NID




1.69
0x9EBC6EF



sceSblDmac5EncDecKeyGen






Version
NID




1.69
0x5BF4F924



sceSblDmac5EncDec






Version
NID




1.69
0xD0B1F759



SceSblAimgr


_sceKernelGetOpenPsId






Version
NID




1.69
0x6E283E2E



Retrieved from "http://wiki.henkaku.xyz/index.php?title=SceSblSsMgr&oldid=4581"