SceSblSsMgr: Difference between revisions

From Vita Development Wiki
Jump to navigation Jump to search
Line 308: Line 308:
Executes [[Dmac5|Dmac5]] command
Executes [[Dmac5|Dmac5]] command


<source lang="c"></source>
<source lang="c">int execute_dmac5_command_0x42(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4);</source>


=== execute_dmac5_command_0x49 ===
=== execute_dmac5_command_0x49 ===

Revision as of 21:25, 24 August 2017

Module

Known NIDs

Version Name World Privilege NID
1.69 SceSblSsMgr Non-secure Kernel 0xFDDD93FA
3.60 SceSblSsMgr ? Kernel 0x4E913538

Libraries

Known NIDs

Version Name World Visibility NID
1.69 SceSblSsMgrForKernel Non-secure Kernel 0x74580D9F
1.69 SceSblSsMgrForDriver Non-secure Kernel 0x61E9428D
3.60 SceSblSsMgrForDriver ? Kernel 0x61E9428D
1.69 SceSblSsMgr Non-secure Kernel 0xEC86E4B0
1.69 SceSblQafMgr Non-secure User 0x756B7E89
1.69 SceSblRng Non-secure User 0x1843F124
1.69 SceSblDmac5Mgr Non-secure User 0x437366A2
1.69 SceSblAimgr Non-secure User 0xD473F968

SceSblSsMgrForKernel

get_syscon_data

Version NID
3.60 0xC2EC8F5A

for example gets 0x20 bytes of data for act_sm.self command 0x4 call.

this is done by passing offset 0x520 as first argument. 

int get_syscon_data(int offset, char *buffer, int size);

SceSblSsMgrForDriver

execute_dmac5_command_0x04

Version NID
3.60 0xAC57F4F0

Generates random data of length 0x40 by executing Dmac5 command 

int execute_dmac5_command_0x04(char* dest);

execute_dmac5_command_0x04

Version NID
3.60 0x4DD1B2E5

Generates random data of length 0x40 by executing Dmac5 command

Data is then cropped to fit the size in outputBuffer. 

int execute_dmac5_command_0x04(char* outputBuffer, int size, int unk);

execute_dmac5_command_0x01

Version NID
3.60 0x01BE0374

Executes Dmac5 command 

int execute_dmac5_command_0x01(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4);

execute_dmac5_command_0x01

Version NID
3.60 0x0F7D28AF

Executes Dmac5 command 

int execute_dmac5_command_0x01(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4, int arg_8);

execute_dmac5_command_0x01

Version NID
3.60 0xC517770D

Executes Dmac5 command 

int execute_dmac5_command_0x01(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4);

execute_dmac5_command_0x02

Version NID
3.60 0x197ACF6F

Executes Dmac5 command 

int execute_dmac5_command_0x02(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4, int arg_8);

execute_dmac5_command_0x02

Version NID
3.60 0x7C978BE7

Executes Dmac5 command 

int execute_dmac5_command_0x02(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4);

execute_dmac5_command_0x02

Version NID
3.60 0x8B4700CB

Executes Dmac5 command 

int execute_dmac5_command_0x02(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4);

execute_dmac5_command_0x03

Version NID
3.60 0xEB3AF9B5

Executes Dmac5 command 

int execute_dmac5_command_0x03(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4);

execute_dmac5_command_0x09

Version NID
3.60 0x711C057A

Executes Dmac5 command 

int execute_dmac5_command_0x09(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4, int arg_8, int arg_C);

execute_dmac5_command_0x09

Version NID
3.60 0xE6E1AD15

Executes Dmac5 command 

int execute_dmac5_command_0x09(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4, int arg_8);

execute_dmac5_command_0x21

Version NID
3.60 0x82B5DCEF

Executes Dmac5 command 

int execute_dmac5_command_0x21(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4, int arg_8);

execute_dmac5_command_0x22

Version NID
3.60 0x7D46768C

Executes Dmac5 command 

int execute_dmac5_command_0x22(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4, int arg_8);

execute_dmac5_command_0x23

Version NID
3.60 0x6704D985

Executes Dmac5 command 

int execute_dmac5_command_0x23(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4, int arg_8);

execute_dmac5_command_0x23

Version NID
3.60 0x92E37656

Executes Dmac5 command 

int execute_dmac5_command_0x23(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4, int arg_8, int arg_C);

execute_dmac5_command_0x33

Version NID
3.60 0x79F38554

Executes Dmac5 command 

int execute_dmac5_command_0x33(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4, int arg_8);

execute_dmac5_command_0x3B

Version NID
3.60 0x1B14658D

Executes Dmac5 command 

int execute_dmac5_command_0x3B(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4, int arg_8, int arg_C);

execute_dmac5_command_0x3B

Version NID
3.60 0x83B058F5

Executes Dmac5 command 

int execute_dmac5_command_0x3B(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4, int arg_8, int arg_C, int arg_10);

execute_dmac5_command_0x3B

Version NID
3.60 0xEA6ACB6D

Executes Dmac5 command 

int execute_dmac5_command_0x3B(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4, int arg_8, int arg_C);

execute_dmac5_command_0x41

Version NID
3.60 0x37DD5CBF

Executes Dmac5 command 

int execute_dmac5_command_0x41(int *buff1, int *buff2, int size, int a4, int key_size, int a6);

execute_dmac5_command_0x42

Version NID
3.60 0x8EAFB18A

Executes Dmac5 command 

int execute_dmac5_command_0x42(int unk0, int unk1, int unk2, int unk3, int arg_0, int arg_4);

execute_dmac5_command_0x49

Version NID
3.60 0x05B38698

Executes Dmac5 command 



execute_dmac5_command_0x4A






Version
NID




3.60
0x926BCCF0



Executes Dmac5 command





execute_dmac5_command_0xA






Version
NID




3.60
0x121FA69F



Executes Dmac5 command





execute_dmac5_command_0xA






Version
NID




3.60
0x1901CB5E



Executes Dmac5 command





execute_dmac5_command






Version
NID




3.60
0x9641374E



Executes Dmac5 command





sceSblSsMgrGetConsoleIdForDriver






Version
NID




3.60
0xFC6CDD68



//buffer is of size 0x10
int sceSblSsMgrGetConsoleIdForDriver(void* cid);


sceSblSsMgrGetOpenPsIdForDriver






Version
NID




3.60
0xA5B5D269



typedef struct SceKernelOpenPsId {
	char id[16];
} SceKernelOpenPsId;

//buffer is of size 0x10
int sceSblSsMgrGetOpenPsIdForDriver(SceKernelOpenPsId *id);


dec_aes_key_msif






Version
NID




3.60
0x934db6b5



decrypts or derives aes key that is used in msif to decrypt static sha224 table

communication with F00D is done with command 0x2000A from encdec_w_portability_sm.self



typedef struct input_data //size is 0x24
{
  uint32_t size;
  uint8_t unk_4[0x20];
}input_data;

typedef struct output_data //size is 0x24
{
  uint32_t size;
  uint8_t unk_4[0x10];
  uint8_t aes_key_14[0x10];
}input_data;

//arg1 - size is 0x10
int dec_aes_key_msif(int num, char* arg1, input_data* in, output_data* out);


SceSblSsMgr


SceSblQafMgr


sceSblQafManagerGetQafNameForUser






Version
NID




1.69
0xF7EA8C2



sceSblQafManagerIsAllowKernelDebugForUser






Version
NID




1.69
0x11D30766



sceSblQafManagerSetQafTokenForUser






Version
NID




1.69
0x56A16392



sceSblQafMgrIsAllowForceUpdate






Version
NID




1.69
0x63F29BA0



sceSblQafMgrIsAllowAllDebugMenuDisplay






Version
NID




1.69
0x66843305



sceSblQafMgrIsAllowNpTest






Version
NID




1.69
0xA9EBCBAC



sceSblQafMgrIsAllowNonQAPup






Version
NID




1.69
0xB5621615



sceSblQafMgrGetQafToken






Version
NID




1.69
0xB6BAE81D



sceSblQafMgrIsAllowLimitedDebugMenuDisplay






Version
NID




1.69
0xC456212D



sceSblQafMgrIsAllowScreenShotAlways






Version
NID




1.69
0xD22A8731



sceSblQafManagerDeleteQafTokenForUser






Version
NID




1.69
0xD542583F



sceSblQafMgrIsAllowRemoteSysmoduleLoad






Version
NID




1.69
0xF45AA706



SceSblRng


_sceKernelGetRandomNumber






Version
NID




1.69
0xC37E818C



SceSblDmac5Mgr


sceSblDmac5HashTransform






Version
NID




1.69
0x9EBC6EF



sceSblDmac5EncDecKeyGen






Version
NID




1.69
0x5BF4F924



sceSblDmac5EncDec






Version
NID




1.69
0xD0B1F759



SceSblAimgr


_sceKernelGetOpenPsId






Version
NID




1.69
0x6E283E2E



Retrieved from "http://wiki.henkaku.xyz/index.php?title=SceSblSsMgr&oldid=4599"