Support for decrypting Game Updates?

[1jtp8sobiu]

Hello, I tried to decrypt the game update (PBOOT.PBP) but it failed. Is it possible to support it? Here is a screenshot and uploaded the files. https://i.gyazo.com/dabb014361d788ad2696df89a7686c81.png NPJH50698_00-SIREN4PLUS2012MA.zip

[artart78]

Just took a look at it, it looks very similar to #33. It uses an additional key we called "secureInstallId" in uofw (not sure it's its official name), which is passed to the decryption function sceMesgLed_driver_31D6D8AA, but I'm not really sure where that key comes from. It looks like it can come :

• from the sceKernelLoadModule*() call itself
• from init.prx which gets the npdrm key from loadcore, coming from reboot, ultimately coming from loadexec's sceKernelLoadExecNpDrm

If anyone has any info about what's the game update run process, I can take a deeper look at it, but for now I'm quite clueless.

[Yoti]

u8 key_2e5e10f0[16] = {
	0x9D, 0x5C, 0x5B, 0xAF, 0x8C, 0xD8, 0x69, 0x7E, 0x51, 0x9F, 0x70, 0x96, 0xE6, 0xD5, 0xC4, 0xE8
};

u8 xor_2e5e10f0[16] = {
	0x69, 0xBA, 0x55, 0x34, 0xF0, 0xC0, 0xD6, 0x71, 0xE3, 0x1F, 0xDB, 0x97, 0xE0, 0x7C, 0xD2, 0x2A
};

PSPCipher.zip