Sponsored Links

Sponsored Links

PlayStation 4 FW Update 1.5 (PS4UPDATE.PUP) & PS4 Updatelist XML Out


Sponsored Links
38w ago - Following up on the initial PS4 Firmware 1.50 Update details, today Sony PlayStation 4 hacker SKFU has made available the PS4UPDATE.PUP and Recovery file link and analysis, which comes shortly after some ps4-updatelist.xml files were made public by B7U3 C50SS as well.

Download: [Register or Login to view links] / [Register or Login to view links] (Mirror) / [Register or Login to view links] (Mirror #2) / [Register or Login to view links] / [Register or Login to view links] (Recovery - Mirror) / [Register or Login to view links] by flat_z / PS4PUP.exe (Compiled) by PSGamer24 / [Register or Login to view links] / [Register or Login to view links] / [Register or Login to view links] / [Register or Login to view links] by xerpi / PS4PUP.exe v3 (Compiled) by PSGamer24 / [Register or Login to view links] / [Register or Login to view links] by Hykem / PS4PUP.exe v4 (Compiled) by PSGamer24 / [Register or Login to view links] (Compiled EXE) by $n!pR / [Register or Login to view links] (based on [Register or Login to view links]) / [Register or Login to view links]

To quote: PlayStation 4 - Update File Analysis

Hey guys,

Here comes a short analysis of the PlayStation 4 update files. Available at:

  • PS4 Update File: [Register or Login to view links] (Size in Bytes: 322,831,872)
  • PS4 Recovery Update File: [Register or Login to view links] (Size in Bytes: 901,133,312)

Best regards,

- SKFU

Update: The update files were removed from the SONY update server. Since it is unclear if this was firmware version 1.00 or 1.50, let's hope there was some mistake made by SONY here which helps us in future

  • Firmware .PUP - c64d11f839ac8628176941b99fd3670e
  • Recovery .PUP - 6f4d6afe98dd7297c70aa4d6e7e5482b

Update #2: It appears Frumix (via neogaf.com/forum/showpost.php?p=87942869&postcount=1) also discovered the same thing, who states the following additional details:

PS4 1.5 Update File is apparently up on update servers #1

  • Update file (308 MB)
  • Recovery file (859 MB)

Just like on PS3, it seems it's the same file across all regions (data in the american xml seems to be erroneous somehow). Not sure what you might need it for this early, but here you go. Update if old.

IMPORTANT: If you're unsure what to do with any of this, wait until official Sony page goes online.

According to Sony's Shuei Yoshida confirmed that the PS4 1.50 System Update won't be included on PlayStation 4 game discs.

When asked if the servers fail on launch day, Yoshida answered with "No" outright. He also stated that games will not insert the update, so users will have to download it from the Internet.

From Sony PlayStation 4 hacker flat_z (via pastie.org/private/4wgojewhp2pq7declhkhw) comes a Python script to extract embedded .PUPs from the PS4 container, as follows:

An updated and commented UnPKG Python Script revision by flat_z (via psdevwiki.com/ps4/Talk:PKG_files) as well:

Table Entry Hashes (SHA-256)

The first entry in the index table points to a block of hashes (Using Amazon Instant Video: UP2064-CUSA00130_00-AIV00000000000US.pkg for this example).

Offset: 0x00002CA0 Length: 0x00000220

First hash is blank, can't hash the table of hashes. The remaining hashes are for each of the remaining Index Table Entries.

i.e the second entry in the Index Table should have a SHA-256 matching the following:

For those curious:

  • Normal firmwares have 3 PUPs inside.
  • Recovery firmwares have 4 PUPs inside.
  • Debug firmwares have 5 PUPs inside.

Everything is encrypted after that, even the selfs, so might take a while until we see runable x86/64 code appearing from the PUPs.

Finally, from xerpi comes a few revisions of his own PlayStation 4 PUP Extractor (linked above) with details below as follows:

[xerpi] here's my version of a PS4 PUP extractor: pastebin.com/qdgumb8t
[flatz] xerpi, i think SKFU is wrong with the fixed size of header
[flatz] seems like data is aligned to the block size
[flatz] so if you have 20 files for example, then data offset should be 0x400
[xerpi] I've thought this, but I've read that there are a maximum of 10 files
[flatz] i think it is just his assumption
[xerpi] so If there's no file limit, the data would be: 32 + 48*filecount
[xerpi] data offset*
[xerpi] but there's still a reserved space so I don't know if this space will continue existing
[flatz] actually you don't need to calculate data offset
[flatz] just get it from entry table
[flatz] data_offset = block_index * block_size
[flatz] header always start with block_index = 0
[xerpi] right, but as I see block_size is 512
[xerpi] so the first PUP offset (data_offset) will be 512 bytes after the begin of the file
[xerpi] I don't see any dynamic number telling the size of the blocks
[flatz] it is fixed to 512
[flatz] data_offset = align_up(header_size + entry_size * num_entries, 512) where header_size = 0x20, entry_size = 0x30
[xerpi] yes, so I set the general offset to PS4_PUP_HEADER_SIZE + header-]pups[i].offset
[xerpi] ok, so the only static size here is the size of the header of the header (the top part of the header)
[flatz] yep
[flatz] and block size
[xerpi] yeah
[xerpi] It makes sense now, thanks
[flatz] np
[flatz] seems like they use some sort of mapping/paging.. that's why they use fixed-size blocks and padding to make data size multiple of block size
[xerpi] I see
[xerpi] done: pastebin.com/bHXBhTyc
[flatz] great
[xerpi] treat it as an "experiment"
[xerpi] I was bored when I saw this info so I decided to try to do a simple pup extractor
[flatz] i'm too
[xerpi] btw I got to go now, it's a bit late here hahaha
[xerpi] cya

ps4pupextractor v2 by xerpi

ps4pupextractor v2 by xerpi

ps4pupextractor v3 by xerpi (via xerpi)

From Hykem also comes a PS4 PUP Unpacker, as follows:

Update #3: As the official PS4 Firmware v1.50 PUP (1.501) is now released, this leak apparently was the PlayStation 4 v1.50 PUP not the v1.501 Update for those wondering.

Update #4: From Habib via harryoke come the PS4 - SLB2 Structure - .PUP KEYS, as follows:

SLB PUP Files

These files are contained inside of SLB2 containers. They contain data pertaining to system firmware.

You are able to decrypt inner pup files using the follow keys:

0x40 bytes after the magic are encrypted with aes. (256 bits CBC Mode). The new encrypted buffer contains the new erk and riv to be used for the next decryption. The next 0x240 bytes are decrypted with aes. (128 bits CTR Mode). That 0x240 bytes contain a table of information relating to the system files. Each entry in there contains the offset for encrypted sections, sha1 hmac keys, and the erk and riv to decrypt each encrypted section. Each section is decrypted using aes. (128 bits CTR mode).








Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

Comments 43 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles. Thanks!

B7U3 C50SS's Avatar
#43 - B7U3 C50SS - 35w ago
Alright, glad to hear i'm correct on this.

Zarod's Avatar
#42 - Zarod - 35w ago
Yes, they changed it from 1.501 to 1.500. I saw that too. I think they realized they made a mistake in numbering the update version and reverted it to the proper number. It's still the same PUPS and hashes, just the number changed.

B7U3 C50SS's Avatar
#41 - B7U3 C50SS - 36w ago
the xmls updated.. did anyone manage to get the pups besides me while they were updating? it seems sony hid the update process it said for a while: but before that i noticed it said something else:

i managed to get a copy of the ps4 updates for USA users but that's all guess.. it was either the fact they did a good job concealing it or it was that i was downright lazy.. -_- in any case i should have mentioned this beforehand.

people, plz tell me if someone else noticed this. or am i just hallucinating. hope i'm not seeing stuff.

rodq's Avatar
#40 - rodq - 36w ago
Yes.

1. PS4UPDATE1.PUP
START: 0x200
SIZE: 229544464 Bytes

2. PS4UPDATE2.PUP
START: 0xDAE9600
SIZE: 93298992 Bytes

3. PS4UPDATE3.PUP
START: 0x133E3800
SIZE: 43283960 Bytes

4. PS4UPDATE4.PUP
START: 0x15D2AE00
SIZE: 535017384 Bytes

hey69's Avatar
#39 - hey69 - 36w ago
so are the EU and US files exactly the same?

Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links







Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2014 PlayStation 3 News