aerosoul94

import sys


def read_uint32(stream):
    return int.from_bytes(stream.read(4), 'big')

def read_uint64(stream):
    return int.from_bytes(stream.read(8), 'big')

class BDEmuImageDetail:

aerosoul94

import hmac
import hashlib
import sys
import blowfish # pip install blowfish

def decrypt_and_verify(file_name):
    cipher = blowfish.Cipher(b'(SH[@2>r62%5+QKpy|g6')
    h = hmac.new(b'xM;6X%/p^L/:}-5QoA+K8:F*M!~sb(WK<E%6sW_un0a[7Gm6,()kHoXY+yI/s;Ba', 
      digestmod=hashlib.sha1)
    with open(file_name, 'rb') as fp:

aerosoul94

import sys
import hashlib

def brutehash(path, start, end, size, secthash):
    with open(path, 'rb') as fp:
        fp.seek(start)
        blocksize = 0x1000 # PAGE_SIZE
        seed = size.to_bytes(4, byteorder='little')
        for block in range(start, end, blocksize):
            fp.seek(block)

aerosoul94

# Find and load exports, imports, and opd section for PS3 elf's.
#@author aerosoul
#@category Analysis
#@keybinding 
#@menupath 
#@toolbar 

# NOTE: 
#  You may also want to enable Propagate R2 Pointer for the PowerPC 
#  Constant Reference Analyzer in order to fill in the remaining 

aerosoul94

import xml.etree.ElementTree as ET
import zlib
import struct
import argparse
import os

class File:
    def __init__(self, elem):
        self._file_name = elem.find('FileName').text
        self._file_index = int(elem.find('FileIndex').text)

aerosoul94

import struct
import sys
import re
import os

#
## StringId Generation
#

def create_table(poly):

aerosoul94

import os
import struct
import sys
import zlib
import argparse
import ctypes


class FileCarver(object):
    def __init__(self, f, offset):

aerosoul94

from datetime import datetime
import struct
import os

class CacheDescriptor(object):
    DESCRIPTOR_FMT = ">QQQQII16s456x"

    def __init__(self, f):
        (self.accessDate,
         self.modificationDate,

aerosoul94

1746

Dev

Partition Name	Start (in sectors)	Length (NSectors)	Notes
PhysicalDisk	0	DiskNSectors	Covers entire drive
Partition0	0	DiskNSectors	Covers entire drive
PixDump	0x400	(DiskNSectors / 8) & 0x1fffff80	DiskSize / PageSize?
DumpPartition	PixDumpStart+ PixDumpNSectors	0x107180	After PixDump
SystemPartition	DumpPartitionStart + DumpPartitionNSectors	0x10000	After DumpPartition
Partition1	SystemPartitionStart + SystemPartitionNSectors	AltFlashStart - (SystemPartitionStart + SystemPartitionNSectors)	After SystemPartition

aerosoul94

Index

1. Relocations
   1. Format 0
   2. Format 1
   3. Format 2
   4. Format 3
   5. Format 4
   6. Format 5
   7. Format 6
2. Format 7