Editing Flash:Individual System Data - cISD

Jump to navigation Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 5: Line 5:


=== Header ===
=== Header ===
Length: 0x10
==== example ====
==== example ====
{| class="wikitable"
{| class="wikitable"
Line 19: Line 17:
|-
|-
|}
|}
==== structure ====
==== structure ====
{|class="wikitable"
{|class="wikitable"
Line 25: Line 22:
! Address !! Length !! Value !! Description
! Address !! Length !! Value !! Description
|-
|-
| 0x0 || 0x4 || 0x3 || '''Number of entries''' (3 entries: cISD0, cISD1, and cISD2)
| 0x0 || 0x4 || 0x3 || Number of entries
|-
|-
| 0x4 || 0x4 || 0x270 || '''cISD length''' (included header, file table, and all entries)
| 0x4 || 0x8 || 0x270 || Length of entire cISD package
|-
|-
| 0x8 || 0x8 || 0x0 || ''Unknown/Blank''
| 0x8 || 0x8 || 0x0 || Unknown/Blank
|-
|-
|}
|}
Line 35: Line 32:
=== File Table ===
=== File Table ===
0x10 per entry:
0x10 per entry:
==== example ====
==== example ====
{| class="wikitable"
{| class="wikitable"
Line 52: Line 48:
|-
|-
|}
|}
==== structure ====
==== structure ====
{|class="wikitable"
{|class="wikitable"
Line 58: Line 53:
! Address !! Length !! Value !! Description
! Address !! Length !! Value !! Description
|-
|-
| 0x0 || 0x4 || 0x40 || '''Entry point'''
| 0x0 || 0x4 || 0x40 || Entry point
|-
|-
| 0x4 || 0x4 || 0x20 || '''Length'''
| 0x4 || 0x8 || 0x20 || Length
|-
|-
| 0x8 || 0x8 || 0x0 || '''Entry number'''
| 0x8 || 0x8 || 0x0 || Entrynumber
|-
|-
|}
|}
====Typical cISD entry addresses and lengths====
====Typical cISD entry addresses and lengths====
Entry point listed is offset from base cISD address (NOR:0x003F000 / NAND:0x0090800 in these examples) <br />
Entry point listed is offset from base cISD address (NOR:0x003F000 / NAND:0x0090800 in these examples) <br />
Line 72: Line 66:
{|class="wikitable"
{|class="wikitable"
|-
|-
! rowspan="2" | Entry !! rowspan="2" | Entry point !! rowspan="2" | Length !! rowspan="2" | Entry number !! colspan="2" | NOR Address || colspan="2" | NAND Address
! rowspan="2" | Description !! rowspan="2" | Entry point !! rowspan="2" | Length !! colspan="2" | NOR Address || colspan="2" | NAND Address
|-
|-
! start !! end !! start !! end
! start !! end !! start !! end
|-
|-
! cISD0
| cISD0 || 0x40 || 0x20 || 0x003F040 || 0x003F060 || 0x0090840 || 0x0090860
| 0x40 || 0x20 || 0x0 || 0x003F040 || 0x003F060 || 0x0090840 || 0x0090860
|-
|-
! cISD1
| cISD1 || 0x60 || 0x200 || 0x003F060 || 0x003F260 || 0x0090860 || 0x0090A60
| 0x60 || 0x200 || 0x1 || 0x003F060 || 0x003F260 || 0x0090860 || 0x0090A60
|-
|-
! cISD2
| cISD2 || 0x260 || 0x10 || 0x003F260 || 0x003F270 || 0x0090A60 || 0x0090A70
| 0x260 || 0x10 || 0x2 || 0x003F260 || 0x003F270 || 0x0090A60 || 0x0090A70
|-
|-
|}
|}


 
=== cISD0 - Section 0 ===
=== cISD0 ===
Length: 0x20
 
==== example ====
==== example ====
{| class="wikitable"
{| class="wikitable"
Line 106: Line 94:
|-
|-
|}
|}
==== structure ====
==== structure ====
{|class="wikitable"
{|class="wikitable"
Line 112: Line 99:
! Address !! Length !! Value !! Description
! Address !! Length !! Value !! Description
|-
|-
| 0x0 || 0x8 || 0x1FA7E382DC || '''MAC Address 0''' (cannot change, tied to MAC in syscon)
| 0x0 || 0x6 || 0xA8E3EE7D10DA || MAC Address
|-
|-
| 0x8 || 0x8 || 0xFF... || ''MAC Address 1''
| 0x6 || 0x1A || 0xFF || Unknown/Blank
|-
| 0x10 || 0x8 || 0xFF... || ''MAC Address 2''
|-
| 0x18 || 0x8 || 0xFF... || ''MAC Address 3''
|-
|-
|}
|}


=== cISD1 ===
=== cISD1 - Section 1 ===
Length: 0x200
 
==== example ====
==== example ====
{| class="wikitable"
{| class="wikitable"
Line 155: Line 136:
|-
|-
|}
|}
==== structure ====
==== structure ====
* From testbench fw
<pre>
printf("[INFO]: ISD: % 17s: %.32s\n", "ECID", v6 + 0x10);//ECID
printf("[INFO]: ISD: % 17s: %.12s\n", "BoardID", v6 + 0x38);//KibanID or BoardID
printf("[INFO]: ISD: BootLoaderVersion: %04X\n", *((unsigned __int16 *)v6 + 0x22));//0x44(2)
printf("[INFO]: ISD:  OSUpdaterVersion: %04X\n", *((unsigned __int16 *)v6 + 0x23));//0x46(2)
printf("[INFO]: ISD:  BoardDiagVersion: %04X\n", *((unsigned __int16 *)v6 + 0x24));//0x48(2)
printf("[INFO]: ISD: ConfigBootVersion: %04X\n", *((unsigned __int16 *)v6 + 0x25));//0x4A(2) or ckp_data?
//0x4C
//0x4E
printf("[INFO]: ISD: CKP2 ManagementID: %04X\n", *((unsigned __int16 *)v6 + 0x28));//0x50(2)
printf("[INFO]: ISD:    LibBootVersion: %04X\n", *((unsigned __int16 *)v6 + 0x29));//0x52(2)
printf("[INFO]: ISD: CKP1 ManagementID: %08X%08X\n",*((unsigned int *)v6 + 0x16),*((unsigned int *)v6 + 0x17));//0x58 (00000000) and 0x5C (increment, random)         
</pre>
{|class="wikitable"
{|class="wikitable"
|-
|-
! Address !! Length !! Value !! Description
! Address !! Length !! Value !! Description
|-
|-
| 0x00 || 0x4 || 0x7F49444C || '''magic''', header of IDLog (IDLog size - 0x5F)
| 0x0 || 0x8 || 0x7F49444C0002006001 || static, header of IDLog (IDLog size - 0x5F)
|-
| 0x04 || 0x2 || 0x0002 || '''config version'''
|-
|-
| 0x06 || 0x2 || 0x0060 || Start offset of "available area" (end offset of used area)
| 0x9 || 0xF || 0x0000020133B2B6 || CID - varies per console
|-
|-
| 0x08 || 0x2 || 0x0100 || ''Unknown''
| 0x10 || 0x2F || Ascii: 01CA0176410467180305494000000020 || eCID - varies per console
|-
|-
| 0x0A || 0x6 || <!-- 0x0001 on DEH-H1000A-E --> 0x00020133B2B6 || '''CID''' aka Customer ID or Serial Number - varies per console (BL/Metldr per console keys + EID root keys calculated from this value on Sony's server) / Notice that the value in hex is actually in Ascii, so 00020133B2B6 / Can also be fetched at MMIO, sent by the config ring during POR / Similar to Fuse ID on PSP (Fuse ID is 6 bytes and a unique value in the Playstation Portable).<br>Every refurfished consoles seems to have that value starting with <b>0x0FFF</b>, versus <b>0x0001</b> or <b>0x0002</B> for virgin ones.
| 0x30 || 0x37 || Ascii: 27438416 || board_id - part of console serial number
|-
|-
| 0x10 || 0x20 || Ascii: 01CA0176410467180305494000000020 || '''eCID''' (maybe official name is VisibleId, see PSVita NVS) - varies per console / Encrypted CID from above
| 0x38 || 0x43 || Ascii: 400613291192 || kiban_id - barcode on the board
|-
|-
| 0x30 || 0x8 || Ascii: 27438416 || '''board_id''' aka pd_label - part of console serial number. Note: not seen on the white serial sticker in all regions. Sample [[:File:Console-sticker-FAT-back.png|with (Europe)]] and [[:File:Console-sticker-FAT-back (CECHP - USA).jpg|without (USA)]]. On prototypes it's in the format TS3<i>XY</i>... where <i>X</i> is the console type and <i>Y</i> the [[Chassis ID|Chassis Type]]. This id is always the same if the same board is used, excluding retail {{CEX}} targets.
| 0x44 || 0x49 || 0x007300730096 || Unknown - varies per console
<!-- On retails the format seems to be <i>AYZZ</i>, where <i>A</i> is unknown, <i>Y</i> the [[Chassis ID|Chassis Type]] and <i>ZZ</i> is a counter -->
|-
|-
| 0x38 || 0xC || Ascii: 400613291192 || '''kiban_id''' (機番 = machine number) - barcode on the board ({{SD}} Vertigo barcode contains FN letters)
| 0x4A || 0x4B || 0x00001 || ckp2_data - static?
|-
|-
| 0x44 || 0x2 || 0x0073 || '''BootLoaderVersion''' (examples [[Talk:Flash:Individual_System_Data_-_cISD#cISD1 relative offset_0x44_(unknown)|see talkpage]])
| 0x4C || 0x57 || 0xFFFFFFFF000100110002001200 || Unknown, varies per console
|-
|-
| 0x46 || 0x2 || 0x0073 || '''OSUpdaterVersion''' (examples [[Talk:Flash:Individual_System_Data_-_cISD#cISD1 relative offset_0x44_(unknown)|see talkpage]])
| 0x58 || 0x5F || 0x00000000018B3946 || ckp_management_id, varies per console
|-
| 0x48 || 0x2 || 0x0096 || '''BoardDiagVersion''' (examples [[Talk:Flash:Individual_System_Data_-_cISD#cISD1 relative offset_0x44_(unknown)|see talkpage]])
|-
| 0x4A || 0x2 || 0x0001 || '''ConfigBootVersion''' (or '''ckp_data''' from objsuites RE) - semistatic (0xFFFF on {{DEX}} <!-- DEH-H1000A-E: 0x0001 -->/{{DECR}}/{{ARC}}) (0x0002 on {{SD}})
|-
| 0x4C || 0x4 || 0xFFFFFFFF || Likely padding
|-
| 0x50 || 0x2 || 0x0001 || '''CKP2 ManagementID''' - varies per console - semistatic [[Talk:Flash:Individual_System_Data_-_cISD#cISD1 relative offset_0x50_(unknown)|see talkpage]]
|-
| 0x52 || 0x2 || 0x0011 || '''LibBootVersion''' - varies per console - semistatic [[Talk:Flash:Individual_System_Data_-_cISD#cISD1 relative offset_0x50_(unknown)|see talkpage]]
|-
| 0x54 || 0x2 || 0x0002 || Unknown (examples [[Talk:Flash:Individual_System_Data_-_cISD#cISD1 relative offset_0x50_(unknown)|see talkpage]])
|-
| 0x56 || 0x2 || 0x0012 || Unknown (examples [[Talk:Flash:Individual_System_Data_-_cISD#cISD1 relative offset_0x50_(unknown)|see talkpage]])
|-
| 0x58 || 0x8 || 0x00000000018B3946 || '''CKP1 ManagementID''' (varies per console) (split in two halfs as seen on TB fw) <br />seen FF filled on {{ARC}} Arcade, {{DEX}} Debug (Related to the Bluray Drive) - also stored at [[Flash:Encrypted_Individual_Data_-_eEID#EID3|EID3]]
|-
| 0x60 || 0x1A0 || 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF... || Available area (filled with FF's when not used)
|-
|-
|}
|}


=== cISD2 ===
=== cISD2 - Section 2 ===
Length: 0x10
 
==== example ====
==== example ====
{| class="wikitable"
{| class="wikitable"
Line 234: Line 174:
|-
|-
|}
|}
==== structure ====
==== structure ====
<!--// 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 filled on Arcade VER-001 console without Wifi/BT //-->
This value is unknown and the first two bytes seem to vary
{|class="wikitable"
{|class="wikitable"
|-
|-
! Address !! Length !! Value !! Description
! Address !! Length !! Value !! Description
|-
|-
| 0x0 || 0x8 || 0x1FFF000000000000 || [http://www.ps3devwiki.com/wiki/WLAN_PS3_Jupiter_Driver#Loading Wireless LAN Channel Info] ("wlan_data1") <br />
| 0x0 || 0x10 || 0x1FFF0000000000000000000000000000 || Unknown
0x0000000000000000 (no WiFi) e.g. {{ARC}} Arcade units<!--// (missing Wifi/BT related)) //-->
0x07FF000000000000 (USA)<!--// (second most common value) // -->
0x07FF020000000000 (USA) e.g. [[DECR-1000A]]
0x1FFF000000000000 (EU)<!--// (most common value) //-->
0x3FFF000000000000 (Japan)<!--// (seen on CECHH00 & CECHL00 Japan) //-->
|-
| 0x8 || 0x8 || 0x0 || always seen 00 filled ("wlan_data2")<!--// perhaps just trailing 00 to previous WLAN value //-->
|-
|-
|}
|}


== unreferenced area ==
=== unreferenced area ===
Is just a "padding" to fit the whole size to 0x800 (2048 bytes)
Possibly just unused cISD region (which also explains why it is FF filled) <br />
 
==== example ====
cISD length is 0x270 (entire cISD area included header, file table, and all entries) + this padding 0x590 = 0x800
 
=== example ===
{| class="wikitable"
{| class="wikitable"
|-
|-
Line 277: Line 206:
|-
|-
|}
|}
==== structure ====
==== structure ====
{|class="wikitable"
{|class="wikitable"
Line 283: Line 211:
! Address !! Length !! Value !! Description
! Address !! Length !! Value !! Description
|-
|-
| 0x0 || 0x590 || 0xFF || FF filled area
| 0x0 || 0x58F || 0xFF || FF filled area
|-
|-
|}
|}
Line 289: Line 217:


{{Flash}}
{{Flash}}
<noinclude>[[Category:Main]]</noinclude>
 
[[Category:Flash]]
Please note that all contributions to PS3 Developer wiki are considered to be released under the GNU Free Documentation License 1.2 (see PS3 Developer wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following hCaptcha:

Cancel Editing help (opens in new window)

Templates used on this page:

Retrieved from "http://www.psdevwiki.com/ps3/Flash:Individual_System_Data_-_cISD"