Editing Talk:Flash

It would be great if the admin could install SyntaxHighlight extension to media wiki

http://www.mediawiki.org/wiki/Extension:ASHighlight

on my list of things to do [[User:Admin|Admin]] 21:25, 11 April 2011 (CDT)


----
=== observations comparing dumps ===


Encrypted files appear to have a header:
<pre>
From metldr

 00000840  00 00 0E 8E 99 87 3B C7 15 F2 80 80 9C 30 22 25  ...Ž™‡;Ç.ò€€œ0"%
 00000850  00 00 0E 8E 78 A5 61 E0 17 72 6E F7 A7 1B 41 AB  ...Žx¥aà.rn÷§.A«

 00000840  00 00 0E 8E 99 87 3B C7 15 F2 80 80 9C 30 22 25  ...Ž™‡;Ç.ò€€œ0"%
 00000850  00 00 0E 8E 81 2E 00 A9 59 75 01 CC C1 72 D5 50  ...Ž...©Yu.ÌÁrÕP

From bootldr

 00FC0000  00 00 2F 4B 53 92 1C E7 F7 33 41 76 9B 7A 1E D6  ../KS’.ç÷3Av›z.Ö
 00FC0010  00 00 2F 4B 78 A5 61 E0 17 72 6E F7 A7 1B 41 AB  ../Kx¥aà.rn÷§.A«

 00FC0000  00 00 2F 4B CB 9E 15 24 28 B4 4F D2 F9 3F BC 43  ../KËž.$(´OÒù?¼C
 00FC0010  00 00 2F 4B 81 2E 00 A9 59 75 01 CC C1 72 D5 50  ../K...©Yu.ÌÁrÕP
</pre>
also to note that these values are found within the eeid region.

------------

Also noted that near the end of region 1 there seems to be this recurring pattern, it repeats the following 20 bytes 199 times

 00EFD740                          0A 9E F8 79 2B 99 37 5A          .žøy+™7Z
 00EFD750  53 49 92 D7 A5 BD 99 2A 26 2D 39 B8              SI’×¥½™*&-9¸

then it has these 15 bytes:

 00EFE6D0              8C 37 E4 F4 CC CC 59 02 D0 FA B8 A5      Œ7äôÌÌY.Ðú¸¥
 00EFE6E0  1E 42 98 DD 54 AF 8D 5E                          .B˜ÝT¯.^

Then it repeats the first 20 bytes 199 times, looks like the tried to hide it?

same on the other dump but different data

 00EFD740                          17 D8 FE B6 56 B6 84 F2          .Øþ¶V¶„ò
 00EFD750  5E 17 E9 5D B1 80 E1 D2 00 6F 88 26              ^.é]±€áÒ.oˆ&

 00EFE6D0              E7 BF FF DA E2 2E A3 B8 73 79 76 C8      ç¿ÿÚâ.£¸syvÈ
 00EFE6E0  B1 72 B3 E7 B9 33 70 F6                          ±r³ç¹3pö
</pre>

----
<pre>
Done some work on decoding region 2 today:
Region 2 seems to = vflash partition table? These might be the first 2 regions?
partition table is 4096 bytes.
Format:
16 bytes 00's
16 bytes magic: 00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD FA CE
8 bytes 0x03
8 bytes 0x02 (number of paritions?)
144 bytes 00's
Partition entries:
8 bytes entry point (entry point * 0x200) relative to 0x00 on flash
8 bytes entry length (entry length * 0x200)
32 bytes 10 70 00 00 01 00 00 01 00 00 00 00 00 00 00 03 10 70 00 00 02 00 00 01 00 00 00 00 00 00 00 03
96 bytes 00's
</pre>

----

sample of my flash:
http://www.megaupload.com/?d=J5UKO3HX


----

=== norunpack ===
Changed version for Progskeet: http://pastebin.com/HNvCbF7d


----



=== List of files on NOR Flash ===

The following is a list of files stored in NOR Flash

{| class="wikitable FCK__ShowTableBorders"
|-
! rowspan="2" | Name 
! colspan="2" | TOC
! colspan="2" | Start Offset 
! colspan="2" | End Offset 
! rowspan="2" | Size
! rowspan="2" | Notes
|-
! Offset 
! Index 
! Relative
! Absolute
! Relative
! Absolute
|-
| asecure_loader 
| 0x400 
| 0 
| 0x400 
| 0x810 
| 0x2E800
| 0x2F010
| 0x2E800 &nbsp;(190,464&nbsp;bytes) 
| aka metldr
|-
| eEID 
| 0x400 
| 1 
| 0x2EC00 
| 0x2F010 
| 0x3EC00
| 0x3F010
| 0x10000 &nbsp;(65,636&nbsp;bytes)
| <small>(IDPS @ offset 0x0002F070 absolute / 0x00000070 inside eEID )</small>
|-
| cISD 
| 0x400 
| 2 
| 0x3EC00 
| 0x3F010 
| 0x3F400
| 0x3F810
| 0x800 &nbsp;(2,048&nbsp;bytes)
| 
|-
| cCSD 
| 0x400 
| 3 
| 0x3F400 
| 0x3F810 
| 0x3FC00
| 0x40010
| 0x800 &nbsp;(2,048&nbsp;bytes)
| 
|-
| trvk_prg0 
| 0x400 
| 4 
| 0x3FC00 
| 0x40010 
| 0x5FC00
| 0x60010
| 0x20000 &nbsp;(131,072&nbsp;bytes)
| 
|-
| trvk_prg1 
| 0x400 
| 5 
| 0x5FC00 
| 0x60010 
| 0x7FC00
| 0x80010
| 0x20000 &nbsp;(131,072&nbsp;bytes)
| 
|-
| trvk_pkg0 
| 0x400 
| 6 
| 0x7FC00 
| 0x80010 
| 0x9FC00
| 0xA0010
| 0x20000 &nbsp;(131,072&nbsp;bytes)
| 
|-
| trvk_pkg1 
| 0x400 
| 7 
| 0x9FC00 
| 0xA0010 
| 0xBFC00
| 0xC0010
| 0x20000 &nbsp;(131,072&nbsp;bytes)
| 
|-
| ros0 
| 0x400 
| 8 
| 0xBFC00 
| 0xC0010 
| 0x7BFC00
| 0x7C0010
| 0x700000 &nbsp;(7,340,032&nbsp;bytes)
| Contains CoreOS files
|-
| ros1 
| 0x400 
| 9 
| 0x7BFC00 
| 0x7C0010 
| 0xEBFC00
| 0xEC0010
| 0x700000 &nbsp;(7,340,032&nbsp;bytes)
| Contains CoreOS files
|-
| cvtrm 
| 0x400 
| 10 
| 0xEBFC00 
| 0xEC0010 
| 0xEFFC00
| 0xF00010
| 0x40000 &nbsp;(262,144&nbsp;bytes)
| 
|-
| CELL_EXTNOR_AREA
| 
| 
| 
| 0xF20000
| 
| 0xFA0040
| 0x80040 &nbsp;(524,352&nbsp;bytes)
| 
|-
| bootldr
| 
| 
| 
| 0xFC0000
| 
| 0xFEEAF0
| 0x2EAF0 &nbsp;(191,216&nbsp;bytes)
| <small>End @ FEF170, FEF570, FEF5F0, FEF600 in some dumps</small>
|}


=== metldr revision ===
There are are least 8 different metldr revisions (pre 3.60 aka metldr.2), only 3.50+ have the metldr version check.

Based on the metldr and bootldr table i have coded an app that checks the byte at 0xFC0003 and test it weather its 5B or FB and decides if the console is downgradable or not. i think it may help some people.. This program also scans the file if it is of correct size or not..
http://www.sendspace.com/file/8liow8


====metldr+bootldr sizes====

{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;" 
|- bgcolor="#cccccc"
! rowspan="2" | Datecode / Manufacturing date !! colspan="2" | metldr offset !! colspan="2" | bootldr offset !! rowspan="2" | Notes
|-
! 0x81E&nbsp;(NOR)<br />0x4081E&nbsp;(NAND) !! 0x842&nbsp;(NOR)<br />0x40842&nbsp;(NAND) !! 0xFC0002&nbsp;(NOR)<br />0x0&nbsp;(NAND) !! 0xFC0012&nbsp;(NOR)<br />0x12&nbsp;(NAND)
|-
|  || EE 10 || 0E DD || 2A 3F || 2A 3F || <!--//bluemimmo: NAND FAT//--><span style="color:#30C030; background-color:#FFFFFF; ">OK</span>
|-
|  || E8 90 || 0E 85 || 2F 13 || 2F 13 || <!--//Val, Freeplex//--><span style="color:#30C030; background-color:#FFFFFF; ">OK</span>
|-
|  || E8 D0 || 0E 89 || 2E AB || 2E AB || <!--//Abkarino, anger, defyboy//--><span style="color:#30C030; background-color:#FFFFFF; ">OK</span>
<!--//
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 E8 D0  .......@......èÐ
00000820  6D 65 74 6C 64 72 00 00 00 00 00 00 00 00 00 00  metldr..........
00000830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000840  00 00 0E 89 43 B6 EF 4A E2 0F 74 00 C8 80 9E 53  ...‰C¶ïJâ.t.È€žS
00000850  00 00 0E 89 57 D3 B7 B1 88 EF 91 C6 67 C8 DB 06  ...‰WÓ·±ˆï‘ÆgÈÛ.
//-->
|-
| CECHH (DIA-001) || E8 E0 || 0E 8A || 2E F4 || 2E F4 || <!--//akex: CECHH DIA-001 with Spansion S29GL128N90TFIR2 //--><span style="color:#30C030; background-color:#FFFFFF; ">OK</span>
|-
| CECH-2504B (?) with 3.40 from factory - datecode 0C || E9 20 || 0E 8E || 2F 4B || 2F 4B || <!--//ogy, Ir0nman, nice69, Marcocanc, sandugas:CECH-2504B (unknow mobo) with 3.40 from factory - datecode 0C, avati:(COK-002W) //--><span style="color:#30C030; background-color:#FFFFFF; ">OK</span>
|-
| CECH-250.B (JTP-001) with 3.56 from factory - <span style="color:#30C030; background-color:#FFFFFF; ">datecode 1A</span> || E9 60 || 0E 92 || 2F 53 || 2F 53 || <!--//Freemagne, ciariello, aftab//--><span style="color:#30C030; background-color:#FFFFFF; ">OK</span>
|-
| CECH2504A (JTP-001) with <span style="color:#F06060; background-color:#FFFFFF; ">3.56&nbsp;from&nbsp;factory</span> - <span style="color:#F06060; background-color:#FFFFFF; ">datecode&nbsp;1B</span> || E9 60 || 0E 92 || 2F 5B || 2F 5B || <!--//cech-2501a-jtp-001-1b, raymanvtw(RLOD+poweroff when try downgrade to 355):CECH2504A (JTP-001) with 3.56 from factory - datecode 1B //--><span style="color:#F06060; background-color:#FFFFFF; ">(RLOD+)poweroff&nbsp;@&nbsp;downgrade&nbsp;355</span>
|-
| CECHJ (DIA-002) || EA 60 || 0E A2 || 2E E3 || 2E E3 || <!--//cechj 40gb / chipps3ve: DIA-002 with Spansion //--><span style="color:#30C030; background-color:#FFFFFF; ">OK</span>
|-
| CECHC (COK-002) with 1.00&nbsp;from&nbsp;factory || EB F0 || 0E BB || 30 44 || 30 44 || <!--//euss: NAND FAT//--><span style="color:#30C030; background-color:#FFFFFF; ">OK</span>
|-
| CECH2504B (JSD-001), with <span style="color:#F06060; background-color:#FFFFFF; ">3.60&nbsp;from&nbsp;factory</span> - <span style="color:#F06060; background-color:#FFFFFF; ">datecode&nbsp;1B</span><br />CECH3012A (KTE-001), with <span style="color:#F06060; background-color:#FFFFFF; ">3.65&nbsp;from&nbsp;factory</span> - <span style="color:#F06060; background-color:#FFFFFF; ">datecode&nbsp;[N.A.]</span> || F9 20 || 0F 8E || 2F FB || 2F FB || <small>"metldr.2"</small><br /><!--// Nodial2ne:CECH-3012A - Date Code [N.A.] factory 3.65 //--><span style="color:#F06060; background-color:#FFFFFF; ">(RLOD+)poweroff&nbsp;@&nbsp;downgrade&nbsp;355</span>
|-
|}

= NAND reference=
most of the information on this page if based on NOR dumps, this section is for NAND specifics

When trying to dump from GameOS on NAND consoles:
* first 0x40000 bytes are masked (cut off) by HV - thus missing bootldr
* trying to read beyond 0xEFC0000-0xFFFFFFF (a region filled with FF's on consoles without OtherOS) results in panic

== NAND reference (euss) ==
CECHC-04/COK-002 Pal EU launchmodel with OFW 3.15 updated to MFW 3.15 ([[User:Euss|Euss]])

=== Bootldr ===
<pre>    Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
    00000000  6D 61 73 6B 65 64 20 42 4F 4F 54 4C 44 52 20 20  masked BOOTLDR  
    00000010  30 78 34 30 30 30 30 20 73 69 7A 65 20 20 20 20  0x40000 size             if dumped from GameOS, the first 40000 bytes are masked (cut off) by HV
    00000020  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
    00000030  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ</pre>

=== ROS0 ===
[http://www.multiupload.com/LTVVYR2S5G 315-ROS0-coreos-c0000-7c0000.rar (4.81 MB)]
<pre>   ROS0 on NAND:
     
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   000C0000  00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 20  ....... ....... 
   000C0010  00 00 00 00 00 E0 00 00 00 00 00 00 00 00 00 00  .....à..........
   000C0020  00 00 00 00 00 00 00 00 00 00 00 00 00 6F FF E0  .............oÿà
   000C0030  00 00 00 01 00 00 00 17 00 00 00 00 00 6F FF E0  .............oÿà
   000C0040  00 00 00 00 00 00 04 60 00 00 00 00 00 00 44 98  .......`......D˜
   000C0050  61 69 6D 5F 73 70 75 5F 6D 6F 64 75 6C 65 2E 73  aim_spu_module.s
   000C0060  65 6C 66 00 00 00 00 00 00 00 00 00 00 00 00 00  elf.............
   000C0070  00 00 00 00 00 00 49 00 00 00 00 00 00 01 DA E4  ......I.......Úä
   000C0080  61 70 70 6C 64 72 00 00 00 00 00 00 00 00 00 00  appldr..........
   000C0090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C00A0  00 00 00 00 00 02 24 00 00 00 00 00 00 04 00 00  ......$.........
   000C00B0  63 72 65 73 65 72 76 65 64 5F 30 00 00 00 00 00  creserved_0.....
   000C00C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C00D0  00 00 00 00 00 06 24 00 00 00 00 00 00 00 22 A0  ......$......." 
   000C00E0  64 65 66 61 75 6C 74 2E 73 70 70 00 00 00 00 00  default.spp.....
   000C00F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0100  00 00 00 00 00 06 46 A0 00 00 00 00 00 07 FC 48  ......F ......üH
   000C0110  65 6D 65 72 5F 69 6E 69 74 2E 73 65 6C 66 00 00  emer_init.self..
   000C0120  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0130  00 00 00 00 00 0E 43 00 00 00 00 00 00 07 0F 94  ......C........”
   000C0140  65 75 72 75 73 5F 66 77 2E 62 69 6E 00 00 00 00  eurus_fw.bin....
   000C0150  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0160  00 00 00 00 00 15 52 A0 00 00 00 00 00 06 16 00  ......R ........
   000C0170  68 64 64 5F 63 6F 70 79 2E 73 65 6C 66 00 00 00  hdd_copy.self...
   000C0180  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0190  00 00 00 00 00 1B 68 A0 00 00 00 00 00 01 2E 44  ......h .......D
   000C01A0  69 73 6F 6C 64 72 00 00 00 00 00 00 00 00 00 00  isoldr..........
   000C01B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C01C0  00 00 00 00 00 1C 97 00 00 00 00 00 00 03 E8 28  ......—.......è(
   000C01D0  6C 76 30 00 00 00 00 00 00 00 00 00 00 00 00 00  lv0.............
   000C01E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C01F0  00 00 00 00 00 20 7F 40 00 00 00 00 00 12 B1 70  ..... .@......±p
   000C0200  6C 76 31 2E 73 65 6C 66 00 00 00 00 00 00 00 00  lv1.self........
   000C0210  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0220  00 00 00 00 00 33 30 C0 00 00 00 00 00 01 E5 CC  .....30À......åÌ
   000C0230  6C 76 31 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv1ldr..........
   000C0240  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0250  00 00 00 00 00 35 16 A0 00 00 00 00 00 01 6D A0  .....5. ......m 
   000C0260  6C 76 32 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv2ldr..........
   000C0270  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0280  00 00 00 00 00 36 84 40 00 00 00 00 00 16 EE B8  .....6„@......î¸
   000C0290  6C 76 32 5F 6B 65 72 6E 65 6C 2E 73 65 6C 66 00  lv2_kernel.self.
   000C02A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C02B0  00 00 00 00 00 4D 73 00 00 00 00 00 00 00 80 8C  .....Ms.......€Œ
   000C02C0  6D 63 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  mc_iso_spu_modul
   000C02D0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   000C02E0  00 00 00 00 00 4D F3 A0 00 00 00 00 00 00 88 B8  .....Mó ......ˆ¸
   000C02F0  6D 65 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  me_iso_spu_modul
   000C0300  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   000C0310  00 00 00 00 00 4E 7C 60 00 00 00 00 00 00 5D B0  .....N|`......]°
   000C0320  73 62 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sb_iso_spu_modul
   000C0330  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   000C0340  00 00 00 00 00 4E DA 20 00 00 00 00 00 01 53 2C  .....NÚ ......S,
   000C0350  73 63 5F 69 73 6F 2E 73 65 6C 66 00 00 00 00 00  sc_iso.self.....
   000C0360  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0370  00 00 00 00 00 50 2D 60 00 00 00 00 00 00 00 08  .....P-`........
   000C0380  73 64 6B 5F 76 65 72 73 69 6F 6E 00 00 00 00 00  sdk_version.....
   000C0390  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C03A0  00 00 00 00 00 50 2D 80 00 00 00 00 00 00 D7 F0  .....P-€......×ð
   000C03B0  73 70 70 5F 76 65 72 69 66 69 65 72 2E 73 65 6C  spp_verifier.sel
   000C03C0  66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  f...............
   000C03D0  00 00 00 00 00 51 05 80 00 00 00 00 00 00 FA CC  .....Q.€......úÌ
   000C03E0  73 70 75 5F 70 6B 67 5F 72 76 6B 5F 76 65 72 69  spu_pkg_rvk_veri
   000C03F0  66 69 65 72 2E 73 65 6C 66 00 00 00 00 00 00 00  fier.self.......
   000C0400  00 00 00 00 00 52 00 60 00 00 00 00 00 00 5C 94  .....R.`......\”
   000C0410  73 70 75 5F 74 6F 6B 65 6E 5F 70 72 6F 63 65 73  spu_token_proces
   000C0420  73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00 00  sor.self........
   000C0430  00 00 00 00 00 52 5D 00 00 00 00 00 00 00 65 D0  .....R].......eÐ
   000C0440  73 70 75 5F 75 74 6F 6B 65 6E 5F 70 72 6F 63 65  spu_utoken_proce
   000C0450  73 73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00  ssor.self.......
   000C0460  00 00 00 00 00 52 C2 E0 00 00 00 00 00 00 C0 78  .....RÂà......Àx
   000C0470  73 76 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sv_iso_spu_modul
   000C0480  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
</pre>

=== ROS1 ===
[http://www.multiupload.com/1Z58MNC34V 315-ROS1-coreos-7c0000-ec0000.rar (4.81 MB)]
<pre>   ROS1 on NAND:
     
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   007C0000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0010  00 00 00 00 00 00 00 00 00 00 00 00 00 6F FF E0  .............oÿà
   007C0020  00 00 00 01 00 00 00 17 00 00 00 00 00 6F FF E0  .............oÿà
   007C0030  00 00 00 00 00 00 04 60 00 00 00 00 00 04 00 00  .......`........
   007C0040  63 72 65 73 65 72 76 65 64 5F 30 00 00 00 00 00  creserved_0.....
   007C0050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0060  00 00 00 00 00 04 04 60 00 00 00 00 00 00 00 08  .......`........
   007C0070  73 64 6B 5F 76 65 72 73 69 6F 6E 00 00 00 00 00  sdk_version.....
   007C0080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0090  00 00 00 00 00 04 04 80 00 00 00 00 00 01 E5 CC  .......€......åÌ
   007C00A0  6C 76 31 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv1ldr..........
   007C00B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C00C0  00 00 00 00 00 05 EA 80 00 00 00 00 00 01 6D A0  ......ê€......m 
   007C00D0  6C 76 32 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv2ldr..........
   007C00E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C00F0  00 00 00 00 00 07 58 80 00 00 00 00 00 01 2E 44  ......X€.......D
   007C0100  69 73 6F 6C 64 72 00 00 00 00 00 00 00 00 00 00  isoldr..........
   007C0110  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0120  00 00 00 00 00 08 87 00 00 00 00 00 00 01 DA E4  ......‡.......Úä
   007C0130  61 70 70 6C 64 72 00 00 00 00 00 00 00 00 00 00  appldr..........
   007C0140  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0150  00 00 00 00 00 0A 61 E4 00 00 00 00 00 00 FA CC  ......aä......úÌ
   007C0160  73 70 75 5F 70 6B 67 5F 72 76 6B 5F 76 65 72 69  spu_pkg_rvk_veri
   007C0170  66 69 65 72 2E 73 65 6C 66 00 00 00 00 00 00 00  fier.self.......
   007C0180  00 00 00 00 00 0B 5C B0 00 00 00 00 00 00 5C 94  ......\°......\”
   007C0190  73 70 75 5F 74 6F 6B 65 6E 5F 70 72 6F 63 65 73  spu_token_proces
   007C01A0  73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00 00  sor.self........
   007C01B0  00 00 00 00 00 0B B9 44 00 00 00 00 00 00 65 D0  ......¹D......eÐ
   007C01C0  73 70 75 5F 75 74 6F 6B 65 6E 5F 70 72 6F 63 65  spu_utoken_proce
   007C01D0  73 73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00  ssor.self.......
   007C01E0  00 00 00 00 00 0C 1F 14 00 00 00 00 00 01 53 2C  ..............S,
   007C01F0  73 63 5F 69 73 6F 2E 73 65 6C 66 00 00 00 00 00  sc_iso.self.....
   007C0200  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0210  00 00 00 00 00 0D 72 40 00 00 00 00 00 00 44 98  ......r@......D˜
   007C0220  61 69 6D 5F 73 70 75 5F 6D 6F 64 75 6C 65 2E 73  aim_spu_module.s
   007C0230  65 6C 66 00 00 00 00 00 00 00 00 00 00 00 00 00  elf.............
   007C0240  00 00 00 00 00 0D B6 D8 00 00 00 00 00 00 D7 F0  ......¶Ø......×ð
   007C0250  73 70 70 5F 76 65 72 69 66 69 65 72 2E 73 65 6C  spp_verifier.sel
   007C0260  66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  f...............
   007C0270  00 00 00 00 00 0E 8E C8 00 00 00 00 00 00 80 8C  ......ŽÈ......€Œ
   007C0280  6D 63 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  mc_iso_spu_modul
   007C0290  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C02A0  00 00 00 00 00 0F 0F 54 00 00 00 00 00 00 88 B8  .......T......ˆ¸
   007C02B0  6D 65 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  me_iso_spu_modul
   007C02C0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C02D0  00 00 00 00 00 0F 98 0C 00 00 00 00 00 00 C0 78  ......˜.......Àx
   007C02E0  73 76 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sv_iso_spu_modul
   007C02F0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C0300  00 00 00 00 00 10 58 84 00 00 00 00 00 00 5D B0  ......X„......]°
   007C0310  73 62 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sb_iso_spu_modul
   007C0320  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C0330  00 00 00 00 00 10 B6 34 00 00 00 00 00 00 22 A0  ......¶4......" 
   007C0340  64 65 66 61 75 6C 74 2E 73 70 70 00 00 00 00 00  default.spp.....
   007C0350  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0360  00 00 00 00 00 10 D9 00 00 00 00 00 00 12 B1 70  ......Ù.......±p
   007C0370  6C 76 31 2E 73 65 6C 66 00 00 00 00 00 00 00 00  lv1.self........
   007C0380  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0390  00 00 00 00 00 23 8A 80 00 00 00 00 00 03 E8 28  .....#Š€......è(
   007C03A0  6C 76 30 00 00 00 00 00 00 00 00 00 00 00 00 00  lv0.............
   007C03B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C03C0  00 00 00 00 00 27 72 A8 00 00 00 00 00 16 EE B8  .....'r¨......î¸
   007C03D0  6C 76 32 5F 6B 65 72 6E 65 6C 2E 73 65 6C 66 00  lv2_kernel.self.
   007C03E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C03F0  00 00 00 00 00 3E 61 60 00 00 00 00 00 07 0F 94  .....>a`.......”
   007C0400  65 75 72 75 73 5F 66 77 2E 62 69 6E 00 00 00 00  eurus_fw.bin....
   007C0410  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0420  00 00 00 00 00 45 70 F4 00 00 00 00 00 07 FC 48  .....Epô......üH
   007C0430  65 6D 65 72 5F 69 6E 69 74 2E 73 65 6C 66 00 00  emer_init.self..
   007C0440  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0450  00 00 00 00 00 4D 6D 3C 00 00 00 00 00 06 16 00  .....Mm<........
   007C0460  68 64 64 5F 63 6F 70 79 2E 73 65 6C 66 00 00 00  hdd_copy.self...
   007C0470  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
</pre>

=== Versioning in ROS0 ===
<pre>   versioning in ROS0 of NAND:
     
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   005C2D90  33 31 35 2E 30 30 30 0A 00 00 00 00 00 00 00 00  315.000.........
   005C2DA0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   005C2DB0  53 43 45 00 00 00 00 02 00 01 00 01 00 00 02 30  SCE............0
</pre>

=== Versioning in ROS1 ===
<pre>   versioning in ROS1 of NAND:
     
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

   00800480  33 31 35 2E 30 30 30 0A 00 00 00 00 00 00 00 00  315.000.........
   00800490  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   008004A0  53 43 45 00 00 00 00 02 00 00 00 01 00 00 01 F0  SCE............ð
</pre>

=== RVK ===
<pre>   Revoke in NAND:     
          
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   00093800  00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 20  ....... ....... 
   00093810  00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00  ...... .........
   00093820  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 40  ...............@
   00093830  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
   00093840  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 40  ...............@
   00093850  6E 27 DA DF 18 19 ED D0 26 30 FD 84 1D 5B 74 BB  n'Úß..íÐ&0ý„.[t»
   00093860  43 53 5F 5E 91 5A 82 48 E1 5B 76 C6 59 9F 1B 0D  CS_^‘Z‚Há[vÆYŸ..
   00093870  3A 5E 73 19 73 59 24 A1 A7 A5 73 28 BC 50 12 93  :^s.sY$¡§¥s(¼P.“
   00093880  10 B7 43 04 B5 01 A5 6C 01 AD 83 86 7B 10 1A 78  .·C.µ.¥l.ƒ†{..x
   00093890  B5 55 E2 CC 52 4D E2 3D AE 7D F6 1B 37 13 63 34  µUâÌRMâ=®}ö.7.c4
   000938A0  50 58 C8 78 27 F9 30 9F 62 E7 0A CF C4 E2 4B C5  PXÈx'ù0Ÿbç.ÏÄâKÅ
   000938B0  4A FF 31 8A C7 3A A7 0A 91 86 E2 C8 4A 51 F7 7D  Jÿ1ŠÇ:§.‘†âÈJQ÷}
   000938C0  7B BF 28 FE F5 93 FA C3 DF E7 A9 F1 A1 92 C1 6F  {¿(þõ“úÃßç©ñ¡’Áo
   000938D0  F1 D8 94 E9 64 60 6D 36 22 61 2E 51 B5 C9 9F 6F  ñØ”éd`m6"a.QµÉŸo
   000938E0  BD C6 44 00 22 75 DC 2A 55 A5 E5 EC 2A 97 9A 4F  ½ÆD."uÜ*U¥åì*—šO
   000938F0  CA 21 38 F1 AA C8 98 29 4D 6A F7 CD 7B F6 04 B3  Ê!8ñªÈ˜)Mj÷Í{ö.³
   00093900  A0 F3 F8 C1 9B CB 9B 48 AE E9 5C CF A5 24 37 29   óøÁ›Ë›H®é\Ï¥$7)
   00093910  9B 10 02 8C 68 1B 4E AA B4 CF EE 81 3A C6 6E CB  ›..Œh.Nª´Ïî.:ÆnË
   00093920  66 99 F6 F9 55 AB 19 FA 43 70 BC E5 72 C4 56 AD  f™öùU«.úCp¼årÄV
   00093930  64 AF DD 0B 17 03 4D EA 87 C5 AD BB 2C 7C B2 48  d¯Ý...Mê‡Å»,|²H
   00093940  9A E9 D1 85 AA 30 87 B8 47 C3 8B C9 BC 42 E2 7D  šéÑ…ª0‡¸GÃ‹É¼Bâ}
   00093950  92 84 D2 03 68 F1 20 54 98 D1 0E 95 4B 54 E5 6E  ’„Ò.hñ T˜Ñ.•KTån
   00093960  1A 6C D6 2F 3E 3F E4 28 4A 0F 9E D4 99 3E E5 D8  .lÖ/>?ä(J.žÔ™>åØ
   00093970  6B 13 7B 19 B4 3A A6 64 56 08 05 D3 FE 1B 68 E1  k.{.´:¦dV..Óþ.há
   00093980  B6 38 2C 0C E1 DF 5F D5 0D EC 6E B6 2A 2F 63 77  ¶8,.áß_Õ.ìn¶*/cw
   00093990  F4 D2 EB 3B 87 DA 83 76 28 E8 9F 50 2C 84 4D 48  ôÒë;‡Úƒv(èŸP,„MH
   000939A0  64 C0 B1 DB C6 AE 81 22 1D 76 9F B9 F8 29 C0 C7  dÀ±ÛÆ®.".vŸ¹ø)ÀÇ
   000939B0  12 06 2A B1 BB 0D 2E 5A 29 BC 56 C6 F5 26 97 0D  ..*±»..Z)¼VÆõ&—.
   000939C0  01 06 CC BC 43 1E 8B 45 C8 20 29 B3 FD EB 30 1D  ..Ì¼C.‹EÈ )³ýë0.
   000939D0  A2 CF 33 2D 09 07 08 6F 4A F3 34 5D DE 63 C0 A8  ¢Ï3-...oJó4]ÞcÀ¨
   000939E0  EE 31 3E 46 11 4F 8D 66 F1 15 74 E2 AC 88 C3 C7  î1>F.O.fñ.tâ¬ˆÃÇ
   000939F0  19 C9 69 0A 9F 36 D7 BC 70 6B 79 32 53 FD 1F 8E  .Éi.Ÿ6×¼pky2Sý.Ž
   00093A00  6D 57 08 C2 CA 78 24 6A 20 3B 5A 98 C2 04 06 95  mW.ÂÊx$j ;Z˜Â..•
   00093A10  C7 E6 53 A5 AB 9C 02 2A 04 40 0B 00 DF 34 13 CF  ÇæS¥«œ.*.@..ß4.Ï
   00093A20  F3 74 FF B6 DB FA 9A A2 FD 4F 72 6B 3E 7E 37 04  ótÿ¶Ûúš¢ýOrk>~7.
   00093A30  00 00 00 03 00 00 00 02 00 01 00 00 00 00 00 00  ................
   00093A40  00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
   00093A50  8E 27 91 93 C8 6F 17 8A 22 FD C8 E1 76 E8 D8 18  Ž'‘“Èo.Š"ýÈávèØ.
   00093A60  62 8B FE F5 43 81 A8 09 01 C6 99 D6 EF CF 64 90  b‹þõC.¨..Æ™ÖïÏd.
   00093A70  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
</pre>

=== VTRM ===
<pre>   VTRM in NAND: 
    
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
     
   00EC0000  53 43 45 49 56 54 52 4D 00 00 00 00 00 00 00 A8  SCEIVTRM.......¨
   00EC0010  00 00 00 00 00 E8 02 00 00 00 00 00 00 00 00 28  .....è.........(
   00EC0020  00 00 00 00 56 54 52 4D 00 00 00 00 00 00 00 04  ....VTRM........     <-- 'VTRM' magic header
   00EC0030  FE 6D 0B C4 FA D5 CE DB 93 86 FC A1 32 3B 71 47  þm.ÄúÕÎÛ“†ü¡2;qG     <-- same value as 00EC0410
   00EC0040  3B A5 C6 F9 C0 00 B6 70 00 00 00 00 00 E8 27 80  ;¥ÆùÀ.¶p.....è'€     <-- first part same value as 00EC0410
   00EC0050  00 00 00 00 00 00 00 60 00 00 00 00 00 00 09 20  .......`....... 
   00EC0060  04 00 00 00 02 00 00 05 10 70 00 05 FF 00 00 01  .........p..ÿ...
   00EC0070  0C 1C 05 9C AA B5 97 A5 9C D6 46 2D EA 22 46 BE  ...œªµ—¥œÖF-ê"F¾
   00EC0080  D1 84 A9 1E 34 5F E7 90 55 49 11 82 51 9D 4A 3F  Ñ„©.4_ç.UI.‚Q.J?
   00EC0090  EF 43 19 E8 4F 6A 5B FF DA 31 E9 F0 76 C8 B2 6B  ïC.èOj[ÿÚ1éðvÈ²k
   00EC00A0  0B A7 47 8E BE 42 28 9F 2B 88 73 0B A5 B6 F2 1D  .§GŽ¾B(Ÿ+ˆs.¥¶ò.
   00EC00B0  00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF  ........ÿÿÿÿÿÿÿÿ
   00EC00C0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   00EC00D0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   00EC00E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   00EC00F0  FF FF FF FF FF FF FF FF 00 00 00 00 00 EB E4 8C  ÿÿÿÿÿÿÿÿ.....ëäŒ
   00EC0100  00 00 00 00 00 00 00 14 39 17 52 0B 31 70 F5 05  ........9.R.1põ.
   00EC0110  02 5A C6 F8 81 F8 54 96 2F EF F3 81 FF FF FF FF  .ZÆø.øT–/ïó.ÿÿÿÿ
   00EC0120  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
    [...]    FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   00EC03F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   00EC0400  00 00 00 00 56 54 52 4D 00 00 00 00 00 00 00 04  ....VTRM........
   00EC0410  FE 6D 0B C4 FA D5 CE DB 93 86 FC A1 32 3B 71 47  þm.ÄúÕÎÛ“†ü¡2;qG     <-- same value as 00EC0030
   00EC0420  3B A5 C6 F9 C0 00 B6 70 00 00 00 00 00 00 04 90  ;¥ÆùÀ.¶p........     <-- first part same value as 00EC0040
   00EC0430  00 00 00 00 00 00 09 20 00 00 00 00 00 00 00 03  ....... ........     <-- pattern exception
   00EC0440  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... .......      <-- repetive pattern until 00EC0440 with some exceptions
    [...]    00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... .......      <-- repetive pattern until 00EC0440 with some exceptions
   00EC1930  00 00 00 00 00 00 00 01 00 00 00 00 00 00 09 20  ...............      <-- pattern exception
    [...]    00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... .......      <-- repetive pattern until 00EC0440 with some exceptions
   00EC21F0  00 00 00 00 00 00 00 02 00 00 00 00 00 00 09 20  ...............      <-- pattern exception
    [...]    00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... .......      <-- repetive pattern until 00EC0440 with some exceptions
   00EC24F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 00 00  ....... ........
    [...]    00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... .......      <-- repetive pattern until 00EC0440 with some exceptions
   00EC28B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... .......      <-- repetive pattern until 00EC0440 with some exceptions
   00EC28C0  00 00 00 00 00 00 09 20 10 70 00 00 02 00 00 01  ....... .p......
   00EC28D0  10 70 00 00 39 00 00 01 22 66 39 B3 0E 7A 1C E7  .p..9..."f9³.z.ç
   00EC28E0  68 85 F9 94 A8 30 BE C4 0B 85 D0 92 1E C0 8F 28  h…ù”¨0¾Ä.…Ð’.À.(
   00EC28F0  7F 70 ED 15 D6 22 06 24 D9 08 64 0B C0 D7 97 29  .pí.Ö".$Ù.d.À×—)
   00EC2900  BE A1 FE 91 D1 F2 D4 88 25 EF 24 86 E0 A3 CB 98  ¾¡þ‘ÑòÔˆ%ï$†à£Ë˜
   00EC2910  AF 17 6F B1 64 A0 56 E5 00 00 00 00 00 00 00 01  ¯.o±d Vå........
   00EC2920  00 00 00 00 00 00 09 20 10 70 00 00 02 00 00 01  ....... .p......
   00EC2930  10 70 00 00 03 00 00 02 F9 D9 6A 84 0C F2 D8 E7  .p......ùÙj„.òØç
   00EC2940  D4 44 5C 3C DF D5 DF 0F B8 DC 3E 81 9A A4 71 8F  ÔD\<ßÕß.¸Ü>.š¤q.
   00EC2950  0A A8 8B 90 1B 2C A1 D1 66 84 AA EE 65 D1 46 9A  .¨‹..,¡Ñf„ªîeÑFš
   00EC2960  D7 38 83 F2 78 47 D1 8E E5 FA EB 39 CF 26 E8 25  ×8ƒòxGÑŽåúë9Ï&è%
   00EC2970  85 DE 3B C6 0B C3 45 D5 00 00 00 00 00 00 00 00  …Þ;Æ.ÃEÕ........
   00EC2980  00 00 00 00 00 00 09 20 04 00 00 00 02 00 00 05  ....... ........
   00EC2990  10 70 00 05 FF 00 00 01 0C 1C 05 9C AA B5 97 A5  .p..ÿ......œªµ—¥
   00EC29A0  9C D6 46 2D EA 22 46 BE D1 84 A9 1E 34 5F E7 90  œÖF-ê"F¾Ñ„©.4_ç.
   00EC29B0  55 49 11 82 51 9D 4A 3F EF 43 19 E8 4F 6A 5B FF  UI.‚Q.J?ïC.èOj[ÿ
   00EC29C0  DA 31 E9 F0 76 C8 B2 6B 0B A7 47 8E BE 42 28 9F  Ú1éðvÈ²k.§GŽ¾B(Ÿ
   00EC29D0  2B 88 73 0B A5 B6 F2 1D 00 00 00 00 00 00 00 00  +ˆs.¥¶ò.........
   00EC29E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
    [...]    FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
</pre>

=== cell_ext_os_area ===
<pre>
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
      
   0E780000  63 65 6C 6C 5F 65 78 74 5F 6F 73 5F 61 72 65 61  cell_ext_os_area
   0E780010  00 00 00 01 00 00 00 02 00 00 00 04 FF FF FF FF  ............ÿÿÿÿ
   0E780020  00 00 00 01 00 27 F8 40 FF FF FF FF FF FF FF FF  .....'ø@ÿÿÿÿÿÿÿÿ
</pre>

<pre>
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   0E7807D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   0E7807E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   0E7807F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   0E780800  1F 8B 08 08 C1 19 04 48 02 03 7A 49 6D 61 67 65  .‹..Á..H..zImage
   0E780810  2E 69 6E 69 74 72 64 2E 70 73 33 2E 62 69 6E 00  .initrd.ps3.bin.
    [...]                                                                        large data area
   0EA00030  FF FE FC FF ED CF FF 07 DE FD A4 A3 A8 88 54 00  ÿþüÿíÏÿ.Þý¤£¨ˆT.
   0EA00040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    [...]    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................   large 00 filled block region
   0EB7FFE0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   0EB7FFF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   0EB80000  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   0EB80010  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

    [...]    FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ   large FF filled block region
   0EFFFFE0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   0EFFFFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
</pre>

== NAND reference (bluemimmo) ==
CECHA-06/COK-001 with 3.60 OFW

=== Bootldr ===
<pre>   Bootldr from offset 0x00000000:
   
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   00000000  00 00 2A 3F 04 AD 56 18 64 8D 49 94 23 8F B8 A1  ..*?.V.d.I”#.¸¡
   00000010  00 00 2A 3F 93 B7 DF 38 94 92 09 B6 C3 9C D2 AA  ..*?“·ß8”’.¶ÃœÒª
   00000020  E8 7D F4 AC 86 AA 28 2F 68 31 AD 61 F5 7C BA 03  è}ô¬†ª(/h1aõ|º.
   00000030  38 BA FF 8C D2 CA A8 5A DA 0D F0 2C 7B 69 03 22  8ºÿŒÒÊ¨ZÚ.ð,{i."
   00000040  E2 EB 0D 9C 6A 12 31 43 FA 3C 5F 5D E3 9F 70 5E  âë.œj.1Cú<_]ãŸp^
   00000050  15 18 7F 09 00 C3 65 E4 47 E4 D9 63 46 4B A1 CC  .....ÃeäGäÙcFK¡Ì
   00000060  8A F9 51 8A 6D F0 FA 94 83 F4 C1 23 4F AE 50 AD  ŠùQŠmðú”ƒôÁ#O®P
   00000070  0F 81 5A 3E 2C 31 AE 6C 81 A1 8D A2 18 7F 35 9F  ..Z>,1®l.¡.¢..5Ÿ
   00000080  99 E5 69 67 A2 E0 F8 14 B8 85 4A 99 41 D9 84 0A  ™åig¢àø.¸…J™AÙ„.
   00000090  11 D5 A1 2A C6 3D 21 9D C3 43 E0 3E 00 17 4C DC  .Õ¡*Æ=!.ÃCà>..LÜ
   000000A0  B1 DD E3 94 00 E0 61 41 65 9A C9 8F C9 18 83 FC  ±Ýã”.àaAešÉ.É.ƒü
   000000B0  CA DA 3E 89 A1 43 CF 4D 0E DB D2 7B 6D 53 6A 53  ÊÚ>‰¡CÏM.ÛÒ{mSjS
   000000C0  3D 43 ED 5C 7F B4 09 E4 22 38 6E 29 E7 3E 07 4B  =Cí\.´.ä"8n)ç>.K
   000000D0  2A FF 98 49 C9 49 FE 26 85 F4 71 15 85 11 75 F3  *ÿ˜IÉIþ&…ôq.….uó
   000000E0  56 79 2A 85 F3 1E 0F E3 21 16 2B 3F B3 25 18 2D  Vy*…ó..ã!.+?³%.-
   000000F0  9D 4E 57 76 1E 59 65 8A 5B BF 41 B7 29 1F 79 0C  .NWv.YeŠ[¿A·).y.
   00000100  A3 E7 CF 07 E7 A3 4F DA 67 B2 C9 75 89 83 4F 71  £çÏ.ç£OÚg²Éu‰ƒOq
   00000110  71 88 D6 89 D7 07 C0 2E D8 DA 39 0F 87 5B FE 40  qˆÖ‰×.À.ØÚ9.‡[þ@
   00000120  23 31 EB BF 86 1A A5 0D D5 24 94 DD A2 69 E4 E8  #1ë¿†.¥.Õ$”Ý¢iäè
   00000130  25 28 2E C7 34 E9 E5 8D 2D F4 AC F5 60 CC 2A CD  %(.Ç4éå.-ô¬õ`Ì*Í
   00000140  06 5D D7 FE C8 59 FC 6D 2B 17 25 A6 2E BE 0F F2  .]×þÈYüm+.%¦.¾.ò
   00000150  46 94 3B 0B C4 76 F6 FB C1 C1 8E 93 42 E9 5B 41  F”;.ÄvöûÁÁŽ“Bé[A
   00000160  69 A8 53 39 C6 09 32 A3 A9 3E AE 71 84 74 EC E0  i¨S9Æ.2£©>®q„tìà
   00000170  97 3B D1 41 D9 59 4B 17 E5 8B D1 2A 57 77 78 8D  —;ÑAÙYK.å‹Ñ*Wwx.
   00000180  02 4A 7F 31 5C 62 30 E5 F3 83 97 27 C4 7B 8D 31  .J.1\b0åóƒ—'Ä{.1
   00000190  E9 53 B6 86 BC 16 AC 15 B9 96 C2 A9 56 AC 13 DF  éS¶†¼.¬.¹–Â©V¬.ß
   000001A0  E4 05 01 30 7F 65 45 48 66 0E 3D D5 A9 1B 1A 76  ä..0.eEHf.=Õ©..v
   000001B0  15 38 C7 B3 0D A2 83 C2 D9 9F 13 28 F9 50 BF 4C  .8Ç³.¢ƒÂÙŸ.(ùP¿L
   000001C0  C1 2D 83 E8 9B A9 EF D1 C8 12 96 50 45 DD CC 26  Á-ƒè›©ïÑÈ.–PEÝÌ&
   000001D0  D5 57 C1 DD A0 2E 81 97 F8 B8 60 00 A9 27 2D 68  ÕWÁÝ ..—ø¸`.©'-h
   000001E0  69 FE C8 F5 E2 7D 48 0D 04 65 FF BB A8 BF 41 9F  iþÈõâ}H..eÿ»¨¿AŸ
   000001F0  27 98 56 D1 93 56 62 87 74 89 63 AD 63 B4 A3 AA  '˜VÑ“Vb‡t‰cc´£ª
   00000200  46 09 AB B5 92 BA BB CF 7C EF 8F 08 F8 FE 96 9A  F.«µ’º»Ï|ï..øþ–š
   00000210  2E 14 C4 67 8C B3 E3 DC DE BC 24 3F D8 17 B0 B6  ..ÄgŒ³ãÜÞ¼$?Ø.°¶
   00000220  1B F7 78 61 DE 90 14 29 46 CB 4E EF 30 0A D3 AA  .÷xaÞ..)FËNï0.Óª
   00000230  BB 78 6B 1D A2 3A E8 27 7B 2D 32 E5 62 C4 45 C0  »xk.¢:è'{-2åbÄEÀ
   00000240  9E 75 6C E3 5C 08 A9 D3 5B 36 38 40 AD BF 5D D4  žulã\.©Ó[68@¿]Ô
   00000250  9D D1 D9 F0 11 A6 D5 68 C9 97 BA 70 38 25 61 0B  .ÑÙð.¦ÕhÉ—ºp8%a.
   00000260  76 B6 84 0E 90 7C E9 C8 AC 01 F4 E4 2D 0A F4 C7  v¶„..|éÈ¬.ôä-.ôÇ
   00000270  98 D7 A3 98 8C CC A8 D0 05 2E A5 87 D7 FA 0A 93  ˜×£˜ŒÌ¨Ð..¥‡×ú.“
   00000280  19 91 81 D3 E9 83 E2 5E 31 D5 AD 78 4B A6 04 80  .‘.Óéƒâ^1ÕxK¦.€
   00000290  94 85 60 AA 09 5E CA 80 E3 FC 40 14 66 9C 47 11  ”…`ª.^Ê€ãü@.fœG.
   000002A0  A7 FF 93 6E 50 EB F6 AE 54 2F 47 43 01 EB 24 4D  §ÿ“nPëö®T/GC.ë$M
   000002B0  4B DC E3 A1 BC B7 B4 9B E0 77 D9 C0 97 CF CE 72  KÜã¡¼·´›àwÙÀ—ÏÎr
   000002C0  EF 84 F5 F1 7D 16 21 AC DC B7 2A 01 96 A4 14 47  ï„õñ}.!¬Ü·*.–¤.G
   000002D0  6D E5 1C 30 9D 1A 64 22 3A 7E 0B 28 A5 22 A0 B8  må.0..d":~.(¥" ¸
   000002E0  85 D8 0E 6B 5A 2B 7D 20 2B CF FA A9 B6 78 D0 FD  …Ø.kZ+} +Ïú©¶xÐý
   000002F0  82 9B 3D D7 24 F0 76 05 24 60 1A 8E CC 61 4A 8E  ‚›=×$ðv.$`.ŽÌaJŽ
   00000300  B8 F2 2B 59 AE FF 49 45 71 D0 31 73 8D 32 08 D9  ¸ò+Y®ÿIEqÐ1s.2.Ù
   00000310  8E 2E B8 18 13 49 B9 2F EB B7 D5 B9 55 E7 63 64  Ž.¸..I¹/ë·Õ¹Uçcd
   00000320  F6 CF 8C B0 ED BA A8 81 36 05 3C 48 E3 58 F1 3A  öÏŒ°íº¨.6.<HãXñ:
   00000330  51 39 CD 68 76 8D 08 D7 2B C4 7B 1D D2 4E DC A2  Q9Íhv..×+Ä{.ÒNÜ¢
   00000340  0E 1B C9 30 2B A1 EF 90 D5 35 7B 92 6B 86 D2 59  ..É0+¡ï.Õ5{’k†ÒY
   00000350  10 84 98 4B 9A 65 1A 00 B8 00 0A CA 5C F7 AF 8C  .„˜Kše..¸..Ê\÷¯Œ
   00000360  9C FF FC 0A 70 11 5E 0A 7A 02 26 B7 DE 98 FA F8  œÿü.p.^.z.&·Þ˜úø
   00000370  0D A0 D2 A3 83 95 34 2F 2C 17 6C B4 66 13 CB FB  . Ò£ƒ•4/,.l´f.Ëû
   00000380  A4 9E BC 64 08 41 F6 A0 F7 A1 F7 E1 24 EE 8C E3  ¤ž¼d.Aö ÷¡÷á$îŒã
   00000390  F2 59 19 1C 84 F8 60 45 81 72 88 B4 AE 6A 97 3E  òY..„ø`E.rˆ´®j—>
   000003A0  B8 5B 4A D8 C7 D2 0C AC 3C D9 25 B2 CC D7 D7 B4  ¸[JØÇÒ.¬<Ù%²Ì××´
   000003B0  CC EF C7 81 95 56 98 C5 A2 B3 7F 77 8D 24 51 7C  ÌïÇ.•V˜Å¢³.w.$Q|
   000003C0  78 27 C5 3A 1E 78 EC 84 5B 54 10 8A E3 0A CD E2  x'Å:.xì„[T.Šã.Íâ
   000003D0  2A 2E B2 9A B6 F2 75 8F B5 F0 74 23 6E 71 D8 56  *.²š¶òu.µðt#nqØV
   000003E0  F0 D1 79 73 0D 5D 41 27 E7 68 55 1F 00 52 9E BE  ðÑys.]A'çhU..Rž¾
   000003F0  BF D6 B4 92 C3 26 84 94 5C FE 46 6C BB 46 FA 51  ¿Ö´’Ã&„”\þFl»FúQ
   00000400  56 41 96 13 94 1A 24 02 64 4F B5 C7 36 F2 25 AF  VA–.”.$.dOµÇ6ò%¯
   00000410  8B 1F FD D1 8F 24 80 44 18 4B B9 D6 04 61 E2 EF  ‹.ýÑ.$€D.K¹Ö.aâï
</pre>

=== ROS0 ===
<pre>   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   000C0020  00 00 00 00 00 00 00 00 00 00 00 00 00 6F FF E0  .............oÿà
   000C0030  00 00 00 01 00 00 00 18 00 00 00 00 00 6F FF E0  .............oÿà
   000C0040  00 00 00 00 00 00 04 90 00 00 00 00 00 04 00 00  ................
   000C0050  63 72 65 73 65 72 76 65 64 5F 30 00 00 00 00 00  creserved_0.....
   000C0060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0070  00 00 00 00 00 04 04 90 00 00 00 00 00 00 00 08  ................
   000C0080  73 64 6B 5F 76 65 72 73 69 6F 6E 00 00 00 00 00  sdk_version.....
   000C0090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C00A0  00 00 00 00 00 04 05 00 00 00 00 00 00 01 E7 C8  ..............çÈ
   000C00B0  6C 76 31 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv1ldr..........
   000C00C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C00D0  00 00 00 00 00 05 ED 00 00 00 00 00 00 01 6F F0  ......í.......oð
   000C00E0  6C 76 32 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv2ldr..........
   000C00F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0100  00 00 00 00 00 07 5D 00 00 00 00 00 00 01 2F 74  ......]......./t
   000C0110  69 73 6F 6C 64 72 00 00 00 00 00 00 00 00 00 00  isoldr..........
   000C0120  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0130  00 00 00 00 00 08 8C 80 00 00 00 00 00 01 E5 D4  ......Œ€......åÔ
   000C0140  61 70 70 6C 64 72 00 00 00 00 00 00 00 00 00 00  appldr..........
   000C0150  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0160  00 00 00 00 00 0A 72 54 00 00 00 00 00 00 FB 4C  ......rT......ûL
   000C0170  73 70 75 5F 70 6B 67 5F 72 76 6B 5F 76 65 72 69  spu_pkg_rvk_veri
   000C0180  66 69 65 72 2E 73 65 6C 66 00 00 00 00 00 00 00  fier.self.......
   000C0190  00 00 00 00 00 0B 6D A0 00 00 00 00 00 00 5A 94  ......m ......Z”
   000C01A0  73 70 75 5F 74 6F 6B 65 6E 5F 70 72 6F 63 65 73  spu_token_proces
   000C01B0  73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00 00  sor.self........
   000C01C0  00 00 00 00 00 0B C8 34 00 00 00 00 00 00 63 D0  ......È4......cÐ
   000C01D0  73 70 75 5F 75 74 6F 6B 65 6E 5F 70 72 6F 63 65  spu_utoken_proce
   000C01E0  73 73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00  ssor.self.......
   000C01F0  00 00 00 00 00 0C 2C 04 00 00 00 00 00 01 53 2C  ......,.......S,
   000C0200  73 63 5F 69 73 6F 2E 73 65 6C 66 00 00 00 00 00  sc_iso.self.....
   000C0210  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0220  00 00 00 00 00 0D 7F 30 00 00 00 00 00 00 42 98  .......0......B˜
   000C0230  61 69 6D 5F 73 70 75 5F 6D 6F 64 75 6C 65 2E 73  aim_spu_module.s
   000C0240  65 6C 66 00 00 00 00 00 00 00 00 00 00 00 00 00  elf.............
   000C0250  00 00 00 00 00 0D C1 C8 00 00 00 00 00 00 D7 F0  ......ÁÈ......×ð
   000C0260  73 70 70 5F 76 65 72 69 66 69 65 72 2E 73 65 6C  spp_verifier.sel
   000C0270  66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  f...............
   000C0280  00 00 00 00 00 0E 99 B8 00 00 00 00 00 00 80 8C  ......™¸......€Œ
   000C0290  6D 63 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  mc_iso_spu_modul
   000C02A0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   000C02B0  00 00 00 00 00 0F 1A 44 00 00 00 00 00 00 88 B8  .......D......ˆ¸
   000C02C0  6D 65 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  me_iso_spu_modul
   000C02D0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   000C02E0  00 00 00 00 00 0F A2 FC 00 00 00 00 00 00 C0 78  ......¢ü......Àx
   000C02F0  73 76 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sv_iso_spu_modul
   000C0300  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   000C0310  00 00 00 00 00 10 63 74 00 00 00 00 00 00 5D B0  ......ct......]°
   000C0320  73 62 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sb_iso_spu_modul
   000C0330  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   000C0340  00 00 00 00 00 10 C1 24 00 00 00 00 00 00 22 A0  ......Á$......" 
   000C0350  64 65 66 61 75 6C 74 2E 73 70 70 00 00 00 00 00  default.spp.....
   000C0360  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0370  00 00 00 00 00 10 E4 00 00 00 00 00 00 12 80 50  ......ä.......€P
   000C0380  6C 76 31 2E 73 65 6C 66 00 00 00 00 00 00 00 00  lv1.self........
   000C0390  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C03A0  00 00 00 00 00 23 64 80 00 00 00 00 00 03 E6 78  .....#d€......æx
   000C03B0  6C 76 30 00 00 00 00 00 00 00 00 00 00 00 00 00  lv0.............
   000C03C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C03D0  00 00 00 00 00 27 4A F8 00 00 00 00 00 17 27 58  .....'Jø......'X
   000C03E0  6C 76 32 5F 6B 65 72 6E 65 6C 2E 73 65 6C 66 00  lv2_kernel.self.
   000C03F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0400  00 00 00 00 00 3E 72 50 00 00 00 00 00 07 0F 94  .....>rP.......”
   000C0410  65 75 72 75 73 5F 66 77 2E 62 69 6E 00 00 00 00  eurus_fw.bin....
   000C0420  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0430  00 00 00 00 00 45 81 E4 00 00 00 00 00 08 04 18  .....E.ä........
   000C0440  65 6D 65 72 5F 69 6E 69 74 2E 73 65 6C 66 00 00  emer_init.self..
   000C0450  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0460  00 00 00 00 00 4D 85 FC 00 00 00 00 00 06 0D 78  .....M…ü.......x
   000C0470  68 64 64 5F 63 6F 70 79 2E 73 65 6C 66 00 00 00  hdd_copy.self...
   000C0480  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0490  00 00 00 00 00 53 93 74 00 00 00 00 00 00 12 A8  .....S“t.......¨
   000C04A0  6D 61 6E 75 5F 69 6E 66 6F 5F 73 70 75 5F 6D 6F  manu_info_spu_mo
   000C04B0  64 75 6C 65 2E 73 65 6C 66 00 00 00 00 00 00 00  dule.self.......
</pre>

=== ROS1 ===
<pre>   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   007C0010  00 00 00 00 00 00 00 00 00 00 00 00 00 6F FF E0  .............oÿà
   007C0020  00 00 00 01 00 00 00 17 00 00 00 00 00 6F FF E0  .............oÿà
   007C0030  00 00 00 00 00 00 04 60 00 00 00 00 00 04 00 00  .......`........
   007C0040  63 72 65 73 65 72 76 65 64 5F 30 00 00 00 00 00  creserved_0.....
   007C0050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0060  00 00 00 00 00 04 04 60 00 00 00 00 00 00 00 08  .......`........
   007C0070  73 64 6B 5F 76 65 72 73 69 6F 6E 00 00 00 00 00  sdk_version.....
   007C0080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0090  00 00 00 00 00 04 04 68 00 00 00 00 00 00 FB 4C  .......h......ûL
   007C00A0  73 70 75 5F 70 6B 67 5F 72 76 6B 5F 76 65 72 69  spu_pkg_rvk_veri
   007C00B0  66 69 65 72 2E 73 65 6C 66 00 00 00 00 00 00 00  fier.self.......
   007C00C0  00 00 00 00 00 04 FF B4 00 00 00 00 00 00 C9 30  ......ÿ´......É0
   007C00D0  73 70 75 5F 74 6F 6B 65 6E 5F 70 72 6F 63 65 73  spu_token_proces
   007C00E0  73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00 00  sor.self........
   007C00F0  00 00 00 00 00 05 C8 E4 00 00 00 00 00 00 63 D0  ......Èä......cÐ
   007C0100  73 70 75 5F 75 74 6F 6B 65 6E 5F 70 72 6F 63 65  spu_utoken_proce
   007C0110  73 73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00  ssor.self.......
   007C0120  00 00 00 00 00 06 2C B4 00 00 00 00 00 01 D2 D8  ......,´......ÒØ
   007C0130  73 63 5F 69 73 6F 2E 73 65 6C 66 00 00 00 00 00  sc_iso.self.....
   007C0140  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0150  00 00 00 00 00 07 FF 8C 00 00 00 00 00 00 42 98  ......ÿŒ......B˜
   007C0160  61 69 6D 5F 73 70 75 5F 6D 6F 64 75 6C 65 2E 73  aim_spu_module.s
   007C0170  65 6C 66 00 00 00 00 00 00 00 00 00 00 00 00 00  elf.............
   007C0180  00 00 00 00 00 08 42 24 00 00 00 00 00 00 D7 F0  ......B$......×ð
   007C0190  73 70 70 5F 76 65 72 69 66 69 65 72 2E 73 65 6C  spp_verifier.sel
   007C01A0  66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  f...............
   007C01B0  00 00 00 00 00 09 1A 14 00 00 00 00 00 00 80 8C  ..............€Œ
   007C01C0  6D 63 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  mc_iso_spu_modul
   007C01D0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C01E0  00 00 00 00 00 09 9A A0 00 00 00 00 00 00 88 B8  ......š ......ˆ¸
   007C01F0  6D 65 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  me_iso_spu_modul
   007C0200  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C0210  00 00 00 00 00 0A 23 58 00 00 00 00 00 00 C0 78  ......#X......Àx
   007C0220  73 76 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sv_iso_spu_modul
   007C0230  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C0240  00 00 00 00 00 0A E3 D0 00 00 00 00 00 00 5D B0  ......ãÐ......]°
   007C0250  73 62 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sb_iso_spu_modul
   007C0260  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C0270  00 00 00 00 00 0B 41 80 00 00 00 00 00 00 22 A0  ......A€......" 
   007C0280  64 65 66 61 75 6C 74 2E 73 70 70 00 00 00 00 00  default.spp.....
   007C0290  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C02A0  00 00 00 00 00 0B 64 80 00 00 00 00 00 12 5E F0  ......d€......^ð
   007C02B0  6C 76 31 2E 73 65 6C 66 00 00 00 00 00 00 00 00  lv1.self........
   007C02C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C02D0  00 00 00 00 00 1D C3 80 00 00 00 00 00 0B 54 E8  ......Ã€......Tè
   007C02E0  6C 76 30 00 00 00 00 00 00 00 00 00 00 00 00 00  lv0.............
   007C02F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0300  00 00 00 00 00 29 18 80 00 00 00 00 00 00 05 00  .....).€........
   007C0310  6C 76 30 2E 32 00 00 00 00 00 00 00 00 00 00 00  lv0.2...........
   007C0320  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0330  00 00 00 00 00 29 1D 80 00 00 00 00 00 17 89 58  .....).€......‰X
   007C0340  6C 76 32 5F 6B 65 72 6E 65 6C 2E 73 65 6C 66 00  lv2_kernel.self.
   007C0350  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0360  00 00 00 00 00 40 A6 D8 00 00 00 00 00 07 0F 94  .....@¦Ø.......”
   007C0370  65 75 72 75 73 5F 66 77 2E 62 69 6E 00 00 00 00  eurus_fw.bin....
   007C0380  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0390  00 00 00 00 00 47 B6 6C 00 00 00 00 00 07 E2 68  .....G¶l......âh
   007C03A0  65 6D 65 72 5F 69 6E 69 74 2E 73 65 6C 66 00 00  emer_init.self..
   007C03B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C03C0  00 00 00 00 00 4F 98 D4 00 00 00 00 00 06 18 18  .....O˜Ô........
   007C03D0  68 64 64 5F 63 6F 70 79 2E 73 65 6C 66 00 00 00  hdd_copy.self...
   007C03E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C03F0  00 00 00 00 00 55 B0 EC 00 00 00 00 00 00 12 A8  .....U°ì.......¨
   007C0400  6D 61 6E 75 5F 69 6E 66 6F 5F 73 70 75 5F 6D 6F  manu_info_spu_mo
   007C0410  64 75 6C 65 2E 73 65 6C 66 00 00 00 00 00 00 00  dule.self.......
   007C0420  00 00 00 00 00 55 C3 94 00 00 00 00 00 00 02 E0  .....UÃ”.......à
   007C0430  70 72 6F 67 2E 73 72 76 6B 00 00 00 00 00 00 00  prog.srvk.......
   007C0440  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0450  00 00 00 00 00 55 C6 74 00 00 00 00 00 00 02 40  .....UÆt.......@
   007C0460  70 6B 67 2E 73 72 76 6B 00 00 00 00 00 00 00 00  pkg.srvk........
   007C0470  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
</pre>

=== Versioning in ROS0 ===
<pre>   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   001004C0  33 35 30 2E 30 30 30 0A 00 00 00 00 00 00 00 00  350.000.........
   001004D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   001004E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   001004F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   00100500  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   00100510  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   00100520  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   00100530  53 43 45 00 00 00 00 02 00 00 00 01 00 00 01 F0  SCE............ð
</pre>

=== Versioning of ROS1 ===
<pre>   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   00800480  33 36 30 2E 30 30 30 0A 53 43 45 00 00 00 00 02  360.000.SCE.....
   00800490  00 01 00 01 00 00 01 F0 00 00 00 00 00 00 06 00  .......ð........
   008004A0  00 00 00 00 00 00 F5 4C 00 00 00 00 00 00 00 03  ......õL........
</pre>

=== RVK ===
<pre>   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   00093800  00 00 00 00 00 00 10 10 00 00 00 00 00 00 10 10  ................
   00093810  00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00  ...... .........
   00093820  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 40  ...............@
   00093830  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
   00093840  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 40  ...............@
   00093850  F6 93 38 8E C8 46 D5 FF 34 53 9D 12 91 7E C6 96  ö“8ŽÈFÕÿ4S..‘~Æ–
   00093860  BA 4F B8 36 82 1A 4F 40 19 88 B2 C8 56 B3 DA 4B  ºO¸6‚.O@.ˆ²ÈV³ÚK
   00093870  62 EB 84 D3 8A 95 F9 DD 6C D7 4C AB 47 8D D1 1A  bë„ÓŠ•ùÝl×L«G.Ñ.
   00093880  A6 64 B3 55 21 71 53 8C DD 8C 61 1F B0 7E 5E D2  ¦d³U!qSŒÝŒa.°~^Ò
   00093890  DB 1A 07 DA 37 4E 07 92 E7 B2 35 F1 E0 FA F8 13  Û..Ú7N.’ç²5ñàúø.
   000938A0  EC D9 94 1C 72 A0 45 38 79 85 6A 4E 02 CC 55 41  ìÙ”.r E8y…jN.ÌUA
   000938B0  21 3D F1 48 32 98 6E CB 86 0A 38 6E 33 C6 2E 8D  !=ñH2˜nË†.8n3Æ..
   000938C0  1E 51 DC 7E C5 34 E6 5B 27 D4 5B 79 B4 34 0D 59  .QÜ~Å4æ['Ô[y´4.Y
   000938D0  49 F9 F0 6E F6 94 25 3D 6A E0 E9 40 69 74 68 B4  Iùðnö”%=jàé@ith´
   000938E0  C5 C6 A3 95 62 E0 69 6E CD 6C CD 48 32 DD 11 8C  ÅÆ£•bàinÍlÍH2Ý.Œ
   000938F0  1A D7 9B 37 8A 6F 33 C7 A1 27 D1 1C A4 24 E7 96  .×›7Šo3Ç¡'Ñ.¤$ç–
   00093900  F0 75 BC 3A BE 15 26 CD 83 EA C8 11 F0 50 4D F8  ðu¼:¾.&ÍƒêÈ.ðPMø
   00093910  A0 15 2F 68 6E AE 5F 28 D8 F5 EA 39 A3 00 5E 06   ./hn®_(Øõê9£.^.
   00093920  D6 28 21 B7 36 49 29 27 73 76 D2 37 93 AB AB B2  Ö(!·6I)'svÒ7“««²
   00093930  1A B3 AD A2 75 64 D3 73 88 4F D3 8E 23 B3 16 4A  .³¢udÓsˆOÓŽ#³.J
   00093940  BD 4A E2 B3 D0 AE B0 12 AC 91 33 EB AD 75 3E 47  ½Jâ³Ð®°.¬‘3ëu>G
   00093950  8F E4 E2 D7 CE 35 90 BB 7A E0 AA 95 8D 88 93 22  .äâ×Î5.»zàª•.ˆ“"
   00093960  7A EB 8D C0 92 E9 74 30 7A 20 61 A6 36 5D 79 BD  zë.À’ét0z a¦6]y½
   00093970  11 9E B5 FC 64 F4 DF B6 E6 5E B7 7D 64 76 A7 B9  .žµüdôß¶æ^·}dv§¹
   00093980  E8 12 6A 60 3B 6F 4F 4D F0 4A 8C 33 28 10 AB 60  è.j`;oOMðJŒ3(.«`
   00093990  B5 D5 0C EB 2E 89 02 91 B4 77 EE 4B 0A 95 B9 F1  µÕ.ë.‰.‘´wîK.•¹ñ
   000939A0  66 CF 5E 0A D4 A8 FA 85 DB 14 9E 54 36 86 B9 A0  fÏ^.Ô¨ú…Û.žT6†¹ 
   000939B0  F2 82 42 6A 76 8B D1 AD 72 2A 86 8E 10 92 FC 7A  ò‚Bjv‹Ñr*†Ž.’üz
   000939C0  2B A2 A9 55 31 BD F3 F4 95 64 A9 F6 D0 F4 A7 9B  +¢©U1½óô•d©öÐô§›
   000939D0  35 9E FF C6 C1 98 10 A2 41 47 F9 E1 B0 68 ED DD  5žÿÆÁ˜.¢AGùá°híÝ
   000939E0  8E AB E6 E8 A8 0F 1E 2F C3 50 3A 3B FA F4 2E 90  Ž«æè¨../ÃP:;úô..
   000939F0  5F 1C 3E 52 FE 76 01 99 0A 99 17 B6 BB 11 39 04  _.>Rþv.™.™.¶».9.
   00093A00  CE 79 FD 50 3A 59 61 24 16 8D 8A 08 DD F7 88 A6  ÎyýP:Ya$..Š.Ý÷ˆ¦
   00093A10  32 6F 77 E0 12 22 70 73 2C 1A 44 DE B7 00 D6 50  2owà."ps,.DÞ·.ÖP
   00093A20  AD 22 CE 7F AA 87 65 AA A3 0B D8 7A 84 FE CA 16  "Î.ª‡eª£.Øz„þÊ.
   00093A30  00 00 00 03 00 00 00 02 00 01 00 60 00 00 00 00  ...........`....
   00093A40  00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
   00093A50  C4 1E 40 5D 94 83 6F 00 E8 86 36 1C 1E C0 A6 9F  Ä.@]”ƒo.è†6..À¦Ÿ
   00093A60  D0 34 53 63 9E 70 EB 64 43 9F 24 34 28 85 7A 04  Ð4ScžpëdCŸ$4(…z.
</pre>

=== cell_ext_os_area ===

<pre>   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
      
   0E780000  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ   note: no cell_ext_os_area, 0CC00000-0FFFFFFF region filled with big blocks of FF
   0E780010  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ    because firmware version 3.60 has no otheros.
    [...]    FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ   large FF filled block region
   0FFFFFE0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   0FFFFFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ</pre>

= EID correctness =

   [8/31/2011 1:41:13 AM] xxxxxxxxxxxxxx: the information on the PS3 dev wiki was intentionally faulty
   [8/31/2011 1:41:15 AM] qqqqq: Use the creativity or fail to find it.
 [...]
   [8/31/2011 1:41:34 AM] xxxxxxxxxxxxxx: so people can't use the 'knowledge'
 [...]
   [8/31/2011 1:41:43 AM] qqqqq: xxxxxx, uuuu has done a very good job at fixing what IS wrong. If you saw something wrong, why didn't you ask uuuu about it to fix it?
   [8/31/2011 1:41:55 AM] xxxxxxxxxxxxxx: that's not what guys like rrrrrrr have told me
   [8/31/2011 1:41:58 AM] xxxxxxxxxxxxxx: it's intentionally faulty
   [8/31/2011 1:42:03 AM] qqqqq: Instead you left it  how it was and bitched about it.
   [8/31/2011 1:42:07 AM] xxxxxxxxxxxxxx: to prevent any meaningful extraction of keys
   [8/31/2011 1:42:11 AM] qqqqq: If it was fault again talk to uuuu
   [8/31/2011 1:42:24 AM] xxxxxxxxxxxxxx: no - uuuu could not have even known about it
   [8/31/2011 1:42:28 AM] xxxxxxxxxxxxxx: it was something only a kkkk could know
   [8/31/2011 1:42:45 AM] qqqqq: You'd be surprised what uuuu knows. he really is a walking encyclopedia of the ps3.
   [8/31/2011 1:42:48 AM] xxxxxxxxxxxxxx: that wiki is compromised with purposeful misinformation
   [8/31/2011 1:42:59 AM] xxxxxxxxxxxxxx: and that's what rrrrrrr actually said and thinks
   [8/31/2011 1:43:17 AM] xxxxxxxxxxxxxx: I'm talking about ps3 dev wiki BTW here
   [8/31/2011 1:43:25 AM] qqqqq: if it's providing false info, then why not make a site to provide the right info? *gasps*
   [8/31/2011 1:43:34 AM] xxxxxxxxxxxxxx: well he did make the suggestion
   [8/31/2011 1:43:38 AM] xxxxxxxxxxxxxx: but it didn't go over well with these people
   [8/31/2011 1:43:45 AM] yyyyyyyy: kkkk wasn't the only one with cex-dex shit
   [8/31/2011 1:43:50 AM] yyyyyyyy: hell he's not even the one who wrote it
   [8/31/2011 1:44:01 AM] yyyyyyyy: so you can stfu about that
   [8/31/2011 1:44:09 AM] xxxxxxxxxxxxxx: hell do I know who the fuck wrote CEX-DEX
   [8/31/2011 1:44:27 AM] xxxxxxxxxxxxxx: all I know is that there are a bunch of connivant shits that want a wiki intentionally 'disinfoed' like that
   [8/31/2011 1:44:35 AM] xxxxxxxxxxxxxx: people in the know
   [8/31/2011 1:44:49 AM] yyyyyyyy: and one conniving shit here trying to save his hide
   [8/31/2011 1:44:57 AM] qqqqq: xxxxxx, again as i said. If there was false info (Which uuuu would never do) Why not fix it
   [8/31/2011 1:45:21 AM] xxxxxxxxxxxxxx: go ask rrrrrrr - I dunno
   [8/31/2011 1:45:26 AM] qqqqq: DO you think he purposesly makes changes so that it's wrong? That'd create an even bigger headache if a noob attempted it and bugged us in the chat
   [8/31/2011 1:45:32 AM] xxxxxxxxxxxxxx: the EID/CEX-DEX info was incomplete
   [8/31/2011 1:45:33 AM] xxxxxxxxxxxxxx: faulty


----

= Howto find which address line is not connected or bad =

== Find the pattern ==
take 16 bytes of an offset that should be unique, e.g. the 0x10 offset which normaly has the DEADBEEF magic header :
  NOR: 0x0000010 00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF  //  NAND: 0x040010 00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF
And find all instances in hexeditor <br />
When it says found in 0x10 and 0x10010 you substract them (0x10010 - 0x10 = 0x10000) <br />
So that means there is an error with setting 0x10000 (only one bit set!) low <br />
because the programmer applies 0x10010 but the actual data on the address lines (received by the nor flash) is 0x10 <br />

== Checking again with other unique 16 byte sequence ==
  617365637572655F6C6F616465720000 (asecure_loader in hex)
Same check, found at 0x420 and 0x10420 (0x10420-0x420 = 0x10000)

== OK, you've found the pattern, now how do we deduct from that the faulty line? ==
address is 2 bytes. 0x10 in dump with hexeditor is in reality 0x8 on the address bus because we read 2 bytes at once <br />
so the address is no longer 0x10000 but 0x8000 <br />
0x8000 (hexadecimal = base 16) = 1000 0000 0000 0000 (binary = base 2) <br />
which means the 16th bit = 1, we start counting at A0, so the 16th is A15 <br />

conclusion : A15 is bad

===Quick lookup table===
{| class="wikitable"
|-
! repetition !! addressline 'stuck'
|-
| 0x2 || A0
|-
| 0x4 || A1
|-
| 0x8 || A2
|-
| 0x10 || A3
|-
| 0x20 || A4
|-
| 0x40 || A5
|-
| 0x80 || A6
|-
| 0x100 || A7
|-
| 0x200 || A8
|-
| 0x400 || A9
|-
| 0x800 || A10
|-
| 0x1000 || A11
|-
| 0x2000 || A12
|-
| 0x4000 || A13
|-
| 0x8000 || A14
|-
| 0x10000 || A15
|-
| 0x20000 || A16
|-
| 0x40000 || A17
|-
| 0x80000 || A18
|-
| 0x100000 || A19
|-
| 0x200000 || A20
|-
| 0x400000 || A21
|-
| 0x800000 || A22
|-
| 0x1000000 || A23
|-
| 0x2000000 || A24
|-
| 0x4000000 || A25
|-
| 0x8000000 || A26
|-
| 0x10000000 || A27
|-
| 0x20000000 || A28
|-
| 0x40000000 || A29
|-
| 0x80000000 || A30
|-
|}

<!--//
{| class="wikitable"
|-
! Sector !! colspan="6" | A22-A16  !! Sector<br />Size<br />(Kbytes<br />/Kwords) !! 8-Bit<br />Address Range !! 16-bit<br />Address Range
|-
| SA0 || 0 || 0 || 0 || 0 || 0 || 0 || 128/64 || 0000000-001FFFF || 0000000-000FFFF
|-
| SA1 || 0 || 0 || 0 || 0 || 0 || 1 || 128/64 || 0020000-003FFFF || 0010000-001FFFF
|-
| SA2 || 0 || 0 || 0 || 0 || 1 || 0 || 128/64 || 0040000-005FFFF || 0020000-002FFFF
|-
| SA3 || 0 || 0 || 0 || 0 || 1 || 1 || 128/64 || 0060000-007FFFF || 0030000-003FFFF
|-
| SA4 || 0 || 0 || 0 || 1 || 0 || 0 || 128/64 || 0080000-009FFFF || 0040000-004FFFF
|-
| SA5 || 0 || 0 || 0 || 1 || 0 || 1 || 128/64 || 00A0000-00BFFFF || 0050000-005FFFF
|-
| SA6 || 0 || 0 || 0 || 1 || 1 || 0 || 128/64 || 00C0000-00DFFFF || 0060000-006FFFF
|-
| SA7 || 0 || 0 || 0 || 1 || 1 || 1 || 128/64 || 00E0000-00FFFFF || 0070000-007FFFF
|-
| SA8 || 0 || 0 || 1 || 0 || 0 || 0 || 128/64 || 0100000-011FFFF || 0080000-008FFFF
|-
| SA9 || 0 || 0 || 1 || 0 || 0 || 1 || 128/64 || 0120000-013FFFF || 0090000-009FFFF
|-
| SA10 || 0 || 0 || 1 || 0 || 1 || 0 || 128/64 || 0140000-015FFFF || 00A0000-00AFFFF
|-
| SA11 || 0 || 0 || 1 || 0 || 1 || 1 || 128/64 || 0160000-017FFFF || 00B0000-00BFFFF
|-
| SA12 || 0 || 0 || 1 || 1 || 0 || 0 || 128/64 || 0180000-019FFFF || 00C0000-00CFFFF
|-
| SA13 || 0 || 0 || 1 || 1 || 0 || 1 || 128/64 || 01A0000-01BFFFF || 00D0000-00DFFFF
|-
| SA14 || 0 || 0 || 1 || 1 || 1 || 0 || 128/64 || 01C0000-01DFFFF || 00E0000-00EFFFF
|-
| SA15 || 0 || 0 || 1 || 1 || 1 || 1 || 128/64 || 01E0000-01FFFFF || 00F0000-00FFFFF
|-
| SA16 || 0 || 1 || 0 || 0 || 0 || 0 || 128/64 || 0200000-021FFFF || 0100000-010FFFF
|-
| SA17 || 0 || 1 || 0 || 0 || 0 || 1 || 128/64 || 0220000-023FFFF || 0110000-011FFFF
|-
| SA18 || 0 || 1 || 0 || 0 || 1 || 0 || 128/64 || 0240000-025FFFF || 0120000-012FFFF
|-
| SA19 || 0 || 1 || 0 || 0 || 1 || 1 || 128/64 || 0260000-027FFFF || 0130000-013FFFF
|-
| SA20 || 0 || 1 || 0 || 1 || 0 || 0 || 128/64 || 0280000-029FFFF || 0140000-014FFFF
|-
| SA21 || 0 || 1 || 0 || 1 || 0 || 1 || 128/64 || 02A0000-02BFFFF || 0150000-015FFFF
|-
| SA22 || 0 || 1 || 0 || 1 || 1 || 0 || 128/64 || 02C0000-02DFFFF || 0160000-016FFFF
|-
| SA23 || 0 || 1 || 0 || 1 || 1 || 1 || 128/64 || 02E0000-02FFFFF || 0170000-017FFFF
|-
| SA24 || 0 || 1 || 1 || 0 || 0 || 0 || 128/64 || 0300000-031FFFF || 0180000-018FFFF
|-
| SA25 || 0 || 1 || 1 || 0 || 0 || 1 || 128/64 || 0320000-033FFFF || 0190000-019FFFF
|-
| SA26 || 0 || 1 || 1 || 0 || 1 || 0 || 128/64 || 0340000-035FFFF || 01A0000-01AFFFF
|-
| SA27 || 0 || 1 || 1 || 0 || 1 || 1 || 128/64 || 0360000-037FFFF || 01B0000-01BFFFF
|-
| SA28 || 0 || 1 || 1 || 1 || 0 || 0 || 128/64 || 0380000-039FFFF || 01C0000-01CFFFF
|-
| SA29 || 0 || 1 || 1 || 1 || 0 || 1 || 128/64 || 03A0000-03BFFFF || 01D0000-01DFFFF
|-
| SA30 || 0 || 1 || 1 || 1 || 1 || 0 || 128/64 || 03C0000-03DFFFF || 01E0000-01EFFFF
|-
| SA31 || 0 || 1 || 1 || 1 || 1 || 1 || 128/64 || 03E0000-03FFFFF || 01F0000-01FFFFF
|-
| SA32 || 1 || 0 || 0 || 0 || 0 || 0 || 128/64 || 0400000-041FFFF || 0200000-020FFFF
|-
| SA33 || 1 || 0 || 0 || 0 || 0 || 1 || 128/64 || 0420000-043FFFF || 0210000-021FFFF
|-
| SA34 || 1 || 0 || 0 || 0 || 1 || 0 || 128/64 || 0440000-045FFFF || 0220000-022FFFF
|-
| SA35 || 1 || 0 || 0 || 0 || 1 || 1 || 128/64 || 0460000-047FFFF || 0230000-023FFFF
|-
| SA36 || 1 || 0 || 0 || 1 || 0 || 0 || 128/64 || 0480000-049FFFF || 0240000-024FFFF
|-
| SA37 || 1 || 0 || 0 || 1 || 0 || 1 || 128/64 || 04A0000-04BFFFF || 0250000-025FFFF
|-
| SA38 || 1 || 0 || 0 || 1 || 1 || 0 || 128/64 || 04C0000-04DFFFF || 0260000-026FFFF
|-
| SA39 || 1 || 0 || 0 || 1 || 1 || 1 || 128/64 || 04E0000-04FFFFF || 0270000-027FFFF
|-
| SA40 || 1 || 0 || 1 || 0 || 0 || 0 || 128/64 || 0500000-051FFFF || 0280000-028FFFF
|-
| SA41 || 1 || 0 || 1 || 0 || 0 || 1 || 128/64 || 0520000-053FFFF || 0290000-029FFFF
|-
| SA42 || 1 || 0 || 1 || 0 || 1 || 0 || 128/64 || 0540000-055FFFF || 02A0000-02AFFFF
|-
| SA43 || 1 || 0 || 1 || 0 || 1 || 1 || 128/64 || 0560000-057FFFF || 02B0000-02BFFFF
|-
| SA44 || 1 || 0 || 1 || 1 || 0 || 0 || 128/64 || 0580000-059FFFF || 02C0000-02CFFFF
|-
| SA45 || 1 || 0 || 1 || 1 || 0 || 1 || 128/64 || 05A0000-05BFFFF || 02D0000-02DFFFF
|-
| SA46 || 1 || 0 || 1 || 1 || 1 || 0 || 128/64 || 05C0000-05DFFFF || 02E0000-02EFFFF
|-
| SA47 || 1 || 0 || 1 || 1 || 1 || 1 || 128/64 || 05E0000-05FFFFF || 02F0000-02FFFFF
|-
| SA48 || 1 || 1 || 0 || 0 || 0 || 0 || 128/64 || 0600000-061FFFF || 0300000-030FFFF
|-
| SA49 || 1 || 1 || 0 || 0 || 0 || 1 || 128/64 || 0620000-063FFFF || 0310000-031FFFF
|-
| SA50 || 1 || 1 || 0 || 0 || 1 || 0 || 128/64 || 0640000-065FFFF || 0320000-032FFFF
|-
| SA51 || 1 || 1 || 0 || 0 || 1 || 1 || 128/64 || 0660000-067FFFF || 0330000-033FFFF
|-
| SA52 || 1 || 1 || 0 || 1 || 0 || 0 || 128/64 || 0680000-069FFFF || 0340000-034FFFF
|-
| SA53 || 1 || 1 || 0 || 1 || 0 || 1 || 128/64 || 06A0000-06BFFFF || 0350000-035FFFF
|-
| SA54 || 1 || 1 || 0 || 1 || 1 || 0 || 128/64 || 06C0000-06DFFFF || 0360000-036FFFF
|-
| SA55 || 1 || 1 || 0 || 1 || 1 || 1 || 128/64 || 06E0000-06FFFFF || 0370000-037FFFF
|-
| SA56 || 1 || 1 || 1 || 0 || 0 || 0 || 128/64 || 0700000-071FFFF || 0380000-038FFFF
|-
| SA57 || 1 || 1 || 1 || 0 || 0 || 1 || 128/64 || 0720000-073FFFF || 0390000-039FFFF
|-
| SA58 || 1 || 1 || 1 || 0 || 1 || 0 || 128/64 || 0740000-075FFFF || 03A0000-03AFFFF
|-
| SA59 || 1 || 1 || 1 || 0 || 1 || 1 || 128/64 || 0760000-077FFFF || 03B0000-03BFFFF
|-
| SA60 || 1 || 1 || 1 || 1 || 0 || 0 || 128/64 || 0780000-079FFFF || 03C0000-03CFFFF
|-
| SA61 || 1 || 1 || 1 || 1 || 0 || 1 || 128/64 || 07A0000-07BFFFF || 03D0000-03DFFFF
|-
| SA62 || 1 || 1 || 1 || 1 || 1 || 0 || 128/64 || 07C0000-07DFFFF || 03E0000-03EFFFF
|-
| SA63 || 1 || 1 || 1 || 1 || 1 || 1 || 128/64 || 07E0000-07FFFFF || 03F0000-03FFFFF
|-
| SA64 || 0 || 0 || 0 || 0 || 0 || 0 || 128/64 || 0800000-081FFFF || 0400000-040FFFF
|-
| SA65 || 0 || 0 || 0 || 0 || 0 || 1 || 128/64 || 0820000-083FFFF || 0410000-041FFFF
|-
| SA66 || 0 || 0 || 0 || 0 || 1 || 0 || 128/64 || 0840000-085FFFF || 0420000-042FFFF
|-
| SA67 || 0 || 0 || 0 || 0 || 1 || 1 || 128/64 || 0860000-087FFFF || 0430000-043FFFF
|-
| SA68 || 0 || 0 || 0 || 1 || 0 || 0 || 128/64 || 0880000-089FFFF || 0440000-044FFFF
|-
| SA69 || 0 || 0 || 0 || 1 || 0 || 1 || 128/64 || 08A0000-08BFFFF || 0450000-045FFFF
|-
| SA70 || 0 || 0 || 0 || 1 || 1 || 0 || 128/64 || 08C0000-08DFFFF || 0460000-046FFFF
|-
| SA71 || 0 || 0 || 0 || 1 || 1 || 1 || 128/64 || 08E0000-08FFFFF || 0470000-047FFFF
|-
| SA72 || 0 || 0 || 1 || 0 || 0 || 0 || 128/64 || 0900000-091FFFF || 0480000-048FFFF
|-
| SA73 || 0 || 0 || 1 || 0 || 0 || 1 || 128/64 || 0920000-093FFFF || 0490000-049FFFF
|-
| SA74 || 0 || 0 || 1 || 0 || 1 || 0 || 128/64 || 0940000-095FFFF || 04A0000-04AFFFF
|-
| SA75 || 0 || 0 || 1 || 0 || 1 || 1 || 128/64 || 0960000-097FFFF || 04B0000-04BFFFF
|-
| SA76 || 0 || 0 || 1 || 1 || 0 || 0 || 128/64 || 0980000-099FFFF || 04C0000-04CFFFF
|-
| SA77 || 0 || 0 || 1 || 1 || 0 || 1 || 128/64 || 09A0000-09BFFFF || 04D0000-04DFFFF
|-
| SA78 || 0 || 0 || 1 || 1 || 1 || 0 || 128/64 || 09C0000-09DFFFF || 04E0000-04EFFFF
|-
| SA79 || 0 || 0 || 1 || 1 || 1 || 1 || 128/64 || 09E0000-09FFFFF || 04F0000-04FFFFF
|-
| SA80 || 0 || 1 || 0 || 0 || 0 || 0 || 128/64 || 0A00000-0A1FFFF || 0500000-050FFFF
|-
| SA81 || 0 || 1 || 0 || 0 || 0 || 1 || 128/64 || 0A20000-0A3FFFF || 0510000-051FFFF
|-
| SA82 || 0 || 1 || 0 || 0 || 1 || 0 || 128/64 || 0A40000-0A5FFFF || 0520000-052FFFF
|-
| SA83 || 0 || 1 || 0 || 0 || 1 || 1 || 128/64 || 0A60000-0A7FFFF || 0530000-053FFFF
|-
| SA84 || 0 || 1 || 0 || 1 || 0 || 0 || 128/64 || 0A80000-0A9FFFF || 0540000-054FFFF
|-
| SA85 || 0 || 1 || 0 || 1 || 0 || 1 || 128/64 || 0AA0000-0ABFFFF || 0550000-055FFFF
|-
| SA86 || 0 || 1 || 0 || 1 || 1 || 0 || 128/64 || 0AC0000-0ADFFFF || 0560000-056FFFF
|-
| SA87 || 0 || 1 || 0 || 1 || 1 || 1 || 128/64 || 0AE0000-0AFFFFF || 0570000-057FFFF
|-
| SA88 || 0 || 1 || 1 || 0 || 0 || 0 || 128/64 || 0B00000-0B1FFFF || 0580000-058FFFF
|-
| SA89 || 0 || 1 || 1 || 0 || 0 || 1 || 128/64 || 0B20000-0B3FFFF || 0590000-059FFFF
|-
| SA90 || 0 || 1 || 1 || 0 || 1 || 0 || 128/64 || 0B40000-0B5FFFF || 05A0000-05AFFFF
|-
| SA91 || 0 || 1 || 1 || 0 || 1 || 1 || 128/64 || 0B60000-0B7FFFF || 05B0000-05BFFFF
|-
| SA92 || 0 || 1 || 1 || 1 || 0 || 0 || 128/64 || 0B80000-0B9FFFF || 05C0000-05CFFFF
|-
| SA93 || 0 || 1 || 1 || 1 || 0 || 1 || 128/64 || 0BA0000-0BBFFFF || 05D0000-05DFFFF
|-
| SA94 || 0 || 1 || 1 || 1 || 1 || 0 || 128/64 || 0BC0000-0BDFFFF || 05E0000-05EFFFF
|-
| SA95 || 0 || 1 || 1 || 1 || 1 || 1 || 128/64 || 0BE0000-0BFFFFF || 05F0000-05FFFFF
|-
| SA96 || 1 || 0 || 0 || 0 || 0 || 0 || 128/64 || 0C00000-0C1FFFF || 0600000-060FFFF
|-
| SA97 || 1 || 0 || 0 || 0 || 0 || 1 || 128/64 || 0C20000-0C3FFFF || 0610000-061FFFF
|-
| SA98 || 1 || 0 || 0 || 0 || 1 || 0 || 128/64 || 0C40000-0C5FFFF || 0620000-062FFFF
|-
| SA99 || 1 || 0 || 0 || 0 || 1 || 1 || 128/64 || 0C60000-0C7FFFF || 0630000-063FFFF
|-
| SA100 || 1 || 0 || 0 || 1 || 0 || 0 || 128/64 || 0C80000-0C9FFFF || 0640000-064FFFF
|-
| SA101 || 1 || 0 || 0 || 1 || 0 || 1 || 128/64 || 0CA0000-0CBFFFF || 0650000-065FFFF
|-
| SA102 || 1 || 0 || 0 || 1 || 1 || 0 || 128/64 || 0CC0000-0CDFFFF || 0660000-066FFFF
|-
| SA103 || 1 || 0 || 0 || 1 || 1 || 1 || 128/64 || 0CE0000-0CFFFFF || 0670000-067FFFF
|-
| SA104 || 1 || 0 || 1 || 0 || 0 || 0 || 128/64 || 0D00000-0D1FFFF || 0680000-068FFFF
|-
| SA105 || 1 || 0 || 1 || 0 || 0 || 1 || 128/64 || 0D20000-0D3FFFF || 0690000-069FFFF
|-
| SA106 || 1 || 0 || 1 || 0 || 1 || 0 || 128/64 || 0D40000-0D5FFFF || 06A0000-06AFFFF
|-
| SA107 || 1 || 0 || 1 || 0 || 1 || 1 || 128/64 || 0D60000-0D7FFFF || 06B0000-06BFFFF
|-
| SA108 || 1 || 0 || 1 || 1 || 0 || 0 || 128/64 || 0D80000-0D9FFFF || 06C0000-06CFFFF
|-
| SA109 || 1 || 0 || 1 || 1 || 0 || 1 || 128/64 || 0DA0000-0DBFFFF || 06D0000-06DFFFF
|-
| SA110 || 1 || 0 || 1 || 1 || 1 || 0 || 128/64 || 0DC0000-0DDFFFF || 06E0000-06EFFFF
|-
| SA111 || 1 || 0 || 1 || 1 || 1 || 1 || 128/64 || 0DE0000-0DFFFFF || 06F0000-06FFFFF
|-
| SA112 || 1 || 1 || 0 || 0 || 0 || 0 || 128/64 || 0E00000-0E1FFFF || 0700000-070FFFF
|-
| SA113 || 1 || 1 || 0 || 0 || 0 || 1 || 128/64 || 0E20000-0E3FFFF || 0710000-071FFFF
|-
| SA114 || 1 || 1 || 0 || 0 || 1 || 0 || 128/64 || 0E40000-0E5FFFF || 0720000-072FFFF
|-
| SA115 || 1 || 1 || 0 || 0 || 1 || 1 || 128/64 || 0E60000-0E7FFFF || 0730000-073FFFF
|-
| SA116 || 1 || 1 || 0 || 1 || 0 || 0 || 128/64 || 0E80000-0E9FFFF || 0740000-074FFFF
|-
| SA117 || 1 || 1 || 0 || 1 || 0 || 1 || 128/64 || 0EA0000-0EBFFFF || 0750000-075FFFF
|-
| SA118 || 1 || 1 || 0 || 1 || 1 || 0 || 128/64 || 0EC0000-0EDFFFF || 0760000-076FFFF
|-
| SA119 || 1 || 1 || 0 || 1 || 1 || 1 || 128/64 || 0EE0000-0EFFFFF || 0770000-077FFFF
|-
| SA120 || 1 || 1 || 1 || 0 || 0 || 0 || 128/64 || 0F00000-0F1FFFF || 0780000-078FFFF
|-
| SA121 || 1 || 1 || 1 || 0 || 0 || 1 || 128/64 || 0F20000-0F3FFFF || 0790000-079FFFF
|-
| SA122 || 1 || 1 || 1 || 0 || 1 || 0 || 128/64 || 0F40000-0F5FFFF || 07A0000-07AFFFF
|-
| SA123 || 1 || 1 || 1 || 0 || 1 || 1 || 128/64 || 0F60000-0F7FFFF || 07B0000-07BFFFF
|-
| SA124 || 1 || 1 || 1 || 1 || 0 || 0 || 128/64 || 0F80000-0F9FFFF || 07C0000-07CFFFF
|-
| SA125 || 1 || 1 || 1 || 1 || 0 || 1 || 128/64 || 0FA0000-0FBFFFF || 07D0000-07DFFFF
|-
| SA126 || 1 || 1 || 1 || 1 || 1 || 0 || 128/64 || 0FC0000-0FDFFFF || 07E0000-07EFFFF
|-
| SA127 || 1 || 1 || 1 || 1 || 1 || 1 || 128/64 || 0FE0000-0FFFFFF || 07F0000-07FFFFF
|-
|}
//-->