Talk:Flash Structure

From PS3 Developer wiki
Revision as of 14:24, 26 November 2012 by Euss (talk | contribs) (Created page with "<!--// complete copy of old flash page for splitting //--> Category:Software [[File:Flash_TSOP.png|thumbnail|Typical Flash TSOP package found on PS3's can either be 2x128...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search


Typical Flash TSOP package found on PS3's can either be 2x128mb NAND or 1x16mb NOR

This is an attempt at documenting the files located and stored on flash. Please do note that this is from reverse engineering several flash dumps, not from reverse engineering the PS3 firmware itself. This involves alot of guesswork and may not be accurate and there may be information missing.

Overview

NOR Flash

The following is a list of files stored in NOR Flash

type Name Start Offset End Offset Size (h) Size (bytes) Notes
gen 0FACE0FF DEADBEEF 0x000010 0x000001F 0x10 (16 bytes) magic header : 0x0000010 00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF .....¬àÿ....Þ­¾ï
pc flashregion table 0x000400
pc 0 asecure_loader 0x000800 0x02EFFF 0x2E800 (262,144 bytes) aka metldr
pc 1 eEID 0x02F000 0x03EFFF 0x10000 (65,536 bytes)
pc 0 EID0 0x02F070 0x02F8CF 0x860 (2,144 bytes) (IDPS @ offset 0x0002F070 absolute / 0x00000070 inside eEID )
pc 1 EID1 0x02F8D0 0x02FB6F 0x2A0 (672 bytes)
pc 2 EID2 0x02FB70 0x03029F 0x730 (1,840 bytes)
pc 3 EID3 0x0302A0 0x03039F 0x100 (256 bytes)
pc 4 EID4 0x0303A0 0x0303CF 0x30 (48 bytes)
pc 5 EID5 0x0303D0 0x030DCF 0xA00 (2,560 bytes)
pc F unreferenced area 0x030DD0 0x03EFFF 0xE22F (57,903 bytes)
pc 2 cISD 0x03F000 0x03F7FF 0x800 (2,048 bytes)
pc 0 cISD0 0x03F040 0x03F060 0x20 (32 bytes)
pc 1 cISD1 0x03F060 0x03F260 0x200 (512 bytes) console 2nd part serial @ 0x3F090 size 0x8
pc 2 cISD2 0x03F260 0x03F270 0x10 (16 bytes)
pc F unreferenced area 0x03F270 0x03F7FF 0x58F (1,423 bytes)
pc 3 cCSD 0x03F800 0x03FFFF 0x800 (2,048 bytes)
pc 0 cCSD0 0x03F820 0x03F84F 0x30 (48 bytes)
pc F unreferenced area 0x03F850 0x03FFFF 0x7B0 (1,968 bytes)
pf 4 trvk_prg0 0x040000 0x05FFFF 0x20000 (131,072 bytes)
pf 5 trvk_prg1 0x060000 0x07FFFF 0x20000 (131,072 bytes)
pf 6 trvk_pkg0 0x080000 0x09FFFF 0x20000 (131,072 bytes)
pf 7 trvk_pkg1 0x0A0000 0x0BFFFF 0x20000 (131,072 bytes)
pf 8 ros0 0x0C0000 0x7BFFFF 0x700000 (7,340,032 bytes) Contains CoreOS files, filecontent depends on firmware version
pf 9 ros1 0x7C0000 0xEBFFFF 0x700000 (7,340,032 bytes) Contains CoreOS files, filecontent depends on firmware version
pc A cvtrm 0xEC0000 0xEFFFFF 0x40000 (262,144 bytes)
gen 0FACE0FF DEADFACE 0xF00010 0xF0001F 0x10 (16 bytes) magic header : 0xF00010 00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD FA CE .....¬àÿ....Þ­úÎ
gen CELL_EXTNOR_AREA 0xF20000 0xF3FFFF 0x20000 (131,072 bytes) (Harddrive information is @ 0xF20200 absolute / 0x200 inside CELL_EXTNOR_AREA)
pc bootldr 0xFC0000 0xFEEAEF 0x2EAF0 (191,216 bytes) End @ FEEAF0, FEEF70, FEF170, FEF570, FEF5F0, FEF600 in some dumps

NAND Flash

The following is a list of files stored in NAND Flash

type Name Start Offset End Offset Size (h) Size (bytes) Notes
pc bootldr 0x0000000 0x003FFFF 0x40000 (191,216 bytes) datasize depends on bootldr revision
gen 0FACE0FF DEADBEEF 0x0040010 0x004001F 0x10 (16 bytes) magic header : 0x040010 00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF .....¬àÿ....Þ­¾ï
pc flashregion table 0x0040200
pc 0 asecure_loader 0x0040800 0x00807FF 0x40000 (262,144 bytes) aka metldr, extracted data starts from 0x040840, datasize depends on metldr revision
pc 1 eEID 0x0080800 0x00907FF 0x10000 (65,536 bytes)
pc 0 EID0 0x0080870 0x00810CF 0x860 (2,144 bytes) (IDPS @ offset 0x00080870 absolute / 0x00000070 inside eEID )
pc 1 EID1 0x00810D0 0x008136F 0x2A0 (672 bytes)
pc 2 EID2 0x0081370 0x0081A9F 0x730 (1,840 bytes)
pc 3 EID3 0x0081AA0 0x0081B9F 0x100 (256 bytes)
pc 4 EID4 0x0081BA0 0x0081BCF 0x30 (48 bytes)
pc 5 EID5 0x0081BD0 0x00825CF 0xA00 (2,560 bytes)
pc F unreferenced area 0x00825D0 0x00907FF 0xE22F (57,903 bytes)
pc 2 cISD 0x0090800 0x0090FFF 0x800 (2,048 bytes)
pc 0 cISD0 0x0090840 0x009085F 0x20 (32 bytes)
pc 1 cISD1 0x0090860 0x0090A5F 0x200 (512 bytes) console 2nd part serial @ 0x90890 size 0x8
pc 2 cISD2 0x0090A60 0x0090A6F 0x10 (16 bytes)
pc F unreferenced area 0x0090A70 0x0090FFF 0x58F (1,423 bytes)
pc 3 cCSD 0x0091000 0x00917FF 0x800 (2,048 bytes)
pc 0 cCSD0 0x0091020 0x009104F 0x30 (48 bytes)
pc F unreferenced area 0x0091050 0x00917FF 0x7B0 (1,968 bytes)
pf 4 trvk_prg 0x0091800 0x00937FF 0x2000 (8,192 bytes) extracted size is 0x2000 for trvk_prg0 + trvk_prg1 combined as trvk_prg (8,192 bytes)
pf 5 trvk_pkg 0x0093800 0x00957FF 0x2000 (8,192 bytes) extracted size is 0x2000 for trvk_pkg0 + trvk_pkg1 combined as trvk_pkg (8,192 bytes)
gen 6 creserved_0 0x0095800 0x00BFFFF 0x2A800 (174,080 bytes)
pf 7 ros 0x00C0000 0x0EBFFFF 0xE00000 (1,4680,064 bytes)
pf 0 ros0 0x00C0020 0x07BFFFF 0x700000 (7,340,032 bytes) Contains CoreOS files, filecontent depends on firmware version
pf 1 ros1 0x07C0010 0x0EBFFFF 0x700000 (7,340,032 bytes) Contains CoreOS files, filecontent depends on firmware version
pc 8 cvtrm - - 0x40000 (262,144 bytes)
pc M SCEIVTRM ~varies ~varies 0x10 (16 bytes) magic header : 0x0D80000 53 43 45 49 56 54 52 4D 00 00 00 00 00 00 00 A8 SCEIVTRM.......¨
pc 0 VTRM0 ~varies ~varies ~varies ~varies magic header : 0x0D80020 00 00 00 00 56 54 52 4D 00 00 00 00 00 00 00 04 ....VTRM........
pc 1 VTRM1 ~varies ~varies ~varies ~varies magic header : 0x0D80400 00 00 00 00 56 54 52 4D 00 00 00 00 00 00 00 04 ....VTRM........
gen cell_ext_os_area 0xE780000 0xE78000F 0x10 (16 bytes) magic header : 0xE780000 63 65 6C 6C 5F 65 78 74 5F 6F 73 5F 61 72 65 61 cell_ext_os_area
gen OtherOS 0xE780800 ~varies ~varies ~varies OtherOS loader/init.rd
pc bootldr 0xF000000 0xF03FFFF 0x40000 (191,216 bytes) datasize depends on bootldr revision
pc F unreferenced area 0xF040000 0xFFFFFFF 0xFC0000 (16,515,072 bytes)

First Region

Header - 0FACE0FF DEADBEEF

Location:

  • NOR: 0x000000 - 0x00001FF
  • NAND: 0x0040000 - 0x00401FF

example

NOR: 0x000000 - 0x00001FF NAND: 0x0040000 - 0x00401FF
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00000000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000010  00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF  .....¬àÿ....Þ.¾ï
00000020  00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00  ..............x.
00000030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
....
000001F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00040000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00040010  00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF  .....¬àÿ....Þ­¾ï
00040020  00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 00  ..............v.
00040030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
....
000401F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

structure

Address Length Value Description
0x00 0x10 0x0 Blank/Unknown
0x10 0x10 0x0FACE0FF 0xDEADBEEF Magic number
0x20 0x10 0x7800 Length of region * 0x200
0x30 0x1D0 0x0 Blank/Unknown

Flash Format

Location: NOR only : 0x000200 - 0x00003FF

The next block of 512 bytes only has the first 16 bytes written. It determines flash format and version. If it is IFI then it means format 2 and version should be 1.2. If it is not IFI then it is a format 1_1.

example

NOR only : 0x000200 - 0x00003FF NAND: N.A.
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00000200  49 46 49 00 00 00 00 01 00 00 00 02 00 00 00 00  IFI.............
00000210  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
000003F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
N.A.

structure

Address Length Value Description
0x200 0x10 0x49464900 (String: "IFI") 0x1 0x2 0x0 Flash Format Type/Flash Format Version

File Table

Location:

  • NOR: 0x0000400 - 0x00007FF
  • NAND: 0x0040200 - 0x00407FF

The next 1024 bytes contain the file entry table

Header

Small 16 byte header to describe length and entry count

example

NOR: 0x0000400 - 0x000040F NAND: 0x0040200 - 0x004020F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   00000400  00 00 00 01 00 00 00 0B 00 00 00 00 00 EF FC 00  .............ïü.
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00040200  00 00 00 01 00 00 00 09 00 00 00 00 00 EB FE 00  .............ëþ.

structure

Address Length Value Description
0x0 0x4 0x01 Unknown
0x4 0x4 0x0B Entry Count
0x8 0x8 0xEFFC00 Length of Flash Region (relative to 0x400 (region start)

First is a header, this tells us how many files are stored here.

Entry Table

Then follows a 32 byte entry for each file

example

NOR: 0x0000410 - 0x00007FF NAND: 0x0040210 - 0x00407FF
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00000410  00 00 00 00 00 00 04 00 00 00 00 00 00 02 E8 00  ..............è.
00000420  61 73 65 63 75 72 65 5F 6C 6F 61 64 65 72 00 00  asecure_loader..
00000430  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00040210  00 00 00 00 00 00 06 00 00 00 00 00 00 04 00 00  ................
00040220  61 73 65 63 75 72 65 5F 6C 6F 61 64 65 72 00 00  asecure_loader..
00040230  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

structure

Address Length Value Description
0x0 0x8 0x400 File offset relative to 0x400 (Region start)
0x8 0x8 0x2E800 File length
0x10 0x20 char[32]:"asecure_loader" File name

asecure_loader region

Location:

  • NOR: 0x0000800 - 0x0002EFFF
  • NAND: 0x0040800 - 0x00807FF

Within asecure_loader is another file table similar to region 1 but is located within region 1 itself. This has only been observed to hold metldr in its encrypted form.

Header

example

NOR: 0x0000800 - 0x000080F NAND: 0x0040800 - 0x004080F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00000800  00 00 00 01 00 00 00 01 00 00 00 00 00 02 E8 00  ..............è.
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00040800  00 00 00 01 00 00 00 01 00 00 00 00 00 04 00 00  ................

structure

Address Length Value Description
0x00 0x04 0x01 Unknown
0x04 0x04 0x01 Entry Count
0x08 0x08 0x2E800 Length of Region

Entry Table

Then follows a 32 byte entry for asecure (metldr) file

example

NOR: 0x0000810 - 0x000083F NAND: 0x0040810 - 0x004083F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00000810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 E8 D0  .......@......èÐ
00000820  6D 65 74 6C 64 72 00 00 00 00 00 00 00 00 00 00  metldr..........
00000830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00040810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 EE 10  .......@......î.
00040820  6D 65 74 6C 64 72 00 00 00 00 00 00 00 00 00 00  metldr..........
00040830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

structure

Address Length Value Description
0x0 0x08 0x40 File offset relative to 0x810 (asecure_loader header)
0x8 0x08 0xE8D0 File Length
0x10 0x20 char[32]:"metldr" File name

Metldr binary

note: exact length depends on metldr revision and is mentioned in previous entrytable

example

NOR: 0x0000840 - 0x000F12F NAND: 0x0040840 - 0x004F66F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00000840  00 00 0E 89 43 B6 EF 4A E2 0F 74 00 C8 80 9E 53  ...‰C¶ïJâ.t.È€žS
00000850  00 00 0E 89 FC D1 D8 BE 6F F4 C8 D8 8F E1 C3 F7  ...‰üÑؾoôÈØ.áÃ÷
00000860  8B E4 7A 13 F1 F9 85 EF 66 01 96 81 BD CA 31 EA  ‹äz.ñù…ïf.–.½Ê1ê
00000870  9F 86 36 BB 92 4C FF EE FA 92 88 D3 E5 27 96 24  Ÿ†6»’Lÿîú’ˆÓå'–$
....
0000F0F0  ED BA DE 64 76 29 8E C6 CC FC DD 30 40 56 39 6B  íºÞdv)ŽÆÌüÝ0@V9k
0000F100  03 F3 C1 D1 81 41 85 32 24 A6 46 67 CC FB 3F 64  .óÁÑ.A…2$¦FgÌû?d
0000F110  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0000F120  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00040840  00 00 0E DD 2F 6C 62 2E CA 7F AE 0D 2F 76 B5 D4  ...Ý/lb.Ê.®./vµÔ
00040850  00 00 0E DD 93 B7 DF 38 94 92 09 B6 C3 9C D2 AA  ...Ý“·ß8”’.¶ÃœÒª
00040860  B2 6A E5 B6 D9 EB D8 5A 63 B2 32 E0 75 18 7C 63  ²jå¶ÙëØZc²2àu.|c
00040870  8D A0 30 54 F6 34 63 FB 01 8F DE 31 0A D7 FF 3D  . 0Tö4cû..Þ1.×ÿ=
....
0004F630  2D 76 13 0B F3 89 32 A3 D2 A2 4A 18 19 FD 30 DC  -v..ó‰2£Ò¢J..ý0Ü
0004F640  D8 18 00 DA BD E3 99 EB 80 DE CE A8 59 7B 8F 49  Ø..Ú½ã™ë€ÞΨY{.I
0004F650  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0004F660  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Encrypted Individual Data - eEID

This section of flash contains QA tokens

It is 0x10000 in length (64 kb) but only the first 0x1DD0 is used, the rest is padded with FF

It is composed of 6 sections numbered from 0 to 5

eEID contains your system model data, your target ID, and your PS3 motherboard revision

Section Description iso module
EID0 EID0 is needed for loading parameters to isoldr for loading isolated SELF files on a SPE aim_spu_module
EID1 ? ?sc_iso_factory or ss_sc_init?
EID2 ? + BD drive pairing fdm_spu_module
EID3 ? AacsModule.spu.isoself CprmModule.spu.isoself
EID4 ? sv_iso_spu_module
EID5 ? aim_spu_module

Note: For data structure of EID, see LibeEID

Header

example

NOR: 0x002F000 - 0x002F00F NAND: 0x0080800 - 0x008080F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0002F000  00 00 00 06 00 00 1D D0 00 00 00 00 00 00 00 00  .......Ð........
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00080800  00 00 00 06 00 00 1D D0 00 00 00 00 00 00 00 00  .......Ð........

structure

Address Length Value Description
0x0 0x4 0x6 Number of entries
0x4 0x8 0x1DD0 Length of entire eEID package
0x8 0x8 0x0 Unknown/Blank

File Table

This is the whole file table

example

NOR: 0x002F010 - 0x002F06F NAND: 0x0080810 - 0x008086F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0002F010  00 00 00 70 00 00 08 60 00 00 00 00 00 00 00 00  ...p...`........
0002F020  00 00 08 D0 00 00 02 A0 00 00 00 00 00 00 00 01  ...Ð... ........
0002F030  00 00 0B 70 00 00 07 30 00 00 00 00 00 00 00 02  ...p...0........
0002F040  00 00 12 A0 00 00 01 00 00 00 00 00 00 00 00 03  ... ............
0002F050  00 00 13 A0 00 00 00 30 00 00 00 00 00 00 00 04  ... ...0........
0002F060  00 00 13 D0 00 00 0A 00 00 00 00 00 00 00 00 05  ...Ð............
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00080810  00 00 00 70 00 00 08 60 00 00 00 00 00 00 00 00  ...p...`........
00080820  00 00 08 D0 00 00 02 A0 00 00 00 00 00 00 00 01  ...Ð... ........
00080830  00 00 0B 70 00 00 07 30 00 00 00 00 00 00 00 02  ...p...0........
00080840  00 00 12 A0 00 00 01 00 00 00 00 00 00 00 00 03  ... ............
00080850  00 00 13 A0 00 00 00 30 00 00 00 00 00 00 00 04  ... ...0........
00080860  00 00 13 D0 00 00 0A 00 00 00 00 00 00 00 00 05  ...Ð............

structure

0x10 bytes per entry as follows:

Address Length Value Description
0x0 0x4 0x70 Entry point
0x4 0x8 0x860 Length
0x8 0x8 0x0 EID number

Typical EID entry addresses and lengths

Entry point listed is offset from base EID address (NOR:0x002F000 / NAND:0x0080800 in these examples)
Absolute start address is base EID address + Entry point
Absolute end address is base EID address + Entry point + Length

Description Entry point Length NOR Address NAND Address
start end start end
EID0 0x70 0x860 0x002F070 0x002F8CF 0x0080870 0x00810CF
EID0_0 0x70 0xC0 0x002F070 0x002F130 0x0080870 0x0080930
EID0_0_DATA 0x60
EID0_0_COMMON 0x30
EID0_0_UNK 0x18
EID0_0_OMAC 0x10
EID0_0_PAD 0x8
EID0_1 0xC0
EID0_1_DATA 0x60
EID0_1_COMMON 0x30
EID0_1_UNK 0x18
EID0_1_OMAC 0x10
EID0_1_PAD 0x8
EID0_2 0xC0
EID0_2_DATA 0x60
EID0_2_COMMON 0x30
EID0_2_UNK 0x18
EID0_2_OMAC 0x10
EID0_2_PAD 0x8
EID0_3 0xC0
EID0_3_DATA 0x60
EID0_3_COMMON 0x30
EID0_3_UNK 0x18
EID0_3_OMAC 0x10
EID0_3_PAD 0x8
EID0_4 0xC0
EID0_4_DATA 0x60
EID0_4_COMMON 0x30
EID0_4_UNK 0x18
EID0_4_OMAC 0x10
EID0_4_PAD 0x8
EID0_5 0xC0
EID0_5_DATA 0x60
EID0_5_COMMON 0x30
EID0_5_UNK 0x18
EID0_5_OMAC 0x10
EID0_5_PAD 0x8
EID0_6 0xC0
EID0_6_DATA 0x60
EID0_6_COMMON 0x30
EID0_6_UNK 0x18
EID0_6_OMAC 0x10
EID0_6_PAD 0x8
EID0_7 0xC0
EID0_7_DATA 0x60
EID0_7_COMMON 0x30
EID0_7_UNK 0x18
EID0_7_OMAC 0x10
EID0_7_PAD 0x8
EID0_8 0xC0
EID0_8_DATA 0x60
EID0_8_COMMON 0x30
EID0_8_UNK 0x18
EID0_8_OMAC 0x10
EID0_8_PAD 0x8
EID0_9 0xC0
EID0_9_DATA 0x60
EID0_9_COMMON 0x30
EID0_9_UNK 0x18
EID0_9_OMAC 0x10
EID0_9_PAD 0x8
EID0_A - 0xC0
EID0_A_DATA 0x60
EID0_A_COMMON 0x30
EID0_A_UNK 0x18
EID0_A_OMAC 0x10
EID0_A_PAD 0x8
EID0_B 0xC0
EID0_B_DATA 0x60
EID0_B_COMMON 0x30
EID0_B_UNK 0x18
EID0_B_OMAC 0x10
EID0_B_PAD 0x8
EID1 0x8D0 0x2A0 0x002F8D0 0x002FB6F 0x00810D0 0x008136F
EID2 0xB70 0x730 0x002FB70 0x003029F 0x0081370 0x0081A9F
EID2_P_LEN
EID2_S_LEN
EID2_PAD 0x28
EID3 0x12A0 0x100 0x00302A0 0x003039F 0x0081AA0 0x0081B9F
EID4 0x13A0 0x30 0x00303A0 0x00303CF 0x0081BA0 0x0081BCF
EID5 0x13D0 0xA00 0x00303D0 0x0030DCF 0x0081BD0 0x00825CF

EID0 - Section 0

Indi manager can write to it
AIM can rehash it

example

NOR: 0x002F070 - 0x002F8CF NAND: 00080870 - 0x00810CF
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0002F070  00 00 00 01 00 89 00 08 14 01 01 06 1B 91 1C 5C  .....‰.......‘.\
0002F080  00 12 00 0B FC D1 D8 BE 6F F4 C8 D8 8F E1 C3 F7  ....üÑؾoôÈØ.áÃ÷
....
0002F8B0  5B B4 1B C2 81 59 79 1A E6 DA F1 FD 5C E8 5B 67  [´.Â.Yy.æÚñý\è[g
0002F8C0  EA 85 A8 F6 9F A1 C6 A2 5E 59 C5 61 A9 5F 6D 2E  ê…¨öŸ¡Æ¢^YÅa©_m.
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00080870  00 00 00 01 00 8A 00 01 10 00 52 BC C7 11 6D B2  .....Š....R¼Ç.m²
00080880  00 12 00 0B 93 B7 DF 38 94 92 09 B6 C3 9C D2 AA  ....“·ß8”’.¶ÃœÒª
....
000810B0  05 CA AE F2 3A 9C 88 09 90 D6 41 4B DA 37 6C AF  .Ê®ò:œˆ..ÖAKÚ7l¯
000810C0  4A 63 D7 B0 3E DD 5A 29 55 6A 9B E7 96 6E E1 EE  Jc×°>ÝZ)Uj›ç–náî

structure

Address Size Value Description Observations
0x0 0x10 00 00 00 01 00 89 00 08 14 01 01 06 1B 91 1C 5C IDPS IDPS This contains your Target ID
0x10 0x4 00 12 00 0B Unknown Appears to be static. Last byte contains number of eid0 sections in hex (11)
0x14 0xC FC D1 D8 BE 6F F4 C8 D8 8F E1 C3 F7 Per console nonce Appear to be the same nonce as in the encrypted files metloader/bootloader at offset 0x14-0x1F
Rest Rest Rest Encrypted Data?

EID 1 - Section 1

example

NOR: 0x002F8D0 - 0x002FB6F NAND: 0x00810D0 - 0x008136F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0002F8D0  DB D1 FF 70 CF CA D6 A6 59 94 15 E1 B3 FC CF CA  ÛÑÿpÏÊÖ¦Y”.á³üÏÊ
0002F8E0  B6 48 D5 01 39 4A 76 00 25 76 F6 F0 36 65 68 A7  ¶HÕ.9Jv.%vöð6eh§
....
0002FB50  AB 66 60 E8 B7 0D 3F 78 C5 59 2B D4 77 EB 2C 2D  «f`è·.?xÅY+Ôwë,-
0002FB60  C3 6A B9 FA BB 63 CD EA 5D D2 39 8A 3F 77 2A 09  Ãj¹ú»cÍê]Ò9Š?w*.
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
000810D0  A3 D6 F3 27 20 C6 80 11 EA A3 A1 75 48 36 4C 10  £Öó' Æ€.꣡uH6L.
000810E0  C9 6F B0 3D BF 85 4F D4 1F 89 01 C9 BC 64 DE 08  Éo°=¿…OÔ.‰.ɼdÞ.
....
00081350  2A DF F9 45 E4 94 FD 43 33 82 6E 82 BB E9 CD 3F  *ßùEä”ýC3‚n‚»éÍ?
00081360  53 5F E0 5A A2 7A 7E 6E 3D 50 A3 2B 16 68 7B 28  S_àZ¢z~n=P£+.h{(

structure

Appears to be encrypted, not much is known about this one


EID 2 - Section 2

example

NOR: 0x002FB70 - 0x003029F NAND: 0x0081370 - 0x0081A9F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0002FB70  00 80 06 90 00 00 00 00 00 00 00 00 00 00 00 00  .€..............
0002FB80  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0002FB90  56 64 18 79 DC 30 12 51 3C C5 69 21 0C AD ED 8F  Vd.yÜ0.Q<Åi!.­í.
0002FBA0  67 DC 77 CC B6 4B 2D FB 68 F2 2E 41 A0 F4 C7 88  gÜw̶K-ûhò.A ôLj
....
00030280  03 92 40 B3 63 F4 62 97 D2 3D AE 82 1B F4 EC CA  .’@³côb—Ò=®‚.ôìÊ
00030290  30 72 60 A5 7E B7 11 54 D9 9D 02 5C 20 7A CE 83  0r`¥~·.TÙ..\ z΃
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00081370  00 80 06 90 00 00 00 00 00 00 00 00 00 00 00 00  .€..............
00081380  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00081390  FC CA 19 07 3F FA D0 87 DF 20 23 98 99 17 F1 DF  üÊ..?úÐ‡ß #˜™.ñß
000813A0  95 A7 98 49 EC 4D 68 D2 61 D7 2F BE 4A 7E 86 02  •§˜IìMhÒa×/¾J~†.
....
00081A80  76 D5 07 20 D1 85 07 39 4D 2E F9 CE 0F A4 61 ED  vÕ. Ñ….9M.ùÎ.¤aí
00081A90  18 A6 BB 00 F9 55 69 BB DC 60 54 6D 40 C5 AF 3D  .¦».ùUi»Ü`Tm@ů=

structure

Not sure about this one, appears to be some recurring patterns in here

EID 3 - Section 3

example

NOR: 0x00302A0 - 0x003039F NAND: 0x0081AA0 - 0x0081B9F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
000302A0  00 00 00 01 58 1B 20 6E 00 00 00 00 01 8B 39 46  ....X. n.....‹9F
000302B0  00 01 00 D0 FC D1 D8 BE 6F F4 C8 D8 8F E1 C3 F7  ...ÐüÑؾoôÈØ.áÃ÷
000302C0  31 6B 01 24 85 68 AD 48 F4 D9 C5 E1 3E D5 BD A8  1k.$…h­HôÙÅá>Õ½¨
000302D0  A1 DD 7A 4A F2 95 3C FE 62 F2 F4 FD E0 48 98 35  ¡ÝzJò•<þbòôýàH˜5
000302E0  4D EB E2 E5 94 40 5F 29 BD 44 20 6E F1 14 92 5C  Mëâå”@_)½D nñ.’\
000302F0  19 1D 35 A5 32 54 FF 12 52 86 DD 19 4D E4 67 31  ..5¥2Tÿ.R†Ý.Mäg1
00030300  7F 34 A4 EE 0C 19 9B 0F C9 E3 81 4D F9 F7 1D 88  .4¤î..›.Éã.Mù÷.ˆ
00030310  90 C8 D3 F0 D5 40 5F 6B 2B A5 2D 1D D6 1F 58 37  .ÈÓðÕ@_k+¥-.Ö.X7
00030320  35 A5 7E 90 05 F1 89 2E 7F 76 BC 22 3F D4 F4 C3  5¥~..ñ‰..v¼"?ÔôÃ
00030330  31 58 62 79 2E D7 27 E3 4D 9F 16 BC 8E 7E B7 8D  1Xby.×'ãMŸ.¼Ž~·.
00030340  20 2F 8B 76 4F E7 FC 0F 4B 0E 26 54 AF 72 82 AD   /‹vOçü.K.&T¯r‚­
00030350  9E 93 28 FB EA 3B 3D 62 47 C7 06 68 D0 5B C9 4E  ž“(ûê;=bGÇ.hÐ[ÉN
00030360  E9 8F 1F 45 B1 7B 9B E3 9E 5C 33 5F E3 15 C5 B6  é..E±{›ãž\3_ã.Ŷ
00030370  E7 35 F4 0F C9 D6 F8 48 0B C7 63 A7 56 5D 96 C4  ç5ô.ÉÖøH.Çc§V]–Ä
00030380  CD 53 F2 95 5F 78 A1 5D 48 A6 9C D2 0B 40 D2 90  ÍSò•_x¡]H¦œÒ.@Ò.
00030390  7D 83 7B 24 12 F3 9F A7 F4 1E 7A 9B 98 50 2C 02  }ƒ{$.óŸ§ô.z›˜P,.
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00081AA0  00 00 00 01 39 20 C4 E4 00 00 00 00 00 6E 38 61  ....9 Ää.....n8a
00081AB0  00 01 00 D0 93 B7 DF 38 94 92 09 B6 C3 9C D2 AA  ...Г·ß8”’.¶ÃœÒª
00081AC0  EA 14 35 C0 0F 48 31 01 FE 4C FD 1B F8 A5 C1 04  ê.5À.H1.þLý.ø¥Á.
00081AD0  B2 EE 21 12 5F F2 68 21 40 61 3D ED 62 7B EC 91  ²î!._òh!@a=íb{ì‘
00081AE0  0F C2 D4 27 D9 90 34 C4 19 0D AB 2E 28 9B F4 F6  .ÂÔ'Ù.4Ä..«.(›ôö
00081AF0  00 F5 05 71 FA 53 A6 E8 52 57 9D 9E 7E 8B 9C FD  .õ.qúS¦èRW.ž~‹œý
00081B00  C3 0B 92 AB 25 3E 34 D8 05 E0 92 DC 27 24 14 71  Ã.’«%>4Ø.à’Ü'$.q
00081B10  AF AC 4E C3 6B 66 EF 18 0B EB 72 5D E7 F1 96 28  ¯¬NÃkfï..ër]çñ–(
00081B20  6C 71 06 2B 45 7F 96 76 34 FA AC 7E D8 8F 97 B8  lq.+E.–v4ú¬~Ø.—¸
00081B30  F4 B5 10 BA 71 9E 38 CB 7C AD CB A7 09 E0 23 72  ôµ.ºqž8Ë|­Ë§.à#r
00081B40  19 4B 32 A2 0A 13 1C 4B 12 67 C3 28 98 EE 2D 26  .K2¢...K.gÃ(˜î-&
00081B50  B8 81 39 08 81 E4 11 EF 7B 6B DB 0A E8 A9 D0 9E  ¸.9..ä.ï{kÛ.è©Ðž
00081B60  71 13 05 67 99 77 9B 1D E8 C9 0B 67 FB AC 4B 03  q..g™w›.èÉ.gû¬K.
00081B70  78 AF 44 B3 35 A9 39 1F 75 C1 9F 3C 46 E8 C6 71  x¯D³5©9.uÁŸ<FèÆq
00081B80  A5 5B 57 D3 37 6B E2 34 E7 7C B6 A5 04 FE 42 B5  ¥[WÓ7kâ4ç|¶¥.þBµ
00081B90  09 C7 97 0F 9E 2C 7F 94 F6 9C A2 15 4A 76 49 79  .Ç—.ž,.”öœ¢.JvIy

structure

Not fully examined yet, Contains the 0xC byte perconsole nonce (as seen in bootldr/metldr and EID0) again at 0x14 to 0x1F

EID 4 - Section 4

example

NOR: 0x00303A0 - 0x00303CF NAND: 0x0081BA0 - 0x0081BCF
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
000303A0  8B D7 1B A0 C3 DA 4B BE B3 72 AE 61 78 90 31 1F  ‹×. ÃÚK¾³r®ax.1.
000303B0  2E CD F1 92 28 8E 17 AD 6A 9C D5 8A 8E 17 86 39  .Íñ’(Ž.­jœÕŠŽ.†9
000303C0  C8 0A F7 9B 92 D8 3A A8 92 60 73 6A 5E 12 2A 94  È.÷›’Ø:¨’`sj^.*”
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00081BA0  40 9F 75 39 22 96 C2 12 A2 9C BC CF 53 99 73 40  @Ÿu9"–Â.¢œ¼ÏS™s@
00081BB0  5D AD A7 F6 26 6E 50 35 55 A8 8A B9 24 A1 F5 35  ]­§ö&nP5U¨Š¹$¡õ5
00081BC0  BC 3B 7A 88 17 75 9C 44 A9 2D 4B E0 8B 80 92 E7  ¼;zˆ.uœD©-Kà‹€’ç

structure

Encrypted encdec key (used for e.g. BD drive)


EID 5 - Section 5

example

NOR: 0x00303D0 - 0x0030DCF NAND: 0x0081BD0 - 0x00825CF
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
000303D0  00 00 00 01 00 89 00 08 14 01 01 06 1B 91 1C 5C  .....‰.......‘.\
000303E0  00 12 07 30 FC D1 D8 BE 6F F4 C8 D8 8F E1 C3 F7  ...0üÑؾoôÈØ.áÃ÷
000303F0  B7 05 8B 05 E4 2E 94 C7 41 8E 1D E9 DE 63 F6 E6  ·.‹.ä.”ÇAŽ.éÞcöæ
00030400  C5 18 28 E6 47 44 CE 5D 53 03 57 76 46 0C 97 AB  Å.(æGDÎ]S.WvF.—«
....
00030DB0  A8 55 8A FF 73 96 11 1B 6D 85 82 BD 73 FD 45 6D  ¨UŠÿs–..m…‚½sýEm
00030DC0  7B 7B 00 DD 0D EB A8 A1 57 5F 5D 0F C9 23 49 E8  {{.Ý.먡W_].É#Iè
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00081BD0  00 00 00 01 00 8A 00 01 10 00 52 BC C7 11 6D B2  .....Š....R¼Ç.m²
00081BE0  00 12 07 30 93 B7 DF 38 94 92 09 B6 C3 9C D2 AA  ...0“·ß8”’.¶ÃœÒª
00081BF0  CB 95 EF 88 DB 8B E8 14 69 1F 99 A7 4A 66 F7 09  Ë•ïˆÛ‹è.i.™§Jf÷.
00081C00  DD 23 09 1F 73 22 43 26 F4 1A 65 44 9C F2 DB 89  Ý#..s"C&ô.eDœòÛ‰
....
000825B0  CE 82 2F 9B 8D F0 4E 22 6B EF 68 28 37 38 AA 08  ΂/›.ðN"kïh(78ª.
000825C0  EA 85 EA 2C A4 1D F2 76 9C FF D5 D4 49 97 06 06  ê…ê,¤.òvœÿÕÔI—..

structure

Similar again to EID0

Address Size Value Description Observations
0x0 0x10 00 00 00 01 00 89 00 08 14 01 01 06 1B 91 1C 5C IDPS IDPS
0x10 0x4 00 12 07 30 Unknown Changes from EID0
0x14 0x12 FC D1 D8 BE 6F F4 C8 D8 8F E1 C3 F7 Per console nonce Contains the 0xC byte perconsole nonce (as seen in bootldr/metldr and EID0) again at 0x14 to 0x1F
Rest Rest Rest Encrypted Data?

unreferenced area

Possibly just unused EID region (which also explains why it is FF filled)

example

NOR: 0x0030DD0 - 0x003EFFF NAND: 0x00825D0 - 0x00907FF
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00030DD0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00030DE0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
0003EFE0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0003EFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
000825D0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000825E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
000907E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000907F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

structure

Address Length Value Description
0x0 0xE22F 0xFF FF filled area

Individual System Data - cISD

This section of flash contains Console Specific information

cISD contains core information such as Gelic Ethernet MAC address

Header

example

NOR: 0003F000 - 0003F00F NAND: 00090800 - 0009080F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F000  00 00 00 03 00 00 02 70 00 00 00 00 00 00 00 00  .......p........
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00090800  00 00 00 03 00 00 02 70 00 00 00 00 00 00 00 00  .......p........

structure

Address Length Value Description
0x0 0x4 0x3 Number of entries
0x4 0x8 0x270 Length of entire cISD package
0x8 0x8 0x0 Unknown/Blank

File Table

0x10 per entry:

example

NOR: 0003F010 - 0003F03F NAND: 00090810 - 0009083F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F010  00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00  ...@... ........
0003F020  00 00 00 60 00 00 02 00 00 00 00 00 00 00 00 01  ...`............
0003F030  00 00 02 60 00 00 00 10 00 00 00 00 00 00 00 02  ...`............
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00090810  00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00  ...@... ........
00090820  00 00 00 60 00 00 02 00 00 00 00 00 00 00 00 01  ...`............
00090830  00 00 02 60 00 00 00 10 00 00 00 00 00 00 00 02  ...`............

structure

Address Length Value Description
0x0 0x4 0x40 Entry point
0x4 0x8 0x20 Length
0x8 0x8 0x0 Entrynumber

Typical cISD entry addresses and lengths

Entry point listed is offset from base cISD address (NOR:0x003F000 / NAND:0x0090800 in these examples)
Absolute start address is base cISD address + Entry point
Absolute end address is base cISD address + Entry point + Length

Description Entry point Length NOR Address NAND Address
start end start end
cISD0 0x40 0x20 0x003F040 0x003F060 0x0090840 0x0090860
cISD1 0x60 0x200 0x003F060 0x003F260 0x0090860 0x0090A60
cISD2 0x260 0x10 0x003F260 0x003F270 0x0090A60 0x0090A70

cISD0 - Section 0

example

NOR: 0003F040 - 0003F05F NAND: 00090840 - 0009085F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F040  00 1F A7 E3 82 DC FF FF FF FF FF FF FF FF FF FF  ..§ã‚Üÿÿÿÿÿÿÿÿÿÿ
0003F050  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00090840  00 19 C5 BE 7D 50 FF FF FF FF FF FF FF FF FF FF  ..ž}Pÿÿÿÿÿÿÿÿÿÿ
00090850  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

structure

Address Length Value Description
0x0 0x6 0xA8E3EE7D10DA MAC Address
0x6 0x1A 0xFF Unknown/Blank

cISD1 - Section 1

example

NOR: 0x03F060 - 0x03F25F NAND: 0x090860 - 0x090A5F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F060  7F 49 44 4C 00 02 00 60 01 00 00 02 01 33 B2 B6  .IDL...`.....3²¶
0003F070  30 31 43 41 30 31 37 36 34 31 30 34 36 37 31 38  01CA017641046718
0003F080  30 33 30 35 34 39 34 30 30 30 30 30 30 30 32 30  0305494000000020
0003F090  32 37 34 33 38 34 31 36 34 30 30 36 31 33 32 39  2743841640061329
0003F0A0  31 31 39 32 00 73 00 73 00 96 00 01 FF FF FF FF  1192.s.s.–..ÿÿÿÿ
0003F0B0  00 02 00 11 00 02 00 12 00 00 00 00 01 8B 39 46  .............‹9F
0003F0C0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
0003F240  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0003F250  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00090860  7F 49 44 4C 00 02 00 60 01 00 00 02 00 61 21 CB  .IDL...`.....a!Ë
00090870  30 31 43 35 31 38 30 30 35 39 30 44 37 37 30 45  01C51800590D770E
00090880  30 39 31 34 30 30 34 30 30 30 30 30 30 30 30 30  0914004000000000
00090890  32 37 34 33 30 31 37 39 33 48 41 31 30 37 31 37  274301793HA10717
000908A0  38 32 32 44 00 28 00 28 00 38 00 01 FF FF FF FF  822D.(.(.8..ÿÿÿÿ
000908B0  00 01 00 11 00 02 00 12 00 00 00 00 00 6E 38 61  .............n8a
000908C0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
00090A40  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00090A50  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

structure

Address Length Value Description
0x0 0x8 0x7F49444C0002006001 static, header of IDLog (IDLog size - 0x5F)
0x9 0xF 0x0000020133B2B6 CID - varies per console
0x10 0x2F Ascii: 01CA0176410467180305494000000020 eCID - varies per console
0x30 0x37 Ascii: 27438416 board_id - part of console serial number
0x38 0x43 Ascii: 400613291192 kiban_id - barcode on the board
0x44 0x49 0x007300730096 Unknown - varies per console
0x4A 0x4B 0x00001 ckp2_data - static?
0x4C 0x57 0xFFFFFFFF000100110002001200 Unknown, static?
0x58 0x5F 0x00000000018B3946 ckp_management_id, varies per console

cISD2 - Section 2

example

NOR: 0003F260 - 0003F26F NAND: 00090A60 - 00090A6F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F260  1F FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00  .ÿ..............
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
     
00090A60  1F FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00  .ÿ..............

structure

This value is unknown and the first two bytes seem to vary

Address Length Value Description
0x0 0x10 0x1FFF0000000000000000000000000000 Unknown

unreferenced area

Possibly just unused cISD region (which also explains why it is FF filled)

example

NOR: 0003F270 - 0003F7FF NAND: 00090A70 - 00090FFF
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0003F270  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0003F280  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
0003F7E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0003F7F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00090A70  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00090A80  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
00090FE0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00090FF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

structure

Address Length Value Description
0x0 0x58F 0xFF FF filled area

Common System Data - cCSD

This section doesn't contain any data... This section of flash contains Console Specific information

Header

example

NOR: 0003F800 - 0003F80F NAND: 00091000 - 0009100F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F800  00 00 00 01 00 00 08 00 00 00 00 00 00 00 00 00  ................
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00091000  00 00 00 01 00 00 08 00 00 00 00 00 00 00 00 00  ................

structure

Address Length Value Description
0x0 0x4 0x1 Number of entries
0x4 0x8 0x800 Length of entire cCSD package
0x8 0x8 0x0 Unknown/Blank

File Table

example

NOR: 0003F810 - 0003F81F NAND: 00091010 - 0009101F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F810  00 00 00 20 00 00 00 30 00 00 00 00 00 00 00 00  ... ...0........
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00091010  00 00 00 20 00 00 00 30 00 00 00 00 00 00 00 00  ... ...0........

structure

This repeats per entry

Address Length Value Description
0x0 0x4 0x20 Entry point
0x4 0x8 0x30 Length
0x8 0x8 0x0 Unknown/Blank

cCSD0 - Section 0

example

NOR: 0x03F820 - 0x03F84F NAND: 0x091020 - 0x09104F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F820  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0003F830  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0003F840  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00091020  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00091030  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00091040  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

structure

There appears to be no data stored here.

Address Length Value Description
0x0 0x30 0xFF FF filled region

unreferenced area

Possibly just unused cCSD region (which also explains why it is FF filled)

example

NOR: 0x03F850 - 0x03FFFF NAND: 0x0091050 - 0x00917FF
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F850  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0003F860  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
0003FFE0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0003FFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00091050  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00091060  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
000917E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000917F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

structure

Address Length Value Description
0x0 0x7B0 0xFF FF filled area

trvk_prg

NOR: splitted into 2 seperate sections trvk_prg0 (0x40000) + trvk_prg1 (0x060000)
NAND: 1 region (0x0091800) with 2 combined sections of trvk_prg0 + trvk_prg1

Header

Only seen on NAND, with 2 combined sections of trvk_prg0 + trvk_prg1

example

NOR: NAND: 0x0091800 - 0x009181F
N.A.
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00091800  00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 20  ....... ....... 
00091810  00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00  ...... .........

structure

Address Length Value Description
0x0 0x8 0x20 Offset to region (relative to base 0x91800)
0x8 0x8 0x20 Offset to file (relative to base 0x91800)
0x10 0x8 0x2000 Region Size
0x8 0x8 0x0 Unknown

trvk_prg File Entries

32 byte SCE header for each trvk_prg file, followed by the signed/encrypted data. For content/structure, see: Revokation

trvk_prg0

example
NOR: trvk_prg0 (0x40000) NAND: trvk_prg0 (0x0091820)
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00040000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 C0  ...............À
00040010  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
00040020  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 C0  ...............À
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00091820  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 E0  ...............à
00091830  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
00091840  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 E0  ...............à
structure
Address Length Value Description
0x0 0x8 0x0 Unknown
0x8 0x8 0x02C0 Data size
0x10 0x4 ASCII:SCE. Magic Header
0x14 0x4 0x2 Unknown
0x18 0x4 0x2 Unknown
0x1C 0x4 0x0 Unknown
0x20 0x8 0x200 Unknown
0x28 0x8 0xE0 Meta size

trvk_prg1

example
NOR: trvk_prg1 (0x060000) NAND: trvk_prg1 (0x0092810)
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00060000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 E0  ...............à
00060010  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
00060020  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 E0  ...............à
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00092810  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 E0  ...............à
00092820  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
00092830  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 E0  ...............à
structure
Address Length Value Description
0x0 0x8 0x0 Unknown
0x8 0x8 0x2E0 Data size
0x10 0x4 ASCII:SCE. Magic Header
0x14 0x4 0x2 Unknown
0x18 0x4 0x2 Unknown
0x1C 0x4 0x0 Unknown
0x20 0x8 0x200 Unknown
0x28 0x8 0xE0 Meta size

trvk_pkg

NOR: splitted into 2 seperate sections trvk_pkg0 (0x080000) + trvk_pkg1 (0x0A0000)
NAND: 1 region (0x0093800) with 2 combined sections of trvk_pkg0 + trvk_pkg1

Header

Only seen on NAND, with 2 combined sections of trvk_pkg0 + trvk_pkg1

example

NOR: NAND: 0x0093800 - 0x009381F
N.A.
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00093800  00 00 00 00 00 00 10 10 00 00 00 00 00 00 10 10  ................
00093810  00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00  ...... .........

structure

Address Length Value Description
0x0 0x8 0x1010 Offset to region (relative to base 0x93800)
0x8 0x8 0x1010 Offset to file (relative to base 0x93800)
0x10 0x8 0x2000 Region Size
0x8 0x8 0x0 Unknown

trvk_pkg File Entries

32 byte SCE header for each trvk_pkg file, followed by the signed/encrypted data. For content/structure, see: Revokation

trvk_pkg0

example
NOR: trvk_pkg0 (0x80000) NAND: trvk_pkg0 (0x0093820)
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00080000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 60  ...............`
00080010  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
00080020  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 60  ...............`
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00093820  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 40  ...............@
00093830  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
00093840  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 40  ...............@
structure
Address Length Value Description
0x0 0x8 0x0 Unknown
0x8 0x8 0x260 Data size
0x10 0x4 ASCII:SCE. Magic Header
0x14 0x4 0x2 Unknown
0x18 0x4 0x2 Unknown
0x1C 0x4 0x0 Unknown
0x20 0x8 0x200 Unknown
0x28 0x8 0x60 Unknown

trvk_pkg1

example
NOR: trvk_pkg1 (0x0A0000) NAND: trvk_pkg1 (0x0094810)
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
000A0000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 60  ...............`
000A0010  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
000A0020  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 60  ...............`
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00094810  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 40  ...............@
00094820  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
00094830  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 40  ...............@
structure
Address Length Value Description
0x0 0x8 0x0 Unknown
0x8 0x8 0x260 Data size
0x10 0x4 ASCII:SCE. Magic Header
0x14 0x4 0x2 Unknown
0x18 0x4 0x2 Unknown
0x1C 0x4 0x0 Unknown
0x20 0x8 0x200 Unknown
0x28 0x8 0x60 Unknown

creserved_0

Location:

  • as file: in both ROS areas for both NOR + NAND
  • as seperate flash region: NAND only (0x0095800 - 0x00BFFFF)

example

NOR: NAND: 0x0095800 - 0x00BFFFF
N.A.
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00095800  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00095810  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
000BFFE0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000BFFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

structure

Address Length Value Description
0x0 0x2A800 0xFF FF filled area

ros

NOR: splitted into 2 seperate sections ros0 (0x0C0000) + ros1 (0x7C0000)
NAND: 1 region (0x00C0000) with 2 combined sections of ros0 (0x00C0020) + ros1 (0x07C0000)

Header

Only seen on NAND, with 2 combined sections of ros0 + ros1

example

NOR: NAND: 0x00C0000 - 0x00C001F
N.A.
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

000C0000  00 00 00 00 00 70 00 10 00 00 00 00 00 70 00 10  .....p.......p..
000C0010  00 00 00 00 00 E0 00 00 00 00 00 00 00 00 00 00  .....à..........

structure

Address Length Value Description
0x0 0x8 0x20 (ros0) or 0x700010 (ros1) Offset to region (relative to base 0xC0000)
0x8 0x8 0x20 (ros0) or 0x700010 (ros1) Offset to region (relative to base 0xC0000)
0x10 0x8 0xE00000 Unknown
0x8 0x8 0x0 Unknown

ros Entries

ros0

header
example
NOR: ros00 (0x00C0000 - 0x00C001F) NAND: ros0 (0x00C0020 - 0x00C003F)
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
000C0000  00 00 00 00 00 00 00 00 00 00 00 00 00 6F FF E0  .............oÿà
000C0010  00 00 00 01 00 00 00 18 00 00 00 00 00 6F FF E0  .............oÿà
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
000C0020  00 00 00 00 00 00 00 00 00 00 00 00 00 6F FF E0  .............oÿà
000C0030  00 00 00 01 00 00 00 18 00 00 00 00 00 6F FF E0  .............oÿà
structure
Address Length Value Description
0x0 0x8 0x0 Unknown
0x8 0x8 0x0x6FFFE0 Length of Flash Region (relative to region start)
0x10 0x4 0x1 Unknown
0x14 0x4 0x18 Entry Count
0x18 0x8 0x0x6FFFE0 Length of Flash Region (relative to region start)
Entry Table

Then follows a 48 byte entry for each file

example
NOR: ros0 (0x00C0020 - ) NAND: ros0 (0x00C0040 - )
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
000C0020  00 00 00 00 00 00 04 90 00 00 00 00 00 04 00 00  ................
000C0030  63 72 65 73 65 72 76 65 64 5F 30 00 00 00 00 00  creserved_0.....
000C0040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0050  00 00 00 00 00 04 04 90 00 00 00 00 00 00 00 08  ................
000C0060  73 64 6B 5F 76 65 72 73 69 6F 6E 00 00 00 00 00  sdk_version.....
000C0070  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0080  00 00 00 00 00 04 05 00 00 00 00 00 00 01 E7 C8  ..............çÈ
000C0090  6C 76 31 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv1ldr..........
000C00A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C00B0  00 00 00 00 00 05 ED 00 00 00 00 00 00 01 75 F8  ......í.......uø
000C00C0  6C 76 32 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv2ldr..........
000C00D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C00E0  00 00 00 00 00 07 63 00 00 00 00 00 00 01 2F 94  ......c......./”
000C00F0  69 73 6F 6C 64 72 00 00 00 00 00 00 00 00 00 00  isoldr..........
000C0100  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0110  00 00 00 00 00 08 93 00 00 00 00 00 00 01 F6 D8  ......“.......öØ
000C0120  61 70 70 6C 64 72 00 00 00 00 00 00 00 00 00 00  appldr..........
000C0130  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0140  00 00 00 00 00 0A 89 D8 00 00 00 00 00 00 FB 4C  ......‰Ø......ûL
000C0150  73 70 75 5F 70 6B 67 5F 72 76 6B 5F 76 65 72 69  spu_pkg_rvk_veri
000C0160  66 69 65 72 2E 73 65 6C 66 00 00 00 00 00 00 00  fier.self.......
000C0170  00 00 00 00 00 0B 85 24 00 00 00 00 00 00 5A 94  ......…$......Z”
000C0180  73 70 75 5F 74 6F 6B 65 6E 5F 70 72 6F 63 65 73  spu_token_proces
000C0190  73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00 00  sor.self........
000C01A0  00 00 00 00 00 0B DF B8 00 00 00 00 00 00 63 D0  ......߸......cÐ
000C01B0  73 70 75 5F 75 74 6F 6B 65 6E 5F 70 72 6F 63 65  spu_utoken_proce
000C01C0  73 73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00  ssor.self.......
000C01D0  00 00 00 00 00 0C 43 88 00 00 00 00 00 01 53 2C  ......Cˆ......S,
000C01E0  73 63 5F 69 73 6F 2E 73 65 6C 66 00 00 00 00 00  sc_iso.self.....
000C01F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0200  00 00 00 00 00 0D 96 B4 00 00 00 00 00 00 42 98  ......–´......B˜
000C0210  61 69 6D 5F 73 70 75 5F 6D 6F 64 75 6C 65 2E 73  aim_spu_module.s
000C0220  65 6C 66 00 00 00 00 00 00 00 00 00 00 00 00 00  elf.............
000C0230  00 00 00 00 00 0D D9 4C 00 00 00 00 00 00 D7 F0  ......ÙL......×ð
000C0240  73 70 70 5F 76 65 72 69 66 69 65 72 2E 73 65 6C  spp_verifier.sel
000C0250  66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  f...............
000C0260  00 00 00 00 00 0E B1 3C 00 00 00 00 00 00 80 8C  ......±<......€Œ
000C0270  6D 63 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  mc_iso_spu_modul
000C0280  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
000C0290  00 00 00 00 00 0F 31 C8 00 00 00 00 00 00 88 B8  ......1È......ˆ¸
000C02A0  6D 65 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  me_iso_spu_modul
000C02B0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
000C02C0  00 00 00 00 00 0F BA 80 00 00 00 00 00 00 C0 78  ......º€......Àx
000C02D0  73 76 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sv_iso_spu_modul
000C02E0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
000C02F0  00 00 00 00 00 10 7A F8 00 00 00 00 00 00 5D B0  ......zø......]°
000C0300  73 62 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sb_iso_spu_modul
000C0310  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
000C0320  00 00 00 00 00 10 D8 A8 00 00 00 00 00 00 22 A0  ......ب......" 
000C0330  64 65 66 61 75 6C 74 2E 73 70 70 00 00 00 00 00  default.spp.....
000C0340  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0350  00 00 00 00 00 10 FB 80 00 00 00 00 00 12 6A A0  ......û€......j 
000C0360  6C 76 31 2E 73 65 6C 66 00 00 00 00 00 00 00 00  lv1.self........
000C0370  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0380  00 00 00 00 00 23 66 80 00 00 00 00 00 03 E8 A8  .....#f€......è¨
000C0390  6C 76 30 00 00 00 00 00 00 00 00 00 00 00 00 00  lv0.............
000C03A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C03B0  00 00 00 00 00 27 4F 28 00 00 00 00 00 17 4A 18  .....'O(......J.
000C03C0  6C 76 32 5F 6B 65 72 6E 65 6C 2E 73 65 6C 66 00  lv2_kernel.self.
000C03D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C03E0  00 00 00 00 00 3E 99 40 00 00 00 00 00 07 0F 94  .....>™@.......”
000C03F0  65 75 72 75 73 5F 66 77 2E 62 69 6E 00 00 00 00  eurus_fw.bin....
000C0400  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0410  00 00 00 00 00 45 A8 D4 00 00 00 00 00 08 04 18  .....E¨Ô........
000C0420  65 6D 65 72 5F 69 6E 69 74 2E 73 65 6C 66 00 00  emer_init.self..
000C0430  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0440  00 00 00 00 00 4D AC EC 00 00 00 00 00 06 0D 78  .....M“.......x
000C0450  68 64 64 5F 63 6F 70 79 2E 73 65 6C 66 00 00 00  hdd_copy.self...
000C0460  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0470  00 00 00 00 00 53 BA 64 00 00 00 00 00 00 12 A8  .....Sºd.......¨
000C0480  6D 61 6E 75 5F 69 6E 66 6F 5F 73 70 75 5F 6D 6F  manu_info_spu_mo
000C0490  64 75 6C 65 2E 73 65 6C 66 00 00 00 00 00 00 00  dule.self.......
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
000C0040  00 00 00 00 00 00 04 90 00 00 00 00 00 04 00 00  ................
000C0050  63 72 65 73 65 72 76 65 64 5F 30 00 00 00 00 00  creserved_0.....
000C0060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0070  00 00 00 00 00 04 04 90 00 00 00 00 00 00 00 08  ................
000C0080  73 64 6B 5F 76 65 72 73 69 6F 6E 00 00 00 00 00  sdk_version.....
000C0090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C00A0  00 00 00 00 00 04 05 00 00 00 00 00 00 01 E7 C8  ..............çÈ
000C00B0  6C 76 31 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv1ldr..........
000C00C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C00D0  00 00 00 00 00 05 ED 00 00 00 00 00 00 01 6F F0  ......í.......oð
000C00E0  6C 76 32 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv2ldr..........
000C00F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0100  00 00 00 00 00 07 5D 00 00 00 00 00 00 01 2F 74  ......]......./t
000C0110  69 73 6F 6C 64 72 00 00 00 00 00 00 00 00 00 00  isoldr..........
000C0120  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0130  00 00 00 00 00 08 8C 80 00 00 00 00 00 01 E5 D4  ......Œ€......åÔ
000C0140  61 70 70 6C 64 72 00 00 00 00 00 00 00 00 00 00  appldr..........
000C0150  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0160  00 00 00 00 00 0A 72 54 00 00 00 00 00 00 FB 4C  ......rT......ûL
000C0170  73 70 75 5F 70 6B 67 5F 72 76 6B 5F 76 65 72 69  spu_pkg_rvk_veri
000C0180  66 69 65 72 2E 73 65 6C 66 00 00 00 00 00 00 00  fier.self.......
000C0190  00 00 00 00 00 0B 6D A0 00 00 00 00 00 00 5A 94  ......m ......Z”
000C01A0  73 70 75 5F 74 6F 6B 65 6E 5F 70 72 6F 63 65 73  spu_token_proces
000C01B0  73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00 00  sor.self........
000C01C0  00 00 00 00 00 0B C8 34 00 00 00 00 00 00 63 D0  ......È4......cÐ
000C01D0  73 70 75 5F 75 74 6F 6B 65 6E 5F 70 72 6F 63 65  spu_utoken_proce
000C01E0  73 73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00  ssor.self.......
000C01F0  00 00 00 00 00 0C 2C 04 00 00 00 00 00 01 53 2C  ......,.......S,
000C0200  73 63 5F 69 73 6F 2E 73 65 6C 66 00 00 00 00 00  sc_iso.self.....
000C0210  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0220  00 00 00 00 00 0D 7F 30 00 00 00 00 00 00 42 98  .......0......B˜
000C0230  61 69 6D 5F 73 70 75 5F 6D 6F 64 75 6C 65 2E 73  aim_spu_module.s
000C0240  65 6C 66 00 00 00 00 00 00 00 00 00 00 00 00 00  elf.............
000C0250  00 00 00 00 00 0D C1 C8 00 00 00 00 00 00 D7 F0  ......ÁÈ......×ð
000C0260  73 70 70 5F 76 65 72 69 66 69 65 72 2E 73 65 6C  spp_verifier.sel
000C0270  66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  f...............
000C0280  00 00 00 00 00 0E 99 B8 00 00 00 00 00 00 80 8C  ......™¸......€Œ
000C0290  6D 63 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  mc_iso_spu_modul
000C02A0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
000C02B0  00 00 00 00 00 0F 1A 44 00 00 00 00 00 00 88 B8  .......D......ˆ¸
000C02C0  6D 65 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  me_iso_spu_modul
000C02D0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
000C02E0  00 00 00 00 00 0F A2 FC 00 00 00 00 00 00 C0 78  ......¢ü......Àx
000C02F0  73 76 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sv_iso_spu_modul
000C0300  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
000C0310  00 00 00 00 00 10 63 74 00 00 00 00 00 00 5D B0  ......ct......]°
000C0320  73 62 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sb_iso_spu_modul
000C0330  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
000C0340  00 00 00 00 00 10 C1 24 00 00 00 00 00 00 22 A0  ......Á$......" 
000C0350  64 65 66 61 75 6C 74 2E 73 70 70 00 00 00 00 00  default.spp.....
000C0360  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0370  00 00 00 00 00 10 E4 00 00 00 00 00 00 12 80 50  ......ä.......€P
000C0380  6C 76 31 2E 73 65 6C 66 00 00 00 00 00 00 00 00  lv1.self........
000C0390  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C03A0  00 00 00 00 00 23 64 80 00 00 00 00 00 03 E6 78  .....#d€......æx
000C03B0  6C 76 30 00 00 00 00 00 00 00 00 00 00 00 00 00  lv0.............
000C03C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C03D0  00 00 00 00 00 27 4A F8 00 00 00 00 00 17 27 58  .....'Jø......'X
000C03E0  6C 76 32 5F 6B 65 72 6E 65 6C 2E 73 65 6C 66 00  lv2_kernel.self.
000C03F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0400  00 00 00 00 00 3E 72 50 00 00 00 00 00 07 0F 94  .....>rP.......”
000C0410  65 75 72 75 73 5F 66 77 2E 62 69 6E 00 00 00 00  eurus_fw.bin....
000C0420  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0430  00 00 00 00 00 45 81 E4 00 00 00 00 00 08 04 18  .....E.ä........
000C0440  65 6D 65 72 5F 69 6E 69 74 2E 73 65 6C 66 00 00  emer_init.self..
000C0450  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0460  00 00 00 00 00 4D 85 FC 00 00 00 00 00 06 0D 78  .....M…ü.......x
000C0470  68 64 64 5F 63 6F 70 79 2E 73 65 6C 66 00 00 00  hdd_copy.self...
000C0480  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
000C0490  00 00 00 00 00 53 93 74 00 00 00 00 00 00 12 A8  .....S“t.......¨
000C04A0  6D 61 6E 75 5F 69 6E 66 6F 5F 73 70 75 5F 6D 6F  manu_info_spu_mo
000C04B0  64 75 6C 65 2E 73 65 6C 66 00 00 00 00 00 00 00  dule.self.......
structure
Address Length Value Description
0x0 0x8 0x490 File offset relative to Region start
0x8 0x8 0x40000 File length
0x10 0x32 char[32]:"creserved_0" File name

ros1

header
example
NOR: ros1 (0x07C0000) NAND: ros1 (0x07C0010)
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
007C0000  00 00 00 00 00 00 00 00 00 00 00 00 00 6F FF E0  .............oÿà
007C0010  00 00 00 01 00 00 00 16 00 00 00 00 00 6F FF E0  .............oÿà
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
007C0010  00 00 00 00 00 00 00 00 00 00 00 00 00 6F FF E0  .............oÿà
007C0020  00 00 00 01 00 00 00 17 00 00 00 00 00 6F FF E0  .............oÿà
structure
Address Length Value Description
0x0 0x8 0x0 Unknown
0x8 0x8 0x0x6FFFE0 Length of Flash Region (relative to region start)
0x10 0x4 0x1 Unknown
0x14 0x4 0x16 Entry Count
0x18 0x8 0x0x6FFFE0 Length of Flash Region (relative to region start)
Entry Table

Then follows a 48 byte entry for each file

example
NOR: ros1 (0x07C0020) NAND: ros1 (0x07C0030)
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
007C0020  00 00 00 00 00 00 04 30 00 00 00 00 00 04 00 00  .......0........
007C0030  63 72 65 73 65 72 76 65 64 5F 30 00 00 00 00 00  creserved_0.....
007C0040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0050  00 00 00 00 00 04 04 30 00 00 00 00 00 00 00 08  .......0........
007C0060  73 64 6B 5F 76 65 72 73 69 6F 6E 00 00 00 00 00  sdk_version.....
007C0070  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0080  00 00 00 00 00 04 04 80 00 00 00 00 00 01 E5 CC  .......€......åÌ
007C0090  6C 76 31 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv1ldr..........
007C00A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C00B0  00 00 00 00 00 05 EA 80 00 00 00 00 00 01 6D B0  ......ê€......m°
007C00C0  6C 76 32 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv2ldr..........
007C00D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C00E0  00 00 00 00 00 07 58 80 00 00 00 00 00 01 2E 24  ......X€.......$
007C00F0  69 73 6F 6C 64 72 00 00 00 00 00 00 00 00 00 00  isoldr..........
007C0100  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0110  00 00 00 00 00 08 87 00 00 00 00 00 00 01 DA 04  ......‡.......Ú.
007C0120  61 70 70 6C 64 72 00 00 00 00 00 00 00 00 00 00  appldr..........
007C0130  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0140  00 00 00 00 00 0A 61 04 00 00 00 00 00 00 FA B4  ......a.......ú´
007C0150  73 70 75 5F 70 6B 67 5F 72 76 6B 5F 76 65 72 69  spu_pkg_rvk_veri
007C0160  66 69 65 72 2E 73 65 6C 66 00 00 00 00 00 00 00  fier.self.......
007C0170  00 00 00 00 00 0B 5B B8 00 00 00 00 00 00 5B FC  ......[¸......[ü
007C0180  73 70 75 5F 74 6F 6B 65 6E 5F 70 72 6F 63 65 73  spu_token_proces
007C0190  73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00 00  sor.self........
007C01A0  00 00 00 00 00 0B B7 B4 00 00 00 00 00 00 65 B4  ......·´......e´
007C01B0  73 70 75 5F 75 74 6F 6B 65 6E 5F 70 72 6F 63 65  spu_utoken_proce
007C01C0  73 73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00  ssor.self.......
007C01D0  00 00 00 00 00 0C 1D 68 00 00 00 00 00 01 53 2C  .......h......S,
007C01E0  73 63 5F 69 73 6F 2E 73 65 6C 66 00 00 00 00 00  sc_iso.self.....
007C01F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0200  00 00 00 00 00 0D 70 94 00 00 00 00 00 00 44 80  ......p”......D€
007C0210  61 69 6D 5F 73 70 75 5F 6D 6F 64 75 6C 65 2E 73  aim_spu_module.s
007C0220  65 6C 66 00 00 00 00 00 00 00 00 00 00 00 00 00  elf.............
007C0230  00 00 00 00 00 0D B5 14 00 00 00 00 00 00 D7 44  ......µ.......×D
007C0240  73 70 70 5F 76 65 72 69 66 69 65 72 2E 73 65 6C  spp_verifier.sel
007C0250  66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  f...............
007C0260  00 00 00 00 00 0E 8C 58 00 00 00 00 00 00 80 8C  ......ŒX......€Œ
007C0270  6D 63 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  mc_iso_spu_modul
007C0280  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
007C0290  00 00 00 00 00 0F 0C E4 00 00 00 00 00 00 88 B8  .......ä......ˆ¸
007C02A0  6D 65 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  me_iso_spu_modul
007C02B0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
007C02C0  00 00 00 00 00 0F 95 9C 00 00 00 00 00 00 C0 78  ......•œ......Àx
007C02D0  73 76 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sv_iso_spu_modul
007C02E0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
007C02F0  00 00 00 00 00 10 56 14 00 00 00 00 00 00 5D B0  ......V.......]°
007C0300  73 62 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sb_iso_spu_modul
007C0310  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
007C0320  00 00 00 00 00 10 B3 C4 00 00 00 00 00 00 22 A0  ......³Ä......" 
007C0330  64 65 66 61 75 6C 74 2E 73 70 70 00 00 00 00 00  default.spp.....
007C0340  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0350  00 00 00 00 00 10 D6 80 00 00 00 00 00 12 E1 60  ......Ö€......á`
007C0360  6C 76 31 2E 73 65 6C 66 00 00 00 00 00 00 00 00  lv1.self........
007C0370  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0380  00 00 00 00 00 23 B8 00 00 00 00 00 00 03 E3 58  .....#¸.......ãX
007C0390  6C 76 30 00 00 00 00 00 00 00 00 00 00 00 00 00  lv0.............
007C03A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C03B0  00 00 00 00 00 27 9B 58 00 00 00 00 00 16 19 80  .....'›X.......€
007C03C0  6C 76 32 5F 6B 65 72 6E 65 6C 2E 73 65 6C 66 00  lv2_kernel.self.
007C03D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C03E0  00 00 00 00 00 3D B4 D8 00 00 00 00 00 07 09 F0  .....=´Ø.......ð
007C03F0  65 75 72 75 73 5F 66 77 2E 62 69 6E 00 00 00 00  eurus_fw.bin....
007C0400  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0410  00 00 00 00 00 44 BE C8 00 00 00 00 00 08 1B 30  .....D¾È.......0
007C0420  65 6D 65 72 5F 69 6E 69 74 2E 73 65 6C 66 00 00  emer_init.self..
007C0430  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
007C0030  00 00 00 00 00 00 04 60 00 00 00 00 00 04 00 00  .......`........
007C0040  63 72 65 73 65 72 76 65 64 5F 30 00 00 00 00 00  creserved_0.....
007C0050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0060  00 00 00 00 00 04 04 60 00 00 00 00 00 00 00 08  .......`........
007C0070  73 64 6B 5F 76 65 72 73 69 6F 6E 00 00 00 00 00  sdk_version.....
007C0080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0090  00 00 00 00 00 04 04 68 00 00 00 00 00 00 FB 4C  .......h......ûL
007C00A0  73 70 75 5F 70 6B 67 5F 72 76 6B 5F 76 65 72 69  spu_pkg_rvk_veri
007C00B0  66 69 65 72 2E 73 65 6C 66 00 00 00 00 00 00 00  fier.self.......
007C00C0  00 00 00 00 00 04 FF B4 00 00 00 00 00 00 C9 30  ......ÿ´......É0
007C00D0  73 70 75 5F 74 6F 6B 65 6E 5F 70 72 6F 63 65 73  spu_token_proces
007C00E0  73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00 00  sor.self........
007C00F0  00 00 00 00 00 05 C8 E4 00 00 00 00 00 00 63 D0  ......Èä......cÐ
007C0100  73 70 75 5F 75 74 6F 6B 65 6E 5F 70 72 6F 63 65  spu_utoken_proce
007C0110  73 73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00  ssor.self.......
007C0120  00 00 00 00 00 06 2C B4 00 00 00 00 00 01 D2 D8  ......,´......ÒØ
007C0130  73 63 5F 69 73 6F 2E 73 65 6C 66 00 00 00 00 00  sc_iso.self.....
007C0140  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0150  00 00 00 00 00 07 FF 8C 00 00 00 00 00 00 42 98  ......ÿŒ......B˜
007C0160  61 69 6D 5F 73 70 75 5F 6D 6F 64 75 6C 65 2E 73  aim_spu_module.s
007C0170  65 6C 66 00 00 00 00 00 00 00 00 00 00 00 00 00  elf.............
007C0180  00 00 00 00 00 08 42 24 00 00 00 00 00 00 D7 F0  ......B$......×ð
007C0190  73 70 70 5F 76 65 72 69 66 69 65 72 2E 73 65 6C  spp_verifier.sel
007C01A0  66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  f...............
007C01B0  00 00 00 00 00 09 1A 14 00 00 00 00 00 00 80 8C  ..............€Œ
007C01C0  6D 63 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  mc_iso_spu_modul
007C01D0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
007C01E0  00 00 00 00 00 09 9A A0 00 00 00 00 00 00 88 B8  ......š ......ˆ¸
007C01F0  6D 65 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  me_iso_spu_modul
007C0200  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
007C0210  00 00 00 00 00 0A 23 58 00 00 00 00 00 00 C0 78  ......#X......Àx
007C0220  73 76 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sv_iso_spu_modul
007C0230  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
007C0240  00 00 00 00 00 0A E3 D0 00 00 00 00 00 00 5D B0  ......ãÐ......]°
007C0250  73 62 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sb_iso_spu_modul
007C0260  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
007C0270  00 00 00 00 00 0B 41 80 00 00 00 00 00 00 22 A0  ......A€......" 
007C0280  64 65 66 61 75 6C 74 2E 73 70 70 00 00 00 00 00  default.spp.....
007C0290  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C02A0  00 00 00 00 00 0B 64 80 00 00 00 00 00 12 5E F0  ......d€......^ð
007C02B0  6C 76 31 2E 73 65 6C 66 00 00 00 00 00 00 00 00  lv1.self........
007C02C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C02D0  00 00 00 00 00 1D C3 80 00 00 00 00 00 0B 54 E8  ......À......Tè
007C02E0  6C 76 30 00 00 00 00 00 00 00 00 00 00 00 00 00  lv0.............
007C02F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0300  00 00 00 00 00 29 18 80 00 00 00 00 00 00 05 00  .....).€........
007C0310  6C 76 30 2E 32 00 00 00 00 00 00 00 00 00 00 00  lv0.2...........
007C0320  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0330  00 00 00 00 00 29 1D 80 00 00 00 00 00 17 89 58  .....).€......‰X
007C0340  6C 76 32 5F 6B 65 72 6E 65 6C 2E 73 65 6C 66 00  lv2_kernel.self.
007C0350  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0360  00 00 00 00 00 40 A6 D8 00 00 00 00 00 07 0F 94  .....@¦Ø.......”
007C0370  65 75 72 75 73 5F 66 77 2E 62 69 6E 00 00 00 00  eurus_fw.bin....
007C0380  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0390  00 00 00 00 00 47 B6 6C 00 00 00 00 00 07 E2 68  .....G¶l......âh
007C03A0  65 6D 65 72 5F 69 6E 69 74 2E 73 65 6C 66 00 00  emer_init.self..
007C03B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C03C0  00 00 00 00 00 4F 98 D4 00 00 00 00 00 06 18 18  .....O˜Ô........
007C03D0  68 64 64 5F 63 6F 70 79 2E 73 65 6C 66 00 00 00  hdd_copy.self...
007C03E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C03F0  00 00 00 00 00 55 B0 EC 00 00 00 00 00 00 12 A8  .....U°ì.......¨
007C0400  6D 61 6E 75 5F 69 6E 66 6F 5F 73 70 75 5F 6D 6F  manu_info_spu_mo
007C0410  64 75 6C 65 2E 73 65 6C 66 00 00 00 00 00 00 00  dule.self.......
007C0420  00 00 00 00 00 55 C3 94 00 00 00 00 00 00 02 E0  .....UÔ.......à
007C0430  70 72 6F 67 2E 73 72 76 6B 00 00 00 00 00 00 00  prog.srvk.......
007C0440  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
007C0450  00 00 00 00 00 55 C6 74 00 00 00 00 00 00 02 40  .....UÆt.......@
007C0460  70 6B 67 2E 73 72 76 6B 00 00 00 00 00 00 00 00  pkg.srvk........
007C0470  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
structure
Address Length Value Description
0x0 0x8 0x430 File offset relative to Region start
0x8 0x8 0x40000 File length
0x10 0x32 char[32]:"creserved_0" File name

cvtrm

size: 0x40000
Location NOR: 0xEC0000 - 0xEFFFFF

example

NOR: cvtrm (0xEC0000 - 0xEFFFFF) NAND: cvtrm (0xEC0000 - 0xEFFFFF) NAND: cvtrm (0xEC0000 - 0xEFFFFF)
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00EC0000  53 43 45 49 FF FF FF FF FF FF FF FF FF FF FF FF  SCEIÿÿÿÿÿÿÿÿÿÿÿÿ
00EC0010  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
...
00EC3FF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00EC4000  00 00 00 00 56 54 52 4D 00 00 00 00 00 00 00 04  ....VTRM........
00EC4010  0D 20 53 4F EE E8 06 E3 E7 AC 57 E1 E9 64 6C BF  . SOîè.ãç¬Wáédl¿
00EC4020  ED BE 69 E1 00 00 00 E0 00 00 00 00 00 00 02 09  í¾iá...à........
00EC4030  00 00 00 00 00 00 04 12 00 00 00 00 00 00 00 02  ................
00EC4040  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4050  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4060  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4070  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4080  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4090  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC40A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC40B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC40C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC40D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC40E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC40F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4100  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4110  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4120  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4130  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4140  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4150  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4160  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4170  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4180  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4190  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC41A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC41B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC41C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC41D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC41E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC41F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4200  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4210  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4220  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4230  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4240  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4250  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4260  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4270  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4280  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4290  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC42A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC42B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC42C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC42D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC42E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC42F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4300  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4310  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4320  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4330  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4340  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4350  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4360  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4370  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4380  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4390  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC43A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC43B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC43C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC43D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC43E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC43F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4400  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4410  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4420  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4430  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4440  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4450  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4460  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4470  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4480  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4490  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC44A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC44B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC44C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC44D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC44E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC44F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4500  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4510  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4520  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4530  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4540  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4550  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4560  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4570  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4580  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4590  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC45A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC45B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC45C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 00 01  ................
00EC45D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC45E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC45F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4600  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4610  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4620  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4630  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4640  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4650  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4660  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4670  00 00 00 00 00 00 04 12 00 00 00 00 00 00 00 00  ................
00EC4680  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4690  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC46A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC46B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC46C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC46D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC46E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC46F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4700  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4710  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4720  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4730  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4740  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4750  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4760  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4770  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4780  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4790  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC47A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC47B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC47C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC47D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC47E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC47F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4800  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4810  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4820  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4830  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4840  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4850  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4860  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4870  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4880  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4890  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC48A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC48B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC48C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC48D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC48E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC48F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4900  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4910  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4920  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4930  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4940  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4950  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4960  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4970  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4980  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4990  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC49A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC49B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC49C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC49D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC49E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC49F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4A00  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4A10  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4A20  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4A30  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4A40  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4A50  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4A60  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4A70  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4A80  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4A90  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4AA0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4AB0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4AC0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4AD0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4AE0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4AF0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4B00  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4B10  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4B20  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4B30  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4B40  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4B50  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4B60  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4B70  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4B80  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4B90  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4BA0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4BB0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4BC0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4BD0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4BE0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4BF0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4C00  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4C10  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4C20  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4C30  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4C40  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4C50  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4C60  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4C70  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4C80  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4C90  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4CA0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4CB0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4CC0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4CD0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4CE0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4CF0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4D00  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4D10  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4D20  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4D30  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4D40  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4D50  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4D60  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4D70  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4D80  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4D90  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4DA0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4DB0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4DC0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4DD0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4DE0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4DF0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4E00  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4E10  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4E20  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4E30  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4E40  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4E50  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4E60  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4E70  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4E80  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4E90  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4EA0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4EB0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4EC0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4ED0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4EE0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4EF0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4F00  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4F10  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4F20  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4F30  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4F40  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4F50  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4F60  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4F70  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4F80  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4F90  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4FA0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4FB0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4FC0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4FD0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4FE0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC4FF0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC5000  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC5010  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC5020  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC5030  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC5040  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC5050  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC5060  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC5070  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC5080  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EC5090  10 70 00 00 02 00 00 01 10 70 00 00 39 00 00 01  .p.......p..9...
00EC50A0  D5 ED B4 4B 73 E2 79 5D CF E7 06 7F 4B 79 4C DC  Õí´Ksây]Ïç..KyLÜ
00EC50B0  71 D1 B8 F7 0A 3F CE 1B 09 8B 59 47 7A 1D 2C E4  qѸ÷.?Î..‹YGz.,ä
00EC50C0  69 B2 CF 18 8A B9 04 7E 29 71 A1 2D D8 71 54 01  i²Ï.Š¹.~)q¡-ØqT.
00EC50D0  5B D2 55 4F EB C4 41 41 80 A3 60 A7 75 DA D8 11  [ÒUOëÄAA€£`§uÚØ.
00EC50E0  00 00 00 00 00 00 00 01 00 00 00 00 00 00 04 12  ................
00EC50F0  04 00 00 00 02 00 00 05 10 70 00 05 FF 00 00 01  .........p..ÿ...
00EC5100  0C FF 20 DC A4 6A A1 D3 BC 36 82 17 C2 7B B5 5E  .ÿ ܤj¡Ó¼6‚.Â{µ^
00EC5110  9B CD 6B 71 AB 41 06 2F 84 54 3F 6B AC E1 26 3E  ›Íkq«A./„T?k¬á&>
00EC5120  A6 5A F4 AA E6 08 53 E0 71 A4 7D 43 2D 54 D4 F8  ¦Zôªæ.Sàq¤}C-TÔø
00EC5130  5A 21 9B E6 D9 82 6B DB 1C 08 A1 F1 21 E0 F7 A4  Z!›æÙ‚kÛ..¡ñ!à÷¤
00EC5140  00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF  ........ÿÿÿÿÿÿÿÿ
00EC5150  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
...
00EDD740                          EF 73 1D 7F 83 F3 DB 0F          ïs..ƒóÛ.
00EDD750  E1 69 26 44 E7 23 5C 88 C7 7C 9B 81              ái&Dç#\ˆÇ|›.
.... (0x14 byte sequence repeated 208 times total in blocksize 0x28B3)
00EDFFE0                          EF 73 1D 7F 83 F3 DB 0F          ïs..ƒóÛ.
00EDFFF0  E1 69 26 44 E7 23 5C 88 C7 7C 9B 81              ái&Dç#\ˆÇ|›.
00EDFFF0                                      FF FF FF FF              ÿÿÿÿ
00EE0000  00 00 00 00 FF FD FF FF FF FF FF FF FF FF FF FF  ....ÿýÿÿÿÿÿÿÿÿÿÿ
00EE0010  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
00EE4000  00 00 00 00 56 54 52 4D 00 00 00 00 00 00 00 04  ....VTRM........
00EE4010  93 66 A8 50 90 4F 4E 9E FC AA 0C 0C 90 8B 96 DD  “f¨P.ONžüª...‹–Ý
00EE4020  0E 14 91 99 00 00 00 E0 00 00 00 00 00 00 02 09  ..‘™...à........
00EE4030  00 00 00 00 00 00 04 12 00 00 00 00 00 00 00 02  ................
00EE4040  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4050  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4060  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4070  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4080  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4090  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE40A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE40B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE40C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE40D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE40E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE40F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4100  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4110  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4120  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4130  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4140  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4150  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4160  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4170  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4180  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4190  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE41A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE41B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE41C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE41D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE41E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE41F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4200  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4210  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4220  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4230  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4240  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4250  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4260  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4270  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4280  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4290  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE42A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE42B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE42C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE42D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE42E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE42F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4300  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4310  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4320  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4330  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4340  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4350  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4360  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4370  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4380  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4390  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE43A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE43B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE43C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE43D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE43E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE43F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4400  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4410  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4420  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4430  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4440  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4450  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4460  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4470  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4480  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4490  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE44A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE44B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE44C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE44D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE44E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE44F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4500  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4510  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4520  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4530  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4540  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4550  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4560  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4570  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4580  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4590  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE45A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE45B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE45C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 00 01  ................
00EE45D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE45E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE45F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4600  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4610  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4620  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4630  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4640  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4650  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4660  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4670  00 00 00 00 00 00 04 12 00 00 00 00 00 00 00 00  ................
00EE4680  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4690  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE46A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE46B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE46C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE46D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE46E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE46F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4700  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4710  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4720  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4730  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4740  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4750  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4760  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4770  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4780  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4790  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE47A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE47B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE47C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE47D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE47E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE47F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4800  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4810  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4820  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4830  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4840  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4850  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4860  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4870  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4880  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4890  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE48A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE48B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE48C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE48D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE48E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE48F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4900  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4910  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4920  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4930  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4940  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4950  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4960  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4970  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4980  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4990  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE49A0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE49B0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE49C0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE49D0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE49E0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE49F0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4A00  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4A10  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4A20  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4A30  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4A40  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4A50  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4A60  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4A70  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4A80  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4A90  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4AA0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4AB0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4AC0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4AD0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4AE0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4AF0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4B00  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4B10  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4B20  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4B30  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4B40  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4B50  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4B60  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4B70  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4B80  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4B90  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4BA0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4BB0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4BC0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4BD0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4BE0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4BF0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4C00  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4C10  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4C20  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4C30  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4C40  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4C50  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4C60  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4C70  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4C80  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4C90  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4CA0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4CB0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4CC0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4CD0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4CE0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4CF0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4D00  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4D10  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4D20  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4D30  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4D40  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4D50  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4D60  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4D70  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4D80  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4D90  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4DA0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4DB0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4DC0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4DD0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4DE0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4DF0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4E00  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4E10  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4E20  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4E30  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4E40  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4E50  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4E60  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4E70  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4E80  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4E90  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4EA0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4EB0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4EC0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4ED0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4EE0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4EF0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4F00  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4F10  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4F20  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4F30  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4F40  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4F50  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4F60  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4F70  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4F80  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4F90  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4FA0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4FB0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4FC0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4FD0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4FE0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE4FF0  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE5000  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE5010  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE5020  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE5030  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE5040  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE5050  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE5060  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE5070  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE5080  00 00 00 00 00 00 04 12 00 00 00 00 00 00 04 12  ................
00EE5090  10 70 00 00 02 00 00 01 10 70 00 00 39 00 00 01  .p.......p..9...
00EE50A0  D8 71 79 C4 C0 2B 74 A1 C9 50 AC 82 4D 94 4A D0  ØqyÄÀ+t¡ÉP¬‚M”JÐ
00EE50B0  63 85 24 87 7D 4D 0D E4 9A 29 E6 6F 4B FA B7 19  c…$‡}M.äš)æoKú·.
00EE50C0  53 F2 E7 DA 64 F5 31 61 FC EC 44 41 A5 AC 10 C2  SòçÚdõ1aüìDA¥¬.Â
00EE50D0  2A D2 D4 18 E7 2F BA 15 79 8E D9 C1 64 4A 6C 91  *ÒÔ.ç/º.yŽÙÁdJl‘
00EE50E0  00 00 00 00 00 00 00 01 00 00 00 00 00 00 04 12  ................
00EE50F0  04 00 00 00 02 00 00 05 10 70 00 05 FF 00 00 01  .........p..ÿ...
00EE5100  0C FF 20 DC A4 6A A1 D3 BC 36 82 17 C2 7B B5 5E  .ÿ ܤj¡Ó¼6‚.Â{µ^
00EE5110  9B CD 6B 71 AB 41 06 2F 84 54 3F 6B AC E1 26 3E  ›Íkq«A./„T?k¬á&>
00EE5120  A6 5A F4 AA E6 08 53 E0 71 A4 7D 43 2D 54 D4 F8  ¦Zôªæ.Sàq¤}C-TÔø
00EE5130  5A 21 9B E6 D9 82 6B DB 1C 08 A1 F1 21 E0 F7 A4  Z!›æÙ‚kÛ..¡ñ!à÷¤
00EE5140  00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF  ........ÿÿÿÿÿÿÿÿ
00EE5150  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
00EFD740                          EF 73 1D 7F 83 F3 DB 0F          ïs..ƒóÛ.
00EFD750  E1 69 26 44 E7 23 5C 88 C7 7C 9B 81              ái&Dç#\ˆÇ|›.
 (0x14 byte sequence repeated 209 times total in blocksize 0x28BF)
00EFFFE0                          EF 73 1D 7F 83 F3 DB 0F          ïs..ƒóÛ.
00EFFFF0  E1 69 26 44 E7 23 5C 88 C7 7C 9B 81              ái&Dç#\ˆÇ|›.
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00EC0000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00EC0010  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
....
00F7FFE0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F7FFF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
00EC0000  53 43 45 49 56 54 52 4D 00 00 00 00 00 00 00 A8  SCEIVTRM.......¨
00EC0010  00 00 00 00 00 E8 02 00 00 00 00 00 00 00 00 28  .....è.........(
00EC0020  00 00 00 00 56 54 52 4D 00 00 00 00 00 00 00 04  ....VTRM........
00EC0030  FE 6D 0B C4 FA D5 CE DB 93 86 FC A1 32 3B 71 47  þm.ÄúÕÎÛ“†ü¡2;qG
00EC0040  3B A5 C6 F9 C0 00 B6 70 00 00 00 00 00 E8 27 80  ;¥ÆùÀ.¶p.....è'€
00EC0050  00 00 00 00 00 00 00 60 00 00 00 00 00 00 09 20  .......`....... 
00EC0060  04 00 00 00 02 00 00 05 10 70 00 05 FF 00 00 01  .........p..ÿ...
00EC0070  0C 1C 05 9C AA B5 97 A5 9C D6 46 2D EA 22 46 BE  ...œªµ—¥œÖF-ê"F¾
00EC0080  D1 84 A9 1E 34 5F E7 90 55 49 11 82 51 9D 4A 3F  Ñ„©.4_ç.UI.‚Q.J?
00EC0090  EF 43 19 E8 4F 6A 5B FF DA 31 E9 F0 76 C8 B2 6B  ïC.èOj[ÿÚ1éðvȲk
00EC00A0  0B A7 47 8E BE 42 28 9F 2B 88 73 0B A5 B6 F2 1D  .§GŽ¾B(Ÿ+ˆs.¥¶ò.
00EC00B0  00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF  ........ÿÿÿÿÿÿÿÿ
00EC00C0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00EC00D0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00EC00E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00EC00F0  FF FF FF FF FF FF FF FF 00 00 00 00 00 EB E4 8C  ÿÿÿÿÿÿÿÿ.....ëäŒ
00EC0100  00 00 00 00 00 00 00 14 39 17 52 0B 31 70 F5 05  ........9.R.1põ.
00EC0110  02 5A C6 F8 81 F8 54 96 2F EF F3 81 FF FF FF FF  .ZÆø.øT–/ïó.ÿÿÿÿ
00EC0120  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
00EC0400  00 00 00 00 56 54 52 4D 00 00 00 00 00 00 00 04  ....VTRM........
00EC0410  FE 6D 0B C4 FA D5 CE DB 93 86 FC A1 32 3B 71 47  þm.ÄúÕÎÛ“†ü¡2;qG
00EC0420  3B A5 C6 F9 C0 00 B6 70 00 00 00 00 00 00 04 90  ;¥ÆùÀ.¶p........
00EC0430  00 00 00 00 00 00 09 20 00 00 00 00 00 00 00 03  ....... ........
00EC0440  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0450  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0460  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0470  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0480  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0490  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC04A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC04B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC04C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC04D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC04E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC04F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0500  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0510  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0520  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0530  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0540  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0550  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0560  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0570  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0580  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0590  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC05A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC05B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC05C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC05D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC05E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC05F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0600  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0610  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0620  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0630  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0640  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0650  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0660  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0670  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0680  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0690  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC06A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC06B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC06C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC06D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC06E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC06F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0700  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0710  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0720  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0730  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0740  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0750  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0760  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0770  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0780  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0790  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC07A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC07B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC07C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC07D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC07E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC07F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0800  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0810  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0820  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0830  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0840  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0850  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0860  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0870  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0880  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0890  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC08A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC08B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC08C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC08D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC08E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC08F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0900  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0910  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0920  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0930  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0940  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0950  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0960  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0970  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0980  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0990  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC09A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC09B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC09C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC09D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC09E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC09F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0A00  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0A10  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0A20  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0A30  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0A40  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0A50  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0A60  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0A70  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0A80  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0A90  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0AA0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0AB0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0AC0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0AD0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0AE0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0AF0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0B00  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0B10  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0B20  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0B30  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0B40  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0B50  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0B60  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0B70  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0B80  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0B90  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0BA0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0BB0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0BC0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0BD0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0BE0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0BF0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0C00  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0C10  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0C20  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0C30  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0C40  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0C50  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0C60  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0C70  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0C80  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0C90  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0CA0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0CB0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0CC0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0CD0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0CE0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0CF0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0D00  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0D10  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0D20  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0D30  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0D40  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0D50  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0D60  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0D70  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0D80  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0D90  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0DA0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0DB0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0DC0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0DD0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0DE0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0DF0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0E00  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0E10  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0E20  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0E30  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0E40  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0E50  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0E60  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0E70  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0E80  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0E90  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0EA0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0EB0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0EC0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0ED0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0EE0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0EF0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0F00  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0F10  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0F20  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0F30  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0F40  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0F50  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0F60  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0F70  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0F80  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0F90  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0FA0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0FB0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0FC0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0FD0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0FE0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC0FF0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1000  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1010  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1020  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1030  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1040  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1050  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1060  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1070  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1080  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1090  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC10A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC10B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC10C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC10D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC10E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC10F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1100  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1110  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1120  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1130  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1140  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1150  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1160  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1170  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1180  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1190  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC11A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC11B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC11C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC11D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC11E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC11F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1200  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1210  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1220  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1230  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1240  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1250  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1260  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1270  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1280  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1290  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC12A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC12B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC12C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC12D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC12E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC12F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1300  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1310  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1320  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1330  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1340  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1350  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1360  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1370  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1380  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1390  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC13A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC13B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC13C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC13D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC13E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC13F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1400  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1410  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1420  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1430  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1440  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1450  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1460  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1470  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1480  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1490  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC14A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC14B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC14C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC14D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC14E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC14F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1500  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1510  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1520  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1530  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1540  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1550  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1560  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1570  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1580  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1590  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC15A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC15B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC15C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC15D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC15E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC15F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1600  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1610  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1620  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1630  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1640  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1650  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1660  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1670  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1680  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1690  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC16A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC16B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC16C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC16D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC16E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC16F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1700  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1710  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1720  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1730  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1740  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1750  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1760  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1770  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1780  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1790  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC17A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC17B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC17C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC17D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC17E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC17F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1800  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1810  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1820  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1830  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1840  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1850  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1860  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1870  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1880  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1890  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC18A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC18B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC18C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC18D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC18E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC18F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1900  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1910  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1920  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1930  00 00 00 00 00 00 00 01 00 00 00 00 00 00 09 20  ............... 
00EC1940  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1950  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1960  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1970  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1980  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1990  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC19A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC19B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC19C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC19D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC19E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC19F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1A00  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1A10  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1A20  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1A30  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1A40  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1A50  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1A60  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1A70  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1A80  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1A90  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1AA0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1AB0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1AC0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1AD0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1AE0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1AF0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1B00  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1B10  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1B20  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1B30  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1B40  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1B50  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1B60  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1B70  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1B80  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1B90  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1BA0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1BB0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1BC0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1BD0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1BE0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1BF0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1C00  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1C10  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1C20  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1C30  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1C40  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1C50  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1C60  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1C70  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1C80  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1C90  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1CA0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1CB0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1CC0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1CD0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1CE0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1CF0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1D00  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1D10  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1D20  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1D30  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1D40  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1D50  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1D60  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1D70  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1D80  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1D90  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1DA0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1DB0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1DC0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1DD0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1DE0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1DF0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1E00  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1E10  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1E20  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1E30  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1E40  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1E50  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1E60  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1E70  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1E80  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1E90  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1EA0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1EB0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1EC0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1ED0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1EE0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1EF0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1F00  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1F10  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1F20  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1F30  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1F40  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1F50  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1F60  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1F70  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1F80  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1F90  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1FA0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1FB0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1FC0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1FD0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1FE0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC1FF0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2000  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2010  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2020  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2030  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2040  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2050  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2060  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2070  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2080  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2090  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC20A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC20B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC20C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC20D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC20E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC20F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2100  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2110  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2120  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2130  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2140  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2150  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2160  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2170  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2180  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2190  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC21A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC21B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC21C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC21D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC21E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC21F0  00 00 00 00 00 00 00 02 00 00 00 00 00 00 09 20  ............... 
00EC2200  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2210  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2220  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2230  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2240  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2250  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2260  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2270  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2280  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2290  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC22A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC22B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC22C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC22D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC22E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC22F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2300  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2310  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2320  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2330  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2340  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2350  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2360  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2370  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2380  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2390  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC23A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC23B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC23C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC23D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC23E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC23F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2400  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2410  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2420  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2430  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2440  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2450  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2460  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2470  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2480  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2490  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC24A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC24B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC24C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC24D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC24E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC24F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 00 00  ....... ........
00EC2500  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2510  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2520  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2530  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2540  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2550  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2560  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2570  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2580  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2590  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC25A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC25B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC25C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC25D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC25E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC25F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2600  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2610  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2620  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2630  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2640  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2650  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2660  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2670  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2680  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2690  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC26A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC26B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC26C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC26D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC26E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC26F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2700  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2710  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2720  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2730  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2740  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2750  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2760  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2770  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2780  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2790  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC27A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC27B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC27C0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC27D0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC27E0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC27F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2800  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2810  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2820  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2830  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2840  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2850  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2860  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2870  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2880  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC2890  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC28A0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC28B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... ....... 
00EC28C0  00 00 00 00 00 00 09 20 10 70 00 00 02 00 00 01  ....... .p......
00EC28D0  10 70 00 00 39 00 00 01 22 66 39 B3 0E 7A 1C E7  .p..9..."f9³.z.ç
00EC28E0  68 85 F9 94 A8 30 BE C4 0B 85 D0 92 1E C0 8F 28  h…ù”¨0¾Ä.…Ð’.À.(
00EC28F0  7F 70 ED 15 D6 22 06 24 D9 08 64 0B C0 D7 97 29  .pí.Ö".$Ù.d.À×—)
00EC2900  BE A1 FE 91 D1 F2 D4 88 25 EF 24 86 E0 A3 CB 98  ¾¡þ‘ÑòÔˆ%ï$†à£Ë˜
00EC2910  AF 17 6F B1 64 A0 56 E5 00 00 00 00 00 00 00 01  ¯.o±d Vå........
00EC2920  00 00 00 00 00 00 09 20 10 70 00 00 02 00 00 01  ....... .p......
00EC2930  10 70 00 00 03 00 00 02 F9 D9 6A 84 0C F2 D8 E7  .p......ùÙj„.òØç
00EC2940  D4 44 5C 3C DF D5 DF 0F B8 DC 3E 81 9A A4 71 8F  ÔD\<ßÕß.¸Ü>.š¤q.
00EC2950  0A A8 8B 90 1B 2C A1 D1 66 84 AA EE 65 D1 46 9A  .¨‹..,¡Ñf„ªîeÑFš
00EC2960  D7 38 83 F2 78 47 D1 8E E5 FA EB 39 CF 26 E8 25  ×8ƒòxGÑŽåúë9Ï&è%
00EC2970  85 DE 3B C6 0B C3 45 D5 00 00 00 00 00 00 00 00  …Þ;Æ.ÃEÕ........
00EC2980  00 00 00 00 00 00 09 20 04 00 00 00 02 00 00 05  ....... ........
00EC2990  10 70 00 05 FF 00 00 01 0C 1C 05 9C AA B5 97 A5  .p..ÿ......œªµ—¥
00EC29A0  9C D6 46 2D EA 22 46 BE D1 84 A9 1E 34 5F E7 90  œÖF-ê"F¾Ñ„©.4_ç.
00EC29B0  55 49 11 82 51 9D 4A 3F EF 43 19 E8 4F 6A 5B FF  UI.‚Q.J?ïC.èOj[ÿ
00EC29C0  DA 31 E9 F0 76 C8 B2 6B 0B A7 47 8E BE 42 28 9F  Ú1éðvȲk.§GŽ¾B(Ÿ
00EC29D0  2B 88 73 0B A5 B6 F2 1D 00 00 00 00 00 00 00 00  +ˆs.¥¶ò.........
00EC29E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00EC29F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
00EF94C0  39 17 52 0B 31 70 F5 05 02 5A C6 F8 81 F8 54 96  9.R.1põ..ZÆø.øT–
00EF94D0  2F EF F3 81                                      /ïó.
... (0x14 byte sequence repeated 1168 times total in blocksize 0x5B40)
00EFEFE0                                      39 17 52 0B              9.R.
00EFEFF0  31 70 F5 05 02 5A C6 F8 81 F8 54 96 2F EF F3 81  1põ..ZÆø.øT–/ïó.
00EFF000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00EFF010  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
.... (unused / 00-filled)
00EFFFE0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00EFFFF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Second Region

NOR only: 0x0F00000 - 0x0F00020
This region appears to directly follow the other region (at 0xF0000 = region size + header)
Not much is known about this at this stage.

On NAND consoles without OtherOS the block 0x0F00000 - 0x0F7FFFF is zero filled
On NAND consoles with OtherOS the block 0x0F00000 - 0x0F00FFF is filled with data

Header - 0FACE0FF DEADFACE

example

NOR: 0x0F00000 - 0x0F00020 NAND:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00F00000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F00010  00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD FA CE  .....¬àÿ....Þ­úÎ
00F00020  00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 02  ................
N.A.

structure

Address Length Value Description
0x00 0x10 0x0 Blank/Unknown
0x10 0x10 0x0FACE0FF 0xDEADFACE Magic number
0x20 0x8 0x3 Unknown
0x28 0x8 0x2 Unknown

00 filled block

example

NOR: 0x0F00030 - 0x0F000BF NAND:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
00F00030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
.... (00 filled block)
00F000B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
N.A.

structure

Address Length Value Description
0x30 0x90 0x0 Blank/Unknown

Unknown block

example

NOR: 0x0F000C0 - 0x0F000EF NAND:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
00F000C0  00 00 00 00 00 00 79 00 00 00 00 00 00 00 01 00  ......y.........
00F000D0  10 70 00 00 01 00 00 01 00 00 00 00 00 00 00 03  .p..............
00F000E0  10 70 00 00 02 00 00 01 00 00 00 00 00 00 00 03  .p..............
N.A.

structure

Address Length Value Description
0xC0 0x8 0x7900 Unknown
0xC8 0x8 0x100 Unknown
0xD0 0x2 0x1070 Unknown
0xD2 0x2 0x0 Blank/Unknown
0xD4 0x2 0x100 Unknown
0xD6 0x2 0x1 Unknown
0xD8 0x8 0x3 Unknown
0xE0 0x2 0x1070 Unknown
0xE2 0x2 0x0 Blank/Unknown
0xE4 0x2 0x200 Unknown
0xE6 0x2 0x1 Unknown
0xE8 0x8 0x3 Unknown

00 filled block

example

NOR: 0x0F000F0 - 0x0F0014F NAND:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
00F000F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
.... (00 filled block)
00F00140  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
N.A.

structure

Address Length Value Description
0xF0 0x60 0x0 Blank/Unknown

Unknown block

example

NOR: 0x0F00150 - 0x0F0017F NAND:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00F00150  00 00 00 00 00 00 7A 00 00 00 00 00 00 00 04 00  ......z.........
00F00160  10 70 00 00 01 00 00 01 00 00 00 00 00 00 00 03  .p..............
00F00170  10 70 00 00 02 00 00 01 00 00 00 00 00 00 00 03  .p..............
N.A.

structure

Address Length Value Description
0xC0 0x8 0x7A00 Unknown
0xC8 0x8 0x400 Unknown
0xD0 0x2 0x1070 Unknown
0xD2 0x2 0x0 Blank/Unknown
0xD4 0x2 0x100 Unknown
0xD6 0x2 0x1 Unknown
0xD8 0x8 0x3 Unknown
0xE0 0x2 0x1070 Unknown
0xE2 0x2 0x0 Blank/Unknown
0xE4 0x2 0x200 Unknown
0xE6 0x2 0x1 Unknown
0xE8 0x8 0x3 Unknown

00 filled block

example

NOR: 0x0F00180 - 0x0F00FFF NAND:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
00F00180  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
.... (00 filled block)
00F00FF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
N.A.

structure

Address Length Value Description
0x180 0xE80 0x0 Blank/Unknown

unreferenced area

NOR+NAND : 0x0F01000 - 0x0F1FFFF

example

NOR: 0x0F01000 - 0x0F1FFFF NAND: 0x0F01000 - 0x0F1FFFF
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00F01000  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
00F1FFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00F01000  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
00F1FFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

structure

Address Length Value Description
0x1000 0x1F000 0xFF Blank/Unknown

CELL_EXTNOR_AREA

Only on NOR consoles
On NAND consoles the block 00F20000-00F3FFFF is FF (OtherOS) or 00 (No OtherOS) filled

Header

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
  
00F20000  43 45 4C 4C 5F 45 58 54 4E 4F 52 5F 41 52 45 41  CELL_EXTNOR_AREA      marker: CELL_EXTNOR_AREA

1

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
  
00F20010  00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F20020  00 00 02 00 00 00 00 44 00 00 00 00 A9 C8 06 D0  .......D....©È.Ð (sha1sum of 0x200 Harddrive Info)
00F20030  C0 17 8D 34 55 A7 62 73 DD 16 A6 FB 75 A0 D2 10  À..4U§bsÝ.¦ûu Ò.

00 filled

00F20040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F201F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Harddrive info

00F20200  00 00 00 07 46 55 4A 49 54 53 55 20 4D 48 5A 32  ....FUJITSU MHZ2      harddrive brand/model
00F20210  30 38 30 42 48 20 47 31 20 20 20 20 20 20 20 20  080BH G1        
00F20220  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                  
00F20230  20 20 20 20 4B 36 33 52 54 38 42 34 48 59 42 4B      K63RT8B4HYBK      harddrive serial

00 filled

00F20240  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F3FFF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

2

On NAND consoles with OtherOS the blocks

  • 0x0F40000 - 0x0F401FF
  • 0x0F42000 - 0xBAD51F0
  • 0xBAD6000 - 0xBAECDFF
  • 0xBAEE000 - 0xBAFD9FF
  • 0xBAFE000 etc.

are filled with data

00F40000  00 00 00 01 00 00 00 2C 6E 47 15 E8 38 9B C8 16  .......,nG.è8›È.      00F40000-00F40030      (same in other version/console dump)
00F40010  65 6E 0C 37 54 25 FE 7B 22 9A 31 75 72 22 63 2B  en.7T%þ{"š1ur"c+      is the same as
00F40020  31 DD 15 AA 60 7D EB F5 F7 A3 74 0B 9D DD 3B 3A  1Ý.ª`}ëõ÷£t..Ý;:      00F80000-00F80030

00 filled

00F40030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F5FFF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

3

00F60000  10 00 00 0C 00 04 10 03 00 00 00 01 20 00 00 34  ............ ..4      00F60000-00F60040      (differs in other version/console dump)
00F60010  00 00 00 00 00 00 00 00 5B 3F 73 B4 9A 86 C7 B2  ........[?s´š†Ç²      is the
00F60020  A0 D1 1E AF A7 9B 97 E2 7A CB 05 2B 4D 61 26 AE   Ñ.¯§›—âzË.+Ma&®      same as
00F60030  13 CA 29 84 19 93 15 E1 4A DB 2C B7 7C 00 E4 EB  .Ê)„.“.áJÛ,·|.äë      00FA0000-00FA0040

00 filled

00F60040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F69BF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

FF filled

00F69C00  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
[...]                                                                            all FF's
00F7FFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

4

00F80000  00 00 00 01 00 00 00 2C 6E 47 15 E8 38 9B C8 16  .......,nG.è8›È.      00F80000-00F80030      (same in other version/console dump)
00F80010  65 6E 0C 37 54 25 FE 7B 22 9A 31 75 72 22 63 2B  en.7T%þ{"š1ur"c+      is the same as
00F80020  31 DD 15 AA 60 7D EB F5 F7 A3 74 0B 9D DD 3B 3A  1Ý.ª`}ëõ÷£t..Ý;:      00F40000-00F40030

00 filled

00F80030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F9FFF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

5

00FA0000  10 00 00 0C 00 04 10 03 00 00 00 01 20 00 00 34  ............ ..4      00F60000-00F60040      (differs in other version/console dump)
00FA0010  00 00 00 00 00 00 00 00 5B 3F 73 B4 9A 86 C7 B2  ........[?s´š†Ç²      is the
00FA0020  A0 D1 1E AF A7 9B 97 E2 7A CB 05 2B 4D 61 26 AE   Ñ.¯§›—âzË.+Ma&®      same as
00FA0030  13 CA 29 84 19 93 15 E1 4A DB 2C B7 7C 00 E4 EB  .Ê)„.“.áJÛ,·|.äë      00F60000-00F60040

00 filled

00FA0040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00FA9BF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

FF filled

00FA9C00  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
[...]                                                                            all FF's with sometimes below 'OCRL0200' section inside it
00FBFFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

FF Filled with OCRL0200 section

NOR: 0x0FA9400 - 0x0FA952F NOR: 0x0F69400 - 0x0F6952F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00FA9400  4F 43 52 4C 30 32 30 30 00 00 00 00 00 00 00 00  OCRL0200........
00FA9410  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00FA9420  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00FA9430  A6 50 37 72 07 82 68 FE EA 9A A1 8C 54 19 2B E4  ¦P7r.‚hþêš¡ŒT.+ä
00FA9440  2F D8 85 BA 5F 2F AA ED AC 6B 54 FE 31 0B 80 58  /Ø…º_/ªí¬kTþ1.€X
00FA9450  A9 74 D4 ED F9 77 7B B2 30 50 47 F3 C0 12 AC 26  ©tÔíùw{²0PGóÀ.¬&
00FA9460  6A 40 AD 19 14 C2 AD 2C 92 36 02 78 50 D4 08 D4  j@­..­,’6.xPÔ.Ô
00FA9470  06 76 2C 97 0D 2A 7A 19 F4 85 01 6F CD C8 07 C3  .v,—.*z.ô….oÍÈ.Ã
00FA9480  25 2D F4 CD 46 2B FE F7 B8 0A 40 9F 97 22 06 5E  %-ôÍF+þ÷¸.@Ÿ—".^
00FA9490  4B F1 02 92 01 11 C1 E0 DD AC 84 0D 58 C2 21 66  Kñ.’..Áàݬ„.XÂ!f
00FA94A0  25 69 A4 1A C8 E9 DB 4C 5D 31 4E AF 07 2A 43 90  %i¤.ÈéÛL]1N¯.*C.
00FA94B0  3E DC 4A 80 FD A7 06 BB 1F 9B D4 75 6C 6C 45 CE  >ÜJ€ý§.».›ÔullEÎ
00FA94C0  1A A6 5D D1 9B E9 80 C2 72 CA A8 0B 14 C6 B2 86  .¦]Ñ›é€Ârʨ..Ʋ†
00FA94D0  E3 37 86 E6 AD DE 2C F9 76 3D 18 62 DD 77 AD 71  ã7†æ­Þ,ùv=.bÝw­q
00FA94E0  32 F1 11 FD 17 9E 68 50 B3 A5 7F 41 37 19 63 3A  2ñ.ý.žhP³¥.A7.c:
00FA94F0  78 08 19 4D CA 47 AD FF 35 89 52 3E 18 39 F5 A5  x..MÊG­ÿ5‰R>.9õ¥
00FA9500  4B 98 D6 C0 66 68 E0 CA 4B 9F 1A 42 1E A2 EE 79  K˜ÖÀfhàÊKŸ.B.¢îy
00FA9510  E6 58 6F FF 58 B1 FE 4F DB FD 27 6F 4C EC 6C 9F  æXoÿX±þOÛý'oLìlŸ
00FA9520  B4 B7 F8 9D 30 4A 1E 83 15 47 08 B6 FB 51 00 DA  ´·ø.0J.ƒ.G.¶ûQ.Ú
  • CECHL (VER-001) with ST98823AS drive (80GB) : ROS0: 2.80 / ROS1: 3.55
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00F69400  4F 43 52 4C 30 32 30 30 00 00 00 00 00 00 00 00  OCRL0200........
00F69410  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F69420  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F69430  A6 50 37 72 07 82 68 FE EA 9A A1 8C 54 19 2B E4  ¦P7r.‚hþêš¡ŒT.+ä
00F69440  2F D8 85 BA 5F 2F AA ED AC 6B 54 FE 31 0B 80 58  /Ø…º_/ªí¬kTþ1.€X
00F69450  A9 74 D4 ED F9 77 7B B2 30 50 47 F3 C0 12 AC 26  ©tÔíùw{²0PGóÀ.¬&
00F69460  6A 40 AD 19 14 C2 AD 2C 92 36 02 78 50 D4 08 D4  j@­..­,’6.xPÔ.Ô
00F69470  06 76 2C 97 0D 2A 7A 19 F4 85 01 6F CD C8 07 C3  .v,—.*z.ô….oÍÈ.Ã
00F69480  25 2D F4 CD 46 2B FE F7 B8 0A 40 9F 97 22 06 5E  %-ôÍF+þ÷¸.@Ÿ—".^
00F69490  4B F1 02 92 01 11 C1 E0 DD AC 84 0D 58 C2 21 66  Kñ.’..Áàݬ„.XÂ!f
00F694A0  25 69 A4 1A C8 E9 DB 4C 5D 31 4E AF 07 2A 43 90  %i¤.ÈéÛL]1N¯.*C.
00F694B0  3E DC 4A 80 FD A7 06 BB 1F 9B D4 75 6C 6C 45 CE  >ÜJ€ý§.».›ÔullEÎ
00F694C0  1A A6 5D D1 9B E9 80 C2 72 CA A8 0B 14 C6 B2 86  .¦]Ñ›é€Ârʨ..Ʋ†
00F694D0  E3 37 86 E6 AD DE 2C F9 76 3D 18 62 DD 77 AD 71  ã7†æ­Þ,ùv=.bÝw­q
00F694E0  32 F1 11 FD 17 9E 68 50 B3 A5 7F 41 37 19 63 3A  2ñ.ý.žhP³¥.A7.c:
00F694F0  78 08 19 4D CA 47 AD FF 35 89 52 3E 18 39 F5 A5  x..MÊG­ÿ5‰R>.9õ¥
00F69500  4B 98 D6 C0 66 68 E0 CA 4B 9F 1A 42 1E A2 EE 79  K˜ÖÀfhàÊKŸ.B.¢îy
00F69510  E6 58 6F FF 58 B1 FE 4F DB FD 27 6F 4C EC 6C 9F  æXoÿX±þOÛý'oLìlŸ
00F69520  B4 B7 F8 9D 30 4A 1E 83 15 47 08 B6 FB 51 00 DA  ´·ø.0J.ƒ.G.¶ûQ.Ú
  • CECHH (DIA-001) with WDC WD1002FAEX-00Z3A0 drive (1TB) : ROS0: 3.55 / ROS1: 3.73
  • CECHL (VER-001) with TOSHIBA MK8052GSX (80GB) : ROS0: 3.55 / ROS1: 3.56
  • CECH20.. (DYN-001) with TOSHIBA MK1255GSX H (120GB) : ROS0: 3.70 / ROS1: 3.70
  • CECH2004A (DYN-001) with TOSHIBA MK1255GSX H (120GB) : ROS0: 3.72 / ROS1: 3.70
  • CECH2004 (DYN-001) with Hitachi HTS545025B9SA0 (250GB) / ROS0: 4.11 / ROS1: 4.00

Used by GetOnlineCertificateRevocationListVersion(FlashOCRL%d) inside bdp player
Handled by Iso module AacsModule.spu.isoself
http://www.blu-raydisc.info/format-spec/rom3-spec.php
http://www.blu-raydisc.info/docs/Certificate_Revocation/online.crl <-- exact same as above hex pastie

Bootloader

Location:

  • NOR: 0xFC0000 - 0xFFFFFF (The last 256KB of flash)
  • NAND: 0x0000000 - 0x003FFFF (The first 256KB of flash)

Perconsole encrypted (datasize depends on bootldr revision)

NOR: 0xFC0000 - 0xFFFFFF (The last 256KB of flash) NAND:
0x0000000 - 0x003FFFF (The first 256KB of flash) +
0xF000000 - 0xF03FFFF (The last 256KB of flash)
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00FC0000  00 00 2E AB 83 EF B9 76 C4 DE D1 35 32 7C D3 77  ...«ƒï¹vÄÞÑ52|Ów
00FC0010  00 00 2E AB FE 2C 4E 17 E1 67 5C 3A C8 29 8E D1  ...«þ,N.ág\:È)ŽÑ
00FC0020  63 D4 81 95 5D D1 D2 E3 BA A3 2D 0A 98 8B 3C 03  cÔ.•]ÑÒ㺣-.˜‹<.
00FC0030  8E 5D D0 E7 2F EE 58 8B C0 73 A2 6D 5E 7F 7A 07  Ž]Ðç/îX‹Às¢m^.z.
00FC0040  47 8B A4 C2 EF B9 3C 60 43 E8 AC 07 F7 8D EE D5  G‹¤Âï¹<`Cè¬.÷.îÕ
00FC0050  67 EE C1 C4 B2 D2 78 98 4C 79 D6 52 49 4D C2 80  gîÁIJÒx˜LyÖRIM€
00FC0060  2D C1 F6 21 B7 B1 34 89 94 3B 33 BF B8 C8 EB 73  -Áö!·±4‰”;3¿¸Èës
[...]
00FEEAD0  9B 28 7A 63 41 DF 4D 54 CC F3 D8 FF FB B0 E6 34  ›(zcAßMTÌóØÿû°æ4
00FEEAE0  2B C6 A2 85 E9 3A 83 A1 8C AE 9F 45 C5 F4 9F AA  +Æ¢…é:ƒ¡Œ®ŸEÅôŸª
00FEEAF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00FEEB00  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00000000  00 00 2A 2A 5C E4 63 CD 5C 9E B6 7A FE A0 1B 54  ..**\äcÍ\ž¶zþ .T
00000010  00 00 2A 2A 57 D6 52 1B B4 DC AC DF DD 03 3E F6  ..**WÖR.´Ü¬ßÝ.>ö
00000020  95 3E B9 B8 D2 47 B6 B2 CC 40 A7 8E B7 08 45 4E  •>¹¸ÒG¶²Ì@§Ž·.EN
00000030  89 03 90 94 30 34 E0 6B 15 0F D7 23 90 D5 1E B3  ‰..”04àk..×#.Õ.³
00000040  CA DD 19 2C BA 28 44 6D 4E 28 D9 95 EF 04 B2 BA  ÊÝ.,º(DmN(Ù•ï.²º
00000050  86 D1 C6 E2 75 3F 99 99 BF 00 64 19 3A F4 A6 0B  †ÑÆâu?™™¿.d.:ô¦.
00000060  35 1B A4 A1 77 03 CC 93 7C FF 93 08 51 09 BD 79  5.¤¡w.Ì“|ÿ“.Q.½y
...
0002A2C0  5B 60 2C 7C 3A DB 23 55 AF 3D E8 4F 89 E7 BA CF  [`,|:Û#U¯=èO‰çºÏ
0002A2D0  22 68 70 F1 32 6F C2 52 9E 2B 02 12 3E F2 47 67  "hpñ2oÂRž+..>òGg
0002A2E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0002A2F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
0F000000  00 00 2A 2A 5C E4 63 CD 5C 9E B6 7A FE A0 1B 54  ..**\äcÍ\ž¶zþ .T
0F000010  00 00 2A 2A 57 D6 52 1B B4 DC AC DF DD 03 3E F6  ..**WÖR.´Ü¬ßÝ.>ö
0F000020  95 3E B9 B8 D2 47 B6 B2 CC 40 A7 8E B7 08 45 4E  •>¹¸ÒG¶²Ì@§Ž·.EN
0F000030  89 03 90 94 30 34 E0 6B 15 0F D7 23 90 D5 1E B3  ‰..”04àk..×#.Õ.³
0F000040  CA DD 19 2C BA 28 44 6D 4E 28 D9 95 EF 04 B2 BA  ÊÝ.,º(DmN(Ù•ï.²º
0F000050  86 D1 C6 E2 75 3F 99 99 BF 00 64 19 3A F4 A6 0B  †ÑÆâu?™™¿.d.:ô¦.
0F000060  35 1B A4 A1 77 03 CC 93 7C FF 93 08 51 09 BD 79  5.¤¡w.Ì“|ÿ“.Q.½y
...
0F02A2C0  5B 60 2C 7C 3A DB 23 55 AF 3D E8 4F 89 E7 BA CF  [`,|:Û#U¯=èO‰çºÏ
0F02A2D0  22 68 70 F1 32 6F C2 52 9E 2B 02 12 3E F2 47 67  "hpñ2oÂRž+..>òGg
0F02A2E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0F02A2F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

cell_ext_os_area

NAND only

OtherOS

NAND only


00 filled block

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0EA00040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
....
0EB7FFF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

FF filled block

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0EB80000  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
0EFBFFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ


small non-FF sections (inside FF filled block)

Note: not seen in all NAND dumps.

NAND: 1100 NAND: 0100 NAND: 7F FF FF 11 00 NAND: 7F FF FF 21 00
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0FF00100  FF FF FF FF 11 00 FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿ..ÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0FF00100  FF FF FF FF 01 00 FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿ..ÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0FF00100  FF 7F FF FF 11 00 FF FF FF FF FF FF FF FF FF FF  ÿ.ÿÿ..ÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0FF00100  FF 7F FF FF 21 00 FF FF FF FF FF FF FF FF FF FF  ÿ.ÿÿ!.ÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0FF00300  FF FF FF FF 11 00 FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿ..ÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0FF00300  FF FF FF FF 01 00 FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿ..ÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0FF00300  FF 7F FF FF 11 00 FF FF FF FF FF FF FF FF FF FF  ÿ.ÿÿ..ÿÿÿÿÿÿÿÿÿÿ
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0FF00300  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ





[EOF]






Encrypted Files on Flash

Encrypted files on flash appear to have some sort of header

metldr examples

Here are samples of metldr header from 2 different consoles

00000840  00 00 0E 8E 99 87 3B C7 15 F2 80 80 9C 30 22 25  ...Ž™‡;Ç.ò€€œ0"%
00000850  00 00 0E 8E 78 A5 61 E0 17 72 6E F7 A7 1B 41 AB  ...Žx¥aà.rn÷§.A«
00000840  00 00 0E 8E 99 87 3B C7 15 F2 80 80 9C 30 22 25  ...Ž™‡;Ç.ò€€œ0"%
00000850  00 00 0E 8E 81 2E 00 A9 59 75 01 CC C1 72 D5 50  ...Ž...©Yu.ÌÁrÕP

bootldr examples

Here are samples of bootldr header from 2 different consoles

00FC0000  00 00 2F 4B 53 92 1C E7 F7 33 41 76 9B 7A 1E D6  ../KS’.ç÷3Av›z.Ö
00FC0010  00 00 2F 4B 78 A5 61 E0 17 72 6E F7 A7 1B 41 AB  ../Kx¥aà.rn÷§.A«
00FC0000  00 00 2F 4B CB 9E 15 24 28 B4 4F D2 F9 3F BC 43  ../KËž.$(´OÒù?¼C
00FC0010  00 00 2F 4B 81 2E 00 A9 59 75 01 CC C1 72 D5 50  ../K...©Yu.ÌÁrÕP

Observations / Notes

As you can see, some parts appear static depending on their purpose:

metldr

00000840  00 00 0E 8E 99 87 3B C7 15 F2 80 80 9C 30 22 25  ...Ž™‡;Ç.ò€€œ0"%
00000850  00 00 0E 8E xx xx xx xx xx xx xx xx xx xx xx xx  ...Žx...........

bootldr

00FC0000  00 00 2F 4B xx xx xx xx xx xx xx xx xx xx xx xx  ../K............
00FC0010  00 00 2F 4B xx xx xx xx xx xx xx xx xx xx xx xx  ../K............

per console in both samples

00000840  xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx  ................
00000850  xx xx xx xx 81 2E 00 A9 59 75 01 CC C1 72 D5 50  .......©Yu.ÌÁrÕP

The first 4 bytes appear to reffer to length. eg:

metldr length: 0xE920
0x00000E8E * 0x10 = 0xE8E0 + 0x40 = 0xE920
bootldr length:  0x2F4F0
0x00002F4B * 0x10 = 0x2F4B0 + 0x40 = 0x2F4F0

Header shown is 0x20 bytes, perhaps this means there is a 0x40 byte header. I was not able to find any correlation of the other 2x12 bytes here, perhaps these are keys of some sort.




new metldr.2

Seen on CECH2504B (JSD-001), with 3.60 from factory - datecode 1B

  Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

  00000810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 F9 20  .......@......ù 
  00000820  6D 65 74 6C 64 72 2E 32 00 00 00 00 00 00 00 00  metldr.2........
  00000830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

other new metldr

It seems the naming "metldr.2" does not apply to all non downgradeable consoles:

Seen on CECH2504A (JTP-001), with 3.60 from factory - datecode 1B

  Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
  00000810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 E9 60  .......@......é`
  00000820  6D 65 74 6C 64 72 00 00 00 00 00 00 00 00 00 00  metldr..........
  00000830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Seen on CECH2503B (JTP-001), with ?.?? from factory - datecode 1A (dump contained ROS with 3.66 and 3.70) This was downgradable.. sorry, the downgrade.bin was not written correctly.. but this time i wrote it ok, so this was not a new metldr console..

 Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
      
 00000810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 E9 60  .......@......é`
 00000820  6D 65 74 6C 64 72 00 00 00 00 00 00 00 00 00 00  metldr..........
 00000830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

For comparison, a CECH250.B (JSD-001), with factory 3.56 - datecode 1A which was downgradeable (dump contained ROS with 3.56 and 3.70 before downgrading to 3.55):

 Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
      
 00000800   00 00 00 01 00 00 00 01  00 00 00 00 00 02 E8 00   ..............è.
 00000810   00 00 00 00 00 00 00 40  00 00 00 00 00 00 E9 60   .......@......é`
 00000820   6D 65 74 6C 64 72 00 00  00 00 00 00 00 00 00 00   metldr..........
 00000830   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
 00000840   00 00 0E 92 C3 26 6E 4B  BB 28 2E 76 B7 67 70 95   ...’Ã&nK»(.v·gp•


other new metldr mention : https://twitter.com/#!/Mathieulh/status/110779471199604736

WTF 3.50+ consoles have a new additional root key of 0x30 bytes
(3 times the same 0x10 bytes chunk) copied by metldr right to offset 0 O_O

CECH2501B JSD-001 (320GB HDD)without datecode fw 3.66

metldr contains other new value (E9 60), but still downgrades..

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000800  00 00 00 01 00 00 00 01 00 00 00 00 00 02 E8 00  ..............è.
00000810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 E9 60  .......@......é`
00000820  6D 65 74 6C 64 72 00 00 00 00 00 00 00 00 00 00  metldr..........
00000830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000840  00 00 0E 92 C3 26 6E 4B BB 28 2E 76 B7 67 70 95  ...’Ã&nK»(.v·gp•

another PS3 with CECH2501A wihtout datecode 320 GB HDD and fw 3.66 also contains other new metldr values but still downgrades...


Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000800  00 00 00 01 00 00 00 01 00 00 00 00 00 02 E8 00  ..............è.
00000810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 E9 60  .......@......é`
00000820  6D 65 74 6C 64 72 00 00 00 00 00 00 00 00 00 00  metldr..........
00000830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000840  00 00 0E 92 C3 26 6E 4B BB 28 2E 76 B7 67 70 95  ...’Ã&nK»(.v·gp•




Dumping your flash

There are many ways you can dump your flash you can choose the way that best fits you, there are some persons studing the flash.. If you can help providing a dump (specially if you have a debug console) search for those persons in IRC Efnet #ps3dev

Payload

Uncomment dump_dev_flash() in graf_payloads compile and run the payload

see Graf's_PSGroove_Payload for more info

Linux

Using graf_chokolo kernel with /dev/ps3nflasha access

dd if=/dev/ps3nflasha of=NOR.BIN bs=1024

Hardware

see Hardware flashing

Dump NAND/NOR from GameOS

precompiled : dump_flash.pkg // backup/mirror: dump_flash.pkg (70.48 KB)
source: dump_flash-src.rar (2.33 KB)

Make sure USB stick is FAT32 with enough free space (16MB per NOR dump, 256MB per NAND dump)

remark: NAND dumps are 239MB because HV masks bootldr, see Hardware flashing #Difference between hardware dumps and software dumps

NOR Unpacking // NOR Unpkg

/*
  # ../norunpkg norflash.bin norflash
  unpacking asecure_loader (size: 190xxx bytes)...
  unpacking eEID (size: 65536 bytes)...
  unpacking cISD (size: 2048 bytes)...
  unpacking cCSD (size: 2048 bytes)...
  unpacking trvk_prg0 (size: 131072 bytes)...
  unpacking trvk_prg1 (size: 131072 bytes)...
  unpacking trvk_pkg0 (size: 131072 bytes)...
  unpacking trvk_pkg1 (size: 131072 bytes)...
  unpacking ros0 (size: 7340032 bytes)...
  unpacking ros1 (size: 7340032 bytes)...
  unpacking cvtrm (size: 262144 bytes)...
*/

// Copyright 2010       Sven Peter
// Licensed under the terms of the GNU GPL, version 2
// http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt
// nor modifications by rms.

#include "tools.h"
#include "types.h"

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <unistd.h>
#include <sys/stat.h>

#ifdef WIN32
#define MKDIR(x,y) mkdir(x)
#else
#define MKDIR(x,y) mkdir(x,y)
#endif

u8 *pkg = NULL;

static void unpack_file(u32 i)
{
        u8 *ptr;
        u8 name[33];
        u64 offset;
        u64 size;

        ptr = pkg + 0x10 + 0x30 * i;

        offset = be64(ptr + 0x00);
        size   = be64(ptr + 0x08);

        memset(name, 0, sizeof name);
        strncpy((char *)name, (char *)(ptr + 0x10), 0x20);

        printf("unpacking %s (size: %d bytes)...\n", name, size);
        memcpy_to_file((char *)name, pkg + offset, size);
}

static void unpack_pkg(void)
{
        u32 n_files;
        u64 size;
        u32 i;

        n_files = be32(pkg + 4);
        size = be64(pkg + 8);

        for (i = 0; i < n_files; i++)
                unpack_file(i);
}

int main(int argc, char *argv[])
{
        if (argc != 3)
                fail("usage: norunpkg filename.nor target");

        pkg = mmap_file(argv[1]);

        /* kludge for header, i do not do sanity checks at the moment */
        pkg += 1024;

        MKDIR(argv[2], 0777);

        if (chdir(argv[2]) != 0)
                fail("chdir");

        unpack_pkg();

        return 0;
}

Source: http://rms.grafchokolo.com/?p=25

RMS - eEID splitter

#include <stdio.h>
#include <stdlib.h>
#include <string.h>

void
DumpEidData (FILE * pFile, int iInputSize, int iEidCount,
	     char *pFilenamePrefix)
{
  FILE *pOutput;
  char *szFilename;
  char *szBuf;
  int iRes, iSize;

  printf ("dumping EID%d from eEID at %p, size %d (%x)..\n",
	  iEidCount, pFile, iInputSize, iInputSize);

  szBuf = (char *) malloc (iInputSize + 1);
  szFilename = (char *) malloc (strlen (pFilenamePrefix) + 2);

  if (szBuf == NULL)
    {
      perror ("malloc");
      exit (1);
    };

  iSize = fread (szBuf, iInputSize, 1, pFile);
  sprintf (szFilename, "%s%d", pFilenamePrefix, iEidCount);
  pOutput = fopen (szFilename, "wb");
  iRes = fwrite (szBuf, iInputSize, 1, pOutput);

  if (iRes != iSize)
    {
      perror ("fwrite");
      exit (1);
    };

  free (szBuf);
}

int
main (int argc, char **argv)
{
  FILE *pFile;
  char *pPrefix;

  pFile = fopen (argv[1], "rb");
  if (pFile == NULL)
    {
    usage:
      printf ("usage: %s <eEID> <EID name prefix>\n", argv[0]);
      exit (1);
    }

  if (argc == 2 && argv[2] != NULL)
    {
      pPrefix = argv[2];
      goto usage;
    }

  fseek (pFile, 0x70, SEEK_SET);

  if (pPrefix != NULL)
    {
      DumpEidData (pFile, 2144, 0, pPrefix);
      DumpEidData (pFile, 672, 1, pPrefix);
      DumpEidData (pFile, 1840, 2, pPrefix);
      DumpEidData (pFile, 256, 3, pPrefix);
      DumpEidData (pFile, 48, 4, pPrefix);
      DumpEidData (pFile, 2560, 5, pPrefix);
    }
  return 0;
}

Source: http://rms.grafchokolo.com/?p=59

Flash Samples

Reference flash dumps

User flashdumps

Here are some samples of NOR Flash for your dissection. These are taken from different consoles (because it is useless to dump different firmware versions as ROS/RVK will be the same crossconsole)

SKU bootldr metldr ROS0 ROS1 Link Note
PS3 Phat:
CECHA
CECHB
CECHC
CECHE
CECHG
CECHH
CECHJ
CECHK
CECHL [1] 3.55-Rogero CECHL03
CECHL [2] 3.56 CECHL03
CECHL [3] 3.70 CECHL03
CECHM
CECHP
CECHQ
PS3 Slim:
CECH-20xx 3.65 3.55 [4] 3.65 CECH-2008 A
CECH-20xx 3.56 3.56 [5] 3.56 CECH-2008 B
CECH-20xx 3.42 3.70 [6] 3.70 CECH-2008 B
CECH-20xx 3.72 4.00 [7] 4.00 CECH-2008 B
CECH-21xx
CECH-25xx 3.66 3.56 [8] 3.60 CECH-2508 B
CECH-25xx 3.66 3.72 [9] 3.72 CECH-2508 B
CECH-30xx