Typical Flash TSOP package found on PS3's can either be 2x128mb NAND or 1x16mb NOR

This is an attempt at documenting the files located and stored on flash. Please do note that this is from reverse engineering several flash dumps, not from reverse engineering the PS3 firmware itself. This involves alot of guesswork and may not be accurate and there may be information missing.

Overview

NOR Flash

The following is a list of files stored in NOR Flash

type	Name			Start Offset	End Offset	Size (h)	Size (bytes)	Notes
gen	0FACE0FF DEADBEEF			0x000010	0x000001F	0x10	(16 bytes)	magic header : 0x0040010 00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF .....¬àÿ....Þ¾ï
pc	flashregion table			0x000400
pc	0	asecure_loader		0x000800	0x02EFFF	0x2E800	(262,144 bytes)	aka metldr
pc	1	eEID		0x02F000	0x03EFFF	0x10000	(65,536 bytes)
pc		0	EID0	0x02F070	0x02F8D0	0x860	(2,144 bytes)	(IDPS @ offset 0x0002F070 absolute / 0x00000070 inside eEID )
pc		1	EID1	0x02F8D0	0x02FB70	0x2A0	(672 bytes)
pc		2	EID2	0x02FB70	0x0302A0	0x730	(1,840 bytes)
pc		3	EID3	0x0302A0	0x0303A0	0x100	(256 bytes)
pc		4	EID4	0x0303A0	0x0303D0	0x30	(48 bytes)
pc		5	EID5	0x0303D0	0x030DD0	0xA00	(2,560 bytes)
pc		F	unreferenced area	0x030DD0	0x03EFFF	0xE22F	(57,903 bytes)
pc	2	cISD		0x03F000	0x03F7FF	0x800	(2,048 bytes)
pc		0	cISD0	0x03F040	0x03F060	0x20	(32 bytes)
pc		1	cISD1	0x03F060	0x03F260	0x200	(512 bytes)
pc		2	cISD2	0x03F260	0x03F270	0x10	(16 bytes)
pc		F	unreferenced area	0x03F270	0x03F7FF	0x58F	(1,423 bytes)
pc	3	cCSD		0x03F800	0x03FFFF	0x800	(2,048 bytes)
pc		0	cCSD0	0x03F820	0x03F84F	0x30	(48 bytes)
pc		F	unreferenced area	0x03F850	0x03FFFF	0x7B0	(1,968 bytes)
pf	4	trvk_prg0		0x040000	0x05FFFF	0x20000	(131,072 bytes)
pf	5	trvk_prg1		0x060000	0x07FFFF	0x20000	(131,072 bytes)
pf	6	trvk_pkg0		0x080000	0x09FFFF	0x20000	(131,072 bytes)
pf	7	trvk_pkg1		0x0A0000	0x0BFFFF	0x20000	(131,072 bytes)
pf	8	ros0		0x0C0000	0x7BFFFF	0x700000	(7,340,032 bytes)	Contains CoreOS files, filecontent depends on firmware version
pf	9	ros1		0x7C0000	0xEBFFFF	0x700000	(7,340,032 bytes)	Contains CoreOS files, filecontent depends on firmware version
pc	A	cvtrm		0xEC0000	0xF00000	0x40000	(262,144 bytes)
gen	CELL_EXTNOR_AREA			0xF20000	0xFA0040	0x80040	(524,352 bytes)
pc	bootldr			0xFC0000	0xFEEAF0	0x2EAF0	(191,216 bytes)	End @ FEF170, FEF570, FEF5F0, FEF600 in some dumps

NAND Flash

The following is a list of files stored in NAND Flash

type	Name			Start Offset	End Offset	Size (h)	Size (bytes)	Notes
pc	bootldr			0x0000000	0x003FFFF	0x40000	(191,216 bytes)	datasize depends on bootldr revision
gen	0FACE0FF DEADBEEF			0x0040010	0x004001F	0x10	(16 bytes)	magic header : 0x040010 00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF .....¬àÿ....Þ¾ï
pc	flashregion table			0x0040200
pc	0	asecure_loader		0x0040800	0x00807FF	0x40000	(262,144 bytes)	aka metldr, extracted data starts from 0x040840, datasize depends on metldr revision
pc	1	eEID		0x0080800	0x00907FF	0x10000	(65,636 bytes)
pc		0	EID0	0x0080870	0x00810CF	0x860	(2,144 bytes)	(IDPS @ offset 0x00080870 absolute / 0x00000070 inside eEID )
pc		1	EID1	0x00810D0	0x008136F	0x2A0	(672 bytes)
pc		2	EID2	0x0081370	0x0081A9F	0x730	(1,840 bytes)
pc		3	EID3	0x0081AA0	0x0081B9F	0x100	(256 bytes)
pc		4	EID4	0x0081BA0	0x0081BCF	0x30	(48 bytes)
pc		5	EID5	0x0081BD0	0x00825CF	0xA00	(2,560 bytes)
pc		F	unreferenced area	0x00825D0	0x00907FF	0xE22F	(57,903 bytes)
pc	2	cISD		0x0090800	0x0090FFF	0x800	(2,048 bytes)
pc		0	cISD0	0x0090840	0x009085F	0x20	(32 bytes)
pc		1	cISD1	0x0090860	0x0090A5F	0x200	(512 bytes)
pc		2	cISD2	0x0090A60	0x0090A6F	0x10	(16 bytes)
pc		F	unreferenced area	0x0090A70	0x0090FFF	0x58F	(1,423 bytes)
pc	3	cCSD		0x0091000	0x00917FF	0x800	(2,048 bytes)
pc		0	cCSD0	0x0091020	0x009104F	0x30	(48 bytes)
pc		F	unreferenced area	0x0091050	0x00917FF	0x7B0	(1,968 bytes)
pf	4	trvk_prg0 trvk_prg1		0x0091800	0x00937FF	0x2000	(8,192 bytes)	extracted size is 0x2000 for trvk_prg0 + trvk_prg1 combined as trvk_prg (8,192 bytes)
pf	5	trvk_pkg0 trvk_pkg1		0x0093800	0x00957FF	0x2000	(8,192 bytes)	extracted size is 0x2000 for trvk_pkg0 + trvk_pkg1 combined as trvk_pkg (8,192 bytes)
gen	6	creserved_0		0x0095800?	-	0x2A800	(174,080 bytes)
pf	7	ros		0x00C0000	0x0EBFFFF	0xE00000	(1,4680,064 bytes)
pf		0	ros0	0x0C0000	0x07BFFFF	0x700000	(7,340,032 bytes)	Contains CoreOS files, filecontent depends on firmware version
pf		1	ros1	0x07C0000	0x0EBFFFF	0x700000	(7,340,032 bytes)	Contains CoreOS files, filecontent depends on firmware version
pc	8	cvtrm		-	-	0x40000	(262,144 bytes)
pc		M	SCEIVTRM	~varies	~varies	0x10	(16 bytes)	magic header : 0x0D80000 53 43 45 49 56 54 52 4D 00 00 00 00 00 00 00 A8 SCEIVTRM.......¨
pc		0	VTRM0	~varies	~varies	~varies	~varies	magic header : 0x0D80020 00 00 00 00 56 54 52 4D 00 00 00 00 00 00 00 04 ....VTRM........
pc		1	VTRM1	~varies	~varies	~varies	~varies	magic header : 0x0D80400 00 00 00 00 56 54 52 4D 00 00 00 00 00 00 00 04 ....VTRM........
gen	cell_ext_os_area			0xE780000	0xE78000F	0x10	(16 bytes)	magic header : 0xE780000 63 65 6C 6C 5F 65 78 74 5F 6F 73 5F 61 72 65 61 cell_ext_os_area
gen	OtherOS			0xE780800	~varies	~varies	~varies	OtherOS loader/init.rd

First Region

Header - 0FACE0FF DEADBEEF

Location:

NOR: 0x000000 - 0x00001FF
NAND: 0x0040000 - 0x00401FF

example

NOR: 0x000000 - 0x00001FF

NAND: 0x0040000 - 0x00401FF

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00000000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000010  00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF  .....¬àÿ....Þ.¾ï
00000020  00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00  ..............x.
00000030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
....
000001F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00040000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00040010  00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF  .....¬àÿ....Þ¾ï
00040020  00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 00  ..............v.
00040030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
....
000401F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

structure

Address	Length	Value	Description
0x00	0x10	0x0	Blank/Unknown
0x10	0x10	0x0FACE0FF 0xDEADBEEF	Magic number
0x20	0x10	0x7800	Length of region * 0x200
0x30	0x1D0	0x0	Blank/Unknown

Unknown Header - IFI

Location: NOR only : 0x000200 - 0x00003FF

The next block of 512 bytes only has the first 16 bytes written. Unsure exactly what this means.

example

NOR only : 0x000200 - 0x00003FF

NAND: N.A.

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00000200  49 46 49 00 00 00 00 01 00 00 00 02 00 00 00 00  IFI.............
00000210  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
000003F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

N.A.

structure

Address	Length	Value	Description
0x200	0x10	0x49464900 (String: "IFI") 0x1 0x2 0x0	Unknown

File Table

Location:

NOR: 0x0000400 - 0x00007FF
NAND: 0x0040200 - 0x00407FF

The next 1024 bytes contain the file entry table

Header

Small 16 byte header to describe length and entry count

example

NOR: 0x0000400 - 0x000040F

NAND: 0x0040200 - 0x004020F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   00000400  00 00 00 01 00 00 00 0B 00 00 00 00 00 EF FC 00  .............ïü.

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00040200  00 00 00 01 00 00 00 09 00 00 00 00 00 EB FE 00  .............ëþ.

structure

Address	Length	Value	Description
0x0	0x4	0x01	Unknown
0x4	0x4	0x0B	Entry Count
0x8	0x8	0xEFFC00	Length of Flash Region (relative to 0x400 (region start)

First is a header, this tells us how many files are stored here.

Entry Table

Then follows a 32 byte entry for each file

example

NOR: 0x0000410 - 0x00007FF

NAND: 0x0040210 - 0x00407FF

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00000410  00 00 00 00 00 00 04 00 00 00 00 00 00 02 E8 00  ..............è.
00000420  61 73 65 63 75 72 65 5F 6C 6F 61 64 65 72 00 00  asecure_loader..
00000430  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00040210  00 00 00 00 00 00 06 00 00 00 00 00 00 04 00 00  ................
00040220  61 73 65 63 75 72 65 5F 6C 6F 61 64 65 72 00 00  asecure_loader..
00040230  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

structure

Address	Length	Value	Description
0x0	0x8	0x400	File offset relative to 0x400 (Region start)
0x8	0x8	0x2E800	File length
0x10	0x20	char[32]:"asecure_loader"	File name

asecure_loader region

Location:

NOR: 0x0000800 - 0x0002EFFF
NAND: 0x0040800 - 0x00807FF

Within asecure_loader is another file table similar to region 1 but is located within region 1 itself. This has only been observed to hold metldr in its encrypted form.

Header

example

NOR: 0x0000800 - 0x000080F

NAND: 0x0040800 - 0x004080F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00000800  00 00 00 01 00 00 00 01 00 00 00 00 00 02 E8 00  ..............è.

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00040800  00 00 00 01 00 00 00 01 00 00 00 00 00 04 00 00  ................

structure

Address	Length	Value	Description
0x00	0x04	0x01	Unknown
0x04	0x04	0x01	Entry Count
0x08	0x08	0x2E800	Length of Region

Entry Table

Then follows a 32 byte entry for asecure (metldr) file

example

NOR: 0x0000810 - 0x000083F

NAND: 0x0040810 - 0x004083F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00000810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 E8 D0  .......@......èÐ
00000820  6D 65 74 6C 64 72 00 00 00 00 00 00 00 00 00 00  metldr..........
00000830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00040810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 EE 10  .......@......î.
00040820  6D 65 74 6C 64 72 00 00 00 00 00 00 00 00 00 00  metldr..........
00040830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

structure

Address	Length	Value	Description
0x0	0x08	0x40	File offset relative to 0x810 (asecure_loader header)
0x8	0x08	0xE8D0	File Length
0x10	0x20	char[32]:"metldr"	File name

Metldr binary

note: exact length depends on metldr revision and is mentioned in previous entrytable

example

NOR: 0x0000840 - 0x000F12F

NAND: 0x0040840 - 0x004F66F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00000840  00 00 0E 89 43 B6 EF 4A E2 0F 74 00 C8 80 9E 53  ...‰C¶ïJâ.t.È€žS
00000850  00 00 0E 89 FC D1 D8 BE 6F F4 C8 D8 8F E1 C3 F7  ...‰üÑØ¾oôÈØ.áÃ÷
00000860  8B E4 7A 13 F1 F9 85 EF 66 01 96 81 BD CA 31 EA  ‹äz.ñù…ïf.–.½Ê1ê
00000870  9F 86 36 BB 92 4C FF EE FA 92 88 D3 E5 27 96 24  Ÿ†6»’Lÿîú’ˆÓå'–$
....
0000F0F0  ED BA DE 64 76 29 8E C6 CC FC DD 30 40 56 39 6B  íºÞdv)ŽÆÌüÝ0@V9k
0000F100  03 F3 C1 D1 81 41 85 32 24 A6 46 67 CC FB 3F 64  .óÁÑ.A…2$¦FgÌû?d
0000F110  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0000F120  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00040840  00 00 0E DD 2F 6C 62 2E CA 7F AE 0D 2F 76 B5 D4  ...Ý/lb.Ê.®./vµÔ
00040850  00 00 0E DD 93 B7 DF 38 94 92 09 B6 C3 9C D2 AA  ...Ý“·ß8”’.¶ÃœÒª
00040860  B2 6A E5 B6 D9 EB D8 5A 63 B2 32 E0 75 18 7C 63  ²jå¶ÙëØZc²2àu.|c
00040870  8D A0 30 54 F6 34 63 FB 01 8F DE 31 0A D7 FF 3D  . 0Tö4cû..Þ1.×ÿ=
....
0004F630  2D 76 13 0B F3 89 32 A3 D2 A2 4A 18 19 FD 30 DC  -v..ó‰2£Ò¢J..ý0Ü
0004F640  D8 18 00 DA BD E3 99 EB 80 DE CE A8 59 7B 8F 49  Ø..Ú½ã™ë€ÞÎ¨Y{.I
0004F650  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0004F660  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

eEID

This section of flash contains QA tokens

It is 0x10000 in length (64 kb) but only the first 0x1DD0 is used, the rest is padded with FF

It is composed of 6 sections numbered from 0 to 5

eEID contains your system model data, your target ID, and your PS3 motherboard revision

Section	Description	iso module
EID0	EID0 is needed for loading parameters to isoldr for loading isolated SELF files on a SPE	aim_spu_module
EID1	?
EID2	? + BD drive pairing	fdm_spu_module
EID3	?	AacsModule.spu.isoself CprmModule.spu.isoself
EID4	?	sv_iso_spu_module
EID5	?	aim_spu_module

Header

example

NOR: 0x002F000 - 0x002F00F

NAND: 0x0080800 - 0x008080F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0002F000  00 00 00 06 00 00 1D D0 00 00 00 00 00 00 00 00  .......Ð........

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00080800  00 00 00 06 00 00 1D D0 00 00 00 00 00 00 00 00  .......Ð........

structure

Address	Length	Value	Description
0x0	0x4	0x6	Number of entries
0x4	0x8	0x1DD0	Length of entire eEID package
0x8	0x8	0x0	Unknown/Blank

File Table

This is the whole file table

example

NOR: 0x002F010 - 0x002F06F

NAND: 0x0080810 - 0x008086F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0002F010  00 00 00 70 00 00 08 60 00 00 00 00 00 00 00 00  ...p...`........
0002F020  00 00 08 D0 00 00 02 A0 00 00 00 00 00 00 00 01  ...Ð... ........
0002F030  00 00 0B 70 00 00 07 30 00 00 00 00 00 00 00 02  ...p...0........
0002F040  00 00 12 A0 00 00 01 00 00 00 00 00 00 00 00 03  ... ............
0002F050  00 00 13 A0 00 00 00 30 00 00 00 00 00 00 00 04  ... ...0........
0002F060  00 00 13 D0 00 00 0A 00 00 00 00 00 00 00 00 05  ...Ð............

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00080810  00 00 00 70 00 00 08 60 00 00 00 00 00 00 00 00  ...p...`........
00080820  00 00 08 D0 00 00 02 A0 00 00 00 00 00 00 00 01  ...Ð... ........
00080830  00 00 0B 70 00 00 07 30 00 00 00 00 00 00 00 02  ...p...0........
00080840  00 00 12 A0 00 00 01 00 00 00 00 00 00 00 00 03  ... ............
00080850  00 00 13 A0 00 00 00 30 00 00 00 00 00 00 00 04  ... ...0........
00080860  00 00 13 D0 00 00 0A 00 00 00 00 00 00 00 00 05  ...Ð............

structure

0x10 bytes per entry as follows:

Address	Length	Value	Description
0x0	0x4	0x70	Entry point
0x4	0x8	0x860	Length
0x8	0x8	0x0	EID number

Typical EID entry addresses and lengths

Entry point listed is offset from base EID address (NOR:0x002F000 / NAND:0x0080800 in these examples)
Absolute start address is base EID address + Entry point
Absolute end address is base EID address + Entry point + Length

Description	Entry point	Length	NOR Address		NAND Address
Description	Entry point	Length	start	end	start	end
EID0	0x70	0x860	0x002F070	0x002F8CF	0x0080870	0x00810CF
EID1	0x8D0	0x2A0	0x002F8D0	0x002FB6F	0x00810D0	0x008136F
EID2	0xB70	0x730	0x002FB70	0x003029F	0x0081370	0x0081A9F
EID3	0x12A0	0x100	0x00302A0	0x003039F	0x0081AA0	0x0081B9F
EID4	0x13A0	0x30	0x00303A0	0x00303CF	0x0081BA0	0x0081BCF
EID5	0x13D0	0xA00	0x00303D0	0x0030DCF	0x0081BD0	0x00825CF

EID0 - Section 0

Indi manager can write to it
AIM can rehash it

example

NOR: 0x002F070 - 0x002F8CF

NAND: 00080870 - 0x00810CF

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0002F070  00 00 00 01 00 89 00 08 14 01 01 06 1B 91 1C 5C  .....‰.......‘.\
0002F080  00 12 00 0B FC D1 D8 BE 6F F4 C8 D8 8F E1 C3 F7  ....üÑØ¾oôÈØ.áÃ÷
....
0002F8B0  5B B4 1B C2 81 59 79 1A E6 DA F1 FD 5C E8 5B 67  [´.Â.Yy.æÚñý\è[g
0002F8C0  EA 85 A8 F6 9F A1 C6 A2 5E 59 C5 61 A9 5F 6D 2E  ê…¨öŸ¡Æ¢^YÅa©_m.

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00080870  00 00 00 01 00 8A 00 01 10 00 52 BC C7 11 6D B2  .....Š....R¼Ç.m²
00080880  00 12 00 0B 93 B7 DF 38 94 92 09 B6 C3 9C D2 AA  ....“·ß8”’.¶ÃœÒª
....
000810B0  05 CA AE F2 3A 9C 88 09 90 D6 41 4B DA 37 6C AF  .Ê®ò:œˆ..ÖAKÚ7l¯
000810C0  4A 63 D7 B0 3E DD 5A 29 55 6A 9B E7 96 6E E1 EE  Jc×°>ÝZ)Uj›ç–náî

structure

Address	Size	Value	Description	Observations
0x0	0x10	00 00 00 01 00 89 00 08 14 01 01 06 1B 91 1C 5C	IDPS	IDPS This contains your Target ID
0x10	0x4	00 12 00 0B	Unknown
0x14	0x12	FC D1 D8 BE 6F F4 C8 D8 8F E1 C3 F7	Per console nonce	Appear to be the same nonce as in the encrypted files metloader/bootloader
Rest	Rest	Rest	Encrypted Data?

EID 1 - Section 1

example

NOR: 0x002F8D0 - 0x002FB6F

NAND: 0x00810D0 - 0x008136F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0002F8D0  DB D1 FF 70 CF CA D6 A6 59 94 15 E1 B3 FC CF CA  ÛÑÿpÏÊÖ¦Y”.á³üÏÊ
0002F8E0  B6 48 D5 01 39 4A 76 00 25 76 F6 F0 36 65 68 A7  ¶HÕ.9Jv.%vöð6eh§
....
0002FB50  AB 66 60 E8 B7 0D 3F 78 C5 59 2B D4 77 EB 2C 2D  «f`è·.?xÅY+Ôwë,-
0002FB60  C3 6A B9 FA BB 63 CD EA 5D D2 39 8A 3F 77 2A 09  Ãj¹ú»cÍê]Ò9Š?w*.

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
000810D0  A3 D6 F3 27 20 C6 80 11 EA A3 A1 75 48 36 4C 10  £Öó' Æ€.ê£¡uH6L.
000810E0  C9 6F B0 3D BF 85 4F D4 1F 89 01 C9 BC 64 DE 08  Éo°=¿…OÔ.‰.É¼dÞ.
....
00081350  2A DF F9 45 E4 94 FD 43 33 82 6E 82 BB E9 CD 3F  *ßùEä”ýC3‚n‚»éÍ?
00081360  53 5F E0 5A A2 7A 7E 6E 3D 50 A3 2B 16 68 7B 28  S_àZ¢z~n=P£+.h{(

structure

Appears to be encrypted, not much is known about this one

EID 2 - Section 2

example

NOR: 0x002FB70 - 0x003029F

NAND: 0x0081370 - 0x0081A9F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0002FB70  00 80 06 90 00 00 00 00 00 00 00 00 00 00 00 00  .€..............
0002FB80  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0002FB90  56 64 18 79 DC 30 12 51 3C C5 69 21 0C AD ED 8F  Vd.yÜ0.Q<Åi!.í.
0002FBA0  67 DC 77 CC B6 4B 2D FB 68 F2 2E 41 A0 F4 C7 88  gÜwÌ¶K-ûhò.A ôÇˆ
....
00030280  03 92 40 B3 63 F4 62 97 D2 3D AE 82 1B F4 EC CA  .’@³côb—Ò=®‚.ôìÊ
00030290  30 72 60 A5 7E B7 11 54 D9 9D 02 5C 20 7A CE 83  0r`¥~·.TÙ..\ zÎƒ

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00081370  00 80 06 90 00 00 00 00 00 00 00 00 00 00 00 00  .€..............
00081380  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00081390  FC CA 19 07 3F FA D0 87 DF 20 23 98 99 17 F1 DF  üÊ..?úÐ‡ß #˜™.ñß
000813A0  95 A7 98 49 EC 4D 68 D2 61 D7 2F BE 4A 7E 86 02  •§˜IìMhÒa×/¾J~†.
....
00081A80  76 D5 07 20 D1 85 07 39 4D 2E F9 CE 0F A4 61 ED  vÕ. Ñ….9M.ùÎ.¤aí
00081A90  18 A6 BB 00 F9 55 69 BB DC 60 54 6D 40 C5 AF 3D  .¦».ùUi»Ü`Tm@Å¯=

structure

Not sure about this one, appears to be some recurring patterns in here

EID 3 - Section 3

example

NOR: 0x00302A0 - 0x003039F

NAND: 0x0081AA0 - 0x0081B9F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
000302A0  00 00 00 01 58 1B 20 6E 00 00 00 00 01 8B 39 46  ....X. n.....‹9F
000302B0  00 01 00 D0 FC D1 D8 BE 6F F4 C8 D8 8F E1 C3 F7  ...ÐüÑØ¾oôÈØ.áÃ÷
000302C0  31 6B 01 24 85 68 AD 48 F4 D9 C5 E1 3E D5 BD A8  1k.$…hHôÙÅá>Õ½¨
000302D0  A1 DD 7A 4A F2 95 3C FE 62 F2 F4 FD E0 48 98 35  ¡ÝzJò•<þbòôýàH˜5
000302E0  4D EB E2 E5 94 40 5F 29 BD 44 20 6E F1 14 92 5C  Mëâå”@_)½D nñ.’\
000302F0  19 1D 35 A5 32 54 FF 12 52 86 DD 19 4D E4 67 31  ..5¥2Tÿ.R†Ý.Mäg1
00030300  7F 34 A4 EE 0C 19 9B 0F C9 E3 81 4D F9 F7 1D 88  .4¤î..›.Éã.Mù÷.ˆ
00030310  90 C8 D3 F0 D5 40 5F 6B 2B A5 2D 1D D6 1F 58 37  .ÈÓðÕ@_k+¥-.Ö.X7
00030320  35 A5 7E 90 05 F1 89 2E 7F 76 BC 22 3F D4 F4 C3  5¥~..ñ‰..v¼"?ÔôÃ
00030330  31 58 62 79 2E D7 27 E3 4D 9F 16 BC 8E 7E B7 8D  1Xby.×'ãMŸ.¼Ž~·.
00030340  20 2F 8B 76 4F E7 FC 0F 4B 0E 26 54 AF 72 82 AD   /‹vOçü.K.&T¯r‚
00030350  9E 93 28 FB EA 3B 3D 62 47 C7 06 68 D0 5B C9 4E  ž“(ûê;=bGÇ.hÐ[ÉN
00030360  E9 8F 1F 45 B1 7B 9B E3 9E 5C 33 5F E3 15 C5 B6  é..E±{›ãž\3_ã.Å¶
00030370  E7 35 F4 0F C9 D6 F8 48 0B C7 63 A7 56 5D 96 C4  ç5ô.ÉÖøH.Çc§V]–Ä
00030380  CD 53 F2 95 5F 78 A1 5D 48 A6 9C D2 0B 40 D2 90  ÍSò•_x¡]H¦œÒ.@Ò.
00030390  7D 83 7B 24 12 F3 9F A7 F4 1E 7A 9B 98 50 2C 02  }ƒ{$.óŸ§ô.z›˜P,.

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00081AA0  00 00 00 01 39 20 C4 E4 00 00 00 00 00 6E 38 61  ....9 Ää.....n8a
00081AB0  00 01 00 D0 93 B7 DF 38 94 92 09 B6 C3 9C D2 AA  ...Ð“·ß8”’.¶ÃœÒª
00081AC0  EA 14 35 C0 0F 48 31 01 FE 4C FD 1B F8 A5 C1 04  ê.5À.H1.þLý.ø¥Á.
00081AD0  B2 EE 21 12 5F F2 68 21 40 61 3D ED 62 7B EC 91  ²î!._òh!@a=íb{ì‘
00081AE0  0F C2 D4 27 D9 90 34 C4 19 0D AB 2E 28 9B F4 F6  .ÂÔ'Ù.4Ä..«.(›ôö
00081AF0  00 F5 05 71 FA 53 A6 E8 52 57 9D 9E 7E 8B 9C FD  .õ.qúS¦èRW.ž~‹œý
00081B00  C3 0B 92 AB 25 3E 34 D8 05 E0 92 DC 27 24 14 71  Ã.’«%>4Ø.à’Ü'$.q
00081B10  AF AC 4E C3 6B 66 EF 18 0B EB 72 5D E7 F1 96 28  ¯¬NÃkfï..ër]çñ–(
00081B20  6C 71 06 2B 45 7F 96 76 34 FA AC 7E D8 8F 97 B8  lq.+E.–v4ú¬~Ø.—¸
00081B30  F4 B5 10 BA 71 9E 38 CB 7C AD CB A7 09 E0 23 72  ôµ.ºqž8Ë|Ë§.à#r
00081B40  19 4B 32 A2 0A 13 1C 4B 12 67 C3 28 98 EE 2D 26  .K2¢...K.gÃ(˜î-&
00081B50  B8 81 39 08 81 E4 11 EF 7B 6B DB 0A E8 A9 D0 9E  ¸.9..ä.ï{kÛ.è©Ðž
00081B60  71 13 05 67 99 77 9B 1D E8 C9 0B 67 FB AC 4B 03  q..g™w›.èÉ.gû¬K.
00081B70  78 AF 44 B3 35 A9 39 1F 75 C1 9F 3C 46 E8 C6 71  x¯D³5©9.uÁŸ<FèÆq
00081B80  A5 5B 57 D3 37 6B E2 34 E7 7C B6 A5 04 FE 42 B5  ¥[WÓ7kâ4ç|¶¥.þBµ
00081B90  09 C7 97 0F 9E 2C 7F 94 F6 9C A2 15 4A 76 49 79  .Ç—.ž,.”öœ¢.JvIy

structure

Not fully examined yet, Contains the 12 byte perconsole nonce again at 0x14 to 0x1F

EID 4 - Section 4

example

NOR: 0x00303A0 - 0x00303CF

NAND: 0x0081BA0 - 0x0081BCF

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
000303A0  8B D7 1B A0 C3 DA 4B BE B3 72 AE 61 78 90 31 1F  ‹×. ÃÚK¾³r®ax.1.
000303B0  2E CD F1 92 28 8E 17 AD 6A 9C D5 8A 8E 17 86 39  .Íñ’(Ž.jœÕŠŽ.†9
000303C0  C8 0A F7 9B 92 D8 3A A8 92 60 73 6A 5E 12 2A 94  È.÷›’Ø:¨’`sj^.*”

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00081BA0  40 9F 75 39 22 96 C2 12 A2 9C BC CF 53 99 73 40  @Ÿu9"–Â.¢œ¼ÏS™s@
00081BB0  5D AD A7 F6 26 6E 50 35 55 A8 8A B9 24 A1 F5 35  ]§ö&nP5U¨Š¹$¡õ5
00081BC0  BC 3B 7A 88 17 75 9C 44 A9 2D 4B E0 8B 80 92 E7  ¼;zˆ.uœD©-Kà‹€’ç

structure

Encrypted encdec key (used for e.g. BD drive)

EID 5 - Section 5

example

NOR: 0x00303D0 - 0x0030DCF

NAND: 0x0081BD0 - 0x00825CF

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
000303D0  00 00 00 01 00 89 00 08 14 01 01 06 1B 91 1C 5C  .....‰.......‘.\
000303E0  00 12 07 30 FC D1 D8 BE 6F F4 C8 D8 8F E1 C3 F7  ...0üÑØ¾oôÈØ.áÃ÷
000303F0  B7 05 8B 05 E4 2E 94 C7 41 8E 1D E9 DE 63 F6 E6  ·.‹.ä.”ÇAŽ.éÞcöæ
00030400  C5 18 28 E6 47 44 CE 5D 53 03 57 76 46 0C 97 AB  Å.(æGDÎ]S.WvF.—«
....
00030DB0  A8 55 8A FF 73 96 11 1B 6D 85 82 BD 73 FD 45 6D  ¨UŠÿs–..m…‚½sýEm
00030DC0  7B 7B 00 DD 0D EB A8 A1 57 5F 5D 0F C9 23 49 E8  {{.Ý.ë¨¡W_].É#Iè

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00081BD0  00 00 00 01 00 8A 00 01 10 00 52 BC C7 11 6D B2  .....Š....R¼Ç.m²
00081BE0  00 12 07 30 93 B7 DF 38 94 92 09 B6 C3 9C D2 AA  ...0“·ß8”’.¶ÃœÒª
00081BF0  CB 95 EF 88 DB 8B E8 14 69 1F 99 A7 4A 66 F7 09  Ë•ïˆÛ‹è.i.™§Jf÷.
00081C00  DD 23 09 1F 73 22 43 26 F4 1A 65 44 9C F2 DB 89  Ý#..s"C&ô.eDœòÛ‰
....
000825B0  CE 82 2F 9B 8D F0 4E 22 6B EF 68 28 37 38 AA 08  Î‚/›.ðN"kïh(78ª.
000825C0  EA 85 EA 2C A4 1D F2 76 9C FF D5 D4 49 97 06 06  ê…ê,¤.òvœÿÕÔI—..

structure

Similar again to EID0

Address	Size	Value	Description	Observations
0x0	0x10	00 00 00 01 00 89 00 08 14 01 01 06 1B 91 1C 5C	IDPS	IDPS
0x10	0x4	00 12 07 30	Unknown	Changes from EID0
0x14	0x12	FC D1 D8 BE 6F F4 C8 D8 8F E1 C3 F7	Per console nonce	Appear to be the same key as in the encrypted files metldr/bootldr
Rest	Rest	Rest	Encrypted Data?

unreferenced area

Possibly just unused EID region (which also explains why it is FF filled)

example

NOR: 0x0030DD0 - 0x003EFFF

NAND: 0x00825D0 - 0x00907FF

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00030DD0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00030DE0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
0003EFE0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0003EFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
000825D0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000825E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
000907E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000907F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

structure

Address	Length	Value	Description
0x0	0xE22F	0xFF	FF filled area

cISD

This section of flash contains Console Specific information

cISD contains core information such as Gelic Ethernet MAC address

Header

example

NOR: 0003F000 - 0003F00F

NAND: 00090800 - 0009080F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F000  00 00 00 03 00 00 02 70 00 00 00 00 00 00 00 00  .......p........

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00090800  00 00 00 03 00 00 02 70 00 00 00 00 00 00 00 00  .......p........

structure

Address	Length	Value	Description
0x0	0x4	0x3	Number of entries
0x4	0x8	0x270	Length of entire cISD package
0x8	0x8	0x0	Unknown/Blank

File Table

0x10 per entry:

example

NOR: 0003F010 - 0003F03F

NAND: 00090810 - 0009083F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F010  00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00  ...@... ........
0003F020  00 00 00 60 00 00 02 00 00 00 00 00 00 00 00 01  ...`............
0003F030  00 00 02 60 00 00 00 10 00 00 00 00 00 00 00 02  ...`............

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00090810  00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00  ...@... ........
00090820  00 00 00 60 00 00 02 00 00 00 00 00 00 00 00 01  ...`............
00090830  00 00 02 60 00 00 00 10 00 00 00 00 00 00 00 02  ...`............

structure

Address	Length	Value	Description
0x0	0x4	0x40	Entry point
0x4	0x8	0x20	Length
0x8	0x8	0x0	Entrynumber

Typical cISD entry addresses and lengths

Entry point listed is offset from base cISD address (NOR:0x003F000 / NAND:0x0090800 in these examples)
Absolute start address is base cISD address + Entry point
Absolute end address is base cISD address + Entry point + Length

Description	Entry point	Length	NOR Address		NAND Address
Description	Entry point	Length	start	end	start	end
cISD0	0x40	0x20	0x003F040	0x003F060	0x0090840	0x0090860
cISD1	0x60	0x200	0x003F060	0x003F260	0x0090860	0x0090A60
cISD2	0x260	0x10	0x003F260	0x003F270	0x0090A60	0x0090A70

cISD0 - Section 0

example

NOR: 0003F040 - 0003F05F

NAND: 00090840 - 0009085F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F040  00 1F A7 E3 82 DC FF FF FF FF FF FF FF FF FF FF  ..§ã‚Üÿÿÿÿÿÿÿÿÿÿ
0003F050  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00090840  00 19 C5 BE 7D 50 FF FF FF FF FF FF FF FF FF FF  ..Å¾}Pÿÿÿÿÿÿÿÿÿÿ
00090850  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

structure

Address	Length	Value	Description
0x0	0x6	0xA8E3EE7D10DA	MAC Address
0x6	0x1A	0xFF	Unknown/Blank

cISD1 - Section 1

example

NOR: 0x03F060 - 0x03F25F

NAND: 0x090860 - 0x090A5F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F060  7F 49 44 4C 00 02 00 60 01 00 00 02 01 33 B2 B6  .IDL...`.....3²¶
0003F070  30 31 43 41 30 31 37 36 34 31 30 34 36 37 31 38  01CA017641046718
0003F080  30 33 30 35 34 39 34 30 30 30 30 30 30 30 32 30  0305494000000020
0003F090  32 37 34 33 38 34 31 36 34 30 30 36 31 33 32 39  2743841640061329
0003F0A0  31 31 39 32 00 73 00 73 00 96 00 01 FF FF FF FF  1192.s.s.–..ÿÿÿÿ
0003F0B0  00 02 00 11 00 02 00 12 00 00 00 00 01 8B 39 46  .............‹9F
0003F0C0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
0003F240  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0003F250  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00090860  7F 49 44 4C 00 02 00 60 01 00 00 02 00 61 21 CB  .IDL...`.....a!Ë
00090870  30 31 43 35 31 38 30 30 35 39 30 44 37 37 30 45  01C51800590D770E
00090880  30 39 31 34 30 30 34 30 30 30 30 30 30 30 30 30  0914004000000000
00090890  32 37 34 33 30 31 37 39 33 48 41 31 30 37 31 37  274301793HA10717
000908A0  38 32 32 44 00 28 00 28 00 38 00 01 FF FF FF FF  822D.(.(.8..ÿÿÿÿ
000908B0  00 01 00 11 00 02 00 12 00 00 00 00 00 6E 38 61  .............n8a
000908C0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
00090A40  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00090A50  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

structure

Address	Length	Value	Description
0x0	0xD	0x7F49444C000200600100000202	Unknown, static
0xD	0xF	0x12FFC5	Unknown, varies per console
0x10	0x20	Ascii: 01C524018316270E19087A4200000000	Some unique identifier
0x30	0x8	Ascii: 27455222	3rd part of console serial number
0x38	0xC	Ascii: 401512934163	Some unique identifier
0x44	0x1B	0x0107010701280001FFFF00020011000200120000000002	Unknown, static
0x1B	0x3	0x95A8C9	Unknown, varies

cISD2 - Section 2

example

NOR: 0003F260 - 0003F26F

NAND: 00090A60 - 00090A6F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F260  1F FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00  .ÿ..............

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
     
00090A60  1F FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00  .ÿ..............

structure

This value is unknown and the first two bytes seem to vary

Address	Length	Value	Description
0x0	0x10	0x1FFF0000000000000000000000000000	Unknown

unreferenced area

Possibly just unused cISD region (which also explains why it is FF filled)

example

NOR: 0003F270 - 0003F7FF

NAND: 00090A70 - 00090FFF

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0003F270  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0003F280  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
0003F7E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0003F7F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00090A70  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00090A80  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
....
00090FE0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00090FF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

structure

Address	Length	Value	Description
0x0	0x58F	0xFF	FF filled area

cCSD

This section doesn't contain any data... This section of flash contains Console Specific information

Header

example

NOR: 0003F800 - 0003F80F

NAND: 00091000 - 0009100F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F800  00 00 00 01 00 00 08 00 00 00 00 00 00 00 00 00  ................

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00091000  00 00 00 01 00 00 08 00 00 00 00 00 00 00 00 00  ................

structure

Address	Length	Value	Description
0x0	0x4	0x1	Number of entries
0x4	0x8	0x800	Length of entire cCSD package
0x8	0x8	0x0	Unknown/Blank

File Table

example

NOR: 0003F810 - 0003F81F

NAND: 00091010 - 0009101F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F810  00 00 00 20 00 00 00 30 00 00 00 00 00 00 00 00  ... ...0........

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00091010  00 00 00 20 00 00 00 30 00 00 00 00 00 00 00 00  ... ...0........

structure

This repeats per entry

Address	Length	Value	Description
0x0	0x4	0x20	Entry point
0x4	0x8	0x30	Length
0x8	0x8	0x0	Unknown/Blank

cCSD0 - Section 0

example

NOR: 0x03F820 - 0x03F84F

NAND: 0x091020 - 0x09104F

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
0003F820  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0003F830  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
0003F840  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00091020  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00091030  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00091040  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

structure

There appears to be no data stored here.

Address	Length	Value	Description
0x0	0x30	0xFF	FF filled region

trvk_prg

NOR: splitted into 2 seperate sections trvk_prg0 (0x40000) + trvk_prg1 (0x060000)
NAND: 1 region (0x0091800) with 2 combined sections of trvk_prg0 + trvk_prg1

example

NOR: trvk_prg0 (0x40000)

NAND: trvk_prg0 (0x0091800)

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00040000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 C0  ...............À
00040010  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
00040020  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 C0  ...............À
00040030  8C E3 A5 86 65 B2 11 55 B4 89 22 C3 9C 87 52 27  Œã¥†e².U´‰"Ãœ‡R'
00040040  07 73 4D E1 56 C1 35 52 C6 53 85 E3 5E 89 00 7C  .sMáVÁ5RÆS…ã^‰.|
00040050  D4 A8 42 8C 98 2E 72 80 94 70 E7 43 D3 26 8A BB  Ô¨BŒ˜.r€”pçCÓ&Š»
00040060  1C E6 72 50 26 50 4B A6 28 1C 2D 2F 61 4D 3E 73  .ærP&PK¦(.-/aM>s
00040070  F6 E0 1B 10 99 DC 7A EF DB FA AB F1 33 6F 90 B4  öà..™ÜzïÛú«ñ3o.´
00040080  44 06 92 1C 09 F9 4B 11 E3 E2 A1 1E 07 BC F2 8F  D.’..ùK.ãâ¡..¼ò.
00040090  F0 D8 36 C1 A5 5E 4E B0 73 EF F3 EB AB 9F 0C 7F  ðØ6Á¥^N°sïóë«Ÿ..
000400A0  17 A9 5C B0 7F EC 37 7C 7C 3F 65 06 06 F1 58 2C  .©\°.ì7||?e..ñX,
000400B0  B1 66 03 78 50 25 A1 BB CF 97 6E 5F C3 2F E2 F3  ±f.xP%¡»Ï—n_Ã/âó
000400C0  C2 27 3A 1F 58 C9 A8 5F 09 0D 6B AD 3D B2 87 0F  Â':.XÉ¨_..k=²‡.
000400D0  04 8D DA 23 39 D7 3F C9 3C 54 C7 72 04 7A 81 D9  ..Ú#9×?É<TÇr.z.Ù
000400E0  87 42 78 02 CB E5 10 EC 44 F9 0E C0 E6 30 6A 1B  ‡Bx.Ëå.ìDù.Àæ0j.
000400F0  81 C3 92 9F C9 09 0A 2D 06 1A 7F 41 D5 E9 4C 2E  .Ã’ŸÉ..-...AÕéL.
00040100  7F 89 4A 4D 23 E6 C3 EB 51 24 A5 1D E6 AF EB B2  .‰JM#æÃëQ$¥.æ¯ë²
00040110  A0 39 80 3F 27 AC 13 A4 96 CD 62 B6 E7 96 96 0A   9€?'¬.¤–Íb¶ç––.
00040120  5D DB D8 41 1B DD AF 2F C0 F2 FA D9 86 E4 68 CA  ]ÛØA.Ý¯/ÀòúÙ†ähÊ
00040130  88 54 B8 25 F6 B5 CE FA 80 D5 86 FB A9 1B 38 3D  ˆT¸%öµÎú€Õ†û©.8=
00040140  66 AD CC 67 69 D6 6F 6A 8E 64 FA A5 E2 D7 82 13  fÌgiÖojŽdú¥â×‚.
00040150  38 DB 48 65 87 6F 9E B2 14 A1 BE 48 84 94 ED 64  8ÛHe‡ož².¡¾H„”íd
00040160  09 A4 D6 9C 57 08 0F 46 E3 24 11 FD FC 04 AD A7  .¤ÖœW..Fã$.ýü.§
00040170  A7 6F B7 DD 87 B1 E3 EE FF 2F 40 4C 51 15 15 D6  §o·Ý‡±ãîÿ/@LQ..Ö
00040180  66 CB 62 19 1A 01 5C 00 F0 B8 C8 66 81 64 BB 14  fËb...\.ð¸Èf.d».
00040190  E8 8C AC A4 7C 46 57 C3 FD 02 D6 47 F7 B6 DB C2  èŒ¬¤|FWÃý.ÖG÷¶ÛÂ
000401A0  6E B0 FA 1A 3C F3 18 CD 6B 9A 7C 5C 24 4B F4 98  n°ú.<ó.Íkš|\$Kô˜
000401B0  73 EF DB 7E 99 F1 38 EE 14 C8 05 DD 53 C8 33 FB  sïÛ~™ñ8î.È.ÝSÈ3û
000401C0  6E C8 1A 5C 45 55 90 41 28 98 69 9D 5D 31 8C 8A  nÈ.\EU.A(˜i.]1ŒŠ
000401D0  80 BB 40 8E A4 79 3F 16 5C 35 23 81 2A 15 A2 E5  €»@Ž¤y?.\5#.*.¢å
000401E0  CC D2 55 9A 41 9F 4E 3E E1 C3 EA 89 FB 0B 78 61  ÌÒUšAŸN>áÃê‰û.xa
000401F0  17 FC C7 AE 9B 89 28 0F 19 4A 1D 2F 49 FB 52 3D  .üÇ®›‰(..J./IûR=
00040200  4B 60 01 2D 6D 13 A4 AD 2B C3 A5 1A 69 F5 58 BF  K`.-m.¤+Ã¥.iõX¿
00040210  00 00 00 04 00 00 00 01 00 02 00 80 00 00 00 00  ...........€....
00040220  00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00  ................
00040230  A7 64 53 2F B5 8D 53 23 42 13 DE 3B BC AA 24 6E  §dS/µ.S#B.Þ;¼ª$n
00040240  82 93 47 AE D8 BD 07 93 B0 0C 39 22 14 8D 34 DE  ‚“G®Ø½.“°.9"..4Þ
00040250  BC 51 B4 70 79 0C A8 88 10 D3 62 46 A4 6B 22 6B  ¼Q´py.¨ˆ.ÓbF¤k"k
00040260  7E 4D 0F F3 CD D3 BD 63 92 19 DD A8 4C B8 FF FB  ~M.óÍÓ½c’.Ý¨L¸ÿû
00040270  52 9F 23 0F 44 04 F8 17 7C 3A F0 F2 42 4C 9D 3D  RŸ#.D.ø.|:ðòBL.=
00040280  AB AE 20 43 86 1F 6C B9 7D FB 16 9D 51 8E 6D 57  «® C†.l¹}û..QŽmW
00040290  B9 F4 2E A8 D9 49 D0 39 25 B2 F0 04 B3 20 1C CF  ¹ô.¨ÙIÐ9%²ð.³ .Ï
000402A0  5E 17 D3 9B C0 72 35 B9 CC ED DF 4F 5B C9 F9 49  ^.Ó›Àr5¹ÌíßO[ÉùI
000402B0  2E 61 E5 A8 85 DD C3 47 A4 5C 05 1F 2B B4 A2 C9  .aå¨…ÝÃG¤\..+´¢É
000402C0  1A AF 43 4A E7 5A E7 58 1D 87 84 B6 1F 11 E8 DF  .¯CJçZçX.‡„¶..èß
000402D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00091800  00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 20  ....... ....... 
00091810  00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00  ...... .........
00091820  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 E0  ...............à
00091830  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
00091840  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 E0  ...............à
00091850  EF A8 AF E9 B0 C3 1E F3 41 7D 2D 1E 2D 38 A1 DE  ï¨¯é°Ã.óA}-.-8¡Þ
00091860  AB 7E C8 43 67 29 E7 E9 FC F8 F4 B1 88 8A 12 AC  «~ÈCg)çéüøô±ˆŠ.¬
00091870  EF EF 05 DC 20 A4 54 C0 73 DA 4E 05 BF DA 34 C3  ïï.Ü ¤TÀsÚN.¿Ú4Ã
00091880  F1 90 AB 5D 6A 25 D1 1E 88 AF AA C1 B2 3F 39 56  ñ.«]j%Ñ.ˆ¯ªÁ²?9V
00091890  EC B0 D3 B7 80 D6 01 23 9F 16 8F AF 46 84 2C C8  ì°Ó·€Ö.#Ÿ..¯F„,È
000918A0  E4 8E 51 BC CB D6 C0 73 FB 4E 5E C0 01 F9 D4 C2  äŽQ¼ËÖÀsûN^À.ùÔÂ
000918B0  CB 30 62 25 5B 5B A8 3F 1A 1C 58 DB 2A 94 E1 D3  Ë0b%[[¨?..XÛ*”áÓ
000918C0  15 5C B6 56 CC D8 08 22 A8 EC 82 22 21 90 CA EF  .\¶VÌØ."¨ì‚"!.Êï
000918D0  45 21 C7 CD CA 20 CF 46 4B 2C 76 DF 20 F1 49 26  E!ÇÍÊ ÏFK,vß ñI&
000918E0  95 52 07 F9 51 68 63 6F 0C F0 53 9E 52 ED B6 89  •R.ùQhco.ðSžRí¶‰
000918F0  68 DD D4 EE 78 99 AA 2B 22 75 B7 6E 41 32 1C 6C  hÝÔîx™ª+"u·nA2.l
00091900  A7 62 47 29 AE 5F 55 C3 22 2C A6 63 51 B0 08 8D  §bG)®_UÃ",¦cQ°..
00091910  72 E8 CB 89 F0 E7 0F C3 78 90 FC 94 91 69 A8 07  rèË‰ðç.Ãx.ü”‘i¨.
00091920  CD 05 13 F0 B6 DF 78 17 72 10 26 84 AF C1 ED 11  Í..ð¶ßx.r.&„¯Áí.
00091930  B0 4D 2D 43 A5 A8 A5 53 B4 48 35 53 F3 DC 44 46  °M-C¥¨¥S´H5SóÜDF
00091940  9D 0B 60 54 19 0C 38 6C E3 2C 18 ED 6C B4 39 4A  ..`T..8lã,.íl´9J
00091950  0D 43 67 CC 99 8C 43 02 86 D8 83 EC BB 20 EB C2  .CgÌ™ŒC.†Øƒì» ëÂ
00091960  ED 23 CC 33 B2 89 5D 6E 0D 38 9B 77 39 A3 F2 7A  í#Ì3²‰]n.8›w9£òz
00091970  40 63 6D F0 05 59 0A 10 F4 50 91 EB C3 32 39 77  @cmð.Y..ôP‘ëÃ29w
00091980  D0 4B 99 DA 1C 9B 41 A3 DD 99 8C 5D 91 55 77 A5  ÐK™Ú.›A£Ý™Œ]‘Uw¥
00091990  5A BD 21 C4 04 7C AA 02 AB 5A 9B 19 8B DF 80 B3  Z½!Ä.|ª.«Z›.‹ß€³
000919A0  B0 3F 68 C5 E6 DF FC 91 18 EA 38 2E 5D 09 7B AC  °?hÅæßü‘.ê8.].{¬
000919B0  01 E6 09 62 11 52 61 19 A6 8F 6A 21 81 77 59 54  .æ.b.Ra.¦.j!.wYT
000919C0  1D 0A AA 75 61 3C A5 64 D2 12 AB 8B 80 C4 0D 98  ..ªua<¥dÒ.«‹€Ä.˜
000919D0  27 C6 45 94 89 7B 91 26 60 5B C0 35 FB F7 97 E2  'ÆE”‰{‘&`[À5û÷—â
000919E0  70 72 1E 6C D6 6E 01 3B 95 22 05 A2 1F 33 8D D6  pr.lÖn.;•".¢.3.Ö
000919F0  95 06 0D FF 8F C9 86 4A B2 45 23 68 BA 07 F7 7F  •..ÿ.É†J²E#hº.÷.
00091A00  F4 2F 0C F3 8D D2 43 06 89 E4 61 9A C7 C8 2E 12  ô/.ó.ÒC.‰äašÇÈ..
00091A10  02 37 1C D0 B0 AF 67 B2 66 1F 93 F9 D3 45 E4 5B  .7.Ð°¯g²f.“ùÓEä[
00091A20  A5 F4 DE 2B 49 37 B9 46 34 F5 A0 AA 0B 9F 43 C4  ¥ôÞ+I7¹F4õ ª.ŸCÄ
00091A30  00 00 00 04 00 00 00 01 00 03 00 50 00 00 00 00  ...........P....
00091A40  00 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00  ................
00091A50  E3 95 40 55 62 81 26 28 7A 8D 52 B3 A8 8E 74 D8  ã•@Ub.&(z.R³¨ŽtØ
00091A60  AE 86 D9 59 97 3E DA EA F5 E3 95 9D CA 78 E2 73  ®†ÙY—>Úêõã•.Êxâs
00091A70  B0 28 4B A9 7A F0 8A E5 85 D6 82 53 C5 C5 97 9D  °(K©zðŠå…Ö‚SÅÅ—.
00091A80  2A 5C CD 10 19 62 55 AD 5C 6D 55 F5 AC 5C 11 DD  *\Í..bU\mUõ¬\.Ý
00091A90  03 4A D1 76 FE C1 45 CF DB 9B 8B 5C A4 07 E9 0C  .JÑvþÁEÏÛ›‹\¤.é.
00091AA0  6D E6 AE E5 DF 6F 4B 47 68 6A 7A 61 D8 F2 10 A3  mæ®åßoKGhjzaØò.£
00091AB0  F5 EE B1 D8 26 EB 62 F3 05 19 E2 1B BC 8D 47 27  õî±Ø&ëbó..â.¼.G'
00091AC0  E4 75 5A 33 5A BF EE ED A0 32 61 93 38 8A 4E 65  äuZ3Z¿îí 2a“8ŠNe
00091AD0  14 D2 43 22 99 29 58 ED A7 AD 52 DC 32 31 91 C5  .ÒC"™)Xí§RÜ21‘Å
00091AE0  FB 60 BD 58 BD 53 C7 90 4A 03 3C 54 AD 23 2B 9A  û`½X½SÇ.J.<T#+š
00091AF0  B3 2F E8 A6 B0 93 58 95 18 0B 57 10 8A 15 A3 75  ³/è¦°“X•..W.Š.£u
00091B00  73 99 60 54 BD F6 1B A6 61 CF EA 29 27 34 25 E9  s™`T½ö.¦aÏê)'4%é
00091B10  2E 1B 26 D7 6D F1 FB BC D3 B9 E7 32 C7 C6 7B 54  ..&×mñû¼Ó¹ç2ÇÆ{T
00091B20  B5 87 50 9B 2F 05 97 00 28 37 92 0D 79 3C 44 C8  µ‡P›/.—.(7’.y<DÈ
00091B30  CD 83 19 98 89 B3 E4 7D 19 4F 0E 25 30 EA CB 49  Íƒ.˜‰³ä}.O.%0êËI
00091B40  06 20 E8 1C 4E C2 D4 DC 71 82 D6 1E A5 83 E3 A2  . è.NÂÔÜq‚Ö.¥ƒã¢
00091B50  5F 9A BD C2 5B C1 61 5C 60 F9 44 1F E1 F5 E8 13  _š½Â[Áa\`ùD.áõè.
00091B60  43 2C 9F 5D 13 F1 98 08 D0 4F 86 F9 61 80 21 71  C,Ÿ].ñ˜.ÐO†ùa€!q
00091B70  52 AB E8 8B E5 FD DF AE 42 2E 9F B5 E4 54 9A 0B  R«è‹åýß®B.ŸµäTš.
00091B80  5D D5 4E AE 8C A1 15 8F 5B 6C 76 F2 F2 68 A4 67  ]ÕN®Œ¡..[lvòòh¤g
00091B90  8B B4 17 2F B1 3A 4C 2A 0B C6 C7 D9 A7 3F 08 49  ‹´./±:L*.ÆÇÙ§?.I
00091BA0  8D B9 F6 E8 A8 16 D4 91 40 11 5C 94 8D 56 8E 0F  .¹öè¨.Ô‘@.\”.VŽ.
00091BB0  73 EC 77 CC EF 4F 82 35 FC 5D 64 1F 54 0F DC C4  sìwÌïO‚5ü]d.T.ÜÄ
00091BC0  C2 25 84 29 EE 33 7D C9 21 66 CC DD BB EE 3A EC  Â%„)î3}É!fÌÝ»î:ì
00091BD0  63 84 7F CB 4E 0A FF 12 5F 35 2E 85 74 65 B5 FE  c„.ËN.ÿ._5.…teµþ
00091BE0  2A 71 62 B4 4C 6D 14 3A 8D 67 86 C7 A2 F3 32 6F  *qb´Lm.:.g†Ç¢ó2o
00091BF0  90 D1 22 F2 BF 2C 0A 0C 5E 97 FD C4 DF 39 22 3A  .Ñ"ò¿,..^—ýÄß9":
00091C00  14 BD A2 8B 9F 54 EE 47 23 37 A6 AF 60 F6 53 94  .½¢‹ŸTîG#7¦¯`öS”
00091C10  E1 07 51 B8 7A D0 C0 C4 B2 47 86 50 D0 45 7E 02  á.Q¸zÐÀÄ²G†PÐE~.
00091C20  A5 B8 D0 3E F3 BA 48 F9 1B CF 51 BF 3E 26 FC 42  ¥¸Ð>óºHù.ÏQ¿>&üB
00091C30  84 FF 1B 54 4E 0B 1B F3 BA A6 57 78 B8 36 10 56  „ÿ.TN..óº¦Wx¸6.V
00091C40  AA 37 01 01 B8 13 72 82 B1 F8 27 5E 7A 7F 7A B4  ª7..¸.r‚±ø'^z.z´
00091C50  60 3B 80 53 60 DB 42 F2 C5 6D 99 2E 62 44 4B F7  `;€S`ÛBòÅm™.bDK÷
00091C60  07 41 BC 19 F2 17 F3 46 96 BB D1 8D 32 39 33 35  .A¼.ò.óF–»Ñ.2935
00091C70  78 0E 84 45 13 2F C3 1B C4 62 D4 D5 9D B6 59 4B  x.„E./Ã.ÄbÔÕ.¶YK
00091C80  24 C1 FF 8F DB 0D E5 9C 19 8B C2 37 9D 8D AF F7  $Áÿ.Û.åœ.‹Â7..¯÷
00091C90  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

NOR: trvk_prg1 (0x060000)

NAND: trvk_prg1 (0x0092810)

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00060000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 E0  ...............à
00060010  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
00060020  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 E0  ...............à
00060030  11 07 9A A0 E5 A2 D4 48 DE 06 9C E7 E3 74 A8 67  ..š å¢ÔHÞ.œçãt¨g
00060040  33 E5 95 F4 56 F4 DC E3 9B 64 56 A1 0C 11 98 79  3å•ôVôÜã›dV¡..˜y
00060050  DC F1 1E 36 EC A8 F2 3E 91 F3 0E 36 21 06 33 4E  Üñ.6ì¨ò>‘ó.6!.3N
00060060  F0 01 3B 74 F0 25 0A 86 E5 9A 9B 2B E5 86 88 9B  ð.;tð%.†åš›+å†ˆ›
00060070  5F 6F 18 9F 98 28 5A 3B B5 FE 4C 2A 82 CB 94 C3  _o.Ÿ˜(Z;µþL*‚Ë”Ã
00060080  22 8C 42 B8 B6 1A D7 01 11 A9 6E 75 1C F2 80 54  "ŒB¸¶.×..©nu.ò€T
00060090  3B 69 FD 41 DB FB BC 19 86 C8 77 45 19 16 7B 42  ;iýAÛû¼.†ÈwE..{B
000600A0  A6 36 FF 86 F0 2E 74 01 9F 04 F6 FC A3 52 52 21  ¦6ÿ†ð.t.Ÿ.öü£RR!
000600B0  11 E9 A3 A0 7C 15 F7 0D 1C 64 28 6F 20 84 B5 92  .é£ |.÷..d(o „µ’
000600C0  7E 19 59 AF CB 6E 0C 78 9C A0 C3 48 DB 1B F8 EE  ~.Y¯Ën.xœ ÃHÛ.øî
000600D0  DF 0D AA 31 45 63 CF 8B 36 82 5F 70 0E 31 AD F0  ß.ª1EcÏ‹6‚_p.1ð
000600E0  7B 6F 2B B3 4A 89 67 68 D1 6F 81 0B D3 24 62 C8  {o+³J‰ghÑo..Ó$bÈ
000600F0  36 43 59 FC DD E1 53 D0 E8 39 CC 7E 91 B2 BE B7  6CYüÝáSÐè9Ì~‘²¾·
00060100  F1 6B 25 FE 72 0B B6 EB 1D AF AA EC AD 6E 65 B6  ñk%þr.¶ë.¯ªìne¶
00060110  B6 3D 0C 95 B7 50 0F 85 15 43 A2 E5 1F 6C 23 5D  ¶=.•·P.….C¢å.l#]
00060120  1A DA 65 56 52 85 60 28 DD 9C 61 2F B3 3A 2F 0B  .ÚeVR…`(Ýœa/³:/.
00060130  A4 58 8D BB 4B 5D BE 02 32 ED 70 BF 26 81 71 81  ¤X.»K]¾.2íp¿&.q.
00060140  6C 6F 5E EF AC 0C 81 BB 86 BB 8A 40 84 55 6A 38  lo^ï¬..»†»Š@„Uj8
00060150  69 8F 48 FA 86 FF C0 74 72 F7 A0 16 37 00 66 C8  i.Hú†ÿÀtr÷ .7.fÈ
00060160  19 5A A6 1D 3B CD 05 B9 F7 FA 06 D6 99 9A 18 47  .Z¦.;Í.¹÷ú.Ö™š.G
00060170  2F 4E 13 EF 3E D5 86 CF D6 2B F3 A5 18 64 46 5B  /N.ï>Õ†ÏÖ+ó¥.dF[
00060180  73 B4 47 42 7C A3 C0 5B 0E 96 39 83 D4 C2 DC 7F  s´GB|£À[.–9ƒÔÂÜ.
00060190  FA 98 B3 D5 79 39 93 2B 5B F7 CA BE CB D0 73 88  ú˜³Õy9“+[÷Ê¾ËÐsˆ
000601A0  FC A0 D3 66 F6 FE D6 78 A7 1E 2B 10 8C DA 80 79  ü ÓföþÖx§.+.ŒÚ€y
000601B0  E7 C9 02 26 ED F2 5E 6F 76 0A D4 C1 8D F3 42 0F  çÉ.&íò^ov.ÔÁ.óB.
000601C0  94 26 23 F2 E2 E5 EA 5D 12 E4 EF 32 32 D2 9F BA  ”&#òâåê].äï22ÒŸº
000601D0  7B 13 FD 52 96 05 68 E1 67 17 38 1E 2C EC DA 4D  {.ýR–.hág.8.,ìÚM
000601E0  E4 15 1F 0C 3E 12 F5 FC 41 2F 18 BE F9 66 8B 15  ä...>.õüA/.¾ùf‹.
000601F0  CA EE D4 9C DF C1 D0 7F B5 B0 DA 33 76 93 0A DC  ÊîÔœßÁÐ.µ°Ú3v“.Ü
00060200  A3 EA 21 2B D4 FA B6 B4 82 59 EC 7B 83 84 74 5B  £ê!+Ôú¶´‚Yì{ƒ„t[
00060210  00 00 00 04 00 00 00 01 00 03 00 55 00 00 00 00  ...........U....
00060220  00 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00  ................
00060230  A9 AB B0 51 B7 24 01 CB 41 89 9E EB F1 39 C1 3C  ©«°Q·$.ËA‰žëñ9Á<
00060240  4D 99 36 9A A2 E9 41 4B 3B A3 4C 05 75 76 BC 2A  M™6š¢éAK;£L.uv¼*
00060250  D2 68 E3 1C 96 17 DE 0F 61 AD D5 1C AE 84 39 25  Òhã.–.Þ.aÕ.®„9%
00060260  A0 44 95 04 7D 03 C0 05 41 A4 75 B1 AE 65 62 31   D•.}.À.A¤u±®eb1
00060270  D5 A2 66 5C 84 28 29 5B 55 60 48 7F 51 27 E2 99  Õ¢f\„()[U`H.Q'â™
00060280  7D 08 CC CD D0 0F 83 E4 5A 4A BE A2 73 BA 15 AC  }.ÌÍÐ.ƒäZJ¾¢sº.¬
00060290  6A 23 DD 62 E2 F9 1C 66 E8 3E 43 9D E3 12 3B EC  j#Ýbâù.fè>C.ã.;ì
000602A0  0E 8A 89 5B D4 2A D2 30 DA 48 FB 85 70 28 EE A0  .Š‰[Ô*Ò0ÚHû…p(î 
000602B0  2D CB 3F 86 7A F4 FF E8 0A 85 D6 36 83 4C 59 0F  -Ë?†zôÿè.…Ö6ƒLY.
000602C0  23 63 0B 91 99 3C BC F7 42 08 EF DD C2 95 BC 13  #c.‘™<¼÷B.ïÝÂ•¼.
000602D0  F7 DF 26 66 85 C2 6E D5 EF 76 22 9E 59 84 B8 9D  ÷ß&f…ÂnÕïv"žY„¸.
000602E0  2C 72 60 8E F4 D0 0F 01 0B 6D D9 6F 8C 41 16 24  ,r`ŽôÐ...mÙoŒA.$
000602F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00092810  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 E0  ...............à
00092820  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
00092830  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 E0  ...............à
00092840  04 EF 0B 35 24 11 B9 30 06 D9 27 87 3F 33 20 F6  .ï.5$.¹0.Ù'‡?3 ö
00092850  7E 9F CC 15 A8 6C 23 5D 75 A6 CA CB D1 25 84 B6  ~ŸÌ.¨l#]u¦ÊËÑ%„¶
00092860  50 18 D4 24 61 46 AC DB B9 D8 44 8E 1D DF A0 54  P.Ô$aF¬Û¹ØDŽ.ß T
00092870  DD 15 01 12 EC 5C 6C C6 76 BF 6E E2 CC 0A C0 D8  Ý...ì\lÆv¿nâÌ.ÀØ
00092880  E9 C7 B4 E6 B6 E2 B3 43 68 FA 2D D5 85 36 6E AC  éÇ´æ¶â³Chú-Õ…6n¬
00092890  68 B1 D8 F2 36 E8 C4 F1 41 0D 46 97 C0 27 B4 05  h±Øò6èÄñA.F—À'´.
000928A0  F5 D7 88 6B AE 87 5F 03 02 1F 4D 57 CA B7 EB B7  õ×ˆk®‡_...MWÊ·ë·
000928B0  BA 8D F6 A9 F6 D3 13 46 D9 7E F0 F5 68 E8 A3 2A  º.ö©öÓ.FÙ~ðõhè£*
000928C0  89 4F 43 83 C3 48 79 A4 04 CB 41 DE E0 77 9B C3  ‰OCƒÃHy¤.ËAÞàw›Ã
000928D0  6D 14 76 33 1B C7 EE 54 FC DD 70 93 37 C3 D2 66  m.v3.ÇîTüÝp“7ÃÒf
000928E0  71 E2 A2 5A E7 57 7E 4E 44 39 DA 90 4F C4 32 4B  qâ¢ZçW~ND9Ú.OÄ2K
000928F0  27 84 72 F3 5B EC A9 5A 67 E5 A0 92 CA A0 EF A7  '„ró[ì©Zgå ’Ê ï§
00092900  06 37 7D F1 CA 39 2D 38 9E 16 A1 2F 39 09 35 A0  .7}ñÊ9-8ž.¡/9.5 
00092910  10 8D C3 97 7C 0C 56 EE F0 D7 62 9D 13 82 5B 64  ..Ã—|.Vîð×b..‚[d
00092920  81 F0 7B 72 4B B1 81 16 AD C9 EB E8 51 21 15 E8  .ð{rK±..ÉëèQ!.è
00092930  E0 1E 91 7A 24 BF 6F 38 0A 10 84 F4 3F 0E 78 A3  à.‘z$¿o8..„ô?.x£
00092940  41 2A 44 0F 5A BE 1B 34 0B 51 6A D4 B1 2C A2 6B  A*D.Z¾.4.QjÔ±,¢k
00092950  7A 6D 80 E5 EA CF 64 48 38 79 FB 8D 6F 5E 4D A3  zm€åêÏdH8yû.o^M£
00092960  84 93 D1 14 A9 68 18 54 9E 74 9F 6D 65 A9 A4 FF  „“Ñ.©h.TžtŸme©¤ÿ
00092970  43 76 BF 9C C0 31 11 E7 FA B9 A0 E2 05 A4 01 01  Cv¿œÀ1.çú¹ â.¤..
00092980  96 B7 87 35 12 06 1D E0 E8 EF ED 05 3F 7F 36 E7  –·‡5...àèïí.?.6ç
00092990  00 6B 06 FE 3E A2 55 F7 54 F7 A1 D8 0A 1A 18 FB  .k.þ>¢U÷T÷¡Ø...û
000929A0  63 33 96 33 89 25 6C 62 E0 19 9D C5 1A 21 A1 C3  c3–3‰%lbà..Å.!¡Ã
000929B0  70 0F 52 3F A7 C7 79 BC D1 FA 44 35 BE 7D 2B 31  p.R?§Çy¼ÑúD5¾}+1
000929C0  A1 E7 F0 43 B3 AD 0A 34 BB 6C 3C 61 52 12 59 A1  ¡çðC³.4»l<aR.Y¡
000929D0  EF 1F 22 4A 00 51 2C C0 DC DD E0 3C 40 3D 5C CB  ï."J.Q,ÀÜÝà<@=\Ë
000929E0  5D 41 FE 72 FB 6B 2D 9A 9E 88 22 DE B9 0E 2A 1B  ]Aþrûk-šžˆ"Þ¹.*.
000929F0  39 DB 17 31 C4 6D A4 A1 B3 8C C6 07 8F 37 73 D6  9Û.1Äm¤¡³ŒÆ..7sÖ
00092A00  8C F2 EC AB CE B8 C0 6D 93 C3 50 F0 06 8E 96 D5  Œòì«Î¸Àm“ÃPð.Ž–Õ
00092A10  A2 9E F4 07 44 C3 A0 9F 46 D8 F6 AD 6B 7E E5 0A  ¢žô.DÃ ŸFØök~å.
00092A20  00 00 00 04 00 00 00 01 00 03 00 41 00 00 00 00  ...........A....
00092A30  00 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00  ................
00092A40  9C 0E 10 CF E7 29 C7 2F 94 D8 59 84 BA 33 58 60  œ..Ïç)Ç/”ØY„º3X`
00092A50  7E 4A 08 4D B4 79 11 67 6E DD 52 3A B8 25 78 42  ~J.M´y.gnÝR:¸%xB
00092A60  FB EA 7C 15 87 D5 41 3B 0C 0C 7A 18 CE 24 FD 48  ûê|.‡ÕA;..z.Î$ýH
00092A70  4D 3A 67 BB 94 AE 71 07 92 61 A3 A8 94 90 D2 86  M:g»”®q.’a£¨”.Ò†
00092A80  D9 C5 6E 04 DB F1 4A 36 B3 89 1E BA BF FB 5F 29  ÙÅn.ÛñJ6³‰.º¿û_)
00092A90  BE F8 51 28 0B F0 69 F5 28 8C E7 AD 23 A2 00 93  ¾øQ(.ðiõ(Œç#¢.“
00092AA0  78 A4 CF F4 0A 14 9A CF 74 4C 5A 38 B3 25 52 EB  x¤Ïô..šÏtLZ8³%Rë
00092AB0  B9 E1 AC 85 C1 80 19 16 F2 3A D5 62 D5 00 C4 BF  ¹á¬…Á€..ò:ÕbÕ.Ä¿
00092AC0  7A 42 03 C9 ED D1 2A 95 8F 24 B6 D8 FD FC 76 1E  zB.ÉíÑ*•.$¶Øýüv.
00092AD0  5C 3A 9F 2E 0E 26 A3 66 9B 1A C1 AE B8 9A 79 21  \:Ÿ..&£f›.Á®¸šy!
00092AE0  43 E1 1C 4B F1 C6 47 7D 33 8F A4 AB DF 54 04 67  Cá.KñÆG}3.¤«ßT.g
00092AF0  DA 8E 15 C5 5C 6D 0C A7 70 AC C7 62 F3 2C 3A EF  ÚŽ.Å\m.§p¬Çbó,:ï
00092B00  D5 8B 6A 43 50 FF DB BC 83 E5 6C EB 6F CE 9B A0  Õ‹jCPÿÛ¼ƒålëoÎ› 
00092B10  4A 01 34 92 73 1A 05 61 65 91 66 9C 0A 0A 38 06  J.4’s..ae‘fœ..8.
00092B20  B5 78 8C C3 DB B2 20 91 89 61 54 E4 01 2E AA 43  µxŒÃÛ² ‘‰aTä..ªC
00092B30  10 10 C9 27 FF 00 85 FD 48 9A 95 96 89 E9 5B B1  ..É'ÿ.…ýHš•–‰é[±
00092B40  34 38 06 E9 17 B7 75 28 B0 CB 0D E8 21 7C 03 75  48.é.·u(°Ë.è!|.u
00092B50  01 67 48 05 A9 E9 0E 92 92 C7 32 6F 86 AE 75 15  .gH.©é.’’Ç2o†®u.
00092B60  D0 B6 68 3F 59 4C E7 CA E5 03 07 F1 EF 6E 5D 3C  Ð¶h?YLçÊå..ñïn]<
00092B70  0F 13 CC A4 CB C7 7C D0 8A AC A8 25 18 AE 0C 1C  ..Ì¤ËÇ|ÐŠ¬¨%.®..
00092B80  97 EA D2 F4 66 A0 6C 1D E2 4F B0 BA FB AA 94 7F  —êÒôf l.âO°ºûª”.
00092B90  0E F9 CA F4 9F 95 E2 7F 2B DC 11 C9 00 9A 21 8F  .ùÊôŸ•â.+Ü.É.š!.
00092BA0  DE 50 52 CD EB EB 9D A5 54 A4 0B 38 5E 84 BE DA  ÞPRÍëë.¥T¤.8^„¾Ú
00092BB0  78 0A 54 48 86 A9 38 BD 77 57 D5 10 67 89 6B 34  x.TH†©8½wWÕ.g‰k4
00092BC0  64 52 60 1D 5A 64 40 C5 57 A9 DA C8 9C 2E 2B 6A  dR`.Zd@ÅW©ÚÈœ.+j
00092BD0  0D 34 A4 92 B0 27 9D 7B AD 16 17 AF 47 51 79 A7  .4¤’°'.{..¯GQy§
00092BE0  31 1A CC 97 49 14 30 DF EB 7E 49 68 B9 DD 46 0E  1.Ì—I.0ßë~Ih¹ÝF.
00092BF0  6D 31 BD 80 A0 D9 7C 09 2F E5 4B F3 26 05 2A A0  m1½€ Ù|./åKó&.* 
00092C00  28 EE 89 EE 2F 09 7D 7A 90 15 CB 05 1C 98 CD 10  (î‰î/.}z..Ë..˜Í.
00092C10  48 87 A0 C8 7E 9F B5 71 F6 EE 28 94 A2 90 EA 8B  H‡ È~Ÿµqöî(”¢.ê‹
00092C20  97 CA 77 F7 11 2D AC 98 CD D6 9C 4C 8C B0 0B D1  —Êw÷.-¬˜ÍÖœLŒ°.Ñ
00092C30  E6 DD 7A 96 09 E5 B5 AD DD CA 42 FE 72 1F 2E 35  æÝz–.åµÝÊBþr..5
00092C40  BE 7E F5 5D FF E0 70 C3 9C 31 5B 90 3D 85 35 15  ¾~õ]ÿàpÃœ1[.=…5.
00092C50  B6 75 1B 27 05 E0 45 60 99 02 F2 EC 7E FD EA A1  ¶u.'.àE`™.òì~ýê¡
00092C60  73 15 4C 7D F5 70 7F FE 15 2F BA CF FD D0 D8 A1  s.L}õp.þ./ºÏýÐØ¡
00092C70  00 82 40 76 CE 41 E7 A8 FF 9C F2 3D DE 1E C5 E4  .‚@vÎAç¨ÿœò=Þ.Åä
00092C80  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

trvk_pkg

NOR: splitted into 2 seperate sections trvk_pkg0 (0x080000) + trvk_pkg1 (0x0A0000)
NAND: 1 region (0x0093800) with 2 combined sections of trvk_pkg0 + trvk_pkg1

example

NOR: trvk_pkg0 (0x080000)

NAND: trvk_pkg0 (0x0093800)

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00080000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 60  ...............`
00080010  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
00080020  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 60  ...............`
00080030  04 CD F8 01 8F 3F 02 A4 71 B2 38 4D BB EC 6F 91  .Íø..?.¤q²8M»ìo‘
00080040  1F 40 3D A3 D4 EB C8 98 82 53 76 7A BD B7 68 7D  .@=£ÔëÈ˜‚Svz½·h}
00080050  E3 FF 77 A4 88 CD FD D6 C2 96 08 58 B4 1A 8D 93  ãÿw¤ˆÍýÖÂ–.X´..“
00080060  42 79 4E 65 DF 46 05 A2 A2 6E 88 F0 37 9B 1E 58  ByNeßF.¢¢nˆð7›.X
00080070  C7 3B 4D 3D AE 3D EB 2C 3E 7D 1A 08 47 6C 36 50  Ç;M=®=ë,>}..Gl6P
00080080  BC 40 AD 12 57 DC FA FF 30 CB 91 6E F6 17 CC 4D  ¼@.WÜúÿ0Ë‘nö.ÌM
00080090  8D AC 6D F2 AA 8C 23 18 FA 8E D4 E1 DA C2 0C F8  .¬mòªŒ#.úŽÔáÚÂ.ø
000800A0  DC 12 C6 27 FC CB 94 BF 5B F9 86 75 F4 39 1E 9D  Ü.Æ'üË”¿[ù†uô9..
000800B0  7C 4A E4 94 2E C1 7B E7 2B 4E 70 C7 41 98 77 E8  |Jä”.Á{ç+NpÇA˜wè
000800C0  1F A5 DD 45 BA 87 E5 7C A1 DA E5 F4 0F 00 C3 E5  .¥ÝEº‡å|¡Úåô..Ãå
000800D0  E3 B1 F4 A1 EE BD F2 71 9E 04 47 61 9E 6A 33 60  ã±ô¡î½òqž.Gažj3`
000800E0  84 ED 3A CD DD DB BF 51 24 09 66 81 FB 62 D5 C8  „í:ÍÝÛ¿Q$.f.ûbÕÈ
000800F0  D7 5A B0 7E 0D 61 B9 7D 44 64 1A 81 78 B1 EB 94  ×Z°~.a¹}Dd..x±ë”
00080100  60 8D 53 72 D2 30 12 F6 6B A2 D7 41 45 EC 41 39  `.SrÒ0.ök¢×AEìA9
00080110  5E DD F7 9A 4C FC 6F B2 7A C5 90 43 1C FD 61 6C  ^Ý÷šLüo²zÅ.C.ýal
00080120  0E 0F D9 6D 30 20 07 AA A8 CA 12 11 EC 06 86 C1  ..Ùm0 .ª¨Ê..ì.†Á
00080130  D7 0B CE A8 96 2F F5 B5 25 2B 57 11 07 F6 6E A9  ×.Î¨–/õµ%+W..ön©
00080140  C7 2E CB DB AF 7C F4 6B 5F 40 D2 69 BC 2D B7 E7  Ç.ËÛ¯|ôk_@Òi¼-·ç
00080150  81 11 DA D4 8F D6 FE 56 EF B2 17 B7 F0 36 D7 8A  ..ÚÔ.ÖþVï².·ð6×Š
00080160  4E 67 5C F6 41 9B 10 13 C9 FC 82 60 F4 29 39 1E  Ng\öA›..Éü‚`ô)9.
00080170  B3 31 65 C5 49 E8 AA CC 7E 6D 69 71 03 C6 A4 19  ³1eÅIèªÌ~miq.Æ¤.
00080180  E6 39 FB EE 9E B0 DC 64 C8 1B 3E 17 FA 0A C3 56  æ9ûîž°ÜdÈ.>.ú.ÃV
00080190  7C CD F5 0E DF 7A 7F B0 50 2E 6B 5F 7F CA 41 DB  |Íõ.ßz.°P.k_.ÊAÛ
000801A0  A6 D5 39 14 58 0C D5 DE A8 8E F6 31 AF 4A 5A 27  ¦Õ9.X.ÕÞ¨Žö1¯JZ'
000801B0  F9 34 5D FC A7 36 B3 F1 6B 78 E1 F1 2E 11 45 29  ù4]ü§6³ñkxáñ..E)
000801C0  93 6A BE 51 D4 77 5F 70 52 83 5F 90 C0 BB 21 F3  “j¾QÔw_pRƒ_.À»!ó
000801D0  ED E0 50 42 3F 6E C8 05 CA BA 7C BB 92 44 74 8D  íàPB?nÈ.Êº|»’Dt.
000801E0  52 3D 85 EB BF 89 C5 78 0E FE 94 0F 7F 9C D3 48  R=…ë¿‰Åx.þ”..œÓH
000801F0  7A CA AB 6B FC 12 4A E6 05 0F 7D 9E FA 49 0F 6E  zÊ«kü.Jæ..}žúI.n
00080200  48 38 57 79 61 85 AE 15 F4 CA 49 E3 68 BE B7 72  H8Wya…®.ôÊIãh¾·r
00080210  00 00 00 03 00 00 00 02 00 02 00 30 00 00 00 00  ...........0....
00080220  00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
00080230  4A AF 85 55 7D 29 E1 6B A1 4B 3F 7F 31 65 34 23  J¯…U})ák¡K?.1e4#
00080240  07 16 AE 72 6C 89 D1 28 26 84 CC 3B 4F 55 40 7B  ..®rl‰Ñ(&„Ì;OU@{
00080250  59 0B 23 DB F1 12 06 34 08 33 B8 97 2E A9 54 A3  Y.#Ûñ..4.3¸—.©T£
00080260  4A A0 1C F8 18 8A C0 32 AC 62 C9 78 62 17 6B 0F  J .ø.ŠÀ2¬bÉxb.k.
00080270  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00093800  00 00 00 00 00 00 10 10 00 00 00 00 00 00 10 10  ................
00093810  00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00  ...... .........
00093820  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 40  ...............@
00093830  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
00093840  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 40  ...............@
00093850  F6 93 38 8E C8 46 D5 FF 34 53 9D 12 91 7E C6 96  ö“8ŽÈFÕÿ4S..‘~Æ–
00093860  BA 4F B8 36 82 1A 4F 40 19 88 B2 C8 56 B3 DA 4B  ºO¸6‚.O@.ˆ²ÈV³ÚK
00093870  62 EB 84 D3 8A 95 F9 DD 6C D7 4C AB 47 8D D1 1A  bë„ÓŠ•ùÝl×L«G.Ñ.
00093880  A6 64 B3 55 21 71 53 8C DD 8C 61 1F B0 7E 5E D2  ¦d³U!qSŒÝŒa.°~^Ò
00093890  DB 1A 07 DA 37 4E 07 92 E7 B2 35 F1 E0 FA F8 13  Û..Ú7N.’ç²5ñàúø.
000938A0  EC D9 94 1C 72 A0 45 38 79 85 6A 4E 02 CC 55 41  ìÙ”.r E8y…jN.ÌUA
000938B0  21 3D F1 48 32 98 6E CB 86 0A 38 6E 33 C6 2E 8D  !=ñH2˜nË†.8n3Æ..
000938C0  1E 51 DC 7E C5 34 E6 5B 27 D4 5B 79 B4 34 0D 59  .QÜ~Å4æ['Ô[y´4.Y
000938D0  49 F9 F0 6E F6 94 25 3D 6A E0 E9 40 69 74 68 B4  Iùðnö”%=jàé@ith´
000938E0  C5 C6 A3 95 62 E0 69 6E CD 6C CD 48 32 DD 11 8C  ÅÆ£•bàinÍlÍH2Ý.Œ
000938F0  1A D7 9B 37 8A 6F 33 C7 A1 27 D1 1C A4 24 E7 96  .×›7Šo3Ç¡'Ñ.¤$ç–
00093900  F0 75 BC 3A BE 15 26 CD 83 EA C8 11 F0 50 4D F8  ðu¼:¾.&ÍƒêÈ.ðPMø
00093910  A0 15 2F 68 6E AE 5F 28 D8 F5 EA 39 A3 00 5E 06   ./hn®_(Øõê9£.^.
00093920  D6 28 21 B7 36 49 29 27 73 76 D2 37 93 AB AB B2  Ö(!·6I)'svÒ7“««²
00093930  1A B3 AD A2 75 64 D3 73 88 4F D3 8E 23 B3 16 4A  .³¢udÓsˆOÓŽ#³.J
00093940  BD 4A E2 B3 D0 AE B0 12 AC 91 33 EB AD 75 3E 47  ½Jâ³Ð®°.¬‘3ëu>G
00093950  8F E4 E2 D7 CE 35 90 BB 7A E0 AA 95 8D 88 93 22  .äâ×Î5.»zàª•.ˆ“"
00093960  7A EB 8D C0 92 E9 74 30 7A 20 61 A6 36 5D 79 BD  zë.À’ét0z a¦6]y½
00093970  11 9E B5 FC 64 F4 DF B6 E6 5E B7 7D 64 76 A7 B9  .žµüdôß¶æ^·}dv§¹
00093980  E8 12 6A 60 3B 6F 4F 4D F0 4A 8C 33 28 10 AB 60  è.j`;oOMðJŒ3(.«`
00093990  B5 D5 0C EB 2E 89 02 91 B4 77 EE 4B 0A 95 B9 F1  µÕ.ë.‰.‘´wîK.•¹ñ
000939A0  66 CF 5E 0A D4 A8 FA 85 DB 14 9E 54 36 86 B9 A0  fÏ^.Ô¨ú…Û.žT6†¹ 
000939B0  F2 82 42 6A 76 8B D1 AD 72 2A 86 8E 10 92 FC 7A  ò‚Bjv‹Ñr*†Ž.’üz
000939C0  2B A2 A9 55 31 BD F3 F4 95 64 A9 F6 D0 F4 A7 9B  +¢©U1½óô•d©öÐô§›
000939D0  35 9E FF C6 C1 98 10 A2 41 47 F9 E1 B0 68 ED DD  5žÿÆÁ˜.¢AGùá°híÝ
000939E0  8E AB E6 E8 A8 0F 1E 2F C3 50 3A 3B FA F4 2E 90  Ž«æè¨../ÃP:;úô..
000939F0  5F 1C 3E 52 FE 76 01 99 0A 99 17 B6 BB 11 39 04  _.>Rþv.™.™.¶».9.
00093A00  CE 79 FD 50 3A 59 61 24 16 8D 8A 08 DD F7 88 A6  ÎyýP:Ya$..Š.Ý÷ˆ¦
00093A10  32 6F 77 E0 12 22 70 73 2C 1A 44 DE B7 00 D6 50  2owà."ps,.DÞ·.ÖP
00093A20  AD 22 CE 7F AA 87 65 AA A3 0B D8 7A 84 FE CA 16  "Î.ª‡eª£.Øz„þÊ.
00093A30  00 00 00 03 00 00 00 02 00 01 00 60 00 00 00 00  ...........`....
00093A40  00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
00093A50  C4 1E 40 5D 94 83 6F 00 E8 86 36 1C 1E C0 A6 9F  Ä.@]”ƒo.è†6..À¦Ÿ
00093A60  D0 34 53 63 9E 70 EB 64 43 9F 24 34 28 85 7A 04  Ð4ScžpëdCŸ$4(…z.
00093A70  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

NOR: trvk_pkg1 (0x0A0000)

NAND: trvk_pkg1 (0x0094810)

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
000A0000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 60  ...............`
000A0010  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
000A0020  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 60  ...............`
000A0030  04 CD F8 01 8F 3F 02 A4 71 B2 38 4D BB EC 6F 91  .Íø..?.¤q²8M»ìo‘
000A0040  1F 40 3D A3 D4 EB C8 98 82 53 76 7A BD B7 68 7D  .@=£ÔëÈ˜‚Svz½·h}
000A0050  E3 FF 77 A4 88 CD FD D6 C2 96 08 58 B4 1A 8D 93  ãÿw¤ˆÍýÖÂ–.X´..“
000A0060  42 79 4E 65 DF 46 05 A2 A2 6E 88 F0 37 9B 1E 58  ByNeßF.¢¢nˆð7›.X
000A0070  C7 3B 4D 3D AE 3D EB 2C 3E 7D 1A 08 47 6C 36 50  Ç;M=®=ë,>}..Gl6P
000A0080  BC 40 AD 12 57 DC FA FF 30 CB 91 6E F6 17 CC 4D  ¼@.WÜúÿ0Ë‘nö.ÌM
000A0090  8D AC 6D F2 AA 8C 23 18 FA 8E D4 E1 DA C2 0C F8  .¬mòªŒ#.úŽÔáÚÂ.ø
000A00A0  DC 12 C6 27 FC CB 94 BF 5B F9 86 75 F4 39 1E 9D  Ü.Æ'üË”¿[ù†uô9..
000A00B0  7C 4A E4 94 2E C1 7B E7 2B 4E 70 C7 41 98 77 E8  |Jä”.Á{ç+NpÇA˜wè
000A00C0  1F A5 DD 45 BA 87 E5 7C A1 DA E5 F4 0F 00 C3 E5  .¥ÝEº‡å|¡Úåô..Ãå
000A00D0  E3 B1 F4 A1 EE BD F2 71 9E 04 47 61 9E 6A 33 60  ã±ô¡î½òqž.Gažj3`
000A00E0  84 ED 3A CD DD DB BF 51 24 09 66 81 FB 62 D5 C8  „í:ÍÝÛ¿Q$.f.ûbÕÈ
000A00F0  D7 5A B0 7E 0D 61 B9 7D 44 64 1A 81 78 B1 EB 94  ×Z°~.a¹}Dd..x±ë”
000A0100  60 8D 53 72 D2 30 12 F6 6B A2 D7 41 45 EC 41 39  `.SrÒ0.ök¢×AEìA9
000A0110  5E DD F7 9A 4C FC 6F B2 7A C5 90 43 1C FD 61 6C  ^Ý÷šLüo²zÅ.C.ýal
000A0120  0E 0F D9 6D 30 20 07 AA A8 CA 12 11 EC 06 86 C1  ..Ùm0 .ª¨Ê..ì.†Á
000A0130  D7 0B CE A8 96 2F F5 B5 25 2B 57 11 07 F6 6E A9  ×.Î¨–/õµ%+W..ön©
000A0140  C7 2E CB DB AF 7C F4 6B 5F 40 D2 69 BC 2D B7 E7  Ç.ËÛ¯|ôk_@Òi¼-·ç
000A0150  81 11 DA D4 8F D6 FE 56 EF B2 17 B7 F0 36 D7 8A  ..ÚÔ.ÖþVï².·ð6×Š
000A0160  4E 67 5C F6 41 9B 10 13 C9 FC 82 60 F4 29 39 1E  Ng\öA›..Éü‚`ô)9.
000A0170  B3 31 65 C5 49 E8 AA CC 7E 6D 69 71 03 C6 A4 19  ³1eÅIèªÌ~miq.Æ¤.
000A0180  E6 39 FB EE 9E B0 DC 64 C8 1B 3E 17 FA 0A C3 56  æ9ûîž°ÜdÈ.>.ú.ÃV
000A0190  7C CD F5 0E DF 7A 7F B0 50 2E 6B 5F 7F CA 41 DB  |Íõ.ßz.°P.k_.ÊAÛ
000A01A0  A6 D5 39 14 58 0C D5 DE A8 8E F6 31 AF 4A 5A 27  ¦Õ9.X.ÕÞ¨Žö1¯JZ'
000A01B0  F9 34 5D FC A7 36 B3 F1 6B 78 E1 F1 2E 11 45 29  ù4]ü§6³ñkxáñ..E)
000A01C0  93 6A BE 51 D4 77 5F 70 52 83 5F 90 C0 BB 21 F3  “j¾QÔw_pRƒ_.À»!ó
000A01D0  ED E0 50 42 3F 6E C8 05 CA BA 7C BB 92 44 74 8D  íàPB?nÈ.Êº|»’Dt.
000A01E0  52 3D 85 EB BF 89 C5 78 0E FE 94 0F 7F 9C D3 48  R=…ë¿‰Åx.þ”..œÓH
000A01F0  7A CA AB 6B FC 12 4A E6 05 0F 7D 9E FA 49 0F 6E  zÊ«kü.Jæ..}žúI.n
000A0200  48 38 57 79 61 85 AE 15 F4 CA 49 E3 68 BE B7 72  H8Wya…®.ôÊIãh¾·r
000A0210  00 00 00 03 00 00 00 02 00 02 00 30 00 00 00 00  ...........0....
000A0220  00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
000A0230  4A AF 85 55 7D 29 E1 6B A1 4B 3F 7F 31 65 34 23  J¯…U})ák¡K?.1e4#
000A0240  07 16 AE 72 6C 89 D1 28 26 84 CC 3B 4F 55 40 7B  ..®rl‰Ñ(&„Ì;OU@{
000A0250  59 0B 23 DB F1 12 06 34 08 33 B8 97 2E A9 54 A3  Y.#Ûñ..4.3¸—.©T£
000A0260  4A A0 1C F8 18 8A C0 32 AC 62 C9 78 62 17 6B 0F  J .ø.ŠÀ2¬bÉxb.k.
000A0270  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00094810  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 40  ...............@
00094820  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
00094830  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 40  ...............@
00094840  EC D1 F5 14 11 45 C9 F6 02 FA E1 8F B8 29 04 0A  ìÑõ..EÉö.úá.¸)..
00094850  16 EB B5 A4 76 41 3C CF 08 75 07 34 51 16 A7 91  .ëµ¤vA<Ï.u.4Q.§‘
00094860  DC 46 05 04 D1 36 10 FC BD 13 9D F2 C9 92 B8 3A  ÜF..Ñ6.ü½..òÉ’¸:
00094870  65 AD 3A 0C 30 56 EB 43 35 C6 A2 C2 44 37 30 A9  e:.0VëC5Æ¢ÂD70©
00094880  43 BC 62 CF FF 09 1C 7A D4 58 60 62 03 E6 77 43  C¼bÏÿ..zÔX`b.æwC
00094890  2E F8 57 10 1E 7C 71 CB 1D D0 F7 0B E7 4F 65 FA  .øW..|qË.Ð÷.çOeú
000948A0  ED DB E6 1F 29 79 14 28 C8 88 AC B5 0A 5D ED C6  íÛæ.)y.(Èˆ¬µ.]íÆ
000948B0  70 20 73 79 25 B0 FD 5E 88 CE 1C 9F 8C F0 86 6F  p sy%°ý^ˆÎ.ŸŒð†o
000948C0  2D 40 88 EE 8A 78 5E DF 9E DD 79 81 25 34 05 33  -@ˆîŠx^ßžÝy.%4.3
000948D0  F2 43 22 0B 81 67 A4 A0 28 AD 95 B1 7E 3B F6 9E  òC"..g¤ (•±~;öž
000948E0  57 F4 A9 8C 90 F0 78 CF 92 36 4E FB D9 52 D6 E2  Wô©Œ.ðxÏ’6NûÙRÖâ
000948F0  07 B7 6B 60 3A 02 61 23 C2 FB 1E DC B3 BA 8C 2B  .·k`:.a#Âû.Ü³ºŒ+
00094900  8F D0 AE 2B 09 E3 A7 D3 F5 01 44 EB E8 FD 92 C0  .Ð®+.ã§Óõ.Dëèý’À
00094910  4B 9B AC 67 D7 B2 03 74 3B 12 94 C8 DA 5C C7 CA  K›¬g×².t;.”ÈÚ\ÇÊ
00094920  A9 6D 3B 5E 74 FD 09 E2 ED 16 DE 53 66 6E 21 45  ©m;^tý.âí.ÞSfn!E
00094930  76 12 2E BC BA 5D AF 8A C6 6B 9D F2 EE 24 97 E1  v..¼º]¯ŠÆk.òî$—á
00094940  D3 CC 47 4B 52 D5 F3 91 87 18 C9 46 8F 88 40 C5  ÓÌGKRÕó‘‡.ÉF.ˆ@Å
00094950  B5 34 F8 EA 68 F0 0E 5C 40 78 4F 7C 6A E2 DC 31  µ4øêhð.\@xO|jâÜ1
00094960  20 86 2F E1 71 BE 2E 56 AE 1A 55 6C 02 89 96 ED   †/áq¾.V®.Ul.‰–í
00094970  42 80 11 37 98 FB 8A 54 DC B4 23 5A 98 F2 77 A6  B€.7˜ûŠTÜ´#Z˜òw¦
00094980  3B 0B EA 54 77 9B F4 93 74 BF E3 70 89 8A 25 A4  ;.êTw›ô“t¿ãp‰Š%¤
00094990  23 FE 5A 40 EA C9 A8 4C 66 21 ED 21 21 D3 FF 65  #þZ@êÉ¨Lf!í!!Óÿe
000949A0  3B D3 A8 3E B7 5D 41 65 50 5C 09 00 A1 6D 19 BF  ;Ó¨>·]AeP\..¡m.¿
000949B0  2A AE 0C 1D 09 33 C3 25 08 CE 2E B2 DA 71 3A 54  *®...3Ã%.Î.²Úq:T
000949C0  A8 22 BC E7 11 81 C8 7F D1 DC 24 5F DF D8 39 8B  ¨"¼ç..È.ÑÜ$_ßØ9‹
000949D0  51 C7 54 3C F0 03 F6 CA 07 35 9E DA 2B 8C 20 A2  QÇT<ð.öÊ.5žÚ+Œ ¢
000949E0  61 90 A3 B3 F4 D9 3A 19 CB 6A 73 A3 E8 0F 10 AA  a.£³ôÙ:.Ëjs£è..ª
000949F0  1C A7 07 24 17 CE 76 41 89 22 A8 13 42 6E EC 45  .§.$.ÎvA‰"¨.BnìE
00094A00  98 21 34 FF B3 EA BD CE 68 F1 D1 4C 9B 58 98 5C  ˜!4ÿ³ê½ÎhñÑL›X˜\
00094A10  A0 CD 1B 42 C4 EE 48 32 9F 66 3B 23 5C 1F C9 46   Í.BÄîH2Ÿf;#\.ÉF
00094A20  00 00 00 03 00 00 00 02 00 01 00 00 00 00 00 00  ................
00094A30  00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
00094A40  96 67 50 57 24 D5 E9 64 8A 82 14 49 FA 18 CD 82  –gPW$ÕédŠ‚.Iú.Í‚
00094A50  3F B8 3A 71 6B 4D 22 C8 D4 DE C5 3D A9 B6 54 0D  ?¸:qkM"ÈÔÞÅ=©¶T.
00094A60  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

creserved_0

size: 0x2A800
NAND only?

ros0

Location: 0x0C0000 - 0x7BFFFF

ros1

Location: 0x7C0000 - 0xEBFFFF

cvtrm

size: 0x40000
Location NOR: 0xEC0000 - 0xF00000

Second Region

NOR only

This region appears to directly follow the other region (at 0xF0000 = region size + header)

Not much is known about this at this stage.

Header

00F00000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F00010  00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD FA CE  .....¬àÿ....Þ.úÎ
00F00020  00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 02  ................
00F00030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
....
00F000B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F000C0  00 00 00 00 00 00 79 00 00 00 00 00 00 00 01 00  ......y.........
00F000D0  10 70 00 00 01 00 00 01 00 00 00 00 00 00 00 03  .p..............
00F000E0  10 70 00 00 02 00 00 01 00 00 00 00 00 00 00 03  .p..............
00F000F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
....
00F00140  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F00150  00 00 00 00 00 00 7A 00 00 00 00 00 00 00 04 00  ......z.........
00F00160  10 70 00 00 01 00 00 01 00 00 00 00 00 00 00 03  .p..............
00F00170  10 70 00 00 02 00 00 01 00 00 00 00 00 00 00 03  .p..............
00F00180  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
....
00F00FF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

CELL_EXTNOR_AREA

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
[...]
00F1FFE0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00F1FFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00F20000  43 45 4C 4C 5F 45 58 54 4E 4F 52 5F 41 52 45 41  CELL_EXTNOR_AREA      marker: CELL_EXTNOR_AREA
00F20010  00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F20020  00 00 02 00 00 00 00 44 00 00 00 00 A9 C8 06 D0  .......D....©È.Ð                             (differs in other version/console dump)
00F20030  C0 17 8D 34 55 A7 62 73 DD 16 A6 FB 75 A0 D2 10  À..4U§bsÝ.¦ûu Ò.
00F20040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F201F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F20200  00 00 00 07 46 55 4A 49 54 53 55 20 4D 48 5A 32  ....FUJITSU MHZ2      harddrive brand/model
00F20210  30 38 30 42 48 20 47 31 20 20 20 20 20 20 20 20  080BH G1        
00F20220  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                  
00F20230  20 20 20 20 4B 36 33 52 54 38 42 34 48 59 42 4B      K63RT8B4HYBK      harddrive serial
00F20240  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F3FFF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F40000  00 00 00 01 00 00 00 2C 6E 47 15 E8 38 9B C8 16  .......,nG.è8›È.      00F40000-00F40030      (same in other version/console dump)
00F40010  65 6E 0C 37 54 25 FE 7B 22 9A 31 75 72 22 63 2B  en.7T%þ{"š1ur"c+      is the same as
00F40020  31 DD 15 AA 60 7D EB F5 F7 A3 74 0B 9D DD 3B 3A  1Ý.ª`}ëõ÷£t..Ý;:      00F80000-00F80030
00F40030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F5FFF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F60000  10 00 00 0C 00 04 10 03 00 00 00 01 20 00 00 34  ............ ..4      00F60000-00F60040      (differs in other version/console dump)
00F60010  00 00 00 00 00 00 00 00 5B 3F 73 B4 9A 86 C7 B2  ........[?s´š†Ç²      is the
00F60020  A0 D1 1E AF A7 9B 97 E2 7A CB 05 2B 4D 61 26 AE   Ñ.¯§›—âzË.+Ma&®      same as
00F60030  13 CA 29 84 19 93 15 E1 4A DB 2C B7 7C 00 E4 EB  .Ê)„.“.áJÛ,·|.äë      00FA0000-00FA0040
00F60040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F69BF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F69C00  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
[...]                                                                            all FF's
00F7FFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00F80000  00 00 00 01 00 00 00 2C 6E 47 15 E8 38 9B C8 16  .......,nG.è8›È.      00F80000-00F80030      (same in other version/console dump)
00F80010  65 6E 0C 37 54 25 FE 7B 22 9A 31 75 72 22 63 2B  en.7T%þ{"š1ur"c+      is the same as
00F80020  31 DD 15 AA 60 7D EB F5 F7 A3 74 0B 9D DD 3B 3A  1Ý.ª`}ëõ÷£t..Ý;:      00F40000-00F40030
00F80030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F9FFF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00FA0000  10 00 00 0C 00 04 10 03 00 00 00 01 20 00 00 34  ............ ..4      00F60000-00F60040      (differs in other version/console dump)
00FA0010  00 00 00 00 00 00 00 00 5B 3F 73 B4 9A 86 C7 B2  ........[?s´š†Ç²      is the
00FA0020  A0 D1 1E AF A7 9B 97 E2 7A CB 05 2B 4D 61 26 AE   Ñ.¯§›—âzË.+Ma&®      same as
00FA0030  13 CA 29 84 19 93 15 E1 4A DB 2C B7 7C 00 E4 EB  .Ê)„.“.áJÛ,·|.äë      00F60000-00F60040
00FA0040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00FA9BF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00FA9C00  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
[...]                                                                            all FF's
00FBFFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00FC0000  00 00 2E AB 83 EF B9 76 C4 DE D1 35 32 7C D3 77  ...«ƒï¹vÄÞÑ52|Ów      Bootloader encrypted   (differs in other version/console dump)
00FC0010  00 00 2E AB FE 2C 4E 17 E1 67 5C 3A C8 29 8E D1  ...«þ,N.ág\:È)ŽÑ      (0xFC0000 to 0xFFFFFF)
00FC0020  63 D4 81 95 5D D1 D2 E3 BA A3 2D 0A 98 8B 3C 03  cÔ.•]ÑÒãº£-.˜‹<.
00FC0030  8E 5D D0 E7 2F EE 58 8B C0 73 A2 6D 5E 7F 7A 07  Ž]Ðç/îX‹Às¢m^.z.
00FC0040  47 8B A4 C2 EF B9 3C 60 43 E8 AC 07 F7 8D EE D5  G‹¤Âï¹<`Cè¬.÷.îÕ
00FC0050  67 EE C1 C4 B2 D2 78 98 4C 79 D6 52 49 4D C2 80  gîÁÄ²Òx˜LyÖRIMÂ€
00FC0060  2D C1 F6 21 B7 B1 34 89 94 3B 33 BF B8 C8 EB 73  -Áö!·±4‰”;3¿¸Èës
[...]
00FEEAD0  9B 28 7A 63 41 DF 4D 54 CC F3 D8 FF FB B0 E6 34  ›(zcAßMTÌóØÿû°æ4
00FEEAE0  2B C6 A2 85 E9 3A 83 A1 8C AE 9F 45 C5 F4 9F AA  +Æ¢…é:ƒ¡Œ®ŸEÅôŸª
00FEEAF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ      Bootloader ended (00FEF170, 00FEF570, 00FEF5F0 or 00FEF600 in some dumps)
00FEEB00  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

Bootloader

Location:

NOR: 0xFC0000 - 0xFFFFFF (The last 256KB of flash),
NAND: 0x0000000 - 0x003FFFF (The first 256KB of flash)

Perconsole encrypted (datasize depends on bootldr revision)

cell_ext_os_area

NAND only

OtherOS

NAND only

Encrypted Files on Flash

Encrypted files on flash appear to have some sort of header

metldr examples

Here are samples of metldr header from 2 different consoles

00000840  00 00 0E 8E 99 87 3B C7 15 F2 80 80 9C 30 22 25  ...Ž™‡;Ç.ò€€œ0"%
00000850  00 00 0E 8E 78 A5 61 E0 17 72 6E F7 A7 1B 41 AB  ...Žx¥aà.rn÷§.A«

00000840  00 00 0E 8E 99 87 3B C7 15 F2 80 80 9C 30 22 25  ...Ž™‡;Ç.ò€€œ0"%
00000850  00 00 0E 8E 81 2E 00 A9 59 75 01 CC C1 72 D5 50  ...Ž...©Yu.ÌÁrÕP

bootldr examples

Here are samples of bootldr header from 2 different consoles

00FC0000  00 00 2F 4B 53 92 1C E7 F7 33 41 76 9B 7A 1E D6  ../KS’.ç÷3Av›z.Ö
00FC0010  00 00 2F 4B 78 A5 61 E0 17 72 6E F7 A7 1B 41 AB  ../Kx¥aà.rn÷§.A«

00FC0000  00 00 2F 4B CB 9E 15 24 28 B4 4F D2 F9 3F BC 43  ../KËž.$(´OÒù?¼C
00FC0010  00 00 2F 4B 81 2E 00 A9 59 75 01 CC C1 72 D5 50  ../K...©Yu.ÌÁrÕP

Observations / Notes

As you can see, some parts appear static depending on their purpose:

metldr

00000840  00 00 0E 8E 99 87 3B C7 15 F2 80 80 9C 30 22 25  ...Ž™‡;Ç.ò€€œ0"%
00000850  00 00 0E 8E xx xx xx xx xx xx xx xx xx xx xx xx  ...Žx...........

bootldr

00FC0000  00 00 2F 4B xx xx xx xx xx xx xx xx xx xx xx xx  ../K............
00FC0010  00 00 2F 4B xx xx xx xx xx xx xx xx xx xx xx xx  ../K............

per console in both samples

00000840  xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx  ................
00000850  xx xx xx xx 81 2E 00 A9 59 75 01 CC C1 72 D5 50  .......©Yu.ÌÁrÕP

The first 4 bytes appear to reffer to length. eg:

metldr length: 0xE920
0x00000E8E * 0x10 = 0xE8E0 + 0x40 = 0xE920
bootldr length:  0x2F4F0
0x00002F4B * 0x10 = 0x2F4B0 + 0x40 = 0x2F4F0

Header shown is 0x20 bytes, perhaps this means there is a 0x40 byte header. I was not able to find any correlation of the other 2x12 bytes here, perhaps these are keys of some sort.

List of files on NOR Flash

The following is a list of files stored in NOR Flash

Name	TOC		Start Offset		End Offset		Size	Notes
Name	Offset	Index	Relative	Absolute	Relative	Absolute	Size	Notes
asecure_loader	0x400	0	0x400	0x810	0x2E800	0x2F010	0x2E800 (190,464 bytes)	aka metldr
eEID	0x400	1	0x2EC00	0x2F010	0x3EC00	0x3F010	0x10000 (65,636 bytes)	(IDPS @ offset 0x0002F070 absolute / 0x00000070 inside eEID )
cISD	0x400	2	0x3EC00	0x3F010	0x3F400	0x3F810	0x800 (2,048 bytes)
cCSD	0x400	3	0x3F400	0x3F810	0x3FC00	0x40010	0x800 (2,048 bytes)
trvk_prg0	0x400	4	0x3FC00	0x40010	0x5FC00	0x60010	0x20000 (131,072 bytes)
trvk_prg1	0x400	5	0x5FC00	0x60010	0x7FC00	0x80010	0x20000 (131,072 bytes)
trvk_pkg0	0x400	6	0x7FC00	0x80010	0x9FC00	0xA0010	0x20000 (131,072 bytes)
trvk_pkg1	0x400	7	0x9FC00	0xA0010	0xBFC00	0xC0010	0x20000 (131,072 bytes)
ros0	0x400	8	0xBFC00	0xC0010	0x7BFC00	0x7C0010	0x700000 (7,340,032 bytes)	Contains CoreOS files
ros1	0x400	9	0x7BFC00	0x7C0010	0xEBFC00	0xEC0010	0x700000 (7,340,032 bytes)	Contains CoreOS files
cvtrm	0x400	10	0xEBFC00	0xEC0010	0xEFFC00	0xF00010	0x40000 (262,144 bytes)
CELL_EXTNOR_AREA				0xF20000		0xFA0040	0x80040 (524,352 bytes)
bootldr				0xFC0000		0xFEEAF0	0x2EAF0 (191,216 bytes)	End @ FEF170, FEF570, FEF5F0, FEF600 in some dumps

new metldr.2

Seen on CECH2504B (JSD-001), with 3.60 from factory - datecode 1B

  Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

  00000810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 F9 20  .......@......ù 
  00000820  6D 65 74 6C 64 72 2E 32 00 00 00 00 00 00 00 00  metldr.2........
  00000830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

other new metldr

It seems the naming "metldr.2" does not apply to all non downgradeable consoles:

Seen on CECH2504A (JTP-001), with 3.60 from factory - datecode 1B

  Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
  00000810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 E9 60  .......@......é`
  00000820  6D 65 74 6C 64 72 00 00 00 00 00 00 00 00 00 00  metldr..........
  00000830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Seen on CECH2503B (JTP-001), with ?.?? from factory - datecode 1A (dump contained ROS with 3.66 and 3.70) This was downgradable.. sorry, the downgrade.bin was not written correctly.. but this time i wrote it ok, so this was not a new metldr console..

 Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
      
 00000810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 E9 60  .......@......é`
 00000820  6D 65 74 6C 64 72 00 00 00 00 00 00 00 00 00 00  metldr..........
 00000830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

For comparison, a CECH250.B (JSD-001), with factory 3.56 - datecode 1A which was downgradeable (dump contained ROS with 3.56 and 3.70 before downgrading to 3.55):

 Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
      
 00000800   00 00 00 01 00 00 00 01  00 00 00 00 00 02 E8 00   ..............è.
 00000810   00 00 00 00 00 00 00 40  00 00 00 00 00 00 E9 60   .......@......é`
 00000820   6D 65 74 6C 64 72 00 00  00 00 00 00 00 00 00 00   metldr..........
 00000830   00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
 00000840   00 00 0E 92 C3 26 6E 4B  BB 28 2E 76 B7 67 70 95   ...’Ã&nK»(.v·gp•

other new metldr mention : https://twitter.com/#!/Mathieulh/status/110779471199604736

WTF 3.50+ consoles have a new additional root key of 0x30 bytes
(3 times the same 0x10 bytes chunk) copied by metldr right to offset 0 O_O

CECH2501B JSD-001 (320GB HDD)without datecode fw 3.66

metldr contains other new value (E9 60), but still downgrades..

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000800  00 00 00 01 00 00 00 01 00 00 00 00 00 02 E8 00  ..............è.
00000810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 E9 60  .......@......é`
00000820  6D 65 74 6C 64 72 00 00 00 00 00 00 00 00 00 00  metldr..........
00000830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000840  00 00 0E 92 C3 26 6E 4B BB 28 2E 76 B7 67 70 95  ...’Ã&nK»(.v·gp•

another PS3 with CECH2501A wihtout datecode 320 GB HDD and fw 3.66 also contains other new metldr values but still downgrades...


Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000800  00 00 00 01 00 00 00 01 00 00 00 00 00 02 E8 00  ..............è.
00000810  00 00 00 00 00 00 00 40 00 00 00 00 00 00 E9 60  .......@......é`
00000820  6D 65 74 6C 64 72 00 00 00 00 00 00 00 00 00 00  metldr..........
00000830  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000840  00 00 0E 92 C3 26 6E 4B BB 28 2E 76 B7 67 70 95  ...’Ã&nK»(.v·gp•

NAND reference

most of the information on this page if based on NOR dumps, this section is for NAND specifics

NAND reference (euss)

CECHC-04/COK-002 Pal EU launchmodel with OFW 3.15 updated to MFW 3.15 (Euss)

Bootldr

    Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
    
    00000000  6D 61 73 6B 65 64 20 42 4F 4F 54 4C 44 52 20 20  masked BOOTLDR  
    00000010  30 78 34 30 30 30 30 20 73 69 7A 65 20 20 20 20  0x40000 size             if dumped from GameOS, the first 40000 bytes are masked (cut off) by HV
    00000020  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
    00000030  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

ROS0

315-ROS0-coreos-c0000-7c0000.rar (4.81 MB)

   ROS0 on NAND:
     
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   000C0000  00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 20  ....... ....... 
   000C0010  00 00 00 00 00 E0 00 00 00 00 00 00 00 00 00 00  .....à..........
   000C0020  00 00 00 00 00 00 00 00 00 00 00 00 00 6F FF E0  .............oÿà
   000C0030  00 00 00 01 00 00 00 17 00 00 00 00 00 6F FF E0  .............oÿà
   000C0040  00 00 00 00 00 00 04 60 00 00 00 00 00 00 44 98  .......`......D˜
   000C0050  61 69 6D 5F 73 70 75 5F 6D 6F 64 75 6C 65 2E 73  aim_spu_module.s
   000C0060  65 6C 66 00 00 00 00 00 00 00 00 00 00 00 00 00  elf.............
   000C0070  00 00 00 00 00 00 49 00 00 00 00 00 00 01 DA E4  ......I.......Úä
   000C0080  61 70 70 6C 64 72 00 00 00 00 00 00 00 00 00 00  appldr..........
   000C0090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C00A0  00 00 00 00 00 02 24 00 00 00 00 00 00 04 00 00  ......$.........
   000C00B0  63 72 65 73 65 72 76 65 64 5F 30 00 00 00 00 00  creserved_0.....
   000C00C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C00D0  00 00 00 00 00 06 24 00 00 00 00 00 00 00 22 A0  ......$......." 
   000C00E0  64 65 66 61 75 6C 74 2E 73 70 70 00 00 00 00 00  default.spp.....
   000C00F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0100  00 00 00 00 00 06 46 A0 00 00 00 00 00 07 FC 48  ......F ......üH
   000C0110  65 6D 65 72 5F 69 6E 69 74 2E 73 65 6C 66 00 00  emer_init.self..
   000C0120  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0130  00 00 00 00 00 0E 43 00 00 00 00 00 00 07 0F 94  ......C........”
   000C0140  65 75 72 75 73 5F 66 77 2E 62 69 6E 00 00 00 00  eurus_fw.bin....
   000C0150  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0160  00 00 00 00 00 15 52 A0 00 00 00 00 00 06 16 00  ......R ........
   000C0170  68 64 64 5F 63 6F 70 79 2E 73 65 6C 66 00 00 00  hdd_copy.self...
   000C0180  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0190  00 00 00 00 00 1B 68 A0 00 00 00 00 00 01 2E 44  ......h .......D
   000C01A0  69 73 6F 6C 64 72 00 00 00 00 00 00 00 00 00 00  isoldr..........
   000C01B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C01C0  00 00 00 00 00 1C 97 00 00 00 00 00 00 03 E8 28  ......—.......è(
   000C01D0  6C 76 30 00 00 00 00 00 00 00 00 00 00 00 00 00  lv0.............
   000C01E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C01F0  00 00 00 00 00 20 7F 40 00 00 00 00 00 12 B1 70  ..... .@......±p
   000C0200  6C 76 31 2E 73 65 6C 66 00 00 00 00 00 00 00 00  lv1.self........
   000C0210  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0220  00 00 00 00 00 33 30 C0 00 00 00 00 00 01 E5 CC  .....30À......åÌ
   000C0230  6C 76 31 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv1ldr..........
   000C0240  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0250  00 00 00 00 00 35 16 A0 00 00 00 00 00 01 6D A0  .....5. ......m 
   000C0260  6C 76 32 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv2ldr..........
   000C0270  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0280  00 00 00 00 00 36 84 40 00 00 00 00 00 16 EE B8  .....6„@......î¸
   000C0290  6C 76 32 5F 6B 65 72 6E 65 6C 2E 73 65 6C 66 00  lv2_kernel.self.
   000C02A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C02B0  00 00 00 00 00 4D 73 00 00 00 00 00 00 00 80 8C  .....Ms.......€Œ
   000C02C0  6D 63 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  mc_iso_spu_modul
   000C02D0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   000C02E0  00 00 00 00 00 4D F3 A0 00 00 00 00 00 00 88 B8  .....Mó ......ˆ¸
   000C02F0  6D 65 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  me_iso_spu_modul
   000C0300  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   000C0310  00 00 00 00 00 4E 7C 60 00 00 00 00 00 00 5D B0  .....N|`......]°
   000C0320  73 62 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sb_iso_spu_modul
   000C0330  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   000C0340  00 00 00 00 00 4E DA 20 00 00 00 00 00 01 53 2C  .....NÚ ......S,
   000C0350  73 63 5F 69 73 6F 2E 73 65 6C 66 00 00 00 00 00  sc_iso.self.....
   000C0360  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0370  00 00 00 00 00 50 2D 60 00 00 00 00 00 00 00 08  .....P-`........
   000C0380  73 64 6B 5F 76 65 72 73 69 6F 6E 00 00 00 00 00  sdk_version.....
   000C0390  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C03A0  00 00 00 00 00 50 2D 80 00 00 00 00 00 00 D7 F0  .....P-€......×ð
   000C03B0  73 70 70 5F 76 65 72 69 66 69 65 72 2E 73 65 6C  spp_verifier.sel
   000C03C0  66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  f...............
   000C03D0  00 00 00 00 00 51 05 80 00 00 00 00 00 00 FA CC  .....Q.€......úÌ
   000C03E0  73 70 75 5F 70 6B 67 5F 72 76 6B 5F 76 65 72 69  spu_pkg_rvk_veri
   000C03F0  66 69 65 72 2E 73 65 6C 66 00 00 00 00 00 00 00  fier.self.......
   000C0400  00 00 00 00 00 52 00 60 00 00 00 00 00 00 5C 94  .....R.`......\”
   000C0410  73 70 75 5F 74 6F 6B 65 6E 5F 70 72 6F 63 65 73  spu_token_proces
   000C0420  73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00 00  sor.self........
   000C0430  00 00 00 00 00 52 5D 00 00 00 00 00 00 00 65 D0  .....R].......eÐ
   000C0440  73 70 75 5F 75 74 6F 6B 65 6E 5F 70 72 6F 63 65  spu_utoken_proce
   000C0450  73 73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00  ssor.self.......
   000C0460  00 00 00 00 00 52 C2 E0 00 00 00 00 00 00 C0 78  .....RÂà......Àx
   000C0470  73 76 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sv_iso_spu_modul
   000C0480  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........

ROS1

315-ROS1-coreos-7c0000-ec0000.rar (4.81 MB)

   ROS1 on NAND:
     
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   007C0000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0010  00 00 00 00 00 00 00 00 00 00 00 00 00 6F FF E0  .............oÿà
   007C0020  00 00 00 01 00 00 00 17 00 00 00 00 00 6F FF E0  .............oÿà
   007C0030  00 00 00 00 00 00 04 60 00 00 00 00 00 04 00 00  .......`........
   007C0040  63 72 65 73 65 72 76 65 64 5F 30 00 00 00 00 00  creserved_0.....
   007C0050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0060  00 00 00 00 00 04 04 60 00 00 00 00 00 00 00 08  .......`........
   007C0070  73 64 6B 5F 76 65 72 73 69 6F 6E 00 00 00 00 00  sdk_version.....
   007C0080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0090  00 00 00 00 00 04 04 80 00 00 00 00 00 01 E5 CC  .......€......åÌ
   007C00A0  6C 76 31 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv1ldr..........
   007C00B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C00C0  00 00 00 00 00 05 EA 80 00 00 00 00 00 01 6D A0  ......ê€......m 
   007C00D0  6C 76 32 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv2ldr..........
   007C00E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C00F0  00 00 00 00 00 07 58 80 00 00 00 00 00 01 2E 44  ......X€.......D
   007C0100  69 73 6F 6C 64 72 00 00 00 00 00 00 00 00 00 00  isoldr..........
   007C0110  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0120  00 00 00 00 00 08 87 00 00 00 00 00 00 01 DA E4  ......‡.......Úä
   007C0130  61 70 70 6C 64 72 00 00 00 00 00 00 00 00 00 00  appldr..........
   007C0140  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0150  00 00 00 00 00 0A 61 E4 00 00 00 00 00 00 FA CC  ......aä......úÌ
   007C0160  73 70 75 5F 70 6B 67 5F 72 76 6B 5F 76 65 72 69  spu_pkg_rvk_veri
   007C0170  66 69 65 72 2E 73 65 6C 66 00 00 00 00 00 00 00  fier.self.......
   007C0180  00 00 00 00 00 0B 5C B0 00 00 00 00 00 00 5C 94  ......\°......\”
   007C0190  73 70 75 5F 74 6F 6B 65 6E 5F 70 72 6F 63 65 73  spu_token_proces
   007C01A0  73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00 00  sor.self........
   007C01B0  00 00 00 00 00 0B B9 44 00 00 00 00 00 00 65 D0  ......¹D......eÐ
   007C01C0  73 70 75 5F 75 74 6F 6B 65 6E 5F 70 72 6F 63 65  spu_utoken_proce
   007C01D0  73 73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00  ssor.self.......
   007C01E0  00 00 00 00 00 0C 1F 14 00 00 00 00 00 01 53 2C  ..............S,
   007C01F0  73 63 5F 69 73 6F 2E 73 65 6C 66 00 00 00 00 00  sc_iso.self.....
   007C0200  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0210  00 00 00 00 00 0D 72 40 00 00 00 00 00 00 44 98  [email protected]˜
   007C0220  61 69 6D 5F 73 70 75 5F 6D 6F 64 75 6C 65 2E 73  aim_spu_module.s
   007C0230  65 6C 66 00 00 00 00 00 00 00 00 00 00 00 00 00  elf.............
   007C0240  00 00 00 00 00 0D B6 D8 00 00 00 00 00 00 D7 F0  ......¶Ø......×ð
   007C0250  73 70 70 5F 76 65 72 69 66 69 65 72 2E 73 65 6C  spp_verifier.sel
   007C0260  66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  f...............
   007C0270  00 00 00 00 00 0E 8E C8 00 00 00 00 00 00 80 8C  ......ŽÈ......€Œ
   007C0280  6D 63 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  mc_iso_spu_modul
   007C0290  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C02A0  00 00 00 00 00 0F 0F 54 00 00 00 00 00 00 88 B8  .......T......ˆ¸
   007C02B0  6D 65 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  me_iso_spu_modul
   007C02C0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C02D0  00 00 00 00 00 0F 98 0C 00 00 00 00 00 00 C0 78  ......˜.......Àx
   007C02E0  73 76 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sv_iso_spu_modul
   007C02F0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C0300  00 00 00 00 00 10 58 84 00 00 00 00 00 00 5D B0  ......X„......]°
   007C0310  73 62 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sb_iso_spu_modul
   007C0320  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C0330  00 00 00 00 00 10 B6 34 00 00 00 00 00 00 22 A0  ......¶4......" 
   007C0340  64 65 66 61 75 6C 74 2E 73 70 70 00 00 00 00 00  default.spp.....
   007C0350  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0360  00 00 00 00 00 10 D9 00 00 00 00 00 00 12 B1 70  ......Ù.......±p
   007C0370  6C 76 31 2E 73 65 6C 66 00 00 00 00 00 00 00 00  lv1.self........
   007C0380  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0390  00 00 00 00 00 23 8A 80 00 00 00 00 00 03 E8 28  .....#Š€......è(
   007C03A0  6C 76 30 00 00 00 00 00 00 00 00 00 00 00 00 00  lv0.............
   007C03B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C03C0  00 00 00 00 00 27 72 A8 00 00 00 00 00 16 EE B8  .....'r¨......î¸
   007C03D0  6C 76 32 5F 6B 65 72 6E 65 6C 2E 73 65 6C 66 00  lv2_kernel.self.
   007C03E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C03F0  00 00 00 00 00 3E 61 60 00 00 00 00 00 07 0F 94  .....>a`.......”
   007C0400  65 75 72 75 73 5F 66 77 2E 62 69 6E 00 00 00 00  eurus_fw.bin....
   007C0410  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0420  00 00 00 00 00 45 70 F4 00 00 00 00 00 07 FC 48  .....Epô......üH
   007C0430  65 6D 65 72 5F 69 6E 69 74 2E 73 65 6C 66 00 00  emer_init.self..
   007C0440  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0450  00 00 00 00 00 4D 6D 3C 00 00 00 00 00 06 16 00  .....Mm<........
   007C0460  68 64 64 5F 63 6F 70 79 2E 73 65 6C 66 00 00 00  hdd_copy.self...
   007C0470  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Versioning in ROS0

   versioning in ROS0 of NAND:
     
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   005C2D90  33 31 35 2E 30 30 30 0A 00 00 00 00 00 00 00 00  315.000.........
   005C2DA0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   005C2DB0  53 43 45 00 00 00 00 02 00 01 00 01 00 00 02 30  SCE............0

Versioning in ROS1

   versioning in ROS1 of NAND:
     
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

   00800480  33 31 35 2E 30 30 30 0A 00 00 00 00 00 00 00 00  315.000.........
   00800490  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   008004A0  53 43 45 00 00 00 00 02 00 00 00 01 00 00 01 F0  SCE............ð

RVK

   Revoke in NAND:     
          
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   00093800  00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 20  ....... ....... 
   00093810  00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00  ...... .........
   00093820  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 40  ...............@
   00093830  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
   00093840  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 40  ...............@
   00093850  6E 27 DA DF 18 19 ED D0 26 30 FD 84 1D 5B 74 BB  n'Úß..íÐ&0ý„.[t»
   00093860  43 53 5F 5E 91 5A 82 48 E1 5B 76 C6 59 9F 1B 0D  CS_^‘Z‚Há[vÆYŸ..
   00093870  3A 5E 73 19 73 59 24 A1 A7 A5 73 28 BC 50 12 93  :^s.sY$¡§¥s(¼P.“
   00093880  10 B7 43 04 B5 01 A5 6C 01 AD 83 86 7B 10 1A 78  .·C.µ.¥l.ƒ†{..x
   00093890  B5 55 E2 CC 52 4D E2 3D AE 7D F6 1B 37 13 63 34  µUâÌRMâ=®}ö.7.c4
   000938A0  50 58 C8 78 27 F9 30 9F 62 E7 0A CF C4 E2 4B C5  PXÈx'ù0Ÿbç.ÏÄâKÅ
   000938B0  4A FF 31 8A C7 3A A7 0A 91 86 E2 C8 4A 51 F7 7D  Jÿ1ŠÇ:§.‘†âÈJQ÷}
   000938C0  7B BF 28 FE F5 93 FA C3 DF E7 A9 F1 A1 92 C1 6F  {¿(þõ“úÃßç©ñ¡’Áo
   000938D0  F1 D8 94 E9 64 60 6D 36 22 61 2E 51 B5 C9 9F 6F  ñØ”éd`m6"a.QµÉŸo
   000938E0  BD C6 44 00 22 75 DC 2A 55 A5 E5 EC 2A 97 9A 4F  ½ÆD."uÜ*U¥åì*—šO
   000938F0  CA 21 38 F1 AA C8 98 29 4D 6A F7 CD 7B F6 04 B3  Ê!8ñªÈ˜)Mj÷Í{ö.³
   00093900  A0 F3 F8 C1 9B CB 9B 48 AE E9 5C CF A5 24 37 29   óøÁ›Ë›H®é\Ï¥$7)
   00093910  9B 10 02 8C 68 1B 4E AA B4 CF EE 81 3A C6 6E CB  ›..Œh.Nª´Ïî.:ÆnË
   00093920  66 99 F6 F9 55 AB 19 FA 43 70 BC E5 72 C4 56 AD  f™öùU«.úCp¼årÄV
   00093930  64 AF DD 0B 17 03 4D EA 87 C5 AD BB 2C 7C B2 48  d¯Ý...Mê‡Å»,|²H
   00093940  9A E9 D1 85 AA 30 87 B8 47 C3 8B C9 BC 42 E2 7D  šéÑ…ª0‡¸GÃ‹É¼Bâ}
   00093950  92 84 D2 03 68 F1 20 54 98 D1 0E 95 4B 54 E5 6E  ’„Ò.hñ T˜Ñ.•KTån
   00093960  1A 6C D6 2F 3E 3F E4 28 4A 0F 9E D4 99 3E E5 D8  .lÖ/>?ä(J.žÔ™>åØ
   00093970  6B 13 7B 19 B4 3A A6 64 56 08 05 D3 FE 1B 68 E1  k.{.´:¦dV..Óþ.há
   00093980  B6 38 2C 0C E1 DF 5F D5 0D EC 6E B6 2A 2F 63 77  ¶8,.áß_Õ.ìn¶*/cw
   00093990  F4 D2 EB 3B 87 DA 83 76 28 E8 9F 50 2C 84 4D 48  ôÒë;‡Úƒv(èŸP,„MH
   000939A0  64 C0 B1 DB C6 AE 81 22 1D 76 9F B9 F8 29 C0 C7  dÀ±ÛÆ®.".vŸ¹ø)ÀÇ
   000939B0  12 06 2A B1 BB 0D 2E 5A 29 BC 56 C6 F5 26 97 0D  ..*±»..Z)¼VÆõ&—.
   000939C0  01 06 CC BC 43 1E 8B 45 C8 20 29 B3 FD EB 30 1D  ..Ì¼C.‹EÈ )³ýë0.
   000939D0  A2 CF 33 2D 09 07 08 6F 4A F3 34 5D DE 63 C0 A8  ¢Ï3-...oJó4]ÞcÀ¨
   000939E0  EE 31 3E 46 11 4F 8D 66 F1 15 74 E2 AC 88 C3 C7  î1>F.O.fñ.tâ¬ˆÃÇ
   000939F0  19 C9 69 0A 9F 36 D7 BC 70 6B 79 32 53 FD 1F 8E  .Éi.Ÿ6×¼pky2Sý.Ž
   00093A00  6D 57 08 C2 CA 78 24 6A 20 3B 5A 98 C2 04 06 95  mW.ÂÊx$j ;Z˜Â..•
   00093A10  C7 E6 53 A5 AB 9C 02 2A 04 40 0B 00 DF 34 13 CF  ÇæS¥«œ.*.@..ß4.Ï
   00093A20  F3 74 FF B6 DB FA 9A A2 FD 4F 72 6B 3E 7E 37 04  ótÿ¶Ûúš¢ýOrk>~7.
   00093A30  00 00 00 03 00 00 00 02 00 01 00 00 00 00 00 00  ................
   00093A40  00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
   00093A50  8E 27 91 93 C8 6F 17 8A 22 FD C8 E1 76 E8 D8 18  Ž'‘“Èo.Š"ýÈávèØ.
   00093A60  62 8B FE F5 43 81 A8 09 01 C6 99 D6 EF CF 64 90  b‹þõC.¨..Æ™ÖïÏd.
   00093A70  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

VTRM

   VTRM in NAND: 
    
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
     
   00EC0000  53 43 45 49 56 54 52 4D 00 00 00 00 00 00 00 A8  SCEIVTRM.......¨
   00EC0010  00 00 00 00 00 E8 02 00 00 00 00 00 00 00 00 28  .....è.........(
   00EC0020  00 00 00 00 56 54 52 4D 00 00 00 00 00 00 00 04  ....VTRM........     <-- 'VTRM' magic header
   00EC0030  FE 6D 0B C4 FA D5 CE DB 93 86 FC A1 32 3B 71 47  þm.ÄúÕÎÛ“†ü¡2;qG     <-- same value as 00EC0410
   00EC0040  3B A5 C6 F9 C0 00 B6 70 00 00 00 00 00 E8 27 80  ;¥ÆùÀ.¶p.....è'€     <-- first part same value as 00EC0410
   00EC0050  00 00 00 00 00 00 00 60 00 00 00 00 00 00 09 20  .......`....... 
   00EC0060  04 00 00 00 02 00 00 05 10 70 00 05 FF 00 00 01  .........p..ÿ...
   00EC0070  0C 1C 05 9C AA B5 97 A5 9C D6 46 2D EA 22 46 BE  ...œªµ—¥œÖF-ê"F¾
   00EC0080  D1 84 A9 1E 34 5F E7 90 55 49 11 82 51 9D 4A 3F  Ñ„©.4_ç.UI.‚Q.J?
   00EC0090  EF 43 19 E8 4F 6A 5B FF DA 31 E9 F0 76 C8 B2 6B  ïC.èOj[ÿÚ1éðvÈ²k
   00EC00A0  0B A7 47 8E BE 42 28 9F 2B 88 73 0B A5 B6 F2 1D  .§GŽ¾B(Ÿ+ˆs.¥¶ò.
   00EC00B0  00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF  ........ÿÿÿÿÿÿÿÿ
   00EC00C0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   00EC00D0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   00EC00E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   00EC00F0  FF FF FF FF FF FF FF FF 00 00 00 00 00 EB E4 8C  ÿÿÿÿÿÿÿÿ.....ëäŒ
   00EC0100  00 00 00 00 00 00 00 14 39 17 52 0B 31 70 F5 05  ........9.R.1põ.
   00EC0110  02 5A C6 F8 81 F8 54 96 2F EF F3 81 FF FF FF FF  .ZÆø.øT–/ïó.ÿÿÿÿ
   00EC0120  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
    [...]    FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   00EC03F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   00EC0400  00 00 00 00 56 54 52 4D 00 00 00 00 00 00 00 04  ....VTRM........
   00EC0410  FE 6D 0B C4 FA D5 CE DB 93 86 FC A1 32 3B 71 47  þm.ÄúÕÎÛ“†ü¡2;qG     <-- same value as 00EC0030
   00EC0420  3B A5 C6 F9 C0 00 B6 70 00 00 00 00 00 00 04 90  ;¥ÆùÀ.¶p........     <-- first part same value as 00EC0040
   00EC0430  00 00 00 00 00 00 09 20 00 00 00 00 00 00 00 03  ....... ........     <-- pattern exception
   00EC0440  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... .......      <-- repetive pattern until 00EC0440 with some exceptions
    [...]    00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... .......      <-- repetive pattern until 00EC0440 with some exceptions
   00EC1930  00 00 00 00 00 00 00 01 00 00 00 00 00 00 09 20  ...............      <-- pattern exception
    [...]    00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... .......      <-- repetive pattern until 00EC0440 with some exceptions
   00EC21F0  00 00 00 00 00 00 00 02 00 00 00 00 00 00 09 20  ...............      <-- pattern exception
    [...]    00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... .......      <-- repetive pattern until 00EC0440 with some exceptions
   00EC24F0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 00 00  ....... ........
    [...]    00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... .......      <-- repetive pattern until 00EC0440 with some exceptions
   00EC28B0  00 00 00 00 00 00 09 20 00 00 00 00 00 00 09 20  ....... .......      <-- repetive pattern until 00EC0440 with some exceptions
   00EC28C0  00 00 00 00 00 00 09 20 10 70 00 00 02 00 00 01  ....... .p......
   00EC28D0  10 70 00 00 39 00 00 01 22 66 39 B3 0E 7A 1C E7  .p..9..."f9³.z.ç
   00EC28E0  68 85 F9 94 A8 30 BE C4 0B 85 D0 92 1E C0 8F 28  h…ù”¨0¾Ä.…Ð’.À.(
   00EC28F0  7F 70 ED 15 D6 22 06 24 D9 08 64 0B C0 D7 97 29  .pí.Ö".$Ù.d.À×—)
   00EC2900  BE A1 FE 91 D1 F2 D4 88 25 EF 24 86 E0 A3 CB 98  ¾¡þ‘ÑòÔˆ%ï$†à£Ë˜
   00EC2910  AF 17 6F B1 64 A0 56 E5 00 00 00 00 00 00 00 01  ¯.o±d Vå........
   00EC2920  00 00 00 00 00 00 09 20 10 70 00 00 02 00 00 01  ....... .p......
   00EC2930  10 70 00 00 03 00 00 02 F9 D9 6A 84 0C F2 D8 E7  .p......ùÙj„.òØç
   00EC2940  D4 44 5C 3C DF D5 DF 0F B8 DC 3E 81 9A A4 71 8F  ÔD\<ßÕß.¸Ü>.š¤q.
   00EC2950  0A A8 8B 90 1B 2C A1 D1 66 84 AA EE 65 D1 46 9A  .¨‹..,¡Ñf„ªîeÑFš
   00EC2960  D7 38 83 F2 78 47 D1 8E E5 FA EB 39 CF 26 E8 25  ×8ƒòxGÑŽåúë9Ï&è%
   00EC2970  85 DE 3B C6 0B C3 45 D5 00 00 00 00 00 00 00 00  …Þ;Æ.ÃEÕ........
   00EC2980  00 00 00 00 00 00 09 20 04 00 00 00 02 00 00 05  ....... ........
   00EC2990  10 70 00 05 FF 00 00 01 0C 1C 05 9C AA B5 97 A5  .p..ÿ......œªµ—¥
   00EC29A0  9C D6 46 2D EA 22 46 BE D1 84 A9 1E 34 5F E7 90  œÖF-ê"F¾Ñ„©.4_ç.
   00EC29B0  55 49 11 82 51 9D 4A 3F EF 43 19 E8 4F 6A 5B FF  UI.‚Q.J?ïC.èOj[ÿ
   00EC29C0  DA 31 E9 F0 76 C8 B2 6B 0B A7 47 8E BE 42 28 9F  Ú1éðvÈ²k.§GŽ¾B(Ÿ
   00EC29D0  2B 88 73 0B A5 B6 F2 1D 00 00 00 00 00 00 00 00  +ˆs.¥¶ò.........
   00EC29E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
    [...]    FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

cell_ext_os_area

   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
      
   0E780000  63 65 6C 6C 5F 65 78 74 5F 6F 73 5F 61 72 65 61  cell_ext_os_area
   0E780010  00 00 00 01 00 00 00 02 00 00 00 04 FF FF FF FF  ............ÿÿÿÿ
   0E780020  00 00 00 01 00 27 F8 40 FF FF FF FF FF FF FF FF  .....'ø@ÿÿÿÿÿÿÿÿ

   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   0E7807D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   0E7807E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   0E7807F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   0E780800  1F 8B 08 08 C1 19 04 48 02 03 7A 49 6D 61 67 65  .‹..Á..H..zImage
   0E780810  2E 69 6E 69 74 72 64 2E 70 73 33 2E 62 69 6E 00  .initrd.ps3.bin.
    [...]                                                                        large data area
   0EA00030  FF FE FC FF ED CF FF 07 DE FD A4 A3 A8 88 54 00  ÿþüÿíÏÿ.Þý¤£¨ˆT.
   0EA00040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    [...]    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................   large 00 filled block region
   0EB7FFE0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   0EB7FFF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   0EB80000  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   0EB80010  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

    [...]    FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ   large FF filled block region
   0EFFFFE0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   0EFFFFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

NAND reference (bluemimmo)

CECHA-06/COK-001 with 3.60 OFW

Bootldr

   Bootldr from offset 0x00000000:
   
   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   00000000  00 00 2A 3F 04 AD 56 18 64 8D 49 94 23 8F B8 A1  ..*?.V.d.I”#.¸¡
   00000010  00 00 2A 3F 93 B7 DF 38 94 92 09 B6 C3 9C D2 AA  ..*?“·ß8”’.¶ÃœÒª
   00000020  E8 7D F4 AC 86 AA 28 2F 68 31 AD 61 F5 7C BA 03  è}ô¬†ª(/h1aõ|º.
   00000030  38 BA FF 8C D2 CA A8 5A DA 0D F0 2C 7B 69 03 22  8ºÿŒÒÊ¨ZÚ.ð,{i."
   00000040  E2 EB 0D 9C 6A 12 31 43 FA 3C 5F 5D E3 9F 70 5E  âë.œj.1Cú<_]ãŸp^
   00000050  15 18 7F 09 00 C3 65 E4 47 E4 D9 63 46 4B A1 CC  .....ÃeäGäÙcFK¡Ì
   00000060  8A F9 51 8A 6D F0 FA 94 83 F4 C1 23 4F AE 50 AD  ŠùQŠmðú”ƒôÁ#O®P
   00000070  0F 81 5A 3E 2C 31 AE 6C 81 A1 8D A2 18 7F 35 9F  ..Z>,1®l.¡.¢..5Ÿ
   00000080  99 E5 69 67 A2 E0 F8 14 B8 85 4A 99 41 D9 84 0A  ™åig¢àø.¸…J™AÙ„.
   00000090  11 D5 A1 2A C6 3D 21 9D C3 43 E0 3E 00 17 4C DC  .Õ¡*Æ=!.ÃCà>..LÜ
   000000A0  B1 DD E3 94 00 E0 61 41 65 9A C9 8F C9 18 83 FC  ±Ýã”.àaAešÉ.É.ƒü
   000000B0  CA DA 3E 89 A1 43 CF 4D 0E DB D2 7B 6D 53 6A 53  ÊÚ>‰¡CÏM.ÛÒ{mSjS
   000000C0  3D 43 ED 5C 7F B4 09 E4 22 38 6E 29 E7 3E 07 4B  =Cí\.´.ä"8n)ç>.K
   000000D0  2A FF 98 49 C9 49 FE 26 85 F4 71 15 85 11 75 F3  *ÿ˜IÉIþ&…ôq.….uó
   000000E0  56 79 2A 85 F3 1E 0F E3 21 16 2B 3F B3 25 18 2D  Vy*…ó..ã!.+?³%.-
   000000F0  9D 4E 57 76 1E 59 65 8A 5B BF 41 B7 29 1F 79 0C  .NWv.YeŠ[¿A·).y.
   00000100  A3 E7 CF 07 E7 A3 4F DA 67 B2 C9 75 89 83 4F 71  £çÏ.ç£OÚg²Éu‰ƒOq
   00000110  71 88 D6 89 D7 07 C0 2E D8 DA 39 0F 87 5B FE 40  qˆÖ‰×.À.ØÚ9.‡[þ@
   00000120  23 31 EB BF 86 1A A5 0D D5 24 94 DD A2 69 E4 E8  #1ë¿†.¥.Õ$”Ý¢iäè
   00000130  25 28 2E C7 34 E9 E5 8D 2D F4 AC F5 60 CC 2A CD  %(.Ç4éå.-ô¬õ`Ì*Í
   00000140  06 5D D7 FE C8 59 FC 6D 2B 17 25 A6 2E BE 0F F2  .]×þÈYüm+.%¦.¾.ò
   00000150  46 94 3B 0B C4 76 F6 FB C1 C1 8E 93 42 E9 5B 41  F”;.ÄvöûÁÁŽ“Bé[A
   00000160  69 A8 53 39 C6 09 32 A3 A9 3E AE 71 84 74 EC E0  i¨S9Æ.2£©>®q„tìà
   00000170  97 3B D1 41 D9 59 4B 17 E5 8B D1 2A 57 77 78 8D  —;ÑAÙYK.å‹Ñ*Wwx.
   00000180  02 4A 7F 31 5C 62 30 E5 F3 83 97 27 C4 7B 8D 31  .J.1\b0åóƒ—'Ä{.1
   00000190  E9 53 B6 86 BC 16 AC 15 B9 96 C2 A9 56 AC 13 DF  éS¶†¼.¬.¹–Â©V¬.ß
   000001A0  E4 05 01 30 7F 65 45 48 66 0E 3D D5 A9 1B 1A 76  ä..0.eEHf.=Õ©..v
   000001B0  15 38 C7 B3 0D A2 83 C2 D9 9F 13 28 F9 50 BF 4C  .8Ç³.¢ƒÂÙŸ.(ùP¿L
   000001C0  C1 2D 83 E8 9B A9 EF D1 C8 12 96 50 45 DD CC 26  Á-ƒè›©ïÑÈ.–PEÝÌ&
   000001D0  D5 57 C1 DD A0 2E 81 97 F8 B8 60 00 A9 27 2D 68  ÕWÁÝ ..—ø¸`.©'-h
   000001E0  69 FE C8 F5 E2 7D 48 0D 04 65 FF BB A8 BF 41 9F  iþÈõâ}H..eÿ»¨¿AŸ
   000001F0  27 98 56 D1 93 56 62 87 74 89 63 AD 63 B4 A3 AA  '˜VÑ“Vb‡t‰cc´£ª
   00000200  46 09 AB B5 92 BA BB CF 7C EF 8F 08 F8 FE 96 9A  F.«µ’º»Ï|ï..øþ–š
   00000210  2E 14 C4 67 8C B3 E3 DC DE BC 24 3F D8 17 B0 B6  ..ÄgŒ³ãÜÞ¼$?Ø.°¶
   00000220  1B F7 78 61 DE 90 14 29 46 CB 4E EF 30 0A D3 AA  .÷xaÞ..)FËNï0.Óª
   00000230  BB 78 6B 1D A2 3A E8 27 7B 2D 32 E5 62 C4 45 C0  »xk.¢:è'{-2åbÄEÀ
   00000240  9E 75 6C E3 5C 08 A9 D3 5B 36 38 40 AD BF 5D D4  žulã\.©Ó[68@¿]Ô
   00000250  9D D1 D9 F0 11 A6 D5 68 C9 97 BA 70 38 25 61 0B  .ÑÙð.¦ÕhÉ—ºp8%a.
   00000260  76 B6 84 0E 90 7C E9 C8 AC 01 F4 E4 2D 0A F4 C7  v¶„..|éÈ¬.ôä-.ôÇ
   00000270  98 D7 A3 98 8C CC A8 D0 05 2E A5 87 D7 FA 0A 93  ˜×£˜ŒÌ¨Ð..¥‡×ú.“
   00000280  19 91 81 D3 E9 83 E2 5E 31 D5 AD 78 4B A6 04 80  .‘.Óéƒâ^1ÕxK¦.€
   00000290  94 85 60 AA 09 5E CA 80 E3 FC 40 14 66 9C 47 11  ”…`ª.^Ê€ãü@.fœG.
   000002A0  A7 FF 93 6E 50 EB F6 AE 54 2F 47 43 01 EB 24 4D  §ÿ“nPëö®T/GC.ë$M
   000002B0  4B DC E3 A1 BC B7 B4 9B E0 77 D9 C0 97 CF CE 72  KÜã¡¼·´›àwÙÀ—ÏÎr
   000002C0  EF 84 F5 F1 7D 16 21 AC DC B7 2A 01 96 A4 14 47  ï„õñ}.!¬Ü·*.–¤.G
   000002D0  6D E5 1C 30 9D 1A 64 22 3A 7E 0B 28 A5 22 A0 B8  må.0..d":~.(¥" ¸
   000002E0  85 D8 0E 6B 5A 2B 7D 20 2B CF FA A9 B6 78 D0 FD  …Ø.kZ+} +Ïú©¶xÐý
   000002F0  82 9B 3D D7 24 F0 76 05 24 60 1A 8E CC 61 4A 8E  ‚›=×$ðv.$`.ŽÌaJŽ
   00000300  B8 F2 2B 59 AE FF 49 45 71 D0 31 73 8D 32 08 D9  ¸ò+Y®ÿIEqÐ1s.2.Ù
   00000310  8E 2E B8 18 13 49 B9 2F EB B7 D5 B9 55 E7 63 64  Ž.¸..I¹/ë·Õ¹Uçcd
   00000320  F6 CF 8C B0 ED BA A8 81 36 05 3C 48 E3 58 F1 3A  öÏŒ°íº¨.6.<HãXñ:
   00000330  51 39 CD 68 76 8D 08 D7 2B C4 7B 1D D2 4E DC A2  Q9Íhv..×+Ä{.ÒNÜ¢
   00000340  0E 1B C9 30 2B A1 EF 90 D5 35 7B 92 6B 86 D2 59  ..É0+¡ï.Õ5{’k†ÒY
   00000350  10 84 98 4B 9A 65 1A 00 B8 00 0A CA 5C F7 AF 8C  .„˜Kše..¸..Ê\÷¯Œ
   00000360  9C FF FC 0A 70 11 5E 0A 7A 02 26 B7 DE 98 FA F8  œÿü.p.^.z.&·Þ˜úø
   00000370  0D A0 D2 A3 83 95 34 2F 2C 17 6C B4 66 13 CB FB  . Ò£ƒ•4/,.l´f.Ëû
   00000380  A4 9E BC 64 08 41 F6 A0 F7 A1 F7 E1 24 EE 8C E3  ¤ž¼d.Aö ÷¡÷á$îŒã
   00000390  F2 59 19 1C 84 F8 60 45 81 72 88 B4 AE 6A 97 3E  òY..„ø`E.rˆ´®j—>
   000003A0  B8 5B 4A D8 C7 D2 0C AC 3C D9 25 B2 CC D7 D7 B4  ¸[JØÇÒ.¬<Ù%²Ì××´
   000003B0  CC EF C7 81 95 56 98 C5 A2 B3 7F 77 8D 24 51 7C  ÌïÇ.•V˜Å¢³.w.$Q|
   000003C0  78 27 C5 3A 1E 78 EC 84 5B 54 10 8A E3 0A CD E2  x'Å:.xì„[T.Šã.Íâ
   000003D0  2A 2E B2 9A B6 F2 75 8F B5 F0 74 23 6E 71 D8 56  *.²š¶òu.µðt#nqØV
   000003E0  F0 D1 79 73 0D 5D 41 27 E7 68 55 1F 00 52 9E BE  ðÑys.]A'çhU..Rž¾
   000003F0  BF D6 B4 92 C3 26 84 94 5C FE 46 6C BB 46 FA 51  ¿Ö´’Ã&„”\þFl»FúQ
   00000400  56 41 96 13 94 1A 24 02 64 4F B5 C7 36 F2 25 AF  VA–.”.$.dOµÇ6ò%¯
   00000410  8B 1F FD D1 8F 24 80 44 18 4B B9 D6 04 61 E2 EF  ‹.ýÑ.$€D.K¹Ö.aâï

ROS0

   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   000C0020  00 00 00 00 00 00 00 00 00 00 00 00 00 6F FF E0  .............oÿà
   000C0030  00 00 00 01 00 00 00 18 00 00 00 00 00 6F FF E0  .............oÿà
   000C0040  00 00 00 00 00 00 04 90 00 00 00 00 00 04 00 00  ................
   000C0050  63 72 65 73 65 72 76 65 64 5F 30 00 00 00 00 00  creserved_0.....
   000C0060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0070  00 00 00 00 00 04 04 90 00 00 00 00 00 00 00 08  ................
   000C0080  73 64 6B 5F 76 65 72 73 69 6F 6E 00 00 00 00 00  sdk_version.....
   000C0090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C00A0  00 00 00 00 00 04 05 00 00 00 00 00 00 01 E7 C8  ..............çÈ
   000C00B0  6C 76 31 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv1ldr..........
   000C00C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C00D0  00 00 00 00 00 05 ED 00 00 00 00 00 00 01 6F F0  ......í.......oð
   000C00E0  6C 76 32 6C 64 72 00 00 00 00 00 00 00 00 00 00  lv2ldr..........
   000C00F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0100  00 00 00 00 00 07 5D 00 00 00 00 00 00 01 2F 74  ......]......./t
   000C0110  69 73 6F 6C 64 72 00 00 00 00 00 00 00 00 00 00  isoldr..........
   000C0120  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0130  00 00 00 00 00 08 8C 80 00 00 00 00 00 01 E5 D4  ......Œ€......åÔ
   000C0140  61 70 70 6C 64 72 00 00 00 00 00 00 00 00 00 00  appldr..........
   000C0150  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0160  00 00 00 00 00 0A 72 54 00 00 00 00 00 00 FB 4C  ......rT......ûL
   000C0170  73 70 75 5F 70 6B 67 5F 72 76 6B 5F 76 65 72 69  spu_pkg_rvk_veri
   000C0180  66 69 65 72 2E 73 65 6C 66 00 00 00 00 00 00 00  fier.self.......
   000C0190  00 00 00 00 00 0B 6D A0 00 00 00 00 00 00 5A 94  ......m ......Z”
   000C01A0  73 70 75 5F 74 6F 6B 65 6E 5F 70 72 6F 63 65 73  spu_token_proces
   000C01B0  73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00 00  sor.self........
   000C01C0  00 00 00 00 00 0B C8 34 00 00 00 00 00 00 63 D0  ......È4......cÐ
   000C01D0  73 70 75 5F 75 74 6F 6B 65 6E 5F 70 72 6F 63 65  spu_utoken_proce
   000C01E0  73 73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00  ssor.self.......
   000C01F0  00 00 00 00 00 0C 2C 04 00 00 00 00 00 01 53 2C  ......,.......S,
   000C0200  73 63 5F 69 73 6F 2E 73 65 6C 66 00 00 00 00 00  sc_iso.self.....
   000C0210  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0220  00 00 00 00 00 0D 7F 30 00 00 00 00 00 00 42 98  .......0......B˜
   000C0230  61 69 6D 5F 73 70 75 5F 6D 6F 64 75 6C 65 2E 73  aim_spu_module.s
   000C0240  65 6C 66 00 00 00 00 00 00 00 00 00 00 00 00 00  elf.............
   000C0250  00 00 00 00 00 0D C1 C8 00 00 00 00 00 00 D7 F0  ......ÁÈ......×ð
   000C0260  73 70 70 5F 76 65 72 69 66 69 65 72 2E 73 65 6C  spp_verifier.sel
   000C0270  66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  f...............
   000C0280  00 00 00 00 00 0E 99 B8 00 00 00 00 00 00 80 8C  ......™¸......€Œ
   000C0290  6D 63 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  mc_iso_spu_modul
   000C02A0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   000C02B0  00 00 00 00 00 0F 1A 44 00 00 00 00 00 00 88 B8  .......D......ˆ¸
   000C02C0  6D 65 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  me_iso_spu_modul
   000C02D0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   000C02E0  00 00 00 00 00 0F A2 FC 00 00 00 00 00 00 C0 78  ......¢ü......Àx
   000C02F0  73 76 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sv_iso_spu_modul
   000C0300  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   000C0310  00 00 00 00 00 10 63 74 00 00 00 00 00 00 5D B0  ......ct......]°
   000C0320  73 62 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sb_iso_spu_modul
   000C0330  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   000C0340  00 00 00 00 00 10 C1 24 00 00 00 00 00 00 22 A0  ......Á$......" 
   000C0350  64 65 66 61 75 6C 74 2E 73 70 70 00 00 00 00 00  default.spp.....
   000C0360  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0370  00 00 00 00 00 10 E4 00 00 00 00 00 00 12 80 50  ......ä.......€P
   000C0380  6C 76 31 2E 73 65 6C 66 00 00 00 00 00 00 00 00  lv1.self........
   000C0390  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C03A0  00 00 00 00 00 23 64 80 00 00 00 00 00 03 E6 78  .....#d€......æx
   000C03B0  6C 76 30 00 00 00 00 00 00 00 00 00 00 00 00 00  lv0.............
   000C03C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C03D0  00 00 00 00 00 27 4A F8 00 00 00 00 00 17 27 58  .....'Jø......'X
   000C03E0  6C 76 32 5F 6B 65 72 6E 65 6C 2E 73 65 6C 66 00  lv2_kernel.self.
   000C03F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0400  00 00 00 00 00 3E 72 50 00 00 00 00 00 07 0F 94  .....>rP.......”
   000C0410  65 75 72 75 73 5F 66 77 2E 62 69 6E 00 00 00 00  eurus_fw.bin....
   000C0420  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0430  00 00 00 00 00 45 81 E4 00 00 00 00 00 08 04 18  .....E.ä........
   000C0440  65 6D 65 72 5F 69 6E 69 74 2E 73 65 6C 66 00 00  emer_init.self..
   000C0450  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0460  00 00 00 00 00 4D 85 FC 00 00 00 00 00 06 0D 78  .....M…ü.......x
   000C0470  68 64 64 5F 63 6F 70 79 2E 73 65 6C 66 00 00 00  hdd_copy.self...
   000C0480  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   000C0490  00 00 00 00 00 53 93 74 00 00 00 00 00 00 12 A8  .....S“t.......¨
   000C04A0  6D 61 6E 75 5F 69 6E 66 6F 5F 73 70 75 5F 6D 6F  manu_info_spu_mo
   000C04B0  64 75 6C 65 2E 73 65 6C 66 00 00 00 00 00 00 00  dule.self.......

ROS1

   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   007C0010  00 00 00 00 00 00 00 00 00 00 00 00 00 6F FF E0  .............oÿà
   007C0020  00 00 00 01 00 00 00 17 00 00 00 00 00 6F FF E0  .............oÿà
   007C0030  00 00 00 00 00 00 04 60 00 00 00 00 00 04 00 00  .......`........
   007C0040  63 72 65 73 65 72 76 65 64 5F 30 00 00 00 00 00  creserved_0.....
   007C0050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0060  00 00 00 00 00 04 04 60 00 00 00 00 00 00 00 08  .......`........
   007C0070  73 64 6B 5F 76 65 72 73 69 6F 6E 00 00 00 00 00  sdk_version.....
   007C0080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0090  00 00 00 00 00 04 04 68 00 00 00 00 00 00 FB 4C  .......h......ûL
   007C00A0  73 70 75 5F 70 6B 67 5F 72 76 6B 5F 76 65 72 69  spu_pkg_rvk_veri
   007C00B0  66 69 65 72 2E 73 65 6C 66 00 00 00 00 00 00 00  fier.self.......
   007C00C0  00 00 00 00 00 04 FF B4 00 00 00 00 00 00 C9 30  ......ÿ´......É0
   007C00D0  73 70 75 5F 74 6F 6B 65 6E 5F 70 72 6F 63 65 73  spu_token_proces
   007C00E0  73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00 00  sor.self........
   007C00F0  00 00 00 00 00 05 C8 E4 00 00 00 00 00 00 63 D0  ......Èä......cÐ
   007C0100  73 70 75 5F 75 74 6F 6B 65 6E 5F 70 72 6F 63 65  spu_utoken_proce
   007C0110  73 73 6F 72 2E 73 65 6C 66 00 00 00 00 00 00 00  ssor.self.......
   007C0120  00 00 00 00 00 06 2C B4 00 00 00 00 00 01 D2 D8  ......,´......ÒØ
   007C0130  73 63 5F 69 73 6F 2E 73 65 6C 66 00 00 00 00 00  sc_iso.self.....
   007C0140  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0150  00 00 00 00 00 07 FF 8C 00 00 00 00 00 00 42 98  ......ÿŒ......B˜
   007C0160  61 69 6D 5F 73 70 75 5F 6D 6F 64 75 6C 65 2E 73  aim_spu_module.s
   007C0170  65 6C 66 00 00 00 00 00 00 00 00 00 00 00 00 00  elf.............
   007C0180  00 00 00 00 00 08 42 24 00 00 00 00 00 00 D7 F0  ......B$......×ð
   007C0190  73 70 70 5F 76 65 72 69 66 69 65 72 2E 73 65 6C  spp_verifier.sel
   007C01A0  66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  f...............
   007C01B0  00 00 00 00 00 09 1A 14 00 00 00 00 00 00 80 8C  ..............€Œ
   007C01C0  6D 63 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  mc_iso_spu_modul
   007C01D0  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C01E0  00 00 00 00 00 09 9A A0 00 00 00 00 00 00 88 B8  ......š ......ˆ¸
   007C01F0  6D 65 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  me_iso_spu_modul
   007C0200  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C0210  00 00 00 00 00 0A 23 58 00 00 00 00 00 00 C0 78  ......#X......Àx
   007C0220  73 76 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sv_iso_spu_modul
   007C0230  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C0240  00 00 00 00 00 0A E3 D0 00 00 00 00 00 00 5D B0  ......ãÐ......]°
   007C0250  73 62 5F 69 73 6F 5F 73 70 75 5F 6D 6F 64 75 6C  sb_iso_spu_modul
   007C0260  65 2E 73 65 6C 66 00 00 00 00 00 00 00 00 00 00  e.self..........
   007C0270  00 00 00 00 00 0B 41 80 00 00 00 00 00 00 22 A0  ......A€......" 
   007C0280  64 65 66 61 75 6C 74 2E 73 70 70 00 00 00 00 00  default.spp.....
   007C0290  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C02A0  00 00 00 00 00 0B 64 80 00 00 00 00 00 12 5E F0  ......d€......^ð
   007C02B0  6C 76 31 2E 73 65 6C 66 00 00 00 00 00 00 00 00  lv1.self........
   007C02C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C02D0  00 00 00 00 00 1D C3 80 00 00 00 00 00 0B 54 E8  ......Ã€......Tè
   007C02E0  6C 76 30 00 00 00 00 00 00 00 00 00 00 00 00 00  lv0.............
   007C02F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0300  00 00 00 00 00 29 18 80 00 00 00 00 00 00 05 00  .....).€........
   007C0310  6C 76 30 2E 32 00 00 00 00 00 00 00 00 00 00 00  lv0.2...........
   007C0320  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0330  00 00 00 00 00 29 1D 80 00 00 00 00 00 17 89 58  .....).€......‰X
   007C0340  6C 76 32 5F 6B 65 72 6E 65 6C 2E 73 65 6C 66 00  lv2_kernel.self.
   007C0350  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0360  00 00 00 00 00 40 A6 D8 00 00 00 00 00 07 0F 94  .....@¦Ø.......”
   007C0370  65 75 72 75 73 5F 66 77 2E 62 69 6E 00 00 00 00  eurus_fw.bin....
   007C0380  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0390  00 00 00 00 00 47 B6 6C 00 00 00 00 00 07 E2 68  .....G¶l......âh
   007C03A0  65 6D 65 72 5F 69 6E 69 74 2E 73 65 6C 66 00 00  emer_init.self..
   007C03B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C03C0  00 00 00 00 00 4F 98 D4 00 00 00 00 00 06 18 18  .....O˜Ô........
   007C03D0  68 64 64 5F 63 6F 70 79 2E 73 65 6C 66 00 00 00  hdd_copy.self...
   007C03E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C03F0  00 00 00 00 00 55 B0 EC 00 00 00 00 00 00 12 A8  .....U°ì.......¨
   007C0400  6D 61 6E 75 5F 69 6E 66 6F 5F 73 70 75 5F 6D 6F  manu_info_spu_mo
   007C0410  64 75 6C 65 2E 73 65 6C 66 00 00 00 00 00 00 00  dule.self.......
   007C0420  00 00 00 00 00 55 C3 94 00 00 00 00 00 00 02 E0  .....UÃ”.......à
   007C0430  70 72 6F 67 2E 73 72 76 6B 00 00 00 00 00 00 00  prog.srvk.......
   007C0440  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   007C0450  00 00 00 00 00 55 C6 74 00 00 00 00 00 00 02 40  .....UÆt.......@
   007C0460  70 6B 67 2E 73 72 76 6B 00 00 00 00 00 00 00 00  pkg.srvk........
   007C0470  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Versioning in ROS0

   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   001004C0  33 35 30 2E 30 30 30 0A 00 00 00 00 00 00 00 00  350.000.........
   001004D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   001004E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   001004F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   00100500  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   00100510  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   00100520  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
   00100530  53 43 45 00 00 00 00 02 00 00 00 01 00 00 01 F0  SCE............ð

Versioning of ROS1

   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   00800480  33 36 30 2E 30 30 30 0A 53 43 45 00 00 00 00 02  360.000.SCE.....
   00800490  00 01 00 01 00 00 01 F0 00 00 00 00 00 00 06 00  .......ð........
   008004A0  00 00 00 00 00 00 F5 4C 00 00 00 00 00 00 00 03  ......õL........

RVK

   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
   00093800  00 00 00 00 00 00 10 10 00 00 00 00 00 00 10 10  ................
   00093810  00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00  ...... .........
   00093820  00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 40  ...............@
   00093830  53 43 45 00 00 00 00 02 00 00 00 02 00 00 00 00  SCE.............
   00093840  00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 40  ...............@
   00093850  F6 93 38 8E C8 46 D5 FF 34 53 9D 12 91 7E C6 96  ö“8ŽÈFÕÿ4S..‘~Æ–
   00093860  BA 4F B8 36 82 1A 4F 40 19 88 B2 C8 56 B3 DA 4B  ºO¸6‚.O@.ˆ²ÈV³ÚK
   00093870  62 EB 84 D3 8A 95 F9 DD 6C D7 4C AB 47 8D D1 1A  bë„ÓŠ•ùÝl×L«G.Ñ.
   00093880  A6 64 B3 55 21 71 53 8C DD 8C 61 1F B0 7E 5E D2  ¦d³U!qSŒÝŒa.°~^Ò
   00093890  DB 1A 07 DA 37 4E 07 92 E7 B2 35 F1 E0 FA F8 13  Û..Ú7N.’ç²5ñàúø.
   000938A0  EC D9 94 1C 72 A0 45 38 79 85 6A 4E 02 CC 55 41  ìÙ”.r E8y…jN.ÌUA
   000938B0  21 3D F1 48 32 98 6E CB 86 0A 38 6E 33 C6 2E 8D  !=ñH2˜nË†.8n3Æ..
   000938C0  1E 51 DC 7E C5 34 E6 5B 27 D4 5B 79 B4 34 0D 59  .QÜ~Å4æ['Ô[y´4.Y
   000938D0  49 F9 F0 6E F6 94 25 3D 6A E0 E9 40 69 74 68 B4  Iùðnö”%=jàé@ith´
   000938E0  C5 C6 A3 95 62 E0 69 6E CD 6C CD 48 32 DD 11 8C  ÅÆ£•bàinÍlÍH2Ý.Œ
   000938F0  1A D7 9B 37 8A 6F 33 C7 A1 27 D1 1C A4 24 E7 96  .×›7Šo3Ç¡'Ñ.¤$ç–
   00093900  F0 75 BC 3A BE 15 26 CD 83 EA C8 11 F0 50 4D F8  ðu¼:¾.&ÍƒêÈ.ðPMø
   00093910  A0 15 2F 68 6E AE 5F 28 D8 F5 EA 39 A3 00 5E 06   ./hn®_(Øõê9£.^.
   00093920  D6 28 21 B7 36 49 29 27 73 76 D2 37 93 AB AB B2  Ö(!·6I)'svÒ7“««²
   00093930  1A B3 AD A2 75 64 D3 73 88 4F D3 8E 23 B3 16 4A  .³¢udÓsˆOÓŽ#³.J
   00093940  BD 4A E2 B3 D0 AE B0 12 AC 91 33 EB AD 75 3E 47  ½Jâ³Ð®°.¬‘3ëu>G
   00093950  8F E4 E2 D7 CE 35 90 BB 7A E0 AA 95 8D 88 93 22  .äâ×Î5.»zàª•.ˆ“"
   00093960  7A EB 8D C0 92 E9 74 30 7A 20 61 A6 36 5D 79 BD  zë.À’ét0z a¦6]y½
   00093970  11 9E B5 FC 64 F4 DF B6 E6 5E B7 7D 64 76 A7 B9  .žµüdôß¶æ^·}dv§¹
   00093980  E8 12 6A 60 3B 6F 4F 4D F0 4A 8C 33 28 10 AB 60  è.j`;oOMðJŒ3(.«`
   00093990  B5 D5 0C EB 2E 89 02 91 B4 77 EE 4B 0A 95 B9 F1  µÕ.ë.‰.‘´wîK.•¹ñ
   000939A0  66 CF 5E 0A D4 A8 FA 85 DB 14 9E 54 36 86 B9 A0  fÏ^.Ô¨ú…Û.žT6†¹ 
   000939B0  F2 82 42 6A 76 8B D1 AD 72 2A 86 8E 10 92 FC 7A  ò‚Bjv‹Ñr*†Ž.’üz
   000939C0  2B A2 A9 55 31 BD F3 F4 95 64 A9 F6 D0 F4 A7 9B  +¢©U1½óô•d©öÐô§›
   000939D0  35 9E FF C6 C1 98 10 A2 41 47 F9 E1 B0 68 ED DD  5žÿÆÁ˜.¢AGùá°híÝ
   000939E0  8E AB E6 E8 A8 0F 1E 2F C3 50 3A 3B FA F4 2E 90  Ž«æè¨../ÃP:;úô..
   000939F0  5F 1C 3E 52 FE 76 01 99 0A 99 17 B6 BB 11 39 04  _.>Rþv.™.™.¶».9.
   00093A00  CE 79 FD 50 3A 59 61 24 16 8D 8A 08 DD F7 88 A6  ÎyýP:Ya$..Š.Ý÷ˆ¦
   00093A10  32 6F 77 E0 12 22 70 73 2C 1A 44 DE B7 00 D6 50  2owà."ps,.DÞ·.ÖP
   00093A20  AD 22 CE 7F AA 87 65 AA A3 0B D8 7A 84 FE CA 16  "Î.ª‡eª£.Øz„þÊ.
   00093A30  00 00 00 03 00 00 00 02 00 01 00 60 00 00 00 00  ...........`....
   00093A40  00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
   00093A50  C4 1E 40 5D 94 83 6F 00 E8 86 36 1C 1E C0 A6 9F  Ä.@]”ƒo.è†6..À¦Ÿ
   00093A60  D0 34 53 63 9E 70 EB 64 43 9F 24 34 28 85 7A 04  Ð4ScžpëdCŸ$4(…z.

cell_ext_os_area

   Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
      
   0E780000  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ   note: no cell_ext_os_area, 0CC00000-0FFFFFFF region filled with big blocks of FF
   0E780010  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ    because firmware version 3.60 has no otheros.
    [...]    FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ   large FF filled block region
   0FFFFFE0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
   0FFFFFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

Dumping your flash

There are many ways you can dump your flash you can choose the way that best fits you, there are some persons studing the flash.. If you can help providing a dump (specially if you have a debug console) search for those persons in IRC Efnet #ps3dev

Payload

Uncomment dump_dev_flash() in graf_payloads compile and run the payload

see Graf's_PSGroove_Payload for more info

Linux

Using graf_chokolo kernel with /dev/ps3nflasha access

dd if=/dev/ps3nflasha of=NOR.BIN bs=1024

Hardware

see Hardware flashing

Dump NAND/NOR from GameOS

precompiled : dump_flash.pkg // backup/mirror: dump_flash.pkg (70.48 KB)
source: dump_flash-src.rar (2.33 KB)

Make sure USB stick is FAT32 with enough free space (16MB per NOR dump, 256MB per NAND dump)

remark: NAND dumps are 239MB because HV masks bootldr, see Hardware flashing #Difference between hardware dumps and software dumps

NOR Unpacking // NOR Unpkg

/*
  # ../norunpkg norflash.bin norflash
  unpacking asecure_loader (size: 190xxx bytes)...
  unpacking eEID (size: 65536 bytes)...
  unpacking cISD (size: 2048 bytes)...
  unpacking cCSD (size: 2048 bytes)...
  unpacking trvk_prg0 (size: 131072 bytes)...
  unpacking trvk_prg1 (size: 131072 bytes)...
  unpacking trvk_pkg0 (size: 131072 bytes)...
  unpacking trvk_pkg1 (size: 131072 bytes)...
  unpacking ros0 (size: 7340032 bytes)...
  unpacking ros1 (size: 7340032 bytes)...
  unpacking cvtrm (size: 262144 bytes)...
*/

// Copyright 2010       Sven Peter
// Licensed under the terms of the GNU GPL, version 2
// http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt
// nor modifications by rms.

#include "tools.h"
#include "types.h"

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <unistd.h>
#include <sys/stat.h>

#ifdef WIN32
#define MKDIR(x,y) mkdir(x)
#else
#define MKDIR(x,y) mkdir(x,y)
#endif

u8 *pkg = NULL;

static void unpack_file(u32 i)
{
        u8 *ptr;
        u8 name[33];
        u64 offset;
        u64 size;

        ptr = pkg + 0x10 + 0x30 * i;

        offset = be64(ptr + 0x00);
        size   = be64(ptr + 0x08);

        memset(name, 0, sizeof name);
        strncpy((char *)name, (char *)(ptr + 0x10), 0x20);

        printf("unpacking %s (size: %d bytes)...\n", name, size);
        memcpy_to_file((char *)name, pkg + offset, size);
}

static void unpack_pkg(void)
{
        u32 n_files;
        u64 size;
        u32 i;

        n_files = be32(pkg + 4);
        size = be64(pkg + 8);

        for (i = 0; i < n_files; i++)
                unpack_file(i);
}

int main(int argc, char *argv[])
{
        if (argc != 3)
                fail("usage: norunpkg filename.nor target");

        pkg = mmap_file(argv[1]);

        /* kludge for header, i do not do sanity checks at the moment */
        pkg += 1024;

        MKDIR(argv[2], 0777);

        if (chdir(argv[2]) != 0)
                fail("chdir");

        unpack_pkg();

        return 0;
}

Source: http://rms.grafchokolo.com/?p=25

RMS - eEID splitter

#include <stdio.h>
#include <stdlib.h>
#include <string.h>

void
DumpEidData (FILE * pFile, int iInputSize, int iEidCount,
	     char *pFilenamePrefix)
{
  FILE *pOutput;
  char *szFilename;
  char *szBuf;
  int iRes, iSize;

  printf ("dumping EID%d from eEID at %p, size %d (%x)..\n",
	  iEidCount, pFile, iInputSize, iInputSize);

  szBuf = (char *) malloc (iInputSize + 1);
  szFilename = (char *) malloc (strlen (pFilenamePrefix) + 2);

  if (szBuf == NULL)
    {
      perror ("malloc");
      exit (1);
    };

  iSize = fread (szBuf, iInputSize, 1, pFile);
  sprintf (szFilename, "%s%d", pFilenamePrefix, iEidCount);
  pOutput = fopen (szFilename, "wb");
  iRes = fwrite (szBuf, iInputSize, 1, pOutput);

  if (iRes != iSize)
    {
      perror ("fwrite");
      exit (1);
    };

  free (szBuf);
}

int
main (int argc, char **argv)
{
  FILE *pFile;
  char *pPrefix;

  pFile = fopen (argv[1], "rb");
  if (pFile == NULL)
    {
    usage:
      printf ("usage: %s <eEID> <EID name prefix>\n", argv[0]);
      exit (1);
    }

  if (argc == 2 && argv[2] != NULL)
    {
      pPrefix = argv[2];
      goto usage;
    }

  fseek (pFile, 0x70, SEEK_SET);

  if (pPrefix != NULL)
    {
      DumpEidData (pFile, 2144, 0, pPrefix);
      DumpEidData (pFile, 672, 1, pPrefix);
      DumpEidData (pFile, 1840, 2, pPrefix);
      DumpEidData (pFile, 256, 3, pPrefix);
      DumpEidData (pFile, 48, 4, pPrefix);
      DumpEidData (pFile, 2560, 5, pPrefix);
    }
  return 0;
}

Source: http://rms.grafchokolo.com/?p=59

Flash Samples

Here are some samples of NOR Flash for your dissection. These are taken from different consoles.

3.55 kmeaw, 2.80 backup: http://www.megaupload.com/?d=J5UKO3HX
3.66 ofw: http://www.mediafire.com/?m7m4mppro66zib5