Flash:CELL EXTNOR AREA

From PS3 Developer wiki
Jump to navigation Jump to search

CELL_EXTNOR_AREA - F20000[edit | edit source]

Only on NOR consoles
On NAND consoles the block 00F20000-00F3FFFF is FF (OtherOS) or 00 (No OtherOS) filled

Header[edit | edit source]

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
  
00F20000  43 45 4C 4C 5F 45 58 54 4E 4F 52 5F 41 52 45 41  CELL_EXTNOR_AREA      marker: CELL_EXTNOR_AREA

SHA1[edit | edit source]

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
  
00F20010  00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F20020  00 00 02 00 00 00 00 44 00 00 00 00 A9 C8 06 D0  .......D....©È.Ð (sha1sum of 0x200 Harddrive Info)
00F20030  C0 17 8D 34 55 A7 62 73 DD 16 A6 FB 75 A0 D2 10  À..4U§bsÝ.¦ûu Ò.

00 filled[edit | edit source]

00F20040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F201F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Harddrive info[edit | edit source]

00F20200  00 00 00 07 46 55 4A 49 54 53 55 20 4D 48 5A 32  ....FUJITSU MHZ2      (u32 CountryCode) harddrive brand/model
00F20210  30 38 30 42 48 20 47 31 20 20 20 20 20 20 20 20  080BH G1        
00F20220  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                  
00F20230  20 20 20 20 4B 36 33 52 54 38 42 34 48 59 42 4B      K63RT8B4HYBK      harddrive serial

00 filled[edit | edit source]

00F20240  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F3FFF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

F40000[edit | edit source]

contains crl1

On NAND consoles with OtherOS the blocks

  • 0x0F40000 - 0x0F401FF
  • 0x0F42000 - 0xBAD51F0
  • 0xBAD6000 - 0xBAECDFF
  • 0xBAEE000 - 0xBAFD9FF
  • 0xBAFE000 etc.

are filled with data

Hash1 (same as F80000)[edit | edit source]

00F40000  00 00 00 01 00 00 00 2C 6E 47 15 E8 38 9B C8 16  .......,nG.è8›È.      00F40000-00F40030      (same in other version/console dump)
00F40010  65 6E 0C 37 54 25 FE 7B 22 9A 31 75 72 22 63 2B  en.7T%þ{"š1ur"c+      is the same as
00F40020  31 DD 15 AA 60 7D EB F5 F7 A3 74 0B 9D DD 3B 3A  1Ý.ª`}ëõ÷£t..Ý;:      00F80000-00F80030

00 filled[edit | edit source]

00F40030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F5FFF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................


F60000[edit | edit source]

contains drl1

Hash2 (same as FA0000)[edit | edit source]

NOR: 0x0F60000 - 0x0F60040 without OCRL present NOR: 0x0F60000 - 0x0F60040 when OCRL present
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
  
00F60000  10 00 00 0C 00 04 10 03 00 00 00 01 20 00 00 34  ............ ..4      00F60000-00F60040      (differs in other version/console dump)
00F60010  00 00 00 00 00 00 00 00 5B 3F 73 B4 9A 86 C7 B2  ........[?s´š†Ç²      is the
00F60020  A0 D1 1E AF A7 9B 97 E2 7A CB 05 2B 4D 61 26 AE   Ñ.¯§›—âzË.+Ma&®      same as
00F60030  13 CA 29 84 19 93 15 E1 4A DB 2C B7 7C 00 E4 EB  .Ê)„.“.áJÛ,·|.äë      00FA0000-00FA0040
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
  
00F60000  10 00 00 0C 00 04 10 03 00 00 00 11 20 00 00 3C  ............ ..<
00F60010  00 00 00 01 00 00 00 01 03 E7 00 00 00 00 00 01  .........ç......
00F60020  16 87 B9 B2 3C 0F 78 27 08 E1 C8 57 23 34 22 D7  .‡¹²<.x'.áÈW#4"×
00F60030  2A 90 DE 44 3F 33 DA 07 93 0E DD 7C DD 0F AF 54  *.ÞD?3Ú.“.Ý|Ý.¯T
00F60040  0B 4E 8F BC B1 B3 16 78 00 00 00 00 00 00 00 00  .N.¼±³.x........

00 filled[edit | edit source]

00F60040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F69BF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

FF filled[edit | edit source]

00FA9C00  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
[...]                                                                            all FF's with sometimes below 'OCRL0200' section inside it
00FBFFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

OCRL0200 section inside FF block[edit | edit source]

either seen on 0x0FA9400 or on 0x0F69400, but never both (and only present when console was used for watching bluray movies and connected online)

NOR: 0x0F69400 - 0x0F6952F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00F69400  4F 43 52 4C 30 32 30 30 00 00 00 00 00 00 00 00  OCRL0200........
00F69410  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F69420  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00F69430  A6 50 37 72 07 82 68 FE EA 9A A1 8C 54 19 2B E4  ¦P7r.‚hþêš¡ŒT.+ä
00F69440  2F D8 85 BA 5F 2F AA ED AC 6B 54 FE 31 0B 80 58  /Ø…º_/ªí¬kTþ1.€X
00F69450  A9 74 D4 ED F9 77 7B B2 30 50 47 F3 C0 12 AC 26  ©tÔíùw{²0PGóÀ.¬&
00F69460  6A 40 AD 19 14 C2 AD 2C 92 36 02 78 50 D4 08 D4  j@­..­,’6.xPÔ.Ô
00F69470  06 76 2C 97 0D 2A 7A 19 F4 85 01 6F CD C8 07 C3  .v,—.*z.ô….oÍÈ.Ã
00F69480  25 2D F4 CD 46 2B FE F7 B8 0A 40 9F 97 22 06 5E  %-ôÍF+þ÷¸.@Ÿ—".^
00F69490  4B F1 02 92 01 11 C1 E0 DD AC 84 0D 58 C2 21 66  Kñ.’..Áàݬ„.XÂ!f
00F694A0  25 69 A4 1A C8 E9 DB 4C 5D 31 4E AF 07 2A 43 90  %i¤.ÈéÛL]1N¯.*C.
00F694B0  3E DC 4A 80 FD A7 06 BB 1F 9B D4 75 6C 6C 45 CE  >ÜJ€ý§.».›ÔullEÎ
00F694C0  1A A6 5D D1 9B E9 80 C2 72 CA A8 0B 14 C6 B2 86  .¦]Ñ›é€Ârʨ..Ʋ†
00F694D0  E3 37 86 E6 AD DE 2C F9 76 3D 18 62 DD 77 AD 71  ã7†æ­Þ,ùv=.bÝw­q
00F694E0  32 F1 11 FD 17 9E 68 50 B3 A5 7F 41 37 19 63 3A  2ñ.ý.žhP³¥.A7.c:
00F694F0  78 08 19 4D CA 47 AD FF 35 89 52 3E 18 39 F5 A5  x..MÊG­ÿ5‰R>.9õ¥
00F69500  4B 98 D6 C0 66 68 E0 CA 4B 9F 1A 42 1E A2 EE 79  K˜ÖÀfhàÊKŸ.B.¢îy
00F69510  E6 58 6F FF 58 B1 FE 4F DB FD 27 6F 4C EC 6C 9F  æXoÿX±þOÛý'oLìlŸ
00F69520  B4 B7 F8 9D 30 4A 1E 83 15 47 08 B6 FB 51 00 DA  ´·ø.0J.ƒ.G.¶ûQ.Ú
  • CECHH (DIA-001) with WDC WD1002FAEX-00Z3A0 drive (1TB) : ROS0: 3.55 / ROS1: 3.73
  • CECHL (VER-001) with TOSHIBA MK8052GSX (80GB) : ROS0: 3.55 / ROS1: 3.56
  • CECH20.. (DYN-001) with TOSHIBA MK1255GSX H (120GB) : ROS0: 3.70 / ROS1: 3.70
  • CECH2004A (DYN-001) with TOSHIBA MK1255GSX H (120GB) : ROS0: 3.72 / ROS1: 3.70
  • CECH2004 (DYN-001) with Hitachi HTS545025B9SA0 (250GB) / ROS0: 4.11 / ROS1: 4.00


F80000[edit | edit source]

contains crl2

Hash1 (same as F40000)[edit | edit source]

00F80000  00 00 00 01 00 00 00 2C 6E 47 15 E8 38 9B C8 16  .......,nG.è8›È.      00F80000-00F80030      (same in other version/console dump)
00F80010  65 6E 0C 37 54 25 FE 7B 22 9A 31 75 72 22 63 2B  en.7T%þ{"š1ur"c+      is the same as
00F80020  31 DD 15 AA 60 7D EB F5 F7 A3 74 0B 9D DD 3B 3A  1Ý.ª`}ëõ÷£t..Ý;:      00F40000-00F40030

00 filled[edit | edit source]

00F80030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00F9FFF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................


FA0000[edit | edit source]

contains drl2

Hash2 (same as F60000)[edit | edit source]

NOR: 0x0F60000 - 0x0F60040 without OCRL present NOR: 0x0F60000 - 0x0F60040 when OCRL present
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
  
00FA0000  10 00 00 0C 00 04 10 03 00 00 00 01 20 00 00 34  ............ ..4      00FA0000-00FA0040      (differs in other version/console dump)
00FA0010  00 00 00 00 00 00 00 00 5B 3F 73 B4 9A 86 C7 B2  ........[?s´š†Ç²      is the
00FA0020  A0 D1 1E AF A7 9B 97 E2 7A CB 05 2B 4D 61 26 AE   Ñ.¯§›—âzË.+Ma&®      same as
00FA0030  13 CA 29 84 19 93 15 E1 4A DB 2C B7 7C 00 E4 EB  .Ê)„.“.áJÛ,·|.äë      00F60000-00F60040
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00F60000  10 00 00 0C 00 04 10 03 00 00 00 11 20 00 00 3C  ............ ..<
00F60010  00 00 00 01 00 00 00 01 03 E7 00 00 00 00 00 01  .........ç......
00F60020  16 87 B9 B2 3C 0F 78 27 08 E1 C8 57 23 34 22 D7  .‡¹²<.x'.áÈW#4"×
00F60030  2A 90 DE 44 3F 33 DA 07 93 0E DD 7C DD 0F AF 54  *.ÞD?3Ú.“.Ý|Ý.¯T
00F60040  0B 4E 8F BC B1 B3 16 78 00 00 00 00 00 00 00 00  .N.¼±³.x........

00 filled[edit | edit source]

00FA0040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[...]                                                                            all 00's
00FA9BF0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

FF filled[edit | edit source]

00FA9C00  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
[...]                                                                            all FF's with sometimes below 'OCRL0200' section inside it
00FBFFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ

OCRL0200 section inside FF block[edit | edit source]

either seen on 0x0FA9400 or on 0x0F69400, but never both (and only present when console was used for watching bluray movies and connected online)

NOR: 0x0FA9400 - 0x0FA952F
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00FA9400  4F 43 52 4C 30 32 30 30 00 00 00 00 00 00 00 00  OCRL0200........
00FA9410  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00FA9420  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00FA9430  A6 50 37 72 07 82 68 FE EA 9A A1 8C 54 19 2B E4  ¦P7r.‚hþêš¡ŒT.+ä
00FA9440  2F D8 85 BA 5F 2F AA ED AC 6B 54 FE 31 0B 80 58  /Ø…º_/ªí¬kTþ1.€X
00FA9450  A9 74 D4 ED F9 77 7B B2 30 50 47 F3 C0 12 AC 26  ©tÔíùw{²0PGóÀ.¬&
00FA9460  6A 40 AD 19 14 C2 AD 2C 92 36 02 78 50 D4 08 D4  j@­..­,’6.xPÔ.Ô
00FA9470  06 76 2C 97 0D 2A 7A 19 F4 85 01 6F CD C8 07 C3  .v,—.*z.ô….oÍÈ.Ã
00FA9480  25 2D F4 CD 46 2B FE F7 B8 0A 40 9F 97 22 06 5E  %-ôÍF+þ÷¸.@Ÿ—".^
00FA9490  4B F1 02 92 01 11 C1 E0 DD AC 84 0D 58 C2 21 66  Kñ.’..Áàݬ„.XÂ!f
00FA94A0  25 69 A4 1A C8 E9 DB 4C 5D 31 4E AF 07 2A 43 90  %i¤.ÈéÛL]1N¯.*C.
00FA94B0  3E DC 4A 80 FD A7 06 BB 1F 9B D4 75 6C 6C 45 CE  >ÜJ€ý§.».›ÔullEÎ
00FA94C0  1A A6 5D D1 9B E9 80 C2 72 CA A8 0B 14 C6 B2 86  .¦]Ñ›é€Ârʨ..Ʋ†
00FA94D0  E3 37 86 E6 AD DE 2C F9 76 3D 18 62 DD 77 AD 71  ã7†æ­Þ,ùv=.bÝw­q
00FA94E0  32 F1 11 FD 17 9E 68 50 B3 A5 7F 41 37 19 63 3A  2ñ.ý.žhP³¥.A7.c:
00FA94F0  78 08 19 4D CA 47 AD FF 35 89 52 3E 18 39 F5 A5  x..MÊG­ÿ5‰R>.9õ¥
00FA9500  4B 98 D6 C0 66 68 E0 CA 4B 9F 1A 42 1E A2 EE 79  K˜ÖÀfhàÊKŸ.B.¢îy
00FA9510  E6 58 6F FF 58 B1 FE 4F DB FD 27 6F 4C EC 6C 9F  æXoÿX±þOÛý'oLìlŸ
00FA9520  B4 B7 F8 9D 30 4A 1E 83 15 47 08 B6 FB 51 00 DA  ´·ø.0J.ƒ.G.¶ûQ.Ú
  • CECHL (VER-001) with ST98823AS drive (80GB) : ROS0: 3.55 / ROS1: 2.80

Used by GetOnlineCertificateRevocationListVersion(FlashOCRL%d) inside bdp player
Handled by Iso module AacsModule.spu.isoself
http://www.blu-raydisc.info/format-spec/rom3-spec.php
http://www.blu-raydisc.info/docs/Certificate_Revocation/online.crl <-- exact same as above hex pastie