Editing Non Volatile Storage
Jump to navigation
Jump to search
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.
Latest revision | Your text | ||
Line 7: | Line 7: | ||
! Bank # !! Block # !! Start Offset in /dev/sflash0s0x34 !! Start Offset in Sflash !! Size !! Notes | ! Bank # !! Block # !! Start Offset in /dev/sflash0s0x34 !! Start Offset in Sflash !! Size !! Notes | ||
|- | |- | ||
| 0 || 0 || 0x0000 || 0x1C4000 || 0x3000 || | | 0 || 0 || 0x0000 || 0x1C4000 || 0x3000 || ?????????? | ||
|- | |- | ||
| 0 || 1 || 0x3000 || 0x1C7000 || 0x0200 || | | 0 || 1 || 0x3000 || 0x1C7000 || 0x0200 || ?????????? | ||
|- | |- | ||
| 0 || 2 || 0x3200 || 0x1C7200 || 0x0200 || pdcs region | | 0 || 2 || 0x3200 || 0x1C7200 || 0x0200 || pdcs region | ||
|- | |- | ||
| 0 || 3 || 0x3400 || 0x1C7400 || 0x0C00 || | | 0 || 3 || 0x3400 || 0x1C7400 || 0x0C00 || ?????????? | ||
|- | |- | ||
| 0 || 4 || 0x4000 || 0x1C8000 || 0x3000 || os region | | 0 || 4 || 0x4000 || 0x1C8000 || 0x3000 || os region | ||
Line 19: | Line 19: | ||
| 1 || 0 || 0x7000 || 0x1CB000 || 0x3000 || backup of os region | | 1 || 0 || 0x7000 || 0x1CB000 || 0x3000 || backup of os region | ||
|- | |- | ||
| 1 || 1 || 0xA000 || 0x1CE000 || 0x2000 || Partial | | 1 || 1 || 0xA000 || 0x1CE000 || 0x2000 || Partial Backup of 0/0 Region (+0x1000) | ||
|- | |- | ||
|} | |} | ||
= Mapping of the detailed area (NVS service) 0/0 | = Mapping of the detailed area (NVS service) 0/0 = | ||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
Line 29: | Line 29: | ||
! Bank # !! Block # !! Start Offset !! Start Offset in Sflash !! Size !! Notes | ! Bank # !! Block # !! Start Offset !! Start Offset in Sflash !! Size !! Notes | ||
|- | |- | ||
| 0 || 0 || 0x0 || 0x1C4000 || 0x8 || | | 0 || 0 || 0x0 || 0x1C4000 || 0x8 || board id (e.g 30 02 01 01 04 01 05 01) | ||
* '''30 02 01 01 04 01 05 01''' = CFI-1014A 01X EDM-010 | * '''30 02 01 01 04 01 05 01''' = CFI-1014A 01X EDM-010 | ||
* '''30 02 01 01 04 01 05 01''' = DFI-T1000AA EDM-010 | * '''30 02 01 01 04 01 05 01''' = DFI-T1000AA EDM-010 | ||
* '''30 02 02 01 01 01 05 01''' = CFI-1115A 01X EDM-020 | * '''30 02 02 01 01 01 05 01''' = CFI-1115A 01X EDM-020 | ||
* '''30 02 03 01 01 01 05 01''' = CFI-1215A 01X EDM-030 | * '''30 02 03 01 01 01 05 01''' = CFI-1215A 01X EDM-030 | ||
|- | |- | ||
| 0 || 0 || 0x1900 || 0x1C5900 || 0x700 || ??? (encrypted garbage in prototype | | 0 || 0 || 0x1900 || 0x1C5900 || 0x700 || ??? (encrypted garbage in prototype ps5 devkit dump) | ||
|- | |- | ||
|} | |} | ||
= Mapping of the detailed area (NVS service) 0/2 | = Mapping of the detailed area (NVS service) 0/2 PDCSAREA = | ||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
Line 69: | Line 71: | ||
|- | |- | ||
| 0 || 2 || 0x1E0 || 0x1C73E0 || 0x8 || ImagePackageId (this determines which firmware is going to be installed at factory) | | 0 || 2 || 0x1E0 || 0x1C73E0 || 0x8 || ImagePackageId (this determines which firmware is going to be installed at factory) | ||
* '''PKG-0384''' = DFI-T1000AA | * '''PKG-0384''' = DFI-T1000AA | ||
* '''PKG-0711''' = CFI-1015B 01X | * '''PKG-0711''' = CFI-1015B 01X | ||
Line 79: | Line 82: | ||
* '''PKG-1590''' = CFI-1215A 01X | * '''PKG-1590''' = CFI-1215A 01X | ||
* '''PKG-1591''' = CFI-1215B 01X | * '''PKG-1591''' = CFI-1215B 01X | ||
|- | |- | ||
| 0 || 2 || 0x1F0 || 0x1C73F0 || 0x10 || Manufacturing Process Flags (01 is enabled, 00 is disabled) (e.g 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00) | | 0 || 2 || 0x1F0 || 0x1C73F0 || 0x10 || Manufacturing Process Flags (01 is enabled, 00 is disabled) (e.g 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00) | ||
Line 88: | Line 92: | ||
|} | |} | ||
= Mapping of the detailed area (NVS service) 0/4 | = Mapping of the detailed area (NVS service) 0/4 OSAREA = | ||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
Line 94: | Line 98: | ||
! Bank # !! Block # !! Start Offset !! Start Offset in Sflash !! Size !! Notes | ! Bank # !! Block # !! Start Offset !! Start Offset in Sflash !! Size !! Notes | ||
|- | |- | ||
| 0 || 4 || 0x11 || 0x1C8011 || 1 || Coldboot (0x01 ON | | 0 || 4 || 0x11 || 0x1C8011 || 1 || Coldboot (0xFF OFF, 0x01 ON) | ||
|- | |- | ||
| 0 || 4 || 0x12 || 0x1C8012 || 1 || EAP UART (0xEF ON, 0xFF OFF) | | 0 || 4 || 0x12 || 0x1C8012 || 1 || EAP UART (0xEF ON, 0xFF OFF) | ||
|- | |- | ||
| 0 || 4 || 0x17 || 0x1C8017 || 1 || GpuPacket | | 0 || 4 || 0x17 || 0x1C8017 || 1 || GpuPacket Off 0xFE | ||
|- | |- | ||
| 0 || 4 || 0x20 || 0x1C8020 || 1 || | | 0 || 4 || 0x20 || 0x1C8020 || 1 || FirstImageWriteModeOn 0xFF FirstImageWriteModeOff 0x00 | ||
|- | |- | ||
| 0 || 4 || 0x22 || 0x1C8022 || 1 || HddKernel | | 0 || 4 || 0x22 || 0x1C8022 || 1 || HddKernel On 0xFF | ||
|- | |- | ||
| 0 || 4 || 0x30 || 0x1C8030 || 4 || Controller USB Connection / Wlan BT Related | | 0 || 4 || 0x30 || 0x1C8030 || 4 || Controller USB Connection / Wlan BT Related | ||
|- | |- | ||
| 0 || 4 || 0x34 || 0x1C8034 || 1 || Wlan BT | | 0 || 4 || 0x34 || 0x1C8034 || 1 || Wlan BT Related | ||
|- | |- | ||
| 0 || 4 || 0x66 || 0x1C8066 || 1 || | | 0 || 4 || 0x66 || 0x1C8066 || 1 || ??? | ||
|- | |- | ||
| 0 || 4 || 0x68 || 0x1C8068 || 4 || Current Firmware Version? (little endian | | 0 || 4 || 0x68 || 0x1C8068 || 4 || Current Firmware Version ??? (little endian) (upper half) | ||
|- | |- | ||
| 0 || 4 || 0xF0 || 0x1C80F0 || 0x10 || PasscodeStatus | | 0 || 4 || 0xF0 || 0x1C80F0 || 0x10 || PasscodeStatus | ||
Line 122: | Line 126: | ||
| 0 || 4 || 0x1FC || 0x1C81FC || 4 || EAP Magic (e.g. E5 E5 E5 01) | | 0 || 4 || 0x1FC || 0x1C81FC || 4 || EAP Magic (e.g. E5 E5 E5 01) | ||
|- | |- | ||
| 0 || 4 || 0x300 || 0x1C8300 || 1 || | | 0 || 4 || 0x300 || 0x1C8300 || 1 || BootMessageDebugMode 0x02 BootMessageDefaultMode 0xFF | ||
|- | |- | ||
| 0 || 4 || 0x301 || 0x1C8301 || 1 || | | 0 || 4 || 0x301 || 0x1C8301 || 1 || Mp0MemoryTestOn 0x01 Mp0MemoryTestOff 0xFF | ||
|- | |- | ||
| 0 || 4 || 0x304 || 0x1C8304 || 1 || | | 0 || 4 || 0x304 || 0x1C8304 || 1 || AblDebugPrintOn 0x01 AblDebugPrintOff 0xFF | ||
|- | |- | ||
| 0 || 4 || 0x310 || 0x1C8310 || 1 || | | 0 || 4 || 0x310 || 0x1C8310 || 1 || BiosMemoryTestCachedAndUncached 0x50 BiosMemoryTestDefault 0xFF | ||
|- | |- | ||
| 0 || 4 || 0x321 || 0x1C8321 || 1 || | | 0 || 4 || 0x321 || 0x1C8321 || 1 || UmaSize4GiB 0x10 UmaSizeDefault 0xFF | ||
|- | |- | ||
| 0 || 4 || 0x322 || 0x1C8322 || 1 || | | 0 || 4 || 0x322 || 0x1C8322 || 1 || CpuClockOn 0x01 CpuClockOff 0xFF | ||
|- | |- | ||
| 0 || 4 || 0x3C7 || 0x1C83C7 || 1 || GfxClkDfllDeterminism | | 0 || 4 || 0x3C7 || 0x1C83C7 || 1 || GfxClkDfllDeterminism 0xFF Default | ||
|- | |- | ||
| 0 || 4 || 0x400 || 0x1C8400 || 0x300 || QA FLAG TOKEN (see sample here -> https://pastebin.com/fvA8iKWq) | | 0 || 4 || 0x400 || 0x1C8400 || 0x300 || QA FLAG TOKEN (see sample here -> https://pastebin.com/fvA8iKWq) | ||
|- | |- | ||
| 0 || 4 || 0xC10 || 0x1C8C10 || 8 || Factory Firmware Version? (little endian) | | 0 || 4 || 0xC10 || 0x1C8C10 || 8 || Factory Firmware Version ??? (little endian) | ||
|- | |- | ||
| 0 || 4 || 0xC18 || 0x1C8C18 || 8 || Factory Firmware Version TimeStamp? (little endian) | | 0 || 4 || 0xC18 || 0x1C8C18 || 8 || Factory Firmware Version TimeStamp ??? (little endian) | ||
|- | |- | ||
| 0 || 4 || 0xC20 || 0x1C8C20 || 8 || Minimum Firmware Version? (little endian) | | 0 || 4 || 0xC20 || 0x1C8C20 || 8 || Minimum Firmware Version ??? (little endian) | ||
|- | |- | ||
| 0 || 4 || 0xC28 || 0x1C8C28 || 8 || Minimum Firmware Version TimeStamp? (little endian) | | 0 || 4 || 0xC28 || 0x1C8C28 || 8 || Minimum Firmware Version TimeStamp ??? (little endian) | ||
|- | |- | ||
| 0 || 4 || 0xC30 || 0x1C8C30 || 8 || Current Firmware Version? (little endian) | | 0 || 4 || 0xC30 || 0x1C8C30 || 8 || Current Firmware Version ??? (little endian) | ||
|- | |- | ||
| 0 || 4 || 0xC38 || 0x1C8C38 || 4 || rtc related? | | 0 || 4 || 0xC38 || 0x1C8C38 || 4 || rtc related ??? | ||
|- | |- | ||
| 0 || 4 || 0xC70 || 0x1C8C70 || 0x20 || | | 0 || 4 || 0xC70 || 0x1C8C70 || 0x20 || ??? (related with otprsrvaccess) | ||
|- | |- | ||
| 0 || 4 || 0xD72 || 0x1C8D72 || 1 || | | 0 || 4 || 0xD72 || 0x1C8D72 || 1 || ??? | ||
|- | |- | ||
| 0 || 4 || 0xF80 || 0x1C8F80 || 1 || | | 0 || 4 || 0xF80 || 0x1C8F80 || 1 || ManufacturingOn 0x00 ManufacturingOff 0xFF | ||
|- | |- | ||
| 0 || 4 || 0x1000 || 0x1C9000 || 0x300 || regmgr_readynvs | | 0 || 4 || 0x1000 || 0x1C9000 || 0x300 || regmgr_readynvs | ||
Line 160: | Line 164: | ||
| 0 || 4 || 0x1300 || 0x1C9300 || 0x300 || regmgr_readynvs | | 0 || 4 || 0x1300 || 0x1C9300 || 0x300 || regmgr_readynvs | ||
|- | |- | ||
| 0 || 4 || 0x1600 || 0x1C9600 || 0x1 || IDU MODE (0x00 OFF | | 0 || 4 || 0x1600 || 0x1C9600 || 0x1 || IDU MODE (0x00 OFF 0x01 ON) | ||
|- | |- | ||
| 0 || 4 || 0x1620 || 0x1C9620 || 0x300 || regmgr_readynvs | | 0 || 4 || 0x1620 || 0x1C9620 || 0x300 || regmgr_readynvs | ||
Line 170: | Line 174: | ||
|} | |} | ||
= Mapping of the detailed area (NVS service) 1/0 | = Mapping of the detailed area (NVS service) 1/0 = | ||
{| class="wikitable sortable" | {| class="wikitable sortable" | ||
Line 176: | Line 180: | ||
! Bank # !! Block # !! Start Offset !! Start Offset in Sflash !! Size !! Notes | ! Bank # !! Block # !! Start Offset !! Start Offset in Sflash !! Size !! Notes | ||
|- | |- | ||
| 1 || 0 || | | 1 || 0 || 0x68 || 0x1CB068 || 4 || Current Firmware Version ??? (little endian) (upper half) | ||
|- | |||
| 1 || 0 || 0x1FC || 0x1CB1FC || 4 || EAP Magic | |||
|- | |||
| 1 || 0 || 0x400 || 0x1CB400 || 0x300 || Backup of QA TOKEN | |||
|- | |||
| 1 || 0 || 0xC10 || 0x1CBC10 || 8 || Factory Firmware Version ??? (little endian) | |||
|- | |||
| 1 || 0 || 0xC18 || 0x1CBC18 || 8 || Factory Firmware Version TimeStamp ??? (little endian) | |||
|- | |||
| 1 || 0 || 0xC20 || 0x1CBC20 || 8 || Minimum Firmware Version ??? (little endian) | |||
|- | |||
| 1 || 0 || 0xC28 || 0x1CBC28 || 8 || Minimum Firmware Version TimeStamp ??? (little endian) | |||
|- | |||
| 1 || 0 || 0xC30 || 0x1CBC30 || 8 || Current Firmware Version ??? (little endian) | |||
|- | |- | ||
|} | |} |