Non Volatile Storage: Difference between revisions

From PS5 Developer wiki
Jump to navigation Jump to search
(Created page with "Short for NVS, holds some information about the console, including console unique identifiers, tokens, flags, and registry flags, as well as some semi-permanent ones. {| clas...")
 
 
(62 intermediate revisions by the same user not shown)
Line 5: Line 5:
! Bank # !! Block # !! Start Offset in /dev/sflash0s0x34 !! Start Offset in Sflash !! Size !! Notes
! Bank # !! Block # !! Start Offset in /dev/sflash0s0x34 !! Start Offset in Sflash !! Size !! Notes
|-
|-
| 0 || 0 || 0 || 0x1C4000 || 0x2000 || Size decrease since PS4, previous size was 0x3000, now it's 0x2000
| 0 || 0 || 0x0000 || 0x1C4000 || 0x3000 || emc region
|-
|-
| 0 || 1 || 0x2000  || 0x1C6000 || 0x1000 ||  
| 0 || 1 || 0x3000 || 0x1C7000  || 0x0200 || pd region
|-
|-
| 0 || 2 || 0x3000 || 0x1C7000 || 0x800 || console data region
| 0 || 2 || 0x3200 || 0x1C7200  || 0x0200 || ds region
|-
|-
| 0 || 3 || 0x3800 || 0x1C7800 || 0x800 || all ffs
| 0 || 3 || 0x3400 || 0x1C7400  || 0x0C00 || cs region
|-
|-
| 0 || 4 || 0x4000 || 0x1C8000 || 0x3000 || tokens and flags region
| 0 || 4 || 0x4000 || 0x1C8000 || 0x2000 || os region
|-
|-
| 1 || 0 || 0x7000 || 0x1CB000 || 0x3000 || tokens and flags region (backup)
| 0 || 5 || 0x6000 || 0x1CA000  || 0x3000 || ???
|-
| 0 || 6 || 0x9000 || 0x1CD000  || 0x1000 || ???
|}
 
= Mapping of the detailed area (NVS service) =
 
{| class="wikitable sortable"
|-
! Bank # !! Block # !! Start Offset !! Start Offset in Sflash !! Size !! Notes
|-
| 0 || 0 || 0x0 || 0x1C4000 || 0x8 || board id (e.g 30 02 01 01 04 01 05 01)
 
* '''30 02 01 01 04 01 05 01''' = CFI-1014A 01X EDM-010
* '''30 02 01 01 04 01 05 01''' = DFI-T1000AA EDM-010
* '''30 02 02 01 01 01 05 01''' = CFI-1115A 01X EDM-020
* '''30 02 03 01 01 01 05 01''' = CFI-1215A 01X EDM-030
 
|-
| 0 || 2 || 0x0 || 0x1C7200 || 0x10 || Kiban ID (e.g 40002B02184672A0)
|-
| 0 || 2 || 0x10 || 0x1C7210 || 0x11 || hw_info (padded with 0xF FFs) (e.g. AI81376321) aka Product Serial
|-
| 0 || 2 || 0x30 || 0x1C7230 || 0x20 || hw_model (e.g CFI-1014A 01X) aka Product Name
|-
| 0 || 2 || 0x50 || 0x1C7250 || 0x13 || Model Code (e.g 0000027418886) aka Product Code (first 5 zeroes are Product Code Branch Number)
|-
| 0 || 2 || 0x60 || 0x1C7260 || 0x10 || "SocCuid" (e.g 36 62 27 2D 9B 6C D2 B9 F8 CC 23 52 AB 65 8D D3)
|-
| 0 || 2 || 0x70 || 0x1C7270 || 0x12 || Viop Data (Split into Multiples of 2)
|-
| 0 || 2 || 0x1B0 || 0x1C73B0 || 0x8 || CARLO Board ID (DEV Only)
|-
| 0 || 2 || 0x1C0 || 0x1C73C0 || 0x6 || WLAN Mac Address
|-
| 0 || 2 || 0x1C6 || 0x1C73C6 || 0x6 || BD Address 1
|-
| 0 || 2 || 0x1CC || 0x1C73CC || 0x6 || BD Address 2
|-
| 0 || 2 || 0x1E0 || 0x1C73E0 || 0x8 || ImageId
 
* '''PKG-0384''' = DFI-T1000AA
* '''PKG-0711''' = CFI-1015B 01X
* '''PKG-0911''' = CFI-1014A 01X
* '''PKG-1246''' = CFI-1115A 01X
* '''PKG-1407''' = CFI-1115A 01X
* '''PKG-1459''' = CFI-1115B 01X
* '''PKG-1146''' = CFI-1116A 01Y
* '''PKG-1590''' = CFI-1215A 01X
* '''PKG-1590''' = CFI-1215A 01X
* '''PKG-1591''' = CFI-1215B 01X
 
|-
| 0 || 2 || 0x1F0 || 0x1C73F0 || 0x10 || Manufacturing Process Flags (01 is enabled, 00 is disabled) (e.g 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00)
|-
| 0 || 2 || 0x3FC || 0x1C75FC || 4 || EAP Magic (e.g. E5 E5 E5 01)
|-
| 0 || 4 || 0x20  || 0x1C8020 || 1 || init_safe_mode ||
|-
| 0 || 4 || 0x30 || 0x1C8030 || 4 || Controller USB Connection / Wlan BT Related
|-
| 0 || 4 || 0x34 || 0x1C8034 || 1 || Wlan BT Related
|-
| 0 || 4 || 0x66 || 0x1C8066 || 1 || ???
|-
| 0 || 4 || 0x68  || 0x1C8068 || 4 || Current Firmware Version ??? (little endian) (upper half)
|-
| 0 || 4 || 0xF0 || 0x1C80F0 || 0x10 || PasscodeStatus
|-
| 0 || 4 || 0x140 || 0x1C8140 || 1 || bapm table
|-
| 0 || 4 || 0x141 || 0x1C8141 || 2 || bapm table
|-
| 0 || 4 || 0x143 || 0x1C8143 || 2 || bapm table
|-
| 0 || 4 || 0x1FC || 0x1C81FC || 4 || EAP Magic (e.g. E5 E5 E5 01)
|-
| 0 || 4 || 0xC10 || 0x1C8C10 || 8 || Factory Firmware Version ??? (little endian)
|-
| 0 || 4 || 0xC18 || 0x1C8C18 || 8 || Factory Firmware Version TimeStamp ??? (little endian)
|-
| 0 || 4 || 0xC20 || 0x1C8C20 || 8 || Minimum Firmware Version ??? (little endian)
|-
| 0 || 4 || 0xC28 || 0x1C8C28 || 8 || Minimum Firmware Version TimeStamp ??? (little endian)
|-
| 0 || 4 || 0xC30 || 0x1C8C30 || 8 || Current Firmware Version ??? (little endian)
|-
| 0 || 4 || 0xC38 || 0x1C8C38 || 4 || rtc related ???
|-
| 0 || 4 || 0xC70 || 0x1C8C70 || 0x20 || ??? (related with otprsrvaccess)
|-
| 0 || 4 || 0xD72 || 0x1C8D72 || 1 || ???
|-
| 0 || 4 || 0xF80 || 0x1C8F80 || 4 || related with manu
|-
| 0 || 4 || 0x1000 || 0x1C9000 || 0x300 || regmgr_readynvs
|-
| 0 || 4 || 0x1300 || 0x1C9300 || 0x300 || regmgr_readynvs
|-
| 0 || 4 || 0x1600 || 0x1C9600 || 0x1 || IDU MODE (0x00 OFF 0x01 ON)
|-
| 0 || 4 || 0x1620 || 0x1C9620 || 0x300 || regmgr_readynvs
|-
| 0 || 4 || 0x1920 || 0x1C9920 || 0x300 || regmgr_readynvs
|-
| 0 || 4 || 0x1C20 || 0x1C9C20 || 0x20 || regmgr_readynvs_manumode
|-
| 1 || 0 || 0x68  || 0x1CB068 || 4 || Current Firmware Version ??? (little endian) (upper half)
|-
| 1 || 0 || 0x1FC || 0x1CB1FC || 4 || EAP Magic
|-
| 1 || 0 || 0xC10 || 0x1CBC10 || 8 || Factory Firmware Version ??? (little endian)
|-
| 1 || 0 || 0xC18 || 0x1CBC18 || 8 || Factory Firmware Version TimeStamp ??? (little endian)
|-
| 1 || 0 || 0xC20 || 0x1CBC20 || 8 || Minimum Firmware Version ??? (little endian)
|-
| 1 || 0 || 0xC28 || 0x1CBC28 || 8 || Minimum Firmware Version TimeStamp ??? (little endian)
|-
| 1 || 0 || 0xC30 || 0x1CBC30 || 8 || Current Firmware Version ??? (little endian)
|-
|-
| 1 || 1 || 0xA000 || 0x1CE000 || 0x1000 ||
|}
|}

Latest revision as of 19:09, 6 May 2024

Short for NVS, holds some information about the console, including console unique identifiers, tokens, flags, and registry flags, as well as some semi-permanent ones.

Bank # Block # Start Offset in /dev/sflash0s0x34 Start Offset in Sflash Size Notes
0 0 0x0000 0x1C4000 0x3000 emc region
0 1 0x3000 0x1C7000 0x0200 pd region
0 2 0x3200 0x1C7200 0x0200 ds region
0 3 0x3400 0x1C7400 0x0C00 cs region
0 4 0x4000 0x1C8000 0x2000 os region
0 5 0x6000 0x1CA000 0x3000 ???
0 6 0x9000 0x1CD000 0x1000 ???

Mapping of the detailed area (NVS service)[edit | edit source]

Bank # Block # Start Offset Start Offset in Sflash Size Notes
0 0 0x0 0x1C4000 0x8 board id (e.g 30 02 01 01 04 01 05 01)
  • 30 02 01 01 04 01 05 01 = CFI-1014A 01X EDM-010
  • 30 02 01 01 04 01 05 01 = DFI-T1000AA EDM-010
  • 30 02 02 01 01 01 05 01 = CFI-1115A 01X EDM-020
  • 30 02 03 01 01 01 05 01 = CFI-1215A 01X EDM-030
0 2 0x0 0x1C7200 0x10 Kiban ID (e.g 40002B02184672A0)
0 2 0x10 0x1C7210 0x11 hw_info (padded with 0xF FFs) (e.g. AI81376321) aka Product Serial
0 2 0x30 0x1C7230 0x20 hw_model (e.g CFI-1014A 01X) aka Product Name
0 2 0x50 0x1C7250 0x13 Model Code (e.g 0000027418886) aka Product Code (first 5 zeroes are Product Code Branch Number)
0 2 0x60 0x1C7260 0x10 "SocCuid" (e.g 36 62 27 2D 9B 6C D2 B9 F8 CC 23 52 AB 65 8D D3)
0 2 0x70 0x1C7270 0x12 Viop Data (Split into Multiples of 2)
0 2 0x1B0 0x1C73B0 0x8 CARLO Board ID (DEV Only)
0 2 0x1C0 0x1C73C0 0x6 WLAN Mac Address
0 2 0x1C6 0x1C73C6 0x6 BD Address 1
0 2 0x1CC 0x1C73CC 0x6 BD Address 2
0 2 0x1E0 0x1C73E0 0x8 ImageId
  • PKG-0384 = DFI-T1000AA
  • PKG-0711 = CFI-1015B 01X
  • PKG-0911 = CFI-1014A 01X
  • PKG-1246 = CFI-1115A 01X
  • PKG-1407 = CFI-1115A 01X
  • PKG-1459 = CFI-1115B 01X
  • PKG-1146 = CFI-1116A 01Y
  • PKG-1590 = CFI-1215A 01X
  • PKG-1590 = CFI-1215A 01X
  • PKG-1591 = CFI-1215B 01X
0 2 0x1F0 0x1C73F0 0x10 Manufacturing Process Flags (01 is enabled, 00 is disabled) (e.g 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00)
0 2 0x3FC 0x1C75FC 4 EAP Magic (e.g. E5 E5 E5 01)
0 4 0x20 0x1C8020 1 init_safe_mode
0 4 0x30 0x1C8030 4 Controller USB Connection / Wlan BT Related
0 4 0x34 0x1C8034 1 Wlan BT Related
0 4 0x66 0x1C8066 1 ???
0 4 0x68 0x1C8068 4 Current Firmware Version ??? (little endian) (upper half)
0 4 0xF0 0x1C80F0 0x10 PasscodeStatus
0 4 0x140 0x1C8140 1 bapm table
0 4 0x141 0x1C8141 2 bapm table
0 4 0x143 0x1C8143 2 bapm table
0 4 0x1FC 0x1C81FC 4 EAP Magic (e.g. E5 E5 E5 01)
0 4 0xC10 0x1C8C10 8 Factory Firmware Version ??? (little endian)
0 4 0xC18 0x1C8C18 8 Factory Firmware Version TimeStamp ??? (little endian)
0 4 0xC20 0x1C8C20 8 Minimum Firmware Version ??? (little endian)
0 4 0xC28 0x1C8C28 8 Minimum Firmware Version TimeStamp ??? (little endian)
0 4 0xC30 0x1C8C30 8 Current Firmware Version ??? (little endian)
0 4 0xC38 0x1C8C38 4 rtc related ???
0 4 0xC70 0x1C8C70 0x20 ??? (related with otprsrvaccess)
0 4 0xD72 0x1C8D72 1 ???
0 4 0xF80 0x1C8F80 4 related with manu
0 4 0x1000 0x1C9000 0x300 regmgr_readynvs
0 4 0x1300 0x1C9300 0x300 regmgr_readynvs
0 4 0x1600 0x1C9600 0x1 IDU MODE (0x00 OFF 0x01 ON)
0 4 0x1620 0x1C9620 0x300 regmgr_readynvs
0 4 0x1920 0x1C9920 0x300 regmgr_readynvs
0 4 0x1C20 0x1C9C20 0x20 regmgr_readynvs_manumode
1 0 0x68 0x1CB068 4 Current Firmware Version ??? (little endian) (upper half)
1 0 0x1FC 0x1CB1FC 4 EAP Magic
1 0 0xC10 0x1CBC10 8 Factory Firmware Version ??? (little endian)
1 0 0xC18 0x1CBC18 8 Factory Firmware Version TimeStamp ??? (little endian)
1 0 0xC20 0x1CBC20 8 Minimum Firmware Version ??? (little endian)
1 0 0xC28 0x1CBC28 8 Minimum Firmware Version TimeStamp ??? (little endian)
1 0 0xC30 0x1CBC30 8 Current Firmware Version ??? (little endian)
Retrieved from "http://www.psdevwiki.com/ps5/index.php?title=Non_Volatile_Storage&oldid=2795"