Editing Flash

[[Category:Software]]
== Overview ==

=== NOR Flash ===
The following is a list of files stored in NOR Flash
{| class="wikitable"
|-
! type !! R. !! colspan="3" | Name !! Start Offset !! End Offset !! Size (h) !! Size (bytes) !! Block !! Notes
|-
| {{generic}} || rowspan="27" style="text-align:center" | [[Flash:First_Region|1]] || colspan="3" | [[Flash:0FACE0FF DEADBEEF|0FACE0FF DEADBEEF]] || 0x000000 || 0x00001FF || 0x200|| (512 bytes) || 0h || <small>magic header : 0x0000010  00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF  .....¬àÿ....Þ¾ï</small>
|-
| {{generic}} || colspan="3" | [[Flash:Flash_Format|Flash Format]] || 0x000200 || 0x00003FF || 0x200 || (512 bytes) || 1h || <small>00000200  49 46 49 00 00 00 00 01 00 00 00 02 00 00 00 00  IFI............. (only 0x10 or 16 bytes used)</small>
|-
| {{perconsole}} || colspan="3" | [[Flash:Flashregion_Table|Flashregion Table]] || 0x000400 || 0x0007FF || 0x400 || (1,024&nbsp;bytes) || 2h || 
|-
| {{perconsole}} || 0 || colspan="2" | [[Flash:asecure_loader|asecure_loader]] || 0x000800 || 0x02EFFF || 0x2E800 || (262,144&nbsp;bytes) || 4h || <small>contains metldr, extracted data starts from 0x000840, <abbr title="length of metldr data is notated @ offset 0x000081E-0x000081F">datasize</abbr> depends on metldr revision</small>
|-
| {{perconsole}} || rowspan="8" | 1 || colspan="2" | [[Flash:Encrypted_Individual_Data_-_eEID|eEID]] || 0x02F000 || 0x03EFFF || 0x10000 || (65,536&nbsp;bytes) || 178h ||
|-
| {{perconsole}} || 0 || [[Flash:Encrypted_Individual_Data_-_eEID#EID0|EID0]] || 0x02F070 || 0x02F8CF || 0x860 || (2,144&nbsp;bytes) || || <small>([[IDPS]] @ offset 0x0002F070 absolute / 0x00000070 inside eEID )</small>
|-
| {{perconsole}} || 1 || [[Flash:Encrypted_Individual_Data_-_eEID#EID1|EID1]] || 0x02F8D0 || 0x02FB6F || 0x2A0 || (672&nbsp;bytes) || ||
|-
| {{perconsole}} || 2 || [[Flash:Encrypted_Individual_Data_-_eEID#EID2|EID2]] || 0x02FB70 || 0x03029F || 0x730 || (1,840&nbsp;bytes) || ||
|-
| {{perconsole}} || 3 || [[Flash:Encrypted_Individual_Data_-_eEID#EID3|EID3]] || 0x0302A0 || 0x03039F || 0x100 || (256&nbsp;bytes) || ||
|-
| {{perconsole}} || 4 || [[Flash:Encrypted_Individual_Data_-_eEID#EID4|EID4]] || 0x0303A0 || 0x0303CF || 0x30 || (48&nbsp;bytes) || ||
|-
| {{perconsole}} || 5 || [[Flash:Encrypted_Individual_Data_-_eEID#EID5|EID5]] || 0x0303D0 || 0x030DCF || 0xA00 || (2,560&nbsp;bytes) || ||
|-
| {{perconsole}} || F || [[Flash:Encrypted_Individual_Data_-_eEID#unreferenced_area|unreferenced area]] || 0x030DD0 || 0x03EFFF || 0xE22F || (57,903&nbsp;bytes) ||  ||
|-
| {{perconsole}} || rowspan="5" | 2 || colspan="2" | [[Flash:Individual_System_Data_-_cISD|cISD]] || 0x03F000 || 0x03F7FF || 0x800 || (2,048&nbsp;bytes) || 1F8h ||
|-
| {{perconsole}} || 0 || [[Flash:Individual_System_Data_-_cISD#cISD0|cISD0]] || 0x03F040 || 0x03F060 || 0x20 || (32&nbsp;bytes) || ||
|-
| {{perconsole}} || 1 || [[Flash:Individual_System_Data_-_cISD#cISD1|cISD1]] || 0x03F060 || 0x03F260 || 0x200 || (512&nbsp;bytes) || || <small>console 2nd part serial @ 0x3F090 size 0x8</small>
|-
| {{perconsole}} || 2 || [[Flash:Individual_System_Data_-_cISD#cISD2|cISD2]] || 0x03F260 || 0x03F270 || 0x10 || (16&nbsp;bytes) || || 
|-
| {{perconsole}} || F || [[Flash:Individual_System_Data_-_cISD#unreferenced area|unreferenced area]] || 0x03F270 || 0x03F7FF || 0x58F || (1,423&nbsp;bytes) || ||
|-
| {{perconsole}} || rowspan="3" | 3 || colspan="2" | [[Flash:Common_System_Data_-_cCSD|cCSD]] || 0x03F800 || 0x03FFFF || 0x800 || (2,048&nbsp;bytes) || 1FCh ||
|-
| {{perconsole}} || 0 || [[Flash:Common_System_Data_-_cCSD#cCSD0|cCSD0]] || 0x03F820 || 0x03F84F || 0x30 || (48&nbsp;bytes) || ||
|-
| {{perconsole}} || F || [[Flash:Common_System_Data_-_cCSD#unreferenced_area|unreferenced area]] || 0x03F850 || 0x03FFFF || 0x7B0 || (1,968&nbsp;bytes) || || 
|-
| {{perfirmware}} || 4 || colspan="2" | [[Flash:Revoke_Program#trvk_prg0|trvk_prg0]] || 0x040000 || 0x05FFFF || 0x20000 || (131,072&nbsp;bytes) || 200h ||
|-
| {{perfirmware}} || 5 || colspan="2" | [[Flash:Revoke_Program#trvk_prg1|trvk_prg1]] || 0x060000 || 0x07FFFF || 0x20000 || (131,072&nbsp;bytes) || 300h ||
|-
| {{perfirmware}} || 6 || colspan="2" | [[Flash:Revoke_Package#trvk_pkg0|trvk_pkg0]] || 0x080000 || 0x09FFFF || 0x20000 || (131,072&nbsp;bytes) || 400h ||
|-
| {{perfirmware}} || 7 || colspan="2" | [[Flash:Revoke_Package#trvk_pkg1|trvk_pkg1]] || 0x0A0000 || 0x0BFFFF || 0x20000 || (131,072&nbsp;bytes) || 500h ||
|-
| {{perfirmware}} || 8 || colspan="2" | [[Flash:ROS#ros0|ros0]] || 0x0C0000 || 0x7BFFFF || 0x700000 || (7,340,032&nbsp;bytes) || 600h || <small>Contains CoreOS files, [http://www.ps3devwiki.com/index.php?title=Boot_Order#CoreOS_PKG_Filelisting filecontent depends on firmware version]</small>
|-
| {{perfirmware}} || 9 || colspan="2" | [[Flash:ROS#ros1|ros1]] || 0x7C0000 || 0xEBFFFF || 0x700000 || (7,340,032&nbsp;bytes) || 3E00h || <small>Contains CoreOS files, [http://www.ps3devwiki.com/index.php?title=Boot_Order#CoreOS_PKG_Filelisting filecontent depends on firmware version]</small>
|-
| {{perconsole}} || A || colspan="2" | [[Flash:cvtrm|cvtrm]] || 0xEC0000 || 0xEFFFFF || 0x40000 || (262,144&nbsp;bytes) || 7600h ||
|-
| {{generic}} || rowspan="6" style="text-align:center" | [[Flash:Second_Region|2]] || colspan="3" | [[Flash:0FACE0FF_DEADFACE|0FACE0FF DEADFACE]] || 0xF00000 || 0xF00FFF || 0x1000 || (4096 bytes) || 7800h || <small>magic header : 0xF00010  00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD FA CE  .....¬àÿ....ÞúÎ</small> <!--// after this area there are 248 not-used-blocks (filled with F's) starting at 0xF01000 and ending at 0xF1FFFF that are not represented in the table //-->
|-
| {{generic}} || colspan="3" | [[Flash:CELL_EXTNOR_AREA|CELL_EXTNOR_AREA]] || 0xF20000 || 0xF3FFFF || 0x20000 || (131,072&nbsp;bytes) || 7900h || <small>([[Harddrive]] information is @ 0xF20200 absolute / 0x200 inside CELL_EXTNOR_AREA)</small>
|-
| {{generic}} || colspan="3" | [[Flash:CELL_EXTNOR_AREA#F40000|CRL1]] || 0xF40000 || 0xF5FFFF || 0x20000 || (131,072&nbsp;bytes) || 7A00h || <small>same as [[Flash:CELL_EXTNOR_AREA#F80000|F80000]]</small>
|-
| {{generic}} || colspan="3" | [[Flash:CELL_EXTNOR_AREA#F60000|DRL1]] || 0xF60000 || 0xF7FFFF || 0x20000 || (131,072&nbsp;bytes) || 7B00h || <small>same as [[Flash:CELL_EXTNOR_AREA#FA0000|FA0000]] / <abbr title="when console is used for Bluray movies and connected online">sometimes</abbr> also contains [[Flash:CELL_EXTNOR_AREA#OCRL0200_section_inside_FF_block|OCRL0200]]</small>
|-
| {{generic}} || colspan="3" | [[Flash:CELL_EXTNOR_AREA#F80000|CRL2]] || 0xF80000 || 0xF9FFFF || 0x20000 || (131,072&nbsp;bytes) ||  7C00h || <small>same as [[Flash:CELL_EXTNOR_AREA#F40000|F40000]]</small>
|-
| {{generic}} || colspan="3" | [[Flash:CELL_EXTNOR_AREA#FA0000|DRL2]] || 0xFA0000 || 0xFBFFFF || 0x20000 || (131,072&nbsp;bytes) || 7D00h || <small>same as [[Flash:CELL_EXTNOR_AREA#F60000|F60000]] / <abbr title="when console is used for Bluray movies and connected online">sometimes</abbr> also contains [[Flash:CELL_EXTNOR_AREA#OCRL0200_section_inside_FF_block|OCRL0200]]</small>
|-
| {{perconsole}} || rowspan="1" style="text-align:center" | <small>[[Flash:Lv0ldr_Region|lv0ldr]]</small> || colspan="3" | [[Flash:bootldr|bootldr]] || 0xFC0000 || 0xFFFFFF || 0x40000 || (262,144&nbsp;bytes) || 7E00h || <small>End @ FEEAF0, FEEF70, FEF170, FEF570, FEF5F0, FEF600 in some dumps</small>
|-
|}<br />

=== NAND Flash ===
The following is a list of files stored in NAND Flash
{| class="wikitable"
|-
! type !! colspan="3" | Name !! Start Offset !! End Offset !! Size (h) !! Size (bytes) !! Block !! Notes
|-
| {{perconsole}} || colspan="3" | [[Flash:bootldr|bootldr]] || 0x0000000 || 0x003FFFF || 0x40000 || (262,144&nbsp;bytes) || 0h || <small><abbr title="length of bootldr data seems notated @ offset 0x2-0x3">datasize</abbr> depends on bootldr revision</small>
|-
| {{generic}} || colspan="3" | [[Flash:0FACE0FF_DEADBEEF|0FACE0FF DEADBEEF]] || 0x0040000 || 0x00401FF || 0x200 || (512 bytes) || 200h || <small>magic header : 0x040010  00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF  .....¬àÿ....Þ¾ï</small>
|-
| {{perconsole}} || colspan="3" | [[Flash:Flashregion_Table|Flashregion Table]] || 0x0040200 || 0x00407FF || 0x600 || (1,536&nbsp;bytes) || 201h || 
|-
| {{perconsole}} || 0 || colspan="2" | [[Flash:asecure_loader|asecure_loader]] || 0x0040800 || 0x00807FF || <abbr title="length is notated @ offset 0x004021D-0x004021F">0x40000</abbr> || (262,144&nbsp;bytes) || 204h || <small>contains metldr, extracted data starts from 0x040840, <abbr title="length of metldr data is notated @ offset 0x004081E-0x004081F">datasize</abbr> depends on metldr revision</small>
|-
| {{perconsole}} || 1 || colspan="2" | [[Flash:Encrypted_Individual Data_-_eEID|eEID]] || 0x0080800 || 0x00907FF || <abbr title="length is notated @ offset 0x004024D-0x004024F">0x10000</abbr> || (65,536&nbsp;bytes) || 404h || 
|-
| {{perconsole}} ||  || 0 || [[Flash:Encrypted_Individual Data_-_eEID#EID0|EID0]] || 0x0080870 || 0x00810CF || 0x860 || (2,144&nbsp;bytes) || || <small>([[IDPS]] @ offset 0x00080870 absolute / 0x00000070 inside eEID )</small>
|-
| {{perconsole}} ||  || 1 || [[Flash:Encrypted_Individual Data_-_eEID#EID1|EID1]] || 0x00810D0 || 0x008136F || 0x2A0 || (672&nbsp;bytes) || || 
|-
| {{perconsole}} ||  || 2 || [[Flash:Encrypted_Individual Data_-_eEID#EID2|EID2]] || 0x0081370 || 0x0081A9F || 0x730 || (1,840&nbsp;bytes) || || 
|-
| {{perconsole}} ||  || 3 || [[Flash:Encrypted_Individual Data_-_eEID#EID3|EID3]] || 0x0081AA0 || 0x0081B9F || 0x100 || (256&nbsp;bytes) || || 
|-
| {{perconsole}} ||  || 4 || [[Flash:Encrypted_Individual Data_-_eEID#EID4|EID4]] || 0x0081BA0 || 0x0081BCF || 0x30 || (48&nbsp;bytes) || || 
|-
| {{perconsole}} ||  || 5 || [[Flash:Encrypted_Individual Data_-_eEID#EID5|EID5]] || 0x0081BD0 || 0x00825CF || 0xA00 || (2,560&nbsp;bytes) || || 
|-
| {{perconsole}} ||  || F || [[Flash:Encrypted_Individual Data_-_eEID#unreferenced_area|unreferenced area]] || 0x00825D0 || 0x00907FF || 0xE22F || (57,903&nbsp;bytes) || || 
|-
| {{perconsole}} || 2 || colspan="2" | [[Flash:Individual_System_Data_-_cISD|cISD]] || 0x0090800 || 0x0090FFF || <abbr title="length is notated @ offset 0x004027D-0x004027F">0x800</abbr> || (2,048&nbsp;bytes) || 484h || 
|-
| {{perconsole}} ||  || 0 || [[Flash:Individual_System_Data_-_cISD#cISD0|cISD0]] || 0x0090840 || 0x009085F || 0x20 || (32&nbsp;bytes) || || 
|-
| {{perconsole}} ||  || 1 || [[Flash:Individual_System_Data_-_cISD#cISD1|cISD1]] || 0x0090860 || 0x0090A5F || 0x200 || (512&nbsp;bytes) || || <small>console 2nd part serial @ 0x90890 size 0x8</small>
|-
| {{perconsole}} ||  || 2 || [[Flash:Individual_System_Data_-_cISD#cISD2|cISD2]] || 0x0090A60 || 0x0090A6F || 0x10 || (16&nbsp;bytes) || || 
|-
| {{perconsole}} ||  || F || [[Flash:Individual_System_Data_-_cISD##unreferenced_area|unreferenced area]] || 0x0090A70 || 0x0090FFF || 0x58F || (1,423&nbsp;bytes) || || 
|-
| {{perconsole}} || 3 || colspan="2" | [[Flash:Common_System_Data_-_cCSD|cCSD]] || 0x0091000 || 0x00917FF || <abbr title="length is notated @ offset 0x00402AD-0x00402AF">0x800</abbr> || (2,048&nbsp;bytes) || 488h || 
|-
| {{perconsole}} ||  || 0 || [[Flash:Common_System_Data_-_cCSD#cCSD0|cCSD0]] || 0x0091020 || 0x009104F || 0x30 || (48&nbsp;bytes) || || 
|-
| {{perconsole}} ||  || F || [[Flash:Common_System_Data_-_cCSD#unreferenced_area|unreferenced area]] || 0x0091050 || 0x00917FF || 0x7B0 || (1,968&nbsp;bytes) || || 
|-
| {{perfirmware}} || 4 || colspan="2" | [[Flash:Revoke_Program#trvk_prg|trvk_prg]] || 0x0091800 || 0x00937FF || <abbr title="length of trvk_prg0+trvk_prg1 combined is notated @ offset 0x00402DD-0x00402DF">0x2000</abbr> || (8,192&nbsp;bytes) || 48Ch || <small>extracted size is 0x2000 for trvk_prg0 + trvk_prg1 combined as trvk_prg (8,192 bytes)</small>
|-
| {{perfirmware}} || 5 || colspan="2" | [[Flash:Revoke_Package#trvk_pkg|trvk_pkg]] || 0x0093800 || 0x00957FF || <abbr title="length of trvk_pkg0+trvk_pkg1 combined is notated @ offset 0x004030D-0x004030F">0x2000</abbr> || (8,192&nbsp;bytes) || 49Ch || <small>extracted size is 0x2000 for trvk_pkg0 + trvk_pkg1 combined as trvk_pkg (8,192 bytes)</small>
|-
| {{generic}} || 6 || colspan="2" | [[Flash:creserved_0|creserved_0]] || 0x0095800 || 0x00BFFFF || <abbr title="length is notated @ offset 0x004033D-0x004033F">0x2A800</abbr> || (174,080&nbsp;bytes) || 4ACh || 
|-
| {{perfirmware}} || 7 || colspan="2" | [[Flash:ROS|ROS]] || 0x00C0000 || 0x0EBFFFF || <abbr title="length of both ROS0+ROS1 combined is notated @ offset 0x004036D-0x004036F">0xE00000</abbr> || (14,680,064&nbsp;bytes) || 600h
|-
| {{perfirmware}} ||  || 0 || [[Flash:ROS##ros0|ros0]] || 0x00C0020 || 0x07BFFFF || 0x700000 || (7,340,032&nbsp;bytes) || || <small>Contains CoreOS files, [http://www.ps3devwiki.com/index.php?title=Boot_Order#CoreOS_PKG_Filelisting filecontent depends on firmware version]</small>
|-
| {{perfirmware}} ||  || 1 || [[Flash:ROS##ros1|ros1]] || 0x07C0010 || 0x0EBFFFF || 0x700000 || (7,340,032&nbsp;bytes) || || <small>Contains CoreOS files, [http://www.ps3devwiki.com/index.php?title=Boot_Order#CoreOS_PKG_Filelisting filecontent depends on firmware version]</small>
|-
| {{perconsole}} || 8 || colspan="2" | [[Flash:cvtrm|cvtrm]] || 0x0EC0000 || 0x0EFFFFF || <abbr title="length is notated @ offset 0x004039D-0x004039F">0x40000</abbr> || (262,144&nbsp;bytes) || || 
|-
| {{perconsole}} || || M || SCEIVTRM || 0x0EC0000 || 0x0EC000F || 0x10 || (16&nbsp;bytes) || || <small>magic header : 0x0D80000  53 43 45 49 56 54 52 4D 00 00 00 00 00 00 00 A8  SCEIVTRM.......¨</small>
|-
| {{perconsole}} || || 0 || VTRM0 || ~varies || ~varies || ~varies || ~varies || || <small>magic header : 0x0D80020  00 00 00 00 56 54 52 4D 00 00 00 00 00 00 00 04  ....VTRM........</small>
|-
| {{perconsole}} || || 1 || VTRM1 || ~varies || ~varies || ~varies || ~varies || || <small>magic header : 0x0D80400  00 00 00 00 56 54 52 4D 00 00 00 00 00 00 00 04  ....VTRM........</small>
|-
| {{perconsole}} || colspan="3" | VFlash area || 0x0F00000 || 0xEFFFFFF || 0xE100000 || (235,929,600 bytes) || 7800h || <small>Note: VFlash region table & all dev_flash regions are encrypted with a per console keys by ENCDEC device. 
magic header :0x0F00010  00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD FA CE .....¬ая....Ю.ъО</small>
|-
| {{perconsole}} || 0 || colspan="2" |  VFlash region table || 0x0F000C0 ||  ||  ||  || || <small>There are 5 regions: /dev_flash, /dev_flash2, /dev_flash3, OtherOS & Unknown/FF-region.  Note: first 0x40000 bytes not counted because of masking bootldr by HV.</small>
|-
| {{perconsole}} || 1 || {{perfirmware}} || /dev_flash (FAT16) [[Hypervisor_Reverse_Engineering#GameOS.27s_dev_flash|GameOS devflash]] || 0x0F40000 || 0xD6FFFFF || 0xC7C0000 || (209,453,056 bytes) || || <small>offset taken from region table (0x7800*0x200+0x40000=0x0F40000)</small>
|-
| {{perconsole}} || 2 || {{generic}} || /dev_flash2 (FAT16) [[XRegistry.sys|XRegistry]] || 0xD700000 || 0xE6FFFFF || 0x1000000 || (16,777,216 bytes) || || <small>offset taken from region table (0x6B600*0x200+0x40000=0xD700000)</small>
|-
| {{perconsole}} || 3 || {{perfirmware}} || /dev_flash3 (FAT12) [[Hypervisor_Reverse_Engineering#Content_Revocation_List_.28CRL.29|CRL]]/[[Hypervisor_Reverse_Engineering#Drive_Revocation_List_.28DRL.29|DRL]] || 0xE700000 || 0xE77FFFF || 0x80000 || (524,288 bytes) || || <small>offset taken from region table (0x73600*0x200+0x40000=0xE700000)</small>
|-
| {{generic}} || 4 || {{generic}} || [[Flash:cell_ext_os_area|cell_ext_os_area]] || 0xE780000 || 0xE78000F || 0x10 || (16 bytes) || 73C00h || <small>magic header : 0xE780000  63 65 6C 6C 5F 65 78 74 5F 6F 73 5F 61 72 65 61  cell_ext_os_area</small>
|-
| {{generic}} ||  || {{generic}} || [[Flash:OtherOS|OtherOS]] || 0xE780800 || ~varies || ~varies || ~varies || 73C04h || <small>OtherOS loader/init.rd</small>
|-
| {{generic}} || 5 || {{generic}} || Unknown/FF-region || 0xEFC0000 || 0xEFFFFFF || 0x40000 || (262,144 bytes) || 77E00h ||
|-
| {{perconsole}} || colspan="3" | [[Flash:bootldr|bootldr]] || 0xF000000 || 0xF03FFFF || 0x40000 || (262,144&nbsp;bytes) || 78000h || <small><abbr title="length of bootldr data seems notated @ offset 0x2-0x3">datasize</abbr> depends on bootldr revision</small>
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
|-
| {{perconsole}} ||  || F || [[Flash:unreferenced_area|unreferenced area]] || 0xF040000 || 0xFFFFFFF || 0xFC0000 || (16,515,072&nbsp;bytes) || 78200h || 
|-
|}<br />

== Notes ==
*All offsets on the index page are absolute. Offsets on subpages are relative within each section (unless otherwise mentioned)

*NOR and NAND are [http://en.wikipedia.org/wiki/Block_%28data_storage%29 blockdevices] and thus:
**The minimal chunk of data that can be read/written is a block (with flashdevices also named page). A block that has never been written (only erased/formatted) is filled with 0xFF's. When bytes are written to a block, the entire block must be written. The write process fills the nonused bytes (slack space) at the remainder of the block with 0x00's
**1 block = 512 bytes (0x200) which conveniently correlates to the standard [http://en.wikipedia.org/wiki/Disk_sector sectorsize] used on magneto/optical drives

<br />

{{Flash}}

[[Category:Flash]]