PS3 Release: PS3 Advanced Tools

bguerville said:
@sandungas
You are more familiar than most with the wiki, what do you think?
If we don't have the offset/patch data to complete the tables, should we not at least clarify the situation?
Click to expand...
I wish i could improve the pages related to syscon, some weeks ago i was doing some changes and my plans was to do some more, but i had to stop because:
SC EEPROM <--- i been trying to understand the cryptic info in this page since weeks years ago and i still dont understand more than 5% of it, the page assumes the reader already knows many concepts (that me and i guess lot more people ignores), as far i understand it seems to be too much focused on mullion syscons (different offsets than sherwood syscons), the syscon uses some kind of "virtual" region overlays (this changes the offsets) and this overlays are not explained, also there are several different ways to do syscon dumps (SPI, UART, GameOS, partial dumps, full dumps, etc...) the offsets varyes too and the page doesnt mentions what kind of dump we are talking about
Im the kind of person (when im interested in something) when i have a doubt i use to step back to the root to try to understand the real reason why it works that way, and with all this doubts about what im reading i feel very frustrated because i cant progress, is like building a castle on sand
So i cant get my claws on that page, i think there are many thngs to do in it but by now i cant join the party

System Controller Firmware
Syscon Hardware
The info related with UART commands from this 2 pages needs to be moved to a new page because we need a lot more room to talk about them, i was about to do it, but with it is needed to move more info, is not just a list of commands
And the syscon UART error codes needs an specific page too because the list of synthoms and things that needs to be checked in each error could be very long too, im sure there is some people in the forum that would like to see a page with the error codes (but dont expect me to fill it, wiki is a colaborative project and i dont have much experience in syscon error diagnostics)
 
Last edited:
sandungas said:
I wish i could improve the pages related to syscon, some weeks ago i was doing some changes and my plans was to do some more, but i had to stop
....
wiki is a colaborative project and i dont have much experience in syscon error diagnostics)
Click to expand...
The entire syscon wiki data would need reorganised & completed, I can see that but we might wait quite some time for someone willing & knowledgeable enough to do it.
In the meantime, we have no choice but to improve whatever we have, right?

For the EEPROM offset table readable with update manager syscall, I think we should maybe add a column for required patches to read the data with the 0x600B service.
Eventually that column could be filled by the wiki users as devs try to peek one offset or another.
Alternatively we could maybe make a quick self to test reading all the table offsets & report errors in various use cases: no patches, UM patches, DM patches etc..so we have the data to complete the table column properly ourselves.

And we should maybe do the same thing (add another column) for the 0x600C syscon write service? Remembering to be very cautious with any syscon write testing..
 
Last edited:
bguerville said:
The entire syscon wiki data would need reorganised & completed, I can see that but we might wait quite some time for someone willing & knowledgeable enough to do it.
In the meantime, we have no choice but to improve whatever we have, right?

For the EEPROM offset table readable with update manager syscall, I think we should maybe add a column for required patches to read the data with the 0x600B service.
Eventually that column could be filled by the wiki users as devs try to peek one offset or another.
Alternatively we could maybe make a quick self to test reading all the table offsets & report errors in various use cases: no patches, UM patches, DM patches etc..so we have the data to complete the table column properly ourselves.

And we should maybe do the same thing (add another column) for the 0x600C syscon write service? Remembering to be very cautious with any syscon write testing..
Click to expand...
Yes, the patches needs to be mentioned in the SC EEPROM page (and maybe in the UM page too)
And it would be handy to indicate in the table the range of offsets that are accesible from each service/hack and interfaces (UART access by hardware)... and also the "virtual offsets" that seems to be used for different purposes by sony

In my oppinion the best that could happen would be to join all this offsets together in the same table, in wiki i like to create tables that contains the bigger amount of info in the smaller size posible (while being readable and intuitive), it helps a lot to get the overal concept from a perspective... but im not sure if is posible to merge the different offsets togeter in the same table
...or in a couple of tables for mullion and sherwood syscons

Btw, as far i understood the patches gives full access so i guess we dont need to mention that in every row of the table, the other way around maybe makes more sense, to add a mark the areas that are restricted, dunno
In the LV2 Functions and Syscalls page is used something like that, there is a column at left of each row with a tiny "tag" related with the access level... i could prepare new tags like that in colors

Another btw... in the SC EEPROM page... i think is better to "split" the big table that starts from 0x48000 in the regions mentioned here in the forum by m4j0r a couple of posts before
Code: 
0x2F00 - 0x2FFF
0x3000 - 0x30FF
0x48000 - 0x480FF
0x48800 - 0x488FF
0x48C00 - 0x48CFF
0x48D00 - 0x48DFF
 
Last edited:
Im trying to understand how many offsets needs to be included in that tables, tell me if what im going to say is right, i have many doubts

So... it seems syscon runs 2 Services used to read/write EEPROM, named "SERV_SDA" (0x3) and "SERV_NVS" (0x14)
This services are managed by Syscon Manager but we cant access syscon manager directly
SC Manager cannot be accessed directly by using DM unfortunately (DM discards all requests) but it's used by other services that are accessable through DM
E.g. Update_Manager services "Read EEPROM" and "Write EEPROM" send requests to SC Manager services "Read EEPROM" and "Write EEPROM"
SC Manager runs sc_iso.self
With full HV rights you could patch Dispatcher Manager and enable access to SC Manager from GameOS.
Click to expand...
What we are doing is:
Dispatcher Manager ---> Update Manager ---> Syscon Manager ---> SERV_NVS

Ok, after all that we are presented with a "memory map" using this offsets
Code: 
0x2F00 - 0x2FFF
0x3000 - 0x30FF
0x48000 - 0x480FF
0x48800 - 0x488FF
0x48C00 - 0x48CFF
0x48D00 - 0x48DFF

My biggest doubt is... those offsets are "virtualized" ?... or are really absolute offsets of the syscon EEPROM ?
If are real then is great because it will be easyer to simplify the tables in wiki... otherway i guess is going to be needed to add double offsets for each area (the reals and the virtuals)

And what happens with the sherwood syscon series ?... its memory areas are way different (in type, and sizes too)
I see a lot of that info was written by graf_chocolo originally in his "hypervisor bible" document (and later splitted in several pages in wiki) but at that time he was working with the mullion syscons only

Im wondering if the SERV_NVS (or the "Syscon manager") is virtualizing that offsets since the first PS3 models up to the last superslims... in other words.... the data inside the NVS areas is always located at the same virtual offsets to simplify things and to keep some kind of backward compatibility in the code, if this is true is nice because it means we can join together mullion syscons and sherwood syscons in the same wiki table
 
Last edited:
sandungas said:
Im trying to understand how many offsets needs to be included in that tables, tell me if what im going to say is right, i have many doubts

So... it seems syscon runs 2 Services used to read/write EEPROM, named "SERV_SDA" (0x3) and "SERV_NVS" (0x14)
This services are managed by Syscon Manager but we cant access syscon manager directly

What we are doing is:
Dispatcher Manager ---> Update Manager ---> Syscon Manager ---> SERV_NVS

Ok, after all that we are presented with a "memory map" using this offsets
Code: 
0x2F00 - 0x2FFF
0x3000 - 0x30FF
0x48000 - 0x480FF
0x48800 - 0x488FF
0x48C00 - 0x48CFF
0x48D00 - 0x48DFF

My biggest doubt is... those offsets are "virtualized" ?... or are really absolute offsets of the syscon EEPROM ?
If are real then is great because it will be easyer to simplify the tables in wiki... otherway i guess is going to be needed to add double offsets for each area (the reals and the virtuals)

And what happens with the sherwood syscon series ?... its memory areas are way different (in type, and sizes too)
I see a lot of that info was written by graf_chocolo originally in his "hypervisor bible" document (and later splitted in several pages in wiki) but at that time he was working with the mullion syscons only

Im wondering if the SERV_NVS (or the "Syscon manager") is virtualizing that offsets since the first PS3 models up to the last superslims... in other words.... the data inside the NVS areas is always located at the same virtual offsets to simplify things and to keep some kind of backward compatibility in the code, if this is true is nice because it means we can join together mullion syscons and sherwood syscons in the same wiki table
Click to expand...
If you look at this table (ignoring the first row and the last two rows):
https://www.psdevwiki.com/ps3/SC_EE..._Block_Offset_Mapping_Table_.28NVS_Service.29
SC EEPROM Offset is the offset you would use in the syscall, it's also used by lv1 internally.
Block ID is used by the NVS service, it translates the "SC EEPROM Offset" to the block id and an offset within that block (just the last byte of the original address).
Block Offset is used by the SDA service, it doesn't translate the address (used on prototypes but still usable on all Mullion console, removed on Sherwood)
The Physical Offsets are the addresses within the actual Syscon EEPROM, used by Syscon. Sherwood doesn't have an EEPROM, it only emulates that, the physical addresses might change but it uses fixed virtual addresses for the emulation.
 
@bguerville @M4j0r i made an experimental wiki table at bottom of this page
https://www.psdevwiki.com/ps3/Talk:SC_EEPROM#Experimental_table

I still have many doubts, but i decided to start doing it to see how many columns are needed, how to order them, and how to split the table header in sections
It have all the stuff i figured that could be handy, included the 4 whitelists from UM and SCM (i guess is going to be neded to reverse them to complete that table columns in a single hit instead of doing hundred tests)
Probably im missing some more info that could be worthy to add in the table or there is some error, tell me what do you think about it
 
sandungas said:
@bguerville @M4j0r i made an experimental wiki table at bottom of this page
https://www.psdevwiki.com/ps3/Talk:SC_EEPROM#Experimental_table

I still have many doubts, but i decided to start doing it to see how many columns are needed, how to order them, and how to split the table header in sections
It have all the stuff i figured that could be handy, included the 4 whitelists from UM and SCM (i guess is going to be neded to reverse them to complete that table columns in a single hit instead of doing hundred tests)
Probably im missing some more info that could be worthy to add in the table or there is some error, tell me what do you think about it
Click to expand...
I think that it's exactly the kinda of table we need to aim at. ;-)
When we start filling the table, it should soon become obvious to us whether or not the table headers need minor tweaking for better overall coherence, added details or whatever..
 
Last edited:
sandungas said:
@bguerville @M4j0r i made an experimental wiki table at bottom of this page
https://www.psdevwiki.com/ps3/Talk:SC_EEPROM#Experimental_table
Click to expand...
That looks good.
What do you mean by NVS ID? The block ID is the one used by the NVS service.
The only whitelist that applies to syscall 863 is the UM one. SCM allows all read/writes in the six regions. So I guess it doesn't make sense to list the SCM "whitelist".
I did some tests on 3.55 OFW to get the UM whitelist (it's the same for read and write):
Code: 
0x2F00: OK (all access)
0x3000: OK (all access)
0x48000: NO (no access)
0x48800: NO (no access)
0x48C00: see below
0x48D00: NO (no access)

0x48C00 OK:
00, 02, 06, 07, 0A,
0C, 0D,
13,
18, 19, 1A, 1B, 1C, 1D, 1E, 1F,
30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 3A, 3B, 3C,
42, 43, 44, 45, 46,
50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 5A, 5B, 5C, 5D, 5E, 5F, 60, 61

Also the eeprom whitelist on Syscon for CELL accesses is the same like in SCM.
For the uart access it's:
Code: 
CXR713: 0x2800 <= x < 0x7400, with Sony syscon patch: 0x2C00 <= x < 0x7400 (full eeprom size: 32KB)
CXR714: 0x2800 <= x < 0x4400, with Sony syscon patch: 0x2C00 <= x < 0x4400 (full eeprom size: 20KB)
SW/2/3: 0x0000 <= x < 0x1400 (full "eeprom" size: 32KB)
 
Last edited:
maybe this is redundant but here are some results reading with syscall 863
on a friend's ps3 with hen firmware compared to cfw with dispatch manager patches
Code: 
sending request:  read eeprom

 OFFSET  R-CODE  VALUES
  2F00  80010505  00
  2F01  80010505  00
  2F02  80010505  00
  2F03  80010505  00
  2F04  80010505  00
  2F05  80010505  00
  2F06  80010505  00
  2F07  80010505  00
  2F08  80010505  00
  2F09  80010505  00
  2F0A  80010505  00
  2F0B  80010505  00
  2F0C  80010505  00
  2F0D  80010505  00
  2F0E  80010505  00
  2F0F  80010505  00
  2F10  80010505  00
  2F11  80010505  00
  2F12  80010505  00
  2F13  80010505  00
  2F14  80010505  00
  2F15  80010505  00
  2F16  80010505  00
  2F17  80010505  00
  2F18  80010505  00
  2F19  80010505  00
  2F1A  80010505  00
  2F1B  80010505  00
  2F1C  80010505  00
  2F1D  80010505  00
  2F1E  80010505  00
  2F1F  80010505  00
  2F20  80010505  00
  2F21  80010505  00
  2F22  80010505  00
  2F23  80010505  00
  2F24  80010505  00
  2F25  80010505  00
  2F26  80010505  00
  2F27  80010505  00
  2F28  80010505  00
  2F29  80010505  00
  2F2A  80010505  00
  2F2B  80010505  00
  2F2C  80010505  00
  2F2D  80010505  00
  2F2E  80010505  00
  2F2F  80010505  00
  2F30  80010505  00
  2F31  80010505  00
  2F32  80010505  00
  2F33  80010505  00
  2F34  80010505  00
  2F35  80010505  00
  2F36  80010505  00
  2F37  80010505  00
  2F38  80010505  00
  2F39  80010505  00
  2F3A  80010505  00
  2F3B  80010505  00
  2F3C  80010505  00
  2F3D  80010505  00
  2F3E  80010505  00
  2F3F  80010505  00
  2F40  80010505  00
  2F41  80010505  00
  2F42  80010505  00
  2F43  80010505  00
  2F44  80010505  00
  2F45  80010505  00
  2F46  80010505  00
  2F47  80010505  00
  2F48  80010505  00
  2F49  80010505  00
  2F4A  80010505  00
  2F4B  80010505  00
  2F4C  80010505  00
  2F4D  80010505  00
  2F4E  80010505  00
  2F4F  80010505  00
  2F50  80010505  00
  2F51  80010505  00
  2F52  80010505  00
  2F53  80010505  00
  2F54  80010505  00
  2F55  80010505  00
  2F56  80010505  00
  2F57  80010505  00
  2F58  80010505  00
  2F59  80010505  00
  2F5A  80010505  00
  2F5B  80010505  00
  2F5C  80010505  00
  2F5D  80010505  00
  2F5E  80010505  00
  2F5F  80010505  00
  2F60  80010505  00
  2F61  80010505  00
  2F62  80010505  00
  2F63  80010505  00
  2F64  80010505  00
  2F65  80010505  00
  2F66  80010505  00
  2F67  80010505  00
  2F68  80010505  00
  2F69  80010505  00
  2F6A  80010505  00
  2F6B  80010505  00
  2F6C  80010505  00
  2F6D  80010505  00
  2F6E  80010505  00
  2F6F  80010505  00
  2F70  80010505  00
  2F71  80010505  00
  2F72  80010505  00
  2F73  80010505  00
  2F74  80010505  00
  2F75  80010505  00
  2F76  80010505  00
  2F77  80010505  00
  2F78  80010505  00
  2F79  80010505  00
  2F7A  80010505  00
  2F7B  80010505  00
  2F7C  80010505  00
  2F7D  80010505  00
  2F7E  80010505  00
  2F7F  80010505  00
  2F80  80010505  00
  2F81  80010505  00
  2F82  80010505  00
  2F83  80010505  00
  2F84  80010505  00
  2F85  80010505  00
  2F86  80010505  00
  2F87  80010505  00
  2F88  80010505  00
  2F89  80010505  00
  2F8A  80010505  00
  2F8B  80010505  00
  2F8C  80010505  00
  2F8D  80010505  00
  2F8E  80010505  00
  2F8F  80010505  00
  2F90  80010505  00
  2F91  80010505  00
  2F92  80010505  00
  2F93  80010505  00
  2F94  80010505  00
  2F95  80010505  00
  2F96  80010505  00
  2F97  80010505  00
  2F98  80010505  00
  2F99  80010505  00
  2F9A  80010505  00
  2F9B  80010505  00
  2F9C  80010505  00
  2F9D  80010505  00
  2F9E  80010505  00
  2F9F  80010505  00
  2FA0  80010505  00
  2FA1  80010505  00
  2FA2  80010505  00
  2FA3  80010505  00
  2FA4  80010505  00
  2FA5  80010505  00
  2FA6  80010505  00
  2FA7  80010505  00
  2FA8  80010505  00
  2FA9  80010505  00
  2FAA  80010505  00
  2FAB  80010505  00
  2FAC  80010505  00
  2FAD  80010505  00
  2FAE  80010505  00
  2FAF  80010505  00
  2FB0  80010505  00
  2FB1  80010505  00
  2FB2  80010505  00
  2FB3  80010505  00
  2FB4  80010505  00
  2FB5  80010505  00
  2FB6  80010505  00
  2FB7  80010505  00
  2FB8  80010505  00
  2FB9  80010505  00
  2FBA  80010505  00
  2FBB  80010505  00
  2FBC  80010505  00
  2FBD  80010505  00
  2FBE  80010505  00
  2FBF  80010505  00
  2FC0  80010505  00
  2FC1  80010505  00
  2FC2  80010505  00
  2FC3  80010505  00
  2FC4  80010505  00
  2FC5  80010505  00
  2FC6  80010505  00
  2FC7  80010505  00
  2FC8  80010505  00
  2FC9  80010505  00
  2FCA  80010505  00
  2FCB  80010505  00
  2FCC  80010505  00
  2FCD  80010505  00
  2FCE  80010505  00
  2FCF  80010505  00
  2FD0  80010505  00
  2FD1  80010505  00
  2FD2  80010505  00
  2FD3  80010505  00
  2FD4  80010505  00
  2FD5  80010505  00
  2FD6  80010505  00
  2FD7  80010505  00
  2FD8  80010505  00
  2FD9  80010505  00
  2FDA  80010505  00
  2FDB  80010505  00
  2FDC  80010505  00
  2FDD  80010505  00
  2FDE  80010505  00
  2FDF  80010505  00
  2FE0  80010505  00
  2FE1  80010505  00
  2FE2  80010505  00
  2FE3  80010505  00
  2FE4  80010505  00
  2FE5  80010505  00
  2FE6  80010505  00
  2FE7  80010505  00
  2FE8  80010505  00
  2FE9  80010505  00
  2FEA  80010505  00
  2FEB  80010505  00
  2FEC  80010505  00
  2FED  80010505  00
  2FEE  80010505  00
  2FEF  80010505  00
  2FF0  80010505  00
  2FF1  80010505  00
  2FF2  80010505  00
  2FF3  80010505  00
  2FF4  80010505  00
  2FF5  80010505  00
  2FF6  80010505  00
  2FF7  80010505  00
  2FF8  80010505  00
  2FF9  80010505  00
  2FFA  80010505  00
  2FFB  80010505  00
  2FFC  80010505  00
  2FFD  80010505  00
  2FFE  80010505  00

  3000  80010505  00
  3001  80010505  00
  3002  80010505  00
  3003  80010505  00
  3004  80010505  00
  3005  80010505  00
  3006  80010505  00
  3007  80010505  00
  3008  80010505  00
  3009  80010505  00
  300A  80010505  00
  300B  80010505  00
  300C  80010505  00
  300D  80010505  00
  300E  80010505  00
  300F  80010505  00
  3010  80010505  00
  3011  80010505  00
  3012  80010505  00
  3013  80010505  00
  3014  80010505  00
  3015  80010505  00
  3016  80010505  00
  3017  80010505  00
  3018  80010505  00
  3019  80010505  00
  301A  80010505  00
  301B  80010505  00
  301C  80010505  00
  301D  80010505  00
  301E  80010505  00
  301F  80010505  00
  3020  80010505  00
  3021  80010505  00
  3022  80010505  00
  3023  80010505  00
  3024  80010505  00
  3025  80010505  00
  3026  80010505  00
  3027  80010505  00
  3028  80010505  00
  3029  80010505  00
  302A  80010505  00
  302B  80010505  00
  302C  80010505  00
  302D  80010505  00
  302E  80010505  00
  302F  80010505  00
  3030  80010505  00
  3031  80010505  00
  3032  80010505  00
  3033  80010505  00
  3034  80010505  00
  3035  80010505  00
  3036  80010505  00
  3037  80010505  00
  3038  80010505  00
  3039  80010505  00
  303A  80010505  00
  303B  80010505  00
  303C  80010505  00
  303D  80010505  00
  303E  80010505  00
  303F  80010505  00
  3040  80010505  00
  3041  80010505  00
  3042  80010505  00
  3043  80010505  00
  3044  80010505  00
  3045  80010505  00
  3046  80010505  00
  3047  80010505  00
  3048  80010505  00
  3049  80010505  00
  304A  80010505  00
  304B  80010505  00
  304C  80010505  00
  304D  80010505  00
  304E  80010505  00
  304F  80010505  00
  3050  80010505  00
  3051  80010505  00
  3052  80010505  00
  3053  80010505  00
  3054  80010505  00
  3055  80010505  00
  3056  80010505  00
  3057  80010505  00
  3058  80010505  00
  3059  80010505  00
  305A  80010505  00
  305B  80010505  00
  305C  80010505  00
  305D  80010505  00
  305E  80010505  00
  305F  80010505  00
  3060  80010505  00
  3061  80010505  00
  3062  80010505  00
  3063  80010505  00
  3064  80010505  00
  3065  80010505  00
  3066  80010505  00
  3067  80010505  00
  3068  80010505  00
  3069  80010505  00
  306A  80010505  00
  306B  80010505  00
  306C  80010505  00
  306D  80010505  00
  306E  80010505  00
  306F  80010505  00
  3070  80010505  00
  3071  80010505  00
  3072  80010505  00
  3073  80010505  00
  3074  80010505  00
  3075  80010505  00
  3076  80010505  00
  3077  80010505  00
  3078  80010505  00
  3079  80010505  00
  307A  80010505  00
  307B  80010505  00
  307C  80010505  00
  307D  80010505  00
  307E  80010505  00
  307F  80010505  00
  3080  80010505  00
  3081  80010505  00
  3082  80010505  00
  3083  80010505  00
  3084  80010505  00
  3085  80010505  00
  3086  80010505  00
  3087  80010505  00
  3088  80010505  00
  3089  80010505  00
  308A  80010505  00
  308B  80010505  00
  308C  80010505  00
  308D  80010505  00
  308E  80010505  00
  308F  80010505  00
  3090  80010505  00
  3091  80010505  00
  3092  80010505  00
  3093  80010505  00
  3094  80010505  00
  3095  80010505  00
  3096  80010505  00
  3097  80010505  00
  3098  80010505  00
  3099  80010505  00
  309A  80010505  00
  309B  80010505  00
  309C  80010505  00
  309D  80010505  00
  309E  80010505  00
  309F  80010505  00
  30A0  80010505  00
  30A1  80010505  00
  30A2  80010505  00
  30A3  80010505  00
  30A4  80010505  00
  30A5  80010505  00
  30A6  80010505  00
  30A7  80010505  00
  30A8  80010505  00
  30A9  80010505  00
  30AA  80010505  00
  30AB  80010505  00
  30AC  80010505  00
  30AD  80010505  00
  30AE  80010505  00
  30AF  80010505  00
  30B0  80010505  00
  30B1  80010505  00
  30B2  80010505  00
  30B3  80010505  00
  30B4  80010505  00
  30B5  80010505  00
  30B6  80010505  00
  30B7  80010505  00
  30B8  80010505  00
  30B9  80010505  00
  30BA  80010505  00
  30BB  80010505  00
  30BC  80010505  00
  30BD  80010505  00
  30BE  80010505  00
  30BF  80010505  00
  30C0  80010505  00
  30C1  80010505  00
  30C2  80010505  00
  30C3  80010505  00
  30C4  80010505  00
  30C5  80010505  00
  30C6  80010505  00
  30C7  80010505  00
  30C8  80010505  00
  30C9  80010505  00
  30CA  80010505  00
  30CB  80010505  00
  30CC  80010505  00
  30CD  80010505  00
  30CE  80010505  00
  30CF  80010505  00
  30D0  80010505  00
  30D1  80010505  00
  30D2  80010505  00
  30D3  80010505  00
  30D4  80010505  00
  30D5  80010505  00
  30D6  80010505  00
  30D7  80010505  00
  30D8  80010505  00
  30D9  80010505  00
  30DA  80010505  00
  30DB  80010505  00
  30DC  80010505  00
  30DD  80010505  00
  30DE  80010505  00
  30DF  80010505  00
  30E0  80010505  00
  30E1  80010505  00
  30E2  80010505  00
  30E3  80010505  00
  30E4  80010505  00
  30E5  80010505  00
  30E6  80010505  00
  30E7  80010505  00
  30E8  80010505  00
  30E9  80010505  00
  30EA  80010505  00
  30EB  80010505  00
  30EC  80010505  00
  30ED  80010505  00
  30EE  80010505  00
  30EF  80010505  00
  30F0  80010505  00
  30F1  80010505  00
  30F2  80010505  00
  30F3  80010505  00
  30F4  80010505  00
  30F5  80010505  00
  30F6  80010505  00
  30F7  80010505  00
  30F8  80010505  00
  30F9  80010505  00
  30FA  80010505  00
  30FB  80010505  00
  30FC  80010505  00
  30FD  80010505  00
  30FE  80010505  00

  48000  80010505  00
  48001  80010505  00
  48002  80010505  00
  48003  80010505  00
  48004  80010505  00
  48005  80010505  00
  48006  80010505  00
  48007  80010505  00
  48008  80010505  00
  48009  80010505  00
  4800A  80010505  00
  4800B  80010505  00
  4800C  80010505  00
  4800D  80010505  00
  4800E  80010505  00
  4800F  80010505  00
  48010  80010505  00
  48011  80010505  00
  48012  80010505  00
  48013  80010505  00
  48014  80010505  00
  48015  80010505  00
  48016  80010505  00
  48017  80010505  00
  48018  80010505  00
  48019  80010505  00
  4801A  80010505  00
  4801B  80010505  00
  4801C  80010505  00
  4801D  80010505  00
  4801E  80010505  00
  4801F  80010505  00
  48020  80010505  00
  48021  80010505  00
  48022  80010505  00
  48023  80010505  00
  48024  80010505  00
  48025  80010505  00
  48026  80010505  00
  48027  80010505  00
  48028  80010505  00
  48029  80010505  00
  4802A  80010505  00
  4802B  80010505  00
  4802C  80010505  00
  4802D  80010505  00
  4802E  80010505  00
  4802F  80010505  00
  48030  80010505  00
  48031  80010505  00
  48032  80010505  00
  48033  80010505  00
  48034  80010505  00
  48035  80010505  00
  48036  80010505  00
  48037  80010505  00
  48038  80010505  00
  48039  80010505  00
  4803A  80010505  00
  4803B  80010505  00
  4803C  80010505  00
  4803D  80010505  00
  4803E  80010505  00
  4803F  80010505  00
  48040  80010505  00
  48041  80010505  00
  48042  80010505  00
  48043  80010505  00
  48044  80010505  00
  48045  80010505  00
  48046  80010505  00
  48047  80010505  00
  48048  80010505  00
  48049  80010505  00
  4804A  80010505  00
  4804B  80010505  00
  4804C  80010505  00
  4804D  80010505  00
  4804E  80010505  00
  4804F  80010505  00
  48050  80010505  00
  48051  80010505  00
  48052  80010505  00
  48053  80010505  00
  48054  80010505  00
  48055  80010505  00
  48056  80010505  00
  48057  80010505  00
  48058  80010505  00
  48059  80010505  00
  4805A  80010505  00
  4805B  80010505  00
  4805C  80010505  00
  4805D  80010505  00
  4805E  80010505  00
  4805F  80010505  00
  48060  80010505  00
  48061  80010505  00
  48062  80010505  00
  48063  80010505  00
  48064  80010505  00
  48065  80010505  00
  48066  80010505  00
  48067  80010505  00
  48068  80010505  00
  48069  80010505  00
  4806A  80010505  00
  4806B  80010505  00
  4806C  80010505  00
  4806D  80010505  00
  4806E  80010505  00
  4806F  80010505  00
  48070  80010505  00
  48071  80010505  00
  48072  80010505  00
  48073  80010505  00
  48074  80010505  00
  48075  80010505  00
  48076  80010505  00
  48077  80010505  00
  48078  80010505  00
  48079  80010505  00
  4807A  80010505  00
  4807B  80010505  00
  4807C  80010505  00
  4807D  80010505  00
  4807E  80010505  00
  4807F  80010505  00
  48080  80010505  00
  48081  80010505  00
  48082  80010505  00
  48083  80010505  00
  48084  80010505  00
  48085  80010505  00
  48086  80010505  00
  48087  80010505  00
  48088  80010505  00
  48089  80010505  00
  4808A  80010505  00
  4808B  80010505  00
  4808C  80010505  00
  4808D  80010505  00
  4808E  80010505  00
  4808F  80010505  00
  48090  80010505  00
  48091  80010505  00
  48092  80010505  00
  48093  80010505  00
  48094  80010505  00
  48095  80010505  00
  48096  80010505  00
  48097  80010505  00
  48098  80010505  00
  48099  80010505  00
  4809A  80010505  00
  4809B  80010505  00
  4809C  80010505  00
  4809D  80010505  00
  4809E  80010505  00
  4809F  80010505  00
  480A0  80010505  00
  480A1  80010505  00
  480A2  80010505  00
  480A3  80010505  00
  480A4  80010505  00
  480A5  80010505  00
  480A6  80010505  00
  480A7  80010505  00
  480A8  80010505  00
  480A9  80010505  00
  480AA  80010505  00
  480AB  80010505  00
  480AC  80010505  00
  480AD  80010505  00
  480AE  80010505  00
  480AF  80010505  00
  480B0  80010505  00
  480B1  80010505  00
  480B2  80010505  00
  480B3  80010505  00
  480B4  80010505  00
  480B5  80010505  00
  480B6  80010505  00
  480B7  80010505  00
  480B8  80010505  00
  480B9  80010505  00
  480BA  80010505  00
  480BB  80010505  00
  480BC  80010505  00
  480BD  80010505  00
  480BE  80010505  00
  480BF  80010505  00
  480C0  80010505  00
  480C1  80010505  00
  480C2  80010505  00
  480C3  80010505  00
  480C4  80010505  00
  480C5  80010505  00
  480C6  80010505  00
  480C7  80010505  00
  480C8  80010505  00
  480C9  80010505  00
  480CA  80010505  00
  480CB  80010505  00
  480CC  80010505  00
  480CD  80010505  00
  480CE  80010505  00
  480CF  80010505  00
  480D0  80010505  00
  480D1  80010505  00
  480D2  80010505  00
  480D3  80010505  00
  480D4  80010505  00
  480D5  80010505  00
  480D6  80010505  00
  480D7  80010505  00
  480D8  80010505  00
  480D9  80010505  00
  480DA  80010505  00
  480DB  80010505  00
  480DC  80010505  00
  480DD  80010505  00
  480DE  80010505  00
  480DF  80010505  00
  480E0  80010505  00
  480E1  80010505  00
  480E2  80010505  00
  480E3  80010505  00
  480E4  80010505  00
  480E5  80010505  00
  480E6  80010505  00
  480E7  80010505  00
  480E8  80010505  00
  480E9  80010505  00
  480EA  80010505  00
  480EB  80010505  00
  480EC  80010505  00
  480ED  80010505  00
  480EE  80010505  00
  480EF  80010505  00
  480F0  80010505  00
  480F1  80010505  00
  480F2  80010505  00
  480F3  80010505  00
  480F4  80010505  00
  480F5  80010505  00
  480F6  80010505  00
  480F7  80010505  00
  480F8  80010505  00
  480F9  80010505  00
  480FA  80010505  00
  480FB  80010505  00
  480FC  80010505  00
  480FD  80010505  00
  480FE  80010505  00

  48800  80010505  00
  48801  80010505  00
  48802  80010505  00
  48803  80010505  00
  48804  80010505  00
  48805  80010505  00
  48806  80010505  00
  48807  80010505  00
  48808  80010505  00
  48809  80010505  00
  4880A  80010505  00
  4880B  80010505  00
  4880C  80010505  00
  4880D  80010505  00
  4880E  80010505  00
  4880F  80010505  00
  48810  80010505  00
  48811  80010505  00
  48812  80010505  00
  48813  80010505  00
  48814  80010505  00
  48815  80010505  00
  48816  80010505  00
  48817  80010505  00
  48818  80010505  00
  48819  80010505  00
  4881A  80010505  00
  4881B  80010505  00
  4881C  80010505  00
  4881D  80010505  00
  4881E  80010505  00
  4881F  80010505  00
  48820  80010505  00
  48821  80010505  00
  48822  80010505  00
  48823  80010505  00
  48824  80010505  00
  48825  80010505  00
  48826  80010505  00
  48827  80010505  00
  48828  80010505  00
  48829  80010505  00
  4882A  80010505  00
  4882B  80010505  00
  4882C  80010505  00
  4882D  80010505  00
  4882E  80010505  00
  4882F  80010505  00
  48830  80010505  00
  48831  80010505  00
  48832  80010505  00
  48833  80010505  00
  48834  80010505  00
  48835  80010505  00
  48836  80010505  00
  48837  80010505  00
  48838  80010505  00
  48839  80010505  00
  4883A  80010505  00
  4883B  80010505  00
  4883C  80010505  00
  4883D  80010505  00
  4883E  80010505  00
  4883F  80010505  00
  48840  80010505  00
  48841  80010505  00
  48842  80010505  00
  48843  80010505  00
  48844  80010505  00
  48845  80010505  00
  48846  80010505  00
  48847  80010505  00
  48848  80010505  00
  48849  80010505  00
  4884A  80010505  00
  4884B  80010505  00
  4884C  80010505  00
  4884D  80010505  00
  4884E  80010505  00
  4884F  80010505  00
  48850  80010505  00
  48851  80010505  00
  48852  80010505  00
  48853  80010505  00
  48854  80010505  00
  48855  80010505  00
  48856  80010505  00
  48857  80010505  00
  48858  80010505  00
  48859  80010505  00
  4885A  80010505  00
  4885B  80010505  00
  4885C  80010505  00
  4885D  80010505  00
  4885E  80010505  00
  4885F  80010505  00
  48860  80010505  00
  48861  80010505  00
  48862  80010505  00
  48863  80010505  00
  48864  80010505  00
  48865  80010505  00
  48866  80010505  00
  48867  80010505  00
  48868  80010505  00
  48869  80010505  00
  4886A  80010505  00
  4886B  80010505  00
  4886C  80010505  00
  4886D  80010505  00
  4886E  80010505  00
  4886F  80010505  00
  48870  80010505  00
  48871  80010505  00
  48872  80010505  00
  48873  80010505  00
  48874  80010505  00
  48875  80010505  00
  48876  80010505  00
  48877  80010505  00
  48878  80010505  00
  48879  80010505  00
  4887A  80010505  00
  4887B  80010505  00
  4887C  80010505  00
  4887D  80010505  00
  4887E  80010505  00
  4887F  80010505  00
  48880  80010505  00
  48881  80010505  00
  48882  80010505  00
  48883  80010505  00
  48884  80010505  00
  48885  80010505  00
  48886  80010505  00
  48887  80010505  00
  48888  80010505  00
  48889  80010505  00
  4888A  80010505  00
  4888B  80010505  00
  4888C  80010505  00
  4888D  80010505  00
  4888E  80010505  00
  4888F  80010505  00
  48890  80010505  00
  48891  80010505  00
  48892  80010505  00
  48893  80010505  00
  48894  80010505  00
  48895  80010505  00
  48896  80010505  00
  48897  80010505  00
  48898  80010505  00
  48899  80010505  00
  4889A  80010505  00
  4889B  80010505  00
  4889C  80010505  00
  4889D  80010505  00
  4889E  80010505  00
  4889F  80010505  00
  488A0  80010505  00
  488A1  80010505  00
  488A2  80010505  00
  488A3  80010505  00
  488A4  80010505  00
  488A5  80010505  00
  488A6  80010505  00
  488A7  80010505  00
  488A8  80010505  00
  488A9  80010505  00
  488AA  80010505  00
  488AB  80010505  00
  488AC  80010505  00
  488AD  80010505  00
  488AE  80010505  00
  488AF  80010505  00
  488B0  80010505  00
  488B1  80010505  00
  488B2  80010505  00
  488B3  80010505  00
  488B4  80010505  00
  488B5  80010505  00
  488B6  80010505  00
  488B7  80010505  00
  488B8  80010505  00
  488B9  80010505  00
  488BA  80010505  00
  488BB  80010505  00
  488BC  80010505  00
  488BD  80010505  00
  488BE  80010505  00
  488BF  80010505  00
  488C0  80010505  00
  488C1  80010505  00
  488C2  80010505  00
  488C3  80010505  00
  488C4  80010505  00
  488C5  80010505  00
  488C6  80010505  00
  488C7  80010505  00
  488C8  80010505  00
  488C9  80010505  00
  488CA  80010505  00
  488CB  80010505  00
  488CC  80010505  00
  488CD  80010505  00
  488CE  80010505  00
  488CF  80010505  00
  488D0  80010505  00
  488D1  80010505  00
  488D2  80010505  00
  488D3  80010505  00
  488D4  80010505  00
  488D5  80010505  00
  488D6  80010505  00
  488D7  80010505  00
  488D8  80010505  00
  488D9  80010505  00
  488DA  80010505  00
  488DB  80010505  00
  488DC  80010505  00
  488DD  80010505  00
  488DE  80010505  00
  488DF  80010505  00
  488E0  80010505  00
  488E1  80010505  00
  488E2  80010505  00
  488E3  80010505  00
  488E4  80010505  00
  488E5  80010505  00
  488E6  80010505  00
  488E7  80010505  00
  488E8  80010505  00
  488E9  80010505  00
  488EA  80010505  00
  488EB  80010505  00
  488EC  80010505  00
  488ED  80010505  00
  488EE  80010505  00
  488EF  80010505  00
  488F0  80010505  00
  488F1  80010505  00
  488F2  80010505  00
  488F3  80010505  00
  488F4  80010505  00
  488F5  80010505  00
  488F6  80010505  00
  488F7  80010505  00
  488F8  80010505  00
  488F9  80010505  00
  488FA  80010505  00
  488FB  80010505  00
  488FC  80010505  00
  488FD  80010505  00
  488FE  80010505  00

  48C00  80010505  00
  48C01  80010505  00
  48C02  80010505  00
  48C03  80010505  00
  48C04  80010505  00
  48C05  80010505  00
  48C06  80010505  00
  48C07  80010505  00
  48C08  80010505  00
  48C09  80010505  00
  48C0A  80010505  00
  48C0B  80010505  00
  48C0C  80010505  00
  48C0D  80010505  00
  48C0E  80010505  00
  48C0F  80010505  00
  48C10  80010505  00
  48C11  80010505  00
  48C12  80010505  00
  48C13  80010505  00
  48C14  80010505  00
  48C15  80010505  00
  48C16  80010505  00
  48C17  80010505  00
  48C18  80010505  00
  48C19  80010505  00
  48C1A  80010505  00
  48C1B  80010505  00
  48C1C  80010505  00
  48C1D  80010505  00
  48C1E  80010505  00
  48C1F  80010505  00
  48C20  80010505  00
  48C21  80010505  00
  48C22  80010505  00
  48C23  80010505  00
  48C24  80010505  00
  48C25  80010505  00
  48C26  80010505  00
  48C27  80010505  00
  48C28  80010505  00
  48C29  80010505  00
  48C2A  80010505  00
  48C2B  80010505  00
  48C2C  80010505  00
  48C2D  80010505  00
  48C2E  80010505  00
  48C2F  80010505  00
  48C30  80010505  00
  48C31  80010505  00
  48C32  80010505  00
  48C33  80010505  00
  48C34  80010505  00
  48C35  80010505  00
  48C36  80010505  00
  48C37  80010505  00
  48C38  80010505  00
  48C39  80010505  00
  48C3A  80010505  00
  48C3B  80010505  00
  48C3C  80010505  00
  48C3D  80010505  00
  48C3E  80010505  00
  48C3F  80010505  00
  48C40  80010505  00
  48C41  80010505  00
  48C42  80010505  00
  48C43  80010505  00
  48C44  80010505  00
  48C45  80010505  00
  48C46  80010505  00
  48C47  80010505  00
  48C48  80010505  00
  48C49  80010505  00
  48C4A  80010505  00
  48C4B  80010505  00
  48C4C  80010505  00
  48C4D  80010505  00
  48C4E  80010505  00
  48C4F  80010505  00
  48C50  80010505  00
  48C51  80010505  00
  48C52  80010505  00
  48C53  80010505  00
  48C54  80010505  00
  48C55  80010505  00
  48C56  80010505  00
  48C57  80010505  00
  48C58  80010505  00
  48C59  80010505  00
  48C5A  80010505  00
  48C5B  80010505  00
  48C5C  80010505  00
  48C5D  80010505  00
  48C5E  80010505  00
  48C5F  80010505  00
  48C60  80010505  00
  48C61  80010505  00
  48C62  80010505  00
  48C63  80010505  00
  48C64  80010505  00
  48C65  80010505  00
  48C66  80010505  00
  48C67  80010505  00
  48C68  80010505  00
  48C69  80010505  00
  48C6A  80010505  00
  48C6B  80010505  00
  48C6C  80010505  00
  48C6D  80010505  00
  48C6E  80010505  00
  48C6F  80010505  00
  48C70  80010505  00
  48C71  80010505  00
  48C72  80010505  00
  48C73  80010505  00
  48C74  80010505  00
  48C75  80010505  00
  48C76  80010505  00
  48C77  80010505  00
  48C78  80010505  00
  48C79  80010505  00
  48C7A  80010505  00
  48C7B  80010505  00
  48C7C  80010505  00
  48C7D  80010505  00
  48C7E  80010505  00
  48C7F  80010505  00
  48C80  80010505  00
  48C81  80010505  00
  48C82  80010505  00
  48C83  80010505  00
  48C84  80010505  00
  48C85  80010505  00
  48C86  80010505  00
  48C87  80010505  00
  48C88  80010505  00
  48C89  80010505  00
  48C8A  80010505  00
  48C8B  80010505  00
  48C8C  80010505  00
  48C8D  80010505  00
  48C8E  80010505  00
  48C8F  80010505  00
  48C90  80010505  00
  48C91  80010505  00
  48C92  80010505  00
  48C93  80010505  00
  48C94  80010505  00
  48C95  80010505  00
  48C96  80010505  00
  48C97  80010505  00
  48C98  80010505  00
  48C99  80010505  00
  48C9A  80010505  00
  48C9B  80010505  00
  48C9C  80010505  00
  48C9D  80010505  00
  48C9E  80010505  00
  48C9F  80010505  00
  48CA0  80010505  00
  48CA1  80010505  00
  48CA2  80010505  00
  48CA3  80010505  00
  48CA4  80010505  00
  48CA5  80010505  00
  48CA6  80010505  00
  48CA7  80010505  00
  48CA8  80010505  00
  48CA9  80010505  00
  48CAA  80010505  00
  48CAB  80010505  00
  48CAC  80010505  00
  48CAD  80010505  00
  48CAE  80010505  00
  48CAF  80010505  00
  48CB0  80010505  00
  48CB1  80010505  00
  48CB2  80010505  00
  48CB3  80010505  00
  48CB4  80010505  00
  48CB5  80010505  00
  48CB6  80010505  00
  48CB7  80010505  00
  48CB8  80010505  00
  48CB9  80010505  00
  48CBA  80010505  00
  48CBB  80010505  00
  48CBC  80010505  00
  48CBD  80010505  00
  48CBE  80010505  00
  48CBF  80010505  00
  48CC0  80010505  00
  48CC1  80010505  00
  48CC2  80010505  00
  48CC3  80010505  00
  48CC4  80010505  00
  48CC5  80010505  00
  48CC6  80010505  00
  48CC7  80010505  00
  48CC8  80010505  00
  48CC9  80010505  00
  48CCA  80010505  00
  48CCB  80010505  00
  48CCC  80010505  00
  48CCD  80010505  00
  48CCE  80010505  00
  48CCF  80010505  00
  48CD0  80010505  00
  48CD1  80010505  00
  48CD2  80010505  00
  48CD3  80010505  00
  48CD4  80010505  00
  48CD5  80010505  00
  48CD6  80010505  00
  48CD7  80010505  00
  48CD8  80010505  00
  48CD9  80010505  00
  48CDA  80010505  00
  48CDB  80010505  00
  48CDC  80010505  00
  48CDD  80010505  00
  48CDE  80010505  00
  48CDF  80010505  00
  48CE0  80010505  00
  48CE1  80010505  00
  48CE2  80010505  00
  48CE3  80010505  00
  48CE4  80010505  00
  48CE5  80010505  00
  48CE6  80010505  00
  48CE7  80010505  00
  48CE8  80010505  00
  48CE9  80010505  00
  48CEA  80010505  00
  48CEB  80010505  00
  48CEC  80010505  00
  48CED  80010505  00
  48CEE  80010505  00
  48CEF  80010505  00
  48CF0  80010505  00
  48CF1  80010505  00
  48CF2  80010505  00
  48CF3  80010505  00
  48CF4  80010505  00
  48CF5  80010505  00
  48CF6  80010505  00
  48CF7  80010505  00
  48CF8  80010505  00
  48CF9  80010505  00
  48CFA  80010505  00
  48CFB  80010505  00
  48CFC  80010505  00
  48CFD  80010505  00
  48CFE  80010505  00

  48D00  80010505  00
  48D01  80010505  00
  48D02  80010505  00
  48D03  80010505  00
  48D04  80010505  00
  48D05  80010505  00
  48D06  80010505  00
  48D07  80010505  00
  48D08  80010505  00
  48D09  80010505  00
  48D0A  80010505  00
  48D0B  80010505  00
  48D0C  80010505  00
  48D0D  80010505  00
  48D0E  80010505  00
  48D0F  80010505  00
  48D10  80010505  00
  48D11  80010505  00
  48D12  80010505  00
  48D13  80010505  00
  48D14  80010505  00
  48D15  80010505  00
  48D16  80010505  00
  48D17  80010505  00
  48D18  80010505  00
  48D19  80010505  00
  48D1A  80010505  00
  48D1B  80010505  00
  48D1C  80010505  00
  48D1D  80010505  00
  48D1E  80010505  00
  48D1F  80010505  00
  48D20  80010505  00
  48D21  80010505  00
  48D22  80010505  00
  48D23  80010505  00
  48D24  80010505  00
  48D25  80010505  00
  48D26  80010505  00
  48D27  80010505  00
  48D28  80010505  00
  48D29  80010505  00
  48D2A  80010505  00
  48D2B  80010505  00
  48D2C  80010505  00
  48D2D  80010505  00
  48D2E  80010505  00
  48D2F  80010505  00
  48D30  80010505  00
  48D31  80010505  00
  48D32  80010505  00
  48D33  80010505  00
  48D34  80010505  00
  48D35  80010505  00
  48D36  80010505  00
  48D37  80010505  00
  48D38  80010505  00
  48D39  80010505  00
  48D3A  80010505  00
  48D3B  80010505  00
  48D3C  80010505  00
  48D3D  80010505  00
  48D3E  80010505  00
  48D3F  80010505  00
  48D40  80010505  00
  48D41  80010505  00
  48D42  80010505  00
  48D43  80010505  00
  48D44  80010505  00
  48D45  80010505  00
  48D46  80010505  00
  48D47  80010505  00
  48D48  80010505  00
  48D49  80010505  00
  48D4A  80010505  00
  48D4B  80010505  00
  48D4C  80010505  00
  48D4D  80010505  00
  48D4E  80010505  00
  48D4F  80010505  00
  48D50  80010505  00
  48D51  80010505  00
  48D52  80010505  00
  48D53  80010505  00
  48D54  80010505  00
  48D55  80010505  00
  48D56  80010505  00
  48D57  80010505  00
  48D58  80010505  00
  48D59  80010505  00
  48D5A  80010505  00
  48D5B  80010505  00
  48D5C  80010505  00
  48D5D  80010505  00
  48D5E  80010505  00
  48D5F  80010505  00
  48D60  80010505  00
  48D61  80010505  00
  48D62  80010505  00
  48D63  80010505  00
  48D64  80010505  00
  48D65  80010505  00
  48D66  80010505  00
  48D67  80010505  00
  48D68  80010505  00
  48D69  80010505  00
  48D6A  80010505  00
  48D6B  80010505  00
  48D6C  80010505  00
  48D6D  80010505  00
  48D6E  80010505  00
  48D6F  80010505  00
  48D70  80010505  00
  48D71  80010505  00
  48D72  80010505  00
  48D73  80010505  00
  48D74  80010505  00
  48D75  80010505  00
  48D76  80010505  00
  48D77  80010505  00
  48D78  80010505  00
  48D79  80010505  00
  48D7A  80010505  00
  48D7B  80010505  00
  48D7C  80010505  00
  48D7D  80010505  00
  48D7E  80010505  00
  48D7F  80010505  00
  48D80  80010505  00
  48D81  80010505  00
  48D82  80010505  00
  48D83  80010505  00
  48D84  80010505  00
  48D85  80010505  00
  48D86  80010505  00
  48D87  80010505  00
  48D88  80010505  00
  48D89  80010505  00
  48D8A  80010505  00
  48D8B  80010505  00
  48D8C  80010505  00
  48D8D  80010505  00
  48D8E  80010505  00
  48D8F  80010505  00
  48D90  80010505  00
  48D91  80010505  00
  48D92  80010505  00
  48D93  80010505  00
  48D94  80010505  00
  48D95  80010505  00
  48D96  80010505  00
  48D97  80010505  00
  48D98  80010505  00
  48D99  80010505  00
  48D9A  80010505  00
  48D9B  80010505  00
  48D9C  80010505  00
  48D9D  80010505  00
  48D9E  80010505  00
  48D9F  80010505  00
  48DA0  80010505  00
  48DA1  80010505  00
  48DA2  80010505  00
  48DA3  80010505  00
  48DA4  80010505  00
  48DA5  80010505  00
  48DA6  80010505  00
  48DA7  80010505  00
  48DA8  80010505  00
  48DA9  80010505  00
  48DAA  80010505  00
  48DAB  80010505  00
  48DAC  80010505  00
  48DAD  80010505  00
  48DAE  80010505  00
  48DAF  80010505  00
  48DB0  80010505  00
  48DB1  80010505  00
  48DB2  80010505  00
  48DB3  80010505  00
  48DB4  80010505  00
  48DB5  80010505  00
  48DB6  80010505  00
  48DB7  80010505  00
  48DB8  80010505  00
  48DB9  80010505  00
  48DBA  80010505  00
  48DBB  80010505  00
  48DBC  80010505  00
  48DBD  80010505  00
  48DBE  80010505  00
  48DBF  80010505  00
  48DC0  80010505  00
  48DC1  80010505  00
  48DC2  80010505  00
  48DC3  80010505  00
  48DC4  80010505  00
  48DC5  80010505  00
  48DC6  80010505  00
  48DC7  80010505  00
  48DC8  80010505  00
  48DC9  80010505  00
  48DCA  80010505  00
  48DCB  80010505  00
  48DCC  80010505  00
  48DCD  80010505  00
  48DCE  80010505  00
  48DCF  80010505  00
  48DD0  80010505  00
  48DD1  80010505  00
  48DD2  80010505  00
  48DD3  80010505  00
  48DD4  80010505  00
  48DD5  80010505  00
  48DD6  80010505  00
  48DD7  80010505  00
  48DD8  80010505  00
  48DD9  80010505  00
  48DDA  80010505  00
  48DDB  80010505  00
  48DDC  80010505  00
  48DDD  80010505  00
  48DDE  80010505  00
  48DDF  80010505  00
  48DE0  80010505  00
  48DE1  80010505  00
  48DE2  80010505  00
  48DE3  80010505  00
  48DE4  80010505  00
  48DE5  80010505  00
  48DE6  80010505  00
  48DE7  80010505  00
  48DE8  80010505  00
  48DE9  80010505  00
  48DEA  80010505  00
  48DEB  80010505  00
  48DEC  80010505  00
  48DED  80010505  00
  48DEE  80010505  00
  48DEF  80010505  00
  48DF0  80010505  00
  48DF1  80010505  00
  48DF2  80010505  00
  48DF3  80010505  00
  48DF4  80010505  00
  48DF5  80010505  00
  48DF6  80010505  00
  48DF7  80010505  00
  48DF8  80010505  00
  48DF9  80010505  00
  48DFA  80010505  00
  48DFB  80010505  00
  48DFC  80010505  00
  48DFD  80010505  00
  48DFE  80010505  00
all return 80010505

Code: 
sending request:  read eeprom

 OFFSET  R-CODE  VALUES
  2F00  00000000  30
  2F01  00000000  33
  2F02  00000000  2E
  2F03  00000000  34
  2F04  00000000  30
  2F05  00000000  30
  2F06  00000000  30
  2F07  00000000  00
  2F08  00000000  34
  2F09  00000000  34
  2F0A  00000000  32
  2F0B  00000000  36
  2F0C  00000000  31
  2F0D  00000000  2C
  2F0E  00000000  32
  2F0F  00000000  30
  2F10  00000000  31
  2F11  00000000  30
  2F12  00000000  30
  2F13  00000000  36
  2F14  00000000  32
  2F15  00000000  33
  2F16  00000000  00
  2F17  00000000  00
  2F18  00000000  00
  2F19  00000000  00
  2F1A  00000000  00
  2F1B  00000000  00
  2F1C  00000000  00
  2F1D  00000000  00
  2F1E  00000000  00
  2F1F  00000000  00
  2F20  00000000  00
  2F21  00000000  00
  2F22  00000000  00
  2F23  00000000  00
  2F24  00000000  00
  2F25  00000000  00
  2F26  00000000  00
  2F27  00000000  83
  2F28  00000000  00
  2F29  00000000  00
  2F2A  00000000  00
  2F2B  00000000  00
  2F2C  00000000  00
  2F2D  00000000  00
  2F2E  00000000  00
  2F2F  00000000  00
  2F30  00000000  00
  2F31  00000000  00
  2F32  00000000  00
  2F33  00000000  00
  2F34  00000000  00
  2F35  00000000  00
  2F36  00000000  00
  2F37  00000000  00
  2F38  00000000  00
  2F39  00000000  00
  2F3A  00000000  00
  2F3B  00000000  00
  2F3C  00000000  00
  2F3D  00000000  00
  2F3E  00000000  00
  2F3F  00000000  00
  2F40  00000000  00
  2F41  00000000  00
  2F42  00000000  00
  2F43  00000000  00
  2F44  00000000  00
  2F45  00000000  00
  2F46  00000000  00
  2F47  00000000  00
  2F48  00000000  FF
  2F49  00000000  FF
  2F4A  00000000  FF
  2F4B  00000000  FF
  2F4C  00000000  FF
  2F4D  00000000  FF
  2F4E  00000000  FF
  2F4F  00000000  FF
  2F50  00000000  FF
  2F51  00000000  FF
  2F52  00000000  FF
  2F53  00000000  FF
  2F54  00000000  FF
  2F55  00000000  FF
  2F56  00000000  FF
  2F57  00000000  FF
  2F58  00000000  FF
  2F59  00000000  FF
  2F5A  00000000  FF
  2F5B  00000000  FF
  2F5C  00000000  FF
  2F5D  00000000  FF
  2F5E  00000000  FF
  2F5F  00000000  FF
  2F60  00000000  FF
  2F61  00000000  FF
  2F62  00000000  FF
  2F63  00000000  FF
  2F64  00000000  FF
  2F65  00000000  FF
  2F66  00000000  FF
  2F67  00000000  FF
  2F68  00000000  FF
  2F69  00000000  FF
  2F6A  00000000  FF
  2F6B  00000000  FF
  2F6C  00000000  FF
  2F6D  00000000  FF
  2F6E  00000000  FF
  2F6F  00000000  FF
  2F70  00000000  FF
  2F71  00000000  FF
  2F72  00000000  FF
  2F73  00000000  FF
  2F74  00000000  FF
  2F75  00000000  FF
  2F76  00000000  FF
  2F77  00000000  FF
  2F78  00000000  FF
  2F79  00000000  FF
  2F7A  00000000  FF
  2F7B  00000000  FF
  2F7C  00000000  FF
  2F7D  00000000  FF
  2F7E  00000000  FF
  2F7F  00000000  FF
  2F80  00000000  FF
  2F81  00000000  FF
  2F82  00000000  FF
  2F83  00000000  FF
  2F84  00000000  FF
  2F85  00000000  FF
  2F86  00000000  FF
  2F87  00000000  FF
  2F88  00000000  FF
  2F89  00000000  FF
  2F8A  00000000  FF
  2F8B  00000000  FF
  2F8C  00000000  FF
  2F8D  00000000  FF
  2F8E  00000000  FF
  2F8F  00000000  FF
  2F90  00000000  FF
  2F91  00000000  FF
  2F92  00000000  FF
  2F93  00000000  FF
  2F94  00000000  FF
  2F95  00000000  FF
  2F96  00000000  59
  2F97  00000000  E6
  2F98  00000000  94
  2F99  00000000  D2
  2F9A  00000000  D1
  2F9B  00000000  FF
  2F9C  00000000  FF
  2F9D  00000000  20
  2F9E  00000000  04
  2F9F  00000000  BA
  2FA0  00000000  E6
  2FA1  00000000  10
  2FA2  00000000  45
  2FA3  00000000  83
  2FA4  00000000  51
  2FA5  00000000  40
  2FA6  00000000  50
  2FA7  00000000  90
  2FA8  00000000  3E
  2FA9  00000000  02
  2FAA  00000000  00
  2FAB  00000000  00
  2FAC  00000000  00
  2FAD  00000000  00
  2FAE  00000000  FF
  2FAF  00000000  04
  2FB0  00000000  00
  2FB1  00000000  01
  2FB2  00000000  03
  2FB3  00000000  FF
  2FB4  00000000  FF
  2FB5  00000000  FF
  2FB6  00000000  FF
  2FB7  00000000  FF
  2FB8  00000000  FF
  2FB9  00000000  FF
  2FBA  00000000  FF
  2FBB  00000000  FF
  2FBC  00000000  FF
  2FBD  00000000  FF
  2FBE  00000000  FF
  2FBF  00000000  FF
  2FC0  00000000  FF
  2FC1  00000000  FF
  2FC2  00000000  FF
  2FC3  00000000  FF
  2FC4  00000000  FF
  2FC5  00000000  FF
  2FC6  00000000  FF
  2FC7  00000000  FF
  2FC8  00000000  FF
  2FC9  00000000  FF
  2FCA  00000000  FF
  2FCB  00000000  FF
  2FCC  00000000  FF
  2FCD  00000000  FF
  2FCE  00000000  FF
  2FCF  00000000  FF
  2FD0  00000000  FF
  2FD1  00000000  FF
  2FD2  00000000  FF
  2FD3  00000000  FF
  2FD4  00000000  FF
  2FD5  00000000  FF
  2FD6  00000000  FF
  2FD7  00000000  FF
  2FD8  00000000  FF
  2FD9  00000000  FF
  2FDA  00000000  FF
  2FDB  00000000  FF
  2FDC  00000000  FF
  2FDD  00000000  FF
  2FDE  00000000  FF
  2FDF  00000000  FF
  2FE0  00000000  FF
  2FE1  00000000  FF
  2FE2  00000000  FF
  2FE3  00000000  59
  2FE4  00000000  30
  2FE5  00000000  34
  2FE6  00000000  00
  2FE7  00000000  00
  2FE8  00000000  30
  2FE9  00000000  35
  2FEA  00000000  FF
  2FEB  00000000  FE
  2FEC  00000000  FD
  2FED  00000000  FF
  2FEE  00000000  FF
  2FEF  00000000  FF
  2FF0  00000000  1B
  2FF1  00000000  12
  2FF2  00000000  12
  2FF3  00000000  FF
  2FF4  00000000  FF
  2FF5  00000000  FF
  2FF6  00000000  80
  2FF7  00000000  00
  2FF8  00000000  03
  2FF9  00000000  00
  2FFA  00000000  00
  2FFB  00000000  00
  2FFC  00000000  00
  2FFD  00000000  01
  2FFE  00000000  01

  3000  00000000  FF
  3001  00000000  FF
  3002  00000000  FF
  3003  00000000  FF
  3004  00000000  FF
  3005  00000000  FF
  3006  00000000  FF
  3007  00000000  FF
  3008  00000000  FF
  3009  00000000  FF
  300A  00000000  FF
  300B  00000000  FF
  300C  00000000  FF
  300D  00000000  FF
  300E  00000000  FF
  300F  00000000  FF
  3010  00000000  FF
  3011  00000000  FF
  3012  00000000  FF
  3013  00000000  FF
  3014  00000000  FF
  3015  00000000  FF
  3016  00000000  FF
  3017  00000000  FF
  3018  00000000  FF
  3019  00000000  FF
  301A  00000000  FF
  301B  00000000  FF
  301C  00000000  FF
  301D  00000000  FF
  301E  00000000  FF
  301F  00000000  FF
  3020  00000000  FF
  3021  00000000  FF
  3022  00000000  FF
  3023  00000000  FF
  3024  00000000  FF
  3025  00000000  FF
  3026  00000000  FF
  3027  00000000  FF
  3028  00000000  FF
  3029  00000000  FF
  302A  00000000  FF
  302B  00000000  FF
  302C  00000000  FF
  302D  00000000  FF
  302E  00000000  FF
  302F  00000000  FF
  3030  00000000  FF
  3031  00000000  FF
  3032  00000000  FF
  3033  00000000  FF
  3034  00000000  FF
  3035  00000000  FF
  3036  00000000  FF
  3037  00000000  FF
  3038  00000000  FF
  3039  00000000  FF
  303A  00000000  FF
  303B  00000000  FF
  303C  00000000  FF
  303D  00000000  FF
  303E  00000000  FF
  303F  00000000  FF
  3040  00000000  FF
  3041  00000000  FF
  3042  00000000  FF
  3043  00000000  FF
  3044  00000000  FF
  3045  00000000  FF
  3046  00000000  FF
  3047  00000000  FF
  3048  00000000  FF
  3049  00000000  FF
  304A  00000000  FF
  304B  00000000  FF
  304C  00000000  FF
  304D  00000000  FF
  304E  00000000  FF
  304F  00000000  FF
  3050  00000000  FF
  3051  00000000  FF
  3052  00000000  FF
  3053  00000000  FF
  3054  00000000  FF
  3055  00000000  FF
  3056  00000000  FF
  3057  00000000  FF
  3058  00000000  FF
  3059  00000000  FF
  305A  00000000  FF
  305B  00000000  FF
  305C  00000000  FF
  305D  00000000  FF
  305E  00000000  FF
  305F  00000000  FF
  3060  00000000  FF
  3061  00000000  FF
  3062  00000000  FF
  3063  00000000  FF
  3064  00000000  FF
  3065  00000000  FF
  3066  00000000  FF
  3067  00000000  FF
  3068  00000000  FF
  3069  00000000  FF
  306A  00000000  FF
  306B  00000000  FF
  306C  00000000  FF
  306D  00000000  FF
  306E  00000000  FF
  306F  00000000  FF
  3070  00000000  FF
  3071  00000000  FF
  3072  00000000  FF
  3073  00000000  FF
  3074  00000000  FF
  3075  00000000  FF
  3076  00000000  FF
  3077  00000000  FF
  3078  00000000  FF
  3079  00000000  FF
  307A  00000000  FF
  307B  00000000  FF
  307C  00000000  FF
  307D  00000000  FF
  307E  00000000  FF
  307F  00000000  FF
  3080  00000000  FF
  3081  00000000  FF
  3082  00000000  FF
  3083  00000000  FF
  3084  00000000  FF
  3085  00000000  FF
  3086  00000000  FF
  3087  00000000  FF
  3088  00000000  FF
  3089  00000000  FF
  308A  00000000  FF
  308B  00000000  FF
  308C  00000000  FF
  308D  00000000  FF
  308E  00000000  FF
  308F  00000000  FF
  3090  00000000  FF
  3091  00000000  FF
  3092  00000000  FF
  3093  00000000  FF
  3094  00000000  FF
  3095  00000000  FF
  3096  00000000  FF
  3097  00000000  FF
  3098  00000000  FF
  3099  00000000  FF
  309A  00000000  FF
  309B  00000000  FF
  309C  00000000  FF
  309D  00000000  FF
  309E  00000000  FF
  309F  00000000  FF
  30A0  00000000  FF
  30A1  00000000  FF
  30A2  00000000  FF
  30A3  00000000  FF
  30A4  00000000  FF
  30A5  00000000  FF
  30A6  00000000  FF
  30A7  00000000  FF
  30A8  00000000  FF
  30A9  00000000  FF
  30AA  00000000  FF
  30AB  00000000  FF
  30AC  00000000  FF
  30AD  00000000  FF
  30AE  00000000  FF
  30AF  00000000  FF
  30B0  00000000  FF
  30B1  00000000  FF
  30B2  00000000  FF
  30B3  00000000  FF
  30B4  00000000  FF
  30B5  00000000  FF
  30B6  00000000  FF
  30B7  00000000  FF
  30B8  00000000  FF
  30B9  00000000  FF
  30BA  00000000  FF
  30BB  00000000  FF
  30BC  00000000  FF
  30BD  00000000  FF
  30BE  00000000  FF
  30BF  00000000  FF
  30C0  00000000  FF
  30C1  00000000  FF
  30C2  00000000  FF
  30C3  00000000  FF
  30C4  00000000  FF
  30C5  00000000  FF
  30C6  00000000  FF
  30C7  00000000  FF
  30C8  00000000  FF
  30C9  00000000  FF
  30CA  00000000  FF
  30CB  00000000  FF
  30CC  00000000  FF
  30CD  00000000  FF
  30CE  00000000  FF
  30CF  00000000  FF
  30D0  00000000  FF
  30D1  00000000  FF
  30D2  00000000  FF
  30D3  00000000  FF
  30D4  00000000  FF
  30D5  00000000  FF
  30D6  00000000  FF
  30D7  00000000  FF
  30D8  00000000  FF
  30D9  00000000  FF
  30DA  00000000  FF
  30DB  00000000  FF
  30DC  00000000  FF
  30DD  00000000  FF
  30DE  00000000  FF
  30DF  00000000  FF
  30E0  00000000  FF
  30E1  00000000  FF
  30E2  00000000  FF
  30E3  00000000  FF
  30E4  00000000  FF
  30E5  00000000  FF
  30E6  00000000  FF
  30E7  00000000  FF
  30E8  00000000  FF
  30E9  00000000  FF
  30EA  00000000  FF
  30EB  00000000  FF
  30EC  00000000  FF
  30ED  00000000  FF
  30EE  00000000  FF
  30EF  00000000  FF
  30F0  00000000  FF
  30F1  00000000  FF
  30F2  00000000  FF
  30F3  00000000  FF
  30F4  00000000  FF
  30F5  00000000  FF
  30F6  00000000  FF
  30F7  00000000  FF
  30F8  00000000  FF
  30F9  00000000  FF
  30FA  00000000  FF
  30FB  00000000  FF
  30FC  00000000  FF
  30FD  00000000  FF
  30FE  00000000  FF

  48000  80010509  00
  48001  80010509  00
  48002  80010509  00
  48003  80010509  00
  48004  80010509  00
  48005  80010509  00
  48006  80010509  00
  48007  80010509  00
  48008  80010509  00
  48009  80010509  00
  4800A  80010509  00
  4800B  80010509  00
  4800C  80010509  00
  4800D  80010509  00
  4800E  80010509  00
  4800F  80010509  00
  48010  80010509  00
  48011  80010509  00
  48012  80010509  00
  48013  80010509  00
  48014  80010509  00
  48015  80010509  00
  48016  80010509  00
  48017  80010509  00
  48018  80010509  00
  48019  80010509  00
  4801A  80010509  00
  4801B  80010509  00
  4801C  80010509  00
  4801D  80010509  00
  4801E  80010509  00
  4801F  80010509  00
  48020  80010509  00
  48021  80010509  00
  48022  80010509  00
  48023  80010509  00
  48024  80010509  00
  48025  80010509  00
  48026  80010509  00
  48027  80010509  00
  48028  80010509  00
  48029  80010509  00
  4802A  80010509  00
  4802B  80010509  00
  4802C  80010509  00
  4802D  80010509  00
  4802E  80010509  00
  4802F  80010509  00
  48030  80010509  00
  48031  80010509  00
  48032  80010509  00
  48033  80010509  00
  48034  80010509  00
  48035  80010509  00
  48036  80010509  00
  48037  80010509  00
  48038  80010509  00
  48039  80010509  00
  4803A  80010509  00
  4803B  80010509  00
  4803C  80010509  00
  4803D  80010509  00
  4803E  80010509  00
  4803F  80010509  00
  48040  80010509  00
  48041  80010509  00
  48042  80010509  00
  48043  80010509  00
  48044  80010509  00
  48045  80010509  00
  48046  80010509  00
  48047  80010509  00
  48048  80010509  00
  48049  80010509  00
  4804A  80010509  00
  4804B  80010509  00
  4804C  80010509  00
  4804D  80010509  00
  4804E  80010509  00
  4804F  80010509  00
  48050  80010509  00
  48051  80010509  00
  48052  80010509  00
  48053  80010509  00
  48054  80010509  00
  48055  80010509  00
  48056  80010509  00
  48057  80010509  00
  48058  80010509  00
  48059  80010509  00
  4805A  80010509  00
  4805B  80010509  00
  4805C  80010509  00
  4805D  80010509  00
  4805E  80010509  00
  4805F  80010509  00
  48060  80010509  00
  48061  80010509  00
  48062  80010509  00
  48063  80010509  00
  48064  80010509  00
  48065  80010509  00
  48066  80010509  00
  48067  80010509  00
  48068  80010509  00
  48069  80010509  00
  4806A  80010509  00
  4806B  80010509  00
  4806C  80010509  00
  4806D  80010509  00
  4806E  80010509  00
  4806F  80010509  00
  48070  80010509  00
  48071  80010509  00
  48072  80010509  00
  48073  80010509  00
  48074  80010509  00
  48075  80010509  00
  48076  80010509  00
  48077  80010509  00
  48078  80010509  00
  48079  80010509  00
  4807A  80010509  00
  4807B  80010509  00
  4807C  80010509  00
  4807D  80010509  00
  4807E  80010509  00
  4807F  80010509  00
  48080  80010509  00
  48081  80010509  00
  48082  80010509  00
  48083  80010509  00
  48084  80010509  00
  48085  80010509  00
  48086  80010509  00
  48087  80010509  00
  48088  80010509  00
  48089  80010509  00
  4808A  80010509  00
  4808B  80010509  00
  4808C  80010509  00
  4808D  80010509  00
  4808E  80010509  00
  4808F  80010509  00
  48090  80010509  00
  48091  80010509  00
  48092  80010509  00
  48093  80010509  00
  48094  80010509  00
  48095  80010509  00
  48096  80010509  00
  48097  80010509  00
  48098  80010509  00
  48099  80010509  00
  4809A  80010509  00
  4809B  80010509  00
  4809C  80010509  00
  4809D  80010509  00
  4809E  80010509  00
  4809F  80010509  00
  480A0  80010509  00
  480A1  80010509  00
  480A2  80010509  00
  480A3  80010509  00
  480A4  80010509  00
  480A5  80010509  00
  480A6  80010509  00
  480A7  80010509  00
  480A8  80010509  00
  480A9  80010509  00
  480AA  80010509  00
  480AB  80010509  00
  480AC  80010509  00
  480AD  80010509  00
  480AE  80010509  00
  480AF  80010509  00
  480B0  80010509  00
  480B1  80010509  00
  480B2  80010509  00
  480B3  80010509  00
  480B4  80010509  00
  480B5  80010509  00
  480B6  80010509  00
  480B7  80010509  00
  480B8  80010509  00
  480B9  80010509  00
  480BA  80010509  00
  480BB  80010509  00
  480BC  80010509  00
  480BD  80010509  00
  480BE  80010509  00
  480BF  80010509  00
  480C0  80010509  00
  480C1  80010509  00
  480C2  80010509  00
  480C3  80010509  00
  480C4  80010509  00
  480C5  80010509  00
  480C6  80010509  00
  480C7  80010509  00
  480C8  80010509  00
  480C9  80010509  00
  480CA  80010509  00
  480CB  80010509  00
  480CC  80010509  00
  480CD  80010509  00
  480CE  80010509  00
  480CF  80010509  00
  480D0  80010509  00
  480D1  80010509  00
  480D2  80010509  00
  480D3  80010509  00
  480D4  80010509  00
  480D5  80010509  00
  480D6  80010509  00
  480D7  80010509  00
  480D8  80010509  00
  480D9  80010509  00
  480DA  80010509  00
  480DB  80010509  00
  480DC  80010509  00
  480DD  80010509  00
  480DE  80010509  00
  480DF  80010509  00
  480E0  80010509  00
  480E1  80010509  00
  480E2  80010509  00
  480E3  80010509  00
  480E4  80010509  00
  480E5  80010509  00
  480E6  80010509  00
  480E7  80010509  00
  480E8  80010509  00
  480E9  80010509  00
  480EA  80010509  00
  480EB  80010509  00
  480EC  80010509  00
  480ED  80010509  00
  480EE  80010509  00
  480EF  80010509  00
  480F0  80010509  00
  480F1  80010509  00
  480F2  80010509  00
  480F3  80010509  00
  480F4  80010509  00
  480F5  80010509  00
  480F6  80010509  00
  480F7  80010509  00
  480F8  80010509  00
  480F9  80010509  00
  480FA  80010509  00
  480FB  80010509  00
  480FC  80010509  00
  480FD  80010509  00
  480FE  80010509  00

  48800  80010509  00
  48801  80010509  00
  48802  80010509  00
  48803  80010509  00
  48804  80010509  00
  48805  80010509  00
  48806  80010509  00
  48807  80010509  00
  48808  80010509  00
  48809  80010509  00
  4880A  80010509  00
  4880B  80010509  00
  4880C  80010509  00
  4880D  80010509  00
  4880E  80010509  00
  4880F  80010509  00
  48810  80010509  00
  48811  80010509  00
  48812  80010509  00
  48813  80010509  00
  48814  80010509  00
  48815  80010509  00
  48816  80010509  00
  48817  80010509  00
  48818  80010509  00
  48819  80010509  00
  4881A  80010509  00
  4881B  80010509  00
  4881C  80010509  00
  4881D  80010509  00
  4881E  80010509  00
  4881F  80010509  00
  48820  80010509  00
  48821  80010509  00
  48822  80010509  00
  48823  80010509  00
  48824  80010509  00
  48825  80010509  00
  48826  80010509  00
  48827  80010509  00
  48828  80010509  00
  48829  80010509  00
  4882A  80010509  00
  4882B  80010509  00
  4882C  80010509  00
  4882D  80010509  00
  4882E  80010509  00
  4882F  80010509  00
  48830  80010509  00
  48831  80010509  00
  48832  80010509  00
  48833  80010509  00
  48834  80010509  00
  48835  80010509  00
  48836  80010509  00
  48837  80010509  00
  48838  80010509  00
  48839  80010509  00
  4883A  80010509  00
  4883B  80010509  00
  4883C  80010509  00
  4883D  80010509  00
  4883E  80010509  00
  4883F  80010509  00
  48840  80010509  00
  48841  80010509  00
  48842  80010509  00
  48843  80010509  00
  48844  80010509  00
  48845  80010509  00
  48846  80010509  00
  48847  80010509  00
  48848  80010509  00
  48849  80010509  00
  4884A  80010509  00
  4884B  80010509  00
  4884C  80010509  00
  4884D  80010509  00
  4884E  80010509  00
  4884F  80010509  00
  48850  80010509  00
  48851  80010509  00
  48852  80010509  00
  48853  80010509  00
  48854  80010509  00
  48855  80010509  00
  48856  80010509  00
  48857  80010509  00
  48858  80010509  00
  48859  80010509  00
  4885A  80010509  00
  4885B  80010509  00
  4885C  80010509  00
  4885D  80010509  00
  4885E  80010509  00
  4885F  80010509  00
  48860  80010509  00
  48861  80010509  00
  48862  80010509  00
  48863  80010509  00
  48864  80010509  00
  48865  80010509  00
  48866  80010509  00
  48867  80010509  00
  48868  80010509  00
  48869  80010509  00
  4886A  80010509  00
  4886B  80010509  00
  4886C  80010509  00
  4886D  80010509  00
  4886E  80010509  00
  4886F  80010509  00
  48870  80010509  00
  48871  80010509  00
  48872  80010509  00
  48873  80010509  00
  48874  80010509  00
  48875  80010509  00
  48876  80010509  00
  48877  80010509  00
  48878  80010509  00
  48879  80010509  00
  4887A  80010509  00
  4887B  80010509  00
  4887C  80010509  00
  4887D  80010509  00
  4887E  80010509  00
  4887F  80010509  00
  48880  80010509  00
  48881  80010509  00
  48882  80010509  00
  48883  80010509  00
  48884  80010509  00
  48885  80010509  00
  48886  80010509  00
  48887  80010509  00
  48888  80010509  00
  48889  80010509  00
  4888A  80010509  00
  4888B  80010509  00
  4888C  80010509  00
  4888D  80010509  00
  4888E  80010509  00
  4888F  80010509  00
  48890  80010509  00
  48891  80010509  00
  48892  80010509  00
  48893  80010509  00
  48894  80010509  00
  48895  80010509  00
  48896  80010509  00
  48897  80010509  00
  48898  80010509  00
  48899  80010509  00
  4889A  80010509  00
  4889B  80010509  00
  4889C  80010509  00
  4889D  80010509  00
  4889E  80010509  00
  4889F  80010509  00
  488A0  80010509  00
  488A1  80010509  00
  488A2  80010509  00
  488A3  80010509  00
  488A4  80010509  00
  488A5  80010509  00
  488A6  80010509  00
  488A7  80010509  00
  488A8  80010509  00
  488A9  80010509  00
  488AA  80010509  00
  488AB  80010509  00
  488AC  80010509  00
  488AD  80010509  00
  488AE  80010509  00
  488AF  80010509  00
  488B0  80010509  00
  488B1  80010509  00
  488B2  80010509  00
  488B3  80010509  00
  488B4  80010509  00
  488B5  80010509  00
  488B6  80010509  00
  488B7  80010509  00
  488B8  80010509  00
  488B9  80010509  00
  488BA  80010509  00
  488BB  80010509  00
  488BC  80010509  00
  488BD  80010509  00
  488BE  80010509  00
  488BF  80010509  00
  488C0  80010509  00
  488C1  80010509  00
  488C2  80010509  00
  488C3  80010509  00
  488C4  80010509  00
  488C5  80010509  00
  488C6  80010509  00
  488C7  80010509  00
  488C8  80010509  00
  488C9  80010509  00
  488CA  80010509  00
  488CB  80010509  00
  488CC  80010509  00
  488CD  80010509  00
  488CE  80010509  00
  488CF  80010509  00
  488D0  80010509  00
  488D1  80010509  00
  488D2  80010509  00
  488D3  80010509  00
  488D4  80010509  00
  488D5  80010509  00
  488D6  80010509  00
  488D7  80010509  00
  488D8  80010509  00
  488D9  80010509  00
  488DA  80010509  00
  488DB  80010509  00
  488DC  80010509  00
  488DD  80010509  00
  488DE  80010509  00
  488DF  80010509  00
  488E0  80010509  00
  488E1  80010509  00
  488E2  80010509  00
  488E3  80010509  00
  488E4  80010509  00
  488E5  80010509  00
  488E6  80010509  00
  488E7  80010509  00
  488E8  80010509  00
  488E9  80010509  00
  488EA  80010509  00
  488EB  80010509  00
  488EC  80010509  00
  488ED  80010509  00
  488EE  80010509  00
  488EF  80010509  00
  488F0  80010509  00
  488F1  80010509  00
  488F2  80010509  00
  488F3  80010509  00
  488F4  80010509  00
  488F5  80010509  00
  488F6  80010509  00
  488F7  80010509  00
  488F8  80010509  00
  488F9  80010509  00
  488FA  80010509  00
  488FB  80010509  00
  488FC  80010509  00
  488FD  80010509  00
  488FE  80010509  00

  48C00  00000000  01
  48C01  80010509  00
  48C02  00000000  05
  48C03  80010509  00
  48C04  80010509  00
  48C05  80010509  00
  48C06  00000000  FE
  48C07  00000000  FF
  48C08  80010509  00
  48C09  80010509  00
  48C0A  00000000  00
  48C0B  80010509  00
  48C0C  00000000  FF
  48C0D  00000000  FF
  48C0E  80010509  00
  48C0F  80010509  00
  48C10  80010509  00
  48C11  80010509  00
  48C12  80010509  00
  48C13  00000000  FE
  48C14  80010509  00
  48C15  80010509  00
  48C16  80010509  00
  48C17  80010509  00
  48C18  00000000  00
  48C19  00000000  00
  48C1A  00000000  00
  48C1B  00000000  01
  48C1C  00000000  00
  48C1D  00000000  00
  48C1E  00000000  00
  48C1F  00000000  00
  48C20  80010509  00
  48C21  80010509  00
  48C22  80010509  00
  48C23  80010509  00
  48C24  80010509  00
  48C25  80010509  00
  48C26  80010509  00
  48C27  80010509  00
  48C28  80010509  00
  48C29  80010509  00
  48C2A  80010509  00
  48C2B  80010509  00
  48C2C  80010509  00
  48C2D  80010509  00
  48C2E  80010509  00
  48C2F  80010509  00
  48C30  00000000  07
  48C31  00000000  18
  48C32  00000000  1E
  48C33  00000000  18
  48C34  00000000  1E
  48C35  00000000  FF
  48C36  00000000  FF
  48C37  00000000  FF
  48C38  00000000  FF
  48C39  00000000  FF
  48C3A  00000000  FF
  48C3B  00000000  FF
  48C3C  00000000  FF
  48C3D  80010509  00
  48C3E  80010509  00
  48C3F  80010509  00
  48C40  80010509  00
  48C41  80010509  00
  48C42  00000000  FF
  48C43  00000000  FF
  48C44  00000000  FF
  48C45  00000000  FF
  48C46  00000000  FF
  48C47  00000000  FF
  48C48  80010509  00
  48C49  80010509  00
  48C4A  80010509  00
  48C4B  80010509  00
  48C4C  80010509  00
  48C4D  80010509  00
  48C4E  80010509  00
  48C4F  80010509  00
  48C50  00000000  FF
  48C51  00000000  FF
  48C52  00000000  FF
  48C53  00000000  FF
  48C54  00000000  FF
  48C55  00000000  FF
  48C56  00000000  FF
  48C57  00000000  FF
  48C58  00000000  FF
  48C59  00000000  FF
  48C5A  00000000  FF
  48C5B  00000000  FF
  48C5C  00000000  FF
  48C5D  00000000  FF
  48C5E  00000000  FF
  48C5F  00000000  FF
  48C60  00000000  FF
  48C61  00000000  FF
  48C62  80010509  00
  48C63  80010509  00
  48C64  80010509  00
  48C65  80010509  00
  48C66  80010509  00
  48C67  80010509  00
  48C68  80010509  00
  48C69  80010509  00
  48C6A  80010509  00
  48C6B  80010509  00
  48C6C  80010509  00
  48C6D  80010509  00
  48C6E  80010509  00
  48C6F  80010509  00
  48C70  80010509  00
  48C71  80010509  00
  48C72  80010509  00
  48C73  80010509  00
  48C74  80010509  00
  48C75  80010509  00
  48C76  80010509  00
  48C77  80010509  00
  48C78  80010509  00
  48C79  80010509  00
  48C7A  80010509  00
  48C7B  80010509  00
  48C7C  80010509  00
  48C7D  80010509  00
  48C7E  80010509  00
  48C7F  80010509  00
  48C80  80010509  00
  48C81  80010509  00
  48C82  80010509  00
  48C83  80010509  00
  48C84  80010509  00
  48C85  80010509  00
  48C86  80010509  00
  48C87  80010509  00
  48C88  80010509  00
  48C89  80010509  00
  48C8A  80010509  00
  48C8B  80010509  00
  48C8C  80010509  00
  48C8D  80010509  00
  48C8E  80010509  00
  48C8F  80010509  00
  48C90  80010509  00
  48C91  80010509  00
  48C92  80010509  00
  48C93  80010509  00
  48C94  80010509  00
  48C95  80010509  00
  48C96  80010509  00
  48C97  80010509  00
  48C98  80010509  00
  48C99  80010509  00
  48C9A  80010509  00
  48C9B  80010509  00
  48C9C  80010509  00
  48C9D  80010509  00
  48C9E  80010509  00
  48C9F  80010509  00
  48CA0  80010509  00
  48CA1  80010509  00
  48CA2  80010509  00
  48CA3  80010509  00
  48CA4  80010509  00
  48CA5  80010509  00
  48CA6  80010509  00
  48CA7  80010509  00
  48CA8  80010509  00
  48CA9  80010509  00
  48CAA  80010509  00
  48CAB  80010509  00
  48CAC  80010509  00
  48CAD  80010509  00
  48CAE  80010509  00
  48CAF  80010509  00
  48CB0  80010509  00
  48CB1  80010509  00
  48CB2  80010509  00
  48CB3  80010509  00
  48CB4  80010509  00
  48CB5  80010509  00
  48CB6  80010509  00
  48CB7  80010509  00
  48CB8  80010509  00
  48CB9  80010509  00
  48CBA  80010509  00
  48CBB  80010509  00
  48CBC  80010509  00
  48CBD  80010509  00
  48CBE  80010509  00
  48CBF  80010509  00
  48CC0  80010509  00
  48CC1  80010509  00
  48CC2  80010509  00
  48CC3  80010509  00
  48CC4  80010509  00
  48CC5  80010509  00
  48CC6  80010509  00
  48CC7  80010509  00
  48CC8  80010509  00
  48CC9  80010509  00
  48CCA  80010509  00
  48CCB  80010509  00
  48CCC  80010509  00
  48CCD  80010509  00
  48CCE  80010509  00
  48CCF  80010509  00
  48CD0  80010509  00
  48CD1  80010509  00
  48CD2  80010509  00
  48CD3  80010509  00
  48CD4  80010509  00
  48CD5  80010509  00
  48CD6  80010509  00
  48CD7  80010509  00
  48CD8  80010509  00
  48CD9  80010509  00
  48CDA  80010509  00
  48CDB  80010509  00
  48CDC  80010509  00
  48CDD  80010509  00
  48CDE  80010509  00
  48CDF  80010509  00
  48CE0  80010509  00
  48CE1  80010509  00
  48CE2  80010509  00
  48CE3  80010509  00
  48CE4  80010509  00
  48CE5  80010509  00
  48CE6  80010509  00
  48CE7  80010509  00
  48CE8  80010509  00
  48CE9  80010509  00
  48CEA  80010509  00
  48CEB  80010509  00
  48CEC  80010509  00
  48CED  80010509  00
  48CEE  80010509  00
  48CEF  80010509  00
  48CF0  80010509  00
  48CF1  80010509  00
  48CF2  80010509  00
  48CF3  80010509  00
  48CF4  80010509  00
  48CF5  80010509  00
  48CF6  80010509  00
  48CF7  80010509  00
  48CF8  80010509  00
  48CF9  80010509  00
  48CFA  80010509  00
  48CFB  80010509  00
  48CFC  80010509  00
  48CFD  80010509  00
  48CFE  80010509  00

  48D00  80010509  00
  48D01  80010509  00
  48D02  80010509  00
  48D03  80010509  00
  48D04  80010509  00
  48D05  80010509  00
  48D06  80010509  00
  48D07  80010509  00
  48D08  80010509  00
  48D09  80010509  00
  48D0A  80010509  00
  48D0B  80010509  00
  48D0C  80010509  00
  48D0D  80010509  00
  48D0E  80010509  00
  48D0F  80010509  00
  48D10  80010509  00
  48D11  80010509  00
  48D12  80010509  00
  48D13  80010509  00
  48D14  80010509  00
  48D15  80010509  00
  48D16  80010509  00
  48D17  80010509  00
  48D18  80010509  00
  48D19  80010509  00
  48D1A  80010509  00
  48D1B  80010509  00
  48D1C  80010509  00
  48D1D  80010509  00
  48D1E  80010509  00
  48D1F  80010509  00
  48D20  80010509  00
  48D21  80010509  00
  48D22  80010509  00
  48D23  80010509  00
  48D24  80010509  00
  48D25  80010509  00
  48D26  80010509  00
  48D27  80010509  00
  48D28  80010509  00
  48D29  80010509  00
  48D2A  80010509  00
  48D2B  80010509  00
  48D2C  80010509  00
  48D2D  80010509  00
  48D2E  80010509  00
  48D2F  80010509  00
  48D30  80010509  00
  48D31  80010509  00
  48D32  80010509  00
  48D33  80010509  00
  48D34  80010509  00
  48D35  80010509  00
  48D36  80010509  00
  48D37  80010509  00
  48D38  80010509  00
  48D39  80010509  00
  48D3A  80010509  00
  48D3B  80010509  00
  48D3C  80010509  00
  48D3D  80010509  00
  48D3E  80010509  00
  48D3F  80010509  00
  48D40  80010509  00
  48D41  80010509  00
  48D42  80010509  00
  48D43  80010509  00
  48D44  80010509  00
  48D45  80010509  00
  48D46  80010509  00
  48D47  80010509  00
  48D48  80010509  00
  48D49  80010509  00
  48D4A  80010509  00
  48D4B  80010509  00
  48D4C  80010509  00
  48D4D  80010509  00
  48D4E  80010509  00
  48D4F  80010509  00
  48D50  80010509  00
  48D51  80010509  00
  48D52  80010509  00
  48D53  80010509  00
  48D54  80010509  00
  48D55  80010509  00
  48D56  80010509  00
  48D57  80010509  00
  48D58  80010509  00
  48D59  80010509  00
  48D5A  80010509  00
  48D5B  80010509  00
  48D5C  80010509  00
  48D5D  80010509  00
  48D5E  80010509  00
  48D5F  80010509  00
  48D60  80010509  00
  48D61  80010509  00
  48D62  80010509  00
  48D63  80010509  00
  48D64  80010509  00
  48D65  80010509  00
  48D66  80010509  00
  48D67  80010509  00
  48D68  80010509  00
  48D69  80010509  00
  48D6A  80010509  00
  48D6B  80010509  00
  48D6C  80010509  00
  48D6D  80010509  00
  48D6E  80010509  00
  48D6F  80010509  00
  48D70  80010509  00
  48D71  80010509  00
  48D72  80010509  00
  48D73  80010509  00
  48D74  80010509  00
  48D75  80010509  00
  48D76  80010509  00
  48D77  80010509  00
  48D78  80010509  00
  48D79  80010509  00
  48D7A  80010509  00
  48D7B  80010509  00
  48D7C  80010509  00
  48D7D  80010509  00
  48D7E  80010509  00
  48D7F  80010509  00
  48D80  80010509  00
  48D81  80010509  00
  48D82  80010509  00
  48D83  80010509  00
  48D84  80010509  00
  48D85  80010509  00
  48D86  80010509  00
  48D87  80010509  00
  48D88  80010509  00
  48D89  80010509  00
  48D8A  80010509  00
  48D8B  80010509  00
  48D8C  80010509  00
  48D8D  80010509  00
  48D8E  80010509  00
  48D8F  80010509  00
  48D90  80010509  00
  48D91  80010509  00
  48D92  80010509  00
  48D93  80010509  00
  48D94  80010509  00
  48D95  80010509  00
  48D96  80010509  00
  48D97  80010509  00
  48D98  80010509  00
  48D99  80010509  00
  48D9A  80010509  00
  48D9B  80010509  00
  48D9C  80010509  00
  48D9D  80010509  00
  48D9E  80010509  00
  48D9F  80010509  00
  48DA0  80010509  00
  48DA1  80010509  00
  48DA2  80010509  00
  48DA3  80010509  00
  48DA4  80010509  00
  48DA5  80010509  00
  48DA6  80010509  00
  48DA7  80010509  00
  48DA8  80010509  00
  48DA9  80010509  00
  48DAA  80010509  00
  48DAB  80010509  00
  48DAC  80010509  00
  48DAD  80010509  00
  48DAE  80010509  00
  48DAF  80010509  00
  48DB0  80010509  00
  48DB1  80010509  00
  48DB2  80010509  00
  48DB3  80010509  00
  48DB4  80010509  00
  48DB5  80010509  00
  48DB6  80010509  00
  48DB7  80010509  00
  48DB8  80010509  00
  48DB9  80010509  00
  48DBA  80010509  00
  48DBB  80010509  00
  48DBC  80010509  00
  48DBD  80010509  00
  48DBE  80010509  00
  48DBF  80010509  00
  48DC0  80010509  00
  48DC1  80010509  00
  48DC2  80010509  00
  48DC3  80010509  00
  48DC4  80010509  00
  48DC5  80010509  00
  48DC6  80010509  00
  48DC7  80010509  00
  48DC8  80010509  00
  48DC9  80010509  00
  48DCA  80010509  00
  48DCB  80010509  00
  48DCC  80010509  00
  48DCD  80010509  00
  48DCE  80010509  00
  48DCF  80010509  00
  48DD0  80010509  00
  48DD1  80010509  00
  48DD2  80010509  00
  48DD3  80010509  00
  48DD4  80010509  00
  48DD5  80010509  00
  48DD6  80010509  00
  48DD7  80010509  00
  48DD8  80010509  00
  48DD9  80010509  00
  48DDA  80010509  00
  48DDB  80010509  00
  48DDC  80010509  00
  48DDD  80010509  00
  48DDE  80010509  00
  48DDF  80010509  00
  48DE0  80010509  00
  48DE1  80010509  00
  48DE2  80010509  00
  48DE3  80010509  00
  48DE4  80010509  00
  48DE5  80010509  00
  48DE6  80010509  00
  48DE7  80010509  00
  48DE8  80010509  00
  48DE9  80010509  00
  48DEA  80010509  00
  48DEB  80010509  00
  48DEC  80010509  00
  48DED  80010509  00
  48DEE  80010509  00
  48DEF  80010509  00
  48DF0  80010509  00
  48DF1  80010509  00
  48DF2  80010509  00
  48DF3  80010509  00
  48DF4  80010509  00
  48DF5  80010509  00
  48DF6  80010509  00
  48DF7  80010509  00
  48DF8  80010509  00
  48DF9  80010509  00
  48DFA  80010509  00
  48DFB  80010509  00
  48DFC  80010509  00
  48DFD  80010509  00
  48DFE  80010509  00
only some allowed
 
sorry for the highjack, but in order to flash with this app, just put on root of thumb drive "flash.bin" right?

edit: i cannot get bgtoolset to work or i would just use that (i think it has this function right?). it worked once, i dumped my flash to patch it manually, but after that, nothing i did would make it work. it would freeze on initialization. like right when it was about to beep, instead it would freeze. cleared all cookies and cache, used wifi and wired, sacrificed a child to satan, restored system to factory settings (did not do a format though, to much stuff on hdd) nothing at all worked :D
 
Last edited:
M4j0r said:
What do you mean by NVS ID? The block ID is the one used by the NVS service.
Click to expand...
With the "NVS ID" i meant "NVS region"... i just shorted the name a bit to control the total width of the table, the reason why i added 2 columns for "NVS ID" and "Block ID" is because the area that starts at 0x2F00 is mentioned as "NVS region 0x20" here and as "block ID 0x10" here

Btw, what are we going to do with the areas named "SNVS region xxx" ?... i know the first S means "secured" but doesnt seems to be an official codename... some of you coined the term ?
Are we going to add any mention to the "snvs" ids in the new table ?... and if so... tell me where/how because i cant imagine it

M4j0r said:
The only whitelist that applies to syscall 863 is the UM one. SCM allows all read/writes in the six regions. So I guess it doesn't make sense to list the SCM "whitelist".
Click to expand...
So SCM doesnt have a whitelist ?... or is whitelisting everything ?
And you mentioned the UM whitelist for read access contains the same data than the UM whitelist for write access, right ?
So if i understand you right... you are suggesting to reduce the number of whitelist columns under syscall 863 from the 4 i added to only 1 ?

Btw, i was adding so many table columns for whitelists of UM and SCM just because im not sure if there are other areas of the EEPROM that would need that columns
I would hate to start populating the table with tenths/hundreds of rows and eventually realize we need to add/remove/movearound a colum of the table... the table is going to be huge and a rebuilding like that would take lot of work, lot of room for mistakes, and lot of time to doouble-check the changes

M4j0r said:
For the uart access it's:
Code: 
CXR713: 0x2800 <= x < 0x7400, with Sony syscon patch: 0x2C00 <= x < 0x7400 (full eeprom size: 32KB)
CXR714: 0x2800 <= x < 0x4400, with Sony syscon patch: 0x2C00 <= x < 0x4400 (full eeprom size: 20KB)
SW/2/3: 0x0000 <= x < 0x1400 (full "eeprom" size: 32KB)
Click to expand...
I was about to ask you about that, but still i have doubts with that too :)

What i realized while doing this (or better said, thinking about how to do it) is filling the table cells with a simple "yes" or "no" is not enought, we can use "tags" like the ones for product code. Allows to write some text + a tooltip with more text
One of them could be named [PATCH*]... or [UM*]... etc... dunno, ths way we can join together different info about protections and access levels in the same table column

There are not more higher access by UART other than the 2 you mentioned ? (with or without the official patch)... i guess the exploit you are using to dump the syscon firmware is a higher access

And what do you think about what i did joining together SPI and UART in the same table header cell ?, i just made it as something temporal but i guess is not technically correct
SPI allows to access more data, right ?, or we are not going to add to the table the info about the areas accessed by SPI because are considered ROM memory instead of EEPROM ?
 
Last edited:
sandungas said:
With the "NVS ID" i meant "NVS region"... i just shorted the name a bit to control the total width of the table, the reason why i added 2 columns for "NVS ID" and "Block ID" is because the area that starts at 0x2F00 is mentioned as "NVS region 0x20" here and as "block ID 0x10" here
Click to expand...
Oh, some entries in this table for the "NVS id" https://www.psdevwiki.com/ps3/SC_EE..._Offsets_-_Full_Mapping_Table_.28NAND_only.29 are wrong, they should match the block ID.
Btw, what are we going to do with the areas named "SNVS region xxx" ?... i know the first S means "secured" but doesnt seems to be an official codename... some of you coined the term ?
Are we going to add any mention to the "snvs" ids in the new table ?... and if so... tell me where/how because i cant imagine it
Click to expand...
Sony doesn't use the term SNVS on the PS3 but on later consoles.
I don't know if we should add it to the table since neither the UART interface nor CELL can directly read from that, like "read region 1 offset 0x10". It's all done using dedicated secure services. Same for the patch, CELL can only write it using the patch update service, it's no direct access. Retrieving the errlog is also no direct access.
So SCM doesnt have a whitelist ?... or is whitelisting everything ?
And you mentioned the UM whitelist for read access contains the same data than the UM whitelist for write access, right ?
So if i understand you right... you are suggesting to reduce the number of whitelist columns under syscall 863 from the 4 i added to only 1 ?
Click to expand...
Yes, both SCM and the Syscon CELL interface (SDA/NVS) use this whitelist:
Code: 
0x2F00 - 0x2FFF: OK
0x3000 - 0x30FF: OK
0x48000 - 0x480FF: OK
0x48800 - 0x488FF: OK
0x48C00 - 0x48CFF: OK
0x48D00 - 0x48DFF: OK
while UM uses:
Code: 
0x2F00: OK (all access)
0x3000: OK (all access)
0x48000: NO (no access)
0x48800: NO (no access)
0x48C00: see below
0x48D00: NO (no access)

0x48C00 OK:
00, 02, 06, 07, 0A,
0C, 0D,
13,
18, 19, 1A, 1B, 1C, 1D, 1E, 1F,
30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 3A, 3B, 3C,
42, 43, 44, 45, 46,
50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 5A, 5B, 5C, 5D, 5E, 5F, 60, 61
There are not more higher access by UART other than the 2 you mentioned ? (with or without the official patch)... i guess the exploit you are using to dump the syscon firmware is a higher access
Click to expand...
Well the syscon firmwares isn't stored in the eeprom region, in order to get that you need to inject a payload into the firmware using the patch so it dumps itself. On Sherwood the patch isn't even stored in the emulated eeprom, it's stored inside the firmware (0x2000-0x2FFF).
And what do you think about what i did joining together SPI and UART in the same table header cell ?, i just made it as something temporal but i guess is not technically correct
SPI allows to access more data, right ?, or we are not going to add to the table the info about the areas accessed by SPI because are considered ROM memory instead of EEPROM ?
Click to expand...
The SDA/NVS are very limited compared to the r/w/EEP GET/EEP SET commands.
 
No0bZiLLa said:
i cannot get bgtoolset to work or i would just use that (i think it has this function right?). it worked once, i dumped my flash to patch it manually, but after that, nothing i did would make it work. it would freeze on initialization. like right when it was about to beep, instead it would freeze. cleared all cookies and cache, used wifi and wired, sacrificed a child to satan, restored system to factory settings (did not do a format though, to much stuff on hdd) nothing at all worked :D
Click to expand...
Are you using any virtual memory cards (ps1/ps2)?
A couple of users reported fixing the freeze issue by removing them..
At my end I tested the various VMC use cases but never managed to make the Toolset freeze so those tests were inconclusive & I still don't know what the cause of the freeze really is, it seems I won't be able to find out as long as I cannot reproduce it or find someone who experiences the problem willing to spend the necessary time testing for me privately, if you are interested in helping & have time to spare, let me know.

FYI
The ps3 toolset uses cookies to store important information such as memory allocations.
Those things are stored in cookies because the better js alternative ie localStorage is not supported in the ps3 browser & cookies are the only way to persist data.
You may ask why memory allocation info should be saved in cookies, it is because in some cases it is possible to close the browser without warning & in that case the beforeUnload event of a loaded Web page is not triggered & in the case of the Toolset page the code the beforeUnload event handler contains to deallocate memory, close external threads & clean up stuff in general when leaving/closing the Toolset page does not get an opportunity to run.
For that reason, if the Toolset is loaded again without restarting the console, the Toolset can use the cookie information to reacquire the resources instead of failing to work due to lack of available memory.

As a rule, clearing cookies should only be done after a fresh console restart, before loading the Toolset, otherwise you may experience warnings & errors (no freezes though) when reloading the Toolset.
 
Last edited:
M4j0r said:
Oh, some entries in this table for the "NVS id" https://www.psdevwiki.com/ps3/SC_EE..._Offsets_-_Full_Mapping_Table_.28NAND_only.29 are wrong, they should match the block ID.
Click to expand...
Ok, that was confusing me a lot, so "NVS region" and "Block ID" are the same thing mentioned here

What i still dont get from that notes is what has to do with all this the "device access service" (or SERV_SDA), is not mentioned anywhere else as far i could find in wiki, and the syscall 863 doesnt uses the block id either ?

Anyway, there is another confusing thing, at top of the SC EEPROM page is mentioned that "Syscon EEPROM consists of 0x4000 blocks, and every block consists of 2 bytes of data" (in the first mullions), few lines below when talking about the SPI access is mentioned the "block id" concept too... this is considering a block have 2 bytes... but i guess we are not talking about the same "block id" used by syscon services

Also, in the second table below this section (with some rows colored in lightgrey) the "NVS regions" (or we should name them "block ID") are way bigger than 2 bytes
Also are mentioned as "lv0 nvs regions", not sure if lv0 considers is something different

M4j0r said:
Sony doesn't use the term SNVS on the PS3 but on later consoles.
I don't know if we should add it to the table since neither the UART interface nor CELL can directly read from that, like "read region 1 offset 0x10". It's all done using dedicated secure services. Same for the patch, CELL can only write it using the patch update service, it's no direct access. Retrieving the errlog is also no direct access.
Click to expand...
Ok, then i guess that notes with the "snvs region xxx" are going to be lost when moving the info to the new table... unless we find a handy way to add that info in the single table column we are going to keep for that IDs

M4j0r said:
Yes, both SCM and the Syscon CELL interface (SDA/NVS) use this whitelist:
Code: 
0x2F00 - 0x2FFF: OK
0x3000 - 0x30FF: OK
0x48000 - 0x480FF: OK
0x48800 - 0x488FF: OK
0x48C00 - 0x48CFF: OK
0x48D00 - 0x48DFF: OK
while UM uses:
Code: 
0x2F00: OK (all access)
0x3000: OK (all access)
0x48000: NO (no access)
0x48800: NO (no access)
0x48C00: see below
0x48D00: NO (no access)

0x48C00 OK:
00, 02, 06, 07, 0A,
0C, 0D,
13,
18, 19, 1A, 1B, 1C, 1D, 1E, 1F,
30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 3A, 3B, 3C,
42, 43, 44, 45, 46,
50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 5A, 5B, 5C, 5D, 5E, 5F, 60, 61
Click to expand...
But in this post you said is needed to apply 2 patches to SCM to unlock all EEPROM access. As well as 2/3 more patches to UM
I wanted to represent all that states in the table in some way, patched and unpatched... with some kind of mark in each table cell (a tag or whatever)
For the kind of access bguerville is testing in HEN is like passing several filters, where the acces is valid only if the offset is whitelited in all the filters
That was the idea originally... we was going to be able to see visually by looking at the table is there are several table cells in the same row with the {{yes}}

M4j0r said:
Well the syscon firmwares isn't stored in the eeprom region, in order to get that you need to inject a payload into the firmware using the patch so it dumps itself. On Sherwood the patch isn't even stored in the emulated eeprom, it's stored inside the firmware (0x2000-0x2FFF).

The SDA/NVS are very limited compared to the r/w/EEP GET/EEP SET commands.
Click to expand...
The initial idea was to have a complete "memory map" of that areas outside of the eeprom too in the same wikitable but im not even sure if is a good idea, how tricky could be, if it would be better to split it in several tables, etc...

In general... i think is a lot better to cummulate all the info condensed in the same place to have a better overview
Btw, at some point i will try to enable the "sortable" feature in the table and see how good/bad it works with all the "colspan" and "rowspan" we are going to use... this is going to be very handy to see how sony did the "virtualization" of the offsets of some areas, is going to allow to organize the table contents "by phisicall offset", "by virtual offset", "by whitelist", etc... :)
And btw2... on sherwoods the ROM is virtualized (inside FLASH) too ?... and its size is 384KB ? (to keep backward compatibility with the retail mullions)
Im asking because in that case we could represent the complete memory map for sherwoods configuous in the same table... basically it would be a "FLASH map" (containing a virtual EEPROM and a virtual ROM inside it)
 
Last edited:
sandungas said:
What i still dont get from that notes is what has to do with all this the "device access service" (or SERV_SDA), is not mentioned anywhere else as far i could find in wiki, and the syscall 863 doesnt uses the block id either?
Click to expand...
That's all handled inside SCM. It decides wether to use the NVS or SDA service based on the syscon version. For NVS it'll do the address to block id + offset conversion, for SDA it'll just send the address.
Anyway, there is another confusing thing, at top of the SC EEPROM page is mentioned that "Syscon EEPROM consists of 0x4000 blocks, and every block consists of 2 bytes of data" (in the first mullions), few lines below when talking about the SPI access is mentioned the "block id" concept too... this is considering a block have 2 bytes... but i guess we are not talking about the same "block id" used by syscon services
Click to expand...
Yes, there are 0x4000 blocks of size 0x2 in the (CXR713) eeprom hardware. That's not related to the (s)nvs block id. (https://twitter.com/MinaRalwasser/status/1442162020254687233)
Also, in the second table below this section (with some rows colored in lightgrey) the "NVS regions" (or we should name them "block ID") are way bigger than 2 bytes
Also are mentioned as "lv0 nvs regions", not sure if lv0 considers is something different
Click to expand...
lv0 and lv1ldr use them internally, syscon doesn't know about them. It's a relict from the CEB consoles.
But in this post you said is needed to apply 2 patches to SCM to unlock all EEPROM access. As well as 2/3 more patches to UM
I wanted to represent all that states in the table in some way, patched and unpatched... with some kind of mark in each table cell (a tag or whatever)
Click to expand...
The UM patches unlock the full access to all the regions (= scm access). The SCM patches would unlock the access to the whole eeprom (only using SDA and with a patched syscon firmware).
The initial idea was to have a complete "memory map" of that areas outside of the eeprom too in the same wikitable but im not even sure if is a good idea, how tricky could be, if it would be better to split it in several tables, etc...
Click to expand...
Merging CXR Cytology, CXR Cookie and SW Cookie in one table will be hard, the only area they share is the SPCR. So one table for the SPCR (0x0000-0x2800/0x3000-0x5800) and then maybe one table for CXR and one for SW or three tables.
And btw2... on sherwoods the ROM is virtualized (inside FLASH) too ?... and its size is 384KB ? (to keep backward compatibility with the retail mullions)
Click to expand...
No, you can't virtualize the ROM, it's not emulating the CXR, it's a completly new firmware. On CXR flash models the firmware also just runs from the flash.
Interestingly Sherwood also needs 0x20000 bytes of flash to emulate 0x8000 bytes of eeprom lol.
 
bguerville said:
if you are interested in helping & have time to spare, let me know.
Click to expand...
sure, i have some free time. message me and we can setup a time. looks like there is a good handful of people with this problem so might as well try to figure it out.

edit, i am not using any kind of ps2 or ps1 virtual cards. only things that were played on the ps3 was ps3 and psn (not repacked ps1 or ps2) games.
 
Last edited:
No0bZiLLa said:
sure, i have some free time. message me and we can setup a time. looks like there is a good handful of people with this problem so might as well try to figure it out.
Click to expand...
Hallelujah... LOL
Been waiting (in vain so far) for a positive answer from someone willing to help for about 2 years now, I had nearly given up hopes to get a chance to elucidate this issue!
PM sent.
 
Last edited:
@bucanero @M4j0r im taking a look at the source code of the PS3 advanced tools to see how to format the timestamps of the error codes in the same way syscon is doing when accessing it by UART
Right now is displaying them in format Wed May 12 08:43:27 2021
But i think is better to display them in format 2021/05/12 08:43:27

It seems the function strftime can do it without much hassle
In other words, im suggesting to change the ctime function from line 187 in main.c of the "sm_error_log" tool
Code: 
fprintf(fp, "%02d: %08X  %s", i + 1, error_code, ctime(&print_time));
To something like this:
Code: 
char buffer [80];
fprintf(fp, "%02d: %08X  %s", i + 1, error_code, strftime(buffer, 80, "%D %T", &print_time));

Im not sure if i made some mistake, i cant compile or try it, what do you think ?
 
And it would be cool to show the motherboard name, based on the reports from wiki page: Platform_ID
Code: 
char	board[16];
switch (hwinfo.platform_id) {
    case 'Cyt2.2':
        board = 'TMU-510';
    case 'Cyt3.1':
        board = 'TMU-520';
    case 'Cyt3.2':
        board = 'TMU-520';
    case 'Cok14':
        board = 'COK-001';
    case 'CokB10':
        board = 'COK-002';
    case 'CokC12':
        board = 'SEM-001';
    case 'CokD10':
        board = 'DIA-001';
    case 'CokE10':
        board = 'DIA-002';
    case 'Deb01':
        board = 'DEB-001';
    case 'CokF10':
        board = 'VER-001';
    case 'CokG11':
        board = 'DYN-001';
    case 'CokH11':
        board = 'SUR-001';
    case 'CokJ13':
        board = 'JTP-001';
    case 'CokJ20':
        board = 'JSD-001';
    case 'CokK10':
        board = 'KTE-001';
    case 'CokM20':
        board = 'MSX-001(NOR)';
    case 'CokM30':
        board = 'MPX-001(eMMC)';
    case 'CokN10':
        board = 'NPX-001(NOR)';
    case 'CokP40':
        board = 'PPX-001(eMMC)';
    case 'CokP10':
        board = 'PQX-001(NOR)';
    case 'CokP30':
        board = 'PQX-001(eMMC)';
    case 'cokR40':
        board = 'REX-001(eMMC)';
    default:
        board = 'Unknown !!!';
}
fprintf(fp, "Motherboard: %s\n", board);
Is a long switch with the names for all the PS3 motherboards familly, for the unconfirmed platform IDs im not making any assumption and im suggesting to display an "Unknown !!!" text because i really want people to get alarmed and report it



------------------
Later it can be made the same to add a short text description at the right of every error code... is just are a looooot and by now we are not completly sure what a lot of them means
 
sandungas said:
And it would be cool to show the motherboard name, based on the reports from wiki page: Platform_ID
Code: 
char    board[16];
switch (hwinfo.platform_id) {
    case 'Cyt2.2':
        board = 'TMU-510';
    case 'Cyt3.1':
        board = 'TMU-520';
    case 'Cyt3.2':
        board = 'TMU-520';
    case 'Cok14':
        board = 'COK-001';
    case 'CokB10':
        board = 'COK-002';
    case 'CokC12':
        board = 'SEM-001';
    case 'CokD10':
        board = 'DIA-001';
    case 'CokE10':
        board = 'DIA-002';
    case 'Deb01':
        board = 'DEB-001';
    case 'CokF10':
        board = 'VER-001';
    case 'CokG11':
        board = 'DYN-001';
    case 'CokH11':
        board = 'SUR-001';
    case 'CokJ13':
        board = 'JTP-001';
    case 'CokJ20':
        board = 'JSD-001';
    case 'CokK10':
        board = 'KTE-001';
    case 'CokM20':
        board = 'MSX-001(NOR)';
    case 'CokM30':
        board = 'MPX-001(eMMC)';
    case 'CokN10':
        board = 'NPX-001(NOR)';
    case 'CokP40':
        board = 'PPX-001(eMMC)';
    case 'CokP10':
        board = 'PQX-001(NOR)';
    case 'CokP30':
        board = 'PQX-001(eMMC)';
    case 'cokR40':
        board = 'REX-001(eMMC)';
    default:
        board = 'Unknown !!!';
}
fprintf(fp, "Motherboard: %s\n", board);
Is a long switch with the names for all the PS3 motherboards familly, for the unconfirmed platform IDs im not making any assumption and im suggesting to display an "Unknown !!!" text because i really want people to get alarmed and report it



------------------
Later it can be made the same to add a short text description at the right of every error code... is just are a looooot and by now we are not completly sure what a lot of them means
Click to expand...
I am adding this stuff to the PS3 Toolset too, it will be in the coming update roll out.

Here is a ss preview of what it will look like on one of my slims (25xx). As you suggested it would say "Board ID: unknown" if the "platform id" was not in our list of known ids.
 

Attachments

  • ss.jpg
    ss.jpg
    127 KB · Views: 498
You must log in or register to reply here.

Similar threads

Back
Top