6,263
edits
Changes
→ARM9 ITCM
| 0x10
| 0x10
| This is the fall-back keyY used for movable.sed keyY when movable.sed doesn't exist in NAND(the last two words here are used on retail for generating console-unique TWL keydata/etc). This is also used for "LocalFriendCodeSeed", etc.
| This is the fall-back keyY used for movable.sed keyY when movable.sed doesn't exist in NAND(the last two words here are used on retail for generating console-unique TWL keydata/etc). This is also used for "LocalFriendCodeSeed", etc.
|-
| 0x01FFB818
|
| 0x3818
| 0x1
| ?
|-
|-
| 0x01FFB819
| 0x01FFB819
| 0x1
| 0x1
| This is the [[CTCert]] issuer type: 0 = retail "Nintendo CA - G3_NintendoCTR2prod", non-zero = dev "Nintendo CA - G3_NintendoCTR2dev".
| This is the [[CTCert]] issuer type: 0 = retail "Nintendo CA - G3_NintendoCTR2prod", non-zero = dev "Nintendo CA - G3_NintendoCTR2dev".
|-
| 0x01FFB81A
|
| 0x381A
| 0x6
| ?
|-
|-
| 0x01FFB820
| 0x01FFB820
| 0x4
| 0x4
| This is the CTCert ECDSA exponent, this is byte-swapped when *((u8*)(0x01FFB800+0x18)) is >=5.
| This is the CTCert ECDSA exponent, this is byte-swapped when *((u8*)(0x01FFB800+0x18)) is >=5.
|-
| 0x01FFB824
|
| 0x3824
| 0x2
| ?
|-
|-
| 0x01FFB826
| 0x01FFB826
| This is the 0x200-bytes from the plaintext NAND firm partition FIRM header, read by bootrom.
| This is the 0x200-bytes from the plaintext NAND firm partition FIRM header, read by bootrom.
|-
|-
| 0x01FFBC00
| 0x01FFBD00
|
|
| 0x3C00
| 0x3D00
| 0x200
| 0x200
| Unknown, not used by [[FIRM]]. Probably RSA related going by the data right after this? These are not console-unique.
| Unknown, not used by [[FIRM]]. Probably RSA related going by the data right after this? These are not console-unique.
| 0x100
| 0x100
| This is the RSA-2048 modulo for RSA-engine slot3.
| This is the RSA-2048 modulo for RSA-engine slot3.
|-
| 0x01FFC100
|
| 0x4100
| 0x800
| Unknown, not console-unique.
|-
|-
| 0x01FFC900
| 0x01FFC900