Line 100:
Line 100:
| 0x1B0 (0xD8 * 2) || 0x10 bytes || Unknown.
| 0x1B0 (0xD8 * 2) || 0x10 bytes || Unknown.
|-
|-
−
| 0x1C0 (0xE0 * 2) || 0x10 bytes || NAND counter? (encrypted with Wii U SEEPROM key).
+
| 0x1C0 (0xE0 * 2) || 0x10 bytes || Boot parameters (encrypted with Wii U SEEPROM key).
+
Structure containing parameters for boot0:
+
- 0x1C0 to 0x1C2 (0x02 bytes): Control flags.
+
- 0x1C2 to 0x1C4 (0x02 bytes): Control flags:
+
-> 0x4000 tells boot0 to overwrite NAND_CONFIG with the supplied value.
+
-> 0x2000 tells boot0 to overwrite NAND_BANK with the supplied value.
+
- 0x1C4 to 0x1C8 (0x04 bytes): Value to overwrite NAND_CONFIG (optional).
+
- 0x1C8 to 0x1CC (0x04 bytes): Value to overwrite NAND_BANK (optional).
+
- 0x1CC to 0x1D0 (0x04 bytes): CRC32 of data from 0x1C0 to 0x1CC.
|-
|-
−
| 0x1D0 (0xE8 * 2) || 0x10 bytes || NAND counter? (encrypted with Wii U SEEPROM key).
+
| 0x1D0 (0xE8 * 2) || 0x10 bytes || Boot parameters (encrypted with Wii U SEEPROM key).
+
Structure containing parameters for boot0:
+
- 0x1D0 to 0x1D2 (0x02 bytes): boot1 version.
+
- 0x1D2 to 0x1D4 (0x02 bytes): boot1 NAND sector.
+
- 0x1D4 to 0x1DC (0x08 bytes): Empty.
+
- 0x1DC to 0x1E0 (0x04 bytes): CRC32 of data from 0x1D0 to 0x1DC.
|-
|-
−
| 0x1E0 (0xF0 * 2) || 0x10 bytes || NAND counter? (encrypted with Wii U SEEPROM key).
+
| 0x1E0 (0xF0 * 2) || 0x10 bytes || Boot parameters (encrypted with Wii U SEEPROM key).
+
Structure containing parameters for boot0:
+
- 0x1E0 to 0x1E2 (0x02 bytes): boot1 copy version.
+
- 0x1E2 to 0x1E4 (0x02 bytes): boot1 copy NAND sector.
+
- 0x1E4 to 0x1EC (0x08 bytes): Empty.
+
- 0x1EC to 0x1F0 (0x04 bytes): CRC32 of data from 0x1E0 to 0x1EC.
|-
|-
| 0x1F0 (0xF8 * 2) || 0x10 bytes || Empty.
| 0x1F0 (0xF8 * 2) || 0x10 bytes || Empty.
|-
|-
|}
|}