Full dump captured from backdoor via %rx8 00000000 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 @@@@@@@@@@@@@@@@ ... 00003ff0 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 @@@@@@@@@@@@@@@@ 00004000 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ ... 000040f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ 00004100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004180 00 d4 00 00 00 04 00 00 00 00 00 00 00 00 00 00 ................ 00004190 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 -............... 000041a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000041b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000041c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000041d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000041e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000041f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ * After writing 0xFF to 0x4100:4200 - 4100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ - 4110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ - 4120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ - 4130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ - 4140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ - 4150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ - 4160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ - 4170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ - 4180 00 ff 00 00 00 03 00 00 00 00 00 00 00 00 00 00 ................ - 4190 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ - 41a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ - 41b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ - 41c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ - 41d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ - 41e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ - 41f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004200 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ ... 00004af0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ 00004b00 17 71 00 00 00 00 01 00 0a 00 08 07 23 00 00 00 .q..........#... 00004b10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 df ................ 00004b20 1c 00 00 00 be 00 00 00 0f 00 00 00 be 00 00 00 ................ 00004b30 99 0f 00 00 00 00 00 00 00 00 00 00 00 08 00 00 ................ 00004b40 00 d2 00 00 00 00 00 00 33 1b 5c 3c 80 77 72 00 ........3..<.wr. 00004b50 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004b60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 df ................ 00004b70 00 02 00 94 00 00 00 00 b0 3f 00 00 00 00 00 33 .........?.....3 00004b80 00 00 00 00 00 1a 00 a0 b0 3f 00 00 00 00 00 33 .........?.....3 00004b90 00 00 00 00 16 06 00 00 00 00 00 00 1f 00 00 00 ................ 00004ba0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004bb0 00 00 00 00 00 00 00 00 b0 3f 00 00 00 00 00 33 .........?.....3 00004bc0 82 40 5c 1d 24 24 01 08 04 28 84 6f 44 48 00 00 .@..$$...(.oDH.. 00004bd0 12 00 00 d5 00 88 0f 00 0d 29 e0 00 00 00 40 00 .........)....@. 00004be0 05 00 00 00 00 01 00 01 31 00 00 00 00 00 00 00 ........1....... 00004bf0 11 11 00 00 00 00 40 10 00 0b 18 00 00 00 10 00 ......@......... 00004c00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ ... 00004cf0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ 00004d00 03 00 00 0c a6 00 00 00 10 00 00 00 69 41 00 00 ............iA.. 00004d10 00 00 00 00 1f 00 00 00 00 00 00 00 00 00 00 00 ................ 00004d20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004d30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004d40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004d50 ee 06 f5 00 ff 1f 1d 00 00 00 00 00 00 00 00 00 ................ 00004d60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004d70 ac 6c 6f 63 d0 8c 01 00 02 00 00 00 10 00 00 00 .loc............ <-- SCSI CDB 00004d80 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004d90 00 40 01 80 00 00 00 00 23 01 00 00 00 00 00 00 .@......#....... 00004da0 00 00 00 00 00 15 00 00 00 00 00 06 00 03 00 06 ................ 00004db0 70 2a 2a 24 00 00 00 00 0a 06 0b 00 00 01 05 00 p**$............ 00004dc0 00 00 00 00 00 00 f0 7f 0f 80 00 00 00 00 00 00 ................ 00004dd0 0e 00 00 00 34 00 00 00 00 00 00 00 00 00 00 00 ....4........... 00004de0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004df0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00004e00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ ... 00007ff0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ repeated 0x200 byte block, 16 copies total { 00008000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ <-- 384 bytes local RAM 00008010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ * Not accessible to ARM 00008030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ * Same size as built-in 00008050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ RAM, but doesn't seem to 00008060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ be live idata mapping 00008070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000080a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000080b0 00 00 00 08 00 aa f0 00 00 00 00 00 00 00 00 00 ................ 000080c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000080d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 80 ................ 000080e0 b6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000080f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008180 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 ................ <-- Usually reads 04 00008190 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 ................ 000081a0 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 ................ 000081b0 04 06 04 04 04 04 04 04 04 04 04 04 04 04 04 04 ................ 000081c0 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 ................ 000081d0 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 ................ 000081e0 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 ................ <-- Last byte sometimes reads 06 000081f0 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 ................ < } 0000a000 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ ... 0000fff0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................