ROMIO image start at bfc08000
code version:
code start: 80008000
code length: 14DF3A
memMapTab: 14 entries, start = bfc1c000, checksum = 965A
$RAM Section:
  0: BootExt(RAMBOOT), start=80008000, len=18000
  1: HTPCode(RAMCODE), start=80020000, len=E0000
  2: RasCode(RAMCODE), start=80020000, len=2E0000
$ROM Section:
  3: BootBas(ROMIMG), start=bfc00000, len=4000
  4: DbgArea(ROMIMG), start=bfc04000, len=2000
  5: RomDir2(ROMDIR), start=bfc06000, len=2000
  6: BootExt(ROMIMG), start=bfc08030, len=13FD0
  7: MemMapT(ROMMAP), start=bfc1c000, len=C00
  8: HTPCode(ROMBIN), start=bfc1cc00, len=7000
     (Compressed)
     Version: HTP_P650 V 0.04, start: bfc1cc30
     Length: FBC4, Checksum: F7A5
     Compressed Length: 617E, Checksum: 3B42
  9: termcap(ROMIMG), start=bfc23c00, len=400
 10: parinit(ROMIMG), start=bfc24000, len=500
 11: swnt(ROMBIN), start=bfc24500, len=3BB00
     (Compressed)
     Version: ADSL ATU-R, start: bfc24530
     Length: 498C8, Checksum: CA40
     Compressed Length: 30864, Checksum: 8485
 12: RomDefa(ROMIMG), start=bfc60000, len=2000
 13: RasCode(ROMBIN), start=bfc62000, len=19E000
     (Compressed)
     Version: P650R-33 ATU-R, start: bfc62030
     Length: 2511E0, Checksum: 675D
     Compressed Length: F3F39, Checksum: BE81
$USER Section:
Msecs   96
Heap0   16   400 64
Heap1   32   160 64
Heap2   64   120 64
Heap3   128  200 64
Heap4   192  100 16
Heap5   256  30 16
Heap6   320  25  6
Heap7   384  16 6
Heap8   448  25 6
Heap9   512  40  8
Heap10  576  25  8
Heap11  1024 30  4
Heap12  2560 30  2
Heap13  4096 5  2
Heap14  0 0
Heap15  0 0
MbufInt 20 20 20
MbufIO  100 160 600 0 0
Queue   128
Cbuf    160
FuncId  35
Proc    35
Timer   128
DNS     128
Model   1       3475
FilterSet 12
IpRoute 16
IpxRoute 4
IpMaxRt     128
IpxMaxRt    128
IpxMaxSap   128
FwTos   300 16 16 16
AclType0   2048  8  10
AclType1   2048  8  100
AclType2   2048  8  20
AclType3   2048  8  128
AclType4   2048  8  128
AclType5   32768 8  128
AppleTalkRoute  0
Bridge          4
RemoteNode      8
Profile         8
Endpoint        4
NATServerSet    10
DHCPEntry       254
PoeSvrCnt               4
ScheduleSet     12
AclBuffer               1
IPSecManualSA   8
IPSecIkePeer    8
IPSecIkeSA              8
IPSecAclBuffer  1
IPSecSPD                5
NatAclBuffer    1
CustomPort              10
NatSessions             1024
IpPolicySet     12
CoeFixedPart    0
MiscFirewallBuffer              1
CyberPatrolBuffer               1
CyberPatrolListBuffer   1
TrustedIPNum    0
AccessSecHost   0
NatRulePerSet   24
UPNPNum         1
IPBUFixpart     1
Vendor                  1 0
HwVerRange              2 0 0