Checked results from three different attempts, and it appears that starting at FF810000 seems to give the best results in terms of program analysis. I guess it's now down to working out what it all means, thinking of using S95 and SX120 dumps as a start point. S95 because it's a similar revision and sx120 in terms of similar features. I still have no idea what i'm upto, which is probably obvious to everyone already :s