Figured out some more undocumented behaviour, which might help someone:
RandomNumberGen (registers 0x819-0x81C):
- Returns the same values on repeated reads
- Is not updated by writing to it
- Returns “0 0 0 0” after sleep or reset
- Is updated to new random values when you execute the “calibration” command (opcode 0x89) with the “image calibration enabled” bit set.