3dbrew - User contributions [en]

Title list

2016-04-24T21:07:28Z

Normmatt:

NOTE: This Title list is a condensed version, only the System Titles lists are full lists. For a full list of titles on Nintendo's CDN, see [http://mtheall.com/~mtheall/tmdlist.php here]. The reports/title-lists from [https://yls8.mtheall.com/ninupdates/reports.php here] are automatically obtained from the system update SOAP.

== CTR System Titles ==
{| class="wikitable" border="1"
|-
! System Category
! Bit Mask(s)
! Category Bit Mask
|-
| Application (SYSTEM_APPLICATION)
| Normal<nowiki>|</nowiki>System
| 0x0010
|-
| System Data Archives (SYSTEM_CONTENT)
| Contents<nowiki>|</nowiki>CannotExecution<nowiki>|</nowiki>System
| 0x001B
|-
| Shared Data Archives (SHARED_CONTENT)
| Contents<nowiki>|</nowiki>CannotExecution<nowiki>|</nowiki>System<nowiki>|</nowiki>NotRequireRightForMount
| 0x009B
|-
| System Data Archives (AUTO_UPDATE_CONTENT)
| Contents<nowiki>|</nowiki>CannotExecution<nowiki>|</nowiki>System<nowiki>|</nowiki>NotRequireUserApproval<nowiki>|</nowiki>NotRequireRightForMount
| 0x00DB
|-
| Applet (APPLET)
| Normal<nowiki>|</nowiki>System<nowiki>|</nowiki>RequireBatchUpdate
| 0x0030
|-
| Module (BASE)
| Normal<nowiki>|</nowiki>System<nowiki>|</nowiki>RequireBatchUpdate<nowiki>|</nowiki>CanSkipConvertJumpId
| 0x0130
|-
| Firmware (FIRMWARE)
| Normal<nowiki>|</nowiki>CannotExecution<nowiki>|</nowiki>System<nowiki>|</nowiki>RequireBatchUpdate<nowiki>|</nowiki>CanSkipConvertJumpId
| 0x0138
|}

=== 00040010 - System Applications ===
The versions for CHN, KOR, and TWN are separate from the other regions.

{| class="wikitable" border="1"
|-
! JPN TIDLow
! USA TIDLow
! EUR TIDLow
! CHN TIDLow
! KOR TIDLow
! TWN TIDLow
! Description
! JPN Versions
! EUR Versions
! USA Versions
! CHN Versions
! KOR Versions
! TWN Versions
! Status
|-
| 00020000
| 00021000
| 00022000
| 00026000
| 00027000
| 00028000
| [[System Settings]] (mset)
| [[1.0.0-0|v0]], [[2.0.0-2|v1027]], [[3.0.0-5|v2060]], [[4.0.0-7|v3074]], [[5.0.0-11|v4097]], [[6.0.0-11|v5127]], [[7.0.0-13|v6157]], [[7.2.0-17|v7173]], [[8.1.0-0_New3DS|v8198]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v9224]], [[9.6.0-24|v10245]], [[10.6.0-31|v10256]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1027]], [[3.0.0-5|v2061]], [[4.0.0-7|v3075]], [[5.0.0-11|v4097]], [[6.0.0-11|v5127]], [[7.0.0-13|v6157]], [[7.2.0-17|v7174]], [[9.0.0-20|v8202]], [[9.6.0-24|v9220]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1027]], [[3.0.0-5|v2062]], [[4.0.0-7|v3078]], [[5.0.0-11|v4098]], [[6.0.0-11|v5128]], [[7.0.0-13|v6157]], [[7.2.0-17|v7174]], [[9.0.0-20|v8203]], [[9.6.0-24|v9221]]
| [[4.0.0-7|v8]], [[4.4.0-10|v1024]](CHN-only sysupdate for just mset), [[5.0.0-11|v2049]], [[7.0.0-13|v3075]]
| [[4.0.0-7|v1026]], [[5.0.0-11|v2049]], [[7.0.0-13|v4098]]
| [[4.1.0-8|v8]], [[4.2.0-9|v1024]], [[5.0.0-11|v2050]], [[7.0.0-13|v3074]]
| Active
|-
| 00020100
| 00021100
| 00022100
| 00026100
| 00027100
| 00028100
| [[Download Play]] (dlplay)
| [[1.0.0-0|v0]], [[2.1.0-4|v1026]], [[4.0.0-7|v2051]], [[9.0.0-20|v3072]](Also for [[8.1.0-0_New3DS]])
| [[1.0.0-0|v0]], [[2.1.0-4|v1026]], [[4.0.0-7|v2051]], [[9.0.0-20|v3073]]
| [[1.0.0-0|v0]], [[2.1.0-4|v1026]], [[4.0.0-7|v2051]], [[9.0.0-20|v3073]]
| [[4.0.0-7|v4]]
| [[4.0.0-7|v1027]]
| [[4.1.0-8|v4]]
| Active
|-
| 00020200
| 00021200
| 00022200
| 00026200
| 00027200
| 00028200
| [[Activity Log]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[3.0.0-5|v2051]], [[10.6.0-31|v2080]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[3.0.0-5|v2054]], [[7.0.0-13|v2064]]
| Same as EUR
| [[4.0.0-7|v3]]
| [[4.0.0-7|v2]], [[7.0.0-13|v16]]
| [[4.1.0-8|v2]]
| Active
|-
| 00020300
| 00021300
| 00022300
| 00026300
| 00027300
| 00028300
| [[Health and Safety Information]]
| [[1.0.0-0|v0]], [[4.0.0-7|v1024]], [[6.0.0-11|v2050]]
| [[1.0.0-0|v0]], [[3.0.0-5|v1024]], [[4.0.0-7|v2050]], [[6.0.0-11|v3077]]
| [[1.0.0-0|v0]], [[4.0.0-7|v1026]], [[6.1.0-12U|v2051]]
| [[4.0.0-7|v5]]
| [[4.0.0-7|v2]]
| [[4.1.0-8|v5]]
| Active
|-
| 20020300
| 20021300
| 20022300
| N/A
| N/A
| N/A
| [[New_3DS]] [[Health and Safety Information]]
| [[8.1.0-0_New3DS|v2]], [[9.3.0-21|v17]]
| [[8.1.0-0_New3DS|v1]]
| Same as EUR.
| N/A
| N/A
| N/A
| Active
|-
| 00020400
| 00021400
| 00022400
| 00026400
| 00027400
| 00028400
| [[Nintendo 3DS Camera]] (CtrApp)
| [[1.0.0-0|v0]], [[2.1.0-4|v16]], [[3.0.0-5|v1038]], [[4.0.0-7|v2048]], [[6.0.0-11|v3073]], [[9.0.0-20|v4097]](Also for [[8.1.0-0_New3DS]]), [[10.6.0-31|v4112]]
| [[1.0.0-0|v0]], [[2.1.0-4|v16]], [[3.0.0-5|v1039]], [[4.0.0-7|v2048]], [[6.0.0-11|v3073]], [[7.0.0-13|v3088]], [[9.0.0-20|v4097]]
| [[1.0.0-0|v0]], [[2.1.0-4|v16]], [[3.0.0-5|v1039]], [[4.0.0-7|v2048]], [[6.1.0-12U|v3074]], [[7.0.0-13|v3088]], [[9.0.0-20|v4097]]
| [[4.0.0-7|v3]]
| [[4.0.0-7|v2]], [[7.0.0-13|v1040]]
| [[4.1.0-8|v3]]
| Active
|-
| 00020500
| 00021500
| 00022500
| 00026500
| 00027500
| 00028500
| [[Nintendo 3DS Sound]] (CtrApp)
| [[1.0.0-0|v0]], [[2.1.0-4|v1027]], [[3.0.0-5|v2049]], [[4.0.0-7|v3072]], [[7.0.0-13|v3089]], [[10.6.0-31|3104]]
| [[1.0.0-0|v0]], [[2.1.0-4|v1027]], [[3.0.0-5|v2049]], [[4.0.0-7|v3072]], [[7.0.0-13|v3088]]
| [[1.0.0-0|v0]], [[2.1.0-4|v1027]], [[3.0.0-5|v2049]], [[4.0.0-7|v3072]], [[7.0.0-13|v3088]]
| [[4.0.0-7|v2]]
| [[4.0.0-7|v2]], [[7.0.0-13|v16]]
| [[4.1.0-8|v3]]
| Active
|-
| 00020700
| 00021700
| 00022700
| 00026700
| 00027700
| 00028700
| [[Mii Maker]] (EDIT)
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[7.0.0-13|v2055]], [[10.6.0-31|v2064]]
| Same as JPN
| Same as JPN
| [[4.0.0-7|v1]]
| [[4.0.0-7|v1]], [[7.0.0-13|v16]]
| [[4.1.0-8|v2]]
| Active
|-
| 00020800
| 00021800
| 00022800
| 00026800
| 00027800
| 00028800
| [[StreetPass Mii Plaza]] (MEET)
| [[1.0.0-0|v0]], v1027, [[2.1.0-4|v2048]], [[3.0.0-5|v3087]], [[3.0.0-6|v4096]], [[6.0.0-11|v5121]]
| [[1.0.0-0|v0]], v1027, [[2.1.0-4|v2048]], [[3.0.0-5|v3087]], [[3.0.0-6|v4096]], [[6.0.0-11|v5122]]
| [[1.0.0-0|v0]], v1027, [[2.1.0-4|v2048]], [[3.0.0-5|v3087]], [[3.0.0-6|v4096]], [[6.1.0-12U|v5124]], [[7.0.0-13|v5136]]
| [[4.0.0-7|v0]], [[4.4.0-10|v4096]]
| [[4.0.0-7|v1]], [[4.4.0-10|v4096]], [[7.0.0-13|v5120]]
| [[4.1.0-8|v1]], [[4.4.0-10|v4096]]
| Active
|-
| 00020900
| 00021900
| 00022900
| N/A
| 00027900
| 00028900
| [[eShop]] (tiger)
| [[2.0.0-2|v4]], [[2.1.0-3|v1026]], [[3.0.0-5|v2057]], [[4.0.0-7|v3081]], [[4.1.0-8|v4096]], [[4.2.0-9|v5123]], [[4.3.0-10|v6146]], [[5.0.0-11|v7169]], [[7.0.0-13|v8206]], [[7.1.0-14|v9231]], [[7.2.0-17|v10245]], [[8.0.0-18|v11265]], [[8.1.0-19|v12288]], [[9.0.0-20|v13320]], [[9.3.0-21|v15366]], [[9.5.0-22|v16384]], [[9.6.0-24|v17421]], [[9.7.0-25|v18432]], [[10.0.0-27|v19465]], [[10.4.0-29|v20483]], [[10.7.0-32|v21504]]
| [[2.0.0-2|v4]], [[2.1.0-3|v1026]], [[3.0.0-5|v2058]], [[4.0.0-7|v3081]], [[4.1.0-8|v4096]], [[4.2.0-9|v5123]], [[4.3.0-10|v6146]], [[5.0.0-11|v7171]], [[7.0.0-13|v8206]], [[7.1.0-14|v9231]], [[7.2.0-17|v10245]], [[8.0.0-18|v11265]], [[8.1.0-19|v12288]], [[9.0.0-20|v13320]], [[9.3.0-21|v15366]], [[9.5.0-22|v16384]], [[9.6.0-24|v17421]], [[9.7.0-25|v18432]], [[10.0.0-27|v19465]], [[10.4.0-29|v20482]], [[10.7.0-32|v21505]]
| [[2.0.0-2|v4]], [[2.1.0-3|v1026]], [[3.0.0-5|v2058]], [[4.0.0-7|v3081]], [[4.1.0-8|v4096]], [[4.2.0-9|v5123]], [[4.3.0-10|v6146]], [[5.0.0-11|v7170]], [[7.0.0-13|v8206]], [[7.1.0-14|v9231]], [[7.2.0-17|v10246]], [[8.0.0-18|v11265]], [[8.1.0-19|v12288]], [[9.0.0-20|v13321]], [[9.3.0-21|v15366]], [[9.5.0-22|v16384]], [[9.6.0-24|v17422]], [[9.7.0-25|v18432]], [[10.0.0-27|v19465]], [[10.4.0-29|v20482]], [[10.7.0-32|v21506]]
| N/A
| [[4.0.0-7|v3082]], [[4.1.0-8|v4096]], [[4.2.0-9|v5123]], [[4.3.0-10|v6146]], [[5.0.0-11|v7169]], [[7.0.0-13|v8205]], [[7.1.0-14|v9231]], [[8.1.0-19|v12288]], [[9.0.0-20|v13320]], [[9.3.0-21|v15366]], [[9.5.0-22|v16384]], [[9.6.0-24|v17420]], [[9.7.0-25|v18432]], [[10.0.0-27|v19465]], [[10.4.0-29|v20482]]
| [[4.1.0-8|v4096]], [[4.2.0-9|v5123]], [[4.3.0-10|v6146]], [[5.0.0-11|v7170]], [[7.0.0-13|v8205]], [[7.1.0-14|v9231]], [[8.1.0-19|v12288]], [[9.3.0-21|v15366]], [[9.5.0-22|v16384]], [[9.6.0-24|v17421]], [[9.7.0-25|v18432]], [[10.0.0-27|v19465]]
| Active
|-
| 00020A00
| 00021A00
| 00022A00
| N/A
| 00027A00
| 00028A00
| [[System Transfer]] (CARDBOARD)
| [[2.0.0-2|v4]], [[3.0.0-5|v1035]], [[4.0.0-7|v2050]], [[5.0.0-11|v3074]], [[7.0.0-13|v4109]], [[9.0.0-20|v5130]], [[9.6.0-24|v6154]]
| [[2.0.0-2|v4]], [[3.0.0-5|v1035]], [[4.0.0-7|v2050]], [[5.0.0-11|v3073]], [[7.0.0-13|v4109]], [[9.0.0-20|v5131]], [[9.6.0-24|v6155]]
| [[2.0.0-2|v4]], [[3.0.0-5|v1035]], [[4.0.0-7|v2051]], [[5.0.0-11|v3073]], [[7.0.0-13|v4109]], [[9.0.0-20|v5131]], [[9.6.0-24|v6156]]
| N/A
| [[4.0.0-7|v2]], [[5.0.0-11|v1025]], [[7.0.0-13|v2061]], [[9.0.0-20|v3082]]
| [[4.1.0-8|v2]], [[5.0.0-11|v1025]], [[7.0.0-13|v2061]]
| Active
|-
| 00020B00
| 00021B00
| 00022B00
| N/A
| N/A
| N/A
| [[Nintendo Zone]] ("Nintendo")
| [[1.0.0-0|v0]], [[3.0.0-5|v1034]]
| Same as JPN
| Same as JPN
| N/A
| N/A
| N/A
| Active
|-
| 00020D00
| 00021D00
| 00022D00
| 00026D00
| 00027D00
| 00028D00
| [[Face Raiders]]
| [[1.0.0-0|v0]], [[2.1.0-4|v1028]]
| [[1.0.0-0|v0]], [[2.1.0-4|v1028]], [[7.0.0-13|v1040]]
| Same as EUR
| [[4.0.0-7|v0]]
| [[4.0.0-7|v0]]
| [[4.1.0-8|v2]]
| Active
|-
| 20020D00
| 20021D00
| 20022D00
| N/A
| N/A
| N/A
| [[New_3DS]] [[Face Raiders]]
| [[8.1.0-0_New3DS|v2050]]
| [[8.1.0-0_New3DS|v2049]]
| Same as EUR.
| N/A
| N/A
| N/A
| Active
|-
| 00020E00
| 00021E00
| 00022E00
| 00026E00
| 00027E00
| 00028E00
| [[AR Games]] (AR_ACT)
| [[1.0.0-0|v0]], [[2.1.0-4|v1026]]
| [[1.0.0-0|v0]], [[2.1.0-4|v1026]], [[7.0.0-13|v1040]]
| [[1.0.0-0|v0]], [[2.1.0-4|v1027]], [[7.0.0-13|v1040]]
| [[4.0.0-7|v0]]
| [[4.0.0-7|v0]], [[7.0.0-13|v16]]
| [[4.1.0-8|v1]]
| Active
|-
| 00020F00
| 00021F00
| 00022F00
| 00026F00
| 00027F00
| 00028F00
| SAFE_MODE [[System Settings#System Updater|System Updater]] (mset)
| [[1.0.0-0|v0]], [[3.0.0-5|v1024]], [[6.0.0-11|v2049]]
| [[1.0.0-0|v0]], [[3.0.0-5|v1024]], [[6.0.0-11|v2050]]
| Same as JPN
| [[4.0.0-7|v1]], [[6.0.0-11|v1026]]
| [[4.0.0-7|v1]]
| [[4.1.0-8|v1]]
| Active
|-
| 00023000
| 00024000
| 00025000
| N/A
| N/A
| N/A
| Promotional video
| [[1.1.0-1|v2]], [[2.0.0-2|v2048]]
| [[1.1.0-1|v<unknown>]], [[2.0.0-2|v2048]]
| [[1.1.0-1|v0]], [[2.0.0-2|v2048]]
| N/A
| N/A
| N/A
| Stubbed
|-
| 0002BF00
| 0002C000
| 0002C100
| N/A
| N/A
| N/A
| Nintendo Network ID Settings (act)
| [[7.0.0-13|v14]], [[7.2.0-17|v1029]], [[9.0.0-20|v2051]], [[9.3.0-21|v3072]]
| Same as JPN
| Same as JPN
| N/A
| N/A
| N/A
| Active
|-
| 20023100
| 20024100
| 20025100
| N/A
| N/A
| N/A
| [[microSD Management]] ('mcopy') ([[New_3DS]]-only)
| [[8.1.0-0_New3DS|v8]], [[9.0.0-20|v1024]]
| [[8.1.0-0_New3DS|v4]]
| [[8.1.0-0_New3DS|v5]]
| N/A
| N/A
| N/A
| Available
|-
| 2002C800
| 2002CF00
| 2002D000
| N/A
| 2002D700
| N/A
| [[New_3DS]]-only, currently stubbed. Placeholder exheader name is "menu".
| [[8.1.0-0_New3DS|v2]], [[9.0.0-20|v18]], [[9.3.0-21|v34]], [[9.6.0-24|v50]]
| [[8.1.0-0_New3DS|v1]], [[9.3.0-21|v17]], [[9.6.0-24|v34]]
| [[8.1.0-0_New3DS|v1]], [[9.3.0-21|v18]], [[9.6.0-24|v33]]
| N/A
| [[9.6.0-24|v2]]
| N/A
| Stubbed
|-
| 2002C900
| 2002D100
| 2002D200
| N/A
| 2002D800
| N/A
| [[New_3DS]]-only, currently stubbed. Placeholder exheader name is "friend".
| [[8.1.0-0_New3DS|v1]]
| Same as JPN.
| [[8.1.0-0_New3DS|v0]], [[9.3.0-21|v16]]
| N/A
| [[9.6.0-24|v2]]
| N/A
| Stubbed
|-
| 2002CA00
| 2002D300
| 2002D400
| N/A
| 2002D900
| N/A
| [[New_3DS]]-only, currently stubbed. Placeholder exheader name is "newslist".
| [[8.1.0-0_New3DS|v0]], v1([[Home_Menu|JPN-only]] Oct 2, 2014 "sysupdate", actually uploaded on 09-29-14. Identical to v0, same TMDs besides title-versions)
| [[8.1.0-0_New3DS|v2]]
| [[8.1.0-0_New3DS|v0]]
| N/A
| [[9.6.0-24|v2]]
| N/A
| Stubbed
|-
| 2002CB00
| 2002D500
| 2002D600
| N/A
| 2002DA00
| N/A
| [[New_3DS]]-only, currently stubbed. Placeholder exheader name is "cherry".
| [[8.1.0-0_New3DS|v0]], [[9.0.0-20|v1]]
| [[8.1.0-0_New3DS|v2]]
| Same as EUR.
| N/A
| [[9.6.0-24|v1]]
| N/A
| Stubbed
|}

The "act" application seems to use a web browser with webkit?

Regardless of version, the ExeFS:/.code for mset is the same for USA/EUR/JPN. The [[4.0.0-7]] version of mset([[4.1.0-8]] for TWN) has the same ExeFS:/.code for all regions(JPN, USA, EUR, CHN, KOR, TWN). The [[5.0.0-11]] mset ExeFS:/.code is the same for all regions as well, except for CHN. The [[7.0.0-13]] mset ExeFS:/.code is unique for the following regions: CHN, KOR, and TWN.

=== 0004001B - [[NCCH#CFA|System Data Archives]] ===
{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! Versions
|-
| 00010002
| [[ClCertA]]
| [[1.0.0-0|v0]]
|-
| 00010702
| [[NS CFA]]
| [[3.0.0-5|v0]], [[6.0.0-11|v1028]], [[6.3.0-12|v2048]], [[7.0.0-13|v3073]], [[9.0.0-20|v4096]](also for [[8.1.0-0_New3DS]])
|-
| 00010802
| This CFA only contains a 1-byte "dummy.txt" in the RomFS, which contains '0'.
| [[6.3.0-12|v0]], [[9.5.0-23|v1024]], [[10.5.0-30|v2048]]
|-
| 00018002
| Same contents as 00010802. Starting with [[7.1.0-15]], the "dummy.txt" file was removed from RomFS: this CFA RomFS now contains web-browser data(similar to 00018102) for NNID / networking, etc.
| [[7.0.0-13|v14]], [[7.1.0-15|v1025]], [[7.2.0-17|v2055]], [[9.0.0-20|v3078]], [[9.3.0-21|v4096]], [[9.6.0-24|v5120]]
|-
| 00018102
| This contains local web-browser data(html/js, gfx, etc) for the Miiverse Offline-mode.
| [[7.0.0-13|v11]], [[9.0.0-20|v1025]](also for [[8.1.0-0_New3DS]])
|-
| 00018202
| This contains the webkit/OSS [[CRO0|CROs]] used with the Miiverse applet and the "act" application.
| [[7.0.0-13|v7]], [[8.1.0-0_New3DS|v1026]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v2050]]
|-
| 00019002
| [[Fangate_updater]]
| [[9.3.0-21|v2]], [[9.6.0-24|v1026]]
|}

=== 00040030 - Applets===
{| class="wikitable" border="1"
|-
! JPN TitleIDLow
! USA TitleIDLow
! EUR TitleIDLow
! CHN TitleIDLow
! KOR TitleIDLow
! TWN TitleIDLow
! Description
! JPN Versions
! USA Versions
! EUR Versions
|-
| 00008102
| 00008102
| 00008102
| 00008102
| 00008102
| 00008102
| [[NS#Alternate menu|Alternate menu]]
| N/A
|-
| 00008202
| 00008F02
| 00009802
| 0000a102
| 0000a902
| 0000b102
| [[Home Menu|Home Menu]] (menu)
| [[1.0.0-0|v0]], [[2.0.0-2|v1027]], [[2.1.0-3|v2049]], [[2.2.0-X|v3075]], [[3.0.0-5|v4111]], [[4.0.0-7|v5131]], [[4.2.0-9|v6146]], [[5.0.0-11|v7172]], [[6.0.0-11|v8198]], [[7.0.0-13|v9230]], [[8.1.0-0_New3DS|v10250]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v13313]], [[9.1.0-20J|v14336]], [[9.2.0-20|v15360]], [[9.3.0-21|v16402]], [[9.4.0-21|v17408]], [[9.5.0-22|v18432]], [[9.6.0-24|v19476]], [[9.7.0-25|v20487]], [[9.8.0-25|v22528]], [[10.1.0-27|v23552]], [[10.2.0-28|v24576]], [[10.3.0-28|v25600]], [[10.4.0-29|v26626]], [[10.6.0-31|v27648]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1027]], [[2.1.0-3|v2049]], [[2.2.0-X|v3075]], [[3.0.0-5|v4111]], [[4.0.0-7|v5131]], [[4.2.0-9|v6146]], [[5.0.0-11|v7172]], [[6.0.0-11|v8198]], [[7.0.0-13|v9230]], [[8.1.0-0_New3DS|v10250]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v11272]], [[9.2.0-20|v12288]], [[9.3.0-21|v13330]], [[9.4.0-21|v14336]], [[9.5.0-22|v15360]], [[9.6.0-24|v16404]], [[9.7.0-25|v17415]], [[9.8.0-25|v19456]], [[9.9.0-26|v20480]], [[10.1.0-27|v21504]], [[10.2.0-28|v22528]], [[10.3.0-28|v23552]], [[10.4.0-29|v24578]], [[10.6.0-31|v25600]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1027]], [[2.1.0-3|v2049]], [[2.2.0-X|v3075]], [[3.0.0-5|v4111]], [[4.0.0-7|v5131]], [[4.2.0-9|v6146]], [[5.0.0-11|v7172]], [[6.0.0-11|v8198]], [[7.0.0-13|v9230]], [[8.1.0-0_New3DS|v10250]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v11272]], [[9.2.0-20|v12288]], [[9.3.0-21|v13330]], [[9.4.0-21|v14336]], [[9.5.0-22|v15360]], [[9.6.0-24|v16404]], [[9.7.0-25|v17415]], [[9.8.0-25|v19456]], [[10.1.0-27|v20480]], [[10.2.0-28|v21504]], [[10.3.0-28|v22528]], [[10.4.0-29|v23554]], [[10.6.0-31|v24576]]
|-
| 00008402
| 00009002
| 00009902
| 0000A202
| 0000AA02
| 0000B202
| Camera applet used by Home-menu (CtrApp)
| v0, v1036, [[9.0.0-20|v2049]](Also for [[8.1.0-0_New3DS]])
| Same as JPN
| Same as JPN
|-
| 00008502
| 00009102
| 00009A02
| ?
| ?
| ?
| Not available on CDN
| ?
|
|
|-
| 00008602
| 00009202
| 00009B02
| 0000A402
| 0000AC02
| 0000B402
| Instruction Manual, applet for displaying instruction manuals
| v0, v1026, v2048, v3072, [[5.0.0-11|v4097]], [[9.0.0-20|v5120]](Also for [[8.1.0-0_New3DS]])
| Same as JPN
| Same as JPN
|-
| 00008702
| 00009302
| 00009C02
| 0000A502
| 0000AD02
| 0000B502
| Game Notes (Cherry)
| v0, v1026, v2049, [[5.0.0-11|v3073]], [[9.0.0-20|v4096]](Also for [[8.1.0-0_New3DS]])
| Same as JPN
| Same as JPN
|-
| 00008802
| 00009402
| 00009D02
| 0000A602
| 0000AE02
| 0000B602
| [[Internet Browser]] (spider)
| [[2.0.0-2|v6]], [[2.1.0-4|v1024]], [[4.0.0-7|v2050]], [[5.0.0-11|v3074 (EUR)/v3075(USA,JAP)]], [[7.0.0-13|v3088]], [[7.1.0-16|v4096]], [[9.5.0-23|v5121]], [[9.9.0-26|v6149]], [[10.2.0-28|v7168]], [[10.6.0-31|v8192]], [[10.7.0-32|v9232]]
| Same as JPN
| Same as JPN
|-
| 20008802
| 20009402
| 20009D02
| ?
| 2000AE02
| N/A
| [[New_3DS]] [[Internet Browser]] (SKATER)
| [[8.1.0-0_New3DS|v10]], [[9.3.0-21|v1027]], [[9.6.0-24|v2051]], [[9.9.0-26|v3077]], [[10.2.0-28|v4096]], [[10.4.0-29|v5121]], [[10.6.0-31|v6144]], [[10.7.0-32|v7184]]
| Same as JPN
| Same as JPN
|-
| 00008A02
| 00008A02
| 00008A02
| 00008A02
| 00008A02
| 00008A02
| [[ErrDisp]]
| v0, v1025, [[2.2.0-X|v2048]], [[3.0.0-5|v3072]], [[4.0.0-7|v4096]], [[5.0.0-11|v5121]], [[8.0.0-18|v6144]], [[9.0.0-20|v7168]](Also for [[8.1.0-0_New3DS]])
| Same as JPN
| Same as JPN
|-
| 00008A03
| 00008A03
| 00008A03
| 00008A03
| 00008A03
| 00008A03
| SAFE_MODE [[ErrDisp]]
| v0
| Same as JPN
| Same as JPN
|-
| 20008A03
| 20008A03
| 20008A03
| ?
| 20008A03
| N/A
| [[New_3DS]] SAFE_MODE [[ErrDisp]]
| [[8.1.0-0_New3DS|v7169]]
| Same as JPN
| Same as JPN
|-
| 00008D02
| 00009602
| 00009F02
| 0000A702
| 0000AE02
| 0000B702
| Friend List (friend)
| v0, v1026, [[2.2.0-X|v2051]], v3082, v4099, [[7.0.0-13|v5120]], [[9.0.0-20|v6144]](Also for [[8.1.0-0_New3DS]]) (EUR v6, v1024, v3082, v4099, [[7.0.0-13|v5120]], [[9.0.0-20|v6144]])
| Same as JPN
| Same as JPN
|-
| 00008E02
| 00009702
| 0000A002
| 0000A802
| 0000B002
| 0000B802
| Notifications (newslist)
| v0, v1029, v2054, v3075, [[9.0.0-20|v4097]] (EUR v6, v1024, v2054, v3075, [[9.0.0-20|v4097]]) (JPN: ..., [[8.1.0-0_New3DS|v4096]], [[9.0.0-20|v5121]])
| Same as JPN
| Same as JPN
|-
| 0000C002
| 0000C802
| 0000D002
| 0000D802
| 0000DE02
| 0000E402
| Software Keyboard (swkbd)
| v0, v1026, v2053, [[7.0.0-13|v3072]], [[9.0.0-20|v4096]](Also for [[8.1.0-0_New3DS]])
| Same as JPN
| Same as JPN
|-
| 0000C003
| 0000C803
| 0000D003
| 0000D803
| 0000DE03
| 0000E403
| SAFE_MODE Software Keyboard (swkbd)
| v0
| Same as JPN
| Same as JPN
|-
| 2000C003
| 2000C803
| 2000D003
| ?
| 2000DE03
| N/A
| [[New_3DS]] SAFE_MODE Software Keyboard (swkbd)
| [[8.1.0-0_New3DS|v0]](for JPN this is v1024)
| Same as JPN
| Same as JPN
|-
| 0000C102
| 0000C902
| 0000D102
| 0000D902
| 0000DF02
| 0000E502
| appletEd (MiiSelector)
| v0, v1026, [[9.0.0-20|v2048]](Also for [[8.1.0-0_New3DS]]), [[9.3.0-21|v3077]]
| Same as JPN
| Same as JPN
|-
| 0000C302
| 0000CB02
| 0000D302
| 0000DB02
| 0000E102
| 0000E702
| PNOTE_AP (Photo file selector applet, for SD-card/etc?)
| v0, v1024, [[8.1.0-0_New3DS|v2049]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v3075]], [[9.3.0-21|v4096]]
| Same as JPN
| Same as JPN
|-
| 0000C402
| 0000CC02
| 0000D402
| 0000DC02
| 0000E202
| 0000E802
| SNOTE_AP (Sound file selector applet, for SD-card/etc?)
| v0, v3, [[8.0.0-18|v1026]], [[9.0.0-20|v2048]](Also for [[8.1.0-0_New3DS]])
| Same as JPN
| Same as JPN
|-
| 0000C502
| 0000C502
| 0000C502
| 0000CF02
| 0000CF02
| 0000CF02
| error (This applet displays networking errors, etc)
| v0, v1026, v2053, v3074, [[8.1.0-0_New3DS|v4096]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v5128]], [[9.6.0-24|v6145]]
| Same as JPN
| Same as JPN
|-
| 0000C503
| 0000C503
| 0000C503
| 0000CF03
| 0000CF03
| 0000CF03
| SAFE_MODE error applet
| v0
| Same as JPN
| Same as JPN
|-
| 2000C503
| 2000C503
| 2000C503
| ?
| 2000CF03
| N/A
| [[New_3DS]] SAFE_MODE error applet
| [[8.1.0-0_New3DS|v1024]]
| Same as JPN
| Same as JPN
|-
| 0000CD02
| 0000CD02
| 0000CD02
| 0000D502
| 0000D502
| 0000D502
| extrapad ([[Circle Pad Pro]] calibration applet)
| v1, v1026, [[8.1.0-0_New3DS|v2048]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v3073]]
| Same as JPN
| Same as JPN
|-
| 0000C602
| 0000CE02
| 0000D602
| N/A
| 0000E302
| 0000E902
| mint. eShop applet, used by applications for accessing the eShop, for DLC/etc. Also used by the eShop application itself.
| v5, v1028, [[4.2.0-9|v2050]], [[5.0.0-11|v3072]], [[7.0.0-13|v4109]], [[7.2.0-17|v5125]](v5123 for JPN), [[8.0.0-18|v6145]], [[8.1.0-0_New3DS|v7168]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v8200]], [[9.3.0-21|v9224]], [[9.6.0-24|v10247]], [[9.8.0-25|v11264]], [[10.0.0-27|v12293]], [[10.1.0-27|v13312]], [[10.3.0-28|v14337]], [[10.4.0-29|v15360]], [[10.7.0-32|v16384]]
| Same as JPN
| Same as JPN
|-
| 0000BC02
| 0000BD02
| 0000BE02
| ?
| ?
| ?
| olv (Miiverse applet)
| [[7.0.0-13|v14]], [[7.2.0-17|v1024]], [[9.0.0-20|v2048]](Also for [[8.1.0-0_New3DS]]), [[9.3.0-21|v3072]], [[9.6.0-24|v4096]]
| Same as JPN
| Same as JPN
|-
| 0000F602
| 0000F602
| 0000F602
| ?
| ?
| ?
| memolib (Uses Miiverse, likely the "system library" for Miiverse)
| [[7.0.0-13|v5]], [[8.1.0-0_New3DS|v1024]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v2050]], [[9.3.0-21|v3072]]
| Same as JPN
| Same as JPN
|-
| 00008302
| 00008B02
| 0000BA02
| ?
| ?
| ?
| solv3 (Miiverse-posting applet)
| [[9.0.0-20|v6]]
| Same as JPN
| Same as JPN
|-
| 00009502
| 00009E02
| 0000B902
| ?
| ?
| ?
| Cabinet ([[amiibo Settings]])
| [[9.3.0-21|v7]], [[9.6.0-24|v1031]]
| Same as JPN
| Same as JPN
|}

Most of these processes are applets, see [[NS_and_APT_Services|here]] for details.

All of the above processes use the "SYSTEM" [[SVC|memory-region]].

The ExeFS for Home Menu is exactly the same for USA/EUR/JPN.

The Miiverse applet seems to use a web browser with webkit.

=== 0004009B - [[NCCH#CFA|System Data Archives]] (Shared Archives) ===
{| class="wikitable" border="1"
|-
! JPN TitleIDLow
! USA TitleIDLow
! EUR TitleIDLow
! Description
! Versions
|-
| 00010202
| 00010202
| 00010202
| Probably Mii-related, contains "CFL_Res.dat" in the RomFS.
| v0
|-
| 00010302
| 00010302
| 00010302
| Only exists for dev-units.
| v0, v2052
|-
| 00010402
| 00010402
| 00010402
| Mounted as "area:", contains Country and Region names
| v0, v1024, v2050, v3072, [[7.0.0-13|v4098]], [[9.6.0-24|v5122]]
|-
| 00010502
| 00010502
| 00010502
| Only exists for dev-units.
| v0, v1024, v2048
|-
| 00010602
| 00010602
| 00010602
| Non-Nintendo TLS Root-CA Certificates (RomFS contains files with filename "CACERT_PUBLIC_CA_<val>.der", where <val> is 5..8)
| v2, [[10.5.0-30|v1024]]
|-
|
|
| 00011202
| "NL/NL" dictionary.
| v0
|-
|
|
| 00011302
| "EN/GB" dictionary.
| v0
|-
|
| 00011402
|
| "EN/US" dictionary.
| v0
|-
|
|
| 00011502
| "FR/FR/regular" dictionary.
| v0
|-
|
| 00011602
|
| "FR/CA/regular" dictionary.
| v0
|-
|
|
| 00011702
| "DE/regular" dictionary.
| v0
|-
|
|
| 00011802
| "IT/IT" dictionary.
| v0
|-
| 00011902
|
|
| "JA_small/32" dictionary.
| v0
|-
|
|
| 00011B02
| "PT/PT/regular" dictionary.
| v0
|-
|
|
| 00011C02
| "RU/regular" dictionary.
| v0
|-
|
| 00011D02
| 00011D02
| "ES/ES" dictionary.
| v0
|-
|
| 00011E02
|
| "PT/BR/regular" dictionary.
| v0
|-
| 00012202
| 00012302
| 00012102
| ?contains a lists with error strings
| v1026, v2053, v3073, [[4.2.0-9|v4096]], [[5.0.0-11|v5120]], [[7.0.0-13|v6149]], [[7.2.0-17|v7168]], [[8.0.0-18|v8192]], [[9.0.0-20|v9218]], [[9.3.0-21|v10242]], [[9.6.0-24|v11269]], [[10.0.0-27|v12289]], [[10.4.0-29|v13312]], [[10.7.0-32|v13313]]
|-
| 00013202
| 00013302
| 00013102
| Mounted as "eula:"
| v0, v1024, v2049 USA: v1024, v2051, [[7.0.0-13|v3074]], [[7.2.0-17|v4100]](EUR-only), [[9.0.0-20|v4099]], [[9.9.0-26|v6144]], [[10.4.0-29|v7168]]
|-
| 00014002
| 00014002
| 00014002
| JPN/EUR/USA [[System Font]] ("font:")
| v0
|-
| 00014102
| 00014102
| 00014102
| CHN [[System Font]] ("font:")
| v0, v1024
|-
| 00014202
| 00014202
| 00014202
| KOR [[System Font]] ("font:")
| v0, v1024
|-
| 00014302
| 00014302
| 00014302
| TWN [[System Font]] ("font:")
| v0, v1024
|-
| 00015202
| 00015302
| 00015102
| Mounted as "rate:"
| v0 (EUR: v0, v1024)
|}

=== 000400DB - [[NCCH#CFA|System Data Archives]] ===
These [[NVer]] titleIDs can be found @ offset 0x320 in every [[CCI]].

{| class="wikitable" border="1"
|-
! EUR TitleIDLow
! JPN TitleIDLow
! USA TitleIDLow
! CHN TitleIDLow
! KOR TitleIDLow
! TWN TitleIDLow
! Description
! USA/EUR/JPN Versions
! CHN Versions
! TWN Versions
! KOR Versions
|-
| 00010302
| 00010302
| 00010302
| 00010302
| 00010302
| 00010302
| NGWord bad word list
| [[1.0.0-0|v0]], [[2.0.0-2|v1024]], [[3.0.0-5|v2052]], [[4.0.0-7|v3072]], [[4.3.0-10|v4096]], [[5.0.0-11|v5120]], [[9.0.0-20|v6144]], [[9.3.0-21|v7168]], [[9.6.0-24|v8192]]
| Same as USA
| Same as USA
| Same as USA
|-
| 00010502
| 00010502
| 00010502
| 00010502
| 00010502
| 00010502
| [[Nintendo Zone]] hotspot list
| [[1.0.0-0|v0]], [[2.0.0-2|v1024]], [[3.0.0-5|v2048]], [[4.0.0-7|v3073]], [[4.3.0-10|v4096]], [[4.4.0-10|v5120]], [[4.5.0-10|v6144]], [[5.0.0-11|v7169]], [[6.0.0-11|v8192]], [[6.2.0-12|v9216]], [[7.0.0-13|v10242]], [[7.2.0-17|v11267]], [[8.0.0-18|v12288]], [[9.0.0-20|v14336]], [[9.3.0-21|v15360]], [[9.6.0-24|v16386]], [[10.0.0-27|v17409]], [[10.4.0-29|18432]]
| Same as USA
| Same as USA
| Same as USA
|-
| 00016102
| 00016202
| 00016302
| 00016402
| 00016502
| 00016602
| [[NVer]]
| [[1.0.0-0|v0]], [[1.1.0-1|v16]], [[2.0.0-2|v32]], [[2.1.0-3|v48]], [[2.1.0-4|v64]], [[3.0.0-5|v80]], [[3.0.0-6|v96]], [[4.0.0-7|v112]], [[4.1.0-8|v128]], [[4.2.0-9|v144]], [[4.3.0-10|v160]], [[5.0.0-11|v176]], non-USA=[[6.0.0-11|v192]]/USA=[[6.1.0-12U|v192]], [[7.0.0-13|v208]], [[7.1.0-14|v224]], [[7.1.0-15|v240]], [[7.1.0-16|v256]], [[7.2.0-17|v272]], [[8.0.0-18|v288]], [[8.1.0-19|v304]], [[9.0.0-20|v320]], [[9.3.0-21|v336]], [[9.5.0-22|v352]], [[9.5.0-23|v368]], [[9.6.0-24|v384]], [[9.7.0-25|v400]], [[9.9.0-26|v416]], [[10.0.0-27|v432]], [[10.2.0-28|v448]], [[10.4.0-29|v464]], [[10.5.0-30|v480]], [[10.6.0-31|v496]], [[10.7.0-32|v512]]
| [[4.0.0-7|v113]], [[4.2.0-9|v128]], [[5.0.0-11|v129]], [[7.1.0-16|v130]], [[7.2.0-17|v272]], [[9.5.0-23|v131]], [[9.9.0-26|v132]]
| [[4.1.0-8|v114]], [[4.2.0-9|v133]], [[4.3.0-10|v134]], [[5.0.0-11|v136]], [[7.0.0-13|v144]], [[7.1.0-14|v160]] [[7.1.0-16|v192]], [[7.2.0-17|v272]], [[8.0.0-18|v208]], [[8.1.0-19|v224]], [[9.0.0-20|v240]], [[9.5.0-22|v272]], [[9.5.0-23|v288]], [[9.6.0-24|v304]], [[9.7.0-25|v320]], [[9.9.0-26|v336]], [[10.0.0-27|v352]], [[10.2.0-28|v368]]
| [[4.0.0-7|v113]], [[4.1.0-8|v114]], [[4.2.0-9|v133]], [[4.3.0-10|v134]], [[5.0.0-11|v136]], [[7.0.0-13|v160]], [[7.1.0-14|v176]], [[7.1.0-16|v176]], [[7.2.0-17|v272]], [[8.0.0-18|v224]], [[8.1.0-19|v240]], [[9.0.0-20|v256]], [[9.3.0-21|v272]], [[9.5.0-22|v288]], [[9.5.0-23|v304]], [[9.6.0-24|v320]], [[9.7.0-25|v336]], [[9.9.0-26|v352]], [[10.0.0-27|v368]], [[10.2.0-28|v384]]
|-
| 20016102
| 20016202
| 20016302
| N/A
| 20016502
| N/A
| [[New_3DS]] [[NVer]]
| [[8.1.0-0_New3DS|v0]], [[9.0.0-20|v320]], [[9.3.0-21|v336]], [[9.5.0-22|v352]], [[9.5.0-22|v352]], [[9.5.0-23|v368]], [[9.6.0-24|v384]], [[9.7.0-25|v400]], [[9.9.0-26|v416]], [[10.0.0-27|v432]], [[10.2.0-28|v448]], [[10.4.0-29|v464]], [[10.5.0-30|v480]], [[10.6.0-31|v496]], [[10.7.0-32|v512]]
| N/A
| N/A
| [[9.6.0-24|v320]], [[9.7.0-25|v336]], [[9.9.0-26|v352]], [[10.0.0-27|v368]], [[10.2.0-28|v384]]
|-
| 00017102
| 00017202
| 00017302
| 00017402
| 00017502
| 00017602
| [[CVer]]
| [[1.0.0-0|v1024]], [[1.1.0-1|v1045]], [[2.0.0-2|v2049]], [[2.1.0-3|v2069]], [[2.2.0-X|v2088]] [[3.0.0-5|v3088]], [[4.0.0-7|v4098]], [[4.1.0-8|v4113]], [[4.2.0-9|v4130]], [[4.3.0-10|v4145]], [[4.4.0-10|v4163]], [[4.5.0-10|v4176]], [[5.0.0-11|v5120]], [[5.1.0-11|v5136]], [[6.0.0-11|v6146]], [[6.1.0-11|v6160]], [[6.2.0-12|v6178]], [[6.3.0-12|v6192]], [[7.0.0-13|v7175]], [[7.1.0-14|v7187]], [[7.2.0-17|v7203]], [[8.0.0-18|v8196]], [[8.1.0-18|v8208]], [[8.1.0-0_New3DS|v8215]](8.1.0-0_New3DS), [[9.0.0-20|v9218]], [[9.1.0-20J|v9232]](JPN-only), [[9.2.0-20|v9248]], [[9.3.0-21|v9264]], [[9.4.0-21|v9280]], [[9.5.0-22|v9296]], [[9.6.0-24|v9319]], [[9.7.0-25|v9328]], [[9.8.0-25|v9344]], [[9.9.0-26|v9360]], [[10.0.0-27|v10240]], [[10.1.0-27|v10256]], [[10.2.0-28|v10272]], [[10.3.0-28|v10288]], [[10.4.0-29|v10304]], [[10.5.0-30|v10320]], [[10.6.0-31|v10336]], [[10.7.0-32|v10352]]
| [[1.0.0-0|v1024]], [[1.1.0-1|v1045]], [[2.0.0-2|v2049]], [[2.1.0-3|v2069]], [[2.2.0-X|v2088]] [[3.0.0-5|v3088]], [[4.0.0-7|v4098]], [[4.1.0-8|v4113]], [[4.2.0-9|v4130]], [[4.3.0-10|v4145]], [[4.4.0-10|v4163]], [[4.5.0-10|v4176]], [[5.0.0-11|v5120]], [[5.1.0-11|v5136]], [[6.0.0-11|v6146]], [[6.1.0-11|v6160]], [[6.2.0-12|v6178]], [[6.3.0-12|v6192]], [[7.0.0-13|v7175]], [[7.1.0-14|v7187]], [[7.2.0-17|v7203]], [[8.0.0-18|v8196]], [[8.1.0-18|v8208]], [[9.0.0-20|v9217]], [[9.3.0-21|v9264]], [[9.5.0-22|v9296]], [[9.6.0-24|v9319]], [[9.7.0-25|v9328]], [[9.8.0-25|v9344]], [[9.9.0-26|v9360]], [[10.0.0-27|v10240]], [[10.2.0-28|v10272]]
| Same as CHN
| Same as CHN
|}

=== 00040130 - System [[Services API|Modules]] ===
{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! Versions
|-
| 00001002
| [[Services|sm]] (Stored in [[FIRM|NATIVE_FIRM]])
| N/A
|-
| 00001003
| SAFE_MODE [[Services|sm]] (Stored in SAFE_MODE NATIVE_FIRM)
| N/A
|-
| 00001102
| [[Filesystem services‎|fs]] (Stored in [[FIRM|NATIVE_FIRM]])
| N/A
|-
| 00001103
| SAFE_MODE [[Filesystem services‎|fs]] (Stored in SAFE_MODE NATIVE_FIRM)
| N/A
|-
| 00001202
| [[Process Manager Services|pm]] (Stored in [[FIRM|NATIVE_FIRM]])
| N/A
|-
| 00001203
| SAFE_MODE [[Process Manager Services|pm]] (Stored in SAFE_MODE NATIVE_FIRM)
| N/A
|-
| 00001302
| [[Loader Services‎|loader]] (Stored in [[FIRM|NATIVE_FIRM]])
| N/A
|-
| 00001303
| SAFE_MODE [[Loader Services‎|loader]] (Stored in SAFE_MODE NATIVE_FIRM)
| N/A
|-
| 00001402
| [[PXI Services‎|pxi]] (Stored in [[FIRM|NATIVE_FIRM]])
| N/A
|-
| 00001403
| SAFE_MODE [[PXI Services‎|pxi]] (Stored in SAFE_MODE NATIVE_FIRM)
| N/A
|-
| 00001502
| [[Application Manager Services|AM]] ( Application Manager )
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[3.0.0-5|v2053]], [[4.0.0-7|v3072]], [[5.0.0-11|v4098]], [[6.0.0-11|v5120]], [[8.0.0-18|v6148]], [[8.1.0-0_New3DS|v7168]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v8192]], [[10.0.0-27|v9217]]
|-
| 00001503
| SAFE_MODE [[Application Manager Services|AM]]
| [[1.0.0-0|v0]]
|-
| 20001503
| [[New_3DS]] SAFE_MODE [[Application Manager Services|AM]]
| [[8.1.0-0_New3DS|v7169]]
|-
| 00001602
| [[Camera Services|Camera]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[3.0.0-5|v2048]], [[4.0.0-7|v3074]], [[5.0.0-11|v4098]], [[6.0.0-11|v5120]], [[7.1.0-14|v6146]], [[8.0.0-18|v7172]], [[9.0.0-20|v9216]], [[9.3.0-21|v10242]], [[10.0.0-27|v11265]]
|-
| 20001602
| [[New_3DS]] [[Camera Services|Camera]]
| [[8.1.0-0_New3DS|v8200]], [[9.0.0-20|v9218]], [[9.3.0-21|v10242]], [[10.0.0-27|v11265]]
|-
| 00001702
| [[Config Services|Config]] (cfg)
| [[1.0.0-0|v0]], [[2.0.0-2|v1024]], [[3.0.0-5|v2049]], v3072, [[4.0.0-7|v4096]], [[5.0.0-11|v5122]], [[6.0.0-11|v6145]], [[6.1.0-11|v7168]], [[7.0.0-13|v8196]], [[7.2.0-17|v9220]], [[8.0.0-18|v10243]], [[8.1.0-0_New3DS|v11265]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v12290]], [[9.3.0-21|v13315]], [[9.6.0-24|v14342]]
|-
| 00001703
| SAFE_MODE [[Config Services|Config]] (cfg)
| [[1.0.0-0|v0]]
|-
| 20001703
| [[New_3DS]] SAFE_MODE [[Config Services|Config]] (cfg)
| [[8.1.0-0_New3DS|v11265]]
|-
| 00001802
| [[Codec Services|Codec]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1025]], [[2.2.0-X|v2048]], [[3.0.0-5|v3072]], [[5.0.0-11|v4098]], [[7.0.0-13|v5120]], [[8.0.0-18|v6144]], [[9.0.0-20|v7168]](Also for [[8.1.0-0_New3DS]])
|-
| 00001803
| SAFE_MODE [[Codec Services|Codec]]
| [[1.0.0-0|v0]]
|-
| 20001803
| [[New_3DS]] SAFE_MODE [[Codec Services|Codec]]
| [[8.1.0-0_New3DS|v7169]]
|-
| 00001902
| dmnt, debugger sysmodule. This use devunit-only HIO for devunit<>pc comms. This only exists for development units(launched by NS during startup depending on certain [[Configuration_Memory]] fields' values). This is installed at the [[Factory_Setup|factory]], then later deleted at the factory on retail units.
|
|-
| 00001A02
| [[DSP Services|DSP]]
| [[1.0.0-0|v0]], [[3.0.0-5|v1024]], [[4.0.0-7|v2048]], [[5.0.0-11|v3074]], [[6.0.0-11|v4096]], [[8.0.0-18|v5120]], [[9.7.0-25|v6145]]
|-
| 00001A03
| SAFE_MODE [[DSP Services|DSP]]
| [[1.0.0-0|v0]]
|-
| 20001A03
| [[New_3DS]] SAFE_MODE [[DSP Services|DSP]]
| [[8.1.0-0_New3DS|v6145]]
|-
| 00001B02
| [[GPIO Services|GPIO]]
| [[1.0.0-0|v0]], [[5.0.0-11|v1025]], [[8.0.0-18|v2048]], [[9.5.0-22|v3073]]
|-
| 00001B03
| SAFE_MODE [[GPIO Services|GPIO]]
| [[1.0.0-0|v0]]
|-
| 20001B03
| [[New_3DS]] SAFE_MODE [[GPIO Services|GPIO]]
| [[8.1.0-0_New3DS|v3073]]
|-
| 00001C02
| [[GSP Services|GSP]]
| [[1.0.0-0|v0]], [[1.1.0-1|v1040]], [[2.0.0-2|v2049]], [[3.0.0-5|v3075]], v4098, [[4.0.0-7|v5120]], [[5.0.0-11|v6145]], [[6.0.0-11|v7168]], [[8.0.0-18|v8196]], [[9.0.0-20|v10240]], [[9.3.0-21|v11264]], [[9.6.0-24|v12294]]
|-
| 20001C02
| [[New_3DS]] [[GSP Services|GSP]]
| [[8.1.0-0_New3DS|v10243]], [[9.3.0-21|v11267]], [[9.6.0-24|v12294]]
|-
| 00001C03
| SAFE_MODE [[GSP Services|GSP]]
| [[1.0.0-0|v0]]
|-
| 20001C03
| [[New_3DS]] SAFE_MODE [[GSP Services|GSP]]
| [[8.1.0-0_New3DS|v9217]]
|-
| 00001D02
| [[HID Services|HID]] (Human Interface Devices)
| [[1.0.0-0|v0]], [[2.0.0-2|v1025]], [[2.2.0-X|v2048]], [[3.0.0-5|v3072]], [[4.0.0-7|v4096]], [[5.0.0-11|v5121]], [[7.2.0-17|v6148]], [[8.0.0-18|v7168]], [[8.1.0-0_New3DS|v8192]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v9216]], [[9.3.0-21|v10240]]
|-
| 00001D03
| SAFE_MODE [[HID Services|HID]]
| [[1.0.0-0|v0]]
|-
| 20001D03
| [[New_3DS]] SAFE_MODE [[HID Services|HID]]
| [[8.1.0-0_New3DS|v8193]]
|-
| 00001E02
| [[I2C Services|i2c]]
| [[1.0.0-0|v0]], [[3.0.0-5|v1024]], [[5.0.0-11|v2049]], [[8.0.0-18|v3076]], [[9.3.0-21|v5120]]
|-
| 20001E02
| [[New_3DS]] [[I2C Services|i2c]]
| [[8.1.0-0_New3DS|v4096]], [[9.3.0-21|v5121]]
|-
| 00001E03
| SAFE_MODE [[I2C Services|i2c]]
| [[1.0.0-0|v0]]
|-
| 20001E03
| [[New_3DS]] SAFE_MODE [[I2C Services|i2c]]
| [[8.1.0-0_New3DS|v4097]]
|-
| 00001F02
| [[MCU Services|MCU]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[2.1.0-3|v2048]], [[3.0.0-5|v3072]], [[4.0.0-7|v4102]], [[5.0.0-11|v5122]], [[6.0.0-11|v6145]], [[7.0.0-13|v7168]], [[8.0.0-18|v8192]]
|-
| 20001F02
| [[New_3DS]] [[MCU Services|MCU]]
| [[8.1.0-0_New3DS|v8192]]
|-
| 00001F03
| SAFE_MODE [[MCU Services|MCU]]
| [[1.0.0-0|v0]]
|-
| 20001F03
| [[New_3DS]] SAFE_MODE [[MCU Services|MCU]]
| [[8.1.0-0_New3DS|v9217]]
|-
| 00002002
| [[MIC Services|MIC]] (Microphone)
| [[1.0.0-0|v0]], [[5.0.0-11|v1025]], [[8.0.0-18|v2048]]
|-
| 00002102
| [[PDN Services|PDN]]
| [[1.0.0-0|v0]], [[5.0.0-11|v1025]], [[8.0.0-18|v2048]]
|-
| 00002103
| SAFE_MODE [[PDN Services|PDN]]
| [[1.0.0-0|v0]]
|-
| 20002103
| [[New_3DS]] SAFE_MODE [[PDN Services|PDN]]
| [[8.1.0-0_New3DS|v3073]]
|-
| 00002202
| [[PTM Services|PTM]] (Play time, pedometer, and battery manager)
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[2.2.0-X|v2048]], [[3.0.0-5|v3075]], v4096, [[4.0.0-7|v5120]], [[5.0.0-11|v6146]], [[6.0.0-11|v7168]], [[7.0.0-13|v8192]], [[8.0.0-18|v9219]], [[9.6.0-24|v11264]]
|-
| 20002202
| [[New_3DS]] [[PTM Services|PTM]] (Play time, pedometer, and battery manager)
| [[8.1.0-0_New3DS|v10240]], [[9.6.0-24|v11264]]
|-
| 00002203
| SAFE_MODE [[PTM Services|PTM]]
| [[1.0.0-0|v0]]
|-
| 20002203
| [[New_3DS]] SAFE_MODE [[PTM Services|PTM]]
| [[8.1.0-0_New3DS|v10241]]
|-
| 00002302
| [[SPI Services|spi]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1025]], [[5.0.0-11|v2049]], [[8.0.0-18|v3072]]
|-
| 20002302
| [[New_3DS]] [[SPI Services|spi]]
| [[8.1.0-0_New3DS|v4096]]
|-
| 00002303
| SAFE_MODE [[SPI Services|spi]]
| [[1.0.0-0|v0]]
|-
| 20002303
| [[New_3DS]] SAFE_MODE [[SPI Services|spi]]
| [[8.1.0-0_New3DS|v4097]]
|-
| 00002402
| [[AC Services|AC]] (Network manager)
| [[1.0.0-0|v0]], [[1.1.0-1|v1024]], [[2.0.0-2|v2052]], [[2.1.0-3|v3072]], [[3.0.0-5|v4101]], [[5.0.0-11|v5122]], [[7.0.0-13|v6145]], [[8.0.0-18|v7172]], [[9.0.0-20|v8192]](Also for [[8.1.0-0_New3DS]]), [[9.3.0-21|v9216]]
|-
| 00002403
| SAFE_MODE [[AC Services|AC]]
| [[1.0.0-0|v0]]
|-
| 20002403
| [[New_3DS]] SAFE_MODE [[AC Services|AC]]
| [[8.1.0-0_New3DS|v8193]]
|-
| 00002602
| [[CECD Services|Cecd]] (StreetPass)
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[2.2.0-X|v2048]], [[3.0.0-5|v3073]], [[4.0.0-7|v4097]], [[5.0.0-11|v5122]], [[6.0.0-11|v6144]], [[6.2.0-12|v7170]], [[7.0.0-13|v8193]], [[8.0.0-18|v9216]], [[9.0.0-20|v10240]]
|-
| 00002702
| [[CSND Services|CSND]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1025]], [[4.0.0-7|v2048]], [[5.0.0-11|v3073]], [[8.0.0-18|v4096]], [[9.0.0-20|v5120]]
|-
| 00002703
| SAFE_MODE [[CSND Services|CSND]]
| [[1.0.0-0|v0]]
|-
| 20002703
| [[New_3DS]] SAFE_MODE [[CSND Services|CSND]]
| [[8.1.0-0_New3DS|v5121]]
|-
| 00002802
| [[DLP Services|DLP]] ([[Download Play]])
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[2.2.0-X|v2048]], [[3.0.0-5|v3078]], [[5.0.0-11|v4099]], [[8.0.0-18|v5123]], [[9.0.0-20|v6145]](Also for [[8.1.0-0_New3DS]]), [[9.6.0-24|v7174]], [[10.0.0-27|v8192]]
|-
| 00002902
| [[HTTP Services|HTTP]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[2.1.0-3|v2049]], [[2.2.0-X|v3072]], [[3.0.0-5|v4099]], [[4.0.0-7|v5122]], [[5.0.0-11|v6145]], [[7.0.0-13|v7171]], [[7.1.0-14|v8192]], [[8.0.0-18|v9220]], [[8.1.0-18|v10245]], [[8.1.0-0_New3DS|v11264]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v12288]], [[9.6.0-24|v13318]]
|-
| 00002903
| SAFE_MODE [[HTTP Services|HTTP]]
| [[1.0.0-0|v0]]
|-
| 20002903
| [[New_3DS]] SAFE_MODE [[HTTP Services|HTTP]]
| [[8.1.0-0_New3DS|v10241]]
|-
| 00002A02
| [[MP Services|MP]]
| [[1.0.0-0|v0]], [[5.0.0-11|v1025]], [[8.0.0-18|v2048]]
|-
| 00002A03
| SAFE_MODE [[MP Services|MP]]
| [[1.0.0-0|v0]]
|-
| 00002B02
| [[NDM Services|NDM]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1025]], [[3.0.0-5|v2049]], [[4.0.0-7|v3072]], [[5.0.0-11|v4098]], [[8.0.0-18|v5124]], [[8.1.0-0_New3DS|v6144]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v7169]]
|-
| 00002C02
| [[NIM Services|NIM]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1028]], [[3.0.0-5|v2055]], [[4.0.0-7|v3074]], [[5.0.0-11|v4100]], [[6.0.0-11|v5120]], [[7.0.0-13|v6148]], [[7.2.0-17|v7174]], [[8.0.0-18|v8195]], [[8.1.0-0_New3DS|v9217]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v10249]], [[9.3.0-21|v11267]], [[9.6.0-24|v12296]], [[10.0.0-27|v13313]]
|-
| 00002C03
| SAFE_MODE [[NIM Services|NIM]]
| [[1.0.0-0|v0]]
|-
| 20002C03
| [[New_3DS]] SAFE_MODE [[NIM Services|NIM]]
| [[8.1.0-0_New3DS|v9217]]
|-
| 00002D02
| [[NWM Services|NWM]] ( Low-level wifi manager )
| [[1.0.0-0|v0]], [[1.1.0-1|v1024]], [[2.0.0-2|v2052]], [[2.2.0-X|v3072]], [[3.0.0-5|v4101]], [[4.0.0-7|v5120]], [[5.0.0-11|v6148]], [[6.0.0-11|v7169]], [[7.2.0-17|v8196]], [[8.0.0-18|v9216]], [[9.0.0-20|v10240]]
|-
| 00002D03
| SAFE_MODE [[NWM Services|NWM]]
| [[1.0.0-0|v0]], [[6.0.0-11|v5120]]
|-
| 20002D03
| [[New_3DS]] SAFE_MODE [[NWM Services|NWM]]
| [[8.1.0-0_New3DS|v10241]]
|-
| 00002E02
| [[Socket Services|Sockets]]
| [[1.0.0-0|v0]], [[1.1.0-1|v1024]], [[2.0.0-2|v2053]], [[3.0.0-5|v3075]], [[4.0.0-7|v4096]], [[5.0.0-11|v5121]], [[8.0.0-18|v6144]], [[9.0.0-20|v7168]], [[10.6.0-31|v8192]]
|-
| 00002E03
| SAFE_MODE [[Socket Services|Sockets]]
| [[1.0.0-0|v0]]
|-
| 20002E03
| [[New_3DS]] SAFE_MODE [[Socket Services|Sockets]]
| [[8.1.0-0_New3DS|v7169]]
|-
| 00002F02
| [[SSL Services|SSL]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1024]], [[2.1.0-3|v2048]], [[3.0.0-5|v3072]], [[4.0.0-7|v4096]], [[5.0.0-11|v5122]], [[8.0.0-18|v6144]], [[9.0.0-20|v7168]], [[9.6.0-24|v8198]]
|-
| 00002F03
| SAFE_MODE [[SSL Services|SSL]]
| [[1.0.0-0|v0]]
|-
| 20002F03
| [[New_3DS]] SAFE_MODE [[SSL Services|SSL]]
| [[8.1.0-0_New3DS|v7169]]
|-
| 00003000
| [[FIRM|Process9]] (in SAFE_MODE and normal NATIVE_FIRM)
| N/A
|-
| 00003102
| [[Process Services‎|PS]] ( Process Manager )
| [[1.0.0-0|v0]], [[2.0.0-2|v1025]], [[5.0.0-11|v2049]], [[6.0.0-11|v3072]], [[8.0.0-18|v4096]], [[9.0.0-20|v5120]]
|-
| 00003103
| SAFE_MODE [[Process Services‎|PS]]
| [[1.0.0-0|v0]]
|-
| 20003103
| [[New_3DS]] SAFE_MODE [[Process Services‎|PS]]
| [[8.1.0-0_New3DS|v5121]]
|-
| 00003202
| [[Friend Services‎|friends]] (Friends list)
| [[1.0.0-0|v0]], [[2.0.0-2|v1028]], [[2.2.0-X|v2048]], [[3.0.0-5|v3072]], [[4.0.0-7|v4096]], [[5.0.0-11|v5122]], [[7.0.0-13|v6145]], [[8.0.0-18|v7172]], [[9.0.0-20|v8192]](Also for [[8.1.0-0_New3DS]]), [[10.5.0-30|v9216]], [[10.7.0-32|v10240]]
|-
| 00003203
| SAFE_MODE [[Friend Services‎|friends]] (Friends list)
| [[1.0.0-0|v0]]
|-
| 20003203
| [[New_3DS]] SAFE_MODE [[Friend Services‎|friends]] (Friends list)
| [[8.1.0-0_New3DS|v8193]]
|-
| 00003302
| [[IR Services‎|IR]] (Infrared)
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[2.2.0-X|v2048]], [[3.0.0-5|v3072]], [[4.0.0-7|v4096]], [[5.0.0-11|v5121]], [[8.0.0-18|v6148]], [[8.1.0-0_New3DS|v7170]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v8192]], [[9.3.0-21|v9216]], [[9.6.0-24|v10246]], [[10.0.0-27|v11265]], [[10.6.0-31|v12289]]
|-
| 00003303
| SAFE_MODE [[IR Services‎|IR]]
| [[1.0.0-0|v0]]
|-
| 20003303
| [[New_3DS]] SAFE_MODE [[IR Services‎|IR]]
| [[8.1.0-0_New3DS|v7169]]
|-
| 00003402
| [[BOSS Services‎|BOSS]] (SpotPass)
| [[1.0.0-0|v0]], [[1.1.0-1|v1024]], [[2.0.0-2|v2053]], [[2.2.0-X|v3073]], [[3.0.0-5|v4101]], [[4.0.0-7|v5122]], [[5.0.0-11|v6146]], [[6.0.0-11|v7169]], [[6.2.0-12|v8193]], [[7.0.0-13|v9222]], [[8.0.0-18|v10240]], [[9.0.0-20|v11266]], [[10.0.0-27|v12289]], [[10.4.0-29|v13314]]
|-
| 00003502
| [[News Services‎|News]] (Notifications)
| [[1.0.0-0|v0]], [[2.0.0-2|v1028]], [[2.2.0-X|v2048]], [[3.0.0-5|v3072]], [[5.0.0-11|v4097]], [[8.0.0-18|v5120]], [[9.0.0-20|v6147]], [[9.7.0-25|v7168]]
|-
| 00003602
| "debugger". This only exist for development units(launched by NS during startup depending on certain [[Configuration_Memory]] fields' values).
|
|-
| 00003702
| [[RO_Services|RO]]
| [[2.0.0-2|v0]], [[4.0.0-7|v1024]], [[5.0.0-11|v2049]], [[7.2.0-17|v3074]], [[8.0.0-18|v4096]], [[9.0.0-20|v5120]](Also for [[8.1.0-0_New3DS]]), [[9.3.0-21|v6148]]
|-
| 00003802
| [[ACT Services‎|act]] (handles Nintendo Network '''a'''c'''c'''oun'''t'''s)
| [[7.0.0-13|v1029]], [[7.1.0-14|v2050]], [[7.2.0-17|v3077]], [[8.0.0-18|v4099]], [[8.1.0-0_New3DS|v5120]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v6144]], [[9.3.0-21|v7168]], [[9.6.0-24|v8198]]
|-
| 00004002
| Old3DS [[NFC_Services|nfc]]
| [[9.3.0-21|v2053]], [[9.6.0-24|v4106]], [[9.7.0-25|v5121]], [[10.0.0-27|v6145]], [[10.6.0-31|v7168]], [[10.7.0-32|v8192]]
|-
| 20004002
| [[New_3DS]] [[NFC_Services|nfc]]
| [[8.1.0-0_New3DS|v0]], [[9.0.0-20|v1024]], [[9.3.0-21|v2053]], [[9.5.0-22|v3073]], [[9.6.0-24|v4102]], [[10.0.0-27|v6145]], [[10.6.0-31|v7168]]
|-
| 20004102
| [[New_3DS]] [[MVD Services|mvd]]
| [[8.1.0-0_New3DS|v0]], [[9.0.0-20|v1024]]
|-
| 20004202
| [[New_3DS]] [[QTM Services|qtm]]
| [[8.1.0-0_New3DS|v8]], [[9.0.0-20|v1024]], [[9.3.0-21|v2052]]
|-
| 00008002
| [[NS]] (Memory-region: "SYSTEM")
| [[1.0.0-0|v0]], [[2.0.0-2|v1028]], [[2.2.0-X|v2048]], [[3.0.0-5|v3077]], v4096, [[4.0.0-7|v5121]], [[5.0.0-11|v6148]], [[5.1.0-11|v7168]], [[6.0.0-11|v8193]], [[6.1.0-11|v9216]], [[7.0.0-13|v10248]], [[7.2.0-17|v11268]], [[8.0.0-18|v12291]], [[8.1.0-0_New3DS|v13312]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v14336]], [[9.3.0-21|v15360]], [[9.6.0-24|v16390]], [[9.8.0-25|v17408]], [[10.0.0-27|v18433]], [[10.4.0-29|v19458]]
|-
| 00008003
| SAFE_MODE [[NS]] (Memory-region: "SYSTEM")
| [[1.0.0-0|v0]]
|-
| 20008003
| [[New_3DS]] SAFE_MODE [[NS]] (Memory-region: "SYSTEM")
| [[8.1.0-0_New3DS|v13313]]
|}

Once Home Menu finishes loading, all of the above system modules are running, except for MP, RO, and act which are automatically [[Process_Manager_Services|loaded]] when a process requires them. When [[Process_Manager_Services|PM]]-module terminates processes, it will check whether the processes listed as dependencies for this process are listed as dependencies for other processes. Any processes which are no longer listed in any processes dependencies lists are then terminated. On [[New_3DS]], the only New3DS-specific system-module which automatically gets loaded during system boot is qtm.

All of the above system modules use the "BASE" [[SVC|memory-region]](specified in the exheader), except when listed otherwise for certain modules.

When handling the exheader dependency list starting with [[8.0.0-18]], Old3DS FIRM [[Process_Manager_Services|PM]]-module now skips handling titles in this list which have any bits in programID-low bitmask 0xF0000000 set(with [[8.0.0-18]] this is hard-coded). The exheader dependency list handling change is for the [[New 3DS]] system-module(s), which do not exist on Old3DS. When the New3DS pm-module is launching any title except [[NS]], it first attempts to launch the title with programID-low bitmask 0x20000000 set, then with that bitmask clear if launching fails.

=== 00040138 - [[FIRM|System Firmware]] ===
NATIVE_FIRM and SAFE_MODE_FIRM for the initial versions are exactly the same, besides [[Configuration_Memory|core-version]] fields. SAFE_MODE_FIRM is used for running SAFE_MODE titles, on retail SAFE_MODE_FIRM seems to be only used for running the [[System_Settings#System_Updater|System Updater]] application. When a GBA VC title is launched, AGB_FIRM is launched to handle running this title. GBA VC savegames stored under SD card /title/<TID>/data use a custom format, this is handled by AGB_FIRM.

{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! USA/EUR/JPN Versions
! CHN Versions
! KOR Versions
! TWN Versions
|-
| 00000001
| Unknown, very similar to SAFE_MODE_FIRM. Exists only on dev units and seems to only be used by SystemUpdaters.
| v0
|
|
|
|-
| 00000002
| NATIVE_FIRM (Native Firmware)
| [[1.0.0-0|v432]], [[1.1.0-1|v1472]], [[2.0.0-2|v2516]], [[2.1.0-3|v3553]], [[2.2.0-X|v4595]], [[3.0.0-5|v5647]], [[4.0.0-7|v6677]], [[4.1.0-8|v7712]], [[5.0.0-11|v8758]], [[5.1.0-11|v9792]], [[6.0.0-11|v10833]], [[6.1.0-11|v11872]], [[7.0.0-13|v12916]], [[7.2.0-17|v13956]], v15043, [[8.0.0-18|v15047]], [[9.0.0-20|v17120]], [[9.3.0-21|v18182]], [[9.5.0-22|v19216]], [[9.6.0-24|v20262]], [[10.0.0-27|v21288]], [[10.2.0-28|v22313]], [[10.4.0-29|v23341]]
| Same as USA/EUR/JPN starting with the USA/EUR/JPN [[4.0.0-7]] title-version
| Same as CHN.
| Same as CHN.
|-
| 20000002
| [[New_3DS]] NATIVE_FIRM (Native Firmware)
| [[8.1.0-0_New3DS|v16085]], [[9.0.0-20|v17120]], [[9.3.0-21|v18182]], [[9.5.0-22|v19218]], [[9.6.0-24|v20262]], [[10.0.0-27|v21288]], [[10.2.0-28|v22313]], [[10.4.0-29|v23341]]
| N/A
| Same as CHN.
| Same as CHN.
|-
| 00000003
| SAFE_MODE_FIRM
| [[1.0.0-0|v432]], [[3.0.0-5|v5632]]
| Same as USA/EUR/JPN starting with the USA/EUR/JPN [[3.0.0-5]] title-version
| Same as CHN.
| Same as CHN.
|-
| 20000003
| [[New_3DS]] SAFE_MODE_FIRM
| [[8.1.0-0_New3DS|v16081]]
| N/A
| Same as CHN.
| Same as CHN.
|-
| 00000102
| TWL_FIRM ( DSi Firmware )
| [[1.0.0-0|v432]], [[2.0.0-2|v1489]], [[3.0.0-5|v2565]], v3601, [[4.0.0-7|v4625]], [[4.4.0-10|v5681]], [[4.5.0-10|v6704]], [[6.0.0-11|v7762]], [[6.2.0-12|v8817]]
| Same as USA/EUR/JPN starting with the USA/EUR/JPN [[4.0.0-7]] title-version
| Same as CHN.
| Same as CHN.
|-
| 20000102
| [[New_3DS]] TWL_FIRM ( DSi Firmware )
| [[8.1.0-0_New3DS|v9936]]
| N/A
| Same as CHN.
| Same as CHN.
|-
| 00000202
| AGB_FIRM ( GBA Firmware )
| [[3.0.0-5|v519]], v1553, [[4.0.0-7|v2576]], [[6.0.0-11|v3665]]
| [[4.0.0-7|v2576]]
| [[4.0.0-7|v2576]], [[6.0.0-11|v3665]]
| Same as CHN.
|-
| 20000202
| [[New_3DS]] AGB_FIRM ( GBA Firmware )
| [[8.1.0-0_New3DS|v4816]]
| N/A
| N/A
| N/A
|}

== Application Titles ==
{| class="wikitable" border="1"
|-
! Content Category
! Bit Mask(s)
! Category Bit Mask
|-
| [[Title list/eShop Titles|Application]] (eShop Title)
| Normal
| 0x0000
|-
| DLP Child
| DlpChild
| 0x0001
|-
| [[EShop Demos|Demo]]
| Demo
| 0x0002
|-
| [[Title list/Patches|Patch]]
| CannotExecution<nowiki>|</nowiki>Patch
| 0x000E
|-
| [[Title list/DLC|Add-on Content]] (DLC)
| NotRequireRightForMount<nowiki>|</nowiki>CannotExecution<nowiki>|</nowiki>AddOnContents
| 0x008C
|}

=== 00040001 - [[Download Play]] Titles ===
This titleID-high/programID-high is used for the titles sent over [[Download Play]]. Only one 00040001 Download Play title is installed to NAND /title at a time. There can be a maximum of 255 Download Play child titles per Unique ID, indexed by Title ID Variation. The legal index range: 0x0 - 0xff.

== TWL (DSi) Titles ==

{| class="wikitable" border="1"
|-
! Content Category
! Bit Mask(s)
! Category Bit Mask
|-
| Application (DSiWare)
| TWL<nowiki>|</nowiki>0x4
| 0x8004
|-
| System Application
| TWL<nowiki>|</nowiki>0x1<nowiki>|</nowiki>0x4
| 0x8005
|-
| System Archive
| TWL<nowiki>|</nowiki>0x1<nowiki>|</nowiki>0x2<nowiki>|</nowiki>0x4<nowiki>|</nowiki>0x8
| 0x800F
|}

Bitmask 0x1 for TWL titles denotes a system title (determining whether the title will be updated during a System Update). It appears to be sufficient, but not necessary, to make the title invisible on the [[Home menu]].

Bitmask 0x2 for TWL titles may indicate no-execute.

Bitmask 0x4 for TWL titles indicates internal storage.

=== 00048005 - System Applications===
{| class="wikitable" border="1"
|-
! TitleID Low
! Region
! Description
! Versions
! Information
|-
| 42383841(B88A)
| ALL
| [[DS Internet]]
| v0, [[2.1.0-4|v1025]], [[3.0.0-5|v2048]]
| [[DS Internet]] is the DS-mode application, (also integrated in every online-enabled DS game) and now accessible through [[System Settings]] for configuring network settings for DS software.
|-
| 484E4441(HNDA)
| ALL
| [[Download Play]]
| v1024
| This [[Download Play]] application is the DS-mode Download Play client, launched by the 3DS-mode Download Play application.
|-
| 484E4443(HNDC)
| CHN
| [[Download Play]]
| v1024
| See Above Description.
|-
| 484E444B(HNDK)
| KOR
| [[Download Play]]
| v1024
| See Above Description.
|}

=== 0004800F - System Data Archives===
{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! Versions
|-
| 484E4841(HNHA)
| [[Nintendo DS Cart Whitelist]]
| v0, [[2.0.0-2|v1026]], [[2.2.0-X|v2048]], [[3.0.0-5|v3072]], [[4.0.0-7|v4096]], [[4.2.0-9|v5120]], [[4.3.0-10|v6145]], [[4.4.0-10|v7168]], [[4.5.0-10|v8192]], [[5.0.0-11|v9216]], [[6.0.0-11|v10240]], [[7.0.0-13|v11264]]
|-
| 484E4C41(HNLA)
| [[Version Data]]
| v0
|}

New system updates only block DS flash-cards when the above whitelist was updated, or when TWL_FIRM was updated. The whitelist contains the data used for detecting flash-cards, this is used by TWL_FIRM.

=== 00048004 - DSiWare ===
Although these have a titleID high separate from DSi and a titleID is stored in the SRLs, the content of these SRLs are identical to DSi.

{| class="wikitable" border="1"
|-
! TitleID Low
! Region
! Description
! Versions
|-
| 4B4B5456(KKTV)
| EUR
| Cut the Rope
| v0, v64
|-
| 4B4E5256(KNRV)
| EUR
| A Little Bit of... Brain Training™: Maths Edition
| v0
|-
| 4B5A4C56(KZLV)
| EUR
| Plants vs. Zombies™
| v0
|-
| 4B454256(KEBV)
| EUR
| ELECTROPLANKTON (Hanenbow)
| v0
|-
| 4B513956(KQ9V)
| EUR
| Zelda: Four Swords Anniversary Edition
| v16
|-
| 4B574256(KWBV)
| EUR
| Mario Calculator
| v0
|-
| 4B574656(KWFV)
| EUR
| Mario Clock
| v0
|}

Factory Setup

2016-04-02T05:24:40Z

Normmatt:

With certain 3DS nandimages, the following NCCH can be recovered from NAND(in some cases these are somewhat corrupted). In some cases, only 000400000F980000 is left, in other cases the NCCH headers for all of these are overwritten. ''All'' of these use the retail NCCH secure-crypto mode, the NCCH accessdesc uses the retail pubk too.

Note that [[Nandrw/sys/updater.log]], [[Twln/sys/log/inspect.log]], and [[Twln/sys/log/product.log]] gets written during Factory Setup. CTRAging appears to do the product.log writing.

CTRAging appears to be an app which is used for hardware testing at the factory. This app also displays images(including Chinese/Asian-language text) which appear to be for system assembly/testing. CTRAging includes images for each 3DS model(which ones are included depends on the CTRAging version): original Old3DS, Old3DS XL, 2DS, regular New3DS, and New3DS XL. Some of the New3DS JPEG images have an EXIF last-modified timestamp of 2013, July-September.

Originally these titles(except for CTRAging) and the exheader dependency lists had TID-high 00040001, later that was changed to the [[Title_list|normal]] TID-highs.

{| class="wikitable" border="1"
|-
! TID-high
! TID-low
! Description
|-
| 00040000
| 0F980000
| CTRAging ("Test Program")
|-
| 00040001
| 00000002
| NATIVE_FIRM
|-
| 00040001
| 00000102
| TWL_FIRM
|-
| 00040001
| 00000202
| AGB_FIRM
|-
| 00040001
| 00001802
| codec sysmodule
|-
| 00040001
| 00001902
| dmnt sysmodule (Debugger sysmodule, see [[Title_list|here]])
|-
| 00040001
| 00001A02
| dsp sysmodule
|-
| 00040001
| 00001B02
| gpio sysmodule
|-
| 00040001
| 00001D02
| hid sysmodule
|-
| 00040001
| 00001E02
| i2c sysmodule
|-
| 00040001
| 00001F02
| mcu sysmodule
|-
| 00040001
| 00002102
| pdn sysmodule
|-
| 00040001
| 00002302
| spi sysmodule
|-
| 00040001
| 00002702
| csnd sysmodule
|-
| 00040001
| 00002802
| dlp sysmodule
|-
| 00040001
| 00002A02
| mp sysmodule
|-
| 00040001
| 00002B02
| ndm sysmodule
|-
| 00040001
| 00002C02
| nim sysmodule
|-
| 00040001
| 00002D02
| nwm sysmodule
|-
| 00040001
| 00002E02
| socket sysmodule
|-
| 00040001
| 00003102
| ps module
|-
| 00040001
| 00003202
| friends sysmodule
|-
| 00040001
| 00003302
| ir sysmodule
|-
| 00040001
| 00003402
| boss sysmodule
|-
| 00040001
| 00008002
| [[NS]]
|-
| 00040001
| 00008102
| TestMenu
|-
| 00040001
| 00008A02
| [[ErrDisp|DevErrDi]]
|-
| 00040030
| 00008102
| TestMenu
|-
|}

FSPXI:WriteFile

2015-09-16T05:55:18Z

Normmatt: Created page with "=Request= {| class="wikitable" border="1" |- ! Index Word ! Description |- | 0 | Header code [0x000B0182] |- | 1 | File handle lower word |- | 2 | File handle upper word |- | 3..."

=Request=
{| class="wikitable" border="1"
|-
! Index Word
! Description
|-
| 0
| Header code [0x000B0182]
|-
| 1
| File handle lower word
|-
| 2
| File handle upper word
|-
| 3
| Offset lower word
|-
| 4
| Offset upper word
|-
| 5
| Flush flags
|-
| 6
| Size
|-
| 7
| (Size << 8) <nowiki>|</nowiki> 6
|-
| 8
| Output buffer
|}

=Response=
{| class="wikitable" border="1"
|-
! Index Word
! Description
|-
| 0
| Header code
|-
| 1
| Result code
|-
| 2
| Size written
|-
| 3
| 4
|}

Filesystem services PXI

2015-09-16T05:51:15Z

Normmatt:

= Post 3.x =
{| class="wikitable" border="1"
|-
! Command Header, starting with [[3.0.0-5]]
! Available since system version
! Description
|-
| 0x000101C2
| [[1.0.0-0]]
| [[FSPXI:OpenFile|OpenFile]]
|-
| 0x00020142
| [[1.0.0-0]]
| DeleteFile?
|-
| 0x00030244
| [[1.0.0-0]]
| RenameFile?
|-
| 0x00040142
| [[1.0.0-0]]
| DeleteDirectory?
|-
| 0x00050202
| [[1.0.0-0]]
| CreateFile?
|-
| 0x00060182
| [[1.0.0-0]]
| CreateDirectory?
|-
| 0x00070244
| [[1.0.0-0]]
| RenameDirectory?
|-
| 0x00080102
| [[1.0.0-0]]
| OpenDirectory
|-
| 0x00090142
| [[1.0.0-0]]
| [[FSPXI:ReadFile|ReadFile]]
|-
| 0x000A00C2
| [[1.0.0-0]]
| CalculateFileHashSHA256
|-
| 0x000B0182
| [[1.0.0-0]]
| [[FSPXI:WriteFile|WriteFile]]
|-
| 0x000C0104
| [[1.0.0-0]]
| [[FSPXI:CalcSavegameMAC|CalcSavegameMAC]]
|-
| 0x000D0080
| [[1.0.0-0]]
| [[FSPXI:GetFileSize|GetFileSize]]
|-
| 0x000E0100
| [[1.0.0-0]]
| [[FSPXI:SetFileSize|SetFileSize]]
|-
| 0x000F0080
| [[1.0.0-0]]
| CloseFile
|-
| 0x001000C2
| [[1.0.0-0]]
| ReadDirectory
|-
| 0x00110080
| [[1.0.0-0]]
| CloseDirectory
|-
| 0x001200C2
| [[1.0.0-0]]
| [[FSPXI:OpenArchive|OpenArchive]]
|-
| 0x00130102
| [[1.0.0-0]]
| CreateExtSaveData?
|-
| 0x00140102
| [[1.0.0-0]]
| ?
|-
| 0x0015....
| 3.0.0.0?
| ?
|-
| 0x0016....
| 3.0.0.0?
| ?
|-
| 0x0017....
| 3.0.0.0?
| ?
|-
| 0x00180000
| [[1.0.0-0]]
| GetCardType
|-
| 0x00190000
| [[1.0.0-0]]
| [[FSPXI:GetSdmcArchiveResource|GetSdmcArchiveResource]]
|-
| 0x001A0000
| [[1.0.0-0]]
| [[FSPXI:GetNandArchiveResource|GetNandArchiveResource]]
|-
| 0x001B0000
| [[1.0.0-0]]
| GetSdmcFatFsError
|-
| 0x001C0000
| [[1.0.0-0]]
| GetSdmcDetected
|-
| 0x001D0000
| [[1.0.0-0]]
| GetSdmcWritable
|-
| 0x001E0042
| [[1.0.0-0]]
| [[FSPXI:GetSdmcCid|GetSdmcCid]]
|-
| 0x001F0042
| [[1.0.0-0]]
| [[FSPXI:GetNandCid|GetNandCid]]
|-
| 0x00200000
| [[1.0.0-0]]
| GetSdmcSpeedInfo
|-
| 0x00210000
| [[1.0.0-0]]
| GetNandSpeedInfo
|-
| 0x00220042
| [[1.0.0-0]]
| GetSdmcLog
|-
| 0x00230042
| [[1.0.0-0]]
| GetNandLog
|-
| 0x00240000
| [[1.0.0-0]]
| ClearSdmcLog
|-
| 0x00250000
| [[1.0.0-0]]
| ClearNandLog
|-
| 0x00260000
| [[1.0.0-0]]
| GetCardSlotInserted
|-
| 0x00270000
| [[1.0.0-0]]
| CardSlotPowerOn
|-
| 0x00280000
| [[1.0.0-0]]
| CardSlotPowerOff
|-
| 0x00290000
| [[1.0.0-0]]
| CardSlotGetIfPowerStatus
|-
| 0x002A0040
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectCommand|CardNorDirectCommand]]
|-
| 0x002B0080
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectCommandWithAddress|CardNorDirectCommandWithAddress]]
|-
| 0x002C0082
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectRead|CardNorDirectRead]]
|-
| 0x002D00C2
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectReadWithAddress|CardNorDirectReadWithAddress]]
|-
| 0x002E0082
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectWrite|CardNorDirectWrite]]
|-
| 0x002F00C2
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectWriteWithAddress|CardNorDirectWriteWithAddress]]
|-
| 0x003000C2
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectRead4IO|CardNorDirectRead4IO]]
|-
| 0x00310082
| [[1.0.0-0]]
| CardNorDirectCpuWriteWithoutVerify
|-
| 0x00320040
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectSectorEraseWithoutVerify|CardNorDirectSectorEraseWithoutVerify]]
|-
| 0x00330080
| [[1.0.0-0]]
| GetProductInfo
|-
| 0x00340040
| 1.0.0-0
| SetCardSpiBaudrate
|-
| 0x00350040
| 1.0.0-0
| SetCardSpiBusMode
|-
| 0x00360040
| 1.0.0-0
| SendInitializeInfo
|-
| 0x003A0100
| 1.0.0-0
| GetSpecialContentIndex
|-
| 0x003B00C2
| 1.0.0-0
| GetLegacyRomHeader
|-
| 0x003C00C2
| 1.0.0-0
| GetLegacyBannerData
|-
| 0x003D....
| ?
| ?
|-
| 0x003E0000
| 3.0.0-0
| [[FSPXI:DeleteSdmcRoot|DeleteSdmcRoot]]
|-
| 0x003F0040
| 3.0.0-0
| DeleteAllExtSaveDataOnNand
|-
| 0x00400000
| 3.0.0-0
| [[FSPXI:InitializeCtrFilesystem|InitializeCtrFilesystem]]
|-
| 0x00410000
| 3.0.0-0
| CreateSeed
|-
| 0x00420042
| 3.0.0-0
| [[FSPXI:GetSdmcCtrRootPath|GetSdmcCtrRootPath]]
|-
| 0x00430040
| 3.0.0-0
| GetArchiveResource
|-
| 0x00440002
| 3.0.0-0
| [[FSPXI:ExportIntegrityVerificationSeed|ExportIntegrityVerificationSeed]]
|-
| 0x00450002
| 3.0.0-0
| [[FSPXI:ImportIntegrityVerificationSeed|ImportIntegrityVerificationSeed]]
|-
| 0x00460082
| 2.0.0-2
| EnumerateSharedExtSaveData
|-
| 0x00470102
| 2.0.0-2
| GetLegacySubBannerData
|-
| 0x00480042
| 2.0.0-2
| Initialize (?)
|-
| 0x00490102
| 3.0.0-0
| ReadSpecialFile
|-
| 0x004A0040
| 3.0.0-0
| GetSpecialFileSize. cmd[1] = must be value 0x0. Writes the u64 size to cmdreply[2-3].
|-
| 0x004B0000
| 3.0.0-0
| [[FSPXI:GetMovableSedHashedKeyYRandomData|GetMovableSedHashedKeyYRandomData]]
|-
| 0x004C..
| ?
| ?
|-
| 0x004D01C4
| [[3.0.0-5]]
| [[FSPXI:ReadFileWrapper|ReadFileWrapper]]. If the first ReadFile call fails, this calls ReadFile again then executes hash-related code.
|-
| 0x004E0204
| [[3.0.0-5]]
| This is a wrapper for WriteFile, this is similar to command 0x004D01C4.
|-
| 0x004F....
| [[3.0.0-5]]
| (unknown_u64)
|-
| 0x00500000
| [[3.0.0-5]]
| Stubbed, this only returns value 0.
|-
| 0x0051....
| [[3.0.0-5]]
| (unknown_u8)
|-
| 0x00520042
| [[3.0.0-5]]
| [[FSPXI:EnumerateSystemSaveData|EnumerateSystemSaveData]]
|-
| 0x00530000
| [[3.0.0-5]]
| Unknown, stubbed with [[4.0.0-7]].
|-
| 0x0054....
| [[4.0.0-7]]
| Stubbed with [[4.0.0-7]].
|-
| 0x00550082
| [[4.0.0-7]]
| ReadNandReport
|-
| 0x00560102
| [[9.6.0-24|9.6.0-X]]
| This calls some archive-class vtable funcptr, for the specified archive-handle. It's unknown what this is for.
|}

= Pre 3.x =
{| class="wikitable" border="1"
|-
! Command Header, prior to [[3.0.0-5]]
! Available since system version
! Description
|-
| 0x000101C2
| [[1.0.0-0]]
| [[FSPXI:OpenFile|OpenFile]]
|-
| 0x00020142
| [[1.0.0-0]]
| DeleteFile? (unknown_u32, archivehandlelo, archivehandlehi, pathtype, pathsize, pathptrsize, pathptr)
|-
| 0x00030244
| [[1.0.0-0]]
| RenameFile? (unknown_u32, archivehandlelo, archivehandlehi, pathtype, pathsize, secondarchivehandlelo, secondarchivehandlehi, secondpathtype, secondpathsize, pathptrsize, pathptr, secondpathptrsize, secondpathptr)
|-
| 0x00040142
| [[1.0.0-0]]
| DeleteDirectory? (unknown_u32, archivehandlelo, archivehandlehi, pathtype, pathsize, pathptrsize, pathptr)
|-
| 0x00050202
| [[1.0.0-0]]
| CreateFile? (unknown_u32, archivehandlelo, archivehandlehi, pathtype, pathsize, unknown_u32, unknown_lo, unknown_hi, pathptrsize, pathptr)
|-
| 0x00060182
| [[1.0.0-0]]
| CreateDirectory? (unknown_u32, archivehandlelo, archivehandlehi, pathtype, pathsize, unknown_u32, pathptrsize, pathptr)
|-
| 0x00070244
| [[1.0.0-0]]
| RenameDirectory? (unknown_u32, archivehandlelo, archivehandlehi, pathtype, pathsize, secondarchivehandlelo, secondarchivehandlehi, secondpathtype, secondpathsize, pathptrsize, pathptr, secondpathptrsize, secondpathptr)
|-
| 0x00080102
| [[1.0.0-0]]
| OpenDirectory (archivehandlelo, archivehandlehi, pathtype, pathsize, pathptrsize, pathptr)
|-
| 0x00090142
| [[1.0.0-0]]
| [[FSPXI:ReadFile|ReadFile]]
|-
| 0x000A00C2
| [[1.0.0-0]]
| CalculateFileHashSHA256
|-
| 0x000B0182
| [[1.0.0-0]]
| WriteFile
|-
| 0x000C0104
| [[1.0.0-0]]
| [[FSPXI:CalcSavegameMAC|CalcSavegameMAC]]
|-
| 0x000D0080
| [[1.0.0-0]]
| [[FSPXI:GetFileSize|GetFileSize]]
|-
| 0x000E0100
| [[1.0.0-0]]
| SetFileSize (sizelo, sizehi, filehandlelo, filehandlehi)
|-
| 0x000F0080
| [[1.0.0-0]]
| CloseFile (filehandlelo, filehandlehi)
|-
| 0x001000C2
| [[1.0.0-0]]
| ReadDirectory (dirhandlelo, dirhandlehi, count, ptrsize, ptr)
|-
| 0x00110080
| [[1.0.0-0]]
| CloseDirectory (dirhandlelo, dirhandlehi)
|-
| 0x001200C2
| [[1.0.0-0]]
| [[FSPXI:OpenArchive|OpenArchive]]
|-
| 0x00130102
| [[1.0.0-0]]
| CreateExtSaveData? (archivehandlelo, archivehandlehi, pathtype, pathsize, pathptrsize, pathptr)
|-
| 0x00140102
| [[1.0.0-0]]
| (archivehandlelo, archivehandlehi, pathtype, pathsize, pathptrsize, pathptr)
|-
| 0x00150102
| [[1.0.0-0]]
| (archivehandlelo, archivehandlehi, pathtype, pathsize, pathptrsize, pathptr)
|-
| 0x00160080
| [[1.0.0-0]]
| CloseArchive (archivehandlelo, archivehandlehi)
|-
| 0x00170080
| [[1.0.0-0]]
| ReopenArchive? (archivehandlelo, archivehandlehi)
|-
| 0x00180000
| [[1.0.0-0]]
| GetCardType
|-
| 0x00190000
| [[1.0.0-0]]
| [[FSPXI:GetSdmcArchiveResource|GetSdmcArchiveResource]]
|-
| 0x001A0000
| [[1.0.0-0]]
| [[FSPXI:GetNandArchiveResource|GetNandArchiveResource]]
|-
| 0x001B0000
| [[1.0.0-0]]
| GetSdmcFatFsError
|-
| 0x001C0000
| [[1.0.0-0]]
| GetSdmcDetected
|-
| 0x001D0000
| [[1.0.0-0]]
| GetSdmcWritable
|-
| 0x001E0042
| [[1.0.0-0]]
| [[FSPXI:GetSdmcCid|GetSdmcCid]]
|-
| 0x001F0042
| [[1.0.0-0]]
| [[FSPXI:GetNandCid|GetNandCid]]
|-
| 0x00200000
| [[1.0.0-0]]
| GetSdmcSpeedInfo
|-
| 0x00210000
| [[1.0.0-0]]
| GetNandSpeedInfo
|-
| 0x00220042
| [[1.0.0-0]]
| GetSdmcLog
|-
| 0x00230042
| [[1.0.0-0]]
| GetNandLog
|-
| 0x00240000
| [[1.0.0-0]]
| ClearSdmcLog
|-
| 0x00250000
| [[1.0.0-0]]
| ClearNandLog
|-
| 0x00260000
| [[1.0.0-0]]
| GetCardSlotInserted
|-
| 0x00270000
| [[1.0.0-0]]
| CardSlotPowerOn
|-
| 0x00280000
| [[1.0.0-0]]
| CardSlotPowerOff
|-
| 0x00290000
| [[1.0.0-0]]
| CardSlotGetIfPowerStatus
|-
| 0x002A0040
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectCommand|CardNorDirectCommand]] (These CardNor commands are used for accessing the raw gamecard flash savedata)
|-
| 0x002B0080
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectCommandWithAddress|CardNorDirectCommandWithAddress]]
|-
| 0x002C0082
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectRead|CardNorDirectRead]]
|-
| 0x002D00C2
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectReadWithAddress|CardNorDirectReadWithAddress]]
|-
| 0x002E0082
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectWrite|CardNorDirectWrite]]
|-
| 0x002F00C2
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectWriteWithAddress|CardNorDirectWriteWithAddress]]
|-
| 0x003000C2
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectRead4IO|CardNorDirectRead4IO]]
|-
| 0x00310082
| [[1.0.0-0]]
| CardNorDirectCpuWriteWithoutVerify
|-
| 0x00320040
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectSectorEraseWithoutVerify|CardNorDirectSectorEraseWithoutVerify]]
|-
| 0x00330080
| [[1.0.0-0]]
| GetProductInfo
|-
| 0x00340040
| [[1.0.0-0]]
| SetCardSpiBaudrate
|-
| 0x00350040
| [[1.0.0-0]]
| SetCardSpiBusMode
|-
| 0x00360040
| [[1.0.0-0]]
| SendInitializeInfo
|-
| 0x00370140
| [[1.0.0-0]]
| CreateExtSaveData
|-
| 0x003800C0
| [[1.0.0-0]]
| DeleteExtSaveData
|-
| 0x00390082
| [[1.0.0-0]]
| EnumerateExtSaveData
|-
| 0x003A0100
| [[1.0.0-0]]
| GetSpecialContentIndex
|-
| 0x003B00C2
| [[1.0.0-0]]
| GetLegacyRomHeader
|-
| 0x003C00C2
| [[1.0.0-0]]
| GetLegacyBannerData
|-
| 0x003D....
| ?
| ?
|-
| 0x003E....
| ?
| This was removed with version 3.
|-
| 0x003F0000
| [[1.0.0-0]]
| [[FSPXI:DeleteSdmcRoot|DeleteSdmcRoot]]
|-
| 0x00400040
| [[1.0.0-0]]
| DeleteAllExtSaveDataOnNand
|-
| 0x00410000
| [[1.0.0-0]]
| [[FSPXI:InitializeCtrFilesystem|InitializeCtrFilesystem]]
|-
| 0x00420000
| [[1.0.0-0]]
| CreateSeed
|-
| 0x00430042
| [[2.0.0-2]]
| [[FSPXI:GetSdmcCtrRootPath|GetSdmcCtrRootPath]]
|-
| 0x00440040
| [[2.0.0-2]]
| GetArchiveResource
|-
| 0x00450002
| [[2.0.0-2]]
| [[FSPXI:ExportIntegrityVerificationSeed|ExportIntegrityVerificationSeed]]
|-
| 0x00460002
| [[2.0.0-2]]
| [[FSPXI:ImportIntegrityVerificationSeed|ImportIntegrityVerificationSeed]]
|-
| 0x00470082
| [[2.0.0-2]]
| EnumerateSharedExtSaveData
|-
| 0x00480102
| [[2.0.0-2]]
| GetLegacySubBannerData
|-
| 0x00490042
| [[2.0.0-2]]
| Initialize (?)
|-
| 0x004A00C2
| [[2.0.0-2]]
| OpenSpecialFile? (archivehandlelo, archivehandlehi, size, ptrsize_mul2, ptr)
|-
| 0x004B0102
| [[2.0.0-2]]
| ReadSpecialFile
|-
| 0x004C0040
| [[2.0.0-2]]
| GetSpecialFileSize. cmd[1] = must be value 0x0. Writes the u64 size to cmdreply[2-3].
|-
|}

=Errors=
{| class="wikitable" border="1"
|-
! Error-code
! Description
|-
| 0xC82044BE
| Object does already exist/failed to create object.
|-
| 0xC86044D2
| Failed to write file. Partition is full.
|-
| 0xC8804478
| Object doesn't exist / failed to open object(file). Or: The specified title does not exist in the [[Title_Database|database]].
|-
| 0xC880448D
| FSPXI: Gamecard not inserted when attempting to use the gamecard.
|-
| 0xC88044AB
| [[SDMC]]/NAND bus error, REG_SDSTATUS: TMIO_STAT_CMD_BUSY or TMIO_STAT_TXUNDERRUN
|-
| 0xC88044AC
| [[SDMC]]/NAND bus error, REG_SDSTATUS: TMIO_STAT_ILL_FUNC
|-
| 0xC92044E6
| Operation not allowed with the current file openflags/file already in use (if file was previously opened for writing).
|-
| 0xC9204509
| [[SDMC]]/NAND bus error, REG_SDSTATUS: TMIO_STAT_CMDTIMEOUT
|-
| 0xC960454B
| [[SDMC]]/NAND bus error, when an error-bit in REG_SDSTATUS separate from the above errors is set. This can also indicate that the TWL partition table in the NAND sector0 is invalid, or that the sector signature for sector0 at offset 0x1FE is invalid?
|-
| 0xC960454C
| [[SDMC]]/NAND bus error, REG_SDSTATUS: TMIO_STAT_STOPBIT_ERR
|-
| 0xC960F401
| [[SDMC]]/NAND bus error, REG_SDSTATUS: Bit23 (0x00800000)
|-
| 0xD9004587
| FSPXI: Hash verification failure (only for NCCH region hashes?).
|-
| 0xD9004588
| FSPXI/FSUSER: Verification failure for RSA or hashes. FSUSER: Verification failed for [[Savegames|savegame]] AES-MAC.
|-
| 0xD900458B
| Invalid RomFS / savedata block hash.
|-
| 0xD9004676
| FSUSER: The specified service-command / archive is not accessible, due to the currently used exheader accessinfo not having the required bit(s) set. (This error can also indicate that the required ARM9 access-control mount flag is not enabled, in the exheader for any of the running ARM11 processes)
|-
| 0xE0C046F9
| FSPXI: Specified read-size doesn't match the actual filesize, when accessing ExeFS.
|-
| 0xE0E046BE
| Invalid lowpath. This can also indicate that the specified archive-id does not exist, or that the specified archive-id is not accessible over FSPXI. In certain cases this can also be caused by attempting to open a FSUSER archive where none of the required bit(s) for the archive are set in the user-process exheader accessinfo.
|-
| 0xE0E046C1
| File-reading returns this when the input 64bit file-pos is negative, or when the file-pos is larger than the filesize.
|-
| 0xE0E046D1
| Failed to write to file because it would exceed the file size limit of the file system.
|-
| 0xE160F402
| [[SDMC]]/NAND bus error, REG_SDSTATUS: TMIO_STAT_RXRDY
|-
| 0xE160F403
| [[SDMC]]/NAND bus error, REG_SDSTATUS: Bit28 (0x10000000)
|-
| 0xE160F404
| [[SDMC]]/NAND bus error, REG_SDSTATUS: Bit27 (0x08000000)
|}

FSPXI:SetFileSize

2015-09-14T05:59:53Z

Normmatt: Created page with "=Request= {| class="wikitable" border="1" |- ! Index Word ! Description |- | 0 | Header code [0x000E0100] |- | 1 | Size lower word |- | 2 | Size lower word |- | 3 | File handle..."

=Request=
{| class="wikitable" border="1"
|-
! Index Word
! Description
|-
| 0
| Header code [0x000E0100]
|-
| 1
| Size lower word
|-
| 2
| Size lower word
|-
| 3
| File handle lower word
|-
| 4
| File handle upper word
|}

=Response=
{| class="wikitable" border="1"
|-
! Index Word
! Description
|-
| 0
| Header code
|-
| 1
| Result code
|}

Filesystem services PXI

2015-09-14T05:56:44Z

Normmatt:

= Post 3.x =
{| class="wikitable" border="1"
|-
! Command Header, starting with [[3.0.0-5]]
! Available since system version
! Description
|-
| 0x000101C2
| [[1.0.0-0]]
| [[FSPXI:OpenFile|OpenFile]]
|-
| 0x00020142
| [[1.0.0-0]]
| DeleteFile?
|-
| 0x00030244
| [[1.0.0-0]]
| RenameFile?
|-
| 0x00040142
| [[1.0.0-0]]
| DeleteDirectory?
|-
| 0x00050202
| [[1.0.0-0]]
| CreateFile?
|-
| 0x00060182
| [[1.0.0-0]]
| CreateDirectory?
|-
| 0x00070244
| [[1.0.0-0]]
| RenameDirectory?
|-
| 0x00080102
| [[1.0.0-0]]
| OpenDirectory
|-
| 0x00090142
| [[1.0.0-0]]
| [[FSPXI:ReadFile|ReadFile]]
|-
| 0x000A00C2
| [[1.0.0-0]]
| CalculateFileHashSHA256
|-
| 0x000B0182
| [[1.0.0-0]]
| WriteFile
|-
| 0x000C0104
| [[1.0.0-0]]
| [[FSPXI:CalcSavegameMAC|CalcSavegameMAC]]
|-
| 0x000D0080
| [[1.0.0-0]]
| [[FSPXI:GetFileSize|GetFileSize]]
|-
| 0x000E0100
| [[1.0.0-0]]
| [[FSPXI:SetFileSize|SetFileSize]]
|-
| 0x000F0080
| [[1.0.0-0]]
| CloseFile
|-
| 0x001000C2
| [[1.0.0-0]]
| ReadDirectory
|-
| 0x00110080
| [[1.0.0-0]]
| CloseDirectory
|-
| 0x001200C2
| [[1.0.0-0]]
| [[FSPXI:OpenArchive|OpenArchive]]
|-
| 0x00130102
| [[1.0.0-0]]
| CreateExtSaveData?
|-
| 0x00140102
| [[1.0.0-0]]
| ?
|-
| 0x0015....
| 3.0.0.0?
| ?
|-
| 0x0016....
| 3.0.0.0?
| ?
|-
| 0x0017....
| 3.0.0.0?
| ?
|-
| 0x00180000
| [[1.0.0-0]]
| GetCardType
|-
| 0x00190000
| [[1.0.0-0]]
| [[FSPXI:GetSdmcArchiveResource|GetSdmcArchiveResource]]
|-
| 0x001A0000
| [[1.0.0-0]]
| [[FSPXI:GetNandArchiveResource|GetNandArchiveResource]]
|-
| 0x001B0000
| [[1.0.0-0]]
| GetSdmcFatFsError
|-
| 0x001C0000
| [[1.0.0-0]]
| GetSdmcDetected
|-
| 0x001D0000
| [[1.0.0-0]]
| GetSdmcWritable
|-
| 0x001E0042
| [[1.0.0-0]]
| [[FSPXI:GetSdmcCid|GetSdmcCid]]
|-
| 0x001F0042
| [[1.0.0-0]]
| [[FSPXI:GetNandCid|GetNandCid]]
|-
| 0x00200000
| [[1.0.0-0]]
| GetSdmcSpeedInfo
|-
| 0x00210000
| [[1.0.0-0]]
| GetNandSpeedInfo
|-
| 0x00220042
| [[1.0.0-0]]
| GetSdmcLog
|-
| 0x00230042
| [[1.0.0-0]]
| GetNandLog
|-
| 0x00240000
| [[1.0.0-0]]
| ClearSdmcLog
|-
| 0x00250000
| [[1.0.0-0]]
| ClearNandLog
|-
| 0x00260000
| [[1.0.0-0]]
| GetCardSlotInserted
|-
| 0x00270000
| [[1.0.0-0]]
| CardSlotPowerOn
|-
| 0x00280000
| [[1.0.0-0]]
| CardSlotPowerOff
|-
| 0x00290000
| [[1.0.0-0]]
| CardSlotGetIfPowerStatus
|-
| 0x002A0040
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectCommand|CardNorDirectCommand]]
|-
| 0x002B0080
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectCommandWithAddress|CardNorDirectCommandWithAddress]]
|-
| 0x002C0082
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectRead|CardNorDirectRead]]
|-
| 0x002D00C2
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectReadWithAddress|CardNorDirectReadWithAddress]]
|-
| 0x002E0082
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectWrite|CardNorDirectWrite]]
|-
| 0x002F00C2
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectWriteWithAddress|CardNorDirectWriteWithAddress]]
|-
| 0x003000C2
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectRead4IO|CardNorDirectRead4IO]]
|-
| 0x00310082
| [[1.0.0-0]]
| CardNorDirectCpuWriteWithoutVerify
|-
| 0x00320040
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectSectorEraseWithoutVerify|CardNorDirectSectorEraseWithoutVerify]]
|-
| 0x00330080
| [[1.0.0-0]]
| GetProductInfo
|-
| 0x00340040
| 1.0.0-0
| SetCardSpiBaudrate
|-
| 0x00350040
| 1.0.0-0
| SetCardSpiBusMode
|-
| 0x00360040
| 1.0.0-0
| SendInitializeInfo
|-
| 0x003A0100
| 1.0.0-0
| GetSpecialContentIndex
|-
| 0x003B00C2
| 1.0.0-0
| GetLegacyRomHeader
|-
| 0x003C00C2
| 1.0.0-0
| GetLegacyBannerData
|-
| 0x003D....
| ?
| ?
|-
| 0x003E0000
| 3.0.0-0
| [[FSPXI:DeleteSdmcRoot|DeleteSdmcRoot]]
|-
| 0x003F0040
| 3.0.0-0
| DeleteAllExtSaveDataOnNand
|-
| 0x00400000
| 3.0.0-0
| [[FSPXI:InitializeCtrFilesystem|InitializeCtrFilesystem]]
|-
| 0x00410000
| 3.0.0-0
| CreateSeed
|-
| 0x00420042
| 3.0.0-0
| [[FSPXI:GetSdmcCtrRootPath|GetSdmcCtrRootPath]]
|-
| 0x00430040
| 3.0.0-0
| GetArchiveResource
|-
| 0x00440002
| 3.0.0-0
| [[FSPXI:ExportIntegrityVerificationSeed|ExportIntegrityVerificationSeed]]
|-
| 0x00450002
| 3.0.0-0
| [[FSPXI:ImportIntegrityVerificationSeed|ImportIntegrityVerificationSeed]]
|-
| 0x00460082
| 2.0.0-2
| EnumerateSharedExtSaveData
|-
| 0x00470102
| 2.0.0-2
| GetLegacySubBannerData
|-
| 0x00480042
| 2.0.0-2
| Initialize (?)
|-
| 0x00490102
| 3.0.0-0
| ReadSpecialFile
|-
| 0x004A0040
| 3.0.0-0
| GetSpecialFileSize. cmd[1] = must be value 0x0. Writes the u64 size to cmdreply[2-3].
|-
| 0x004B0000
| 3.0.0-0
| [[FSPXI:GetMovableSedHashedKeyYRandomData|GetMovableSedHashedKeyYRandomData]]
|-
| 0x004C..
| ?
| ?
|-
| 0x004D01C4
| [[3.0.0-5]]
| [[FSPXI:ReadFileWrapper|ReadFileWrapper]]. If the first ReadFile call fails, this calls ReadFile again then executes hash-related code.
|-
| 0x004E0204
| [[3.0.0-5]]
| This is a wrapper for WriteFile, this is similar to command 0x004D01C4.
|-
| 0x004F....
| [[3.0.0-5]]
| (unknown_u64)
|-
| 0x00500000
| [[3.0.0-5]]
| Stubbed, this only returns value 0.
|-
| 0x0051....
| [[3.0.0-5]]
| (unknown_u8)
|-
| 0x00520042
| [[3.0.0-5]]
| [[FSPXI:EnumerateSystemSaveData|EnumerateSystemSaveData]]
|-
| 0x00530000
| [[3.0.0-5]]
| Unknown, stubbed with [[4.0.0-7]].
|-
| 0x0054....
| [[4.0.0-7]]
| Stubbed with [[4.0.0-7]].
|-
| 0x00550082
| [[4.0.0-7]]
| ReadNandReport
|-
| 0x00560102
| [[9.6.0-24|9.6.0-X]]
| This calls some archive-class vtable funcptr, for the specified archive-handle. It's unknown what this is for.
|}

= Pre 3.x =
{| class="wikitable" border="1"
|-
! Command Header, prior to [[3.0.0-5]]
! Available since system version
! Description
|-
| 0x000101C2
| [[1.0.0-0]]
| [[FSPXI:OpenFile|OpenFile]]
|-
| 0x00020142
| [[1.0.0-0]]
| DeleteFile? (unknown_u32, archivehandlelo, archivehandlehi, pathtype, pathsize, pathptrsize, pathptr)
|-
| 0x00030244
| [[1.0.0-0]]
| RenameFile? (unknown_u32, archivehandlelo, archivehandlehi, pathtype, pathsize, secondarchivehandlelo, secondarchivehandlehi, secondpathtype, secondpathsize, pathptrsize, pathptr, secondpathptrsize, secondpathptr)
|-
| 0x00040142
| [[1.0.0-0]]
| DeleteDirectory? (unknown_u32, archivehandlelo, archivehandlehi, pathtype, pathsize, pathptrsize, pathptr)
|-
| 0x00050202
| [[1.0.0-0]]
| CreateFile? (unknown_u32, archivehandlelo, archivehandlehi, pathtype, pathsize, unknown_u32, unknown_lo, unknown_hi, pathptrsize, pathptr)
|-
| 0x00060182
| [[1.0.0-0]]
| CreateDirectory? (unknown_u32, archivehandlelo, archivehandlehi, pathtype, pathsize, unknown_u32, pathptrsize, pathptr)
|-
| 0x00070244
| [[1.0.0-0]]
| RenameDirectory? (unknown_u32, archivehandlelo, archivehandlehi, pathtype, pathsize, secondarchivehandlelo, secondarchivehandlehi, secondpathtype, secondpathsize, pathptrsize, pathptr, secondpathptrsize, secondpathptr)
|-
| 0x00080102
| [[1.0.0-0]]
| OpenDirectory (archivehandlelo, archivehandlehi, pathtype, pathsize, pathptrsize, pathptr)
|-
| 0x00090142
| [[1.0.0-0]]
| [[FSPXI:ReadFile|ReadFile]]
|-
| 0x000A00C2
| [[1.0.0-0]]
| CalculateFileHashSHA256
|-
| 0x000B0182
| [[1.0.0-0]]
| WriteFile
|-
| 0x000C0104
| [[1.0.0-0]]
| [[FSPXI:CalcSavegameMAC|CalcSavegameMAC]]
|-
| 0x000D0080
| [[1.0.0-0]]
| [[FSPXI:GetFileSize|GetFileSize]]
|-
| 0x000E0100
| [[1.0.0-0]]
| SetFileSize (sizelo, sizehi, filehandlelo, filehandlehi)
|-
| 0x000F0080
| [[1.0.0-0]]
| CloseFile (filehandlelo, filehandlehi)
|-
| 0x001000C2
| [[1.0.0-0]]
| ReadDirectory (dirhandlelo, dirhandlehi, count, ptrsize, ptr)
|-
| 0x00110080
| [[1.0.0-0]]
| CloseDirectory (dirhandlelo, dirhandlehi)
|-
| 0x001200C2
| [[1.0.0-0]]
| [[FSPXI:OpenArchive|OpenArchive]]
|-
| 0x00130102
| [[1.0.0-0]]
| CreateExtSaveData? (archivehandlelo, archivehandlehi, pathtype, pathsize, pathptrsize, pathptr)
|-
| 0x00140102
| [[1.0.0-0]]
| (archivehandlelo, archivehandlehi, pathtype, pathsize, pathptrsize, pathptr)
|-
| 0x00150102
| [[1.0.0-0]]
| (archivehandlelo, archivehandlehi, pathtype, pathsize, pathptrsize, pathptr)
|-
| 0x00160080
| [[1.0.0-0]]
| CloseArchive (archivehandlelo, archivehandlehi)
|-
| 0x00170080
| [[1.0.0-0]]
| ReopenArchive? (archivehandlelo, archivehandlehi)
|-
| 0x00180000
| [[1.0.0-0]]
| GetCardType
|-
| 0x00190000
| [[1.0.0-0]]
| [[FSPXI:GetSdmcArchiveResource|GetSdmcArchiveResource]]
|-
| 0x001A0000
| [[1.0.0-0]]
| [[FSPXI:GetNandArchiveResource|GetNandArchiveResource]]
|-
| 0x001B0000
| [[1.0.0-0]]
| GetSdmcFatFsError
|-
| 0x001C0000
| [[1.0.0-0]]
| GetSdmcDetected
|-
| 0x001D0000
| [[1.0.0-0]]
| GetSdmcWritable
|-
| 0x001E0042
| [[1.0.0-0]]
| [[FSPXI:GetSdmcCid|GetSdmcCid]]
|-
| 0x001F0042
| [[1.0.0-0]]
| [[FSPXI:GetNandCid|GetNandCid]]
|-
| 0x00200000
| [[1.0.0-0]]
| GetSdmcSpeedInfo
|-
| 0x00210000
| [[1.0.0-0]]
| GetNandSpeedInfo
|-
| 0x00220042
| [[1.0.0-0]]
| GetSdmcLog
|-
| 0x00230042
| [[1.0.0-0]]
| GetNandLog
|-
| 0x00240000
| [[1.0.0-0]]
| ClearSdmcLog
|-
| 0x00250000
| [[1.0.0-0]]
| ClearNandLog
|-
| 0x00260000
| [[1.0.0-0]]
| GetCardSlotInserted
|-
| 0x00270000
| [[1.0.0-0]]
| CardSlotPowerOn
|-
| 0x00280000
| [[1.0.0-0]]
| CardSlotPowerOff
|-
| 0x00290000
| [[1.0.0-0]]
| CardSlotGetIfPowerStatus
|-
| 0x002A0040
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectCommand|CardNorDirectCommand]] (These CardNor commands are used for accessing the raw gamecard flash savedata)
|-
| 0x002B0080
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectCommandWithAddress|CardNorDirectCommandWithAddress]]
|-
| 0x002C0082
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectRead|CardNorDirectRead]]
|-
| 0x002D00C2
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectReadWithAddress|CardNorDirectReadWithAddress]]
|-
| 0x002E0082
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectWrite|CardNorDirectWrite]]
|-
| 0x002F00C2
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectWriteWithAddress|CardNorDirectWriteWithAddress]]
|-
| 0x003000C2
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectRead4IO|CardNorDirectRead4IO]]
|-
| 0x00310082
| [[1.0.0-0]]
| CardNorDirectCpuWriteWithoutVerify
|-
| 0x00320040
| [[1.0.0-0]]
| [[FSPXI:CardNorDirectSectorEraseWithoutVerify|CardNorDirectSectorEraseWithoutVerify]]
|-
| 0x00330080
| [[1.0.0-0]]
| GetProductInfo
|-
| 0x00340040
| [[1.0.0-0]]
| SetCardSpiBaudrate
|-
| 0x00350040
| [[1.0.0-0]]
| SetCardSpiBusMode
|-
| 0x00360040
| [[1.0.0-0]]
| SendInitializeInfo
|-
| 0x00370140
| [[1.0.0-0]]
| CreateExtSaveData
|-
| 0x003800C0
| [[1.0.0-0]]
| DeleteExtSaveData
|-
| 0x00390082
| [[1.0.0-0]]
| EnumerateExtSaveData
|-
| 0x003A0100
| [[1.0.0-0]]
| GetSpecialContentIndex
|-
| 0x003B00C2
| [[1.0.0-0]]
| GetLegacyRomHeader
|-
| 0x003C00C2
| [[1.0.0-0]]
| GetLegacyBannerData
|-
| 0x003D....
| ?
| ?
|-
| 0x003E....
| ?
| This was removed with version 3.
|-
| 0x003F0000
| [[1.0.0-0]]
| [[FSPXI:DeleteSdmcRoot|DeleteSdmcRoot]]
|-
| 0x00400040
| [[1.0.0-0]]
| DeleteAllExtSaveDataOnNand
|-
| 0x00410000
| [[1.0.0-0]]
| [[FSPXI:InitializeCtrFilesystem|InitializeCtrFilesystem]]
|-
| 0x00420000
| [[1.0.0-0]]
| CreateSeed
|-
| 0x00430042
| [[2.0.0-2]]
| [[FSPXI:GetSdmcCtrRootPath|GetSdmcCtrRootPath]]
|-
| 0x00440040
| [[2.0.0-2]]
| GetArchiveResource
|-
| 0x00450002
| [[2.0.0-2]]
| [[FSPXI:ExportIntegrityVerificationSeed|ExportIntegrityVerificationSeed]]
|-
| 0x00460002
| [[2.0.0-2]]
| [[FSPXI:ImportIntegrityVerificationSeed|ImportIntegrityVerificationSeed]]
|-
| 0x00470082
| [[2.0.0-2]]
| EnumerateSharedExtSaveData
|-
| 0x00480102
| [[2.0.0-2]]
| GetLegacySubBannerData
|-
| 0x00490042
| [[2.0.0-2]]
| Initialize (?)
|-
| 0x004A00C2
| [[2.0.0-2]]
| OpenSpecialFile? (archivehandlelo, archivehandlehi, size, ptrsize_mul2, ptr)
|-
| 0x004B0102
| [[2.0.0-2]]
| ReadSpecialFile
|-
| 0x004C0040
| [[2.0.0-2]]
| GetSpecialFileSize. cmd[1] = must be value 0x0. Writes the u64 size to cmdreply[2-3].
|-
|}

=Errors=
{| class="wikitable" border="1"
|-
! Error-code
! Description
|-
| 0xC82044BE
| Object does already exist/failed to create object.
|-
| 0xC86044D2
| Failed to write file. Partition is full.
|-
| 0xC8804478
| Object doesn't exist / failed to open object(file). Or: The specified title does not exist in the [[Title_Database|database]].
|-
| 0xC880448D
| FSPXI: Gamecard not inserted when attempting to use the gamecard.
|-
| 0xC88044AB
| [[SDMC]]/NAND bus error, REG_SDSTATUS: TMIO_STAT_CMD_BUSY or TMIO_STAT_TXUNDERRUN
|-
| 0xC88044AC
| [[SDMC]]/NAND bus error, REG_SDSTATUS: TMIO_STAT_ILL_FUNC
|-
| 0xC92044E6
| Operation not allowed with the current file openflags/file already in use (if file was previously opened for writing).
|-
| 0xC9204509
| [[SDMC]]/NAND bus error, REG_SDSTATUS: TMIO_STAT_CMDTIMEOUT
|-
| 0xC960454B
| [[SDMC]]/NAND bus error, when an error-bit in REG_SDSTATUS separate from the above errors is set. This can also indicate that the TWL partition table in the NAND sector0 is invalid, or that the sector signature for sector0 at offset 0x1FE is invalid?
|-
| 0xC960454C
| [[SDMC]]/NAND bus error, REG_SDSTATUS: TMIO_STAT_STOPBIT_ERR
|-
| 0xC960F401
| [[SDMC]]/NAND bus error, REG_SDSTATUS: Bit23 (0x00800000)
|-
| 0xD9004587
| FSPXI: Hash verification failure (only for NCCH region hashes?).
|-
| 0xD9004588
| FSPXI/FSUSER: Verification failure for RSA or hashes. FSUSER: Verification failed for [[Savegames|savegame]] AES-MAC.
|-
| 0xD900458B
| Invalid RomFS / savedata block hash.
|-
| 0xD9004676
| FSUSER: The specified service-command / archive is not accessible, due to the currently used exheader accessinfo not having the required bit(s) set. (This error can also indicate that the required ARM9 access-control mount flag is not enabled, in the exheader for any of the running ARM11 processes)
|-
| 0xE0C046F9
| FSPXI: Specified read-size doesn't match the actual filesize, when accessing ExeFS.
|-
| 0xE0E046BE
| Invalid lowpath. This can also indicate that the specified archive-id does not exist, or that the specified archive-id is not accessible over FSPXI. In certain cases this can also be caused by attempting to open a FSUSER archive where none of the required bit(s) for the archive are set in the user-process exheader accessinfo.
|-
| 0xE0E046C1
| File-reading returns this when the input 64bit file-pos is negative, or when the file-pos is larger than the filesize.
|-
| 0xE0E046D1
| Failed to write to file because it would exceed the file size limit of the file system.
|-
| 0xE160F402
| [[SDMC]]/NAND bus error, REG_SDSTATUS: TMIO_STAT_RXRDY
|-
| 0xE160F403
| [[SDMC]]/NAND bus error, REG_SDSTATUS: Bit28 (0x10000000)
|-
| 0xE160F404
| [[SDMC]]/NAND bus error, REG_SDSTATUS: Bit27 (0x08000000)
|}

SPICARD Registers

2015-09-13T06:10:05Z

Normmatt:

= Registers =
{| class="wikitable" border="1"
! Old3DS
! Name
! Address
! Width
! Used by
|-
| style="background: green" | Yes
| ?
| 0x1000D800
| 4
|
|-
| style="background: green" | Yes
| ?
| 0x1000D804
| 4
|
|-
| style="background: green" | Yes
| ?
| 0x1000D808
| 4
|
|-
| style="background: green" | Yes
| REG_SPICARDFIFO
| 0x1000D80C
| 4
|
|-
| style="background: green" | Yes
| ?
| 0x1000D810
| 4
|
|-
| style="background: green" | Yes
| ?
| 0x1000D818
| 4
|
|-
|}

PXI Registers

2015-09-08T01:07:46Z

Normmatt:

= Protocol =
The communication protocol for normal PXI commands is documented below. The size of cmd_buf is calculated from the cmd_hdr. With newer FIRM the total size for command header + buffer must be at most 0x40 words, otherwise Process9 will panic.

Each pxi_id corresponds to a Process9 PXI [[PXI_Services|command-handler]](called from threads) which handles the actual command processing. With newer FIRM the pxi_id must be in a certain range.

There's a dedicated Process9 thread for receiving data from PXI(in newer FIRM this is the main-thread), once it finishes receiving a request it copies the cmd_buf into a buffer for the corresponding pxi_id then signals an event so that the cmd-handler thread can process it. Once a cmd-handler thread finishes processing a command, the thread itself then sends the response over PXI. This means that multiple commands for different pxiIDs can be be handled at the same time, even when one cmd-handler completely hangs/etc for example.

Process9 will execute [[SVC|svcBreak]] when it receives a PXI command with a pxi_id where another cmmand with that same pxi_id is still being processed by the command-handler(this won't happen with commands sent by the ARM11 PXI-module, since it waits for the command reply before sending another command request for that same pxi_id).

==Request==
A11->A9 (u32) pxi_id
A11->A9 (u32) cmd_hdr
A11->A9 (u32[]) cmd_buf

==Response==
A9->A11 (u32) pxi_id
A9->A11 (u32) cmd_hdr
A9->A11 (u32[]) cmd_buf

==pxi_id==
0 = pxi_mc
1 = pxi_fs
2 = pxi_fs
3 = pxi_fs
4 = pxi_fs
5 = pxi_pm
6 = pxi_dev
7 = pxi_am
8 = pxi_ps
9 = stubbed

= Registers =
{| class="wikitable" border="1"
! Old3DS
! Name
! Address
! Width
! Used by
|-
| style="background: green" | Yes
| [[#PXI_SYNC9|PXI_SYNC9]]
| 0x10008000
| 4
|
|-
| style="background: green" | Yes
| PXI_????9
| 0x10008003
| 1
|
|-
| style="background: green" | Yes
| [[#PXI_CNT|PXI_CNT]]9
| 0x10008004
| 4
|
|-
| style="background: green" | Yes
| PXI_SEND9
| 0x10008008
| 4
|
|-
| style="background: green" | Yes
| PXI_RECV9
| 0x1000800C
| 4
|
|-style="border-top: double"
| style="background: green" | Yes
| PXI_SYNC11
| 0x10163000
| 4
|
|-
| style="background: green" | Yes
| [[#PXI_CNT|PXI_CNT]]11
| 0x10163004
| 4
|
|-
| style="background: green" | Yes
| PXI_SEND11
| 0x10163008
| 4
|
|-
| style="background: green" | Yes
| PXI_RECV_11
| 0x1016300C
| 4
|
|}

The PXI registers are similar to those on DS.

== PXI_SYNC9 ==
{| class="wikitable" border="1"
! Bit
! RW
! Description
|-
| 0-8
| R
| Data input from bit8-15 of PXI_SYNC11
|-
| 8-15
| R/W
| Data output to bit0-8 of PXI_SYNC11
|-
| 23
| ?
| ?
|-
| 29
| ?
| ?
|-
| 31
| ?
| ?
|}

== PXI_CNT ==
{| class="wikitable" border="1"
! Bit
! RW
! Description
|-
| 0
| R
| Send Fifo Empty Status (0=Not Empty, 1=Empty)
|-
| 1
| R
| Send Fifo Full Status (0=Not Full, 1=Full)
|-
| 2
| R/W
| Send Fifo Empty IRQ (0=Disable, 1=Enable)
|-
| 3
| W
| Send Fifo Clear (0=Nothing, 1=Flush Send Fifo)
|-
| 8
| R
| Receive Fifo Empty (0=Not Empty, 1=Empty)
|-
| 9
| R
| Receive Fifo Full (0=Not Full, 1=Full)
|-
| 10
| R/W
| Receive Fifo Not Empty IRQ (0=Disable, 1=Enable)
|-
| 14
| R/W
| Error, Read Empty/Send Full (0=No Error, 1=Error/Acknowledge)
|-
| 15
| R/W
| Enable Send/Receive Fifo (0=Disable, 1=Enable)
|}

CONFIG9 Registers

2015-04-04T13:00:40Z

Normmatt: Undo revision 12224 by Normmatt (talk)

= Registers =
{| class="wikitable" border="1"
! Old3DS
! Name
! Address
! Width
! Used by
|-
| style="background: green" | Yes
| [[#CFG_SYSPROT9|CFG_SYSPROT9]]
| 0x10000000
| 1
| Boot9
|-
| style="background: green" | Yes
| [[#CFG_SYSPROT11|CFG_SYSPROT11]]
| 0x10000001
| 1
| Boot9
|-
| style="background: green" | Yes
| CFG_DEBUGUNIT
| 0x10000004
| 4
|
|-
| style="background: green" | Yes
| [[#CFG_CARDCONF|CFG_CARDCONF]]
| 0x1000000C
| 2
|
|-
| style="background: green" | Yes
| CFG_DEBUGGER
| 0x10000010
| 1
|
|-
| style="background: green" | Yes
| ?
| 0x10000011
| 1
|
|-
| style="background: green" | Yes
| ?
| 0x10000012
| 2
|
|-
| style="background: green" | Yes
| ?
| 0x10000014
| 2
|
|-
| style="background: green" | Yes
| ?
| 0x10000020
| 2
|
|-
| style="background: green" | Yes
| ?
| 0x10000100
| 2
|
|-
| style="background: red" | No
| [[#CFG_EXTMEMCNT9|CFG_EXTMEMCNT9]]
| 0x10000200
| 1
| NewKernel9
|-
| style="background: green" | Yes
| [[#CFG_MPCORECFG|CFG_MPCORECFG]]
| 0x10000FFC
| 4
|
|-
| style="background: green" | Yes
| [[#CFG_BOOTENV|CFG_BOOTENV]]
| 0x10010000
| 4
|
|-
| style="background: green" | Yes
| [[#CFG_UNITINFO|CFG_UNITINFO]]
| 0x10010010
| 1
|
|-
| style="background: green" | Yes
| ?
| 0x10010014
| 1
|
|}

==CFG_SYSPROT9 ==
Writing values to SYSPROT sets the specified bitmask. The ARM9 [[Memory_layout|bootrom]](+0x8000) is disabled by writing bit0. bit1 is used by NATIVE_FIRM to make sure console-unique TWL AES-keys are only set at hard-boot. It is not possible to set any other bits.

From disassembly of the New3DS process9, it appears that setting bit1 disables the 0x10012000+ region.

== CFG_SYSPROT11 ==
ARM11 bootrom (+0x8000) is disabled by writing bit0. It is not possible to set any other bits.

== CFG_CARDCONF ==
{| class="wikitable" border="1"
! Bit
! Description
|-
| 1-0
| Gamecard active controller select (0=NTRCARD, 1=?, 2=CTRCARD1, 3=CTRCARD2)
|-
| 8
| ?
|}

Depending on the gamecard controller that has been selected, one of the following gamecard registers will become active:
* Selecting NTRCARD will activate the register space at [[NTRCARD|0x10164000]].
* Selecting CTRCARD1 will activate the register space at [[CTRCARD|0x10004000]].
* Selecting CTRCARD2 will activate the register space at [[CTRCARD|0x10005000]].

== CFG_EXTMEMCNT9 ==
This register is presumably New3DS-only. Only bit0 is writable: 0 = disable New3DS ARM9 memory at 0x08100000 size 0x80000, 1 = enable.

This bit is set by New3DS ARM9-kernel crt0.

The data in this extended memory doesn't change when disabling the memory, then re-enabling the memory. Reading this extended memory while disabled results in zeros.

== CFG_MPCORECFG ==
Identical to [[PDN#PDN_MPCORE_CFG|PDN_MPCORE_CFG]].

== CFG_BOOTENV ==
Initially this is value zero. NATIVE_FIRM writes value 1 here when a FIRM launch begins. The [[Legacy_FIRM_PXI|LGY]] FIRM writes value 3 here when handling PXI command 0x00020080(first TWL PXI command), it also writes value 7 here when handling PXI command 0x00030080(first AGB PXI command). This register can be read to determine what "mode" the system is running under: hard-boot, FIRM launch, or TWL/AGB FIRM.

0=Cold boot, 1=CTR, 3=TWL, 5=NTR, 7=AGB

It is unknown if this register controls anything.

== CFG_UNITINFO ==
This 8-bit register is value zero for retail, non-zero for dev/debug units.

== 0x10010014 ==
In the console-unique TWL key-init/etc function the ARM9 copies the u8 value from REG_UNITINFO to this register.

This is also used by TWL_FIRM Process9.

CONFIG9 Registers

2015-04-04T11:41:37Z

Normmatt:

= Registers =
{| class="wikitable" border="1"
! Old3DS
! Name
! Address
! Width
! Used by
|-
| style="background: green" | Yes
| [[#CFG_SYSPROT9|CFG_SYSPROT9]]
| 0x10000000
| 1
| Boot9
|-
| style="background: green" | Yes
| [[#CFG_SYSPROT11|CFG_SYSPROT11]]
| 0x10000001
| 1
| Boot9
|-
| style="background: green" | Yes
| CFG_DEBUGUNIT
| 0x10000004
| 4
|
|-
| style="background: green" | Yes
| [[#CFG_CARDCONF|CFG_CARDCONF]]
| 0x1000000C
| 2
|
|-
| style="background: green" | Yes
| CFG_DEBUGGER
| 0x10000010
| 1
|
|-
| style="background: green" | Yes
| ?
| 0x10000011
| 1
|
|-
| style="background: green" | Yes
| ?
| 0x10000012
| 2
|
|-
| style="background: green" | Yes
| ?
| 0x10000014
| 2
|
|-
| style="background: green" | Yes
| ?
| 0x10000020
| 2
|
|-
| style="background: green" | Yes
| ?
| 0x10000100
| 2
|
|-
| style="background: red" | No
| [[#CFG_EXTMEMCNT9|CFG_EXTMEMCNT9]]
| 0x10000200
| 1
| NewKernel9
|-
| style="background: green" | Yes
| [[#CFG_MPCORECFG|CFG_MPCORECFG]]
| 0x10000FFC
| 4
|
|-
| style="background: green" | Yes
| ?
| 0x10001000
| 4
| Bootrom
|-
| style="background: green" | Yes
| [[#CFG_BOOTENV|CFG_BOOTENV]]
| 0x10010000
| 4
|
|-
| style="background: green" | Yes
| [[#CFG_UNITINFO|CFG_UNITINFO]]
| 0x10010010
| 1
|
|-
| style="background: green" | Yes
| ?
| 0x10010014
| 1
|
|}

==CFG_SYSPROT9 ==
Writing values to SYSPROT sets the specified bitmask. The ARM9 [[Memory_layout|bootrom]](+0x8000) is disabled by writing bit0. bit1 is used by NATIVE_FIRM to make sure console-unique TWL AES-keys are only set at hard-boot. It is not possible to set any other bits.

From disassembly of the New3DS process9, it appears that setting bit1 disables the 0x10012000+ region.

== CFG_SYSPROT11 ==
ARM11 bootrom (+0x8000) is disabled by writing bit0. It is not possible to set any other bits.

== CFG_CARDCONF ==
{| class="wikitable" border="1"
! Bit
! Description
|-
| 1-0
| Gamecard active controller select (0=NTRCARD, 1=?, 2=CTRCARD1, 3=CTRCARD2)
|-
| 8
| ?
|}

Depending on the gamecard controller that has been selected, one of the following gamecard registers will become active:
* Selecting NTRCARD will activate the register space at [[NTRCARD|0x10164000]].
* Selecting CTRCARD1 will activate the register space at [[CTRCARD|0x10004000]].
* Selecting CTRCARD2 will activate the register space at [[CTRCARD|0x10005000]].

== CFG_EXTMEMCNT9 ==
This register is presumably New3DS-only. Only bit0 is writable: 0 = disable New3DS ARM9 memory at 0x08100000 size 0x80000, 1 = enable.

This bit is set by New3DS ARM9-kernel crt0.

The data in this extended memory doesn't change when disabling the memory, then re-enabling the memory. Reading this extended memory while disabled results in zeros.

== CFG_MPCORECFG ==
Identical to [[PDN#PDN_MPCORE_CFG|PDN_MPCORE_CFG]].

== CFG_BOOTENV ==
Initially this is value zero. NATIVE_FIRM writes value 1 here when a FIRM launch begins. The [[Legacy_FIRM_PXI|LGY]] FIRM writes value 3 here when handling PXI command 0x00020080(first TWL PXI command), it also writes value 7 here when handling PXI command 0x00030080(first AGB PXI command). This register can be read to determine what "mode" the system is running under: hard-boot, FIRM launch, or TWL/AGB FIRM.

0=Cold boot, 1=CTR, 3=TWL, 5=NTR, 7=AGB

It is unknown if this register controls anything.

== CFG_UNITINFO ==
This 8-bit register is value zero for retail, non-zero for dev/debug units.

== 0x10010014 ==
In the console-unique TWL key-init/etc function the ARM9 copies the u8 value from REG_UNITINFO to this register.

This is also used by TWL_FIRM Process9.

AES Registers

2015-03-27T02:32:44Z

Normmatt: /* Keyslot ranges */

== Registers ==
{| class="wikitable" border="1"
! Old3DS
! Name
! Address
! Width
! RW
|-
| style="background: green" | Yes
| [[#AES_CNT|AES_CNT]]
| 0x10009000
| 4
| RW
|-
| style="background: green" | Yes
| [[#AES_BLKCNT|AES_BLKCNT]]
| 0x10009004
| 4
| W?
|-
| style="background: green" | Yes
| [[#AES_WRFIFO/AES_RDFIFO|AES_WRFIFO]]
| 0x10009008
| 4
| W
|-
| style="background: green" | Yes
| [[#AES_WRFIFO/AES_RDFIFO|AES_RDFIFO]]
| 0x1000900C
| 4
| R
|-
| style="background: green" | Yes
| AES_KEYSEL
| 0x10009010
| 1
| RW
|-
| style="background: green" | Yes
| [[#AES_KEYCNT|AES_KEYCNT]]
| 0x10009011
| 1
| RW
|-
| style="background: green" | Yes
| [[#AES_CTR|AES_CTR]]
| 0x10009020
| 16
| W
|-
| style="background: green" | Yes
| [[#AES_MAC|AES_MAC]]
| 0x10009030
| 16
| W
|-
| style="background: green" | Yes
| AES_KEY0
| 0x10009040
| 48
| W
|-
| style="background: green" | Yes
| AES_KEY1
| 0x10009070
| 48
| W
|-
| style="background: green" | Yes
| AES_KEY2
| 0x100090A0
| 48
| W
|-
| style="background: green" | Yes
| AES_KEY3
| 0x100090D0
| 48
| W
|-
| style="background: green" | Yes
| AES_KEYFIFO
| 0x10009100
| 4
| W
|-
| style="background: green" | Yes
| AES_KEYXFIFO
| 0x10009104
| 4
| W
|-
| style="background: green" | Yes
| AES_KEYYFIFO
| 0x10009108
| 4
| W
|}

== AES_CNT ==
{| class="wikitable" border="1"
! Bit
! Description
|-
| 4-0
| Write FIFO count (0-16)
|-
| 9-5
| Read FIFO count (0-16)
|-
| 10
| Flush write FIFO (1=Clear write FIFO)
|-
| 11
| Flush read fifo (1=Clear read FIFO)
|-
| 18-16
| MAC size (encoding = (maclen-2)/2)
|-
| 19
|? (MAC related)
|-
| 20
| MAC input control (0 = read MAC from FIFO, 1 = read from MAC register)
|-
| 21
| MAC status (0 = invalid, 1 = verified)
|-
| 22
| Output endianness (1=Big endian, 0=Little endian)
|-
| 23
| Input endianness (1=Big endian, 0=Little endian)
|-
| 24
| Output word order (1=Normal order, 0=Reversed order)
|-
| 25
| Input word order (1=Normal order, 0=Reversed order)
|-
|-
| 26
| Update keyslot (selects the keyslot specified by REG_AESKEYSEL when this bit is set)
|-
| 29-27
| Mode (0=CCM decrypt, 1=CCM encrypt, 2=CTR, 3=CTR, 4=CBC decrypt, 5=CBC encrypt, 6=ECB decrypt, 7=ECB encrypt)
|-
| 30
| Interrupt enable (1=enable, 0=disable)
|-
| 31
| Start (1=enable/busy, 0=idle)
|}

When bit31 is clear, the AES engine will handle keyslot-selection when bit26 is set immediately. When bit31 is set, the AES engine won't handle bit26 immediately, instead the AES engine will automatically handle the already-set bit26 once bit31 clears(current AES operation finishes).

Clearing bit31 while the AES engine is doing crypto will result in the AES engine stopping crypto, once it finishes processing the current block.

== AES_BLKCNT ==

{| class="wikitable" border="1"
! Bit
! Description
|-
| 16-31
| (Data length)>>4
|}

== AES_WRFIFO/AES_RDFIFO ==
Up to 128 bytes of input data can be buffered.

The input data for the AES crypto operation is written to REG_AESWRFIFO, the output data is read from REG_AESRDFIFO.

Reading from REG_AESRDFIFO when there's no data available in the RDFIFO will result in reading the last word that was in the RDFIFO.

== AES_KEYCNT ==
{| class="wikitable" border="1"
! Bit
! Description
|-
| 5-0
| Keyslot
|-
| 6
| Hardware key-generator type: 0 = 3DS, 1 = DSi.
|-
| 7
| This normally has value 1 written here when updating keys. 0 = disable key FIFO flush, 1 = enable key FIFO flush.
|}

Bit6 is only used when keyslots >=4 are used, value1 has the same affect as doing key-init with the TWL keyslots. Bit6 is only checked when a keyY was completely written, for when the final-normalkey needs updated via the key-generator. Changing bit6 has no affect on the generated normalkey when writing to this bit immediately after writing the last keyY word.

== AES_CTR ==
This register specifies the counter (CTR mode), nonce (CCM mode) or the initialization vector (CBC mode) depending on the mode of operation.
For CBC and CTR mode this register takes up the full 16 bytes, but for CCM mode the nonce is only the first 12 bytes.

== AES_MAC ==
This register specifies the message authentication code (MAC) for use in CCM mode.

== Endianness and word order ==
When writing to the AES_CTR or AES_MAC register, the hardware will process the written data according to the current input endianness specified in AES_CNT. However, the current specified input word order will not be honored for this register, and always defaults to reversed word order. Therefore, for normal word order, the reversal must be carried out manually if required.

== Keyslot ranges ==
This is approximately a table of what is set by bootrom before booting into FIRM. Often it appears that keyslots in groups of 4 have the same keyX, and sometimes also same keyY set.

{| class="wikitable" border="1"
! Keyslot
! Name
! KeyX
! KeyY/Normal-key
! Console unique.
|-
| 0x00-0x03
| TWL keys.
| Probably unset.
| Probably unset.
| -
|-
| 0x04-0x07
| NAND partition keys.
| Same for all.
| Different for all.
| Yes.
|-
| 0x08-0x0B
| DSiWare export key, and rest unknown.
| Same for all.
| Different for all.
| Yes.
|-
| 0x0C-0x0F.
| SSL cert key.
| Same for all.
| Same for all.
| No.
|-
| 0x10-0x17
| -
| Not set.
| Not set.
| -
|-
| 0x18-0x1B:
| Never used.
| Same for all.
| Same for all.
| Yes.
|-
| 0x1C-0x1F:
| Never used.
| Same for all.
| Same for all.
| Yes.
|-
| 0x20-0x23:
| Never used?
| Same for all.
| Same for all.
| Only keyX/keyY.
|-
| 0x24-0x2B
| Never used?
| Individually set.
| Individually set.
| Mixed.
|-
| 0x2C-0x2F
| Various uniques.
| Same for all.
| Same for all, probably.
| No.
|-
| 0x30-0x33
| Various.
| Same for all.
| Same for all???
| No.
|-
| 0x34-0x37
| Various uses.
| Same for all.
| Same for all, probably.
| No.
|-
| 0x38-0x3B
| Various uses.
| Same for all.
| Different for all.
| No.
|-
| 0x3C-3F
| Various uses.
| Individually set.
| Individually set.
| No.
|}

Keyslot pairs (0x24, 0x28) and (0x38, 0x3C) shares the same normal-key, while at the same time having different keyX's. This suggests they were set to same normal-key by bootrom.

== Keyslots ==
There are 0x40 keyslots, each of which stores three keys called keyX, keyY and normalkey. All keys can be set explicitly, but the normalkey can optionally be generated using a hardware key scrambler instead (see below). There is no way to read the contents of a keyslot.

{| class="wikitable" border="1"
! Keyslot
! Description
! KeyX
! KeyY
! Normal-key
! Old3DS
|-
| 0x00-0x03
| TWL keys.
| NATIVE_FIRM hard-boot.
| NATIVE_FIRM hard-boot.
| -
| Yes
|-
| 0x04..0x07
| [[Flash_Filesystem|NAND]] partition keys.

Keyslot is determined by [[NCSD]] partition FS type and encryption type. The New3DS Process9 sets the keyY for keyslot 0x05 (New3DS CTRNAND) to a key from .(ro)data.
| Bootrom.
| Bootrom.
| -
| Yes
|-
| 0x0A
| DSiWare export key.

Used for encrypting the all-zero 0x10-byte block in the [[DSiWare_Exports|DSiWare_Exports]] header. Console-unique.
| See above keyslot info.
| See above keyslot info.
| -
| Yes
|-
| 0x0D
| SSL-certificate key.

See [[PSPXI:EncryptDecryptAes|EncryptDecryptAes]].
| -
| -
| Bootrom.
| Yes
|-
| 0x11
| Temporary keyslot.

Used by FIRM for general normal-key crypto. Also used by the New3DS [[FIRM]] arm9 binary loader.
| Arm9Loader.
| Arm9Loader.
| NATIVE_FIRM.
| Yes
|-
| 0x14
| Starting with [[5.0.0-11]], NATIVE_FIRM Process9 now sets the keyY for this to the same one it uses for initializing 3 of the keyslots' keyYs from [[PSPXI:EncryptDecryptAes|here]].
| Bootrom.
| NATIVE_FIRM boot.
| -
| Yes
|-
| 0x15
| Used/initialized by the New3DS arm9 binary loader, see [[FIRM|here]].
| Arm9Loader.
| Arm9Loader.
| See previous info for this keyslot.
| No
|-
| 0x16
| Used/initialized by the New3DS arm9 binary loader starting with [[9.5.0-22|9.5.0-X]], see [[FIRM|here]].
| Arm9Loader.
| Arm9Loader.
| See previous info for this keyslot.
| No
|-
| 0x18..0x1F
| These are the New3DS keyslots, where the keyX is generated with keyslot 0x11 by the New3DS arm9 binary [[FIRM|loader]]. As of [[FIRM]] [[9.5.0-22|9.5.0-X]] keyslots 0x1B..0x1F are not yet used by Process9.
| Arm9Loader.
| NATIVE_FIRM / see previous info for these keyslots.
| See previous info for these keyslots.
| No
|-
| 0x18
| New3DS [[NCCH]] key.

Starting with [[9.3.0-21|9.3.0-X]].
| Arm9Loader.
| NATIVE_FIRM
| -
| No
|-
| 0x19
| New3DS gamecard [[Savegames|savedata]] AES-MAC key.

Equivalent of keyslot 0x33, used when a [[NCSD]] flag is set to a certain value (implemented with [[9.3.0-21|9.3.0-X]]).
| Arm9Loader.
| NATIVE_FIRM
| -
| No
|-
| 0x1A
| New3DS gamecard [[Savegames|savedata]] actual key.

Equivalent of keyslot 0x37, used when a [[NCSD]] flag is set to a certain value (implemented with [[9.3.0-21|9.3.0-X]]).
| Arm9Loader.
| NATIVE_FIRM
| -
| No
|-
| 0x25
| [[7.0.0-13|v7.0]] [[NCCH]] key.
| NATIVE_FIRM [[Savegames#6.0.0-11_Savegame_keyY|boot]].
| NATIVE_FIRM.
| -
| Yes
|-
| 0x2C
| [[NCCH|NCCH]] key.
| Bootrom.
| Process9.
| -
| Yes
|-
| 0x2D
| UDS local-WLAN CCMP key.

See [[PSPXI:EncryptDecryptAes|EncryptDecryptAes]].
| Bootrom.
| Bootrom.
| -
| Yes
|-
| 0x2E
| Streetpass key.

See [[PSPXI:EncryptDecryptAes|EncryptDecryptAes]].
| Bootrom.
| NATIVE_FIRM.
| -
| Yes
|-
| 0x2F
| [[Savegames#6.0.0-11_Savegame_keyY|v6.0]] save key.
| Bootrom.
| NATIVE_FIRM.
| -
| Yes
|-
| 0x30
| SD/NAND AES-MAC key.

This keyY is initialized via [[Nand/private/movable.sed|movable.sed]]. This is used for calculating the AESMACs under SD [[SD_Filesystem|/Nintendo 3DS/<ID0>/<ID1>/]] (except [[DSiWare_Exports]]) and [[Flash_Filesystem|NAND]] /data/.
| Bootrom.
| NATIVE_FIRM.
| -
| Yes
|-
| 0x31
| APT wrap key.

See [[PSPXI:EncryptDecryptAes|EncryptDecryptAes]]. NATIVE_FIRM sets this keyY to the same one used for keyslot 0x2E.
| Bootrom.
| NATIVE_FIRM.
| -
| Yes
|-
| 0x32
| Unknown.

See [[PSPXI:EncryptDecryptAes|EncryptDecryptAes]].
| Bootrom.
| Bootrom.
| -
| Yes
|-
| 0x33
| Gamecard [[Savegames|savedata]] AES-MAC.
| Bootrom.
| NATIVE_FIRM.
| -
| Yes
|-
| 0x34
| SD key.

This keyY is initialized via [[Nand/private/movable.sed|movable.sed]]. This is used for encrypting *all* SD card data under [[SD_Filesystem|/Nintendo 3DS/<ID0>/<ID1>/]].
| Bootrom.
| NATIVE_FIRM.
| -
| Yes
|-
| 0x35
| Movable.sed key.

This is the keyslot used for movable.sed encryption + AES-MAC with the import/export [[FSPXI:ImportIntegrityVerificationSeed|commands]].
| Bootrom.
| Bootrom.
| -
| Yes
|-
| 0x36
| Unknown. Used by friends module.

See [[PSPXI:EncryptDecryptAes|EncryptDecryptAes]].
| Bootrom.
| Bootrom.
| -
| Yes
|-
| 0x37
| Gamecard [[Savegames|savedata]] actual key.
| Bootrom.
| NATIVE_FIRM.
| -
| Yes
|-
| 0x38
| BOSS key.

See [[PSPXI:EncryptDecryptAes|EncryptDecryptAes]].
| Bootrom.
| Bootrom.
| -
| Yes
|-
| 0x39
| Download Play key, and unknown key.

This keyslot is used for two different keys. One is available via [[PSPXI:EncryptDecryptAes|EncryptDecryptAes]]. NATIVE_FIRM sets this keyY to the same one used for keyslot 0x2E.
| Bootrom.
| NATIVE_FIRM.
| -
| Yes
|-
| 0x3A
| DSiWare export key.

This keyY is initialized via [[Nand/private/movable.sed|movable.sed]]. This is used for calculating the AESMACs for SD [[DSiWare_Exports]].
| Bootrom.
| NATIVE_FIRM.
| -
| Yes
|-
| 0x3D
| Common key.

Used to decrypt title keys in [[Ticket]].
| Bootrom.
| NATIVE_FIRM.
| -
| Yes
|}

=== Updating keydata ===
The contents of the keyslot specified in REG_AESKEYCNT can be updated by consecutively writing four words to REG_AESKEYXFIFO (keyX), REG_AESKEYYFIFO(keyY), or REG_AESKEYFIFO (normalkey).

After writing to a keyslot, the keyslot must be selected again(write REG_AESKEYSEL + set REG_AESCNT bit26), even when writing to the same keyslot. Writing the last word to a key FIFO immediately after selecting a keyslot will not affect the keyslot keydata that gets used at that time, the new keydata will not get used until the keyslot gets selected again.

Writing to the key FIFOs with byte writes results in the AES engine converting the byte to a word for setting the key word, with this: word = (byteval) | (byteval<<8) | (byteval<<16) | (byteval<<24). The result is the same regardless of which FIFO register byte was written to.

The TWL keyslots 0x00-0x03 can be set directly by writing to the REG_AESKEY0-REG_AESKEY3 registers.

The key FIFOs can be written simultaneously. For example, executing the following 4 times will result in the keyX and keyY being set to all-zero(unknown for normalkey): memset(0x10009100, 0, 0x100);

Each key FIFO has a 0x10-byte tmp-buffer for storing the words written to that FIFO. Once the last word is written to a key FIFO, the filled tmp-buffer is then written to the key-data for the keyslot selected by REG_AESKEYCNT at the time the last word was written.

=== keyX ===
The ARM9 bootrom initializes the keyX for certain 3DS keyslots, the ARM9 bootrom may also initialize the keyY for certain keyslots. In certain cases Process9 may also set the keyX.

=== Hardware key generator ===
A dedicated hardware key generator can be used to generate a keyslot's normalkey from its keyX and keyY. The hardware key generator is triggered by writing the keyY, which is the only way to trigger it with the 3DS keyslots. The algorithm used for key generation is unknown.

Unless noted otherwise, all keyslots on retail units use the hardware key-generator.

=== FIRM-launch key clearing ===
Starting with [[9.0.0-20]] the Process9 FIRM-launch code now "clears" the following AES keyslots, with certain keydata by writing the normal-key: 0x15 and 0x18-0x20. These are the keyslots used by the New3DS [[FIRM]] arm9bin loader(minus keyslot 0x11), the New3DS Process9 does this too.

Factory Setup

2015-03-25T09:58:41Z

Normmatt:

Factory Setup

2015-03-25T09:56:44Z

Normmatt:

ErrDisp

2015-02-16T22:56:04Z

Normmatt: /* output, where *((u8*)errinfo) == 4 */

This system process handles displaying the error screens, such as "an error has occurred, the system needs shutdown". This can also display a register dump for exceptions, and info for fatal errors. (Normally the black-screen errors are displayed on retail, while the latter is displayed on development units.)

The register dump/fatal error info can also be written to [[nandrw/sys/native.log]]. On retail consoles, the system does not notify ErrDisp that any user-land exceptions occurred, ErrDisp is only notified for this on dev/debug units. Therefore, on retail consoles native.log only contains info from fatal errors. Starting with [[5.0.0-11]] ErrDisp no longer writes logs to native.log, except when the error-type is value 5 and when other checks with the errorinfo structure are successful (normally processes using this port never use error-type 5).

The bottom screen displays the error screen like "error has occurred", even with a development 3DS. The top screen can display the development error info, this is only displayed when [[Configuration_Memory|UNITINFO]] bit0 is clear, for a development 3DS.

ErrDisp handles "returning" to Home Menu via [[NSS:RebootSystem]], which triggers a hardware system reboot.

= ErrDisp error port "err:f" =
{| class="wikitable" border="1"
|-
! Command Header
! Description
|-
| 0x00010800
| ThrowFatalError(0x80-byte errorinfo)
|-
| 0x00020042
| (size, <nowiki>(size<<14) | 2</nowiki>, errorinfoptr) This is similar to cmd1, except with this the input buffer is copied to final output errorinfo+0x80 instead of +0x0, via the ARM11 kernel. Max size is 0x100. ErrDisp doesn't do anything in the cmd-handler for this command at all, besides checking the command header and buffer header.
|}

= output, where *((u8*)errinfo) == 4 =
{| class="wikitable" border="1"
|-
! Entry
! Format string
! Format args
! Description
|-
| PID
| 0x%08X_0x%08X
| *(u32*)(errinfo + 0x10), *(u32*)(errinfo + 0x14)
| Process ID
|-
| REV
| %d
| *(u16*)(errinfo + 2) <nowiki>|</nowiki> (*(u8*)(errinfo + 1) << 16)
| ?
|-
| AID
| 0x%08X_0x%08X
| *(u32*)(errinfo + 0x18), *(u32*)(errinfo + 0x1C)
| Application ID?
|-
| RSL
| 0x%08X
| *(u32*)(errinfo + 4)
| Error code
|-
| Level
| %d
| *(u32*)(errinfo + 4) & 0x80000000 ? (*(u32*)(errinfo + 4) >> 0x27) - 0x20 : *(u32*)(errinfo + 4) >> 0x27
| Error code level
|-
| Summary
| %d
| (*(u32*)(errinfo + 4) & 0x7E00000) >> 21
| Error code summary
|-
| Module
| %d
| (*(u32*)(errinfo + 4) & 0x3FC00) >> 10
| Error code module
|-
| Desc
| %d
| *(u32*)(errinfo + 4) & 0x3FF
| Error code description
|-
| ?
| %0.*s
| 0x2E, for (int i = 0; i < 2; i++) (errinfo + (((i << 3) - i) + (i << 4)) << 1) + 0x20
| ?
|-
| Datetime
| %04d/%02d/%02d %02d:%02d:%02d
| ?
| ?
|}

ErrDisp

2015-02-16T22:55:08Z

Normmatt: /* output, where *((u8*)errinfo) == 4 */

This system process handles displaying the error screens, such as "an error has occurred, the system needs shutdown". This can also display a register dump for exceptions, and info for fatal errors. (Normally the black-screen errors are displayed on retail, while the latter is displayed on development units.)

The register dump/fatal error info can also be written to [[nandrw/sys/native.log]]. On retail consoles, the system does not notify ErrDisp that any user-land exceptions occurred, ErrDisp is only notified for this on dev/debug units. Therefore, on retail consoles native.log only contains info from fatal errors. Starting with [[5.0.0-11]] ErrDisp no longer writes logs to native.log, except when the error-type is value 5 and when other checks with the errorinfo structure are successful (normally processes using this port never use error-type 5).

The bottom screen displays the error screen like "error has occurred", even with a development 3DS. The top screen can display the development error info, this is only displayed when [[Configuration_Memory|UNITINFO]] bit0 is clear, for a development 3DS.

ErrDisp handles "returning" to Home Menu via [[NSS:RebootSystem]], which triggers a hardware system reboot.

= ErrDisp error port "err:f" =
{| class="wikitable" border="1"
|-
! Command Header
! Description
|-
| 0x00010800
| ThrowFatalError(0x80-byte errorinfo)
|-
| 0x00020042
| (size, <nowiki>(size<<14) | 2</nowiki>, errorinfoptr) This is similar to cmd1, except with this the input buffer is copied to final output errorinfo+0x80 instead of +0x0, via the ARM11 kernel. Max size is 0x100. ErrDisp doesn't do anything in the cmd-handler for this command at all, besides checking the command header and buffer header.
|}

= output, where *((u8*)errinfo) == 4 =
{| class="wikitable" border="1"
|-
! Entry
! Format string
! Format args
! Description
|-
| PID
| 0x%08X_0x%08X
| *(u32*)(errinfo + 0x10), *(u32*)(errinfo + 0x14)
| Process ID
|-
| REV
| %d
| *(u16*)(errinfo + 2) <nowiki>|</nowiki> (*(u8*)(errinfo + 1) << 16)
| ?
|-
| AID
| 0x%08X_0x%08X
| *(u32*)(errinfo + 0x18), *(u32*)(errinfo + 0x1C)
| Application ID?
|-
| RSL
| 0x%08X
| *(u32*)(errinfo + 4)
| Error code
|-
| Level
| %d
| *(u32*)(errinfo + 4) & 0x80000000 ? (*(u32*)(errinfo + 4) >> 0x27) - 0x20 : *(u32*)(errinfo + 4) >> 0x27
| Error code level
|-
| Summary
| %d
| (*(u32*)(errinfo + 4) & 0x7E00000) >> 21
| Error code summary
|-
| Module
| %d
| (*(u32*)(errinfo + 4) & 0x3FC00) >> 10
| Error code module
|-
| Desc
| %d
| (*(u32*)(errinfo + 4) << 22) >> 22
| Error code description
|-
| ?
| %0.*s
| 0x2E, for (int i = 0; i < 2; i++) (errinfo + (((i << 3) - i) + (i << 4)) << 1) + 0x20
| ?
|-
| Datetime
| %04d/%02d/%02d %02d:%02d:%02d
| ?
| ?
|}

ErrDisp

2015-02-16T22:51:16Z

Normmatt: /* output, where *((u8*)errinfo) == 4 */

This system process handles displaying the error screens, such as "an error has occurred, the system needs shutdown". This can also display a register dump for exceptions, and info for fatal errors. (Normally the black-screen errors are displayed on retail, while the latter is displayed on development units.)

The register dump/fatal error info can also be written to [[nandrw/sys/native.log]]. On retail consoles, the system does not notify ErrDisp that any user-land exceptions occurred, ErrDisp is only notified for this on dev/debug units. Therefore, on retail consoles native.log only contains info from fatal errors. Starting with [[5.0.0-11]] ErrDisp no longer writes logs to native.log, except when the error-type is value 5 and when other checks with the errorinfo structure are successful (normally processes using this port never use error-type 5).

The bottom screen displays the error screen like "error has occurred", even with a development 3DS. The top screen can display the development error info, this is only displayed when [[Configuration_Memory|UNITINFO]] bit0 is clear, for a development 3DS.

ErrDisp handles "returning" to Home Menu via [[NSS:RebootSystem]], which triggers a hardware system reboot.

= ErrDisp error port "err:f" =
{| class="wikitable" border="1"
|-
! Command Header
! Description
|-
| 0x00010800
| ThrowFatalError(0x80-byte errorinfo)
|-
| 0x00020042
| (size, <nowiki>(size<<14) | 2</nowiki>, errorinfoptr) This is similar to cmd1, except with this the input buffer is copied to final output errorinfo+0x80 instead of +0x0, via the ARM11 kernel. Max size is 0x100. ErrDisp doesn't do anything in the cmd-handler for this command at all, besides checking the command header and buffer header.
|}

= output, where *((u8*)errinfo) == 4 =
{| class="wikitable" border="1"
|-
! Entry
! Format string
! Format args
! Description
|-
| PID
| 0x%08X_0x%08X
| *(u32*)(errinfo + 0x10), *(u32*)(errinfo + 0x14)
| Process ID
|-
| REV
| %d
| *(u16*)(errinfo + 2) <nowiki>|</nowiki> (*(u8*)(errinfo + 1) << 16)
| ?
|-
| AID
| 0x%08X_0x%08X
| 0x41900000, *(u32*)(errinfo + 0x18)
| Application ID?
|-
| RSL
| 0x%08X
| *(u32*)(errinfo + 4)
| Error code
|-
| Level
| %d
| *(u32*)(errinfo + 4) & 0x80000000 ? (*(u32*)(errinfo + 4) >> 0x27) - 0x20 : *(u32*)(errinfo + 4) >> 0x27
| Error code level
|-
| Summary
| %d
| (*(u32*)(errinfo + 4) & 0x7E00000) >> 21
| Error code summary
|-
| Module
| %d
| (*(u32*)(errinfo + 4) & 0x3FC00) >> 10
| Error code module
|-
| Desc
| %d
| (*(u32*)(errinfo + 4) << 22) >> 22
| Error code description
|-
| ?
| %0.*s
| 0x2E, for (int i = 0; i < 2; i++) (errinfo + (((i << 3) - i) + (i << 4)) << 1) + 0x20
| ?
|-
| Datetime
| %04d/%02d/%02d %02d:%02d:%02d
| ?
| ?
|}

Title list

2015-02-03T06:35:09Z

Normmatt: /* 00040138 - System Firmware */

The Nintendo 3DS utilizes a similar title-based organization as seen in the Wii and DSi platforms. The update server is located [http://nus.cdn.c.shop.nintendowifi.net/ccs/download/ here]. When using SSL, the update/shop servers must be accessed via SSLv3.

The organization of Title IDs has not been documented fully yet. Region info isn't stored in title IDs however there does appear to be evidence that the regions are sequential, similar to how Wii System Menu Updates are ordered: JPN USA EUR KOR and CHN (introduced with the DSi). 3DS has one additional region: TWN.

Note: The terms 'Title ID', 'Partition ID' and 'Media ID' are interchangeable.

The 3DS retrieves system [[CommonETicket|tickets]] with SOAP request GetSystemCommonETicket, instead of directly downloading the cetk with HTTPS. The cetk is still accessible via HTTP, however 3DS doesn't use direct HTTP for this.

'''TitleID Structure''': 0xCCCCABCDLLLLLLRR

* CCCC defines the console '''Platform''' (5=WiiU, 4=3DS, 3=DSi, 1=[http://wiibrew.org/wiki/Title_database Wii])
* ABCD defines the '''Content Category''' of the title, Demo, DLPChild, etc.
* LLLLLL For CTR titles, this is the title's '''Unique ID'''. For TWL converted titles this is in two sections grouped as SSLLLL. SS is the old title identification used by the DSi and is made redundant by 'ABCD'. LLLL is the TWL title's 'Unique ID'. There are restrictions on the Unique ID, see below for more info.
* RR This is the Title ID '''Variation''', and has various uses.

'''Content Categories''':

This u16 is a collection bit mask flag. Each Category is a group of one or more bit masks.

Specific Bitmask Flags:
{| class="wikitable" border="1"
|-
! Category
! Bitmask
|-
| Normal
| 0x0
|-
| DlpChild
| 0x1
|-
| Demo
| 0x2
|-
| Contents
| 0x3
|-
| AddOnContents
| 0x4
|-
| Patch
| 0x6
|-
| CannotExecution
| 0x8
|-
| System
| 0x10
|-
| RequireBatchUpdate
| 0x20
|-
| NotRequireUserApproval
| 0x40
|-
| NotRequireRightForMount
| 0x80
|-
| CanSkipConvertJumpId
| 0x100
|-
| TWL
| 0x8000
|}

* TWL Category bit mask are carried over from original TWL category bitmasks (ignoring bit mask 0x8000), so TWL system titles have the bitmask of 0x8001.

* System titles (TWL and CTR) are eligible to be updated during a System Update.

* Bit Mask 0x4000 appears to be reserved, as it renders the ''TWL'' and ''System'' bit masks useless.

'''Unique ID Restrictions''':

For the CTR titles, there appears to be is a correlation between Unique IDs (UID) and 3DS 'title types'. For developer titles this is known(shown below), and retail titles *appear* to follow suite. It is unknown if this correlation is enforced on retail units, or if it is just for organisation purposes.

{| class="wikitable" border="1"
|-
! TITLE TYPE
! UNIQUE ID RANGE
|-
| System
| 0x0 - 0x2FF
|-
| Application
| 0x300 - 0xF7FFF
|-
| Evaluation
| 0xF8000 -0xFFFFF
|-
| Prototype*
| 0xFF000 - 0xFF3FF
|}
<nowiki>*</nowiki>On the home menu, titles with UIDs within the 'Prototype' range, appear on the home menu after install without the gift fanfare.

ProgramID/titleID low bitmask 0xF0000000(uniqueID bitmask 0xF00000) seems to be related to which hardware the title is allowed to run on. 3DS code tends to clear this bitmask when handling programIDs. This bitmask is normally zero. When this is 0x2, this indicates that the title only runs on [[New_3DS]](that is, programID-low 0x20000000 / uniqueID 0x200000).

'''TitleID Variation''':

This u8 allows enumeration of titles from the same category and unique ID. Common uses are explained below:

* CTR System Titles: The 3DS has two copies of most modules/applets/archives for usage with either the NATIVE_FIRM or SAFE_MODE_FIRM. This is allowed for, by changing the title ID variation of the title to match the core version set by the FIRM it is designed to be used with:
{| class="wikitable" border="1"
|-
! RR
! MEANING
|-
| 02
| System Title (Core version 0x2)
|-
| 03
| SAFE_MODE System Title (Core version 0x3)
|}
Normally on retail SAFE_MODE ARM11 [[NCCH#CXI|CXI]] titles can't be launched, since the [[Configuration_Memory|system]] core version doesn't match the CXI exheader core version.

* Only most non-Normal Applications are known to utilise Title ID variation, this is explained in their respective sections on this page.

* [[3DS Development Unit Software|Dev Menu]] installs CTR Applications with a TitleID variation of 0x02 to the CTR NAND.

* Title ID variation is ignored for TWL titles, this value is carried over from the original TWL title ID and is used for region lock:

=== Versions ===

v## = 0xHHHH = 0bBBBBBBBB...

* The version major,minor and micro can be extracted from the version number by converting the 16 bit number to binary
* 6 bits : Major
* 6 bits : Minor
* 4 bits : Micro ('Build' in some contexts)
* i.e. v2069 (Taken from 000400DB00017302) = 0b000010 000001 0101 means that the title version is v2.1.5. For reasons unknown, the CVer build, stored in the RomFS of the title, has always been zero (at time of writing), regardless of the CVer build in the TMD. So when predicting the firmware version, this should be taken into account.

NOTE: This Title list is a condensed version, only the System Titles lists are full lists. For a full list of titles on Nintendo's CDN, see [http://mtheall.com/~mtheall/tmdlist.php here]. The reports/title-lists from [http://yls8.mtheall.com/ninupdates/reports.php here] are automatically obtained from the system update SOAP.

== CTR System Titles ==
{| class="wikitable" border="1"
|-
! System Category
! Bit Mask(s)
! Category Bit Mask
|-
| Application (SYSTEM_APPLICATION)
| Normal<nowiki>|</nowiki>System
| 0x0010
|-
| System Data Archives (SYSTEM_CONTENT)
| Contents<nowiki>|</nowiki>CannotExecution<nowiki>|</nowiki>System
| 0x001B
|-
| Shared Data Archives (SHARED_CONTENT)
| Contents<nowiki>|</nowiki>CannotExecution<nowiki>|</nowiki>System<nowiki>|</nowiki>NotRequireRightForMount
| 0x009B
|-
| System Data Archives (AUTO_UPDATE_CONTENT)
| Contents<nowiki>|</nowiki>CannotExecution<nowiki>|</nowiki>System<nowiki>|</nowiki>NotRequireUserApproval<nowiki>|</nowiki>NotRequireRightForMount
| 0x00DB
|-
| Applet (APPLET)
| Normal<nowiki>|</nowiki>System<nowiki>|</nowiki>RequireBatchUpdate
| 0x0030
|-
| Module (BASE)
| Normal<nowiki>|</nowiki>System<nowiki>|</nowiki>RequireBatchUpdate<nowiki>|</nowiki>CanSkipConvertJumpId
| 0x0130
|-
| Firmware (FIRMWARE)
| Normal<nowiki>|</nowiki>CannotExecution<nowiki>|</nowiki>System<nowiki>|</nowiki>RequireBatchUpdate<nowiki>|</nowiki>CanSkipConvertJumpId
| 0x0138
|}

=== 00040010 - System Applications ===
The versions for CHN, KOR, and TWN are separate from the other regions.

{| class="wikitable" border="1"
|-
! JPN TIDLow
! USA TIDLow
! EUR TIDLow
! CHN TIDLow
! KOR TIDLow
! TWN TIDLow
! Description
! JPN Versions
! EUR Versions
! USA Versions
! CHN Versions
! KOR Versions
! TWN Versions
! Status
|-
| 00020000
| 00021000
| 00022000
| 00026000
| 00027000
| 00028000
| [[System Settings]] (mset)
| [[1.0.0-0|v0]], [[2.0.0-2|v1027]], [[3.0.0-5|v2060]], [[4.0.0-7|v3074]], [[5.0.0-11|v4097]], [[6.0.0-11|v5127]], [[7.0.0-13|v6157]], [[7.2.0-17|v7173]], [[8.1.0-0_New3DS|v8198]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v9224]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1027]], [[3.0.0-5|v2061]], [[4.0.0-7|v3075]], [[5.0.0-11|v4097]], [[6.0.0-11|v5127]], [[7.0.0-13|v6157]], [[7.2.0-17|v7174]], [[9.0.0-20|v8202]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1027]], [[3.0.0-5|v2062]], [[4.0.0-7|v3078]], [[5.0.0-11|v4098]], [[6.0.0-11|v5128]], [[7.0.0-13|v6157]], [[7.2.0-17|v7174]], [[9.0.0-20|v8203]]
| [[4.0.0-7|v8]], [[4.4.0-10|v1024]](CHN-only sysupdate for just mset), [[5.0.0-11|v2049]], [[7.0.0-13|v3075]]
| [[4.0.0-7|v1026]], [[5.0.0-11|v2049]], [[7.0.0-13|v4098]]
| [[4.1.0-8|v8]], [[4.2.0-9|v1024]], [[5.0.0-11|v2050]], [[7.0.0-13|v3074]]
| Active
|-
| 00020100
| 00021100
| 00022100
| 00026100
| 00027100
| 00028100
| [[Download Play]] (dlplay)
| [[1.0.0-0|v0]], [[2.1.0-4|v1026]], [[4.0.0-7|v2051]], [[9.0.0-20|v3072]](Also for [[8.1.0-0_New3DS]])
| [[1.0.0-0|v0]], [[2.1.0-4|v1026]], [[4.0.0-7|v2051]], [[9.0.0-20|v3073]]
| [[1.0.0-0|v0]], [[2.1.0-4|v1026]], [[4.0.0-7|v2051]], [[9.0.0-20|v3073]]
| [[4.0.0-7|v4]]
| [[4.0.0-7|v1027]]
| [[4.1.0-8|v4]]
| Active
|-
| 00020200
| 00021200
| 00022200
| 00026200
| 00027200
| 00028200
| [[Activity Log]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[3.0.0-5|v2051]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[3.0.0-5|v2054]], [[7.0.0-13|v2064]]
| Same as EUR
| [[4.0.0-7|v3]]
| [[4.0.0-7|v2]], [[7.0.0-13|v16]]
| [[4.1.0-8|v2]]
| Active
|-
| 00020300
| 00021300
| 00022300
| 00026300
| 00027300
| 00028300
| [[Health and Safety Information]]
| [[1.0.0-0|v0]], [[4.0.0-7|v1024]], [[6.0.0-11|v2050]]
| [[1.0.0-0|v0]], [[3.0.0-5|v1024]], [[4.0.0-7|v2050]], [[6.0.0-11|v3077]]
| [[1.0.0-0|v0]], [[4.0.0-7|v1026]], [[6.1.0-12U|v2051]]
| [[4.0.0-7|v5]]
| [[4.0.0-7|v2]]
| [[4.1.0-8|v5]]
| Active
|-
| 20020300
| 20021300
| 20022300
| N/A
| N/A
| N/A
| [[New_3DS]] [[Health and Safety Information]]
| [[8.1.0-0_New3DS|v2]], [[9.3.0-21|v17]]
| [[8.1.0-0_New3DS|v1]]
| Same as EUR.
| N/A
| N/A
| N/A
| Active
|-
| 00020400
| 00021400
| 00022400
| 00026400
| 00027400
| 00028400
| [[Nintendo 3DS Camera]] (CtrApp)
| [[1.0.0-0|v0]], [[2.1.0-4|v16]], [[3.0.0-5|v1038]], [[4.0.0-7|v2048]], [[6.0.0-11|v3073]], [[9.0.0-20|v4097]](Also for [[8.1.0-0_New3DS]])
| [[1.0.0-0|v0]], [[2.1.0-4|v16]], [[3.0.0-5|v1039]], [[4.0.0-7|v2048]], [[6.0.0-11|v3073]], [[7.0.0-13|v3088]], [[9.0.0-20|v4097]]
| [[1.0.0-0|v0]], [[2.1.0-4|v16]], [[3.0.0-5|v1039]], [[4.0.0-7|v2048]], [[6.1.0-12U|v3074]], [[7.0.0-13|v3088]], [[9.0.0-20|v4097]]
| [[4.0.0-7|v3]]
| [[4.0.0-7|v2]], [[7.0.0-13|v1040]]
| [[4.1.0-8|v3]]
| Active
|-
| 00020500
| 00021500
| 00022500
| 00026500
| 00027500
| 00028500
| [[Nintendo 3DS Sound]] (CtrApp)
| [[1.0.0-0|v0]], [[2.1.0-4|v1027]], [[3.0.0-5|v2049]], [[4.0.0-7|v3072]], [[7.0.0-13|v3089]]
| [[1.0.0-0|v0]], [[2.1.0-4|v1027]], [[3.0.0-5|v2049]], [[4.0.0-7|v3072]], [[7.0.0-13|v3088]]
| [[1.0.0-0|v0]], [[2.1.0-4|v1027]], [[3.0.0-5|v2049]], [[4.0.0-7|v3072]], [[7.0.0-13|v3088]]
| [[4.0.0-7|v2]]
| [[4.0.0-7|v2]], [[7.0.0-13|v16]]
| [[4.1.0-8|v3]]
| Active
|-
| 00020700
| 00021700
| 00022700
| 00026700
| 00027700
| 00028700
| [[Mii Maker]] (EDIT)
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[7.0.0-13|v2055]]
| Same as JPN
| Same as JPN
| [[4.0.0-7|v1]]
| [[4.0.0-7|v1]], [[7.0.0-13|v16]]
| [[4.1.0-8|v2]]
| Active
|-
| 00020800
| 00021800
| 00022800
| 00026800
| 00027800
| 00028800
| [[StreetPass Mii Plaza]] (MEET)
| [[1.0.0-0|v0]], v1027, [[2.1.0-4|v2048]], [[3.0.0-5|v3087]], [[3.0.0-6|v4096]], [[6.0.0-11|v5121]]
| [[1.0.0-0|v0]], v1027, [[2.1.0-4|v2048]], [[3.0.0-5|v3087]], [[3.0.0-6|v4096]], [[6.0.0-11|v5122]]
| [[1.0.0-0|v0]], v1027, [[2.1.0-4|v2048]], [[3.0.0-5|v3087]], [[3.0.0-6|v4096]], [[6.1.0-12U|v5124]], [[7.0.0-13|v5136]]
| [[4.0.0-7|v0]], [[4.4.0-10|v4096]]
| [[4.0.0-7|v1]], [[4.4.0-10|v4096]], [[7.0.0-13|v5120]]
| [[4.1.0-8|v1]], [[4.4.0-10|v4096]]
| Active
|-
| 00020900
| 00021900
| 00022900
| N/A
| 00027900
| 00028900
| [[eShop]] (tiger)
| [[2.0.0-2|v4]], [[2.1.0-3|v1026]], [[3.0.0-5|v2057]], [[4.0.0-7|v3081]], [[4.1.0-8|v4096]], [[4.2.0-9|v5123]], [[4.3.0-10|v6146]], [[5.0.0-11|v7169]], [[7.0.0-13|v8206]], [[7.1.0-14|v9231]], [[7.2.0-17|v10245]], [[8.0.0-18|v11265]], [[8.1.0-19|v12288]], [[9.0.0-20|v13320]], [[9.3.0-21|v15366]], [[9.5.0-22|v16384]]
| [[2.0.0-2|v4]], [[2.1.0-3|v1026]], [[3.0.0-5|v2058]], [[4.0.0-7|v3081]], [[4.1.0-8|v4096]], [[4.2.0-9|v5123]], [[4.3.0-10|v6146]], [[5.0.0-11|v7171]], [[7.0.0-13|v8206]], [[7.1.0-14|v9231]], [[7.2.0-17|v10245]], [[8.0.0-18|v11265]], [[8.1.0-19|v12288]], [[9.0.0-20|v13321]], [[9.3.0-21|v15366]], [[9.5.0-22|v16384]]
| [[2.0.0-2|v4]], [[2.1.0-3|v1026]], [[3.0.0-5|v2058]], [[4.0.0-7|v3081]], [[4.1.0-8|v4096]], [[4.2.0-9|v5123]], [[4.3.0-10|v6146]], [[5.0.0-11|v7170]], [[7.0.0-13|v8206]], [[7.1.0-14|v9231]], [[7.2.0-17|v10246]], [[8.0.0-18|v11265]], [[8.1.0-19|v12288]], [[9.0.0-20|v13320]], [[9.3.0-21|v15366]], [[9.5.0-22|v16384]]
| N/A
| [[4.0.0-7|v3082]], [[4.1.0-8|v4096]], [[4.2.0-9|v5123]], [[4.3.0-10|v6146]], [[5.0.0-11|v7169]], [[7.0.0-13|v8205]], [[7.1.0-14|v9231]], [[8.1.0-19|v12288]], [[9.0.0-20|v13320]], [[9.3.0-21|v15366]], [[9.5.0-22|v16384]]
| [[4.1.0-8|v4096]], [[4.2.0-9|v5123]], [[4.3.0-10|v6146]], [[5.0.0-11|v7170]], [[7.0.0-13|v8205]], [[7.1.0-14|v9231]], [[8.1.0-19|v12288]], [[9.3.0-21|v15366]], [[9.5.0-22|v16384]]
| Active
|-
| 00020A00
| 00021A00
| 00022A00
| N/A
| 00027A00
| 00028A00
| [[System Transfer]] (CARDBOAR)
| [[2.0.0-2|v4]], [[3.0.0-5|v1035]], [[4.0.0-7|v2050]], [[5.0.0-11|v3074]], [[7.0.0-13|v4109]], [[9.0.0-20|v5130]]
| [[2.0.0-2|v4]], [[3.0.0-5|v1035]], [[4.0.0-7|v2050]], [[5.0.0-11|v3073]], [[7.0.0-13|v4109]], [[9.0.0-20|v5131]]
| [[2.0.0-2|v4]], [[3.0.0-5|v1035]], [[4.0.0-7|v2051]], [[5.0.0-11|v3073]], [[7.0.0-13|v4109]], [[9.0.0-20|v5131]]
| N/A
| [[4.0.0-7|v2]], [[5.0.0-11|v1025]], [[7.0.0-13|v2061]], [[9.0.0-20|v3082]]
| [[4.1.0-8|v2]], [[5.0.0-11|v1025]], [[7.0.0-13|v2061]]
| Active
|-
| 00020B00
| 00021B00
| 00022B00
| N/A
| N/A
| N/A
| [[Nintendo Zone]] ("Nintendo")
| [[1.0.0-0|v0]], [[3.0.0-5|v1034]]
| Same as JPN
| Same as JPN
| N/A
| N/A
| N/A
| Active
|-
| 00020D00
| 00021D00
| 00022D00
| 00026D00
| 00027D00
| 00028D00
| [[Face Raiders]]
| [[1.0.0-0|v0]], [[2.1.0-4|v1028]]
| [[1.0.0-0|v0]], [[2.1.0-4|v1028]], [[7.0.0-13|v1040]]
| Same as EUR
| [[4.0.0-7|v0]]
| [[4.0.0-7|v0]]
| [[4.1.0-8|v2]]
| Active
|-
| 20020D00
| 20021D00
| 20022D00
| N/A
| N/A
| N/A
| [[New_3DS]] [[Face Raiders]]
| [[8.1.0-0_New3DS|v2050]]
| [[8.1.0-0_New3DS|v2049]]
| Same as EUR.
| N/A
| N/A
| N/A
| Active
|-
| 00020E00
| 00021E00
| 00022E00
| 00026E00
| 00027E00
| 00028E00
| [[AR Games]] (AR_ACT)
| [[1.0.0-0|v0]], [[2.1.0-4|v1026]]
| [[1.0.0-0|v0]], [[2.1.0-4|v1026]], [[7.0.0-13|v1040]]
| [[1.0.0-0|v0]], [[2.1.0-4|v1027]], [[7.0.0-13|v1040]]
| [[4.0.0-7|v0]]
| [[4.0.0-7|v0]], [[7.0.0-13|v16]]
| [[4.1.0-8|v1]]
| Active
|-
| 00020F00
| 00021F00
| 00022F00
| 00026F00
| 00027F00
| 00028F00
| SAFE_MODE [[System Settings#System Updater|System Updater]] (mset)
| [[1.0.0-0|v0]], [[3.0.0-5|v1024]], [[6.0.0-11|v2049]]
| [[1.0.0-0|v0]], [[3.0.0-5|v1024]], [[6.0.0-11|v2050]]
| Same as JPN
| [[4.0.0-7|v1]], [[6.0.0-11|v1026]]
| [[4.0.0-7|v1]]
| [[4.1.0-8|v1]]
| Active
|-
| 00023000
| 00024000
| 00025000
| N/A
| N/A
| N/A
| Promotional video
| [[1.1.0-1|v2]], [[2.0.0-2|v2048]]
| [[1.1.0-1|v<unknown>]], [[2.0.0-2|v2048]]
| [[1.1.0-1|v0]], [[2.0.0-2|v2048]]
| N/A
| N/A
| N/A
| Stubbed
|-
| 0002BF00
| 0002C000
| 0002C100
| N/A
| N/A
| N/A
| Nintendo Network ID Settings (act)
| [[7.0.0-13|v14]], [[7.2.0-17|v1029]], [[9.0.0-20|v2051]], [[9.3.0-21|v3072]]
| Same as JPN
| Same as JPN
| N/A
| N/A
| N/A
| Active
|-
| 20023100
| 20024100
| 20025100
| N/A
| N/A
| N/A
| [[microSD Management]] ('mcopy') ([[New_3DS]]-only)
| [[8.1.0-0_New3DS|v8]], [[9.0.0-20|v1024]]
| [[8.1.0-0_New3DS|v4]]
| [[8.1.0-0_New3DS|v5]]
| N/A
| N/A
| N/A
| Available
|-
| 2002C800
| 2002CF00
| 2002D000
| N/A
| N/A
| N/A
| [[New_3DS]]-only, currently stubbed. Placeholder exheader name is "menu".
| [[8.1.0-0_New3DS|v2]], [[9.0.0-20|v18]], [[9.3.0-21|v34]]
| [[8.1.0-0_New3DS|v1]], [[9.3.0-21|v17]]
| [[8.1.0-0_New3DS|v1]], [[9.3.0-21|v18]]
| N/A
| N/A
| N/A
| Stubbed
|-
| 2002C900
| 2002D100
| 2002D200
| N/A
| N/A
| N/A
| [[New_3DS]]-only, currently stubbed. Placeholder exheader name is "friend".
| [[8.1.0-0_New3DS|v1]]
| Same as JPN.
| [[8.1.0-0_New3DS|v0]], [[9.3.0-21|v16]]
| N/A
| N/A
| N/A
| Stubbed
|-
| 2002CA00
| 2002D300
| 2002D400
| N/A
| N/A
| N/A
| [[New_3DS]]-only, currently stubbed. Placeholder exheader name is "newslist".
| [[8.1.0-0_New3DS|v0]], v1([[Home_Menu|JPN-only]] Oct 2, 2014 "sysupdate", actually uploaded on 09-29-14. Identical to v0, same TMDs besides title-versions)
| [[8.1.0-0_New3DS|v2]]
| [[8.1.0-0_New3DS|v0]]
| N/A
| N/A
| N/A
| Stubbed
|-
| 2002CB00
| 2002D500
| 2002D600
| N/A
| N/A
| N/A
| [[New_3DS]]-only, currently stubbed. Placeholder exheader name is "cherry".
| [[8.1.0-0_New3DS|v0]], [[9.0.0-20|v1]]
| [[8.1.0-0_New3DS|v2]]
| Same as EUR.
| N/A
| N/A
| N/A
| Stubbed
|}

The "act" application seems to use a web browser with webkit?

Regardless of version, the ExeFS:/.code for mset is the same for USA/EUR/JPN. The [[4.0.0-7]] version of mset([[4.1.0-8]] for TWN) has the same ExeFS:/.code for all regions(JPN, USA, EUR, CHN, KOR, TWN). The [[5.0.0-11]] mset ExeFS:/.code is the same for all regions as well, except for CHN. The [[7.0.0-13]] mset ExeFS:/.code is unique for the following regions: CHN, KOR, and TWN.

=== 0004001B - [[NCCH#CFA|System Data Archives]] ===
{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! Versions
|-
| 00010002
| [[ClCertA]]
| [[1.0.0-0|v0]]
|-
| 00010702
| [[NS CFA]]
| [[3.0.0-5|v0]], [[6.0.0-11|v1028]], [[6.3.0-12|v2048]], [[7.0.0-13|v3073]], [[9.0.0-20|v4096]](also for [[8.1.0-0_New3DS]])
|-
| 00010802
| This CFA only contains a 1-byte "dummy.txt" in the RomFS, which contains '0'.
| [[6.3.0-12|v0]]
|-
| 00018002
| Same contents as 00010802. Starting with [[7.1.0-15]], the "dummy.txt" file was removed from RomFS: this CFA RomFS now contains web-browser data(similar to 00018102) for NNID / networking, etc.
| [[7.0.0-13|v14]], [[7.1.0-15|v1025]], [[7.2.0-17|v2055]], [[9.0.0-20|v3078]], [[9.3.0-21|v4096]]
|-
| 00018102
| This contains local web-browser data(html/js, gfx, etc) for the Miiverse Offline-mode.
| [[7.0.0-13|v11]], [[9.0.0-20|v1025]](also for [[8.1.0-0_New3DS]])
|-
| 00018202
| This contains the webkit/OSS [[CRO0|CROs]] used with the Miiverse applet and the "act" application.
| [[7.0.0-13|v7]], [[8.1.0-0_New3DS|v1026]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v2050]]
|-
| 00019002
| [[Fangate_updater]]
| [[9.3.0-21|v2]]
|}

=== 00040030 - Applets===
{| class="wikitable" border="1"
|-
! JPN TitleIDLow
! USA TitleIDLow
! EUR TitleIDLow
! Description
! JPN Versions
! USA Versions
! EUR Versions
|-
| 00008102
| 00008102
| 00008102
| [[NS#Alternate menu|Alternate menu]]
| N/A
|-
| 00008202
| 00008F02
| 00009802
| [[Home Menu|SYSMENU]] (menu)
| v0, v1029, v2049, [[2.2.0-X|v3075]], v4111, v5131, [[4.2.0-9|v6146]], [[5.0.0-11|v7172]], [[6.0.0-11|v8198]], [[7.0.0-13|v9230]], [[8.1.0-0_New3DS|v10250]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v13313]], [[9.1.0-20J|v14336]], [[9.2.0-20|v15360]], [[9.3.0-21|v16402]], [[9.4.0-21|v17408]], [[9.5.0-22|v18432]]
| v0, v1029, v2049, [[2.2.0-X|v3075]], v4111, v5131, [[4.2.0-9|v6146]], [[5.0.0-11|v7172]], [[6.0.0-11|v8198]], [[7.0.0-13|v9230]], [[8.1.0-0_New3DS|v10250]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v11272]], [[9.2.0-20|v12288]], [[9.3.0-21|v13330]], [[9.4.0-21|v14336]], [[9.5.0-22|v15360]]
| v0, v1029, v2049, [[2.2.0-X|v3075]], v4111, v5131, [[4.2.0-9|v6146]], [[5.0.0-11|v7172]], [[6.0.0-11|v8198]], [[7.0.0-13|v9230]], [[8.1.0-0_New3DS|v10250]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v11272]], [[9.2.0-20|v12288]], [[9.3.0-21|v13330]], [[9.4.0-21|v14336]], [[9.5.0-22|v15360]]
|-
| 00008402
| 00009002
| 00009902
| Camera applet used by Home-menu (CtrApp)
| v0, v1036, [[9.0.0-20|v2049]](Also for [[8.1.0-0_New3DS]])
| Same as JPN
| Same as JPN
|-
| 00008502
| 00009102
| 00009A02
| Not available on CDN
| ?
|
|
|-
| 00008602
| 00009202
| 00009B02
| Instruction Manual, applet for displaying instruction manuals
| v0, v1026, v2048, v3072, [[5.0.0-11|v4097]], [[9.0.0-20|v5120]](Also for [[8.1.0-0_New3DS]])
| Same as JPN
|-
| 00008702
| 00009302
| 00009C02
| Game Notes (Cherry)
| v0, v1026, v2049, [[5.0.0-11|v3073]], [[9.0.0-20|v4096]](Also for [[8.1.0-0_New3DS]])
| Same as JPN
| Same as JPN
|-
| 00008802
| 00009402
| 00009D02
| [[Internet Browser]] (spider)
| [[2.0.0-2|v6]], [[2.1.0-4|v1024]], [[4.0.0-7|v2050]], [[5.0.0-11|v3074 (EUR)/v3075(USA,JAP)]], [[7.0.0-13|v3088]], [[7.1.0-16|v4096]]
| Same as JPN
| Same as JPN
|-
| 20008802
| 20009402
| 20009D02
| [[New_3DS]] [[Internet Browser]] (SKATER)
| [[8.1.0-0_New3DS|v10]], [[9.3.0-21|v1027]]
| Same as JPN
| Same as JPN
|-
| 00008A02
| 00008A02
| 00008A02
| [[ErrDisp]]
| v0, v1025, [[2.2.0-X|v2048]], [[3.0.0-5|v3072]], [[4.0.0-7|v4096]], [[5.0.0-11|v5121]], [[8.0.0-18|v6144]], [[9.0.0-20|v7168]](Also for [[8.1.0-0_New3DS]])
| Same as JPN
| Same as JPN
|-
| 00008A03
| 00008A03
| 00008A03
| SAFE_MODE [[ErrDisp]]
| v0
| Same as JPN
| Same as JPN
|-
| 20008A03
| 20008A03
| 20008A03
| [[New_3DS]] SAFE_MODE [[ErrDisp]]
| [[8.1.0-0_New3DS|v7169]]
| Same as JPN
| Same as JPN
|-
| 00008D02
| 00009602
| 00009F02
| Friend List (friend)
| v0, v1026, [[2.2.0-X|v2051]], v3082, v4099, [[7.0.0-13|v5120]], [[9.0.0-20|v6144]](Also for [[8.1.0-0_New3DS]]) (EUR v6, v1024, v3082, v4099, [[7.0.0-13|v5120]], [[9.0.0-20|v6144]])
| Same as JPN
| Same as JPN
|-
| 00008E02
| 00009702
| 0000A002
| Notifications (newslist)
| v0, v1029, v2054, v3075, [[9.0.0-20|v4097]] (EUR v6, v1024, v2054, v3075, [[9.0.0-20|v4097]]) (JPN: ..., [[8.1.0-0_New3DS|v4096]], [[9.0.0-20|v5121]])
| Same as JPN
| Same as JPN
|-
| 0000C002
| 0000C802
| 0000D002
| Software Keyboard (swkbd)
| v0, v1026, v2053, [[7.0.0-13|v3072]], [[9.0.0-20|v4096]](Also for [[8.1.0-0_New3DS]])
| Same as JPN
| Same as JPN
|-
| 0000C003
| 0000C803
| 0000D003
| SAFE_MODE Software Keyboard (swkbd)
| v0
| Same as JPN
| Same as JPN
|-
| 2000C003
| 2000C803
| 2000D003
| [[New_3DS]] SAFE_MODE Software Keyboard (swkbd)
| [[8.1.0-0_New3DS|v0]](for JPN this is v1024)
| Same as JPN
| Same as JPN
|-
| 0000C102
| 0000C902
| 0000D102
| appletEd
| v0, v1026, [[9.0.0-20|v2048]](Also for [[8.1.0-0_New3DS]]), [[9.3.0-21|v3077]]
| Same as JPN
| Same as JPN
|-
| 0000C302
| 0000CB02
| 0000D302
| PNOTE_AP (Photo file selector applet, for SD-card/etc?)
| v0, v1024, [[8.1.0-0_New3DS|v2049]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v3075]], [[9.3.0-21|v4096]]
| Same as JPN
| Same as JPN
|-
| 0000C402
| 0000CC02
| 0000D402
| SNOTE_AP (Sound file selector applet, for SD-card/etc?)
| v0, v3, [[8.0.0-18|v1026]], [[9.0.0-20|v2048]](Also for [[8.1.0-0_New3DS]])
| Same as JPN
| Same as JPN
|-
| 0000C502
| 0000C502
| 0000C502
| error (This applet displays networking errors, etc)
| v0, v1026, v2053, v3074, [[8.1.0-0_New3DS|v4096]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v5128]]
| Same as JPN
| Same as JPN
|-
| 0000C503
| 0000C503
| 0000C503
| SAFE_MODE error applet
| v0
| Same as JPN
| Same as JPN
|-
| 2000C503
| 2000C503
| 2000C503
| [[New_3DS]] SAFE_MODE error applet
| [[8.1.0-0_New3DS|v1024]]
| Same as JPN
| Same as JPN
|-
| 0000CD02
| 0000CD02
| 0000CD02
| extrapad ([[Circle Pad Pro]] calibration applet)
| v1, v1026, [[8.1.0-0_New3DS|v2048]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v3073]]
| Same as JPN
| Same as JPN
|-
| 0000C602
| 0000CE02
| 0000D602
| mint. eShop applet, used by applications for accessing the eShop, for DLC/etc. Also used by the eShop application itself.
| v5, v1028, [[4.2.0-9|v2050]], [[5.0.0-11|v3072]], [[7.0.0-13|v4109]], [[7.2.0-17|v5125]](v5123 for JPN), [[8.0.0-18|v6145]], [[8.1.0-0_New3DS|v7168]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v8200]], [[9.3.0-21|v9224]]
| Same as JPN
| Same as JPN
|-
| 0000BC02
| 0000BD02
| 0000BE02
| olv (Miiverse applet)
| [[7.0.0-13|v14]], [[7.2.0-17|v1024]], [[9.0.0-20|v2048]](Also for [[8.1.0-0_New3DS]]), [[9.3.0-21|v3072]]
| Same as JPN
| Same as JPN
|-
| 0000F602
| 0000F602
| 0000F602
| memolib (Uses Miiverse, likely the "system library" for Miiverse)
| [[7.0.0-13|v5]], [[8.1.0-0_New3DS|v1024]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v2050]], [[9.3.0-21|v3072]]
| Same as JPN
| Same as JPN
|-
| 00008302
| 00008B02
| 0000BA02
| solv3 (Miiverse-posting applet)
| [[9.0.0-20|v6]]
| Same as JPN
| Same as JPN
|-
| 00009502
| 00009E02
| 0000B902
| Cabinet ([[amiibo Settings]])
| [[9.3.0-21|v7]]
| Same as JPN
| Same as JPN
|}

Most of these processes are applets. There can only be one application here(Home Menu, Internet Browser, Friend-List, etc) with programID-high 00040030 running at a time. When directly launching one of these 00040030 applications with Home Menu, the Home Menu process will terminate once the process is launched. When returning to Home Menu from that launched process, the Home Menu process is launched again.

All of the above processes use the "SYSTEM" [[SVC|memory-region]].

The ExeFS for Home Menu is exactly the same for USA/EUR/JPN.

The Miiverse applet seems to use a web browser with webkit.

=== 0004009B - [[NCCH#CFA|System Data Archives]] (Shared Archives) ===
{| class="wikitable" border="1"
|-
! JPN TitleIDLow
! USA TitleIDLow
! EUR TitleIDLow
! Description
! Versions
|-
| 00010202
| 00010202
| 00010202
| Probably Mii-related, contains "CFL_Res.dat" in the RomFS.
| v0
|-
| 00010302
| 00010302
| 00010302
| Doesn't exist on CDN?
| v0, v2052
|-
| 00010402
| 00010402
| 00010402
| Mounted as "area:", contains Country and Region names
| v0, v1024, v2050, v3072, [[7.0.0-13|v4098]]
|-
| 00010502
| 00010502
| 00010502
| Doesn't exist on CDN?
| v0, v1024, v2048
|-
| 00010602
| 00010602
| 00010602
| Non-Nintendo TLS Root-CA Certificates (RomFS contains files with filename "CACERT_PUBLIC_CA_<val>.der", where <val> is 5..8)
| v2
|-
| 00011902
| ?
| ?
| ?
| v0
|-
| ?
| 00011402
| ?
| ?
| v0
|-
| ?
| 00011602
| ?
| ?
| v0
|-
| ?
| 00011D02
| ?
| ?
| v0
|-
| ?
| 00011E02
| ?
| ?
| v0
|-
| ?
| ?
| 00011202
| ?
| v0
|-
| ?
| ?
| 00011302
| ?
| v0
|-
| ?
| ?
| 00011502
| ?
| v0
|-
| ?
| ?
| 00011702
| ?
| v0
|-
| ?
| ?
| 00011802
| ?
| v0
|-
| 00011902
| ?
| ?
| ?
| v0
|-
| ?
| ?
| 00011B02
| ?
| v0
|-
| ?
| ?
| 00011C02
| ?
| v0
|-
| ?
| ?
| 00011D02
| ?
| v0
|-
| ?
| ?
| 00012102
| ?
| v0, v1026, v2051, v3074
|-
| 00012202
| 00012302
| 00012102
| ?contains a lists with error strings
| v1026, v2053, v3073, [[4.2.0-9|v4096]], [[5.0.0-11|v5120]], [[7.0.0-13|v6149]], [[7.2.0-17|v7168]], [[8.0.0-18|v8192]], [[9.0.0-20|v9218]], [[9.3.0-21|v10242]]
|-
| 00013202
| 00013302
| 00013102
| Mounted as "eula:"
| v0, v1024, v2049 USA: v1024, v2051, [[7.0.0-13|v3074]], [[7.2.0-17|v4100]](EUR-only), [[9.0.0-20|v4099]]
|-
| 00014002
| 00014002
| 00014002
| JPN/EUR/USA System Font ("font:")
| v0
|-
| 00014102
| 00014102
| 00014102
| CHN System Font ("font:")
| v0, v1024
|-
| 00014202
| 00014202
| 00014202
| KOR System Font ("font:")
| v0, v1024
|-
| 00014302
| 00014302
| 00014302
| TWN System Font ("font:")
| v0, v1024
|-
| 00015202
| 00015302
| 00015102
| Mounted as "rate:"
| v0 (EUR: v0, v1024)
|-
| ?
| 00016302
| ?
| ?
| v80
|-
| ?
| 00017302
| ?
| ?
| v3088
|}

=== 000400DB - [[NCCH#CFA|System Data Archives]] ===
These [[NVer]] titleIDs can be found @ offset 0x320 in every [[CCI]].

{| class="wikitable" border="1"
|-
! EUR TitleIDLow
! JPN TitleIDLow
! USA TitleIDLow
! CHN TitleIDLow
! KOR TitleIDLow
! TWN TitleIDLow
! Description
! USA/EUR/JPN Versions
! CHN Versions
! TWN Versions
! KOR Versions
|-
| 00010302
| 00010302
| 00010302
| 00010302
| 00010302
| 00010302
| NGWord bad word list
| [[1.0.0-0|v0]], [[2.0.0-2|v1024]], [[3.0.0-5|v2052]], [[4.0.0-7|v3072]], [[4.3.0-10|v4096]], [[5.0.0-11|v5120]], [[9.0.0-20|v6144]], [[9.3.0-21|v7168]]
| Same as USA
| Same as USA
| Same as USA
|-
| 00010502
| 00010502
| 00010502
| 00010502
| 00010502
| 00010502
| [[Nintendo Zone]] hotspot list
| [[1.0.0-0|v0]], [[2.0.0-2|v1024]], [[3.0.0-5|v2048]], [[4.0.0-7|v3073]], [[4.3.0-10|v4096]], [[4.4.0-10|v5120]], [[4.5.0-10|v6144]], [[5.0.0-11|v7169]], [[6.0.0-11|v8192]], [[6.2.0-12|v9216]], [[7.0.0-13|v10242]], [[7.2.0-17|v11267]], [[8.0.0-18|v12288]], [[9.0.0-20|v14336]], [[9.3.0-21|v15360]]
| Same as USA
| Same as USA
| Same as USA
|-
| 00016102
| 00016202
| 00016302
| 00016402
| 00016502
| 00016602
| [[NVer]]
| [[1.0.0-0|v0]], [[1.1.0-1|v16]], [[2.0.0-2|v32]], [[2.1.0-3|v48]], [[2.1.0-4|v64]], [[3.0.0-5|v80]], [[3.0.0-6|v96]], [[4.0.0-7|v112]], [[4.1.0-8|v128]], [[4.2.0-9|v144]], [[4.3.0-10|v160]], [[5.0.0-11|v176]], non-USA=[[6.0.0-11|v192]]/USA=[[6.1.0-12U|v192]], [[7.0.0-13|v208]], [[7.1.0-14|v224]], [[7.1.0-15|v240]], [[7.1.0-16|v256]], [[7.2.0-17|v272]], [[8.0.0-18|v288]], [[8.1.0-19|v304]], [[9.0.0-20|v320]], [[9.3.0-21|v336]], [[9.5.0-22|v352]]
| [[4.0.0-7|v113]], [[4.2.0-9|v128]], [[5.0.0-11|v129]], [[7.1.0-16|v130]], [[7.2.0-17|v272]]
| [[4.1.0-8|v114]], [[4.2.0-9|v133]], [[4.3.0-10|v134]], [[5.0.0-11|v136]], [[7.0.0-13|v144]], [[7.1.0-14|v160]] [[7.1.0-16|v192]], [[7.2.0-17|v272]], [[8.0.0-18|v208]], [[8.1.0-19|v224]], [[9.0.0-20|v240]], [[9.5.0-22|v272]]
| [[4.0.0-7|v113]], [[4.1.0-8|v114]], [[4.2.0-9|v133]], [[4.3.0-10|v134]], [[5.0.0-11|v136]], [[7.0.0-13|v160]], [[7.1.0-14|v176]], [[7.1.0-16|v176]], [[7.2.0-17|v272]], [[8.0.0-18|v224]], [[8.1.0-19|v240]], [[9.0.0-20|v256]], [[9.3.0-21|v272]], [[9.5.0-22|v288]]
|-
| 20016102
| 20016202
| 20016302
| N/A
| N/A
| N/A
| [[New_3DS]] [[NVer]]
| [[8.1.0-0_New3DS|v0]], [[9.0.0-20|v320]], [[9.3.0-21|v336]], [[9.5.0-22|v352]]
| N/A
| N/A
| N/A
|-
| 00017102
| 00017202
| 00017302
| 00017402
| 00017502
| 00017602
| [[CVer]]
| [[1.0.0-0|v1024]], [[1.1.0-1|v1045]], [[2.0.0-2|v2049]], [[2.1.0-3|v2069]], [[2.2.0-X|v2088]] [[3.0.0-5|v3088]], [[4.0.0-7|v4098]], [[4.1.0-8|v4113]], [[4.2.0-9|v4130]], [[4.3.0-10|v4145]], [[4.4.0-10|v4163]], [[4.5.0-10|v4176]], [[5.0.0-11|v5120]], [[5.1.0-11|v5136]], [[6.0.0-11|v6146]], [[6.1.0-11|v6160]], [[6.2.0-12|v6178]], [[6.3.0-12|v6192]], [[7.0.0-13|v7175]], [[7.1.0-14|v7187]], [[7.2.0-17|v7203]], [[8.0.0-18|v8196]], [[8.1.0-18|v8208]], [[8.1.0-0_New3DS|v8215]](8.1.0-0_New3DS), [[9.0.0-20|v9218]], [[9.1.0-20J|v9232]](JPN-only), [[9.2.0-20|v9248]], [[9.3.0-21|v9264]], [[9.4.0-21|v9280]], [[9.5.0-22|v9296]]
| [[1.0.0-0|v1024]], [[1.1.0-1|v1045]], [[2.0.0-2|v2049]], [[2.1.0-3|v2069]], [[2.2.0-X|v2088]] [[3.0.0-5|v3088]], [[4.0.0-7|v4098]], [[4.1.0-8|v4113]], [[4.2.0-9|v4130]], [[4.3.0-10|v4145]], [[4.4.0-10|v4163]], [[4.5.0-10|v4176]], [[5.0.0-11|v5120]], [[5.1.0-11|v5136]], [[6.0.0-11|v6146]], [[6.1.0-11|v6160]], [[6.2.0-12|v6178]], [[6.3.0-12|v6192]], [[7.0.0-13|v7175]], [[7.1.0-14|v7187]], [[7.2.0-17|v7203]], [[8.0.0-18|v8196]], [[8.1.0-18|v8208]], [[9.0.0-20|v9217]], [[9.3.0-21|v9264]], [[9.5.0-22|v9296]]
| Same as CHN
| Same as CHN
|}

=== 00040130 - System [[Services API|Modules]] ===
{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! Versions
|-
| 00001002
| sm (Stored in [[FIRM|NATIVE_FIRM]])
| N/A
|-
| 00001102
| [[Filesystem services‎|fs]] (Stored in [[FIRM|NATIVE_FIRM]])
| N/A
|-
| 00001202
| [[Process Manager Services|pm]] (Stored in [[FIRM|NATIVE_FIRM]])
| N/A
|-
| 00001302
| loader (Stored in [[FIRM|NATIVE_FIRM]])
| N/A
|-
| 00001402
| pxi (Stored in [[FIRM|NATIVE_FIRM]])
| N/A
|-
| 00001502
| [[Application Manager Services|AM]] ( Application Manager )
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[3.0.0-5|v2053]], [[4.0.0-7|v3072]], [[5.0.0-11|v4098]], [[6.0.0-11|v5120]], [[8.0.0-18|v6148]], [[8.1.0-0_New3DS|v7168]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v8192]]
|-
| 00001503
| SAFE_MODE AM
| [[1.0.0-0|v0]]
|-
| 20001503
| [[New_3DS]] SAFE_MODE AM
| [[8.1.0-0_New3DS|v7169]]
|-
| 00001602
| Camera
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[3.0.0-5|v2048]], [[4.0.0-7|v3074]], [[5.0.0-11|v4098]], [[6.0.0-11|v5120]], [[7.1.0-14|v6146]], [[8.0.0-18|v7172]], [[9.0.0-20|v9216]], [[9.3.0-21|v10242]]
|-
| 20001602
| [[New_3DS]] Camera
| [[8.1.0-0_New3DS|v8200]], [[9.0.0-20|v9218]], [[9.3.0-21|v10242]]
|-
| 00001702
| [[Config Services|Config]] (cfg)
| [[1.0.0-0|v0]], [[2.0.0-2|v1024]], [[3.0.0-5|v2049]], v3072, [[4.0.0-7|v4096]], [[5.0.0-11|v5122]], [[6.0.0-11|v6145]], [[6.1.0-11|v7168]], [[7.0.0-13|v8196]], [[7.2.0-17|v9220]], [[8.0.0-18|v10243]], [[8.1.0-0_New3DS|v11265]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v12290]], [[9.3.0-21|v13315]]
|-
| 00001703
| SAFE_MODE Config (cfg)
| [[1.0.0-0|v0]]
|-
| 20001703
| [[New_3DS]] SAFE_MODE Config (cfg)
| [[8.1.0-0_New3DS|v11265]]
|-
| 00001802
| Codec
| [[1.0.0-0|v0]], [[2.0.0-2|v1025]], [[2.2.0-X|v2048]], [[3.0.0-5|v3072]], [[5.0.0-11|v4098]], [[7.0.0-13|v5120]], [[8.0.0-18|v6144]], [[9.0.0-20|v7168]](Also for [[8.1.0-0_New3DS]])
|-
| 00001803
| SAFE_MODE Codec
| [[1.0.0-0|v0]]
|-
| 20001803
| [[New_3DS]] SAFE_MODE Codec
| [[8.1.0-0_New3DS|v7169]]
|-
| 00001902
| dmnt, debugger sysmodule. This use devunit-only HIO for devunit<>pc comms. This only exists for development units(launched by NS during startup depending on certain [[Configuration_Memory]] fields' values). This is installed at the [[Factory_Setup|factory]], then later deleted at the factory on retail units.
|
|-
| 00001A02
| DSP
| [[1.0.0-0|v0]], [[3.0.0-5|v1024]], [[4.0.0-7|v2048]], [[5.0.0-11|v3074]], [[6.0.0-11|v4096]], [[8.0.0-18|v5120]]
|-
| 00001A03
| SAFE_MODE DSP
| [[1.0.0-0|v0]]
|-
| 20001A03
| [[New_3DS]] SAFE_MODE DSP
| [[8.1.0-0_New3DS|v6145]]
|-
| 00001B02
| GPIO
| [[1.0.0-0|v0]], [[5.0.0-11|v1025]], [[8.0.0-18|v2048]], [[9.5.0-22|v3073]]
|-
| 00001B03
| SAFE_MODE GPIO
| [[1.0.0-0|v0]]
|-
| 20001B03
| [[New_3DS]] SAFE_MODE GPIO
| [[8.1.0-0_New3DS|v3073]]
|-
| 00001C02
| GSP
| [[1.0.0-0|v0]], [[1.1.0-1|v1040]], [[2.0.0-2|v2049]], [[3.0.0-5|v3075]], v4098, [[4.0.0-7|v5120]], [[5.0.0-11|v6145]], [[6.0.0-11|v7168]], [[8.0.0-18|v8196]], [[9.0.0-20|v10240]], [[9.3.0-21|v11264]]
|-
| 20001C02
| [[New_3DS]] GSP
| [[8.1.0-0_New3DS|v10243]], [[9.3.0-21|v11267]]
|-
| 00001C03
| SAFE_MODE GSP
| [[1.0.0-0|v0]]
|-
| 20001C03
| [[New_3DS]] SAFE_MODE GSP
| [[8.1.0-0_New3DS|v9217]]
|-
| 00001D02
| HID (Human Interface Devices)
| [[1.0.0-0|v0]], [[2.0.0-2|v1025]], [[2.2.0-X|v2048]], [[3.0.0-5|v3072]], [[4.0.0-7|v4096]], [[5.0.0-11|v5121]], [[7.2.0-17|v6148]], [[8.0.0-18|v7168]], [[8.1.0-0_New3DS|v8192]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v9216]], [[9.3.0-21|v10240]]
|-
| 00001D03
| SAFE_MODE HID
| [[1.0.0-0|v0]]
|-
| 20001D03
| [[New_3DS]] SAFE_MODE HID
| [[8.1.0-0_New3DS|v8193]]
|-
| 00001E02
| i2c
| [[1.0.0-0|v0]], [[3.0.0-5|v1024]], [[5.0.0-11|v2049]], [[8.0.0-18|v3076]], [[9.3.0-21|v5120]]
|-
| 20001E02
| [[New_3DS]] i2c
| [[8.1.0-0_New3DS|v4096]], [[9.3.0-21|v5121]]
|-
| 00001E03
| SAFE_MODE i2c
| [[1.0.0-0|v0]]
|-
| 20001E03
| [[New_3DS]] SAFE_MODE i2c
| [[8.1.0-0_New3DS|v4097]]
|-
| 00001F02
| MCU
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[2.1.0-3|v2048]], [[3.0.0-5|v3072]], [[4.0.0-7|v4102]], [[5.0.0-11|v5122]], [[6.0.0-11|v6145]], [[7.0.0-13|v7168]], [[8.0.0-18|v8192]]
|-
| 20001F02
| [[New_3DS]] MCU
| [[8.1.0-0_New3DS|v8192]]
|-
| 00001F03
| SAFE_MODE MCU
| [[1.0.0-0|v0]]
|-
| 20001F03
| [[New_3DS]] SAFE_MODE MCU
| [[8.1.0-0_New3DS|v9217]]
|-
| 00002002
| Microphone (mic)
| [[1.0.0-0|v0]], [[5.0.0-11|v1025]], [[8.0.0-18|v2048]]
|-
| 00002102
| PDN
| [[1.0.0-0|v0]], [[5.0.0-11|v1025]], [[8.0.0-18|v2048]]
|-
| 00002103
| SAFE_MODE PDN
| [[1.0.0-0|v0]]
|-
| 20002103
| [[New_3DS]] SAFE_MODE PDN
| [[8.1.0-0_New3DS|v3073]]
|-
| 00002202
| PTM (Play time, pedometer, and battery manager)
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[2.2.0-X|v2048]], [[3.0.0-5|v3075]], v4096, [[4.0.0-7|v5120]], [[5.0.0-11|v6146]], [[6.0.0-11|v7168]], [[7.0.0-13|v8192]], [[8.0.0-18|v9219]]
|-
| 20002202
| [[New_3DS]] PTM (Play time, pedometer, and battery manager)
| [[8.1.0-0_New3DS|v10240]]
|-
| 00002203
| SAFE_MODE PTM
| [[1.0.0-0|v0]]
|-
| 20002203
| [[New_3DS]] SAFE_MODE PTM
| [[8.1.0-0_New3DS|v10241]]
|-
| 00002302
| spi
| [[1.0.0-0|v0]], [[2.0.0-2|v1025]], [[5.0.0-11|v2049]], [[8.0.0-18|v3072]]
|-
| 20002302
| [[New_3DS]] spi
| [[8.1.0-0_New3DS|v4096]]
|-
| 00002303
| SAFE_MODE spi
| [[1.0.0-0|v0]]
|-
| 20002303
| [[New_3DS]] SAFE_MODE spi
| [[8.1.0-0_New3DS|v4097]]
|-
| 00002402
| Network manager (AC)
| [[1.0.0-0|v0]], [[1.1.0-1|v1024]], [[2.0.0-2|v2052]], [[2.1.0-3|v3072]], [[3.0.0-5|v4101]], [[5.0.0-11|v5122]], [[7.0.0-13|v6145]], [[8.0.0-18|v7172]], [[9.0.0-20|v8192]](Also for [[8.1.0-0_New3DS]]), [[9.3.0-21|v9216]]
|-
| 00002403
| SAFE_MODE AC
| [[1.0.0-0|v0]]
|-
| 20002403
| [[New_3DS]] SAFE_MODE AC
| [[8.1.0-0_New3DS|v8193]]
|-
| 00002602
| Cecd (StreetPass)
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[2.2.0-X|v2048]], [[3.0.0-5|v3073]], [[4.0.0-7|v4097]], [[5.0.0-11|v5122]], [[6.0.0-11|v6144]], [[6.2.0-12|v7170]], [[7.0.0-13|v8193]], [[8.0.0-18|v9216]], [[9.0.0-20|v10240]]
|-
| 00002702
| CSND
| [[1.0.0-0|v0]], [[2.0.0-2|v1025]], [[4.0.0-7|v2048]], [[5.0.0-11|v3073]], [[8.0.0-18|v4096]], [[9.0.0-20|v5120]]
|-
| 00002703
| SAFE_MODE CSND
| [[1.0.0-0|v0]]
|-
| 20002703
| [[New_3DS]] SAFE_MODE CSND
| [[8.1.0-0_New3DS|v5121]]
|-
| 00002802
| dlp ([[Download Play]])
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[2.2.0-X|v2048]], [[3.0.0-5|v3078]], [[5.0.0-11|v4099]], [[8.0.0-18|v5123]], [[9.0.0-20|v6145]](Also for [[8.1.0-0_New3DS]])
|-
| 00002902
| http
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[2.1.0-3|v2049]], [[2.2.0-X|v3072]], [[3.0.0-5|v4099]], [[4.0.0-7|v5122]], [[5.0.0-11|v6145]], [[7.0.0-13|v7171]], [[7.1.0-14|v8192]], [[8.0.0-18|v9220]], [[8.1.0-18|v10245]], [[8.1.0-0_New3DS|v11264]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v12288]]
|-
| 00002903
| SAFE_MODE http
| [[1.0.0-0|v0]]
|-
| 20002903
| [[New_3DS]] SAFE_MODE http
| [[8.1.0-0_New3DS|v10241]]
|-
| 00002A02
| MP
| [[1.0.0-0|v0]], [[5.0.0-11|v1025]], [[8.0.0-18|v2048]]
|-
| 00002A03
| SAFE_MODE MP
| [[1.0.0-0|v0]]
|-
| 00002B02
| NDM
| [[1.0.0-0|v0]], [[2.0.0-2|v1025]], [[3.0.0-5|v2049]], [[4.0.0-7|v3072]], [[5.0.0-11|v4098]], [[8.0.0-18|v5124]], [[8.1.0-0_New3DS|v6144]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v7169]]
|-
| 00002C02
| [[NIM Services|NIM]]
| [[1.0.0-0|v0]], [[2.0.0-2|v1028]], [[3.0.0-5|v2055]], [[4.0.0-7|v3074]], [[5.0.0-11|v4100]], [[6.0.0-11|v5120]], [[7.0.0-13|v6148]], [[7.2.0-17|v7174]], [[8.0.0-18|v8195]], [[8.1.0-0_New3DS|v9217]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v10249]], [[9.3.0-21|v11267]]
|-
| 00002C03
| SAFE_MODE NIM
| [[1.0.0-0|v0]]
|-
| 20002C03
| [[New_3DS]] SAFE_MODE NIM
| [[8.1.0-0_New3DS|v9217]]
|-
| 00002D02
| NWM ( Low-level wifi manager )
| [[1.0.0-0|v0]], [[1.1.0-1|v1024]], [[2.0.0-2|v2052]], [[2.2.0-X|v3072]], [[3.0.0-5|v4101]], [[4.0.0-7|v5120]], [[5.0.0-11|v6148]], [[6.0.0-11|v7169]], [[7.2.0-17|v8196]], [[8.0.0-18|v9216]], [[9.0.0-20|v10240]]
|-
| 00002D03
| SAFE_MODE NWM
| [[1.0.0-0|v0]], [[6.0.0-11|v5120]]
|-
| 20002D03
| [[New_3DS]] SAFE_MODE NWM
| [[8.1.0-0_New3DS|v10241]]
|-
| 00002E02
| Sockets
| [[1.0.0-0|v0]], [[1.1.0-1|v1024]], [[2.0.0-2|v2053]], [[3.0.0-5|v3075]], [[4.0.0-7|v4096]], [[5.0.0-11|v5121]], [[8.0.0-18|v6144]], [[9.0.0-20|v7168]]
|-
| 00002E03
| SAFE_MODE Sockets
| [[1.0.0-0|v0]]
|-
| 20002E03
| [[New_3DS]] SAFE_MODE Sockets
| [[8.1.0-0_New3DS|v7169]]
|-
| 00002F02
| SSL
| [[1.0.0-0|v0]], [[2.0.0-2|v1024]], [[2.1.0-3|v2048]], [[3.0.0-5|v3072]], [[4.0.0-7|v4096]], [[5.0.0-11|v5122]], [[8.0.0-18|v6144]], [[9.0.0-20|v7168]]
|-
| 00002F03
| SAFE_MODE SSL
| [[1.0.0-0|v0]]
|-
| 20002F03
| [[New_3DS]] SAFE_MODE SSL
| [[8.1.0-0_New3DS|v7169]]
|-
| 00003102
| [[Process Services‎|PS]] ( Process Manager )
| [[1.0.0-0|v0]], [[2.0.0-2|v1025]], [[5.0.0-11|v2049]], [[6.0.0-11|v3072]], [[8.0.0-18|v4096]], [[9.0.0-20|v5120]]
|-
| 00003103
| SAFE_MODE PS
| [[1.0.0-0|v0]]
|-
| 20003103
| [[New_3DS]] SAFE_MODE PS
| [[8.1.0-0_New3DS|v5121]]
|-
| 00003202
| FriendsList (friends)
| [[1.0.0-0|v0]], [[2.0.0-2|v1028]], [[2.2.0-X|v2048]], [[3.0.0-5|v3072]], [[4.0.0-7|v4096]], [[5.0.0-11|v5122]], [[7.0.0-13|v6145]], [[8.0.0-18|v7172]], [[9.0.0-20|v8192]](Also for [[8.1.0-0_New3DS]])
|-
| 00003203
| SAFE_MODE FriendsList (friends)
| [[1.0.0-0|v0]]
|-
| 20003203
| [[New_3DS]] SAFE_MODE FriendsList (friends)
| [[8.1.0-0_New3DS|v8193]]
|-
| 00003302
| IR (Infrared)
| [[1.0.0-0|v0]], [[2.0.0-2|v1026]], [[2.2.0-X|v2048]], [[3.0.0-5|v3072]], [[4.0.0-7|v4096]], [[5.0.0-11|v5121]], [[8.0.0-18|v6148]], [[8.1.0-0_New3DS|v7170]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v8192]], [[9.3.0-21|v9216]]
|-
| 00003303
| SAFE_MODE IR
| [[1.0.0-0|v0]]
|-
| 20003303
| [[New_3DS]] SAFE_MODE IR
| [[8.1.0-0_New3DS|v7169]]
|-
| 00003402
| BOSS (SpotPass)
| [[1.0.0-0|v0]], [[1.1.0-1|v1024]], [[2.0.0-2|v2053]], [[2.2.0-X|v3073]], [[3.0.0-5|v4101]], [[4.0.0-7|v5122]], [[5.0.0-11|v6146]], [[6.0.0-11|v7169]], [[6.2.0-12|v8193]], [[7.0.0-13|v9222]], [[8.0.0-18|v10240]], [[9.0.0-20|v11266]]
|-
| 00003502
| News (Notifications)
| [[1.0.0-0|v0]], [[2.0.0-2|v1028]], [[2.2.0-X|v2048]], [[3.0.0-5|v3072]], [[5.0.0-11|v4097]], [[8.0.0-18|v5120]], [[9.0.0-20|v6147]]
|-
| 00003602
| This only exist for development units(launched by NS during startup depending on certain [[Configuration_Memory]] fields' values).
|
|-
| 00003702
| [[RO_Services|RO]]
| [[2.0.0-2|v0]], [[4.0.0-7|v1024]], [[5.0.0-11|v2049]], [[7.2.0-17|v3074]], [[8.0.0-18|v4096]], [[9.0.0-20|v5120]](Also for [[8.1.0-0_New3DS]]), [[9.3.0-21|v6148]]
|-
| 00003802
| act (handles Nintendo Network '''a'''c'''c'''oun'''t'''s)
| [[7.0.0-13|v1029]], [[7.1.0-14|v2050]], [[7.2.0-17|v3077]], [[8.0.0-18|v4099]], [[8.1.0-0_New3DS|v5120]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v6144]], [[9.3.0-21|v7168]]
|-
| 00004002
| Old3DS [[NFC_Services|nfc]]
| [[9.3.0-21|v2053]]
|-
| 20004002
| [[New_3DS]] [[NFC_Services|nfc]]
| [[8.1.0-0_New3DS|v0]], [[9.0.0-20|v1024]], [[9.3.0-21|v2053]], [[9.5.0-22|v3073]]
|-
| 20004102
| [[New_3DS]] mvd
| [[8.1.0-0_New3DS|v0]], [[9.0.0-20|v1024]]
|-
| 20004202
| [[New_3DS]] [[QTM Services|qtm]]
| [[8.1.0-0_New3DS|v8]], [[9.0.0-20|v1024]], [[9.3.0-21|v2052]]
|-
| 00008002
| [[NS]] (Memory-region: "SYSTEM")
| [[1.0.0-0|v0]], [[2.0.0-2|v1028]], [[2.2.0-X|v2048]], [[3.0.0-5|v3077]], v4096, [[4.0.0-7|v5121]], [[5.0.0-11|v6148]], [[5.1.0-11|v7168]], [[6.0.0-11|v8193]], [[6.1.0-11|v9216]], [[7.0.0-13|v10248]], [[7.2.0-17|v11268]], [[8.0.0-18|v12291]], [[8.1.0-0_New3DS|v13312]]([[8.1.0-0_New3DS]]), [[9.0.0-20|v14336]], [[9.3.0-21|v15360]]
|-
| 00008003
| SAFE_MODE NS (Memory-region: "SYSTEM")
| [[1.0.0-0|v0]]
|-
| 20008003
| [[New_3DS]] SAFE_MODE NS (Memory-region: "SYSTEM")
| [[8.1.0-0_New3DS|v13313]]
|}

Once Home Menu finishes loading, all of the above system modules are running, except for MP, RO, and act which are automatically [[Process_Manager_Services|loaded]] when a process requires them. When [[Process_Manager_Services|PM]]-module terminates processes, it will check whether the processes listed as dependencies for this process are listed as dependencies for other processes. Any processes which are no longer listed in any processes dependencies lists are then terminated. On [[New_3DS]], the only New3DS-specific system-module which automatically gets loaded during system boot is qtm.

All of the above system modules use the "BASE" [[SVC|memory-region]](specified in the exheader), except when listed otherwise for certain modules.

When handling the exheader dependency list starting with [[8.0.0-18]], Old3DS FIRM [[Process_Manager_Services|PM]]-module now skips handling titles in this list which have any bits in programID-low bitmask 0xF0000000 set(with [[8.0.0-18]] this is hard-coded). The exheader dependency list handling change is for the [[New 3DS]] system-module(s), which do not exist on Old3DS.

=== 00040138 - [[FIRM|System Firmware]] ===
NATIVE_FIRM and SAFE_MODE_FIRM for the initial versions are exactly the same, besides [[Configuration_Memory|core-version]] fields. SAFE_MODE_FIRM is used for running SAFE_MODE titles, on retail SAFE_MODE_FIRM seems to be only used for running the [[System_Settings#System_Updater|System Updater]] application. When a GBA VC title is launched, AGB_FIRM is launched to handle running this title. GBA VC savegames stored under SD card /title/<TID>/data use a custom format, this is handled by AGB_FIRM.

{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! USA/EUR/JPN Versions
! CHN Versions
! KOR Versions
! TWN Versions
|-
| 00000001
| Unknown, very similar to SAFE_MODE_FIRM. Exists only on dev units and seems to only be used by SystemUpdaters.
| v0
|
|
|
|-
| 00000002
| NATIVE_FIRM (Native Firmware)
| [[1.0.0-0|v432]], [[1.1.0-1|v1472]], [[2.0.0-2|v2516]], [[2.1.0-3|v3553]], [[2.2.0-X|v4595]], [[3.0.0-5|v5647]], [[4.0.0-7|v6677]], [[4.1.0-8|v7712]], [[5.0.0-11|v8758]], [[5.1.0-11|v9792]], [[6.0.0-11|v10833]], [[6.1.0-11|v11872]], [[7.0.0-13|v12916]], [[7.2.0-17|v13956]], v15043, [[8.0.0-18|v15047]], [[9.0.0-20|v17120]], [[9.3.0-21|v18182]], [[9.5.0-22|v19216]]
| Same as USA/EUR/JPN starting with the USA/EUR/JPN [[4.0.0-7]] title-version
| Same as CHN.
| Same as CHN.
|-
| 20000002
| [[New_3DS]] NATIVE_FIRM (Native Firmware)
| [[8.1.0-0_New3DS|v16085]], [[9.0.0-20|v17120]], [[9.3.0-21|v18182]], [[9.5.0-22|v19218]]
| N/A
| Same as CHN.
| Same as CHN.
|-
| 00000003
| SAFE_MODE_FIRM
| [[1.0.0-0|v432]], [[3.0.0-5|v5632]]
| Same as USA/EUR/JPN starting with the USA/EUR/JPN [[3.0.0-5]] title-version
| Same as CHN.
| Same as CHN.
|-
| 20000003
| [[New_3DS]] SAFE_MODE_FIRM
| [[8.1.0-0_New3DS|v16081]]
| N/A
| Same as CHN.
| Same as CHN.
|-
| 00000102
| TWL_FIRM ( DSi Firmware )
| [[1.0.0-0|v432]], [[2.0.0-2|v1489]], [[3.0.0-5|v2565]], v3601, [[4.0.0-7|v4625]], [[4.4.0-10|v5681]], [[4.5.0-10|v6704]], [[6.0.0-11|v7762]], [[6.2.0-12|v8817]]
| Same as USA/EUR/JPN starting with the USA/EUR/JPN [[4.0.0-7]] title-version
| Same as CHN.
| Same as CHN.
|-
| 20000102
| [[New_3DS]] TWL_FIRM ( DSi Firmware )
| [[8.1.0-0_New3DS|v9936]]
| N/A
| Same as CHN.
| Same as CHN.
|-
| 00000202
| AGB_FIRM ( GBA Firmware )
| [[3.0.0-5|v519]], v1553, [[4.0.0-7|v2576]], [[6.0.0-11|v3665]]
| [[4.0.0-7|v2576]]
| [[4.0.0-7|v2576]], [[6.0.0-11|v3665]]
| Same as CHN.
|-
| 20000202
| [[New_3DS]] AGB_FIRM ( GBA Firmware )
| [[8.1.0-0_New3DS|v4816]]
| N/A
| N/A
| N/A
|}

== TWL System Titles ==

{| class="wikitable" border="1"
|-
! Content Category
! Bit Mask(s)
! Category Bit Mask
|-
| System Application
| TWL<nowiki>|</nowiki>0x1<nowiki>|</nowiki>0x4
| 0x8005
|-
| System Archive
| TWL<nowiki>|</nowiki>0x1<nowiki>|</nowiki>0x2<nowiki>|</nowiki>0x4<nowiki>|</nowiki>0x8
| 0x800F
|}
Bitmask 0x1 for TWL titles determines whether the title will be updated during a System Update.

=== 00048005 - System Applications===
{| class="wikitable" border="1"
|-
! TitleID Low
! Region
! Description
! Versions
! Information
|-
| 42383841(B88A)
| ALL
| [[DS Internet]]
| v0, [[2.1.0-4|v1025]], [[3.0.0-5|v2048]]
| [[DS Internet]] is the DSi-mode application launched by [[System Settings]] for setting TWL wifi configuration.
|-
| 484E4441(HNDA)
| ALL
| [[Download Play]]
| v1024
| This [[Download Play]] application is the DS-mode Download Play client, launched by the 3DS-mode Download Play application.
|-
| 484E4443(HNDC)
| CHN
| [[Download Play]]
| v1024
| See Above Description.
|-
| 484E444B(HNDK)
| KOR
| [[Download Play]]
| v1024
| See Above Description.
|}

=== 0004800F - System Data Archives===
{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! Versions
|-
| 484E4841(HNHA)
| [[Nintendo DS Cart Whitelist]]
| v0, [[2.0.0-2|v1026]], [[2.2.0-X|v2048]], [[3.0.0-5|v3072]], [[4.0.0-7|v4096]], [[4.2.0-9|v5120]], [[4.3.0-10|v6145]], [[4.4.0-10|v7168]], [[4.5.0-10|v8192]], [[5.0.0-11|v9216]], [[6.0.0-11|v10240]], [[7.0.0-13|v11264]]
|-
| 484E4C41(HNLA)
| [[Version Data]]
| v0
|}

New system updates only block DS flash-cards when the above whitelist was updated, or when TWL_FIRM was updated. The whitelist contains the data used for detecting flash-cards, this is used by TWL_FIRM.

== Application Titles ==
{| class="wikitable" border="1"
|-
! Content Category
! Bit Mask(s)
! Category Bit Mask
|-
| [[Title list/eShop Titles|Application]] (eShop Title)
| Normal
| 0x0000
|-
| DLP Child
| DlpChild
| 0x0001
|-
| [[EShop Demos|Demo]]
| Demo
| 0x0002
|-
| [[Title list/Patches|Patch]]
| CannotExecution<nowiki>|</nowiki>Patch
| 0x000E
|-
| [[Title list/DLC|Add-on Content]] (DLC)
| NotRequireRightForMount<nowiki>|</nowiki>CannotExecution<nowiki>|</nowiki>AddOnContents
| 0x008C
|}

=== 00040001 - [[Download Play]] Titles ===
This titleID-high/programID-high is used for the titles sent over [[Download Play]]. Only one 00040001 Download Play title is installed to NAND /title at a time. There can be a maximum of 255 Download Play child titles per Unique ID, indexed by Title ID Variation. The legal index range: 0x0 - 0xff.

== TWL Application Titles ==
{| class="wikitable" border="1"
|-
! Content Category
! Bit Mask(s)
! Category Bit Mask
|-
| Application (DSiWare)
| TWL<nowiki>|</nowiki>0x4
| 0x8004
|}

=== 00048004 - DSiWare ===
Although these have a titleID high separate from DSi and a titleID is stored in the SRLs, the content of these SRLs are identical to DSi.

{| class="wikitable" border="1"
|-
! TitleID Low
! Region
! Description
! Versions
|-
| 4B4B5456(KKTV)
| EUR
| Cut the Rope
| v0, v64
|-
| 4B4E5256(KNRV)
| EUR
| A Little Bit of... Brain Training™: Maths Edition
| v0
|-
| 4B5A4C56(KZLV)
| EUR
| Plants vs. Zombies™
| v0
|-
| 4B454256(KEBV)
| EUR
| ELECTROPLANKTON (Hanenbow)
| v0
|-
| 4B513956(KQ9V)
| EUR
| Zelda: Four Swords Anniversary Edition
| v16
|-
| 4B574256(KWBV)
| EUR
| Mario Calculator
| v0
|-
| 4B574656(KWFV)
| EUR
| Mario Clock
| v0
|}

Camera Services

2015-01-02T05:31:04Z

Normmatt:

==cam:c (PORT_REG) ==

==cam:s (PORT_CAL) ==

==cam:q (PORT_QTM) ==
This was added with New3DS.

==cam:u (PORT_USER)==

== y2r:u ==
{| class="wikitable" border="1"
|-
! Command Header
! Description
|-
| 0x00010040
| SetInputFormat(u8)
|-
| 0x00030040
| SetOutputFormat(u8)
|-
| 0x00050040
| SetRotation(u8)
|-
| 0x00070040
| SetBlockAlignment(u8)
|-
| 0x000D0040
| SetTransferEndInterrupt(bool)
|-
| 0x000F0000
| GetTransferEndEvent(Handle*)
|-
| 0x00100102
| SetSendingY(Handle, unsigned int, unsigned int, short, short). This DMAs from 0x1EE02000 into your buf.
|-
| 0x00110102
| SetSendingU(Handle, unsigned int, unsigned int, short, short). This DMAs from 0x1EE02080 into your buf.
|-
| 0x00120102
| SetSendingV(Handle, unsigned int, unsigned int, short, short). This DMAs from 0x1EE02100 into your buf.
|-
| 0x00130102
| This DMAs from 0x1EE02180 into your buf.
|-
| 0x00180102
| SetReceiving(Handle, unsigned int, unsigned int, short, short). This DMAs from 0x1EE02200 into your buf.
|-
| 0x001A0040
| SetInputLineWidth(short)
|-
| 0x001C0040
| SetInputLines(short)
|-
| 0x00200040
| SetStandardCoefficient(u8)
|-
| 0x00220040
| SetAlpha(short)
|-
| 0x00260000
| StartConversion
|-
| 0x00270000
| StopConversion
|-
| 0x00280000
| IsBusyConversion(bool *)
|-
| 0x002A0000
| PingProcess(unsigned char *)
|-
| 0x002B0000
| DriverInitialize
|-
| 0x002C0000
| DriverFinalize
|}

GPU/Shader Instruction Set

2014-11-27T02:47:52Z

Normmatt: Undo revision 10881 by Normmatt (talk)

[[Category:GFX]]

== Overview ==
A compiled shader binary is comprised of two parts : the main instruction sequence and the operand descriptor table. These are both sent to the GPU around the same time but using separate [[GPU Commands]]. Instructions (such as format 1 instruction) may reference operand descriptors. When such is the case, the operand descriptor ID is the offset, in words, of the descriptor within the table.
Both instructions and descriptors are coded in little endian.
Basic implementations of the following specification can be found at [https://github.com/smealum/aemstro] and [https://github.com/neobrain/nihstro]
Please note that this page is being written as the instruction set is reverse engineered; as such it may very well contain mistakes.

Nomenclature :

- opcode names with I appended to them are the same as their non-I version, except they use the inverted instruction format, giving 7 bits to SRC2 (and access to uniforms) and 5 bits to SRC1

- opcode names with U appended to them are the same as their non-U version, except they are executed conditionally based on the value of a uniform boolean.

- opcode names with C appended to them are the same as their non-C version, except they are executed conditionally based on a logical expression specified in the instruction.

== Instruction formats ==

Format 1 : (used for register operations)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x0
| 0x7
| Operand descriptor ID (DESC)
|-
| 0x7
| 0x5
| Source 2 register (SRC2)
|-
| 0xC
| 0x7
| Source 1 register (SRC1)
|-
| 0x13
| 0x2
| Address register index (IDX)
|-
| 0x15
| 0x5
| Destination register (DST)
|-
| 0x1A
| 0x6
| Opcode
|}

Format 1i : (used for register operations)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x0
| 0x7
| Operand descriptor ID (DESC)
|-
| 0x7
| 0x7
| Source 1 register (SRC2)
|-
| 0xE
| 0x5
| Source 2 register (SRC1)
|-
| 0x13
| 0x2
| Address register index (IDX)
|-
| 0x15
| 0x5
| Destination register (DST)
|-
| 0x1A
| 0x6
| Opcode
|}

Format 1u : (used for unary register operations)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x0
| 0x7
| Operand descriptor ID (DESC)
|-
| 0xC
| 0x7
| Source 1 register (SRC1)
|-
| 0x13
| 0x2
| Address register index (IDX)
|-
| 0x15
| 0x5
| Destination register (DST)
|-
| 0x1A
| 0x6
| Opcode
|}

Format 1c : (used for comparison operations)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x0
| 0x7
| Operand descriptor ID (DESC)
|-
| 0x7
| 0x7
| Source 1 register (SRC1)
|-
| 0xE
| 0x5
| Source 2 register (SRC2)
|-
| 0x13
| 0x2
| Address register index (IDX)
|-
| 0x15
| 0x3
| Comparison operator for Y (CMPY)
|-
| 0x18
| 0x3
| Comparison operator for X (CMPX)
|-
| 0x1B
| 0x5
| Opcode
|}

Format 2 : (used for flow control instructions)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x0
| 0x8
| Number of instructions (NUM)
|-
| 0xA
| 0xC
| Destination offset (in words) (DST)
|-
| 0x16
| 0x2
| Condition boolean operator (CONDOP)
|-
| 0x18
| 0x1
| Y negation bit (NEGY)
|-
| 0x19
| 0x1
| X negation bit (NEGX)
|-
| 0x1A
| 0x6
| Opcode
|}

Format 3 : (used for uniform-based conditional flow control instructions)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x0
| 0x8
| Number of instructions ? (NUM)
|-
| 0xA
| 0xC
| Destination offset (in words) (DST)
|-
| 0x16
| 0x4
| Uniform ID (BOOL/INT)
|-
| 0x1A
| 0x6
| Opcode
|}

Format 4 : (used for SETEMIT)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x16
| 0x2
| Primitive ID (PRIMID)
|-
| 0x18
| 0x2
| Vertex ID (VTXID)
|-
| 0x1A
| 0x6
| Opcode
|}

Format 5 : (used for MAD)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x0
| 0x5
| Operand descriptor ID (DESC)
|-
| 0x5
| 0x5
| Source 3 register (SRC3)
|-
| 0xA
| 0x7
| Source 2 register (SRC2)
|-
| 0x11
| 0x7
| Source 1 register (SRC1)
|-
| 0x18
| 0x5
| Destination register (DST)
|-
| 0x1D
| 0x3
| Opcode
|}

== Instructions ==

{| class="wikitable" border="1"
|-
! Opcode
! Format
! Name
! Description
|-
| 0x00
| 1
| ADD
| Adds two vectors component by component; DST[i] = SRC1[i]+SRC2[i] for all i (modulo destination component masking)
|-
| 0x01
| 1
| DP3
| Computes dot product on 3-component vectors; DST = SRC1.SRC2
|-
| 0x02
| 1
| DP4
| Computes dot product on 4-component vectors; DST = SRC1.SRC2
|-
| 0x03
| 1
| DPH
| Computes dot product on a 4-component vector and a 3-component one with 1.0 appended to it; DST = SRC1.SRC2 (with SRC2 homogenous)
|-
| 0x04
| 1
| ???
| ?
|-
| 0x05
| 1u
| EX2
| Computes SRC1's exp component by component; DST[i] = EXP(SRC1[i]) for all i (modulo destination component masking) (base 2)
|-
| 0x06
| 1u
| LG2
| Computes SRC1's log2 component by component; DST[i] = LOG2(SRC1[i]) for all i (modulo destination component masking) (base 2)
|-
| 0x07
| 1u
| ???
| ?
|-
| 0x08
| 1
| MUL
| Multiplies two vectors component by component; DST[i] = SRC1[i].SRC2[i] for all i (modulo destination component masking)
|-
| 0x09
| 1
| SGE
| Sets output if SRC1 is greater than or equal to SRC2; DST[i] = (SRC1[i] >= SRC2[i]) ? 1.0 : 0.0 for all i (modulo destination component masking)
|-
| 0x0A
| 1
| SLT
| Sets output if SRC1 is strictly less than SRC2; DST[i] = (SRC1[i] < SRC2[i]) ? 1.0 : 0.0 for all i (modulo destination component masking)
|-
| 0x0B
| 1u
| FLR
| Computes SRC1's floor component by component; DST[i] = FLOOR(SRC1[i]) for all i (modulo destination component masking)
|-
| 0x0C
| 1
| MAX
| Takes the max of two vectors, component by component; DST[i] = MAX(SRC1[i], SRC2[i]) for all i (modulo destination component masking)
|-
| 0x0D
| 1
| MIN
| Takes the min of two vectors, component by component; DST[i] = MIN(SRC1[i], SRC2[i]) for all i (modulo destination component masking)
|-
| 0x0E
| 1u
| RCP
| Computes the reciprocal of the vector, component by component; DST[i] = 1/SRC1[i] for all i (modulo destination component masking)
|-
| 0x0F
| 1u
| RSQ
| Computes the reciprocal of the square root of the vector, component by component; DST[i] = 1/sqrt(SRC1[i]) for all i (modulo destination component masking)
|-
| 0x10
| ?
| ???
| ?
|-
| 0x11
| ?
| ???
| ?
|-
| 0x12
| 1u
| ARL
| Address Register Load; sets (a0, a1, _, _) to SRC1 (cast to integer).
|-
| 0x13
| 1u
| MOV
| Moves value from one register to another; DST = SRC1.
|-
| 0x14
| ?
| ???
| ?
|-
| 0x15
| ?
| ???
| ?
|-
| 0x16
| ?
| ???
| ?
|-
| 0x17
| ?
| ???
| ?
|-
| 0x18
| 1i
| DPHI
| Computes dot product on a 4-component vector and a 3-component one with 1.0 appended to it; DST = SRC1.SRC2 (with SRC2 homogenous)
|-
| 0x19
| 1i
| ???
| ?
|-
| 0x1A
| 1i
| SGEI
| Sets output if SRC1 is greater than or equal to SRC2; DST[i] = (SRC1[i] >= SRC2[i]) ? 1.0 : 0.0 for all i (modulo destination component masking)
|-
| 0x1B
| 1i
| SLTI
| Sets output if SRC1 is strictly less than SRC2; DST[i] = (SRC1[i] < SRC2[i]) ? 1.0 : 0.0 for all i (modulo destination component masking)
|-
| 0x1C
| ?
| ???
| ?
|-
| 0x1D
| ?
| ???
| ?
|-
| 0x1E
| ?
| ???
| ?
|-
| 0x1F
| ?
| ???
| ?
|-
| 0x20
| ?
| ???
| ?
|-
| 0x21
| 1
| END2
| ?
|-
| 0x22
| 1
| END1
| ?
|-
| 0x23
| 2
| BREAKC
| If condition (see [[#Conditions|below]] for details) is true, then breaks out of LOOP block.
|-
| 0x24
| 2
| CALL
| Jumps to DST and executes instructions until it reaches DST+NUM instructions
|-
| 0x25
| 2
| CALLC
| If condition (see [[#Conditions|below]] for details) is true, then jumps to DST and executes instructions until it reaches DST+NUM instructions, else does nothing.
|-
| 0x26
| 3
| CALLU
| Jumps to DST and executes instructions until it reaches DST+NUM instructions if BOOL is true
|-
| 0x27
| 3
| IFU
| If condition BOOL is true, then executes instructions until DST, then jumps to DST+NUM; else, jumps to DST.
|-
| 0x28
| 2
| IFC
| If condition (see [[#Conditions|below]] for details) is true, then executes instructions until DST, then jumps to DST+NUM; else, jumps to DST
|-
| 0x29
| 3
| FORLOOP
| Loops over the code between itself and DST. Increments lcnt after each loop. Stops looping once lcnt reaches the value contained by the integer uniform specified by INT. (i0-i7)
|-
| 0x2A
| 0 (no param)
| EMIT
| (geometry shader only) Emits a vertex (and primitive if PRIMID is non-zero). SETEMIT must be called before this.
|-
| 0x2B
| 4
| SETEMIT
| (geometry shader only) Sets VTXID and PRIMID for the next EMIT instruction. VTXID is the ID of the vertex about to be emitted within the primitive, while PRIMID is zero if we are just emitting a single vertex and non-zero if are emitting a vertex and primitive simultaneously. Note that the output vertex buffer (which holds 4 vertices) is '''not''' cleared when the primitive is emitted, meaning that vertices from the previous primitive can be reused for the current one. (this is still a working hypothesis and unconfirmed)
|-
| 0x2C
| 2
| JMPC
| If condition (see [[#Conditions|below]] for details) is true, then jumps to DST, else does nothing.
|-
| 0x2D
| 3
| JMPU
| If condition BOOL is true, then jumps to DST, else does nothing. It seems possible that having NUM = 1 will jump if BOOL is false instead, though this is unconfirmed.
|-
| 0x2E-0x2F
| 1c
| CMP
| Sets booleans cmp.x and cmp.y based on the operand's x and y components and the CMPX and CMPY comparison operators respectively. See [[#Comparison_operator|below]] for details about operators.
|-
| 0x30-0x37
| 5
| LRP
| Does linear interpolation between two vectors, using a third as the interpolation factor, component by component; DST[i] = SRC1[i].(1.0 - SRC3[i]) + SRC2[i].(SRC3[i]) for all i (modulo destination component masking)
|-
| 0x38-0x3F
| 5
| MAD
| Multiplies two vectors and adds a third one component by component; DST[i] = SRC3[i] + SRC2[i].SRC1[i] for all i (modulo destination component masking)
|}

== Operand descriptors ==
Sizes below are in bits, not bytes.

{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Destination component mask. Bit 3 = x, 2 = y, 1 = z, 0 = w.
|-
| 0x4
| 0x1
| Source 1 negation bit
|-
| 0x5
| 0x8
| Source 1 component selector
|-
| 0xD
| 0x1
| Source 2 negation bit
|-
| 0xE
| 0x8
| Source 2 component selector
|-
| 0x16
| 0x1
| Source 3 negation bit
|-
| 0x17
| 0x8
| Source 3 component selector
|}

Component selector :
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x2
| Component 3 value
|-
| 0x2
| 0x2
| Component 2 value
|-
| 0x4
| 0x2
| Component 1 value
|-
| 0x6
| 0x2
| Component 0 value
|}

{| class="wikitable" border="1"
|-
! Value
! Component
|-
| 0x0
| x
|-
| 0x1
| y
|-
| 0x2
| z
|-
| 0x3
| w
|}

The component selector enables swizzling. For example, component selector 0x1B is equivalent to .xyzw, while 0x55 is equivalent to .yyyy.

== Relative addressing ==

There are 3 global address registers : a0, a1 and a2 = lcnt (loop counter). For format 1 instructions, when IDX != 0, the value of the corresponding address register is added to SRC1's value.

For example, if IDX = 2, a1 = 3 and SRC1 = c8, then instead SRC1+a1 = c11 will be used for the instruction.

a0 and a1 can be set manually through the ARL instruction. lcnt is set automatically by the LOOP instruction. Note that lcnt is still accessible and valid after exiting a LOOP block.

== Comparison operator ==

{| class="wikitable" border="1"
|-
! CMPX/CMPY raw value
! Operator name
! Expression
|-
| 0x0
| EQ
| src1 == src2
|-
| 0x1
| NE
| src1 != src2
|-
| 0x2
| LT
| src1 < src2
|-
| 0x3
| LE
| src1 <= src2
|-
| 0x4
| GT
| src1 > src2
|-
| 0x5
| GE
| src1 >= src2
|-
| 0x6
| ??
| true ?
|-
| 0x7
| ??
| true ?
|}

6 and 7 seem to always return true.

== Conditions ==

A number of format 2 instructions are executed conditionally. These conditions are based on two boolean registers which can be set with CMP : cmp.x and cmp.y.

Conditional instructions include 3 parameters : CONDOP, NEGX and NEGY. NEGX and NEGY determine whether the conditional expression will use cmp.x or !cmp.x, and cmp.y or !cmp.y respectively (NEGX set means we use cmp.x, and NEGX not set means we use !cmp.x). CONDOP describes the actual expression. There are four conditional expression formats :

{| class="wikitable" border="1"
|-
! CONDOP raw value
! Expression
! Description
|-
| 0x0
| <nowiki>[!]cmp.x || [!]cmp.y</nowiki>
| OR
|-
| 0x1
| <nowiki>[!]cmp.x && [!]cmp.y</nowiki>
| AND
|-
| 0x2
| [!]cmp.X
| X
|-
| 0x3
| [!]cmp.y
| Y
|}

For example, with CONDOP=1, NEGX=1 and NEGY=0, the resulting expression would be (cmp.x && !cmp.y).

== Registers ==
Most registers (all the ones within the 0x00-0x7F range) are float[4] vectors. There are also boolean registers (b0-b7) and integer registers (i0-i7). How the latter ones are set is as of yet unknown.

Attribute (input, RO) registers are located within the 0x0-0xF range. What data they are fed is specified by the CPU.

Output (WO) registers are also located within the 0x0-0xF range. What type of data they are contain is specified by the CPU.

Temporary (RW) register are located within the 0x10-0x1F range. They can contain any type of data.

Uniform (RO) registers are located within the 0x20-0x7F range. Their content is set by the CPU.

SRC2 being only 5 bits long rather than 7 bits like its friend SRC1, it can only access v (input attribute) and r (temporary) registers.

Registers in the 0x88-0x97 range are uniform booleans.

It appears that writing twice to the same output register can cause problems, such as the GPU hanging.

DST mapping :

{| class="wikitable" border="1"
|-
! DST raw value
! Register name
! Description
|-
| 0x0-0x7
| o0-o7
| Output registers.
|-
| 0x10-0x1F
| r0-r15
| Temporary registers.
|}

SRC mapping :

{| class="wikitable" border="1"
|-
! SRC1 raw value
! Register name
! Description
|-
| 0x0-0x7
| v0-v7
| Input attribute registers.
|-
| 0x10-0x1F
| r0-r15
| Temporary registers.
|-
| 0x20-0x7F
| c0-c95
| Vector uniform registers.
|}

Note that 5bit SRC registers (SRC2 in format 1 for example) can't access c0-c95 because they don't have enough bits.

GPU/Shader Instruction Set

2014-11-27T02:37:39Z

Normmatt: /* Instructions */

[[Category:GFX]]

== Overview ==
A compiled shader binary is comprised of two parts : the main instruction sequence and the operand descriptor table. These are both sent to the GPU around the same time but using separate [[GPU Commands]]. Instructions (such as format 1 instruction) may reference operand descriptors. When such is the case, the operand descriptor ID is the offset, in words, of the descriptor within the table.
Both instructions and descriptors are coded in little endian.
Basic implementations of the following specification can be found at [https://github.com/smealum/aemstro] and [https://github.com/neobrain/nihstro]
Please note that this page is being written as the instruction set is reverse engineered; as such it may very well contain mistakes.

Nomenclature :

- opcode names with I appended to them are the same as their non-I version, except they use the inverted instruction format, giving 7 bits to SRC2 (and access to uniforms) and 5 bits to SRC1

- opcode names with U appended to them are the same as their non-U version, except they are executed conditionally based on the value of a uniform boolean.

- opcode names with C appended to them are the same as their non-C version, except they are executed conditionally based on a logical expression specified in the instruction.

== Instruction formats ==

Format 1 : (used for register operations)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x0
| 0x7
| Operand descriptor ID (DESC)
|-
| 0x7
| 0x5
| Source 2 register (SRC2)
|-
| 0xC
| 0x7
| Source 1 register (SRC1)
|-
| 0x13
| 0x2
| Address register index (IDX)
|-
| 0x15
| 0x5
| Destination register (DST)
|-
| 0x1A
| 0x6
| Opcode
|}

Format 1i : (used for register operations)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x0
| 0x7
| Operand descriptor ID (DESC)
|-
| 0x7
| 0x7
| Source 1 register (SRC2)
|-
| 0xE
| 0x5
| Source 2 register (SRC1)
|-
| 0x13
| 0x2
| Address register index (IDX)
|-
| 0x15
| 0x5
| Destination register (DST)
|-
| 0x1A
| 0x6
| Opcode
|}

Format 1u : (used for unary register operations)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x0
| 0x7
| Operand descriptor ID (DESC)
|-
| 0xC
| 0x7
| Source 1 register (SRC1)
|-
| 0x13
| 0x2
| Address register index (IDX)
|-
| 0x15
| 0x5
| Destination register (DST)
|-
| 0x1A
| 0x6
| Opcode
|}

Format 1c : (used for comparison operations)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x0
| 0x7
| Operand descriptor ID (DESC)
|-
| 0x7
| 0x7
| Source 1 register (SRC1)
|-
| 0xE
| 0x5
| Source 2 register (SRC2)
|-
| 0x13
| 0x2
| Address register index (IDX)
|-
| 0x15
| 0x3
| Comparison operator for Y (CMPY)
|-
| 0x18
| 0x3
| Comparison operator for X (CMPX)
|-
| 0x1B
| 0x5
| Opcode
|}

Format 2 : (used for flow control instructions)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x0
| 0x8
| Number of instructions (NUM)
|-
| 0xA
| 0xC
| Destination offset (in words) (DST)
|-
| 0x16
| 0x2
| Condition boolean operator (CONDOP)
|-
| 0x18
| 0x1
| Y negation bit (NEGY)
|-
| 0x19
| 0x1
| X negation bit (NEGX)
|-
| 0x1A
| 0x6
| Opcode
|}

Format 3 : (used for uniform-based conditional flow control instructions)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x0
| 0x8
| Number of instructions ? (NUM)
|-
| 0xA
| 0xC
| Destination offset (in words) (DST)
|-
| 0x16
| 0x4
| Uniform ID (BOOL/INT)
|-
| 0x1A
| 0x6
| Opcode
|}

Format 4 : (used for SETEMIT)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x16
| 0x2
| Primitive ID (PRIMID)
|-
| 0x18
| 0x2
| Vertex ID (VTXID)
|-
| 0x1A
| 0x6
| Opcode
|}

Format 5 : (used for MAD)
{| class="wikitable" border="1"
|-
! Offset
! Size (bits)
! Description
|-
| 0x0
| 0x5
| Operand descriptor ID (DESC)
|-
| 0x5
| 0x5
| Source 3 register (SRC3)
|-
| 0xA
| 0x7
| Source 2 register (SRC2)
|-
| 0x11
| 0x7
| Source 1 register (SRC1)
|-
| 0x18
| 0x5
| Destination register (DST)
|-
| 0x1D
| 0x3
| Opcode
|}

== Instructions ==

{| class="wikitable" border="1"
|-
! Opcode
! Format
! Name
! Description
|-
| 0x00
| 1
| ADD
| Adds two vectors component by component; DST[i] = SRC1[i]+SRC2[i] for all i (modulo destination component masking)
|-
| 0x01
| 1
| DP3
| Computes dot product on 3-component vectors; DST = SRC1.SRC2
|-
| 0x02
| 1
| DP4
| Computes dot product on 4-component vectors; DST = SRC1.SRC2
|-
| 0x03
| 1
| DPH
| Computes dot product on a 4-component vector and a 3-component one with 1.0 appended to it; DST = SRC1.SRC2 (with SRC2 homogenous)
|-
| 0x04
| 1
| ???
| ?
|-
| 0x05
| 1u
| EX2
| Computes SRC1's exp component by component; DST[i] = EXP(SRC1[i]) for all i (modulo destination component masking) (base 2)
|-
| 0x06
| 1u
| LG2
| Computes SRC1's log2 component by component; DST[i] = LOG2(SRC1[i]) for all i (modulo destination component masking) (base 2)
|-
| 0x07
| 1u
| ???
| ?
|-
| 0x08
| 1
| MUL
| Multiplies two vectors component by component; DST[i] = SRC1[i].SRC2[i] for all i (modulo destination component masking)
|-
| 0x09
| 1
| SGE
| Sets output if SRC1 is greater than or equal to SRC2; DST[i] = (SRC1[i] >= SRC2[i]) ? 1.0 : 0.0 for all i (modulo destination component masking)
|-
| 0x0A
| 1
| SLT
| Sets output if SRC1 is strictly less than SRC2; DST[i] = (SRC1[i] < SRC2[i]) ? 1.0 : 0.0 for all i (modulo destination component masking)
|-
| 0x0B
| 1u
| FLR
| Computes SRC1's floor component by component; DST[i] = FLOOR(SRC1[i]) for all i (modulo destination component masking)
|-
| 0x0C
| 1
| MAX
| Takes the max of two vectors, component by component; DST[i] = MAX(SRC1[i], SRC2[i]) for all i (modulo destination component masking)
|-
| 0x0D
| 1
| MIN
| Takes the min of two vectors, component by component; DST[i] = MIN(SRC1[i], SRC2[i]) for all i (modulo destination component masking)
|-
| 0x0E
| 1u
| RCP
| Computes the reciprocal of the vector, component by component; DST[i] = 1/SRC1[i] for all i (modulo destination component masking)
|-
| 0x0F
| 1u
| RSQ
| Computes the reciprocal of the square root of the vector, component by component; DST[i] = 1/sqrt(SRC1[i]) for all i (modulo destination component masking)
|-
| 0x10
| ?
| ???
| ?
|-
| 0x11
| ?
| ???
| ?
|-
| 0x12
| 1u
| ARL
| Address Register Load; sets (a0, a1, _, _) to SRC1 (cast to integer).
|-
| 0x13
| 1u
| MOV
| Moves value from one register to another; DST = SRC1.
|-
| 0x14
| ?
| ???
| ?
|-
| 0x15
| ?
| ???
| ?
|-
| 0x16
| ?
| ???
| ?
|-
| 0x17
| ?
| ???
| ?
|-
| 0x18
| 1i
| DPHI
| Computes dot product on a 4-component vector and a 3-component one with 1.0 appended to it; DST = SRC1.SRC2 (with SRC2 homogenous)
|-
| 0x19
| 1i
| ???
| ?
|-
| 0x1A
| 1i
| SGEI
| Sets output if SRC1 is greater than or equal to SRC2; DST[i] = (SRC1[i] >= SRC2[i]) ? 1.0 : 0.0 for all i (modulo destination component masking)
|-
| 0x1B
| 1i
| SLTI
| Sets output if SRC1 is strictly less than SRC2; DST[i] = (SRC1[i] < SRC2[i]) ? 1.0 : 0.0 for all i (modulo destination component masking)
|-
| 0x1C
| ?
| ???
| ?
|-
| 0x1D
| ?
| ???
| ?
|-
| 0x1E
| ?
| ???
| ?
|-
| 0x1F
| ?
| ???
| ?
|-
| 0x20
| ?
| ???
| ?
|-
| 0x21
| 1
| END2
| ?
|-
| 0x22
| 1
| END1
| ?
|-
| 0x23
| 2
| BREAKC
| If condition (see [[#Conditions|below]] for details) is true, then breaks out of LOOP block.
|-
| 0x24
| 2
| CALL
| Jumps to DST and executes instructions until it reaches DST+NUM instructions
|-
| 0x25
| 2
| CALLC
| If condition (see [[#Conditions|below]] for details) is true, then jumps to DST and executes instructions until it reaches DST+NUM instructions, else does nothing.
|-
| 0x26
| 3
| CALLU
| Jumps to DST and executes instructions until it reaches DST+NUM instructions if BOOL is true
|-
| 0x27
| 3
| IFU
| If condition BOOL is true, then executes instructions until DST, then jumps to DST+NUM; else, jumps to DST.
|-
| 0x28
| 1c
| IFC
| If condition (see [[#Conditions|below]] for details) is true, then executes instructions until DST, then jumps to DST+NUM; else, jumps to DST
|-
| 0x29
| 3
| FORLOOP
| Loops over the code between itself and DST. Increments lcnt after each loop. Stops looping once lcnt reaches the value contained by the integer uniform specified by INT. (i0-i7)
|-
| 0x2A
| 0 (no param)
| EMIT
| (geometry shader only) Emits a vertex (and primitive if PRIMID is non-zero). SETEMIT must be called before this.
|-
| 0x2B
| 4
| SETEMIT
| (geometry shader only) Sets VTXID and PRIMID for the next EMIT instruction. VTXID is the ID of the vertex about to be emitted within the primitive, while PRIMID is zero if we are just emitting a single vertex and non-zero if are emitting a vertex and primitive simultaneously. Note that the output vertex buffer (which holds 4 vertices) is '''not''' cleared when the primitive is emitted, meaning that vertices from the previous primitive can be reused for the current one. (this is still a working hypothesis and unconfirmed)
|-
| 0x2C
| 2
| JMPC
| If condition (see [[#Conditions|below]] for details) is true, then jumps to DST, else does nothing.
|-
| 0x2D
| 3
| JMPU
| If condition BOOL is true, then jumps to DST, else does nothing. It seems possible that having NUM = 1 will jump if BOOL is false instead, though this is unconfirmed.
|-
| 0x2E-0x2F
| 1c
| CMP
| Sets booleans cmp.x and cmp.y based on the operand's x and y components and the CMPX and CMPY comparison operators respectively. See [[#Comparison_operator|below]] for details about operators.
|-
| 0x30-0x37
| 5
| LRP
| Does linear interpolation between two vectors, using a third as the interpolation factor, component by component; DST[i] = SRC1[i].(1.0 - SRC3[i]) + SRC2[i].(SRC3[i]) for all i (modulo destination component masking)
|-
| 0x38-0x3F
| 5
| MAD
| Multiplies two vectors and adds a third one component by component; DST[i] = SRC3[i] + SRC2[i].SRC1[i] for all i (modulo destination component masking)
|}

== Operand descriptors ==
Sizes below are in bits, not bytes.

{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Destination component mask. Bit 3 = x, 2 = y, 1 = z, 0 = w.
|-
| 0x4
| 0x1
| Source 1 negation bit
|-
| 0x5
| 0x8
| Source 1 component selector
|-
| 0xD
| 0x1
| Source 2 negation bit
|-
| 0xE
| 0x8
| Source 2 component selector
|-
| 0x16
| 0x1
| Source 3 negation bit
|-
| 0x17
| 0x8
| Source 3 component selector
|}

Component selector :
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x2
| Component 3 value
|-
| 0x2
| 0x2
| Component 2 value
|-
| 0x4
| 0x2
| Component 1 value
|-
| 0x6
| 0x2
| Component 0 value
|}

{| class="wikitable" border="1"
|-
! Value
! Component
|-
| 0x0
| x
|-
| 0x1
| y
|-
| 0x2
| z
|-
| 0x3
| w
|}

The component selector enables swizzling. For example, component selector 0x1B is equivalent to .xyzw, while 0x55 is equivalent to .yyyy.

== Relative addressing ==

There are 3 global address registers : a0, a1 and a2 = lcnt (loop counter). For format 1 instructions, when IDX != 0, the value of the corresponding address register is added to SRC1's value.

For example, if IDX = 2, a1 = 3 and SRC1 = c8, then instead SRC1+a1 = c11 will be used for the instruction.

a0 and a1 can be set manually through the ARL instruction. lcnt is set automatically by the LOOP instruction. Note that lcnt is still accessible and valid after exiting a LOOP block.

== Comparison operator ==

{| class="wikitable" border="1"
|-
! CMPX/CMPY raw value
! Operator name
! Expression
|-
| 0x0
| EQ
| src1 == src2
|-
| 0x1
| NE
| src1 != src2
|-
| 0x2
| LT
| src1 < src2
|-
| 0x3
| LE
| src1 <= src2
|-
| 0x4
| GT
| src1 > src2
|-
| 0x5
| GE
| src1 >= src2
|-
| 0x6
| ??
| true ?
|-
| 0x7
| ??
| true ?
|}

6 and 7 seem to always return true.

== Conditions ==

A number of format 2 instructions are executed conditionally. These conditions are based on two boolean registers which can be set with CMP : cmp.x and cmp.y.

Conditional instructions include 3 parameters : CONDOP, NEGX and NEGY. NEGX and NEGY determine whether the conditional expression will use cmp.x or !cmp.x, and cmp.y or !cmp.y respectively (NEGX set means we use cmp.x, and NEGX not set means we use !cmp.x). CONDOP describes the actual expression. There are four conditional expression formats :

{| class="wikitable" border="1"
|-
! CONDOP raw value
! Expression
! Description
|-
| 0x0
| <nowiki>[!]cmp.x || [!]cmp.y</nowiki>
| OR
|-
| 0x1
| <nowiki>[!]cmp.x && [!]cmp.y</nowiki>
| AND
|-
| 0x2
| [!]cmp.X
| X
|-
| 0x3
| [!]cmp.y
| Y
|}

For example, with CONDOP=1, NEGX=1 and NEGY=0, the resulting expression would be (cmp.x && !cmp.y).

== Registers ==
Most registers (all the ones within the 0x00-0x7F range) are float[4] vectors. There are also boolean registers (b0-b7) and integer registers (i0-i7). How the latter ones are set is as of yet unknown.

Attribute (input, RO) registers are located within the 0x0-0xF range. What data they are fed is specified by the CPU.

Output (WO) registers are also located within the 0x0-0xF range. What type of data they are contain is specified by the CPU.

Temporary (RW) register are located within the 0x10-0x1F range. They can contain any type of data.

Uniform (RO) registers are located within the 0x20-0x7F range. Their content is set by the CPU.

SRC2 being only 5 bits long rather than 7 bits like its friend SRC1, it can only access v (input attribute) and r (temporary) registers.

Registers in the 0x88-0x97 range are uniform booleans.

It appears that writing twice to the same output register can cause problems, such as the GPU hanging.

DST mapping :

{| class="wikitable" border="1"
|-
! DST raw value
! Register name
! Description
|-
| 0x0-0x7
| o0-o7
| Output registers.
|-
| 0x10-0x1F
| r0-r15
| Temporary registers.
|}

SRC mapping :

{| class="wikitable" border="1"
|-
! SRC1 raw value
! Register name
! Description
|-
| 0x0-0x7
| v0-v7
| Input attribute registers.
|-
| 0x10-0x1F
| r0-r15
| Temporary registers.
|-
| 0x20-0x7F
| c0-c95
| Vector uniform registers.
|}

Note that 5bit SRC registers (SRC2 in format 1 for example) can't access c0-c95 because they don't have enough bits.

Home Menu/Themes

2014-11-17T03:57:11Z

Normmatt: /* Textures */

This page describes the formats/structure of the data stored in RomFS for [[Home Menu]] DLC, for themes.

=Control Content=
The control content has content-index 0. It's unknown what if any of this is Home Menu specific.

RomFS structure:
* "MetaDataContentHeader.bin": Unknown, size is 0x44-bytes.
* "ContentInfoArchive_<region>_<lang>.bin" Contains the list of ''all'' DLC content available under this DLC title(which can include DLC that's not yet accessible via the shop). <region> can be "USA", etc. <lang>, for the US title: "en", "es", "fr", and "pt".
* "icons/<decimal_id>.icn" Contains the raw DLC icon image data, without any header. 48x48 tiled RGB565.

ContentInfoArchive entry format, size 0xC8(this file contains the following entry for each of the DLC content):
{| class="wikitable" border="1"
|-
! Relative offset
! Size
! Description
|-
| 0x0
| 0x4
| Content index - 1
|-
| 0x4
| 0x4
| 0x0 = disabled, 0x1 = enabled.
|-
| 0x8
| 0x40
| char string for the title text.
|-
| 0x48
| 0x88
| char string for the description text.
|}

The first entry is a "header": contentindex val=1, second word = <total DLC content excluding DLC control content>. The two strings are set to dummy text.

=Theme Content=
RomFS structure:
* "bgm.bcstm": Background music, see [[CSTRM|here]].
* "body_LZ.bin": LZ11 compressed blob containing the rest of the theme data(graphics + optional [[BCWAV|CWAVs]]).

=Decompressed body_LZ.bin structure=
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Version (Must be 1)
|-
| 0x4
| 0x1
| Unknown
|-
| 0x5
| 0x1
| 0 = disable usage of bgm.bcstm, non-zero = enable usage of bgm.bcstm.
|-
| 0x8
| 0x4
| Normally zero(not used?).
|-
| 0xC
| 0x4
| Must be <4. Top screen draw type: 0 = none, 1 = solid color(see below), 2 = extension of val1(see below), 3 = texture.
|-
| 0x10
| 0x4
| Top screen frame type, when draw-type is 3: 0 = texture1, 1 = texture0, 3 = texture1.
|-
| 0x14
| 0x4
| Offset for the top screen solid color data.
|-
| 0x18
| 0x4
| Top screen texture offset, see below.
|-
| 0x1C
| 0x4
| Additional top-screen texture offset, used with draw-type val2. This is optional when using draw-type val2.
|-
| 0x20
| 0x4
| Must be <4. Bottom screen draw type: 0 = none, 1 = solid color(see below), 2 = invalid, 3 = texture.
|-
| 0x24
| 0x4
| Bottom screen frame type, when draw-type is 3: 0 = texture4, 1 = texture2, 2 = texture3, 3 = texture4, 4 = texture3.
|-
| 0x28
| 0x4
| Bottom Screen Solid Color/Texture offset, see below.
|-
| 0x2C
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x30
| 0x4
| Offset to a 0xC-byte block.
|-
| 0x34
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x38
| 0x4
| Offset to a 0xC-byte block.
|-
| 0x3C
| 0x4
| Must be <2. 1 = enables usage of the following two fields.
|-
| 0x40
| 0x4
| Offset to the data for texture6.
|-
| 0x44
| 0x4
| Offset to the data for texture7.
|-
| 0x48
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x4C
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x50
| 0x4
| Must be <2. 1 = enables usage of the following two fields.
|-
| 0x54
| 0x4
| Offset to the data for texture8.
|-
| 0x58
| 0x4
| Offset to the data for texture9.
|-
| 0x5C
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x60
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x64
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x68
| 0x4
| Offset to a 0x9-byte block.
|-
| 0x6C
| 0x4
| Must be <2. 1 = enables usage of the following two fields.
|-
| 0x70
| 0x4
| Offset to a 0x20-byte block.
|-
| 0x74
| 0x4
| Offset to a 0x20-byte block.
|-
| 0x78
| 0x4
| Must be <3. 1 = enables usage of the following field.
|-
| 0x7C
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x80
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x84
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x88
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x8C
| 0x4
| Offset to a 0x9-byte block.
|-
| 0x90
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x94
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x98
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x9C
| 0x4
| Offset to a 0x20-byte block.
|-
| 0xA0
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0xA4
| 0x4
| Offset to a 0x15-byte block.
|-
| 0xA8
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0xAC
| 0x4
| Offset to a 0xC-byte block.
|-
| 0xB0
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0xB4
| 0x4
| Offset to a 0x6-byte block.
|-
| 0xB8
| 0x4
| Must be <2. 1 = below audio data section is used, otherwise it's not used.
|-
| 0xBC
| 0x4
| Audio data section size, this must be <=0x2DC00.
|-
| 0xC0
| 0x4
| Offset for the audio data section.
|}

The filesize is aligned to 0x10-bytes. The filesize must be at least 0xC4-bytes, due to padding/alignment the first block of data after the header is normally located at 0xD0.

With the solid-color data, there's 5-bytes located at the solid-color data offset. With draw-type val2, there's 7-bytes located here. The first 4-bytes located here is RGBA8888 pixel data, the rest is unknown.

With draw-type val2, texture5 is also used(this likely isn't used for the entire top-screen). With draw-type val2, an extra texture with the same format/dimensions as texture5 can be used, when the additional texture offset field is set.

==Textures==
{| class="wikitable" border="1"
|-
! ID
! Color format
! Texture display dimensions
! Texture data dimensions
! Description
|-
| 0
| Tiled RGB565
| 412x240
| 512x256
| This is the texture used for the top-screen background, when the frame-type is set for this one.
|-
| 1
| Tiled RGB565
| 1008x240
| 1024x256
| This is the texture used for the top-screen background, when the frame-type is set for this one.
|-
| 2
| Tiled RGB565
| 320x240
| 512x256
| This is the texture used for the bottom-screen background, when the frame-type is set for this one.
|-
| 3
| Tiled RGB565
| 960x240
| 1024x256
| This is the texture used for the bottom-screen background, when the frame-type is set for this one.
|-
| 4
| Tiled RGB565
| 1008x240
| 1024x256
| This is the texture used for the bottom-screen background, when the frame-type is set for this one.
|-
| 5
| Tiled A8
| 64x64
| 64x64
| This is used with the top-screen when top-screen draw-type is val2, see above.
|-
| 6
| Tiled BGR888
| 74x64
| 128x64
| This is used for folder's on the main menu.
|-
| 7
| Tiled BGR888
| 82x64
| 128x64
| This is used for open folder's on the main menu.
|-
| 8
| Tiled BGR888
| 36x72
| 64x128
| This is used for 48x48 icon borders on the main menu.
|-
| 9
| Tiled BGR888
| 25x50
| 32x64
| This is used for 24x24 icon borders on the main menu.
|}

==Audio data section==
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Unknown
|-
| 0x4
| 0x4
| Unknown
|-
| 0x8
|
| Beginning of the audio data entries.
|}

The audio data section contains the sound effects for this theme.

Audio data entry structure:
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| CWAV size.
|-
| 0x4
| 0x4
| Unknown
|-
| 0x8
|
| [[BCWAV|CWAV]]
|}

In certain cases there may be more data starting at offset 0x8 than what's listed above, before the CWAV.

=Built-in themes=
The built-in themes are stored at Home Menu RomFS:/theme/<Color>_LZ.bin, the format appears to be the same as body_LZ.bin in the theme DLC content.

Home Menu/Themes

2014-11-15T07:14:22Z

Normmatt: /* Textures */

This page describes the formats/structure of the data stored in RomFS for [[Home Menu]] DLC, for themes.

=Control Content=
The control content has content-index 0. It's unknown what if any of this is Home Menu specific.

RomFS structure:
* "MetaDataContentHeader.bin": Unknown, size is 0x44-bytes.
* "ContentInfoArchive_<region>_<lang>.bin" Contains the list of ''all'' DLC content available under this DLC title(which can include DLC that's not yet accessible via the shop). <region> can be "USA", etc. <lang>, for the US title: "en", "es", "fr", and "pt".
* "icons/<decimal_id>.icn" Contains the raw DLC icon image data, without any header. 48x48 tiled RGB565.

ContentInfoArchive entry format, size 0xC8(this file contains the following entry for each of the DLC content):
{| class="wikitable" border="1"
|-
! Relative offset
! Size
! Description
|-
| 0x0
| 0x4
| Content index - 1
|-
| 0x4
| 0x4
| 0x0 = disabled, 0x1 = enabled.
|-
| 0x8
| 0x40
| char string for the title text.
|-
| 0x48
| 0x88
| char string for the description text.
|}

The first entry is a "header": contentindex val=1, second word = <total DLC content excluding DLC control content>. The two strings are set to dummy text.

=Theme Content=
RomFS structure:
* "bgm.bcstm": Background music, see [[CSTRM|here]].
* "body_LZ.bin": LZ11 compressed blob containing the rest of the theme data(graphics + optional [[BCWAV|CWAVs]]).

=Decompressed body_LZ.bin structure=
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Version (Must be 1)
|-
| 0x4
| 0x1
| Unknown
|-
| 0x5
| 0x1
| 0 = unknown, non-zero = unknown.
|-
| 0x8
| 0x4
| Normally zero(not used?).
|-
| 0xC
| 0x4
| Must be <4. Top screen draw type: 0 = none, 1 = solid color(see below), 2 = extension of val1(see below), 3 = texture.
|-
| 0x10
| 0x4
| Top screen frame type: 0 = solid color(uses texture1 internally), 1 = texture0, 3 = texture1.
|-
| 0x14
| 0x4
| Offset for the top screen solid color data.
|-
| 0x18
| 0x4
| Top screen texture offset, see below.
|-
| 0x1C
| 0x4
| Additional top-screen texture offset, used with draw-type val2. This is optional when using draw-type val2.
|-
| 0x20
| 0x4
| Must be <4. Bottom screen draw type: 0 = none, 1 = solid color(see below), 2 = invalid, 3 = texture.
|-
| 0x24
| 0x4
| Bottom screen frame type: 0 = solid color(uses texture4 internally), 1 = texture2, 2 = texture3, 3 = texture4, 4 = texture3.
|-
| 0x28
| 0x4
| Bottom Screen Solid Color/Texture offset, see below.
|-
| 0x2C
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x30
| 0x4
| Offset to a 0xC-byte block.
|-
| 0x34
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x38
| 0x4
| Offset to a 0xC-byte block.
|-
| 0x3C
| 0x4
| Must be <2. 1 = enables usage of the following two fields.
|-
| 0x40
| 0x4
| Offset to the data for texture6.
|-
| 0x44
| 0x4
| Offset to the data for texture7.
|-
| 0x48
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x4C
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x50
| 0x4
| Must be <2. 1 = enables usage of the following two fields.
|-
| 0x54
| 0x4
| Offset to the data for texture8.
|-
| 0x58
| 0x4
| Offset to the data for texture9.
|-
| 0x5C
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x60
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x64
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x68
| 0x4
| Offset to a 0x9-byte block.
|-
| 0x6C
| 0x4
| Must be <2. 1 = enables usage of the following two fields.
|-
| 0x70
| 0x4
| Offset to a 0x20-byte block.
|-
| 0x74
| 0x4
| Offset to a 0x20-byte block.
|-
| 0x78
| 0x4
| Must be <3. 1 = enables usage of the following field.
|-
| 0x7C
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x80
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x84
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x88
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x8C
| 0x4
| Offset to a 0x9-byte block.
|-
| 0x90
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x94
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x98
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x9C
| 0x4
| Offset to a 0x20-byte block.
|-
| 0xA0
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0xA4
| 0x4
| Offset to a 0x15-byte block.
|-
| 0xA8
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0xAC
| 0x4
| Offset to a 0xC-byte block.
|-
| 0xB0
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0xB4
| 0x4
| Offset to a 0x6-byte block.
|-
| 0xB8
| 0x4
| Must be <2. 1 = below audio data section is used, otherwise it's not used.
|-
| 0xBC
| 0x4
| Audio data section size, this must be <=0x2DC00.
|-
| 0xC0
| 0x4
| Offset for the audio data section.
|}

The filesize is aligned to 0x10-bytes. The filesize must be at least 0xC4-bytes, due to padding/alignment the first block of data after the header is normally located at 0xD0.

With the solid-color data, there's 5-bytes located at the solid-color data offset. With draw-type val2, there's 7-bytes located here. The first 4-bytes located here is RGBA8888 pixel data, the rest is unknown.

With draw-type val2, texture5 is also used(this likely isn't used for the entire top-screen). With draw-type val2, an extra texture with the same format/dimensions as texture5 can be used, when the additional texture offset field is set.

==Textures==
{| class="wikitable" border="1"
|-
! ID
! Color format
! Texture display dimensions
! Texture data dimensions
! Description
|-
| 0
| Tiled RGB565
| 412x240
| 512x256
| This is the texture used for the top-screen background, when the frame-type is set for this one.
|-
| 1
| Tiled RGB565
| 1008x240
| 1024x256
| This is the texture used for the top-screen background, when the frame-type is set for this one.
|-
| 2
| Tiled RGB565
| 320x240
| 512x256
| This is the texture used for the bottom-screen background, when the frame-type is set for this one.
|-
| 3
| Tiled RGB565
| 960x240
| 1024x256
| This is the texture used for the bottom-screen background, when the frame-type is set for this one.
|-
| 4
| Tiled RGB565
| 1008x240
| 1024x256
| This is the texture used for the bottom-screen background, when the frame-type is set for this one.
|-
| 5
| RGBA8888
| 64x64
| 64x64
| This is used with the top-screen when top-screen draw-type is val2, see above.
|-
| 6
| Tiled BGR888
| 74x64
| 128x64
| This is used for folder's on the main menu.
|-
| 7
| Tiled BGR888
| 82x64
| 128x64
| This is used for open folder's on the main menu.
|-
| 8
| Tiled BGR888
| 36x72
| 64x128
| This is used for 48x48 icon borders on the main menu.
|-
| 9
| Tiled BGR888
| 25x50
| 32x64
| This is used for 24x24 icon borders on the main menu.
|}

==Audio data section==
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Unknown
|-
| 0x4
| 0x4
| Unknown
|-
| 0x8
|
| Beginning of the audio data entries.
|}

The audio data section contains the sound effects for this theme.

Audio data entry structure:
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| CWAV size.
|-
| 0x4
| 0x4
| Unknown
|-
| 0x8
|
| [[BCWAV|CWAV]]
|}

In certain cases there may be more data starting at offset 0x8 than what's listed above, before the CWAV.

=Built-in themes=
The built-in themes are stored at Home Menu RomFS:/theme/<Color>_LZ.bin, the format appears to be the same as body_LZ.bin in the theme DLC content.

Home Menu/Themes

2014-11-15T05:07:26Z

Normmatt:

This page describes the formats/structure of the data stored in RomFS for [[Home Menu]] DLC, for themes.

=Control Content=
The control content has content-index 0. It's unknown what if any of this is Home Menu specific.

RomFS structure:
* "MetaDataContentHeader.bin": Unknown, size is 0x44-bytes.
* "ContentInfoArchive_<region>_<lang>.bin" Contains the list of ''all'' DLC content available under this DLC title(which can include DLC that's not yet accessible via the shop). <region> can be "USA", etc. <lang>, for the US title: "en", "es", "fr", and "pt".
* "icons/<decimal_id>.icn" Contains the raw DLC icon image data, without any header. 48x48 tiled RGB565.

ContentInfoArchive entry format, size 0xC8(this file contains the following entry for each of the DLC content):
{| class="wikitable" border="1"
|-
! Relative offset
! Size
! Description
|-
| 0x0
| 0x4
| Content index - 1
|-
| 0x4
| 0x4
| 0x0 = disabled, 0x1 = enabled.
|-
| 0x8
| 0x40
| char string for the title text.
|-
| 0x48
| 0x88
| char string for the description text.
|}

The first entry is a "header": contentindex val=1, second word = <total DLC content excluding DLC control content>. The two strings are set to dummy text.

=Theme Content=
RomFS structure:
* "bgm.bcstm": Background music, see [[CSTRM|here]].
* "body_LZ.bin": LZ11 compressed blob containing the rest of the theme data(graphics + optional [[BCWAV|CWAVs]]).

=Decompressed body_LZ.bin structure=
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Version (Must be 1)
|-
| 0x4
| 0x1
| Unknown
|-
| 0x5
| 0x1
| 0 = unknown, non-zero = unknown.
|-
| 0x8
| 0x4
| Normally zero(not used?).
|-
| 0xC
| 0x4
| Must be <4. Top screen draw type: 0 = none, 1 = solid color(see below), 2 = extension of val1(see below), 3 = texture.
|-
| 0x10
| 0x4
| Top screen frame type: 0 = solid color(uses texture1 internally), 1 = texture0, 3 = texture1.
|-
| 0x14
| 0x4
| Offset for the top screen solid color data.
|-
| 0x18
| 0x4
| Top screen texture offset, see below.
|-
| 0x1C
| 0x4
| Additional top-screen texture offset, used with draw-type val2. This is optional when using draw-type val2.
|-
| 0x20
| 0x4
| Must be <4. Bottom screen draw type: 0 = none, 1 = solid color(see below), 2 = invalid, 3 = texture.
|-
| 0x24
| 0x4
| Bottom screen frame type: 0 = solid color(uses texture4 internally), 1 = texture2, 2 = texture3, 3 = texture4, 4 = texture3.
|-
| 0x28
| 0x4
| Bottom Screen Solid Color/Texture offset, see below.
|-
| 0x2C
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x30
| 0x4
| Offset to a 0xC-byte block.
|-
| 0x34
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x38
| 0x4
| Offset to a 0xC-byte block.
|-
| 0x3C
| 0x4
| Must be <2. 1 = enables usage of the following two fields.
|-
| 0x40
| 0x4
| Offset to the data for texture6.
|-
| 0x44
| 0x4
| Offset to the data for texture7.
|-
| 0x48
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x4C
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x50
| 0x4
| Must be <2. 1 = enables usage of the following two fields.
|-
| 0x54
| 0x4
| Offset to the data for texture8.
|-
| 0x58
| 0x4
| Offset to the data for texture9.
|-
| 0x5C
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x60
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x64
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x68
| 0x4
| Offset to a 0x9-byte block.
|-
| 0x6C
| 0x4
| Must be <2. 1 = enables usage of the following two fields.
|-
| 0x70
| 0x4
| Offset to a 0x20-byte block.
|-
| 0x74
| 0x4
| Offset to a 0x20-byte block.
|-
| 0x78
| 0x4
| Must be <3. 1 = enables usage of the following field.
|-
| 0x7C
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x80
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x84
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x88
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x8C
| 0x4
| Offset to a 0x9-byte block.
|-
| 0x90
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x94
| 0x4
| Offset to a 0xD-byte block.
|-
| 0x98
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0x9C
| 0x4
| Offset to a 0x20-byte block.
|-
| 0xA0
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0xA4
| 0x4
| Offset to a 0x15-byte block.
|-
| 0xA8
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0xAC
| 0x4
| Offset to a 0xC-byte block.
|-
| 0xB0
| 0x4
| Must be <2. 1 = enables usage of the following field.
|-
| 0xB4
| 0x4
| Offset to a 0x6-byte block.
|-
| 0xB8
| 0x4
| Must be <2. 1 = below audio data section is used, otherwise it's not used.
|-
| 0xBC
| 0x4
| Audio data section size, this must be <=0x2DC00.
|-
| 0xC0
| 0x4
| Offset for the audio data section.
|}

The filesize is aligned to 0x10-bytes. The filesize must be at least 0xC4-bytes, due to padding/alignment the first block of data after the header is normally located at 0xD0.

With the solid-color data, there's 5-bytes located at the solid-color data offset. With draw-type val2, there's 7-bytes located here. The first 4-bytes located here is RGBA8888 pixel data, the rest is unknown.

With draw-type val2, texture5 is also used(this likely isn't used for the entire top-screen). With draw-type val2, an extra texture with the same format/dimensions as texture5 can be used, when the additional texture offset field is set.

==Textures==
{| class="wikitable" border="1"
|-
! ID
! Color format
! Texture display dimensions
! Texture data dimensions
! Description
|-
| 0
| Tiled RGB565
| 412x240
| 512x256
| This is the texture used for the top-screen background, when the frame-type is set for this one.
|-
| 1
| Tiled RGB565
| 1008x240
| 1024x256
| This is the texture used for the top-screen background, when the frame-type is set for this one.
|-
| 2
| Tiled RGB565
| 320x240
| 512x256
| This is the texture used for the bottom-screen background, when the frame-type is set for this one.
|-
| 3
| Tiled RGB565
| 960x240
| 1024x256
| This is the texture used for the bottom-screen background, when the frame-type is set for this one.
|-
| 4
| Tiled RGB565
| 1008x240
| 1024x256
| This is the texture used for the bottom-screen background, when the frame-type is set for this one.
|-
| 5
| RGBA8888
| 64x64
| 64x64
| This is used with the top-screen when top-screen draw-type is val2, see above.
|-
| 6
| BGR888 [[GPU_Textures|GPU]] texture color-format value 0x6
| 74x64
| 128x64
|
|-
| 7
| BGR888 [[GPU_Textures|GPU]] texture color-format value 0x6
| 82x64
| 128x64
|
|-
| 8
| RGBA8888
| 36x72
| 64x128
|
|-
| 9
| RGBA8888
| 25x50
| 32x64
|
|}

==Audio data section==
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Unknown
|-
| 0x4
| 0x4
| Unknown
|-
| 0x8
|
| Beginning of the audio data entries.
|}

The audio data section contains the sound effects for this theme.

Audio data entry structure:
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| CWAV size.
|-
| 0x4
| 0x4
| Unknown
|-
| 0x8
|
| [[BCWAV|CWAV]]
|}

In certain cases there may be more data starting at offset 0x8 than what's listed above, before the CWAV.

=Built-in themes=
The built-in themes are stored at Home Menu RomFS:/theme/<Color>_LZ.bin, the format appears to be the same as body_LZ.bin in the theme DLC content.

Home Menu/Themes

2014-11-13T03:15:37Z

Normmatt:

Nintendo 3DS Sound

2014-09-11T02:35:57Z

Normmatt:

Nintendo 3DS Sound is the music playing and audio recording application that is included with all retail consoles.

It loads audio files from the sd card. It supports MP3 and AAC encoded audio files and supports m3u playlists.

== Playlist file format==
The application allows for user created playlists. They are stored on the SD card.

{| class="wikitable" border="1"
! Offset
! Size
! Description
|-
| 0x00
| 0x04
| Magic bytes, 'O', 'V', 'A', 'F' or "FAVO" endian corrected.
|-
| 0x04
| 0x04
| Always integer with value 16
|-
| 0x08
| 0x04
| File size (0x26730)
|-
| 0x0C
| 0x04
| Zero Padding
|-
| 0x10
| 0x02
| checksum (songs?)
|-
| 0x12
| 0x02
| Icon ID (0-44) if id==-1 then loads custom icon from end of playlist?
|-
| 0x14
| 0x02
| Song file count
|-
| 0x16
| 0x02
| Number of possible songs (usually 0x12C/300)
|-
| 0x18
| 0x04
| some kind of timestamp, for encryption (dosn't change when editing)
|-
| 0x1A
| 0x01
| checksum (icon?, header?) (dosn't change when editing)
|-
| 0x1B
| 0x01
| checksum (name?) (dosn't change when editing)
|-
| 0x1C
| 0x04
| always(?) integer with value 6
|-
| 0x20
| 0x100 (avaiable 0x40)
| Playlist name stored in UTF-16
|-
| 0x120+(n*0x20C) => n<300
| 692 (0x20C per song)
| File name stored in UTF-16. Repeats for the rest of the file.
|-
| 0x2672F
| -
| End
|}

== Sample reader ==
This is a basic example of how to read a 3DS playlist. I know that this works on my specific system; on any other system, it's liable to fail. I'm not responsible if you hurt yourself.
<pre>/* This is free and unencumbered software released into the public domain.
/* Anyone is free to copy, modify, publish, use, compile, sell, or
/* distribute this software, either in source code form or as a compiled
/* binary, for any purpose, commercial or non-commercial, and by any
/* means.

/* In jurisdictions that recognize copyright laws, the author or authors
/* of this software dedicate any and all copyright interest in the
/* software to the public domain. We make this dedication for the benefit
/* of the public at large and to the detriment of our heirs and
/* successors. We intend this dedication to be an overt act of
/* relinquishment in perpetuity of all present and future rights to this
/* software under copyright law.
/*
/* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
/* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
/* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
/* IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
/* OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
/* ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
/* OTHER DEALINGS IN THE SOFTWARE.
/*
/* For more information, please refer to <http://unlicense.org/> */

#include <stdio.h>
#include <stdint.h>

uint8_t buf[0x26730];
uint16_t checksum, icon, songCount;
uint32_t timestamp;
uint8_t playlistName[0x100];
uint8_t songName[0x20C][299];

void readUtf16AsAscii(uint8_t *input, uint8_t *output, uint16_t length, uint32_t offset) {
uint16_t j=0;
for (j=0; j<length; j++) {
output[j] = input[(j*2)+offset];
}
}

int main(int argc, char* argv[]) {
uint16_t t=0;
FILE *playlistFile;

if (argc != 2) {
printf("Usage: %s FILE\n", argv[0]);
exit(1);
}

if ((playlistFile = fopen(argv[1], "rb")) == NULL) {
printf("Could not open %s.\n", argv[1]);
exit(1);
}

if (fread(buf, 1, 0x26730, playlistFile) != 0x26730) {
printf("Could not 0x26730 bytes from %s.\n", argv[1]);
exit(1);
}

if (!((buf[0] = 'O') && (buf[1] = 'V') && (buf[2] = 'F') && (buf[3] = 'A'))) {
printf("%s is not a 3DS playlist file.\n", argv[1]);
exit(1);
}

checksum = (buf[0x11] << 8) | buf[0x10];
icon = (buf[0x13] << 8) | buf[0x12];
songCount = (buf[0x15] << 8) | buf[0x14];
timestamp = (buf[0x17] << 24) | (buf[0x16] << 16) | (buf[0x19] << 8) | buf[0x18];
readUtf16AsAscii(buf, playlistName, 0x100, 0x20);
for (t=0; t<songCount; t++) readUtf16AsAscii(buf, songName[t], 0x20C, (0x120+(t*0x20C)));

printf("Checksum:\t%04X\nIcon ID:\t%04X\nSong Count:\t%04X\nTimestamp:\t%08X\nPlaylist Name:\t\"%s\"\n",
checksum, icon, songCount, timestamp, playlistName);

for (t=0; t<songCount; t++) printf("Name of song %03i: %s\n", t, songName[t]);
}
</pre>

[[Category:File formats]]
[[Category:Nintendo Software]]

CONFIG9 Registers

2014-09-10T01:46:47Z

Normmatt:

== Registers ==
{| class="wikitable" border="1"
! NAME
! PHYSICAL ADDRESS
! WIDTH
|-
| ?
| 0x10000000
| 1
|-
| ?
| 0x10000001
| 1
|-
| ?
| 0x10000004
| 4
|-
| REG_CARDCONF
| 0x1000000C
| 2
|-
| ?
| 0x10000010
| 1
|-
| ?
| 0x10000200
| 1
|-
| ?
| 0x10010000
| 4
|-
| REG_UNITINFO
| 0x10010010
| 1
|}

== REG_CARDCONF ==
{| class="wikitable" border="1"
! Bit
! Description
|-
| 1-0
| Gamecard active controller select (0=NTRCARD, 1=?, 2=CTRCARD1, 3=CTRCARD2)
|-
| 8
| ?
|}

Depending on the gamecard controller that has been selected, one of the following gamecard registers will become active:
* Selecting NTRCARD will activate the register space at [[NTRCARD|0x10164000]].
* Selecting CTRCARD1 will activate the register space at [[CTRCARD|0x10004000]].
* Selecting CTRCARD2 will activate the register space at [[CTRCARD|0x10005000]].

== 0x10000000, Hidden bootrom off-switch ==
The ARM9 and ARM11 [[Memory_layout|bootroms]](+0x8000) are disabled by writing 1 to (u8*)0x10000000 and 1 to (u8*)0x10000001?(These two registers are written by the ARM9)

Writing values here(u8 0x10000000+0) sets the specified bitmask. Thus, writing value 0x2 when the register(u8 0x10000000+0) was previously set to value 0x1 changes the value to 0x3. During the NATIVE_FIRM ARM9 kernel startup, it will check if bitmask 0x2 in this register is set. If that bitmask is not set, the console-unique portions of the two console-unique TWL [[AES|keyslots]] are then initialized. The kernel then writes value 0x2 to this register, regardless of the previous bitmask value(due to this, the console-unique TWL key-data init is only done at hard-boot).

== 0x10010000 ==
Initially this is value zero. NATIVE_FIRM writes value 1 here when a FIRM launch begins. The [[Legacy_FIRM_PXI|LGY]] FIRM writes value 3 here when handling PXI command 0x00020080(first TWL PXI command), it also writes value 7 here when handling PXI command 0x00030080(first AGB PXI command). This register can be read to determine what "mode" the system is running under: hard-boot, FIRM launch, or TWL/AGB FIRM.

== REG_UNITINFO ==
This 8-bit register is value zero for retail, non-zero for dev/debug units.

Filesystem services

2014-08-24T07:55:46Z

Normmatt: /* Filesystem service "fs:USER" */

[[Category:Services]]

= Filesystem service "fs:USER" =
{| class="wikitable" border="1"
|-
! Command Header
! Available since system version
! Description
! Required [[NCCH/Extended_Header|exheader]] accessinfo bitmask
|-
| 0x000100C6
|
| Dummy1
| None
|-
| 0x040100C4
|
| Control
| None
|-
| 0x08010002
|
| [[FS:Initialize|Initialize]]
| None
|-
| 0x080201C2
|
| [[FS:OpenFile|OpenFile]]
| None
|-
| 0x08030204
|
| [[FS:OpenFileDirectly|OpenFileDirectly]]
| None
|-
| 0x08040142
|
| [[FS:DeleteFile|DeleteFile]]
| None
|-
| 0x08050244
|
| RenameFile
| None
|-
| 0x08060142
|
| DeleteDirectory
| None
|-
| 0x08070142
|
| DeleteDirectoryRecursively
| None
|-
| 0x08080202
|
| CreateFile
| None
|-
| 0x08090182
|
| [[FS:CreateDirectory|CreateDirectory]]
| None
|-
| 0x080A0244
|
| RenameDirectory
| None
|-
| 0x080B0102
|
| [[FS:OpenDirectory|OpenDirectory]]
| None
|-
| 0x080C00C2
|
| [[FS:OpenArchive|OpenArchive]]
| Each archive idcode has separate accessinfo bitmasks, if any.
|-
| 0x080D0144
|
| ControlArchive
| None
|-
| 0x080E0080
|
| [[FS:CloseArchive|CloseArchive]]
| None
|-
| 0x080F0180
|
| FormatThisUserSaveData
| None
|-
| 0x08100200
|
| CreateSystemSaveData
| 0x4, for when the input saveID doesn't match the exheader saveID.
|-
| 0x08110040
|
| DeleteSystemSaveData
| 0x1004, for when the input saveID doesn't match the exheader saveID.
|-
| 0x08120080
|
| GetFreeBytes
| None
|-
| 0x08130000
|
| GetCardType
| 0x1017
|-
| 0x08140000
|
| [[FS:GetSdmcArchiveResource|GetSdmcArchiveResource]]
| None
|-
| 0x08150000
|
| [[FS:GetNandArchiveResource|GetNandArchiveResource]]
| None
|-
| 0x08160000
|
| GetSdmcFatfsError
| 0x2
|-
| 0x08170000
|
| IsSdmcDetected
| None
|-
| 0x08180000
|
| IsSdmcWritable
| None
|-
| 0x08190042
|
| GetSdmcCid
| 0x2
|-
| 0x081A0042
|
| GetNandCid
| 0x2
|-
| 0x081B0000
|
| GetSdmcSpeedInfo
| 0x2
|-
| 0x081C0000
|
| GetNandSpeedInfo
| 0x2
|-
| 0x081D0042
|
| GetSdmcLog
| 0x2
|-
| 0x081E0042
|
| GetNandLog
| 0x2
|-
| 0x081F0000
|
| ClearSdmcLog
| 0x2
|-
| 0x08200000
|
| ClearNandLog
| 0x2
|-
| 0x08210000
|
| CardSlotIsInserted
| 0x1017
|-
| 0x08220000
|
| CardSlotPowerOn
| 0x2
|-
| 0x08230000
|
| CardSlotPowerOff
| 0x2
|-
| 0x08240000
|
| CardSlotGetCardIFPowerStatus
| 0x2
|-
| 0x08250040
|
| CardNorDirectCommand
| 0x2
|-
| 0x08260080
|
| CardNorDirectCommandWithAddress
| 0x2
|-
| 0x08270082
|
| CardNorDirectRead
| 0x2
|-
| 0x082800C2
|
| CardNorDirectReadWithAddress
| 0x2
|-
| 0x08290082
|
| CardNorDirectWrite
| 0x2
|-
| 0x082A00C2
|
| CardNorDirectWriteWithAddress
| 0x2
|-
| 0x082B00C2
|
| CardNorDirectRead_4xIO
| 0x2
|-
| 0x082C0082
|
| CardNorDirectCpuWriteWithoutVerify
| 0x2
|-
| 0x082D0040
|
| CardNorDirectSectorEraseWithoutVerify
| 0x2
|-
| 0x082E0040
|
| [[FS:GetProductInfo|GetProductInfo]]
| 0x1005
|-
| 0x082F0040
|
| [[FS:GetProgramLaunchInfo|GetProgramLaunchInfo]]
| 0x1005
|-
| 0x08300182
|
| CreateExtSaveData
| 0xC, for when the input extdataID doesn't match the exheader extdataID.
|-
| 0x08310180
|
| CreateSharedExtSaveData
| 0x1005
|-
| 0x08320102
|
| [[FS:ReadExtSaveDataIcon|ReadExtSaveDataIcon]]
| 0x100D, for when the input extdataID doesn't match the exheader extdataID.
|-
| 0x08330082
|
| EnumerateExtSaveData
| 0x1005
|-
| 0x08340082
|
| EnumerateSharedExtSaveData
| 0x1005
|-
| 0x08350080
|
| DeleteExtSaveData
| 0x100D, for when the input extdataID doesn't match the exheader extdataID.
|-
| 0x08360080
|
| DeleteSharedExtSaveData
| 0x1005
|-
| 0x08370040
|
| SetCardSpiBaudRate
| 0x2
|-
| 0x08380040
|
| SetCardSpiBusMode
| 0x2
|-
| 0x08390000
|
| SendInitializeInfoTo9
| None
|-
| 0x083A0100
|
| GetSpecialContentIndex
| 0x1005
|-
| 0x083B00C2
|
| GetLegacyRomHeader
| 0x1015
|-
| 0x083C00C2
|
| GetLegacyBannerData
| 0x1015
|-
| 0x083D0100
|
| CheckAuthorityToAccessExtSaveData
| 0x44
|-
| 0x083E00C2
|
| QueryTotalQuotaSize
| None
|-
| 0x083F00C0
|
| GetExtDataBlockSize
| None
|-
| 0x08400040
|
| AbnegateAccessRight
|
|-
| 0x08410000
|
| DeleteSdmcRoot
| 0x1005
|-
| 0x08420040
|
| DeleteAllExtSaveDataOnNand
| 0x1005
|-
| 0x08430000
|
| [[FS:InitializeCtrFileSystem|InitializeCtrFileSystem]]
| None
|-
| 0x08440000
|
| CreateSeed
| 0x2
|-
| 0x084500C2
|
| GetFormatInfo
| ?
|-
| 0x08460102
|
| GetLegacyRomHeader2
| 0x1015
|-
| 0x08470180
|
| FormatCtrCardUserSaveData
| 0x6
|-
| 0x08480042
|
| GetSdmcCtrRootPath
| 0x100D
|-
| 0x08490040
|
| GetArchiveResource
| ?
|-
| 0x084A0002
|
| ExportIntegrityVerificationSeed
| 0x4000
|-
| 0x084B0002
|
| ImportIntegrityVerificationSeed
| 0x4000
|-
| 0x084C0242
|
| FormatSaveData
| 0x6, in some cases this right isn't needed however.
|-
| 0x084D0102
|
| GetLegacySubBannerData
| 0x1015
|-
| 0x084E0342
|
| [[FS:UpdateSha256Context|UpdateSha256Context]]
| 0x5
|-
| 0x084F0102
|
| ReadSpecialFile
| None
|-
| 0x08500040
|
| GetSpecialFileSize
| None
|-
| 0x08510242
| [[3.0.0-5]]
| CreateExtSaveData
| Shared extdata: 0x101005. Regular extdata in certain cases: 0xC.
|-
| 0x08520100
| [[3.0.0-5]]
| DeleteExtSaveData (u32 flags, u64 extdataID)
| Shared extdata: 0x101005. Regular extdata in certain cases: 0x10100D.
|-
| 0x08530142
| [[3.0.0-5]]
| ReadExtSaveDataIcon
| 0x10100D(this doesn't apply in certain cases however)
|-
| 0x085400C0
| [[3.0.0-5]]
| ?
| 0x10100D(this doesn't apply in certain cases however)
|-
| 0x08550102
| [[3.0.0-5]]
| EnumerateExtSaveData
| 0x101005
|-
| 0x08560200
| [[3.0.0-5]]
| ?
| 0x4(this doesn't apply in certain cases however)
|-
| 0x08570080
| [[3.0.0-5]]
| DeleteSystemSaveData
| 0x1004(this doesn't apply in certain cases however)
|-
| 0x08580000
| [[3.0.0-5]]
| [[FS:GetMovableSedHashedKeyYRandomData|GetMovableSedHashedKeyYRandomData]]
| 0x2004
|-
| 0x08590200
| [[3.0.0-5]]
| ?
| 0x2004
|-
| 0x085A00C0
| [[3.0.0-5]]
| SetArchivePriority(u64 ID,u32 priority)
| None
|-
| 0x085B0080
| [[3.0.0-5]]
| GetArchivePriority(u64 ID,u32 *priority)
| None
|-
| 0x085C00C0
| [[3.0.0-5]]
| ?
| 0xE
|-
| 0x085D0180
| [[3.0.0-5]]
| ?
| 0x100001
|-
| 0x085E0040
| [[3.0.0-5]]
| ?
| 0xE
|-
| 0x085F0040
| [[3.0.0-5]]
| ?
| 0x12004
|-
| 0x08600042
| [[3.0.0-5]]
| EnumerateSystemSaveData
| 0x2004
|-
| 0x08610042
| [[3.0.0-5]]
| InitializeWithSdkVersion
| None
|-
| 0x08620040
| [[3.0.0-5]]
| SetPriority
| None
|-
| 0x08630000
| [[3.0.0-5]]
| GetPriority
| None
|-
| 0x08640000
| [[3.0.0-5]]
| Stubbed, this returns an error.
| None
|-
| 0x08650140
| [[4.0.0-7]]
| Unknown, this is used with [[Anti Savegame Restore]].
| 0x121004(in certain cases this doesn't apply however)
|-
| 0x086600C0
| [[4.0.0-7]]
| Unknown, this is used with [[Anti Savegame Restore]].
| 0x121004(in certain cases this doesn't apply however)
|-
| 0x086700C4
| [[4.0.0-7]]
| ?
| 0x121004
|-
| 0x08680000
| [[4.0.0-7]]
| This loads the u8 mediatype for the current application from already initialized state, this u8 was originally loaded from the same data used by [[FS:GetProgramLaunchInfo|GetProgramLaunchInfo]]. This then writes the u8 to response-word[2]. This is used with [[Anti Savegame Restore]].
| None
|-
| 0x08690000
| [[4.0.0-7]]
| Stubbed, this returns an error.
| None
|-
| 0x086A0082
| [[4.0.0-7]]
| This is a wrapper for [[Filesystem_services_PXI|FSPXI]] command 0x00550082.
| None
|-
| 0x086B00C2
| ?
| ?
| 00121004
|-
| 0x086C00C2
| ?
| ?
| 00121004
|-
| 0x086D0040
| ?
| ?
| 00020004
|-
| 0x086E00C0
| ?
| ?
| ?None?
|-
| 0x086F0040
| ?
| ?
| 0xE
|-
| 0x087000C2
| ?
| ?
| ?None?
|-
| 0x08710100
| ?
| ?
| 0xC
|-
| 0x087201C0
| ?
| ?
| 00080004
|-
| 0x087300C0
| ?
| ?
| 00080004
|-
| 0x08740000
| ?
| ?
| 00080004
|-
| 0x08750140
| ?
| ?
| ?None?
|-
| 0x087600C0
| ?
| ?
| ?None?
|-
| 0x08770100
| ?
| ?
| ?
|-
| 0x087800C0
| ?
| ?
| ?
|}

When access rights are required for a command, at least one of the bits in the process accessinfo specified in the above table for the command must be set. Error 0xD9004676 is returned when a process attempts to use a command which it doesn't have access rights for the command. The exheader accessinfo field is all-zero for most applications. Note that the permissions listed in the above table is for system-version v2.x, therefore permission bit(s) added with newer FIRM may be missing from this.

Each session for fs:USER has separate permissions, initially these are set to all-zero for new fs:USER sessions. The permissions/etc for fs:USER sessions are initialized via [[FS:Initialize]](loaded from the user process exheader).

=File service=
{| class="wikitable" border="1"
|-
! Command Header
! Description
|-
| 0x000100C6
| Dummy1
|-
| 0x040100C4
| Control
|-
| 0x08010100
| OpenSubFile
|-
| 0x080200C2
| [[FSFile:Read|Read]]
|-
| 0x08030102
| [[FSFile:Write|Write]]
|-
| 0x08040000
| [[FSFile:GetSize|GetSize]]
|-
| 0x08050080
| [[FSFile:SetSize|SetSize]]
|-
| 0x08060000
| GetAttributes
|-
| 0x08070040
| SetAttributes
|-
| 0x08080000
| [[FSFile:Close|Close]]
|-
| 0x08090000
| Flush
|-
| 0x080A0040
| SetPriority
|-
| 0x080B0000
| GetPriority?
|-
| 0x080C0000
| OpenLinkFile
|}

=Directory service=
{| class="wikitable" border="1"
|-
! Command Header
! Description
|-
| 0x000100C6
| Dummy1
|-
| 0x040100C4
| Control
|-
| 0x08010042
| [[FSDir:Read|Read]]
|-
| 0x08020000
| [[FSDir:Close|Close]]
|}

= Filesystem service "fs:LDR" =
This service is identical to fs:USER, except [[FS:OpenArchive]] archive 0x2345678E can only be accessed with fs:LDR.

= ProgramRegistry service "fs:REG" =
{| class="wikitable" border="1"
|-
! Command Header
! Description
|-
| 0x000100C6
| Dummy1
|-
| 0x040103C0
| Register
|-
| 0x04020040
| Unregister
|-
| 0x040300C0
| GetProgramInfo
|-
| 0x04040100
| LoadProgram
|-
| 0x04050080
| UnloadProgram
|-
| 0x04060080
| CheckHostLoadId
|}

=Errors=
See [[Filesystem_services_PXI]].

Services

2014-08-21T21:20:37Z

Normmatt:

Handles for services are retrieved from the service manager port, "srv:". Services are an abstraction of ports, they operate the same way except regular ports can have their handles retrieved directly from a [[SVC]](svcConnectToPort).

Processes with PID less than or equal to the number of NATIVE_FIRM built-in modules (fs, sm, pm, pxi, ldr) have access to all services.

==Service Manager Port "srv:"==
{| class="wikitable" border="1"
|-
! Command Header
! Description
|-
| 0x00010002
| Initialize
|-
| 0x00020000
| GetProcSemaphore (the handle from this gets signaled when notifications for this process gets triggered)
|-
| 0x00030100
| RegisterService (8-byte servicename, u32 strlen, u32 flags?)
|-
| 0x000400C0
| UnregisterService (8-byte servicename, u32 strlen)
|-
| 0x00050100
| GetServiceHandle (same input as RegisterService)
|-
| 0x000600c2
| RegisterHandle? (8-byte servicename, u32 strlen,Handel h)
|-
| 0x0007....
| UnregisterHandle? (same input as UnregisterService)
|-
| 0x0008....
| ishandlepresent (8-byte servicename, u32 strlen,u32 flags) if flag is set it returns the handle?
|-
| 0x00090040
| IsRegistered This enables the specified notificationID for the current process.
|-
| 0x000A....
| This disable the specified notificationID for the current process (u32 ID)
|-
| 0x000B0000
| ReceiveNotification
|-
| 0x000C0080
| PublishToSubscriber
|-
| 0x000D....
| ?can fire notificationIDs and return the number of fired notificationID
|-
| 0x000E....
| returns 1 if the service is registered. 0 if not (8-byte servicename, u32 strlen)
|}

==Service Manager Process-Manager Port "srv:pm"==
{| class="wikitable" border="1"
|-
! Command Header, prior to [[7.0.0-13]]
! Description
|-
| 0x04030082
| RegisterProcess (u32 procid, u32 wordsz, <nowiki>((wordsz<<16) | 2)</nowiki>, serviceaccesscontrol*).
|-
| 0x04040040
| UnregisterProcess (u32 procid).
|}

The Register command registers a process with the service-manager, which includes registering the serviceaccesscontrol for the process which normally originates from the [[NCCH/Extended_Header|exheader]].

Prior to to [[7.0.0-13]], the commands listed for "srv:" were also accessible under this port with the same command-headers. Starting with [[7.0.0-13]], the "srv:pm" port was changed to a service. With this change, commandIDs for these commands were changed. "srv:pm" was originally vulnerable, this was fixed with [[7.0.0-13]], see [[3DS_exploits|here]]. Originally any process could use "srv:pm", however starting with [[7.0.0-13]] only the built-in NATIVE_FIRM sysmodules have access to it. The only system title which uses "srv:pm" is the [[Process_Manager_Services|Process Manager]].

==Notifications==
{| class="wikitable" border="1"
|-
! ID
! Description
|-
| 0x100
| This indicates that all processes must terminate: power-off, reboot, or [[FIRM]]-launch.
|-
| 0x204
| This indicates that the HOME button was pressed.
|}

Error codes

2014-07-09T07:22:27Z

Normmatt:

All system error codes follow a shared format.

{| class="wikitable" border="1"
|-
! Bits
! Description
|-
| 0-10
| Description
|-
| 10-17
| Module
|-
| 21-26
| Summary
|-
| 27-31
| Level
|}

Summary values:
{| class="wikitable" border="1"
|-
! Num
! Description
|-
| 0
| Success
|-
| 1
| Nothing happened
|-
| 2
| Would block
|-
| 3
| Out of resource
|-
| 4
| Not found
|-
| 5
| Invalid state
|-
| 6
| Not supported
|-
| 7
| Invalid argument
|-
| 8
| Wrong argument
|-
| 9
| Canceled
|-
| 10
| Status changed
|-
| 11
| Internal
|-
| 63
| Invalid result value
|}

Module values:
{| class="wikitable" border="1"
|-
! Num
! Description
|-
| 0
| Common
|-
| 1
| Kernel
|-
| 2
| Util
|-
| 3
| File server
|-
| 4
| Loader server
|-
| 5
| TCB
|-
| 6
| OS
|-
| 7
| DBG
|-
| 8
| DMNT
|-
| 9
| PDN
|-
| 10
| GX
|-
| 11
| I2C
|-
| 12
| GPIO
|-
| 13
| DD
|-
| 14
| CODEC
|-
| 15
| SPI
|-
| 16
| PXI
|-
| 17
| FS
|-
| 18
| DI
|-
| 19
| HID
|-
| 20
| CAM
|-
| 21
| PI
|-
| 22
| PM
|-
| 23
| PM_LOW
|-
| 24
| FSI
|-
| 25
| SRV
|-
| 26
| NDM
|-
| 27
| NWM
|-
| 28
| SOC
|-
| 29
| LDR
|-
| 30
| ACC
|-
| 31
| RomFS
|-
| 32
| AM
|-
| 33
| HIO
|-
| 34
| Updater
|-
| 35
| MIC
|-
| 36
| FND
|-
| 37
| MP
|-
| 38
| MPWL
|-
| 39
| AC
|-
| 40
| HTTP
|-
| 41
| DSP
|-
| 42
| SND
|-
| 43
| DLP
|-
| 44
| HIO_LOW
|-
| 45
| CSND
|-
| 46
| SSL
|-
| 47
| AM_LOW
|-
| 48
| NEX
|-
| 49
| Friends
|-
| 50
| RDT
|-
| 51
| Applet
|-
| 52
| NIM
|-
| 53
| PTM
|-
| 54
| MIDI
|-
| 55
| MC
|-
| 56
| SWC
|-
| 57
| FatFS
|-
| 58
| NGC
|-
| 59
| CARD
|-
| 60
| CARDNOR
|-
| 61
| SDMC
|-
| 62
| BOSS
|-
| 63
| DBM
|-
| 64
| Config
|-
| 65
| PS
|-
| 66
| CEC
|-
| 67
| IR
|-
| 68
| UDS
|-
| 69
| PL
|-
| 70
| CUP
|-
| 71
| Gyroscope
|-
| 72
| MCU
|-
| 73
| NS
|-
| 74
| News
|-
| 75
| RO
|-
| 76
| GD
|-
| 77
| Card SPI
|-
| 78
| EC
|-
| 79
| RO
|-
| 80
| Web Browser
|-
| 81
| Test
|-
| 82
| ENC
|-
| 83
| PIA
|-
| 254
| Application
|-
| 255
| Invalid result value
|}

Description values:

{| class="wikitable" border="1"
|-
! Num
! Description
|-
| 0
| Success
|-
| 1000
| Invalid section
|-
| 1001
| Too large
|-
| 1002
| Not authorized
|-
| 1003
| Already done
|-
| 1004
| Invalid size
|-
| 1005
| Invalid enum value
|-
| 1006
| Invalid combination
|-
| 1007
| No data
|-
| 1008
| Busy
|-
| 1009
| Misaligned address
|-
| 1010
| Misaligned size
|-
| 1011
| Out of memory
|-
| 1012
| Not implemented
|-
| 1013
| Invalid address
|-
| 1014
| Invalid pointer
|-
| 1015
| Invalid handle
|-
| 1016
| Not initialized
|-
| 1017
| Already initialized
|-
| 1018
| Not found
|-
| 1019
| Cancel requested
|-
| 1020
| Already exists
|-
| 1021
| Out of range
|-
| 1022
| Timeout
|-
| 1023
| Invalid result value
|}

Level values:
{| class="wikitable" border="1"
|-
! Num
! Description
|-
| 0
| Success
|-
| 1
| Info
|-
| 25
| Status
|-
| 26
| Temporary
|-
| 27
| Permanent
|-
| 28
| Usage
|-
| 29
| Reinitialize
|-
| 30
| Reset
|-
| 31
| Fatal
|}

DSP Services

2014-06-30T07:50:07Z

Normmatt:

[[Category:Services]]
= DSP service "dsp::DSP" =
{| class="wikitable" border="1"
|-
! Command Header
! Description
|-
| 0x00010040
| RecvData
|-
| 0x00020040
| RecvDataIsReady
|-
| 0x00030080
| SendData
|-
| 0x00040040
| SendDataIsEmpty
|-
| 0x0005...
| Initialize?
|-
| 0x0006...
| Shutdown?
|-
| 0x0007....
| [[DSP:WriteReg0x10|WriteReg0x10]] SetSemaphore
|-
| 0x00080000
| GetSemaphore
|-
| 0x00090040
| ClearSemaphore
|-
| 0x000A....
| WriteReg0x18
|-
| 0x000B0000
| CheckSemaphoreRequest
|-
| 0x000C0040
| [[DSP:ConvertProcessAddressFromDspDram|ConvertProcessAddressFromDspDram]]
|-
| 0x000D0082
| [[DSP:WriteProcessPipe|WriteProcessPipe]]
|-
| 0x001000C0
| [[DSP:ReadPipeIfPossible|ReadPipeIfPossible]]
|-
| 0x001100C2
| [[DSP:LoadComponent|LoadComponent]]. This requires RSA-signed DSP firmware specified via the input buffer for this command, the firmware data is eventually written to DSPmem+0(0x1FF00000).
|-
| 0x00120000
| UnloadComponent
|-
| 0x00130082
| FlushDataCache (The buffer must be located in the 0x14000000 region)
|
|-
| 0x00140082
| InvalidateDCache (The buffer must be located in either the 0x14000000 region, or the DSP memory region)
|-
| 0x00150082
| [[DSP:RegisterInterruptEvents|RegisterInterruptEvents(param0, param1, 0, eventhandle)]]
|-
| 0x00160000
| [[DSP:GetSemaphoreEventHandle|GetSemaphoreEventHandle]]
|-
| 0x00170040
| [[DSP:SetSemaphoreMask|SetSemaphoreMask]]
|-
| 0x00180040
| GetPhysicalAddress (0x14000000+ -> 0x20000000+, 0x1FF00000+ -> 0x1FF00000+, 0x08000000-0x0E000000 -> 0x00000000+, 0 otherwise)
|-
| 0x00190040
| GetVirtualAddress (0x20000000+ -> 0x14000000+, 0x1FF00000+ -> 0x1FF00000+, 0 otherwise)
|-
| 0x001A0042
| SetIirFilterI2S1. Wrapper for cdc:DSP cmd 1
|-
| 0x001B0042
| SetIirFilterI2S1. Wrapper for cdc:DSP cmd 2
|-
| 0x001C0082
| SetIirFilterEQ. Wrapper for cdc:DSP cmd 3
|-
| 0x001D....
| Wrapper for cdc:DSP cmd 4
|-
| 0x001E....
| Wrapper for cdc:DSP cmd 5
|-
| 0x001F0000
| GetHeadphoneStatus. Wrapper for cdc:DSP cmd 6
|-
| 0x0020....
| Wrapper for cdc:DSP cmd 8
|-
| 0x00210000
| GetIsDspOccupied returns a byte (can be 1 or 0) can be set to 1 in LoadComponent
|}

This is the main service for playing audio. The [[CSND_Services|CSND]] service can be used for playing audio as well, however most processes use this DSP service for playing audio. The DSP and CSND hardware can play audio simultaneously.

Config Savegame

2014-06-15T16:04:05Z

Normmatt:

This page describes the format of the [[Config_Services|Cfg]] [[System_SaveData|NAND]] savegame. These blocks can be accessed with the Cfg service commands.

==Structure of save-file "/config"==
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x2
| Total entries
|-
| 0x2
| 0x2
| ?
|-
| 0x4
| 0x4558
| Block entries
|-
| 0x455C
|
| Data for the entries
|}

The filesize for this /config file is 0x8000-bytes.

==Configuration block entry ==
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| BlkID
|-
| 0x4
| 0x4
| Offset to the data for this block when size is >4, otherwise this word is the data for this block.
|-
| 0x8
| 0x2
| Size
|-
| 0xA
| 0x2
| Flags
|}

==Configuration blocks==
{| class="wikitable" border="1"
|-
! BlkID
! Size
! Flags
! Description
|-
| 0x00050005
| 0x20
| ?
| Stereo camera settings?
|-
| 0x00070001
| 0x1
| ?
| Sound output mode?
|-
| 0x00080000
| 0xC00
| 0x2?
| Wifi configuration slot0.
|-
| 0x00080001
| 0xC00
| 0x2?
| Wifi configuration slot1.
|-
| 0x00080002
| 0xC00
| 0x2?
| Wifi configuration slot2.
|-
| 0x00090000
| 0x8
| 0x2?
| This contains a u64 ID, used by processes using [[NWMUDS:Initialize]]. The first word is the same as [[CfgS:GetLocalFriendCodeSeed|LocalFriendCodeSeed]], while the latter is a separate random word.
|-
| 0x00090001
| 0x8
| 0xE
| This console-unique u64 used by [[Cfg:GenHashConsoleUnique|GenHashConsoleUnique]] is generated with the LocalFriendCodeSeed and with random data.
|-
| 0x000A0000
| 0x1C
| 0xE
| Username
|-
| 0x000A0002
| 0x1
| 0xA
| Language
|-
| 0x000B0000
| 0x4
| 0x8
| CountryInfo
|-
| 0x000B0001
| 0x800
| 0x2?
| Country name in UTF-16, every 0x80-bytes is an entry for each language(not all entries are set).
|-
| 0x000B0002
| 0x800
| 0x2?
| State name in UTF-16, every 0x80-bytes is an entry for each language.
|-
| 0x000C0000
| 0xC0
| ?
| Restricted photo exchange data.
|-
| 0x000C0001
| 0x14
| ?
| Same as above?
|-
| 0x000D0000
| 0x4
| ?
| Agreed to EULA?
|-
| 0x000F0000
| 0x10
| 0x8?
| Unknown, used by [[NS]] on dev-units for [[SVC|svcKernelSetState]], where Type is 6.
|-
| 0x00110000
| 0x4
| ?
| The low u16 indicates whether the system setup is required, such as when the system is booted for the first time or after doing a [[System Settings|System Format]]: 0 = setup required, non-zero = no setup required.
|-
| 0x00110001
| 0x8
| 0xA?
| TitleID of the menu to launch, used by [[NS]] on dev units. (This block can be edited on dev units with [[3DS Development Unit Software#Config|Config]])
|-
| 0x00130000
| 0x4
| ?
| If response is 0x100 then debug mode is enabled.
|}

The dev unit TID block only exists on dev units.

===Languages===
{| class="wikitable" border="1"
|-
! ID
! Description
|-
| 0
| ja
|-
| 1
| en
|-
| 2
| fr
|-
| 3
| de
|-
| 4
| it
|-
| 5
| es
|-
| 6
| zh
|-
| 7
| ko
|-
| 8
| nl
|-
| 9
| pt
|-
| 10
| ru
|}

===CountryInfo===
{| class="wikitable" border="1"
|-
! Byte
! Description
|-
| 0
| ?
|-
| 1
| ?
|-
| 2
| ?
|-
| 3
| Country code, same as DSi/Wii country codes. Value 0xff is invalid.
|}

===0x000A0000 Block===
{| class="wikitable" border="1"
|-
! Byte
! Description
|-
| 0x0-0x13
| UTF-16 username, with no NULL-terminator.
|-
| 0x14-17
| Usually zero?
|-
| 0x18-0x1B
| ?
|}

NDM Services

2014-05-29T03:21:39Z

Normmatt:

[[Category:Services]]
= NDM service "ndm:u" =
{| class="wikitable" border="1"
|-
! Command Header
! Description
|-
| 0x00060040
| SuspendDaemons
|-
| 0x00080040
| DisableWifiUsage?
|-
| 0x00090000
| EnableWifiUsage
|-
| 0x00140040
| OverrideDefaultDaemons
|}

SVC

2014-05-10T05:08:53Z

Normmatt:

= System calls =
{| class="wikitable" border="1"
|-
! Id
! NATIVE_FIRM ARM11 kernel notes
! Enabled for the TWL_FIRM ARM11 kernel
! Description
|-
| 0x01
|
| No
| Result ControlMemory(u32* outaddr, u32 addr0, u32 addr1, u32 size, u32 operation, u32 permissions) (outaddr is usually the same as the input addr0)
|-
| 0x02
|
| No
| Result QueryMemory(MemoryInfo* info, PageInfo* out, u32 Addr)
|-
| 0x03
|
| No
| void ExitProcess(void)
|-
| 0x04
|
| No
| Result GetProcessAffinityMask(u8* affinitymask, Handle process, s32 processorcount)
|-
| 0x05
|
| No
| Result SetProcessAffinityMask(Handle process, u8* affinitymask, s32 processorcount)
|-
| 0x06
|
| No
| Result GetProcessIdealProcessor(s32 *idealprocessor, Handle process)
|-
| 0x07
|
| No
| Result SetProcessIdealProcessor(Handle process, s32 idealprocessor)
|-
| 0x08
|
| Yes
| Result [[#CreateThread|CreateThread]](Handle* thread, func entrypoint, u32 arg, u32 stacktop, s32 threadpriority, s32 processorid)
|-
| 0x09
|
| Yes
| void ExitThread(void)
|-
| 0x0A
|
| Yes
| void SleepThread(s64 nanoseconds)
|-
| 0x0B
|
| Yes
| Result GetThreadPriority(s32* priority, Handle thread)
|-
| 0x0C
|
| Yes
| Result SetThreadPriority(Handle thread, s32 priority)
|-
| 0x0D
|
| No
| Result GetThreadAffinityMask(u8* affinitymask, Handle thread, s32 processorcount)
|-
| 0x0E
|
| No
| Result SetThreadAffinityMask(Handle thread, u8* affinitymask, s32 processorcount)
|-
| 0x0F
|
| No
| Result GetThreadIdealProcessor(s32* processorid, Handle thread)
|-
| 0x10
|
| No
| Result SetThreadIdealProcessor(Handle thread, s32 processorid)
|-
| 0x11
|
| No
| s32 GetCurrentProcessorNumber(void)
|-
| 0x12
|
| No
| Result Run(Handle process, StartupInfo* info) (This starts the main() thread. Buf+0 is main-thread priority, Buf+4 is main-thread stack-size.)
|-
| 0x13
|
| Yes
| Result CreateMutex(Handle* mutex, bool initialLocked)
|-
| 0x14
|
| Yes
| Result ReleaseMutex(Handle mutex)
|-
| 0x15
|
| Yes
| Result CreateSemaphore(Handle* semaphore, s32 initialCount, s32 maxCount)
|-
| 0x16
|
| Yes
| Result ReleaseSemaphore(s32* count, Handle semaphore, s32 releaseCount)
|-
| 0x17
|
| Yes
| Result CreateEvent(Handle* event, ResetType resettype)
|-
| 0x18
|
| Yes
| Result SignalEvent(Handle event)
|-
| 0x19
|
| Yes
| Result ClearEvent(Handle event)
|-
| 0x1A
|
| Yes
| Result CreateTimer(Handle* timer, ResetType resettype)
|-
| 0x1B
|
| Yes
| Result SetTimer(Handle timer, s64 initial, s64 interval)
|-
| 0x1C
|
| Yes
| Result CancelTimer(Handle timer)
|-
| 0x1D
|
| Yes
| Result ClearTimer(Handle timer)
|-
| 0x1E
|
| No
| Result CreateMemoryBlock(Handle* memblock, u32 addr, u32 size, u32 mypermission, u32 otherpermission)
|-
| 0x1F
|
| No
| Result MapMemoryBlock(Handle memblock, u32 addr, u32 mypermissions, u32 otherpermission)
|-
| 0x20
|
| No
| Result UnmapMemoryBlock(Handle memblock, u32 addr)
|-
| 0x21
|
| Yes
| Result CreateAddressArbiter(Handle* arbiter)
|-
| 0x22
|
| Yes
| Result ArbitrateAddress(Handle arbiter, u32 addr, ArbitrationType type, s32 value, s64 nanoseconds)
|-
| 0x23
|
| Yes
| Result CloseHandle(Handle handle)
|-
| 0x24
|
| Yes
| Result WaitSynchronization1(Handle handle, s64 nanoseconds)
|-
| 0x25
|
| Yes
| Result WaitSynchronizationN(s32* out, Handle* handles, s32 handlecount, bool waitAll, s64 nanoseconds)
|-
| 0x26
|
| No
| Result SignalAndWait(s32* out, Handle signal, Handle* handles, s32 handleCount, bool waitAll, s64 nanoseconds)
|-
| 0x27
|
| Yes
| Result DuplicateHandle(Handle* out, Handle original)
|-
| 0x28
|
| Yes
| s64 GetSystemTick(void) (This returns the total CPU ticks elapsed since the CPU was powered-on)
|-
| 0x29
|
| No
| Result GetHandleInfo(s64* out, Handle handle, HandleInfoType type)
|-
| 0x2A
|
| Yes
| Result GetSystemInfo(s64* out, SystemInfoType type, s32 param)
|-
| 0x2B
|
| Yes
| Result GetProcessInfo(s64* out, Handle process, ProcessInfoType type)
|-
| 0x2C
|
| Yes
| Result GetThreadInfo(s64* out, Handle thread, ThreadInfoType type)
|-
| 0x2D
|
| No
| Result ConnectToPort(Handle* out, const char* portName)
|-
| 0x2E
| Stubbed
| No
| Result SendSyncRequest1(Handle session)
|-
| 0x2F
| Stubbed
| No
| Result SendSyncRequest2(Handle session)
|-
| 0x30
| Stubbed
| No
| Result SendSyncRequest3(Handle session)
|-
| 0x31
| Stubbed
| No
| Result SendSyncRequest4(Handle session)
|-
| 0x32
|
| No
| Result SendSyncRequest(Handle session)
|-
| 0x33
|
| No
| Result OpenProcess(Handle* process, u32 processId)
|-
| 0x34
|
| No
| Result OpenThread(Handle* thread, Handle process, u32 threadId)
|-
| 0x35
|
| Yes
| Result GetProcessId(u32* processId, Handle process)
|-
| 0x36
|
| No
| Result GetProcessIdOfThread(u32* processId, Handle thread)
|-
| 0x37
|
| Yes
| Result GetThreadId(u32* threadId, Handle thread)
|-
| 0x38
|
| No
| Result GetResourceLimit(Handle* resourceLimit, Handle process)
|-
| 0x39
|
| No
| Result GetResourceLimitLimitValues(s64* values, Handle resourceLimit, LimitableResource* names, s32 nameCount)
|-
| 0x3A
|
| No
| Result GetResourceLimitCurrentValues(s64* values, Handle resourceLimit, LimitableResource* names, s32 nameCount)
|-
| 0x3B
|
| No
| Result GetThreadContext(ThreadContext* context, Handle thread) (Stubbed)
|-
| 0x3C
|
| Yes
| Break(BreakReason)
|- style="border-top: double"
| 0x3D
|
| Yes
| OutputDebugString(void const, int) (Does nothing on non-debug units)
|-
| 0x3E
|
| No
| ControlPerformanceCounter(unsigned long long, int, unsigned int, unsigned long long)
|-
| 0x47
|
| No
| Result CreatePort(Handle* portServer, Handle* portClient, const char* name, s32 maxSessions)
|-
| 0x48
|
| No
| Result CreateSessionToPort(Handle* session, Handle port)
|-
| 0x49
|
| No
| Result CreateSession(Handle* sessionServer, Handle* sessionClient)
|-
| 0x4A
|
| No
| Result AcceptSession(Handle* session, Handle port)
|-
| 0x4B
|
| No
| Result ReplyAndReceive1(s32* index, Handle* handles, s32 handleCount, Handle replyTarget) (Stubbed)
|-
| 0x4C
|
| No
| Result ReplyAndReceive2(s32* index, Handle* handles, s32 handleCount, Handle replyTarget) (Stubbed)
|-
| 0x4D
|
| No
| Result ReplyAndReceive3(s32* index, Handle* handles, s32 handleCount, Handle replyTarget) (Stubbed)
|-
| 0x4E
|
| No
| Result ReplyAndReceive4(s32* index, Handle* handles, s32 handleCount, Handle replyTarget) (Stubbed)
|-
| 0x4F
|
| No
| Result ReplyAndReceive(s32* index, Handle* handles, s32 handleCount, Handle replyTarget)
|-
| 0x50
|
| Yes
| Result BindInterrupt(Interrupt name, Handle syncObject, s32 priority, bool isManualClear)
|-
| 0x51
|
| Yes
| Result UnbindInterrupt(Interrupt name, Handle syncObject)
|-
| 0x52
|
| Yes
| Result InvalidateProcessDataCache(Handle process, void* addr, u32 size)
|-
| 0x53
|
| Yes
| Result StoreProcessDataCache(Handle process, void const* addr, u32 size)
|-
| 0x54
|
| Yes
| Result FlushProcessDataCache(Handle process, void const* addr, u32 size)
|-
| 0x55
|
| Yes
| Result StartInterProcessDma(Handle* dma, Handle dstProcess, void* dst, Handle srcProcess, const void* src, u32 size, const DmaConfig& config )
|-
| 0x56
|
| Yes
| Result StopDma(Handle dma)
|-
| 0x57
|
| Yes
| Result GetDmaState(DmaState* state, Handle dma)
|-
| 0x58
|
| Yes
| RestartDma(nn::Handle, void *, void const*, unsigned int, signed char)
|-
| 0x60
|
| No
| Result DebugActiveProcess(Handle* debug, u32 processID)
|-
| 0x61
|
| No
| Result BreakDebugProcess(Handle debug)
|-
| 0x62
|
| No
| Result TerminateDebugProcess(Handle debug)
|-
| 0x63
|
| No
| Result GetProcessDebugEvent(DebugEventInfo* info, Handle debug)
|-
| 0x64
|
| No
| Result ContinueDebugEvent(Handle debug, u32 flags)
|-
| 0x65
|
| No
| Result GetProcessList(s32* processCount, u32* processIds, s32 processIdMaxCount)
|-
| 0x66
|
| No
| Result GetThreadList(s32* threadCount, u32* threadIds, s32 threadIdMaxCount, Handle domain)
|-
| 0x67
|
| No
| Result GetDebugThreadContext(ThreadContext* context, Handle debug, u32 threadId, u32 controlFlags)
|-
| 0x68
|
| No
| Result SetDebugThreadContext(Handle debug, u32 threadId, ThreadContext* context, u32 controlFlags)
|-
| 0x69
|
| No
| Result QueryDebugProcessMemory(MemoryInfo* blockInfo, PageInfo* pageInfo, Handle process, u32 addr)
|-
| 0x6A
|
| No
| Result ReadProcessMemory(void* buffer, Handle debug, u32 addr, u32 size)
|-
| 0x6B
|
| No
| Result WriteProcessMemory(Handle debug, void const* buffer, u32 addr, u32 size)
|-
| 0x6C
|
| No
| Result SetHardwareBreakPoint(s32 registerId, u32 control, u32 value)
|-
| 0x6D
|
| No
| GetDebugThreadParam(long long *, int *, nn::Handle, unsigned int, nn::dmnt::DebugThreadParam) (Disabled on regular kernel)
|-
| 0x70
|
| No
| ControlProcessMemory(Handle KProcess, unsigned int Addr0, unsigned int Addr1, unsigned int Size, unsigned int Type, unsigned int Permissions)
|-
| 0x71
|
| No
| MapProcessMemory(Handle KProcess, unsigned int StartAddr, unsigned int EndAddr)
|-
| 0x72
|
| No
| UnmapProcessMemory(Handle KProcess, unsigned int StartAddr, unsigned int EndAddr)
|-
| 0x73
|
| No
| CreateProcess(Handle* HandleInfo_out, struct CreateProcessInfo, u32 code_ptr, u32 ro_ptr, u32 data_ptr)
|-
| 0x74
| Stubbed
| No
|
|-
| 0x75
|
| No
| SetupProcess(Handle* KProcess_out, Handle HandleInfo_in, u32 arm11kernelcaps_ptr, u32 arm11kernelcaps_num)
|-
| 0x76
|
| No
| TerminateProcess(Handle)
|-
| 0x77
|
| No
| (Handle KProcess, Handle KResourceLimit)
|-
| 0x78
|
| No
| CreateResourceLimit(Handle *KResourceLimit)
|-
| 0x79
|
| No
| ?
|-
| 0x7A
| Stubbed beginning with [[2.0.0-2]]
| Yes
| ? (unsigned int Addr, unsigned int Size)
|-
| 0x7C
|
| Yes
| KernelSetState(unsigned int Type, unsigned int Param0, unsigned int Param1, unsigned int Param2) (The Type determines the usage of each param)
|-
| 0x7D
|
| No
| QueryProcessMemory(MemInfo *Info, unsigned int *Out, Handle KProcess, unsigned int Addr)
|-
| 0xFF
|
| Yes
| Debug related (The Syscall access control mask doesn't apply for this SVC)
|}

== CreateThread ==
R0=s32 threadpriority
R1=func entrypoint
R2=u32 arg
R3=u32 stacktop
R4=s32 processorid

Result result=R0
Handle* thread=R1

This processorid is a bitmask for which processors the thread can be run on. Bit value zero enables thread execution for this CPUID, bit value one disables thread execution for this CPUID. Bit0-bit1 are for CPUID0-CPUID1.

The stacktop must be aligned to 0x8-bytes, otherwise when not aligned to 0x8-bytes the ARM11 kernel clears the low 3-bits of the stacktop address.

= Types and structures =

== enum MemoryState ==
{| class="wikitable" border="1"
! Memory state flags
! Bit
|-
| FREE
| 0
|-
| RESERVED
| 1
|-
| IO
| 2
|-
| STATIC
| 3
|-
| CODE
| 4
|-
| PRIVATE
| 5
|-
| SHARED
| 6
|-
| CONTINUOUS
| 7
|-
| ALIASED
| 8
|-
| ALIAS
| 9
|-
| ALIAS CODE
| 10
|-
| LOCKED
| 11
|}

== enum PageFlags ==
{| class="wikitable" border="1"
! Page flags
! Bit
|-
| LOCKED
| 0
|-
| CHANGED
| 1
|}

== enum MemoryOperation ==

{| class="wikitable" border="1"
! Memory operation
! Id
|-
| FREE
| 1
|-
| RESERVE
| 2
|-
| COMMIT
| 3
|-
| MAP
| 4
|-
| UNMAP
| 5
|-
| PROTECT
| 6
|-
| REGION APP
| 0x100
|-
| REGION SYSTEM
| 0x200
|-
| REGION BASE
| 0x300
|-
| LINEAR
| 0x10000
|}

The LINEAR memory-operation indicates that the mapped physical address is always MappedVAddr+0x0C000000, thus this memory can be used for hardware devices' DMA(such as the [[GPU]]). Addr0+size for this must be within the 0x14000000-0x1C000000 range when Addr0 is non-zero(Addr1 must be zero), Addr0 isn't actually used by svcControlMemory for mapping memory since the kernel determines what vaddr to map. LINEAR memory is allocated in FCRAM the same way as any other virtual memory(like the regular process heap, etc).

The input mem-region value for svcControlMemory is only used(when non-zero) when the PID is value 1, for the [[FIRM]] ARM11 "loader" module.

== enum MemoryPermission ==

{| class="wikitable" border="1"
! Memory permission
! Id
|-
| NONE
| 0
|-
| READ
| 1
|-
| WRITE
| 2
|-
| READWRITE
| 3
|-
| DONTCARE
| 0x10000000
|}

== enum ResetType ==

{| class="wikitable" border="1"
! Reset type
! Id
|-
| ONESHOT
| 0
|-
| STICKY
| 1
|-
| PULSE
| 2
|}

== struct MemoryInfo ==
{| class="wikitable" border="1"
! Type
! Field
|-
| u32
| Base address
|-
| u32
| Size
|-
| u32
| Permission
|-
| enum MemoryState
| State
|}

== struct PageInfo ==
{| class="wikitable" border="1"
! Type
! Field
|-
| u32
| Flags
|}

== struct StartupInfo ==
{| class="wikitable" border="1"
! Type
! Field
|-
| s32
| Priority
|-
| u32
| Stack size
|-
| s32
| argc
|-
| s16*
| argv
|-
| s16*
| envp
|}

= Processes =
Each process can only use SVCs which are enabled in the [[NCCH#CXI|exheader]] for this process. The ARM11 kernel SVC handler checks whether the SVC is enabled in the syscall access control mask stored on the SVC-mode stack, when the SVC isn't enabled a kernelpanic() is triggered. Each process has a separate SVC-mode stack, this stack and the syscall access mask stored here is initialized when the process is started. Applications normally only have access to SVCs <=0x3D, however not all SVCs <=0x3D are accessible to the application. The majority of the SVCs accessible to applications are unused by the application.

Each process has a separate handle-table, the size of this table is stored in the exheader. The handles in a handle-table can't be used in the context of other processes, since those handles don't exist in other handle-tables.

0xFFFF8001 is a handle alias for the current KProcess, and 0xFFFF8000 is a handle alias for the current KThread.

Calling svcBreak on retail will only terminate the process which called this SVC.

= Threads =
For svcCreateThread the input address used for Entrypoint_Param and StackTop are normally the same, however these can be arbitrary. For the main thread the Entrypoint_Param is value 0.

Using CloseHandle() with a KThread handle will terminate the specified thread.

= Memory Mapping =
ControlMemory and MapMemoryBlock can be used to map memory pages, these two SVCs only support mapping execute-never R/W pages. The input permissions parameter for these SVCs must be <=3, where value zero is used when un-mapping memory. Bitmask 0xf00 for ControlMemory parameter MemoryType is the memory-type, when this is zero the memory-type is loaded from the kernel flags stored in the exheader ARM11 kernel descriptors, for the process using the SVC. ControlMemory parameter MemoryType with value 0x10003 is used for mapping the GSP [[Memory_layout|heap]]. The low 8-bits are the type: 1 is for un-mapping memory, 3 for mapping memory. Type4 is used to mirror the RW memory at Addr1, to Addr0. Type4 will return an error if Addr1 is located in read-only memory. Addr1 is not used for type1 and type3.

The ARM11 kernel does not allow processes to create shared memory blocks via svcCreateMemoryBlock, when the process memorytype(from the kernel flags stored in the exheader kernel descriptor) is the application memorytype, and when addr=0. It's unknown how the kernel handles addr=0 when the memorytype is not the application memorytype. When addr is non-zero, it must be located in memory which is already mapped.

ControlProcessMemory maps memory in the specified process, this is the only SVC which allows mapping executable memory. Format of the permissions field for memory mapping SVCs: bit0=R, bit1=W, bit2=X. Type6 sets the Addr0 memory permissions to the input permissions, for already mapped memory. Type is the MemoryOperation enum, without the memory-type/memory-region. ControlProcessMemory only supports type4, type5, and type6. ControlProcessMemory does not support using the current KProcess handle alias.

MapProcessMemory maps RW memory starting at address 0x00100000 in the specified KProcess, at the specified StartAddr in the current process. MapProcessMemory then maps 0x08000000 in the specified process, to StartAddr+0x7f00000 in the current process. UnmapProcessMemory unmaps the memory which was mapped by MapProcessMemory.

= Debugging =
DebugActiveProcess is used to attach to a process for debugging. This SVC can only be used when the target process' ARM11 descriptors stored in the exheader have the kernel flag for "Enable debug" set. Otherwise when that flag is clear, the kernel flags for the process using this SVC must have the "Force debug" flag set.

= KernelSetState =
{| class="wikitable" border="1"
|-
! Type
! Enabled for the NATIVE_FIRM ARM11 kernel
! Enabled for the TWL_FIRM ARM11 kernel
! Description
|-
| 0
| Yes
| No
| This initializes the programID for launching [[FIRM]], then triggers launching [[FIRM]]. Param0 and Param2 are unused. Param1 is the programID-low, and the programID-high is 0x00040138.
|-
| 1
| Yes
| Yes
| Unknown, does nothing with the TWL_FIRM ARM11 kernel.
|-
| 2
| Yes
| Yes
| ?
|-
| 3
| Yes
| No
| This used for initializing the 0x1000-byte buffer used by the launched [[FIRM]]. Param2 is unused. When Param0 is value 1, this buffer is copied to the beginning of FCRAM at 0xF0000000, and Param1 is unused. When Param0 is value 0, this kernel buffer is mapped to process address Param1.
|-
| 4
| No
| Yes
| Param0-Param3 are unused. This unmaps(?) the following virtual memory by writing value physaddr(where physaddr base is 0x80000000) to the L1 MMU table entries: 0x00300000..0x04300000, 0x08000000..0x0FE00000, and 0x10000000..0xF8000000.
|-
| 5
| Yes
| Yes
| ?
|-
| 6
| Yes
| No
| Debug related?
|-
| 7
| Yes
| No
| This triggers ARM11 kernel [[I2C]] code, Param0-Param3 are unused. This ARM11 kernel I2C code will never return. Device address 0x4a via the second I2C bus is used here. This triggers a hardware system reboot via poking an I2C MCU register: register address 0x20 is written to with value 4.
|-
| 8
| Yes
| No
| Alternate unused FIRM launch code-path, with different [[PXI]] FIFO word constants.
|-
| 9
| Yes, implemented at some point after system-version v4.5.
| ?
| Unknown
|}

= GetSystemInfo =
{| class="wikitable" border="1"
! SystemInfoType value
! s32 param
! Description
|-
| 0
| 0
| This writes the total used memory size in the following memory regions to out: APPLICATION, SYSTEM, and BASE.
|-
| 0
| 1
| This writes the total used memory size in the APPLICATION memory region to out.
|-
| 0
| 2
| This writes the total used memory size in the SYSTEM memory region to out.
|-
| 0
| 3
| This writes the total used memory size in the BASE memory region to out.
|-
| 26
| Unused
| This writes the total number of processes which were directly launched by the kernel, to out. For the NATIVE_FIRM/SAFE_MODE_FIRM ARM11 kernel, this is normally 5, for processes sm, fs, pm, loader, and pxi.
|}

= CreateProcess =
struct CreateProcessInfo {
// All addresses are given virtual for the process to be created.
// All sizes/offsets are in given in 0x1000-pages.
u8 codeset_name[8];
u32 text_addr;
u32 text_size;
u32 ro_addr;
u32 ro_size;
u32 data_addr;
u32 data_size;
u32 ro_offset;
u32 data_offset;
u32 bss_size+data_size;
u8 program_id[8];
u32 hmm?[2];
}

= Kernel error-codes =
{| class="wikitable" border="1"
! Error-code value
! Description
|-
| 0xC860180A
| Not enough free memory available for memory allocation.
|-
| 0xC920181A
| The session was closed due to the other process terminating / calling svcBreak.
|-
| 0xD8E007F7
| This error indicates that the input handle used with the SVC does not exist in the process handle-table, or that the handle kernel object type does not match the type used by the SVC.
|-
| 0xD92007EA
| This error is returned when a process attempts to use svcCreateMemoryBlock when the process memorytype is the application memorytype, and when addr=0.
|-
| 0xF8C007F4
| Invalid type/param0-param3 input for svcKernelSetState.
|}

Filesystem services

2014-04-26T03:27:54Z

Normmatt:

[[Category:Services]]

= Filesystem service "fs:USER" =
{| class="wikitable" border="1"
|-
! Command Header
! Available since system version
! Description
! Required exheader accessinfo bitmask
|-
| 0x000100C6
|
| Dummy1
| None
|-
| 0x040100C4
|
| Control
| None
|-
| 0x08010002
|
| [[FS:Initialize|Initialize]]
| None
|-
| 0x080201C2
|
| [[FS:OpenFile|OpenFile]]
| None
|-
| 0x08030204
|
| [[FS:OpenFileDirectly|OpenFileDirectly]]
| None
|-
| 0x08040142
|
| [[FS:DeleteFile|DeleteFile]]
| None
|-
| 0x08050244
|
| RenameFile
| None
|-
| 0x08060142
|
| DeleteDirectory
| None
|-
| 0x08070142
|
| DeleteDirectoryRecursively
| None
|-
| 0x08080202
|
| CreateFile
| None
|-
| 0x08090182
|
| [[FS:CreateDirectory|CreateDirectory]]
| None
|-
| 0x080A0244
|
| RenameDirectory
| None
|-
| 0x080B0102
|
| [[FS:OpenDirectory|OpenDirectory]]
| None
|-
| 0x080C00C2
|
| [[FS:OpenArchive|OpenArchive]]
| Each archive idcode has separate accessinfo bitmasks, if any.
|-
| 0x080D0144
|
| ControlArchive
| None
|-
| 0x080E0080
|
| [[FS:CloseArchive|CloseArchive]]
| None
|-
| 0x080F0180
|
| FormatThisUserSaveData
| None
|-
| 0x08100200
|
| CreateSystemSaveData
| 0x4, for when the input saveID doesn't match the exheader saveID.
|-
| 0x08110040
|
| DeleteSystemSaveData
| 0x1004, for when the input saveID doesn't match the exheader saveID.
|-
| 0x08120080
|
| GetFreeBytes
| None
|-
| 0x08130000
|
| GetCardType
| 0x1017
|-
| 0x08140000
|
| [[FS:GetSdmcArchiveResource|GetSdmcArchiveResource]]
| None
|-
| 0x08150000
|
| [[FS:GetNandArchiveResource|GetNandArchiveResource]]
| None
|-
| 0x08160000
|
| GetSdmcFatfsError
| 0x2
|-
| 0x08170000
|
| IsSdmcDetected
| None
|-
| 0x08180000
|
| IsSdmcWritable
| None
|-
| 0x08190042
|
| GetSdmcCid
| 0x2
|-
| 0x081A0042
|
| GetNandCid
| 0x2
|-
| 0x081B0000
|
| GetSdmcSpeedInfo
| 0x2
|-
| 0x081C0000
|
| GetNandSpeedInfo
| 0x2
|-
| 0x081D0042
|
| GetSdmcLog
| 0x2
|-
| 0x081E0042
|
| GetNandLog
| 0x2
|-
| 0x081F0000
|
| ClearSdmcLog
| 0x2
|-
| 0x08200000
|
| ClearNandLog
| 0x2
|-
| 0x08210000
|
| CardSlotIsInserted
| 0x1017
|-
| 0x08220000
|
| CardSlotPowerOn
| 0x2
|-
| 0x08230000
|
| CardSlotPowerOff
| 0x2
|-
| 0x08240000
|
| CardSlotGetCardIFPowerStatus
| 0x2
|-
| 0x08250040
|
| CardNorDirectCommand
| 0x2
|-
| 0x08260080
|
| CardNorDirectCommandWithAddress
| 0x2
|-
| 0x08270082
|
| CardNorDirectRead
| 0x2
|-
| 0x082800C2
|
| CardNorDirectReadWithAddress
| 0x2
|-
| 0x08290082
|
| CardNorDirectWrite
| 0x2
|-
| 0x082A00C2
|
| CardNorDirectWriteWithAddress
| 0x2
|-
| 0x082B00C2
|
| CardNorDirectRead_4xIO
| 0x2
|-
| 0x082C0082
|
| CardNorDirectCpuWriteWithoutVerify
| 0x2
|-
| 0x082D0040
|
| CardNorDirectSectorEraseWithoutVerify
| 0x2
|-
| 0x082E0040
|
| [[FS:GetProductInfo|GetProductInfo]]
| 0x1005
|-
| 0x082F0040
|
| [[FS:GetProgramLaunchInfo|GetProgramLaunchInfo]]
| 0x1005
|-
| 0x08300182
|
| CreateExtSaveData
| 0xC, for when the input extdataID doesn't match the exheader extdataID.
|-
| 0x08310180
|
| CreateSharedExtSaveData
| 0x1005
|-
| 0x08320102
|
| [[FS:ReadExtSaveDataIcon|ReadExtSaveDataIcon]]
| 0x100D, for when the input extdataID doesn't match the exheader extdataID.
|-
| 0x08330082
|
| EnumerateExtSaveData
| 0x1005
|-
| 0x08340082
|
| EnumerateSharedExtSaveData
| 0x1005
|-
| 0x08350080
|
| DeleteExtSaveData
| 0x100D, for when the input extdataID doesn't match the exheader extdataID.
|-
| 0x08360080
|
| DeleteSharedExtSaveData
| 0x1005
|-
| 0x08370040
|
| SetCardSpiBaudRate
| 0x2
|-
| 0x08380040
|
| SetCardSpiBusMode
| 0x2
|-
| 0x08390000
|
| SendInitializeInfoTo9
| None
|-
| 0x083A0100
|
| GetSpecialContentIndex
| 0x1005
|-
| 0x083B00C2
|
| GetLegacyRomHeader
| 0x1015
|-
| 0x083C00C2
|
| GetLegacyBannerData
| 0x1015
|-
| 0x083D0100
|
| CheckAuthorityToAccessExtSaveData
| 0x44
|-
| 0x083E00C2
|
| QueryTotalQuotaSize
| None
|-
| 0x083F00C0
|
| GetExtDataBlockSize
| None
|-
| 0x08400040
|
| AbnegateAccessRight
|
|-
| 0x08410000
|
| DeleteSdmcRoot
| 0x1005
|-
| 0x08420040
|
| DeleteAllExtSaveDataOnNand
| 0x1005
|-
| 0x08430000
|
| [[FS:InitializeCtrFileSystem|InitializeCtrFileSystem]]
| None
|-
| 0x08440000
|
| CreateSeed
| 0x2
|-
| 0x084500C2
|
| GetFormatInfo
| ?
|-
| 0x08460102
|
| GetLegacyRomHeader2
| 0x1015
|-
| 0x08470180
|
| FormatCtrCardUserSaveData
| 0x6
|-
| 0x08480042
|
| GetSdmcCtrRootPath
| 0x100D
|-
| 0x08490040
|
| GetArchiveResource
| ?
|-
| 0x084A0002
|
| ExportIntegrityVerificationSeed
| 0x4000
|-
| 0x084B0002
|
| ImportIntegrityVerificationSeed
| 0x4000
|-
| 0x084C0242
|
| FormatSaveData
| 0x6, in some cases this right isn't needed however.
|-
| 0x084D0102
|
| GetLegacySubBannerData
| 0x1015
|-
| 0x084E0342
|
| [[FS:UpdateSha256Context|UpdateSha256Context]]
| 0x5
|-
| 0x084F0102
|
| ReadSpecialFile
| None
|-
| 0x08500040
|
| GetSpecialFileSize
| None
|-
| 0x08510242
| [[3.0.0-5]]
| ?
| ?
|-
| 0x08520100
| [[3.0.0-5]]
| Unknown (u32 flags, u64 extdataID)
| ?
|-
| 0x08530142
| [[3.0.0-5]]
| ?
| ?
|-
| 0x0854....
| [[3.0.0-5]]
| ?
| ?
|-
| 0x08550102
| [[3.0.0-5]]
| ?
| ?
|-
| 0x0856....
| [[3.0.0-5]]
| ?
| ?
|-
| 0x0857....
| [[3.0.0-5]]
| ?
| ?
|-
| 0x08580000
| [[3.0.0-5]]
| [[FS:GetMovableSedHashedKeyYRandomData|GetMovableSedHashedKeyYRandomData]]
| ?
|-
| 0x0859....
| [[3.0.0-5]]
| ?
| ?
|-
| 0x085A....
| [[3.0.0-5]]
| ?
| ?
|-
| 0x085B....
| [[3.0.0-5]]
| ?
| ?
|-
| 0x085C....
| [[3.0.0-5]]
| ?
| ?
|-
| 0x085D....
| [[3.0.0-5]]
| ?
| ?
|-
| 0x085E....
| [[3.0.0-5]]
| ?
| ?
|-
| 0x085F....
| [[3.0.0-5]]
| ?
| ?
|-
| 0x08600042
| [[3.0.0-5]]
| ?
| ?
|-
| 0x08610042
| [[3.0.0-5]]
| InitializeWithSdkVersion
| ?
|-
| 0x08620040
| [[3.0.0-5]]
| SetPriority
| ?
|-
| 0x08630000
| [[3.0.0-5]]
| GetPriority
| ?
|-
| 0x08640000
| [[3.0.0-5]]
| Stubbed, this returns an error.
| None
|-
| 0x08650140
| [[4.0.0-7]]
| Unknown, this is used with [[Anti Savegame Restore]].
| ?
|-
| 0x086600C0
| [[4.0.0-7]]
| Unknown, this is used with [[Anti Savegame Restore]].
| ?
|-
| 0x086700C4
| [[4.0.0-7]]
| ?
| ?
|-
| 0x08680000
| [[4.0.0-7]]
| This loads the u8 mediatype for the current application from already initialized state, this u8 was originally loaded from the same data used by [[FS:GetProgramLaunchInfo|GetProgramLaunchInfo]]. This then writes the u8 to response-word[2]. This is used with [[Anti Savegame Restore]].
| None
|-
| 0x08690000
| [[4.0.0-7]]
| Stubbed, this returns an error.
| None
|-
| 0x086A0082
| [[4.0.0-7]]
| This is a wrapper for [[Filesystem_services_PXI|FSPXI]] command 0x00550082.
| None
|}

When access rights are required for a command, at least one of the bits in the process accessinfo specified in the above table for the command must be set. Error 0xD9004676 is returned when a process attempts to use a command which it doesn't have access rights for the command. The exheader accessinfo field is all-zero for most applications.

Each session for fs:USER has separate permissions, initially these are set to all-zero for new fs:USER sessions. The permissions/etc for fs:USER sessions are initialized via [[FS:Initialize]](loaded from the user process exheader).

=File service=
{| class="wikitable" border="1"
|-
! Command Header
! Description
|-
| 0x000100C6
| Dummy1
|-
| 0x040100C4
| Control
|-
| 0x08010100
| OpenSubFile
|-
| 0x080200C2
| [[FSFile:Read|Read]]
|-
| 0x08030102
| [[FSFile:Write|Write]]
|-
| 0x08040000
| [[FSFile:GetSize|GetSize]]
|-
| 0x08050080
| [[FSFile:SetSize|SetSize]]
|-
| 0x08060000
| GetAttributes
|-
| 0x08070040
| SetAttributes
|-
| 0x08080000
| [[FSFile:Close|Close]]
|-
| 0x08090000
| Flush
|}

=Directory service=
{| class="wikitable" border="1"
|-
! Command Header
! Description
|-
| 0x000100C6
| Dummy1
|-
| 0x040100C4
| Control
|-
| 0x08010042
| [[FSDir:Read|Read]]
|-
| 0x08020000
| [[FSDir:Close|Close]]
|}

= Filesystem service "fs:LDR" =
This service is identical to fs:USER, except [[FS:OpenArchive]] archive 0x2345678E can only be accessed with fs:LDR.

= ProgramRegistry service "fs:REG" =
{| class="wikitable" border="1"
|-
! Command Header
! Description
|-
| 0x000100C6
| Dummy1
|-
| 0x040103C0
| Register
|-
| 0x04020040
| Unregister
|-
| 0x040300C0
| GetProgramInfo
|-
| 0x04040100
| LoadProgram
|-
| 0x04050080
| UnloadProgram
|-
| 0x04060080
| CheckHostLoadId
|}

=Errors=
See [[Filesystem_services_PXI]].