4
edits
Changes
→NATIVE_FIRM: fix 11.16, never try to type your self...
| SHA-256 Hash of Firmware Section
| SHA-256 Hash of Firmware Section
|}
|}
The contents of individual sections ''may'' be encrypted if the FIRM is not meant to be booted from NAND, i.e. if it is meant to be booted from SPI flash or NTR cartridge. If hash checks fail for all FIRM sections if treated as plaintext, it may be worth trying to check if the sections are encrypted. The encryption is detailed on [[Bootloader#Non-NAND_FIRM_boot|the bootloader page]].
== [[New_3DS]] FIRM ==
== [[New_3DS]] FIRM ==
| 2.55-0
| 2.55-0
| 0710pseg-ciuser
| 0710pseg-ciuser
|-
| [[11.12.0-44|11.12.0]]
| v30593
| 66
| 2.56-0
| 1021pseg-ciuser
|-
| [[11.14.0-46|11.14.0]]
| v31633
| 69
| 2.57-0
| 0929pseg-ciuser
|-
| [[11.16.0-48|11.16.0]]
| v32673
| 6C
| 2.58-0
| 0701pseg-ciuser
|}
|}
=== SAFE_MODE_FIRM ===
=== SAFE_MODE_FIRM ===
SAFE_MODE is used for running the [[System_Settings#System_Updater|System Updater]]. SAFE_MODE_FIRM and NATIVE_FIRM for the initial versions are exactly the same, except for the system core version fields.
SAFE_MODE is used for running the [[System_Settings#System_Updater|System Updater]]. SAFE_MODE_FIRM and NATIVE_FIRM for the initial versions are exactly the same, except for the system core version fields. Kernel/FIRM versions for SAFE_MODE_FIRM are: (old3ds) v432 = 3.27-0, v5632 = 3.32-0, (new3ds) v16081 = 3.45-3.
=== TWL_FIRM ===
=== TWL_FIRM ===
! SIZE
! SIZE
! DESCRIPTION
! DESCRIPTION
|-
| 0x000
| 0x300
| TWL auto-load parameters, passed as-is onto the new title. NS will only read the oldTitleId field from it and add it to the TWL title list if it's a CTR titleId
|-
|-
| 0x300
| 0x300
| 0x40
| 0x40
| This is used by [[APT:LoadSysMenuArg]] and [[APT:StoreSysMenuArg]].
| This is used by [[APT:LoadSysMenuArg]] and [[APT:StoreSysMenuArg]].
|-
| 0xD50
| 0x20
| Atheros WiFi configuration struct
|-
|-
| 0xD70
| 0xD70
| 0x3
| 0x3
| Setting bit0 here enables overriding the FIRM_* fields in [[Configuration_Memory]].
| Setting bit0 here enables overriding the FIRM_* fields in [[Configuration_Memory]].
|}
Atheros WiFi configuration struct for booting TWL_FIRM, from offset 0xD50. This struct is copied directly to 0x20005E0 in DSi memory. Since DSi cartridge ROMs include SDIO drivers for the wireless card and can't be updated, this structure allows interoperability between the original DSi wireless cards (AR6002/DWM-W015 and AR6013/DWM-W024) as well as the 3DS's AR6014/DWM-W028.
{| class="wikitable" border="1"
|-
! OFFSET
! SIZE
! DESCRIPTION
|-
| 0x0
| 0x1
| WiFi Board Type (1=DWM-W015, 2=DWM-W024, 3=DWM-W028; 0x03 on 3DS)
|-
| 0x1
| 0x1
| Unknown (0x00)
|-
| 0x2
| 0x2
| CRC16 from 0x4 to 0x20 (0x1C bytes)
|-
| 0x4
| 0x4
| Atheros RAM Vars/Host Interest address (0x520000 on 3DS)
|-
| 0x8
| 0x4
| Atheros RAM base (0x520000 on 3DS)
|-
| 0xC
| 0x4
| Atheros RAM size (0x20000 on 3DS)
|-
| 0x10
| 0x10
| Unknown (Zeroed)
|}
|}
| 0x0
| 0x0
| 0x1
| 0x1
| Config block 0x30000.
| RTC compensation value (config block 0x30000).
|-
|-
| 0x1
| 0x1
| 0x1
| 0x1
| Config block 0x70001.
| Sound output mode (config block 0x70001).
|-
|-
| 0x2
| 0x2
| 0x1
| 0x1
| System language (Config block 0xA0002).
| System language (config block 0xA0002).
|-
|-
| 0x3
| 0x3
| 0x13
| 0x13
| 0x1
| 0x1
| Config block 0x100002.
| TWL country code (config block 0x100002).
|-
|-
| 0x14
| 0x14
| 0x10
| 0x10
| Config block 0x100003.
| TWL "movable" UID, used for DSiWare exports (config block 0x100003).
|-
|-
| 0x24
| 0x24
| 0x2
| 0x2
| Config block 0x100000.
| TWL EULA info (config block 0x100000).
|-
|-
| 0x26
| 0x26
| 0x28
| 0x28
| 0x94
| 0x94
| Config block 0x100001.
| TWL parental control data (config block 0x100001).
|-
|-
| 0xBC
| 0xBC
| 0x2
| 0x2
| Config block 0x50000.
| LCD flicker calibration data (config block 0x50000).
|-
|-
| 0xBE
| 0xBE
| 0x2
| 0x2
| Config block 0x50001.
| Backlight data (config block 0x50001).
|-
|-
| 0xC0
| 0xC0
| 0x38
| 0x38
| Config block 0x50002.
| Backlight PWM table (config block 0x50002).
|-
|-
| 0xF8
| 0xF8
| 0x20
| 0x20
| Config block 0x50004.
| Power saving mode (ABL) calibration (config block 0x50004).
|-
|-
| 0x118
| 0x118
| 0x134
| 0x134
| Config block 0x20000.
| CODEC calibration data (config block 0x20000).
|-
|-
| 0x24C
| 0x24C
| 0x10
| 0x10
| Config block 0x40000.
| Touch screen calibration data (config block 0x40000).
|-
|-
| 0x25C
| 0x25C
| 0x1C
| 0x1C
| Config block 0x40001.
| Analog stick calibration data (config block 0x40001).
|-
|-
| 0x278
| 0x278
| 0x280
| 0x280
| 0x8
| 0x8
| Config block 0x30001.
| User time offset (config block 0x30001).
|-
|-
| 0x288
| 0x288
| 0x28A
| 0x28A
| 0x2
| 0x2
| If non-zero, the size (below) is hardcoded (currently) to value 0x288, otherwise the size field below is used.
| Version, maybe? If non-zero, the size (below) is hardcoded (currently) to value 0x288, otherwise the size field below is used.
|-
|-
| 0x28C
| 0x28C