3dbrew - User contributions [en]

CONFIG9 Registers

2015-04-17T11:57:58Z

Patois: /* Registers */

= Registers =
{| class="wikitable" border="1"
! Old3DS
! Name
! Address
! Width
! Used by
|-
| style="background: green" | Yes
| [[#CFG_SYSPROT9|CFG_SYSPROT9]]
| 0x10000000
| 1
| Boot9
|-
| style="background: green" | Yes
| [[#CFG_SYSPROT11|CFG_SYSPROT11]]
| 0x10000001
| 1
| Boot9
|-
| style="background: green" | Yes
| CFG_DEBUGUNIT
| 0x10000004
| 4
|
|-
| style="background: green" | Yes
| [[#CFG_CARDCONF|CFG_CARDCONF]]
| 0x1000000C
| 2
|
|-
| style="background: green" | Yes
| CFG_DEBUGGER
| 0x10000010
| 1
|
|-
| style="background: green" | Yes
| ?
| 0x10000011
| 1
|
|-
| style="background: green" | Yes
| ?
| 0x10000012
| 2
|
|-
| style="background: green" | Yes
| ?
| 0x10000014
| 2
|
|-
| style="background: green" | Yes
| ?
| 0x10000020
| 2
|
|-
| style="background: green" | Yes
| ?
| 0x10000100
| 2
|
|-
| style="background: red" | No
| [[#CFG_EXTMEMCNT9|CFG_EXTMEMCNT9]]
| 0x10000200
| 1
| NewKernel9
|-
| style="background: green" | Yes
| [[#CFG_MPCORECFG|CFG_MPCORECFG]]
| 0x10000FFC
| 4
|
|-
| style="background: green" | Yes
| [[#CFG_BOOTENV|CFG_BOOTENV]]
| 0x10010000
| 4
|
|-
| style="background: green" | Yes
| [[#CFG_UNITINFO|CFG_UNITINFO]]
| 0x10010010
| 1
| Process9
|-
| style="background: green" | Yes
| ?
| 0x10010014
| 1
|
|}

==CFG_SYSPROT9 ==
Writing values to SYSPROT sets the specified bitmask. The ARM9 [[Memory_layout|bootrom]](+0x8000) is disabled by writing bit0. bit1 is used by NATIVE_FIRM to make sure console-unique TWL AES-keys are only set at hard-boot. It is not possible to set any other bits.

From disassembly of the New3DS process9, it appears that setting bit1 disables the 0x10012000+ region.

== CFG_SYSPROT11 ==
ARM11 bootrom (+0x8000) is disabled by writing bit0. It is not possible to set any other bits.

== CFG_CARDCONF ==
{| class="wikitable" border="1"
! Bit
! Description
|-
| 1-0
| Gamecard active controller select (0=NTRCARD, 1=?, 2=CTRCARD1, 3=CTRCARD2)
|-
| 8
| ?
|}

Depending on the gamecard controller that has been selected, one of the following gamecard registers will become active:
* Selecting NTRCARD will activate the register space at [[NTRCARD|0x10164000]].
* Selecting CTRCARD1 will activate the register space at [[CTRCARD|0x10004000]].
* Selecting CTRCARD2 will activate the register space at [[CTRCARD|0x10005000]].

== CFG_EXTMEMCNT9 ==
This register is presumably New3DS-only. Only bit0 is writable: 0 = disable New3DS ARM9 memory at 0x08100000 size 0x80000, 1 = enable.

This bit is set by New3DS ARM9-kernel crt0.

The data in this extended memory doesn't change when disabling the memory, then re-enabling the memory. Reading this extended memory while disabled results in zeros.

== CFG_MPCORECFG ==
Identical to [[PDN#PDN_MPCORE_CFG|PDN_MPCORE_CFG]].

== CFG_BOOTENV ==
Initially this is value zero. NATIVE_FIRM writes value 1 here when a FIRM launch begins. The [[Legacy_FIRM_PXI|LGY]] FIRM writes value 3 here when handling PXI command 0x00020080(first TWL PXI command), it also writes value 7 here when handling PXI command 0x00030080(first AGB PXI command). This register can be read to determine what "mode" the system is running under: hard-boot, FIRM launch, or TWL/AGB FIRM.

0=Cold boot, 1=CTR, 3=TWL, 5=NTR, 7=AGB

It is unknown if this register controls anything.

== CFG_UNITINFO ==
This 8-bit register is value zero for retail, non-zero for dev/debug units.

== 0x10010014 ==
In the console-unique TWL key-init/etc function the ARM9 copies the u8 value from REG_UNITINFO to this register.

This is also used by TWL_FIRM Process9.

KProcess

2015-03-13T07:56:35Z

Patois:

[[Category:Kernel objects]]
class [[KProcess]] extends [[KSynchronizationObject]];

Size : 0x260 bytes

{| class="wikitable" border="1"
|-
! Offset
! Type
! Description
|-
| 0x0
| u32
| Pointer to vtable
|-
| 0x4
| u32
| Reference count
|-
| 0x8
| u32
| Count of KThreads that sync with this object - number of nodes in the linked list below
|-
| 0xC
| KLinkedListNode*
| Pointer to first KLinkedListNode in node list of KThreads that sync with this object
|-
| 0x10
| KLinkedListNode*
| Pointer to last KLinkedListNode in node list of KThreads that sync with this object
|-
| 0x1C
| volatile KThread*
| 0 or pointer to the thread the currently does something with the process object.
|-
| 0x20
| s16
| ?
|-
| 0x30
| KLinkedListNode*
| Pointer to first KLinkedListNode in list of KMemoryBlocks used by the process
|-
| 0x34
| KLinkedListNode*
| Pointer to last KLinkedListNode in list of KMemoryBlocks used by the process
|-
| 0x40
| u32
| Translation table base
|-
| 0x44
| u8
| Context ID
|-
| 0x50
| u32
| Size of the MMU table
|-
| 0x54
| u32
| Virtual address of the MMU table for this process
|-
| 0x58
| u32
| Total size of all thread context pages (0xFF4xxxxx) owned by threads that belong to this process
|-
| 0x5C
| u32
| Number of KThreadLocalPages used by this KProcess
|-
| 0x60
| KLinkedListNode*
| Pointer to first KLinkedListNode in the list of KThreadLocalPages
|-
| 0x64
| KLinkedListNode*
| Pointer to last KLinkedListNode in the list of KThreadLocalPages
|-
| 0x6C
| s32
| Ideal processor
|-
| 0x74
| u32
| Pointer to resource limits for process.
|-
| 0x79
| u8
| Proc affinity mask
|-
| 0x7C
| u32
| Number of threads which belong to this process.
|-
| 0x80
| 0x10-bytes
| SVC access control mask from the exheader kernel descriptors.
|-
| 0x90
| 0x10-bytes
| Interrupt flags- 32 interrupts per word, 4 words, 0x80 interrupts total divided evenly across 4 words
|-
| 0xA0
| u32
| Kernel flags from the exheader kernel descriptors.
|-
| 0xA4
| u16
| Handle table size from the exheader kernel descriptors. When this is 0, handle table is stored in WRAM.
|-
| 0xA6
| u16
| Kernel release version field, from the exheader kernel descriptors.
|-
| 0xA8
| u32
| Pointer to [[KCodeSet]] instance
|-
| 0xAC
| u32
| Process id, this always begins at 0x0 for the first process.
|-
| 0xB0
| u32
| Kernel flags from the exheader kernel descriptors.
|-
| 0xB8
| KThread*
| Pointer to the process's main (?) thread.
|-
| 0xCC
| KProcessHandleTable
| Pointer to the process's handle table. until 0x1C4 or longer
|-
| 0x224
| u32
| ?
|}

Structure starting with [[8.0.0-18]] NATIVE_FIRM:

Size : 0x268 bytes

{| class="wikitable" border="1"
|-
! Offset
! Type
! Description
|-
| 0x0
| u32
| Pointer to vtable
|-
| 0x4
| u32
| Reference count
|-
| 0x8
| u32
| Count of KThreads that sync with this object - number of nodes in the linked list below
|-
| 0xC
| KLinkedListNode*
| Pointer to first KLinkedListNode in node list of KThreads that sync with this object
|-
| 0x10
| KLinkedListNode*
| Pointer to last KLinkedListNode in node list of KThreads that sync with this object
|-
| 0x2C
| u32
| Count of KMemoryBlocks owned by the process
|-
| 0x30
| KLinkedListNode*
| Pointer to first KLinkedListNode in list of KMemoryBlocks used by the process
|-
| 0x34
| KLinkedListNode*
| Pointer to last KLinkedListNode in list of KMemoryBlocks used by the process
|-
| 0x40
| u32
| Translation table base
|-
| 0x44
| u8
| Context ID
|-
| 0x4C
| u32
| End of userland virtual memory for the process
|-
| 0x50
| u32*
| [[Memory_layout|LINEAR]] memory virtual address(userland) base for this process.
|-
| 0x58
| u32
| Size of the MMU table
|-
| 0x5C
| u32
| Virtual address of the MMU table for this process
|-
| 0x60
| u32
| Total size of all thread context pages (0xFF4xxxxx) owned by threads that belong to this process
|-
| 0x64
| u32
| Number of KThreadLocalPages used by this KProcess
|-
| 0x68
| KLinkedListNode*
| Pointer to first KLinkedListNode in the list of KThreadLocalPages
|-
| 0x6C
| KLinkedListNode*
| Pointer to last KLinkedListNode in the list of KThreadLocalPages
|-
| 0x74
| s32
| Ideal processor for this process
|-
| 0x7C
| u32
| Pointer to resource limits for process.
|-
| 0x84
| u32
| Number of threads which belong to this process.
|-
| 0x88
| 0x10-bytes
| SVC access control mask from the exheader kernel descriptors.
|-
| 0x98
| u32[4]
| Interrupt flags- 32 interrupts per word, 4 words, 0x80 interrupts total divided evenly across 4 words
|-
| 0xA8
| u32
| Kernel flags from the exheader kernel descriptors.
|-
| 0xAC
| u16
| Handle table size from the exheader kernel descriptors. When this is 0, handle table is stored in WRAM.
|-
| 0xAE
| u16
| Kernel release version field, from the exheader kernel descriptors.
|-
| 0xB0
| u32
| Pointer to [[KCodeSet]] instance
|-
| 0xB4
| u32
| Process id, this always begins at 0x0 for the first process.
|-
| 0xC0
| KThread*
| Pointer to the process's main thread.
|-
| 0xD4
| KProcessHandleTable
| This is the data for tracking and using all of the KProcess's handles.
|-
| 0xEC
| HandleData[0x28]
| These internal HandleData entries are only used if the exheader's handle table size is 0
|-
| 0x22C
| ?
| Unknown
|}

Structure starting with [[8.1.0-0 New3DS]] NATIVE_FIRM:

Size : 0x270 bytes

{| class="wikitable" border="1"
|-
! Offset
! Type
! Description
|-
| 0x0
| u32
| Pointer to vtable
|-
| 0x4
| u32
| Reference count
|-
| 0x8
| u32
| Count of KThreads that sync with this object - number of nodes in the linked list below
|-
| 0xC
| KLinkedListNode*
| Pointer to first KLinkedListNode in node list of KThreads that sync with this object
|-
| 0x10
| KLinkedListNode*
| Pointer to last KLinkedListNode in node list of KThreads that sync with this object
|-
| 0xB0
| u32
| Kernel flags from the exheader kernel descriptors.
|}

KProcessHandleTable info struct:
{| class="wikitable" border="1"
|-
! Offset
! Type
! Description
|-
| 0x0
| HandleData*
| Pointer to the process's handle table.
|-
| 0x4
| u16
| The max number of handles that can be open at once - usually 0x200.
|-
| 0x6
| u16
| Unknown
|-
| 0x8
| HandleData*
| Pointer to the next open HandleData entry in the handle table.
|-
| 0xC
| u16
| Total handles used by this KProcess.
|-
| 0xE
| u16
| The current number of handles in use.
|-
| 0x10
| u32
| Unknown
|-
| 0x14
| u32
| Unknown
|-
| 0x16
| u32
| Unknown
|-
| 0x18
| HandleData[28]
| This small handle data table internal to the KProcess is only used in certain processes that don't have an external handle data table in FCRAM. It is all zeros in most processes.
|}

HandleData struct:
{| class="wikitable" border="1"
|-
! Offset
! Type
! Description
|-
| 0x0
| u32
| Handle info
|-
| 0x4
| u32
| Pointer to the kernel object that the handle references.
|}

The handle info u32 works as such:

The high byte is a remainder from the pointer to the next entry that originally occupied the handle table entry. It is unused. Byte 2 is either the class type token starting with firmware version 9.0 or the lowest byte of the char* that points to the class type name in firmware versions below 9.0. The lower halfword is the handle number of the current handle taken from the total handle count for the KProcess that owns the table.

On table creation, each entry in the handle data table is populated with a pointer to the next entry in the table. When a new handle is created, that pointer is moved into offset 0x8 of the KProcessHandleTable info struct to use for generation of the next handle.

The final handle that gets returned when a handle is created is (handle_index | (handle_total << 15)), basically they take the index into the handle data table and OR that with the total handle count << 15. This returned value is the one that gets passed back to the running application and is used to look up the HandleData entry in the table.

KProcess

2015-03-03T12:24:42Z

Patois: add offset 0xB0

[[Category:Kernel objects]]
class [[KProcess]] extends [[KSynchronizationObject]];

Size : 0x260 bytes

{| class="wikitable" border="1"
|-
! Offset
! Type
! Description
|-
| 0x0
| u32
| Pointer to vtable
|-
| 0x4
| u32
| Reference count
|-
| 0x1C
| volatile KThread*
| 0 or pointer to the thread the currently does something with the process object.
|-
| 0x20
| s16
| ?
|-
| 0x30
| KLinkedListNode*
| Pointer to first KLinkedListNode in list of KMemoryBlocks used by the process
|-
| 0x34
| KLinkedListNode*
| Pointer to last KLinkedListNode in list of KMemoryBlocks used by the process
|-
| 0x40
| u32
| Translation table base
|-
| 0x44
| u8
| Context ID
|-
| 0x50
| u32
| Size of the MMU table
|-
| 0x54
| u32
| Virtual address of the MMU table for this process
|-
| 0x58
| u32
| Total size of all thread context pages (0xFF4xxxxx) owned by threads that belong to this process
|-
| 0x5C
| u32
| Number of KThreadLocalPages used by this KProcess
|-
| 0x60
| KLinkedListNode*
| Pointer to first KLinkedListNode in the list of KThreadLocalPages
|-
| 0x64
| KLinkedListNode*
| Pointer to last KLinkedListNode in the list of KThreadLocalPages
|-
| 0x6C
| s32
| Ideal processor
|-
| 0x74
| u32
| Pointer to resource limits for process.
|-
| 0x79
| u8
| Proc affinity mask
|-
| 0x7C
| u32
| Number of threads which belong to this process.
|-
| 0x80
| 0x10-bytes
| SVC access control mask from the exheader kernel descriptors.
|-
| 0x90
| 0x10-bytes
| Interrupt flags- 32 interrupts per word, 4 words, 0x80 interrupts total divided evenly across 4 words
|-
| 0xA0
| u32
| Kernel flags from the exheader kernel descriptors.
|-
| 0xA4
| u16
| Handle table size from the exheader kernel descriptors. When this is 0, handle table is stored in WRAM.
|-
| 0xA6
| u16
| Kernel release version field, from the exheader kernel descriptors.
|-
| 0xA8
| u32
| Pointer to [[KCodeSet]] instance
|-
| 0xAC
| u32
| Process id, this always begins at 0x0 for the first process.
|-
| 0xB0
| u32
| Kernel flags from the exheader kernel descriptors.
|-
| 0xB8
| KThread*
| Pointer to the process's main (?) thread.
|-
| 0xCC
| KProcessHandleTable
| Pointer to the process's handle table. until 0x1C4 or longer
|-
| 0x224
| u32
| ?
|}

Structure for [[8.0.0-18]] NATIVE_FIRM:

Size : 0x268 bytes

{| class="wikitable" border="1"
|-
! Offset
! Type
! Description
|-
| 0x0
| u32
| Pointer to vtable
|-
| 0x4
| u32
| Reference count
|-
| 0x8
| u32
| KLinkedListNode count for object
|-
| 0xC
| KThread*
| Unknown
|-
| 0x2C
| u32
| Count of KMemoryBlocks owned by the process
|-
| 0x30
| KLinkedListNode*
| Pointer to first KLinkedListNode in list of KMemoryBlocks used by the process
|-
| 0x34
| KLinkedListNode*
| Pointer to last KLinkedListNode in list of KMemoryBlocks used by the process
|-
| 0x40
| u32
| Translation table base
|-
| 0x44
| u8
| Context ID
|-
| 0x4C
| u32
| End of userland virtual memory for the process
|-
| 0x50
| u32*
| [[Memory_layout|LINEAR]] memory virtual address(userland) base for this process.
|-
| 0x58
| u32
| Size of the MMU table
|-
| 0x5C
| u32
| Virtual address of the MMU table for this process
|-
| 0x60
| u32
| Total size of all thread context pages (0xFF4xxxxx) owned by threads that belong to this process
|-
| 0x64
| u32
| Number of KThreadLocalPages used by this KProcess
|-
| 0x68
| KLinkedListNode*
| Pointer to first KLinkedListNode in the list of KThreadLocalPages
|-
| 0x6C
| KLinkedListNode*
| Pointer to last KLinkedListNode in the list of KThreadLocalPages
|-
| 0x74
| s32
| Ideal processor for this process
|-
| 0x7C
| u32
| Pointer to resource limits for process.
|-
| 0x84
| u32
| Number of threads which belong to this process.
|-
| 0x88
| 0x10-bytes
| SVC access control mask from the exheader kernel descriptors.
|-
| 0x98
| u32[4]
| Interrupt flags- 32 interrupts per word, 4 words, 0x80 interrupts total divided evenly across 4 words
|-
| 0xA8
| u32
| Kernel flags from the exheader kernel descriptors.
|-
| 0xAC
| u16
| Handle table size from the exheader kernel descriptors. When this is 0, handle table is stored in WRAM.
|-
| 0xAE
| u16
| Kernel release version field, from the exheader kernel descriptors.
|-
| 0xB0
| u32
| Pointer to [[KCodeSet]] instance
|-
| 0xB4
| u32
| Process id, this always begins at 0x0 for the first process.
|-
| 0xC0
| KThread*
| Pointer to the process's main thread.
|-
| 0xD4
| KProcessHandleTable
| This is the data for tracking and using all of the KProcess's handles.
|-
| 0xEC
| HandleData[0x28]
| These internal HandleData entries are only used if the exheader's handle table size is 0
|-
| 0x22C
| ?
| Unknown
|}

KProcessHandleTable info struct:
{| class="wikitable" border="1"
|-
! Offset
! Type
! Description
|-
| 0x0
| HandleData*
| Pointer to the process's handle table.
|-
| 0x4
| u16
| The max number of handles that can be open at once - usually 0x200.
|-
| 0x6
| u16
| Unknown
|-
| 0x8
| HandleData*
| Pointer to the next open HandleData entry in the handle table.
|-
| 0xC
| u16
| Total handles used by this KProcess.
|-
| 0xE
| u16
| The current number of handles in use.
|-
| 0x10
| u32
| Unknown
|-
| 0x14
| u32
| Unknown
|-
| 0x16
| u32
| Unknown
|-
| 0x18
| HandleData[28]
| This small handle data table internal to the KProcess is only used in certain processes that don't have an external handle data table in FCRAM. It is all zeros in most processes.
|}

HandleData struct:
{| class="wikitable" border="1"
|-
! Offset
! Type
! Description
|-
| 0x0
| u32
| Handle info
|-
| 0x4
| u32
| Pointer to the kernel object that the handle references.
|}

The handle info u32 works as such:

The high byte is a remainder from the pointer to the next entry that originally occupied the handle table entry. It is unused. Byte 2 is either the class type token starting with firmware version 9.0 or the lowest byte of the char* that points to the class type name in firmware versions below 9.0. The lower halfword is the handle number of the current handle taken from the total handle count for the KProcess that owns the table.

On table creation, each entry in the handle data table is populated with a pointer to the next entry in the table. When a new handle is created, that pointer is moved into offset 0x8 of the KProcessHandleTable info struct to use for generation of the next handle.

The final handle that gets returned when a handle is created is (handle_index | (handle_total << 15)), basically they take the index into the handle data table and OR that with the total handle count << 15. This returned value is the one that gets passed back to the running application and is used to look up the HandleData entry in the table.