Search results

Jump to navigation Jump to search
  • ...fi network side this is done by just sending 802.11 deauthentication frame(s).
    481 bytes (65 words) - 06:53, 6 April 2016
  • ...endpoint</nowiki>, which then returns what domains to use afterwards(there's "portal_host" and "n3ds_host" tags but the tags' value are the same). This Then it starts loading the Miiverse-browser(WebKit) for accessing the domain(s) specified above(with applet-side TLS/etc like the main browser).
    757 bytes (119 words) - 08:42, 2 November 2016
  • | ESHOP://50010000008123.J00101Z00095 || JPN || Rhythm Thief & the Emperor's Treasure Demo || ARTJ || 00040002 | ESHOP://50010000008842.PEAALL000000 || EUR || Rhythm Thief & the Emperor's Treasure Demo || ARTP [http://mediacontent.nintendo-europe.com/NOE/images/g
    4 KB (385 words) - 17:12, 1 July 2013
  • ...applications to pick as "Favourite Title", nor will it show up on the 3DS's friend card if the user is using the application (The user appears to be ru This "icon" is used whenever there's a title in the playlog where the title isn't found in the icon [[Home_Menu|
    1 KB (191 words) - 23:51, 4 February 2017
  • | 0x006 || 2 || uint16 || Header's length | 0x00C || 4 || uint32 || File's length
    1 KB (172 words) - 22:51, 21 November 2015
  • | KClientPort that's part of the parent KPort that uses this module
    244 bytes (32 words) - 07:29, 9 February 2015
  • ffmpeg -y -i "video.mp4" -s 960x240 -aspect 2:1 -r 20 -vcodec mjpeg -qscale 1 -vf crop=480:240:0:0 -aco ffmpeg -y -i "video.mp4" -s 960x240 -aspect 2:1 -r 20 -vcodec mjpeg -qscale 1 -vf crop=480:240:480:0 -a
    758 bytes (80 words) - 18:35, 28 March 2013
  • | Pointer to the node's data ('key' field).
    254 bytes (31 words) - 19:01, 9 May 2015
  • Tubehax is an exploit in the 3DS's YouTube application that allows people to load 3DS homebrews. This works on ...tarter Kit]. When you've downloaded it, extract it to the root of your 3DS's SD card (SD:\).
    2 KB (283 words) - 01:02, 31 October 2015
  • ffmpeg -y -i "video.mp4" -s 960x240 -aspect 2:1 -r 20 -vcodec mjpeg -qscale 1 -vf crop=480:240:0:0 -aco ffmpeg -y -i "video.mp4" -s 960x240 -aspect 2:1 -r 20 -vcodec mjpeg -qscale 1 -vf crop=480:240:480:0 -a
    716 bytes (118 words) - 12:09, 22 December 2011
  • ...ow returns a sysupdate-required error when the 3DS sends a NVer value that's older than the one for X.X.X-28. With this change at the time this update w This apparently also affects systems which don't have NNID-linked, it's unknown when exactly this change was done server-side(it was after v10.3 re
    1 KB (235 words) - 06:26, 10 March 2016
  • ...er in the RomFS, which provide full function names/signatures for the game's code.bin | Mario & Luigi: Bowser's Inside Story + Bowser Jr's Journey
    2 KB (275 words) - 13:18, 23 July 2023
  • If the 3DS is connected to the internet, return the current access point's MTU value. ...DS isn't connected to the internet, return the last connected access point's MTU value.
    894 bytes (122 words) - 06:36, 5 November 2019
  • == S ==
    5 KB (149 words) - 16:39, 8 February 2014
  • ...gest new feature, this lets you organise your Home Menu with folders. Here's how they work. That's pretty much all there is to it. You can't put folders inside other folders,
    2 KB (407 words) - 12:34, 26 November 2023
  • Kernel9 has been updated, presumably it's just a rebuild with the latest sources and toolchain. Unknown whether there's other changes.
    2 KB (302 words) - 21:19, 17 March 2021
  • === Nintendo's EXIF Data Structure === ==== Nintendo's EXIF MakerNote Tag ====
    3 KB (486 words) - 18:47, 8 April 2015
  • | Dillon's Rolling Western
    3 KB (314 words) - 15:41, 24 August 2013
  • ...age lists and describes the purposes of the testpoints accessible on a 3DS's circuit board. ...signals were figured out using a PicoScope 2206B running at least at 2 MS/s, ±5 V, 8-bit, 1:10, DC. All measures of digital signals were referenced by
    5 KB (731 words) - 20:07, 16 May 2020
  • ..., in big-endian. The first 0x1E bytes are "r"; the second 0x1E bytes are "s". The hash is SHA-256 computed over this certificate, starting at byte 0x8 Boot ROM decrypts [[OTP Registers]] and writes the private key and Nintendo's signature of CTCert to [[Memory_layout#ARM9_ITCM|ARM9 ITCM]]; the public ke
    2 KB (293 words) - 00:44, 28 April 2022
  • ...This doesn't write any output in the buffer for [[APT:SendParameter]]. It's unknown whether this uses shared-mem.
    245 bytes (39 words) - 05:08, 27 November 2014
  • ...#CFG_BOOTENV|CFG_BOOTENV]] to the value for CTR (0x1), and is only time it's set by Process9. call svcKernelSetState(2), which will make Kernel9 synchronize with the Arm11's own KernelSetState(2) code and wait for a PXI_SYNC interrupt (sleep exit co
    2 KB (213 words) - 18:46, 4 May 2020
  • There's also some new UTF-16 strings in the .(ro)data, but there's no(?) known code which actually uses these. ...0x080fffe0. On New3DS, endaddr was 0x080fffe0 prior to v10.0-FIRM, now it's 0x0817ffe0.
    3 KB (408 words) - 12:40, 26 November 2023
  • ...ervice. It contains recorded audio data and the offset of the current data's end.
    305 bytes (46 words) - 04:47, 9 October 2015
  • | ESHOP://50010000008123.J00101Z00095 || JPN || Rhythm Thief & the Emperor's Treasure Demo || ARTJ || 00040002 | ESHOP://50010000008842.PEAALL000000 || EUR || Rhythm Thief & the Emperor's Treasure Demo || ARTP [http://mediacontent.nintendo-europe.com/NOE/images/g
    4 KB (568 words) - 20:43, 22 June 2013
  • There's one instance of this structure per core. | Context for the scheduler's thread
    2 KB (203 words) - 01:02, 28 December 2016
  • | nim:aoc, nim:ndm, nim:s, nim:u | aoc: DLC, ndm: for [[NDM Services|ndm]], s: for eShop, u: for updater
    6 KB (1,004 words) - 07:35, 19 February 2017
  • ...used after all data has been uploaded via the SendPostData* HTTPC command(s), if those commands were used at all.
    402 bytes (55 words) - 17:22, 29 March 2016
  • | Removed access for SVC's: 5,7,D,E,10. Cmd5 now sets the last segment in the CRO binary to R-X when it's done.
    2 KB (239 words) - 09:28, 23 June 2017
  • There's no new virtual function defined by this class.
    653 bytes (72 words) - 19:43, 10 December 2016
  • ...attributes' values specified in the input buffers for the specified title(s).
    409 bytes (50 words) - 04:10, 21 October 2015
  • .... This mimics what the european Home Menu had been doing for some time. It's currently unknown if there are any more changes. System update report(s):
    2 KB (289 words) - 22:38, 29 May 2023
  • ...address for each framebuffer, normally located in FCRAM in the application's GSP heap. When other processes use GSP as well, the framebuffers for the pr ...der is set to "off" the 3D effect is disabled. Normally when the 3D slider's state is set to "off" the left/right framebuffer addresses are set to the s
    4 KB (437 words) - 10:18, 1 September 2013
  • ...PM, internally closing its handle to the process and removing the process's data entry.
    395 bytes (52 words) - 07:18, 12 October 2015
  • <!--<div style="font-size:150%;"><br>S'il vous plaît, participez à notre [[Levée de fonds|Levée de Fonds pour
    925 bytes (138 words) - 17:51, 12 October 2013
  • ...st graphical installer]. On Unix-like platforms such as Linux/macOS, there's [https://github.com/devkitPro/pacman/releases/latest pacman].. ...inux version of devkitARM. Unless you have some particular need for WSL it's recommended that you stick to a more standard environment.
    4 KB (600 words) - 13:31, 20 July 2023
  • Although that SGI #15 is sent to both core0 and core1, there's only ''one'' instance of [[KFIQInterruptEvent]] for all cores, the fields o svcBindInterrupt doesn't check the process's [[NCCH/Extended_Header|exheader]] flags for that interrupt at all.
    2 KB (261 words) - 02:38, 5 December 2016
  • ...tes value 0xFFFF to the output audio sample data in shared-mem, since that's what the MIC hardware returns here.
    497 bytes (67 words) - 03:00, 7 November 2015
  • Gets the loaded network's CRC.
    302 bytes (36 words) - 02:26, 8 May 2017
  • ...x20-bytes total for each channel slot, thus the base-address for a channel's slot is determined with: 0x1EC03400 + (channel_index*0x20). The below offse
    2 KB (289 words) - 03:32, 21 April 2019
  • ...ill provide new features, such as the ability to change your Mii character's expression and the ability to purchase new StreetPass Mii Plaza games"
    625 bytes (90 words) - 01:35, 12 July 2013
  • This retrieves the offset of the specified [[CIA]]'s meta section.
    406 bytes (52 words) - 07:29, 17 April 2016
  • This retrieves the core version from the specified [[CIA]]'s meta section.
    408 bytes (51 words) - 07:29, 17 April 2016
  • ...em is for an entry, minus some other data near the end of sharedmem. There's a total of 0x40 entries, with a total byte-size of 0x20000.
    492 bytes (79 words) - 18:59, 13 February 2017
  • Here's a shortened link: http://tinyurl.com/4x4u69o [[User:Kiddyshaq34|Kiddyshaq34 ...itable in any way. To me, seems more like NULL pointer dereferencing. Here's my full theory, may be wrong tho:
    5 KB (909 words) - 21:12, 13 September 2011
  • This command returns whether the cartridge's auto start bit is set.
    370 bytes (47 words) - 15:27, 9 July 2016
  • ..., and I am here to teach you how to make your website 3DS compatible. Here's a website "full" HTML code example:
    881 bytes (106 words) - 15:39, 30 November 2012
  • ...title text). The specified data seems to be sent in encrypted(?) UDP frame(s) to the friends server.
    586 bytes (79 words) - 07:38, 8 December 2015
  • ...manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>. System update report(s):
    616 bytes (98 words) - 02:52, 27 August 2019
  • This loads the 0x300-byte title ID dependency list from the specified [[CIA]]'s meta section.
    636 bytes (82 words) - 07:29, 17 April 2016
  • ! Bit(s) ! Bit(s)
    3 KB (387 words) - 01:07, 2 April 2020
  • ...he data written to the opened file is the raw encrypted data from Nintendo's CDN servers.
    525 bytes (74 words) - 20:13, 17 April 2016
  • ffmpeg -y -i "video.mp4" -s 960x240 -aspect 2:1 -r 20 -vcodec mjpeg -qscale 1 -vf crop=480:240:0:0 -aco ffmpeg -y -i "video.mp4" -s 960x240 -aspect 2:1 -r 20 -vcodec mjpeg -qscale 1 -vf crop=480:240:480:0 -a
    6 KB (1,110 words) - 01:50, 20 November 2022
  • This can be used by the host to force-disconnect the spectator(s). After sending the network msg, this calls the same code used by [[NWMUDS:
    654 bytes (93 words) - 07:42, 14 June 2017
  • This installs the data loaded from the specified [[FIRM]] title's [[NCCH]] ExeFS, to the [[Flash_Filesystem|NAND]] FIRM partitions. The title
    655 bytes (90 words) - 02:48, 10 January 2016
  • = QTM system service "qtm:s" = ...s all of the commands listed under the "QTM services" section and the "qtm:s" section, in addition to the above commands.
    2 KB (332 words) - 09:15, 12 October 2017
  • For archiving purposes, let's see how many we can recover from our harddrives. If you'd like to contribut
    1 KB (115 words) - 00:42, 29 March 2016
  • ...manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>. ...ith [[ErrDisp]], this just changed the fpdver value sent for HTTPS request(s) from 3 to 4(this is also used with the user-agent).
    2 KB (326 words) - 00:39, 11 February 2016
  • | Library for drawing 2D graphics using the Nintendo 3DS's PICA200 GPU ...nd assemble shader code for DMP's MAESTRO shader extension used in the 3DS's PICA200 GPU
    5 KB (733 words) - 16:44, 21 August 2021
  • | Ton Clancy's Ghost Recon:Shadow Wars
    2 KB (132 words) - 16:07, 20 April 2011
  • '''A:''' See latest news on the main page. If there's any progress, it'll be right there.
    626 bytes (104 words) - 19:00, 15 December 2022
  • | SVC access control data copied from KThread's owner process 1: "Allow debug" flag from the process's exheader. If set, <code>{r0-r7, r12, lr_svc}</code> will be pushed (they'll
    3 KB (416 words) - 17:56, 24 December 2016
  • ...Binary CTR Wave files (BCWAV). The structure is very similar to Microsoft's Wave file. ...then the media player expects a "fmt " chunk and a "data" chunk. Nintendo's format uses a CWAV header (no need for a general structure for media, only
    5 KB (642 words) - 14:38, 20 December 2020
  • | Header code [0x00020000] (Alternate headers: "cfg:s"/"cfg:i" = 0x04060000, "cfg:i" = 0x08160000)
    649 bytes (89 words) - 18:02, 13 August 2023
  • ...bigger than the original Health and Safety app. You inject homebrew into H&S (short for Health and Safety) using GodMode9.
    621 bytes (108 words) - 20:23, 11 June 2019
  • Primitive Engine (PE) is one of the PICA200's four vertex processor units and provides some unique features which are use
    619 bytes (90 words) - 18:36, 23 August 2015
  • ...state field is cleared using the input bitmask. When flag is non-zero, it's ORRed using the input bitmask instead. If bitmask 0x4 is clear in the input
    643 bytes (96 words) - 16:50, 2 April 2016
  • System update report(s):
    805 bytes (119 words) - 05:11, 25 September 2016
  • | Other value(s)
    691 bytes (86 words) - 23:53, 19 March 2016
  • | Scheduler's idle thread (runs when no other runnable thread is available) ...the KScheduler object. Each pair of pointers makes up 1 entry in that core's Scheduler for their priority.
    2 KB (322 words) - 02:11, 8 December 2016
  • ...manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>. System update report(s):
    882 bytes (137 words) - 21:19, 17 March 2021
  • |CX*-CTR-S-C0
    3 KB (157 words) - 13:13, 1 April 2013
  • | Deletes a save's secure value.
    802 bytes (91 words) - 02:57, 18 October 2015
  • ...manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>. System update report(s):
    973 bytes (141 words) - 02:43, 13 September 2022
  • ...d-color is displayed where the slider would have been. Hence, unless there's a way to get this to actually display, [[browserhax|sliderhax]] isn't usabl ...r at IP address 8.8.8.8 via DNS-resolver socket code in the app itself (it's unknown whether this resolver code existed in the app before this version).
    5 KB (726 words) - 22:44, 25 May 2017
  • ...eInterruptAndGetKSchedulableInterruptEvent(u32 interruptID) = 0</code>. It's actually the function called by the IRQ handler, which returns a [[KSchedul
    865 bytes (105 words) - 02:35, 5 December 2016
  • ...ry. It sets up imported symbols (functions+data) according to Import Table(s).
    715 bytes (100 words) - 19:55, 15 July 2016
  • ...fied buffer is the H.264 work-buffer, for "MJPEG" the size is 0x1 since it's not used for that. The user process doesn't use the data stored in this wor
    710 bytes (97 words) - 19:08, 6 November 2014
  • ...ser exploit, however this WebKit build is still old since other newer vuln(s) from the same year as that one are still not fixed.
    930 bytes (144 words) - 08:44, 4 March 2015
  • ...manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>. System update report(s):
    989 bytes (146 words) - 00:21, 30 July 2021
  • ...manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>. System update report(s):
    941 bytes (144 words) - 21:19, 17 March 2021
  • ...itten and received besides the built-in notes are stored in Extdata. There's two extdata files per note, these are created when new notes are saved. Pro
    967 bytes (132 words) - 15:14, 21 September 2013
  • ...command response. This is initially from savedata. When doing SOAP request(s) this data is updated with the latest data from the SOAP response, then the
    757 bytes (113 words) - 05:32, 3 March 2023
  • | Retrieves a file's last-modified timestamp.
    852 bytes (102 words) - 05:14, 16 January 2016
  • ...tory's subdirectories have their own subdirectories, the current directory's subdirectories are all added before the subdirectories' subdirectories are | Offset of File's Data
    6 KB (940 words) - 17:58, 24 January 2020
  • ...is 0xB3B1+5(0xB3B6). Otherwise when no match is found in the table and it's not 0x71, the output is 0xB3B1.
    672 bytes (102 words) - 18:57, 22 December 2016
  • Beginning in early 2016, 2.1.0-3 was installed onto the system's NAND as a necessary installation step for [[3DS_System_Flaws#arm9loader|arm
    784 bytes (107 words) - 21:19, 17 March 2021
  • ...Title_Database|database]], the now-unused files under /title for the title(s) are not deleted by this. These files are deleted later.
    838 bytes (114 words) - 07:29, 17 April 2016
  • ...r is placed on the <code>i+1</code>st Guest Mii. In any other case a user's personal Mii is selected. | Like the above, only for the Miis found in the system's database.
    4 KB (741 words) - 04:03, 27 June 2021
  • ...mem is created with mypermission=0x0, otherpermission=0x3. The only buffer(s) that are allocated under this sharedmem is the recv_buffer allocated by [[
    833 bytes (112 words) - 18:05, 14 April 2016
  • ...nt. This also means CIA files can contain anything that titles on Nintendo's CDN can contain. ...[[Download Play]] child, or installing forced Gamecard updates. Those CIA(s) are stored by the titles in question, in an auxiliary [[NCCH#CFA|CFA]] fil
    6 KB (932 words) - 17:23, 31 December 2023
  • ...privk from [[ClCertA]]. This data from ClCertA only gets loaded when there's no ClientCert context handles already open for this certID.
    805 bytes (115 words) - 19:09, 22 February 2016
  • ...nboard ARM7 core to handle <code>TWL_FIRM</code> and <code>AGB_FIRM</code>'s ARM7 requirements. This is due to the fact that much of the hardware used b ...chip). When it's set to 0x0 ARM7 has access, while ARM9 has access when it's set to 0x1.
    7 KB (1,258 words) - 13:39, 12 April 2021
  • ...lized yet(which were already downloaded), to a title-list buffer. If there's any titles which were not completely downloaded, where TWL titles with titl
    841 bytes (113 words) - 05:25, 3 March 2023
  • ...eo''' is a service allowing owners of American, Japanese, and European 3DS's to download and watch various videos offered by Nintendo. Nintendo Video us ...ervice similar to '''Nintendo Video''' and allowing owners of European 3DS's to download and watch various videos offered by Eurosport. Eurosport was di
    9 KB (1,306 words) - 14:31, 21 February 2023
  • If any other input value is used that's not listed above, MVD-sysmodule will run [[SVC|svcBreak]].
    792 bytes (110 words) - 01:03, 27 April 2016
  • ...alue 0x1 or 0x2. Or 0x3 as of [[10.0.0-27|10.0.0-X]] for using new command(s) from that version.
    837 bytes (123 words) - 02:02, 17 February 2017
  • =News service <nowiki>"news:s"</nowiki>= ...ould be <= <size listed [[NEWSS:GetNotificationMessage|here]]>, since that's the max size read by the notifications applet.
    5 KB (578 words) - 12:44, 20 January 2024
  • '''Q:''' Des progrès? ...n tour du côté des dernières news sur la page d'accueil. S'il y a du progrès, c'est ici que cela devrait apparaître.
    732 bytes (133 words) - 19:07, 22 December 2011
  • There can only be 5 sessions open total, with 1 per service. When there's already a session open for the target service(with session_count<5), SPI-mo
    1 KB (134 words) - 14:52, 4 November 2017
  • ...rol Unlocker (for 3DS as found by neimod, and for the DSi/Wii as on marcan's site) * Updated: XOR Tool's file text boxes accept drag&drop (DSDecmp GUI's also).
    7 KB (1,087 words) - 10:27, 7 November 2013
  • ...manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>. System update report(s):
    1,001 bytes (152 words) - 17:54, 4 December 2018
  • ...tion object). In the case of KSemaphore this also increments the semaphore's count.
    1 KB (143 words) - 21:10, 10 December 2016
  • ...{{#time: d F y}}<nowiki>''' </nowiki></tt>. Please include the application's creator, version number, and a link to a page on 3DBrew about the applicati
    1,009 bytes (159 words) - 01:34, 16 July 2017
  • outputsize 0x800 is used when it's >=0x800.
    1 KB (135 words) - 19:56, 17 February 2017
  • ...share names between each other. The headers are the followed by each block's data, which can hold any data (including another BPK1 structure). ...cksum of each block is calculated as a custom CRC-32 checksum of the block's data:
    3 KB (465 words) - 21:48, 21 February 2023
  • Internally there's a separate object vtable used with the above SSLC commands, for the main se It's unknown whether TLS server->client connections are supported.
    7 KB (830 words) - 05:47, 10 August 2021
  • ...is is used by [[AM:ImportDSiWare|AM]] module to verify the DSiWare section's [[DSiWare_Exports|metadata]] MAC after decrypting the payload data.
    840 bytes (117 words) - 03:09, 10 January 2016
  • ...process when using socket() must use [[SOCU:fcntl]] to support those flag(s).
    858 bytes (127 words) - 07:37, 1 May 2014
  • outputsize value 0x800 will be used when it's >=0x800.
    1 KB (133 words) - 20:14, 17 February 2017
  • ...dated to "*_06]"(which matches the current FIRM revision). Note that there's other system-modules which were updated with [[8.0.0-18]], which were built
    974 bytes (138 words) - 16:30, 7 August 2014
  • ...a full NAND image. By not listing the NAND image partition in the SD card's Master Boot Record (the first 512 bytes of data on the device which is resp ...via [[CONFIG_Registers#CFG_SYSPROT9|CFG_SYSPROT9]] shortly after that, it's impossible to perform this keyslot initialization at any later time.
    2 KB (379 words) - 14:06, 14 January 2016
  • outputsize value 0x800 will be used when it's >=0x800.
    1 KB (143 words) - 20:33, 17 February 2017
  • ...is an identification number that can be seen as a login name for Nintendo's game servers.
    878 bytes (145 words) - 11:05, 7 June 2020
  • ...n a single program header (DVLP), then one or more executable headers DVLE(s). The binary header specifies the number and location of DVLEs. The program | Executable's main offset in binary blob (in words)
    11 KB (1,700 words) - 21:36, 29 October 2022
  • ...{{#time: d F y}}<nowiki>''' </nowiki></tt>. Please include the application's creator, version number, and a link to a page on 3DBrew about the applicati
    971 bytes (149 words) - 02:55, 23 May 2023
  • ...tive to the CPU power-on) in CPU ticks for [[KTimerAndWDTManager]] when it's handling its list of [[KTimeableInterruptEvent]] instances
    1 KB (139 words) - 01:54, 12 February 2017
  • Before calling the AMPXI command, checks the input titleID-high, if it's 0x00048001 (TWL system), 0x00040001 (dlplay child), or has category flag s
    902 bytes (116 words) - 23:08, 1 August 2018
  • ...nitialize|initialized]] with type3. Only bitmask 0xF from unk1 is used, it's written into state then loaded later. That value is also compared with 1, d
    1 KB (159 words) - 03:37, 17 February 2017
  • ...on et un lien sur 3DBrew à propos de l'application. Pas de liens externes, s'il vous plaît.
    847 bytes (136 words) - 20:28, 17 February 2016
  • ...ons now load the counter with plain ldr and executes kernelpanic() when it's zero. System update report(s):
    3 KB (387 words) - 12:43, 26 November 2023
  • ...set of the 10-byte ID data, relative to structstart+4+<offsetfield-10>. It's unknown in what cases this 10-byte ID data is used.
    881 bytes (134 words) - 23:26, 31 December 2015
  • ...e the museum version) to the public on the eShop, as well as in the museum's shop (holding the questionable awards of being the least-retail-availabilit It's been speculated it may lack infrared and/or WiFi (the latter claim is incor
    3 KB (469 words) - 17:28, 1 August 2018
  • ...stances the mailbox contains. When that list is empty, it sets the mailbox's "is busy" flag and unschedules itself.
    1 KB (147 words) - 19:33, 10 December 2016
  • No RootCertChain(s) are used. For the nasc site, friends-module uses [[HTTPC:AddDefaultCert]] ...doClients/wiki/Hpp-Server Official servers] only support the letters L, C, S, D, I, T, J or U.
    6 KB (591 words) - 19:09, 28 September 2023
  • ...D matches the Ridge Racer programID, this code will set a flag, however it's unknown what this flag is used for. This is probably used for the Ridge Rac | The Legend of Zelda: Link's Awakening DX
    9 KB (1,386 words) - 22:12, 23 December 2017
  • : C may stand for Chiheisen ("horizon" in Japanese, the O3DS's codename being "Project Horizon"). '''Background:''' There's dead code in NWM referencing it.
    4 KB (643 words) - 07:56, 10 August 2022
  • Each char is either 1 or 0, and there's one char per thread local region. 0x200 bytes per region * 8 regions is 0x
    877 bytes (141 words) - 10:11, 31 January 2015
  • This is an u32 value where the intended range is <16. It's unknown whether this is for nodes or some sessionID.
    1 KB (173 words) - 23:37, 28 January 2017
  • ...data is copied to internal memory, however this data is not used after it's copied. This command is used by [[Application_Manager_Services_PXI|AM]] mod
    1 KB (150 words) - 03:08, 10 January 2016
  • ...nstalling boot9strap), though it is possible to use 80% of the system core's time using [[APT:SetApplicationCpuTimeLimit]] rather than 30% as was the ca
    3 KB (559 words) - 01:10, 11 December 2023
  • ...0x04070080 with the u64 programID at offset 0x8 in this header. When that's successful, [[NEWSS:GetNotificationHeader]] copies the output u8, the SpotP ...ull-terminator. When the message has the browser link flag set, the URL it's located after the null-terminator of the message text as a UTF-8 string, al
    3 KB (413 words) - 20:01, 14 January 2024
  • ...epeated after 0x1000 bytes (so it might be the maximum length but still it's not proved). There's one entry per sector, counting from physical sector 1 (sector 0 contains th
    16 KB (2,379 words) - 08:25, 21 July 2012
  • Well, it's been a fun 7 months so far. * Add: Name now reflects what's on here (CiTRUS) and version number (v0.2)
    3 KB (584 words) - 19:37, 7 May 2012
  • Although said to only work with Windows systems, it will work with other OS's if the name of the PC is changed. This is because the app has a hardcoded c
    1 KB (183 words) - 15:55, 6 December 2018
  • * Updated: XOR Tool's file text boxes accept drag&drop (DSDecmp GUI's also). * MPO: Added Nintendo's MakerNote structure.
    7 KB (1,129 words) - 02:59, 22 December 2012
  • This binds an interrupt in gpio-module's [[NCCH/Extended Header#ARM11_Kernel_Capabilities|interrupt ACL]] to the spe
    1 KB (180 words) - 16:19, 25 September 2016
  • ...manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>. System update report(s):
    1 KB (184 words) - 03:12, 28 May 2019
  • * Sliderhax is now obsolete since it was replaced with another exploit(it's still accessible however).
    1 KB (186 words) - 07:28, 28 July 2016
  • ...leID>''' - This directory contains a verbatim backup of files in the title's "data" directory(where the save file is located). ...striction is triggered if a [[SMDH#Byte.5B1.5D|certain flag]] in the title's icon is set. Or if the SaveID of the title is located in the [[NS_CFA|ctr_b
    5 KB (652 words) - 20:39, 3 December 2014
  • = Config service "cfg:s" = cfg:s contains all the commands in cfg:u, in addition to the following:
    6 KB (702 words) - 15:01, 11 November 2023
  • | N3DS XL / Zelda: Majora's Mask (E)
    1 KB (182 words) - 22:04, 22 May 2016
  • ...Now each function reads the register, then returns the output value if it's <=0x40. Otherwise, the register is read again. If the output value is <=0x4 System update report(s):
    4 KB (509 words) - 19:51, 1 March 2016
  • ...n preventing [[FIRM|SAFE_FIRM]] from being launched is now set in Process9's main() if [[CONFIG9_Registers#CFG9_BOOTENV|CFG9_BOOTENV]] has bit0 set, tha There's exactly three code changes:
    8 KB (1,282 words) - 12:45, 26 November 2023
  • Used by NIM to sign a message that's not sent over SOAP, however the device certificate, output signature and ou
    1 KB (156 words) - 22:39, 27 December 2021
  • ...manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>. ...of 13h GMT, ticket-less downloads (of [[NCCH|contents]] as well as [[TMD]]s) started being blocked for a small number of titles, mainly 1st and 2nd par
    3 KB (459 words) - 12:46, 26 November 2023
  • ...ruined and we can only hope for his recovery. Because, in real life, there's no emunand.
    1 KB (200 words) - 22:23, 18 January 2016
  • * YouTube video of Loopy's Device (USB): http://www.youtube.com/watch?v=mT0DuQleuhY * YouTube video of Loopy's Device (HDMI): http://www.youtube.com/watch?v=s99fUS68AB4
    3 KB (452 words) - 14:58, 30 April 2020
  • Used by NIM to sign a message that's not sent over SOAP, however the device certificate, output signature and ou
    1 KB (159 words) - 22:39, 27 December 2021
  • ...BCSAR (Binary CTR Sound ARchive) format is the 3DS's equivalent of the Wii's BRSAR format. They're not the same structures, though, but they do have th ...tiple FILE partitions, but only 1 of them is the 'main' FILE partition (it's the one you get from the BCSAR header). The 'main' FILE partition contains
    8 KB (1,163 words) - 01:25, 26 June 2023
  • ...with the last 8-bytes being loaded from the 8-bytes following that u64. It's unknown whether movable.sed exists on development units.
    1 KB (232 words) - 15:24, 7 September 2013
  • appcore is the name given to one of the Old 3DS's ARM11 CPU cores. It refers to the core that is used to run games and other ...ile extension used for archives built from data from [[Title_list|Nintendo's CDN]].
    7 KB (1,092 words) - 10:49, 22 May 2017
  • ...manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>. System update report(s):
    2 KB (240 words) - 12:47, 26 November 2023
  • 00042a00 - Legend of Zelda - Link's Awakening - EUR 00052000 - Let's Golf 3D - EUR
    9 KB (820 words) - 17:02, 18 June 2013
  • ...bit is set if the corresponding key is '''not''' pressed, and unset if it's pressed.
    1 KB (154 words) - 13:41, 20 January 2021
  • ...The directory-name for these directories is the ExtdataID-Low. Then there's a sub-directory 00000000, which contains the actual extdata. Size and numbe Quota.dat is an extdata image, however it's unknown what this is used for.
    7 KB (1,021 words) - 01:50, 25 August 2013
  • ...is not already locked, this stores the provided parameters in the service's data structure and increments global counters for locked SD card and game c
    1 KB (177 words) - 21:00, 2 April 2023
  • ...19) + 21) % 10 = 8, which is not 0, thus 10 - 8 = 2, matching the example's check digit. | 3DS XL/LL || S || R
    9 KB (1,454 words) - 04:34, 26 September 2022
  • outputsize value 0x800 will be used when it's >=0x800. An error will be returned if actual_output_size is larger than out
    1 KB (191 words) - 04:31, 16 February 2017
  • ...r la dernière version. Les anciennes versions ont des bugs que j'ai corrigés.''' * Binaires des sauvegardes ([[Savegames|SAV]]) (décryptés ou cryptés)
    6 KB (965 words) - 16:24, 9 March 2012
  • ....) and to the KTimerAndWDTManager second virtual function, so that a timer's value can never be set to either a negative value or the past (which is wha ...constants were actually changed: the minimal value required for the kernel's minor version number (now 0x35, ie. 11.3 NFIRM, it used to be 0x23, ie. 5.0
    9 KB (1,478 words) - 12:45, 26 November 2023
  • ...o Badge Arcade''' is an application that allows getting badges for the 3DS's [[Home Menu]] via a claw machine-like game. This folder's contents are unknown (Mii related?). The contents are stored on Yaz0 compre
    9 KB (1,201 words) - 22:14, 27 March 2023
  • ...for the sizes, and value 10 for the buffer-headers(word before the buf-ptr(s)).
    2 KB (220 words) - 20:54, 17 April 2016
  • |[[User:SynRxn|SynRxn]] || ||0962-9776-8195 ||USA ||Let's pwn the 3DS! ||[[File:SynRxn.JPG|120px]] | dillan (2) || || 5086-4891-370|| Europe || dillan's| other 3ds, also for haxxing, add me!||
    7 KB (1,033 words) - 21:29, 22 January 2024
  • Nintendo Badge Arcade uses <code>MSBT</code> files for Badge Bunny's dialog and animations Nintendo Badge Arcade's <code>MSBT</code> files are loaded using <code>BOSS</code>. A large <code>S
    5 KB (665 words) - 06:15, 25 January 2023
  • ...nload all DLC content. And because all DLC content is under a set of title(s), they are viewed as one(?) title in system settings, and individual DLC ca ...one DLC_title_index, but for applications which have a *lot* of DLC there's more than one DLC_title_index(JPN Home Menu for themes for example).
    5 KB (700 words) - 14:24, 28 March 2023
  • The kernel is the core of the operating system(s) running on the ARM9 and ARM11 CPUs. Among other things, it is responsible
    1 KB (211 words) - 00:39, 8 August 2016
  • | ESHOP://50010000008842.PEAALL000000 || EUR || Rhythm Thief And The Emperor's Treasure || ARTP || 000400000006DA00 | ESHOP://50010000009261 || USA || Dillon's Rolling Western || JAME || 000400000007C400
    16 KB (2,365 words) - 23:02, 6 June 2017
  • ...manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>. System update report(s):
    2 KB (245 words) - 05:17, 18 July 2017
  • ...on et un lien sur 3DBrew à propos de l'application. Pas de liens externes, s'il vous plaît. .../ *hax payloads] avec le support de la version 11.3. Quelques instants après, hblauncher_loader v1.3 a été [https://github.com/yellows8/hblauncher_loa
    1 KB (222 words) - 23:44, 13 March 2017
  • | Pointer to the process's main thread. | This is the data for tracking and using all of the KProcess's handles.
    6 KB (875 words) - 19:37, 10 December 2016
  • ...rol Unlocker (for 3DS as found by neimod, and for the DSi/Wii as on marcan's site) * Updated: XOR Tool's file text boxes accept drag&drop (DSDecmp GUI's also).
    7 KB (1,231 words) - 06:20, 20 March 2019
  • System update report(s):
    2 KB (262 words) - 06:34, 15 September 2015
  • ...ly stops responding during this time, probably doing some processing of it's own.
    2 KB (288 words) - 12:23, 30 April 2013
  • ...optimized for RSA applications, so its behavior can be incoherent when RSA's invariants are broken. | Initialized by the ARM9 bootrom, but not used by any of the [[FIRM]]s. It's unknown what the ARM9 bootrom uses these for, if anything.
    4 KB (550 words) - 01:34, 6 February 2021
  • | Sets Process9's internal date/time, see below. This should be the current date/time (AgbBg seems to get it from MCU); it's converted from this structure into milliseconds, and saved into .data. Anot
    4 KB (584 words) - 11:18, 22 September 2019
  • | Tom Clancy's Ghost Recon: Shadow Wars | Virtue's Last Reward
    7 KB (885 words) - 14:45, 12 July 2019
  • ...filenames by [[AMPXI:InstallTitlesFinish]] / other install-finish command(s).
    1 KB (211 words) - 01:54, 25 October 2016
  • = PDN PTM Service "pdn:s" =
    2 KB (261 words) - 01:55, 20 January 2021
  • ...s utilizados en la Wii. El brillo de la pantalla que se puede establecer más que la DS Lite. La predecesora de la DSi. Llegó después de la original DS “Fat” y tiene 4 niveles de brillo de pantalla, como l
    5 KB (824 words) - 21:47, 29 December 2011
  • These are the same as the application's main [[NCCH#CXI|CXI]], except the ExeFS/RomFS only contains files which wer
    2 KB (233 words) - 04:06, 5 March 2017
  • ...aussi des informations à propos des codes produit et des numéros de série. S'il manque un jeu dans la liste, et que vous avez des informations à propos ...numéro de série des jeux vendus en magasin. Le 'X' à la fin des numéros de série et des codes produit ci-dessous désigne le code de région, il n'y a
    5 KB (723 words) - 20:11, 4 April 2013
  • IDBE is Nintendo's title icon database. Entries contain title icon, region, and name (in vario
    2 KB (260 words) - 08:04, 31 July 2018
  • The control content has content-index 0. It's unknown what if any of this is Home Menu specific. ...ll'' DLC content available under this DLC title(which can include DLC that's not yet accessible via the shop). <region> can be "USA", etc. <lang>, for t
    14 KB (2,326 words) - 07:10, 19 August 2017
  • The loader process .text was previously 0x331C-bytes, it's now 0x36F0-bytes. ...ned size used with svcControlMemory is ''always'' exactly the same as what's required for the codebin.
    8 KB (1,323 words) - 12:41, 26 November 2023
  • ...ion used by the DSi and is made redundant by 'ABCD'. LLLL is the TWL title's 'Unique ID'. There are restrictions on the Unique ID, see below for more in ...ta]] associated with the title. The decrypted TMD is available on Nintendo's CDN server at "http://nus.cdn.c.shop.nintendowifi.net/ccs/download/TitleIDh
    14 KB (2,246 words) - 02:45, 26 June 2019
  • Prédécesseur de la DSi. Elle est sortie après la DS PHAT et comporte des écrans qui possèdent un rétroéclairage jusqu ...le système à chaque étape, l'objectif étant généralement d'obtenir un accès et un contrôle complets.
    5 KB (819 words) - 19:51, 4 April 2013
  • Elisherer's Savefile collection: [http://sherer.co.il/saves http://sherer.co.il/saves]
    4 KB (348 words) - 16:54, 21 March 2012
  • ...manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>. System update report(s):
    2 KB (256 words) - 15:13, 17 December 2017
  • | [[Camera_Services#cam:s_.28PORT_CAL.29|cam:s]] | [[CECD_Services|cecd:s]]
    11 KB (1,765 words) - 06:00, 18 January 2023
  • * Rusty's Real Deal Baseball
    2 KB (279 words) - 21:58, 19 February 2022
  • System update report(s):
    2 KB (292 words) - 12:40, 26 November 2023
  • File offsets are non-inclusive of the header's size (0x200 bytes). Also, file headers which are not used are filled with a
    2 KB (275 words) - 21:33, 20 March 2016
  • Beaucoup des formats présentés peuvent être sauvegardés en étant modifiés. ...rol Unlocker (for 3DS as found by neimod, and for the DSi/Wii as on marcan's site)
    8 KB (1,286 words) - 13:25, 21 December 2014
  • ...rnel notifies the server whenever a new session is incoming via the server's port handle. The server can wait for this notification through svcWaitSynch ...These permissions are granted in the "service access control" of the title's [[NCCH/Extended Header#ARM11 Local System Capabilities|extended header]]. A
    17 KB (2,640 words) - 11:33, 21 October 2023
  • ...trust must be ''explicitly'' specified via the add-root-CA service command(s). | Failed to verify the HTTPS server's TLS certificate.
    7 KB (691 words) - 19:24, 3 June 2017
  • ...ory gamecard. This installer title likely deletes itself from NAND once it's finished installing titles.
    11 KB (1,335 words) - 12:53, 31 January 2014
  • ...the DISA hashes the Active Table (starting from tables's offset to tables's offset + table length) with SHA256. For most games there's only 1 partition (The SAVE partition) and some (like Asphalt 3D, Steel Dive
    21 KB (2,590 words) - 16:38, 24 August 2013
  • ...6 nodes[16]. Array of NetworkNodeIds, the values inside this array is what's passed to [[NWMUDS:GetNodeInformation]].
    2 KB (303 words) - 16:26, 14 April 2017
  • The instruction set seems to have been heavily inspired by Microsoft's vs_3_0 [http://msdn.microsoft.com/en-us/library/windows/desktop/bb172938%28 | Equivalent to Microsoft's [https://msdn.microsoft.com/en-us/library/windows/desktop/bb219790.aspx dst
    21 KB (3,327 words) - 11:38, 2 October 2023
  • ...the input buffers into files "bossdb:/%s_CL" and "bossdb:/%s_CLK", where "%s" is generated from the programID. ...New3DS programID-low bitmask is always clear for New3DS titles since that's how it was originally registered with [[Filesystem_services|FS]]. Hence, th
    13 KB (1,778 words) - 14:29, 9 March 2024
  • ...outputsize) Writes output to static_buf_id=0, outputsize 1 is used when it's >=1. ...outputsize) Writes output to static_buf_id=0, outputsize 1 is used when it's >=1.
    17 KB (2,334 words) - 09:11, 8 March 2023
  • System update report(s):
    2 KB (329 words) - 17:17, 1 July 2018
  • | Optional prize name(s) | Optional attachment name(s)
    16 KB (2,514 words) - 11:44, 26 March 2023
  • ...ize) was that the codebin got updated: .text was previously 0x00204C6C, it's now 0x00204D44. 4 functions were updated:
    2 KB (367 words) - 06:01, 3 June 2015
  • This block and all it's texture entries are 0x80 byte aligned.
    2 KB (339 words) - 02:10, 25 November 2017
  • ...eclaration objects, defining the order and parameters for each of a vertex's components. | Multiplier for this component's values (float)
    11 KB (1,663 words) - 01:01, 5 May 2024
  • ...nel heap. Each is used for a different category specified by the exheader's resource limit category specifier in the exheader [[NCCH/Extended_Header#AR
    2 KB (347 words) - 01:29, 12 December 2016
  • <br/>''NB: Les commentaires sont laissés dans leur langue originelle.'' | Let's hack 3DS! I changed my code.Add again, please.
    2 KB (372 words) - 02:05, 4 February 2013
  • | align=center | CLTS || '''C'''TR '''L'''ayout '''T'''exture '''S'''RT animation.
    2 KB (322 words) - 17:20, 14 March 2017
  • These IDs are an application's online gaming IDs. ...ot set, it causes the application's usage to be omitted from the Home Menu's [[Home_Menu#Cache.dat & CacheD.dat|icon cache]], as well as in [[????????|o
    8 KB (1,255 words) - 10:35, 31 December 2019
  • ...me cases by svcSetDebugThreadContext, to store VFP registers in the thread's register storage. ...mode, causes interrupt 30 to set as pending. Only set on core 1 as core 1's timer is used for everything.
    9 KB (1,384 words) - 21:39, 25 November 2021
  • ...the calculated checksum is written to output as big-endian(hence on 3DS it's byte-swapped before writing to output). ...used for [[Application_Manager_Services|AM]] CIA file-writes on the client(s). Normally this is 0x0003FFC0. This appears to be validated by the client a
    8 KB (1,343 words) - 07:33, 12 April 2016
  • ...t" another 3DS, StreetPass Mii Plaza recreates the meeting using the owner's Miis. From here the user, can use these Miis in mini-games. ...reetPass Quest(Find Mii) - A simplistic medieval themed RPG where the user's Mii is kidnapped, and the user must use Miis met in StreetPass, to rescue h
    7 KB (1,146 words) - 15:19, 12 May 2024
  • '''Mii Maker''' lets you create [[Mii]]s, and is the successor of the Wii's Mii Channel. ...t eventually sends a bunch of frames, each containing the whole Mii. There's a 6-byte header, followed by [http://wiibrew.org/wiki/Wiimote/Mii_Data Mii
    5 KB (811 words) - 14:54, 18 February 2024
  • ...ilaires aux [[Sauvegardes de Jeux]] FLASH, ils ne peuvent pas être décryptés avec la faille xorpad comme les sauvegardes. Les données additionnelles ne ...que les SRLs sources : le code ARM7, le code ARM9 et les données sont mixés ensemble. Le fichier peur contenir les données d'un DsiWare non installé,
    6 KB (1,024 words) - 17:26, 18 June 2013
  • ...manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>. ...ry randomization code introduced with [[10.4.0-29]] was updated so that it's now used for OoT3D and Cubic Ninja (checked in the same aforementioned orde
    9 KB (1,264 words) - 12:42, 26 November 2023
  • ...OT] || None || JPN || 7-11 || A LAN-only hostname used is for the retailer's site linked to from the NZone server.
    12 KB (1,004 words) - 10:57, 22 June 2013
  • | Similar to import.db, except it's used in conjunction with tmp_t.db, for installing [[Download Play]] Childre An entry contains information taken from both the application NCCH file(s) and TMD.
    6 KB (924 words) - 13:16, 13 September 2023
  • ...a for example. Applications' StreetPass data are stored in the CECD module's NAND savegame, applications can move received StreetPass data to an arbitra ...nuous_scan_000". Unlike beacons, which are actively advertising the device's presence, the 3DS is essentially actively looking for other 3DSes. This des
    15 KB (2,149 words) - 20:59, 12 May 2024
  • =SystemControl PTM Service "ptm:s"=
    4 KB (434 words) - 02:37, 27 November 2023
  • ...tspot Base64-encoded URL (usually unused, optionally links to the retailer's website) ...f at all.("Unknown" indicates that the hotspot is present in v1024, but it's unknown whether it was in the previous version.)
    14 KB (1,998 words) - 12:17, 6 July 2017
  • There's a dedicated Process9 thread for receiving data from PXI(in newer FIRM this
    3 KB (449 words) - 19:42, 18 August 2016
  • sprintf(device_path, &quot;%s/%08x/%08x&quot;, extdata_path, SubDirID, SubFileID); ...g extdata, the unique identifier is used to match the ID stored in subfile's [[DISA and DIFF#DIFF header|DIFF header]]. If the ID doesn't match, mountin
    15 KB (2,181 words) - 20:55, 22 March 2024
  • ...en Home Menu is active, the system runs at 804MHz. For everything else, it's 268MHz, except when the app(let) has the required flag set. See [[NCCH/Exte ...S has much of it's internals housed in a SoC (System on Chip) just like it's predecessors. This is done to reduce build costs, cut down on power consump
    10 KB (1,539 words) - 16:32, 15 October 2023
  • ==cam:s (PORT_CAL) == | Output buffer's pixels are arranged linearly. Used when outputting to the framebuffer.
    20 KB (2,264 words) - 11:41, 6 August 2020
  • System update report(s):
    6 KB (897 words) - 12:32, 26 November 2023
  • Parts of the first NCCH block's header are found around 0x1000 for whatever reason. NCSD can hold up to 8 p
    3 KB (395 words) - 17:42, 1 December 2018
  • ...guardadas de varios juegos de la 3DS en la página de [[Games|Juegos (Inglés)]]. ...riptando un texto plano conocido (en nuestro caso, ceros) básicamente estás “regalando” tu clave.
    14 KB (2,232 words) - 23:24, 23 January 2018
  • There's one entry per 0x1000-byte sector, counting from physical sector 1 (sector 0 ...rd savegame and other images/files, it's initially all 0xFFFFFFFF until it's formatted where some of the blocks are overwritten with encrypted data.
    12 KB (1,859 words) - 16:15, 3 September 2021
  • ...X-Nintendo-Device-Model". This is the only *dedicated* request-header that's contains anything Old3DS/New3DS specific. This was implemented with [[9.0.0 Even though ACT-sysmodule uses [[PTM_Services|ptm:s]], it doesn't use CheckNew3DS at all.
    9 KB (1,020 words) - 20:30, 2 March 2024
  • Specifying write-permission without read-permission is invalid, it's handled the same way as if the RW bits were not set(ARM11-MPCore doesn't su ...esn't fit. This system call is used by [[RO Services]] to map the program's code and heap into ro. Memory mapped by MapProcessMemory is unmapped by Unm
    10 KB (1,583 words) - 03:29, 31 March 2024
  • ...3DS to automatically download content, notifications, and software when it's in standby mode.(SpotPass may download/upload some content while the 3DS is ...st 0x10-bytes are all-zero except the first byte which is usually 0x80. It's unknown what the first 0x10-bytes are used for.
    7 KB (1,159 words) - 19:58, 23 April 2024
  • ...lemented with [[9.6.0-24|9.6.0-X]] FIRM. Bit0=1 enables using bits 1-2, it's unknown what these two bits are actually used for(the value of these two bi ...he boot ROM check, sighax may be used to fake-sign NAND headers. Process9's check will fail, however, unless patched.
    9 KB (1,304 words) - 14:53, 12 September 2022
  • Each I2C service can only access certain I2C [[I2C_Registers|device(s)]]. When the specified deviceid isn't accessible, error 0xE0A02FEA is retur
    4 KB (523 words) - 11:11, 29 April 2024
  • ''FILENAMEi'' seems to return 403 if user's region doesn't match, 404 if ''i''th video doesn't exist and the video itse
    5 KB (518 words) - 04:35, 29 March 2013
  • | Input: N dot H, Contents: x^s s is the specularity factor for Blinn-Phong.
    8 KB (1,202 words) - 18:51, 22 July 2018
  • = CECD Service "cecd:s" =
    5 KB (603 words) - 16:55, 15 April 2024
  • s* = shared register (explaination below this table) | s
    31 KB (5,039 words) - 15:15, 28 April 2024
  • ...due to the currently used exheader accessinfo not having the required bit(s) set. (This error can also indicate that the required ARM9 access-control m ...used by attempting to open a FSUSER archive where none of the required bit(s) for the archive are set in the user-process exheader accessinfo.
    11 KB (1,189 words) - 12:08, 8 June 2022
  • | Accepted peer's identity
    3 KB (475 words) - 16:03, 30 December 2019
  • | %.*s
    4 KB (527 words) - 22:48, 1 August 2017
  • System update report(s):
    3 KB (527 words) - 03:48, 10 May 2016
  • | IDs of the attached process's threads that were running on each core at the time of the @ref svcBreakDebu
    3 KB (467 words) - 02:09, 3 June 2020
  • This page's goal is to describe parts of Nintendo's OpenGL implementation for the 3DS as we reverse engineer it to better under ...b Wars. The reason for this is that it's a fairly graphics-heavy game that's available on the eShop for '''free''', so it seems like a good target for a
    32 KB (4,643 words) - 19:38, 25 August 2015
  • These hashes are the same hashes used for generating each section's MAC stored in the metadata block. X = 0x40 + totalcontentsections*0x20.
    5 KB (726 words) - 10:03, 5 May 2013
  • ...Mis à part le menu, le management des DsiWare et les autres fonctionnalités présentes dans le firmware 2.0.0-2 le sont aussi dans ce firmware. ...areil photo 3DS, Place Mii mise à jour, transfert des titles 3DS téléchargés depuis une 3DS vers une autre, eShop amélioré, possibilité de scanner de
    3 KB (500 words) - 12:53, 22 December 2011
  • CRC-8-CCITT is a fast error detection algorithm. It's a standard CRC-8, with polynomial x⁸+x²+x+1. See the [http://en.wikipedi
    2 KB (454 words) - 01:55, 16 April 2015
  • The NS ('''N'''intendo User Interface '''S'''hell) system module is the first module launched from a CTR-NAND title af ...alternate menu. This title could be used as a recovery process, however it's normally not used after the factory.
    24 KB (2,980 words) - 00:37, 24 July 2023
  • ...used the event: 0 = svc 0xFF, 1 = breakpoint, 2 = watchpoint (otherwise it's not updated).
    5 KB (698 words) - 00:10, 3 June 2020
  • ...d with the latest CTRSDK(only change in .code was the CTRSDK version value(s) used with [[ErrDisp]]).
    4 KB (636 words) - 12:38, 26 November 2023
  • ...15 Clear (0=No Change, 1=Clear). Reportedly clears bits in DSP_PSEM. [that's probably nonsense, clearing bits in DSP_SEM would make more sense]
    4 KB (541 words) - 14:24, 15 April 2016
  • Here's a set of sample gamecard commands that a 3DS sends to a 3DS gamecard: ...nitial dummy bytes, and eventually responds with a 0x200 byte header. Here's an example for Lego Starwars 3:
    8 KB (1,068 words) - 13:59, 26 May 2023
  • | Manufacturing date (of the SoC?). Usually month(s) before the dates in the logs stored in [[Flash_Filesystem|TWLNAND]]. Each
    4 KB (600 words) - 04:21, 19 April 2023
  • |0-1||Wrap S (Clamp = 0, Repeat = 1, Mirror = 2) ...ne the content, the corners and the sides of it, depending on what mode it's set to.
    11 KB (1,727 words) - 20:50, 3 April 2024
  • |Luigi's Mansion 2||branch:origin/release/ngs/3.4.x.3 build:3_4_16_3_0
    4 KB (526 words) - 13:53, 5 January 2024
  • If the TMD file is obtained from Nintendo's CDN, then it will have two [[Certificates|certificates]] appended at the en
    4 KB (649 words) - 14:22, 28 July 2020
  • There's separate GSP-module titles for Old3DS and New3DS. PTM CheckNew3DS is only u
    6 KB (646 words) - 21:59, 18 October 2023
  • * Pressing X+Y toggles HOME Menu's region, language, creation date/time, revision information, and percentage
    4 KB (668 words) - 12:50, 26 February 2023
  • ...P one can then for example try exploiting [[3DS_System_Flaws|system]] flaw(s). ...r-length of the UTF-16 string at offset 0x1C. When copying this string, it's essentially a memory-copy with lenval*2, not a string-copy. This can be use
    37 KB (5,887 words) - 15:31, 5 January 2024
  • | Lost in masher's retirement ...ython. Allows you to quickly poke service-commands and <code>syscall</code>s over Wi-Fi from a Python shell on your PC. Useful during reverse-engineerin
    27 KB (3,837 words) - 21:26, 23 October 2023
  • = NIM shop service "nim:s" = ...o.net/title/0x%16llx/ext_key?country=%s, where %16llx is the title ID and %s is a country code as used in the [[EShop|eShop]].
    24 KB (3,499 words) - 14:46, 12 November 2023
  • The data block is aligned to 0x20 bytes, as well as the data field's actual sample data.
    7 KB (932 words) - 00:30, 10 May 2018
  • These hashes are the same hashes used for generating each section's MAC stored in the metadata block. X = 0x40 + totalcontentsections*0x20.
    5 KB (728 words) - 20:56, 8 September 2018
  • ...ified in the exheader), the mask is just the affinity mask from the thread's owner KProcess. If the CPU ID is -1(meaning any core), the affinity mask i
    5 KB (794 words) - 01:48, 22 May 2020
  • ...o be displayed repeated on the entire display. With the HSync interrupt it's possible to "race the beam" to (ab)use this feature. ...een, it does scanline doubling instead. Considering that the bottom screen's table doesn't work on the top screen, this could give a hint as to how the
    21 KB (3,400 words) - 15:19, 11 March 2024
  • ...list of titleIDs to the outbuf, this is for titles with content-lock-seed(s) stored in SEEDDB. (u32 total_titleids_probably, ((Size<<4) <nowiki>|</now ...ed in the above table is for system-version v2.x, therefore permission bit(s) added with newer FIRM may be missing from this.
    28 KB (3,588 words) - 16:24, 17 August 2023
  • ...ched through HTTP using the link to default update server, using the title's [[TMD]] URL where "cetk" is used instead of "tmd" for the URL. The 3DS NIM
    5 KB (752 words) - 02:42, 14 October 2019
  • Kernel11 powers down VRAM (it's unclear whether bit15 is power-down or self-refresh mode) by first disablin I2S1 clock enable bit seems to be unimplemented. Maybe it's because DSP clock enable drives it?
    12 KB (1,833 words) - 02:32, 27 January 2021
  • | RSA-2048 signature of the FIRM header's SHA-256 hash. The signature is checked when bootrom/Process9 are doing FIRM ...y has an additional layer of crypto. At the end of each ARM9 binary, there's a plaintext loader. The format of the FIRM header is identical to regular 3
    21 KB (3,310 words) - 02:27, 17 March 2023
  • ...nitial dummy bytes, and eventually responds with a 0x200 byte header. Here's an example for Lego Starwars 3:)
    8 KB (671 words) - 14:18, 26 May 2013
  • * Find the active partition table and the partition(s). * Unwrap DPFS tree of partition(s) by reconstructing active data.
    15 KB (2,321 words) - 08:21, 2 January 2020
  • ...3DS and the latter is for New 3DS. They are used to update the panda unit's 'firmware'/SDK Version. The romfs of the CSU contains the contents that wil *ExtData - From this tab, the 3DS's [[Extdata]] (except NAND shared extdata) can be deleted.
    31 KB (5,069 words) - 00:08, 12 March 2022
  • | Total amount of output data written relative to struct+0. 0xC when there's no entries. ...input passphrase. This input passphrase is fixed for [[Download Play]], it's unique per local-WLAN application. The CTR is a MD5 hash over the below 0x1
    25 KB (3,781 words) - 08:40, 23 July 2023
  • * "rom:/rom/" This directory contains the ROM file(s). Filenames used under here don't matter: the filename is determined by the ...its).<br/>If the GBA title supports a button-combo based sleep mode and it's set here, Agbbg spoofs this combo when closing the 3DS' lid to enter proper
    11 KB (1,795 words) - 20:48, 3 September 2021
  • | System Writable (cfg:s / cfg:i) | System Readable (cfg:s / cfg:i)
    15 KB (2,242 words) - 00:32, 23 February 2024
  • ...tal". Plus the cost of the 3DS we will be donating for the hardware sample(s).
    5 KB (903 words) - 23:43, 12 January 2014
  • ...ser.jp/filter/44.html](the Referrer header value is set to the same URL it's actually requesting). ...in SKATER codebin was updated to a version which fixed libstagefright vuln(s): the vuln used in [[browserhax|browserhax_fright]] at the time of sysupdat
    45 KB (6,656 words) - 22:39, 2 April 2023
  • An exploit that uses a buffer overflow in a TWL export banner's title strings to gain rop execution. ...rocess with full ARM11 system permissions, by replacing an installed title's ExeFS and ExHeader during load time. It is currently the only option for ru
    16 KB (2,308 words) - 12:27, 23 January 2024
  • Most of these originated in the "icons" tab of the DS's standard software keyboard, and were extensively used in its firmware UI.
    5 KB (749 words) - 22:34, 11 March 2018
  • ...in QR codes, 4 additional bytes are added. Two null bytes and a CRC-16. It's the exact same CRC-16 as for the Wii blocks on the 0x5e first bytes. It see | Creator's full MAC
    14 KB (2,306 words) - 21:38, 8 February 2022
  • |Tom Clancy's Ghost Recon® |Dr. Robotnik's
    40 KB (3,435 words) - 11:57, 4 May 2017
  • ...r waking up one thread too, but will also be started again immediately. It's unknown whether PULSE is a valid reset type for events. ...Event, the kernel fetches the first [[KEventInfo]] instance of the process's [[KDebug]]. The debug event is handled and parsed into this structure.
    45 KB (6,248 words) - 02:35, 30 November 2023
  • ...angate''', is an external device which adds NFC capabilities for [[amiibo]]s to old Nintendo 3DS and Nintendo 2DS consoles, using the infrared port on t ...hed simultaneously with Animal Crossing Happy Home Designer, with which it's optionally bundled; it can also be bought standalone at a nominal price of
    16 KB (2,406 words) - 23:35, 17 October 2019
  • | Invalid titleID(?) / the specified title(s) don't exist.
    10 KB (985 words) - 15:56, 28 June 2022
  • ...t actual keys. However, there is an unknown 0x10-byte block @ +0x124(there's a ptr initialized for this block elsewhere). ...found with a priority(firmhdr+4) >= to the value for the current partition's FIRM priority.
    22 KB (3,548 words) - 00:07, 5 July 2023
  • ...e its already in, for example: logging an application as suspended when it's already been suspended, logging as application as closed when it wasn't ope
    7 KB (1,046 words) - 02:36, 27 November 2023
  • | Buffer id of the buffer that's just started playing.
    6 KB (858 words) - 07:50, 27 January 2024
  • Reading from AES_RDFIFO when there's no data available in the RDFIFO will result in reading the last word that w ...) shares the same normal-key, while at the same time having different keyX's. This suggests they were set to same normal-key by bootrom.
    22 KB (3,421 words) - 12:30, 28 July 2020
  • ...es et, bien que nous ayons fait d'énormes progrès grâce aux efforts combinés de nombre de contributeurs, il nous faut bien admettre que l'on progressera ...e la 3DS et, par conséquent, les données qui sont privées (algorithmes, clés de cryptage...), le restent.
    6 KB (1,014 words) - 18:19, 17 July 2013
  • | ARM9-only internal memory (ARM7's internal regions are mapped here as well) ...nly location Boot9 uses for storing the loaded FIRM headers internally, it's not stored anywhere else.
    30 KB (4,446 words) - 00:04, 28 January 2021
  • *L+R+X - "今天不再增加"("Preclude today's Increment")不知道这到底怎么影响到游戏金币数量的。
    17 KB (917 words) - 16:29, 13 May 2013
  • | [[9.6.0-24|9.6.0-X]]'s [[FIRM#New_3DS_FIRM|arm9loader]] changed the contents of keyslots 0x19-0x1F ...ExeFS/RomFS, and the size is specified by the hash region fields. Nintendo's NCCH validation code seems to have the size of this region fixed to 0x200 b
    16 KB (2,366 words) - 20:01, 1 May 2019
  • For handling each command that's actually implemented, the AM cmdhandler function calls a vtable funcptr.
    12 KB (1,186 words) - 15:08, 25 August 2022
  • Inspired by Nintendo's format for their makerom, a yaml configuration file is required for creatin
    9 KB (1,391 words) - 05:19, 6 June 2016
  • On some 3DS systems(such as 3DS XL), there's a plaintext FAT16 boot record located at NAND offset 0x4000. This block doe
    10 KB (1,426 words) - 04:06, 7 February 2017
  • | Unknown. Probably resets something, as it's poked in a similar pattern to the SoC reset signals.
    37 KB (4,281 words) - 07:35, 24 September 2021
  • ...e-soldered the 3DS's RAM chip and hooked it and the RAM pinouts on the 3DS's PCB up to a custom RAM dumping setup. He ''has'' published photos showing h ...programming with it initially. From ROP one could then exploit system flaw(s), see below.
    91 KB (13,758 words) - 16:00, 20 November 2023
  • ...ates (NUP) - The Nintendo 3DS is updated by downloading data from Nintendo's [[Title list|CDN]]. ...ly StreetPass Mii Plaza and the [[NVer]] title were updated. From Nintendo's release notes: "System stability improvements and other adjustments".
    55 KB (8,103 words) - 02:55, 23 May 2023
  • ...alized by the [[NWM_Services|NWM]] module and is loaded from the WiFi card's EEPROM.
    10 KB (1,456 words) - 21:02, 8 January 2021
  • This command updates bit0 through (at least) bit2 of the channel's CNT register. These bits control the duty of a PSG square wave:
    13 KB (1,922 words) - 22:35, 15 April 2015
  • | The initial AppData handling doesn't appear to have any vuln(s), going by manual code-RE for update v2.0. Fuzzing wasn't attempted.
    10 KB (1,500 words) - 14:47, 21 September 2022
  • Somewhat misleading, these values are actually used for clamping the MCU's raw slider readings to comprehensible values.
    10 KB (1,440 words) - 21:27, 13 August 2023
  • In this layout, all data is duplicated by DISA's DPFS tree, which is what the parameter <code>duplicate data</code> implies.
    16 KB (2,595 words) - 20:54, 22 March 2024
  • ...s the above <code>cpuspeed</code> flag set, runs much faster on New3DS. It's unknown how exactly the system handles these flags.
    15 KB (2,225 words) - 20:09, 9 August 2023
  • ...e datetime registers in decimal form instead of as a Binary Coded Decimal</s> ...ce is only signaled (code at 0x3312-0x331A) when writing register 0x07, it's skipped otherwise. Register 0x07 gets written anyways, just the actual sign
    13 KB (1,673 words) - 17:56, 6 January 2021
  • ...pps, priorities between 0x18 and 0x3F are allowed. The priority of the app's main thread seems to be 0x30.
    13 KB (1,904 words) - 12:45, 19 August 2023
  • ...ters are written to through GPU commands. They are used to control the GPU's behavior, that is to say tell it to draw stuff and how we want it drawn. ...ll not be overwritten, setting bit 17 to zero indicates that the parameter's second LSB will not be overwritten, etc. This means that for instance comma
    128 KB (17,012 words) - 18:36, 24 January 2024
  • ! Bit Mask(s) ...eader dependency list handling change is for the [[New 3DS]] system-module(s), which do not exist on Old3DS.
    55 KB (6,597 words) - 17:02, 24 April 2024
  • ...adds the specified builtin root CA to the specified root-CA chain. When it's not already loaded, the DER cert is loaded from SSL module .data. Otherwise
    13 KB (1,539 words) - 23:05, 29 March 2016
  • ...ported. On July 11th the main-app title was removed from USA/JPN eShop: it's no longer listed on the former, while on the latter it can't be purchased.
    19 KB (2,692 words) - 02:55, 23 May 2023
  • | Smart Girl's Playhouse® Mini | Anne's Doll Studio: Princess Collection
    147 KB (13,840 words) - 04:34, 5 April 2017