This page describes the format of the Cfg NAND savegame. These blocks can be accessed with the Cfg service commands.
Structure of save-file "/config"
| Offset
|
Size
|
Description
|
| 0x0
|
0x2
|
Total entries
|
| 0x2
|
0x2
|
Data entries offset
|
| 0x4
|
0x4558
|
Block entries
|
| 0x455C
|
|
Data for the entries
|
The filesize for this /config file is 0x8000-bytes.
Configuration block entry
| Offset
|
Size
|
Description
|
| 0x0
|
0x4
|
BlkID
|
| 0x4
|
0x4
|
Offset to the data for this block when size is >4, otherwise this word is the data for this block
|
| 0x8
|
0x2
|
Size
|
| 0xA
|
0x2
|
Flags
|
Configuration blocks
| BlkID
|
Size
|
Flags
|
Description
|
| 0x00050005
|
0x20
|
?
|
Stereo camera settings?
|
| 0x00070001
|
0x1
|
?
|
Sound output mode?
|
| 0x00080000
|
0xC00
|
0x2?
|
Wifi configuration slot0.
|
| 0x00080001
|
0xC00
|
0x2?
|
Wifi configuration slot1.
|
| 0x00080002
|
0xC00
|
0x2?
|
Wifi configuration slot2.
|
| 0x00090000
|
0x8
|
0x2?
|
This contains a u64 ID, used by processes using NWMUDS:Initialize. The first word is the same as LocalFriendCodeSeed, while the latter is a separate random word.
|
| 0x00090001
|
0x8
|
0xE
|
This console-unique u64 used by GenHashConsoleUnique is generated with the LocalFriendCodeSeed and with random data.
|
| 0x000A0000
|
0x1C
|
0xE
|
Username
|
| 0x000A0002
|
0x1
|
0xA
|
Language
|
| 0x000B0000
|
0x4
|
0x8
|
CountryInfo
|
| 0x000B0001
|
0x800
|
0x2?
|
Country name in UTF-16, every 0x80-bytes is an entry for each language(not all entries are set).
|
| 0x000B0002
|
0x800
|
0x2?
|
State name in UTF-16, every 0x80-bytes is an entry for each language.
|
| 0x000C0000
|
0xC0
|
?
|
Restricted photo exchange data, and other info.
|
| 0x000C0001
|
0x14
|
?
|
Same as above?
|
| 0x000D0000
|
0x4
|
?
|
u16 at offset 0x0: EULA Version which was agreed to.
|
| 0x000F0000
|
0x10
|
0x8?
|
Unknown, used by NS on dev-units for svcKernelSetState, where Type is 6. During NS startup on debug-units, NS compares the u32 from +8 in this config-block with the APPMEMTYPE. When those don't match NS starts a FIRM-launch(with the same FIRM titleID as the currently running one) to boot into a FIRM with the APPMEMTYPE value from this config-block.
|
| 0x000F0004
|
0x4
|
0x8?
|
The first u8 is the System-Model value, the last 3-bytes are unknown.
|
| 0x00110000
|
0x4
|
?
|
The low u16 indicates whether the system setup is required, such as when the system is booted for the first time or after doing a System Format: 0 = setup required, non-zero = no setup required.
|
| 0x00110001
|
0x8
|
0xA?
|
TitleID of the menu to launch, used by NS on dev units. (This block can be edited on dev units with Config)
|
| 0x00130000
|
0x4
|
?
|
If response is 0x100 then debug mode is enabled.
|
| 0x00160000
|
0x4
|
0x8?
|
Unknown, first byte is used by config service-cmd 0x00070040. (Unknown whether the last 3-bytes are used)
|
The dev unit TID block only exists on dev units.
Languages
| ID
|
Description
|
| 0
|
ja
|
| 1
|
en
|
| 2
|
fr
|
| 3
|
de
|
| 4
|
it
|
| 5
|
es
|
| 6
|
zh
|
| 7
|
ko
|
| 8
|
nl
|
| 9
|
pt
|
| 10
|
ru
|
CountryInfo
| Byte
|
Description
|
| 0
|
?
|
| 1
|
?
|
| 2
|
?
|
| 3
|
Country code, same as DSi/Wii country codes. Value 0xff is invalid.
|
0x000A0000 Block
| Byte
|
Description
|
| 0x0-0x13
|
UTF-16 username, with no NULL-terminator.
|
| 0x14-17
|
Usually zero?
|
| 0x18-0x1B
|
u32 NGWord version the username was last checked with. If this value is less than the u32 stored in the NGWord CFA "romfs:/version.dat", the system then checks the username string with the bad-word list CFA again, then updates this field with the value from the CFA.
|