https://switchbrew.org/w/api.php?action=feedcontributions&feedformat=atom&user=Shinyquagsire23 2026-05-12T13:07:12Z User contributions MediaWiki 1.43.1 https://switchbrew.org/w/index.php?title=HID_services&diff=11682 2022-05-05T21:40:34Z

<p>Shinyquagsire23: Filling in some blanks on device types</p> <hr /> <div>= hid =<br /> This is &quot;nn::hid::IHidServer&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#CreateAppletResource]]<br /> |-<br /> | 1 || [[#ActivateDebugPad]]<br /> |-<br /> | 11 || [[#ActivateTouchScreen]]<br /> |-<br /> | 21 || [[#ActivateMouse]]<br /> |-<br /> | 31 || [[#ActivateKeyboard]]<br /> |-<br /> | 32 || [6.0.0+] [[#SendKeyboardLockKeyEvent]]<br /> |-<br /> | 40 || [[#AcquireXpadIdEventHandle]]<br /> |-<br /> | 41 || [[#ReleaseXpadIdEventHandle]]<br /> |-<br /> | 51 || [[#ActivateXpad]]<br /> |-<br /> | 55 || [[#GetXpadIds]]<br /> |-<br /> | 56 || [[#ActivateJoyXpad]]<br /> |-<br /> | 58 || [[#GetJoyXpadLifoHandle]]<br /> |-<br /> | 59 || [[#GetJoyXpadIds]]<br /> |-<br /> | 60 || [[#ActivateSixAxisSensor]]<br /> |-<br /> | 61 || [[#DeactivateSixAxisSensor]]<br /> |-<br /> | 62 || [[#GetSixAxisSensorLifoHandle]]<br /> |-<br /> | 63 || [[#ActivateJoySixAxisSensor]]<br /> |-<br /> | 64 || [[#DeactivateJoySixAxisSensor]]<br /> |-<br /> | 65 || [[#GetJoySixAxisSensorLifoHandle]]<br /> |-<br /> | 66 || [[#StartSixAxisSensor]]<br /> |-<br /> | 67 || [[#StopSixAxisSensor]]<br /> |-<br /> | 68 || [[#IsSixAxisSensorFusionEnabled]]<br /> |-<br /> | 69 || [[#EnableSixAxisSensorFusion]]<br /> |-<br /> | 70 || [[#SetSixAxisSensorFusionParameters]]<br /> |-<br /> | 71 || [[#GetSixAxisSensorFusionParameters]]<br /> |-<br /> | 72 || [[#ResetSixAxisSensorFusionParameters]]<br /> |-<br /> | 73 || [[#SetAccelerometerParameters]]<br /> |-<br /> | 74 || [[#GetAccelerometerParameters]]<br /> |-<br /> | 75 || [[#ResetAccelerometerParameters]]<br /> |-<br /> | 76 || [[#SetAccelerometerPlayMode]]<br /> |-<br /> | 77 || [[#GetAccelerometerPlayMode]]<br /> |-<br /> | 78 || [[#ResetAccelerometerPlayMode]]<br /> |-<br /> | 79 || [[#SetGyroscopeZeroDriftMode]]<br /> |-<br /> | 80 || [[#GetGyroscopeZeroDriftMode]]<br /> |-<br /> | 81 || [[#ResetGyroscopeZeroDriftMode]]<br /> |-<br /> | 82 || [[#IsSixAxisSensorAtRest]]<br /> |-<br /> | 83 || [6.0.0+] [[#IsFirmwareUpdateAvailableForSixAxisSensor]]<br /> |-<br /> | 84 || [13.0.0+] EnableSixAxisSensorUnalteredPassthrough<br /> |-<br /> | 85 || [13.0.0+] IsSixAxisSensorUnalteredPassthroughEnabled<br /> |-<br /> | 86 || [13.0.0+] StoreSixAxisSensorCalibrationParameter<br /> |-<br /> | 87 || [13.0.0+] LoadSixAxisSensorCalibrationParameter<br /> |-<br /> | 88 || [13.0.0+] GetSixAxisSensorIcInformation<br /> |-<br /> | 89 || [13.0.0+] ResetIsSixAxisSensorDeviceNewlyAssigned<br /> |-<br /> | 91 || [[#ActivateGesture]]<br /> |-<br /> | 100 || [[#SetSupportedNpadStyleSet]]<br /> |-<br /> | 101 || [[#GetSupportedNpadStyleSet]]<br /> |-<br /> | 102 || [[#SetSupportedNpadIdType]]<br /> |-<br /> | 103 || [[#ActivateNpad]]<br /> |-<br /> | 104 || [[#DeactivateNpad]]<br /> |-<br /> | 106 || [[#AcquireNpadStyleSetUpdateEventHandle]]<br /> |-<br /> | 107 || [[#DisconnectNpad]]<br /> |-<br /> | 108 || [[#GetPlayerLedPattern]]<br /> |-<br /> | 109 || [5.0.0+] [[#ActivateNpadWithRevision]]<br /> |-<br /> | 120 || [[#SetNpadJoyHoldType]]<br /> |-<br /> | 121 || [[#GetNpadJoyHoldType]]<br /> |-<br /> | 122 || [[#SetNpadJoyAssignmentModeSingleByDefault]]<br /> |-<br /> | 123 || [[#SetNpadJoyAssignmentModeSingle]]<br /> |-<br /> | 124 || [[#SetNpadJoyAssignmentModeDual]]<br /> |-<br /> | 125 || [[#MergeSingleJoyAsDualJoy]]<br /> |-<br /> | 126 || [[#StartLrAssignmentMode]]<br /> |-<br /> | 127 || [[#StopLrAssignmentMode]]<br /> |-<br /> | 128 || [[#SetNpadHandheldActivationMode]]<br /> |-<br /> | 129 || [[#GetNpadHandheldActivationMode]]<br /> |-<br /> | 130 || [[#SwapNpadAssignment]]<br /> |-<br /> | 131 || [[#IsUnintendedHomeButtonInputProtectionEnabled]]<br /> |-<br /> | 132 || [[#EnableUnintendedHomeButtonInputProtection]]<br /> |-<br /> | 133 || [5.0.0+] [[#SetNpadJoyAssignmentModeSingleWithDestination]]<br /> |-<br /> | 134 || [6.1.0+] [[#SetNpadAnalogStickUseCenterClamp]]<br /> |-<br /> | 135 || [8.0.0+] [[#SetNpadCaptureButtonAssignment]]<br /> |-<br /> | 136 || [8.0.0+] [[#ClearNpadCaptureButtonAssignment]]<br /> |-<br /> | 200 || [[#GetVibrationDeviceInfo]]<br /> |-<br /> | 201 || [[#SendVibrationValue]]<br /> |-<br /> | 202 || [[#GetActualVibrationValue]]<br /> |-<br /> | 203 || [[#CreateActiveVibrationDeviceList]]<br /> |-<br /> | 204 || [[#PermitVibration]]<br /> |-<br /> | 205 || [[#IsVibrationPermitted]]<br /> |-<br /> | 206 || [[#SendVibrationValues]]<br /> |-<br /> | 207 || [4.0.0+] [[#SendVibrationGcErmCommand]]<br /> |-<br /> | 208 || [4.0.0+] [[#GetActualVibrationGcErmCommand]]<br /> |-<br /> | 209 || [4.0.0+] [[#BeginPermitVibrationSession]]<br /> |-<br /> | 210 || [4.0.0+] [[#EndPermitVibrationSession]]<br /> |-<br /> | 211 || [7.0.0+] [[#IsVibrationDeviceMounted]]<br /> |-<br /> | 212 || [11.0.0+] [[#SendVibrationValueInBool]]<br /> |-<br /> | 300 || [3.0.0+] [[#ActivateConsoleSixAxisSensor]]<br /> |-<br /> | 301 || [3.0.0+] [[#StartConsoleSixAxisSensor]]<br /> |-<br /> | 302 || [3.0.0+] [[#StopConsoleSixAxisSensor]]<br /> |-<br /> | 303 || [5.0.0+] [[#ActivateSevenSixAxisSensor]]<br /> |-<br /> | 304 || [5.0.0+] [[#StartSevenSixAxisSensor]]<br /> |-<br /> | 305 || [5.0.0+] [[#StopSevenSixAxisSensor]]<br /> |-<br /> | 306 || [5.0.0+] [[#InitializeSevenSixAxisSensor]]<br /> |-<br /> | 307 || [5.0.0+] [[#FinalizeSevenSixAxisSensor]]<br /> |-<br /> | 308 || [5.0.0+] [[#SetSevenSixAxisSensorFusionStrength]]<br /> |-<br /> | 309 || [5.0.0+] [[#GetSevenSixAxisSensorFusionStrength]]<br /> |-<br /> | 310 || [6.0.0+] [[#ResetSevenSixAxisSensorTimestamp]]<br /> |-<br /> | 400 || [3.0.0+] [[#IsUsbFullKeyControllerEnabled]]<br /> |-<br /> | 401 || [3.0.0+] [[#EnableUsbFullKeyController]]<br /> |-<br /> | 402 || [3.0.0+] [[#IsUsbFullKeyControllerConnected]]<br /> |-<br /> | 403 || [4.0.0+] [[#HasBattery]]<br /> |-<br /> | 404 || [4.0.0+] [[#HasLeftRightBattery]]<br /> |-<br /> | 405 || [4.0.0+] [[#GetNpadInterfaceType]]<br /> |-<br /> | 406 || [4.0.0+] [[#GetNpadLeftRightInterfaceType]]<br /> |-<br /> | 407 || [10.0.0+] [[#GetNpadOfHighestBatteryLevel]] ([9.0.0+] GetNpadOfHighestBatteryLevelForJoyLeft)<br /> |-<br /> | 408 || [9.0.0-9.2.0] GetNpadOfHighestBatteryLevelForJoyRight<br /> |-<br /> | 500 || [5.0.0+] [[#GetPalmaConnectionHandle]]<br /> |-<br /> | 501 || [5.0.0+] [[#InitializePalma]]<br /> |-<br /> | 502 || [5.0.0+] [[#AcquirePalmaOperationCompleteEvent]]<br /> |-<br /> | 503 || [5.0.0+] [[#GetPalmaOperationInfo]]<br /> |-<br /> | 504 || [5.0.0+] [[#PlayPalmaActivity]]<br /> |-<br /> | 505 || [5.0.0+] [[#SetPalmaFrModeType]]<br /> |-<br /> | 506 || [5.0.0+] [[#ReadPalmaStep]]<br /> |-<br /> | 507 || [5.0.0+] [[#EnablePalmaStep]]<br /> |-<br /> | 508 || [5.0.0+] [[#ResetPalmaStep]]<br /> |-<br /> | 509 || [5.0.0+] [[#ReadPalmaApplicationSection]]<br /> |-<br /> | 510 || [5.0.0+] [[#WritePalmaApplicationSection]]<br /> |-<br /> | 511 || [5.0.0+] [[#ReadPalmaUniqueCode]]<br /> |-<br /> | 512 || [5.0.0+] [[#SetPalmaUniqueCodeInvalid]]<br /> |-<br /> | 513 || [5.0.0+] [[#WritePalmaActivityEntry]]<br /> |-<br /> | 514 || [5.0.0+] [[#WritePalmaRgbLedPatternEntry]]<br /> |-<br /> | 515 || [5.0.0+] [[#WritePalmaWaveEntry]]<br /> |-<br /> | 516 || [5.0.0+] [[#SetPalmaDataBaseIdentificationVersion]]<br /> |-<br /> | 517 || [5.0.0+] [[#GetPalmaDataBaseIdentificationVersion]]<br /> |-<br /> | 518 || [5.0.0+] [[#SuspendPalmaFeature]]<br /> |-<br /> | 519 || [5.1.0+] [[#GetPalmaOperationResult]]<br /> |-<br /> | 520 || [5.1.0+] [[#ReadPalmaPlayLog]]<br /> |-<br /> | 521 || [5.1.0+] [[#ResetPalmaPlayLog]]<br /> |-<br /> | 522 || [5.1.0+] [[#SetIsPalmaAllConnectable]]<br /> |-<br /> | 523 || [5.1.0+] [[#SetIsPalmaPairedConnectable]]<br /> |-<br /> | 524 || [5.1.0+] [[#PairPalma]]<br /> |-<br /> | 525 || [5.1.0+] [[#SetPalmaBoostMode]]<br /> |-<br /> | 526 || [7.0.0+] [[#CancelWritePalmaWaveEntry]]<br /> |-<br /> | 527 || [8.0.0+] [[#EnablePalmaBoostMode]]<br /> |-<br /> | 528 || [8.0.0+] [[#GetPalmaBluetoothAddress]]<br /> |-<br /> | 529 || [8.0.0+] [[#SetDisallowedPalmaConnection]]<br /> |-<br /> | 1000 || [[#SetNpadCommunicationMode]]<br /> |-<br /> | 1001 || [[#GetNpadCommunicationMode]]<br /> |-<br /> | 1002 || [9.0.0+] [[#SetTouchScreenConfiguration]]<br /> |-<br /> | 1003 || [9.0.0+] [[#IsFirmwareUpdateNeededForNotification]]<br /> |-<br /> | 2000 || [10.0.0+] [[#ActivateDigitizer]]<br /> |}<br /> <br /> == CreateAppletResource ==<br /> Takes a PID and an u64 [[AM_services|AppletResourceUserId]]. Returns an [[#IAppletResource]].<br /> <br /> == ActivateDebugPad ==<br /> Takes a PID and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == ActivateTouchScreen ==<br /> Takes a PID and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == ActivateMouse ==<br /> Takes a PID and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == ActivateKeyboard ==<br /> Takes a PID and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == SendKeyboardLockKeyEvent ==<br /> Takes a PID, an u32 BitFlagSet [[#KeyboardLockKeyEvent]], and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> This is identical to the hidsys cmd.<br /> <br /> == AcquireXpadIdEventHandle ==<br /> Takes an input u64, returns an output handle.<br /> <br /> [10.0.0+] Stubbed, just returns 0.<br /> <br /> == ReleaseXpadIdEventHandle ==<br /> Takes an input u64, no output.<br /> <br /> [10.0.0+] Stubbed, just returns 0.<br /> <br /> == ActivateXpad ==<br /> Takes a PID, an u32 &quot;nn::hid::BasicXpadId&quot;, an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> [10.0.0+] Stubbed, just returns 0.<br /> <br /> == GetXpadIds ==<br /> Takes a type-0xA output buffer containing an array of u32 &quot;nn::hid::BasicXpadId&quot;, returns an output s64 total_out (which is exposed by sdknso as a s32).<br /> <br /> [10.0.0+] Now returns a hard-coded list of Ids.<br /> <br /> == ActivateJoyXpad ==<br /> Takes an input u32 &quot;nn::hid::JoyXpadId&quot;, no output.<br /> <br /> [10.0.0+] Stubbed, just returns 0.<br /> <br /> == GetJoyXpadLifoHandle ==<br /> Takes an input u32 &quot;nn::hid::JoyXpadId&quot;, returns an output handle.<br /> <br /> [10.0.0+] Stubbed, just returns 0.<br /> <br /> == GetJoyXpadIds ==<br /> Takes a type-0xA output buffer containing an array of u32 &quot;nn::hid::BasicXpadId&quot;, returns an output s64.<br /> <br /> [10.0.0+] Stubbed, just returns 0.<br /> <br /> == ActivateSixAxisSensor ==<br /> Takes an input u32 &quot;nn::hid::JoyXpadId&quot;, no output.<br /> <br /> [10.0.0+] Stubbed, just returns 0.<br /> <br /> == DeactivateSixAxisSensor ==<br /> Takes an input u32 &quot;nn::hid::JoyXpadId&quot;, no output.<br /> <br /> [10.0.0+] Stubbed, just returns 0.<br /> <br /> == GetSixAxisSensorLifoHandle ==<br /> Takes an input u32 &quot;nn::hid::JoyXpadId&quot;, returns an output handle.<br /> <br /> [10.0.0+] Stubbed, just returns 0.<br /> <br /> == ActivateJoySixAxisSensor ==<br /> Takes an input u32 &quot;nn::hid::JoyXpadId&quot;, no output.<br /> <br /> [10.0.0+] Stubbed, just returns 0.<br /> <br /> == DeactivateJoySixAxisSensor ==<br /> Takes an input u32 &quot;nn::hid::JoyXpadId&quot;, no output.<br /> <br /> [10.0.0+] Stubbed, just returns 0.<br /> <br /> == GetJoySixAxisSensorLifoHandle ==<br /> Takes an input u32 &quot;nn::hid::JoyXpadId&quot;, returns an output handle.<br /> <br /> [10.0.0+] Stubbed, just returns 0.<br /> <br /> == StartSixAxisSensor ==<br /> Takes a PID, a [[#SixAxisSensorHandle]], and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == StopSixAxisSensor ==<br /> Takes a PID, a [[#SixAxisSensorHandle]], and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == IsSixAxisSensorFusionEnabled ==<br /> Takes a PID, a [[#SixAxisSensorHandle]], and an [[AM_services|AppletResourceUserId]], returns an output bool.<br /> <br /> == EnableSixAxisSensorFusion ==<br /> Takes a PID, a bool, a [[#SixAxisSensorHandle]], and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == SetSixAxisSensorFusionParameters ==<br /> Takes a PID-descriptor, an u32 [[#SixAxisSensorHandle]], two floats, and an u64 [[AM_services|AppletResourceUserId]], no output.<br /> <br /> Official sw will throw an error before using this cmd, if the first float is outside of the bounds of 0.0f-1.0f.<br /> <br /> == GetSixAxisSensorFusionParameters ==<br /> Takes a PID-descriptor, an u32 [[#SixAxisSensorHandle]], and an u64 [[AM_services|AppletResourceUserId]], returns two output floats.<br /> <br /> == ResetSixAxisSensorFusionParameters ==<br /> Takes a PID-descriptor, an u32 [[#SixAxisSensorHandle]], and an u64 [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == SetAccelerometerParameters ==<br /> Takes a PID, a [[#SixAxisSensorHandle]], two floats, and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> sdknso will throw an error before using this cmd, if either of the floats are less than 0.0f, or when the second float is larger than the first float.<br /> <br /> sdknso 10.x removed the nn::hid wrapper for this.<br /> <br /> == GetAccelerometerParameters ==<br /> Takes a PID, a [[#SixAxisSensorHandle]], and an [[AM_services|AppletResourceUserId]], returns two output floats.<br /> <br /> sdknso 10.x removed the nn::hid wrapper for this.<br /> <br /> == ResetAccelerometerParameters ==<br /> Takes a PID, a [[#SixAxisSensorHandle]], and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> sdknso 10.x removed the nn::hid wrapper for this.<br /> <br /> == SetAccelerometerPlayMode ==<br /> Takes a PID, a [[#SixAxisSensorHandle]], an u32 [[#AccelerometerPlayMode]], and an u64 [[AM_services|AppletResourceUserId]], no output.<br /> <br /> sdknso 10.x removed the nn::hid wrapper for this.<br /> <br /> == GetAccelerometerPlayMode ==<br /> Takes a PID, a [[#SixAxisSensorHandle]], and an [[AM_services|AppletResourceUserId]], returns an output u32 [[#AccelerometerPlayMode]].<br /> <br /> sdknso 10.x removed the nn::hid wrapper for this.<br /> <br /> == ResetAccelerometerPlayMode ==<br /> Takes a PID, a [[#SixAxisSensorHandle]], and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> sdknso 10.x removed the nn::hid wrapper for this.<br /> <br /> == SetGyroscopeZeroDriftMode ==<br /> Takes a PID-descriptor, an u32 [[#SixAxisSensorHandle]], an u32 [[#GyroscopeZeroDriftMode]], and an u64 [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == GetGyroscopeZeroDriftMode ==<br /> Takes a PID-descriptor, an u32 [[#SixAxisSensorHandle]], and an u64 [[AM_services|AppletResourceUserId]], returns an output u32 [[#GyroscopeZeroDriftMode]].<br /> <br /> Gets the value written by [[#SetGyroscopeZeroDriftMode]].<br /> <br /> == ResetGyroscopeZeroDriftMode ==<br /> Takes a PID-descriptor, an u32 [[#SixAxisSensorHandle]], and an u64 [[AM_services|AppletResourceUserId]], no output.<br /> <br /> Same as [[#SetGyroscopeZeroDriftMode]] except the [[#GyroscopeZeroDriftMode]] is hard-coded to value 1 (Standard).<br /> <br /> == IsSixAxisSensorAtRest ==<br /> Takes a PID, a [[#SixAxisSensorHandle]], and an [[AM_services|AppletResourceUserId]], returns an output bool.<br /> <br /> == IsFirmwareUpdateAvailableForSixAxisSensor ==<br /> Takes a PID, a [[#SixAxisSensorHandle]], and an [[AM_services|AppletResourceUserId]], returns an output bool.<br /> <br /> == ActivateGesture ==<br /> Takes a PID-descriptor, a s32, and an u64 [[AM_services|AppletResourceUserId]], no output.<br /> <br /> sdknso passes hard-coded value 1 for the s32.<br /> <br /> == SetSupportedNpadStyleSet ==<br /> Takes a PID-descriptor, an u32 [[#NpadStyleTag]], and an u64 [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == GetSupportedNpadStyleSet ==<br /> Takes a PID-descriptor and an u64 [[AM_services|AppletResourceUserId]], returns an u32 [[#NpadStyleTag]].<br /> <br /> == SetSupportedNpadIdType ==<br /> Takes a PID-descriptor, a type-0x9 input buffer, and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> The input buffer contains an array of [[#NpadIdType]]. The total entries in this array must be &lt;=10.<br /> <br /> == ActivateNpad ==<br /> Takes a PID-descriptor and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> On newer sysvers this runs the same code as [[#ActivateNpadWithRevision]], with revision=0.<br /> <br /> == DeactivateNpad ==<br /> Takes a PID and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> This just returns 0.<br /> <br /> [10.0.0+] sdknso now uses the hiddbg [[#DeactivateNpad_2|cmd]] instead.<br /> <br /> == AcquireNpadStyleSetUpdateEventHandle ==<br /> Takes a PID, an input u32, an u64 [[AM_services|AppletResourceUserId]], and an u64. Returns an output event handle, autoclear for this is user-specified.<br /> <br /> The value for the last u64 doesn't seem to matter (?): official sw sets this to the address of the structure used for storing the event which is initialized after using this cmd.<br /> <br /> == DisconnectNpad ==<br /> Takes a PID, an u32 [[#NpadIdType]], and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == GetPlayerLedPattern ==<br /> Takes an input u32 [[#NpadIdType]], returns an output u64 (which is exposed by sdknso as an u8).<br /> <br /> == ActivateNpadWithRevision ==<br /> Takes a PID-descriptor, a s32 revision, and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> Revisions:<br /> * 0x0: Initial [[#ActivateNpad|revision]], pre-5.0.0.<br /> * 0x1: [5.0.0+]<br /> * 0x2: [6.0.0+]<br /> * 0x3: [8.0.0+]<br /> <br /> == SetNpadJoyHoldType ==<br /> Takes a PID-descriptor, an input [[#NpadJoyHoldType]], and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == GetNpadJoyHoldType ==<br /> Takes a PID-descriptor and an [[AM_services|AppletResourceUserId]]. Returns an output [[#NpadJoyHoldType]].<br /> <br /> sdknso will Abort when the output is not 0-1.<br /> <br /> == SetNpadJoyAssignmentModeSingleByDefault ==<br /> Takes a PID-descriptor, an u32, and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> This eventually calls the same func as [[#SetNpadJoyAssignmentModeSingle]], except with [[#NpadJoyDeviceType]]=0.<br /> <br /> == SetNpadJoyAssignmentModeSingle ==<br /> Takes a PID-descriptor, an u32, [[AM_services|AppletResourceUserId]], and s64 [[#NpadJoyDeviceType]]. No output.<br /> <br /> This eventually runs the same code as [[#SetNpadJoyAssignmentModeSingleWithDestination]], except the output fields aren't exposed.<br /> <br /> == SetNpadJoyAssignmentModeDual ==<br /> Takes a PID-descriptor, an u32, and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == MergeSingleJoyAsDualJoy ==<br /> Takes a PID-descriptor, two u32s, and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == StartLrAssignmentMode ==<br /> Takes a PID and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == StopLrAssignmentMode ==<br /> Takes a PID and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == SetNpadHandheldActivationMode ==<br /> Takes a PID, an [[AM_services|AppletResourceUserId]], a s64 [[#NpadHandheldActivationMode]], no output.<br /> <br /> == GetNpadHandheldActivationMode ==<br /> Takes a PID and an u64 [[AM_services|AppletResourceUserId]]. Returns an output s64 [[#NpadHandheldActivationMode]]. Official user-processes Abort if the output value is not 0-2.<br /> <br /> == SwapNpadAssignment ==<br /> Takes a PID, two u32s [[#NpadIdType]], and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == IsUnintendedHomeButtonInputProtectionEnabled ==<br /> Takes a PID, an u32 [[#NpadIdType]], and an [[AM_services|AppletResourceUserId]]. Returns an output bool.<br /> <br /> Unused by sdknso, the flag from [[#NpadSystemProperties]] is used instead.<br /> <br /> == EnableUnintendedHomeButtonInputProtection ==<br /> Takes a PID, a bool, an u32 [[#NpadIdType]], and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == SetNpadJoyAssignmentModeSingleWithDestination ==<br /> Takes a PID, an u32, an [[AM_services|AppletResourceUserId]], and s64 [[#NpadJoyDeviceType]]. Returns an output bool and u32 [[#NpadIdType]].<br /> <br /> The bool indicates whether the output [[#NpadIdType]] is set.<br /> <br /> == SetNpadAnalogStickUseCenterClamp ==<br /> Takes a PID, a bool, an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == SetNpadCaptureButtonAssignment ==<br /> Takes a PID, a [[#NpadStyleSet]], an [[AM_services|AppletResourceUserId]], a [[#NpadButtonSet]], no output.<br /> <br /> Exactly 1 bit must be set in the [[#NpadStyleSet]]. Multiple button bits can be set.<br /> <br /> This assigns the button(s) which trigger the CaptureButton.<br /> <br /> == ClearNpadCaptureButtonAssignment ==<br /> Takes a PID, an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == GetVibrationDeviceInfo ==<br /> Takes a [[#VibrationDeviceHandle]]. Returns an output [[#VibrationDeviceInfo]].<br /> <br /> == SendVibrationValue ==<br /> Takes a PID-descriptor, a [[#VibrationDeviceHandle]], a [[#VibrationValue]] immediately after that, and an u64 [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == GetActualVibrationValue ==<br /> Takes a PID-descriptor, a [[#VibrationDeviceHandle]], and an u64 [[AM_services|AppletResourceUserId]]. Returns an output [[#VibrationValue]].<br /> <br /> == CreateActiveVibrationDeviceList ==<br /> No input. Returns an [[#IActiveVibrationDeviceList]].<br /> <br /> == PermitVibration ==<br /> Takes an input u8 bool. No output.<br /> <br /> This affects the config displayed by System Settings.<br /> <br /> == IsVibrationPermitted ==<br /> No input. Returns an output u8 bool.<br /> <br /> == SendVibrationValues ==<br /> Takes an u64 [[AM_services|AppletResourceUserId]], and two type-0x9 input buffers containing an array of: [[#VibrationDeviceHandle]] for first buffer, and [[#VibrationValue]] for the second buffer.<br /> <br /> Official sw uses the same entry-count for each array.<br /> <br /> == SendVibrationGcErmCommand ==<br /> Takes a PID, a [[#VibrationDeviceHandle]], [[AM_services|AppletResourceUserId]], an u64 [[#VibrationGcErmCommand]], no output.<br /> <br /> == GetActualVibrationGcErmCommand ==<br /> Takes a PID, a [[#VibrationDeviceHandle]], [[AM_services|AppletResourceUserId]], returns an output u64 [[#VibrationGcErmCommand]].<br /> <br /> == BeginPermitVibrationSession ==<br /> Takes an input [[AM_services|AppletResourceUserId]], no output.<br /> <br /> Begins a forced-permitted vibration session.<br /> <br /> == EndPermitVibrationSession ==<br /> No input/output.<br /> <br /> Ends the session started by [[#BeginPermitVibrationSession]].<br /> <br /> == IsVibrationDeviceMounted ==<br /> Takes a PID, an [[#VibrationDeviceHandle]], and an u64 [[AM_services|AppletResourceUserId]], returns an output u8 bool.<br /> <br /> == SendVibrationValueInBool ==<br /> Takes a PID, a bool, a [[#VibrationDeviceHandle]], and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> Stubbed, this just returns 0.<br /> <br /> This is currently not exposed by sdknso.<br /> <br /> == ActivateConsoleSixAxisSensor ==<br /> Takes a PID and an u64 [[AM_services|AppletResourceUserId]], no output.<br /> <br /> As of [10.0.0+] sdknso no longer uses this with SevenSixAxisSensor.<br /> <br /> == StartConsoleSixAxisSensor ==<br /> Takes a PID, a [[#ConsoleSixAxisSensorHandle]], and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == StopConsoleSixAxisSensor ==<br /> Takes a PID, a [[#ConsoleSixAxisSensorHandle]], and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == ActivateSevenSixAxisSensor ==<br /> Takes a PID and an u64 [[AM_services|AppletResourceUserId]], no output.<br /> <br /> Unused by official sw, [[#ActivateConsoleSixAxisSensor]] is used instead. However, internally ActivateSevenSixAxisSensor is identical to [[#ActivateConsoleSixAxisSensor]]. Deactivation is done with hiddbg DeactivateConsoleSixAxisSensor (which is unused by official sw).<br /> <br /> == StartSevenSixAxisSensor ==<br /> Takes a PID and an u64 [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == StopSevenSixAxisSensor ==<br /> Takes a PID and an u64 [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == InitializeSevenSixAxisSensor ==<br /> Takes a PID, an u64 [[AM_services|AppletResourceUserId]], two u64s for the size of each TransferMemory, and two TransferMemory handles. No output.<br /> <br /> The size of the first TransferMemory is 0x1000 with MemoryPermission=read-only, while the second one has size 0x7F000 with MemoryPermission=none. sdknso uses an user-specified buffer for this, with the second tmem immediately following the first one. sdknso later uses data at buf+0 for loading SevenSixAxisSensor state.<br /> <br /> The data at tmem+0 has the following structure:<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x10 || Unused by sdknso.<br /> |-<br /> | 0x10 || 0x8 || Latest entry.<br /> |-<br /> | 0x18 || 0x8 || Total entries.<br /> |-<br /> | 0x20 || 0xA50(0x21*0x50) || Array of the below entries.<br /> |}<br /> <br /> Entry:<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || Timestamp<br /> |-<br /> | 0x8 || 0x10 || Unused by sdknso.<br /> |-<br /> | 0x10 || 0x40 || SevenSixAxisSensorState<br /> |}<br /> <br /> SevenSixAxisSensorState:<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || First timestamp.<br /> |-<br /> | 0x8 || 0x8 || Second timestamp (in samples).<br /> |-<br /> | 0x10 || 0x8 || ?<br /> |-<br /> | 0x18 || 0x28 || float data<br /> |}<br /> <br /> == FinalizeSevenSixAxisSensor ==<br /> Takes a PID and an u64 [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == SetSevenSixAxisSensorFusionStrength ==<br /> Takes a PID, a float, and an u64 [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == GetSevenSixAxisSensorFusionStrength ==<br /> Takes a PID and an u64 [[AM_services|AppletResourceUserId]], returns an output float.<br /> <br /> == ResetSevenSixAxisSensorTimestamp ==<br /> Takes a PID and an u64 [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == IsUsbFullKeyControllerEnabled ==<br /> No input, returns an output bool.<br /> <br /> == EnableUsbFullKeyController ==<br /> Takes an input bool, no output.<br /> <br /> == IsUsbFullKeyControllerConnected ==<br /> Takes an input u32 [[#NpadIdType]], returns an output bool.<br /> <br /> == HasBattery ==<br /> Takes an input u32, returns an output bool.<br /> <br /> sdknso exposes this under &quot;nn::hid::system::&quot;. [10.0.0+] sdknso now only exposes the hidsys version of this cmd.<br /> <br /> == HasLeftRightBattery ==<br /> Takes an input u32, returns two output bools.<br /> <br /> sdknso exposes this under &quot;nn::hid::system::&quot;. [10.0.0+] sdknso now only exposes the hidsys version of this cmd.<br /> <br /> == GetNpadInterfaceType ==<br /> Takes an input u32 [[#NpadIdType]], returns an output u8 [[#NpadInterfaceType]].<br /> <br /> The NpadInterfaceType must be 1-4, otherwise this will Abort.<br /> <br /> sdknso exposes this under &quot;nn::hid::system::&quot;. [10.0.0+] sdknso now only exposes the hidsys version of this cmd.<br /> <br /> == GetNpadLeftRightInterfaceType ==<br /> Takes an input u32 [[#NpadIdType]], returns two output u8s [[#NpadInterfaceType]].<br /> <br /> sdknso exposes this under &quot;nn::hid::system::&quot;. [10.0.0+] sdknso now only exposes the hidsys version of this cmd.<br /> <br /> == GetNpadOfHighestBatteryLevel ==<br /> Takes a PID, a type-0x9 input buffer containing an array of u32 [[#NpadIdType]], an u64 [[AM_services|AppletResourceUserId]], returns an output u32 [[#NpadIdType]].<br /> <br /> [[#NpadIdType|Handheld]] is ignored.<br /> <br /> == GetPalmaConnectionHandle ==<br /> Takes a PID, an u32 [[#NpadIdType]], an [[AM_services|AppletResourceUserId]], returns an output [[#PalmaConnectionHandle]].<br /> <br /> == InitializePalma ==<br /> Takes an input [[#PalmaConnectionHandle]], no output.<br /> <br /> == AcquirePalmaOperationCompleteEvent ==<br /> Takes an input [[#PalmaConnectionHandle]], returns an output Event handle.<br /> <br /> sdknso uses an user-specified EventClearMode.<br /> <br /> The Event is signaled when data is available with [[#GetPalmaOperationInfo]].<br /> <br /> == GetPalmaOperationInfo ==<br /> Takes a [[#PalmaConnectionHandle]], a type-0x6 output buffer, returns an output u64 [[#PalmaOperationType]].<br /> <br /> sdknso passes [[#PalmaOperationInfo]]+0x8 size 0x140 for the output buffer. [5.1.0+] After using the cmd successfully, [[#GetPalmaOperationResult]] is used.<br /> <br /> This must be used at some point following using any of the other Palma cmds which trigger an Operation, once the [[#AcquirePalmaOperationCompleteEvent|Event]] is signaled. Up to 4 Operations can be queued at once, the other cmds will throw an error once there's too many operations.<br /> <br /> == PlayPalmaActivity ==<br /> Takes an input [[#PalmaConnectionHandle]], an u64 (exposed by sdknso as an u16), no output.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == SetPalmaFrModeType ==<br /> Takes an input [[#PalmaConnectionHandle]], an u64 [[#PalmaFrModeType]], no output.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == ReadPalmaStep ==<br /> Takes an input [[#PalmaConnectionHandle]], no output.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> [[#EnablePalmaStep]] should be used before this.<br /> <br /> == EnablePalmaStep ==<br /> Takes an input bool, a [[#PalmaConnectionHandle]], no output.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == ResetPalmaStep ==<br /> Takes an input [[#PalmaConnectionHandle]], no output.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == ReadPalmaApplicationSection ==<br /> Takes an input [[#PalmaConnectionHandle]], an u64, an u64 size, no output.<br /> <br /> sdknso exposes the first u64 as a s32. sdknso will Abort if the input value for the second u64 is &gt;0x100.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == WritePalmaApplicationSection ==<br /> Takes an input [[#PalmaConnectionHandle]], an u64, an u64 size, a type-0x19 input buffer containing a [[#PalmaApplicationSectionAccessBuffer]], no output.<br /> <br /> sdknso exposes the first u64 as a s32. Data is copied from the input [[#PalmaApplicationSectionAccessBuffer]] with the specified size.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == ReadPalmaUniqueCode ==<br /> Takes an input [[#PalmaConnectionHandle]], no output.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == SetPalmaUniqueCodeInvalid ==<br /> Takes an input [[#PalmaConnectionHandle]], no output.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == WritePalmaActivityEntry ==<br /> Takes an input [[#PalmaConnectionHandle]], an u64, an u64, an u64, an u64, no output.<br /> <br /> sdknso exposes the first u64 as an u16, while the rest are exposed as [[#PalmaActivityEntry]].<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == WritePalmaRgbLedPatternEntry ==<br /> Takes an input [[#PalmaConnectionHandle]], an u64, a type-0x5 input buffer, no output.<br /> <br /> sdknso exposes the u64 as an u16.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == WritePalmaWaveEntry ==<br /> Takes an input [[#PalmaConnectionHandle]], an u64 [[#PalmaWaveSet]], an u64 (exposed by sdknso as an u16), a TransferMemory handle, an u64 tmem_size, an u64 size, no output.<br /> <br /> The TransferMemory is created from an user-specified buffer with permissions=R--.<br /> <br /> Note that the sysmodule will not properly close the TransferMemory handle if the [[#PalmaConnectionHandle]] is invalid.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == SetPalmaDataBaseIdentificationVersion ==<br /> Takes an input s32, a [[#PalmaConnectionHandle]], no output.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == GetPalmaDataBaseIdentificationVersion ==<br /> Takes an input [[#PalmaConnectionHandle]], no output.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == SuspendPalmaFeature ==<br /> Takes an input &quot;nn::util::BitFlagSet&lt;32, [[#PalmaFeature]]&gt;&quot;, a [[#PalmaConnectionHandle]], no output.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == GetPalmaOperationResult ==<br /> Takes an input [[#PalmaConnectionHandle]], no output.<br /> <br /> sdknso only uses this from the wrapper for [[#GetPalmaOperationInfo]].<br /> <br /> == ReadPalmaPlayLog ==<br /> Takes an input u16, a [[#PalmaConnectionHandle]], no output.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == ResetPalmaPlayLog ==<br /> Takes an input u16, a [[#PalmaConnectionHandle]], no output.<br /> <br /> See [[#GetPalmaOperationInfo]].<br /> <br /> == SetIsPalmaAllConnectable ==<br /> Takes a PID, a bool, an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> The sysmodule also calls the code which eventually runs from this, from various other funcs internally (bool value varies).<br /> <br /> This updates various state. If needed, this uses either [[BTM_services|StartBleScanForGeneral]] or [[BTM_services|StopBleScanForGeneral]].<br /> <br /> == SetIsPalmaPairedConnectable ==<br /> Takes a PID, a bool, an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> The actual cmd impl ignores the PID/AppletResourceUserId.<br /> <br /> This code is also called by another func internally by the sysmodule, where flag = {whether bit6 in a field is set} (presumably [[#NpadStyleSet]]). This is eventually called from various funcs, including [[#SetSupportedNpadStyleSet]].<br /> <br /> This updates various state. If needed, this uses either [[BTM_services|StartBleScanForPairedDevice]] or [[BTM_services|StopBleScanForPairedDevice]].<br /> <br /> == PairPalma ==<br /> Takes an input [[#PalmaConnectionHandle]], no output.<br /> <br /> This eventually uses [[BTM_services#BlePairDevice|BlePairDevice]] if needed, and updates state.<br /> <br /> == SetPalmaBoostMode ==<br /> Takes an input bool, no output.<br /> <br /> Stubbed, just returns 0. This was replaced by [[#EnablePalmaBoostMode]].<br /> <br /> == CancelWritePalmaWaveEntry ==<br /> Takes an input [[#PalmaConnectionHandle]], no output.<br /> <br /> == EnablePalmaBoostMode ==<br /> Takes a PID, a bool, an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == GetPalmaBluetoothAddress ==<br /> Takes an input [[#PalmaConnectionHandle]], returns an output [[Bluetooth_Driver_services#Address|Address]].<br /> <br /> == SetDisallowedPalmaConnection ==<br /> Takes a PID, an [[AM_services|AppletResourceUserId]], a type-0x9 input buffer containing an array of [[Bluetooth_Driver_services#Address|Address]], no output.<br /> <br /> == SetNpadCommunicationMode ==<br /> Takes a PID, an [[AM_services|AppletResourceUserId]], a s64 [[#NpadCommunicationMode]], no output.<br /> <br /> [2.0.0+] Stubbed, just returns 0.<br /> <br /> == GetNpadCommunicationMode ==<br /> No input, returns an output s64 [[#NpadCommunicationMode]].<br /> <br /> sdknso uses a switch-statement to determine the value to write to the output [[#NpadCommunicationMode]], with the s64 (written value is the same as the s64). sdknso will Abort if the s64 is not 0-3.<br /> <br /> [2.0.0+] Stubbed, just returns hard-coded output mode=3.<br /> <br /> == SetTouchScreenConfiguration ==<br /> Takes a PID, a [[#TouchScreenConfigurationForNx]], an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == IsFirmwareUpdateNeededForNotification ==<br /> Takes a PID, a s32, an [[AM_services|AppletResourceUserId]], returns an output bool.<br /> <br /> sdknso passes hard-coded value 1 for the s32.<br /> <br /> == ActivateDigitizer ==<br /> Takes a PID and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> == IAppletResource ==<br /> This is &quot;nn::hid::IAppletResource&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#GetSharedMemoryHandle]]<br /> |}<br /> <br /> === GetSharedMemoryHandle ===<br /> No input. Returns a [[#SharedMemoryFormat|sharedmem]] handle.<br /> <br /> == IActiveVibrationDeviceList ==<br /> This is &quot;nn::hid::IActiveVibrationDeviceList&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#ActivateVibrationDevice]]<br /> |}<br /> <br /> === ActivateVibrationDevice ===<br /> Takes an input [[#VibrationDeviceHandle]]. No output.<br /> <br /> = hid:dbg =<br /> This is &quot;nn::hid::IHidDebugServer&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#DeactivateDebugPad]]<br /> |-<br /> | 1 || [[#SetDebugPadAutoPilotState]]<br /> |-<br /> | 2 || [[#UnsetDebugPadAutoPilotState]]<br /> |-<br /> | 10 || [[#DeactivateTouchScreen]]<br /> |-<br /> | 11 || [[#SetTouchScreenAutoPilotState]]<br /> |-<br /> | 12 || [[#UnsetTouchScreenAutoPilotState]]<br /> |-<br /> | 13 || [9.0.0+] GetTouchScreenConfiguration<br /> |-<br /> | 14 || [11.0.0+] ProcessTouchScreenAutoTune<br /> |-<br /> | 15 || [13.0.0+] ForceStopTouchScreenManagement<br /> |-<br /> | 16 || [13.0.0+] ForceRestartTouchScreenManagement<br /> |-<br /> | 17 || [13.0.0+] IsTouchScreenManaged<br /> |-<br /> | 20 || [[#DeactivateMouse]]<br /> |-<br /> | 21 || [[#SetMouseAutoPilotState]]<br /> |-<br /> | 22 || [[#UnsetMouseAutoPilotState]]<br /> |-<br /> | 30 || [[#DeactivateKeyboard]]<br /> |-<br /> | 31 || [[#SetKeyboardAutoPilotState]]<br /> |-<br /> | 32 || [[#UnsetKeyboardAutoPilotState]]<br /> |-<br /> | 50 || [[#DeactivateXpad]]<br /> |-<br /> | 51 || [1.0.0-9.2.0] SetXpadAutoPilotState<br /> |-<br /> | 52 || [1.0.0-9.2.0] UnsetXpadAutoPilotState<br /> |-<br /> | 53 ([1.0.0-8.1.0] 60) || [1.0.0-9.2.0] [[#DeactivateJoyXpad]]<br /> |-<br /> | 60 || [9.0.0+] ClearNpadSystemCommonPolicy<br /> |-<br /> | 61 || [10.0.0+] [[#DeactivateNpad_2|DeactivateNpad]]<br /> |-<br /> | 62 || [10.0.0+] ForceDisconnectNpad<br /> |-<br /> | 91 || DeactivateGesture<br /> |-<br /> | 110 || DeactivateHomeButton<br /> |-<br /> | 111 || SetHomeButtonAutoPilotState<br /> |-<br /> | 112 || UnsetHomeButtonAutoPilotState<br /> |-<br /> | 120 || [[#DeactivateSleepButton]]<br /> |-<br /> | 121 || [[#SetSleepButtonAutoPilotState]]<br /> |-<br /> | 122 || [[#UnsetSleepButtonAutoPilotState]]<br /> |-<br /> | 123 || [1.0.0-9.2.0] DeactivateInputDetector<br /> |-<br /> | 130 || DeactivateCaptureButton<br /> |-<br /> | 131 || SetCaptureButtonAutoPilotState<br /> |-<br /> | 132 || UnsetCaptureButtonAutoPilotState<br /> |-<br /> | 133 || [3.0.0+] SetShiftAccelerometerCalibrationValue<br /> |-<br /> | 134 || [3.0.0+] GetShiftAccelerometerCalibrationValue<br /> |-<br /> | 135 || [3.0.0+] SetShiftGyroscopeCalibrationValue<br /> |-<br /> | 136 || [3.0.0+] GetShiftGyroscopeCalibrationValue<br /> |-<br /> | 140 || [3.0.0+] DeactivateConsoleSixAxisSensor<br /> |-<br /> | 141 || [5.0.0+] GetConsoleSixAxisSensorSamplingFrequency<br /> |-<br /> | 142 || [5.0.0+] DeactivateSevenSixAxisSensor<br /> |-<br /> | 143 || [5.0.0+] GetConsoleSixAxisSensorCountStates<br /> |-<br /> | 144 || [8.0.0+] GetAccelerometerFsr<br /> |-<br /> | 145 || [8.0.0+] SetAccelerometerFsr<br /> |-<br /> | 146 || [8.0.0+] GetAccelerometerOdr<br /> |-<br /> | 147 || [8.0.0+] SetAccelerometerOdr<br /> |-<br /> | 148 || [8.0.0+] GetGyroscopeFsr<br /> |-<br /> | 149 || [8.0.0+] SetGyroscopeFsr<br /> |-<br /> | 150 || [8.0.0+] GetGyroscopeOdr<br /> |-<br /> | 151 || [8.0.0+] SetGyroscopeOdr<br /> |-<br /> | 152 || [10.0.0+] GetWhoAmI<br /> |-<br /> | 201 || ActivateFirmwareUpdate<br /> |-<br /> | 202 || DeactivateFirmwareUpdate<br /> |-<br /> | 203 || [[#StartFirmwareUpdate]]<br /> |-<br /> | 204 || GetFirmwareUpdateStage<br /> |-<br /> | 205 || [[#GetFirmwareVersion]]<br /> |-<br /> | 206 || [[#GetDestinationFirmwareVersion]]<br /> |-<br /> | 207 || [[#DiscardFirmwareInfoCacheForRevert]]<br /> |-<br /> | 208 || [3.0.0+] StartFirmwareUpdateForRevert<br /> |-<br /> | 209 || [3.0.0+] GetAvailableFirmwareVersionForRevert<br /> |-<br /> | 210 || [4.0.0+] IsFirmwareUpdatingDevice<br /> |-<br /> | 211 || [6.0.0+] StartFirmwareUpdateIndividual<br /> |-<br /> | 215 || [6.0.0+] SetUsbFirmwareForceUpdateEnabled<br /> |-<br /> | 216 || [6.0.0+] SetAllKuinaDevicesToFirmwareUpdateMode<br /> |-<br /> | 221 || [3.0.0+] [[#UpdateControllerColor]]<br /> |-<br /> | 222 || [4.0.0+] ConnectUsbPadsAsync<br /> |-<br /> | 223 || [4.0.0+] DisconnectUsbPadsAsync<br /> |-<br /> | 224 || [5.0.0+] [[#UpdateDesignInfo]]<br /> |-<br /> | 225 || [5.0.0+] [[#GetUniquePadDriverState]]<br /> |-<br /> | 226 || [5.0.0+] [[#GetSixAxisSensorDriverStates]]<br /> |-<br /> | 227 || [5.0.0+] GetRxPacketHistory<br /> |-<br /> | 228 || [6.0.0+] [[#AcquireOperationEventHandle]]<br /> |-<br /> | 229 || [6.0.0+] [[#ReadSerialFlash]]<br /> |-<br /> | 230 || [6.0.0+] [[#WriteSerialFlash]]<br /> |-<br /> | 231 || [6.0.0+] [[#GetOperationResult]]<br /> |-<br /> | 232 || [6.0.0+] EnableShipmentMode<br /> |-<br /> | 233 || [6.0.0+] ClearPairingInfo<br /> |-<br /> | 234 || [6.0.0+] [[#GetUniquePadDeviceTypeSetInternal]]<br /> |-<br /> | 235 || [7.0.0+] EnableAnalogStickPower<br /> |-<br /> | 236 || [9.0.0+] RequestKuinaUartClockCal<br /> |-<br /> | 237 || [9.0.0+] GetKuinaUartClockCal<br /> |-<br /> | 238 || [9.0.0+] SetKuinaUartClockTrim<br /> |-<br /> | 239 || [9.0.0+] KuinaLoopbackTest<br /> |-<br /> | 240 || [9.0.0+] RequestBatteryVoltage<br /> |-<br /> | 241 || [9.0.0+] GetBatteryVoltage<br /> |-<br /> | 242 || [9.0.0+] GetUniquePadPowerInfo<br /> |-<br /> | 243 || [9.0.0+] RebootUniquePad<br /> |-<br /> | 244 || [9.0.0+] RequestKuinaFirmwareVersion<br /> |-<br /> | 245 || [9.0.0+] GetKuinaFirmwareVersion<br /> |-<br /> | 246 || [9.0.0+] GetVidPid<br /> |-<br /> | 247 || [11.0.0+] GetAnalogStickCalibrationValue<br /> |-<br /> | 248 || [11.0.0+] GetUniquePadIdsFull<br /> |-<br /> | 249 || [11.0.0+] ConnectUniquePad<br /> |-<br /> | 250 || [12.0.0+] IsVirtual<br /> |-<br /> | 251 || [12.0.0+] GetAnalogStickModuleParam<br /> |-<br /> | 301 || [5.0.0-8.1.0] [[#GetAbstractedPadHandles]]<br /> |-<br /> | 302 || [5.0.0-8.1.0] [[#GetAbstractedPadState]]<br /> |-<br /> | 303 || [5.0.0-8.1.0] [[#GetAbstractedPadsState]]<br /> |-<br /> | 321 || [5.0.0-8.1.0] [[#SetAutoPilotVirtualPadState]]<br /> |-<br /> | 322 || [5.0.0-8.1.0] [[#UnsetAutoPilotVirtualPadState]]<br /> |-<br /> | 323 || [5.0.0+] [[#UnsetAllAutoPilotVirtualPadState]]<br /> |-<br /> | 324 || [7.0.0+] [[#AttachHdlsWorkBuffer]]<br /> |-<br /> | 325 || [7.0.0+] [[#ReleaseHdlsWorkBuffer]]<br /> |-<br /> | 326 || [7.0.0+] [[#DumpHdlsNpadAssignmentState]]<br /> |-<br /> | 327 || [7.0.0+] [[#DumpHdlsStates]]<br /> |-<br /> | 328 || [7.0.0+] [[#ApplyHdlsNpadAssignmentState]]<br /> |-<br /> | 329 || [7.0.0+] [[#ApplyHdlsStateList]]<br /> |-<br /> | 330 || [7.0.0+] [[#AttachHdlsVirtualDevice]]<br /> |-<br /> | 331 || [7.0.0+] [[#DetachHdlsVirtualDevice]]<br /> |-<br /> | 332 || [7.0.0+] [[#SetHdlsState]]<br /> |-<br /> | 350 || [5.0.0+] [[#AddRegisteredDevice]]<br /> |-<br /> | 400 || [6.0.0+] DisableExternalMcuOnNxDevice<br /> |-<br /> | 401 || [6.0.0+] DisableRailDeviceFiltering<br /> |-<br /> | 402 || [10.0.0+] EnableWiredPairing<br /> |-<br /> | 403 || [10.0.0+] EnableShipmentModeAutoClear<br /> |-<br /> | 404 || [11.0.0+] SetRailEnabled<br /> |-<br /> | 500 || [8.0.0+] SetFactoryInt<br /> |-<br /> | 501 || [8.0.0+] IsFactoryBootEnabled<br /> |-<br /> | 550 || [9.0.0+] SetAnalogStickModelDataTemporarily<br /> |-<br /> | 551 || [9.0.0+] GetAnalogStickModelData<br /> |-<br /> | 552 || [9.0.0+] ResetAnalogStickModelData<br /> |-<br /> | 600 || [10.0.0+] ConvertPadState<br /> |-<br /> | 650 || [12.0.0+] AddButtonPlayData<br /> |-<br /> | 651 || [12.0.0+] StartButtonPlayData<br /> |-<br /> | 652 || [12.0.0+] StopButtonPlayData<br /> |-<br /> | 2000 || [10.0.0+] DeactivateDigitizer<br /> |-<br /> | 2001 || [10.0.0+] SetDigitizerAutoPilotState<br /> |-<br /> | 2002 || [10.0.0+] UnsetDigitizerAutoPilotState<br /> |}<br /> <br /> == DeactivateDebugPad ==<br /> No input/output.<br /> <br /> == SetDebugPadAutoPilotState ==<br /> Takes an input [[#DebugPadAutoPilotState]], no output.<br /> <br /> == UnsetDebugPadAutoPilotState ==<br /> No input/output.<br /> <br /> == DeactivateTouchScreen ==<br /> No input/output.<br /> <br /> == SetTouchScreenAutoPilotState ==<br /> Takes a type-0x5 input buffer containing an array of [[#TouchState]], no output.<br /> <br /> The max entries for the array is 16.<br /> <br /> == UnsetTouchScreenAutoPilotState ==<br /> No input/output.<br /> <br /> == DeactivateMouse ==<br /> No input/output.<br /> <br /> == SetMouseAutoPilotState ==<br /> Takes an input [[#MouseAutoPilotState]], no output.<br /> <br /> == UnsetMouseAutoPilotState ==<br /> No input/output.<br /> <br /> == DeactivateKeyboard ==<br /> No input/output.<br /> <br /> == SetKeyboardAutoPilotState ==<br /> Takes an input [[#KeyboardAutoPilotState]], no output.<br /> <br /> == UnsetKeyboardAutoPilotState ==<br /> No input/output.<br /> <br /> == DeactivateXpad ==<br /> Takes an input &quot;nn::hid::BasicXpadId&quot;, no output.<br /> <br /> == DeactivateNpad ==<br /> Takes a PID and an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> This just returns 0.<br /> <br /> == DeactivateSleepButton ==<br /> No input/output.<br /> <br /> == SetSleepButtonAutoPilotState ==<br /> Takes an input [[#SleepButtonAutoPilotState]], no output.<br /> <br /> == UnsetSleepButtonAutoPilotState ==<br /> No input/output.<br /> <br /> == StartFirmwareUpdate ==<br /> Takes a total of 0x20-bytes of input, 2 handles, and returns an output handle.<br /> <br /> [3.0.0+] Now takes a total of 8-bytes of input, and no longer uses any input/output handles.<br /> <br /> == GetFirmwareVersion ==<br /> Takes a total of 8-bytes of input, and returns a total of 4-bytes of output.<br /> <br /> [3.0.0+] Now returns an additional 0xC-bytes of output.<br /> <br /> == GetDestinationFirmwareVersion ==<br /> Takes a total of 8-bytes of input, and returns a total of 4-bytes of output.<br /> <br /> [3.0.0+] Now returns an additional 0xC-bytes of output.<br /> <br /> == DiscardFirmwareInfoCacheForRevert ==<br /> Takes a total of 8-bytes of input, and returns a total of 5-bytes of output.<br /> <br /> [3.0.0+] No input/output.<br /> <br /> == UpdateControllerColor ==<br /> Takes two input u32s for the colors, an [[#UniquePadId]], and no output.<br /> <br /> A state flag must be clear, otherwise an error is thrown. Afterwards, this flag is set.<br /> <br /> Sends the spi-write subcommand to the specified controller, for writing the [[Joy-Con#Colors|color data]]. This writes to offset 0x6050 size 0x6, where the first 3-bytes are from the first u32 and the remaining 3-bytes are from the second u32.<br /> <br /> == UpdateDesignInfo ==<br /> Takes 4 input u32s for the colors, an input u8, an input [[#UniquePadId]], and no output.<br /> <br /> A state flag must be clear (same as [[#UpdateControllerColor]]), otherwise an error is thrown. Afterwards, this flag is set.<br /> <br /> Sends the spi-write subcommand to the specified controller, for writing to offset 0x6050 size 0xD. The first 3-bytes from each u32 is used for the spi-write-data, with the u8 being copied immediately afterwards the color data.<br /> <br /> == GetUniquePadDriverState ==<br /> Takes a total of 8-bytes of input, returns a total of 0x20-bytes of output.<br /> <br /> [9.0.0+] Now takes a total of 8-bytes of input, returns a total of 0x18-bytes of output.<br /> <br /> == GetSixAxisSensorDriverStates ==<br /> Takes a total of 8-bytes of input and a type-0xA output buffer, returns a total of 8-bytes of output.<br /> <br /> [9.0.0+] Now takes a total of 8-bytes of input and a type-0x6 output buffer, returns a total of 8-bytes of output.<br /> <br /> == AcquireOperationEventHandle ==<br /> Takes an input [[#UniquePadId]], returns an output Event handle. The EventClearMode used by official sw is user-specified.<br /> <br /> This is not used internally by sdk-nso besides exposing it to the user. With the sdk-nso for [9.0.0+] the wrapper funcs for this was removed (sdk-nso still has the actual cmd).<br /> <br /> This must be used before [[#ReadSerialFlash]]/[[#WriteSerialFlash]]. Afterwards, this Event is used to wait for the async operation started by [[#ReadSerialFlash]]/[[#WriteSerialFlash]] to finish. After waiting on the Event, [[#GetOperationResult]] should be used.<br /> <br /> == ReadSerialFlash ==<br /> Takes an input TransferMemory handle, an input u32 offset, an input u64 size, and an [[#UniquePadId]], no output.<br /> <br /> Reads from the specified controller's spi-flash. The input size is the original size without page-alignment. The TransferMemory permissions is RW-.<br /> <br /> See also [[#AcquireOperationEventHandle]].<br /> <br /> With the sdk-nso for [9.0.0+] the wrapper funcs for this was removed (sdk-nso still has the actual cmd).<br /> <br /> == WriteSerialFlash ==<br /> Takes an input TransferMemory handle, an input u32 offset, an input u64 tmem_size, an input u64 size, and an [[#UniquePadId]], no output.<br /> <br /> Writes to the specified controller's spi-flash. The TransferMemory permissions is R--.<br /> <br /> See also [[#AcquireOperationEventHandle]].<br /> <br /> With the sdk-nso for [9.0.0+] the wrapper funcs for this was removed (sdk-nso still has the actual cmd).<br /> <br /> == GetOperationResult ==<br /> Takes an input [[#UniquePadId]], no output.<br /> <br /> Get the Result for the Operation and handles cleanup, for the specified controller.<br /> <br /> This is not used internally by sdk-nso besides exposing it to the user. With the sdk-nso for [9.0.0+] the wrapper funcs for this was removed (sdk-nso still has the actual cmd).<br /> <br /> == GetUniquePadDeviceTypeSetInternal ==<br /> Takes an input [[#UniquePadId]], returns an [[#DeviceTypeInternal]].<br /> <br /> == GetAbstractedPadHandles ==<br /> Takes a type-0xA output buffer containing an array of u64 '''AbstractedPadHandle''' and returns an output s32 for total entries.<br /> <br /> Returns a handle for each controller detected by the system.<br /> <br /> == GetAbstractedPadState ==<br /> Takes an input u64 '''AbstractedPadHandle''', returns an output [[#AbstractedPadState]].<br /> <br /> == GetAbstractedPadsState ==<br /> Takes a type-0xA output buffer containing an array of u64 '''AbstractedPadHandle''', a type-0x22 output buffer containing an array of [[#AbstractedPadState]], and returns an output s32 for total entries.<br /> <br /> == SetAutoPilotVirtualPadState ==<br /> Takes an input s8 '''AbstractedVirtualPadId''' and an input [[#AbstractedPadState]], no output.<br /> <br /> == UnsetAutoPilotVirtualPadState ==<br /> Takes an input s8 '''AbstractedVirtualPadId''', no output.<br /> <br /> Clears AutoPilot state for the specified pad.<br /> <br /> == UnsetAllAutoPilotVirtualPadState ==<br /> No input/output.<br /> <br /> Same as [[#UnsetAutoPilotVirtualPadState]] except this clears state for every pad.<br /> <br /> == AttachHdlsWorkBuffer ==<br /> Takes an input TransferMemory handle and an u64 for the TransferMemory size, no output.<br /> <br /> [13.0.0+] Now additionally returns an output [[#HdlsSessionId]].<br /> <br /> Official user-processes use TransferMemory size=0x1000 and permissions=RW.<br /> <br /> This TransferMemory is used as input/output by the other Hdls commands.<br /> <br /> Hdls is for virtual HID controllers.<br /> <br /> == ReleaseHdlsWorkBuffer ==<br /> No input/output.<br /> <br /> [13.0.0+] Takes an input [[#HdlsSessionId]], no output.<br /> <br /> == DumpHdlsNpadAssignmentState ==<br /> No input/output.<br /> <br /> [13.0.0+] Takes an input [[#HdlsSessionId]], no output.<br /> <br /> After using this cmd, the output [[#HdlsNpadAssignment]] is located at tmem+0.<br /> <br /> == DumpHdlsStates ==<br /> No input/output.<br /> <br /> [13.0.0+] Takes an input [[#HdlsSessionId]], no output.<br /> <br /> After using this cmd, the output [[#HdlsStateList]] struct is located at tmem+0.<br /> <br /> == ApplyHdlsNpadAssignmentState ==<br /> Takes an input u8 bool, no output.<br /> <br /> [13.0.0+] Takes an input bool and a [[#HdlsSessionId]], no output.<br /> <br /> Prior to using this cmd, the input [[#HdlsNpadAssignment]] is written to tmem+0 by the user-process.<br /> <br /> == ApplyHdlsStateList ==<br /> No input/output.<br /> <br /> [13.0.0+] Takes an input [[#HdlsSessionId]], no output.<br /> <br /> Prior to using this cmd, the input [[#HdlsStateList]] is written to tmem+0 by the user-process.<br /> <br /> The [[#HdlsState]] will be applied for each [[#HdlsHandle]]. If a [[#HdlsHandle]] is not found, code similar to [[#AttachHdlsVirtualDevice]] will run with the [[#HdlsDeviceInfo]], then it will continue with applying state with the new device.<br /> <br /> == AttachHdlsVirtualDevice ==<br /> Takes an [[#HdlsDeviceInfo]], returns a [[#HdlsHandle]].<br /> <br /> == DetachHdlsVirtualDevice ==<br /> Takes an input [[#HdlsHandle]], no output.<br /> <br /> == SetHdlsState ==<br /> Takes an input [[#HdlsState]] and an input [[#HdlsHandle]], no output.<br /> <br /> [9.0.0+] Input order was swapped: now takes an input [[#HdlsHandle]] and a [[#HdlsState]], no output.<br /> <br /> == AddRegisteredDevice ==<br /> Takes an input [[#RegisteredDevice]], no output.<br /> <br /> [11.0.0+] Takes an input [[#DebugRegisteredDevice]], no output.<br /> <br /> = hid:sys =<br /> This is &quot;nn::hid::IHidSystemServer&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 31 || [[#SendKeyboardLockKeyEvent_2|SendKeyboardLockKeyEvent]]<br /> |-<br /> | 101 || [[#AcquireHomeButtonEventHandle]]<br /> |-<br /> | 111 || [[#ActivateHomeButton]]<br /> |-<br /> | 121 || [[#AcquireSleepButtonEventHandle]]<br /> |-<br /> | 131 || [[#ActivateSleepButton]]<br /> |-<br /> | 141 || [[#AcquireCaptureButtonEventHandle]]<br /> |-<br /> | 151 || [[#ActivateCaptureButton]]<br /> |-<br /> | 161 || [7.0.0+] GetPlatformConfig<br /> |-<br /> | 210 || AcquireNfcDeviceUpdateEventHandle<br /> |-<br /> | 211 || GetNpadsWithNfc<br /> |-<br /> | 212 || AcquireNfcActivateEventHandle<br /> |-<br /> | 213 || ActivateNfc<br /> |-<br /> | 214 || [4.0.0+] GetXcdHandleForNpadWithNfc<br /> |-<br /> | 215 || [4.0.0+] IsNfcActivated<br /> |-<br /> | 230 || AcquireIrSensorEventHandle<br /> |-<br /> | 231 || ActivateIrSensor<br /> |-<br /> | 232 || [10.0.0+] GetIrSensorState<br /> |-<br /> | 233 || [10.0.0+] GetXcdHandleForNpadWithIrSensor<br /> |-<br /> | 301 || ActivateNpadSystem<br /> |-<br /> | 303 || ApplyNpadSystemCommonPolicy<br /> |-<br /> | 304 || EnableAssigningSingleOnSlSrPress<br /> |-<br /> | 305 || DisableAssigningSingleOnSlSrPress<br /> |-<br /> | 306 || GetLastActiveNpad<br /> |-<br /> | 307 || GetNpadSystemExtStyle<br /> |-<br /> | 308 || [5.0.0+] ApplyNpadSystemCommonPolicyFull<br /> |-<br /> | 309 || [5.0.0+] GetNpadFullKeyGripColor<br /> |-<br /> | 310 || [6.0.0+] [[#GetMaskedSupportedNpadStyleSet]]<br /> |-<br /> | 311 || SetNpadPlayerLedBlinkingDevice<br /> |-<br /> | 312 || [6.0.0+] SetSupportedNpadStyleSetAll<br /> |-<br /> | 313 || [9.0.0+] GetNpadCaptureButtonAssignment<br /> |-<br /> | 314 || [9.0.0+] GetAppletFooterUiType<br /> |-<br /> | 315 || [9.0.0+] GetAppletDetailedUiType<br /> |-<br /> | 316 || [10.0.0+] [[#GetNpadInterfaceType]]<br /> |-<br /> | 317 || [10.0.0+] [[#GetNpadLeftRightInterfaceType]]<br /> |-<br /> | 318 || [10.0.0+] [[#HasBattery]]<br /> |-<br /> | 319 || [10.0.0+] [[#HasLeftRightBattery]]<br /> |-<br /> | 321 || [3.0.0+] [[#GetUniquePadsFromNpad]]<br /> |-<br /> | 322 || [10.0.0+] SetNpadSystemExtStateEnabled ([1.0.0-9.2.0] GetIrSensorState)<br /> |-<br /> | 323 || [10.0.0+] GetLastActiveUniquePad ([1.0.0-9.2.0] GetXcdHandleForNpadWithIrSensor)<br /> |-<br /> | 324 || [10.0.0+] GetUniquePadButtonSet<br /> |-<br /> | 325 || [10.0.0+] GetUniquePadColor<br /> |-<br /> | 326 || [10.0.0+] GetUniquePadAppletDetailedUiType<br /> |-<br /> | 327 || [14.0.0+] GetAbstractedPadIdDataFromNpad<br /> |-<br /> | 328 || [14.0.0+] AttachAbstractedPadToNpad<br /> |-<br /> | 329 || [14.0.0+] DetachAbstractedPadAll<br /> |-<br /> | 330 || [14.0.0+] CheckAbstractedPadConnection<br /> |-<br /> | 500 || SetAppletResourceUserId<br /> |-<br /> | 501 || RegisterAppletResourceUserId<br /> |-<br /> | 502 || UnregisterAppletResourceUserId<br /> |-<br /> | 503 || EnableAppletToGetInput<br /> |-<br /> | 504 || SetAruidValidForVibration<br /> |-<br /> | 505 || EnableAppletToGetSixAxisSensor<br /> |-<br /> | 506 || [14.0.0+] EnableAppletToGetPadInput<br /> |-<br /> | 507 || [14.0.0+] EnableAppletToGetTouchScreen<br /> |-<br /> | 510 || [[#SetVibrationMasterVolume]]<br /> |-<br /> | 511 || GetVibrationMasterVolume<br /> |-<br /> | 512 || [3.0.0+] BeginPermitVibrationSession<br /> |-<br /> | 513 || [3.0.0+] EndPermitVibrationSession<br /> |-<br /> | 514 || [12.0.0+] SendVibrationNotificationPattern<br /> |-<br /> | 520 || EnableHandheldHids<br /> |-<br /> | 521 || DisableHandheldHids<br /> |-<br /> | 522 || [9.0.0+] SetJoyConRailEnabled<br /> |-<br /> | 523 || [9.0.0+] IsJoyConRailEnabled<br /> |-<br /> | 524 || [10.0.0+] IsHandheldHidsEnabled<br /> |-<br /> | 525 || [11.0.0+] IsJoyConAttachedOnAllRail<br /> |-<br /> | 540 || AcquirePlayReportControllerUsageUpdateEvent<br /> |-<br /> | 541 || GetPlayReportControllerUsages<br /> |-<br /> | 542 || AcquirePlayReportRegisteredDeviceUpdateEvent<br /> |-<br /> | 543 || GetRegisteredDevicesOld ([1.0.0-4.1.0] GetRegisteredDevices)<br /> |-<br /> | 544 || [3.0.0+] AcquireConnectionTriggerTimeoutEvent<br /> |-<br /> | 545 || [3.0.0+] SendConnectionTrigger<br /> |-<br /> | 546 || [3.0.0+] AcquireDeviceRegisteredEventForControllerSupport<br /> |-<br /> | 547 || [3.0.0+] GetAllowedBluetoothLinksCount<br /> |-<br /> | 548 || [5.0.0+] GetRegisteredDevices<br /> |-<br /> | 549 || [6.0.0+] GetConnectableRegisteredDevices<br /> |-<br /> | 700 || ActivateUniquePad<br /> |-<br /> | 702 || AcquireUniquePadConnectionEventHandle<br /> |-<br /> | 703 || [[#GetUniquePadIds]]<br /> |-<br /> | 751 || AcquireJoyDetachOnBluetoothOffEventHandle<br /> |-<br /> | 800 || ListSixAxisSensorHandles<br /> |-<br /> | 801 || IsSixAxisSensorUserCalibrationSupported<br /> |-<br /> | 802 || ResetSixAxisSensorCalibrationValues<br /> |-<br /> | 803 || StartSixAxisSensorUserCalibration<br /> |-<br /> | 804 || CancelSixAxisSensorUserCalibration<br /> |-<br /> | 805 || [3.0.0+] GetUniquePadBluetoothAddress<br /> |-<br /> | 806 || [3.0.0+] DisconnectUniquePad<br /> |-<br /> | 807 || [5.0.0+] [[#GetUniquePadType]]<br /> |-<br /> | 808 || [5.0.0+] GetUniquePadInterface<br /> |-<br /> | 809 || [5.0.0+] [[#GetUniquePadSerialNumber]]<br /> |-<br /> | 810 || [5.0.0+] GetUniquePadControllerNumber<br /> |-<br /> | 811 || [5.0.0+] GetSixAxisSensorUserCalibrationStage<br /> |-<br /> | 812 || [8.0.0+] GetConsoleUniqueSixAxisSensorHandle<br /> |-<br /> | 821 || StartAnalogStickManualCalibration<br /> |-<br /> | 822 || RetryCurrentAnalogStickManualCalibrationStage<br /> |-<br /> | 823 || CancelAnalogStickManualCalibration<br /> |-<br /> | 824 || ResetAnalogStickManualCalibration<br /> |-<br /> | 825 || [5.0.0+] GetAnalogStickState<br /> |-<br /> | 826 || [5.0.0+] GetAnalogStickManualCalibrationStage<br /> |-<br /> | 827 || [5.0.0+] IsAnalogStickButtonPressed<br /> |-<br /> | 828 || [5.0.0+] IsAnalogStickInReleasePosition<br /> |-<br /> | 829 || [5.0.0+] IsAnalogStickInCircumference<br /> |-<br /> | 830 || [7.0.0+] [[#SetNotificationLedPattern]]<br /> |-<br /> | 831 || [9.0.0+] [[#SetNotificationLedPatternWithTimeout]]<br /> |-<br /> | 832 || [9.0.0+] [[#PrepareHidsForNotificationWake]]<br /> |-<br /> | 850 || [3.0.0+] [[#IsUsbFullKeyControllerEnabled]]<br /> |-<br /> | 851 || [3.0.0+] [[#EnableUsbFullKeyController]]<br /> |-<br /> | 852 || [3.0.0+] [[#IsUsbConnected]]<br /> |-<br /> | 870 || [5.1.0+] IsHandheldButtonPressedOnConsoleMode<br /> |-<br /> | 900 || [1.0.0-9.2.0] ActivateInputDetector<br /> |-<br /> | 901 || [1.0.0-9.2.0] [[#NotifyInputDetector]]<br /> |-<br /> | 1000 || [3.0.0+] InitializeFirmwareUpdate<br /> |-<br /> | 1001 || [3.0.0+] GetFirmwareVersion<br /> |-<br /> | 1002 || [3.0.0+] GetAvailableFirmwareVersion<br /> |-<br /> | 1003 || [3.0.0+] IsFirmwareUpdateAvailable<br /> |-<br /> | 1004 || [3.0.0+] CheckFirmwareUpdateRequired<br /> |-<br /> | 1005 || [3.0.0+] StartFirmwareUpdate<br /> |-<br /> | 1006 || [3.0.0+] AbortFirmwareUpdate<br /> |-<br /> | 1007 || [3.0.0+] GetFirmwareUpdateState<br /> |-<br /> | 1008 || [4.0.0+] ActivateAudioControl<br /> |-<br /> | 1009 || [4.0.0+] AcquireAudioControlEventHandle<br /> |-<br /> | 1010 || [4.0.0+] GetAudioControlStates<br /> |-<br /> | 1011 || [4.0.0+] DeactivateAudioControl<br /> |-<br /> | 1050 || [5.0.0+] IsSixAxisSensorAccurateUserCalibrationSupported<br /> |-<br /> | 1051 || [5.0.0+] StartSixAxisSensorAccurateUserCalibration<br /> |-<br /> | 1052 || [5.0.0+] CancelSixAxisSensorAccurateUserCalibration<br /> |-<br /> | 1053 || [5.0.0+] GetSixAxisSensorAccurateUserCalibrationState<br /> |-<br /> | 1100 || [5.0.0+] [[#GetHidbusSystemServiceObject]]<br /> |-<br /> | 1120 || [6.0.0+] SetFirmwareHotfixUpdateSkipEnabled<br /> |-<br /> | 1130 || [6.0.0+] InitializeUsbFirmwareUpdate<br /> |-<br /> | 1131 || [6.0.0+] FinalizeUsbFirmwareUpdate<br /> |-<br /> | 1132 || [6.0.0+] CheckUsbFirmwareUpdateRequired<br /> |-<br /> | 1133 || [6.0.0+] StartUsbFirmwareUpdate<br /> |-<br /> | 1134 || [6.0.0+] GetUsbFirmwareUpdateState<br /> |-<br /> | 1150 || [8.0.0+] SetTouchScreenMagnification<br /> |-<br /> | 1151 || [9.0.0+] GetTouchScreenFirmwareVersion<br /> |-<br /> | 1152 || [9.0.0+] SetTouchScreenDefaultConfiguration<br /> |-<br /> | 1153 || [9.0.0+] GetTouchScreenDefaultConfiguration<br /> |-<br /> | 1154 || [9.0.0+] [[#IsFirmwareAvailableForNotification]]<br /> |-<br /> | 1155 || [9.0.0+] SetForceHandheldStyleVibration<br /> |-<br /> | 1156 || [9.0.0+] SendConnectionTriggerWithoutTimeoutEvent<br /> |-<br /> | 1157 || [10.0.0+] [[#CancelConnectionTrigger]]<br /> |-<br /> | 1200 || [10.0.0+] [[#IsButtonConfigSupported]]<br /> |-<br /> | 1201 || [11.0.0+] [[#IsButtonConfigEmbeddedSupported]] ([10.0.0-10.2.0] [[#DeleteButtonConfig]])<br /> |-<br /> | 1202 || [11.0.0+] [[#DeleteButtonConfig]] ([10.0.0-10.2.0] [[#SetButtonConfigEnabled]])<br /> |-<br /> | 1203 || [11.0.0+] [[#DeleteButtonConfigEmbedded]] ([10.0.0-10.2.0] [[#IsButtonConfigEnabled]])<br /> |-<br /> | 1204 || [11.0.0+] [[#SetButtonConfigEnabled]] ([10.0.0-10.2.0] [[#SetButtonConfigEmbedded]])<br /> |-<br /> | 1205 || [11.0.0+] [[#SetButtonConfigEmbeddedEnabled]] ([10.0.0-10.2.0] [[#SetButtonConfigFull]])<br /> |-<br /> | 1206 || [11.0.0+] [[#IsButtonConfigEnabled]] ([10.0.0-10.2.0] [[#SetButtonConfigLeft]])<br /> |-<br /> | 1207 || [11.0.0+] [[#IsButtonConfigEmbeddedEnabled]] ([10.0.0-10.2.0] [[#SetButtonConfigRight]])<br /> |-<br /> | 1208 || [11.0.0+] [[#SetButtonConfigEmbedded]] ([10.0.0-10.2.0] [[#GetButtonConfigEmbedded]])<br /> |-<br /> | 1209 || [11.0.0+] [[#SetButtonConfigFull]] ([10.0.0-10.2.0] [[#GetButtonConfigFull]])<br /> |-<br /> | 1210 || [10.0.0-10.2.0] [[#GetButtonConfigLeft]]<br /> |-<br /> | 1211 || [11.0.0+] [[#SetButtonConfigRight]] ([10.0.0-10.2.0] [[#GetButtonConfigRight]])<br /> |-<br /> | 1212 || [11.0.0+] [[#GetButtonConfigEmbedded]]<br /> |-<br /> | 1213 || [11.0.0+] [[#GetButtonConfigFull]]<br /> |-<br /> | 1214 || [11.0.0+] [[#GetButtonConfigLeft]]<br /> |-<br /> | 1215 || [11.0.0+] [[#GetButtonConfigRight]]<br /> |-<br /> | 1250 || [10.0.0+] [[#IsCustomButtonConfigSupported]]<br /> |-<br /> | 1251 || [10.0.0+] [[#IsDefaultButtonConfigEmbedded]]<br /> |-<br /> | 1252 || [10.0.0+] [[#IsDefaultButtonConfigFull]]<br /> |-<br /> | 1253 || [10.0.0+] [[#IsDefaultButtonConfigLeft]]<br /> |-<br /> | 1254 || [10.0.0+] [[#IsDefaultButtonConfigRight]]<br /> |-<br /> | 1255 || [10.0.0+] [[#IsButtonConfigStorageEmbeddedEmpty]]<br /> |-<br /> | 1256 || [10.0.0+] [[#IsButtonConfigStorageFullEmpty]]<br /> |-<br /> | 1257 || [10.0.0+] [[#IsButtonConfigStorageLeftEmpty]]<br /> |-<br /> | 1258 || [10.0.0+] [[#IsButtonConfigStorageRightEmpty]]<br /> |-<br /> | 1259 || [11.0.0-12.1.0] [[#GetButtonConfigStorageEmbeddedDeprecated]] ([10.0.0-10.2.0] [[#GetButtonConfigStorageEmbeddedDeprecated|GetButtonConfigStorageEmbedded]])<br /> |-<br /> | 1260 || [11.0.0-12.1.0] [[#GetButtonConfigStorageFullDeprecated]] ([10.0.0-10.2.0] [[#GetButtonConfigStorageFullDeprecated|GetButtonConfigStorageFull]])<br /> |-<br /> | 1261 || [11.0.0-12.1.0] [[#GetButtonConfigStorageLeftDeprecated]] ([10.0.0-10.2.0] [[#GetButtonConfigStorageLeftDeprecated|GetButtonConfigStorageLeft]])<br /> |-<br /> | 1262 || [11.0.0-12.1.0] [[#GetButtonConfigStorageRightDeprecated]] ([10.0.0-10.2.0] [[#GetButtonConfigStorageRightDeprecated|GetButtonConfigStorageRight]])<br /> |-<br /> | 1263 || [11.0.0-12.1.0] [[#SetButtonConfigStorageEmbeddedDeprecated]] ([10.0.0-10.2.0] [[#SetButtonConfigStorageEmbeddedDeprecated|SetButtonConfigStorageEmbedded]])<br /> |-<br /> | 1264 || [11.0.0-12.1.0] [[#SetButtonConfigStorageFullDeprecated]] ([10.0.0-10.2.0] [[#SetButtonConfigStorageFullDeprecated|SetButtonConfigStorageFull]])<br /> |-<br /> | 1265 || [11.0.0-12.1.0] [[#SetButtonConfigStorageLeftDeprecated]] ([10.0.0-10.2.0] [[#SetButtonConfigStorageLeftDeprecated|SetButtonConfigStorageLeft]])<br /> |-<br /> | 1266 || [11.0.0-12.1.0] [[#SetButtonConfigStorageRightDeprecated]] ([10.0.0-10.2.0] [[#SetButtonConfigStorageRightDeprecated|SetButtonConfigStorageRight]])<br /> |-<br /> | 1267 || [10.0.0+] [[#DeleteButtonConfigStorageEmbedded]]<br /> |-<br /> | 1268 || [10.0.0+] [[#DeleteButtonConfigStorageFull]]<br /> |-<br /> | 1269 || [10.0.0+] [[#DeleteButtonConfigStorageLeft]]<br /> |-<br /> | 1270 || [10.0.0+] [[#DeleteButtonConfigStorageRight]]<br /> |-<br /> | 1271 || [10.0.0+] [[#IsUsingCustomButtonConfig]]<br /> |-<br /> | 1272 || [10.0.0+] [[#IsAnyCustomButtonConfigEnabled]]<br /> |-<br /> | 1273 || [10.0.0+] [[#SetAllCustomButtonConfigEnabled]]<br /> |-<br /> | 1274 || [10.0.0+] [[#SetDefaultButtonConfig]]<br /> |-<br /> | 1275 || [10.0.0+] [[#SetAllDefaultButtonConfig]]<br /> |-<br /> | 1276 || [10.0.0+] [[#SetHidButtonConfigEmbedded]]<br /> |-<br /> | 1277 || [10.0.0+] [[#SetHidButtonConfigFull]]<br /> |-<br /> | 1278 || [10.0.0+] [[#SetHidButtonConfigLeft]]<br /> |-<br /> | 1279 || [10.0.0+] [[#SetHidButtonConfigRight]]<br /> |-<br /> | 1280 || [10.0.0+] [[#GetHidButtonConfigEmbedded]]<br /> |-<br /> | 1281 || [10.0.0+] [[#GetHidButtonConfigFull]]<br /> |-<br /> | 1282 || [10.0.0+] [[#GetHidButtonConfigLeft]]<br /> |-<br /> | 1283 || [10.0.0+] [[#GetHidButtonConfigRight]]<br /> |-<br /> | 1284 || [11.0.0+] [[#GetButtonConfigStorageEmbedded]]<br /> |-<br /> | 1285 || [11.0.0+] [[#GetButtonConfigStorageFull]]<br /> |-<br /> | 1286 || [11.0.0+] [[#GetButtonConfigStorageLeft]]<br /> |-<br /> | 1287 || [11.0.0+] [[#GetButtonConfigStorageRight]]<br /> |-<br /> | 1288 || [11.0.0+] [[#SetButtonConfigStorageEmbedded]]<br /> |-<br /> | 1289 || [11.0.0+] [[#SetButtonConfigStorageFull]]<br /> |-<br /> | 1290 || [11.0.0+] [[#SetButtonConfigStorageLeft]]<br /> |-<br /> | 1291 || [11.0.0+] [[#SetButtonConfigStorageRight]]<br /> |-<br /> | 12010 || [11.0.0+] [[#SetButtonConfigLeft]]<br /> |}<br /> <br /> == SendKeyboardLockKeyEvent ==<br /> Takes an u32 BitFlagSet [[#KeyboardLockKeyEvent]], no output.<br /> <br /> == AcquireHomeButtonEventHandle ==<br /> Takes a PID, an [[AM_services|AppletResourceUserId]], returns an output Event handle.<br /> <br /> The EventClearMode used by sdknso is user-specified. The Event is signaled when [[#HomeButtonState]] is updated.<br /> <br /> This is used by [[AM_services|AM]].<br /> <br /> == ActivateHomeButton ==<br /> Takes a PID, an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> Activates the [[#HomeButtonSharedMemoryFormat|HomeButton]] sharedmem.<br /> <br /> == AcquireSleepButtonEventHandle ==<br /> Takes a PID, an [[AM_services|AppletResourceUserId]], returns an output Event handle.<br /> <br /> The EventClearMode used by sdknso is user-specified. The Event is signaled when [[#SleepButtonState]] is updated.<br /> <br /> This is used by [[AM_services|AM]].<br /> <br /> == ActivateSleepButton ==<br /> Takes a PID, an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> Activates the [[#SleepButtonSharedMemoryFormat|SleepButton]] sharedmem.<br /> <br /> == AcquireCaptureButtonEventHandle ==<br /> Takes a PID, an [[AM_services|AppletResourceUserId]], returns an output Event handle.<br /> <br /> The EventClearMode used by sdknso is user-specified. The Event is signaled when [[#CaptureButtonState]] is updated.<br /> <br /> This is used by [[AM_services|AM]].<br /> <br /> == ActivateCaptureButton ==<br /> Takes a PID, an [[AM_services|AppletResourceUserId]], no output.<br /> <br /> Activates the [[#CaptureButtonSharedMemoryFormat|CaptureButton]] sharedmem.<br /> <br /> == GetMaskedSupportedNpadStyleSet ==<br /> Takes an input u64 AppletResourceUserId, returns an output u32 [[#NpadStyleTag]].<br /> <br /> Official sw uses the output from [[Applet_Manager_services|GetAppletResourceUserIdOfCallerApplet]] with this.<br /> <br /> == GetUniquePadsFromNpad ==<br /> Takes an input u32 [[#NpadIdType]], a type-0xA output buffer, and returns an output s64 for total output entries (which is copied to a s32 by official sw).<br /> <br /> The output buffer contains an array of [[#UniquePadId]].<br /> <br /> == SetVibrationMasterVolume ==<br /> Takes an input 32bit float.<br /> <br /> == GetUniquePadIds ==<br /> Takes a type-0xA output buffer, and returns an output s64 for total output entries (which is copied to a s32 by official sw).<br /> <br /> The output buffer contains an array of [[#UniquePadId]].<br /> <br /> == GetUniquePadType ==<br /> Takes an input [[#UniquePadId]] and returns an output u64 [[#UniquePadType]].<br /> <br /> == GetUniquePadSerialNumber ==<br /> Takes an input [[#UniquePadId]] and returns an output [[#UniquePadSerialNumber]].<br /> <br /> == SetNotificationLedPattern ==<br /> Takes an input [[#NotificationLedPattern]] and an [[#UniquePadId]], no output.<br /> <br /> The specified controller must have a HOME button.<br /> <br /> This sends subcommand 0x38 to the specified controller, for setting the pattern for the HOME button notification LED. The input structure is converted to the format used by this [https://github.com/dekuNukem/Nintendo_Switch_Reverse_Engineering/blob/master/bluetooth_hid_subcommands_notes.md#subcommand-0x38-set-home-light subcommand].<br /> <br /> [9.0.0+] This runs code similar to [[#SetNotificationLedPatternWithTimeout]], except it passes the following param values to an internal func: flag=1 and TimeSpan=0 (with [[#SetNotificationLedPatternWithTimeout]] these are flag=0 and TimeSpan={input value}).<br /> <br /> == SetNotificationLedPatternWithTimeout ==<br /> Takes an input [[#NotificationLedPattern]], an [[#UniquePadId]], and an s64 TimeSpan, no output.<br /> <br /> == PrepareHidsForNotificationWake ==<br /> Takes a type-0x9 input buffer containing an array of [[#UniquePadId]], no output.<br /> <br /> == IsUsbConnected ==<br /> Tales an input [[#UniquePadId]], returns an output bool.<br /> <br /> == NotifyInputDetector ==<br /> Takes an input u32 bitmask InputSourceId, no output.<br /> <br /> This is the only hid:sys command used by USB-sysmodule (with value 0x40).<br /> <br /> == GetHidbusSystemServiceObject ==<br /> No input, returns an [[#IHidbusSystemServer]].<br /> <br /> == IsFirmwareAvailableForNotification ==<br /> Takes a PID, a s32, an [[#UniquePadId]], an [[AM_services|AppletResourceUserId]], returns an output bool.<br /> <br /> sdknso uses hard-coded value 1 for the s32.<br /> <br /> == CancelConnectionTrigger ==<br /> Takes an input &quot;nn::bluetooth::Address&quot;, no output.<br /> <br /> == IsButtonConfigSupported ==<br /> Takes an input [[#UniquePadId]], returns an output bool.<br /> <br /> [11.0.0+] Takes an input [[Bluetooth_Driver_services#Address|Address]], returns an output bool.<br /> <br /> == IsButtonConfigEmbeddedSupported ==<br /> No input, returns an output bool.<br /> <br /> == DeleteButtonConfig ==<br /> Takes an input [[#UniquePadId]], no output.<br /> <br /> [11.0.0+] Takes an input [[Bluetooth_Driver_services#Address|Address]], no output.<br /> <br /> == DeleteButtonConfigEmbedded ==<br /> No input/output.<br /> <br /> == SetButtonConfigEnabled ==<br /> Takes an input bool, an [[#UniquePadId]], no output.<br /> <br /> [11.0.0+] Takes an input bool, an [[Bluetooth_Driver_services#Address|Address]], no output.<br /> <br /> == SetButtonConfigEmbeddedEnabled ==<br /> Takes an input bool, no output.<br /> <br /> == IsButtonConfigEnabled ==<br /> Takes an input [[#UniquePadId]], returns an output bool.<br /> <br /> [11.0.0+] Takes an input [[Bluetooth_Driver_services#Address|Address]], returns an output bool.<br /> <br /> == IsButtonConfigEmbeddedEnabled ==<br /> No input, returns an output bool.<br /> <br /> == SetButtonConfigEmbedded ==<br /> Takes ([10.0.0-10.2.0] an input [[#UniquePadId]]), a type-0x15 input buffer containing a [[#SystemButtonConfigEmbedded]], no output.<br /> <br /> == SetButtonConfigFull ==<br /> Takes an input [[#UniquePadId]], a type-0x15 input buffer containing a [[#SystemButtonConfigFull]], no output.<br /> <br /> [11.0.0+] Takes an input [[Bluetooth_Driver_services#Address|Address]], a type-0x15 input buffer containing a [[#SystemButtonConfigFull]], no output.<br /> <br /> == SetButtonConfigLeft ==<br /> Takes an input [[#UniquePadId]], a type-0x15 input buffer containing a [[#SystemButtonConfigLeft]], no output.<br /> <br /> [11.0.0+] Takes an input [[Bluetooth_Driver_services#Address|Address]], a type-0x15 input buffer containing a [[#SystemButtonConfigLeft]], no output.<br /> <br /> == SetButtonConfigRight ==<br /> Takes an input [[#UniquePadId]], a type-0x15 input buffer containing a [[#SystemButtonConfigRight]], no output.<br /> <br /> [11.0.0+] Takes an input [[Bluetooth_Driver_services#Address|Address]], a type-0x15 input buffer containing a [[#SystemButtonConfigRight]], no output.<br /> <br /> == GetButtonConfigEmbedded ==<br /> Takes ([10.0.0-10.2.0] an input [[#UniquePadId]]), and a type-0x16 output buffer containing a [[#SystemButtonConfigEmbedded]].<br /> <br /> == GetButtonConfigFull ==<br /> Takes an input [[#UniquePadId]], and a type-0x16 output buffer containing a [[#SystemButtonConfigFull]].<br /> <br /> [11.0.0+] Takes an input [[Bluetooth_Driver_services#Address|Address]], and a type-0x16 output buffer containing a [[#SystemButtonConfigFull]].<br /> <br /> == GetButtonConfigLeft ==<br /> Takes an input [[#UniquePadId]], and a type-0x16 output buffer containing a [[#SystemButtonConfigLeft]].<br /> <br /> [11.0.0+] Takes an input [[Bluetooth_Driver_services#Address|Address]], and a type-0x16 output buffer containing a [[#SystemButtonConfigLeft]].<br /> <br /> == GetButtonConfigRight ==<br /> Takes an input [[#UniquePadId]], and a type-0x16 output buffer containing a [[#SystemButtonConfigRight]].<br /> <br /> [11.0.0+] Takes an input [[Bluetooth_Driver_services#Address|Address]], and a type-0x16 output buffer containing a [[#SystemButtonConfigRight]].<br /> <br /> == IsCustomButtonConfigSupported ==<br /> Takes an input [[#UniquePadId]], returns an output bool.<br /> <br /> == IsDefaultButtonConfigEmbedded ==<br /> Takes a type-0x15 input buffer containing a [[#ButtonConfigEmbedded]], returns an output bool.<br /> <br /> This compares the input config with config in state, sets the output bool to whether these match, then returns 0.<br /> <br /> == IsDefaultButtonConfigFull ==<br /> Takes a type-0x15 input buffer containing a [[#ButtonConfigFull]], returns an output bool.<br /> <br /> This compares the input config with config in state, sets the output bool to whether these match, then returns 0.<br /> <br /> == IsDefaultButtonConfigLeft ==<br /> Takes a type-0x15 input buffer containing a [[#ButtonConfigLeft]], returns an output bool.<br /> <br /> This compares the input config with config in state, sets the output bool to whether these match, then returns 0.<br /> <br /> == IsDefaultButtonConfigRight ==<br /> Takes a type-0x15 input buffer containing a [[#ButtonConfigRight]], returns an output bool.<br /> <br /> This compares the input config with config in state, sets the output bool to whether these match, then returns 0.<br /> <br /> == IsButtonConfigStorageEmbeddedEmpty ==<br /> Takes an input s32 entry-index, returns an output bool.<br /> <br /> [10.1.0-10.2.0] This will now Abort if the s32 is negative or &gt;=5. [11.0.0+] This value must now be unsigned &lt;=4, otherwise 0 is returned.<br /> <br /> Uses [[Settings_services#GetButtonConfigSettingsEmbedded|GetButtonConfigSettingsEmbedded]] with count=5 (output s32 ignored). The input entry-index is used with this array. Then the output bool is set to [[Settings_services#ButtonConfigSettings|IsFull]] bit0 == 0. Then 0 is returned.<br /> <br /> == IsButtonConfigStorageFullEmpty ==<br /> Takes an input s32 entry-index, returns an output bool.<br /> <br /> Same as [[#IsButtonConfigStorageEmbeddedEmpty]] except with a different setsys cmd.<br /> <br /> == IsButtonConfigStorageLeftEmpty ==<br /> Takes an input s32 entry-index, returns an output bool.<br /> <br /> Same as [[#IsButtonConfigStorageEmbeddedEmpty]] except with a different setsys cmd.<br /> <br /> == IsButtonConfigStorageRightEmpty ==<br /> Takes an input s32 entry-index, returns an output bool.<br /> <br /> Same as [[#IsButtonConfigStorageEmbeddedEmpty]] except with a different setsys cmd.<br /> <br /> == GetButtonConfigStorageEmbeddedDeprecated ==<br /> Takes an input s32 entry-index, and a type-0x16 output buffer containing a [[#ButtonConfigEmbedded]].<br /> <br /> [10.1.0-10.2.0] This will now Abort if the s32 is negative or &gt;=5.<br /> <br /> [11.0.0+] This now calls the same func internally as [[#GetButtonConfigStorageEmbedded]], except the [[#StorageName]] isn't exposed.<br /> <br /> Uses [[Settings_services#GetButtonConfigSettingsEmbedded|GetButtonConfigSettingsEmbedded]] with count=5 (output s32 ignored). The input entry-index is used with this array. Then an error is thrown if [[Settings_services#ButtonConfigSettings|IsFull]] bit0 is clear. Then the data at +0x1C8 is converted to [[#ButtonConfigEmbedded]], copied to output, and returns 0.<br /> <br /> == GetButtonConfigStorageFullDeprecated ==<br /> Takes an input s32 entry-index, and a type-0x16 output buffer containing a [[#ButtonConfigFull]].<br /> <br /> Same as [[#GetButtonConfigStorageEmbeddedDeprecated]], except this uses a different setsys cmd, and uses a different conversion func / different output struct.<br /> <br /> == GetButtonConfigStorageLeftDeprecated ==<br /> Takes an input s32 entry-index, and a type-0x16 output buffer containing a [[#ButtonConfigLeft]].<br /> <br /> Same as [[#GetButtonConfigStorageEmbeddedDeprecated]], except this uses a different setsys cmd, and uses a different conversion func / different output struct.<br /> <br /> == GetButtonConfigStorageRightDeprecated ==<br /> Takes an input s32 entry-index, and a type-0x16 output buffer containing a [[#ButtonConfigRight]].<br /> <br /> Same as [[#GetButtonConfigStorageEmbeddedDeprecated]], except this uses a different setsys cmd, and uses a different conversion func / different output struct.<br /> <br /> == SetButtonConfigStorageEmbeddedDeprecated ==<br /> Takes an input s32 entry-index, and a type-0x15 input buffer containing a [[#ButtonConfigEmbedded]].<br /> <br /> [10.1.0-10.2.0] This will now Abort if the s32 is negative or &gt;=5.<br /> <br /> [11.0.0+] This now calls the same func internally as [[#SetButtonConfigStorageEmbedded]], except the [[#StorageName]] isn't exposed.<br /> <br /> If the input config matches the [[#IsDefaultButtonConfigEmbedded|default]], this first does: <br /> * Uses [[Settings_services#GetButtonConfigSettingsEmbedded|GetButtonConfigSettingsEmbedded]] with count=5 (output s32 ignored). The input entry-index is used with this array. When [[Settings_services#ButtonConfigSettings|IsFull]] is set, the config is deleted the same way as [[#DeleteButtonConfigStorageEmbedded]] (following the IsFull check).<br /> <br /> Afterwards, this uses [[Settings_services#GetButtonConfigSettingsEmbedded|GetButtonConfigSettingsEmbedded]] with count=5 (output s32 ignored). The input entry-index is used with this array. The input struct is converted, the output from that is copied to +0x1C8 size 0x3E0, IsFull is set, [[Settings_services#SetButtonConfigSettingsEmbedded|SetButtonConfigSettingsEmbedded]] is used with the updated array, and then returns 0.<br /> <br /> == SetButtonConfigStorageFullDeprecated ==<br /> Takes an input s32 entry-index, and a type-0x15 input buffer containing a [[#ButtonConfigFull]].<br /> <br /> Same as [[#SetButtonConfigStorageEmbeddedDeprecated]], except this uses different setsys cmds, and uses a different structs etc.<br /> <br /> == SetButtonConfigStorageLeftDeprecated ==<br /> Takes an input s32 entry-index, and a type-0x15 input buffer containing a [[#ButtonConfigLeft]].<br /> <br /> Same as [[#SetButtonConfigStorageEmbeddedDeprecated]], except this uses different setsys cmds, and uses a different structs etc.<br /> <br /> == SetButtonConfigStorageRightDeprecated ==<br /> Takes an input s32 entry-index, and a type-0x15 input buffer containing a [[#ButtonConfigRight]].<br /> <br /> Same as [[#SetButtonConfigStorageEmbeddedDeprecated]], except this uses different setsys cmds, and uses a different structs etc.<br /> <br /> == DeleteButtonConfigStorageEmbedded ==<br /> Takes an input s32 entry-index, no output.<br /> <br /> [10.1.0-10.2.0] This will now Abort if the s32 is negative or &gt;=5. [11.0.0+] When the input s32 is larger than unsigned value 4, an error is returned.<br /> <br /> Uses [[Settings_services#GetButtonConfigSettingsEmbedded|GetButtonConfigSettingsEmbedded]] with count=5 (output s32 ignored). The input entry-index is used with this array. Then an error is thrown if [[Settings_services#ButtonConfigSettings|IsFull]] bit0 is clear. Then the data at +0x1C8 size 0x3E0 is cleared, IsFull bit0 is cleared, [[Settings_services#SetButtonConfigSettingsEmbedded|SetButtonConfigSettingsEmbedded]] is used with the updated array, and then returns 0.<br /> <br /> == DeleteButtonConfigStorageFull ==<br /> Takes an input s32 entry-index, no output.<br /> <br /> Same as [[#DeleteButtonConfigStorageEmbedded]] except with different setsys cmds.<br /> <br /> == DeleteButtonConfigStorageLeft ==<br /> Takes an input s32 entry-index, no output.<br /> <br /> Same as [[#DeleteButtonConfigStorageEmbedded]] except with different setsys cmds.<br /> <br /> == DeleteButtonConfigStorageRight ==<br /> Takes an input s32 entry-index, no output.<br /> <br /> Same as [[#DeleteButtonConfigStorageEmbedded]] except with different setsys cmds.<br /> <br /> == IsUsingCustomButtonConfig ==<br /> Takes an input [[#UniquePadId]], returns an output bool.<br /> <br /> == IsAnyCustomButtonConfigEnabled ==<br /> No input, returns an output bool.<br /> <br /> == SetAllCustomButtonConfigEnabled ==<br /> Takes an input bool and an AppletResourceUserId, no output.<br /> <br /> == SetDefaultButtonConfig ==<br /> Takes an input [[#UniquePadId]], no output.<br /> <br /> == SetAllDefaultButtonConfig ==<br /> No input/output.<br /> <br /> == SetHidButtonConfigEmbedded ==<br /> Takes an input [[#UniquePadId]] and a type-0x15 input buffer containing a [[#ButtonConfigEmbedded]], no output.<br /> <br /> == SetHidButtonConfigFull ==<br /> Takes an input [[#UniquePadId]] and a type-0x15 input buffer containing a [[#ButtonConfigFull]], no output.<br /> <br /> == SetHidButtonConfigLeft ==<br /> Takes an input [[#UniquePadId]] and a type-0x15 input buffer containing a [[#ButtonConfigLeft]], no output.<br /> <br /> == SetHidButtonConfigRight ==<br /> Takes an input [[#UniquePadId]] and a type-0x15 input buffer containing a [[#ButtonConfigRight]], no output.<br /> <br /> == GetHidButtonConfigEmbedded ==<br /> Takes an input [[#UniquePadId]], and a type-0x16 output buffer containing a [[#ButtonConfigEmbedded]].<br /> <br /> == GetHidButtonConfigFull ==<br /> Takes an input [[#UniquePadId]], and a type-0x16 output buffer containing a [[#ButtonConfigFull]].<br /> <br /> == GetHidButtonConfigLeft ==<br /> Takes an input [[#UniquePadId]], and a type-0x16 output buffer containing a [[#ButtonConfigLeft]].<br /> <br /> == GetHidButtonConfigRight ==<br /> Takes an input [[#UniquePadId]], and a type-0x16 output buffer containing a [[#ButtonConfigRight]].<br /> <br /> == GetButtonConfigStorageEmbedded ==<br /> Takes an input s32, a type-0x16 output buffer containing a [[#ButtonConfigEmbedded]], a type-0x1A output buffer containing a [[#StorageName]].<br /> <br /> When the input s32 is larger than unsigned value 4, an error is returned.<br /> <br /> == GetButtonConfigStorageFull ==<br /> Takes an input s32, a type-0x16 output buffer containing a [[#ButtonConfigFull]], a type-0x1A output buffer containing a [[#StorageName]].<br /> <br /> == GetButtonConfigStorageLeft ==<br /> Takes an input s32, a type-0x16 output buffer containing a [[#ButtonConfigLeft]], a type-0x1A output buffer containing a [[#StorageName]].<br /> <br /> == GetButtonConfigStorageRight ==<br /> Takes an input s32, a type-0x16 output buffer containing a [[#ButtonConfigRight]], a type-0x1A output buffer containing a [[#StorageName]].<br /> <br /> == SetButtonConfigStorageEmbedded ==<br /> Takes an input s32, a type-0x15 input buffer containing a [[#ButtonConfigEmbedded]], a type-0x19 input buffer containing a [[#StorageName]].<br /> <br /> When the input s32 is larger than unsigned value 4, this will immediately return (this cmd always returns 0 regardless).<br /> <br /> == SetButtonConfigStorageFull ==<br /> Takes an input s32, a type-0x15 input buffer containing a [[#ButtonConfigFull]], a type-0x19 input buffer containing a [[#StorageName]].<br /> <br /> == SetButtonConfigStorageLeft ==<br /> Takes an input s32, a type-0x15 input buffer containing a [[#ButtonConfigLeft]], a type-0x19 input buffer containing a [[#StorageName]].<br /> <br /> == SetButtonConfigStorageRight ==<br /> Takes an input s32, a type-0x15 input buffer containing a [[#ButtonConfigRight]], a type-0x19 input buffer containing a [[#StorageName]].<br /> <br /> == IHidbusSystemServer ==<br /> This is &quot;nn::hidbus::IHidbusSystemServer&quot;.<br /> <br /> This was added with [5.0.0+].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 500 || SetAppletResourceUserId<br /> |-<br /> | 501 || RegisterAppletResourceUserId<br /> |-<br /> | 502 || UnregisterAppletResourceUserId<br /> |}<br /> <br /> = hid:tmp =<br /> This is &quot;nn::hid::IHidTemporaryServer&quot;.<br /> <br /> This service was added with [3.0.0+], then removed with [8.0.0+].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || GetConsoleSixAxisSensorCalibrationValues<br /> |}<br /> <br /> = irs =<br /> This is &quot;nn::irsensor::IIrSensorServer&quot;.<br /> <br /> This was added to sdknso with 3.x.<br /> <br /> With sdknso versions pre-4.x PointingProcessor used to be DpdProcessor. The [[#PackedPointingProcessorConfig|packed-config]] with DpdProcessor (besides RequiredMcuVersion) used to be initialized from user-specified config, now it's hard-coded.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 302 || [[#ActivateIrsensor]]<br /> |-<br /> | 303 || [[#DeactivateIrsensor]]<br /> |-<br /> | 304 || [[#GetIrsensorSharedMemoryHandle]]<br /> |-<br /> | 305 || [[#StopImageProcessor]]<br /> |-<br /> | 306 || [[#RunMomentProcessor]]<br /> |-<br /> | 307 || [[#RunClusteringProcessor]]<br /> |-<br /> | 308 || [[#RunImageTransferProcessor]]<br /> |-<br /> | 309 || [[#GetImageTransferProcessorState]]<br /> |-<br /> | 310 || [[#RunTeraPluginProcessor]]<br /> |-<br /> | 311 || [[#GetNpadIrCameraHandle]]<br /> |-<br /> | 312 || [[#RunPointingProcessor]]<br /> |-<br /> | 313 || [[#SuspendImageProcessor]]<br /> |-<br /> | 314 || [3.0.0+] [[#CheckFirmwareVersion]]<br /> |-<br /> | 315 || [4.0.0+] [[#SetFunctionLevel]]<br /> |-<br /> | 316 || [4.0.0+] [[#RunImageTransferExProcessor]]<br /> |-<br /> | 317 || [4.0.0+] [[#RunIrLedProcessor]]<br /> |-<br /> | 318 || [4.0.0+] [[#StopImageProcessorAsync]]<br /> |-<br /> | 319 || [4.0.0+] [[#ActivateIrsensorWithFunctionLevel]]<br /> |}<br /> <br /> == ActivateIrsensor ==<br /> Takes a PID-descriptor and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == DeactivateIrsensor ==<br /> Takes a PID-descriptor and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == GetIrsensorSharedMemoryHandle ==<br /> Takes a PID-descriptor and an [[AM_services|AppletResourceUserId]]. Returns a SharedMemory handle.<br /> <br /> The SharedMemory is &quot;nn::irsensor::detail::StatusManager&quot;. It's mapped with permission read-only and size 0x8000.<br /> <br /> It's structure is as follows:<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x7FB0 || Array of [[#DeviceFormat]]<br /> |-<br /> | 0x7FB0 || 0x50 || Array of [[#AruidFormat]]<br /> |}<br /> <br /> The array of [[#DeviceFormat]] is indexed by [[#IrCameraHandle|PlayerNumber]] and can hold up to 9 entries. The array of [[#AruidFormat]] can only hold up to 5 entries.<br /> <br /> === DeviceFormat ===<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || [[#IrCameraStatus]]<br /> |-<br /> | 0x4 || 0x4 || [[#IrCameraInternalStatus]]<br /> |-<br /> | 0x8 || 0x8 || [[#IrSensorMode]]<br /> |-<br /> | 0x10 || 0xE20 || [[#ProcessorStateRingLifo]]<br /> |}<br /> <br /> ==== ProcessorStateRingLifo ====<br /> This is &quot;nn::irsensor::detail::RingLifo&lt;X,Y&gt;&quot; where &quot;X&quot; is a specialized processor state (e.g.: &quot;nn::irsensor::MomentProcessorState&quot;) and &quot;Y&quot; is the maximum element count (e.g.: 5).<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || Start<br /> |-<br /> | 0x8 || 0x4 || Count<br /> |-<br /> | 0xC || 0x4 || Padding<br /> |-<br /> | 0x10 || Variable || ProcessorState<br /> |}<br /> <br /> The maximum element count is 6 for [[#PointingProcessorMarkerState]] or 5 for any of the other states.<br /> <br /> ProcessorState is specialized depending on the value of [[#IrSensorMode]].<br /> <br /> ===== MomentProcessorState =====<br /> This is &quot;nn::irsensor::MomentProcessorState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || SamplingNumber<br /> |-<br /> | 0x8 || 0x8 || TimeStamp<br /> |-<br /> | 0x10 || 0x4 || AmbientNoiseLevel<br /> |-<br /> | 0x14 || 0x4 || Reserved<br /> |-<br /> | 0x18 || 0x240 || Array of [[#MomentStatistic]]<br /> |}<br /> <br /> The array of [[#MomentStatistic]] can hold up to 48 entries. This array can be accessed as [y + x*8] (this is a 6x8 array). region_x = image_x/6, region_y = image_y/8.<br /> <br /> ====== MomentStatistic ======<br /> In sdknso GetMomentProcessorStates, this loops through each MomentProcessorState-&gt;MomentStatistic entry: &lt;code&gt;AverageIntensity *= scale;&lt;/code&gt; The scale is calculated with: &lt;code&gt;scale = 76800.0f / (float)([[#PackedMomentProcessorConfig|WindowOfInterest]].width * [[#PackedMomentProcessorConfig|WindowOfInterest]].height);&lt;/code&gt; Note that &lt;code&gt;76800 == 320*240&lt;/code&gt;, hence with the default width/height the calculated scale is 1.0f.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || float AverageIntensity<br /> |-<br /> | 0x4 || 0x4 || float CentroidX<br /> |-<br /> | 0x8 || 0x4 || float CentroidY<br /> |}<br /> <br /> ===== ClusteringProcessorState =====<br /> This is &quot;nn::irsensor::ClusteringProcessorState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || SamplingNumber<br /> |-<br /> | 0x8 || 0x8 || TimeStamp<br /> |-<br /> | 0x10 || 0x1 || ObjectCount<br /> |-<br /> | 0x11 || 0x3 || Reserved<br /> |-<br /> | 0x14 || 0x4 || AmbientNoiseLevel<br /> |-<br /> | 0x18 || 0x180 || Array of [[#ClusteringData]]<br /> |}<br /> <br /> The array of [[#ClusteringData]] can hold up to 16 entries.<br /> <br /> ====== ClusteringData ======<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || float AverageIntensity<br /> |-<br /> | 0x4 || 0x4 || float CentroidX<br /> |-<br /> | 0x8 || 0x4 || float CentroidY<br /> |-<br /> | 0xC || 0x4 || PixelCount<br /> |-<br /> | 0x10 || 0x2 || BoundX<br /> |-<br /> | 0x12 || 0x2 || BoundY<br /> |-<br /> | 0x14 || 0x2 || BoundtWidth<br /> |-<br /> | 0x16 || 0x2 || BoundHeight<br /> |}<br /> <br /> ===== PointingProcessorMarkerState =====<br /> This is &quot;nn::irsensor::PointingProcessorMarkerState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || SamplingNumber<br /> |-<br /> | 0x8 || 0x8 || TimeStamp<br /> |-<br /> | 0x10 || 0x1 || PointingStatus<br /> |-<br /> | 0x11 || 0x3 || Reserved<br /> |-<br /> | 0x14 || 0x4 || Unknown<br /> |-<br /> | 0x18 || 0x4 || float Unknown<br /> |-<br /> | 0x1C || 0x4 || float PositionX<br /> |-<br /> | 0x20 || 0x4 || float PositionY<br /> |-<br /> | 0x24 || 0x4 || float Unknown<br /> |-<br /> | 0x28 || 0x2 || WindowOfInterestX<br /> |-<br /> | 0x2A || 0x2 || WindowOfInterestY<br /> |-<br /> | 0x2C || 0x2 || WindowOfInterestWidth<br /> |-<br /> | 0x2E || 0x2 || WindowOfInterestHeight<br /> |-<br /> | 0x30 || 0x1 || PointingStatus<br /> |-<br /> | 0x31 || 0x3 || Reserved<br /> |-<br /> | 0x34 || 0x4 || Unknown<br /> |-<br /> | 0x38 || 0x4 || float Unknown<br /> |-<br /> | 0x3C || 0x4 || float PositionX<br /> |-<br /> | 0x40 || 0x4 || float PositionY<br /> |-<br /> | 0x44 || 0x4 || float Unknown<br /> |-<br /> | 0x48 || 0x2 || WindowOfInterestX<br /> |-<br /> | 0x4A || 0x2 || WindowOfInterestY<br /> |-<br /> | 0x4C || 0x2 || WindowOfInterestWidth<br /> |-<br /> | 0x4E || 0x2 || WindowOfInterestHeight<br /> |-<br /> | 0x50 || 0x1 || PointingStatus<br /> |-<br /> | 0x51 || 0x3 || Reserved<br /> |-<br /> | 0x54 || 0x4 || Unknown<br /> |-<br /> | 0x58 || 0x4 || float Unknown<br /> |-<br /> | 0x5C || 0x4 || float PositionX<br /> |-<br /> | 0x60 || 0x4 || float PositionY<br /> |-<br /> | 0x64 || 0x4 || float Unknown<br /> |-<br /> | 0x68 || 0x2 || WindowOfInterestX<br /> |-<br /> | 0x6A || 0x2 || WindowOfInterestY<br /> |-<br /> | 0x6C || 0x2 || WindowOfInterestWidth<br /> |-<br /> | 0x6E || 0x2 || WindowOfInterestHeight<br /> |}<br /> <br /> ===== PointingProcessorState =====<br /> This is &quot;nn::irsensor::PointingProcessorState&quot;.<br /> <br /> This is created from [[#PointingProcessorMarkerState]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || SamplingNumber<br /> |-<br /> | 0x8 || 0x8 || TimeStamp<br /> |-<br /> | 0x10 || 0x4 || PointingStatus<br /> |-<br /> | 0x14 || 0x4 || float PositionX<br /> |-<br /> | 0x18 || 0x4 || float PositionY<br /> |-<br /> | 0x1C || 0x4 || Reserved<br /> |}<br /> <br /> ===== TeraPluginProcessorState =====<br /> This is &quot;nn::irsensor::TeraPluginProcessorState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || SamplingNumber<br /> |-<br /> | 0x8 || 0x8 || TimeStamp<br /> |-<br /> | 0x10 || 0x4 || AmbientNoiseLevel<br /> |-<br /> | 0x14 || 0x12C || PluginData<br /> |}<br /> <br /> ===== AdaptiveClusteringProcessorState =====<br /> This is &quot;nn::irsensor::AdaptiveClusteringProcessorState&quot;.<br /> <br /> This is created from [[#TeraPluginProcessorState]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || SamplingNumber<br /> |-<br /> | 0x8 || 0x8 || TimeStamp<br /> |-<br /> | 0x10 || 0x4 || AmbientNoiseLevel<br /> |-<br /> | 0x14 || 0x4 || AccuracyLevel<br /> |-<br /> | 0x18 || 0x1 || ObjectCount<br /> |-<br /> | 0x19 || 0x1 || BackgroundIntensity<br /> |-<br /> | 0x1A || 0x6 || Reserved<br /> |-<br /> | 0x20 || 0x200 || Array of [[#AdaptiveClusteringData]]<br /> |}<br /> <br /> The array of [[#AdaptiveClusteringData]] can hold up to 16 entries.<br /> <br /> ====== AdaptiveClusteringData ======<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || float CentroidX<br /> |-<br /> | 0x4 || 0x4 || float CentroidY<br /> |-<br /> | 0x8 || 0x4 || float Area<br /> |-<br /> | 0xC || 0x4 || IsIncomplete<br /> |}<br /> <br /> ===== HandAnalysisImageState =====<br /> This is &quot;nn::irsensor::HandAnalysisImageState&quot;.<br /> <br /> This is created from [[#TeraPluginProcessorState]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || SamplingNumber<br /> |-<br /> | 0x8 || 0x4 || AmbientNoiseLevel<br /> |-<br /> | 0xC || 0x960 || Image<br /> |-<br /> | 0x96C || 0x4 || Reserved<br /> |}<br /> <br /> ===== HandAnalysisSilhouetteState =====<br /> This is &quot;nn::irsensor::HandAnalysisSilhouetteState&quot;.<br /> <br /> This is created from [[#TeraPluginProcessorState]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || SamplingNumber<br /> |-<br /> | 0x8 || 0x4 || AmbientNoiseLevel<br /> |-<br /> | 0xC || 0x1354 || Unknown<br /> |}<br /> <br /> ===== HandAnalysisSilhouetteStateWithFullFrameShape =====<br /> This is &quot;nn::irsensor::HandAnalysisSilhouetteStateWithFullFrameShape&quot;.<br /> <br /> This is created from [[#TeraPluginProcessorState]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || SamplingNumber<br /> |-<br /> | 0x8 || 0x4 || AmbientNoiseLevel<br /> |-<br /> | 0xC || 0x156C || Unknown<br /> |}<br /> <br /> === AruidFormat ===<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || IrSensorAruid<br /> |-<br /> | 0x8 || 0x8 || IrSensorAruidStatus<br /> |}<br /> <br /> == StopImageProcessor ==<br /> Takes a PID-descriptor, an [[#IrCameraHandle]], and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == RunMomentProcessor ==<br /> Takes a PID-descriptor, an [[#IrCameraHandle]], an [[AM_services|AppletResourceUserId]], and a [[#PackedMomentProcessorConfig]]. No output.<br /> <br /> == RunClusteringProcessor ==<br /> Takes a PID-descriptor, an [[#IrCameraHandle]], an [[AM_services|AppletResourceUserId]], and a [[#PackedClusteringProcessorConfig]]. No output.<br /> <br /> == RunImageTransferProcessor ==<br /> Takes a PID-descriptor, an [[#IrCameraHandle]], an [[AM_services|AppletResourceUserId]], a [[#PackedImageTransferProcessorConfig]], an u64 for the TransferMemory's size, and a TransferMemory handle. No output.<br /> <br /> The TransferMemory is created with an user specified buffer and permission none.<br /> <br /> == GetImageTransferProcessorState ==<br /> Takes a PID-descriptor, a type-0x6 output buffer, an [[#IrCameraHandle]], and an [[AM_services|AppletResourceUserId]]. Returns an [[#ImageTransferProcessorState]]. No output.<br /> <br /> == RunTeraPluginProcessor==<br /> Takes a PID-descriptor, an [[#IrCameraHandle]], a [[#PackedTeraPluginProcessorConfig]] (immediately after the previous word), and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == GetNpadIrCameraHandle ==<br /> Takes an input [[#NpadIdType]]. Returns an output [[#IrCameraHandle]].<br /> <br /> == RunPointingProcessor ==<br /> Takes a PID-descriptor, an [[#IrCameraHandle]], a [[#PackedPointingProcessorConfig]] (immediately after the previous word), and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == SuspendImageProcessor ==<br /> Takes a PID-descriptor, an [[#IrCameraHandle]], and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> sdknso uses this from the Run*Processor funcs to suspend the current Processor when the current [[#PackedFunctionLevel|FunctionLevel]] is &gt;= 0x1, prior to starting another Processor if needed (depending on what Processor was already active via a state field). Hence, this cmd is only used with [4.0.0+].<br /> <br /> == CheckFirmwareVersion ==<br /> Takes a PID-descriptor, an [[#IrCameraHandle]], a [[#PackedMcuVersion]], and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> sdknso didn't actually use this until 4.x (the RequiredMcuVersion was also updated with that version).<br /> <br /> == SetFunctionLevel ==<br /> Takes a PID-descriptor, an [[#IrCameraHandle]], a [[#PackedFunctionLevel]], and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == RunImageTransferExProcessor ==<br /> Takes a PID-descriptor, an [[#IrCameraHandle]], an [[AM_services|AppletResourceUserId]], a [[#PackedImageTransferProcessorExConfig]], an u64 for the TransferMemory's size, and a TransferMemory handle. No output.<br /> <br /> The TransferMemory is created with an user specified buffer and permission none.<br /> <br /> == RunIrLedProcessor ==<br /> Takes a PID-descriptor, an [[#IrCameraHandle]], a [[#PackedIrLedProcessorConfig]] (immediately after the previous word), and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == StopImageProcessorAsync ==<br /> Takes a PID-descriptor, an [[#IrCameraHandle]], and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == ActivateIrsensorWithFunctionLevel ==<br /> Takes a PID-descriptor, an [[#PackedFunctionLevel]], and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> = irs:sys =<br /> This is &quot;nn::irsensor::IIrSensorSystemServer&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 500 || [[#SetAppletResourceUserId]]<br /> |-<br /> | 501 || [[#RegisterAppletResourceUserId]]<br /> |-<br /> | 502 || [[#UnregisterAppletResourceUserId]]<br /> |-<br /> | 503 || [[#EnableAppletToGetInput]]<br /> |}<br /> <br /> == SetAppletResourceUserId ==<br /> Takes an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == RegisterAppletResourceUserId ==<br /> Takes a bool and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == UnregisterAppletResourceUserId ==<br /> Takes an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == EnableAppletToGetInput ==<br /> Takes a bool and an [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> = ahid:cd =<br /> This is &quot;nn::ahid::IServerSession&quot;.<br /> <br /> Used for USB HID devices.<br /> <br /> This service no longer exists in [9.0.0+].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#AcquireDevice]]<br /> |-<br /> | 1 || [[#ReleaseDevice]]<br /> |-<br /> | 2 || [[#GetCtrlSession]]<br /> |-<br /> | 3 || [[#GetReadSession]]<br /> |-<br /> | 4 || [1.0.0-2.3.0] [[#GetWriteSession]]<br /> |}<br /> <br /> == AcquireDevice ==<br /> Takes an input s32, no output.<br /> <br /> == ReleaseDevice ==<br /> Takes an input s32, no output.<br /> <br /> == GetCtrlSession ==<br /> Takes an input u32, returns an [[#ICtrlSession]].<br /> <br /> == GetReadSession ==<br /> Takes an input u32, returns an [[#IReadSession]].<br /> <br /> == GetWriteSession ==<br /> Takes an input u32, returns an [[#IWriteSession]].<br /> <br /> == ICtrlSession ==<br /> This is &quot;nn::ahid::ICtrlSession&quot;.<br /> <br /> This no longer exists in [9.0.0+].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || GetString<br /> |-<br /> | 1 || GetCodeBook<br /> |-<br /> | 2 || GetReport<br /> |-<br /> | 3 || SetReport<br /> |-<br /> | 4 || GetIdle<br /> |-<br /> | 5 || SetIdle<br /> |-<br /> | 6 || GetProtocol<br /> |-<br /> | 7 || SetProtocol<br /> |-<br /> | 8 || GetDescriptor<br /> |-<br /> | 9 || SetDescriptor<br /> |-<br /> | 10 || GetStateChangeEvent<br /> |-<br /> | 11 || SignalStateChangeEvent<br /> |-<br /> | 12 || [3.0.0+] Write<br /> |}<br /> <br /> All of these use USB [[USB_services|CtrlXfer]], except for GetStateChangeEvent and SignalStateChangeEvent, and GetCodeBook which copies 0x4000-bytes from state to output.<br /> <br /> == IReadSession ==<br /> This is &quot;nn::ahid::IReadSession&quot;.<br /> <br /> This no longer exists in [9.0.0+].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#Read]]<br /> |}<br /> <br /> === Read ===<br /> Uses [[USB_services|PostBufferAsync]] etc with the INPUT endpoint. The size must be &lt;=0x1000. The actual transfer size is returned in an output u64. The data is copied from the tmpbuf to the output buffer using the actual-transfer-size.<br /> <br /> [3.0.0+] Now takes a total of 8-bytes of input.<br /> <br /> == IWriteSession ==<br /> This is &quot;nn::ahid::IWriteSession&quot;.<br /> <br /> This was removed with [3.0.0+].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#Write]]<br /> |}<br /> <br /> === Write ===<br /> This is the inverse of [[#IReadSession]] cmd0. Uses the OUTPUT endpoint with an input buffer.<br /> <br /> = ahid:hdr =<br /> This is &quot;nn::ahid::hdr::ISession&quot;.<br /> <br /> Used internally for USB HID devices.<br /> <br /> This service no longer exists in [9.0.0+].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || GetDeviceEntries<br /> |-<br /> | 1 || GetDeviceList<br /> |-<br /> | 2 || GetDeviceParameters<br /> |-<br /> | 3 || AttachDevice<br /> |-<br /> | 4 || DetachDevice<br /> |-<br /> | 5 || [6.0.0+] SetDeviceFilter<br /> |}<br /> <br /> = xcd:sys =<br /> This is &quot;nn::xcd::detail::ISystemServer&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#GetDataFormat]]<br /> |-<br /> | 1 || [[#SetDataFormat]]<br /> |-<br /> | 2 || [[#GetMcuState]]<br /> |-<br /> | 3 || [[#SetMcuState]]<br /> |-<br /> | 4 || [[#GetMcuVersionForNfc]]<br /> |-<br /> | 5 || [[#CheckNfcDevicePower]]<br /> |-<br /> | 6 || [5.0.0+] [[#SetMcuStateImmediate]]<br /> |-<br /> | 10 || [[#SetNfcEvent]]<br /> |-<br /> | 11 || [[#GetNfcInfo]]<br /> |-<br /> | 12 || StartNfcDiscovery<br /> |-<br /> | 13 || StopNfcDiscovery<br /> |-<br /> | 14 || StartNtagRead<br /> |-<br /> | 15 || StartNtagWrite<br /> |-<br /> | 16 || SendNfcRawData<br /> |-<br /> | 17 || RegisterMifareKey<br /> |-<br /> | 18 || ClearMifareKey<br /> |-<br /> | 19 || StartMifareRead<br /> |-<br /> | 20 || StartMifareWrite<br /> |-<br /> | 101 || GetAwakeTriggerReasonForLeftRail<br /> |-<br /> | 102 || GetAwakeTriggerReasonForRightRail<br /> |-<br /> | 103 || [10.0.0+] GetAwakeTriggerBatteryLevelTransitionForLeftRail<br /> |-<br /> | 104 || [10.0.0+] GetAwakeTriggerBatteryLevelTransitionForRightRail<br /> |}<br /> <br /> [5.0.0+] SetDataFormat, SetMcuState, and ClearMifareKey: now takes a total of 0xC-bytes of input instead of 0x10.<br /> <br /> == GetDataFormat ==<br /> Takes an input 8-byte handle, returns an output u8.<br /> <br /> == SetDataFormat ==<br /> Takes an input u8 and a 8-byte handle (4-byte alignment), no output.<br /> <br /> == GetMcuState ==<br /> Takes an input 8-byte handle, returns an output u8.<br /> <br /> == SetMcuState ==<br /> Takes an input u8 and a 8-byte handle (4-byte alignment), no output.<br /> <br /> == GetMcuVersionForNfc ==<br /> Takes an input 8-byte handle, returns an output 0x20-byte struct.<br /> <br /> == CheckNfcDevicePower ==<br /> Takes an input 8-byte handle, no output.<br /> <br /> == SetMcuStateImmediate ==<br /> Takes an input u8 and a 8-byte handle (4-byte alignment), no output.<br /> <br /> == SetNfcEvent ==<br /> Takes an input 8-byte handle, returns 2 output Event handles.<br /> <br /> == GetNfcInfo ==<br /> Takes an input 8-byte handle and a type-0x1A output buffer.<br /> <br /> [6.0.0+]: The buffer type is now 0x32 instead of 0x1A.<br /> <br /> This buffer contains a 0x804-byte struct, for the NFC data sent in response to the various other cmds.<br /> <br /> = hidbus =<br /> This is &quot;nn::hidbus::IHidbusServer&quot;.<br /> <br /> This was added with [5.0.0+].<br /> <br /> Official sw opens a temporary service-session for each func using this, with it being closed once done: no global session is kept open.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 1 || [[#GetBusHandle]]<br /> |-<br /> | 2 || [[#IsExternalDeviceConnected]]<br /> |-<br /> | 3 || [[#Initialize]]<br /> |-<br /> | 4 || [[#Finalize]]<br /> |-<br /> | 5 || [[#EnableExternalDevice]]<br /> |-<br /> | 6 || [[#GetExternalDeviceId]]<br /> |-<br /> | 7 || [[#SendCommandAsync]]<br /> |-<br /> | 8 || [[#GetSendCommandAsynceResult]]<br /> |-<br /> | 9 || [[#SetEventForSendCommandAsycResult]]<br /> |-<br /> | 10 || [[#GetSharedMemoryHandle]]<br /> |-<br /> | 11 || [[#EnableJoyPollingReceiveMode]]<br /> |-<br /> | 12 || [[#DisableJoyPollingReceiveMode]]<br /> |-<br /> | 13 || [5.0.0-6.2.0] GetPollingData<br /> |-<br /> | 14 || [6.0.0+] [[#SetStatusManagerType]]<br /> |}<br /> <br /> sdknso doesn't use the GetPollingData cmd.<br /> <br /> == GetBusHandle ==<br /> Takes an input u32 [[#NpadIdType]], an u64 [[#BusType]] and an u64 [[AM_services|AppletResourceUserId]]. Returns an output bool '''HasHandle''' and a [[#BusHandle]].<br /> <br /> '''HasHandle''' indicates whether the [[#BusHandle]] is valid.<br /> <br /> Official sw will assert when [[#BusHandle]] InternalIndex is &gt;=0x11 (&gt;=0x13 with [6.0.0+]). This same check is also done for all funcs using [[#BusHandle]] as input.<br /> <br /> This cmd will throw an error when [[#BusType]] is invalid.<br /> <br /> == IsExternalDeviceConnected ==<br /> Takes an input [[#BusHandle]]. Returns an output bool '''IsAttached'''.<br /> <br /> This is not used by sdknso.<br /> <br /> == Initialize ==<br /> Takes an input [[#BusHandle]] and an u64 [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> Prior to using this cmd, sdknso handles [[#GetSharedMemoryHandle|sharedmem]] mapping if not done previously.<br /> <br /> == Finalize ==<br /> Takes an input [[#BusHandle]] and an u64 [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> == EnableExternalDevice ==<br /> Takes an input bool '''IsEnabled''', a [[#BusHandle]], an u64 '''Version''' and an u64 [[AM_services|AppletResourceUserId]]. No output.<br /> <br /> sdknso passes value 0x38900050018 (0x3A600050018 with 7.x+) for '''Version'''.<br /> <br /> '''IsEnabled''' indicates whether to enable the device (true = enable, false = disable). When false, this will use [[#DisableJoyPollingReceiveMode]] if needed.<br /> <br /> == GetExternalDeviceId ==<br /> Takes an input [[#BusHandle]]. Returns an output u32 '''DeviceId'''.<br /> <br /> == SendCommandAsync ==<br /> Takes a type-0x21 input buffer and a [[#BusHandle]]. No output.<br /> <br /> == GetSendCommandAsynceResult ==<br /> Takes a type-0x22 output buffer and a [[#BusHandle]]. Returns an output u32 '''OutSize'''.<br /> <br /> Official sw copies '''OutSize''' to an output u64, for the actual output size.<br /> <br /> == SetEventForSendCommandAsycResult ==<br /> Takes an input [[#BusHandle]]. Returns an output Event handle '''AttachmentDataReceiveEventHandle''' with EventClearMode=0.<br /> <br /> Official sw with SendAndReceive clears this event (6.x+ sdknso), uses [[#SendCommandAsync]], waits on + clears this event, then uses [[#GetSendCommandAsynceResult]].<br /> <br /> == GetSharedMemoryHandle ==<br /> No input. Returns an output SharedMemory handle.<br /> <br /> The SharedMemory is mapped with size 0x1000 and permissions=R--.<br /> <br /> See also [[#SetStatusManagerType]].<br /> <br /> This sharedmem is the StatusManager. This sharedmem contains an array of 0x100-byte (0x80-byte with [[#SetStatusManagerType|[6.0.0+]]]) entries, with entry-count {max [[#GetBusHandle|BusHandles]]}.<br /> <br /> sdknso only uses the first 0x10-bytes of these entries, the rest is the ignored. Entry structure:<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x1 || IsConnected<br /> |-<br /> | 0x1 || 0x3 || Reserved<br /> |-<br /> | 0x4 || 0x4 || IsConnectedResult<br /> |-<br /> | 0x8 || 0x1 || IsEnabled. Bool flag indicating whether a device is [[#EnableExternalDevice|enabled]].<br /> |-<br /> | 0x9 || 0x1 || IsInFocus. Bool flag indicating whether this entry is valid.<br /> |-<br /> | 0xA || 0x1 || IsPollingMode. Bool flag indicating whether polling is [[#EnableJoyPollingReceiveMode|enabled]].<br /> |-<br /> | 0xB || 0x1 || Reserved<br /> |-<br /> | 0xC || 0x4 || [[#JoyPollingMode|PollingMode]]<br /> |}<br /> <br /> == EnableJoyPollingReceiveMode ==<br /> Takes a type-0x21 input buffer, a TransferMemory handle, an u32 '''TransferMemorySize''', an u32 [[#JoyPollingMode]] and a [[#BusHandle]]. No output.<br /> <br /> The TransferMemory is created with an user-specified output buffer, with permissions=R--.<br /> <br /> The content of the TransferMemory depends of the [[#JoyPollingMode]]. This is used by GetJoyPollingReceivedData. Structure of the TransferMemory (DisableSixAxisPollingDataAccessor, EnableSixAxisPollingDataAccessor, JoyButtonOnlyPollingDataAccessor):<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || Result.<br /> |-<br /> | 0x0 || 0x4 || Padding.<br /> |-<br /> | 0x8 || 0x18 || Initialized sysmodule-side, not used by sdknso.<br /> |-<br /> | 0x20 || 0x8 || Latest entry.<br /> |-<br /> | 0x28 || 0x8 || Total entries.<br /> |}<br /> <br /> The entries specific to the [[#JoyPollingMode]] follow, with 0xA entries total. Each entry starts with an u64 timestamp. Structure for each mode, after the timestamp:<br /> <br /> DisableSixAxisPollingDataAccessor:<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x26 || Data<br /> |-<br /> | 0x26 || 0x1 || Size of data.<br /> |-<br /> | 0x27 || 0x1 || Padding<br /> |-<br /> | 0x28 || 0x8 || Timestamp<br /> |}<br /> <br /> JoyEnableSixAxisPollingDataAccessor:<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || Data<br /> |-<br /> | 0x8 || 0x1 || Size of data.<br /> |-<br /> | 0x9 || 0x7 || Padding<br /> |-<br /> | 0x10 || 0x8 || Timestamp<br /> |}<br /> <br /> JoyButtonOnlyPollingDataAccessor:<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x2C || Data<br /> |-<br /> | 0x2C || 0x1 || Size of data.<br /> |-<br /> | 0x2D || 0x3 || Padding<br /> |-<br /> | 0x30 || 0x8 || Timestamp<br /> |}<br /> <br /> == DisableJoyPollingReceiveMode ==<br /> Takes an input [[#BusHandle]]. No output.<br /> <br /> == SetStatusManagerType ==<br /> Takes an input u32 [[#StatusManagerType]]. No output.<br /> <br /> This is used by sdknso immediately after mapping [[#GetSharedMemoryHandle|sharedmem]] (before [[#Initialize]]) with hard-coded value 0x2.<br /> <br /> = SharedMemoryFormat =<br /> This is &quot;nn::hid::detail::SharedMemoryFormat&quot;.<br /> <br /> The shared memory is a 0x40000 byte read-only segment of memory shared between applications for input. The segment contains structures for most if not all input methods available to applications.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x400<br /> | [[#DebugPadSharedMemoryFormat|DebugPad]]<br /> |-<br /> | 0x400<br /> | 0x3000<br /> | [[#TouchScreenSharedMemoryFormat|TouchScreen]]<br /> |-<br /> | 0x3400<br /> | 0x400<br /> | [[#MouseSharedMemoryFormat|Mouse]]<br /> |-<br /> | 0x3800<br /> | 0x400<br /> | [[#KeyboardSharedMemoryFormat|Keyboard]]<br /> |-<br /> | 0x3C00<br /> | 0x1000<br /> | [[#DigitizerSharedMemoryFormat|Digitizer]] ([1.0.0-9.2.0] [[#BasicXpadSharedMemoryFormat|BasicXpad]])<br /> |-<br /> | 0x4C00<br /> | 0x200<br /> | [[#HomeButtonSharedMemoryFormat|HomeButton]]<br /> |-<br /> | 0x4E00<br /> | 0x200<br /> | [[#SleepButtonSharedMemoryFormat|SleepButton]]<br /> |-<br /> | 0x5000<br /> | 0x200<br /> | [[#CaptureButtonSharedMemoryFormat|CaptureButton]]<br /> |-<br /> | 0x5200<br /> | 0x800<br /> | [[#InputDetectorSharedMemoryFormat|InputDetector]]<br /> |-<br /> | 0x5A00<br /> | 0x4000<br /> | [1.0.0-4.1.0] [[#UniquePadSharedMemoryFormat|UniquePad]]<br /> |-<br /> | 0x9A00<br /> | 0x32000<br /> | [[#NpadSharedMemoryFormat|Npad]]<br /> |-<br /> | 0x3BA00<br /> | 0x800<br /> | [[#GestureSharedMemoryFormat|Gesture]]<br /> |-<br /> | 0x3C200<br /> | 0x1C<br /> | [5.0.0+] [[#ConsoleSixAxisSensorSharedMemoryFormat|ConsoleSixAxisSensor]]<br /> |}<br /> <br /> == DebugPadSharedMemoryFormat ==<br /> This is &quot;nn::hid::detail::DebugPadSharedMemoryFormat&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x2C8<br /> | [[#DebugPadLifo]]<br /> |}<br /> <br /> === DebugPadLifo ===<br /> This is &quot;nn::hid::detail::DebugPadLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x28 * 17<br /> | Array of [[#DebugPadStateAtomicStorage]]<br /> |}<br /> <br /> ==== DebugPadStateAtomicStorage ====<br /> This is &quot;nn::hid::detail::DebugPadStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x20<br /> | [[#DebugPadState]]<br /> |}<br /> <br /> ===== DebugPadState =====<br /> This is &quot;nn::hid::DebugPadState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x4<br /> | [[#DebugPadAttributeSet|Attributes]]<br /> |-<br /> | 0xC<br /> | 0x4<br /> | [[#DebugPadButtonSet|Buttons]]<br /> |-<br /> | 0x10<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickR]]<br /> |-<br /> | 0x18<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickL]]<br /> |}<br /> <br /> == TouchScreenSharedMemoryFormat ==<br /> This is &quot;nn::hid::detail::TouchScreenSharedMemoryFormat&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x2C38<br /> | [[#TouchScreenLifo]]<br /> |}<br /> <br /> === TouchScreenLifo ===<br /> This is &quot;nn::hid::detail::TouchScreenLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x298 * 17<br /> | Array of [[#TouchScreenStateAtomicStorage]]<br /> |}<br /> <br /> ==== TouchScreenStateAtomicStorage ====<br /> This is &quot;nn::hid::detail::TouchScreenStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x290<br /> | [[#TouchScreenState]]<br /> |}<br /> <br /> ===== TouchScreenState =====<br /> This is &quot;nn::hid::detail::TouchScreenState&quot; / &quot;nn::hid::TouchScreenState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x4<br /> | s32 Count<br /> |-<br /> | 0xC<br /> | 0x4<br /> | Reserved<br /> |-<br /> | 0x10<br /> | 0x28 * 16<br /> | [[#TouchState|Touches]]<br /> |}<br /> <br /> == MouseSharedMemoryFormat ==<br /> This is &quot;nn::hid::detail::MouseSharedMemoryFormat&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x350<br /> | [[#MouseLifo]]<br /> |}<br /> <br /> === MouseLifo ===<br /> This is &quot;nn::hid::detail::MouseLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x30 * 17 <br /> | Array of [[#MouseStateAtomicStorage]]<br /> |}<br /> <br /> ==== MouseStateAtomicStorage ====<br /> This is &quot;nn::hid::detail::MouseStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x28<br /> | [[#MouseState]]<br /> |}<br /> <br /> ===== MouseState =====<br /> This is &quot;nn::hid::detail::MouseState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x4<br /> | X<br /> |-<br /> | 0xC<br /> | 0x4<br /> | Y<br /> |-<br /> | 0x10<br /> | 0x4<br /> | DeltaX<br /> |-<br /> | 0x14<br /> | 0x4<br /> | DeltaY<br /> |-<br /> | 0x18<br /> | 0x4<br /> | WheelDeltaX<br /> |-<br /> | 0x1C<br /> | 0x4<br /> | WheelDeltaY<br /> |-<br /> | 0x20<br /> | 0x4<br /> | [[#MouseButtonSet|Buttons]]<br /> |-<br /> | 0x24<br /> | 0x4<br /> | [[#MouseAttributeSet|Attributes]]<br /> |}<br /> <br /> == KeyboardSharedMemoryFormat ==<br /> This is &quot;nn::hid::detail::KeyboardSharedMemoryFormat&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x3D8<br /> | [[#KeyboardLifo]]<br /> |}<br /> <br /> === KeyboardLifo ===<br /> This is &quot;nn::hid::detail::KeyboardLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x38 * 17 <br /> | Array of [[#KeyboardStateAtomicStorage]]<br /> |}<br /> <br /> ==== KeyboardStateAtomicStorage ====<br /> This is &quot;nn::hid::detail::KeyboardStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x30<br /> | [[#KeyboardState]]<br /> |}<br /> <br /> ===== KeyboardState =====<br /> This is &quot;nn::hid::detail::KeyboardState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#KeyboardModifierSet|Modifiers]]<br /> |-<br /> | 0x10<br /> | 0x20<br /> | [[#KeyboardKeySet|Keys]]<br /> |}<br /> <br /> == BasicXpadSharedMemoryFormat ==<br /> This is &quot;nn::hid::detail::BasicXpadSharedMemoryFormat&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x400 * 4<br /> | Array of [[#BasicXpadSharedMemoryEntry]]<br /> |}<br /> <br /> === BasicXpadSharedMemoryEntry ===<br /> This is &quot;nn::hid::detail::BasicXpadSharedMemoryEntry&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x2C8<br /> | [[#BasicXpadLifo]]<br /> |}<br /> <br /> ==== BasicXpadLifo ====<br /> This is &quot;nn::hid::detail::BasicXpadLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x28 * 17 <br /> | Array of [[#BasicXpadStateAtomicStorage]]<br /> |}<br /> <br /> ===== BasicXpadStateAtomicStorage =====<br /> This is &quot;nn::hid::detail::BasicXpadStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x20<br /> | [[#BasicXpadState]]<br /> |}<br /> <br /> ====== BasicXpadState ======<br /> This is &quot;nn::hid::detail::BasicXpadState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x4<br /> | [[#BasicXpadAttributeSet|Attributes]]<br /> |-<br /> | 0xC<br /> | 0x4<br /> | [[#BasicXpadButtonSet|Buttons]]<br /> |-<br /> | 0x10<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickL]]<br /> |-<br /> | 0x18<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickR]]<br /> |}<br /> <br /> == DigitizerSharedMemoryFormat ==<br /> This is &quot;nn::hid::server::DigitizerSharedMemoryFormat&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x680<br /> | [[#DigitizerLifo]]<br /> |}<br /> <br /> === DigitizerLifo ===<br /> This is &quot;nn::hid::server::DigitizerLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x60 * 17 <br /> | Array of [[#DigitizerStateAtomicStorage]]<br /> |}<br /> <br /> ==== DigitizerStateAtomicStorage ====<br /> This is &quot;nn::hid::server::DigitizerStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x58<br /> | [[#DigitizerState]]<br /> |}<br /> <br /> ===== DigitizerState =====<br /> This is &quot;nn::hid::DigitizerState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x4<br /> | <br /> |-<br /> | 0xC<br /> | 0x4<br /> | <br /> |-<br /> | 0x10<br /> | 0x4<br /> | [[#DigitizerAttributeSet|Attributes]]<br /> |-<br /> | 0x14<br /> | 0x4<br /> | [[#DigitizerButtonSet|Buttons]]<br /> |-<br /> | 0x18<br /> | 0x4<br /> | <br /> |-<br /> | 0x1C<br /> | 0x4<br /> | <br /> |-<br /> | 0x20<br /> | 0x4<br /> | <br /> |-<br /> | 0x24<br /> | 0x4<br /> | <br /> |-<br /> | 0x28<br /> | 0x4<br /> | <br /> |-<br /> | 0x2C<br /> | 0x4<br /> | <br /> |-<br /> | 0x30<br /> | 0x4<br /> | <br /> |-<br /> | 0x34<br /> | 0x4<br /> | <br /> |-<br /> | 0x38<br /> | 0x4<br /> | <br /> |-<br /> | 0x3C<br /> | 0x4<br /> | <br /> |-<br /> | 0x40<br /> | 0x4<br /> | <br /> |-<br /> | 0x44<br /> | 0x4<br /> | <br /> |-<br /> | 0x48<br /> | 0x4<br /> | <br /> |-<br /> | 0x4C<br /> | 0x4<br /> | <br /> |-<br /> | 0x50<br /> | 0x4<br /> | <br /> |-<br /> | 0x54<br /> | 0x4<br /> | <br /> |}<br /> <br /> == HomeButtonSharedMemoryFormat ==<br /> This is &quot;nn::hid::detail::HomeButtonSharedMemoryFormat&quot;.<br /> <br /> This is used by [[AM_services|AM]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x1B8<br /> | [[#HomeButtonLifo]]<br /> |}<br /> <br /> === HomeButtonLifo ===<br /> This is &quot;nn::hid::detail::HomeButtonLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x18 * 17<br /> | Array of [[#HomeButtonStateAtomicStorage]]<br /> |}<br /> <br /> ==== HomeButtonStateAtomicStorage ====<br /> This is &quot;nn::hid::detail::HomeButtonStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x10<br /> | [[#HomeButtonState]]<br /> |}<br /> <br /> ===== HomeButtonState =====<br /> This is &quot;nn::hid::system::HomeButtonState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#HomeButtonSet|Buttons]]<br /> |}<br /> <br /> == SleepButtonSharedMemoryFormat ==<br /> This is &quot;nn::hid::detail::SleepButtonSharedMemoryFormat&quot;.<br /> <br /> This is used by [[AM_services|AM]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x1B8<br /> | [[#SleepButtonLifo]]<br /> |}<br /> <br /> === SleepButtonLifo ===<br /> This is &quot;nn::hid::detail::SleepButtonLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x18 * 17<br /> | Array of [[#SleepButtonStateAtomicStorage]]<br /> |}<br /> <br /> ==== SleepButtonStateAtomicStorage ====<br /> This is &quot;nn::hid::detail::SleepButtonStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x10<br /> | [[#SleepButtonState]]<br /> |}<br /> <br /> ===== SleepButtonState =====<br /> This is &quot;nn::hid::system::SleepButtonState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#SleepButtonSet|Buttons]]<br /> |}<br /> <br /> == CaptureButtonSharedMemoryFormat ==<br /> This is &quot;nn::hid::detail::CaptureButtonSharedMemoryFormat&quot;.<br /> <br /> This is used by [[AM_services|AM]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x1B8<br /> | [[#CaptureButtonLifo]]<br /> |}<br /> <br /> === CaptureButtonLifo ===<br /> This is &quot;nn::hid::detail::CaptureButtonLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x18 * 17<br /> | Array of [[#CaptureButtonStateAtomicStorage]]<br /> |}<br /> <br /> ==== CaptureButtonStateAtomicStorage ====<br /> This is &quot;nn::hid::detail::CaptureButtonStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x10<br /> | [[#CaptureButtonState]]<br /> |}<br /> <br /> ===== CaptureButtonState =====<br /> This is &quot;nn::hid::system::CaptureButtonState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#CaptureButtonSet|Buttons]]<br /> |}<br /> <br /> == InputDetectorSharedMemoryFormat ==<br /> This is &quot;nn::hid::detail::InputDetectorSharedMemoryFormat&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x80 * 16<br /> | Array of [[#InputDetectorSharedMemoryEntry]]<br /> |}<br /> <br /> === InputDetectorSharedMemoryEntry ===<br /> This is &quot;nn::hid::detail::InputDetectorSharedMemoryEntry&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x50<br /> | [[#InputDetectorLifo]]<br /> |}<br /> <br /> ==== InputDetectorLifo ====<br /> This is &quot;nn::hid::detail::InputDetectorLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x18 * 2<br /> | Array of [[#InputDetectorStateAtomicStorage]]<br /> |}<br /> <br /> ===== InputDetectorStateAtomicStorage =====<br /> This is &quot;nn::hid::detail::InputDetectorStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x10<br /> | [[#InputDetectorState]]<br /> |}<br /> <br /> ====== InputDetectorState ======<br /> This is &quot;nn::hid::detail::InputDetectorState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | [[#InputSourceState|InputSourceState]]<br /> |-<br /> | 0x8<br /> | 0x8<br /> | SamplingNumber<br /> |}<br /> <br /> == UniquePadSharedMemoryFormat ==<br /> This is &quot;nn::hid::detail::UniquePadSharedMemoryFormat&quot;.<br /> <br /> [5.0.0+] This section has been removed from [[#SharedMemoryFormat]]. [[#UniquePadSharedMemoryFormat]] is now a specialization of [[#NpadSharedMemoryFormat]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x400 * 16<br /> | Array of [[#UniquePadSharedMemoryEntry]]<br /> |}<br /> <br /> == UniquePadSharedMemoryEntry ==<br /> This is &quot;nn::hid::detail::UniquePadSharedMemoryEntry&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x1E0<br /> | [[#UniquePadLifo]]<br /> |}<br /> <br /> === UniquePadLifo ===<br /> This is &quot;nn::hid::detail::UniquePadLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x80<br /> | [[#UniquePadConfigLifo]]<br /> |-<br /> | 0x80<br /> | 0x70 * 2<br /> | Array of [[#AnalogStickCalibrationStateImplLifo]]<br /> |-<br /> | 0x160<br /> | 0x40<br /> | [[#SixAxisSensorUserCalibrationStateLifo]]<br /> |-<br /> | 0x1A0<br /> | 0x40<br /> | UniquePadConfigMutex<br /> |}<br /> <br /> ==== UniquePadConfigLifo ====<br /> This is &quot;nn::hid::detail::UniquePadConfigLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x30 * 2<br /> | Array of [[#UniquePadConfigAtomicStorage]]<br /> |}<br /> <br /> ===== UniquePadConfigAtomicStorage =====<br /> This is &quot;nn::hid::detail::UniquePadConfigAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x28<br /> | [[#UniquePadConfig]]<br /> |}<br /> <br /> ====== UniquePadConfig ======<br /> This is &quot;nn::hid::detail::UniquePadConfig&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | [[#UniquePadType|Type]]<br /> |-<br /> | 0x4<br /> | 0x4<br /> | [[#UniquePadInterface|Interface]]<br /> |-<br /> | 0x8<br /> | 0x10<br /> | [[#UniquePadSerialNumber|SerialNumber]]<br /> |-<br /> | 0x18<br /> | 0x4<br /> | ControllerNumber<br /> |-<br /> | 0x1C<br /> | 0x1<br /> | IsActive<br /> |-<br /> | 0x1D<br /> | 0x3<br /> | Reserved<br /> |-<br /> | 0x20<br /> | 0x8<br /> | SamplingNumber<br /> |}<br /> <br /> ==== AnalogStickCalibrationStateImplLifo ====<br /> This is &quot;nn::hid::detail::AnalogStickCalibrationStateImplLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x28 * 2<br /> | Array of [[#AnalogStickCalibrationStateImplAtomicStorage]]<br /> |}<br /> <br /> ===== AnalogStickCalibrationStateImplAtomicStorage =====<br /> This is &quot;nn::hid::detail::AnalogStickCalibrationStateImplAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x20<br /> | [[#AnalogStickCalibrationStateImpl]]<br /> |}<br /> <br /> ====== AnalogStickCalibrationStateImpl ======<br /> This is &quot;nn::hid::detail::AnalogStickCalibrationStateImpl&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | [[#AnalogStickState|State]]<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#AnalogStickCalibrationFlagsSet|Flags]]<br /> |-<br /> | 0x10<br /> | 0x8<br /> | [[#AnalogStickManualCalibrationStage|Stage]]<br /> |-<br /> | 0x18<br /> | 0x8<br /> | SamplingNumber<br /> |}<br /> <br /> ==== SixAxisSensorUserCalibrationStateLifo ====<br /> This is &quot;nn::hid::detail::SixAxisSensorUserCalibrationStateLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x20 * 2<br /> | Array of [[#SixAxisSensorUserCalibrationStateAtomicStorage]]<br /> |}<br /> <br /> ===== SixAxisSensorUserCalibrationStateAtomicStorage =====<br /> This is &quot;nn::hid::detail::SixAxisSensorUserCalibrationStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x18<br /> | [[#SixAxisSensorUserCalibrationState]]<br /> |}<br /> <br /> ====== SixAxisSensorUserCalibrationState ======<br /> This is &quot;nn::hid::detail::UniquePadConfig&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | [[#SixAxisSensorUserCalibrationFlagsSet|Flags]]<br /> |-<br /> | 0x4<br /> | 0x4<br /> | Reserved<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#SixAxisSensorUserCalibrationStage|Stage]]<br /> |-<br /> | 0x10<br /> | 0x8<br /> | SamplingNumber<br /> |}<br /> <br /> == NpadSharedMemoryFormat ==<br /> This is &quot;nn::hid::detail::NpadSharedMemoryFormat&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x5000 * 10<br /> | Array of [[#NpadSharedMemoryEntry]]<br /> |}<br /> <br /> Each entry describes an available controller:<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Entry<br /> ! Description<br /> |-<br /> | 0 to 7<br /> | Players 1 to 8<br /> |-<br /> | 8<br /> | Handheld Mode<br /> |-<br /> | 9<br /> | Other<br /> |}<br /> <br /> == NpadSharedMemoryEntry ==<br /> This is &quot;nn::hid::detail::NpadSharedMemoryEntry&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x43F0 ([1.0.0-8.1.0] 0x4410)<br /> | [[#NpadInternalState]]<br /> |}<br /> <br /> === NpadInternalState ===<br /> This is &quot;nn::hid::detail::NpadInternalState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | [[#NpadStyleSet|StyleSet]]<br /> |-<br /> | 0x4<br /> | 0x4<br /> | [[#NpadJoyAssignmentMode|JoyAssignmentMode]]<br /> |-<br /> | 0x8<br /> | 0xC<br /> | [[#NpadFullKeyColorState|FullKeyColor]]<br /> |-<br /> | 0x14<br /> | 0x14<br /> | [[#NpadJoyColorState|JoyColor]]<br /> |-<br /> | 0x28<br /> | 0x350<br /> | [[#NpadFullKeyLifo|FullKeyLifo]]<br /> |-<br /> | 0x378<br /> | 0x350<br /> | [[#NpadHandheldLifo|HandheldLifo]]<br /> |-<br /> | 0x6C8<br /> | 0x350<br /> | [[#NpadJoyDualLifo|JoyDualLifo]]<br /> |-<br /> | 0xA18<br /> | 0x350<br /> | [[#NpadJoyLeftLifo|JoyLeftLifo]]<br /> |-<br /> | 0xD68<br /> | 0x350<br /> | [[#NpadJoyRightLifo|JoyRightLifo]]<br /> |-<br /> | 0x10B8<br /> | 0x350<br /> | [[#NpadPalmaLifo|PalmaLifo]] ([1.0.0-3.0.2] [[#NpadSystemLifo|SystemLifo]])<br /> |-<br /> | 0x1408<br /> | 0x350<br /> | [[#NpadSystemExtLifo|SystemExtLifo]] ([4.0.0+] also used for NpadSystem)<br /> |-<br /> | 0x1758<br /> | 0x708<br /> | [[#NpadSixAxisSensorLifo|FullKeySixAxisSensorLifo]]<br /> |-<br /> | 0x1E60<br /> | 0x708<br /> | [[#NpadSixAxisSensorLifo|HandheldSixAxisSensorLifo]]<br /> |-<br /> | 0x2568<br /> | 0x708<br /> | [[#NpadSixAxisSensorLifo|JoyDualLeftSixAxisSensorLifo]]<br /> |-<br /> | 0x2C70<br /> | 0x708<br /> | [[#NpadSixAxisSensorLifo|JoyDualRightSixAxisSensorLifo]]<br /> |-<br /> | 0x3378<br /> | 0x708<br /> | [[#NpadSixAxisSensorLifo|JoyLeftSixAxisSensorLifo]]<br /> |-<br /> | 0x3A80<br /> | 0x708<br /> | [[#NpadSixAxisSensorLifo|JoyRightSixAxisSensorLifo]]<br /> |-<br /> | 0x4188<br /> | 0x4<br /> | [[#DeviceType|DeviceType]]<br /> |-<br /> | 0x418C<br /> | 0x4<br /> | Reserved<br /> |-<br /> | 0x4190<br /> | 0x8<br /> | [[#NpadSystemProperties|SystemProperties]]<br /> |-<br /> | 0x4198<br /> | 0x4<br /> | [[#NpadSystemButtonProperties|SystemButtonProperties]]<br /> |-<br /> | 0x419C<br /> | 0x4<br /> | [[#BatteryLevel|BatteryLevelJoyDual]]<br /> |-<br /> | 0x41A0<br /> | 0x4<br /> | [[#BatteryLevel|BatteryLevelJoyLeft]]<br /> |-<br /> | 0x41A4<br /> | 0x4<br /> | [[#BatteryLevel|BatteryLevelJoyRight]]<br /> |-<br /> | 0x41A8<br /> | 0x60<br /> | [1.0.0-8.1.0] [[#NfcXcdDeviceHandleState|NfcXcdDeviceHandle]] (replaced by [[#GetXcdHandleForNpadWithNfc]])<br /> |-<br /> | 0x41A8<br /> | 0x4<br /> | [9.0.0+] [[#AppletFooterUiAttribute|AppletFooterUiAttributes]]<br /> |-<br /> | 0x41AC<br /> | 0x1<br /> | [9.0.0+] [[#AppletFooterUiType|AppletFooterUiType]]<br /> |-<br /> | 0x41AD<br /> | 0x7B<br /> | [9.0.0+] Reserved<br /> |-<br /> | 0x4208<br /> | 0x40<br /> | [1.0.0-8.1.0] Mutex<br /> |-<br /> | 0x4228 ([1.0.0-8.1.0] 0x4248)<br /> | 0x1B8<br /> | [[#NpadGcTriggerLifo|GcTriggerLifo]]<br /> |-<br /> | 0x43E0 ([1.0.0-8.1.0] 0x4400)<br /> | 0x4<br /> | [[#NpadLarkType|LarkTypeLAndMain]]<br /> |-<br /> | 0x43E4 ([1.0.0-8.1.0] 0x4404)<br /> | 0x4<br /> | [[#NpadLarkType|LarkTypeR]]<br /> |-<br /> | 0x43E8 ([1.0.0-8.1.0] 0x4408)<br /> | 0x4<br /> | [[#NpadLuciaType|LuciaType]]<br /> |-<br /> | 0x43EC ([1.0.0-8.1.0] 0x440C)<br /> | 0x4<br /> | [[#NpadLagerType|LagerType]]<br /> |}<br /> <br /> ==== NpadFullKeyLifo ====<br /> This is &quot;nn::hid::detail::NpadFullKeyLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x30 * 17<br /> | Array of [[#NpadFullKeyStateAtomicStorage]]<br /> |}<br /> <br /> ===== NpadFullKeyStateAtomicStorage =====<br /> This is &quot;nn::hid::detail::NpadFullKeyStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x28<br /> | [[#NpadFullKeyState]]<br /> |}<br /> <br /> ====== NpadFullKeyState ======<br /> This is &quot;nn::hid::NpadFullKeyState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#NpadButtonSet|Buttons]]<br /> |-<br /> | 0x10<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickL]]<br /> |-<br /> | 0x18<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickR]]<br /> |-<br /> | 0x20<br /> | 0x4<br /> | [[#NpadAttributesSet|Attributes]]<br /> |-<br /> | 0x24<br /> | 0x4<br /> | Reserved<br /> |}<br /> <br /> ==== NpadHandheldLifo ====<br /> This is &quot;nn::hid::detail::NpadHandheldLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x30 * 17<br /> | Array of [[#NpadHandheldStateAtomicStorage]]<br /> |}<br /> <br /> ===== NpadHandheldStateAtomicStorage =====<br /> This is &quot;nn::hid::detail::NpadHandheldStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x28<br /> | [[#NpadHandheldState]]<br /> |}<br /> <br /> ====== NpadHandheldState ======<br /> This is &quot;nn::hid::NpadHandheldState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#NpadButtonSet|Buttons]]<br /> |-<br /> | 0x10<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickL]]<br /> |-<br /> | 0x18<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickR]]<br /> |-<br /> | 0x20<br /> | 0x4<br /> | [[#NpadAttributesSet|Attributes]]<br /> |-<br /> | 0x24<br /> | 0x4<br /> | Reserved<br /> |}<br /> <br /> ==== NpadJoyDualLifo ====<br /> This is &quot;nn::hid::detail::NpadJoyDualLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x30 * 17<br /> | Array of [[#NpadJoyDualStateAtomicStorage]]<br /> |}<br /> <br /> ===== NpadJoyDualStateAtomicStorage =====<br /> This is &quot;nn::hid::detail::NpadJoyDualStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x28<br /> | [[#NpadJoyDualState]]<br /> |}<br /> <br /> ====== NpadJoyDualState ======<br /> This is &quot;nn::hid::NpadJoyDualState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#NpadButtonSet|Buttons]]<br /> |-<br /> | 0x10<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickL]]<br /> |-<br /> | 0x18<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickR]]<br /> |-<br /> | 0x20<br /> | 0x4<br /> | [[#NpadAttributesSet|Attributes]]<br /> |-<br /> | 0x24<br /> | 0x4<br /> | Reserved<br /> |}<br /> <br /> ==== NpadJoyLeftLifo ====<br /> This is &quot;nn::hid::detail::NpadJoyLeftLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x30 * 17<br /> | Array of [[#NpadJoyLeftStateAtomicStorage]]<br /> |}<br /> <br /> ===== NpadJoyLeftStateAtomicStorage =====<br /> This is &quot;nn::hid::detail::NpadJoyLeftStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x28<br /> | [[#NpadJoyLeftState]]<br /> |}<br /> <br /> ====== NpadJoyLeftState ======<br /> This is &quot;nn::hid::NpadJoyLeftState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#NpadButtonSet|Buttons]]<br /> |-<br /> | 0x10<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickL]]<br /> |-<br /> | 0x18<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickR]]<br /> |-<br /> | 0x20<br /> | 0x4<br /> | [[#NpadAttributesSet|Attributes]]<br /> |-<br /> | 0x24<br /> | 0x4<br /> | Reserved<br /> |}<br /> <br /> ==== NpadJoyRightLifo ====<br /> This is &quot;nn::hid::detail::NpadJoyRightLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x30 * 17<br /> | Array of [[#NpadJoyRightStateAtomicStorage]]<br /> |}<br /> <br /> ===== NpadJoyRightStateAtomicStorage =====<br /> This is &quot;nn::hid::detail::NpadJoyRightStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x28<br /> | [[#NpadJoyRightState]]<br /> |}<br /> <br /> ====== NpadJoyRightState ======<br /> This is &quot;nn::hid::NpadJoyRightState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#NpadButtonSet|Buttons]]<br /> |-<br /> | 0x10<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickL]]<br /> |-<br /> | 0x18<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickR]]<br /> |-<br /> | 0x20<br /> | 0x4<br /> | [[#NpadAttributesSet|Attributes]]<br /> |-<br /> | 0x24<br /> | 0x4<br /> | Reserved<br /> |}<br /> <br /> ==== NpadPalmaLifo ====<br /> This is &quot;nn::hid::detail::NpadPalmaLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x30 * 17<br /> | Array of [[#NpadPalmaStateAtomicStorage]]<br /> |}<br /> <br /> ===== NpadPalmaStateAtomicStorage =====<br /> This is &quot;nn::hid::detail::NpadPalmaStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x28<br /> | [[#NpadPalmaState]]<br /> |}<br /> <br /> ====== NpadPalmaState ======<br /> This is &quot;nn::hid::NpadPalmaState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#NpadButtonSet|Buttons]]<br /> |-<br /> | 0x10<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickL]]<br /> |-<br /> | 0x18<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickR]]<br /> |-<br /> | 0x20<br /> | 0x4<br /> | [[#NpadAttributesSet|Attributes]]<br /> |-<br /> | 0x24<br /> | 0x4<br /> | Reserved<br /> |}<br /> <br /> ==== NpadSystemLifo ====<br /> This is &quot;nn::hid::detail::NpadSystemLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x30 * 17<br /> | Array of [[#NpadSystemStateAtomicStorage]]<br /> |}<br /> <br /> ===== NpadSystemStateAtomicStorage =====<br /> This is &quot;nn::hid::detail::NpadSystemStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x28<br /> | [[#NpadSystemState]]<br /> |}<br /> <br /> ====== NpadSystemState ======<br /> This is &quot;nn::hid::system::NpadSystemState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#NpadButtonSet|Buttons]]<br /> |-<br /> | 0x10<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickL]]<br /> |-<br /> | 0x18<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickR]]<br /> |-<br /> | 0x20<br /> | 0x4<br /> | [[#NpadAttributesSet|Attributes]]<br /> |-<br /> | 0x24<br /> | 0x4<br /> | Reserved<br /> |}<br /> <br /> ==== NpadSystemExtLifo ====<br /> This is &quot;nn::hid::detail::NpadSystemExtLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x30 * 17<br /> | Array of [[#NpadSystemExtStateAtomicStorage]]<br /> |}<br /> <br /> ===== NpadSystemExtStateAtomicStorage =====<br /> This is &quot;nn::hid::detail::NpadSystemExtStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x28<br /> | [[#NpadSystemExtState]]<br /> |}<br /> <br /> ====== NpadSystemExtState ======<br /> This is &quot;nn::hid::system::NpadSystemExtState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#NpadButtonSet|Buttons]]<br /> |-<br /> | 0x10<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickL]]<br /> |-<br /> | 0x18<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickR]]<br /> |-<br /> | 0x20<br /> | 0x4<br /> | [[#NpadAttributesSet|Attributes]]<br /> |-<br /> | 0x24<br /> | 0x4<br /> | Reserved<br /> |}<br /> <br /> ==== NpadSixAxisSensorLifo ====<br /> This is &quot;nn::hid::detail::NpadSixAxisSensorLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x68 * 17<br /> | Array of [[#SixAxisSensorStateAtomicStorage]]<br /> |}<br /> <br /> ===== SixAxisSensorStateAtomicStorage =====<br /> This is &quot;nn::hid::detail::SixAxisSensorStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x60<br /> | [[#SixAxisSensorState]]<br /> |}<br /> <br /> ====== SixAxisSensorState ======<br /> This is &quot;nn::hid::SixAxisSensorState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | DeltaTime<br /> |-<br /> | 0x8<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x10<br /> | 0x4<br /> | AccelerationX<br /> |-<br /> | 0x14<br /> | 0x4<br /> | AccelerationY<br /> |-<br /> | 0x18<br /> | 0x4<br /> | AccelerationZ<br /> |-<br /> | 0x1C<br /> | 0x4<br /> | AngularVelocityX<br /> |-<br /> | 0x20<br /> | 0x4<br /> | AngularVelocityY<br /> |-<br /> | 0x24<br /> | 0x4<br /> | AngularVelocityZ<br /> |-<br /> | 0x28<br /> | 0x4<br /> | AngleX<br /> |-<br /> | 0x2C<br /> | 0x4<br /> | AngleY<br /> |-<br /> | 0x30<br /> | 0x4<br /> | AngleZ<br /> |-<br /> | 0x34<br /> | 0x24<br /> | [[#DirectionState|Direction]]<br /> |-<br /> | 0x58<br /> | 0x4<br /> | [[#SixAxisSensorAttributeSet|Attributes]]<br /> |-<br /> | 0x5C<br /> | 0x4<br /> | Reserved<br /> |}<br /> <br /> ==== NfcXcdDeviceHandleState ====<br /> This is &quot;nn::hid::detail::NfcXcdDeviceHandleState&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x20 * 2<br /> | Array of [[#NfcXcdDeviceHandleStateImplAtomicStorage]]<br /> |}<br /> <br /> ===== NfcXcdDeviceHandleStateImplAtomicStorage =====<br /> This is &quot;nn::hid::detail::NfcXcdDeviceHandleStateImplAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x18<br /> | [[#NfcXcdDeviceHandleStateImpl]]<br /> |}<br /> <br /> ====== NfcXcdDeviceHandleStateImpl ======<br /> This is &quot;nn::hid::detail::NfcXcdDeviceHandleStateImpl&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | [[#DeviceHandle|Handle]]<br /> |-<br /> | 0x8<br /> | 0x1<br /> | IsAvailable<br /> |-<br /> | 0x9<br /> | 0x1<br /> | IsActivated<br /> |-<br /> | 0xA<br /> | 0x6<br /> | Reserved<br /> |-<br /> | 0x10<br /> | 0x8<br /> | SamplingNumber<br /> |}<br /> <br /> ==== NpadGcTriggerLifo ====<br /> This is &quot;nn::hid::detail::NpadGcTriggerLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x18 * 17<br /> | Array of [[#NpadGcTriggerStateAtomicStorage]]<br /> |}<br /> <br /> ===== NpadGcTriggerStateAtomicStorage =====<br /> This is &quot;nn::hid::detail::NpadGcTriggerStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x10<br /> | [[#NpadGcTriggerState]]<br /> |}<br /> <br /> ====== NpadGcTriggerState ======<br /> This is &quot;nn::hid::server::NpadGcTriggerState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x4<br /> | TriggerL<br /> |-<br /> | 0xC<br /> | 0x4<br /> | TriggerR<br /> |}<br /> <br /> == GestureSharedMemoryFormat ==<br /> This is &quot;nn::hid::detail::GestureSharedMemoryFormat&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x708<br /> | [[#GestureLifo]]<br /> |}<br /> <br /> === GestureLifo ===<br /> This is &quot;nn::hid::detail::GestureLifo&quot;. This is a RingLifo object.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | RingLifoVptr<br /> |-<br /> | 0x8<br /> | 0x8<br /> | BufferCount<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Tail<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Count<br /> |-<br /> | 0x20<br /> | 0x68 * 17<br /> | Array of [[#GestureDummyStateAtomicStorage]]<br /> |}<br /> <br /> ===== GestureDummyStateAtomicStorage =====<br /> This is &quot;nn::hid::detail::GestureDummyStateAtomicStorage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x60<br /> | [[#GestureDummyState]]<br /> |}<br /> <br /> ====== GestureDummyState ======<br /> This is &quot;nn::hid::detail::GestureDummyState&quot; / &quot;nn::hid::GestureState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x8<br /> | ContextNumber<br /> |-<br /> | 0x10<br /> | 0x4<br /> | [[#GestureType|Type]]<br /> |-<br /> | 0x14<br /> | 0x4<br /> | [[#GestureDirection|Direction]]<br /> |-<br /> | 0x18<br /> | 0x4<br /> | X<br /> |-<br /> | 0x1C<br /> | 0x4<br /> | Y<br /> |-<br /> | 0x20<br /> | 0x4<br /> | s32 DeltaX<br /> |-<br /> | 0x24<br /> | 0x4<br /> | s32 DeltaY<br /> |-<br /> | 0x28<br /> | 0x4<br /> | float VelocityX<br /> |-<br /> | 0x2C<br /> | 0x4<br /> | float VelocityY<br /> |-<br /> | 0x30<br /> | 0x4<br /> | [[#GestureAttributeSet|Attributes]]<br /> |-<br /> | 0x34<br /> | 0x4<br /> | Scale<br /> |-<br /> | 0x38<br /> | 0x4<br /> | RotationAngle<br /> |-<br /> | 0x3C<br /> | 0x4<br /> | s32 PointCount<br /> |-<br /> | 0x40<br /> | 0x8 * 4<br /> | [[#GesturePoint|Points]]<br /> |}<br /> <br /> == ConsoleSixAxisSensorSharedMemoryFormat ==<br /> This is &quot;nn::hid::detail::ConsoleSixAxisSensorSharedMemoryFormat&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | SamplingNumber<br /> |-<br /> | 0x8<br /> | 0x1<br /> | IsSevenSixAxisSensorAtRest<br /> |-<br /> | 0x9<br /> | 0x3<br /> | Padding<br /> |-<br /> | 0xC<br /> | 0x4<br /> | VerticalizationError<br /> |-<br /> | 0x10<br /> | 0xC<br /> | GyroBias<br /> |}<br /> <br /> = AnalogStickState =<br /> This is &quot;nn::hid::AnalogStickState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | X<br /> |-<br /> | 0x4<br /> | 0x4<br /> | Y<br /> |}<br /> <br /> = TouchState =<br /> This is &quot;nn::hid::TouchState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | DeltaTime<br /> |-<br /> | 0x8<br /> | 0x4<br /> | [[#TouchAttributeSet|Attributes]]<br /> |-<br /> | 0xC <br /> | 0x4 <br /> | FingerId<br /> |-<br /> | 0x10<br /> | 0x4<br /> | X<br /> |-<br /> | 0x14<br /> | 0x4<br /> | Y<br /> |-<br /> | 0x18<br /> | 0x4<br /> | DiameterX<br /> |-<br /> | 0x1C<br /> | 0x4<br /> | DiameterY<br /> |-<br /> | 0x20<br /> | 0x4<br /> | RotationAngle<br /> |-<br /> | 0x24<br /> | 0x4<br /> | Reserved<br /> |}<br /> <br /> = TouchScreenConfigurationForNx =<br /> This is &quot;nn::hid::TouchScreenConfigurationForNx&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x1<br /> | [[#TouchScreenModeForNx|Mode]]<br /> |-<br /> | 0x8<br /> | 0xF<br /> | Reserved<br /> |}<br /> <br /> = TouchScreenModeForNx =<br /> This is &quot;nn::hid::TouchScreenModeForNx&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || UseSystemSetting<br /> |-<br /> | 1 || Finger<br /> |-<br /> | 2 || Heat2<br /> |}<br /> <br /> = InputSourceState =<br /> This is &quot;nn::hid::system::InputSourceState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | Timestamp<br /> |}<br /> <br /> = NpadControllerColor =<br /> This is &quot;nn::hid::NpadControllerColor&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | Main<br /> |-<br /> | 0x4<br /> | 0x4<br /> | Sub<br /> |}<br /> <br /> = NpadFullKeyColorState =<br /> This is &quot;nn::hid::detail::NpadFullKeyColorState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | [[#ColorAttribute|Attribute]]<br /> |-<br /> | 0x4<br /> | 0x8<br /> | [[#NpadControllerColor|FullKey]]<br /> |}<br /> <br /> = NpadJoyColorState =<br /> This is &quot;nn::hid::detail::NpadJoyColorState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | [[#ColorAttribute|Attribute]]<br /> |-<br /> | 0x4<br /> | 0x8<br /> | [[#NpadControllerColor|Left]]<br /> |-<br /> | 0xC<br /> | 0x8<br /> | [[#NpadControllerColor|Right]]<br /> |}<br /> <br /> = DirectionState =<br /> This is &quot;nn::hid::DirectionState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | XX<br /> |-<br /> | 0x4<br /> | 0x4<br /> | XY<br /> |-<br /> | 0x8<br /> | 0x4<br /> | XZ<br /> |-<br /> | 0xC<br /> | 0x4<br /> | YX<br /> |-<br /> | 0x10<br /> | 0x4<br /> | YY<br /> |-<br /> | 0x14<br /> | 0x4<br /> | YZ<br /> |-<br /> | 0x18<br /> | 0x4<br /> | ZX<br /> |-<br /> | 0x1C<br /> | 0x4<br /> | ZY<br /> |-<br /> | 0x20<br /> | 0x4<br /> | ZZ<br /> |}<br /> <br /> = GesturePoint =<br /> This is &quot;nn::hid::GesturePoint&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | X<br /> |-<br /> | 0x4<br /> | 0x4<br /> | Y<br /> |}<br /> <br /> = ColorAttribute =<br /> This is &quot;nn::hid::detail::ColorAttribute&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Ok<br /> |-<br /> | 1 || ReadError<br /> |-<br /> | 2 || NoController<br /> |}<br /> <br /> = DebugPadAttributeSet =<br /> This is &quot;nn::hid::DebugPadAttributeSet&quot;. This is a BitFlagSet object for [[#DebugPadAttribute]].<br /> <br /> = DebugPadAttribute =<br /> This is &quot;nn::hid::DebugPadAttribute&quot;. This is a 32-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | IsConnected<br /> |}<br /> <br /> = TouchAttributeSet =<br /> This is &quot;nn::hid::TouchAttributeSet&quot;. This is a BitFlagSet object for [[#TouchAttribute]].<br /> <br /> = TouchAttribute =<br /> This is &quot;nn::hid::TouchAttribute&quot;. This is a 32-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | Start<br /> |-<br /> | 1<br /> | End<br /> |}<br /> <br /> = MouseAttributeSet =<br /> This is &quot;nn::hid::MouseAttributeSet&quot;. This is a BitFlagSet object for [[#MouseAttribute]].<br /> <br /> = MouseAttribute =<br /> This is &quot;nn::hid::MouseAttribute&quot;. This is a 32-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | Transferable<br /> |-<br /> | 1<br /> | IsConnected<br /> |}<br /> <br /> = BasicXpadAttributeSet =<br /> This is &quot;nn::hid::BasicXpadAttributeSet&quot;. This is a BitFlagSet object for [[#BasicXpadAttribute]].<br /> <br /> = NpadAttributesSet =<br /> This is &quot;nn::hid::NpadAttributesSet&quot;. This is a BitFlagSet object for [[#NpadAttribute]].<br /> <br /> = NpadAttribute =<br /> This is &quot;nn::hid::NpadAttribute&quot;. This is a 32-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | IsConnected<br /> |-<br /> | 1<br /> | IsWired<br /> |-<br /> | 2<br /> | IsLeftConnected<br /> |-<br /> | 3<br /> | IsLeftWired<br /> |-<br /> | 4<br /> | IsRightConnected<br /> |-<br /> | 5<br /> | IsRightWired<br /> |}<br /> <br /> = SixAxisSensorAttributeSet =<br /> This is &quot;nn::hid::SixAxisSensorAttributeSet&quot;. This is a BitFlagSet object for [[#SixAxisSensorAttribute]].<br /> <br /> = SixAxisSensorAttribute =<br /> This is &quot;nn::hid::SixAxisSensorAttribute&quot;. This is a 32-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | IsConnected<br /> |-<br /> | 1<br /> | IsInterpolated<br /> |}<br /> <br /> = GestureAttributeSet =<br /> This is &quot;nn::hid::GestureAttributeSet&quot;. This is a BitFlagSet object for [[#GestureAttribute]].<br /> <br /> = GestureAttribute =<br /> This is &quot;nn::hid::GestureAttribute&quot;. This is a 32-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 4<br /> | IsNewTouch<br /> |-<br /> | 8<br /> | IsDoubleTap<br /> |}<br /> <br /> = DebugPadButtonSet =<br /> This is &quot;nn::hid::DebugPadButtonSet&quot;. This is a BitFlagSet object for [[#DebugPadButton]].<br /> <br /> = DebugPadButton =<br /> This is &quot;nn::hid::DebugPadButton&quot;. This is a 32-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | A<br /> |-<br /> | 1<br /> | B<br /> |-<br /> | 2<br /> | X<br /> |-<br /> | 3<br /> | Y<br /> |-<br /> | 4<br /> | L<br /> |-<br /> | 5<br /> | R<br /> |-<br /> | 6<br /> | ZL<br /> |-<br /> | 7<br /> | ZR<br /> |-<br /> | 8<br /> | Start<br /> |-<br /> | 9<br /> | Select<br /> |-<br /> | 10<br /> | Left<br /> |-<br /> | 11<br /> | Up<br /> |-<br /> | 12<br /> | Right<br /> |-<br /> | 13<br /> | Down<br /> |}<br /> <br /> = MouseButtonSet =<br /> This is &quot;nn::hid::MouseButtonSet&quot;. This is a BitFlagSet object for [[#MouseButton]].<br /> <br /> = MouseButton =<br /> This is &quot;nn::hid::MouseButton&quot;. This is a 32-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | Left<br /> |-<br /> | 1<br /> | Right<br /> |-<br /> | 2<br /> | Middle<br /> |-<br /> | 3<br /> | Forward<br /> |-<br /> | 4<br /> | Back<br /> |}<br /> <br /> = KeyboardModifierSet =<br /> This is &quot;nn::hid::KeyboardModifierSet&quot;. This is a BitFlagSet object for [[#KeyboardModifier]].<br /> <br /> = KeyboardModifier =<br /> This is &quot;nn::hid::KeyboardModifier&quot;. This is a 32-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | Control<br /> |-<br /> | 1<br /> | Shift<br /> |-<br /> | 2<br /> | LeftAlt<br /> |-<br /> | 3<br /> | RightAlt<br /> |-<br /> | 4<br /> | Gui<br /> |-<br /> | 8<br /> | CapsLock<br /> |-<br /> | 9<br /> | ScrollLock<br /> |-<br /> | 10<br /> | NumLock<br /> |-<br /> | 11<br /> | Katakana<br /> |-<br /> | 12<br /> | Hiragana<br /> |}<br /> <br /> = KeyboardKeySet =<br /> This is &quot;nn::hid::KeyboardKeySet&quot;. This is a BitFlagSet object for [[#KeyboardKey]].<br /> <br /> = KeyboardKey =<br /> This is &quot;nn::hid::KeyboardKey&quot;. This is a 256-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 4<br /> | A<br /> |-<br /> | 5<br /> | B<br /> |-<br /> | 6<br /> | C<br /> |-<br /> | 7<br /> | D<br /> |-<br /> | 8<br /> | E<br /> |-<br /> | 9<br /> | F<br /> |-<br /> | 10<br /> | G<br /> |-<br /> | 11<br /> | H<br /> |-<br /> | 12<br /> | I<br /> |-<br /> | 13<br /> | J<br /> |-<br /> | 14<br /> | K<br /> |-<br /> | 15<br /> | L<br /> |-<br /> | 16<br /> | M<br /> |-<br /> | 17<br /> | N<br /> |-<br /> | 18<br /> | O<br /> |-<br /> | 19<br /> | P<br /> |-<br /> | 20<br /> | Q<br /> |-<br /> | 21<br /> | R<br /> |-<br /> | 22<br /> | S<br /> |-<br /> | 23<br /> | T<br /> |-<br /> | 24<br /> | U<br /> |-<br /> | 25<br /> | V<br /> |-<br /> | 26<br /> | W<br /> |-<br /> | 27<br /> | X<br /> |-<br /> | 28<br /> | Y<br /> |-<br /> | 29<br /> | Z<br /> |-<br /> | 30<br /> | D1<br /> |-<br /> | 31<br /> | D2<br /> |-<br /> | 32<br /> | D3<br /> |-<br /> | 33<br /> | D4<br /> |-<br /> | 34<br /> | D5<br /> |-<br /> | 35<br /> | D6<br /> |-<br /> | 36<br /> | D7<br /> |-<br /> | 37<br /> | D8<br /> |-<br /> | 38<br /> | D9<br /> |-<br /> | 39<br /> | D0<br /> |-<br /> | 40<br /> | Return<br /> |-<br /> | 41<br /> | Escape<br /> |-<br /> | 42<br /> | Backspace<br /> |-<br /> | 43<br /> | Tab<br /> |-<br /> | 44<br /> | Space<br /> |-<br /> | 45<br /> | Minus<br /> |-<br /> | 46<br /> | Plus<br /> |-<br /> | 47<br /> | OpenBracket<br /> |-<br /> | 48<br /> | CloseBracket<br /> |-<br /> | 49<br /> | Pipe<br /> |-<br /> | 50<br /> | Tilde<br /> |-<br /> | 51<br /> | Semicolon<br /> |-<br /> | 52<br /> | Quote<br /> |-<br /> | 53<br /> | Backquote<br /> |-<br /> | 54<br /> | Comma<br /> |-<br /> | 55<br /> | Period<br /> |-<br /> | 56<br /> | Slash<br /> |-<br /> | 57<br /> | CapsLock<br /> |-<br /> | 58<br /> | F1<br /> |-<br /> | 59<br /> | F2<br /> |-<br /> | 60<br /> | F3<br /> |-<br /> | 61<br /> | F4<br /> |-<br /> | 62<br /> | F5<br /> |-<br /> | 63<br /> | F6<br /> |-<br /> | 64<br /> | F7<br /> |-<br /> | 65<br /> | F8<br /> |-<br /> | 66<br /> | F9<br /> |-<br /> | 67<br /> | F10<br /> |-<br /> | 68<br /> | F11<br /> |-<br /> | 69<br /> | F12<br /> |-<br /> | 70<br /> | PrintScreen<br /> |-<br /> | 71<br /> | ScrollLock<br /> |-<br /> | 72<br /> | Pause<br /> |-<br /> | 73<br /> | Insert<br /> |-<br /> | 74<br /> | Home<br /> |-<br /> | 75<br /> | PageUp<br /> |-<br /> | 76<br /> | Delete<br /> |-<br /> | 77<br /> | End<br /> |-<br /> | 78<br /> | PageDown<br /> |-<br /> | 79<br /> | RightArrow<br /> |-<br /> | 80<br /> | LeftArrow<br /> |-<br /> | 81<br /> | DownArrow<br /> |-<br /> | 82<br /> | UpArrow<br /> |-<br /> | 83<br /> | NumLock<br /> |-<br /> | 84<br /> | NumPadDivide<br /> |-<br /> | 85<br /> | NumPadMultiply<br /> |-<br /> | 86<br /> | NumPadSubtract<br /> |-<br /> | 87<br /> | NumPadAdd<br /> |-<br /> | 88<br /> | NumPadEnter<br /> |-<br /> | 89<br /> | NumPad1<br /> |-<br /> | 90<br /> | NumPad2<br /> |-<br /> | 91<br /> | NumPad3<br /> |-<br /> | 92<br /> | NumPad4<br /> |-<br /> | 93<br /> | NumPad5<br /> |-<br /> | 94<br /> | NumPad6<br /> |-<br /> | 95<br /> | NumPad7<br /> |-<br /> | 96<br /> | NumPad8<br /> |-<br /> | 97<br /> | NumPad9<br /> |-<br /> | 98<br /> | NumPad0<br /> |-<br /> | 99<br /> | NumPadDot<br /> |-<br /> | 100<br /> | Backslash<br /> |-<br /> | 101<br /> | Application<br /> |-<br /> | 102<br /> | Power<br /> |-<br /> | 103<br /> | NumPadEquals<br /> |-<br /> | 104<br /> | F13<br /> |-<br /> | 105<br /> | F14<br /> |-<br /> | 106<br /> | F15<br /> |-<br /> | 107<br /> | F16<br /> |-<br /> | 108<br /> | F17<br /> |-<br /> | 109<br /> | F18<br /> |-<br /> | 110<br /> | F19<br /> |-<br /> | 111<br /> | F20<br /> |-<br /> | 112<br /> | F21<br /> |-<br /> | 113<br /> | F22<br /> |-<br /> | 114<br /> | F23<br /> |-<br /> | 115<br /> | F24<br /> |-<br /> | 133<br /> | NumPadComma<br /> |-<br /> | 135<br /> | Ro<br /> |-<br /> | 136<br /> | KatakanaHiragana<br /> |-<br /> | 137<br /> | Yen<br /> |-<br /> | 138<br /> | Henkan<br /> |-<br /> | 139<br /> | Muhenkan<br /> |-<br /> | 140<br /> | NumPadCommaPc98<br /> |-<br /> | 144<br /> | HangulEnglish<br /> |-<br /> | 145<br /> | Hanja<br /> |-<br /> | 146<br /> | Katakana<br /> |-<br /> | 147<br /> | Hiragana<br /> |-<br /> | 148<br /> | ZenkakuHankaku<br /> |-<br /> | 224<br /> | LeftControl<br /> |-<br /> | 225<br /> | LeftShift<br /> |-<br /> | 226<br /> | LeftAlt<br /> |-<br /> | 227<br /> | LeftGui<br /> |-<br /> | 228<br /> | RightControl<br /> |-<br /> | 229<br /> | RightShift<br /> |-<br /> | 230<br /> | RightAlt<br /> |-<br /> | 231<br /> | RightGui<br /> |}<br /> <br /> = KeyboardLockKeyEventSet =<br /> This is &quot;nn::hid::system::KeyboardLockKeyEventSet&quot;. This is a BitFlagSet object for [[#KeyboardLockKeyEvent]].<br /> <br /> = KeyboardLockKeyEvent =<br /> This is &quot;nn::hid::system::KeyboardLockKeyEvent&quot;. This is a 32-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | NumLockOn<br /> |-<br /> | 1<br /> | NumLockOff<br /> |-<br /> | 2<br /> | NumLockToggle<br /> |-<br /> | 3<br /> | CapsLockOn<br /> |-<br /> | 4<br /> | CapsLockOff<br /> |-<br /> | 5<br /> | CapsLockToggle<br /> |-<br /> | 6<br /> | ScrollLockOn<br /> |-<br /> | 7<br /> | ScrollLockOff<br /> |-<br /> | 8<br /> | ScrollLockToggle<br /> |}<br /> <br /> = BasicXpadButtonSet =<br /> This is &quot;nn::hid::BasicXpadButtonSet&quot;. This is a BitFlagSet object for [[#BasicXpadButton]].<br /> <br /> = HomeButtonSet =<br /> This is &quot;nn::hid::system::HomeButtonSet&quot;. This is a BitFlagSet object for [[#HomeButton]].<br /> <br /> = SleepButtonSet =<br /> This is &quot;nn::hid::system::SleepButtonSet&quot;. This is a BitFlagSet object for [[#SleepButton]].<br /> <br /> = CaptureButtonSet =<br /> This is &quot;nn::hid::system::CaptureButtonSet&quot;. This is a BitFlagSet object for [[#CaptureButton]].<br /> <br /> = NpadButtonSet =<br /> This is &quot;nn::hid::NpadButtonSet&quot;. This is a BitFlagSet object for [[#NpadButton]].<br /> <br /> = NpadButton =<br /> This is &quot;nn::hid::NpadButton&quot;. This is a 64-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | A<br /> |-<br /> | 1<br /> | B<br /> |-<br /> | 2<br /> | X<br /> |-<br /> | 3<br /> | Y<br /> |-<br /> | 4<br /> | StickL<br /> |-<br /> | 5<br /> | StickR<br /> |-<br /> | 6<br /> | L<br /> |-<br /> | 7<br /> | R<br /> |-<br /> | 8<br /> | ZL<br /> |-<br /> | 9<br /> | ZR<br /> |-<br /> | 10<br /> | Plus<br /> |-<br /> | 11<br /> | Minus<br /> |-<br /> | 12<br /> | Left<br /> |-<br /> | 13<br /> | Up<br /> |-<br /> | 14<br /> | Right<br /> |-<br /> | 15<br /> | Down<br /> |-<br /> | 16<br /> | StickLLeft<br /> |-<br /> | 17<br /> | StickLUp<br /> |-<br /> | 18<br /> | StickLRight<br /> |-<br /> | 19<br /> | StickLDown<br /> |-<br /> | 20<br /> | StickRLeft<br /> |-<br /> | 21<br /> | StickRUp<br /> |-<br /> | 22<br /> | StickRRight<br /> |-<br /> | 23<br /> | StickRDown<br /> |-<br /> | 24<br /> | LeftSL<br /> |-<br /> | 25<br /> | LeftSR<br /> |-<br /> | 26<br /> | RightSL<br /> |-<br /> | 27<br /> | RightSR<br /> |-<br /> | 28<br /> | Palma<br /> |-<br /> | 29<br /> | Verification<br /> |-<br /> | 30<br /> | HandheldLeftB (Left B button on NES controllers in Handheld mode)<br /> |-<br /> | 31<br /> | LagonCLeft (Left C button in N64 controller)<br /> |-<br /> | 32<br /> | LagonCUp (Up C button in N64 controller)<br /> |-<br /> | 33<br /> | LagonCRight (Right C button in N64 controller)<br /> |-<br /> | 34<br /> | LagonCDown (Down C button in N64 controller)<br /> |}<br /> <br /> = AnalogStickCalibrationFlagsSet =<br /> This is &quot;nn::hid::detail::AnalogStickCalibrationFlagsSet&quot;. This is a BitFlagSet object for [[#AnalogStickCalibrationFlags]].<br /> <br /> = SixAxisSensorUserCalibrationFlagsSet =<br /> This is &quot;nn::hid::detail::SixAxisSensorUserCalibrationFlagsSet&quot;. This is a BitFlagSet object for [[#SixAxisSensorUserCalibrationFlags]].<br /> <br /> = NpadStyleSet =<br /> This is &quot;nn::hid::NpadStyleSet&quot;. This is a BitFlagSet object for [[#NpadStyleTag]].<br /> <br /> = NpadStyleTag =<br /> This is &quot;nn::hid::NpadStyleTag&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Bits<br /> ! Description<br /> ! Notes<br /> |-<br /> | 0<br /> | NpadStyleFullKey<br /> | Pro Controller<br /> |-<br /> | 1<br /> | NpadStyleHandheld<br /> | Joy-Con controller in handheld mode<br /> |-<br /> | 2<br /> | NpadStyleJoyDual<br /> | Joy-Con controller in dual mode<br /> |-<br /> | 3<br /> | NpadStyleJoyLeft<br /> | Joy-Con left controller in single mode<br /> |-<br /> | 4<br /> | NpadStyleJoyRight<br /> | Joy-Con right controller in single mode<br /> |-<br /> | 5<br /> | NpadStyleGc<br /> | GameCube controller<br /> |-<br /> | 6<br /> | NpadStylePalma<br /> | Poké Ball Plus controller<br /> |-<br /> | 7<br /> | NpadStyleLark<br /> | NES/Famicom controller<br /> |-<br /> | 8<br /> | NpadStyleHandheldLark<br /> | NES/Famicom controller in handheld mode<br /> |-<br /> | 9<br /> | NpadStyleLucia<br /> | SNES controller<br /> |-<br /> | 10<br /> | NpadStyleLagon<br /> | N64 controller<br /> |-<br /> | 11<br /> | NpadStyleLager<br /> | Sega Genesis controller<br /> |-<br /> | 12-28<br /> | Reserved<br /> |<br /> |-<br /> | 29<br /> | NpadStyleSystemExt<br /> | Generic external controller<br /> |-<br /> | 30<br /> | NpadStyleSystem<br /> | Generic controller<br /> |-<br /> | 31<br /> | Reserved<br /> |<br /> |}<br /> <br /> = NpadDeviceTypeSet =<br /> This is &quot;nn::hid::system::NpadDeviceType&quot;. This is a BitFlagSet object for [[#NpadDeviceType]].<br /> <br /> = NpadSystemPropertiesSet =<br /> This is &quot;nn::hid::detail::NpadSystemPropertiesSet&quot;. This is a BitFlagSet object for [[#NpadSystemProperties]].<br /> <br /> = NpadSystemProperties =<br /> This is &quot;nn::hid::NpadSystemProperties&quot;. This is a 64-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | IsChargingJoyDual<br /> |-<br /> | 1<br /> | IsChargingJoyLeft<br /> |-<br /> | 2<br /> | IsChargingJoyRight<br /> |-<br /> | 3<br /> | IsPoweredJoyDual<br /> |-<br /> | 4<br /> | IsPoweredJoyLeft<br /> |-<br /> | 5<br /> | IsPoweredJoyRight<br /> |-<br /> | 9<br /> | IsUnsuportedButtonPressedOnNpadSystem<br /> |-<br /> | 10<br /> | IsUnsuportedButtonPressedOnNpadSystemExt<br /> |-<br /> | 11<br /> | IsAbxyButtonOriented<br /> |-<br /> | 12<br /> | IsSlSrButtonOriented<br /> |-<br /> | 13<br /> | [4.0.0+] IsPlusAvailable<br /> |-<br /> | 14<br /> | [4.0.0+] IsMinusAvailable<br /> |-<br /> | 15<br /> | [8.0.0+] IsDirectionalButtonsAvailable<br /> |}<br /> <br /> = NpadSystemButtonPropertiesSet =<br /> This is &quot;nn::hid::detail::NpadSystemButtonPropertiesSet&quot;. This is a BitFlagSet object for [[#NpadSystemButtonProperties]].<br /> <br /> = NpadSystemButtonProperties =<br /> This is &quot;nn::hid::NpadSystemButtonProperties&quot;. This is a 32-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | IsUnintendedHomeButtonInputProtectionEnabled<br /> |}<br /> <br /> = AppletFooterUiAttributesSet =<br /> This is &quot;nn::hid::system::AppletFooterUiAttributesSet&quot;. This is a BitFlagSet object for [[#AppletFooterUiAttribute]].<br /> <br /> = UniquePadType =<br /> This is &quot;nn::hid::system::UniquePadType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Embedded<br /> |-<br /> | 1 || FullKeyController<br /> |-<br /> | 2 || RightController<br /> |-<br /> | 3 || LeftController<br /> |-<br /> | 4 || DebugPadController<br /> |}<br /> <br /> = UniquePadInterface =<br /> This is &quot;nn::hid::system::UniquePadInterface&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Embedded<br /> |-<br /> | 1 || Rail<br /> |-<br /> | 2 || Bluetooth<br /> |-<br /> | 3 || Usb<br /> |}<br /> <br /> = UniquePadSerialNumber =<br /> This is &quot;nn::hid::system::UniquePadSerialNumber&quot;. This is a 0x10 byte value.<br /> <br /> = UniquePadId =<br /> This is &quot;nn::hid::system::UniquePadId&quot;. This is a 8 byte value.<br /> <br /> = AnalogStickManualCalibrationStage =<br /> This is &quot;nn::hid::system::AnalogStickManualCalibrationStage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || ReleaseFromRight<br /> |-<br /> | 1 || ReleaseFromBottom<br /> |-<br /> | 2 || ReleaseFromLeft<br /> |-<br /> | 3 || ReleaseFromTop<br /> |-<br /> | 4 || Rotate<br /> |-<br /> | 5 || Update<br /> |-<br /> | 6 || Completed<br /> |-<br /> | 7 || Clear<br /> |-<br /> | 8 || ClearCompleted<br /> |}<br /> <br /> = SixAxisSensorUserCalibrationStage =<br /> This is &quot;nn::hid::system::SixAxisSensorUserCalibrationStage&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Measuring<br /> |-<br /> | 1 || Update<br /> |-<br /> | 2 || Completed<br /> |}<br /> <br /> = NpadJoyHoldType =<br /> This is &quot;nn::hid::NpadJoyHoldType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Vertical<br /> |-<br /> | 1 || Horizontal<br /> |}<br /> <br /> = NpadJoyDeviceType =<br /> This is &quot;nn::hid::NpadJoyDeviceType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Left<br /> |-<br /> | 1 || Right<br /> |}<br /> <br /> = NpadHandheldActivationMode =<br /> This is &quot;nn::hid::NpadHandheldActivationMode&quot;.<br /> <br /> This controls how many joycons must be attached for handheld mode to be triggered (Dual = 2, Single = 1, None = 0).<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Dual<br /> |-<br /> | 1 || Single<br /> |-<br /> | 2 || None<br /> |}<br /> <br /> = NpadJoyAssignmentMode =<br /> This is &quot;nn::hid::NpadJoyAssignmentMode&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Dual<br /> |-<br /> | 1 || Single<br /> |}<br /> <br /> = NpadCommunicationMode =<br /> This is &quot;nn::hid::NpadCommunicationMode&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || 5ms<br /> |-<br /> | 1 || 10ms<br /> |-<br /> | 2 || 15ms<br /> |-<br /> | 3 || Default<br /> |}<br /> <br /> = AppletDetailedUiType =<br /> This is &quot;nn::hid::system::AppletDetailedUiType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0x00000000 || None<br /> |-<br /> | 0x01000000 || HandheldNone<br /> |-<br /> | 0x02000000 || HandheldJoyConLeftOnly<br /> |-<br /> | 0x02000001 || HandheldLarkHvc1Only<br /> |-<br /> | 0x02000002 || HandheldLarkNesLeftOnly<br /> |-<br /> | 0x03000000 || HandheldJoyConRightOnly<br /> |-<br /> | 0x03000001 || HandheldLarkHvc2Only<br /> |-<br /> | 0x03000002 || HandheldLarkNesRightOnly<br /> |-<br /> | 0x04000000 || HandheldJoyConLeftJoyConRight<br /> |-<br /> | 0x04000001 || HandheldJoyConLeftLarkHvc2<br /> |-<br /> | 0x04000002 || HandheldJoyConLeftLarkNesRight<br /> |-<br /> | 0x04000003 || HandheldLarkHvc1JoyConRight<br /> |-<br /> | 0x04000004 || HandheldLarkHvc1LarkHvc2<br /> |-<br /> | 0x04000005 || HandheldLarkHvc1LarkNesRight<br /> |-<br /> | 0x04000006 || HandheldLarkNesLeftJoyConRight<br /> |-<br /> | 0x04000007 || HandheldLarkNesLeftLarkHvc2<br /> |-<br /> | 0x04000008 || HandheldLarkNesLeftLarkNesRight<br /> |-<br /> | 0x05000000 || JoyDual<br /> |-<br /> | 0x06000000 || JoyDualLeftOnly<br /> |-<br /> | 0x07000000 || JoyDualRightOnly<br /> |-<br /> | 0x08000000 || JoyLeftHorizontal<br /> |-<br /> | 0x09000000 || JoyLeftVertical<br /> |-<br /> | 0x0A000000 || JoyRightHorizontal<br /> |-<br /> | 0x0B000000 || JoyRightVertical<br /> |-<br /> | 0x0C000000 || SwitchProController<br /> |-<br /> | 0x0D000000 || CompatibleProController<br /> |-<br /> | 0x0E000000 || CompatibleJoyCon<br /> |-<br /> | 0x0F000000 || LarkHvc1<br /> |-<br /> | 0x10000000 || LarkHvc2<br /> |-<br /> | 0x11000000 || LarkNesLeft<br /> |-<br /> | 0x12000000 || LarkNesRight<br /> |-<br /> | 0x13000000 || LuciaU<br /> |-<br /> | 0x13000001 || LuciaJ<br /> |-<br /> | 0x13000002 || LuciaE<br /> |-<br /> | 0x14000000 || Verification<br /> |-<br /> | 0x15000000 || [13.0.0+] Lagon<br /> |-<br /> | 0xFFFFFFFF || Unknown<br /> |}<br /> <br /> = AppletFooterUiType =<br /> This is &quot;nn::hid::system::AppletFooterUiType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || None<br /> |-<br /> | 1 || HandheldNone<br /> |-<br /> | 2 || HandheldJoyConLeftOnly<br /> |-<br /> | 3 || HandheldJoyConRightOnly<br /> |-<br /> | 4 || HandheldJoyConLeftJoyConRight<br /> |-<br /> | 5 || JoyDual<br /> |-<br /> | 6 || JoyDualLeftOnly<br /> |-<br /> | 7 || JoyDualRightOnly<br /> |-<br /> | 8 || JoyLeftHorizontal<br /> |-<br /> | 9 || JoyLeftVertical<br /> |-<br /> | 10 || JoyRightHorizontal<br /> |-<br /> | 11 || JoyRightVertical<br /> |-<br /> | 12 || SwitchProController<br /> |-<br /> | 13 || CompatibleProController<br /> |-<br /> | 14 || CompatibleJoyCon<br /> |-<br /> | 15 || LarkHvc1<br /> |-<br /> | 16 || LarkHvc2<br /> |-<br /> | 17 || LarkNesLeft<br /> |-<br /> | 18 || LarkNesRight<br /> |-<br /> | 19 || Lucia<br /> |-<br /> | 20 || Verification<br /> |-<br /> | 21 || [13.0.0+] Lagon<br /> |}<br /> <br /> = NpadIdType =<br /> This is &quot;nn::hid::NpadIdType&quot;. This is the controller index used in [[#SharedMemoryFormat|sharedmem]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0x0 || No1<br /> |-<br /> | 0x1 || No2<br /> |-<br /> | 0x2 || No3<br /> |-<br /> | 0x3 || No4<br /> |-<br /> | 0x4 || No5<br /> |-<br /> | 0x5 || No6<br /> |-<br /> | 0x6 || No7<br /> |-<br /> | 0x7 || No8<br /> |-<br /> | 0x10 || Other<br /> |-<br /> | 0x20 || Handheld<br /> |}<br /> <br /> = NpadInterfaceType =<br /> This is &quot;nn::hid::NpadInterfaceType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 1 || Bluetooth<br /> |-<br /> | 2 || Rail<br /> |-<br /> | 3 || USB<br /> |-<br /> | 4 || Unknown<br /> |}<br /> <br /> = NpadLarkType =<br /> This is &quot;nn::hid::NpadLarkType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Invalid<br /> |-<br /> | 1 || H1<br /> |-<br /> | 2 || H2<br /> |-<br /> | 3 || NL<br /> |-<br /> | 4 || NR<br /> |}<br /> <br /> = NpadLuciaType =<br /> This is &quot;nn::hid::NpadLuciaType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Invalid<br /> |-<br /> | 1 || J<br /> |-<br /> | 2 || E<br /> |-<br /> | 3 || U<br /> |}<br /> <br /> = NpadLagerType =<br /> This is &quot;nn::hid::NpadLagerType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Invalid<br /> |-<br /> | 1 || J<br /> |-<br /> | 2 || E<br /> |-<br /> | 3 || U<br /> |}<br /> <br /> = GestureDirection =<br /> This is &quot;nn::hid::GestureDirection&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || None<br /> |-<br /> | 1 || Left<br /> |-<br /> | 2 || Up<br /> |-<br /> | 3 || Right<br /> |-<br /> | 4 || Down<br /> |}<br /> <br /> = GestureType =<br /> This is &quot;nn::hid::GestureType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Idle<br /> |-<br /> | 1 || Complete<br /> |-<br /> | 2 || Cancel<br /> |-<br /> | 3 || Touch<br /> |-<br /> | 4 || Press<br /> |-<br /> | 5 || Tap<br /> |-<br /> | 6 || Pan<br /> |-<br /> | 7 || Swipe<br /> |-<br /> | 8 || Pinch<br /> |-<br /> | 9 || Rotate<br /> |}<br /> <br /> = DeviceHandle =<br /> This is &quot;nn::xcd::DeviceHandle&quot;. This is a 8 byte value.<br /> <br /> = DeviceType =<br /> This is &quot;nn::hid::system::DeviceType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Bits<br /> ! Description<br /> |-<br /> | 0<br /> | FullKey<br /> |-<br /> | 1<br /> | DebugPad<br /> |-<br /> | 2<br /> | HandheldLeft<br /> |-<br /> | 3<br /> | HandheldRight<br /> |-<br /> | 4<br /> | JoyLeft<br /> |-<br /> | 5<br /> | JoyRight<br /> |-<br /> | 6<br /> | Palma<br /> |-<br /> | 7<br /> | LarkHvcLeft<br /> |-<br /> | 8<br /> | LarkHvcRight<br /> |-<br /> | 9<br /> | LarkNesLeft<br /> |-<br /> | 10<br /> | LarkNesRight<br /> |-<br /> | 11<br /> | HandheldLarkHvcLeft<br /> |-<br /> | 12<br /> | HandheldLarkHvcRight<br /> |-<br /> | 13<br /> | HandheldLarkNesLeft<br /> |-<br /> | 14<br /> | HandheldLarkNesRight<br /> |-<br /> | 15<br /> | Lucia<br /> |-<br /> | 16<br /> | Lagon<br /> |-<br /> | 17<br /> | Lager<br /> |-<br /> | 18-30<br /> | Reserved<br /> |-<br /> | 31<br /> | System<br /> |}<br /> <br /> = DeviceTypeInternal =<br /> This is &quot;nn::hid::detail::DeviceTypeInternal&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Bits<br /> ! Description<br /> |-<br /> | 0-7<br /> | BIT(N*4+0) = Pro Controller, BIT(N*4+1) = Joy-Con Left, BIT(N*4+2) = Joy-Con Right, BIT(N*4+3) = invalid. Where N is 0-1.<br /> |-<br /> | 8-10<br /> | Pro Controller<br /> |-<br /> | 11<br /> | Famicom left controller<br /> |-<br /> | 12<br /> | Famicom right controller (with microphone)<br /> |-<br /> | 13<br /> | NES left controller<br /> |-<br /> | 14<br /> | NES right controller<br /> |-<br /> | 15-16<br /> | Invalid<br /> |-<br /> | 17<br /> | Generic external controller<br /> |-<br /> | 18-20<br /> | Invalid<br /> |-<br /> | 21-23<br /> | Generic controller<br /> |}<br /> <br /> [9.0.0+] This is &quot;nn::hidtypes::DeviceType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! [[#DeviceType|DeviceType]]<br /> ! [[#UniquePadType|UniquePadType]]<br /> ! [[#AppletDetailedUiType|AppletDetailedUiType]]<br /> ! Description<br /> |-<br /> | 1 || JoyRight, HandheldRight || RightController || JoyDual, JoyRightHorizontal, JoyRightVertical, JoyDualRightOnly, HandheldJoyConRightOnly, HandheldJoyConLeftJoyConRight, HandheldLarkHvc1JoyConRight, HandheldLarkNesLeftJoyConRight, HandheldNone || Joy-Con right controller (USB PID 0x2007)<br /> |-<br /> | 2 || JoyLeft, HandheldLeft || LeftController || JoyDual, JoyLeftHorizontal, JoyLeftVertical, JoyDualLeftOnly, HandheldJoyConLeftOnly, HandheldJoyConLeftJoyConRight, HandheldJoyConLeftLarkHvc2, HandheldJoyConLeftLarkNesRight, HandheldNone || Joy-Con left controller (USB PID 0x2006)<br /> |-<br /> | 3 || FullKey || FullKeyController || SwitchProController || Pro Controller (USB PID 0x2008)<br /> |-<br /> | 4 || JoyLeft || LeftController || || Reserved<br /> |-<br /> | 5 || JoyRight || RightController || || Reserved<br /> |-<br /> | 6 || FullKey || FullKeyController || || Reserved<br /> |-<br /> | 7 || LarkHvcLeft, HandheldLarkHvcLeft || LeftController || LarkHvc1, HandheldLarkHvc1Only, HandheldLarkHvc1JoyConRight, HandheldLarkHvc1LarkHvc2, HandheldLarkHvc1LarkNesRight, HandheldNone || Famicom left controller<br /> |-<br /> | 8 || LarkHvcRight, HandheldLarkHvcRight || RightController || LarkHvc2, HandheldLarkHvc2Only, HandheldJoyConLeftLarkHvc2, HandheldLarkHvc1LarkHvc2, HandheldLarkNesLeftLarkHvc2, HandheldNone || Famicom right controller (with microphone)<br /> |-<br /> | 9 || LarkNesLeft, HandheldLarkNesLeft || LeftController || LarkNesLeft, HandheldLarkNesLeftOnly, HandheldLarkNesLeftJoyConRight, HandheldLarkNesLeftLarkHvc2, HandheldLarkNesLeftLarkNesRight, HandheldNone || NES left controller<br /> |-<br /> | 10 || LarkNesRight, HandheldLarkNesRight || RightController || LarkNesRight, HandheldLarkNesRightOnly, HandheldJoyConLeftLarkNesRight, HandheldLarkHvc1LarkNesRight, HandheldLarkNesLeftLarkNesRight, HandheldNone || NES right controller<br /> |-<br /> | 11 || Lucia || FullKeyController || LuciaU, LuciaJ, LuciaE || SNES controller (USB PID 0x2017)<br /> |-<br /> | 12 || Palma || Embedded || Unknown || Poké Ball Plus controller<br /> |-<br /> | 13 || FullKey || FullKeyController || || Gc controller<br /> |-<br /> | 14 || HandheldLeft || LeftController || || Reserved<br /> |-<br /> | 15 || FullKey || FullKeyController || || Reserved<br /> |-<br /> | 16 || FullKey || FullKeyController || || Reserved<br /> |-<br /> | 17 || DebugPad || DebugPadController || Verification || Debug controller<br /> |-<br /> | 18 || HandheldRight || RightController || || Reserved<br /> |-<br /> | 19 || System || Embedded || CompatibleProController || Third party Pro Controller<br /> |-<br /> | 20 || System || Embedded || CompatibleJoyCon, HandheldNone || Third party Joy-Con right controller<br /> |-<br /> | 21 || System || Embedded || CompatibleJoyCon, HandheldNone || Third party Joy-Con left controller<br /> |-<br /> | 22 || Lagon || FullKeyController || Lagon || N64 controller (USB PID 0x2019)<br /> |-<br /> | 23 || ? || ? || ? || Joy-Con Charging Grip (USB PID 0x200E)<br /> |-<br /> | 24 || ? || ? || ? || Nintendo, USB PID 0x200F<br /> |-<br /> | 25 || ? || ? || ? || Nintendo, USB PID 0x2008<br /> |-<br /> | 26 || ? || ? || ? || Nintendo, USB PID 0x2018<br /> |-<br /> | 27 || ? || ? || ? || Nintendo, USB PID 0x201A<br /> |-<br /> | 28 || Lager || FullKeyController || || Sega Genesis controller (USB PID 0x201E)<br /> |-<br /> | 29 || ? || ? || ? || Nintendo, USB PID 0x201F<br /> |}<br /> <br /> = NpadPowerInfo =<br /> This is &quot;nn::hid::system::NpadPowerInfo&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x1<br /> | IsPowered<br /> |-<br /> | 0x1<br /> | 0x1<br /> | IsCharging<br /> |-<br /> | 0x2<br /> | 0x6<br /> | Reserved<br /> |-<br /> | 0x8<br /> | 0x6<br /> | [[#BatteryLevel|BatteryLevel]]<br /> |}<br /> <br /> = BatteryLevel =<br /> This is &quot;nn::hid::system::NpadBatteryLevel&quot;. This is a 4 byte value.<br /> <br /> = ConsoleSixAxisSensorHandle =<br /> This is &quot;nn::hid::ConsoleSixAxisSensorHandle&quot;. This is a 4-byte struct with 4-byte alignment.<br /> <br /> sdknso GetConsoleSixAxisSensorHandle always returns a handle with value 0x13.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || TypeValue<br /> |-<br /> | 0x0 || 0x1 || <br /> |-<br /> | 0x1 || 0x1 || <br /> |}<br /> <br /> = SixAxisSensorHandle =<br /> This is &quot;nn::hid::SixAxisSensorHandle&quot;. This is a 4-byte struct with 4-byte alignment.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || TypeValue<br /> |-<br /> | 0x0 || 0x1 || NpadStyleIndex<br /> |-<br /> | 0x1 || 0x1 || [[#NpadIdType|PlayerNumber]]<br /> |-<br /> | 0x2 || 0x1 || DeviceIdx<br /> |}<br /> <br /> = VibrationDeviceHandle =<br /> This is &quot;nn::hid::VibrationDeviceHandle&quot;. This is a 4-byte struct with 4-byte alignment.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || TypeValue<br /> |-<br /> | 0x0 || 0x1 || NpadStyleIndex<br /> |-<br /> | 0x1 || 0x1 || [[#NpadIdType|PlayerNumber]]<br /> |-<br /> | 0x2 || 0x1 || DeviceIdx<br /> |}<br /> <br /> = VibrationDeviceInfo =<br /> This is &quot;nn::hid::VibrationDeviceInfo&quot; / &quot;nn::hid::VibrationDeviceInfoForIpc&quot;. This is a 0x8-byte struct.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || [[#VibrationDeviceType|DeviceType]]<br /> |-<br /> | 0x4 || 0x4 || [[#VibrationDevicePosition|Position]]<br /> |}<br /> <br /> = VibrationDeviceType =<br /> This is &quot;nn::hid::VibrationDeviceType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Unknown<br /> |-<br /> | 1 || LinearResonantActuator<br /> |-<br /> | 2 || GcErm<br /> |}<br /> <br /> = VibrationDevicePosition =<br /> This is &quot;nn::hid::VibrationDevicePosition&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || None<br /> |-<br /> | 1 || Left<br /> |-<br /> | 2 || Right<br /> |}<br /> <br /> = VibrationValue =<br /> This is &quot;nn::hid::VibrationValue&quot;. This is a 0x10-byte struct, which contains 4 float values.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | AmplitudeLow<br /> |-<br /> | 0x4<br /> | 0x4<br /> | FrequencyLow<br /> |-<br /> | 0x8<br /> | 0x4<br /> | AmplitudeHigh<br /> |-<br /> | 0xC<br /> | 0x4<br /> | FrequencyHigh<br /> |}<br /> <br /> = VibrationGcErmCommand =<br /> This is &quot;nn::hid::VibrationGcErmCommand&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Name<br /> ! Description<br /> |-<br /> | 0 || Stop || Stops the vibration with a decay phase.<br /> |-<br /> | 1 || Start || Starts the vibration.<br /> |-<br /> | 2 || StopHard || Stops the vibration immediately, with no decay phase.<br /> |}<br /> <br /> = AccelerometerPlayMode =<br /> This is &quot;nn::hid::debug::AccelerometerPlayMode&quot; (pre-10.0.0 this is &quot;nn::hid::AccelerometerPlayMode&quot;).<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Loose<br /> |-<br /> | 1 || Tight<br /> |}<br /> <br /> = GyroscopeZeroDriftMode =<br /> This is &quot;nn::hid::GyroscopeZeroDriftMode&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Loose<br /> |-<br /> | 1 || Standard<br /> |-<br /> | 2 || Tight<br /> |}<br /> <br /> = PalmaConnectionHandle =<br /> This is &quot;nn::hid::PalmaConnectionHandle&quot;. This is a 0x8-byte struct with 8-byte alignment.<br /> <br /> = PalmaOperationInfo =<br /> This is &quot;nn::hid::PalmaOperationInfo&quot;. This is a 0x148-byte struct.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || [[#PalmaOperationType]]<br /> |-<br /> | 0x4 || 0x4 || Result<br /> |-<br /> | 0x8 || 0x140 || Buffer for [[#GetPalmaOperationInfo]].<br /> |}<br /> <br /> = PalmaOperationType =<br /> This is &quot;nn::hid::PalmaOperationType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || PlayActivity<br /> |-<br /> | 1 || SetFrModeType<br /> |-<br /> | 2 || ReadStep<br /> |-<br /> | 3 || EnableStep<br /> |-<br /> | 4 || ResetStep<br /> |-<br /> | 5 || ReadApplicationSection<br /> |-<br /> | 6 || WriteApplicationSection<br /> |-<br /> | 7 || ReadUniqueCode<br /> |-<br /> | 8 || SetUniqueCodeInvalid<br /> |-<br /> | 9 || WriteActivityEntry<br /> |-<br /> | 10 || WriteRgbLedPatternEntry<br /> |-<br /> | 11 || WriteWaveEntry<br /> |-<br /> | 12 || ReadDataBaseIdentificationVersion<br /> |-<br /> | 13 || WriteDataBaseIdentificationVersion<br /> |-<br /> | 14 || SuspendFeature<br /> |-<br /> | 15 || [5.1.0+] ReadPlayLog<br /> |-<br /> | 16 || [5.1.0+] ResetPlayLog<br /> |}<br /> <br /> = PalmaFrModeType =<br /> This is &quot;nn::hid::PalmaFrModeType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Off<br /> |-<br /> | 1 || B01<br /> |-<br /> | 2 || B02<br /> |-<br /> | 3 || B03<br /> |-<br /> | 4 || Downloaded<br /> |}<br /> <br /> = PalmaApplicationSectionAccessBuffer =<br /> This is &quot;nn::hid::PalmaApplicationSectionAccessBuffer&quot;. This is a 0x100-byte struct.<br /> <br /> = PalmaActivityEntry =<br /> This is &quot;nn::hid::PalmaActivityEntry&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x2 || RgbLedPatternIndex.<br /> |-<br /> | 0x2 || 0x2 || Padding<br /> |-<br /> | 0x4 || 0x4 || [[#PalmaWaveSet|WaveSet]].<br /> |-<br /> | 0x8 || 0x2 || WaveIndex.<br /> |}<br /> <br /> = PalmaWaveSet =<br /> This is &quot;nn::hid::PalmaWaveSet&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Small<br /> |-<br /> | 1 || Medium<br /> |-<br /> | 2 || Large<br /> |}<br /> <br /> = PalmaFeature =<br /> This is &quot;nn::hid::PalmaFeature&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | FrMode<br /> |-<br /> | 1<br /> | RumbleFeedback<br /> |-<br /> | 2<br /> | Step<br /> |-<br /> | 3<br /> | MuteSwitch<br /> |-<br /> |}<br /> <br /> = AbstractedPadState =<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || Type, only 1 bit can be set. Converted to [[#HdlsDeviceInfo]]::type internally by [[#SetAutoPilotVirtualPadState]].<br /> |-<br /> | 0x4 || 0x1 || Flags. [[#SetAutoPilotVirtualPadState]] only uses bit0: when clear it will skip using the rest of the input and run [[#UnsetAutoPilotVirtualPadState]] internally.<br /> |-<br /> | 0x5 || 0x3 || Padding<br /> |-<br /> | 0x8 || 0x4 || RGBA Single Body Color<br /> |-<br /> | 0xC || 0x4 || RGBA Single Buttons Color<br /> |-<br /> | 0x10 || 0x1 || See [[#HiddbgHdlsDeviceInfo]]::[[#NpadInterfaceType]].<br /> |-<br /> | 0x11 || 0x3 || Padding<br /> |-<br /> | 0x14 || 0x24 || [[#HdlsState]]. Unknown if the last 4-bytes are included in this struct, [[#SetAutoPilotVirtualPadState]]/[[#hiddbgGetAbstractedPadsState]] only uses the first 0x20-bytes.<br /> |-<br /> | 0x38 || 0x60 || Unused with [[#SetAutoPilotVirtualPadState]]/[[#GetAbstractedPadsState]].<br /> |}<br /> <br /> Normally the input state is merged with an existing controller selected by Type. However in some cases (BIT(2-5) with type2!=0x2 and BIT(31)) it's detected as a dedicated controller.<br /> <br /> Type:<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Bits<br /> ! [[#HdlsDeviceInfo]]::type bits<br /> ! Description<br /> ! Notes<br /> |-<br /> | 0 || 0 || || <br /> |-<br /> | 1 || 15 || || [[#DeviceType]] |= BIT(1)<br /> |-<br /> | 2 || 1 || || <br /> |-<br /> | 3 || 2 || || <br /> |-<br /> | 4 || 1 || || <br /> |-<br /> | 5 || 2 || || <br /> |-<br /> | 6 || 3 || || <br /> |-<br /> | 7 || 11 || || [[#DeviceType]] |= BIT(11)<br /> |-<br /> | 8 || 12 || || [[#DeviceType]] |= BIT(12)<br /> |-<br /> | 9 || 13 || || [[#DeviceType]] |= BIT(13)<br /> |-<br /> | 10 || 14 || || [[#DeviceType]] |= BIT(14)<br /> |-<br /> | 11 || 15 || || [[#DeviceType]] |= BIT(11)<br /> |-<br /> | 12 || 12 || || [[#DeviceType]] |= BIT(12)<br /> |-<br /> | 13 || 13 || || [[#DeviceType]] |= BIT(13)<br /> |-<br /> | 14 || 14 || || [[#DeviceType]] |= BIT(14)<br /> |-<br /> | 15 || 17 || || <br /> |-<br /> | 31 || 21 || || [[#DeviceType]] = BIT(31)<br /> |-<br /> |}<br /> <br /> The above &quot;[[#DeviceType]] |=&quot; notes only apply when type2 is 0x2.<br /> <br /> = DebugPadAutoPilotState =<br /> This is &quot;nn::hid::debug::DebugPadAutoPilotState&quot;<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | [[#DebugPadAttributeSet|Attributes]]<br /> |-<br /> | 0x4<br /> | 0x4<br /> | [[#DebugPadButtonSet|Buttons]]<br /> |-<br /> | 0x8<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickL]]<br /> |-<br /> | 0x10<br /> | 0x8<br /> | [[#AnalogStickState|AnalogStickR]]<br /> |}<br /> <br /> = MouseAutoPilotState =<br /> This is &quot;nn::hid::debug::MouseAutoPilotState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | X<br /> |-<br /> | 0x4<br /> | 0x4<br /> | Y<br /> |-<br /> | 0x8<br /> | 0x4<br /> | DeltaX<br /> |-<br /> | 0xC<br /> | 0x4<br /> | DeltaY<br /> |-<br /> | 0x10<br /> | 0x4<br /> | WheelDelta<br /> |-<br /> | 0x14<br /> | 0x4<br /> | [[#MouseButtonSet|Buttons]]<br /> |-<br /> | 0x18<br /> | 0x4<br /> | [[#MouseAttributeSet|Attributes]]<br /> |}<br /> <br /> = KeyboardAutoPilotState =<br /> This is &quot;nn::hid::debug::KeyboardAutoPilotState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | [[#KeyboardModifierSet|Modifiers]]<br /> |-<br /> | 0x8<br /> | 0x20<br /> | [[#KeyboardKeySet|Keys]]<br /> |}<br /> <br /> = SleepButtonAutoPilotState =<br /> This is &quot;nn::hid::debug::SleepButtonAutoPilotState&quot;. This is a 0x8-byte struct with 8-byte alignment.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0 || 0x8 || Buttons (only bit0 is used)<br /> |}<br /> <br /> = PowerInfo =<br /> This is &quot;nn::hidtypes::PowerInfo&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0 || 0x4 || BatteryLevel<br /> |-<br /> | 0x4 || 0x4 || [[#PowerAttribute]]<br /> |}<br /> <br /> = PowerAttribute =<br /> This is &quot;nn::hidtypes::PowerAttribute&quot;. This is a 32-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Bits<br /> ! Description<br /> |-<br /> | 0<br /> | IsPowered<br /> |-<br /> | 1<br /> | IsCharging<br /> |}<br /> <br /> = HdlsAttribute =<br /> This is &quot;nn::hidtypes::HdlsAttribute&quot;. This is a 32-bit flag.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Bits<br /> ! Description<br /> |-<br /> | 0<br /> | HasVirtualSixAxisSensorAcceleration<br /> |-<br /> | 1<br /> | HasVirtualSixAxisSensorAngle<br /> |}<br /> <br /> = HdlsHandle =<br /> This is &quot;nn::hid::debug::HdlsHandle&quot;. This is a 0x8-byte struct with 8-byte alignment.<br /> <br /> = HdlsSessionId =<br /> This is &quot;nn::hid::debug::detail::HdlsSessionId&quot;. This is a 0x8-byte struct with 8-byte alignment.<br /> <br /> = HdlsNpadAssignment =<br /> This is a 0x208-byte struct.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || s32 Total entries<br /> |-<br /> | 0x4 || 0x4 || Padding<br /> |-<br /> | 0x8 || 0x200(0x20*0x10) || Array of [[#HdlsNpadAssignmentEntry]].<br /> |}<br /> <br /> = HdlsNpadAssignmentEntry =<br /> This is a 0x20-byte struct.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || [[#HdlsHandle]]<br /> |-<br /> | 0x8 || 0x4 || ?<br /> |-<br /> | 0xC || 0x4 || ?<br /> |-<br /> | 0x10 || 0x8 || ?<br /> |-<br /> | 0x18 || 0x1 || ?<br /> |-<br /> | 0x19 || 0x7 || Padding<br /> |}<br /> <br /> = HdlsStateList =<br /> This is a 0x408-byte struct.<br /> <br /> [9.0.0+] This is a 0x488-byte struct.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || s32 Total entries<br /> |-<br /> | 0x4 || 0x4 || Padding<br /> |-<br /> | 0x8 || &lt;[[#HdlsStateListEntry]] size&gt;*0x10 || Array of [[#HdlsStateListEntry]].<br /> |}<br /> <br /> This contains a list of all controllers, including non-virtual controllers.<br /> <br /> = HdlsStateListEntry =<br /> This is a 0x40-byte struct. <br /> <br /> [9.0.0+] This is a 0x48-byte struct.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || [[#HdlsHandle]]<br /> |-<br /> | 0x8 || [[#HdlsDeviceInfo]] size || [[#HdlsDeviceInfo]]. With [[#ApplyHdlsStateList]] this is only used when creating new devices.<br /> |-<br /> | 0x8 + [[#HdlsDeviceInfo]] size, with 8-byte alignment || 0x24 || [[#HdlsState]]<br /> |-<br /> | &lt;Immediately following the above&gt; || 0x4 || Padding<br /> |}<br /> <br /> = HdlsDeviceInfo =<br /> This is &quot;nn::hid::debug::HdlsDeviceInfo&quot;. This is a 0x10-byte struct.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || [[#DeviceTypeInternal]]<br /> |-<br /> | 0x4 || 0x4 || RGBA Single Body Color<br /> |-<br /> | 0x8 || 0x4 || RGBA Single Buttons Color<br /> |-<br /> | 0xC || 0x1 || [[#NpadInterfaceType]]. Additional type field used with the above type field, if the value doesn't match one of the following a default is used. Type Pro-Controller: value 0x3 indicates that the controller is connected via USB. Type bit21: value 0x3 = unknown. When value is 0x2, state is merged with an existing controller (when the type value is compatible with this). Otherwise, it's a dedicated controller.<br /> |-<br /> | 0xD || 0x3 || Padding<br /> |}<br /> <br /> [9.0.0+] This is a 0x14-byte struct.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x1 || [[#DeviceTypeInternal]]<br /> |-<br /> | 0x1 || 0x1 || [[#NpadInterfaceType]]. Similar to the field from the old struct.<br /> |-<br /> | 0x2 || 0x2 || Padding<br /> |-<br /> | 0x4 || 0x4 || RGBA Single Body Color<br /> |-<br /> | 0x8 || 0x4 || RGBA Single Buttons Color<br /> |-<br /> | 0xC || 0x4 || RGBA Left Grip Color<br /> |-<br /> | 0x10 || 0x4 || RGBA Right Grip Color<br /> |}<br /> <br /> = HdlsState =<br /> This is &quot;nn::hid::debug::HdlsState&quot;. This is a 0x24-byte struct.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x1 || IsPowered for the main PowerInfo.<br /> |-<br /> | 0x1 || 0x1 || ORRed with IsPowered to set the value of the first byte for the controller [[#NpadSystemProperties]].<br /> |-<br /> | 0x2 || 0x6 || Unknown<br /> |-<br /> | 0x8 || 0x4 || BatteryLevel for the main PowerInfo.<br /> |-<br /> | 0xC || 0x4 || [[#NpadButton|Buttons]]. Bit18 = HOME and bit19 = Capture.<br /> |-<br /> | 0x10 || 0x10(4*2*2) || Joystick data.<br /> |-<br /> | 0x20 || 0x1 || Indicator. Unused for input. Set with output from [[#DumpHdlsStates]] (zero in some cases).<br /> |-<br /> | 0x21 || 0x3 || Padding<br /> |}<br /> <br /> [9.0.0+] (0x28-bytes):<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || [[#PowerInfo]]<br /> |-<br /> | 0x8 || 0x8 || [[#NpadButton|Buttons]], masked with 0xfffffffff00fffff. See above table regarding HOME/Capture buttons.<br /> |-<br /> | 0x10 || 0x10(4*2*2) || Joystick data.<br /> |-<br /> | 0x20 || 0x1 || Indicator. Unused for input. Set with output from [[#DumpHdlsStates]] (zero in some cases).<br /> |-<br /> | 0x21 || 0x7 || Padding<br /> |}<br /> <br /> [12.0.0+] (0x40-bytes):<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || [[#PowerInfo]]<br /> |-<br /> | 0x8 || 0x8 || [[#NpadButton|Buttons]], masked with 0xfffffffff00fffff. See above table regarding HOME/Capture buttons.<br /> |-<br /> | 0x10 || 0x10(4*2*2) || Joystick data.<br /> |-<br /> | 0x20 || 0xC || VirtualSixAxisSensorAcceleration<br /> |-<br /> | 0x2C || 0xC || VirtualSixAxisSensorAngle<br /> |-<br /> | 0x38 || 0x4 || [[#HdlsAttribute]]<br /> |-<br /> | 0x3C || 0x1 || Indicator. Unused for input.<br /> |-<br /> | 0x3D || 0x3 || Padding<br /> |}<br /> <br /> = DebugRegisteredDevice =<br /> This is &quot;nn::hid::debug::RegisteredDevice&quot;. This is a 0x58-byte struct with 2-byte alignment.<br /> <br /> = RegisteredDevice =<br /> This is &quot;nn::hid::system::RegisteredDevice&quot;. This is a 0x68-byte struct with 4-byte alignment.<br /> <br /> = NotificationLedPattern =<br /> This is &quot;nn::hid::system::NotificationLedPattern&quot;. This is a 0x48-byte struct.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Subcommand argdata bytepos || Subcommand argdata nibble || Description<br /> |-<br /> | 0x0 || 0x1 || 0x0 || Low || Mini Cycle Base Duration. Value 0x1-0xF: 12.5ms - 187.5ms. Value 0x0 = 0ms/OFF.<br /> |-<br /> | 0x1 || 0x1 || 0x0 || High || Number of Mini Cycles + 1. Value 0x0-0xF: 1 - 16 mini cycles.<br /> |-<br /> | 0x2 || 0x1 || 0x1 || Low || Number of Full Cycles. Value 0x1-0xF: 1 - 15 full cycles. Value 0x0 is repeat forever, but if Mini Cycle Base Duration is set to 0x0, it does the 1st Mini Cycle with a 12.5ms base duration and then the LED stays on with LED Start Intensity.<br /> |-<br /> | 0x3 || 0x1 || 0x1 || High || LED Start Intensity. Value 0x0-0xF: 0% - 100%. (In HW, 1 - 241 duty)<br /> |-<br /> | 0x4 || 0x1 || 0x2 || High || Mini Cycle 1 LED Intensity. Value 0x0-0xF: 0% - 100%. (In HW, 1 - 241 duty)<br /> |-<br /> | 0x5 || 0x1 || 0x3 || High || Fading Transition Steps to Mini Cycle 1 (Uses PWM). Value 0x0: Instant. Each step duration is based on Mini Cycle Step Duration Multiplier.<br /> |-<br /> | 0x6 || 0x1 || 0x3 || Low || Final Step Duration Multiplier of Mini Cycle 1. Value is a Multiplier of Mini Cycle Base Duration. Value 0x0: 12.5ms, 0x1 - xF: 1x - 15x.<br /> |-<br /> | 0x7 || 0x1 || || || Unused<br /> |-<br /> | 0x8 || 0x1 || 0x2 || Low || Mini Cycle 2 LED Intensity.<br /> |-<br /> | 0x9 || 0x1 || 0x4 || High || Fading Transition Steps to Mini Cycle 2 (see above).<br /> |-<br /> | 0xA || 0x1 || 0x4 || Low || Final Step Duration Multiplier of Mini Cycle 2 (see above).<br /> |-<br /> | 0xB || 0x1 || || || Unused<br /> |-<br /> | 0xC || 0x1 || 0x5 || High || Mini Cycle 3 LED Intensity.<br /> |-<br /> | 0xD || 0x1 || 0x6 || High || Fading Transition Steps to Mini Cycle 3 (see above).<br /> |-<br /> | 0xE || 0x1 || 0x6 || Low || Final Step Duration Multiplier of Mini Cycle 3 (see above).<br /> |-<br /> | 0xF || 0x1 || || || Unused<br /> |-<br /> | 0x10 || 0x1 || 0x5 || Low || Mini Cycle 4 LED Intensity.<br /> |-<br /> | 0x11 || 0x1 || 0x7 || High || Fading Transition Duration to Mini Cycle 4 (see above).<br /> |-<br /> | 0x12 || 0x1 || 0x7 || Low || Final Step Duration Multiplier of Mini Cycle 4 (see above).<br /> |-<br /> | 0x13 || 0x1 || || || Unused<br /> |-<br /> | 0x14 || 0x1 || 0x8 || High || Mini Cycle 5 LED Intensity.<br /> |-<br /> | 0x15 || 0x1 || 0x9 || High || Fading Transition Steps to Mini Cycle 5 (see above).<br /> |-<br /> | 0x16 || 0x1 || 0x9 || Low || Final Step Duration Multiplier of Mini Cycle 5 (see above).<br /> |-<br /> | 0x17 || 0x1 || || || Unused<br /> |-<br /> | 0x18 || 0x1 || 0x8 || Low || Mini Cycle 6 LED Intensity.<br /> |-<br /> | 0x19 || 0x1 || 0xA || High || Fading Transition Steps to Mini Cycle 6 (see above).<br /> |-<br /> | 0x1A || 0x1 || 0xA || Low || Final Step Duration Multiplier of Mini Cycle 6 (see above).<br /> |-<br /> | 0x1B || 0x1 || || || Unused<br /> |-<br /> | 0x1C || 0x1 || 0xB || High || Mini Cycle 7 LED Intensity.<br /> |-<br /> | 0x1D || 0x1 || 0xC || High || Fading Transition Steps to Mini Cycle 7 (see above).<br /> |-<br /> | 0x1E || 0x1 || 0xC || Low || Final Step Duration Multiplier of Mini Cycle 7 (see above).<br /> |-<br /> | 0x1F || 0x1 || || || Unused<br /> |-<br /> | 0x20 || 0x1 || 0xB || Low || Mini Cycle 8 LED Intensity.<br /> |-<br /> | 0x21 || 0x1 || 0xD || Low || Fading Transition Steps to Mini Cycle 8 (see above).<br /> |-<br /> | 0x22 || 0x1 || 0xD || High || Final Step Duration Multiplier of Mini Cycle 8 (see above).<br /> |-<br /> | 0x23 || 0x1 || || || Unused<br /> |-<br /> | 0x24 || 0x1 || 0xE || High || Mini Cycle 9 LED Intensity.<br /> |-<br /> | 0x25 || 0x1 || 0xF || High || Fading Transition Steps to Mini Cycle 9 (see above).<br /> |-<br /> | 0x26 || 0x1 || 0xF || Low || Final Step Duration Multiplier of Mini Cycle 9 (see above).<br /> |-<br /> | 0x27 || 0x1 || || || Unused<br /> |-<br /> | 0x28 || 0x1 || 0xE || Low || Mini Cycle 10 LED Intensity.<br /> |-<br /> | 0x29 || 0x1 || 0x10 || High || Fading Transition Steps to Mini Cycle 10 (see above).<br /> |-<br /> | 0x2A || 0x1 || 0x10 || Low || Final Step Duration Multiplier of Mini Cycle 10 (see above).<br /> |-<br /> | 0x2B || 0x1 || || || Unused<br /> |-<br /> | 0x2C || 0x1 || 0x11 || High || Mini Cycle 11 LED Intensity.<br /> |-<br /> | 0x2D || 0x1 || 0x12 || High || Fading Transition Steps to Mini Cycle 11 (see above).<br /> |-<br /> | 0x2E || 0x1 || 0x12 || Low || Final Step Duration Multiplier of Mini Cycle 11 (see above).<br /> |-<br /> | 0x2F || 0x1 || || || Unused<br /> |-<br /> | 0x30 || 0x1 || 0x11 || Low || Mini Cycle 12 LED Intensity.<br /> |-<br /> | 0x31 || 0x1 || 0x13 || High || Fading Transition Steps to Mini Cycle 12 (see above).<br /> |-<br /> | 0x32 || 0x1 || 0x13 || Low || Final Step Duration Multiplier of Mini Cycle 12 (see above).<br /> |-<br /> | 0x33 || 0x1 || || || Unused<br /> |-<br /> | 0x34 || 0x1 || 0x14 || High || Mini Cycle 13 LED Intensity.<br /> |-<br /> | 0x35 || 0x1 || 0x15 || High || Fading Transition Steps to Mini Cycle 13 (see above).<br /> |-<br /> | 0x36 || 0x1 || 0x15 || Low || Final Step Duration Multiplier of Mini Cycle 13 (see above).<br /> |-<br /> | 0x37 || 0x1 || || || Unused<br /> |-<br /> | 0x38 || 0x1 || 0x14 || Low || Mini Cycle 14 LED Intensity.<br /> |-<br /> | 0x39 || 0x1 || 0x16 || High || Fading Transition Steps to Mini Cycle 14 (see above).<br /> |-<br /> | 0x3A || 0x1 || 0x16 || Low || Final Step Duration Multiplier of Mini Cycle 14 (see above).<br /> |-<br /> | 0x3B || 0x1 || || || Unused<br /> |-<br /> | 0x3C || 0x1 || 0x17 || High || Mini Cycle 15 LED Intensity.<br /> |-<br /> | 0x3D || 0x1 || 0x18 || High || Fading Transition Steps to Mini Cycle 15 (see above).<br /> |-<br /> | 0x3E || 0x1 || 0x18 || Low || Final Step Duration Multiplier of Mini Cycle 15 (see above).<br /> |-<br /> | 0x3F || 0x1 || || || Unused<br /> |-<br /> | 0x40 || 0x1 || 0x17 || Low || Mini Cycle 16 LED Intensity.<br /> |-<br /> | 0x41 || 0x1 || 0x19 || High || Fading Transition Steps to Mini Cycle 16 (see above). (Unused in older Joy-Con / Pro-Con FW. Unknown for new.)<br /> |-<br /> | 0x42 || 0x1 || 0x19 || Low || Final Step Duration Multiplier of Mini Cycle 16 (see above). (Unused in older Joy-Con / Pro-Con FW. Unknown for new.)<br /> |-<br /> | 0x43 || 0x1 || || || Unused<br /> |-<br /> | 0x44 || 0x1 || 0x1A || High || Unknown (Unused in older Joy-Con / Pro-Con FW. Unknown for new.)<br /> |-<br /> | 0x45 || 0x1 || 0x1A || Low || Unknown (Unused in older Joy-Con / Pro-Con FW. Unknown for new.)<br /> |-<br /> | 0x46 || 0x1 || || || Padding<br /> |-<br /> | 0x47 || 0x1 || || || Padding<br /> |-<br /> |}<br /> <br /> The above descriptions in the table are based on the info from [https://github.com/dekuNukem/Nintendo_Switch_Reverse_Engineering/blob/master/bluetooth_hid_subcommands_notes.md here].<br /> <br /> argdata in the subcommand is initialized as follows: &lt;code&gt;((u8*)cmd_argdata)[pos] = u8_in[pos2] | u8_in[pos3]&lt;&lt;4;&lt;/code&gt; Hence, 4bits from pairs of 2-bytes of the input struct are combined to write to the subcommand. Only the low 4bits of each used byte in the struct is used. This is written to stack initially, then copied to the actual cmd_argdata (the data immediately following the subcommandID byte). There's a total of 0x1B-bytes of cmd_argdata initialized from this.<br /> <br /> The layout of cmd_argdata is as follows:<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x1B || See above.<br /> |-<br /> | 0x1B || 0xB || Cleared to zero.<br /> |-<br /> | 0x26 || 0x5 || Unused<br /> |-<br /> | 0x2B || 0x8 || Set to an input value, which is hard-coded 0.<br /> |-<br /> | 0x33 || 0x2 || Set to value 0.<br /> |-<br /> | 0x35 || 0x1 || Set to value 1.<br /> |}<br /> <br /> = SystemButtonConfigEmbedded =<br /> This is &quot;nn::hid::system::ButtonConfigEmbedded&quot;. This is a 0x2C8-byte struct.<br /> <br /> = SystemButtonConfigFull =<br /> This is &quot;nn::hid::system::ButtonConfigFull&quot;. This is a 0x2C8-byte struct.<br /> <br /> = SystemButtonConfigLeft =<br /> This is &quot;nn::hid::system::ButtonConfigLeft&quot;. This is a 0x1C8-byte struct.<br /> <br /> = SystemButtonConfigRight =<br /> This is &quot;nn::hid::system::ButtonConfigRight&quot;. This is a 0x1A0-byte struct.<br /> <br /> = ButtonConfigEmbedded =<br /> This is &quot;nn::hidconfig::ButtonConfigEmbedded&quot;. This is a 0x54-byte struct.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonLeft]]<br /> |-<br /> | 0x4 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonUp]]<br /> |-<br /> | 0x8 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonRight]]<br /> |-<br /> | 0xC || 0x4 || [[#DigitalButtonAssignment|HardwareButtonDown]]<br /> |-<br /> | 0x10 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonA]]<br /> |-<br /> | 0x14 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonB]]<br /> |-<br /> | 0x18 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonX]]<br /> |-<br /> | 0x1C || 0x4 || [[#DigitalButtonAssignment|HardwareButtonY]]<br /> |-<br /> | 0x20 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonStickL]]<br /> |-<br /> | 0x24 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonStickR]]<br /> |-<br /> | 0x28 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonL]]<br /> |-<br /> | 0x2C || 0x4 || [[#DigitalButtonAssignment|HardwareButtonR]]<br /> |-<br /> | 0x30 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonZL]]<br /> |-<br /> | 0x34 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonZR]]<br /> |-<br /> | 0x38 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonSelect]]<br /> |-<br /> | 0x3C || 0x4 || [[#DigitalButtonAssignment|HardwareButtonStart]]<br /> |-<br /> | 0x40 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonCapture]]<br /> |-<br /> | 0x44 || 0x8 || [[#AnalogStickAssignment|HardwareStickL]]<br /> |-<br /> | 0x4C || 0x8 || [[#AnalogStickAssignment|HardwareStickR]]<br /> |}<br /> <br /> == DigitalButtonAssignment ==<br /> This is &quot;nn::hidconfig::DigitalButtonAssignment&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || A<br /> |-<br /> | 1 || B<br /> |-<br /> | 2 || X<br /> |-<br /> | 3 || Y<br /> |-<br /> | 4 || StickL<br /> |-<br /> | 5 || StickR<br /> |-<br /> | 6 || L<br /> |-<br /> | 7 || R<br /> |-<br /> | 8 || ZL<br /> |-<br /> | 9 || ZR<br /> |-<br /> | 10 || Select<br /> |-<br /> | 11 || Start<br /> |-<br /> | 12 || Left<br /> |-<br /> | 13 || Up<br /> |-<br /> | 14 || Right<br /> |-<br /> | 15 || Down<br /> |-<br /> | 16 || LeftSL<br /> |-<br /> | 17 || LeftSR<br /> |-<br /> | 18 || RightSL<br /> |-<br /> | 19 || RightSR<br /> |-<br /> | 20 || HomeButton<br /> |-<br /> | 21 || CaptureButton<br /> |-<br /> | 22 || Invalid<br /> |}<br /> <br /> == AnalogStickAssignment ==<br /> This is &quot;nn::hidconfig::AnalogStickAssignment&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || [[#AnalogStickRotation]]<br /> |-<br /> | 0x4 || 0x1 || IsPairedStickAssigned<br /> |-<br /> | 0x5 || 0x3 || Reserved<br /> |}<br /> <br /> == AnalogStickRotation ==<br /> This is &quot;nn::hidconfig::AnalogStickRotation&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || None<br /> |-<br /> | 1 || Clockwise90<br /> |-<br /> | 2 || Anticlockwise90<br /> |}<br /> <br /> = ButtonConfigFull =<br /> This is &quot;nn::hidconfig::ButtonConfigFull&quot;. This is a 0x54-byte struct.<br /> <br /> This is identical to [[#ButtonConfigEmbedded]].<br /> <br /> = ButtonConfigLeft =<br /> This is &quot;nn::hidconfig::ButtonConfigLeft&quot;. This is a 0x34-byte struct.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonLeft]]<br /> |-<br /> | 0x4 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonUp]]<br /> |-<br /> | 0x8 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonRight]]<br /> |-<br /> | 0xC || 0x4 || [[#DigitalButtonAssignment|HardwareButtonDown]]<br /> |-<br /> | 0x10 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonStickL]]<br /> |-<br /> | 0x14 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonL]]<br /> |-<br /> | 0x18 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonZL]]<br /> |-<br /> | 0x1C || 0x4 || [[#DigitalButtonAssignment|HardwareButtonSelect]]<br /> |-<br /> | 0x20 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonLeftSL]]<br /> |-<br /> | 0x24 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonLeftSR]]<br /> |-<br /> | 0x28 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonCapture]]<br /> |-<br /> | 0x2C || 0x8 || [[#AnalogStickAssignment|HardwareStickL]]<br /> |}<br /> <br /> = ButtonConfigRight =<br /> This is &quot;nn::hidconfig::ButtonConfigRight&quot;. This is a 0x30-byte struct.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonA]]<br /> |-<br /> | 0x4 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonB]]<br /> |-<br /> | 0x8 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonX]]<br /> |-<br /> | 0xC || 0x4 || [[#DigitalButtonAssignment|HardwareButtonY]]<br /> |-<br /> | 0x10 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonStickR]]<br /> |-<br /> | 0x14 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonR]]<br /> |-<br /> | 0x18 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonZR]]<br /> |-<br /> | 0x1C || 0x4 || [[#DigitalButtonAssignment|HardwareButtonStart]]<br /> |-<br /> | 0x20 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonRightSL]]<br /> |-<br /> | 0x24 || 0x4 || [[#DigitalButtonAssignment|HardwareButtonRightSR]]<br /> |-<br /> | 0x28 || 0x8 || [[#AnalogStickAssignment|HardwareStickR]]<br /> |}<br /> <br /> = StorageName =<br /> This is &quot;nn::hidconfig::StorageName&quot;. This is a 0x81-byte struct.<br /> <br /> This is an UTF-8 NUL-terminated name string.<br /> <br /> = IrCameraHandle =<br /> This is &quot;nn::irsensor::IrCameraHandle&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x1 || PlayerNumber<br /> |-<br /> | 0x1 || 0x1 || DeviceType<br /> |-<br /> | 0x2 || 0x2 || Reserved<br /> |}<br /> <br /> = IrCameraStatus =<br /> This is &quot;nn::irsensor::IrCameraStatus&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Available<br /> |-<br /> | 1 || Unsupported<br /> |-<br /> | 2 || Unconnected<br /> |}<br /> <br /> = IrCameraInternalStatus =<br /> This is &quot;nn::irsensor::IrCameraInternalStatus&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Stopped<br /> |-<br /> | 1 || FirmwareUpdateNeeded<br /> |-<br /> | 2 || <br /> |-<br /> | 3 || <br /> |-<br /> | 4 || <br /> |-<br /> | 5 || FirmwareVersionRequested<br /> |-<br /> | 6 || FirmwareVersionIsInvalid<br /> |-<br /> | 7 || [4.0.0+] Ready<br /> |-<br /> | 8 || [4.0.0+] Setting<br /> |}<br /> <br /> = IrSensorMode =<br /> This is &quot;nn::irsensor::detail::StatusManager::IrSensorMode&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || None<br /> |-<br /> | 1 || [[#MomentProcessorState|MomentProcessor]]<br /> |-<br /> | 2 || [[#ClusteringProcessorState|ClusteringProcessor]]<br /> |-<br /> | 3 || [[#ImageTransferProcessorState|ImageTransferProcessor]]<br /> |-<br /> | 4 || [[#PointingProcessorMarkerState|PointingProcessorMarker]]<br /> |-<br /> | 5 || [[#TeraPluginProcessorState|TeraPluginProcessor]]<br /> |-<br /> | 6 || Unknown<br /> |}<br /> <br /> = ImageProcessorStatus =<br /> This is &quot;nn::irsensor::ImageProcessorStatus&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Stopped<br /> |-<br /> | 1 || Running<br /> |}<br /> <br /> = ImageTransferProcessorFormat =<br /> This is &quot;nn::irsensor::ImageTransferProcessorFormat&quot;.<br /> <br /> This controls the IR Sensor image resolution.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || 320x240<br /> |-<br /> | 1 || 160x120<br /> |-<br /> | 2 || 80x60<br /> |-<br /> | 3 || [4.0.0+] 40x30<br /> |-<br /> | 4 || [4.0.0+] 20x15<br /> |}<br /> <br /> = MomentProcessorConfig =<br /> This is &quot;nn::irsensor::MomentProcessorConfig&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || ExposureTime (default is 0x493E0)<br /> |-<br /> | 0x8 || 0x4 || LightTarget (default is 0)<br /> |-<br /> | 0xC || 0x4 || Gain (default is 0x8)<br /> |-<br /> | 0x10 || 0x1 || IsNegativeImageUsed (default is 0)<br /> |-<br /> | 0x11 || 0x7 || Reserved<br /> |-<br /> | 0x18 || 0x2 || WindowOfInterestX (default is 0)<br /> |-<br /> | 0x1A || 0x2 || WindowOfInterestY (default is 0)<br /> |-<br /> | 0x1C || 0x2 || WindowOfInterestWidth (default is 0x140)<br /> |-<br /> | 0x1E || 0x2 || WindowOfInterestHeight (default is 0xF0)<br /> |-<br /> | 0x20 || 0x4 || Preprocess (default is 0x1)<br /> |-<br /> | 0x24 || 0x4 || PreprocessIntensityThreshold (default is 0x50)<br /> |}<br /> <br /> = PackedMomentProcessorConfig =<br /> This is &quot;nn::irsensor::PackedMomentProcessorConfig&quot;.<br /> <br /> This is converted from [[#MomentProcessorConfig]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || ExposureTime (default is 0x493E0)<br /> |-<br /> | 0x8 || 0x1 || LightTarget (default is 0)<br /> |-<br /> | 0x9 || 0x1 || Gain (default is 0x8)<br /> |-<br /> | 0xA || 0x1 || IsNegativeImageUsed (default is 0)<br /> |-<br /> | 0xB || 0x5 || Reserved<br /> |-<br /> | 0x10 || 0x2 || WindowOfInterestX (default is 0)<br /> |-<br /> | 0x12 || 0x2 || WindowOfInterestY (default is 0)<br /> |-<br /> | 0x14 || 0x2 || WindowOfInterestWidth (default is 0x140)<br /> |-<br /> | 0x16 || 0x2 || WindowOfInterestHeight (default is 0xF0)<br /> |-<br /> | 0x18 || 0x4 || [[#PackedMcuVersion|RequiredMcuVersion]]<br /> |-<br /> | 0x1C || 0x1 || Preprocess (default is 0x1)<br /> |-<br /> | 0x1D || 0x1 || PreprocessIntensityThreshold (default is 0x50)<br /> |-<br /> | 0x1E || 0x2 || Reserved<br /> |}<br /> <br /> = ClusteringProcessorConfig =<br /> This is &quot;nn::irsensor::ClusteringProcessorConfig&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || ExposureTime (default is 200000)<br /> |-<br /> | 0x8 || 0x4 || LightTarget (default is 0)<br /> |-<br /> | 0xC || 0x4 || Gain (default is 0x2)<br /> |-<br /> | 0x10 || 0x1 || IsNegativeImageUsed (default is 0)<br /> |-<br /> | 0x11 || 0x7 || Reserved<br /> |-<br /> | 0x18 || 0x2 || WindowOfInterestX (default is 0)<br /> |-<br /> | 0x1A || 0x2 || WindowOfInterestY (default is 0)<br /> |-<br /> | 0x1C || 0x2 || WindowOfInterestWidth (default is 320)<br /> |-<br /> | 0x1E || 0x2 || WindowOfInterestHeight (default is 240)<br /> |-<br /> | 0x20 || 0x4 || ObjectPixelCountMin (default is 0x3)<br /> |-<br /> | 0x24 || 0x4 || ObjectPixelCountMax (default is 0x12C00)<br /> |-<br /> | 0x28 || 0x4 || ObjectIntensityMin (default is 150)<br /> |-<br /> | 0x2C || 0x1 || IsExternalLightFilterEnabled (default is 0x1)<br /> |}<br /> <br /> = PackedClusteringProcessorConfig =<br /> This is &quot;nn::irsensor::PackedClusteringProcessorConfig&quot;.<br /> <br /> This is converted from [[#ClusteringProcessorConfig]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || ExposureTime<br /> |-<br /> | 0x8 || 0x1 || LightTarget<br /> |-<br /> | 0x9 || 0x1 || Gain<br /> |-<br /> | 0xA || 0x1 || IsNegativeImageUsed<br /> |-<br /> | 0xB || 0x5 || Reserved<br /> |-<br /> | 0x10 || 0x2 || WindowOfInterestX<br /> |-<br /> | 0x12 || 0x2 || WindowOfInterestY<br /> |-<br /> | 0x14 || 0x2 || WindowOfInterestWidth<br /> |-<br /> | 0x16 || 0x2 || WindowOfInterestHeight<br /> |-<br /> | 0x18 || 0x4 || [[#PackedMcuVersion|RequiredMcuVersion]]<br /> |-<br /> | 0x1C || 0x4 || ObjectPixelCountMin<br /> |-<br /> | 0x20 || 0x4 || ObjectPixelCountMax<br /> |-<br /> | 0x24 || 0x1 || ObjectIntensityMin<br /> |-<br /> | 0x25 || 0x1 || IsExternalLightFilterEnabled<br /> |-<br /> | 0x26 || 0x2 || Reserved<br /> |}<br /> <br /> = ImageTransferProcessorConfig =<br /> This is &quot;nn::irsensor::ImageTransferProcessorConfig&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || ExposureTime<br /> |-<br /> | 0x8 || 0x4 || LightTarget<br /> |-<br /> | 0xC || 0x4 || Gain<br /> |-<br /> | 0x10 || 0x1 || IsNegativeImageUsed<br /> |-<br /> | 0x11 || 0x7 || Reserved<br /> |-<br /> | 0x18 || 0x4 || [[#ImageTransferProcessorFormat|Format]]<br /> |}<br /> <br /> = PackedImageTransferProcessorConfig =<br /> This is &quot;nn::irsensor::PackedImageTransferProcessorConfig&quot;.<br /> <br /> This is converted from [[#ImageTransferProcessorConfig]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || ExposureTime<br /> |-<br /> | 0x8 || 0x1 || LightTarget<br /> |-<br /> | 0x9 || 0x1 || Gain<br /> |-<br /> | 0xA || 0x1 || IsNegativeImageUsed<br /> |-<br /> | 0xB || 0x5 || Reserved<br /> |-<br /> | 0x10 || 0x4 || [[#PackedMcuVersion|RequiredMcuVersion]]<br /> |-<br /> | 0x14 || 0x1 || [[#ImageTransferProcessorFormat|Format]]<br /> |-<br /> | 0x15 || 0x3 || Reserved<br /> |}<br /> <br /> = ImageTransferProcessorState =<br /> This is &quot;nn::irsensor::ImageTransferProcessorState&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || SamplingNumber<br /> |-<br /> | 0x8 || 0x4 || AmbientNoiseLevel<br /> |-<br /> | 0xC || 0x4 || Reserved<br /> |}<br /> <br /> = TeraPluginProcessorConfig =<br /> This is &quot;nn::irsensor::TeraPluginProcessorConfig&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x1 || Mode<br /> |-<br /> | 0x1 || 0x1 || <br /> |-<br /> | 0x2 || 0x1 || <br /> |-<br /> | 0x3 || 0x1 || <br /> |}<br /> <br /> = PackedTeraPluginProcessorConfig =<br /> This is &quot;nn::irsensor::PackedTeraPluginProcessorConfig&quot;.<br /> <br /> This is converted from [[#TeraPluginProcessorConfig]]. The data starting at offset 0x5 is only initialized by the user-process with [6.0.0+].<br /> <br /> [[#TeraPluginProcessorConfig]] +0x0, +0x2, and +0x3 are copied to +0x4, 0x6, and +0x7 here. +0x5 here is set to 0x2 | ([[#TeraPluginProcessorConfig]]+0x1 &lt;&lt; 7).<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || [[#PackedMcuVersion|RequiredMcuVersion]]<br /> |-<br /> | 0x4 || 0x1 || Mode<br /> |-<br /> | 0x5 || 0x1 || <br /> |-<br /> | 0x6 || 0x1 || <br /> |-<br /> | 0x7 || 0x1 || <br /> |}<br /> <br /> = PointingProcessorConfig =<br /> This is &quot;nn::irsensor::PointingProcessorConfig&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x2 || WindowOfInterestX (default is 0)<br /> |-<br /> | 0x2 || 0x2 || WindowOfInterestY (default is 0)<br /> |-<br /> | 0x4 || 0x2 || WindowOfInterestWidth (default is 320)<br /> |-<br /> | 0x6 || 0x2 || WindowOfInterestHeight (default is 240)<br /> |}<br /> <br /> = PackedPointingProcessorConfig =<br /> This is &quot;nn::irsensor::PackedPointingProcessorConfig&quot;.<br /> <br /> This is converted from [[#PointingProcessorConfig]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x2 || WindowOfInterestX (default is 0)<br /> |-<br /> | 0x2 || 0x2 || WindowOfInterestY (default is 0)<br /> |-<br /> | 0x4 || 0x2 || WindowOfInterestWidth (default is 320)<br /> |-<br /> | 0x6 || 0x2 || WindowOfInterestHeight (default is 240)<br /> |-<br /> | 0x8 || 0x4 || [[#PackedMcuVersion|RequiredMcuVersion]]<br /> |}<br /> <br /> = PackedMcuVersion =<br /> This is &quot;nn::irsensor::PackedMcuVersion&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x2 || MajorVersion<br /> |-<br /> | 0x2 || 0x2 || MinorVersion<br /> |}<br /> <br /> == Versions ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! MajorVersion || MinorVersion || SystemVersion<br /> |-<br /> | 0x3 || 0xB || [1.0.0+]<br /> |-<br /> | 0x4 || 0x12 || [4.0.0+]<br /> |-<br /> | 0x5 || 0x18 || [5.0.0+]<br /> |-<br /> | 0x6 || 0x1A || [6.0.0+]<br /> |-<br /> | 0x8 || 0x1B || [8.0.0+]<br /> |}<br /> <br /> = PackedFunctionLevel =<br /> This is nn::irsensor::PackedFunctionLevel.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x1 || [[#IrSensorFunctionLevel]]<br /> |-<br /> | 0x1 || 0x3 || Reserved<br /> |}<br /> <br /> == IrSensorFunctionLevel ==<br /> This is &quot;nn::irsensor::IrSensorFunctionLevel&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Value || SystemVersion<br /> |-<br /> | 0 || [1.0.0+]<br /> |-<br /> | 1 || [4.0.0+]<br /> |-<br /> | 2 || [5.0.0+]<br /> |-<br /> | 3 || [6.0.0+]<br /> |-<br /> | 4 || [8.0.0+]<br /> |}<br /> <br /> = ImageTransferProcessorExConfig =<br /> This is &quot;nn::irsensor::ImageTransferProcessorExConfig&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || ExposureTime<br /> |-<br /> | 0x8 || 0x4 || LightTarget<br /> |-<br /> | 0xC || 0x4 || Gain<br /> |-<br /> | 0x10 || 0x1 || IsNegativeImageUsed<br /> |-<br /> | 0x11 || 0x7 || Reserved<br /> |-<br /> | 0x18 || 0x4 || [[#ImageTransferProcessorFormat|OrigFormat]]<br /> |-<br /> | 0x1C || 0x4 || [[#ImageTransferProcessorFormat|TrimmingFormat]]<br /> |-<br /> | 0x20 || 0x2 || TrimmingStartX<br /> |-<br /> | 0x22 || 0x2 || TrimmingStartY<br /> |-<br /> | 0x24 || 0x1 || IsExternalLightFilterEnabled<br /> |}<br /> <br /> = PackedImageTransferProcessorExConfig =<br /> This is &quot;nn::irsensor::PackedImageTransferProcessorExConfig&quot;.<br /> <br /> This is converted from [[#ImageTransferProcessorExConfig]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x8 || ExposureTime<br /> |-<br /> | 0x8 || 0x1 || LightTarget<br /> |-<br /> | 0x9 || 0x1 || Gain<br /> |-<br /> | 0xA || 0x1 || IsNegativeImageUsed<br /> |-<br /> | 0xB || 0x5 || Reserved<br /> |-<br /> | 0x10 || 0x4 || [[#PackedMcuVersion|RequiredMcuVersion]]<br /> |-<br /> | 0x14 || 0x1 || [[#ImageTransferProcessorFormat|OrigFormat]]<br /> |-<br /> | 0x15 || 0x1 || [[#ImageTransferProcessorFormat|TrimmingFormat]]<br /> |-<br /> | 0x16 || 0x2 || TrimmingStartX<br /> |-<br /> | 0x18 || 0x2 || TrimmingStartY<br /> |-<br /> | 0x1A || 0x1 || IsExternalLightFilterEnabled<br /> |-<br /> | 0x1B || 0x5 || Reserved<br /> |}<br /> <br /> = IrLedProcessorConfig =<br /> This is &quot;nn::irsensor::IrLedProcessorConfig&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || LightTarget<br /> |}<br /> <br /> = PackedIrLedProcessorConfig =<br /> This is &quot;nn::irsensor::PackedIrLedProcessorConfig&quot;.<br /> <br /> This is converted from [[#IrLedProcessorConfig]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || [[#PackedMcuVersion|RequiredMcuVersion]]<br /> |-<br /> | 0x4 || 0x1 || LightTarget<br /> |-<br /> | 0x5 || 0x3 || Padding<br /> |}<br /> <br /> = AdaptiveClusteringProcessorConfig =<br /> This is &quot;nn::irsensor::AdaptiveClusteringProcessorConfig&quot;.<br /> <br /> AdaptiveClusteringProcessor was added with [5.0.0+].<br /> <br /> This is converted to [[#TeraPluginProcessorConfig]] by the user-process. [[#TeraPluginProcessorConfig]]+0x3 is zero.<br /> <br /> The default config is all-zero.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || [[#AdaptiveClusteringMode]]<br /> |-<br /> | 0x4 || 0x4 || [6.0.0+] [[#AdaptiveClusteringTargetDistance]]<br /> |}<br /> <br /> == AdaptiveClusteringMode ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || StaticFov<br /> |-<br /> | 1 || DynamicFov<br /> |}<br /> <br /> Controls the mode for [[#TeraPluginProcessorConfig]] (DynamicFov -&gt; 0x10; StaticFov -&gt; 0x0F).<br /> <br /> == AdaptiveClusteringTargetDistance ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || Near<br /> |-<br /> | 1 || Middle<br /> |-<br /> | 2 || Far<br /> |}<br /> <br /> Controls the second and third bytes for [[#TeraPluginProcessorConfig]] (Near-&gt; 0x00, 0x00; Middle -&gt; 0x01, 0x03; Far -&gt; 0x01, 0x08).<br /> <br /> = HandAnalysisConfig =<br /> This is &quot;nn::irsensor::HandAnalysisConfig&quot;.<br /> <br /> This is converted to [[#TeraPluginProcessorConfig]] by the user-process, which is all-zero except the mode.<br /> * pre-4.0.0: [[#TeraPluginProcessorConfig]] mode = [[#HandAnalysisMode]] - 1.<br /> * [4.0.0+]: Silhouette = 0x5, Image = 0x6, SilhouetteAndImage = 0x7, SilhouetteOnly = 0xA.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || [[#HandAnalysisMode]]<br /> |}<br /> <br /> == HandAnalysisMode ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || None (invalid)<br /> |-<br /> | 1 || Silhouette<br /> |-<br /> | 2 || Image<br /> |-<br /> | 3 || SilhouetteAndImage<br /> |-<br /> | 4 || [4.0.0+] SilhouetteOnly<br /> |}<br /> <br /> = BusHandle =<br /> This is &quot;nn::hidbus::BusHandle&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || AbstractedPadId<br /> |-<br /> | 0x4 || 0x1 || InternalIndex<br /> |-<br /> | 0x5 || 0x1 || PlayerNumber<br /> |-<br /> | 0x6 || 0x1 || BusTypeId<br /> |-<br /> | 0x7 || 0x1 || IsValid<br /> |}<br /> <br /> = JoyPollingReceivedData =<br /> This is &quot;nn::hidbus::JoyPollingReceivedData&quot;.<br /> <br /> This is copied from the entries in [[#EnableJoyPollingReceiveMode|TransferMemory]] by GetJoyPollingReceivedData.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x30 || Data<br /> |-<br /> | 0x30 || 0x8 || OutSize<br /> |-<br /> | 0x38 || 0x8 || SamplingNumber<br /> |}<br /> <br /> = BusType =<br /> This is &quot;nn::hidbus::BusType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || LeftJoyRail<br /> |-<br /> | 1 || RightJoyRail<br /> |-<br /> | 2 || [6.0.0+] InternalBus (for Lark microphone)<br /> |}<br /> <br /> = JoyPollingMode =<br /> This is &quot;nn::hidbus::JoyPollingMode&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || SixAxisSensorDisable<br /> |-<br /> | 1 || SixAxisSensorEnable<br /> |-<br /> | 2 || ButtonOnly<br /> |}<br /> <br /> Other values causes [[#EnableJoyPollingReceiveMode]] to assert.<br /> <br /> = StatusManagerType =<br /> This is &quot;nn::hidbus::detail::StatusManagerType&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value<br /> ! Description<br /> |-<br /> | 0 || None<br /> |-<br /> | 1 || 16<br /> |-<br /> | 2 || 32<br /> |}<br /> <br /> = ExternalDevices =<br /> The following devices are used via hidbus:<br /> * [[Ring-Con]]<br /> * Famicom right controller (with microphone)<br /> ** [[#BusType]] is 2, ExternalDeviceId is 0x21. SendAndReceive is not used. EnableJoyPollingReceiveMode is used where the input buffer is an u32 with value 0, [[#JoyPollingMode]] = 2. GetJoyPollingReceivedData is used to get the output data.<br /> * Used by Starlink: Battle For Atlas.<br /> ** [[#BusType]] is 1, ExternalDeviceId is 0x28. EnableJoyPollingReceiveMode is used where the input buffer is an u16 with value 0x09, [[#JoyPollingMode]] = 0. SendAndReceive is called from 1 func. GetJoyPollingReceivedData is used to determine whether to call the same func which calls SendAndReceive, which is only done if &lt;code&gt;out_size==0x4 &amp;&amp; data[0]==0x09 &amp;&amp; (data[1] &amp; 1 == 1)&lt;/code&gt;.<br /> <br /> = RomFS =<br /> The hid-sysmodule RomFS contains:<br /> ftmFwUpdate<br /> ├── NTD_4CD_1801.fts256<br /> ├── NTD_4CD_2602.fts256<br /> ├── NTD_4CD_3801.fts256<br /> └── NTD_4CD_xxxx.fts256 [7.0.0+]<br /> <br /> These are firmware files for the touchscreen controller.<br /> <br /> [9.0.0+] The hid-sysmodule RomFS now contains:<br /> ftmFwUpdate<br /> ├── FTS_00120100.fts256<br /> ├── FTS_32000001.fts256<br /> ├── FTS_32000102.fts256<br /> ├── FTS_32000302.fts256<br /> └── FTS_32000402.fts256<br /> <br /> = Firmware update =<br /> HID-sysmodule mounts the contents of title [[Title_list|0100000000000822]] as &quot;systemData&quot; or the contents of title [[Title_list|010000000000B22B]] as &quot;systemDataD&quot;. Both titles contain the same files, but [[Title_list|0100000000000822]] is used on retail units while [[Title_list|010000000000B22B]] is used for development.<br /> <br /> [10.0.0+]: The RomFs for hid-sysmodule was removed, the data which used to be in that RomFs was moved into this SystemData (the below .fts256 files).<br /> <br /> These titles contain the following files:<br /> * '''ExpectVersionInfo.csv''' - List in the format &quot;[device],[type],[version]&quot; where &quot;device&quot; can be &quot;JoyLeft&quot;, &quot;JoyRight&quot;, &quot;FullKey&quot;, &quot;Palma&quot; or &quot;Handheld&quot;, &quot;type&quot; can be &quot;BT&quot;, &quot;MCU&quot;, &quot;USB&quot; or &quot;SioH&quot; and &quot;version&quot; is the hexadecimal representation of the firmware file's version.<br /> * '''FirmwareInfo.csv''' - List in the format &quot;[device],[type],[version],[file]&quot; where &quot;device&quot;, &quot;type&quot; and &quot;version&quot; should match the values from &quot;ExpectVersionInfo&quot; and &quot;file&quot; is the name of the firmware file.<br /> * '''ukyosakyo_ep2_ota.bin''' - Left/Right Joy-Con BT firmware.<br /> * '''raizo_ep2_ota.bin''' - Pro Controller BT firmware.<br /> * '''tera_ota.bin''' - Right Joy-Con MCU firmware. <br /> * '''tera_ota_iap.bin''' - Right Joy-Con MCU (IAP profile) firmware.<br /> * '''tera_fullkey_ota.bin''' - Pro Controller MCU firmware.<br /> * '''tera_fullkey_ota_iap.bin''' - Pro Controller MCU (IAP profile) firmware.<br /> * [6.0.0+] '''ProController.dfu''' - Pro Controller USB firmware.<br /> * [6.1.0+] '''PalmaFw.bin''' - Poké Ball Plus BT firmware.<br /> * [9.0.0+] '''ExpectVersionInfo-platform.hoag.csv''' - Same as &quot;ExpectVersionInfo.csv&quot; but for the Switch Lite platform.<br /> * [9.0.0+] '''FirmwareInfo-platform.hoag.csv''' - Same as &quot;FirmwareInfo.csv&quot; but for the Switch Lite platform.<br /> * [9.0.0+] '''sioh.bin''' - Switch Lite Joy-Con firmware. <br /> * [9.0.0+] '''sioh_iap.bin''' - Switch Lite Joy-Con (IAP profile) firmware.<br /> * [10.0.0+] '''FTS_00120100.fts256'''<br /> * [10.0.0+] '''FTS_32000001.fts256'''<br /> * [10.0.0+] '''FTS_32000102.fts256'''<br /> * [10.0.0+] '''FTS_32000302.fts256'''<br /> * [10.0.0+] '''FTS_32000402.fts256'''<br /> * [10.0.0+] '''TouchScreenConfiguration.csv'''<br /> * [10.0.0+] '''TouchScreenFirmwareInfo.csv'''<br /> * [13.0.0+] '''FTS_33000510.fts256'''<br /> * [13.0.0+] '''FTS_98000004.ftb'''<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Testpads&diff=10950 2021-05-15T06:15:25Z

<p>Shinyquagsire23: Notes on JTAG and lockout</p> <hr /> <div>The Nintendo Switch mainboard has a series of testpads on the front and back, presumably used in factory test, diagnostics, and early board bringup procedures.<br /> <br /> == Raw Logic captures ==<br /> <br /> These are reference materials, taken from poking at I/O on various testpads. https://github.com/hedgeberg/Switch-Logic-Captures<br /> <br /> == Photos ==<br /> <br /> [[File:Switchre_side1.jpg|200px]]<br /> [[File:Switchre_side2.jpg|200px]]<br /> <br /> == Pinouts ==<br /> <br /> === Cluster A ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || Batt GND? || || || || ||<br /> |-<br /> | 2 || Battery pulse? || Pulse train || 0-3.3V || L-5? || ||<br /> |-<br /> | 3 || Battery Vdd || || || || ||<br /> |-<br /> | 4 || Speaker R + || Square wave || 0-3.3V || || || Speaker Right +<br /> |-<br /> | 5 || Speaker R - || Square wave || 0-3.3V || || || Speaker Right -<br /> |-<br /> | 6 || Weak GND? || || || || ||<br /> |-<br /> | 7 || SDA || I2C || 0-1.8V || || || I2C Port 0 <br /> |-<br /> | 8 || SCL || I2C || 0-1.8V || || || I2C Port 0<br /> |-<br /> | 9 || USB-PWR-WAVE? || Square wave || 0-3.3V || K-4, K-5? || ~11 Hz || <br /> |-<br /> | 10 || USB-PWR-WAVE? || Square wave || 0-3.3V || K-4, K-5? || ~11 Hz || <br /> |}<br /> <br /> === Cluster B ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || || DBVDD || || || || from ALC5639 pin 43<br /> |-<br /> | 2 || D+ || USB-C || || || || Cluster B - 3<br /> |-<br /> | 3 || D- || USB-C || || || || Cluster B - 2<br /> |-<br /> | 4 || +3.3V || XRST || || || || from M92T36 pin 4<br /> |-<br /> | 5 || +3.3V || VSVR || || || || from M92T36 pin 6<br /> |-<br /> | 5(b) || VUSB || VB || || || || from M92T36 pin 9<br /> |-<br /> | 6 || GND || || || || || <br /> |}<br /> <br /> === Cluster C ===<br /> The JTAG pins are multiplexed between NV_JTAG and ARM_JTAG by the TRST pin:<br /> <br /> * NV_JTAG contains a single TAP (ID 0x221173D7) for boundary scan board verification.<br /> * ARM_JTAG contains two debugging TAPs for CoreSight (ID 0x5BA00477) and BPMP (ID 0x4F1F0F0F).<br /> <br /> Note: NV_JTAG and ARM_JTAG are locked out by [[Fuses#Cache|FUSE_ARM_JTAG_DIS]] on production devices.<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || JTAG_TDI || || 0-1.8V || || || <br /> |-<br /> | 2 || UART1_RX || || 0-1.8V || || || UART-A RX<br /> |-<br /> | 3 || UART1_TX || || 0-1.8V || || || UART-A TX<br /> |-<br /> | 4 || JTAG_TCK || || 0-1.8V || || || <br /> |-<br /> | 5 || JTAG_RTCK || || 0-1.8V || || || Unused for NV_JTAG<br /> |-<br /> | 6 || UART1_RTS || || 0-1.8V || || || UART-A RTS Flow control<br /> |-<br /> | 7 || JTAG_TDO || || 0-1.8V || || || <br /> |-<br /> | 8 || UART1_CTS || || 0-1.8V || || || UART-A CTS Flow control<br /> |-<br /> | 9 || JTAG_TMS || || 0-1.8V || || || <br /> |-<br /> | 10 || JTAG_TRST_N || || 0-1.8V || || || Not a TAP reset; Multiplexes between NV_JTAG (HI) and ARM_JTAG (LO)<br /> |-<br /> | 11 || +1.8V || || 0-1.8V || || || <br /> |}<br /> <br /> === Cluster D ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || GND || || || || ||<br /> |-<br /> | 4 || Seaker L + || || || || || Speaker Left +<br /> |-<br /> | 5 || Seaker L - || || || || || Speaker Left - <br /> |}<br /> <br /> === Cluster E ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || Vol (-) || || || || || Button Vol (-)<br /> |-<br /> | 10 || Reset || || || || ||<br /> |-<br /> | 11 || Power Button || Pushbutton || 4V-0V || || || Active low<br /> |}<br /> <br /> === Cluster G ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || SD card detect || || || || || <br /> |-<br /> | 2 || GND || || || || || <br /> |-<br /> | 4 || Vol(+) || || || || || Button Vol (+)<br /> |-<br /> | 5 || Li-Ion Batt Vdd Mirror || || || || || Power Supply<br /> |-<br /> | 9 || BUTTON_HOME || || || || || RCM strap<br /> |}<br /> <br /> === Cluster H ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || || || || || ||<br /> |-<br /> | 2 || || || || || ||<br /> |-<br /> | 3 || || || || || ||<br /> |-<br /> | 4 || Screen_on || On/Off || 0-1.8v || I-2 || || Screen power state, active high<br /> |-<br /> | 5 || || Flow control || 0-1.8V || I-5 || Flow control for pad I-4? ||<br /> |-<br /> | 6 || || || || || ||<br /> |-<br /> | 7 || || UART || 0-1.8V || I-4 || 1.5MBaud?||<br /> |-<br /> | 8 || || UART || 0-1.8V || I-3 || 1.5MBaud?||<br /> |-<br /> | 9 || || || || || ||<br /> |-<br /> | 10 || || || || || H-12 || On the same trace<br /> |-<br /> | 11 || || || || || || Goes to a small ceramic cap near WiFi/BT IC?<br /> |-<br /> | 12 || || || || H-10 || || On the same trace<br /> |}<br /> <br /> === Cluster I ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || GND || || || || ||<br /> |-<br /> | 2 || Screen_on || On/Off || 0-1.8V || || || Screen power state, active high<br /> |-<br /> | 3 || || UART || 0-1.8V || || 1.5MBaud? || Communication CPU -&gt; Bluetooth using HCI <br /> |-<br /> | 4 || || UART || 0-1.8V || || 1.5MBaud? || Communication Bluetooth -&gt; CPU using HCI <br /> |-<br /> | 5 || || Flow control || 0-1.8V || || || Flow control for pad I-4?<br /> |-<br /> | 6 || || || 0-1.8V || || || Needs testing with chip/touch screen interface board plugged in<br /> |}<br /> <br /> === Cluster J ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || ? || Edge || 0-1.8V || || || Turns on around same time as pad J-3<br /> |-<br /> | 2 || GND || || || || ||<br /> |-<br /> | 3 || ? || Edge || 0-1.8V || || || Turns on around same time as pad J-1, slightly after<br /> |-<br /> | 4 || Power button || Pushbutton || 4V-0V || || || Active low<br /> |-<br /> | 5 || ? || Constant? || 0V || Ground?-NT || ||<br /> |-<br /> | 6 || ? || Edge || 0-1.8V || || || Turns on with pad J-6, ~1s after J-1/J-3<br /> |-<br /> | 7 || ? || Edge || 0-1.8V || || || Turns on with pad J-5, ~1s after J-1/J-3<br /> |-<br /> | 8 || ? || Edge? || 0-1.8V || || || Turns on ~1s after J-6/J-7, turns off at unknown point<br /> |}<br /> <br /> === Cluster K ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || GND || || || || ||<br /> |-<br /> | 2 || D- || USB-C || || || || Cluster B - 3<br /> |-<br /> | 3 || D+ || USB-C || || || || Cluster B - 2<br /> |-<br /> | 4 || USB-PWR-WAVE? || Square wave || 0V-3.3V || A-9, A-10? || ~11 Hz ||<br /> |-<br /> | 5 || USB-PWR-WAVE? || Square wave || 0V-3.3V || A-9, A-10? || ~11 Hz || Appears to mirror K4. Duty cycle 66.67%. Low on screen lock. Off until first interaction.<br /> |-<br /> | 6 || USB-C V+ || Supply power || || || || support fast charger : &quot;normal mode = 5V+&quot; &quot;Fast changer = 12V+&quot; <br /> |-<br /> | 7 || BQ24193 VBUS + M92T36 VEX || Power supply? || ~3V-0V || None known || N/A || 0 when usb-c not plugged in, falls slowly on first interaction if USB-C plugged in. Power draw related?<br /> |}<br /> <br /> === Cluster L ===<br /> <br /> TODO: Update diagram<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || Li-Ion Batt Vdd Mirror || Power Supply || Std. Li-Ion || || ||<br /> |-<br /> | 2 || GND || || || || ||<br /> |-<br /> | 3 || Li-Ion Batt Vdd || Battery Input || Std. Li-Ion || || ||<br /> |-<br /> | 4 || Mirrored Ground? || || || || || Holds steady @ 0, looks like a decoupled isolated ground<br /> |-<br /> | 5 || Battery pulse? || || || || &lt;1 Hz || Duty cycle ~0%<br /> |-<br /> | 6 || GND || || || || ||<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Testpads&diff=10907 2021-05-02T04:41:34Z

<p>Shinyquagsire23: JTAG pins and UART-A ball names</p> <hr /> <div>The Nintendo Switch mainboard has a series of testpads on the front and back, presumably used in factory test, diagnostics, and early board bringup procedures.<br /> <br /> == Raw Logic captures ==<br /> <br /> These are reference materials, taken from poking at I/O on various testpads. https://github.com/hedgeberg/Switch-Logic-Captures<br /> <br /> == Photos ==<br /> <br /> [[File:Switchre_side1.jpg|200px]]<br /> [[File:Switchre_side2.jpg|200px]]<br /> <br /> == Pinouts ==<br /> <br /> === Cluster A ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || Batt GND? || || || || ||<br /> |-<br /> | 2 || Battery pulse? || Pulse train || 0-3.3V || L-5? || ||<br /> |-<br /> | 3 || Battery Vdd || || || || ||<br /> |-<br /> | 4 || Speaker R + || Square wave || 0-3.3V || || || Speaker Right +<br /> |-<br /> | 5 || Speaker R - || Square wave || 0-3.3V || || || Speaker Right -<br /> |-<br /> | 6 || Weak GND? || || || || ||<br /> |-<br /> | 7 || SDA || I2C || 0-1.8V || || || I2C Port 0 <br /> |-<br /> | 8 || SCL || I2C || 0-1.8V || || || I2C Port 0<br /> |-<br /> | 9 || USB-PWR-WAVE? || Square wave || 0-3.3V || K-4, K-5? || ~11 Hz || <br /> |-<br /> | 10 || USB-PWR-WAVE? || Square wave || 0-3.3V || K-4, K-5? || ~11 Hz || <br /> |}<br /> <br /> === Cluster B ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || || DBVDD || || || || from ALC5639 pin 43<br /> |-<br /> | 2 || D+ || USB-C || || || || Cluster B - 3<br /> |-<br /> | 3 || D- || USB-C || || || || Cluster B - 2<br /> |-<br /> | 4 || +3.3V || XRST || || || || from M92T36 pin 4<br /> |-<br /> | 5 || +3.3V || VSVR || || || || from M92T36 pin 6<br /> |-<br /> | 5(b) || VUSB || VB || || || || from M92T36 pin 9<br /> |-<br /> | 6 || GND || || || || || <br /> |}<br /> <br /> === Cluster C ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || JTAG_TDI || || 0-1.8V || || || <br /> |-<br /> | 2 || UART1_RX || || 0-1.8V || || || UART-A RX<br /> |-<br /> | 3 || UART1_TX || || 0-1.8V || || || UART-A TX<br /> |-<br /> | 4 || JTAG_TCK || || 0-1.8V || || || <br /> |-<br /> | 5 || JTAG_RTCK || || 0-1.8V || || || <br /> |-<br /> | 6 || UART1_RTS || || 0-1.8V || || || UART-A RTS Flow control<br /> |-<br /> | 7 || JTAG_TDO || || 0-1.8V || || || <br /> |-<br /> | 8 || UART1_CTS || || 0-1.8V || || || UART-A CTS Flow control<br /> |-<br /> | 9 || JTAG_TMS || || 0-1.8V || || || <br /> |-<br /> | 10 || JTAG_TRST_N || || 0-1.8V || || || <br /> |-<br /> | 11 || +1.8V || || 0-1.8V || || || <br /> |}<br /> <br /> === Cluster D ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || GND || || || || ||<br /> |-<br /> | 4 || Seaker L + || || || || || Speaker Left +<br /> |-<br /> | 5 || Seaker L - || || || || || Speaker Left - <br /> |}<br /> <br /> === Cluster E ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || Vol (-) || || || || || Button Vol (-)<br /> |-<br /> | 10 || Reset || || || || ||<br /> |-<br /> | 11 || Power Button || Pushbutton || 4V-0V || || || Active low<br /> |}<br /> <br /> === Cluster G ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || SD card detect || || || || || <br /> |-<br /> | 2 || GND || || || || || <br /> |-<br /> | 4 || Vol(+) || || || || || Button Vol (+)<br /> |-<br /> | 5 || Li-Ion Batt Vdd Mirror || || || || || Power Supply<br /> |-<br /> | 9 || BUTTON_HOME || || || || || RCM strap<br /> |}<br /> <br /> === Cluster H ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || || || || || ||<br /> |-<br /> | 2 || || || || || ||<br /> |-<br /> | 3 || || || || || ||<br /> |-<br /> | 4 || Screen_on || On/Off || 0-1.8v || I-2 || || Screen power state, active high<br /> |-<br /> | 5 || || Flow control || 0-1.8V || I-5 || Flow control for pad I-4? ||<br /> |-<br /> | 6 || || || || || ||<br /> |-<br /> | 7 || || UART || 0-1.8V || I-4 || 1.5MBaud?||<br /> |-<br /> | 8 || || UART || 0-1.8V || I-3 || 1.5MBaud?||<br /> |-<br /> | 9 || || || || || ||<br /> |-<br /> | 10 || || || || || H-12 || On the same trace<br /> |-<br /> | 11 || || || || || || Goes to a small ceramic cap near WiFi/BT IC?<br /> |-<br /> | 12 || || || || H-10 || || On the same trace<br /> |}<br /> <br /> === Cluster I ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || GND || || || || ||<br /> |-<br /> | 2 || Screen_on || On/Off || 0-1.8V || || || Screen power state, active high<br /> |-<br /> | 3 || || UART || 0-1.8V || || 1.5MBaud? || Communication CPU -&gt; Bluetooth using HCI <br /> |-<br /> | 4 || || UART || 0-1.8V || || 1.5MBaud? || Communication Bluetooth -&gt; CPU using HCI <br /> |-<br /> | 5 || || Flow control || 0-1.8V || || || Flow control for pad I-4?<br /> |-<br /> | 6 || || || 0-1.8V || || || Needs testing with chip/touch screen interface board plugged in<br /> |}<br /> <br /> === Cluster J ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || ? || Edge || 0-1.8V || || || Turns on around same time as pad J-3<br /> |-<br /> | 2 || GND || || || || ||<br /> |-<br /> | 3 || ? || Edge || 0-1.8V || || || Turns on around same time as pad J-1, slightly after<br /> |-<br /> | 4 || Power button || Pushbutton || 4V-0V || || || Active low<br /> |-<br /> | 5 || ? || Constant? || 0V || Ground?-NT || ||<br /> |-<br /> | 6 || ? || Edge || 0-1.8V || || || Turns on with pad J-6, ~1s after J-1/J-3<br /> |-<br /> | 7 || ? || Edge || 0-1.8V || || || Turns on with pad J-5, ~1s after J-1/J-3<br /> |-<br /> | 8 || ? || Edge? || 0-1.8V || || || Turns on ~1s after J-6/J-7, turns off at unknown point<br /> |}<br /> <br /> === Cluster K ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || GND || || || || ||<br /> |-<br /> | 2 || D- || USB-C || || || || Cluster B - 3<br /> |-<br /> | 3 || D+ || USB-C || || || || Cluster B - 2<br /> |-<br /> | 4 || USB-PWR-WAVE? || Square wave || 0V-3.3V || A-9, A-10? || ~11 Hz ||<br /> |-<br /> | 5 || USB-PWR-WAVE? || Square wave || 0V-3.3V || A-9, A-10? || ~11 Hz || Appears to mirror K4. Duty cycle 66.67%. Low on screen lock. Off until first interaction.<br /> |-<br /> | 6 || USB-C V+ || Supply power || || || || support fast charger : &quot;normal mode = 5V+&quot; &quot;Fast changer = 12V+&quot; <br /> |-<br /> | 7 || BQ24193 VBUS + M92T36 VEX || Power supply? || ~3V-0V || None known || N/A || 0 when usb-c not plugged in, falls slowly on first interaction if USB-C plugged in. Power draw related?<br /> |}<br /> <br /> === Cluster L ===<br /> <br /> TODO: Update diagram<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || Li-Ion Batt Vdd Mirror || Power Supply || Std. Li-Ion || || ||<br /> |-<br /> | 2 || GND || || || || ||<br /> |-<br /> | 3 || Li-Ion Batt Vdd || Battery Input || Std. Li-Ion || || ||<br /> |-<br /> | 4 || Mirrored Ground? || || || || || Holds steady @ 0, looks like a decoupled isolated ground<br /> |-<br /> | 5 || Battery pulse? || || || || &lt;1 Hz || Duty cycle ~0%<br /> |-<br /> | 6 || GND || || || || ||<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Testpads&diff=10905 2021-05-01T06:11:49Z

<p>Shinyquagsire23: Cluster G TP1 - SD card detect</p> <hr /> <div>The Nintendo Switch mainboard has a series of testpads on the front and back, presumably used in factory test, diagnostics, and early board bringup procedures.<br /> <br /> == Raw Logic captures ==<br /> <br /> These are reference materials, taken from poking at I/O on various testpads. https://github.com/hedgeberg/Switch-Logic-Captures<br /> <br /> == Photos ==<br /> <br /> [[File:Switchre_side1.jpg|200px]]<br /> [[File:Switchre_side2.jpg|200px]]<br /> <br /> == Pinouts ==<br /> <br /> === Cluster A ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || Batt GND? || || || || ||<br /> |-<br /> | 2 || Battery pulse? || Pulse train || 0-3.3V || L-5? || ||<br /> |-<br /> | 3 || Battery Vdd || || || || ||<br /> |-<br /> | 4 || Speaker R + || Square wave || 0-3.3V || || || Speaker Right +<br /> |-<br /> | 5 || Speaker R - || Square wave || 0-3.3V || || || Speaker Right -<br /> |-<br /> | 6 || Weak GND? || || || || ||<br /> |-<br /> | 7 || SDA || I2C || 0-1.8V || || || I2C Port 0 <br /> |-<br /> | 8 || SCL || I2C || 0-1.8V || || || I2C Port 0<br /> |-<br /> | 9 || USB-PWR-WAVE? || Square wave || 0-3.3V || K-4, K-5? || ~11 Hz || <br /> |-<br /> | 10 || USB-PWR-WAVE? || Square wave || 0-3.3V || K-4, K-5? || ~11 Hz || <br /> |}<br /> <br /> === Cluster B ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || || DBVDD || || || || from ALC5639 pin 43<br /> |-<br /> | 2 || D+ || USB-C || || || || Cluster B - 3<br /> |-<br /> | 3 || D- || USB-C || || || || Cluster B - 2<br /> |-<br /> | 4 || +3.3V || XRST || || || || from M92T36 pin 4<br /> |-<br /> | 5 || +3.3V || VSVR || || || || from M92T36 pin 6<br /> |-<br /> | 5(b) || VUSB || VB || || || || from M92T36 pin 9<br /> |-<br /> | 6 || GND || || || || || <br /> |}<br /> <br /> === Cluster C ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || ?? || || 0-1.8V || || || No clue. This is definitely important, we just have no idea how. May need to interface with dock for comms.<br /> |-<br /> | 2 || UART-A RX || || 0-1.8V || || || UART input<br /> |-<br /> | 3 || UART-A TX || || 0-1.8V || || || UART output<br /> |-<br /> | 4 || ?? || || 0-1.8V || || || <br /> |-<br /> | 5 || ?? || || 0-1.8V || || || <br /> |-<br /> | 6 || UART-A RTS || || 0-1.8V || || || UART-A Flow control<br /> |-<br /> | 7 || ?? || || 0-1.8V || || || <br /> |-<br /> | 8 || UART-A CTS || || 0-1.8V || || || UART-A Flow control<br /> |-<br /> | 9 || ?? || || 0-1.8V || || || <br /> |-<br /> | 10 || ?? || || 0-1.8V || || || <br /> |-<br /> | 11 || +1.8V || || 0-1.8V || || || <br /> |}<br /> <br /> === Cluster D ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || GND || || || || ||<br /> |-<br /> | 4 || Seaker L + || || || || || Speaker Left +<br /> |-<br /> | 5 || Seaker L - || || || || || Speaker Left - <br /> |}<br /> <br /> === Cluster E ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || Vol (-) || || || || || Button Vol (-)<br /> |-<br /> | 10 || Reset || || || || ||<br /> |-<br /> | 11 || Power Button || Pushbutton || 4V-0V || || || Active low<br /> |}<br /> <br /> === Cluster G ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || SD card detect || || || || || <br /> |-<br /> | 2 || GND || || || || || <br /> |-<br /> | 4 || Vol(+) || || || || || Button Vol (+)<br /> |-<br /> | 5 || Li-Ion Batt Vdd Mirror || || || || || Power Supply<br /> |-<br /> | 9 || BUTTON_HOME || || || || || RCM strap<br /> |}<br /> <br /> === Cluster H ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || || || || || ||<br /> |-<br /> | 2 || || || || || ||<br /> |-<br /> | 3 || || || || || ||<br /> |-<br /> | 4 || Screen_on || On/Off || 0-1.8v || I-2 || || Screen power state, active high<br /> |-<br /> | 5 || || Flow control || 0-1.8V || I-5 || Flow control for pad I-4? ||<br /> |-<br /> | 6 || || || || || ||<br /> |-<br /> | 7 || || UART || 0-1.8V || I-4 || 1.5MBaud?||<br /> |-<br /> | 8 || || UART || 0-1.8V || I-3 || 1.5MBaud?||<br /> |-<br /> | 9 || || || || || ||<br /> |-<br /> | 10 || || || || || H-12 || On the same trace<br /> |-<br /> | 11 || || || || || || Goes to a small ceramic cap near WiFi/BT IC?<br /> |-<br /> | 12 || || || || H-10 || || On the same trace<br /> |}<br /> <br /> === Cluster I ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || GND || || || || ||<br /> |-<br /> | 2 || Screen_on || On/Off || 0-1.8V || || || Screen power state, active high<br /> |-<br /> | 3 || || UART || 0-1.8V || || 1.5MBaud? || Communication CPU -&gt; Bluetooth using HCI <br /> |-<br /> | 4 || || UART || 0-1.8V || || 1.5MBaud? || Communication Bluetooth -&gt; CPU using HCI <br /> |-<br /> | 5 || || Flow control || 0-1.8V || || || Flow control for pad I-4?<br /> |-<br /> | 6 || || || 0-1.8V || || || Needs testing with chip/touch screen interface board plugged in<br /> |}<br /> <br /> === Cluster J ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || ? || Edge || 0-1.8V || || || Turns on around same time as pad J-3<br /> |-<br /> | 2 || GND || || || || ||<br /> |-<br /> | 3 || ? || Edge || 0-1.8V || || || Turns on around same time as pad J-1, slightly after<br /> |-<br /> | 4 || Power button || Pushbutton || 4V-0V || || || Active low<br /> |-<br /> | 5 || ? || Constant? || 0V || Ground?-NT || ||<br /> |-<br /> | 6 || ? || Edge || 0-1.8V || || || Turns on with pad J-6, ~1s after J-1/J-3<br /> |-<br /> | 7 || ? || Edge || 0-1.8V || || || Turns on with pad J-5, ~1s after J-1/J-3<br /> |-<br /> | 8 || ? || Edge? || 0-1.8V || || || Turns on ~1s after J-6/J-7, turns off at unknown point<br /> |}<br /> <br /> === Cluster K ===<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || GND || || || || ||<br /> |-<br /> | 2 || D- || USB-C || || || || Cluster B - 3<br /> |-<br /> | 3 || D+ || USB-C || || || || Cluster B - 2<br /> |-<br /> | 4 || USB-PWR-WAVE? || Square wave || 0V-3.3V || A-9, A-10? || ~11 Hz ||<br /> |-<br /> | 5 || USB-PWR-WAVE? || Square wave || 0V-3.3V || A-9, A-10? || ~11 Hz || Appears to mirror K4. Duty cycle 66.67%. Low on screen lock. Off until first interaction.<br /> |-<br /> | 6 || USB-C V+ || Supply power || || || || support fast charger : &quot;normal mode = 5V+&quot; &quot;Fast changer = 12V+&quot; <br /> |-<br /> | 7 || BQ24193 VBUS + M92T36 VEX || Power supply? || ~3V-0V || None known || N/A || 0 when usb-c not plugged in, falls slowly on first interaction if USB-C plugged in. Power draw related?<br /> |}<br /> <br /> === Cluster L ===<br /> <br /> TODO: Update diagram<br /> <br /> {| class=wikitable<br /> ! Pad # || Name || Type || Levels || Continuity || Frequency || Comment<br /> |-<br /> | 1 || Li-Ion Batt Vdd Mirror || Power Supply || Std. Li-Ion || || ||<br /> |-<br /> | 2 || GND || || || || ||<br /> |-<br /> | 3 || Li-Ion Batt Vdd || Battery Input || Std. Li-Ion || || ||<br /> |-<br /> | 4 || Mirrored Ground? || || || || || Holds steady @ 0, looks like a decoupled isolated ground<br /> |-<br /> | 5 || Battery pulse? || || || || &lt;1 Hz || Duty cycle ~0%<br /> |-<br /> | 6 || GND || || || || ||<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Switch_System_Flaws&diff=10904 2021-04-30T19:55:13Z

<p>Shinyquagsire23: not really a vulnerability per-se but funky flawed behavior nonetheless</p> <hr /> <div>Exploits are used to execute unofficial code (homebrew) on the Nintendo Switch. This page is a list of publicly known Switch system flaws.<br /> <br /> For userland applications/applets flaws see [[Switch_Userland_Flaws|here]]. <br /> <br /> = System flaws =<br /> == Hardware == <br /> Flaws in this category pertain to the underlying hardware that powers the Switch.<br /> <br /> This includes components shared across Tegra based devices such as the [[TSEC]], the [[Security_Engine|Security Engine]], the [[GPU]] and so on.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Summary<br /> ! Description<br /> ! Fixed with hardware model/revision<br /> ! Newest hardware model/revision this flaw was checked for<br /> ! Timeframe this was discovered<br /> ! Public disclosure timeframe<br /> ! Discovered by<br /> |-<br /> | CVE-2018-6242 (leveraged by the ShofEL2 and Fusée Gelée exploits)<br /> | The USB software stack provided inside the boot instruction rom (IROM/bootROM) contains a copy operation whose length can be controlled by an attacker. By carefully constructing a USB control request, an attacker can leverage this vulnerability to copy the contents of an attacker-controlled buffer over the active execution stack, gaining control of the Boot and Power Management processor (BPMP) before any lock-outs or privilege reductions occur. This execution can then be used to exfiltrate secrets and to load arbitrary code onto the main CPU Complex (CCPLEX) &quot;application processors&quot; at the highest possible level of privilege (typically as the TrustZone Secure Monitor at PL3/EL3).<br /> | HAC-001-01 (Mariko/Tegra214/Tegra210b01) (also fixed independently on Tegra186).<br /> | HAC-001 (Tegra210)<br /> | January 2018<br /> | April 23, 2018<br /> | [[User:Shuffle2|shuffle2]] and fail0verflow (originally),&lt;br&gt; [[User:Ktemkin|ktemkin]] and ReSwitched Team (independently),&lt;br&gt; [[User:Naehrwert|naehrwert]] (independently),&lt;br&gt; [[User:Hexkyz|hexkyz]] (independently),&lt;br&gt; st4rk with [[User:Shinyquagsire23|Shiny Quagsire]] and Dazzozo (independently),&lt;br&gt; and many others (independently).<br /> |-<br /> | GMMU DMA attack<br /> | The Switch's GPU includes a separate MMU (GMMU) that is allowed to bypass the system's IOMMU (SMMU). By accessing the GPU's MMIO region and manipulating the page table entries in the GMMU, an attacker can read/write any portion of the DRAM (except memory carveouts).<br /> <br /> [5.0.0+] Works around this hardware flaw by using memory pool partitioning. You can no longer escalate into sysmodules with GPU DMA because all their memory is allocated using heap that's carved out.<br /> <br /> HAC-001-01 (Mariko/Tegra214/Tegra210b01): Fixes this by adding a new register which restricts what memory untranslated DMA requests may access. Untranslated GPU DMA may now only access the GPU carveout (physmem 0x80002000-0x80006000), which the GPU already has legitimate and exclusive access to.<br /> | HAC-001-01 (Mariko/Tegra214/Tegra210b01)<br /> | HAC-001 (Tegra210)<br /> | Summer 2017<br /> | December 28, 2017<br /> | [[User:hexkyz|hexkyz]], [[User:SciresM|SciresM]] and [[User:qlutoo|qlutoo]]<br /> |-<br /> | Weak Security Engine context validation<br /> | The Tegra X1 supports a &quot;deep sleep&quot; feature, where everything but DRAM and the PMC registers lose their content (and the SoC loses power). Upon awaking, the bootrom re-executes, restoring system state. Among these stored states is the Security Engine's saved state, which uses AES-128-CBC with a random key and all-zeroes IV. However, the bootrom doesn't perform a MAC on this data, and only validates the last block. This allows one to control most of security engine's state upon wakeup, if one has a way to modify the encrypted state buffer.<br /> <br /> With a way to modify the encrypted state buffer, one can thus dump keys from &quot;write-only&quot; keyslots, etc.<br /> <br /> This also bypasses the SBK protection of the bootROM: indeed, at warmboot, bootROM will always clear keyslot 0xE to prevent malicious code from saving the SBK. Moving the SBK to another keyslot in the saved context renders this protection moot.<br /> <br /> HAC-001-01 (Mariko/Tegra214/Tegra210b01): Fixes this by streamlining the context save process; security engine contexts are now saved to protected memory which the CPU cannot access or modify.<br /> | HAC-001-01 (Mariko/Tegra214/Tegra210b01)<br /> | HAC-001 (Tegra210)<br /> | December 2017<br /> | January 20, 2018<br /> | [[User:SciresM|SciresM]] and [[User:motezazer|motezazer]]<br /> |-<br /> | Security Engine keyslots vulnerable to partial overwrite attack<br /> | <br /> The Tegra X1 security engine supports writing keyslot data to the engine with syntax as follows: <br /> <br /> SECURITY_ENGINE-&gt;AES_KEYTABLE_ADDR = (keyslot &lt;&lt; 4) | (dword_index_in_keyslot); <br /> <br /> SECURITY_ENGINE-&gt;AES_KEYTABLE_DATA = readle32(key, dword_index_in_keyslot * 4); <br /> <br /> However, the Security Engine flushes writes to the internal key tables immediately when AES_KEYTABLE_DATA is written -- this allows one to overwrite a single dword of a key at a time, and thus brute force the contents of keyslots in time (2^32 * 8) = 2^35 instead of 2^256.<br /> | None<br /> | HAC-001 (Tegra210)<br /> | Theorized Summer 2017 due to suggestive syntax, confirmed April 9, 2018<br /> | April 9, 2018<br /> | [[User:SciresM|SciresM]], almost surely others (independently).<br /> |-<br /> | Poor validation of bootrom SDRAM configuration parameters leads to arbitrary writes in bootrom<br /> | <br /> The Tegra X1 bootrom supports saving SDRAM parameters to scratch registers, and using the saved configuration to enable DRAM during warmboot.<br /> <br /> The code that parses these parameters does if (params-&gt;EmcBctSpareN) *params-&gt;EmcBctSpareN = params-&gt;EmcBctSpareNPlusOne for most N, without validating either the address or value written to it.<br /> There are other arbitrary writes in this code, as well (e.g. BootromPatch parameters intended for patching MISC registers do not check a relative offset to 0x7000000, etc).<br /> <br /> This allows a user with access to the PMC registers (via pre-sleep bpmp execution, or otherwise) to gain arbitrary bootrom code execution.<br /> <br /> HAC-001-01 (Mariko/Tegra214/Tegra210b01): Fixes this by validating that the spare writes/bootrom patch before performing them.<br /> | HAC-001-01 (Mariko/Tegra214/Tegra210b01)<br /> | HAC-001 (Tegra210)<br /> | 2017<br /> | December 16, 2018<br /> | Everyone (independently).<br /> |-<br /> | TSEC ROM does not clear crypto registers after signature verification<br /> |<br /> TSEC supports executing signed-microcode at a greater privilege level than normal payloads.<br /> <br /> When jumping to signed microcode, the caller is expected to load hardware crypto register $c6 = &lt;signature&gt;, $c7 = &lt;seed (zero for all officially-signed microcode)&gt;.<br /> <br /> TSEC ROM then calculates the expected signature and compares it to the user-supplied one in $c6. On match, the secure payload is executed, and on failure an exception is raised.<br /> <br /> However, TSEC ROM fails to clear the crypto registers used to calculate the expected signature in either of the success/failure cases.<br /> <br /> Thus, with some way of obtaining the contents of crypto registers (e.g. ROP under some secure payload), an attacker can dump intermediary values from signature calculation.<br /> <br /> With enough data/trial/error, this is enough to reconstruct the signature algorithm:<br /> * mac = &lt;davies meyer hash of (page || address of page) for each 0x100 page in the payload&gt;<br /> * key = AES-ENCRYPT(hardware csecret 0x1, seed)<br /> * signature = AES-ENCRYPT(key, mac)<br /> <br /> | None<br /> | HAC-001 (Tegra210)<br /> | Late 2018/Early 2019<br /> | August 2020<br /> | [[User:qlutoo|qlutoo]]/[[User:Hexkyz|hexkyz]]/[[User:Shuffle2|shuffle2]], [[User:SciresM|SciresM]]/[[User:motezazer|motezazer]] (independently).<br /> |-<br /> | TSEC signature validation design flaw leads to fake-signing<br /> |<br /> As mentioned above, when jumping to signed microcode the caller is expected to load hardware crypto register $c6 = &lt;signature&gt;, $c7 = &lt;seed (zero for all officially-signed microcode)&gt;.<br /> <br /> However, TSEC ROM performs no validation on the input seed used to generate the signing key.<br /> <br /> This leads to the following attack:<br /> * Attacker gains rop under any secure microcode payload with signature = S.<br /> * Attacker uses the &quot;csigenc&quot; instruction to obtain K = AES-ENCRYPT(hardware csecret 0x1, S).<br /> * Attacker jumps to their own microcode with $c6 = &lt;signature calculated on pc using K&gt;, $c7 = S<br /> * TSEC ROM calculates key = AES-ENCRYPT(hardware csecret 0x1, S) = K, and the signature check passes.<br /> * Attackers microcode is executed in secure mode as though it were signed by NVidia.<br /> <br /> Thus an attacker who has exploited *any* secure payload may use this to obtain a &quot;fake signature key&quot;, which can be used to sign and execute arbitrary microcode in secure mode.<br /> <br /> Note: this does not break the TSEC cryptosystem, as the csigenc mechanism relies on the signature of the executing microcode, and fakesigning produces different signatures from NVidia that cannot be controlled.<br /> | None<br /> | HAC-001 (Tegra210)<br /> | Late 2018/Early 2019<br /> | August 2020<br /> | [[User:qlutoo|qlutoo]]/[[User:Hexkyz|hexkyz]]/[[User:Shuffle2|shuffle2]], [[User:SciresM|SciresM]]/[[User:motezazer|motezazer]] (independently).<br /> |-<br /> | ROP under TSEC secure bootrom via DMA engine stack overwrite (--xploit)<br /> | TSEC DMA engine does not stop when entering TSEC secure bootrom. By pointing TSEC DMA to current stack before secure bootrom entry, stack can be controlled. <br /> <br /> One can then use blind ROP against the TSEC secure bootrom (which is execute only, and cannot be dumped).<br /> <br /> With sufficient effort, an attacker can construct a ROP chain that leads to csigcmp being executed with fully controlled arguments.<br /> <br /> This allows for arbitrary heavy secure mode code execution with the current signature set to an arbitrary value.<br /> <br /> This completely breaks the TSEC cryptosystem, by allowing one to obtain the result of csigenc with signature = &lt;any desired value&gt;.<br /> <br /> This has many uses/results, notably including dumping the &quot;true&quot; signature key (set signature = zeroes, perform csigenc using csecret 0x1).<br /> | None<br /> | TSEC for all Tegra devices<br /> | Late 2018<br /> | Jan 2021<br /> | [[User:Hexkyz|hexkyz]]/[[User:SciresM|SciresM]], [[User:Vale|Vale]]/[[User:Thog|Thog]] (independently), [[User:Tatsuko|Tatsuko]] (independently), possibly others (independently).<br /> |-<br /> | Boot straps are not relatched on watchdog resets (strapwn)<br /> | On boot, the BOOTSELECT, RCM and RAM_CODE straps are latched from external GPIO to determine which boot medium to use and verify from in bootrom. However, APB_MISC_PP_STRAPPING_OPT_A can be overwritten with arbitrary values following bootrom. Write access to PP_STRAPPING_OPT_A would otherwise be mundane, however these straps are not relatched during a watchdog reset (despite being latched during other software resets), allowing for arbitrary straps to be selected and executed in bootrom.<br /> <br /> This allows setting NVPROD_UART on some hardware configurations where it would normally be unavailable (ie on Jetson Nano boards), but is otherwise mostly useless and/or useful for testing unintended boot options (such as USB Mass Storage boot) without having to move boot strap resistors.<br /> | Unknown<br /> | HAC-001 (Tegra210)<br /> | May 2020<br /> | April 30, 2021<br /> | [[User:Shinyquagsire23|Shiny Quagsire]]<br /> |}<br /> <br /> == Software ==<br /> === Bootloader ===<br /> Flaws in this category pertain to any bootloader component such as the [[Package1#Package1ldr|package1ldr]], the [[Package1#Section_1|NX bootloader]] or the [[Package1#Section_0|warmboot binary]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Summary<br /> ! Description<br /> ! Successful exploitation result<br /> ! Fixed in system version<br /> ! Last system version this flaw was checked for<br /> ! Timeframe this was discovered<br /> ! Public disclosure timeframe<br /> ! Discovered by<br /> |-<br /> | Null-dereference in panic()<br /> | The Switch's stage 1 bootloader, on panic(), clears the stack and then attempts to clear the Security Engine. However, it does so by dereferencing a pointer to the SE in .bss (initially NULL), and this pointer doesn't get initialized until partway into the bootloader's main() after several functions that might panic() are called. Thus, a panic() caused prior to SE initialization would result in the SE pointer still being NULL when dereferenced. <br /> The BPMP doesn't have an active MPU and the bus won't data abort on an invalid address, so no exception will be entered: it'll end up overwriting some exception vectors with NULL before halting.<br /> <br /> In 3.0.0, this was fixed by moving the security engine initialization earlier in main(), before the first function that could potentially panic().<br /> | Some exception vectors overwritten with NULL, before SBK/other keyslots are cleared. Probably useless for anything more interesting.<br /> | [[3.0.0]]<br /> | [[3.0.0]]<br /> | Early July, 2017<br /> | July 30, 2017<br /> | Everyone who diff'd 2.3.0 and 3.0.0 Package1<br /> |-<br /> | FUSE_DIS_PGM not written by package1 <br /> | The switch's hardware fuse driver contains a write-once bit in a register called &quot;FUSE_DIS_PGM&quot;, which disables burning fuses until the next reboot. While Nintendo's bootloader code for waking up from sleep writes this on all firmware, the actual package1 initial bootloader forgets to write to it on cold reboot. <br /> <br /> This isn't too big of a problem because another fuse is burnt on retail devices (production mode), which prevents burning *all* fuses other than ODM_RESERVED ones in hardware.<br /> <br /> This was fixed in 3.0.0 by writing to the register on cold boot (although the write happens in TZ instead of package1 where it should take place, possibly to obfuscate the fact that they made this mistake).<br /> | Burning arbitrary ODM reserved fuses with TZ code execution, which should never be possible for non-bootloader code.<br /> <br /> Warning: one could irreparably brick one's console by playing with this.<br /> | [[3.0.0]]<br /> | [[3.0.0]]<br /> | Late summer/early fall 2017<br /> | December 31, 2017<br /> | [[User:SciresM|SciresM]], [[User:motezazer|motezazer]]<br /> |-<br /> | maconstack (TSEC firmware leaves MAC on the stack)<br /> | Package1ldr loads a firmware blob into TSEC early on boot. This piece of code runs on the TSEC in Authenticated Mode and has the sole purpose of generating the per-console TSEC key (see [[Cryptosystem]]).<br /> <br /> As a way to mitigate attacks, the TSEC firmware blob is split into 3 stages: [[TSEC_Firmware#Boot|Boot]] which is unencrypted and unsigned, [[TSEC_Firmware#KeygenLdr|KeygenLdr]] which is unencrypted but signed and [[TSEC_Firmware#Keygen|Keygen]] which is encrypted and signed.<br /> Boot loads a static pre-generated signature into the Falcon's CPU crypto registers, loads KeygenLdr into the Falcon's CODE region and jumps to it. Execution will proceed into KeygenLdr in Heavy Secure Mode if, and only if, the loaded signature matches the one Falcon calculates internally for KeygenLdr.<br /> <br /> Among various things, KeygenLdr will attempt to do a &quot;backwards&quot; security check by calculating a CMAC over Boot and comparing it with a known hash stored in the TSEC firmware's key data (a small buffer stored after Boot's code). If the hashes don't match, execution aborts.<br /> <br /> KeygenLdr stores the calculated Boot's CMAC in the stack, but forgets to clear it. Since the stack is located in Falcon's DATA region, loading the TSEC firmware blob and dumping the DATA region afterwards (via MMIO) will reveal the calculated hash.<br /> This allows using KeygenLdr as an oracle to generate a valid CMAC for arbitrary Boot code. Replacing the CMAC in the TSEC firmware's key data region results in KeygenLdr accepting any Boot code, thus rendering this security measure useless.<br /> <br /> Additionally, since signed Falcon code can't be revoked without an hardware revision, an attacker can always reuse the flawed KeygenLdr code even if a fix is issued.<br /> | Running TSEC firmware's KeygenLdr in a user controlled environment.<br /> | None<br /> | [[5.0.2]]<br /> | January 2018<br /> | April 29, 2018<br /> | [[User:Hexkyz|hexkyz]], [[User:Rei|Reisyukaku]] (independently), probably others (independently).<br /> |-<br /> | Stack smash in TSEC firmware's KeygenLdr<br /> | Given that we can control the [[TSEC_Firmware#Key_data|key data]] (which is not authenticated) and the [[TSEC_Firmware#Boot|Boot]] blob (see &quot;maconstack&quot;), as well as the fact Non-secure and Heavy Secure code share the same stack, we can use this to attack KeygenLdr. KeygenLdr uses memcpy to copy over a payload to DMEM to verify it, which can be abused to smash the stack (in DMEM) and write over the return address of said function.<br /> | ROP under KeygenLdr in Heavy Secure mode.<br /> | None<br /> | [[8.0.1]]<br /> | Early 2018<br /> | May 21, 2019<br /> | Everyone (independently).<br /> |-<br /> | pk1ldrhax<br /> | Package1ldr decrypts and verifies the keyblob inside of the current BCT in order to get the package1 key, and then uses the package1 key to decrypt package1. It then validates package1 before jumping to it by checking the PK11 magic number, and that the section sizes sum to the expected size (and are individually less than the expected size). <br /> <br /> However, package1ldr does not actually validate the package1 key against a fixed vector (much like kernel9loader forgot to do so on the 3ds). This would normally not matter, as keyblobs are validated -- however, with bootrom code execution one can dump SBK and forge keyblobs, and thus control the package1 key. <br /> <br /> Thus ('''in theory, but not in practice due to the size of the brute force required''') one can replace the package1 key with garbage, causing package1 to decrypt into garbage, and hope that this garbage passes validation checks and that package1ldr jumping into the garbage will do something useful.<br /> <br /> This was fixed incidentally in [[6.2.0]], as pk1ldr does not use keyblob data to decrypt package1 any more.<br /> <br /> | With a large enough brute force: arbitrary package1 code execution from coldboot.<br /> <br /> However, a usable brute force is on the order of &gt;= ~2^80, so '''this is almost certainly not actually usable in any meaningful context'''.<br /> | [[6.2.0]]<br /> | [[6.2.0]]<br /> | Early 2017 (as soon as plaintext package1ldr was first dumped)<br /> | November 20, 2018<br /> | Everyone<br /> |}<br /> <br /> === TrustZone ===<br /> Flaws in this category pertain exclusively to the [[Package1#Section_2|Secure Monitor]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Summary<br /> ! Description<br /> ! Successful exploitation result<br /> ! Fixed in system version<br /> ! Last system version this flaw was checked for<br /> ! Timeframe this was discovered<br /> ! Public disclosure timeframe<br /> ! Discovered by<br /> |-<br /> | Non-atomic mutexes<br /> | When an [[SMC]] is called, TrustZone sets a global variable to mark that an SMC is in progress, so that two SMCs using shared resources (like the security engine) do not trample on one another. On 1.0.0, this global variable was written using non-atomic writes, and thus a race condition is possible.<br /> <br /> However, the SMC handler enforces that all SMCs must be called from core #3, unless the top-level handler ID is 1 (SMCs internal to the kernel). Thus, the only SMCs that can be run side-by-side are [any userland smc] and smcGetRandomBytesForKernel, and this turns out to not really be abusable.<br /> | Mostly useless. Maybe some oob-write into unused (and thus useless) memory if running smcGetRandomBytesForKernel and smcGetRandomBytesForUser at the same time.<br /> | [[2.0.0]]<br /> | [[2.0.0]]<br /> | December 2017 (Probably earlier by others)<br /> | January 18, 2018<br /> | [[User:SciresM|SciresM]], probably others (independently).<br /> |-<br /> | jamais vu (non-secure world access to PMC MMIO and pre-deep sleep firmware)<br /> | On [[1.0.0]], one could map in the PMC registers in userland. In addition, [[AM_services|am]] ran a little-kernel based firmware on the BPMP at runtime. With code execution under am, one could modify the BPMP's little-kernel firmware to hook deep sleep entry, and modify TrustZone/Security engine state. <br /> <br /> This was fixed in [[2.0.0]] by making the PMC secure-world only, blacklisting the BPMP's exception vectors from being mapped, and thoroughly checking for malicious behavior on deep sleep entry.<br /> | Arbitrary TrustZone code execution.<br /> | [[2.0.0]]<br /> | [[2.0.0]]<br /> | December, 2017<br /> | January 20, 2018<br /> | [[User:SciresM|SciresM]] and [[User:motezazer|motezazer]]<br /> |-<br /> | Missed BPMP Exception Vector Writes<br /> | Starting in [[2.0.0]], the BPMP is asleep at runtime, and is turned on by TrustZone during [[SMC|smcCpuSuspend]] in order to initiate the deep sleep process. When it does so, it is held in RESET, and TrustZone attempts to write to the BPMP exception vectors at 0x6000F200 to register EVP_RESET = lp0_entry_fw_crt0, and all other EVPs to a function that simply reboots. However, while they successfully write EVP_RESET, they miss all the other vectors, accidentally writing to the 0x6000F004-0x6000F020 region instead of the 0x6000F204-0x6000F220 region they want to write to. This results in all the exception vectors for the BPMP other than RESET being &quot;undefined&quot; (attacker controlled).<br /> <br /> With some way of causing an exception vector to be taken at the right time, this would give pre-sleep code execution (and thus arbitrary TrustZone code execution, via the security engine flaw). However, none of the abort vectors are really triggerable, and interrupts are disabled for the BPMP when it is taken out of reset. Thus, this is useless in practice.<br /> <br /> This was fixed in [[4.0.0]] by writing to the correct registers.<br /> | Theoretically: Arbitrary TrustZone code execution. In practice: Useless.<br /> | [[4.0.0]]<br /> | [[4.0.0]]<br /> | January, 2018<br /> | February 23, 2018<br /> | [[User:SciresM|SciresM]] and [[User:motezazer|motezazer]], [[User:Naehrwert|naehrwert]], [[User:Hexkyz|hexkyz]], probably others (independently).<br /> |-<br /> | TSEC has access to the secure kernel carveout <br /> | TrustZone is responsible for managing security carveouts to prevent DMA controllers from accessing the carveout which contains the kernel, sysmodules, and other critical operating system data.<br /> <br /> Until [[8.0.0]], the list of devices that could access the carveout included the TSEC. However, the TSEC can bypass the SMMU when in authenticated mode by writing to a certain register. Thus, pwning nvservices would allow one to take over the TSEC, and use it to write to normally protected mmio/memory.<br /> <br /> In [[8.0.0]], this was fixed by removing TSEC access, and adding TSECB access (TSECB cannot bypass the SMMU).<br /> | With access to the TSEC mmio (nvservices ROP) and code execution in TSEC Heavy Secure mode, kernel code execution, probably.<br /> | [[8.0.0]]<br /> | [[8.0.0]]<br /> | 2017 (when TrustZone code plaintext was first obtained).<br /> | April 15, 2019<br /> | Everyone<br /> |-<br /> | deja vu (insufficient system state validation on suspend leads to pre-sleep BPMP code execution)<br /> | Jamais Vu was fixed in [[2.0.0]] by making the PMC secure-world only, blacklisting the BPMP's exception vectors from being mapped, and thoroughly checking for malicious behavior on deep sleep entry, since gaining pre-sleep code execution on the BPMP compromises the system.<br /> <br /> However, the state validation performed by Nintendo's Secure Monitor was insufficient to prevent pre-sleep execution from being obtained.<br /> <br /> Prior to [[6.0.0]], one could use a DMA controller that had access to IRAM and was not held in reset (there were multiple) to race TrustZone's writes to the BPMP firmware in IRAM, and thus overwrite Nintendo's firmware with an attacker's to gain pre-sleep code execution.<br /> <br /> [[6.0.0]] addressed this by performing TrustZone state MAC writes and locking PMC scratch *before* turning on the BPMP, fixing the original Jamais Vu exploit entirely. In addition, the BPMP firmware in TrustZone's .rodata is now memcmp'd to the actual data after it is written to IRAM. This mitigates race attacks that modify the firmware.<br /> <br /> However, Nintendo both forgot to validate the BPMP exception vectors after writing them, and forgot to hold in reset a DMA controller that can write to the BPMP's exception vectors.<br /> <br /> AHB-DMA is not blacklisted by kernel mapping whitelist (Nintendo probably forgot it, because the TX1 TRM does not really document that it's present, although the MMIO works as documented in older (Tegra 3 and before) TRMs).<br /> <br /> Thus, with kernel code execution (or some other way of accessing AHB-DMA, e.g. nspwn on &lt;= 4.1.0, TSEC hax, or other arbitrary mmio access flaws), one can DMA to the BPMP's exception vectors as they are written, causing TrustZone to start the BPMP executing an attacker's firmware at a different location than TrustZone intends/validates.<br /> <br /> This was fixed in [[8.0.0]] by blocking AHB-DMA arbitration and verifying it is held in reset during suspend, and thus there are no more devices that can write to the relevant MMIO at the right time.<br /> <br /> | Arbitrary TrustZone/BootROM code execution, by using either the original Jamais Vu flaw (prior to [[6.0.0]] or a warmboot bootrom exploit (any firmware where pre-sleep execution can be gained).<br /> | [[8.0.0]]<br /> | [[8.0.0]]<br /> | December 2017<br /> | April 15, 2019<br /> | [[User:SciresM|SciresM]], [[User:motezazer|motezazer]] and ktemkin, [[User:Naehrwert|naehrwert]] (independently), almost certainly others (independently)<br /> |-<br /> | TrustZone allows using imported RSA exponents with arbitrary modulus<br /> | TrustZone supports &quot;importing&quot; RSA private exponents for use by userland -- these are stored encrypted with TrustZone only keydata in NAND, and decrypted only to TZRAM. This prevents a console that has compromised userland from learning the private exponents of these keys and doing calculations with them offline. In practice, this is used for FS (gamecard communications), ES (drm), and SSL (console client cert communications).<br /> <br /> However, the actual SMC API only imports the RSA exponent, and not the modulus, which is passed separately by userland in each call. There is no validation done on the modulus passed in -- this means that userland can pass in any message and modulus it chooses, and obtain the result of (message ^ private exponent) % modulus back from the secure monitor.<br /> <br /> By choosing a prime number modulus P such that P has &quot;smooth&quot; order (totient(P) == P-1 is divisible only by &quot;small&quot; primes), one can efficiently use the [[wikipedia:Pohlig-Hellman algorithm|Pohlig-Hellman algorithm]] to calculate the discrete logarithm of such a result directly, and thus obtain the private exponent.<br /> <br /> This is mostly useless in practice, given the general availability of other exploits to obtain these decrypted exponents.<br /> <br /> This was fixed in 10.0.0 by importing the modulus in addition to the exponent for the ES device key and ES client cert key. For backwards compatibility reasons the SSL key and Lotus key still only import the exponent.<br /> <br /> StorageExpMod also now validates that the exponentiation of &quot;DDDDD...&quot; about the provided modulus by the imported exponent and then the fixed public exponent returns &quot;DDDDD...&quot;, and returns invalid argument if validation fails.<br /> | With userland privileges sufficient to use an imported RSA key: obtaining that RSA key's private exponent.<br /> | [[10.0.0]]<br /> | [[10.0.0]]<br /> | August 14, 2019<br /> | August 14, 2019<br /> | [[User:SciresM|SciresM]]<br /> |}<br /> <br /> === Kernel ===<br /> Flaws in this category pertain exclusively to the [[Package2#Section_0|HorizonOS Kernel]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Summary<br /> ! Description<br /> ! Successful exploitation result<br /> ! Fixed in system version<br /> ! Last system version this flaw was checked for<br /> ! Timeframe this was discovered<br /> ! Public disclosure timeframe<br /> ! Discovered by<br /> |-<br /> | Syscall Infoleaks<br /> | Many syscalls leaked kernel pointers on sad paths (for example svcSetHeapSize and svcQueryMemory), until they landed a bunch of fixes in 2.0.0.<br /> | Nothing really.<br /> | [[2.0.0]]<br /> | [[2.0.0]]<br /> | <br /> | <br /> | ?<br /> |-<br /> | svcWaitSynchronization/svcReplyAndReceive bad cleanup on error<br /> | If there is a page fault when fetching handles from the userspace array, it cleans up by dereferencing all objects despite having only loaded first N. Allows the attacker to make arbitrary decrefs on any kernel synchronization object, and thus can be used to get UAF. Haven't actually been tried on real HW though, but should work (tm).<br /> | Kernel code execution<br /> | [[2.0.0]]<br /> | [[2.0.0]]<br /> | <br /> | 24 April<br /> | [[User:qlutoo|qlutoo]]<br /> |-<br /> | Bad irq_id check in CreateInterruptEvent<br /> | CreateInterruptEvent syscall is designed to work only for irq_id &gt;= 32. All irq_ids &lt; 32 are &quot;per-core&quot; and reserved for kernel use (watchdog/scheduling/core communications).<br /> On 1.0.0 you could supply irq_id &lt; 32 and it would write outside the SharedIrqs table.<br /> | You can register irq's in the Core3Irqs table, and thus register per-core irqs for core3, that are normally reserved for kernel. Useless.<br /> | [[2.0.0]]<br /> | [[2.0.0]]<br /> | ~October<br /> | 17 October<br /> | [[User:qlutoo|qlutoo]]<br /> |-<br /> | Kernel .text mapped executable in usermode<br /> | Prior to [[3.0.2]] the kernel .text was [[Memory_layout|mapped]] in usermode as executable. This can be used for usermode ROP for bypassing ASLR, but SVCs/IPC are not usable by running kernel .text in usermode.<br /> | Executing kernel .text in usermode<br /> | [[3.0.2]]<br /> | [[3.0.2]]<br /> | <br /> | 34c3 (December 28, 2017)<br /> | [[User:qlutoo|qlutoo]]<br /> |-<br /> | Memory Controller not properly secured<br /> | The Switch OS originally had the memory controller not set to be accessible only by the secure-world, which was problematic because insecure access can compromise the kernel.<br /> <br /> This was fixed partially in [[2.0.0]] by blacklisting the memory controller from being mapped by user-processes, and was fixed entirely in [[4.0.0]] by making the memory controller TZ-only and making all kernel accesses go through [[SMC|smcReadWriteRegister]].<br /> | With some way to access the memory controller MMIO, arbitrary kernel code execution.<br /> | [[4.0.0]]<br /> | [[4.0.0]]<br /> | January 2018<br /> | January 2018<br /> | [[User:SciresM|SciresM]], [[User:Yellows8|yellows8]]<br /> |-<br /> | Potential [[SVC|svcWaitForAddress]] thread use-after-free<br /> | Between [[4.0.0]], where svcWaitForAddress was introduced, and [[7.0.0]], there was a second intrusive rbtree node in KThread for the WaitForAddress tree (the key being (address, priority), sorted lexicographically). Unlike the WaitProcessWideKeyAtomic tree, the kernel forgot to reinsert the WaitForAddress node when the thread's priority changed (priority inheritance and/or SetPriority), breaking the rbtree invariants; and since the kernel walks through the entire tree to remove intrusive nodes, you could cause threads to stay in the tree even after their deletion.<br /> <br /> [[7.0.0]] fixed the issue by using the same intrusive node for both trees. The thread/node knows which tree it is in, and the latter is correctly updated when thread priority changes.<br /> | It unluckily didn't look exploitable<br /> | [[7.0.0]]<br /> | [[7.0.0]]<br /> | July 2018<br /> | February 2019<br /> | [[User:TuxSH|TuxSH]]<br /> |-<br /> |}<br /> <br /> === FIRM-package System Modules ===<br /> Flaws in this category pertain to any of the [[Package2#Section_1|built-in system modules]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Summary<br /> ! Description<br /> ! Successful exploitation result<br /> ! Fixed in system version<br /> ! Last system version this flaw was checked for<br /> ! Timeframe this was discovered<br /> ! Public disclosure timeframe<br /> ! Discovered by<br /> |-<br /> | Service access control bypass (sm:h, smhax, probably other names)<br /> | Prior to [[3.0.1]], the ''service manager'' (sm) built-in system module treats a user as though it has full permissions if the user creates a new &quot;sm:&quot; port session but bypasses [[Services_API#Initialize|initialization]]. This is due to the other sm commands skipping the service ACL check for Pids &lt;= 7 (i.e. all kernel bundled modules) and that skipping the initialization command leaves the Pid field uninitialized.<br /> In [[3.0.1]], sm returns error code 0x415 if [[Services_API#Initialize|Initialize]] has not been called yet.<br /> | Acquiring, registering, and unregistering arbitrary services<br /> | [[3.0.1]]<br /> | [[3.0.1]]<br /> | May 2017<br /> | August 17, 2017<br /> | Everyone<br /> |-<br /> | Overly permissive SPL service<br /> | The concept behind the switch's [[SMC|Secure Monitor]] is that all cryptographic keydata is located in userspace, but stored as &quot;access keys&quot; encrypted with &quot;keks&quot; that never leave TrustZone. The [[SPL services|spl]] (&quot;security processor liaison&quot;?) service serves as an interface between the rest of the system and the secure monitor. Prior to [[4.0.0]], spl exposed only a single service &quot;spl:&quot;, which provided all TrustZone wrapper functions to all sysmodules with access to it. Thus anyone with access to the spl: service (via smhax or by pwning a sysmodule with access) could do crypto with any access keys they knew. <br /> <br /> This was fixed in [[4.0.0]] by splitting spl: into spl:, spl:mig, spl:ssl, spl:es, and spl:fs.<br /> | Arbitrary spl: crypto with any access keys one knows. For example, one could use the SSL module's access keys to decrypt their console's SSL certificate private key without having to pwn the SSL sysmodule.<br /> | [[4.0.0]]<br /> | [[4.0.0]]<br /> | Summer 2017 (after smhax was discovered).<br /> | December 23, 2017<br /> | Everyone<br /> |-<br /> | Single session services not really single session<br /> | Several &quot;critical&quot; services (like fsp-ldr, fsp-pr, sm:m, etc) are meant to only ever hold a single session with a specific sysmodule. However, when a sysmodule dies, all its service session handles are released -- and thus killing the holder of a single session handle would allow one (via sm:hax etc) to get access to that service. <br /> <br /> This was fixed in [[4.0.0]] by adding a semaphore to these critical single-session services, so that even if one gets access to them an error code will be returned when attempting to use any of their commands.<br /> | With some way to access these services and kill their session holders (like expLDR): dumping sysmodule code, arbitrary service access, elevated filesystem permissions, etc.<br /> | [[4.0.0]]<br /> | [[4.0.0]]<br /> | May/June 2017 (basically immediately after smhax was discovered)<br /> | December 30, 2017<br /> | Everyone<br /> |-<br /> | nspwn<br /> | fsp-ldr command 0 &quot;MountCode&quot; takes in a Content Path (retrieved from NCM by Loader), and returns an IFileSystem for the resulting ExeFS. These content paths, are normally NCAs, but MountCode also supports a number of other formats, including &quot;.nsp&quot; -- which is just a PFS0.<br /> <br /> When a path ending in &quot;.nsp&quot; is parsed by MountCode, the PFS0 is treated as a raw ExeFS. Because there is no NCA header, the ACID signatures are not validated -- and because there are no other signatures in a PFS0, this results in no signature checking happening at all.<br /> <br /> The actual .nsp handling is eventually done by {content mounting function} called by MountCode and other FS commands.<br /> <br /> Thus, by placing an ExeFS (NSOs + &quot;main.npdm&quot;) and setting one's desired title ID to &quot;@Sdcard:/some_title.nsp&quot; or &quot;@User:/some_title.nsp&quot; etc one can launch arbitrary unsigned code, with arbitrary unsigned NPDMs.<br /> <br /> This appears to have been fixed by only allowing .nsp when the input fstype==7 for the internal content-mounting function, returning 0x2EE202 otherwise.<br /> | With access to &quot;lr&quot;: Arbitrary code execution with full system privileges.<br /> | [[5.0.0]]<br /> | [[5.0.0]]<br /> | Late 2017<br /> | April 23, 2018<br /> | Everyone<br /> |-<br /> | Single null-byte stack overflow in Loader ContentPath parsing<br /> | Previously, loader content path parsing looked like this, where path_from_lr was up to 0x300 bytes and not necessarily null-terminated:<br /> <br /> char nca_path[0x300] = {0};<br /> strcat(nca_path, path_from_lr);<br /> for (int i = 0; nca_path[i]; i++) {<br /> if (nca_path[i] == '\\') { nca_path[i] = '/'); }<br /> }<br /> <br /> Thus, a content path of the maximum length (0x300 bytes) would result in strcat writing a NULL terminator past the end of the nca_path buffer.<br /> <br /> This was fixed in [[6.0.0]], the new code looks like this:<br /> <br /> char nca_path[0x300];<br /> strncpy(nca_path, path_from_lr, sizeof(nca_path));<br /> for (int i = 0; i &lt; sizeof(nca_path) &amp;&amp; nca_path[i]; i++) {<br /> if (nca_path[i] == '\\') { nca_path[i] = '/'); }<br /> }<br /> <br /> <br /> | With access to &quot;lr&quot;: single null-byte stack overflow in Loader. Maybe (but probably not) loader code execution.<br /> | [[6.0.0]]<br /> | [[6.0.0]]<br /> | September 2, 2018<br /> | September 19, 2018<br /> | SciresM<br /> |-<br /> | System modules vulnerable to selective downgrade attacks<br /> | Horizon has no mechanism for specifying the specific title version to Loader on process creation.<br /> <br /> Observing this, one can note that after a system update one could install a downgraded version of a specific system module (e.g. nvservices) while leaving the rest of the OS at the same version.<br /> <br /> Unless there was some breaking API change, this allows one to make a console vulnerable once more to an exploit in a sysmodule by downgrading it and nothing else.<br /> <br /> This was fixed in [[8.1.0]] by incrementing a version field in NPDM, and checking it against a hardcoded list for certain titles in Loader's process creation func.<br /> | With access to content installation commands (or a vulnerable lower version to selectively install newer titles), reintroducing bugs in vulnerable system modules on newer firmware versions.<br /> | [[8.1.0]]<br /> | [[8.1.0]]<br /> | When FIRM was first dumped in 2017.<br /> | June 17, 2019<br /> | Everyone<br /> |-<br /> |}<br /> <br /> === System Modules ===<br /> Flaws in this category pertain to any non-built-in system module.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Summary<br /> ! Description<br /> ! Successful exploitation result<br /> ! Fixed in system version<br /> ! Last system version this flaw was checked for<br /> ! Timeframe this was discovered<br /> ! Public disclosure timeframe<br /> ! Discovered by<br /> |-<br /> | [[Bluetooth_Driver_services|bluetooth]] GetAdapterProperty/SetAdapterProperty unchecked memcpy size<br /> | GetAdapterProperty copies data from stack to the output buffer using the buffer size, without checking the size (when not handling the Name type). SetAdapterProperty copies data to stack from the input buffer using the buffer size, without checking the size.<br /> This requires access to the btdrv service, only hid and btm have access.<br /> <br /> This was fixed with [[12.0.0]] by replacing the buffer data with a fixed-size-struct.<br /> | Stack infoleak with GetAdapterProperty, stack buffer overflow (and hence ROP) with SetAdapterProperty.<br /> | [[12.0.0]]<br /> | [[12.0.0]]<br /> | July 16, 2020<br /> | April 7, 2021<br /> | [[User:Yellows8|yellows8]]<br /> |-<br /> | [[Bluetooth_Driver_services|Bluetooth]] A-63146698<br /> | [https://android.googlesource.com/platform/system/bt/+/226ea26684d4cd609a5b456d3d2cc762453c2d75 A-63146698] / CVE-2017-0785. See also [https://info.armis.com/rs/645-PDC-047/images/BlueBorne%20Technical%20White%20Paper_20171130.pdf here].<br /> | Bluetooth-sysmodule stack infoleak, which allows defeating ASLR (note: not tested on hw).<br /> | [[5.0.0]]<br /> | [[11.0.0]]<br /> | Switch: December 2020<br /> | Switch: December 25, 2020<br /> | Switch: [[User:Yellows8|yellows8]]<br /> |-<br /> | [[Bluetooth_Driver_services|Bluetooth]] sdp_server.cc process_service_search() continuation request p_req validation<br /> | With [5.0.0+], the following was added to the if-block prior to loading cont_offset from p_req: &lt;code&gt;(p_req + sizeof(cont_offset) &gt; p_req_end)&lt;/code&gt; (which verifies that cont_offset is within message bounds).<br /> | Bluetooth-sysmodule out-of-bounds read from heap, probably not useful since the read value must match a state field, etc.<br /> | [[5.0.0]]<br /> | [[11.0.0]]<br /> | Switch: December 2020<br /> | Switch: December 25, 2020<br /> | Switch: [[User:Yellows8|yellows8]]<br /> |-<br /> | [[HID_services#hid:sys|hid:sys]] ButtonConfig s32 array-index not validated<br /> | The input s32 array-index for [[HID_services#hid:sys|hid:sys]] ButtonConfig cmds 1255-1270 was originally not validated. Using a negative or &gt;=5 index results in accessing out-of-bounds data, with an array stored on stack.<br /> [10.1.0-10.2.0] Each of these cmds will now Abort if the s32 is negative or &gt;=5. [11.0.0+] Now an unsigned compare is used, with 0 or an error being immediately returned when the value is invalid.<br /> | hid infoleak, out-of-bounds mem-write anywhere in hid address-space relative to the stack array (with constraints on the data).<br /> | [[10.1.0]]<br /> | [[11.0.1]]<br /> | April 18, 2020<br /> | July 14, 2020<br /> | [[User:Yellows8|yellows8]]<br /> |-<br /> | [[Applet_Manager_services#IStorage|AM IStorage]] infoleak<br /> | Originally the buffer allocated by [[Applet_Manager_services#CreateStorage|CreateStorage]] using the specified input size was not cleared. With [8.0.0+] this was fixed by adding a memset() for the buffer after successful allocation.<br /> <br /> Hence, IStorage-&gt;IStorageAccessor-&gt;Read will return uninitialized memory when the Write cmd was not previously used with the specified region.<br /> | Infoleak from the main [[Applet_Manager_services#IStorage|AM]] heap, allowing defeating ASLR by reading addresses from previously allocated objects.<br /> | [[8.0.0]]<br /> | [[8.1.0]]<br /> | December 2018<br /> | August 9, 2019<br /> | [[User:Yellows8|yellows8]]<br /> |-<br /> | Out-of-bounds array read for [[BCAT_Content_Container]] secret-data index<br /> | The [[BCAT_Content_Container]] secret-data index is not validated at all. This is handled before the RSA-signature(?) is ever used. Since the field is an u8, a total of 0x800-bytes relative to the array start can be accessed.<br /> This is not useful since the string loaded from this array is only involved with key-generation.<br /> | <br /> | Unknown<br /> | [[2.0.0]]<br /> | August 4, 2017<br /> | August 6, 2017<br /> | [[User: shinyquagsire23|Shiny Quagsire]], [[User:Yellows8|yellows8]] (independently)<br /> |-<br /> | OOB Read in NS system module (pl:utoohax, pl:utonium, maybe other names)<br /> | Prior to [[3.0.0]], pl:u (Shared Font services implemented in the NS sysmodule) service commands 1,2,3 took in a signed 32-bit index and returned that index of an array but did not check that index at all. This allowed for an arbitrary read within a 34-bit range (33-bit signed) from NS .bss. In [[3.0.0]], sending out of range indexes causes error code 0x60A to be returned.<br /> | Dumping full NS .text, .rodata and .data, infoleak, etc<br /> | [[3.0.0]]<br /> | [[3.0.0]]<br /> | April 2017<br /> | On exploit's fix in [[3.0.0]]<br /> | [[User:qlutoo|qlutoo]], ReSwitched Team (independently)<br /> |-<br /> | Unchecked domain ID in common IPC code<br /> | Prior to [[2.0.0]], object IDs in [[IPC_Marshalling#Domain_message|domain messages]] are not bounds checked. This out-of-bounds read could be exploited to brute-force ASLR and get PC control in some services that support domain messages.<br /> |<br /> | [[2.0.0]]<br /> | [[2.0.0]]<br /> | ~July 2017<br /> | 20 July 2017‎<br /> | [[User:hthh|hthh]]<br /> |-<br /> | expLDR (sysmodule handle table exhaustion)<br /> | Most sysmodules share common template code to handle IPC control messages. The command DuplicateSession (type 5 command 2)'s template code will abort() if it fails to duplicate a session's handle for the requester. Because many sysmodules have limited handle table size (smaller than the browser/other entrypoints), repeatedly requesting to duplicate one's session will cause the sysmodule to run out of handle table space and abort, causing the service to release all its handles cleanly.<br /> | Sysmodule crashes. Most usefully, crashing ldr allows access to fsp-ldr and crashing pm allows access to fsp-pr. Useless after [[4.0.0]], which mitigated a number of single-session service access issues.<br /> | Unfixed<br /> | [[4.1.0]]<br /> | 24 June 2017<br /> | 8 March 2018<br /> | [[User:daeken|daeken]]<br /> |-<br /> | Transfer Memory leak in nvservices system module<br /> | The nvservices sysmodule does not clear most of its transfer memory prior to release.<br /> | The calling process can read key bits of memory, including breaking ASLR (by revealing the image base) and exposing the address of other transfer memory to set up attacks. More details here: [https://daeken.svbtle.com/nintendo-switch-nvservices-info-leak transfermeme (nvservices info leak)] by [[User:daeken|daeken]]<br /> | [[6.0.0]]<br /> | [[6.0.0]]<br /> | June 2017<br /> | 16 October 2018<br /> | [[User:qlutoo|qlutoo]] and [[User:hexkyz|hexkyz]],<br /> [[User:daeken|daeken]] (independently)<br /> |-<br /> | OOB write in audio system module<br /> | Prior to [[2.0.0]], the [[Audio_services#audout:u|AppendAudioOutBuffer]] and [[Audio_services#audin:u|AppendAudioInBuffer]] IPC commands would blindly increment the appended buffers' count while using said count value as an index to where the user data should be copied into. This resulted in an 0x28 bytes, user controlled, out-of-bounds memory write into the [[Audio_services|audio]] sysmodule's memory space.<br /> Combined with the [[Audio_services#audout:u|GetReleasedAudioOutBuffer]] or [[Audio_services#audin:u|GetReleasedAudioInBuffer]] commands, this could also be used as an 8 byte infoleak.<br /> <br /> In [[2.0.0]], the commands now return error code 0x1099 if the number of unreleased buffers exceeds 0x1F.<br /> | Code execution under audio sysmodule<br /> | [[2.0.0]]<br /> | [[2.0.0]]<br /> | <br /> | November 2, 2018<br /> | [[User:hexkyz|hexkyz]], probably others (independently).<br /> |-<br /> | nvhax (memory corruption in nvservices system module)<br /> | Prior to [[6.2.0]], the [[NV_services|nvservices]] ioctl [[NV_services#.2Fdev.2Fnvhost-ctrl-gpu|NVGPU_GPU_IOCTL_WAIT_FOR_PAUSE]] would take a single &quot;pwarpstate&quot; argument which would be interpreted by nvservices as a memory pointer for writing 2 &quot;warpstate&quot; structs (one for each Streaming Multiprocessor).<br /> This resulted in nvservices attempting to blindly memcpy into this user supplied address and trigger a crash. However, if paired with an infoleak, this could be used to arbitrarily write 0x30 bytes anywhere in nvservices' memory space.<br /> Additionally, the &quot;warpstate&quot; struct itself was never initialized, which means nvservices would leak the 0x30 bytes from the stack. By invoking other ioctls it was also possible to partially control the stack contents and achieve a usable arbitrary memory write primitive.<br /> <br /> In [[6.2.0]], [[NV_services#.2Fdev.2Fnvhost-ctrl-gpu|NVGPU_GPU_IOCTL_WAIT_FOR_PAUSE]] now takes 2 inline &quot;warpstate&quot; structs instead of a &quot;pwarpstate&quot; pointer, thus effectively avoiding the bad memcpy.<br /> | Code execution under nvservices sysmodule<br /> | [[6.2.0]]<br /> | [[6.2.0]]<br /> | April 5, 2017<br /> | November 24, 2018<br /> | [[User:hexkyz|hexkyz]]<br /> |-<br /> | Infoleak in nvservices system module<br /> | The [[NV_services|nvservices]] ioctl [[NV_services#NVMAP_IOC_ALLOC|NVMAP_IOC_ALLOC]] takes an optional argument &quot;addr&quot; which allows the calling process to pass a pointer to user allocated memory for backing a nvmap object. If &quot;addr&quot; is left as 0, nvservices uses the transfer memory region (donated by the user during initialization) instead, when allocating memory for the nvmap object.<br /> By design, freeing the nvmap object by calling the ioctl [[NV_services#NVMAP_IOC_FREE|NVMAP_IOC_FREE]] returns, in its &quot;refcount&quot; argument, the user address previously supplied if the reference count reaches 0.<br /> However, prior to [[6.2.0]], the case where the transfer memory region is used to allocate the nvmap object was not taken into account, thus resulting in [[NV_services#NVMAP_IOC_FREE|NVMAP_IOC_FREE]] leaking back an address from within the transfer memory region mapped in nvservices' memory space.<br /> <br /> In [[6.2.0]], [[NV_services#NVMAP_IOC_FREE|NVMAP_IOC_FREE]] no longer returns the address when the transfer memory region is used instead of user supplied memory.<br /> | Combined with other vulnerabilities: Defeating ASLR in nvservices sysmodule.<br /> | [[6.2.0]]<br /> | [[6.2.0]]<br /> | April 2017<br /> | November 24, 2018<br /> | Everyone<br /> |-<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Secure_Monitor&diff=7036 2019-06-19T15:48:41Z

<p>Shinyquagsire23: /* KernelConfiguration */</p> <hr /> <div>= Secure Monitor Calls =<br /> <br /> The secure monitor provides two top level handlers of which each provides a range of sub handlers.<br /> <br /> Secure Monitor Calls follow the ARM SMC calling convention up to a small change:<br /> {| class=wikitable<br /> ! Bit number || Bit mask || Description<br /> |-<br /> | 31 || 0x80000000 || Set to 0 means Yielding Call; Set to 1 means Fast Call.<br /> |-<br /> | 30 || 0x40000000 || Set to 0 means SMC32 convention; Set to 1 means SMC64.<br /> |-<br /> | 29-24 || 0x3F000000 || Service Call ranges.<br /> |-<br /> | 23-16 || 0x00FF0000 || Must be zero.<br /> |-<br /> | 15-8 || 0x0000FF00 || Argument type. This is different from the ARM SMC calling convention.<br /> |-<br /> | 7-0 || 0x000000FF || Function number within the range call type.<br /> |}<br /> <br /> If bit ''n'' is set in the argument type then parameter X''n'' is treated as a pointer and the kernel will setup address translation for it in [[SVC#svcCallSecureMonitor|svcCallSecureMonitor]].<br /> <br /> SMC arguments are passed using registers X0-X7 with X0 always sending the call sub-id and returning the result of the call.<br /> <br /> == ID 0 ==<br /> Functions exposed to user-mode processes using [[SVC|svcCallSecureMonitor]]. SMCs should be called from CPUID 3 (where SPL runs).<br /> <br /> {| class=wikitable<br /> ! Sub-ID || Name || In || Out<br /> |-<br /> | 0xC3000401 || SetConfig || ||<br /> |-<br /> | 0xC3000002 || GetConfig (Same as ID 1, Sub-ID 4) || ||<br /> |-<br /> | 0xC3000003 || GetResult || ||<br /> |-<br /> | 0xC3000404 || GetResultData || ||<br /> |-<br /> | 0xC3000E05 || ExpMod || ||<br /> |-<br /> | 0xC3000006 || GenerateRandomBytes (Same as ID 1, Sub-ID 5) || ||<br /> |-<br /> | 0xC3000007 || [[#GenerateAesKek]] || ||<br /> |-<br /> | 0xC3000008 || [[#LoadAesKey]] || ||<br /> |-<br /> | 0xC3000009 || [[#ComputeAes]] || ||<br /> |-<br /> | 0xC300000A || [[#GenerateSpecificAesKey]] || ||<br /> |-<br /> | 0xC300040B || [[#ComputeCmac]] || ||<br /> |-<br /> | [1.0.0-4.1.0] 0xC300100C || [[#ImportEsKey]] || ||<br /> |-<br /> | [5.0.0+] 0xC300D60C || [[#ReEncryptRsaPrivateKey]] || ||<br /> |-<br /> | [1.0.0-4.1.0] 0xC300100D || [[#DecryptRsaPrivateKey]] || ||<br /> |-<br /> | [5.0.0+] 0xC300100D || [[#DecryptOrImportRsaPrivateKey]] || ||<br /> |-<br /> | [1.0.0-4.1.0] 0xC300100E || [[#ImportLotusKey]] || ||<br /> |-<br /> | 0xC300060F || [[#StorageExpMod]] || ||<br /> |-<br /> | 0xC3000610 || [[#UnwrapTitleKey]] || ||<br /> |-<br /> | 0xC3000011 || [[#LoadTitleKey]] || ||<br /> |-<br /> | 0xC3000012 || [2.0.0+] [[#UnwrapCommonTitleKey]] || ||<br /> |}<br /> <br /> The overall concept here is the following:<br /> * All key material (AES and RSA) is stored in userspace, but it's encrypted with random AES kek's (&quot;key encryption keys&quot;).<br /> * Each kek is generated as a function of an access key (picked at random).<br /> * The kek is generated differently depending on the [[#CryptoUsecase]] the key is used for.<br /> ** This means: Each key is &quot;locked&quot; to the [[#CryptoUsecase]] it was designated for.<br /> ** You can use a key for a different usecase, but you will only get garbage output.<br /> * After the kek has been generated, it is wrapped with a session-specific key and given back to userspace.<br /> ** This means: Plaintext kek keys never leave TrustZone.<br /> ** Further, this means: Actual AES/RSA keys never leave TrustZone.<br /> <br /> === GenerateAesKek ===<br /> Takes an &quot;access key&quot; as input, an [[#enum_CryptoUsecase]].<br /> <br /> Returns a session-unique kek for said usecase.<br /> <br /> === LoadAesKey ===<br /> Takes a session kek created with [[#GenerateAesKek]], and a wrapped AES key.<br /> <br /> The session kek must have been created with [[#enum_CryptoUsecase|CryptoUsecase_Aes]].<br /> <br /> === ComputeAes ===<br /> Encrypts/decrypts using AES (CTR and CBC). Takes an [[#enum_CipherMode]].<br /> <br /> Key must be set prior using one of the [[#LoadAesKey]] or [[#GenerateSpecificAesKey]] commands.<br /> <br /> === GenerateSpecificAesKey ===<br /> Takes a wrapped AES key and decrypts it using static data.<br /> <br /> === ComputeCmac ===<br /> Calculates CMAC over input data.<br /> <br /> === ImportEsKey ===<br /> Takes a session kek created with [[#GenerateAesKek]], a wrapped AES key, and a wrapped RSA private key.<br /> <br /> The session kek must have been created with [[#enum_CryptoUsecase|CryptoUsecase_TitleKey]].<br /> <br /> [5.0.0] This function was removed and replaced with [[#ReEncryptRsaPrivateKey]].<br /> <br /> === ReEncryptRsaPrivateKey ===<br /> Takes in two session keks created with [[#GenerateAesKek]], two wrapped AES keys, an enum member, and a wrapped RSA private key.<br /> <br /> Decrypts and validates the wrapped RSA private key with the first kek/wrapped key, and re-encrypts it with the second if valid.<br /> <br /> The re-encrypted key is then passed to the user, for use with [[#DecryptOrImportRsaPrivateKey]].<br /> <br /> === DecryptRsaPrivateKey ===<br /> Takes a session kek created with [[#GenerateAesKek]], a wrapped AES key, an enum member, and a wrapped RSA private key.<br /> <br /> The session kek must have been created with [[#enum_CryptoUsecase|CryptoUsecase_RsaPrivate]].<br /> <br /> [4.0.0+] The SMC handler when certain conditions pass and SMC_ID==0xC300100D now returns error 0x6 instead of calling the handler funcptr.<br /> <br /> [5.0.0+] This function was replaced by [[#DecryptOrImportRsaPrivateKey]].<br /> <br /> === DecryptOrImportRsaPrivateKey ===<br /> This function replaced [[#DecryptRsaPrivateKey]] in [[5.0.0]], adding an additional [[#enum_DecryptOrImportMode]].<br /> <br /> This SMC extends DecryptRsaPrivateKey's original functionality to enable importing private keys into the security engine instead of decrypting them, when certain enum members are passed.<br /> <br /> === ImportLotusKey ===<br /> Takes a session kek created with [[#GenerateAesKek]], and a wrapped RSA key.<br /> <br /> The session kek must have been created with [[#enum_CryptoUsecase|CryptoUsecase_RsaSecureExpMod]].<br /> <br /> [5.0.0] This function was removed.<br /> <br /> === SecureExpMod ===<br /> Performs an ExpMod operation using an exponent previously loaded with the [[#ImportLotusKey]] command.<br /> <br /> [5.0.0+] This now uses any exponent previously loaded with [[#DecryptOrImportRsaPrivateKey]] and takes an [[#enum_SecureExpModMode]].<br /> <br /> === UnwrapTitleKey ===<br /> Takes an Rsa-Oaep-wrapped TitleKey, an RSA Public Key, and a label hash.<br /> <br /> Performs an ExpMod operation using an exponent previously loaded with the [[#ImportEsKey]] command, and then validates/extracts a Titlekey from the resulting message.<br /> <br /> Returns a session-unique AES key especially for use in [[#LoadTitleKey]].<br /> <br /> [5.0.0+] This now uses any exponent previously loaded with [[#DecryptOrImportRsaPrivateKey]].<br /> <br /> === LoadTitleKey ===<br /> Takes a session-unique AES key from [[#UnwrapCommonTitleKey]] or [[#UnwrapTitleKey]].<br /> <br /> === UnwrapCommonTitleKey ===<br /> Takes an AES-wrapped TitleKey and returns a sealed AES key.<br /> <br /> === enum CryptoUsecase ===<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || CryptoUsecase_Aes<br /> |-<br /> | 1 || CryptoUsecase_RsaPrivate<br /> |-<br /> | 2 || CryptoUsecase_RsaSecureExpMod<br /> |-<br /> | 3 || CryptoUsecase_TitleKey<br /> |}<br /> <br /> Note:<br /> The [[#enum_CryptoUsecase|CryptoUsecase_TitleKey]] represents a RSA wrapped AES key.<br /> <br /> === enum CipherMode ===<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || CipherMode_CbcEncrypt<br /> |-<br /> | 1 || CipherMode_CbcDecrypt<br /> |-<br /> | 2 || CipherMode_Ctr<br /> |}<br /> <br /> === enum DecryptOrImportMode ===<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || DecryptOrImportMode_DecryptRsaPrivateKey<br /> |-<br /> | 1 || DecryptOrImportMode_ImportLotusKey<br /> |-<br /> | 2 || DecryptOrImportMode_ImportEsKey<br /> |-<br /> | 3 || DecryptOrImportMode_ImportSslKey<br /> |-<br /> | 4 || DecryptOrImportMode_ImportDrmKey<br /> |}<br /> <br /> === enum SecureExpModMode ===<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || SecureExpModMode_Lotus<br /> |-<br /> | 1 || SecureExpModMode_Ssl<br /> |-<br /> | 2 || SecureExpModMode_Drm<br /> |}<br /> <br /> == ID 1 ==<br /> Functions exposed to the kernel internally.<br /> <br /> {| class=wikitable<br /> ! Sub-ID || Name || In || Out<br /> |-<br /> | 0xC4000001 || [[#CpuSuspend]] || X1=power_state, X2=entrypoint_addr, X3=context_id || None<br /> |-<br /> | 0x84000002 || [[#CpuOff]] || None || None<br /> |-<br /> | 0xC4000003 || [[#CpuOn]] || X1=target_cpu, X2=entrypoint_addr, X3=context_id, X4,X5,X6,X7=0 || X0=result<br /> |-<br /> | 0xC3000004 || [[#GetConfig]] (Same as ID 0, Sub-ID 2) || W1=config_item, X2,X3,X4,X5,X6,X7=0 || X0=result, X1,X2,X3,X4=config_val<br /> |-<br /> | 0xC3000005 || [[#GenerateRandomBytes]] (Same as ID 0, Sub-ID 6) || X1=size, X2,X3,X4,X5,X6,X7=0 || X0=result, X1,X2,X3,X4,X5,X6,X7=rand_bytes<br /> |-<br /> | 0xC3000006 || [[#Panic]] || W1=panic_color, X2,X3,X4,X5,X6,X7=0 || X0=result<br /> |-<br /> | 0xC3000007 || [2.0.0+] [[#ConfigureCarveout]] || X1=carveout_index, X2=region_phys_addr, X3=region_size, X4,X5,X6,X7=0 || X0=result<br /> |-<br /> | 0xC3000008 || [2.0.0+] [[#ReadWriteRegister]] || X1=reg_addr, W2=rw_mask, W3=in_val, X4,X5,X6,X7=0 || X0=result, W1=out_val<br /> |}<br /> <br /> === CpuSuspend ===<br /> Standard ARM PCSI SMC. Suspends the CPU (CPU0).<br /> <br /> The kernel calls this SMC on shutdown with '''power_state''' set to 0x0201001B (power level: 0x02==system; power type: 0x01==powerdown; ID: 0x1B).<br /> <br /> === CpuOff ===<br /> Standard ARM PCSI SMC. Turns off the CPU (CPU1, CPU2 or CPU3).<br /> <br /> === CpuOn ===<br /> Standard ARM PCSI SMC. Turns on the CPU (CPU1, CPU2 or CPU3).<br /> <br /> === GetConfig ===<br /> Takes a '''config_item''' and returns an associated '''config_val'''.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! ConfigItem || Name<br /> |-<br /> | 1 || [[#DisableProgramVerification]]<br /> |-<br /> | 2 || [[#DramId]]<br /> |-<br /> | 3 || [[#SecurityEngineIrqNumber]]<br /> |-<br /> | 4 || [[#Version]]<br /> |-<br /> | 5 || [[#HardwareType]]<br /> |-<br /> | 6 || [[#IsRetail]]<br /> |-<br /> | 7 || [[#IsRecoveryBoot]]<br /> |-<br /> | 8 || [[#DeviceId]]<br /> |-<br /> | 9 || [1.0.0-4.0.0] [[#BootReason]]<br /> |-<br /> | 10 || [[#MemoryArrange]]<br /> |-<br /> | 11 || [[#IsDebugMode]]<br /> |-<br /> | 12 || [[#KernelConfiguration]]<br /> |-<br /> | 13 || [[#IsChargerHiZModeEnabled]]<br /> |-<br /> | 14 || [4.0.0+] [[#IsKiosk]]<br /> |-<br /> | 15 || [5.0.0+] [[#RegulatorType]]<br /> |-<br /> | 16 || [5.0.0+] [[#KeyGeneration]]<br /> |-<br /> | 17 || [5.0.0+] [[#Package2Hash]]<br /> |}<br /> <br /> ==== DisableProgramVerification ====<br /> [[Process Manager services|PM]] checks this item and if non-zero, calls fsp-pr SetEnabledProgramVerification(false).<br /> <br /> ==== DramId ====<br /> This is extracted directly from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Value<br /> ! Description<br /> |-<br /> | 0<br /> | DramId_EristaIcosaSamsung4gb<br /> |-<br /> | 1<br /> | DramId_EristaIcosaHynix4gb<br /> |-<br /> | 2<br /> | DramId_EristaIcosaMicron4gb<br /> |-<br /> | 3<br /> | Reserved<br /> |-<br /> | 4<br /> | DramId_EristaIcosaSamsung6gb<br /> |-<br /> | 5<br /> | [4.0.0+] Reserved<br /> |-<br /> | 6<br /> | [4.0.0+] Reserved<br /> |-<br /> | 7<br /> | [5.0.0+] DramId_MarikoIowax1x2Samsung4gb ([4.0.0-4.1.0] Reserved)<br /> |-<br /> | 8<br /> | [5.0.0+] DramId_MarikoIowaSamsung4gb<br /> |-<br /> | 9<br /> | [5.0.0+] DramId_MarikoIowaSamsung8gb<br /> |-<br /> | 10<br /> | [6.0.0+] DramId_MarikoIowaHynix4gb ([5.0.0-5.1.0] Reserved)<br /> |-<br /> | 11<br /> | [7.0.0+] DramId_MarikoIowaMicron4gb ([5.0.0-6.2.0] Reserved)<br /> |-<br /> | 12<br /> | [5.0.0+] DramId_MarikoHoagSamsung4gb<br /> |-<br /> | 13<br /> | [5.0.0+] DramId_MarikoHoagSamsung8gb<br /> |-<br /> | 14<br /> | [7.0.0+] DramId_MarikoHoagHynix4gb ([5.0.0-6.2.0] Reserved)<br /> |-<br /> | 15<br /> | [7.0.0+] DramId_MarikoHoagMicron4gb ([5.0.0-6.2.0] Reserved)<br /> |-<br /> | 16<br /> | [8.0.0+] DramId_MarikoUnkSamsung4gb<br /> |}<br /> <br /> [[PCV_services|PCV]] selects memory training tables based on DramId.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! SoC<br /> ! Platform<br /> ! DramId<br /> ! Revision<br /> ! DVFS version<br /> |-<br /> | T210<br /> | jetson-tx1<br /> | N/A<br /> | 0x07<br /> |<br /> 11_40800_01_V9.8.3_V1.6<br /> 11_68000_01_V9.8.3_V1.6<br /> 11_102000_01_V9.8.3_V1.6<br /> 11_204000_05_V9.8.3_V1.6<br /> 11_408000_02_V9.8.3_V1.6<br /> 11_665600_03_V9.8.3_V1.6<br /> 11_800000_01_V9.8.3_V1.6<br /> 11_1065600_01_V9.8.3_V1.6<br /> 11_1331200_01_V9.8.3_V1.6<br /> 11_1600000_02_V9.8.3_V1.6<br /> |-<br /> | T210<br /> | nx-abcb<br /> | EristaIcosaSamsung4gb<br /> | 0x07<br /> |<br /> 10_40800_NoCfgVersion_V9.8.7_V1.6<br /> 10_68000_NoCfgVersion_V9.8.7_V1.6<br /> 10_102000_NoCfgVersion_V9.8.7_V1.6<br /> 10_204000_NoCfgVersion_V9.8.7_V1.6<br /> 10_408000_NoCfgVersion_V9.8.7_V1.6<br /> 10_665600_NoCfgVersion_V9.8.7_V1.6<br /> 10_800000_NoCfgVersion_V9.8.7_V1.6<br /> 10_1065600_NoCfgVersion_V9.8.7_V1.6<br /> 10_1331200_NoCfgVersion_V9.8.7_V1.6<br /> 10_1600000_NoCfgVersion_V9.8.7_V1.6<br /> |-<br /> | T210<br /> | nx-abcb<br /> | EristaIcosaMicron4gb<br /> | 0x07<br /> |<br /> 10_40800_NoCfgVersion_V9.8.4_V1.6<br /> 10_68000_NoCfgVersion_V9.8.4_V1.6<br /> 10_102000_NoCfgVersion_V9.8.4_V1.6<br /> 10_204000_NoCfgVersion_V9.8.4_V1.6<br /> 10_408000_NoCfgVersion_V9.8.4_V1.6<br /> 10_665600_NoCfgVersion_V9.8.4_V1.6<br /> 10_800000_NoCfgVersion_V9.8.4_V1.6<br /> 10_1065600_NoCfgVersion_V9.8.4_V1.6<br /> 10_1331200_NoCfgVersion_V9.8.4_V1.6<br /> 10_1600000_NoCfgVersion_V9.8.4_V1.6<br /> |-<br /> | T210<br /> | nx-abcb<br /> | EristaIcosaHynix4gb<br /> | 0x07<br /> |<br /> 10_40800_NoCfgVersion_V9.8.4_V1.6<br /> 10_68000_NoCfgVersion_V9.8.4_V1.6<br /> 10_102000_NoCfgVersion_V9.8.4_V1.6<br /> 10_204000_NoCfgVersion_V9.8.4_V1.6<br /> 10_408000_NoCfgVersion_V9.8.4_V1.6<br /> 10_665600_NoCfgVersion_V9.8.4_V1.6<br /> 10_800000_NoCfgVersion_V9.8.4_V1.6<br /> 10_1065600_NoCfgVersion_V9.8.4_V1.6<br /> 10_1331200_NoCfgVersion_V9.8.4_V1.6<br /> 10_1600000_NoCfgVersion_V9.8.4_V1.6<br /> |-<br /> | T210<br /> | nx-abca2<br /> | EristaIcosaSamsung4gb, EristaIcosaMicron4gb<br /> | 0x07<br /> | <br /> 10_40800_NoCfgVersion_V9.8.7_V1.6<br /> 10_68000_NoCfgVersion_V9.8.7_V1.6<br /> 10_102000_NoCfgVersion_V9.8.7_V1.6<br /> 10_204000_NoCfgVersion_V9.8.7_V1.6<br /> 10_408000_NoCfgVersion_V9.8.7_V1.6<br /> 10_665600_NoCfgVersion_V9.8.7_V1.6<br /> 10_800000_NoCfgVersion_V9.8.7_V1.6<br /> 10_1065600_NoCfgVersion_V9.8.7_V1.6<br /> 10_1331200_NoCfgVersion_V9.8.7_V1.6<br /> 10_1600000_NoCfgVersion_V9.8.7_V1.6<br /> |-<br /> | T210<br /> | nx-abca2<br /> | EristaIcosaHynix4gb<br /> | 0x07<br /> |<br /> 10_40800_NoCfgVersion_V9.8.7_V1.6<br /> 10_68000_NoCfgVersion_V9.8.7_V1.6<br /> 10_102000_NoCfgVersion_V9.8.7_V1.6<br /> 10_204000_NoCfgVersion_V9.8.7_V1.6<br /> 10_408000_NoCfgVersion_V9.8.7_V1.6<br /> 10_665600_NoCfgVersion_V9.8.7_V1.6<br /> 10_800000_NoCfgVersion_V9.8.7_V1.6<br /> 10_1065600_NoCfgVersion_V9.8.7_V1.6<br /> 10_1331200_NoCfgVersion_V9.8.7_V1.6<br /> 10_1600000_NoCfgVersion_V9.8.7_V1.6<br /> |-<br /> | T210<br /> | nx-abca2<br /> | EristaIcosaSamsung6gb<br /> | 0x07<br /> |<br /> 10_40800_NoCfgVersion_V9.8.7_V1.6<br /> 10_68000_NoCfgVersion_V9.8.7_V1.6<br /> 10_102000_NoCfgVersion_V9.8.7_V1.6<br /> 10_204000_NoCfgVersion_V9.8.7_V1.6<br /> 10_408000_NoCfgVersion_V9.8.7_V1.6<br /> 10_665600_NoCfgVersion_V9.8.7_V1.6<br /> 10_800000_NoCfgVersion_V9.8.7_V1.6<br /> 10_1065600_NoCfgVersion_V9.8.7_V1.6<br /> 10_1331200_NoCfgVersion_V9.8.7_V1.6<br /> 10_1600000_NoCfgVersion_V9.8.7_V1.6<br /> |-<br /> | T214<br /> | nx-abca2, nx-abcb, nx-abcc<br /> | MarikoIowax1x2Samsung4gb<br /> | 0x03<br /> |<br /> 01_204000_NoCfgVersion_V0.3.1_V2.0<br /> 01_1331200.0_NoCfgVersion_V0.3.1_V2.0<br /> 01_1600000_NoCfgVersion_V0.3.1_V2.0<br /> |-<br /> | T214<br /> | nx-abca2, nx-abcb, nx-abcc<br /> | MarikoIowaSamsung4gb, MarikoHoagSamsung4gb<br /> | 0x03<br /> | <br /> 01_204000_NoCfgVersion_V0.3.1_V2.0<br /> 01_1331200.0_NoCfgVersion_V0.3.1_V2.0<br /> 01_1600000_NoCfgVersion_V0.3.1_V2.0<br /> |-<br /> | T214<br /> | nx-abca2, nx-abcb, nx-abcc<br /> | MarikoIowaSamsung8gb, MarikoHoagSamsung8gb<br /> | 0x03<br /> |<br /> 01_204000_NoCfgVersion_V0.4.2_V2.0<br /> 01_1331200.0_NoCfgVersion_V0.4.2_V2.0<br /> 01_1600000_NoCfgVersion_V0.4.2_V2.0<br /> |-<br /> | T214<br /> | nx-abca2, nx-abcb, nx-abcc<br /> | MarikoIowaHynix4gb, MarikoHoagHynix4gb<br /> | 0x03<br /> | <br /> 01_204000_NoCfgVersion_V0.3.1_V2.0<br /> 01_1331200.0_NoCfgVersion_V0.3.1_V2.0<br /> 01_1600000_NoCfgVersion_V0.3.1_V2.0<br /> |-<br /> | T214<br /> | nx-abca2, nx-abcb, nx-abcc<br /> | MarikoIowaMicron4gb, MarikoHoagMicron4gb<br /> | 0x03<br /> | <br /> 01_204000_NoCfgVersion_V0.4.2_V2.0<br /> 01_1331200.0_NoCfgVersion_V0.4.2_V2.0<br /> 01_1600000_NoCfgVersion_V0.4.2_V2.0<br /> |-<br /> | T214<br /> | nx-abca2, nx-abcb, nx-abcc<br /> | MarikoUnkSamsung4gb<br /> | 0x03<br /> | <br /> 01_204000_NoCfgVersion_V0.4.2_V2.0<br /> 01_1331200.0_NoCfgVersion_V0.4.2_V2.0<br /> 01_1600000_NoCfgVersion_V0.4.2_V2.0<br /> |}<br /> <br /> '''nx-abca2''' ('''Icosa''' or '''Hoag''' in '''Erista''', '''Iowa''' or '''Hoag''' in '''Mariko''') hardware types are variations of the retail and EDEV form factors.<br /> <br /> '''nx-abcb''' ('''Copper''') is the SDEV unit. Among other differences, this has extra hardware to support HDMI output.<br /> <br /> [8.0.0+] '''nx-abcc''' was added for '''Mariko'''.<br /> <br /> '''Erista''' memory is LPDDR4, while '''Mariko''' memory is LPDDR4X.<br /> <br /> ==== SecurityEngineIrqNumber ====<br /> SPL uses this for setting up the security engine IRQ.<br /> <br /> ==== Version ====<br /> The current [[Package2#Versions|Package1 Maxver Constant]] - 1.<br /> <br /> ==== HardwareType ====<br /> [1.0.0+] This item is obtained by checking bits 8 and 2 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]]. It can be 0 (Icosa), 1 (Copper), 2 (Hoag) or 3 (Invalid).<br /> <br /> [4.0.0+] This item is obtained by checking bits 8, 2 and 16-19 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]]. It can be 0 (Icosa), 1 (Copper), 2 (Hoag), 3 (Iowa) or 4 (Invalid).<br /> <br /> [7.0.0+] This item no longer depends on fuses and can only be 0 (Icosa) or 0xF (Invalid) in retail units.<br /> <br /> [8.0.0+] This item can be 0 (Icosa), 1 (Copper), 2 (Hoag), 3 (Iowa), 4 (Unknown) or 5 (Invalid). It still can only be 0 (Icosa) or 0xF (Invalid) in retail units.<br /> <br /> ==== IsRetail ====<br /> This item is obtained by checking bits 9 and 0-1 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]]. It can be 0 (Debug), 1 (Retail) or 2 (Invalid).<br /> <br /> ==== IsRecoveryBoot ====<br /> Used to determine if the system is booting from SafeMode firmware.<br /> <br /> Under normal circumstances, this just returns bit 0 of the active [[BCT#bootloader0_info|bootloader info]]'s attribute field.<br /> <br /> ==== DeviceId ====<br /> [[NIM_services|NIM]] checks if this item matches the [[Settings_services|set:cal]] DeviceId with byte7 cleared. If they don't match, a panic is thrown.<br /> <br /> ==== BootReason ====<br /> Used to determine how the system booted.<br /> <br /> {| class=wikitable<br /> ! Value || Description<br /> |-<br /> | 0 || Invalid<br /> |-<br /> | 1 || AcOk<br /> |-<br /> | 2 || OnKey<br /> |-<br /> | 3 || RtcAlarm1<br /> |-<br /> | 4 || RtcAlarm2<br /> |}<br /> <br /> ==== MemoryArrange ====<br /> [[Process Manager services|PM]] uses this item for selecting the appropriate size for each [[SVC#LimitableResource|LimitableResource_Memory]].<br /> <br /> ==== IsDebugMode ====<br /> Kernel uses this to determine behavior of svcBreak positive arguments. It will break instead of just force-exiting the process which is what happens on retail.<br /> <br /> [2.0.0+] This is also used with certain debug [[SVC|SVCs]].<br /> <br /> [3.0.0+] [[Loader services|RO]] checks this and if set then skipping NRR rsa signatures is allowed.<br /> <br /> The value of this field is loaded from [[BootConfig]] unsigned-config+0x10 u8 bit1.<br /> <br /> ==== KernelConfiguration ====<br /> Kernel reads this when setting up memory-related code. <br /> <br /> Bit 0 is a boolean determining whether kernel should it will memset various allocated memory-regions with 0x58, 0x59, 0x5A ('X', 'Y', 'Z') instead of zero. This allows Nintendo devs to find uninitialized memory bugs.<br /> <br /> Bit 1 is a boolean determining whether kernel should forcefully enable usermode exception handlers (when false, only certain aborts (((1LL &lt;&lt; (esr &gt;&gt; 26)) &amp; 0x1115804400224001) == 0, typically data/prefetch aborts) that occur when the faulting address is in a readable region with MemoryType_CodeStatic will trigger usermode exception handlers).<br /> <br /> Bit 2 is a boolean determining whether kernel should enable usermode access to the Performance Monitors (whether PMUSERENR_EL0 should be 1 or 0).<br /> <br /> [8.0.0+] Bit 3 is a boolean determining whether the kernldr should allocate 0x68000 extra bytes before INI1 data<br /> <br /> Bits 8-15 are a boolean determining whether kernel should call smcPanic on error instead of infinite-looping.<br /> <br /> Bits 16-17 determine how much memory is available. 00/03 = 4 GB, 01 = 6 GB, 02 = 8 GB.<br /> <br /> ==== IsChargerHiZModeEnabled ====<br /> This tells if the TI Charger (bq24192) is active.<br /> <br /> ==== KeyGeneration ====<br /> This item is obtained from [[Fuse_registers#FUSE_RESERVED_ODM2|FUSE_RESERVED_ODM2]] if bit 11 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]] is set, [[Fuse_registers#FUSE_RESERVED_ODM0|FUSE_RESERVED_ODM0]] matches 0x8E61ECAE and [[Fuse_registers#FUSE_RESERVED_ODM1|FUSE_RESERVED_ODM1]] matches 0xF2BA3BB2.<br /> <br /> [5.0.0+] [[Filesystem services|FS]] can now use this value for the '''KeyGeneration''' parameter when calling [[#GenerateAesKek|GenerateAesKek]] during &quot;GetBisEncryptionKey&quot;.<br /> <br /> ==== IsKiosk ====<br /> This item is bit 10 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]].<br /> <br /> [4.0.0+] [[Settings_services|Settings]] uses this value to overwrite the quest flag from [[Settings_services#set:sys|GetQuestFlag]]. This is used to detect if a Switch is a kiosk unit for display at retail stores.<br /> <br /> ==== RegulatorType ====<br /> This item is currently hardcoded to 0.<br /> <br /> [5.0.0+] [[PCV_services|PCV]] uses this value in combination with [[#HardwareType|HardwareType]] to configure power blocks and memory tables for different hardware.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Value<br /> ! SoC<br /> ! GPU<br /> ! Power Blocks<br /> |-<br /> | 0<br /> | T210<br /> | GM20B (0x12B)<br /> | max77620_sd0, max77621_cpu and max77621_gpu<br /> |-<br /> | 1<br /> | T214<br /> | GM2?? (0x12E)<br /> | max77620_sd0, max77812_cpu and max77812_gpu<br /> |-<br /> | 2<br /> | T214<br /> | GM2?? (0x12E)<br /> | max77620_sd0, max77812_cpu and max77812_gpu<br /> |}<br /> <br /> ==== Package2Hash ====<br /> This is a SHA-256 hash calculated over the [[Package2|package2]] image. Since the hash calculation is an optional step in pkg2ldr, this item is only valid in recovery mode. Otherwise, an error is returned instead.<br /> <br /> === GenerateRandomBytes ===<br /> Takes a '''size''' and returns '''rand_bytes'''.<br /> <br /> The kernel limits '''size''' to 0x38 (for fitting in return registers).<br /> <br /> === Panic ===<br /> Issues a system panic.<br /> <br /> The kernel always calls this with '''panic_color''' set to 0xF00.<br /> <br /> === ConfigureCarveout ===<br /> Configures memory controller carveout regions.<br /> <br /> If '''carveout_index''' is 0, '''region_phys_addr''' and '''region_size''' are used to configure '''MC_SECURITY_CARVEOUT4'''.<br /> If '''carveout_index''' is 1, '''region_phys_addr''' and '''region_size''' are used to configure '''MC_SECURITY_CARVEOUT5'''.<br /> Any other '''carveout_index''' values are invalid.<br /> <br /> The kernel calls this with '''carveout_index''' set to 0, '''region_phys_addr''' set to 0x80060000 and '''region_size''' set to a dynamically calculated size which covers all the kernel and built-in sysmodules' DRAM regions.<br /> <br /> === ReadWriteRegister ===<br /> Relays [[SVC#svcReadWriteRegister|svcReadWriteRegister]] to the Secure Monitor.<br /> <br /> = Errors =<br /> {| class=wikitable<br /> ! Value || Description<br /> |-<br /> | 0 || Success<br /> |-<br /> | 1 || Not implemented<br /> |-<br /> | 2 || Invalid argument<br /> |-<br /> | 3 || In progress<br /> |-<br /> | 4 || No async operation<br /> |-<br /> | 5 || Invalid async operation<br /> |-<br /> | [8.0.0+] 6 || Blacklisted<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=System_Version_Title&diff=6245 2019-02-19T01:05:22Z

<p>Shinyquagsire23: imagine not having 7.x keys</p> <hr /> <div>The FS for the system-version title(TID 0100000000000809) contains &quot;/file&quot; (and, with [5.0.0+], &quot;/digest&quot;):<br /> <br /> {| class=wikitable<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x1<br /> | Major<br /> |-<br /> | 0x1<br /> | 0x1<br /> | Minor<br /> |-<br /> | 0x2<br /> | 0x1<br /> | Micro<br /> |-<br /> | 0x3<br /> | 0x1<br /> | Padding<br /> |-<br /> | 0x4<br /> | 0x1<br /> | Revision Major<br /> |-<br /> | 0x5<br /> | 0x1<br /> | Revision Minor<br /> |-<br /> | 0x6<br /> | 0x2<br /> | Padding<br /> |-<br /> | 0x8<br /> | 0x20<br /> | Platform string (&quot;NX&quot; with zeros afterwards)<br /> |-<br /> | 0x28<br /> | 0x40<br /> | Version hash (Hex ASCII string). 0x28-bytes(not including NUL-terminator) normally with zeros afterwards.<br /> |-<br /> | 0x68<br /> | 0x18<br /> | Display version (System-version in string form with zeros afterwards, e.g. &quot;2.1.0&quot;). This is what is displayed in System settings.<br /> |-<br /> | 0x80<br /> | 0x80<br /> | Display title (System version in longform, e.g. &quot;NintendoSDK Firmware for NX 2.0.0-15&quot;). This is what is displayed in DevMenu.<br /> |}<br /> <br /> == Known Versions ==<br /> === Retail Firmware Updates ===<br /> {| class=wikitable<br /> ! Firmware<br /> ! Version String<br /> ! Hex ASCII String<br /> ! &quot;/digest&quot; contents<br /> |-<br /> | 1.0.0<br /> | NintendoSDK Firmware for NX 1.0.0-15<br /> | 84b8da475a02261c456e6472b403b31416480165<br /> | N/A<br /> |-<br /> | 2.0.0<br /> | NintendoSDK Firmware for NX 2.0.0-15<br /> | 25233e518f580062b41f45fae7ce56bff261094a<br /> | N/A<br /> |-<br /> | 2.1.0<br /> | NintendoSDK Firmware for NX 2.1.0-0<br /> | e548f82b0aaff5fd18cfd80e7b9bd9808eeb7c99<br /> | N/A<br /> |-<br /> | 2.2.0<br /> | NintendoSDK Firmware for NX 2.2.0-1<br /> | c83b637205048e61e73c870f21271cc3c6364396<br /> | N/A<br /> |-<br /> | 2.3.0<br /> | NintendoSDK Firmware for NX 2.3.0-0<br /> | 3ed3bbc8885b6362f4f244dcecd2b430fa27310e<br /> | N/A<br /> |-<br /> | 3.0.0<br /> | NintendoSDK Firmware for NX 3.0.0-10.0<br /> | 7fbde2b0bba4d14107bf836e4643043d9f6c8e47<br /> | N/A<br /> |-<br /> | 3.0.1<br /> | NintendoSDK Firmware for NX 3.0.1-0.0<br /> | a3363e086791370ed89dca69c697b4a8bc443d66<br /> | N/A<br /> |-<br /> | 3.0.2<br /> | NintendoSDK Firmware for NX 3.0.2-0.0<br /> | 56bc7f71d0e13179ccb6543bbb33d7f537859e49<br /> | N/A<br /> |-<br /> | 4.0.0<br /> | NintendoSDK Firmware for NX 4.0.0-4.0<br /> | 875be0f6edc29b23938b7aea50764421b9f217e5<br /> | N/A<br /> |-<br /> | 4.0.1<br /> | NintendoSDK Firmware for NX 4.0.1-0.0<br /> | 826588c45cecab1672c46f5de87d83ea6008d583<br /> | N/A<br /> |-<br /> | 4.1.0<br /> | NintendoSDK Firmware for NX 4.1.0-0.0<br /> | 314f9468b704e84e1ffed449dfa6108ba4be221d<br /> | N/A<br /> |-<br /> | 5.0.0<br /> | NintendoSDK Firmware for NX 5.0.0-3.0<br /> | 66790aa646927601523df36a6750205cd944b3de<br /> | gW93A#00050000#QRnTiv2kqQV-KO9DAn1Wzz4S2-SDH4Zd10y8Jx5KalI=<br /> |-<br /> | 5.0.1<br /> | NintendoSDK Firmware for NX 5.0.1-0.0<br /> | 4b51b56242cc388ef487e148048e2c80e25994ad<br /> | gW93A#00050001#wBt05i54vmIPr7cs44Vvod3M9s5M2Yl2ZVd_pd036MY=<br /> |-<br /> | 5.1.0<br /> | NintendoSDK Firmware for NX 5.1.0-3.0<br /> | 23f9df53e25709d756e0c76effcb2473bd3447dd<br /> | gW93A#00050100#29uVhARHOdeTZmfdPnP785egrfRbPUW5n3IAACuHoPw=<br /> |-<br /> | 6.0.0<br /> | NintendoSDK Firmware for NX 6.0.0-5.0<br /> | ef435c4fcf83831d535424f6fc28e6c91f7669d1<br /> | gW93A#00060000#9k9lgdev3glK0ltQTdWmdK7jU1BL9oWNJRAFkQpHUYI=<br /> |-<br /> | 6.0.1<br /> | NintendoSDK Firmware for NX 6.0.1-1.0<br /> | 880a0ba230a9b9225a87abe1de6c8ab8d832551e<br /> | gW93A#00060001#a4EXpeev_mWNw7Dk0vkOsCMIxlosx2JuXPiOa5hEMd0=<br /> |-<br /> | 6.1.0<br /> | NintendoSDK Firmware for NX 6.1.0-4.0<br /> | 3e478da6353b192c36490f4aa34df0d10d575146<br /> | gW93A#00060100#FziXCoELZt0C7o-t_rro9xWTcKkgPrsksov-OVrL00c=<br /> |-<br /> | 6.2.0<br /> | NintendoSDK Firmware for NX 6.2.0-1.0<br /> | 921f86701e69af7ac02712e24abf18a666c2b5fb<br /> | CusHY#00060200#-uAUBEUSc-Se5mvfhJsj3Krr9ayN7IyTX60_XcLsZkQ=<br /> |-<br /> | 7.0.0<br /> | NintendoSDK Firmware for NX 7.0.0-5.0<br /> | e4b38b15e880d251c182323894077508803abaaf<br /> | CusHY#00070000#5PRVTLegTfFlaOw3kznosYec9d8BxGj8pN3wqGa80so=<br /> |-<br /> | 7.0.1<br /> | NintendoSDK Firmware for NX 7.0.1-1.0<br /> | b9d2547128fa22760492cf09bffd0a3e43f2132c<br /> | CusHY#00070001#rBuhja_901l8V8bKFqeiNBCY-fflYlZVa_iqvkpEGJI=<br /> |}<br /> <br /> === Other ===<br /> {| class=wikitable<br /> ! Firmware<br /> ! Version String<br /> ! Hex ASCII String<br /> ! Note<br /> |-<br /> | 2.0.0-2<br /> | NintendoSDK Firmware for NX 2.0.0-2<br /> | 665fafc03935d12eebba8060a135516b021ccbaa<br /> | Revision of [[Factory Setup|factory firmware]].<br /> |-<br /> | 2.0.0-13<br /> | NintendoSDK Firmware for NX 2.0.0-13<br /> | 60b5fa391b0055f50fec362d29ac18395f387412<br /> | Revision of [[Factory Setup|factory firmware]].<br /> |-<br /> | 3.0.0<br /> | NintendoSDK Firmware for NX 3.0.0-10.0<br /> | 83480e96a810a6c7cd3a8fb58dfb5b53961ac781<br /> | Revision of [[Factory Setup|factory firmware]].<br /> |-<br /> | 6.0.0-4.0<br /> | NintendoSDK Firmware for NX 6.0.0-4.0<br /> | 5dc1909aea612d7a444884faca584fa8ae895b5c<br /> | Pre-release version of firmware 6.0.0.<br /> |}<br /> <br /> === Development Firmwares ===<br /> {| class=wikitable<br /> ! Firmware<br /> ! Version String<br /> ! Hex ASCII String<br /> ! Note<br /> |-<br /> | 0.8.5-0<br /> | NintendoSDK Firmware for NX 0.8.5-0<br /> | 3dd94e3e75a61a7a828756919dba98c42ed7069a<br /> | Pre-release firmware.<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=SVC&diff=5714 2018-12-03T01:39:25Z

<p>Shinyquagsire23: /* CreateProcessInfo */</p> <hr /> <div>__NOTOC__<br /> <br /> = System calls =<br /> {| class=wikitable<br /> ! Id || Name || In || Out<br /> |-<br /> | 0x1 || [[#svcSetHeapSize]] || W1=size || W0=result, X1=outaddr<br /> |-<br /> | 0x2 || [[#svcSetMemoryPermission]] || X0=addr, X1=size, W2=prot || W0=result<br /> |-<br /> | 0x3 || [[#svcSetMemoryAttribute]] || X0=addr, X1=size, W2=state0, W3=state1 || W0=result<br /> |-<br /> | 0x4 || [[#svcMapMemory]] || X0=dstaddr, X1=srcaddr, X2=size || W0=result<br /> |-<br /> | 0x5 || [[#svcUnmapMemory]] || X0=dstaddr, X1=srcaddr, X2=size || W0=result<br /> |-<br /> | 0x6 || [[#svcQueryMemory]] || X0=MemoryInfo*, X2=addr || W0=result, W1=PageInfo <br /> |-<br /> | 0x7 || [[#svcExitProcess]] || None ||<br /> |-<br /> | 0x8 || [[#svcCreateThread]] || X1=entry, X2=thread_context, X3=stacktop, W4=prio, W5=processor_id || W0=result, W1=handle<br /> |-<br /> | 0x9 || [[#svcStartThread]] || W0=thread_handle || W0=result<br /> |-<br /> | 0xA || [[#svcExitThread]] || None || <br /> |-<br /> | 0xB || [[#svcSleepThread]] || X0=nano || W0=result<br /> |-<br /> | 0xC || [[#svcGetThreadPriority]] || W1=thread_handle || W0=result, W1=prio<br /> |-<br /> | 0xD || [[#svcSetThreadPriority]] || W0=thread_handle, W1=prio || W0=result<br /> |-<br /> | 0xE || [[#svcGetThreadCoreMask]] || W2=thread_handle || W0=result, W1=out, X2=out<br /> |-<br /> | 0xF || [[#svcSetThreadCoreMask]] || W0=thread_handle, W1=in, X2=in2 || W0=result<br /> |-<br /> | 0x10 || [[#svcGetCurrentProcessorNumber]] || None || W0/X0=cpuid<br /> |-<br /> | 0x11 || svcSignalEvent || W0=wevent_handle || W0=result<br /> |-<br /> | 0x12 || svcClearEvent || W0=wevent_or_revent_handle || W0=result<br /> |-<br /> | 0x13 || [[#svcMapSharedMemory]] || W0=shmem_handle, X1=addr, X2=size, W3=perm || W0=result<br /> |-<br /> | 0x14 || svcUnmapSharedMemory || W0=shmem_handle, X1=addr, X2=size || W0=result <br /> |-<br /> | 0x15 || [[#svcCreateTransferMemory]] || X1=addr, X2=size, W3=perm || W0=result, W1=tmem_handle<br /> |-<br /> | 0x16 || svcCloseHandle || W0=handle || W0=result<br /> |-<br /> | 0x17 || svcResetSignal || W0=revent_or_process_handle || W0=result<br /> |-<br /> | 0x18 || [[#svcWaitSynchronization]] || X1=handles_ptr, W2=num_handles. X3=timeout || W0=result, W1=handle_idx<br /> |-<br /> | 0x19 || [[#svcCancelSynchronization]] || W0=thread_handle || W0=result<br /> |-<br /> | 0x1A || svcArbitrateLock || W0=cur_thread_handle, X1=ptr, W2=req_thread_handle || <br /> |-<br /> | 0x1B || svcArbitrateUnlock || X0=ptr ||<br /> |-<br /> | 0x1C || svcWaitProcessWideKeyAtomic || X0=ptr0, X1=ptr, W2=thread_handle, X3=timeout || W0=result<br /> |-<br /> | 0x1D || svcSignalProcessWideKey || X0=ptr, W1=value || W0=result<br /> |-<br /> | 0x1E || [[#svcGetSystemTick]] || None || X0={value of cntpct_el0}<br /> |-<br /> | 0x1F || svcConnectToNamedPort || X1=port_name_str || W0=result, W1=handle<br /> |-<br /> | 0x20 || svcSendSyncRequestLight || W0=light_session_handle, X1=? || W0=result<br /> |-<br /> | 0x21 || svcSendSyncRequest || X0=normal_session_handle || W0=result<br /> |-<br /> | 0x22 || [[#svcSendSyncRequestWithUserBuffer]] || X0=cmdbufptr, X1=size, X2=handle || W0=result<br /> |-<br /> | 0x23 || svcSendAsyncRequestWithUserBuffer || X1=cmdbufptr, X2=size, X3=handle || W0=result, W1=revent_handle<br /> |-<br /> | 0x24 || svcGetProcessId || W1=thread_or_process_or_debug_handle || W0=result, X1=pid<br /> |-<br /> | 0x25 || svcGetThreadId || W1=thread_handle || W0=result, X1=out<br /> |-<br /> | 0x26 || [[#svcBreak]] || X0=break_reason,X1,X2=info || W0=result = 0<br /> |-<br /> | 0x27 || svcOutputDebugString || X0=str, X1=size || W0=result<br /> |-<br /> | 0x28 || svcReturnFromException || X0=result || <br /> |-<br /> | 0x29 || [[#svcGetInfo]] || X1=info_id, X2=handle, X3=info_sub_id || W0=result, X1=out<br /> |-<br /> | 0x2A || svcFlushEntireDataCache || None || None<br /> |-<br /> | 0x2B || svcFlushDataCache || X0=addr, X1=size || W0=result<br /> |-<br /> | 0x2C || [3.0.0+] [[#svcMapPhysicalMemory]] || X0=addr, X1=size || W0=result<br /> |-<br /> | 0x2D || [3.0.0+] svcUnmapPhysicalMemory || X0=addr, X1=size || W0=result<br /> |-<br /> | 0x2E || [5.0.0+] svcGetFutureThreadInfo || X3=timeout || W0=result, bunch of crap<br /> |-<br /> | 0x2F || svcGetLastThreadInfo || None || W0=result, W1,W2,W3,W4=unk, W5=truncated_u64, W6=bool<br /> |-<br /> | 0x30 || svcGetResourceLimitLimitValue || W1=reslimit_handle, W2=[[#LimitableResource]] || W0=result, X1=value<br /> |-<br /> | 0x31 || svcGetResourceLimitCurrentValue || W1=reslimit_handle, W2=[[#LimitableResource]] || W0=result, X1=value<br /> |-<br /> | 0x32 || svcSetThreadActivity || W0=thread_handle, W1=bool || W0=result<br /> |-<br /> | 0x33 || svcGetThreadContext3 || X0=[[#ThreadContext]]*, W1=thread_handle || W0=result<br /> |-<br /> | 0x34 || [4.0.0+] svcWaitForAddress || X0=ptr, W1=[[#ArbitrationType]], X2=value X3=timeout ||<br /> |-<br /> | 0x35 || [4.0.0+] svcSignalToAddress || X0=ptr, W1=[[#SignalType]], X2=value W3=num_to_signal ||<br /> |- style=&quot;border-top: double&quot;<br /> | 0x3C || [[#svcDumpInfo]] || ||<br /> |-<br /> | 0x3D || [4.0.0+] svcDumpInfoNew || ||<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40 || svcCreateSession || W2=is_light, X3=? || W0=result, W1=server_handle, W2=client_handle<br /> |-<br /> | 0x41 || [[#svcAcceptSession]] || W1=port_handle || W0=result, W1=session_handle<br /> |-<br /> | 0x42 || svcReplyAndReceiveLight || W0=light_session_handle || W0=result, W1,W2,W3,W4,W5,W6,W7=out<br /> |-<br /> | 0x43 || [[#svcReplyAndReceive]] || X1=ptr_handles, W2=num_handles, X3=replytarget_handle(0=none), X4=timeout || W0=result, W1=handle_idx<br /> |-<br /> | 0x44 || svcReplyAndReceiveWithUserBuffer|| X1=buf, X2=sz, X3=ptr_handles, W4=num_handles, X5=replytarget_handle(0=none), X6=timeout || W0=result, W1=handle_idx<br /> |-<br /> | 0x45 || svcCreateEvent || None || W0=result, W1=wevent_handle, W2=revent_handle<br /> |- style=&quot;border-top: double&quot;<br /> | 0x48 || [5.0.0+] [[#svcMapPhysicalMemoryUnsafe]] || X0=addr, X1=size || W0=result<br /> |-<br /> | 0x49 || [5.0.0+] svcUnmapPhysicalMemoryUnsafe || X0=addr, X1=size || W0=result<br /> |-<br /> | 0x4A || [5.0.0+] svcSetUnsafeLimit || X0=size || W0=result<br /> |-<br /> | 0x4B || [4.0.0+] [[#svcCreateCodeMemory]] || X1=addr, X2=size || W0=result, W1=code_memory_handle<br /> |-<br /> | 0x4C || [4.0.0+] [[#svcControlCodeMemory]] || W0=code_memory_handle, W1=[[#CodeMemoryOperation]], X2=dstaddr, X3=size, W4=perm || W0=result<br /> |-<br /> | 0x4D || svcSleepSystem || None || None<br /> |-<br /> | 0x4E || [[#svcReadWriteRegister]] || X1=reg_addr, W2=rw_mask, W3=in_val || W0=result, W1=out_val<br /> |-<br /> | 0x4F || svcSetProcessActivity || W0=process_handle, W1=bool || W0=result<br /> |-<br /> | 0x50 || [[#svcCreateSharedMemory]] || W1=size, W2=myperm, W3=otherperm || W0=result, W1=shmem_handle<br /> |-<br /> | 0x51 || [[#svcMapTransferMemory]] || X0=tmem_handle, X1=addr, X2=size, W3=perm || W0=result<br /> |-<br /> | 0x52 || [[#svcUnmapTransferMemory]] || W0=tmemhandle, X1=addr, X2=size || W0=result<br /> |-<br /> | 0x53 || svcCreateInterruptEvent || X1=irq_num, W2=flag || W0=result, W1=handle<br /> |-<br /> | 0x54 || [[#svcQueryPhysicalAddress]] || X1=addr || W0=result, X1=physaddr, X2=kerneladdr, X3=size<br /> |-<br /> | 0x55 || [[#svcQueryIoMapping]] || X1=physaddr, X2=size || W0=result, X1=virtaddr<br /> |-<br /> | 0x56 || [[#svcCreateDeviceAddressSpace]] || X1=dev_as_start_addr, X2=dev_as_end_addr || W0=result, W1=dev_as_handle<br /> |-<br /> | 0x57 || [[#svcAttachDeviceAddressSpace]] || W0=device, X1=dev_as_handle || W0=result<br /> |-<br /> | 0x58 || [[#svcDetachDeviceAddressSpace]] || W0=device, X1=dev_as_handle || W0=result<br /> |-<br /> | 0x59 || [[#svcMapDeviceAddressSpaceByForce]] || W0=dev_as_handle, W1=proc_handle, X2=dev_map_addr, X3=dev_as_size, X4=dev_as_addr, W5=perm || W0=result <br /> |-<br /> | 0x5A || [[#svcMapDeviceAddressSpaceAligned]] || W0=dev_as_handle, W1=proc_handle, X2=dev_map_addr, X3=dev_as_size, X4=dev_as_addr, W5=perm || W0=result <br /> |-<br /> | 0x5B || svcMapDeviceAddressSpace || || <br /> |-<br /> | 0x5C || [[#svcUnmapDeviceAddressSpace]] || W0=dev_as_handle, W1=proc_handle, X2=dev_map_addr, X3=dev_as_size, X4=dev_as_addr || W0=result<br /> |-<br /> | 0x5D || svcInvalidateProcessDataCache || W0=process_handle, X1=addr, X2=size || W0=size<br /> |-<br /> | 0x5E || svcStoreProcessDataCache || W0=process_handle, X1=addr, X2=size || W0=size<br /> |-<br /> | 0x5F || svcFlushProcessDataCache || W0=process_handle, X1=addr, X2=size || W0=size<br /> |-<br /> | 0x60 || svcDebugActiveProcess || X1=pid || W0=result, W1=debug_handle<br /> |-<br /> | 0x61 || svcBreakDebugProcess || W0=debug_handle || W0=result<br /> |-<br /> | 0x62 || svcTerminateDebugProcess || W0=debug_handle || W0=result<br /> |-<br /> | 0x63 || svcGetDebugEvent || X0=[[#DebugEventInfo]]*, W1=debug_handle || W0=result<br /> |-<br /> | 0x64 || svcContinueDebugEvent || [1.0.0-2.3.0] W0=debug_handle, W1=[[#ContinueDebugFlagsOld]], X2=thread_id <br /> [3.0.0+] W0=debug_handle, W1=[[#ContinueDebugFlags]], X2=thread_id_list(u64 *), W3=num_tids (max 64, 0 means &quot;all threads&quot;)<br /> || W0=result<br /> |-<br /> | 0x65 || svcGetProcessList || X1=pids_out_ptr, W2=max_out || W0=result, W1=num_out <br /> |-<br /> | 0x66 || svcGetThreadList || X1=tids_out_ptr, W2=max_out, W3=debug_handle_or_zero || W0=result, X1=num_out<br /> |-<br /> | 0x67 || svcGetDebugThreadContext || X0=ThreadContext*, X1=debug_handle, X2=thread_id, W3=[[#ThreadContextFlags]] || W0=result<br /> |-<br /> | 0x68 || svcSetDebugThreadContext || W0=debug_handle, W1=[[#ThreadContextFlags]], X2=ThreadContext*, X3=thread_id || W0=result<br /> |-<br /> | 0x69 || svcQueryDebugProcessMemory || X0=[[#MemoryInfo]]*, X2=debug_handle, X3=addr || W0=result, W1=PageInfo<br /> |-<br /> | 0x6A || svcReadDebugProcessMemory || X0=buffer*, X1=debug_handle, X2=src_addr, X3=size || W0=result<br /> |-<br /> | 0x6B || svcWriteDebugProcessMemory || X0=debug_handle, X1=buffer*, X2=dst_addr, X3=size || W0=result<br /> |-<br /> | 0x6C || [[#svcSetHardwareBreakPoint]] || W0=HardwareBreakpointId, X1=watchpoint_flags/breakpoint_flags, X2=watchpoint_value/debug_handle || <br /> |-<br /> | 0x6D || svcGetDebugThreadParam || X2=debug_handle, X3=thread_id, W4=[[#DebugThreadParam]] || W0=result, X1=out0, W2=out1<br /> |- style=&quot;border-top: double&quot;<br /> | 0x6F || [5.0.0+] [[#svcGetSystemInfo]] || X1=info_id, X2=handle, X3=info_sub_id || W0=result, X1=out<br /> |-<br /> | 0x70 || svcCreatePort || W2=max_sessions, W3=is_light, X4=name_ptr || W0=result, W1=clientport_handle, W2=serverport_handle<br /> |-<br /> | 0x71 || svcManageNamedPort || X1=name_ptr, W2=max_sessions || W0=result, W1=serverport_handle<br /> |-<br /> | 0x72 || svcConnectToPort || W1=clientport_handle || W0=result, W1=session_handle<br /> |-<br /> | 0x73 || [[#svcSetProcessMemoryPermission]] || W0=process_handle, X1=addr, X2=size, W3=perm || W0=result<br /> |-<br /> | 0x74 || [[#svcMapProcessMemory]] || X0=dstaddr, W1=process_handle, X2=srcaddr, X3=size || W0=result<br /> |-<br /> | 0x75 || [[#svcUnmapProcessMemory]] || X0=dstaddr, W1=process_handle, X2=srcaddr, X3=size || W0=result<br /> |-<br /> | 0x76 || [[#svcQueryProcessMemory]] || X0=meminfo_ptr, W2=process_handle, X3=addr || W0=result, W1=pageinfo<br /> |-<br /> | 0x77 || [[#svcMapProcessCodeMemory]] || W0=process_handle, X1=dstaddr, X2=srcaddr, X3=size || W0=result<br /> |-<br /> | 0x78 || [[#svcUnmapProcessCodeMemory]] || W0=process_handle, X1=dstaddr, X2=srcaddr, X3=size || W0=result<br /> |-<br /> | 0x79 || [[#svcCreateProcess]] || X1=procinfo_ptr, X2=caps_ptr, W3=cap_num || W0=result, W1=process_handle<br /> |-<br /> | 0x7A || svcStartProcess || W0=process_handle, W1=main_thread_prio, W2=default_cpuid, W3=main_thread_stacksz || W0=result<br /> |-<br /> | 0x7B || svcTerminateProcess || W0=process_handle || W0=result<br /> |-<br /> | 0x7C || [[#svcGetProcessInfo]] || W0=process_handle, W1=[[#ProcessInfoType]] || W0=result, X1=[[#ProcessState]]<br /> |-<br /> | 0x7D || svcCreateResourceLimit || None || W0=result, W1=reslimit_handle <br /> |-<br /> | 0x7E || svcSetResourceLimitLimitValue || W0=reslimit_handle, W1=[[#LimitableResource]], X2=value || W0=result<br /> |-<br /> | 0x7F || svcCallSecureMonitor || X0=smc_sub_id, X1,X2,X3,X4,X5,X6,X7=smc_args || X0,X1,X2,X3,X4,X5,X6,X7=result<br /> |}<br /> <br /> == svcSetHeapSize ==<br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W1 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) X1 || u64 || OutAddr<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Set the process heap to a given Size. It can both extend and shrink the heap.<br /> <br /> Size must be a multiple of 0x200000 (2MB).<br /> <br /> On success, the heap base-address (which is fixed by kernel, aslr'd) is written to OutAddr.<br /> <br /> Uses current process pool partition.<br /> <br /> [2.0.0+] Size must be less than or equal to 4GB.<br /> <br /> == svcSetMemoryPermission ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || void* || Addr<br /> |-<br /> | (In) X1 || u64 || Size<br /> |-<br /> | (In) W2 || [[#Permission]] || Prot<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Change permission of page-aligned memory region.<br /> <br /> Bit2 of permission (exec) is not allowed. Setting write-only is not allowed either (bit1).<br /> <br /> This can be used to move back and forth between ---, r-- and rw-.<br /> <br /> == svcSetMemoryAttribute ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || void* || Addr<br /> |-<br /> | (In) X1 || u64 || Size<br /> |-<br /> | (In) W2 || u32 || State0<br /> |-<br /> | (In) W3 || u32 || State1<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Change attribute of page-aligned memory region. <br /> <br /> This is used to turn on/off caching for a given memory area. Useful when talking to devices such as the GPU.<br /> <br /> What happens &quot;under the hood&quot; is the &quot;Memory Attribute Indirection Register&quot; index is changed from 2 to 3 in the MMU descriptor.<br /> <br /> {| class=wikitable<br /> ! State0 || State1 || Action<br /> |-<br /> | 0 || 0 || Clear bit3 in [[#MemoryAttribute]].<br /> |-<br /> | 8 || 0 || Clear bit3 in [[#MemoryAttribute]].<br /> |-<br /> | 8 || 8 || Set bit3 in [[#MemoryAttribute]].<br /> |}<br /> <br /> == svcMapMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || void* || DstAddr<br /> |-<br /> | (In) X1 || void* || SrcAddr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Maps a memory range into a different range.<br /> <br /> Mainly used for adding guard pages around stack.<br /> <br /> Source range gets reprotected to --- (it can no longer be accessed), and bit0 is set in the source [[#MemoryAttribute]].<br /> <br /> [1.0.0] This could be used to map into either the Alias Region or the Stack region.<br /> <br /> [2.0.0+] This can only be used to map into the Stack region.<br /> <br /> Code can get the range of the Alias region from [[#svcGetInfo]] id0=2,3, and on 2.0.0+ the range of the Stack region via [[#svcGetInfo]] id0=14, 15 (on 1.0.0, the Stack region had hardcoded limits).<br /> <br /> When mapped into the Alias region, the mapped memory will have state 0x482907.<br /> <br /> When mapped into the Stack region, the mapped memory will have state 0x5C3C0B.<br /> <br /> == svcUnmapMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || void* || DstAddr<br /> |-<br /> | (In) X1 || void* || SrcAddr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Unmaps a region that was previously mapped with [[#svcMapMemory]].<br /> <br /> It's possible to unmap ranges partially, you don't need to unmap the entire range &quot;in one go&quot;.<br /> <br /> The srcaddr/dstaddr must match what was given when the pages were originally mapped.<br /> <br /> == svcQueryMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || [[#MemoryInfo]]* || MemInfo<br /> |-<br /> | (In) X2 || void* || Addr<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || PageInfo || PageInfo<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Query information about an address. Will always fetch the lowest page-aligned mapping that contains the provided address.<br /> <br /> Outputs a [[#MemoryInfo]] struct.<br /> <br /> == svcExitProcess ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) None || || <br /> |-<br /> | (Out) None || ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Exits the current process.<br /> <br /> == svcCreateThread ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || void(*)(void*) || Entry<br /> |-<br /> | (In) X2 || void* || ThreadContext<br /> |-<br /> | (In) X3 || void* || StackTop<br /> |-<br /> | (In) W4 || u32 || Priority<br /> |-<br /> | (In) W5 || u32 || ProcessorId<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || Handle&lt;Thread&gt; || Handle<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Create a thread in the current process.<br /> <br /> Processor_id must be 0,1,2,3 or -2, where -2 uses the default cpuid for process.<br /> <br /> == svcStartThread ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;Thread&gt; || Handle<br /> |-<br /> | (Out) None || ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Starts the thread for the provided handle.<br /> <br /> == svcExitThread ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) None || || <br /> |-<br /> | (Out) None || ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Exits the current thread.<br /> <br /> == svcSleepThread ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || u64 || Nano<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Sleep for a specified amount of time, or yield thread.<br /> <br /> Setting nano=0 means &quot;yield thread&quot;.<br /> <br /> == svcGetThreadPriority ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W1|| Handle&lt;Thread&gt; || Handle<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || u64 || Priority<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Get priority of provided thread handle.<br /> <br /> == svcSetThreadPriority ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0|| Handle&lt;Thread&gt; || Handle<br /> |-<br /> | (In) W1|| u32 || Priority<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Set priority of provided thread handle.<br /> <br /> Priority is a number 0-0x3F. Lower value means higher priority.<br /> <br /> == svcGetThreadCoreMask ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W2 || Handle&lt;Thread&gt; || Handle<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || u32 || Out0<br /> |-<br /> | (Out) X2 || u64 || Out1<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Get affinity mask of provided thread handle.<br /> <br /> == svcSetThreadCoreMask ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;Thread&gt; || Handle<br /> |-<br /> | (In) W1 || u32 || In0<br /> |-<br /> | (In) X2 || u64 || In1<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Set affinity mask of provided thread handle.<br /> <br /> == svcGetCurrentProcessorNumber ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) None || || <br /> |-<br /> | (Out) W0/X0 || u64 || CpuId<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Get which cpu is executing the current thread.<br /> <br /> Cpu-id is an integer in the range 0-3.<br /> <br /> == svcMapSharedMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;SharedMemory&gt; || MemHandle<br /> |-<br /> | (In) X1 || void* || Addr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (In) W3 || [[#Permission]] || Permissions<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Maps the block supplied by the handle. The required permissions are different for the process that created the handle and all other processes.<br /> <br /> Increases reference count for the KSharedMemory object. Thus in order to release the memory associated with the object, all handles to it must be closed and all mappings must be unmapped.<br /> <br /> == svcCreateTransferMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || void* || Addr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (In) W3 || [[#Permission]] || Permissions<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || Handle&lt;TransferMemory&gt; || Handle<br /> |}<br /> &lt;/div&gt;<br /> <br /> This one reprotects the src block with perms you give it. It also sets bit0 into [[#MemoryAttribute]].<br /> <br /> Executable bit perm not allowed.<br /> <br /> Closing all handles automatically causes the bit0 in [[#MemoryAttribute]] to clear, and the permission to reset.<br /> <br /> == svcWaitSynchronization ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || Handle* || HandlesPtr<br /> |-<br /> | (In) W2 || u64 || HandlesNum<br /> |-<br /> | (In) X3 || u64 || Timeout<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || u64 || HandleIndex<br /> |}<br /> &lt;/div&gt;<br /> <br /> Works with num_handles &lt;= 0x40.<br /> <br /> When zero handles are passed, this will wait forever until either timeout or cancellation occurs.<br /> <br /> Does not accept 0xFFFF8001 or 0xFFFF8000 as handles.<br /> <br /> === Object types ===<br /> <br /> '''KDebug:''' signals when there is a new [[#DebugEventInfo|DebugEvent]] (retrievable via [[#svcGetDebugEvent]]).<br /> <br /> '''KClientPort:''' signals when the number of sessions is less than the maximum allowed.<br /> <br /> '''KProcess:''' signals when the process undergoes a state change (retrievable via [[#svcGetProcessInfo]]).<br /> <br /> '''KReadableEvent:''' signals when the event's corresponding KWritableEvent has been signaled via svcSignalEvent.<br /> <br /> '''KServerPort:''' signals when there is an incoming connection waiting to be [[#svcAcceptSession|accepted]].<br /> <br /> '''KServerSession:''' signals when there is an incoming message waiting to be [[#svcReplyAndReceive|received]] or the pipe is closed.<br /> <br /> '''KThread:''' signals when the thread has exited.<br /> <br /> === Result codes ===<br /> <br /> '''0x0:''' Success. One of the objects was signaled before the timeout expired, or one of the objects is a Session with a closed remote. Handle index is updated to indicate which object signaled.<br /> <br /> '''0x7601:''' Thread termination requested. Handle index is not updated.<br /> <br /> '''0xe401:''' Invalid handle. Returned when one of the handles passed is invalid. Handle index is not updated.<br /> <br /> '''0xe601:''' Invalid address. Returned when the handles pointer is not a readable address. Handle index is not updated.<br /> <br /> '''0xea01:''' Timeout. Returned when no objects have been signaled within the timeout. Handle index is not updated.<br /> <br /> '''0xec01:''' Interrupted. Returned when another thread uses [[#svcCancelSynchronization]] to cancel this thread. Handle index is not updated.<br /> <br /> '''0xee01:''' Too many handles. Returned when the number of handles passed is &gt; 0x40.<br /> <br /> == svcCancelSynchronization ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;Thread&gt; || Handle<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> If the referenced thread is currently in a synchronization call ([[#svcWaitSynchronization]], [[#svcReplyAndReceive]] or [[#svcReplyAndReceiveLight]]), that call will be interrupted and return 0xec01.<br /> If that thread is not currently executing such a synchronization call, the next call to a synchronization call will return 0xec01.<br /> <br /> This doesn't take force-pause (activity/debug pause) into account.<br /> <br /> === Result codes ===<br /> <br /> '''0x0:''' Success. The thread was either interrupted or has had its flag set.<br /> <br /> '''0xe401:''' Invalid handle. The handle given was either invalid or not a thread handle.<br /> <br /> == svcGetSystemTick ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (Out) X0 || u64 || Ticks<br /> |}<br /> &lt;/div&gt;<br /> <br /> Returns the value of cntpct_el0.<br /> <br /> The frequency is 19200000 Hz (constant from official sw).<br /> <br /> Official sw reads cntpct_el0 directly from usermode without using this SVC. [[ExeFS|sdk-nso]] has this SVC, but it's not known to be called anywhere.<br /> <br /> == svcSendSyncRequestWithUserBuffer ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || void* || CmdPtr<br /> |-<br /> | (In) X1 || u64 || Size<br /> |-<br /> | (In) W2 || Handle&lt;Session&gt; || Handle<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Size and CmdPtr must be 0x1000-aligned.<br /> <br /> === Result codes ===<br /> <br /> '''0x0:''' Success.<br /> <br /> '''0xcc01:''' CmdPtr is not 0x1000-aligned.<br /> <br /> '''0xca01:''' Size is not 0x1000-aligned.<br /> <br /> '''0xce01:''' KSessionRequest allocation failed (unlikely) or pointer buffer size exceeded.<br /> <br /> '''0xe401:''' Handles does not exist, or handle is not an instance of KClientSession.<br /> <br /> == svcBreak ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || u64 || Break Reason<br /> |-<br /> | (In) X1 || u64 ||<br /> |-<br /> | (In) X2 || u64 || Info<br /> |-<br /> | (Out) W0 || Result || 0 (Success)<br /> |}<br /> &lt;/div&gt;<br /> <br /> If the process is attached, report the Break event. Then, if svcContinueDebugEvent didn't apply IgnoreException on the thread: if TPIDR_EL0 is 0, adjust ELR_EL1 to retry to svc instruction (and set TPIDR_EL0 to 1).<br /> <br /> Otherwise, if bit31 in reason isn't set, perform crash reporting (see Exception Handling section below), if it doesn't terminate the process adjust ELR_EL1 as well.<br /> <br /> Otherwise just return 0.<br /> <br /> == svcGetInfo ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || u64 || InfoId<br /> |-<br /> | (In) W2 || Handle || Handle<br /> |-<br /> | (In) X3 || u64 || InfoSubId<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) X1 || u64 || Out<br /> |}<br /> &lt;/div&gt;<br /> <br /> {| class=wikitable<br /> ! Handle type || Id0 || Id1 || Description<br /> |-<br /> | Process || 0 || 0 || AllowedCpuIdBitmask<br /> |-<br /> | Process || 1 || 0 || AllowedThreadPrioBitmask<br /> |-<br /> | Process || 2 || 0 || AliasRegionBaseAddr<br /> |-<br /> | Process || 3 || 0 || AliasRegionSize<br /> |-<br /> | Process || 4 || 0 || HeapRegionBaseAddr<br /> |-<br /> | Process || 5 || 0 || HeapRegionSize<br /> |-<br /> | Process || 6 || 0 || TotalMemoryAvailable. Total memory available(free+used).<br /> |-<br /> | Process || 7 || 0 || TotalMemoryUsage. Total used size of codebin memory + main-thread stack + allocated heap.<br /> |-<br /> | Zero || 8 || 0 || IsCurrentProcessBeingDebugged<br /> |-<br /> | Zero || 9 || 0 || Returns ResourceLimit handle for current process. Used by [[Process_Manager_services|PM]].<br /> |-<br /> | Zero || 10 || -1, {current coreid} || IdleTickCount<br /> |-<br /> | Zero || 11 || 0-3 || RandomEntropy from current process. TRNG. Used to seed usermode PRNGs.<br /> |-<br /> | Process || 12 || 0 || [2.0.0+] AddressSpaceBaseAddr<br /> |-<br /> | Process || 13 || 0 || [2.0.0+] AddressSpaceSize<br /> |-<br /> | Process || 14 || 0 || [2.0.0+] StackRegionBaseAddr<br /> |-<br /> | Process || 15 || 0 || [2.0.0+] StackRegionSize<br /> |-<br /> | Process || 16 || 0 || [3.0.0+] PersonalMmHeapSize<br /> |-<br /> | Process || 17 || 0 || [3.0.0+] PersonalMmHeapUsage<br /> |-<br /> | Process || 18 || 0 || [3.0.0+] TitleId<br /> |-<br /> | Zero || 19 || 0 || [4.0.0-4.1.0] PrivilegedProcessId_LowerBound<br /> |-<br /> | Zero || 19 || 1 || [4.0.0-4.1.0] PrivilegedProcessId_UpperBound<br /> |-<br /> | Process || 20 || 0 || [5.0.0+] UserExceptionContextAddr<br /> |-<br /> | Thread || 0xF0000002 || 0 || Performance counter related.<br /> |}<br /> <br /> == svcMapPhysicalMemory ==<br /> This is like svcSetHeapSize except you can allocate heap at any address you'd like.<br /> <br /> Uses current process pool partition.<br /> <br /> == svcDumpInfo ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) None || || <br /> |-<br /> | (Out) None || ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> Does nothing, just returns with registers set to all-zero.<br /> <br /> == svcAcceptSession ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W1 || Handle&lt;Port&gt; || Port<br /> |-<br /> | (Out) W0 || [[#Result]] || Result<br /> |-<br /> | (Out) W1 || Handle&lt;ServerSession&gt; || Session<br /> |}<br /> &lt;/div&gt;<br /> <br /> === Result codes ===<br /> <br /> '''0xf201:''' No session waiting to be accepted<br /> <br /> == svcReplyAndReceive ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W1 || *Handle&lt;Port or ServerSession&gt; || Handles<br /> |-<br /> | (In) W2 || u32 || NumHandles<br /> |-<br /> | (In) W3 || Handle&lt;ServerSession&gt; || ReplyTarget<br /> |-<br /> | (In) X4 || u64 (nanoseconds) || Timeout<br /> |-<br /> | (Out) W0 || [[#Result]] || Result<br /> |-<br /> | (Out) W1 || u32 || HandleIndex<br /> |}<br /> &lt;/div&gt;<br /> <br /> If ReplyTarget is not zero, a reply from the TLS will be sent to that session.<br /> Then it will wait until either of the passed sessions has an incoming message, is closed, a passed port has an incoming connection, or the timeout expires.<br /> If there is an incoming message, it is copied to the TLS.<br /> <br /> If ReplyTarget is zero, the TLS should contain a blank message. If this message has a C descriptor, the buffer it points to will be used as the pointer buffer. See [[IPC_Marshalling#IPC_buffers]]. Note that a pointer buffer cannot be specified if ReplyTarget is not zero.<br /> <br /> After being validated, passed handles will be enumerated in order; even if a session has been closed, if one that appears earlier in the list has an incoming message, it will take priority and a result code of 0x0 will be returned.<br /> <br /> === Result codes ===<br /> <br /> '''0x0:''' Success. Either a session has an incoming message or a port has an incoming connection. HandleIndex is set appropriately.<br /> <br /> '''0xea01:''' Timeout. No handles were signalled before the timeout expired. HandleIndex is not updated.<br /> <br /> '''0xf601:''' Port remote dead. One of the sessions has been closed. HandleIndex is set appropriately.<br /> <br /> == svcMapPhysicalMemoryUnsafe ==<br /> Same as [[#svcMapPhysicalMemory]] except it always uses pool partition 0.<br /> <br /> == svcCreateCodeMemory ==<br /> Takes an address range with backing memory to create the code memory object.<br /> <br /> The memory is initially memset to 0xFF after being locked.<br /> <br /> == svcControlCodeMemory ==<br /> Maps the backing memory for a Code memory object into the current process.<br /> <br /> For [[#CodeMemoryOperation|CodeMemoryOperation_MapOwner]], memory permission must be RW-.<br /> <br /> For [[#CodeMemoryOperation|CodeMemoryOperation_MapSlave]], memory permission must be R-- or R-X.<br /> <br /> Operations [[#CodeMemoryOperation|CodeMemoryOperation_UnmapOwner/CodeMemoryOperation_UnmapSlave]] unmap memory that was previously mapped this way.<br /> <br /> This allows one &quot;secure JIT&quot; process to map the code memory as RW-, and the other &quot;slave&quot; process to map it R-X.<br /> <br /> [5.0.0+] Error 0xE401 is now returned when the process owner of the Code memory object is the same as the current process.<br /> <br /> == svcReadWriteRegister ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || u64 || RegAddr<br /> |-<br /> | (In) W2 || u64 || RwMask<br /> |-<br /> | (In) W3 || u64 || InValue<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1|| u64 || OutValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> Read/write IO registers with a hardcoded whitelist. Input address is physical-address and must be aligned to 4.<br /> <br /> rw_mask is 0 for reading and 0xffffffff for writing. You can also write individual bits by using a mask value.<br /> <br /> You can only write to registers inside physical pages 0x70019000 (MC), 0x7001C000 (MC0), 0x7001D000 (MC1), and they all share the same whitelist.<br /> <br /> The whitelist is same for writing as for reading.<br /> <br /> The whitelist is:<br /> <br /> 0x054, 0x090, 0x094, 0x098, 0x09c, 0x0a0, 0x0a4, 0x0a8, 0x0ac, 0x0b0, 0x0b4, 0x0b8, 0x0bc, 0x0c0, 0x0c4, 0x0c8, 0x0d0, 0x0d4, 0x0d8, 0x0dc, 0x0e0, 0x100, 0x108, 0x10c, 0x118, 0x11c, 0x124, 0x128, 0x12c, 0x130, 0x134, 0x138, 0x13c, 0x158, 0x15c, 0x164, 0x168, 0x16c, 0x170, 0x174, 0x178, 0x17c, 0x200, 0x204, 0x2e4, 0x2e8, 0x2ec, 0x2f4, 0x2f8, 0x310, 0x314, 0x320, 0x328, 0x344, 0x348, 0x370, 0x374, 0x37c, 0x380, 0x390, 0x394, 0x398, 0x3ac, 0x3b8, 0x3bc, 0x3c0, 0x3c4, 0x3d8, 0x3e8, 0x41c, 0x420, 0x424, 0x428, 0x42c, 0x430, 0x44c, 0x47c, 0x480, 0x484, 0x50c, 0x554, 0x558, 0x55c, 0x670, 0x674, 0x690, 0x694, 0x698, 0x69c, 0x6a0, 0x6a4, 0x6c0, 0x6c4, 0x6f0, 0x6f4, 0x960, 0x970, 0x974, 0xa20, 0xa24, 0xb88, 0xb8c, 0xbc4, 0xbc8, 0xbcc, 0xbd0, 0xbd4, 0xbd8, 0xbdc, 0xbe0, 0xbe4, 0xbe8, 0xbec, 0xc00, 0xc5c, 0xcac<br /> <br /> <br /> [2.0.0+] Whitelist was extended with 0x4c4, 0x4c8, 0x4cc, 0x584, 0x588, 0x58c.<br /> <br /> [2.0.0+] The IO registers in range 0x7000E400 (PMC) size 0xC00 skip the whitelist, and do a TrustZone call using [[SMC]] Id1 0xC3000008(ReadWriteRegister).<br /> <br /> [4.0.0+] Access to the Memory Controller (0x70019000) also uses smcReadWriteRegister.<br /> <br /> Here is the whitelist imposed by that SMC, relative to the start of the PMC registers:<br /> <br /> 0x000, 0x00c, 0x010, 0x014, 0x01c, 0x020, 0x02c, 0x030, 0x034, 0x038, 0x03c, 0x040, 0x044, 0x048, 0x0dc, 0x0e0, 0x0e4, 0x160, 0x164, 0x168, 0x170, 0x1a8, 0x1b8, 0x1bc, 0x1c0, 0x1c4, 0x1c8, 0x2b4, 0x2d4, 0x440, 0x4d8<br /> <br /> Here is the whitelist imposed by smcReadWriteRegister (checked in addition to the whitelist in svcReadWriteRegister), relative to the start of the MC registers:<br /> <br /> 0x000, 0x004, 0x008, 0x00C, 0x010, 0x01C, 0x020, 0x030, 0x034, 0x050, 0x054, 0x090, 0x094, 0x098, 0x09C, 0x0A0, 0x0A4, 0x0A8, 0x0AC, 0x0B0, 0x0B4, 0x0B8, 0x0BC, 0x0C0, 0x0C4, 0x0C8, 0x0D0, 0x0D4, 0x0D8, 0x0DC, 0x0E0, 0x100, 0x108, 0x10C, 0x118, 0x11C, 0x124, 0x128, 0x12C, 0x130, 0x134, 0x138, 0x13C, 0x158, 0x15C, 0x164, 0x168, 0x16C, 0x170, 0x174, 0x178, 0x17C, 0x200, 0x204, 0x238, 0x240, 0x244, 0x250, 0x254, 0x258, 0x264, 0x268, 0x26C, 0x270, 0x274, 0x280, 0x284, 0x288, 0x28C, 0x294, 0x2E4, 0x2E8, 0x2EC, 0x2F4, 0x2F8, 0x310, 0x314, 0x320, 0x328, 0x344, 0x348, 0x370, 0x374, 0x37C, 0x380, 0x390, 0x394, 0x398, 0x3AC, 0x3B8, 0x3BC, 0x3C0, 0x3C4, 0x3D8, 0x3E8, 0x41C, 0x420, 0x424, 0x428, 0x42C, 0x430, 0x44C, 0x47C, 0x480, 0x484, 0x4C4, 0x4C8, 0x4CC, 0x50C, 0x554, 0x558, 0x55C, 0x584, 0x588, 0x58C, 0x670, 0x674, 0x690, 0x694, 0x698, 0x69C, 0x6A0, 0x6A4, 0x6C0, 0x6C4, 0x6F0, 0x6F4, 0x960, 0x970, 0x974, 0x9B8, 0xA20, 0xA24, 0xA88, 0xA94, 0xA98, 0xA9C, 0xAA0, 0xAA4, 0xAA8, 0xAAC, 0xAB0, 0xAB4, 0xAB8, 0xABC, 0xAC0, 0xAC4, 0xAC8, 0xACC, 0xAD0, 0xAD4, 0xAD8, 0xADC, 0xAE0, 0xB88, 0xB8C, 0xBC4, 0xBC8, 0xBCC, 0xBD0, 0xBD4, 0xBD8, 0xBDC, 0xBE0, 0xBE4, 0xBE8, 0xBEC, 0xC00, 0xC5C, 0xCAC<br /> <br /> == svcCreateSharedMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W1 || u64 || Size<br /> |-<br /> | (In) W2 || [[#Permission]] || LocalPerm<br /> |-<br /> | (In) W3 || [[#Permission]] || RemotePerm<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || Handle&lt;SharedMemory&gt; || MemHandle<br /> |}<br /> &lt;/div&gt;<br /> <br /> Other perm can be used to enforce permission 1, 3, or 0x10000000 if don't care.<br /> <br /> Allocates memory from the current process' pool partition.<br /> <br /> == svcMapTransferMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || Handle&lt;TransferMemory&gt; || MemHandle<br /> |-<br /> | (In) X1 || void* || Addr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (In) W3 || [[#Permission]] || Permissions<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> The newly mapped pages will have [[#MemoryState]] type 0xE.<br /> <br /> You must pass same size and permissions as given in svcCreateMemoryMirror, otherwise error.<br /> <br /> == svcUnmapTransferMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || Handle&lt;TransferMemory&gt; || MemHandle<br /> |-<br /> | (In) X1 || void* || Addr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Size must match size given in map syscall, otherwise there's an invalid-size error.<br /> <br /> == svcQueryPhysicalAddress ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || u64 || Addr<br /> |-<br /> | (Out) W0 || [[#Result]]|| Ret<br /> |-<br /> | (Out) X1 || u64 || PhysAddr<br /> |-<br /> | (Out) X2 || u64 || KernelAddr<br /> |-<br /> | (Out) X3 || u64 || Size<br /> |}<br /> &lt;/div&gt;<br /> <br /> == svcQueryIoMapping ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || u64 || PhysAddr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) X1 || void* || VirtAddr<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Returns a virtual address mapped to a given IO range.<br /> <br /> == svcCreateDeviceAddressSpace ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || u64 || StartAddr<br /> |-<br /> | (In) X2 || u64 || EndAddr<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || Handle&lt;DeviceAddressSpace&gt; || AddressSpaceHandle<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Creates a virtual address space for binding device address spaces and returns a handle.<br /> <br /> dev_as_start_addr is normally set to 0 and dev_as_end_addr is normally set to 0xFFFFFFFF.<br /> <br /> == svcAttachDeviceAddressSpace ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || [[#DeviceName]] || DeviceId<br /> |-<br /> | (In) X1 || Handle&lt;DeviceAddressSpace&gt; || DeviceAsHandle<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Attaches a device address space to a [[#DeviceName|device]].<br /> <br /> == svcDetachDeviceAddressSpace ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || [[#DeviceName]] || DeviceId<br /> |-<br /> | (In) X1 || Handle&lt;DeviceAddressSpace&gt; || DeviceAsHandle<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Detaches a device address space from a [[#DeviceName|device]].<br /> <br /> == svcMapDeviceAddressSpaceByForce ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;DeviceAddressSpace&gt; || DeviceAsHandle<br /> |-<br /> | (In) W1 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X2 || void* || SrcAddr<br /> |-<br /> | (In) X3 || u64 || DeviceAsSize<br /> |-<br /> | (In) X4 || u64 || DeviceAsAddr<br /> |-<br /> | (In) W5 || [[#Permission]] || Permissions<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Maps an attached device address space to an userspace address.<br /> <br /> dev_map_addr is the userspace destination address, while dev_as_addr is the source address between dev_as_start_addr and dev_as_end_addr (passed to [[#svcCreateDeviceAddressSpace]]).<br /> <br /> The userspace destination address must have the [[SVC#MemoryState|MapDeviceAllowed]] bit set. Bit [[SVC#MemoryAttribute|IsDeviceMapped]] will be set after mapping.<br /> <br /> == svcMapDeviceAddressSpaceAligned ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;DeviceAddressSpace&gt; || DeviceAsHandle<br /> |-<br /> | (In) W1 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X2 || void* || SrcAddr<br /> |-<br /> | (In) X3 || u64 || DeviceAsSize<br /> |-<br /> | (In) X4 || u64 || DeviceAsAddr<br /> |-<br /> | (In) W5 || [[#Permission]] || Permissions<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Maps an attached device address space to an userspace address.<br /> <br /> Same as [[#svcMapDeviceAddressSpaceByForce]], but the userspace destination address must have the [[SVC#MemoryState|MapDeviceAlignedAllowed]] bit set instead.<br /> <br /> == svcUnmapDeviceAddressSpace ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;DeviceAddressSpace&gt; || DeviceAsHandle<br /> |-<br /> | (In) W1 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X2 || void* || SrcAddr<br /> |-<br /> | (In) X3 || u64 || DeviceAsSize<br /> |-<br /> | (In) X4 || u64 || DeviceAsAddr<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Unmaps an attached device address space from an userspace address.<br /> <br /> == svcGetSystemInfo ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || u64 || InfoId<br /> |-<br /> | (In) W2 || Handle || Handle<br /> |-<br /> | (In) X3 || u64 || InfoSubId<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) X1 || u64 || Out<br /> |}<br /> &lt;/div&gt;<br /> <br /> {| class=wikitable<br /> ! Handle type || Id0 || Id1 || Description<br /> |-<br /> | Zero || 0 || 0 || TotalMemorySize_Application<br /> |-<br /> | Zero || 0 || 1 || TotalMemorySize_Applet<br /> |-<br /> | Zero || 0 || 2 || TotalMemorySize_System<br /> |-<br /> | Zero || 0 || 3 || TotalMemorySize_SystemUnsafe<br /> |-<br /> | Zero || 1 || 0 || CurrentMemorySize_Application<br /> |-<br /> | Zero || 1 || 1 || CurrentMemorySize_Applet<br /> |-<br /> | Zero || 1 || 2 || CurrentMemorySize_System<br /> |-<br /> | Zero || 1 || 3 || CurrentMemorySize_SystemUnsafe<br /> |-<br /> | Zero || 2 || 0 || PrivilegedProcessId_LowerBound<br /> |-<br /> | Zero || 2 || 1 || PrivilegedProcessId_UpperBound<br /> |-<br /> |}<br /> <br /> == svcSetProcessMemoryPermission ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X1 || u64 || Addr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (In) W3 || void* || Perm<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> This sets the memory permissions for the specified memory with the supplied process handle.<br /> <br /> This throws an error(0xD801) when the input perm is &gt;0x5, hence -WX and RWX are not allowed.<br /> <br /> == svcMapProcessMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || u64 || DstAddr<br /> |-<br /> | (In) W1 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X2 || void* || SrcAddr<br /> |-<br /> | (In) X3 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Maps the src address from the supplied process handle into the current process.<br /> <br /> This allows mapping code and rodata with RW- permission.<br /> <br /> == svcUnmapProcessMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || void* || DstAddr<br /> |-<br /> | (In) W1 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X2 || u64 || SrcAddr<br /> |-<br /> | (In) X3 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Unmaps what was mapped by [[#svcMapProcessMemory]].<br /> <br /> == svcQueryProcessMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || [[#MemoryInfo]]* || MemInfoPtr<br /> |-<br /> | (In) W2 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X3 || u64 || Addr<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || PageInfo || PageInfo<br /> |}<br /> &lt;/div&gt;<br /> <br /> Equivalent to [[#svcQueryMemory]] except takes a process handle.<br /> <br /> == svcMapProcessCodeMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X1 || u64 || DstAddr<br /> |-<br /> | (In) X2 || u64 || SrcAddr<br /> |-<br /> | (In) X3 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Takes a process handle, and maps normal heap in that process as executable code in that process. Used when loading NROs. This does not support using the current-process handle alias.<br /> <br /> == svcUnmapProcessCodeMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X1 || u64 || DstAddr<br /> |-<br /> | (In) X2 || u64 || SrcAddr<br /> |-<br /> | (In) X3 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Unmaps what was mapped by [[#svcMapProcessCodeMemory]].<br /> <br /> == svcCreateProcess ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || [[#CreateProcessInfo]]* || InfoPtr<br /> |-<br /> | (In) X2 || u64 || CapabilitiesPtr<br /> |-<br /> | (In) X3 || u64 || CapabilitiesNum<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || Handle&lt;Process&gt; || ProcessHandle<br /> |}<br /> &lt;/div&gt;<br /> <br /> Takes a [[#CreateProcessInfo]] as input.<br /> <br /> == svcGetProcessInfo ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || [[#ProcessState]] || State<br /> |}<br /> &lt;/div&gt;<br /> <br /> Returns an enum with value 0-7.<br /> <br /> == Debugging ==<br /> [2.0.0+] Exactly 6 debug SVCs require that [[SPL_services#GetConfig|IsDebugMode]] is non-zero. Error 0x4201 is returned otherwise.<br /> * svcBreakDebugProcess<br /> * svcContinueDebugEvent<br /> * svcWriteDebugProcessMemory<br /> * svcSetDebugThreadContext<br /> * svcTerminateDebugProcess<br /> * svcSetHardwareBreakPoint<br /> <br /> svcDebugActiveProcess stops execution of the target process, the normal method for resuming it requires svcContinueDebugEvent(see above). Closing the debug handle also results in execution being resumed.<br /> <br /> == svcSetHardwareBreakPoint ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || u32 || hardware_breakpoint_id<br /> |-<br /> | (In) W1 || u64 || flags<br /> |-<br /> | (In) W2 || u64 || value<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Sets one of the AArch64 hardware breakpoints. The nintendo switch has 6 hardware breakpoints, and 4 hardware watchpoints. The syscall has two behaviors depending on the value of hardware_breakpoint_id:<br /> <br /> If hardware_breakpoint_id &lt; 0x10, then it sets one of the AArch64 hardware breakpoints. Flags will go to DBGBCRn_EL1, and value to DBGBVRn_EL1. The only flags the user is allowed to set are those in the bitmask 0x7F01E1. Furthermore, the kernel will or it with 0x4004, in order to set various security flags to guarantee the watchpoints only triggers for code in EL0. If the user asks for a Breakpoint Type of ContextIDR match, the kernel shall use the given debug_handle to set DBGBVRn_EL1 to the ContextID of the debugged process.<br /> <br /> <br /> If hardware_breakpoint_id is between 0x10 and 0x20 (exclusive), then it sets one of the AArch64 hardware watchpoints. Flags will go to DBGWCRn_EL1, and the value to DBGWVRn_EL1. The only flags the user is allowed to set are those in the bitmask 0xFF0F1FF9. Furthermore, the kernel will or it with 0x104004. This will set various security flags, and set the watchpoint type to be a Linked Watchpoint. This means that you need to link it to a Linked ContextIDR breakpoint. Check the ARM documentation for more information.<br /> <br /> Note that hardware_breakpoint_id 0 to 4 match only to Virtual Address, while hardware_breakpoint_id 5 and 6 match against either Virtual Address, ContextID, or VMID. As such, if you are configuring a breakpoint to link for a watchpoint, make sure you use hardware_breakpoint_id 5 or 6.<br /> <br /> <br /> For more documentation for hardware breakpoints, check out the AArch64 documentation for the [http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.ddi0488h/way1382455558968.html DBGBCRn_EL1 register] and the [http://infocenter.arm.com/help/topic/com.arm.doc.ddi0488h/way1382455560629.html DBGWCRn_EL1 register]<br /> <br /> = Enum/Structures =<br /> == ThreadContextRequestFlags ==<br /> Bitfield of one of more of these:<br /> <br /> {| class=wikitable<br /> ! Bit || Bitmask || Name<br /> |-<br /> | 0 || 1 || NormalContext<br /> |-<br /> | 1 || 2 ||<br /> |-<br /> | 2 || 4 ||<br /> |-<br /> | 3 || 8 ||<br /> |}<br /> <br /> == DeviceName ==<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || DeviceName_AFI<br /> |-<br /> | 1 || DeviceName_AVPC<br /> |-<br /> | 2 || DeviceName_DC<br /> |-<br /> | 3 || DeviceName_DCB<br /> |-<br /> | 4 || DeviceName_HC<br /> |-<br /> | 5 || DeviceName_HDA<br /> |-<br /> | 6 || DeviceName_ISP2<br /> |-<br /> | 7 || DeviceName_MSENCNVENC<br /> |-<br /> | 8 || DeviceName_NV<br /> |-<br /> | 9 || DeviceName_NV2<br /> |-<br /> | 10 || DeviceName_PPCS<br /> |-<br /> | 11 || DeviceName_SATA<br /> |-<br /> | 12 || DeviceName_VI<br /> |-<br /> | 13 || DeviceName_VIC<br /> |-<br /> | 14 || DeviceName_XUSB_HOST<br /> |-<br /> | 15 || DeviceName_XUSB_DEV<br /> |-<br /> | 16 || DeviceName_TSEC<br /> |-<br /> | 17 || DeviceName_PPCS1<br /> |-<br /> | 18 || DeviceName_DC1<br /> |-<br /> | 19 || DeviceName_SDMMC1A<br /> |-<br /> | 20 || DeviceName_SDMMC2A<br /> |-<br /> | 21 || DeviceName_SDMMC3A<br /> |-<br /> | 22 || DeviceName_SDMMC4A<br /> |-<br /> | 23 || DeviceName_ISP2B<br /> |-<br /> | 24 || DeviceName_GPU<br /> |-<br /> | 25 || DeviceName_GPUB<br /> |-<br /> | 26 || DeviceName_PPCS2<br /> |-<br /> | 27 || DeviceName_NVDEC<br /> |-<br /> | 28 || DeviceName_APE<br /> |-<br /> | 29 || DeviceName_SE<br /> |-<br /> | 30 || DeviceName_NVJPG<br /> |-<br /> | 31 || DeviceName_HC1<br /> |-<br /> | 32 || DeviceName_SE1<br /> |-<br /> | 33 || DeviceName_AXIAP<br /> |-<br /> | 34 || DeviceName_ETR<br /> |-<br /> | 35 || DeviceName_TSECB<br /> |-<br /> | 36 || DeviceName_TSEC1<br /> |-<br /> | 37 || DeviceName_TSECB1<br /> |-<br /> | 38 || DeviceName_NVDEC1<br /> |}<br /> <br /> == CodeMemoryOperation ==<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || CodeMemoryOperation_MapOwner<br /> |-<br /> | 1 || CodeMemoryOperation_MapSlave<br /> |-<br /> | 2 || CodeMemoryOperation_UnmapOwner<br /> |-<br /> | 3 || CodeMemoryOperation_UnmapSlave<br /> |}<br /> <br /> <br /> == LimitableResource ==<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || LimitableResource_Memory<br /> |-<br /> | 1 || LimitableResource_Threads<br /> |-<br /> | 2 || LimitableResource_Events<br /> |-<br /> | 3 || LimitableResource_TransferMemories<br /> |-<br /> | 4 || LimitableResource_Sessions<br /> |}<br /> <br /> == ProcessInfoType ==<br /> <br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || [[#ProcessState|ProcessInfoType_ProcessState]]<br /> |-<br /> |}<br /> <br /> == ProcessState ==<br /> {| class=wikitable<br /> ! Value || Name || Notes<br /> |-<br /> | 0 || ProcessState_Created ||<br /> |-<br /> | 1 || ProcessState_CreatedAttached ||<br /> |-<br /> | 2 || ProcessState_Started ||<br /> |-<br /> | 3 || ProcessState_Crashed || Processes will not enter this state unless they were created with [[#CreateProcessInfo|EnableDebug]].<br /> |-<br /> | 4 || ProcessState_StartedAttached ||<br /> |-<br /> | 5 || ProcessState_Exiting ||<br /> |-<br /> | 6 || ProcessState_Exited ||<br /> |-<br /> | 7 || ProcessState_DebugSuspended ||<br /> |}<br /> <br /> == DebugThreadParam ==<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || DebugThreadParam_DynamicPriority<br /> |-<br /> | 1 || DebugThreadParam_SchedulingStatus<br /> |-<br /> | 2 || DebugThreadParam_PreferredCpuCore<br /> |-<br /> | 3 || DebugThreadParam_CurrentCpuCore<br /> |-<br /> | 4 || DebugThreadParam_AffinityMask<br /> |}<br /> <br /> Dynamic priority: output in out2<br /> <br /> Scheduling status: out1 contains bit0: is debug-suspended, bit1: is user-suspended (svcSetThreadActivity 1 or svcSetProcessActivity 1).<br /> Out2 contains {suspended, idle, running, terminating} =&gt; {5, 0, 1, 4}<br /> <br /> DebugThreadParam_PreferredCpuCore: output in out2<br /> <br /> DebugThreadParam_CurrentCpuCore: output in out2<br /> <br /> DebugThreadParam_AffinityMask: output in out1<br /> <br /> == CreateProcessInfo ==<br /> {| class=wikitable<br /> ! Offset || Length || Bits || Description<br /> |-<br /> | 0 || 12 || || ProcessName (doesn't have to be null-terminated)<br /> |-<br /> | 0 || 4 || || ProcessCategory (0: regular title, 1: kernel built-in)<br /> |-<br /> | 0x10 || 8 || || TitleId<br /> |-<br /> | 0x18 || 8 || || CodeAddr<br /> |-<br /> | 0x20 || 4 || || CodeNumPages<br /> |-<br /> | 0x24 || 4 || || MmuFlags<br /> |-<br /> | || || Bit0 || IsAarch64<br /> |-<br /> | || || Bit3-1 || [[#AddressSpaceType]]<br /> |-<br /> | || || Bit4 || [2.0.0+] EnableDebug<br /> |-<br /> | || || Bit5 || EnableAslr<br /> |-<br /> | || || Bit6 || UseSystemMemBlocks<br /> |-<br /> | || || Bit7 || [4.0.0] ?<br /> |-<br /> | || || Bit10-7 || [5.0.0+] PoolPartition (0=Application, 1=Applet, 2=Sysmodule, 3=Nvservices)<br /> |-<br /> | 0x28 || 4 || || ResourceLimitHandle or zero<br /> |-<br /> | 0x2C || 4 || || [3.0.0+] PersonalMmHeapNumPages<br /> |}<br /> <br /> On [1.0.0] there's only one pool.<br /> <br /> On [2.0.0-4.0.0] PoolPartition is 1 for built-ins and 0 for rest.<br /> <br /> On [5.0.0] PoolPartition is specified in CreateProcessArgs. There are now 4 pool partitions.<br /> <br /> On [6.0.0] (maybe lower?) a zero ResourceLimitHandle defaults to sysmodule limits and 0x12300000 bytes of memory.<br /> <br /> === AddressSpaceType ===<br /> {| class=wikitable<br /> ! Type || Name || Width || Description<br /> |-<br /> | 0 || Normal_32Bit || 32 ||<br /> |-<br /> | 1 || Normal_36Bit || 36 ||<br /> |-<br /> | 2 || WithoutMap_32Bit || 32 || Appears to be missing map region [?]<br /> |-<br /> | 3 || [2.0.0+] Normal_39Bit || 39 ||<br /> |}<br /> <br /> == MemoryInfo ==<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0 || 8 || BaseAddress<br /> |-<br /> | 8 || 8 || Size<br /> |-<br /> | 0x10 || 4 || MemoryType: lower 8 bits of [[#MemoryState]]<br /> |-<br /> | 0x14 || 4 || [[#MemoryAttribute]]<br /> |-<br /> | 0x18 || 4 || Permission (bit0: R, bit1: W, bit2: X)<br /> |-<br /> | 0x1C || 4 || IpcRefCount<br /> |-<br /> | 0x20 || 4 || DeviceRefCount<br /> |-<br /> | 0x24 || 4 || Padding: always zero<br /> |}<br /> <br /> == MemoryAttribute ==<br /> {| class=wikitable<br /> ! Bits || Description<br /> |-<br /> | 0 || IsBorrowed<br /> |-<br /> | 1 || IsIpcMapped: when IpcRefCount &gt; 0.<br /> |-<br /> | 2 || IsDeviceMapped: when DeviceRefCount &gt; 0.<br /> |-<br /> | 3 || IsUncached<br /> |}<br /> <br /> == MemoryState ==<br /> {| class=wikitable<br /> ! Bits || Description<br /> |-<br /> | 7-0 || Type<br /> |-<br /> | 8 || [[#svcSetMemoryPermission|PermissionChangeAllowed]]<br /> |-<br /> | 9 || ForceReadWritableByDebugSyscalls<br /> |-<br /> | 10 || IpcSendAllowed_Type0<br /> |-<br /> | 11 || IpcSendAllowed_Type3<br /> |-<br /> | 12 || IpcSendAllowed_Type1<br /> |-<br /> | 14 || [[#svcSetProcessMemoryPermission|ProcessPermissionChangeAllowed]]<br /> |-<br /> | 15 || [[#svcMapMemory|MapAllowed]]<br /> |-<br /> | 16 || [[#svcUnmapProcessCodeMemory|UnmapProcessCodeMemoryAllowed]]<br /> |-<br /> | 17 || [[#svcCreateTransferMemory|TransferMemoryAllowed]]<br /> |-<br /> | 18 || [[#svcQueryPhysicalAddress|QueryPhysicalAddressAllowed]]<br /> |-<br /> | 19 || MapDeviceAllowed ([[#svcMapDeviceAddressSpace]] and [[#svcMapDeviceAddressSpaceByForce]])<br /> |-<br /> | 20 || [[#svcMapDeviceAddressSpaceAligned|MapDeviceAlignedAllowed]]<br /> |-<br /> | 21 || [[#svcSendSyncRequestWithUserBuffer|IpcBufferAllowed]]<br /> |-<br /> | 22 || IsPoolAllocated/IsReferenceCounted<br /> |-<br /> | 23 || [[#svcMapProcessMemory|MapProcessAllowed]]<br /> |-<br /> | 24 || [[#svcSetMemoryAttribute|AttributeChangeAllowed]]<br /> |-<br /> | 25 || [4.0.0+] CodeMemoryAllowed<br /> |}<br /> <br /> {| class=wikitable<br /> ! Value || Type || Meaning<br /> |-<br /> | 0x00000000 || MemoryType_Unmapped ||<br /> |-<br /> | 0x00002001 || MemoryType_Io || Mapped by kernel capability parsing in [[#svcCreateProcess]]. <br /> |-<br /> | 0x00042002 || MemoryType_Normal || Mapped by kernel capability parsing in [[#svcCreateProcess]].<br /> |-<br /> | 0x00DC7E03 || MemoryType_CodeStatic || Mapped during [[#svcCreateProcess]].<br /> |-<br /> | [1.0.0+]<br /> <br /> 0x01FEBD04<br /> <br /> [4.0.0+]<br /> <br /> 0x03FEBD04<br /> || MemoryType_CodeMutable || Transition from 0xDC7E03 performed by [[#svcSetProcessMemoryPermission]].<br /> |-<br /> | [1.0.0+]<br /> 0x017EBD05<br /> <br /> [4.0.0+]<br /> <br /> 0x037EBD05<br /> || MemoryType_Heap || Mapped using [[#svcSetHeapSize]].<br /> |-<br /> | 0x00402006 || MemoryType_SharedMemory || Mapped using [[#svcMapSharedMemory]].<br /> |-<br /> | 0x00482907 || [1.0.0] MemoryType_Alias || Mapped using [[#svcMapMemory]].<br /> |-<br /> | 0x00DD7E08 || MemoryType_ModuleCodeStatic || Mapped using [[#svcMapProcessCodeMemory]].<br /> |-<br /> | [1.0.0+]<br /> <br /> 0x01FFBD09<br /> <br /> [4.0.0+]<br /> <br /> 0x03FFBD09<br /> || MemoryType_ModuleCodeMutable || Transition from 0xDD7E08 performed by [[#svcSetProcessMemoryPermission]].<br /> |-<br /> | 0x005C3C0A || [[IPC_Marshalling|MemoryType_IpcBuffer0]] || IPC buffers with descriptor flags=0.<br /> |-<br /> | 0x005C3C0B || MemoryType_Stack || Mapped using [[#svcMapMemory]].<br /> |-<br /> | 0x0040200C || [[Thread Local Storage|MemoryType_ThreadLocal]] || Mapped during [[#svcCreateThread]].<br /> |-<br /> | 0x015C3C0D || MemoryType_TransferMemoryIsolated || Mapped using [[#svcMapTransferMemory]] when the owning process has perm=0.<br /> |-<br /> | 0x005C380E || MemoryType_TransferMemory || Mapped using [[#svcMapTransferMemory]] when the owning process has perm!=0.<br /> |-<br /> | 0x0040380F || MemoryType_ProcessMemory || Mapped using [[#svcMapProcessMemory]].<br /> |-<br /> | 0x00000010 || MemoryType_Reserved ||<br /> |-<br /> | 0x005C3811 || [[IPC_Marshalling|MemoryType_IpcBuffer1]] || IPC buffers with descriptor flags=1.<br /> |-<br /> | 0x004C2812 || [[IPC_Marshalling|MemoryType_IpcBuffer3]] || IPC buffers with descriptor flags=3.<br /> |-<br /> | 0x00002013 || MemoryType_KernelStack || Mapped in kernel during [[#svcCreateThread]].<br /> |-<br /> | 0x00402214 || [4.0.0+] MemoryType_CodeReadOnly || Mapped in kernel during [[#svcControlCodeMemory]].<br /> |-<br /> | 0x00402015 || [4.0.0+] MemoryType_CodeWritable || Mapped in kernel during [[#svcControlCodeMemory]].<br /> |}<br /> <br /> == ArbitrationType ==<br /> <br /> {| class=wikitable<br /> ! Value || Type<br /> |-<br /> | 0x0 || WaitIfLessThan<br /> |-<br /> | 0x1 || DecrementAndWaitIfLessThan<br /> |-<br /> | 0x2 || WaitIfEqual<br /> |-<br /> |}<br /> <br /> == SignalType ==<br /> <br /> {| class=wikitable<br /> ! Value || Type<br /> |-<br /> | 0x0 || Signal<br /> |-<br /> | 0x1 || SignalAndIncrementIfEqual<br /> |-<br /> | 0x2 || SignalAndModifyBasedOnWaitingThreadCountIfEqual<br /> |-<br /> |}<br /> <br /> == ContinueDebugFlagsOld ==<br /> [1.0.0-2.3.0]<br /> <br /> {| class=wikitable<br /> ! Bit || Bitmask || Description<br /> |-<br /> | 0 || 1 || IgnoreException (note: ResumeAllThreads or debug-suspended-thread-id needed)<br /> |-<br /> | 1 || 2 || SwallowException<br /> |-<br /> | 2 || 4 || ResumeAllThreads<br /> |}<br /> <br /> == ContinueDebugFlags ==<br /> [3.0.0+]<br /> <br /> {| class=wikitable<br /> ! Bit || Bitmask || Description<br /> |-<br /> | 0 || 1 || IgnoreException (note: doesn't need to be set in the same call than Resume)<br /> |-<br /> | 1 || 2 || DontCatchExceptions<br /> |-<br /> | 2 || 4 || Resume<br /> |-<br /> | 3 || 8 || IgnoreOtherThreadsExceptions<br /> |}<br /> <br /> IgnoreExceptionsOfOthers is like IgnoreException but acts on all threads that aren't in the input list. The affected threads are resumed.<br /> <br /> Only one of of Resume and IgnoreOtherThreadsExceptions can be set at a time.<br /> <br /> If the input number of threads is 0, this means &quot;all threads&quot;.<br /> <br /> == DebugEventInfo ==<br /> <br /> The below table is for the Aarch64 version of the system call. For A32, all u64 fields but title/process/thread id are actually u32, making the structure 0x28-byte-big (0x40 for a64).<br /> <br /> Size: 0x40<br /> <br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0 || u32 || EventType<br /> |-<br /> | 4 || u32 || Flags (bit0: NeedsContinue)<br /> |-<br /> | 8 || u64 || ThreadId<br /> |-<br /> | 0x10 || || PerTypeSpecifics<br /> |}<br /> <br /> AttachProcess specific:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x10 || u64 || TitleId<br /> |-<br /> | 0x18 || u64 || ProcessId<br /> |-<br /> | 0x20 || char[12] || ProcessName<br /> |-<br /> | 0x2C || u32 || MmuFlags<br /> |-<br /> | 0x30 || u64 || [5.0.0+] UserExceptionContextAddr<br /> |}<br /> <br /> AttachThread specific:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x10 || u64 || ThreadId<br /> |-<br /> | 0x18 || u64 || TlsPtr<br /> |-<br /> | 0x20 || u64 || Entrypoint<br /> |}<br /> <br /> Exit specific:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x10 || u32|| Type (0=PausedThread, 1=RunningThread, 2=ExitedProcess, 3=TerminatedProcess)<br /> |}<br /> <br /> Exception specific:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x10 || u32 || ExceptionType<br /> |-<br /> | 0x18 || u64 || FaultRegister<br /> |-<br /> | 0x20 || || PerExceptionSpecifics<br /> |}<br /> <br /> === DebugEventType ===<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || DebugEvent_AttachProcess<br /> |-<br /> | 1 || DebugEvent_AttachThread<br /> |-<br /> | 2 || DebugEvent_ExitProcess<br /> |-<br /> | 3 || DebugEvent_ExitThread<br /> |-<br /> | 4 || DebugEvent_Exception<br /> |}<br /> <br /> === DebugExceptionType ===<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || Exception_Trap (*)<br /> |-<br /> | 1 || Exception_InstructionAbort<br /> |-<br /> | 2 || Exception_DataAbortMisc (**)<br /> |-<br /> | 3 || Exception_PcSpAlignmentFault<br /> |-<br /> | 4 || Exception_DebuggerAttached<br /> |-<br /> | 5 || Exception_BreakPoint<br /> |-<br /> | 6 || Exception_UserBreak<br /> |-<br /> | 7 || Exception_DebuggerBreak<br /> |-<br /> | 8 || Exception_BadSvcId<br /> |-<br /> | 9 || Exception_SError [not in 1.0.0]<br /> |}<br /> <br /> &lt;nowiki&gt;*&lt;/nowiki&gt; Undefined instructions, software breakpoints, some other traps.<br /> <br /> &lt;nowiki&gt;**&lt;/nowiki&gt; Data aborts, FP traps, and everything else that doesn't belong to any of the above.<br /> <br /> Trap specifics:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x20 || u32 || Opcode<br /> |}<br /> <br /> BreakPoint specifics:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x20 || u32 || IsWatchpoint<br /> |}<br /> <br /> UserBreak specifics:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x20 || u32 || Info0<br /> |-<br /> | 0x28 || u64 || Info1<br /> |-<br /> | 0x30 || u64 || Info2<br /> |}<br /> <br /> BadSvcId specifics:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x20 || u32 || SvcId<br /> |}<br /> <br /> = Exception handling =<br /> First of all, a function that might be called by synchronous exception handler and that is called by the SError handler fetches the exception info, adjusts PC, panics on exceptions taken from EL1, then dispatches the exception.<br /> <br /> The dispatcher has two mutually exclusive exception reporting methods:<br /> * by storing information at the start of the process's TLS memregion (TPIDRRO_EL0) and jumping back to the crt0<br /> * by using KDebug<br /> <br /> KDebug dispatching is used when at least one of the following conditions are met:<br /> * SMC ConfigItem KernelMemConfig bit 1 is NOT set (it isn't on retail), unless: this is a software or hardware breakpoint, or a watchpoint, or [4.0.0+?] the process is attached and this is a Google PNaCl trap instruction (see LLVM source)<br /> * FAR doesn't point to a valid address in mapped-readable CodeStatic memory (i.e. this is the case for NRO and JIT memory) or this is one of the following exceptions (it particular, that doesn't include FP exceptions occurring in CodeStatic memory):<br /> ** Uncategorized<br /> ** IllegalState<br /> ** SupervisorCallA32<br /> ** SupervisorCallA64<br /> ** PCAlignment<br /> ** SPAlignment<br /> ** SError<br /> ** BreakpointLowerEl<br /> ** SoftwareStepLowerEl (note: no way set single-step flag; not parsed)<br /> ** WatchpointLowerEl<br /> ** SoftwareBreakpointA32 (note: not parsed)<br /> ** SoftwareBreakpointA64 (note: not parsed)<br /> <br /> In all other cases the userland-handled exception path is taken.<br /> <br /> KDebug path:<br /> <br /> If the process is attached, the exception is reported to the KDebug. If the thread was continued using flag IgnoreExceptions, it returns from the exception as if nothing happened.<br /> <br /> If the latter is not the case, or if the process isn't attached, proceed to [2.0.0+] crash reporting (or in [1.0.0] just terminate the process): <br /> if EnableDebug is set, and depending on the process state (more than one crash per process isn't permitted) it may signal itself with ProcessState_Crashed so that PM asks NS to start creport so that creport attaches to it and reports the crashes. Otherwise, just terminate.<br /> <br /> Userland reporting path and svcReturnFromException:<br /> <br /> TLS region start (A64):<br /> <br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x0 || 0x148 || Exception stack<br /> |-<br /> | 0x148 || 0x78 || ExceptionFrameA64<br /> |}<br /> <br /> ExceptionFrameA64:<br /> <br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x0 || 0x48 (8*9) || GPRs 0..8.<br /> |-<br /> | 0x48 || 0x8 || lr<br /> |-<br /> | 0x50 || 0x8 || sp<br /> |-<br /> | 0x58 || 0x8 || pc (elr_el1)<br /> |-<br /> | 0x60 || 0x4 || pstate &amp; 0xFF0FFE20<br /> |-<br /> | 0x64 || 0x4 || afsr0<br /> |-<br /> | 0x68 || 0x4 || afsr1<br /> |-<br /> | 0x6C || 0x4 || esr<br /> |-<br /> | 0x70 || 0x8 || far<br /> |}<br /> <br /> TLS region start (A32):<br /> <br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x0 || 0x178 || Exception stack<br /> |-<br /> | 0x148 || 0x44 || ExceptionFrameA32<br /> |}<br /> <br /> ExceptionFrameA32:<br /> <br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x0 || 0x20 (8*4) || GPRs 0..7.<br /> |-<br /> | 0x20 || 0x4 || sp<br /> |-<br /> | 0x24 || 0x4 || lr<br /> |-<br /> | 0x28 || 0x4 || pc (elr_el1)<br /> |-<br /> | 0x2C || 0x4 || tpidr_el0 = 1<br /> |-<br /> | 0x30 || 0x4 || cpsr &amp; 0xFF0FFE20<br /> |-<br /> | 0x34 || 0x4 || afsr0<br /> |-<br /> | 0x38 || 0x4 || afsr1<br /> |-<br /> | 0x3C || 0x4 || esr<br /> |-<br /> | 0x40 || 0x4 || far<br /> |}<br /> <br /> In that case, after storing the regs in the TLS, the exception handler returns to the application's crt0 (entrypoint), with X0=&lt;error description code&gt; (see below) and X1=SP=frame=&lt;stack top&gt; (see above)<br /> <br /> <br /> {| class=wikitable<br /> ! Desc. code || Meaning<br /> |-<br /> | 0x100 || Instruction abort<br /> |-<br /> | 0x102 || Misaligned PC<br /> |-<br /> | 0x103 || Misaligned SP<br /> |-<br /> | 0x106 || SError [not in 1.0.0?]<br /> |-<br /> | 0x301 || Bad SVC<br /> |-<br /> | 0x104 || Uncategorized, CP15RTTrap, CP15RRTTrap, CP14RTTrap, CP14RRTTrap, IllegalState, SystemRegisterTrap<br /> |-<br /> | 0x101 || None of the above, EC &lt;= 0x34 and not a breakpoint<br /> |-<br /> |}<br /> <br /> (During normal app boot the process is invoked with X0=0 and X1=main_thread_handle. The crt0 of retail apps determines whether to boot normally or handle an exception if X0 is set to 0 or not)<br /> <br /> The application is supposed to promptly update the contents of elr_el1 to a user handler (and any other regs it sees fit) and call svcReturnFromException (error code) to call that handler. The latter is then expected to promptly abort the program.<br /> <br /> svcReturnFromException updates the contents of the kernel stack frame with what the user provided in the TLS structure, sets TPIDR_EL0 to 1, then:<br /> * if the provided error code is 0, gracefully pivots and returns from exception<br /> * if it is not, replays the exception and pass it to the KDebug (see above). One can pass 0x10001 to prevent process termination. If the process is attached, this also prevents crash-collection/termination (different from the exception handler behavior)<br /> <br /> If an exception occurs from the above user handler, the entire exception handling process will repeat with the new exception.<br /> <br /> Note that if a thread that wasn't faulting calls svcReturnFromException, it signals an &quot;invalid syscall&quot; exception<br /> <br /> Note that [[SMC|IsDebugMode]] is not used during exception-handling, except for enabling printing a message to UART-A. This UART code causes a system-hang on retail (likely due to a loop that doesn't exit). This printing doesn't seem to run when the process is attached for debugging?</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=6.2.0&diff=5581 2018-11-21T23:01:15Z

<p>Shinyquagsire23: </p> <hr /> <div>The Switch 6.2.0 system update was released on November 19, 2018. This Switch update was released for the following regions: ALL.<br /> <br /> Security flaws fixed: Yes<br /> <br /> This update burns an additional fuse and has a fuse count of 8.<br /> <br /> 6.2.0 changes fundamental key generation, no longer using keyblobs at all (the OS will boot successfully even if both copies of keyblob are replaced with FFs in NAND).<br /> <br /> ==Change-log==<br /> [https://en-americas-support.nintendo.com/app/answers/detail/a_id/22525/p/897 Official] ALL change-log:<br /> * General system stability improvements to enhance the user's experience.<br /> <br /> ==System Titles==<br /> &lt;fill this in (manually) later&gt;<br /> <br /> ''All'' titles were updated (including flog) except for EULA, all of these (besides FIRM titles) use the new keydata.<br /> <br /> ==FIRM==<br /> Warmboot has been updated.<br /> <br /> ==See Also==<br /> System update report(s):<br /> * [https://yls8.mtheall.com/ninupdates/reports.php?date=11-19-18_07-05-09&amp;sys=hac]<br /> <br /> <br /> {{NavboxVersions}}<br /> <br /> [[Category:System versions]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Title_list/Games&diff=5493 2018-11-09T00:12:46Z

<p>Shinyquagsire23: </p> <hr /> <div>Note: Game updates have the same titleID as the main application, except with bitmask 0x800 set.<br /> <br /> = Applications / Games =<br /> {| class=&quot;wikitable sortable&quot;<br /> ! TitleID || Description || Region || Minimum Required OS || Distribution Method || Title Versions || Cartridge Description || Type<br /> |-<br /> | 0100000000010000 || Super Mario Odyssey™ || CHN EUR JPN KOR USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01000040098E4000 || Layers of Fear: Legacy (レイヤーズ・オブ・フィアー：レガシー) || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000060085D2000 || A Hole New World || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010000700A572000 || State of Anarchy: Master of Mayhem || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010000A00218E000 || スプラトゥーン２ 先行試射会 || JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010000E004DAE000 || ファンタシースターオンライン2 クラウド || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100011005D92000 || Batman - The Telltale Series || EUR USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100016007154000 || Antiquia Lost || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100017007980000 || Hotel Transylvania 3: Monsters Overboard || EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010001B005E5C000 || Double Dragon 4 || CHN EUR JPN KOR USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100023009C72000 || 30-in-1 Game Collection: Volume 1 || EUR || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100024008310000 || Street Fighter™ 30th Anniversary Collection || EUR USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010002800B818000 || Velocity®2X || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010002900294A000 || NBA Playgrounds || EUR USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010002D00632E000 || Yoku's Island Express || EUR JPN USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010002F001220000 || NAMCO MUSEUM || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010002F009A7A000 || Road To Ballhalla || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01000320000CC000 || 1-2-Switch™ || CHN EUR JPN KOR USA || 1.0.0 || Digital / Cartridge || 0 65536 || Gamecard Front: LA-H-AACCA-{region} Back: AACCA22Y000 || Application / Game<br /> |-<br /> | 0100C11009378000 || 戦場のヴァルキュリア４ || CHN JPN KOR || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010003700B11A000 || Shining Resonance Refrain || CHN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010003900350C000 || シノビリフレ -SENRAN KAGURA- || JPN || 3.0.1 || Digital || 0 65536 131072 196608 262144 327680 393216 458752 || || Application / Game<br /> |-<br /> | 010003C0099EE000 || PLANET ALPHA || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010003C00B868000 || Ninjin: Clash of Carrots || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010087000428E000 || Plantera Deluxe || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010003E0099AC000 || Happy Birthdays || CHN JPN KOR || 3.0.1 || Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100047009742000 || Twin Robots: Ultimate Edition || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01000490067AE000 || Frederic 2: Evil Strikes Back || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010004A007890000 || MAX マジックマーカーと兄弟の絆 || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010004C00ACE0000 || Nihilumbra ニヒラブラ || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010005000B244000 || 籠庭のクックロビン || JPN || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100052004384000 || Axiom Verge || EUR JPN USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100055007B86000 || Late Shift || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100059009EFE000 || Little Dragons Café || EUR || 5.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010005A00A4F4000 || Air Hockey || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010005A00B312000 || Megaton Rainfall || EUR USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010005C00B482000 || Night Trap - 25th Anniversary Edition || EUR || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100618004096000 || Robonauts Demo || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010006200949E000 || The Charming Empire || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100063005C86000 || Phantom Breaker: Battle Grounds Overdrive || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010006300AFFE000 || Life Goes On || USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100066004D68000 || This Is the Police || EUR USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010006600AE9C000 || Red's Kingdom || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000690085BE000 || Little Triangle || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010006A0042F0000 || 88 Heroes - 98 Heroes Edition || EUR JPN USA || 1.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010007100A16A000 || Eternal Edge || USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010007200AC0E000 || Don't Die, Mr Robot! || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000750084B2000 || Shiftlings - Enhanced Edition || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01000780068C8000 || ロストスター || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010007A00980C000 || Arcade Archives City CONNECTION || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01005C40037C6000 || I and Me || EUR USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010007C00B508000 || SNK Heroines Tag Team Frenzy || EUR || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010007E00A1A4000 || Henry The Hamster Handler || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010007F00879E000 || プリパラ　オールアイドルパーフェクトステージ！ || JPN || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 010007F00B9F0000 || Johnny Turbo's Arcade: Shoot Out || USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010008100B228000 || GEKIDO || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010008400A268000 || Another Lost Phone: Laura's Story || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000850037C0000 || The Count Lucanor || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100085003A2A000 || Cartoon Network: Battle Crashers || EUR || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100086005EDC000 || NARUTO－ナルト－ 疾風伝　ナルティメットストームトリロジー for Nintendo Switch || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010008800B18A000 || Super Destronaut DX || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010008900705C000 || Dragon Quest® Builders™ || EUR USA || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010008F00B054000 || Arcade Archives Sky Skipper || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010009000AC2A000 || 純・電愛｢私の瞳を見て！｣ ～山内もえ～ || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100091008272000 || Mini Metro || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01001D0003B96000 || INVERSUS Deluxe || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100092006814000 || Tennis World Tour || USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100095009236000 || Super Rocket Shootout || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010009800203E000 || WWE 2K18 || EUR JPN USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 010009900947A000 || Atelier Lydie &amp; Suelle ~The Alchemists and the Mysterious Paintings~ || EUR USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 010009E001D90000 || World of Goo || EUR USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010009F004E66000 || Transcripted || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01000A0004C50000 || FLASHBACK™ || EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01000A10041EA000 || The Elder Scrolls V: Skyrim || EUR KOR USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01000A400AF2A000 || 最悪なる災厄人間に捧ぐ || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000A800ADEE000 || KADOBAT WARS || JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000AA0093DC000 || Dream Alone || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01000B2006E06000 || レゴ®インクレディブル・ファミリー || JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01000B6007A3C000 || The Deer God || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000C800AFD6000 || ACA NEOGEO SAMURAI SHODOWN V || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01000C9004FA2000 || ACA NEOGEO ROBO ARMY || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01000C900A136000 || Kitten Squad || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01000CA004DCA000 || Human: Fall Flat || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 01000CE002072000 || The LEGO® NINJAGO® Movie Videogame || EUR || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01000CF0084BC000 || The Next Penelope || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01000D10038E6000 || ACA NEOGEO LAST RESORT || EUR JPN USA || 1.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01000D1006CEC000 || ATOMIK: RunGunJumpGun || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01000D1008714000 || ACA NEOGEO FATAL FURY 3 || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01000D200AC0C000 || Bud Spencer &amp; Terence Hill - Slaps And Beans || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000D5005974000 || N++ (NPLUSPLUS) || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01000D70049BE000 || Sword of the Guardian || USA || 5.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010021F004270000 || Spelunker Party! Demo Version || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000D9007C28000 || Cave Story+ || JPN || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01000DB00980A000 || Arcade Archives Ikki || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000DC007E90000 || Sparkle Unleashed || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000E00089FA000 || 協撃　カルテットファイターズ || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01000E10094D0000 || クリプト・オブ・ネクロダンサー体験版 || JPN || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01000E100A470000 || 東方計劃 不可思議的幻想鄉 TOD -RELOADED- Asia All-in-One Edition || CHN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01000E2003FA0000 || MIGHTY GUNVOLT BURST Demo || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 01000E30042F2000 || World to the West || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01000E400222A000 || Johnny Turbo's Arcade: Super Burger Time || USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000E600B05C000 || 魔界戰記DISGAEA Refine || CHN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01000E8009E1C000 || Shift Quantum || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01000EC007C22000 || TouchBattleTankSP || USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000F000AAF0000 || Kenshō || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000F1008C92000 || Sling Ming || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01000F20083A8000 || Tactical Mind || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01000F3008718000 || ACA NEOGEO POWER SPIKES II || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01000F400435A000 || Immortal Redneck || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01000F5003068000 || ブレイブダンジョン＋魔神少女COMBAT || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01000FA00A4E4000 || Garage || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01000FB008900000 || Midnight Deluxe || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01000FB00BAF6000 || ワールドサッカー　ピンボール || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010010A009830000 || Space Ribbon || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010010B003A26000 || Cartoon Network: Battle Crashers || USA || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010010B008A36000 || Arcade Archives Kid Niki Radical Ninja || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010010F004022000 || Touhou Kobuto V: Burst Battle || EUR USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100111004460000 || SONIC FORCES™ Digital Bonus Edition || EUR || 1.0.0 || Digital / Cartridge || 0 65536 || Gamecard Front: LA-H-ABQLB-{region} Back: ABQLB41A000 || Application / Game<br /> |-<br /> | 0100112003B8A000 || Slime-san Demo || EUR USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 010011200505A000 || 翔べよ!!ドラゴン！ || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01001180021FA000 || Shovel Knight: Specter of Torment || EUR USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100118009C68000 || Figment || EUR USA || 4.0.0 || Digital || 0 196608 || || Application / Game<br /> |-<br /> | || Runner3 || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 010011A00A9A8000 || Soccer Slammers || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010011B00910C000 || Kill The Bad Guy || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100125002060000 || バトルスポーツ めく〜る || JPN || 1.0.0 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100047009742000 || Twin Robots: Ultimate Edition || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01001270012B6000 || SONIC FORCES™ || USA || 1.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100128003A24000 || Elliot Quest || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100128005B42000 || Lost Castle || EUR || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010012B0086C0000 || ロックマンX アニバーサリー コレクション || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010012C0060F0000 || RXN -Raijin- || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010013300AFEA000 || チャリオット 王様パック || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010014200BD02000 || アイスクリームサーファー || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010014E004FA8000 || ACA NEOGEO KARNOV'S REVENGE || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 0100152000022000 || Mario Kart™ 8 Deluxe || CHN EUR JPN KOR USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 || Gamecard Front: LA-H-AABPA-{region} Back: AABPA22A000 || Application / Game<br /> |-<br /> | 0100153006300000 || 無双OROCHI２ Ultimate || JPN || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01001530097F8000 || Arcade Archives PUNCH-OUT!! || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100157004512000 || Severed || EUR USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010015A00AF1E000 || Whispering Willows || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010015D003EE4000 || The Jackbox Party Pack 2 || EUR USA || 3.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010015E00A1F8000 || ゴルフストーリー || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010015F005C8E000 || Tricky Towers || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100160009BF0000 || 数学力王　中学３年 || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100161009A52000 || POOL || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010016100A186000 || スチームワールドハイスト || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010016300A95A000 || Hexologic || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010016900AD24000 || 進化のひみつ || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006BB009004000 || わくわくどうぶつランド　体験版 || CHN JPN KOR || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010016B005CF8000 || Siegecraft Commander || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010016C009374000 || Lode Runner Legacy Demo Version || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010016D00A964000 || SilverStarChess || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010016E004796000 || Bridge Constructor Portal || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100170008560000 || セクシー・ブルテイル || JPN || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100170008728000 || ACA NEOGEO THE KING OF FIGHTERS '97 || EUR JPN USA || 5.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 010017500630C000 || 真・三國無双７ Empires || JPN || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010017600B09E000 || ステレデン　バイナリースターズ || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010017600B180000 || Polygod || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010017600B532000 || Piczle Lines DX 500 More Puzzles! || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010017600B580000 || わくわくスイーツ あまい おかしが できるかな？ || JPN || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100177005C8A000 || BUTCHER || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100178009648000 || Coffin Dodgers || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010017C00BE12000 || Gnomes Garden 3: The thief of castles || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100559004BB4000 || すみっコぐらし　すみっコパークへようこそ　体験版 || JPN || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010018C00954E000 || Darkest Dungeon || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010019000034A000 || カラオケJOYSOUND for Nintendo Switch || JPN || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100191006B98000 || ロロロロ　体験版 || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100192003FA4000 || Azure Striker GUNVOLT: STRIKER PACK || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100197008B52000 || GRIDD: Retroenhanced || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010019A0038FA000 || ACA NEOGEO FATAL FURY SPECIAL || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 01001A4008192000 || Gem Smashers || EUR USA || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01001A500AD6A000 || NORN9 LOFN for Nintendo Switch || JPN || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01001AE005166000 || Worms W.M.D || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01001AF008BDA000 || Zen Bound 2 || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01001B10068EC000 || Urban Trial Playground || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 01001B300B9BE000 || Diablo III: Eternal Collection || EUR USA || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01001B40086E2000 || The Bunker || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01001B700220A000 || レゴ®ニンジャゴー ムービー ザ・ゲーム || JPN || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01001BA00AE4E000 || Final Light, The Prison || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01001BB00AC26000 || STARSHIP AVENGER Operation: Take Back Earth || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01001BD00915A000 || ACA NEOGEO WORLD HEROES 2 || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01001BF00B54E000 || Spider Solitaire F || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01001C000ACD0000 || 테니스 월드 투어(Tennis World Tour) || KOR || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01001C1009892000 || すばらしきこのせかい -Final Remix- || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01001C40079BC000 || マーセナリーズサーガ クロニクルズ || JPN || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01001C9007614000 || Max: The Curse of Brotherhood (Demo) || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01001CC00416C000 || Rogue Trooper Redux || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01001D0003B96000 || INVERSUS Deluxe || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 01001D900AF6A000 || Super Toy Cars || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01001DE005012000 || Quest of Dungeons || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01001DE0076A4000 || Shu || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01001E300B038000 || World Soccer Pinball || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01001E40041BE000 || Scribblenauts: Showdown || EUR USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01001E500401C000 || Koi DX || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01001E5006C6E000 || Super Mario Odyssey™ Demo for KIOSK || USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01001E60085E6000 || Broken Sword 5 - the Serpent's Curse || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01001E9003502000 || Nintendo Labo Toy-Con 03: Drive Kit(ドライブ キット) || JPN || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01001ED0075EE000 || 死印 || JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01001EE00A6B0000 || Zotrix: Solar Division || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01001F600829A000 || Romancing SaGa 2 || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01001FA0034E2000 || Dark Witch Music Episode: Rudymical Demo || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01001FA009A1E000 || Mecha Storm || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01001FD0040F4000 || Brawlout || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01001FF00B544000 || NBA 2K19 || EUR JPN USA || 5.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010020300C218000 || Suicide Guy || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010020400B0A8000 || マリオテニス エース 発売前先行オンライン大会 || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100207007EB2000 || Smoke And Sacrifice || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010020700B432000 || D/Generation : The Original || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100211005E94000 || Mulaka || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 01003590089EA000 || Puzzle Puppers || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010021800B6C0000 || Cycle 28 || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100219008678000 || The Warlock of Firetop Mountain: Goblin Scourge Edition! || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010021A00ABEE000 || SKYPEACE || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010053D0001BE000 || ぷよぷよ™テトリス®Ｓ 体験版 || CHN JPN || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 010021C000B6A000 || The Binding of Isaac: Afterbirth+ || USA || 1.0.0 || Digital / Cartridge || 0 131072 || Gamecard Front: LA-H-BAAZA-USA Back: BAAZA20Y000 || Application / Game<br /> |-<br /> | 010021D00812A000 || Arcade Archives VS. SUPER MARIO BROS. || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010021D00ACA2000 || Never Stop || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010021F004270000 || Spelunker Party! Demo Version || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010021F00AD76000 || My Farm || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100224004004000 || Slain: Back From Hell || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100225000FEE000 || ブラスターマスター ゼロ 体験版 || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 01002290070E4000 || Red Game Without a Great Name || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010022A009368000 || Voxel Shot for Nintendo Switch（ボクセルショット） || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010022B00AD18000 || シークレットゲーム KILLER QUEEN for Nintendo Switch || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010022F005F14000 || NARUTO－ナルト－ 疾風伝　ナルティメットストーム３ || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100230005A52000 || Lovers in a Dangerous Spacetime || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01002310064B4000 || OF MICE AND SAND -REVISED- || CHN EUR JPN KOR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010023100B19A000 || Super Dungeon Tactics || EUR USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010023100B96E000 || Persian Nights: Sands of Wonders || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100AFE00452E000 || Tumblestone || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010023500B0BA000 || Nefarious || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010023900AEE0000 || Paladins - Founder's Pack || EUR JPN USA || 5.0.0 || Digital || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 || || Application / Game<br /> |-<br /> | 010023E008702000 || Spiral Splatter || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010023F008204000 || Haunted Dungeons：Hyakki Castle || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010024700901A000 || Gal*Gun 2 || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 010024A009428000 || Mad Carnage || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010024C001224000 || PAC-MAN™ Championship Edition 2 PLUS || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010024C0067C4000 || 2064: Read Only Memories INTEGRAL || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010024D0032F2000 || PHOTON³（フォトン・キューブ） || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 010024F008742000 || Chameleon Run Deluxe Edition || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100ABC00AAD0000 || 机でサッカー || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010025400AECE000 || Fortnite || EUR JPN USA || 5.0.0 || Digital || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 720896 786432 851968 917504 983040 1048576 1114112 1179648 1245184 || || Application / Game<br /> |-<br /> | || Wonder Boy: The Dragon's Trap || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 01002580038DE000 || ACA NEOGEO GALAXY FIGHT: UNIVERSAL WARRIORS || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 010025A0043EA000 || デッドハウス 再生 || JPN || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010025A00AACE000 || ホットギミック コスプレ雀 for Nintendo Switch || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100225000FEE000 || ブラスターマスター ゼロ 体験版 || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 010025E0092B6000 || Pirate Pop Plus || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100262009626000 || Epic Loon || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010026D00AABE000 || Moorhuhn Remake || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010027100372C000 || バルブ・ボーイ || JPN || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100271004570000 || Next Up Hero || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100273008FBC000 || Mercenaries Saga Chronicles || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100274004052000 || PAYDAY 2 || EUR USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100276009872000 || OKAMI HD || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010027F00AD6C000 || SNK HEROINES Tag Team Frenzy || USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01002820036A8000 || Sine Mora EX || EUR USA || 1.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100284007D6C000 || Super One More Jump || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010028C003FD6000 || Syberia 2 || EUR USA || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010028D0045CE000 || Sparkle 2 || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010028D004612000 || ボクと僕の世界で || JPN || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010028D005A3C000 || The Elder Scrolls V: Skyrim® || JPN || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010028F00ABAE000 || My Riding Stables – Life with Horses || EUR || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010029200AB1C000 || Prison Architect: Nintendo Switch™ Edition || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010029200B6AA000 || The Walking Dead: The Complete First Season || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | || The Coma: Recut (Retail Only) || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 01002970080AA000 || Tennis in the Face || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010029A00AEB0000 || Survive! MR.CUBE || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010029D006ED8000 || Arcade Archives Traverse USA || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01002A0009E18000 || Jolt Family Robot Racer || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01002A1004B34000 || ロマンシング サガ2 || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01002A1004C48000 || Binaries || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01002A2004530000 || The Bridge || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01002A6006AA4000 || Riptide GP: Renegade || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01002AA004DB4000 || ACA NEOGEO BURNING FIGHT || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01002AB007FD2000 || ゼルダ無双 ハイラルオールスターズ DX || CHN JPN KOR || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01002AF009470000 || シャンティ：ハーフ・ジーニー ヒーロー アルティメット・エディション || JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100A6200851E000 || 超回転 寿司ストライカー The Way of Sushido 体験版 || CHN JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01002B2004F76000 || GUNBARICH for Nintendo Switch™ || EUR JPN USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01002B30028F6000 || Celeste || EUR JPN USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01002B3008500000 || キューブクリエイターX || CHN JPN KOR || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01002B400873C000 || Samurai Defender: Ninja Warfare || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01002B6001364000 || レゴ®シティ アンダーカバー || JPN || 1.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01002BB00A662000 || ニル・アドミラリの天秤 色ドリ撫子 || JPN || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01002BD00983E000 || Burly Men at Sea || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01002C4009990000 || OPUS: Rocket of Whispers || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01009BF0072D4000 || 進め！キノピオ隊長　体験版 || CHN EUR JPN KOR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01008DC004CBA000 || 王だぁランド！ 体験版 || JPN || 3.0.1 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 01002C80086E6000 || Subsurface Circular || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01002C900A302000 || ACA NEOGEO RIDING HERO || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 01002CB006AFA000 || Dungeon Rushers || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01002CC0062B8000 || DEEMO || CHN EUR JPN KOR USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100833008A9E000 || 不如帰 大乱 || JPN || 4.0.0 || Digital || 0 65536 131072 196608 262144 327680 393216 458752 || || Application / Game<br /> |-<br /> | 01007C000845C000 || キッドトリップ RUN! || JPN || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01002D0005F10000 || NARUTO－ナルト－　ナルティメットストーム || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01002D4007AE0000 || Mega Man Legacy Collection || CHN EUR JPN USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01002D400B0F6000 || 探偵 神宮寺三郎 プリズム・オブ・アイズ || JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01002D700B906000 || ロロナのアトリエ ～アーランドの錬金術士～ DX || JPN || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01002DB007A96000 || Legend of Kay Anniversary || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01002DD004972000 || Sumer || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01002DD004FAC000 || ACA NEOGEO WORLD HEROES || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01002DD00AF9E000 || The Fall || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01002E70032E8000 || アケアカNEOGEO ビッグトーナメントゴルフ || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01002EB007D3A000 || Star Ghost || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | || Poi: Explorer Edition (retail only) || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 01002F300AC18000 || bloxiq || USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01002F5007DA2000 || 金沢将棋 ～レベル300～ || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01002FA00AF9A000 || ブロック ビルダー SP || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01002FC00412C000 || Little Nightmares Complete Edition || EUR JPN USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010095600AA36000 || Fill-a-Pix: Phil's Epic Adventure Demo || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01003000097FE000 || Arcade Archives MOON PATROL || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100307004B4C000 || Flinthook || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010030800841A000 || Moorhuhn Knights &amp; Castles || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010030A006F6E000 || Light Fall || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010030D004F34000 || Draw a Stickman: EPIC 2 || USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B3F000BE2000 || Pokkén Tournament™ DX Demo || CHN EUR JPN USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 || || Application / Game<br /> |-<br /> | 010030F008730000 || ACA NEOGEO REAL BOUT FATAL FURY || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 010031200981C000 || Grid Mania || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010031A00BC9E000 || EXTREME POKER || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010031B00A4E8000 || West of Loathing || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010031D00A604000 || Songbringer || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010031E00846A000 || タンブルストーン・デモ || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010031F002B66000 || Mr. Shifty || EUR USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010031F006E76000 || Pato Box || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100322004844000 || Embers of Mirrim Demo || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100331005E8E000 || Super Putty Squad || EUR USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010033100691A000 || The Coma: Recut || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010033300AC1A000 || The Mooseman || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010033500944A000 || 不思議の幻想郷TOD -RELOADED- || JPN || 4.0.0 || Digital || 0 65536 131072 196608 262144 327680 393216 458752 || || Application / Game<br /> |-<br /> | 010033600A008000 || ノーヒーローズ・ヒア || JPN || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010033700418A000 || Wulverblade || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010033C009E46000 || Superola and the Lost Burgers || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010033F00B3FA000 || Anima: Gate of Memories - Arcane Edition || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100340009736000 || Jotun: Valhalla Edition || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010034500641A000 || Attack on Titan 2 || USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 || || Application / Game<br /> |-<br /> | 010034800AF8A000 || 光明之響　龍奏回音 || KOR || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010034C007610000 || Ostwind - Das Spiel || EUR || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010034E005C9C000 || Code of Princess EX || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010034E00A114000 || de Blob 2 || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010034F00BFC8000 || Debris Infinity || USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100352006A10000 || Heroes of the Monkey Tavern Demo || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100355002CBE000 || Johnny Turbo's Arcade Joe and Mac Caveman Ninja || USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100356009860000 || Dragon Sinker || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003590089EA000 || Puzzle Puppers || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010035A0044E8000 || JYDGE || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010035B00412A000 || ヒューマン・リソース・マシーン || JPN || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010035B00B3F0000 || Super Volley Blast || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010035C00A4BC000 || The Adventures of Elena Temple || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100361007268000 || MotoGP™18 || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01003620068EA000 || Hand of Fate 2 || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01003640090EE000 || ロックマン クラシックス コレクション 2 || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003670066DE000 || 36 Fragments of Midnight || EUR USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100369001DDC000 || Arcade Archives Ninja-Kid || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010036B0034E4000 || スーパー マリオパーティ || EUR JPN USA || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010037200B346000 || 빅터 브란 오버킬 에디션 (Victor Vran Overkill Edition) || KOR || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010037600B61C000 || Little Dragons Café || CHN KOR || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100378002CCA000 || Johnny Turbo’s Arcade: Express Raider || USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100379003900000 || ACA NEOGEO BLUE'S JOURNEY || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01005AA00372A000 || UNO Demo || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 010037F00BB78000 || Cosmic Star Heroine || EUR || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100382004206000 || Let's Sing 2018 || EUR || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010038200A98E000 || In Between || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100384009344000 || Super Toy Cars || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010038500BCD6000 || Grandpa and the Zombies || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010038600B27E000 || Bastion || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003870040FA000 || Splatoon™ 2: Splatfest World Premiere || EUR USA || 3.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100387009412000 || 超獣ギガ大戦 || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100388008758000 || Banner Saga 2 || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003890084F8000 || Unbox: Newbie's Adventure || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010038A007AA4000 || FruitfFall Crush || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010038B0084EA000 || #Breakforcist Battle || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010038B00B9AE000 || Mummy Pinball || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010038F00AFA0000 || ACA NEOGEO Money Puzzle Exchanger || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 010039000B68E000 || MY HERO ONE'S JUSTICE || EUR || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100DE40068CA000 || Squareboy vs Bullies: Arena Edition || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010039300BDB2000 || Defunct || EUR USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010039A008E76000 || ChromaGun || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010039A00BC64000 || Wasteland 2: Director's Cut || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010039B0060E0000 || 謎解きメール || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010039C001296000 || Infinite Minigolf || EUR JPN USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010039C00A45C000 || Operation Hardcore || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010039E00A15E000 || InkSplosion || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003A30012C0000 || LEGO® CITY Undercover || USA || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01003A300B5F8000 || Voxel Shot for Nintendo Switch || USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003A5001DBA000 || アケアカNEOGEO オーバートップ || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003A700A98A000 || Saturday Morning RPG || EUR || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003A800B102000 || One Strike || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01003AA00A8E2000 || テニス ワールドツアー || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01003AC00BCAA000 || SIX SIDES OF THE WORLD ENHANCED || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100BD3006A02000 || One More Dungeon || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01003AF006A6C000 || 剣と魔法と学園モノ。Anniversary Edition || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005880063AA000 || Violett || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01003B200B372000 || Hyper Light Drifter - Special Edition || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01003B300B568000 || Battle Supremacy || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003B400A00A000 || The Adventures of Bertram Fiddle: Episode 1: A Dreadly Business || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01003B700B036000 || グレコからの挑戦状！計算の城とオバケたち　ひき算 || JPN || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01003B9007E86000 || Hammerwatch || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01003BA00A67E000 || Hacky Zack || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003BC0000A0000 || Splatoon™ 2 || CHN EUR USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 720896 786432 851968 917504 983040 1048576 1114112 1179648 1245184 1310720 1376256 1441792 1507328 1572864 1638400 1703936 || Gamecard: 2.3.0 Gamecard Front: LA-H-AAB6B-USA || Application / Game<br /> |-<br /> | 01003C100445C000 || Castle of Heart || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | || Azure Striker GUNVOLT: STRIKER PACK (retail only) || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 01003C200A232000 || Animated Jigsaws: Beautiful Japanese Scenery || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01003C300AAAE000 || Another World || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003C400871E000 || ACA NEOGEO 2020 SUPER BASEBALL || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01003C6008940000 || GUNBIRD for Nintendo Switch || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01003C700009C000 || スプラトゥーン2 || CHN JPN || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 720896 786432 851968 917504 983040 1048576 1114112 1179648 1245184 1310720 1376256 1441792 1507328 1572864 1638400 1703936 || || Application / Game<br /> |-<br /> | 01003CD00BE22000 || Chiki-Chiki Boxy Racers || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003D00099EC000 || Raging Justice || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01003D3009996000 || Totes the Goat || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003D60012BE000 || 信長の野望・創造 with パワーアップキット || JPN || 1.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01003DC00793A000 || L.A.ノワール || JPN || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01003DE00918E000 || The Darkside Detective || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01003E5002320000 || The Fall Part 2: Unbound || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01003ED0099B0000 || Danger Mouse: The Danger Games || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003F000973E000 || Metropolis: Lux Obscura || EUR USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01003F100B908000 || トトリのアトリエ ～アーランドの錬金術士２～ DX || JPN || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01003FC006FF4000 || ザ フレイム イン ザ フラッド：Complete Edition || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01003FE00A2F6000 || ACA NEOGEO BASEBALL STARS PROFESSIONAL || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01003FF009E60000 || Grab the Bottle || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100401003A0C000 || Dimension Drive || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 010040200A798000 || Scalextric || EUR || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100404002F52000 || 銀星将棋 強天怒闘風雷神 || JPN || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004040033CE000 || niconico || JPN || 1.0.0 || Digital || 0 65536 131072 196608 262144 327680 393216 || || Application / Game<br /> |-<br /> | 01004070022F0000 || Ittle Dew 2+ || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100408007078000 || Tales of the Tiny Planet || EUR USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010040A0065D2000 || 体験版デス！がるメタる！ || JPN || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010040B003E5E000 || Shephy || CHN EUR JPN KOR USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010082600A234000 || アーバントライアル プレイグラウンド 体験版 || JPN || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010040D00B7CE000 || The Swindle || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010040E00B636000 || Doughlings: Arcade || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010040F00AA9A000 || Speed Brawl || USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010041100B5AA000 || リトルドラゴンズカフェ -ひみつの竜とふしぎな島- || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01004120081AC000 || スチームワールドディグ２ || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | || Wonder Boy: The Dragon's Trap || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100416004C00000 || DOOM || EUR USA || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100417007F78000 || Danmaku Unlimited 3 || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010041C00A68C000 || The Spectrum Retreat || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100421003FD4000 || Syberia || EUR USA || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01004210041AE000 || レイジングループ || JPN || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100422001DDA000 || Arcade Archives TERRA CRESTA || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100423009358000 || Death Road to Canada || EUR USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100425009FB2000 || Baobabs Mausoleum Ep.1: Ovnifagos Don't Eat Flamingos || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010042800A516000 || Asdivine Hearts || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100429006A06000 || I, Zombie || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010042900A8CC000 || Robonauts ロボノーツ || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010042C006490000 || Bleed || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010042D00461A000 || レイマン レジェンド for Nintendo Switch || JPN || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010042E00AC80000 || 妖かし恋戯曲 || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100434003C58000 || Firefighters – The Simulation || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010043500A17A000 || Fallout Shelter || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01004360045C8000 || Lichtspeer: Double Speer Edition || EUR USA || 1.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100437004170000 || Portal Knights Demo || EUR USA || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010043800AD94000 || Neverout || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010043D004CF6000 || Just Dance® 2018 Demo || USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010043E009A2E000 || Draw a Stickman: EPIC 2 || EUR || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010043F004126000 || リトルインフェルノ || JPN || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004D8007368000 || Vostok Inc. || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010044300A65E000 || Defoliation || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010044D00A770000 || Burnstar || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010045000BF6A000 || Mitsurugi Kamui Hikae || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010045200AB24000 || 욘더: 클라우드 캐쳐 크로니클 (Yonder: The Cloud Catcher Chronicles) || KOR || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010045300516E000 || Snow Moto Racing Freedom || EUR USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100E24006FA8000 || Stikbold! A Dodgeball Adventure DELUXE || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010045500B212000 || Calculation Castle : Greco's Ghostly Challenge &quot;Division&quot; || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004560063CA000 || ママにゲーム隠された || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01001DE005012000 || Quest of Dungeons || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100459000302000 || ドラゴンクエストⅩ　ベータテスト版 || JPN || 1.0.0 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | || Yonder: The Cloud Catcher Chronicles (retail only) || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 01000E2003FA0000 || MIGHTY GUNVOLT BURST Demo || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100461007BB0000 || Black Hole || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100464009294000 || Kona || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100465008756000 || The Banner Saga || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100465009020000 || Qbik || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010046600B76A000 || Lost Phones Stories || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010046600B76A000 || Lost Phones Stories || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100476004A9E000 || Puzzle Box Maker || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004770079BA000 || Bit Dungeon+ || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100479008552000 || Monster Energy Supercross - The Official Videogame (モンスターエナジースーパークロス　オフィシャルビデオゲーム) || JPN || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01001FA0034E2000 || Dark Witch Music Episode: Rudymical Demo || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010047F001DBC000 || アケアカNEOGEO サムライスピリッツ 天草降臨 || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100482009636000 || Tower of Babel || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010048300854E000 || MotoGP 18 || JPN || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01004840086FE000 || NORTH || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01004860080A0000 || Baseball Riot || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | || Skylanders Imaginators || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100496004194000 || The Mummy Demastered || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010049C0075F0000 || OPUS: The Day We Found Earth || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010049E003748000 || Putty Pals || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010049E008EA8000 || ナナミと一緒に学ぼ！ TOEIC(R) LISTENING AND READING TEST 完全マスター || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01004A200BB48000 || Arcade Archives OMEGA FIGHTER || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004A700A168000 || Wolfenstein® II: The New Colossus™ - Deutschsprachige Version || EUR || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010031E00846A000 || タンブルストーン・デモ || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004A9006B84000 || The End Is Nigh || EUR USA || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01004AC002B40000 || ACA NEOGEO ART OF FIGHTING 3 || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01004AC0081DC000 || Sleep Tight || USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100E4D00A690000 || PixelJunk® Monsters 2 Demo || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01004B1001D22000 || TumbleSeed || EUR JPN USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100F3D001DEE000 || Puyo Puyo™ Tetris® Demo || EUR || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01004B100AF18000 || Disgaea 1 Complete || USA || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01004B3004062000 || グーの惑星 || JPN || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004B4002B6A000 || Runner3 || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01004B500AB88000 || Calculation Castle : Greco's Ghostly Challenge &quot;Addition&quot; || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004B600A2FC000 || ACA NEOGEO STAKES WINNER || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01004B7009F00000 || Miles &amp; Kilo || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01004B800AF5A000 || Bloodstained: Curse of the Moon || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01004BC00B5A0000 || 說謊公主與盲眼王子 || CHN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01004BE004A86000 || Mutant Mudds Collection || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100461007BB0000 || Black Hole || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01004C100A04C000 || This Is the Police 2 || EUR || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01004C200100E000 || 新大開拓時代 ～街をつくろう～ || CHN EUR JPN KOR USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01004C200ADA0000 || Trax - Build it Race it || USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004C200B0B4000 || Alwa's Awakening || USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004C500AAF6000 || The Mystery of the Hudson Case || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01004C500B698000 || Time Carnage || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004C500B8E0000 || Monkey King: Master of the Clouds || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004C70086EC000 || BAFL - Brakes Are For Losers || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004C700B106000 || Air Mail || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004C800A79C000 || Splat the Fruit || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004CC00B352000 || すみっコぐらし　あつまれ！すみっコタウン || JPN || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01004CF00A60E000 || Super Saurio Fly || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01004D10020F2000 || Graceful Explosion Machine || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 01004D1007926000 || 10秒走RETURNS 体験版 || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01004D8007368000 || Vostok Inc. || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01004D800AAAC000 || Yuso || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004DB003E6A000 || IRONCAST || EUR USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004DB00935A000 || Alteric || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01004DE001DC8000 || アケアカNEOGEO ショックトルーパーズ セカンドスカッド || EUR JPN USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01004DF007564000 || Tanzia || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004E3007E38000 || ロジック麻雀 創龍 四人打ち・三人打ち || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010078800825E000 || Wanderjahr TryAgainOrWalkAway || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004E400A48C000 || Slam Land || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004E500A15C000 || TETRA's Escape || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004E90028A2000 || 空飛ぶブンブンバーン || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01004E900B082000 || Touhou Genso Wanderer Reloaded || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01004EC00A2D8000 || ドタバタ調理アクション IT系ラーメン どらす || JPN || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01004ED00B192000 || Goosebumps The Game || EUR || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01004F10066B0000 || Party Planet || USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01004F100BB36000 || 世界の覇者Ｘ || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01004F4003FDC000 || Yesterday Origins || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01004F400B978000 || Robbotto || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100E5F0000C0000 || 魔界戦記ディスガイア5 体験版 || JPN || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01004F8006A78000 || Super Meat Boy || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01004FD00382A000 || Moon Hunters || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100501006494000 || Slayaway Camp: Butcher's Cut || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100502007F54000 || Black The Fall || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010050300AC28000 || 真・電愛｢みんなあげる！」 ～さくらえま～ || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010077B0038B2000 || LOST SPHEAR Demo || EUR JPN USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100509005AF2000 || The Legend of Zelda™: Breath of the Wild Demo for KIOSK || USA || 3.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100510004D2C000 || Disc Jam || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100512005AD2000 || リディー＆スールのアトリエ ～不思議な絵画の錬金術士～ || JPN || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100513005AF4000 || Rock'N Racing Off Road DX || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01005140089F6000 || Nuclien || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010051C003A08000 || Aperion Cyberstorm || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010051F00AC5E000 || SEGA AGES ソニック・ザ・ヘッジホッグ || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100522007AAA000 || Wizard of Legend || EUR JPN USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01005250086C4000 || Mega Man X Legacy Collection 2 || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010052900B8EE000 || Gakuen Club || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010052A00942A000 || Gekido Kintaro's Revenge || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010052A00A306000 || ACA NEOGEO NINJA COMBAT || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 010052A00B5D2000 || LEGO® Harry Potter™ Collection || USA || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010052B003A38000 || The Long Reach || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010052B00871C000 || ACA NEOGEO SAMURAI SHODOWN II || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 010052C00B184000 || The Journey Down: Chapter One || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010053200B0E0000 || Behind The Screen || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100534009FF2000 || Yonder: The Cloud Catcher Chronicles || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010053700A25A000 || Ice Cream Surfer || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010053A00932E000 || ニューロボイダー || JPN || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010053D0001BE000 || ぷよぷよ™テトリス®Ｓ 体験版 || CHN JPN || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 010053E002EA2000 || Fate/EXTELLA: The Umbral Star || EUR JPN USA || 1.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100551001D88000 || Battle Chasers: Nightwar || EUR USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100553006F36000 || ワンピース 海賊無双３ デラックスエディション || JPN || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100553009874000 || シャイニング・レゾナンス リフレイン || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100559004BB4000 || すみっコぐらし　すみっコパークへようこそ　体験版 || JPN || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010055A00A300000 || ACA NEOGEO SUPER SIDEKICKS 2 || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | || SteamWorld Dig 2 (retail only) || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 010056200B46A000 || ガンズゴア＆カノーリ２ || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100563005B70000 || Perception || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01005640080B0000 || Crimsonland || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100566009238000 || DragoDino || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010056800B534000 || Super Inefficient Golf || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010056B0081A6000 || テスラグラッド || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005700031AE000 || Disgaea 5 Complete || EUR USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 || Gamecard Front: LA-H-AACAC-{region} Back: AACAC41A000 || Application / Game<br /> |-<br /> | 010057300B0DC000 || Heroki || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100574002AF4000 || One Piece: Unlimited World Red - Deluxe Edition || EUR JPN USA || 1.0.0 || Digital / Cartridge || 0 || Gamecard Front: LA-H-ACL9A-{region} Back: ACL9A13A000 || Application / Game<br /> |-<br /> | 0100574009F9E000 || 嘘つき姫と盲目王子 || JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010057B00712C000 || Vesta || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010057D0021E8000 || Shovel Knight: Treasure Trove || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | || Octopath Traveler™ || || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010057D00B612000 || Into the Breach || EUR USA || 5.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010057F007AA2000 || Rally Racers || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100583001DCA000 || アケアカNEOGEO ザ・キング・オブ・ファイターズ '99 || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010058500B3E0000 || Labyrinth of Refrain: Coven of Dusk || EUR USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01005880063AA000 || Violett || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010058C00A916000 || Drone Fight || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100590009C38000 || SOL DIVIDE -SWORD OF DARKNESS- for Nintendo Switch || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100592005164000 || UNBOX: Newbie's Adventure || EUR USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01005950022EC000 || Blade Strangers || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010059C002AC2000 || Minecraft: Story Mode - The Complete Adventure || EUR USA || 1.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01005A600BE60000 || Fall of Light: Darkest Edition || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01007E3006DDA000 || Kirby™ Star Allies || CHN EUR JPN KOR USA || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 01005A700A166000 || Out of The Box || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005AA00372A000 || UNO Demo || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01005AC0068F6000 || Fear Effect Sedna || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01002EB007D3A000 || Star Ghost || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005AF004DBC000 || ACA NEOGEO ZED BLADE || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01005B1006988000 || Frederic: Resurrection of Music || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01005B200725C000 || ギア・クラブ アンリミテッド || JPN || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 01009C100390E000 || League of Evil || EUR USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005B5009364000 || Xeodrifter || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005B6008132000 || Lifeless Planet: Premiere Edition || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005B9002312000 || The Binding of Isaac: Afterbirth+ || EUR || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01005BC00922A000 || Earthlock || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100737003190000 || IMPLOSION 体験版 || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01005C40037C6000 || I and Me || EUR USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01005C60086BE000 || Mega Man X Legacy Collection || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005C600AC68000 || Valkyria Chronicles 4 Demo || EUR USA || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01005C700990A000 || 返校 -Detention- || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005C8005F34000 || Teslagrad || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005C9002B42000 || アケアカNEOGEO サムライスピリッツ || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005CA0099AA000 || 1917 - The Alien Invasion DX || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01005CB009E20000 || Glaive: Brick Breaker || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005CC007616000 || R.B.I. Baseball 18 || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01005CD00A2A2000 || Suicide Guy || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005D100807A000 || Pokémon™ Quest || CHN EUR JPN KOR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01005D200B530000 || Capcom Beat 'Em Up Bundle || EUR || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005D700A2F8000 || ACA NEOGEO GHOST PILOTS || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01005DA003E6E000 || Morphies Law || EUR JPN USA || 5.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01005E200A3AC000 || Sparkle 3 Genesis || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005E5009EF2000 || Guts &amp; Glory || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01005E600AB64000 || Disease -Hidden Object- || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01005EC0039E4000 || Poi: Explorer Edition || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01005ED00AD0C000 || SNKヒロインズ Tag Team Frenzy || JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01005EE0036EC000 || Rocket League® || EUR JPN USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 720896 || || Application / Game<br /> |-<br /> | 01005F3006AFE000 || THE 麻雀 || JPN || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 01005F4009112000 || Nightmare Boy || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01005F900416E000 || Pic-a-Pix Deluxe Demo || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01005F900902A000 || Crush Your Enemies! || EUR USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01005FF002E2A000 || RAYMAN® LEGENDS: DEFINITIVE EDITION DEMO || CHN EUR KOR USA || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | || Brawlout (retail only) || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 010060300A67C000 || INK || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100605008268000 || Titan Quest || EUR USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100607004C34000 || チキチキBOXYRACERS（チキチキボクシーレーサーズ） || JPN || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010060A00B53C000 || Broforce || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010060C00B0AA000 || Mario Tennis™ Aces Pre-launch Online Tournament || USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010060E009062000 || GUILT BATTLE ARENA || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 010060F00AA70000 || The Walking Dead: The Final Season - Season Pass || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010061400A990000 || Shikhondo: Soul Eater || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010061500B67C000 || かいぞくポップ || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100616009082000 || STAY || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100618004096000 || Robonauts Demo || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010061A00AE64000 || Tiny Hands Adventure || EUR USA || 5.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100628004BCE000 || Nights of Azure 2: Bride of the New Moon || EUR USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | || Stern Pinball Arcade || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 010062A008FE8000 || ROCK'N RACING OFF ROAD DX || JPN || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010062B00A874000 || Big Buck Hunter Arcade || USA || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100633007D48000 || Hollow Knight || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010063400B2EC000 || Paranautical Activity || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100635006C32000 || Pankapu || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100643002136000 || Resident Evil Revelations || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100112003B8A000 || Slime-san Demo || EUR USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 01008E6006502000 || Aegis Defenders || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100646009FBE000 || Dead Cells || EUR JPN USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100647003750000 || ドラゴンクエストⅩ　オールインワンパッケージ || JPN || 3.0.1 || Digital || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 720896 786432 851968 917504 983040 1048576 1114112 1179648 1245184 1310720 1376256 1441792 1507328 1572864 1638400 1703936 1769472 || || Application / Game<br /> |-<br /> | 010065A00213C000 || そるだむ 開花宣言 || JPN || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010065B009B3A000 || Animal Rivals: Nintendo Switch Edition || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010065E003FD8000 || Gear.Club Unlimited || EUR USA || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010065F004E5E000 || Super Chariot || EUR USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010065B009B3A000 || Animal Rivals: Nintendo Switch Edition || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100662008632000 || Spy Chameleon || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010066600877E000 || ACA NEOGEO ART OF FIGHTING 2 || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 0100AED003A60000 || プランテラ ガーデンライフ DXエディション 体験版 || JPN || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100E67008D84000 || Ultra Space Battle Brawl || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010067300059A000 || Mario + Rabbids® Kingdom Battle || CHN EUR USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 524288 || || Application / Game<br /> |-<br /> | 010067C00A776000 || Cosmic Star Heroine || USA || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010067D00AC46000 || Quad Fighter K || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010068B008D22000 || おきらく大富豪SP || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010068B0094A0000 || Otto || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010068D00AE68000 || GREEN || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010068F00AA78000 || FINAL FANTASY XV POCKET EDITION HD || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100692003FCE000 || Hyper Sentinel || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100694006AC0000 || ONE MORE DUNGEON || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010083600AE9E000 || Happy Birthdays Demo || EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100699008792000 || ACA NEOGEO THE LAST BLADE 2 || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 010069B002CDE000 || Gate Of Doom || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010069C00401A000 || RIVE: Ultimate Edition || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010069F008A38000 || Arcade Archives STAR FORCE || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006A0003892000 || デ・マンボ || JPN || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006A200936C000 || Shantae: Half- Genie Hero Ultimate Edition || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01006A5003698000 || メゾン・ド・魔王 || JPN || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006A500420E000 || Let's Sing 2018 mit deutschen Hits || EUR || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01006A600623E000 || Yōdanji || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006A800016E000 || Super Smash Bros. Ultimate || EUR JPN USA || || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01006A80038FC000 || ACA NEOGEO ART OF FIGHTING || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 01006AA006BE4000 || Tallowmere || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01006AA0084FE000 || Damascus Gear Operation Tokyo || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01006B700AB3E000 || Buddy Collection if －宿命の赤い糸－ || JPN || 5.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01006BB00800A000 || NARUTO SHIPPUDEN: Ultimate Ninja STORM 3 Full Burst HD || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006BB009004000 || わくわくどうぶつランド　体験版 || CHN JPN KOR || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100F8D0091F0000 || 迷宮の塔　トレジャーダンジョン　体験版 || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006BC00B188000 || The Journey Down: Chapter Three || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006BD001E06000 || Minecraft: Nintendo Switch Edition || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 720896 786432 851968 917504 983040 1048576 1114112 || || Application / Game<br /> |-<br /> | 01006BE00B3C8000 || My Brother Rabbit || USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006C3004FAE000 || ACA NEOGEO WORLD HEROES 2 JET || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01006C40086EA000 || AeternoBlade || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006C400ACEE000 || Them Bombs! || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006D4003BCE000 || Guns, Gore and Cannoli 2 || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01006DA00707C000 || 3D MiniGolf || EUR USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01006DB004566000 || Caveman Warriors || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01006DE00A686000 || 大図書館の羊飼い -Library Party- || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01006E1004404000 || Ben 10 || EUR USA || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01005F900416E000 || Pic-a-Pix Deluxe Demo || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01006E4003832000 || Johnny Turbo's Arcade: Bad Dudes || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01006E50042EA000 || EARTHLOCK || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100837006AF0000 || forma.8 体験版 || JPN || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01006E700B702000 || Nightmares from the Deep 2: The Siren`s Call || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006E800B7F2000 || Fernz Gate || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006EA00A294000 || BIOHAZARD 7 resident evil cloud version || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006EB004B0E000 || Treadnauts || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006EE00380C000 || Sausage Sports Club || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01009A5009A9E000 || Shining Resonance Refrain || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01006F0004FB4000 || ACA NEOGEO THE KING OF FIGHTERS '96 || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01006F6002840000 || Thumper || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01006F900473A000 || Bulb Boy || USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01006F900A298000 || Eekeemoo - Splinters of the Dark Shard || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006FB00990E000 || Azure Reflections || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01006FD0080B2000 || Overcooked! 2 || EUR JPN USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01006FE005B6E000 || Sky Force Reloaded || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100700006EF6000 || Mushroom Wars 2 || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100701001D92000 || Human Resource Machine || EUR USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01007020044F0000 || SUPERBEAT: XONiC || USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100702005E18000 || Mom Hid My Game! || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010070300BD0C000 || ワーウルフピンボール || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100704000B3A000 || いっしょにチョキッと スニッパーズ 体験版 || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100706005B6A000 || Anima: Gate of Memories || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010070A00A5F4000 || Armello || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100FAF009562000 || Deep Ones || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100715007354000 || NARUTO: Ultimate Ninja STORM || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010071B00964A000 || Lost Sea || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010071E00875A000 || Banner Saga 3 || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100720008ED2000 || STRIKERS1945 Ⅱ for Nintendo Switch || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010072B007418000 || スナックワールド トレジャラーズ ゴールド || JPN || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 010072E00AAA2000 || モザイクアート Fill-a-Pix DELUXE 体験版 || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100730007A9C000 || Detention || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100732009CAE000 || L.F.O. -Lost Future Omega- || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010073300158A000 || カーズ3 勝利への道 || JPN || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01007330027EE000 || Ultra Street Fighter® II: The Final Challengers || USA || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100735004898000 || The Lion's Song || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100737003190000 || IMPLOSION 体験版 || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010073900A7A0000 || Awkward || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010073C001D5E000 || Puyo Puyo Tetris || USA || 1.0.0 || Digital / Cartridge || 0 131072 || Gamecard Front: LA-H-BAACB-USA Back: LG || Application / Game<br /> |-<br /> | 010073E004C4E000 || L.F.O.　-Lost Future Omega- || JPN || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010073E008E6E000 || Mugsters || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010073E00B5FA000 || Voxel Shot for Nintendo Switch || EUR || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100742007266000 || Monster Energy Supercross - The Official Videogame || EUR USA || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01007430037F6000 || Monopoly for Nintendo Switch || EUR JPN USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100743008694000 || Neonwall || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100744001588000 || Cars 3: Driven to Win || EUR || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010074800741A000 || TINY METAL || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100748009A28000 || Manual Samuel || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100749009844000 || 20XX || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010074900BA9C000 || Legendary Eleven || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010074E0099FA000 || Grave Danger || EUR USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100751007ADA000 || Don’t Starve: Nintendo Switch Edition || EUR USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100755004608000 || Arcade Archives Mario Bros. || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D9A005ED6000 || 太鼓の達人 Nintendo Switchば～じょん！ || CHN JPN KOR || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 010075E0047F8000 || Neon Chrome || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010075F00B0D0000 || 6180 the moon || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100760002048000 || NBA 2K18 || EUR JPN USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 || || Application / Game<br /> |-<br /> | 010076500AA42000 || 魔界戦記ディスガイア Refine || JPN || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100766003E5C000 || BOOST BEAST || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100766008ADE000 || Harvest Moon: Light of Hope Special Edition || EUR || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100767008502000 || FANTASY HERO ～unsigned legacy～ || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01007690040A0000 || LEGO® Marvel Super Heroes 2 || EUR || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 || || Application / Game<br /> |-<br /> | 0100769004584000 || Shaq-Fu: A Legend Reborn || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D0B0093D8000 || TorqueL -Physics Modified Edition- || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010076C009F02000 || GOD WARS 日本神話大戦 || JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010076E005D58000 || ご当地鉄道 for Nintendo Switch !! || JPN || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010076F0049A2000 || Bayonetta™ || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100770008DD8000 || Monster Hunter Generations Ultimate™ || CHN EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100ACD009B6E000 || ポータルナイツ 体験版 || JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01007740041BC000 || レゴ®マーベル スーパー・ヒーローズ2 ザ・ゲーム || JPN || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100774009CF6000 || ONE PIECE : PIRATE WARRIORS 3 - Deluxe Edition || CHN EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100775004794000 || Steredenn: Binary Stars || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100776003F0C000 || Morphite || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100779004172000 || Golf Story || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010077900440A000 || Island Flight Simulator || EUR USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 010077B0038B2000 || LOST SPHEAR Demo || EUR JPN USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100780009BEC000 || 数学力王　中学１年 || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100782005A44000 || Oh...Sir! The Insult Simulator || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01007820096FC000 || Unexplored || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010078300B7CC000 || 海のカケラ || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01006DB004566000 || Caveman Warriors || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010078800825E000 || Wanderjahr TryAgainOrWalkAway || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010078800869A000 || Super Daryl Deluxe || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010078B00B0AC000 || Mario Tennis™ Aces: Pre-launch Online Tournament || EUR || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010078D000F88000 || DRAGON BALL XENOVERSE 2 for Nintendo Switch || EUR JPN USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 || Gamecard Front: LA-H-ABYBA-{region} Back: ABYBA08B00 || Application / Game<br /> |-<br /> | 01007900080B6000 || Bomber Crew || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010079100A2F4000 || 脱出ゲーム Aloha ハワイの海に浮かぶ家 || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01007920038F6000 || ACA NEOGEO MAGICIAN LORD || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 01007960049A0000 || Bayonetta™ 2 || EUR JPN KOR USA || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010079600BF22000 || みんなで空気読み。 || JPN || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010079A009B7A000 || Max: The Curse of Brotherhood (retail only) || EUR USA || 3.0.1 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 010079B0045C2000 || ソニックフォース体験版 || CHN JPN KOR || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010079F00671C000 || Sparkle 2 EVO || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01007A4008486000 || Enchanting Mahjong Match || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01007A400AD2C000 || アルケミックジョスト || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01007A400B3F8000 || Anima: Gate of Memories - The Nameless Chronicles || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01007AA00A91A000 || TouchBattleTankSP || EUR || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01007AD00013E000 || スーパーボンバーマン Ｒ || EUR JPN USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 || || Application / Game<br /> |-<br /> | 01007B5002F56000 || ドラゴンクエストビルダーズ　アレフガルドを復活せよ　体験版 || JPN || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01007B6006092000 || MUSYNX || USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01007B900A508000 || 真・電愛「なにが欲しいの？」 ～北見えり～ || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01007BB00A0A0000 || Sally's Law || CHN EUR JPN KOR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01007BC00AD3C000 || 클로즈드 나이트메어 || KOR || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01007C0003AEC000 || Use Your Words || EUR USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01007C000845C000 || キッドトリップ RUN! || JPN || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01007C2002B3C000 || GoNNER || EUR JPN USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01007C600294E000 || Pocket Rumble || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01007C600A484000 || アンエピック || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01007C8007376000 || 東方Project『東方紅舞闘V』 || JPN || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01002B3008500000 || キューブクリエイターX || CHN JPN KOR || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01007D1004DBA000 || ACA NEOGEO SPIN MASTER || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01007D7001D0E000 || Oceanhorn - Monster of Uncharted Seas Demo || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01007D9007792000 || Shadow Bug || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01007DA006FF6000 || ヒューマン フォール フラット || JPN || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01007E3006DDA000 || Kirby™ Star Allies || CHN EUR JPN KOR USA || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 010085900337E000 || Death Squared || EUR USA || 1.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01007E800AFB6000 || ACA NEOGEO NINJA COMMANDO || EUR JPN USA || 5.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01007EF00011E000 || The Legend of Zelda™: Breath of the Wild || CHN EUR JPN KOR USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 720896 || Gamecard Front: LA-H-AAAAA-{region} Back: AAAAA13A000 || Application / Game<br /> |-<br /> | 01007EF00399C000 || Conga Master Party! || EUR USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01007F200B0C0000 || Ys VIII: Lacrimosa of DANA || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 01007F4004FA4000 || ACA NEOGEO MUTATION NATION || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01007FC00206E000 || LEGO® NINJAGO® Movie Video Game || USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01007FC00B674000 || Sigi - A Fart for Melusina || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100802009C52000 || Aqua Kitty UDX || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100803005D52000 || ぎゃる☆がん２ || JPN KOR || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100804008794000 || ACA NEOGEO SAMURAI SHODOWN III || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 010080600A9D6000 || ツインロボット DX || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100807009528000 || スーパーガチャポンワールド SDガンダムX || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010080B00AD66000 || Undertale || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010080B00AF0E000 || めんトリパズル || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010080D002CC6000 || Johnny Turbo's Arcade: Two Crude Dudes || USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010080F0099FC000 || Semblance || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01008110036FE000 || Physical Contact: SPEED || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100818008004000 || Serial Cleaner || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010081A0095FA000 || Dear My Abyss || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010081C008164000 || Gunhouse || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 010081D00A480000 || Ninja Striker! || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010081E001DD2000 || Arcade Archives Renegade || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010082600A234000 || アーバントライアル プレイグラウンド 体験版 || JPN || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100830004FB6000 || L.A. Noire || EUR USA || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100830008426000 || Just Shapes &amp; Beats || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100833008A9E000 || 不如帰 大乱 || JPN || 4.0.0 || Digital || 0 65536 131072 196608 262144 327680 393216 458752 || || Application / Game<br /> |-<br /> | 010083600AE9E000 || Happy Birthdays Demo || EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100837006AF0000 || forma.8 体験版 || JPN || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100838002AEA000 || LEGO® Worlds || EUR JPN USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 || || Application / Game<br /> |-<br /> | 010083800B4E8000 || The Amazing Shinsengumi: Heroes in Love || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010083800B6D4000 || 마계전기 디스가이아Refine || KOR || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | || Darkest Dungeon®: Ancestral Edition (retail only) || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100842008EC4000 || Mega Man Legacy Collection 2 || CHN EUR KOR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100844004CB6000 || State of Mind || EUR USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100849000BDA000 || I am Setsuna || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100849006C18000 || ファーミングシミュレーター Nintendo Switch Edition || JPN || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010085000AC88000 || アペリオン・サイバーストーム || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010085300314E000 || 神巫女 -カミコ- || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010085500130A000 || LEGO® CITY Undercover || EUR || 1.0.0 || Digital / Cartridge || 0 131072 || Gamecard Front: LA-H-ABM2B-EUR Back: ABM2B41X000 || Application / Game<br /> |-<br /> | 010085900337E000 || Death Squared || EUR USA || 1.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 010085A00821A000 || ClusterPuck 99 || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010085F00B93A000 || Western 1849 Reloaded || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100437004170000 || Portal Knights Demo || EUR USA || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010086300486E000 || ACA NEOGEO METAL SLUG 2 || EUR JPN USA || 1.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 010016C009374000 || Lode Runner Legacy Demo Version || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010086D00B3D2000 || OCTOPATH TRAVELER Prologue Demo || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010086E00BCB2000 || Retimed || USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010087000428E000 || Plantera Deluxe || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010087300445A000 || Bombslinger || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100875006C2C000 || タロミア || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100875008000000 || Bloody Zombies || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100876007C2C000 || 마계전기 디스가이아5 || KOR || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010087600AD4A000 || Draw a Stickman: EPIC 2 || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010087C009246000 || Muddledash || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010087D0084A8000 || Hello Kitty Kruisers With Sanrio Friends || EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010087D008D64000 || BINGO for Nintendo Switch || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010087E006E6E000 || Tachyon Project || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010087E00AA8E000 || マンティス・バーン・レーシング || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010087F005DFE000 || ESCAPE TRICK: 35 Fateful Enigmas || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100880004CB2000 || PAN-PAN～ちっちゃな大冒険～ || JPN || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100882001380000 || 三國志13 with パワーアップキット || JPN || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010088400366E000 || Monster Jam Crush It! || USA || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 010088500878C000 || ACA NEOGEO REAL BOUT FATAL FURY SPECIAL || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 010088E003A76000 || Ninja Shodown || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100284007D6C000 || Super One More Jump || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01008940086E0000 || The Infectious Madness of Doctor Dekker || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010089F00A3B4000 || Perfect Angle || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008A000A404000 || The Lost Child || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01008A100A028000 || FOX n FORESTS || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008A30083E2000 || ワールドエンド・シンドローム || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01008A6007E00000 || ラビ×ラビ-パズルアウトストーリーズ- || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01008A6009758000 || Fairune Collection || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | || Darkest Dungeon: Ancestral Edition || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 01008A9001DC2000 || アケアカNEOGEO ショックトルーパーズ || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100322004844000 || Embers of Mirrim Demo || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008AF00A532000 || Bomb Chicken || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01008B000A5AE000 || Spectrum || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008B7005B64000 || 薄桜鬼 真改 風華伝 for Nintendo Switch || JPN || 5.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01008B8004E36000 || Oxenfree || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01008C300648E000 || Letter Quest Remastered || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01008CD00901C000 || Discovery || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008CE005F12000 || NARUTO－ナルト－ 疾風伝　ナルティメットストーム２ || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A7F002830000 || VOEZ 体験版 || CHN EUR JPN KOR USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 || || Application / Game<br /> |-<br /> | 01008D000877C000 || ACA NEOGEO SENGOKU 3 || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01008D1001512000 || Cars 3: Driven to Win || USA || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01008D4007A1E000 || Outlast: Bundle of Terror || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01008D400A584000 || Keep Talking and Nobody Explodes || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | || Arena of Valor || || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008D800A162000 || Dead Fun Pack: Penguins and Aliens Strikes Again || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01008D800AE4A000 || FullBlast || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008D800B558000 || テト字ス || JPN || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01008D800BAFA000 || ジュラシック　ピンボール || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008DC004CBA000 || 王だぁランド！ 体験版 || JPN || 3.0.1 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 01008DD006C52000 || A Magical High School Girl || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008E20047DC000 || いっしょにチョキッと スニッパーズ プラス || CHN EUR JPN KOR USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01008E500BF62000 || MagiCat || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008E6006502000 || Aegis Defenders || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01008E600AEF4000 || 墮落軍團 - 光榮系譜 - || CHN KOR || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01008E900471E000 || De Mambo || EUR USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008E9007064000 || WorldNeverland - Elnea Kingdom || EUR JPN USA || 4.0.0 || Digital || 0 65536 131072 196608 262144 327680 393216 458752 || || Application / Game<br /> |-<br /> | 01008EA00405C000 || forma.8 || EUR USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01008EA0080F6000 || プロ野球 ファミスタ エボリューション || JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01008EA008712000 || ACA NEOGEO PULSTAR || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01008EC005F88000 || Super Ping Pong Trick Shot || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008ED008776000 || ACA NEOGEO MAGICAL DROP III || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01008ED0087A4000 || The Adventure Pals || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008EE00AA5A000 || Fallen Legion -栄光への系譜- || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01008EE00B22C000 || Rento Fortune Monolit || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01008F1008DA6000 || Darkest Dungeon® || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01008F2005154000 || South Park™: The Fractured but Whole™ || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 01008F70089E4000 || ガンズゴア＆カノーリ || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008F80049C6000 || Unepic || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008FA00ACEC000 || RADIO HAMMER STATION || CHN EUR JPN KOR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008FD004DB6000 || ACA NEOGEO METAL SLUG X || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01008FF004610000 || リーグ オブ イーブル　体験版 || JPN || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008FF00A4B6000 || Squids Odyssey || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100902001014000 || オセロ || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01009040091E0000 || Wolfenstein® II: The New Colossus™ || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01007D7001D0E000 || Oceanhorn - Monster of Uncharted Seas Demo || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010090C00B0E8000 || Yooka-Laylee（ユーカレイリー） || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010090F00A76A000 || BLAZBLUE CROSS TAG BATTLE || EUR || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 010091400B596000 || Gaokao.Love.100Days || USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D06003056000 || ピクセル ライン DX 体験版 || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100921006A04000 || Night in the Woods || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010092100AE48000 || ROCK'NRACING GRAND PRIX || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100922008008000 || NARUTO SHIPPUDEN: Ultimate Ninja STORM 2 || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010092400A678000 || Zaccaria Pinball || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100928005BD2000 || Xenoraid || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CD3000BDC000 || ドラゴンクエストヒーローズI・II for Nintendo Switch 体験版 || JPN || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100932004208000 || Let's Sing 2018 Hits Français et Internationaux || EUR || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01009320084A4000 || SteamWorld Dig || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100934003BCC000 || Guns, Gore and Cannoli || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010093600A60C000 || Agatha Knife || EUR USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 010093800A98C000 || Super Blackjack Battle 2 Turbo Edition - The Card Warriors || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010093D00AC38000 || Sky Gamblers: Storm Raiders || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C0A004C2C000 || Kid Tripp Demo || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01009400030D6000 || 聖剣伝説COLLECTION || JPN || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01009440095FE000 || Pode || EUR JPN USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100944009646000 || Arena of Valor || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100945003A0E000 || Monster Jam: Crush It! || EUR || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100946008DAE000 || Her Majesty's SPIFFING || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010094E00B52E000 || Capcom Beat 'Em Up Bundle || USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009510001CA000 || FAST RMX || EUR JPN USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01009520034AC000 || ぺんぎんくんギラギラWARS || JPN || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010095300212A000 || Resident Evil Revelations 2 || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100956007854000 || Woodle Tree Adventures || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010095600AA36000 || Fill-a-Pix: Phil's Epic Adventure Demo || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010095A004040000 || Flip Wars™ || EUR USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010095C00406C000 || Beach Buggy Racing || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010096000B3EA000 || OCTOPATH TRAVELER: Prologue Demo || CHN EUR KOR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010096000B658000 || Rebellions Secret Game 2nd Stage for Nintendo Switch || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009630076B8000 || 大盛りチャリ走DX || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010096500B018000 || Cubikolor || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010096500C132000 || おしゃべり！カケジョ！～奪われたドットコインを追え！～ || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100969005E98000 || 60 Seconds! || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010096900A4D2000 || Clustertruck || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010096B00A08E000 || Octocopter: Double or Squids || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C88008BA6000 || Happy Birthdays 体験版 || JPN || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01005FF002E2A000 || RAYMAN® LEGENDS: DEFINITIVE EDITION DEMO || CHN EUR KOR USA || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100E570051F0000 || PixelJunk モンスターズ 2　体験版 || JPN || 4.0.0 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100976008FBE000 || Millie || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100978009B98000 || A Normal Lost Phone || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010097C00AB66000 || CastleStorm || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010097F0099B4000 || Football Manager Touch 2018 || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01009840046BC000 || Semispheres || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010099B00A2DC000 || Dragon Blaze for Nintendo Switch || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01009A4008A30000 || Arcade Archives HEROIC EPISODE || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009A400A97C000 || ASSAULT GUNNERS HD EDITION || EUR JPN USA || 5.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01009A5009A9E000 || Shining Resonance Refrain || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01009A500ABA0000 || シスターズロワイアル　５姉妹に嫌がらせを受けて困っています || JPN || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01009AA000FAA000 || Sonic Mania || CHN EUR JPN KOR USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01009AB0034E0000 || Nintendo Labo Toy-Con 02: Robot Kit || EUR JPN USA || 4.0.0 || Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 01009AB00B186000 || The Journey Down: Chapter Two || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009B300872A000 || ACA NEOGEO SENGOKU 2 || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01000E10094D0000 || クリプト・オブ・ネクロダンサー体験版 || JPN || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01009B400ACBA000 || No Heroes Here || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01009B400B73A000 || Blade Strangers || CHN JPN || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01009B500007C000 || ARMS Sparring Demo || CHN EUR JPN KOR USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 720896 786432 851968 917504 983040 || || Application / Game<br /> |-<br /> | 01009B7006C88000 || EARTH WARS || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009B900401E000 || Overcooked Special Edition || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01009B900866E000 || 世界一長い５分間 || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009BD003B36000 || Thimbleweed Park || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01009BF0072D4000 || Captain Toad™: Treasure Tracker || CHN EUR JPN KOR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01009C000415A000 || Ultra Hyperball || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009C0009842000 || Detective Gallo || EUR USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01009C100390E000 || League of Evil || EUR USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009C8009026000 || LIMBO || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009CD003A0A000 || Vegas Party || EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01009CE00733C000 || 送り犬 || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009CE00AFAE000 || ACA NEOGEO METAL SLUG 4 || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 0100F9A008AD6000 || Word Search by POWGI Demo || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009D1003A96000 || 信長の野望･大志 || JPN || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 720896 || || Application / Game<br /> |-<br /> | 01009D3008D20000 || Furi || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009D4001DC4000 || アケアカNEOGEO ワールドヒーローズパーフェクト || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01009D500A194000 || World Conqueror X || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01009D60076F6000 || Enter the Gungeon || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 327680 393216 458752 || || Application / Game<br /> |-<br /> | 01009D60080B4000 || SpiritSphere DX || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01009DC001DB6000 || ACA NEOGEO THE KING OF FIGHTERS '95 || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 01009DD00904E000 || VVVVVV || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009DE009B76000 || 刑事J.B.ハロルドの事件簿　キス・オブ・マーダー || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01009E000B142000 || スチームワールドディグ || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009E2003FE2000 || Vaccine || EUR USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009E4006CC8000 || Super Rock Blasters! || USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009E40095EE000 || Radiation Island || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01009EA00A320000 || Devious Dungeon || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01009EB004CB0000 || Shelter Generations || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 01009EC006B00000 || THE 麻雀 LITE || JPN || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01009F20086A0000 || Ikaruga || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01009FB002B2E000 || Flipping Death || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009FF00A160000 || Toy Stunt Bike: Tiptop's Trials || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A01006E00000 || LEGO® The Incredibles || USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100A0500348A000 || Just Dance 2018® || CHN EUR KOR USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100A050038F2000 || ACA NEOGEO MAGICAL DROP II || EUR JPN USA || 1.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 0100A0600B0F2000 || マーセナリーズウィングス 偽りの不死鳥 || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A0600B708000 || シフトクアンタム Shift Quantum || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A0D004FB0000 || ACA NEOGEO TOP HUNTER RODDY &amp; CATHY || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 0100A0E004DB2000 || ACA NEOGEO SUPER SIDEKICKS || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 0100A0E005E42000 || Light Fingers || USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100A0E0068CC000 || スクウェアボーイ リベンジファイト || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A0E00B7A4000 || Werewolf Pinball || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100A1C00359C000 || TowerFall || EUR USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100A21003E66000 || Fire Emblem Warriors Demo for KIOSK || USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A21007FFA000 || SteamWorld Heist: Ultimate Edition || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A250093DE000 || Typoman || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A250097F0000 || DRAGON BALL FIGHTERZ || JPN USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100A260094EE000 || Fallen Legion: Rise to Glory || EUR USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100A2700A86E000 || Bouncy Bob || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A290038F8000 || ACA NEOGEO PUZZLED || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 0100A290048B0000 || Soldam: Drop, Connect, Erase || USA || 1.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100A2900AFA4000 || ACA NEOGEO LEAGUE BOWLING || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 0100A2B008696000 || Toki Tori 2+: Nintendo Switch Edition || EUR USA || 4.0.0 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100A2E008162000 || イースVIII -Lacrimosa of DANA- || JPN || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100A2F006FBE000 || Cat Quest || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100A3F009142000 || Little Dragons Café || USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100A42004718000 || BRAWL || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A4200A284000 || LUMINES REMASTERED || EUR JPN USA || 4.0.0 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100A48008AE8000 || Bleed 2 || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100465009020000 || Qbik || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100A4A00B2E8000 || Toby: The Secret Mine || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A4D00A308000 || ACA NEOGEO SUPER SIDEKICKS 3 : THE NEXT GLORY || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 01009B500007C000 || ARMS Sparring Demo || CHN EUR JPN KOR USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 720896 786432 851968 917504 983040 || || Application / Game<br /> |-<br /> | 0100A55003B5C000 || Cave Story+ || EUR || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100A5700AF32000 || Arcade Archives ARGUS || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A5900472E000 || Chess Ultra || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100A5A004FB2000 || ACA NEOGEO THE LAST BLADE || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 0100A6000ACEA000 || Punch Club || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A62002042000 || RiME || EUR JPN USA || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100A620083DA000 || Ambition of the Slimes || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A6200851E000 || 超回転 寿司ストライカー The Way of Sushido 体験版 || CHN JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100A6300150C000 || Wonder Boy: The Dragon's Trap || EUR JPN USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100A6500B176000 || Calculation Castle : Greco's Ghostly Challenge &quot;Subtraction&quot; || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A66003384000 || Hulu || USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100A6700AF10000 || Element || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100A6A00894C000 || ZERO GUNNER 2- for Nintendo Switch || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100A6D009840000 || The Wardrobe || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100A6F00A0FE000 || THE Number Puzzle || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A70006B8A000 || Never Stop Sneakin' || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100A72004B20000 || スプラッシャー || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A73006E74000 || Legendary Eleven || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100A76002B46000 || アケアカNEOGEO ASO II 〜ラストガーディアン〜 || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A7700B46C000 || Legendary Fishing || CHN EUR KOR || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100A7800AFAA000 || ACA NEOGEO PREHISTORIC ISLE 2 || EUR JPN USA || 5.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 0100A7900B936000 || Shut Eye || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100191006B98000 || ロロロロ　体験版 || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A7F002830000 || VOEZ 体験版 || CHN EUR JPN KOR USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 || || Application / Game<br /> |-<br /> | 0100A8200B15C000 || Kentucky Robo Chicken || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A8300A4BA000 || キミの瞳にヒットミー || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A8400471A000 || MUJO || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A840047C2000 || 12 orbits || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100A8C001DCE000 || アケアカNEOGEO NAM-1975 || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100A8D003BAE000 || Qbics Paint || EUR JPN USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100A8E0090B0000 || Energy Invasion || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A8F00B3D0000 || FunBox Party || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A9300A4AE000 || Super Sportmatchen || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100A9400991E000 || 東方蒼神縁起V || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100A9800A1B6000 || Professional Construction – The Simulation || EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 01001C9007614000 || Max: The Curse of Brotherhood (Demo) || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100A9B009678000 || EAT BEAT DEADSPIKE-san || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A9D00B31A000 || The Inner World - The Last Wind Monk || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100AA0008736000 || Nihilumbra || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100AA2006510000 || Revenant Saga || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100AA900B282000 || ザ・トレイル：フロンティアチャレンジ || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100AAD004358000 || Physical Contact: Picture Place || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100AB000ABFE000 || Shadow Fight 2 || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100ABC008E06000 || カイジ～絶望の鉄骨渡り～ for Nintendo Switch || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100ABC009708000 || A Gummy's Life || USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100ABC00AAD0000 || 机でサッカー || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100AC000ABE0000 || Dungeon Rushers || CHN JPN KOR || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100AC10085CE000 || AQUA KITTY UDX || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100AC40038F4000 || ACA NEOGEO AERO FIGHTERS 2 || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 0100ACB004006000 || Schlag den Star - Das Spiel || EUR || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01000FB008900000 || Midnight Deluxe || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100ACD009B6E000 || ポータルナイツ 体験版 || JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100AD000B9AC000 || Son of a Witch || USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100AD300B786000 || アイリス魔法学園～Vinculum Hearts～ || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100AD5007430000 || Earth Atlantis || JPN || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100AD7003FF4000 || Stick It to The Man || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100ADF00700E000 || Runbow || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100ADF0096F2000 || Samurai Aces for Nintendo Switch™ || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100AE0003424000 || Shantae: Half-Genie Hero || EUR USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100AE0006474000 || Stern Pinball Arcade || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100AE00096EA000 || Hyrule Warriors: Definitive Edition || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100AE000AEBC000 || Angels of Death || EUR JPN USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100AE5003EE6000 || The Jackbox Party Pack || EUR USA || 3.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100AE9003FAC000 || タッチバトル戦車SP || JPN || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100AE9008744000 || Claws of Furry || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100AEC00A5F2000 || Yonder 青と大地と雲の物語 || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100AED003A60000 || プランテラ ガーデンライフ DXエディション 体験版 || JPN || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100AEF00A270000 || Cast of the Seven Godsends || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | || Thimbleweed Park || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | || Stern Pinball Arcade (retail only) || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100AFC00B120000 || FLIP OVER FROG || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100AFE00452E000 || Tumblestone || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B0B00B318000 || The Inner World || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100B0C0086B0000 || Mega Man 11 Demo || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100B0E0086F6000 || The Trail: Frontier Challenge || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B1200ADEA000 || Loot Monkey: Bling Palace || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B1300783E000 || King Oddball || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B13007A6A000 || The Gardens Between || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B1300871A000 || ACA NEOGEO KING OF THE MONSTERS || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 0100B18001D8E000 || Little Inferno || EUR USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100B1A0066DC000 || Völgarr the Viking || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 01006C40086EA000 || AeternoBlade || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B1E0022F8000 || VVVVVV || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100B1E00AA56000 || Crossing Souls || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | || Axiom Verge || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100B1F0090F2000 || TurtlePop: Journey to Freedom || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100B25009B96000 || Shape of the World || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B2600A398000 || TENGAI for Nintendo Switch || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100B27008170000 || ジャンナビ麻雀オンライン || JPN || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100B28003440000 || Aces of the Luftwaffe - Squadron || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100B2F008BD8000 || Skee-Ball || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100B3F000BE2000 || ポッ拳　POKKÉN TOURNAMENT DX 体験版 || CHN EUR JPN USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 || || Application / Game<br /> |-<br /> | 0100B410040F2000 || Dead Synchronicity: Tomorrow Comes Today || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B42001DB4000 || アケアカNEOGEO ザ・キング・オブ・ファイターズ '98 || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010004A007890000 || MAX マジックマーカーと兄弟の絆 || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B4800AFBA000 || ACA NEOGEO AGGRESSORS OF DARK KOMBAT || EUR JPN USA || 5.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 0100B4900AD3E000 || NEKOPARA Vol.1 || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100B52006E8C000 || Tiny Troopers Joint Ops XL || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B5300B49A000 || Frost || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B5600A88C000 || WHIP! WHIP! || EUR JPN USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100B58007D40000 || Unholy Heights || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B5A004302000 || R.B.I. Baseball 17 || EUR USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100B5C00AB3C000 || グレコからの挑戦状！計算の城とオバケたち　たし算 || JPN || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100B60003A06000 || よるのないくに２ ～新月の花嫁～ || JPN || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100B61008208000 || BLAZBLUE CROSS TAG BATTLE || CHN JPN KOR USA || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100B6900A668000 || Code：Realize ～彩虹の花束～ for Nintendo Switch || JPN || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100B6C00AF6E000 || Lost in Harmony || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100B6E00A420000 || Dust: An Elysian Tail || EUR USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100B70003836000 || Johnny Turbo's Arcade: Sly Spy || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B7400A304000 || ACA NEOGEO TOP PLAYER’S GOLF || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 0100B7600B6D2000 || チョークダッシュカーニバル || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B7700BB7A000 || Monster Loves You || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B78006CCA000 || ネオアトラス1469 || EUR JPN USA || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 010065F004E5E000 || Super Chariot || EUR USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100B7D0022EE000 || Cave Story+ || USA || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100B7F00B4E6000 || Destiny's Princess: A War Story, A Love Story || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100B8000B12C000 || グレコからの挑戦状！計算の城とオバケたち　わり算 || JPN || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100B8000B190000 || Goosebumps The Game || USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100B8400A1C6000 || Bloons TD 5 || EUR USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100B8E00359E000 || Party Golf || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100B8F00AFEC000 || フラッシュバック || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100B90008E1E000 || Packet Queen # || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100B91008780000 || ACA NEOGEO AERO FIGHTERS 3 || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 0100B9400654E000 || プラチナ・トレイン～日本縦断てつどうの旅～ || JPN || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100B97002B44000 || アケアカNEOGEO ザ・キング・オブ・ファイターズ 2000 || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100BA0003EEA000 || PICROSS S || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100BA0004F38000 || NeuroVoider || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100BA3003B70000 || PAC-MAN VS. Free Multiplayer-only Ver. || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100BA500B660000 || Darts Up || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100BA8001DC6000 || アケアカNEOGEO メタルスラッグ3 || EUR JPN USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100BAB00A116000 || The Low Road || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100BAE006FEE000 || シンプル麻雀オンライン || JPN || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100BB1001DD6000 || Arcade Archives CRAZY CLIMBER || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100BB1009E50000 || Firefighters: Airport Fire Department || EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | || Slain: Back From Hell (retail only) || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | || Victor Vran Overkill Edition (retail only) || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 01003F000973E000 || Metropolis: Lux Obscura || EUR USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100BB9009FC8000 || Farm Expert 2018 for Nintendo Switch™ || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100BBA00BA0A000 || シェルター ジェネレーション || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100BBF0027EC000 || ULTRA STREET FIGHTER™ II The Final Challengers || EUR || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100BC2004FF4000 || Owlboy || EUR JPN USA || 4.0.0 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100BC60099FE000 || Iconoclasts || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100BCB00AE98000 || GUNBIRD2 for Nintendo Switch || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100BCE000598000 || Just Dance 2017® Demo || EUR USA || 1.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100BD3006A02000 || One More Dungeon || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100BD9004AB6000 || Kingdom: New Lands || EUR JPN USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100BDE00862A000 || Mario Tennis™ Aces || CHN EUR JPN KOR USA || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100BE50042F6000 || Yono and the Celestial Elephants || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100BE80097FA000 || Arcade Archives 10-Yard Fight || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100BE9007E7E000 || ICEY || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100A9B009678000 || EAT BEAT DEADSPIKE-san || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100BF1003B9A000 || 密着対戦2048 || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100BF5006A7C000 || Layers of Fear: Legacy || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100BF7006BCA000 || Crawl || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100BFC002B4E000 || Dandara || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100BFE00865E000 || Energy Cycle || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C00005E38000 || Dustoff Heli Rescue 2 || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C0A004C2C000 || Kid Tripp Demo || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100C0F0020E8000 || Snake Pass || EUR USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100C1000706C000 || Blossom Tales: The Sleeping King || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100C11009378000 || 戰場女武神４ || CHN JPN KOR || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C1500B82E000 || The World Ends With You® -Final Remix- || EUR || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C160071B8000 || Waking Violet || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100C1700A9F0000 || Streets of Red - Devil's Dare Deluxe || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C1800A9B6000 || Go Vacation™ || CHN EUR KOR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C1F0051B6000 || Donkey Kong Country™: Tropical Freeze || CHN EUR JPN KOR USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100C1F00A9B8000 || All-Star Fruit Racing || EUR USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100C220040C0000 || Mr. Shifty || JPN || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100692003FCE000 || Hyper Sentinel || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01008FF004610000 || リーグ オブ イーブル　体験版 || JPN || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C2D00981E000 || Arcade Archives RYGAR || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C2E00B494000 || Moonfall Ultimate || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C2F00A568000 || Shio || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100C31005A50000 || Phantom Trigger || EUR USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100C3100B06C000 || サガ スカーレット グレイス 緋色の野望 || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C320083BE000 || Splitter Critters || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010008900705C000 || Dragon Quest® Builders™ || EUR USA || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C3700416A000 || SUPER PING PONG TRICK SHOT || JPN || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100C37008ACE000 || WILD GUNS Reloaded || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C3800049C000 || モンスターハンターダブルクロス™ Nintendo Switch Ver. 体験版 || JPN || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100C38004DCC000 || The Flame In The Flood: Complete Edition || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100C39009EEE000 || 荒野之槍 重裝上陣 || CHN KOR || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C3D00923A000 || Old School Musical || EUR USA || 5.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100C3F000BD8000 || みんなでワイワイ！スペランカー 体験版 || JPN || 1.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100C4000A876000 || Big Buck Hunter Arcade || EUR || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C460040EA000 || Hunting Simulator || EUR USA || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C4B0034B2000 || Nintendo Labo Toy-Con 01 Variety Kit || EUR JPN USA || 4.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C4E004406000 || Cartoon Network Adventure Time: Pirates of the Enchiridion || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100C4F005EB4000 || Mecho Tales || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C50007070000 || Ginger: Beyond the Crystal || EUR USA || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C3800049C000 || モンスターハンターダブルクロス™ Nintendo Switch Ver. 体験版 || JPN || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100C510049E0000 || Penny-Punching Princess || EUR USA || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C53004C52000 || Flat Heroes || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100C5700434C000 || Sky Rogue || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100C5E003B40000 || ARMS™ Global Testpunch || EUR JPN USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100C6200A0AA000 || Enigmatis 2: The Mists of Ravenwood || EUR USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100C66007E96000 || Crayola Scoot || EUR USA || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C6E0047C8000 || Bit Dungeon+ || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C6E00AF2C000 || BLAZBLUE CROSS TAG BATTLE SPECIAL TRIAL || JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C7300772E000 || ルフランの地下迷宮と魔女ノ旅団 || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C7600AF00000 || Red Hot Ricochet || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100C7C00AE6C000 || VSR: Void Space Racing || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100C81004780000 || Disco Dodgeball - REMIX || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100C86000B58000 || ウルトラストリートファイターII ザ・ファイナルチャレンジャーズ || CHN JPN KOR || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100C87006310000 || 戦国無双 〜真田丸〜 || JPN || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100C88008BA6000 || Happy Birthdays 体験版 || JPN || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100C8E0083C4000 || HANDY麻雀 || JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100C920092B0000 || Energy Balance || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C950088FC000 || Conga Master Cruisin || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C960041DC000 || Levels+ : Addictive Puzzle Game || EUR JPN USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100C9600A88E000 || PICROSS S2 || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C9600ABA8000 || 白衣性愛情依存症 || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100C9800A454000 || GALAK-Z: Variant S || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C9800B366000 || ミッドナイトDX || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C9A00952A000 || Manticore - Galaxy on Fire || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100C9F009F7A000 || Xenoblade Chronicles 2: Torna ~ The Golden Country || USA || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C9F00BC50000 || Realpolitiks || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CA100489C000 || The Escapists 2 || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> parse error: Invalid numeric literal at line 2, column 0<br /> |-<br /> | 0100CA500756C000 || Fossil Hunters || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100CA6009888000 || VERTICAL STRIKE ENDLESS CHALLENGE || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100CA9002322000 || SteamWorld Dig 2 || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100CAB006F54000 || Octodad: Dadliest Catch || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100CAB00B4E4000 || Pub Encounter || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100CAF001DBE000 || アケアカNEOGEO 餓狼伝説2 〜新たなる闘い〜 || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CB0004C4A000 || 刑事J.B.ハロルドの事件簿　マーダー・クラブ || JPN || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CB10089DE000 || Party Crashers || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CB2001DB8000 || アケアカNEOGEO 餓狼 MARK OF THE WOLVES || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100CB60092A2000 || World to the West || JPN || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100CB800B07E000 || NOT A HERO: SUPER SNAZZY EDITION || EUR USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D03003F0E000 || Nine Parchments Demo || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100CBA005160000 || クエストオブダンジョンズ || JPN || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100CBB0070EE000 || Green Game: TimeSwapper || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 010072E00AAA2000 || モザイクアート Fill-a-Pix DELUXE 体験版 || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100CC2001C6C000 || Battle Chef Brigade || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100CC6005DB0000 || 遊んで将棋が強くなる！ 銀星将棋DX || JPN || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100CC6009456000 || SDガンダム ジージェネレーション ジェネシス for Nintendo Switch || JPN || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100CC600ABB2000 || Yonder: The Cloud Catcher Chronicles (Retail Only) || USA || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100CC7009196000 || Masters of Anima || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100CC80013D6000 || The Jackbox Party Pack 3 || EUR USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | || Skylanders Imaginators || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100CCE00A4F2000 || Reigns: Kings &amp; Queens || EUR USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100CD3000BDC000 || ドラゴンクエストヒーローズI・II for Nintendo Switch 体験版 || JPN || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100CD300880E000 || The Pinball Arcade || EUR USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100CD300A1BA000 || Zombillie || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CD500B2C6000 || XEODRIFTER(ゼオドリフター) || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CD6004130000 || SubaraCity || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CD900B1AC000 || 거짓말쟁이 공주와 눈먼 왕자 || KOR || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100CDB00AD64000 || Yono (ヨノ) || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CDB00BC94000 || A Case of Distrust || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CDC00789E000 || The Final Station || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | || 魔界戰記DISGAEA 5 || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100CE1004E72000 || The Longest Five Minutes || EUR USA || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100CE1004FA6000 || ACA NEOGEO STREET HOOP || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 0100CE100A826000 || Jurassic Pinball || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100CE2007A86000 || Old Man's Journey || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CE400A2FA000 || ACA NEOGEO Gururin || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 0100CEA007D08000 || Crypt of the NecroDancer: Nintendo Switch Edition || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100CEF001DC0000 || アケアカNEOGEO わくわく7 || EUR JPN USA || 1.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100CEF008048000 || RIVE:アルティメットエディション || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CF2008D88000 || プリンセスは金の亡者 || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CF3008798000 || ACA NEOGEO REAL BOUT FATAL FURY 2 || EUR JPN USA || 5.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 0100CF8003E70000 || Harvest Moon®: Light of Hope Special Edition || USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100CFC00A1D8000 || Wild Guns™ Reloaded || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CFE003A64000 || ZOMBIE GOLD RUSH || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CFF0048D2000 || Milanoir || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D03003F0E000 || Nine Parchments Demo || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100D04004176000 || Farming Simulator Nintendo Switch Edition || EUR USA || 1.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100D0500B0A6000 || The VideoKid || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100F8B00883C000 || 原始人 うぉーりあーず || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D06003056000 || ピクセル ライン DX 体験版 || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100D07002CD6000 || Johnny Turbo's Arcade: Nitro Ball || USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D070040F8000 || スプラトゥーン2 前夜祭 || JPN || 3.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D0A009310000 || de Blob || EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100D0B0093D8000 || TorqueL -Physics Modified Edition- || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D0D00516A000 || Aqua Moto Racing Utopia || EUR USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100D1000B18C000 || 1979 Revolution: Black Friday || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D12008EE4000 || Heart&amp;Slash || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100D1200AC2E000 || 図書館ＳＷ・名作１００選＋α || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D13006DFA000 || 刑事J.B.ハロルドの事件簿　マンハッタン・レクイエム || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D170038EA000 || ACA NEOGEO SENGOKU || EUR JPN USA || 1.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 010040A0065D2000 || 体験版デス！がるメタる！ || JPN || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100D1700ACFC000 || Flood of Light || EUR JPN USA || 5.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100D1A00C330000 || The Mahjong Huntress || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D1B006744000 || Crash Bandicoot™ N. Sane Trilogy || EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100D1B00A5A2000 || Iro Hero || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D1D007F4E000 || Paper Wars: Cannon Fodder Devastated || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D1D00ACB8000 || Three Fourths Home: Extended Edition || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D230069CC000 || Johnny Turbo's Arcade: Wizard Fire || USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D2400AFB0000 || ACA NEOGEO CROSSED SWORDS || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Virtual Console<br /> |-<br /> | 0100D250083B4000 || Salt and Sanctuary || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D2600736A000 || Fe || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D2D009028000 || INSIDE || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100425009FB2000 || Baobabs Mausoleum Ep.1: Ovnifagos Don't Eat Flamingos || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D3A00409E000 || LEGO® Marvel Super Heroes 2 || USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 || || Application / Game<br /> |-<br /> | 0100D3D008E6C000 || Tiny Troopers Joint Ops XL || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D3F008746000 || Knights of Pen and Paper +1 Deluxier Edition || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100D4300A4CA000 || Infernium || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D49008748000 || Joe Dever's Lone Wolf || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D51006AAC000 || Knight Terrors || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D54003AAA000 || Winning Post 8 2017 || JPN || 1.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100D5700877A000 || 斑鳩 IKARUGA || JPN || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 01007B5002F56000 || ドラゴンクエストビルダーズ　アレフガルドを復活せよ　体験版 || JPN || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100D6000B52C000 || SNK 히로인즈 Tag Team Frenzy || KOR || 5.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100D67006F14000 || Skies of Fury DX || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D6800AC5C000 || SEGA AGES サンダーフォースⅣ || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D6D00A490000 || Pool Panic || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D6E008700000 || Save the Ninja Clan || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D7000AE6A000 || Star Story: The Horizon Escape || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D71004694000 || Minecraft || EUR JPN USA || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 || || Application / Game<br /> |-<br /> | 0100D75007E32000 || みんなで大富豪 || JPN || 4.0.0 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100D76006EF8000 || DOOM || JPN || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100D7700AF88000 || 光明之響 龍奏回音 || CHN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100D7A005DFC000 || Tennis || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D800040AC000 || Rocket Fist || EUR USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | || Shelter Generations (retail only) || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100D82009024000 || Goetia || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D83007928000 || あなたの四騎姫教導譚 || JPN || 3.0.1 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100D84005AF6000 || Grand Prix Rock 'N Racing || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D8500A692000 || Night Trap - 25th Anniversary Edition || USA || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100704000B3A000 || いっしょにチョキッと スニッパーズ 体験版 || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D87009954000 || Jumping Joe &amp; Friends || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D8800B87C000 || Cities: Skylines - Nintendo Switch™ Edition || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D8A00A564000 || エース・オブ・ルフトバッフェ -スクアドロン- || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D940022F6000 || Tiny Barbarian DX || EUR USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D940063A0000 || MXGP3 - The Official Motocross Videogame || EUR USA || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100D9500A0F6000 || CLOSED NIGHTMARE || JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100D98005E8C000 || Die for Valhalla! || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100D98007784000 || Premium Pool Arena || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100D99009734000 || White Night || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100D9A005ED6000 || 太鼓の達人 Nintendo Switchば～じょん！ || CHN JPN KOR || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100D9B0041CE000 || Spacecats with Lasers || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DA0006F50000 || ドラゴンファングZ 竜者ロゼと宿り木の迷宮 || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 327680 393216 || || Application / Game<br /> |-<br /> | 0100DA200A09A000 || Kero Blaster || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DA700879C000 || Last Day of June || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DB0007FF6000 || キャットクエスト || JPN || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100DB200B512000 || 本格AI搭載 銀星麻雀 || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DB300A026000 || Warp Shift || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100DB7003828000 || Pinball FX3 || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100DBB004150000 || 進撃の巨人２ || JPN || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 || || Application / Game<br /> |-<br /> | 0100DBC0081A4000 || ACORN Tactics || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DBD00ABF4000 || Party Trivia || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DBF004FAA000 || ACA NEOGEO SOCCER BRAWL || EUR JPN USA || 3.0.1 || Digital || 0 || || Virtual Console<br /> |-<br /> | 01004D1007926000 || 10秒走RETURNS 体験版 || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100DC300AC78000 || The Messenger || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100DC500B4B0000 || Beat Rush || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DC60085BA000 || Winning Post 8 2018 || JPN || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 || || Application / Game<br /> |-<br /> | 0100DCE009732000 || Poisoft Thud Card || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100DCE00B756000 || Earthworms || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01002CC0062B8000 || DEEMO || CHN EUR JPN KOR USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100DDB004F30000 || Sky Ride || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DDD0085A4000 || Sushi Striker™: The Way of Sushido || CHN EUR KOR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100DDD00B684000 || 中華大仙 || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DDD00C0EA000 || Phantaruk || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DE40068CA000 || Squareboy vs Bullies: Arena Edition || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100DE70085E8000 || Outlast 2 || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009840046BC000 || Semispheres || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100DEC00B2BC000 || The Midnight Sanctuary || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E8C004616000 || お絵かきパズル Pic-a-Pix Deluxe 体験版 || JPN || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100DF200A9DC000 || Woodle Tree Adventures Deluxe || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DF200B690000 || 本格AI搭載 大富豪 || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DF600AA4C000 || シリアルクリーナー　ジョージの裏シゴト || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DF8009BEE000 || 数学力王　中学２年 || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DF9005E7A000 || Floor Kids || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100DFC003398000 || アケアカNEOGEO ブレイジングスター || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100DFC00405E000 || Wheels of Aurelia || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E000089F2000 || 포탈 나이츠 || KOR || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100E000092B2000 || One Eyed Kutkh || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E0000A3C4000 || ルカノール伯爵 || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E0000B7BC000 || Iconoclasts || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E03009DB8000 || Invisiballs || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E0300B13C000 || Mahjong Deluxe 3 || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100E04009BD4000 || Spot The Difference || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E07006C84000 || Earth Atlantis || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100E0C00ADAC000 || SENRAN KAGURA Reflexions || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E0F008E64000 || 僕のヒーローアカデミア One's Justice || JPN || 5.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 01008EA00405C000 || forma.8 || EUR USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100E1900B584000 || ネオンロード || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E1A00AF40000 || Hungry Shark® World || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100E1E00A14E000 || Furi（フリー） || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E1F003EE8000 || The Jackbox Party Pack 4 || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100E21009352000 || Wolfenstein® II: The New Colossus™ || JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100E24006FA8000 || Stikbold! A Dodgeball Adventure DELUXE || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100E28002D74000 || Space Dave || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E29001298000 || Has-Been Heroes || EUR JPN USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 || Gamecard Front: LA-H-ABMKA-{region} Back: ABMKA09Y000 || Application / Game<br /> |-<br /> | 01002A2004530000 || The Bridge || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E3C00A118000 || Chicken Assassin: Reloaded || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100E45004212000 || Champion Jockey Special || JPN || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100E46003042000 || マリオ＋ラビッツ キングダムバトル || CHN JPN KOR || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100E4600B166000 || Candle: The Power of the Flame || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100E470067A8000 || Don't Knock Twice || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100E4D00A690000 || PixelJunk® Monsters 2 Demo || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100E4F00AE14000 || Sparkle ZERO || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E5000AB8A000 || Code of Princess EX || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100E570051F0000 || PixelJunk モンスターズ 2　体験版 || JPN || 4.0.0 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | || Owlboy (retail only) || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100E5700A3BA000 || Vesta || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E5F0000C0000 || 魔界戦記ディスガイア5 体験版 || JPN || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100E5F00643C000 || Astro Bears Party || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100770008DD8000 || Monster Hunter Generations Ultimate™ || CHN EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100E65002BB8000 || Stardew Valley || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 010079B0045C2000 || ソニックフォース体験版 || CHN JPN KOR || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100E66006406000 || OCTOPATH TRAVELER || JPN || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100E67008D84000 || Ultra Space Battle Brawl || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100E6A009A26000 || Spartan || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100E7100B198000 || Scribblenauts Mega Pack || EUR USA || 5.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100E7200B272000 || Lanota || EUR JPN USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100E74007EAC000 || Spellspire || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E7400B83E000 || Surgeon Simulator CPR || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E7C001DE0000 || Arcade Archives Kid's Horehore Daisakusen || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E7E00C4CA000 || Bombing Busters || USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E7F00BA5A000 || Catch 'Em! Goldfish Scooping || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E81007A06000 || Victor Vran Overkill Edition || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100E8500AD58000 || 無双OROCHI３ || JPN || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100E860086C6000 || ロックマンX アニバーサリー コレクション 2 || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100E8C004616000 || お絵かきパズル Pic-a-Pix Deluxe 体験版 || JPN || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100E8D007E16000 || Gotcha Racing 2nd || CHN EUR JPN KOR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E93004CB4000 || 鯉(KOI) || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E9300ABEC000 || Toki Tori 2+（トキ・トリ 2+） || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E9300B90A000 || メルルのアトリエ ～アーランドの錬金術士３～ DX || JPN || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100E95004038000 || Xenoblade Chronicles™ 2 || EUR KOR USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 327680 393216 458752 524288 589824 655360 720896 786432 || || Application / Game<br /> |-<br /> | 0100E95006B30000 || The Men of Yoshiwara: Kikuya || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100E98002F6E000 || Mantis Burn Racing || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100E98006F22000 || Bad North || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100E9A00B0BC000 || NoReload Heroes || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100E9D007432000 || Wonder Boy: The Dragon's Trap || CHN JPN KOR || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100E9E00B052000 || Arcade Archives DONKEY KONG || EUR JPN USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EA1009022000 || Timberman VS || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 010039A008E76000 || ChromaGun || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100EA6004516000 || MEMBRANE || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100EAB00605C000 || Poly Bridge || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100EAE003A5A000 || ファイアーエムブレム無双 || CHN JPN || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100EAE00BE4A000 || にゃんらぶ ～私の恋の見つけ方～ || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EB2001DCC000 || アケアカNEOGEO ザ・キング・オブ・ファイターズ '94 || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EB6005E90000 || Maria The Witch || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100EB600A4DA000 || A Robot Named Fight || EUR USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100EB600AB5E000 || THE Card: Poker, Texas hold 'em, Blackjack and Page One || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EB800868C000 || Azkend 2: The World Beneath || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EB800B614000 || Freedom Planet || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 01009EA00A320000 || Devious Dungeon || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100EBE002B3E000 || アケアカNEOGEO メタルスラッグ || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100EC100A790000 || PSYVARIAR DELTA《閃速神機》 || CHN JPN KOR || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100EC7009348000 || Rogue Aces || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100EC8004762000 || KORG Gadget for Nintendo Switch || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100EC800800C000 || NARUTO SHIPPUDEN: Ultimate Ninja STORM Trilogy || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EC9004736000 || Bulb Boy || EUR || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100ECB00A0FC000 || Let's Sing 2018 || USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100ECE00B210000 || Calculation Castle : Greco's Ghostly Challenge &quot;Multiplication&quot; || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100ECF008474000 || 6180 the moon || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100ED600A87A000 || Minit || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100ED800A526000 || パンカプ～オムニアの防人 || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EDC00AAAA000 || It's Spring Again || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EDD0068A6000 || Broken Age || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EDD00A1DA000 || インナースペース || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EE6002B48000 || アケアカNEOGEO　餓狼伝説 〜宿命の闘い〜 || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EE80098E6000 || Toki Tori || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EEA00AFB2000 || ACA NEOGEO FOOTBALL FRENZY || EUR JPN USA || 5.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | 0100EEB005ACC000 || Ghost 1.0 || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100EEC00A262000 || D/Generation || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100EEC00AA6E000 || Gone Home || EUR USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100EEE0096CA000 || おしゃべり！ホリジョ！ || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EF3007250000 || 뿌요뿌요™테트리스® S || KOR || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100EF300B720000 || Plague Road || JPN || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EFB00B7B8000 || Omvorm || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EFD00A4FA000 || Shantae and the Pirate's Curse || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100EFE009424000 || Animal Super Squad || EUR USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100F0000869C000 || Saturday Morning RPG || USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100F0300B7BE000 || Ludomania || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F0400351C000 || Astro Duel Deluxe || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100F0B0081DA000 || Dawn of the Breakers || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100F0C00685E000 || Slime-san || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F0D004CAE000 || PAN-PAN A tiny big adventure || EUR USA || 1.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100F10009870000 || 大神 絶景版 || JPN || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100F110029C8000 || Yooka-Laylee || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100C3F000BD8000 || みんなでワイワイ！スペランカー 体験版 || JPN || 1.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100F15003E64000 || Fire Emblem Warriors™ || EUR KOR USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 || Gamecard Front: LA-H-ADXHB-{region} Back: ADXHB08X000 || Application / Game<br /> |-<br /> | 0100F160092D2000 || STEINS;GATE ELITE || JPN || 5.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100F17004156000 || Retro City Rampage DX || EUR USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F19006E04000 || LEGO® The Incredibles || EUR || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100F1A00A5DC000 || FRAMED Collection || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100F200049C8000 || InnerSpace || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100F210061E8000 || Hollow || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100F2300A5DA000 || Think of the Children || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F25001DD0000 || Arcade Archives DOUBLE DRAGON || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F2A005C98000 || Gorogoa || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 || || Application / Game<br /> |-<br /> | 0100F3400332C000 || Xenoblade2 (ゼノブレイド2) || CHN JPN || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 720896 786432 || || Application / Game<br /> |-<br /> | 0100F3500A20C000 || BlobCat || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100F3D001DEE000 || Puyo Puyo™ Tetris® Demo || EUR || 1.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100F3D008436000 || Hiragana Pixel Party || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100F3D00B032000 || God Wars The Complete Legend || EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100F45006A00000 || Oh...Sir! The Hollywood Roast || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100F4500A47E000 || INSTANT TENNIS || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F4500AA4E000 || Slice, Dice &amp; Rice || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100F490066A6000 || BILLIARD || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F4E006B32000 || The Men of Yoshiwara: Ohgiya || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100352006A10000 || Heroes of the Monkey Tavern Demo || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100F5400AB6C000 || Alchemic Jousts || EUR USA || 5.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100F55004AB8000 || Uurnog Uurnlimited || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F5800ABE8000 || Toki Tori（トキ・トリ） || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F5A008126000 || NBA Playgrounds - Enhanced Edition || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F5B007638000 || Pixel Action Heroes || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 010077B0038B2000 || LOST SPHEAR Demo || EUR JPN USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100F6000BC6C000 || DRAGON BALL FIGHTERZ Open Beta || EUR JPN USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F6400A77E000 || カプコン ベルトアクション コレクション || JPN || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100F6800910A000 || Hover || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F6A00A684000 || ひぐらしのなく頃に奉 || JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100F6C00641C000 || A.O.T. 2 || EUR || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 || || Application / Game<br /> |-<br /> | 0100F6C00A016000 || Chicken Range || EUR || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100F7000464A000 || Super Beat Sports™ || EUR JPN USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100F770045CA000 || Time Recoil || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F78002040000 || Troll and I™ || EUR USA || 1.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100F7800A434000 || Drawful 2 || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100F7B002340000 || FIFA 18 || EUR JPN USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 || || Application / Game<br /> |-<br /> | 0100F7B00595C000 || Tower Of Babel || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F7D00A1BC000 || NO THING || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100F7F00AFA2000 || ACA NEOGEO THE SUPER SPY || EUR JPN USA || 4.0.0 || Digital || 0 || || Virtual Console<br /> |-<br /> | || Shaq Fu: A Legend Reborn (retail only) || || 5.0.0 || Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100F8300A95C000 || Parallel || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F89003BC8000 || The Sexy Brutale || EUR USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 327680 || || Application / Game<br /> |-<br /> | 0100F890078A8000 || Streets of Red - Devil's Dare Deluxe || USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F8900A5B0000 || The Way Remastered || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100F8900ADC8000 || Beekyr Reloaded || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | || The Binding of Isaac: Afterbirth+ (retail only) || || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100F8A00853C000 || Wandersong || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F8B00883C000 || 原始人 うぉーりあーず || JPN || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100F8D0091F0000 || 迷宮の塔　トレジャーダンジョン　体験版 || JPN || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F8F0000A2000 || Splatoon™ 2 || EUR || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 720896 786432 851968 917504 983040 1048576 1114112 1179648 1245184 1310720 1376256 1441792 1507328 1572864 1638400 1703936 || || Application / Game<br /> |-<br /> | 0100F900046C4000 || Mercenary Kings Reloaded Edition || EUR JPN USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F900097EC000 || Tachyon Project || JPN || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F9100B04A000 || CLOSED NIGHTMARE || CHN || 4.0.0 || Digital / Cartridge || 0 131072 || || Application / Game<br /> |-<br /> | 0100F92005D54000 || Swim Out || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F93004288000 || Puzzle Adventure Blockle || EUR JPN USA || 1.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100F9A008AD6000 || Word Search by POWGI Demo || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100FA100620C000 || 蒼の彼方のフォーリズム for Nintendo Switch || JPN || 3.0.1 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100FA500B124000 || グレコからの挑戦状！計算の城とオバケたち　かけ算 || JPN || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100DDD0085A4000 || Sushi Striker™: The Way of Sushido || CHN EUR KOR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100FAA00B168000 || Hello Neighbor || EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100FAF009562000 || Deep Ones || EUR USA || 3.0.1 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100FB500631E000 || ATOMINE || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100FBC007EAE000 || Tesla vs Lovecraft || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100FC000AEF0000 || 死亡細胞 (Dead Cells) || CHN KOR || 4.0.0 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100FC5009952000 || Pirates: All Aboard! || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100FC5009E10000 || Holy Potatoes! A Weapon Shop?! || EUR USA || 4.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100FCF002A58000 || Ultimate Chicken Horse || USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100FD200A45A000 || Spheroids || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100FDB0092B4000 || Where Are My Friends? || EUR USA || 4.0.0 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100FDB00AA80000 || レイトン ミステリージャーニー カトリーエイルと大富豪の陰謀 DX || JPN || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100FDF0083A6000 || Regalia: Of Men and Monarchs - Royal Edition || EUR USA || 4.0.0 || Digital || 0 131072 || || Application / Game<br /> |-<br /> | 0100FF00042EE000 || Lumo || EUR JPN USA || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100FF1004D56000 || Ace of Seafood || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100FF5005B76000 || STRIKERS1945 for Nintendo Switch || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 || || Application / Game<br /> |-<br /> | 0100FF60051E2000 || SUPERBEAT XONiC EX || EUR || 3.0.1 || Digital / Cartridge || 0 65536 || || Application / Game<br /> |-<br /> | 0100FF700B96C000 || Snake vs Snake || EUR USA || 5.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100FF8005EB2000 || Plague Road || EUR USA || 3.0.1 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100FF9003F10000 || Splasher || EUR USA || 3.0.1 || Digital || 0 65536 || || Application / Game<br /> |-<br /> | 0100FFA0093E8000 || FIFA 19 || EUR JPN USA || 5.0.0 || Digital / Cartridge || 0 || || Application / Game<br /> |-<br /> | 0100C9800A454000 || GALAK-Z: Variant S || EUR USA || 4.0.0 || Digital || 0 || || Application / Game<br /> |-<br /> | 0100CB800B07E000 || NOT A HERO: SUPER SNAZZY EDITION || EUR USA || 5.0.0 || Digital || 0 65536 || || Application / Game<br /> |}<br /> <br /> = Demos =<br /> {| class=&quot;wikitable sortable&quot;<br /> ! TitleID || Description || Region || Minimum Required OS || Distribution Method || Title Versions || Cartridge Description || Type<br /> |-<br /> | 0100618004096000 || Robonauts Demo || EUR USA || 3.0.1 || Digital || 0 65536 || || Demo<br /> |-<br /> | 010021F004270000 || Spelunker Party! Demo Version || EUR USA || 3.0.1 || Digital || 0 || || Demo<br /> |-<br /> | 010073C001D5E000 || Puyo Puyo Tetris Demo || USA || 1.0.0 || Digital / Cartridge || 0 131072 || || Demo<br /> |-<br /> | 0100047009742000 || Twin Robots: Ultimate Edition Demo || EUR USA || 3.0.1 || Digital || 0 131072 || || Demo<br /> |-<br /> | 01006BB009004000 || わくわくどうぶつランド　体験版 || CHN JPN KOR || 4.0.0 || Digital / Cartridge || 0 || || Demo<br /> |-<br /> | 0100559004BB4000 || すみっコぐらし　すみっコパークへようこそ　体験版 || JPN || 3.0.1 || Digital / Cartridge || 0 131072 || || Demo<br /> |-<br /> | 010053D0001BE000 || ぷよぷよ™テトリス®Ｓ 体験版 || CHN JPN || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Demo<br /> |-<br /> | 0100225000FEE000 || Blaster Master Zero Demo || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 327680 || || Demo<br /> |-<br /> | 0100A6200851E000 || 超回転 寿司ストライカー The Way of Sushido 体験版 || CHN JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Demo<br /> |-<br /> | 01009BF0072D4000 || 進め！キノピオ隊長　体験版 || CHN EUR JPN KOR USA || 4.0.0 || Digital / Cartridge || 0 || || Demo<br /> |-<br /> | 01008DC004CBA000 || 王だぁランド！ 体験版 || JPN || 3.0.1 || Digital || 0 65536 131072 196608 262144 || || Demo<br /> |-<br /> | 010095600AA36000 || Fill-a-Pix: Phil's Epic Adventure Demo || EUR USA || 4.0.0 || Digital || 0 65536 || || Demo<br /> |-<br /> | 0100B3F000BE2000 || ポッ拳　POKKÉN TOURNAMENT DX 体験版 || CHN EUR JPN USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 || || Demo<br /> |-<br /> | 01005AA00372A000 || UNO Demo || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 || || Demo<br /> |-<br /> | 010082600A234000 || アーバントライアル プレイグラウンド 体験版 || JPN || 4.0.0 || Digital / Cartridge || 0 131072 || || Demo<br /> |-<br /> | 01000E2003FA0000 || MIGHTY GUNVOLT BURST Demo || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 327680 || || Demo<br /> |-<br /> | 01001FA0034E2000 || Dark Witch Music Episode: Rudymical Demo || EUR JPN USA || 1.0.0 || Digital || 0 || || Demo<br /> |-<br /> | 010031E00846A000 || タンブルストーン・デモ || JPN || 3.0.1 || Digital || 0 || || Demo<br /> |-<br /> | 0100E4D00A690000 || PixelJunk® Monsters 2 Demo || EUR USA || 4.0.0 || Digital || 0 131072 || || Demo<br /> |-<br /> | 0100F3D001DEE000 || Puyo Puyo™ Tetris® Demo || EUR || 1.0.0 || Digital / Cartridge || 0 131072 || || Demo<br /> |-<br /> | 0100E5F0000C0000 || 魔界戦記ディスガイア5 体験版 || JPN || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 || || Demo<br /> |-<br /> | 010077B0038B2000 || LOST SPHEAR Demo || EUR JPN USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 || || Demo<br /> |-<br /> | 01007E3006DDA000 || Kirby™ Star Allies Demo || CHN EUR JPN KOR USA || 4.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Demo<br /> |-<br /> | 0100737003190000 || IMPLOSION 体験版 || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Demo<br /> |-<br /> | 0100112003B8A000 || Slime-san Demo || EUR USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 || || Demo<br /> |-<br /> | 0100AED003A60000 || プランテラ ガーデンライフ DXエディション 体験版 || JPN || 1.0.0 || Digital || 0 65536 || || Demo<br /> |-<br /> | 0100E67008D84000 || 【体験版】Ultra Space Battle Brawl || EUR JPN USA || 4.0.0 || Digital || 0 131072 || || Demo<br /> |-<br /> | 010083600AE9E000 || Happy Birthdays Demo || EUR USA || 4.0.0 || Digital / Cartridge || 0 || || Demo<br /> |-<br /> | 0100F8D0091F0000 || 迷宮の塔　トレジャーダンジョン　体験版 || JPN || 3.0.1 || Digital || 0 || || Demo<br /> |-<br /> | 01005F900416E000 || Pic-a-Pix Deluxe Demo || EUR USA || 3.0.1 || Digital || 0 131072 || || Demo<br /> |-<br /> | 0100837006AF0000 || forma.8 体験版 || JPN || 3.0.1 || Digital || 0 65536 || || Demo<br /> |-<br /> | 01009A5009A9E000 || Shining Resonance Refrain Demo || EUR USA || 4.0.0 || Digital / Cartridge || 0 65536 || || Demo<br /> |-<br /> | 0100B0C0086B0000 || Mega Man 11 Demo || EUR JPN USA || 5.0.0 || Digital || 0 65536 || || Demo<br /> |-<br /> | 0100D0B0093D8000 || トルクル(TorqueL) 物理調整版 デモ || EUR JPN USA || 3.0.1 || Digital || 0 65536 || || Demo<br /> |-<br /> | 0100ACD009B6E000 || ポータルナイツ 体験版 || JPN || 4.0.0 || Digital / Cartridge || 0 65536 || || Demo<br /> |-<br /> | 0100437004170000 || Portal Knights Demo || EUR USA || 3.0.1 || Digital / Cartridge || 0 131072 || || Demo<br /> |-<br /> | 010016C009374000 || Lode Runner Legacy Demo Version || EUR JPN USA || 4.0.0 || Digital || 0 65536 || || Demo<br /> |-<br /> | 0100322004844000 || Embers of Mirrim Demo || EUR USA || 3.0.1 || Digital || 0 || || Demo<br /> |-<br /> | 0100A7F002830000 || VOEZ 体験版 || CHN EUR JPN KOR USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 || || Demo<br /> |-<br /> | 01007D7001D0E000 || オーシャンホーン　体験版 || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Demo<br /> |-<br /> | 0100D06003056000 || Piczle Lines DX Demo || EUR JPN USA || 1.0.0 || Digital || 0 65536 131072 196608 262144 327680 || || Demo<br /> |-<br /> | 0100CD3000BDC000 || ドラゴンクエストヒーローズI・II for Nintendo Switch 体験版 || JPN || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 || || Demo<br /> |-<br /> | 0100C0A004C2C000 || Kid Tripp Demo || EUR USA || 3.0.1 || Digital || 0 65536 || || Demo<br /> |-<br /> | 0100C88008BA6000 || Happy Birthdays 体験版 || JPN || 3.0.1 || Digital / Cartridge || 0 65536 || || Demo<br /> |-<br /> | 01005FF002E2A000 || RAYMAN® LEGENDS: DEFINITIVE EDITION DEMO || CHN EUR KOR USA || 1.0.0 || Digital / Cartridge || 0 131072 || || Demo<br /> |-<br /> | 0100E570051F0000 || PixelJunk モンスターズ 2　体験版 || JPN || 4.0.0 || Digital || 0 65536 131072 196608 262144 || || Demo<br /> |-<br /> | 01000E10094D0000 || クリプト・オブ・ネクロダンサー体験版 || JPN || 3.0.1 || Digital || 0 65536 || || Demo<br /> |-<br /> | 0100F9A008AD6000 || Word Search by POWGI Demo || EUR USA || 4.0.0 || Digital || 0 || || Demo<br /> |-<br /> | 01009B500007C000 || ARMS Demo || CHN EUR JPN KOR USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 393216 458752 524288 589824 655360 720896 786432 851968 917504 983040 || || Demo<br /> |-<br /> | 0100191006B98000 || ロロロロ　体験版 || JPN || 3.0.1 || Digital || 0 || || Demo<br /> |-<br /> | 01001C9007614000 || Max: The Curse of Brotherhood (Demo) || EUR USA || 3.0.1 || Digital || 0 65536 || || Demo<br /> |-<br /> | 01008FF004610000 || リーグ オブ イーブル　体験版 || JPN || 1.0.0 || Digital || 0 || || Demo<br /> |-<br /> | 0100C3800049C000 || モンスターハンターダブルクロス™ Nintendo Switch Ver. 体験版 || JPN || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 262144 || || Demo<br /> |-<br /> | 0100D03003F0E000 || Nine Parchments Demo || EUR JPN USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 || || Demo<br /> |-<br /> | 010072E00AAA2000 || モザイクアート Fill-a-Pix DELUXE 体験版 || JPN || 4.0.0 || Digital || 0 65536 || || Demo<br /> |-<br /> | 010040A0065D2000 || 体験版デス！がるメタる！ || JPN || 3.0.1 || Digital / Cartridge || 0 65536 || || Demo<br /> |-<br /> | 01007B5002F56000 || ドラゴンクエストビルダーズ　アレフガルドを復活せよ　体験版 || JPN || 3.0.1 || Digital / Cartridge || 0 || || Demo<br /> |-<br /> | 0100704000B3A000 || いっしょにチョキッと スニッパーズ 体験版 || EUR JPN USA || 1.0.0 || Digital || 0 65536 || || Demo<br /> |-<br /> | 01002CC0062B8000 || DEEMO 体験版 || CHN EUR JPN KOR USA || 3.0.1 || Digital || 0 65536 131072 196608 262144 327680 || || Demo<br /> |-<br /> | 0100E8C004616000 || お絵かきパズル Pic-a-Pix Deluxe 体験版 || JPN || 3.0.1 || Digital || 0 131072 || || Demo<br /> |-<br /> | 01002A2004530000 || ザ・ブリッジ・デモ || EUR JPN USA || 1.0.0 || Digital || 0 || || Demo<br /> |-<br /> | 010079B0045C2000 || ソニックフォース体験版 || CHN JPN KOR || 1.0.0 || Digital / Cartridge || 0 131072 || || Demo<br /> |-<br /> | 01005700031AE000 || Disgaea 5 Complete Demo || EUR USA || 1.0.0 || Digital / Cartridge || 0 65536 131072 196608 || || Demo<br /> |-<br /> | 0100C3F000BD8000 || みんなでワイワイ！スペランカー 体験版 || JPN || 1.0.0 || Digital / Cartridge || 0 65536 || || Demo<br /> |-<br /> | 0100352006A10000 || Heroes of the Monkey Tavern Demo || EUR USA || 3.0.1 || Digital || 0 65536 || || Demo<br /> |-<br /> | 010077B0038B2000 || LOST SPHEAR Demo || EUR JPN USA || 3.0.1 || Digital / Cartridge || 0 65536 131072 196608 262144 327680 || || Demo<br /> |-<br /> | 01005C600AC68000 || Valkyria Chronicles 4 Demo || EUR USA || 5.0.0 || Digital / Cartridge || 0 || || Demo<br /> |}<br /> <br /> = VersionList =<br /> See [[VersionList]] for Nintendo Switch VersionList details.</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=HIPC&diff=5167 2018-10-07T22:29:54Z

<p>Shinyquagsire23: </p> <hr /> <div>== IPC Command Structure ==<br /> This is an array of u32's, usually located in [[Thread Local Storage]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 15-0 || [[#Type|Type]].<br /> |-<br /> | 0 || 19-16 || Number of buf X descriptors (each: 2 words).<br /> |-<br /> | 0 || 23-20 || Number of buf A descriptors (each: 3 words).<br /> |-<br /> | 0 || 27-24 || Number of buf B descriptors (each: 3 words).<br /> |-<br /> | 0 || 31-28 || Number of buf W desciptors (each: 3 words), not observed<br /> |-<br /> | 1 || 9-0 || Size of raw data in u32s, plus 4<br /> |-<br /> | 1 || 13-10 || Flags for buf C descriptor.<br /> |-<br /> | 1 || 30-20 || ?<br /> |-<br /> | 1 || 31 || Enable handle descriptor.<br /> |-<br /> | ... || || [[#Handle descriptor|Handle descriptor]], if enabled.<br /> |-<br /> | ... || || [[#Buffer descriptor X &quot;Pointer&quot;|Buf X descriptors]], each one 2 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Buf A descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Buf B descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Type W descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Raw_data_section|Raw data section]] (including padding before and after aligned data section).<br /> |-<br /> | ... || || [[#Buffer descriptor C &quot;ReceiveList&quot;|Buf C descriptors]], each one 2 words.<br /> |}<br /> <br /> First two header u32's and handle descriptor (if enabled) are copied as-is from one process to the other.<br /> <br /> === Type ===<br /> IPC commands can have different types which influence how the IPC server processes requests in &quot;nn::sf::hipc::server::HipcServerSessionManagerBase::ProcessRequest&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Value || Name<br /> |-<br /> | 0 || Invalid<br /> |-<br /> | 1 || [[#LegacyRequest, LegacyControl|LegacyRequest]]<br /> |-<br /> | 2 || [[#Close|Close]]<br /> |-<br /> | 3 || [[#LegacyRequest, LegacyControl|LegacyControl]]<br /> |-<br /> | 4 || [[#Request, Control|Request]]<br /> |-<br /> | 5 || [[#Request, Control|Control]]<br /> |-<br /> | 6 || [5.0.0+] [[#RequestWithContext, ControlWithContext|RequestWithContext]]<br /> |-<br /> | 7 || [5.0.0+] [[#RequestWithContext, ControlWithContext|ControlWithContext]]<br /> |}<br /> <br /> ==== Close ====<br /> When processing a request of this type, the IPC server calls:<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::DestroyServerSession&quot;<br /> * &quot;nn::sf::hipc::CloseServerSessionHandle&quot;<br /> <br /> This ensures that the server session is destroyed internally and properly closed.<br /> <br /> ==== LegacyRequest, LegacyControl ====<br /> These types are handled by calling:<br /> * &quot;nn::sf::hipc::detail::HipcMessageBufferAccessor::ParseHeader&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::ProcessMessage&quot;<br /> * &quot;nn::sf::hipc::Reply&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::RegisterServerSessionToWaitBase&quot;<br /> <br /> It is speculated that these are part of an older message processing system where headers were further partitioned.<br /> <br /> ==== Request, Control ====<br /> These types are handled by calling:<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::ProcessMessage2&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::RegisterServerSessionToWaitBase&quot;<br /> <br /> This represents a more modern message handling system where contents follow the general marshalling structure.<br /> <br /> ==== RequestWithContext, ControlWithContext ====<br /> These are identical to normal Request and Control types, but with the additional requirement of suppling a token in their [[#Data payload|data payload]].<br /> <br /> This token is used by &quot;nn::sf::cmif::SetInlineContext&quot; which has the sole purpose of saving it into the TLS in order for it to be distributed to any IPC commands that are made while processing the current command. It's unknown if this token serves any purpose or if it's just a debug-tool to figure out what IPC command caused a particular chain of commands.<br /> <br /> === Handle descriptor ===<br /> There can only be one of this descriptor type. It is enabled by bit31 of the second word.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 0 || Send current PID.<br /> |-<br /> | 0 || 4-1 || Number of handles to copy<br /> |-<br /> | 0 || 8-5 || Number of handles to move<br /> |-<br /> | ... || || 8-byte PID if enabled<br /> |-<br /> | ... || || Handles to copy<br /> |-<br /> | ... || || Handles to move<br /> |}<br /> <br /> Sysmodules load the last u64 of rawdata when handling the PID. This is not written by kernel. For sysmodule handling:<br /> * In some cases: these commands require a placeholder u64 value passed in the input parameters, as mentioned above. In these cases the OverwriteClientProcessId method is called to replace the value before it is used.<br /> * In other cases: The rawdata_u64 is compared with the PID from the descriptor. On mismatch and when rawdata_u64!=0, error 0x60A is returned. The PID value passed to the cmdhandler vtable funcptr is the rawdata_u64.<br /> <br /> Handle 0 is allowed, and just means no handle was sent.<br /> <br /> === Buffer descriptor X &quot;Pointer&quot; ===<br /> This one is packed even worse than A, they inserted the bit38-36 of the address ''on top'' of the counter field.<br /> <br /> Officially, the counter is known as &quot;receive index&quot;. This one writes to the buffer described in the ReceiveList.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 5-0 || Bits 5-0 of counter.<br /> |-<br /> | 0 || 8-6 || Bit 38-36 of address.<br /> |-<br /> | 0 || 11-9 || Bits 11-9 of counter.<br /> |-<br /> | 0 || 15-12 || Bit 35-32 of address.<br /> |-<br /> | 0 || 31-16 || Size<br /> |-<br /> | 1 || || Lower 32-bits of address.<br /> |}<br /> <br /> === Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot; ===<br /> This packing is so unnecessarily complex.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || || Lower 32-bits of size.<br /> |-<br /> | 1 || || Lower 32-bits of address.<br /> |-<br /> | 2 || 1-0 || Flags. Always set to 0, 1 or 3.<br /> |-<br /> | 2 || 4-2 || Bit 38-36 of address.<br /> |-<br /> | 2 || 27-24 || Bit 35-32 of size.<br /> |-<br /> | 2 || 31-28 || Bit 35-32 of address.<br /> |}<br /> <br /> A reply must not use A/B/W, svcReplyAndReceive will return 0xE801.<br /> <br /> [[SVC|MemoryAttribute]] IsBorrowed and IsUncached are never allowed for the source address.<br /> <br /> &quot;Send&quot; means buffer is sent from source process into service process.<br /> <br /> &quot;Receive&quot; means that data is copied from service process into user process.<br /> <br /> &quot;Exchange&quot; means both &quot;Send&quot; and &quot;Receive&quot;.<br /> <br /> ==== Flags ====<br /> Determines what [[SVC|MemoryState]] to use with the mapped memory in the sysmodule.<br /> <br /> Used to enforce whether or not device mapping is allowed for src and dst buffers respectively.<br /> <br /> * Flag0: Device mapping *not* allowed for src or dst.<br /> * Flag1: Device mapping allowed for src and dst.<br /> * Flag3: Device mapping allowed for src but not for dst.<br /> <br /> === Buffer descriptor C &quot;ReceiveList&quot; ===<br /> There's a 4-bit flag in the main header controlling the behavior of C descriptors.<br /> <br /> If it has value 0, the C descriptor functionality is disabled.<br /> <br /> If it has value 1, there is an &quot;inlined&quot; C buffer after the raw data. Received data is copied to ROUND_UP(cmdbuf+raw_size+index, 16)<br /> <br /> If it has value 2, there is a single C descriptor.<br /> <br /> Otherwise it has (flag-2) C descriptors. In this case, index picks which C descriptor to copy received data to [instead of picking the offset into the buffer].<br /> <br /> Data sent with this method must have MemoryState 0x4000000 mask set.<br /> <br /> After reply, X descriptors are written to the sender containing the address, size and index that were copied to.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || || Lower 32-bits of address.<br /> |-<br /> | 1 || 15-0 || Rest of address.<br /> |-<br /> | 1 || 31-16 || Size<br /> |}<br /> <br /> === IPC buffers ===<br /> Buffer descriptor A/B/... map memory into the sysmodule process. For the mapped memory in the sysmodule the permissions are: desc-A = R--, desc-B = RW-. The buffer is automatically unmapped while the kernel handles the cmdreply, the sysmodule doesn't need to specify anything in the cmdreply to trigger this.<br /> <br /> This memory is mapped in the sysmodule to the same vaddr from the original user-process cmd-request, except with with bits &gt;=(~28(?)) changed to a different ASLR'd region.<br /> <br /> No user-process-&gt;sysmodule memcpy is done for outbufs, only sysmodule-&gt;user-process.<br /> <br /> == Raw data section ==<br /> [[File:Ipc msg buffer type a example.png|thumb|An example of an IPC message with a type 0xA buffer in it. Red is headers/descriptors, yellow is padding, and blue is data/buffer lengths. Note that the size of the u16 array for type A lengths is padded to fill up a whole word.]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Description<br /> |-<br /> | ... || Padding to align to 16 bytes.<br /> |-<br /> | ... || If sent to an object domain, a [[#Domain_message|domain message]], otherwise a [[#Data payload|data payload]]<br /> |-<br /> | ... || Padding<br /> |-<br /> | ... || Buffer type 0xA lengths (u16 array)<br /> |}<br /> <br /> The total amount of padding within the raw data section is always 0x10 bytes. This means that if no padding is required before the message, there will be 0x10 bytes of padding after the message (before the buffer type 0xA lengths).<br /> <br /> === Domain message ===<br /> This header is used to wrap up requests sent to domains instead of sessions.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 7-0 || Command. 1=send message, 2=close virtual handle<br /> |-<br /> | 0 || 8-15 || Input object count<br /> |-<br /> | 0 || 31-16 || Length of [[IPC_Marshalling#Data_payload|data payload]] in bytes.<br /> |-<br /> | 1 || || Object ID (from cmd 0 in [[IPC_Marshalling#Control|Control]]).<br /> |-<br /> | 2 || || Padding<br /> |-<br /> | 3 || || [5.0.0+] Token for (NewRequest only)<br /> |-<br /> | 4... || || [[#Data payload|Data payload]]<br /> |-<br /> | ... || || Input object IDs (u32s, not aligned)<br /> |}<br /> <br /> === Data payload ===<br /> This is an array of u32's, but individual parameters are generally stored as u64's.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Description<br /> |-<br /> | 0 || Magic (&quot;SFCI&quot; for requests, &quot;SFCO&quot; for responses) as u64.<br /> |-<br /> | 2 || Command id as u64 for requests, [[Error_codes|error code]] as u64 for responses.<br /> |-<br /> | 3 || [5.0.0+] Token (for NewRequest only, non-domain messages).<br /> |-<br /> | 4... || Input parameters or return values<br /> |}<br /> <br /> [5.0.0+] A token value was introduced into raw_data+12 (regardless of domain or not, in either case it overlaps with padding).<br /> <br /> == Official marshalling code ==<br /> The official marshalling function takes an array of (buf_ptr, size) pairs and a type-field for each such pair.<br /> <br /> Bitmask 0x10 seems to indicate null-terminated strings.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Type Mask || Description || Direction<br /> |-<br /> | 4 + 1 || Creates a A descriptor with flags=0. || In<br /> |-<br /> | 0x40 + 4 + 1 || Creates a A descriptor with flags=1. || In<br /> |-<br /> | 0x80 + 4 + 1 || Creates a A descriptor with flags=3. || In<br /> |-<br /> | 4 + 2 || Creates a B descriptor with flags=0. || Out<br /> |-<br /> | 0x40 + 4 + 2 || Creates a B descriptor with flags=1. || Out<br /> |-<br /> | 0x80 + 4 + 2 || Creates a B descriptor with flags=3. || Out<br /> |-<br /> | 8 + 1 || Creates an X descriptor || In<br /> |-<br /> | 8 + 2 || Creates a C descriptor, and writes the u16 size to an offset into raw data. || Out<br /> |-<br /> | 0x10 + 8 + 2 || Creates a C descriptor || Out<br /> |-<br /> | 0x20 + 1 || Creates both an A and X descriptor || In<br /> |-<br /> | 0x20 + 2 || Creates both an B and C descriptor || Out<br /> |-<br /> | 0x20 + 2 + 0x40 || Same as 0x20 + 2, except a certain value is set to hard-coded 0x1 instead. || Out<br /> |}<br /> <br /> C and X (Pointer and ReceiveList) descriptors are backed by the &quot;pointer buffer&quot;, a buffer in the service process. Its size is a u16, which is retrieved using the &quot;QueryPointerBufferSize&quot; control message. If the client code determines all buffers with flag 8 do not fit in the pointer buffer, it returns error 0x11A0B.<br /> <br /> For buffers with flag 0x20 it creates two descriptors (A+X or B+C), but one descriptor is NULL (zero size and pointer), while the other holds the expected values. X/C descriptors are used as the non-NULL descriptor where possible, but if they don't fit in the pointer buffer, A/B descriptors are used instead. The code defers processing of type 0x20 buffers with sizes that fit in a u16 (and may therefore fit in the pointer buffer). This ensures all type 8 buffers get pointer-buffer space before any type 0x20.<br /> <br /> (The order in which the deferred type 0x20 buffers are processed is determined by a convoluted loop.)<br /> <br /> == Official IPC Cmd Structure ==<br /> Official struct that is stored for each IPC command. It contains precalculated offsets for different portions of the command structure.<br /> <br /> All offsets are given is in number of u32 words.<br /> <br /> struct IpcCmdStruct {<br /> u8 unk0;<br /> u8 has_handle_descriptor;<br /> u8 pad0[2];<br /> u32 cmd0;<br /> u32 cmd1;<br /> u32 offset_handle_descriptor;<br /> u32 pad1;<br /> u32 offset_handles; <br /> u32 pad2;<br /> u32 offset_x_descriptors;<br /> u32 offset_a_descriptors;<br /> u32 offset_b_descriptors;<br /> u32 offset_w_descriptors; /* this is a guess */<br /> u32 offset_raw_data;<br /> u32 offset_c_descriptors;<br /> u32 unk2;<br /> u32 unk3;<br /> }<br /> <br /> == Control ==<br /> When type == 5 you are talking to the IPC manager. These are processed by the sysmodule.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Arguments || Output<br /> |-<br /> | 0 || ConvertCurrentObjectToDomain || None || u32 CmifDomainObjectId<br /> |-<br /> | 1 || CopyFromCurrentDomain || u32 CmifDomainObjectId || u32 NativeHandle<br /> |-<br /> | 2 || CloneCurrentObject || None || u32 NativeHandle<br /> |-<br /> | 3 || QueryPointerBufferSize || None || u16 size<br /> |-<br /> | 4 || CloneCurrentObjectEx || u32 unknown || u32 NativeHandle<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=HIPC&diff=5166 2018-10-07T22:11:40Z

<p>Shinyquagsire23: our raw data != their raw data, prove me wrong with an IPC packet</p> <hr /> <div>== IPC Command Structure ==<br /> This is an array of u32's, usually located in [[Thread Local Storage]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 15-0 || [[#Type|Type]].<br /> |-<br /> | 0 || 19-16 || Number of buf X descriptors (each: 2 words).<br /> |-<br /> | 0 || 23-20 || Number of buf A descriptors (each: 3 words).<br /> |-<br /> | 0 || 27-24 || Number of buf B descriptors (each: 3 words).<br /> |-<br /> | 0 || 31-28 || Number of buf W desciptors (each: 3 words), not observed<br /> |-<br /> | 1 || 9-0 || Size of IPC packet in u32s.<br /> |-<br /> | 1 || 13-10 || Flags for buf C descriptor.<br /> |-<br /> | 1 || 30-20 || ?<br /> |-<br /> | 1 || 31 || Enable handle descriptor.<br /> |-<br /> | ... || || [[#Handle descriptor|Handle descriptor]], if enabled.<br /> |-<br /> | ... || || [[#Buffer descriptor X &quot;Pointer&quot;|Buf X descriptors]], each one 2 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Buf A descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Buf B descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Type W descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Raw_data_section|Raw data section]] (including padding before and after aligned data section).<br /> |-<br /> | ... || || [[#Buffer descriptor C &quot;ReceiveList&quot;|Buf C descriptors]], each one 2 words.<br /> |}<br /> <br /> First two header u32's and handle descriptor (if enabled) are copied as-is from one process to the other.<br /> <br /> === Type ===<br /> IPC commands can have different types which influence how the IPC server processes requests in &quot;nn::sf::hipc::server::HipcServerSessionManagerBase::ProcessRequest&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Value || Name<br /> |-<br /> | 0 || Invalid<br /> |-<br /> | 1 || [[#LegacyRequest, LegacyControl|LegacyRequest]]<br /> |-<br /> | 2 || [[#Close|Close]]<br /> |-<br /> | 3 || [[#LegacyRequest, LegacyControl|LegacyControl]]<br /> |-<br /> | 4 || [[#Request, Control|Request]]<br /> |-<br /> | 5 || [[#Request, Control|Control]]<br /> |-<br /> | 6 || [5.0.0+] [[#RequestWithContext, ControlWithContext|RequestWithContext]]<br /> |-<br /> | 7 || [5.0.0+] [[#RequestWithContext, ControlWithContext|ControlWithContext]]<br /> |}<br /> <br /> ==== Close ====<br /> When processing a request of this type, the IPC server calls:<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::DestroyServerSession&quot;<br /> * &quot;nn::sf::hipc::CloseServerSessionHandle&quot;<br /> <br /> This ensures that the server session is destroyed internally and properly closed.<br /> <br /> ==== LegacyRequest, LegacyControl ====<br /> These types are handled by calling:<br /> * &quot;nn::sf::hipc::detail::HipcMessageBufferAccessor::ParseHeader&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::ProcessMessage&quot;<br /> * &quot;nn::sf::hipc::Reply&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::RegisterServerSessionToWaitBase&quot;<br /> <br /> It is speculated that these are part of an older message processing system where headers were further partitioned.<br /> <br /> ==== Request, Control ====<br /> These types are handled by calling:<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::ProcessMessage2&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::RegisterServerSessionToWaitBase&quot;<br /> <br /> This represents a more modern message handling system where contents follow the general marshalling structure.<br /> <br /> ==== RequestWithContext, ControlWithContext ====<br /> These are identical to normal Request and Control types, but with the additional requirement of suppling a token in their [[#Data payload|data payload]].<br /> <br /> This token is used by &quot;nn::sf::cmif::SetInlineContext&quot; which has the sole purpose of saving it into the TLS in order for it to be distributed to any IPC commands that are made while processing the current command. It's unknown if this token serves any purpose or if it's just a debug-tool to figure out what IPC command caused a particular chain of commands.<br /> <br /> === Handle descriptor ===<br /> There can only be one of this descriptor type. It is enabled by bit31 of the second word.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 0 || Send current PID.<br /> |-<br /> | 0 || 4-1 || Number of handles to copy<br /> |-<br /> | 0 || 8-5 || Number of handles to move<br /> |-<br /> | ... || || 8-byte PID if enabled<br /> |-<br /> | ... || || Handles to copy<br /> |-<br /> | ... || || Handles to move<br /> |}<br /> <br /> Sysmodules load the last u64 of rawdata when handling the PID. This is not written by kernel. For sysmodule handling:<br /> * In some cases: these commands require a placeholder u64 value passed in the input parameters, as mentioned above. In these cases the OverwriteClientProcessId method is called to replace the value before it is used.<br /> * In other cases: The rawdata_u64 is compared with the PID from the descriptor. On mismatch and when rawdata_u64!=0, error 0x60A is returned. The PID value passed to the cmdhandler vtable funcptr is the rawdata_u64.<br /> <br /> Handle 0 is allowed, and just means no handle was sent.<br /> <br /> === Buffer descriptor X &quot;Pointer&quot; ===<br /> This one is packed even worse than A, they inserted the bit38-36 of the address ''on top'' of the counter field.<br /> <br /> Officially, the counter is known as &quot;receive index&quot;. This one writes to the buffer described in the ReceiveList.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 5-0 || Bits 5-0 of counter.<br /> |-<br /> | 0 || 8-6 || Bit 38-36 of address.<br /> |-<br /> | 0 || 11-9 || Bits 11-9 of counter.<br /> |-<br /> | 0 || 15-12 || Bit 35-32 of address.<br /> |-<br /> | 0 || 31-16 || Size<br /> |-<br /> | 1 || || Lower 32-bits of address.<br /> |}<br /> <br /> === Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot; ===<br /> This packing is so unnecessarily complex.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || || Lower 32-bits of size.<br /> |-<br /> | 1 || || Lower 32-bits of address.<br /> |-<br /> | 2 || 1-0 || Flags. Always set to 0, 1 or 3.<br /> |-<br /> | 2 || 4-2 || Bit 38-36 of address.<br /> |-<br /> | 2 || 27-24 || Bit 35-32 of size.<br /> |-<br /> | 2 || 31-28 || Bit 35-32 of address.<br /> |}<br /> <br /> A reply must not use A/B/W, svcReplyAndReceive will return 0xE801.<br /> <br /> [[SVC|MemoryAttribute]] IsBorrowed and IsUncached are never allowed for the source address.<br /> <br /> &quot;Send&quot; means buffer is sent from source process into service process.<br /> <br /> &quot;Receive&quot; means that data is copied from service process into user process.<br /> <br /> &quot;Exchange&quot; means both &quot;Send&quot; and &quot;Receive&quot;.<br /> <br /> ==== Flags ====<br /> Determines what [[SVC|MemoryState]] to use with the mapped memory in the sysmodule.<br /> <br /> Used to enforce whether or not device mapping is allowed for src and dst buffers respectively.<br /> <br /> * Flag0: Device mapping *not* allowed for src or dst.<br /> * Flag1: Device mapping allowed for src and dst.<br /> * Flag3: Device mapping allowed for src but not for dst.<br /> <br /> === Buffer descriptor C &quot;ReceiveList&quot; ===<br /> There's a 4-bit flag in the main header controlling the behavior of C descriptors.<br /> <br /> If it has value 0, the C descriptor functionality is disabled.<br /> <br /> If it has value 1, there is an &quot;inlined&quot; C buffer after the raw data. Received data is copied to ROUND_UP(cmdbuf+raw_size+index, 16)<br /> <br /> If it has value 2, there is a single C descriptor.<br /> <br /> Otherwise it has (flag-2) C descriptors. In this case, index picks which C descriptor to copy received data to [instead of picking the offset into the buffer].<br /> <br /> Data sent with this method must have MemoryState 0x4000000 mask set.<br /> <br /> After reply, X descriptors are written to the sender containing the address, size and index that were copied to.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || || Lower 32-bits of address.<br /> |-<br /> | 1 || 15-0 || Rest of address.<br /> |-<br /> | 1 || 31-16 || Size<br /> |}<br /> <br /> === IPC buffers ===<br /> Buffer descriptor A/B/... map memory into the sysmodule process. For the mapped memory in the sysmodule the permissions are: desc-A = R--, desc-B = RW-. The buffer is automatically unmapped while the kernel handles the cmdreply, the sysmodule doesn't need to specify anything in the cmdreply to trigger this.<br /> <br /> This memory is mapped in the sysmodule to the same vaddr from the original user-process cmd-request, except with with bits &gt;=(~28(?)) changed to a different ASLR'd region.<br /> <br /> No user-process-&gt;sysmodule memcpy is done for outbufs, only sysmodule-&gt;user-process.<br /> <br /> == Raw data section ==<br /> [[File:Ipc msg buffer type a example.png|thumb|An example of an IPC message with a type 0xA buffer in it. Red is headers/descriptors, yellow is padding, and blue is data/buffer lengths. Note that the size of the u16 array for type A lengths is padded to fill up a whole word.]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Description<br /> |-<br /> | ... || Padding to align to 16 bytes.<br /> |-<br /> | ... || If sent to an object domain, a [[#Domain_message|domain message]], otherwise a [[#Data payload|data payload]]<br /> |-<br /> | ... || Padding<br /> |-<br /> | ... || Buffer type 0xA lengths (u16 array)<br /> |}<br /> <br /> The total amount of padding within the raw data section is always 0x10 bytes. This means that if no padding is required before the message, there will be 0x10 bytes of padding after the message (before the buffer type 0xA lengths).<br /> <br /> === Domain message ===<br /> This header is used to wrap up requests sent to domains instead of sessions.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 7-0 || Command. 1=send message, 2=close virtual handle<br /> |-<br /> | 0 || 8-15 || Input object count<br /> |-<br /> | 0 || 31-16 || Length of [[IPC_Marshalling#Data_payload|data payload]] in bytes.<br /> |-<br /> | 1 || || Object ID (from cmd 0 in [[IPC_Marshalling#Control|Control]]).<br /> |-<br /> | 2 || || Padding<br /> |-<br /> | 3 || || [5.0.0+] Token for (NewRequest only)<br /> |-<br /> | 4... || || [[#Data payload|Data payload]]<br /> |-<br /> | ... || || Input object IDs (u32s, not aligned)<br /> |}<br /> <br /> === Data payload ===<br /> This is an array of u32's, but individual parameters are generally stored as u64's.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Description<br /> |-<br /> | 0 || Magic (&quot;SFCI&quot; for requests, &quot;SFCO&quot; for responses) as u64.<br /> |-<br /> | 2 || Command id as u64 for requests, [[Error_codes|error code]] as u64 for responses.<br /> |-<br /> | 3 || [5.0.0+] Token (for NewRequest only, non-domain messages).<br /> |-<br /> | 4... || Input parameters or return values<br /> |}<br /> <br /> [5.0.0+] A token value was introduced into raw_data+12 (regardless of domain or not, in either case it overlaps with padding).<br /> <br /> == Official marshalling code ==<br /> The official marshalling function takes an array of (buf_ptr, size) pairs and a type-field for each such pair.<br /> <br /> Bitmask 0x10 seems to indicate null-terminated strings.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Type Mask || Description || Direction<br /> |-<br /> | 4 + 1 || Creates a A descriptor with flags=0. || In<br /> |-<br /> | 0x40 + 4 + 1 || Creates a A descriptor with flags=1. || In<br /> |-<br /> | 0x80 + 4 + 1 || Creates a A descriptor with flags=3. || In<br /> |-<br /> | 4 + 2 || Creates a B descriptor with flags=0. || Out<br /> |-<br /> | 0x40 + 4 + 2 || Creates a B descriptor with flags=1. || Out<br /> |-<br /> | 0x80 + 4 + 2 || Creates a B descriptor with flags=3. || Out<br /> |-<br /> | 8 + 1 || Creates an X descriptor || In<br /> |-<br /> | 8 + 2 || Creates a C descriptor, and writes the u16 size to an offset into raw data. || Out<br /> |-<br /> | 0x10 + 8 + 2 || Creates a C descriptor || Out<br /> |-<br /> | 0x20 + 1 || Creates both an A and X descriptor || In<br /> |-<br /> | 0x20 + 2 || Creates both an B and C descriptor || Out<br /> |-<br /> | 0x20 + 2 + 0x40 || Same as 0x20 + 2, except a certain value is set to hard-coded 0x1 instead. || Out<br /> |}<br /> <br /> C and X (Pointer and ReceiveList) descriptors are backed by the &quot;pointer buffer&quot;, a buffer in the service process. Its size is a u16, which is retrieved using the &quot;QueryPointerBufferSize&quot; control message. If the client code determines all buffers with flag 8 do not fit in the pointer buffer, it returns error 0x11A0B.<br /> <br /> For buffers with flag 0x20 it creates two descriptors (A+X or B+C), but one descriptor is NULL (zero size and pointer), while the other holds the expected values. X/C descriptors are used as the non-NULL descriptor where possible, but if they don't fit in the pointer buffer, A/B descriptors are used instead. The code defers processing of type 0x20 buffers with sizes that fit in a u16 (and may therefore fit in the pointer buffer). This ensures all type 8 buffers get pointer-buffer space before any type 0x20.<br /> <br /> (The order in which the deferred type 0x20 buffers are processed is determined by a convoluted loop.)<br /> <br /> == Official IPC Cmd Structure ==<br /> Official struct that is stored for each IPC command. It contains precalculated offsets for different portions of the command structure.<br /> <br /> All offsets are given is in number of u32 words.<br /> <br /> struct IpcCmdStruct {<br /> u8 unk0;<br /> u8 has_handle_descriptor;<br /> u8 pad0[2];<br /> u32 cmd0;<br /> u32 cmd1;<br /> u32 offset_handle_descriptor;<br /> u32 pad1;<br /> u32 offset_handles; <br /> u32 pad2;<br /> u32 offset_x_descriptors;<br /> u32 offset_a_descriptors;<br /> u32 offset_b_descriptors;<br /> u32 offset_w_descriptors; /* this is a guess */<br /> u32 offset_raw_data;<br /> u32 offset_c_descriptors;<br /> u32 unk2;<br /> u32 unk3;<br /> }<br /> <br /> == Control ==<br /> When type == 5 you are talking to the IPC manager. These are processed by the sysmodule.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Arguments || Output<br /> |-<br /> | 0 || ConvertCurrentObjectToDomain || None || u32 CmifDomainObjectId<br /> |-<br /> | 1 || CopyFromCurrentDomain || u32 CmifDomainObjectId || u32 NativeHandle<br /> |-<br /> | 2 || CloneCurrentObject || None || u32 NativeHandle<br /> |-<br /> | 3 || QueryPointerBufferSize || None || u16 size<br /> |-<br /> | 4 || CloneCurrentObjectEx || u32 unknown || u32 NativeHandle<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=HIPC&diff=5164 2018-10-07T22:02:47Z

<p>Shinyquagsire23: oops it was a B, still</p> <hr /> <div>== IPC Command Structure ==<br /> This is an array of u32's, usually located in [[Thread Local Storage]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 15-0 || [[#Type|Type]].<br /> |-<br /> | 0 || 19-16 || Number of buf X descriptors (each: 2 words).<br /> |-<br /> | 0 || 23-20 || Number of buf A descriptors (each: 3 words).<br /> |-<br /> | 0 || 27-24 || Number of buf B descriptors (each: 3 words).<br /> |-<br /> | 0 || 31-28 || Number of buf W desciptors (each: 3 words), not observed<br /> |-<br /> | 1 || 9-0 || Size of IPC packet in u32s.<br /> |-<br /> | 1 || 13-10 || Flags for buf C descriptor.<br /> |-<br /> | 1 || 30-20 || ?<br /> |-<br /> | 1 || 31 || Enable handle descriptor.<br /> |-<br /> | ... || || [[#Handle descriptor|Handle descriptor]], if enabled.<br /> |-<br /> | ... || || [[#Buffer descriptor X &quot;Pointer&quot;|Buf X descriptors]], each one 2 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Buf A descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Buf B descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Type W descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Raw_data_section|Raw data section]] (including padding before and after aligned data section).<br /> |-<br /> | ... || || [[#Buffer descriptor C &quot;ReceiveList&quot;|Buf C descriptors]], each one 2 words.<br /> |}<br /> <br /> First two header u32's and handle descriptor (if enabled) are copied as-is from one process to the other.<br /> <br /> === Type ===<br /> IPC commands can have different types which influence how the IPC server processes requests in &quot;nn::sf::hipc::server::HipcServerSessionManagerBase::ProcessRequest&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Value || Name<br /> |-<br /> | 0 || Invalid<br /> |-<br /> | 1 || [[#LegacyRequest, LegacyControl|LegacyRequest]]<br /> |-<br /> | 2 || [[#Close|Close]]<br /> |-<br /> | 3 || [[#LegacyRequest, LegacyControl|LegacyControl]]<br /> |-<br /> | 4 || [[#Request, Control|Request]]<br /> |-<br /> | 5 || [[#Request, Control|Control]]<br /> |-<br /> | 6 || [5.0.0+] [[#RequestWithContext, ControlWithContext|RequestWithContext]]<br /> |-<br /> | 7 || [5.0.0+] [[#RequestWithContext, ControlWithContext|ControlWithContext]]<br /> |}<br /> <br /> ==== Close ====<br /> When processing a request of this type, the IPC server calls:<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::DestroyServerSession&quot;<br /> * &quot;nn::sf::hipc::CloseServerSessionHandle&quot;<br /> <br /> This ensures that the server session is destroyed internally and properly closed.<br /> <br /> ==== LegacyRequest, LegacyControl ====<br /> These types are handled by calling:<br /> * &quot;nn::sf::hipc::detail::HipcMessageBufferAccessor::ParseHeader&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::ProcessMessage&quot;<br /> * &quot;nn::sf::hipc::Reply&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::RegisterServerSessionToWaitBase&quot;<br /> <br /> It is speculated that these are part of an older message processing system where headers were further partitioned.<br /> <br /> ==== Request, Control ====<br /> These types are handled by calling:<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::ProcessMessage2&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::RegisterServerSessionToWaitBase&quot;<br /> <br /> This represents a more modern message handling system where contents follow the general marshalling structure.<br /> <br /> ==== RequestWithContext, ControlWithContext ====<br /> These are identical to normal Request and Control types, but with the additional requirement of suppling a token in their [[#Data payload|data payload]].<br /> <br /> This token is used by &quot;nn::sf::cmif::SetInlineContext&quot; which has the sole purpose of saving it into the TLS in order for it to be distributed to any IPC commands that are made while processing the current command. It's unknown if this token serves any purpose or if it's just a debug-tool to figure out what IPC command caused a particular chain of commands.<br /> <br /> === Handle descriptor ===<br /> There can only be one of this descriptor type. It is enabled by bit31 of the second word.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 0 || Send current PID.<br /> |-<br /> | 0 || 4-1 || Number of handles to copy<br /> |-<br /> | 0 || 8-5 || Number of handles to move<br /> |-<br /> | ... || || 8-byte PID if enabled<br /> |-<br /> | ... || || Handles to copy<br /> |-<br /> | ... || || Handles to move<br /> |}<br /> <br /> Sysmodules load the last u64 of rawdata when handling the PID. This is not written by kernel. For sysmodule handling:<br /> * In some cases: these commands require a placeholder u64 value passed in the input parameters, as mentioned above. In these cases the OverwriteClientProcessId method is called to replace the value before it is used.<br /> * In other cases: The rawdata_u64 is compared with the PID from the descriptor. On mismatch and when rawdata_u64!=0, error 0x60A is returned. The PID value passed to the cmdhandler vtable funcptr is the rawdata_u64.<br /> <br /> Handle 0 is allowed, and just means no handle was sent.<br /> <br /> === Buffer descriptor X &quot;Pointer&quot; ===<br /> This one is packed even worse than A, they inserted the bit38-36 of the address ''on top'' of the counter field.<br /> <br /> Officially, the counter is known as &quot;receive index&quot;. This one writes to the buffer described in the ReceiveList.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 5-0 || Bits 5-0 of counter.<br /> |-<br /> | 0 || 8-6 || Bit 38-36 of address.<br /> |-<br /> | 0 || 11-9 || Bits 11-9 of counter.<br /> |-<br /> | 0 || 15-12 || Bit 35-32 of address.<br /> |-<br /> | 0 || 31-16 || Size<br /> |-<br /> | 1 || || Lower 32-bits of address.<br /> |}<br /> <br /> === Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot; ===<br /> This packing is so unnecessarily complex.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || || Lower 32-bits of size.<br /> |-<br /> | 1 || || Lower 32-bits of address.<br /> |-<br /> | 2 || 1-0 || Flags. Always set to 0, 1 or 3.<br /> |-<br /> | 2 || 4-2 || Bit 38-36 of address.<br /> |-<br /> | 2 || 27-24 || Bit 35-32 of size.<br /> |-<br /> | 2 || 31-28 || Bit 35-32 of address.<br /> |}<br /> <br /> A reply must not use A/B/W, svcReplyAndReceive will return 0xE801.<br /> <br /> [[SVC|MemoryAttribute]] IsBorrowed and IsUncached are never allowed for the source address.<br /> <br /> &quot;Send&quot; means buffer is sent from source process into service process.<br /> <br /> &quot;Receive&quot; means that data is copied from service process into user process.<br /> <br /> &quot;Exchange&quot; means both &quot;Send&quot; and &quot;Receive&quot;.<br /> <br /> ==== Flags ====<br /> Determines what [[SVC|MemoryState]] to use with the mapped memory in the sysmodule.<br /> <br /> Used to enforce whether or not device mapping is allowed for src and dst buffers respectively.<br /> <br /> * Flag0: Device mapping *not* allowed for src or dst.<br /> * Flag1: Device mapping allowed for src and dst.<br /> * Flag3: Device mapping allowed for src but not for dst.<br /> <br /> === Buffer descriptor C &quot;ReceiveList&quot; ===<br /> There's a 4-bit flag in the main header controlling the behavior of C descriptors.<br /> <br /> If it has value 0, the C descriptor functionality is disabled.<br /> <br /> If it has value 1, there is an &quot;inlined&quot; C buffer after the raw data. Received data is copied to ROUND_UP(cmdbuf+raw_size+index, 16)<br /> <br /> If it has value 2, there is a single C descriptor.<br /> <br /> Otherwise it has (flag-2) C descriptors. In this case, index picks which C descriptor to copy received data to [instead of picking the offset into the buffer].<br /> <br /> Data sent with this method must have MemoryState 0x4000000 mask set.<br /> <br /> After reply, X descriptors are written to the sender containing the address, size and index that were copied to.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || || Lower 32-bits of address.<br /> |-<br /> | 1 || 15-0 || Rest of address.<br /> |-<br /> | 1 || 31-16 || Size<br /> |}<br /> <br /> === IPC buffers ===<br /> Buffer descriptor A/B/... map memory into the sysmodule process. For the mapped memory in the sysmodule the permissions are: desc-A = R--, desc-B = RW-. The buffer is automatically unmapped while the kernel handles the cmdreply, the sysmodule doesn't need to specify anything in the cmdreply to trigger this.<br /> <br /> This memory is mapped in the sysmodule to the same vaddr from the original user-process cmd-request, except with with bits &gt;=(~28(?)) changed to a different ASLR'd region.<br /> <br /> No user-process-&gt;sysmodule memcpy is done for outbufs, only sysmodule-&gt;user-process.<br /> <br /> == Raw data section ==<br /> [[File:Ipc msg buffer type a example.png|thumb|An example of an IPC message with a type 0xA buffer in it. Red is headers/descriptors, yellow is padding, and blue is data/buffer lengths. Note that the size of the u16 array for type A lengths is padded to fill up a whole word.]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Description<br /> |-<br /> | ... || Padding to align to 16 bytes.<br /> |-<br /> | ... || If sent to an object domain, a [[#Domain_message|domain message]], otherwise a [[#Data payload|data payload]]<br /> |-<br /> | ... || Padding<br /> |-<br /> | ... || Buffer type 0xA lengths (u16 array)<br /> |}<br /> <br /> The total amount of padding within the raw data section is always 0x10 bytes. This means that if no padding is required before the message, there will be 0x10 bytes of padding after the message (before the buffer type 0xA lengths).<br /> <br /> === Domain message ===<br /> This header is used to wrap up requests sent to domains instead of sessions.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 7-0 || Command. 1=send message, 2=close virtual handle<br /> |-<br /> | 0 || 8-15 || Input object count<br /> |-<br /> | 0 || 31-16 || Length of [[IPC_Marshalling#Data_payload|data payload]] in bytes.<br /> |-<br /> | 1 || || Object ID (from cmd 0 in [[IPC_Marshalling#Control|Control]]).<br /> |-<br /> | 2 || || Padding<br /> |-<br /> | 3 || || [5.0.0+] Token for (NewRequest only)<br /> |-<br /> | 4... || || [[#Data payload|Data payload]]<br /> |-<br /> | ... || || Input object IDs (u32s, not aligned)<br /> |}<br /> <br /> === Data payload ===<br /> This is an array of u32's, but individual parameters are generally stored as u64's.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Description<br /> |-<br /> | 0 || Magic (&quot;SFCI&quot; for requests, &quot;SFCO&quot; for responses) as u64.<br /> |-<br /> | 2 || Command id as u64 for requests, [[Error_codes|error code]] as u64 for responses.<br /> |-<br /> | 3 || [5.0.0+] Token (for NewRequest only, non-domain messages).<br /> |-<br /> | 4... || Input parameters or return values<br /> |}<br /> <br /> [5.0.0+] A token value was introduced into raw_data+12 (regardless of domain or not, in either case it overlaps with padding).<br /> <br /> == Official marshalling code ==<br /> The official marshalling function takes an array of (buf_ptr, size) pairs and a type-field for each such pair.<br /> <br /> Bitmask 0x10 seems to indicate null-terminated strings.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Type Mask || Description || Direction<br /> |-<br /> | 4 + 1 || Creates a A descriptor with flags=0. || In<br /> |-<br /> | 0x40 + 4 + 1 || Creates a A descriptor with flags=1. || In<br /> |-<br /> | 0x80 + 4 + 1 || Creates a A descriptor with flags=3. || In<br /> |-<br /> | 4 + 2 || Creates a B descriptor with flags=0. || Out<br /> |-<br /> | 0x40 + 4 + 2 || Creates a B descriptor with flags=1. || Out<br /> |-<br /> | 0x80 + 4 + 2 || Creates a B descriptor with flags=3. || Out<br /> |-<br /> | 8 + 1 || Creates an X descriptor || In<br /> |-<br /> | 8 + 2 || Creates a C descriptor, and writes the u16 size to an offset into raw data. || Out<br /> |-<br /> | 0x10 + 8 + 2 || Creates a C descriptor || Out<br /> |-<br /> | 0x20 + 1 || Creates both an A and X descriptor || In<br /> |-<br /> | 0x20 + 2 || Creates both an B and C descriptor || Out<br /> |-<br /> | 0x20 + 2 + 0x40 || Same as 0x20 + 2, except a certain value is set to hard-coded 0x1 instead. || Out<br /> |}<br /> <br /> C and X (Pointer and ReceiveList) descriptors are backed by the &quot;pointer buffer&quot;, a buffer in the service process. Its size is a u16, which is retrieved using the &quot;QueryPointerBufferSize&quot; control message. If the client code determines all buffers with flag 8 do not fit in the pointer buffer, it returns error 0x11A0B.<br /> <br /> For buffers with flag 0x20 it creates two descriptors (A+X or B+C), but one descriptor is NULL (zero size and pointer), while the other holds the expected values. X/C descriptors are used as the non-NULL descriptor where possible, but if they don't fit in the pointer buffer, A/B descriptors are used instead. The code defers processing of type 0x20 buffers with sizes that fit in a u16 (and may therefore fit in the pointer buffer). This ensures all type 8 buffers get pointer-buffer space before any type 0x20.<br /> <br /> (The order in which the deferred type 0x20 buffers are processed is determined by a convoluted loop.)<br /> <br /> == Official IPC Cmd Structure ==<br /> Official struct that is stored for each IPC command. It contains precalculated offsets for different portions of the command structure.<br /> <br /> All offsets are given is in number of u32 words.<br /> <br /> struct IpcCmdStruct {<br /> u8 unk0;<br /> u8 has_handle_descriptor;<br /> u8 pad0[2];<br /> u32 cmd0;<br /> u32 cmd1;<br /> u32 offset_handle_descriptor;<br /> u32 pad1;<br /> u32 offset_handles; <br /> u32 pad2;<br /> u32 offset_x_descriptors;<br /> u32 offset_a_descriptors;<br /> u32 offset_b_descriptors;<br /> u32 offset_w_descriptors; /* this is a guess */<br /> u32 offset_raw_data;<br /> u32 offset_c_descriptors;<br /> u32 unk2;<br /> u32 unk3;<br /> }<br /> <br /> == Control ==<br /> When type == 5 you are talking to the IPC manager. These are processed by the sysmodule.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Arguments || Output<br /> |-<br /> | 0 || ConvertCurrentObjectToDomain || None || u32 CmifDomainObjectId<br /> |-<br /> | 1 || CopyFromCurrentDomain || u32 CmifDomainObjectId || u32 NativeHandle<br /> |-<br /> | 2 || CloneCurrentObject || None || u32 NativeHandle<br /> |-<br /> | 3 || QueryPointerBufferSize || None || u16 size<br /> |-<br /> | 4 || CloneCurrentObjectEx || u32 unknown || u32 NativeHandle<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=HIPC&diff=5163 2018-10-07T21:57:48Z

<p>Shinyquagsire23: I&#039;m literally looking at this rn, field changes w/ addition of W desc despite same data section size https://gist.github.com/shinyquagsire23/4801b63bceec302932b4bed1bfdaacfc</p> <hr /> <div>== IPC Command Structure ==<br /> This is an array of u32's, usually located in [[Thread Local Storage]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 15-0 || [[#Type|Type]].<br /> |-<br /> | 0 || 19-16 || Number of buf X descriptors (each: 2 words).<br /> |-<br /> | 0 || 23-20 || Number of buf A descriptors (each: 3 words).<br /> |-<br /> | 0 || 27-24 || Number of buf B descriptors (each: 3 words).<br /> |-<br /> | 0 || 31-28 || Number of buf W desciptors (each: 3 words).<br /> |-<br /> | 1 || 9-0 || Size of IPC packet in u32s.<br /> |-<br /> | 1 || 13-10 || Flags for buf C descriptor.<br /> |-<br /> | 1 || 30-20 || ?<br /> |-<br /> | 1 || 31 || Enable handle descriptor.<br /> |-<br /> | ... || || [[#Handle descriptor|Handle descriptor]], if enabled.<br /> |-<br /> | ... || || [[#Buffer descriptor X &quot;Pointer&quot;|Buf X descriptors]], each one 2 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Buf A descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Buf B descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Type W descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Raw_data_section|Raw data section]] (including padding before and after aligned data section).<br /> |-<br /> | ... || || [[#Buffer descriptor C &quot;ReceiveList&quot;|Buf C descriptors]], each one 2 words.<br /> |}<br /> <br /> First two header u32's and handle descriptor (if enabled) are copied as-is from one process to the other.<br /> <br /> === Type ===<br /> IPC commands can have different types which influence how the IPC server processes requests in &quot;nn::sf::hipc::server::HipcServerSessionManagerBase::ProcessRequest&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Value || Name<br /> |-<br /> | 0 || Invalid<br /> |-<br /> | 1 || [[#LegacyRequest, LegacyControl|LegacyRequest]]<br /> |-<br /> | 2 || [[#Close|Close]]<br /> |-<br /> | 3 || [[#LegacyRequest, LegacyControl|LegacyControl]]<br /> |-<br /> | 4 || [[#Request, Control|Request]]<br /> |-<br /> | 5 || [[#Request, Control|Control]]<br /> |-<br /> | 6 || [5.0.0+] [[#RequestWithContext, ControlWithContext|RequestWithContext]]<br /> |-<br /> | 7 || [5.0.0+] [[#RequestWithContext, ControlWithContext|ControlWithContext]]<br /> |}<br /> <br /> ==== Close ====<br /> When processing a request of this type, the IPC server calls:<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::DestroyServerSession&quot;<br /> * &quot;nn::sf::hipc::CloseServerSessionHandle&quot;<br /> <br /> This ensures that the server session is destroyed internally and properly closed.<br /> <br /> ==== LegacyRequest, LegacyControl ====<br /> These types are handled by calling:<br /> * &quot;nn::sf::hipc::detail::HipcMessageBufferAccessor::ParseHeader&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::ProcessMessage&quot;<br /> * &quot;nn::sf::hipc::Reply&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::RegisterServerSessionToWaitBase&quot;<br /> <br /> It is speculated that these are part of an older message processing system where headers were further partitioned.<br /> <br /> ==== Request, Control ====<br /> These types are handled by calling:<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::ProcessMessage2&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::RegisterServerSessionToWaitBase&quot;<br /> <br /> This represents a more modern message handling system where contents follow the general marshalling structure.<br /> <br /> ==== RequestWithContext, ControlWithContext ====<br /> These are identical to normal Request and Control types, but with the additional requirement of suppling a token in their [[#Data payload|data payload]].<br /> <br /> This token is used by &quot;nn::sf::cmif::SetInlineContext&quot; which has the sole purpose of saving it into the TLS in order for it to be distributed to any IPC commands that are made while processing the current command. It's unknown if this token serves any purpose or if it's just a debug-tool to figure out what IPC command caused a particular chain of commands.<br /> <br /> === Handle descriptor ===<br /> There can only be one of this descriptor type. It is enabled by bit31 of the second word.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 0 || Send current PID.<br /> |-<br /> | 0 || 4-1 || Number of handles to copy<br /> |-<br /> | 0 || 8-5 || Number of handles to move<br /> |-<br /> | ... || || 8-byte PID if enabled<br /> |-<br /> | ... || || Handles to copy<br /> |-<br /> | ... || || Handles to move<br /> |}<br /> <br /> Sysmodules load the last u64 of rawdata when handling the PID. This is not written by kernel. For sysmodule handling:<br /> * In some cases: these commands require a placeholder u64 value passed in the input parameters, as mentioned above. In these cases the OverwriteClientProcessId method is called to replace the value before it is used.<br /> * In other cases: The rawdata_u64 is compared with the PID from the descriptor. On mismatch and when rawdata_u64!=0, error 0x60A is returned. The PID value passed to the cmdhandler vtable funcptr is the rawdata_u64.<br /> <br /> Handle 0 is allowed, and just means no handle was sent.<br /> <br /> === Buffer descriptor X &quot;Pointer&quot; ===<br /> This one is packed even worse than A, they inserted the bit38-36 of the address ''on top'' of the counter field.<br /> <br /> Officially, the counter is known as &quot;receive index&quot;. This one writes to the buffer described in the ReceiveList.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 5-0 || Bits 5-0 of counter.<br /> |-<br /> | 0 || 8-6 || Bit 38-36 of address.<br /> |-<br /> | 0 || 11-9 || Bits 11-9 of counter.<br /> |-<br /> | 0 || 15-12 || Bit 35-32 of address.<br /> |-<br /> | 0 || 31-16 || Size<br /> |-<br /> | 1 || || Lower 32-bits of address.<br /> |}<br /> <br /> === Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot; ===<br /> This packing is so unnecessarily complex.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || || Lower 32-bits of size.<br /> |-<br /> | 1 || || Lower 32-bits of address.<br /> |-<br /> | 2 || 1-0 || Flags. Always set to 0, 1 or 3.<br /> |-<br /> | 2 || 4-2 || Bit 38-36 of address.<br /> |-<br /> | 2 || 27-24 || Bit 35-32 of size.<br /> |-<br /> | 2 || 31-28 || Bit 35-32 of address.<br /> |}<br /> <br /> A reply must not use A/B/W, svcReplyAndReceive will return 0xE801.<br /> <br /> [[SVC|MemoryAttribute]] IsBorrowed and IsUncached are never allowed for the source address.<br /> <br /> &quot;Send&quot; means buffer is sent from source process into service process.<br /> <br /> &quot;Receive&quot; means that data is copied from service process into user process.<br /> <br /> &quot;Exchange&quot; means both &quot;Send&quot; and &quot;Receive&quot;.<br /> <br /> ==== Flags ====<br /> Determines what [[SVC|MemoryState]] to use with the mapped memory in the sysmodule.<br /> <br /> Used to enforce whether or not device mapping is allowed for src and dst buffers respectively.<br /> <br /> * Flag0: Device mapping *not* allowed for src or dst.<br /> * Flag1: Device mapping allowed for src and dst.<br /> * Flag3: Device mapping allowed for src but not for dst.<br /> <br /> === Buffer descriptor C &quot;ReceiveList&quot; ===<br /> There's a 4-bit flag in the main header controlling the behavior of C descriptors.<br /> <br /> If it has value 0, the C descriptor functionality is disabled.<br /> <br /> If it has value 1, there is an &quot;inlined&quot; C buffer after the raw data. Received data is copied to ROUND_UP(cmdbuf+raw_size+index, 16)<br /> <br /> If it has value 2, there is a single C descriptor.<br /> <br /> Otherwise it has (flag-2) C descriptors. In this case, index picks which C descriptor to copy received data to [instead of picking the offset into the buffer].<br /> <br /> Data sent with this method must have MemoryState 0x4000000 mask set.<br /> <br /> After reply, X descriptors are written to the sender containing the address, size and index that were copied to.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || || Lower 32-bits of address.<br /> |-<br /> | 1 || 15-0 || Rest of address.<br /> |-<br /> | 1 || 31-16 || Size<br /> |}<br /> <br /> === IPC buffers ===<br /> Buffer descriptor A/B/... map memory into the sysmodule process. For the mapped memory in the sysmodule the permissions are: desc-A = R--, desc-B = RW-. The buffer is automatically unmapped while the kernel handles the cmdreply, the sysmodule doesn't need to specify anything in the cmdreply to trigger this.<br /> <br /> This memory is mapped in the sysmodule to the same vaddr from the original user-process cmd-request, except with with bits &gt;=(~28(?)) changed to a different ASLR'd region.<br /> <br /> No user-process-&gt;sysmodule memcpy is done for outbufs, only sysmodule-&gt;user-process.<br /> <br /> == Raw data section ==<br /> [[File:Ipc msg buffer type a example.png|thumb|An example of an IPC message with a type 0xA buffer in it. Red is headers/descriptors, yellow is padding, and blue is data/buffer lengths. Note that the size of the u16 array for type A lengths is padded to fill up a whole word.]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Description<br /> |-<br /> | ... || Padding to align to 16 bytes.<br /> |-<br /> | ... || If sent to an object domain, a [[#Domain_message|domain message]], otherwise a [[#Data payload|data payload]]<br /> |-<br /> | ... || Padding<br /> |-<br /> | ... || Buffer type 0xA lengths (u16 array)<br /> |}<br /> <br /> The total amount of padding within the raw data section is always 0x10 bytes. This means that if no padding is required before the message, there will be 0x10 bytes of padding after the message (before the buffer type 0xA lengths).<br /> <br /> === Domain message ===<br /> This header is used to wrap up requests sent to domains instead of sessions.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 7-0 || Command. 1=send message, 2=close virtual handle<br /> |-<br /> | 0 || 8-15 || Input object count<br /> |-<br /> | 0 || 31-16 || Length of [[IPC_Marshalling#Data_payload|data payload]] in bytes.<br /> |-<br /> | 1 || || Object ID (from cmd 0 in [[IPC_Marshalling#Control|Control]]).<br /> |-<br /> | 2 || || Padding<br /> |-<br /> | 3 || || [5.0.0+] Token for (NewRequest only)<br /> |-<br /> | 4... || || [[#Data payload|Data payload]]<br /> |-<br /> | ... || || Input object IDs (u32s, not aligned)<br /> |}<br /> <br /> === Data payload ===<br /> This is an array of u32's, but individual parameters are generally stored as u64's.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Description<br /> |-<br /> | 0 || Magic (&quot;SFCI&quot; for requests, &quot;SFCO&quot; for responses) as u64.<br /> |-<br /> | 2 || Command id as u64 for requests, [[Error_codes|error code]] as u64 for responses.<br /> |-<br /> | 3 || [5.0.0+] Token (for NewRequest only, non-domain messages).<br /> |-<br /> | 4... || Input parameters or return values<br /> |}<br /> <br /> [5.0.0+] A token value was introduced into raw_data+12 (regardless of domain or not, in either case it overlaps with padding).<br /> <br /> == Official marshalling code ==<br /> The official marshalling function takes an array of (buf_ptr, size) pairs and a type-field for each such pair.<br /> <br /> Bitmask 0x10 seems to indicate null-terminated strings.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Type Mask || Description || Direction<br /> |-<br /> | 4 + 1 || Creates a A descriptor with flags=0. || In<br /> |-<br /> | 0x40 + 4 + 1 || Creates a A descriptor with flags=1. || In<br /> |-<br /> | 0x80 + 4 + 1 || Creates a A descriptor with flags=3. || In<br /> |-<br /> | 4 + 2 || Creates a B descriptor with flags=0. || Out<br /> |-<br /> | 0x40 + 4 + 2 || Creates a B descriptor with flags=1. || Out<br /> |-<br /> | 0x80 + 4 + 2 || Creates a B descriptor with flags=3. || Out<br /> |-<br /> | 8 + 1 || Creates an X descriptor || In<br /> |-<br /> | 8 + 2 || Creates a C descriptor, and writes the u16 size to an offset into raw data. || Out<br /> |-<br /> | 0x10 + 8 + 2 || Creates a C descriptor || Out<br /> |-<br /> | 0x20 + 1 || Creates both an A and X descriptor || In<br /> |-<br /> | 0x20 + 2 || Creates both an B and C descriptor || Out<br /> |-<br /> | 0x20 + 2 + 0x40 || Same as 0x20 + 2, except a certain value is set to hard-coded 0x1 instead. || Out<br /> |}<br /> <br /> C and X (Pointer and ReceiveList) descriptors are backed by the &quot;pointer buffer&quot;, a buffer in the service process. Its size is a u16, which is retrieved using the &quot;QueryPointerBufferSize&quot; control message. If the client code determines all buffers with flag 8 do not fit in the pointer buffer, it returns error 0x11A0B.<br /> <br /> For buffers with flag 0x20 it creates two descriptors (A+X or B+C), but one descriptor is NULL (zero size and pointer), while the other holds the expected values. X/C descriptors are used as the non-NULL descriptor where possible, but if they don't fit in the pointer buffer, A/B descriptors are used instead. The code defers processing of type 0x20 buffers with sizes that fit in a u16 (and may therefore fit in the pointer buffer). This ensures all type 8 buffers get pointer-buffer space before any type 0x20.<br /> <br /> (The order in which the deferred type 0x20 buffers are processed is determined by a convoluted loop.)<br /> <br /> == Official IPC Cmd Structure ==<br /> Official struct that is stored for each IPC command. It contains precalculated offsets for different portions of the command structure.<br /> <br /> All offsets are given is in number of u32 words.<br /> <br /> struct IpcCmdStruct {<br /> u8 unk0;<br /> u8 has_handle_descriptor;<br /> u8 pad0[2];<br /> u32 cmd0;<br /> u32 cmd1;<br /> u32 offset_handle_descriptor;<br /> u32 pad1;<br /> u32 offset_handles; <br /> u32 pad2;<br /> u32 offset_x_descriptors;<br /> u32 offset_a_descriptors;<br /> u32 offset_b_descriptors;<br /> u32 offset_w_descriptors; /* this is a guess */<br /> u32 offset_raw_data;<br /> u32 offset_c_descriptors;<br /> u32 unk2;<br /> u32 unk3;<br /> }<br /> <br /> == Control ==<br /> When type == 5 you are talking to the IPC manager. These are processed by the sysmodule.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Arguments || Output<br /> |-<br /> | 0 || ConvertCurrentObjectToDomain || None || u32 CmifDomainObjectId<br /> |-<br /> | 1 || CopyFromCurrentDomain || u32 CmifDomainObjectId || u32 NativeHandle<br /> |-<br /> | 2 || CloneCurrentObject || None || u32 NativeHandle<br /> |-<br /> | 3 || QueryPointerBufferSize || None || u16 size<br /> |-<br /> | 4 || CloneCurrentObjectEx || u32 unknown || u32 NativeHandle<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=HIPC&diff=5161 2018-10-07T20:17:21Z

<p>Shinyquagsire23: /* IPC Command Structure */</p> <hr /> <div>== IPC Command Structure ==<br /> This is an array of u32's, usually located in [[Thread Local Storage]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 15-0 || [[#Type|Type]].<br /> |-<br /> | 0 || 19-16 || Number of buf X descriptors (each: 2 words).<br /> |-<br /> | 0 || 23-20 || Number of buf A descriptors (each: 3 words).<br /> |-<br /> | 0 || 27-24 || Number of buf B descriptors (each: 3 words).<br /> |-<br /> | 0 || 31-28 || Number of buf W desciptors (each: 3 words), never observed.<br /> |-<br /> | 1 || 9-0 || Size of IPC packet in u32s.<br /> |-<br /> | 1 || 13-10 || Flags for buf C descriptor.<br /> |-<br /> | 1 || 30-20 || ?<br /> |-<br /> | 1 || 31 || Enable handle descriptor.<br /> |-<br /> | ... || || [[#Handle descriptor|Handle descriptor]], if enabled.<br /> |-<br /> | ... || || [[#Buffer descriptor X &quot;Pointer&quot;|Buf X descriptors]], each one 2 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Buf A descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Buf B descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot;|Type W descriptors]], each one 3 words.<br /> |-<br /> | ... || || [[#Raw_data_section|Raw data section]] (including padding before and after aligned data section).<br /> |-<br /> | ... || || [[#Buffer descriptor C &quot;ReceiveList&quot;|Buf C descriptors]], each one 2 words.<br /> |}<br /> <br /> First two header u32's and handle descriptor (if enabled) are copied as-is from one process to the other.<br /> <br /> === Type ===<br /> IPC commands can have different types which influence how the IPC server processes requests in &quot;nn::sf::hipc::server::HipcServerSessionManagerBase::ProcessRequest&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Value || Name<br /> |-<br /> | 0 || Invalid<br /> |-<br /> | 1 || [[#LegacyRequest, LegacyControl|LegacyRequest]]<br /> |-<br /> | 2 || [[#Close|Close]]<br /> |-<br /> | 3 || [[#LegacyRequest, LegacyControl|LegacyControl]]<br /> |-<br /> | 4 || [[#Request, Control|Request]]<br /> |-<br /> | 5 || [[#Request, Control|Control]]<br /> |-<br /> | 6 || [5.0.0+] [[#RequestWithContext, ControlWithContext|RequestWithContext]]<br /> |-<br /> | 7 || [5.0.0+] [[#RequestWithContext, ControlWithContext|ControlWithContext]]<br /> |}<br /> <br /> ==== Close ====<br /> When processing a request of this type, the IPC server calls:<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::DestroyServerSession&quot;<br /> * &quot;nn::sf::hipc::CloseServerSessionHandle&quot;<br /> <br /> This ensures that the server session is destroyed internally and properly closed.<br /> <br /> ==== LegacyRequest, LegacyControl ====<br /> These types are handled by calling:<br /> * &quot;nn::sf::hipc::detail::HipcMessageBufferAccessor::ParseHeader&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::ProcessMessage&quot;<br /> * &quot;nn::sf::hipc::Reply&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::RegisterServerSessionToWaitBase&quot;<br /> <br /> It is speculated that these are part of an older message processing system where headers were further partitioned.<br /> <br /> ==== Request, Control ====<br /> These types are handled by calling:<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::ProcessMessage2&quot;<br /> * &quot;nn::sf::hipc::server::HipcServerSessionManager::RegisterServerSessionToWaitBase&quot;<br /> <br /> This represents a more modern message handling system where contents follow the general marshalling structure.<br /> <br /> ==== RequestWithContext, ControlWithContext ====<br /> These are identical to normal Request and Control types, but with the additional requirement of suppling a token in their [[#Data payload|data payload]].<br /> <br /> This token is used by &quot;nn::sf::cmif::SetInlineContext&quot; which has the sole purpose of saving it into the TLS in order for it to be distributed to any IPC commands that are made while processing the current command. It's unknown if this token serves any purpose or if it's just a debug-tool to figure out what IPC command caused a particular chain of commands.<br /> <br /> === Handle descriptor ===<br /> There can only be one of this descriptor type. It is enabled by bit31 of the second word.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 0 || Send current PID.<br /> |-<br /> | 0 || 4-1 || Number of handles to copy<br /> |-<br /> | 0 || 8-5 || Number of handles to move<br /> |-<br /> | ... || || 8-byte PID if enabled<br /> |-<br /> | ... || || Handles to copy<br /> |-<br /> | ... || || Handles to move<br /> |}<br /> <br /> Sysmodules load the last u64 of rawdata when handling the PID. This is not written by kernel. For sysmodule handling:<br /> * In some cases: these commands require a placeholder u64 value passed in the input parameters, as mentioned above. In these cases the OverwriteClientProcessId method is called to replace the value before it is used.<br /> * In other cases: The rawdata_u64 is compared with the PID from the descriptor. On mismatch and when rawdata_u64!=0, error 0x60A is returned. The PID value passed to the cmdhandler vtable funcptr is the rawdata_u64.<br /> <br /> Handle 0 is allowed, and just means no handle was sent.<br /> <br /> === Buffer descriptor X &quot;Pointer&quot; ===<br /> This one is packed even worse than A, they inserted the bit38-36 of the address ''on top'' of the counter field.<br /> <br /> Officially, the counter is known as &quot;receive index&quot;. This one writes to the buffer described in the ReceiveList.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 5-0 || Bits 5-0 of counter.<br /> |-<br /> | 0 || 8-6 || Bit 38-36 of address.<br /> |-<br /> | 0 || 11-9 || Bits 11-9 of counter.<br /> |-<br /> | 0 || 15-12 || Bit 35-32 of address.<br /> |-<br /> | 0 || 31-16 || Size<br /> |-<br /> | 1 || || Lower 32-bits of address.<br /> |}<br /> <br /> === Buffer descriptor A/B/W &quot;Send&quot;/&quot;Receive&quot;/&quot;Exchange&quot; ===<br /> This packing is so unnecessarily complex.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || || Lower 32-bits of size.<br /> |-<br /> | 1 || || Lower 32-bits of address.<br /> |-<br /> | 2 || 1-0 || Flags. Always set to 0, 1 or 3.<br /> |-<br /> | 2 || 4-2 || Bit 38-36 of address.<br /> |-<br /> | 2 || 27-24 || Bit 35-32 of size.<br /> |-<br /> | 2 || 31-28 || Bit 35-32 of address.<br /> |}<br /> <br /> A reply must not use A/B/W, svcReplyAndReceive will return 0xE801.<br /> <br /> [[SVC|MemoryAttribute]] IsBorrowed and IsUncached are never allowed for the source address.<br /> <br /> &quot;Send&quot; means buffer is sent from source process into service process.<br /> <br /> &quot;Receive&quot; means that data is copied from service process into user process.<br /> <br /> &quot;Exchange&quot; means both &quot;Send&quot; and &quot;Receive&quot;.<br /> <br /> ==== Flags ====<br /> Determines what [[SVC|MemoryState]] to use with the mapped memory in the sysmodule.<br /> <br /> Used to enforce whether or not device mapping is allowed for src and dst buffers respectively.<br /> <br /> * Flag0: Device mapping *not* allowed for src or dst.<br /> * Flag1: Device mapping allowed for src and dst.<br /> * Flag3: Device mapping allowed for src but not for dst.<br /> <br /> === Buffer descriptor C &quot;ReceiveList&quot; ===<br /> There's a 4-bit flag in the main header controlling the behavior of C descriptors.<br /> <br /> If it has value 0, the C descriptor functionality is disabled.<br /> <br /> If it has value 1, there is an &quot;inlined&quot; C buffer after the raw data. Received data is copied to ROUND_UP(cmdbuf+raw_size+index, 16)<br /> <br /> If it has value 2, there is a single C descriptor.<br /> <br /> Otherwise it has (flag-2) C descriptors. In this case, index picks which C descriptor to copy received data to [instead of picking the offset into the buffer].<br /> <br /> Data sent with this method must have MemoryState 0x4000000 mask set.<br /> <br /> After reply, X descriptors are written to the sender containing the address, size and index that were copied to.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || || Lower 32-bits of address.<br /> |-<br /> | 1 || 15-0 || Rest of address.<br /> |-<br /> | 1 || 31-16 || Size<br /> |}<br /> <br /> === IPC buffers ===<br /> Buffer descriptor A/B/... map memory into the sysmodule process. For the mapped memory in the sysmodule the permissions are: desc-A = R--, desc-B = RW-. The buffer is automatically unmapped while the kernel handles the cmdreply, the sysmodule doesn't need to specify anything in the cmdreply to trigger this.<br /> <br /> This memory is mapped in the sysmodule to the same vaddr from the original user-process cmd-request, except with with bits &gt;=(~28(?)) changed to a different ASLR'd region.<br /> <br /> No user-process-&gt;sysmodule memcpy is done for outbufs, only sysmodule-&gt;user-process.<br /> <br /> == Raw data section ==<br /> [[File:Ipc msg buffer type a example.png|thumb|An example of an IPC message with a type 0xA buffer in it. Red is headers/descriptors, yellow is padding, and blue is data/buffer lengths. Note that the size of the u16 array for type A lengths is padded to fill up a whole word.]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Description<br /> |-<br /> | ... || Padding to align to 16 bytes.<br /> |-<br /> | ... || If sent to an object domain, a [[#Domain_message|domain message]], otherwise a [[#Data payload|data payload]]<br /> |-<br /> | ... || Padding<br /> |-<br /> | ... || Buffer type 0xA lengths (u16 array)<br /> |}<br /> <br /> The total amount of padding within the raw data section is always 0x10 bytes. This means that if no padding is required before the message, there will be 0x10 bytes of padding after the message (before the buffer type 0xA lengths).<br /> <br /> === Domain message ===<br /> This header is used to wrap up requests sent to domains instead of sessions.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Bits || Description<br /> |-<br /> | 0 || 7-0 || Command. 1=send message, 2=close virtual handle<br /> |-<br /> | 0 || 8-15 || Input object count<br /> |-<br /> | 0 || 31-16 || Length of [[IPC_Marshalling#Data_payload|data payload]] in bytes.<br /> |-<br /> | 1 || || Object ID (from cmd 0 in [[IPC_Marshalling#Control|Control]]).<br /> |-<br /> | 2 || || Padding<br /> |-<br /> | 3 || || [5.0.0+] Token for (NewRequest only)<br /> |-<br /> | 4... || || [[#Data payload|Data payload]]<br /> |-<br /> | ... || || Input object IDs (u32s, not aligned)<br /> |}<br /> <br /> === Data payload ===<br /> This is an array of u32's, but individual parameters are generally stored as u64's.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Word || Description<br /> |-<br /> | 0 || Magic (&quot;SFCI&quot; for requests, &quot;SFCO&quot; for responses) as u64.<br /> |-<br /> | 2 || Command id as u64 for requests, [[Error_codes|error code]] as u64 for responses.<br /> |-<br /> | 3 || [5.0.0+] Token (for NewRequest only, non-domain messages).<br /> |-<br /> | 4... || Input parameters or return values<br /> |}<br /> <br /> [5.0.0+] A token value was introduced into raw_data+12 (regardless of domain or not, in either case it overlaps with padding).<br /> <br /> == Official marshalling code ==<br /> The official marshalling function takes an array of (buf_ptr, size) pairs and a type-field for each such pair.<br /> <br /> Bitmask 0x10 seems to indicate null-terminated strings.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Type Mask || Description || Direction<br /> |-<br /> | 4 + 1 || Creates a A descriptor with flags=0. || In<br /> |-<br /> | 0x40 + 4 + 1 || Creates a A descriptor with flags=1. || In<br /> |-<br /> | 0x80 + 4 + 1 || Creates a A descriptor with flags=3. || In<br /> |-<br /> | 4 + 2 || Creates a B descriptor with flags=0. || Out<br /> |-<br /> | 0x40 + 4 + 2 || Creates a B descriptor with flags=1. || Out<br /> |-<br /> | 0x80 + 4 + 2 || Creates a B descriptor with flags=3. || Out<br /> |-<br /> | 8 + 1 || Creates an X descriptor || In<br /> |-<br /> | 8 + 2 || Creates a C descriptor, and writes the u16 size to an offset into raw data. || Out<br /> |-<br /> | 0x10 + 8 + 2 || Creates a C descriptor || Out<br /> |-<br /> | 0x20 + 1 || Creates both an A and X descriptor || In<br /> |-<br /> | 0x20 + 2 || Creates both an B and C descriptor || Out<br /> |-<br /> | 0x20 + 2 + 0x40 || Same as 0x20 + 2, except a certain value is set to hard-coded 0x1 instead. || Out<br /> |}<br /> <br /> C and X (Pointer and ReceiveList) descriptors are backed by the &quot;pointer buffer&quot;, a buffer in the service process. Its size is a u16, which is retrieved using the &quot;QueryPointerBufferSize&quot; control message. If the client code determines all buffers with flag 8 do not fit in the pointer buffer, it returns error 0x11A0B.<br /> <br /> For buffers with flag 0x20 it creates two descriptors (A+X or B+C), but one descriptor is NULL (zero size and pointer), while the other holds the expected values. X/C descriptors are used as the non-NULL descriptor where possible, but if they don't fit in the pointer buffer, A/B descriptors are used instead. The code defers processing of type 0x20 buffers with sizes that fit in a u16 (and may therefore fit in the pointer buffer). This ensures all type 8 buffers get pointer-buffer space before any type 0x20.<br /> <br /> (The order in which the deferred type 0x20 buffers are processed is determined by a convoluted loop.)<br /> <br /> == Official IPC Cmd Structure ==<br /> Official struct that is stored for each IPC command. It contains precalculated offsets for different portions of the command structure.<br /> <br /> All offsets are given is in number of u32 words.<br /> <br /> struct IpcCmdStruct {<br /> u8 unk0;<br /> u8 has_handle_descriptor;<br /> u8 pad0[2];<br /> u32 cmd0;<br /> u32 cmd1;<br /> u32 offset_handle_descriptor;<br /> u32 pad1;<br /> u32 offset_handles; <br /> u32 pad2;<br /> u32 offset_x_descriptors;<br /> u32 offset_a_descriptors;<br /> u32 offset_b_descriptors;<br /> u32 offset_w_descriptors; /* this is a guess */<br /> u32 offset_raw_data;<br /> u32 offset_c_descriptors;<br /> u32 unk2;<br /> u32 unk3;<br /> }<br /> <br /> == Control ==<br /> When type == 5 you are talking to the IPC manager. These are processed by the sysmodule.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Arguments || Output<br /> |-<br /> | 0 || ConvertCurrentObjectToDomain || None || u32 CmifDomainObjectId<br /> |-<br /> | 1 || CopyFromCurrentDomain || u32 CmifDomainObjectId || u32 NativeHandle<br /> |-<br /> | 2 || CloneCurrentObject || None || u32 NativeHandle<br /> |-<br /> | 3 || QueryPointerBufferSize || None || u16 size<br /> |-<br /> | 4 || CloneCurrentObjectEx || u32 unknown || u32 NativeHandle<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Bus_services&diff=5136 2018-10-01T01:07:10Z

<p>Shinyquagsire23: </p> <hr /> <div>= gpio =<br /> This is &quot;nn::gpio::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession]]<br /> |-<br /> | 2 || [[#OpenSessionForTest]]<br /> |-<br /> | 3 || IsWakeEventActive <br /> |-<br /> | 4 || GetWakeEventActiveFlagSet<br /> |-<br /> | 5 || SetWakeEventActiveFlagSetForDebug<br /> |-<br /> | 6 || SetWakePinDebugMode<br /> |-<br /> | 7 || [5.0.0+] [[#OpenSession2]]<br /> |-<br /> | 8 || [5.0.0+] IsWakeEventActive2<br /> |-<br /> | 9 || [5.0.0+] SetWakeEventActiveFlagSetForDebug2<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! GpioPadName || GpioPadDescriptor || Tegra (port, pin) || Usage || Direction || Used by<br /> |-<br /> | 0x01 || 0xCC || Z, 4 || Audio Codec (ALC5639) Power || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]], [[Fatal services]])<br /> |-<br /> | 0x02 || 0x24 || E, 4 || SDCard Power || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x03 || 0x3C || H, 4 || BT_RST_PH4 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Bluetooth Driver services]])<br /> |-<br /> | 0x04 || 0xDA || BB, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x05 || 0xDB || BB, 3 || GcAsic Power || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x06 || 0xDC || BB, 4 || Headphone Detect || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]])<br /> |-<br /> | 0x07 || 0x25 || E, 5 || || Out || Icosa, Copper, Hoag<br /> |-<br /> | 0x08 || 0x90 || S, 0 || DebugPadDriver || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x09 || 0x91 || S, 1 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0A || 0x96 || S, 6 || Charger IC (BQ24193) Charge Enable || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x0B || 0x97 || S, 7 || CPU fan sampling || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0C || 0x26 || E, 6 || Joy-Con(L) IsAttached (insertion, Joy-Con pin 5/console TX, pulled low on insert?) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x0D || 0x05 || A, 5 || Fan enable (normal) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x0E || 0x78 || P, 0 || SDMMC3_CLK_PP0? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0F || 0x93 || S, 3 || GcAsic IRQ || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x10 || 0x7D || P, 5 || SDMMC3_DAT0_PP5? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x11 || 0x7C || P, 4 || SDMMC3_DAT1_PP4? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x12 || 0x7B || P, 3 || SDMMC3_DAT2_PP3? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x13 || 0x7A || P, 2 || SDMMC3_DAT3_PP2? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x14 || 0xBC || X, 4 || Temperature Sensor || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x15 || 0xAE || V, 6 || || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]])<br /> |-<br /> | 0x16 || 0xBA || X, 2 || MOTION_INT_PX2? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x17 || 0xB9 || X, 1 || TouchPanel IRQ (TOUCH_INT_PX1) (unused - polled instead) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x18 || 0xBD || X, 5 || Power Button (BUTTON_POWER_ON_PX5) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x19 || 0xBE || X, 6 || Volume Up (BUTTON_VOL_UP_PX6) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Boot2]], [[Audio services]])<br /> |-<br /> | 0x1A || 0xBF || X, 7 || Volume Down (BUTTON_VOL_DOWN_PX7) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Boot2]], [[Audio services]])<br /> |-<br /> | 0x1B || 0xC0 || Y, 0 || Fuel Gauge IC (MAX17050) IRQ || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x1C || 0xC1 || Y, 1 || BUTTON_HOME_PY1 || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x1D || 0xA9 || V, 1 || Backlight Enable (LCD_BL_EN_PV1) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]], [[Backlight services]])<br /> |-<br /> | 0x1E || 0xAA || V, 2 || Backlight Reset (LCD_RST_PV2) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x1F || 0x55 || K, 5 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x20 || 0xAD || V, 5 || USB-PD controller (RHOM BM92T30MWV) related || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x21 || 0xC8 || Z, 0 || Charger IC (BQ24193) IRQ || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x22 || 0xCA || Z, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x23 || 0xCB || Z, 3 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x24 || 0x4F || J, 7 || TouchPanel reset || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x25 || 0x50 || K, 0 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x26 || 0x51 || K, 1 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x27 || 0x52 || K, 2 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x28 || 0x54 || K, 4 || USB-PD controller (RHOM BM92T30MWV) IRQ || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x29 || 0x56 || K, 6 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x2A || 0x57 || K, 7 || || In || Icosa, Copper, Hoag<br /> |-<br /> | 0x2B || 0x53 || K, 3 || Joy-Con(R) NwcpDriver1.NwcpCharger || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x2C || 0xE3 || CC, 3 || Joy-Con(L) NwcpDriver0.NwcpCharger || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x2D || 0x38 || H, 0 || WIFI_EN_PH0? || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x2E || 0x39 || H, 1 || WIFI_RST_PH1 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Wlan services]], [[PCIe services]])<br /> |-<br /> | 0x2F || 0x3B || H, 3 || AP_WAKE_BT_PH3 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Bluetooth Driver services]])<br /> |-<br /> | 0x30 || 0x3D || H, 5 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x31 || 0x3F || H, 7 || || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x32 || 0x40 || I, 0 || Backlight +5V || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x33 || 0x41 || I, 1 || Backlight -5V || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x34 || 0x3E || H, 6 || Joy-Con(R) IsAttached (insertion, Joy-Con pin 5/console TX, pulled low on insert?) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x35 || 0xE2 || CC, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x36 || 0xE4 || CC, 4 || Fan enable (high power) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x37 || 0x3A || H, 2 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x38 || 0xC9 || Z, 1 || SDCard Card Detect || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x39 || 0x4D || J, 5 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x3A || 0x58 || L, 0 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x3B || 0x3E || H, 6 || Joy-Con(R) NwcpDriver1.GpioMonitorTask0 duplicate? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x3C || 0x26 || E, 6 || Joy-Con(L) NwcpDriver1.GpioMonitorTask0 duplicate? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x3D || -1 || || || ||<br /> |-<br /> | 0x3E || 0x33 || G, 3 || Joy-Con(R) CTS (checked low) || In || None &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x3F || 0x1C || D, 4 || Joy-Con(L) CTS (checked low) || In || None &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x40 || 0xD9 || BB, 1 || || Out || [2.0.0+] Copper<br /> |-<br /> | 0x41 || 0x0C || B, 4 || Lid Closed (unused) || In || [2.0.0+] Copper<br /> |-<br /> | 0x42 || 0x0D || B, 5 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x43 || 0x21 || E, 1 || USB power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x44 || 0x27 || E, 7 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x45 || 0x92 || S, 2 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x46 || 0x95 || S, 5 || USB root port 4 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x47 || 0x98 || T, 0 || USB root port 3 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x48 || 0x10 || C, 0 || HdmiHotplug || Out || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x49 || 0x11 || C, 1 || USB root port 2 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x4A || 0x12 || C, 2 || HdmiHotplug || Out || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x4B || 0x42 || I, 2 || || Out || [2.0.0+] Copper<br /> |-<br /> | 0x4C || 0xE6 || CC, 6 || || In || [2.0.0+] Copper<br /> |-<br /> | [2.0.0+] 0x4D || 0xAC || V, 4 || || Out || [2.0.0+] Copper<br /> |-<br /> | [2.0.0+] 0x4E || 0xE1 || CC, 1 || HdmiHotplug (HDMI_INT_DP_HPD_PCC1) || In || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | [5.0.0+] 0x4F || 0x56 || K, 6 || || || None<br /> |-<br /> | - || 0x32 || G, 2 || Joy-Con(R) RTS || || None<br /> |-<br /> | - || 0x1B || D, 3 || Joy-Con(L) RTS || || None<br /> |}<br /> <br /> == GpioPadDescriptor ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bits || Description<br /> |-<br /> | 7-5 || Controller index<br /> |-<br /> | 4-3 || Port index<br /> |-<br /> | 2-0 || Pin number<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes a raw [[#GpioPadDescriptor]] and returns a [[#IPadSession]] session for it.<br /> <br /> == OpenSession ==<br /> Same thing as [[#OpenSessionForDev]] except it takes a '''GpioPadName''' which is then converted to a [[#GpioPadDescriptor]]. Returns an [[#IPadSession]] session.<br /> <br /> == OpenSessionForTest ==<br /> Same as [[#OpenSession]] but panics on failure.<br /> <br /> == OpenSession2 ==<br /> Same as [[#OpenSession]] but takes a '''DeviceCode''' instead of a '''GpioPadName'''.<br /> <br /> == IPadSession ==<br /> This is &quot;nn::gpio::IPadSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetDirection<br /> |-<br /> | 1 || GetDirection<br /> |-<br /> | 2 || SetInterruptMode<br /> |-<br /> | 3 || GetInterruptMode<br /> |-<br /> | 4 || SetInterruptEnable<br /> |-<br /> | 5 || GetInterruptEnable<br /> |-<br /> | 6 || GetInterruptStatus<br /> |-<br /> | 7 || ClearInterruptStatus<br /> |-<br /> | 8 || SetValue<br /> |-<br /> | 9 || GetValue<br /> |-<br /> | 10 || BindInterrupt<br /> |-<br /> | 11 || UnbindInterrupt<br /> |-<br /> | 12 || SetDebounceEnabled<br /> |-<br /> | 13 || GetDebounceEnabled<br /> |-<br /> | 14 || SetDebounceTime<br /> |-<br /> | 15 || GetDebounceTime<br /> |-<br /> | 16 || [4.0.0+] SetValueForSleepState<br /> |}<br /> <br /> = i2c, i2c:pcv =<br /> This is &quot;nn::i2c::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev_2|OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession_2|OpenSession]]<br /> |-<br /> | 2 || [[#HasDevice|HasDevice]]<br /> |-<br /> | 3 || [[#HasDeviceForDev|HasDeviceForDev]]<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! I2cDevice || Port:Addr || Is10bit || Speed || Max Retries || Retry Delay || Usage || Used by<br /> |-<br /> | 0 || 0:52 || N || 100000 || 0 || 0 || DebugPadDriver || [[HID services]]<br /> |-<br /> | 1 || 2:49 || N || 400000 || 0 || 0 || TouchPanel || [[HID services]]<br /> |-<br /> | 2 || 0:4c || N || 100000 || 0 || 0 || Temperature Sensor (TMP451 or NCT72) || [[PTM services]]<br /> |-<br /> | 3 || 0:4c || N || 100000 || 0 || 0 || Temperature Sensor (TMP451 or NCT72) (duplicate) ||<br /> |-<br /> | 4 || 0:1c || N || 100000 || 0 || 0 || Audio Codec (ALC5639) || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 5 || 4:68 || N || 400000 || 3 || 5000000 || PMIC RTC (max77620_rtc0), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 6 || 4:3c || N || 400000 || 3 || 5000000 || PMIC (MAX77620), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 7 || 4:1b || N || 400000 || 3 || 5000000 || Sub-PMIC for CPU (max77621_cpu) || [[PCV services]]<br /> |-<br /> | 8 || 4:1c || N || 400000 || 3 || 5000000 || Sub-PMIC for GPU (max77621_gpu) || [[PCV services]]<br /> |-<br /> | 9 || 0:6b || N || 100000 || 3 || 5000000 || Charger IC (BQ24193) || [[PTM services]]<br /> |-<br /> | 10 || 0:36 || N || 100000 || 3 || 5000000 || Fuel Gauge IC (MAX17050) || [[PCV services]], [[PTM services]]<br /> |-<br /> | 11 || 0:18 || N || 100000 || 3 || 5000000 || USB-PD controller (RHOM BM92T30MWV) || [[USB services]]<br /> |-<br /> | 12 || 1:40 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VDD15V0-HB) || Factory testing<br /> |-<br /> | 13 || 1:41 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-CPU-DS) || Factory testing<br /> |-<br /> | 14 || 1:44 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-GPU-DS) || Factory testing<br /> |-<br /> | 15 || 1:45 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-DDR-DS) || Factory testing<br /> |-<br /> | 16 || 1:46 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-AP) || Factory testing<br /> |-<br /> | 17 || 1:47 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-BL-DS) || Factory testing<br /> |-<br /> | 18 || 1:29 || N || 400000 || 3 || 5000000 || Ambient Light Sensor (BH1730) || [[Backlight services]]<br /> |-<br /> | 19 || 1:48 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_CORE) || Factory testing<br /> |-<br /> | 20 || 1:49 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_Soc-1V8) || Factory testing<br /> |-<br /> | 21 || 1:4a || N || 400000 || 3 || 5000000 || Power Monitor (ina226_LPDDR4-1V8) || Factory testing<br /> |-<br /> | 22 || 1:4b || N || 400000 || 3 || 5000000 || Power Monitor (ina226_REG1V32) || Factory testing<br /> |-<br /> | 23 || 1:4d || N || 400000 || 3 || 5000000 || Power Monitor (ina226_VDD3V3-SYS) || Factory testing<br /> |-<br /> | 24 || 3:50 || N || 100000 || 0 || 0 || HDMI DDC || [[NV services]]<br /> |-<br /> | 25 || 3:54 || N || 100000 || 0 || 0 || HDMI SCDC || [[NV services]]<br /> |-<br /> | 26 || 3:3a || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes an u32 '''port''', an u16 '''addr''', an '''AddressingMode''' (1 for 10-bit, 0 otherwise) and a '''SpeedMode''' (400000 or 100000). Returns a [[#II2cSession]] session.<br /> <br /> == OpenSession ==<br /> Takes an '''I2cDevice''' and returns a [[#II2cSession]] session for it.<br /> <br /> == HasDevice ==<br /> Takes an '''I2cDevice''' and returns true if the device exists or false otherwise.<br /> <br /> == HasDeviceForDev ==<br /> Takes an u32 '''port''', an u16 '''addr''', an '''AddressingMode''' (1 for 10-bit, 0 otherwise) and a '''SpeedMode''' (400000 or 100000). Returns true if the device exists or false otherwise.<br /> <br /> == II2cSession ==<br /> This is &quot;nn::i2c::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Send<br /> |-<br /> | 1 || Receive<br /> |-<br /> | 2 || ExecuteCommandList<br /> |-<br /> | 10 || [[#SendAuto]]<br /> |-<br /> | 11 || ReceiveAuto<br /> |-<br /> | 12 || [[#ExecuteCommandListAuto]]<br /> |}<br /> <br /> == SendAuto ==<br /> <br /> Takes bytes to write in either a static buffer or a receive buffer, returns an error code for success<br /> <br /> == ExecuteCommandListAuto ==<br /> <br /> Takes a command list from either a static buffer or a receive buffer, returns data in either a static (or recieve?) buffer.<br /> <br /> === Commands ===<br /> <br /> * 0x40 [u8 len] &lt;bytes&gt; - Write bytes to device<br /> * 0xC1 [u8 len] - Receive bytes from device<br /> <br /> = uart =<br /> This is &quot;nn::uart::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#DoesUartExist]]<br /> |-<br /> | 1 || DoesUartExistForTest<br /> |-<br /> | 2 || [[#SetUartBaudrate]]<br /> |-<br /> | 3 || SetUartBaudrateForTest<br /> |-<br /> | 4 || [[#IsSomethingUartValid]]<br /> |-<br /> | 5 || IsSomethingUartValidForTest<br /> |-<br /> | 6 || [[#GetSession]]<br /> |-<br /> | 7 || IsSomethingUartValid2<br /> |-<br /> | 8 || IsSomethingUartValid2ForTest<br /> |}<br /> <br /> == DoesUartExist ==<br /> Takes a u32 [[#UartPort]] and returns boolean success value<br /> <br /> == SetUartBaudrate ==<br /> Takes a u32 [[#UartPort]] and a u32 baudrate and returns boolean success value<br /> <br /> == IsSomethingUartValid ==<br /> Takes a u32 [[#UartPort]] and returns boolean success value<br /> <br /> == GetSession ==<br /> Takes a u32 [[#UartPort]] and returns an [[#IPortSession]]<br /> <br /> == UartPort ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port || Usage<br /> |-<br /> | 1 || UART-D || Bluetooth<br /> |-<br /> | 2 || UART-B || Joy-Con(R)<br /> |-<br /> | 3 || UART-C || Joy-Con(L)<br /> |}<br /> <br /> == IPortSession ==<br /> This is &quot;nn::uart::IPortSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |-<br /> | 1 || OpenSessionForTest<br /> |-<br /> | 2 ||<br /> |-<br /> | 3 ||<br /> |-<br /> | 4 ||<br /> |-<br /> | 5 ||<br /> |-<br /> | 6 ||<br /> |-<br /> | 7 ||<br /> |}<br /> <br /> === Port Mapping ===<br /> OpenSession translates user IDs to to the [[#UartPort]] index.<br /> <br /> OpenSessionForTest takes the port index verbatim.<br /> <br /> = pwm =<br /> This is &quot;nn::pwm::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |}<br /> <br /> == Known Channels ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Interface || Usage || Used by<br /> |-<br /> | 1 || PWM Channel 1 || Fan || [[PTM services]]<br /> |-<br /> | 2 || PWM Channel 0 || Backlight || [[Backlight services]], [[NV services]]<br /> |-<br /> | 3 || PMC Blinker || ||<br /> |}<br /> <br /> == IChannelSession ==<br /> This is &quot;nn::pwm::IChannelSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPeriod<br /> |-<br /> | 1 || GetPeriod<br /> |-<br /> | 2 || SetDuty<br /> |-<br /> | 3 || GetDuty<br /> |-<br /> | 4 || SetEnabled<br /> |-<br /> | 5 || GetEnabled<br /> |}<br /> <br /> = pinmux =<br /> This is &quot;nn::pinmux::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::pinmux::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPinAssignment<br /> |-<br /> | 1 || GetPinAssignment<br /> |-<br /> | 2 || SetPinAssignmentForHardwareTest<br /> |}<br /> <br /> = sasbus =<br /> This is &quot;nn::sasbus::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::sasbus::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || <br /> |-<br /> | 1 || <br /> |-<br /> | 2 || <br /> |-<br /> | 3 || <br /> |}<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Bus_services&diff=5135 2018-10-01T00:53:06Z

<p>Shinyquagsire23: /* II2cSession */</p> <hr /> <div>= gpio =<br /> This is &quot;nn::gpio::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession]]<br /> |-<br /> | 2 || [[#OpenSessionForTest]]<br /> |-<br /> | 3 || IsWakeEventActive <br /> |-<br /> | 4 || GetWakeEventActiveFlagSet<br /> |-<br /> | 5 || SetWakeEventActiveFlagSetForDebug<br /> |-<br /> | 6 || SetWakePinDebugMode<br /> |-<br /> | 7 || [5.0.0+] [[#OpenSession2]]<br /> |-<br /> | 8 || [5.0.0+] IsWakeEventActive2<br /> |-<br /> | 9 || [5.0.0+] SetWakeEventActiveFlagSetForDebug2<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! GpioPadName || GpioPadDescriptor || Tegra (port, pin) || Usage || Direction || Used by<br /> |-<br /> | 0x01 || 0xCC || Z, 4 || Audio Codec (ALC5639) Power || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]], [[Fatal services]])<br /> |-<br /> | 0x02 || 0x24 || E, 4 || SDCard Power || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x03 || 0x3C || H, 4 || BT_RST_PH4 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Bluetooth Driver services]])<br /> |-<br /> | 0x04 || 0xDA || BB, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x05 || 0xDB || BB, 3 || GcAsic Power || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x06 || 0xDC || BB, 4 || Headphone Detect || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]])<br /> |-<br /> | 0x07 || 0x25 || E, 5 || || Out || Icosa, Copper, Hoag<br /> |-<br /> | 0x08 || 0x90 || S, 0 || DebugPadDriver || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x09 || 0x91 || S, 1 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0A || 0x96 || S, 6 || Charger IC (BQ24193) Charge Enable || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x0B || 0x97 || S, 7 || CPU fan sampling || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0C || 0x26 || E, 6 || Joy-Con(L) IsAttached (insertion, Joy-Con pin 5/console TX, pulled low on insert?) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x0D || 0x05 || A, 5 || Fan enable (normal) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x0E || 0x78 || P, 0 || SDMMC3_CLK_PP0? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0F || 0x93 || S, 3 || GcAsic IRQ || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x10 || 0x7D || P, 5 || SDMMC3_DAT0_PP5? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x11 || 0x7C || P, 4 || SDMMC3_DAT1_PP4? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x12 || 0x7B || P, 3 || SDMMC3_DAT2_PP3? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x13 || 0x7A || P, 2 || SDMMC3_DAT3_PP2? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x14 || 0xBC || X, 4 || Temperature Sensor || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x15 || 0xAE || V, 6 || || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]])<br /> |-<br /> | 0x16 || 0xBA || X, 2 || MOTION_INT_PX2? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x17 || 0xB9 || X, 1 || TouchPanel IRQ (TOUCH_INT_PX1) (unused - polled instead) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x18 || 0xBD || X, 5 || Power Button (BUTTON_POWER_ON_PX5) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x19 || 0xBE || X, 6 || Volume Up (BUTTON_VOL_UP_PX6) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Boot2]], [[Audio services]])<br /> |-<br /> | 0x1A || 0xBF || X, 7 || Volume Down (BUTTON_VOL_DOWN_PX7) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Boot2]], [[Audio services]])<br /> |-<br /> | 0x1B || 0xC0 || Y, 0 || Fuel Gauge IC (MAX17050) IRQ || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x1C || 0xC1 || Y, 1 || BUTTON_HOME_PY1 || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x1D || 0xA9 || V, 1 || Backlight Enable (LCD_BL_EN_PV1) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]], [[Backlight services]])<br /> |-<br /> | 0x1E || 0xAA || V, 2 || Backlight Reset (LCD_RST_PV2) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x1F || 0x55 || K, 5 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x20 || 0xAD || V, 5 || USB-PD controller (RHOM BM92T30MWV) related || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x21 || 0xC8 || Z, 0 || Charger IC (BQ24193) IRQ || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x22 || 0xCA || Z, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x23 || 0xCB || Z, 3 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x24 || 0x4F || J, 7 || TouchPanel reset || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x25 || 0x50 || K, 0 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x26 || 0x51 || K, 1 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x27 || 0x52 || K, 2 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x28 || 0x54 || K, 4 || USB-PD controller (RHOM BM92T30MWV) IRQ || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x29 || 0x56 || K, 6 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x2A || 0x57 || K, 7 || || In || Icosa, Copper, Hoag<br /> |-<br /> | 0x2B || 0x53 || K, 3 || Joy-Con(R) NwcpDriver1.NwcpCharger || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x2C || 0xE3 || CC, 3 || Joy-Con(L) NwcpDriver0.NwcpCharger || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x2D || 0x38 || H, 0 || WIFI_EN_PH0? || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x2E || 0x39 || H, 1 || WIFI_RST_PH1 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Wlan services]], [[PCIe services]])<br /> |-<br /> | 0x2F || 0x3B || H, 3 || AP_WAKE_BT_PH3 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Bluetooth Driver services]])<br /> |-<br /> | 0x30 || 0x3D || H, 5 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x31 || 0x3F || H, 7 || || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x32 || 0x40 || I, 0 || Backlight +5V || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x33 || 0x41 || I, 1 || Backlight -5V || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x34 || 0x3E || H, 6 || Joy-Con(R) IsAttached (insertion, Joy-Con pin 5/console TX, pulled low on insert?) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x35 || 0xE2 || CC, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x36 || 0xE4 || CC, 4 || Fan enable (high power) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x37 || 0x3A || H, 2 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x38 || 0xC9 || Z, 1 || SDCard Card Detect || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x39 || 0x4D || J, 5 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x3A || 0x58 || L, 0 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x3B || 0x3E || H, 6 || Joy-Con(R) NwcpDriver1.GpioMonitorTask0 duplicate? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x3C || 0x26 || E, 6 || Joy-Con(L) NwcpDriver1.GpioMonitorTask0 duplicate? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x3D || -1 || || || ||<br /> |-<br /> | 0x3E || 0x33 || G, 3 || Joy-Con(R) CTS (checked low) || In || None &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x3F || 0x1C || D, 4 || Joy-Con(L) CTS (checked low) || In || None &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x40 || 0xD9 || BB, 1 || || Out || [2.0.0+] Copper<br /> |-<br /> | 0x41 || 0x0C || B, 4 || Lid Closed (unused) || In || [2.0.0+] Copper<br /> |-<br /> | 0x42 || 0x0D || B, 5 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x43 || 0x21 || E, 1 || USB power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x44 || 0x27 || E, 7 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x45 || 0x92 || S, 2 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x46 || 0x95 || S, 5 || USB root port 4 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x47 || 0x98 || T, 0 || USB root port 3 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x48 || 0x10 || C, 0 || HdmiHotplug || Out || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x49 || 0x11 || C, 1 || USB root port 2 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x4A || 0x12 || C, 2 || HdmiHotplug || Out || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x4B || 0x42 || I, 2 || || Out || [2.0.0+] Copper<br /> |-<br /> | 0x4C || 0xE6 || CC, 6 || || In || [2.0.0+] Copper<br /> |-<br /> | [2.0.0+] 0x4D || 0xAC || V, 4 || || Out || [2.0.0+] Copper<br /> |-<br /> | [2.0.0+] 0x4E || 0xE1 || CC, 1 || HdmiHotplug (HDMI_INT_DP_HPD_PCC1) || In || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | [5.0.0+] 0x4F || 0x56 || K, 6 || || || None<br /> |-<br /> | - || 0x32 || G, 2 || Joy-Con(R) RTS || || None<br /> |-<br /> | - || 0x1B || D, 3 || Joy-Con(L) RTS || || None<br /> |}<br /> <br /> == GpioPadDescriptor ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bits || Description<br /> |-<br /> | 7-5 || Controller index<br /> |-<br /> | 4-3 || Port index<br /> |-<br /> | 2-0 || Pin number<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes a raw [[#GpioPadDescriptor]] and returns a [[#IPadSession]] session for it.<br /> <br /> == OpenSession ==<br /> Same thing as [[#OpenSessionForDev]] except it takes a '''GpioPadName''' which is then converted to a [[#GpioPadDescriptor]]. Returns an [[#IPadSession]] session.<br /> <br /> == OpenSessionForTest ==<br /> Same as [[#OpenSession]] but panics on failure.<br /> <br /> == OpenSession2 ==<br /> Same as [[#OpenSession]] but takes a '''DeviceCode''' instead of a '''GpioPadName'''.<br /> <br /> == IPadSession ==<br /> This is &quot;nn::gpio::IPadSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetDirection<br /> |-<br /> | 1 || GetDirection<br /> |-<br /> | 2 || SetInterruptMode<br /> |-<br /> | 3 || GetInterruptMode<br /> |-<br /> | 4 || SetInterruptEnable<br /> |-<br /> | 5 || GetInterruptEnable<br /> |-<br /> | 6 || GetInterruptStatus<br /> |-<br /> | 7 || ClearInterruptStatus<br /> |-<br /> | 8 || SetValue<br /> |-<br /> | 9 || GetValue<br /> |-<br /> | 10 || BindInterrupt<br /> |-<br /> | 11 || UnbindInterrupt<br /> |-<br /> | 12 || SetDebounceEnabled<br /> |-<br /> | 13 || GetDebounceEnabled<br /> |-<br /> | 14 || SetDebounceTime<br /> |-<br /> | 15 || GetDebounceTime<br /> |-<br /> | 16 || [4.0.0+] SetValueForSleepState<br /> |}<br /> <br /> = i2c, i2c:pcv =<br /> This is &quot;nn::i2c::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev_2|OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession_2|OpenSession]]<br /> |-<br /> | 2 || [[#HasDevice|HasDevice]]<br /> |-<br /> | 3 || [[#HasDeviceForDev|HasDeviceForDev]]<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! I2cDevice || Port:Addr || Is10bit || Speed || Max Retries || Retry Delay || Usage || Used by<br /> |-<br /> | 0 || 0:52 || N || 100000 || 0 || 0 || DebugPadDriver || [[HID services]]<br /> |-<br /> | 1 || 2:49 || N || 400000 || 0 || 0 || TouchPanel || [[HID services]]<br /> |-<br /> | 2 || 0:4c || N || 100000 || 0 || 0 || Temperature Sensor (TMP451 or NCT72) || [[PTM services]]<br /> |-<br /> | 3 || 0:4c || N || 100000 || 0 || 0 || Temperature Sensor (TMP451 or NCT72) (duplicate) ||<br /> |-<br /> | 4 || 0:1c || N || 100000 || 0 || 0 || Audio Codec (ALC5639) || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 5 || 4:68 || N || 400000 || 3 || 5000000 || PMIC RTC (max77620_rtc0), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 6 || 4:3c || N || 400000 || 3 || 5000000 || PMIC (MAX77620), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 7 || 4:1b || N || 400000 || 3 || 5000000 || Sub-PMIC for CPU (max77621_cpu) || [[PCV services]]<br /> |-<br /> | 8 || 4:1c || N || 400000 || 3 || 5000000 || Sub-PMIC for GPU (max77621_gpu) || [[PCV services]]<br /> |-<br /> | 9 || 0:6b || N || 100000 || 3 || 5000000 || Charger IC (BQ24193) || [[PTM services]]<br /> |-<br /> | 10 || 0:36 || N || 100000 || 3 || 5000000 || Fuel Gauge IC (MAX17050) || [[PCV services]], [[PTM services]]<br /> |-<br /> | 11 || 0:18 || N || 100000 || 3 || 5000000 || USB-PD controller (RHOM BM92T30MWV) || [[USB services]]<br /> |-<br /> | 12 || 1:40 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VDD15V0-HB) || Factory testing<br /> |-<br /> | 13 || 1:41 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-CPU-DS) || Factory testing<br /> |-<br /> | 14 || 1:44 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-GPU-DS) || Factory testing<br /> |-<br /> | 15 || 1:45 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-DDR-DS) || Factory testing<br /> |-<br /> | 16 || 1:46 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-AP) || Factory testing<br /> |-<br /> | 17 || 1:47 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-BL-DS) || Factory testing<br /> |-<br /> | 18 || 1:29 || N || 400000 || 3 || 5000000 || Ambient Light Sensor (BH1730) || [[Backlight services]]<br /> |-<br /> | 19 || 1:48 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_CORE) || Factory testing<br /> |-<br /> | 20 || 1:49 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_Soc-1V8) || Factory testing<br /> |-<br /> | 21 || 1:4a || N || 400000 || 3 || 5000000 || Power Monitor (ina226_LPDDR4-1V8) || Factory testing<br /> |-<br /> | 22 || 1:4b || N || 400000 || 3 || 5000000 || Power Monitor (ina226_REG1V32) || Factory testing<br /> |-<br /> | 23 || 1:4d || N || 400000 || 3 || 5000000 || Power Monitor (ina226_VDD3V3-SYS) || Factory testing<br /> |-<br /> | 24 || 3:50 || N || 100000 || 0 || 0 || HDMI DDC || [[NV services]]<br /> |-<br /> | 25 || 3:54 || N || 100000 || 0 || 0 || HDMI SCDC || [[NV services]]<br /> |-<br /> | 26 || 3:3a || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes an u32 '''port''', an u16 '''addr''', an '''AddressingMode''' (1 for 10-bit, 0 otherwise) and a '''SpeedMode''' (400000 or 100000). Returns a [[#II2cSession]] session.<br /> <br /> == OpenSession ==<br /> Takes an '''I2cDevice''' and returns a [[#II2cSession]] session for it.<br /> <br /> == HasDevice ==<br /> Takes an '''I2cDevice''' and returns true if the device exists or false otherwise.<br /> <br /> == HasDeviceForDev ==<br /> Takes an u32 '''port''', an u16 '''addr''', an '''AddressingMode''' (1 for 10-bit, 0 otherwise) and a '''SpeedMode''' (400000 or 100000). Returns true if the device exists or false otherwise.<br /> <br /> == II2cSession ==<br /> This is &quot;nn::i2c::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Send<br /> |-<br /> | 1 || Receive<br /> |-<br /> | 2 || ExecuteCommandList<br /> |-<br /> | 10 || [[#SendAuto]]<br /> |-<br /> | 11 || ReceiveAuto<br /> |-<br /> | 12 || ExecuteCommandListAuto<br /> |}<br /> <br /> == SendAuto ==<br /> <br /> Takes bytes to write in either a static buffer or a receive buffer, returns an error code for success<br /> <br /> = uart =<br /> This is &quot;nn::uart::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#DoesUartExist]]<br /> |-<br /> | 1 || DoesUartExistForTest<br /> |-<br /> | 2 || [[#SetUartBaudrate]]<br /> |-<br /> | 3 || SetUartBaudrateForTest<br /> |-<br /> | 4 || [[#IsSomethingUartValid]]<br /> |-<br /> | 5 || IsSomethingUartValidForTest<br /> |-<br /> | 6 || [[#GetSession]]<br /> |-<br /> | 7 || IsSomethingUartValid2<br /> |-<br /> | 8 || IsSomethingUartValid2ForTest<br /> |}<br /> <br /> == DoesUartExist ==<br /> Takes a u32 [[#UartPort]] and returns boolean success value<br /> <br /> == SetUartBaudrate ==<br /> Takes a u32 [[#UartPort]] and a u32 baudrate and returns boolean success value<br /> <br /> == IsSomethingUartValid ==<br /> Takes a u32 [[#UartPort]] and returns boolean success value<br /> <br /> == GetSession ==<br /> Takes a u32 [[#UartPort]] and returns an [[#IPortSession]]<br /> <br /> == UartPort ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port || Usage<br /> |-<br /> | 1 || UART-D || Bluetooth<br /> |-<br /> | 2 || UART-B || Joy-Con(R)<br /> |-<br /> | 3 || UART-C || Joy-Con(L)<br /> |}<br /> <br /> == IPortSession ==<br /> This is &quot;nn::uart::IPortSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |-<br /> | 1 || OpenSessionForTest<br /> |-<br /> | 2 ||<br /> |-<br /> | 3 ||<br /> |-<br /> | 4 ||<br /> |-<br /> | 5 ||<br /> |-<br /> | 6 ||<br /> |-<br /> | 7 ||<br /> |}<br /> <br /> === Port Mapping ===<br /> OpenSession translates user IDs to to the [[#UartPort]] index.<br /> <br /> OpenSessionForTest takes the port index verbatim.<br /> <br /> = pwm =<br /> This is &quot;nn::pwm::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |}<br /> <br /> == Known Channels ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Interface || Usage || Used by<br /> |-<br /> | 1 || PWM Channel 1 || Fan || [[PTM services]]<br /> |-<br /> | 2 || PWM Channel 0 || Backlight || [[Backlight services]], [[NV services]]<br /> |-<br /> | 3 || PMC Blinker || ||<br /> |}<br /> <br /> == IChannelSession ==<br /> This is &quot;nn::pwm::IChannelSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPeriod<br /> |-<br /> | 1 || GetPeriod<br /> |-<br /> | 2 || SetDuty<br /> |-<br /> | 3 || GetDuty<br /> |-<br /> | 4 || SetEnabled<br /> |-<br /> | 5 || GetEnabled<br /> |}<br /> <br /> = pinmux =<br /> This is &quot;nn::pinmux::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::pinmux::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPinAssignment<br /> |-<br /> | 1 || GetPinAssignment<br /> |-<br /> | 2 || SetPinAssignmentForHardwareTest<br /> |}<br /> <br /> = sasbus =<br /> This is &quot;nn::sasbus::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::sasbus::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || <br /> |-<br /> | 1 || <br /> |-<br /> | 2 || <br /> |-<br /> | 3 || <br /> |}<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Bus_services&diff=5127 2018-09-30T03:27:08Z

<p>Shinyquagsire23: /* uart */</p> <hr /> <div>= gpio =<br /> This is &quot;nn::gpio::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession]]<br /> |-<br /> | 2 || [[#OpenSessionForTest]]<br /> |-<br /> | 3 || IsWakeEventActive <br /> |-<br /> | 4 || GetWakeEventActiveFlagSet<br /> |-<br /> | 5 || SetWakeEventActiveFlagSetForDebug<br /> |-<br /> | 6 || SetWakePinDebugMode<br /> |-<br /> | 7 || [5.0.0+] [[#OpenSession2]]<br /> |-<br /> | 8 || [5.0.0+] IsWakeEventActive2<br /> |-<br /> | 9 || [5.0.0+] SetWakeEventActiveFlagSetForDebug2<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! GpioPadName || GpioPadDescriptor || Tegra (port, pin) || Usage || Direction || Used by<br /> |-<br /> | 0x01 || 0xCC || Z, 4 || Audio Codec (ALC5639) Power || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]], [[Fatal services]])<br /> |-<br /> | 0x02 || 0x24 || E, 4 || SDCard Power || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x03 || 0x3C || H, 4 || BT_RST_PH4 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Bluetooth Driver services]])<br /> |-<br /> | 0x04 || 0xDA || BB, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x05 || 0xDB || BB, 3 || GcAsic Power || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x06 || 0xDC || BB, 4 || Headphone Detect || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]])<br /> |-<br /> | 0x07 || 0x25 || E, 5 || || Out || Icosa, Copper, Hoag<br /> |-<br /> | 0x08 || 0x90 || S, 0 || DebugPadDriver || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x09 || 0x91 || S, 1 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0A || 0x96 || S, 6 || Charger IC (BQ24193) Charge Enable || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x0B || 0x97 || S, 7 || CPU fan sampling || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0C || 0x26 || E, 6 || Joy-Con(L) IsAttached (insertion, Joy-Con pin 5/console TX, pulled low on insert?) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x0D || 0x05 || A, 5 || Fan enable (normal) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x0E || 0x78 || P, 0 || SDMMC3_CLK_PP0? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0F || 0x93 || S, 3 || GcAsic IRQ || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x10 || 0x7D || P, 5 || SDMMC3_DAT0_PP5? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x11 || 0x7C || P, 4 || SDMMC3_DAT1_PP4? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x12 || 0x7B || P, 3 || SDMMC3_DAT2_PP3? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x13 || 0x7A || P, 2 || SDMMC3_DAT3_PP2? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x14 || 0xBC || X, 4 || Temperature Sensor || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x15 || 0xAE || V, 6 || || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]])<br /> |-<br /> | 0x16 || 0xBA || X, 2 || MOTION_INT_PX2? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x17 || 0xB9 || X, 1 || TouchPanel IRQ (TOUCH_INT_PX1) (unused - polled instead) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x18 || 0xBD || X, 5 || Power Button (BUTTON_POWER_ON_PX5) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x19 || 0xBE || X, 6 || Volume Up (BUTTON_VOL_UP_PX6) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Boot2]], [[Audio services]])<br /> |-<br /> | 0x1A || 0xBF || X, 7 || Volume Down (BUTTON_VOL_DOWN_PX7) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Boot2]], [[Audio services]])<br /> |-<br /> | 0x1B || 0xC0 || Y, 0 || Fuel Gauge IC (MAX17050) IRQ || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x1C || 0xC1 || Y, 1 || BUTTON_HOME_PY1 || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x1D || 0xA9 || V, 1 || Backlight Enable (LCD_BL_EN_PV1) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]], [[Backlight services]])<br /> |-<br /> | 0x1E || 0xAA || V, 2 || Backlight Reset (LCD_RST_PV2) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x1F || 0x55 || K, 5 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x20 || 0xAD || V, 5 || USB-PD controller (RHOM BM92T30MWV) related || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x21 || 0xC8 || Z, 0 || Charger IC (BQ24193) IRQ || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x22 || 0xCA || Z, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x23 || 0xCB || Z, 3 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x24 || 0x4F || J, 7 || TouchPanel reset || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x25 || 0x50 || K, 0 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x26 || 0x51 || K, 1 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x27 || 0x52 || K, 2 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x28 || 0x54 || K, 4 || USB-PD controller (RHOM BM92T30MWV) IRQ || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x29 || 0x56 || K, 6 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x2A || 0x57 || K, 7 || || In || Icosa, Copper, Hoag<br /> |-<br /> | 0x2B || 0x53 || K, 3 || Joy-Con(R) NwcpDriver1.NwcpCharger || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x2C || 0xE3 || CC, 3 || Joy-Con(L) NwcpDriver0.NwcpCharger || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x2D || 0x38 || H, 0 || WIFI_EN_PH0? || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x2E || 0x39 || H, 1 || WIFI_RST_PH1 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Wlan services]], [[PCIe services]])<br /> |-<br /> | 0x2F || 0x3B || H, 3 || AP_WAKE_BT_PH3 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Bluetooth Driver services]])<br /> |-<br /> | 0x30 || 0x3D || H, 5 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x31 || 0x3F || H, 7 || || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x32 || 0x40 || I, 0 || Backlight +5V || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x33 || 0x41 || I, 1 || Backlight -5V || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x34 || 0x3E || H, 6 || Joy-Con(R) IsAttached (insertion, Joy-Con pin 5/console TX, pulled low on insert?) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x35 || 0xE2 || CC, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x36 || 0xE4 || CC, 4 || Fan enable (high power) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x37 || 0x3A || H, 2 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x38 || 0xC9 || Z, 1 || SDCard Card Detect || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x39 || 0x4D || J, 5 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x3A || 0x58 || L, 0 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x3B || 0x3E || H, 6 || Joy-Con(R) NwcpDriver1.GpioMonitorTask0 duplicate? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x3C || 0x26 || E, 6 || Joy-Con(L) NwcpDriver1.GpioMonitorTask0 duplicate? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x3D || -1 || || || ||<br /> |-<br /> | 0x3E || 0x33 || G, 3 || Joy-Con(R) CTS (checked low) || In || None &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x3F || 0x1C || D, 4 || Joy-Con(L) CTS (checked low) || In || None &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x40 || 0xD9 || BB, 1 || || Out || [2.0.0+] Copper<br /> |-<br /> | 0x41 || 0x0C || B, 4 || Lid Closed (unused) || In || [2.0.0+] Copper<br /> |-<br /> | 0x42 || 0x0D || B, 5 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x43 || 0x21 || E, 1 || USB power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x44 || 0x27 || E, 7 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x45 || 0x92 || S, 2 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x46 || 0x95 || S, 5 || USB root port 4 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x47 || 0x98 || T, 0 || USB root port 3 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x48 || 0x10 || C, 0 || HdmiHotplug || Out || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x49 || 0x11 || C, 1 || USB root port 2 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x4A || 0x12 || C, 2 || HdmiHotplug || Out || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x4B || 0x42 || I, 2 || || Out || [2.0.0+] Copper<br /> |-<br /> | 0x4C || 0xE6 || CC, 6 || || In || [2.0.0+] Copper<br /> |-<br /> | [2.0.0+] 0x4D || 0xAC || V, 4 || || Out || [2.0.0+] Copper<br /> |-<br /> | [2.0.0+] 0x4E || 0xE1 || CC, 1 || HdmiHotplug (HDMI_INT_DP_HPD_PCC1) || In || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | [5.0.0+] 0x4F || 0x56 || K, 6 || || || None<br /> |-<br /> | - || 0x32 || G, 2 || Joy-Con(R) RTS || || None<br /> |-<br /> | - || 0x1B || D, 3 || Joy-Con(L) RTS || || None<br /> |}<br /> <br /> == GpioPadDescriptor ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bits || Description<br /> |-<br /> | 7-5 || Controller index<br /> |-<br /> | 4-3 || Port index<br /> |-<br /> | 2-0 || Pin number<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes a raw [[#GpioPadDescriptor]] and returns a [[#IPadSession]] session for it.<br /> <br /> == OpenSession ==<br /> Same thing as [[#OpenSessionForDev]] except it takes a '''GpioPadName''' which is then converted to a [[#GpioPadDescriptor]]. Returns an [[#IPadSession]] session.<br /> <br /> == OpenSessionForTest ==<br /> Same as [[#OpenSession]] but panics on failure.<br /> <br /> == OpenSession2 ==<br /> Same as [[#OpenSession]] but takes a '''DeviceCode''' instead of a '''GpioPadName'''.<br /> <br /> == IPadSession ==<br /> This is &quot;nn::gpio::IPadSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetDirection<br /> |-<br /> | 1 || GetDirection<br /> |-<br /> | 2 || SetInterruptMode<br /> |-<br /> | 3 || GetInterruptMode<br /> |-<br /> | 4 || SetInterruptEnable<br /> |-<br /> | 5 || GetInterruptEnable<br /> |-<br /> | 6 || GetInterruptStatus<br /> |-<br /> | 7 || ClearInterruptStatus<br /> |-<br /> | 8 || SetValue<br /> |-<br /> | 9 || GetValue<br /> |-<br /> | 10 || BindInterrupt<br /> |-<br /> | 11 || UnbindInterrupt<br /> |-<br /> | 12 || SetDebounceEnabled<br /> |-<br /> | 13 || GetDebounceEnabled<br /> |-<br /> | 14 || SetDebounceTime<br /> |-<br /> | 15 || GetDebounceTime<br /> |-<br /> | 16 || [4.0.0+] SetValueForSleepState<br /> |}<br /> <br /> = i2c, i2c:pcv =<br /> This is &quot;nn::i2c::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev_2|OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession_2|OpenSession]]<br /> |-<br /> | 2 || [[#HasDevice|HasDevice]]<br /> |-<br /> | 3 || [[#HasDeviceForDev|HasDeviceForDev]]<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! I2cDevice || Port:Addr || Is10bit || Speed || Max Retries || Retry Delay || Usage || Used by<br /> |-<br /> | 0 || 0:52 || N || 100000 || 0 || 0 || DebugPadDriver || [[HID services]]<br /> |-<br /> | 1 || 2:49 || N || 400000 || 0 || 0 || TouchPanel || [[HID services]]<br /> |-<br /> | 2 || 0:4c || N || 100000 || 0 || 0 || Temperature Sensor (TMP451 or NCT72) || [[PTM services]]<br /> |-<br /> | 3 || 0:4c || N || 100000 || 0 || 0 || Temperature Sensor (TMP451 or NCT72) (duplicate) ||<br /> |-<br /> | 4 || 0:1c || N || 100000 || 0 || 0 || Audio Codec (ALC5639) || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 5 || 4:68 || N || 400000 || 3 || 5000000 || PMIC RTC (max77620_rtc0), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 6 || 4:3c || N || 400000 || 3 || 5000000 || PMIC (MAX77620), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 7 || 4:1b || N || 400000 || 3 || 5000000 || Sub-PMIC for CPU (max77621_cpu) || [[PCV services]]<br /> |-<br /> | 8 || 4:1c || N || 400000 || 3 || 5000000 || Sub-PMIC for GPU (max77621_gpu) || [[PCV services]]<br /> |-<br /> | 9 || 0:6b || N || 100000 || 3 || 5000000 || Charger IC (BQ24193) || [[PTM services]]<br /> |-<br /> | 10 || 0:36 || N || 100000 || 3 || 5000000 || Fuel Gauge IC (MAX17050) || [[PCV services]], [[PTM services]]<br /> |-<br /> | 11 || 0:18 || N || 100000 || 3 || 5000000 || USB-PD controller (RHOM BM92T30MWV) || [[USB services]]<br /> |-<br /> | 12 || 1:40 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VDD15V0-HB) || Factory testing<br /> |-<br /> | 13 || 1:41 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-CPU-DS) || Factory testing<br /> |-<br /> | 14 || 1:44 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-GPU-DS) || Factory testing<br /> |-<br /> | 15 || 1:45 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-DDR-DS) || Factory testing<br /> |-<br /> | 16 || 1:46 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-AP) || Factory testing<br /> |-<br /> | 17 || 1:47 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-BL-DS) || Factory testing<br /> |-<br /> | 18 || 1:29 || N || 400000 || 3 || 5000000 || Ambient Light Sensor (BH1730) || [[Backlight services]]<br /> |-<br /> | 19 || 1:48 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_CORE) || Factory testing<br /> |-<br /> | 20 || 1:49 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_Soc-1V8) || Factory testing<br /> |-<br /> | 21 || 1:4a || N || 400000 || 3 || 5000000 || Power Monitor (ina226_LPDDR4-1V8) || Factory testing<br /> |-<br /> | 22 || 1:4b || N || 400000 || 3 || 5000000 || Power Monitor (ina226_REG1V32) || Factory testing<br /> |-<br /> | 23 || 1:4d || N || 400000 || 3 || 5000000 || Power Monitor (ina226_VDD3V3-SYS) || Factory testing<br /> |-<br /> | 24 || 3:50 || N || 100000 || 0 || 0 || HDMI DDC || [[NV services]]<br /> |-<br /> | 25 || 3:54 || N || 100000 || 0 || 0 || HDMI SCDC || [[NV services]]<br /> |-<br /> | 26 || 3:3a || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes an u32 '''port''', an u16 '''addr''', an '''AddressingMode''' (1 for 10-bit, 0 otherwise) and a '''SpeedMode''' (400000 or 100000). Returns a [[#II2cSession]] session.<br /> <br /> == OpenSession ==<br /> Takes an '''I2cDevice''' and returns a [[#II2cSession]] session for it.<br /> <br /> == HasDevice ==<br /> Takes an '''I2cDevice''' and returns true if the device exists or false otherwise.<br /> <br /> == HasDeviceForDev ==<br /> Takes an u32 '''port''', an u16 '''addr''', an '''AddressingMode''' (1 for 10-bit, 0 otherwise) and a '''SpeedMode''' (400000 or 100000). Returns true if the device exists or false otherwise.<br /> <br /> == II2cSession ==<br /> This is &quot;nn::i2c::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Send<br /> |-<br /> | 1 || Receive<br /> |-<br /> | 2 || ExecuteCommandList<br /> |-<br /> | 10 || SendAuto<br /> |-<br /> | 11 || ReceiveAuto<br /> |-<br /> | 12 || ExecuteCommandListAuto<br /> |}<br /> <br /> = uart =<br /> This is &quot;nn::uart::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#DoesUartExist]]<br /> |-<br /> | 1 || DoesUartExistForTest<br /> |-<br /> | 2 || [[#SetUartBaudrate]]<br /> |-<br /> | 3 || SetUartBaudrateForTest<br /> |-<br /> | 4 || [[#IsSomethingUartValid]]<br /> |-<br /> | 5 || IsSomethingUartValidForTest<br /> |-<br /> | 6 || [[#GetSession]]<br /> |-<br /> | 7 || IsSomethingUartValid2<br /> |-<br /> | 8 || IsSomethingUartValid2ForTest<br /> |}<br /> <br /> == DoesUartExist ==<br /> Takes a u32 [[#UartPort]] and returns boolean success value<br /> <br /> == SetUartBaudrate ==<br /> Takes a u32 [[#UartPort]] and a u32 baudrate and returns boolean success value<br /> <br /> == IsSomethingUartValid ==<br /> Takes a u32 [[#UartPort]] and returns boolean success value<br /> <br /> == GetSession ==<br /> Takes a u32 [[#UartPort]] and returns an [[#IPortSession]]<br /> <br /> == UartPort ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port || Usage<br /> |-<br /> | 1 || UART-D || Bluetooth<br /> |-<br /> | 2 || UART-B || Joy-Con(R)<br /> |-<br /> | 3 || UART-C || Joy-Con(L)<br /> |}<br /> <br /> == IPortSession ==<br /> This is &quot;nn::uart::IPortSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |-<br /> | 1 || OpenSessionForTest<br /> |-<br /> | 2 ||<br /> |-<br /> | 3 ||<br /> |-<br /> | 4 ||<br /> |-<br /> | 5 ||<br /> |-<br /> | 6 ||<br /> |-<br /> | 7 ||<br /> |}<br /> <br /> === Port Mapping ===<br /> OpenSession translates user IDs to to the [[#UartPort]] index.<br /> <br /> OpenSessionForTest takes the port index verbatim.<br /> <br /> = pwm =<br /> This is &quot;nn::pwm::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |}<br /> <br /> == Known Channels ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Interface || Usage || Used by<br /> |-<br /> | 1 || PWM Channel 1 || Fan || [[PTM services]]<br /> |-<br /> | 2 || PWM Channel 0 || Backlight || [[Backlight services]], [[NV services]]<br /> |-<br /> | 3 || PMC Blinker || ||<br /> |}<br /> <br /> == IChannelSession ==<br /> This is &quot;nn::pwm::IChannelSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPeriod<br /> |-<br /> | 1 || GetPeriod<br /> |-<br /> | 2 || SetDuty<br /> |-<br /> | 3 || GetDuty<br /> |-<br /> | 4 || SetEnabled<br /> |-<br /> | 5 || GetEnabled<br /> |}<br /> <br /> = pinmux =<br /> This is &quot;nn::pinmux::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::pinmux::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPinAssignment<br /> |-<br /> | 1 || GetPinAssignment<br /> |-<br /> | 2 || SetPinAssignmentForHardwareTest<br /> |}<br /> <br /> = sasbus =<br /> This is &quot;nn::sasbus::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::sasbus::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || <br /> |-<br /> | 1 || <br /> |-<br /> | 2 || <br /> |-<br /> | 3 || <br /> |}<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Bus_services&diff=5126 2018-09-30T03:26:13Z

<p>Shinyquagsire23: </p> <hr /> <div>= gpio =<br /> This is &quot;nn::gpio::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession]]<br /> |-<br /> | 2 || [[#OpenSessionForTest]]<br /> |-<br /> | 3 || IsWakeEventActive <br /> |-<br /> | 4 || GetWakeEventActiveFlagSet<br /> |-<br /> | 5 || SetWakeEventActiveFlagSetForDebug<br /> |-<br /> | 6 || SetWakePinDebugMode<br /> |-<br /> | 7 || [5.0.0+] [[#OpenSession2]]<br /> |-<br /> | 8 || [5.0.0+] IsWakeEventActive2<br /> |-<br /> | 9 || [5.0.0+] SetWakeEventActiveFlagSetForDebug2<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! GpioPadName || GpioPadDescriptor || Tegra (port, pin) || Usage || Direction || Used by<br /> |-<br /> | 0x01 || 0xCC || Z, 4 || Audio Codec (ALC5639) Power || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]], [[Fatal services]])<br /> |-<br /> | 0x02 || 0x24 || E, 4 || SDCard Power || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x03 || 0x3C || H, 4 || BT_RST_PH4 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Bluetooth Driver services]])<br /> |-<br /> | 0x04 || 0xDA || BB, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x05 || 0xDB || BB, 3 || GcAsic Power || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x06 || 0xDC || BB, 4 || Headphone Detect || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]])<br /> |-<br /> | 0x07 || 0x25 || E, 5 || || Out || Icosa, Copper, Hoag<br /> |-<br /> | 0x08 || 0x90 || S, 0 || DebugPadDriver || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x09 || 0x91 || S, 1 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0A || 0x96 || S, 6 || Charger IC (BQ24193) Charge Enable || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x0B || 0x97 || S, 7 || CPU fan sampling || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0C || 0x26 || E, 6 || Joy-Con(L) IsAttached (insertion, Joy-Con pin 5/console TX, pulled low on insert?) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x0D || 0x05 || A, 5 || Fan enable (normal) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x0E || 0x78 || P, 0 || SDMMC3_CLK_PP0? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0F || 0x93 || S, 3 || GcAsic IRQ || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x10 || 0x7D || P, 5 || SDMMC3_DAT0_PP5? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x11 || 0x7C || P, 4 || SDMMC3_DAT1_PP4? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x12 || 0x7B || P, 3 || SDMMC3_DAT2_PP3? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x13 || 0x7A || P, 2 || SDMMC3_DAT3_PP2? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x14 || 0xBC || X, 4 || Temperature Sensor || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x15 || 0xAE || V, 6 || || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]])<br /> |-<br /> | 0x16 || 0xBA || X, 2 || MOTION_INT_PX2? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x17 || 0xB9 || X, 1 || TouchPanel IRQ (TOUCH_INT_PX1) (unused - polled instead) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x18 || 0xBD || X, 5 || Power Button (BUTTON_POWER_ON_PX5) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x19 || 0xBE || X, 6 || Volume Up (BUTTON_VOL_UP_PX6) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Boot2]], [[Audio services]])<br /> |-<br /> | 0x1A || 0xBF || X, 7 || Volume Down (BUTTON_VOL_DOWN_PX7) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Boot2]], [[Audio services]])<br /> |-<br /> | 0x1B || 0xC0 || Y, 0 || Fuel Gauge IC (MAX17050) IRQ || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x1C || 0xC1 || Y, 1 || BUTTON_HOME_PY1 || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x1D || 0xA9 || V, 1 || Backlight Enable (LCD_BL_EN_PV1) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]], [[Backlight services]])<br /> |-<br /> | 0x1E || 0xAA || V, 2 || Backlight Reset (LCD_RST_PV2) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x1F || 0x55 || K, 5 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x20 || 0xAD || V, 5 || USB-PD controller (RHOM BM92T30MWV) related || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x21 || 0xC8 || Z, 0 || Charger IC (BQ24193) IRQ || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x22 || 0xCA || Z, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x23 || 0xCB || Z, 3 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x24 || 0x4F || J, 7 || TouchPanel reset || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x25 || 0x50 || K, 0 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x26 || 0x51 || K, 1 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x27 || 0x52 || K, 2 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x28 || 0x54 || K, 4 || USB-PD controller (RHOM BM92T30MWV) IRQ || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x29 || 0x56 || K, 6 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x2A || 0x57 || K, 7 || || In || Icosa, Copper, Hoag<br /> |-<br /> | 0x2B || 0x53 || K, 3 || Joy-Con(R) NwcpDriver1.NwcpCharger || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x2C || 0xE3 || CC, 3 || Joy-Con(L) NwcpDriver0.NwcpCharger || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x2D || 0x38 || H, 0 || WIFI_EN_PH0? || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x2E || 0x39 || H, 1 || WIFI_RST_PH1 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Wlan services]], [[PCIe services]])<br /> |-<br /> | 0x2F || 0x3B || H, 3 || AP_WAKE_BT_PH3 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Bluetooth Driver services]])<br /> |-<br /> | 0x30 || 0x3D || H, 5 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x31 || 0x3F || H, 7 || || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x32 || 0x40 || I, 0 || Backlight +5V || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x33 || 0x41 || I, 1 || Backlight -5V || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x34 || 0x3E || H, 6 || Joy-Con(R) IsAttached (insertion, Joy-Con pin 5/console TX, pulled low on insert?) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x35 || 0xE2 || CC, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x36 || 0xE4 || CC, 4 || Fan enable (high power) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x37 || 0x3A || H, 2 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x38 || 0xC9 || Z, 1 || SDCard Card Detect || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x39 || 0x4D || J, 5 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x3A || 0x58 || L, 0 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x3B || 0x3E || H, 6 || Joy-Con(R) NwcpDriver1.GpioMonitorTask0 duplicate? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x3C || 0x26 || E, 6 || Joy-Con(L) NwcpDriver1.GpioMonitorTask0 duplicate? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x3D || -1 || || || ||<br /> |-<br /> | 0x3E || 0x33 || G, 3 || Joy-Con(R) CTS (checked low) || In || None &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x3F || 0x1C || D, 4 || Joy-Con(L) CTS (checked low) || In || None &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x40 || 0xD9 || BB, 1 || || Out || [2.0.0+] Copper<br /> |-<br /> | 0x41 || 0x0C || B, 4 || Lid Closed (unused) || In || [2.0.0+] Copper<br /> |-<br /> | 0x42 || 0x0D || B, 5 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x43 || 0x21 || E, 1 || USB power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x44 || 0x27 || E, 7 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x45 || 0x92 || S, 2 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x46 || 0x95 || S, 5 || USB root port 4 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x47 || 0x98 || T, 0 || USB root port 3 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x48 || 0x10 || C, 0 || HdmiHotplug || Out || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x49 || 0x11 || C, 1 || USB root port 2 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x4A || 0x12 || C, 2 || HdmiHotplug || Out || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x4B || 0x42 || I, 2 || || Out || [2.0.0+] Copper<br /> |-<br /> | 0x4C || 0xE6 || CC, 6 || || In || [2.0.0+] Copper<br /> |-<br /> | [2.0.0+] 0x4D || 0xAC || V, 4 || || Out || [2.0.0+] Copper<br /> |-<br /> | [2.0.0+] 0x4E || 0xE1 || CC, 1 || HdmiHotplug (HDMI_INT_DP_HPD_PCC1) || In || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | [5.0.0+] 0x4F || 0x56 || K, 6 || || || None<br /> |-<br /> | - || 0x32 || G, 2 || Joy-Con(R) RTS || || None<br /> |-<br /> | - || 0x1B || D, 3 || Joy-Con(L) RTS || || None<br /> |}<br /> <br /> == GpioPadDescriptor ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bits || Description<br /> |-<br /> | 7-5 || Controller index<br /> |-<br /> | 4-3 || Port index<br /> |-<br /> | 2-0 || Pin number<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes a raw [[#GpioPadDescriptor]] and returns a [[#IPadSession]] session for it.<br /> <br /> == OpenSession ==<br /> Same thing as [[#OpenSessionForDev]] except it takes a '''GpioPadName''' which is then converted to a [[#GpioPadDescriptor]]. Returns an [[#IPadSession]] session.<br /> <br /> == OpenSessionForTest ==<br /> Same as [[#OpenSession]] but panics on failure.<br /> <br /> == OpenSession2 ==<br /> Same as [[#OpenSession]] but takes a '''DeviceCode''' instead of a '''GpioPadName'''.<br /> <br /> == IPadSession ==<br /> This is &quot;nn::gpio::IPadSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetDirection<br /> |-<br /> | 1 || GetDirection<br /> |-<br /> | 2 || SetInterruptMode<br /> |-<br /> | 3 || GetInterruptMode<br /> |-<br /> | 4 || SetInterruptEnable<br /> |-<br /> | 5 || GetInterruptEnable<br /> |-<br /> | 6 || GetInterruptStatus<br /> |-<br /> | 7 || ClearInterruptStatus<br /> |-<br /> | 8 || SetValue<br /> |-<br /> | 9 || GetValue<br /> |-<br /> | 10 || BindInterrupt<br /> |-<br /> | 11 || UnbindInterrupt<br /> |-<br /> | 12 || SetDebounceEnabled<br /> |-<br /> | 13 || GetDebounceEnabled<br /> |-<br /> | 14 || SetDebounceTime<br /> |-<br /> | 15 || GetDebounceTime<br /> |-<br /> | 16 || [4.0.0+] SetValueForSleepState<br /> |}<br /> <br /> = i2c, i2c:pcv =<br /> This is &quot;nn::i2c::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev_2|OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession_2|OpenSession]]<br /> |-<br /> | 2 || [[#HasDevice|HasDevice]]<br /> |-<br /> | 3 || [[#HasDeviceForDev|HasDeviceForDev]]<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! I2cDevice || Port:Addr || Is10bit || Speed || Max Retries || Retry Delay || Usage || Used by<br /> |-<br /> | 0 || 0:52 || N || 100000 || 0 || 0 || DebugPadDriver || [[HID services]]<br /> |-<br /> | 1 || 2:49 || N || 400000 || 0 || 0 || TouchPanel || [[HID services]]<br /> |-<br /> | 2 || 0:4c || N || 100000 || 0 || 0 || Temperature Sensor (TMP451 or NCT72) || [[PTM services]]<br /> |-<br /> | 3 || 0:4c || N || 100000 || 0 || 0 || Temperature Sensor (TMP451 or NCT72) (duplicate) ||<br /> |-<br /> | 4 || 0:1c || N || 100000 || 0 || 0 || Audio Codec (ALC5639) || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 5 || 4:68 || N || 400000 || 3 || 5000000 || PMIC RTC (max77620_rtc0), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 6 || 4:3c || N || 400000 || 3 || 5000000 || PMIC (MAX77620), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 7 || 4:1b || N || 400000 || 3 || 5000000 || Sub-PMIC for CPU (max77621_cpu) || [[PCV services]]<br /> |-<br /> | 8 || 4:1c || N || 400000 || 3 || 5000000 || Sub-PMIC for GPU (max77621_gpu) || [[PCV services]]<br /> |-<br /> | 9 || 0:6b || N || 100000 || 3 || 5000000 || Charger IC (BQ24193) || [[PTM services]]<br /> |-<br /> | 10 || 0:36 || N || 100000 || 3 || 5000000 || Fuel Gauge IC (MAX17050) || [[PCV services]], [[PTM services]]<br /> |-<br /> | 11 || 0:18 || N || 100000 || 3 || 5000000 || USB-PD controller (RHOM BM92T30MWV) || [[USB services]]<br /> |-<br /> | 12 || 1:40 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VDD15V0-HB) || Factory testing<br /> |-<br /> | 13 || 1:41 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-CPU-DS) || Factory testing<br /> |-<br /> | 14 || 1:44 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-GPU-DS) || Factory testing<br /> |-<br /> | 15 || 1:45 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-DDR-DS) || Factory testing<br /> |-<br /> | 16 || 1:46 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-AP) || Factory testing<br /> |-<br /> | 17 || 1:47 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-BL-DS) || Factory testing<br /> |-<br /> | 18 || 1:29 || N || 400000 || 3 || 5000000 || Ambient Light Sensor (BH1730) || [[Backlight services]]<br /> |-<br /> | 19 || 1:48 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_CORE) || Factory testing<br /> |-<br /> | 20 || 1:49 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_Soc-1V8) || Factory testing<br /> |-<br /> | 21 || 1:4a || N || 400000 || 3 || 5000000 || Power Monitor (ina226_LPDDR4-1V8) || Factory testing<br /> |-<br /> | 22 || 1:4b || N || 400000 || 3 || 5000000 || Power Monitor (ina226_REG1V32) || Factory testing<br /> |-<br /> | 23 || 1:4d || N || 400000 || 3 || 5000000 || Power Monitor (ina226_VDD3V3-SYS) || Factory testing<br /> |-<br /> | 24 || 3:50 || N || 100000 || 0 || 0 || HDMI DDC || [[NV services]]<br /> |-<br /> | 25 || 3:54 || N || 100000 || 0 || 0 || HDMI SCDC || [[NV services]]<br /> |-<br /> | 26 || 3:3a || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes an u32 '''port''', an u16 '''addr''', an '''AddressingMode''' (1 for 10-bit, 0 otherwise) and a '''SpeedMode''' (400000 or 100000). Returns a [[#II2cSession]] session.<br /> <br /> == OpenSession ==<br /> Takes an '''I2cDevice''' and returns a [[#II2cSession]] session for it.<br /> <br /> == HasDevice ==<br /> Takes an '''I2cDevice''' and returns true if the device exists or false otherwise.<br /> <br /> == HasDeviceForDev ==<br /> Takes an u32 '''port''', an u16 '''addr''', an '''AddressingMode''' (1 for 10-bit, 0 otherwise) and a '''SpeedMode''' (400000 or 100000). Returns true if the device exists or false otherwise.<br /> <br /> == II2cSession ==<br /> This is &quot;nn::i2c::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Send<br /> |-<br /> | 1 || Receive<br /> |-<br /> | 2 || ExecuteCommandList<br /> |-<br /> | 10 || SendAuto<br /> |-<br /> | 11 || ReceiveAuto<br /> |-<br /> | 12 || ExecuteCommandListAuto<br /> |}<br /> <br /> = uart =<br /> This is &quot;nn::uart::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || DoesUartExist<br /> |-<br /> | 1 || DoesUartExistForTest<br /> |-<br /> | 2 || SetUartBaudrate<br /> |-<br /> | 3 || SetUartBaudrateForTest<br /> |-<br /> | 4 || IsSomethingUartValid<br /> |-<br /> | 5 || IsSomethingUartValidForTest<br /> |-<br /> | 6 || GetSession<br /> |-<br /> | 7 || IsSomethingUartValid2<br /> |-<br /> | 8 || IsSomethingUartValid2ForTest<br /> |}<br /> <br /> == DoesUartExist ==<br /> Takes a u32 [[#UartPort]] and returns boolean success value<br /> <br /> == SetUartBaudrate ==<br /> Takes a u32 [[#UartPort]] and a u32 baudrate and returns boolean success value<br /> <br /> == IsSomethingUartValid ==<br /> Takes a u32 [[#UartPort]] and returns boolean success value<br /> <br /> == GetSession ==<br /> Takes a u32 [[#UartPort]] and returns an [[#IPortSession]]<br /> <br /> <br /> == UartPort ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port || Usage<br /> |-<br /> | 1 || UART-D || Bluetooth<br /> |-<br /> | 2 || UART-B || Joy-Con(R)<br /> |-<br /> | 3 || UART-C || Joy-Con(L)<br /> |}<br /> <br /> == IPortSession ==<br /> This is &quot;nn::uart::IPortSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |-<br /> | 1 || OpenSessionForTest<br /> |-<br /> | 2 ||<br /> |-<br /> | 3 ||<br /> |-<br /> | 4 ||<br /> |-<br /> | 5 ||<br /> |-<br /> | 6 ||<br /> |-<br /> | 7 ||<br /> |}<br /> <br /> === Port Mapping ===<br /> OpenSession translates user IDs to to the [[#UartPort]] index.<br /> <br /> OpenSessionForTest takes the port index verbatim.<br /> <br /> = pwm =<br /> This is &quot;nn::pwm::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |}<br /> <br /> == Known Channels ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Interface || Usage || Used by<br /> |-<br /> | 1 || PWM Channel 1 || Fan || [[PTM services]]<br /> |-<br /> | 2 || PWM Channel 0 || Backlight || [[Backlight services]], [[NV services]]<br /> |-<br /> | 3 || PMC Blinker || ||<br /> |}<br /> <br /> == IChannelSession ==<br /> This is &quot;nn::pwm::IChannelSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPeriod<br /> |-<br /> | 1 || GetPeriod<br /> |-<br /> | 2 || SetDuty<br /> |-<br /> | 3 || GetDuty<br /> |-<br /> | 4 || SetEnabled<br /> |-<br /> | 5 || GetEnabled<br /> |}<br /> <br /> = pinmux =<br /> This is &quot;nn::pinmux::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::pinmux::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPinAssignment<br /> |-<br /> | 1 || GetPinAssignment<br /> |-<br /> | 2 || SetPinAssignmentForHardwareTest<br /> |}<br /> <br /> = sasbus =<br /> This is &quot;nn::sasbus::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::sasbus::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || <br /> |-<br /> | 1 || <br /> |-<br /> | 2 || <br /> |-<br /> | 3 || <br /> |}<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Kernel&diff=5053 2018-09-23T05:18:09Z

<p>Shinyquagsire23: /* KHandleEntry */</p> <hr /> <div>= KAutoObject =<br /> Size: 0x10<br /> <br /> [5.0.0] Size: 0x20<br /> <br /> [6.0.0] Size: 0x30<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u32 || ReferenceCount<br /> |}<br /> <br /> [5.0.0]:<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u32 || ReferenceCount<br /> |-<br /> | 0x10 || KLinkedListNode || Intrusive list, links to other instances of the same class (managed by a KObjectAllocator).<br /> |}<br /> <br /> [6.0.0]:<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u32 || ReferenceCount<br /> |-<br /> | 0x10 || u64 || ?<br /> |-<br /> | 0x18 || ptr || ?<br /> |-<br /> | 0x20 || u64 || ?<br /> |-<br /> | 0x28 || u64 || ?<br /> |}<br /> <br /> = KSynchronizationObject =<br /> Size: 0x28<br /> <br /> [5.0.0] Size: 0x38<br /> <br /> [6.0.0] Size: 0x48<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLinkedList]] || ThreadSyncList<br /> |}<br /> <br /> = KMutex =<br /> Size: 0x8<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || OwnerTag<br /> |}<br /> <br /> = KRecursiveLock =<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KThread]] * || Owner<br /> |-<br /> | 8 || s32 || Count<br /> |}<br /> <br /> <br /> = KLockedList =<br /> Size: 0x28<br /> <br /> [5.0.0]? Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || Count<br /> |-<br /> | 8 || [[#KLinkedListNode]] || List<br /> |-<br /> | 0x18 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x20 || u64 || MaxCount<br /> |}<br /> <br /> [5.0.0]?:<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]] || List<br /> |-<br /> | 0x10 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x18 || u64 || MaxCount<br /> |}<br /> <br /> = KLinkedListNode =<br /> Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]* || Prev<br /> |-<br /> | 8 || [[#KLinkedListNode]]* || Next<br /> |}<br /> <br /> = KLinkedListEntry =<br /> Size: 0x10 + &lt;code&gt;sizeof(T)&lt;/code&gt;<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]] || NodeFor__List<br /> |-<br /> | 0x10 || T || Data<br /> |}<br /> <br /> = KLinkedList =<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || Count <br /> |-<br /> | 8 || [[#KLinkedListNode]] || Bounds (first, last)<br /> |}<br /> <br /> = KThread =<br /> [1.0.0] Size: 0x620<br /> [5.0.0]? Size: 0x6C0<br /> <br /> Inherits from: [[#KSynchronizationObject]], [[#KSchedulerObject0]], [[#KSchedulerObject1]], [[#KSchedulerObject2]]<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KSchedulerObject0 || Inheritance<br /> |-<br /> | 0x48 || KSchedulerObject1 || Inheritance<br /> |-<br /> | 0x58 || KSchedulerObject2 || Inheritance<br /> |-<br /> | 0x70 || KThreadContext || Context<br /> |-<br /> | 0x2F0 || u64 || CoreMask<br /> |-<br /> | 0x2F8 || u64 || CoreMaskOverride<br /> |-<br /> | 0x300 || u64 || ThreadId<br /> |-<br /> | 0x308 || u64 || TotalTimeRunning<br /> |-<br /> | 0x310 || [[#KSynchronizationObject]]* || SignalledObjectPtr<br /> |-<br /> | 0x318 || u64 ||<br /> |-<br /> | 0x320 || u64 || CondVar_CondVarUserAddr<br /> |-<br /> | 0x328 || u64 || Entrypoint<br /> |-<br /> | 0x330 || u64 || CondVar_MutexUserAddr<br /> |-<br /> | 0x338 || [[#KProcess]]* || ProcessPtr<br /> |-<br /> | 0x340 || void* || KernelThreadStack<br /> |-<br /> | 0x348 || u64 ||<br /> |-<br /> | 0x350 || void* || TlsKernelPtr<br /> |-<br /> | 0x358 || void* || TlsPhysicalPtr<br /> |-<br /> | 0x360 || [[#KSynchronizationObject]]*[0x40] || SyncObjects<br /> |-<br /> | 0x560 || [[#KThread]]* || CondVar_NextThreadPtr<br /> |-<br /> | 0x568 || [[#KThread]]* || CondVar_PrevThreadPtr<br /> |-<br /> | 0x570 || [[#KSynchronizationObject]]* || SignalledObjectPtr?<br /> |-<br /> | 0x578 || KLinkedListNode ||<br /> |-<br /> | 0x588 || KLinkedListNode ||<br /> |-<br /> | 0x598 || KLinkedListNode || NodeFor__ThreadList<br /> |-<br /> | 0x5A8 || KLinkedListNode || NodeFor__ThreadsOnSameCore<br /> |-<br /> | 0x5B8 || u64 ||<br /> |-<br /> | 0x5C0 || [[#KThread]]* || CondVar_SelfPtr<br /> |-<br /> | 0x5C8 || u64 ||<br /> |-<br /> | 0x5D0 || u64 ||<br /> |-<br /> | 0x5D8 || u64 ||<br /> |-<br /> | 0x5E0 || u32 || CondVar_WaitThreadHandle<br /> |-<br /> | 0x5E4 || u32 || SchedulingFlags_Default<br /> |-<br /> | 0x5E8 || u32 || WaitSync_RetVal<br /> |-<br /> | 0x5EC || u32 ||<br /> |-<br /> | 0x5F0 || u32 || ActualPriority<br /> |-<br /> | 0x5F4 || u32 ||<br /> |-<br /> | 0x5F8 || u32 ||<br /> |-<br /> | 0x5FC || u32 ||<br /> |-<br /> | 0x600 || u32 || WantedPriority<br /> |-<br /> | 0x604 || u32 || CpuCore<br /> |-<br /> | 0x608 || u8 || State<br /> |-<br /> | 0x609 || u8 || ShallBeTerminated<br /> |-<br /> | 0x60A || u8 ||<br /> |-<br /> | 0x60B || u8 ||<br /> |-<br /> | 0x60C || u8 ||<br /> |-<br /> | 0x60D || u8 ||<br /> |-<br /> | 0x60E || u8 || HasExited<br /> |-<br /> | 0x60F || u8 || HasCpuCoreOverride<br /> |-<br /> | ... || ... || ...<br /> |}<br /> <br /> = KProcess =<br /> [1.0.0] Size: 0x5B0<br /> <br /> [2.0.0] Size: 0x2480<br /> <br /> [3.0.0] Size: 0x2580<br /> <br /> [5.0.0] Size: 0x4600<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KProcessTerminationMessage || Sent to mailbox 0 when self-terminating.<br /> |-<br /> | 0x38 || [[#KMemoryManager]] || MemoryManager<br /> |-<br /> | 0xF0 || u64 || TotalMemUsage<br /> |-<br /> | 0xF8 || [[#KLinkedList]]&lt;[[#KTlsPageManager]]*&gt;&gt; || TlsPagesList<br /> |-<br /> | 0x110 || s32 || DefaultCpuCore<br /> |-<br /> | 0x118 || [[#KDebug]]* || Debug<br /> |-<br /> | 0x120 || [[#KResourceLimit]]* || ResourceLimit<br /> |-<br /> | 0x128 || u32 || State<br /> |-<br /> | 0x130 || [[#KMutex]] || ProcessMutex<br /> |-<br /> | 0x138 || [[#KMutex]] || ThreadingMutex<br /> |-<br /> | 0x140 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadArbiterList<br /> |-<br /> | 0x150 || KLinkedListNode ||<br /> |-<br /> | 0x160 || u64[4] || RandomEntropy<br /> |-<br /> | 0x180 || u8 || HasStateChanged<br /> |-<br /> | 0x181 || u8 || HasInitialized<br /> |-<br /> | 0x182 || u8 || IsSystem<br /> |-<br /> | 0x183 || u8[12+1] || ProcessName<br /> |-<br /> | 0x190 || u16 || NumberOfCreatedThreads<br /> |-<br /> | 0x192 || u16 || ThreadingRelatedInitiallyZero<br /> |-<br /> | 0x194 || u32 || ProcessFlags<br /> |-<br /> | 0x198 || [[#KProcessCapabilities]] || Capabilities<br /> |-<br /> | 0x248 || u64 || TitleId<br /> |-<br /> | 0x250 || u64 || ProcessId<br /> |-<br /> | 0x258 || u64 || CreatedTickstamp<br /> |-<br /> | 0x260 || u64 || Entrypoint<br /> |-<br /> | 0x268 || u64 || CodeMemUsage<br /> |-<br /> | 0x270 || u64 || DynamicMemUsage<br /> |-<br /> | 0x278 || u64 || MaxTotalMemUsage<br /> |-<br /> | 0x280 || u32 || ProcessCategory (0: regular title, 1: kernel built-in)<br /> |-<br /> | 0x288 || [[#KProcessHandleTable]] || HandleTable<br /> |-<br /> | 0x528 || void* || UsermodeExceptionTlsArea<br /> |-<br /> | 0x530 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ExceptionThreadList<br /> |-<br /> | 0x540 || [[#KThread]]* || ExceptionThread<br /> |-<br /> | 0x548 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadList<br /> |-<br /> | 0x558 || bool || HasStarted<br /> |-<br /> | 0x55C || u32 || UnusedZero<br /> |-<br /> | 0x560 || u64[2] || UnusedZeroes<br /> |-<br /> | 0x570 || u64 || TotalTimeRunning<br /> |-<br /> | 0x578 || u64[5] || UnusedZeroes<br /> |-<br /> | 0x5A0 || u64 || UnusedZero<br /> |-<br /> | 0x5A8 || u64 || UnusedZero<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KProcessTerminationMessage || Sent to mailbox 0 when self-terminating.<br /> |-<br /> | 0x38 || [[#KMemoryManager]] || MemoryManager<br /> |-<br /> | 0x100 || u64 || TotalMemUsage<br /> |-<br /> | 0x108 || [[#KLinkedList]]&lt;[[#KTlsPageManager]]*&gt; || TlsPagesList<br /> |-<br /> | 0x120 || s32 || DefaultCpuCore<br /> |-<br /> | 0x128 || [[#KDebug]]* || Debug<br /> |-<br /> | 0x130 || [[#KResourceLimit]]* || ResourceLimit<br /> |-<br /> | 0x138 || u32 || State<br /> |-<br /> | 0x140 || [[#KMutex]] || ProcessMutex<br /> |-<br /> | 0x148 || [[#KMutex]] || ThreadingMutex<br /> |-<br /> | 0x150 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadArbiterList<br /> |-<br /> | 0x160 || KLinkedListNode ||<br /> |-<br /> | 0x170 || u64[4] || RandomEntropy<br /> |-<br /> | 0x190 || u8 || HasStateChanged<br /> |-<br /> | 0x191 || u8 || HasInitialized<br /> |-<br /> | 0x192 || u8 || IsSystem<br /> |-<br /> | 0x193 || u8[12+1] || ProcessName<br /> |-<br /> | 0x1A0 || u16 || NumberOfCreatedThreads<br /> |-<br /> | 0x1A2 || u16 || ThreadingRelatedInitiallyZero<br /> |-<br /> | 0x1A4 || u32 || ProcessFlags<br /> |-<br /> | 0x1A8 || [[#KProcessCapabilities]] || Capabilities<br /> |-<br /> | 0x258 || u64 || TitleId<br /> |-<br /> | 0x260 || u64 || ProcessId<br /> |-<br /> | 0x268 || u64 || CreatedTickstamp<br /> |-<br /> | 0x270 || u64 || Entrypoint<br /> |-<br /> | 0x278 || u64 || CodeMemUsage<br /> |-<br /> | 0x280 || u64 || DynamicMemUsage<br /> |-<br /> | 0x288 || u64 || MaxTotalMemUsage<br /> |-<br /> | 0x290 || u32 || ProcessCategory (0: regular title, 1: kernel built-in)<br /> |-<br /> | 0x298 || u64[5] || Unused [?]<br /> |-<br /> | 0x2C0 || [[#KProcessHandleTable]] || HandleTable<br /> |-<br /> | 0x2380 || void* || UsermodeExceptionTlsArea<br /> |-<br /> | 0x2388 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ExceptionThreadList<br /> |-<br /> | 0x2398 || [[#KThread]]* || ExceptionThread<br /> |-<br /> | 0x23A0 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadList<br /> |-<br /> | 0x23B0 || [[#KLinkedListNode]]&lt;[[#KSharedMemoryRef]] *&gt; || MappedSharedMemoriesList<br /> |-<br /> | 0x23C0 || bool || HasStarted<br /> |-<br /> | 0x23C1 || bool || HasException<br /> |-<br /> | 0x23C4 || u32 || ExceptionEnum0<br /> |-<br /> | 0x23C8 || u64 || ExceptionEnum1<br /> |-<br /> | 0x23D0 || u64 || ExceptionThreadUnkInfo0<br /> |-<br /> | 0x23D8 || u64 || BreakArg0<br /> |-<br /> | 0x23E0 || u64 || BreakArg1<br /> |-<br /> | 0x23E8 || u64 || BreakArg2<br /> |-<br /> | 0x23F0 || u64 || ExceptionThreadUnkInfo1<br /> |-<br /> | 0x23F8 || u32 || UnusedZero<br /> |-<br /> | 0x2400 || u64[8] || UnusedZeroes<br /> |-<br /> | 0x2440 || u64 || UnusedZero<br /> |-<br /> | 0x2448 || u64 || UnusedZero<br /> |-<br /> | 0x2450 || u64[6] || Unused [?]<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KTlsPageManager ==<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || void* || TlsPagePtr<br /> |-<br /> | 8 || [[#KProcess*]] || ProcessPtr<br /> |-<br /> | 0x10 || u32 || UsageCount<br /> |-<br /> | 0x14 || u8[8] || IsSlotFree<br /> |}<br /> <br /> == KProcessCapabilities ==<br /> Size: 0xB0<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u8[16] || SvcAccessMask<br /> |-<br /> | 0x10 || u8[128] || IrqAccessMask<br /> |-<br /> | 0x90 || u64 || AllowedCpuIdBitmask<br /> |-<br /> | 0x98 || u64 || AllowedThreadPrioBitmask<br /> |-<br /> | 0xA0 || u32 || DebuggingFlags<br /> |-<br /> | 0xA4 || u32 || HandleTableSize<br /> |-<br /> | 0xA8 || u32 || KernelReleaseVersion<br /> |-<br /> | 0xAC || u32 || ApplicationType<br /> |}<br /> <br /> == KProcessHandleTable ==<br /> [1.0.0] Size: 0x2A0<br /> <br /> [2.0.0] Size: 0x20C0<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KHandleEntry]]* || TablePtr<br /> |-<br /> | 8 || [[#KHandleEntry]]* || NextFreeEntry<br /> |-<br /> | 0x10 || [[#KHandleEntry]][40] || InternalTable<br /> |-<br /> | 0x290 || u16 || Size<br /> |-<br /> | 0x292 || u16 || MaxUsageAtOnce<br /> |-<br /> | 0x294 || u16 || IdCounter<br /> |-<br /> | 0x296 || u16 || NumActiveSlots<br /> |-<br /> | 0x298 || [[#KSpinLock]] || Lock<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KHandleEntry]]* || TablePtr<br /> |-<br /> | 8 || [[#KHandleEntry]]* || NextFreeEntry<br /> |-<br /> | 0x10 || [[#KHandleEntry]][1024] || InternalTable<br /> |-<br /> | 0x2010 || u16 || Size<br /> |-<br /> | 0x2012 || u16 || MaxUsageAtOnce<br /> |-<br /> | 0x2014 || u16 || IdCounter<br /> |-<br /> | 0x2016 || u16 || NumActiveSlots<br /> |-<br /> | 0x2040 || [[#KSpinLock]] || Lock<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KHandleEntry ===<br /> [1.0.0] Size: 0x10<br /> <br /> [2.0.0] Size: 8<br /> <br /> [6.0.0]? Size: 0x10<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 || HandleId<br /> |-<br /> | 2 || u8 || ObjectType<br /> |-<br /> | 8 || [[#KAutoObject]]* || Object<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 || HandleId<br /> |-<br /> | 2 || u8 || ObjectType<br /> |-<br /> | 4 || u32 || ObjectCompressedPtr<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 6.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 || HandleId<br /> |-<br /> | 2 || u8 || ObjectType<br /> |-<br /> | 4 || u32 || ObjectCompressedPtr<br /> |-<br /> | 8 || ptr || ?<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KSpinLock ===<br /> [1.0.0] Size: 0x1<br /> <br /> [2.0.0] Size: 0x40<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u8 || IsBusy<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 ||<br /> |-<br /> | 0x20 || u16 ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KSharedMemoryRef ==<br /> [2.0.0] Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KSharedMemoryRef]] *&gt; || NodeFor__MappedSharedMemoriesList<br /> |-<br /> | 0x10 || [[#KSharedMemory*]] || SharedMem<br /> |-<br /> | 0x18 || u64 || InitiallyZero<br /> |}<br /> <br /> = KMemoryManager =<br /> [1.0.0] Size: 0xB8<br /> <br /> [2.0.0] Size: 0xC8<br /> <br /> [5.0.0] Size: 0xF8?<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x50 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x60 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0x78 || bool || IsKernel<br /> |-<br /> | 0x79 || bool || IsSystem<br /> |-<br /> | 0x7A || bool || IsAddrSpace36Bit<br /> |-<br /> | 0x7B || bool || HasAslr<br /> |-<br /> | 0x7C || u32 || Is_0x59_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x80 || u32 || Is_0x5A_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x84 || u32 || Is_0x58_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x88 || ||<br /> |-<br /> | 0x90 || ||<br /> |-<br /> | 0x98 || ||<br /> |-<br /> | 0xA0 || u64 || TranslationTableBaseRegister0<br /> |-<br /> | 0xA8 || u64 || TranslationControlRegister<br /> |-<br /> | 0xB0 || u8 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || NewMapRegionBaseAddr<br /> |-<br /> | 0x48 || u64 || NewMapRegionEndAddr<br /> |-<br /> | 0x50 || u64 || TlsIoRegionBaseAddr<br /> |-<br /> | 0x58 || u64 || TlsIoRegionEndAddr<br /> |-<br /> | 0x60 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x68 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x70 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x80 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0x98 || u32 || AddressSpaceWidth (32/36/39)<br /> |-<br /> | 0x9C || bool || IsKernel<br /> |-<br /> | 0x9D || bool || IsSystem<br /> |-<br /> | 0x9E || bool || HasAslr<br /> |-<br /> | 0xA0 || u32 || PoolPartition<br /> |-<br /> | 0xA4 || u32 || Is_0x5A_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xA8 || u32 || Is_0x59_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xAC || u32 || Is_0x58_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xB0 || u64 || TranslationTableBaseRegister0<br /> |-<br /> | 0xB8 || u64 || TranslationControlRegister<br /> |-<br /> | 0xC0 || u32 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 5.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || NewMapRegionBaseAddr<br /> |-<br /> | 0x48 || u64 || NewMapRegionEndAddr<br /> |-<br /> | 0x50 || u64 || TlsIoRegionBaseAddr<br /> |-<br /> | 0x58 || u64 || TlsIoRegionEndAddr<br /> |-<br /> | 0x60 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x68 || || <br /> |-<br /> | 0x70 || || <br /> |-<br /> | 0x78 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x80 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x90 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0xA8 || u32 || ?<br /> |-<br /> | 0xAC || u32 || AddressSpaceWidth (32/36/39)<br /> |-<br /> | 0xB0 || [[#KLinkedList]]? || <br /> |-<br /> | 0xC8 || || <br /> |-<br /> | 0xD0 || || <br /> |-<br /> | 0xD8 || ptr || <br /> |-<br /> | 0xE0 || u64 || TranslationTableBaseRegister0 val<br /> |-<br /> | 0xE8 || u64 || TranslationControlRegister val<br /> |-<br /> | 0xF0 || u32 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPageTable ==<br /> Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || void* || RawPageTablePtr<br /> |-<br /> | 8 || bool ||<br /> |-<br /> | 0xC || u32 || AddrSpaceSizeInGb<br /> |}<br /> <br /> == KMemoryBlockManager ==<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KMemoryBlock]]* || MemoryBlockList<br /> |-<br /> | 8 || u64 || MaxAddr<br /> |-<br /> | 0x10 || u64 || MinAddr<br /> |}<br /> <br /> == KMemoryBlock ==<br /> Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KMemoryBlock]] *&gt; || NodeFor__MemoryBlockList<br /> |-<br /> | 0x10 || ||<br /> |-<br /> | 0x18 || ||<br /> |-<br /> | 0x20 || u64 || BaseAddress<br /> |-<br /> | 0x28 || u64 || NumOfPages<br /> |-<br /> | 0x30 || u32 || State<br /> |-<br /> | 0x34 || u16 || IpcRefCount [?]<br /> |-<br /> | 0x36 || u16 || DeviceMapRefCount<br /> |-<br /> | 0x38 || u8 || Permission<br /> |-<br /> | 0x39 || u8 || UnkAttribute<br /> |-<br /> | 0x3A || u8 || Attribute<br /> |}<br /> <br /> == KMemoryBlockInfo ==<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u64 || BaseAddress<br /> |-<br /> | 8 || u64 || Size<br /> |-<br /> | 0x10 || u32 || State<br /> |-<br /> | 0x14 || u8 || Permission<br /> |-<br /> | 0x15 || u8 || Attribute<br /> |-<br /> | 0x16 || u8 || UnkAttribute<br /> |-<br /> | 0x18 || u16 || IpcRefCount [?]<br /> |-<br /> | 0x1A || u16 || DeviceMapRefCount<br /> |}<br /> <br /> = KTransferMemory =<br /> Size: 0x48<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KProcess]]* || OwnerProcess<br /> |-<br /> | 0x30 || u64 || BaseAddress<br /> |-<br /> | 0x38 || KMutex || Mutex<br /> |-<br /> | 0x40 || int || Permission<br /> |-<br /> | 0x44 || bool || HasInited<br /> |-<br /> | 0x45 || bool || IsMapped<br /> |}<br /> <br /> = KSharedMemory =<br /> [1.0.0] Size: 0x40<br /> <br /> [2.0.0] Size: 0x48<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KProcess]]* || OwnerProcess<br /> |-<br /> | 0x30 || int || LocalPermission<br /> |-<br /> | 0x34 || int || RemotePermission<br /> |-<br /> | 0x38 || bool || HasInited<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KResourceLimit]]* || OwnerResourceLimit<br /> |-<br /> | 0x30 || u64 || OwnerProcessPid<br /> |-<br /> | 0x38 || int || LocalPermission<br /> |-<br /> | 0x3C || int || RemotePermission<br /> |-<br /> | 0x40 || bool || HasInited<br /> |}<br /> <br /> &lt;/div&gt;<br /> <br /> = KJitMemory =<br /> [4.0.0+] Size: 0x58<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x20 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x38 || [[#KProcess]]* || SrcProcessPtr<br /> |-<br /> | 0x40 || u64 || SrcAddr<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x50 || u8 || HasInit<br /> |-<br /> | 0x51 || u8 || HasMappedSlave<br /> |-<br /> | 0x52 || u8 || HasMappedMaster<br /> |}<br /> <br /> = KPort =<br /> Size: 0xA8<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KServerPort]] || ServerSide<br /> |-<br /> | 0x60 || [[#KClientPort]] || ClientSide<br /> |-<br /> | 0x98 || u64 ||<br /> |-<br /> | 0xA0 || bool || HasInited<br /> |-<br /> | 0xA1 || bool || IsLight<br /> |}<br /> <br /> == KServerPort ==<br /> Size: 0x50<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || [[#KLinkedListNode]] || IncomingConnections<br /> |-<br /> | 0x38 || [[#KLinkedListNode]] || IncomingLightConnections<br /> |-<br /> | 0x48 || [[#KPort]]* || Parent<br /> |}<br /> <br /> == KClientPort ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || u32 || NumSessions<br /> |-<br /> | 0x2C || u32 || MaxSessions<br /> |-<br /> | 0x30 || [[#KPort]]* || Parent<br /> |}<br /> <br /> = KSession =<br /> Size: 0xB0<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KServerSession]] || ServerSide<br /> |-<br /> | 0x70 || [[#KClientSession]] || ClientSide<br /> |-<br /> | 0xA8 || bool || HasInited<br /> |}<br /> <br /> == KServerSession ==<br /> Size: 0x60<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KLinkedListNode || NodeFor__IncomingConnections<br /> |-<br /> | 0x38 || [[#KSession*]] || Parent<br /> |-<br /> | 0x40 || KLinkedListNode&lt;[[#KSessionRequest]]*&gt; || RequestList<br /> |-<br /> | 0x50 || [[#KSessionRequest]]* || ActiveRequest<br /> |-<br /> | 0x58 || ||<br /> |}<br /> <br /> === KSessionRequest ===<br /> Size: 0x158<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 0x10 || KLinkedListNode || NodeFor__RequestList<br /> |-<br /> | 0x20 || [[#KBufferDescriptor]][8] || BufferTable<br /> |-<br /> | 0x120 || [[#KBufferDescriptor]]* || ExternalBufferTable<br /> |-<br /> | 0x128 || u8 || NumSendBuffers<br /> |-<br /> | 0x129 || u8 || NumRecvBuffers<br /> |-<br /> | 0x12A || u8 || NumExchBuffers<br /> |-<br /> | 0x130 || [[#KThread]]* || SenderThread<br /> |-<br /> | 0x138 || u64 || InitiallyZero<br /> |-<br /> | 0x140 || [[#KWritableEvent]]* || ForAsyncEvent<br /> |-<br /> | 0x148 || u64 || CustomCmdbufAddr<br /> |-<br /> | 0x150 || u64 || CustomCmdbufSize<br /> |}<br /> <br /> === KBufferDescriptor ===<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || UserVirtAddr<br /> |-<br /> | 8 || u64 || Size<br /> |-<br /> | 0x10 || u64 || <br /> |-<br /> | 0x18 || u64 || BufferMemoryState<br /> |-<br /> |}<br /> <br /> == KClientSession ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KSession]]* || Parent<br /> |-<br /> | 0x18 || bool || HasInited<br /> |-<br /> | 0x20 || [[#KClientPort]]* || ParentPort<br /> |-<br /> | 0x28 || ||<br /> |-<br /> | 0x30 || [[#KProcess]]* || CreatorProcess<br /> |}<br /> <br /> = KLightSession =<br /> Size: 0xA8<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLightSessionServer]] || ServerSide<br /> |-<br /> | 0x68 || [[#KLightSessionClient]] || ClientSide<br /> |-<br /> | 0xA0 || bool || HasInited<br /> |}<br /> <br /> == KLightServerSession ==<br /> Size: 0x58<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KLinkedListNode || NodeFor__IncomingLightConnections<br /> |-<br /> | 0x20 || [[#KLightSession]] || Parent<br /> |-<br /> | 0x28 || u64[6] ||<br /> |}<br /> <br /> == KLightClientSession ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLightSession]]* || Parent<br /> |-<br /> | 0x18 || bool || HasInited<br /> |-<br /> | 0x20 || [[#KClientPort]]* || Port<br /> |-<br /> | 0x28 || ||<br /> |-<br /> | 0x30 || [[#KProcess]]* || CreatorProcess<br /> |}<br /> <br /> = KEvent =<br /> Size: 0x70<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KReadableEvent]] || ReadableEvent<br /> |-<br /> | 0x48 || [[#KWritableEvent]] || WritableEvent<br /> |-<br /> | 0x60 || [[#KProcess]]* || Creator<br /> |-<br /> | 0x68 || bool || HasInited<br /> |}<br /> <br /> == KReadableEvent ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KSynchronizationEvent]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || bool ||<br /> |-<br /> | 0x30 || [[#KEvent]]* || Parent<br /> |}<br /> <br /> == KWritableEvent ==<br /> Size: 0x18<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KEvent]]* || Parent<br /> |}<br /> <br /> == KInterruptEvent ==<br /> [1.0.0] Size: 0x50<br /> <br /> [2.0.0] Size: 0x48<br /> <br /> Inherits from: [[#KReadableEvent]]<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KReadableEvent]] || Inheritance<br /> |-<br /> | 0x38 || [[#KInterruptReceiver]] || Receiver<br /> |-<br /> | 0x48 || u32 || IrqId (or -1)<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KReadableEvent]] || Inheritance<br /> |-<br /> | 0x38 || [[#KInterruptReceiver]]* || Receiver<br /> |-<br /> | 0x40 || u32 || IrqId (or -1)<br /> |-<br /> | 0x44 || bool || IsIrqRegistered<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KInterruptReceiver ===<br /> [1.0.0] Size: 0x10<br /> [2.0.0] Size: 0x20<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || InitiallyZero<br /> |-<br /> | 0x10 || [[#KInterruptEvent]]* || IrqEventPtr<br /> |-<br /> | 0x18 || s32 || IrqId<br /> |}<br /> &lt;/div&gt;<br /> <br /> = KDeviceAddressSpace =<br /> Size: 0x70<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x18 || [[#KSmmuManager]] || Manager<br /> |-<br /> | 0x58 || u64 || BaseAddress<br /> |-<br /> | 0x60 || u64 || Size<br /> |-<br /> | 0x68 || bool || HasInited<br /> |}<br /> <br /> [1.0.0] It was called KAddressSpace.<br /> <br /> == KSmmuManager ==<br /> Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u8[4] || PageTableAsids<br /> |-<br /> | 8 || void*[4] || PageDirectories<br /> |-<br /> | 0x28 || u64 || AttachedDevicesMask<br /> |-<br /> | 0x30 || u32 || RegVal32Bit<br /> |-<br /> | 0x34 || u32 || RegVal32BitEmpty<br /> |-<br /> | 0x38 || u32 || RegVal36Bit<br /> |-<br /> | 0x3C || u32 || RegVal36BitEmpty<br /> |}<br /> <br /> = KResourceLimit =<br /> Size: 0x68<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || u64[5] || CurrentValue<br /> |-<br /> | 0x38 || u64[5] || LimitValue<br /> |-<br /> | 0x60 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> = KPoolManager =<br /> [1.0.0] Size: 0x380<br /> <br /> [2.0.0] Size: 0x450<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolAllocator]][3] || Allocator<br /> |-<br /> | 0x348 || [[#KPoolRefManager]] || RefManager<br /> |-<br /> | 0x368 || u64 || AllocationCounter<br /> |-<br /> | 0x370 || u64 ||<br /> |-<br /> | 0x378 || [[#KMutex]] || Mutex<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolAllocator]] || Allocator0<br /> |-<br /> | 0x220 || [[#KPartitionInfo]]* || PartitionInfo0<br /> |-<br /> | 0x228 || [[#KPoolAllocator]] || Allocator1<br /> |-<br /> | 0x448 || [[#KPartitionInfo]]* || PartitionInfo1<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPoolAllocator ==<br /> [1.0.0] Size: 0x118<br /> <br /> [2.0.0] Size: 0x220<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || void* || MemoryBase<br /> |-<br /> | 8 || u64 || MemorySize<br /> |-<br /> | 0x10 || s32 || NumPools<br /> |-<br /> | 0x18 || [[#KPool]][8] || Pools<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || void* || MemoryBase<br /> |-<br /> | 8 || u64 || MemorySize<br /> |-<br /> | 0x10 || [[#KPool]][8] || Pools<br /> |-<br /> | 0x210 || s32 || NumPools<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KPool ===<br /> [1.0.0] Size: 0x20<br /> <br /> [2.0.0] Size: 0x40<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || KPoolHeader* || FirstFreeChunk<br /> |-<br /> | 8 || u64 ||<br /> |-<br /> | 0x10 || u64 ||<br /> |-<br /> | 0x18 || void* || SingletonTableEntryPtr<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || KPoolHeader* || FirstFreeChunk<br /> |-<br /> | 8 || u64 ||<br /> |-<br /> | 0x10 || u64 ||<br /> |-<br /> | 0x18 || void* || SingletonTableEntryPtr<br /> |-<br /> | 0x20 || [[#KPool]]* || Parent<br /> |-<br /> | 0x30 || u64[2] || DmaProtectionKey<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPoolRefManager ==<br /> [1.0.0] Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolManager]]* || Parent<br /> |-<br /> | 8 || void* || PoolBase<br /> |-<br /> | 0x10 || u64 || MaxPage<br /> |-<br /> | 0x18 || u16* || RefCountTable<br /> |}<br /> <br /> = KObjectAllocator =<br /> Size: 0x50<br /> [5.0.0]? Size: 0x48<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLockedList]] || LockedList <br /> |-<br /> | 0x28 || [[#KSlabHeap]] || SlabHeap <br /> |}<br /> <br /> <br /> = KSlabHeap =<br /> Size: 0x28<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || void* || FreeListHead <br /> |-<br /> | 0x8 || u64 || <br /> |-<br /> | 0x10 || void* || HeapPtr<br /> |-<br /> | 0x18 || u64 || TotalHeapSize<br /> |-<br /> | 0x20 || u64 || SingleObjectSize<br /> |}<br /> <br /> 5.0.0 (?):<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || void* || FreeListHead <br /> |-<br /> | 0x8 || u64 || SingleObjectSize<br /> |-<br /> | 0x10 || void* || HeapPtr<br /> |-<br /> | 0x18 || void* || Start (equal to HeapPtr on init)<br /> |-<br /> | 0x20 || void* || End<br /> |}<br /> <br /> = KPageTableAllocator =<br /> Size: 0x30<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 ||<br /> |-<br /> | 0x10 || u16* || RefCountTable<br /> |-<br /> | 0x10 || void* || BaseAddress<br /> |-<br /> | 0x18 || u64 || Size<br /> |-<br /> | 0x20 || u64 ||<br /> |-<br /> | 0x28 || u64 ||<br /> |}<br /> <br /> = KIrqManager =<br /> [1.0.0] Size: 0x1608<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KIrqEntry]][32] || Core0Irq<br /> |-<br /> | 0x200 || [[#KIrqEntry]][32] || Core1Irq<br /> |-<br /> | 0x400 || [[#KIrqEntry]][32] || Core2Irq<br /> |-<br /> | 0x600 || [[#KIrqEntry]][32] || Core3Irq<br /> |-<br /> | 0x800 || [[#KIrqEntry]][224] || SharedIrqs<br /> |-<br /> | 0x1600 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> == KIrqEntry ==<br /> [1.0.0] Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KIrqReciever*]] || Receiver<br /> |-<br /> | 8 || u8 || State0<br /> |-<br /> | 9 || u8 || State1<br /> |}<br /> <br /> = KDebug =<br /> Size: 0x50<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || [[#KLinkedListNode]]&lt;[[#KDebugEvent]]&gt; || EventList<br /> |-<br /> | 0x38 || u32 || Flags<br /> |-<br /> | 0x40 || [[#KProcess]]* || ProcessPtr<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> == KDebugEvent ==<br /> Size: 0x60<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KDebugEvent]] *&gt; || NodeFor__EventList<br /> |-<br /> | 0x10 || u32 || EventType<br /> |-<br /> | 0x14 || u32 || ThreadId<br /> |-<br /> | 0x18 || u32 || Flags<br /> |-<br /> | 0x1C || u16 ||<br /> |-<br /> | 0x1E || bool ||<br /> |-<br /> | 0x20 || ... || ...<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Kernel&diff=5052 2018-09-23T04:40:58Z

<p>Shinyquagsire23: </p> <hr /> <div>= KAutoObject =<br /> Size: 0x10<br /> <br /> [5.0.0] Size: 0x20<br /> <br /> [6.0.0] Size: 0x30<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u32 || ReferenceCount<br /> |}<br /> <br /> [5.0.0]:<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u32 || ReferenceCount<br /> |-<br /> | 0x10 || KLinkedListNode || Intrusive list, links to other instances of the same class (managed by a KObjectAllocator).<br /> |}<br /> <br /> [6.0.0]:<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u32 || ReferenceCount<br /> |-<br /> | 0x10 || u64 || ?<br /> |-<br /> | 0x18 || ptr || ?<br /> |-<br /> | 0x20 || u64 || ?<br /> |-<br /> | 0x28 || u64 || ?<br /> |}<br /> <br /> = KSynchronizationObject =<br /> Size: 0x28<br /> <br /> [5.0.0] Size: 0x38<br /> <br /> [6.0.0] Size: 0x48<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLinkedList]] || ThreadSyncList<br /> |}<br /> <br /> = KMutex =<br /> Size: 0x8<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || OwnerTag<br /> |}<br /> <br /> = KRecursiveLock =<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KThread]] * || Owner<br /> |-<br /> | 8 || s32 || Count<br /> |}<br /> <br /> <br /> = KLockedList =<br /> Size: 0x28<br /> <br /> [5.0.0]? Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || Count<br /> |-<br /> | 8 || [[#KLinkedListNode]] || List<br /> |-<br /> | 0x18 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x20 || u64 || MaxCount<br /> |}<br /> <br /> [5.0.0]?:<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]] || List<br /> |-<br /> | 0x10 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x18 || u64 || MaxCount<br /> |}<br /> <br /> = KLinkedListNode =<br /> Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]* || Prev<br /> |-<br /> | 8 || [[#KLinkedListNode]]* || Next<br /> |}<br /> <br /> = KLinkedListEntry =<br /> Size: 0x10 + &lt;code&gt;sizeof(T)&lt;/code&gt;<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]] || NodeFor__List<br /> |-<br /> | 0x10 || T || Data<br /> |}<br /> <br /> = KLinkedList =<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || Count <br /> |-<br /> | 8 || [[#KLinkedListNode]] || Bounds (first, last)<br /> |}<br /> <br /> = KThread =<br /> [1.0.0] Size: 0x620<br /> [5.0.0]? Size: 0x6C0<br /> <br /> Inherits from: [[#KSynchronizationObject]], [[#KSchedulerObject0]], [[#KSchedulerObject1]], [[#KSchedulerObject2]]<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KSchedulerObject0 || Inheritance<br /> |-<br /> | 0x48 || KSchedulerObject1 || Inheritance<br /> |-<br /> | 0x58 || KSchedulerObject2 || Inheritance<br /> |-<br /> | 0x70 || KThreadContext || Context<br /> |-<br /> | 0x2F0 || u64 || CoreMask<br /> |-<br /> | 0x2F8 || u64 || CoreMaskOverride<br /> |-<br /> | 0x300 || u64 || ThreadId<br /> |-<br /> | 0x308 || u64 || TotalTimeRunning<br /> |-<br /> | 0x310 || [[#KSynchronizationObject]]* || SignalledObjectPtr<br /> |-<br /> | 0x318 || u64 ||<br /> |-<br /> | 0x320 || u64 || CondVar_CondVarUserAddr<br /> |-<br /> | 0x328 || u64 || Entrypoint<br /> |-<br /> | 0x330 || u64 || CondVar_MutexUserAddr<br /> |-<br /> | 0x338 || [[#KProcess]]* || ProcessPtr<br /> |-<br /> | 0x340 || void* || KernelThreadStack<br /> |-<br /> | 0x348 || u64 ||<br /> |-<br /> | 0x350 || void* || TlsKernelPtr<br /> |-<br /> | 0x358 || void* || TlsPhysicalPtr<br /> |-<br /> | 0x360 || [[#KSynchronizationObject]]*[0x40] || SyncObjects<br /> |-<br /> | 0x560 || [[#KThread]]* || CondVar_NextThreadPtr<br /> |-<br /> | 0x568 || [[#KThread]]* || CondVar_PrevThreadPtr<br /> |-<br /> | 0x570 || [[#KSynchronizationObject]]* || SignalledObjectPtr?<br /> |-<br /> | 0x578 || KLinkedListNode ||<br /> |-<br /> | 0x588 || KLinkedListNode ||<br /> |-<br /> | 0x598 || KLinkedListNode || NodeFor__ThreadList<br /> |-<br /> | 0x5A8 || KLinkedListNode || NodeFor__ThreadsOnSameCore<br /> |-<br /> | 0x5B8 || u64 ||<br /> |-<br /> | 0x5C0 || [[#KThread]]* || CondVar_SelfPtr<br /> |-<br /> | 0x5C8 || u64 ||<br /> |-<br /> | 0x5D0 || u64 ||<br /> |-<br /> | 0x5D8 || u64 ||<br /> |-<br /> | 0x5E0 || u32 || CondVar_WaitThreadHandle<br /> |-<br /> | 0x5E4 || u32 || SchedulingFlags_Default<br /> |-<br /> | 0x5E8 || u32 || WaitSync_RetVal<br /> |-<br /> | 0x5EC || u32 ||<br /> |-<br /> | 0x5F0 || u32 || ActualPriority<br /> |-<br /> | 0x5F4 || u32 ||<br /> |-<br /> | 0x5F8 || u32 ||<br /> |-<br /> | 0x5FC || u32 ||<br /> |-<br /> | 0x600 || u32 || WantedPriority<br /> |-<br /> | 0x604 || u32 || CpuCore<br /> |-<br /> | 0x608 || u8 || State<br /> |-<br /> | 0x609 || u8 || ShallBeTerminated<br /> |-<br /> | 0x60A || u8 ||<br /> |-<br /> | 0x60B || u8 ||<br /> |-<br /> | 0x60C || u8 ||<br /> |-<br /> | 0x60D || u8 ||<br /> |-<br /> | 0x60E || u8 || HasExited<br /> |-<br /> | 0x60F || u8 || HasCpuCoreOverride<br /> |-<br /> | ... || ... || ...<br /> |}<br /> <br /> = KProcess =<br /> [1.0.0] Size: 0x5B0<br /> <br /> [2.0.0] Size: 0x2480<br /> <br /> [3.0.0] Size: 0x2580<br /> <br /> [5.0.0] Size: 0x4600<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KProcessTerminationMessage || Sent to mailbox 0 when self-terminating.<br /> |-<br /> | 0x38 || [[#KMemoryManager]] || MemoryManager<br /> |-<br /> | 0xF0 || u64 || TotalMemUsage<br /> |-<br /> | 0xF8 || [[#KLinkedList]]&lt;[[#KTlsPageManager]]*&gt;&gt; || TlsPagesList<br /> |-<br /> | 0x110 || s32 || DefaultCpuCore<br /> |-<br /> | 0x118 || [[#KDebug]]* || Debug<br /> |-<br /> | 0x120 || [[#KResourceLimit]]* || ResourceLimit<br /> |-<br /> | 0x128 || u32 || State<br /> |-<br /> | 0x130 || [[#KMutex]] || ProcessMutex<br /> |-<br /> | 0x138 || [[#KMutex]] || ThreadingMutex<br /> |-<br /> | 0x140 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadArbiterList<br /> |-<br /> | 0x150 || KLinkedListNode ||<br /> |-<br /> | 0x160 || u64[4] || RandomEntropy<br /> |-<br /> | 0x180 || u8 || HasStateChanged<br /> |-<br /> | 0x181 || u8 || HasInitialized<br /> |-<br /> | 0x182 || u8 || IsSystem<br /> |-<br /> | 0x183 || u8[12+1] || ProcessName<br /> |-<br /> | 0x190 || u16 || NumberOfCreatedThreads<br /> |-<br /> | 0x192 || u16 || ThreadingRelatedInitiallyZero<br /> |-<br /> | 0x194 || u32 || ProcessFlags<br /> |-<br /> | 0x198 || [[#KProcessCapabilities]] || Capabilities<br /> |-<br /> | 0x248 || u64 || TitleId<br /> |-<br /> | 0x250 || u64 || ProcessId<br /> |-<br /> | 0x258 || u64 || CreatedTickstamp<br /> |-<br /> | 0x260 || u64 || Entrypoint<br /> |-<br /> | 0x268 || u64 || CodeMemUsage<br /> |-<br /> | 0x270 || u64 || DynamicMemUsage<br /> |-<br /> | 0x278 || u64 || MaxTotalMemUsage<br /> |-<br /> | 0x280 || u32 || ProcessCategory (0: regular title, 1: kernel built-in)<br /> |-<br /> | 0x288 || [[#KProcessHandleTable]] || HandleTable<br /> |-<br /> | 0x528 || void* || UsermodeExceptionTlsArea<br /> |-<br /> | 0x530 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ExceptionThreadList<br /> |-<br /> | 0x540 || [[#KThread]]* || ExceptionThread<br /> |-<br /> | 0x548 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadList<br /> |-<br /> | 0x558 || bool || HasStarted<br /> |-<br /> | 0x55C || u32 || UnusedZero<br /> |-<br /> | 0x560 || u64[2] || UnusedZeroes<br /> |-<br /> | 0x570 || u64 || TotalTimeRunning<br /> |-<br /> | 0x578 || u64[5] || UnusedZeroes<br /> |-<br /> | 0x5A0 || u64 || UnusedZero<br /> |-<br /> | 0x5A8 || u64 || UnusedZero<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KProcessTerminationMessage || Sent to mailbox 0 when self-terminating.<br /> |-<br /> | 0x38 || [[#KMemoryManager]] || MemoryManager<br /> |-<br /> | 0x100 || u64 || TotalMemUsage<br /> |-<br /> | 0x108 || [[#KLinkedList]]&lt;[[#KTlsPageManager]]*&gt; || TlsPagesList<br /> |-<br /> | 0x120 || s32 || DefaultCpuCore<br /> |-<br /> | 0x128 || [[#KDebug]]* || Debug<br /> |-<br /> | 0x130 || [[#KResourceLimit]]* || ResourceLimit<br /> |-<br /> | 0x138 || u32 || State<br /> |-<br /> | 0x140 || [[#KMutex]] || ProcessMutex<br /> |-<br /> | 0x148 || [[#KMutex]] || ThreadingMutex<br /> |-<br /> | 0x150 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadArbiterList<br /> |-<br /> | 0x160 || KLinkedListNode ||<br /> |-<br /> | 0x170 || u64[4] || RandomEntropy<br /> |-<br /> | 0x190 || u8 || HasStateChanged<br /> |-<br /> | 0x191 || u8 || HasInitialized<br /> |-<br /> | 0x192 || u8 || IsSystem<br /> |-<br /> | 0x193 || u8[12+1] || ProcessName<br /> |-<br /> | 0x1A0 || u16 || NumberOfCreatedThreads<br /> |-<br /> | 0x1A2 || u16 || ThreadingRelatedInitiallyZero<br /> |-<br /> | 0x1A4 || u32 || ProcessFlags<br /> |-<br /> | 0x1A8 || [[#KProcessCapabilities]] || Capabilities<br /> |-<br /> | 0x258 || u64 || TitleId<br /> |-<br /> | 0x260 || u64 || ProcessId<br /> |-<br /> | 0x268 || u64 || CreatedTickstamp<br /> |-<br /> | 0x270 || u64 || Entrypoint<br /> |-<br /> | 0x278 || u64 || CodeMemUsage<br /> |-<br /> | 0x280 || u64 || DynamicMemUsage<br /> |-<br /> | 0x288 || u64 || MaxTotalMemUsage<br /> |-<br /> | 0x290 || u32 || ProcessCategory (0: regular title, 1: kernel built-in)<br /> |-<br /> | 0x298 || u64[5] || Unused [?]<br /> |-<br /> | 0x2C0 || [[#KProcessHandleTable]] || HandleTable<br /> |-<br /> | 0x2380 || void* || UsermodeExceptionTlsArea<br /> |-<br /> | 0x2388 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ExceptionThreadList<br /> |-<br /> | 0x2398 || [[#KThread]]* || ExceptionThread<br /> |-<br /> | 0x23A0 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadList<br /> |-<br /> | 0x23B0 || [[#KLinkedListNode]]&lt;[[#KSharedMemoryRef]] *&gt; || MappedSharedMemoriesList<br /> |-<br /> | 0x23C0 || bool || HasStarted<br /> |-<br /> | 0x23C1 || bool || HasException<br /> |-<br /> | 0x23C4 || u32 || ExceptionEnum0<br /> |-<br /> | 0x23C8 || u64 || ExceptionEnum1<br /> |-<br /> | 0x23D0 || u64 || ExceptionThreadUnkInfo0<br /> |-<br /> | 0x23D8 || u64 || BreakArg0<br /> |-<br /> | 0x23E0 || u64 || BreakArg1<br /> |-<br /> | 0x23E8 || u64 || BreakArg2<br /> |-<br /> | 0x23F0 || u64 || ExceptionThreadUnkInfo1<br /> |-<br /> | 0x23F8 || u32 || UnusedZero<br /> |-<br /> | 0x2400 || u64[8] || UnusedZeroes<br /> |-<br /> | 0x2440 || u64 || UnusedZero<br /> |-<br /> | 0x2448 || u64 || UnusedZero<br /> |-<br /> | 0x2450 || u64[6] || Unused [?]<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KTlsPageManager ==<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || void* || TlsPagePtr<br /> |-<br /> | 8 || [[#KProcess*]] || ProcessPtr<br /> |-<br /> | 0x10 || u32 || UsageCount<br /> |-<br /> | 0x14 || u8[8] || IsSlotFree<br /> |}<br /> <br /> == KProcessCapabilities ==<br /> Size: 0xB0<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u8[16] || SvcAccessMask<br /> |-<br /> | 0x10 || u8[128] || IrqAccessMask<br /> |-<br /> | 0x90 || u64 || AllowedCpuIdBitmask<br /> |-<br /> | 0x98 || u64 || AllowedThreadPrioBitmask<br /> |-<br /> | 0xA0 || u32 || DebuggingFlags<br /> |-<br /> | 0xA4 || u32 || HandleTableSize<br /> |-<br /> | 0xA8 || u32 || KernelReleaseVersion<br /> |-<br /> | 0xAC || u32 || ApplicationType<br /> |}<br /> <br /> == KProcessHandleTable ==<br /> [1.0.0] Size: 0x2A0<br /> <br /> [2.0.0] Size: 0x20C0<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KHandleEntry]]* || TablePtr<br /> |-<br /> | 8 || [[#KHandleEntry]]* || NextFreeEntry<br /> |-<br /> | 0x10 || [[#KHandleEntry]][40] || InternalTable<br /> |-<br /> | 0x290 || u16 || Size<br /> |-<br /> | 0x292 || u16 || MaxUsageAtOnce<br /> |-<br /> | 0x294 || u16 || IdCounter<br /> |-<br /> | 0x296 || u16 || NumActiveSlots<br /> |-<br /> | 0x298 || [[#KSpinLock]] || Lock<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KHandleEntry]]* || TablePtr<br /> |-<br /> | 8 || [[#KHandleEntry]]* || NextFreeEntry<br /> |-<br /> | 0x10 || [[#KHandleEntry]][1024] || InternalTable<br /> |-<br /> | 0x2010 || u16 || Size<br /> |-<br /> | 0x2012 || u16 || MaxUsageAtOnce<br /> |-<br /> | 0x2014 || u16 || IdCounter<br /> |-<br /> | 0x2016 || u16 || NumActiveSlots<br /> |-<br /> | 0x2040 || [[#KSpinLock]] || Lock<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KHandleEntry ===<br /> [1.0.0] Size: 0x10<br /> <br /> [2.0.0] Size: 8<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 || HandleId<br /> |-<br /> | 2 || u8 || ObjectType<br /> |-<br /> | 8 || [[#KAutoObject]]* || Object<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 || HandleId<br /> |-<br /> | 2 || u8 || ObjectType<br /> |-<br /> | 4 || u32 || ObjectCompressedPtr<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KSpinLock ===<br /> [1.0.0] Size: 0x1<br /> <br /> [2.0.0] Size: 0x40<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u8 || IsBusy<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 ||<br /> |-<br /> | 0x20 || u16 ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KSharedMemoryRef ==<br /> [2.0.0] Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KSharedMemoryRef]] *&gt; || NodeFor__MappedSharedMemoriesList<br /> |-<br /> | 0x10 || [[#KSharedMemory*]] || SharedMem<br /> |-<br /> | 0x18 || u64 || InitiallyZero<br /> |}<br /> <br /> = KMemoryManager =<br /> [1.0.0] Size: 0xB8<br /> <br /> [2.0.0] Size: 0xC8<br /> <br /> [5.0.0] Size: 0xF8?<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x50 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x60 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0x78 || bool || IsKernel<br /> |-<br /> | 0x79 || bool || IsSystem<br /> |-<br /> | 0x7A || bool || IsAddrSpace36Bit<br /> |-<br /> | 0x7B || bool || HasAslr<br /> |-<br /> | 0x7C || u32 || Is_0x59_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x80 || u32 || Is_0x5A_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x84 || u32 || Is_0x58_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x88 || ||<br /> |-<br /> | 0x90 || ||<br /> |-<br /> | 0x98 || ||<br /> |-<br /> | 0xA0 || u64 || TranslationTableBaseRegister0<br /> |-<br /> | 0xA8 || u64 || TranslationControlRegister<br /> |-<br /> | 0xB0 || u8 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || NewMapRegionBaseAddr<br /> |-<br /> | 0x48 || u64 || NewMapRegionEndAddr<br /> |-<br /> | 0x50 || u64 || TlsIoRegionBaseAddr<br /> |-<br /> | 0x58 || u64 || TlsIoRegionEndAddr<br /> |-<br /> | 0x60 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x68 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x70 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x80 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0x98 || u32 || AddressSpaceWidth (32/36/39)<br /> |-<br /> | 0x9C || bool || IsKernel<br /> |-<br /> | 0x9D || bool || IsSystem<br /> |-<br /> | 0x9E || bool || HasAslr<br /> |-<br /> | 0xA0 || u32 || PoolPartition<br /> |-<br /> | 0xA4 || u32 || Is_0x5A_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xA8 || u32 || Is_0x59_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xAC || u32 || Is_0x58_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xB0 || u64 || TranslationTableBaseRegister0<br /> |-<br /> | 0xB8 || u64 || TranslationControlRegister<br /> |-<br /> | 0xC0 || u32 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 5.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || NewMapRegionBaseAddr<br /> |-<br /> | 0x48 || u64 || NewMapRegionEndAddr<br /> |-<br /> | 0x50 || u64 || TlsIoRegionBaseAddr<br /> |-<br /> | 0x58 || u64 || TlsIoRegionEndAddr<br /> |-<br /> | 0x60 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x68 || || <br /> |-<br /> | 0x70 || || <br /> |-<br /> | 0x78 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x80 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x90 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0xA8 || u32 || ?<br /> |-<br /> | 0xAC || u32 || AddressSpaceWidth (32/36/39)<br /> |-<br /> | 0xB0 || [[#KLinkedList]]? || <br /> |-<br /> | 0xC8 || || <br /> |-<br /> | 0xD0 || || <br /> |-<br /> | 0xD8 || ptr || <br /> |-<br /> | 0xE0 || u64 || TranslationTableBaseRegister0 val<br /> |-<br /> | 0xE8 || u64 || TranslationControlRegister val<br /> |-<br /> | 0xF0 || u32 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPageTable ==<br /> Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || void* || RawPageTablePtr<br /> |-<br /> | 8 || bool ||<br /> |-<br /> | 0xC || u32 || AddrSpaceSizeInGb<br /> |}<br /> <br /> == KMemoryBlockManager ==<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KMemoryBlock]]* || MemoryBlockList<br /> |-<br /> | 8 || u64 || MaxAddr<br /> |-<br /> | 0x10 || u64 || MinAddr<br /> |}<br /> <br /> == KMemoryBlock ==<br /> Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KMemoryBlock]] *&gt; || NodeFor__MemoryBlockList<br /> |-<br /> | 0x10 || ||<br /> |-<br /> | 0x18 || ||<br /> |-<br /> | 0x20 || u64 || BaseAddress<br /> |-<br /> | 0x28 || u64 || NumOfPages<br /> |-<br /> | 0x30 || u32 || State<br /> |-<br /> | 0x34 || u16 || IpcRefCount [?]<br /> |-<br /> | 0x36 || u16 || DeviceMapRefCount<br /> |-<br /> | 0x38 || u8 || Permission<br /> |-<br /> | 0x39 || u8 || UnkAttribute<br /> |-<br /> | 0x3A || u8 || Attribute<br /> |}<br /> <br /> == KMemoryBlockInfo ==<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u64 || BaseAddress<br /> |-<br /> | 8 || u64 || Size<br /> |-<br /> | 0x10 || u32 || State<br /> |-<br /> | 0x14 || u8 || Permission<br /> |-<br /> | 0x15 || u8 || Attribute<br /> |-<br /> | 0x16 || u8 || UnkAttribute<br /> |-<br /> | 0x18 || u16 || IpcRefCount [?]<br /> |-<br /> | 0x1A || u16 || DeviceMapRefCount<br /> |}<br /> <br /> = KTransferMemory =<br /> Size: 0x48<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KProcess]]* || OwnerProcess<br /> |-<br /> | 0x30 || u64 || BaseAddress<br /> |-<br /> | 0x38 || KMutex || Mutex<br /> |-<br /> | 0x40 || int || Permission<br /> |-<br /> | 0x44 || bool || HasInited<br /> |-<br /> | 0x45 || bool || IsMapped<br /> |}<br /> <br /> = KSharedMemory =<br /> [1.0.0] Size: 0x40<br /> <br /> [2.0.0] Size: 0x48<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KProcess]]* || OwnerProcess<br /> |-<br /> | 0x30 || int || LocalPermission<br /> |-<br /> | 0x34 || int || RemotePermission<br /> |-<br /> | 0x38 || bool || HasInited<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KResourceLimit]]* || OwnerResourceLimit<br /> |-<br /> | 0x30 || u64 || OwnerProcessPid<br /> |-<br /> | 0x38 || int || LocalPermission<br /> |-<br /> | 0x3C || int || RemotePermission<br /> |-<br /> | 0x40 || bool || HasInited<br /> |}<br /> <br /> &lt;/div&gt;<br /> <br /> = KJitMemory =<br /> [4.0.0+] Size: 0x58<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x20 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x38 || [[#KProcess]]* || SrcProcessPtr<br /> |-<br /> | 0x40 || u64 || SrcAddr<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x50 || u8 || HasInit<br /> |-<br /> | 0x51 || u8 || HasMappedSlave<br /> |-<br /> | 0x52 || u8 || HasMappedMaster<br /> |}<br /> <br /> = KPort =<br /> Size: 0xA8<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KServerPort]] || ServerSide<br /> |-<br /> | 0x60 || [[#KClientPort]] || ClientSide<br /> |-<br /> | 0x98 || u64 ||<br /> |-<br /> | 0xA0 || bool || HasInited<br /> |-<br /> | 0xA1 || bool || IsLight<br /> |}<br /> <br /> == KServerPort ==<br /> Size: 0x50<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || [[#KLinkedListNode]] || IncomingConnections<br /> |-<br /> | 0x38 || [[#KLinkedListNode]] || IncomingLightConnections<br /> |-<br /> | 0x48 || [[#KPort]]* || Parent<br /> |}<br /> <br /> == KClientPort ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || u32 || NumSessions<br /> |-<br /> | 0x2C || u32 || MaxSessions<br /> |-<br /> | 0x30 || [[#KPort]]* || Parent<br /> |}<br /> <br /> = KSession =<br /> Size: 0xB0<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KServerSession]] || ServerSide<br /> |-<br /> | 0x70 || [[#KClientSession]] || ClientSide<br /> |-<br /> | 0xA8 || bool || HasInited<br /> |}<br /> <br /> == KServerSession ==<br /> Size: 0x60<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KLinkedListNode || NodeFor__IncomingConnections<br /> |-<br /> | 0x38 || [[#KSession*]] || Parent<br /> |-<br /> | 0x40 || KLinkedListNode&lt;[[#KSessionRequest]]*&gt; || RequestList<br /> |-<br /> | 0x50 || [[#KSessionRequest]]* || ActiveRequest<br /> |-<br /> | 0x58 || ||<br /> |}<br /> <br /> === KSessionRequest ===<br /> Size: 0x158<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 0x10 || KLinkedListNode || NodeFor__RequestList<br /> |-<br /> | 0x20 || [[#KBufferDescriptor]][8] || BufferTable<br /> |-<br /> | 0x120 || [[#KBufferDescriptor]]* || ExternalBufferTable<br /> |-<br /> | 0x128 || u8 || NumSendBuffers<br /> |-<br /> | 0x129 || u8 || NumRecvBuffers<br /> |-<br /> | 0x12A || u8 || NumExchBuffers<br /> |-<br /> | 0x130 || [[#KThread]]* || SenderThread<br /> |-<br /> | 0x138 || u64 || InitiallyZero<br /> |-<br /> | 0x140 || [[#KWritableEvent]]* || ForAsyncEvent<br /> |-<br /> | 0x148 || u64 || CustomCmdbufAddr<br /> |-<br /> | 0x150 || u64 || CustomCmdbufSize<br /> |}<br /> <br /> === KBufferDescriptor ===<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || UserVirtAddr<br /> |-<br /> | 8 || u64 || Size<br /> |-<br /> | 0x10 || u64 || <br /> |-<br /> | 0x18 || u64 || BufferMemoryState<br /> |-<br /> |}<br /> <br /> == KClientSession ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KSession]]* || Parent<br /> |-<br /> | 0x18 || bool || HasInited<br /> |-<br /> | 0x20 || [[#KClientPort]]* || ParentPort<br /> |-<br /> | 0x28 || ||<br /> |-<br /> | 0x30 || [[#KProcess]]* || CreatorProcess<br /> |}<br /> <br /> = KLightSession =<br /> Size: 0xA8<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLightSessionServer]] || ServerSide<br /> |-<br /> | 0x68 || [[#KLightSessionClient]] || ClientSide<br /> |-<br /> | 0xA0 || bool || HasInited<br /> |}<br /> <br /> == KLightServerSession ==<br /> Size: 0x58<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KLinkedListNode || NodeFor__IncomingLightConnections<br /> |-<br /> | 0x20 || [[#KLightSession]] || Parent<br /> |-<br /> | 0x28 || u64[6] ||<br /> |}<br /> <br /> == KLightClientSession ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLightSession]]* || Parent<br /> |-<br /> | 0x18 || bool || HasInited<br /> |-<br /> | 0x20 || [[#KClientPort]]* || Port<br /> |-<br /> | 0x28 || ||<br /> |-<br /> | 0x30 || [[#KProcess]]* || CreatorProcess<br /> |}<br /> <br /> = KEvent =<br /> Size: 0x70<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KReadableEvent]] || ReadableEvent<br /> |-<br /> | 0x48 || [[#KWritableEvent]] || WritableEvent<br /> |-<br /> | 0x60 || [[#KProcess]]* || Creator<br /> |-<br /> | 0x68 || bool || HasInited<br /> |}<br /> <br /> == KReadableEvent ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KSynchronizationEvent]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || bool ||<br /> |-<br /> | 0x30 || [[#KEvent]]* || Parent<br /> |}<br /> <br /> == KWritableEvent ==<br /> Size: 0x18<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KEvent]]* || Parent<br /> |}<br /> <br /> == KInterruptEvent ==<br /> [1.0.0] Size: 0x50<br /> <br /> [2.0.0] Size: 0x48<br /> <br /> Inherits from: [[#KReadableEvent]]<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KReadableEvent]] || Inheritance<br /> |-<br /> | 0x38 || [[#KInterruptReceiver]] || Receiver<br /> |-<br /> | 0x48 || u32 || IrqId (or -1)<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KReadableEvent]] || Inheritance<br /> |-<br /> | 0x38 || [[#KInterruptReceiver]]* || Receiver<br /> |-<br /> | 0x40 || u32 || IrqId (or -1)<br /> |-<br /> | 0x44 || bool || IsIrqRegistered<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KInterruptReceiver ===<br /> [1.0.0] Size: 0x10<br /> [2.0.0] Size: 0x20<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || InitiallyZero<br /> |-<br /> | 0x10 || [[#KInterruptEvent]]* || IrqEventPtr<br /> |-<br /> | 0x18 || s32 || IrqId<br /> |}<br /> &lt;/div&gt;<br /> <br /> = KDeviceAddressSpace =<br /> Size: 0x70<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x18 || [[#KSmmuManager]] || Manager<br /> |-<br /> | 0x58 || u64 || BaseAddress<br /> |-<br /> | 0x60 || u64 || Size<br /> |-<br /> | 0x68 || bool || HasInited<br /> |}<br /> <br /> [1.0.0] It was called KAddressSpace.<br /> <br /> == KSmmuManager ==<br /> Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u8[4] || PageTableAsids<br /> |-<br /> | 8 || void*[4] || PageDirectories<br /> |-<br /> | 0x28 || u64 || AttachedDevicesMask<br /> |-<br /> | 0x30 || u32 || RegVal32Bit<br /> |-<br /> | 0x34 || u32 || RegVal32BitEmpty<br /> |-<br /> | 0x38 || u32 || RegVal36Bit<br /> |-<br /> | 0x3C || u32 || RegVal36BitEmpty<br /> |}<br /> <br /> = KResourceLimit =<br /> Size: 0x68<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || u64[5] || CurrentValue<br /> |-<br /> | 0x38 || u64[5] || LimitValue<br /> |-<br /> | 0x60 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> = KPoolManager =<br /> [1.0.0] Size: 0x380<br /> <br /> [2.0.0] Size: 0x450<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolAllocator]][3] || Allocator<br /> |-<br /> | 0x348 || [[#KPoolRefManager]] || RefManager<br /> |-<br /> | 0x368 || u64 || AllocationCounter<br /> |-<br /> | 0x370 || u64 ||<br /> |-<br /> | 0x378 || [[#KMutex]] || Mutex<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolAllocator]] || Allocator0<br /> |-<br /> | 0x220 || [[#KPartitionInfo]]* || PartitionInfo0<br /> |-<br /> | 0x228 || [[#KPoolAllocator]] || Allocator1<br /> |-<br /> | 0x448 || [[#KPartitionInfo]]* || PartitionInfo1<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPoolAllocator ==<br /> [1.0.0] Size: 0x118<br /> <br /> [2.0.0] Size: 0x220<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || void* || MemoryBase<br /> |-<br /> | 8 || u64 || MemorySize<br /> |-<br /> | 0x10 || s32 || NumPools<br /> |-<br /> | 0x18 || [[#KPool]][8] || Pools<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || void* || MemoryBase<br /> |-<br /> | 8 || u64 || MemorySize<br /> |-<br /> | 0x10 || [[#KPool]][8] || Pools<br /> |-<br /> | 0x210 || s32 || NumPools<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KPool ===<br /> [1.0.0] Size: 0x20<br /> <br /> [2.0.0] Size: 0x40<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || KPoolHeader* || FirstFreeChunk<br /> |-<br /> | 8 || u64 ||<br /> |-<br /> | 0x10 || u64 ||<br /> |-<br /> | 0x18 || void* || SingletonTableEntryPtr<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || KPoolHeader* || FirstFreeChunk<br /> |-<br /> | 8 || u64 ||<br /> |-<br /> | 0x10 || u64 ||<br /> |-<br /> | 0x18 || void* || SingletonTableEntryPtr<br /> |-<br /> | 0x20 || [[#KPool]]* || Parent<br /> |-<br /> | 0x30 || u64[2] || DmaProtectionKey<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPoolRefManager ==<br /> [1.0.0] Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolManager]]* || Parent<br /> |-<br /> | 8 || void* || PoolBase<br /> |-<br /> | 0x10 || u64 || MaxPage<br /> |-<br /> | 0x18 || u16* || RefCountTable<br /> |}<br /> <br /> = KObjectAllocator =<br /> Size: 0x50<br /> [5.0.0]? Size: 0x48<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLockedList]] || LockedList <br /> |-<br /> | 0x28 || [[#KSlabHeap]] || SlabHeap <br /> |}<br /> <br /> <br /> = KSlabHeap =<br /> Size: 0x28<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || void* || FreeListHead <br /> |-<br /> | 0x8 || u64 || <br /> |-<br /> | 0x10 || void* || HeapPtr<br /> |-<br /> | 0x18 || u64 || TotalHeapSize<br /> |-<br /> | 0x20 || u64 || SingleObjectSize<br /> |}<br /> <br /> 5.0.0 (?):<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || void* || FreeListHead <br /> |-<br /> | 0x8 || u64 || SingleObjectSize<br /> |-<br /> | 0x10 || void* || HeapPtr<br /> |-<br /> | 0x18 || void* || Start (equal to HeapPtr on init)<br /> |-<br /> | 0x20 || void* || End<br /> |}<br /> <br /> = KPageTableAllocator =<br /> Size: 0x30<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 ||<br /> |-<br /> | 0x10 || u16* || RefCountTable<br /> |-<br /> | 0x10 || void* || BaseAddress<br /> |-<br /> | 0x18 || u64 || Size<br /> |-<br /> | 0x20 || u64 ||<br /> |-<br /> | 0x28 || u64 ||<br /> |}<br /> <br /> = KIrqManager =<br /> [1.0.0] Size: 0x1608<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KIrqEntry]][32] || Core0Irq<br /> |-<br /> | 0x200 || [[#KIrqEntry]][32] || Core1Irq<br /> |-<br /> | 0x400 || [[#KIrqEntry]][32] || Core2Irq<br /> |-<br /> | 0x600 || [[#KIrqEntry]][32] || Core3Irq<br /> |-<br /> | 0x800 || [[#KIrqEntry]][224] || SharedIrqs<br /> |-<br /> | 0x1600 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> == KIrqEntry ==<br /> [1.0.0] Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KIrqReciever*]] || Receiver<br /> |-<br /> | 8 || u8 || State0<br /> |-<br /> | 9 || u8 || State1<br /> |}<br /> <br /> = KDebug =<br /> Size: 0x50<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || [[#KLinkedListNode]]&lt;[[#KDebugEvent]]&gt; || EventList<br /> |-<br /> | 0x38 || u32 || Flags<br /> |-<br /> | 0x40 || [[#KProcess]]* || ProcessPtr<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> == KDebugEvent ==<br /> Size: 0x60<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KDebugEvent]] *&gt; || NodeFor__EventList<br /> |-<br /> | 0x10 || u32 || EventType<br /> |-<br /> | 0x14 || u32 || ThreadId<br /> |-<br /> | 0x18 || u32 || Flags<br /> |-<br /> | 0x1C || u16 ||<br /> |-<br /> | 0x1E || bool ||<br /> |-<br /> | 0x20 || ... || ...<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Kernel&diff=5051 2018-09-23T04:39:41Z

<p>Shinyquagsire23: </p> <hr /> <div>= KAutoObject =<br /> Size: 0x10<br /> <br /> [5.0.0] Size: 0x20<br /> [6.0.0] Size: 0x30<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u32 || ReferenceCount<br /> |}<br /> <br /> [5.0.0]:<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u32 || ReferenceCount<br /> |-<br /> | 0x10 || KLinkedListNode || Intrusive list, links to other instances of the same class (managed by a KObjectAllocator).<br /> |}<br /> <br /> [6.0.0]:<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u32 || ReferenceCount<br /> |-<br /> | 0x10 || u64 || ?<br /> |-<br /> | 0x18 || ptr || ?<br /> |-<br /> | 0x20 || u64 || ?<br /> |-<br /> | 0x28 || u64 || ?<br /> |}<br /> <br /> = KSynchronizationObject =<br /> Size: 0x28<br /> <br /> [5.0.0] Size: 0x38<br /> [6.0.0] Size: 0x48<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLinkedList]] || ThreadSyncList<br /> |}<br /> <br /> = KMutex =<br /> Size: 0x8<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || OwnerTag<br /> |}<br /> <br /> = KRecursiveLock =<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KThread]] * || Owner<br /> |-<br /> | 8 || s32 || Count<br /> |}<br /> <br /> <br /> = KLockedList =<br /> Size: 0x28<br /> <br /> [5.0.0]? Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || Count<br /> |-<br /> | 8 || [[#KLinkedListNode]] || List<br /> |-<br /> | 0x18 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x20 || u64 || MaxCount<br /> |}<br /> <br /> [5.0.0]?:<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]] || List<br /> |-<br /> | 0x10 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x18 || u64 || MaxCount<br /> |}<br /> <br /> = KLinkedListNode =<br /> Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]* || Prev<br /> |-<br /> | 8 || [[#KLinkedListNode]]* || Next<br /> |}<br /> <br /> = KLinkedListEntry =<br /> Size: 0x10 + &lt;code&gt;sizeof(T)&lt;/code&gt;<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]] || NodeFor__List<br /> |-<br /> | 0x10 || T || Data<br /> |}<br /> <br /> = KLinkedList =<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || Count <br /> |-<br /> | 8 || [[#KLinkedListNode]] || Bounds (first, last)<br /> |}<br /> <br /> = KThread =<br /> [1.0.0] Size: 0x620<br /> [5.0.0]? Size: 0x6C0<br /> <br /> Inherits from: [[#KSynchronizationObject]], [[#KSchedulerObject0]], [[#KSchedulerObject1]], [[#KSchedulerObject2]]<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KSchedulerObject0 || Inheritance<br /> |-<br /> | 0x48 || KSchedulerObject1 || Inheritance<br /> |-<br /> | 0x58 || KSchedulerObject2 || Inheritance<br /> |-<br /> | 0x70 || KThreadContext || Context<br /> |-<br /> | 0x2F0 || u64 || CoreMask<br /> |-<br /> | 0x2F8 || u64 || CoreMaskOverride<br /> |-<br /> | 0x300 || u64 || ThreadId<br /> |-<br /> | 0x308 || u64 || TotalTimeRunning<br /> |-<br /> | 0x310 || [[#KSynchronizationObject]]* || SignalledObjectPtr<br /> |-<br /> | 0x318 || u64 ||<br /> |-<br /> | 0x320 || u64 || CondVar_CondVarUserAddr<br /> |-<br /> | 0x328 || u64 || Entrypoint<br /> |-<br /> | 0x330 || u64 || CondVar_MutexUserAddr<br /> |-<br /> | 0x338 || [[#KProcess]]* || ProcessPtr<br /> |-<br /> | 0x340 || void* || KernelThreadStack<br /> |-<br /> | 0x348 || u64 ||<br /> |-<br /> | 0x350 || void* || TlsKernelPtr<br /> |-<br /> | 0x358 || void* || TlsPhysicalPtr<br /> |-<br /> | 0x360 || [[#KSynchronizationObject]]*[0x40] || SyncObjects<br /> |-<br /> | 0x560 || [[#KThread]]* || CondVar_NextThreadPtr<br /> |-<br /> | 0x568 || [[#KThread]]* || CondVar_PrevThreadPtr<br /> |-<br /> | 0x570 || [[#KSynchronizationObject]]* || SignalledObjectPtr?<br /> |-<br /> | 0x578 || KLinkedListNode ||<br /> |-<br /> | 0x588 || KLinkedListNode ||<br /> |-<br /> | 0x598 || KLinkedListNode || NodeFor__ThreadList<br /> |-<br /> | 0x5A8 || KLinkedListNode || NodeFor__ThreadsOnSameCore<br /> |-<br /> | 0x5B8 || u64 ||<br /> |-<br /> | 0x5C0 || [[#KThread]]* || CondVar_SelfPtr<br /> |-<br /> | 0x5C8 || u64 ||<br /> |-<br /> | 0x5D0 || u64 ||<br /> |-<br /> | 0x5D8 || u64 ||<br /> |-<br /> | 0x5E0 || u32 || CondVar_WaitThreadHandle<br /> |-<br /> | 0x5E4 || u32 || SchedulingFlags_Default<br /> |-<br /> | 0x5E8 || u32 || WaitSync_RetVal<br /> |-<br /> | 0x5EC || u32 ||<br /> |-<br /> | 0x5F0 || u32 || ActualPriority<br /> |-<br /> | 0x5F4 || u32 ||<br /> |-<br /> | 0x5F8 || u32 ||<br /> |-<br /> | 0x5FC || u32 ||<br /> |-<br /> | 0x600 || u32 || WantedPriority<br /> |-<br /> | 0x604 || u32 || CpuCore<br /> |-<br /> | 0x608 || u8 || State<br /> |-<br /> | 0x609 || u8 || ShallBeTerminated<br /> |-<br /> | 0x60A || u8 ||<br /> |-<br /> | 0x60B || u8 ||<br /> |-<br /> | 0x60C || u8 ||<br /> |-<br /> | 0x60D || u8 ||<br /> |-<br /> | 0x60E || u8 || HasExited<br /> |-<br /> | 0x60F || u8 || HasCpuCoreOverride<br /> |-<br /> | ... || ... || ...<br /> |}<br /> <br /> = KProcess =<br /> [1.0.0] Size: 0x5B0<br /> <br /> [2.0.0] Size: 0x2480<br /> <br /> [3.0.0] Size: 0x2580<br /> <br /> [5.0.0] Size: 0x4600<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KProcessTerminationMessage || Sent to mailbox 0 when self-terminating.<br /> |-<br /> | 0x38 || [[#KMemoryManager]] || MemoryManager<br /> |-<br /> | 0xF0 || u64 || TotalMemUsage<br /> |-<br /> | 0xF8 || [[#KLinkedList]]&lt;[[#KTlsPageManager]]*&gt;&gt; || TlsPagesList<br /> |-<br /> | 0x110 || s32 || DefaultCpuCore<br /> |-<br /> | 0x118 || [[#KDebug]]* || Debug<br /> |-<br /> | 0x120 || [[#KResourceLimit]]* || ResourceLimit<br /> |-<br /> | 0x128 || u32 || State<br /> |-<br /> | 0x130 || [[#KMutex]] || ProcessMutex<br /> |-<br /> | 0x138 || [[#KMutex]] || ThreadingMutex<br /> |-<br /> | 0x140 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadArbiterList<br /> |-<br /> | 0x150 || KLinkedListNode ||<br /> |-<br /> | 0x160 || u64[4] || RandomEntropy<br /> |-<br /> | 0x180 || u8 || HasStateChanged<br /> |-<br /> | 0x181 || u8 || HasInitialized<br /> |-<br /> | 0x182 || u8 || IsSystem<br /> |-<br /> | 0x183 || u8[12+1] || ProcessName<br /> |-<br /> | 0x190 || u16 || NumberOfCreatedThreads<br /> |-<br /> | 0x192 || u16 || ThreadingRelatedInitiallyZero<br /> |-<br /> | 0x194 || u32 || ProcessFlags<br /> |-<br /> | 0x198 || [[#KProcessCapabilities]] || Capabilities<br /> |-<br /> | 0x248 || u64 || TitleId<br /> |-<br /> | 0x250 || u64 || ProcessId<br /> |-<br /> | 0x258 || u64 || CreatedTickstamp<br /> |-<br /> | 0x260 || u64 || Entrypoint<br /> |-<br /> | 0x268 || u64 || CodeMemUsage<br /> |-<br /> | 0x270 || u64 || DynamicMemUsage<br /> |-<br /> | 0x278 || u64 || MaxTotalMemUsage<br /> |-<br /> | 0x280 || u32 || ProcessCategory (0: regular title, 1: kernel built-in)<br /> |-<br /> | 0x288 || [[#KProcessHandleTable]] || HandleTable<br /> |-<br /> | 0x528 || void* || UsermodeExceptionTlsArea<br /> |-<br /> | 0x530 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ExceptionThreadList<br /> |-<br /> | 0x540 || [[#KThread]]* || ExceptionThread<br /> |-<br /> | 0x548 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadList<br /> |-<br /> | 0x558 || bool || HasStarted<br /> |-<br /> | 0x55C || u32 || UnusedZero<br /> |-<br /> | 0x560 || u64[2] || UnusedZeroes<br /> |-<br /> | 0x570 || u64 || TotalTimeRunning<br /> |-<br /> | 0x578 || u64[5] || UnusedZeroes<br /> |-<br /> | 0x5A0 || u64 || UnusedZero<br /> |-<br /> | 0x5A8 || u64 || UnusedZero<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KProcessTerminationMessage || Sent to mailbox 0 when self-terminating.<br /> |-<br /> | 0x38 || [[#KMemoryManager]] || MemoryManager<br /> |-<br /> | 0x100 || u64 || TotalMemUsage<br /> |-<br /> | 0x108 || [[#KLinkedList]]&lt;[[#KTlsPageManager]]*&gt; || TlsPagesList<br /> |-<br /> | 0x120 || s32 || DefaultCpuCore<br /> |-<br /> | 0x128 || [[#KDebug]]* || Debug<br /> |-<br /> | 0x130 || [[#KResourceLimit]]* || ResourceLimit<br /> |-<br /> | 0x138 || u32 || State<br /> |-<br /> | 0x140 || [[#KMutex]] || ProcessMutex<br /> |-<br /> | 0x148 || [[#KMutex]] || ThreadingMutex<br /> |-<br /> | 0x150 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadArbiterList<br /> |-<br /> | 0x160 || KLinkedListNode ||<br /> |-<br /> | 0x170 || u64[4] || RandomEntropy<br /> |-<br /> | 0x190 || u8 || HasStateChanged<br /> |-<br /> | 0x191 || u8 || HasInitialized<br /> |-<br /> | 0x192 || u8 || IsSystem<br /> |-<br /> | 0x193 || u8[12+1] || ProcessName<br /> |-<br /> | 0x1A0 || u16 || NumberOfCreatedThreads<br /> |-<br /> | 0x1A2 || u16 || ThreadingRelatedInitiallyZero<br /> |-<br /> | 0x1A4 || u32 || ProcessFlags<br /> |-<br /> | 0x1A8 || [[#KProcessCapabilities]] || Capabilities<br /> |-<br /> | 0x258 || u64 || TitleId<br /> |-<br /> | 0x260 || u64 || ProcessId<br /> |-<br /> | 0x268 || u64 || CreatedTickstamp<br /> |-<br /> | 0x270 || u64 || Entrypoint<br /> |-<br /> | 0x278 || u64 || CodeMemUsage<br /> |-<br /> | 0x280 || u64 || DynamicMemUsage<br /> |-<br /> | 0x288 || u64 || MaxTotalMemUsage<br /> |-<br /> | 0x290 || u32 || ProcessCategory (0: regular title, 1: kernel built-in)<br /> |-<br /> | 0x298 || u64[5] || Unused [?]<br /> |-<br /> | 0x2C0 || [[#KProcessHandleTable]] || HandleTable<br /> |-<br /> | 0x2380 || void* || UsermodeExceptionTlsArea<br /> |-<br /> | 0x2388 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ExceptionThreadList<br /> |-<br /> | 0x2398 || [[#KThread]]* || ExceptionThread<br /> |-<br /> | 0x23A0 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadList<br /> |-<br /> | 0x23B0 || [[#KLinkedListNode]]&lt;[[#KSharedMemoryRef]] *&gt; || MappedSharedMemoriesList<br /> |-<br /> | 0x23C0 || bool || HasStarted<br /> |-<br /> | 0x23C1 || bool || HasException<br /> |-<br /> | 0x23C4 || u32 || ExceptionEnum0<br /> |-<br /> | 0x23C8 || u64 || ExceptionEnum1<br /> |-<br /> | 0x23D0 || u64 || ExceptionThreadUnkInfo0<br /> |-<br /> | 0x23D8 || u64 || BreakArg0<br /> |-<br /> | 0x23E0 || u64 || BreakArg1<br /> |-<br /> | 0x23E8 || u64 || BreakArg2<br /> |-<br /> | 0x23F0 || u64 || ExceptionThreadUnkInfo1<br /> |-<br /> | 0x23F8 || u32 || UnusedZero<br /> |-<br /> | 0x2400 || u64[8] || UnusedZeroes<br /> |-<br /> | 0x2440 || u64 || UnusedZero<br /> |-<br /> | 0x2448 || u64 || UnusedZero<br /> |-<br /> | 0x2450 || u64[6] || Unused [?]<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KTlsPageManager ==<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || void* || TlsPagePtr<br /> |-<br /> | 8 || [[#KProcess*]] || ProcessPtr<br /> |-<br /> | 0x10 || u32 || UsageCount<br /> |-<br /> | 0x14 || u8[8] || IsSlotFree<br /> |}<br /> <br /> == KProcessCapabilities ==<br /> Size: 0xB0<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u8[16] || SvcAccessMask<br /> |-<br /> | 0x10 || u8[128] || IrqAccessMask<br /> |-<br /> | 0x90 || u64 || AllowedCpuIdBitmask<br /> |-<br /> | 0x98 || u64 || AllowedThreadPrioBitmask<br /> |-<br /> | 0xA0 || u32 || DebuggingFlags<br /> |-<br /> | 0xA4 || u32 || HandleTableSize<br /> |-<br /> | 0xA8 || u32 || KernelReleaseVersion<br /> |-<br /> | 0xAC || u32 || ApplicationType<br /> |}<br /> <br /> == KProcessHandleTable ==<br /> [1.0.0] Size: 0x2A0<br /> <br /> [2.0.0] Size: 0x20C0<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KHandleEntry]]* || TablePtr<br /> |-<br /> | 8 || [[#KHandleEntry]]* || NextFreeEntry<br /> |-<br /> | 0x10 || [[#KHandleEntry]][40] || InternalTable<br /> |-<br /> | 0x290 || u16 || Size<br /> |-<br /> | 0x292 || u16 || MaxUsageAtOnce<br /> |-<br /> | 0x294 || u16 || IdCounter<br /> |-<br /> | 0x296 || u16 || NumActiveSlots<br /> |-<br /> | 0x298 || [[#KSpinLock]] || Lock<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KHandleEntry]]* || TablePtr<br /> |-<br /> | 8 || [[#KHandleEntry]]* || NextFreeEntry<br /> |-<br /> | 0x10 || [[#KHandleEntry]][1024] || InternalTable<br /> |-<br /> | 0x2010 || u16 || Size<br /> |-<br /> | 0x2012 || u16 || MaxUsageAtOnce<br /> |-<br /> | 0x2014 || u16 || IdCounter<br /> |-<br /> | 0x2016 || u16 || NumActiveSlots<br /> |-<br /> | 0x2040 || [[#KSpinLock]] || Lock<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KHandleEntry ===<br /> [1.0.0] Size: 0x10<br /> <br /> [2.0.0] Size: 8<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 || HandleId<br /> |-<br /> | 2 || u8 || ObjectType<br /> |-<br /> | 8 || [[#KAutoObject]]* || Object<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 || HandleId<br /> |-<br /> | 2 || u8 || ObjectType<br /> |-<br /> | 4 || u32 || ObjectCompressedPtr<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KSpinLock ===<br /> [1.0.0] Size: 0x1<br /> <br /> [2.0.0] Size: 0x40<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u8 || IsBusy<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 ||<br /> |-<br /> | 0x20 || u16 ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KSharedMemoryRef ==<br /> [2.0.0] Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KSharedMemoryRef]] *&gt; || NodeFor__MappedSharedMemoriesList<br /> |-<br /> | 0x10 || [[#KSharedMemory*]] || SharedMem<br /> |-<br /> | 0x18 || u64 || InitiallyZero<br /> |}<br /> <br /> = KMemoryManager =<br /> [1.0.0] Size: 0xB8<br /> <br /> [2.0.0] Size: 0xC8<br /> <br /> [5.0.0] Size: 0xF8?<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x50 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x60 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0x78 || bool || IsKernel<br /> |-<br /> | 0x79 || bool || IsSystem<br /> |-<br /> | 0x7A || bool || IsAddrSpace36Bit<br /> |-<br /> | 0x7B || bool || HasAslr<br /> |-<br /> | 0x7C || u32 || Is_0x59_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x80 || u32 || Is_0x5A_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x84 || u32 || Is_0x58_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x88 || ||<br /> |-<br /> | 0x90 || ||<br /> |-<br /> | 0x98 || ||<br /> |-<br /> | 0xA0 || u64 || TranslationTableBaseRegister0<br /> |-<br /> | 0xA8 || u64 || TranslationControlRegister<br /> |-<br /> | 0xB0 || u8 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || NewMapRegionBaseAddr<br /> |-<br /> | 0x48 || u64 || NewMapRegionEndAddr<br /> |-<br /> | 0x50 || u64 || TlsIoRegionBaseAddr<br /> |-<br /> | 0x58 || u64 || TlsIoRegionEndAddr<br /> |-<br /> | 0x60 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x68 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x70 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x80 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0x98 || u32 || AddressSpaceWidth (32/36/39)<br /> |-<br /> | 0x9C || bool || IsKernel<br /> |-<br /> | 0x9D || bool || IsSystem<br /> |-<br /> | 0x9E || bool || HasAslr<br /> |-<br /> | 0xA0 || u32 || PoolPartition<br /> |-<br /> | 0xA4 || u32 || Is_0x5A_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xA8 || u32 || Is_0x59_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xAC || u32 || Is_0x58_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xB0 || u64 || TranslationTableBaseRegister0<br /> |-<br /> | 0xB8 || u64 || TranslationControlRegister<br /> |-<br /> | 0xC0 || u32 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 5.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || NewMapRegionBaseAddr<br /> |-<br /> | 0x48 || u64 || NewMapRegionEndAddr<br /> |-<br /> | 0x50 || u64 || TlsIoRegionBaseAddr<br /> |-<br /> | 0x58 || u64 || TlsIoRegionEndAddr<br /> |-<br /> | 0x60 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x68 || || <br /> |-<br /> | 0x70 || || <br /> |-<br /> | 0x78 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x80 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x90 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0xA8 || u32 || ?<br /> |-<br /> | 0xAC || u32 || AddressSpaceWidth (32/36/39)<br /> |-<br /> | 0xB0 || [[#KLinkedList]]? || <br /> |-<br /> | 0xC8 || || <br /> |-<br /> | 0xD0 || || <br /> |-<br /> | 0xD8 || ptr || <br /> |-<br /> | 0xE0 || u64 || TranslationTableBaseRegister0 val<br /> |-<br /> | 0xE8 || u64 || TranslationControlRegister val<br /> |-<br /> | 0xF0 || u32 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPageTable ==<br /> Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || void* || RawPageTablePtr<br /> |-<br /> | 8 || bool ||<br /> |-<br /> | 0xC || u32 || AddrSpaceSizeInGb<br /> |}<br /> <br /> == KMemoryBlockManager ==<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KMemoryBlock]]* || MemoryBlockList<br /> |-<br /> | 8 || u64 || MaxAddr<br /> |-<br /> | 0x10 || u64 || MinAddr<br /> |}<br /> <br /> == KMemoryBlock ==<br /> Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KMemoryBlock]] *&gt; || NodeFor__MemoryBlockList<br /> |-<br /> | 0x10 || ||<br /> |-<br /> | 0x18 || ||<br /> |-<br /> | 0x20 || u64 || BaseAddress<br /> |-<br /> | 0x28 || u64 || NumOfPages<br /> |-<br /> | 0x30 || u32 || State<br /> |-<br /> | 0x34 || u16 || IpcRefCount [?]<br /> |-<br /> | 0x36 || u16 || DeviceMapRefCount<br /> |-<br /> | 0x38 || u8 || Permission<br /> |-<br /> | 0x39 || u8 || UnkAttribute<br /> |-<br /> | 0x3A || u8 || Attribute<br /> |}<br /> <br /> == KMemoryBlockInfo ==<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u64 || BaseAddress<br /> |-<br /> | 8 || u64 || Size<br /> |-<br /> | 0x10 || u32 || State<br /> |-<br /> | 0x14 || u8 || Permission<br /> |-<br /> | 0x15 || u8 || Attribute<br /> |-<br /> | 0x16 || u8 || UnkAttribute<br /> |-<br /> | 0x18 || u16 || IpcRefCount [?]<br /> |-<br /> | 0x1A || u16 || DeviceMapRefCount<br /> |}<br /> <br /> = KTransferMemory =<br /> Size: 0x48<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KProcess]]* || OwnerProcess<br /> |-<br /> | 0x30 || u64 || BaseAddress<br /> |-<br /> | 0x38 || KMutex || Mutex<br /> |-<br /> | 0x40 || int || Permission<br /> |-<br /> | 0x44 || bool || HasInited<br /> |-<br /> | 0x45 || bool || IsMapped<br /> |}<br /> <br /> = KSharedMemory =<br /> [1.0.0] Size: 0x40<br /> <br /> [2.0.0] Size: 0x48<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KProcess]]* || OwnerProcess<br /> |-<br /> | 0x30 || int || LocalPermission<br /> |-<br /> | 0x34 || int || RemotePermission<br /> |-<br /> | 0x38 || bool || HasInited<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KResourceLimit]]* || OwnerResourceLimit<br /> |-<br /> | 0x30 || u64 || OwnerProcessPid<br /> |-<br /> | 0x38 || int || LocalPermission<br /> |-<br /> | 0x3C || int || RemotePermission<br /> |-<br /> | 0x40 || bool || HasInited<br /> |}<br /> <br /> &lt;/div&gt;<br /> <br /> = KJitMemory =<br /> [4.0.0+] Size: 0x58<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x20 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x38 || [[#KProcess]]* || SrcProcessPtr<br /> |-<br /> | 0x40 || u64 || SrcAddr<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x50 || u8 || HasInit<br /> |-<br /> | 0x51 || u8 || HasMappedSlave<br /> |-<br /> | 0x52 || u8 || HasMappedMaster<br /> |}<br /> <br /> = KPort =<br /> Size: 0xA8<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KServerPort]] || ServerSide<br /> |-<br /> | 0x60 || [[#KClientPort]] || ClientSide<br /> |-<br /> | 0x98 || u64 ||<br /> |-<br /> | 0xA0 || bool || HasInited<br /> |-<br /> | 0xA1 || bool || IsLight<br /> |}<br /> <br /> == KServerPort ==<br /> Size: 0x50<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || [[#KLinkedListNode]] || IncomingConnections<br /> |-<br /> | 0x38 || [[#KLinkedListNode]] || IncomingLightConnections<br /> |-<br /> | 0x48 || [[#KPort]]* || Parent<br /> |}<br /> <br /> == KClientPort ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || u32 || NumSessions<br /> |-<br /> | 0x2C || u32 || MaxSessions<br /> |-<br /> | 0x30 || [[#KPort]]* || Parent<br /> |}<br /> <br /> = KSession =<br /> Size: 0xB0<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KServerSession]] || ServerSide<br /> |-<br /> | 0x70 || [[#KClientSession]] || ClientSide<br /> |-<br /> | 0xA8 || bool || HasInited<br /> |}<br /> <br /> == KServerSession ==<br /> Size: 0x60<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KLinkedListNode || NodeFor__IncomingConnections<br /> |-<br /> | 0x38 || [[#KSession*]] || Parent<br /> |-<br /> | 0x40 || KLinkedListNode&lt;[[#KSessionRequest]]*&gt; || RequestList<br /> |-<br /> | 0x50 || [[#KSessionRequest]]* || ActiveRequest<br /> |-<br /> | 0x58 || ||<br /> |}<br /> <br /> === KSessionRequest ===<br /> Size: 0x158<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 0x10 || KLinkedListNode || NodeFor__RequestList<br /> |-<br /> | 0x20 || [[#KBufferDescriptor]][8] || BufferTable<br /> |-<br /> | 0x120 || [[#KBufferDescriptor]]* || ExternalBufferTable<br /> |-<br /> | 0x128 || u8 || NumSendBuffers<br /> |-<br /> | 0x129 || u8 || NumRecvBuffers<br /> |-<br /> | 0x12A || u8 || NumExchBuffers<br /> |-<br /> | 0x130 || [[#KThread]]* || SenderThread<br /> |-<br /> | 0x138 || u64 || InitiallyZero<br /> |-<br /> | 0x140 || [[#KWritableEvent]]* || ForAsyncEvent<br /> |-<br /> | 0x148 || u64 || CustomCmdbufAddr<br /> |-<br /> | 0x150 || u64 || CustomCmdbufSize<br /> |}<br /> <br /> === KBufferDescriptor ===<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || UserVirtAddr<br /> |-<br /> | 8 || u64 || Size<br /> |-<br /> | 0x10 || u64 || <br /> |-<br /> | 0x18 || u64 || BufferMemoryState<br /> |-<br /> |}<br /> <br /> == KClientSession ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KSession]]* || Parent<br /> |-<br /> | 0x18 || bool || HasInited<br /> |-<br /> | 0x20 || [[#KClientPort]]* || ParentPort<br /> |-<br /> | 0x28 || ||<br /> |-<br /> | 0x30 || [[#KProcess]]* || CreatorProcess<br /> |}<br /> <br /> = KLightSession =<br /> Size: 0xA8<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLightSessionServer]] || ServerSide<br /> |-<br /> | 0x68 || [[#KLightSessionClient]] || ClientSide<br /> |-<br /> | 0xA0 || bool || HasInited<br /> |}<br /> <br /> == KLightServerSession ==<br /> Size: 0x58<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KLinkedListNode || NodeFor__IncomingLightConnections<br /> |-<br /> | 0x20 || [[#KLightSession]] || Parent<br /> |-<br /> | 0x28 || u64[6] ||<br /> |}<br /> <br /> == KLightClientSession ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLightSession]]* || Parent<br /> |-<br /> | 0x18 || bool || HasInited<br /> |-<br /> | 0x20 || [[#KClientPort]]* || Port<br /> |-<br /> | 0x28 || ||<br /> |-<br /> | 0x30 || [[#KProcess]]* || CreatorProcess<br /> |}<br /> <br /> = KEvent =<br /> Size: 0x70<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KReadableEvent]] || ReadableEvent<br /> |-<br /> | 0x48 || [[#KWritableEvent]] || WritableEvent<br /> |-<br /> | 0x60 || [[#KProcess]]* || Creator<br /> |-<br /> | 0x68 || bool || HasInited<br /> |}<br /> <br /> == KReadableEvent ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KSynchronizationEvent]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || bool ||<br /> |-<br /> | 0x30 || [[#KEvent]]* || Parent<br /> |}<br /> <br /> == KWritableEvent ==<br /> Size: 0x18<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KEvent]]* || Parent<br /> |}<br /> <br /> == KInterruptEvent ==<br /> [1.0.0] Size: 0x50<br /> <br /> [2.0.0] Size: 0x48<br /> <br /> Inherits from: [[#KReadableEvent]]<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KReadableEvent]] || Inheritance<br /> |-<br /> | 0x38 || [[#KInterruptReceiver]] || Receiver<br /> |-<br /> | 0x48 || u32 || IrqId (or -1)<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KReadableEvent]] || Inheritance<br /> |-<br /> | 0x38 || [[#KInterruptReceiver]]* || Receiver<br /> |-<br /> | 0x40 || u32 || IrqId (or -1)<br /> |-<br /> | 0x44 || bool || IsIrqRegistered<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KInterruptReceiver ===<br /> [1.0.0] Size: 0x10<br /> [2.0.0] Size: 0x20<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || InitiallyZero<br /> |-<br /> | 0x10 || [[#KInterruptEvent]]* || IrqEventPtr<br /> |-<br /> | 0x18 || s32 || IrqId<br /> |}<br /> &lt;/div&gt;<br /> <br /> = KDeviceAddressSpace =<br /> Size: 0x70<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x18 || [[#KSmmuManager]] || Manager<br /> |-<br /> | 0x58 || u64 || BaseAddress<br /> |-<br /> | 0x60 || u64 || Size<br /> |-<br /> | 0x68 || bool || HasInited<br /> |}<br /> <br /> [1.0.0] It was called KAddressSpace.<br /> <br /> == KSmmuManager ==<br /> Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u8[4] || PageTableAsids<br /> |-<br /> | 8 || void*[4] || PageDirectories<br /> |-<br /> | 0x28 || u64 || AttachedDevicesMask<br /> |-<br /> | 0x30 || u32 || RegVal32Bit<br /> |-<br /> | 0x34 || u32 || RegVal32BitEmpty<br /> |-<br /> | 0x38 || u32 || RegVal36Bit<br /> |-<br /> | 0x3C || u32 || RegVal36BitEmpty<br /> |}<br /> <br /> = KResourceLimit =<br /> Size: 0x68<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || u64[5] || CurrentValue<br /> |-<br /> | 0x38 || u64[5] || LimitValue<br /> |-<br /> | 0x60 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> = KPoolManager =<br /> [1.0.0] Size: 0x380<br /> <br /> [2.0.0] Size: 0x450<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolAllocator]][3] || Allocator<br /> |-<br /> | 0x348 || [[#KPoolRefManager]] || RefManager<br /> |-<br /> | 0x368 || u64 || AllocationCounter<br /> |-<br /> | 0x370 || u64 ||<br /> |-<br /> | 0x378 || [[#KMutex]] || Mutex<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolAllocator]] || Allocator0<br /> |-<br /> | 0x220 || [[#KPartitionInfo]]* || PartitionInfo0<br /> |-<br /> | 0x228 || [[#KPoolAllocator]] || Allocator1<br /> |-<br /> | 0x448 || [[#KPartitionInfo]]* || PartitionInfo1<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPoolAllocator ==<br /> [1.0.0] Size: 0x118<br /> <br /> [2.0.0] Size: 0x220<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || void* || MemoryBase<br /> |-<br /> | 8 || u64 || MemorySize<br /> |-<br /> | 0x10 || s32 || NumPools<br /> |-<br /> | 0x18 || [[#KPool]][8] || Pools<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || void* || MemoryBase<br /> |-<br /> | 8 || u64 || MemorySize<br /> |-<br /> | 0x10 || [[#KPool]][8] || Pools<br /> |-<br /> | 0x210 || s32 || NumPools<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KPool ===<br /> [1.0.0] Size: 0x20<br /> <br /> [2.0.0] Size: 0x40<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || KPoolHeader* || FirstFreeChunk<br /> |-<br /> | 8 || u64 ||<br /> |-<br /> | 0x10 || u64 ||<br /> |-<br /> | 0x18 || void* || SingletonTableEntryPtr<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || KPoolHeader* || FirstFreeChunk<br /> |-<br /> | 8 || u64 ||<br /> |-<br /> | 0x10 || u64 ||<br /> |-<br /> | 0x18 || void* || SingletonTableEntryPtr<br /> |-<br /> | 0x20 || [[#KPool]]* || Parent<br /> |-<br /> | 0x30 || u64[2] || DmaProtectionKey<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPoolRefManager ==<br /> [1.0.0] Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolManager]]* || Parent<br /> |-<br /> | 8 || void* || PoolBase<br /> |-<br /> | 0x10 || u64 || MaxPage<br /> |-<br /> | 0x18 || u16* || RefCountTable<br /> |}<br /> <br /> = KObjectAllocator =<br /> Size: 0x50<br /> [5.0.0]? Size: 0x48<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLockedList]] || LockedList <br /> |-<br /> | 0x28 || [[#KSlabHeap]] || SlabHeap <br /> |}<br /> <br /> <br /> = KSlabHeap =<br /> Size: 0x28<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || void* || FreeListHead <br /> |-<br /> | 0x8 || u64 || <br /> |-<br /> | 0x10 || void* || HeapPtr<br /> |-<br /> | 0x18 || u64 || TotalHeapSize<br /> |-<br /> | 0x20 || u64 || SingleObjectSize<br /> |}<br /> <br /> 5.0.0 (?):<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || void* || FreeListHead <br /> |-<br /> | 0x8 || u64 || SingleObjectSize<br /> |-<br /> | 0x10 || void* || HeapPtr<br /> |-<br /> | 0x18 || void* || Start (equal to HeapPtr on init)<br /> |-<br /> | 0x20 || void* || End<br /> |}<br /> <br /> = KPageTableAllocator =<br /> Size: 0x30<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 ||<br /> |-<br /> | 0x10 || u16* || RefCountTable<br /> |-<br /> | 0x10 || void* || BaseAddress<br /> |-<br /> | 0x18 || u64 || Size<br /> |-<br /> | 0x20 || u64 ||<br /> |-<br /> | 0x28 || u64 ||<br /> |}<br /> <br /> = KIrqManager =<br /> [1.0.0] Size: 0x1608<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KIrqEntry]][32] || Core0Irq<br /> |-<br /> | 0x200 || [[#KIrqEntry]][32] || Core1Irq<br /> |-<br /> | 0x400 || [[#KIrqEntry]][32] || Core2Irq<br /> |-<br /> | 0x600 || [[#KIrqEntry]][32] || Core3Irq<br /> |-<br /> | 0x800 || [[#KIrqEntry]][224] || SharedIrqs<br /> |-<br /> | 0x1600 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> == KIrqEntry ==<br /> [1.0.0] Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KIrqReciever*]] || Receiver<br /> |-<br /> | 8 || u8 || State0<br /> |-<br /> | 9 || u8 || State1<br /> |}<br /> <br /> = KDebug =<br /> Size: 0x50<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || [[#KLinkedListNode]]&lt;[[#KDebugEvent]]&gt; || EventList<br /> |-<br /> | 0x38 || u32 || Flags<br /> |-<br /> | 0x40 || [[#KProcess]]* || ProcessPtr<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> == KDebugEvent ==<br /> Size: 0x60<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KDebugEvent]] *&gt; || NodeFor__EventList<br /> |-<br /> | 0x10 || u32 || EventType<br /> |-<br /> | 0x14 || u32 || ThreadId<br /> |-<br /> | 0x18 || u32 || Flags<br /> |-<br /> | 0x1C || u16 ||<br /> |-<br /> | 0x1E || bool ||<br /> |-<br /> | 0x20 || ... || ...<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Kernel&diff=5048 2018-09-23T01:43:25Z

<p>Shinyquagsire23: /* KAutoObject */</p> <hr /> <div>= KAutoObject =<br /> Size: 0x10<br /> <br /> [5.0.0] Size: 0x20<br /> [6.0.0] Size: 0x30<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u32 || ReferenceCount<br /> |}<br /> <br /> [5.0.0]:<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u32 || ReferenceCount<br /> |-<br /> | 0x10 || KLinkedListNode || Intrusive list, links to other instances of the same class (managed by a KObjectAllocator).<br /> |}<br /> <br /> [6.0.0]:<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u32 || ReferenceCount<br /> |-<br /> | 0x10 || u64 || ?<br /> |-<br /> | 0x18 || ptr || ?<br /> |-<br /> | 0x20 || u64 || ?<br /> |-<br /> | 0x28 || u64 || ?<br /> |}<br /> <br /> = KSynchronizationObject =<br /> Size: 0x28<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLinkedList]] || ThreadSyncList<br /> |}<br /> <br /> = KMutex =<br /> Size: 0x8<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || OwnerTag<br /> |}<br /> <br /> = KRecursiveLock =<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KThread]] * || Owner<br /> |-<br /> | 8 || s32 || Count<br /> |}<br /> <br /> <br /> = KLockedList =<br /> Size: 0x28<br /> <br /> [5.0.0]? Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || Count<br /> |-<br /> | 8 || [[#KLinkedListNode]] || List<br /> |-<br /> | 0x18 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x20 || u64 || MaxCount<br /> |}<br /> <br /> [5.0.0]?:<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]] || List<br /> |-<br /> | 0x10 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x18 || u64 || MaxCount<br /> |}<br /> <br /> = KLinkedListNode =<br /> Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]* || Prev<br /> |-<br /> | 8 || [[#KLinkedListNode]]* || Next<br /> |}<br /> <br /> = KLinkedListEntry =<br /> Size: 0x10 + &lt;code&gt;sizeof(T)&lt;/code&gt;<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]] || NodeFor__List<br /> |-<br /> | 0x10 || T || Data<br /> |}<br /> <br /> = KLinkedList =<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || Count <br /> |-<br /> | 8 || [[#KLinkedListNode]] || Bounds (first, last)<br /> |}<br /> <br /> = KThread =<br /> [1.0.0] Size: 0x620<br /> [5.0.0]? Size: 0x6C0<br /> <br /> Inherits from: [[#KSynchronizationObject]], [[#KSchedulerObject0]], [[#KSchedulerObject1]], [[#KSchedulerObject2]]<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KSchedulerObject0 || Inheritance<br /> |-<br /> | 0x48 || KSchedulerObject1 || Inheritance<br /> |-<br /> | 0x58 || KSchedulerObject2 || Inheritance<br /> |-<br /> | 0x70 || KThreadContext || Context<br /> |-<br /> | 0x2F0 || u64 || CoreMask<br /> |-<br /> | 0x2F8 || u64 || CoreMaskOverride<br /> |-<br /> | 0x300 || u64 || ThreadId<br /> |-<br /> | 0x308 || u64 || TotalTimeRunning<br /> |-<br /> | 0x310 || [[#KSynchronizationObject]]* || SignalledObjectPtr<br /> |-<br /> | 0x318 || u64 ||<br /> |-<br /> | 0x320 || u64 || CondVar_CondVarUserAddr<br /> |-<br /> | 0x328 || u64 || Entrypoint<br /> |-<br /> | 0x330 || u64 || CondVar_MutexUserAddr<br /> |-<br /> | 0x338 || [[#KProcess]]* || ProcessPtr<br /> |-<br /> | 0x340 || void* || KernelThreadStack<br /> |-<br /> | 0x348 || u64 ||<br /> |-<br /> | 0x350 || void* || TlsKernelPtr<br /> |-<br /> | 0x358 || void* || TlsPhysicalPtr<br /> |-<br /> | 0x360 || [[#KSynchronizationObject]]*[0x40] || SyncObjects<br /> |-<br /> | 0x560 || [[#KThread]]* || CondVar_NextThreadPtr<br /> |-<br /> | 0x568 || [[#KThread]]* || CondVar_PrevThreadPtr<br /> |-<br /> | 0x570 || [[#KSynchronizationObject]]* || SignalledObjectPtr?<br /> |-<br /> | 0x578 || KLinkedListNode ||<br /> |-<br /> | 0x588 || KLinkedListNode ||<br /> |-<br /> | 0x598 || KLinkedListNode || NodeFor__ThreadList<br /> |-<br /> | 0x5A8 || KLinkedListNode || NodeFor__ThreadsOnSameCore<br /> |-<br /> | 0x5B8 || u64 ||<br /> |-<br /> | 0x5C0 || [[#KThread]]* || CondVar_SelfPtr<br /> |-<br /> | 0x5C8 || u64 ||<br /> |-<br /> | 0x5D0 || u64 ||<br /> |-<br /> | 0x5D8 || u64 ||<br /> |-<br /> | 0x5E0 || u32 || CondVar_WaitThreadHandle<br /> |-<br /> | 0x5E4 || u32 || SchedulingFlags_Default<br /> |-<br /> | 0x5E8 || u32 || WaitSync_RetVal<br /> |-<br /> | 0x5EC || u32 ||<br /> |-<br /> | 0x5F0 || u32 || ActualPriority<br /> |-<br /> | 0x5F4 || u32 ||<br /> |-<br /> | 0x5F8 || u32 ||<br /> |-<br /> | 0x5FC || u32 ||<br /> |-<br /> | 0x600 || u32 || WantedPriority<br /> |-<br /> | 0x604 || u32 || CpuCore<br /> |-<br /> | 0x608 || u8 || State<br /> |-<br /> | 0x609 || u8 || ShallBeTerminated<br /> |-<br /> | 0x60A || u8 ||<br /> |-<br /> | 0x60B || u8 ||<br /> |-<br /> | 0x60C || u8 ||<br /> |-<br /> | 0x60D || u8 ||<br /> |-<br /> | 0x60E || u8 || HasExited<br /> |-<br /> | 0x60F || u8 || HasCpuCoreOverride<br /> |-<br /> | ... || ... || ...<br /> |}<br /> <br /> = KProcess =<br /> [1.0.0] Size: 0x5B0<br /> <br /> [2.0.0] Size: 0x2480<br /> <br /> [3.0.0] Size: 0x2580<br /> <br /> [5.0.0] Size: 0x4600<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KProcessTerminationMessage || Sent to mailbox 0 when self-terminating.<br /> |-<br /> | 0x38 || [[#KMemoryManager]] || MemoryManager<br /> |-<br /> | 0xF0 || u64 || TotalMemUsage<br /> |-<br /> | 0xF8 || [[#KLinkedList]]&lt;[[#KTlsPageManager]]*&gt;&gt; || TlsPagesList<br /> |-<br /> | 0x110 || s32 || DefaultCpuCore<br /> |-<br /> | 0x118 || [[#KDebug]]* || Debug<br /> |-<br /> | 0x120 || [[#KResourceLimit]]* || ResourceLimit<br /> |-<br /> | 0x128 || u32 || State<br /> |-<br /> | 0x130 || [[#KMutex]] || ProcessMutex<br /> |-<br /> | 0x138 || [[#KMutex]] || ThreadingMutex<br /> |-<br /> | 0x140 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadArbiterList<br /> |-<br /> | 0x150 || KLinkedListNode ||<br /> |-<br /> | 0x160 || u64[4] || RandomEntropy<br /> |-<br /> | 0x180 || u8 || HasStateChanged<br /> |-<br /> | 0x181 || u8 || HasInitialized<br /> |-<br /> | 0x182 || u8 || IsSystem<br /> |-<br /> | 0x183 || u8[12+1] || ProcessName<br /> |-<br /> | 0x190 || u16 || NumberOfCreatedThreads<br /> |-<br /> | 0x192 || u16 || ThreadingRelatedInitiallyZero<br /> |-<br /> | 0x194 || u32 || ProcessFlags<br /> |-<br /> | 0x198 || [[#KProcessCapabilities]] || Capabilities<br /> |-<br /> | 0x248 || u64 || TitleId<br /> |-<br /> | 0x250 || u64 || ProcessId<br /> |-<br /> | 0x258 || u64 || CreatedTickstamp<br /> |-<br /> | 0x260 || u64 || Entrypoint<br /> |-<br /> | 0x268 || u64 || CodeMemUsage<br /> |-<br /> | 0x270 || u64 || DynamicMemUsage<br /> |-<br /> | 0x278 || u64 || MaxTotalMemUsage<br /> |-<br /> | 0x280 || u32 || ProcessCategory (0: regular title, 1: kernel built-in)<br /> |-<br /> | 0x288 || [[#KProcessHandleTable]] || HandleTable<br /> |-<br /> | 0x528 || void* || UsermodeExceptionTlsArea<br /> |-<br /> | 0x530 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ExceptionThreadList<br /> |-<br /> | 0x540 || [[#KThread]]* || ExceptionThread<br /> |-<br /> | 0x548 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadList<br /> |-<br /> | 0x558 || bool || HasStarted<br /> |-<br /> | 0x55C || u32 || UnusedZero<br /> |-<br /> | 0x560 || u64[2] || UnusedZeroes<br /> |-<br /> | 0x570 || u64 || TotalTimeRunning<br /> |-<br /> | 0x578 || u64[5] || UnusedZeroes<br /> |-<br /> | 0x5A0 || u64 || UnusedZero<br /> |-<br /> | 0x5A8 || u64 || UnusedZero<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KProcessTerminationMessage || Sent to mailbox 0 when self-terminating.<br /> |-<br /> | 0x38 || [[#KMemoryManager]] || MemoryManager<br /> |-<br /> | 0x100 || u64 || TotalMemUsage<br /> |-<br /> | 0x108 || [[#KLinkedList]]&lt;[[#KTlsPageManager]]*&gt; || TlsPagesList<br /> |-<br /> | 0x120 || s32 || DefaultCpuCore<br /> |-<br /> | 0x128 || [[#KDebug]]* || Debug<br /> |-<br /> | 0x130 || [[#KResourceLimit]]* || ResourceLimit<br /> |-<br /> | 0x138 || u32 || State<br /> |-<br /> | 0x140 || [[#KMutex]] || ProcessMutex<br /> |-<br /> | 0x148 || [[#KMutex]] || ThreadingMutex<br /> |-<br /> | 0x150 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadArbiterList<br /> |-<br /> | 0x160 || KLinkedListNode ||<br /> |-<br /> | 0x170 || u64[4] || RandomEntropy<br /> |-<br /> | 0x190 || u8 || HasStateChanged<br /> |-<br /> | 0x191 || u8 || HasInitialized<br /> |-<br /> | 0x192 || u8 || IsSystem<br /> |-<br /> | 0x193 || u8[12+1] || ProcessName<br /> |-<br /> | 0x1A0 || u16 || NumberOfCreatedThreads<br /> |-<br /> | 0x1A2 || u16 || ThreadingRelatedInitiallyZero<br /> |-<br /> | 0x1A4 || u32 || ProcessFlags<br /> |-<br /> | 0x1A8 || [[#KProcessCapabilities]] || Capabilities<br /> |-<br /> | 0x258 || u64 || TitleId<br /> |-<br /> | 0x260 || u64 || ProcessId<br /> |-<br /> | 0x268 || u64 || CreatedTickstamp<br /> |-<br /> | 0x270 || u64 || Entrypoint<br /> |-<br /> | 0x278 || u64 || CodeMemUsage<br /> |-<br /> | 0x280 || u64 || DynamicMemUsage<br /> |-<br /> | 0x288 || u64 || MaxTotalMemUsage<br /> |-<br /> | 0x290 || u32 || ProcessCategory (0: regular title, 1: kernel built-in)<br /> |-<br /> | 0x298 || u64[5] || Unused [?]<br /> |-<br /> | 0x2C0 || [[#KProcessHandleTable]] || HandleTable<br /> |-<br /> | 0x2380 || void* || UsermodeExceptionTlsArea<br /> |-<br /> | 0x2388 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ExceptionThreadList<br /> |-<br /> | 0x2398 || [[#KThread]]* || ExceptionThread<br /> |-<br /> | 0x23A0 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadList<br /> |-<br /> | 0x23B0 || [[#KLinkedListNode]]&lt;[[#KSharedMemoryRef]] *&gt; || MappedSharedMemoriesList<br /> |-<br /> | 0x23C0 || bool || HasStarted<br /> |-<br /> | 0x23C1 || bool || HasException<br /> |-<br /> | 0x23C4 || u32 || ExceptionEnum0<br /> |-<br /> | 0x23C8 || u64 || ExceptionEnum1<br /> |-<br /> | 0x23D0 || u64 || ExceptionThreadUnkInfo0<br /> |-<br /> | 0x23D8 || u64 || BreakArg0<br /> |-<br /> | 0x23E0 || u64 || BreakArg1<br /> |-<br /> | 0x23E8 || u64 || BreakArg2<br /> |-<br /> | 0x23F0 || u64 || ExceptionThreadUnkInfo1<br /> |-<br /> | 0x23F8 || u32 || UnusedZero<br /> |-<br /> | 0x2400 || u64[8] || UnusedZeroes<br /> |-<br /> | 0x2440 || u64 || UnusedZero<br /> |-<br /> | 0x2448 || u64 || UnusedZero<br /> |-<br /> | 0x2450 || u64[6] || Unused [?]<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KTlsPageManager ==<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || void* || TlsPagePtr<br /> |-<br /> | 8 || [[#KProcess*]] || ProcessPtr<br /> |-<br /> | 0x10 || u32 || UsageCount<br /> |-<br /> | 0x14 || u8[8] || IsSlotFree<br /> |}<br /> <br /> == KProcessCapabilities ==<br /> Size: 0xB0<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u8[16] || SvcAccessMask<br /> |-<br /> | 0x10 || u8[128] || IrqAccessMask<br /> |-<br /> | 0x90 || u64 || AllowedCpuIdBitmask<br /> |-<br /> | 0x98 || u64 || AllowedThreadPrioBitmask<br /> |-<br /> | 0xA0 || u32 || DebuggingFlags<br /> |-<br /> | 0xA4 || u32 || HandleTableSize<br /> |-<br /> | 0xA8 || u32 || KernelReleaseVersion<br /> |-<br /> | 0xAC || u32 || ApplicationType<br /> |}<br /> <br /> == KProcessHandleTable ==<br /> [1.0.0] Size: 0x2A0<br /> <br /> [2.0.0] Size: 0x20C0<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KHandleEntry]]* || TablePtr<br /> |-<br /> | 8 || [[#KHandleEntry]]* || NextFreeEntry<br /> |-<br /> | 0x10 || [[#KHandleEntry]][40] || InternalTable<br /> |-<br /> | 0x290 || u16 || Size<br /> |-<br /> | 0x292 || u16 || MaxUsageAtOnce<br /> |-<br /> | 0x294 || u16 || IdCounter<br /> |-<br /> | 0x296 || u16 || NumActiveSlots<br /> |-<br /> | 0x298 || [[#KSpinLock]] || Lock<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KHandleEntry]]* || TablePtr<br /> |-<br /> | 8 || [[#KHandleEntry]]* || NextFreeEntry<br /> |-<br /> | 0x10 || [[#KHandleEntry]][1024] || InternalTable<br /> |-<br /> | 0x2010 || u16 || Size<br /> |-<br /> | 0x2012 || u16 || MaxUsageAtOnce<br /> |-<br /> | 0x2014 || u16 || IdCounter<br /> |-<br /> | 0x2016 || u16 || NumActiveSlots<br /> |-<br /> | 0x2040 || [[#KSpinLock]] || Lock<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KHandleEntry ===<br /> [1.0.0] Size: 0x10<br /> <br /> [2.0.0] Size: 8<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 || HandleId<br /> |-<br /> | 2 || u8 || ObjectType<br /> |-<br /> | 8 || [[#KAutoObject]]* || Object<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 || HandleId<br /> |-<br /> | 2 || u8 || ObjectType<br /> |-<br /> | 4 || u32 || ObjectCompressedPtr<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KSpinLock ===<br /> [1.0.0] Size: 0x1<br /> <br /> [2.0.0] Size: 0x40<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u8 || IsBusy<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 ||<br /> |-<br /> | 0x20 || u16 ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KSharedMemoryRef ==<br /> [2.0.0] Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KSharedMemoryRef]] *&gt; || NodeFor__MappedSharedMemoriesList<br /> |-<br /> | 0x10 || [[#KSharedMemory*]] || SharedMem<br /> |-<br /> | 0x18 || u64 || InitiallyZero<br /> |}<br /> <br /> = KMemoryManager =<br /> [1.0.0] Size: 0xB8<br /> <br /> [2.0.0] Size: 0xC8<br /> <br /> [5.0.0] Size: 0xF8?<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x50 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x60 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0x78 || bool || IsKernel<br /> |-<br /> | 0x79 || bool || IsSystem<br /> |-<br /> | 0x7A || bool || IsAddrSpace36Bit<br /> |-<br /> | 0x7B || bool || HasAslr<br /> |-<br /> | 0x7C || u32 || Is_0x59_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x80 || u32 || Is_0x5A_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x84 || u32 || Is_0x58_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x88 || ||<br /> |-<br /> | 0x90 || ||<br /> |-<br /> | 0x98 || ||<br /> |-<br /> | 0xA0 || u64 || TranslationTableBaseRegister0<br /> |-<br /> | 0xA8 || u64 || TranslationControlRegister<br /> |-<br /> | 0xB0 || u8 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || NewMapRegionBaseAddr<br /> |-<br /> | 0x48 || u64 || NewMapRegionEndAddr<br /> |-<br /> | 0x50 || u64 || TlsIoRegionBaseAddr<br /> |-<br /> | 0x58 || u64 || TlsIoRegionEndAddr<br /> |-<br /> | 0x60 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x68 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x70 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x80 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0x98 || u32 || AddressSpaceWidth (32/36/39)<br /> |-<br /> | 0x9C || bool || IsKernel<br /> |-<br /> | 0x9D || bool || IsSystem<br /> |-<br /> | 0x9E || bool || HasAslr<br /> |-<br /> | 0xA0 || u32 || PoolPartition<br /> |-<br /> | 0xA4 || u32 || Is_0x5A_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xA8 || u32 || Is_0x59_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xAC || u32 || Is_0x58_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xB0 || u64 || TranslationTableBaseRegister0<br /> |-<br /> | 0xB8 || u64 || TranslationControlRegister<br /> |-<br /> | 0xC0 || u32 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 5.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || NewMapRegionBaseAddr<br /> |-<br /> | 0x48 || u64 || NewMapRegionEndAddr<br /> |-<br /> | 0x50 || u64 || TlsIoRegionBaseAddr<br /> |-<br /> | 0x58 || u64 || TlsIoRegionEndAddr<br /> |-<br /> | 0x60 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x68 || || <br /> |-<br /> | 0x70 || || <br /> |-<br /> | 0x78 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x80 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x90 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0xA8 || u32 || ?<br /> |-<br /> | 0xAC || u32 || AddressSpaceWidth (32/36/39)<br /> |-<br /> | 0xB0 || [[#KLinkedList]]? || <br /> |-<br /> | 0xC8 || || <br /> |-<br /> | 0xD0 || || <br /> |-<br /> | 0xD8 || ptr || <br /> |-<br /> | 0xE0 || u64 || TranslationTableBaseRegister0 val<br /> |-<br /> | 0xE8 || u64 || TranslationControlRegister val<br /> |-<br /> | 0xF0 || u32 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPageTable ==<br /> Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || void* || RawPageTablePtr<br /> |-<br /> | 8 || bool ||<br /> |-<br /> | 0xC || u32 || AddrSpaceSizeInGb<br /> |}<br /> <br /> == KMemoryBlockManager ==<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KMemoryBlock]]* || MemoryBlockList<br /> |-<br /> | 8 || u64 || MaxAddr<br /> |-<br /> | 0x10 || u64 || MinAddr<br /> |}<br /> <br /> == KMemoryBlock ==<br /> Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KMemoryBlock]] *&gt; || NodeFor__MemoryBlockList<br /> |-<br /> | 0x10 || ||<br /> |-<br /> | 0x18 || ||<br /> |-<br /> | 0x20 || u64 || BaseAddress<br /> |-<br /> | 0x28 || u64 || NumOfPages<br /> |-<br /> | 0x30 || u32 || State<br /> |-<br /> | 0x34 || u16 || IpcRefCount [?]<br /> |-<br /> | 0x36 || u16 || DeviceMapRefCount<br /> |-<br /> | 0x38 || u8 || Permission<br /> |-<br /> | 0x39 || u8 || UnkAttribute<br /> |-<br /> | 0x3A || u8 || Attribute<br /> |}<br /> <br /> == KMemoryBlockInfo ==<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u64 || BaseAddress<br /> |-<br /> | 8 || u64 || Size<br /> |-<br /> | 0x10 || u32 || State<br /> |-<br /> | 0x14 || u8 || Permission<br /> |-<br /> | 0x15 || u8 || Attribute<br /> |-<br /> | 0x16 || u8 || UnkAttribute<br /> |-<br /> | 0x18 || u16 || IpcRefCount [?]<br /> |-<br /> | 0x1A || u16 || DeviceMapRefCount<br /> |}<br /> <br /> = KTransferMemory =<br /> Size: 0x48<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KProcess]]* || OwnerProcess<br /> |-<br /> | 0x30 || u64 || BaseAddress<br /> |-<br /> | 0x38 || KMutex || Mutex<br /> |-<br /> | 0x40 || int || Permission<br /> |-<br /> | 0x44 || bool || HasInited<br /> |-<br /> | 0x45 || bool || IsMapped<br /> |}<br /> <br /> = KSharedMemory =<br /> [1.0.0] Size: 0x40<br /> <br /> [2.0.0] Size: 0x48<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KProcess]]* || OwnerProcess<br /> |-<br /> | 0x30 || int || LocalPermission<br /> |-<br /> | 0x34 || int || RemotePermission<br /> |-<br /> | 0x38 || bool || HasInited<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KResourceLimit]]* || OwnerResourceLimit<br /> |-<br /> | 0x30 || u64 || OwnerProcessPid<br /> |-<br /> | 0x38 || int || LocalPermission<br /> |-<br /> | 0x3C || int || RemotePermission<br /> |-<br /> | 0x40 || bool || HasInited<br /> |}<br /> <br /> &lt;/div&gt;<br /> <br /> = KJitMemory =<br /> [4.0.0+] Size: 0x58<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x20 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x38 || [[#KProcess]]* || SrcProcessPtr<br /> |-<br /> | 0x40 || u64 || SrcAddr<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x50 || u8 || HasInit<br /> |-<br /> | 0x51 || u8 || HasMappedSlave<br /> |-<br /> | 0x52 || u8 || HasMappedMaster<br /> |}<br /> <br /> = KPort =<br /> Size: 0xA8<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KServerPort]] || ServerSide<br /> |-<br /> | 0x60 || [[#KClientPort]] || ClientSide<br /> |-<br /> | 0x98 || u64 ||<br /> |-<br /> | 0xA0 || bool || HasInited<br /> |-<br /> | 0xA1 || bool || IsLight<br /> |}<br /> <br /> == KServerPort ==<br /> Size: 0x50<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || [[#KLinkedListNode]] || IncomingConnections<br /> |-<br /> | 0x38 || [[#KLinkedListNode]] || IncomingLightConnections<br /> |-<br /> | 0x48 || [[#KPort]]* || Parent<br /> |}<br /> <br /> == KClientPort ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || u32 || NumSessions<br /> |-<br /> | 0x2C || u32 || MaxSessions<br /> |-<br /> | 0x30 || [[#KPort]]* || Parent<br /> |}<br /> <br /> = KSession =<br /> Size: 0xB0<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KServerSession]] || ServerSide<br /> |-<br /> | 0x70 || [[#KClientSession]] || ClientSide<br /> |-<br /> | 0xA8 || bool || HasInited<br /> |}<br /> <br /> == KServerSession ==<br /> Size: 0x60<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KLinkedListNode || NodeFor__IncomingConnections<br /> |-<br /> | 0x38 || [[#KSession*]] || Parent<br /> |-<br /> | 0x40 || KLinkedListNode&lt;[[#KSessionRequest]]*&gt; || RequestList<br /> |-<br /> | 0x50 || [[#KSessionRequest]]* || ActiveRequest<br /> |-<br /> | 0x58 || ||<br /> |}<br /> <br /> === KSessionRequest ===<br /> Size: 0x158<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 0x10 || KLinkedListNode || NodeFor__RequestList<br /> |-<br /> | 0x20 || [[#KBufferDescriptor]][8] || BufferTable<br /> |-<br /> | 0x120 || [[#KBufferDescriptor]]* || ExternalBufferTable<br /> |-<br /> | 0x128 || u8 || NumSendBuffers<br /> |-<br /> | 0x129 || u8 || NumRecvBuffers<br /> |-<br /> | 0x12A || u8 || NumExchBuffers<br /> |-<br /> | 0x130 || [[#KThread]]* || SenderThread<br /> |-<br /> | 0x138 || u64 || InitiallyZero<br /> |-<br /> | 0x140 || [[#KWritableEvent]]* || ForAsyncEvent<br /> |-<br /> | 0x148 || u64 || CustomCmdbufAddr<br /> |-<br /> | 0x150 || u64 || CustomCmdbufSize<br /> |}<br /> <br /> === KBufferDescriptor ===<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || UserVirtAddr<br /> |-<br /> | 8 || u64 || Size<br /> |-<br /> | 0x10 || u64 || <br /> |-<br /> | 0x18 || u64 || BufferMemoryState<br /> |-<br /> |}<br /> <br /> == KClientSession ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KSession]]* || Parent<br /> |-<br /> | 0x18 || bool || HasInited<br /> |-<br /> | 0x20 || [[#KClientPort]]* || ParentPort<br /> |-<br /> | 0x28 || ||<br /> |-<br /> | 0x30 || [[#KProcess]]* || CreatorProcess<br /> |}<br /> <br /> = KLightSession =<br /> Size: 0xA8<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLightSessionServer]] || ServerSide<br /> |-<br /> | 0x68 || [[#KLightSessionClient]] || ClientSide<br /> |-<br /> | 0xA0 || bool || HasInited<br /> |}<br /> <br /> == KLightServerSession ==<br /> Size: 0x58<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KLinkedListNode || NodeFor__IncomingLightConnections<br /> |-<br /> | 0x20 || [[#KLightSession]] || Parent<br /> |-<br /> | 0x28 || u64[6] ||<br /> |}<br /> <br /> == KLightClientSession ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLightSession]]* || Parent<br /> |-<br /> | 0x18 || bool || HasInited<br /> |-<br /> | 0x20 || [[#KClientPort]]* || Port<br /> |-<br /> | 0x28 || ||<br /> |-<br /> | 0x30 || [[#KProcess]]* || CreatorProcess<br /> |}<br /> <br /> = KEvent =<br /> Size: 0x70<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KReadableEvent]] || ReadableEvent<br /> |-<br /> | 0x48 || [[#KWritableEvent]] || WritableEvent<br /> |-<br /> | 0x60 || [[#KProcess]]* || Creator<br /> |-<br /> | 0x68 || bool || HasInited<br /> |}<br /> <br /> == KReadableEvent ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KSynchronizationEvent]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || bool ||<br /> |-<br /> | 0x30 || [[#KEvent]]* || Parent<br /> |}<br /> <br /> == KWritableEvent ==<br /> Size: 0x18<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KEvent]]* || Parent<br /> |}<br /> <br /> == KInterruptEvent ==<br /> [1.0.0] Size: 0x50<br /> <br /> [2.0.0] Size: 0x48<br /> <br /> Inherits from: [[#KReadableEvent]]<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KReadableEvent]] || Inheritance<br /> |-<br /> | 0x38 || [[#KInterruptReceiver]] || Receiver<br /> |-<br /> | 0x48 || u32 || IrqId (or -1)<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KReadableEvent]] || Inheritance<br /> |-<br /> | 0x38 || [[#KInterruptReceiver]]* || Receiver<br /> |-<br /> | 0x40 || u32 || IrqId (or -1)<br /> |-<br /> | 0x44 || bool || IsIrqRegistered<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KInterruptReceiver ===<br /> [1.0.0] Size: 0x10<br /> [2.0.0] Size: 0x20<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || InitiallyZero<br /> |-<br /> | 0x10 || [[#KInterruptEvent]]* || IrqEventPtr<br /> |-<br /> | 0x18 || s32 || IrqId<br /> |}<br /> &lt;/div&gt;<br /> <br /> = KDeviceAddressSpace =<br /> Size: 0x70<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x18 || [[#KSmmuManager]] || Manager<br /> |-<br /> | 0x58 || u64 || BaseAddress<br /> |-<br /> | 0x60 || u64 || Size<br /> |-<br /> | 0x68 || bool || HasInited<br /> |}<br /> <br /> [1.0.0] It was called KAddressSpace.<br /> <br /> == KSmmuManager ==<br /> Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u8[4] || PageTableAsids<br /> |-<br /> | 8 || void*[4] || PageDirectories<br /> |-<br /> | 0x28 || u64 || AttachedDevicesMask<br /> |-<br /> | 0x30 || u32 || RegVal32Bit<br /> |-<br /> | 0x34 || u32 || RegVal32BitEmpty<br /> |-<br /> | 0x38 || u32 || RegVal36Bit<br /> |-<br /> | 0x3C || u32 || RegVal36BitEmpty<br /> |}<br /> <br /> = KResourceLimit =<br /> Size: 0x68<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || u64[5] || CurrentValue<br /> |-<br /> | 0x38 || u64[5] || LimitValue<br /> |-<br /> | 0x60 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> = KPoolManager =<br /> [1.0.0] Size: 0x380<br /> <br /> [2.0.0] Size: 0x450<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolAllocator]][3] || Allocator<br /> |-<br /> | 0x348 || [[#KPoolRefManager]] || RefManager<br /> |-<br /> | 0x368 || u64 || AllocationCounter<br /> |-<br /> | 0x370 || u64 ||<br /> |-<br /> | 0x378 || [[#KMutex]] || Mutex<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolAllocator]] || Allocator0<br /> |-<br /> | 0x220 || [[#KPartitionInfo]]* || PartitionInfo0<br /> |-<br /> | 0x228 || [[#KPoolAllocator]] || Allocator1<br /> |-<br /> | 0x448 || [[#KPartitionInfo]]* || PartitionInfo1<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPoolAllocator ==<br /> [1.0.0] Size: 0x118<br /> <br /> [2.0.0] Size: 0x220<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || void* || MemoryBase<br /> |-<br /> | 8 || u64 || MemorySize<br /> |-<br /> | 0x10 || s32 || NumPools<br /> |-<br /> | 0x18 || [[#KPool]][8] || Pools<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || void* || MemoryBase<br /> |-<br /> | 8 || u64 || MemorySize<br /> |-<br /> | 0x10 || [[#KPool]][8] || Pools<br /> |-<br /> | 0x210 || s32 || NumPools<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KPool ===<br /> [1.0.0] Size: 0x20<br /> <br /> [2.0.0] Size: 0x40<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || KPoolHeader* || FirstFreeChunk<br /> |-<br /> | 8 || u64 ||<br /> |-<br /> | 0x10 || u64 ||<br /> |-<br /> | 0x18 || void* || SingletonTableEntryPtr<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || KPoolHeader* || FirstFreeChunk<br /> |-<br /> | 8 || u64 ||<br /> |-<br /> | 0x10 || u64 ||<br /> |-<br /> | 0x18 || void* || SingletonTableEntryPtr<br /> |-<br /> | 0x20 || [[#KPool]]* || Parent<br /> |-<br /> | 0x30 || u64[2] || DmaProtectionKey<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPoolRefManager ==<br /> [1.0.0] Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolManager]]* || Parent<br /> |-<br /> | 8 || void* || PoolBase<br /> |-<br /> | 0x10 || u64 || MaxPage<br /> |-<br /> | 0x18 || u16* || RefCountTable<br /> |}<br /> <br /> = KObjectAllocator =<br /> Size: 0x50<br /> [5.0.0]? Size: 0x48<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLockedList]] || LockedList <br /> |-<br /> | 0x28 || [[#KSlabHeap]] || SlabHeap <br /> |}<br /> <br /> <br /> = KSlabHeap =<br /> Size: 0x28<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || void* || FreeListHead <br /> |-<br /> | 0x8 || u64 || <br /> |-<br /> | 0x10 || void* || HeapPtr<br /> |-<br /> | 0x18 || u64 || TotalHeapSize<br /> |-<br /> | 0x20 || u64 || SingleObjectSize<br /> |}<br /> <br /> 5.0.0 (?):<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || void* || FreeListHead <br /> |-<br /> | 0x8 || u64 || SingleObjectSize<br /> |-<br /> | 0x10 || void* || HeapPtr<br /> |-<br /> | 0x18 || void* || Start (equal to HeapPtr on init)<br /> |-<br /> | 0x20 || void* || End<br /> |}<br /> <br /> = KPageTableAllocator =<br /> Size: 0x30<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 ||<br /> |-<br /> | 0x10 || u16* || RefCountTable<br /> |-<br /> | 0x10 || void* || BaseAddress<br /> |-<br /> | 0x18 || u64 || Size<br /> |-<br /> | 0x20 || u64 ||<br /> |-<br /> | 0x28 || u64 ||<br /> |}<br /> <br /> = KIrqManager =<br /> [1.0.0] Size: 0x1608<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KIrqEntry]][32] || Core0Irq<br /> |-<br /> | 0x200 || [[#KIrqEntry]][32] || Core1Irq<br /> |-<br /> | 0x400 || [[#KIrqEntry]][32] || Core2Irq<br /> |-<br /> | 0x600 || [[#KIrqEntry]][32] || Core3Irq<br /> |-<br /> | 0x800 || [[#KIrqEntry]][224] || SharedIrqs<br /> |-<br /> | 0x1600 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> == KIrqEntry ==<br /> [1.0.0] Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KIrqReciever*]] || Receiver<br /> |-<br /> | 8 || u8 || State0<br /> |-<br /> | 9 || u8 || State1<br /> |}<br /> <br /> = KDebug =<br /> Size: 0x50<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || [[#KLinkedListNode]]&lt;[[#KDebugEvent]]&gt; || EventList<br /> |-<br /> | 0x38 || u32 || Flags<br /> |-<br /> | 0x40 || [[#KProcess]]* || ProcessPtr<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> == KDebugEvent ==<br /> Size: 0x60<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KDebugEvent]] *&gt; || NodeFor__EventList<br /> |-<br /> | 0x10 || u32 || EventType<br /> |-<br /> | 0x14 || u32 || ThreadId<br /> |-<br /> | 0x18 || u32 || Flags<br /> |-<br /> | 0x1C || u16 ||<br /> |-<br /> | 0x1E || bool ||<br /> |-<br /> | 0x20 || ... || ...<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Kernel&diff=5047 2018-09-23T01:22:53Z

<p>Shinyquagsire23: </p> <hr /> <div>= KAutoObject =<br /> Size: 0x10<br /> [5.0.0] Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u32 || ReferenceCount<br /> |}<br /> <br /> [5.0.0]:<br /> <br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u32 || ReferenceCount<br /> |-<br /> | 0x10 || KLinkedListNode || Intrusive list, links to other instances of the same class (managed by a KObjectAllocator).<br /> |}<br /> <br /> = KSynchronizationObject =<br /> Size: 0x28<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLinkedList]] || ThreadSyncList<br /> |}<br /> <br /> = KMutex =<br /> Size: 0x8<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || OwnerTag<br /> |}<br /> <br /> = KRecursiveLock =<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KThread]] * || Owner<br /> |-<br /> | 8 || s32 || Count<br /> |}<br /> <br /> <br /> = KLockedList =<br /> Size: 0x28<br /> <br /> [5.0.0]? Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || Count<br /> |-<br /> | 8 || [[#KLinkedListNode]] || List<br /> |-<br /> | 0x18 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x20 || u64 || MaxCount<br /> |}<br /> <br /> [5.0.0]?:<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]] || List<br /> |-<br /> | 0x10 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x18 || u64 || MaxCount<br /> |}<br /> <br /> = KLinkedListNode =<br /> Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]* || Prev<br /> |-<br /> | 8 || [[#KLinkedListNode]]* || Next<br /> |}<br /> <br /> = KLinkedListEntry =<br /> Size: 0x10 + &lt;code&gt;sizeof(T)&lt;/code&gt;<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]] || NodeFor__List<br /> |-<br /> | 0x10 || T || Data<br /> |}<br /> <br /> = KLinkedList =<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || Count <br /> |-<br /> | 8 || [[#KLinkedListNode]] || Bounds (first, last)<br /> |}<br /> <br /> = KThread =<br /> [1.0.0] Size: 0x620<br /> [5.0.0]? Size: 0x6C0<br /> <br /> Inherits from: [[#KSynchronizationObject]], [[#KSchedulerObject0]], [[#KSchedulerObject1]], [[#KSchedulerObject2]]<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KSchedulerObject0 || Inheritance<br /> |-<br /> | 0x48 || KSchedulerObject1 || Inheritance<br /> |-<br /> | 0x58 || KSchedulerObject2 || Inheritance<br /> |-<br /> | 0x70 || KThreadContext || Context<br /> |-<br /> | 0x2F0 || u64 || CoreMask<br /> |-<br /> | 0x2F8 || u64 || CoreMaskOverride<br /> |-<br /> | 0x300 || u64 || ThreadId<br /> |-<br /> | 0x308 || u64 || TotalTimeRunning<br /> |-<br /> | 0x310 || [[#KSynchronizationObject]]* || SignalledObjectPtr<br /> |-<br /> | 0x318 || u64 ||<br /> |-<br /> | 0x320 || u64 || CondVar_CondVarUserAddr<br /> |-<br /> | 0x328 || u64 || Entrypoint<br /> |-<br /> | 0x330 || u64 || CondVar_MutexUserAddr<br /> |-<br /> | 0x338 || [[#KProcess]]* || ProcessPtr<br /> |-<br /> | 0x340 || void* || KernelThreadStack<br /> |-<br /> | 0x348 || u64 ||<br /> |-<br /> | 0x350 || void* || TlsKernelPtr<br /> |-<br /> | 0x358 || void* || TlsPhysicalPtr<br /> |-<br /> | 0x360 || [[#KSynchronizationObject]]*[0x40] || SyncObjects<br /> |-<br /> | 0x560 || [[#KThread]]* || CondVar_NextThreadPtr<br /> |-<br /> | 0x568 || [[#KThread]]* || CondVar_PrevThreadPtr<br /> |-<br /> | 0x570 || [[#KSynchronizationObject]]* || SignalledObjectPtr?<br /> |-<br /> | 0x578 || KLinkedListNode ||<br /> |-<br /> | 0x588 || KLinkedListNode ||<br /> |-<br /> | 0x598 || KLinkedListNode || NodeFor__ThreadList<br /> |-<br /> | 0x5A8 || KLinkedListNode || NodeFor__ThreadsOnSameCore<br /> |-<br /> | 0x5B8 || u64 ||<br /> |-<br /> | 0x5C0 || [[#KThread]]* || CondVar_SelfPtr<br /> |-<br /> | 0x5C8 || u64 ||<br /> |-<br /> | 0x5D0 || u64 ||<br /> |-<br /> | 0x5D8 || u64 ||<br /> |-<br /> | 0x5E0 || u32 || CondVar_WaitThreadHandle<br /> |-<br /> | 0x5E4 || u32 || SchedulingFlags_Default<br /> |-<br /> | 0x5E8 || u32 || WaitSync_RetVal<br /> |-<br /> | 0x5EC || u32 ||<br /> |-<br /> | 0x5F0 || u32 || ActualPriority<br /> |-<br /> | 0x5F4 || u32 ||<br /> |-<br /> | 0x5F8 || u32 ||<br /> |-<br /> | 0x5FC || u32 ||<br /> |-<br /> | 0x600 || u32 || WantedPriority<br /> |-<br /> | 0x604 || u32 || CpuCore<br /> |-<br /> | 0x608 || u8 || State<br /> |-<br /> | 0x609 || u8 || ShallBeTerminated<br /> |-<br /> | 0x60A || u8 ||<br /> |-<br /> | 0x60B || u8 ||<br /> |-<br /> | 0x60C || u8 ||<br /> |-<br /> | 0x60D || u8 ||<br /> |-<br /> | 0x60E || u8 || HasExited<br /> |-<br /> | 0x60F || u8 || HasCpuCoreOverride<br /> |-<br /> | ... || ... || ...<br /> |}<br /> <br /> = KProcess =<br /> [1.0.0] Size: 0x5B0<br /> <br /> [2.0.0] Size: 0x2480<br /> <br /> [3.0.0] Size: 0x2580<br /> <br /> [5.0.0] Size: 0x4600<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KProcessTerminationMessage || Sent to mailbox 0 when self-terminating.<br /> |-<br /> | 0x38 || [[#KMemoryManager]] || MemoryManager<br /> |-<br /> | 0xF0 || u64 || TotalMemUsage<br /> |-<br /> | 0xF8 || [[#KLinkedList]]&lt;[[#KTlsPageManager]]*&gt;&gt; || TlsPagesList<br /> |-<br /> | 0x110 || s32 || DefaultCpuCore<br /> |-<br /> | 0x118 || [[#KDebug]]* || Debug<br /> |-<br /> | 0x120 || [[#KResourceLimit]]* || ResourceLimit<br /> |-<br /> | 0x128 || u32 || State<br /> |-<br /> | 0x130 || [[#KMutex]] || ProcessMutex<br /> |-<br /> | 0x138 || [[#KMutex]] || ThreadingMutex<br /> |-<br /> | 0x140 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadArbiterList<br /> |-<br /> | 0x150 || KLinkedListNode ||<br /> |-<br /> | 0x160 || u64[4] || RandomEntropy<br /> |-<br /> | 0x180 || u8 || HasStateChanged<br /> |-<br /> | 0x181 || u8 || HasInitialized<br /> |-<br /> | 0x182 || u8 || IsSystem<br /> |-<br /> | 0x183 || u8[12+1] || ProcessName<br /> |-<br /> | 0x190 || u16 || NumberOfCreatedThreads<br /> |-<br /> | 0x192 || u16 || ThreadingRelatedInitiallyZero<br /> |-<br /> | 0x194 || u32 || ProcessFlags<br /> |-<br /> | 0x198 || [[#KProcessCapabilities]] || Capabilities<br /> |-<br /> | 0x248 || u64 || TitleId<br /> |-<br /> | 0x250 || u64 || ProcessId<br /> |-<br /> | 0x258 || u64 || CreatedTickstamp<br /> |-<br /> | 0x260 || u64 || Entrypoint<br /> |-<br /> | 0x268 || u64 || CodeMemUsage<br /> |-<br /> | 0x270 || u64 || DynamicMemUsage<br /> |-<br /> | 0x278 || u64 || MaxTotalMemUsage<br /> |-<br /> | 0x280 || u32 || ProcessCategory (0: regular title, 1: kernel built-in)<br /> |-<br /> | 0x288 || [[#KProcessHandleTable]] || HandleTable<br /> |-<br /> | 0x528 || void* || UsermodeExceptionTlsArea<br /> |-<br /> | 0x530 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ExceptionThreadList<br /> |-<br /> | 0x540 || [[#KThread]]* || ExceptionThread<br /> |-<br /> | 0x548 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadList<br /> |-<br /> | 0x558 || bool || HasStarted<br /> |-<br /> | 0x55C || u32 || UnusedZero<br /> |-<br /> | 0x560 || u64[2] || UnusedZeroes<br /> |-<br /> | 0x570 || u64 || TotalTimeRunning<br /> |-<br /> | 0x578 || u64[5] || UnusedZeroes<br /> |-<br /> | 0x5A0 || u64 || UnusedZero<br /> |-<br /> | 0x5A8 || u64 || UnusedZero<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KProcessTerminationMessage || Sent to mailbox 0 when self-terminating.<br /> |-<br /> | 0x38 || [[#KMemoryManager]] || MemoryManager<br /> |-<br /> | 0x100 || u64 || TotalMemUsage<br /> |-<br /> | 0x108 || [[#KLinkedList]]&lt;[[#KTlsPageManager]]*&gt; || TlsPagesList<br /> |-<br /> | 0x120 || s32 || DefaultCpuCore<br /> |-<br /> | 0x128 || [[#KDebug]]* || Debug<br /> |-<br /> | 0x130 || [[#KResourceLimit]]* || ResourceLimit<br /> |-<br /> | 0x138 || u32 || State<br /> |-<br /> | 0x140 || [[#KMutex]] || ProcessMutex<br /> |-<br /> | 0x148 || [[#KMutex]] || ThreadingMutex<br /> |-<br /> | 0x150 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadArbiterList<br /> |-<br /> | 0x160 || KLinkedListNode ||<br /> |-<br /> | 0x170 || u64[4] || RandomEntropy<br /> |-<br /> | 0x190 || u8 || HasStateChanged<br /> |-<br /> | 0x191 || u8 || HasInitialized<br /> |-<br /> | 0x192 || u8 || IsSystem<br /> |-<br /> | 0x193 || u8[12+1] || ProcessName<br /> |-<br /> | 0x1A0 || u16 || NumberOfCreatedThreads<br /> |-<br /> | 0x1A2 || u16 || ThreadingRelatedInitiallyZero<br /> |-<br /> | 0x1A4 || u32 || ProcessFlags<br /> |-<br /> | 0x1A8 || [[#KProcessCapabilities]] || Capabilities<br /> |-<br /> | 0x258 || u64 || TitleId<br /> |-<br /> | 0x260 || u64 || ProcessId<br /> |-<br /> | 0x268 || u64 || CreatedTickstamp<br /> |-<br /> | 0x270 || u64 || Entrypoint<br /> |-<br /> | 0x278 || u64 || CodeMemUsage<br /> |-<br /> | 0x280 || u64 || DynamicMemUsage<br /> |-<br /> | 0x288 || u64 || MaxTotalMemUsage<br /> |-<br /> | 0x290 || u32 || ProcessCategory (0: regular title, 1: kernel built-in)<br /> |-<br /> | 0x298 || u64[5] || Unused [?]<br /> |-<br /> | 0x2C0 || [[#KProcessHandleTable]] || HandleTable<br /> |-<br /> | 0x2380 || void* || UsermodeExceptionTlsArea<br /> |-<br /> | 0x2388 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ExceptionThreadList<br /> |-<br /> | 0x2398 || [[#KThread]]* || ExceptionThread<br /> |-<br /> | 0x23A0 || [[#KLinkedListNode]]&lt;[[#KThread]] *&gt; || ThreadList<br /> |-<br /> | 0x23B0 || [[#KLinkedListNode]]&lt;[[#KSharedMemoryRef]] *&gt; || MappedSharedMemoriesList<br /> |-<br /> | 0x23C0 || bool || HasStarted<br /> |-<br /> | 0x23C1 || bool || HasException<br /> |-<br /> | 0x23C4 || u32 || ExceptionEnum0<br /> |-<br /> | 0x23C8 || u64 || ExceptionEnum1<br /> |-<br /> | 0x23D0 || u64 || ExceptionThreadUnkInfo0<br /> |-<br /> | 0x23D8 || u64 || BreakArg0<br /> |-<br /> | 0x23E0 || u64 || BreakArg1<br /> |-<br /> | 0x23E8 || u64 || BreakArg2<br /> |-<br /> | 0x23F0 || u64 || ExceptionThreadUnkInfo1<br /> |-<br /> | 0x23F8 || u32 || UnusedZero<br /> |-<br /> | 0x2400 || u64[8] || UnusedZeroes<br /> |-<br /> | 0x2440 || u64 || UnusedZero<br /> |-<br /> | 0x2448 || u64 || UnusedZero<br /> |-<br /> | 0x2450 || u64[6] || Unused [?]<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KTlsPageManager ==<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || void* || TlsPagePtr<br /> |-<br /> | 8 || [[#KProcess*]] || ProcessPtr<br /> |-<br /> | 0x10 || u32 || UsageCount<br /> |-<br /> | 0x14 || u8[8] || IsSlotFree<br /> |}<br /> <br /> == KProcessCapabilities ==<br /> Size: 0xB0<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u8[16] || SvcAccessMask<br /> |-<br /> | 0x10 || u8[128] || IrqAccessMask<br /> |-<br /> | 0x90 || u64 || AllowedCpuIdBitmask<br /> |-<br /> | 0x98 || u64 || AllowedThreadPrioBitmask<br /> |-<br /> | 0xA0 || u32 || DebuggingFlags<br /> |-<br /> | 0xA4 || u32 || HandleTableSize<br /> |-<br /> | 0xA8 || u32 || KernelReleaseVersion<br /> |-<br /> | 0xAC || u32 || ApplicationType<br /> |}<br /> <br /> == KProcessHandleTable ==<br /> [1.0.0] Size: 0x2A0<br /> <br /> [2.0.0] Size: 0x20C0<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KHandleEntry]]* || TablePtr<br /> |-<br /> | 8 || [[#KHandleEntry]]* || NextFreeEntry<br /> |-<br /> | 0x10 || [[#KHandleEntry]][40] || InternalTable<br /> |-<br /> | 0x290 || u16 || Size<br /> |-<br /> | 0x292 || u16 || MaxUsageAtOnce<br /> |-<br /> | 0x294 || u16 || IdCounter<br /> |-<br /> | 0x296 || u16 || NumActiveSlots<br /> |-<br /> | 0x298 || [[#KSpinLock]] || Lock<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KHandleEntry]]* || TablePtr<br /> |-<br /> | 8 || [[#KHandleEntry]]* || NextFreeEntry<br /> |-<br /> | 0x10 || [[#KHandleEntry]][1024] || InternalTable<br /> |-<br /> | 0x2010 || u16 || Size<br /> |-<br /> | 0x2012 || u16 || MaxUsageAtOnce<br /> |-<br /> | 0x2014 || u16 || IdCounter<br /> |-<br /> | 0x2016 || u16 || NumActiveSlots<br /> |-<br /> | 0x2040 || [[#KSpinLock]] || Lock<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KHandleEntry ===<br /> [1.0.0] Size: 0x10<br /> <br /> [2.0.0] Size: 8<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 || HandleId<br /> |-<br /> | 2 || u8 || ObjectType<br /> |-<br /> | 8 || [[#KAutoObject]]* || Object<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 || HandleId<br /> |-<br /> | 2 || u8 || ObjectType<br /> |-<br /> | 4 || u32 || ObjectCompressedPtr<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KSpinLock ===<br /> [1.0.0] Size: 0x1<br /> <br /> [2.0.0] Size: 0x40<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u8 || IsBusy<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || u16 ||<br /> |-<br /> | 0x20 || u16 ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KSharedMemoryRef ==<br /> [2.0.0] Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KSharedMemoryRef]] *&gt; || NodeFor__MappedSharedMemoriesList<br /> |-<br /> | 0x10 || [[#KSharedMemory*]] || SharedMem<br /> |-<br /> | 0x18 || u64 || InitiallyZero<br /> |}<br /> <br /> = KMemoryManager =<br /> [1.0.0] Size: 0xB8<br /> <br /> [2.0.0] Size: 0xC8<br /> <br /> [5.0.0] Size: 0xF8?<br /> <br /> &lt;div style=&quot;display: inline-block&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x50 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x60 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0x78 || bool || IsKernel<br /> |-<br /> | 0x79 || bool || IsSystem<br /> |-<br /> | 0x7A || bool || IsAddrSpace36Bit<br /> |-<br /> | 0x7B || bool || HasAslr<br /> |-<br /> | 0x7C || u32 || Is_0x59_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x80 || u32 || Is_0x5A_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x84 || u32 || Is_0x58_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0x88 || ||<br /> |-<br /> | 0x90 || ||<br /> |-<br /> | 0x98 || ||<br /> |-<br /> | 0xA0 || u64 || TranslationTableBaseRegister0<br /> |-<br /> | 0xA8 || u64 || TranslationControlRegister<br /> |-<br /> | 0xB0 || u8 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || NewMapRegionBaseAddr<br /> |-<br /> | 0x48 || u64 || NewMapRegionEndAddr<br /> |-<br /> | 0x50 || u64 || TlsIoRegionBaseAddr<br /> |-<br /> | 0x58 || u64 || TlsIoRegionEndAddr<br /> |-<br /> | 0x60 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x68 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x70 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x80 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0x98 || u32 || AddressSpaceWidth (32/36/39)<br /> |-<br /> | 0x9C || bool || IsKernel<br /> |-<br /> | 0x9D || bool || IsSystem<br /> |-<br /> | 0x9E || bool || HasAslr<br /> |-<br /> | 0xA0 || u32 || PoolPartition<br /> |-<br /> | 0xA4 || u32 || Is_0x5A_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xA8 || u32 || Is_0x59_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xAC || u32 || Is_0x58_If_Cfg12_Bit0_ElseZero<br /> |-<br /> | 0xB0 || u64 || TranslationTableBaseRegister0<br /> |-<br /> | 0xB8 || u64 || TranslationControlRegister<br /> |-<br /> | 0xC0 || u32 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 5.0.0 Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || AddrSpaceMinAddr<br /> |-<br /> | 0x10 || u64 || AddrSpaceMaxAddr<br /> |-<br /> | 0x18 || u64 || HeapRegionBaseAddr<br /> |-<br /> | 0x20 || u64 || HeapRegionEndAddr<br /> |-<br /> | 0x28 || u64 || HeapCurAddr<br /> |-<br /> | 0x30 || u64 || MapRegionBaseAddr<br /> |-<br /> | 0x38 || u64 || MapRegionEndAddr<br /> |-<br /> | 0x40 || u64 || NewMapRegionBaseAddr<br /> |-<br /> | 0x48 || u64 || NewMapRegionEndAddr<br /> |-<br /> | 0x50 || u64 || TlsIoRegionBaseAddr<br /> |-<br /> | 0x58 || u64 || TlsIoRegionEndAddr<br /> |-<br /> | 0x60 || u64 || HeapMaxAllocation<br /> |-<br /> | 0x68 || || <br /> |-<br /> | 0x70 || || <br /> |-<br /> | 0x78 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x80 || [[#KPageTable]] || PageTable<br /> |-<br /> | 0x90 || [[#KMemoryBlockManager]] || MemoryBlockManager<br /> |-<br /> | 0xA8 || u32 || ?<br /> |-<br /> | 0xAC || u32 || AddressSpaceWidth (32/36/39)<br /> |-<br /> | 0xB0 || [[#KLinkedList]]? || <br /> |-<br /> | 0xC8 || || <br /> |-<br /> | 0xD0 || || <br /> |-<br /> | 0xD8 || ptr || <br /> |-<br /> | 0xE0 || u64 || TranslationTableBaseRegister0 val<br /> |-<br /> | 0xE8 || u64 || TranslationControlRegister val<br /> |-<br /> | 0xF0 || u32 || AsidTagValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPageTable ==<br /> Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || void* || RawPageTablePtr<br /> |-<br /> | 8 || bool ||<br /> |-<br /> | 0xC || u32 || AddrSpaceSizeInGb<br /> |}<br /> <br /> == KMemoryBlockManager ==<br /> Size: 0x18<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KMemoryBlock]]* || MemoryBlockList<br /> |-<br /> | 8 || u64 || MaxAddr<br /> |-<br /> | 0x10 || u64 || MinAddr<br /> |}<br /> <br /> == KMemoryBlock ==<br /> Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KMemoryBlock]] *&gt; || NodeFor__MemoryBlockList<br /> |-<br /> | 0x10 || ||<br /> |-<br /> | 0x18 || ||<br /> |-<br /> | 0x20 || u64 || BaseAddress<br /> |-<br /> | 0x28 || u64 || NumOfPages<br /> |-<br /> | 0x30 || u32 || State<br /> |-<br /> | 0x34 || u16 || IpcRefCount [?]<br /> |-<br /> | 0x36 || u16 || DeviceMapRefCount<br /> |-<br /> | 0x38 || u8 || Permission<br /> |-<br /> | 0x39 || u8 || UnkAttribute<br /> |-<br /> | 0x3A || u8 || Attribute<br /> |}<br /> <br /> == KMemoryBlockInfo ==<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u64 || BaseAddress<br /> |-<br /> | 8 || u64 || Size<br /> |-<br /> | 0x10 || u32 || State<br /> |-<br /> | 0x14 || u8 || Permission<br /> |-<br /> | 0x15 || u8 || Attribute<br /> |-<br /> | 0x16 || u8 || UnkAttribute<br /> |-<br /> | 0x18 || u16 || IpcRefCount [?]<br /> |-<br /> | 0x1A || u16 || DeviceMapRefCount<br /> |}<br /> <br /> = KTransferMemory =<br /> Size: 0x48<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KProcess]]* || OwnerProcess<br /> |-<br /> | 0x30 || u64 || BaseAddress<br /> |-<br /> | 0x38 || KMutex || Mutex<br /> |-<br /> | 0x40 || int || Permission<br /> |-<br /> | 0x44 || bool || HasInited<br /> |-<br /> | 0x45 || bool || IsMapped<br /> |}<br /> <br /> = KSharedMemory =<br /> [1.0.0] Size: 0x40<br /> <br /> [2.0.0] Size: 0x48<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KProcess]]* || OwnerProcess<br /> |-<br /> | 0x30 || int || LocalPermission<br /> |-<br /> | 0x34 || int || RemotePermission<br /> |-<br /> | 0x38 || bool || HasInited<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x28 || [[#KResourceLimit]]* || OwnerResourceLimit<br /> |-<br /> | 0x30 || u64 || OwnerProcessPid<br /> |-<br /> | 0x38 || int || LocalPermission<br /> |-<br /> | 0x3C || int || RemotePermission<br /> |-<br /> | 0x40 || bool || HasInited<br /> |}<br /> <br /> &lt;/div&gt;<br /> <br /> = KJitMemory =<br /> [4.0.0+] Size: 0x58<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x20 || KMemoryBlockList || Blocks<br /> |-<br /> | 0x38 || [[#KProcess]]* || SrcProcessPtr<br /> |-<br /> | 0x40 || u64 || SrcAddr<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x50 || u8 || HasInit<br /> |-<br /> | 0x51 || u8 || HasMappedSlave<br /> |-<br /> | 0x52 || u8 || HasMappedMaster<br /> |}<br /> <br /> = KPort =<br /> Size: 0xA8<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KServerPort]] || ServerSide<br /> |-<br /> | 0x60 || [[#KClientPort]] || ClientSide<br /> |-<br /> | 0x98 || u64 ||<br /> |-<br /> | 0xA0 || bool || HasInited<br /> |-<br /> | 0xA1 || bool || IsLight<br /> |}<br /> <br /> == KServerPort ==<br /> Size: 0x50<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || [[#KLinkedListNode]] || IncomingConnections<br /> |-<br /> | 0x38 || [[#KLinkedListNode]] || IncomingLightConnections<br /> |-<br /> | 0x48 || [[#KPort]]* || Parent<br /> |}<br /> <br /> == KClientPort ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || u32 || NumSessions<br /> |-<br /> | 0x2C || u32 || MaxSessions<br /> |-<br /> | 0x30 || [[#KPort]]* || Parent<br /> |}<br /> <br /> = KSession =<br /> Size: 0xB0<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KServerSession]] || ServerSide<br /> |-<br /> | 0x70 || [[#KClientSession]] || ClientSide<br /> |-<br /> | 0xA8 || bool || HasInited<br /> |}<br /> <br /> == KServerSession ==<br /> Size: 0x60<br /> <br /> Inherits from: [[#KSynchronizationObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || KLinkedListNode || NodeFor__IncomingConnections<br /> |-<br /> | 0x38 || [[#KSession*]] || Parent<br /> |-<br /> | 0x40 || KLinkedListNode&lt;[[#KSessionRequest]]*&gt; || RequestList<br /> |-<br /> | 0x50 || [[#KSessionRequest]]* || ActiveRequest<br /> |-<br /> | 0x58 || ||<br /> |}<br /> <br /> === KSessionRequest ===<br /> Size: 0x158<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 0x10 || KLinkedListNode || NodeFor__RequestList<br /> |-<br /> | 0x20 || [[#KBufferDescriptor]][8] || BufferTable<br /> |-<br /> | 0x120 || [[#KBufferDescriptor]]* || ExternalBufferTable<br /> |-<br /> | 0x128 || u8 || NumSendBuffers<br /> |-<br /> | 0x129 || u8 || NumRecvBuffers<br /> |-<br /> | 0x12A || u8 || NumExchBuffers<br /> |-<br /> | 0x130 || [[#KThread]]* || SenderThread<br /> |-<br /> | 0x138 || u64 || InitiallyZero<br /> |-<br /> | 0x140 || [[#KWritableEvent]]* || ForAsyncEvent<br /> |-<br /> | 0x148 || u64 || CustomCmdbufAddr<br /> |-<br /> | 0x150 || u64 || CustomCmdbufSize<br /> |}<br /> <br /> === KBufferDescriptor ===<br /> Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 || UserVirtAddr<br /> |-<br /> | 8 || u64 || Size<br /> |-<br /> | 0x10 || u64 || <br /> |-<br /> | 0x18 || u64 || BufferMemoryState<br /> |-<br /> |}<br /> <br /> == KClientSession ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KSession]]* || Parent<br /> |-<br /> | 0x18 || bool || HasInited<br /> |-<br /> | 0x20 || [[#KClientPort]]* || ParentPort<br /> |-<br /> | 0x28 || ||<br /> |-<br /> | 0x30 || [[#KProcess]]* || CreatorProcess<br /> |}<br /> <br /> = KLightSession =<br /> Size: 0xA8<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLightSessionServer]] || ServerSide<br /> |-<br /> | 0x68 || [[#KLightSessionClient]] || ClientSide<br /> |-<br /> | 0xA0 || bool || HasInited<br /> |}<br /> <br /> == KLightServerSession ==<br /> Size: 0x58<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || KLinkedListNode || NodeFor__IncomingLightConnections<br /> |-<br /> | 0x20 || [[#KLightSession]] || Parent<br /> |-<br /> | 0x28 || u64[6] ||<br /> |}<br /> <br /> == KLightClientSession ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KLightSession]]* || Parent<br /> |-<br /> | 0x18 || bool || HasInited<br /> |-<br /> | 0x20 || [[#KClientPort]]* || Port<br /> |-<br /> | 0x28 || ||<br /> |-<br /> | 0x30 || [[#KProcess]]* || CreatorProcess<br /> |}<br /> <br /> = KEvent =<br /> Size: 0x70<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KReadableEvent]] || ReadableEvent<br /> |-<br /> | 0x48 || [[#KWritableEvent]] || WritableEvent<br /> |-<br /> | 0x60 || [[#KProcess]]* || Creator<br /> |-<br /> | 0x68 || bool || HasInited<br /> |}<br /> <br /> == KReadableEvent ==<br /> Size: 0x38<br /> <br /> Inherits from: [[#KSynchronizationEvent]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || bool ||<br /> |-<br /> | 0x30 || [[#KEvent]]* || Parent<br /> |}<br /> <br /> == KWritableEvent ==<br /> Size: 0x18<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KEvent]]* || Parent<br /> |}<br /> <br /> == KInterruptEvent ==<br /> [1.0.0] Size: 0x50<br /> <br /> [2.0.0] Size: 0x48<br /> <br /> Inherits from: [[#KReadableEvent]]<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KReadableEvent]] || Inheritance<br /> |-<br /> | 0x38 || [[#KInterruptReceiver]] || Receiver<br /> |-<br /> | 0x48 || u32 || IrqId (or -1)<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KReadableEvent]] || Inheritance<br /> |-<br /> | 0x38 || [[#KInterruptReceiver]]* || Receiver<br /> |-<br /> | 0x40 || u32 || IrqId (or -1)<br /> |-<br /> | 0x44 || bool || IsIrqRegistered<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KInterruptReceiver ===<br /> [1.0.0] Size: 0x10<br /> [2.0.0] Size: 0x20<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || * || Vtable<br /> |-<br /> | 8 || u64 || InitiallyZero<br /> |-<br /> | 0x10 || [[#KInterruptEvent]]* || IrqEventPtr<br /> |-<br /> | 0x18 || s32 || IrqId<br /> |}<br /> &lt;/div&gt;<br /> <br /> = KDeviceAddressSpace =<br /> Size: 0x70<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || [[#KMutex]] || Mutex<br /> |-<br /> | 0x18 || [[#KSmmuManager]] || Manager<br /> |-<br /> | 0x58 || u64 || BaseAddress<br /> |-<br /> | 0x60 || u64 || Size<br /> |-<br /> | 0x68 || bool || HasInited<br /> |}<br /> <br /> [1.0.0] It was called KAddressSpace.<br /> <br /> == KSmmuManager ==<br /> Size: 0x40<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || u8[4] || PageTableAsids<br /> |-<br /> | 8 || void*[4] || PageDirectories<br /> |-<br /> | 0x28 || u64 || AttachedDevicesMask<br /> |-<br /> | 0x30 || u32 || RegVal32Bit<br /> |-<br /> | 0x34 || u32 || RegVal32BitEmpty<br /> |-<br /> | 0x38 || u32 || RegVal36Bit<br /> |-<br /> | 0x3C || u32 || RegVal36BitEmpty<br /> |}<br /> <br /> = KResourceLimit =<br /> Size: 0x68<br /> <br /> Inherits from: [[#KAutoObject]]<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Type<br /> ! Description<br /> |-<br /> | 0 || [[#KAutoObject]] || Inheritance<br /> |-<br /> | 0x10 || u64[5] || CurrentValue<br /> |-<br /> | 0x38 || u64[5] || LimitValue<br /> |-<br /> | 0x60 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> = KPoolManager =<br /> [1.0.0] Size: 0x380<br /> <br /> [2.0.0] Size: 0x450<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolAllocator]][3] || Allocator<br /> |-<br /> | 0x348 || [[#KPoolRefManager]] || RefManager<br /> |-<br /> | 0x368 || u64 || AllocationCounter<br /> |-<br /> | 0x370 || u64 ||<br /> |-<br /> | 0x378 || [[#KMutex]] || Mutex<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolAllocator]] || Allocator0<br /> |-<br /> | 0x220 || [[#KPartitionInfo]]* || PartitionInfo0<br /> |-<br /> | 0x228 || [[#KPoolAllocator]] || Allocator1<br /> |-<br /> | 0x448 || [[#KPartitionInfo]]* || PartitionInfo1<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPoolAllocator ==<br /> [1.0.0] Size: 0x118<br /> <br /> [2.0.0] Size: 0x220<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || void* || MemoryBase<br /> |-<br /> | 8 || u64 || MemorySize<br /> |-<br /> | 0x10 || s32 || NumPools<br /> |-<br /> | 0x18 || [[#KPool]][8] || Pools<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || void* || MemoryBase<br /> |-<br /> | 8 || u64 || MemorySize<br /> |-<br /> | 0x10 || [[#KPool]][8] || Pools<br /> |-<br /> | 0x210 || s32 || NumPools<br /> |}<br /> &lt;/div&gt;<br /> <br /> === KPool ===<br /> [1.0.0] Size: 0x20<br /> <br /> [2.0.0] Size: 0x40<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 1.0.0 Offset || Type || Description<br /> |-<br /> | 0 || KPoolHeader* || FirstFreeChunk<br /> |-<br /> | 8 || u64 ||<br /> |-<br /> | 0x10 || u64 ||<br /> |-<br /> | 0x18 || void* || SingletonTableEntryPtr<br /> |}<br /> &lt;/div&gt;<br /> <br /> &lt;div style=&quot;display: inline-block; vertical-align:top;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! 2.0.0 Offset || Type || Description<br /> |-<br /> | 0 || KPoolHeader* || FirstFreeChunk<br /> |-<br /> | 8 || u64 ||<br /> |-<br /> | 0x10 || u64 ||<br /> |-<br /> | 0x18 || void* || SingletonTableEntryPtr<br /> |-<br /> | 0x20 || [[#KPool]]* || Parent<br /> |-<br /> | 0x30 || u64[2] || DmaProtectionKey<br /> |}<br /> &lt;/div&gt;<br /> <br /> == KPoolRefManager ==<br /> [1.0.0] Size: 0x20<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KPoolManager]]* || Parent<br /> |-<br /> | 8 || void* || PoolBase<br /> |-<br /> | 0x10 || u64 || MaxPage<br /> |-<br /> | 0x18 || u16* || RefCountTable<br /> |}<br /> <br /> = KObjectAllocator =<br /> Size: 0x50<br /> [5.0.0]? Size: 0x48<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLockedList]] || LockedList <br /> |-<br /> | 0x28 || [[#KSlabHeap]] || SlabHeap <br /> |}<br /> <br /> <br /> = KSlabHeap =<br /> Size: 0x28<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || void* || FreeListHead <br /> |-<br /> | 0x8 || u64 || <br /> |-<br /> | 0x10 || void* || HeapPtr<br /> |-<br /> | 0x18 || u64 || TotalHeapSize<br /> |-<br /> | 0x20 || u64 || SingleObjectSize<br /> |}<br /> <br /> 5.0.0 (?):<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || void* || FreeListHead <br /> |-<br /> | 0x8 || u64 || SingleObjectSize<br /> |-<br /> | 0x10 || void* || HeapPtr<br /> |-<br /> | 0x18 || void* || Start (equal to HeapPtr on init)<br /> |-<br /> | 0x20 || void* || End<br /> |}<br /> <br /> = KPageTableAllocator =<br /> Size: 0x30<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || u64 ||<br /> |-<br /> | 0x10 || u16* || RefCountTable<br /> |-<br /> | 0x10 || void* || BaseAddress<br /> |-<br /> | 0x18 || u64 || Size<br /> |-<br /> | 0x20 || u64 ||<br /> |-<br /> | 0x28 || u64 ||<br /> |}<br /> <br /> = KIrqManager =<br /> [1.0.0] Size: 0x1608<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KIrqEntry]][32] || Core0Irq<br /> |-<br /> | 0x200 || [[#KIrqEntry]][32] || Core1Irq<br /> |-<br /> | 0x400 || [[#KIrqEntry]][32] || Core2Irq<br /> |-<br /> | 0x600 || [[#KIrqEntry]][32] || Core3Irq<br /> |-<br /> | 0x800 || [[#KIrqEntry]][224] || SharedIrqs<br /> |-<br /> | 0x1600 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> == KIrqEntry ==<br /> [1.0.0] Size: 0x10<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KIrqReciever*]] || Receiver<br /> |-<br /> | 8 || u8 || State0<br /> |-<br /> | 9 || u8 || State1<br /> |}<br /> <br /> = KDebug =<br /> Size: 0x50<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KSynchronizationObject]] || Inheritance<br /> |-<br /> | 0x28 || [[#KLinkedListNode]]&lt;[[#KDebugEvent]]&gt; || EventList<br /> |-<br /> | 0x38 || u32 || Flags<br /> |-<br /> | 0x40 || [[#KProcess]]* || ProcessPtr<br /> |-<br /> | 0x48 || [[#KMutex]] || Mutex<br /> |}<br /> <br /> == KDebugEvent ==<br /> Size: 0x60<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Type || Description<br /> |-<br /> | 0 || [[#KLinkedListNode]]&lt;[[#KDebugEvent]] *&gt; || NodeFor__EventList<br /> |-<br /> | 0x10 || u32 || EventType<br /> |-<br /> | 0x14 || u32 || ThreadId<br /> |-<br /> | 0x18 || u32 || Flags<br /> |-<br /> | 0x1C || u16 ||<br /> |-<br /> | 0x1E || bool ||<br /> |-<br /> | 0x20 || ... || ...<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=6.0.0&diff=5033 2018-09-20T15:31:46Z

<p>Shinyquagsire23: 🤷</p> <hr /> <div>The Switch 6.0.0 system update was released on September 18, 2018. This Switch update was released for the following regions: ALL.<br /> <br /> Security flaws fixed: Yes.<br /> <br /> ==Change-log==<br /> [https://en-americas-support.nintendo.com/app/answers/detail/a_id/22525/p/897 Official] ALL change-log:<br /> * Nintendo Switch Online* features and functionality have been added, including:<br /> * Save Data Cloud Backup <br /> * <br /> * User your internet connection to back up game save data for compatible games<br /> * Some games are not compatible with Save Data Cloud<br /> * To back up save data or download a previous backup, head to System Settings &amp;gt; Data Management &amp;gt; Save Data Cloud Backup<br /> * <br /> * *Nintendo Switch Online membership (sold separately) and Nintendo Account required for online play. Not available in all countries. Internet access required for online features. Save Data Cloud backup available in compatible games. Terms apply. To learn more, click here.<br /> * <br /> * Added the following system functionality<br /> * Upload up to four Album screenshots at once on supported social network services<br /> * <br /> * Only one captured video can be uploaded at once<br /> * <br /> * <br /> * Select from six new Captain Toad icons for your user<br /> * <br /> * To edit your user icon, head to your My Page on the top left of the Home Menu &amp;gt; Profile<br /> * <br /> * <br /> * Play your digital software and content on non-primary consoles by linking your Nintendo Account<br /> * <br /> * The term &quot;active console&quot; has been renamed &quot;primary console&quot; in Nintendo eShops<br /> * Playing software in multiple consoles has certain restrictions<br /> * <br /> * <br /> * Display of Nintendo Switch News articles will be limited to match the restricted software parental controls setting selections<br /> * <br /> * Please note that the restriction will only apply to News articles distributed after the release of version 6.0.0.<br /> * <br /> * <br /> * Change the layout of the USB keyboard to the desired language<br /> * <br /> * To change the language, head to the System Settings &amp;gt; System &amp;gt; USB Keyboard <br /> * <br /> * <br /> * Removed the following system functionality<br /> * After installing the system update, it will no longer be possible to unlink your Nintendo Account from your Nintendo Switch user<br /> * General system stability improvements to enhance the user's experience, including:<br /> * Compatibility improvements have been made for a controller licensed by Nintendo<br /> <br /> ==System Titles==<br /> * All sysmodules were updated.<br /> * Most 8XX titles were updated.<br /> * All applets except &quot;error&quot; and &quot;cabinet&quot; were updated.<br /> * 1 new title was added: olsc-sysmodule.<br /> * New services were added, see [[Services_API|here]].<br /> <br /> ===[[USB_services|USB-sysmodule]]===<br /> The only sysmodule with any changes for accessible IO in the [[NPDM]] was USB-sysmodule. The IO page for the [[Fuses|fuse registers]] is now accessible by this sysmodule.<br /> <br /> ===olsc-sysmodule===<br /> This new sysmodule handles cloud saves.<br /> <br /> ===FIRM===<br /> <br /> ====Secure Monitor====<br /> <br /> .rwdata was reduced in size from two pages to one page. Additionally:<br /> <br /> Changes were made relating to security engine usage:<br /> * Many functions which previously used an inline GetSecurityEngine() call to get the security engine register address now take in a register base as an argument. This is presumably to facilitate moved Security Engine MMIO on the Mariko SoC.<br /> * Keyslots 0-8, 0xA, 0xC-0xE now have flags 0x1FF set, and keyslot 0xB now additionally has flags 0x17F set.<br /> * The Test Vector used to ensure keyslot contents do not change during wake-from-sleep now uses 256-bit AES instead of 128-bit AES (thus the high parts of the keyslot contents are now verified).<br /> <br /> Some changes were made to initial SoC setup:<br /> * Additional magic numbers (0x83 = SKU ID, 0x2 = ?, 0x210 = Tegra 210) are now written into the GPU microcode in DRAM for runtime configuration.<br /> * The warmboot firmware's firmware revision magic was changed from 0x6 to 0x87.<br /> * The GPU microcode carveout setup was moved to later during initialization (after package2 has been fully loaded and verified).<br /> * The IRAM addresses from which [[BootConfig]] warmboot firmware are loaded were changed.<br /> <br /> In addition, there were changes to the [[SMC]] interface:<br /> <br /> * SMCs which take in a keyslot parameter have been changed to allow use of up to 6 keyslots instead of 4.<br /> * smcUnwrapRsaOaepWrappedTitleKey now takes in a &quot;type&quot; parameter, and the kek used in key generation is now selected from an array based on this parameter. (smcUnwrapAesWrappedTitlekey hardcodes type 0.)<br /> * GetConfig(HardwareType) now returns 4 when it previously would have returned 3.<br /> <br /> Additionally, security flaws were addressed in smcCpuSuspend (aiming to further mitigate jamais vu/deja vu):<br /> <br /> * The number of devices checked to be held in reset at the time of smcCpuSuspend is called is now greatly increased.<br /> * BPMP SC7 Entry Firmware is now only started ''after'' the following have been done, instead of before:<br /> ** TZRAM contents have been encrypted and MAC'd with a random AES-256 key<br /> ** The PMC scratch registers where the MAC are stored have been verified not to be read or write-locked.<br /> ** The MAC is written into the PMC scratch registers, which are then write-locked.<br /> ** The PMC scratch registers are verified to have been write-locked.<br /> ** The PMC scratch registers are verified to contain the MAC TZ has written into them.<br /> ** The PMC scratch registers are read-locked.<br /> ** The PMC scratch registers are verified to be both read and write-locked.<br /> ** The BPMP's firmware is copied from TZRAM into IRAM<br /> ** memcmp(BPMP firmware in IRAM, BPMP firmware in TZRAM, sizeof(BPMP firmware)) is verified to be zero.<br /> <br /> <br /> ====Kernel====<br /> * Accidentially exported symbols have been renamed:<br /> ** Namespace &lt;code&gt;nn::kern::ARM64&lt;/code&gt; is now &lt;code&gt;nn::kern::arch::ARM64&lt;/code&gt;<br /> ** Namespace &lt;code&gt;nn::kern::NX&lt;/code&gt; is now &lt;code&gt;nn::kern::board::NX&lt;/code&gt; and now contains the class &lt;code&gt;KSystemControl&lt;/code&gt;<br /> ** &lt;code&gt;ResumeEntry&lt;/code&gt; is now a non-static method of &lt;code&gt;KSystemControl&lt;/code&gt;<br /> * Kernel now reserves 1024 pages (1MB) of memory in SYSTEM memregion/pool for use by applets (1 at a time) for personal mmheap.<br /> * Memory regions arrange changed, APPLET has 6MB less in all memory arranges.<br /> * Maximum number of sessions and events both increased by 100.<br /> * Kernel mmheap size decreased to 0x10DF000 bytes (was 0x1117000), the both KMemoryBlock pools' capacity is unchanged, but less page tables can be allocated.<br /> * Kernel now properly reports DRAM size in default reslimit.<br /> * Two new svcGetInfoTypes: types 21 and 22. These are like type 6 and 7, but without the contiguous, in-security-carveout, personalmmheap allocation.<br /> * KASLR was changed to invoke smcGetRandomBytes(8) each time, instead of using Mersenne Twister.<br /> * Another layer of randomization has been added to slabheaps (before, it was just the order of slabheaps): an array of N (= 21 = number of slabheaps) random integers, in range (0, 0x200000) is now constructed, sorted via bubble sort; at each slabheap construction the heap offset is further incremented by &lt;code&gt;array[id+1]-array[id]&lt;/code&gt; , then page rounded.<br /> * With the exception of KSessionRequest which is not in any KObjectAllocator, all KAutoObject types now use an intrusive rbtree instead of an intrusive list for their KObjectAllocator membership. Comparison key is PID for processes, thread ID for threads, address for others (using a new virtual method).<br /> * A new anonymous KAutoObject type, which sole purpose is to hold a comparison key, is now used for thread lookup by ID.<br /> * Breaking changes in svcGetFutureThreadInfo, which has potentially been renamed. Signature and use case have radically changed, it is now: &lt;code&gt;Result svcGetFutureThreadInfo(ThreadInfo *outThreadInfo, u64 *outTid, Handle debugHandle, s64 timeout)&lt;/code&gt;.<br /> * Huge scheduler force-pause and last thread reporting refactor:<br /> ** Scheduling flags are now u16 and force-pause flags are 3-nibble-long instead of 1.<br /> ** The requirements and mechanism for force-pausing (activity svc, debug, etc.) threads have been considerably simplified:<br /> *** It used to delay the force-pause after end-of-svc, and used some convoluted mechanism.<br /> *** The condition is now &amp;quot;a thread is force-pausable iff no thread is waiting for a kernel mutex it is holding&amp;quot;, mechanism is just ORRing scheduling status with force-pause flags now. Appropriate changes have been made to accomodate for this change.<br /> *** Abovementionned convoluted mechanism has been refactored, too, but remains unused.<br /> ** When the scheduler selects a process's thread, it now stored the selected thread in an array in the KProcess, for information. It also stores in itself and in array in the selected KProcess the number of times it detected a core being idle before load balancing. Used by BreakDebugProcess.&lt;br /&gt;<br /> <br /> * All threads created and started in kernel main() are started force-paused with flags=0x100. This fixes the hypotetical case where a compromised KIP would perform gmmuhax and dump the INI1 (which is stored in APPLICATION -- KIPs are only started after all of them have been loaded). They are unpaused after all KIPs have been created.<br /> * GetThreadContext3 (unprivileged SVC) now dumps TPIDR_EL0.<br /> * DebugActiveProcess now returns 0xFA01 if an attempt to debug the current process is made -- instead of possibly deadlocking<br /> * GetDebugThreadContext and SetDebugThreadContext now return 0xF001 if flags &amp;gt; 15. Additionally, their functionality is now restricted to threads that have been force-paused for debug, not just any kind of force-paused threads anymore.<br /> * ContinueDebugEvent now returns 0xF001 if flags &amp;gt; 15 as well.<br /> * svcSleepSystem has been refactored. Instead of the initiator thread manually starting the sleep handler threads then storing a weak reference to itself, the handler threads are started in kernel init in main() immediately after their creation, and two mutexes are used: one for the initiator/covering svcSleepSystem, another for the handler threads. This likely fixes an UaF or race condition.<br /> * If svcReturnFromException passes the exception the KDebug, ie. if the argument errorCode is not 0, and if the latter has DontCatchExceptions set, the process is terminated (unless errorCode is 0x10001).<br /> * Performance improvements to svcInvalidateProcessDataCache.<br /> * Redundant calls to smcGetConfig(12) have been reduced (12 calls -&gt; 4 calls) during memory setup<br /> <br /> ====FIRM Sysmodules====<br /> All FIRM sysmodules were updated. Specific diffs for a few sysmodules are below:<br /> <br /> =====[[Loader services|Loader]]=====<br /> * A single null byte stack overflow due to strcat usage was fixed in content path parsing. See [[Switch System Flaws]] for details.<br /> * System Resource Size ([[NPDM]] +0x14) is now allowed to be non-zero for applets in addition to applications.<br /> <br /> =====[[Process Manager services|PM]]=====<br /> Memory management initialization was greatly changed:<br /> * PM no longer hardcodes five memory profiles, and no longer calls smcGetConfig to determine which profile to use.<br /> * Instead, PM now uses [[SVC|svcGetResourceLimitLimitValue]] to determine how much space the kernel has allotted for Application + Applet regions and [[SVC|svcGetSystemInfo]] to determine the total physical memory available, and sets the System region size to (Total Memory Size - Application region size - Applet region size - 5 MiB).<br /> <br /> ==See Also==<br /> System update report(s):<br /> * [https://yls8.mtheall.com/ninupdates/reports.php?date=09-18-18_08-35-09&amp;sys=hac]<br /> <br /> {{NavboxVersions}}<br /> <br /> [[Category:System versions]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Secure_Monitor&diff=4996 2018-09-17T22:04:16Z

<p>Shinyquagsire23: as seen on 5.0.1 kernel</p> <hr /> <div>= Secure Monitor Calls =<br /> <br /> The secure monitor provides two top level handlers of which each provides a range of sub handlers.<br /> <br /> Secure Monitor Calls follow the ARM SMC calling convention up to a small change:<br /> {| class=wikitable<br /> ! Bit number || Bit mask || Description<br /> |-<br /> | 31 || 0x80000000 || Set to 0 means Yielding Call; Set to 1 means Fast Call.<br /> |-<br /> | 30 || 0x40000000 || Set to 0 means SMC32 convention; Set to 1 means SMC64.<br /> |-<br /> | 29-24 || 0x3F000000 || Service Call ranges.<br /> |-<br /> | 23-16 || 0x00FF0000 || Must be zero.<br /> |-<br /> | 15-8 || 0x0000FF00 || Argument type. This is different from the ARM SMC calling convention.<br /> |-<br /> | 7-0 || 0x000000FF || Function number within the range call type.<br /> |}<br /> <br /> If bit ''n'' is set in the argument type then parameter X''n'' is treated as a pointer and the kernel will setup address translation for it in [[SVC#svcCallSecureMonitor|svcCallSecureMonitor]].<br /> <br /> SMC arguments are passed using registers X0-X7 with X0 always sending the call sub-id and returning the result of the call.<br /> <br /> == ID 0 ==<br /> Functions exposed to user-mode processes using [[SVC|svcCallSecureMonitor]].<br /> <br /> {| class=wikitable<br /> ! Sub-ID || Name || In || Out<br /> |-<br /> | 0xC3000401 || SetConfig || ||<br /> |-<br /> | 0xC3000002 || GetConfig (Same as ID 1, Sub-ID 4) || ||<br /> |-<br /> | 0xC3000003 || CheckStatus || ||<br /> |-<br /> | 0xC3000404 || GetResult || ||<br /> |-<br /> | 0xC3000E05 || ExpMod || ||<br /> |-<br /> | 0xC3000006 || GetRandomBytes (Same as ID 1, Sub-ID 5) || ||<br /> |-<br /> | 0xC3000007 || [[#GenerateAesKek]] || ||<br /> |-<br /> | 0xC3000008 || [[#LoadAesKey]] || ||<br /> |-<br /> | 0xC3000009 || [[#CryptAes]] || ||<br /> |-<br /> | 0xC300000A || [[#GenerateSpecificAesKey]] || ||<br /> |-<br /> | 0xC300040B || [[#ComputeCmac]] || ||<br /> |-<br /> | [1.0.0-4.1.0] 0xC300100C || [[#LoadRsaOaepKey]] || ||<br /> |-<br /> | [5.0.0+] 0xC300D60C || [[#EncryptRsaKeyForImport]] || ||<br /> |-<br /> | [1.0.0-4.1.0] 0xC300100D || [[#DecryptRsaPrivateKey]] || ||<br /> |-<br /> | [5.0.0] 0xC300100D || [[#DecryptOrImportRsaKey]] || ||<br /> |-<br /> | [1.0.0-4.1.0] 0xC300100E || [[#LoadSecureExpModKey]] || ||<br /> |-<br /> | 0xC300060F || [[#SecureExpMod]] || ||<br /> |-<br /> | 0xC3000610 || [[#UnwrapRsaOaepWrappedTitleKey]] || ||<br /> |-<br /> | 0xC3000011 || [[#LoadTitleKey]] || ||<br /> |-<br /> | 0xC3000012 || [2.0.0+] UnwrapAesWrappedTitleKey || ||<br /> |}<br /> <br /> The overall concept here is the following:<br /> * All key material (AES and RSA) is stored in userspace, but it's encrypted with random AES kek's (&quot;key encryption keys&quot;).<br /> * Each kek is generated as a function of an access key (picked at random).<br /> * The kek is generated differently depending on the [[#CryptoUsecase]] the key is used for.<br /> ** This means: Each key is &quot;locked&quot; to the [[#CryptoUsecase]] it was designated for.<br /> ** You can use a key for a different usecase, but you will only get garbage output.<br /> * After the kek has been generated, it is wrapped with a session-specific key and given back to userspace.<br /> ** This means: Plaintext kek keys never leave TrustZone.<br /> ** Further, this means: Actual AES/RSA keys never leave TrustZone.<br /> <br /> Note:<br /> The [[#enum_CryptoUsecase|CryptoUsecase_TitleKey]] represents a RSA wrapped AES key.<br /> <br /> === GenerateAesKek ===<br /> Takes an &quot;access key&quot; as input, an [[#enum_CryptoUsecase]].<br /> <br /> Returns a session-unique kek for said usecase.<br /> <br /> === LoadAesKey ===<br /> Takes a session kek created with [[#GenerateAesKek]], and a wrapped AES key.<br /> <br /> The session kek must have been created with [[#enum_CryptoUsecase|CryptoUsecase_Aes]].<br /> <br /> === CryptAes ===<br /> Encrypts/decrypts using Aes (CTR and CBC).<br /> <br /> Key must be set prior using one of the [[#LoadAesKey]], [[#GenerateSpecificAesKey]] or [[#LoadRsaWrappedAesKey]] commands.<br /> <br /> === GenerateSpecificAesKey ===<br /> Todo: This one seems unrelated to [[#enum_CryptoUsecase]].<br /> <br /> === LoadRsaOaepKey ===<br /> Takes a session kek created with [[#GenerateAesKek]], a wrapped AES key, and a wrapped RSA private key.<br /> <br /> The session kek must have been created with [[#enum_CryptoUsecase|CryptoUsecase_RsaOaep]].<br /> <br /> This function was removed in [[5.0.0]], and replaced with [[#EncryptRsaKeyForImport]].<br /> <br /> === EncryptRsaKeyForImport ===<br /> Takes in two session keks created with [[#GenerateAesKek]], two wrapped AES keys, an enum member, and a wrapped RSA private key.<br /> <br /> Decrypts and validates the wrapped RSA private key with the first kek/wrapped key, and re-encrypts it with the second if valid.<br /> <br /> The re-encrypted key is then passed to the user, for use with [[#DecryptOrImportRsaKey]].<br /> <br /> === DecryptRsaPrivateKey ===<br /> Takes a session kek created with [[#GenerateAesKek]], a wrapped AES key, an enum member, and a wrapped RSA private key.<br /> <br /> The session kek must have been created with [[#enum_CryptoUsecase|CryptoUsecase_RsaPrivate]].<br /> <br /> [4.0.0+] The SMC handler when certain conditions pass and SMC_ID==0xC300100D now returns error 0x6 instead of calling the handler funcptr.<br /> <br /> === DecryptOrImportRsaKey ===<br /> <br /> This function replaced [[#DecryptRsaPrivateKey]] in [[5.0.0]], adding an additional enum member argument.<br /> <br /> This SMC extends DecryptRsaPrivateKey's original functionality to enable importing private keys into the security engine instead of decrypting them, when certain enum members are passed.<br /> <br /> === LoadSecureExpModKey ===<br /> Takes a session kek created with [[#GenerateAesKek]], and a wrapped RSA key.<br /> <br /> The session kek must have been created with [[#enum_CryptoUsecase|CryptoUsecase_RsaSecureExpMod]].<br /> <br /> This function was removed in [[5.0.0]], and replaced with [[#EncryptRsaKeyForImport]].<br /> <br /> === SecureExpMod ===<br /> Performs an Exp Mod operation using an exponent previously loaded with the [[#LoadSecureExpModKey]] command.<br /> <br /> === UnwrapRsaOaepWrappedTitleKey ===<br /> Takes an Rsa-Oaep-wrapped TitleKey, an RSA Public Key, and a label hash.<br /> <br /> Performs an Exp Mod operation using an exponent previously loaded with the [[#LoadRsaOaepKey]] command, and then validates/extracts a Titlekey from the resulting message.<br /> <br /> Returns a session-unique AES key especially for use in [[#LoadTitleKey]].<br /> <br /> === LoadTitleKey ===<br /> Takes a session-unique AES key from [[#UnwrapAesWrappedTitleKey]] or [[#UnwrapRsaOaepWrappedTitleKey]].<br /> <br /> === enum CryptoUsecase ===<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || CryptoUsecase_Aes<br /> |-<br /> | 1 || CryptoUsecase_RsaPrivate<br /> |-<br /> | 2 || CryptoUsecase_RsaSecureExpMod<br /> |-<br /> | 3 || CryptoUsecase_RsaOaep<br /> |}<br /> <br /> == ID 1 ==<br /> Functions exposed to the kernel internally.<br /> <br /> {| class=wikitable<br /> ! Sub-ID || Name || In || Out<br /> |-<br /> | 0xC4000001 || [[#CpuSuspend]] || X1=power_state, X2=entrypoint_addr, X3=context_id || None<br /> |-<br /> | 0x84000002 || [[#CpuOff]] || None || None<br /> |-<br /> | 0xC4000003 || [[#CpuOn]] || X1=target_cpu, X2=entrypoint_addr, X3=context_id, X4,X5,X6,X7=0 || X0=result<br /> |-<br /> | 0xC3000004 || [[#GetConfig]] (Same as ID 0, Sub-ID 2) || W1=config_item, X2,X3,X4,X5,X6,X7=0 || X0=result, X1,X2,X3,X4=config_val<br /> |-<br /> | 0xC3000005 || [[#GetRandomBytes]] (Same as ID 0, Sub-ID 6) || X1=size, X2,X3,X4,X5,X6,X7=0 || X0=result, X1,X2,X3,X4,X5,X6,X7=rand_bytes<br /> |-<br /> | 0xC3000006 || [[#Panic]] || W1=panic_color, X2,X3,X4,X5,X6,X7=0 || X0=result<br /> |-<br /> | 0xC3000007 || [2.0.0+] [[#ConfigureCarveout]] || X1=carveout_index, X2=region_phys_addr, X3=region_size, X4,X5,X6,X7=0 || X0=result<br /> |-<br /> | 0xC3000008 || [2.0.0+] [[#ReadWriteRegister]] || X1=reg_addr, W2=rw_mask, W3=in_val, X4,X5,X6,X7=0 || X0=result, W1=out_val<br /> |}<br /> <br /> === CpuSuspend ===<br /> Standard ARM PCSI SMC. Suspends the CPU (CPU0).<br /> <br /> The kernel calls this SMC on shutdown with '''power_state''' set to 0x0201001B (power level: 0x02==system; power type: 0x01==powerdown; ID: 0x1B).<br /> <br /> === CpuOff ===<br /> Standard ARM PCSI SMC. Turns off the CPU (CPU1, CPU2 or CPU3).<br /> <br /> === CpuOn ===<br /> Standard ARM PCSI SMC. Turns on the CPU (CPU1, CPU2 or CPU3).<br /> <br /> === GetConfig ===<br /> Takes a '''config_item''' and returns an associated '''config_val'''.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! ConfigItem || Name<br /> |-<br /> | 1 || [[#DisableProgramVerification]]<br /> |-<br /> | 2 || [[#DramId]]<br /> |-<br /> | 3 || [[#SecurityEngineIrqNumber]]<br /> |-<br /> | 4 || [[#Version]]<br /> |-<br /> | 5 || [[#HardwareType]]<br /> |-<br /> | 6 || [[#IsRetail]]<br /> |-<br /> | 7 || [[#IsRecoveryBoot]]<br /> |-<br /> | 8 || [[#DeviceId]]<br /> |-<br /> | 9 || [1.0.0-4.0.0] [[#BootReason]]<br /> |-<br /> | 10 || [[#MemoryArrange]]<br /> |-<br /> | 11 || [[#IsDebugMode]]<br /> |-<br /> | 12 || [[#UnitConfiguration]]<br /> |-<br /> | 13 || [[#IsChargerHiZModeEnabled]]<br /> |-<br /> | 14 || [4.0.0+] [[#IsKiosk]]<br /> |-<br /> | 15 || [5.0.0+] [[#NewHardwareType]]<br /> |-<br /> | 16 || [5.0.0+] [[#NewKeyGeneration]]<br /> |-<br /> | 17 || [5.0.0+] [[#Package2Hash]]<br /> |}<br /> <br /> ==== DisableProgramVerification ====<br /> [[Process Manager services|PM]] checks this item and if non-zero, calls fsp-pr SetEnabledProgramVerification(false).<br /> <br /> ==== DramId ====<br /> This is extracted directly from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Value<br /> ! Description<br /> |-<br /> | 0<br /> | DramId_EristaIcosaSamsung4gb<br /> |-<br /> | 1<br /> | DramId_EristaIcosaHynix4gb<br /> |-<br /> | 2<br /> | DramId_EristaIcosaMicron4gb<br /> |-<br /> | 3<br /> | Reserved<br /> |-<br /> | 4<br /> | DramId_EristaIcosaSamsung6gb<br /> |-<br /> | 5<br /> | [5.0.0+] Reserved<br /> |-<br /> | 6<br /> | [5.0.0+] Reserved<br /> |-<br /> | 7<br /> | [5.0.0+] DramId_MarikoIowax1x2Samsung4gb<br /> |-<br /> | 8<br /> | [5.0.0+] DramId_MarikoIowaSamsung4gb<br /> |-<br /> | 9<br /> | [5.0.0+] DramId_MarikoIowaSamsung8gb<br /> |-<br /> | 10<br /> | [5.0.0+] Reserved<br /> |-<br /> | 11<br /> | [5.0.0+] Reserved<br /> |-<br /> | 12<br /> | [5.0.0+] DramId_MarikoHoagSamsung4gb<br /> |-<br /> | 13<br /> | [5.0.0+] DramId_MarikoHoagSamsung8gb<br /> |}<br /> <br /> [[PCV_services|PCV]] configures memory profiles based on DramId.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Platform<br /> ! DramId<br /> ! Version<br /> |-<br /> | jetson-tx1<br /> | N/A<br /> | 11_40800_01_V9.8.3_V1.6<br /> |-<br /> | nx-abcb<br /> | EristaIcosaSamsung4gb<br /> | 10_40800_NoCfgVersion_V9.8.7_V1.6<br /> |-<br /> | nx-abcb<br /> | EristaIcosaMicron4gb<br /> | 10_40800_NoCfgVersion_V9.8.4_V1.6<br /> |-<br /> | nx-abcb<br /> | EristaIcosaHynix4gb<br /> | 10_40800_NoCfgVersion_V9.8.4_V1.6<br /> |-<br /> | nx-abca2<br /> | EristaIcosaSamsung4gb or EristaIcosaMicron4gb<br /> | 10_40800_NoCfgVersion_V9.8.7_V1.6<br /> |-<br /> | nx-abca2<br /> | EristaIcosaHynix4gb<br /> | 10_40800_NoCfgVersion_V9.8.7_V1.6<br /> |-<br /> | nx-abca2<br /> | EristaIcosaSamsung6gb<br /> | 10_40800_NoCfgVersion_V9.8.7_V1.6<br /> |-<br /> | nx-abca2<br /> | MarikoIowax1x2Samsung4gb<br /> | 01_204000_NoCfgVersion_V0.3.1_V2.0<br /> |-<br /> | nx-abca2<br /> | MarikoIowaSamsung4gb or MarikoHoagSamsung4gb<br /> | 01_204000_NoCfgVersion_V0.3.1_V2.0<br /> |-<br /> | nx-abca2<br /> | MarikoIowaSamsung8gb or MarikoHoagSamsung8gb<br /> | 01_204000_NoCfgVersion_V0.4.2_V2.0<br /> |}<br /> <br /> nx-abcb (Copper) is the SDEV unit. Among other differences, this has extra hardware to support HDMI output.<br /> <br /> nx-abca2 (Icosa) hardware types are variations of the retail form factor.<br /> <br /> ==== SecurityEngineIrqNumber ====<br /> SPL uses this for setting up the security engine IRQ.<br /> <br /> ==== Version ====<br /> The current [[Package2#Versions|Package1 Maxver Constant]] - 1.<br /> <br /> ==== HardwareType ====<br /> [1.0.0+] This item is obtained by checking bits 8 and 2 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]]. It can be 0 (Icosa), 1 (Copper) or 3 (Invalid).<br /> <br /> [4.0.0+] This item is obtained by checking bits 8, 2 and 16-19 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]]. It can be 0 (Icosa), 1 (Copper), 3 (Mariko) or 4 (Invalid).<br /> <br /> A value of 2 (Hoag?) is always mapped to 4 (Invalid).<br /> <br /> ==== IsRetail ====<br /> This item is obtained by checking bits 9 and 0-1 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]]. It can be 0 (Debug), 1 (Retail) or 2 (Invalid).<br /> <br /> ==== IsRecoveryBoot ====<br /> Used to determine if the system is booting from SafeMode firmware.<br /> <br /> ==== DeviceId ====<br /> [[NIM_services|NIM]] checks if this item matches the [[Settings_services|set:cal]] DeviceId with byte7 cleared. If they don't match, a panic is thrown.<br /> <br /> ==== BootReason ====<br /> Used to determine how the system booted.<br /> <br /> ==== MemoryArrange ====<br /> [[Process Manager services|PM]] uses this item for selecting the appropriate size for each [[SVC#LimitableResource|LimitableResource_Memory]].<br /> <br /> ==== IsDebugMode ====<br /> Kernel uses this to determine behavior of svcBreak positive arguments. It will break instead of just force-exiting the process which is what happens on retail.<br /> <br /> [2.0.0+] This is also used with certain debug [[SVC|SVCs]].<br /> <br /> [3.0.0+] [[Loader services|RO]] checks this and if set then skipping NRR rsa signatures is allowed.<br /> <br /> The value of this field is loaded from [[BootConfig]] unsigned-config+0x10 u8 bit1.<br /> <br /> ==== UnitConfiguration ====<br /> Kernel reads this when setting up memory-related code. If bit0 is set, it will memset various allocated memory-regions with 0x58, 0x59, 0x5A ('X', 'Y', 'Z') instead of zero. This allows Nintendo devs to find uninitialized memory bugs. If bit17-16 is 0b01, the kernel assumes 6GB of DRAM instead of 4GB.<br /> <br /> bit1 and bit2 are boolean values.<br /> If bit15-8 is zero, kernel will loop forever without calling smcPanic, nonzero smcPanics with 0xf00 and then loops.<br /> <br /> ==== IsChargerHiZModeEnabled ====<br /> This tells if the TI Charger (bq24192) is active.<br /> <br /> ==== NewKeyGeneration ====<br /> This item is obtained from [[Fuse_registers#FUSE_RESERVED_ODM2|FUSE_RESERVED_ODM2]] if bit 11 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]] is set, [[Fuse_registers#FUSE_RESERVED_ODM0|FUSE_RESERVED_ODM0]] matches 0x8E61ECAE and [[Fuse_registers#FUSE_RESERVED_ODM1|FUSE_RESERVED_ODM1]] matches 0xF2BA3BB2.<br /> <br /> [5.0.0+] [[Filesystem services|FS]] can now use this value for the '''KeyGeneration''' parameter when calling [[#GenerateAesKek|GenerateAesKek]] during &quot;GetBisEncryptionKey&quot;.<br /> <br /> ==== IsKiosk ====<br /> This item is bit 10 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]].<br /> <br /> [4.0.0+] [[Settings_services|Settings]] uses this value to overwrite the quest flag from [[Settings_services#set:sys|GetQuestFlag]]. This is used to detect if a Switch is a kiosk unit for display at retail stores.<br /> <br /> ==== NewHardwareType ====<br /> This item is currently hardcoded to 0.<br /> <br /> [5.0.0+] [[PCV_services|PCV]] overrides the value from [[#HardwareType|HardwareType]] and configures PMIC devices with this item.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Value<br /> ! Devices<br /> |-<br /> | 0<br /> | max77620_sd0, max77621_cpu and max77621_gpu<br /> |-<br /> | 1<br /> | max77620_sd0, max77812_cpu and max77812_gpu<br /> |-<br /> | 2<br /> | max77620_sd0, max77812_cpu and max77812_gpu<br /> |}<br /> <br /> ==== Package2Hash ====<br /> This is a SHA-256 hash calculated over the [[Package2|package2]] image. Since the hash calculation is an optional step in pkg2ldr, this item is only valid in recovery mode. Otherwise, an error is returned instead.<br /> <br /> === GetRandomBytes ===<br /> Takes a '''size''' and returns '''rand_bytes'''.<br /> <br /> The kernel limits '''size''' to 0x38 (for fitting in return registers).<br /> <br /> === Panic ===<br /> Issues a system panic.<br /> <br /> The kernel always calls this with '''panic_color''' set to 0xF00.<br /> <br /> === ConfigureCarveout ===<br /> Configures memory controller carveout regions.<br /> <br /> If '''carveout_index''' is 0, '''region_phys_addr''' and '''region_size''' are used to configure '''MC_SECURITY_CARVEOUT4'''.<br /> If '''carveout_index''' is 1, '''region_phys_addr''' and '''region_size''' are used to configure '''MC_SECURITY_CARVEOUT5'''.<br /> Any other '''carveout_index''' values are invalid.<br /> <br /> The kernel calls this with '''carveout_index''' set to 0, '''region_phys_addr''' set to 0x80060000 and '''region_size''' set to a dynamically calculated size which covers all the kernel and built-in sysmodules' DRAM regions.<br /> <br /> === ReadWriteRegister ===<br /> Relays [[SVC#svcReadWriteRegister|svcReadWriteRegister]] to the Secure Monitor.<br /> <br /> = Errors =<br /> {| class=wikitable<br /> ! Value || Description<br /> |-<br /> | 2 || Invalid input<br /> |-<br /> | 3 || Busy<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Secure_Monitor&diff=4995 2018-09-17T21:56:58Z

<p>Shinyquagsire23: Moved config vals from SPL_services</p> <hr /> <div>= Secure Monitor Calls =<br /> <br /> The secure monitor provides two top level handlers of which each provides a range of sub handlers.<br /> <br /> Secure Monitor Calls follow the ARM SMC calling convention up to a small change:<br /> {| class=wikitable<br /> ! Bit number || Bit mask || Description<br /> |-<br /> | 31 || 0x80000000 || Set to 0 means Yielding Call; Set to 1 means Fast Call.<br /> |-<br /> | 30 || 0x40000000 || Set to 0 means SMC32 convention; Set to 1 means SMC64.<br /> |-<br /> | 29-24 || 0x3F000000 || Service Call ranges.<br /> |-<br /> | 23-16 || 0x00FF0000 || Must be zero.<br /> |-<br /> | 15-8 || 0x0000FF00 || Argument type. This is different from the ARM SMC calling convention.<br /> |-<br /> | 7-0 || 0x000000FF || Function number within the range call type.<br /> |}<br /> <br /> If bit ''n'' is set in the argument type then parameter X''n'' is treated as a pointer and the kernel will setup address translation for it in [[SVC#svcCallSecureMonitor|svcCallSecureMonitor]].<br /> <br /> SMC arguments are passed using registers X0-X7 with X0 always sending the call sub-id and returning the result of the call.<br /> <br /> == ID 0 ==<br /> Functions exposed to user-mode processes using [[SVC|svcCallSecureMonitor]].<br /> <br /> {| class=wikitable<br /> ! Sub-ID || Name || In || Out<br /> |-<br /> | 0xC3000401 || SetConfig || ||<br /> |-<br /> | 0xC3000002 || GetConfig (Same as ID 1, Sub-ID 4) || ||<br /> |-<br /> | 0xC3000003 || CheckStatus || ||<br /> |-<br /> | 0xC3000404 || GetResult || ||<br /> |-<br /> | 0xC3000E05 || ExpMod || ||<br /> |-<br /> | 0xC3000006 || GetRandomBytes (Same as ID 1, Sub-ID 5) || ||<br /> |-<br /> | 0xC3000007 || [[#GenerateAesKek]] || ||<br /> |-<br /> | 0xC3000008 || [[#LoadAesKey]] || ||<br /> |-<br /> | 0xC3000009 || [[#CryptAes]] || ||<br /> |-<br /> | 0xC300000A || [[#GenerateSpecificAesKey]] || ||<br /> |-<br /> | 0xC300040B || [[#ComputeCmac]] || ||<br /> |-<br /> | [1.0.0-4.1.0] 0xC300100C || [[#LoadRsaOaepKey]] || ||<br /> |-<br /> | [5.0.0+] 0xC300D60C || [[#EncryptRsaKeyForImport]] || ||<br /> |-<br /> | [1.0.0-4.1.0] 0xC300100D || [[#DecryptRsaPrivateKey]] || ||<br /> |-<br /> | [5.0.0] 0xC300100D || [[#DecryptOrImportRsaKey]] || ||<br /> |-<br /> | [1.0.0-4.1.0] 0xC300100E || [[#LoadSecureExpModKey]] || ||<br /> |-<br /> | 0xC300060F || [[#SecureExpMod]] || ||<br /> |-<br /> | 0xC3000610 || [[#UnwrapRsaOaepWrappedTitleKey]] || ||<br /> |-<br /> | 0xC3000011 || [[#LoadTitleKey]] || ||<br /> |-<br /> | 0xC3000012 || [2.0.0+] UnwrapAesWrappedTitleKey || ||<br /> |}<br /> <br /> The overall concept here is the following:<br /> * All key material (AES and RSA) is stored in userspace, but it's encrypted with random AES kek's (&quot;key encryption keys&quot;).<br /> * Each kek is generated as a function of an access key (picked at random).<br /> * The kek is generated differently depending on the [[#CryptoUsecase]] the key is used for.<br /> ** This means: Each key is &quot;locked&quot; to the [[#CryptoUsecase]] it was designated for.<br /> ** You can use a key for a different usecase, but you will only get garbage output.<br /> * After the kek has been generated, it is wrapped with a session-specific key and given back to userspace.<br /> ** This means: Plaintext kek keys never leave TrustZone.<br /> ** Further, this means: Actual AES/RSA keys never leave TrustZone.<br /> <br /> Note:<br /> The [[#enum_CryptoUsecase|CryptoUsecase_TitleKey]] represents a RSA wrapped AES key.<br /> <br /> === GenerateAesKek ===<br /> Takes an &quot;access key&quot; as input, an [[#enum_CryptoUsecase]].<br /> <br /> Returns a session-unique kek for said usecase.<br /> <br /> === LoadAesKey ===<br /> Takes a session kek created with [[#GenerateAesKek]], and a wrapped AES key.<br /> <br /> The session kek must have been created with [[#enum_CryptoUsecase|CryptoUsecase_Aes]].<br /> <br /> === CryptAes ===<br /> Encrypts/decrypts using Aes (CTR and CBC).<br /> <br /> Key must be set prior using one of the [[#LoadAesKey]], [[#GenerateSpecificAesKey]] or [[#LoadRsaWrappedAesKey]] commands.<br /> <br /> === GenerateSpecificAesKey ===<br /> Todo: This one seems unrelated to [[#enum_CryptoUsecase]].<br /> <br /> === LoadRsaOaepKey ===<br /> Takes a session kek created with [[#GenerateAesKek]], a wrapped AES key, and a wrapped RSA private key.<br /> <br /> The session kek must have been created with [[#enum_CryptoUsecase|CryptoUsecase_RsaOaep]].<br /> <br /> This function was removed in [[5.0.0]], and replaced with [[#EncryptRsaKeyForImport]].<br /> <br /> === EncryptRsaKeyForImport ===<br /> Takes in two session keks created with [[#GenerateAesKek]], two wrapped AES keys, an enum member, and a wrapped RSA private key.<br /> <br /> Decrypts and validates the wrapped RSA private key with the first kek/wrapped key, and re-encrypts it with the second if valid.<br /> <br /> The re-encrypted key is then passed to the user, for use with [[#DecryptOrImportRsaKey]].<br /> <br /> === DecryptRsaPrivateKey ===<br /> Takes a session kek created with [[#GenerateAesKek]], a wrapped AES key, an enum member, and a wrapped RSA private key.<br /> <br /> The session kek must have been created with [[#enum_CryptoUsecase|CryptoUsecase_RsaPrivate]].<br /> <br /> [4.0.0+] The SMC handler when certain conditions pass and SMC_ID==0xC300100D now returns error 0x6 instead of calling the handler funcptr.<br /> <br /> === DecryptOrImportRsaKey ===<br /> <br /> This function replaced [[#DecryptRsaPrivateKey]] in [[5.0.0]], adding an additional enum member argument.<br /> <br /> This SMC extends DecryptRsaPrivateKey's original functionality to enable importing private keys into the security engine instead of decrypting them, when certain enum members are passed.<br /> <br /> === LoadSecureExpModKey ===<br /> Takes a session kek created with [[#GenerateAesKek]], and a wrapped RSA key.<br /> <br /> The session kek must have been created with [[#enum_CryptoUsecase|CryptoUsecase_RsaSecureExpMod]].<br /> <br /> This function was removed in [[5.0.0]], and replaced with [[#EncryptRsaKeyForImport]].<br /> <br /> === SecureExpMod ===<br /> Performs an Exp Mod operation using an exponent previously loaded with the [[#LoadSecureExpModKey]] command.<br /> <br /> === UnwrapRsaOaepWrappedTitleKey ===<br /> Takes an Rsa-Oaep-wrapped TitleKey, an RSA Public Key, and a label hash.<br /> <br /> Performs an Exp Mod operation using an exponent previously loaded with the [[#LoadRsaOaepKey]] command, and then validates/extracts a Titlekey from the resulting message.<br /> <br /> Returns a session-unique AES key especially for use in [[#LoadTitleKey]].<br /> <br /> === LoadTitleKey ===<br /> Takes a session-unique AES key from [[#UnwrapAesWrappedTitleKey]] or [[#UnwrapRsaOaepWrappedTitleKey]].<br /> <br /> === enum CryptoUsecase ===<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || CryptoUsecase_Aes<br /> |-<br /> | 1 || CryptoUsecase_RsaPrivate<br /> |-<br /> | 2 || CryptoUsecase_RsaSecureExpMod<br /> |-<br /> | 3 || CryptoUsecase_RsaOaep<br /> |}<br /> <br /> == ID 1 ==<br /> Functions exposed to the kernel internally.<br /> <br /> {| class=wikitable<br /> ! Sub-ID || Name || In || Out<br /> |-<br /> | 0xC4000001 || [[#CpuSuspend]] || X1=power_state, X2=entrypoint_addr, X3=context_id || None<br /> |-<br /> | 0x84000002 || [[#CpuOff]] || None || None<br /> |-<br /> | 0xC4000003 || [[#CpuOn]] || X1=target_cpu, X2=entrypoint_addr, X3=context_id, X4,X5,X6,X7=0 || X0=result<br /> |-<br /> | 0xC3000004 || [[#GetConfig]] (Same as ID 0, Sub-ID 2) || W1=config_item, X2,X3,X4,X5,X6,X7=0 || X0=result, X1,X2,X3,X4=config_val<br /> |-<br /> | 0xC3000005 || [[#GetRandomBytes]] (Same as ID 0, Sub-ID 6) || X1=size, X2,X3,X4,X5,X6,X7=0 || X0=result, X1,X2,X3,X4,X5,X6,X7=rand_bytes<br /> |-<br /> | 0xC3000006 || [[#Panic]] || W1=panic_color, X2,X3,X4,X5,X6,X7=0 || X0=result<br /> |-<br /> | 0xC3000007 || [2.0.0+] [[#ConfigureCarveout]] || X1=carveout_index, X2=region_phys_addr, X3=region_size, X4,X5,X6,X7=0 || X0=result<br /> |-<br /> | 0xC3000008 || [2.0.0+] [[#ReadWriteRegister]] || X1=reg_addr, W2=rw_mask, W3=in_val, X4,X5,X6,X7=0 || X0=result, W1=out_val<br /> |}<br /> <br /> === CpuSuspend ===<br /> Standard ARM PCSI SMC. Suspends the CPU (CPU0).<br /> <br /> The kernel calls this SMC on shutdown with '''power_state''' set to 0x0201001B (power level: 0x02==system; power type: 0x01==powerdown; ID: 0x1B).<br /> <br /> === CpuOff ===<br /> Standard ARM PCSI SMC. Turns off the CPU (CPU1, CPU2 or CPU3).<br /> <br /> === CpuOn ===<br /> Standard ARM PCSI SMC. Turns on the CPU (CPU1, CPU2 or CPU3).<br /> <br /> === GetConfig ===<br /> Takes a '''config_item''' and returns an associated '''config_val'''.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! ConfigItem || Name<br /> |-<br /> | 1 || [[#DisableProgramVerification]]<br /> |-<br /> | 2 || [[#DramId]]<br /> |-<br /> | 3 || [[#SecurityEngineIrqNumber]]<br /> |-<br /> | 4 || [[#Version]]<br /> |-<br /> | 5 || [[#HardwareType]]<br /> |-<br /> | 6 || [[#IsRetail]]<br /> |-<br /> | 7 || [[#IsRecoveryBoot]]<br /> |-<br /> | 8 || [[#DeviceId]]<br /> |-<br /> | 9 || [1.0.0-4.0.0] [[#BootReason]]<br /> |-<br /> | 10 || [[#MemoryArrange]]<br /> |-<br /> | 11 || [[#IsDebugMode]]<br /> |-<br /> | 12 || [[#KernelMemoryConfiguration]]<br /> |-<br /> | 13 || [[#IsChargerHiZModeEnabled]]<br /> |-<br /> | 14 || [4.0.0+] [[#IsKiosk]]<br /> |-<br /> | 15 || [5.0.0+] [[#NewHardwareType]]<br /> |-<br /> | 16 || [5.0.0+] [[#NewKeyGeneration]]<br /> |-<br /> | 17 || [5.0.0+] [[#Package2Hash]]<br /> |}<br /> <br /> ==== DisableProgramVerification ====<br /> [[Process Manager services|PM]] checks this item and if non-zero, calls fsp-pr SetEnabledProgramVerification(false).<br /> <br /> ==== DramId ====<br /> This is extracted directly from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]].<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Value<br /> ! Description<br /> |-<br /> | 0<br /> | DramId_EristaIcosaSamsung4gb<br /> |-<br /> | 1<br /> | DramId_EristaIcosaHynix4gb<br /> |-<br /> | 2<br /> | DramId_EristaIcosaMicron4gb<br /> |-<br /> | 3<br /> | Reserved<br /> |-<br /> | 4<br /> | DramId_EristaIcosaSamsung6gb<br /> |-<br /> | 5<br /> | [5.0.0+] Reserved<br /> |-<br /> | 6<br /> | [5.0.0+] Reserved<br /> |-<br /> | 7<br /> | [5.0.0+] DramId_MarikoIowax1x2Samsung4gb<br /> |-<br /> | 8<br /> | [5.0.0+] DramId_MarikoIowaSamsung4gb<br /> |-<br /> | 9<br /> | [5.0.0+] DramId_MarikoIowaSamsung8gb<br /> |-<br /> | 10<br /> | [5.0.0+] Reserved<br /> |-<br /> | 11<br /> | [5.0.0+] Reserved<br /> |-<br /> | 12<br /> | [5.0.0+] DramId_MarikoHoagSamsung4gb<br /> |-<br /> | 13<br /> | [5.0.0+] DramId_MarikoHoagSamsung8gb<br /> |}<br /> <br /> [[PCV_services|PCV]] configures memory profiles based on DramId.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Platform<br /> ! DramId<br /> ! Version<br /> |-<br /> | jetson-tx1<br /> | N/A<br /> | 11_40800_01_V9.8.3_V1.6<br /> |-<br /> | nx-abcb<br /> | EristaIcosaSamsung4gb<br /> | 10_40800_NoCfgVersion_V9.8.7_V1.6<br /> |-<br /> | nx-abcb<br /> | EristaIcosaMicron4gb<br /> | 10_40800_NoCfgVersion_V9.8.4_V1.6<br /> |-<br /> | nx-abcb<br /> | EristaIcosaHynix4gb<br /> | 10_40800_NoCfgVersion_V9.8.4_V1.6<br /> |-<br /> | nx-abca2<br /> | EristaIcosaSamsung4gb or EristaIcosaMicron4gb<br /> | 10_40800_NoCfgVersion_V9.8.7_V1.6<br /> |-<br /> | nx-abca2<br /> | EristaIcosaHynix4gb<br /> | 10_40800_NoCfgVersion_V9.8.7_V1.6<br /> |-<br /> | nx-abca2<br /> | EristaIcosaSamsung6gb<br /> | 10_40800_NoCfgVersion_V9.8.7_V1.6<br /> |-<br /> | nx-abca2<br /> | MarikoIowax1x2Samsung4gb<br /> | 01_204000_NoCfgVersion_V0.3.1_V2.0<br /> |-<br /> | nx-abca2<br /> | MarikoIowaSamsung4gb or MarikoHoagSamsung4gb<br /> | 01_204000_NoCfgVersion_V0.3.1_V2.0<br /> |-<br /> | nx-abca2<br /> | MarikoIowaSamsung8gb or MarikoHoagSamsung8gb<br /> | 01_204000_NoCfgVersion_V0.4.2_V2.0<br /> |}<br /> <br /> nx-abcb (Copper) is the SDEV unit. Among other differences, this has extra hardware to support HDMI output.<br /> <br /> nx-abca2 (Icosa) hardware types are variations of the retail form factor.<br /> <br /> ==== SecurityEngineIrqNumber ====<br /> SPL uses this for setting up the security engine IRQ.<br /> <br /> ==== Version ====<br /> The current [[Package2#Versions|Package1 Maxver Constant]] - 1.<br /> <br /> ==== HardwareType ====<br /> [1.0.0+] This item is obtained by checking bits 8 and 2 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]]. It can be 0 (Icosa), 1 (Copper) or 3 (Invalid).<br /> <br /> [4.0.0+] This item is obtained by checking bits 8, 2 and 16-19 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]]. It can be 0 (Icosa), 1 (Copper), 3 (Mariko) or 4 (Invalid).<br /> <br /> A value of 2 (Hoag?) is always mapped to 4 (Invalid).<br /> <br /> ==== IsRetail ====<br /> This item is obtained by checking bits 9 and 0-1 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]]. It can be 0 (Debug), 1 (Retail) or 2 (Invalid).<br /> <br /> ==== IsRecoveryBoot ====<br /> Used to determine if the system is booting from SafeMode firmware.<br /> <br /> ==== DeviceId ====<br /> [[NIM_services|NIM]] checks if this item matches the [[Settings_services|set:cal]] DeviceId with byte7 cleared. If they don't match, a panic is thrown.<br /> <br /> ==== BootReason ====<br /> Used to determine how the system booted.<br /> <br /> ==== MemoryArrange ====<br /> [[Process Manager services|PM]] uses this item for selecting the appropriate size for each [[SVC#LimitableResource|LimitableResource_Memory]].<br /> <br /> ==== IsDebugMode ====<br /> Kernel uses this to determine behavior of svcBreak positive arguments. It will break instead of just force-exiting the process which is what happens on retail.<br /> <br /> [2.0.0+] This is also used with certain debug [[SVC|SVCs]].<br /> <br /> [3.0.0+] [[Loader services|RO]] checks this and if set then skipping NRR rsa signatures is allowed.<br /> <br /> The value of this field is loaded from [[BootConfig]] unsigned-config+0x10 u8 bit1.<br /> <br /> ==== KernelMemoryConfiguration ====<br /> Kernel reads this when setting up memory-related code. If bit0 is set, it will memset various allocated memory-regions with 0x58, 0x59, 0x5A ('X', 'Y', 'Z') instead of zero. This allows Nintendo devs to find uninitialized memory bugs. If bit17-16 is 0b01, the kernel assumes 6GB of DRAM instead of 4GB.<br /> <br /> ==== IsChargerHiZModeEnabled ====<br /> This tells if the TI Charger (bq24192) is active.<br /> <br /> ==== NewKeyGeneration ====<br /> This item is obtained from [[Fuse_registers#FUSE_RESERVED_ODM2|FUSE_RESERVED_ODM2]] if bit 11 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]] is set, [[Fuse_registers#FUSE_RESERVED_ODM0|FUSE_RESERVED_ODM0]] matches 0x8E61ECAE and [[Fuse_registers#FUSE_RESERVED_ODM1|FUSE_RESERVED_ODM1]] matches 0xF2BA3BB2.<br /> <br /> [5.0.0+] [[Filesystem services|FS]] can now use this value for the '''KeyGeneration''' parameter when calling [[#GenerateAesKek|GenerateAesKek]] during &quot;GetBisEncryptionKey&quot;.<br /> <br /> ==== IsKiosk ====<br /> This item is bit 10 from [[Fuse_registers#FUSE_RESERVED_ODM4|FUSE_RESERVED_ODM4]].<br /> <br /> [4.0.0+] [[Settings_services|Settings]] uses this value to overwrite the quest flag from [[Settings_services#set:sys|GetQuestFlag]]. This is used to detect if a Switch is a kiosk unit for display at retail stores.<br /> <br /> ==== NewHardwareType ====<br /> This item is currently hardcoded to 0.<br /> <br /> [5.0.0+] [[PCV_services|PCV]] overrides the value from [[#HardwareType|HardwareType]] and configures PMIC devices with this item.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Value<br /> ! Devices<br /> |-<br /> | 0<br /> | max77620_sd0, max77621_cpu and max77621_gpu<br /> |-<br /> | 1<br /> | max77620_sd0, max77812_cpu and max77812_gpu<br /> |-<br /> | 2<br /> | max77620_sd0, max77812_cpu and max77812_gpu<br /> |}<br /> <br /> ==== Package2Hash ====<br /> This is a SHA-256 hash calculated over the [[Package2|package2]] image. Since the hash calculation is an optional step in pkg2ldr, this item is only valid in recovery mode. Otherwise, an error is returned instead.<br /> <br /> === GetRandomBytes ===<br /> Takes a '''size''' and returns '''rand_bytes'''.<br /> <br /> The kernel limits '''size''' to 0x38 (for fitting in return registers).<br /> <br /> === Panic ===<br /> Issues a system panic.<br /> <br /> The kernel always calls this with '''panic_color''' set to 0xF00.<br /> <br /> === ConfigureCarveout ===<br /> Configures memory controller carveout regions.<br /> <br /> If '''carveout_index''' is 0, '''region_phys_addr''' and '''region_size''' are used to configure '''MC_SECURITY_CARVEOUT4'''.<br /> If '''carveout_index''' is 1, '''region_phys_addr''' and '''region_size''' are used to configure '''MC_SECURITY_CARVEOUT5'''.<br /> Any other '''carveout_index''' values are invalid.<br /> <br /> The kernel calls this with '''carveout_index''' set to 0, '''region_phys_addr''' set to 0x80060000 and '''region_size''' set to a dynamically calculated size which covers all the kernel and built-in sysmodules' DRAM regions.<br /> <br /> === ReadWriteRegister ===<br /> Relays [[SVC#svcReadWriteRegister|svcReadWriteRegister]] to the Secure Monitor.<br /> <br /> = Errors =<br /> {| class=wikitable<br /> ! Value || Description<br /> |-<br /> | 2 || Invalid input<br /> |-<br /> | 3 || Busy<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=SPL_services&diff=4994 2018-09-17T21:56:16Z

<p>Shinyquagsire23: /* GetConfig */ moving this over to SMC</p> <hr /> <div>SPL is responsible for handling all cryptographic operations within the system and relaying them to the [[#SMC|Secure Monitor]] when necessary.<br /> <br /> During [1.0.0-3.0.2], the only existing services were &quot;csrng&quot; and &quot;spl:&quot;. However, in [4.0.0+] the &quot;spl:&quot; service was refactored and split into new services with different permission levels. Each service exposes the IPC command list differently in order to prevent cryptographic operations to take place in the wrong context.<br /> <br /> = csrng =<br /> This is &quot;nn::spl::detail::IRandomInterface&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#GetRandomBytes]]<br /> |}<br /> <br /> == GetRandomBytes ==<br /> Takes a type-6 buffer and fills it with random data from [[SMC#GetRandomBytes|GetRandomBytes SMC]]. Same command for &quot;spl:&quot; and &quot;csrng&quot; services.<br /> <br /> = spl:, spl:mig, spl:fs, spl:ssl, spl:es, spl:manu =<br /> These are &quot;nn::spl::detail::IGeneralInterface&quot;, &quot;nn::spl::detail::ICryptoInterface&quot;, &quot;nn::spl::detail::IFsInterface&quot;, &quot;nn::spl::detail::ISslInterface&quot;, &quot;nn::spl::detail::IEsInterface&quot; and &quot;nn::spl::detail::IManuInterface&quot;(?).<br /> <br /> [2.0.0+] Where previously only one AES engine was utilized, there is now support for 4 of them.<br /> <br /> [2.0.0+] When the session closes, all AES engines that were locked are automatically unlocked.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Permissions<br /> |-<br /> | 0 || [[#GetConfig]] || spl:, spl:mig, spl:fs, spl:ssl, spl:es, spl:manu<br /> |-<br /> | 1 || [[#UserExpMod]] || spl:, spl:mig, spl:fs, spl:ssl, spl:es, spl:manu <br /> |-<br /> | 2 || [[#GenerateAesKek]] || spl:mig, spl:fs, spl:ssl, spl:es, spl:manu <br /> |-<br /> | 3 || [[#LoadAesKey]] || spl:mig, spl:fs, spl:ssl, spl:es, spl:manu<br /> |-<br /> | 4 || [[#GenerateAesKey]] || spl:mig, spl:fs, spl:ssl, spl:es, spl:manu <br /> |-<br /> | 5 || [[#SetConfig]] || spl:, spl:mig, spl:fs, spl:ssl, spl:es, spl:manu <br /> |-<br /> | 7 || [[#GetRandomBytes]] || spl:, spl:mig, spl:fs, spl:ssl, spl:es, spl:manu<br /> |-<br /> | 9 || [[#LoadSecureExpModKey]] || spl:fs<br /> |-<br /> | 10 || [[#SecureExpMod]] || spl:fs<br /> |-<br /> | 11 || [[#IsDevelopment]] || spl:, spl:mig, spl:fs, spl:ssl spl:es, spl:manu<br /> |-<br /> | 12 || [[#GenerateSpecificAesKey]] || spl:fs<br /> |-<br /> | 13 || [[#DecryptRsaPrivateKey]] || spl:ssl, spl:es, spl:manu<br /> |-<br /> | 14 || [[#DecryptAesKey]] || spl:mig, spl:fs, spl:ssl, spl:es, spl:manu<br /> |-<br /> | 15 || [[#DecryptAesCtr]] || spl:mig, spl:fs, spl:ssl, spl:es, spl:manu<br /> |-<br /> | 16 || [[#ComputeCmac]] || spl:mig, spl:fs, spl:ssl, spl:es, spl:manu <br /> |-<br /> | 17 || [[#LoadRsaOaepKey]] || spl:es<br /> |-<br /> | 18 || [[#UnwrapRsaOaepWrappedTitleKey]] || spl:es<br /> |-<br /> | 19 || [[#LoadTitleKey]] || spl:fs<br /> |-<br /> | 20 || [2.0.0+] [[#UnwrapAesWrappedTitleKey ]] || spl:es<br /> |-<br /> | 21 || [2.0.0+] [[#LockAesEngine]] || spl:mig, spl:fs, spl:ssl, spl:es, spl:manu<br /> |-<br /> | 22 || [2.0.0+] [[#UnlockAesEngine]] || spl:mig, spl:fs, spl:ssl, spl:es, spl:manu<br /> |-<br /> | 23 || [2.0.0+] [[#GetSplWaitEvent]] || spl:mig, spl:fs, spl:ssl, spl:es, spl:manu<br /> |-<br /> | 24 || [3.0.0+] [[#SetSharedData]] || spl:, spl:mig, spl:fs, spl:ssl, spl:es, spl:manu<br /> |-<br /> | 25 || [3.0.0+] [[#GetSharedData]] || spl:, spl:mig, spl:fs, spl:ssl, spl:es, spl:manu<br /> |-<br /> | 26 || [5.0.0+] ImportSslRsaKey || spl:ssl<br /> |-<br /> | 27 || [5.0.0+] SecureExpModWithSslKey || spl:ssl<br /> |-<br /> | 28 || [5.0.0+] ImportEsRsaKey || spl:es<br /> |-<br /> | 29 || [5.0.0+] SecureExpModWithEsKey || spl:es<br /> |-<br /> | 30 || [5.0.0+] EncryptManuRsaKeyForImport || spl:manu<br /> |-<br /> | 31 || [5.0.0+] GetPackage2Hash || spl:fs<br /> |}<br /> <br /> == GetConfig ==<br /> Wrapper for [[SMC#GetConfig|GetConfig SMC]].<br /> <br /> Takes a u32 ('''ConfigItem'''), and returns one or more u64s ('''ConfigVal''').<br /> <br /> == UserExpMod ==<br /> Wrapper for [[SMC#ExpMod|ExpMod SMC]].<br /> <br /> Takes one type-10 (C descriptor) buffer ('''data_out_buf''') and 3 type-9 (X descriptor) buffers ('''data_in_buf''', '''exp_in_buf''' and '''mod_in_buf''').<br /> <br /> Performs asymmetric crypto with user supplied modulus and exponent.<br /> <br /> == GenerateAesKek ==<br /> Wrapper for [[SMC#GenerateAesKek|GenerateAesKek SMC]].<br /> <br /> Takes a 16-byte EKS ('''Encryption Key Source''') and two words ('''KeyGeneration''' and '''option''') as input.<br /> <br /> Returns a scrambled sealed KEK ('''Key Encryption Key''' used as '''key_x''').<br /> <br /> == LoadAesKey ==<br /> Wrapper for [[SMC#LoadAesKey|LoadAesKey SMC]].<br /> <br /> Takes a u32 ('''keyslot''') and two 16-byte keys ('''key_x''' and '''key_y''').<br /> <br /> Sets the specified '''keyslot''' with a key generated from '''key_x''' and '''key_y'''.<br /> <br /> [2.0.0+] Now verifies that the engine in use (0..3) is locked/owned by the current spl session, otherwise errors with 0xD21A. Previously engine was hardcoded to 0.<br /> <br /> == GenerateAesKey ==<br /> Takes a 16-byte KEK ('''key_x''') and a 16-byte encrypted key ('''enc_key''').<br /> <br /> Generates a new key by decrypting (AES-ECB) '''enc_key''' with a key generated from the supplied '''key_x''' and a fixed '''key_y''' set with [[SMC#LoadAesKey|LoadAesKey SMC]].<br /> <br /> [2.0.0+] Previously, it always used engine 0. Now it tries to allocate an engine to be used and returns 0xD01A if they're all busy. When the command is done, the engine is released.<br /> <br /> == SetConfig ==<br /> Wrapper for [[SMC#SetConfig|SetConfig SMC]].<br /> <br /> Takes a u32 ('''ConfigItem''') and a u64 ('''ConfigVal''').<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! ConfigItem || Name<br /> |-<br /> | 13 || BatteryProfile<br /> |}<br /> <br /> Any other '''ConfigItem''', besides 13, can't be set.<br /> <br /> == LoadSecureExpModKey ==<br /> Wrapper for [[SMC#LoadSecureExpModKey|LoadSecureExpModKey SMC]].<br /> <br /> Takes one type-9 (X descriptor) buffer ('''enc_privk_in_buf'''), a 16-byte KEK ('''key_x'''), a 16-byte key ('''key_y''') and a u32 ('''version''').<br /> '''version''' is 0 for normal keys or 1 for extended keys.<br /> <br /> Decrypts '''enc_privk_in_buf''' with a key generated from '''key_x''' and '''key_y''' and imports it for later usage.<br /> <br /> [5.0.0+] This now calls [[SMC#EncryptRsaKeyForImport|EncryptRsaKeyForImport SMC]] instead.<br /> <br /> == SecureExpMod ==<br /> Takes 3 type-9 (X descriptor) buffers ('''data_in_buf''', '''mod_in_buf''' and '''param0_in_buf''').<br /> <br /> Uses [[SMC#SecureExpMod|SecureExpMod SMC]] to decrypt '''data_in_buf''' using the private key imported with [[#LoadSecureExpModKey]] and the supplied '''mod_in_buf''' and '''param0_in_buf'''.<br /> <br /> Generates and returns a 16-byte sealed titlekey.<br /> <br /> == IsDevelopment ==<br /> No input params.<br /> <br /> Uses [[#GetConfig]] internally with id=6. Returns true if output from that is 0, or if the SMC returned error 2.<br /> <br /> Returns an u8 flag for whether the system is devunit. Output flag is 0 on retail.<br /> <br /> == GenerateSpecificAesKey ==<br /> Wrapper for [[SMC#GenerateSpecificAesKey|GenerateSpecificAesKey SMC]].<br /> <br /> Takes a 16-byte seed ('''key_seed''') and two words ('''KeyGeneration''' and '''option''') as input.<br /> <br /> Returns a scrambled key ('''key_a''').<br /> <br /> == DecryptRsaPrivateKey ==<br /> Wrapper for [[SMC#DecryptRsaPrivateKey|DecryptRsaPrivateKey SMC]].<br /> <br /> Takes one type-10 (C descriptor) buffer ('''dec_privk_out_buf'''), one type-9 (X descriptor) buffer ('''enc_privk_in_buf'''), a 16-byte KEK ('''key_x'''), a 16-byte key ('''key_y''') and a u32 ('''version''').<br /> '''version''' is 0 for normal keys or 1 for extended keys.<br /> <br /> Decrypts '''enc_privk_in_buf''' into '''dec_privk_out_buf''' with a key generated from '''key_x''' and '''key_y'''.<br /> <br /> Used by [[SSL_services|SSL]]-sysmodule for TLS client-privk.<br /> <br /> [5.0.0+] This now calls [[SMC#DecryptOrImportRsaKey|DecryptOrImportRsaKey SMC]] instead.<br /> <br /> == DecryptAesKey ==<br /> Takes a 16-byte encrypted key ('''enc_key''') and two words ('''KeyGeneration''' and '''option''') as input.<br /> <br /> Decrypts (AES-ECB) '''enc_key''' with a key generated from fixed '''key_x''' and '''key_y''' set with [[SMC#LoadAesKey|LoadAesKey SMC]] and returns a 16-byte decrypted key ('''dec_key''').<br /> <br /> [2.0.0+] Introduced same engine allocation code as for [[#GenerateAesKey]].<br /> <br /> == DecryptAesCtr ==<br /> Takes a type-0x46 (B descriptor) buffer ('''data_out_buf'''), a u32 ('''keyslot'''), a type-0x45 (A descriptor) buffer ('''data_in_buf''') and a 16-byte CTR ('''aes_ctr''').<br /> <br /> Uses [[SMC#CryptAes|CryptAes SMC]] to decrypt '''data_in_buf''' into '''data_out_buf''', using the key set in the specified '''keyslot'''.<br /> <br /> [2.0.0+] Verifies the engine is locked by current session.<br /> <br /> == ComputeCmac ==<br /> Wrapper for [[SMC#ComputeCmac|ComputeCmac SMC]].<br /> <br /> Takes one type-9 (X descriptor) buffer ('''data_in_buf''') and a u32 ('''type?''').<br /> <br /> Returns a 16-byte CMAC calculated over '''data_in_buf'''.<br /> <br /> [2.0.0+] Verifies the engine is locked by current session.<br /> <br /> == LoadRsaOaepKey ==<br /> Wrapper for [[SMC#LoadRsaOaepKey|LoadRsaOaepKey SMC]].<br /> <br /> Takes one type-9 (X descriptor) buffer (enc_privk_in_buf), a 16-byte KEK (key_x), a 16-byte key (key_y) and a u32 (version). version is 0 for normal keys or 1 for extended keys.<br /> <br /> Decrypts enc_privk_in_buf with a key generated from key_x and key_y and imports it for later usage.<br /> <br /> == UnwrapRsaOaepWrappedTitleKey ==<br /> Wrapper for [[SMC#UnwrapRsaOaepWrappedTitleKey|UnwrapRsaOaepWrappedTitleKey SMC]].<br /> <br /> Takes one type-10 (C descriptor) buffer ('''data_out_buf''') and 3 type-9 (X descriptor) buffers ('''data_in_buf''', '''mod_in_buf''' and '''label_hash_in_buf''').<br /> <br /> Decrypts '''data_in_buf''' into '''data_out_buf''' using the private key imported with [[#LoadRsaOaepKey]] and the supplied '''mod_in_buf'''. Afterwards, verifies RSA-OAEP encoding using '''label_hash_in_buf'''.<br /> <br /> Returns an u32 ('''dec_data_size''').<br /> <br /> == LoadTitleKey ==<br /> Wrapper for [[SMC#LoadTitleKey|LoadTitleKey SMC]].<br /> <br /> Takes a u32 ('''keyslot''') and a 16-byte sealed titlekey.<br /> <br /> Sets the specified '''keyslot''' with the titlekey.<br /> <br /> [2.0.0+] Verifies the engine is locked by current session.<br /> <br /> == UnwrapAesWrappedTitleKey ==<br /> Wrapper for [[SMC#UnwrapAesWrappedTitleKey|UnwrapAesWrappedTitleKey SMC]].<br /> <br /> Takes a 16-byte EKS ('''Encryption Key Source''').<br /> <br /> Returns a sealed titlekey.<br /> <br /> == LockAesEngine ==<br /> Returns the id of the engine that was locked, or 0xD01A if all engines are busy. You need to lock an engine before using AES functions.<br /> <br /> == UnlockAesEngine ==<br /> Takes a single u32 and unlocks the engine with that id. It must be owned by current session otherwise 0xD21A will be returned.<br /> <br /> == GetSplWaitEvent ==<br /> Returns an event handle for synchronizing with the locked AES engine.<br /> <br /> == SetSharedData ==<br /> Sets a static dword in spl .bss to the user input u32.<br /> <br /> [4.0.0+] returns 0xD41A if a value has been previously set without being [[#GetSharedData|gotten]].<br /> <br /> == GetSharedData ==<br /> Returns the static dword in spl .bss that can be set via [[#SetSharedData]].<br /> <br /> [4.0.0+] returns 0xD61A if a value has not previously been set, and unsets the value after getting it.<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Savegames&diff=4768 2018-06-17T03:00:35Z

<p>Shinyquagsire23: </p> <hr /> <div>This page describes the format of savegames contained in NAND. NAND savegames do not use an container with the entire file encrypted. Various areas of the saveimage is uninitialized data, resulting in encrypted data in those areas (like 3DS did).<br /> <br /> === AES CMAC header ===<br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Image offset<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 0x10<br /> | AES-CMAC over DISF header (size 0x200)<br /> |-<br /> | 0x10<br /> | 0xF0<br /> | Zero padding<br /> |}<br /> <br /> The final CMAC key used for this is generated using GenerateAesKek with a kek source and the device key, along with and LoadAesKey and a set key seed.<br /> <br /> ==== DISF ====<br /> <br /> * This is located @ 0x100 in the image, following the CMAC header.<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x000<br /> | 4<br /> | Magic (&quot;DISF&quot;)<br /> |-<br /> | 0x004<br /> | 4<br /> | Magic Number (0x40000)<br /> |-<br /> | 0x008<br /> | 32<br /> | Hash of start of DPFS to end of 0x4000 block (usually/always? 0x300-0x3FFF)<br /> |-<br /> | 0x028<br /> | 8<br /> | Primary Partition Table Offset<br /> |-<br /> | 0x030<br /> | 8<br /> | Primary Partition Table Size<br /> |-<br /> | 0x038<br /> | 8<br /> | Secondary Partition Table Offset<br /> |-<br /> | 0x040<br /> | 8<br /> | Secondary Partition Table Size<br /> |-<br /> | 0x048<br /> | 8<br /> | Save Partition Offset<br /> |-<br /> | 0x050<br /> | 8<br /> | Save Partition Size<br /> |-<br /> | 0x258<br /> | <br /> | End<br /> |}<br /> <br /> ==== DPFS ====<br /> <br /> * This is located @ 0x300 in the image, following DISF.<br /> * Block sizes are log2<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 4<br /> | Magic (&quot;DPFS&quot;)<br /> |-<br /> | 0x04<br /> | 4<br /> | Magic Number (0x10000)<br /> |-<br /> | 0x08<br /> | 8<br /> | Offset 0<br /> |-<br /> | 0x10<br /> | 8<br /> | Size 0<br /> |-<br /> | 0x18<br /> | 4<br /> | Block Size 0, in log 2<br /> |-<br /> | 0x1C<br /> | 8<br /> | Offset 1<br /> |-<br /> | 0x24<br /> | 8<br /> | Size 1<br /> |-<br /> | 0x2C<br /> | 4<br /> | Block Size 1, in log 2<br /> |-<br /> | 0x30<br /> | 8<br /> | Offset 2<br /> |-<br /> | 0x38<br /> | 8<br /> | Size 2<br /> |-<br /> | 0x40<br /> | 4<br /> | Block Size 2, in log 2<br /> |-<br /> |}<br /> <br /> ==== IVFC ====<br /> <br /> * Generally follows DPFS, similar to 3DS.<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 4<br /> | Magic (&quot;IVFC&quot;)<br /> |-<br /> | 0x04<br /> | 4<br /> | Magic Number (0x20000)<br /> |-<br /> | 0x08<br /> | 8<br /> | Master hash size?<br /> |-<br /> | 0x10<br /> | 8<br /> | Level 1 offset<br /> |-<br /> | 0x18<br /> | 8<br /> | Level 1 size<br /> |-<br /> | 0x20<br /> | 4<br /> | Level 1 block size, in log2<br /> |-<br /> | 0x24<br /> | 4<br /> | Reserved<br /> |-<br /> | 0x28<br /> | 8<br /> | Level 2 offset<br /> |-<br /> | 0x30<br /> | 8<br /> | Level 2 size<br /> |-<br /> | 0x38<br /> | 4<br /> | Level 2 block size, in log2.<br /> |-<br /> | 0x3C<br /> | 4<br /> | Reserved<br /> |-<br /> | 0x40<br /> | 8<br /> | Level 3 offset<br /> |-<br /> | 0x48<br /> | 8<br /> | Level 3 size<br /> |-<br /> | 0x50<br /> | 4<br /> | Level 3 block size, in log2.<br /> |-<br /> | 0x54<br /> | 4<br /> | Reserved<br /> |-<br /> | 0x58<br /> | 8<br /> | Level 4 offset<br /> |-<br /> | 0x60<br /> | 8<br /> | Level 4 size<br /> |-<br /> | 0x68<br /> | 4<br /> | Level 4 block size, in log2.<br /> |-<br /> | 0x6C<br /> | 4<br /> | Reserved<br /> |-<br /> | 0x70<br /> | 48<br /> | Unknown, reserved?<br /> |-<br /> | 0xA0<br /> | 32<br /> | Hash<br /> |-<br /> |}<br /> <br /> ==== JNGL ====<br /> <br /> * Generally follows IVFC<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 4<br /> | Magic (&quot;JNGL&quot;)<br /> |-<br /> | 0x04<br /> | 4<br /> | Magic Number (0x10000)<br /> |-<br /> | 0x08<br /> | 8<br /> | Savedata Size<br /> |-<br /> | 0x10<br /> | 8<br /> | Unknown, Size<br /> |-<br /> | 0x18<br /> | 8<br /> | Savedata Blocksize?<br /> |-<br /> | 0x20<br /> | 4<br /> | Unknown<br /> |-<br /> | 0x24<br /> | 4<br /> | Unknown<br /> |-<br /> | 0x28<br /> | 8<br /> | Unknown<br /> |-<br /> | 0x30<br /> | 464<br /> | Padding?<br /> |-<br /> |}<br /> <br /> ==== SAVE ====<br /> <br /> * Generally follows JNGL, structure is different from 3DS.<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 4<br /> | Magic (&quot;SAVE&quot;)<br /> |-<br /> | 0x04<br /> | 4<br /> | Magic Number (0x60000)<br /> |-<br /> | 0x08<br /> | 8<br /> | Unknown, number<br /> |-<br /> | 0x10<br /> | 8<br /> | Unknown, block size<br /> |-<br /> | 0x18<br /> | 8<br /> | Unknown, block size<br /> |-<br /> | 0x20<br /> | 8<br /> | Unknown<br /> |-<br /> |}<br /> <br /> ==== RMAP ====<br /> <br /> * There are generally two RMAP blocks in sequence.<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 4<br /> | Magic (&quot;RMAP&quot;)<br /> |-<br /> | 0x04<br /> | 4<br /> | Magic Number (0x10000)<br /> |-<br /> |}<br /> <br /> === Files ===<br /> <br /> ==== File Offset Table ====<br /> <br /> * Indexes 0 and 1 are reserved to point towards the folder and file tables.<br /> <br /> ===== File Offset Table Entry =====<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 3<br /> | Data offset, in blocks<br /> |-<br /> | 0x03<br /> | 1<br /> | Unknown, 80<br /> |-<br /> | 0x04<br /> | 4<br /> | Unknown, 0<br /> |}<br /> <br /> ==== File/Folder Table Entry ====<br /> <br /> * The root file/folder index is generally 2<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 4<br /> | Parent Folder Index<br /> |-<br /> | 0x04<br /> | 64<br /> | Filename<br /> |-<br /> | 0x44<br /> | 4<br /> | File/Folder Index?<br /> |-<br /> | 0x48<br /> | 4<br /> | File offset index in offset table, 0 for folders<br /> |-<br /> | 0x4c<br /> | 8<br /> | File size, or number of files for folders<br /> |-<br /> | 0x54<br /> | 8<br /> | Unknown<br /> |-<br /> | 0x5c<br /> | 4<br /> | Next File Index, same as folder index for folders<br /> |-<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Savegames&diff=4767 2018-06-17T02:53:14Z

<p>Shinyquagsire23: </p> <hr /> <div>This page describes the format of savegames contained in NAND. NAND savegames do not use an container with the entire file encrypted. Various areas of the saveimage is uninitialized data, resulting in encrypted data in those areas (like 3DS did).<br /> <br /> === AES CMAC header ===<br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Image offset<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 0x10<br /> | AES-CMAC over DISF header (size 0x200)<br /> |-<br /> | 0x10<br /> | 0xF0<br /> | Zero padding<br /> |}<br /> <br /> The final CMAC key used for this is generated using GenerateAesKek with a kek source and the device key, along with and LoadAesKey and a set key seed.<br /> <br /> ==== DISF ====<br /> <br /> * This is located @ 0x100 in the image, following the CMAC header.<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x000<br /> | 4<br /> | Magic (&quot;DISF&quot;)<br /> |-<br /> | 0x004<br /> | 4<br /> | Magic Number (0x40000)<br /> |-<br /> | 0x008<br /> | 32<br /> | Hash of start of DPFS to end of 0x4000 block (usually/always? 0x300-0x3FFF)<br /> |-<br /> | 0x028<br /> | 8<br /> | Primary Partition Table Offset<br /> |-<br /> | 0x030<br /> | 8<br /> | Primary Partition Table Size<br /> |-<br /> | 0x038<br /> | 8<br /> | Secondary Partition Table Offset<br /> |-<br /> | 0x040<br /> | 8<br /> | Secondary Partition Table Size<br /> |-<br /> | 0x048<br /> | 8<br /> | Save Partition Offset<br /> |-<br /> | 0x050<br /> | 8<br /> | Save Partition Size<br /> |-<br /> | 0x258<br /> | <br /> | End<br /> |}<br /> <br /> ==== DPFS ====<br /> <br /> * This is located @ 0x200 in the image, following DISF.<br /> * Block sizes are log2<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 4<br /> | Magic (&quot;DPFS&quot;)<br /> |-<br /> | 0x04<br /> | 4<br /> | Magic Number (0x10000)<br /> |-<br /> | 0x08<br /> | 8<br /> | Offset 0<br /> |-<br /> | 0x10<br /> | 8<br /> | Size 0<br /> |-<br /> | 0x18<br /> | 4<br /> | Block Size 0, in log 2<br /> |-<br /> | 0x1C<br /> | 8<br /> | Offset 1<br /> |-<br /> | 0x24<br /> | 8<br /> | Size 1<br /> |-<br /> | 0x2C<br /> | 4<br /> | Block Size 1, in log 2<br /> |-<br /> | 0x30<br /> | 8<br /> | Offset 2<br /> |-<br /> | 0x38<br /> | 8<br /> | Size 2<br /> |-<br /> | 0x40<br /> | 4<br /> | Block Size 2, in log 2<br /> |-<br /> |}<br /> <br /> ==== IVFC ====<br /> <br /> * Generally follows DPFS, similar to 3DS.<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 4<br /> | Magic (&quot;IVFC&quot;)<br /> |-<br /> | 0x04<br /> | 4<br /> | Magic Number (0x20000)<br /> |-<br /> | 0x08<br /> | 8<br /> | Master hash size?<br /> |-<br /> | 0x10<br /> | 8<br /> | Level 1 offset<br /> |-<br /> | 0x18<br /> | 8<br /> | Level 1 size<br /> |-<br /> | 0x20<br /> | 4<br /> | Level 1 block size, in log2<br /> |-<br /> | 0x24<br /> | 4<br /> | Reserved<br /> |-<br /> | 0x28<br /> | 8<br /> | Level 2 offset<br /> |-<br /> | 0x30<br /> | 8<br /> | Level 2 size<br /> |-<br /> | 0x38<br /> | 4<br /> | Level 2 block size, in log2.<br /> |-<br /> | 0x3C<br /> | 4<br /> | Reserved<br /> |-<br /> | 0x40<br /> | 8<br /> | Level 3 offset<br /> |-<br /> | 0x48<br /> | 8<br /> | Level 3 size<br /> |-<br /> | 0x50<br /> | 4<br /> | Level 3 block size, in log2.<br /> |-<br /> | 0x54<br /> | 4<br /> | Reserved<br /> |-<br /> | 0x58<br /> | 8<br /> | Level 4 offset<br /> |-<br /> | 0x60<br /> | 8<br /> | Level 4 size<br /> |-<br /> | 0x68<br /> | 4<br /> | Level 4 block size, in log2.<br /> |-<br /> | 0x6C<br /> | 4<br /> | Reserved<br /> |-<br /> | 0x70<br /> | 48<br /> | Unknown, reserved?<br /> |-<br /> | 0xA0<br /> | 32<br /> | Hash<br /> |-<br /> |}<br /> <br /> ==== JNGL ====<br /> <br /> * Generally follows IVFC<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 4<br /> | Magic (&quot;JNGL&quot;)<br /> |-<br /> | 0x04<br /> | 4<br /> | Magic Number (0x10000)<br /> |-<br /> | 0x08<br /> | 8<br /> | Savedata Size<br /> |-<br /> | 0x10<br /> | 8<br /> | Unknown, Size<br /> |-<br /> | 0x18<br /> | 8<br /> | Savedata Blocksize?<br /> |-<br /> | 0x20<br /> | 4<br /> | Unknown<br /> |-<br /> | 0x24<br /> | 4<br /> | Unknown<br /> |-<br /> | 0x28<br /> | 8<br /> | Unknown<br /> |-<br /> | 0x30<br /> | 464<br /> | Padding?<br /> |-<br /> |}<br /> <br /> ==== SAVE ====<br /> <br /> * Generally follows JNGL, structure is different from 3DS.<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 4<br /> | Magic (&quot;SAVE&quot;)<br /> |-<br /> | 0x04<br /> | 4<br /> | Magic Number (0x60000)<br /> |-<br /> | 0x08<br /> | 8<br /> | Unknown, number<br /> |-<br /> | 0x10<br /> | 8<br /> | Unknown, block size<br /> |-<br /> | 0x18<br /> | 8<br /> | Unknown, block size<br /> |-<br /> | 0x20<br /> | 8<br /> | Unknown<br /> |-<br /> |}<br /> <br /> ==== RMAP ====<br /> <br /> * There are generally two RMAP blocks in sequence.<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 4<br /> | Magic (&quot;RMAP&quot;)<br /> |-<br /> | 0x04<br /> | 4<br /> | Magic Number (0x10000)<br /> |-<br /> |}<br /> <br /> === Files ===<br /> <br /> ==== File Offset Table ====<br /> <br /> * Indexes 0 and 1 are reserved to point towards the folder and file tables.<br /> <br /> ===== File Offset Table Entry =====<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 3<br /> | Data offset, in blocks<br /> |-<br /> | 0x03<br /> | 1<br /> | Unknown, 80<br /> |-<br /> | 0x04<br /> | 4<br /> | Unknown, 0<br /> |}<br /> <br /> ==== File/Folder Table Entry ====<br /> <br /> * The root file/folder index is generally 2<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Start<br /> ! Length<br /> ! Description<br /> |-<br /> | 0x00<br /> | 4<br /> | Parent Folder Index<br /> |-<br /> | 0x04<br /> | 64<br /> | Filename<br /> |-<br /> | 0x44<br /> | 4<br /> | File/Folder Index?<br /> |-<br /> | 0x48<br /> | 4<br /> | File offset index in offset table, 0 for folders<br /> |-<br /> | 0x4c<br /> | 8<br /> | File size, or number of files for folders<br /> |-<br /> | 0x54<br /> | 8<br /> | Unknown<br /> |-<br /> | 0x5c<br /> | 4<br /> | Next File Index, same as folder index for folders<br /> |-<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Bus_services&diff=4589 2018-05-07T19:23:10Z

<p>Shinyquagsire23: </p> <hr /> <div>= gpio =<br /> This is &quot;nn::gpio::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession]]<br /> |-<br /> | 2 || [[#OpenSessionForTest]]<br /> |-<br /> | 3 || IsWakeEventActive <br /> |-<br /> | 4 || GetWakeEventActiveFlagSet<br /> |-<br /> | 5 || SetWakeEventActiveFlagSetForDebug<br /> |-<br /> | 6 || SetWakePinDebugMode<br /> |-<br /> | 7 || [5.0.0+] [[#OpenSession2]]<br /> |-<br /> | 8 || [5.0.0+] IsWakeEventActive2<br /> |-<br /> | 9 || [5.0.0+] SetWakeEventActiveFlagSetForDebug2<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! GpioPadName || GpioPadDescriptor || Tegra (port, pin) || Usage || Direction || Used by<br /> |-<br /> | 0x01 || 0xCC || Z, 4 || Audio Codec (ALC5639) Power || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]], [[Fatal services]])<br /> |-<br /> | 0x02 || 0x24 || E, 4 || SDCard Power || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x03 || 0x3C || H, 4 || BT_RST_PH4 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Bluetooth Driver services]])<br /> |-<br /> | 0x04 || 0xDA || BB, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x05 || 0xDB || BB, 3 || GcAsic Power || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x06 || 0xDC || BB, 4 || Headphone Detect || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]])<br /> |-<br /> | 0x07 || 0x25 || E, 5 || || Out || Icosa, Copper, Hoag<br /> |-<br /> | 0x08 || 0x90 || S, 0 || DebugPadDriver || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x09 || 0x91 || S, 1 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0A || 0x96 || S, 6 || Charger IC (BQ24193) Charge Enable || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x0B || 0x97 || S, 7 || CPU fan sampling || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0C || 0x26 || E, 6 || Joy-Con(L) IsAttached (insertion, Joy-Con pin 5/console TX, pulled low on insert?) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x0D || 0x05 || A, 5 || Fan enable (normal) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x0E || 0x78 || P, 0 || SDMMC3_CLK_PP0? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x0F || 0x93 || S, 3 || GcAsic IRQ || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x10 || 0x7D || P, 5 || SDMMC3_DAT0_PP5? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x11 || 0x7C || P, 4 || SDMMC3_DAT1_PP4? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x12 || 0x7B || P, 3 || SDMMC3_DAT2_PP3? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x13 || 0x7A || P, 2 || SDMMC3_DAT3_PP2? || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x14 || 0xBC || X, 4 || Temperature Sensor || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x15 || 0xAE || V, 6 || || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Audio services]])<br /> |-<br /> | 0x16 || 0xBA || X, 2 || MOTION_INT_PX2? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x17 || 0xB9 || X, 1 || TouchPanel IRQ (TOUCH_INT_PX1) (unused - polled instead) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x18 || 0xBD || X, 5 || Power Button (BUTTON_POWER_ON_PX5) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x19 || 0xBE || X, 6 || Volume Up (BUTTON_VOL_UP_PX6) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Boot2]], [[Audio services]])<br /> |-<br /> | 0x1A || 0xBF || X, 7 || Volume Down (BUTTON_VOL_DOWN_PX7) || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Boot2]], [[Audio services]])<br /> |-<br /> | 0x1B || 0xC0 || Y, 0 || Fuel Gauge IC (MAX17050) IRQ || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x1C || 0xC1 || Y, 1 || BUTTON_HOME_PY1 || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x1D || 0xA9 || V, 1 || Backlight Enable (LCD_BL_EN_PV1) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]], [[Backlight services]])<br /> |-<br /> | 0x1E || 0xAA || V, 2 || Backlight Reset (LCD_RST_PV2) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x1F || 0x55 || K, 5 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x20 || 0xAD || V, 5 || USB-PD controller (RHOM BM92T30MWV) related || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x21 || 0xC8 || Z, 0 || Charger IC (BQ24193) IRQ || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x22 || 0xCA || Z, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x23 || 0xCB || Z, 3 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x24 || 0x4F || J, 7 || TouchPanel reset || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x25 || 0x50 || K, 0 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x26 || 0x51 || K, 1 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x27 || 0x52 || K, 2 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x28 || 0x54 || K, 4 || USB-PD controller (RHOM BM92T30MWV) IRQ || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x29 || 0x56 || K, 6 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x2A || 0x57 || K, 7 || || In || Icosa, Copper, Hoag<br /> |-<br /> | 0x2B || 0x53 || K, 3 || Joy-Con(R) NwcpDriver1.NwcpCharger || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x2C || 0xE3 || CC, 3 || Joy-Con(L) NwcpDriver0.NwcpCharger || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x2D || 0x38 || H, 0 || WIFI_EN_PH0? || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x2E || 0x39 || H, 1 || WIFI_RST_PH1 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Wlan services]], [[PCIe services]])<br /> |-<br /> | 0x2F || 0x3B || H, 3 || AP_WAKE_BT_PH3 || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Bluetooth Driver services]])<br /> |-<br /> | 0x30 || 0x3D || H, 5 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x31 || 0x3F || H, 7 || || Out || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x32 || 0x40 || I, 0 || Backlight +5V || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x33 || 0x41 || I, 1 || Backlight -5V || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x34 || 0x3E || H, 6 || Joy-Con(R) IsAttached (insertion, Joy-Con pin 5/console TX, pulled low on insert?) || In || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x35 || 0xE2 || CC, 2 || || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x36 || 0xE4 || CC, 4 || Fan enable (high power) || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]])<br /> |-<br /> | 0x37 || 0x3A || H, 2 || || In || Icosa, Copper, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x38 || 0xC9 || Z, 1 || SDCard Card Detect || In || Icosa, Copper, Hoag, [5.0.0+] Mariko &lt;br&gt;([[Filesystem services]])<br /> |-<br /> | 0x39 || 0x4D || J, 5 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x3A || 0x58 || L, 0 || Charger IC (BQ24193) OTG charge select || Out || Icosa, Hoag, [5.0.0+] Mariko &lt;br&gt;([[PTM services]], [[USB services]])<br /> |-<br /> | 0x3B || 0x3E || H, 6 || Joy-Con(R) NwcpDriver1.GpioMonitorTask0 duplicate? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x3C || 0x26 || E, 6 || Joy-Con(L) NwcpDriver1.GpioMonitorTask0 duplicate? || In || Icosa, Hoag, [5.0.0+] Mariko<br /> |-<br /> | 0x3D || -1 || || || ||<br /> |-<br /> | 0x3E || 0x33 || G, 3 || Joy-Con(R) CTS (checked low) || In || None &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x3F || 0x1C || D, 4 || Joy-Con(L) CTS (checked low) || In || None &lt;br&gt;([[HID services]])<br /> |-<br /> | 0x40 || 0xD9 || BB, 1 || || Out || [2.0.0+] Copper<br /> |-<br /> | 0x41 || 0x0C || B, 4 || Lid Closed (unused) || In || [2.0.0+] Copper<br /> |-<br /> | 0x42 || 0x0D || B, 5 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x43 || 0x21 || E, 1 || USB power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x44 || 0x27 || E, 7 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x45 || 0x92 || S, 2 || || In || [2.0.0+] Copper<br /> |-<br /> | 0x46 || 0x95 || S, 5 || USB root port 4 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x47 || 0x98 || T, 0 || USB root port 3 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x48 || 0x10 || C, 0 || HdmiHotplug || Out || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x49 || 0x11 || C, 1 || USB root port 2 power || Out || [2.0.0+] Copper &lt;br&gt;([[USB services]])<br /> |-<br /> | 0x4A || 0x12 || C, 2 || HdmiHotplug || Out || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | 0x4B || 0x42 || I, 2 || || Out || [2.0.0+] Copper<br /> |-<br /> | 0x4C || 0xE6 || CC, 6 || || In || [2.0.0+] Copper<br /> |-<br /> | [2.0.0+] 0x4D || 0xAC || V, 4 || || Out || [2.0.0+] Copper<br /> |-<br /> | [2.0.0+] 0x4E || 0xE1 || CC, 1 || HdmiHotplug (HDMI_INT_DP_HPD_PCC1) || In || [2.0.0+] Copper &lt;br&gt;([[NV services]])<br /> |-<br /> | [5.0.0+] 0x4F || 0x56 || K, 6 || || || None<br /> |-<br /> | - || 0x32 || G, 2 || Joy-Con(R) RTS || || None<br /> |-<br /> | - || 0x1B || D, 3 || Joy-Con(L) RTS || || None<br /> |}<br /> <br /> == GpioPadDescriptor ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bits || Description<br /> |-<br /> | 7-5 || Controller index<br /> |-<br /> | 4-3 || Port index<br /> |-<br /> | 2-0 || Pin number<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes a raw [[#GpioPadDescriptor]] and returns a [[#IPadSession]] session for it.<br /> <br /> == OpenSession ==<br /> Same thing as [[#OpenSessionForDev]] except it takes a '''GpioPadName''' which is then converted to a [[#GpioPadDescriptor]]. Returns an [[#IPadSession]] session.<br /> <br /> == OpenSessionForTest ==<br /> Same as [[#OpenSession]] but panics on failure.<br /> <br /> == OpenSession2 ==<br /> Same as [[#OpenSession]] but takes a '''DeviceCode''' instead of a '''GpioPadName'''.<br /> <br /> == IPadSession ==<br /> This is &quot;nn::gpio::IPadSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetDirection<br /> |-<br /> | 1 || GetDirection<br /> |-<br /> | 2 || SetInterruptMode<br /> |-<br /> | 3 || GetInterruptMode<br /> |-<br /> | 4 || SetInterruptEnable<br /> |-<br /> | 5 || GetInterruptEnable<br /> |-<br /> | 6 || GetInterruptStatus<br /> |-<br /> | 7 || ClearInterruptStatus<br /> |-<br /> | 8 || SetValue<br /> |-<br /> | 9 || GetValue<br /> |-<br /> | 10 || BindInterrupt<br /> |-<br /> | 11 || UnbindInterrupt<br /> |-<br /> | 12 || SetDebounceEnabled<br /> |-<br /> | 13 || GetDebounceEnabled<br /> |-<br /> | 14 || SetDebounceTime<br /> |-<br /> | 15 || GetDebounceTime<br /> |-<br /> | 16 || [4.0.0+] SetValueForSleepState<br /> |}<br /> <br /> = i2c, i2c:pcv =<br /> This is &quot;nn::i2c::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev_2|OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession_2|OpenSession]]<br /> |-<br /> | 2 || [[#HasDevice|HasDevice]]<br /> |-<br /> | 3 || [[#HasDeviceForDev|HasDeviceForDev]]<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! I2cDevice || Port:Addr || Is10bit || Speed || Max Retries || Retry Delay || Usage || Used by<br /> |-<br /> | 0 || 0:52 || N || 100000 || 0 || 0 || DebugPadDriver || [[HID services]]<br /> |-<br /> | 1 || 2:49 || N || 400000 || 0 || 0 || TouchPanel || [[HID services]]<br /> |-<br /> | 2 || 0:4c || N || 100000 || 0 || 0 || Temperature Sensor (TMP451 or NCT72) || [[PTM services]]<br /> |-<br /> | 3 || 0:4c || N || 100000 || 0 || 0 || Temperature Sensor (TMP451 or NCT72) (duplicate) ||<br /> |-<br /> | 4 || 0:1c || N || 100000 || 0 || 0 || Audio Codec (ALC5639) || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 5 || 4:68 || N || 400000 || 3 || 5000000 || PMIC RTC (max77620_rtc0), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 6 || 4:3c || N || 400000 || 3 || 5000000 || PMIC (MAX77620), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 7 || 4:1b || N || 400000 || 3 || 5000000 || Sub-PMIC for CPU (max77621_cpu) || [[PCV services]]<br /> |-<br /> | 8 || 4:1c || N || 400000 || 3 || 5000000 || Sub-PMIC for GPU (max77621_gpu) || [[PCV services]]<br /> |-<br /> | 9 || 0:6b || N || 100000 || 3 || 5000000 || Charger IC (BQ24193) || [[PTM services]]<br /> |-<br /> | 10 || 0:36 || N || 100000 || 3 || 5000000 || Fuel Gauge IC (MAX17050) || [[PCV services]], [[PTM services]]<br /> |-<br /> | 11 || 0:18 || N || 100000 || 3 || 5000000 || USB-PD controller (RHOM BM92T30MWV) || [[USB services]]<br /> |-<br /> | 12 || 1:40 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VDD15V0-HB) || Factory testing<br /> |-<br /> | 13 || 1:41 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-CPU-DS) || Factory testing<br /> |-<br /> | 14 || 1:44 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-GPU-DS) || Factory testing<br /> |-<br /> | 15 || 1:45 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-DDR-DS) || Factory testing<br /> |-<br /> | 16 || 1:46 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-AP) || Factory testing<br /> |-<br /> | 17 || 1:47 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_V_VSYS-BL-DS) || Factory testing<br /> |-<br /> | 18 || 1:29 || N || 400000 || 3 || 5000000 || Ambient Light Sensor (BH1730) || [[Backlight services]]<br /> |-<br /> | 19 || 1:48 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_CORE) || Factory testing<br /> |-<br /> | 20 || 1:49 || N || 400000 || 3 || 5000000 || Power Monitor (ina226_Soc-1V8) || Factory testing<br /> |-<br /> | 21 || 1:4a || N || 400000 || 3 || 5000000 || Power Monitor (ina226_LPDDR4-1V8) || Factory testing<br /> |-<br /> | 22 || 1:4b || N || 400000 || 3 || 5000000 || Power Monitor (ina226_REG1V32) || Factory testing<br /> |-<br /> | 23 || 1:4d || N || 400000 || 3 || 5000000 || Power Monitor (ina226_VDD3V3-SYS) || Factory testing<br /> |-<br /> | 24 || 3:50 || N || 100000 || 0 || 0 || HDMI DDC || [[NV services]]<br /> |-<br /> | 25 || 3:54 || N || 100000 || 0 || 0 || HDMI SCDC || [[NV services]]<br /> |-<br /> | 26 || 3:3a || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes an u32 '''port''', an u16 '''addr''', an '''AddressingMode''' (1 for 10-bit, 0 otherwise) and a '''SpeedMode''' (400000 or 100000). Returns a [[#II2cSession]] session.<br /> <br /> == OpenSession ==<br /> Takes an '''I2cDevice''' and returns a [[#II2cSession]] session for it.<br /> <br /> == HasDevice ==<br /> Takes an '''I2cDevice''' and returns true if the device exists or false otherwise.<br /> <br /> == HasDeviceForDev ==<br /> Takes an u32 '''port''', an u16 '''addr''', an '''AddressingMode''' (1 for 10-bit, 0 otherwise) and a '''SpeedMode''' (400000 or 100000). Returns true if the device exists or false otherwise.<br /> <br /> == II2cSession ==<br /> This is &quot;nn::i2c::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Send<br /> |-<br /> | 1 || Receive<br /> |-<br /> | 2 || ExecuteCommandList<br /> |-<br /> | 10 || SendAuto<br /> |-<br /> | 11 || ReceiveAuto<br /> |-<br /> | 12 || ExecuteCommandListAuto<br /> |}<br /> <br /> = uart =<br /> This is &quot;nn::uart::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || DoesUartExist<br /> |-<br /> | 1 || DoesUartExistForTest<br /> |-<br /> | 2 || SetUartBaudrate<br /> |-<br /> | 3 || SetUartBaudrateForTest<br /> |-<br /> | 4 || IsSomethingUartValid<br /> |-<br /> | 5 || IsSomethingUartValidForTest<br /> |-<br /> | 6 || GetSession<br /> |-<br /> | 7 || IsSomethingUartValid2<br /> |-<br /> | 8 || IsSomethingUartValid2ForTest<br /> |}<br /> <br /> == IPortSession ==<br /> This is &quot;nn::uart::IPortSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |-<br /> | 1 || OpenSessionForTest<br /> |-<br /> | 2 ||<br /> |-<br /> | 3 ||<br /> |-<br /> | 4 ||<br /> |-<br /> | 5 ||<br /> |-<br /> | 6 ||<br /> |-<br /> | 7 ||<br /> |}<br /> <br /> === Port Mapping ===<br /> OpenSession translates user IDs to to the uart port index.<br /> <br /> OpenSessionForTest takes the port index verbatim.<br /> <br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port || Usage<br /> |-<br /> | 1 || UART-D || Bluetooth<br /> |-<br /> | 2 || UART-B || Joy-Con(R)<br /> |-<br /> | 3 || UART-C || Joy-Con(L)<br /> |}<br /> <br /> = pwm =<br /> This is &quot;nn::pwm::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |}<br /> <br /> == Known Channels ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Interface || Usage || Used by<br /> |-<br /> | 1 || PWM Channel 1 || Fan || [[PTM services]]<br /> |-<br /> | 2 || PWM Channel 0 || Backlight || [[Backlight services]], [[NV services]]<br /> |-<br /> | 3 || PMC Blinker || ||<br /> |}<br /> <br /> == IChannelSession ==<br /> This is &quot;nn::pwm::IChannelSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPeriod<br /> |-<br /> | 1 || GetPeriod<br /> |-<br /> | 2 || SetDuty<br /> |-<br /> | 3 || GetDuty<br /> |-<br /> | 4 || SetEnabled<br /> |-<br /> | 5 || GetEnabled<br /> |}<br /> <br /> = pinmux =<br /> This is &quot;nn::pinmux::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::pinmux::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || <br /> |-<br /> | 1 || <br /> |-<br /> | 2 || <br /> |}<br /> <br /> = sasbus =<br /> This is &quot;nn::sasbus::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::sasbus::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || <br /> |-<br /> | 1 || <br /> |-<br /> | 2 || <br /> |-<br /> | 3 || <br /> |}<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=HID_Shared_Memory&diff=4582 2018-05-06T02:07:37Z

<p>Shinyquagsire23: </p> <hr /> <div>HID shared memory is a 0x40000 byte read-only segment of memory shared between applications for input. The segment contains structures for most if not all input methods available to applications.<br /> <br /> = Memory Map =<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x400<br /> | Unknown, Header?<br /> |-<br /> | 0x400<br /> | 0x3000<br /> | Capacitive Touchscreen<br /> |-<br /> | 0x3400<br /> | 0x400<br /> | Mouse<br /> |-<br /> | 0x3800<br /> | 0x400<br /> | Keyboard<br /> |-<br /> | 0x3C00<br /> | 0x400<br /> | Unknown, header and 17 entries<br /> |-<br /> | 0x4000<br /> | 0x400<br /> | Unknown, header and 17 entries<br /> |-<br /> | 0x4400<br /> | 0x400<br /> | Unknown, header and 17 entries<br /> |-<br /> | 0x4800<br /> | 0x400<br /> | Unknown, header and 17 entries<br /> |-<br /> | 0x4C00<br /> | 0x200<br /> | Unknown, header which says it has 17 entries, but the max entry index is 0<br /> |-<br /> | 0x4E00<br /> | 0x200<br /> | Unknown, header which says it has 17 entries, but the max entry index is 0<br /> |-<br /> | 0x5000<br /> | 0x200<br /> | Unknown, header which says it has 17 entries, but the max entry index is 0<br /> |-<br /> | 0x5200<br /> | 0x80*0x10<br /> | Unknown, 16 structures with a header and 2 entries each<br /> |-<br /> | 0x5A00<br /> | 0x4000<br /> | Controller Serials?<br /> |-<br /> | 0x9A00<br /> | 0x32000<br /> | Controllers<br /> |-<br /> | 0x3BA00<br /> | 0x4600<br /> | Unknown<br /> |-<br /> |}<br /> <br /> == Capacitive Touchscreen ==<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x28 <br /> | Touch Header <br /> |-<br /> | 0x28 <br /> | 0x298 * 17<br /> | Touch Entries <br /> |-<br /> |}<br /> <br /> === Touch Header ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x8 <br /> | Timestamp in ticks? <br /> |-<br /> | 0x8 <br /> | 0x8 <br /> | Number of Entries, always 17<br /> |-<br /> | 0x10 <br /> | 0x8 <br /> | Latest Entry Index<br /> |-<br /> | 0x18 <br /> | 0x8 <br /> | Maximum Entry Index, always 16 <br /> |-<br /> | 0x20 <br /> | 0x8 <br /> | Timestamp in samples <br /> |-<br /> |}<br /> <br /> === Touch Entry ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x10 <br /> | Touch Entry Header <br /> |-<br /> | 0x10 <br /> | 0x28 * 16 <br /> | Touch Data <br /> |-<br /> |}<br /> <br /> ==== Touch Structure Header ====<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x8 <br /> | Timestamp in samples<br /> |-<br /> | 0x8 <br /> | 0x8 <br /> | Number of Touches <br /> |-<br /> |}<br /> <br /> ==== Touch Data Entry ====<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x8 <br /> | Timestamp in samples<br /> |-<br /> | 0x8 <br /> | 0x4 <br /> | Padding <br /> |-<br /> | 0xC <br /> | 0x4 <br /> | Touch Index <br /> |-<br /> | 0x10 <br /> | 0x4 <br /> | Touch X <br /> |-<br /> | 0x14 <br /> | 0x4 <br /> | Touch Y <br /> |-<br /> | 0x18 <br /> | 0x4 <br /> | Touch Diameter X <br /> |-<br /> | 0x1C <br /> | 0x4 <br /> | Touch Diameter Y <br /> |-<br /> | 0x20 <br /> | 0x4 <br /> | Angle <br /> |-<br /> | 0x24 <br /> | 0x4 <br /> | Padding <br /> |-<br /> |}<br /> <br /> == Mouse ==<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x20 <br /> | Mouse Header <br /> |-<br /> | 0x20 <br /> | 0x30 * 17 <br /> | Mouse Entries <br /> |-<br /> |}<br /> <br /> === Mouse Header ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x8 <br /> | Timestamp in ticks?<br /> |-<br /> | 0x8 <br /> | 0x8 <br /> | Number of Entries, always 17<br /> |-<br /> | 0x10 <br /> | 0x8 <br /> | Latest Entry Index<br /> |-<br /> | 0x18 <br /> | 0x8 <br /> | Maximum Entry Index, always 16<br /> |-<br /> |}<br /> <br /> === Mouse Entry ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x8 <br /> | Timestamp in samples<br /> |-<br /> | 0x8 <br /> | 0x8 <br /> | Timestamp in samples again? <br /> |-<br /> | 0x10 <br /> | 0x4 <br /> | Mouse X <br /> |-<br /> | 0x14 <br /> | 0x4 <br /> | Mouse Y <br /> |-<br /> | 0x18 <br /> | 0x4 <br /> | Mouse X Change <br /> |-<br /> | 0x1C <br /> | 0x4 <br /> | Mouse Y Change <br /> |-<br /> | 0x20 <br /> | 0x4 <br /> | Scroll Change Y <br /> |-<br /> | 0x24 <br /> | 0x4 <br /> | Scroll Change X? <br /> |-<br /> | 0x28 <br /> | 0x8 <br /> | Mouse Buttons <br /> |-<br /> |}<br /> <br /> <br /> == Keyboard ==<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x20 <br /> | Keyboard Header <br /> |-<br /> | 0x20 <br /> | 0x30 * 17 <br /> | Keyboard Entries <br /> |-<br /> |}<br /> <br /> === Keyboard Header ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x8 <br /> | Timestamp in ticks?<br /> |-<br /> | 0x8 <br /> | 0x8 <br /> | Number of Entries, always 17<br /> |-<br /> | 0x10 <br /> | 0x8 <br /> | Latest Entry Index<br /> |-<br /> | 0x18 <br /> | 0x8 <br /> | Maximum Entry Index, always 16<br /> |-<br /> |}<br /> <br /> === Keyboard Entry ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x8 <br /> | Timestamp in samples<br /> |-<br /> | 0x8 <br /> | 0x8 <br /> | Timestamp in samples again? <br /> |-<br /> | 0x10 <br /> | 0x8 <br /> | Modifier Mask <br /> |-<br /> | 0x18 <br /> | 0x20 <br /> | Keys Down, each key gets one bit based on the HID keyboard scan code (F1 is 0x3A, bit 0x3A is set) <br /> |-<br /> |}<br /> <br /> == Controller Serials? ==<br /> <br /> This section contains a series of 16 structures 0x400 bytes large.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x30 <br /> | 0xE <br /> | Controller Serial <br /> |-<br /> | 0x60 <br /> | 0xE <br /> | Controller Serial <br /> |-<br /> |}<br /> <br /> == Controllers ==<br /> <br /> This section contains a series of 10 0x5000 byte structures describing each available controller.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Controller Index<br /> ! Description<br /> |-<br /> | 0 to 7 <br /> | Players 1 to 8 <br /> |-<br /> | 8 <br /> | Handheld Mode <br /> |-<br /> | 9 <br /> | Unknown <br /> |-<br /> |}<br /> <br /> === Controller ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x28 <br /> | Controller Header <br /> |-<br /> | 0x28 <br /> | 0x20 header + 0x30 * 17 <br /> | Controller Pro Controller State<br /> |-<br /> | 0x378 <br /> | 0x20 header + 0x30 * 17 <br /> | Controller Handheld Joined State<br /> |-<br /> | 0x6C8 <br /> | 0x20 header + 0x30 * 17 <br /> | Controller Joined State (Lone Joy-Con or Pair of Joy-Con)<br /> |-<br /> | 0xA18 <br /> | 0x20 header + 0x30 * 17 <br /> | Controller Left State (Vertical Controls w/ Joy-Con Half)<br /> |-<br /> | 0xD68 <br /> | 0x20 header + 0x30 * 17 <br /> | Controller Right State (Vertical Controls w/ Joy-Con Half)<br /> |-<br /> | 0x10B8 <br /> | 0x20 header + 0x30 * 17 <br /> | Controller Main State (No Analog Sticks)<br /> |-<br /> | 0x1408<br /> | 0x20 header + 0x30 * 17 <br /> | Controller Main State<br /> |-<br /> | 0x41D0 <br /> | 0x10 <br /> | Controller MAC <br /> |-<br /> | 0x41F0 <br /> | 0x10 <br /> | Controller MAC <br /> |-<br /> |}<br /> <br /> ==== Controller Header ====<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x4<br /> | Status, bit0 Pro Controller/HID controller, bit1 wired for handheld, bit2 pair, bit3 left, bit4 right<br /> |-<br /> | 0x4<br /> | 0x4<br /> | Is Joy-Con Half<br /> |-<br /> | 0x8<br /> | 0x4<br /> | bit1 color set does not exist<br /> |-<br /> | 0xC<br /> | 0x4<br /> | RGBA Body Color (single Joy-Con or Pro Controller)<br /> |-<br /> | 0x10<br /> | 0x4<br /> | RGBA Button Color (single Joy-Con or Pro Controller)<br /> |-<br /> | 0x14<br /> | 0x4<br /> | bit1 color set does not exist<br /> |-<br /> | 0x18<br /> | 0x4<br /> | RGBA Body Color (right Joy-Con)<br /> |-<br /> | 0x1C<br /> | 0x4<br /> | RGBA Button Color (right Joy-Con)<br /> |-<br /> | 0x20<br /> | 0x4<br /> | RGBA Body Color (left Joy-Con)<br /> |-<br /> | 0x24<br /> | 0x4<br /> | RGBA Button Color (left Joy-Con)<br /> |-<br /> |}<br /> <br /> ==== Controller State Header ====<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | Timestamp in ticks?<br /> |-<br /> | 0x8<br /> | 0x8<br /> | Number of entries, always 17<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Latest Entry Index<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Maximum Entry Index, always 16<br /> |-<br /> |}<br /> <br /> ==== Controller State ====<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | Timestamp in samples<br /> |-<br /> | 0x8<br /> | 0x8<br /> | Timestamp in samples again<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Button State<br /> |-<br /> | 0x18<br /> | 0x4<br /> | Left Joystick X<br /> |-<br /> | 0x1C<br /> | 0x4<br /> | Left Joystick Y<br /> |-<br /> | 0x20<br /> | 0x4<br /> | Right Joystick X<br /> |-<br /> | 0x24<br /> | 0x4<br /> | Right Joystick Y<br /> |-<br /> | 0x28<br /> | 0x8<br /> | Controller State (bit0 connected, bit1 wired)<br /> |-<br /> |}<br /> <br /> ===== Button State =====<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Button<br /> |-<br /> | 0<br /> | A<br /> |-<br /> | 1<br /> | B<br /> |-<br /> | 2<br /> | X<br /> |-<br /> | 3<br /> | Y<br /> |-<br /> | 4<br /> | Left Stick Pressed<br /> |-<br /> | 5<br /> | Right Stick Pressed<br /> |-<br /> | 6<br /> | L<br /> |-<br /> | 7<br /> | R<br /> |-<br /> | 8<br /> | ZL<br /> |-<br /> | 9<br /> | ZR<br /> |-<br /> | 10<br /> | Plus<br /> |-<br /> | 11<br /> | Minus<br /> |-<br /> | 12<br /> | Left<br /> |-<br /> | 13<br /> | Up<br /> |-<br /> | 14<br /> | Right<br /> |-<br /> | 15<br /> | Down<br /> |-<br /> | 16<br /> | Left Stick Left<br /> |-<br /> | 17<br /> | Left Stick Up<br /> |-<br /> | 18<br /> | Left Stick Right<br /> |-<br /> | 19<br /> | Left Stick Down<br /> |-<br /> | 20<br /> | Right Stick Left<br /> |-<br /> | 21<br /> | Right Stick Up<br /> |-<br /> | 22<br /> | Right Stick Right<br /> |-<br /> | 23<br /> | Right Stick Down<br /> |-<br /> | 24<br /> | SL<br /> |-<br /> | 25<br /> | SR<br /> |-<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=HID_Shared_Memory&diff=4581 2018-05-06T02:00:54Z

<p>Shinyquagsire23: </p> <hr /> <div>HID shared memory is a 0x40000 byte read-only segment of memory shared between applications for input. The segment contains structures for most if not all input methods available to applications.<br /> <br /> = Memory Map =<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x400<br /> | Unknown, Header?<br /> |-<br /> | 0x400<br /> | 0x3000<br /> | Capacitive Touchscreen<br /> |-<br /> | 0x3400<br /> | 0x400<br /> | Mouse<br /> |-<br /> | 0x3800<br /> | 0x400<br /> | Keyboard<br /> |-<br /> | 0x3C00<br /> | 0x400<br /> | Unknown, header and 17 entries<br /> |-<br /> | 0x4000<br /> | 0x400<br /> | Unknown, header and 17 entries<br /> |-<br /> | 0x4400<br /> | 0x400<br /> | Unknown, header and 17 entries<br /> |-<br /> | 0x4800<br /> | 0x400<br /> | Unknown, header and 17 entries<br /> |-<br /> | 0x4C00<br /> | 0x200<br /> | Unknown, header which says it has 17 entries, but the max entry index is 0<br /> |-<br /> | 0x4E00<br /> | 0x200<br /> | Unknown, header which says it has 17 entries, but the max entry index is 0<br /> |-<br /> | 0x5000<br /> | 0x200<br /> | Unknown, header which says it has 17 entries, but the max entry index is 0<br /> |-<br /> | 0x5200<br /> | 0x800<br /> | Unknown<br /> |-<br /> | 0x5A00<br /> | 0x4000<br /> | Controller Serials?<br /> |-<br /> | 0x9A00<br /> | 0x32000<br /> | Controllers<br /> |-<br /> | 0x3BA00<br /> | 0x4600<br /> | Unknown<br /> |-<br /> |}<br /> <br /> == Capacitive Touchscreen ==<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x28 <br /> | Touch Header <br /> |-<br /> | 0x28 <br /> | 0x298 * 17<br /> | Touch Entries <br /> |-<br /> |}<br /> <br /> === Touch Header ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x8 <br /> | Timestamp in ticks? <br /> |-<br /> | 0x8 <br /> | 0x8 <br /> | Number of Entries, always 17<br /> |-<br /> | 0x10 <br /> | 0x8 <br /> | Latest Entry Index<br /> |-<br /> | 0x18 <br /> | 0x8 <br /> | Maximum Entry Index, always 16 <br /> |-<br /> | 0x20 <br /> | 0x8 <br /> | Timestamp in samples <br /> |-<br /> |}<br /> <br /> === Touch Entry ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x10 <br /> | Touch Entry Header <br /> |-<br /> | 0x10 <br /> | 0x28 * 16 <br /> | Touch Data <br /> |-<br /> |}<br /> <br /> ==== Touch Structure Header ====<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x8 <br /> | Timestamp in samples<br /> |-<br /> | 0x8 <br /> | 0x8 <br /> | Number of Touches <br /> |-<br /> |}<br /> <br /> ==== Touch Data Entry ====<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x8 <br /> | Timestamp in samples<br /> |-<br /> | 0x8 <br /> | 0x4 <br /> | Padding <br /> |-<br /> | 0xC <br /> | 0x4 <br /> | Touch Index <br /> |-<br /> | 0x10 <br /> | 0x4 <br /> | Touch X <br /> |-<br /> | 0x14 <br /> | 0x4 <br /> | Touch Y <br /> |-<br /> | 0x18 <br /> | 0x4 <br /> | Touch Diameter X <br /> |-<br /> | 0x1C <br /> | 0x4 <br /> | Touch Diameter Y <br /> |-<br /> | 0x20 <br /> | 0x4 <br /> | Angle <br /> |-<br /> | 0x24 <br /> | 0x4 <br /> | Padding <br /> |-<br /> |}<br /> <br /> == Mouse ==<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x20 <br /> | Mouse Header <br /> |-<br /> | 0x20 <br /> | 0x30 * 17 <br /> | Mouse Entries <br /> |-<br /> |}<br /> <br /> === Mouse Header ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x8 <br /> | Timestamp in ticks?<br /> |-<br /> | 0x8 <br /> | 0x8 <br /> | Number of Entries, always 17<br /> |-<br /> | 0x10 <br /> | 0x8 <br /> | Latest Entry Index<br /> |-<br /> | 0x18 <br /> | 0x8 <br /> | Maximum Entry Index, always 16<br /> |-<br /> |}<br /> <br /> === Mouse Entry ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x8 <br /> | Timestamp in samples<br /> |-<br /> | 0x8 <br /> | 0x8 <br /> | Timestamp in samples again? <br /> |-<br /> | 0x10 <br /> | 0x4 <br /> | Mouse X <br /> |-<br /> | 0x14 <br /> | 0x4 <br /> | Mouse Y <br /> |-<br /> | 0x18 <br /> | 0x4 <br /> | Mouse X Change <br /> |-<br /> | 0x1C <br /> | 0x4 <br /> | Mouse Y Change <br /> |-<br /> | 0x20 <br /> | 0x4 <br /> | Scroll Change Y <br /> |-<br /> | 0x24 <br /> | 0x4 <br /> | Scroll Change X? <br /> |-<br /> | 0x28 <br /> | 0x8 <br /> | Mouse Buttons <br /> |-<br /> |}<br /> <br /> <br /> == Keyboard ==<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x20 <br /> | Keyboard Header <br /> |-<br /> | 0x20 <br /> | 0x30 * 17 <br /> | Keyboard Entries <br /> |-<br /> |}<br /> <br /> === Keyboard Header ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x8 <br /> | Timestamp in ticks?<br /> |-<br /> | 0x8 <br /> | 0x8 <br /> | Number of Entries, always 17<br /> |-<br /> | 0x10 <br /> | 0x8 <br /> | Latest Entry Index<br /> |-<br /> | 0x18 <br /> | 0x8 <br /> | Maximum Entry Index, always 16<br /> |-<br /> |}<br /> <br /> === Keyboard Entry ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x8 <br /> | Timestamp in samples<br /> |-<br /> | 0x8 <br /> | 0x8 <br /> | Timestamp in samples again? <br /> |-<br /> | 0x10 <br /> | 0x8 <br /> | Modifier Mask <br /> |-<br /> | 0x18 <br /> | 0x20 <br /> | Keys Down, each key gets one bit based on the HID keyboard scan code (F1 is 0x3A, bit 0x3A is set) <br /> |-<br /> |}<br /> <br /> == Controller Serials? ==<br /> <br /> This section contains a series of 16 structures 0x400 bytes large.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x30 <br /> | 0xE <br /> | Controller Serial <br /> |-<br /> | 0x60 <br /> | 0xE <br /> | Controller Serial <br /> |-<br /> |}<br /> <br /> == Controllers ==<br /> <br /> This section contains a series of 10 0x5000 byte structures describing each available controller.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Controller Index<br /> ! Description<br /> |-<br /> | 0 to 7 <br /> | Players 1 to 8 <br /> |-<br /> | 8 <br /> | Handheld Mode <br /> |-<br /> | 9 <br /> | Unknown <br /> |-<br /> |}<br /> <br /> === Controller ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x28 <br /> | Controller Header <br /> |-<br /> | 0x28 <br /> | 0x20 header + 0x30 * 17 <br /> | Controller Pro Controller State<br /> |-<br /> | 0x378 <br /> | 0x20 header + 0x30 * 17 <br /> | Controller Handheld Joined State<br /> |-<br /> | 0x6C8 <br /> | 0x20 header + 0x30 * 17 <br /> | Controller Joined State (Lone Joy-Con or Pair of Joy-Con)<br /> |-<br /> | 0xA18 <br /> | 0x20 header + 0x30 * 17 <br /> | Controller Left State (Vertical Controls w/ Joy-Con Half)<br /> |-<br /> | 0xD68 <br /> | 0x20 header + 0x30 * 17 <br /> | Controller Right State (Vertical Controls w/ Joy-Con Half)<br /> |-<br /> | 0x10B8 <br /> | 0x20 header + 0x30 * 17 <br /> | Controller Main State (No Analog Sticks)<br /> |-<br /> | 0x1408<br /> | 0x20 header + 0x30 * 17 <br /> | Controller Main State<br /> |-<br /> | 0x41D0 <br /> | 0x10 <br /> | Controller MAC <br /> |-<br /> | 0x41F0 <br /> | 0x10 <br /> | Controller MAC <br /> |-<br /> |}<br /> <br /> ==== Controller Header ====<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0 <br /> | 0x4<br /> | Status, bit0 Pro Controller/HID controller, bit1 wired for handheld, bit2 pair, bit3 left, bit4 right<br /> |-<br /> | 0x4<br /> | 0x4<br /> | Is Joy-Con Half<br /> |-<br /> | 0x8<br /> | 0x4<br /> | bit1 color set does not exist<br /> |-<br /> | 0xC<br /> | 0x4<br /> | RGBA Body Color (single Joy-Con or Pro Controller)<br /> |-<br /> | 0x10<br /> | 0x4<br /> | RGBA Button Color (single Joy-Con or Pro Controller)<br /> |-<br /> | 0x14<br /> | 0x4<br /> | bit1 color set does not exist<br /> |-<br /> | 0x18<br /> | 0x4<br /> | RGBA Body Color (right Joy-Con)<br /> |-<br /> | 0x1C<br /> | 0x4<br /> | RGBA Button Color (right Joy-Con)<br /> |-<br /> | 0x20<br /> | 0x4<br /> | RGBA Body Color (left Joy-Con)<br /> |-<br /> | 0x24<br /> | 0x4<br /> | RGBA Button Color (left Joy-Con)<br /> |-<br /> |}<br /> <br /> ==== Controller State Header ====<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | Timestamp in ticks?<br /> |-<br /> | 0x8<br /> | 0x8<br /> | Number of entries, always 17<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Latest Entry Index<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Maximum Entry Index, always 16<br /> |-<br /> |}<br /> <br /> ==== Controller State ====<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size in bytes<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x8<br /> | Timestamp in samples<br /> |-<br /> | 0x8<br /> | 0x8<br /> | Timestamp in samples again<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Button State<br /> |-<br /> | 0x18<br /> | 0x4<br /> | Left Joystick X<br /> |-<br /> | 0x1C<br /> | 0x4<br /> | Left Joystick Y<br /> |-<br /> | 0x20<br /> | 0x4<br /> | Right Joystick X<br /> |-<br /> | 0x24<br /> | 0x4<br /> | Right Joystick Y<br /> |-<br /> | 0x28<br /> | 0x8<br /> | Controller State (bit0 connected, bit1 wired)<br /> |-<br /> |}<br /> <br /> ===== Button State =====<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Button<br /> |-<br /> | 0<br /> | A<br /> |-<br /> | 1<br /> | B<br /> |-<br /> | 2<br /> | X<br /> |-<br /> | 3<br /> | Y<br /> |-<br /> | 4<br /> | Left Stick Pressed<br /> |-<br /> | 5<br /> | Right Stick Pressed<br /> |-<br /> | 6<br /> | L<br /> |-<br /> | 7<br /> | R<br /> |-<br /> | 8<br /> | ZL<br /> |-<br /> | 9<br /> | ZR<br /> |-<br /> | 10<br /> | Plus<br /> |-<br /> | 11<br /> | Minus<br /> |-<br /> | 12<br /> | Left<br /> |-<br /> | 13<br /> | Up<br /> |-<br /> | 14<br /> | Right<br /> |-<br /> | 15<br /> | Down<br /> |-<br /> | 16<br /> | Left Stick Left<br /> |-<br /> | 17<br /> | Left Stick Up<br /> |-<br /> | 18<br /> | Left Stick Right<br /> |-<br /> | 19<br /> | Left Stick Down<br /> |-<br /> | 20<br /> | Right Stick Left<br /> |-<br /> | 21<br /> | Right Stick Up<br /> |-<br /> | 22<br /> | Right Stick Right<br /> |-<br /> | 23<br /> | Right Stick Down<br /> |-<br /> | 24<br /> | SL<br /> |-<br /> | 25<br /> | SR<br /> |-<br /> |}</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Bus_services&diff=4534 2018-04-28T21:11:53Z

<p>Shinyquagsire23: </p> <hr /> <div>= gpio =<br /> This is &quot;nn::gpio::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession]]<br /> |-<br /> | 2 || [[#OpenSessionForTest]]<br /> |-<br /> | 3 || IsWakeEventActive <br /> |-<br /> | 4 || GetWakeEventActiveFlagSet<br /> |-<br /> | 5 || SetWakeEventActiveFlagSetForDebug<br /> |-<br /> | 6 || SetWakePinDebugMode<br /> |-<br /> | 7 || [5.0.0+] [[#OpenSession2]]<br /> |-<br /> | 8 || [5.0.0+] IsWakeEventActive2<br /> |-<br /> | 9 || [5.0.0+] SetWakeEventActiveFlagSetForDebug2<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes a raw GpioPadDescriptor and returns a [[#IPadSession]] session for it.<br /> <br /> == OpenSession ==<br /> Same thing as OpenSessionForDev except the descriptor is looked up in the table below.<br /> Returns an [[#IPadSession]] session.<br /> <br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! GpioPadName || GpioPadDescriptor || Tegra (port, pin) || Usage || Direction || Used by<br /> |-<br /> | 0x01 || 0xCC || Z, 4 || rt5639 power || Out || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 0x02 || 0x24 || E, 4 || SDCard Power || Out || [[Filesystem services]]<br /> |-<br /> | 0x03 || 0x3C || H, 4 || BT_RST_PH4 || Out || [[Bluetooth services]]<br /> |-<br /> | 0x04 || 0xDA || BB, 2 || || || <br /> |-<br /> | 0x05 || 0xDB || BB, 3 || GcAsic Power || Out || [[Filesystem services]]<br /> |-<br /> | 0x06 || 0xDC || BB, 4 || Headphone Detect || In || [[Audio services]]<br /> |-<br /> | 0x07 || 0x25 || E, 5 || || || <br /> |-<br /> | 0x08 || 0x90 || S, 0 || DebugPadDriver || In || [[HID services]]<br /> |-<br /> | 0x09 || 0x91 || S, 1 || || || <br /> |-<br /> | 0x0A || 0x96 || S, 6 || bq24192 Charge Enable || Out || [[PTM services]]<br /> |-<br /> | 0x0B || 0x97 || S, 7 || || || <br /> |-<br /> | 0x0C || 0x26 || E, 6 || joycon(L) NwcpDriver0.GpioMonitorTask0 (insertion, Joy-Con pin 5/console TX, pulled low on insert?) || In || [[HID services]]<br /> |-<br /> | 0x0D || 0x05 || A, 5 || Fan enable (normal) || Out || [[PTM services]]<br /> |-<br /> | 0x0E || 0x78 || P, 0 || SDMMC3_CLK_PP0? || || <br /> |-<br /> | 0x0F || 0x93 || S, 3 || GcAsic irq || In || [[Filesystem services]]<br /> |-<br /> | 0x10 || 0x7D || P, 5 || SDMMC3_DAT0_PP5? || || <br /> |-<br /> | 0x11 || 0x7C || P, 4 || SDMMC3_DAT1_PP4? || || <br /> |-<br /> | 0x12 || 0x7B || P, 3 || SDMMC3_DAT2_PP3? || || <br /> |-<br /> | 0x13 || 0x7A || P, 2 || SDMMC3_DAT3_PP2? || || <br /> |-<br /> | 0x14 || 0xBC || X, 4 || || || <br /> |-<br /> | 0x15 || 0xAE || V, 6 || || In || [[Audio services]]<br /> |-<br /> | 0x16 || 0xBA || X, 2 || MOTION_INT_PX2? || || <br /> |-<br /> | 0x17 || 0xB9 || X, 1 || Touchscreen irq (TOUCH_INT_PX1) (unused - polled instead) || In || [[HID services]]<br /> |-<br /> | 0x18 || 0xBD || X, 5 || Power Button (BUTTON_POWER_ON_PX5) || In ||<br /> |-<br /> | 0x19 || 0xBE || X, 6 || Volume Up (BUTTON_VOL_UP_PX6) || In || [[Boot2]], [[Audio services]]<br /> |-<br /> | 0x1A || 0xBF || X, 7 || Volume Down (BUTTON_VOL_DOWN_PX7) || In || [[Boot2]], [[Audio services]]<br /> |-<br /> | 0x1B || 0xC0 || Y, 0 || max17050 irq || In || [[PTM services]]<br /> |-<br /> | 0x1C || 0xC1 || Y, 1 || BUTTON_HOME_PY1 || In || <br /> |-<br /> | 0x1D || 0xA9 || V, 1 || Backlight (LCD_BL_EN_PV1) || Out || [[NV services]], [[Backlight services]]<br /> |-<br /> | 0x1E || 0xAA || V, 2 || Backlight (LCD_RST_PV2) || Out || [[NV services]]<br /> |-<br /> | 0x1F || 0x55 || K, 5 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x20 || 0xAD || V, 5 || PD related || Out || [[USB services]]<br /> |-<br /> | 0x21 || 0xC8 || Z, 0 || bq24192 irq || In || [[PTM services]] <br /> |-<br /> | 0x22 || 0xCA || Z, 2 || || || <br /> |-<br /> | 0x23 || 0xCB || Z, 3 || || || <br /> |-<br /> | 0x24 || 0x4F || J, 7 || Touchscreen reset || Out || [[HID services]]<br /> |-<br /> | 0x25 || 0x50 || K, 0 || || || <br /> |-<br /> | 0x26 || 0x51 || K, 1 || || || <br /> |-<br /> | 0x27 || 0x52 || K, 2 || || || <br /> |-<br /> | 0x28 || 0x54 || K, 4 || bm92t36 irq || In || [[USB services]]<br /> |-<br /> | 0x29 || 0x56 || K, 6 || || || <br /> |-<br /> | 0x2A || 0x57 || K, 7 || || || <br /> |-<br /> | 0x2B || 0x53 || K, 3 || joycon(R) NwcpDriver1.NwcpCharger || Out || [[HID services]]<br /> |-<br /> | 0x2C || 0xE3 || CC, 3 || joycon(L) NwcpDriver0.NwcpCharger || Out || [[HID services]]<br /> |-<br /> | 0x2D || 0x38 || H, 0 || WIFI_EN_PH0? || ||<br /> |-<br /> | 0x2E || 0x39 || H, 1 || WIFI_RST_PH1 || Out || [[Wlan services]], [[PCIe services]]<br /> |-<br /> | 0x2F || 0x3B || H, 3 || AP_WAKE_BT_PH3 || Out || [[Bluetooth services]]<br /> |-<br /> | 0x30 || 0x3D || H, 5 || || ||<br /> |-<br /> | 0x31 || 0x3F || H, 7 || || ||<br /> |-<br /> | 0x32 || 0x40 || I, 0 || Backlight +5V || Out || [[NV services]]<br /> |-<br /> | 0x33 || 0x41 || I, 1 || Backlight -5V || Out || [[NV services]]<br /> |-<br /> | 0x34 || 0x3E || H, 6 || joycon(R) NwcpDriver1.GpioMonitorTask0 (insertion, Joy-Con pin 5/console TX, pulled low on insert?) || In || [[HID services]]<br /> |-<br /> | 0x35 || 0xE2 || CC, 2 || || ||<br /> |-<br /> | 0x36 || 0xE4 || CC, 4 || Fan enable (high power) || Out || [[PTM services]]<br /> |-<br /> | 0x37 || 0x3A || H, 2 || || ||<br /> |-<br /> | 0x38 || 0xC9 || Z, 1 || SDCard Card Detect || In || [[Filesystem services]]<br /> |-<br /> | 0x39 || 0x4D || J, 5 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x3A || 0x58 || L, 0 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x3B || 0x3E || H, 6 || joycon(R) NwcpDriver1.GpioMonitorTask0 duplicate? || ||<br /> |-<br /> | 0x3C || 0x26 || E, 6 || joycon(L) NwcpDriver1.GpioMonitorTask0 duplicate? || ||<br /> |-<br /> | 0x3D || -1 || || || ||<br /> |-<br /> | 0x3E || 0x33 || G, 3 || joycon(R) NwcpDriver1.GpioMonitorTask1 (CTS, checked low) || In || [[HID services]]<br /> |-<br /> | 0x3F || 0x1C || D, 4 || joycon(L) NwcpDriver0.GpioMonitorTask1 (CTS, checked low) || In || [[HID services]]<br /> |-<br /> | 0x40 || 0xD9 || BB, 1 || || ||<br /> |-<br /> | 0x41 || 0x0C || B, 4 || Lid Closed (unused) || ||<br /> |-<br /> | 0x42 || 0x0D || B, 5 || || ||<br /> |-<br /> | 0x43 || 0x21 || E, 1 || USB power || Out || [[USB services]]<br /> |-<br /> | 0x44 || 0x27 || E, 7 || || ||<br /> |-<br /> | 0x45 || 0x92 || S, 2 || || ||<br /> |-<br /> | 0x46 || 0x95 || S, 5 || USB root port 4 power || Out || [[USB services]]<br /> |-<br /> | 0x47 || 0x98 || T, 0 || USB root port 3 power || Out || [[USB services]]<br /> |-<br /> | 0x48 || 0x10 || C, 0 || HdmiHotplug || Out || [[NV services]]<br /> |-<br /> | 0x49 || 0x11 || C, 1 || USB root port 2 power || Out || [[USB services]]<br /> |-<br /> | 0x4A || 0x12 || C, 2 || HdmiHotplug || Out || [[NV services]]<br /> |-<br /> | 0x4B || 0x42 || I, 2 || || ||<br /> |-<br /> | 0x4C || 0xE6 || CC, 6 || || ||<br /> |-<br /> | -- || 0xE1 || CC, 1 || HdmiHotplug (HDMI_INT_DP_HPD_PCC1) || In || [[NV services]]<br /> |}<br /> <br /> == OpenSessionForTest ==<br /> Same as [[#OpenSession]] but panics on failure.<br /> <br /> == OpenSession2 ==<br /> Same as [[#OpenSession]] but takes a '''DeviceCode''' instead of a '''GpioPadName'''.<br /> <br /> == IPadSession ==<br /> This is &quot;nn::gpio::IPadSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetDirection<br /> |-<br /> | 1 || GetDirection<br /> |-<br /> | 2 || SetInterruptMode<br /> |-<br /> | 3 || GetInterruptMode<br /> |-<br /> | 4 || SetInterruptEnable<br /> |-<br /> | 5 || GetInterruptEnable<br /> |-<br /> | 6 || GetInterruptStatus<br /> |-<br /> | 7 || ClearInterruptStatus<br /> |-<br /> | 8 || SetValue<br /> |-<br /> | 9 || GetValue<br /> |-<br /> | 10 || BindInterrupt<br /> |-<br /> | 11 || UnbindInterrupt<br /> |-<br /> | 12 || SetDebounceEnabled<br /> |-<br /> | 13 || GetDebounceEnabled<br /> |-<br /> | 14 || SetDebounceTime<br /> |-<br /> | 15 || GetDebounceTime<br /> |-<br /> | 16 || [4.0.0+] SetValueForSleepState<br /> |}<br /> <br /> == GpioPadDescriptor ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bits || Description<br /> |-<br /> | 7-5 || Controller index<br /> |-<br /> | 4-3 || Port index<br /> |-<br /> | 2-0 || Pin number<br /> |}<br /> <br /> = i2c, i2c:pcv =<br /> This is &quot;nn::i2c::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |-<br /> | 2 || HasDevice<br /> |-<br /> | 3 || HasDeviceForDev<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port:Addr || 10bit? || Speed || Max Retries || Retry Delay || Usage || Used by<br /> |-<br /> | 0 || 0:52 || N || 100000 || 0 || 0 || DebugPadDriver || [[HID services]]<br /> |-<br /> | 1 || 2:49 || N || 400000 || 0 || 0 || STM touchscreen || [[HID services]]<br /> |-<br /> | 2 || 0:4c || N || 100000 || 0 || 0 || TI Temperature Sensor (tmp451) || [[PTM services]]<br /> |-<br /> | 3 || 0:4c || N || 100000 || 0 || 0 || duplicate, unused entry? ||<br /> |-<br /> | 4 || 0:1c || N || 100000 || 0 || 0 || Audio codec (rt5639) || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 5 || 4:68 || N || 400000 || 3 || 5000000 || max77620_rtc0, max77620_irq0 || [[PCV services]]<br /> |-<br /> | 6 || 4:3c || N || 400000 || 3 || 5000000 || PMIC (max77620), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 7 || 4:1b || N || 400000 || 3 || 5000000 || max77621_cpu || [[PCV services]]<br /> |-<br /> | 8 || 4:1c || N || 400000 || 3 || 5000000 || max77621_gpu || [[PCV services]]<br /> |-<br /> | 9 || 0:6b || N || 100000 || 3 || 5000000 || TI Charger (bq24192) || [[PTM services]]<br /> |-<br /> | 10 || 0:36 || N || 100000 || 3 || 5000000 || Maxim Fuel Gauge (max17050) || [[PCV services]], [[PTM services]]<br /> |-<br /> | 11 || 0:18 || N || 100000 || 3 || 5000000 || USB-PD controller (rohm bm92t36) || [[USB services]]<br /> |-<br /> | 12 || 1:40 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 13 || 1:41 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 14 || 1:44 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 15 || 1:45 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 16 || 1:46 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 17 || 1:47 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 18 || 1:29 || N || 400000 || 3 || 5000000 || rohm ambient light sensor (bh1730fvc) || [[Backlight services]]<br /> |-<br /> | 19 || 1:48 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 20 || 1:49 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 21 || 1:4a || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 22 || 1:4b || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 23 || 1:4d || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 24 || 3:50 || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |-<br /> | 25 || 3:54 || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |-<br /> | 26 || 3:3a || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |}<br /> <br /> This table is believed to be complete - entries with empty &quot;Used by&quot; column haven't been seen being used (devices not present on switch?).<br /> <br /> == II2cSession ==<br /> This is &quot;nn::i2c::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Send<br /> |-<br /> | 1 || Receive<br /> |-<br /> | 2 || ExecuteCommandList<br /> |-<br /> | 10 || SendAuto<br /> |-<br /> | 11 || ReceiveAuto<br /> |-<br /> | 12 || ExecuteCommandListAuto<br /> |}<br /> <br /> = uart =<br /> This is &quot;nn::uart::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || DoesUartExist<br /> |-<br /> | 1 || DoesUartExistForTest<br /> |-<br /> | 2 || SetUartBaudrate<br /> |-<br /> | 3 || SetUartBaudrateForTest<br /> |-<br /> | 4 || IsSomethingUartValid<br /> |-<br /> | 5 || IsSomethingUartValidForTest<br /> |-<br /> | 6 || GetSession<br /> |-<br /> | 7 || IsSomethingUartValid2<br /> |-<br /> | 8 || IsSomethingUartValid2ForTest<br /> |}<br /> <br /> == IPortSession ==<br /> This is &quot;nn::uart::IPortSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Notes<br /> |-<br /> | 0 || OpenSession || Takes marshalled arguments<br /> |-<br /> | 1 || OpenSessionForTest || Takes marshalled arguments<br /> |-<br /> | 2 || || <br /> |-<br /> | 3 || || Takes marshalled arguments<br /> |-<br /> | 4 || || Returns 2x u64. Both zero.<br /> |-<br /> | 5 || || <br /> |-<br /> | 6 || || <br /> |-<br /> | 7 || || <br /> |-<br /> |}<br /> <br /> === Port Mapping ===<br /> OpenSession translates user IDs to to the uart port index.<br /> <br /> OpenSessionForTest takes the port index verbatim.<br /> <br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port || Usage<br /> |-<br /> | 1 || UART-D || Bluetooth<br /> |-<br /> | 2 || UART-B || Joycon(R)<br /> |-<br /> | 3 || UART-C || Joycon(L)<br /> |-<br /> |}<br /> <br /> = pwm =<br /> This is &quot;nn::pwm::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |}<br /> <br /> == Known Channels ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Interface || Usage || Used by<br /> |-<br /> | 1 || PWM Channel 1 || Fan || [[PTM services]]<br /> |-<br /> | 2 || PWM Channel 0 || Backlight || [[Backlight services]], [[NV services]]<br /> |-<br /> | 3 || PMC Blinker || ||<br /> |}<br /> <br /> == IChannelSession ==<br /> This is &quot;nn::pwm::IChannelSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPeriod<br /> |-<br /> | 1 || GetPeriod<br /> |-<br /> | 2 || SetDuty<br /> |-<br /> | 3 || GetDuty<br /> |-<br /> | 4 || SetEnabled<br /> |-<br /> | 5 || GetEnabled<br /> |}<br /> <br /> = pinmux =<br /> This is &quot;nn::pinmux::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::pinmux::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || <br /> |-<br /> | 1 || <br /> |-<br /> | 2 || <br /> |}<br /> <br /> = sasbus =<br /> This is &quot;nn::sasbus::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::sasbus::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || <br /> |-<br /> | 1 || <br /> |-<br /> | 2 || <br /> |-<br /> | 3 || <br /> |}<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Bus_services&diff=4533 2018-04-28T21:05:27Z

<p>Shinyquagsire23: They sure are getting a lot of mileage out of these pins</p> <hr /> <div>= gpio =<br /> This is &quot;nn::gpio::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession]]<br /> |-<br /> | 2 || [[#OpenSessionForTest]]<br /> |-<br /> | 3 || IsWakeEventActive <br /> |-<br /> | 4 || GetWakeEventActiveFlagSet<br /> |-<br /> | 5 || SetWakeEventActiveFlagSetForDebug<br /> |-<br /> | 6 || SetWakePinDebugMode<br /> |-<br /> | 7 || [5.0.0+] [[#OpenSession2]]<br /> |-<br /> | 8 || [5.0.0+] IsWakeEventActive2<br /> |-<br /> | 9 || [5.0.0+] SetWakeEventActiveFlagSetForDebug2<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes a raw GpioPadDescriptor and returns a [[#IPadSession]] session for it.<br /> <br /> == OpenSession ==<br /> Same thing as OpenSessionForDev except the descriptor is looked up in the table below.<br /> Returns an [[#IPadSession]] session.<br /> <br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! GpioPadName || GpioPadDescriptor || Tegra (port, pin) || Usage || Direction || Used by<br /> |-<br /> | 0x01 || 0xCC || Z, 4 || rt5639 power || Out || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 0x02 || 0x24 || E, 4 || SDCard Power || Out || [[Filesystem services]]<br /> |-<br /> | 0x03 || 0x3C || H, 4 || BT_RST_PH4 || Out || [[Bluetooth services]]<br /> |-<br /> | 0x04 || 0xDA || BB, 2 || || || <br /> |-<br /> | 0x05 || 0xDB || BB, 3 || GcAsic Power || Out || [[Filesystem services]]<br /> |-<br /> | 0x06 || 0xDC || BB, 4 || Headphone Detect || In || [[Audio services]]<br /> |-<br /> | 0x07 || 0x25 || E, 5 || || || <br /> |-<br /> | 0x08 || 0x90 || S, 0 || DebugPadDriver || In || [[HID services]]<br /> |-<br /> | 0x09 || 0x91 || S, 1 || || || <br /> |-<br /> | 0x0A || 0x96 || S, 6 || bq24192 Charge Enable || Out || [[PTM services]]<br /> |-<br /> | 0x0B || 0x97 || S, 7 || || || <br /> |-<br /> | 0x0C || 0x26 || E, 6 || joycon(L) NwcpDriver0.GpioMonitorTask0 (insertion, Joy-Con pin 5/console TX, pulled low on insert?) || In || [[HID services]]<br /> |-<br /> | 0x0D || 0x05 || A, 5 || Fan enable (normal) || Out || [[PTM services]]<br /> |-<br /> | 0x0E || 0x78 || P, 0 || SDMMC3_CLK_PP0? || || <br /> |-<br /> | 0x0F || 0x93 || S, 3 || GcAsic irq || In || [[Filesystem services]]<br /> |-<br /> | 0x10 || 0x7D || P, 5 || SDMMC3_DAT0_PP5? || || <br /> |-<br /> | 0x11 || 0x7C || P, 4 || SDMMC3_DAT1_PP4? || || <br /> |-<br /> | 0x12 || 0x7B || P, 3 || SDMMC3_DAT2_PP3? || || <br /> |-<br /> | 0x13 || 0x7A || P, 2 || SDMMC3_DAT3_PP2? || || <br /> |-<br /> | 0x14 || 0xBC || X, 4 || || || <br /> |-<br /> | 0x15 || 0xAE || V, 6 || || In || [[Audio services]]<br /> |-<br /> | 0x16 || 0xBA || X, 2 || MOTION_INT_PX2? || || <br /> |-<br /> | 0x17 || 0xB9 || X, 1 || Touchscreen irq (TOUCH_INT_PX1) (unused - polled instead) || In || [[HID services]]<br /> |-<br /> | 0x18 || 0xBD || X, 5 || Power Button (BUTTON_POWER_ON_PX5) || In ||<br /> |-<br /> | 0x19 || 0xBE || X, 6 || Volume Up (BUTTON_VOL_UP_PX6) || In || [[Boot2]], [[Audio services]]<br /> |-<br /> | 0x1A || 0xBF || X, 7 || Volume Down (BUTTON_VOL_DOWN_PX7) || In || [[Boot2]], [[Audio services]]<br /> |-<br /> | 0x1B || 0xC0 || Y, 0 || max17050 irq || In || [[PTM services]]<br /> |-<br /> | 0x1C || 0xC1 || Y, 1 || BUTTON_HOME_PY1 || In || <br /> |-<br /> | 0x1D || 0xA9 || V, 1 || Backlight (LCD_BL_EN_PV1) || Out || [[NV services]], [[Backlight services]]<br /> |-<br /> | 0x1E || 0xAA || V, 2 || Backlight (LCD_RST_PV2) || Out || [[NV services]]<br /> |-<br /> | 0x1F || 0x55 || K, 5 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x20 || 0xAD || V, 5 || PD related || Out || [[USB services]]<br /> |-<br /> | 0x21 || 0xC8 || Z, 0 || bq24192 irq || In || [[PTM services]] <br /> |-<br /> | 0x22 || 0xCA || Z, 2 || || || <br /> |-<br /> | 0x23 || 0xCB || Z, 3 || || || <br /> |-<br /> | 0x24 || 0x4F || J, 7 || Touchscreen reset || Out || [[HID services]]<br /> |-<br /> | 0x25 || 0x50 || K, 0 || || || <br /> |-<br /> | 0x26 || 0x51 || K, 1 || || || <br /> |-<br /> | 0x27 || 0x52 || K, 2 || || || <br /> |-<br /> | 0x28 || 0x54 || K, 4 || bm92t36 irq || In || [[USB services]]<br /> |-<br /> | 0x29 || 0x56 || K, 6 || || || <br /> |-<br /> | 0x2A || 0x57 || K, 7 || || || <br /> |-<br /> | 0x2B || 0x53 || K, 3 || joycon(R) NwcpDriver1.NwcpCharger || Out || [[HID services]]<br /> |-<br /> | 0x2C || 0xE3 || CC, 3 || joycon(L) NwcpDriver0.NwcpCharger || Out || [[HID services]]<br /> |-<br /> | 0x2D || 0x38 || H, 0 || WIFI_EN_PH0? || ||<br /> |-<br /> | 0x2E || 0x39 || H, 1 || WIFI_RST_PH1 || Out || [[Wlan services]], [[PCIe services]]<br /> |-<br /> | 0x2F || 0x3B || H, 3 || AP_WAKE_BT_PH3 || Out || [[Bluetooth services]]<br /> |-<br /> | 0x30 || 0x3D || H, 5 || || ||<br /> |-<br /> | 0x31 || 0x3F || H, 7 || || ||<br /> |-<br /> | 0x32 || 0x40 || I, 0 || Backlight +5V || Out || [[NV services]]<br /> |-<br /> | 0x33 || 0x41 || I, 1 || Backlight -5V || Out || [[NV services]]<br /> |-<br /> | 0x34 || 0x3E || H, 6 || joycon(R) NwcpDriver1.GpioMonitorTask0 (insertion, Joy-Con pin 5/console TX, pulled low on insert?) || In || [[HID services]]<br /> |-<br /> | 0x35 || 0xE2 || CC, 2 || || ||<br /> |-<br /> | 0x36 || 0xE4 || CC, 4 || Fan enable (high power) || Out || [[PTM services]]<br /> |-<br /> | 0x37 || 0x3A || H, 2 || || ||<br /> |-<br /> | 0x38 || 0xC9 || Z, 1 || SDCard Card Detect || In || [[Filesystem services]]<br /> |-<br /> | 0x39 || 0x4D || J, 5 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x3A || 0x58 || L, 0 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x3B || 0x3E || H, 6 || || ||<br /> |-<br /> | 0x3C || 0x26 || E, 6 || || ||<br /> |-<br /> | 0x3D || -1 || || || ||<br /> |-<br /> | 0x3E || 0x33 || G, 3 || joycon(R) NwcpDriver1.GpioMonitorTask1 (CTS, checked low) || In || [[HID services]]<br /> |-<br /> | 0x3F || 0x1C || D, 4 || joycon(L) NwcpDriver0.GpioMonitorTask1 (CTS, checked low) || In || [[HID services]]<br /> |-<br /> | 0x40 || 0xD9 || BB, 1 || || ||<br /> |-<br /> | 0x41 || 0x0C || B, 4 || Lid Closed (unused) || ||<br /> |-<br /> | 0x42 || 0x0D || B, 5 || || ||<br /> |-<br /> | 0x43 || 0x21 || E, 1 || USB power || Out || [[USB services]]<br /> |-<br /> | 0x44 || 0x27 || E, 7 || || ||<br /> |-<br /> | 0x45 || 0x92 || S, 2 || || ||<br /> |-<br /> | 0x46 || 0x95 || S, 5 || USB root port 4 power || Out || [[USB services]]<br /> |-<br /> | 0x47 || 0x98 || T, 0 || USB root port 3 power || Out || [[USB services]]<br /> |-<br /> | 0x48 || 0x10 || C, 0 || HdmiHotplug || Out || [[NV services]]<br /> |-<br /> | 0x49 || 0x11 || C, 1 || USB root port 2 power || Out || [[USB services]]<br /> |-<br /> | 0x4A || 0x12 || C, 2 || HdmiHotplug || Out || [[NV services]]<br /> |-<br /> | 0x4B || 0x42 || I, 2 || || ||<br /> |-<br /> | 0x4C || 0xE6 || CC, 6 || || ||<br /> |-<br /> | -- || 0xE1 || CC, 1 || HdmiHotplug (HDMI_INT_DP_HPD_PCC1) || In || [[NV services]]<br /> |}<br /> <br /> == OpenSessionForTest ==<br /> Same as [[#OpenSession]] but panics on failure.<br /> <br /> == OpenSession2 ==<br /> Same as [[#OpenSession]] but takes a '''DeviceCode''' instead of a '''GpioPadName'''.<br /> <br /> == IPadSession ==<br /> This is &quot;nn::gpio::IPadSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetDirection<br /> |-<br /> | 1 || GetDirection<br /> |-<br /> | 2 || SetInterruptMode<br /> |-<br /> | 3 || GetInterruptMode<br /> |-<br /> | 4 || SetInterruptEnable<br /> |-<br /> | 5 || GetInterruptEnable<br /> |-<br /> | 6 || GetInterruptStatus<br /> |-<br /> | 7 || ClearInterruptStatus<br /> |-<br /> | 8 || SetValue<br /> |-<br /> | 9 || GetValue<br /> |-<br /> | 10 || BindInterrupt<br /> |-<br /> | 11 || UnbindInterrupt<br /> |-<br /> | 12 || SetDebounceEnabled<br /> |-<br /> | 13 || GetDebounceEnabled<br /> |-<br /> | 14 || SetDebounceTime<br /> |-<br /> | 15 || GetDebounceTime<br /> |-<br /> | 16 || [4.0.0+] SetValueForSleepState<br /> |}<br /> <br /> == GpioPadDescriptor ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bits || Description<br /> |-<br /> | 7-5 || Controller index<br /> |-<br /> | 4-3 || Port index<br /> |-<br /> | 2-0 || Pin number<br /> |}<br /> <br /> = i2c, i2c:pcv =<br /> This is &quot;nn::i2c::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |-<br /> | 2 || HasDevice<br /> |-<br /> | 3 || HasDeviceForDev<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port:Addr || 10bit? || Speed || Max Retries || Retry Delay || Usage || Used by<br /> |-<br /> | 0 || 0:52 || N || 100000 || 0 || 0 || DebugPadDriver || [[HID services]]<br /> |-<br /> | 1 || 2:49 || N || 400000 || 0 || 0 || STM touchscreen || [[HID services]]<br /> |-<br /> | 2 || 0:4c || N || 100000 || 0 || 0 || TI Temperature Sensor (tmp451) || [[PTM services]]<br /> |-<br /> | 3 || 0:4c || N || 100000 || 0 || 0 || duplicate, unused entry? ||<br /> |-<br /> | 4 || 0:1c || N || 100000 || 0 || 0 || Audio codec (rt5639) || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 5 || 4:68 || N || 400000 || 3 || 5000000 || max77620_rtc0, max77620_irq0 || [[PCV services]]<br /> |-<br /> | 6 || 4:3c || N || 400000 || 3 || 5000000 || PMIC (max77620), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 7 || 4:1b || N || 400000 || 3 || 5000000 || max77621_cpu || [[PCV services]]<br /> |-<br /> | 8 || 4:1c || N || 400000 || 3 || 5000000 || max77621_gpu || [[PCV services]]<br /> |-<br /> | 9 || 0:6b || N || 100000 || 3 || 5000000 || TI Charger (bq24192) || [[PTM services]]<br /> |-<br /> | 10 || 0:36 || N || 100000 || 3 || 5000000 || Maxim Fuel Gauge (max17050) || [[PCV services]], [[PTM services]]<br /> |-<br /> | 11 || 0:18 || N || 100000 || 3 || 5000000 || USB-PD controller (rohm bm92t36) || [[USB services]]<br /> |-<br /> | 12 || 1:40 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 13 || 1:41 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 14 || 1:44 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 15 || 1:45 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 16 || 1:46 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 17 || 1:47 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 18 || 1:29 || N || 400000 || 3 || 5000000 || rohm ambient light sensor (bh1730fvc) || [[Backlight services]]<br /> |-<br /> | 19 || 1:48 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 20 || 1:49 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 21 || 1:4a || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 22 || 1:4b || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 23 || 1:4d || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 24 || 3:50 || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |-<br /> | 25 || 3:54 || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |-<br /> | 26 || 3:3a || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |}<br /> <br /> This table is believed to be complete - entries with empty &quot;Used by&quot; column haven't been seen being used (devices not present on switch?).<br /> <br /> == II2cSession ==<br /> This is &quot;nn::i2c::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Send<br /> |-<br /> | 1 || Receive<br /> |-<br /> | 2 || ExecuteCommandList<br /> |-<br /> | 10 || SendAuto<br /> |-<br /> | 11 || ReceiveAuto<br /> |-<br /> | 12 || ExecuteCommandListAuto<br /> |}<br /> <br /> = uart =<br /> This is &quot;nn::uart::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || DoesUartExist<br /> |-<br /> | 1 || DoesUartExistForTest<br /> |-<br /> | 2 || SetUartBaudrate<br /> |-<br /> | 3 || SetUartBaudrateForTest<br /> |-<br /> | 4 || IsSomethingUartValid<br /> |-<br /> | 5 || IsSomethingUartValidForTest<br /> |-<br /> | 6 || GetSession<br /> |-<br /> | 7 || IsSomethingUartValid2<br /> |-<br /> | 8 || IsSomethingUartValid2ForTest<br /> |}<br /> <br /> == IPortSession ==<br /> This is &quot;nn::uart::IPortSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Notes<br /> |-<br /> | 0 || OpenSession || Takes marshalled arguments<br /> |-<br /> | 1 || OpenSessionForTest || Takes marshalled arguments<br /> |-<br /> | 2 || || <br /> |-<br /> | 3 || || Takes marshalled arguments<br /> |-<br /> | 4 || || Returns 2x u64. Both zero.<br /> |-<br /> | 5 || || <br /> |-<br /> | 6 || || <br /> |-<br /> | 7 || || <br /> |-<br /> |}<br /> <br /> === Port Mapping ===<br /> OpenSession translates user IDs to to the uart port index.<br /> <br /> OpenSessionForTest takes the port index verbatim.<br /> <br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port || Usage<br /> |-<br /> | 1 || UART-D || Bluetooth<br /> |-<br /> | 2 || UART-B || Joycon(R)<br /> |-<br /> | 3 || UART-C || Joycon(L)<br /> |-<br /> |}<br /> <br /> = pwm =<br /> This is &quot;nn::pwm::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |}<br /> <br /> == Known Channels ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Interface || Usage || Used by<br /> |-<br /> | 1 || PWM Channel 1 || Fan || [[PTM services]]<br /> |-<br /> | 2 || PWM Channel 0 || Backlight || [[Backlight services]], [[NV services]]<br /> |-<br /> | 3 || PMC Blinker || ||<br /> |}<br /> <br /> == IChannelSession ==<br /> This is &quot;nn::pwm::IChannelSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPeriod<br /> |-<br /> | 1 || GetPeriod<br /> |-<br /> | 2 || SetDuty<br /> |-<br /> | 3 || GetDuty<br /> |-<br /> | 4 || SetEnabled<br /> |-<br /> | 5 || GetEnabled<br /> |}<br /> <br /> = pinmux =<br /> This is &quot;nn::pinmux::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::pinmux::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || <br /> |-<br /> | 1 || <br /> |-<br /> | 2 || <br /> |}<br /> <br /> = sasbus =<br /> This is &quot;nn::sasbus::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::sasbus::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || <br /> |-<br /> | 1 || <br /> |-<br /> | 2 || <br /> |-<br /> | 3 || <br /> |}<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Bus_services&diff=4526 2018-04-26T15:38:08Z

<p>Shinyquagsire23: </p> <hr /> <div>= gpio =<br /> This is &quot;nn::gpio::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession]]<br /> |-<br /> | 2 || [[#OpenSessionForTest]]<br /> |-<br /> | 3 || IsWakeEventActive <br /> |-<br /> | 4 || GetWakeEventActiveFlagSet<br /> |-<br /> | 5 || SetWakeEventActiveFlagSetForDebug<br /> |-<br /> | 6 || SetWakePinDebugMode<br /> |-<br /> | 7 || [5.0.0+] [[#OpenSession2]]<br /> |-<br /> | 8 || [5.0.0+] IsWakeEventActive2<br /> |-<br /> | 9 || [5.0.0+] SetWakeEventActiveFlagSetForDebug2<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes a raw GpioPadDescriptor and returns a [[#IPadSession]] session for it.<br /> <br /> == OpenSession ==<br /> Same thing as OpenSessionForDev except the descriptor is looked up in the table below.<br /> Returns an [[#IPadSession]] session.<br /> <br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! GpioPadName || GpioPadDescriptor || Tegra (port, pin) || Usage || Direction || Used by<br /> |-<br /> | 0x01 || 0xCC || Z, 4 || rt5639 power || Out || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 0x02 || 0x24 || E, 4 || SDCard Power || Out || [[Filesystem services]]<br /> |-<br /> | 0x03 || 0x3C || H, 4 || BT_RST_PH4 || Out || [[Bluetooth services]]<br /> |-<br /> | 0x04 || 0xDA || BB, 2 || || || <br /> |-<br /> | 0x05 || 0xDB || BB, 3 || GcAsic Power || Out || [[Filesystem services]]<br /> |-<br /> | 0x06 || 0xDC || BB, 4 || Headphone Detect || In || [[Audio services]]<br /> |-<br /> | 0x07 || 0x25 || E, 5 || || || <br /> |-<br /> | 0x08 || 0x90 || S, 0 || DebugPadDriver || In || [[HID services]]<br /> |-<br /> | 0x09 || 0x91 || S, 1 || || || <br /> |-<br /> | 0x0A || 0x96 || S, 6 || bq24192 Charge Enable || Out || [[PTM services]]<br /> |-<br /> | 0x0B || 0x97 || S, 7 || || || <br /> |-<br /> | 0x0C || 0x26 || E, 6 || joycon(L) NwcpDriver0.GpioMonitorTask0 (insertion) || In || [[HID services]]<br /> |-<br /> | 0x0D || 0x05 || A, 5 || Fan enable (normal) || Out || [[PTM services]]<br /> |-<br /> | 0x0E || 0x78 || P, 0 || SDMMC3_CLK_PP0? || || <br /> |-<br /> | 0x0F || 0x93 || S, 3 || GcAsic irq || In || [[Filesystem services]]<br /> |-<br /> | 0x10 || 0x7D || P, 5 || SDMMC3_DAT0_PP5? || || <br /> |-<br /> | 0x11 || 0x7C || P, 4 || SDMMC3_DAT1_PP4? || || <br /> |-<br /> | 0x12 || 0x7B || P, 3 || SDMMC3_DAT2_PP3? || || <br /> |-<br /> | 0x13 || 0x7A || P, 2 || SDMMC3_DAT3_PP2? || || <br /> |-<br /> | 0x14 || 0xBC || X, 4 || || || <br /> |-<br /> | 0x15 || 0xAE || V, 6 || || In || [[Audio services]]<br /> |-<br /> | 0x16 || 0xBA || X, 2 || MOTION_INT_PX2? || || <br /> |-<br /> | 0x17 || 0xB9 || X, 1 || Touchscreen irq (TOUCH_INT_PX1) (unused - polled instead) || In || [[HID services]]<br /> |-<br /> | 0x18 || 0xBD || X, 5 || Power Button (BUTTON_POWER_ON_PX5) || In ||<br /> |-<br /> | 0x19 || 0xBE || X, 6 || Volume Up (BUTTON_VOL_UP_PX6) || In || [[Boot2]], [[Audio services]]<br /> |-<br /> | 0x1A || 0xBF || X, 7 || Volume Down (BUTTON_VOL_DOWN_PX7) || In || [[Boot2]], [[Audio services]]<br /> |-<br /> | 0x1B || 0xC0 || Y, 0 || max17050 irq || In || [[PTM services]]<br /> |-<br /> | 0x1C || 0xC1 || Y, 1 || BUTTON_HOME_PY1 || In || <br /> |-<br /> | 0x1D || 0xA9 || V, 1 || Backlight (LCD_BL_EN_PV1) || Out || [[NV services]], [[Backlight services]]<br /> |-<br /> | 0x1E || 0xAA || V, 2 || Backlight (LCD_RST_PV2) || Out || [[NV services]]<br /> |-<br /> | 0x1F || 0x55 || K, 5 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x20 || 0xAD || V, 5 || PD related || Out || [[USB services]]<br /> |-<br /> | 0x21 || 0xC8 || Z, 0 || bq24192 irq || In || [[PTM services]] <br /> |-<br /> | 0x22 || 0xCA || Z, 2 || || || <br /> |-<br /> | 0x23 || 0xCB || Z, 3 || || || <br /> |-<br /> | 0x24 || 0x4F || J, 7 || Touchscreen reset || Out || [[HID services]]<br /> |-<br /> | 0x25 || 0x50 || K, 0 || || || <br /> |-<br /> | 0x26 || 0x51 || K, 1 || || || <br /> |-<br /> | 0x27 || 0x52 || K, 2 || || || <br /> |-<br /> | 0x28 || 0x54 || K, 4 || bm92t36 irq || In || [[USB services]]<br /> |-<br /> | 0x29 || 0x56 || K, 6 || || || <br /> |-<br /> | 0x2A || 0x57 || K, 7 || || || <br /> |-<br /> | 0x2B || 0x53 || K, 3 || joycon(R) NwcpDriver1.NwcpCharger || Out || [[HID services]]<br /> |-<br /> | 0x2C || 0xE3 || CC, 3 || joycon(L) NwcpDriver0.NwcpCharger || Out || [[HID services]]<br /> |-<br /> | 0x2D || 0x38 || H, 0 || WIFI_EN_PH0? || ||<br /> |-<br /> | 0x2E || 0x39 || H, 1 || WIFI_RST_PH1 || Out || [[Wlan services]], [[PCIe services]]<br /> |-<br /> | 0x2F || 0x3B || H, 3 || AP_WAKE_BT_PH3 || Out || [[Bluetooth services]]<br /> |-<br /> | 0x30 || 0x3D || H, 5 || || ||<br /> |-<br /> | 0x31 || 0x3F || H, 7 || || ||<br /> |-<br /> | 0x32 || 0x40 || I, 0 || Backlight +5V || Out || [[NV services]]<br /> |-<br /> | 0x33 || 0x41 || I, 1 || Backlight -5V || Out || [[NV services]]<br /> |-<br /> | 0x34 || 0x3E || H, 6 || joycon(R) NwcpDriver1.GpioMonitorTask0 (insertion) || In || [[HID services]]<br /> |-<br /> | 0x35 || 0xE2 || CC, 2 || || ||<br /> |-<br /> | 0x36 || 0xE4 || CC, 4 || Fan enable (high power) || Out || [[PTM services]]<br /> |-<br /> | 0x37 || 0x3A || H, 2 || || ||<br /> |-<br /> | 0x38 || 0xC9 || Z, 1 || SDCard Card Detect || In || [[Filesystem services]]<br /> |-<br /> | 0x39 || 0x4D || J, 5 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x3A || 0x58 || L, 0 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x3B || 0x3E || H, 6 || || ||<br /> |-<br /> | 0x3C || 0x26 || E, 6 || || ||<br /> |-<br /> | 0x3D || -1 || || || ||<br /> |-<br /> | 0x3E || 0x33 || G, 3 || joycon(R) NwcpDriver1.GpioMonitorTask1 (CTS, checked low) || In || [[HID services]]<br /> |-<br /> | 0x3F || 0x1C || D, 4 || joycon(L) NwcpDriver0.GpioMonitorTask1 (CTS, checked low) || In || [[HID services]]<br /> |-<br /> | 0x40 || 0xD9 || BB, 1 || || ||<br /> |-<br /> | 0x41 || 0x0C || B, 4 || Lid Closed (unused) || ||<br /> |-<br /> | 0x42 || 0x0D || B, 5 || || ||<br /> |-<br /> | 0x43 || 0x21 || E, 1 || USB power || Out || [[USB services]]<br /> |-<br /> | 0x44 || 0x27 || E, 7 || || ||<br /> |-<br /> | 0x45 || 0x92 || S, 2 || || ||<br /> |-<br /> | 0x46 || 0x95 || S, 5 || USB root port 4 power || Out || [[USB services]]<br /> |-<br /> | 0x47 || 0x98 || T, 0 || USB root port 3 power || Out || [[USB services]]<br /> |-<br /> | 0x48 || 0x10 || C, 0 || HdmiHotplug || Out || [[NV services]]<br /> |-<br /> | 0x49 || 0x11 || C, 1 || USB root port 2 power || Out || [[USB services]]<br /> |-<br /> | 0x4A || 0x12 || C, 2 || HdmiHotplug || Out || [[NV services]]<br /> |-<br /> | 0x4B || 0x42 || I, 2 || || ||<br /> |-<br /> | 0x4C || 0xE6 || CC, 6 || || ||<br /> |-<br /> | -- || 0xE1 || CC, 1 || HdmiHotplug (HDMI_INT_DP_HPD_PCC1) || In || [[NV services]]<br /> |}<br /> <br /> == OpenSessionForTest ==<br /> Same as [[#OpenSession]] but panics on failure.<br /> <br /> == OpenSession2 ==<br /> Same as [[#OpenSession]] but takes a '''DeviceCode''' instead of a '''GpioPadName'''.<br /> <br /> == IPadSession ==<br /> This is &quot;nn::gpio::IPadSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetDirection<br /> |-<br /> | 1 || GetDirection<br /> |-<br /> | 2 || SetInterruptMode<br /> |-<br /> | 3 || GetInterruptMode<br /> |-<br /> | 4 || SetInterruptEnable<br /> |-<br /> | 5 || GetInterruptEnable<br /> |-<br /> | 6 || GetInterruptStatus<br /> |-<br /> | 7 || ClearInterruptStatus<br /> |-<br /> | 8 || SetValue<br /> |-<br /> | 9 || GetValue<br /> |-<br /> | 10 || BindInterrupt<br /> |-<br /> | 11 || UnbindInterrupt<br /> |-<br /> | 12 || SetDebounceEnabled<br /> |-<br /> | 13 || GetDebounceEnabled<br /> |-<br /> | 14 || SetDebounceTime<br /> |-<br /> | 15 || GetDebounceTime<br /> |-<br /> | 16 || [4.0.0+] SetValueForSleepState<br /> |}<br /> <br /> == GpioPadDescriptor ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bits || Description<br /> |-<br /> | 7-5 || Controller index<br /> |-<br /> | 4-3 || Port index<br /> |-<br /> | 2-0 || Pin number<br /> |}<br /> <br /> = i2c, i2c:pcv =<br /> This is &quot;nn::i2c::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |-<br /> | 2 || HasDevice<br /> |-<br /> | 3 || HasDeviceForDev<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port:Addr || 10bit? || Speed || Max Retries || Retry Delay || Usage || Used by<br /> |-<br /> | 0 || 0:52 || N || 100000 || 0 || 0 || DebugPadDriver || [[HID services]]<br /> |-<br /> | 1 || 2:49 || N || 400000 || 0 || 0 || STM touchscreen || [[HID services]]<br /> |-<br /> | 2 || 0:4c || N || 100000 || 0 || 0 || TI Temperature Sensor (tmp451) || [[PTM services]]<br /> |-<br /> | 3 || 0:4c || N || 100000 || 0 || 0 || duplicate, unused entry? ||<br /> |-<br /> | 4 || 0:1c || N || 100000 || 0 || 0 || Audio codec (rt5639) || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 5 || 4:68 || N || 400000 || 3 || 5000000 || max77620_rtc0, max77620_irq0 || [[PCV services]]<br /> |-<br /> | 6 || 4:3c || N || 400000 || 3 || 5000000 || PMIC (max77620), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 7 || 4:1b || N || 400000 || 3 || 5000000 || max77621_cpu || [[PCV services]]<br /> |-<br /> | 8 || 4:1c || N || 400000 || 3 || 5000000 || max77621_gpu || [[PCV services]]<br /> |-<br /> | 9 || 0:6b || N || 100000 || 3 || 5000000 || TI Charger (bq24192) || [[PTM services]]<br /> |-<br /> | 10 || 0:36 || N || 100000 || 3 || 5000000 || Maxim Fuel Gauge (max17050) || [[PCV services]], [[PTM services]]<br /> |-<br /> | 11 || 0:18 || N || 100000 || 3 || 5000000 || USB-PD controller (rohm bm92t36) || [[USB services]]<br /> |-<br /> | 12 || 1:40 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 13 || 1:41 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 14 || 1:44 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 15 || 1:45 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 16 || 1:46 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 17 || 1:47 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 18 || 1:29 || N || 400000 || 3 || 5000000 || rohm ambient light sensor (bh1730fvc) || [[Backlight services]]<br /> |-<br /> | 19 || 1:48 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 20 || 1:49 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 21 || 1:4a || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 22 || 1:4b || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 23 || 1:4d || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 24 || 3:50 || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |-<br /> | 25 || 3:54 || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |-<br /> | 26 || 3:3a || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |}<br /> <br /> This table is believed to be complete - entries with empty &quot;Used by&quot; column haven't been seen being used (devices not present on switch?).<br /> <br /> == II2cSession ==<br /> This is &quot;nn::i2c::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Send<br /> |-<br /> | 1 || Receive<br /> |-<br /> | 2 || ExecuteCommandList<br /> |-<br /> | 10 || SendAuto<br /> |-<br /> | 11 || ReceiveAuto<br /> |-<br /> | 12 || ExecuteCommandListAuto<br /> |}<br /> <br /> = uart =<br /> This is &quot;nn::uart::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || DoesUartExist<br /> |-<br /> | 1 || DoesUartExistForTest<br /> |-<br /> | 2 || SetUartBaudrate<br /> |-<br /> | 3 || SetUartBaudrateForTest<br /> |-<br /> | 4 || IsSomethingUartValid<br /> |-<br /> | 5 || IsSomethingUartValidForTest<br /> |-<br /> | 6 || GetSession<br /> |-<br /> | 7 || IsSomethingUartValid2<br /> |-<br /> | 8 || IsSomethingUartValid2ForTest<br /> |}<br /> <br /> == IPortSession ==<br /> This is &quot;nn::uart::IPortSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Notes<br /> |-<br /> | 0 || OpenSession || Takes marshalled arguments<br /> |-<br /> | 1 || OpenSessionForTest || Takes marshalled arguments<br /> |-<br /> | 2 || || <br /> |-<br /> | 3 || || Takes marshalled arguments<br /> |-<br /> | 4 || || Returns 2x u64. Both zero.<br /> |-<br /> | 5 || || <br /> |-<br /> | 6 || || <br /> |-<br /> | 7 || || <br /> |-<br /> |}<br /> <br /> === Port Mapping ===<br /> OpenSession translates user IDs to to the uart port index.<br /> <br /> OpenSessionForTest takes the port index verbatim.<br /> <br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port || Usage<br /> |-<br /> | 1 || UART-D || Bluetooth<br /> |-<br /> | 2 || UART-B || Joycon(R)<br /> |-<br /> | 3 || UART-C || Joycon(L)<br /> |-<br /> |}<br /> <br /> = pwm =<br /> This is &quot;nn::pwm::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |}<br /> <br /> == Known Channels ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Interface || Usage || Used by<br /> |-<br /> | 1 || PWM Channel 1 || Fan || [[PTM services]]<br /> |-<br /> | 2 || PWM Channel 0 || Backlight || [[Backlight services]], [[NV services]]<br /> |-<br /> | 3 || PMC Blinker || ||<br /> |}<br /> <br /> == IChannelSession ==<br /> This is &quot;nn::pwm::IChannelSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPeriod<br /> |-<br /> | 1 || GetPeriod<br /> |-<br /> | 2 || SetDuty<br /> |-<br /> | 3 || GetDuty<br /> |-<br /> | 4 || SetEnabled<br /> |-<br /> | 5 || GetEnabled<br /> |}<br /> <br /> = pinmux =<br /> This is &quot;nn::pinmux::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::pinmux::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || <br /> |-<br /> | 1 || <br /> |-<br /> | 2 || <br /> |}<br /> <br /> = sasbus =<br /> This is &quot;nn::sasbus::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSession<br /> |}<br /> <br /> == ISession ==<br /> This is &quot;nn::sasbus::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || <br /> |-<br /> | 1 || <br /> |-<br /> | 2 || <br /> |-<br /> | 3 || <br /> |}<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=PCV_services&diff=4525 2018-04-26T14:44:12Z

<p>Shinyquagsire23: /* Voltage */</p> <hr /> <div>= bpc =<br /> This is &quot;nn::bpc::IBoardPowerControlManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || ShutdownSystem<br /> |-<br /> | 1 || RebootSystem<br /> |-<br /> | 2 || GetWakeupReason<br /> |-<br /> | 3 || GetShutdownReason<br /> |-<br /> | 4 || GetAcOk<br /> |-<br /> | 5 || GetBoardPowerControlEvent<br /> |-<br /> | 6 || GetSleepButtonState<br /> |-<br /> | 7 || GetPowerEvent<br /> |-<br /> | 8 ||<br /> |-<br /> | 9 ||<br /> |-<br /> | 10 ||<br /> |}<br /> <br /> = bpc:r =<br /> This is &quot;nn::bpc::IRtcManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || GetExternalRtcValue<br /> |-<br /> | 1 || SetExternalRtcValue<br /> |-<br /> | 2 || ReadExternalRtcResetFlag<br /> |-<br /> | 3 || ClearExternalRtcResetFlag<br /> |}<br /> <br /> GetExternalRtcValue / SetExternalRtcValue directly accesses the max77620_rtc0 device.<br /> <br /> = pcv =<br /> This is &quot;nn::pcv::detail::IPcvService&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPowerEnabled<br /> |-<br /> | 1 || SetClockEnabled<br /> |-<br /> | 2 || SetClockRate<br /> |-<br /> | 3 || GetClockRate<br /> |-<br /> | 4 || GetState<br /> |-<br /> | 5 || GetPossibleClockRates<br /> |-<br /> | 6 || SetMinVClockRate<br /> |-<br /> | 7 || SetReset<br /> |-<br /> | 8 || SetVoltageEnabled<br /> |-<br /> | 9 || GetVoltageEnabled<br /> |-<br /> | 10 || GetVoltageRange<br /> |-<br /> | 11 || SetVoltageValue<br /> |-<br /> | 12 || GetVoltageValue<br /> |-<br /> | 13 || GetTemperatureThresholds<br /> |-<br /> | 14 || SetTemperature<br /> |-<br /> | 15 || Initialize<br /> |-<br /> | 16 || IsInitialized<br /> |-<br /> | 17 || Finalize<br /> |-<br /> | 18 || PowerOn<br /> |-<br /> | 19 || PowerOff<br /> |-<br /> | 20 || ChangeVoltage<br /> |-<br /> | 21 || GetPowerClockInfoEvent<br /> |-<br /> | 22 || GetOscillatorClock<br /> |-<br /> | 23 || GetDvfsTable<br /> |-<br /> | 24 || GetModuleStateTable<br /> |-<br /> | 25 || GetPowerDomainStateTable<br /> |-<br /> | 26 || GetFuseInfo<br /> |-<br /> |}<br /> <br /> == User Name to Block Maps ==<br /> <br /> === Power Switch / Clocking / Reset ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Block || Rail || Notes<br /> |-<br /> | 0 || CpuBus || vdd_cpu ||<br /> |-<br /> | 1 || GPU || vdd_gpu ||<br /> |-<br /> | 2 || I2S1 || vdd_soc ||<br /> |-<br /> | 3 || I2S2 || vdd_soc ||<br /> |-<br /> | 4 || I2S3 || vdd_soc ||<br /> |-<br /> | 5 || PWM || vdd_soc ||<br /> |-<br /> | 6 || I2C1 || vdd_soc ||<br /> |-<br /> | 7 || I2C2 || vdd_soc ||<br /> |-<br /> | 8 || I2C3 || vdd_soc ||<br /> |-<br /> | 9 || I2C4 || vdd_soc ||<br /> |-<br /> | 10 || I2C5 || vdd_soc ||<br /> |-<br /> | 11 || I2C6 || vdd_soc ||<br /> |-<br /> | 12 || SPI1 || vdd_soc ||<br /> |-<br /> | 13 || SPI2 || vdd_soc ||<br /> |-<br /> | 14 || SPI3 || vdd_soc ||<br /> |-<br /> | 15 || SPI4 || vdd_soc ||<br /> |-<br /> | 16 || DISP1 || vdd_soc ||<br /> |-<br /> | 17 || DISP2 || vdd_soc ||<br /> |-<br /> | 20 || SDMMC1 || vdd_soc ||<br /> |-<br /> | 21 || SDMMC2 || vdd_soc ||<br /> |-<br /> | 22 || SDMMC3 || vdd_soc ||<br /> |-<br /> | 23 || SDMMC4 || vdd_soc ||<br /> |-<br /> | 24 || - || - || Not actual block. Used for debug and stuff.<br /> |-<br /> | 25 || CSITE || vdd_soc ||<br /> |-<br /> | 26 || TSEC || vdd_soc ||<br /> |-<br /> | 27 || MSELECT || vdd_soc ||<br /> |-<br /> | 28 || HDA2CODEC_2X || vdd_soc ||<br /> |-<br /> | 29 || ACTMON || vdd_soc ||<br /> |-<br /> | 30 || I2C_SLOW || vdd_soc ||<br /> |-<br /> | 31 || SOR1 || vdd_soc ||<br /> |-<br /> | 33 || HDA || vdd_soc ||<br /> |-<br /> | 34 || XUSB_CORE_HOST || vdd_soc ||<br /> |-<br /> | 35 || XUSB_FALCON || vdd_soc ||<br /> |-<br /> | 36 || XUSB_FS || vdd_soc ||<br /> |-<br /> | 37 || XUSB_CORE_DEV || vdd_soc ||<br /> |-<br /> | 38 || XUSB_SS_HOSTDEV || vdd_soc ||<br /> |-<br /> | 39 || UARTA || vdd_soc ||<br /> |-<br /> | 40 || UARTB || vdd_soc ||<br /> |-<br /> | 41 || UARTC || vdd_soc ||<br /> |-<br /> | 42 || UARTD || vdd_soc ||<br /> |-<br /> | 43 || HOST1X || vdd_soc ||<br /> |-<br /> | 44 || ENTROPY || vdd_soc ||<br /> |-<br /> | 45 || SOC_THERM || vdd_soc ||<br /> |-<br /> | 46 || VIC || vdd_soc ||<br /> |-<br /> | 47 || NVENC || vdd_soc ||<br /> |-<br /> | 48 || NVJPG || vdd_soc ||<br /> |-<br /> | 49 || NVDEC || vdd_soc ||<br /> |-<br /> | 50 || QSPI || vdd_soc ||<br /> |-<br /> | 52 || TSECB || vdd_soc ||<br /> |-<br /> | 53 || APE || vdd_soc ||<br /> |-<br /> | 54 || ACLK || vdd_soc ||<br /> |-<br /> | 55 || UARTAPE || vdd_soc ||<br /> |-<br /> | 56 || EMC || vdd_soc ||<br /> |-<br /> | 57 || PLLE0 || vdd_soc ||<br /> |-<br /> | 58 || PLLE0 || vdd_soc ||<br /> |-<br /> | 59 || DSI || vdd_soc ||<br /> |-<br /> | 60 || MAUD || vdd_soc ||<br /> |-<br /> | 61 || DPAUX1 || vdd_soc ||<br /> |-<br /> | 62 || MIPI_CAL || vdd_soc ||<br /> |-<br /> | 63 || UART_FST_MIPI_CAL || vdd_soc ||<br /> |-<br /> | 64 || OSC || vdd_soc ||<br /> |-<br /> | 65 || SCLK || vdd_soc ||<br /> |-<br /> | 66 || SOR_SAFE || vdd_soc ||<br /> |-<br /> | 67 || XUSB_SS || vdd_soc ||<br /> |-<br /> | 68 || XUSB_HOST || vdd_soc ||<br /> |-<br /> | 69 || XUSB_DEV || vdd_soc ||<br /> |-<br /> | 70 || EXTPERIPH1 || vdd_soc ||<br /> |-<br /> | 71 || AHUB || vdd_soc ||<br /> |-<br /> | 72 || HDA2HDMICODEC || vdd_soc ||<br /> |-<br /> | 73 || PLLP5 || vdd_soc ||<br /> |-<br /> | 74 || USBD || vdd_soc ||<br /> |-<br /> | 75 || USB2 || vdd_soc ||<br /> |-<br /> | 76 || PCIE || vdd_soc ||<br /> |-<br /> | 77 || AFI || vdd_soc ||<br /> |-<br /> | 78 || PCIEXCLK || vdd_soc ||<br /> |-<br /> | 79 || PEX_USB_UPHY || vdd_soc ||<br /> |-<br /> | 80 || XUSB_PADCTL || vdd_soc ||<br /> |-<br /> | 81 || APBDMA || vdd_soc ||<br /> |-<br /> | 82 || USB2_TRK || vdd_soc ||<br /> |-<br /> | 83 || PLLE0 || vdd_soc ||<br /> |-<br /> | 84 || PLLE0 || vdd_soc ||<br /> |-<br /> | 85 || CEC || vdd_soc ||<br /> |-<br /> |}<br /> <br /> === Voltage ===<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Block || Notes<br /> |-<br /> | 0 || max77620_sd0 || <br /> |-<br /> | 1 || max77620_sd1 || <br /> |-<br /> | 2 || max77620_sd2 || <br /> |-<br /> | 3 || max77620_sd3 || <br /> |-<br /> | 4 || max77620_ldo0 || 1.2v<br /> |-<br /> | 5 || max77620_ldo1 || <br /> |-<br /> | 6 || max77620_ldo2 || SDcard power, 3.3v - 1.8v<br /> |-<br /> | 7 || max77620_ldo3 || <br /> |-<br /> | 8 || max77620_ldo4 || RTC power, 0.85v<br /> |-<br /> | 9 || max77620_ldo5 || <br /> |-<br /> | 10 || max77620_ldo6 || AVDD touchscreen, 2.9v<br /> |-<br /> | 11 || max77620_ldo7 || <br /> |-<br /> | 12 || max77620_ldo8 || DisplayPort, 1.05v<br /> |-<br /> | 13 || max77621_cpu || <br /> |-<br /> | 14 || max77621_gpu || <br /> |-<br /> |}<br /> <br /> Note: max77620 GPIOs are only used internally by the driver during init, and not exposed via an API.<br /> <br /> = pcv:arb =<br /> This is &quot;nn::pcv::IArbitrationManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || ReleaseControl<br /> |-<br /> |}<br /> <br /> = pcv:imm =<br /> This is &quot;nn::pcv::IImmediateManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetClockRate<br /> |-<br /> |}<br /> <br /> = time:u, time:a, time:s =<br /> This is &quot;nn::timesrv::detail::service::IStaticService&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Notes<br /> |-<br /> | 0 || GetStandardUserSystemClock || Returns an [[#ISystemClock]].<br /> |-<br /> | 1 || GetStandardNetworkSystemClock || Returns an [[#ISystemClock]].<br /> |-<br /> | 2 || GetStandardSteadyClock || Returns an [[#ISteadyClock]].<br /> |-<br /> | 3 || GetTimeZoneService || Returns an [[#ITimeZoneService]].<br /> |-<br /> | 4 || GetStandardLocalSystemClock || Returns an [[#ISystemClock]].<br /> |-<br /> | 5 || [4.0.0+] GetEphemeralNetworkSystemClock || Returns an [[#ISystemClock]].<br /> |-<br /> | 50 || [4.0.0+] SetStandardSteadyClockInternalOffset || <br /> |-<br /> | 100 || IsStandardUserSystemClockAutomaticCorrectionEnabled || <br /> |-<br /> | 101 || SetStandardUserSystemClockAutomaticCorrectionEnabled || <br /> |-<br /> | 102 || [5.0.0+] GetStandardUserSystemClockInitialYear || <br /> |-<br /> | 200 || IsStandardNetworkSystemClockAccuracySufficient || <br /> |-<br /> | 300 || [4.0.0+] CalculateMonotonicSystemClockBaseTimePoint || <br /> |-<br /> | 400 || [4.0.0+] GetClockSnapshot || <br /> |-<br /> | 401 || [4.0.0+] GetClockSnapshotFromSystemClockContext || <br /> |-<br /> | 500 || [4.0.0+] CalculateStandardUserSystemClockDifferenceByUser || <br /> |-<br /> | 501 || [4.0.0+] CalculateSpanBetween || <br /> |}<br /> <br /> == ISteadyClock ==<br /> This is &quot;nn::timesrv::detail::service::ISteadyClock&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Notes<br /> |-<br /> | 0 || GetCurrentTimePoint || No input, returns an output [[#SteadyClockTimePoint]].<br /> |-<br /> | 2 || GetTestOffset || No input, returns an output [[#TimeSpanType]].<br /> |-<br /> | 3 || SetTestOffset || Takes an input [[#TimeSpanType]], no output.<br /> |-<br /> | 100 || GetRtcValue || No input, returns an output s64.<br /> |-<br /> | 101 || IsRtcResetDetected || No input, returns an output u8 bool.<br /> |-<br /> | 102 || GetSetupResultValue || No input, returns an output u32.<br /> |-<br /> | 200 || GetInternalOffset || No input, returns an output [[#TimeSpanType]].<br /> |-<br /> | 201 || SetInternalOffset || Takes an input [[#TimeSpanType]], no output. Removed in [4.0.0+].<br /> |}<br /> <br /> === SteadyClockTimePoint ===<br /> This is a 0x18-byte struct.<br /> <br /> === TimeSpanType ===<br /> This is an u64.<br /> <br /> == ISystemClock ==<br /> This is &quot;nn::timesrv::detail::service::ISystemClock&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Notes<br /> |-<br /> | 0 || GetCurrentTime || Returns an output [[#PosixTime]].<br /> |-<br /> | 1 || SetCurrentTime || Takes an input [[#PosixTime]].<br /> |-<br /> | 2 || GetSystemClockContext || Returns an output [[#SystemClockContext]].<br /> |-<br /> | 3 || SetSystemClockContext || Takes an input [[#SystemClockContext]].<br /> |-<br /> |}<br /> <br /> === PosixTime ===<br /> This is an u64 for UTC POSIX time.<br /> <br /> === SystemClockContext ===<br /> This is an 0x20-byte struct.<br /> <br /> == ITimeZoneService ==<br /> This is &quot;nn::timesrv::detail::service::ITimeZoneService&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Notes<br /> |-<br /> | 0 || GetDeviceLocationName || No input, returns an output [[#LocationName]].<br /> |-<br /> | 1 || SetDeviceLocationName || Takes an input [[#LocationName]], no output.<br /> |-<br /> | 2 || GetTotalLocationNameCount || No input, returns an output s32.<br /> |-<br /> | 3 || LoadLocationNameList || <br /> |-<br /> | 4 || LoadTimeZoneRule || Takes an input [[#LocationName]] and a type-0x16 output buffer for [[#TimeZoneRule]], no output.<br /> |-<br /> | 5 || GetTimeZoneRuleVersion || No input, returns an output [[#TimeZoneRuleVersion]].<br /> |-<br /> | 100 || ToCalendarTime || Takes an input [[#PosixTime]] and a type-0x15 input buffer for [[#TimeZoneRule]], returns an output [[#CalendarTime]] and [[#CalendarAdditionalInfo]].<br /> |-<br /> | 101 || ToCalendarTimeWithMyRule || Takes an input [[#PosixTime]], returns an output [[#CalendarTime]] and [[#CalendarAdditionalInfo]].<br /> |-<br /> | 200 || ToPosixTime || Takes an input [[#CalendarTime]], a type-0x15 input buffer for [[#TimeZoneRule]], an type-0xA output buffer for [[#PosixTime]] array, and returns an output s32.<br /> |-<br /> | 201 || ToPosixTimeWithMyRule || Takes an input [[#CalendarTime]], an type-0xA output buffer for [[#PosixTime]] array, and returns an output s32.<br /> |-<br /> |}<br /> <br /> === LoadLocationNameList ===<br /> Takes an input s32 LocationName_index and a type-0x6 output buffer for [[#LocationName]], returns an output s32 for total output entries.<br /> <br /> === LocationName ===<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x10 || Location name string, no NUL-terminator.<br /> |-<br /> | 0x10 || ? || <br /> |-<br /> | 0x18 || 0x8? || ?<br /> |-<br /> | 0x20 || ? || ?<br /> |}<br /> <br /> This is an 0x24-byte struct.<br /> <br /> === TimeZoneRule ===<br /> This is an 0x4000-byte struct. Official sw uses fixed-size 0x4000 for the buffer size with the above commands.<br /> <br /> === TimeZoneRuleVersion ===<br /> This is an u128.<br /> <br /> === CalendarTime ===<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x2 || Year<br /> |-<br /> | 0x2 || 0x1 || Month<br /> |-<br /> | 0x3 || 0x1 || Day<br /> |-<br /> | 0x4 || 0x1 || Hour<br /> |-<br /> | 0x5 || 0x1 || Minute<br /> |-<br /> | 0x6 || 0x1 || Second<br /> |-<br /> | 0x7 || 0x1 || Padding / unknown?<br /> |}<br /> <br /> This is an 0x8-byte struct.<br /> <br /> === CalendarAdditionalInfo ===<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset || Size || Description<br /> |-<br /> | 0x0 || 0x4 || 0-based day-of-week.<br /> |-<br /> | 0x4 || 0x4 || 0-based day-of-year.<br /> |-<br /> | 0x8 || ? || Timezone name string.<br /> |-<br /> | 0x10 || 0x4 || 0 = no DST, 1 = DST.<br /> |-<br /> | 0x14 || 0x4 || s32 seconds relative to UTC for this timezone.<br /> |}<br /> <br /> This is an 0x18-byte struct. This stores timezone info.<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Bus_services&diff=4426 2018-04-08T05:03:48Z

<p>Shinyquagsire23: </p> <hr /> <div>= gpio =<br /> This is &quot;nn::gpio::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession]]<br /> |-<br /> | 2 || [[#OpenSessionForTest]]<br /> |-<br /> | 3 || IsWakeEventActive <br /> |-<br /> | 4 || GetWakeEventActiveFlagSet<br /> |-<br /> | 5 || SetWakeEventActiveFlagSetForDebug<br /> |-<br /> | 6 ||<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes a raw GpioPadDescriptor and returns a [[#IPadSession]] session for it.<br /> <br /> == OpenSession ==<br /> Same thing as OpenSessionForDev except the descriptor is looked up in the table below.<br /> Returns an [[#IPadSession]] session.<br /> <br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! GpioPadName || GpioPadDescriptor || Tegra (port, pin) || Usage || Direction || Used by<br /> |-<br /> | 0x01 || 0xCC || Z, 4 || rt5639 power || Out || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 0x02 || 0x24 || E, 4 || SDCard Power || Out || [[Filesystem services]]<br /> |-<br /> | 0x03 || 0x3C || H, 4 || BT_RST_PH4 || Out || [[Bluetooth services]]<br /> |-<br /> | 0x04 || 0xDA || BB, 2 || || || <br /> |-<br /> | 0x05 || 0xDB || BB, 3 || GcAsic Power || Out || [[Filesystem services]]<br /> |-<br /> | 0x06 || 0xDC || BB, 4 || Headphone Detect || In || [[Audio services]]<br /> |-<br /> | 0x07 || 0x25 || E, 5 || || || <br /> |-<br /> | 0x08 || 0x90 || S, 0 || DebugPadDriver || In || [[HID services]]<br /> |-<br /> | 0x09 || 0x91 || S, 1 || || || <br /> |-<br /> | 0x0A || 0x96 || S, 6 || bq24192 Charge Enable || Out || [[PTM services]]<br /> |-<br /> | 0x0B || 0x97 || S, 7 || || || <br /> |-<br /> | 0x0C || 0x26 || E, 6 || joycon(L) NwcpDriver0.GpioMonitorTask0 (insertion) || In || [[HID services]]<br /> |-<br /> | 0x0D || 0x05 || A, 5 || Fan enable (normal) || Out || [[PTM services]]<br /> |-<br /> | 0x0E || 0x78 || P, 0 || SDMMC3_CLK_PP0? || || <br /> |-<br /> | 0x0F || 0x93 || S, 3 || GcAsic irq || In || [[Filesystem services]]<br /> |-<br /> | 0x10 || 0x7D || P, 5 || SDMMC3_DAT0_PP5? || || <br /> |-<br /> | 0x11 || 0x7C || P, 4 || SDMMC3_DAT1_PP4? || || <br /> |-<br /> | 0x12 || 0x7B || P, 3 || SDMMC3_DAT2_PP3? || || <br /> |-<br /> | 0x13 || 0x7A || P, 2 || SDMMC3_DAT3_PP2? || || <br /> |-<br /> | 0x14 || 0xBC || X, 4 || || || <br /> |-<br /> | 0x15 || 0xAE || V, 6 || || In || [[Audio services]]<br /> |-<br /> | 0x16 || 0xBA || X, 2 || MOTION_INT_PX2? || || <br /> |-<br /> | 0x17 || 0xB9 || X, 1 || Touchscreen irq (TOUCH_INT_PX1) (unused - polled instead) || In || [[HID services]]<br /> |-<br /> | 0x18 || 0xBD || X, 5 || Power Button (BUTTON_POWER_ON_PX5) || In ||<br /> |-<br /> | 0x19 || 0xBE || X, 6 || Volume Up (BUTTON_VOL_UP_PX6) || In || [[Boot2]], [[Audio services]]<br /> |-<br /> | 0x1A || 0xBF || X, 7 || Volume Down (BUTTON_VOL_DOWN_PX7) || In || [[Boot2]], [[Audio services]]<br /> |-<br /> | 0x1B || 0xC0 || Y, 0 || max17050 irq || In || [[PTM services]]<br /> |-<br /> | 0x1C || 0xC1 || Y, 1 || BUTTON_HOME_PY1 || In || <br /> |-<br /> | 0x1D || 0xA9 || V, 1 || Backlight (LCD_BL_EN_PV1) || Out || [[NV services]], [[Backlight services]]<br /> |-<br /> | 0x1E || 0xAA || V, 2 || Backlight (LCD_RST_PV2) || Out || [[NV services]]<br /> |-<br /> | 0x1F || 0x55 || K, 5 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x20 || 0xAD || V, 5 || PD related || Out || [[USB services]]<br /> |-<br /> | 0x21 || 0xC8 || Z, 0 || bq24192 irq || In || [[PTM services]] <br /> |-<br /> | 0x22 || 0xCA || Z, 2 || || || <br /> |-<br /> | 0x23 || 0xCB || Z, 3 || || || <br /> |-<br /> | 0x24 || 0x4F || J, 7 || Touchscreen reset || Out || [[HID services]]<br /> |-<br /> | 0x25 || 0x50 || K, 0 || || || <br /> |-<br /> | 0x26 || 0x51 || K, 1 || || || <br /> |-<br /> | 0x27 || 0x52 || K, 2 || || || <br /> |-<br /> | 0x28 || 0x54 || K, 4 || bm92t36 irq || In || [[USB services]]<br /> |-<br /> | 0x29 || 0x56 || K, 6 || || || <br /> |-<br /> | 0x2A || 0x57 || K, 7 || || || <br /> |-<br /> | 0x2B || 0x53 || K, 3 || joycon(R) NwcpDriver1.NwcpCharger || Out || [[HID services]]<br /> |-<br /> | 0x2C || 0xE3 || CC, 3 || joycon(L) NwcpDriver0.NwcpCharger || Out || [[HID services]]<br /> |-<br /> | 0x2D || 0x38 || H, 0 || WIFI_EN_PH0? || ||<br /> |-<br /> | 0x2E || 0x39 || H, 1 || WIFI_RST_PH1 || Out || [[Wlan services]], [[PCIe services]]<br /> |-<br /> | 0x2F || 0x3B || H, 3 || AP_WAKE_BT_PH3 || Out || [[Bluetooth services]]<br /> |-<br /> | 0x30 || 0x3D || H, 5 || || ||<br /> |-<br /> | 0x31 || 0x3F || H, 7 || || ||<br /> |-<br /> | 0x32 || 0x40 || I, 0 || Backlight +5V || Out || [[NV services]]<br /> |-<br /> | 0x33 || 0x41 || I, 1 || Backlight -5V || Out || [[NV services]]<br /> |-<br /> | 0x34 || 0x3E || H, 6 || joycon(R) NwcpDriver1.GpioMonitorTask0 (insertion) || In || [[HID services]]<br /> |-<br /> | 0x35 || 0xE2 || CC, 2 || || ||<br /> |-<br /> | 0x36 || 0xE4 || CC, 4 || Fan enable (high power) || Out || [[PTM services]]<br /> |-<br /> | 0x37 || 0x3A || H, 2 || || ||<br /> |-<br /> | 0x38 || 0xC9 || Z, 1 || SDCard Card Detect || In || [[Filesystem services]]<br /> |-<br /> | 0x39 || 0x4D || J, 5 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x3A || 0x58 || L, 0 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x3B || 0x3E || H, 6 || || ||<br /> |-<br /> | 0x3C || 0x26 || E, 6 || || ||<br /> |-<br /> | 0x3D || -1 || || || ||<br /> |-<br /> | 0x3E || 0x33 || G, 3 || joycon(R) NwcpDriver1.GpioMonitorTask1 || In || [[HID services]]<br /> |-<br /> | 0x3F || 0x1C || D, 4 || joycon(L) NwcpDriver0.GpioMonitorTask1 || In || [[HID services]]<br /> |-<br /> | 0x40 || 0xD9 || BB, 1 || || ||<br /> |-<br /> | 0x41 || 0x0C || B, 4 || Lid Closed (unused) || ||<br /> |-<br /> | 0x42 || 0x0D || B, 5 || || ||<br /> |-<br /> | 0x43 || 0x21 || E, 1 || USB power || Out || [[USB services]]<br /> |-<br /> | 0x44 || 0x27 || E, 7 || || ||<br /> |-<br /> | 0x45 || 0x92 || S, 2 || || ||<br /> |-<br /> | 0x46 || 0x95 || S, 5 || USB root port 4 power || Out || [[USB services]]<br /> |-<br /> | 0x47 || 0x98 || T, 0 || USB root port 3 power || Out || [[USB services]]<br /> |-<br /> | 0x48 || 0x10 || C, 0 || HdmiHotplug || Out || [[NV services]]<br /> |-<br /> | 0x49 || 0x11 || C, 1 || USB root port 2 power || Out || [[USB services]]<br /> |-<br /> | 0x4A || 0x12 || C, 2 || HdmiHotplug || Out || [[NV services]]<br /> |-<br /> | 0x4B || 0x42 || I, 2 || || ||<br /> |-<br /> | 0x4C || 0xE6 || CC, 6 || || ||<br /> |-<br /> | -- || 0xE1 || CC, 1 || HdmiHotplug (HDMI_INT_DP_HPD_PCC1) || In || [[NV services]]<br /> |}<br /> <br /> == OpenSessionForTest ==<br /> Same as [[#OpenSession]] but panics on failure.<br /> <br /> == IPadSession ==<br /> This is &quot;nn::gpio::IPadSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetDirection<br /> |-<br /> | 1 || GetDirection<br /> |-<br /> | 2 || SetInterruptMode<br /> |-<br /> | 3 || GetInterruptMode<br /> |-<br /> | 4 || SetInterruptEnable<br /> |-<br /> | 5 || GetInterruptEnable<br /> |-<br /> | 6 || GetInterruptStatus<br /> |-<br /> | 7 || ClearInterruptStatus<br /> |-<br /> | 8 || SetValue<br /> |-<br /> | 9 || GetValue<br /> |-<br /> | 10 || BindInterrupt<br /> |-<br /> | 11 || UnbindInterrupt<br /> |-<br /> | 12 || SetDebounceEnabled<br /> |-<br /> | 13 || GetDebounceEnabled<br /> |-<br /> | 14 || SetDebounceTime<br /> |-<br /> | 15 || GetDebounceTime<br /> |}<br /> <br /> == GpioPadDescriptor ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bits || Description<br /> |-<br /> | 7-5 || Controller index<br /> |-<br /> | 4-3 || Port index<br /> |-<br /> | 2-0 || Pin number<br /> |}<br /> <br /> = i2c, i2c:pcv =<br /> This is &quot;nn::i2c::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |-<br /> | 2 || HasDevice<br /> |-<br /> | 3 || HasDeviceForDev<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port:Addr || 10bit? || Speed || Max Retries || Retry Delay || Usage || Used by<br /> |-<br /> | 0 || 0:52 || N || 100000 || 0 || 0 || DebugPadDriver || [[HID services]]<br /> |-<br /> | 1 || 2:49 || N || 400000 || 0 || 0 || STM touchscreen || [[HID services]]<br /> |-<br /> | 2 || 0:4c || N || 100000 || 0 || 0 || TI Temperature Sensor (tmp451) || [[PTM services]]<br /> |-<br /> | 3 || 0:4c || N || 100000 || 0 || 0 || duplicate, unused entry? ||<br /> |-<br /> | 4 || 0:1c || N || 100000 || 0 || 0 || Audio codec (rt5639) || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 5 || 4:68 || N || 400000 || 3 || 5000000 || max77620_rtc0, max77620_irq0 || [[PCV services]]<br /> |-<br /> | 6 || 4:3c || N || 400000 || 3 || 5000000 || PMIC (max77620), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 7 || 4:1b || N || 400000 || 3 || 5000000 || max77621_cpu || [[PCV services]]<br /> |-<br /> | 8 || 4:1c || N || 400000 || 3 || 5000000 || max77621_gpu || [[PCV services]]<br /> |-<br /> | 9 || 0:6b || N || 100000 || 3 || 5000000 || TI Charger (bq24192) || [[PTM services]]<br /> |-<br /> | 10 || 0:36 || N || 100000 || 3 || 5000000 || Maxim Fuel Gauge (max17050) || [[PCV services]], [[PTM services]]<br /> |-<br /> | 11 || 0:18 || N || 100000 || 3 || 5000000 || USB-PD controller (rohm bm92t36) || [[USB services]]<br /> |-<br /> | 12 || 1:40 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 13 || 1:41 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 14 || 1:44 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 15 || 1:45 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 16 || 1:46 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 17 || 1:47 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 18 || 1:29 || N || 400000 || 3 || 5000000 || rohm ambient light sensor (bh1730fvc) || [[Backlight services]]<br /> |-<br /> | 19 || 1:48 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 20 || 1:49 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 21 || 1:4a || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 22 || 1:4b || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 23 || 1:4d || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 24 || 3:50 || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |-<br /> | 25 || 3:54 || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |-<br /> | 26 || 3:3a || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |}<br /> <br /> This table is believed to be complete - entries with empty &quot;Used by&quot; column haven't been seen being used (devices not present on switch?).<br /> <br /> == II2cSession ==<br /> This is &quot;nn::i2c::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Send<br /> |-<br /> | 1 || Receive<br /> |-<br /> | 2 || ExecuteCommandList<br /> |-<br /> | 10 || SendAuto<br /> |-<br /> | 11 || ReceiveAuto<br /> |-<br /> | 12 || ExecuteCommandListAuto<br /> |}<br /> <br /> = uart =<br /> This is &quot;nn::uart::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || DoesUartExist<br /> |-<br /> | 1 || DoesUartExistForTest<br /> |-<br /> | 2 || SetUartBaudrate<br /> |-<br /> | 3 || SetUartBaudrateForTest<br /> |-<br /> | 4 || IsSomethingUartValid<br /> |-<br /> | 5 || IsSomethingUartValidForTest<br /> |-<br /> | 6 || GetSession<br /> |-<br /> | 7 || IsSomethingUartValid2<br /> |-<br /> | 8 || IsSomethingUartValid2ForTest<br /> |-<br /> |}<br /> <br /> == IPortSession ==<br /> This is &quot;nn::uart::IPortSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Notes<br /> |-<br /> | 0 || OpenSession || Takes marshalled arguments<br /> |-<br /> | 1 || OpenSessionForTest || Takes marshalled arguments<br /> |-<br /> | 2 || || <br /> |-<br /> | 3 || || Takes marshalled arguments<br /> |-<br /> | 4 || || Returns 2x u64. Both zero.<br /> |-<br /> | 5 || || <br /> |-<br /> | 6 || || <br /> |-<br /> | 7 || || <br /> |-<br /> |}<br /> <br /> === Port Mapping ===<br /> OpenSession translates user IDs to to the uart port index.<br /> <br /> OpenSessionForTest takes the port index verbatim.<br /> <br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port || Usage<br /> |-<br /> | 1 || UART-D || Bluetooth<br /> |-<br /> | 2 || UART-B || Joycon(R)<br /> |-<br /> | 3 || UART-C || Joycon(L)<br /> |-<br /> |}<br /> <br /> = pwm =<br /> This is &quot;nn::pwm::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |}<br /> <br /> == Known Channels ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Interface || Usage || Used by<br /> |-<br /> | 1 || PWM Channel 1 || Fan || [[PTM services]]<br /> |-<br /> | 2 || PWM Channel 0 || Backlight || [[Backlight services]], [[NV services]]<br /> |-<br /> | 3 || PMC Blinker || ||<br /> |}<br /> <br /> == IChannelSession ==<br /> This is &quot;nn::pwm::IChannelSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPeriod<br /> |-<br /> | 1 || GetPeriod<br /> |-<br /> | 2 || SetDuty<br /> |-<br /> | 3 || GetDuty<br /> |-<br /> | 4 || SetEnabled<br /> |-<br /> | 5 || GetEnabled<br /> |}<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Bus_services&diff=4419 2018-04-05T04:53:06Z

<p>Shinyquagsire23: neat.gif</p> <hr /> <div>= gpio =<br /> This is &quot;nn::gpio::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenSessionForDev]]<br /> |-<br /> | 1 || [[#OpenSession]]<br /> |-<br /> | 2 || [[#OpenSessionForTest]]<br /> |-<br /> | 3 || IsWakeEventActive <br /> |-<br /> | 4 || GetWakeEventActiveFlagSet<br /> |-<br /> | 5 || SetWakeEventActiveFlagSetForDebug<br /> |-<br /> | 6 ||<br /> |}<br /> <br /> == OpenSessionForDev ==<br /> Takes a raw GpioPadDescriptor and returns a [[#IPadSession]] session for it.<br /> <br /> == OpenSession ==<br /> Same thing as OpenSessionForDev except the descriptor is looked up in the table below.<br /> Returns an [[#IPadSession]] session.<br /> <br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! GpioPadName || GpioPadDescriptor || Tegra (port, pin) || Usage || Direction || Used by<br /> |-<br /> | 0x01 || 0xCC || Z, 4 || || Out || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 0x02 || 0x24 || E, 4 || SDCard Power || Out || [[Filesystem services]]<br /> |-<br /> | 0x03 || 0x3C || H, 4 || BT_RST_PH4 || Out || [[Bluetooth services]]<br /> |-<br /> | 0x04 || 0xDA || BB, 2 || || || <br /> |-<br /> | 0x05 || 0xDB || BB, 3 || GcAsic Power || Out || [[Filesystem services]]<br /> |-<br /> | 0x06 || 0xDC || BB, 4 || GPIO_X3_AUD_PBB4? || In || [[Audio services]]<br /> |-<br /> | 0x07 || 0x25 || E, 5 || || || <br /> |-<br /> | 0x08 || 0x90 || S, 0 || DebugPadDriver || In || [[HID services]]<br /> |-<br /> | 0x09 || 0x91 || S, 1 || || || <br /> |-<br /> | 0x0A || 0x96 || S, 6 || bq24192 Charge Enable || Out || [[PTM services]]<br /> |-<br /> | 0x0B || 0x97 || S, 7 || || || <br /> |-<br /> | 0x0C || 0x26 || E, 6 || joycon(L) NwcpDriver0.GpioMonitorTask0 (insertion) || In || [[HID services]]<br /> |-<br /> | 0x0D || 0x05 || A, 5 || Fan enable (normal) || Out || [[PTM services]]<br /> |-<br /> | 0x0E || 0x78 || P, 0 || SDMMC3_CLK_PP0? || || <br /> |-<br /> | 0x0F || 0x93 || S, 3 || GcAsic irq || In || [[Filesystem services]]<br /> |-<br /> | 0x10 || 0x7D || P, 5 || SDMMC3_DAT0_PP5? || || <br /> |-<br /> | 0x11 || 0x7C || P, 4 || SDMMC3_DAT1_PP4? || || <br /> |-<br /> | 0x12 || 0x7B || P, 3 || SDMMC3_DAT2_PP3? || || <br /> |-<br /> | 0x13 || 0x7A || P, 2 || SDMMC3_DAT3_PP2? || || <br /> |-<br /> | 0x14 || 0xBC || X, 4 || || || <br /> |-<br /> | 0x15 || 0xAE || V, 6 || || In || [[Audio services]]<br /> |-<br /> | 0x16 || 0xBA || X, 2 || MOTION_INT_PX2? || || <br /> |-<br /> | 0x17 || 0xB9 || X, 1 || Touchscreen irq (TOUCH_INT_PX1) (unused - polled instead) || In || [[HID services]]<br /> |-<br /> | 0x18 || 0xBD || X, 5 || Power Button (BUTTON_POWER_ON_PX5) || ||<br /> |-<br /> | 0x19 || 0xBE || X, 6 || Volume Up (BUTTON_VOL_UP_PX6) || In || [[Boot2]], [[Audio services]]<br /> |-<br /> | 0x1A || 0xBF || X, 7 || Volume Down (BUTTON_VOL_DOWN_PX7) || In || [[Boot2]], [[Audio services]]<br /> |-<br /> | 0x1B || 0xC0 || Y, 0 || max17050 irq (BUTTON_SLIDE_SW_PY0...?) || In || [[PTM services]]<br /> |-<br /> | 0x1C || 0xC1 || Y, 1 || BUTTON_HOME_PY1? || || <br /> |-<br /> | 0x1D || 0xA9 || V, 1 || Backlight (LCD_BL_EN_PV1?) || Out || [[NV services]], [[Backlight services]]<br /> |-<br /> | 0x1E || 0xAA || V, 2 || Backlight (LCD_RST_PV2?) || Out || [[NV services]]<br /> |-<br /> | 0x1F || 0x55 || K, 5 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x20 || 0xAD || V, 5 || PD related || Out || [[USB services]]<br /> |-<br /> | 0x21 || 0xC8 || Z, 0 || bq24192 irq || In || [[PTM services]] <br /> |-<br /> | 0x22 || 0xCA || Z, 2 || || || <br /> |-<br /> | 0x23 || 0xCB || Z, 3 || || || <br /> |-<br /> | 0x24 || 0x4F || J, 7 || Touchscreen power || Out || [[HID services]]<br /> |-<br /> | 0x25 || 0x50 || K, 0 || || || <br /> |-<br /> | 0x26 || 0x51 || K, 1 || || || <br /> |-<br /> | 0x27 || 0x52 || K, 2 || || || <br /> |-<br /> | 0x28 || 0x54 || K, 4 || bm92t36 irq || In || [[USB services]]<br /> |-<br /> | 0x29 || 0x56 || K, 6 || || || <br /> |-<br /> | 0x2A || 0x57 || K, 7 || || || <br /> |-<br /> | 0x2B || 0x53 || K, 3 || joycon(R) NwcpDriver1.NwcpCharger || Out || [[HID services]]<br /> |-<br /> | 0x2C || 0xE3 || CC, 3 || joycon(L) NwcpDriver0.NwcpCharger || Out || [[HID services]]<br /> |-<br /> | 0x2D || 0x38 || H, 0 || WIFI_EN_PH0? || ||<br /> |-<br /> | 0x2E || 0x39 || H, 1 || WIFI_RST_PH1? || Out || [[Wlan services]], [[PCIe services]]<br /> |-<br /> | 0x2F || 0x3B || H, 3 || AP_WAKE_BT_PH3 || Out || [[Bluetooth services]]<br /> |-<br /> | 0x30 || 0x3D || H, 5 || || ||<br /> |-<br /> | 0x31 || 0x3F || H, 7 || || ||<br /> |-<br /> | 0x32 || 0x40 || I, 0 || Backlight || Out || [[NV services]]<br /> |-<br /> | 0x33 || 0x41 || I, 1 || Backlight || Out || [[NV services]]<br /> |-<br /> | 0x34 || 0x3E || H, 6 || joycon(R) NwcpDriver1.GpioMonitorTask0 (insertion) || In || [[HID services]]<br /> |-<br /> | 0x35 || 0xE2 || CC, 2 || || ||<br /> |-<br /> | 0x36 || 0xE4 || CC, 4 || Fan enable (high power) || Out || [[PTM services]]<br /> |-<br /> | 0x37 || 0x3A || H, 2 || || ||<br /> |-<br /> | 0x38 || 0xC9 || Z, 1 || SDCard Card Detect || In || [[Filesystem services]]<br /> |-<br /> | 0x39 || 0x4D || J, 5 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x3A || 0x58 || L, 0 || bq24192 OTG charge select || Out || [[PTM services]], [[USB services]]<br /> |-<br /> | 0x3B || 0x3E || H, 6 || || ||<br /> |-<br /> | 0x3C || 0x26 || E, 6 || || ||<br /> |-<br /> | 0x3D || -1 || || || ||<br /> |-<br /> | 0x3E || 0x33 || G, 3 || joycon(R) NwcpDriver1.GpioMonitorTask1 || In || [[HID services]]<br /> |-<br /> | 0x3F || 0x1C || D, 4 || joycon(L) NwcpDriver0.GpioMonitorTask1 || In || [[HID services]]<br /> |-<br /> | 0x40 || 0xD9 || BB, 1 || || ||<br /> |-<br /> | 0x41 || 0x0C || B, 4 || || ||<br /> |-<br /> | 0x42 || 0x0D || B, 5 || || ||<br /> |-<br /> | 0x43 || 0x21 || E, 1 || USB power || Out || [[USB services]]<br /> |-<br /> | 0x44 || 0x27 || E, 7 || || ||<br /> |-<br /> | 0x45 || 0x92 || S, 2 || || ||<br /> |-<br /> | 0x46 || 0x95 || S, 5 || USB root port 4 power || Out || [[USB services]]<br /> |-<br /> | 0x47 || 0x98 || T, 0 || USB root port 3 power || Out || [[USB services]]<br /> |-<br /> | 0x48 || 0x10 || C, 0 || HdmiHotplug || Out || [[NV services]]<br /> |-<br /> | 0x49 || 0x11 || C, 1 || USB root port 2 power || Out || [[USB services]]<br /> |-<br /> | 0x4A || 0x12 || C, 2 || HdmiHotplug || Out || [[NV services]]<br /> |-<br /> | 0x4B || 0x42 || I, 2 || || ||<br /> |-<br /> | 0x4C || 0xE6 || CC, 6 || || ||<br /> |-<br /> | -- || 0xE1 || CC, 1 || HdmiHotplug (HDMI_INT_DP_HPD_PCC1?) || In || [[NV services]]<br /> |}<br /> <br /> == OpenSessionForTest ==<br /> Same as [[#OpenSession]] but panics on failure.<br /> <br /> == IPadSession ==<br /> This is &quot;nn::gpio::IPadSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetDirection<br /> |-<br /> | 1 || GetDirection<br /> |-<br /> | 2 || SetInterruptMode<br /> |-<br /> | 3 || GetInterruptMode<br /> |-<br /> | 4 || SetInterruptEnable<br /> |-<br /> | 5 || GetInterruptEnable<br /> |-<br /> | 6 || GetInterruptStatus<br /> |-<br /> | 7 || ClearInterruptStatus<br /> |-<br /> | 8 || SetValue<br /> |-<br /> | 9 || GetValue<br /> |-<br /> | 10 || BindInterrupt<br /> |-<br /> | 11 || UnbindInterrupt<br /> |-<br /> | 12 || SetDebounceEnabled<br /> |-<br /> | 13 || GetDebounceEnabled<br /> |-<br /> | 14 || SetDebounceTime<br /> |-<br /> | 15 || GetDebounceTime<br /> |}<br /> <br /> == GpioPadDescriptor ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bits || Description<br /> |-<br /> | 7-5 || Controller index<br /> |-<br /> | 4-3 || Port index<br /> |-<br /> | 2-0 || Pin number<br /> |}<br /> <br /> = i2c, i2c:pcv =<br /> This is &quot;nn::i2c::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |-<br /> | 2 || HasDevice<br /> |-<br /> | 3 || HasDeviceForDev<br /> |}<br /> <br /> == Known Devices ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port:Addr || 10bit? || Speed || Max Retries || Retry Delay || Usage || Used by<br /> |-<br /> | 0 || 0:52 || N || 100000 || 0 || 0 || DebugPadDriver || [[HID services]]<br /> |-<br /> | 1 || 2:49 || N || 400000 || 0 || 0 || STM touchscreen || [[HID services]]<br /> |-<br /> | 2 || 0:4c || N || 100000 || 0 || 0 || TI Temperature Sensor (tmp451) || [[PTM services]]<br /> |-<br /> | 3 || 0:4c || N || 100000 || 0 || 0 || duplicate, unused entry? ||<br /> |-<br /> | 4 || 0:1c || N || 100000 || 0 || 0 || Audio codec (rt5639) || [[Audio services]], [[Fatal services]]<br /> |-<br /> | 5 || 4:68 || N || 400000 || 3 || 5000000 || max77620_rtc0, max77620_irq0 || [[PCV services]]<br /> |-<br /> | 6 || 4:3c || N || 400000 || 3 || 5000000 || PMIC (max77620), max77620_irq0 || [[PCV services]]<br /> |-<br /> | 7 || 4:1b || N || 400000 || 3 || 5000000 || max77621_cpu || [[PCV services]]<br /> |-<br /> | 8 || 4:1c || N || 400000 || 3 || 5000000 || max77621_gpu || [[PCV services]]<br /> |-<br /> | 9 || 0:6b || N || 100000 || 3 || 5000000 || TI Charger (bq24192) || [[PTM services]]<br /> |-<br /> | 10 || 0:36 || N || 100000 || 3 || 5000000 || Maxim Fuel Gauge (max17050) || [[PCV services]], [[PTM services]]<br /> |-<br /> | 11 || 0:18 || N || 100000 || 3 || 5000000 || USB-PD controller (rohm bm92t36) || [[USB services]]<br /> |-<br /> | 12 || 1:40 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 13 || 1:41 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 14 || 1:44 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 15 || 1:45 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 16 || 1:46 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 17 || 1:47 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 18 || 1:29 || N || 400000 || 3 || 5000000 || rohm ambient light sensor (bh1730fvc) || [[Backlight services]]<br /> |-<br /> | 19 || 1:48 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 20 || 1:49 || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 21 || 1:4a || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 22 || 1:4b || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 23 || 1:4d || N || 400000 || 3 || 5000000 || ||<br /> |-<br /> | 24 || 3:50 || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |-<br /> | 25 || 3:54 || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |-<br /> | 26 || 3:3a || N || 100000 || 0 || 0 || DisplayHdmiHotplugHandler || [[NV services]]<br /> |}<br /> <br /> This table is believed to be complete - entries with empty &quot;Used by&quot; column haven't been seen being used (devices not present on switch?).<br /> <br /> == II2cSession ==<br /> This is &quot;nn::i2c::ISession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Send<br /> |-<br /> | 1 || Receive<br /> |-<br /> | 2 || ExecuteCommandList<br /> |-<br /> | 10 || SendAuto<br /> |-<br /> | 11 || ReceiveAuto<br /> |-<br /> | 12 || ExecuteCommandListAuto<br /> |}<br /> <br /> = uart =<br /> This is &quot;nn::uart::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || DoesUartExist<br /> |-<br /> | 1 || DoesUartExistForTest<br /> |-<br /> | 2 || SetUartBaudrate<br /> |-<br /> | 3 || SetUartBaudrateForTest<br /> |-<br /> | 4 || IsSomethingUartValid<br /> |-<br /> | 5 || IsSomethingUartValidForTest<br /> |-<br /> | 6 || GetSession<br /> |-<br /> | 7 || IsSomethingUartValid2<br /> |-<br /> | 8 || IsSomethingUartValid2ForTest<br /> |-<br /> |}<br /> <br /> == IPortSession ==<br /> This is &quot;nn::uart::IPortSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name || Notes<br /> |-<br /> | 0 || OpenSession || Takes marshalled arguments<br /> |-<br /> | 1 || OpenSessionForTest || Takes marshalled arguments<br /> |-<br /> | 2 || || <br /> |-<br /> | 3 || || Takes marshalled arguments<br /> |-<br /> | 4 || || Returns 2x u64. Both zero.<br /> |-<br /> | 5 || || <br /> |-<br /> | 6 || || <br /> |-<br /> | 7 || || <br /> |-<br /> |}<br /> <br /> === Port Mapping ===<br /> OpenSession translates user IDs to to the uart port index.<br /> <br /> OpenSessionForTest takes the port index verbatim.<br /> <br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Port || Usage<br /> |-<br /> | 1 || UART-D || Bluetooth<br /> |-<br /> | 2 || UART-B || Joycon(R)<br /> |-<br /> | 3 || UART-C || Joycon(L)<br /> |-<br /> |}<br /> <br /> = pwm =<br /> This is &quot;nn::pwm::IManager&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || OpenSessionForDev<br /> |-<br /> | 1 || OpenSession<br /> |}<br /> <br /> == Known Channels ==<br /> {| class=&quot;wikitable sortable&quot; border=&quot;1&quot;<br /> |-<br /> ! Name || Interface || Usage || Used by<br /> |-<br /> | 1 || PWM Channel 1 || Fan || [[PTM services]]<br /> |-<br /> | 2 || PWM Channel 0 || Backlight || [[Backlight services]], [[NV services]]<br /> |-<br /> | 3 || PMC Blinker || ||<br /> |}<br /> <br /> == IChannelSession ==<br /> This is &quot;nn::pwm::IChannelSession&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || SetPeriod<br /> |-<br /> | 1 || GetPeriod<br /> |-<br /> | 2 || SetDuty<br /> |-<br /> | 3 || GetDuty<br /> |-<br /> | 4 || SetEnabled<br /> |-<br /> | 5 || GetEnabled<br /> |}<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=Error_codes&diff=4416 2018-04-03T21:37:16Z

<p>Shinyquagsire23: </p> <hr /> <div>= Structure =<br /> These have been redesigned from the 3DS so that they fit within a Aarch64 MOV instruction immediate most of the time (without requiring the additional MOVK).<br /> <br /> {| class=wikitable<br /> ! Bits || Field<br /> |-<br /> | 8-0 || Module<br /> |-<br /> | 21-9 || Description<br /> |}<br /> <br /> When a fatal-error is received the error code is outputted using the following formatter:<br /> %04d-%04d<br /> <br /> .. where the first code is &lt;code&gt;2000 + Module&lt;/code&gt;, and the other being &lt;code&gt;Description&lt;/code&gt;. Bits &gt;=22 from the error-code are unused when displaying fatal-errors, since the Description ends with bit21.<br /> <br /> = Modules =<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 1 || Kernel<br /> |-<br /> | 2 || FS<br /> |-<br /> | 3 || NVIDIA, TransferMemory<br /> |-<br /> | 5 || NCM<br /> |-<br /> | 6 || DD<br /> |-<br /> | 8 || LR<br /> |-<br /> | 9 || Loader<br /> |-<br /> | 10 || CMIF (IPC command interface)<br /> |-<br /> | 11 || HIPC (IPC)<br /> |-<br /> | 15 || PM<br /> |-<br /> | 16 || NS<br /> |-<br /> | 18 || HTC<br /> |-<br /> | 21 || SM<br /> |-<br /> | 22 || RO userland<br /> |-<br /> | 24 || SDMMC<br /> |-<br /> | 26 || SPL<br /> |-<br /> | 100 || ETHC<br /> |-<br /> | 101 || I2C<br /> |-<br /> | 105 || Settings<br /> |-<br /> | 110 || NIFM<br /> |-<br /> | 111 || HwOpus<br /> |-<br /> | 114 || Display<br /> |-<br /> | 116 || NTC<br /> |-<br /> | 117 || FGM<br /> |-<br /> | 120 || PCIE<br /> |-<br /> | 121 || Friends<br /> |-<br /> | 123 || SSL<br /> |-<br /> | 124 || Account<br /> |-<br /> | 126 || Mii<br /> |-<br /> | 128 || AM<br /> |-<br /> | 129 || Play Report<br /> |-<br /> | 133 || PCV<br /> |-<br /> | 134 || OMM<br /> |-<br /> | 137 || NIM<br /> |-<br /> | 138 || PSC<br /> |-<br /> | 140 || USB<br /> |-<br /> | 141 || NSD<br /> |-<br /> | 143 || BTM<br /> |-<br /> | 144 || <br /> |-<br /> | 147 || ERPT<br /> |-<br /> | 148 || APM<br /> |-<br /> | 153 || Audio<br /> |-<br /> | 154 || NPNS<br /> |-<br /> | 157 || ARP<br /> |-<br /> | 158 || BOOT<br /> |-<br /> | 161 || NFC<br /> |-<br /> | 162 || Userland assert<br /> |-<br /> | 168 || Userland crash<br /> |-<br /> | 203 || HID<br /> |-<br /> | 206 || Capture<br /> |-<br /> | 345 || libnx<br /> |-<br /> | 346 || [[Homebrew ABI]]<br /> |-<br /> | 347 || Homebrew Loader<br /> |-<br /> | 348 || libnx Nvidia errors<br /> |-<br /> | 651 || TC<br /> |-<br /> | 800 || [[Internet_Browser|General web-applet]]<br /> |-<br /> | 809 || [[Internet_Browser|WifiWebAuthApplet]]<br /> |-<br /> | 810 || [[Internet_Browser|Whitelisted-applet]]<br /> |-<br /> | 811 || [[Internet_Browser|ShopN]]<br /> |}<br /> <br /> 8XX is for/includes system applets.<br /> <br /> = Error codes =<br /> {| class=wikitable<br /> ! Value || Module || Description || Description<br /> |-<br /> | 0x1C01 || 1 || 14 || Invalid kernel capability descriptor<br /> |-<br /> | 0x4201 || 1 || 33 || [[SPL_services#GetConfig|IsDebugMode]] isn't set.<br /> |-<br /> | 0xCA01 || 1 || 101 || Invalid size<br /> |-<br /> | 0xCC01 || 1 || 102 || Invalid address<br /> |-<br /> | 0xCE01 || 1 || 103 || Slabheap full<br /> |-<br /> | 0xD001 || 1 || 104 || Memory full<br /> |-<br /> | 0xD201 || 1 || 105 || Handle-table full.<br /> |-<br /> | 0xD401 || 1 || 106 || Invalid memory state / invalid memory permissions.<br /> |-<br /> | 0xD801 || 1 || 108 || Invalid memory permissions.<br /> |-<br /> | 0xDC01 || 1 || 110 || Invalid memory range<br /> |-<br /> | 0xE001 || 1 || 112 || Invalid thread priority.<br /> |-<br /> | 0xE201 || 1 || 113 || Invalid processor id.<br /> |-<br /> | 0xE401 || 1 || 114 || Invalid handle.<br /> |-<br /> | 0xE601 || 1 || 115 || Syscall copy from user failed.<br /> |-<br /> | 0xE801 || 1 || 116 || Invalid combination<br /> |-<br /> | 0xEA01 || 1 || 117 || Time out. Also when you give 0 handles to svcWaitSynchronizationN.<br /> |-<br /> | 0xEC01 || 1 || 118 || Canceled/interrupted [?]<br /> |-<br /> | 0xEE01 || 1 || 119 || Exceeding maximum<br /> |-<br /> | 0xF001 || 1 || 120 || Invalid enum<br /> |-<br /> | 0xF201 || 1 || 121 || No such entry<br /> |-<br /> | 0xF401 || 1 || 122 || Irq/DeviceAddressSpace/{...} already registered<br /> |-<br /> | 0xF601 || 1 || 123 || Port remote dead<br /> |-<br /> | 0xF801 || 1 || 124 || [Usermode] Unhandled interrupt<br /> |-<br /> | 0xFA01 || 1 || 125 || Wrong memory permission?<br /> |-<br /> | 0xFC01 || 1 || 126 || Reserved value<br /> |-<br /> | 0xFE01 || 1 || 127 || Invalid hardware breakpoint<br /> |-<br /> | 0x10001 || 1 || 128 || [Usermode] Fatal exception<br /> |-<br /> | 0x10201 || 1 || 129 || Last thread didn't belong to your process<br /> |-<br /> | 0x10601 || 1 || 131 || Port max sessions exceeded<br /> |-<br /> | 0x10801 || 1 || 132 || Resource limit exceeded<br /> |-<br /> | 0x20801 || 1 || 260 || Command buffer too small<br /> |-<br /> | 0x41001 || 1 || 520 || Process not being debugged<br /> |-<br /> | 0xE02 || 2 || 7 || Savedata [[Filesystem_services|already]] mounted<br /> |-<br /> | 0x7802 || 2 || 60 || The specified [[NCA]]-type doesn't exist for this title.<br /> |-<br /> | 0x7D202 || 2 || 1001 || Process does not have RomFs <br /> |-<br /> | 0x7D402 || 2 || 1002 || Title-id not found / savedata not found.<br /> |-<br /> | 0xFA202 || 2 || 2001 || SD card not inserted<br /> |-<br /> | 0x13B002 || 2 || 2520 || Gamecard not inserted<br /> |-<br /> | 0x13DA02 || 2 || 2541 || Version check failed when mounting gamecard sysupdate partition?<br /> |-<br /> | 0x171402 || 2 || 2954 || Invalid gamecard handle.<br /> |-<br /> | 0x196002 || 2 || 3248 || Out of memory<br /> |-<br /> | 0x196202 || 2 || 3249 || Out of memory<br /> |-<br /> | 0x1A4A02 || 2 || 3365 || Out of memory<br /> |-<br /> | 0x235202 || 2 || 4521 || Invalid NCA Key index<br /> |-<br /> | 0x235E02 || 2 || 4527 || NCA-path used with the wrong titleID.<br /> |-<br /> | 0x250E02 || 2 || 4743 || [[NAX0|Corrupted]] NAX0 header.<br /> |-<br /> | 0x251002 || 2 || 4744 || Invalid [[NAX0]] magicnum.<br /> |-<br /> | 0x2EE202 || 2 || 6001 || Invalid input<br /> |-<br /> | 0x2EE602 || 2 || 6003 || Path too long<br /> |-<br /> | 0x2F5A02 || 2 || 6061 || Offset outside storage<br /> |-<br /> | 0x313802 || 2 || 6300 || Operation not supported<br /> |-<br /> | 0x320002 || 2 || 6400 || Permission denied<br /> |-<br /> | 0x326602 || 2 || 6451 || Missing titlekey(?) required to mount content<br /> |-<br /> | 0x3EA03 || 3 || 501 || Invalid handle<br /> |-<br /> | 0x3EE03 || 3 || 503 || Invalid memory mirror<br /> |-<br /> | 0xA05 || 5 || 5 || [[Content_Manager_services|NcaID]] not found. Returned when attempting to mount titles which exist that aren't *8XX titles, the same way *8XX titles are mounted.<br /> |-<br /> | 0xE05 || 5 || 7 || TitleId not found<br /> |-<br /> | 0x1805 || 5 || 12 || Invalid StorageId<br /> |-<br /> | 0xDC05 || 5 || 110 || Gamecard not inserted<br /> |-<br /> | 0x17C05 || 5 || 190 || Gamecard not initialized<br /> |-<br /> | 0x1F405 || 5 || 250 || Sdcard not inserted<br /> |-<br /> | 0x20805 || 5 || 260 || Storage not mounted<br /> |-<br /> | 0x806 || 6 || 4 || Converted from error 0xD401.<br /> |-<br /> | 0x1006 || 6 || 8 || Converted from error 0xE401.<br /> |-<br /> | 0x408 || 8 || 2 || Not initialized.<br /> |-<br /> | 0x608 || 8 || 3 || Invalid control StorageID.<br /> |-<br /> | 0x808 || 8 || 4 || Storage not found.<br /> |-<br /> | 0xA08 || 8 || 5 || Access denied.<br /> |-<br /> | 0xE08 || 8 || 7 || Title is not registered.<br /> |-<br /> | 0x209 || 9 || 1 || Args too long.<br /> |-<br /> | 0x409 || 9 || 2 || Maximum processes loaded.<br /> |-<br /> | 0x609 || 9 || 3 || NPDM too big.<br /> |-<br /> | 0x19009 || 9 || 200 || Invalid access control sizes in NPDM.<br /> |-<br /> | 0x809 || 9 || 4 || Invalid NPDM.<br /> |-<br /> | 0xA09 || 9 || 5 || Invalid files.<br /> |-<br /> | 0xE09 || 9 || 7 || Already registered.<br /> |-<br /> | 0x1009 || 9 || 8 || Title not found.<br /> |-<br /> | 0x1209 || 9 || 9 || Title-id in ACI0 doesn't match range in ACID.<br /> |-<br /> | 0x6609 || 9 || 51 || Invalid memory state/permission<br /> |-<br /> | 0x6A09 || 9 || 53 || Invalid NRR<br /> |-<br /> | 0xA209 || 9 || 81 || Unaligned NRR address<br /> |-<br /> | 0xA409 || 9 || 82 || Bad NRR size<br /> |-<br /> | 0xAA09 || 9 || 85 || Bad NRR address<br /> |-<br /> | 0xAE09 || 9 || 87 || Bad initialization<br /> |-<br /> | 0xC809 || 9 || 100 || Unknown ACI0 descriptor<br /> |-<br /> | 0xCE09 || 9 || 103 || ACID/ACI0 don't match for descriptor &quot;KernelFlags&quot;<br /> |-<br /> | 0xD009 || 9 || 104 || ACID/ACI0 don't match for descriptor &quot;SyscallMask&quot;<br /> |-<br /> | 0xD409 || 9 || 106 || ACID/ACI0 don't match for descriptor &quot;MapIoOrNormalRange&quot;<br /> |-<br /> | 0xD609 || 9 || 107 || ACID/ACI0 don't match for descriptor &quot;MapNormalPage&quot;<br /> |-<br /> | 0xDE09 || 9 || 111 || ACID/ACI0 don't match for descriptor &quot;InterruptPair&quot;<br /> |-<br /> | 0xE209 || 9 || 113 || ACID/ACI0 don't match for descriptor &quot;ApplicationType&quot;<br /> |-<br /> | 0xE409 || 9 || 114 || ACID/ACI0 don't match for descriptor &quot;KernelReleaseVersion&quot;<br /> |-<br /> | 0xE609 || 9 || 115 || ACID/ACI0 don't match for descriptor &quot;HandleTableSize&quot;<br /> |-<br /> | 0xE809 || 9 || 116 || ACID/ACI0 don't match for descriptor &quot;DebugFlags&quot;<br /> |-<br /> | 0x1A80A || 10 || 212 || Bad magic (expected 'SFCO')<br /> |-<br /> | 0x20B || 11 || 1 || Size too big to fit to marshal.<br /> |-<br /> | 0x11A0B || 11 || 141 || Went past maximum during marshalling.<br /> |-<br /> | 0x1900B || 11 || 200 || Session doesn't support domains.<br /> |-<br /> | 0x25A0B || 11 || 301 || Remote process is dead.<br /> |-<br /> | 0x3D60B || 11 || 491 || IPC Query 1 failed.<br /> |-<br /> | 0x20F || 15 || 1 || Pid not found<br /> |-<br /> | 0x60F || 15 || 3 || Process has no pending events<br /> |-<br /> | 0xA0F || 15 || 5 || Application already running<br /> |-<br /> | 0x410 || 16 || 2 || Title-id not found<br /> |-<br /> | 0xF010 || 16 || 120 || Gamecard sysupdate not required<br /> |-<br /> | 0x1F610 || 16 || 251 || Unexpected StorageId<br /> |-<br /> | 0x415 || 21 || 2 || Not initialized.<br /> |-<br /> | 0x615 || 21 || 3 || Max sessions<br /> |-<br /> | 0xC15 || 21 || 6 || Invalid name (all zeroes)<br /> |-<br /> | 0x1015 || 21 || 8 || Permission denied<br /> |-<br /> | 0x416 || 22 || 2 || Address space is full<br /> |-<br /> | 0x616 || 22 || 3 || NRO already loaded<br /> |-<br /> | 0x816 || 22 || 4 || Invalid NRO header values<br /> |-<br /> | 0xC16 || 22 || 6 || Bad NRR magic<br /> |-<br /> | 0x1016 || 22 || 8 || Reached max NRR count<br /> |-<br /> | 0x1216 || 22 || 9 || Unable to verify NRO hash or NRR signature<br /> |-<br /> | 0x80216 || 22 || 1025 || Address not page-aligned<br /> |-<br /> | 0x80416 || 22 || 1026 || Incorrect NRO size<br /> |-<br /> | 0x80816 || 22 || 1028 || NRO not loaded<br /> |-<br /> | 0x80A16 || 22 || 1029 || NRR not loaded<br /> |-<br /> | 0x80C16 || 22 || 1030 || Already initialized<br /> |-<br /> | 0x80E16 || 22 || 1031 || Not initialized<br /> |-<br /> | 0x41A || 26 || 2 || Argument is invalid<br /> |-<br /> | 0xC81A || 26 || 100 || Incorrect buffer size<br /> |-<br /> | 0xCA1A || 26 || 101 || Unknown TZ error<br /> |-<br /> | 0xD01A || 26 || 104 || All AES engines busy<br /> |-<br /> | 0xD21A || 26 || 105 || Invalid AES engine-id<br /> |-<br /> | 0x272 || 114 || 1 || Generic error<br /> |-<br /> | 0xCC74 || 116 || 102 || Time not set<br /> |-<br /> | 0x287C || 124 || 20 || Argument is NULL<br /> |-<br /> | 0x2C7C || 124 || 22 || Argument is invalid<br /> |-<br /> | 0x3C7C || 124 || 30 || Bad input buffer size<br /> |-<br /> | 0x407C || 124 || 32 || Invalid input buffer<br /> |-<br /> | 0x3CF089 || 137 || 7800 || Unknown/invalid libcurl error.<br /> |-<br /> | 0x3E8289-0x3F4089 || 137 || 8001-8096 || libcurl error 1-96. Some of the libcurl errors in the error-table map to the above unknown-libcurl-error however.<br /> |-<br /> | 0x668C || 140 || 51 || USB data-transfer in progress<br /> |-<br /> | 0xD48C || 140 || 106 || Invalid descriptor<br /> |-<br /> | 0x1928C || 140 || 201 || USB device not bound / interface already enabled<br /> |-<br /> | 0x299 || 153 || 1 || Invalid audio device<br /> |-<br /> | 0x499 || 153 || 2 || Invalid buffer address<br /> |-<br /> | 0x699 || 153 || 3 || Invalid sample rate<br /> |-<br /> | 0x1499 || 153 || 10 || Invalid channel count<br /> |-<br /> | 0xC0899 || 153 || 1540 || Audio output was already started<br /> |-<br /> | 0x3C9D || 157 || 30 || Address is NULL<br /> |-<br /> | 0x3E9D || 157 || 31 || PID is NULL<br /> |-<br /> | 0x549D || 157 || 42 || Already bound<br /> |-<br /> | 0xCC9D || 157 || 102 || Invalid PID<br /> |-<br /> | 0x35B || 347 || 1 || Failed to init SM.<br /> |-<br /> | 0x55B || 347 || 2 || Failed to init FS.<br /> |-<br /> | 0x75B || 347 || 3 || Failed to to open NRO file. May also happen when SD card isn't inserted / SD mounting failed earlier.<br /> |-<br /> | 0x95B || 347 || 4 || Failed to read NRO header.<br /> |-<br /> | 0xB5B || 347 || 5 || Invalid NRO magic.<br /> |-<br /> | 0xD5B || 347 || 6 || Invalid NRO segments.<br /> |-<br /> | 0xF5B || 347 || 7 || Failed to read NRO.<br /> |-<br /> | 0x135B || 347 || 9 || Failed to allocate heap.<br /> |-<br /> | 0x255B || 347 || 18 || Failed to map code-binary memory.<br /> |-<br /> | 0x275B || 347 || 19 || Failed to map code memory (.text).<br /> |-<br /> | 0x295B || 347 || 20 || Failed to map code memory (.rodata).<br /> |-<br /> | 0x2B5B || 347 || 21 || Failed to map code memory (.data+.bss).<br /> |-<br /> | 0x315B || 347 || 24 || Failed to unmap code memory (.text).<br /> |-<br /> | 0x335B || 347 || 25 || Failed to unmap code memory (.rodata).<br /> |-<br /> | 0x355B || 347 || 26 || Failed to unmap code memory (.data+.bss).<br /> |}<br /> <br /> == FS Error Codes ==<br /> <br /> The following are the error codes recognized by nn::fs::detail::LogErrorMessage found in some [[Factory Setup|factory]] titles:<br /> <br /> {| class=wikitable<br /> ! Error Code || Description || Message<br /> |-<br /> | 0x7802 || 60 || Error: Specified mount name already exists.<br /> |-<br /> | 0xD401 || 106 || Error: Passed buffer is not usable for fs library.<br /> |-<br /> | 0x7D202 || 1001 || Error: Specified partition is not found.<br /> |-<br /> | 0x7D402 || 1002 || Error: Specified target is not found.<br /> |-<br /> | 0xFA002 - 0x138602 || 2000 - 2499 || Error: Failed to access SD card.<br /> |-<br /> | 0x136802 - 0x176E02 || 2500 - 2999 || Error: Failed to access game card.<br /> |-<br /> | 0x177202 || 3001 || Error: Specified operation is not implemented.<br /> |-<br /> | 0x177A02 || 3005 || Error: Specified value is out of range.<br /> |-<br /> | 0x1B5802 - 0x1F3E02 || 3500 - 3999 || Error: Failed to access MMC.<br /> |-<br /> | 0x1F4202 - 0x219602 || 4001 - 4299 || Error: ROM is corrupted.<br /> |-<br /> | 0x219A02 - 0x232602 || 4301 - 4499 || Error: Save data is corrupted.<br /> |-<br /> | 0x232A02 - 0x23EE02 || 4501 - 4599 || Error: NCA is corrupted.<br /> |-<br /> | 0x23F202 - 0x243E02 || 4601 - 4639 || Error: Integrity verification failed.<br /> |-<br /> | 0x244202 - 0x246602 || 4641 - 4659 || Error: Partition FS is corrupted.<br /> |-<br /> | 0x246A02 - 0x248E02 || 4661 - 4679 || Error: Built-in-storage is corrupted.<br /> |-<br /> | 0x249202 - 0x24B602 || 4681 - 4699 || Error: FAT FS is corrupted.<br /> |-<br /> | 0x24BA02 - 0x24DE02 || 4701 - 4719 || Error: HOST FS is corrupted.<br /> |-<br /> | 0x1F4002 - 0x270E02 || 4000, 4300, 4500, 4600, 4640, 4660, 4680, 4700, 4720-4999 || Error: Data is corrupted.<br /> |-<br /> | 0x271002 - 0x2EDE02 || 5000-5999 || Error: Unexpected failure occurred.<br /> |-<br /> | 0x2EE402 - 0x2F1A02 || 6002-6029 || Error: Invalid path was specified.<br /> |-<br /> | 0x2F5A02 || 6061 || Error: Invalid offset was specified.<br /> |-<br /> | 0x2F5C02 || 6062 || Error: Invalid size was specified.<br /> |-<br /> | 0x2F5E02 || 6063 || Error: Null pointer argument was specified.<br /> |-<br /> | 0x2EE002 || 6000 || Error: Precondition violation.<br /> |-<br /> | 0x2EE202 - 0x306E02 || 6001-6199 || Error: Invalid argument was specified.<br /> |-<br /> | 0x307202 || 6201 || Error: OpenMode_AllowAppend is required for implicit extension of file size by WriteFile().<br /> |-<br /> | 0x307002 - 0x313602 || 6200, 6202 - 6299 || Error: Invalid operation for the open mode.<br /> |-<br /> | 0x313802 - 0x31FE02 || 6300-6399 || Error: Unsupported operation.<br /> |-<br /> | 0x320002 - 0x32C602 || 6400-6499 || Error: Permission denied.<br /> |-<br /> | 0x346402 || 6706 || Error: Enough journal space is not left.<br /> |-<br /> | 0x346A02 || 6709 || Error: The open count of files and directories reached the limitation.<br /> |}<br /> <br /> = Fatal Errors =<br /> {| class=wikitable<br /> ! Error || Description<br /> |-<br /> | 2162-0002<br /> | Can be triggered by running [[SVC|svcBreak]]. The svcBreak params have no affect on the value of the thrown error-code.<br /> |-<br /> | 2168-0000<br /> | Userland ARM undefined instruction exception<br /> |-<br /> | 2168-0001<br /> | Userland ARM prefetch-abort due to PC set to non-executable region<br /> |-<br /> | 2168-0002<br /> | Userland ARM data abort. Also caused by abnormal process termination via [[SVC|svcExitProcess]]. Note: directly jumping to nnMain()-retaddr from non-main-thread has the same result.<br /> |-<br /> | 2168-0003<br /> | Userland PC address not aligned to 4 bytes<br /> |-<br /> | 2168-0008<br /> | Can occur when attempting to call an svc outside the whitelist<br /> |}<br /> <br /> = Support Errors =<br /> {| class=wikitable<br /> ! Error ! Module ! Description ! Notes<br /> |-<br /> | <br /> | {web-applets listed above}<br /> | 2750<br /> | MP4 parsing failed.<br /> |}<br /> Normal error-codes displayed by the system also use the same format as fatal-errors.</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=SVC&diff=3927 2018-03-01T23:59:30Z

<p>Shinyquagsire23: </p> <hr /> <div>__NOTOC__<br /> <br /> = System calls =<br /> {| class=wikitable<br /> ! Id || Name || In || Out<br /> |-<br /> | 0x1 || [[#svcSetHeapSize]] || W1=size || W0=result, X1=outaddr<br /> |-<br /> | 0x2 || [[#svcSetMemoryPermission]] || X0=addr, X1=size, W2=prot || W0=result<br /> |-<br /> | 0x3 || [[#svcSetMemoryAttribute]] || X0=addr, X1=size, W2=state0, W3=state1 || W0=result<br /> |-<br /> | 0x4 || [[#svcMapMemory]] || X0=dstaddr, X1=srcaddr, X2=size || W0=result<br /> |-<br /> | 0x5 || [[#svcUnmapMemory]] || X0=dstaddr, X1=srcaddr, X2=size || W0=result<br /> |-<br /> | 0x6 || [[#svcQueryMemory]] || X0=MemoryInfo*, X2=addr || W0=result, W1=PageInfo <br /> |-<br /> | 0x7 || [[#svcExitProcess]] || None ||<br /> |-<br /> | 0x8 || [[#svcCreateThread]] || X1=entry, X2=thread_context, X3=stacktop, W4=prio, W5=processor_id || W0=result, W1=handle<br /> |-<br /> | 0x9 || [[#svcStartThread]] || W0=thread_handle || W0=result<br /> |-<br /> | 0xA || [[#svcExitThread]] || None || <br /> |-<br /> | 0xB || [[#svcSleepThread]] || X0=nano || W0=result<br /> |-<br /> | 0xC || [[#svcGetThreadPriority]] || W1=thread_handle || W0=result, W1=prio<br /> |-<br /> | 0xD || [[#svcSetThreadPriority]] || W0=thread_handle, W1=prio || W0=result<br /> |-<br /> | 0xE || [[#svcGetThreadCoreMask]] || W2=thread_handle || W0=result, W1=out, X2=out<br /> |-<br /> | 0xF || [[#svcSetThreadCoreMask]] || W0=thread_handle, W1=in, X2=in2 || W0=result<br /> |-<br /> | 0x10 || [[#svcGetCurrentProcessorNumber]] || None || W0/X0=cpuid<br /> |-<br /> | 0x11 || svcSignalEvent || W0=wevent_handle || W0=result<br /> |-<br /> | 0x12 || svcClearEvent || W0=wevent_or_revent_handle || W0=result<br /> |-<br /> | 0x13 || [[#svcMapSharedMemory]] || W0=shmem_handle, X1=addr, X2=size, W3=perm || W0=result<br /> |-<br /> | 0x14 || svcUnmapSharedMemory || W0=shmem_handle, X1=addr, X2=size || W0=result <br /> |-<br /> | 0x15 || [[#svcCreateTransferMemory]] || X1=addr, X2=size, W3=perm || W0=result, W1=tmem_handle<br /> |-<br /> | 0x16 || svcCloseHandle || W0=handle || W0=result<br /> |-<br /> | 0x17 || svcResetSignal || W0=revent_or_process_handle || W0=result<br /> |-<br /> | 0x18 || [[#svcWaitSynchronization]] || X1=handles_ptr, W2=num_handles. X3=timeout || W0=result, W1=handle_idx<br /> |-<br /> | 0x19 || svcCancelSynchronization || W0=thread_handle || W0=result<br /> |-<br /> | 0x1A || svcArbitrateLock || W0=cur_thread_handle, X1=ptr, W2=req_thread_handle || <br /> |-<br /> | 0x1B || svcArbitrateUnlock || X0=ptr ||<br /> |-<br /> | 0x1C || svcWaitProcessWideKeyAtomic || X0=ptr0, X1=ptr, W2=thread_handle, X3=timeout || W0=result<br /> |-<br /> | 0x1D || svcSignalProcessWideKey || X0=ptr, W1=value || W0=result<br /> |-<br /> | 0x1E || svcGetSystemTick || None || X0={value of cntpct_el0}<br /> |-<br /> | 0x1F || svcConnectToNamedPort || X1=port_name_str || W0=result, W1=handle<br /> |-<br /> | 0x20 || svcSendSyncRequestLight || W0=light_session_handle, X1=? || W0=result<br /> |-<br /> | 0x21 || svcSendSyncRequest || X0=normal_session_handle || W0=result<br /> |-<br /> | 0x22 || [[#svcSendSyncRequestWithUserBuffer]] || X0=cmdbufptr, X1=size, X2=handle || W0=result<br /> |-<br /> | 0x23 || svcSendAsyncRequestWithUserBuffer || X1=cmdbufptr, X2=size, X3=handle || W0=result, W1=event_handle<br /> |-<br /> | 0x24 || svcGetProcessId || W1=thread_or_process_or_debug_handle || W0=result, X1=pid<br /> |-<br /> | 0x25 || svcGetThreadId || W0=thread_handle || W0=result, X1=out<br /> |-<br /> | 0x26 || [[#svcBreak]] || X0=break_reason,X1,X2=info || ?<br /> |-<br /> | 0x27 || svcOutputDebugString || X0=str, X1=size || W0=result<br /> |-<br /> | 0x28 || svcReturnFromException || X0=result || <br /> |-<br /> | 0x29 || [[#svcGetInfo]] || X1=info_id, X2=handle, X3=info_sub_id || W0=result, X1=out<br /> |-<br /> | 0x2A || svcFlushEntireDataCache || None || None<br /> |-<br /> | 0x2B || svcFlushDataCache || X0=addr, X1=size || W0=result<br /> |-<br /> | 0x2C || [3.0.0+] [[#svcMapPhysicalMemory]] || X0=addr, X1=size || W0=result<br /> |-<br /> | 0x2D || [3.0.0+] svcUnmapPhysicalMemory|| X0=addr, X1=size || W0=result<br /> |- style=&quot;border-top: double&quot;<br /> | 0x2F || svcGetLastThreadInfo || None || W0=result, W1,W2,W3,W4=unk, W5=truncated_u64, W6=bool<br /> |-<br /> | 0x30 || svcGetResourceLimitLimitValue || W1=reslimit_handle, W2=[[#LimitableResource]] || W0=result, X1=value<br /> |-<br /> | 0x31 || svcGetResourceLimitCurrentValue || W1=reslimit_handle, W2=[[#LimitableResource]] || W0=result, X1=value<br /> |-<br /> | 0x32 || svcSetThreadActivity || W0=thread_handle, W1=bool || W0=result<br /> |-<br /> | 0x33 || svcGetThreadContext3 || W0=thread_handle, W1=[[#ThreadContext]]* || W0=result<br /> |-<br /> | 0x34 || [4.0.0+] || X0=ptr, W1=type, X2=? X3=timeout ||<br /> |-<br /> | 0x35 || [4.0.0+] || X0=ptr, W1=type, X2=? W3=? ||<br /> |- style=&quot;border-top: double&quot;<br /> | 0x3C || [[#svcDumpInfo]] || ||<br /> |-<br /> | 0x3D || [4.0.0+] svcDumpInfoNew || ||<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40 || svcCreateSession || W2=is_light, X3=? || W0=result, W1=server_handle, W2=client_handle<br /> |-<br /> | 0x41 || [[#svcAcceptSession]] || W1=port_handle || W0=result, W1=session_handle<br /> |-<br /> | 0x42 || svcReplyAndReceiveLight || W0=light_session_handle || W0=result, W1,W2,W3,W4,W5,W6,W7=out<br /> |-<br /> | 0x43 || [[#svcReplyAndReceive]] || X1=ptr_handles, W2=num_handles, X3=replytarget_handle(0=none), X4=timeout || W0=result, W1=handle_idx<br /> |-<br /> | 0x44 || svcReplyAndReceiveWithUserBuffer|| X1=buf, X2=sz, X3=ptr_handles, W4=num_handles, X5=replytarget_handle(0=none), X6=timeout || W0=result, W1=handle_idx<br /> |-<br /> | 0x45 || svcCreateEvent || None || W0=result, W1=client_handle ?, W2=server_handle ?<br /> |- style=&quot;border-top: double&quot;<br /> | 0x4B || [4.0.0+] [[#svcCreateJitMemory]] || X1=addr, X2=size || W0=result, W1=jit_handle<br /> |-<br /> | 0x4C || [4.0.0+] [[#svcMapJitMemory]] || W0=jit_handle, W1=[[#MapJitOperation]], X2=dstaddr, X3=size, W4=perm || W0=result<br /> |-<br /> | 0x4D || svcSleepSystem || None || None<br /> |-<br /> | 0x4E || [[#svcReadWriteRegister]] || X1=reg_addr, W2=rw_mask, W3=in_val || W0=result, W1=out_val<br /> |-<br /> | 0x4F || svcSetProcessActivity || W0=process_handle, W1=bool || W0=result<br /> |-<br /> | 0x50 || [[#svcCreateSharedMemory]] || W1=size, W2=myperm, W3=otherperm || W0=result, W1=shmem_handle<br /> |-<br /> | 0x51 || [[#svcMapTransferMemory]] || X0=tmem_handle, X1=addr, X2=size, W3=perm || W0=result<br /> |-<br /> | 0x52 || [[#svcUnmapTransferMemory]] || W0=tmemhandle, X1=addr, X2=size || W0=result<br /> |-<br /> | 0x53 || svcCreateInterruptEvent || X1=irq_num, W2=flag || W0=result, W1=handle<br /> |-<br /> | 0x54 || [[#svcQueryPhysicalAddress]] || X1=addr || W0=result, X1=physaddr, X2=kerneladdr, X3=size<br /> |-<br /> | 0x55 || [[#svcQueryIoMapping]] || X1=physaddr, X2=size || W0=result, X1=virtaddr<br /> |-<br /> | 0x56 || [[#svcCreateDeviceAddressSpace]] || X1=dev_as_start_addr, X2=dev_as_end_addr || W0=result, W1=dev_as_handle<br /> |-<br /> | 0x57 || [[#svcAttachDeviceAddressSpace]] || W0=device, X1=dev_as_handle || W0=result<br /> |-<br /> | 0x58 || [[#svcDetachDeviceAddressSpace]] || W0=device, X1=dev_as_handle || W0=result<br /> |-<br /> | 0x59 || [[#svcMapDeviceAddressSpaceByForce]] || W0=dev_as_handle, W1=proc_handle, X2=dev_map_addr, X3=dev_as_size, X4=dev_as_addr, W5=perm || W0=result <br /> |-<br /> | 0x5A || [[#svcMapDeviceAddressSpaceAligned]] || W0=dev_as_handle, W1=proc_handle, X2=dev_map_addr, X3=dev_as_size, X4=dev_as_addr, W5=perm || W0=result <br /> |-<br /> | 0x5B || svcMapDeviceAddressSpace || || <br /> |-<br /> | 0x5C || [[#svcUnmapDeviceAddressSpace]] || W0=dev_as_handle, W1=proc_handle, X2=dev_map_addr, X3=dev_as_size, X4=dev_as_addr || W0=result<br /> |-<br /> | 0x5D || svcInvalidateProcessDataCache || W0=process_handle, X1=addr, X2=size || W0=size<br /> |-<br /> | 0x5E || svcStoreProcessDataCache || W0=process_handle, X1=addr, X2=size || W0=size<br /> |-<br /> | 0x5F || svcFlushProcessDataCache || W0=process_handle, X1=addr, X2=size || W0=size<br /> |-<br /> | 0x60 || svcDebugActiveProcess || X1=pid || W0=result, W1=debug_handle<br /> |-<br /> | 0x61 || svcBreakDebugProcess || W0=debug_handle || W0=result<br /> |-<br /> | 0x62 || svcTerminateDebugProcess || W0=debug_handle || W0=result<br /> |-<br /> | 0x63 || svcGetDebugEvent || X0=DebugEventInfo*, W1=debug_handle || W0=result<br /> |-<br /> | 0x64 || svcContinueDebugEvent || W0=debug_handle, W1=[[#ContinueDebugFlags]], X2=thread_id || W0=result<br /> |-<br /> | 0x65 || svcGetProcessList || X1=pids_out_ptr, W2=max_out || W0=result, W1=num_out <br /> |-<br /> | 0x66 || svcGetThreadList || X1=tids_out_ptr, W2=max_out, W3=debug_handle_or_zero || W0=result, X1=num_out<br /> |-<br /> | 0x67 || svcGetDebugThreadContext || X0=ThreadContext*, X1=debug_handle, X2=thread_id, W3=[[#ThreadContextFlags]] || W0=result<br /> |-<br /> | 0x68 || svcSetDebugThreadContext || W0=debug_handle, W1=[[#ThreadContextFlags]], X2=ThreadContext* || W0=result<br /> |-<br /> | 0x69 || svcQueryDebugProcessMemory || X0=[[#MemoryInfo]]*, X2=debug_handle, X3=addr || W0=result, W1=PageInfo<br /> |-<br /> | 0x6A || svcReadDebugProcessMemory || X0=buffer*, X1=debug_handle, X2=src_addr, X3=size || W0=result<br /> |-<br /> | 0x6B || svcWriteDebugProcessMemory || X0=debug_handle, X1=buffer*, X2=dst_addr, X3=size || W0=result<br /> |-<br /> | 0x6C || svcSetHardwareBreakPoint || W0=HardwareBreakpointId, X1=watchpoint_flags, X2=watchpoint_value/debug_handle? || <br /> |-<br /> | 0x6D || svcGetDebugThreadParam || X2=debug_handle, X3=thread_id, W4=[[#DebugThreadParam]] || W0=result, X1=out0, W2=out1<br /> |- style=&quot;border-top: double&quot;<br /> | 0x70 || svcCreatePort || W2=max_sessions, W3=unk_bool, X4=name_ptr || W0=result, W1=clientport_handle, W2=serverport_handle<br /> |-<br /> | 0x71 || svcManageNamedPort || X1=name_ptr, W2=max_sessions || W0=result, W1=serverport_handle<br /> |-<br /> | 0x72 || svcConnectToPort || W1=clientport_handle || W0=result, W1=session_handle<br /> |-<br /> | 0x73 || [[#svcSetProcessMemoryPermission]] || W0=process_handle, X1=addr, X2=size, W3=perm || W0=result<br /> |-<br /> | 0x74 || [[#svcMapProcessMemory]] || X0=srcaddr, W1=process_handle, X2=dstaddr, X3=size || W0=result<br /> |-<br /> | 0x75 || [[#svcUnmapProcessMemory]] || W0=process_handle, X1=dstaddr, X2=srcaddr, X3=size || W0=result<br /> |-<br /> | 0x76 || [[#svcQueryProcessMemory]] || X0=meminfo_ptr, W2=process_handle, X3=addr || W0=result, W1=pageinfo<br /> |-<br /> | 0x77 || [[#svcMapProcessCodeMemory]] || W0=process_handle, X1=dstaddr, X2=srcaddr, X3=size || W0=result<br /> |-<br /> | 0x78 || [[#svcUnmapProcessCodeMemory]] || W0=process_handle, X1=dstaddr, X2=srcaddr, X3=size || W0=result<br /> |-<br /> | 0x79 || [[#svcCreateProcess]] || X1=procinfo_ptr, X2=caps_ptr, W3=cap_num || W0=result, W1=process_handle<br /> |-<br /> | 0x7A || svcStartProcess || W0=process_handle, W1=main_thread_prio, W2=default_cpuid, W3=main_thread_stacksz || W0=result<br /> |-<br /> | 0x7B || svcTerminateProcess || W0=process_handle || W0=result<br /> |-<br /> | 0x7C || [[#svcGetProcessInfo]] || W0=process_handle || W0=result, X1=[[#ProcessState]]<br /> |-<br /> | 0x7D || svcCreateResourceLimit || None || W0=result, W1=reslimit_handle <br /> |-<br /> | 0x7E || svcSetResourceLimitLimitValue || W0=reslimit_handle, W1=[[#LimitableResource]], X2=value || W0=result<br /> |-<br /> | 0x7F || svcCallSecureMonitor || X0=smc_sub_id, X1,X2,X3,X4,X5,X6,X7=smc_args || X0,X1,X2,X3,X4,X5,X6,X7=result<br /> |}<br /> <br /> == svcSetHeapSize ==<br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W1 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) X1 || u64 || OutAddr<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Set the process heap to a given Size. It can both extend and shrink the heap.<br /> <br /> Size must be a multiple of 0x200000.<br /> <br /> On success, the heap base-address (which is fixed by kernel, aslr'd) is written to OutAddr.<br /> <br /> [2.0.0+] Size must be less than 0x18000000.<br /> <br /> == svcSetMemoryPermission ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || void* || Addr<br /> |-<br /> | (In) X1 || u64 || Size<br /> |-<br /> | (In) W2 || [[#Permission]] || Prot<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Change permission of page-aligned memory region.<br /> <br /> Bit2 of permission (exec) is not allowed. Setting write-only is not allowed either (bit1).<br /> <br /> This can be used to move back and forth between ---, r-- and rw-.<br /> <br /> == svcSetMemoryAttribute ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || void* || Addr<br /> |-<br /> | (In) X1 || u64 || Size<br /> |-<br /> | (In) W2 || u32 || State0<br /> |-<br /> | (In) W3 || u32 || State1<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Change attribute of page-aligned memory region. <br /> <br /> This is used to turn on/off caching for a given memory area. Useful when talking to devices such as the GPU.<br /> <br /> What happens &quot;under the hood&quot; is the &quot;Memory Attribute Indirection Register&quot; index is changed from 2 to 3 in the MMU descriptor.<br /> <br /> {| class=wikitable<br /> ! State0 || State1 || Action<br /> |-<br /> | 0 || 0 || Clear bit3 in [[#MemoryAttribute]].<br /> |-<br /> | 8 || 0 || Clear bit3 in [[#MemoryAttribute]].<br /> |-<br /> | 8 || 8 || Set bit3 in [[#MemoryAttribute]].<br /> |}<br /> <br /> == svcMapMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || void* || DstAddr<br /> |-<br /> | (In) X1 || void* || SrcAddr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Maps a memory range into a different range.<br /> <br /> Mainly used for adding guard pages around stack.<br /> <br /> Source range gets reprotected to --- (it can no longer be accessed), and bit0 is set in the source [[#MemoryAttribute]].<br /> <br /> If dstaddr &gt;= LowerTreshold, the dst-range is enforced to be within the process' &quot;MapRegion&quot;. Code can get the range of this region from [[#svcGetInfo]] id0=2,3.<br /> <br /> In this case, the mapped memory will have state 0x5C3C0B.<br /> <br /> As long as (dstaddr+size) &lt; LowerThreshold, then you can map anywhere but the mapped memory will have state 0x482907 instead.<br /> <br /> LowerTreshold is 0x80000000 for 36-bit address spaces, and 0x40000000 for 32-bit ones.<br /> <br /> [2.0.0+] Support for the 0x482907 mappings outside the &quot;MapRegion&quot; were removed.<br /> <br /> == svcUnmapMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || void* || DstAddr<br /> |-<br /> | (In) X1 || void* || SrcAddr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Unmaps a region that was previously mapped with [[#svcMapMemory]].<br /> <br /> It's possible to unmap ranges partially, you don't need to unmap the entire range &quot;in one go&quot;.<br /> <br /> The srcaddr/dstaddr must match what was given when the pages were originally mapped.<br /> <br /> == svcQueryMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || [[#MemoryInfo]]* || MemInfo<br /> |-<br /> | (In) X2 || void* || Addr<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || PageInfo || PageInfo<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Query information about an address. Will always fetch the lowest page-aligned mapping that contains the provided address.<br /> <br /> Outputs a [[#MemoryInfo]] struct.<br /> <br /> == svcExitProcess ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) None || || <br /> |-<br /> | (Out) None || ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Exits the current process.<br /> <br /> == svcCreateThread ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || void(*)(void*) || Entry<br /> |-<br /> | (In) X2 || void* || ThreadContext<br /> |-<br /> | (In) X3 || void* || StackTop<br /> |-<br /> | (In) W4 || u32 || Priority<br /> |-<br /> | (In) W5 || u32 || ProcessorId<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || Handle&lt;Thread&gt; || Handle<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Create a thread in the current process.<br /> <br /> Processor_id must be 0,1,2,3 or -2, where -2 uses the default cpuid for process.<br /> <br /> == svcStartThread ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;Thread&gt; || Handle<br /> |-<br /> | (Out) None || ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Starts the thread for the provided handle.<br /> <br /> == svcExitThread ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) None || || <br /> |-<br /> | (Out) None || ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Exits the current thread.<br /> <br /> == svcSleepThread ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || u64 || Nano<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Sleep for a specified amount of time, or yield thread.<br /> <br /> Setting nano=0 means &quot;yield thread&quot;.<br /> <br /> == svcGetThreadPriority ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W1|| Handle&lt;Thread&gt; || Handle<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || u64 || Priority<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Get priority of provided thread handle.<br /> <br /> == svcSetThreadPriority ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0|| Handle&lt;Thread&gt; || Handle<br /> |-<br /> | (In) W1|| u32 || Priority<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Set priority of provided thread handle.<br /> <br /> Priority is a number 0-0x3F. Lower value means higher priority.<br /> <br /> == svcGetThreadCoreMask ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W2 || Handle&lt;Thread&gt; || Handle<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || u32 || Out0<br /> |-<br /> | (Out) X2 || u64 || Out1<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Get affinity mask of provided thread handle.<br /> <br /> == svcSetThreadCoreMask ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;Thread&gt; || Handle<br /> |-<br /> | (In) W1 || u32 || In0<br /> |-<br /> | (In) X2 || u64 || In1<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Set affinity mask of provided thread handle.<br /> <br /> == svcGetCurrentProcessorNumber ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) None || || <br /> |-<br /> | (Out) W0/X0 || u64 || CpuId<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Get which cpu is executing the current thread.<br /> <br /> Cpu-id is an integer in the range 0-3.<br /> <br /> == svcMapSharedMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;SharedMemory&gt; || MemHandle<br /> |-<br /> | (In) X1 || void* || Addr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (In) W3 || [[#Permission]] || Permissions<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Maps the block supplied by the handle. The required permissions are different for the process that created the handle and all other processes.<br /> <br /> Increases reference count for the KSharedMemory object. Thus in order to release the memory associated with the object, all handles to it must be closed and all mappings must be unmapped.<br /> <br /> == svcCreateTransferMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || void* || Addr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (In) W3 || [[#Permission]] || Permissions<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || Handle&lt;TransferMemory&gt; || Handle<br /> |}<br /> &lt;/div&gt;<br /> <br /> This one reprotects the src block with perms you give it. It also sets bit0 into [[#MemoryAttribute]].<br /> <br /> Executable bit perm not allowed.<br /> <br /> Closing all handles automatically causes the bit0 in [[#MemoryAttribute]] to clear, and the permission to reset.<br /> <br /> == svcWaitSynchronization ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || Handle* || HandlesPtr<br /> |-<br /> | (In) W2 || u64 || HandlesNum<br /> |-<br /> | (In) X3 || u64 || Timeout<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || u64 || HandleIndex<br /> |}<br /> &lt;/div&gt;<br /> <br /> Works with num_handles &lt;= 0x40, error on num_handles == 0.<br /> <br /> Does not accept 0xFFFF8001 or 0xFFFF8000 as handles.<br /> <br /> === Object types ===<br /> <br /> '''Port:''' signals when there is an incoming connection waiting to be [[#svcAcceptSession|accepted]].<br /> <br /> '''Session (server-side):''' signals when there is an incoming message waiting to be [[#svcReplyAndReceive|received]] or the pipe is closed.<br /> <br /> === Result codes ===<br /> <br /> '''0x0:''' Success. One of the objects was signalled before the timeout expired. Handle index is updated to indicate which object signalled.<br /> <br /> '''0xe401:''' Invalid handle. Returned when one of the handles passed is invalid. Handle index is not updated.<br /> <br /> '''0xea01:''' Timeout. Returned when no objects have been signalled within the timeout. Handle index is not updated.<br /> <br /> == svcSendSyncRequestWithUserBuffer ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || void* || CmdPtr<br /> |-<br /> | (In) X1 || u64 || Size<br /> |-<br /> | (In) W2 || Handle&lt;Session&gt; || Handle<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Size must be 0x1000-aligned.<br /> <br /> == svcBreak ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || u64 || Break Reason<br /> |-<br /> | (In) X1 || u64 ||<br /> |-<br /> | (In) X2 || u64 || Info<br /> |-<br /> | (Out) ? || ? || ?<br /> |}<br /> &lt;/div&gt;<br /> <br /> When used on retail where inx0 bit31 is clear, the system will throw a [[Error_codes|fatal-error]]. Otherwise when bit31 is set, it will return 0 and notify the debugger?<br /> <br /> == svcGetInfo ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || u64 || InfoId<br /> |-<br /> | (In) W2 || Handle || Handle<br /> |-<br /> | (In) X3 || u64 || InfoSubId<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) X1 || u64 || Out<br /> |}<br /> &lt;/div&gt;<br /> <br /> {| class=wikitable<br /> ! Handle type || Id0 || Id1 || Description<br /> |-<br /> | Process || 0 || 0 || AllowedCpuIdBitmask<br /> |-<br /> | Process || 1 || 0 || AllowedThreadPrioBitmask<br /> |-<br /> | Process || 2 || 0 || MapRegionBaseAddr<br /> |-<br /> | Process || 3 || 0 || MapRegionSize<br /> |-<br /> | Process || 4 || 0 || HeapRegionBaseAddr<br /> |-<br /> | Process || 5 || 0 || HeapRegionSize<br /> |-<br /> | Process || 6 || 0 || TotalMemoryAvailable. Total memory available(free+used).<br /> |-<br /> | Process || 7 || 0 || TotalMemoryUsage. Total used size of codebin memory + main-thread stack + allocated heap.<br /> |-<br /> | Zero || 8 || 0 || IsCurrentProcessBeingDebugged<br /> |-<br /> | Zero || 9 || 0 || Returns ResourceLimit handle for current process. Used by [[Process_Manager_services|PM]].<br /> |-<br /> | Zero || 10 || -1, {current coreid} || IdleTickCount<br /> |-<br /> | Zero || 11 || 0-3 || RandomEntropy from current process. TRNG. Used to seed usermode PRNGs.<br /> |-<br /> | Process || 12 || 0 || [2.0.0+] AddressSpaceBaseAddr<br /> |-<br /> | Process || 13 || 0 || [2.0.0+] AddressSpaceSize<br /> |-<br /> | Process || 14 || 0 || [2.0.0+] NewMapRegionBaseAddr<br /> |-<br /> | Process || 15 || 0 || [2.0.0+] NewMapRegionSize<br /> |-<br /> | Process || 16 || 0 || [3.0.0+] IsVirtualAddressMemoryEnabled<br /> |-<br /> | Process || 17 || 0 || [3.0.0+] Some size in bytes.<br /> |-<br /> | Process || 18 || 0 || [3.0.0+] TitleId<br /> |-<br /> | Zero || 19 || 0 || [4.0.0+] PrivilegedProcessId_LowerBound<br /> |-<br /> | Zero || 19 || 1 || [4.0.0+] PrivilegedProcessId_UpperBound<br /> |-<br /> | Thread || 0xF0000002 || 0 || Performance counter related.<br /> |}<br /> <br /> == svcMapPhysicalMemory ==<br /> This is like svcSetHeapSize except you can allocate heap at any address you'd like.<br /> <br /> == svcDumpInfo ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) None || || <br /> |-<br /> | (Out) None || ||<br /> |}<br /> &lt;/div&gt;<br /> <br /> Does nothing, just returns with registers set to all-zero.<br /> <br /> == svcAcceptSession ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W1 || Handle&lt;Port&gt; || Port<br /> |-<br /> | (Out) W0 || [[#Result]] || Result<br /> |-<br /> | (Out) W1 || Handle&lt;ServerSession&gt; || Session<br /> |}<br /> &lt;/div&gt;<br /> <br /> === Result codes ===<br /> <br /> '''0xf201:''' No session waiting to be accepted<br /> <br /> == svcReplyAndReceive ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W1 || *Handle&lt;Port or ServerSession&gt; || Handles<br /> |-<br /> | (In) W2 || u32 || NumHandles<br /> |-<br /> | (In) W3 || Handle&lt;ServerSession&gt; || ReplyTarget<br /> |-<br /> | (In) X4 || u64 (nanoseconds) || Timeout<br /> |-<br /> | (Out) W0 || [[#Result]] || Result<br /> |-<br /> | (Out) W1 || u32 || HandleIndex<br /> |}<br /> &lt;/div&gt;<br /> <br /> If ReplyTarget is not zero, a reply from the TLS will be sent to that session.<br /> Then it will wait until either of the passed sessions has an incoming message, is closed, a passed port has an incoming connection, or the timeout expires.<br /> If there is an incoming message, it is copied to the TLS.<br /> <br /> After being validated, passed handles will be enumerated in order; even if a session has been closed, if one that appears earlier in the list has an incoming message, it will take priority and a result code of 0x0 will be returned.<br /> <br /> === Result codes ===<br /> <br /> '''0x0:''' Success. Either a session has an incoming message or a port has an incoming connection. HandleIndex is set appropriately.<br /> <br /> '''0xea01:''' Timeout. No handles were signalled before the timeout expired. HandleIndex is not updated.<br /> <br /> '''0xf601:''' Port remote dead. One of the sessions has been closed. HandleIndex is set appropriately.<br /> <br /> == svcCreateJitMemory ==<br /> Takes an address range with backing memory to create the JIT memory object.<br /> <br /> The memory is initially memset to 0xFF after being locked.<br /> <br /> == svcMapJitMemory ==<br /> Maps the backing memory for a JIT memory object into the current process.<br /> <br /> For [[#MapJitOperation|MapJitOperation_MapOwner]], memory permission must be RW-.<br /> <br /> For [[#MapJitOperation|MapJitOperation_MapSlave]], memory permission must be R-- or R-X.<br /> <br /> Operations [[#MapJitOperation|MapJitOperation_UnmapOwner/MapJitOperation_UnmapSlave]] unmap memory that was previously mapped this way.<br /> <br /> This allows one &quot;secure JIT&quot; process to map the memory as RW-, and the other &quot;slave&quot; process to map it R-X.<br /> <br /> == svcReadWriteRegister ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || u64 || RegAddr<br /> |-<br /> | (In) W2 || u64 || RwMask<br /> |-<br /> | (In) W3 || u64 || InValue<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1|| u64 || OutValue<br /> |}<br /> &lt;/div&gt;<br /> <br /> Read/write IO registers with a hardcoded whitelist. Input address is physical-address and must be aligned to 4.<br /> <br /> rw_mask is 0 for reading and 0xffffffff for writing. You can also write individual bits by using a mask value.<br /> <br /> You can only write to registers inside physical pages 0x70019000 (MC), 0x7001C000 (MC0), 0x7001D000 (MC1), and they all share the same whitelist.<br /> <br /> The whitelist is same for writing as for reading.<br /> <br /> The whitelist is:<br /> <br /> 0x054, 0x090, 0x094, 0x098, 0x09c, 0x0a0, 0x0a4, 0x0a8, 0x0ac, 0x0b0, 0x0b4, 0x0b8, 0x0bc, 0x0c0, 0x0c4, 0x0c8, 0x0d0, 0x0d4, 0x0d8, 0x0dc, 0x0e0, 0x100, 0x108, 0x10c, 0x118, 0x11c, 0x124, 0x128, 0x12c, 0x130, 0x134, 0x138, 0x13c, 0x158, 0x15c, 0x164, 0x168, 0x16c, 0x170, 0x174, 0x178, 0x17c, 0x200, 0x204, 0x2e4, 0x2e8, 0x2ec, 0x2f4, 0x2f8, 0x310, 0x314, 0x320, 0x328, 0x344, 0x348, 0x370, 0x374, 0x37c, 0x380, 0x390, 0x394, 0x398, 0x3ac, 0x3b8, 0x3bc, 0x3c0, 0x3c4, 0x3d8, 0x3e8, 0x41c, 0x420, 0x424, 0x428, 0x42c, 0x430, 0x44c, 0x47c, 0x480, 0x484, 0x50c, 0x554, 0x558, 0x55c, 0x670, 0x674, 0x690, 0x694, 0x698, 0x69c, 0x6a0, 0x6a4, 0x6c0, 0x6c4, 0x6f0, 0x6f4, 0x960, 0x970, 0x974, 0xa20, 0xa24, 0xb88, 0xb8c, 0xbc4, 0xbc8, 0xbcc, 0xbd0, 0xbd4, 0xbd8, 0xbdc, 0xbe0, 0xbe4, 0xbe8, 0xbec, 0xc00, 0xc5c, 0xcac<br /> <br /> <br /> [2.0.0+] Whitelist was extended with 0x4c4, 0x4c8, 0x4cc, 0x584, 0x588, 0x58c.<br /> <br /> [2.0.0+] The IO registers in range 0x7000E400 (PMC) size 0xC00 skip the whitelist, and do a TrustZone call using [[SMC]] Id1 0xC3000008(ReadWriteRegister).<br /> <br /> [4.0.0+] Access to the Memory Controller (0x70019000) also uses smcReadWriteRegister.<br /> <br /> Here is the whitelist imposed by that SMC, relative to the start of the PMC registers:<br /> <br /> 0x000, 0x00c, 0x010, 0x014, 0x01c, 0x020, 0x02c, 0x030, 0x034, 0x038, 0x03c, 0x040, 0x044, 0x048, 0x0dc, 0x0e0, 0x0e4, 0x160, 0x164, 0x168, 0x170, 0x1a8, 0x1b8, 0x1bc, 0x1c0, 0x1c4, 0x1c8, 0x2b4, 0x2d4, 0x440, 0x4d8<br /> <br /> Here is the whitelist imposed by smcReadWriteRegister (checked in addition to the whitelist in svcReadWriteRegister), relative to the start of the MC registers:<br /> <br /> 0x000, 0x004, 0x008, 0x00C, 0x010, 0x01C, 0x020, 0x030, 0x034, 0x050, 0x054, 0x090, 0x094, 0x098, 0x09C, 0x0A0, 0x0A4, 0x0A8, 0x0AC, 0x0B0, 0x0B4, 0x0B8, 0x0BC, 0x0C0, 0x0C4, 0x0C8, 0x0D0, 0x0D4, 0x0D8, 0x0DC, 0x0E0, 0x100, 0x108, 0x10C, 0x118, 0x11C, 0x124, 0x128, 0x12C, 0x130, 0x134, 0x138, 0x13C, 0x158, 0x15C, 0x164, 0x168, 0x16C, 0x170, 0x174, 0x178, 0x17C, 0x200, 0x204, 0x238, 0x240, 0x244, 0x250, 0x254, 0x258, 0x264, 0x268, 0x26C, 0x270, 0x274, 0x280, 0x284, 0x288, 0x28C, 0x294, 0x2E4, 0x2E8, 0x2EC, 0x2F4, 0x2F8, 0x310, 0x314, 0x320, 0x328, 0x344, 0x348, 0x370, 0x374, 0x37C, 0x380, 0x390, 0x394, 0x398, 0x3AC, 0x3B8, 0x3BC, 0x3C0, 0x3C4, 0x3D8, 0x3E8, 0x41C, 0x420, 0x424, 0x428, 0x42C, 0x430, 0x44C, 0x47C, 0x480, 0x484, 0x4C4, 0x4C8, 0x4CC, 0x50C, 0x554, 0x558, 0x55C, 0x584, 0x588, 0x58C, 0x670, 0x674, 0x690, 0x694, 0x698, 0x69C, 0x6A0, 0x6A4, 0x6C0, 0x6C4, 0x6F0, 0x6F4, 0x960, 0x970, 0x974, 0x9B8, 0xA20, 0xA24, 0xA88, 0xA94, 0xA98, 0xA9C, 0xAA0, 0xAA4, 0xAA8, 0xAAC, 0xAB0, 0xAB4, 0xAB8, 0xABC, 0xAC0, 0xAC4, 0xAC8, 0xACC, 0xAD0, 0xAD4, 0xAD8, 0xADC, 0xAE0, 0xB88, 0xB8C, 0xBC4, 0xBC8, 0xBCC, 0xBD0, 0xBD4, 0xBD8, 0xBDC, 0xBE0, 0xBE4, 0xBE8, 0xBEC, 0xC00, 0xC5C, 0xCAC<br /> <br /> == svcCreateSharedMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W1 || u64 || Size<br /> |-<br /> | (In) W2 || [[#Permission]] || LocalPerm<br /> |-<br /> | (In) W3 || [[#Permission]] || RemotePerm<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || Handle&lt;SharedMemory&gt; || MemHandle<br /> |}<br /> &lt;/div&gt;<br /> <br /> Other perm can be used to enforce permission 1, 3, or 0x10000000 if don't care.<br /> <br /> == svcMapTransferMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || Handle&lt;TransferMemory&gt; || MemHandle<br /> |-<br /> | (In) X1 || void* || Addr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (In) W3 || [[#Permission]] || Permissions<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> The newly mapped pages will have [[#MemoryState]] type 0xE.<br /> <br /> You must pass same size and permissions as given in svcCreateMemoryMirror, otherwise error.<br /> <br /> == svcUnmapTransferMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || Handle&lt;TransferMemory&gt; || MemHandle<br /> |-<br /> | (In) X1 || void* || Addr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Size must match size given in map syscall, otherwise there's an invalid-size error.<br /> <br /> == svcQueryPhysicalAddress ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || u64 || Addr<br /> |-<br /> | (Out) W0 || [[#Result]]|| Ret<br /> |-<br /> | (Out) X1 || u64 || PhysAddr<br /> |-<br /> | (Out) X2 || u64 || KernelAddr<br /> |-<br /> | (Out) X3 || u64 || Size<br /> |}<br /> &lt;/div&gt;<br /> <br /> == svcQueryIoMapping ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || u64 || PhysAddr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) X1 || void* || VirtAddr<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Returns a virtual address mapped to a given IO range.<br /> <br /> == svcCreateDeviceAddressSpace ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || u64 || StartAddr<br /> |-<br /> | (In) X2 || u64 || EndAddr<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || Handle&lt;DeviceAddressSpace&gt; || AddressSpaceHandle<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Creates a virtual address space for binding device address spaces and returns a handle.<br /> <br /> dev_as_start_addr is normally set to 0 and dev_as_end_addr is normally set to 0xFFFFFFFF.<br /> <br /> == svcAttachDeviceAddressSpace ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || [[#DeviceName]] || DeviceId<br /> |-<br /> | (In) X1 || Handle&lt;DeviceAddressSpace&gt; || DeviceAsHandle<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Attaches a device address space to a [[#DeviceName|device]].<br /> <br /> == svcDetachDeviceAddressSpace ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || [[#DeviceName]] || DeviceId<br /> |-<br /> | (In) X1 || Handle&lt;DeviceAddressSpace&gt; || DeviceAsHandle<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Detaches a device address space from a [[#DeviceName|device]].<br /> <br /> == svcMapDeviceAddressSpaceByForce ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;DeviceAddressSpace&gt; || DeviceAsHandle<br /> |-<br /> | (In) W1 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X2 || void* || SrcAddr<br /> |-<br /> | (In) X3 || u64 || DeviceAsSize<br /> |-<br /> | (In) X4 || u64 || DeviceAsAddr<br /> |-<br /> | (In) W5 || [[#Permission]] || Permissions<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Maps an attached device address space to an userspace address.<br /> <br /> dev_map_addr is the userspace destination address, while dev_as_addr is the source address between dev_as_start_addr and dev_as_end_addr (passed to [[#svcCreateDeviceAddressSpace]]).<br /> <br /> The userspace destination address must have the [[SVC#MemoryState|MapDeviceAllowed]] bit set. Bit [[SVC#MemoryAttribute|IsDeviceMapped]] will be set after mapping.<br /> <br /> == svcMapDeviceAddressSpaceAligned ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;DeviceAddressSpace&gt; || DeviceAsHandle<br /> |-<br /> | (In) W1 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X2 || void* || SrcAddr<br /> |-<br /> | (In) X3 || u64 || DeviceAsSize<br /> |-<br /> | (In) X4 || u64 || DeviceAsAddr<br /> |-<br /> | (In) W5 || [[#Permission]] || Permissions<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Maps an attached device address space to an userspace address.<br /> <br /> Same as [[#svcMapDeviceAddressSpaceByForce]], but the userspace destination address must have the [[SVC#MemoryState|MapDeviceAlignedAllowed]] bit set instead.<br /> <br /> == svcUnmapDeviceAddressSpace ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;DeviceAddressSpace&gt; || DeviceAsHandle<br /> |-<br /> | (In) W1 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X2 || void* || SrcAddr<br /> |-<br /> | (In) X3 || u64 || DeviceAsSize<br /> |-<br /> | (In) X4 || u64 || DeviceAsAddr<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> '''Description:''' Unmaps an attached device address space from an userspace address.<br /> <br /> == svcSetProcessMemoryPermission ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X1 || u64 || Addr<br /> |-<br /> | (In) X2 || u64 || Size<br /> |-<br /> | (In) W3 || void* || Perm<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> This sets the memory permissions for the specified memory with the supplied process handle.<br /> <br /> This throws an error(0xD801) when the input perm is &gt;0x5, hence -WX and RWX are not allowed.<br /> <br /> == svcMapProcessMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || u64 || SrcAddr<br /> |-<br /> | (In) W1 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X2 || void* || DstAddr<br /> |-<br /> | (In) X3 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Maps the src address from the supplied process handle into the current process.<br /> <br /> This allows mapping code and rodata with RW- permission.<br /> <br /> == svcUnmapProcessMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X1 || void* || DstAddr<br /> |-<br /> | (In) X2 || u64 || SrcAddr<br /> |-<br /> | (In) X3 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Unmaps what was mapped by [[#svcMapProcessMemory]].<br /> <br /> == svcQueryProcessMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X0 || [[#MemoryInfo]]* || MemInfoPtr<br /> |-<br /> | (In) W2 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X3 || u64 || Addr<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || PageInfo || PageInfo<br /> |}<br /> &lt;/div&gt;<br /> <br /> Equivalent to [[#svcQueryMemory]] except takes a process handle.<br /> <br /> == svcMapProcessCodeMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X1 || u64 || DstAddr<br /> |-<br /> | (In) X2 || u64 || SrcAddr<br /> |-<br /> | (In) X3 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Takes a process handle, and maps normal heap in that process as executable code in that process. Used when loading NROs. This does not support using the current-process handle alias.<br /> <br /> == svcUnmapProcessCodeMemory ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (In) X1 || u64 || DstAddr<br /> |-<br /> | (In) X2 || u64 || SrcAddr<br /> |-<br /> | (In) X3 || u64 || Size<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |}<br /> &lt;/div&gt;<br /> <br /> Unmaps what was mapped by [[#svcMapProcessCodeMemory]].<br /> <br /> == svcCreateProcess ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) X1 || [[#CreateProcessInfo]]* || InfoPtr<br /> |-<br /> | (In) X2 || u64 || CapabilitiesPtr<br /> |-<br /> | (In) X3 || u64 || CapabilitiesNum<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || Handle&lt;Process&gt; || ProcessHandle<br /> |}<br /> &lt;/div&gt;<br /> <br /> Takes a [[#CreateProcessInfo]] as input.<br /> <br /> == svcGetProcessInfo ==<br /> <br /> &lt;div style=&quot;display: inline-block;&quot;&gt;<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Argument || Type || Name<br /> |-<br /> | (In) W0 || Handle&lt;Process&gt; || ProcessHandle<br /> |-<br /> | (Out) W0 || [[#Result]] || Ret<br /> |-<br /> | (Out) W1 || [[#ProcessState]] || State<br /> |}<br /> &lt;/div&gt;<br /> <br /> Returns an enum with value 0-7.<br /> <br /> == Debugging ==<br /> [2.0.0+] Exactly 6 debug SVCs require that [[SPL_services#GetConfig|IsDebugMode]] is non-zero. Error 0x4201 is returned otherwise.<br /> * svcBreakDebugProcess<br /> * svcContinueDebugEvent<br /> * svcWriteDebugProcessMemory<br /> * svcSetDebugThreadContext<br /> * svcTerminateDebugProcess<br /> * svcSetHardwareBreakPoint<br /> <br /> svcDebugActiveProcess stops execution of the target process, the normal method for resuming it requires svcContinueDebugEvent(see above). Closing the debug handle also results in execution being resumed.<br /> <br /> = Enum/Structures =<br /> == ThreadContextRequestFlags ==<br /> Bitfield of one of more of these:<br /> <br /> {| class=wikitable<br /> ! Bit || Bitmask || Name<br /> |-<br /> | 0 || 1 || NormalContext<br /> |-<br /> | 1 || 2 ||<br /> |-<br /> | 2 || 4 ||<br /> |-<br /> | 3 || 8 ||<br /> |}<br /> <br /> == DeviceName ==<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || DeviceName_AFI<br /> |-<br /> | 1 || DeviceName_AVPC<br /> |-<br /> | 2 || DeviceName_DC<br /> |-<br /> | 3 || DeviceName_DCB<br /> |-<br /> | 4 || DeviceName_HC<br /> |-<br /> | 5 || DeviceName_HDA<br /> |-<br /> | 6 || DeviceName_ISP2<br /> |-<br /> | 7 || DeviceName_MSENCNVENC<br /> |-<br /> | 8 || DeviceName_NV<br /> |-<br /> | 9 || DeviceName_NV2<br /> |-<br /> | 10 || DeviceName_PPCS<br /> |-<br /> | 11 || DeviceName_SATA<br /> |-<br /> | 12 || DeviceName_VI<br /> |-<br /> | 13 || DeviceName_VIC<br /> |-<br /> | 14 || DeviceName_XUSB_HOST<br /> |-<br /> | 15 || DeviceName_XUSB_DEV<br /> |-<br /> | 16 || DeviceName_TSEC<br /> |-<br /> | 17 || DeviceName_PPCS1<br /> |-<br /> | 18 || DeviceName_DC1<br /> |-<br /> | 19 || DeviceName_SDMMC1A<br /> |-<br /> | 20 || DeviceName_SDMMC2A<br /> |-<br /> | 21 || DeviceName_SDMMC3A<br /> |-<br /> | 22 || DeviceName_SDMMC4A<br /> |-<br /> | 23 || DeviceName_ISP2B<br /> |-<br /> | 24 || DeviceName_GPU<br /> |-<br /> | 25 || DeviceName_GPUB<br /> |-<br /> | 26 || DeviceName_PPCS2<br /> |-<br /> | 27 || DeviceName_NVDEC<br /> |-<br /> | 28 || DeviceName_APE<br /> |-<br /> | 29 || DeviceName_SE<br /> |-<br /> | 30 || DeviceName_NVJPG<br /> |-<br /> | 31 || DeviceName_HC1<br /> |-<br /> | 32 || DeviceName_SE1<br /> |-<br /> | 33 || DeviceName_AXIAP<br /> |-<br /> | 34 || DeviceName_ETR<br /> |-<br /> | 35 || DeviceName_TSECB<br /> |-<br /> | 36 || DeviceName_TSEC1<br /> |-<br /> | 37 || DeviceName_TSECB1<br /> |-<br /> | 38 || DeviceName_NVDEC1<br /> |}<br /> <br /> == MapJitOperation ==<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || MapJitOperation_MapOwner<br /> |-<br /> | 1 || MapJitOperation_MapSlave<br /> |-<br /> | 2 || MapJitOperation_UnmapOwner<br /> |-<br /> | 3 || MapJitOperation_UnmapSlave<br /> |}<br /> <br /> <br /> == LimitableResource ==<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || LimitableResource_Memory<br /> |-<br /> | 1 || LimitableResource_Threads<br /> |-<br /> | 2 || LimitableResource_Events<br /> |-<br /> | 3 || LimitableResource_TransferMemories<br /> |-<br /> | 4 || LimitableResource_Sessions<br /> |}<br /> <br /> == ProcessEvent ==<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || ProcessEvent_Created<br /> |-<br /> | 1 || ProcessEvent_DebugAttached<br /> |-<br /> | 2 || ProcessEvent_DebugDetached<br /> |-<br /> | 3 || ProcessEvent_Crashed<br /> |-<br /> | 4 || ProcessEvent_Running<br /> |-<br /> | 5 || ProcessEvent_Exiting<br /> |-<br /> | 6 || ProcessEvent_Exited<br /> |-<br /> | 7 || ProcessEvent_DebugSuspended<br /> |}<br /> <br /> == DebugThreadParam ==<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || DebugThreadParam_ActualPriority<br /> |-<br /> | 1 ||<br /> |-<br /> | 2 || DebugThreadParam_CpuCore<br /> |-<br /> | 3 ||<br /> |-<br /> | 4 || DebugThreadParam_CoreMask<br /> |}<br /> <br /> == CreateProcessInfo ==<br /> {| class=wikitable<br /> ! Offset || Length || Bits || Description<br /> |-<br /> | 0 || 12 || || ProcessName (doesn't have to be null-terminated)<br /> |-<br /> | 0 || 4 || || ProcessCategory (0: regular title, 1: kernel built-in)<br /> |-<br /> | 0x10 || 8 || || TitleId<br /> |-<br /> | 0x18 || 8 || || CodeAddr<br /> |-<br /> | 0x20 || 4 || || CodeNumPages<br /> |-<br /> | 0x24 || 4 || || MmuFlags<br /> |-<br /> | || || Bit0 || IsAarch64<br /> |-<br /> | || || Bit3-1 || [[#AddressSpaceType]]<br /> |-<br /> | || || Bit4 ||<br /> |-<br /> | || || Bit5 || EnableAslr<br /> |-<br /> | || || Bit6 || IsSystem<br /> |-<br /> | 0x28 || 4 || || ResourceLimitHandle<br /> |-<br /> | 0x2C || 4 ||<br /> |}<br /> <br /> === AddressSpaceType ===<br /> {| class=wikitable<br /> ! Type || Name || Width || Description<br /> |-<br /> | 0 || Normal_32Bit || 32 ||<br /> |-<br /> | 1 || Normal_36Bit || 36 ||<br /> |-<br /> | 2 || WithoutMap_32Bit || 32 || Appears to be missing map region [?]<br /> |-<br /> | 3 || [2.0.0+] Normal_39Bit || 39 ||<br /> |}<br /> <br /> == MemoryInfo ==<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0 || 8 || BaseAddress<br /> |-<br /> | 8 || 8 || Size<br /> |-<br /> | 0x10 || 4 || MemoryType: lower 8 bits of [[#MemoryState]]<br /> |-<br /> | 0x14 || 4 || [[#MemoryAttribute]]<br /> |-<br /> | 0x18 || 4 || Permission (bit0: R, bit1: W, bit2: X)<br /> |-<br /> | 0x1C || 4 || IpcRefCount<br /> |-<br /> | 0x20 || 4 || DeviceRefCount<br /> |-<br /> | 0x24 || 4 || Padding: always zero<br /> |}<br /> <br /> == MemoryAttribute ==<br /> {| class=wikitable<br /> ! Bits || Description<br /> |-<br /> | 0 || IsBorrowed<br /> |-<br /> | 1 || IsIpcMapped: when IpcRefCount &gt; 0.<br /> |-<br /> | 2 || IsDeviceMapped: when DeviceRefCount &gt; 0.<br /> |-<br /> | 3 || IsUncached<br /> |}<br /> <br /> == MemoryState ==<br /> {| class=wikitable<br /> ! Bits || Description<br /> |-<br /> | 7-0 || Type<br /> |-<br /> | 8 || [[#svcSetMemoryPermission|PermissionChangeAllowed]]<br /> |-<br /> | 9 || ForceReadWritableByDebugSyscalls<br /> |-<br /> | 10 || IpcSendAllowed_Type0<br /> |-<br /> | 11 || IpcSendAllowed_Type3<br /> |-<br /> | 12 || IpcSendAllowed_Type1<br /> |-<br /> | 14 || [[#svcSetProcessMemoryPermission|ProcessPermissionChangeAllowed]]<br /> |-<br /> | 15 || [[#svcMapMemory|MapAllowed]]<br /> |-<br /> | 16 || [[#svcUnmapProcessCodeMemory|UnmapProcessCodeMemoryAllowed]]<br /> |-<br /> | 17 || [[#svcCreateTransferMemory|TransferMemoryAllowed]]<br /> |-<br /> | 18 || [[#svcQueryPhysicalAddress|QueryPhysicalAddressAllowed]]<br /> |-<br /> | 19 || MapDeviceAllowed ([[#svcMapDeviceAddressSpace]] and [[#svcMapDeviceAddressSpaceByForce]])<br /> |-<br /> | 20 || [[#svcMapDeviceAddressSpaceAligned|MapDeviceAlignedAllowed]]<br /> |-<br /> | 21 || [[#svcSendSyncRequestWithUserBuffer|IpcBufferAllowed]]<br /> |-<br /> | 22 || IsPoolAllocated/IsReferenceCounted<br /> |-<br /> | 23 || [[#svcMapProcessMemory|MapProcessAllowed]]<br /> |-<br /> | 24 || [[#svcSetMemoryAttribute|AttributeChangeAllowed]]<br /> |-<br /> | 25 || [4.0.0+] JitMemoryAllowed<br /> |}<br /> <br /> {| class=wikitable<br /> ! Value || Type || Meaning<br /> |-<br /> | 0x00000000 || MemoryType_Unmapped ||<br /> |-<br /> | 0x00002001 || MemoryType_Io || Mapped by kernel capability parsing in [[#svcCreateProcess]]. <br /> |-<br /> | 0x00042002 || MemoryType_Normal || Mapped by kernel capability parsing in [[#svcCreateProcess]].<br /> |-<br /> | 0x00DC7E03 || MemoryType_CodeStatic || Mapped during [[#svcCreateProcess]].<br /> |-<br /> | [1.0.0+]<br /> <br /> 0x01FEBD04<br /> <br /> [4.0.0+]<br /> <br /> 0x03FEBD04<br /> || MemoryType_CodeMutable || Transition from 0xDC7E03 performed by [[#svcSetProcessMemoryPermission]].<br /> |-<br /> | [1.0.0+]<br /> 0x017EBD05<br /> <br /> [4.0.0+]<br /> <br /> 0x037EBD05<br /> || MemoryType_Heap || Mapped using [[#svcSetHeapSize]].<br /> |-<br /> | 0x00402006 || MemoryType_SharedMemory || Mapped using [[#svcMapSharedMemory]].<br /> |-<br /> | 0x00482907 || [1.0.0] MemoryType_WeirdMappedMemory || Mapped using [[#svcMapMemory]].<br /> |-<br /> | 0x00DD7E08 || MemoryType_ModuleCodeStatic || Mapped using [[#svcMapProcessCodeMemory]].<br /> |-<br /> | [1.0.0+]<br /> <br /> 0x01FFBD09<br /> <br /> [4.0.0+]<br /> <br /> 0x03FFBD09<br /> || MemoryType_ModuleCodeMutable || Transition from 0xDD7E08 performed by [[#svcSetProcessMemoryPermission]].<br /> |-<br /> | 0x005C3C0A || [[IPC_Marshalling|MemoryType_IpcBuffer0]] || IPC buffers with descriptor flags=0.<br /> |-<br /> | 0x005C3C0B || MemoryType_MappedMemory || Mapped using [[#svcMapMemory]].<br /> |-<br /> | 0x0040200C || [[Thread Local Storage|MemoryType_ThreadLocal]] || Mapped during [[#svcCreateThread]].<br /> |-<br /> | 0x015C3C0D || MemoryType_TransferMemoryIsolated || Mapped using [[#svcMapTransferMemory]] when the owning process has perm=0.<br /> |-<br /> | 0x005C380E || MemoryType_TransferMemory || Mapped using [[#svcMapTransferMemory]] when the owning process has perm!=0.<br /> |-<br /> | 0x0040380F || MemoryType_ProcessMemory || Mapped using [[#svcMapProcessMemory]].<br /> |-<br /> | 0x00000010 || MemoryType_Reserved ||<br /> |-<br /> | 0x005C3811 || [[IPC_Marshalling|MemoryType_IpcBuffer1]] || IPC buffers with descriptor flags=1.<br /> |-<br /> | 0x004C2812 || [[IPC_Marshalling|MemoryType_IpcBuffer3]] || IPC buffers with descriptor flags=3.<br /> |-<br /> | 0x00002013 || MemoryType_KernelStack || Mapped in kernel during [[#svcCreateThread]].<br /> |-<br /> | 0x00402214 || [4.0.0+] MemoryType_JitReadOnly || Mapped in kernel during [[#svcMapJitMemory]].<br /> |-<br /> | 0x00402015 || [4.0.0+] MemoryType_JitWritable || Mapped in kernel during [[#svcMapJitMemory]].<br /> |}<br /> <br /> == ContinueDebugFlags ==<br /> {| class=wikitable<br /> ! Bit || Bitmask || Description<br /> |-<br /> | 0 || 1 || CancelSynchronization (only if ResumeAllThreads is set; cancels with error 0x6C01)<br /> |-<br /> | 1 || 2 || SwallowException<br /> |-<br /> | 2 || 4 || ResumeAllThreads<br /> |}<br /> <br /> == DebugEventInfo ==<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0 || u32 || EventType<br /> |-<br /> | 4 || u32 || Flags (bit0: NeedsContinue)<br /> |-<br /> | 8 || u64 || ThreadId<br /> |-<br /> | 0x10 || || PerTypeSpecifics<br /> |}<br /> <br /> AttachProcess specific:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x10 || u64 || TitleId<br /> |-<br /> | 0x18 || u64 || ProcessId<br /> |-<br /> | 0x20 || char[12] || ProcessName<br /> |-<br /> | 0x2C || u32 || MmuFlags<br /> |}<br /> <br /> AttachThread specific:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x10 || u64 || ThreadId<br /> |-<br /> | 0x18 || u64 || TlsPtr<br /> |-<br /> | 0x20 || u64 || Entrypoint<br /> |}<br /> <br /> Exit specific:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x10 || u64 || Type (0=PausedThread, 1=RunningThread, 2=TerminatedProcess)<br /> |}<br /> <br /> Exception specific:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x10 || u64 || ExceptionType<br /> |-<br /> | 0x18 || u64 || FaultRegister<br /> |-<br /> | 0x20 || || PerExceptionSpecifics<br /> |}<br /> <br /> === DebugEventType ===<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || DebugEvent_AttachProcess<br /> |-<br /> | 1 || DebugEvent_AttachThread<br /> |-<br /> | 2 ||<br /> |-<br /> | 3 || DebugEvent_Exit<br /> |-<br /> | 4 || DebugEvent_Exception<br /> |}<br /> <br /> === DebugExceptionType ===<br /> {| class=wikitable<br /> ! Value || Name<br /> |-<br /> | 0 || Exception_UndefinedInstruction<br /> |-<br /> | 1 || Exception_InstructionAbort<br /> |-<br /> | 2 || Exception_DataAbortMisc<br /> |-<br /> | 3 || Exception_PcSpAlignmentFault<br /> |-<br /> | 4 || Exception_DebuggerAttached<br /> |-<br /> | 5 || Exception_BreakPoint<br /> |-<br /> | 6 || Exception_UserBreak<br /> |-<br /> | 7 || Exception_DebuggerBreak<br /> |-<br /> | 8 || Exception_BadSvcId<br /> |}<br /> <br /> UndefinedInstruction specifics:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x20 || u32 || Opcode<br /> |}<br /> <br /> BreakPoint specifics:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x20 || u32 || IsWatchpoint<br /> |}<br /> <br /> UserBreak specifics:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x20 || u32 || Info0<br /> |-<br /> | 0x28 || u64 || Info1<br /> |-<br /> | 0x30 || u64 || Info2<br /> |}<br /> <br /> BadSvcId specifics:<br /> {| class=wikitable<br /> ! Offset || Length || Description<br /> |-<br /> | 0x20 || u32 || SvcId<br /> |}<br /> <br /> = Exception handling =<br /> There is userland code for handling exceptions, however this doesn't seem to be executed on retail mode.<br /> <br /> When a usermode exception occurs, it jumps to the main code binary entrypoint (main_binary_address + 0 == '''_start''').<br /> <br /> During normal boot '''_start''' is invoked with X0=0 and X1=main_thread_handle (triggering normal crt0 setup).<br /> During an usermode exception '''_start''' is invoked with X0=exception_info0_ptr and X1=exception_info1_ptr instead.<br /> <br /> The '''_start''' method determines whether to boot normally or handle an exception if X0 is set to 0 or not.</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=NPDM&diff=3860 2018-02-25T02:11:35Z

<p>Shinyquagsire23: /* ACID */ ARMS has this set to 0x3 in its NPDM</p> <hr /> <div>This is the Switch equivalent of 3DS [https://www.3dbrew.org/wiki/NCCH/Extended_Header exheader]. This is the file with extension &quot;.npdm&quot; in {Switch ExeFS}. The size of this file varies.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x80<br /> | META<br /> |-<br /> | 0x80<br /> | &lt;Varies&gt;<br /> | ACID<br /> |-<br /> | &lt;See META&gt;<br /> | &lt;See META&gt;<br /> | ACI0<br /> |}<br /> <br /> = META =<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | Magic &quot;META&quot;.<br /> |-<br /> | 0x4<br /> |<br /> |<br /> |-<br /> | 0x8<br /> |<br /> |<br /> |-<br /> | 0xC<br /> | 1<br /> | Flags, bit0: 64-bit instructions, bits1-3: address space width (1=64-bit, 2=32-bit). Needs to be &lt;= 0xF<br /> |-<br /> | 0xE<br /> | 1<br /> | MainThreadPrio<br /> |-<br /> | 0xF<br /> | 1<br /> | DefaultCpuId<br /> |-<br /> | 0x10<br /> |<br /> |<br /> |-<br /> | 0x18<br /> | 4<br /> | ProcessCategory (0: regular title, 1: kernel built-in). Should be 0 here.<br /> |-<br /> | 0x1C<br /> | 4<br /> | MainStackSize<br /> |-<br /> | 0x20<br /> | ?<br /> | Title name<br /> |-<br /> | 0x70<br /> | 0x4<br /> | [[#ACI0]] offset<br /> |-<br /> | 0x74<br /> | 0x4<br /> | [[#ACI0]] size<br /> |-<br /> | 0x78<br /> | 0x4<br /> | [[#ACID]] offset<br /> |-<br /> | 0x7C<br /> | 0x4<br /> | [[#ACID]] size<br /> |}<br /> <br /> = ACID =<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0<br /> | 0x100<br /> | RSA-2048 signature, seems to verify the data starting at 0x100 with the size field from 0x204.<br /> |-<br /> | 0x100<br /> | 0x100<br /> | RSA-2048 public key, seems to be used for the second [[NCA_Format|NCA]] signature.<br /> |-<br /> | 0x200<br /> | 0x4<br /> | Magic &quot;ACID&quot;.<br /> |-<br /> | 0x204<br /> | 0x4<br /> | s32 Size field used with the above signature(?).<br /> |-<br /> | 0x208<br /> | 0x4<br /> | Zeroes<br /> |-<br /> | 0x20C<br /> | 0x4<br /> | Flags. Bit0 must be 1 on retail, on devunit 0 is also allowed. Bit1 is unknown, set 1 for ARMS?<br /> |-<br /> | 0x210<br /> | 0x8<br /> | TitleIdRange_Min<br /> |-<br /> | 0x218<br /> | 0x8<br /> | TitleIdRange_Max<br /> |-<br /> | 0x220<br /> | 0x4<br /> | [[#FS Access Control]] offset<br /> |-<br /> | 0x224<br /> | 0x4<br /> | [[#FS Access Control]] size<br /> |-<br /> | 0x228<br /> | 0x4<br /> | [[#Service Access Control]] offset<br /> |-<br /> | 0x22C<br /> | 0x4<br /> | [[#Service Access Control]] size<br /> |-<br /> | 0x230<br /> | 4<br /> | [[#Kernel Access Control]] offset<br /> |-<br /> | 0x234<br /> | 4<br /> | [[#Kernel Access Control]] size<br /> |-<br /> | 0x238<br /> | 0x8<br /> | Padding<br /> |}<br /> <br /> = ACI0 =<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | Magic &quot;ACI0&quot;.<br /> |-<br /> | 0x4<br /> | 0xC<br /> | Zeroes<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Title id<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Padding<br /> |-<br /> | 0x20<br /> | 0x4<br /> | [[#FS Access Header]] offset<br /> |-<br /> | 0x24<br /> | 0x4<br /> | [[#FS Access Header]] size<br /> |-<br /> | 0x28<br /> | 0x4<br /> | [[#Service Access Control]] offset<br /> |-<br /> | 0x2C<br /> | 0x4<br /> | [[#Service Access Control]] size<br /> |-<br /> | 0x30<br /> | 4<br /> | [[#Kernel Access Control]] offset<br /> |-<br /> | 0x34<br /> | 4<br /> | [[#Kernel Access Control]] size<br /> |-<br /> | 0x38<br /> | 0x8<br /> | Padding<br /> |}<br /> <br /> = FS Access Header =<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x1<br /> | Version? Always 1. Must be non-zero.<br /> |-<br /> | 0x1<br /> | 0x3<br /> | Padding<br /> |-<br /> | 0x4<br /> | 0x8<br /> | Permissions bitmask<br /> |-<br /> | 0xC<br /> | 0x4<br /> | Usually 0x1C<br /> |-<br /> | 0x10<br /> | 0x4<br /> | Usually 0x0<br /> |-<br /> | 0x14<br /> | 0x4<br /> | Usually 0x1C<br /> |-<br /> | 0x18<br /> | 0x4<br /> | Usually 0x0<br /> |-<br /> |}<br /> <br /> = FS Access Control =<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x1<br /> | Version? Always 1. Must be non-zero.<br /> |-<br /> | 0x1<br /> | 0x3<br /> | Padding<br /> |-<br /> | 0x4<br /> | 0x8<br /> | Permissions bitmask<br /> |-<br /> | 0xC<br /> | 0x20<br /> | Usually all zeroes for applications<br /> |}<br /> <br /> [[Filesystem_services#Permissions|Permissions]] bitmask:<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | MountContent* is accessible when set.<br /> |-<br /> | 34<br /> | Enables access to [[Filesystem_services|Bis]] partitionID 27 and 28?<br /> |-<br /> | 63<br /> | Enables access to everything: all [[Filesystem_services#Permissions|permission-types]] which check a bitmask have this bit set.<br /> |}<br /> <br /> For bit62 in permissions, see [[SPL_services#GetConfig|here]].<br /> <br /> Web-applets permissions:<br /> * &quot;LibAppletWeb&quot; and &quot;LibAppletOff&quot; have same access control: bit0 and bit3 set, and bit62 set.<br /> * Rest of the web-applets: Same as above except bit0 isn't set.<br /> <br /> = Service Access Control =<br /> This is a list of [[Services_API|service]]-name strings which the title has access to, with the following structure:<br /> +0: control_byte<br /> +1: {service-name without nul-terminator}<br /> <br /> Bitmask 0x0F in control_byte is the {length of the service-name without nul-terminator} - 1.<br /> <br /> Bitmask 0x80 in control_byte means service is allowed to be registered.<br /> <br /> The service string can contain a wildcard &lt;code&gt;*&lt;/code&gt; character.<br /> <br /> = Kernel Access Control =<br /> On Switch, descriptors are identified by pattern 01..11 in low bits.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Pattern of lower bits<br /> ! Lowest clear bitmask/bit<br /> ! Type<br /> ! Fields<br /> |-<br /> | &lt;code&gt;0bxxxxxxxxxxxx0111&lt;/code&gt;<br /> | Bit3<br /> | KernelFlags<br /> | Bit31-24: Highest allowed cpu id, bit23-16: Lowest allowed cpu id, bit15-10: Highest allowed thread prio, bit9-4: Lowest allowed thread prio<br /> |-<br /> | &lt;code&gt;0bxxxxxxxxxxx01111&lt;/code&gt;<br /> | Bit4<br /> | SyscallMask<br /> | Bits 29-31: Syscall mask table index; Bits 5-28: Mask<br /> |-<br /> | &lt;code&gt;0bxxxxxxxxx0111111&lt;/code&gt;<br /> | Bit6<br /> | MapIoOrNormalRange<br /> | Bits 7-30: Alternating start page and number of pages, bit31: Alternating read-only flag then MemoryAttribute 0x2001/0x42002 selector flag<br /> |-<br /> | &lt;code&gt;0bxxxxxxxx01111111&lt;/code&gt;<br /> | Bit7<br /> | MapNormalPage (RW)<br /> | Bits 8-31: Page<br /> |-<br /> | &lt;code&gt;0bxxxx011111111111&lt;/code&gt;<br /> | Bit11<br /> | InterruptPair<br /> | Bits 12-21: Irq0, bits 20-31: Irq1, 0x3FF means empty.<br /> |-<br /> | &lt;code&gt;0bxx01111111111111&lt;/code&gt;<br /> | Bit13<br /> | ApplicationType<br /> | Bit16-14: ApplicationType (0=sysmodule, 1=application, 2=applet), bit16 ignored. Parsed by [[Process Manager services]]. Defaults to 0 if descriptor doesn't exist. Can only run 1 application at a time.<br /> |-<br /> | &lt;code&gt;0bx011111111111111&lt;/code&gt;<br /> | Bit14<br /> | KernelReleaseVersion<br /> | Bits 15-X: Version. The raw descriptor is compared with 0x80000, when less than an error is returned. This is equivalent to comparing the bits starting at bit15 with 0x10. This enforces a minimum required version, not a maximum.<br /> |-<br /> | &lt;code&gt;0b0111111111111111&lt;/code&gt;<br /> | Bit15<br /> | HandleTableSize<br /> | Bit25-16: Number of handles the table shall fit.<br /> |-<br /> | &lt;code&gt;0b1111111111111111&lt;/code&gt;<br /> | Bit16<br /> | DebugFlags<br /> | Bit17: can be debugged, bit18: can debug others<br /> |-<br /> | All ones<br /> | <br /> | Ignored<br /> |<br /> |}<br /> <br /> == Mapping restrictions ==<br /> The physaddr range 0x80060000-0x2000000000 is not allowed to be mapped as IO.<br /> The physaddr range 0x80000000-0x2000000000 is not allowed to be mapped as Normal.<br /> <br /> [2.0.0+] The range for IO was changed into 0x80060000-0x81D3FFFF.<br /> <br /> [2.0.0+] A blacklist was added for IO and Normal mappings:<br /> * 0x50040000-0x50060000 (ARM, Interrupt Controller)<br /> * 0x6000F000 (Exception Vectors)<br /> * 0x6001DC00-0x6001E000 (IPATCH)<br /> * 0x7000E000 (RTC/PMC)<br /> * 0x70019000 (MC)<br /> * 0x7001C000 (MC0)<br /> * 0x7001D000 (MC1)<br /> <br /> == Kernel versions ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Firmware || Kernel Version || Minimum Allowed<br /> |-<br /> | 1.0.0 || 5.0.0 || 3.0.0<br /> |-<br /> | 2.0.0 || 6.1.0 || 3.0.0<br /> |-<br /> | 3.0.0 || 7.4.0 || 3.0.0<br /> |-<br /> | 3.0.2 || 7.4.0 || 3.0.0<br /> |}<br /> <br /> Bit31-19: Major version<br /> Bit18-15: Minor version<br /> Bit14-0: Zeroes</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=NPDM&diff=3858 2018-02-25T01:54:37Z

<p>Shinyquagsire23: </p> <hr /> <div>This is the Switch equivalent of 3DS [https://www.3dbrew.org/wiki/NCCH/Extended_Header exheader]. This is the file with extension &quot;.npdm&quot; in {Switch ExeFS}. The size of this file varies.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x80<br /> | META<br /> |-<br /> | 0x80<br /> | &lt;Varies&gt;<br /> | ACID<br /> |-<br /> | &lt;See META&gt;<br /> | &lt;See META&gt;<br /> | ACI0<br /> |}<br /> <br /> = META =<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | Magic &quot;META&quot;.<br /> |-<br /> | 0x4<br /> |<br /> |<br /> |-<br /> | 0x8<br /> |<br /> |<br /> |-<br /> | 0xC<br /> | 1<br /> | Flags, bit0: 64-bit instructions, bits1-3: address space width (1=64-bit, 2=32-bit). Needs to be &lt;= 0xF<br /> |-<br /> | 0xE<br /> | 1<br /> | MainThreadPrio<br /> |-<br /> | 0xF<br /> | 1<br /> | DefaultCpuId<br /> |-<br /> | 0x10<br /> |<br /> |<br /> |-<br /> | 0x18<br /> | 4<br /> | ProcessCategory (0: regular title, 1: kernel built-in). Should be 0 here.<br /> |-<br /> | 0x1C<br /> | 4<br /> | MainStackSize<br /> |-<br /> | 0x20<br /> | ?<br /> | Title name<br /> |-<br /> | 0x70<br /> | 0x4<br /> | [[#ACI0]] offset<br /> |-<br /> | 0x74<br /> | 0x4<br /> | [[#ACI0]] size<br /> |-<br /> | 0x78<br /> | 0x4<br /> | [[#ACID]] offset<br /> |-<br /> | 0x7C<br /> | 0x4<br /> | [[#ACID]] size<br /> |}<br /> <br /> = ACID =<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0<br /> | 0x100<br /> | RSA-2048 signature, seems to verify the data starting at 0x100 with the size field from 0x204.<br /> |-<br /> | 0x100<br /> | 0x100<br /> | RSA-2048 public key, seems to be used for the second [[NCA_Format|NCA]] signature.<br /> |-<br /> | 0x200<br /> | 0x4<br /> | Magic &quot;ACID&quot;.<br /> |-<br /> | 0x204<br /> | 0x4<br /> | s32 Size field used with the above signature(?).<br /> |-<br /> | 0x208<br /> | 0x4<br /> | Zeroes<br /> |-<br /> | 0x20C<br /> | 0x4<br /> | Retail flag. Must be 1 on retail, on devunit 0 is also allowed.<br /> |-<br /> | 0x210<br /> | 0x8<br /> | TitleIdRange_Min<br /> |-<br /> | 0x218<br /> | 0x8<br /> | TitleIdRange_Max<br /> |-<br /> | 0x220<br /> | 0x4<br /> | [[#FS Access Control]] offset<br /> |-<br /> | 0x224<br /> | 0x4<br /> | [[#FS Access Control]] size<br /> |-<br /> | 0x228<br /> | 0x4<br /> | [[#Service Access Control]] offset<br /> |-<br /> | 0x22C<br /> | 0x4<br /> | [[#Service Access Control]] size<br /> |-<br /> | 0x230<br /> | 4<br /> | [[#Kernel Access Control]] offset<br /> |-<br /> | 0x234<br /> | 4<br /> | [[#Kernel Access Control]] size<br /> |-<br /> | 0x238<br /> | 0x8<br /> | Padding<br /> |}<br /> <br /> = ACI0 =<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x4<br /> | Magic &quot;ACI0&quot;.<br /> |-<br /> | 0x4<br /> | 0xC<br /> | Zeroes<br /> |-<br /> | 0x10<br /> | 0x8<br /> | Title id<br /> |-<br /> | 0x18<br /> | 0x8<br /> | Padding<br /> |-<br /> | 0x20<br /> | 0x4<br /> | [[#FS Access Header]] offset<br /> |-<br /> | 0x24<br /> | 0x4<br /> | [[#FS Access Header]] size<br /> |-<br /> | 0x28<br /> | 0x4<br /> | [[#Service Access Control]] offset<br /> |-<br /> | 0x2C<br /> | 0x4<br /> | [[#Service Access Control]] size<br /> |-<br /> | 0x30<br /> | 4<br /> | [[#Kernel Access Control]] offset<br /> |-<br /> | 0x34<br /> | 4<br /> | [[#Kernel Access Control]] size<br /> |-<br /> | 0x38<br /> | 0x8<br /> | Padding<br /> |}<br /> <br /> = FS Access Header =<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x1<br /> | Version? Always 1. Must be non-zero.<br /> |-<br /> | 0x1<br /> | 0x3<br /> | Padding<br /> |-<br /> | 0x4<br /> | 0x8<br /> | Permissions bitmask<br /> |-<br /> | 0xC<br /> | 0x4<br /> | Usually 0x1C<br /> |-<br /> | 0x10<br /> | 0x4<br /> | Usually 0x0<br /> |-<br /> | 0x14<br /> | 0x4<br /> | Usually 0x1C<br /> |-<br /> | 0x18<br /> | 0x4<br /> | Usually 0x0<br /> |-<br /> |}<br /> <br /> = FS Access Control =<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Offset<br /> ! Size<br /> ! Description<br /> |-<br /> | 0x0<br /> | 0x1<br /> | Version? Always 1. Must be non-zero.<br /> |-<br /> | 0x1<br /> | 0x3<br /> | Padding<br /> |-<br /> | 0x4<br /> | 0x8<br /> | Permissions bitmask<br /> |-<br /> | 0xC<br /> | 0x20<br /> | Usually all zeroes for applications<br /> |}<br /> <br /> [[Filesystem_services#Permissions|Permissions]] bitmask:<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Bit<br /> ! Description<br /> |-<br /> | 0<br /> | MountContent* is accessible when set.<br /> |-<br /> | 34<br /> | Enables access to [[Filesystem_services|Bis]] partitionID 27 and 28?<br /> |-<br /> | 63<br /> | Enables access to everything: all [[Filesystem_services#Permissions|permission-types]] which check a bitmask have this bit set.<br /> |}<br /> <br /> For bit62 in permissions, see [[SPL_services#GetConfig|here]].<br /> <br /> Web-applets permissions:<br /> * &quot;LibAppletWeb&quot; and &quot;LibAppletOff&quot; have same access control: bit0 and bit3 set, and bit62 set.<br /> * Rest of the web-applets: Same as above except bit0 isn't set.<br /> <br /> = Service Access Control =<br /> This is a list of [[Services_API|service]]-name strings which the title has access to, with the following structure:<br /> +0: control_byte<br /> +1: {service-name without nul-terminator}<br /> <br /> Bitmask 0x0F in control_byte is the {length of the service-name without nul-terminator} - 1.<br /> <br /> Bitmask 0x80 in control_byte means service is allowed to be registered.<br /> <br /> The service string can contain a wildcard &lt;code&gt;*&lt;/code&gt; character.<br /> <br /> = Kernel Access Control =<br /> On Switch, descriptors are identified by pattern 01..11 in low bits.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Pattern of lower bits<br /> ! Lowest clear bitmask/bit<br /> ! Type<br /> ! Fields<br /> |-<br /> | &lt;code&gt;0bxxxxxxxxxxxx0111&lt;/code&gt;<br /> | Bit3<br /> | KernelFlags<br /> | Bit31-24: Highest allowed cpu id, bit23-16: Lowest allowed cpu id, bit15-10: Highest allowed thread prio, bit9-4: Lowest allowed thread prio<br /> |-<br /> | &lt;code&gt;0bxxxxxxxxxxx01111&lt;/code&gt;<br /> | Bit4<br /> | SyscallMask<br /> | Bits 29-31: Syscall mask table index; Bits 5-28: Mask<br /> |-<br /> | &lt;code&gt;0bxxxxxxxxx0111111&lt;/code&gt;<br /> | Bit6<br /> | MapIoOrNormalRange<br /> | Bits 7-30: Alternating start page and number of pages, bit31: Alternating read-only flag then MemoryAttribute 0x2001/0x42002 selector flag<br /> |-<br /> | &lt;code&gt;0bxxxxxxxx01111111&lt;/code&gt;<br /> | Bit7<br /> | MapNormalPage (RW)<br /> | Bits 8-31: Page<br /> |-<br /> | &lt;code&gt;0bxxxx011111111111&lt;/code&gt;<br /> | Bit11<br /> | InterruptPair<br /> | Bits 12-21: Irq0, bits 20-31: Irq1, 0x3FF means empty.<br /> |-<br /> | &lt;code&gt;0bxx01111111111111&lt;/code&gt;<br /> | Bit13<br /> | ApplicationType<br /> | Bit16-14: ApplicationType (0=sysmodule, 1=application, 2=applet), bit16 ignored. Parsed by [[Process Manager services]]. Defaults to 0 if descriptor doesn't exist. Can only run 1 application at a time.<br /> |-<br /> | &lt;code&gt;0bx011111111111111&lt;/code&gt;<br /> | Bit14<br /> | KernelReleaseVersion<br /> | Bits 15-X: Version. The raw descriptor is compared with 0x80000, when less than an error is returned. This is equivalent to comparing the bits starting at bit15 with 0x10. This enforces a minimum required version, not a maximum.<br /> |-<br /> | &lt;code&gt;0b0111111111111111&lt;/code&gt;<br /> | Bit15<br /> | HandleTableSize<br /> | Bit25-16: Number of handles the table shall fit.<br /> |-<br /> | &lt;code&gt;0b1111111111111111&lt;/code&gt;<br /> | Bit16<br /> | DebugFlags<br /> | Bit17: can be debugged, bit18: can debug others<br /> |-<br /> | All ones<br /> | <br /> | Ignored<br /> |<br /> |}<br /> <br /> == Mapping restrictions ==<br /> The physaddr range 0x80060000-0x2000000000 is not allowed to be mapped as IO.<br /> The physaddr range 0x80000000-0x2000000000 is not allowed to be mapped as Normal.<br /> <br /> [2.0.0+] The range for IO was changed into 0x80060000-0x81D3FFFF.<br /> <br /> [2.0.0+] A blacklist was added for IO and Normal mappings:<br /> * 0x50040000-0x50060000 (ARM, Interrupt Controller)<br /> * 0x6000F000 (Exception Vectors)<br /> * 0x6001DC00-0x6001E000 (IPATCH)<br /> * 0x7000E000 (RTC/PMC)<br /> * 0x70019000 (MC)<br /> * 0x7001C000 (MC0)<br /> * 0x7001D000 (MC1)<br /> <br /> == Kernel versions ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Firmware || Kernel Version || Minimum Allowed<br /> |-<br /> | 1.0.0 || 5.0.0 || 3.0.0<br /> |-<br /> | 2.0.0 || 6.1.0 || 3.0.0<br /> |-<br /> | 3.0.0 || 7.4.0 || 3.0.0<br /> |-<br /> | 3.0.2 || 7.4.0 || 3.0.0<br /> |}<br /> <br /> Bit31-19: Major version<br /> Bit18-15: Minor version<br /> Bit14-0: Zeroes</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=NV_services&diff=3802 2018-02-20T04:22:32Z

<p>Shinyquagsire23: /* /dev/nverpt-ctrl */ someone&#039;s probably going to have to backtrack this but it&#039;s here on 3.0.0</p> <hr /> <div>The Switch uses a customized NVIDIA driver.<br /> <br /> = nvdrv, nvdrv:a, nvdrv:s, nvdrv:t =<br /> This is &quot;nns::nvdrv::INvDrvServices&quot;.<br /> <br /> Main NVIDIA driver service.<br /> <br /> Each service is used by:<br /> * &quot;nvdrv&quot;: regular applications<br /> * &quot;nvdrv:a&quot;: applets<br /> * &quot;nvdrv:s&quot;: sysmodules<br /> * &quot;nvdrv:t&quot;: factory titles<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#Open]]<br /> |-<br /> | 1 || [[#Ioctl]]<br /> |-<br /> | 2 || [[#Close]]<br /> |-<br /> | 3 || [[#Initialize]]<br /> |-<br /> | 4 || [[#QueryEvent]]<br /> |-<br /> | 5 || [[#MapSharedMem]]<br /> |-<br /> | 6 || [[#GetStatus]]<br /> |-<br /> | 7 || [[#ForceSetClientPID]]<br /> |-<br /> | 8 || [[#SetClientPID]]<br /> |-<br /> | 9 || [[#DumpGraphicsMemoryInfo]]<br /> |-<br /> | 10 || [3.0.0+]<br /> |-<br /> | 11 || [3.0.0+] [[#Ioctl2]]<br /> |-<br /> | 12 || [3.0.0+] [[#Ioctl3]]<br /> |-<br /> | 13 || [3.0.0+]<br /> |}<br /> <br /> == Open ==<br /> Takes a type-0x5 input buffer for the device-path. Returns the output 32bit '''fd''' and the u32 '''error_code'''.<br /> <br /> == Ioctl ==<br /> Takes a 32bit '''fd''', an u32 '''ioctl_cmd''', a type-0x21 input buffer, and a type-0x22 output buffer. Returns an output u32 ('''error_code''').<br /> <br /> The addr/size for send/recv buffers are only set when the associated direction bit is set in the ioctl cmd (addr/size = 0 otherwise).<br /> <br /> == Close ==<br /> Takes a 32bit '''fd'''. Returns an output u32 ('''error_code''').<br /> <br /> == Initialize ==<br /> Takes two copy-handles ('''current_process''' and '''transfer_memory''') and an input u32 ('''transfer_memory_size'''). Returns an output u32 ('''error_code''').<br /> <br /> Webkit applet creates the transfer-memory with perm = 0 and size 0x300000.<br /> <br /> == QueryEvent ==<br /> Takes two input u32s ('''fd''' and '''event_id'''), with the second word immediately after the first one. Returns an output u32 ('''error_code''') and a copy-handle ('''event_handle''').<br /> <br /> == MapSharedMem ==<br /> Takes a copy-handle ('''transfer_memory''') and two input u32s ('''fd''' and '''nvmap_handle'''). Returns an output u32 ('''error_code''').<br /> <br /> == GetStatus ==<br /> Takes no input. Returns 0x10-bytes and an output u32 ('''error_code''').<br /> <br /> == ForceSetClientPID ==<br /> Takes an input u64 which must [[IPC_Marshalling|match]] the user-process PID ([[AM_services|AppletResourceUserId]]). Returns an output u32 ('''error_code''').<br /> <br /> == SetClientPID ==<br /> Takes a PID-descriptor and an u64 which must [[IPC_Marshalling|match]] the user-process PID ([[AM_services|AppletResourceUserId]]). Returns an output u32 ('''error_code''').<br /> <br /> == DumpGraphicsMemoryInfo ==<br /> No input or output. Does nothing.<br /> <br /> == Cmd10 ==<br /> Takes a copy-handle and an input u32. Returns an output u32 ('''error_code''').<br /> <br /> == Ioctl2 ==<br /> Takes a type-0x21 buffer, a type-0x22 buffer, a type-0x21 buffer, and two input u32s. Returns an output u32 ('''error_code''').<br /> <br /> == Ioctl3 ==<br /> Same input/output as Ioctl2, except cmdhdr_word1 is 0x100B instead of 0xC0B.<br /> <br /> == Cmd13 ==<br /> Takes an input u64. No output.<br /> <br /> Official user-processes starting with 3.0.0 now use this at the end of nvdrv service init with value 0x1.<br /> <br /> = Ioctls =<br /> The ioctl number is generated with the following primitive (see Linux kernel):<br /> <br /> #define _IOC(inout, group, num, len) \<br /> (inout | ((len &amp; IOCPARM_MASK) &lt;&lt; 16) | ((group) &lt;&lt; 8) | (num))<br /> <br /> The following table contains known ioctls.<br /> <br /> == /dev/nvhost-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC0080014 || Inout || 8 || [[#NVHOST_IOCTL_CTRL_SYNCPT_READ]] ||<br /> |-<br /> | 0x40040015 || In || 4 || [[#NVHOST_IOCTL_CTRL_SYNCPT_INCR]] ||<br /> |-<br /> | 0xC00C0016 || Inout || 12 || [[#NVHOST_IOCTL_CTRL_SYNCPT_WAIT]] ||<br /> |-<br /> | 0x40080017 || In || 8 || [[#NVHOST_IOCTL_CTRL_MODULE_MUTEX]] ||<br /> |-<br /> | 0xC0180018 || Inout || 24 || [[#NVHOST_IOCTL_CTRL_MODULE_REGRDWR]] ||<br /> |-<br /> | 0xC0100019 || Inout || 16 || [[#NVHOST_IOCTL_CTRL_SYNCPT_WAITEX]] ||<br /> |-<br /> | 0xC008001A || Inout || 8 || [[#NVHOST_IOCTL_CTRL_SYNCPT_READ_MAX]] ||<br /> |-<br /> | 0xC183001B || Inout || 387 || [[#NVHOST_IOCTL_CTRL_GET_CONFIG]] ||<br /> |-<br /> | 0xC004001C || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_SIGNAL]] ||<br /> |-<br /> | 0xC010001D || Inout || 16 || [[#NVHOST_IOCTL_CTRL_EVENT_WAIT]] ||<br /> |-<br /> | 0xC010001E || Inout || 16 || [[#NVHOST_IOCTL_CTRL_EVENT_WAIT_ASYNC]] ||<br /> |-<br /> | 0xC004001F || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_REGISTER]] ||<br /> |-<br /> | 0xC0040020 || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_UNREGISTER]] ||<br /> |-<br /> | 0x40080021 || In || 8 || [[#NVHOST_IOCTL_CTRL_EVENT_KILL]] ||<br /> |}<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_READ ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_INCR ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_WAIT ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 thresh;<br /> __in s32 timeout;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_MODULE_MUTEX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 lock; // (0==unlock; 1==lock)<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_MODULE_REGRDWR ===<br /> Identical to Linux driver. Uses 32-bit version and doesn't work.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 num_offsets;<br /> __in u32 block_size;<br /> __in u32 offsets;<br /> __in u32 values;<br /> __in u32 write;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_WAITEX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 thresh;<br /> __in s32 timeout;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_READ_MAX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_GET_CONFIG ===<br /> Gets configured settings. Not available in production mode.<br /> <br /> struct {<br /> __in char domain_str[0x41]; // &quot;nv&quot;<br /> __in char param_str[0x41];<br /> __out char config_str[0x101];<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_SIGNAL ===<br /> Signals an user event. Exclusive to the Switch.<br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_WAIT ===<br /> Waits on an event. If waiting fails, returns error code 0x05 (Timeout) and sets '''value''' to (('''syncpt_id''' &lt;&lt; 0x10) | 0x10000000).<br /> <br /> Depending on '''threshold''', an '''user_event_id''' may be returned for using with other event ioctls.<br /> <br /> struct {<br /> __in u32 syncpt_id;<br /> __in u32 threshold;<br /> __in s32 timeout;<br /> __inout u32 value; // in=user_event_id (ignored); out=syncpt_value or user_event_id<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_WAIT_ASYNC ===<br /> Waits on an event (async version). If waiting fails, returns error code 0x0B (BadValue).<br /> <br /> Depending on '''threshold''', an '''user_event_id''' may be returned for using with other event ioctls.<br /> <br /> struct {<br /> __in u32 syncpt_id;<br /> __in u32 threshold;<br /> __in u32 timeout;<br /> __inout u32 value; // in=user_event_id (ignored); out=syncpt_value or user_event_id<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_REGISTER ===<br /> Registers an user event. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_UNREGISTER ===<br /> Unregisters an user event. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_KILL ===<br /> Kills user events. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u64 user_events; // 64-bit bitfield where each bit represents one event<br /> };<br /> <br /> == /dev/nvmap ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC0080101 || Inout || 8 || [[#NVMAP_IOC_CREATE]] ||<br /> |-<br /> | 0x00000102 || - || 0 || NVMAP_IOC_CLAIM || Returns NotSupported<br /> |-<br /> | 0xC0080103 || Inout || 8 || [[#NVMAP_IOC_FROM_ID]] ||<br /> |-<br /> | 0xC0200104 || Inout || 32 || [[#NVMAP_IOC_ALLOC]] ||<br /> |-<br /> | 0xC0180105 || Inout || 24 || [[#NVMAP_IOC_FREE]] ||<br /> |-<br /> | 0xC0280106 || Inout || 40 || NVMAP_IOC_MMAP || Returns NotSupported<br /> |-<br /> | 0xC0280107 || Inout || 40 || NVMAP_IOC_WRITE || Returns NotSupported<br /> |-<br /> | 0xC0280108 || Inout || 40 || NVMAP_IOC_READ || Returns NotSupported<br /> |-<br /> | 0xC00C0109 || Inout || 12 || [[#NVMAP_IOC_PARAM]] ||<br /> |-<br /> | 0xC010010A || Inout || 16 || NVMAP_IOC_PIN_MULT || Returns NotSupported<br /> |-<br /> | 0xC010010B || Inout || 16 || NVMAP_IOC_UNPIN_MULT || Returns NotSupported<br /> |-<br /> | 0xC008010C || Inout || 8 || NVMAP_IOC_CACHE || Returns NotSupported<br /> |-<br /> | 0xC004010D || Inout || 4 || || Returns NotSupported<br /> |-<br /> | 0xC008010E || Inout || 8 || [[#NVMAP_IOC_GET_ID]] ||<br /> |-<br /> | 0xC004010F || Inout || 4 || || Returns NotSupported<br /> |-<br /> | 0x40040110 || In || 4 || || Returns NotSupported<br /> |-<br /> | 0x00000111 || - || 0 || || Returns NotSupported<br /> |}<br /> <br /> === NVMAP_IOC_CREATE ===<br /> Creates an nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 size;<br /> __out u32 handle;<br /> };<br /> <br /> === NVMAP_IOC_FROM_ID ===<br /> Get handle to an existing nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 handle;<br /> };<br /> <br /> === NVMAP_IOC_ALLOC ===<br /> Allocate memory for the nvmap object. Nintendo extended this one with 16 bytes, and changed it from in to inout.<br /> <br /> struct {<br /> __in u32 handle;<br /> __in u32 heapmask;<br /> __in u32 flags; // (0=read-only, 1=read-write)<br /> __in u32 align;<br /> __in u8 kind;<br /> u8 pad[7];<br /> __in u64 addr;<br /> };<br /> <br /> === NVMAP_IOC_FREE ===<br /> This one is completely custom. Partly because the Linux driver passed the handle as the ioctl &quot;arg-ptr&quot;, and HIPC can't handle that voodoo.<br /> <br /> struct {<br /> __in u32 handle;<br /> u32 pad;<br /> __out u64 refcount;<br /> __out u32 size;<br /> __out u32 flags; // 1=NOT_FREED_YET<br /> };<br /> <br /> === NVMAP_IOC_PARAM ===<br /> Returns info about a nvmap object. Identical to Linux driver, but extended with further params.<br /> <br /> struct {<br /> __in u32 handle;<br /> __in u32 param; // 1=SIZE, 2=ALIGNMENT, 3=BASE (returns error), 4=HEAP (always 0x40000000), 5=KIND, 6=COMPR (unused)<br /> __out u32 result;<br /> };<br /> <br /> === NVMAP_IOC_GET_ID ===<br /> Returns an id for a nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 id; //~0 indicates error<br /> __in u32 handle;<br /> };<br /> <br /> == /dev/nvdisp-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x80040212 || Out || 4 || TEGRA_DC_EXT_CONTROL_GET_NUM_OUTPUTS ||<br /> |-<br /> | 0xC0140213 || Inout || 20 || TEGRA_DC_EXT_CONTROL_GET_OUTPUT_PROPERTIES ||<br /> |-<br /> | 0xC1100214 || Inout || 272 || TEGRA_DC_EXT_CONTROL_GET_OUTPUT_EDID ||<br /> |-<br /> | 0xC0040216 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT0 ||<br /> |-<br /> | 0xC0040217 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT1 ||<br /> |-<br /> | 0xC0100218 || Inout || 16 || TEGRA_DC_EXT_CONTROL_SET_EVENT2 ||<br /> |-<br /> | 0xC0100219 || Inout || 16 || TEGRA_DC_EXT_CONTROL_SET_EVENT3 ||<br /> |-<br /> | 0xC0040220 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT4 ||<br /> |-<br /> |}<br /> <br /> == /dev/nvdisp-disp0, /dev/nvdisp-disp1 ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40040201 || In || 4 || TEGRA_DC_EXT_GET_WINDOW ||<br /> |-<br /> | 0x40040202 || In || 4 || TEGRA_DC_EXT_PUT_WINDOW ||<br /> |-<br /> | 0xC4C80203 || In || 1224 || TEGRA_DC_EXT_FLIP ||<br /> |-<br /> | 0x80380204 || Out || 56 || TEGRA_DC_EXT_GET_MODE ||<br /> |-<br /> | 0x40380205 || Out || 56 || TEGRA_DC_EXT_SET_MODE ||<br /> |-<br /> | 0x430C0206 || In || 780 || TEGRA_DC_EXT_SET_LUT ||<br /> |-<br /> | 0x40010207 || In || 1 || TEGRA_DC_EXT_ENABLE_DISABLE_CRC ||<br /> |-<br /> | 0x80040208 || Out || 4 || TEGRA_DC_EXT_GET_CRC ||<br /> |-<br /> | 0x80040209 || Out || 4 || TEGRA_DC_EXT_GET_HEAD_STATUS ||<br /> |-<br /> | 0xC038020A || Inout || 56 || TEGRA_DC_EXT_VALIDATE_MODE ||<br /> |-<br /> | 0x4018020B || In || 24 || TEGRA_DC_EXT_SET_CSC ||<br /> |-<br /> | 0xC004020C || Inout || 4 || TEGRA_DC_EXT_GET_VBLANK_SYNCPT ||<br /> |-<br /> | 0x8040020D || Out || 64 || TEGRA_DC_EXT_GET_UNDERFLOWS ||<br /> |-<br /> | 0xC99A020E || Inout || 2458 || TEGRA_DC_EXT_SET_CMU ||<br /> |-<br /> | 0xC004020F || Inout || 4 || TEGRA_DC_EXT_DPMS ||<br /> |-<br /> | 0x80600210 || Out || 96 || TEGRA_DC_EXT_GET_AVI_INFOFRAME ||<br /> |-<br /> | 0x40600211 || In || 96 || TEGRA_DC_EXT_SET_AVI_INFOFRAME ||<br /> |-<br /> | 0xEBFC0215 || Inout || 11260 || TEGRA_DC_EXT_GET_MODE_DB ||<br /> |-<br /> | 0xC003021A || Inout || 3 || TEGRA_DC_EXT_PANEL_GET_VENDOR_ID ||<br /> |-<br /> | 0x803C021B || Out || 60 || TEGRA_DC_EXT_GET_MODE2 ||<br /> |-<br /> | 0x403C021C || In || 60 || TEGRA_DC_EXT_SET_MODE2 ||<br /> |-<br /> | 0xC03C021D || Inout || 60 || TEGRA_DC_EXT_VALIDATE_MODE2 ||<br /> |-<br /> | 0xEF20021E || Inout || 12064 || TEGRA_DC_EXT_GET_MODE_DB2 ||<br /> |-<br /> | 0xC004021F || Inout || 4 || TEGRA_DC_EXT_GET_WINMASK ||<br /> |-<br /> |}<br /> <br /> == /dev/nvcec-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40010300 || In || 1 || ||<br /> |-<br /> | 0x40010301 || In || 1 || NVCEC_CTRL_ENABLE ||<br /> |-<br /> | 0x804C0302 || Out || 76 || NVCEC_CTRL_GET_PADDR ||<br /> |-<br /> | 0x40040303 || In || 4 || NVCEC_CTRL_SET_LADDR ||<br /> |-<br /> | 0xC04C0304 || Inout || 76 || NVCEC_CTRL_WRITE ||<br /> |-<br /> | 0xC04C0305 || Inout || 76 || NVCEC_CTRL_READ ||<br /> |-<br /> | 0x804C0306 || Out || 76 || NVCEC_CTRL_GET_CONNECTION_STATUS ||<br /> |-<br /> | 0x804C0307 || Out || 76 || NVCEC_CTRL_GET_WRITE_STATUS ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhdcp_up-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC4880401 || Inout || 1160 || TEGRAIO_NVHDCP_READ_M ||<br /> |-<br /> | 0xC4880402 || Inout || 1160 || TEGRAIO_NVHDCP_READ_S ||<br /> |-<br /> | 0x40010403 || In || 1 || TEGRAIO_NVHDCP_ON_OFF ||<br /> |-<br /> |}<br /> <br /> == /dev/nvdcutil-disp0, /dev/nvdcutil-disp1 ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40010501 || In || 1 || ||<br /> |-<br /> | 0x40010502 || In || 1 || ||<br /> |-<br /> | 0x42040503 || In || 1056 || ||<br /> |-<br /> | 0x803C0504 || Out || 60 || NVDCUTIL_DISP_IOCTL_GET_DISPLAY_INFO ||<br /> |-<br /> |}<br /> <br /> == /dev/nvsched-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x00000601 || - || 0 ||NVSCHED_CTRL_ENABLE||<br /> |-<br /> | 0x00000602 || - || 0 ||NVSCHED_CTRL_DISABLE||<br /> |-<br /> | 0x40180603 || In || 1056 ||NVSCHED_CTRL_ADD_APPLICATION||<br /> |-<br /> | 0x40180604 || In || 60 ||NVSCHED_CTRL_UPDATE_APPLICATION||<br /> |-<br /> | 0x40080605 || In || 60 ||NVSCHED_CTRL_REMOVE_APPLICATION||<br /> |-<br /> | 0x80080606 || Out || 60 ||NVSCHED_CTRL_GET_ID||<br /> |-<br /> | 0x80080607 || Out || 60 ||NVSCHED_CTRL_ADD_RUNLIST||<br /> |-<br /> | 0x40180608 || In || 24 ||NVSCHED_CTRL_UPDATE_RUNLIST||<br /> |-<br /> | 0x40100609 || In || 16 ||NVSCHED_CTRL_LINK_RUNLIST||<br /> |-<br /> | 0x4010060A || In || 16 ||NVSCHED_CTRL_UNLINK_RUNLIST||<br /> |-<br /> | 0x4008060B || In || 8 ||NVSCHED_CTRL_REMOVE_RUNLIST||<br /> |-<br /> | 0x8001060C || Out || 1 ||NVSCHED_CTRL_HAS_OVERRUN_EVENT||<br /> |-<br /> | 0x8010060D || Out || 16 || ||<br /> |-<br /> | 0x400C060E || In || 12 ||NVSCHED_CTRL_PUT_CONDUCTOR_FLIP_FENCE||<br /> |-<br /> | 0x4008060F || In || 8 ||NVSCHED_CTRL_DETACH_APPLICATION||<br /> |-<br /> | 0x40100610 || In || 16 || ||<br /> |-<br /> | 0x40100611 || In || 16 || ||<br /> |-<br /> |}<br /> <br /> == /dev/nverpt-ctrl ==<br /> Added in firmware version 3.0.0.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC1280701 || Inout || 296 || ||<br /> |-<br /> | 0xCF580702 || Inout || 3928 || ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhost-as-gpu ==<br /> Each fd opened to this device creates an address space. An address space is then later bound with a channel.<br /> <br /> Once a nvgpu channel has been bound to an address space it cannot be unbound. There is no support for allowing an nvgpu channel to change from one address space to another (or from one to none).<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40044101 || In || 4 || [[#NVGPU_AS_IOCTL_BIND_CHANNEL]] ||<br /> |-<br /> | 0xC0184102 || Inout || 24 || [[#NVGPU_AS_IOCTL_ALLOC_SPACE]] ||<br /> |-<br /> | 0xC0104103 || Inout || 16 || [[#NVGPU_AS_IOCTL_FREE_SPACE]] ||<br /> |-<br /> | 0xC0184104 || Inout || 24 || [[#NVGPU_AS_IOCTL_MAP_BUFFER]] ||<br /> |-<br /> | 0xC0084105 || Inout || 8 || [[#NVGPU_AS_IOCTL_UNMAP_BUFFER]] ||<br /> |-<br /> | 0xC0284106 || Inout || 40 || [[#NVGPU_AS_IOCTL_MAP_BUFFER_EX]] ||<br /> |-<br /> | 0x40104107 || In || 16 || [[#NVGPU_AS_IOCTL_INITIALIZE]] ||<br /> |-<br /> | 0xC0404108 || Inout || 64 || [[#NVGPU_AS_IOCTL_GET_VA_REGIONS]] ||<br /> |-<br /> | 0x40284109 || In || 40 || [[#NVGPU_AS_IOCTL_INITIALIZE_EX]] ||<br /> |-<br /> | 0xC0??4114 || Inout || Variable || [[#NVGPU_AS_IOCTL_REMAP]] ||<br /> |}<br /> <br /> === NVGPU_AS_IOCTL_BIND_CHANNEL ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 fd;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_ALLOC_SPACE ===<br /> This one reserves pages in the device address space.<br /> <br /> struct {<br /> __in u32 pages;<br /> __in u32 page_size;<br /> __in u32 flags;<br /> u32 pad;<br /> union {<br /> __out u64 offset;<br /> __in u64 align;<br /> };<br /> };<br /> <br /> === NVGPU_AS_IOCTL_FREE_SPACE ===<br /> struct {<br /> __in u64 offset;<br /> __in u32 pages;<br /> __in u32 page_size;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_MAP_BUFFER ===<br /> Map a memory region in the device address space. Identical to Linux driver pretty much.<br /> <br /> On success, the mapped memory region is locked by having [[SVC#MemoryState]] bit34 set.<br /> <br /> struct {<br /> __in u32 flags; // bit0: fixed_offset, bit2: cacheable<br /> u32 pad;<br /> __in u32 nvmap_handle;<br /> __inout u32 page_size; // 0 means don't care<br /> union {<br /> __out u64 offset;<br /> __in u64 align;<br /> };<br /> };<br /> <br /> === NVGPU_AS_IOCTL_MAP_BUFFER_EX ===<br /> Map a memory region in the device address space. Identical to Linux driver pretty much.<br /> <br /> On success, the mapped memory region is locked by having [[SVC#MemoryState]] bit34 set.<br /> <br /> struct {<br /> __in u32 flags; // bit0: fixed_offset, bit2: cacheable<br /> __in u32 kind; // -1 is default<br /> __in u32 nvmap_handle;<br /> __inout u32 page_size; // 0 means don't care<br /> __in u64 buffer_offset;<br /> __in u64 mapping_size;<br /> __inout u64 offset;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_UNMAP_BUFFER ===<br /> Unmap a memory region from the device address space.<br /> <br /> struct {<br /> __in u64 offset;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_INITIALIZE ===<br /> Nintendo's custom implementation of NVGPU_GPU_IOCTL_ALLOC_AS (unavailable).<br /> <br /> struct {<br /> __in u32 big_page_size; // depends on GPU's available_big_page_sizes; 0=default<br /> __in s32 as_fd; // ignored; passes 0<br /> __in u32 flags; // ignored; passes 0<br /> __in u32 reserved; // ignored; passes 0<br /> };<br /> <br /> === NVGPU_AS_IOCTL_GET_VA_REGIONS ===<br /> Nintendo modified to get rid of pointer in struct.<br /> <br /> struct va_region {<br /> u64 offset;<br /> u32 page_size;<br /> u32 pad;<br /> u64 pages;<br /> };<br /> <br /> struct {<br /> u64 not_used; // (contained output user ptr on linux, ignored)<br /> __inout u32 bufsize; // forced to 2*sizeof(struct va_region)<br /> u32 pad;<br /> __out struct va_region regions[2];<br /> };<br /> <br /> === NVGPU_AS_IOCTL_INITIALIZE_EX ===<br /> Nintendo's custom implementation of NVGPU_GPU_IOCTL_ALLOC_AS (unavailable) with extra params.<br /> <br /> struct {<br /> __in u32 big_page_size; // depends on GPU's available_big_page_sizes; 0=default<br /> __in s32 as_fd; // ignored; passes 0<br /> __in u32 flags; // passes 0<br /> __in u32 reserved; // ignored; passes 0<br /> __in u64 unk0;<br /> __in u64 unk1;<br /> __in u64 unk2;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_REMAP ===<br /> Nintendo's custom implementation of address space remapping.<br /> <br /> struct remap_entry {<br /> __in u16 flags; // 0 or 4<br /> __in u16 kind; <br /> __in u32 nvmap_handle;<br /> __in u32 padding;<br /> __in u32 offset; // (alloc_space_offset &gt;&gt; 0x10)<br /> __in u32 pages; // alloc_space_pages<br /> };<br /> <br /> struct {<br /> __in struct remap_entry entries[];<br /> };<br /> <br /> == /dev/nvhost-dbg-gpu ==<br /> Returns [[#Errors|NotSupported]] on Open unless nn::settings::detail::GetDebugModeFlag is set.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40084401 || In || 8 || NVGPU_DBG_GPU_IOCTL_BIND_CHANNEL ||<br /> |-<br /> | 0xC0??4402 || Inout || Variable || NVGPU_DBG_GPU_IOCTL_REG_OPS ||<br /> |-<br /> | 0x40084403 || In || 8 || NVGPU_DBG_GPU_IOCTL_EVENTS_CTRL ||<br /> |-<br /> | 0x40044404 || In || 4 || NVGPU_DBG_GPU_IOCTL_POWERGATE ||<br /> |-<br /> | 0x40044405 || In || 4 || NVGPU_DBG_GPU_IOCTL_SMPC_CTXSW_MODE ||<br /> |-<br /> | 0xC0184407 || Inout || 24 || NVGPU_DBG_GPU_IOCTL_PERFBUF_MAP ||<br /> |-<br /> | 0x40084408 || In || 8 || NVGPU_DBG_GPU_IOCTL_PERFBUF_UNMAP ||<br /> |-<br /> | 0x40084409 || In || 8 || NVGPU_DBG_GPU_IOCTL_PC_SAMPLING ||<br /> |-<br /> | 0x4008440A || In || 8 || NVGPU_DBG_GPU_IOCTL_TIMEOUT ||<br /> |-<br /> | 0x8008440B || Out || 8 || NVGPU_DBG_GPU_IOCTL_GET_TIMEOUT ||<br /> |-<br /> | 0x8004440C || Out || 4 || NVGPU_DBG_GPU_IOCTL_GET_GR_CONTEXT_SIZE ||<br /> |-<br /> | 0x0000440D || None || 0 || NVGPU_DBG_GPU_IOCTL_GET_GR_CONTEXT (uses Ioctl3) ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhost-prof-gpu ==<br /> Returns [[#Errors|NotSupported]] on Open unless nn::settings::detail::GetDebugModeFlag is set.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |}<br /> <br /> == /dev/nvhost-ctrl-gpu ==<br /> This device is for global (context independent) operations on the gpu. <br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x80044701 || Out || 4 || [[#NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE]] ||<br /> |-<br /> | 0x80284702 || Out || 40 || [[#NVGPU_GPU_IOCTL_ZCULL_GET_INFO]] ||<br /> |-<br /> | 0x402C4703 || In || 44 || [[#NVGPU_GPU_IOCTL_ZBC_SET_TABLE]] ||<br /> |-<br /> | 0xC0344704 || Inout || 52 || [[#NVGPU_GPU_IOCTL_ZBC_QUERY_TABLE]] ||<br /> |-<br /> | 0xC0B04705 || Inout || 176 || [[#NVGPU_GPU_IOCTL_GET_CHARACTERISTICS]] ||<br /> |-<br /> | 0xC0184706 || Inout || 24 || NVGPU_GPU_IOCTL_GET_TPC_MASKS ||<br /> |-<br /> | 0x40084707 || In || 8 || [[#NVGPU_GPU_IOCTL_FLUSH_L2]] ||<br /> |-<br /> | 0x4008470E || In || 8 || NVGPU_GPU_IOCTL_SET_MMUDEBUG_MODE ||<br /> |-<br /> | 0x4010470F || In || 16 || NVGPU_GPU_IOCTL_SET_SM_DEBUG_MODE ||<br /> |-<br /> | 0xC0084710 || Inout || 8 || NVGPU_GPU_IOCTL_WAIT_FOR_PAUSE ||<br /> |-<br /> | 0x80084711 || Out || 8 || NVGPU_GPU_IOCTL_GET_TPC_EXCEPTION_EN_STATUS ||<br /> |-<br /> | 0x80084712 || Out || 8 || NVGPU_GPU_IOCTL_NUM_VSMS ||<br /> |-<br /> | 0xC0044713 || Inout || 4 || NVGPU_GPU_IOCTL_VSMS_MAPPING ||<br /> |-<br /> | 0x80084714 || Out || 8 || [[#NVGPU_GPU_IOCTL_ZBC_GET_ACTIVE_SLOT_MASK]] ||<br /> |-<br /> | 0x80044715 || Out || 4 || ||<br /> |-<br /> | 0x8018471A || Out || 24 || ||<br /> |-<br /> | 0xC008471B || Inout || 8 || NVGPU_GPU_IOCTL_GET_ERROR_CHANNEL_USER_DATA ||<br /> |-<br /> | 0xC010471C || Inout || 16 || NVGPU_GPU_IOCTL_GET_GPU_TIME ||<br /> |-<br /> | 0xC108471D || Inout || 264 || NVGPU_GPU_IOCTL_GET_CPU_TIME_CORRELATION_INFO ||<br /> |}<br /> <br /> === NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE ===<br /> Returns the GPU's ZCULL context size. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 size;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE ===<br /> Returns GPU's ZCULL information. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 width_align_pixels;<br /> __out u32 height_align_pixels;<br /> __out u32 pixel_squares_by_aliquots;<br /> __out u32 aliquot_total;<br /> __out u32 region_byte_multiplier;<br /> __out u32 region_header_size;<br /> __out u32 subregion_header_size;<br /> __out u32 subregion_width_align_pixels;<br /> __out u32 subregion_height_align_pixels;<br /> __out u32 subregion_count;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_SET_TABLE ===<br /> Sets the active ZBC table. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 color_ds[4];<br /> __in u32 color_l2[4];<br /> __in u32 depth;<br /> __in u32 format;<br /> __in u32 type; // 1=color, 2=depth<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_QUERY_TABLE ===<br /> Queries the active ZBC table. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 color_ds[4];<br /> __out u32 color_l2[4];<br /> __out u32 depth;<br /> __out u32 ref_cnt;<br /> __out u32 format;<br /> __out u32 type;<br /> __inout u32 index_size;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_GET_CHARACTERISTICS ===<br /> Returns the GPU characteristics. Modified to return inline data instead of using a pointer.<br /> <br /> struct gpu_characteristics {<br /> u32 arch; // 0x120 (NVGPU_GPU_ARCH_GM200)<br /> u32 impl; // 0xB (NVGPU_GPU_IMPL_GM20B)<br /> u32 rev; // 0xA1 (Revision A1)<br /> u32 num_gpc; // 0x1<br /> u64 l2_cache_size; // 0x40000<br /> u64 on_board_video_memory_size; // 0x0 (not used)<br /> u32 num_tpc_per_gpc; // 0x2<br /> u32 bus_type; // 0x20 (NVGPU_GPU_BUS_TYPE_AXI)<br /> u32 big_page_size; // 0x20000<br /> u32 compression_page_size; // 0x20000<br /> u32 pde_coverage_bit_count; // 0x1B<br /> u32 available_big_page_sizes; // 0x30000<br /> u32 gpc_mask; // 0x1<br /> u32 sm_arch_sm_version; // 0x503 (Maxwell Generation 5.0.3?)<br /> u32 sm_arch_spa_version; // 0x503 (Maxwell Generation 5.0.3?)<br /> u32 sm_arch_warp_count; // 0x80<br /> u32 gpu_va_bit_count; // 0x28<br /> u32 reserved; // NULL<br /> u64 flags; // 0x55<br /> u32 twod_class; // 0x902D (FERMI_TWOD_A)<br /> u32 threed_class; // 0xB197 (MAXWELL_B)<br /> u32 compute_class; // 0xB1C0 (MAXWELL_COMPUTE_B)<br /> u32 gpfifo_class; // 0xB06F (MAXWELL_CHANNEL_GPFIFO_A)<br /> u32 inline_to_memory_class; // 0xA140 (KEPLER_INLINE_TO_MEMORY_B)<br /> u32 dma_copy_class; // 0xB0B5 (MAXWELL_DMA_COPY_A)<br /> u32 max_fbps_count; // 0x1<br /> u32 fbp_en_mask; // 0x0 (disabled)<br /> u32 max_ltc_per_fbp; // 0x2<br /> u32 max_lts_per_ltc; // 0x1<br /> u32 max_tex_per_tpc; // 0x0 (not supported)<br /> u32 max_gpc_count; // 0x1<br /> u32 rop_l2_en_mask_0; // 0x21D70 (fuse_status_opt_rop_l2_fbp_r)<br /> u32 rop_l2_en_mask_1; // 0x0<br /> u64 chipname; // 0x6230326D67 (&quot;gm20b&quot;)<br /> u64 gr_compbit_store_base_hw; // 0x0 (not supported)<br /> };<br /> <br /> struct {<br /> __inout u64 gpu_characteristics_buf_size; // must not be NULL, but gets overwritten with 0xA0=max_size<br /> __in u64 gpu_characteristics_buf_addr; // ignored, but must not be NULL<br /> __out struct gpu_characteristics gc;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_FLUSH_L2 ===<br /> Flushes the GPU L2 cache.<br /> <br /> struct {<br /> __in u32 flush; // l2_flush | l2_invalidate &lt;&lt; 1 | fb_flush &lt;&lt; 2<br /> u32 reserved;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_GET_ACTIVE_SLOT_MASK ===<br /> Returns the mask value for a ZBC slot.<br /> <br /> struct {<br /> __out u32 slot; // always 0x07<br /> __out u32 mask;<br /> };<br /> <br /> == Channels ==<br /> Channels are a concept for NVIDIA hardware blocks that share a common interface.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Path || Name<br /> |-<br /> | /dev/nvhost-gpu ||<br /> |-<br /> | /dev/nvhost-vic || Video Image Compositor<br /> |-<br /> | /dev/nvhost-nvdec || Video Decoder<br /> |-<br /> | /dev/nvhost-nvjpg || JPEG Decoder<br /> |}<br /> <br /> == Channel Ioctls ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Size || Description || Notes<br /> |-<br /> | 0xC0??0001 || Variable || NVHOST_IOCTL_CHANNEL_SUBMIT ||<br /> |-<br /> | 0xC0080002 || 8 || NVHOST_IOCTL_CHANNEL_GET_SYNCPOINT ||<br /> |-<br /> | 0xC0080003 || 8 || NVHOST_IOCTL_CHANNEL_GET_WAITBASE ||<br /> |-<br /> | 0xC0080004 || 8 || NVHOST_IOCTL_CHANNEL_SET_TIMEOUT_EX ||<br /> |-<br /> | 0x40040007 || 4 || ||<br /> |-<br /> | 0x40080008 || 8 || NVHOST_IOCTL_CHANNEL_SET_CLK_RATE ||<br /> |-<br /> | 0xC0??0009 || Variable || NVHOST_IOCTL_CHANNEL_MAP_BUFFER ||<br /> |-<br /> | 0xC0??000A || Variable || NVHOST_IOCTL_CHANNEL_UNMAP_BUFFER ||<br /> |-<br /> | 0x00000013 || 0 || ||<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40044801 || 4 || [[#NVGPU_IOCTL_CHANNEL_SET_NVMAP_FD]] ||<br /> |-<br /> | 0x40044803 || 4 || NVGPU_IOCTL_CHANNEL_SET_TIMEOUT ||<br /> |-<br /> | 0x40084805 || 8 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO]] ||<br /> |-<br /> | 0xC0044807 || 4 || NVGPU_IOCTL_CHANNEL_CYCLE_STATS ||<br /> |-<br /> | 0xC0??4808 || Variable || [[#NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO]] ||<br /> |-<br /> | 0xC0104809 || 16 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_OBJ_CTX]] ||<br /> |-<br /> | 0xC010480B || 16 || [[#NVGPU_IOCTL_CHANNEL_ZCULL_BIND]] ||<br /> |-<br /> | 0xC018480C || 24 || [[#NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER]] ||<br /> |-<br /> | 0x4004480D || 4 || [[#NVGPU_IOCTL_CHANNEL_SET_PRIORITY]] ||<br /> |-<br /> | 0x0000480E || 0 || [[#NVGPU_IOCTL_CHANNEL_ENABLE]] ||<br /> |-<br /> | 0x0000480F || 0 || [[#NVGPU_IOCTL_CHANNEL_DISABLE]] ||<br /> |-<br /> | 0x00004810 || 0 || [[#NVGPU_IOCTL_CHANNEL_PREEMPT]] ||<br /> |-<br /> | 0x00004811 || 0 || [[#NVGPU_IOCTL_CHANNEL_FORCE_RESET]] ||<br /> |-<br /> | 0x40084812 || 8 || [[#NVGPU_IOCTL_CHANNEL_EVENT_ID_CONTROL]] ||<br /> |-<br /> | 0xC0104813 || 16 || NVGPU_IOCTL_CHANNEL_CYCLE_STATS_SNAPSHOT ||<br /> |-<br /> | 0x80804816 || 128 || NVGPU_IOCTL_CHANNEL_GET_ERROR_INFO ||<br /> |-<br /> | 0xC0104817 || 16 || [[#NVGPU_IOCTL_CHANNEL_GET_ERROR_NOTIFICATION]] ||<br /> |-<br /> | 0x40204818 || 32 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX]] ||<br /> |-<br /> | 0xC0??4819 || Variable || [[#NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_RETRY]] ||<br /> |-<br /> | 0xC020481A || 32 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX2]] ||<br /> |-<br /> | 0xC018481B || 24 || (uses Ioctl2) ||<br /> |-<br /> | 0xC018481C || 24 || (uses Ioctl2) ||<br /> |-<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40084714 || 8 || NVGPU_IOCTL_CHANNEL_SET_USER_DATA || Sets an unknown user context address<br /> |-<br /> | 0x80084715 || 8 || NVGPU_IOCTL_CHANNEL_GET_USER_DATA || Gets an unknown user context address<br /> |}<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_NVMAP_FD ===<br /> Binds a nvmap object to this channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 nvmap_fd;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO ===<br /> Allocates gpfifo entries. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 num_entries;<br /> __in u32 flags;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO ===<br /> Submits a gpfifo object. Modified to take inline entry objects instead of a pointer.<br /> <br /> struct fence {<br /> u32 id;<br /> u32 value;<br /> };<br /> <br /> struct gpfifo_entry {<br /> u32 entry0; // gpu_va_lo<br /> u32 entry1; // gpu_va_hi | (unk_0x02 &lt;&lt; 0x08) | (size &lt;&lt; 0x0A) | (unk_0x01 &lt;&lt; 0x1F)<br /> };<br /> <br /> struct {<br /> __in u64 gpfifo; // (ignored) pointer to gpfifo fence structs<br /> __in u32 num_entries; // number of fence objects being submitted<br /> __in u32 flags;<br /> __out struct fence fence_out; // returned new fence object for others to wait on<br /> __in struct gpfifo_entry entries[]; // depends on num_entries<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_OBJ_CTX ===<br /> Allocates a graphics context object. Modified to ignore object's ID.<br /> <br /> struct {<br /> __in u32 class_num; // 0x902D=2d, 0xB197=3d, 0xB1C0=compute, 0xA140=kepler, 0xB0B5=DMA, 0xB06F=channel_gpfifo<br /> __in u32 flags;<br /> __out u64 obj_id; // (ignored) used for FREE_OBJ_CTX ioctl, which is not supported<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ZCULL_BIND ===<br /> Binds a ZCULL context to the channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u64 gpu_va;<br /> __in u32 mode; // 0=global, 1=no_ctxsw, 2=separate_buffer, 3=part_of_regular_buf<br /> __in u32 padding;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER ===<br /> Initializes the error notifier for this channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u64 offset;<br /> __in u64 size;<br /> __in u32 mem; // nvmap object handle<br /> __in u32 padding;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_PRIORITY ===<br /> Change channel's priority. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 priority; // 0x32 is low, 0x64 is medium and 0x96 is high<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ENABLE ===<br /> Enables the current channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_DISABLE ===<br /> Disables the current channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_PREEMPT ===<br /> Clears the FIFO pipe for this channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_FORCE_RESET ===<br /> Forces the channel to reset. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_EVENT_ID_CONTROL ===<br /> Controls event notifications.<br /> <br /> struct {<br /> __in u32 cmd; // 0=disable, 1=enable, 2=clear<br /> __in u32 id;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_GET_ERROR_NOTIFICATION ===<br /> Returns the current error notification caught by the error notifier. Exclusive to the Switch.<br /> <br /> struct {<br /> __out u64 timestamp; // nanoseconds since Jan. 1, 1970<br /> __out u32 info32; // error code<br /> __out u16 info16; // additional error info<br /> __inout u16 status; // always 0xFFFF<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_RETRY ===<br /> Allocates gpfifo entries with additional parameters. Exclusive to the Switch.<br /> <br /> struct {<br /> __in u32 num_entries;<br /> __in u32 flags;<br /> __in u32 unk0; // 1 works<br /> __in u32 unk1;<br /> __in u32 unk2;<br /> __in u32 unk3;<br /> __in u32 unk4;<br /> __in u32 unk5;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_EX ===<br /> Submits a gpfifo object (async version). Exclusive to the Switch.<br /> <br /> struct {<br /> u64 __gpfifo; // in (pointer to gpfifo fence structs; ignored)<br /> u32 __num_entries; // in (number of fence objects being submitted)<br /> u32 __flags; // in<br /> struct fence __fence_out; // out (returned new fence object for others to wait on)<br /> struct gpfifo_entry __entries[]; // in (depends on __num_entries)<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX2 ===<br /> Allocates gpfifo entries with additional parameters and returns a fence. Exclusive to the Switch.<br /> <br /> struct {<br /> u32 __num_entries; // in<br /> u32 __flags; // in<br /> u32 __unk0; // in (1 works)<br /> struct fence __fence_out; // out<br /> u32 __unk1; // in<br /> u32 __unk2; // in<br /> u32 __unk3; // in<br /> };<br /> <br /> = nvmemp =<br /> NVIDIA memory profiler (this service is not available on retail units). <br /> /dev/nvhost-ctrl sends the ioctl NVHOST_IOCTL_CTRL_GET_CONFIG to check the config &quot;nv!NV_MEMORY_PROFILER&quot;. If config_str returns &quot;1&quot;, the applications attempts to talk to use nvmemp.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Cmd0<br /> |-<br /> | 1 || Cmd1<br /> |}<br /> <br /> = nvdrvdbg =<br /> This is &quot;nns::nvdrv::INvDrvDebugFSServices&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenLog]]<br /> |-<br /> | 1 || [[#CloseLog]]<br /> |-<br /> | 2 || [[#ReadLog]]<br /> |}<br /> <br /> == OpenLog ==<br /> Takes process handle. Returns an fd.<br /> <br /> == CloseLog ==<br /> Takes fd and closes it.<br /> <br /> == ReadLog ==<br /> Takes fd and reads log into a type-6 buffer.<br /> <br /> = Errors =<br /> Most nvidia driver commands return an error code apart from the normal return code.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Success<br /> |-<br /> | 1 || NotImplemented<br /> |-<br /> | 2 || NotSupported<br /> |-<br /> | 3 || NotInitialized<br /> |-<br /> | 4 || BadParameter<br /> |-<br /> | 5 || Timeout<br /> |-<br /> | 6 || InsufficientMemory<br /> |-<br /> | 7 || ReadOnlyAttribute<br /> |-<br /> | 8 || InvalidState<br /> |-<br /> | 9 || InvalidAddress<br /> |-<br /> | 0xA || InvalidSize<br /> |-<br /> | 0xB || BadValue<br /> |-<br /> | 0xD || AlreadyAllocated<br /> |-<br /> | 0xE || Busy<br /> |-<br /> | 0xF || ResourceError<br /> |-<br /> | 0x10 || CountMismatch<br /> |-<br /> | 0x1000 || SharedMemoryTooSmall<br /> |-<br /> | 0x30003 || FileOperationFailed<br /> |-<br /> | 0x30004 || DirOperationFailed<br /> |-<br /> | 0x3000F || IoctlFailed <br /> |-<br /> | 0x30010 || AccessDenied<br /> |-<br /> | 0x30013 || FileNotFound<br /> |-<br /> | 0xA000E || ModuleNotPresent<br /> |}<br /> <br /> = Panic =<br /> In some cases, a panic may occur. NV forces a crash by doing:<br /> (void *)0 = 0xCAFE;<br /> End result is that the system hangs with a white-screen.<br /> <br /> == Gpfifo Panic ==<br /> When the gpfifo data in the gpu_va buffers specified by the submitted gpfifo entries is invalid(?), eventually the user-process will be force-terminated after using the submit-gpfifo ioctl. It's unknown how exactly this is done.<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=NV_services&diff=3799 2018-02-20T01:45:13Z

<p>Shinyquagsire23: /* /dev/nvsched-ctrl */</p> <hr /> <div>The Switch uses a customized NVIDIA driver.<br /> <br /> = nvdrv, nvdrv:a, nvdrv:s, nvdrv:t =<br /> This is &quot;nns::nvdrv::INvDrvServices&quot;.<br /> <br /> Main NVIDIA driver service.<br /> <br /> Each service is used by:<br /> * &quot;nvdrv&quot;: regular applications<br /> * &quot;nvdrv:a&quot;: applets<br /> * &quot;nvdrv:s&quot;: sysmodules<br /> * &quot;nvdrv:t&quot;: factory titles<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#Open]]<br /> |-<br /> | 1 || [[#Ioctl]]<br /> |-<br /> | 2 || [[#Close]]<br /> |-<br /> | 3 || [[#Initialize]]<br /> |-<br /> | 4 || [[#QueryEvent]]<br /> |-<br /> | 5 || [[#MapSharedMem]]<br /> |-<br /> | 6 || [[#GetStatus]]<br /> |-<br /> | 7 || [[#ForceSetClientPID]]<br /> |-<br /> | 8 || [[#SetClientPID]]<br /> |-<br /> | 9 || [[#DumpGraphicsMemoryInfo]]<br /> |-<br /> | 10 || [3.0.0+]<br /> |-<br /> | 11 || [3.0.0+] [[#Ioctl2]]<br /> |-<br /> | 12 || [3.0.0+] [[#Ioctl3]]<br /> |-<br /> | 13 || [3.0.0+]<br /> |}<br /> <br /> == Open ==<br /> Takes a type-0x5 input buffer for the device-path. Returns the output 32bit '''fd''' and the u32 '''error_code'''.<br /> <br /> == Ioctl ==<br /> Takes a 32bit '''fd''', an u32 '''ioctl_cmd''', a type-0x21 input buffer, and a type-0x22 output buffer. Returns an output u32 ('''error_code''').<br /> <br /> The addr/size for send/recv buffers are only set when the associated direction bit is set in the ioctl cmd (addr/size = 0 otherwise).<br /> <br /> == Close ==<br /> Takes a 32bit '''fd'''. Returns an output u32 ('''error_code''').<br /> <br /> == Initialize ==<br /> Takes two copy-handles ('''current_process''' and '''transfer_memory''') and an input u32 ('''transfer_memory_size'''). Returns an output u32 ('''error_code''').<br /> <br /> Webkit applet creates the transfer-memory with perm = 0 and size 0x300000.<br /> <br /> == QueryEvent ==<br /> Takes two input u32s ('''fd''' and '''event_id'''), with the second word immediately after the first one. Returns an output u32 ('''error_code''') and a copy-handle ('''event_handle''').<br /> <br /> == MapSharedMem ==<br /> Takes a copy-handle ('''transfer_memory''') and two input u32s ('''fd''' and '''nvmap_handle'''). Returns an output u32 ('''error_code''').<br /> <br /> == GetStatus ==<br /> Takes no input. Returns 0x10-bytes and an output u32 ('''error_code''').<br /> <br /> == ForceSetClientPID ==<br /> Takes an input u64 which must [[IPC_Marshalling|match]] the user-process PID ([[AM_services|AppletResourceUserId]]). Returns an output u32 ('''error_code''').<br /> <br /> == SetClientPID ==<br /> Takes a PID-descriptor and an u64 which must [[IPC_Marshalling|match]] the user-process PID ([[AM_services|AppletResourceUserId]]). Returns an output u32 ('''error_code''').<br /> <br /> == DumpGraphicsMemoryInfo ==<br /> No input or output. Does nothing.<br /> <br /> == Cmd10 ==<br /> Takes a copy-handle and an input u32. Returns an output u32 ('''error_code''').<br /> <br /> == Ioctl2 ==<br /> Takes a type-0x21 buffer, a type-0x22 buffer, a type-0x21 buffer, and two input u32s. Returns an output u32 ('''error_code''').<br /> <br /> == Ioctl3 ==<br /> Same input/output as Ioctl2, except cmdhdr_word1 is 0x100B instead of 0xC0B.<br /> <br /> == Cmd13 ==<br /> Takes an input u64. No output.<br /> <br /> Official user-processes starting with 3.0.0 now use this at the end of nvdrv service init with value 0x1.<br /> <br /> = Ioctls =<br /> The ioctl number is generated with the following primitive (see Linux kernel):<br /> <br /> #define _IOC(inout, group, num, len) \<br /> (inout | ((len &amp; IOCPARM_MASK) &lt;&lt; 16) | ((group) &lt;&lt; 8) | (num))<br /> <br /> The following table contains known ioctls.<br /> <br /> == /dev/nvhost-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC0080014 || Inout || 8 || [[#NVHOST_IOCTL_CTRL_SYNCPT_READ]] ||<br /> |-<br /> | 0x40040015 || In || 4 || [[#NVHOST_IOCTL_CTRL_SYNCPT_INCR]] ||<br /> |-<br /> | 0xC00C0016 || Inout || 12 || [[#NVHOST_IOCTL_CTRL_SYNCPT_WAIT]] ||<br /> |-<br /> | 0x40080017 || In || 8 || [[#NVHOST_IOCTL_CTRL_MODULE_MUTEX]] ||<br /> |-<br /> | 0xC0180018 || Inout || 24 || [[#NVHOST_IOCTL_CTRL_MODULE_REGRDWR]] ||<br /> |-<br /> | 0xC0100019 || Inout || 16 || [[#NVHOST_IOCTL_CTRL_SYNCPT_WAITEX]] ||<br /> |-<br /> | 0xC008001A || Inout || 8 || [[#NVHOST_IOCTL_CTRL_SYNCPT_READ_MAX]] ||<br /> |-<br /> | 0xC183001B || Inout || 387 || [[#NVHOST_IOCTL_CTRL_GET_CONFIG]] ||<br /> |-<br /> | 0xC004001C || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_SIGNAL]] ||<br /> |-<br /> | 0xC010001D || Inout || 16 || [[#NVHOST_IOCTL_CTRL_EVENT_WAIT]] ||<br /> |-<br /> | 0xC010001E || Inout || 16 || [[#NVHOST_IOCTL_CTRL_EVENT_WAIT_ASYNC]] ||<br /> |-<br /> | 0xC004001F || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_REGISTER]] ||<br /> |-<br /> | 0xC0040020 || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_UNREGISTER]] ||<br /> |-<br /> | 0x40080021 || In || 8 || [[#NVHOST_IOCTL_CTRL_EVENT_KILL]] ||<br /> |}<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_READ ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_INCR ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_WAIT ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 thresh;<br /> __in s32 timeout;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_MODULE_MUTEX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 lock; // (0==unlock; 1==lock)<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_MODULE_REGRDWR ===<br /> Identical to Linux driver. Uses 32-bit version and doesn't work.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 num_offsets;<br /> __in u32 block_size;<br /> __in u32 offsets;<br /> __in u32 values;<br /> __in u32 write;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_WAITEX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 thresh;<br /> __in s32 timeout;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_READ_MAX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_GET_CONFIG ===<br /> Gets configured settings. Not available in production mode.<br /> <br /> struct {<br /> __in char domain_str[0x41]; // &quot;nv&quot;<br /> __in char param_str[0x41];<br /> __out char config_str[0x101];<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_SIGNAL ===<br /> Signals an user event. Exclusive to the Switch.<br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_WAIT ===<br /> Waits on an event. If waiting fails, returns error code 0x05 (Timeout) and sets '''value''' to (('''syncpt_id''' &lt;&lt; 0x10) | 0x10000000).<br /> <br /> Depending on '''threshold''', an '''user_event_id''' may be returned for using with other event ioctls.<br /> <br /> struct {<br /> __in u32 syncpt_id;<br /> __in u32 threshold;<br /> __in s32 timeout;<br /> __inout u32 value; // in=user_event_id (ignored); out=syncpt_value or user_event_id<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_WAIT_ASYNC ===<br /> Waits on an event (async version). If waiting fails, returns error code 0x0B (BadValue).<br /> <br /> Depending on '''threshold''', an '''user_event_id''' may be returned for using with other event ioctls.<br /> <br /> struct {<br /> __in u32 syncpt_id;<br /> __in u32 threshold;<br /> __in u32 timeout;<br /> __inout u32 value; // in=user_event_id (ignored); out=syncpt_value or user_event_id<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_REGISTER ===<br /> Registers an user event. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_UNREGISTER ===<br /> Unregisters an user event. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_KILL ===<br /> Kills user events. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u64 user_events; // 64-bit bitfield where each bit represents one event<br /> };<br /> <br /> == /dev/nvmap ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC0080101 || Inout || 8 || [[#NVMAP_IOC_CREATE]] ||<br /> |-<br /> | 0x00000102 || - || 0 || NVMAP_IOC_CLAIM || Returns NotSupported<br /> |-<br /> | 0xC0080103 || Inout || 8 || [[#NVMAP_IOC_FROM_ID]] ||<br /> |-<br /> | 0xC0200104 || Inout || 32 || [[#NVMAP_IOC_ALLOC]] ||<br /> |-<br /> | 0xC0180105 || Inout || 24 || [[#NVMAP_IOC_FREE]] ||<br /> |-<br /> | 0xC0280106 || Inout || 40 || NVMAP_IOC_MMAP || Returns NotSupported<br /> |-<br /> | 0xC0280107 || Inout || 40 || NVMAP_IOC_WRITE || Returns NotSupported<br /> |-<br /> | 0xC0280108 || Inout || 40 || NVMAP_IOC_READ || Returns NotSupported<br /> |-<br /> | 0xC00C0109 || Inout || 12 || [[#NVMAP_IOC_PARAM]] ||<br /> |-<br /> | 0xC010010A || Inout || 16 || NVMAP_IOC_PIN_MULT || Returns NotSupported<br /> |-<br /> | 0xC010010B || Inout || 16 || NVMAP_IOC_UNPIN_MULT || Returns NotSupported<br /> |-<br /> | 0xC008010C || Inout || 8 || NVMAP_IOC_CACHE || Returns NotSupported<br /> |-<br /> | 0xC004010D || Inout || 4 || || Returns NotSupported<br /> |-<br /> | 0xC008010E || Inout || 8 || [[#NVMAP_IOC_GET_ID]] ||<br /> |-<br /> | 0xC004010F || Inout || 4 || || Returns NotSupported<br /> |-<br /> | 0x40040110 || In || 4 || || Returns NotSupported<br /> |-<br /> | 0x00000111 || - || 0 || || Returns NotSupported<br /> |}<br /> <br /> === NVMAP_IOC_CREATE ===<br /> Creates an nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 size;<br /> __out u32 handle;<br /> };<br /> <br /> === NVMAP_IOC_FROM_ID ===<br /> Get handle to an existing nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 handle;<br /> };<br /> <br /> === NVMAP_IOC_ALLOC ===<br /> Allocate memory for the nvmap object. Nintendo extended this one with 16 bytes, and changed it from in to inout.<br /> <br /> struct {<br /> __in u32 handle;<br /> __in u32 heapmask;<br /> __in u32 flags; // (0=read-only, 1=read-write)<br /> __in u32 align;<br /> __in u8 kind;<br /> u8 pad[7];<br /> __in u64 addr;<br /> };<br /> <br /> === NVMAP_IOC_FREE ===<br /> This one is completely custom. Partly because the Linux driver passed the handle as the ioctl &quot;arg-ptr&quot;, and HIPC can't handle that voodoo.<br /> <br /> struct {<br /> __in u32 handle;<br /> u32 pad;<br /> __out u64 refcount;<br /> __out u32 size;<br /> __out u32 flags; // 1=NOT_FREED_YET<br /> };<br /> <br /> === NVMAP_IOC_PARAM ===<br /> Returns info about a nvmap object. Identical to Linux driver, but extended with further params.<br /> <br /> struct {<br /> __in u32 handle;<br /> __in u32 param; // 1=SIZE, 2=ALIGNMENT, 3=BASE (returns error), 4=HEAP (always 0x40000000), 5=KIND, 6=COMPR (unused)<br /> __out u32 result;<br /> };<br /> <br /> === NVMAP_IOC_GET_ID ===<br /> Returns an id for a nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 id; //~0 indicates error<br /> __in u32 handle;<br /> };<br /> <br /> == /dev/nvdisp-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x80040212 || Out || 4 || TEGRA_DC_EXT_CONTROL_GET_NUM_OUTPUTS ||<br /> |-<br /> | 0xC0140213 || Inout || 20 || TEGRA_DC_EXT_CONTROL_GET_OUTPUT_PROPERTIES ||<br /> |-<br /> | 0xC1100214 || Inout || 272 || TEGRA_DC_EXT_CONTROL_GET_OUTPUT_EDID ||<br /> |-<br /> | 0xC0040216 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT0 ||<br /> |-<br /> | 0xC0040217 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT1 ||<br /> |-<br /> | 0xC0100218 || Inout || 16 || TEGRA_DC_EXT_CONTROL_SET_EVENT2 ||<br /> |-<br /> | 0xC0100219 || Inout || 16 || TEGRA_DC_EXT_CONTROL_SET_EVENT3 ||<br /> |-<br /> | 0xC0040220 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT4 ||<br /> |-<br /> |}<br /> <br /> == /dev/nvdisp-disp0, /dev/nvdisp-disp1 ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40040201 || In || 4 || TEGRA_DC_EXT_GET_WINDOW ||<br /> |-<br /> | 0x40040202 || In || 4 || TEGRA_DC_EXT_PUT_WINDOW ||<br /> |-<br /> | 0xC4C80203 || In || 1224 || TEGRA_DC_EXT_FLIP ||<br /> |-<br /> | 0x80380204 || Out || 56 || TEGRA_DC_EXT_GET_MODE ||<br /> |-<br /> | 0x40380205 || Out || 56 || TEGRA_DC_EXT_SET_MODE ||<br /> |-<br /> | 0x430C0206 || In || 780 || TEGRA_DC_EXT_SET_LUT ||<br /> |-<br /> | 0x40010207 || In || 1 || TEGRA_DC_EXT_ENABLE_DISABLE_CRC ||<br /> |-<br /> | 0x80040208 || Out || 4 || TEGRA_DC_EXT_GET_CRC ||<br /> |-<br /> | 0x80040209 || Out || 4 || TEGRA_DC_EXT_GET_HEAD_STATUS ||<br /> |-<br /> | 0xC038020A || Inout || 56 || TEGRA_DC_EXT_VALIDATE_MODE ||<br /> |-<br /> | 0x4018020B || In || 24 || TEGRA_DC_EXT_SET_CSC ||<br /> |-<br /> | 0xC004020C || Inout || 4 || TEGRA_DC_EXT_GET_VBLANK_SYNCPT ||<br /> |-<br /> | 0x8040020D || Out || 64 || TEGRA_DC_EXT_GET_UNDERFLOWS ||<br /> |-<br /> | 0xC99A020E || Inout || 2458 || TEGRA_DC_EXT_SET_CMU ||<br /> |-<br /> | 0xC004020F || Inout || 4 || TEGRA_DC_EXT_DPMS ||<br /> |-<br /> | 0x80600210 || Out || 96 || TEGRA_DC_EXT_GET_AVI_INFOFRAME ||<br /> |-<br /> | 0x40600211 || In || 96 || TEGRA_DC_EXT_SET_AVI_INFOFRAME ||<br /> |-<br /> | 0xEBFC0215 || Inout || 11260 || TEGRA_DC_EXT_GET_MODE_DB ||<br /> |-<br /> | 0xC003021A || Inout || 3 || TEGRA_DC_EXT_PANEL_GET_VENDOR_ID ||<br /> |-<br /> | 0x803C021B || Out || 60 || TEGRA_DC_EXT_GET_MODE2 ||<br /> |-<br /> | 0x403C021C || In || 60 || TEGRA_DC_EXT_SET_MODE2 ||<br /> |-<br /> | 0xC03C021D || Inout || 60 || TEGRA_DC_EXT_VALIDATE_MODE2 ||<br /> |-<br /> | 0xEF20021E || Inout || 12064 || TEGRA_DC_EXT_GET_MODE_DB2 ||<br /> |-<br /> | 0xC004021F || Inout || 4 || TEGRA_DC_EXT_GET_WINMASK ||<br /> |-<br /> |}<br /> <br /> == /dev/nvcec-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40010300 || In || 1 || ||<br /> |-<br /> | 0x40010301 || In || 1 || NVCEC_CTRL_ENABLE ||<br /> |-<br /> | 0x804C0302 || Out || 76 || NVCEC_CTRL_GET_PADDR ||<br /> |-<br /> | 0x40040303 || In || 4 || NVCEC_CTRL_SET_LADDR ||<br /> |-<br /> | 0xC04C0304 || Inout || 76 || NVCEC_CTRL_WRITE ||<br /> |-<br /> | 0xC04C0305 || Inout || 76 || NVCEC_CTRL_READ ||<br /> |-<br /> | 0x804C0306 || Out || 76 || NVCEC_CTRL_GET_CONNECTION_STATUS ||<br /> |-<br /> | 0x804C0307 || Out || 76 || NVCEC_CTRL_GET_WRITE_STATUS ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhdcp_up-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC4880401 || Inout || 1160 || TEGRAIO_NVHDCP_READ_M ||<br /> |-<br /> | 0xC4880402 || Inout || 1160 || TEGRAIO_NVHDCP_READ_S ||<br /> |-<br /> | 0x40010403 || In || 1 || TEGRAIO_NVHDCP_ON_OFF ||<br /> |-<br /> |}<br /> <br /> == /dev/nvdcutil-disp0, /dev/nvdcutil-disp1 ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40010501 || In || 1 || ||<br /> |-<br /> | 0x40010502 || In || 1 || ||<br /> |-<br /> | 0x42040503 || In || 1056 || ||<br /> |-<br /> | 0x803C0504 || Out || 60 || NVDCUTIL_DISP_IOCTL_GET_DISPLAY_INFO ||<br /> |-<br /> |}<br /> <br /> == /dev/nvsched-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x00000601 || - || 0 ||NVSCHED_CTRL_ENABLE||<br /> |-<br /> | 0x00000602 || - || 0 ||NVSCHED_CTRL_DISABLE||<br /> |-<br /> | 0x40180603 || In || 1056 ||NVSCHED_CTRL_ADD_APPLICATION||<br /> |-<br /> | 0x40180604 || In || 60 ||NVSCHED_CTRL_UPDATE_APPLICATION||<br /> |-<br /> | 0x40080605 || In || 60 ||NVSCHED_CTRL_REMOVE_APPLICATION||<br /> |-<br /> | 0x80080606 || Out || 60 ||NVSCHED_CTRL_GET_ID||<br /> |-<br /> | 0x80080607 || Out || 60 ||NVSCHED_CTRL_ADD_RUNLIST||<br /> |-<br /> | 0x40180608 || In || 24 ||NVSCHED_CTRL_UPDATE_RUNLIST||<br /> |-<br /> | 0x40100609 || In || 16 ||NVSCHED_CTRL_LINK_RUNLIST||<br /> |-<br /> | 0x4010060A || In || 16 ||NVSCHED_CTRL_UNLINK_RUNLIST||<br /> |-<br /> | 0x4008060B || In || 8 ||NVSCHED_CTRL_REMOVE_RUNLIST||<br /> |-<br /> | 0x8001060C || Out || 1 ||NVSCHED_CTRL_HAS_OVERRUN_EVENT||<br /> |-<br /> | 0x8010060D || Out || 16 || ||<br /> |-<br /> | 0x400C060E || In || 12 ||NVSCHED_CTRL_PUT_CONDUCTOR_FLIP_FENCE||<br /> |-<br /> | 0x4008060F || In || 8 ||NVSCHED_CTRL_DETACH_APPLICATION||<br /> |-<br /> | 0x40100610 || In || 16 || ||<br /> |-<br /> | 0x40100611 || In || 16 || ||<br /> |-<br /> |}<br /> <br /> == /dev/nverpt-ctrl ==<br /> Added in firmware version 4.0.0.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC1280701 || Inout || 296 || ||<br /> |-<br /> | 0xCF580702 || Inout || 3928 || ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhost-as-gpu ==<br /> Each fd opened to this device creates an address space. An address space is then later bound with a channel.<br /> <br /> Once a nvgpu channel has been bound to an address space it cannot be unbound. There is no support for allowing an nvgpu channel to change from one address space to another (or from one to none).<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40044101 || In || 4 || [[#NVGPU_AS_IOCTL_BIND_CHANNEL]] ||<br /> |-<br /> | 0xC0184102 || Inout || 24 || [[#NVGPU_AS_IOCTL_ALLOC_SPACE]] ||<br /> |-<br /> | 0xC0104103 || Inout || 16 || [[#NVGPU_AS_IOCTL_FREE_SPACE]] ||<br /> |-<br /> | 0xC0184104 || Inout || 24 || [[#NVGPU_AS_IOCTL_MAP_BUFFER]] ||<br /> |-<br /> | 0xC0084105 || Inout || 8 || [[#NVGPU_AS_IOCTL_UNMAP_BUFFER]] ||<br /> |-<br /> | 0xC0284106 || Inout || 40 || [[#NVGPU_AS_IOCTL_MAP_BUFFER_EX]] ||<br /> |-<br /> | 0x40104107 || In || 16 || [[#NVGPU_AS_IOCTL_INITIALIZE]] ||<br /> |-<br /> | 0xC0404108 || Inout || 64 || [[#NVGPU_AS_IOCTL_GET_VA_REGIONS]] ||<br /> |-<br /> | 0x40284109 || In || 40 || [[#NVGPU_AS_IOCTL_INITIALIZE_EX]] ||<br /> |-<br /> | 0xC0??4114 || Inout || Variable || [[#NVGPU_AS_IOCTL_REMAP]] ||<br /> |}<br /> <br /> === NVGPU_AS_IOCTL_BIND_CHANNEL ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 fd;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_ALLOC_SPACE ===<br /> This one reserves pages in the device address space.<br /> <br /> struct {<br /> __in u32 pages;<br /> __in u32 page_size;<br /> __in u32 flags;<br /> u32 pad;<br /> union {<br /> __out u64 offset;<br /> __in u64 align;<br /> };<br /> };<br /> <br /> === NVGPU_AS_IOCTL_FREE_SPACE ===<br /> struct {<br /> __in u64 offset;<br /> __in u32 pages;<br /> __in u32 page_size;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_MAP_BUFFER ===<br /> Map a memory region in the device address space. Identical to Linux driver pretty much.<br /> <br /> On success, the mapped memory region is locked by having [[SVC#MemoryState]] bit34 set.<br /> <br /> struct {<br /> __in u32 flags; // bit0: fixed_offset, bit2: cacheable<br /> u32 pad;<br /> __in u32 nvmap_handle;<br /> __inout u32 page_size; // 0 means don't care<br /> union {<br /> __out u64 offset;<br /> __in u64 align;<br /> };<br /> };<br /> <br /> === NVGPU_AS_IOCTL_MAP_BUFFER_EX ===<br /> Map a memory region in the device address space. Identical to Linux driver pretty much.<br /> <br /> On success, the mapped memory region is locked by having [[SVC#MemoryState]] bit34 set.<br /> <br /> struct {<br /> __in u32 flags; // bit0: fixed_offset, bit2: cacheable<br /> __in u32 kind; // -1 is default<br /> __in u32 nvmap_handle;<br /> __inout u32 page_size; // 0 means don't care<br /> __in u64 buffer_offset;<br /> __in u64 mapping_size;<br /> __inout u64 offset;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_UNMAP_BUFFER ===<br /> Unmap a memory region from the device address space.<br /> <br /> struct {<br /> __in u64 offset;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_INITIALIZE ===<br /> Nintendo's custom implementation of NVGPU_GPU_IOCTL_ALLOC_AS (unavailable).<br /> <br /> struct {<br /> __in u32 big_page_size; // depends on GPU's available_big_page_sizes; 0=default<br /> __in s32 as_fd; // ignored; passes 0<br /> __in u32 flags; // ignored; passes 0<br /> __in u32 reserved; // ignored; passes 0<br /> };<br /> <br /> === NVGPU_AS_IOCTL_GET_VA_REGIONS ===<br /> Nintendo modified to get rid of pointer in struct.<br /> <br /> struct va_region {<br /> u64 offset;<br /> u32 page_size;<br /> u32 pad;<br /> u64 pages;<br /> };<br /> <br /> struct {<br /> u64 not_used; // (contained output user ptr on linux, ignored)<br /> __inout u32 bufsize; // forced to 2*sizeof(struct va_region)<br /> u32 pad;<br /> __out struct va_region regions[2];<br /> };<br /> <br /> === NVGPU_AS_IOCTL_INITIALIZE_EX ===<br /> Nintendo's custom implementation of NVGPU_GPU_IOCTL_ALLOC_AS (unavailable) with extra params.<br /> <br /> struct {<br /> __in u32 big_page_size; // depends on GPU's available_big_page_sizes; 0=default<br /> __in s32 as_fd; // ignored; passes 0<br /> __in u32 flags; // passes 0<br /> __in u32 reserved; // ignored; passes 0<br /> __in u64 unk0;<br /> __in u64 unk1;<br /> __in u64 unk2;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_REMAP ===<br /> Nintendo's custom implementation of address space remapping.<br /> <br /> struct remap_entry {<br /> __in u16 flags; // 0 or 4<br /> __in u16 kind; <br /> __in u32 nvmap_handle;<br /> __in u32 padding;<br /> __in u32 offset; // (alloc_space_offset &gt;&gt; 0x10)<br /> __in u32 pages; // alloc_space_pages<br /> };<br /> <br /> struct {<br /> __in struct remap_entry entries[];<br /> };<br /> <br /> == /dev/nvhost-dbg-gpu ==<br /> Returns [[#Errors|NotSupported]] on Open unless nn::settings::detail::GetDebugModeFlag is set.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40084401 || In || 8 || NVGPU_DBG_GPU_IOCTL_BIND_CHANNEL ||<br /> |-<br /> | 0xC0??4402 || Inout || Variable || NVGPU_DBG_GPU_IOCTL_REG_OPS ||<br /> |-<br /> | 0x40084403 || In || 8 || NVGPU_DBG_GPU_IOCTL_EVENTS_CTRL ||<br /> |-<br /> | 0x40044404 || In || 4 || NVGPU_DBG_GPU_IOCTL_POWERGATE ||<br /> |-<br /> | 0x40044405 || In || 4 || NVGPU_DBG_GPU_IOCTL_SMPC_CTXSW_MODE ||<br /> |-<br /> | 0xC0184407 || Inout || 24 || NVGPU_DBG_GPU_IOCTL_PERFBUF_MAP ||<br /> |-<br /> | 0x40084408 || In || 8 || NVGPU_DBG_GPU_IOCTL_PERFBUF_UNMAP ||<br /> |-<br /> | 0x40084409 || In || 8 || NVGPU_DBG_GPU_IOCTL_PC_SAMPLING ||<br /> |-<br /> | 0x4008440A || In || 8 || NVGPU_DBG_GPU_IOCTL_TIMEOUT ||<br /> |-<br /> | 0x8008440B || Out || 8 || NVGPU_DBG_GPU_IOCTL_GET_TIMEOUT ||<br /> |-<br /> | 0x8004440C || Out || 4 || NVGPU_DBG_GPU_IOCTL_GET_GR_CONTEXT_SIZE ||<br /> |-<br /> | 0x0000440D || None || 0 || NVGPU_DBG_GPU_IOCTL_GET_GR_CONTEXT (uses Ioctl3) ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhost-prof-gpu ==<br /> Returns [[#Errors|NotSupported]] on Open unless nn::settings::detail::GetDebugModeFlag is set.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |}<br /> <br /> == /dev/nvhost-ctrl-gpu ==<br /> This device is for global (context independent) operations on the gpu. <br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x80044701 || Out || 4 || [[#NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE]] ||<br /> |-<br /> | 0x80284702 || Out || 40 || [[#NVGPU_GPU_IOCTL_ZCULL_GET_INFO]] ||<br /> |-<br /> | 0x402C4703 || In || 44 || [[#NVGPU_GPU_IOCTL_ZBC_SET_TABLE]] ||<br /> |-<br /> | 0xC0344704 || Inout || 52 || [[#NVGPU_GPU_IOCTL_ZBC_QUERY_TABLE]] ||<br /> |-<br /> | 0xC0B04705 || Inout || 176 || [[#NVGPU_GPU_IOCTL_GET_CHARACTERISTICS]] ||<br /> |-<br /> | 0xC0184706 || Inout || 24 || NVGPU_GPU_IOCTL_GET_TPC_MASKS ||<br /> |-<br /> | 0x40084707 || In || 8 || [[#NVGPU_GPU_IOCTL_FLUSH_L2]] ||<br /> |-<br /> | 0x4008470E || In || 8 || NVGPU_GPU_IOCTL_SET_MMUDEBUG_MODE ||<br /> |-<br /> | 0x4010470F || In || 16 || NVGPU_GPU_IOCTL_SET_SM_DEBUG_MODE ||<br /> |-<br /> | 0xC0084710 || Inout || 8 || NVGPU_GPU_IOCTL_WAIT_FOR_PAUSE ||<br /> |-<br /> | 0x80084711 || Out || 8 || NVGPU_GPU_IOCTL_GET_TPC_EXCEPTION_EN_STATUS ||<br /> |-<br /> | 0x80084712 || Out || 8 || NVGPU_GPU_IOCTL_NUM_VSMS ||<br /> |-<br /> | 0xC0044713 || Inout || 4 || NVGPU_GPU_IOCTL_VSMS_MAPPING ||<br /> |-<br /> | 0x80084714 || Out || 8 || [[#NVGPU_GPU_IOCTL_ZBC_GET_ACTIVE_SLOT_MASK]] ||<br /> |-<br /> | 0x80044715 || Out || 4 || ||<br /> |-<br /> | 0x8018471A || Out || 24 || ||<br /> |-<br /> | 0xC008471B || Inout || 8 || NVGPU_GPU_IOCTL_GET_ERROR_CHANNEL_USER_DATA ||<br /> |-<br /> | 0xC010471C || Inout || 16 || NVGPU_GPU_IOCTL_GET_GPU_TIME ||<br /> |-<br /> | 0xC108471D || Inout || 264 || NVGPU_GPU_IOCTL_GET_CPU_TIME_CORRELATION_INFO ||<br /> |}<br /> <br /> === NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE ===<br /> Returns the GPU's ZCULL context size. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 size;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE ===<br /> Returns GPU's ZCULL information. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 width_align_pixels;<br /> __out u32 height_align_pixels;<br /> __out u32 pixel_squares_by_aliquots;<br /> __out u32 aliquot_total;<br /> __out u32 region_byte_multiplier;<br /> __out u32 region_header_size;<br /> __out u32 subregion_header_size;<br /> __out u32 subregion_width_align_pixels;<br /> __out u32 subregion_height_align_pixels;<br /> __out u32 subregion_count;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_SET_TABLE ===<br /> Sets the active ZBC table. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 color_ds[4];<br /> __in u32 color_l2[4];<br /> __in u32 depth;<br /> __in u32 format;<br /> __in u32 type; // 1=color, 2=depth<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_QUERY_TABLE ===<br /> Queries the active ZBC table. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 color_ds[4];<br /> __out u32 color_l2[4];<br /> __out u32 depth;<br /> __out u32 ref_cnt;<br /> __out u32 format;<br /> __out u32 type;<br /> __inout u32 index_size;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_GET_CHARACTERISTICS ===<br /> Returns the GPU characteristics. Modified to return inline data instead of using a pointer.<br /> <br /> struct gpu_characteristics {<br /> u32 arch; // 0x120 (NVGPU_GPU_ARCH_GM200)<br /> u32 impl; // 0xB (NVGPU_GPU_IMPL_GM20B)<br /> u32 rev; // 0xA1 (Revision A1)<br /> u32 num_gpc; // 0x1<br /> u64 l2_cache_size; // 0x40000<br /> u64 on_board_video_memory_size; // 0x0 (not used)<br /> u32 num_tpc_per_gpc; // 0x2<br /> u32 bus_type; // 0x20 (NVGPU_GPU_BUS_TYPE_AXI)<br /> u32 big_page_size; // 0x20000<br /> u32 compression_page_size; // 0x20000<br /> u32 pde_coverage_bit_count; // 0x1B<br /> u32 available_big_page_sizes; // 0x30000<br /> u32 gpc_mask; // 0x1<br /> u32 sm_arch_sm_version; // 0x503 (Maxwell Generation 5.0.3?)<br /> u32 sm_arch_spa_version; // 0x503 (Maxwell Generation 5.0.3?)<br /> u32 sm_arch_warp_count; // 0x80<br /> u32 gpu_va_bit_count; // 0x28<br /> u32 reserved; // NULL<br /> u64 flags; // 0x55<br /> u32 twod_class; // 0x902D (FERMI_TWOD_A)<br /> u32 threed_class; // 0xB197 (MAXWELL_B)<br /> u32 compute_class; // 0xB1C0 (MAXWELL_COMPUTE_B)<br /> u32 gpfifo_class; // 0xB06F (MAXWELL_CHANNEL_GPFIFO_A)<br /> u32 inline_to_memory_class; // 0xA140 (KEPLER_INLINE_TO_MEMORY_B)<br /> u32 dma_copy_class; // 0xB0B5 (MAXWELL_DMA_COPY_A)<br /> u32 max_fbps_count; // 0x1<br /> u32 fbp_en_mask; // 0x0 (disabled)<br /> u32 max_ltc_per_fbp; // 0x2<br /> u32 max_lts_per_ltc; // 0x1<br /> u32 max_tex_per_tpc; // 0x0 (not supported)<br /> u32 max_gpc_count; // 0x1<br /> u32 rop_l2_en_mask_0; // 0x21D70 (fuse_status_opt_rop_l2_fbp_r)<br /> u32 rop_l2_en_mask_1; // 0x0<br /> u64 chipname; // 0x6230326D67 (&quot;gm20b&quot;)<br /> u64 gr_compbit_store_base_hw; // 0x0 (not supported)<br /> };<br /> <br /> struct {<br /> __inout u64 gpu_characteristics_buf_size; // must not be NULL, but gets overwritten with 0xA0=max_size<br /> __in u64 gpu_characteristics_buf_addr; // ignored, but must not be NULL<br /> __out struct gpu_characteristics gc;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_FLUSH_L2 ===<br /> Flushes the GPU L2 cache.<br /> <br /> struct {<br /> __in u32 flush; // l2_flush | l2_invalidate &lt;&lt; 1 | fb_flush &lt;&lt; 2<br /> u32 reserved;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_GET_ACTIVE_SLOT_MASK ===<br /> Returns the mask value for a ZBC slot.<br /> <br /> struct {<br /> __out u32 slot; // always 0x07<br /> __out u32 mask;<br /> };<br /> <br /> == Channels ==<br /> Channels are a concept for NVIDIA hardware blocks that share a common interface.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Path || Name<br /> |-<br /> | /dev/nvhost-gpu ||<br /> |-<br /> | /dev/nvhost-vic || Video Image Compositor<br /> |-<br /> | /dev/nvhost-nvdec || Video Decoder<br /> |-<br /> | /dev/nvhost-nvjpg || JPEG Decoder<br /> |}<br /> <br /> == Channel Ioctls ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Size || Description || Notes<br /> |-<br /> | 0xC0??0001 || Variable || NVHOST_IOCTL_CHANNEL_SUBMIT ||<br /> |-<br /> | 0xC0080002 || 8 || NVHOST_IOCTL_CHANNEL_GET_SYNCPOINT ||<br /> |-<br /> | 0xC0080003 || 8 || NVHOST_IOCTL_CHANNEL_GET_WAITBASE ||<br /> |-<br /> | 0xC0080004 || 8 || NVHOST_IOCTL_CHANNEL_SET_TIMEOUT_EX ||<br /> |-<br /> | 0x40040007 || 4 || ||<br /> |-<br /> | 0x40080008 || 8 || NVHOST_IOCTL_CHANNEL_SET_CLK_RATE ||<br /> |-<br /> | 0xC0??0009 || Variable || NVHOST_IOCTL_CHANNEL_MAP_BUFFER ||<br /> |-<br /> | 0xC0??000A || Variable || NVHOST_IOCTL_CHANNEL_UNMAP_BUFFER ||<br /> |-<br /> | 0x00000013 || 0 || ||<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40044801 || 4 || [[#NVGPU_IOCTL_CHANNEL_SET_NVMAP_FD]] ||<br /> |-<br /> | 0x40044803 || 4 || NVGPU_IOCTL_CHANNEL_SET_TIMEOUT ||<br /> |-<br /> | 0x40084805 || 8 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO]] ||<br /> |-<br /> | 0xC0044807 || 4 || NVGPU_IOCTL_CHANNEL_CYCLE_STATS ||<br /> |-<br /> | 0xC0??4808 || Variable || [[#NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO]] ||<br /> |-<br /> | 0xC0104809 || 16 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_OBJ_CTX]] ||<br /> |-<br /> | 0xC010480B || 16 || [[#NVGPU_IOCTL_CHANNEL_ZCULL_BIND]] ||<br /> |-<br /> | 0xC018480C || 24 || [[#NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER]] ||<br /> |-<br /> | 0x4004480D || 4 || [[#NVGPU_IOCTL_CHANNEL_SET_PRIORITY]] ||<br /> |-<br /> | 0x0000480E || 0 || [[#NVGPU_IOCTL_CHANNEL_ENABLE]] ||<br /> |-<br /> | 0x0000480F || 0 || [[#NVGPU_IOCTL_CHANNEL_DISABLE]] ||<br /> |-<br /> | 0x00004810 || 0 || [[#NVGPU_IOCTL_CHANNEL_PREEMPT]] ||<br /> |-<br /> | 0x00004811 || 0 || [[#NVGPU_IOCTL_CHANNEL_FORCE_RESET]] ||<br /> |-<br /> | 0x40084812 || 8 || [[#NVGPU_IOCTL_CHANNEL_EVENT_ID_CONTROL]] ||<br /> |-<br /> | 0xC0104813 || 16 || NVGPU_IOCTL_CHANNEL_CYCLE_STATS_SNAPSHOT ||<br /> |-<br /> | 0x80804816 || 128 || NVGPU_IOCTL_CHANNEL_GET_ERROR_INFO ||<br /> |-<br /> | 0xC0104817 || 16 || [[#NVGPU_IOCTL_CHANNEL_GET_ERROR_NOTIFICATION]] ||<br /> |-<br /> | 0x40204818 || 32 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX]] ||<br /> |-<br /> | 0xC0??4819 || Variable || [[#NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_RETRY]] ||<br /> |-<br /> | 0xC020481A || 32 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX2]] ||<br /> |-<br /> | 0xC018481B || 24 || (uses Ioctl2) ||<br /> |-<br /> | 0xC018481C || 24 || (uses Ioctl2) ||<br /> |-<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40084714 || 8 || NVGPU_IOCTL_CHANNEL_SET_USER_DATA || Sets an unknown user context address<br /> |-<br /> | 0x80084715 || 8 || NVGPU_IOCTL_CHANNEL_GET_USER_DATA || Gets an unknown user context address<br /> |}<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_NVMAP_FD ===<br /> Binds a nvmap object to this channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 nvmap_fd;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO ===<br /> Allocates gpfifo entries. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 num_entries;<br /> __in u32 flags;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO ===<br /> Submits a gpfifo object. Modified to take inline entry objects instead of a pointer.<br /> <br /> struct fence {<br /> u32 id;<br /> u32 value;<br /> };<br /> <br /> struct gpfifo_entry {<br /> u32 entry0; // gpu_va_lo<br /> u32 entry1; // gpu_va_hi | (unk_0x02 &lt;&lt; 0x08) | (size &lt;&lt; 0x0A) | (unk_0x01 &lt;&lt; 0x1F)<br /> };<br /> <br /> struct {<br /> __in u64 gpfifo; // (ignored) pointer to gpfifo fence structs<br /> __in u32 num_entries; // number of fence objects being submitted<br /> __in u32 flags;<br /> __out struct fence fence_out; // returned new fence object for others to wait on<br /> __in struct gpfifo_entry entries[]; // depends on num_entries<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_OBJ_CTX ===<br /> Allocates a graphics context object. Modified to ignore object's ID.<br /> <br /> struct {<br /> __in u32 class_num; // 0x902D=2d, 0xB197=3d, 0xB1C0=compute, 0xA140=kepler, 0xB0B5=DMA, 0xB06F=channel_gpfifo<br /> __in u32 flags;<br /> __out u64 obj_id; // (ignored) used for FREE_OBJ_CTX ioctl, which is not supported<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ZCULL_BIND ===<br /> Binds a ZCULL context to the channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u64 gpu_va;<br /> __in u32 mode; // 0=global, 1=no_ctxsw, 2=separate_buffer, 3=part_of_regular_buf<br /> __in u32 padding;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER ===<br /> Initializes the error notifier for this channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u64 offset;<br /> __in u64 size;<br /> __in u32 mem; // nvmap object handle<br /> __in u32 padding;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_PRIORITY ===<br /> Change channel's priority. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 priority; // 0x32 is low, 0x64 is medium and 0x96 is high<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ENABLE ===<br /> Enables the current channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_DISABLE ===<br /> Disables the current channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_PREEMPT ===<br /> Clears the FIFO pipe for this channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_FORCE_RESET ===<br /> Forces the channel to reset. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_EVENT_ID_CONTROL ===<br /> Controls event notifications.<br /> <br /> struct {<br /> __in u32 cmd; // 0=disable, 1=enable, 2=clear<br /> __in u32 id;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_GET_ERROR_NOTIFICATION ===<br /> Returns the current error notification caught by the error notifier. Exclusive to the Switch.<br /> <br /> struct {<br /> __out u64 timestamp; // nanoseconds since Jan. 1, 1970<br /> __out u32 info32; // error code<br /> __out u16 info16; // additional error info<br /> __inout u16 status; // always 0xFFFF<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_RETRY ===<br /> Allocates gpfifo entries with additional parameters. Exclusive to the Switch.<br /> <br /> struct {<br /> __in u32 num_entries;<br /> __in u32 flags;<br /> __in u32 unk0; // 1 works<br /> __in u32 unk1;<br /> __in u32 unk2;<br /> __in u32 unk3;<br /> __in u32 unk4;<br /> __in u32 unk5;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_EX ===<br /> Submits a gpfifo object (async version). Exclusive to the Switch.<br /> <br /> struct {<br /> u64 __gpfifo; // in (pointer to gpfifo fence structs; ignored)<br /> u32 __num_entries; // in (number of fence objects being submitted)<br /> u32 __flags; // in<br /> struct fence __fence_out; // out (returned new fence object for others to wait on)<br /> struct gpfifo_entry __entries[]; // in (depends on __num_entries)<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX2 ===<br /> Allocates gpfifo entries with additional parameters and returns a fence. Exclusive to the Switch.<br /> <br /> struct {<br /> u32 __num_entries; // in<br /> u32 __flags; // in<br /> u32 __unk0; // in (1 works)<br /> struct fence __fence_out; // out<br /> u32 __unk1; // in<br /> u32 __unk2; // in<br /> u32 __unk3; // in<br /> };<br /> <br /> = nvmemp =<br /> NVIDIA memory profiler (this service is not available on retail units). <br /> /dev/nvhost-ctrl sends the ioctl NVHOST_IOCTL_CTRL_GET_CONFIG to check the config &quot;nv!NV_MEMORY_PROFILER&quot;. If config_str returns &quot;1&quot;, the applications attempts to talk to use nvmemp.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Cmd0<br /> |-<br /> | 1 || Cmd1<br /> |}<br /> <br /> = nvdrvdbg =<br /> This is &quot;nns::nvdrv::INvDrvDebugFSServices&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenLog]]<br /> |-<br /> | 1 || [[#CloseLog]]<br /> |-<br /> | 2 || [[#ReadLog]]<br /> |}<br /> <br /> == OpenLog ==<br /> Takes process handle. Returns an fd.<br /> <br /> == CloseLog ==<br /> Takes fd and closes it.<br /> <br /> == ReadLog ==<br /> Takes fd and reads log into a type-6 buffer.<br /> <br /> = Errors =<br /> Most nvidia driver commands return an error code apart from the normal return code.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Success<br /> |-<br /> | 1 || NotImplemented<br /> |-<br /> | 2 || NotSupported<br /> |-<br /> | 3 || NotInitialized<br /> |-<br /> | 4 || BadParameter<br /> |-<br /> | 5 || Timeout<br /> |-<br /> | 6 || InsufficientMemory<br /> |-<br /> | 7 || ReadOnlyAttribute<br /> |-<br /> | 8 || InvalidState<br /> |-<br /> | 9 || InvalidAddress<br /> |-<br /> | 0xA || InvalidSize<br /> |-<br /> | 0xB || BadValue<br /> |-<br /> | 0xD || AlreadyAllocated<br /> |-<br /> | 0xE || Busy<br /> |-<br /> | 0xF || ResourceError<br /> |-<br /> | 0x10 || CountMismatch<br /> |-<br /> | 0x1000 || SharedMemoryTooSmall<br /> |-<br /> | 0x30003 || FileOperationFailed<br /> |-<br /> | 0x30004 || DirOperationFailed<br /> |-<br /> | 0x3000F || IoctlFailed <br /> |-<br /> | 0x30010 || AccessDenied<br /> |-<br /> | 0x30013 || FileNotFound<br /> |-<br /> | 0xA000E || ModuleNotPresent<br /> |}<br /> <br /> = Panic =<br /> In some cases, a panic may occur. NV forces a crash by doing:<br /> (void *)0 = 0xCAFE;<br /> End result is that the system hangs with a white-screen.<br /> <br /> == Gpfifo Panic ==<br /> When the gpfifo data in the gpu_va buffers specified by the submitted gpfifo entries is invalid(?), eventually the user-process will be force-terminated after using the submit-gpfifo ioctl. It's unknown how exactly this is done.<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=NV_services&diff=3751 2018-02-15T23:40:11Z

<p>Shinyquagsire23: </p> <hr /> <div>The Switch uses a customized NVIDIA driver.<br /> <br /> = nvdrv, nvdrv:a, nvdrv:s, nvdrv:t =<br /> This is &quot;nns::nvdrv::INvDrvServices&quot;.<br /> <br /> Main NVIDIA driver service.<br /> <br /> Each service is used by:<br /> * &quot;nvdrv&quot;: regular applications<br /> * &quot;nvdrv:a&quot;: applets<br /> * &quot;nvdrv:s&quot;: sysmodules<br /> * &quot;nvdrv:t&quot;: factory titles<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#Open]]<br /> |-<br /> | 1 || [[#Ioctl]]<br /> |-<br /> | 2 || [[#Close]]<br /> |-<br /> | 3 || [[#Initialize]]<br /> |-<br /> | 4 || [[#QueryEvent]]<br /> |-<br /> | 5 || [[#MapSharedMem]]<br /> |-<br /> | 6 || [[#GetStatus]]<br /> |-<br /> | 7 || [[#ForceSetClientPID]]<br /> |-<br /> | 8 || [[#SetClientPID]]<br /> |-<br /> | 9 || [[#DumpGraphicsMemoryInfo]]<br /> |-<br /> | 10 || [3.0.0+]<br /> |-<br /> | 11 || [3.0.0+] [[#Ioctl2]]<br /> |-<br /> | 12 || [3.0.0+] [[#Ioctl3]]<br /> |-<br /> | 13 || [3.0.0+]<br /> |}<br /> <br /> == Open ==<br /> Takes a type-0x5 input buffer for the device-path. Returns the output 32bit '''fd''' and the u32 '''error_code'''.<br /> <br /> == Ioctl ==<br /> Takes a 32bit '''fd''', an u32 '''ioctl_cmd''', a type-0x21 input buffer, and a type-0x22 output buffer. Returns an output u32 ('''error_code''').<br /> <br /> The addr/size for send/recv buffers are only set when the associated direction bit is set in the ioctl cmd (addr/size = 0 otherwise).<br /> <br /> == Close ==<br /> Takes a 32bit '''fd'''. Returns an output u32 ('''error_code''').<br /> <br /> == Initialize ==<br /> Takes two copy-handles ('''current_process''' and '''transfer_memory''') and an input u32 ('''transfer_memory_size'''). Returns an output u32 ('''error_code''').<br /> <br /> Webkit applet creates the transfer-memory with perm = 0 and size 0x300000.<br /> <br /> == QueryEvent ==<br /> Takes two input u32s ('''fd''' and '''event_id'''), with the second word immediately after the first one. Returns an output u32 ('''error_code''') and a copy-handle ('''event_handle''').<br /> <br /> == MapSharedMem ==<br /> Takes a copy-handle ('''transfer_memory''') and two input u32s ('''fd''' and '''nvmap_handle'''). Returns an output u32 ('''error_code''').<br /> <br /> == GetStatus ==<br /> Takes no input. Returns 0x10-bytes and an output u32 ('''error_code''').<br /> <br /> == ForceSetClientPID ==<br /> Takes an input u64 which must [[IPC_Marshalling|match]] the user-process PID ([[AM_services|AppletResourceUserId]]). Returns an output u32 ('''error_code''').<br /> <br /> == SetClientPID ==<br /> Takes a PID-descriptor and an u64 which must [[IPC_Marshalling|match]] the user-process PID ([[AM_services|AppletResourceUserId]]). Returns an output u32 ('''error_code''').<br /> <br /> == DumpGraphicsMemoryInfo ==<br /> No input or output. Does nothing.<br /> <br /> == Cmd10 ==<br /> Takes a copy-handle and an input u32. Returns an output u32 ('''error_code''').<br /> <br /> == Ioctl2 ==<br /> Takes a type-0x21 buffer, a type-0x22 buffer, a type-0x21 buffer, and two input u32s. Returns an output u32 ('''error_code''').<br /> <br /> == Ioctl3 ==<br /> Same input/output as Ioctl2, except cmdhdr_word1 is 0x100B instead of 0xC0B.<br /> <br /> == Cmd13 ==<br /> Takes an input u64. No output.<br /> <br /> Official user-processes starting with 3.0.0 now use this at the end of nvdrv service init with value 0x1.<br /> <br /> = Ioctls =<br /> The ioctl number is generated with the following primitive (see Linux kernel):<br /> <br /> #define _IOC(inout, group, num, len) \<br /> (inout | ((len &amp; IOCPARM_MASK) &lt;&lt; 16) | ((group) &lt;&lt; 8) | (num))<br /> <br /> The following table contains known ioctls.<br /> <br /> == /dev/nvhost-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC0080014 || Inout || 8 || [[#NVHOST_IOCTL_CTRL_SYNCPT_READ]] ||<br /> |-<br /> | 0x40040015 || In || 4 || [[#NVHOST_IOCTL_CTRL_SYNCPT_INCR]] ||<br /> |-<br /> | 0xC00C0016 || Inout || 12 || [[#NVHOST_IOCTL_CTRL_SYNCPT_WAIT]] ||<br /> |-<br /> | 0x40080017 || In || 8 || [[#NVHOST_IOCTL_CTRL_MODULE_MUTEX]] ||<br /> |-<br /> | 0xC0180018 || Inout || 24 || [[#NVHOST_IOCTL_CTRL_MODULE_REGRDWR]] ||<br /> |-<br /> | 0xC0100019 || Inout || 16 || [[#NVHOST_IOCTL_CTRL_SYNCPT_WAITEX]] ||<br /> |-<br /> | 0xC008001A || Inout || 8 || [[#NVHOST_IOCTL_CTRL_SYNCPT_READ_MAX]] ||<br /> |-<br /> | 0xC183001B || Inout || 387 || [[#NVHOST_IOCTL_CTRL_GET_CONFIG]] ||<br /> |-<br /> | 0xC004001C || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_SIGNAL]] ||<br /> |-<br /> | 0xC010001D || Inout || 16 || [[#NVHOST_IOCTL_CTRL_EVENT_WAIT]] ||<br /> |-<br /> | 0xC010001E || Inout || 16 || [[#NVHOST_IOCTL_CTRL_EVENT_WAIT_ASYNC]] ||<br /> |-<br /> | 0xC004001F || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_REGISTER]] ||<br /> |-<br /> | 0xC0040020 || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_UNREGISTER]] ||<br /> |-<br /> | 0x40080021 || In || 8 || [[#NVHOST_IOCTL_CTRL_EVENT_KILL]] ||<br /> |}<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_READ ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_INCR ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_WAIT ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 thresh;<br /> __in s32 timeout;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_MODULE_MUTEX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 lock; // (0==unlock; 1==lock)<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_MODULE_REGRDWR ===<br /> Identical to Linux driver. Uses 32-bit version and doesn't work.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 num_offsets;<br /> __in u32 block_size;<br /> __in u32 offsets;<br /> __in u32 values;<br /> __in u32 write;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_WAITEX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 thresh;<br /> __in s32 timeout;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_READ_MAX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_GET_CONFIG ===<br /> Gets configured settings. Not available in production mode.<br /> <br /> struct {<br /> __in char domain_str[0x41]; // &quot;nv&quot;<br /> __in char param_str[0x41];<br /> __out char config_str[0x101];<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_SIGNAL ===<br /> Signals an user event. Exclusive to the Switch.<br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_WAIT ===<br /> Waits on an event. If waiting fails, returns error code 0x05 (Timeout) and sets '''value''' to (('''syncpt_id''' &lt;&lt; 0x10) | 0x10000000).<br /> <br /> Depending on '''threshold''', an '''user_event_id''' may be returned for using with other event ioctls.<br /> <br /> struct {<br /> __in u32 syncpt_id;<br /> __in u32 threshold;<br /> __in s32 timeout;<br /> __inout u32 value; // in=user_event_id (ignored); out=syncpt_value or user_event_id<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_WAIT_ASYNC ===<br /> Waits on an event (async version). If waiting fails, returns error code 0x0B (BadValue).<br /> <br /> Depending on '''threshold''', an '''user_event_id''' may be returned for using with other event ioctls.<br /> <br /> struct {<br /> __in u32 syncpt_id;<br /> __in u32 threshold;<br /> __in u32 timeout;<br /> __inout u32 value; // in=user_event_id (ignored); out=syncpt_value or user_event_id<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_REGISTER ===<br /> Registers an user event. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_UNREGISTER ===<br /> Unregisters an user event. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_KILL ===<br /> Kills user events. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u64 user_events; // 64-bit bitfield where each bit represents one event<br /> };<br /> <br /> == /dev/nvmap ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC0080101 || Inout || 8 || [[#NVMAP_IOC_CREATE]] ||<br /> |-<br /> | 0x00000102 || - || 0 || NVMAP_IOC_CLAIM || Returns NotSupported<br /> |-<br /> | 0xC0080103 || Inout || 8 || [[#NVMAP_IOC_FROM_ID]] ||<br /> |-<br /> | 0xC0200104 || Inout || 32 || [[#NVMAP_IOC_ALLOC]] ||<br /> |-<br /> | 0xC0180105 || Inout || 24 || [[#NVMAP_IOC_FREE]] ||<br /> |-<br /> | 0xC0280106 || Inout || 40 || NVMAP_IOC_MMAP || Returns NotSupported<br /> |-<br /> | 0xC0280107 || Inout || 40 || NVMAP_IOC_WRITE || Returns NotSupported<br /> |-<br /> | 0xC0280108 || Inout || 40 || NVMAP_IOC_READ || Returns NotSupported<br /> |-<br /> | 0xC00C0109 || Inout || 12 || [[#NVMAP_IOC_PARAM]] ||<br /> |-<br /> | 0xC010010A || Inout || 16 || NVMAP_IOC_PIN_MULT || Returns NotSupported<br /> |-<br /> | 0xC010010B || Inout || 16 || NVMAP_IOC_UNPIN_MULT || Returns NotSupported<br /> |-<br /> | 0xC008010C || Inout || 8 || NVMAP_IOC_CACHE || Returns NotSupported<br /> |-<br /> | 0xC004010D || Inout || 4 || || Returns NotSupported<br /> |-<br /> | 0xC008010E || Inout || 8 || [[#NVMAP_IOC_GET_ID]] ||<br /> |-<br /> | 0xC004010F || Inout || 4 || || Returns NotSupported<br /> |-<br /> | 0x40040110 || In || 4 || || Returns NotSupported<br /> |-<br /> | 0x00000111 || - || 0 || || Returns NotSupported<br /> |}<br /> <br /> === NVMAP_IOC_CREATE ===<br /> Creates an nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 size;<br /> __out u32 handle;<br /> };<br /> <br /> === NVMAP_IOC_FROM_ID ===<br /> Get handle to an existing nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 handle;<br /> };<br /> <br /> === NVMAP_IOC_ALLOC ===<br /> Allocate memory for the nvmap object. Nintendo extended this one with 16 bytes, and changed it from in to inout.<br /> <br /> struct {<br /> __in u32 handle;<br /> __in u32 heapmask;<br /> __in u32 flags; // (0=read-only, 1=read-write)<br /> __in u32 align;<br /> __in u8 kind;<br /> u8 pad[7];<br /> __in u64 addr;<br /> };<br /> <br /> === NVMAP_IOC_FREE ===<br /> This one is completely custom. Partly because the Linux driver passed the handle as the ioctl &quot;arg-ptr&quot;, and HIPC can't handle that voodoo.<br /> <br /> struct {<br /> __in u32 handle;<br /> u32 pad;<br /> __out u64 refcount;<br /> __out u32 size;<br /> __out u32 flags; // 1=NOT_FREED_YET<br /> };<br /> <br /> === NVMAP_IOC_PARAM ===<br /> Returns info about a nvmap object. Identical to Linux driver, but extended with further params.<br /> <br /> struct {<br /> __in u32 handle;<br /> __in u32 param; // 1=SIZE, 2=ALIGNMENT, 3=BASE (returns error), 4=HEAP (always 0x40000000), 5=KIND, 6=COMPR (unused)<br /> __out u32 result;<br /> };<br /> <br /> === NVMAP_IOC_GET_ID ===<br /> Returns an id for a nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 id; //~0 indicates error<br /> __in u32 handle;<br /> };<br /> <br /> == /dev/nvdisp-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x80040212 || Out || 4 || TEGRA_DC_EXT_CONTROL_GET_NUM_OUTPUTS ||<br /> |-<br /> | 0xC0140213 || Inout || 20 || TEGRA_DC_EXT_CONTROL_GET_OUTPUT_PROPERTIES ||<br /> |-<br /> | 0xC1100214 || Inout || 272 || TEGRA_DC_EXT_CONTROL_GET_OUTPUT_EDID ||<br /> |-<br /> | 0xC0040216 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT0 ||<br /> |-<br /> | 0xC0040217 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT1 ||<br /> |-<br /> | 0xC0100218 || Inout || 16 || TEGRA_DC_EXT_CONTROL_SET_EVENT2 ||<br /> |-<br /> | 0xC0100219 || Inout || 16 || TEGRA_DC_EXT_CONTROL_SET_EVENT3 ||<br /> |-<br /> | 0xC0040220 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT4 ||<br /> |-<br /> |}<br /> <br /> == /dev/nvdisp-disp0, /dev/nvdisp-disp1 ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40040201 || In || 4 || TEGRA_DC_EXT_GET_WINDOW ||<br /> |-<br /> | 0x40040202 || In || 4 || TEGRA_DC_EXT_PUT_WINDOW ||<br /> |-<br /> | 0xC4C80203 || In || 1224 || TEGRA_DC_EXT_FLIP ||<br /> |-<br /> | 0x80380204 || Out || 56 || TEGRA_DC_EXT_GET_MODE ||<br /> |-<br /> | 0x40380205 || Out || 56 || TEGRA_DC_EXT_SET_MODE ||<br /> |-<br /> | 0x430C0206 || In || 780 || TEGRA_DC_EXT_SET_LUT ||<br /> |-<br /> | 0x40010207 || In || 1 || TEGRA_DC_EXT_ENABLE_DISABLE_CRC ||<br /> |-<br /> | 0x80040208 || Out || 4 || TEGRA_DC_EXT_GET_CRC ||<br /> |-<br /> | 0x80040209 || Out || 4 || TEGRA_DC_EXT_GET_HEAD_STATUS ||<br /> |-<br /> | 0xC038020A || Inout || 56 || TEGRA_DC_EXT_VALIDATE_MODE ||<br /> |-<br /> | 0x4018020B || In || 24 || TEGRA_DC_EXT_SET_CSC ||<br /> |-<br /> | 0xC004020C || Inout || 4 || TEGRA_DC_EXT_GET_VBLANK_SYNCPT ||<br /> |-<br /> | 0x8040020D || Out || 64 || TEGRA_DC_EXT_GET_UNDERFLOWS ||<br /> |-<br /> | 0xC99A020E || Inout || 2458 || TEGRA_DC_EXT_SET_CMU ||<br /> |-<br /> | 0xC004020F || Inout || 4 || TEGRA_DC_EXT_DPMS ||<br /> |-<br /> | 0x80600210 || Out || 96 || TEGRA_DC_EXT_GET_AVI_INFOFRAME ||<br /> |-<br /> | 0x40600211 || In || 96 || TEGRA_DC_EXT_SET_AVI_INFOFRAME ||<br /> |-<br /> | 0xEBFC0215 || Inout || 11260 || TEGRA_DC_EXT_GET_MODE_DB ||<br /> |-<br /> | 0xC003021A || Inout || 3 || TEGRA_DC_EXT_PANEL_GET_VENDOR_ID ||<br /> |-<br /> | 0x803C021B || Out || 60 || TEGRA_DC_EXT_GET_MODE2 ||<br /> |-<br /> | 0x403C021C || In || 60 || TEGRA_DC_EXT_SET_MODE2 ||<br /> |-<br /> | 0xC03C021D || Inout || 60 || TEGRA_DC_EXT_VALIDATE_MODE2 ||<br /> |-<br /> | 0xEF20021E || Inout || 12064 || TEGRA_DC_EXT_GET_MODE_DB2 ||<br /> |-<br /> | 0xC004021F || Inout || 4 || TEGRA_DC_EXT_GET_WINMASK ||<br /> |-<br /> |}<br /> <br /> == /dev/nvcec-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40010300 || In || 1 || ||<br /> |-<br /> | 0x40010301 || In || 1 || NVCEC_CTRL_ENABLE ||<br /> |-<br /> | 0x804C0302 || Out || 76 || NVCEC_CTRL_GET_PADDR ||<br /> |-<br /> | 0x40040303 || In || 4 || NVCEC_CTRL_SET_LADDR ||<br /> |-<br /> | 0xC04C0304 || Inout || 76 || NVCEC_CTRL_WRITE ||<br /> |-<br /> | 0xC04C0305 || Inout || 76 || NVCEC_CTRL_READ ||<br /> |-<br /> | 0x804C0306 || Out || 76 || NVCEC_CTRL_GET_CONNECTION_STATUS ||<br /> |-<br /> | 0x804C0307 || Out || 76 || NVCEC_CTRL_GET_WRITE_STATUS ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhdcp_up-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC4880401 || Inout || 1160 || TEGRAIO_NVHDCP_READ_M ||<br /> |-<br /> | 0xC4880402 || Inout || 1160 || TEGRAIO_NVHDCP_READ_S ||<br /> |-<br /> | 0x40010403 || In || 1 || TEGRAIO_NVHDCP_ON_OFF ||<br /> |-<br /> |}<br /> <br /> == /dev/nvdcutil-disp0, /dev/nvdcutil-disp1 ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40010501 || In || 1 || ||<br /> |-<br /> | 0x40010502 || In || 1 || ||<br /> |-<br /> | 0x42040503 || In || 1056 || ||<br /> |-<br /> | 0x803C0504 || Out || 60 || NVDCUTIL_DISP_IOCTL_GET_DISPLAY_INFO ||<br /> |-<br /> |}<br /> <br /> == /dev/nvsched-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x00000601 || - || 0 || ||<br /> |-<br /> | 0x00000602 || - || 0 || ||<br /> |-<br /> | 0x40180603 || In || 1056 || ||<br /> |-<br /> | 0x40180604 || In || 60 || ||<br /> |-<br /> | 0x40080605 || In || 60 || ||<br /> |-<br /> | 0x80080606 || Out || 60 || ||<br /> |-<br /> | 0x80080607 || Out || 60 || ||<br /> |-<br /> | 0x40180608 || In || 24 || ||<br /> |-<br /> | 0x40100609 || In || 16 || ||<br /> |-<br /> | 0x4010060A || In || 16 || ||<br /> |-<br /> | 0x4008060B || In || 8 || ||<br /> |-<br /> | 0x8001060C || Out || 1 || ||<br /> |-<br /> | 0x8010060D || Out || 16 || ||<br /> |-<br /> | 0x400C060E || In || 12 || ||<br /> |-<br /> | 0x4008060F || In || 8 || ||<br /> |-<br /> | 0x40100610 || In || 16 || ||<br /> |-<br /> | 0x40100611 || In || 16 || ||<br /> |-<br /> |}<br /> <br /> == /dev/nverpt-ctrl ==<br /> Added in firmware version 4.0.0.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC1280701 || Inout || 296 || ||<br /> |-<br /> | 0xCF580702 || Inout || 3928 || ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhost-as-gpu ==<br /> Each fd opened to this device creates an address space. An address space is then later bound with a channel.<br /> <br /> Once a nvgpu channel has been bound to an address space it cannot be unbound. There is no support for allowing an nvgpu channel to change from one address space to another (or from one to none).<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40044101 || In || 4 || [[#NVGPU_AS_IOCTL_BIND_CHANNEL]] ||<br /> |-<br /> | 0xC0184102 || Inout || 24 || [[#NVGPU_AS_IOCTL_ALLOC_SPACE]] ||<br /> |-<br /> | 0xC0104103 || Inout || 16 || [[#NVGPU_AS_IOCTL_FREE_SPACE]] ||<br /> |-<br /> | 0xC0184104 || Inout || 24 || [[#NVGPU_AS_IOCTL_MAP_BUFFER]] ||<br /> |-<br /> | 0xC0084105 || Inout || 8 || [[#NVGPU_AS_IOCTL_UNMAP_BUFFER]] ||<br /> |-<br /> | 0xC0284106 || Inout || 40 || [[#NVGPU_AS_IOCTL_MAP_BUFFER_EX]] ||<br /> |-<br /> | 0x40104107 || In || 16 || [[#NVGPU_AS_IOCTL_INITIALIZE]] ||<br /> |-<br /> | 0xC0404108 || Inout || 64 || [[#NVGPU_AS_IOCTL_GET_VA_REGIONS]] ||<br /> |-<br /> | 0x40284109 || In || 40 || [[#NVGPU_AS_IOCTL_INITIALIZE_EX]] ||<br /> |-<br /> | 0xC0??4114 || Inout || Variable || [[#NVGPU_AS_IOCTL_REMAP]] ||<br /> |}<br /> <br /> === NVGPU_AS_IOCTL_BIND_CHANNEL ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 fd;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_ALLOC_SPACE ===<br /> This one reserves pages in the device address space.<br /> <br /> struct {<br /> __in u32 pages;<br /> __in u32 page_size;<br /> __in u32 flags;<br /> u32 pad;<br /> union {<br /> __out u64 offset;<br /> __in u64 align;<br /> };<br /> };<br /> <br /> === NVGPU_AS_IOCTL_FREE_SPACE ===<br /> struct {<br /> __in u64 offset;<br /> __in u32 pages;<br /> __in u32 page_size;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_MAP_BUFFER ===<br /> Map a memory region in the device address space. Identical to Linux driver pretty much.<br /> <br /> On success, the mapped memory region is locked by having [[SVC#MemoryState]] bit34 set.<br /> <br /> struct {<br /> __in u32 flags; // bit0: fixed_offset, bit2: cacheable<br /> u32 pad;<br /> __in u32 nvmap_handle;<br /> __inout u32 page_size; // 0 means don't care<br /> union {<br /> __out u64 offset;<br /> __in u64 align;<br /> };<br /> };<br /> <br /> === NVGPU_AS_IOCTL_MAP_BUFFER_EX ===<br /> Map a memory region in the device address space. Identical to Linux driver pretty much.<br /> <br /> On success, the mapped memory region is locked by having [[SVC#MemoryState]] bit34 set.<br /> <br /> struct {<br /> __in u32 flags; // bit0: fixed_offset, bit2: cacheable<br /> __in u32 kind; // -1 is default<br /> __in u32 nvmap_handle;<br /> __inout u32 page_size; // 0 means don't care<br /> __in u64 buffer_offset;<br /> __in u64 mapping_size;<br /> __inout u64 offset;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_UNMAP_BUFFER ===<br /> Unmap a memory region from the device address space.<br /> <br /> struct {<br /> __in u64 offset;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_INITIALIZE ===<br /> Nintendo's custom implementation of NVGPU_GPU_IOCTL_ALLOC_AS (unavailable).<br /> <br /> struct {<br /> __in u32 big_page_size; // depends on GPU's available_big_page_sizes; 0=default<br /> __in s32 as_fd; // ignored; passes 0<br /> __in u32 flags; // ignored; passes 0<br /> __in u32 reserved; // ignored; passes 0<br /> };<br /> <br /> === NVGPU_AS_IOCTL_GET_VA_REGIONS ===<br /> Nintendo modified to get rid of pointer in struct.<br /> <br /> struct va_region {<br /> u64 offset;<br /> u32 page_size;<br /> u32 pad;<br /> u64 pages;<br /> };<br /> <br /> struct {<br /> u64 not_used; // (contained output user ptr on linux, ignored)<br /> __inout u32 bufsize; // forced to 2*sizeof(struct va_region)<br /> u32 pad;<br /> __out struct va_region regions[2];<br /> };<br /> <br /> === NVGPU_AS_IOCTL_INITIALIZE_EX ===<br /> Nintendo's custom implementation of NVGPU_GPU_IOCTL_ALLOC_AS (unavailable) with extra params.<br /> <br /> struct {<br /> __in u32 big_page_size; // depends on GPU's available_big_page_sizes; 0=default<br /> __in s32 as_fd; // ignored; passes 0<br /> __in u32 flags; // passes 0<br /> __in u32 reserved; // ignored; passes 0<br /> __in u64 unk0;<br /> __in u64 unk1;<br /> __in u64 unk2;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_REMAP ===<br /> Nintendo's custom implementation of address space remapping.<br /> <br /> struct remap_entry {<br /> __in u16 flags; // 0 or 4<br /> __in u16 kind; <br /> __in u32 nvmap_handle;<br /> __in u32 padding;<br /> __in u32 offset; // (alloc_space_offset &gt;&gt; 0x10)<br /> __in u32 pages; // alloc_space_pages<br /> };<br /> <br /> struct {<br /> __in struct remap_entry entries[];<br /> };<br /> <br /> == /dev/nvhost-dbg-gpu ==<br /> Returns [[#Errors|NotSupported]] on Open unless nn::settings::detail::GetDebugModeFlag is set.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40084401 || In || 8 || NVGPU_DBG_GPU_IOCTL_BIND_CHANNEL ||<br /> |-<br /> | 0xC0??4402 || Inout || Variable || NVGPU_DBG_GPU_IOCTL_REG_OPS ||<br /> |-<br /> | 0x40084403 || In || 8 || NVGPU_DBG_GPU_IOCTL_EVENTS_CTRL ||<br /> |-<br /> | 0x40044404 || In || 4 || NVGPU_DBG_GPU_IOCTL_POWERGATE ||<br /> |-<br /> | 0x40044405 || In || 4 || NVGPU_DBG_GPU_IOCTL_SMPC_CTXSW_MODE ||<br /> |-<br /> | 0xC0184407 || Inout || 24 || NVGPU_DBG_GPU_IOCTL_PERFBUF_MAP ||<br /> |-<br /> | 0x40084408 || In || 8 || NVGPU_DBG_GPU_IOCTL_PERFBUF_UNMAP ||<br /> |-<br /> | 0x40084409 || In || 8 || NVGPU_DBG_GPU_IOCTL_PC_SAMPLING ||<br /> |-<br /> | 0x4008440A || In || 8 || NVGPU_DBG_GPU_IOCTL_TIMEOUT ||<br /> |-<br /> | 0x8008440B || Out || 8 || NVGPU_DBG_GPU_IOCTL_GET_TIMEOUT ||<br /> |-<br /> | 0x8004440C || Out || 4 || NVGPU_DBG_GPU_IOCTL_GET_GR_CONTEXT_SIZE ||<br /> |-<br /> | 0x0000440D || None || 0 || NVGPU_DBG_GPU_IOCTL_GET_GR_CONTEXT (uses Ioctl3) ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhost-prof-gpu ==<br /> Returns [[#Errors|NotSupported]] on Open unless nn::settings::detail::GetDebugModeFlag is set.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |}<br /> <br /> == /dev/nvhost-ctrl-gpu ==<br /> This device is for global (context independent) operations on the gpu. <br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x80044701 || Out || 4 || [[#NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE]] ||<br /> |-<br /> | 0x80284702 || Out || 40 || [[#NVGPU_GPU_IOCTL_ZCULL_GET_INFO]] ||<br /> |-<br /> | 0x402C4703 || In || 44 || [[#NVGPU_GPU_IOCTL_ZBC_SET_TABLE]] ||<br /> |-<br /> | 0xC0344704 || Inout || 52 || [[#NVGPU_GPU_IOCTL_ZBC_QUERY_TABLE]] ||<br /> |-<br /> | 0xC0B04705 || Inout || 176 || [[#NVGPU_GPU_IOCTL_GET_CHARACTERISTICS]] ||<br /> |-<br /> | 0xC0184706 || Inout || 24 || NVGPU_GPU_IOCTL_GET_TPC_MASKS ||<br /> |-<br /> | 0x40084707 || In || 8 || [[#NVGPU_GPU_IOCTL_FLUSH_L2]] ||<br /> |-<br /> | 0x4008470E || In || 8 || NVGPU_GPU_IOCTL_SET_MMUDEBUG_MODE ||<br /> |-<br /> | 0x4010470F || In || 16 || NVGPU_GPU_IOCTL_SET_SM_DEBUG_MODE ||<br /> |-<br /> | 0xC0084710 || Inout || 8 || NVGPU_GPU_IOCTL_WAIT_FOR_PAUSE ||<br /> |-<br /> | 0x80084711 || Out || 8 || NVGPU_GPU_IOCTL_GET_TPC_EXCEPTION_EN_STATUS ||<br /> |-<br /> | 0x80084712 || Out || 8 || NVGPU_GPU_IOCTL_NUM_VSMS ||<br /> |-<br /> | 0xC0044713 || Inout || 4 || NVGPU_GPU_IOCTL_VSMS_MAPPING ||<br /> |-<br /> | 0x80084714 || Out || 8 || [[#NVGPU_GPU_IOCTL_ZBC_GET_ACTIVE_SLOT_MASK]] ||<br /> |-<br /> | 0x80044715 || Out || 4 || ||<br /> |-<br /> | 0x8018471A || Out || 24 || ||<br /> |-<br /> | 0xC008471B || Inout || 8 || NVGPU_GPU_IOCTL_GET_ERROR_CHANNEL_USER_DATA ||<br /> |-<br /> | 0xC010471C || Inout || 16 || NVGPU_GPU_IOCTL_GET_GPU_TIME ||<br /> |-<br /> | 0xC108471D || Inout || 264 || NVGPU_GPU_IOCTL_GET_CPU_TIME_CORRELATION_INFO ||<br /> |}<br /> <br /> === NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE ===<br /> Returns the GPU's ZCULL context size. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 size;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE ===<br /> Returns GPU's ZCULL information. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 width_align_pixels;<br /> __out u32 height_align_pixels;<br /> __out u32 pixel_squares_by_aliquots;<br /> __out u32 aliquot_total;<br /> __out u32 region_byte_multiplier;<br /> __out u32 region_header_size;<br /> __out u32 subregion_header_size;<br /> __out u32 subregion_width_align_pixels;<br /> __out u32 subregion_height_align_pixels;<br /> __out u32 subregion_count;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_SET_TABLE ===<br /> Sets the active ZBC table. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 color_ds[4];<br /> __in u32 color_l2[4];<br /> __in u32 depth;<br /> __in u32 format;<br /> __in u32 type; // 1=color, 2=depth<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_QUERY_TABLE ===<br /> Queries the active ZBC table. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 color_ds[4];<br /> __out u32 color_l2[4];<br /> __out u32 depth;<br /> __out u32 ref_cnt;<br /> __out u32 format;<br /> __out u32 type;<br /> __inout u32 index_size;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_GET_CHARACTERISTICS ===<br /> Returns the GPU characteristics. Modified to return inline data instead of using a pointer.<br /> <br /> struct gpu_characteristics {<br /> u32 arch; // 0x120 (NVGPU_GPU_ARCH_GM200)<br /> u32 impl; // 0xB (NVGPU_GPU_IMPL_GM20B)<br /> u32 rev; // 0xA1 (Revision A1)<br /> u32 num_gpc; // 0x1<br /> u64 l2_cache_size; // 0x40000<br /> u64 on_board_video_memory_size; // 0x0 (not used)<br /> u32 num_tpc_per_gpc; // 0x2<br /> u32 bus_type; // 0x20 (NVGPU_GPU_BUS_TYPE_AXI)<br /> u32 big_page_size; // 0x20000<br /> u32 compression_page_size; // 0x20000<br /> u32 pde_coverage_bit_count; // 0x1B<br /> u32 available_big_page_sizes; // 0x30000<br /> u32 gpc_mask; // 0x1<br /> u32 sm_arch_sm_version; // 0x503 (Maxwell Generation 5.0.3?)<br /> u32 sm_arch_spa_version; // 0x503 (Maxwell Generation 5.0.3?)<br /> u32 sm_arch_warp_count; // 0x80<br /> u32 gpu_va_bit_count; // 0x28<br /> u32 reserved; // NULL<br /> u64 flags; // 0x55<br /> u32 twod_class; // 0x902D (FERMI_TWOD_A)<br /> u32 threed_class; // 0xB197 (MAXWELL_B)<br /> u32 compute_class; // 0xB1C0 (MAXWELL_COMPUTE_B)<br /> u32 gpfifo_class; // 0xB06F (MAXWELL_CHANNEL_GPFIFO_A)<br /> u32 inline_to_memory_class; // 0xA140 (KEPLER_INLINE_TO_MEMORY_B)<br /> u32 dma_copy_class; // 0xB0B5 (MAXWELL_DMA_COPY_A)<br /> u32 max_fbps_count; // 0x1<br /> u32 fbp_en_mask; // 0x0 (disabled)<br /> u32 max_ltc_per_fbp; // 0x2<br /> u32 max_lts_per_ltc; // 0x1<br /> u32 max_tex_per_tpc; // 0x0 (not supported)<br /> u32 max_gpc_count; // 0x1<br /> u32 rop_l2_en_mask_0; // 0x21D70 (fuse_status_opt_rop_l2_fbp_r)<br /> u32 rop_l2_en_mask_1; // 0x0<br /> u64 chipname; // 0x6230326D67 (&quot;gm20b&quot;)<br /> u64 gr_compbit_store_base_hw; // 0x0 (not supported)<br /> };<br /> <br /> struct {<br /> __inout u64 gpu_characteristics_buf_size; // must not be NULL, but gets overwritten with 0xA0=max_size<br /> __in u64 gpu_characteristics_buf_addr; // ignored, but must not be NULL<br /> __out struct gpu_characteristics gc;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_FLUSH_L2 ===<br /> Flushes the GPU L2 cache.<br /> <br /> struct {<br /> __in u32 flush; // l2_flush | l2_invalidate &lt;&lt; 1 | fb_flush &lt;&lt; 2<br /> u32 reserved;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_GET_ACTIVE_SLOT_MASK ===<br /> Returns the mask value for a ZBC slot.<br /> <br /> struct {<br /> __out u32 slot; // always 0x07<br /> __out u32 mask;<br /> };<br /> <br /> == Channels ==<br /> Channels are a concept for NVIDIA hardware blocks that share a common interface.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Path || Name<br /> |-<br /> | /dev/nvhost-gpu ||<br /> |-<br /> | /dev/nvhost-vic || Video Image Compositor<br /> |-<br /> | /dev/nvhost-nvdec || Video Decoder<br /> |-<br /> | /dev/nvhost-nvjpg || JPEG Decoder<br /> |}<br /> <br /> == Channel Ioctls ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Size || Description || Notes<br /> |-<br /> | 0xC0??0001 || Variable || NVHOST_IOCTL_CHANNEL_SUBMIT ||<br /> |-<br /> | 0xC0080002 || 8 || NVHOST_IOCTL_CHANNEL_GET_SYNCPOINT ||<br /> |-<br /> | 0xC0080003 || 8 || NVHOST_IOCTL_CHANNEL_GET_WAITBASE ||<br /> |-<br /> | 0xC0080004 || 8 || NVHOST_IOCTL_CHANNEL_SET_TIMEOUT_EX ||<br /> |-<br /> | 0x40040007 || 4 || ||<br /> |-<br /> | 0x40080008 || 8 || NVHOST_IOCTL_CHANNEL_SET_CLK_RATE ||<br /> |-<br /> | 0xC0??0009 || Variable || NVHOST_IOCTL_CHANNEL_MAP_BUFFER ||<br /> |-<br /> | 0xC0??000A || Variable || NVHOST_IOCTL_CHANNEL_UNMAP_BUFFER ||<br /> |-<br /> | 0x00000013 || 0 || ||<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40044801 || 4 || [[#NVGPU_IOCTL_CHANNEL_SET_NVMAP_FD]] ||<br /> |-<br /> | 0x40044803 || 4 || NVGPU_IOCTL_CHANNEL_SET_TIMEOUT ||<br /> |-<br /> | 0x40084805 || 8 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO]] ||<br /> |-<br /> | 0xC0044807 || 4 || NVGPU_IOCTL_CHANNEL_CYCLE_STATS ||<br /> |-<br /> | 0xC0??4808 || Variable || [[#NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO]] ||<br /> |-<br /> | 0xC0104809 || 16 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_OBJ_CTX]] ||<br /> |-<br /> | 0xC010480B || 16 || [[#NVGPU_IOCTL_CHANNEL_ZCULL_BIND]] ||<br /> |-<br /> | 0xC018480C || 24 || [[#NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER]] ||<br /> |-<br /> | 0x4004480D || 4 || [[#NVGPU_IOCTL_CHANNEL_SET_PRIORITY]] ||<br /> |-<br /> | 0x0000480E || 0 || [[#NVGPU_IOCTL_CHANNEL_ENABLE]] ||<br /> |-<br /> | 0x0000480F || 0 || [[#NVGPU_IOCTL_CHANNEL_DISABLE]] ||<br /> |-<br /> | 0x00004810 || 0 || [[#NVGPU_IOCTL_CHANNEL_PREEMPT]] ||<br /> |-<br /> | 0x00004811 || 0 || [[#NVGPU_IOCTL_CHANNEL_FORCE_RESET]] ||<br /> |-<br /> | 0x40084812 || 8 || [[#NVGPU_IOCTL_CHANNEL_EVENT_ID_CONTROL]] ||<br /> |-<br /> | 0xC0104813 || 16 || NVGPU_IOCTL_CHANNEL_CYCLE_STATS_SNAPSHOT ||<br /> |-<br /> | 0x80804816 || 128 || NVGPU_IOCTL_CHANNEL_GET_ERROR_INFO ||<br /> |-<br /> | 0xC0104817 || 16 || [[#NVGPU_IOCTL_CHANNEL_GET_ERROR_NOTIFICATION]] ||<br /> |-<br /> | 0x40204818 || 32 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX]] ||<br /> |-<br /> | 0xC0??4819 || Variable || [[#NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_RETRY]] ||<br /> |-<br /> | 0xC020481A || 32 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX2]] ||<br /> |-<br /> | 0xC018481B || 24 || (uses Ioctl2) ||<br /> |-<br /> | 0xC018481C || 24 || (uses Ioctl2) ||<br /> |-<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40084714 || 8 || NVGPU_IOCTL_CHANNEL_SET_USER_DATA || Sets an unknown user context address<br /> |-<br /> | 0x80084715 || 8 || NVGPU_IOCTL_CHANNEL_GET_USER_DATA || Gets an unknown user context address<br /> |}<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_NVMAP_FD ===<br /> Binds a nvmap object to this channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 nvmap_fd;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO ===<br /> Allocates gpfifo entries. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 num_entries;<br /> __in u32 flags;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO ===<br /> Submits a gpfifo object. Modified to take inline entry objects instead of a pointer.<br /> <br /> struct fence {<br /> u32 id;<br /> u32 value;<br /> };<br /> <br /> struct gpfifo_entry {<br /> u32 entry0; // gpu_va_lo<br /> u32 entry1; // gpu_va_hi | (unk_0x02 &lt;&lt; 0x08) | (size &lt;&lt; 0x0A) | (unk_0x01 &lt;&lt; 0x1F)<br /> };<br /> <br /> struct {<br /> __in u64 gpfifo; // (ignored) pointer to gpfifo fence structs<br /> __in u32 num_entries; // number of fence objects being submitted<br /> __in u32 flags;<br /> __out struct fence fence_out; // returned new fence object for others to wait on<br /> __in struct gpfifo_entry entries[]; // depends on num_entries<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_OBJ_CTX ===<br /> Allocates a graphics context object. Modified to ignore object's ID.<br /> <br /> struct {<br /> __in u32 class_num; // 0x902D=2d, 0xB197=3d, 0xB1C0=compute, 0xA140=kepler, 0xB0B5=DMA, 0xB06F=channel_gpfifo<br /> __in u32 flags;<br /> __out u64 obj_id; // (ignored) used for FREE_OBJ_CTX ioctl, which is not supported<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ZCULL_BIND ===<br /> Binds a ZCULL context to the channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u64 gpu_va;<br /> __in u32 mode; // 0=global, 1=no_ctxsw, 2=separate_buffer, 3=part_of_regular_buf<br /> __in u32 padding;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER ===<br /> Initializes the error notifier for this channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u64 offset;<br /> __in u64 size;<br /> __in u32 mem; // nvmap object handle<br /> __in u32 padding;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_PRIORITY ===<br /> Change channel's priority. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 priority; // 0x32 is low, 0x64 is medium and 0x96 is high<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ENABLE ===<br /> Enables the current channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_DISABLE ===<br /> Disables the current channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_PREEMPT ===<br /> Clears the FIFO pipe for this channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_FORCE_RESET ===<br /> Forces the channel to reset. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_EVENT_ID_CONTROL ===<br /> Controls event notifications.<br /> <br /> struct {<br /> __in u32 cmd; // 0=disable, 1=enable, 2=clear<br /> __in u32 id;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_GET_ERROR_NOTIFICATION ===<br /> Returns the current error notification caught by the error notifier. Exclusive to the Switch.<br /> <br /> struct {<br /> __out u64 timestamp; // nanoseconds since Jan. 1, 1970<br /> __out u32 info32; // error code<br /> __out u16 info16; // additional error info<br /> __inout u16 status; // always 0xFFFF<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_RETRY ===<br /> Allocates gpfifo entries with additional parameters. Exclusive to the Switch.<br /> <br /> struct {<br /> __in u32 num_entries;<br /> __in u32 flags;<br /> __in u32 unk0; // 1 works<br /> __in u32 unk1;<br /> __in u32 unk2;<br /> __in u32 unk3;<br /> __in u32 unk4;<br /> __in u32 unk5;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_EX ===<br /> Submits a gpfifo object (async version). Exclusive to the Switch.<br /> <br /> struct {<br /> u64 __gpfifo; // in (pointer to gpfifo fence structs; ignored)<br /> u32 __num_entries; // in (number of fence objects being submitted)<br /> u32 __flags; // in<br /> struct fence __fence_out; // out (returned new fence object for others to wait on)<br /> struct gpfifo_entry __entries[]; // in (depends on __num_entries)<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX2 ===<br /> Allocates gpfifo entries with additional parameters and returns a fence. Exclusive to the Switch.<br /> <br /> struct {<br /> u32 __num_entries; // in<br /> u32 __flags; // in<br /> u32 __unk0; // in (1 works)<br /> struct fence __fence_out; // out<br /> u32 __unk1; // in<br /> u32 __unk2; // in<br /> u32 __unk3; // in<br /> };<br /> <br /> = nvmemp =<br /> NVIDIA memory profiler (this service is not available on retail units). <br /> /dev/nvhost-ctrl sends the ioctl NVHOST_IOCTL_CTRL_GET_CONFIG to check the config &quot;nv!NV_MEMORY_PROFILER&quot;. If config_str returns &quot;1&quot;, the applications attempts to talk to use nvmemp.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Cmd0<br /> |-<br /> | 1 || Cmd1<br /> |}<br /> <br /> = nvdrvdbg =<br /> This is &quot;nns::nvdrv::INvDrvDebugFSServices&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenLog]]<br /> |-<br /> | 1 || [[#CloseLog]]<br /> |-<br /> | 2 || [[#ReadLog]]<br /> |}<br /> <br /> == OpenLog ==<br /> Takes process handle. Returns an fd.<br /> <br /> == CloseLog ==<br /> Takes fd and closes it.<br /> <br /> == ReadLog ==<br /> Takes fd and reads log into a type-6 buffer.<br /> <br /> = Errors =<br /> Most nvidia driver commands return an error code apart from the normal return code.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Success<br /> |-<br /> | 1 || NotImplemented<br /> |-<br /> | 2 || NotSupported<br /> |-<br /> | 3 || NotInitialized<br /> |-<br /> | 4 || BadParameter<br /> |-<br /> | 5 || Timeout<br /> |-<br /> | 6 || InsufficientMemory<br /> |-<br /> | 7 || ReadOnlyAttribute<br /> |-<br /> | 8 || InvalidState<br /> |-<br /> | 9 || InvalidAddress<br /> |-<br /> | 0xA || InvalidSize<br /> |-<br /> | 0xB || BadValue<br /> |-<br /> | 0xD || AlreadyAllocated<br /> |-<br /> | 0xE || Busy<br /> |-<br /> | 0xF || ResourceError<br /> |-<br /> | 0x10 || CountMismatch<br /> |-<br /> | 0x1000 || SharedMemoryTooSmall<br /> |-<br /> | 0x30003 || FileOperationFailed<br /> |-<br /> | 0x30004 || DirOperationFailed<br /> |-<br /> | 0x3000F || IoctlFailed <br /> |-<br /> | 0x30010 || AccessDenied<br /> |-<br /> | 0x30013 || FileNotFound<br /> |-<br /> | 0xA000E || ModuleNotPresent<br /> |}<br /> <br /> = Panic =<br /> In some cases, a panic may occur. NV forces a crash by doing:<br /> (void *)0 = 0xCAFE;<br /> End result is that the system hangs with a white-screen.<br /> <br /> == Gpfifo Panic ==<br /> When the gpfifo data in the gpu_va buffers specified by the submitted gpfifo entries is invalid(?), eventually the user-process will be force-terminated after using the submit-gpfifo ioctl. It's unknown how exactly this is done.<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=NV_services&diff=3750 2018-02-15T23:10:50Z

<p>Shinyquagsire23: Neato burrito.</p> <hr /> <div>The Switch uses a customized NVIDIA driver.<br /> <br /> = nvdrv, nvdrv:a, nvdrv:s, nvdrv:t =<br /> This is &quot;nns::nvdrv::INvDrvServices&quot;.<br /> <br /> Main NVIDIA driver service.<br /> <br /> Each service is used by:<br /> * &quot;nvdrv&quot;: regular applications<br /> * &quot;nvdrv:a&quot;: applets<br /> * &quot;nvdrv:s&quot;: sysmodules<br /> * &quot;nvdrv:t&quot;: factory titles<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#Open]]<br /> |-<br /> | 1 || [[#Ioctl]]<br /> |-<br /> | 2 || [[#Close]]<br /> |-<br /> | 3 || [[#Initialize]]<br /> |-<br /> | 4 || [[#QueryEvent]]<br /> |-<br /> | 5 || [[#MapSharedMem]]<br /> |-<br /> | 6 || [[#GetStatus]]<br /> |-<br /> | 7 || [[#ForceSetClientPID]]<br /> |-<br /> | 8 || [[#SetClientPID]]<br /> |-<br /> | 9 || [[#DumpGraphicsMemoryInfo]]<br /> |-<br /> | 10 || [3.0.0+]<br /> |-<br /> | 11 || [3.0.0+] [[#Ioctl2]]<br /> |-<br /> | 12 || [3.0.0+] [[#Ioctl3]]<br /> |-<br /> | 13 || [3.0.0+]<br /> |}<br /> <br /> == Open ==<br /> Takes a type-0x5 input buffer for the device-path. Returns the output 32bit '''fd''' and the u32 '''error_code'''.<br /> <br /> == Ioctl ==<br /> Takes a 32bit '''fd''', an u32 '''ioctl_cmd''', a type-0x21 input buffer, and a type-0x22 output buffer. Returns an output u32 ('''error_code''').<br /> <br /> The addr/size for send/recv buffers are only set when the associated direction bit is set in the ioctl cmd (addr/size = 0 otherwise).<br /> <br /> == Close ==<br /> Takes a 32bit '''fd'''. Returns an output u32 ('''error_code''').<br /> <br /> == Initialize ==<br /> Takes two copy-handles ('''current_process''' and '''transfer_memory''') and an input u32 ('''transfer_memory_size'''). Returns an output u32 ('''error_code''').<br /> <br /> Webkit applet creates the transfer-memory with perm = 0 and size 0x300000.<br /> <br /> == QueryEvent ==<br /> Takes two input u32s ('''fd''' and '''event_id'''), with the second word immediately after the first one. Returns an output u32 ('''error_code''') and a copy-handle ('''event_handle''').<br /> <br /> == MapSharedMem ==<br /> Takes a copy-handle ('''transfer_memory''') and two input u32s ('''fd''' and '''nvmap_handle'''). Returns an output u32 ('''error_code''').<br /> <br /> == GetStatus ==<br /> Takes no input. Returns 0x10-bytes and an output u32 ('''error_code''').<br /> <br /> == ForceSetClientPID ==<br /> Takes an input u64 which must [[IPC_Marshalling|match]] the user-process PID ([[AM_services|AppletResourceUserId]]). Returns an output u32 ('''error_code''').<br /> <br /> == SetClientPID ==<br /> Takes a PID-descriptor and an u64 which must [[IPC_Marshalling|match]] the user-process PID ([[AM_services|AppletResourceUserId]]). Returns an output u32 ('''error_code''').<br /> <br /> == DumpGraphicsMemoryInfo ==<br /> No input or output. Does nothing.<br /> <br /> == Cmd10 ==<br /> Takes a copy-handle and an input u32. Returns an output u32 ('''error_code''').<br /> <br /> == Ioctl2 ==<br /> Takes a type-0x21 buffer, a type-0x22 buffer, a type-0x21 buffer, and two input u32s. Returns an output u32 ('''error_code''').<br /> <br /> == Ioctl3 ==<br /> Same input/output as Ioctl2, except cmdhdr_word1 is 0x100B instead of 0xC0B.<br /> <br /> == Cmd13 ==<br /> Takes an input u64. No output.<br /> <br /> Official user-processes starting with 3.0.0 now use this at the end of nvdrv service init with value 0x1.<br /> <br /> = Ioctls =<br /> The ioctl number is generated with the following primitive (see Linux kernel):<br /> <br /> #define _IOC(inout, group, num, len) \<br /> (inout | ((len &amp; IOCPARM_MASK) &lt;&lt; 16) | ((group) &lt;&lt; 8) | (num))<br /> <br /> The following table contains known ioctls.<br /> <br /> == /dev/nvhost-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC0080014 || Inout || 8 || [[#NVHOST_IOCTL_CTRL_SYNCPT_READ]] ||<br /> |-<br /> | 0x40040015 || In || 4 || [[#NVHOST_IOCTL_CTRL_SYNCPT_INCR]] ||<br /> |-<br /> | 0xC00C0016 || Inout || 12 || [[#NVHOST_IOCTL_CTRL_SYNCPT_WAIT]] ||<br /> |-<br /> | 0x40080017 || In || 8 || [[#NVHOST_IOCTL_CTRL_MODULE_MUTEX]] ||<br /> |-<br /> | 0xC0180018 || Inout || 24 || [[#NVHOST_IOCTL_CTRL_MODULE_REGRDWR]] ||<br /> |-<br /> | 0xC0100019 || Inout || 16 || [[#NVHOST_IOCTL_CTRL_SYNCPT_WAITEX]] ||<br /> |-<br /> | 0xC008001A || Inout || 8 || [[#NVHOST_IOCTL_CTRL_SYNCPT_READ_MAX]] ||<br /> |-<br /> | 0xC183001B || Inout || 387 || [[#NVHOST_IOCTL_CTRL_GET_CONFIG]] ||<br /> |-<br /> | 0xC004001C || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_SIGNAL]] ||<br /> |-<br /> | 0xC010001D || Inout || 16 || [[#NVHOST_IOCTL_CTRL_EVENT_WAIT]] ||<br /> |-<br /> | 0xC010001E || Inout || 16 || [[#NVHOST_IOCTL_CTRL_EVENT_WAIT_ASYNC]] ||<br /> |-<br /> | 0xC004001F || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_REGISTER]] ||<br /> |-<br /> | 0xC0040020 || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_UNREGISTER]] ||<br /> |-<br /> | 0x40080021 || In || 8 || [[#NVHOST_IOCTL_CTRL_EVENT_KILL]] ||<br /> |}<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_READ ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_INCR ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_WAIT ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 thresh;<br /> __in s32 timeout;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_MODULE_MUTEX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 lock; // (0==unlock; 1==lock)<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_MODULE_REGRDWR ===<br /> Identical to Linux driver. Uses 32-bit version and doesn't work.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 num_offsets;<br /> __in u32 block_size;<br /> __in u32 offsets;<br /> __in u32 values;<br /> __in u32 write;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_WAITEX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 thresh;<br /> __in s32 timeout;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_READ_MAX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_GET_CONFIG ===<br /> Gets configured settings. Not available in production mode.<br /> <br /> struct {<br /> __in char domain_str[0x41]; // &quot;nv&quot;<br /> __in char param_str[0x41];<br /> __out char config_str[0x101];<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_SIGNAL ===<br /> Signals an user event. Exclusive to the Switch.<br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_WAIT ===<br /> Waits on an event. If waiting fails, returns error code 0x05 (Timeout) and sets '''value''' to (('''syncpt_id''' &lt;&lt; 0x10) | 0x10000000).<br /> <br /> Depending on '''threshold''', an '''user_event_id''' may be returned for using with other event ioctls.<br /> <br /> struct {<br /> __in u32 syncpt_id;<br /> __in u32 threshold;<br /> __in s32 timeout;<br /> __inout u32 value; // in=user_event_id (ignored); out=syncpt_value or user_event_id<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_WAIT_ASYNC ===<br /> Waits on an event (async version). If waiting fails, returns error code 0x0B (BadValue).<br /> <br /> Depending on '''threshold''', an '''user_event_id''' may be returned for using with other event ioctls.<br /> <br /> struct {<br /> __in u32 syncpt_id;<br /> __in u32 threshold;<br /> __in u32 timeout;<br /> __inout u32 value; // in=user_event_id (ignored); out=syncpt_value or user_event_id<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_REGISTER ===<br /> Registers an user event. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_UNREGISTER ===<br /> Unregisters an user event. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_KILL ===<br /> Kills user events. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u64 user_events; // 64-bit bitfield where each bit represents one event<br /> };<br /> <br /> == /dev/nvmap ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC0080101 || Inout || 8 || [[#NVMAP_IOC_CREATE]] ||<br /> |-<br /> | 0x00000102 || - || 0 || NVMAP_IOC_CLAIM || Returns NotSupported<br /> |-<br /> | 0xC0080103 || Inout || 8 || [[#NVMAP_IOC_FROM_ID]] ||<br /> |-<br /> | 0xC0200104 || Inout || 32 || [[#NVMAP_IOC_ALLOC]] ||<br /> |-<br /> | 0xC0180105 || Inout || 24 || [[#NVMAP_IOC_FREE]] ||<br /> |-<br /> | 0xC0280106 || Inout || 40 || NVMAP_IOC_MMAP || Returns NotSupported<br /> |-<br /> | 0xC0280107 || Inout || 40 || NVMAP_IOC_WRITE || Returns NotSupported<br /> |-<br /> | 0xC0280108 || Inout || 40 || NVMAP_IOC_READ || Returns NotSupported<br /> |-<br /> | 0xC00C0109 || Inout || 12 || [[#NVMAP_IOC_PARAM]] ||<br /> |-<br /> | 0xC010010A || Inout || 16 || NVMAP_IOC_PIN_MULT || Returns NotSupported<br /> |-<br /> | 0xC010010B || Inout || 16 || NVMAP_IOC_UNPIN_MULT || Returns NotSupported<br /> |-<br /> | 0xC008010C || Inout || 8 || NVMAP_IOC_CACHE || Returns NotSupported<br /> |-<br /> | 0xC004010D || Inout || 4 || || Returns NotSupported<br /> |-<br /> | 0xC008010E || Inout || 8 || [[#NVMAP_IOC_GET_ID]] ||<br /> |-<br /> | 0xC004010F || Inout || 4 || || Returns NotSupported<br /> |-<br /> | 0x40040110 || In || 4 || || Returns NotSupported<br /> |-<br /> | 0x00000111 || - || 0 || || Returns NotSupported<br /> |}<br /> <br /> === NVMAP_IOC_CREATE ===<br /> Creates an nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 size;<br /> __out u32 handle;<br /> };<br /> <br /> === NVMAP_IOC_FROM_ID ===<br /> Get handle to an existing nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 handle;<br /> };<br /> <br /> === NVMAP_IOC_ALLOC ===<br /> Allocate memory for the nvmap object. Nintendo extended this one with 16 bytes, and changed it from in to inout.<br /> <br /> struct {<br /> __in u32 handle;<br /> __in u32 heapmask;<br /> __in u32 flags; // (0=read-only, 1=read-write)<br /> __in u32 align;<br /> __in u8 kind;<br /> u8 pad[7];<br /> __in u64 addr;<br /> };<br /> <br /> === NVMAP_IOC_FREE ===<br /> This one is completely custom. Partly because the Linux driver passed the handle as the ioctl &quot;arg-ptr&quot;, and HIPC can't handle that voodoo.<br /> <br /> struct {<br /> __in u32 handle;<br /> u32 pad;<br /> __out u64 refcount;<br /> __out u32 size;<br /> __out u32 flags; // 1=NOT_FREED_YET<br /> };<br /> <br /> === NVMAP_IOC_PARAM ===<br /> Returns info about a nvmap object. Identical to Linux driver, but extended with further params.<br /> <br /> struct {<br /> __in u32 handle;<br /> __in u32 param; // 1=SIZE, 2=ALIGNMENT, 3=BASE (returns error), 4=HEAP (always 0x40000000), 5=KIND, 6=COMPR (unused)<br /> __out u32 result;<br /> };<br /> <br /> === NVMAP_IOC_GET_ID ===<br /> Returns an id for a nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 id; //~0 indicates error<br /> __in u32 handle;<br /> };<br /> <br /> == /dev/nvdisp-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x80040212 || Out || 4 || TEGRA_DC_EXT_CONTROL_GET_NUM_OUTPUTS ||<br /> |-<br /> | 0xC0140213 || Inout || 20 || TEGRA_DC_EXT_CONTROL_GET_OUTPUT_PROPERTIES ||<br /> |-<br /> | 0xC1100214 || Inout || 272 || TEGRA_DC_EXT_CONTROL_GET_OUTPUT_EDID ||<br /> |-<br /> | 0xC0040216 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT0 ||<br /> |-<br /> | 0xC0040217 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT1 ||<br /> |-<br /> | 0xC0100218 || Inout || 16 || TEGRA_DC_EXT_CONTROL_SET_EVENT2 ||<br /> |-<br /> | 0xC0100219 || Inout || 16 || TEGRA_DC_EXT_CONTROL_SET_EVENT3 ||<br /> |-<br /> | 0xC0040220 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT4 ||<br /> |-<br /> |}<br /> <br /> == /dev/nvdisp-disp0, /dev/nvdisp-disp1 ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40040201 || In || 4 || TEGRA_DC_EXT_GET_WINDOW ||<br /> |-<br /> | 0x40040202 || In || 4 || TEGRA_DC_EXT_PUT_WINDOW ||<br /> |-<br /> | 0xC4C80203 || In || 1224 || TEGRA_DC_EXT_FLIP ||<br /> |-<br /> | 0x80380204 || Out || 56 || TEGRA_DC_EXT_GET_MODE ||<br /> |-<br /> | 0x40380205 || Out || 56 || TEGRA_DC_EXT_SET_MODE ||<br /> |-<br /> | 0x430C0206 || In || 780 || TEGRA_DC_EXT_SET_LUT ||<br /> |-<br /> | 0x40010207 || In || 1 || TEGRA_DC_EXT_ENABLE_DISABLE_CRC ||<br /> |-<br /> | 0x80040208 || Out || 4 || TEGRA_DC_EXT_GET_CRC ||<br /> |-<br /> | 0x80040209 || Out || 4 || TEGRA_DC_EXT_GET_HEAD_STATUS ||<br /> |-<br /> | 0xC038020A || Inout || 56 || TEGRA_DC_EXT_VALIDATE_MODE ||<br /> |-<br /> | 0x4018020B || In || 24 || TEGRA_DC_EXT_SET_CSC ||<br /> |-<br /> | 0xC004020C || Inout || 4 || TEGRA_DC_EXT_GET_VBLANK_SYNCPT ||<br /> |-<br /> | 0x8040020D || Out || 64 || TEGRA_DC_EXT_GET_UNDERFLOWS ||<br /> |-<br /> | 0xC99A020E || Inout || 2458 || TEGRA_DC_EXT_SET_CMU ||<br /> |-<br /> | 0xC004020F || Inout || 4 || TEGRA_DC_EXT_DPMS ||<br /> |-<br /> | 0x80600210 || Out || 96 || TEGRA_DC_EXT_GET_AVI_INFOFRAME ||<br /> |-<br /> | 0x40600211 || In || 96 || TEGRA_DC_EXT_SET_AVI_INFOFRAME ||<br /> |-<br /> | 0xEBFC0215 || Inout || 11260 || TEGRA_DC_EXT_GET_MODE_DB ||<br /> |-<br /> | 0xC003021A || Inout || 3 || TEGRA_DC_EXT_PANEL_GET_VENDOR_ID ||<br /> |-<br /> | 0x803C021B || Out || 60 || TEGRA_DC_EXT_GET_MODE2 ||<br /> |-<br /> | 0x403C021C || In || 60 || TEGRA_DC_EXT_SET_MODE2 ||<br /> |-<br /> | 0xC03C021D || Inout || 60 || TEGRA_DC_EXT_VALIDATE_MODE2 ||<br /> |-<br /> | 0xEF20021E || Inout || 12064 || TEGRA_DC_EXT_GET_MODE_DB2 ||<br /> |-<br /> | 0xC004021F || Inout || 4 || TEGRA_DC_EXT_GET_WINMASK ||<br /> |-<br /> |}<br /> <br /> == /dev/nvcec-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40010300 || In || 1 || ||<br /> |-<br /> | 0x40010301 || In || 1 || NVCEC_CTRL_ENABLE ||<br /> |-<br /> | 0x804C0302 || Out || 76 || NVCEC_CTRL_GET_PADDR ||<br /> |-<br /> | 0x40040303 || In || 4 || NVCEC_CTRL_SET_LADDR ||<br /> |-<br /> | 0xC04C0304 || Inout || 76 || NVCEC_CTRL_WRITE ||<br /> |-<br /> | 0xC04C0305 || Inout || 76 || NVCEC_CTRL_READ ||<br /> |-<br /> | 0x804C0306 || Out || 76 || NVCEC_CTRL_GET_CONNECTION_STATUS ||<br /> |-<br /> | 0x804C0307 || Out || 76 || NVCEC_CTRL_GET_WRITE_STATUS ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhdcp_up-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC4880401 || Inout || 1160 || TEGRAIO_NVHDCP_READ_M ||<br /> |-<br /> | 0xC4880402 || Inout || 1160 || TEGRAIO_NVHDCP_READ_S ||<br /> |-<br /> | 0x40010403 || In || 1 || TEGRAIO_NVHDCP_ON_OFF ||<br /> |-<br /> |}<br /> <br /> == /dev/nvdcutil-disp0, /dev/nvdcutil-disp1 ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40010501 || In || 1 || ||<br /> |-<br /> | 0x40010502 || In || 1 || ||<br /> |-<br /> | 0x42040503 || In || 1056 || ||<br /> |-<br /> | 0x803C0504 || Out || 60 || NVDCUTIL_DISP_IOCTL_GET_DISPLAY_INFO ||<br /> |-<br /> |}<br /> <br /> == /dev/nvsched-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x00000601 || - || 0 || ||<br /> |-<br /> | 0x00000602 || - || 0 || ||<br /> |-<br /> | 0x40180603 || In || 1056 || ||<br /> |-<br /> | 0x40180604 || In || 60 || ||<br /> |-<br /> | 0x40080605 || In || 60 || ||<br /> |-<br /> | 0x80080606 || Out || 60 || ||<br /> |-<br /> | 0x80080607 || Out || 60 || ||<br /> |-<br /> | 0x40180608 || In || 24 || ||<br /> |-<br /> | 0x40100609 || In || 16 || ||<br /> |-<br /> | 0x4010060A || In || 16 || ||<br /> |-<br /> | 0x4008060B || In || 8 || ||<br /> |-<br /> | 0x8001060C || Out || 1 || ||<br /> |-<br /> | 0x8010060D || Out || 16 || ||<br /> |-<br /> | 0x400C060E || In || 12 || ||<br /> |-<br /> | 0x4008060F || In || 8 || ||<br /> |-<br /> | 0x40100610 || In || 16 || ||<br /> |-<br /> | 0x40100611 || In || 16 || ||<br /> |-<br /> |}<br /> <br /> == /dev/nverpt-ctrl ==<br /> Added in firmware version 4.0.0.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC1280701 || Inout || 296 || ||<br /> |-<br /> | 0xCF580702 || Inout || 3928 || ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhost-as-gpu ==<br /> Each fd opened to this device creates an address space. An address space is then later bound with a channel.<br /> <br /> Once a nvgpu channel has been bound to an address space it cannot be unbound. There is no support for allowing an nvgpu channel to change from one address space to another (or from one to none).<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40044101 || In || 4 || [[#NVGPU_AS_IOCTL_BIND_CHANNEL]] ||<br /> |-<br /> | 0xC0184102 || Inout || 24 || [[#NVGPU_AS_IOCTL_ALLOC_SPACE]] ||<br /> |-<br /> | 0xC0104103 || Inout || 16 || [[#NVGPU_AS_IOCTL_FREE_SPACE]] ||<br /> |-<br /> | 0xC0184104 || Inout || 24 || [[#NVGPU_AS_IOCTL_MAP_BUFFER]] ||<br /> |-<br /> | 0xC0084105 || Inout || 8 || [[#NVGPU_AS_IOCTL_UNMAP_BUFFER]] ||<br /> |-<br /> | 0xC0284106 || Inout || 40 || [[#NVGPU_AS_IOCTL_MAP_BUFFER_EX]] ||<br /> |-<br /> | 0x40104107 || In || 16 || [[#NVGPU_AS_IOCTL_INITIALIZE]] ||<br /> |-<br /> | 0xC0404108 || Inout || 64 || [[#NVGPU_AS_IOCTL_GET_VA_REGIONS]] ||<br /> |-<br /> | 0x40284109 || In || 40 || [[#NVGPU_AS_IOCTL_INITIALIZE_EX]] ||<br /> |-<br /> | 0xC0??4114 || Inout || Variable || [[#NVGPU_AS_IOCTL_REMAP]] ||<br /> |}<br /> <br /> === NVGPU_AS_IOCTL_BIND_CHANNEL ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 fd;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_ALLOC_SPACE ===<br /> This one reserves pages in the device address space.<br /> <br /> struct {<br /> __in u32 pages;<br /> __in u32 page_size;<br /> __in u32 flags;<br /> u32 pad;<br /> union {<br /> __out u64 offset;<br /> __in u64 align;<br /> };<br /> };<br /> <br /> === NVGPU_AS_IOCTL_FREE_SPACE ===<br /> struct {<br /> __in u64 offset;<br /> __in u32 pages;<br /> __in u32 page_size;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_MAP_BUFFER ===<br /> Map a memory region in the device address space. Identical to Linux driver pretty much.<br /> <br /> On success, the mapped memory region is locked by having [[SVC#MemoryState]] bit34 set.<br /> <br /> struct {<br /> __in u32 flags; // bit0: fixed_offset, bit2: cacheable<br /> u32 pad;<br /> __in u32 nvmap_handle;<br /> __inout u32 page_size; // 0 means don't care<br /> union {<br /> __out u64 offset;<br /> __in u64 align;<br /> };<br /> };<br /> <br /> === NVGPU_AS_IOCTL_MAP_BUFFER_EX ===<br /> Map a memory region in the device address space. Identical to Linux driver pretty much.<br /> <br /> On success, the mapped memory region is locked by having [[SVC#MemoryState]] bit34 set.<br /> <br /> struct {<br /> __in u32 flags; // bit0: fixed_offset, bit2: cacheable<br /> __in u32 kind; // -1 is default<br /> __in u32 nvmap_handle;<br /> __inout u32 page_size; // 0 means don't care<br /> __in u64 buffer_offset;<br /> __in u64 mapping_size;<br /> __inout u64 offset;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_UNMAP_BUFFER ===<br /> Unmap a memory region from the device address space.<br /> <br /> struct {<br /> __in u64 offset;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_INITIALIZE ===<br /> Nintendo's custom implementation of NVGPU_GPU_IOCTL_ALLOC_AS (unavailable).<br /> <br /> struct {<br /> __in u32 big_page_size; // depends on GPU's available_big_page_sizes; 0=default<br /> __in s32 as_fd; // ignored; passes 0<br /> __in u32 flags; // ignored; passes 0<br /> __in u32 reserved; // ignored; passes 0<br /> };<br /> <br /> === NVGPU_AS_IOCTL_GET_VA_REGIONS ===<br /> Nintendo modified to get rid of pointer in struct.<br /> <br /> struct va_region {<br /> u64 offset;<br /> u32 page_size;<br /> u32 pad;<br /> u64 pages;<br /> };<br /> <br /> struct {<br /> u64 not_used; // (contained output user ptr on linux, ignored)<br /> __inout u32 bufsize; // forced to 2*sizeof(struct va_region)<br /> u32 pad;<br /> __out struct va_region regions[2];<br /> };<br /> <br /> === NVGPU_AS_IOCTL_INITIALIZE_EX ===<br /> Nintendo's custom implementation of NVGPU_GPU_IOCTL_ALLOC_AS (unavailable) with extra params.<br /> <br /> struct {<br /> __in u32 big_page_size; // depends on GPU's available_big_page_sizes; 0=default<br /> __in s32 as_fd; // ignored; passes 0<br /> __in u32 flags; // passes 0<br /> __in u32 reserved; // ignored; passes 0<br /> __in u64 unk0;<br /> __in u64 unk1;<br /> __in u64 unk2;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_REMAP ===<br /> Nintendo's custom implementation of address space remapping.<br /> <br /> struct remap_entry {<br /> __in u16 flags; // 0 or 4<br /> __in u16 kind; <br /> __in u32 nvmap_handle;<br /> __in u32 padding;<br /> __in u32 offset; // (alloc_space_offset &gt;&gt; 0x10)<br /> __in u32 pages; // alloc_space_pages<br /> };<br /> <br /> struct {<br /> __in struct remap_entry entries[];<br /> };<br /> <br /> == /dev/nvhost-dbg-gpu ==<br /> Returns [[#Errors|NotSupported]] on Open unless nn::settings::detail::GetDebugModeFlag is set.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40084401 || In || 8 || NVGPU_DBG_GPU_IOCTL_BIND_CHANNEL ||<br /> |-<br /> | 0xC0??4402 || Inout || Variable || NVGPU_DBG_GPU_IOCTL_REG_OPS ||<br /> |-<br /> | 0x40084403 || In || 8 || NVGPU_DBG_GPU_IOCTL_EVENTS_CTRL ||<br /> |-<br /> | 0x40044404 || In || 4 || NVGPU_DBG_GPU_IOCTL_POWERGATE ||<br /> |-<br /> | 0x40044405 || In || 4 || NVGPU_DBG_GPU_IOCTL_SMPC_CTXSW_MODE ||<br /> |-<br /> | 0xC0184407 || Inout || 24 || NVGPU_DBG_GPU_IOCTL_PERFBUF_MAP ||<br /> |-<br /> | 0x40084408 || In || 8 || NVGPU_DBG_GPU_IOCTL_PERFBUF_UNMAP ||<br /> |-<br /> | 0x40084409 || In || 8 || NVGPU_DBG_GPU_IOCTL_PC_SAMPLING ||<br /> |-<br /> | 0x4008440A || In || 8 || NVGPU_DBG_GPU_IOCTL_TIMEOUT ||<br /> |-<br /> | 0x8008440B || Out || 8 || NVGPU_DBG_GPU_IOCTL_GET_TIMEOUT ||<br /> |-<br /> | 0x8004440C || Out || 4 || NVGPU_DBG_GPU_IOCTL_GET_GR_CONTEXT_SIZE ||<br /> |-<br /> | 0x0000440D || None || 0 || NVGPU_DBG_GPU_IOCTL_GET_GR_CONTEXT (uses Ioctl3) ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhost-prof-gpu-open ==<br /> Returns [[#Errors|NotSupported]] on Open unless nn::settings::detail::GetDebugModeFlag is set.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |}<br /> <br /> == /dev/nvhost-ctrl-gpu ==<br /> This device is for global (context independent) operations on the gpu. <br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x80044701 || Out || 4 || [[#NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE]] ||<br /> |-<br /> | 0x80284702 || Out || 40 || [[#NVGPU_GPU_IOCTL_ZCULL_GET_INFO]] ||<br /> |-<br /> | 0x402C4703 || In || 44 || [[#NVGPU_GPU_IOCTL_ZBC_SET_TABLE]] ||<br /> |-<br /> | 0xC0344704 || Inout || 52 || [[#NVGPU_GPU_IOCTL_ZBC_QUERY_TABLE]] ||<br /> |-<br /> | 0xC0B04705 || Inout || 176 || [[#NVGPU_GPU_IOCTL_GET_CHARACTERISTICS]] ||<br /> |-<br /> | 0xC0184706 || Inout || 24 || NVGPU_GPU_IOCTL_GET_TPC_MASKS ||<br /> |-<br /> | 0x40084707 || In || 8 || [[#NVGPU_GPU_IOCTL_FLUSH_L2]] ||<br /> |-<br /> | 0x4008470E || In || 8 || NVGPU_GPU_IOCTL_SET_MMUDEBUG_MODE ||<br /> |-<br /> | 0x4010470F || In || 16 || NVGPU_GPU_IOCTL_SET_SM_DEBUG_MODE ||<br /> |-<br /> | 0xC0084710 || Inout || 8 || NVGPU_GPU_IOCTL_WAIT_FOR_PAUSE ||<br /> |-<br /> | 0x80084711 || Out || 8 || NVGPU_GPU_IOCTL_GET_TPC_EXCEPTION_EN_STATUS ||<br /> |-<br /> | 0x80084712 || Out || 8 || NVGPU_GPU_IOCTL_NUM_VSMS ||<br /> |-<br /> | 0xC0044713 || Inout || 4 || NVGPU_GPU_IOCTL_VSMS_MAPPING ||<br /> |-<br /> | 0x80084714 || Out || 8 || [[#NVGPU_GPU_IOCTL_ZBC_GET_ACTIVE_SLOT_MASK]] ||<br /> |-<br /> | 0x80044715 || Out || 4 || ||<br /> |-<br /> | 0x8018471A || Out || 24 || ||<br /> |-<br /> | 0xC008471B || Inout || 8 || NVGPU_GPU_IOCTL_GET_ERROR_CHANNEL_USER_DATA ||<br /> |-<br /> | 0xC010471C || Inout || 16 || NVGPU_GPU_IOCTL_GET_GPU_TIME ||<br /> |-<br /> | 0xC108471D || Inout || 264 || NVGPU_GPU_IOCTL_GET_CPU_TIME_CORRELATION_INFO ||<br /> |}<br /> <br /> === NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE ===<br /> Returns the GPU's ZCULL context size. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 size;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE ===<br /> Returns GPU's ZCULL information. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 width_align_pixels;<br /> __out u32 height_align_pixels;<br /> __out u32 pixel_squares_by_aliquots;<br /> __out u32 aliquot_total;<br /> __out u32 region_byte_multiplier;<br /> __out u32 region_header_size;<br /> __out u32 subregion_header_size;<br /> __out u32 subregion_width_align_pixels;<br /> __out u32 subregion_height_align_pixels;<br /> __out u32 subregion_count;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_SET_TABLE ===<br /> Sets the active ZBC table. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 color_ds[4];<br /> __in u32 color_l2[4];<br /> __in u32 depth;<br /> __in u32 format;<br /> __in u32 type; // 1=color, 2=depth<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_QUERY_TABLE ===<br /> Queries the active ZBC table. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 color_ds[4];<br /> __out u32 color_l2[4];<br /> __out u32 depth;<br /> __out u32 ref_cnt;<br /> __out u32 format;<br /> __out u32 type;<br /> __inout u32 index_size;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_GET_CHARACTERISTICS ===<br /> Returns the GPU characteristics. Modified to return inline data instead of using a pointer.<br /> <br /> struct gpu_characteristics {<br /> u32 arch; // 0x120 (NVGPU_GPU_ARCH_GM200)<br /> u32 impl; // 0xB (NVGPU_GPU_IMPL_GM20B)<br /> u32 rev; // 0xA1 (Revision A1)<br /> u32 num_gpc; // 0x1<br /> u64 l2_cache_size; // 0x40000<br /> u64 on_board_video_memory_size; // 0x0 (not used)<br /> u32 num_tpc_per_gpc; // 0x2<br /> u32 bus_type; // 0x20 (NVGPU_GPU_BUS_TYPE_AXI)<br /> u32 big_page_size; // 0x20000<br /> u32 compression_page_size; // 0x20000<br /> u32 pde_coverage_bit_count; // 0x1B<br /> u32 available_big_page_sizes; // 0x30000<br /> u32 gpc_mask; // 0x1<br /> u32 sm_arch_sm_version; // 0x503 (Maxwell Generation 5.0.3?)<br /> u32 sm_arch_spa_version; // 0x503 (Maxwell Generation 5.0.3?)<br /> u32 sm_arch_warp_count; // 0x80<br /> u32 gpu_va_bit_count; // 0x28<br /> u32 reserved; // NULL<br /> u64 flags; // 0x55<br /> u32 twod_class; // 0x902D (FERMI_TWOD_A)<br /> u32 threed_class; // 0xB197 (MAXWELL_B)<br /> u32 compute_class; // 0xB1C0 (MAXWELL_COMPUTE_B)<br /> u32 gpfifo_class; // 0xB06F (MAXWELL_CHANNEL_GPFIFO_A)<br /> u32 inline_to_memory_class; // 0xA140 (KEPLER_INLINE_TO_MEMORY_B)<br /> u32 dma_copy_class; // 0xB0B5 (MAXWELL_DMA_COPY_A)<br /> u32 max_fbps_count; // 0x1<br /> u32 fbp_en_mask; // 0x0 (disabled)<br /> u32 max_ltc_per_fbp; // 0x2<br /> u32 max_lts_per_ltc; // 0x1<br /> u32 max_tex_per_tpc; // 0x0 (not supported)<br /> u32 max_gpc_count; // 0x1<br /> u32 rop_l2_en_mask_0; // 0x21D70 (fuse_status_opt_rop_l2_fbp_r)<br /> u32 rop_l2_en_mask_1; // 0x0<br /> u64 chipname; // 0x6230326D67 (&quot;gm20b&quot;)<br /> u64 gr_compbit_store_base_hw; // 0x0 (not supported)<br /> };<br /> <br /> struct {<br /> __inout u64 gpu_characteristics_buf_size; // must not be NULL, but gets overwritten with 0xA0=max_size<br /> __in u64 gpu_characteristics_buf_addr; // ignored, but must not be NULL<br /> __out struct gpu_characteristics gc;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_FLUSH_L2 ===<br /> Flushes the GPU L2 cache.<br /> <br /> struct {<br /> __in u32 flush; // l2_flush | l2_invalidate &lt;&lt; 1 | fb_flush &lt;&lt; 2<br /> u32 reserved;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_GET_ACTIVE_SLOT_MASK ===<br /> Returns the mask value for a ZBC slot.<br /> <br /> struct {<br /> __out u32 slot; // always 0x07<br /> __out u32 mask;<br /> };<br /> <br /> == Channels ==<br /> Channels are a concept for NVIDIA hardware blocks that share a common interface.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Path || Name<br /> |-<br /> | /dev/nvhost-gpu ||<br /> |-<br /> | /dev/nvhost-vic || Video Image Compositor<br /> |-<br /> | /dev/nvhost-nvdec || Video Decoder<br /> |-<br /> | /dev/nvhost-nvjpg || JPEG Decoder<br /> |}<br /> <br /> == Channel Ioctls ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Size || Description || Notes<br /> |-<br /> | 0xC0??0001 || Variable || NVHOST_IOCTL_CHANNEL_SUBMIT ||<br /> |-<br /> | 0xC0080002 || 8 || NVHOST_IOCTL_CHANNEL_GET_SYNCPOINT ||<br /> |-<br /> | 0xC0080003 || 8 || NVHOST_IOCTL_CHANNEL_GET_WAITBASE ||<br /> |-<br /> | 0xC0080004 || 8 || NVHOST_IOCTL_CHANNEL_SET_TIMEOUT_EX ||<br /> |-<br /> | 0x40040007 || 4 || ||<br /> |-<br /> | 0x40080008 || 8 || NVHOST_IOCTL_CHANNEL_SET_CLK_RATE ||<br /> |-<br /> | 0xC0??0009 || Variable || NVHOST_IOCTL_CHANNEL_MAP_BUFFER ||<br /> |-<br /> | 0xC0??000A || Variable || NVHOST_IOCTL_CHANNEL_UNMAP_BUFFER ||<br /> |-<br /> | 0x00000013 || 0 || ||<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40044801 || 4 || [[#NVGPU_IOCTL_CHANNEL_SET_NVMAP_FD]] ||<br /> |-<br /> | 0x40044803 || 4 || NVGPU_IOCTL_CHANNEL_SET_TIMEOUT ||<br /> |-<br /> | 0x40084805 || 8 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO]] ||<br /> |-<br /> | 0xC0044807 || 4 || NVGPU_IOCTL_CHANNEL_CYCLE_STATS ||<br /> |-<br /> | 0xC0??4808 || Variable || [[#NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO]] ||<br /> |-<br /> | 0xC0104809 || 16 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_OBJ_CTX]] ||<br /> |-<br /> | 0xC010480B || 16 || [[#NVGPU_IOCTL_CHANNEL_ZCULL_BIND]] ||<br /> |-<br /> | 0xC018480C || 24 || [[#NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER]] ||<br /> |-<br /> | 0x4004480D || 4 || [[#NVGPU_IOCTL_CHANNEL_SET_PRIORITY]] ||<br /> |-<br /> | 0x0000480E || 0 || [[#NVGPU_IOCTL_CHANNEL_ENABLE]] ||<br /> |-<br /> | 0x0000480F || 0 || [[#NVGPU_IOCTL_CHANNEL_DISABLE]] ||<br /> |-<br /> | 0x00004810 || 0 || [[#NVGPU_IOCTL_CHANNEL_PREEMPT]] ||<br /> |-<br /> | 0x00004811 || 0 || [[#NVGPU_IOCTL_CHANNEL_FORCE_RESET]] ||<br /> |-<br /> | 0x40084812 || 8 || [[#NVGPU_IOCTL_CHANNEL_EVENT_ID_CONTROL]] ||<br /> |-<br /> | 0xC0104813 || 16 || NVGPU_IOCTL_CHANNEL_CYCLE_STATS_SNAPSHOT ||<br /> |-<br /> | 0x80804816 || 128 || NVGPU_IOCTL_CHANNEL_GET_ERROR_INFO ||<br /> |-<br /> | 0xC0104817 || 16 || [[#NVGPU_IOCTL_CHANNEL_GET_ERROR_NOTIFICATION]] ||<br /> |-<br /> | 0x40204818 || 32 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX]] ||<br /> |-<br /> | 0xC0??4819 || Variable || [[#NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_RETRY]] ||<br /> |-<br /> | 0xC020481A || 32 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX2]] ||<br /> |-<br /> | 0xC018481B || 24 || (uses Ioctl2) ||<br /> |-<br /> | 0xC018481C || 24 || (uses Ioctl2) ||<br /> |-<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40084714 || 8 || NVGPU_IOCTL_CHANNEL_SET_USER_DATA || Sets an unknown user context address<br /> |-<br /> | 0x80084715 || 8 || NVGPU_IOCTL_CHANNEL_GET_USER_DATA || Gets an unknown user context address<br /> |}<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_NVMAP_FD ===<br /> Binds a nvmap object to this channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 nvmap_fd;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO ===<br /> Allocates gpfifo entries. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 num_entries;<br /> __in u32 flags;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO ===<br /> Submits a gpfifo object. Modified to take inline entry objects instead of a pointer.<br /> <br /> struct fence {<br /> u32 id;<br /> u32 value;<br /> };<br /> <br /> struct gpfifo_entry {<br /> u32 entry0; // gpu_va_lo<br /> u32 entry1; // gpu_va_hi | (unk_0x02 &lt;&lt; 0x08) | (size &lt;&lt; 0x0A) | (unk_0x01 &lt;&lt; 0x1F)<br /> };<br /> <br /> struct {<br /> __in u64 gpfifo; // (ignored) pointer to gpfifo fence structs<br /> __in u32 num_entries; // number of fence objects being submitted<br /> __in u32 flags;<br /> __out struct fence fence_out; // returned new fence object for others to wait on<br /> __in struct gpfifo_entry entries[]; // depends on num_entries<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_OBJ_CTX ===<br /> Allocates a graphics context object. Modified to ignore object's ID.<br /> <br /> struct {<br /> __in u32 class_num; // 0x902D=2d, 0xB197=3d, 0xB1C0=compute, 0xA140=kepler, 0xB0B5=DMA, 0xB06F=channel_gpfifo<br /> __in u32 flags;<br /> __out u64 obj_id; // (ignored) used for FREE_OBJ_CTX ioctl, which is not supported<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ZCULL_BIND ===<br /> Binds a ZCULL context to the channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u64 gpu_va;<br /> __in u32 mode; // 0=global, 1=no_ctxsw, 2=separate_buffer, 3=part_of_regular_buf<br /> __in u32 padding;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER ===<br /> Initializes the error notifier for this channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u64 offset;<br /> __in u64 size;<br /> __in u32 mem; // nvmap object handle<br /> __in u32 padding;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_PRIORITY ===<br /> Change channel's priority. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 priority; // 0x32 is low, 0x64 is medium and 0x96 is high<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ENABLE ===<br /> Enables the current channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_DISABLE ===<br /> Disables the current channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_PREEMPT ===<br /> Clears the FIFO pipe for this channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_FORCE_RESET ===<br /> Forces the channel to reset. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_EVENT_ID_CONTROL ===<br /> Controls event notifications.<br /> <br /> struct {<br /> __in u32 cmd; // 0=disable, 1=enable, 2=clear<br /> __in u32 id;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_GET_ERROR_NOTIFICATION ===<br /> Returns the current error notification caught by the error notifier. Exclusive to the Switch.<br /> <br /> struct {<br /> __out u64 timestamp; // nanoseconds since Jan. 1, 1970<br /> __out u32 info32; // error code<br /> __out u16 info16; // additional error info<br /> __inout u16 status; // always 0xFFFF<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_RETRY ===<br /> Allocates gpfifo entries with additional parameters. Exclusive to the Switch.<br /> <br /> struct {<br /> __in u32 num_entries;<br /> __in u32 flags;<br /> __in u32 unk0; // 1 works<br /> __in u32 unk1;<br /> __in u32 unk2;<br /> __in u32 unk3;<br /> __in u32 unk4;<br /> __in u32 unk5;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_EX ===<br /> Submits a gpfifo object (async version). Exclusive to the Switch.<br /> <br /> struct {<br /> u64 __gpfifo; // in (pointer to gpfifo fence structs; ignored)<br /> u32 __num_entries; // in (number of fence objects being submitted)<br /> u32 __flags; // in<br /> struct fence __fence_out; // out (returned new fence object for others to wait on)<br /> struct gpfifo_entry __entries[]; // in (depends on __num_entries)<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX2 ===<br /> Allocates gpfifo entries with additional parameters and returns a fence. Exclusive to the Switch.<br /> <br /> struct {<br /> u32 __num_entries; // in<br /> u32 __flags; // in<br /> u32 __unk0; // in (1 works)<br /> struct fence __fence_out; // out<br /> u32 __unk1; // in<br /> u32 __unk2; // in<br /> u32 __unk3; // in<br /> };<br /> <br /> = nvmemp =<br /> NVIDIA memory profiler (this service is not available on retail units). <br /> /dev/nvhost-ctrl sends the ioctl NVHOST_IOCTL_CTRL_GET_CONFIG to check the config &quot;nv!NV_MEMORY_PROFILER&quot;. If config_str returns &quot;1&quot;, the applications attempts to talk to use nvmemp.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Cmd0<br /> |-<br /> | 1 || Cmd1<br /> |}<br /> <br /> = nvdrvdbg =<br /> This is &quot;nns::nvdrv::INvDrvDebugFSServices&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenLog]]<br /> |-<br /> | 1 || [[#CloseLog]]<br /> |-<br /> | 2 || [[#ReadLog]]<br /> |}<br /> <br /> == OpenLog ==<br /> Takes process handle. Returns an fd.<br /> <br /> == CloseLog ==<br /> Takes fd and closes it.<br /> <br /> == ReadLog ==<br /> Takes fd and reads log into a type-6 buffer.<br /> <br /> = Errors =<br /> Most nvidia driver commands return an error code apart from the normal return code.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Success<br /> |-<br /> | 1 || NotImplemented<br /> |-<br /> | 2 || NotSupported<br /> |-<br /> | 3 || NotInitialized<br /> |-<br /> | 4 || BadParameter<br /> |-<br /> | 5 || Timeout<br /> |-<br /> | 6 || InsufficientMemory<br /> |-<br /> | 7 || ReadOnlyAttribute<br /> |-<br /> | 8 || InvalidState<br /> |-<br /> | 9 || InvalidAddress<br /> |-<br /> | 0xA || InvalidSize<br /> |-<br /> | 0xB || BadValue<br /> |-<br /> | 0xD || AlreadyAllocated<br /> |-<br /> | 0xE || Busy<br /> |-<br /> | 0xF || ResourceError<br /> |-<br /> | 0x10 || CountMismatch<br /> |-<br /> | 0x1000 || SharedMemoryTooSmall<br /> |-<br /> | 0x30003 || FileOperationFailed<br /> |-<br /> | 0x30004 || DirOperationFailed<br /> |-<br /> | 0x3000F || IoctlFailed <br /> |-<br /> | 0x30010 || AccessDenied<br /> |-<br /> | 0x30013 || FileNotFound<br /> |-<br /> | 0xA000E || ModuleNotPresent<br /> |}<br /> <br /> = Panic =<br /> In some cases, a panic may occur. NV forces a crash by doing:<br /> (void *)0 = 0xCAFE;<br /> End result is that the system hangs with a white-screen.<br /> <br /> == Gpfifo Panic ==<br /> When the gpfifo data in the gpu_va buffers specified by the submitted gpfifo entries is invalid(?), eventually the user-process will be force-terminated after using the submit-gpfifo ioctl. It's unknown how exactly this is done.<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=NV_services&diff=3696 2018-02-10T02:11:51Z

<p>Shinyquagsire23: /* Errors */ 0x3000E isn&#039;t a valid error, nvm</p> <hr /> <div>The Switch uses a customized NVIDIA driver.<br /> <br /> = nvdrv, nvdrv:a, nvdrv:s, nvdrv:t =<br /> This is &quot;nns::nvdrv::INvDrvServices&quot;.<br /> <br /> Main NVIDIA driver service.<br /> <br /> Each service is used by:<br /> * &quot;nvdrv&quot;: regular applications<br /> * &quot;nvdrv:a&quot;: applets<br /> * &quot;nvdrv:s&quot;: sysmodules<br /> * &quot;nvdrv:t&quot;: factory titles<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#Open]]<br /> |-<br /> | 1 || [[#Ioctl]]<br /> |-<br /> | 2 || [[#Close]]<br /> |-<br /> | 3 || [[#Initialize]]<br /> |-<br /> | 4 || [[#QueryEvent]]<br /> |-<br /> | 5 || [[#MapSharedMem]]<br /> |-<br /> | 6 || [[#GetStatus]]<br /> |-<br /> | 7 || [[#ForceSetClientPID]]<br /> |-<br /> | 8 || [[#SetClientPID]]<br /> |-<br /> | 9 || [[#DumpGraphicsMemoryInfo]]<br /> |-<br /> | 10 || [3.0.0+]<br /> |-<br /> | 11 || [3.0.0+] [[#Ioctl2]]<br /> |-<br /> | 12 || [3.0.0+] [[#Ioctl3]]<br /> |-<br /> | 13 || [3.0.0+]<br /> |}<br /> <br /> == Open ==<br /> Takes a type-0x5 input buffer for the device-path. Returns the output 32bit '''fd''' and the u32 '''error_code'''.<br /> <br /> == Ioctl ==<br /> Takes a 32bit '''fd''', an u32 '''ioctl_cmd''', a type-0x21 input buffer, and a type-0x22 output buffer. Returns an output u32 ('''error_code''').<br /> <br /> The addr/size for send/recv buffers are only set when the associated direction bit is set in the ioctl cmd (addr/size = 0 otherwise).<br /> <br /> == Close ==<br /> Takes a 32bit '''fd'''. Returns an output u32 ('''error_code''').<br /> <br /> == Initialize ==<br /> Takes two copy-handles ('''current_process''' and '''transfer_memory''') and an input u32 ('''transfer_memory_size'''). Returns an output u32 ('''error_code''').<br /> <br /> Webkit applet creates the transfer-memory with perm = 0 and size 0x300000.<br /> <br /> == QueryEvent ==<br /> Takes two input u32s ('''fd''' and '''event_id'''), with the second word immediately after the first one. Returns an output u32 ('''error_code''') and a copy-handle ('''event_handle''').<br /> <br /> == MapSharedMem ==<br /> Takes a copy-handle ('''transfer_memory''') and two input u32s ('''fd''' and '''nvmap_handle'''). Returns an output u32 ('''error_code''').<br /> <br /> == GetStatus ==<br /> Takes no input. Returns 0x10-bytes and an output u32 ('''error_code''').<br /> <br /> == ForceSetClientPID ==<br /> Takes an input u64 which must [[IPC_Marshalling|match]] the user-process PID ([[AM_services|AppletResourceUserId]]). Returns an output u32 ('''error_code''').<br /> <br /> == SetClientPID ==<br /> Takes a PID-descriptor and an u64 which must [[IPC_Marshalling|match]] the user-process PID ([[AM_services|AppletResourceUserId]]). Returns an output u32 ('''error_code''').<br /> <br /> == DumpGraphicsMemoryInfo ==<br /> No input or output. Does nothing.<br /> <br /> == Cmd10 ==<br /> Takes a copy-handle and an input u32. Returns an output u32 ('''error_code''').<br /> <br /> == Ioctl2 ==<br /> Takes a type-0x21 buffer, a type-0x22 buffer, a type-0x21 buffer, and two input u32s. Returns an output u32 ('''error_code''').<br /> <br /> == Ioctl3 ==<br /> Same input/output as Ioctl2, except cmdhdr_word1 is 0x100B instead of 0xC0B.<br /> <br /> == Cmd13 ==<br /> Takes an input u64. No output.<br /> <br /> Official user-processes starting with 3.0.0 now use this at the end of nvdrv service init with value 0x1.<br /> <br /> = Ioctls =<br /> The ioctl number is generated with the following primitive (see Linux kernel):<br /> <br /> #define _IOC(inout, group, num, len) \<br /> (inout | ((len &amp; IOCPARM_MASK) &lt;&lt; 16) | ((group) &lt;&lt; 8) | (num))<br /> <br /> The following table contains known ioctls.<br /> <br /> == /dev/nvhost-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC0080014 || Inout || 8 || [[#NVHOST_IOCTL_CTRL_SYNCPT_READ]] ||<br /> |-<br /> | 0x40040015 || In || 4 || [[#NVHOST_IOCTL_CTRL_SYNCPT_INCR]] ||<br /> |-<br /> | 0xC00C0016 || Inout || 12 || [[#NVHOST_IOCTL_CTRL_SYNCPT_WAIT]] ||<br /> |-<br /> | 0x40080017 || In || 8 || [[#NVHOST_IOCTL_CTRL_MODULE_MUTEX]] ||<br /> |-<br /> | 0xC0180018 || Inout || 24 || [[#NVHOST_IOCTL_CTRL_MODULE_REGRDWR]] ||<br /> |-<br /> | 0xC0100019 || Inout || 16 || [[#NVHOST_IOCTL_CTRL_SYNCPT_WAITEX]] ||<br /> |-<br /> | 0xC008001A || Inout || 8 || [[#NVHOST_IOCTL_CTRL_SYNCPT_READ_MAX]] ||<br /> |-<br /> | 0xC183001B || Inout || 387 || [[#NVHOST_IOCTL_CTRL_GET_CONFIG]] ||<br /> |-<br /> | 0xC004001C || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_SIGNAL]] ||<br /> |-<br /> | 0xC010001D || Inout || 16 || [[#NVHOST_IOCTL_CTRL_EVENT_WAIT]] ||<br /> |-<br /> | 0xC010001E || Inout || 16 || [[#NVHOST_IOCTL_CTRL_EVENT_WAIT_ASYNC]] ||<br /> |-<br /> | 0xC004001F || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_REGISTER]] ||<br /> |-<br /> | 0xC0040020 || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_UNREGISTER]] ||<br /> |-<br /> | 0x40080021 || In || 8 || [[#NVHOST_IOCTL_CTRL_EVENT_KILL]] ||<br /> |}<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_READ ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_INCR ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_WAIT ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 thresh;<br /> __in s32 timeout;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_MODULE_MUTEX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 lock; // (0==unlock; 1==lock)<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_MODULE_REGRDWR ===<br /> Identical to Linux driver. Uses 32-bit version and doesn't work.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 num_offsets;<br /> __in u32 block_size;<br /> __in u32 offsets;<br /> __in u32 values;<br /> __in u32 write;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_WAITEX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 thresh;<br /> __in s32 timeout;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_READ_MAX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_GET_CONFIG ===<br /> Gets configured settings. Not available in production mode.<br /> <br /> struct {<br /> __in char domain_str[0x41]; // &quot;nv&quot;<br /> __in char param_str[0x41];<br /> __out char config_str[0x101];<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_SIGNAL ===<br /> Signals an user event. Exclusive to the Switch.<br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_WAIT ===<br /> Waits on an event. If waiting fails, returns error code 0x05 (Timeout) and sets '''value''' to (('''syncpt_id''' &lt;&lt; 0x10) | 0x10000000).<br /> <br /> Depending on '''threshold''', an '''user_event_id''' may be returned for using with other event ioctls.<br /> <br /> struct {<br /> __in u32 syncpt_id;<br /> __in u32 threshold;<br /> __in s32 timeout;<br /> __inout u32 value; // in=user_event_id (ignored); out=syncpt_value or user_event_id<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_WAIT_ASYNC ===<br /> Waits on an event (async version). If waiting fails, returns error code 0x0B (BadValue).<br /> <br /> Depending on '''threshold''', an '''user_event_id''' may be returned for using with other event ioctls.<br /> <br /> struct {<br /> __in u32 syncpt_id;<br /> __in u32 threshold;<br /> __in u32 timeout;<br /> __inout u32 value; // in=user_event_id (ignored); out=syncpt_value or user_event_id<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_REGISTER ===<br /> Registers an user event. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_UNREGISTER ===<br /> Unregisters an user event. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_KILL ===<br /> Kills user events. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u64 user_events; // 64-bit bitfield where each bit represents one event<br /> };<br /> <br /> == /dev/nvmap ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC0080101 || Inout || 8 || [[#NVMAP_IOC_CREATE]] ||<br /> |-<br /> | 0x00000102 || - || 0 || NVMAP_IOC_CLAIM || Returns NotSupported<br /> |-<br /> | 0xC0080103 || Inout || 8 || [[#NVMAP_IOC_FROM_ID]] ||<br /> |-<br /> | 0xC0200104 || Inout || 32 || [[#NVMAP_IOC_ALLOC]] ||<br /> |-<br /> | 0xC0180105 || Inout || 24 || [[#NVMAP_IOC_FREE]] ||<br /> |-<br /> | 0xC0280106 || Inout || 40 || NVMAP_IOC_MMAP || Returns NotSupported<br /> |-<br /> | 0xC0280107 || Inout || 40 || NVMAP_IOC_WRITE || Returns NotSupported<br /> |-<br /> | 0xC0280108 || Inout || 40 || NVMAP_IOC_READ || Returns NotSupported<br /> |-<br /> | 0xC00C0109 || Inout || 12 || [[#NVMAP_IOC_PARAM]] ||<br /> |-<br /> | 0xC010010A || Inout || 16 || NVMAP_IOC_PIN_MULT || Returns NotSupported<br /> |-<br /> | 0xC010010B || Inout || 16 || NVMAP_IOC_UNPIN_MULT || Returns NotSupported<br /> |-<br /> | 0xC008010C || Inout || 8 || NVMAP_IOC_CACHE || Returns NotSupported<br /> |-<br /> | 0xC004010D || Inout || 4 || || Returns NotSupported<br /> |-<br /> | 0xC008010E || Inout || 8 || [[#NVMAP_IOC_GET_ID]] ||<br /> |-<br /> | 0xC004010F || Inout || 4 || || Returns NotSupported<br /> |-<br /> | 0x40040110 || In || 4 || || Returns NotSupported<br /> |-<br /> | 0x00000111 || - || 0 || || Returns NotSupported<br /> |}<br /> <br /> === NVMAP_IOC_CREATE ===<br /> Creates an nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 size;<br /> __out u32 handle;<br /> };<br /> <br /> === NVMAP_IOC_FROM_ID ===<br /> Get handle to an existing nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 handle;<br /> };<br /> <br /> === NVMAP_IOC_ALLOC ===<br /> Allocate memory for the nvmap object. Nintendo extended this one with 16 bytes, and changed it from in to inout.<br /> <br /> struct {<br /> __in u32 handle;<br /> __in u32 heapmask;<br /> __in u32 flags; // (0=read-only, 1=read-write)<br /> __in u32 align;<br /> __in u8 kind;<br /> u8 pad[7];<br /> __in u64 addr;<br /> };<br /> <br /> === NVMAP_IOC_FREE ===<br /> This one is completely custom. Partly because the Linux driver passed the handle as the ioctl &quot;arg-ptr&quot;, and HIPC can't handle that voodoo.<br /> <br /> struct {<br /> __in u32 handle;<br /> u32 pad;<br /> __out u64 refcount;<br /> __out u32 size;<br /> __out u32 flags; // 1=NOT_FREED_YET<br /> };<br /> <br /> === NVMAP_IOC_PARAM ===<br /> Returns info about a nvmap object. Identical to Linux driver, but extended with further params.<br /> <br /> struct {<br /> __in u32 handle;<br /> __in u32 param; // 1=SIZE, 2=ALIGNMENT, 3=BASE (returns error), 4=HEAP (always 0x40000000), 5=KIND, 6=COMPR (unused)<br /> __out u32 result;<br /> };<br /> <br /> === NVMAP_IOC_GET_ID ===<br /> Returns an id for a nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 id; //~0 indicates error<br /> __in u32 handle;<br /> };<br /> <br /> == /dev/nvdisp-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x80040212 || Out || 4 || TEGRA_DC_EXT_CONTROL_GET_NUM_OUTPUTS ||<br /> |-<br /> | 0xC0140213 || Inout || 20 || TEGRA_DC_EXT_CONTROL_GET_OUTPUT_PROPERTIES ||<br /> |-<br /> | 0xC1100214 || Inout || 272 || TEGRA_DC_EXT_CONTROL_GET_OUTPUT_EDID ||<br /> |-<br /> | 0xC0040216 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT0 ||<br /> |-<br /> | 0xC0040217 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT1 ||<br /> |-<br /> | 0xC0100218 || Inout || 16 || TEGRA_DC_EXT_CONTROL_SET_EVENT2 ||<br /> |-<br /> | 0xC0100219 || Inout || 16 || TEGRA_DC_EXT_CONTROL_SET_EVENT3 ||<br /> |-<br /> | 0xC0040220 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT4 ||<br /> |-<br /> |}<br /> <br /> == /dev/nvdisp-disp0, /dev/nvdisp-disp1 ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40040201 || In || 4 || TEGRA_DC_EXT_GET_WINDOW ||<br /> |-<br /> | 0x40040202 || In || 4 || TEGRA_DC_EXT_PUT_WINDOW ||<br /> |-<br /> | 0xC4C80203 || In || 1224 || TEGRA_DC_EXT_FLIP ||<br /> |-<br /> | 0x80380204 || Out || 56 || TEGRA_DC_EXT_GET_MODE ||<br /> |-<br /> | 0x40380205 || Out || 56 || TEGRA_DC_EXT_SET_MODE ||<br /> |-<br /> | 0x430C0206 || In || 780 || TEGRA_DC_EXT_SET_LUT ||<br /> |-<br /> | 0x40010207 || In || 1 || TEGRA_DC_EXT_ENABLE_DISABLE_CRC ||<br /> |-<br /> | 0x80040208 || Out || 4 || TEGRA_DC_EXT_GET_CRC ||<br /> |-<br /> | 0x80040209 || Out || 4 || TEGRA_DC_EXT_GET_HEAD_STATUS ||<br /> |-<br /> | 0xC038020A || Inout || 56 || TEGRA_DC_EXT_VALIDATE_MODE ||<br /> |-<br /> | 0x4018020B || In || 24 || TEGRA_DC_EXT_SET_CSC ||<br /> |-<br /> | 0xC004020C || Inout || 4 || TEGRA_DC_EXT_GET_VBLANK_SYNCPT ||<br /> |-<br /> | 0x8040020D || Out || 64 || TEGRA_DC_EXT_GET_UNDERFLOWS ||<br /> |-<br /> | 0xC99A020E || Inout || 2458 || TEGRA_DC_EXT_SET_CMU ||<br /> |-<br /> | 0xC004020F || Inout || 4 || TEGRA_DC_EXT_DPMS ||<br /> |-<br /> | 0x80600210 || Out || 96 || TEGRA_DC_EXT_GET_AVI_INFOFRAME ||<br /> |-<br /> | 0x40600211 || In || 96 || TEGRA_DC_EXT_SET_AVI_INFOFRAME ||<br /> |-<br /> | 0xEBFC0215 || Inout || 11260 || TEGRA_DC_EXT_GET_MODE_DB ||<br /> |-<br /> | 0xC003021A || Inout || 3 || TEGRA_DC_EXT_PANEL_GET_VENDOR_ID ||<br /> |-<br /> | 0x803C021B || Out || 60 || TEGRA_DC_EXT_GET_MODE2 ||<br /> |-<br /> | 0x403C021C || In || 60 || TEGRA_DC_EXT_SET_MODE2 ||<br /> |-<br /> | 0xC03C021D || Inout || 60 || TEGRA_DC_EXT_VALIDATE_MODE2 ||<br /> |-<br /> | 0xEF20021E || Inout || 12064 || TEGRA_DC_EXT_GET_MODE_DB2 ||<br /> |-<br /> | 0xC004021F || Inout || 4 || TEGRA_DC_EXT_GET_WINMASK ||<br /> |-<br /> |}<br /> <br /> == /dev/nvcec-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40010300 || In || 1 || ||<br /> |-<br /> | 0x40010301 || In || 1 || NVCEC_CTRL_ENABLE ||<br /> |-<br /> | 0x804C0302 || Out || 76 || NVCEC_CTRL_GET_PADDR ||<br /> |-<br /> | 0x40040303 || In || 4 || NVCEC_CTRL_SET_LADDR ||<br /> |-<br /> | 0xC04C0304 || Inout || 76 || NVCEC_CTRL_WRITE ||<br /> |-<br /> | 0xC04C0305 || Inout || 76 || NVCEC_CTRL_READ ||<br /> |-<br /> | 0x804C0306 || Out || 76 || NVCEC_CTRL_GET_CONNECTION_STATUS ||<br /> |-<br /> | 0x804C0307 || Out || 76 || NVCEC_CTRL_GET_WRITE_STATUS ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhdcp_up-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC4880401 || Inout || 1160 || TEGRAIO_NVHDCP_READ_M ||<br /> |-<br /> | 0xC4880402 || Inout || 1160 || TEGRAIO_NVHDCP_READ_S ||<br /> |-<br /> | 0x40010403 || In || 1 || TEGRAIO_NVHDCP_ON_OFF ||<br /> |-<br /> |}<br /> <br /> == /dev/nvdcutil-disp0, /dev/nvdcutil-disp1 ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40010501 || In || 1 || ||<br /> |-<br /> | 0x40010502 || In || 1 || ||<br /> |-<br /> | 0x42040503 || In || 1056 || ||<br /> |-<br /> | 0x803C0504 || Out || 60 || NVDCUTIL_DISP_IOCTL_GET_DISPLAY_INFO ||<br /> |-<br /> |}<br /> <br /> == /dev/nvsched-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x00000601 || - || 0 || ||<br /> |-<br /> | 0x00000602 || - || 0 || ||<br /> |-<br /> | 0x40180603 || In || 1056 || ||<br /> |-<br /> | 0x40180604 || In || 60 || ||<br /> |-<br /> | 0x40080605 || In || 60 || ||<br /> |-<br /> | 0x80080606 || Out || 60 || ||<br /> |-<br /> | 0x80080607 || Out || 60 || ||<br /> |-<br /> | 0x40180608 || In || 24 || ||<br /> |-<br /> | 0x40100609 || In || 16 || ||<br /> |-<br /> | 0x4010060A || In || 16 || ||<br /> |-<br /> | 0x4008060B || In || 8 || ||<br /> |-<br /> | 0x8001060C || Out || 1 || ||<br /> |-<br /> | 0x8010060D || Out || 16 || ||<br /> |-<br /> | 0x400C060E || In || 12 || ||<br /> |-<br /> | 0x4008060F || In || 8 || ||<br /> |-<br /> | 0x40100610 || In || 16 || ||<br /> |-<br /> | 0x40100611 || In || 16 || ||<br /> |-<br /> |}<br /> <br /> == /dev/nverpt-ctrl ==<br /> Added in firmware version 4.0.0.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC1280701 || Inout || 296 || ||<br /> |-<br /> | 0xCF580702 || Inout || 3928 || ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhost-as-gpu ==<br /> Each fd opened to this device creates an address space. An address space is then later bound with a channel.<br /> <br /> Once a nvgpu channel has been bound to an address space it cannot be unbound. There is no support for allowing an nvgpu channel to change from one address space to another (or from one to none).<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40044101 || In || 4 || [[#NVGPU_AS_IOCTL_BIND_CHANNEL]] ||<br /> |-<br /> | 0xC0184102 || Inout || 24 || [[#NVGPU_AS_IOCTL_ALLOC_SPACE]] ||<br /> |-<br /> | 0xC0104103 || Inout || 16 || [[#NVGPU_AS_IOCTL_FREE_SPACE]] ||<br /> |-<br /> | 0xC0184104 || Inout || 24 || [[#NVGPU_AS_IOCTL_MAP_BUFFER]] ||<br /> |-<br /> | 0xC0084105 || Inout || 8 || [[#NVGPU_AS_IOCTL_UNMAP_BUFFER]] ||<br /> |-<br /> | 0xC0284106 || Inout || 40 || [[#NVGPU_AS_IOCTL_MAP_BUFFER_EX]] ||<br /> |-<br /> | 0x40104107 || In || 16 || [[#NVGPU_AS_IOCTL_INITIALIZE]] ||<br /> |-<br /> | 0xC0404108 || Inout || 64 || [[#NVGPU_AS_IOCTL_GET_VA_REGIONS]] ||<br /> |-<br /> | 0x40284109 || In || 40 || [[#NVGPU_AS_IOCTL_INITIALIZE_EX]] ||<br /> |-<br /> | 0xC0??4114 || Inout || Variable || [[#NVGPU_AS_IOCTL_REMAP]] ||<br /> |}<br /> <br /> === NVGPU_AS_IOCTL_BIND_CHANNEL ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 fd;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_ALLOC_SPACE ===<br /> This one reserves pages in the device address space.<br /> <br /> struct {<br /> __in u32 pages;<br /> __in u32 page_size;<br /> __in u32 flags;<br /> u32 pad;<br /> union {<br /> __out u64 offset;<br /> __in u64 align;<br /> };<br /> };<br /> <br /> === NVGPU_AS_IOCTL_FREE_SPACE ===<br /> struct {<br /> __in u64 offset;<br /> __in u32 pages;<br /> __in u32 page_size;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_MAP_BUFFER ===<br /> Map a memory region in the device address space. Identical to Linux driver pretty much.<br /> <br /> On success, the mapped memory region is locked by having [[SVC#MemoryState]] bit34 set.<br /> <br /> struct {<br /> __in u32 flags; // bit0: fixed_offset, bit2: cacheable<br /> u32 pad;<br /> __in u32 nvmap_handle;<br /> __inout u32 page_size; // 0 means don't care<br /> union {<br /> __out u64 offset;<br /> __in u64 align;<br /> };<br /> };<br /> <br /> === NVGPU_AS_IOCTL_MAP_BUFFER_EX ===<br /> Map a memory region in the device address space. Identical to Linux driver pretty much.<br /> <br /> On success, the mapped memory region is locked by having [[SVC#MemoryState]] bit34 set.<br /> <br /> struct {<br /> __in u32 flags; // bit0: fixed_offset, bit2: cacheable<br /> __in u32 kind; // -1 is default<br /> __in u32 nvmap_handle;<br /> __inout u32 page_size; // 0 means don't care<br /> __in u64 buffer_offset;<br /> __in u64 mapping_size;<br /> __inout u64 offset;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_UNMAP_BUFFER ===<br /> Unmap a memory region from the device address space.<br /> <br /> struct {<br /> __in u64 offset;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_INITIALIZE ===<br /> Nintendo's custom implementation of NVGPU_GPU_IOCTL_ALLOC_AS (unavailable).<br /> <br /> struct {<br /> __in u32 big_page_size; // depends on GPU's available_big_page_sizes; 0=default<br /> __in s32 as_fd; // ignored; passes 0<br /> __in u32 flags; // ignored; passes 0<br /> __in u32 reserved; // ignored; passes 0<br /> };<br /> <br /> === NVGPU_AS_IOCTL_GET_VA_REGIONS ===<br /> Nintendo modified to get rid of pointer in struct.<br /> <br /> struct va_region {<br /> u64 offset;<br /> u32 page_size;<br /> u32 pad;<br /> u64 pages;<br /> };<br /> <br /> struct {<br /> u64 not_used; // (contained output user ptr on linux, ignored)<br /> __inout u32 bufsize; // forced to 2*sizeof(struct va_region)<br /> u32 pad;<br /> __out struct va_region regions[2];<br /> };<br /> <br /> === NVGPU_AS_IOCTL_INITIALIZE_EX ===<br /> Nintendo's custom implementation of NVGPU_GPU_IOCTL_ALLOC_AS (unavailable) with extra params.<br /> <br /> struct {<br /> __in u32 big_page_size; // depends on GPU's available_big_page_sizes; 0=default<br /> __in s32 as_fd; // ignored; passes 0<br /> __in u32 flags; // passes 0<br /> __in u32 reserved; // ignored; passes 0<br /> __in u64 unk0;<br /> __in u64 unk1;<br /> __in u64 unk2;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_REMAP ===<br /> Nintendo's custom implementation of address space remapping.<br /> <br /> struct remap_entry {<br /> __in u16 flags; // 0 or 4<br /> __in u16 kind; <br /> __in u32 nvmap_handle;<br /> __in u32 padding;<br /> __in u32 offset; // (alloc_space_offset &gt;&gt; 0x10)<br /> __in u32 pages; // alloc_space_pages<br /> };<br /> <br /> struct {<br /> __in struct remap_entry entries[];<br /> };<br /> <br /> == /dev/nvhost-dbg-gpu ==<br /> Not accessible, but there is code to invoke it.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40084401 || In || 8 || NVGPU_DBG_GPU_IOCTL_BIND_CHANNEL ||<br /> |-<br /> | 0xC0??4402 || Inout || Variable || NVGPU_DBG_GPU_IOCTL_REG_OPS ||<br /> |-<br /> | 0x40084403 || In || 8 || NVGPU_DBG_GPU_IOCTL_EVENTS_CTRL ||<br /> |-<br /> | 0x40044404 || In || 4 || NVGPU_DBG_GPU_IOCTL_POWERGATE ||<br /> |-<br /> | 0x40044405 || In || 4 || NVGPU_DBG_GPU_IOCTL_SMPC_CTXSW_MODE ||<br /> |-<br /> | 0xC0184407 || Inout || 24 || NVGPU_DBG_GPU_IOCTL_PERFBUF_MAP ||<br /> |-<br /> | 0x40084408 || In || 8 || NVGPU_DBG_GPU_IOCTL_PERFBUF_UNMAP ||<br /> |-<br /> | 0x40084409 || In || 8 || NVGPU_DBG_GPU_IOCTL_PC_SAMPLING ||<br /> |-<br /> | 0x4008440A || In || 8 || NVGPU_DBG_GPU_IOCTL_TIMEOUT ||<br /> |-<br /> | 0x8008440B || Out || 8 || NVGPU_DBG_GPU_IOCTL_GET_TIMEOUT ||<br /> |-<br /> | 0x8004440C || Out || 4 || NVGPU_DBG_GPU_IOCTL_GET_GR_CONTEXT_SIZE ||<br /> |-<br /> | 0x0000440D || None || 0 || NVGPU_DBG_GPU_IOCTL_GET_GR_CONTEXT (uses Ioctl3) ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhost-ctrl-gpu ==<br /> This device is for global (context independent) operations on the gpu. <br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x80044701 || Out || 4 || [[#NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE]] ||<br /> |-<br /> | 0x80284702 || Out || 40 || [[#NVGPU_GPU_IOCTL_ZCULL_GET_INFO]] ||<br /> |-<br /> | 0x402C4703 || In || 44 || [[#NVGPU_GPU_IOCTL_ZBC_SET_TABLE]] ||<br /> |-<br /> | 0xC0344704 || Inout || 52 || [[#NVGPU_GPU_IOCTL_ZBC_QUERY_TABLE]] ||<br /> |-<br /> | 0xC0B04705 || Inout || 176 || [[#NVGPU_GPU_IOCTL_GET_CHARACTERISTICS]] ||<br /> |-<br /> | 0xC0184706 || Inout || 24 || NVGPU_GPU_IOCTL_GET_TPC_MASKS ||<br /> |-<br /> | 0x40084707 || In || 8 || [[#NVGPU_GPU_IOCTL_FLUSH_L2]] ||<br /> |-<br /> | 0x4008470E || In || 8 || NVGPU_GPU_IOCTL_SET_MMUDEBUG_MODE ||<br /> |-<br /> | 0x4010470F || In || 16 || NVGPU_GPU_IOCTL_SET_SM_DEBUG_MODE ||<br /> |-<br /> | 0xC0084710 || Inout || 8 || NVGPU_GPU_IOCTL_WAIT_FOR_PAUSE ||<br /> |-<br /> | 0x80084711 || Out || 8 || NVGPU_GPU_IOCTL_GET_TPC_EXCEPTION_EN_STATUS ||<br /> |-<br /> | 0x80084712 || Out || 8 || NVGPU_GPU_IOCTL_NUM_VSMS ||<br /> |-<br /> | 0xC0044713 || Inout || 4 || NVGPU_GPU_IOCTL_VSMS_MAPPING ||<br /> |-<br /> | 0x80084714 || Out || 8 || [[#NVGPU_GPU_IOCTL_ZBC_GET_ACTIVE_SLOT_MASK]] ||<br /> |-<br /> | 0x80044715 || Out || 4 || ||<br /> |-<br /> | 0x8018471A || Out || 24 || ||<br /> |-<br /> | 0xC008471B || Inout || 8 || NVGPU_GPU_IOCTL_GET_ERROR_CHANNEL_USER_DATA ||<br /> |-<br /> | 0xC010471C || Inout || 16 || NVGPU_GPU_IOCTL_GET_GPU_TIME ||<br /> |-<br /> | 0xC108471D || Inout || 264 || NVGPU_GPU_IOCTL_GET_CPU_TIME_CORRELATION_INFO ||<br /> |}<br /> <br /> === NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE ===<br /> Returns the GPU's ZCULL context size. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 size;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE ===<br /> Returns GPU's ZCULL information. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 width_align_pixels;<br /> __out u32 height_align_pixels;<br /> __out u32 pixel_squares_by_aliquots;<br /> __out u32 aliquot_total;<br /> __out u32 region_byte_multiplier;<br /> __out u32 region_header_size;<br /> __out u32 subregion_header_size;<br /> __out u32 subregion_width_align_pixels;<br /> __out u32 subregion_height_align_pixels;<br /> __out u32 subregion_count;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_SET_TABLE ===<br /> Sets the active ZBC table. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 color_ds[4];<br /> __in u32 color_l2[4];<br /> __in u32 depth;<br /> __in u32 format;<br /> __in u32 type; // 1=color, 2=depth<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_QUERY_TABLE ===<br /> Queries the active ZBC table. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 color_ds[4];<br /> __out u32 color_l2[4];<br /> __out u32 depth;<br /> __out u32 ref_cnt;<br /> __out u32 format;<br /> __out u32 type;<br /> __inout u32 index_size;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_GET_CHARACTERISTICS ===<br /> Returns the GPU characteristics. Modified to return inline data instead of using a pointer.<br /> <br /> struct gpu_characteristics {<br /> u32 arch; // 0x120 (NVGPU_GPU_ARCH_GM200)<br /> u32 impl; // 0xB (NVGPU_GPU_IMPL_GM20B)<br /> u32 rev; // 0xA1 (Revision A1)<br /> u32 num_gpc; // 0x1<br /> u64 l2_cache_size; // 0x40000<br /> u64 on_board_video_memory_size; // 0x0 (not used)<br /> u32 num_tpc_per_gpc; // 0x2<br /> u32 bus_type; // 0x20 (NVGPU_GPU_BUS_TYPE_AXI)<br /> u32 big_page_size; // 0x20000<br /> u32 compression_page_size; // 0x20000<br /> u32 pde_coverage_bit_count; // 0x1B<br /> u32 available_big_page_sizes; // 0x30000<br /> u32 gpc_mask; // 0x1<br /> u32 sm_arch_sm_version; // 0x503 (Maxwell Generation 5.0.3?)<br /> u32 sm_arch_spa_version; // 0x503 (Maxwell Generation 5.0.3?)<br /> u32 sm_arch_warp_count; // 0x80<br /> u32 gpu_va_bit_count; // 0x28<br /> u32 reserved; // NULL<br /> u64 flags; // 0x55<br /> u32 twod_class; // 0x902D (FERMI_TWOD_A)<br /> u32 threed_class; // 0xB197 (MAXWELL_B)<br /> u32 compute_class; // 0xB1C0 (MAXWELL_COMPUTE_B)<br /> u32 gpfifo_class; // 0xB06F (MAXWELL_CHANNEL_GPFIFO_A)<br /> u32 inline_to_memory_class; // 0xA140 (KEPLER_INLINE_TO_MEMORY_B)<br /> u32 dma_copy_class; // 0xB0B5 (MAXWELL_DMA_COPY_A)<br /> u32 max_fbps_count; // 0x1<br /> u32 fbp_en_mask; // 0x0 (disabled)<br /> u32 max_ltc_per_fbp; // 0x2<br /> u32 max_lts_per_ltc; // 0x1<br /> u32 max_tex_per_tpc; // 0x0 (not supported)<br /> u32 max_gpc_count; // 0x1<br /> u32 rop_l2_en_mask_0; // 0x21D70 (fuse_status_opt_rop_l2_fbp_r)<br /> u32 rop_l2_en_mask_1; // 0x0<br /> u64 chipname; // 0x6230326D67 (&quot;gm20b&quot;)<br /> u64 gr_compbit_store_base_hw; // 0x0 (not supported)<br /> };<br /> <br /> struct {<br /> __inout u64 gpu_characteristics_buf_size; // must not be NULL, but gets overwritten with 0xA0=max_size<br /> __in u64 gpu_characteristics_buf_addr; // ignored, but must not be NULL<br /> __out struct gpu_characteristics gc;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_FLUSH_L2 ===<br /> Flushes the GPU L2 cache.<br /> <br /> struct {<br /> __in u32 flush; // l2_flush | l2_invalidate &lt;&lt; 1 | fb_flush &lt;&lt; 2<br /> u32 reserved;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_GET_ACTIVE_SLOT_MASK ===<br /> Returns the mask value for a ZBC slot.<br /> <br /> struct {<br /> __out u32 slot; // always 0x07<br /> __out u32 mask;<br /> };<br /> <br /> == Channels ==<br /> Channels are a concept for NVIDIA hardware blocks that share a common interface.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Path || Name<br /> |-<br /> | /dev/nvhost-gpu ||<br /> |-<br /> | /dev/nvhost-vic || Video Image Compositor<br /> |-<br /> | /dev/nvhost-nvdec || Video Decoder<br /> |-<br /> | /dev/nvhost-nvjpg || JPEG Decoder<br /> |}<br /> <br /> == Channel Ioctls ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Size || Description || Notes<br /> |-<br /> | 0xC0??0001 || Variable || NVHOST_IOCTL_CHANNEL_SUBMIT ||<br /> |-<br /> | 0xC0080002 || 8 || NVHOST_IOCTL_CHANNEL_GET_SYNCPOINT ||<br /> |-<br /> | 0xC0080003 || 8 || NVHOST_IOCTL_CHANNEL_GET_WAITBASE ||<br /> |-<br /> | 0xC0080004 || 8 || NVHOST_IOCTL_CHANNEL_SET_TIMEOUT_EX ||<br /> |-<br /> | 0x40040007 || 4 || ||<br /> |-<br /> | 0x40080008 || 8 || NVHOST_IOCTL_CHANNEL_SET_CLK_RATE ||<br /> |-<br /> | 0xC0??0009 || Variable || NVHOST_IOCTL_CHANNEL_MAP_BUFFER ||<br /> |-<br /> | 0xC0??000A || Variable || NVHOST_IOCTL_CHANNEL_UNMAP_BUFFER ||<br /> |-<br /> | 0x00000013 || 0 || ||<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40044801 || 4 || [[#NVGPU_IOCTL_CHANNEL_SET_NVMAP_FD]] ||<br /> |-<br /> | 0x40044803 || 4 || NVGPU_IOCTL_CHANNEL_SET_TIMEOUT ||<br /> |-<br /> | 0x40084805 || 8 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO]] ||<br /> |-<br /> | 0xC0044807 || 4 || NVGPU_IOCTL_CHANNEL_CYCLE_STATS ||<br /> |-<br /> | 0xC0??4808 || Variable || [[#NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO]] ||<br /> |-<br /> | 0xC0104809 || 16 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_OBJ_CTX]] ||<br /> |-<br /> | 0xC010480B || 16 || [[#NVGPU_IOCTL_CHANNEL_ZCULL_BIND]] ||<br /> |-<br /> | 0xC018480C || 24 || [[#NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER]] ||<br /> |-<br /> | 0x4004480D || 4 || [[#NVGPU_IOCTL_CHANNEL_SET_PRIORITY]] ||<br /> |-<br /> | 0x0000480E || 0 || [[#NVGPU_IOCTL_CHANNEL_ENABLE]] ||<br /> |-<br /> | 0x0000480F || 0 || [[#NVGPU_IOCTL_CHANNEL_DISABLE]] ||<br /> |-<br /> | 0x00004810 || 0 || [[#NVGPU_IOCTL_CHANNEL_PREEMPT]] ||<br /> |-<br /> | 0x00004811 || 0 || [[#NVGPU_IOCTL_CHANNEL_FORCE_RESET]] ||<br /> |-<br /> | 0x40084812 || 8 || [[#NVGPU_IOCTL_CHANNEL_EVENT_ID_CONTROL]] ||<br /> |-<br /> | 0xC0104813 || 16 || NVGPU_IOCTL_CHANNEL_CYCLE_STATS_SNAPSHOT ||<br /> |-<br /> | 0x80804816 || 128 || NVGPU_IOCTL_CHANNEL_GET_ERROR_INFO ||<br /> |-<br /> | 0xC0104817 || 16 || [[#NVGPU_IOCTL_CHANNEL_GET_ERROR_NOTIFICATION]] ||<br /> |-<br /> | 0x40204818 || 32 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX]] ||<br /> |-<br /> | 0xC0??4819 || Variable || [[#NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_RETRY]] ||<br /> |-<br /> | 0xC020481A || 32 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX2]] ||<br /> |-<br /> | 0xC018481B || 24 || (uses Ioctl2) ||<br /> |-<br /> | 0xC018481C || 24 || (uses Ioctl2) ||<br /> |-<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40084714 || 8 || NVGPU_IOCTL_CHANNEL_SET_USER_DATA || Sets an unknown user context address<br /> |-<br /> | 0x80084715 || 8 || NVGPU_IOCTL_CHANNEL_GET_USER_DATA || Gets an unknown user context address<br /> |}<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_NVMAP_FD ===<br /> Binds a nvmap object to this channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 nvmap_fd;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO ===<br /> Allocates gpfifo entries. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 num_entries;<br /> __in u32 flags;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO ===<br /> Submits a gpfifo object. Modified to take inline entry objects instead of a pointer.<br /> <br /> struct fence {<br /> u32 id;<br /> u32 value;<br /> };<br /> <br /> struct gpfifo_entry {<br /> u32 entry0; // gpu_va_lo<br /> u32 entry1; // gpu_va_hi | (unk_0x02 &lt;&lt; 0x08) | (size &lt;&lt; 0x0A) | (unk_0x01 &lt;&lt; 0x1F)<br /> };<br /> <br /> struct {<br /> __in u64 gpfifo; // (ignored) pointer to gpfifo fence structs<br /> __in u32 num_entries; // number of fence objects being submitted<br /> __in u32 flags;<br /> __out struct fence fence_out; // returned new fence object for others to wait on<br /> __in struct gpfifo_entry entries[]; // depends on num_entries<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_OBJ_CTX ===<br /> Allocates a graphics context object. Modified to ignore object's ID.<br /> <br /> struct {<br /> __in u32 class_num; // 0x902D=2d, 0xB197=3d, 0xB1C0=compute, 0xA140=kepler, 0xB0B5=DMA, 0xB06F=channel_gpfifo<br /> __in u32 flags;<br /> __out u64 obj_id; // (ignored) used for FREE_OBJ_CTX ioctl, which is not supported<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ZCULL_BIND ===<br /> Binds a ZCULL context to the channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u64 gpu_va;<br /> __in u32 mode; // 0=global, 1=no_ctxsw, 2=separate_buffer, 3=part_of_regular_buf<br /> __in u32 padding;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER ===<br /> Initializes the error notifier for this channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u64 offset;<br /> __in u64 size;<br /> __in u32 mem; // nvmap object handle<br /> __in u32 padding;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_PRIORITY ===<br /> Change channel's priority. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 priority; // 0x32 is low, 0x64 is medium and 0x96 is high<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ENABLE ===<br /> Enables the current channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_DISABLE ===<br /> Disables the current channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_PREEMPT ===<br /> Clears the FIFO pipe for this channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_FORCE_RESET ===<br /> Forces the channel to reset. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_EVENT_ID_CONTROL ===<br /> Controls event notifications.<br /> <br /> struct {<br /> __in u32 cmd; // 0=disable, 1=enable, 2=clear<br /> __in u32 id;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_GET_ERROR_NOTIFICATION ===<br /> Returns the current error notification caught by the error notifier. Exclusive to the Switch.<br /> <br /> struct {<br /> __out u64 timestamp; // nanoseconds since Jan. 1, 1970<br /> __out u32 info32; // error code<br /> __out u16 info16; // additional error info<br /> __inout u16 status; // always 0xFFFF<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_RETRY ===<br /> Allocates gpfifo entries with additional parameters. Exclusive to the Switch.<br /> <br /> struct {<br /> __in u32 num_entries;<br /> __in u32 flags;<br /> __in u32 unk0; // 1 works<br /> __in u32 unk1;<br /> __in u32 unk2;<br /> __in u32 unk3;<br /> __in u32 unk4;<br /> __in u32 unk5;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_EX ===<br /> Submits a gpfifo object (async version). Exclusive to the Switch.<br /> <br /> struct {<br /> u64 __gpfifo; // in (pointer to gpfifo fence structs; ignored)<br /> u32 __num_entries; // in (number of fence objects being submitted)<br /> u32 __flags; // in<br /> struct fence __fence_out; // out (returned new fence object for others to wait on)<br /> struct gpfifo_entry __entries[]; // in (depends on __num_entries)<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX2 ===<br /> Allocates gpfifo entries with additional parameters and returns a fence. Exclusive to the Switch.<br /> <br /> struct {<br /> u32 __num_entries; // in<br /> u32 __flags; // in<br /> u32 __unk0; // in (1 works)<br /> struct fence __fence_out; // out<br /> u32 __unk1; // in<br /> u32 __unk2; // in<br /> u32 __unk3; // in<br /> };<br /> <br /> = nvmemp =<br /> NVIDIA memory profiler (this service is not available on retail units). <br /> /dev/nvhost-ctrl sends the ioctl NVHOST_IOCTL_CTRL_GET_CONFIG to check the config &quot;nv!NV_MEMORY_PROFILER&quot;. If config_str returns &quot;1&quot;, the applications attempts to talk to use nvmemp.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Cmd0<br /> |-<br /> | 1 || Cmd1<br /> |}<br /> <br /> = nvdrvdbg =<br /> This is &quot;nns::nvdrv::INvDrvDebugFSServices&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenLog]]<br /> |-<br /> | 1 || [[#CloseLog]]<br /> |-<br /> | 2 || [[#ReadLog]]<br /> |}<br /> <br /> == OpenLog ==<br /> Takes process handle. Returns an fd.<br /> <br /> == CloseLog ==<br /> Takes fd and closes it.<br /> <br /> == ReadLog ==<br /> Takes fd and reads log into a type-6 buffer.<br /> <br /> = Errors =<br /> Most nvidia driver commands return an error code apart from the normal return code.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Success<br /> |-<br /> | 1 || NotImplemented<br /> |-<br /> | 2 || NotSupported<br /> |-<br /> | 3 || NotInitialized<br /> |-<br /> | 4 || BadParameter<br /> |-<br /> | 5 || Timeout<br /> |-<br /> | 6 || InsufficientMemory<br /> |-<br /> | 7 || ReadOnlyAttribute<br /> |-<br /> | 8 || InvalidState<br /> |-<br /> | 9 || InvalidAddress<br /> |-<br /> | 0xA || InvalidSize<br /> |-<br /> | 0xB || BadValue<br /> |-<br /> | 0xD || AlreadyAllocated<br /> |-<br /> | 0xE || Busy<br /> |-<br /> | 0xF || ResourceError<br /> |-<br /> | 0x10 || CountMismatch<br /> |-<br /> | 0x1000 || SharedMemoryTooSmall<br /> |-<br /> | 0x30003 || FileOperationFailed<br /> |-<br /> | 0x30004 || DirOperationFailed<br /> |-<br /> | 0x3000F || IoctlFailed <br /> |-<br /> | 0x30010 || AccessDenied<br /> |-<br /> | 0x30013 || FileNotFound<br /> |-<br /> | 0xA000E || ModuleNotPresent<br /> |}<br /> <br /> = Panic =<br /> In some cases, a panic may occur. NV forces a crash by doing:<br /> (void *)0 = 0xCAFE;<br /> End result is that the system hangs with a white-screen.<br /> <br /> == Gpfifo Panic ==<br /> When the gpfifo data in the gpu_va buffers specified by the submitted gpfifo entries is invalid(?), eventually the user-process will be force-terminated after using the submit-gpfifo ioctl. It's unknown how exactly this is done.<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=NV_services&diff=3695 2018-02-10T02:00:30Z

<p>Shinyquagsire23: /* Errors */ Actual names</p> <hr /> <div>The Switch uses a customized NVIDIA driver.<br /> <br /> = nvdrv, nvdrv:a, nvdrv:s, nvdrv:t =<br /> This is &quot;nns::nvdrv::INvDrvServices&quot;.<br /> <br /> Main NVIDIA driver service.<br /> <br /> Each service is used by:<br /> * &quot;nvdrv&quot;: regular applications<br /> * &quot;nvdrv:a&quot;: applets<br /> * &quot;nvdrv:s&quot;: sysmodules<br /> * &quot;nvdrv:t&quot;: factory titles<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#Open]]<br /> |-<br /> | 1 || [[#Ioctl]]<br /> |-<br /> | 2 || [[#Close]]<br /> |-<br /> | 3 || [[#Initialize]]<br /> |-<br /> | 4 || [[#QueryEvent]]<br /> |-<br /> | 5 || [[#MapSharedMem]]<br /> |-<br /> | 6 || [[#GetStatus]]<br /> |-<br /> | 7 || [[#ForceSetClientPID]]<br /> |-<br /> | 8 || [[#SetClientPID]]<br /> |-<br /> | 9 || [[#DumpGraphicsMemoryInfo]]<br /> |-<br /> | 10 || [3.0.0+]<br /> |-<br /> | 11 || [3.0.0+] [[#Ioctl2]]<br /> |-<br /> | 12 || [3.0.0+] [[#Ioctl3]]<br /> |-<br /> | 13 || [3.0.0+]<br /> |}<br /> <br /> == Open ==<br /> Takes a type-0x5 input buffer for the device-path. Returns the output 32bit '''fd''' and the u32 '''error_code'''.<br /> <br /> == Ioctl ==<br /> Takes a 32bit '''fd''', an u32 '''ioctl_cmd''', a type-0x21 input buffer, and a type-0x22 output buffer. Returns an output u32 ('''error_code''').<br /> <br /> The addr/size for send/recv buffers are only set when the associated direction bit is set in the ioctl cmd (addr/size = 0 otherwise).<br /> <br /> == Close ==<br /> Takes a 32bit '''fd'''. Returns an output u32 ('''error_code''').<br /> <br /> == Initialize ==<br /> Takes two copy-handles ('''current_process''' and '''transfer_memory''') and an input u32 ('''transfer_memory_size'''). Returns an output u32 ('''error_code''').<br /> <br /> Webkit applet creates the transfer-memory with perm = 0 and size 0x300000.<br /> <br /> == QueryEvent ==<br /> Takes two input u32s ('''fd''' and '''event_id'''), with the second word immediately after the first one. Returns an output u32 ('''error_code''') and a copy-handle ('''event_handle''').<br /> <br /> == MapSharedMem ==<br /> Takes a copy-handle ('''transfer_memory''') and two input u32s ('''fd''' and '''nvmap_handle'''). Returns an output u32 ('''error_code''').<br /> <br /> == GetStatus ==<br /> Takes no input. Returns 0x10-bytes and an output u32 ('''error_code''').<br /> <br /> == ForceSetClientPID ==<br /> Takes an input u64 which must [[IPC_Marshalling|match]] the user-process PID ([[AM_services|AppletResourceUserId]]). Returns an output u32 ('''error_code''').<br /> <br /> == SetClientPID ==<br /> Takes a PID-descriptor and an u64 which must [[IPC_Marshalling|match]] the user-process PID ([[AM_services|AppletResourceUserId]]). Returns an output u32 ('''error_code''').<br /> <br /> == DumpGraphicsMemoryInfo ==<br /> No input or output. Does nothing.<br /> <br /> == Cmd10 ==<br /> Takes a copy-handle and an input u32. Returns an output u32 ('''error_code''').<br /> <br /> == Ioctl2 ==<br /> Takes a type-0x21 buffer, a type-0x22 buffer, a type-0x21 buffer, and two input u32s. Returns an output u32 ('''error_code''').<br /> <br /> == Ioctl3 ==<br /> Same input/output as Ioctl2, except cmdhdr_word1 is 0x100B instead of 0xC0B.<br /> <br /> == Cmd13 ==<br /> Takes an input u64. No output.<br /> <br /> Official user-processes starting with 3.0.0 now use this at the end of nvdrv service init with value 0x1.<br /> <br /> = Ioctls =<br /> The ioctl number is generated with the following primitive (see Linux kernel):<br /> <br /> #define _IOC(inout, group, num, len) \<br /> (inout | ((len &amp; IOCPARM_MASK) &lt;&lt; 16) | ((group) &lt;&lt; 8) | (num))<br /> <br /> The following table contains known ioctls.<br /> <br /> == /dev/nvhost-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC0080014 || Inout || 8 || [[#NVHOST_IOCTL_CTRL_SYNCPT_READ]] ||<br /> |-<br /> | 0x40040015 || In || 4 || [[#NVHOST_IOCTL_CTRL_SYNCPT_INCR]] ||<br /> |-<br /> | 0xC00C0016 || Inout || 12 || [[#NVHOST_IOCTL_CTRL_SYNCPT_WAIT]] ||<br /> |-<br /> | 0x40080017 || In || 8 || [[#NVHOST_IOCTL_CTRL_MODULE_MUTEX]] ||<br /> |-<br /> | 0xC0180018 || Inout || 24 || [[#NVHOST_IOCTL_CTRL_MODULE_REGRDWR]] ||<br /> |-<br /> | 0xC0100019 || Inout || 16 || [[#NVHOST_IOCTL_CTRL_SYNCPT_WAITEX]] ||<br /> |-<br /> | 0xC008001A || Inout || 8 || [[#NVHOST_IOCTL_CTRL_SYNCPT_READ_MAX]] ||<br /> |-<br /> | 0xC183001B || Inout || 387 || [[#NVHOST_IOCTL_CTRL_GET_CONFIG]] ||<br /> |-<br /> | 0xC004001C || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_SIGNAL]] ||<br /> |-<br /> | 0xC010001D || Inout || 16 || [[#NVHOST_IOCTL_CTRL_EVENT_WAIT]] ||<br /> |-<br /> | 0xC010001E || Inout || 16 || [[#NVHOST_IOCTL_CTRL_EVENT_WAIT_ASYNC]] ||<br /> |-<br /> | 0xC004001F || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_REGISTER]] ||<br /> |-<br /> | 0xC0040020 || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_UNREGISTER]] ||<br /> |-<br /> | 0x40080021 || In || 8 || [[#NVHOST_IOCTL_CTRL_EVENT_KILL]] ||<br /> |}<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_READ ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_INCR ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_WAIT ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 thresh;<br /> __in s32 timeout;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_MODULE_MUTEX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 lock; // (0==unlock; 1==lock)<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_MODULE_REGRDWR ===<br /> Identical to Linux driver. Uses 32-bit version and doesn't work.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 num_offsets;<br /> __in u32 block_size;<br /> __in u32 offsets;<br /> __in u32 values;<br /> __in u32 write;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_WAITEX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 thresh;<br /> __in s32 timeout;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_READ_MAX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_GET_CONFIG ===<br /> Gets configured settings. Not available in production mode.<br /> <br /> struct {<br /> __in char domain_str[0x41]; // &quot;nv&quot;<br /> __in char param_str[0x41];<br /> __out char config_str[0x101];<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_SIGNAL ===<br /> Signals an user event. Exclusive to the Switch.<br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_WAIT ===<br /> Waits on an event. If waiting fails, returns error code 0x05 (Timeout) and sets '''value''' to (('''syncpt_id''' &lt;&lt; 0x10) | 0x10000000).<br /> <br /> Depending on '''threshold''', an '''user_event_id''' may be returned for using with other event ioctls.<br /> <br /> struct {<br /> __in u32 syncpt_id;<br /> __in u32 threshold;<br /> __in s32 timeout;<br /> __inout u32 value; // in=user_event_id (ignored); out=syncpt_value or user_event_id<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_WAIT_ASYNC ===<br /> Waits on an event (async version). If waiting fails, returns error code 0x0B (BadValue).<br /> <br /> Depending on '''threshold''', an '''user_event_id''' may be returned for using with other event ioctls.<br /> <br /> struct {<br /> __in u32 syncpt_id;<br /> __in u32 threshold;<br /> __in u32 timeout;<br /> __inout u32 value; // in=user_event_id (ignored); out=syncpt_value or user_event_id<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_REGISTER ===<br /> Registers an user event. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_UNREGISTER ===<br /> Unregisters an user event. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_KILL ===<br /> Kills user events. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u64 user_events; // 64-bit bitfield where each bit represents one event<br /> };<br /> <br /> == /dev/nvmap ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC0080101 || Inout || 8 || [[#NVMAP_IOC_CREATE]] ||<br /> |-<br /> | 0x00000102 || - || 0 || NVMAP_IOC_CLAIM || Returns NotSupported<br /> |-<br /> | 0xC0080103 || Inout || 8 || [[#NVMAP_IOC_FROM_ID]] ||<br /> |-<br /> | 0xC0200104 || Inout || 32 || [[#NVMAP_IOC_ALLOC]] ||<br /> |-<br /> | 0xC0180105 || Inout || 24 || [[#NVMAP_IOC_FREE]] ||<br /> |-<br /> | 0xC0280106 || Inout || 40 || NVMAP_IOC_MMAP || Returns NotSupported<br /> |-<br /> | 0xC0280107 || Inout || 40 || NVMAP_IOC_WRITE || Returns NotSupported<br /> |-<br /> | 0xC0280108 || Inout || 40 || NVMAP_IOC_READ || Returns NotSupported<br /> |-<br /> | 0xC00C0109 || Inout || 12 || [[#NVMAP_IOC_PARAM]] ||<br /> |-<br /> | 0xC010010A || Inout || 16 || NVMAP_IOC_PIN_MULT || Returns NotSupported<br /> |-<br /> | 0xC010010B || Inout || 16 || NVMAP_IOC_UNPIN_MULT || Returns NotSupported<br /> |-<br /> | 0xC008010C || Inout || 8 || NVMAP_IOC_CACHE || Returns NotSupported<br /> |-<br /> | 0xC004010D || Inout || 4 || || Returns NotSupported<br /> |-<br /> | 0xC008010E || Inout || 8 || [[#NVMAP_IOC_GET_ID]] ||<br /> |-<br /> | 0xC004010F || Inout || 4 || || Returns NotSupported<br /> |-<br /> | 0x40040110 || In || 4 || || Returns NotSupported<br /> |-<br /> | 0x00000111 || - || 0 || || Returns NotSupported<br /> |}<br /> <br /> === NVMAP_IOC_CREATE ===<br /> Creates an nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 size;<br /> __out u32 handle;<br /> };<br /> <br /> === NVMAP_IOC_FROM_ID ===<br /> Get handle to an existing nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 handle;<br /> };<br /> <br /> === NVMAP_IOC_ALLOC ===<br /> Allocate memory for the nvmap object. Nintendo extended this one with 16 bytes, and changed it from in to inout.<br /> <br /> struct {<br /> __in u32 handle;<br /> __in u32 heapmask;<br /> __in u32 flags; // (0=read-only, 1=read-write)<br /> __in u32 align;<br /> __in u8 kind;<br /> u8 pad[7];<br /> __in u64 addr;<br /> };<br /> <br /> === NVMAP_IOC_FREE ===<br /> This one is completely custom. Partly because the Linux driver passed the handle as the ioctl &quot;arg-ptr&quot;, and HIPC can't handle that voodoo.<br /> <br /> struct {<br /> __in u32 handle;<br /> u32 pad;<br /> __out u64 refcount;<br /> __out u32 size;<br /> __out u32 flags; // 1=NOT_FREED_YET<br /> };<br /> <br /> === NVMAP_IOC_PARAM ===<br /> Returns info about a nvmap object. Identical to Linux driver, but extended with further params.<br /> <br /> struct {<br /> __in u32 handle;<br /> __in u32 param; // 1=SIZE, 2=ALIGNMENT, 3=BASE (returns error), 4=HEAP (always 0x40000000), 5=KIND, 6=COMPR (unused)<br /> __out u32 result;<br /> };<br /> <br /> === NVMAP_IOC_GET_ID ===<br /> Returns an id for a nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 id; //~0 indicates error<br /> __in u32 handle;<br /> };<br /> <br /> == /dev/nvdisp-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x80040212 || Out || 4 || TEGRA_DC_EXT_CONTROL_GET_NUM_OUTPUTS ||<br /> |-<br /> | 0xC0140213 || Inout || 20 || TEGRA_DC_EXT_CONTROL_GET_OUTPUT_PROPERTIES ||<br /> |-<br /> | 0xC1100214 || Inout || 272 || TEGRA_DC_EXT_CONTROL_GET_OUTPUT_EDID ||<br /> |-<br /> | 0xC0040216 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT0 ||<br /> |-<br /> | 0xC0040217 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT1 ||<br /> |-<br /> | 0xC0100218 || Inout || 16 || TEGRA_DC_EXT_CONTROL_SET_EVENT2 ||<br /> |-<br /> | 0xC0100219 || Inout || 16 || TEGRA_DC_EXT_CONTROL_SET_EVENT3 ||<br /> |-<br /> | 0xC0040220 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT4 ||<br /> |-<br /> |}<br /> <br /> == /dev/nvdisp-disp0, /dev/nvdisp-disp1 ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40040201 || In || 4 || TEGRA_DC_EXT_GET_WINDOW ||<br /> |-<br /> | 0x40040202 || In || 4 || TEGRA_DC_EXT_PUT_WINDOW ||<br /> |-<br /> | 0xC4C80203 || In || 1224 || TEGRA_DC_EXT_FLIP ||<br /> |-<br /> | 0x80380204 || Out || 56 || TEGRA_DC_EXT_GET_MODE ||<br /> |-<br /> | 0x40380205 || Out || 56 || TEGRA_DC_EXT_SET_MODE ||<br /> |-<br /> | 0x430C0206 || In || 780 || TEGRA_DC_EXT_SET_LUT ||<br /> |-<br /> | 0x40010207 || In || 1 || TEGRA_DC_EXT_ENABLE_DISABLE_CRC ||<br /> |-<br /> | 0x80040208 || Out || 4 || TEGRA_DC_EXT_GET_CRC ||<br /> |-<br /> | 0x80040209 || Out || 4 || TEGRA_DC_EXT_GET_HEAD_STATUS ||<br /> |-<br /> | 0xC038020A || Inout || 56 || TEGRA_DC_EXT_VALIDATE_MODE ||<br /> |-<br /> | 0x4018020B || In || 24 || TEGRA_DC_EXT_SET_CSC ||<br /> |-<br /> | 0xC004020C || Inout || 4 || TEGRA_DC_EXT_GET_VBLANK_SYNCPT ||<br /> |-<br /> | 0x8040020D || Out || 64 || TEGRA_DC_EXT_GET_UNDERFLOWS ||<br /> |-<br /> | 0xC99A020E || Inout || 2458 || TEGRA_DC_EXT_SET_CMU ||<br /> |-<br /> | 0xC004020F || Inout || 4 || TEGRA_DC_EXT_DPMS ||<br /> |-<br /> | 0x80600210 || Out || 96 || TEGRA_DC_EXT_GET_AVI_INFOFRAME ||<br /> |-<br /> | 0x40600211 || In || 96 || TEGRA_DC_EXT_SET_AVI_INFOFRAME ||<br /> |-<br /> | 0xEBFC0215 || Inout || 11260 || TEGRA_DC_EXT_GET_MODE_DB ||<br /> |-<br /> | 0xC003021A || Inout || 3 || TEGRA_DC_EXT_PANEL_GET_VENDOR_ID ||<br /> |-<br /> | 0x803C021B || Out || 60 || TEGRA_DC_EXT_GET_MODE2 ||<br /> |-<br /> | 0x403C021C || In || 60 || TEGRA_DC_EXT_SET_MODE2 ||<br /> |-<br /> | 0xC03C021D || Inout || 60 || TEGRA_DC_EXT_VALIDATE_MODE2 ||<br /> |-<br /> | 0xEF20021E || Inout || 12064 || TEGRA_DC_EXT_GET_MODE_DB2 ||<br /> |-<br /> | 0xC004021F || Inout || 4 || TEGRA_DC_EXT_GET_WINMASK ||<br /> |-<br /> |}<br /> <br /> == /dev/nvcec-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40010300 || In || 1 || ||<br /> |-<br /> | 0x40010301 || In || 1 || NVCEC_CTRL_ENABLE ||<br /> |-<br /> | 0x804C0302 || Out || 76 || NVCEC_CTRL_GET_PADDR ||<br /> |-<br /> | 0x40040303 || In || 4 || NVCEC_CTRL_SET_LADDR ||<br /> |-<br /> | 0xC04C0304 || Inout || 76 || NVCEC_CTRL_WRITE ||<br /> |-<br /> | 0xC04C0305 || Inout || 76 || NVCEC_CTRL_READ ||<br /> |-<br /> | 0x804C0306 || Out || 76 || NVCEC_CTRL_GET_CONNECTION_STATUS ||<br /> |-<br /> | 0x804C0307 || Out || 76 || NVCEC_CTRL_GET_WRITE_STATUS ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhdcp_up-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC4880401 || Inout || 1160 || TEGRAIO_NVHDCP_READ_M ||<br /> |-<br /> | 0xC4880402 || Inout || 1160 || TEGRAIO_NVHDCP_READ_S ||<br /> |-<br /> | 0x40010403 || In || 1 || TEGRAIO_NVHDCP_ON_OFF ||<br /> |-<br /> |}<br /> <br /> == /dev/nvdcutil-disp0, /dev/nvdcutil-disp1 ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40010501 || In || 1 || ||<br /> |-<br /> | 0x40010502 || In || 1 || ||<br /> |-<br /> | 0x42040503 || In || 1056 || ||<br /> |-<br /> | 0x803C0504 || Out || 60 || NVDCUTIL_DISP_IOCTL_GET_DISPLAY_INFO ||<br /> |-<br /> |}<br /> <br /> == /dev/nvsched-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x00000601 || - || 0 || ||<br /> |-<br /> | 0x00000602 || - || 0 || ||<br /> |-<br /> | 0x40180603 || In || 1056 || ||<br /> |-<br /> | 0x40180604 || In || 60 || ||<br /> |-<br /> | 0x40080605 || In || 60 || ||<br /> |-<br /> | 0x80080606 || Out || 60 || ||<br /> |-<br /> | 0x80080607 || Out || 60 || ||<br /> |-<br /> | 0x40180608 || In || 24 || ||<br /> |-<br /> | 0x40100609 || In || 16 || ||<br /> |-<br /> | 0x4010060A || In || 16 || ||<br /> |-<br /> | 0x4008060B || In || 8 || ||<br /> |-<br /> | 0x8001060C || Out || 1 || ||<br /> |-<br /> | 0x8010060D || Out || 16 || ||<br /> |-<br /> | 0x400C060E || In || 12 || ||<br /> |-<br /> | 0x4008060F || In || 8 || ||<br /> |-<br /> | 0x40100610 || In || 16 || ||<br /> |-<br /> | 0x40100611 || In || 16 || ||<br /> |-<br /> |}<br /> <br /> == /dev/nverpt-ctrl ==<br /> Added in firmware version 4.0.0.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC1280701 || Inout || 296 || ||<br /> |-<br /> | 0xCF580702 || Inout || 3928 || ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhost-as-gpu ==<br /> Each fd opened to this device creates an address space. An address space is then later bound with a channel.<br /> <br /> Once a nvgpu channel has been bound to an address space it cannot be unbound. There is no support for allowing an nvgpu channel to change from one address space to another (or from one to none).<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40044101 || In || 4 || [[#NVGPU_AS_IOCTL_BIND_CHANNEL]] ||<br /> |-<br /> | 0xC0184102 || Inout || 24 || [[#NVGPU_AS_IOCTL_ALLOC_SPACE]] ||<br /> |-<br /> | 0xC0104103 || Inout || 16 || [[#NVGPU_AS_IOCTL_FREE_SPACE]] ||<br /> |-<br /> | 0xC0184104 || Inout || 24 || [[#NVGPU_AS_IOCTL_MAP_BUFFER]] ||<br /> |-<br /> | 0xC0084105 || Inout || 8 || [[#NVGPU_AS_IOCTL_UNMAP_BUFFER]] ||<br /> |-<br /> | 0xC0284106 || Inout || 40 || [[#NVGPU_AS_IOCTL_MAP_BUFFER_EX]] ||<br /> |-<br /> | 0x40104107 || In || 16 || [[#NVGPU_AS_IOCTL_INITIALIZE]] ||<br /> |-<br /> | 0xC0404108 || Inout || 64 || [[#NVGPU_AS_IOCTL_GET_VA_REGIONS]] ||<br /> |-<br /> | 0x40284109 || In || 40 || [[#NVGPU_AS_IOCTL_INITIALIZE_EX]] ||<br /> |-<br /> | 0xC0??4114 || Inout || Variable || [[#NVGPU_AS_IOCTL_REMAP]] ||<br /> |}<br /> <br /> === NVGPU_AS_IOCTL_BIND_CHANNEL ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 fd;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_ALLOC_SPACE ===<br /> This one reserves pages in the device address space.<br /> <br /> struct {<br /> __in u32 pages;<br /> __in u32 page_size;<br /> __in u32 flags;<br /> u32 pad;<br /> union {<br /> __out u64 offset;<br /> __in u64 align;<br /> };<br /> };<br /> <br /> === NVGPU_AS_IOCTL_FREE_SPACE ===<br /> struct {<br /> __in u64 offset;<br /> __in u32 pages;<br /> __in u32 page_size;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_MAP_BUFFER ===<br /> Map a memory region in the device address space. Identical to Linux driver pretty much.<br /> <br /> On success, the mapped memory region is locked by having [[SVC#MemoryState]] bit34 set.<br /> <br /> struct {<br /> __in u32 flags; // bit0: fixed_offset, bit2: cacheable<br /> u32 pad;<br /> __in u32 nvmap_handle;<br /> __inout u32 page_size; // 0 means don't care<br /> union {<br /> __out u64 offset;<br /> __in u64 align;<br /> };<br /> };<br /> <br /> === NVGPU_AS_IOCTL_MAP_BUFFER_EX ===<br /> Map a memory region in the device address space. Identical to Linux driver pretty much.<br /> <br /> On success, the mapped memory region is locked by having [[SVC#MemoryState]] bit34 set.<br /> <br /> struct {<br /> __in u32 flags; // bit0: fixed_offset, bit2: cacheable<br /> __in u32 kind; // -1 is default<br /> __in u32 nvmap_handle;<br /> __inout u32 page_size; // 0 means don't care<br /> __in u64 buffer_offset;<br /> __in u64 mapping_size;<br /> __inout u64 offset;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_UNMAP_BUFFER ===<br /> Unmap a memory region from the device address space.<br /> <br /> struct {<br /> __in u64 offset;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_INITIALIZE ===<br /> Nintendo's custom implementation of NVGPU_GPU_IOCTL_ALLOC_AS (unavailable).<br /> <br /> struct {<br /> __in u32 big_page_size; // depends on GPU's available_big_page_sizes; 0=default<br /> __in s32 as_fd; // ignored; passes 0<br /> __in u32 flags; // ignored; passes 0<br /> __in u32 reserved; // ignored; passes 0<br /> };<br /> <br /> === NVGPU_AS_IOCTL_GET_VA_REGIONS ===<br /> Nintendo modified to get rid of pointer in struct.<br /> <br /> struct va_region {<br /> u64 offset;<br /> u32 page_size;<br /> u32 pad;<br /> u64 pages;<br /> };<br /> <br /> struct {<br /> u64 not_used; // (contained output user ptr on linux, ignored)<br /> __inout u32 bufsize; // forced to 2*sizeof(struct va_region)<br /> u32 pad;<br /> __out struct va_region regions[2];<br /> };<br /> <br /> === NVGPU_AS_IOCTL_INITIALIZE_EX ===<br /> Nintendo's custom implementation of NVGPU_GPU_IOCTL_ALLOC_AS (unavailable) with extra params.<br /> <br /> struct {<br /> __in u32 big_page_size; // depends on GPU's available_big_page_sizes; 0=default<br /> __in s32 as_fd; // ignored; passes 0<br /> __in u32 flags; // passes 0<br /> __in u32 reserved; // ignored; passes 0<br /> __in u64 unk0;<br /> __in u64 unk1;<br /> __in u64 unk2;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_REMAP ===<br /> Nintendo's custom implementation of address space remapping.<br /> <br /> struct remap_entry {<br /> __in u16 flags; // 0 or 4<br /> __in u16 kind; <br /> __in u32 nvmap_handle;<br /> __in u32 padding;<br /> __in u32 offset; // (alloc_space_offset &gt;&gt; 0x10)<br /> __in u32 pages; // alloc_space_pages<br /> };<br /> <br /> struct {<br /> __in struct remap_entry entries[];<br /> };<br /> <br /> == /dev/nvhost-dbg-gpu ==<br /> Not accessible, but there is code to invoke it.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40084401 || In || 8 || NVGPU_DBG_GPU_IOCTL_BIND_CHANNEL ||<br /> |-<br /> | 0xC0??4402 || Inout || Variable || NVGPU_DBG_GPU_IOCTL_REG_OPS ||<br /> |-<br /> | 0x40084403 || In || 8 || NVGPU_DBG_GPU_IOCTL_EVENTS_CTRL ||<br /> |-<br /> | 0x40044404 || In || 4 || NVGPU_DBG_GPU_IOCTL_POWERGATE ||<br /> |-<br /> | 0x40044405 || In || 4 || NVGPU_DBG_GPU_IOCTL_SMPC_CTXSW_MODE ||<br /> |-<br /> | 0xC0184407 || Inout || 24 || NVGPU_DBG_GPU_IOCTL_PERFBUF_MAP ||<br /> |-<br /> | 0x40084408 || In || 8 || NVGPU_DBG_GPU_IOCTL_PERFBUF_UNMAP ||<br /> |-<br /> | 0x40084409 || In || 8 || NVGPU_DBG_GPU_IOCTL_PC_SAMPLING ||<br /> |-<br /> | 0x4008440A || In || 8 || NVGPU_DBG_GPU_IOCTL_TIMEOUT ||<br /> |-<br /> | 0x8008440B || Out || 8 || NVGPU_DBG_GPU_IOCTL_GET_TIMEOUT ||<br /> |-<br /> | 0x8004440C || Out || 4 || NVGPU_DBG_GPU_IOCTL_GET_GR_CONTEXT_SIZE ||<br /> |-<br /> | 0x0000440D || None || 0 || NVGPU_DBG_GPU_IOCTL_GET_GR_CONTEXT (uses Ioctl3) ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhost-ctrl-gpu ==<br /> This device is for global (context independent) operations on the gpu. <br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x80044701 || Out || 4 || [[#NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE]] ||<br /> |-<br /> | 0x80284702 || Out || 40 || [[#NVGPU_GPU_IOCTL_ZCULL_GET_INFO]] ||<br /> |-<br /> | 0x402C4703 || In || 44 || [[#NVGPU_GPU_IOCTL_ZBC_SET_TABLE]] ||<br /> |-<br /> | 0xC0344704 || Inout || 52 || [[#NVGPU_GPU_IOCTL_ZBC_QUERY_TABLE]] ||<br /> |-<br /> | 0xC0B04705 || Inout || 176 || [[#NVGPU_GPU_IOCTL_GET_CHARACTERISTICS]] ||<br /> |-<br /> | 0xC0184706 || Inout || 24 || NVGPU_GPU_IOCTL_GET_TPC_MASKS ||<br /> |-<br /> | 0x40084707 || In || 8 || [[#NVGPU_GPU_IOCTL_FLUSH_L2]] ||<br /> |-<br /> | 0x4008470E || In || 8 || NVGPU_GPU_IOCTL_SET_MMUDEBUG_MODE ||<br /> |-<br /> | 0x4010470F || In || 16 || NVGPU_GPU_IOCTL_SET_SM_DEBUG_MODE ||<br /> |-<br /> | 0xC0084710 || Inout || 8 || NVGPU_GPU_IOCTL_WAIT_FOR_PAUSE ||<br /> |-<br /> | 0x80084711 || Out || 8 || NVGPU_GPU_IOCTL_GET_TPC_EXCEPTION_EN_STATUS ||<br /> |-<br /> | 0x80084712 || Out || 8 || NVGPU_GPU_IOCTL_NUM_VSMS ||<br /> |-<br /> | 0xC0044713 || Inout || 4 || NVGPU_GPU_IOCTL_VSMS_MAPPING ||<br /> |-<br /> | 0x80084714 || Out || 8 || [[#NVGPU_GPU_IOCTL_ZBC_GET_ACTIVE_SLOT_MASK]] ||<br /> |-<br /> | 0x80044715 || Out || 4 || ||<br /> |-<br /> | 0x8018471A || Out || 24 || ||<br /> |-<br /> | 0xC008471B || Inout || 8 || NVGPU_GPU_IOCTL_GET_ERROR_CHANNEL_USER_DATA ||<br /> |-<br /> | 0xC010471C || Inout || 16 || NVGPU_GPU_IOCTL_GET_GPU_TIME ||<br /> |-<br /> | 0xC108471D || Inout || 264 || NVGPU_GPU_IOCTL_GET_CPU_TIME_CORRELATION_INFO ||<br /> |}<br /> <br /> === NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE ===<br /> Returns the GPU's ZCULL context size. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 size;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE ===<br /> Returns GPU's ZCULL information. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 width_align_pixels;<br /> __out u32 height_align_pixels;<br /> __out u32 pixel_squares_by_aliquots;<br /> __out u32 aliquot_total;<br /> __out u32 region_byte_multiplier;<br /> __out u32 region_header_size;<br /> __out u32 subregion_header_size;<br /> __out u32 subregion_width_align_pixels;<br /> __out u32 subregion_height_align_pixels;<br /> __out u32 subregion_count;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_SET_TABLE ===<br /> Sets the active ZBC table. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 color_ds[4];<br /> __in u32 color_l2[4];<br /> __in u32 depth;<br /> __in u32 format;<br /> __in u32 type; // 1=color, 2=depth<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_QUERY_TABLE ===<br /> Queries the active ZBC table. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 color_ds[4];<br /> __out u32 color_l2[4];<br /> __out u32 depth;<br /> __out u32 ref_cnt;<br /> __out u32 format;<br /> __out u32 type;<br /> __inout u32 index_size;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_GET_CHARACTERISTICS ===<br /> Returns the GPU characteristics. Modified to return inline data instead of using a pointer.<br /> <br /> struct gpu_characteristics {<br /> u32 arch; // 0x120 (NVGPU_GPU_ARCH_GM200)<br /> u32 impl; // 0xB (NVGPU_GPU_IMPL_GM20B)<br /> u32 rev; // 0xA1 (Revision A1)<br /> u32 num_gpc; // 0x1<br /> u64 l2_cache_size; // 0x40000<br /> u64 on_board_video_memory_size; // 0x0 (not used)<br /> u32 num_tpc_per_gpc; // 0x2<br /> u32 bus_type; // 0x20 (NVGPU_GPU_BUS_TYPE_AXI)<br /> u32 big_page_size; // 0x20000<br /> u32 compression_page_size; // 0x20000<br /> u32 pde_coverage_bit_count; // 0x1B<br /> u32 available_big_page_sizes; // 0x30000<br /> u32 gpc_mask; // 0x1<br /> u32 sm_arch_sm_version; // 0x503 (Maxwell Generation 5.0.3?)<br /> u32 sm_arch_spa_version; // 0x503 (Maxwell Generation 5.0.3?)<br /> u32 sm_arch_warp_count; // 0x80<br /> u32 gpu_va_bit_count; // 0x28<br /> u32 reserved; // NULL<br /> u64 flags; // 0x55<br /> u32 twod_class; // 0x902D (FERMI_TWOD_A)<br /> u32 threed_class; // 0xB197 (MAXWELL_B)<br /> u32 compute_class; // 0xB1C0 (MAXWELL_COMPUTE_B)<br /> u32 gpfifo_class; // 0xB06F (MAXWELL_CHANNEL_GPFIFO_A)<br /> u32 inline_to_memory_class; // 0xA140 (KEPLER_INLINE_TO_MEMORY_B)<br /> u32 dma_copy_class; // 0xB0B5 (MAXWELL_DMA_COPY_A)<br /> u32 max_fbps_count; // 0x1<br /> u32 fbp_en_mask; // 0x0 (disabled)<br /> u32 max_ltc_per_fbp; // 0x2<br /> u32 max_lts_per_ltc; // 0x1<br /> u32 max_tex_per_tpc; // 0x0 (not supported)<br /> u32 max_gpc_count; // 0x1<br /> u32 rop_l2_en_mask_0; // 0x21D70 (fuse_status_opt_rop_l2_fbp_r)<br /> u32 rop_l2_en_mask_1; // 0x0<br /> u64 chipname; // 0x6230326D67 (&quot;gm20b&quot;)<br /> u64 gr_compbit_store_base_hw; // 0x0 (not supported)<br /> };<br /> <br /> struct {<br /> __inout u64 gpu_characteristics_buf_size; // must not be NULL, but gets overwritten with 0xA0=max_size<br /> __in u64 gpu_characteristics_buf_addr; // ignored, but must not be NULL<br /> __out struct gpu_characteristics gc;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_FLUSH_L2 ===<br /> Flushes the GPU L2 cache.<br /> <br /> struct {<br /> __in u32 flush; // l2_flush | l2_invalidate &lt;&lt; 1 | fb_flush &lt;&lt; 2<br /> u32 reserved;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_GET_ACTIVE_SLOT_MASK ===<br /> Returns the mask value for a ZBC slot.<br /> <br /> struct {<br /> __out u32 slot; // always 0x07<br /> __out u32 mask;<br /> };<br /> <br /> == Channels ==<br /> Channels are a concept for NVIDIA hardware blocks that share a common interface.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Path || Name<br /> |-<br /> | /dev/nvhost-gpu ||<br /> |-<br /> | /dev/nvhost-vic || Video Image Compositor<br /> |-<br /> | /dev/nvhost-nvdec || Video Decoder<br /> |-<br /> | /dev/nvhost-nvjpg || JPEG Decoder<br /> |}<br /> <br /> == Channel Ioctls ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Size || Description || Notes<br /> |-<br /> | 0xC0??0001 || Variable || NVHOST_IOCTL_CHANNEL_SUBMIT ||<br /> |-<br /> | 0xC0080002 || 8 || NVHOST_IOCTL_CHANNEL_GET_SYNCPOINT ||<br /> |-<br /> | 0xC0080003 || 8 || NVHOST_IOCTL_CHANNEL_GET_WAITBASE ||<br /> |-<br /> | 0xC0080004 || 8 || NVHOST_IOCTL_CHANNEL_SET_TIMEOUT_EX ||<br /> |-<br /> | 0x40040007 || 4 || ||<br /> |-<br /> | 0x40080008 || 8 || NVHOST_IOCTL_CHANNEL_SET_CLK_RATE ||<br /> |-<br /> | 0xC0??0009 || Variable || NVHOST_IOCTL_CHANNEL_MAP_BUFFER ||<br /> |-<br /> | 0xC0??000A || Variable || NVHOST_IOCTL_CHANNEL_UNMAP_BUFFER ||<br /> |-<br /> | 0x00000013 || 0 || ||<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40044801 || 4 || [[#NVGPU_IOCTL_CHANNEL_SET_NVMAP_FD]] ||<br /> |-<br /> | 0x40044803 || 4 || NVGPU_IOCTL_CHANNEL_SET_TIMEOUT ||<br /> |-<br /> | 0x40084805 || 8 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO]] ||<br /> |-<br /> | 0xC0044807 || 4 || NVGPU_IOCTL_CHANNEL_CYCLE_STATS ||<br /> |-<br /> | 0xC0??4808 || Variable || [[#NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO]] ||<br /> |-<br /> | 0xC0104809 || 16 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_OBJ_CTX]] ||<br /> |-<br /> | 0xC010480B || 16 || [[#NVGPU_IOCTL_CHANNEL_ZCULL_BIND]] ||<br /> |-<br /> | 0xC018480C || 24 || [[#NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER]] ||<br /> |-<br /> | 0x4004480D || 4 || [[#NVGPU_IOCTL_CHANNEL_SET_PRIORITY]] ||<br /> |-<br /> | 0x0000480E || 0 || [[#NVGPU_IOCTL_CHANNEL_ENABLE]] ||<br /> |-<br /> | 0x0000480F || 0 || [[#NVGPU_IOCTL_CHANNEL_DISABLE]] ||<br /> |-<br /> | 0x00004810 || 0 || [[#NVGPU_IOCTL_CHANNEL_PREEMPT]] ||<br /> |-<br /> | 0x00004811 || 0 || [[#NVGPU_IOCTL_CHANNEL_FORCE_RESET]] ||<br /> |-<br /> | 0x40084812 || 8 || [[#NVGPU_IOCTL_CHANNEL_EVENT_ID_CONTROL]] ||<br /> |-<br /> | 0xC0104813 || 16 || NVGPU_IOCTL_CHANNEL_CYCLE_STATS_SNAPSHOT ||<br /> |-<br /> | 0x80804816 || 128 || NVGPU_IOCTL_CHANNEL_GET_ERROR_INFO ||<br /> |-<br /> | 0xC0104817 || 16 || [[#NVGPU_IOCTL_CHANNEL_GET_ERROR_NOTIFICATION]] ||<br /> |-<br /> | 0x40204818 || 32 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX]] ||<br /> |-<br /> | 0xC0??4819 || Variable || [[#NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_RETRY]] ||<br /> |-<br /> | 0xC020481A || 32 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX2]] ||<br /> |-<br /> | 0xC018481B || 24 || (uses Ioctl2) ||<br /> |-<br /> | 0xC018481C || 24 || (uses Ioctl2) ||<br /> |-<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40084714 || 8 || NVGPU_IOCTL_CHANNEL_SET_USER_DATA || Sets an unknown user context address<br /> |-<br /> | 0x80084715 || 8 || NVGPU_IOCTL_CHANNEL_GET_USER_DATA || Gets an unknown user context address<br /> |}<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_NVMAP_FD ===<br /> Binds a nvmap object to this channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 nvmap_fd;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO ===<br /> Allocates gpfifo entries. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 num_entries;<br /> __in u32 flags;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO ===<br /> Submits a gpfifo object. Modified to take inline entry objects instead of a pointer.<br /> <br /> struct fence {<br /> u32 id;<br /> u32 value;<br /> };<br /> <br /> struct gpfifo_entry {<br /> u32 entry0; // gpu_va_lo<br /> u32 entry1; // gpu_va_hi | (unk_0x02 &lt;&lt; 0x08) | (size &lt;&lt; 0x0A) | (unk_0x01 &lt;&lt; 0x1F)<br /> };<br /> <br /> struct {<br /> __in u64 gpfifo; // (ignored) pointer to gpfifo fence structs<br /> __in u32 num_entries; // number of fence objects being submitted<br /> __in u32 flags;<br /> __out struct fence fence_out; // returned new fence object for others to wait on<br /> __in struct gpfifo_entry entries[]; // depends on num_entries<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_OBJ_CTX ===<br /> Allocates a graphics context object. Modified to ignore object's ID.<br /> <br /> struct {<br /> __in u32 class_num; // 0x902D=2d, 0xB197=3d, 0xB1C0=compute, 0xA140=kepler, 0xB0B5=DMA, 0xB06F=channel_gpfifo<br /> __in u32 flags;<br /> __out u64 obj_id; // (ignored) used for FREE_OBJ_CTX ioctl, which is not supported<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ZCULL_BIND ===<br /> Binds a ZCULL context to the channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u64 gpu_va;<br /> __in u32 mode; // 0=global, 1=no_ctxsw, 2=separate_buffer, 3=part_of_regular_buf<br /> __in u32 padding;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER ===<br /> Initializes the error notifier for this channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u64 offset;<br /> __in u64 size;<br /> __in u32 mem; // nvmap object handle<br /> __in u32 padding;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_PRIORITY ===<br /> Change channel's priority. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 priority; // 0x32 is low, 0x64 is medium and 0x96 is high<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ENABLE ===<br /> Enables the current channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_DISABLE ===<br /> Disables the current channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_PREEMPT ===<br /> Clears the FIFO pipe for this channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_FORCE_RESET ===<br /> Forces the channel to reset. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_EVENT_ID_CONTROL ===<br /> Controls event notifications.<br /> <br /> struct {<br /> __in u32 cmd; // 0=disable, 1=enable, 2=clear<br /> __in u32 id;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_GET_ERROR_NOTIFICATION ===<br /> Returns the current error notification caught by the error notifier. Exclusive to the Switch.<br /> <br /> struct {<br /> __out u64 timestamp; // nanoseconds since Jan. 1, 1970<br /> __out u32 info32; // error code<br /> __out u16 info16; // additional error info<br /> __inout u16 status; // always 0xFFFF<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_RETRY ===<br /> Allocates gpfifo entries with additional parameters. Exclusive to the Switch.<br /> <br /> struct {<br /> __in u32 num_entries;<br /> __in u32 flags;<br /> __in u32 unk0; // 1 works<br /> __in u32 unk1;<br /> __in u32 unk2;<br /> __in u32 unk3;<br /> __in u32 unk4;<br /> __in u32 unk5;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_EX ===<br /> Submits a gpfifo object (async version). Exclusive to the Switch.<br /> <br /> struct {<br /> u64 __gpfifo; // in (pointer to gpfifo fence structs; ignored)<br /> u32 __num_entries; // in (number of fence objects being submitted)<br /> u32 __flags; // in<br /> struct fence __fence_out; // out (returned new fence object for others to wait on)<br /> struct gpfifo_entry __entries[]; // in (depends on __num_entries)<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX2 ===<br /> Allocates gpfifo entries with additional parameters and returns a fence. Exclusive to the Switch.<br /> <br /> struct {<br /> u32 __num_entries; // in<br /> u32 __flags; // in<br /> u32 __unk0; // in (1 works)<br /> struct fence __fence_out; // out<br /> u32 __unk1; // in<br /> u32 __unk2; // in<br /> u32 __unk3; // in<br /> };<br /> <br /> = nvmemp =<br /> NVIDIA memory profiler (this service is not available on retail units). <br /> /dev/nvhost-ctrl sends the ioctl NVHOST_IOCTL_CTRL_GET_CONFIG to check the config &quot;nv!NV_MEMORY_PROFILER&quot;. If config_str returns &quot;1&quot;, the applications attempts to talk to use nvmemp.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Cmd0<br /> |-<br /> | 1 || Cmd1<br /> |}<br /> <br /> = nvdrvdbg =<br /> This is &quot;nns::nvdrv::INvDrvDebugFSServices&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenLog]]<br /> |-<br /> | 1 || [[#CloseLog]]<br /> |-<br /> | 2 || [[#ReadLog]]<br /> |}<br /> <br /> == OpenLog ==<br /> Takes process handle. Returns an fd.<br /> <br /> == CloseLog ==<br /> Takes fd and closes it.<br /> <br /> == ReadLog ==<br /> Takes fd and reads log into a type-6 buffer.<br /> <br /> = Errors =<br /> Most nvidia driver commands return an error code apart from the normal return code.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Success<br /> |-<br /> | 1 || NotImplemented<br /> |-<br /> | 2 || NotSupported<br /> |-<br /> | 3 || NotInitialized<br /> |-<br /> | 4 || BadParameter<br /> |-<br /> | 5 || Timeout<br /> |-<br /> | 6 || InsufficientMemory<br /> |-<br /> | 7 || ReadOnlyAttribute<br /> |-<br /> | 8 || InvalidState<br /> |-<br /> | 9 || InvalidAddress<br /> |-<br /> | 0xA || InvalidSize<br /> |-<br /> | 0xB || BadValue<br /> |-<br /> | 0xD || AlreadyAllocated<br /> |-<br /> | 0xE || Busy<br /> |-<br /> | 0xF || ResourceError<br /> |-<br /> | 0x10 || CountMismatch<br /> |-<br /> | 0x1000 || SharedMemoryTooSmall<br /> |-<br /> | 0x30003 || FileOperationFailed<br /> |-<br /> | 0x30004 || DirOperationFailed<br /> |-<br /> | 0x3000E || ?<br /> |-<br /> | 0x3000F || IoctlFailed <br /> |-<br /> | 0x30010 || AccessDenied<br /> |-<br /> | 0x30013 || FileNotFound<br /> |-<br /> | 0xA000E || ModuleNotPresent<br /> |}<br /> <br /> = Panic =<br /> In some cases, a panic may occur. NV forces a crash by doing:<br /> (void *)0 = 0xCAFE;<br /> End result is that the system hangs with a white-screen.<br /> <br /> == Gpfifo Panic ==<br /> When the gpfifo data in the gpu_va buffers specified by the submitted gpfifo entries is invalid(?), eventually the user-process will be force-terminated after using the submit-gpfifo ioctl. It's unknown how exactly this is done.<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23 https://switchbrew.org/w/index.php?title=NV_services&diff=3694 2018-02-10T01:45:39Z

<p>Shinyquagsire23: /* Errors */ Let&#039;s just get these all in here</p> <hr /> <div>The Switch uses a customized NVIDIA driver.<br /> <br /> = nvdrv, nvdrv:a, nvdrv:s, nvdrv:t =<br /> This is &quot;nns::nvdrv::INvDrvServices&quot;.<br /> <br /> Main NVIDIA driver service.<br /> <br /> Each service is used by:<br /> * &quot;nvdrv&quot;: regular applications<br /> * &quot;nvdrv:a&quot;: applets<br /> * &quot;nvdrv:s&quot;: sysmodules<br /> * &quot;nvdrv:t&quot;: factory titles<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#Open]]<br /> |-<br /> | 1 || [[#Ioctl]]<br /> |-<br /> | 2 || [[#Close]]<br /> |-<br /> | 3 || [[#Initialize]]<br /> |-<br /> | 4 || [[#QueryEvent]]<br /> |-<br /> | 5 || [[#MapSharedMem]]<br /> |-<br /> | 6 || [[#GetStatus]]<br /> |-<br /> | 7 || [[#ForceSetClientPID]]<br /> |-<br /> | 8 || [[#SetClientPID]]<br /> |-<br /> | 9 || [[#DumpGraphicsMemoryInfo]]<br /> |-<br /> | 10 || [3.0.0+]<br /> |-<br /> | 11 || [3.0.0+] [[#Ioctl2]]<br /> |-<br /> | 12 || [3.0.0+] [[#Ioctl3]]<br /> |-<br /> | 13 || [3.0.0+]<br /> |}<br /> <br /> == Open ==<br /> Takes a type-0x5 input buffer for the device-path. Returns the output 32bit '''fd''' and the u32 '''error_code'''.<br /> <br /> == Ioctl ==<br /> Takes a 32bit '''fd''', an u32 '''ioctl_cmd''', a type-0x21 input buffer, and a type-0x22 output buffer. Returns an output u32 ('''error_code''').<br /> <br /> The addr/size for send/recv buffers are only set when the associated direction bit is set in the ioctl cmd (addr/size = 0 otherwise).<br /> <br /> == Close ==<br /> Takes a 32bit '''fd'''. Returns an output u32 ('''error_code''').<br /> <br /> == Initialize ==<br /> Takes two copy-handles ('''current_process''' and '''transfer_memory''') and an input u32 ('''transfer_memory_size'''). Returns an output u32 ('''error_code''').<br /> <br /> Webkit applet creates the transfer-memory with perm = 0 and size 0x300000.<br /> <br /> == QueryEvent ==<br /> Takes two input u32s ('''fd''' and '''event_id'''), with the second word immediately after the first one. Returns an output u32 ('''error_code''') and a copy-handle ('''event_handle''').<br /> <br /> == MapSharedMem ==<br /> Takes a copy-handle ('''transfer_memory''') and two input u32s ('''fd''' and '''nvmap_handle'''). Returns an output u32 ('''error_code''').<br /> <br /> == GetStatus ==<br /> Takes no input. Returns 0x10-bytes and an output u32 ('''error_code''').<br /> <br /> == ForceSetClientPID ==<br /> Takes an input u64 which must [[IPC_Marshalling|match]] the user-process PID ([[AM_services|AppletResourceUserId]]). Returns an output u32 ('''error_code''').<br /> <br /> == SetClientPID ==<br /> Takes a PID-descriptor and an u64 which must [[IPC_Marshalling|match]] the user-process PID ([[AM_services|AppletResourceUserId]]). Returns an output u32 ('''error_code''').<br /> <br /> == DumpGraphicsMemoryInfo ==<br /> No input or output. Does nothing.<br /> <br /> == Cmd10 ==<br /> Takes a copy-handle and an input u32. Returns an output u32 ('''error_code''').<br /> <br /> == Ioctl2 ==<br /> Takes a type-0x21 buffer, a type-0x22 buffer, a type-0x21 buffer, and two input u32s. Returns an output u32 ('''error_code''').<br /> <br /> == Ioctl3 ==<br /> Same input/output as Ioctl2, except cmdhdr_word1 is 0x100B instead of 0xC0B.<br /> <br /> == Cmd13 ==<br /> Takes an input u64. No output.<br /> <br /> Official user-processes starting with 3.0.0 now use this at the end of nvdrv service init with value 0x1.<br /> <br /> = Ioctls =<br /> The ioctl number is generated with the following primitive (see Linux kernel):<br /> <br /> #define _IOC(inout, group, num, len) \<br /> (inout | ((len &amp; IOCPARM_MASK) &lt;&lt; 16) | ((group) &lt;&lt; 8) | (num))<br /> <br /> The following table contains known ioctls.<br /> <br /> == /dev/nvhost-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC0080014 || Inout || 8 || [[#NVHOST_IOCTL_CTRL_SYNCPT_READ]] ||<br /> |-<br /> | 0x40040015 || In || 4 || [[#NVHOST_IOCTL_CTRL_SYNCPT_INCR]] ||<br /> |-<br /> | 0xC00C0016 || Inout || 12 || [[#NVHOST_IOCTL_CTRL_SYNCPT_WAIT]] ||<br /> |-<br /> | 0x40080017 || In || 8 || [[#NVHOST_IOCTL_CTRL_MODULE_MUTEX]] ||<br /> |-<br /> | 0xC0180018 || Inout || 24 || [[#NVHOST_IOCTL_CTRL_MODULE_REGRDWR]] ||<br /> |-<br /> | 0xC0100019 || Inout || 16 || [[#NVHOST_IOCTL_CTRL_SYNCPT_WAITEX]] ||<br /> |-<br /> | 0xC008001A || Inout || 8 || [[#NVHOST_IOCTL_CTRL_SYNCPT_READ_MAX]] ||<br /> |-<br /> | 0xC183001B || Inout || 387 || [[#NVHOST_IOCTL_CTRL_GET_CONFIG]] ||<br /> |-<br /> | 0xC004001C || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_SIGNAL]] ||<br /> |-<br /> | 0xC010001D || Inout || 16 || [[#NVHOST_IOCTL_CTRL_EVENT_WAIT]] ||<br /> |-<br /> | 0xC010001E || Inout || 16 || [[#NVHOST_IOCTL_CTRL_EVENT_WAIT_ASYNC]] ||<br /> |-<br /> | 0xC004001F || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_REGISTER]] ||<br /> |-<br /> | 0xC0040020 || Inout || 4 || [[#NVHOST_IOCTL_CTRL_EVENT_UNREGISTER]] ||<br /> |-<br /> | 0x40080021 || In || 8 || [[#NVHOST_IOCTL_CTRL_EVENT_KILL]] ||<br /> |}<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_READ ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_INCR ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_WAIT ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 thresh;<br /> __in s32 timeout;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_MODULE_MUTEX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 lock; // (0==unlock; 1==lock)<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_MODULE_REGRDWR ===<br /> Identical to Linux driver. Uses 32-bit version and doesn't work.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 num_offsets;<br /> __in u32 block_size;<br /> __in u32 offsets;<br /> __in u32 values;<br /> __in u32 write;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_WAITEX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __in u32 thresh;<br /> __in s32 timeout;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_SYNCPT_READ_MAX ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 value;<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_GET_CONFIG ===<br /> Gets configured settings. Not available in production mode.<br /> <br /> struct {<br /> __in char domain_str[0x41]; // &quot;nv&quot;<br /> __in char param_str[0x41];<br /> __out char config_str[0x101];<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_SIGNAL ===<br /> Signals an user event. Exclusive to the Switch.<br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_WAIT ===<br /> Waits on an event. If waiting fails, returns error code 0x05 (Timeout) and sets '''value''' to (('''syncpt_id''' &lt;&lt; 0x10) | 0x10000000).<br /> <br /> Depending on '''threshold''', an '''user_event_id''' may be returned for using with other event ioctls.<br /> <br /> struct {<br /> __in u32 syncpt_id;<br /> __in u32 threshold;<br /> __in s32 timeout;<br /> __inout u32 value; // in=user_event_id (ignored); out=syncpt_value or user_event_id<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_WAIT_ASYNC ===<br /> Waits on an event (async version). If waiting fails, returns error code 0x0B (BadValue).<br /> <br /> Depending on '''threshold''', an '''user_event_id''' may be returned for using with other event ioctls.<br /> <br /> struct {<br /> __in u32 syncpt_id;<br /> __in u32 threshold;<br /> __in u32 timeout;<br /> __inout u32 value; // in=user_event_id (ignored); out=syncpt_value or user_event_id<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_REGISTER ===<br /> Registers an user event. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_UNREGISTER ===<br /> Unregisters an user event. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u32 user_event_id; // ranges from 0x00 to 0x3F<br /> };<br /> <br /> === NVHOST_IOCTL_CTRL_EVENT_KILL ===<br /> Kills user events. Exclusive to the Switch. <br /> <br /> struct {<br /> __in u64 user_events; // 64-bit bitfield where each bit represents one event<br /> };<br /> <br /> == /dev/nvmap ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC0080101 || Inout || 8 || [[#NVMAP_IOC_CREATE]] ||<br /> |-<br /> | 0x00000102 || - || 0 || NVMAP_IOC_CLAIM || Returns NotSupported<br /> |-<br /> | 0xC0080103 || Inout || 8 || [[#NVMAP_IOC_FROM_ID]] ||<br /> |-<br /> | 0xC0200104 || Inout || 32 || [[#NVMAP_IOC_ALLOC]] ||<br /> |-<br /> | 0xC0180105 || Inout || 24 || [[#NVMAP_IOC_FREE]] ||<br /> |-<br /> | 0xC0280106 || Inout || 40 || NVMAP_IOC_MMAP || Returns NotSupported<br /> |-<br /> | 0xC0280107 || Inout || 40 || NVMAP_IOC_WRITE || Returns NotSupported<br /> |-<br /> | 0xC0280108 || Inout || 40 || NVMAP_IOC_READ || Returns NotSupported<br /> |-<br /> | 0xC00C0109 || Inout || 12 || [[#NVMAP_IOC_PARAM]] ||<br /> |-<br /> | 0xC010010A || Inout || 16 || NVMAP_IOC_PIN_MULT || Returns NotSupported<br /> |-<br /> | 0xC010010B || Inout || 16 || NVMAP_IOC_UNPIN_MULT || Returns NotSupported<br /> |-<br /> | 0xC008010C || Inout || 8 || NVMAP_IOC_CACHE || Returns NotSupported<br /> |-<br /> | 0xC004010D || Inout || 4 || || Returns NotSupported<br /> |-<br /> | 0xC008010E || Inout || 8 || [[#NVMAP_IOC_GET_ID]] ||<br /> |-<br /> | 0xC004010F || Inout || 4 || || Returns NotSupported<br /> |-<br /> | 0x40040110 || In || 4 || || Returns NotSupported<br /> |-<br /> | 0x00000111 || - || 0 || || Returns NotSupported<br /> |}<br /> <br /> === NVMAP_IOC_CREATE ===<br /> Creates an nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 size;<br /> __out u32 handle;<br /> };<br /> <br /> === NVMAP_IOC_FROM_ID ===<br /> Get handle to an existing nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 id;<br /> __out u32 handle;<br /> };<br /> <br /> === NVMAP_IOC_ALLOC ===<br /> Allocate memory for the nvmap object. Nintendo extended this one with 16 bytes, and changed it from in to inout.<br /> <br /> struct {<br /> __in u32 handle;<br /> __in u32 heapmask;<br /> __in u32 flags; // (0=read-only, 1=read-write)<br /> __in u32 align;<br /> __in u8 kind;<br /> u8 pad[7];<br /> __in u64 addr;<br /> };<br /> <br /> === NVMAP_IOC_FREE ===<br /> This one is completely custom. Partly because the Linux driver passed the handle as the ioctl &quot;arg-ptr&quot;, and HIPC can't handle that voodoo.<br /> <br /> struct {<br /> __in u32 handle;<br /> u32 pad;<br /> __out u64 refcount;<br /> __out u32 size;<br /> __out u32 flags; // 1=NOT_FREED_YET<br /> };<br /> <br /> === NVMAP_IOC_PARAM ===<br /> Returns info about a nvmap object. Identical to Linux driver, but extended with further params.<br /> <br /> struct {<br /> __in u32 handle;<br /> __in u32 param; // 1=SIZE, 2=ALIGNMENT, 3=BASE (returns error), 4=HEAP (always 0x40000000), 5=KIND, 6=COMPR (unused)<br /> __out u32 result;<br /> };<br /> <br /> === NVMAP_IOC_GET_ID ===<br /> Returns an id for a nvmap object. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 id; //~0 indicates error<br /> __in u32 handle;<br /> };<br /> <br /> == /dev/nvdisp-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x80040212 || Out || 4 || TEGRA_DC_EXT_CONTROL_GET_NUM_OUTPUTS ||<br /> |-<br /> | 0xC0140213 || Inout || 20 || TEGRA_DC_EXT_CONTROL_GET_OUTPUT_PROPERTIES ||<br /> |-<br /> | 0xC1100214 || Inout || 272 || TEGRA_DC_EXT_CONTROL_GET_OUTPUT_EDID ||<br /> |-<br /> | 0xC0040216 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT0 ||<br /> |-<br /> | 0xC0040217 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT1 ||<br /> |-<br /> | 0xC0100218 || Inout || 16 || TEGRA_DC_EXT_CONTROL_SET_EVENT2 ||<br /> |-<br /> | 0xC0100219 || Inout || 16 || TEGRA_DC_EXT_CONTROL_SET_EVENT3 ||<br /> |-<br /> | 0xC0040220 || Inout || 4 || TEGRA_DC_EXT_CONTROL_SET_EVENT4 ||<br /> |-<br /> |}<br /> <br /> == /dev/nvdisp-disp0, /dev/nvdisp-disp1 ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40040201 || In || 4 || TEGRA_DC_EXT_GET_WINDOW ||<br /> |-<br /> | 0x40040202 || In || 4 || TEGRA_DC_EXT_PUT_WINDOW ||<br /> |-<br /> | 0xC4C80203 || In || 1224 || TEGRA_DC_EXT_FLIP ||<br /> |-<br /> | 0x80380204 || Out || 56 || TEGRA_DC_EXT_GET_MODE ||<br /> |-<br /> | 0x40380205 || Out || 56 || TEGRA_DC_EXT_SET_MODE ||<br /> |-<br /> | 0x430C0206 || In || 780 || TEGRA_DC_EXT_SET_LUT ||<br /> |-<br /> | 0x40010207 || In || 1 || TEGRA_DC_EXT_ENABLE_DISABLE_CRC ||<br /> |-<br /> | 0x80040208 || Out || 4 || TEGRA_DC_EXT_GET_CRC ||<br /> |-<br /> | 0x80040209 || Out || 4 || TEGRA_DC_EXT_GET_HEAD_STATUS ||<br /> |-<br /> | 0xC038020A || Inout || 56 || TEGRA_DC_EXT_VALIDATE_MODE ||<br /> |-<br /> | 0x4018020B || In || 24 || TEGRA_DC_EXT_SET_CSC ||<br /> |-<br /> | 0xC004020C || Inout || 4 || TEGRA_DC_EXT_GET_VBLANK_SYNCPT ||<br /> |-<br /> | 0x8040020D || Out || 64 || TEGRA_DC_EXT_GET_UNDERFLOWS ||<br /> |-<br /> | 0xC99A020E || Inout || 2458 || TEGRA_DC_EXT_SET_CMU ||<br /> |-<br /> | 0xC004020F || Inout || 4 || TEGRA_DC_EXT_DPMS ||<br /> |-<br /> | 0x80600210 || Out || 96 || TEGRA_DC_EXT_GET_AVI_INFOFRAME ||<br /> |-<br /> | 0x40600211 || In || 96 || TEGRA_DC_EXT_SET_AVI_INFOFRAME ||<br /> |-<br /> | 0xEBFC0215 || Inout || 11260 || TEGRA_DC_EXT_GET_MODE_DB ||<br /> |-<br /> | 0xC003021A || Inout || 3 || TEGRA_DC_EXT_PANEL_GET_VENDOR_ID ||<br /> |-<br /> | 0x803C021B || Out || 60 || TEGRA_DC_EXT_GET_MODE2 ||<br /> |-<br /> | 0x403C021C || In || 60 || TEGRA_DC_EXT_SET_MODE2 ||<br /> |-<br /> | 0xC03C021D || Inout || 60 || TEGRA_DC_EXT_VALIDATE_MODE2 ||<br /> |-<br /> | 0xEF20021E || Inout || 12064 || TEGRA_DC_EXT_GET_MODE_DB2 ||<br /> |-<br /> | 0xC004021F || Inout || 4 || TEGRA_DC_EXT_GET_WINMASK ||<br /> |-<br /> |}<br /> <br /> == /dev/nvcec-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40010300 || In || 1 || ||<br /> |-<br /> | 0x40010301 || In || 1 || NVCEC_CTRL_ENABLE ||<br /> |-<br /> | 0x804C0302 || Out || 76 || NVCEC_CTRL_GET_PADDR ||<br /> |-<br /> | 0x40040303 || In || 4 || NVCEC_CTRL_SET_LADDR ||<br /> |-<br /> | 0xC04C0304 || Inout || 76 || NVCEC_CTRL_WRITE ||<br /> |-<br /> | 0xC04C0305 || Inout || 76 || NVCEC_CTRL_READ ||<br /> |-<br /> | 0x804C0306 || Out || 76 || NVCEC_CTRL_GET_CONNECTION_STATUS ||<br /> |-<br /> | 0x804C0307 || Out || 76 || NVCEC_CTRL_GET_WRITE_STATUS ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhdcp_up-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC4880401 || Inout || 1160 || TEGRAIO_NVHDCP_READ_M ||<br /> |-<br /> | 0xC4880402 || Inout || 1160 || TEGRAIO_NVHDCP_READ_S ||<br /> |-<br /> | 0x40010403 || In || 1 || TEGRAIO_NVHDCP_ON_OFF ||<br /> |-<br /> |}<br /> <br /> == /dev/nvdcutil-disp0, /dev/nvdcutil-disp1 ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40010501 || In || 1 || ||<br /> |-<br /> | 0x40010502 || In || 1 || ||<br /> |-<br /> | 0x42040503 || In || 1056 || ||<br /> |-<br /> | 0x803C0504 || Out || 60 || NVDCUTIL_DISP_IOCTL_GET_DISPLAY_INFO ||<br /> |-<br /> |}<br /> <br /> == /dev/nvsched-ctrl ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x00000601 || - || 0 || ||<br /> |-<br /> | 0x00000602 || - || 0 || ||<br /> |-<br /> | 0x40180603 || In || 1056 || ||<br /> |-<br /> | 0x40180604 || In || 60 || ||<br /> |-<br /> | 0x40080605 || In || 60 || ||<br /> |-<br /> | 0x80080606 || Out || 60 || ||<br /> |-<br /> | 0x80080607 || Out || 60 || ||<br /> |-<br /> | 0x40180608 || In || 24 || ||<br /> |-<br /> | 0x40100609 || In || 16 || ||<br /> |-<br /> | 0x4010060A || In || 16 || ||<br /> |-<br /> | 0x4008060B || In || 8 || ||<br /> |-<br /> | 0x8001060C || Out || 1 || ||<br /> |-<br /> | 0x8010060D || Out || 16 || ||<br /> |-<br /> | 0x400C060E || In || 12 || ||<br /> |-<br /> | 0x4008060F || In || 8 || ||<br /> |-<br /> | 0x40100610 || In || 16 || ||<br /> |-<br /> | 0x40100611 || In || 16 || ||<br /> |-<br /> |}<br /> <br /> == /dev/nverpt-ctrl ==<br /> Added in firmware version 4.0.0.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0xC1280701 || Inout || 296 || ||<br /> |-<br /> | 0xCF580702 || Inout || 3928 || ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhost-as-gpu ==<br /> Each fd opened to this device creates an address space. An address space is then later bound with a channel.<br /> <br /> Once a nvgpu channel has been bound to an address space it cannot be unbound. There is no support for allowing an nvgpu channel to change from one address space to another (or from one to none).<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40044101 || In || 4 || [[#NVGPU_AS_IOCTL_BIND_CHANNEL]] ||<br /> |-<br /> | 0xC0184102 || Inout || 24 || [[#NVGPU_AS_IOCTL_ALLOC_SPACE]] ||<br /> |-<br /> | 0xC0104103 || Inout || 16 || [[#NVGPU_AS_IOCTL_FREE_SPACE]] ||<br /> |-<br /> | 0xC0184104 || Inout || 24 || [[#NVGPU_AS_IOCTL_MAP_BUFFER]] ||<br /> |-<br /> | 0xC0084105 || Inout || 8 || [[#NVGPU_AS_IOCTL_UNMAP_BUFFER]] ||<br /> |-<br /> | 0xC0284106 || Inout || 40 || [[#NVGPU_AS_IOCTL_MAP_BUFFER_EX]] ||<br /> |-<br /> | 0x40104107 || In || 16 || [[#NVGPU_AS_IOCTL_INITIALIZE]] ||<br /> |-<br /> | 0xC0404108 || Inout || 64 || [[#NVGPU_AS_IOCTL_GET_VA_REGIONS]] ||<br /> |-<br /> | 0x40284109 || In || 40 || [[#NVGPU_AS_IOCTL_INITIALIZE_EX]] ||<br /> |-<br /> | 0xC0??4114 || Inout || Variable || [[#NVGPU_AS_IOCTL_REMAP]] ||<br /> |}<br /> <br /> === NVGPU_AS_IOCTL_BIND_CHANNEL ===<br /> Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 fd;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_ALLOC_SPACE ===<br /> This one reserves pages in the device address space.<br /> <br /> struct {<br /> __in u32 pages;<br /> __in u32 page_size;<br /> __in u32 flags;<br /> u32 pad;<br /> union {<br /> __out u64 offset;<br /> __in u64 align;<br /> };<br /> };<br /> <br /> === NVGPU_AS_IOCTL_FREE_SPACE ===<br /> struct {<br /> __in u64 offset;<br /> __in u32 pages;<br /> __in u32 page_size;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_MAP_BUFFER ===<br /> Map a memory region in the device address space. Identical to Linux driver pretty much.<br /> <br /> On success, the mapped memory region is locked by having [[SVC#MemoryState]] bit34 set.<br /> <br /> struct {<br /> __in u32 flags; // bit0: fixed_offset, bit2: cacheable<br /> u32 pad;<br /> __in u32 nvmap_handle;<br /> __inout u32 page_size; // 0 means don't care<br /> union {<br /> __out u64 offset;<br /> __in u64 align;<br /> };<br /> };<br /> <br /> === NVGPU_AS_IOCTL_MAP_BUFFER_EX ===<br /> Map a memory region in the device address space. Identical to Linux driver pretty much.<br /> <br /> On success, the mapped memory region is locked by having [[SVC#MemoryState]] bit34 set.<br /> <br /> struct {<br /> __in u32 flags; // bit0: fixed_offset, bit2: cacheable<br /> __in u32 kind; // -1 is default<br /> __in u32 nvmap_handle;<br /> __inout u32 page_size; // 0 means don't care<br /> __in u64 buffer_offset;<br /> __in u64 mapping_size;<br /> __inout u64 offset;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_UNMAP_BUFFER ===<br /> Unmap a memory region from the device address space.<br /> <br /> struct {<br /> __in u64 offset;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_INITIALIZE ===<br /> Nintendo's custom implementation of NVGPU_GPU_IOCTL_ALLOC_AS (unavailable).<br /> <br /> struct {<br /> __in u32 big_page_size; // depends on GPU's available_big_page_sizes; 0=default<br /> __in s32 as_fd; // ignored; passes 0<br /> __in u32 flags; // ignored; passes 0<br /> __in u32 reserved; // ignored; passes 0<br /> };<br /> <br /> === NVGPU_AS_IOCTL_GET_VA_REGIONS ===<br /> Nintendo modified to get rid of pointer in struct.<br /> <br /> struct va_region {<br /> u64 offset;<br /> u32 page_size;<br /> u32 pad;<br /> u64 pages;<br /> };<br /> <br /> struct {<br /> u64 not_used; // (contained output user ptr on linux, ignored)<br /> __inout u32 bufsize; // forced to 2*sizeof(struct va_region)<br /> u32 pad;<br /> __out struct va_region regions[2];<br /> };<br /> <br /> === NVGPU_AS_IOCTL_INITIALIZE_EX ===<br /> Nintendo's custom implementation of NVGPU_GPU_IOCTL_ALLOC_AS (unavailable) with extra params.<br /> <br /> struct {<br /> __in u32 big_page_size; // depends on GPU's available_big_page_sizes; 0=default<br /> __in s32 as_fd; // ignored; passes 0<br /> __in u32 flags; // passes 0<br /> __in u32 reserved; // ignored; passes 0<br /> __in u64 unk0;<br /> __in u64 unk1;<br /> __in u64 unk2;<br /> };<br /> <br /> === NVGPU_AS_IOCTL_REMAP ===<br /> Nintendo's custom implementation of address space remapping.<br /> <br /> struct remap_entry {<br /> __in u16 flags; // 0 or 4<br /> __in u16 kind; <br /> __in u32 nvmap_handle;<br /> __in u32 padding;<br /> __in u32 offset; // (alloc_space_offset &gt;&gt; 0x10)<br /> __in u32 pages; // alloc_space_pages<br /> };<br /> <br /> struct {<br /> __in struct remap_entry entries[];<br /> };<br /> <br /> == /dev/nvhost-dbg-gpu ==<br /> Not accessible, but there is code to invoke it.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x40084401 || In || 8 || NVGPU_DBG_GPU_IOCTL_BIND_CHANNEL ||<br /> |-<br /> | 0xC0??4402 || Inout || Variable || NVGPU_DBG_GPU_IOCTL_REG_OPS ||<br /> |-<br /> | 0x40084403 || In || 8 || NVGPU_DBG_GPU_IOCTL_EVENTS_CTRL ||<br /> |-<br /> | 0x40044404 || In || 4 || NVGPU_DBG_GPU_IOCTL_POWERGATE ||<br /> |-<br /> | 0x40044405 || In || 4 || NVGPU_DBG_GPU_IOCTL_SMPC_CTXSW_MODE ||<br /> |-<br /> | 0xC0184407 || Inout || 24 || NVGPU_DBG_GPU_IOCTL_PERFBUF_MAP ||<br /> |-<br /> | 0x40084408 || In || 8 || NVGPU_DBG_GPU_IOCTL_PERFBUF_UNMAP ||<br /> |-<br /> | 0x40084409 || In || 8 || NVGPU_DBG_GPU_IOCTL_PC_SAMPLING ||<br /> |-<br /> | 0x4008440A || In || 8 || NVGPU_DBG_GPU_IOCTL_TIMEOUT ||<br /> |-<br /> | 0x8008440B || Out || 8 || NVGPU_DBG_GPU_IOCTL_GET_TIMEOUT ||<br /> |-<br /> | 0x8004440C || Out || 4 || NVGPU_DBG_GPU_IOCTL_GET_GR_CONTEXT_SIZE ||<br /> |-<br /> | 0x0000440D || None || 0 || NVGPU_DBG_GPU_IOCTL_GET_GR_CONTEXT (uses Ioctl3) ||<br /> |-<br /> |}<br /> <br /> == /dev/nvhost-ctrl-gpu ==<br /> This device is for global (context independent) operations on the gpu. <br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Direction || Size || Description || Notes<br /> |-<br /> | 0x80044701 || Out || 4 || [[#NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE]] ||<br /> |-<br /> | 0x80284702 || Out || 40 || [[#NVGPU_GPU_IOCTL_ZCULL_GET_INFO]] ||<br /> |-<br /> | 0x402C4703 || In || 44 || [[#NVGPU_GPU_IOCTL_ZBC_SET_TABLE]] ||<br /> |-<br /> | 0xC0344704 || Inout || 52 || [[#NVGPU_GPU_IOCTL_ZBC_QUERY_TABLE]] ||<br /> |-<br /> | 0xC0B04705 || Inout || 176 || [[#NVGPU_GPU_IOCTL_GET_CHARACTERISTICS]] ||<br /> |-<br /> | 0xC0184706 || Inout || 24 || NVGPU_GPU_IOCTL_GET_TPC_MASKS ||<br /> |-<br /> | 0x40084707 || In || 8 || [[#NVGPU_GPU_IOCTL_FLUSH_L2]] ||<br /> |-<br /> | 0x4008470E || In || 8 || NVGPU_GPU_IOCTL_SET_MMUDEBUG_MODE ||<br /> |-<br /> | 0x4010470F || In || 16 || NVGPU_GPU_IOCTL_SET_SM_DEBUG_MODE ||<br /> |-<br /> | 0xC0084710 || Inout || 8 || NVGPU_GPU_IOCTL_WAIT_FOR_PAUSE ||<br /> |-<br /> | 0x80084711 || Out || 8 || NVGPU_GPU_IOCTL_GET_TPC_EXCEPTION_EN_STATUS ||<br /> |-<br /> | 0x80084712 || Out || 8 || NVGPU_GPU_IOCTL_NUM_VSMS ||<br /> |-<br /> | 0xC0044713 || Inout || 4 || NVGPU_GPU_IOCTL_VSMS_MAPPING ||<br /> |-<br /> | 0x80084714 || Out || 8 || [[#NVGPU_GPU_IOCTL_ZBC_GET_ACTIVE_SLOT_MASK]] ||<br /> |-<br /> | 0x80044715 || Out || 4 || ||<br /> |-<br /> | 0x8018471A || Out || 24 || ||<br /> |-<br /> | 0xC008471B || Inout || 8 || NVGPU_GPU_IOCTL_GET_ERROR_CHANNEL_USER_DATA ||<br /> |-<br /> | 0xC010471C || Inout || 16 || NVGPU_GPU_IOCTL_GET_GPU_TIME ||<br /> |-<br /> | 0xC108471D || Inout || 264 || NVGPU_GPU_IOCTL_GET_CPU_TIME_CORRELATION_INFO ||<br /> |}<br /> <br /> === NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE ===<br /> Returns the GPU's ZCULL context size. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 size;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZCULL_GET_CTX_SIZE ===<br /> Returns GPU's ZCULL information. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 width_align_pixels;<br /> __out u32 height_align_pixels;<br /> __out u32 pixel_squares_by_aliquots;<br /> __out u32 aliquot_total;<br /> __out u32 region_byte_multiplier;<br /> __out u32 region_header_size;<br /> __out u32 subregion_header_size;<br /> __out u32 subregion_width_align_pixels;<br /> __out u32 subregion_height_align_pixels;<br /> __out u32 subregion_count;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_SET_TABLE ===<br /> Sets the active ZBC table. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 color_ds[4];<br /> __in u32 color_l2[4];<br /> __in u32 depth;<br /> __in u32 format;<br /> __in u32 type; // 1=color, 2=depth<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_QUERY_TABLE ===<br /> Queries the active ZBC table. Identical to Linux driver.<br /> <br /> struct {<br /> __out u32 color_ds[4];<br /> __out u32 color_l2[4];<br /> __out u32 depth;<br /> __out u32 ref_cnt;<br /> __out u32 format;<br /> __out u32 type;<br /> __inout u32 index_size;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_GET_CHARACTERISTICS ===<br /> Returns the GPU characteristics. Modified to return inline data instead of using a pointer.<br /> <br /> struct gpu_characteristics {<br /> u32 arch; // 0x120 (NVGPU_GPU_ARCH_GM200)<br /> u32 impl; // 0xB (NVGPU_GPU_IMPL_GM20B)<br /> u32 rev; // 0xA1 (Revision A1)<br /> u32 num_gpc; // 0x1<br /> u64 l2_cache_size; // 0x40000<br /> u64 on_board_video_memory_size; // 0x0 (not used)<br /> u32 num_tpc_per_gpc; // 0x2<br /> u32 bus_type; // 0x20 (NVGPU_GPU_BUS_TYPE_AXI)<br /> u32 big_page_size; // 0x20000<br /> u32 compression_page_size; // 0x20000<br /> u32 pde_coverage_bit_count; // 0x1B<br /> u32 available_big_page_sizes; // 0x30000<br /> u32 gpc_mask; // 0x1<br /> u32 sm_arch_sm_version; // 0x503 (Maxwell Generation 5.0.3?)<br /> u32 sm_arch_spa_version; // 0x503 (Maxwell Generation 5.0.3?)<br /> u32 sm_arch_warp_count; // 0x80<br /> u32 gpu_va_bit_count; // 0x28<br /> u32 reserved; // NULL<br /> u64 flags; // 0x55<br /> u32 twod_class; // 0x902D (FERMI_TWOD_A)<br /> u32 threed_class; // 0xB197 (MAXWELL_B)<br /> u32 compute_class; // 0xB1C0 (MAXWELL_COMPUTE_B)<br /> u32 gpfifo_class; // 0xB06F (MAXWELL_CHANNEL_GPFIFO_A)<br /> u32 inline_to_memory_class; // 0xA140 (KEPLER_INLINE_TO_MEMORY_B)<br /> u32 dma_copy_class; // 0xB0B5 (MAXWELL_DMA_COPY_A)<br /> u32 max_fbps_count; // 0x1<br /> u32 fbp_en_mask; // 0x0 (disabled)<br /> u32 max_ltc_per_fbp; // 0x2<br /> u32 max_lts_per_ltc; // 0x1<br /> u32 max_tex_per_tpc; // 0x0 (not supported)<br /> u32 max_gpc_count; // 0x1<br /> u32 rop_l2_en_mask_0; // 0x21D70 (fuse_status_opt_rop_l2_fbp_r)<br /> u32 rop_l2_en_mask_1; // 0x0<br /> u64 chipname; // 0x6230326D67 (&quot;gm20b&quot;)<br /> u64 gr_compbit_store_base_hw; // 0x0 (not supported)<br /> };<br /> <br /> struct {<br /> __inout u64 gpu_characteristics_buf_size; // must not be NULL, but gets overwritten with 0xA0=max_size<br /> __in u64 gpu_characteristics_buf_addr; // ignored, but must not be NULL<br /> __out struct gpu_characteristics gc;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_FLUSH_L2 ===<br /> Flushes the GPU L2 cache.<br /> <br /> struct {<br /> __in u32 flush; // l2_flush | l2_invalidate &lt;&lt; 1 | fb_flush &lt;&lt; 2<br /> u32 reserved;<br /> };<br /> <br /> === NVGPU_GPU_IOCTL_ZBC_GET_ACTIVE_SLOT_MASK ===<br /> Returns the mask value for a ZBC slot.<br /> <br /> struct {<br /> __out u32 slot; // always 0x07<br /> __out u32 mask;<br /> };<br /> <br /> == Channels ==<br /> Channels are a concept for NVIDIA hardware blocks that share a common interface.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Path || Name<br /> |-<br /> | /dev/nvhost-gpu ||<br /> |-<br /> | /dev/nvhost-vic || Video Image Compositor<br /> |-<br /> | /dev/nvhost-nvdec || Video Decoder<br /> |-<br /> | /dev/nvhost-nvjpg || JPEG Decoder<br /> |}<br /> <br /> == Channel Ioctls ==<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> ! Value || Size || Description || Notes<br /> |-<br /> | 0xC0??0001 || Variable || NVHOST_IOCTL_CHANNEL_SUBMIT ||<br /> |-<br /> | 0xC0080002 || 8 || NVHOST_IOCTL_CHANNEL_GET_SYNCPOINT ||<br /> |-<br /> | 0xC0080003 || 8 || NVHOST_IOCTL_CHANNEL_GET_WAITBASE ||<br /> |-<br /> | 0xC0080004 || 8 || NVHOST_IOCTL_CHANNEL_SET_TIMEOUT_EX ||<br /> |-<br /> | 0x40040007 || 4 || ||<br /> |-<br /> | 0x40080008 || 8 || NVHOST_IOCTL_CHANNEL_SET_CLK_RATE ||<br /> |-<br /> | 0xC0??0009 || Variable || NVHOST_IOCTL_CHANNEL_MAP_BUFFER ||<br /> |-<br /> | 0xC0??000A || Variable || NVHOST_IOCTL_CHANNEL_UNMAP_BUFFER ||<br /> |-<br /> | 0x00000013 || 0 || ||<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40044801 || 4 || [[#NVGPU_IOCTL_CHANNEL_SET_NVMAP_FD]] ||<br /> |-<br /> | 0x40044803 || 4 || NVGPU_IOCTL_CHANNEL_SET_TIMEOUT ||<br /> |-<br /> | 0x40084805 || 8 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO]] ||<br /> |-<br /> | 0xC0044807 || 4 || NVGPU_IOCTL_CHANNEL_CYCLE_STATS ||<br /> |-<br /> | 0xC0??4808 || Variable || [[#NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO]] ||<br /> |-<br /> | 0xC0104809 || 16 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_OBJ_CTX]] ||<br /> |-<br /> | 0xC010480B || 16 || [[#NVGPU_IOCTL_CHANNEL_ZCULL_BIND]] ||<br /> |-<br /> | 0xC018480C || 24 || [[#NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER]] ||<br /> |-<br /> | 0x4004480D || 4 || [[#NVGPU_IOCTL_CHANNEL_SET_PRIORITY]] ||<br /> |-<br /> | 0x0000480E || 0 || [[#NVGPU_IOCTL_CHANNEL_ENABLE]] ||<br /> |-<br /> | 0x0000480F || 0 || [[#NVGPU_IOCTL_CHANNEL_DISABLE]] ||<br /> |-<br /> | 0x00004810 || 0 || [[#NVGPU_IOCTL_CHANNEL_PREEMPT]] ||<br /> |-<br /> | 0x00004811 || 0 || [[#NVGPU_IOCTL_CHANNEL_FORCE_RESET]] ||<br /> |-<br /> | 0x40084812 || 8 || [[#NVGPU_IOCTL_CHANNEL_EVENT_ID_CONTROL]] ||<br /> |-<br /> | 0xC0104813 || 16 || NVGPU_IOCTL_CHANNEL_CYCLE_STATS_SNAPSHOT ||<br /> |-<br /> | 0x80804816 || 128 || NVGPU_IOCTL_CHANNEL_GET_ERROR_INFO ||<br /> |-<br /> | 0xC0104817 || 16 || [[#NVGPU_IOCTL_CHANNEL_GET_ERROR_NOTIFICATION]] ||<br /> |-<br /> | 0x40204818 || 32 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX]] ||<br /> |-<br /> | 0xC0??4819 || Variable || [[#NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_RETRY]] ||<br /> |-<br /> | 0xC020481A || 32 || [[#NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX2]] ||<br /> |-<br /> | 0xC018481B || 24 || (uses Ioctl2) ||<br /> |-<br /> | 0xC018481C || 24 || (uses Ioctl2) ||<br /> |-<br /> |- style=&quot;border-top: double&quot;<br /> | 0x40084714 || 8 || NVGPU_IOCTL_CHANNEL_SET_USER_DATA || Sets an unknown user context address<br /> |-<br /> | 0x80084715 || 8 || NVGPU_IOCTL_CHANNEL_GET_USER_DATA || Gets an unknown user context address<br /> |}<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_NVMAP_FD ===<br /> Binds a nvmap object to this channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 nvmap_fd;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO ===<br /> Allocates gpfifo entries. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 num_entries;<br /> __in u32 flags;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO ===<br /> Submits a gpfifo object. Modified to take inline entry objects instead of a pointer.<br /> <br /> struct fence {<br /> u32 id;<br /> u32 value;<br /> };<br /> <br /> struct gpfifo_entry {<br /> u32 entry0; // gpu_va_lo<br /> u32 entry1; // gpu_va_hi | (unk_0x02 &lt;&lt; 0x08) | (size &lt;&lt; 0x0A) | (unk_0x01 &lt;&lt; 0x1F)<br /> };<br /> <br /> struct {<br /> __in u64 gpfifo; // (ignored) pointer to gpfifo fence structs<br /> __in u32 num_entries; // number of fence objects being submitted<br /> __in u32 flags;<br /> __out struct fence fence_out; // returned new fence object for others to wait on<br /> __in struct gpfifo_entry entries[]; // depends on num_entries<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_OBJ_CTX ===<br /> Allocates a graphics context object. Modified to ignore object's ID.<br /> <br /> struct {<br /> __in u32 class_num; // 0x902D=2d, 0xB197=3d, 0xB1C0=compute, 0xA140=kepler, 0xB0B5=DMA, 0xB06F=channel_gpfifo<br /> __in u32 flags;<br /> __out u64 obj_id; // (ignored) used for FREE_OBJ_CTX ioctl, which is not supported<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ZCULL_BIND ===<br /> Binds a ZCULL context to the channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u64 gpu_va;<br /> __in u32 mode; // 0=global, 1=no_ctxsw, 2=separate_buffer, 3=part_of_regular_buf<br /> __in u32 padding;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER ===<br /> Initializes the error notifier for this channel. Identical to Linux driver.<br /> <br /> struct {<br /> __in u64 offset;<br /> __in u64 size;<br /> __in u32 mem; // nvmap object handle<br /> __in u32 padding;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SET_PRIORITY ===<br /> Change channel's priority. Identical to Linux driver.<br /> <br /> struct {<br /> __in u32 priority; // 0x32 is low, 0x64 is medium and 0x96 is high<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ENABLE ===<br /> Enables the current channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_DISABLE ===<br /> Disables the current channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_PREEMPT ===<br /> Clears the FIFO pipe for this channel. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_FORCE_RESET ===<br /> Forces the channel to reset. Identical to Linux driver.<br /> <br /> === NVGPU_IOCTL_CHANNEL_EVENT_ID_CONTROL ===<br /> Controls event notifications.<br /> <br /> struct {<br /> __in u32 cmd; // 0=disable, 1=enable, 2=clear<br /> __in u32 id;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_GET_ERROR_NOTIFICATION ===<br /> Returns the current error notification caught by the error notifier. Exclusive to the Switch.<br /> <br /> struct {<br /> __out u64 timestamp; // nanoseconds since Jan. 1, 1970<br /> __out u32 info32; // error code<br /> __out u16 info16; // additional error info<br /> __inout u16 status; // always 0xFFFF<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_RETRY ===<br /> Allocates gpfifo entries with additional parameters. Exclusive to the Switch.<br /> <br /> struct {<br /> __in u32 num_entries;<br /> __in u32 flags;<br /> __in u32 unk0; // 1 works<br /> __in u32 unk1;<br /> __in u32 unk2;<br /> __in u32 unk3;<br /> __in u32 unk4;<br /> __in u32 unk5;<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_SUBMIT_GPFIFO_EX ===<br /> Submits a gpfifo object (async version). Exclusive to the Switch.<br /> <br /> struct {<br /> u64 __gpfifo; // in (pointer to gpfifo fence structs; ignored)<br /> u32 __num_entries; // in (number of fence objects being submitted)<br /> u32 __flags; // in<br /> struct fence __fence_out; // out (returned new fence object for others to wait on)<br /> struct gpfifo_entry __entries[]; // in (depends on __num_entries)<br /> };<br /> <br /> === NVGPU_IOCTL_CHANNEL_ALLOC_GPFIFO_EX2 ===<br /> Allocates gpfifo entries with additional parameters and returns a fence. Exclusive to the Switch.<br /> <br /> struct {<br /> u32 __num_entries; // in<br /> u32 __flags; // in<br /> u32 __unk0; // in (1 works)<br /> struct fence __fence_out; // out<br /> u32 __unk1; // in<br /> u32 __unk2; // in<br /> u32 __unk3; // in<br /> };<br /> <br /> = nvmemp =<br /> NVIDIA memory profiler (this service is not available on retail units). <br /> /dev/nvhost-ctrl sends the ioctl NVHOST_IOCTL_CTRL_GET_CONFIG to check the config &quot;nv!NV_MEMORY_PROFILER&quot;. If config_str returns &quot;1&quot;, the applications attempts to talk to use nvmemp.<br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Cmd0<br /> |-<br /> | 1 || Cmd1<br /> |}<br /> <br /> = nvdrvdbg =<br /> This is &quot;nns::nvdrv::INvDrvDebugFSServices&quot;.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || [[#OpenLog]]<br /> |-<br /> | 1 || [[#CloseLog]]<br /> |-<br /> | 2 || [[#ReadLog]]<br /> |}<br /> <br /> == OpenLog ==<br /> Takes process handle. Returns an fd.<br /> <br /> == CloseLog ==<br /> Takes fd and closes it.<br /> <br /> == ReadLog ==<br /> Takes fd and reads log into a type-6 buffer.<br /> <br /> = Errors =<br /> Most nvidia driver commands return an error code apart from the normal return code.<br /> <br /> {| class=&quot;wikitable&quot; border=&quot;1&quot;<br /> |-<br /> ! Cmd || Name<br /> |-<br /> | 0 || Success<br /> |-<br /> | 1 || NotImplemented<br /> |-<br /> | 2 || NotSupported<br /> |-<br /> | 3 || NotInitialized<br /> |-<br /> | 4 || BadParameter<br /> |-<br /> | 5 || Timeout<br /> |-<br /> | 6 || InsufficientMemory<br /> |-<br /> | 7 || ReadOnlyAttribute<br /> |-<br /> | 8 || InvalidState<br /> |-<br /> | 9 || InvalidAddress<br /> |-<br /> | 0xA || InvalidSize<br /> |-<br /> | 0xB || BadValue<br /> |-<br /> | 0xD || AlreadyAllocated<br /> |-<br /> | 0xE || Busy<br /> |-<br /> | 0xF || ResourceError<br /> |-<br /> | 0x10 || CountMismatch<br /> |-<br /> | 0x1000 || SharedMemoryTooSmall<br /> |-<br /> | 0x30003 || FileOperationFailed<br /> |-<br /> | 0x30004 || <br /> |-<br /> | 0x3000E || <br /> |-<br /> | 0x3000F || IoctlFailed <br /> |-<br /> | 0x30010 ||<br /> |-<br /> | 0x30013 ||<br /> |-<br /> | 0xA000E ||<br /> |}<br /> <br /> = Panic =<br /> In some cases, a panic may occur. NV forces a crash by doing:<br /> (void *)0 = 0xCAFE;<br /> End result is that the system hangs with a white-screen.<br /> <br /> == Gpfifo Panic ==<br /> When the gpfifo data in the gpu_va buffers specified by the submitted gpfifo entries is invalid(?), eventually the user-process will be force-terminated after using the submit-gpfifo ioctl. It's unknown how exactly this is done.<br /> <br /> [[Category:Services]]</div>

Shinyquagsire23