2,781
edits
Changes
Jump to navigation
Jump to search
Line 9:
Line 9: − + − + − + Line 29:
Line 29: − + + + + − + + − + + + + + − + − + Line 53:
Line 61: − + − + − + − + − + + + + + − + − + − + − + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Line 97:
Line 146: − + − + − + − + − + − + − + − + − + − + − + − + − + − + − + + + + + + + + + + + + + + + + + + + Line 165:
Line 232: − + − + − + − + − + − + − + − + − + − + − + − + − + Line 218:
Line 285: − + + + + + + + + + − + − + − + + + + + − + − + − + − + − + − + − + − + − + + + + − = FS Access Control =+ − Line 256:
Line 337: − + Line 264:
Line 345: − + − + − + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + − [[Filesystem_services#Permissions|Permissions]] bitmask:+ − + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + − + + + + + + + + + + + + + + + + + + − + + − For bit62 in permissions, see [[SPL_services#GetConfig|here]].+ Line 294:
Line 559: − This is a list of [[Services_API|service]]-name strings which the title has access to, with the following structure:+ − +0: control_byte+ − +1: {service-name without nul-terminator}+ + + + + + + + + + + + − Bitmask 0x07 in control_byte is the {length of the service-name without nul-terminator} - 1.+ − Bitmask 0x80 in control_byte means service is allowed to be registered.+ − − − − = Kernel Access Control = − On Switch, descriptors are identified by pattern 01..11 in low bits. + − + − ! Fields − + − | Bit31-24: Highest allowed cpu id, bit23-16: Lowest allowed cpu id, bit15-10: Highest allowed thread prio, bit9-4: Lowest allowed thread prio − + − | Bits 29-31: Syscall mask table index; Bits 5-28: Mask − + − | Bits 7-30: Alternating start page and number of pages, bit31: Alternating read-only flag then MemoryAttribute 0x2001/0x42002 selector flag − + − + + + + − + − | Bits 12-21: Irq0, bits 20-31: Irq1, 0x3FF means empty. − + − | Bit16-14: ApplicationType (0=sysmodule, 1=application, 2=applet), bit16 ignored. Parsed by [[Process Manager services]]. Defaults to 0 if descriptor doesn't exist. Can only run 1 application at a time. − + − | Bits 15-X: Version. The raw descriptor is compared with 0x80000, when less than an error is returned. This is equivalent to comparing the bits starting at bit15 with 0x10. This enforces a minimum required version, not a maximum. − + − | Bit25-16: Number of handles the table shall fit. − + − | Bit17: can be debugged, bit18: can debug others − + − + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + − + Line 382:
Line 710: − + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + − + + − + + − + + + + + + + + − | 3.0.0 || 7.4.0 || 3.0.0+ + − + + − Bit31-19: Major version+ − Bit18-15: Minor version+ − Bit14-0: Zeroes+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
→Flags
| 0x0
| 0x0
| 0x80
| 0x80
| META
| [[#META|META]]
|-
|-
| 0x80
| 0x80
| <Varies>
| <Varies>
| ACID
| [[#ACID|ACID]]
|-
|-
| <See META>
| <See META>
| <See META>
| <See META>
| ACI0
| [[#ACI0|ACI0]]
|}
|}
| 0x0
| 0x0
| 0x4
| 0x4
| Magic "META".
| Magicnum "META"
|-
|-
| 0x4
| 0x4
| 0x4
| [9.0.0+] AcidSignatureKeyGeneration (0 or 1)
|-
| 0x8
| 0x8
| Reserved (Padding / Unused)
| 0x4
| Reserved
|-
|-
| 0xC
| 0xC
| 0x1
| 0x1
| MmuFlags, bit0: 64-bit instructions, bits1-3: address space width (1=64-bit, 2=32-bit). Needs to be <= 0xF
| [[#Flags|Flags]]
|-
| 0xD
| 0x1
| Reserved
|-
|-
| 0xE
| 0xE
| 0x1
| 0x1
| Main thread priority (0-63)
| [[#MainThreadPriority|MainThreadPriority]]
|-
|-
| 0xF
| 0xF
| 0x1
| 0x1
| DefaultCpuId
| MainThreadCoreNumber
|-
|-
| 0x10
| 0x10
| 0x14
| 0x14
| 0x4
| 0x4
| System resource size (max size as of 5.x: 534773760). Unknown usage.
| [3.0.0+] [[#SystemResourceSize|SystemResourceSize]]
|-
|-
| 0x18
| 0x18
| 0x4
| 0x4
| ProcessCategory (0: regular title, 1: kernel built-in). Should be 0 here.
| [[#Version|Version]]
|-
|-
| 0x1C
| 0x1C
| 0x4
| 0x4
| MainStackSize
| [[#MainThreadStackSize|MainThreadStackSize]]
|-
|-
| 0x20
| 0x20
| 0x10
| 0x10
| Title name
| Name (usually/always "Application")
|-
|-
| 0x30
| 0x30
| 0x10
| 0x10
| Product code
| ProductCode (usually/always all zeroes)
|-
| 0x40
| 0x30
| Reserved
|-
|-
| 0x70
| 0x70
| 0x4
| 0x4
| [[#ACI0]] offset
| [[#ACI0|AciOffset]]
|-
|-
| 0x74
| 0x74
| 0x4
| 0x4
| [[#ACI0]] size
| [[#ACI0|AciSize]]
|-
|-
| 0x78
| 0x78
| 0x4
| 0x4
| [[#ACID]] offset
| [[#ACID|AcidOffset]]
|-
|-
| 0x7C
| 0x7C
| 0x4
| 0x4
| [[#ACID]] size
| [[#ACID|AcidSize]]
|}
== Flags ==
{| class="wikitable" border="1"
|-
! Bits
! Description
|-
| 0
| Is64BitInstruction
|-
| 1-3
| ProcessAddressSpace (0x00 = AddressSpace32Bit, 0x01 = AddressSpace64BitOld, 0x02 = AddressSpace32BitNoReserved, 0x03 = AddressSpace64Bit)
|-
| 4
| [7.0.0+] OptimizeMemoryAllocation
|-
| 5
| [11.0.0+] DisableDeviceAddressSpaceMerge
|}
|}
== MainThreadPriority ==
Ranges from 0 to 0x3F.
== SystemResourceSize ==
This is the size of PersonalMmHeap. Maximum size as of 5.0.0 is 0x1FE00000.
== Version ==
0 for all titles.
[8.1.0+] Now set to 1 for certain titles.
[9.0.0+] Now set to a proper version field for all titles.
== MainThreadStackSize ==
Must be aligned to 0x1000.
In non-nspwn scenarios, values of 0 can also rarely break in Horizon. This might be something auto-adapting or a security feature of some sort?
= ACID =
= ACID =
| 0x0
| 0x0
| 0x100
| 0x100
| RSA-2048 signature, seems to verify the data starting at 0x100 with the size field from 0x204.
| RSA-2048 signature over the data starting at 0x100 with the size field from 0x204
|-
|-
| 0x100
| 0x100
| 0x100
| 0x100
| RSA-2048 public key, seems to be used for the second [[NCA_Format|NCA]] signature.
| RSA-2048 public key for the second [[NCA_Format|NCA]] signature
|-
|-
| 0x200
| 0x200
| 0x4
| 0x4
| Magic "ACID".
| Magicnum "ACID"
|-
|-
| 0x204
| 0x204
| 0x4
| 0x4
| s32 Size field used with the above signature(?).
| Size
|-
|-
| 0x208
| 0x208
| 0x4
| 0x4
| Zeroes
| Reserved
|-
|-
| 0x20C
| 0x20C
| 0x4
| 0x4
| Flags. Bit0 must be 1 on retail, on devunit 0 is also allowed. Bit1 is unknown, set to 1 for ARMS? [5.0.0+] Bit3-2: PoolPartition? For applets set to 0b01, for sysmodules set to 0b10. Exceptions: "starter" is set to 0, "nvservices" is set to 3.
| [[#Flags_2|Flags]]
|-
|-
| 0x210
| 0x210
| 0x8
| 0x8
| TitleIdRange_Min
| ProgramIdMin
|-
|-
| 0x218
| 0x218
| 0x8
| 0x8
| TitleIdRange_Max
| ProgramIdMax
|-
|-
| 0x220
| 0x220
| 0x4
| 0x4
| [[#FS Access Control]] offset
| [[#FsAccessControl|FsAccessControlOffset]]
|-
|-
| 0x224
| 0x224
| 0x4
| 0x4
| [[#FS Access Control]] size
| [[#FsAccessControl|FsAccessControlSize]]
|-
|-
| 0x228
| 0x228
| 0x4
| 0x4
| [[#Service Access Control]] offset
| [[#SrvAccessControl|SrvAccessControlOffset]]
|-
|-
| 0x22C
| 0x22C
| 0x4
| 0x4
| [[#Service Access Control]] size
| [[#SrvAccessControl|SrvAccessControlSize]]
|-
|-
| 0x230
| 0x230
| 0x4
| 0x4
| [[#Kernel Access Control]] offset
| [[#KernelCapability|KernelCapabilityOffset]]
|-
|-
| 0x234
| 0x234
| 0x4
| 0x4
| [[#Kernel Access Control]] size
| [[#KernelCapability|KernelCapabilitySize]]
|-
|-
| 0x238
| 0x238
| 0x8
| 0x8
| Padding
| Reserved
|}
== Flags ==
{| class="wikitable" border="1"
|-
! Bits
! Description
|-
| 0
| ProductionFlag
|-
| 1
| UnqualifiedApproval
|-
| 2-3
| [5.0.0+ ] MemoryRegion (0 = Application, 1 = Applet, 2 = SecureSystem, 3 = NonSecureSystem)
|}
|}
MemoryRegion is set to Application for "starter" and NonSecureSystem for "nvservices".
= ACI0 =
= ACI0 =
| 0x0
| 0x0
| 0x4
| 0x4
| Magic "ACI0".
| Magicnum "ACI0"
|-
|-
| 0x4
| 0x4
| 0xC
| 0xC
| Zeroes
| Reserved
|-
|-
| 0x10
| 0x10
| 0x8
| 0x8
| Title id
| ProgramId
|-
|-
| 0x18
| 0x18
| 0x8
| 0x8
| Reserved (Not currently used, potentially to be used for lowest title ID in future.)
| Reserved
|-
|-
| 0x20
| 0x20
| 0x4
| 0x4
| [[#FS Access Header]] offset
| [[#FsAccessControl|FsAccessControlOffset]]
|-
|-
| 0x24
| 0x24
| 0x4
| 0x4
| [[#FS Access Header]] size
| [[#FsAccessControl|FsAccessControlSize]]
|-
|-
| 0x28
| 0x28
| 0x4
| 0x4
| [[#Service Access Control]] offset
| [[#SrvAccessControl|SrvAccessControlOffset]]
|-
|-
| 0x2C
| 0x2C
| 0x4
| 0x4
| [[#Service Access Control]] size
| [[#SrvAccessControl|SrvAccessControlSize]]
|-
|-
| 0x30
| 0x30
| 0x4
| 0x4
| [[#Kernel Access Control]] offset
| [[#KernelCapability|KernelCapabilityOffset]]
|-
|-
| 0x34
| 0x34
| 0x4
| 0x4
| [[#Kernel Access Control]] size
| [[#KernelCapability|KernelCapabilitySize]]
|-
|-
| 0x38
| 0x38
| 0x8
| 0x8
| Padding
| Reserved
|}
|}
= FS Access Header =
= FsAccessControl =
For [[#ACID|ACID]] this is a simple descriptor as follows:
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
| 0x0
| 0x0
| 0x1
| 0x1
| Version? Always 1. Must be non-zero.
| Version (always 1, must be non-zero)
|-
| 0x1
| 0x1
| [5.0.0+] ContentOwnerIdCount
|-
|-
| 0x2
| 0x1
| 0x1
| [5.0.0+] SaveDataOwnerIdCount
|-
| 0x3
| 0x3
| 0x1
| Padding
| Padding
|-
|-
| 0x4
| 0x4
| 0x8
| 0x8
| Permissions bitmask
| [[#FsAccessFlag|FsAccessFlag]]
|-
|-
| 0xC
| 0xC
| 0x4
| 0x8
| Usually 0x1C
| ContentOwnerIdMin
|-
| 0x14
| 0x8
| ContentOwnerIdMax
|-
|-
| 0x10
| 0x1C
| 0x4
| 0x8
| Usually 0x0
| SaveDataOwnerIdMin
|-
|-
| 0x14
| 0x24
| 0x4
| 0x8
| Usually 0x1C
| SaveDataOwnerIdMax
|-
|-
| 0x18
| 0x2C
| 0x4
| 0x8 * ContentOwnerIdCount
| Usually 0x0
| [5.0.0+] ContentOwnerIds
|-
|-
| Variable
| 0x8 * SaveDataOwnerIdCount
| [5.0.0+] SaveDataOwnerIds
|}
|}
For [[#ACI0|ACI0]] this embeds data as follows:
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
| 0x0
| 0x0
| 0x1
| 0x1
| Version? Always 1. Must be non-zero.
| Version (always 1, must be non-zero)
|-
|-
| 0x1
| 0x1
| 0x4
| 0x4
| 0x8
| 0x8
| Permissions bitmask
| [[#FsAccessFlag|FsAccessFlag]]
|-
|-
| 0xC
| 0xC
| 0x20
| 0x4
| Usually all zeroes for applications
| ContentOwnerInfoOffset
|-
| 0x10
| 0x4
| ContentOwnerInfoSize
|-
| 0x14
| 0x4
| SaveDataOwnerInfoOffset
|-
| 0x18
| 0x4
| SaveDataOwnerInfoSize
|-
| 0x1C
| 0x4
| (Optional) ContentOwnerIdCount
|-
| 0x1C
| 0x8 * ContentOwnerIdCount
| ContentOwnerIds
|-
| Variable
| 0x4
| SaveDataOwnerIdCount
|-
| Variable
| 0x1 * SaveDataOwnerIdCount
| Accessibilities (1=Read, 2=Write, 3=ReadWrite)
|-
| Variable (padded to nearest 4 bytes)
| 0x8 * SaveDataOwnerIdCount
| SaveDataOwnerIds
|}
|}
== FsAccessFlag ==
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
! Bit
! Bits
! Name
! Description
! Description
|-
|-
| 0
| 0
| ApplicationInfo
| MountContent* is accessible when set.
| MountContent* is accessible when set.
|-
| 1
| BootModeControl
|
|-
| 2
| Calibration
|
|-
| 3
| SystemSaveData
|
|-
| 4
| GameCard
|
|-
| 5
| SaveDataBackUp
|
|-
| 6
| SaveDataManagement
|
|-
| 7
| BisAllRaw
|
|-
| 8
| GameCardRaw
|
|-
| 9
| GameCardPrivate
|
|-
| 10
| SetTime
|
|-
| 11
| ContentManager
|
|-
| 12
| ImageManager
|
|-
| 13
| CreateSaveData
|
|-
| 14
| SystemSaveDataManagement
|
|-
| 15
| BisFileSystem
|
|-
| 16
| SystemUpdate
|
|-
| 17
| SaveDataMeta
|
|-
| 18
| DeviceSaveData
|
|-
| 19
| SettingsControl
|
|-
| 20
| SystemData
|
|-
| 21
| SdCard
|
|-
| 22
| Host
|
|-
| 23
| FillBis
|
|-
| 24
| CorruptSaveData
|
|-
| 25
| SaveDataForDebug
|
|-
| 26
| FormatSdCard
|
|-
| 27
| GetRightsId
|
|-
| 28
| RegisterExternalKey
|
|-
| 29
| RegisterUpdatePartition
|
|-
| 30
| SaveDataTransfer
|
|-
| 31
| DeviceDetection
|
|-
| 32
| AccessFailureResolution
|
|-
| 33
| SaveDataTransferVersion2
|
|-
|-
| 34
| 34
| Enables access to [[Filesystem_services|Bis]] partitionID 27 and 28?
| RegisterProgramIndexMapInfo
|
|-
| 35
| CreateOwnSaveData
|
|-
| 36
| MoveCacheStorage
|
|-
| 37-61
| Reserved
|
|-
| 62
| Debug
| See [[SPL_services#GetConfig|here]].
|-
|-
| 63
| 63
| Enables access to everything: all [[Filesystem_services#Permissions|permission-types]] which check a bitmask have this bit set.
| FullPermission
| Enables access to everything: all [[Filesystem_services#Permissions|permission types]] which check a bitmask have this bit set.
|}
|}
Controls the [[Filesystem_services#Permissions|filesystem permissions]].
Web-applets permissions:
Web-applets permissions:
= Service Access Control =
= Service Access Control =
{| class="wikitable" border="1"
|-
! Bits
! Description
|-
| 0-2
| Size (length of the service-name without null-terminator minus 1)
|-
| 7
| IsServer (service is allowed to be registered)
|-
| Variable
| Name
|}
This is a list of [[Services_API|service]]-name strings which the title has access to.
The service name string starts after the first byte and supports the wildcard <code>*</code> character.
The service string can contain a wildcard <code>*</code> character.
= KernelCapability =
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
! Pattern of lower bits
! Pattern of lower bits
! Lowest clear bitmask/bit
! Lowest clear bitmask/bit
! Type
! Description
|-
|-
| <code>0bxxxxxxxxxxxx0111</code>
| <code>0bxxxxxxxxxxxx0111</code>
| Bit3
| Bit3
| KernelFlags
| [[#ThreadInfo]]
|-
|-
| <code>0bxxxxxxxxxxx01111</code>
| <code>0bxxxxxxxxxxx01111</code>
| Bit4
| Bit4
| SyscallMask
| [[#EnableSystemCalls]]
|-
|-
| <code>0bxxxxxxxxx0111111</code>
| <code>0bxxxxxxxxx0111111</code>
| Bit6
| Bit6
| MapIoOrNormalRange
| [[#MemoryMap]]
|-
|-
| <code>0bxxxxxxxx01111111</code>
| <code>0bxxxxxxxx01111111</code>
| Bit7
| Bit7
| MapNormalPage (RW)
| [[#IoMemoryMap]]
| Bits 8-31: Page
|-
| <code>0bxxxxx01111111111</code>
| Bit10
| [8.0.0+] [[#MemoryRegionMap]]
|-
|-
| <code>0bxxxx011111111111</code>
| <code>0bxxxx011111111111</code>
| Bit11
| Bit11
| InterruptPair
| [[#EnableInterrupts]]
|-
|-
| <code>0bxx01111111111111</code>
| <code>0bxx01111111111111</code>
| Bit13
| Bit13
| ApplicationType
| [[#MiscParams]]
|-
|-
| <code>0bx011111111111111</code>
| <code>0bx011111111111111</code>
| Bit14
| Bit14
| KernelReleaseVersion
| [[#KernelVersion]]
|-
|-
| <code>0b0111111111111111</code>
| <code>0b0111111111111111</code>
| Bit15
| Bit15
| HandleTableSize
| [[#HandleTableSize]]
|-
|-
| <code>0b1111111111111111</code>
| <code>0b1111111111111111</code>
| Bit16
| Bit16
| DebugFlags
| [[#MiscFlags]]
|-
|-
| All ones
| All ones
|
|
| Ignored
| Invalid
|
|}
These descriptors are identified by pattern 01..11 in low bits.
== ThreadInfo ==
{| class="wikitable" border="1"
|-
! Bits
! Description
|-
| 4-9
| LowestPriority
|-
| 10-15
| HighestPriority
|-
| 16-23
| MinCoreNumber
|-
| 24-31
| MaxCoreNumber
|}
== EnableSystemCalls ==
{| class="wikitable" border="1"
|-
! Bits
! Description
|-
| 5-28
| SystemCallId
|-
| 29-31
| Index
|}
== MemoryMap ==
MemoryMap entries are stored in pairs. The first pair will contain BeginAddress and PermissionType, while the second pair will contain Size and MappingType.
{| class="wikitable" border="1"
|-
! Bits
! Description
|-
| 7-30
| BeginAddress
|-
| 31
| PermissionType (0=RW, 1=RO)
|}
{| class="wikitable" border="1"
|-
! Bits
! Description
|-
| 7-26
| Size
|-
| 27-30
| Reserved
|-
| 31
| MappingType (0=Io, 1=Static)
|}
|}
== Mapping restrictions ==
=== Restrictions ===
The physaddr range 0x80060000-0x2000000000 is not allowed to be mapped as IO.
The physaddr range 0x80060000-0x2000000000 is not allowed to be mapped as IO.
The physaddr range 0x80000000-0x2000000000 is not allowed to be mapped as Normal.
The physaddr range 0x80000000-0x2000000000 is not allowed to be mapped as Normal.
[5.0.0+] For IO, this blacklist was abandoned and instead two range checks were added. For Normal mappings it is still applied
[5.0.0+] For IO, this blacklist was abandoned and instead two range checks were added. For Normal mappings it is still applied
== Kernel versions ==
== IoMemoryMap ==
{| class="wikitable" border="1"
|-
! Bits
! Description
|-
| 8-31
| BeginAddress
|}
== MemoryRegionMap ==
{| class="wikitable" border="1"
|-
! Bits
! Description
|-
| 11-16
| RegionType0 (0 = NoMapping, 1 = KernelTraceBuffer, 2 = OnMemoryBootImage, 3 = DTB)
|-
| 17
| RegionIsReadOnly0
|-
| 18-23
| RegionType1 (0 = NoMapping, 1 = KernelTraceBuffer, 2 = OnMemoryBootImage, 3 = DTB)
|-
| 24
| RegionIsReadOnly1
|-
| 25-30
| RegionType2 (0 = NoMapping, 1 = KernelTraceBuffer, 2 = OnMemoryBootImage, 3 = DTB)
|-
| 31
| RegionIsReadOnly2
|}
MemoryRegionMap is supported by the kernel but not by [[Loader_services|Loader]]. Thus, only initial processes may possess this capability.
== EnableInterrupts ==
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
! Firmware || Kernel Version || Minimum Allowed
! Bits
! Description
|-
|-
| 1.0.0 || 5.0.0 || 3.0.0
| 12-21
| InterruptNumber0
|-
|-
| 2.0.0 || 6.1.0 || 3.0.0
| 22-31
| InterruptNumber1
|}
0x3FF means empty.
== MiscParams ==
{| class="wikitable" border="1"
|-
|-
! Bits
! Description
|-
|-
| 3.0.2 || 7.4.0 || 3.0.0
| 14-16
| ProgramType (0 = System, 1 = Application, 2 = Applet)
|}
|}
ProgramType is parsed by [[Process Manager services]]. Defaults to 0 if descriptor doesn't exist. Can only run 1 application at a time.
== KernelVersion ==
{| class="wikitable" border="1"
|-
! Bits
! Description
|-
| 15-18
| MinorVersion
|-
| 19-31
| MajorVersion
|}
This encodes the intended kernel version for the program.
The kernel requires that the intended version is >= the minimum supported version (3.0 for all released kernels), and <= the current version.
Kernel version is derived from/equivalent to SDK version:
* Kernel Major = SDK Major + 4
* Kernel Minor = SDK Minor
=== Versions ===
{| class="wikitable" border="1"
|-
! Firmware || Kernel Version || Corresponding SDK Version
|-
| 1.0.0 || 5.0 || 1.0.0.0
|-
| 2.0.0 || 6.1 || 2.1.0.0
|-
| 3.0.0 || 7.4 || 3.4.0.0
|-
| 3.0.2 || 7.4 || 3.4.0.0
|-
| 5.0.0 || 9.3 || 5.3.0.0
|-
| 10.0.0 || 14.4 || 10.4.0.0
|-
| 11.0.0 || 15.4 || 11.4.0.0
|-
| 11.0.1 || 15.4 || 11.4.0.0
|}
== HandleTableSize ==
{| class="wikitable" border="1"
|-
! Bits
! Description
|-
| 16-25
| HandleTableSize
|}
== MiscFlags ==
{| class="wikitable" border="1"
|-
! Bits
! Description
|-
| 17
| EnableDebug
|-
| 18
| ForceDebug
|}