Difference between revisions of "Private/ds/app/484E94*/pit.bin"

From DSiBrew
< Private‎ | ds‎ | app‎ | 484E94*
Jump to navigation Jump to search
Line 1: Line 1:
 
== File Header ==
 
== File Header ==
−
  8 : Magic
+
{| class="wikitable" border="1"
−
  2 : Block-Size
+
|-
−
  2 : UNKNOWN : 1
+
!  OFFSET
−
  2 : # folders (subtracted by 100, as the first is 100NIN0*)  
+
!  SIZE
−
  2 : # of Photos
+
!  DESCRIPTION (common value)
−
  2 : UNKNOWN : Always zeroes
+
|-
−
  2 : # of Frames
+
|  0x00
−
  2 : CRC16 of whole file
+
|  4
−
  2 : Offset to entries
+
| Magic ("0TIP")
−
It is known that if the offset to entries is pushed passed the end of the file, the system freezes, it is not known wether this is exploitable or not. Infact any change which makes it read passed the end of the file makes it crash.
+
|-
−
 
+
|  0x04
−
'''Please modify''' - the #folders and #photos refers to the last photo in the last folder, so you can have for instance only one photo and modify this values
+
|  4
 +
|  UNKNOWN ("_1""00" LE, maybe number of first folder or max number of photos per folder)
 +
|-
 +
|  0x08
 +
| 2
 +
|  Block-Size (0x0BB8 => 3000 Bytes)
 +
|-
 +
|  0x0A
 +
| 2
 +
|  # folders' hundreds digit
 +
|-
 +
|  0x0C
 +
| 2
 +
|  # folders' tens digit
 +
|-
 +
|  0x0E
 +
|  2
 +
|  higher number of photos reached in the last folder (i.e. : next photo's number will be this number+1)
 +
|-
 +
|  0x10
 +
| 2
 +
| UNKNOWN (0x0000)
 +
|-
 +
|  0x12
 +
| 2
 +
|  # of frames
 +
|-
 +
|  0x14
 +
| 2
 +
|  CRC16 of whole file
 +
|-
 +
|  0x16
 +
| 2
 +
|  Size of header (0x0018)
 +
|}
 +
It is known that if the offset to entries (size of header) is pushed passed the end of the file, the system freezes, it is not known wether this is exploitable or not. Infact any change which makes it read passed the end of the file makes it crash.
  
 
== Each entry (16 bytes) ==
 
== Each entry (16 bytes) ==

Revision as of 13:10, 28 January 2011

File Header

OFFSET SIZE DESCRIPTION (common value)
0x00 4 Magic ("0TIP")
0x04 4 UNKNOWN ("_1""00" LE, maybe number of first folder or max number of photos per folder)
0x08 2 Block-Size (0x0BB8 => 3000 Bytes)
0x0A 2 # folders' hundreds digit
0x0C 2 # folders' tens digit
0x0E 2 higher number of photos reached in the last folder (i.e. : next photo's number will be this number+1)
0x10 2 UNKNOWN (0x0000)
0x12 2 # of frames
0x14 2 CRC16 of whole file
0x16 2 Size of header (0x0018)

It is known that if the offset to entries (size of header) is pushed passed the end of the file, the system freezes, it is not known wether this is exploitable or not. Infact any change which makes it read passed the end of the file makes it crash.

Each entry (16 bytes)

4 : Date 
8 : Zeroes
1 : Type (1: Frame, 3: Photo)
1 : UNKNOWN : 8 * n <-- n is may entry number (first = 0 seconds = 1 ...) only the last Byte of the result is used
1 : Sticker (0: None, 4: Star,  8: Clover, 12: Heart, 16: Frame)
1 : UNKNOWN : Always zero

Misc information

Photos are stored in:

  • SD:\DCIM\100NIN01
  • SD:\DCIM\100NIN02

Frames are stored in:

  • SD:\private\ds\app\484E494A\DCIM\100NIN01
  • SD:\private\ds\app\484E494A\DCIM\100NIN02
Retrieved from "https://dsibrew.org/w/index.php?title=Private/ds/app/484E94*/pit.bin&oldid=3385"