DSiBrew - User contributions [en]

Template:System Menu Navigation

2022-10-18T01:15:06Z

Hallowizer: Redirected page to Template:Navbox system updates

#redirect [[Template:Navbox system updates]]

Title database

2022-10-16T03:18:02Z

Hallowizer: /* Title codes */ deleted section because it was copied to title

The Nintendo DSi uses the same title scheme and introduces separate DSi update servers; Also introduced was a new common-key for DSi title decryption.

As with the Wii, the [[title metadata]] aka "TMD" for these titles can be found on the Nintendo Update Servers.

Each title specific url uses a 4 ASCII character code denoting what type of title it is and what region it comes from.

Titles can be downloaded and decrypted with [http://wiibrew.org/wiki/NUS_Downloader NUS Downloader], a program that allows titles to be fetched from the Nintendo Update Servers.

== 00030004 (DSiWare) ==

DSiWare is an online service available on the [[Nintendo DSi Shop]] to download DSi applications.

==== Europe ====

The official list of DSi Ware Europe titles is located on [http://www.nintendo.co.uk/NOE/en_GB/games/nintendo_dsiware_11805.html the Nintendo Europe website -- (broken link)]. An inofficial list is at [http://en.wikipedia.org/wiki/List_of_DSiWare_games_(PAL_region) wikipedia].

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Name
! Price
|-
| Application
| HNGP (484e4750)
| [[Nintendo DSi Browser]]
| 0 Nintendo Points
|-
| Game
| KNRV (4B4E5256)
| A Little Bit of... Brain Training™: Maths Edition
| 800 Nintendo Points
|-
| Game
| KD9V (4B443956)
| A Little Bit of... Dr. Mario™
| 500 Nintendo Points
|-
| Game
| KM9P (4B4D3950)
| A Little Bit of... Magic Made Fun™: Deep Psyche
| 200 Nintendo Points
|-
| Game
| KMFP (4B4D4650)
| A Little Bit of... Magic Made Fun™: Funny Face
| 200 Nintendo Points
|-
| Game
| KMSP (4B4D5350)
| A Little Bit of... Magic Made Fun™: Shuffle Games
| 200 Nintendo Points
|-
| Application
| KWGV (4B574756)
| [[Nintendo DSi Calculator|Animal Crossing Calculator]]
| 200 Nintendo Points
|-
| Application
| KWCV (4B574356)
| [[Nintendo DSi Clock|Animal Crossing Clock]]
| 200 Nintendo Points
|-
| Game
| KAAV (4B414156)
| Art Style: AQUITE
| 500 Nintendo Points
|-
| Game
| KADV (4B414456)
| Art Style: CODE
| 500 Nintendo Points
|-
| Application
| KGUV (4B475556)
| Flipnote Studio
| 0 Nintendo Points
|-
| Game
| KAKV (4B414B56)
| Art Style: KuBos
| 500 Nintendo Points
|-
| Game
| KASV (4B415356)
| Art Style: NEMREM
| 500 Nintendo Points
|-
| Game
| KAPV (4B415056)
| Art Style: PiCOPiCT
| 500 Nintendo Points
|-
| Game
| KA4V (4B413456)
| Asphalt 4: Elite Racing
| 800 Nintendo Points
|-
| Game
| KGRV (4B475256)
| Guitar Rock Tour
| 500 Nintendo Points
|-
| Game
| KLEV (4B4C4556)
| Legends of Exidia
| 800 Nintendo Points
|-
| Game
| KMMV (4B4D4D56)
| Mixed Message
| 500 Nintendo Points
|-
| Game
| KAMV (4B414D56)
| Paper Plane
| 200 Nintendo Points
|-
| Game
| KPOV (4B504F56)
| Pop Superstar!: Road to Celebrity
| 800 Nintendo Points
|-
| Game
| KP6V (4B503656)
| Pyoro
| 200 Nintendo Points
|-
| Game
| KS9V (4B533956)
| Real Football 2009
| 800 Nintendo Points
|-
| Game
| K4DV (4B344456)
| Sudoku
| 200 Nintendo Points
|-
| Game
| KSMV (4B534D56)
| SUDOKU 150! For Challengers
| 500 Nintendo Points
|-
| Game
| KUWV (4B555756)
| WarioWare: Snapped!
| 500 Nintendo Points
|}

==== Japan ====

The official list of DSi Ware Japan titles is located on [http://www.nintendo.co.jp/ds/dsiware/titlelist.html the Nintendo japanese website]. An inofficial list is at [http://ja.wikipedia.org/wiki/ニンテンドーDSiウェアのタイトル一覧 wikipedia] (in japanese).

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Name
! Price
|-
| Application
| HNGJ (484e474a)
| [[Nintendo DSi Browser]]
| 0 Nintendo Points
|-
| Game
| KMSJ (4B4D534A)
| 3-tsu no Shuffle Game
| 200 Nintendo Points
|-
| Game
| KAAJ (4B41414A)
| Art Style: AQUARIO
| 500 Nintendo Points
|-
| Game
| KADJ (4B41444A)
| Art Style: DECODE
| 500 Nintendo Points
|-
| Game
| KAPJ (4B41504A)
| Art Style: PICOPICT
| 500 Nintendo Points
|-
| Game
| KASJ (4B41534A)
| Art Style: SOMNIUM
| 500 Nintendo Points
|-
| Game
| KTPJ (4B54504A)
| Asobi Taizen
| 500 Nintendo Points
|-
| Game
| KNRJ (4B4E524A)
| Brain Training - Science version
| 800 Nintendo Points
|-
| Game
| KD9J (4B44394A)
| A Little Bit of... Dr. Mario™
| 500 Nintendo Points
|-
| Application
| KDGJ (4B44474A)
| Dokodemo [http://en.wikipedia.org/wiki/Wii_no_Ma Wiinoma]
| 0 Nintendo Points
|-
| Game
| KMFJ (4B4D464A)
| A Little Bit of... Magic Made Fun™: Funny Face
| 200 Nintendo Points
|-
| Game
| KAMJ (4B414D4A)
| Kami Hikouki
| 200 Nintendo Points
|-
| Game
| KLEJ (4B4C454A)
| Legends of Exidia
| 800 Nintendo Points
|-
| Game
| KMMJ (4B4D4D4A)
| Mixed Message
| 500 Nintendo Points
|-
| Game
| KM9J (4B4D394A)
| Osoroshii Suuji
| 200 Nintendo Points
|-
| Game
| KP6J (4B50364A)
| Tori to Mame
| 200 Nintendo Points
|-
| Game
| KGUJ (4B47554A)
| Ugoku Memo Chou (Flipnote Studio)
| 0 Nintendo Points
|-
| Game
| KUWJ (4B55574A)
| Utsutsu! Made in Wario
| 500 Nintendo Points
|-
|}

==== United States ====

The official list of DSi Ware US titles is located on [http://www.nintendo.com/games/guide#qhardware=DS&qesrbRating=&qplay=dsiware&qgenre=&qrelease=&panel=qplay the Nintendo US website]. An inofficial list is at [http://en.wikipedia.org/wiki/List_of_DSiWare_games_(North_America) wikipedia].

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Name
! Price
|-
| Application
| HNGE (484e4745)
| [[Nintendo DSi Browser]]
| 0 Nintendo Points
|-
| Application
| K2DE (4B324445)
| Nintendo DSi + Internet
| N/A
|-
| Game
| KM9E (4B4D3945)
| A Little Bit of... Magic Made Fun™: Deep Psyche
| 200 Nintendo Points
|-
| Game
| KMFE (4B4D4645)
| A Little Bit of... Magic Made Fun™: Funny Face
| 200 Nintendo Points
|-
| Game
| KMSE (4B4D5345)
| A Little Bit of... Magic Made Fun™: Shuffle Games
| 200 Nintendo Points
|-
| Game
| KAAE (4B414145)
| Art Style: AQUIA
| 500 Nintendo Points
|-
| Game
| KP6E (4B503645)
| Bird & Beans
| 200 Nintendo Points
|-
| Game
| KD9E (4B443945)
| Dr. Mario Express
| 500 Nintendo Points
|-
| Application
| KGUE (4B475545)
| Flipnote Studio
| 0 Nintendo Points
|-
| Game
| KGRE (4B475245)
| Guitar Rock Tour
| 500 Nintendo Points
|-
| Game
| KLEE (4B4C4545)
| Legends of Exidia
| 800 Nintendo Points
|-
| Application
| KWBE (4B574245)
| Mario Calculator
| 200 Nintendo Points
|-
| Application
| KWFE (4B574645)
| Mario Clock
| 200 Nintendo Points
|-
| Game
| KDME (4B444D45)
| Mario vs. Donkey Kong: Minis March Again!
| 800 Nintendo Points
|-
| Game
| KMME (4B4D4D45)
| Mixed Message
| 500 Nintendo Points
|-
| Game
| KAME (4B414D45)
| Paper Airplane Chase
| 200 Nintendo Points
|-
| Game
| KPBE (4B504245)
| Photo Dojo
| 200 Nintendo Points
|-
| Game
| KS9E (4B533945)
| Real Football 2009
| 800 Nintendo Points
|-
| Game
| K4DE (4B344445)
| Sudoku
| 200 Nintendo Points
|-
| Game
| KUWE (4B555745)
| WarioWare: Snapped!
| 500 Nintendo Points
|}

==== Australia and New Zealand ====

An inofficial list is at [http://en.wikipedia.org/wiki/List_of_DSiWare_games_(PAL_region) wikipedia] (with separate columns for Europe and Australia).

Many titles are released simultaneously for both Europe and Australia (particulary those with "V" as last gamecode character). Some titles are released separately (or exclusively) for Europe and/or Australia (last gamecode character "P" for Europe, and "U" for Australia).

==== China ====

The official list of iQue DSi Ware titles is located on [https://www.ique.com/DSi/ the iQue DSi website].

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Chinese name
! Intl' name or English translation
! Price
|-
| Game
| KDOC (4B444F43)
| 任天狗狗
| Nintendogs
| Bundled with every iQue DSi
|-
| Game
| KAMC (4B414D43)
| 纸飞机挑战
| Paper Airplane Chase
| 200 iQue Points
|-
| Game
| KP6C (4B503643)
| 鸟和豆
| Bird and Beans
| 200 iQue Points
|-
| Application
| KWDC (4B574443)
| iQue DSi时钟　相架款
| Photo Clock
| 200 iQue Points
|-
| Application
| KWCC (4B574343)
| iQue DSi时钟　动物森林款
| Animal Crossing Clock
| 200 iQue Points
|-
| Application
| KWBC (4B574243)
| iQue DSi时钟　红白机马力欧款
| Mario Clock
| 200 iQue Points
|-
| Application
| KWGC (4B574743)
| iQue DSi计算器　动物森林款
| Animal Crossing Calculator
| 200 iQue Points
|-
| Game
| KUWC (4B555743)
| 照照瓦力欧制造
| WarioWare: Snapped!
| 500 iQue Points
|-
| Game
| KD9C (4B443943)
| 一下下马力欧医生
| Dr. Mario Express
| 500 iQue Points
|-
| Application
| KHDC (4B484443)
| 趣拍拍☆炫靓俏饰秀
| Sparkle Snapshots
| 500 iQue Points
|-
| Game
| KSLC (4B534C43)
| 纸牌DSi
| Touch Solitare
| 200 iQue Points
|-
| Game
| K59C (4B353943)
| 啊啊无情刹那
| Metal Torrent
| 500 iQue Points
|-
| Game
| KGBC (4B474243)
| GAME & WATCH 抛接球
| Game & Watch Ball
| 200 iQue Points
|-
| Game
| KGHC (4B474843)
| GAME&WATCH 安全帽
| Game & Watch Helmet
| 200 iQue Points
|-
| Game
| KGDC (4B474443)
| GAME & WATCH 森乐刚
| Game & Watch Donkey Kong
| 200 iQue Points
|-
| Game
| KTBC (4B544243)
| 一下下名游大全经典重温
| Clubhouse Games Express: Strategy Pack
| 500 iQue Points
|-
| Game
| KTPC (4B545043)
| 一下下名游大全轻松休闲
| Clubhouse Games Express: Family Favorites
| 500 iQue Points
|-
| Game
| KGJC (4B474A43)
| GAME & WATCH 审判
| Game & Watch: Judge
| 200 iQue Points
|-
| Game
| KGMC (4B474D43)
| GAME & WATCH 人孔
| Game & Watch: Manhole
| 200 iQue Points
|}

==== Korea ====

Unknown.

== 00030005 (Builtin apps) ==
=== All regions ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNDA (484e4441)
| DS Download Play
| 256
| 256
|-
| HNEA (484e4541)
| Pictochat
| 0
| Not Available
|}

=== United States ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIE (484e4945)
| [[Nintendo DSi Camera]]
| 768, 1024
| 768, 1024
|-
| HNJE (484e4a45)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKE (484e4b45)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

=== Japan ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIJ (484e494a)
| [[Nintendo DSi Camera]]
| 256, 768, 1024
| 256, 768, 1024
|-
| HNJJ (484e4a4a)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKJ (484e4b4a)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

=== Europe ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIP (484e4950)
| [[Nintendo DSi Camera]]
| 768, 1024
| 768, 1024
|-
| HNJP (484e4a50)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKP (484e4b50)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

===Australia and New Zealand===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIU (484e4955)
| [[Nintendo DSi Camera]]
| 768, 1024
| 768, 1024
|-
| HNJU (484e4a55)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKU (484e4b55)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

== 0003000f (Non-executable datafiles) ==
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNCA (484e4341)
| [[WiFi Firmware]]
| 256, 512
| 256, 512
|-
| HNGA (484e4741)
| Alternative DS Cart Whitelist (used by System Menu if the hardcoded main whitelist title ID is 0)
| Not Available
| Not Available
|-
| HNHA (484e4841)
| [[Nintendo DS Cart Whitelist]]
| 256, 512, 768, 1024, 1280, 1536
| 256, 512, 768, 1024, 1280, 1536
|-
| HNLC (484e4c43)
| [[Version Data]] (China)
| 4, 5, 6, 7, 8, 9
| 4, 5, 6, 7, 8, 9
|-
| HNLE (484e4c45)
| Version Data (United States)
| 3, 4, 5, 6, 7, 8, 9
| 3, 4, 5, 6, 7, 8, 9
|-
| HNLJ (484e4c4a)
| Version Data (Japan)
| 1, 2, 3, 4, 5, 6, 7, 8, 9
| 1, 2, 3, 4, 5, 6, 7, 8, 9
|-
| HNLK (484e4c4b)
| Version Data (Korea)
| 5, 6, 7, 8, 9
| 5, 6, 7, 8, 9
|-
| HNLP (484e4c50)
| Version Data (Europe)
| 3, 4, 5, 6, 7, 8, 9
| 3, 4, 5, 6, 7, 8, 9
|-
| HNLU (484e4c55)
| Version Data (Australia and New Zealand)
| 3, 4, 5, 6, 7, 8, 9
| 3, 4, 5, 6, 7, 8, 9
|}

== 00030015 (Title management) ==
=== All regions ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| 4NFA (344e4645)
| NandFiler (development tool)
| 0
| Unavailable
|}

=== United States ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOE (484e4f45)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBE (484e4245)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFE (484e4645)
| [[Nintendo DSi Shop]]
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

===Japan===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOJ (484e4f4a)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBJ (484e424a)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFJ (484e464a)
| [[Nintendo DSi Shop]]
| 1024, 1280, 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1024, 1280, 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

===Korea===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOK (484e4f5b)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 256
| 256
|-
| HNFK (484e464b)
| [[Nintendo DSi Shop]]
| 1792, 2048, 2304, 2560, 2816, 3072
| 1792, 2048, 2304, 2560, 2816, 3072
|-
| HNBK (484e424b)
| [[System Settings]]
| 768
| 768
|}

=== Europe ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOP (484e4f50)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBP (484e4250)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFP (484e4650)
| [[Nintendo DSi Shop]]
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

=== Australia and New Zealand ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOU (484e4f55)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBU (484e4255)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFU (484e4655)
| [[Nintendo DSi Shop]]
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

===China===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOC (484e4f43){{check}}
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| not available yet in china?
| not available yet in china?
|-
| HNFC (484e4643)
| [[Nintendo DSi Shop]]
| 1792, 2048, 2304, 2560, 2816, 3072
| 1792, 2048, 2304, 2560, 2816, 3072
|-
| HNBC (484e4243)
| [[System Settings]]
| 768
| 768
|}

== 00030017 (System Menu) ==
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNAA (484e4141)
| Unused [[System Menu]] (loaded by [[stage2]] if [[nand:/sys/HWINFO_S.dat]] cannot be loaded)
| Unknown
| Unavailable
|-
| HNAC (484e4143)
| System Menu (China)
| 768, 1024, 1280, 1536, 1792
| 768, 1024, 1280, 1536, 1792
|-
| HNAE (484e4145)
| System Menu (United States)
| 512, 768, 1024, 1280, 1536, 1792
| 512, 768, 1024, 1280, 1536, 1792
|-
| HNAJ (484e414a)
| System Menu (Japan)
| 256, 512, 768, 1024, 1280, 1536, 1792
| 256, 512, 768, 1024, 1280, 1536, 1792
|-
| HNAK (484e414b)
| System Menu (Korea)
| 768, 1024, 1280, 1536, 1792
| 768, 1024, 1280, 1536, 1792
|-
| HNAP (484e4150)
| System Menu (Europe)
| 512, 768, 1024, 1280, 1536, 1792
| 512, 768, 1024, 1280, 1536, 1792
|-
| HNAU (484e4155)
| System Menu (Australia and New Zealand)
| 512, 768, 1024, 1280, 1536, 1792
| 512, 768, 1024, 1280, 1536, 1792
|}

== See also ==

* [[Title metadata|Title metadata (TMD)]]
* [http://wiibrew.org/wiki/NUS_Downloader NUS Downloader info]
* [http://code.google.com/p/nusdownloader/ NUS Downloader source/binary]
* [[NUS Downloader/database]]
* [[Nintendo DSi Shop]]
* [[Nintendo Software]]
* [[System Menu]]
* [[Nintendo CDN Files]]

Title

2022-10-16T03:17:51Z

Hallowizer: Created page. Some content was taken from [[Title database]

A '''title''' is an updatable set of files that includes a [[TMD]], a [[ticket]], and a content file. While there is support for multiple content files carried from the Wii, all DSi titles only have one content file.

== Title IDs ==
Titles are identified by title IDs, which are 64-bit values that uniquely identify a title (but not the versions). The most significant 32 bits are used to identify the title type, while the least significant 32 bits are a 4-letter ASCII code (game ID).

=== Title types ===
There are 5 title types for NAND titles.

{| class="wikitable"
! Hex type
! Binary (lower half)
! Description
|-
| 00030004
| 00100
| DSiWare
|-
| 00030005
| 00101
| Built in applications
|-
| 0003000f
| 01111
| Non-executable data (including [[WLFIRM]])
|-
| 00030015
| 10101
| System applications (applications that use [[ES]] and the System class)
|-
| 00030017
| 10111
| [[System Menu]]
|}

These values correspond to a bit mask.

{| class="wikitable"
! Hex bit
! Binary bit
! Title types
! Description
|-
| 1
| 1
| 00030005, 0003000f, 00030015, 00030017
| Updated by a system update
|-
| 2
| 10
| 0003000f, 00030017
| Firmware (SDK function does not allow these titles to be loaded with the System Menu reset mechanism)
|-
| 4
| 100
| 00030004, 00030005, 0003000f, 00030015, 00030017
| Stored on NAND (SDK title launch function marks titles without this bit as cartridge titles)
|-
| 8
| 1000
| 0003000f
| Non-executable data (including WLFIRM)
|-
| 10
| 10000
| 00030015, 00030017
| System software (uses ES and the System class)
|}

=== Game IDs ===
Game IDs are 4-character ASCII codes stored in big endian.

The first character in a game ID is the system code. Note that DS titles use A, which is not listed here.

{| class="wikitable sortable" width="50%"
|-
! ASCII
! HEX
! Type
|-
| K
| 4B
| DSiWare title
|-
| H
| 48
| System title - second character is always N to indicate DSi
|}

The last character in a game ID is the region code.

{| class="wikitable sortable" width="55%"
|-
! ASCII
! HEX
! Region
|-
| A
| 41
| Region Independent
|-
| C
| 43
| China
|-
| D
| 44
| Germany
|-
| E
| 45
| North America
|-
| F
| 46
| France
|-
| H
| 48
| Belgium / Netherlands (DSiWare Only)
|-
| I
| 49
| Italy
|-
| J
| 4A
| Japan
|-
| K
| 4B
| Korea
|-
| O
| 4F
| USA and Europe
|-
| P
| 50
| Europe (these are usually used for Australia / New Zealand too)
|-
| S
| 53
| Spain
|-
| T
| 54
| USA and Australia
|-
| U
| 55
| Australia / New Zealand
|-
| V
| 56
| Europe and Australia
|-
| X
| 58
| Multilanguage European Region
|}

WiFi Firmware

2022-10-15T03:09:14Z

Hallowizer: Redirected page to WLFIRM

#redirect [[WLFIRM]]

WLFIRM

2022-10-15T03:08:55Z

Hallowizer: Created page with "'''WLFIRM''' is the firmware that runs on the WiFi chip. It is stored as title HNCA. == Format == === Signed header === {| class="wikitable" ! Start ! Length ! Descriptio..."

'''WLFIRM''' is the firmware that runs on the WiFi chip. It is stored as [[title]] HNCA.

== Format ==
=== Signed header ===
{| class="wikitable"
! Start
! Length
! Description
|-
| 0x00
| 0x80
| RSA signature over the rest of the signed header
|-
| 0x80
| 20
| SHA-1 over the entry header + entries
|-
| 0x94
| 4
| Length of the entry header + entries
|-
| 0x98
| 8
| Padding to 0xa0
|}

=== Entry header ===
{| class="wikitable"
! Start
! Length
! Description
|-
| 0xa0
| 2
| Unknown
|-
| 0xa2
| 1
| Number of entries
|-
| 0xa3
| 1
| Unknown
|}

=== Entry ===
{| class="wikitable"
! Start
! Length
! Description
|-
| 0x00
| 4
| Offset in file
|-
| 0x04
| 4
| Length
|-
| 0x08
| 4
| ID
|-
| 0x0c
| 20
| SHA-1 hash
|}

Nand:/sys

2022-10-14T02:48:07Z

Hallowizer: replaced file list with actual page

{{lowercase title}}
'''nand:/sys''' is a directory that contains files that are not deleted when the system is formatted.{{check}}

{{Navbox filebrowser|dir}}

Template:Navbox filebrowser/Directories/Nand:/sys

2022-10-14T02:22:58Z

Hallowizer: Created page with "{{Navbox filebrowser/Entry|nand:/sys/cert.sys|file}} {{Navbox filebrowser/Entry|nand:/sys/dev.kp|file}} {{Navbox filebrowser/Entry|nand:/sys/HWID.sgn|file}} {{Navbox filebrows..."

{{Navbox filebrowser/Entry|nand:/sys/cert.sys|file}}
{{Navbox filebrowser/Entry|nand:/sys/dev.kp|file}}
{{Navbox filebrowser/Entry|nand:/sys/HWID.sgn|file}}
{{Navbox filebrowser/Entry|nand:/sys/HWINFO_N.dat|file}}
{{Navbox filebrowser/Entry|nand:/sys/HWINFO_S.dat|file}}
{{Navbox filebrowser/Entry|nand:/sys/TWLFontTable.dat|file}}

Nand:/sys/HWINFO S.dat

2022-10-14T01:41:19Z

Hallowizer: format and filebrowser, also this thing is signed

{{DISPLAYTITLE:nand:/sys/HWINFO_S.dat}}
{{stub}}
'''nand:/sys/HWINFO_S.dat''' is a file used by [[stage2]] to boot. It contains an RSA signature for verifying that this file was issued by Nintendo. The RSA header is similar to [[nand:/shared1/TWLCFG0.dat]] and [[nand:/sys/HWINFO_N.dat]].

== Body format ==
{| class="wikitable"
! Start
! Length
! Description
|-
| 0x00
| 0x9
| Unknown
|-
| 0x09
| 0xe
| Serial number
|-
| 0x17
| 0x1
| Unknown
|-
| 0x18
| 0x4
| [[System Menu]] [[title ID]]
|}

{{Navbox filebrowser}}

SD title export

2022-10-14T01:07:36Z

Hallowizer: /* Header block @ 0x4020 (size 0xB4) */ HWINFO_N thing seems to be some kind of console ID because it's checked before import

The System Settings application delivered with each DSi can be used to export applications from NAND to SD. The bin files created on SD are using the Tad file structure. Tad files are encrypted with AES CCM (CTR with CBC-MAC), using a combination of a shared key and a console specific key.

The application itself (APP), and the title metadata (TMD) is encrypted with a console specific key. This means that Nintendo intended that these files can only be imported back into the same DSi.

While the banner, the public savegame, and several other metablocks are encrypted with a shared key, which means any DSi can inspect these parts of the file.

[[ES block encryption]] is used to encrypt the header block, footer block, and the 11 content parts. Each are their own seperate ES blocks.

= Tad file structure overview =

{| class="wikitable"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4020
| Banner/Icon
|-
| 0x4020
| 0xD4
| Header
|-
| 0x40F4
| 0x460
| Footer (certificates/hashes)
|-
| 0x4554
| -
| Content parts in sequence (TMD, SRL, savegame, custom banner).
|}

The banner, header, footer and savegame are encrypted with a shared key between each DSi. The other content parts are encrypted with a console specific key.

= Header block @ 0x4020 (size 0xB4) =
0000000: 34 41 4e 54 31 30 00 01 74 e9 2c 1e 24 00 00 00 4ANT10..t.,.$...
0000010: d6 e0 39 c3 98 3f 06 b6 9a b2 9d 14 e7 06 e9 00 ..9..?..........
0000020: 45 4d 44 4b 04 00 03 00 28 02 00 00 20 d2 e0 00 EMDK....(... ...
0000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000040: 00 00 00 00 00 00 00 00 00 00 00 00 80 80 06 00 ................
0000050: 00 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 ................
0000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000070: 00 00 00 00 00 80 06 00 00 00 00 00 00 00 00 00 ................
0000080: 00 00 00 00 00 86 00 00 00 00 00 00 00 00 00 00 ................
0000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000b0: 00 00 00 00 ....

{| class="wikitable"
|-
! Offset
! Size
! Description
|-
| 0x00
| 4
| Always 0x544E4134 ('TNA4', endian-swapped)
|-
| 0x04
| 2
| group_id/publisher code
|-
| 0x06
| 2
| Title version
|-
| 0x08
| 6
| DSi MAC address
|-
| 0x0E
| 2
| zero
|-
| 0x10
| 16
| Console ID from HWINFO_N.dat
|-
| 0x20
| 4
| Lower TitleID of exported app
|-
| 0x24
| 4
| Upper TitleID of exported app
|-
| 0x28
| 11 * 4
| Contains the total lengths for each of the 11 parts.
|-
| 0x54
| 8 * 4
| List of content ids in same order as tmd
|-
| 0x74
| 0x3e
| reserved section per [http://www.wiibrew.org/wiki/TMD tmds]
|}

= footer block @ 0x40F4 (size 0x460) =

0000000: d6 f3 24 7c a1 0f 4a dc cd 07 34 d6 ce 62 32 93 ..$|..J...4..b2.
0000010: 11 54 54 a5 28 38 13 5a 0c 87 8e dc 63 0a ab 2e .TT.(8.Z....c...
0000020: 4a 0f 12 5c d7 31 ee 29 72 53 39 1d ff 70 c1 8a J..\.1.)rS9..p..
0000030: 45 18 c1 88 85 1f f5 55 c6 5f 48 37 27 f3 0a 02 E......U._H7'...
0000040: e7 77 18 8b 84 ee cc e5 e4 40 e5 cb 64 bb 0a f3 .w.......@..d...
0000050: 20 00 53 00 74 00 75 00 64 00 69 00 6f 00 0a 00 .S.t.u.d.i.o...
0000060: 4e 00 69 00 6e 00 74 00 65 00 6e 00 64 00 6f 00 N.i.n.t.e.n.d.o.
0000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000d0: 00 00 00 00 00 00 00 00 00 00 00 00 c5 16 e5 12 ................
00000e0: 4c 70 9a fd 7a 03 87 d0 13 94 da 86 46 11 ff 31 Lp..z.......F..1
00000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000100: 00 00 00 00 00 b5 62 b1 02 c9 4e f3 14 2c 85 3d ......b...N..,.=
0000110: a2 c6 be c9 d8 01 db 46 03 12 44 6e 89 87 c4 e5 .......F..Dn....
0000120: 83 1e 00 03 8f f8 cd 35 e3 e4 b8 8e be 6e 65 36 .......5.....ne6
0000130: f2 6d c6 dc 2c 4b d6 38 2b 2d 7f e5 22 b0 44 3b .m..,K.8+-..".D;
0000140: 00 01 00 02 00 78 58 de a6 c4 70 9c 89 26 22 f2 .....xX...p..&".
0000150: 60 38 cb c5 d7 54 cd a3 d5 b9 d9 b3 84 63 6f be `8...T.......co.
0000160: 36 ef 00 68 f0 9a 6b 35 91 1a 67 6f 73 dc 54 61 6..h..k5..gos.Ta
0000170: c1 c7 6c 6f d4 43 58 e6 e2 62 52 11 65 77 9a ce ..lo.CX..bR.ew..
0000180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00001a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00001b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00001c0: 52 6f 6f 74 2d 43 41 30 30 30 30 30 30 30 31 2d Root-CA00000001-
00001d0: 4d 53 30 30 30 30 30 30 30 38 2d 54 57 63 37 39 MS00000008-TWc79
00001e0: 64 63 65 63 39 2d 30 38 61 32 30 32 38 37 30 31 dcec9-08a2028701
00001f0: 30 38 34 31 31 38 00 00 00 00 00 00 00 00 00 00 084118..........
0000200: 00 00 00 02 41 50 30 30 30 33 30 30 31 35 34 38 ....AP0003001548
0000210: 34 65 34 32 34 35 00 00 00 00 00 00 00 00 00 00 4e4245..........
0000220: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000230: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000240: 00 00 00 00 00 00 00 00 00 d7 c1 33 4e 24 8c 13 ...........3N$..
0000250: 0f b3 f4 c4 bb 2a 4a 79 81 51 39 6f 00 ee a2 00 .....*Jy.Q9o....
0000260: 20 a6 f5 cc d8 72 01 74 60 57 4f a4 92 52 9b 5a ....r.t`WO..R.Z
0000270: 56 75 a9 62 4f 67 25 e3 7b 05 21 e4 4f 1f c3 21 Vu.bOg%.{.!.O..!
0000280: 2b d8 ec e7 00 00 00 00 00 00 00 00 00 00 00 00 +...............
0000290: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00002a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00002b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00002c0: 00 01 00 02 00 db da 21 3b e1 f1 bf bb 4d dc 1d .......!;....M..
00002d0: 60 29 da 19 42 1e 66 4f a8 e5 27 a1 d4 ea 46 7d `)..B.fO..'...F}
00002e0: 9b b4 00 95 c5 0d e8 fa ef a7 8d e9 bc 54 da c1 .............T..
00002f0: 24 94 0b 7c ad a8 61 d5 05 97 c2 64 38 ad 18 f9 $..|..a....d8...
0000300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000310: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000320: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000330: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000340: 52 6f 6f 74 2d 43 41 30 30 30 30 30 30 30 31 2d Root-CA00000001-
0000350: 4d 53 30 30 30 30 30 30 30 38 00 00 00 00 00 00 MS00000008......
0000360: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000370: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000380: 00 00 00 02 54 57 63 37 39 64 63 65 63 39 2d 30 ....TWc79dcec9-0
0000390: 38 61 32 30 32 38 37 30 31 30 38 34 31 31 38 00 8a2028701084118.
00003a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00003b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00003c0: 00 00 00 00 6f dd de 42 01 e0 34 a3 19 bc a9 af ....o..B..4.....
00003d0: 50 fe 8a ac 75 08 07 a9 3a 2c 21 51 93 ae 4a 90 P...u...:,!Q..J.
00003e0: 6e 62 41 f1 a2 fe 00 00 3d 0a 13 97 da 53 17 98 nbA.....=....S..
00003f0: 69 38 65 67 ca f4 9c 87 ec 44 b7 eb d0 ec b8 3d i8eg.....D.....=
0000400: 23 cf 7a 35 00 00 00 00 00 00 00 00 00 00 00 00 #.z5............
0000410: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000420: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0000430: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

{| class="wikitable"
|-
! Offset
! Size
! Description
|-
| 0x00
| 20
| SHA1 of banner
|-
| 0x14
| 20
| SHA1 of tna4
|-
| 0x28
| 20
| SHA1 of tmd
|-
| 0x3c
| 20*8
| SHA1 of up to 8 contents [if unused, can be whatever happened to be in memory before]
|-
| 0xdc
| 20
| SHA1 of save data
|-
| 0xf0
| 20
| SHA1 of ?
|-
| 0x104
| 0x3c
| ECC signature of previous 0x104 bytes with AP cert
|-
| 0x140
| 0x180
| AP cert, signed by TW cert
|-
| 0x2c0
| 0x180
| TW cert, specific to a console (see dev.kp)
|}

It is assumed that this block contains an ECC signature, aswell as the console id and serial of the DSi that exported the file, as part of a Nintendo cert. Much like the Wii, the DSi carries with it a private ECC key that it can use to sign things, and a certificate signed by Nintendo that attests to the fact that the public ECC key belongs to a genuine DSi.

Title metadata

2022-10-13T22:58:44Z

Hallowizer: /* Header */ fixed a typo

'''Title metadata''', or '''TMD''' for short, is a format used to store information about a title (DSiWare, etc.) and all its installed contents, including which contents they consist of and their SHA1 hashes. The format between Wii and DSi Title metadata ''appears'' to be identical; this includes endianness, so byteswaps are often needed on the DSi.

Many operations are done in terms of 64-byte blocks, which means you will often see padding out to the nearest 64-byte boundary at the end of a field.

Example of a Nintendo DSi TMD : http://nus.cdn.t.shop.nintendowifi.net/ccs/download/0003000f484e4c4a/tmd ("HNLJ", or Japanese [[Version Data]].)

The certificate chain at the end of the file seems to always/usually have a size in bytes of 1792 and a SHA256 of 03CE2468F00D1AAEA52D7193A2312B0FE87ECE72D43381C3B6BD4C57E700CDD7.

== Structure ==

=== Header ===

{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x000
| 4
| Signature type
|-
| 0x004
| 256
| Signature
|-
| 0x104
| 60
| Padding modulo 64
|-
| 0x140
| 64
| Issuer
|-
| 0x180
| 1
| Version
|-
| 0x181
| 1
| ca_crl_version
|-
| 0x182
| 1
| signer_crl_version
|-
| 0x183
| 1
| Padding modulo 4
|-
| 0x184
| 8
| System Version; probably always 0
|-
| 0x18C
| 8
| Title ID
|-
| 0x194
| 4
| Title type
|-
| 0x198
| 2
| Group ID
|-
| 0x19A
| 62
| reserved
|-
| 0x1D8
| 4
| Access rights
|-
| 0x1DC
| 2
| Title version
|-
| 0x1DE
| 2
| Number of contents (nbr_cont)
|-
| 0x1E0
| 2
| boot index
|-
| 0x1E2
| 2
| Padding modulo 64
|-
| 0x1E4
| 36*nbr_cont
| Contents
|}

=== Content ===
{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x00
| 4
| Content ID
|-
| 0x04
| 2
| Index
|-
| 0x06
| 2
| Type
|-
| 0x08
| 8
| Size
|-
| 0x10
| 20
| SHA1 hash
|}

=== Certificates ===
{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x000
| 4
| Signature type
|-
| 0x004
| 256
| Signature
|-
| 0x104
| 32
| Issuer
|-
| 0x124
| 4
| Tag
|-
| 0x128
| 64
| Name
|-
| 0x168
|
| Key
|}

Nand:/sys/HWINFO S.dat

2022-10-13T20:58:51Z

Hallowizer: formatting changes, also they aren't verifying the signature for some reason, at least on the stage2 on my system

{{DISPLAYTITLE:nand:/sys/HWINFO_S.dat}}
'''nand:/sys/HWINFO_S.dat''' seems to be the ''secure'' version of [[Nand/sys/HWINFO_N.dat]]. It contains an RSA signature for verifying that this file was issued by Nintendo, but it does not appear to be verified by [[stage2]].

{{stub}}

DHT

2022-10-13T20:36:18Z

Hallowizer: Redirected page to Nintendo DS Cart Whitelist

#redirect [[Nintendo DS Cart Whitelist]]

Title database

2022-10-13T20:29:56Z

Hallowizer: /* 00030017 (System Menu) */ added HNAA

The Nintendo DSi uses the same title scheme and introduces separate DSi update servers; Also introduced was a new common-key for DSi title decryption.

As with the Wii, the [[title metadata]] aka "TMD" for these titles can be found on the Nintendo Update Servers.

Each title specific url uses a 4 ASCII character code denoting what type of title it is and what region it comes from.

Titles can be downloaded and decrypted with [http://wiibrew.org/wiki/NUS_Downloader NUS Downloader], a program that allows titles to be fetched from the Nintendo Update Servers.

== Title codes ==

=== Region Codes ===

Region codes are used to determine what region a title belongs to. They are at the end of a Title ID. Eg. XXXA, XXXJ

{| class="wikitable sortable" width="55%"
|-
! ASCII
! HEX
! Region
|-
| A
| 41
| Region Independent
|-
| C
| 43
| China
|-
| D
| 44
| Germany
|-
| E
| 45
| North America
|-
| F
| 46
| France
|-
| H
| 48
| Belgium / Netherlands (DSiWare Only)
|-
| I
| 49
| Italy
|-
| J
| 4A
| Japan
|-
| K
| 4B
| Korea
|-
| O
| 4F
| USA and Europe
|-
| P
| 50
| Europe (these are usually used for Australia / New Zealand too)
|-
| S
| 53
| Spain
|-
| T
| 54
| USA and Australia
|-
| U
| 55
| Australia / New Zealand
|-
| V
| 56
| Europe and Australia
|-
| X
| 58
| Multilanguage European Region
|}

=== System Codes ===

System codes are used to determine what type of title it is. They are at the beginning of a Title ID. Eg. KXXX. HXXX

{| class="wikitable sortable" width="50%"
|-
! ASCII
! HEX
! Type
|-
| K
| 4B
| DSiWare Title
|-
| H
| 48
| System \ Channel
|}

== 00030004 (DSiWare) ==

DSiWare is an online service available on the [[Nintendo DSi Shop]] to download DSi applications.

==== Europe ====

The official list of DSi Ware Europe titles is located on [http://www.nintendo.co.uk/NOE/en_GB/games/nintendo_dsiware_11805.html the Nintendo Europe website -- (broken link)]. An inofficial list is at [http://en.wikipedia.org/wiki/List_of_DSiWare_games_(PAL_region) wikipedia].

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Name
! Price
|-
| Application
| HNGP (484e4750)
| [[Nintendo DSi Browser]]
| 0 Nintendo Points
|-
| Game
| KNRV (4B4E5256)
| A Little Bit of... Brain Training™: Maths Edition
| 800 Nintendo Points
|-
| Game
| KD9V (4B443956)
| A Little Bit of... Dr. Mario™
| 500 Nintendo Points
|-
| Game
| KM9P (4B4D3950)
| A Little Bit of... Magic Made Fun™: Deep Psyche
| 200 Nintendo Points
|-
| Game
| KMFP (4B4D4650)
| A Little Bit of... Magic Made Fun™: Funny Face
| 200 Nintendo Points
|-
| Game
| KMSP (4B4D5350)
| A Little Bit of... Magic Made Fun™: Shuffle Games
| 200 Nintendo Points
|-
| Application
| KWGV (4B574756)
| [[Nintendo DSi Calculator|Animal Crossing Calculator]]
| 200 Nintendo Points
|-
| Application
| KWCV (4B574356)
| [[Nintendo DSi Clock|Animal Crossing Clock]]
| 200 Nintendo Points
|-
| Game
| KAAV (4B414156)
| Art Style: AQUITE
| 500 Nintendo Points
|-
| Game
| KADV (4B414456)
| Art Style: CODE
| 500 Nintendo Points
|-
| Application
| KGUV (4B475556)
| Flipnote Studio
| 0 Nintendo Points
|-
| Game
| KAKV (4B414B56)
| Art Style: KuBos
| 500 Nintendo Points
|-
| Game
| KASV (4B415356)
| Art Style: NEMREM
| 500 Nintendo Points
|-
| Game
| KAPV (4B415056)
| Art Style: PiCOPiCT
| 500 Nintendo Points
|-
| Game
| KA4V (4B413456)
| Asphalt 4: Elite Racing
| 800 Nintendo Points
|-
| Game
| KGRV (4B475256)
| Guitar Rock Tour
| 500 Nintendo Points
|-
| Game
| KLEV (4B4C4556)
| Legends of Exidia
| 800 Nintendo Points
|-
| Game
| KMMV (4B4D4D56)
| Mixed Message
| 500 Nintendo Points
|-
| Game
| KAMV (4B414D56)
| Paper Plane
| 200 Nintendo Points
|-
| Game
| KPOV (4B504F56)
| Pop Superstar!: Road to Celebrity
| 800 Nintendo Points
|-
| Game
| KP6V (4B503656)
| Pyoro
| 200 Nintendo Points
|-
| Game
| KS9V (4B533956)
| Real Football 2009
| 800 Nintendo Points
|-
| Game
| K4DV (4B344456)
| Sudoku
| 200 Nintendo Points
|-
| Game
| KSMV (4B534D56)
| SUDOKU 150! For Challengers
| 500 Nintendo Points
|-
| Game
| KUWV (4B555756)
| WarioWare: Snapped!
| 500 Nintendo Points
|}

==== Japan ====

The official list of DSi Ware Japan titles is located on [http://www.nintendo.co.jp/ds/dsiware/titlelist.html the Nintendo japanese website]. An inofficial list is at [http://ja.wikipedia.org/wiki/ニンテンドーDSiウェアのタイトル一覧 wikipedia] (in japanese).

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Name
! Price
|-
| Application
| HNGJ (484e474a)
| [[Nintendo DSi Browser]]
| 0 Nintendo Points
|-
| Game
| KMSJ (4B4D534A)
| 3-tsu no Shuffle Game
| 200 Nintendo Points
|-
| Game
| KAAJ (4B41414A)
| Art Style: AQUARIO
| 500 Nintendo Points
|-
| Game
| KADJ (4B41444A)
| Art Style: DECODE
| 500 Nintendo Points
|-
| Game
| KAPJ (4B41504A)
| Art Style: PICOPICT
| 500 Nintendo Points
|-
| Game
| KASJ (4B41534A)
| Art Style: SOMNIUM
| 500 Nintendo Points
|-
| Game
| KTPJ (4B54504A)
| Asobi Taizen
| 500 Nintendo Points
|-
| Game
| KNRJ (4B4E524A)
| Brain Training - Science version
| 800 Nintendo Points
|-
| Game
| KD9J (4B44394A)
| A Little Bit of... Dr. Mario™
| 500 Nintendo Points
|-
| Application
| KDGJ (4B44474A)
| Dokodemo [http://en.wikipedia.org/wiki/Wii_no_Ma Wiinoma]
| 0 Nintendo Points
|-
| Game
| KMFJ (4B4D464A)
| A Little Bit of... Magic Made Fun™: Funny Face
| 200 Nintendo Points
|-
| Game
| KAMJ (4B414D4A)
| Kami Hikouki
| 200 Nintendo Points
|-
| Game
| KLEJ (4B4C454A)
| Legends of Exidia
| 800 Nintendo Points
|-
| Game
| KMMJ (4B4D4D4A)
| Mixed Message
| 500 Nintendo Points
|-
| Game
| KM9J (4B4D394A)
| Osoroshii Suuji
| 200 Nintendo Points
|-
| Game
| KP6J (4B50364A)
| Tori to Mame
| 200 Nintendo Points
|-
| Game
| KGUJ (4B47554A)
| Ugoku Memo Chou (Flipnote Studio)
| 0 Nintendo Points
|-
| Game
| KUWJ (4B55574A)
| Utsutsu! Made in Wario
| 500 Nintendo Points
|-
|}

==== United States ====

The official list of DSi Ware US titles is located on [http://www.nintendo.com/games/guide#qhardware=DS&qesrbRating=&qplay=dsiware&qgenre=&qrelease=&panel=qplay the Nintendo US website]. An inofficial list is at [http://en.wikipedia.org/wiki/List_of_DSiWare_games_(North_America) wikipedia].

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Name
! Price
|-
| Application
| HNGE (484e4745)
| [[Nintendo DSi Browser]]
| 0 Nintendo Points
|-
| Application
| K2DE (4B324445)
| Nintendo DSi + Internet
| N/A
|-
| Game
| KM9E (4B4D3945)
| A Little Bit of... Magic Made Fun™: Deep Psyche
| 200 Nintendo Points
|-
| Game
| KMFE (4B4D4645)
| A Little Bit of... Magic Made Fun™: Funny Face
| 200 Nintendo Points
|-
| Game
| KMSE (4B4D5345)
| A Little Bit of... Magic Made Fun™: Shuffle Games
| 200 Nintendo Points
|-
| Game
| KAAE (4B414145)
| Art Style: AQUIA
| 500 Nintendo Points
|-
| Game
| KP6E (4B503645)
| Bird & Beans
| 200 Nintendo Points
|-
| Game
| KD9E (4B443945)
| Dr. Mario Express
| 500 Nintendo Points
|-
| Application
| KGUE (4B475545)
| Flipnote Studio
| 0 Nintendo Points
|-
| Game
| KGRE (4B475245)
| Guitar Rock Tour
| 500 Nintendo Points
|-
| Game
| KLEE (4B4C4545)
| Legends of Exidia
| 800 Nintendo Points
|-
| Application
| KWBE (4B574245)
| Mario Calculator
| 200 Nintendo Points
|-
| Application
| KWFE (4B574645)
| Mario Clock
| 200 Nintendo Points
|-
| Game
| KDME (4B444D45)
| Mario vs. Donkey Kong: Minis March Again!
| 800 Nintendo Points
|-
| Game
| KMME (4B4D4D45)
| Mixed Message
| 500 Nintendo Points
|-
| Game
| KAME (4B414D45)
| Paper Airplane Chase
| 200 Nintendo Points
|-
| Game
| KPBE (4B504245)
| Photo Dojo
| 200 Nintendo Points
|-
| Game
| KS9E (4B533945)
| Real Football 2009
| 800 Nintendo Points
|-
| Game
| K4DE (4B344445)
| Sudoku
| 200 Nintendo Points
|-
| Game
| KUWE (4B555745)
| WarioWare: Snapped!
| 500 Nintendo Points
|}

==== Australia and New Zealand ====

An inofficial list is at [http://en.wikipedia.org/wiki/List_of_DSiWare_games_(PAL_region) wikipedia] (with separate columns for Europe and Australia).

Many titles are released simultaneously for both Europe and Australia (particulary those with "V" as last gamecode character). Some titles are released separately (or exclusively) for Europe and/or Australia (last gamecode character "P" for Europe, and "U" for Australia).

==== China ====

The official list of iQue DSi Ware titles is located on [https://www.ique.com/DSi/ the iQue DSi website].

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Chinese name
! Intl' name or English translation
! Price
|-
| Game
| KDOC (4B444F43)
| 任天狗狗
| Nintendogs
| Bundled with every iQue DSi
|-
| Game
| KAMC (4B414D43)
| 纸飞机挑战
| Paper Airplane Chase
| 200 iQue Points
|-
| Game
| KP6C (4B503643)
| 鸟和豆
| Bird and Beans
| 200 iQue Points
|-
| Application
| KWDC (4B574443)
| iQue DSi时钟　相架款
| Photo Clock
| 200 iQue Points
|-
| Application
| KWCC (4B574343)
| iQue DSi时钟　动物森林款
| Animal Crossing Clock
| 200 iQue Points
|-
| Application
| KWBC (4B574243)
| iQue DSi时钟　红白机马力欧款
| Mario Clock
| 200 iQue Points
|-
| Application
| KWGC (4B574743)
| iQue DSi计算器　动物森林款
| Animal Crossing Calculator
| 200 iQue Points
|-
| Game
| KUWC (4B555743)
| 照照瓦力欧制造
| WarioWare: Snapped!
| 500 iQue Points
|-
| Game
| KD9C (4B443943)
| 一下下马力欧医生
| Dr. Mario Express
| 500 iQue Points
|-
| Application
| KHDC (4B484443)
| 趣拍拍☆炫靓俏饰秀
| Sparkle Snapshots
| 500 iQue Points
|-
| Game
| KSLC (4B534C43)
| 纸牌DSi
| Touch Solitare
| 200 iQue Points
|-
| Game
| K59C (4B353943)
| 啊啊无情刹那
| Metal Torrent
| 500 iQue Points
|-
| Game
| KGBC (4B474243)
| GAME & WATCH 抛接球
| Game & Watch Ball
| 200 iQue Points
|-
| Game
| KGHC (4B474843)
| GAME&WATCH 安全帽
| Game & Watch Helmet
| 200 iQue Points
|-
| Game
| KGDC (4B474443)
| GAME & WATCH 森乐刚
| Game & Watch Donkey Kong
| 200 iQue Points
|-
| Game
| KTBC (4B544243)
| 一下下名游大全经典重温
| Clubhouse Games Express: Strategy Pack
| 500 iQue Points
|-
| Game
| KTPC (4B545043)
| 一下下名游大全轻松休闲
| Clubhouse Games Express: Family Favorites
| 500 iQue Points
|-
| Game
| KGJC (4B474A43)
| GAME & WATCH 审判
| Game & Watch: Judge
| 200 iQue Points
|-
| Game
| KGMC (4B474D43)
| GAME & WATCH 人孔
| Game & Watch: Manhole
| 200 iQue Points
|}

==== Korea ====

Unknown.

== 00030005 (Builtin apps) ==
=== All regions ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNDA (484e4441)
| DS Download Play
| 256
| 256
|-
| HNEA (484e4541)
| Pictochat
| 0
| Not Available
|}

=== United States ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIE (484e4945)
| [[Nintendo DSi Camera]]
| 768, 1024
| 768, 1024
|-
| HNJE (484e4a45)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKE (484e4b45)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

=== Japan ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIJ (484e494a)
| [[Nintendo DSi Camera]]
| 256, 768, 1024
| 256, 768, 1024
|-
| HNJJ (484e4a4a)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKJ (484e4b4a)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

=== Europe ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIP (484e4950)
| [[Nintendo DSi Camera]]
| 768, 1024
| 768, 1024
|-
| HNJP (484e4a50)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKP (484e4b50)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

===Australia and New Zealand===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIU (484e4955)
| [[Nintendo DSi Camera]]
| 768, 1024
| 768, 1024
|-
| HNJU (484e4a55)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKU (484e4b55)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

== 0003000f (Non-executable datafiles) ==
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNCA (484e4341)
| [[WiFi Firmware]]
| 256, 512
| 256, 512
|-
| HNGA (484e4741)
| Alternative DS Cart Whitelist (used by System Menu if the hardcoded main whitelist title ID is 0)
| Not Available
| Not Available
|-
| HNHA (484e4841)
| [[Nintendo DS Cart Whitelist]]
| 256, 512, 768, 1024, 1280, 1536
| 256, 512, 768, 1024, 1280, 1536
|-
| HNLC (484e4c43)
| [[Version Data]] (China)
| 4, 5, 6, 7, 8, 9
| 4, 5, 6, 7, 8, 9
|-
| HNLE (484e4c45)
| Version Data (United States)
| 3, 4, 5, 6, 7, 8, 9
| 3, 4, 5, 6, 7, 8, 9
|-
| HNLJ (484e4c4a)
| Version Data (Japan)
| 1, 2, 3, 4, 5, 6, 7, 8, 9
| 1, 2, 3, 4, 5, 6, 7, 8, 9
|-
| HNLK (484e4c4b)
| Version Data (Korea)
| 5, 6, 7, 8, 9
| 5, 6, 7, 8, 9
|-
| HNLP (484e4c50)
| Version Data (Europe)
| 3, 4, 5, 6, 7, 8, 9
| 3, 4, 5, 6, 7, 8, 9
|-
| HNLU (484e4c55)
| Version Data (Australia and New Zealand)
| 3, 4, 5, 6, 7, 8, 9
| 3, 4, 5, 6, 7, 8, 9
|}

== 00030015 (Title management) ==
=== All regions ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| 4NFA (344e4645)
| NandFiler (development tool)
| 0
| Unavailable
|}

=== United States ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOE (484e4f45)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBE (484e4245)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFE (484e4645)
| [[Nintendo DSi Shop]]
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

===Japan===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOJ (484e4f4a)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBJ (484e424a)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFJ (484e464a)
| [[Nintendo DSi Shop]]
| 1024, 1280, 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1024, 1280, 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

===Korea===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOK (484e4f5b)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 256
| 256
|-
| HNFK (484e464b)
| [[Nintendo DSi Shop]]
| 1792, 2048, 2304, 2560, 2816, 3072
| 1792, 2048, 2304, 2560, 2816, 3072
|-
| HNBK (484e424b)
| [[System Settings]]
| 768
| 768
|}

=== Europe ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOP (484e4f50)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBP (484e4250)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFP (484e4650)
| [[Nintendo DSi Shop]]
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

=== Australia and New Zealand ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOU (484e4f55)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBU (484e4255)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFU (484e4655)
| [[Nintendo DSi Shop]]
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

===China===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOC (484e4f43){{check}}
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| not available yet in china?
| not available yet in china?
|-
| HNFC (484e4643)
| [[Nintendo DSi Shop]]
| 1792, 2048, 2304, 2560, 2816, 3072
| 1792, 2048, 2304, 2560, 2816, 3072
|-
| HNBC (484e4243)
| [[System Settings]]
| 768
| 768
|}

== 00030017 (System Menu) ==
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNAA (484e4141)
| Unused [[System Menu]] (loaded by [[stage2]] if [[nand:/sys/HWINFO_S.dat]] cannot be loaded)
| Unknown
| Unavailable
|-
| HNAC (484e4143)
| System Menu (China)
| 768, 1024, 1280, 1536, 1792
| 768, 1024, 1280, 1536, 1792
|-
| HNAE (484e4145)
| System Menu (United States)
| 512, 768, 1024, 1280, 1536, 1792
| 512, 768, 1024, 1280, 1536, 1792
|-
| HNAJ (484e414a)
| System Menu (Japan)
| 256, 512, 768, 1024, 1280, 1536, 1792
| 256, 512, 768, 1024, 1280, 1536, 1792
|-
| HNAK (484e414b)
| System Menu (Korea)
| 768, 1024, 1280, 1536, 1792
| 768, 1024, 1280, 1536, 1792
|-
| HNAP (484e4150)
| System Menu (Europe)
| 512, 768, 1024, 1280, 1536, 1792
| 512, 768, 1024, 1280, 1536, 1792
|-
| HNAU (484e4155)
| System Menu (Australia and New Zealand)
| 512, 768, 1024, 1280, 1536, 1792
| 512, 768, 1024, 1280, 1536, 1792
|}

== See also ==

* [[Title metadata|Title metadata (TMD)]]
* [http://wiibrew.org/wiki/NUS_Downloader NUS Downloader info]
* [http://code.google.com/p/nusdownloader/ NUS Downloader source/binary]
* [[NUS Downloader/database]]
* [[Nintendo DSi Shop]]
* [[Nintendo Software]]
* [[System Menu]]
* [[Nintendo CDN Files]]

Boot2

2022-10-13T20:21:03Z

Hallowizer: redirect fix

#redirect [[stage2]]

Boot0

2022-10-13T20:20:29Z

Hallowizer: Hallowizer moved page Boot0 to Stage1: commonly used name

#REDIRECT [[Stage1]]

Stage1

2022-10-13T20:20:28Z

Hallowizer: Hallowizer moved page Boot0 to Stage1: commonly used name

[[Image:boot-stage1-error.jpeg|frame|When the Stage 1 bootloader (in ROM) fails, it displays a 32-bit hexadecimal number on the top screen.]]

The first stage of the DSi's bootloader lives in ROM, presumably on the CPU die. It loads further encrypted+signed stages from [[NAND]] flash, starting with a plaintext offset table in the sector at offset 0x200.

Not much is known about this bootloader yet, but it presumably knows how to:
# Initialize the encryption hardware
# Read the contents of [[NVRAM]]
# Initialize both LCDs
# Read blocks (but not files) from the [[NAND]] flash
# Perform some variety of integrity check on all data it reads (signature, CRC, ?)
# Display basic hexadecimal error codes
# Possibly factory-programming the [[NAND]] flash?
# Might also do basic power-on self test of peripherals

Known error codes:

{| border="1" cellpadding="3" cellspacing="0"
! Error Code !! Description
|-
| 0000FE00 || Error communicating with NAND chip. (It's missing, CLK is shorted, etc.)
|-
| 0000FEFC || Integrity error in first block of Stage 2 (address at 0x220)
|-
| 0000FEFD || Integrity error in second block of Stage 2 (address at 0x230)
|-
| 0000FEFE || Boot sector integrity error (Sector 0x200 not valid), or error in [[NVRAM]] contents.
|}

Talk:Boot1

2022-10-13T20:20:16Z

Hallowizer: Hallowizer moved page Talk:Boot1 to Talk:Stage2: commonly used name

#REDIRECT [[Talk:Stage2]]

Talk:Stage2

2022-10-13T20:20:16Z

Hallowizer: Hallowizer moved page Talk:Boot1 to Talk:Stage2: commonly used name

== RSA and Bootsector decryption? ==

Where is that RSA info from? Is it possible to decrypt the RSA block on DSi, or on 3DS, or both?
Any hints how to do that? Are DSi and 3DS using the same RSA key?

The notice about keyX being same as for "Tad" sounds good... until one figures out that the "srl extract" utility contains only a normal "key" (not a keyX/Y pair), so decrypting isn't possible even when knowing keyY.
Of course, whomever has found the normal key, should be also able to find the keyX/Y values, but I've no idea how that could be done (it will certainly not work with cooking coach which has all keyslots erased, so it might require main ram hacks in worst case).

The part about ''"binblk->binblocksize" is the actual binary size'' is confusing. If '''binblk->binblocksize''' is known, then what is '''binblksize''' in the formula? Or is that a typo, and it means same as '''binblk->binblocksize'''?[[User:Nocash|Nocash]] 14:27, 27 March 2015 (CET)

* 1/3) See last page edit.
* 2) One can easily obtain the keyX^keyY key with F_XY_reverse(<any normalkey>) from that tool, but of course that's rather pointless without a keyX/keyY to XOR with that. Besides ramhaxx, the only other way to obtain the keyX/keyY for that yourself is to just get it from the 3DS [http://3dbrew.org/wiki/Memory_layout#ARM9_ITCM DSi-key-stash] @ 0x01FFD000(essentially *all* DSi keys are stored in there + TWL_FIRM Process9).
--[[User:Yellows8|Yellows8]] 06:00, 7 April 2015 (CEST)

:4.1) Okay, decrypting the RSA stuff is possible, and it's just me not knowing how to. Are you saying that the RSA key is contained in the TWL_FIRM executable? So one could simply "copy/paste" it from the TWL_FIRM files? Or is the key elsewhere, and TWL_FIRM is just using it during boot? So one would need some exploit to hack TWL_FIRM during boot-up? Sorry, but I don't have a 3DS, and know absolutely nothing about that console.

:4.3) I've edited it myself (see last page edit). I hope that wasn't wrong.

:5) Yeah, reversing KeyX without KeyY won't work (I can confirm that). If that Tad KeyX is one of the "known" DSi keys (those relocated from DSi BIOS ROM to TCM/WRAM during booting), then everything would be fine. And otherwise, one would need some 3DS exploit to get that DSi-key-stash... supposedly some special kernel exploit which isn't available to normal 3DS programmers?
:PS. I've added some contact info on my wiki/user page (just in case) --[[User:Nocash|Nocash]] 22:56, 14 April 2015 (CEST)

::Yes, those two RSA pubks are stored in the TWL_FIRM Process9 binary itself. When one has TWL_FIRM decrypted one can just extract those keys from there. There's public exploit(s)+tools for that, including arm9hax which is required for dumping the DSi keys from 3DS ARM9 ITCM. The common tad-keyX is written to the AES engine keyslot for it by bootrom, AFAIK it doesn't get copied elsewhere(the keyY for it is copied to the keystorage area near the end of ARM7 memory, but of course that area gets cleared when games are booted). --[[User:Yellows8|Yellows8]] 20:34, 18 April 2015 (CEST)

Thanks! Found the RSA key. And now I do also understand what you meant about reversing Tad key X (the DSi does only relocate Tad key Y to RAM/TCM). My emu is now throwing that "Error: 1-2435-8325" message. That should be a good place to start with. --[[User:Nocash|Nocash]] 23:41, 20 April 2015 (CEST)

== Bootloader Error Photos ==

[[File:1124101052.jpg|200px|thumb|left]]
[[File:1124101051.jpg|200px|thumb|left]]
[[File:1124101051a.jpg|200px|thumb|left]]

Here are some shots of my DSi with what I think is a bootloader error. --[[User:The2Banned2One|The2Banned2One]] 17:25, 24 November 2010 (CET)

----

'''Discuss here:'''

== Split to boot0 and boot1? ==

Seems like a better name to give these loaders. [[User:Hallowizer|Hallowizer]] ([[User talk:Hallowizer|talk]]) 07:26, 18 August 2021 (CEST)

Boot1

2022-10-13T20:20:16Z

Hallowizer: Hallowizer moved page Boot1 to Stage2: commonly used name

#REDIRECT [[Stage2]]

Stage2

2022-10-13T20:20:16Z

Hallowizer: Hallowizer moved page Boot1 to Stage2: commonly used name

[[Image:boot-stage2-error.jpeg|frame|This may have been a Stage 2 bootloader error.]]

Unlike the stage1 bootloader, which must be small enough to fit in ROM (probably several kilobytes), the stage2 bootloader has about a megabyte of NAND flash reserved for it. The stage2 bootloader understands partitions and filesystems, and it is capable of loading the DSi menu. It also must understand the encryption used on filesystem blocks in the NAND, and it must understand how to load and validate title metadata.

The Stage 2 loader was not modified by the [[System Menu 1.4]] update. This is still earlier in the boot process than the "Health and Safety" warning(that warning is displayed by the sysmenu).

The first stage bootloader reads the sector at offset 0x200 in order to find a table of offsets to the Stage 2 bootloader:

00000220 00 08 00 00 10 64 02 00 00 80 7b 03 00 66 02 00 |.....d....{..f..|
00000230 00 6e 02 00 88 75 02 00 00 80 7b 03 00 76 02 00 |.n...u....{..v..|
00000240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|

This is describing two chunks of the stage2 loader: the ARM9-binary 0x26410 bytes in length at address 0x800, and the ARM7-binary 0x27588 bytes at address 0x26e00.

Structure of this header:
{| border="1" cellpadding="3" cellspacing="0"
! Offset
! Size
! Description
|-
| 0x0
| 0x20
| Reserved (zerofilled)
|-
| 0x20
| 0x4
| ARM9 Bootcode, eMMC Source Offset
|-
| 0x24
| 0x4
| ARM9 Bootcode, Size "Actual binary size"
|-
| 0x28
| 0x4
| ARM9 Bootcode, RAM Destination Address and Entrypoint
|-
| 0x2C
| 0x4
| ARM9 Bootcode, Size rounded up to multiple of 0x200
|-
| 0x30
| 0x4
| ARM7 Bootcode, eMMC Source Offset
|-
| 0x34
| 0x4
| ARM7 Bootcode, Size "Actual binary size"
|-
| 0x38
| 0x4
| ARM7 Bootcode, RAM Destination Address and Entrypoint
|-
| 0x3C
| 0x4
| ARM7 Bootcode, Size rounded up to multiple of 0x200
|-
| 0x40
| 0xBF
| Reserved (zerofilled)
|-
| 0xFF
| 0x1
| Unknown, value 0xFF? (actually, this is appears to be always 0Ch, not FFh?)
|-
| 0x100
| 0x80
| RSA-1024 Data Block
|-
| 0x180
| 0x14
| Global MBK1..MBK5 Slot Settings
|-
| 0x194
| 0xC
| Local MBK6..MBK8 Settings for ARM9 Side
|-
| 0x1A0
| 0xC
| Local MBK6..MBK8 Settings for ARM7 Side
|-
| 0x1AC
| 0x4
| Global MBK9 Slot Master Setting
|-
| 0x1B0
| 0x50
| Reserved (zerofilled)
|}

Note that the above format resembles the [[DSi Cartridge Header]] (entries 0x20-0x3F are roughly similar, and entries 0x180-0x1AF appear to be same as in cart header).

The RSA pubks(the one for 3DS and the other one for DSi) for the below signature can be obtained from 3DS TWL_FIRM Process9(this is required for getting the binaries' keyY). It's unknown(?) if the DSi bootrom(s) copy this modulo to anywhere outside of bootrom.

Structure of the 0x74-byte "hash-data" stored in the RSA message:
{| border="1" cellpadding="3" cellspacing="0"
! Offset
! Size
! Description
|-
| 0x0
| 0x10
| [[AES_Engine]] keyY used for the ARM9/ARM7 binaries crypto.
|-
| 0x10
| 0x14
| SHA1 hash. Going by 3DS TWL_FIRM this seems to calculated over the first 0x28-bytes of [[NAND]], then the first 0x100-bytes of the header, then the last 0x80-bytes of the header(following the signature). This works with the bootloader contained in TWL_FIRM, however it's unknown how the first part is handled on DSi.
|-
| 0x24
| 0x14
| SHA1 hash over the plaintext ARM9 binary, with the actual binary size.
|-
| 0x38
| 0x14
| SHA1 hash over the plaintext ARM7 binary, with the actual binary size.
|-
| 0x4C
| 0x14
| Unknown, not used by 3DS TWL_FIRM. Normally all-zero.
|-
| 0x60
| 0x14
| Unknown, not used by 3DS TWL_FIRM.
|}

Note that this sector (and two similar ones at 0x400 and 0x600) appear to be the only unencrypted blocks on the NAND flash.

After loading+verifying the the above header, the ARM7 binary is loaded+verified, then the ARM9 binary is loaded+verified.

Whereas the filesystem data in NAND is encrypted using a unique key for every DSi, the stage2 bootloader is identical on every DSi tested so far. The stage2 bootloader binaries are not encrypted with any console-unique keys.

Stage1 uses the [[AES_Engine]] with mode AES-CTR to decrypt each ARM9/ARM7 binary, where keyY is from the above signature. The [[AES_Engine]] keyslot used here is the same one used for the shared areas for [[Tad]], therefore the keyX is the same as the one used for that. The following is used for the CTR, where "binblk->binblocksize" is the above binary size aligned to 0x200-bytes:

unsigned int ctr[4];
memset(ctr, 0, 16);

ctr[0] = binblk->binblocksize;
ctr[1] = (unsigned int)(-binblk->binblocksize);
ctr[2] = ~binblk->binblocksize;

=== Stage2 operations ===
After Stage 2 is loaded:
# The NAND flash is partially re-initialized
# Sector 0 is read from the NAND. This appears to be an (encrypted) DOS-style MBR.
# The MBR signature and the type of the first partition are verified.
# Filesystem metadata is read from sectors starting around 0x100000. The metadata is in FAT16 format with long filenames.
# Multiple files are loaded from the filesystem. The exact read addresses will vary depending on your DSi's firmware version and the state of its filesystem when you performed the last firmware update. On a brand new DSi, it appears that the DSi Menu itself is loaded from 0xb20000 after two small metadata files are read from 0xb1c000 and 0x7a0000.

All errors show before the health and safety screen. It appears that stage2 errors from a cold power-on always cause the DSi to hang at a black screen, whereas stage2 errors after reset (pressing but not holding the power button) will give an error message screen. Known errors:

{| border="1" cellpadding="3" cellspacing="0"
! Text !! Description
|-
| "Error: 1-2435-8325" || Invalid signature or partition type in MBR, invalid starting LBA.
|-
| "Error: 2-2435-8325" || Invalid Firmware
|-
| "Error: 3-2435-8325" || DSi Menu integrity checks failed
|-
|}

Title database

2022-10-12T05:09:27Z

Hallowizer: /* 00030015 (Title management) */ added NandFiler from a devkit

The Nintendo DSi uses the same title scheme and introduces separate DSi update servers; Also introduced was a new common-key for DSi title decryption.

As with the Wii, the [[title metadata]] aka "TMD" for these titles can be found on the Nintendo Update Servers.

Each title specific url uses a 4 ASCII character code denoting what type of title it is and what region it comes from.

Titles can be downloaded and decrypted with [http://wiibrew.org/wiki/NUS_Downloader NUS Downloader], a program that allows titles to be fetched from the Nintendo Update Servers.

== Title codes ==

=== Region Codes ===

Region codes are used to determine what region a title belongs to. They are at the end of a Title ID. Eg. XXXA, XXXJ

{| class="wikitable sortable" width="55%"
|-
! ASCII
! HEX
! Region
|-
| A
| 41
| Region Independent
|-
| C
| 43
| China
|-
| D
| 44
| Germany
|-
| E
| 45
| North America
|-
| F
| 46
| France
|-
| H
| 48
| Belgium / Netherlands (DSiWare Only)
|-
| I
| 49
| Italy
|-
| J
| 4A
| Japan
|-
| K
| 4B
| Korea
|-
| O
| 4F
| USA and Europe
|-
| P
| 50
| Europe (these are usually used for Australia / New Zealand too)
|-
| S
| 53
| Spain
|-
| T
| 54
| USA and Australia
|-
| U
| 55
| Australia / New Zealand
|-
| V
| 56
| Europe and Australia
|-
| X
| 58
| Multilanguage European Region
|}

=== System Codes ===

System codes are used to determine what type of title it is. They are at the beginning of a Title ID. Eg. KXXX. HXXX

{| class="wikitable sortable" width="50%"
|-
! ASCII
! HEX
! Type
|-
| K
| 4B
| DSiWare Title
|-
| H
| 48
| System \ Channel
|}

== 00030004 (DSiWare) ==

DSiWare is an online service available on the [[Nintendo DSi Shop]] to download DSi applications.

==== Europe ====

The official list of DSi Ware Europe titles is located on [http://www.nintendo.co.uk/NOE/en_GB/games/nintendo_dsiware_11805.html the Nintendo Europe website -- (broken link)]. An inofficial list is at [http://en.wikipedia.org/wiki/List_of_DSiWare_games_(PAL_region) wikipedia].

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Name
! Price
|-
| Application
| HNGP (484e4750)
| [[Nintendo DSi Browser]]
| 0 Nintendo Points
|-
| Game
| KNRV (4B4E5256)
| A Little Bit of... Brain Training™: Maths Edition
| 800 Nintendo Points
|-
| Game
| KD9V (4B443956)
| A Little Bit of... Dr. Mario™
| 500 Nintendo Points
|-
| Game
| KM9P (4B4D3950)
| A Little Bit of... Magic Made Fun™: Deep Psyche
| 200 Nintendo Points
|-
| Game
| KMFP (4B4D4650)
| A Little Bit of... Magic Made Fun™: Funny Face
| 200 Nintendo Points
|-
| Game
| KMSP (4B4D5350)
| A Little Bit of... Magic Made Fun™: Shuffle Games
| 200 Nintendo Points
|-
| Application
| KWGV (4B574756)
| [[Nintendo DSi Calculator|Animal Crossing Calculator]]
| 200 Nintendo Points
|-
| Application
| KWCV (4B574356)
| [[Nintendo DSi Clock|Animal Crossing Clock]]
| 200 Nintendo Points
|-
| Game
| KAAV (4B414156)
| Art Style: AQUITE
| 500 Nintendo Points
|-
| Game
| KADV (4B414456)
| Art Style: CODE
| 500 Nintendo Points
|-
| Application
| KGUV (4B475556)
| Flipnote Studio
| 0 Nintendo Points
|-
| Game
| KAKV (4B414B56)
| Art Style: KuBos
| 500 Nintendo Points
|-
| Game
| KASV (4B415356)
| Art Style: NEMREM
| 500 Nintendo Points
|-
| Game
| KAPV (4B415056)
| Art Style: PiCOPiCT
| 500 Nintendo Points
|-
| Game
| KA4V (4B413456)
| Asphalt 4: Elite Racing
| 800 Nintendo Points
|-
| Game
| KGRV (4B475256)
| Guitar Rock Tour
| 500 Nintendo Points
|-
| Game
| KLEV (4B4C4556)
| Legends of Exidia
| 800 Nintendo Points
|-
| Game
| KMMV (4B4D4D56)
| Mixed Message
| 500 Nintendo Points
|-
| Game
| KAMV (4B414D56)
| Paper Plane
| 200 Nintendo Points
|-
| Game
| KPOV (4B504F56)
| Pop Superstar!: Road to Celebrity
| 800 Nintendo Points
|-
| Game
| KP6V (4B503656)
| Pyoro
| 200 Nintendo Points
|-
| Game
| KS9V (4B533956)
| Real Football 2009
| 800 Nintendo Points
|-
| Game
| K4DV (4B344456)
| Sudoku
| 200 Nintendo Points
|-
| Game
| KSMV (4B534D56)
| SUDOKU 150! For Challengers
| 500 Nintendo Points
|-
| Game
| KUWV (4B555756)
| WarioWare: Snapped!
| 500 Nintendo Points
|}

==== Japan ====

The official list of DSi Ware Japan titles is located on [http://www.nintendo.co.jp/ds/dsiware/titlelist.html the Nintendo japanese website]. An inofficial list is at [http://ja.wikipedia.org/wiki/ニンテンドーDSiウェアのタイトル一覧 wikipedia] (in japanese).

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Name
! Price
|-
| Application
| HNGJ (484e474a)
| [[Nintendo DSi Browser]]
| 0 Nintendo Points
|-
| Game
| KMSJ (4B4D534A)
| 3-tsu no Shuffle Game
| 200 Nintendo Points
|-
| Game
| KAAJ (4B41414A)
| Art Style: AQUARIO
| 500 Nintendo Points
|-
| Game
| KADJ (4B41444A)
| Art Style: DECODE
| 500 Nintendo Points
|-
| Game
| KAPJ (4B41504A)
| Art Style: PICOPICT
| 500 Nintendo Points
|-
| Game
| KASJ (4B41534A)
| Art Style: SOMNIUM
| 500 Nintendo Points
|-
| Game
| KTPJ (4B54504A)
| Asobi Taizen
| 500 Nintendo Points
|-
| Game
| KNRJ (4B4E524A)
| Brain Training - Science version
| 800 Nintendo Points
|-
| Game
| KD9J (4B44394A)
| A Little Bit of... Dr. Mario™
| 500 Nintendo Points
|-
| Application
| KDGJ (4B44474A)
| Dokodemo [http://en.wikipedia.org/wiki/Wii_no_Ma Wiinoma]
| 0 Nintendo Points
|-
| Game
| KMFJ (4B4D464A)
| A Little Bit of... Magic Made Fun™: Funny Face
| 200 Nintendo Points
|-
| Game
| KAMJ (4B414D4A)
| Kami Hikouki
| 200 Nintendo Points
|-
| Game
| KLEJ (4B4C454A)
| Legends of Exidia
| 800 Nintendo Points
|-
| Game
| KMMJ (4B4D4D4A)
| Mixed Message
| 500 Nintendo Points
|-
| Game
| KM9J (4B4D394A)
| Osoroshii Suuji
| 200 Nintendo Points
|-
| Game
| KP6J (4B50364A)
| Tori to Mame
| 200 Nintendo Points
|-
| Game
| KGUJ (4B47554A)
| Ugoku Memo Chou (Flipnote Studio)
| 0 Nintendo Points
|-
| Game
| KUWJ (4B55574A)
| Utsutsu! Made in Wario
| 500 Nintendo Points
|-
|}

==== United States ====

The official list of DSi Ware US titles is located on [http://www.nintendo.com/games/guide#qhardware=DS&qesrbRating=&qplay=dsiware&qgenre=&qrelease=&panel=qplay the Nintendo US website]. An inofficial list is at [http://en.wikipedia.org/wiki/List_of_DSiWare_games_(North_America) wikipedia].

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Name
! Price
|-
| Application
| HNGE (484e4745)
| [[Nintendo DSi Browser]]
| 0 Nintendo Points
|-
| Application
| K2DE (4B324445)
| Nintendo DSi + Internet
| N/A
|-
| Game
| KM9E (4B4D3945)
| A Little Bit of... Magic Made Fun™: Deep Psyche
| 200 Nintendo Points
|-
| Game
| KMFE (4B4D4645)
| A Little Bit of... Magic Made Fun™: Funny Face
| 200 Nintendo Points
|-
| Game
| KMSE (4B4D5345)
| A Little Bit of... Magic Made Fun™: Shuffle Games
| 200 Nintendo Points
|-
| Game
| KAAE (4B414145)
| Art Style: AQUIA
| 500 Nintendo Points
|-
| Game
| KP6E (4B503645)
| Bird & Beans
| 200 Nintendo Points
|-
| Game
| KD9E (4B443945)
| Dr. Mario Express
| 500 Nintendo Points
|-
| Application
| KGUE (4B475545)
| Flipnote Studio
| 0 Nintendo Points
|-
| Game
| KGRE (4B475245)
| Guitar Rock Tour
| 500 Nintendo Points
|-
| Game
| KLEE (4B4C4545)
| Legends of Exidia
| 800 Nintendo Points
|-
| Application
| KWBE (4B574245)
| Mario Calculator
| 200 Nintendo Points
|-
| Application
| KWFE (4B574645)
| Mario Clock
| 200 Nintendo Points
|-
| Game
| KDME (4B444D45)
| Mario vs. Donkey Kong: Minis March Again!
| 800 Nintendo Points
|-
| Game
| KMME (4B4D4D45)
| Mixed Message
| 500 Nintendo Points
|-
| Game
| KAME (4B414D45)
| Paper Airplane Chase
| 200 Nintendo Points
|-
| Game
| KPBE (4B504245)
| Photo Dojo
| 200 Nintendo Points
|-
| Game
| KS9E (4B533945)
| Real Football 2009
| 800 Nintendo Points
|-
| Game
| K4DE (4B344445)
| Sudoku
| 200 Nintendo Points
|-
| Game
| KUWE (4B555745)
| WarioWare: Snapped!
| 500 Nintendo Points
|}

==== Australia and New Zealand ====

An inofficial list is at [http://en.wikipedia.org/wiki/List_of_DSiWare_games_(PAL_region) wikipedia] (with separate columns for Europe and Australia).

Many titles are released simultaneously for both Europe and Australia (particulary those with "V" as last gamecode character). Some titles are released separately (or exclusively) for Europe and/or Australia (last gamecode character "P" for Europe, and "U" for Australia).

==== China ====

The official list of iQue DSi Ware titles is located on [https://www.ique.com/DSi/ the iQue DSi website].

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Chinese name
! Intl' name or English translation
! Price
|-
| Game
| KDOC (4B444F43)
| 任天狗狗
| Nintendogs
| Bundled with every iQue DSi
|-
| Game
| KAMC (4B414D43)
| 纸飞机挑战
| Paper Airplane Chase
| 200 iQue Points
|-
| Game
| KP6C (4B503643)
| 鸟和豆
| Bird and Beans
| 200 iQue Points
|-
| Application
| KWDC (4B574443)
| iQue DSi时钟　相架款
| Photo Clock
| 200 iQue Points
|-
| Application
| KWCC (4B574343)
| iQue DSi时钟　动物森林款
| Animal Crossing Clock
| 200 iQue Points
|-
| Application
| KWBC (4B574243)
| iQue DSi时钟　红白机马力欧款
| Mario Clock
| 200 iQue Points
|-
| Application
| KWGC (4B574743)
| iQue DSi计算器　动物森林款
| Animal Crossing Calculator
| 200 iQue Points
|-
| Game
| KUWC (4B555743)
| 照照瓦力欧制造
| WarioWare: Snapped!
| 500 iQue Points
|-
| Game
| KD9C (4B443943)
| 一下下马力欧医生
| Dr. Mario Express
| 500 iQue Points
|-
| Application
| KHDC (4B484443)
| 趣拍拍☆炫靓俏饰秀
| Sparkle Snapshots
| 500 iQue Points
|-
| Game
| KSLC (4B534C43)
| 纸牌DSi
| Touch Solitare
| 200 iQue Points
|-
| Game
| K59C (4B353943)
| 啊啊无情刹那
| Metal Torrent
| 500 iQue Points
|-
| Game
| KGBC (4B474243)
| GAME & WATCH 抛接球
| Game & Watch Ball
| 200 iQue Points
|-
| Game
| KGHC (4B474843)
| GAME&WATCH 安全帽
| Game & Watch Helmet
| 200 iQue Points
|-
| Game
| KGDC (4B474443)
| GAME & WATCH 森乐刚
| Game & Watch Donkey Kong
| 200 iQue Points
|-
| Game
| KTBC (4B544243)
| 一下下名游大全经典重温
| Clubhouse Games Express: Strategy Pack
| 500 iQue Points
|-
| Game
| KTPC (4B545043)
| 一下下名游大全轻松休闲
| Clubhouse Games Express: Family Favorites
| 500 iQue Points
|-
| Game
| KGJC (4B474A43)
| GAME & WATCH 审判
| Game & Watch: Judge
| 200 iQue Points
|-
| Game
| KGMC (4B474D43)
| GAME & WATCH 人孔
| Game & Watch: Manhole
| 200 iQue Points
|}

==== Korea ====

Unknown.

== 00030005 (Builtin apps) ==
=== All regions ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNDA (484e4441)
| DS Download Play
| 256
| 256
|-
| HNEA (484e4541)
| Pictochat
| 0
| Not Available
|}

=== United States ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIE (484e4945)
| [[Nintendo DSi Camera]]
| 768, 1024
| 768, 1024
|-
| HNJE (484e4a45)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKE (484e4b45)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

=== Japan ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIJ (484e494a)
| [[Nintendo DSi Camera]]
| 256, 768, 1024
| 256, 768, 1024
|-
| HNJJ (484e4a4a)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKJ (484e4b4a)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

=== Europe ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIP (484e4950)
| [[Nintendo DSi Camera]]
| 768, 1024
| 768, 1024
|-
| HNJP (484e4a50)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKP (484e4b50)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

===Australia and New Zealand===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIU (484e4955)
| [[Nintendo DSi Camera]]
| 768, 1024
| 768, 1024
|-
| HNJU (484e4a55)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKU (484e4b55)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

== 0003000f (Non-executable datafiles) ==
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNCA (484e4341)
| [[WiFi Firmware]]
| 256, 512
| 256, 512
|-
| HNGA (484e4741)
| Alternative DS Cart Whitelist (used by System Menu if the hardcoded main whitelist title ID is 0)
| Not Available
| Not Available
|-
| HNHA (484e4841)
| [[Nintendo DS Cart Whitelist]]
| 256, 512, 768, 1024, 1280, 1536
| 256, 512, 768, 1024, 1280, 1536
|-
| HNLC (484e4c43)
| [[Version Data]] (China)
| 4, 5, 6, 7, 8, 9
| 4, 5, 6, 7, 8, 9
|-
| HNLE (484e4c45)
| Version Data (United States)
| 3, 4, 5, 6, 7, 8, 9
| 3, 4, 5, 6, 7, 8, 9
|-
| HNLJ (484e4c4a)
| Version Data (Japan)
| 1, 2, 3, 4, 5, 6, 7, 8, 9
| 1, 2, 3, 4, 5, 6, 7, 8, 9
|-
| HNLK (484e4c4b)
| Version Data (Korea)
| 5, 6, 7, 8, 9
| 5, 6, 7, 8, 9
|-
| HNLP (484e4c50)
| Version Data (Europe)
| 3, 4, 5, 6, 7, 8, 9
| 3, 4, 5, 6, 7, 8, 9
|-
| HNLU (484e4c55)
| Version Data (Australia and New Zealand)
| 3, 4, 5, 6, 7, 8, 9
| 3, 4, 5, 6, 7, 8, 9
|}

== 00030015 (Title management) ==
=== All regions ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| 4NFA (344e4645)
| NandFiler (development tool)
| 0
| Unavailable
|}

=== United States ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOE (484e4f45)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBE (484e4245)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFE (484e4645)
| [[Nintendo DSi Shop]]
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

===Japan===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOJ (484e4f4a)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBJ (484e424a)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFJ (484e464a)
| [[Nintendo DSi Shop]]
| 1024, 1280, 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1024, 1280, 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

===Korea===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOK (484e4f5b)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 256
| 256
|-
| HNFK (484e464b)
| [[Nintendo DSi Shop]]
| 1792, 2048, 2304, 2560, 2816, 3072
| 1792, 2048, 2304, 2560, 2816, 3072
|-
| HNBK (484e424b)
| [[System Settings]]
| 768
| 768
|}

=== Europe ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOP (484e4f50)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBP (484e4250)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFP (484e4650)
| [[Nintendo DSi Shop]]
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

=== Australia and New Zealand ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOU (484e4f55)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBU (484e4255)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFU (484e4655)
| [[Nintendo DSi Shop]]
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

===China===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOC (484e4f43){{check}}
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| not available yet in china?
| not available yet in china?
|-
| HNFC (484e4643)
| [[Nintendo DSi Shop]]
| 1792, 2048, 2304, 2560, 2816, 3072
| 1792, 2048, 2304, 2560, 2816, 3072
|-
| HNBC (484e4243)
| [[System Settings]]
| 768
| 768
|}

== 00030017 (System Menu) ==
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNAC (484e4143)
| [[System Menu]] (China)
| 768, 1024, 1280, 1536, 1792
| 768, 1024, 1280, 1536, 1792
|-
| HNAE (484e4145)
| System Menu (United States)
| 512, 768, 1024, 1280, 1536, 1792
| 512, 768, 1024, 1280, 1536, 1792
|-
| HNAJ (484e414a)
| System Menu (Japan)
| 256, 512, 768, 1024, 1280, 1536, 1792
| 256, 512, 768, 1024, 1280, 1536, 1792
|-
| HNAK (484e414b)
| System Menu (Korea)
| 768, 1024, 1280, 1536, 1792
| 768, 1024, 1280, 1536, 1792
|-
| HNAP (484e4150)
| System Menu (Europe)
| 512, 768, 1024, 1280, 1536, 1792
| 512, 768, 1024, 1280, 1536, 1792
|-
| HNAU (484e4155)
| System Menu (Australia and New Zealand)
| 512, 768, 1024, 1280, 1536, 1792
| 512, 768, 1024, 1280, 1536, 1792
|}

== See also ==

* [[Title metadata|Title metadata (TMD)]]
* [http://wiibrew.org/wiki/NUS_Downloader NUS Downloader info]
* [http://code.google.com/p/nusdownloader/ NUS Downloader source/binary]
* [[NUS Downloader/database]]
* [[Nintendo DSi Shop]]
* [[Nintendo Software]]
* [[System Menu]]
* [[Nintendo CDN Files]]

ARM9 OS

2022-10-09T18:47:07Z

Hallowizer: /* Threads */ kernelSp is a system stack used for thread cleanup and SVCs

The ARM9 SDK contains an OS library that handles various functions. It does not have many debugging strings, so most names listed on this page are taken from the [https://wiibrew.org/wiki/Revolution_OS Wii].

== Threads ==
The scheduler only runs the thread with the highest priority, and does not switch between threads if two threads have the same priority. Because of this, rescheduling only happens when a thread-related function is called and the thread with the highest priority can no longer run.
<pre>
struct OSMathContext {
u64 REG_DIV_NUMER; // 0x0
u64 REG_DIV_DENOM; // 0x8
u64 SQRT_PARAM; // 0x10
u16 REG_DIVCNT; // 0x18
u16 REG_SQRTCNT; // 0x1a
}

struct OSContext {
u32 psr; // 0x0
u32 r0; // 0x4
u32 r1; // 0x8
u32 r2; // 0xc
u32 r3; // 0x10
u32 r4; // 0x14
u32 r5; // 0x18
u32 r6; // 0x1c
u32 r7; // 0x20
u32 r8; // 0x24
u32 r9; // 0x28
u32 r10; // 0x2c
u32 r11; // 0x30
u32 r12; // 0x34
void *sp; // 0x38
void *lr; // 0x3c
void *pc; // 0x40
void *systemStack; // 0x44
struct OSMathContext math; // 0x48
}

struct OSThread {
struct OSContext ctx; // 0x0
u32 state; // 0x64
struct OSThread *nextRunning; // 0x68
u32 threadId; // 0x6c
u32 priority; // 0x70
u32 unknown; // 0x74
struct OSThreadQueue *queue; // 0x78
struct OSThreadLink linkQueue; // 0x7c
struct OSMutex *mutex; // 0x84 - set to the mutex the thread is currently trying to lock
struct OSMutexQueue queueMutex; // 0x88
void *stackLo; // 0x90
void *stackHi; // 0x94
void *unknown2; // 0x98
struct OSThreadQueue queueJoin; // 0x9c
u32 unknown3[3]; // 0xa4
struct OSAlarm *timedSleepAlarm; // 0xb0
void (*cleanupFunc)(u32 res); // 0xb4
u32 unknown4[2];
}

struct OSThreadQueue {
struct OSThread *head;
struct OSThread *tail;
}

struct OSThreadLink {
struct OSThread *prev;
struct OSThread *next;
}

struct OSMutex {
struct OSThreadQueue waitingQueue;
struct OSThread *holder;
u32 timesLocked;
struct OSMutex *next;
struct OSMutex *prev;
}

struct OSMutexQueue {
struct OSMutex *head;
struct OSMutex *tail;
}
</pre>

== Message queues ==
<pre>
struct OSMessageQueue {
struct OSThreadQueue waitForReceive;
struct OSThreadQueue waitForSend;
u32 *buf;
u32 capacity;
u32 rotation;
u32 messagesEnqueued;
}
</pre>

== Memory allocation ==
3 types of heaps exist: EXPH (exponential heap), FRMH (frame heap), and UNTH (unit heap).

== Time ==
Timer 0 is used to keep track of global time by manually incrementing a global, while timer 1 is used to generate an interrupt for alarms. The OS orders the alarms by alert time, so that it only needs to keep track of the frontmost alarm.

<pre>
struct OSAlarm {
void (*handler)(void *userData);
void *userData;
u32 unknown;
u64 alertTime;
struct OSAlarm *prev;
struct OSAlarm *next;
u64 repeatInterval; // 0 for non-repeating alarms
u64 repeatStart; // undefined value for non-repeating alarms
}

struct OSAlarmQueue {
u32 unknown;
struct OSAlarm *head;
struct OSAlarm *tail;
}
</pre>

== Interrupts ==
The interrupt handler called by the [[ARM9 BIOS]] calls a handler in a table mapping the raw IRQ IDs to handlers. Each handler is either a no-op (not listed in the table below) or a stub that calls <code>__OSDispatchInterrupt</code> with an OS interrupt ID. <code>__OSDispatchInterrupt</code> then calls the handler registered with <code>__OSSetInterruptHandler</code>.

{| class="wikitable sortable"
! Hardware ID
! Translated ID
! Name
|-
| 3
| 8
| Timer 0 overflow
|-
| 4
| 9
| Timer 1 overflow
|-
| 5
| 10
| Timer 2 overflow
|-
| 6
| 11
| Timer 3 overflow
|-
| 8
| 0
| DMA 0
|-
| 9
| 1
| DMA 1
|-
| 10
| 2
| DMA 2
|-
| 11
| 3
| DMA 3
|-
| 28
| 4
| New DMA 0
|-
| 29
| 5
| New DMA 1
|-
| 30
| 6
| New DMA 2
|-
| 31
| 7
| New DMA 3
|}

ARM9 OS

2022-10-09T00:45:26Z

Hallowizer: /* Threads */ updated unknown fields

The ARM9 SDK contains an OS library that handles various functions. It does not have many debugging strings, so most names listed on this page are taken from the [https://wiibrew.org/wiki/Revolution_OS Wii].

== Threads ==
The scheduler only runs the thread with the highest priority, and does not switch between threads if two threads have the same priority. Because of this, rescheduling only happens when a thread-related function is called and the thread with the highest priority can no longer run.
<pre>
struct OSMathContext {
u64 REG_DIV_NUMER; // 0x0
u64 REG_DIV_DENOM; // 0x8
u64 SQRT_PARAM; // 0x10
u16 REG_DIVCNT; // 0x18
u16 REG_SQRTCNT; // 0x1a
}

struct OSContext {
u32 psr; // 0x0
u32 r0; // 0x4
u32 r1; // 0x8
u32 r2; // 0xc
u32 r3; // 0x10
u32 r4; // 0x14
u32 r5; // 0x18
u32 r6; // 0x1c
u32 r7; // 0x20
u32 r8; // 0x24
u32 r9; // 0x28
u32 r10; // 0x2c
u32 r11; // 0x30
u32 r12; // 0x34
void *sp; // 0x38
void *lr; // 0x3c
void *pc; // 0x40
void *kernelSp; // 0x44
struct OSMathContext math; // 0x48
}

struct OSThread {
struct OSContext ctx; // 0x0
u32 state; // 0x64
struct OSThread *nextRunning; // 0x68
u32 threadId; // 0x6c
u32 priority; // 0x70
u32 unknown; // 0x74
struct OSThreadQueue *queue; // 0x78
struct OSThreadLink linkQueue; // 0x7c
struct OSMutex *mutex; // 0x84 - set to the mutex the thread is currently trying to lock
struct OSMutexQueue queueMutex; // 0x88
void *stackLo; // 0x90
void *stackHi; // 0x94
void *unknown2; // 0x98
struct OSThreadQueue queueJoin; // 0x9c
u32 unknown3[3]; // 0xa4
struct OSAlarm *timedSleepAlarm; // 0xb0
void (*cleanupFunc)(u32 res); // 0xb4
u32 unknown4[2];
}

struct OSThreadQueue {
struct OSThread *head;
struct OSThread *tail;
}

struct OSThreadLink {
struct OSThread *prev;
struct OSThread *next;
}

struct OSMutex {
struct OSThreadQueue waitingQueue;
struct OSThread *holder;
u32 timesLocked;
struct OSMutex *next;
struct OSMutex *prev;
}

struct OSMutexQueue {
struct OSMutex *head;
struct OSMutex *tail;
}
</pre>

== Message queues ==
<pre>
struct OSMessageQueue {
struct OSThreadQueue waitForReceive;
struct OSThreadQueue waitForSend;
u32 *buf;
u32 capacity;
u32 rotation;
u32 messagesEnqueued;
}
</pre>

== Memory allocation ==
3 types of heaps exist: EXPH (exponential heap), FRMH (frame heap), and UNTH (unit heap).

== Time ==
Timer 0 is used to keep track of global time by manually incrementing a global, while timer 1 is used to generate an interrupt for alarms. The OS orders the alarms by alert time, so that it only needs to keep track of the frontmost alarm.

<pre>
struct OSAlarm {
void (*handler)(void *userData);
void *userData;
u32 unknown;
u64 alertTime;
struct OSAlarm *prev;
struct OSAlarm *next;
u64 repeatInterval; // 0 for non-repeating alarms
u64 repeatStart; // undefined value for non-repeating alarms
}

struct OSAlarmQueue {
u32 unknown;
struct OSAlarm *head;
struct OSAlarm *tail;
}
</pre>

== Interrupts ==
The interrupt handler called by the [[ARM9 BIOS]] calls a handler in a table mapping the raw IRQ IDs to handlers. Each handler is either a no-op (not listed in the table below) or a stub that calls <code>__OSDispatchInterrupt</code> with an OS interrupt ID. <code>__OSDispatchInterrupt</code> then calls the handler registered with <code>__OSSetInterruptHandler</code>.

{| class="wikitable sortable"
! Hardware ID
! Translated ID
! Name
|-
| 3
| 8
| Timer 0 overflow
|-
| 4
| 9
| Timer 1 overflow
|-
| 5
| 10
| Timer 2 overflow
|-
| 6
| 11
| Timer 3 overflow
|-
| 8
| 0
| DMA 0
|-
| 9
| 1
| DMA 1
|-
| 10
| 2
| DMA 2
|-
| 11
| 3
| DMA 3
|-
| 28
| 4
| New DMA 0
|-
| 29
| 5
| New DMA 1
|-
| 30
| 6
| New DMA 2
|-
| 31
| 7
| New DMA 3
|}

ARM9 SWI Functions

2022-10-07T02:43:21Z

Hallowizer: added SVC_SHA1GetHash from comparing IOSC code

These are the functions provided by the [[ARM9 BIOS]]. Names starting with <code>SVC_</code> are official, while others are guesses.

{| class="wikitable"
|-
! ID
! Name/Prototype
! Args
! Changes
|-
| 0x00
| N/A (hangs)
| none
| '''formerly SoftReset'''
|-
| 0x01
| swiDecompressLZSSwithCallbackWrite8bitUnits
| ??
| '''formerly jump to 0'''
|-
| 0x02
| swiDecompressLZSSwithCallbackWrite16bitUnits
| ??
| '''formerly jump to 0'''
|-
| 0x03
| swiWaitByLoop
| ??
| same as DS
|-
| 0x04
| swiIntrWait
| ??
| same as DS (but bugged? see note)
|-
| 0x05
| swiVBlankIntrWait
| ??
| same as DS (but bugged? see note)
|-
| 0x06
| swiHalt
| ??
| same as DS
|-
| 0x07-0x08
| N/A (hangs)
| ??
| same as DS / formerly jump to 0
|-
| 0x09
| swiDivide
| ??
| same as DS
|-
| 0x0A
| N/A (hangs)
| ??
| same as DS / formerly jump to 0
|-
| 0x0B
| swiCopy
| ??
| same as DS
|-
| 0x0C
| swiFastCopy
| ??
| same as DS
|-
| 0x0D
| swiSqrt
| ??
| same as DS
|-
| 0x0E
| swiCRC16
| ??
| same as DS
|-
| 0x0F
| N/A (hangs)
| ??
| '''formerly IsDebugger'''
|-
| 0x10
| swiUnpackBits
| ??
| same as DS
|-
| 0x11
| swiDecompressLZSSWram
| ??
| same as DS
|-
| 0x12
| N/A (ignored)
| ??
| '''(formerly swiDecompressLZSSVram)'''
|-
| 0x13
| swiDecompressHuffmanWithCallbackWrite32bitUnits
| ??
| same as DS
|-
| 0x14
| swiDecompressRLEWram
| ??
| same as DS
|-
| 0x15
| swiDecompressRLEwithCallbackWrite16bitUnits
| ??
| same as DS
|-
| 0x16
| swiDecodeDelta8
| ??
| same as DS
|-
| 0x17
| N/A (hangs)
| ??
| same as DS / formerly jump to 0
|-
| 0x18
| swiDecodeDelta16
| ??
| same as DS
|-
| 0x19
| swiDecompressLZSSwithCallbackWrite16bitUnits
| ??
| same as SWI 0x02 / formerly jump to 0
|-
| 0x1A-0x1E
| N/A (hangs)
| ??
| same as DS / formerly jump to 0
|-
| 0x1F
| swiCustomPost
| ??
| same as DS
|-
| 0x20
| swiInit_crypto_heap(Heap *heap, void *base, u32 len);
| ??
| '''new'''
|-
| 0x21
| swiRSA_decrypt
| ??
| '''new'''
|-
| 0x22
| swiRSA_decrypt_signature
| ??
| '''new'''
|-
| 0x23
| swiRSA_decrypt_der
| ??
| '''new'''
|-
| 0x24
| SVC_SHA1Init(SVCSHA1Context *ctx)
| ??
| '''new'''
|-
| 0x25
| SVC_SHA1Update(SVCSHA1Context* ctx, const u8 *buf, u32 len)
| ??
| '''new'''
|-
| 0x26
| SVC_SHA1GetHash(SVCSHA1Context *ctx, u8 *hash)
| ??
| '''new'''
|-
| 0x27
| swiSHA1
| ??
| '''new'''
|-
| 0x28
| swiSHA1_Compare
| ??
| '''new'''
|-
| 0x29
| swiSHA1_Random
| looks like it's trying to generate a random number using SHA1
| '''new'''
|-
| 0x2A
| N/A (hangs)
| ??
| formerly jump to garbage
|-
| 0x2B
| N/A (ignored)
| ??
| formerly jump to garbage
|-
| 0x2C-0x3F
| N/A (hangs)
| ??
| formerly jump to garbage
|-
| 0x40-0xFF
| Mirrors of 0x00-0x3F
| ??
| formerly jump to garbage
|}

The two ignored function do return without doing anything (they are rejected before calling the SWI function table). The other unused functions do hang in an endless loop.

'''Note:''' swiHalt does correctly use CP15 to halt the ARM9 processor. But, swiVBlankIntrWait and swiIntrWait do use port 0x4000301 (which would be correct on ARM7, unknown if the same mechanism is actually supported on ARM9, if it isn't supported then the functions would more or less behave as desired - wait for IRQ flags to get set - but without actually switching the CPU into low-power mode).

== See Also ==

* [[ARM7 BIOS]]

1.4

2022-10-04T17:42:59Z

Hallowizer: /* Changelog */ clarify the flash cart blocking

System Menu 1.4 was released on 29 July 2009 in Japan, 30 July 2009 in Europe and in Australia, and 3 August 2009 in the United States.

== Changelog ==
* Facebook image upload support in "Nintendo DSi Camera" application. You can now upload selected photos to a Facebook picture album entitled "Photos from Nintendo DSi."
* New version of [[Nintendo DSi Browser]] (Opera 9.50/'''507''')
* Added the NDHI section to [[Nintendo DS Cart Whitelist]], which specifies specific regions to verify
** All flashcards blocked. Some flashcarts have been re-enabled via a firmware update for the flashcart.

== Note ==

If you do not update, you can't access the [[Nintendo DSi Shop|DSi Shop]].

Although Nintendo has released a new update in February 2010, [[Version Data|verdata]] still displays as 1.4. This update is optional and upgrades the Nintendo Zone Viewer to version 3.0. Also,when a photo is uploaded to Facebook, it displays "Uploaded from Nintendo DSi" instead of "Uploaded from Facebook Mobile". You can still access the [[Nintendo DSi Shop]] if you don't update to the Feb 2010 update.

== See also ==

* [[System Menu]]
* [[Nintendo Software]]

{{System Menu Navigation}}

Title database

2022-10-04T17:40:42Z

Hallowizer: /* 0003000f (Non-executable datafiles) */ description of the reference to the alternative whitelist

The Nintendo DSi uses the same title scheme and introduces separate DSi update servers; Also introduced was a new common-key for DSi title decryption.

As with the Wii, the [[title metadata]] aka "TMD" for these titles can be found on the Nintendo Update Servers.

Each title specific url uses a 4 ASCII character code denoting what type of title it is and what region it comes from.

Titles can be downloaded and decrypted with [http://wiibrew.org/wiki/NUS_Downloader NUS Downloader], a program that allows titles to be fetched from the Nintendo Update Servers.

== Title codes ==

=== Region Codes ===

Region codes are used to determine what region a title belongs to. They are at the end of a Title ID. Eg. XXXA, XXXJ

{| class="wikitable sortable" width="55%"
|-
! ASCII
! HEX
! Region
|-
| A
| 41
| Region Independent
|-
| C
| 43
| China
|-
| D
| 44
| Germany
|-
| E
| 45
| North America
|-
| F
| 46
| France
|-
| H
| 48
| Belgium / Netherlands (DSiWare Only)
|-
| I
| 49
| Italy
|-
| J
| 4A
| Japan
|-
| K
| 4B
| Korea
|-
| O
| 4F
| USA and Europe
|-
| P
| 50
| Europe (these are usually used for Australia / New Zealand too)
|-
| S
| 53
| Spain
|-
| T
| 54
| USA and Australia
|-
| U
| 55
| Australia / New Zealand
|-
| V
| 56
| Europe and Australia
|-
| X
| 58
| Multilanguage European Region
|}

=== System Codes ===

System codes are used to determine what type of title it is. They are at the beginning of a Title ID. Eg. KXXX. HXXX

{| class="wikitable sortable" width="50%"
|-
! ASCII
! HEX
! Type
|-
| K
| 4B
| DSiWare Title
|-
| H
| 48
| System \ Channel
|}

== 00030004 (DSiWare) ==

DSiWare is an online service available on the [[Nintendo DSi Shop]] to download DSi applications.

==== Europe ====

The official list of DSi Ware Europe titles is located on [http://www.nintendo.co.uk/NOE/en_GB/games/nintendo_dsiware_11805.html the Nintendo Europe website -- (broken link)]. An inofficial list is at [http://en.wikipedia.org/wiki/List_of_DSiWare_games_(PAL_region) wikipedia].

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Name
! Price
|-
| Application
| HNGP (484e4750)
| [[Nintendo DSi Browser]]
| 0 Nintendo Points
|-
| Game
| KNRV (4B4E5256)
| A Little Bit of... Brain Training™: Maths Edition
| 800 Nintendo Points
|-
| Game
| KD9V (4B443956)
| A Little Bit of... Dr. Mario™
| 500 Nintendo Points
|-
| Game
| KM9P (4B4D3950)
| A Little Bit of... Magic Made Fun™: Deep Psyche
| 200 Nintendo Points
|-
| Game
| KMFP (4B4D4650)
| A Little Bit of... Magic Made Fun™: Funny Face
| 200 Nintendo Points
|-
| Game
| KMSP (4B4D5350)
| A Little Bit of... Magic Made Fun™: Shuffle Games
| 200 Nintendo Points
|-
| Application
| KWGV (4B574756)
| [[Nintendo DSi Calculator|Animal Crossing Calculator]]
| 200 Nintendo Points
|-
| Application
| KWCV (4B574356)
| [[Nintendo DSi Clock|Animal Crossing Clock]]
| 200 Nintendo Points
|-
| Game
| KAAV (4B414156)
| Art Style: AQUITE
| 500 Nintendo Points
|-
| Game
| KADV (4B414456)
| Art Style: CODE
| 500 Nintendo Points
|-
| Application
| KGUV (4B475556)
| Flipnote Studio
| 0 Nintendo Points
|-
| Game
| KAKV (4B414B56)
| Art Style: KuBos
| 500 Nintendo Points
|-
| Game
| KASV (4B415356)
| Art Style: NEMREM
| 500 Nintendo Points
|-
| Game
| KAPV (4B415056)
| Art Style: PiCOPiCT
| 500 Nintendo Points
|-
| Game
| KA4V (4B413456)
| Asphalt 4: Elite Racing
| 800 Nintendo Points
|-
| Game
| KGRV (4B475256)
| Guitar Rock Tour
| 500 Nintendo Points
|-
| Game
| KLEV (4B4C4556)
| Legends of Exidia
| 800 Nintendo Points
|-
| Game
| KMMV (4B4D4D56)
| Mixed Message
| 500 Nintendo Points
|-
| Game
| KAMV (4B414D56)
| Paper Plane
| 200 Nintendo Points
|-
| Game
| KPOV (4B504F56)
| Pop Superstar!: Road to Celebrity
| 800 Nintendo Points
|-
| Game
| KP6V (4B503656)
| Pyoro
| 200 Nintendo Points
|-
| Game
| KS9V (4B533956)
| Real Football 2009
| 800 Nintendo Points
|-
| Game
| K4DV (4B344456)
| Sudoku
| 200 Nintendo Points
|-
| Game
| KSMV (4B534D56)
| SUDOKU 150! For Challengers
| 500 Nintendo Points
|-
| Game
| KUWV (4B555756)
| WarioWare: Snapped!
| 500 Nintendo Points
|}

==== Japan ====

The official list of DSi Ware Japan titles is located on [http://www.nintendo.co.jp/ds/dsiware/titlelist.html the Nintendo japanese website]. An inofficial list is at [http://ja.wikipedia.org/wiki/ニンテンドーDSiウェアのタイトル一覧 wikipedia] (in japanese).

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Name
! Price
|-
| Application
| HNGJ (484e474a)
| [[Nintendo DSi Browser]]
| 0 Nintendo Points
|-
| Game
| KMSJ (4B4D534A)
| 3-tsu no Shuffle Game
| 200 Nintendo Points
|-
| Game
| KAAJ (4B41414A)
| Art Style: AQUARIO
| 500 Nintendo Points
|-
| Game
| KADJ (4B41444A)
| Art Style: DECODE
| 500 Nintendo Points
|-
| Game
| KAPJ (4B41504A)
| Art Style: PICOPICT
| 500 Nintendo Points
|-
| Game
| KASJ (4B41534A)
| Art Style: SOMNIUM
| 500 Nintendo Points
|-
| Game
| KTPJ (4B54504A)
| Asobi Taizen
| 500 Nintendo Points
|-
| Game
| KNRJ (4B4E524A)
| Brain Training - Science version
| 800 Nintendo Points
|-
| Game
| KD9J (4B44394A)
| A Little Bit of... Dr. Mario™
| 500 Nintendo Points
|-
| Application
| KDGJ (4B44474A)
| Dokodemo [http://en.wikipedia.org/wiki/Wii_no_Ma Wiinoma]
| 0 Nintendo Points
|-
| Game
| KMFJ (4B4D464A)
| A Little Bit of... Magic Made Fun™: Funny Face
| 200 Nintendo Points
|-
| Game
| KAMJ (4B414D4A)
| Kami Hikouki
| 200 Nintendo Points
|-
| Game
| KLEJ (4B4C454A)
| Legends of Exidia
| 800 Nintendo Points
|-
| Game
| KMMJ (4B4D4D4A)
| Mixed Message
| 500 Nintendo Points
|-
| Game
| KM9J (4B4D394A)
| Osoroshii Suuji
| 200 Nintendo Points
|-
| Game
| KP6J (4B50364A)
| Tori to Mame
| 200 Nintendo Points
|-
| Game
| KGUJ (4B47554A)
| Ugoku Memo Chou (Flipnote Studio)
| 0 Nintendo Points
|-
| Game
| KUWJ (4B55574A)
| Utsutsu! Made in Wario
| 500 Nintendo Points
|-
|}

==== United States ====

The official list of DSi Ware US titles is located on [http://www.nintendo.com/games/guide#qhardware=DS&qesrbRating=&qplay=dsiware&qgenre=&qrelease=&panel=qplay the Nintendo US website]. An inofficial list is at [http://en.wikipedia.org/wiki/List_of_DSiWare_games_(North_America) wikipedia].

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Name
! Price
|-
| Application
| HNGE (484e4745)
| [[Nintendo DSi Browser]]
| 0 Nintendo Points
|-
| Application
| K2DE (4B324445)
| Nintendo DSi + Internet
| N/A
|-
| Game
| KM9E (4B4D3945)
| A Little Bit of... Magic Made Fun™: Deep Psyche
| 200 Nintendo Points
|-
| Game
| KMFE (4B4D4645)
| A Little Bit of... Magic Made Fun™: Funny Face
| 200 Nintendo Points
|-
| Game
| KMSE (4B4D5345)
| A Little Bit of... Magic Made Fun™: Shuffle Games
| 200 Nintendo Points
|-
| Game
| KAAE (4B414145)
| Art Style: AQUIA
| 500 Nintendo Points
|-
| Game
| KP6E (4B503645)
| Bird & Beans
| 200 Nintendo Points
|-
| Game
| KD9E (4B443945)
| Dr. Mario Express
| 500 Nintendo Points
|-
| Application
| KGUE (4B475545)
| Flipnote Studio
| 0 Nintendo Points
|-
| Game
| KGRE (4B475245)
| Guitar Rock Tour
| 500 Nintendo Points
|-
| Game
| KLEE (4B4C4545)
| Legends of Exidia
| 800 Nintendo Points
|-
| Application
| KWBE (4B574245)
| Mario Calculator
| 200 Nintendo Points
|-
| Application
| KWFE (4B574645)
| Mario Clock
| 200 Nintendo Points
|-
| Game
| KDME (4B444D45)
| Mario vs. Donkey Kong: Minis March Again!
| 800 Nintendo Points
|-
| Game
| KMME (4B4D4D45)
| Mixed Message
| 500 Nintendo Points
|-
| Game
| KAME (4B414D45)
| Paper Airplane Chase
| 200 Nintendo Points
|-
| Game
| KPBE (4B504245)
| Photo Dojo
| 200 Nintendo Points
|-
| Game
| KS9E (4B533945)
| Real Football 2009
| 800 Nintendo Points
|-
| Game
| K4DE (4B344445)
| Sudoku
| 200 Nintendo Points
|-
| Game
| KUWE (4B555745)
| WarioWare: Snapped!
| 500 Nintendo Points
|}

==== Australia and New Zealand ====

An inofficial list is at [http://en.wikipedia.org/wiki/List_of_DSiWare_games_(PAL_region) wikipedia] (with separate columns for Europe and Australia).

Many titles are released simultaneously for both Europe and Australia (particulary those with "V" as last gamecode character). Some titles are released separately (or exclusively) for Europe and/or Australia (last gamecode character "P" for Europe, and "U" for Australia).

==== China ====

The official list of iQue DSi Ware titles is located on [https://www.ique.com/DSi/ the iQue DSi website].

{| class="wikitable sortable" width="100%"
|-
! Type
! Title ID
! Chinese name
! Intl' name or English translation
! Price
|-
| Game
| KDOC (4B444F43)
| 任天狗狗
| Nintendogs
| Bundled with every iQue DSi
|-
| Game
| KAMC (4B414D43)
| 纸飞机挑战
| Paper Airplane Chase
| 200 iQue Points
|-
| Game
| KP6C (4B503643)
| 鸟和豆
| Bird and Beans
| 200 iQue Points
|-
| Application
| KWDC (4B574443)
| iQue DSi时钟　相架款
| Photo Clock
| 200 iQue Points
|-
| Application
| KWCC (4B574343)
| iQue DSi时钟　动物森林款
| Animal Crossing Clock
| 200 iQue Points
|-
| Application
| KWBC (4B574243)
| iQue DSi时钟　红白机马力欧款
| Mario Clock
| 200 iQue Points
|-
| Application
| KWGC (4B574743)
| iQue DSi计算器　动物森林款
| Animal Crossing Calculator
| 200 iQue Points
|-
| Game
| KUWC (4B555743)
| 照照瓦力欧制造
| WarioWare: Snapped!
| 500 iQue Points
|-
| Game
| KD9C (4B443943)
| 一下下马力欧医生
| Dr. Mario Express
| 500 iQue Points
|-
| Application
| KHDC (4B484443)
| 趣拍拍☆炫靓俏饰秀
| Sparkle Snapshots
| 500 iQue Points
|-
| Game
| KSLC (4B534C43)
| 纸牌DSi
| Touch Solitare
| 200 iQue Points
|-
| Game
| K59C (4B353943)
| 啊啊无情刹那
| Metal Torrent
| 500 iQue Points
|-
| Game
| KGBC (4B474243)
| GAME & WATCH 抛接球
| Game & Watch Ball
| 200 iQue Points
|-
| Game
| KGHC (4B474843)
| GAME&WATCH 安全帽
| Game & Watch Helmet
| 200 iQue Points
|-
| Game
| KGDC (4B474443)
| GAME & WATCH 森乐刚
| Game & Watch Donkey Kong
| 200 iQue Points
|-
| Game
| KTBC (4B544243)
| 一下下名游大全经典重温
| Clubhouse Games Express: Strategy Pack
| 500 iQue Points
|-
| Game
| KTPC (4B545043)
| 一下下名游大全轻松休闲
| Clubhouse Games Express: Family Favorites
| 500 iQue Points
|-
| Game
| KGJC (4B474A43)
| GAME & WATCH 审判
| Game & Watch: Judge
| 200 iQue Points
|-
| Game
| KGMC (4B474D43)
| GAME & WATCH 人孔
| Game & Watch: Manhole
| 200 iQue Points
|}

==== Korea ====

Unknown.

== 00030005 (Builtin apps) ==
=== All regions ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNDA (484e4441)
| DS Download Play
| 256
| 256
|-
| HNEA (484e4541)
| Pictochat
| 0
| Not Available
|}

=== United States ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIE (484e4945)
| [[Nintendo DSi Camera]]
| 768, 1024
| 768, 1024
|-
| HNJE (484e4a45)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKE (484e4b45)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

=== Japan ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIJ (484e494a)
| [[Nintendo DSi Camera]]
| 256, 768, 1024
| 256, 768, 1024
|-
| HNJJ (484e4a4a)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKJ (484e4b4a)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

=== Europe ===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIP (484e4950)
| [[Nintendo DSi Camera]]
| 768, 1024
| 768, 1024
|-
| HNJP (484e4a50)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKP (484e4b50)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

===Australia and New Zealand===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNIU (484e4955)
| [[Nintendo DSi Camera]]
| 768, 1024
| 768, 1024
|-
| HNJU (484e4a55)
| [[Nintendo Zone]]
| 512, 768
| 512, 768
|-
| HNKU (484e4b55)
| [[Nintendo DSi Sound]]
| 256, 512
| 256, 512
|}

== 0003000f (Non-executable datafiles) ==
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNCA (484e4341)
| [[WiFi Firmware]]
| 256, 512
| 256, 512
|-
| HNGA (484e4741)
| Alternative DS Cart Whitelist (used by System Menu if the hardcoded main whitelist title ID is 0)
| Not Available
| Not Available
|-
| HNHA (484e4841)
| [[Nintendo DS Cart Whitelist]]
| 256, 512, 768, 1024, 1280, 1536
| 256, 512, 768, 1024, 1280, 1536
|-
| HNLC (484e4c43)
| [[Version Data]] (China)
| 4, 5, 6, 7, 8, 9
| 4, 5, 6, 7, 8, 9
|-
| HNLE (484e4c45)
| Version Data (United States)
| 3, 4, 5, 6, 7, 8, 9
| 3, 4, 5, 6, 7, 8, 9
|-
| HNLJ (484e4c4a)
| Version Data (Japan)
| 1, 2, 3, 4, 5, 6, 7, 8, 9
| 1, 2, 3, 4, 5, 6, 7, 8, 9
|-
| HNLK (484e4c4b)
| Version Data (Korea)
| 5, 6, 7, 8, 9
| 5, 6, 7, 8, 9
|-
| HNLP (484e4c50)
| Version Data (Europe)
| 3, 4, 5, 6, 7, 8, 9
| 3, 4, 5, 6, 7, 8, 9
|-
| HNLU (484e4c55)
| Version Data (Australia and New Zealand)
| 3, 4, 5, 6, 7, 8, 9
| 3, 4, 5, 6, 7, 8, 9
|}

== 00030015 (Title management) ==
=== United States ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOE (484e4f45)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBE (484e4245)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFE (484e4645)
| [[Nintendo DSi Shop]]
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

===Japan===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOJ (484e4f4a)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBJ (484e424a)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFJ (484e464a)
| [[Nintendo DSi Shop]]
| 1024, 1280, 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1024, 1280, 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

===Korea===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOK (484e4f5b)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 256
| 256
|-
| HNFK (484e464b)
| [[Nintendo DSi Shop]]
| 1792, 2048, 2304, 2560, 2816, 3072
| 1792, 2048, 2304, 2560, 2816, 3072
|-
| HNBK (484e424b)
| [[System Settings]]
| 768
| 768
|}

=== Europe ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOP (484e4f50)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBP (484e4250)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFP (484e4650)
| [[Nintendo DSi Shop]]
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

=== Australia and New Zealand ===
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOU (484e4f55)
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| 0
| 0
|-
| HNBU (484e4255)
| [[System Settings]]
| 512, 768
| 512, 768
|-
| HNFU (484e4655)
| [[Nintendo DSi Shop]]
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
| 1536, 1792, 2048, 2304, 2560, 2816, 3072
|}

===China===
{| class="wikitable sortable" width="100%"
|-
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNOC (484e4f43){{check}}
| [http://www.nintendo.co.jp/ds/dsiware/hnoj/index.html Nintendo 3DS Transfer Tool]
| not available yet in china?
| not available yet in china?
|-
| HNFC (484e4643)
| [[Nintendo DSi Shop]]
| 1792, 2048, 2304, 2560, 2816, 3072
| 1792, 2048, 2304, 2560, 2816, 3072
|-
| HNBC (484e4243)
| [[System Settings]]
| 768
| 768
|}

== 00030017 (System Menu) ==
{| class="wikitable sortable" width="100%"
! Title ID
! Name
! Versions
! CDN Availability
|-
| HNAC (484e4143)
| [[System Menu]] (China)
| 768, 1024, 1280, 1536, 1792
| 768, 1024, 1280, 1536, 1792
|-
| HNAE (484e4145)
| System Menu (United States)
| 512, 768, 1024, 1280, 1536, 1792
| 512, 768, 1024, 1280, 1536, 1792
|-
| HNAJ (484e414a)
| System Menu (Japan)
| 256, 512, 768, 1024, 1280, 1536, 1792
| 256, 512, 768, 1024, 1280, 1536, 1792
|-
| HNAK (484e414b)
| System Menu (Korea)
| 768, 1024, 1280, 1536, 1792
| 768, 1024, 1280, 1536, 1792
|-
| HNAP (484e4150)
| System Menu (Europe)
| 512, 768, 1024, 1280, 1536, 1792
| 512, 768, 1024, 1280, 1536, 1792
|-
| HNAU (484e4155)
| System Menu (Australia and New Zealand)
| 512, 768, 1024, 1280, 1536, 1792
| 512, 768, 1024, 1280, 1536, 1792
|}

== See also ==

* [[Title metadata|Title metadata (TMD)]]
* [http://wiibrew.org/wiki/NUS_Downloader NUS Downloader info]
* [http://code.google.com/p/nusdownloader/ NUS Downloader source/binary]
* [[NUS Downloader/database]]
* [[Nintendo DSi Shop]]
* [[Nintendo Software]]
* [[System Menu]]
* [[Nintendo CDN Files]]

DSiBrew:Sandbox

2022-10-03T22:23:11Z

Hallowizer: Cleanup

This sandbox can be used for tests on your Wiki knowledge without editing other articles.

Sandbox

2022-10-03T22:22:49Z

Hallowizer: Hallowizer moved page Sandbox to DSiBrew:Sandbox: Not about the DSi

#REDIRECT [[DSiBrew:Sandbox]]

DSiBrew:Sandbox

2022-10-03T22:22:49Z

Hallowizer: Hallowizer moved page Sandbox to DSiBrew:Sandbox: Not about the DSi

This sandbox can be used for tests on your Wiki knowledge,without editing other articles.It can be also used for conversations about articles.-[[User:Teopless|Teopless]] 12:26, 18 October 2009 (UTC)

Filesystem driver

2022-10-02T03:03:59Z

Hallowizer: /* Structs */ more FS fields and fixed a pointer typo

The '''filesystem driver''' is a [[PXI]] service with a complex protocol.

== Structs ==
<pre>
typedef struct {
u32 name; // either a pointer to the name or the name itself if the name is 3 chars
Filesystem *next;
FILE *partialFileList;
OSThreadQueue unknownThreadQueue;
u32 flags;
// ...
} Filesystem;

typedef struct {
FILE *next;
u32 unknown;
Filesystem *fs;
u32 flags;
u32 unknown2;
u32 state;
OSThreadQueue unknownThreadQueue;
u32 unknown3[12];
} FILE;
</pre>

Filesystem driver

2022-10-02T02:58:57Z

Hallowizer: /* Structs */ added the unknown thread queue to FILE

The '''filesystem driver''' is a [[PXI]] service with a complex protocol.

== Structs ==
<pre>
typedef struct {
u32 name; // either a pointer to the name or the name itself if the name is 3 chars
Filesystem *next;
FILE *partialFileList;
// ...
} Filesystem;

typedef struct {
FILE *next;
u32 unknown;
Filesystem *fs;
u32 flags;
u32 unknown2;
u32 state;
OSThreadQueue *unknownThreadQueue;
u32 unknown3[12];
} FILE;
</pre>

Filesystem driver

2022-10-02T02:56:42Z

Hallowizer: /* Structs */ added FILE linked list stuff

The '''filesystem driver''' is a [[PXI]] service with a complex protocol.

== Structs ==
<pre>
typedef struct {
u32 name; // either a pointer to the name or the name itself if the name is 3 chars
Filesystem *next;
FILE *partialFileList;
// ...
} Filesystem;

typedef struct {
FILE *next;
u32 unknown;
Filesystem *fs;
u32 flags;
u32 unknown2;
u32 state;
u32 unknown3[13];
} FILE;
</pre>

Filesystem driver

2022-10-02T02:35:08Z

Hallowizer: /* Structs */ added next pointer to Filesystem

The '''filesystem driver''' is a [[PXI]] service with a complex protocol.

== Structs ==
<pre>
typedef struct {
u32 name; // either a pointer to the name or the name itself if the name is 3 chars
Filesystem *next;
// ...
} Filesystem;

typedef struct {
u32 unknown[2];
Filesystem *fs;
u32 flags;
u32 unknown2;
u32 state;
u32 unknown3[13];
} FILE;
</pre>

Filesystem driver

2022-10-02T02:25:12Z

Hallowizer: Created page with "The '''filesystem driver''' is a PXI service with a complex protocol. == Structs == <pre> typedef struct { u32 name; // either a pointer to the name or the name itself i..."

The '''filesystem driver''' is a [[PXI]] service with a complex protocol.

== Structs ==
<pre>
typedef struct {
u32 name; // either a pointer to the name or the name itself if the name is 3 chars
// ...
} FileSystem;

typedef struct {
u32 unknown[2];
FileSystem *fs;
u32 flags;
u32 unknown2;
u32 state;
u32 unknown3[13];
} FILE;
</pre>

OS globals

2022-10-01T20:48:34Z

Hallowizer: added PXI service enable lists

The OS globals on the DSi are stored near the end of main memory.

{| class="wikitable"
! Address
! Size
! Description
|-
| 02ffd1fc
| ?
| Beginning of the struct used to specify a title to launch on reset.
|-
| 02ffd204
| 8
| Title ID to load on reset
|-
| 02ffd20c
| 4
| Bit struct passed to SYSMi_LoadTitle and SYSMi_AuthenticateTitle when loading the above title
|-
| 02ffd7b0
| 8
| Content ID string for [[Version Data|verdata]]
|-
| 02ffd7b9
| 1
| Region for verdata title ID
|-
| 02ffdfc0
| 64
| [[System Menu]] boot content path
|-
| 02fff0d4
| 64
| [[Boot content]] path for active title
|-
| 02fffc24
| 2
| [[ARM9]] boot sync counter
|-
| 02fffc26
| 2
| [[ARM7]] boot sync counter
|-
| 02ffff88
| 4
| Active ARM9 [[PXI]] services (1 bit per service)
|-
| 02ffff8c
| 4
| Active ARM7 PXI services (1 bit per service)
|}

OS globals

2022-09-30T23:14:52Z

Hallowizer: added system menu boot path

OS globals

2022-09-30T21:51:12Z

Hallowizer: added verdata globals

The OS globals on the DSi are stored near the end of main memory.

{| class="wikitable"
! Address
! Size
! Description
|-
| 02ffd1fc
| ?
| Beginning of the struct used to specify a title to launch on reset.
|-
| 02ffd204
| 8
| Title ID to load on reset
|-
| 02ffd20c
| 4
| Bit struct passed to SYSMi_LoadTitle and SYSMi_AuthenticateTitle when loading the above title
|-
| 02ffd7b0
| 8
| Content ID string for [[Version Data|verdata]]
|-
| 02ffd7b9
| 1
| Region for verdata title ID
|-
| 02fff0d4
| 64
| [[Boot content]] path for active title
|-
| 02fffc24
| 2
| [[ARM9]] boot sync counter
|-
| 02fffc26
| 2
| [[ARM7]] boot sync counter
|}

OS globals

2022-09-30T03:30:39Z

Hallowizer: added boot content path

System Menu

2022-09-30T02:00:17Z

Hallowizer: added autobooting paths

The '''System Menu''' ('''DSi Menu''') is software shipped pre-installed on every DSi which allows the launching of games from official Nintendo certified game carts, "channels", or DSiWare titles. It runs a GUI similar to the Wii's "Wii Menu". The DSi runs in permission modes similar to the Wii, where running in backwards compatibility mode turns off extra hardware and down-clocks the CPU.
Using the power button you can soft reset to return to the menu while in game (or in a DSi application), similar to the "Home Menu" on the Wii. Game carts can also be hot-swapped while in the menu.

Unlike on the Wii, where channels could return to the Wii Menu with ES_LaunchTitle(1-2), software never returns to the DSi Menu. Instead, the system reboots to [[boot0]], therefore reloading [[Unlaunch]].

== Autobooting paths ==
When the System Menu loads, it has 3 methods of automatically booting a [[title]] before it loads the main UI.

=== Reset launching ===
First, the System Menu checks if the title ID at [[OS globals|02ffd204]] is not 0-0, and boots that title if possible. This is presumably how apps like Photo Clock are able to launch titles.

=== Cart autoboot ===
This method is used when holding the key combination A/B/X/Y/R.{{check}} There are other checks in place before the autoboot is done.

=== Screen calibration ===
If the key combination START/L/R (not X/L/R) is held on boot, then the system boots to the [[System Settings]] screen to calibrate the touch screen.

OS globals

2022-09-30T01:52:13Z

Hallowizer: Created page with "The OS globals on the DSi are stored near the end of main memory. {| class="wikitable" ! Address ! Size ! Description |- | 02ffd1fc | ? | Beginning of the struct used to spec..."

Version Data

2022-09-29T01:05:36Z

Hallowizer: Fixed the title ID

'''verdata''' (0003000f-HNLx) is a bundle of data which corresponds to a [[system update]] -- every time Nintendo announces a new system update, they will update one or more other titles and then update this title. This prevents the common case of system updates that do not update the [[System Menu]] from resulting in no version number change, which happened on the Wii.

The first 0x80 bytes are probably a digital signature. This is followed by a NARC archive that contains the following files:

* twl-nup-cert.der - server cert for software update server
* twl-nup-prvkey.der - client-side private key for software update server
* twl-shop-cert.der - server cert for Shopping Channel server
* twl-shop-prvkey.der - client-side private key for Shopping Channel server
* NintendoCA-G2.der - Certificate Authority cert, used to sign the other certs
* eula_url.bin - URL to the EULA text for this system update, generally https://cfh.t.app.nintendowifi.net/eula/
* nup_host.bin - server to query for the next system update, generally nus.t.shop.nintendowifi.net:443
* time_stamp.bin - build date for this version, e.g. 00281108 (November 28, 2008)
* user_area_size.bin - e.g. 00000008
* version.bin - machine and human-readable version numbers for this version of the System Menu, e.g.
0000000: 01000300 31002e00 33004500 00000000 ....1...3.E.....
0000010: 00000000 00000000 00000000 00000000 ................
*bytes 0 and 1 are the major version number, bytes 2 and 3 are the minor version number, and the rest of the file is the human-readable UCS-2 version number displayed in the Settings menu as the "System Menu Version".

Other titles access this data by reading from e.g. "verdata:/version.bin".

Nintendo DS Cart Whitelist

2022-09-26T00:02:56Z

Hallowizer: /* NDHT entry */ hash1 is definitely something with the main binary

The '''Nintendo DS Cart Whitelist''' is a system title (HNHA / 0003000f484e4841) on DSi and 3DS TWL_MODE that contains a list of whitelisted DS carts. Other carts can be loaded if they have a valid RSA signature, which is how newer DS games load on DSi systems.

== Format ==
Newer versions of the file contain 3 sections: NDHT, NDHX, and NDHI. Older versions only contain NDHT.

=== Header ===
Each section starts with a 136 byte header.
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| Section type (NDHT, NDHX, NDHI)
|-
| 0x04
| 0x80
| RSA signature of the entire section below this point.
|-
| 0x84
| 4
| Number of entries
|}

=== NDHT entry ===
NDHT entries correspond to titles and are 48 bytes. The NDHT section is always first.

{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| ROM serial
|-
| 0x04
| 4
| ROM revision
|-
| 0x08
| 20
| hash1 (HMAC covering parts of the main binary)
|-
| 0x1C
| 20
| hash2 (overlay?)
|}

=== NDHT footer ===
The NDHT footer is 24 bytes.
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 24
| Unknown
|}

=== NDHX entry ===
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| ROM serial
|-
| 0x04
| 4
| ROM revision
|-
| 0x08
| 20
| hash3
|}

=== NDHI entry ===
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| ROM serial
|-
| 0x04
| 4
| ROM revision
|-
| 0x08
| 64
| 8 HMAC region struct

{| class="wikitable"
! Start
! Length
! Description
|-
| 0x0
| 4
| Unknown (offset?)
|-
| 0x4
| 4
| Unknown (length?)
|}

|-
| 0x48
| 20
| Expected HMAC
|}

Nintendo DS Cart Whitelist

2022-09-25T03:33:45Z

Hallowizer: /* NDHI entry */ clarified that there are 8 region structs

The '''Nintendo DS Cart Whitelist''' is a system title (HNHA / 0003000f484e4841) on DSi and 3DS TWL_MODE that contains a list of whitelisted DS carts. Other carts can be loaded if they have a valid RSA signature, which is how newer DS games load on DSi systems.

== Format ==
Newer versions of the file contain 3 sections: NDHT, NDHX, and NDHI. Older versions only contain NDHT.

=== Header ===
Each section starts with a 136 byte header.
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| Section type (NDHT, NDHX, NDHI)
|-
| 0x04
| 0x80
| RSA signature of the entire section below this point.
|-
| 0x84
| 4
| Number of entries
|}

=== NDHT entry ===
NDHT entries correspond to titles and are 48 bytes. The NDHT section is always first.

{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| ROM serial
|-
| 0x04
| 4
| ROM revision
|-
| 0x08
| 20
| hash1 (main binary?)
|-
| 0x1C
| 20
| hash2 (overlay?)
|}

=== NDHT footer ===
The NDHT footer is 24 bytes.
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 24
| Unknown
|}

=== NDHX entry ===
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| ROM serial
|-
| 0x04
| 4
| ROM revision
|-
| 0x08
| 20
| hash3
|}

=== NDHI entry ===
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| ROM serial
|-
| 0x04
| 4
| ROM revision
|-
| 0x08
| 64
| 8 HMAC region struct

{| class="wikitable"
! Start
! Length
! Description
|-
| 0x0
| 4
| Unknown (offset?)
|-
| 0x4
| 4
| Unknown (length?)
|}

|-
| 0x48
| 20
| Expected HMAC
|}

Nintendo DS Cart Whitelist

2022-09-25T03:33:15Z

Hallowizer: /* Format */ more info on NDHX and NDHI

The '''Nintendo DS Cart Whitelist''' is a system title (HNHA / 0003000f484e4841) on DSi and 3DS TWL_MODE that contains a list of whitelisted DS carts. Other carts can be loaded if they have a valid RSA signature, which is how newer DS games load on DSi systems.

== Format ==
Newer versions of the file contain 3 sections: NDHT, NDHX, and NDHI. Older versions only contain NDHT.

=== Header ===
Each section starts with a 136 byte header.
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| Section type (NDHT, NDHX, NDHI)
|-
| 0x04
| 0x80
| RSA signature of the entire section below this point.
|-
| 0x84
| 4
| Number of entries
|}

=== NDHT entry ===
NDHT entries correspond to titles and are 48 bytes. The NDHT section is always first.

{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| ROM serial
|-
| 0x04
| 4
| ROM revision
|-
| 0x08
| 20
| hash1 (main binary?)
|-
| 0x1C
| 20
| hash2 (overlay?)
|}

=== NDHT footer ===
The NDHT footer is 24 bytes.
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 24
| Unknown
|}

=== NDHX entry ===
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| ROM serial
|-
| 0x04
| 4
| ROM revision
|-
| 0x08
| 20
| hash3
|}

=== NDHI entry ===
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| ROM serial
|-
| 0x04
| 4
| ROM revision
|-
| 0x08
| 64
| HMAC region struct

{| class="wikitable"
! Start
! Length
! Description
|-
| 0x0
| 4
| Unknown (offset?)
|-
| 0x4
| 4
| Unknown (length?)
|}

|-
| 0x48
| 20
| Expected HMAC
|}

Nintendo DS Cart Whitelist

2022-09-25T01:45:24Z

Hallowizer: /* Basic File Structure */ added basic info on NDHX and NDHI

The '''Nintendo DS Cart Whitelist''' is a system title (HNHA / 0003000f484e4841) on DSi and 3DS TWL_MODE that contains a list of whitelisted DS carts. Other carts can be loaded if they have a valid RSA signature, which is how newer DS games load on DSi systems.

== Format ==
Newer versions of the file contain 3 sections: NDHT, NDHX, and NDHI. Older versions only contain NDHT.

=== Header ===
The header is 136 bytes.
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| Section type (NDHT, NDHX, NDHI)
|-
| 0x04
| 0x80
| RSA signature of the entire section below this point.
|-
| 0x84
| 4
| Number of entries
|}

=== NDHT entry ===
NDHT entries correspond to titles and are 48 bytes. The NDHT section is always first.

{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| ROM serial
|-
| 0x04
| 4
| ROM revision
|-
| 0x08
| 20
| The first SHA-1 sum
|-
| 0x1C
| 20
| The second SHA-1 sum
|}

=== NDHT footer ===
The NDHT footer is 24 bytes.
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 24
| Unknown
|}

=== NDHX entry ===
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 0x1c
| Unknown
|}

=== NDHI entry ===
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 0x5c
| Unknown
|}

Nintendo DS Cart Whitelist

2022-09-25T01:10:46Z

Hallowizer: /* Header Structure */ 0x04 is an RSA signature

The '''Nintendo DS Cart Whitelist''' is a system title (HNHA / 0003000f484e4841) on DSi and 3DS TWL_MODE that contains a list of whitelisted DS carts. Other carts can be loaded if they have a valid RSA signature, which is how newer DS games load on DSi systems.

== Basic File Structure ==
The file consists in one header, a list of titles and a footer. Note: this page only covers the initial versions of the whitelist. Later versions also have NDHX and NDHI sections and have footer differences.

=== Header Structure ===
The header is 136 bytes.
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| An ID (NDHT)
|-
| 0x04
| 0x80
| RSA signature of the entire NDHT section below this point.
|-
| 0x84
| 4
| Number of titles in NDHT section
|}

=== Title Structure ===
A title is 48 bytes.
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 4
| ROM serial
|-
| 0x04
| 4
| ROM revision
|-
| 0x08
| 20
| The first SHA-1 sum
|-
| 0x1C
| 20
| The second SHA-1 sum
|}

=== Footer Structure ===
The footer is 24 bytes.
{| class="wikitable"
|- style="background-color: #ddd;"
! Start
! Length
! Description
|-
| 0x00
| 24
| Unknown
|}

ARM9 SWI Functions

2022-09-25T00:56:14Z

Hallowizer: added known prototypes

These are the functions provided by the [[ARM9 BIOS]]. Names starting with <code>SVC_</code> are official, while others are guesses.

{| class="wikitable"
|-
! ID
! Name/Prototype
! Args
! Changes
|-
| 0x00
| N/A (hangs)
| none
| '''formerly SoftReset'''
|-
| 0x01
| swiDecompressLZSSwithCallbackWrite8bitUnits
| ??
| '''formerly jump to 0'''
|-
| 0x02
| swiDecompressLZSSwithCallbackWrite16bitUnits
| ??
| '''formerly jump to 0'''
|-
| 0x03
| swiWaitByLoop
| ??
| same as DS
|-
| 0x04
| swiIntrWait
| ??
| same as DS (but bugged? see note)
|-
| 0x05
| swiVBlankIntrWait
| ??
| same as DS (but bugged? see note)
|-
| 0x06
| swiHalt
| ??
| same as DS
|-
| 0x07-0x08
| N/A (hangs)
| ??
| same as DS / formerly jump to 0
|-
| 0x09
| swiDivide
| ??
| same as DS
|-
| 0x0A
| N/A (hangs)
| ??
| same as DS / formerly jump to 0
|-
| 0x0B
| swiCopy
| ??
| same as DS
|-
| 0x0C
| swiFastCopy
| ??
| same as DS
|-
| 0x0D
| swiSqrt
| ??
| same as DS
|-
| 0x0E
| swiCRC16
| ??
| same as DS
|-
| 0x0F
| N/A (hangs)
| ??
| '''formerly IsDebugger'''
|-
| 0x10
| swiUnpackBits
| ??
| same as DS
|-
| 0x11
| swiDecompressLZSSWram
| ??
| same as DS
|-
| 0x12
| N/A (ignored)
| ??
| '''(formerly swiDecompressLZSSVram)'''
|-
| 0x13
| swiDecompressHuffmanWithCallbackWrite32bitUnits
| ??
| same as DS
|-
| 0x14
| swiDecompressRLEWram
| ??
| same as DS
|-
| 0x15
| swiDecompressRLEwithCallbackWrite16bitUnits
| ??
| same as DS
|-
| 0x16
| swiDecodeDelta8
| ??
| same as DS
|-
| 0x17
| N/A (hangs)
| ??
| same as DS / formerly jump to 0
|-
| 0x18
| swiDecodeDelta16
| ??
| same as DS
|-
| 0x19
| swiDecompressLZSSwithCallbackWrite16bitUnits
| ??
| same as SWI 0x02 / formerly jump to 0
|-
| 0x1A-0x1E
| N/A (hangs)
| ??
| same as DS / formerly jump to 0
|-
| 0x1F
| swiCustomPost
| ??
| same as DS
|-
| 0x20
| swiInit_crypto_heap(Heap *heap, void *base, u32 len);
| ??
| '''new'''
|-
| 0x21
| swiRSA_decrypt
| ??
| '''new'''
|-
| 0x22
| swiRSA_decrypt_signature
| ??
| '''new'''
|-
| 0x23
| swiRSA_decrypt_der
| ??
| '''new'''
|-
| 0x24
| SVC_SHA1Init(SVCSHA1Context *ctx)
| ??
| '''new'''
|-
| 0x25
| SVC_SHA1Update(SVCSHA1Context* ctx, const u8 *buf, u32 len)
| ??
| '''new'''
|-
| 0x26
| swiSHA1_Final
| ??
| '''new'''
|-
| 0x27
| swiSHA1
| ??
| '''new'''
|-
| 0x28
| swiSHA1_Compare
| ??
| '''new'''
|-
| 0x29
| swiSHA1_Random
| looks like it's trying to generate a random number using SHA1
| '''new'''
|-
| 0x2A
| N/A (hangs)
| ??
| formerly jump to garbage
|-
| 0x2B
| N/A (ignored)
| ??
| formerly jump to garbage
|-
| 0x2C-0x3F
| N/A (hangs)
| ??
| formerly jump to garbage
|-
| 0x40-0xFF
| Mirrors of 0x00-0x3F
| ??
| formerly jump to garbage
|}

The two ignored function do return without doing anything (they are rejected before calling the SWI function table). The other unused functions do hang in an endless loop.

'''Note:''' swiHalt does correctly use CP15 to halt the ARM9 processor. But, swiVBlankIntrWait and swiIntrWait do use port 0x4000301 (which would be correct on ARM7, unknown if the same mechanism is actually supported on ARM9, if it isn't supported then the functions would more or less behave as desired - wait for IRQ flags to get set - but without actually switching the CPU into low-power mode).

== See Also ==

* [[ARM7 BIOS]]

ARM9 SWI Functions

2022-09-25T00:50:19Z

Hallowizer: /* ARM9 BIOS SWI Function */ added official names from acer cloud wifi (GPL licensed). also some formatting changes

These are the functions provided by the [[ARM9 BIOS]]. Names starting with <code>SVC_</code> are official, while others are guesses.

{| class="wikitable"
|-
! ID
! Name
! Args
! Changes
|-
| 0x00
| N/A (hangs)
| none
| '''formerly SoftReset'''
|-
| 0x01
| swiDecompressLZSSwithCallbackWrite8bitUnits
| ??
| '''formerly jump to 0'''
|-
| 0x02
| swiDecompressLZSSwithCallbackWrite16bitUnits
| ??
| '''formerly jump to 0'''
|-
| 0x03
| swiWaitByLoop
| ??
| same as DS
|-
| 0x04
| swiIntrWait
| ??
| same as DS (but bugged? see note)
|-
| 0x05
| swiVBlankIntrWait
| ??
| same as DS (but bugged? see note)
|-
| 0x06
| swiHalt
| ??
| same as DS
|-
| 0x07-0x08
| N/A (hangs)
| ??
| same as DS / formerly jump to 0
|-
| 0x09
| swiDivide
| ??
| same as DS
|-
| 0x0A
| N/A (hangs)
| ??
| same as DS / formerly jump to 0
|-
| 0x0B
| swiCopy
| ??
| same as DS
|-
| 0x0C
| swiFastCopy
| ??
| same as DS
|-
| 0x0D
| swiSqrt
| ??
| same as DS
|-
| 0x0E
| swiCRC16
| ??
| same as DS
|-
| 0x0F
| N/A (hangs)
| ??
| '''formerly IsDebugger'''
|-
| 0x10
| swiUnpackBits
| ??
| same as DS
|-
| 0x11
| swiDecompressLZSSWram
| ??
| same as DS
|-
| 0x12
| N/A (ignored)
| ??
| '''(formerly swiDecompressLZSSVram)'''
|-
| 0x13
| swiDecompressHuffmanWithCallbackWrite32bitUnits
| ??
| same as DS
|-
| 0x14
| swiDecompressRLEWram
| ??
| same as DS
|-
| 0x15
| swiDecompressRLEwithCallbackWrite16bitUnits
| ??
| same as DS
|-
| 0x16
| swiDecodeDelta8
| ??
| same as DS
|-
| 0x17
| N/A (hangs)
| ??
| same as DS / formerly jump to 0
|-
| 0x18
| swiDecodeDelta16
| ??
| same as DS
|-
| 0x19
| swiDecompressLZSSwithCallbackWrite16bitUnits
| ??
| same as SWI 0x02 / formerly jump to 0
|-
| 0x1A-0x1E
| N/A (hangs)
| ??
| same as DS / formerly jump to 0
|-
| 0x1F
| swiCustomPost
| ??
| same as DS
|-
| 0x20
| swiInit_crypto_heap
| ??
| '''new'''
|-
| 0x21
| swiRSA_decrypt
| ??
| '''new'''
|-
| 0x22
| swiRSA_decrypt_signature
| ??
| '''new'''
|-
| 0x23
| swiRSA_decrypt_der
| ??
| '''new'''
|-
| 0x24
| SVC_SHA1Init
| ??
| '''new'''
|-
| 0x25
| SVC_SHA1Update
| ??
| '''new'''
|-
| 0x26
| swiSHA1_Final
| ??
| '''new'''
|-
| 0x27
| swiSHA1
| ??
| '''new'''
|-
| 0x28
| swiSHA1_Compare
| ??
| '''new'''
|-
| 0x29
| swiSHA1_Random
| looks like it's trying to generate a random number using SHA1
| '''new'''
|-
| 0x2A
| N/A (hangs)
| ??
| formerly jump to garbage
|-
| 0x2B
| N/A (ignored)
| ??
| formerly jump to garbage
|-
| 0x2C-0x3F
| N/A (hangs)
| ??
| formerly jump to garbage
|-
| 0x40-0xFF
| Mirrors of 0x00-0x3F
| ??
| formerly jump to garbage
|}

The two ignored function do return without doing anything (they are rejected before calling the SWI function table). The other unused functions do hang in an endless loop.

'''Note:''' swiHalt does correctly use CP15 to halt the ARM9 processor. But, swiVBlankIntrWait and swiIntrWait do use port 0x4000301 (which would be correct on ARM7, unknown if the same mechanism is actually supported on ARM9, if it isn't supported then the functions would more or less behave as desired - wait for IRQ flags to get set - but without actually switching the CPU into low-power mode).

== See Also ==

* [[ARM7 BIOS]]

Nintendo DS Cart Whitelist

2022-09-25T00:19:30Z

Hallowizer: formatting fixes and mentioned RSA signatures

DSi ARM7 Boot ROM dumper

2022-09-23T01:30:58Z

Hallowizer: Created page with "{{Infobox homebrew | author = PoroCYon | type = system tool | source = https://git.titandemo.org/PoroCYon/dsi-bios-payload/-/tree/main/#dsi-arm7-boot-rom-dumper-payload }} '''..."

{{Infobox homebrew
| author = PoroCYon
| type = system tool
| source = https://git.titandemo.org/PoroCYon/dsi-bios-payload/-/tree/main/#dsi-arm7-boot-rom-dumper-payload
}}
'''DSi ARM7 Boot ROM dumper''' is a tool to dump the entire [[ARM7 BIOS]] that requires hardware glitching. It writes a custom handler to the [[ARM7 OS]] exception handler pointer, and resets the system, relying on the hardware glitch to cause an undefined instruction to be detected.