Hacking Potential reason for random errors on N3DS after downgrading?

Aroth

Well-Known Member
OP
Member
Joined
Apr 14, 2015
Messages
2,066
Trophies
0
Age
37
XP
891
Country
United States
So I wondered why the 10.3 update for the N3DS was so much larger than the 9.2 update (110 titles vs 102), and it got me thinking that maybe when we downgrade we are leaving some updated titles present that weren't there on 9.2 and maybe this was the problem. (I also wondered why the O3DS 9.2 update was 126 titles. Where did the other 24 come from?)

After doing some looking into the SOAP replies for the various N3DS and O3DS updates, I have realized I was about half right. Over the course of updates from 9.2 to 10.3, several titles were added to the N3DS SOAP replies that were already included on the system but had not been updated before.

To start with, the reason the O3DS reply has more titles is because each update must be cumulative and include titles updated in previous updates, even if the current one does not update it. Otherwise we would not be able to jump from, say, 4.5 all the way to 9.2. For the O3DS, this means some titles are included in the reply that haven't been updated since 2.x or 3.x (like the Download Play or DS Internet titles). The N3DS, however, shipped with these titles already installed so Nintendo culled them from the SOAP reply, likely to save on bandwidth. Over time several of these titles have been added to the SOAP reply for the N3DS, possibly to prepare for potential updates to those services. Nearest I can tell most of them were probably simply included in the SOAP reply without actually being updated(like a few TWL titles like DS Internet and the whitelist). But a few DID receive updates when they were included.

This brings us to the crux of the problem. Those few system services that did receive actual updates between 9.3 and 10.3 were last updated as far back as 7.0 or 8.0, which means the N3DS shipped with them already installed and so Nintendo culled them from the N3DS SOAP reply. These are the titles that do not actually get downgraded on the N3DS, and which are probably the root of most of the random bugs and errors that people are experiencing.

Oh and there is at least one new title on the N3DS that was included with 9.3 and won't get uninstalled when downgrading to 9.2. The Amiibo Settings application.

Figured I would update this to reflect what was discovered and to consolidate information.

First and foremost, there are a total of FIVE titles that you will need to check for after completing a downgrade to 9.2.

The following four titles will need to be downgraded if they have a version higher than what is listed. If any of these four titles need to be downgraded, you can acquire them from an O3DS 9.2 update/downgrade package for your region. Use sysupdater to install them.

DO NOT UNDER, ANY CIRCUMSTANCES, USE FBI TO DELETE THESE TITLES!!!
DOING SO WILL BRICK YOUR SYSTEM!!!

Details of this guide have been hidden in a spoiler in an attempt to get more people to read the above disclaimer before continuing, and hopefully cut down on the number of system bricks resulting from people not reading it.

Code:
    Title ID        |   Version   |    Product Code    |    Service Name
------------------------------------------------------------------------------------
0004001B00010802    |    0x0      |        <N/A>       |    N/A
0004009B00010402    |    0x1002   |        <N/A>       |    N/A)
0004013000001A02    |    0x1400   |    0430builder     |    DSP system-module
0004013000001B02    |    0x800    |    0328builder     |    GPIO system-module

You will also find ONE of the following titles installed. These are region specific, so you will only find the title for your region (or you SHOULD only find that one anyways). This title is not normally present on 9.2 systems as it was first installed with the 9.3 update. You can safely delete it using FBI if you wish. However you may also simply leave it alone since nothing will call or reference it on a 9.2 system. If you are comfortable deleting titles from your NAND with FBI, feel free to delete it. If you are uncomfortable doing so, simply leave it be and no harm will come of doing so.

Code:
    Title ID        |   Version   |    Product Code    |    Service Name
------------------------------------------------------------------------------------------------------
0004003000009E02    |    0x7      |    [CTR-N-HA3E]    |    USA amiibo settings
000400300000B902    |    0x7      |    [CTR-N-HA3P]    |    EUR amiibo settings
0004003000009502    |    0x7      |    [CTR-N-HA3J]    |    JAP amiibo settings
0004003000008C02    |    0x407    |    [CTR-N-HA3K]    |    KOR amiibo settings

Finally, if you are doing your own research you might see the following titles start showing up in N3DS updates with 9.7 and wonder if you should remove them. I strongly suggest you simply leave them be as they are DS mode titles and as such are neccesary for DS/DSi carts and DSiWare games to function properly. They have not actually been updated since 7.x and were simply added to the update responses for the N3DS to ensure that every system has the most recent version. (Primarily to combat the practice of downgrading the DS Cart Whitelist to enable previously blocked DS flash carts like the GW Blue Card.)

Code:
    Title ID        |   Version   |    Product Code    |    Service Name
------------------------------------------------------------------------------------------------------
0004800542383841    |    0x800    |    DS INTERNET     |    DS Internet (DSi-mode application)
00048005484E4441    |    0x400    |       dlplay       |    Download Play (DS-mode application)
0004800F484E4841    |    0x2c00   |        <N/A>       |    Nintendo DS Cart Whitelist

Now, to be completely honest it is a right royal pain in the ass to pour through the contents of the NAND title list in FBI and compare each of them to the title lists I compiled or to look for the titles I listed in this thread, so @moghedien was kind enough to create a homebrew tool that does it for you and generates a log of all unexpected titles or titles with mismatched versions.

That tool can be downloaded from the project's github page, located here. I will also upload the most recent version to this post as it is updated to maintain an easy location. (@moghedien if you would prefer I did not do so simple say as such and I will remove the file.)
 

Attachments

  • downgrade_check.zip
    107.3 KB · Views: 1,224
Last edited by Aroth,

Aroth

Well-Known Member
OP
Member
Joined
Apr 14, 2015
Messages
2,066
Trophies
0
Age
37
XP
891
Country
United States
After going over another user's downgraded 9.2 2DS sysnand, there are three titles that do not get "downgraded" when going from 10.3 to 9.2.

The nfc system-module (O3DS/2DS and N3DS have unique titles), the amiibo settings application and something called fangate_updater (O3DS/2DS only). All three titles were introduced in the 9.3 update, and did not exist when 9.2 was released, so they would need to be manually deleted after the downgrade. There may be others as well for the N3DS, I do not know, not to mention the few titles that received updates between 9.3 and 10.3 that were not part of the 9.0 SOAP response because they were already present on all N3DS systems.
 
  • Like
Reactions: MelonGx and Gluupor

Aroth

Well-Known Member
OP
Member
Joined
Apr 14, 2015
Messages
2,066
Trophies
0
Age
37
XP
891
Country
United States
Currently working on building a full title list for 9.0 and 9.2 on the N3DS, and in the process figuring out which titles are not getting downgraded properly when moving from 10.3 to 9.2. Hopefully the end result will be a COMPLETE 9.2 downgrade package for N3DS users.

I have already encountered 11 titles that are on my factory 9.0 sysnand that are not in the "9.0 update package" on that iso site. So far none of them actually received updates between 9.3 and 10.3 though.
 
  • Like
Reactions: Gluupor

pkmz

Well-Known Member
Newcomer
Joined
Nov 27, 2014
Messages
79
Trophies
0
Age
38
XP
121
Country
United States
Thank you. I think this is a great idea and will fix a lot of issues.

Could be similiar to the browser like people who used game carts to update didnt get the browser.

Thank you for your time and doing this.
 

Aroth

Well-Known Member
OP
Member
Joined
Apr 14, 2015
Messages
2,066
Trophies
0
Age
37
XP
891
Country
United States
Thank you. I think this is a great idea and will fix a lot of issues.

Could be similiar to the browser like people who used game carts to update didnt get the browser.

Thank you for your time and doing this.

It is basically the same concept, only backwards.
 

Aroth

Well-Known Member
OP
Member
Joined
Apr 14, 2015
Messages
2,066
Trophies
0
Age
37
XP
891
Country
United States
Nah, if I can figure out what exact titles need to be removed and/or downgraded still, it should be a simple matter of fixing those titles.

I've gone through 108 titles so far and only found 1 that actually gets updated between 9.3 and 10.3 that isn't included with the 9.2 package. Not 100% sure what it does, but chances are it's a service of some sort since its present on the O3DS as well.

Only other one of note so far is that my NAND dump has content for amiibo settings, but the title doesn't show up in FBI on my sysnand. This is weird because the title itself isn't added to the SOAP reply until 9.3
 

SomeGamer

Well-Known Member
Member
Joined
Dec 19, 2014
Messages
6,827
Trophies
1
XP
4,902
Country
Hungary
I've gone through 108 titles so far and only found 1 that actually gets updated between 9.3 and 10.3 that isn't included with the 9.2 package. Not 100% sure what it does, but chances are it's a service of some sort since its present on the O3DS as well.

Only other one of note so far is that my NAND dump has content for amiibo settings, but the title doesn't show up in FBI on my sysnand. This is weird because the title itself isn't added to the SOAP reply until 9.3
Try DevMenu! And what is the title id?
 

Aroth

Well-Known Member
OP
Member
Joined
Apr 14, 2015
Messages
2,066
Trophies
0
Age
37
XP
891
Country
United States
Try DevMenu! And what is the title id?

DevMenu doesn't show installed nand titles, plus I am looking at sysnand so I am limited to the hb version of FBI.

The title I found that needs to be downgraded separately is 0004001B00010802 and the version you need can be found in the 6.3.0-12 update package for the O3DS.

The weird title is 0004003000009E02 and is the amiibo settings application. It shouldn't be present on my nand (and in fact FBI does not see it, I only know its there because the folder exists in my nand dump) so I am not sure whats up with that.

Keep in mind that these titles are for the USA version of the console and that I would highly suggest you not mess around with it if unless you have a hard mod. Especially if you aren't experiencing any problems yet.

--------------------- MERGED ---------------------------

Found another.

0004009B00010402, updated in 7.0.0-13 and then again in 9.6.0-24. Downgraded users will still have the 9.6 version, and they should need the 7.0 one.

Same as before, purpose of the title is unknown, but its presence in both Old and New 3DS implies a service of some sort.
 

SomeGamer

Well-Known Member
Member
Joined
Dec 19, 2014
Messages
6,827
Trophies
1
XP
4,902
Country
Hungary
DevMenu doesn't show installed nand titles, plus I am looking at sysnand so I am limited to the hb version of FBI.

The title I found that needs to be downgraded separately is 0004001B00010802 and the version you need can be found in the 6.3.0-12 update package for the O3DS.

The weird title is 0004003000009E02 and is the amiibo settings application. It shouldn't be present on my nand (and in fact FBI does not see it, I only know its there because the folder exists in my nand dump) so I am not sure whats up with that.

Keep in mind that these titles are for the USA version of the console and that I would highly suggest you not mess around with it if unless you have a hard mod. Especially if you aren't experiencing any problems yet.

--------------------- MERGED ---------------------------

Found another.

0004009B00010402, updated in 7.0.0-13 and then again in 9.6.0-24. Downgraded users will still have the 9.6 version, and they should need the 7.0 one.

Same as before, purpose of the title is unknown, but its presence in both Old and New 3DS implies a service of some sort.
Well, I still have an EmuNAND to mess around in! ;)

--------------------- MERGED ---------------------------

So basically, we should downgrade to 1.0, then upgrade from there for maximum stability. :P It would need a CN cart, though.
 

Aroth

Well-Known Member
OP
Member
Joined
Apr 14, 2015
Messages
2,066
Trophies
0
Age
37
XP
891
Country
United States
Well, I still have an EmuNAND to mess around in! ;)

--------------------- MERGED ---------------------------

So basically, we should downgrade to 1.0, then upgrade from there for maximum stability. :P It would need a CN cart, though.

There is a good deal more involved than just that, but basically yeah.

For O3DS users they just need to do the downgrade and then delete 3 titles that were added in 9.3 related to the nfc and amiibo stuff (though since the same titles are present in 9.0 on the N3DS it might not matter).

For N3DS users, new 9.2 downgrade packs need to be created with ALL titles added. Or at least the 2 titles I found that were updated. Here in a bit I will update the OP with a full title list for the N3DS on factory 9.0. Since 9.2 was just an update to two titles (Cver, as always, and the Home Menu) it should be fairly simple to go from my 9.0 title list to the 9.2 one.
 
  • Like
Reactions: indionicarao

mitroux

Well-Known Member
Member
Joined
Sep 12, 2007
Messages
266
Trophies
0
XP
343
Country
Macau
There is a good deal more involved than just that, but basically yeah.

For O3DS users they just need to do the downgrade and then delete 3 titles that were added in 9.3 related to the nfc and amiibo stuff (though since the same titles are present in 9.0 on the N3DS it might not matter).

.

since those titles weren't present in 9.2 , there is no need to delete them , since the 9.2 won't call them at all , besides , everybody who downgrade a 3ds will use emunand and update it to get the latest one , which means installing them again if deleted before
 

Aroth

Well-Known Member
OP
Member
Joined
Apr 14, 2015
Messages
2,066
Trophies
0
Age
37
XP
891
Country
United States
since those titles weren't present in 9.2 , there is no need to delete them , since the 9.2 won't call them at all , besides , everybody who downgrade a 3ds will use emunand and update it to get the latest one , which means installing them again if deleted before

For O3DS users this is likely the case. Which is why we have very few instances of O3DS users having weird problems.

For N3DS users there are 2 titles I have discovered that get updated in 9.3+ but that are not included in the 9.0/9.2 update packages because every N3DS ships with the title installed. These titles could be responsible for some of the random errors.
 

mitroux

Well-Known Member
Member
Joined
Sep 12, 2007
Messages
266
Trophies
0
XP
343
Country
Macau
i agreee with you for those titles in the N3ds , but like i said , for o3ds it's not a problem
people can always try to downgrade to a lower version ,(either gateway downgrader or the original sysupdater) then upgrade normally
 

Aroth

Well-Known Member
OP
Member
Joined
Apr 14, 2015
Messages
2,066
Trophies
0
Age
37
XP
891
Country
United States
Below is a list of all titles that come preinstalled on a N3DS-XL that shipped with 9.0.0-20U.

Titles are broken down by TIDHigh and then listed in numerical order by TIDLow. Included is the version (in hex) of the title that come installed on factory 9.0 N3DS systems, as well as the Product Code (if applicable) and name of the service (if known).

Titles preceded by "***" are titles that are are not included in the 9.0.0-20U update package for the N3DS. These titles were culled from the update SOAP reply due to all N3DS devices in the region shipping with at least the version listed. These have the last version they were updated in listed to the side. All such titles are used by both the N3DS and the O3DS.

Titles preceded by "####" are not included in the 9.0/9.2 update packages, but were updated at some point between 9.3 and 10.3. As a result they are not downgraded during the current downgrade process. It is possible that these titles are responsible for some of the strange errors and unexplained bricks experienced by N3DS users during and after downgrading. As before, these titles have the last pre-9.0 FW revision they were updated in listed to the side, as well as the 9.3+ FW that updated them.

Code:
    Title ID            |   Version   |    Product Code    |    Service Name
----------------------------------------------------------------------------------------------------------------------------
00040010    00021000    |    0x200b   |    [CTR-N-HASE]    |    System Settings
            00021100    |    0xc01    |    [CTR-N-HDLE]    |    Download Play application
***         00021200    |    0x810    |    [CTR-N-HMKE]    |    Activity Log    (7.0.0-13)
            00021400    |    0x1001   |    [CTR-N-HEPE]    |    Nintendo 3DS Camera Application
***         00021500    |    0xc10    |    [CTR-N-HESE]    |    Nintendo 3DS Sound application    (7.0.0-13)
***         00021700    |    0x807    |    [CTR-N-HEDE]    |    Mii Maker    (7.0.0-13)
***         00021800    |    0x1410   |    [CTR-N-HMEE]    |    StreetPass Mii Plaza    (7.0.0-13)
            00021900    |    0x3409   |    [CTR-N-HGRE]    |    eShop
            00021A00    |    0x140b   |    [CTR-N-HCBE]    |    System Transfer application
***         00021B00    |    0x40a    |    [CTR-N-HMAE]    |    Nintendo Zone application    (3.0.0-5)
***         00021E00    |    0x410    |    [CTR-N-HARE]    |    AR Games    (7.0.0-13)
***         00021F00    |    0x801    |    [CTR-N-HSHE]    |    SAFE_MODE System Updater application    (6.0.0-11)
            0002C000    |    0x803    |    [CTR-N-HAFE]    |    Nintendo Network ID Settings application
            20021300    |    0x1      |    [CTR-N-HACE]    |    New3DS Health and Safety Information
            20021D00    |    0x801    |    [CTR-N-HCHE]    |    New3DS Face Raiders
            20024100    |    0x5      |    [CTR-N-HAJE]    |    N/A
            2002CF00    |    0x1      |    [CTR-P-CTAP]    |    New3DS placeholder menu system-application
            2002D100    |    0x0      |    [CTR-P-CTAP]    |    New3DS placeholder friend system-application
            2002D300    |    0x0      |    [CTR-P-CTAP]    |    N/A
            2002D500    |    0x2      |    [CTR-P-CTAP]    |    N/A
  
0004001B    00010002    |    0x0      |        <N/A>       |    ClCertA    (2.0.0-2)
            00010702    |    0x1000   |        <N/A>       |    NS CFA
####        00010802    |    0x0      |        <N/A>       |    N/A    (9.5.0-23)(6.3.0-12)
            00018002    |    0xc06    |        <N/A>       |    N/A
            00018102    |    0x401    |        <N/A>       |    N/A
            00018202    |    0x802    |        <N/A>       |    N/A

00040030    00008A02    |    0x1c00   |    [CTR-P-CTAP]    |    ErrDisp
            00008B02    |    0x6      |    [CTR-N-HAHE]    |    solv3 system-applet (Miiverse-posting applet)
            00008F02    |    0x2c08   |    [CTR-N-HMME]    |    Home Menu
            00009002    |    0x801    |    [CTR-N-HCSE]    |    Camera applet
            00009202    |    0x1400   |    [CTR-N-HMVE]    |    Instruction Manual applet
            00009302    |    0x1000   |    [CTR-N-HGME]    |    Game Notes applet
            00009602    |    0x1800   |    [CTR-N-HFRE]    |    Friend List applet
            00009702    |    0x1001   |    [CTR-N-HCRE]    |    Notifications applet
            00009E02    |    0x7(?))  |    [CTR-N-HA3E]    |    amiibo settings (probably a STUB title, doesn't show up in FBI)
            0000BD02    |    0x800    |    [CTR-N-HAEE]    |    Miiverse applet
            0000C502    |    0x1408   |    [CTR-N-HEEA]    |    error applet
            0000C802    |    0x1000   |    [CTR-N-HKYE]    |    Software Keyboard
            0000C902    |    0x800    |    [CTR-N-HMSE]    |    appletEd
            0000CB02    |    0xc03    |    [CTR-N-HCCE]    |    PNOTE_AP
            0000CC02    |    0x800    |    [CTR-N-HMCE]    |    SNOTE_AP
            0000CD02    |    0xc01    |    [CTR-N-HADA]    |    extrapad applet
            0000CE02    |    0x2008   |    [CTR-N-HAAE]    |    mint (eShop applet)
            0000F602    |    0x802    |    [CTR-N-HAGA]    |    Miiverse memolib
            20008A03    |    0x1c01   |    [CTR-P-CTAP]    |    New3DS SAFE_MODE ErrDisp
            20009402    |    0xa      |    [CTR-N-HBRE]    |    New3DS Internet Browser
            2000C503    |    0x400    |    [CTR-N-HEEA]    |    New3DS SAFE_MODE error applet
            2000C803    |    0x0      |    [CTR-N-HKYE]    |    New3DS SAFE_MODE Software Keyboard
  
***0004009B 00010202    |    0x0      |        <N/A>       |    Mii-data CFA    (2.0.0-2)
####        00010402    |    0x1002   |        <N/A>       |    N/A (9.6.0-24) (7.0.0-13)
***         00010602    |    0x2      |        <N/A>       |    Non-Nintendo TLS Root-CA Certificates CFA    (2.0.0-2)
***         00011402    |    0x0      |        <N/A>       |    N/A    (2.0.0-2)
***         00011602    |    0x0      |        <N/A>       |    N/A    (2.0.0-2)
***         00011D02    |    0x0      |        <N/A>       |    N/A    (2.0.0-2)
***         00011E02    |    0x0      |        <N/A>       |    N/A    (2.0.0-2)
            00012302    |    0x2402   |        <N/A>       |    N/A
            00013302    |    0x1003   |        <N/A>       |    EULA CFA
***         00014002    |    0x0      |        <N/A>       |    System Font CFA    (2.0.0-2)
***         00014102    |    0x400    |        <N/A>       |    CHN System Font CFA    (4.0.0-7)
***         00014202    |    0x400    |        <N/A>       |    KOR System Font CFA    (4.0.0-7)
***         00014302    |    0x400    |        <N/A>       |    TWN System Font CFA    (4.0.0-7)
***         00015302    |    0x0      |        <N/A>       |    N/A    (2.0.0-2)

000400DB    00010302    |    0x1800   |        <N/A>       |    NGWord bad word list CFA
            00010502    |    0x3800   |        <N/A>       |    Nintendo Zone hotspot list CFA
            00017302    |    0x2402   |        <N/A>       |    CVer
            20016302    |    0x140    |        <N/A>       |    New3DS NVer
  
00040130    00001502    |    0x2000   |    0828builder     |    AM system-module
            00001702    |    0x3002   |    0908builder     |    Config system-module
            00001802    |    0x1c00   |    0710builder     |    Codec system-module
####        00001A02    |    0x1400   |    0430builder     |    DSP system-module    (9.7.0-25) (8.0.0-18)
####        00001B02    |    0x800    |    0328builder     |    GPIO system-module    (9.5.0-23) (8.0.0-18)
            00001D02    |    0x2400   |    0828builder     |    HID system-module
***         00002002    |    0x800    |    0328builder     |    Microphone system-module    (8.0.0-18)
***         00002102    |    0x800    |    0430builder     |    PDN system-module    (8.0.0-18)
            00002402    |    0x2000   |    0710builder     |    AC system-module
            00002602    |    0x2800   |    0828builder     |    StreetPass system-module
            00002702    |    0x1400   |    0828builder     |    CSND system-module
            00002802    |    0x1801   |    0716builder     |    Download Play system-module
            00002902    |    0x3000   |    0828builder     |    HTTP system-module
***         00002A02    |    0x800    |    0328builder     |    MP system-module    (8.0.0-18)
            00002B02    |    0x1c01   |    0908builder     |    NDM system-module
            00002C02    |    0x2809   |    0922builder     |    NIM system-module
            00002D02    |    0x2800   |    0710builder     |    NWM system-module
            00002E02    |    0x1c00   |    0828builder     |    Sockets system-module
            00002F02    |    0x1c00   |    0828builder     |    SSL system-module
            00003102    |    0x1400   |    0828builder     |    PS system-module
            00003202    |    0x2000   |    0710builder     |    friends system-module
            00003302    |    0x2000   |    0828builder     |    IR system-module
            00003402    |    0x2c02   |    0908builder     |    SpotPass system-module
            00003502    |    0x1803   |    0908builder     |    Notifications system-module
            00003702    |    0x1400   |    0710builder     |    RO system-module
            00003802    |    0x1800   |    0828builder     |    act system-module
            00008002    |    0x3800   |    0828builder     |    NS system-module
            20001503    |    0x1c01   |    0718builder     |    New3DS SAFE_MODE AM system-module
            20001602    |    0x2402   |    0908builder     |    New3DS Camera system-module
            20001703    |    0x2c01   |    0718builder     |    New3DS SAFE_MODE Config system-module
            20001803    |    0x1c01   |    0718builder     |    New3DS SAFE_MODE Codec system-module
            20001A03    |    0x1801   |    0718builder     |    New3DS SAFE_MODE DSP system-module
            20001B03    |    0xc01    |    0718builder     |    New3DS SAFE_MODE GPIO system-module
            20001C02    |    0x2803   |    0908builder     |    New3DS GSP system-module
            20001C03    |    0x2401   |    0718builder     |    New3DS SAFE_MODE GSP system-module
            20001D03    |    0x2001   |    0718builder     |    New3DS SAFE_MODE HID system-module
            20001E02    |    0x1000   |    0710builder     |    New3DS i2c system-module
            20001E03    |    0x1001   |    0718builder     |    New3DS SAFE_MODE i2c system-module
            20001F02    |    0x2000   |    0328builder     |    New3DS MCU system-module
            20001F03    |    0x2401   |    0718builder     |    New3DS SAFE_MODE MCU system-module
            20002103    |    0xc01    |    0718builder     |    New3DS SAFE_MODE PDN system-module
            20002202    |    0x2800   |    0710builder     |    New3DS PTM system-module
            20002203    |    0x2801   |    0718builder     |    New3DS SAFE_MODE PTM system-module
            20002302    |    0x1000   |    0710builder     |    New3DS spi system-module
            20002303    |    0x1001   |    0718builder     |    New3DS SAFE_MODE spi system-module
            20002403    |    0x2001   |    0718builder     |    New3DS SAFE_MODE AC system-module
            20002703    |    0x1401   |    0718builder     |    New3DS SAFE_MODE CSND system-module
            20002903    |    0x2801   |    0718builder     |    New3DS SAFE_MODE HTTP system-module
            20002C03    |    0x2401   |    0718builder     |    New3DS SAFE_MODE NIM system-module
            20002D03    |    0x2801   |    0718builder     |    New3DS SAFE_MODE NWM system-module
            20002E03    |    0x1c01   |    0718builder     |    New3DS SAFE_MODE Sockets system-module
            20002F03    |    0x1c01   |    0718builder     |    New3DS SAFE_MODE SSL system-module
            20003103    |    0x1401   |    0718builder     |    New3DS SAFE_MODE PS system-module
            20003203    |    0x2001   |    0718builder     |    New3DS SAFE_MODE friends system-module
            20003303    |    0x1c01   |    0718builder     |    New3DS SAFE_MODE IR system-module
            20004002    |    0x400    |    0828builder     |    New3DS nfc system-module
            20004102    |    0x400    |    0828builder     |    New3DS mvd system-module
            20004202    |    0x401    |    0908builder     |    New3DS qtm system-module
            20008003    |    0x3401   |    0718builder     |    New3DS SAFE_MODE NS system-module
  
00040138    20000002    |    0x42e0   |    [CTR-P-CTAP]    |    New3DS NATIVE_FIRM
            20000003    |    0x3ed1   |    [CTR-P-CTAP]    |    New3DS SAFE_MODE_FIRM
            20000102    |    0x26d0   |    [CTR-P-CTAP]    |    New3DS TWL_FIRM
            20000202    |    0x12d0   |    [CTR-P-CTAP]    |    New3DS AGB_FIRM
  
00048005    42383841    |    0x800    |    DS INTERNET     |    DS Internet (DSi-mode application)
            484E4441    |    0x400    |       dlplay       |    Download Play (DS-mode application)
  
0004800F    484E4841    |    0x2c00   |        <N/A>       |    Nintendo DS Cart Whitelist
            484E4C41    |    0x0      |        <N/A>       |    TWL Version Data

For users on 9.2 wishing to use this list as a reference, you should have the following two titles listed with the following version numbers:

Code:
    Title ID        |   Version   |    Product Code    |    Service Name
----------------------------------------------------------------------------
0004003000008F02    |    0x3000   |    [CTR-N-HMME]    |    Home Menu
000400DB00017302    |    0x2420   |        <N/A>       |    CVer

In addition, the following title is the same as the "bluecardfix.cia" that is used to allow blocked DS flashcarts to run again, so if you installed that to sysnand in order to use the GW Blue Cart (or another DS flash cart), the version will read as 0x0.

Code:
    Title ID        |   Version   |    Product Code    |    Service Name
------------------------------------------------------------------------------------------------
0004800F484E4841    |    0x2c00   |        <N/A>       |    Nintendo DS Cart Whitelist
 
Last edited by Aroth,

Aroth

Well-Known Member
OP
Member
Joined
Apr 14, 2015
Messages
2,066
Trophies
0
Age
37
XP
891
Country
United States
Below is a list of all titles that come preinstalled on a N3DS-XL that shipped with 9.0.0-20E.

Titles are broken down by TIDHigh and then listed in numerical order by TIDLow. Included is the version (in hex) of the title that come installed on factory 9.0 N3DS systems, as well as the Product Code (if applicable) and name of the service (if known).

Titles preceded by "***" are titles that are are not included in the 9.0.0-20U update package for the N3DS. These titles were culled from the update SOAP reply due to all N3DS devices in the region shipping with at least the version listed. These have the last version they were updated in listed to the side. All such titles are used by both the N3DS and the O3DS.

Titles preceded by "####" are not included in the 9.0/9.2 update packages, but were updated at some point between 9.3 and 10.3. As a result they are not downgraded during the current downgrade process. It is possible that these titles are responsible for some of the strange errors and unexplained bricks experienced by N3DS users during and after downgrading. As before, these titles have the last pre-9.0 FW revision they were updated in listed to the side, as well as the 9.3+ FW that updated them.

WARNING!!!!
Due to lack of a physical EUR N3DS in my possession to check with FBI, I cannot guarantee that this title list is 100% complete and accurate in regards to "Version" and "Product Code". The list was generated by cross-referencing a decrypted NAND dump of a factory 9.0 sysnand and the SOAP replies listed on Yellows8's website.
(Thanks to @Krude, this warning is no longer applicable)

Code:
    Title ID            |   Version   |    Product Code    |    Service Name
----------------------------------------------------------------------------------------------------------------------------
00040010    00022000    |    0x200a   |    [CTR-N-HASP]    |    System Settings
            00022100    |    0xc01    |    [CTR-N-HDLP]    |    Download Play application
***         00022200    |    0x810    |    [CTR-N-HMKP]    |    Activity Log    (7.0.0-13)
            00022400    |    0x1001   |    [CTR-N-HEPP]    |    Nintendo 3DS Camera Application
***         00022500    |    0xc10    |    [CTR-N-HESP]    |    Nintendo 3DS Sound application    (7.0.0-13)
***         00022700    |    0x807    |    [CTR-N-HEDP]    |    Mii Maker    (7.0.0-13)
***         00022800    |    0x1402   |    [CTR-N-HMEP]    |    StreetPass Mii Plaza    (6.0.0-11)
            00022900    |    0x3408   |    [CTR-N-HGRP]    |    eShop
            00022A00    |    0x140b   |    [CTR-N-HCBP]    |    System Transfer application
***         00022B00    |    0x40a    |    [CTR-N-HMAP]    |    Nintendo Zone application    (3.0.0-5)
***         00022E00    |    0x410    |    [CTR-N-HARP]    |    AR Games    (7.0.0-13)
***         00022F00    |    0x802    |    [CTR-N-HSHP]    |    SAFE_MODE System Updater application    (6.0.0-11)
            0002C100    |    0x803    |    [CTR-N-HAFP]    |    Nintendo Network ID Settings application
            20022300    |    0x1      |    [CTR-N-HACP]    |    New3DS Health and Safety Information
            20022D00    |    0x801    |    [CTR-N-HCHP]    |    New3DS Face Raiders
            20025100    |    0x4      |    [CTR-N-HAJP]    |    N/A
            2002D000    |    0x1      |    [CTR-P-CTAP]    |    New3DS placeholder menu system-application
            2002D200    |    0x1      |    [CTR-P-CTAP]    |    New3DS placeholder friend system-application
            2002D400    |    0x2      |    [CTR-P-CTAP]    |    N/A
            2002D600    |    0x2      |    [CTR-P-CTAP]    |    N/A
      
0004001B    00010002    |    0x0      |        <N/A>       |    ClCertA    (2.0.0-2)
            00010702    |    0x1000   |        <N/A>       |    NS CFA
####        00010802    |    0x0      |        <N/A>       |    N/A    (9.5.0-23)(6.3.0-12)
            00018002    |    0xc06    |        <N/A>       |    N/A
            00018102    |    0x401    |        <N/A>       |    N/A
            00018202    |    0x802    |        <N/A>       |    N/A

00040030    00008A02    |    0x1c00   |    [CTR-P-CTAP]    |    ErrDisp
            00009802    |    0x2c08   |    [CTR-N-HMMP]    |    Home Menu
            00009902    |    0x801    |    [CTR-N-HCSP]    |    Camera applet
            00009B02    |    0x1400   |    [CTR-N-HMVP]    |    Instruction Manual applet
            00009C02    |    0x1000   |    [CTR-N-HGMP]    |    Game Notes applet
            00009F02    |    0x1800   |    [CTR-N-HFRP]    |    Friend List applet
            0000A002    |    0x1001   |    [CTR-N-HCRP]    |    Notifications applet
            0000BA02    |    0x6      |    [CTR-N-HAHP]    |    solv3 system-applet (Miiverse-posting applet)
            0000BE02    |    0x800    |    [CTR-N-HAEP]    |    Miiverse applet
            0000C502    |    0x1408   |    [CTR-N-HEEA]    |    error applet
            0000CD02    |    0xc01    |    [CTR-N-HADA]    |    extrapad applet  
            0000D002    |    0x1000   |    [CTR-N-HKYP]    |    Software Keyboard
            0000D102    |    0x800    |    [CTR-N-HMSP]    |    appletEd
            0000D302    |    0xc03    |    [CTR-N-HCCP]    |    PNOTE_AP
            0000D402    |    0x800    |    [CTR-N-HMCP]    |    SNOTE_AP
            0000D602    |    0x2008   |    [CTR-N-HAAP]    |    mint (eShop applet)
            0000F602    |    0x802    |    [CTR-N-HAGA]    |    Miiverse memolib
            20008A03    |    0x1c01   |    [CTR-P-CTAP]    |    New3DS SAFE_MODE ErrDisp
            20009D02    |    0xa      |    [CTR-N-HBRP]    |    New3DS Internet Browser
            2000C503    |    0x400    |    [CTR-N-HEEA]    |    New3DS SAFE_MODE error applet
            2000D003    |    0x0      |    [CTR-N-HKYP]    |    New3DS SAFE_MODE Software Keyboard
      
***0004009B 00010202    |    0x0      |        <N/A>       |    Mii-data CFA    (2.0.0-2)
####        00010402    |    0x1002   |        <N/A>       |    N/A (9.6.0-24) (7.0.0-13)
***         00010602    |    0x2      |        <N/A>       |    Non-Nintendo TLS Root-CA Certificates CFA    (2.0.0-2)
***         00011202    |    0x0      |        <N/A>       |    N/A    (2.0.0-2)
***         00011302    |    0x0      |        <N/A>       |    N/A    (2.0.0-2)
***         00011502    |    0x0      |        <N/A>       |    N/A    (2.0.0-2)
***         00011702    |    0x0      |        <N/A>       |    N/A    (2.0.0-2)
***         00011802    |    0x0      |        <N/A>       |    N/A    (2.0.0-2)
***         00011B02    |    0x0      |        <N/A>       |    N/A    (2.0.0-2)
***         00011C02    |    0x0      |        <N/A>       |    N/A    (2.0.0-2)
***         00011D02    |    0x0      |        <N/A>       |    N/A    (2.0.0-2)
            00012102    |    0x2404   |        <N/A>       |    N/A
            00013102    |    0x1400   |        <N/A>       |    EULA CFA
***         00014002    |    0x0      |        <N/A>       |    System Font CFA    (2.0.0-2)
***         00014102    |    0x400    |        <N/A>       |    CHN System Font CFA    (4.0.0-7)
***         00014202    |    0x400    |        <N/A>       |    KOR System Font CFA    (4.0.0-7)
***         00014302    |    0x400    |        <N/A>       |    TWN System Font CFA    (4.0.0-7)
***         00015102    |    0x800    |        <N/A>       |    N/A    (7.0.0-13)

000400DB    00010302    |    0x1800   |        <N/A>       |    NGWord bad word list CFA
            00010502    |    0x3800   |        <N/A>       |    Nintendo Zone hotspot list CFA
            00017102    |    0x2402   |        <N/A>       |    CVer
            20016102    |    0x140    |        <N/A>       |    New3DS NVer
      
00040130    00001502    |    0x2000   |    0828builder     |    AM system-module
            00001702    |    0x3002   |    0908builder     |    Config system-module
            00001802    |    0x1c00   |    0710builder     |    Codec system-module
####        00001A02    |    0x1400   |    0430builder     |    DSP system-module    (9.7.0-25) (8.0.0-18)
####        00001B02    |    0x800    |    0328builder     |    GPIO system-module    (9.5.0-23) (8.0.0-18)
            00001D02    |    0x2400   |    0828builder     |    HID system-module
***         00002002    |    0x800    |    0328builder     |    Microphone system-module    (8.0.0-18)
***         00002102    |    0x800    |    0430builder     |    PDN system-module    (8.0.0-18)
            00002402    |    0x2000   |    0710builder     |    AC system-module
            00002602    |    0x2800   |    0828builder     |    StreetPass system-module
            00002702    |    0x1400   |    0828builder     |    CSND system-module
            00002802    |    0x1801   |    0716builder     |    Download Play system-module
            00002902    |    0x3000   |    0828builder     |    HTTP system-module
***         00002A02    |    0x800    |    0328builder     |    MP system-module    (8.0.0-18)
            00002B02    |    0x1c01   |    0908builder     |    NDM system-module
            00002C02    |    0x2809   |    0922builder     |    NIM system-module
            00002D02    |    0x2800   |    0710builder     |    NWM system-module
            00002E02    |    0x1c00   |    0828builder     |    Sockets system-module
            00002F02    |    0x1c00   |    0828builder     |    SSL system-module
            00003102    |    0x1400   |    0828builder     |    PS system-module
            00003202    |    0x2000   |    0710builder     |    friends system-module
            00003302    |    0x2000   |    0828builder     |    IR system-module
            00003402    |    0x2c02   |    0908builder     |    SpotPass system-module
            00003502    |    0x1803   |    0908builder     |    Notifications system-module
            00003702    |    0x1400   |    0710builder     |    RO system-module
            00003802    |    0x1800   |    0828builder     |    act system-module
            00008002    |    0x3800   |    0828builder     |    NS system-module
            20001503    |    0x1c01   |    0718builder     |    New3DS SAFE_MODE AM system-module
            20001602    |    0x2402   |    0908builder     |    New3DS Camera system-module
            20001703    |    0x2c01   |    0718builder     |    New3DS SAFE_MODE Config system-module
            20001803    |    0x1c01   |    0718builder     |    New3DS SAFE_MODE Codec system-module
            20001A03    |    0x1801   |    0718builder     |    New3DS SAFE_MODE DSP system-module
            20001B03    |    0xc01    |    0718builder     |    New3DS SAFE_MODE GPIO system-module
            20001C02    |    0x2803   |    0908builder     |    New3DS GSP system-module
            20001C03    |    0x2401   |    0718builder     |    New3DS SAFE_MODE GSP system-module
            20001D03    |    0x2001   |    0718builder     |    New3DS SAFE_MODE HID system-module
            20001E02    |    0x1000   |    0710builder     |    New3DS i2c system-module
            20001E03    |    0x1001   |    0718builder     |    New3DS SAFE_MODE i2c system-module
            20001F02    |    0x2000   |    0328builder     |    New3DS MCU system-module
            20001F03    |    0x2401   |    0718builder     |    New3DS SAFE_MODE MCU system-module
            20002103    |    0xc01    |    0718builder     |    New3DS SAFE_MODE PDN system-module
            20002202    |    0x2800   |    0710builder     |    New3DS PTM system-module
            20002203    |    0x2801   |    0718builder     |    New3DS SAFE_MODE PTM system-module
            20002302    |    0x1000   |    0710builder     |    New3DS spi system-module
            20002303    |    0x1001   |    0718builder     |    New3DS SAFE_MODE spi system-module
            20002403    |    0x2001   |    0718builder     |    New3DS SAFE_MODE AC system-module
            20002703    |    0x1401   |    0718builder     |    New3DS SAFE_MODE CSND system-module
            20002903    |    0x2801   |    0718builder     |    New3DS SAFE_MODE HTTP system-module
            20002C03    |    0x2401   |    0718builder     |    New3DS SAFE_MODE NIM system-module
            20002D03    |    0x2801   |    0718builder     |    New3DS SAFE_MODE NWM system-module
            20002E03    |    0x1c01   |    0718builder     |    New3DS SAFE_MODE Sockets system-module
            20002F03    |    0x1c01   |    0718builder     |    New3DS SAFE_MODE SSL system-module
            20003103    |    0x1401   |    0718builder     |    New3DS SAFE_MODE PS system-module
            20003203    |    0x2001   |    0718builder     |    New3DS SAFE_MODE friends system-module
            20003303    |    0x1c01   |    0718builder     |    New3DS SAFE_MODE IR system-module
            20004002    |    0x400    |    0828builder     |    New3DS nfc system-module
            20004102    |    0x400    |    0828builder     |    New3DS mvd system-module
            20004202    |    0x401    |    0908builder     |    New3DS qtm system-module
            20008003    |    0x3401   |    0718builder     |    New3DS SAFE_MODE NS system-module
      
00040138    20000002    |    0x42e0   |    [CTR-P-CTAP]    |    New3DS NATIVE_FIRM
            20000003    |    0x3ed1   |    [CTR-P-CTAP]    |    New3DS SAFE_MODE_FIRM
            20000102    |    0x26d0   |    [CTR-P-CTAP]    |    New3DS TWL_FIRM
            20000202    |    0x12d0   |    [CTR-P-CTAP]    |    New3DS AGB_FIRM
      
00048005    42383841    |    0x800    |    DS INTERNET     |    DS Internet (DSi-mode application)
            484E4441    |    0x400    |       dlplay       |    Download Play (DS-mode application)
      
0004800F    484E4841    |    0x2c00   |        <N/A>       |    Nintendo DS Cart Whitelist
            484E4C41    |    0x0      |        <N/A>       |    TWL Version Data

For users on 9.2 wishing to use this list as a reference, you should have the following two titles listed with the following version numbers:

Code:
    Title ID        |   Version   |    Product Code    |    Service Name
----------------------------------------------------------------------------
0004003000009802    |    0x3000   |    [CTR-N-HMME]    |    Home Menu
000400DB00017102    |    0x2420   |        <N/A>       |    CVer

In addition, the following title is the same as the "bluecardfix.cia" that is used to allow blocked DS flashcarts to run again, so if you installed that to sysnand in order to use the GW Blue Cart (or another DS flash cart), the version will read as 0x0.

Code:
    Title ID        |   Version   |    Product Code    |    Service Name
------------------------------------------------------------------------------------------------
0004800F484E4841    |    0x2c00   |        <N/A>       |    Nintendo DS Cart Whitelist

Many thanks to @Krude for providing the NAND dump that I used to compile this, as well as taking the time to thoroughly document the product codes and versions listed in FBI on his sysnand. Without his assistance I would not have this list.
 
Last edited by Aroth,

Urbanshadow

Well-Known Member
Member
Joined
Oct 16, 2015
Messages
1,578
Trophies
0
Age
33
XP
1,723
Country
After going over another user's downgraded 9.2 2DS sysnand, there are three titles that do not get "downgraded" when going from 10.3 to 9.2.

The nfc system-module (O3DS/2DS and N3DS have unique titles), the amiibo settings application and something called fangate_updater (O3DS/2DS only). All three titles were introduced in the 9.3 update, and did not exist when 9.2 was released, so they would need to be manually deleted after the downgrade. There may be others as well for the N3DS, I do not know, not to mention the few titles that received updates between 9.3 and 10.3 that were not part of the 9.0 SOAP response because they were already present on all N3DS systems.

I'm this user. Yay for progress.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    hazbeans @ hazbeans: im new