3dbrew - User contributions [en]

SpotPass

2017-11-17T09:42:23Z

Einstein95:

'''SpotPass''' is a Nintendo 3DS feature that allows the 3DS to automatically download content, notifications, and software when it's in standby mode.(SpotPass may download/upload some content while the 3DS is in "active" mode, but *only* if the currently active app uses SpotPass) SpotPass can upload content as well. Software downloaded with SpotPass is stored on SD card.

SpotPass Internet communications are mostly HTTPS transfers.

In System Settings, you can disable SpotPass automatic title downloading, but it states that important software will still downloaded.(This only disables downloading of free titles via SpotPass)

'nasc.nintendowifi.net' confirmed usages:(not SpotPass related)

*Friends List applet requires this server to be 'Online' (most likely the reason for regular requests to this server)
*Required for initialization of [[eShop]], (for first time eShop users). Not required for using eShop after first use.

In some cases the BOSS module will add the following URL parameter to HTTPS requests, when connected to a [[Nintendo Zone]] AP: "ap=<NZoneApNum>".

== policylist ==
Every time the system connects to the wifi AP, the BOSS ("Background online storage service" = SpotPass) module itself will download the cleartext xml policylist: "https://nppl.c.app.nintendowifi.net/p01/policylist/3/<countrycode>". This policylist contains a list of SpotPass tasks for certain titles. This policylist can control whether the specified tasks are processed at all. The default user-agent used for SpotPass HTTPS requests(including this policylist) is: "PBOS-5.0/<printed hex u64 [[CfgS:GetLocalFriendCodeSeed|LocalFriendCodeSeed]]>-<hex u64 obtained via the friends service>/<text [[CVer|system]] [[NVer|version]]>/<unknown decimal value>/0". No user-agent is used for plaintext HTTP requests with SpotPass.

As of the policylist updated 2017-11-08, this stops the <tt>OlvNotf</tt> task for <tt>000400300000bc00</tt>, <tt>000400300000bd00</tt>, <tt>000400300000be00</tt> for all regions and <tt>basho0</tt> for the [[Home Menu]]. Japan also has the <tt>9ER_NTD</tt> task blocked for いつの間にテレビ (<tt>0004000000034700</tt>).

== Titles Spotpass usage ==
{| class="wikitable"
|-
! Title
! Description
|-
| [[Home Menu]]
| Home Menu uses SpotPass for system notifications, and for uploading data from home-menu shared extdata.
|-
| [[System Settings]]
| System Settings uses SpotPass for uploading data, with this URL: https://npul.c.app.nintendowifi.net/p01/recv/<RegionID>/sendcfg This RegionID is separate from the RegionIDs home-menu uses.
|-
| ?
| Unknown log data is uploaded with this URL: https://logus-p.est.c.app.nintendowifi.net/LogServer_us_live/Upload
|}

== Automatic System Update Download ==
See [[Automatic System Update Download]].

== Content Container ==

SpotPass content must use this container to encrypt the payload and sign it, for content downloads. The cleartext content is stored in [[extdata]]. The format of these headers is big-endian.

=== BOSS Header ===
{| class="wikitable"
|-
! Offset
! Length
! Description
|-
| 0x0
| 0x4
| Magic Number "boss"
|-
| 0x4
| 0x4
| Magic Number 0x10001
|-
| 0x8
| 0x4
| Big-endian filesize
|-
| 0xC
| 0x8
| u64 release date (UNIX timestamp)
|-
| 0x14
| 0x2
| Must always be 0x1
|-
| 0x16
| 0x2
| Padding
|-
| 0x18
| 0x2
| Content header hash type, always 0x2 for SHA-256
|-
| 0x1A
| 0x2
| Content header RSA size, always 0x2 for RSA-2048 (X<<7)
|-
| 0x1C
| 0xC
| First 12 bytes of the CTR
|}

Data following the BOSS header is encrypted with AES-CTR. The first 12 bytes of the CTR are from offset 0x1C of the header, while the last word of the CTR in big-endian is 0x1. The CTR from the header is random per file, and an unique random CTR is used each time the content is updated. The cleartext data begins with the content header.

=== Content Header ===
{| class="wikitable"
|-
! Offset
! Length
! Description
|-
| 0x0
| 0x10
| ?
|-
| 0x10
| 0x2
| Used for generating the extdata filepath.
|-
| 0x12
| 0x20
| SHA-256 hash
|-
| 0x32
| 0x100
| RSA-2048 signature over the above hash
|}

The first 0x10-bytes are all-zero except the first byte which is usually 0x80. It's unknown what the first 0x10-bytes are used for.

The hash at offset 0x12 hashes the 0x12-byte data at offset 0x0 followed by a zero u16. The RSA signature is signed by Nintendo. Following this header is the actual content payload, which is written to a cleartext file under the [[extdata]] /boss directory. The data following the payload header is written to extdata, but it's unknown what data is written to the extdata file before the content payload.

=== Payload Content Header ===
{| class="wikitable"
|-
! Offset
! Length
! Description
|-
| 0x0
| 0x8
| ProgramID
|-
| 0x8
| 0x4
| Usually zero?
|-
| 0xC
| 0x4
| Content datatype, used for filtering with [[BOSSU:GetNsDataIdList]].
Usually 0x10001? (observed 0x20001 in eShop strings)
|-
| 0x10
| 0x4
| Size of the payload after this header
|-
| 0x14
| 0x4
| [[BOSS_Services|NsDataId]], used for generating the extdata filepath.
|-
| 0x18
| 0x4
| ?
|-
| 0x1C
| 0x20
| SHA-256 hash
|-
| 0x3C
| 0x100
| RSA-2048 signature over the previous SHA-256 hash
|}

This signature is signed by Nintendo with the same key-pair as the content header.

The hash at offset 0x1C hashes the 0x1C-byte data at offset 0x0 followed by a zero u16, followed by all of the remaining cleartext data following this header(the actual content data).

[[Category:Nintendo Software]]

Serials

2017-10-20T05:51:32Z

Einstein95: /* Physical Serial */

This page talks about the 3DS products' serial number and model number structures (the console, manual, accessories, games, etc...).

== Console Serial Numbers ==

A 3DS console serial number is composed of at least two letters followed by nine decimal digits. The ninth digit is a "check digit", meaning that it is derived from the other digits.

The check digit is an industry-standard algorithm, the one used for UPC codes. To calculate the check digit of a 3DS console, separate the non-check digits into "odd" and "even" groups, where the "odd" group is digits in odd-numbered positions, and the "even" group is digits in even-numbered positions. (The first digit is "odd", with "first" representing "1".)

After separating the digits, add the digits in each group together. Multiply the sum of the even digits by 3, then add the sum of the odd digits. To calculate the check digit, take this value modulo 10, and if not 0, subtract from 10.

Example: CW404567772

The non-check digits are 40456777. Separating into odd and even groups, we get the following:

Odds: 4 + 4 + 6 + 7 = 21
Evens: 0 + 5 + 7 + 7 = 19

Applying the algorithm, we get ((3 * 19) + 21) % 10 = 8, which is not 0, thus 10 - 8 = 2, matching the example's check digit.

The letter prefixes are a letter specifying the device, followed by one letter specifying the region in which it was sold. In some regions, a third letter is present; a current guess is that this letter distinguishes among factories for a given sales region. Note that several different sales regions' console may be considered to be the same region for region-locking purposes, such as Europe and Australia.

The current serial number scheme began with the DSi, hence its listing in the tables below. Among standalone consoles, the Wii U belongs to this scheme as well; the Switch started a new scheme.

{| class="wikitable"
! Model !! Device Prefix (Retail) !! Device Prefix (Dev/Test)
|-
| ''DSi'' || T || V
|-
| ''DSi XL/LL'' || W || ''unknown''
|-
| ''Wii U'' || F || ''unknown''
|-
| 3DS || C || E
|-
| 3DS XL/LL || S || R
|-
| 2DS || A || P
|-
| New 3DS || Y || Y
|-
| New 3DS XL/LL || Q || Q
|-
| New 2DS XL/LL || N || N
|}

Test ("Panda") units with the same prefix as retail can be distinguished by test units having 00 or 01 as the first two digits of the serial number portion. 00 was used with the New 3DS and New 3DS XL for test units; 01 was used with the New 2DS XL test unit. Preview versions of the N2DS XL given out to the press had 01; these appear to have been test units with the development titles deleted.

Old 3DS development systems (Partner-CTR, IS-CTR-BOX, IS-SPR-BOX) use the "E" and "R" prefixes like test systems, but have 90 (Partner-CTR) or 91 (IS-CTR-BOX, IS-SPR-BOX) as their first two digits. Similarly, the main New 3DS development unit, IS-SNAKE-BOX, uses the Y prefix (same as retail) with 91. It is currently unknown what is the serial number format of the rare New 3DS XL development system (IS-CLOSER-BOX).

{| class="wikitable"
! Sales Region !! Region Lock !! Region Suffix
|-
| Japan || Japan || JF, JH, JM
|-
| North America || North America || W
|-
| Middle East / Southeast Asia || North America || S
|-
| Europe || Europe || EF, EH, EM
|-
| Australia || Europe || AH, AG
|-
| South Korea || Korea || KF, KH, KM
|-
| China (iQue) || China || CF, CH, CM
|}

== Console Models ==

{| class="wikitable"
! Device !! Product Code
|-
| ''DS'' || NTR
|-
| ''DS lite'' || USG
|-
| ''DSi'' || TWL
|-
| ''DSi XL/LL'' || UTL
|-
| ''Wii U'' || WUP
|-
| 3DS || CTR
|-
| 3DS XL/LL || SPR
|-
| 2DS || FTR
|-
| [[New 3DS]] || KTR
|-
| [[New 3DS]] XL/LL || RED
|-
| New 2DS XL/LL || JAN
|}

The DS had the product code NTR (short for Nitro), so we see the TR is recurring.

== Title ID and Unique ID ==
''see [[Titles]]''

== NCCH Product Code ==

This serial is similiar to the "physical serial" described later in this page; it is the canonical identifier for a specific title in the field of business formalities with Nintendo, but this is not reflected in the 3DS's software architecture (where it is vastly unused in favor of the Title ID: it is therefore considered the successor of the "internal name" contained in ROMs of previous handhelds), is not guaranteed to be unique.

The product code is located in a [[NCCH]]'s header (not its ExHeader).

The product code "CTR-P-CTAP" is the default generic product code for NCCH files. Most [[NCSD|NCCHs apart from the first one]] in a title are generally CTR-P-CTAP.
Referring to "the product code of a title" is therefore a simplification for "the product code of the NCCH in its first partition".

So, for example, a Japanese copy of Ridge Racer 3D would have a product code of "CTR-P-ARRJ" and a serial of "LNA-CTR-ARRJ-JPN".

A Nintendo-assigned product code follows this format, however, there is no requirement for a product code to match or resemble this structure as long as it's within the length limit:

[CTR/KTR]-[Category letter]-[Type][Identifier][Region]-[Sub ID]

{| class="wikitable"
! Category letter !! Description
|-
| P || Cartridge software, or downloadable versions of them.
|-
| N || Digital-only releases, including [[Title list|system applications and applets]].
|-
| M || [[DLC]]
|-
| T || [[eShop Demos]], excluding so-called "special demos" which are category N.
|-
| U || [[Title list#0004000E - Add-on Content (Updates)|Patches]] for category P titles.
|}

The "sub ID" only applies to DLC, demos, and local copies of Download Play titles. It's a 2-digit number associated with the [[Title list|Title ID Variation]].

See the next chapter for explanation of the other components of the Product Code.

== Physical Serial ==

[Product][Retail/Demo]-CTR-[Type][Identifier][Region]-[Label Region]

{| class="wikitable"
! Field !! Length !! Description !! colspan=2 | Values
|-
|-align=center
| rowspan="6" | Product
| rowspan="6" | 2
| rowspan="6" | Product type
|-
| LN || Cartridge
|-
| MA || Instruction manual
|-
| TS || Game box
|-
| FA || Leaflet
|-
| MK || Quick-start Guide
|-align=center
| rowspan="3" | Retail/Demo
| rowspan="3" | 1
| rowspan="3" |
|-
| A || Retail
|-
| Z || Demo
|-align=center
| rowspan="3" | CTR/KTR
| rowspan="3" | 3
| rowspan="3" | Platform
|-
| CTR || 3DS
|-
| KTR || New 3DS
|-align=center
| rowspan="11" | Type
| rowspan="11" | 1
| rowspan="11" |
|-
| A || Retail
|-
| B ||
|-
| C || part of the default serial 'CTAP'
|-
| E ||
|-
| H || used for built in applications like [[Mii Maker]]
|-
| J || normal eShop Title
|-
| K || unknown, seen in Mighty Gunvolt
|-
| S || usually a 3D Classics eShop title
|-
| P || used with GBA eShop titles
|-
| T || used with NES eShop titles
|-align=center
| Identifier
| 2
| colspan=3 |Game name (two alphanumeric characters)
|-align=center
| rowspan="10" | Region
| rowspan="10" | 1
| rowspan="10" |
|-
| E || English (US)
|-
| P || PAL (Europe/Australia)
|-
| J || Japanese (Japan)
|-
| K || Korean (Korea)
|-
| C || Chinese (China/Taiwan)
|-
| Y || Multiple regions
|-
| W || Tai'''w'''an(?) (Taiwan/Hong Kong)
|-
| Z || Multiple regions
|-
| A || All (region-free)
|-
|-align=center
| rowspan="9" | Label Region
| rowspan="9" | 3
| rowspan="9" |
|-
| USA || USA
|-
| EUR || Europe
|-
| CAN || Canada
|-
| JPN || Japan
|-
| KOR || Korea
|-
| TWN || Taiwan/Hong Kong
|-
| CHN || China
|-
| UKV || United Kingdom version(?) (United Kingdom)
|}

=== Electronic Manuals ===

Some eShop titles have [[NCCH#CFA|Electronic Manuals]] which store the product code at the end of the 'Health & Safety' section of the manual. However, product codes can differ from the above format as shown below:

CTR-[P/N/T/U]-[Type][Identifier][Region]-[Region]-[Digit]

CTR-[Type][Identifier][Region]-[Region]-[Digit]

* P/N/T/U - Same as in product code structure
* [Type][Identifier][Region] - Same as in serial structure
* [Region] - A three character representation of the title region, i.e. 'EUR' (not always present)
* [Digit] - A single digit usually '1' or '0' (not always present)

'''Note:''' These alternate versions of the product code, potentially found in [[NCCH#CFA|Electronic Manuals]] don't represent the actual product code, as found in the game's CXI. They are only found in the game's Home Menu manual, and on the game's packaging and external labeling.

==Back of Card Serial==
AREPY10111

AAAABCDEEE (presumably)

[Identifier]-[Production Month]-[Production Year]-[Revision]-[Production Run?]

APT:IsTitleAllowed

2017-09-19T06:31:53Z

Einstein95:

=Request=
{| class="wikitable" border="1"
|-
! Index Word
! Description
|-
| 0
| Header code [0x01050100]
|-
| 1-4
| [[Filesystem_services#ProgramInfo|ProgramInfo]]
|}

=Response=
{| class="wikitable" border="1"
|-
! Index Word
! Description
|-
| 0
| Header code
|-
| 1
| Result code, hard-coded to always return 0 with [[10.4.0-29|10.4.0-X]].
|-
| 2
| u8, Allowed (0 = not allowed, 1 = allowed)
|}

=Description=
Gets whether a title is allowed for launch.

As of [[10.4.0-29]], USA+EUR IronFall v1.0 and v1.1 are the only titles to be blocked. See [[10.4.0-29|here]] for implementation details. The table used with this as of 10.4.0-29 just contains <uniqueid for each Ironfall title>, with value 0x1 at entry+4 for each one.

[[11.6.0-39]] added all three regions of "Flipnote Studio 3D".

If this command returns an error, Home Menu will handle that the exact same way as if the output u8 was value 0(one way this could happen is if v10.4 Home Menu is installed with a pre-v10.4 NS).

Home Menu

2017-01-28T12:24:33Z

Einstein95: /* Home-menu SpotPass usage */

The '''Home Menu''' is the heart of the Nintendo 3DS. From there one can start games, applications, and access various processes including the friends list. It is launched by [[NS]], and is always running in the background in 3DS-mode except when other programID-high 00040030 applications like Internet Browser, Friend-List, etc are running. Home Menu is still running while [[System Settings]] is running, however the System Settings application does not allow directly returning to home-menu. The system will normally re-launch Home Menu when the Home Menu process crashes/terminates. When this re-launch occurs while Home Menu is active, Home Menu displays an error message which says to manually reboot the system.

== System Versions ==
Nintendo devised a system, whereby updates would be delivered via two channels:
*Card Updates (CUP) - The Nintendo 3DS is updated with data from an [[System Update CFA|update partition]] on retail gamecard title.
*Network Updates (NUP) - The Nintendo 3DS is updated by downloading data from Nintendo's [[Title list|CDN]].

CUPs will only deliver updates to core features, such as the Home Menu, [[Download Play]] etc. CUPs will not deliver updates to Network features, such as [[System Transfer]], [[Internet Browser]], [[StreetPass Mii Plaza]] or [[EShop|eShop]].

NUPs can deliver updates to core features as well as (updated) Network Features.

As a result of deciding to make a distinction between what content could be updated and how, Nintendo split the system version displayed by [[System Settings]] into two parts: [[CVer]] (Console Version) and [[NVer]] (Network Update Version). Represented as:
<CVer Major>.<CVer Minor>.<CVer Micro>-<NUP Version><NUP Region>

The Console Version represents the version of the collectively installed core features. And the NUP Version represents the version of the collectively installed network features.

So if a 3DS' System Firmware read '''2.1.0-2U''', it would indicate a console version of '''2.1.0''' and a NUP version of '''2U'''.

NOTES:
* CUPs can only update core content, so [[NVer]] is never updated with CUPs.
* NUPs will not update [[NVer]] if network features are not updated. (Best seen with the USA vs JPN/EUR 6.0.0 NUP)

CUPs are implemented by adding a [[System Update CFA]] to retail NCSD gamecard images. Nintendo generally creates CUPs after NUPs are released.

When updating the system from 4.5.0-6 to 4.5.0-10, the following titles are updated(in the order of title download+install): [[Health and Safety Information]], [[Nintendo 3DS Camera]], [[eShop]], [[System Transfer]], [[Internet Browser]], [[Title_list|0004009B00014102]], [[Title_list|0004009B00014202]], [[Title_list|0004009B00014302]], [[NVer]], and [[FIRM|AGB_FIRM]].

=== System Versions List ===
{| class="wikitable"
|-
! System version
! Home Menu title version
! Release date
! Changelog
! System security [[3DS_System_Flaws|flaws]] fixed*
! Userland security [[3DS_Userland_Flaws|flaws]] fixed*
! 3DS-mode homebrew affected*
! CUP Released
! CDN Availability
! CDN Post Date
|-
| [[1.0.0-0|1.0.0-0]]
| 0
| February 26, 2011
| Shipped with 3DS on launch
|
|
|
| Yes
| Available
| February 18, 2011
|-
| [[1.1.0-1|1.1.0-1]]
| 0
| February ?, 2011
| General bug fixes
Added 3D Video title to menu. ("For a Limited Time Only")
|
|
|
| Yes
| Available
| March 1, 2011
|-
| [[2.0.0-2|2.0.0-2]]
| 1029
| June 6/7, 2011
| [[eShop]] added, web browser available, [[System Transfer]] added. Full DSiWare data management available. [[Automatic_System_Update_Download|Automatic]] downloading for system updates added. Video stubbed.
|
|
|
| No
| Available
| June 6, 2011
|-
| [[2.1.0-3|2.1.0-3]]
| 2049
| June 15, 2011
| Fixes the Ridge Racer freeze.
|
|
|
| Yes
| Available
| June 15, 2011
|-
| [[2.1.0-4|2.1.0-4]]
| Not updated
| July 25, 2011
| System stability improvements and other adjustments.
|
|
|
| No
| Available
| July 25, 2011
|-
| [[2.2.0-X|2.2.0]]
| ?
| November 6, 2011
| CUP Only Release. Add "join game" feature to [[Friend List]]. Update from some game cards such as Super Mario 3D Land.
|
|
|
| Yes
| Unavailable
| ?
|-
| [[3.0.0-5|3.0.0-5]]
| 4111
| December 7, 2011
| Added 3D video recording to the camera title, updated Mii Streetpass Plaza, [[System Transfer]] between 3DS systems available, improved eShop, home menu QR code scanning with QR codes containing URLs. [[Nintendo Zone]] is now always accessible, 3D video streaming support was added to NZone. This added support for running GBA VC titles via AGB_FIRM as well, support for GBA VC titles was also added to NATIVE_FIRM.
|
|
|
| Yes
| Available
| December 7, 2011
|-
| [[3.0.0-6|3.0.0-6]]
| Not updated
| December 21, 2011
| Only StreetPass Mii Plaza and the [[NVer]] title were updated. From Nintendo's release notes: "System stability improvements and other adjustments".
|
|
|
| No
| Available
| December 21, 2011
|-
| [[3.1.0-6|3.1.0-6]]
| Unknown
| Unknown
| Unknown. Sighted preinstalled on some early European 3DS XLs.
|
|
|
| ?
| Unknown
| Unknown
|-
| [[4.0.0-7|4.0.0-7]]
| 5131
| April 24, 2012
| Add folders to Home Menu, game patching added, buy more expensive games than 1000 yen in JPN. System titles for CHN, TWN, and KOR became available.
| Yes
|
|
| Yes
| Available
| April 24, 2012
|-
| [[4.1.0-8|4.1.0-8]]
| Not updated
| May 14, 2012
| From changelog: "improvements to overall system stability and other minor adjustments". Once updated to [[4.1.0-8]], the parental-controls PIN is no longer required for future system updates.
| Yes
|
|
| Yes
| Available
| May 14, 2012
|-
| [[4.2.0-9|4.2.0-9]]
| 6146
| June 26, 2012
| Improved eShop safety for entering credit-card info, and behind the scenes improvements. Stored CC info will be deleted by this updated eShop, and can be re-entered again.
|
|
|
| Yes
| Available
| June 26, 2012
|-
| [[4.3.0-10|4.3.0-10]]
| Not updated
| July 24, 2012
| Updated eShop, bad word list and NZone hotspot list updated.
|
|
|
| Yes
| Available
| July 24, 2012
|-
| [[4.4.0-10|4.4.0-10]]
| Not updated
| September 19, 2012
| NZone hotspot list updated and TWL_FIRM updated for blocking flash cards.
|
|
|
| Yes
| Available
| September 19, 2012
|-
| [[4.4.0-10|4.4.0-10C]]
| Not updated
| October 17, 2012
| China-only, the *only* updated title was [[System Settings]]. This title was updated to a version already available in TWN/KOR.
|
|
|
| ?
| Available
| October 17, 2012
|-
| [[4.5.0-10|4.5.0-10]]
| Not updated
| December 4, 2012
| Flash-card block via updated TWL_FIRM and whitelist. NZone hotspot list updated as well.
|
|
|
| Yes
| Available
| December 4, 2012
|-
| [[5.0.0-11|5.0.0-11]]
| 7172
| March 25, 2013
| Many system titles including NATIVE_FIRM were updated, multiple vulnerabilities were fixed as well.
| Yes
|
| Yes
| No
| Available
| March 25, 2013
|-
| [[5.1.0-11|5.1.0-11]]
| Not updated
| April 4, 2013
| NATIVE_FIRM and NS were updated. According to the official change-log: "Resolves an issue that may prevent access to the System Settings or other features."
| No
|
| No
| Yes
| Available
| April 4, 2013
|-
| [[6.0.0-11|6.0.0-12 (-11U)]]
| 8198
| June 17, 2013
| Official change-log: "Users can now back up save data for downloadable versions of Nintendo 3DS software and most Virtual Console games". For EUR/JPN, the [[StreetPass Mii Plaza]] application and the [[Nintendo 3DS Camera]] application were updated. Other titles for all regions were updated as well.
| Yes
|
|
| No
| Available
| June 17, 2013
|-
| [[6.1.0-11|6.1.0-12 (-11U)]]
| Not updated
| June 27, 2013
| Official change-log: "Further improvements to overall system stability and other minor adjustments have been made to enhance the user experience."
|
|
|
| Yes
| Available
| June 27, 2013
|-
| [[6.1.0-12U]]
| Not updated
| July 11, 2013
| This USA-only update added the updated network features applications which were first released in JPN/EUR with the [[6.0.0-11|6.0.0-12 NUP]] update.
|
|
|
| No
| Available
| July 11, 2013
|-
| [[6.2.0-12]]
| Not updated
| August 6, 2013
| This update added support for the StreetPass relay feature, updated TWL_FIRM, and updated the Nintendo Zone hotspots list.
|
|
|
| Yes
| Available
| August 6, 2013
|-
| [[6.3.0-12]]
| Not updated
| September 13, 2013
| See [[6.3.0-12|this]].
| No
|
| No
| No
| Available
| September 13, 2013
|-
| [[6.4.0-12]]
| ?
| November 11, 2013
| See [[6.4.0-12|this]](Only for the KOR and TWN regions).
|
|
|
| No
| Available
| November 11, 2013
|-
| [[7.0.0-13]]
| 9230
| December 9, 2013
| See [[7.0.0-13|this]].
| Yes
| Yes
|
| No
| Available
| December 9, 2013
|-
| [[7.1.0-14]]
| Not updated
| December 19, 2013
| See [[7.1.0-14|this]].
| No
|
|
| Yes
| Available
| December 19, 2013
|-
| [[7.1.0-15]]
| Not updated
| January 22, 2014
| See [[7.1.0-15|this]].
| No
|
| No
| No
| Available
| January 22, 2014
|-
| [[7.1.0-16]]
| Not updated
| February 26, 2014
| See [[7.1.0-16|this]].
| No
|
| No
| No
| Available
| February 26, 2014
|-
| [[7.2.0-17]]
| Not updated
| May 12, 2014
| See [[7.2.0-17|this]].
|
|
| No
| Yes
| Available
| May 12, 2014
|-
| [[8.0.0-18]]
| Not updated
| July 7, 2014
| See [[8.0.0-18|this]].
| No
|
| No
| Yes
| Available
| July 7, 2014
|-
| [[8.1.0-18]]
| Not updated
| July 24, 2014
| See [[8.1.0-18|this]].
| No
|
| No
| Yes
| Available
| July 24, 2014
|-
| [[8.1.0-19]]
| Not updated
| August 7, 2014
| See [[8.1.0-19|this]].
| No
|
| No
| No
| Available
| August 7, 2014
|-
| [[8.1.0-0 New3DS]]
| Not updated
| September 26, 2014
| See [[8.1.0-0 New3DS|this]].
|
|
| No
| No
| Available
| September 26, 2014
|-
| 8.1.0-19
| Not updated
| October 2, 2014
| Japan-only "update", see [http://yls8.mtheall.com/ninupdates/reports.php?date=10-02-14_02-05-03&sys=ctr here]. The only change was that a new title([[New_3DS]]-only system application) was added, CVer/NVer titles were not even updated. The initial version of this [[Title_list|title]] is a stub.
| No
|
| No
| No
| Available
| October 2, 2014
|-
| [[9.0.0-20]]
| v11272
| October 6, 2014
| See [[9.0.0-20|this]].
|
|
| No
| Yes (K)
| Available
| October 6, 2014
|-
| [[9.1.0-20J]]
| v14336(JPN-region title)
| October 10, 2014
| Japan-only, see [[9.1.0-20J|this]].
| No
|
| No
| No
| Available
| October 10, 2014
|-
| [[9.2.0-20]]
|
| October 29, 2014
| See [[9.2.0-20|this]].
| No
|
| No
| Yes (U/E)
| Available
| October 29, 2014
|-
| [[9.3.0-21]]
|
| December 8, 2014
| See [[9.3.0-21|this]].
| Yes
|
| Yes
| No
| Available
| December 8, 2014
|-
| [[9.4.0-21]]
|
| December 11, 2014
| See [[9.4.0-21|this]].
| No
|
| No
| No
| Available
| December 11, 2014
|-
| [[9.5.0-22]]
|
| February 2, 2015
| See [[9.5.0-22|this]].
| Yes
|
|
| Yes (J/U/E)
| Available
| February 2, 2015
|-
| [[9.5.0-23]]
|
| March 2, 2015
| See [[9.5.0-23|this]].
| No
| Yes
|
| As above
| Available
| March 2, 2015
|-
| [[9.6.0-24]]
|
| March 23, 2015
| See [[9.6.0-24|this]].
| See [[9.6.0-24|here]].
|
|
| Yes (J/U/E)
| Available
| March 23, 2015
|-
| [[9.7.0-25]]
|
| April 20, 2015
| See [[9.7.0-25|this]].
| Probably none?
|
| No
| Yes (J/U/E)
| Available
| April 20, 2015
|-
| [[9.8.0-25]]
|
| June 1, 2015
| See [[9.8.0-25|this]].
| No
| No
| No
| Yes (J/U/E)
| Available
| June 1, 2015
|-
| [[9.9.0-26|9.9.0-26]]
|
| July 13, 2015
| See [[9.9.0-26|this]].
|
|
|
| Yes (J/U/E/K)
| Available
| July 13, 2015
|-
| [[10.0.0-27|10.0.0-27]]
|
| September 8, 2015
| See [[10.0.0-27|this]].
| Yes
| No
| No
| No
| Available
| September 8, 2015
|-
| [[10.1.0-27|10.1.0-27]]
|
| September 14, 2015
| See [[10.1.0-27|this]].
| No
| No
| No
| Yes (J/U/E/K)
| Available
| September 14, 2015
|-
| [[10.2.0-28|10.2.0-28]]
|
| October 19, 2015
| See [[10.2.0-28|this]].
|
|
|
| Yes (J/U/E)
| Available
| October 19, 2015
|-
| [[10.3.0-28|10.3.0-28]]
|
| November 9, 2015
| See [[10.3.0-28|this]].
|
|
|
| Yes (J/U/E)
| Available
| November 9, 2015
|-
| [[10.4.0-29|10.4.0-29]]
|
| January 18, 2016
| See [[10.4.0-29|this]].
| Yes
| Launching old Ironfall was blocked.
| Yes
| No
| Available
| January 18, 2016
|-
| [[10.5.0-30|10.5.0-30]]
|
| January 25, 2016
| See [[10.5.0-30|this]].
|
|
|
| Yes (J/U/E)
| Available
| January 25, 2016
|-
| [[10.6.0-31|10.6.0-31]]
|
| February 22, 2016
| See [[10.6.0-31|this]].
| Yes
| Yes
| Yes
| Yes (J/U)
| Available
| February 22, 2016
|-
| [[10.7.0-32|10.7.0-32]]
|
| March 14, 2016
| See [[10.7.0-32|this]].
| No
| Yes
| Yes
| Yes (J/U/E)
| Available
| March 14, 2016
|-
| [[11.0.0-33|11.0.0-33]]
|
| May 9, 2016
| See [[11.0.0-33|this]].
| Yes
| No
| Yes
| Yes (J/U/E)
| Available
| May 9, 2016
|-
| [[11.1.0-34|11.1.0-34]]
|
| September 13, 2016
| See [[11.1.0-34|this]].
|
|
|
| Yes (J/U/E)
| Available
| September 13, 2016
|-
| [[11.2.0-35|11.2.0-35]]
|
| October 24, 2016
| See [[11.2.0-35|this]].
|
|
|
| No
| Available
| October 24, 2016
|}

"[[3DS_System_Flaws|System]]/[[3DS_Userland_Flaws|Userland]] security flaws fixed*": This includes known flaws, and any fixed flaws discovered via code bin-diff.

"[[3DS_System_Flaws|System]]/[[3DS_Userland_Flaws|Userland]] security flaws fixed*" and "3DS-mode homebrew affected" only apply to the changes done with that specific system-update("affected" does not include hax codebases breaking *just* due to updated codebins).

[[Category:Nintendo Software]]

== Auto-Boot Function ==
When the Home Menu is initially loaded by [[NS]], it checks the gamecard ExeFS:/[[SMDH|icon]] for the auto-boot flag. If the auto-boot flag is set, it will load the application on the cartridge and the home menu will not remain running in the background, or at least not in an operational state. Using software cues to return to the home menu, or sleep menu while in this state, causes a shutdown.

Notable features of demo titles:
*Auto-boot demos generally disable the functionality of the home button.
*The ''New Super Mario Bros 2'' demo, retained the functionality of the home button, and had an timer which triggered the demo to quit after a period of inactivity.

Auto-boot cartridges, can bypass some of the functions of the Home Menu. Auto Booted software:
* Doesn't show usage history in the [[Activity Log]]
* Bypasses Parental controls
* Bypasses Forced Game Card Updates
* Bypasses Initial 3DS Setup
* The console does not have a friends list presence.
* Is still subject to region lock(see below).

Region lock is still active, so the home menu will refuse to launch demos with incorrect region lock will not load, displaying "An Error has Occurred". However, game card update partition checks are not done, which allows launching demos that have region free encoding, but have an alternate(or even invalid) region update partition.

The following auto-boot paths can be used by Home Menu, checked in the same order listed below(the above gamecard auto-boot is checked before this):
{| class="wikitable"
! Key-combo / requirements for this path
! Description
|-
| R, L, and X
| This launches [[System Settings]] for touchscreen calibration.
|-
| R, L, and Y
| This launches [[System Settings]] for circlepad calibration.
|}

The following is only checked when the low u16 from [[Config_Savegame|config]] block 0x00110000 is value zero(normally this is non-zero). Thus, the below is only handled when a system setup is required.
{| class="wikitable"
! Key-combo / requirements for this path
! Description
|-
| R, X, Y, A, and B, a 3DS gamecard must be inserted as well.
| This launches the gamecard application. Note that pressing the HOME button in the gamecard application launched this way will only result in the system shutting down.
|-
| This is used when the above path isn't used.
| This launches System Settings for the system setup.
|}

== Region Lockout ==

One of the Home Menu's functions, is to regulate region lockout. The region lockout data for any given title is held in the [[SMDH#BNR Region|ICN data]]. There are 6 regions of which have their own region lockout, Japan, USA, Europe(including Nintendo Australia), China, Taiwan and Korea. There is also a value which makes a title exempt from region lockout, and consequently accessible from any region of 3DS.

The region-field stored in the [[SMDH|ICN-data]] is only checked when Home Menu itself launches a title, not when other titles use NS to have Home Menu launch titles. This isn't actually useful for gamecard region-free however, due to the gamecard system-updates, see below.

Also note that while some gamecard games are mostly region-free(main CXI is identical for all regions of the gamecard), those gamecards can't actually be launched with all 3DS regions due to the gamecard system-update, see below. Note that the main CXI being identical for all regions of a gamecard also means the savedata keyY is identical for all regions of that gamecard too(except for old system-version <v2.2 games, in some cases, due to different cardIDs).

=== Effects of Region Lockout ===
Every 3DS title regardless of location (NAND/SD Card/Game Card) is subject to region lockout scrutiny by the Home Menu. And the home menu treats 'out-of-region' titles by simply refusing to show them on the home menu. No messages are shown on the home menu to notify the user, the title is simply ignored. However out-of-region SD Card titles, will appear and quickly disappear, while all the SD Titles are being processed. In cases where access to the home menu GUI is not needed to launch the title (like in the case of kiosk demos), the home menu states an error has occurred, and launching of the title is stopped.

=== Game Card Updates ===
Either intentionally a region lock mechanism or not, the function which checks the game card update partition returns an error when it is detected the update is for a region other than the 3DS's region (Most likely triggered by the absence of the correct CVer title). And errors returned from checking the update partition, will result in the home menu displaying "This Game Card cannnot be used", when the user attempts to launch the title.

== Home-menu [[SpotPass]] usage ==

Home-menu originally used two domains with HTTPS for SpotPass. SpotPass stores this content in Home-menu's NAND shared extdata.

* The system notifications are downloaded from: <nowiki>https://a248.e.akamai.net/f/248/103046/10m/npdl.c.app.nintendowifi.net/p01/nsa/<regionID>/<filename>/<langcode>/<filename></nowiki> Where langcode is the two-character language codes from [[Config Savegame#Languages|config]], and regionID is from the below table. <filename> is bashoX/sysmsgX where X is 0-3.
* https://pls.c.shop.nintendowifi.net/pl/upload This URL is used for uploading data from the home menu NAND shared extdata, it's unknown what this is used for. This data is uploaded every 24 hours.
* <nowiki>https://npul.c.app.nintendowifi.net/p01/recv/<regionID>/<filename></nowiki> This is used for uploading unknown data from extdata. <filename> can be one of the following:
** "phu"
** "tiu" The POST data contains a list of [[BOSS_Services|BOSS]] taskIDs etc. This seems to be only for Nintendo titles?(system+eShop apps)
** "splu"
** "sendmgn" For this it appears SpotPass does a HTTP POST with data originally from Launcher.dat?

{| class="wikitable"
|-
! Region
! ID
|-
| JPN
| gWr4JXxb2mKTG3lq
|-
| NA
| uuI82221UKkqmtbp
|-
| EUR / Others
| UrXSeurnxhPrq7AS
|}

The SpotPass content payload for notifications begin with a header, followed by an [[SMDH|icon]] and the UTF-16 text, and various metadata.

=== VersionList ===
During startup, Home Menu loads "/versionList.dat" from NAND extdata 0xf000000e. This is downloaded via SpotPass, the file-data downloaded via HTTPS here is raw (no SpotPass container):
* Retail: [https://tagaya-ctr.cdn.nintendo.net/tagaya/versionlist]
* Dev-unit: [https://tagaya-dev-ctr.cdn.nintendo.net/tagaya/versionlist] The titles listed in this are not available on the [[Title list|normal]] CDN.

This is a list of title-updates available on the eShop, for regular app titles and update-titles. This is what Home Menu checks to determine whether the currently selected application needs to be updated or not. When an Internet connection is not available or wifi is disabled, Home Menu will skip VersionList handling/messages when you launch applications.

File structure:
{| class="wikitable"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x10
| The first u32 is normally 0x1, the rest is normally all-zero.
|-
| 0x10
| <Filesize-0x10>
| Title entries, 0x10-bytes each.
|}

Title entry structure:
{| class="wikitable"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x8
| u64 TitleID
|-
| 0x8
| 0x4
| u32 titleversion
|-
| 0xC
| 0x4
| Unknown u32, usually zero?
|}

=== [[BOSS_Services|BOSS]] usage notes ===
Home Menu uses 4 hard-coded NsDataIds: 0x1, 0x2, 0x3, and 0x4, under a loop in the same function for writing to "bashotorya.dat".

== Automatic System Update Download ==
See [[Automatic System Update Download]].

== Home Menu Error Messages ==
{| class="wikitable"
|-
! Dialog Text
! Description
|-
| "An error has occured. Please save your data ... then restart the system"
| This dialog is displayed when a system applet(including Home Menu) crashes/terminates. This dialog is also displayed for system errors as well.
|}

== Home Menu Themes ==
See [[Home_Menu/Themes|here]].

As of [[11.0.0-33]] Home Menu themes are only supported with USA, EUR, and JPN. CHN Home Menu was last updated with v7.0, and TWN doesn't even have a Home Menu settings menu(just the old screen brightness config menu + an [[amiibo Settings]] icon on the right side of the browser icon).

KOR Home Menu doesn't have the theme-settings menu button. While this does have the theme handling code, it isn't actually usable since extdataID 0x0 is used for theme-extdata for non-<JPN/USA/EUR> regions(which is invalid).

== Home Menu [[System_SaveData|NAND]] savedata ==
=== Launcher.dat ===
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x1
| Launcher.dat format version.
|-
| 0x1
| 0x1
| Padding?
|-
| 0x2
| 0x2
| Unknown, normally 0x1.
|-
| 0x4
| 0x4
| Unknown, normally 0x0.
|-
| 0x8
| 0xB40
| 360 u64s, list of titleIDs. For an unused entry, the u64 value is ~0(in that case, the corresponding entries at 0xD9A/0x106A for this titleID are not used either). This is used for the icons displayed on the main Home Menu screen.
|-
| 0xD9A
| 0x2D0
| Array of 360 s16 fields, each one corresponds to the titleIDs at the array located at offset 0x8. This is used for icon position, 0x0 for the very first icon, 0x1 for the next one and so on. This is completely linear, no X/Y coordinates. Implemented with the format-version for [[4.0.0-7|4.0.0-X]].
|-
| 0x106A
| 0x168
| Array of 360 s8 fields, each one corresponds to the titleIDs at the array located at offset 0x8. This is used for icon position. When an s8 here is -1(which is the normal value), the icon is located with the first chunk of icons(outbuf+0), otherwise the base address is outbuf+0xB40+<s8val*0x1E0>(which is equivalent to 60 icons * s8val). Implemented with the format-version for [[4.0.0-7|4.0.0-X]].
|}

== SD ExtData ==
The SD ExtData [[Extdata#Filesystem|File System]] for Home Menu introduced with [[2.0.0-2|2.0.0-X]] is as follows:

root
├── icon
├── boss
└── user
├── SaveData.dat
├── Cache.dat
└── CacheD.dat

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! FW Introduced
! Plaintext
|-
| icon
| Stubbed. Always image 00000002.
| 0x4 Bytes
| n/a
|
|-
| SaveData.dat
| Always image 00000003.
| 0x2cb0 Bytes (0x2da0 starting with [[4.0.0-7]])
| [[2.0.0-2]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/HomeMenuExtdata/SaveData.dat Download]
|-
| Cache.dat
| Indexes and records details for the cached icon data. Always image 00000004.
| 0x1688 Bytes
| [[2.0.0-2]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/HomeMenuExtdata/Cache.dat Download]
|-
| CacheD.dat
| Cached icon data for Home Menu. Always image 00000005.
| 0x4cfe00 Bytes
| [[2.0.0-2]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/HomeMenuExtdata/CacheD.dat Download]
|}

=== Cache.dat & CacheD.dat ===
These two files work in tandem to allow the home menu to cache icon data for applications which are presented on the Home Menu. The size of both files suggests a maximum cache size of 360 icons. Cache.dat stores details about the cache icon data, and CacheD.dat stores the icon data. The icon cache stores icon data for *all* applications shown on the Home Menu, this includes DSi NAND Titles, and DS(i) cartridges. The format of cached DS(i) icon data is not understood, but they are the same size as 3DS icon data (0x36c0).

In Cache.dat the first 8 bytes are a header where the first byte is the format-version, then follows each icon slots's entry in the format:
{| class="wikitable" border="1"
|-
! OFFSET
! SIZE
! DESCRIPTION
|-
| 0x0
| 8
| Title ID in Little Endian
|-
| 0x8
| 4
| Unknown
|-
| 0xc
| 4
| Unknown
|}

All unused entries have the Title IDs filled with "0xff".

In CacheD.dat, the icon data is concatenated together, with the first icon at offset 0x0.

=== SaveData.dat ===
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x1
| SaveData.dat format version.
|-
| 0x8
| 0xB40
| 360 u64s, list of titleIDs(used with icons). Equivalent to the same array in Launcher.dat.
|-
| 0xB48
| 0x168
| s8 bool array with 360 entries. Some SD-only icon array. Probably an array for each icon present status? Each entry is only known to be set to 0x00 or 0x01, with the former being the default.
|-
| 0xCB0
| 0x2D0
| s16 array with 360 entries, used with icons. Equivalent to the same array in Launcher.dat. Implemented with format-version 2.
|-
| 0xF80
| 0x168
| s8 array with 360 entries, used with icons. Equivalent to the same array in Launcher.dat. Implemented with format-version 2.
|-
| 0x13b8
| 0x8
| Theme entry structure for the regular theme.
|-
| 0x13c0
| 0x8*10(0x50)
| Array of theme entry structures for theme [[9.3.0-21|shuffling]].
|-
| 0x141b
| 0x1
| 0 = one regular theme, 1 = multiple themes for theme [[9.3.0-21|shuffle]].
|}

The icon arrays above are handled exactly the same way as Launcher.dat.

When the theme cache is enabled via the above fields, Home Menu loads the cache at startup(if the used theme structure is valid).

Theme entry structure:
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Theme index: for DLC this is the content-index, for built-in themes this is an index for an array selecting the built-in theme.
|-
| 0x4
| 0x1
| Normally zero. This is the low 8-bits in the DLC titleID that this theme was originally loaded from.
|-
| 0x5
| 0x1
| Theme type, the valid range is 0..5. 0 = none, 1 = built-in theme from Home Menu RomFS, 2 = theme data loaded from SD cache / content archive. 3 = ?, 4 = ?, 5 = ?
|-
| 0x6
| 0x1
| Normally zero?
|-
| 0x7
| 0x1
| Normally zero?
|}

When the theme-type is value1 the themeindex must be <9. When the theme-type is value2 the themeindex has to be non-zero, and the u8 at offset 0x4 must not be >=10.

The theme-loader code (besides the AM <is-current-themeindex-DLC-installed> code) handles all theme-types >=2 the same way. However, it seems all DLC AM code involving checking the currently-used theme DLC only gets executed when the theme-type is value2. The code in the theme-loader for that also checks that a certain Home Menu state flag is non-zero, before running the AM DLC code(it's unknown where this flag value comes from).

==== SaveData.dat format versions ====
{| class="wikitable" border="1"
|-
! Version value
! Filesize
! Implemented with Home Menu system-version
|-
| 0
| 0x2CB0
| [[2.0.0-2|2.0.0-X]]
|-
| 2
| 0x2DA0
| [[4.0.0-7|4.0.0-X]]
|-
| 3
| 0x2DA0
| [[9.0.0-20|9.0.0-X]]
|-
| 4 (Latest version as of v10.6-v11.0 Home Menu)
| 0x2DA0
| [[9.3.0-21|9.3.0-X]]
|}

The Home Menu code for writing the updated SaveData.dat to FS is broken when the filesize is smaller than expected due to being from an older format-version originally. When writing to the file, Home Menu checks the filesize then attempts to use [[FSFile:SetSize]] on mismatch, but [[FSFile:SetSize]] can't be used with extdata(error from [[FSFile:SetSize]] appears to be ignored). When writing to SaveData.dat the write-size is the one for the current format-version, but since extdata files are fixed-size this will only result in the first {original filesize} bytes being written(result-code = 0xE0E046C1).

Basically, unless the extdata is deleted from the SD card FS manually, the SaveData.dat filesize will never be successfully updated from an old filesize to the current-format filesize by Home Menu.

== Home Menu [[Home_Menu/Themes|Theme]] SD [[Extdata|ExtData]] ==
The filesystem for this extdata is as follows:

root
├── icon
├── boss
└── user
├── ThemeManage.bin
├── BodyCache.bin
├── BgmCache.bin
└── nsalist

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! Extdata image ID
! FW Introduced
! Plaintext
|-
| ThemeManage.bin
| Theme management info. The filesize must match 0x800, otherwise the Home Menu code returns an error.
| 0x800
| 00000003
| [[9.0.0-20]]
|-
| BodyCache.bin
| Contains cached data from the last loaded [[Home_Menu/Themes|theme]] RomFS body_LZ.bin file. The filesize must match 0x150000, otherwise the Home Menu code returns an error.
| 0x150000
| 00000004
| [[9.0.0-20]]
|
|-
| BgmCache.bin
| Contains cached data from the last loaded [[Home_Menu/Themes|theme]] RomFS bgm.bcstm file. The filesize must match 0x337000, otherwise the Home Menu code returns an error.
| 0x337000
| 00000005
| [[9.0.0-20]]
|-
| nsalist
| Contains the list of DLC themes(IDs+prices), downloaded via [[SpotPass]].
|
| 00000007
| [[9.0.0-20]]
|}

BodyCache.bin and BgmCache.bin contain cached theme data for the currently used DLC theme. ThemeManage.bin is loaded by Home Menu during startup. The cached theme data is loaded at startup when a DLC theme is selected. This also contains theme-shop [[SpotPass]] data.

BodyCache.bin and BgmCache.bin are all-zero when no theme is selected.

Starting with [[9.3.0-21|9.3.0-X]] Home Menu can use more files in this extdata, for theme shuffling. "theme:/ThemeManage.bin" "theme:/BgmCache_%02d.bin" "theme:/BodyCache_rd.bin"

=== ThemeManage.bin ===
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Unknown, normally value 0x1?
|-
| 0x4
| 0x4
| Unknown, normally zero?
|-
| 0x8
| 0x4
| Actual size of the cached body_LZ.bin data.
|-
| 0xC
| 0x4
| Actual size of the cached bgm.bcstm data.
|-
| 0x10
| 0x4
| Unknown
|-
| 0x14
| 0x4
| Unknown
|-
| 0x18
| 0x4
| When a DLC theme is selected, this is the content-index of the DLC theme.
|-
| 0x1C
| 0x4
| Unknown, usually value 0x200 when the data in theme-cache is actually used?
|}

The total filesize is 0x800-bytes, normally the data starting at offset 0x1C is all-zero.

When no theme is actually used, the only non-zero fields are the following: the u32 stored at offset 0x0 in ThemeManage.bin is value 0x1, with offset 0x10 u32 set to value 0x1.

== Home Menu badge SD [[Extdata|ExtData]] ==
The filesystem for this extdata(when it actually exists) is as follows:

root
├── icon
├── boss
└── user
├── BadgeData.dat
└── BadgeMngFile.dat

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! Extdata image ID
! FW Introduced
|-
| BadgeData.dat
| [[Home_Menu#BadgeData.dat|See below.]]
| 0xF4DF80
|
| [[9.0.0-20]]
|-
| BadgeMngFile.dat
| [[Home_Menu#BadgeMngFile.dat|See below.]]
| 0xD4A8
|
| [[9.0.0-20]]
|}

=== BadgeData.dat ===
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 100 * 16 * 0x8A
| UTF-16 Badge Set Titles (16 per set for different languages)
|-
| 0x35E80
| 1000 * 16 * 0x8A
| UTF-16 Badge Titles (16 per set for different languages)
|-
| 0x250F80
| 100 * 0x2000
| [http://en.wikipedia.org/wiki/Z-order_curve Tiled] RGB565 64x64 Badge Set Icons
|-
| 0x318F80
| 1000 * 0x2800
| [http://en.wikipedia.org/wiki/Z-order_curve Tiled] RGB565 64x64 + Tiled A4 64x64 Badge Icons
|-
| 0xCDCF80
| 1000 * 0xA00
| [http://en.wikipedia.org/wiki/Z-order_curve Tiled] RGB565 32x32 + Tiled A4 32x32 Badge Icons
|}

=== BadgeMngFile.dat ===
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| u32, Must Be Zero
|-
| 0x4
| 0x4
| u32, Number of Badge Sets
|-
| 0x8
| 0x4
| u32, Number of Unique Badges
|-
| 0xC
| 0x4
| u32, Number of Placed Badges
|-
| 0x10
| 0x4
| u32, Selected Badge Set in Home Menu (0xFFFFFFFF = All Badges)
|-
| 0x14
| 0x4
| u32, Selected Badge Column in All Badges
|-
| 0x18
| 0x4
| u32, Number of Total Badges
|-
| 0x1C
| 0x4
| u32, Nintendo Network ID Number
|-
| 0x20
| 0x338
| Unknown (always zeros? unused?)
|-
| 0x358
| 0x80
| Used Badge Slots (each bit = 1 slot)
|-
| 0x3D8
| 0x10
| Used Badge Set Slots (each bit = 1 slot)
|-
| 0x3E8
| 1000 * 0x28
| [[Home_Menu#BadgeInfo|BadgeInfo]] Entries
|-
| 0xA028
| 100 * 0x30
| [[Home_Menu#BadgeSetInfo|BadgeSetInfo]] Entries
|-
| 0xB2E8
| 360 * 0x18
| [[Home_Menu#BadgeLayoutSlot|BadgeLayoutSlot]] Entries
|}

==== BadgeIdentifier ====
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| u32, Unknown
|-
| 0x4
| 0x4
| u32, Badge ID
|-
| 0x8
| 0x4
| u32, Badge Set ID
|-
| 0xC
| 0x2
| u16, Badge Index
|-
| 0xE
| 0x2
| u16, Badge Sub ID (used for multi-part badges)
|}

==== BadgeSetIdentifier ====
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| u32, Unknown (Usually 0xFFFFFFFF)
|-
| 0x4
| 0x4
| u32, Unknown (Usually 0xFFFFFFFF)
|-
| 0x8
| 0x4
| u32, Unknown (Usually 0x0)
|-
| 0xC
| 0x4
| u32, Unknown (Usually 0x2710)
|-
| 0x10
| 0x4
| u32, Badge Set ID
|-
| 0x14
| 0x4
| u32, Badge Set Index
|}

==== BadgeInfo ====
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x10
| [[Home_Menu#BadgeIdentifier|BadgeIdentifier]]
|-
| 0x10
| 0x2
| u16, Number Placed
|-
| 0x12
| 0x2
| u16, Quantity
|-
| 0x14
| 0x4
| u32, Unknown (packed data?)
|-
| 0x18
| 0x10
| u64[2], Shortcut Title ID (twice, once per u64)
|}

==== BadgeSetInfo ====
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x18
| [[Home_Menu#BadgeSetIdentifier|BadgeSetIdentifier]]
|-
| 0x18
| 0x4
| u32, Unknown (usually 0xFFFFFFFF)
|-
| 0x1C
| 0x4
| u32, Number of Unique Badges
|-
| 0x20
| 0x4
| u32, Number of Total Badges
|-
| 0x24
| 0x4
| u32, Start Badge Index
|-
| 0x28
| 0x4
| u32, Unknown (usually 0x0)
|-
| 0x2C
| 0x4
| u32, Unknown (usually 0x0)
|}

==== BadgeLayoutSlot ====
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x10
| [[Home_Menu#BadgeIdentifier|BadgeIdentifier]]
|-
| 0x10
| 0x4
| u32, Position
|-
| 0x14
| 0x4
| u32, Folder (0xF0FF = Icon of a folder, 0xFFFFFFFF = No folder)
|}

The file size must match 0xD4A8, otherwise the Home Menu code returns an error.

== Home Menu theme layout SD [[Extdata|ExtData]] ==
The filesystem for this extdata(when it actually exists) is as follows:

root
├── icon
├── boss
└── user
└── MngFile.dat

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! Extdata image ID
! FW Introduced
! Plaintext
|-
| MngFile.dat
| See below.
| 0x004D1280
| 00000003
| [[9.6.0-24]]
|}

=== MngFile.dat ===
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| u32, must be zero.
|-
| 0x4
| 0x4
| u32, total number of stored layouts.
|-
| 0x8
| 0x4
| ?
|-
| 0xC
| ?
| Start of the layout entries.
|}

Layout entries structure:
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x2558
| Exact copy of the entire Home Menu [[System_SaveData]] Launcher.dat, this is the actual layout data.
|-
| 0x2558
| ?
| Layout preview screenshot gfx data, displayed by the Home Menu layout settings menu.
|}

The filesize must match 0x004D1280, otherwise the Home Menu code returns an error. The saved Home Menu layouts are stored here.

When saving a layout, the total layout field is increased, then a new layout entry is created with the contents of the current Home Menu [[System_SaveData]](NAND savedata) Launcher.dat + a screenshot of the main Home Menu screen is written. When loading a layout, Launcher.dat in savedata is written with the current Launcher.dat data already stored in memory(unknown if any data gets changed for it here), then data from the layout entry is copied into the Home Menu [[System_SaveData]] Launcher.dat.

Home Menu *only* accesses this file with the Home Menu layout-settings menu / when entering that menu.

== Home Menu startup ==
The following is what Home Menu does at startup(converted from cmd-logs), from [[9.4.0-21]], in the same order Home Menu does it.

Originally Home Menu mounted sdmc in main(), starting(?) with [[6.0.0-11]] Home Menu only has sdmc mounted while handling [[SD_Savedata_Backups]].

{| class="wikitable" border="1"
|-
! Archive
! Filename
! Read size
! Notes
|-
|
|
|
| srv_init(), then srv_GetServiceHandle is used to initialize the service handles for the following services: [[NS_and_APT_Services|ns:s]], [[PTM_Services|ptm:sysm]], and [[Config_Services|cfg:s]].
|-
|
|
|
| [[CfgS:SecureInfoGetByte101]] and [[CfgS:GetLocalFriendCodeSeed]] are used, the output data from these are not used. If either of these return an error, Home Menu uses [[ERR:Throw]].
|-
|
|
|
| [[Cfg:GetSystemModel]] is then used to initialize a Home Menu state field.
|-
|
|
|
| Home Menu then loads the system language via [[CfgS:GetConfigInfoBlk2]], and uses [[Cfg:SecureInfoGetRegion]], to initialize Home Menu region/language state. Home Menu then uses [[Cfg:SecureInfoGetRegion]] again, then loads the [[Config_Savegame|CountryInfo]] via [[CfgS:GetConfigInfoBlk2]].
|-
|
|
|
| Home Menu initializes [[Filesystem_services|fs:USER]] here. Home Menu then mounts the Home Menu CXI RomFS. Then Home Menu uses [[Filesystem_services|FSUSER:GetPriority]].
|-
|
|
|
| Home Menu starts APT initialization / using APT service commands here. Eventually Home Menu then [[NSS:LaunchTitle|launches]] various system-modules.
|-
|
|
|
| Here Home Menu attempts to open NAND shared-[[extdata]] 0xe0000000, which will normally fail since it doesn't exist.
|-
|
|
|
| Here Home Menu uses [[Application_Manager_Services|AM]] command 0x00130040, with input u8 = value 0x0. Home Menu continues using APT commands after this.
|-
|
|
|
| [[HID_Services|hid:SPVR]] service initialization is done here.
|-
|
|
|
| [[PTM_Services|PTMSYSM:GetShellStatus]] is used here.
|-
|
|
|
| [[Filesystem_services|FSUSER:GetCardType]] is used here. AM commands are then used to get the inserted gamecard programID, when successful the gamecard ExeFS:/icon is then read to check the auto-boot flag(see the auto-boot section on this page). The system-setup-required flag is then read here if needed, as mentioned under the auto-boot section of this page.
|-
|
|
|
| Home Menu then uses cfg commands to load system language, region, and CountryInfo.
|-
| Home Menu CXI RomFS
| "/message/<Region>_<Language>/menu_msbt_LZ.bin"
| Presumably loaded from the filesize.
|
|-
| Home Menu CXI RomFS
| "/message/<Region>_<Language>/RI_mstl_LZ.bin"
| Presumably loaded from the filesize.
|
|-
| Home Menu CXI RomFS
| "/message_hud/<Region>_<Language>/hud_msbt_LZ.bin"
| Presumably loaded from the filesize.
|
|-
| Home Menu CXI RomFS
| "/message_hud/<Region>_<Language>/RI_mstl_LZ.bin"
| Presumably loaded from the filesize.
|
|-
|
|
|
| [[NS_and_APT_Services|APT:GetSharedFont]] is used here.
|-
| Home Menu CXI RomFS
| "/font/Hud_JP.bcfnt"
|
|
|-
|
|
|
| Here Home Menu loads the [[Config_Savegame|cfg]] state for blkID 0x50005.
|-
|
|
|
| Here Home Menu loads the GPU shaders from RomFS.
|-
|
|
|
| Here Home Menu does DSP initialization then starts using DSP commands etc + loads sound data from RomFS.
|-
|
|
|
| Here Home Menu does GSP initialization.
|-
|
|
|
| [[APT:GetCaptureInfo]] is used here.
|-
| Home Menu CXI RomFS
|
|
|
|-
|
|
|
| Here Home Menu uses [[PTM_Services|PTMSYSM:GetShellStatus]], [[PTMSYSM:GetSoftwareClosedFlag]], and [[PTMSYSM:ClearSoftwareClosedFlag]]. Home Menu then uses [[PTM_Services|PTMSYSM:GetShellStatus]] 3 times in a row. Starting from here, Home Menu uses [[PTM_Services|PTMSYSM:GetShellStatus]] frequently(presumably from a separate thread).
|-
|
|
|
| Home Menu opens the archive for the Home Menu [[System_SaveData]] here. Then Home Menu attempts to open "/Launcher.dat" for reading, when successful Home Menu just closes the file.
|-
| Home Menu [[System_SaveData]]
| "/Launcher.dat"
| 0x2490
| Prior to doing the read, Home Menu uses [[FSFile:GetSize]].
|-
| System CFA, titleID for USA: 0004009B00013302
| "/country.bin"
|
|
|-
| [[NS CFA]]
| "/ctr_backup_black_list"
|
| Home Menu first reads 0x10-bytes from offset 0x0, then after that it reads the rest of the file.
|-
| Home Menu CXI RomFS
|
|
| Home Menu reads various RomFS files here.
|-
|
|
|
| Home Menu [[NSS:LaunchTitle|launches]] the camera system-module here.
|-
| Home Menu CXI RomFS
|
|
| Home Menu reads various RomFS files here.
|-
| NGWord bad word list CFA
| "/version.dat"
| 0x4
| Home Menu mounts the ngword archive here, then reads version.dat. Home Menu then loads the [[Config_Savegame|cfg]] data for blkID 0x000A0000.
|-
|
|
|
| Home Menu [[NSS:LaunchTitle|launches]] various system-modules here(from a separate thread?).
|-
|
|
|
| Home Menu opens the following NAND shared extdata archives here: 0xf0000001, 0xf0000002, 0xf0000009, 0xf000000b, 0xf000000c, 0xf000000d, and 0xf000000b again.
|-
| NAND [[extdata]] 0xf000000b
| "/ubll.lst"
| 0x2ee0
| Prior to doing the read, Home Menu uses [[FSFile:GetSize]].
|-
|
|
|
| Home Menu opens NAND shared extdata archive 0xf000000b again.
|-
| NAND extdata 0xf000000b
| "/CFL_DB.dat"
| 0xe4c0
| Home Menu only does one read with size 0xe4c0 for this, even though the value it loads from [[FSFile:GetSize]] is larger than that.
|-
| NAND extdata 0xf000000b
| "/CFL_OldDB.dat"
|
| Home Menu just closes this file immediately after opening it, when opening it was successful at least.
|-
|
|
|
| Home Menu loads the [[Config_Savegame|cfg]] data for blkID 0x000C0000 here.
|-
|
|
|
| Home Menu opens NAND shared extdata archive 0xf000000b again.
|-
| NAND extdata 0xf000000b
| [[Extdata|"/gamecoin.dat"]]
| 0x14
| Home Menu first tries to use [[FS:CreateFile]] with this, which will fail when the file already exists. This file is then opened with openflags=RW. After reading this file, Home Menu then uses [[PTM:GetTotalStepCount]], then uses [[FSFile:GetSize]]. Then the service handle for [[NDM_Services|"ndm:u"]] is initialized with srv_GetServiceHandle(done from a separate thread perhaps?). Then Home Menu writes to the already opened gamecoin.dat file.
|-
|
|
|
| [[Filesystem_services|FSUSER:CardSlotIsInserted]] and [[Filesystem_services|FSUSER:GetCardType]] is used here. AM commands are then used to get the inserted gamecard programID, when successful the gamecard ExeFS:/icon is then read.
|-
|
|
|
| [[BOSS_Services|"boss:P"]] service handle initialization with srv_GetServiceHandle is done here. Then [[Services|srv_Subscribe]] is used with various noticationIDs. Home Menu then uses [[FS:IsSdmcDetected]] and [[FS:IsSdmcWritable]]. Home Menu then loads the [[Config_Savegame|cfg]] data for blkID 0x000D0000. Home Menu uses boss:P command 0x4010082, then uses srv_GetServiceHandle for initializing service handles with the following services: [[News_Services|"news:s"]] and "cecd:s".
|-
|
|
|
| srv_GetServiceHandle is used to initialize the service handle for service [[Friend_Services|"frd:a"]], then various service commands are used for that.
|-
| NAND [[extdata]] 0xf000000c
|
|
| Home Menu first attempts to use [[FS:CreateFile]] with "/bashotorya.dat", which normally fails since that file already exists. Home Menu then repeats this with "/bashotorya2.dat".
|-
|
|
|
| Here, Home Menu opens the following SD extdata archives: Home Menu badge SD extdata, Home Menu SD extdata, and the theme-cache SD extdata.
|-
| Home Menu SD extdata
| "/SaveData.dat"
| 0x2da0
| Prior to doing the read, Home Menu uses [[FSFile:GetSize]].
|-
| Home Menu SD extdata
| "/Cache.dat"
| 0x1688
| Prior to doing the read, Home Menu uses [[FSFile:GetSize]].
|-
| Home Menu SD extdata
| "/CacheD.dat"
| 0x36c0
| This is used to read the cached icon data for the currently inserted gamecard, if any. Prior to doing the read, Home Menu uses [[FSFile:GetSize]]. After opening the file and before [[FSFile:GetSize]] is used, Home Menu uses AM commands 0x10070102(for theme DLC) and 0x30084(gamecard "title-listing").
|-
|
|
|
| Home Menu uses the following AM commands for theme DLC here: 0x10050084 and 0x10020104.
|-
| Home Menu Theme SD extdata
| "/BodyCache.bin"
| 0x150000
| Before opening the file, Home Menu firsts opens this archive under a new archive-handle again, then closes it. Prior to doing the read, Home Menu uses [[FSFile:GetSize]].
|-
| Home Menu Theme SD extdata
| "/ThemeManage.bin"
| 0x8
| Prior to doing the read, Home Menu uses [[FSFile:GetSize]](the result is filesize 0x800).
|-
| Home Menu Theme SD extdata
| "/BgmCache.bin"
|
| The data is read from here as needed. After opening the file, Home Menu uses [[FSFile:GetSize]].
|-
|
|
|
| boss:P commands 0x00040000 and 0x04040080 are used here. Home Menu opens NAND shared-extdata 0xf000000e, then closes it when the archive was opened successfully. Then Home Menu uses boss:P command 0x04500102 with the theme extdata, with string "thmtop".
|-
|
|
|
| boss:P command 0x04040080 is used, with the input programID set to the gamecard one. Then boss:P commands 0x000E0000 and 0x00160082 are used.
|-
|
|
|
| [[AMNet:GetTitleIDList|AM:GetTitleIDList]] is used with mediatype=SD and maxTIDs = 0x1c00.
|-
|
|
|
| boss:P command 0x00160082 is used.
|-
|
|
|
| [[PTM_Services|PTM:GetStepHistory]] is used.
|-
|
|
|
| srv_GetServiceHandle is used to initialize the service handle for [[AC_Services|"ac:u"]], then [[AC_Services|ACU:SetClientVersion]] is used. [[Services|srv_Subscribe]] is used, then ACU command 0x002F0004 is used.
|-
|
|
|
| [[AMNet:GetTitleIDList|AM:GetTitleIDList]] is used with mediatype=NAND and maxTIDs = 0x1c00.
|-
| NAND extdata 0xf000000b
| "/gamecoin.dat"
| 0x14
| Home Menu first tries to use FS:CreateFile with this, which will fail when the file already exists. This file is then opened with openflags=RW. After reading this file, Home Menu then uses [[PTM_Services|PTM:GetTotalStepCount]], then uses FSFile:GetSize. Then Home Menu writes to the already opened gamecoin.dat file.

At the same time as doing the above, Home Menu also uses(probably from a different thread) [[AMNet:GetTitleIDList3|AM:GetTitleIDList3]] with mediatype=NAND and maxTIDs=0x2000. Then Home Menu uses [[AMNet:ListTitles|AM:ListTitles]] with the NAND promotional-video titleID. Then Home Menu attempts to open the ExeFS:/icon in the NAND promotional-video title.
|-
| Home Menu [[System_SaveData]]
| "/Launcher.dat"
|
| Prior to doing the write, Home Menu uses [[FSFile:GetSize]]. Home Menu writes 0x2490-bytes to the file here. From a separate thread(?) at the same time, Home Menu also uses [[AM:ReloadDBS]] and AM command 0x00130040 with input=0x1.
|-
|
|
|
| Home Menu loads the u8 value from [[Config_Savegame|cfg]] blkID 0x000E0000 here.
|-
|
|
|
| [[AM:ReloadDBS]], AM command 0x10070102(for theme DLC), AM command 0x00130040, and AM command 0x10050084(for theme DLC) are used here.
At the same time(from a different thread?), the "act:u" service handle is initialized with srv_GetServiceHandle. Then ACTU commands 0x00010084 and 0x000600C2 are used.
|-
|
|
|
| The [[NIM_Services|"nim:u"]] service handle is initialized with srv_GetServiceHandle. Then NIMU commands 0x000F0042, 0x00170042, 0x00150000, and 0x00050000 are used.
|-
|
|
|
| AM command 0x10020104(theme DLC) is used here. Then Home Menu CXI RomFS data is read.
|-
|
|
|
| Home Menu CXI RomFS data is read. [[Filesystem_services|FS:GetSpecialContentIndex]] for the gamecard is used, then MICU initialization is done here(separate thread maybe?).
|-
|
|
|
| [[ACU:GetWifiStatus]] is used, the NAND shared-extdata 0xf000000b archive is then opened here.
|-
| NAND extdata 0xf000000b
| "/idb.dat"
| 0x2008
| This first opens the file for writing, then uses [[FSFile:GetSize]](output filesize is 0x6d4000). Then it writes to the file using size 0, then closes the file. Then [[PTM_Services|PTM:GetStepHistory]] is used. Then Home Menu opens "/idbt.dat", then reads 0x2008-bytes.
|-
|
|
|
| Home Menu starts using [[News_Services|"news:s"]] commands here. While Home Menu is doing this, it also uses(from another thread?) [[NS_and_APT_Services|APT:PrepareToStartNewestHomeMenu]], [[NIM_Services|NIMU:GetState]], and [[NDM_Services|NDMU:OverrideDefaultDaemons]] with input value 0xF.
Later with that news-command code still running, Home Menu also uses the following commands: [[ACU:GetWifiStatus]], [[NDM_Services|NDMU:QueryExclusiveMode]], and CECDS command 0x000E0000. Then [[Config_Savegame|cfg]] blkID 0x000D0000 is loaded.
|-
| NAND extdata 0xf000000b
| "/idbt.dat"
|
| Home Menu writes 0x2008-bytes to this file.
|-
| NAND extdata 0xf000000e
| "/versionList.dat"
| Loaded from the filesize.
|
|-
|
|
|
| boss:P command 0x00200082 is used with string "mmVerDl".
|-
|
|
|
| ...
|-
| Home Menu [[System_SaveData]]
| "/Launcher.dat"
|
| When Home Menu is terminating(?), Home Menu writes 0x2490-bytes to the file here. After doing this, Home Menu opens, writes, and closes the file again.
|}

=== Hardware reboot ===
During Home Menu start-up it uses [[APT:PrepareToStartNewestHomeMenu]]. If that doesn't return an error(normally NS returns 0xC8A0CFFC for that), Home Menu starts a hardware reboot with [[APT:StartNewestHomeMenu]] etc.

On retail this essentially means a hardware-reboot will automatically trigger if [[Configuration_Memory|configmem]] SYSCOREVER doesn't match FIRM_SYSCOREVER, or when the current APPMEMTYPE doesn't match the default APPMEMTYPE for this Old3DS/New3ds model. The latter can happen with running New3DS NATIVE_FIRM with Old3DS system-titles, for example.

== Returning to Home Menu from a crashed application ==
When returning to Home Menu from an application that didn't properly shutdown(like with an exception), PTM module writes data to the PTM system savedata. Then the system terminates Home Menu, and starts Home Menu again.

== See Also ==
* http://www.nintendo.com/consumer/systems/3ds/en_na/menu_update.jsp
* http://www.nintendo.co.jp/netinfo/3ds/JPN/ja.html
* https://yls8.mtheall.com/ninupdates/reports.php

NCSD

2017-01-23T01:48:07Z

Einstein95: /* Card Info Header */ A couple reserved areas

[[Category:File formats]]
This page documents the format of NCSD.

== Overview ==
There are two known specialisations of the NCSD container format. The CTR Cart Image (CCI) format and the 3DS' raw [[Flash Filesystem#NAND structure|NAND format]]. CCI is the format of game ROM images.

'''CTR System Update (CSU)''' is a variant of CCI, where the only difference is in the file extension. This is used with developer System Updates and associated [[3DS Development Unit Software|Tools]].

NCSD images start with a NCSD header, followed by up to a maximum of 8 [[NCCH]] partitions.

For CCI images, the partitions are reserved as follows:

{| class="wikitable" border="1"
|-
! [[NCCH]] Index
! Reserved Use
|-
| 0
| Executable Content ([[NCCH#CXI|CXI]])
|-
| 1
| E-Manual ([[NCCH#CFA|CFA]])
|-
| 2
| [[Download Play]] Child container ([[NCCH#CFA|CFA]])
|-
| 6
| New3DS [[System_Update_CFA|Update Data]] ([[NCCH#CFA|CFA]])
|-
| 7
| [[System_Update_CFA|Update Data]] ([[NCCH#CFA|CFA]])
|}

The format of partitions can be determined from the partition FS flags (normally these are zero for CCI/CSU NCSD Images).

== NCSD header ==
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x000
| 0x100
| RSA-2048 SHA-256 signature of the NCSD header
|-
| 0x100
| 4
| Magic Number 'NCSD'
|-
| 0x104
| 4
| Size of the NCSD image, in media units (1 media unit = 0x200 bytes)
|-
| 0x108
| 8
| Media ID
|-
| 0x110
| 8
| Partitions FS type (0=None, 1=Normal, 3=FIRM, 4=AGB_FIRM save)
|-
| 0x118
| 8
| Partitions crypt type (each byte corresponds to a partition in the partition table)
|-
| 0x120
| 0x40=(4+4)*8
| Offset & Length partition table, in media units
|-
| 0x160
| 0xA0
| ...
|}

For carts,
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x160
| 0x20
| Exheader SHA-256 hash
|-
| 0x180
| 0x4
| Additional header size
|-
| 0x184
| 0x4
| Sector zero offset
|-
| 0x188
| 8
| Partition Flags (See Below)
|-
| 0x190
| 0x40=8*8
| Partition ID table
|-
| 0x1C0
| 0x30
| Reserved
|-
| 0x1F0
| 0xE
| Reserved?
|-
| 0x1FE
| 0x1
| Support for this was implemented with [[9.6.0-24|9.6.0-X]] FIRM. Bit0=1 enables using bits 1-2, it's unknown what these two bits are actually used for(the value of these two bits get compared with some other value during NCSD verification/loading). This appears to enable a new, likely hardware-based, antipiracy check on cartridges.
|-
| 0x1FF
| 0x1
| Support for this was implemented with [[9.6.0-24|9.6.0-X]] FIRM, see below regarding save crypto.
|}

For NAND,

{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x160
| 0x5E
| Unknown
|-
| 0x1BE
| 0x42
| Encrypted MBR partition-table, for the TWL partitions(key-data used for this keyslot is console-unique).
|}

=== NCSD Signature ===
The RSA pubk used for gamecard NCSD is stored in [[Memory_layout|ITCM]]. The separate pubk used for NAND NCSD is stored in Process9 .(ro)data instead of ITCM.

=== Partition Flags ===
{| class="wikitable" border="1"
|-
! Byte Index
! Description
|-
| 0
| Backup Write Wait Time (The time to wait to write save to backup after the card is recognized (0-255 seconds)).NATIVE_FIRM loads this flag from the gamecard NCSD header starting with [[6.0.0-11]].
|-
| 3
| Media Card Device (1 = NOR Flash, 2 = None, 3 = BT) (SDK 3.X+)
|-
| 4
| Media Platform Index (1 = CTR)
|-
| 5
| Media Type Index (0 = Inner Device, 1 = Card1, 2 = Card2, 3 = Extended Device)
|-
| 6
| Media Unit Size i.e. u32 MediaUnitSize = 0x200*2^flags[6];
|-
| 7
| Media Card Device (1 = NOR Flash, 2 = None, 3 = BT) (Only SDK 2.X)
|}

=== Partition Flags (In Terms of Save Crypto Determination) ===
{| class="wikitable" border="1"
|-
! Byte Index
! Description
|-
| 1
| Starting with [[6.0.0-11]] NATIVE_FIRM will use this flag to determine the gamecard [[Savegames|savegame]] keyY method, when flag[3] is set. 0 = [[2.0.0-2]] hashed keyY, 1 = [[Savegames|new]] keyY method implemented with [[6.0.0-11]]. 0x0A = implemented with [[9.3.0-21|9.3.0-X]]. On Old3DS this is identical to the [[2.2.0-4]] crypto. On New3DS this is identical to the [[2.2.0-4]] crypto, except with New3DS-only gamecard savedata [[AES|keyslots]].
Starting with [[9.6.0-24|9.6.0-X]] FIRM, Process9 now sets <savecrypto_stateval> to partitionflag[1] + <the u8 value from NCSD+0x1FF>, instead of just setting it to partitionflag[1].
|-
| 3
| Support for this flag was implemented in NATIVE_FIRM with [[2.0.0-2]]. When this flag is set the hashed gamecard [[Savegames|savegame]] keyY method is used, this likely still uses the repeating-CTR however. With [[6.0.0-11]] the system will determine the gamecard savegame keyY method via flag[1], instead of just using the hashed keyY via this flag.
|-th
| 7
| This flag enables using the hashed gamecard [[Savegames|savegame]] keyY method, support for this flag was implemented in NATIVE_FIRM with [[2.2.0-4]]. All games with the NCSD image finalized since [[2.2.0-4]](and contains [[2.2.0-4]]+ in the system update partition) have this flag set, this flag also enables using new CTR method as well.
|}

Starting with [[9.6.0-24|9.6.0-X]] FIRM, Process9 will just write val0 to a state field then return 0, instead of returning an error when the save crypto type isn't recognized. This was the *only* actual functionality change in the Old3DS Process9 function for gamecard savedata crypto init.

== Card Info Header ==
{| class="wikitable" border="1"
|-
! OFFSET
! SIZE
! DESCRIPTION
|-
| 0x200
| 4
| CARD2: Writable Address In Media Units (For 'On-Chip' Savedata). CARD1: Always 0xFFFFFFFF.
|-
| 0x204
| 4
| Card Info Bitmask
|-
| 0x208
| 0x108
| Reserved1
|-
| 0x310
| 2
| Title version
|-
| 0x312
| 2
| Card revision
|-
| 0x208
| 0xCEE
| Reserved2
|-
| 0x1000
| 0x10
| Card seed keyY (first u64 is Media ID (same as first NCCH partitionId))
|-
| 0x1010
| 0x10
| Encrypted card seed (AES-CCM, keyslot 0x3B for retail cards, see [[CTRCARD_Registers|CTRCARD_SECSEED]])
|-
| 0x1020
| 0x10
| Card seed AES-MAC
|-
| 0x1030
| 0xC
| Card seed nonce
|-
| 0x103C
| 0xC4
| Reserved3
|-
| 0x1100
| 0x100
| Copy of first NCCH header (excluding RSA signature)
|}

== Development Card Info Header Extension ==
{| class="wikitable" border="1"
|-
! OFFSET
! SIZE
! DESCRIPTION
|-
| 0x1200
| 0x200
| CardDeviceReserved1
|-
| 0x1400
| 0x10
| TitleKey
|-
| 0x1410
| 0xF0
| CardDeviceReserved2
|}

Note that a particular flashcard vendor puts what many refer to as "private headers" here in place of actual development card information. This header is constituted by a cartridge-unique Id obtained from [[Process_Services_PXI|pxi:ps9::GetRomId]] and the title-unique cart ID (identical for all carts of the same title; can be retrieved using the NTR gamecard protocol command 0x90 or through the CTR protocol commands 0x90 or 0xA2).

== Tools ==

[https://github.com/3dshax/ctr/tree/master/ctrtool ctrtool] - (CMD)(Windows/Linux) Parsing NCSD files

[[3DSExplorer]] - (GUI)(Windows Only) Parsing NCSD files

Serials

2017-01-20T00:35:23Z

Einstein95: /* Physical (only?) Serial */

This page talks about the 3DS products' serial number and model number structures (the console, manual, accessories, games, etc...).

== Console Serial Numbers ==

A 3DS console serial number is composed of at least two letters followed by nine decimal digits. The ninth digit is a "check digit", meaning that it is derived from the other digits.

The check digit is an industry-standard algorithm, the one used for UPC codes. To calculate the check digit of a 3DS console, separate the non-check digits into "odd" and "even" groups, where the "odd" group is digits in odd-numbered positions, and the "even" group is digits in even-numbered positions. (The first digit is "odd", with "first" representing "1".)

After separating the digits, add the digits in each group together. Multiply the sum of the even digits by 3, then add the sum of the odd digits. To calculate the check digit, take this value modulo 10, and if not 0, subtract from 10.

Example: CW404567772

The non-check digits are 40456777. Separating into odd and even groups, we get the following:

Odds: 4 + 4 + 6 + 7 = 21
Evens: 0 + 5 + 7 + 7 = 19

Applying the algorithm, we get ((3 * 19) + 21) % 10 = 8, which is not 0, thus 10 - 8 = 2, matching the example's check digit.

The letter prefixes are a letter specifying the device, followed by one letter specifying the region in which it was sold. In some regions, a third letter is present; a current guess is that this letter distinguishes among factories for a given sales region. Note that several different sales regions' console may be considered to be the same region for region-locking purposes, such as Europe and Australia.

{| class="wikitable"
! Model !! Device Prefix (Retail) !! Device Prefix (Dev)
|-
| 3DS || C || E
|-
| 3DS XL/LL || S || R
|-
| 2DS || A || P
|-
| New 3DS || Y || Y
|-
| New 3DS XL/LL || Q || Q
|}

Development units with the same prefix as retail can be distinguished by development units having a 0 as the first digit of the serial number portion.

{| class="wikitable"
! Sales Region !! Region Lock !! Region Suffix
|-
| Japan || Japan || JF, JH, JM
|-
| North America || North America || W
|-
| Middle East / Southeast Asia || North America || S
|-
| Europe || Europe || EF, EH, EM
|-
| Australia || Europe || AH
|}

== Console Models ==

{| class="wikitable"
! Device !! Product Code
|-
| 3DS || CTR
|-
| 3DS XL/LL || SPR
|-
| 2DS || FTR
|-
| [[New 3DS]] || KTR
|-
| [[New 3DS]] XL/LL || RED
|}

The DS had the product code NTR, so we see the TR is recurring.

== Title ID and Unique ID ==
''see [[Titles]]''

== NCCH Product Code ==

This serial is similiar to the "physical serial" described later in this page; it is the canonical identifier for a specific title in the field of business formalities with Nintendo, but this is not reflected in the 3DS's software architecture (where it is vastly unused in favor of the Title ID: it is therefore considered the successor of the "internal name" contained in ROMs of previous handhelds), is not guaranteed to be unique.

The product code is located in a [[NCCH]]'s header (not its ExHeader).

The product code "CTR-P-CTAP" is the default generic product code for NCCH files. Most [[NCSD|NCCHs apart from the first one]] in a title are generally CTR-P-CTAP.
Referring to "the product code of a title" is therefore a simplification for "the product code of the NCCH in its first partition".

So, for example, a Japanese copy of Ridge Racer 3D would have a product code of "CTR-P-ARRJ" and a serial of "LNA-CTR-ARRJ-JPN".

A Nintendo-assigned product code follows this format, however, there is no requirement for a product code to match or resemble this structure as long as it's within the length limit:

[CTR/KTR]-[Category letter]-[Type][Identifier][Region]-[Sub ID]

{| class="wikitable"
! Category letter !! Description
|-
| P || Cartridge software, or downloadable versions of them.
|-
| N || Digital-only releases, including [[Title list|system applications and applets]].
|-
| M || [[DLC]]
|-
| T || [[eShop Demos]], excluding so-called "special demos" which are category N.
|-
| U || [[Title list#0004000E - Add-on Content (Updates)|Patches]] for category P titles.
|}

The "sub ID" only applies to DLC, demos, and local copies of Download Play titles. It's a 2-digit number associated with the [[Title list|Title ID Variation]].

See the next chapter for explanation of the other components of the Product Code.

== Physical (only?) Serial ==

[Product][Retail/Demo]-CTR-[Type][Identifier][Region]

{| class="wikitable"
! Field !! Length !! Description
|-
| Product || 2 || Product type (cartridges are LN, game boxes are TS, instruction manuals are MA, leaflets are FA, quick-start guides are MK)
|-
| Retail/Demo || 1 || Retail (A) or Demo (Z)
|-
| CTR/KTR || 3 || Platform. CTR = 3DS, KTR = New 3DS
|-
| Type || 1 || [A/C/H/J/K/S/P/T] - Retail / C is part of the default serial 'CTAP' / H is used for built in applications like [[Mii Maker]] / J is for a normal eShop Title / K is unknown, seen in Mighty Gunvolt / S is usually a 3D Classics eShop title / P is used with GBA eShop titles / T is used with NES eShop titles.
|-
| Identifier || 2 || game name (two alphanumeric characters).
|-
| Region || 1 || [E/P/J/K/C/Y/Z/A] - English (US) / PAL (Europe/Australia) / Japanese (Japan) / Korean (Korea) / Chinese (China/Taiwan) / Multiple regions / Multiple regions / All (region-free)
|}

The longer version of the serial number adds a geographical region (usually because of extra languages).

Those are 3 letters codes at the end of the serial (can be found mostly on demos).

For example, the code of the Canadian version of Mario Kart 7 is CAN (link removed, links to incorrect image).

=== Electronic Manuals ===

Some eShop titles have [[NCCH#CFA|Electronic Manuals]] which store the product code at the end of the 'Health & Safety' section of the manual. However, product codes can differ from the above format as shown below:

CTR-[P/N/T/U]-[Type][Identifier][Region]-[Region]-[Digit]

CTR-[Type][Identifier][Region]-[Region]-[Digit]

* P/N/T/U - Same as in product code structure
* [Type][Identifier][Region] - Same as in serial structure
* [Region] - A three character representation of the title region, i.e. 'EUR' (not always present)
* [Digit] - A single digit usually '1' or '0' (not always present)

'''Note:''' These alternate versions of the product code, potentially found in [[NCCH#CFA|Electronic Manuals]] don't represent the actual product code, as found in the game's CXI. They are only found in the game's Home Menu manual, and on the game's packaging and external labeling.

==Back of Card Serial==
AREPY10111

AAAABCDEEE (presumably)

[Identifier]-[Production Month]-[Production Year]-[Revision]-[Production Run?]

Bootloader

2017-01-18T02:20:50Z

Einstein95: /* Boot ROM */

The bootloader is the binary code stored in the ARM9 and ARM11 boot ROMs and hence is ran when the 3DS is powered on. It's purpose is initializing hardware and loading the [[FIRM|system firmware]] from the internal [[Flash_Filesystem|NAND memory]].

Besides NATIVE_FIRM, the bootloader is also capable of booting other firmwares (such as TWL_FIRM and AGB_FIRM). However, this will result either in a japanese error-screen or a system shutdown, directly after FIRM-Launching.

== Boot ROM ==
Upon boot, parts of the ARM9 and ARM11 boot ROMs are protected by writing to [[CONFIG#CFG_SYSPROT9|CFG_SYSPROT9]] and [[CONFIG#CFG_SYSPROT11|CFG_SYSPROT11]], respectively. The ARM9 and ARM11 boot ROMs are identical for the regular and XL versions of the Old 3DS, 2DS and New 3DS consoles.

== NAND FIRM boot ==
Boot9 is not hard-coded to only handle 2 FIRM partitions: it parses all 8 NCSD partitions for this. Boot9 will attempt to use every partition listed in the NCSD which is an actual FIRM partition, in the same order listed in the NCSD, until booting one of them succeeds. Among the not-yet-processed partitions, the FIRM which has the highest value at u32 firmhdr+4 will have a FIRM-boot attempted first. Since that value is normally 0x0, the order of FIRM-partition processing is normally identical to the order of the NCSD partitions.

Boot9 is hard-coded for using [[AES_Registers|AES]] keyslot 0x6 for NAND crypto.

== Non-NAND FIRM boot ==
Boot9 can also boot from non-NAND. For this a different set of RSA pubks are used(separate pubks for retail/devunit like NAND). The spiflash FIRM image for this is also encrypted with AES-CBC using a normalkey stored in prot_boot9(separate for retail/devunit). This encryption is basically used instead of what is used for NAND-firm-partitions. This encryption is only used for the FIRM sections, the FIRM header is used raw. The AES keyslot for this is only overwritten afterwards when booting from non-NAND fails. AES keyslot 0x3F is used for this.

CTR_word[0] = firmimageoffset;//FIRM section offset from FIRM header
CTR_word[1] = outbufaddr;//FIRM section load addr
CTR_word[2] = readsize;//FIRM section size
CTR_word[3] = readsize;//FIRM section size

When booting from NAND fails, boot9 will then attempt to boot from Wifi SPI-flash(this only triggers when the wifi module hw is properly accessible/connected, which is normally the case). The base offset for spiflash FIRM is 0x400. Note that this region(all data prior to offset 0x1F300) is write-protected by the spiflash(not writable from 3DS-mode / DS-mode).

For non-NAND booting, NCSD / FIRM-backup is not used.

== SDMMC ==

Boot9 has code implemented for using SD(HC) cards, but the input deviceids used by boot9 for those functions are hard-coded for NAND.

== Boot9 RSA keyslots ==

The following are initialized during main() startup, by initialize_rsakeyslots_pubk(). Each of these, for the ones which are actually set, have different keydata for retail/devunit.
* 0: Not set.
* 1: Used for the NAND FIRM signature.
* 2: Used for the non-NAND-FIRM signature.
* 3: Used for the NAND-NCSD FIRM signature.

When FIRM loading is successful, initialize_x07ffbd00_x07ffc100_rsakeyslotsprivk() is called, right before calling the final function in main(). Besides ITCM writing, this overwrites all 4 RSA keyslots with modulus + private-exponents loaded from boot9 data.

initialize_x07ffbd00_x07ffc100_rsakeyslotsprivk():
This initializes the 4 0x100-byte/0x200-byte chunks at 0x07ffb800+0x500(0x07ffbd00)/0x07ffb800+0x900(0x07ffc100). End address of the first section is 0x07ffc100(start addr of the second section), end address of the second section is 0x07ffc900. Hence, the first section total size is 0x400-bytes, while the second section total size is 0x800-bytes.

These are initialized using via the boot9 data image, with ptrs from DTCM. Seperate keydata is used for retail/devunit.

When initializing the first ITCM area: rsa_setkeyslot_privk() is called for all 4 RSA keyslots. The modulo for each one is also copied to (index*0x100) + 0x07ffb800 + 0x500. The private exponent is not copied into ITCM.

The second ITCM area is initialized by copying 4 0x200-byte entries in a loop. These are RSA pubks+privks, which Boot9 doesn't use itself at all besides this copy loop.

== Boot9 image data memory layout ==
0xffffb088 is the beginning of the boot9 image data section.

* 0xffffb088 size 0x38-bytes: This is the array used during FIRM-section-loading for the memory-range blacklist for FIRM sections.
* 0xffffb0c0(end-addr of the above area) size 0x20-bytes: Unknown.
* 0xffffb0e0(end-addr of the above area) size 0x2f80-bytes: This is *all* of the keys stored in the image.
* 0xffffe060(end addr of the above key-area) size 0x230-bytes: This is the initial DTCM image @ 0xFFF00000, see below.
* 0xffffe290(DTCM_image_end) - {boot9 image end}: All-zero.

Layout of the 0x2f80-byte key-area at 0xffffb0e0:
* 0xffffb0e0 size 0x2600-bytes: This is the RSA key-data, see below.
* 0xffffd6e0(end-addr of the above area) size 0x40-bytes: This is the keydata used for crypting the entire OTP with keyslot 0x3f, used by main(). The first 0x20-bytes is for retail, the remaining 0x20-bytes starting at 0xffffd700 is for devunit. Chunk+0(retail=0xffffd6e0 devunit=0xffffd700) is the normalkey, chunk+0x10(retail=0xffffd6f0 devunit=0xffffd710) is the AES-IV.
* ...
* 0xffffd760: size 0x100-bytes: First 0x80-bytes is for retail, the remaining 0x80-bytes at 0xffffd7e0 is for devunit. This 0x80-byte block is copied to 0x07ffcd00 by a Boot9 function, however that code actually does the copy in two 0x40-bytes chunks.
* 0xffffd860(end-addr of the above area) size 0x400-bytes: This is the bootrom_dataptr passed to the aes-keyinit function for retail. See the below Tools section for how this is processed.
* 0xffffdc60(end-addr of the above area) size 0x400-bytes: This is the devunit version of the above the 0x400-byte chunk. This is very last chunk of data in the boot9 data-section key-area: end addr for this area is 0xffffe060.

Layout of the 0x2600-byte RSA key-data at 0xffffb0e0:
First 0x1300-bytes is for retail, the remaining 0x1300-bytes starting at 0xffffc3e0 is for devunit.
* +0x0 retail=0xffffb0e0 devunit=0xffffc3e0: RSA modulo for keyslot3, initialized by initialize_rsakeyslots_pubk().
* +0x100 retail=0xffffb1e0 devunit=0xffffc4e0: RSA modulo for keyslot1, initialized by initialize_rsakeyslots_pubk().
* +0x200 retail=0xffffb2e0 devunit=0xffffc5e0: RSA modulo for keyslot2, initialized by initialize_rsakeyslots_pubk().
* +0x300 size 0x200, retail=0xffffb3e0 devunit=0xffffc6e0: First 0x100-bytes is the RSA modulo, then the following 0x100-bytes is the RSA privk(private-exponent). This is for RSA-engine keyslot0 with initialize_x07ffbd00_x07ffc100_rsakeyslotsprivk(), which also copies this modulo to the array starting at 0x07ffbd00.
* +0x500 size 0x200, retail=0xffffb5e0 devunit=0xffffc8e0: Used the same as the above block except for slot1.
* +0x700 size 0x200, retail=0xffffb7e0 devunit=0xffffcae0: Used the same as the above block except for slot2.
* +0x900 size 0x200, retail=0xffffb9e0 devunit=0xffffcce0: Used the same as the above block except for slot3.
* +0xb00 size 0x200, retail=0xffffbbe0 devunit=0xffffcee0: First 0x100-bytes is the RSA modulo, then the following 0x100-bytes is the RSA privk(private-exponent). The 0x200-bytes here is copied to slot0 in the array at 0x07ffc100 by initialize_x07ffbd00_x07ffc100_rsakeyslotsprivk().
* +0xd00 size 0x200, retail=0xffffbde0 devunit=0xffffd0e0: Used the same as the above block except for slot1.
* +0xf00 size 0x200, retail=0xffffbfe0 devunit=0xffffd2e0: Used the same as the above block except for slot2.
* +0x1100 size 0x200, retail=0xffffc1e0 devunit=0xffffd4e0: Used the same as the above block except for slot3.

== Boot9 DTCM layout ==
Most of this is just ptrs / other unknown data, not actual keys. However, there is an unknown 0x10-byte block @ +0x124(there's a ptr initialized for this block elsewhere).

== Boot11 image data memory layout ==
0x0001817c..0x000181f4 size 0x78-bytes: This seems to be the bootrom error screen font gfx data. This begins at the exact end-address of the crt0 code, the rest of the protected boot11 code begins at this end-address(0x000181f4).

0x00019400 is the beginning of the boot11 data area, the first 8-bytes here are unknown.
* 0x00019408..0x0001b498 size 0x2090-bytes: This is the blowfish keydata which gets copied to arm9itcm_twlkeydata+0x3e0 later.
* ...
* 0x0001c498..0x0001c4f8 size 0x60-bytes: This is the data which eventually gets copied to arm9itcm_twlkeydata+0x380.
* 0x0001c4f8..0x0001c538 size 0x40-bytes: This is the data which eventually gets copied to arm9itcm_twlkeydata+0x340.
* 0x0001c538..0x0001c578 size 0x40-bytes: This is the data which eventually gets copied to arm9itcm_twlkeydata+0x300.
* 0x0001c578..0x0001c5f8 size 0x80-bytes: This is the data which eventually gets copied to arm9itcm_twlkeydata+0x280.
* 0x0001c5f8..0x0001c678 size 0x80-bytes: This is the data which eventually gets copied to arm9itcm_twlkeydata+0x0.
* 0x0001c678..0x0001c878 size 0x200-bytes: This is the data which eventually gets copied to arm9itcm_twlkeydata+0x80.
* 0x0001c878..0x0001d078 size 0x800-bytes: These are the 3DS RSA-2048 modulus which are eventually copied to arm9_itcm+0x4900: on retail the first 4 are copied there by boot9, on devunit the last 4 are copied to itcm.
* 0x0001d078 size 0x120-bytes is the initial data for the .data section @ 0x1ffe8000, this is the very end of the protected arm11-bootrom.

== AES keys ==
See the Tools section for how Boot9 initializes the keyslots.

See also [[AES_Registers|here]].

For an issue with console-unique key-init, see [[OTP_Registers|here]].

== BootROM Errors ==
Sample error-screen(where firm0+firm1 RSA signatures were corrupted):

BOOTROM 8046
ERRCODE: 00F800FF
DEDEFFFF FFFFFFFF
00000000 00000000

* 1st line is: <code>print_string(..., "BOOTROM %X", 0x8046);//This last param comes from the .pool.</code>
* 2nd line is: <code>print_string(..., "ERRCODE: %08X", *((unsigned int*)(0x1FFFE000+0xC)));//See below memory notes.</code>
* 3rd line is: <code>print_string(..., "%08X %08X", *((unsigned int*)(0x1FFFE000+0x10))`, `*((unsigned int*)(0x1fffe000+0x14)));//See below memory notes.</code>
* 4th line is: <code>print_string(..., "%08X %08X",*((unsigned int*)(0x1FFFE000+0x18))`, `*((unsigned int*)(0x1fffe000+0x1C)));//See below memory notes.</code>

== 0x1FFFE000 memory ==
This memory is used by boot9 mainly for sending info to the arm11 for the error-screen. The data in this region is still stored in memory by the time the ARM9+ARM11 jumps to FIRM.

* 8bit-entry-array 0x1FFFE000+0xC: 8bit status-codes initialized by boot9 main(), for the FIRM-boot devices. +0 is NAND and +2 is wifi-spiflash.
* ...
* 8bit-entry-array 0x1FFFE000+0x10: Status-codes originally from nand_findfirmpartition_loadfirm(), for each of the 8 NCSD partitions.

== BootROM Status Codes ==
{| class="wikitable" border="1"
|-
! Value
! Description
|-
| 0x00
| Success
|-
| 0xDF(~32)
| Failed to read sector data from the device.
|-
| 0xF7(~8)
| A NAND FIRM from another partition was already found with a priority(firmhdr+4) >= to the value for the current partition's FIRM priority.
|-
| 0xF8(~7)
| The FIRM magicnum(firmhdr+0) is invalid.
|-
| 0xFF(~0)
| Initial value for each entry in the 8-entry array of status-codes for the NAND NCSD partitions. Indicates that the partition is not a FIRM partition(partition fs type isn't 0x3 or partition fs crypt-type isn't 0x2).
|}

== Boot9 startup ==

0xffff0000 jumps to 0xffff8000. 0xffff8000 is crt0:
* Very first thing this does is clear u8 register 0x10000002 ([[CONFIG_Registers#CFG_RST11|CFG_RST11]]) bit 0 to zero.
* Then sp is initialized for each cpumode, IRQs/FIQs are disabled during the first mode-switch.
* Order of mode-switches + sp initialization: svc-mode = 0xfff04000, irq-mode = 0xfff03f00, system-mode = 0xfff03b00. Hence, the rest of the code following this runs in system-mode.
* Then L_ffff80cc/mpu_init() is called.
* Then L_ffff0038() is called, which initializes the exception-handler addresses @ 0x08000000.
* Then L_ffff81b8() is called(r4 + lr are saved on the DTCM stack), which after calling a memclear function which doesn't do anything, it then clears 0x08000030 size 0x10. Here the DTCM at 0xfff00000 size 0x4000 is cleared.
* Then L_ffff81b4() is called, which branches to DTCM_init(). This copies the initial DTCM data from the Boot9 data image into boot9, then it clears 0xFFF00230 - 0xFFF01AC0.
* Then LT_ffff8228/main is jumped to, with LR set to the address of an infinite-branch-loop instruction.

mpu_init():
* Bitmask 0x000f9005 is cleared in the cp15 control register. MCR instructions which do then following are then executed: flush entire instruction cache, flush entire data cache, and drain write buffer.
* Then the 8 [[Memory_layout|MPU]] memregions are initialized.
* ITCM memregion reg = 0x24: baseaddr=0x0, size = 128MB(0x08000000).
* DTCM memregion reg = 0xfff0000a: baseaddr=0xfff00000, size=16KB(0x00004000).
* Then instruction cachable and data cachable/bufferable bits for the MPU regions are setup.
* Then the instruction/data access permissions for the MPU regions are setup.
* Lastly bitmask 0x0005707d is orred in the cp15 control register.

== Boot9 main() ==

The following functions are called: LT_ffff2024(), LT_ffff1ff8(), pxi_init(), rsa_init(), initialize_rsakeyslots_pubk(), crypto_initialize(), and aesengine_reset().
Then AES keyslot 0x3F is setup: aesengine_setnormalkey(0x3f, 5, ptr) is called. ptr on retail(CFG_UNITINFO check) is 0xffffd6e0, 0xffffd700 for devunit. Then essentially, aesengine_setctr(5, ptr+0x10) is executed.
Then AES keyslot 0x3f is selected.
When calling the following functions, if any of them return zero, it will immediately jump to setting ptr to 0x10012000(otp), otherwise when all of them return non-zero ptr = sp+0x94. otp_decrypt(sp+4), otp_verify(sp+4), initialize_consoleunique_itcm(sp+4, 0x07ffb800).
Then the following is executed: initialize_aeskeys_wrap(ptr, 0x70);
Then sp+4 size 0x100 is cleared to zero.

...

NAND firm-boot code-block, is described below. Note that boot9 is basically hard-coded to use deviceid NAND, not SD.
{
timer_updatestoredstate() is called, then the AES keyslot for NAND-FIRM is selected(0x6).
Then LT_ffff56c8() is called, if that returns non-zero the statuscode variable is set to ~2 then it jumps to NAND_BOOTEND.
Then LT_ffff5774(0x201) is called, if that returns non-zero the statuscode variable is set to ~1 then it jumps to NAND_BOOTEND.
Then fsdriver_setup_mmc() is called. Then nand_findfirmpartition_loadfirm(0) is called, with the statuscode variable set to the retval.
Executes a loop which runs 8 times: write the output from get_errorcode_arrayentry_xfff005e8(loopindex) to u8 0x1fffe000+0x10+loopindex(copy the array of 32bit error-codes for all 8 NCSD partitions initialized by nand_findfirmpartition_loadfirm() to the array of 8bit entries at 0x1fffe000+0x10).

NAND_BOOTEND:
Then the statuscode variable is written to u8 0x1fffe000+0xc.
Then LT_ffff5690(0x201, 0x1fffe018, 0x1fffe01c) is called.
Then LT_ffff5644() is called.
Then timer_updatestoredstate() is called.
When statuscode==0 for success, it jumps to FIRMLOAD_END. Otherwise, it continues to the next code-block.
}

Wifi spi-flash firm-boot code-block, executed when no FIRM was loaded successfully so far.
{
timer_updatestoredstate() is called.

Then spi_wififlash_cmdgetstatusreg(sp+0x100) is executed. When bit0 of the output u8 at sp+0x100 is clear, it will continue this code-block, otherwise it will set the statuscode variable to ~1 then jump to SPIFLASH_BOOTEND.
Then fsdriver_setup_wififlash() is called.
Here read_firmhdr_validate_loadfirm(0, 2) is called, with the statuscode variable set to the retval.

SPIFLASH_BOOTEND:
Then the statuscode variable is written to u8 0x1fffe000+0xe.
Then timer_updatestoredstate() is called.
When statuscode==0 for success, it jumps to FIRMLOAD_END. Otherwise, it executes writenormalkey_keyslot3f(), then jumps to FIRMLOAD_FAILURE.
}

FIRMLOAD_END:
Here it calls firmhdr_getarm11_entrypoint() and firmhdr_getarm9_entrypoint(). Immediately after calling each function it checks if the retval is 0, if so it then jumps to FIRMLOAD_FAILURE.
After calling initialize_x07ffbd00_x07ffc100_rsakeyslotsprivk(), it jumps to FIRMLOAD_EXIT.

FIRMLOAD_FAILURE:
Here it clears 0x07ffb800 size 0x3c70 to zero, endaddr = 0x07fff470.
Then it continues to FIRMLOAD_EXIT.

FIRMLOAD_EXIT:
Here firmboot() is called, which should never return. The instruction after this bl is a call for panic().

== Boot Procedure ==

* 0 seconds - unit is powered on. The ARM9 and ARM11 [[Memory_layout|bootroms]] begin execution.

* 2 seconds - ARM9 bootrom attempts to initialize the NAND.
**If the NAND is successfully initialized:
***the ARM9 bootrom loads the [[FIRM|firmware]] stored in the NAND [[FIRM]] partition which handles booting the rest of the system (if verification for NAND firm0 fails, the ARM9 bootrom will attempt to use firm1 instead).
***The ARM11 kernel loaded from FIRM then launches the [[NCCH#CXI|CXI]] ARM11 system modules loaded from FIRM (i.e. sm, fs, pm, loader, and pxi). (Note that the ARM11 kernel does not handle any encryption/RSA verification, this is handled by the [[FIRM|ARM9]].)
**If the NAND cannot be initialized (i.e. the NAND chip is not connected/damaged/etc), a [[Bootloader#Error_Codes|blue error screen]] appears.

* 3 seconds - all essential hardware is active.
**The [[Process_Manager_Services|PM]] module launches [[NS]]
**If [[Home_Menu#Auto-Boot_Function|auto-booting]] is needed, NS will [[NS#Auto-boot|auto-boot]] titles.
**Otherwise, NS will instead launch [[ErrDisp]] and the [[Configuration Memory#ACTIVEMENUTID|current active menu]] via the PM module. For retail units, this menu is usually the [[Home Menu]]. Note that the PM module first launches the module dependencies when launching a process, prior to actually launching the process.
**The further Home Menu startup process is described [[Home_Menu#Home_Menu_startup|here]].

* 4 seconds - the LCD screens are initialized.

* 7 seconds - [[Home Menu]] is fully initialized/loaded.

== NAND Reads during Boot ==
During a successful boot on 6.x, the bootloader (and firm) reads the following sectors from NAND (in this order):
00000000 (NCSD Partition Table)

Only verify 'FIRM' magic? (A second Header-read will be attempted even if everything except the magic is 0xFF...)
0B130000 (FIRM Partition)
0B530000 (Secondary FIRM Partition)

Verify RSA signature and parse Header:
0B130000 (FIRM: Header)
0B130200 (FIRM: Section 1)
0B163E00 (FIRM: Section 2)
0B193E00 (FIRM: Section 3)

00013000 .. Below is probably NATIVE_FIRM booting ..
00014000
00015000
00016000
00017000

09011A00
09011C00
09012000
09012400
...

== Error Codes ==
When the 3DS does not find the NAND chip, the following error is displayed:

[[Image:CTR_Bootrom_Error.jpg|240px]]

{| class="wikitable" border="1"
|-
! Error
! Description
|-
| <tt>00F800FE 00000000 00000000 00000200 00000000</tt>
| Error when having SD-card reader connected to NAND during boot.
|-
| <tt>00F800FE 00000000 00000000 00000400 00000000</tt>
| NAND not found error (?)
|-
| <tt>00F800FE FFFFFFFF FFFFFFFF 00000080 00800000</tt>
| NAND error when DAT1 was used as DAT0.
|-
| <tt>00F800FE FFFFFFFF FFFFFFFF 00000005 00800000</tt>
| NAND error when DAT2 was used as DAT0.
|-
| <tt>00F800FE FFFFFFFF FFFFFFFF 00000005 00000000</tt>
| NAND error when DAT3 was used as DAT0.
|-
| <tt>00F800FF F8F8FFFF FFFFFFFF 00000000 00000000</tt>
| Both the firm0 and firm1 partitions are corrupt (failed signature checks).
|-
| <tt>00F800EE FFFFFFFF FFFFFFFF 00000000 00000000</tt>
| [[NCSD]] header in sector 0 is corrupt (failed signature check).
|}

== Tools ==
* [https://github.com/yellows8/boot9_tools boot9_tools]

Bootloader

2017-01-18T01:53:18Z

Einstein95: /* Boot ROM */ Update

The bootloader is the binary code stored in the ARM9 and ARM11 boot ROMs and hence is ran when the 3DS is powered on. It's purpose is initializing hardware and loading the [[FIRM|system firmware]] from the internal [[Flash_Filesystem|NAND memory]].

Besides NATIVE_FIRM, the bootloader is also capable of booting other firmwares (such as TWL_FIRM and AGB_FIRM). However, this will result either in a japanese error-screen or a system shutdown, directly after FIRM-Launching.

== Boot ROM ==
Upon boot, parts of the ARM9 and ARM11 boot ROMs are protected by writing to [[CONFIG#CFG_SYSPROT9|CFG_SYSPROT9]] and [[CONFIG#CFG_SYSPROT11|CFG_SYSPROT11]], respectively. The ARM9 and ARM11 boot ROMs are identical for regular Old 3DS, 2DS, and regular New 3DS consoles.

== NAND FIRM boot ==
Boot9 is not hard-coded to only handle 2 FIRM partitions: it parses all 8 NCSD partitions for this. Boot9 will attempt to use every partition listed in the NCSD which is an actual FIRM partition, in the same order listed in the NCSD, until booting one of them succeeds. Among the not-yet-processed partitions, the FIRM which has the highest value at u32 firmhdr+4 will have a FIRM-boot attempted first. Since that value is normally 0x0, the order of FIRM-partition processing is normally identical to the order of the NCSD partitions.

Boot9 is hard-coded for using [[AES_Registers|AES]] keyslot 0x6 for NAND crypto.

== Non-NAND FIRM boot ==
Boot9 can also boot from non-NAND. For this a different set of RSA pubks are used(separate pubks for retail/devunit like NAND). The spiflash FIRM image for this is also encrypted with AES-CBC using a normalkey stored in prot_boot9(separate for retail/devunit). This encryption is basically used instead of what is used for NAND-firm-partitions. This encryption is only used for the FIRM sections, the FIRM header is used raw. The AES keyslot for this is only overwritten afterwards when booting from non-NAND fails. AES keyslot 0x3F is used for this.

CTR_word[0] = firmimageoffset;//FIRM section offset from FIRM header
CTR_word[1] = outbufaddr;//FIRM section load addr
CTR_word[2] = readsize;//FIRM section size
CTR_word[3] = readsize;//FIRM section size

When booting from NAND fails, boot9 will then attempt to boot from Wifi SPI-flash(this only triggers when the wifi module hw is properly accessible/connected, which is normally the case). The base offset for spiflash FIRM is 0x400. Note that this region(all data prior to offset 0x1F300) is write-protected by the spiflash(not writable from 3DS-mode / DS-mode).

For non-NAND booting, NCSD / FIRM-backup is not used.

== SDMMC ==

Boot9 has code implemented for using SD(HC) cards, but the input deviceids used by boot9 for those functions are hard-coded for NAND.

== Boot9 RSA keyslots ==

The following are initialized during main() startup, by initialize_rsakeyslots_pubk(). Each of these, for the ones which are actually set, have different keydata for retail/devunit.
* 0: Not set.
* 1: Used for the NAND FIRM signature.
* 2: Used for the non-NAND-FIRM signature.
* 3: Used for the NAND-NCSD FIRM signature.

When FIRM loading is successful, initialize_x07ffbd00_x07ffc100_rsakeyslotsprivk() is called, right before calling the final function in main(). Besides ITCM writing, this overwrites all 4 RSA keyslots with modulus + private-exponents loaded from boot9 data.

initialize_x07ffbd00_x07ffc100_rsakeyslotsprivk():
This initializes the 4 0x100-byte/0x200-byte chunks at 0x07ffb800+0x500(0x07ffbd00)/0x07ffb800+0x900(0x07ffc100). End address of the first section is 0x07ffc100(start addr of the second section), end address of the second section is 0x07ffc900. Hence, the first section total size is 0x400-bytes, while the second section total size is 0x800-bytes.

These are initialized using via the boot9 data image, with ptrs from DTCM. Seperate keydata is used for retail/devunit.

When initializing the first ITCM area: rsa_setkeyslot_privk() is called for all 4 RSA keyslots. The modulo for each one is also copied to (index*0x100) + 0x07ffb800 + 0x500. The private exponent is not copied into ITCM.

The second ITCM area is initialized by copying 4 0x200-byte entries in a loop. These are RSA pubks+privks, which Boot9 doesn't use itself at all besides this copy loop.

== Boot9 image data memory layout ==
0xffffb088 is the beginning of the boot9 image data section.

* 0xffffb088 size 0x38-bytes: This is the array used during FIRM-section-loading for the memory-range blacklist for FIRM sections.
* 0xffffb0c0(end-addr of the above area) size 0x20-bytes: Unknown.
* 0xffffb0e0(end-addr of the above area) size 0x2f80-bytes: This is *all* of the keys stored in the image.
* 0xffffe060(end addr of the above key-area) size 0x230-bytes: This is the initial DTCM image @ 0xFFF00000, see below.
* 0xffffe290(DTCM_image_end) - {boot9 image end}: All-zero.

Layout of the 0x2f80-byte key-area at 0xffffb0e0:
* 0xffffb0e0 size 0x2600-bytes: This is the RSA key-data, see below.
* 0xffffd6e0(end-addr of the above area) size 0x40-bytes: This is the keydata used for crypting the entire OTP with keyslot 0x3f, used by main(). The first 0x20-bytes is for retail, the remaining 0x20-bytes starting at 0xffffd700 is for devunit. Chunk+0(retail=0xffffd6e0 devunit=0xffffd700) is the normalkey, chunk+0x10(retail=0xffffd6f0 devunit=0xffffd710) is the AES-IV.
* ...
* 0xffffd760: size 0x100-bytes: First 0x80-bytes is for retail, the remaining 0x80-bytes at 0xffffd7e0 is for devunit. This 0x80-byte block is copied to 0x07ffcd00 by a Boot9 function, however that code actually does the copy in two 0x40-bytes chunks.
* 0xffffd860(end-addr of the above area) size 0x400-bytes: This is the bootrom_dataptr passed to the aes-keyinit function for retail. See the below Tools section for how this is processed.
* 0xffffdc60(end-addr of the above area) size 0x400-bytes: This is the devunit version of the above the 0x400-byte chunk. This is very last chunk of data in the boot9 data-section key-area: end addr for this area is 0xffffe060.

Layout of the 0x2600-byte RSA key-data at 0xffffb0e0:
First 0x1300-bytes is for retail, the remaining 0x1300-bytes starting at 0xffffc3e0 is for devunit.
* +0x0 retail=0xffffb0e0 devunit=0xffffc3e0: RSA modulo for keyslot3, initialized by initialize_rsakeyslots_pubk().
* +0x100 retail=0xffffb1e0 devunit=0xffffc4e0: RSA modulo for keyslot1, initialized by initialize_rsakeyslots_pubk().
* +0x200 retail=0xffffb2e0 devunit=0xffffc5e0: RSA modulo for keyslot2, initialized by initialize_rsakeyslots_pubk().
* +0x300 size 0x200, retail=0xffffb3e0 devunit=0xffffc6e0: First 0x100-bytes is the RSA modulo, then the following 0x100-bytes is the RSA privk(private-exponent). This is for RSA-engine keyslot0 with initialize_x07ffbd00_x07ffc100_rsakeyslotsprivk(), which also copies this modulo to the array starting at 0x07ffbd00.
* +0x500 size 0x200, retail=0xffffb5e0 devunit=0xffffc8e0: Used the same as the above block except for slot1.
* +0x700 size 0x200, retail=0xffffb7e0 devunit=0xffffcae0: Used the same as the above block except for slot2.
* +0x900 size 0x200, retail=0xffffb9e0 devunit=0xffffcce0: Used the same as the above block except for slot3.
* +0xb00 size 0x200, retail=0xffffbbe0 devunit=0xffffcee0: First 0x100-bytes is the RSA modulo, then the following 0x100-bytes is the RSA privk(private-exponent). The 0x200-bytes here is copied to slot0 in the array at 0x07ffc100 by initialize_x07ffbd00_x07ffc100_rsakeyslotsprivk().
* +0xd00 size 0x200, retail=0xffffbde0 devunit=0xffffd0e0: Used the same as the above block except for slot1.
* +0xf00 size 0x200, retail=0xffffbfe0 devunit=0xffffd2e0: Used the same as the above block except for slot2.
* +0x1100 size 0x200, retail=0xffffc1e0 devunit=0xffffd4e0: Used the same as the above block except for slot3.

== Boot9 DTCM layout ==
Most of this is just ptrs / other unknown data, not actual keys. However, there is an unknown 0x10-byte block @ +0x124(there's a ptr initialized for this block elsewhere).

== Boot11 image data memory layout ==
0x0001817c..0x000181f4 size 0x78-bytes: This seems to be the bootrom error screen font gfx data. This begins at the exact end-address of the crt0 code, the rest of the protected boot11 code begins at this end-address(0x000181f4).

0x00019400 is the beginning of the boot11 data area, the first 8-bytes here are unknown.
* 0x00019408..0x0001b498 size 0x2090-bytes: This is the blowfish keydata which gets copied to arm9itcm_twlkeydata+0x3e0 later.
* ...
* 0x0001c498..0x0001c4f8 size 0x60-bytes: This is the data which eventually gets copied to arm9itcm_twlkeydata+0x380.
* 0x0001c4f8..0x0001c538 size 0x40-bytes: This is the data which eventually gets copied to arm9itcm_twlkeydata+0x340.
* 0x0001c538..0x0001c578 size 0x40-bytes: This is the data which eventually gets copied to arm9itcm_twlkeydata+0x300.
* 0x0001c578..0x0001c5f8 size 0x80-bytes: This is the data which eventually gets copied to arm9itcm_twlkeydata+0x280.
* 0x0001c5f8..0x0001c678 size 0x80-bytes: This is the data which eventually gets copied to arm9itcm_twlkeydata+0x0.
* 0x0001c678..0x0001c878 size 0x200-bytes: This is the data which eventually gets copied to arm9itcm_twlkeydata+0x80.
* 0x0001c878..0x0001d078 size 0x800-bytes: These are the 3DS RSA-2048 modulus which are eventually copied to arm9_itcm+0x4900: on retail the first 4 are copied there by boot9, on devunit the last 4 are copied to itcm.
* 0x0001d078 size 0x120-bytes is the initial data for the .data section @ 0x1ffe8000, this is the very end of the protected arm11-bootrom.

== AES keys ==
See the Tools section for how Boot9 initializes the keyslots.

See also [[AES_Registers|here]].

For an issue with console-unique key-init, see [[OTP_Registers|here]].

== BootROM Errors ==
Sample error-screen(where firm0+firm1 RSA signatures were corrupted):

BOOTROM 8046
ERRCODE: 00F800FF
DEDEFFFF FFFFFFFF
00000000 00000000

* 1st line is: <code>print_string(..., "BOOTROM %X", 0x8046);//This last param comes from the .pool.</code>
* 2nd line is: <code>print_string(..., "ERRCODE: %08X", *((unsigned int*)(0x1FFFE000+0xC)));//See below memory notes.</code>
* 3rd line is: <code>print_string(..., "%08X %08X", *((unsigned int*)(0x1FFFE000+0x10))`, `*((unsigned int*)(0x1fffe000+0x14)));//See below memory notes.</code>
* 4th line is: <code>print_string(..., "%08X %08X",*((unsigned int*)(0x1FFFE000+0x18))`, `*((unsigned int*)(0x1fffe000+0x1C)));//See below memory notes.</code>

== 0x1FFFE000 memory ==
This memory is used by boot9 mainly for sending info to the arm11 for the error-screen. The data in this region is still stored in memory by the time the ARM9+ARM11 jumps to FIRM.

* 8bit-entry-array 0x1FFFE000+0xC: 8bit status-codes initialized by boot9 main(), for the FIRM-boot devices. +0 is NAND and +2 is wifi-spiflash.
* ...
* 8bit-entry-array 0x1FFFE000+0x10: Status-codes originally from nand_findfirmpartition_loadfirm(), for each of the 8 NCSD partitions.

== BootROM Status Codes ==
{| class="wikitable" border="1"
|-
! Value
! Description
|-
| 0x00
| Success
|-
| 0xDF(~32)
| Failed to read sector data from the device.
|-
| 0xF7(~8)
| A NAND FIRM from another partition was already found with a priority(firmhdr+4) >= to the value for the current partition's FIRM priority.
|-
| 0xF8(~7)
| The FIRM magicnum(firmhdr+0) is invalid.
|-
| 0xFF(~0)
| Initial value for each entry in the 8-entry array of status-codes for the NAND NCSD partitions. Indicates that the partition is not a FIRM partition(partition fs type isn't 0x3 or partition fs crypt-type isn't 0x2).
|}

== Boot9 startup ==

0xffff0000 jumps to 0xffff8000. 0xffff8000 is crt0:
* Very first thing this does is clear u8 register 0x10000002 ([[CONFIG_Registers#CFG_RST11|CFG_RST11]]) bit 0 to zero.
* Then sp is initialized for each cpumode, IRQs/FIQs are disabled during the first mode-switch.
* Order of mode-switches + sp initialization: svc-mode = 0xfff04000, irq-mode = 0xfff03f00, system-mode = 0xfff03b00. Hence, the rest of the code following this runs in system-mode.
* Then L_ffff80cc/mpu_init() is called.
* Then L_ffff0038() is called, which initializes the exception-handler addresses @ 0x08000000.
* Then L_ffff81b8() is called(r4 + lr are saved on the DTCM stack), which after calling a memclear function which doesn't do anything, it then clears 0x08000030 size 0x10. Here the DTCM at 0xfff00000 size 0x4000 is cleared.
* Then L_ffff81b4() is called, which branches to DTCM_init(). This copies the initial DTCM data from the Boot9 data image into boot9, then it clears 0xFFF00230 - 0xFFF01AC0.
* Then LT_ffff8228/main is jumped to, with LR set to the address of an infinite-branch-loop instruction.

mpu_init():
* Bitmask 0x000f9005 is cleared in the cp15 control register. MCR instructions which do then following are then executed: flush entire instruction cache, flush entire data cache, and drain write buffer.
* Then the 8 [[Memory_layout|MPU]] memregions are initialized.
* ITCM memregion reg = 0x24: baseaddr=0x0, size = 128MB(0x08000000).
* DTCM memregion reg = 0xfff0000a: baseaddr=0xfff00000, size=16KB(0x00004000).
* Then instruction cachable and data cachable/bufferable bits for the MPU regions are setup.
* Then the instruction/data access permissions for the MPU regions are setup.
* Lastly bitmask 0x0005707d is orred in the cp15 control register.

== Boot9 main() ==

The following functions are called: LT_ffff2024(), LT_ffff1ff8(), pxi_init(), rsa_init(), initialize_rsakeyslots_pubk(), crypto_initialize(), and aesengine_reset().
Then AES keyslot 0x3F is setup: aesengine_setnormalkey(0x3f, 5, ptr) is called. ptr on retail(CFG_UNITINFO check) is 0xffffd6e0, 0xffffd700 for devunit. Then essentially, aesengine_setctr(5, ptr+0x10) is executed.
Then AES keyslot 0x3f is selected.
When calling the following functions, if any of them return zero, it will immediately jump to setting ptr to 0x10012000(otp), otherwise when all of them return non-zero ptr = sp+0x94. otp_decrypt(sp+4), otp_verify(sp+4), initialize_consoleunique_itcm(sp+4, 0x07ffb800).
Then the following is executed: initialize_aeskeys_wrap(ptr, 0x70);
Then sp+4 size 0x100 is cleared to zero.

...

NAND firm-boot code-block, is described below. Note that boot9 is basically hard-coded to use deviceid NAND, not SD.
{
timer_updatestoredstate() is called, then the AES keyslot for NAND-FIRM is selected(0x6).
Then LT_ffff56c8() is called, if that returns non-zero the statuscode variable is set to ~2 then it jumps to NAND_BOOTEND.
Then LT_ffff5774(0x201) is called, if that returns non-zero the statuscode variable is set to ~1 then it jumps to NAND_BOOTEND.
Then fsdriver_setup_mmc() is called. Then nand_findfirmpartition_loadfirm(0) is called, with the statuscode variable set to the retval.
Executes a loop which runs 8 times: write the output from get_errorcode_arrayentry_xfff005e8(loopindex) to u8 0x1fffe000+0x10+loopindex(copy the array of 32bit error-codes for all 8 NCSD partitions initialized by nand_findfirmpartition_loadfirm() to the array of 8bit entries at 0x1fffe000+0x10).

NAND_BOOTEND:
Then the statuscode variable is written to u8 0x1fffe000+0xc.
Then LT_ffff5690(0x201, 0x1fffe018, 0x1fffe01c) is called.
Then LT_ffff5644() is called.
Then timer_updatestoredstate() is called.
When statuscode==0 for success, it jumps to FIRMLOAD_END. Otherwise, it continues to the next code-block.
}

Wifi spi-flash firm-boot code-block, executed when no FIRM was loaded successfully so far.
{
timer_updatestoredstate() is called.

Then spi_wififlash_cmdgetstatusreg(sp+0x100) is executed. When bit0 of the output u8 at sp+0x100 is clear, it will continue this code-block, otherwise it will set the statuscode variable to ~1 then jump to SPIFLASH_BOOTEND.
Then fsdriver_setup_wififlash() is called.
Here read_firmhdr_validate_loadfirm(0, 2) is called, with the statuscode variable set to the retval.

SPIFLASH_BOOTEND:
Then the statuscode variable is written to u8 0x1fffe000+0xe.
Then timer_updatestoredstate() is called.
When statuscode==0 for success, it jumps to FIRMLOAD_END. Otherwise, it executes writenormalkey_keyslot3f(), then jumps to FIRMLOAD_FAILURE.
}

FIRMLOAD_END:
Here it calls firmhdr_getarm11_entrypoint() and firmhdr_getarm9_entrypoint(). Immediately after calling each function it checks if the retval is 0, if so it then jumps to FIRMLOAD_FAILURE.
After calling initialize_x07ffbd00_x07ffc100_rsakeyslotsprivk(), it jumps to FIRMLOAD_EXIT.

FIRMLOAD_FAILURE:
Here it clears 0x07ffb800 size 0x3c70 to zero, endaddr = 0x07fff470.
Then it continues to FIRMLOAD_EXIT.

FIRMLOAD_EXIT:
Here firmboot() is called, which should never return. The instruction after this bl is a call for panic().

== Boot Procedure ==

* 0 seconds - unit is powered on. The ARM9 and ARM11 [[Memory_layout|bootroms]] begin execution.

* 2 seconds - ARM9 bootrom attempts to initialize the NAND.
**If the NAND is successfully initialized:
***the ARM9 bootrom loads the [[FIRM|firmware]] stored in the NAND [[FIRM]] partition which handles booting the rest of the system (if verification for NAND firm0 fails, the ARM9 bootrom will attempt to use firm1 instead).
***The ARM11 kernel loaded from FIRM then launches the [[NCCH#CXI|CXI]] ARM11 system modules loaded from FIRM (i.e. sm, fs, pm, loader, and pxi). (Note that the ARM11 kernel does not handle any encryption/RSA verification, this is handled by the [[FIRM|ARM9]].)
**If the NAND cannot be initialized (i.e. the NAND chip is not connected/damaged/etc), a [[Bootloader#Error_Codes|blue error screen]] appears.

* 3 seconds - all essential hardware is active.
**The [[Process_Manager_Services|PM]] module launches [[NS]]
**If [[Home_Menu#Auto-Boot_Function|auto-booting]] is needed, NS will [[NS#Auto-boot|auto-boot]] titles.
**Otherwise, NS will instead launch [[ErrDisp]] and the [[Configuration Memory#ACTIVEMENUTID|current active menu]] via the PM module. For retail units, this menu is usually the [[Home Menu]]. Note that the PM module first launches the module dependencies when launching a process, prior to actually launching the process.
**The further Home Menu startup process is described [[Home_Menu#Home_Menu_startup|here]].

* 4 seconds - the LCD screens are initialized.

* 7 seconds - [[Home Menu]] is fully initialized/loaded.

== NAND Reads during Boot ==
During a successful boot on 6.x, the bootloader (and firm) reads the following sectors from NAND (in this order):
00000000 (NCSD Partition Table)

Only verify 'FIRM' magic? (A second Header-read will be attempted even if everything except the magic is 0xFF...)
0B130000 (FIRM Partition)
0B530000 (Secondary FIRM Partition)

Verify RSA signature and parse Header:
0B130000 (FIRM: Header)
0B130200 (FIRM: Section 1)
0B163E00 (FIRM: Section 2)
0B193E00 (FIRM: Section 3)

00013000 .. Below is probably NATIVE_FIRM booting ..
00014000
00015000
00016000
00017000

09011A00
09011C00
09012000
09012400
...

== Error Codes ==
When the 3DS does not find the NAND chip, the following error is displayed:

[[Image:CTR_Bootrom_Error.jpg|240px]]

{| class="wikitable" border="1"
|-
! Error
! Description
|-
| <tt>00F800FE 00000000 00000000 00000200 00000000</tt>
| Error when having SD-card reader connected to NAND during boot.
|-
| <tt>00F800FE 00000000 00000000 00000400 00000000</tt>
| NAND not found error (?)
|-
| <tt>00F800FE FFFFFFFF FFFFFFFF 00000080 00800000</tt>
| NAND error when DAT1 was used as DAT0.
|-
| <tt>00F800FE FFFFFFFF FFFFFFFF 00000005 00800000</tt>
| NAND error when DAT2 was used as DAT0.
|-
| <tt>00F800FE FFFFFFFF FFFFFFFF 00000005 00000000</tt>
| NAND error when DAT3 was used as DAT0.
|-
| <tt>00F800FF F8F8FFFF FFFFFFFF 00000000 00000000</tt>
| Both the firm0 and firm1 partitions are corrupt (failed signature checks).
|-
| <tt>00F800EE FFFFFFFF FFFFFFFF 00000000 00000000</tt>
| [[NCSD]] header in sector 0 is corrupt (failed signature check).
|}

== Tools ==
* [https://github.com/yellows8/boot9_tools boot9_tools]

EShop

2017-01-16T19:18:01Z

Einstein95: /* Music */

{{DISPLAYTITLE:eShop}}
The Nintendo 3DS eShop was added in the June 2011 update for JP/EUR/USA.

From here, you can download Virtual Console games, 3D Classics, DSiware software, view screenshots, and 3D trailers for upcoming 3DS titles.

While eShop is loading, eShop will use command [[NIMS:CheckSysupdateAvailableSOAP]]. If a system update is available where title installation for system titles still needs finalized (or when the updated titles were not downloaded at all), eShop will then display the "system update is available" message.

The eShop application uses command [[AMNet:FinishInstallToMedia]] to finalize the SD title install (if the whole title is downloaded while eShop is still running), however, before using that command the eShop application also uses [[AMNet:FinishInstallToMedia]] to finalize installing all system titles (from system updates).

== eShop QR Codes ==
eShop QR Codes can be scanned with the camera, allowing one to quickly navigate to the desired eShop title with just two clicks. The QR Codes themselves is a simple text/url QR, started with "ESHOP://" string followed by a decimal eShop content link id(same IDs used internally by eShop for all content) and then some special data, delimited by a dot symbol, which can be ommited.

In order for the QR-code string data to be valid for eShop, it must begin with "ESHOP://5", with the first ID being all decimal.

{| class="wikitable"
|-
! QR Code source
! Region
! Title
! Serial
! Title ID
|-
| ESHOP://50010000000201.PEAALL000000 || EUR || nintendogs + cats: Golden Retriever & New Friends || ADAP || 0004000000030C00
|-
| ESHOP://50010000007463.J00101Z00061 || JPN || Pushmo || JCAJ || 0004000000068D00
|-
| ESHOP://50010000007870.PEAALL000000 || EUR || Crush 3D || ACRP || 0004000000040400
|-
| ESHOP://50010000008009.PEAALL000000 || EUR || Resident Evil Revelations || ABRE || 000400000005EE00
|-
| ESHOP://50010000008123.J00101Z00095 || JPN || Rhythm Kaitou R: Koutei Napoleon no Isan || ARTJ || 0004000000078100
|-
| ESHOP://50010000008404.PEAALL000000 || EUR || Mario & Sonic at the London 2012 Olympic Games || ACMP || 0004000000054900
|-
| ESHOP://50010000008447.J00101Z00094 || JPN || Biohazard Revelations || ABRJ || 0004000000053B00
|-
| ESHOP://50010000008449.J00101Z00082 || JPN || Itsu no Ma ni Koukan Nikki || JFRJ || 0004000000051600
|-
| ESHOP://50010000008561 || USA || Swapnote || JFRE || 0004000000051700
|-
| ESHOP://50010000008647.J00101Z00096 || JPN || Metal Gear Solid Snake Eater 3D || AMGJ || 000400000007A000
|-
| ESHOP://50010000008648.J00101Z00097 || JPN || Theatrythm Final Fantasy || ATHJ || 0004000000078200
|-
| ESHOP://50010000008782.PEAALL000000 || EUR || Metal Gear Solid Snake Eater 3D || AMGE || 0004000000082400
|-
| ESHOP://50010000008842.PEAALL000000 || EUR || Rhythm Thief And The Emperor's Treasure || ARTP || 000400000006DA00
|-
| ESHOP://50010000009084.J00101Z00121 || JPN || Hatsune Miku And Future Stars: Project Mirai || AM9J || 0004000000048000
|-
| ESHOP://50010000009102.J00101Z00106 || JPN || Denpa Ningen no RPG || JD8J || 0004000000077E00
|-
| ESHOP://50010000009161.J00101Z00118 || JPN || The Rolling Western || JAMJ || 0004000000059B00
|-
| ESHOP://50010000009261 || USA || Dillon's Rolling Western || JAME || 000400000007C400
|-
| ESHOP://50010000009401.J00101Z00120 || JPN || Kingdom Hearts 3D Nintendo Direct 2012.2.22 Video || JZ8J || 0004000000092E00
|-
| ESHOP://50010000009403.J00101Z00119 || JPN || Dragon Quest Monsters: Terry no Wonderland 3D Nintendo Direct 2012.2.22 Video || JZ7J || 0004000000092F00
|-
| ESHOP://50010000009575.PEAALL000000 || EUR || Kid Icarus: Of Myths And Monsters (Virtual Console) || RBLP || 0004000000069500
|-
| ESHOP://50010000009846 || USA || Ketzal's Corridors || JELE || 0004000000083800
|-
| ESHOP://50010000010434 || USA || New Super Mario Bros. 2 Trailer
|-
| ESHOP://50010000014732.J00101Z00407 || JPN || Chain Blaster || JCBJ || 00040000000DCC00
|}

* New QR Code for Japanese "Photos with Super Mario" has a different code string: ESHOP://50010000013120.J00108Z00001.CD588EAE95A3A68D15C647DA2AC0945FD88F70AB8A31149E51C4B05FB927B0B8

* There is a link in the Japanese eShop <nowiki>[http://www.nintendo.co.jp/3ds/eshop/qrCode.html?####]</nowiki> where you can replace the #### with the Japanese eShop title's serial and you will get it's QR code. (i.e. http://www.nintendo.co.jp/3ds/eshop/qrCode.html?JCAJ will get you the pushmo QR code)

* You could use Google's Chart API to create a QR code from the codes above: https://chart.googleapis.com/chart?chs=150x150&cht=qr&chl=ESHOP (replace the ESHOP text with the ESHOP:// link from one of the above)

== NS eShop application parameters ==
This section describes the 0x1C-byte structure stored at the application parameters from [[APT:StartApplication]], under the 0x300-byte buffer listed there.

{| class="wikitable"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Unknown, usually 0x3?
|-
| 0x4
| 0x4
| Unknown, usually 0x0?
|-
| 0x8
| 0x8
| u64 binary eShop content ID, same ID from the first string in eShop QR-codes except in binary form.
|-
| 0x10
| 0x10
| This is the last string from the QR-code(if any), no NUL-termination.
|}

== ExtData ==
The ExtData [[Extdata#Filesystem|File System]] for eShop is as follows:

root
├── icon
├── boss
│ └── TIGER100.tmp
└── user

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! Firmware Introduced
! Plain text
|-
| icon
| Duplicate from application ExeFS. Always image 00000002
| 0x36C0 Bytes
| [[2.0.0-2]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/eShopExtdata/icon Download_EUR]
|-
| TIGER100.tmp
| Always image 00000003.
| 0xCE47 bytes (varies?)
| [[2.0.0-2]]
|
|}

== Music ==
The eShop pulls its music from a static, region-specific link in a format similar to the following:

<nowiki>https://a248.e.akamai.net/f/248/103046/10m/npdl.c.app.nintendowifi.net/p01/nsa/CtfKXACbUPl8s7lk/BGM1/<region>_BGM1</nowiki>,
where region is one of the primary system regions (JP, US, EU, KR, etc.) Support also exists for 'BGM2', but this seems to be unused.
The music is held in a [[SpotPass|BOSS]] container.

The format consists of a brief XML header describing the audio (including the date it was set as the main eShop theme, loop times, size, etc) followed by a raw AAC stream. Tools such as FFmpeg can handle rebuilding this stream with ADTS headers for proper time info and such.

The [[Home_Menu|Home Menu]] uses nearly the same format for the Theme Shop's background music.

== URLs ==

eShop uses the following domains over HTTPS:

* cp3s-auth.c.shop.nintendowifi.net
* a248.e.akamai.net
* ninja.ctr.shop.nintendo.net
* samurai.ctr.shop.nintendo.net
* ccif.ctr.shop.nintendo.net
* eou.c.shop.nintendowifi.net

These domains are used by [[NIM_Services|NIM]]:

* nus.c.shop.nintendowifi.net
* ecs.c.shop.nintendowifi.net
* cas.c.shop.nintendowifi.net

ninja.ctr.shop.nintendo.net and samurai.ctr.shop.nintendo.net contain the bulk of the eShop information.

Requests with the following parameters will always return XML unless the header "Accept: application/json" is used, in which case JSON will be returned.

=== Common Parameters to ninja and samurai ===

For every request to the ninja and samurai servers, three parameters are always sent, though are not necessarily required:

{| class="wikitable" border="1"
|-
! Parameter
! Required
! Description
! Type
! Normal value
|-
| shop_id
| depends on the URL, usually no
| Describes which eShop instance should be used. 1 indicates the 3DS eShop, 2 indicates the Wii U eShop. 3 yields the same results as 2 but uses the img-eshop image server. 4 yields similar results as 3 but includes VC titles and updates, lacks image links for /titles and lacks release dates, prices and whether eShop and web sales are possible. For 4, links are given in both MP4 and Moflex formats for movies. Values greater than 4 or less than 1 are invalid. Defaults to 2 if not given.
| unsigned integer
| 1
|-
| lang
| no
| Describes the language. Seems to be an ISO 639-1 code in lower case. Every eShop region has a default language that is used if this parameter is not given. Some regions have multiple languages, such as CA (en and fr).
| string (two characters)
| depends on region and eShop settings; for US: en
|-
| _type
| no
| Describes whether the client wants to receive JSON or XML. This parameter seems actually unused and the servers always return XML.
| string
| json
|}

=== samurai ===

samurai.ctr.shop.nintendo.net (samurai) provides metadata about titles. The samurai server provides the backend for the eShop title search.

Common parameters described above can always be sent.

{| class="wikitable" border="1"
|-
! Path
! Description
! Parameters
|-
| /samurai/ws/'''region'''/titles
| Fetches the title list, containing the content id (not the 3DS title id), the product code and the localized title name
| All of these are optional.
* genre[]: genre ID (unsigned int)
* publisher[]: publisher ID (unsigned int)
* price_min: minimum price in region currency (signed int)
* price_max: maximum price in region currency (signed int)
* video_format: "moflex"
* freeword: keyword(s?) to look for (string)
* limit: maximum results
* offset: results to skip
* sort: one of "new", "popular" or "score"
* release_date_before: date/time title must have been released before (UNIX timestamp prefixed by +)
* release_date_after: date/time title must have been released after (UNIX timestamp prefixed by -)
|-
| /samurai/ws/'''region'''/news
| eShop news section
| (none)
|-
| /samurai/ws/'''region'''/telops
| Scrolling news on the top screen
| shop_id is required
|-
| /samurai/ws/'''region'''/directory/'''(long long unsigned int)''' and /samurai/ws/'''region'''/directory/~'''(string)'''
| Collections, like sales
| (none)
|-
| /samurai/ws/'''region'''/title/'''content id'''
| Returns information about the title, more verbose than /titles.
| (none)
|-
| /samurai/ws/'''region'''/demo/'''content id'''
| Returns information about a demo. Content ID is available in the main game's /title entry.
| (none)
|-
| /samurai/ws/'''region'''/contents
| Seems identical to /titles.
| see /titles
|-
| /samurai/ws/'''region'''/genres
| Returns a list of human-readable genre names and their corresponding genre id.
| (none)
|-
| /samurai/ws/'''region'''/publishers
| Returns a list of human-readable publisher names and their corresponding publisher id.
| (none)
|-
| /samurai/ws/'''region'''/platforms
| Returns a list of human-readable platform names and their corresponding platform id.
| (none)
|-
| /samurai/ws/'''region'''/title/'''content id'''/aocs
| Returns a list of add-on contents/downloadable content and prices in eShop region currency.
| (none)
|}

=== ninja ===

ninja.ctr.shop.nintendo.net (ninja) contains the seeds for the new 9.6 crypto, pricing information and handles actions that require authentication, such as purchases. Authentication information seems to be obtained from the [[ACT_Services|act:u sysmodule]] and works through OAuth2.

{| class="wikitable" border="1"
|-
! Path
! Description
! Parameters
|-
| /ninja/ws/'''region'''/title/'''content id'''/ec_info
| Contains information about the title. Such as title id, content size, and if available, the 9.6 crypto seed
| (none)
|-
| /ninja/ws/titles/id_pair
| Provides the content id for the given title id, or vice versa.
| title_id[] or ns_uid[] is required.
|-
| /ninja/ws/'''region'''/tax_locations
| Provides the tax location ID
| postal_code is required.
|-
| /ninja/ws/service_hosts
| Provides CCIF and Samurai servers
| country and shop_id is required.
|-
| /ninja/ws/country/'''region'''
| Various eshop related information for a given region
| (none)
|-
| /ninja/ws/country/'''region'''/replenish_amounts
| Provides the amounts of money you can replenish to your account.
| (none)
|}

=== Trusted Root CAs ===
The eShop application itself uses a [[HTTP_Services|RootCertChain]] for all HTTPS requests, all of the trusted root CAs are the following [[SSLC:RootCertChainAddDefaultCert|default]] ones:
* CertID 0x3
* CertID 0x6
* CertID 0x7
* CertID 0x8
* CertID 0x9
* CertID 0xA

=== Server changes following the November 2, 2015, maintenance ===
Pre-v10.0 eShop used an URL like this: "%s/samurai/ws/%s/title/%llu/other_purchased?shop_id=1&lang=%s&_type=json". That URL was removed with v10.0. That URL was requested when trying to load eShop app-pages. Following the maintenance mentioned above, this page was removed from the server, which broke pre-v10.0 eShop app whenever it tried to access that page.

URL changes between [[9.7.0-25]] and [[10.0.0-27]] are (green = add, red = remove):

%s/ninja/ws/%s/titles/online_prices?title%%5B%%5D=%s&lang=%s&include_coupon=true&shop_id=1&_type=json

%s/ninja/ws/%s/coupon/!check?shop_id=1&_type=json

%s/ninja/ws/my/owned_coupons?ns_uid=%llu&shop_id=1&_type=json

%s/ninja/ws/my/owned_coupons?shop_id=1&_type=json

%s/ninja/ws/my/parental_control/!put?shop_id=1&_type=json

%s/ninja/ws/%s/title/%llu/prepurchase_info?%s=%s&shop_id=1&_type=json

%s/samurai/ws/%s/coupon/%llu/titles?lang=%s&limit=%u&offset=%u&shop_id=1&_type=json

%s/ninja/ws/my/auto_billing/plans?limit=%u&offset=%u&shop_id=1&_type=json

%s/ninja/ws/%s/titles/online_prices?title%%5B%%5D=%s&lang=%s&include_coupon=true&coupon_id=%llu&shop_id=1&_type=json

%s/ninja/ws/my/auto_billing/%014llu/!cancel?shop_id=1&_type=json

%s/samurai/ws/%s/title/%llu/other_purchased?shop_id=1&lang=%s&_type=json

%s/samurai/movie/%s/%s/%014llu/moflex

==New3DS==
CheckNew3DS is called in two functions. This is only used for disabling UI button(s) for downloading New3DS titles when running on Old3DS. For example, on a New3DS patching a CheckNew3DS func-call with <retval=0>, results in the download button on the app page being grayed-out for a New3DS-only title.

Attempting to download a New3DS-only title with an Old3DS eShop account(even with a New3DS using an Old3DS account), results in the ninja server(specifically the "prepurchase_info" page) returning an error. HTTP 400 is returned with the following json reply:
000000: 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 {"error":{"code"
000010: 3a 22 33 31 35 36 22 2c 22 6d 65 73 73 61 67 65 :"3156","message
000020: 22 3a 22 54 68 69 73 20 70 72 6f 64 75 63 74 20 ":"This product
000030: 63 61 6e 6e 6f 74 20 62 65 20 70 75 72 63 68 61 cannot be purcha
000040: 73 65 64 5c 6e 6f 72 20 72 65 64 65 65 6d 65 64 sed\nor redeemed
000050: 20 66 6f 72 20 75 73 65 20 6f 6e 20 74 68 69 73 for use on this
000060: 20 73 79 73 74 65 6d 2e 5c 6e 5c 6e 49 66 20 74 system.\n\nIf t
000070: 68 65 20 70 72 6f 62 6c 65 6d 20 70 65 72 73 69 he problem persi
000080: 73 74 73 2c 20 70 6c 65 61 73 65 5c 6e 6d 61 6b sts, please\nmak
000090: 65 20 6e 6f 74 65 20 6f 66 20 74 68 65 20 65 72 e note of the er
0000a0: 72 6f 72 20 63 6f 64 65 20 61 6e 64 5c 6e 76 69 ror code and\nvi
0000b0: 73 69 74 20 73 75 70 70 6f 72 74 2e 6e 69 6e 74 sit support.nint
0000c0: 65 6e 64 6f 2e 63 6f 6d 2e 22 7d 7d endo.com."}}

==TitleID checks==
There's titleID checks in the system eShop application code for "Pokémon Omega Ruby". This appears to be used with UI-related code, unknown why.

CIA

2017-01-14T15:12:12Z

Einstein95: /* Tools */ Updated links

[[Category:File formats]]
== Overview ==
CIA stands for '''C'''TR '''I'''mportable '''A'''rchive. This format allows the installation of titles to the 3DS. CIA files and titles on [[Title list|Nintendo's CDN]] contain identical data. As a consequence, valid CIA files can be generated from CDN content. This also means CIA files can contain anything that titles on Nintendo's CDN can contain.

Under normal circumstances CIA files are used where downloading a title is impractical or not possible. Such as distributing a [[Download Play]] child, or installing forced Gamecard updates. Those CIA(s) are stored by the titles in question, in an auxiliary [[NCCH#CFA|CFA]] file.

Development Units, are capable of manually installing CIA files via the [[3DS Development Unit Software#Dev Menu|Dev Menu]].

== Format ==

This is the current version of the CIA format, it was finalised in late 2010. (Older versions of the CIA format can be viewed on the [[Talk:CIA|Talk]] page)

The CIA format has a similar structure to the [http://wiibrew.org/wiki/Wad WAD format].

The file is represented in little-endian.

The data is aligned in 64 byte blocks (if a content ends at the middle of the block, the next content will begin from a new block).

=== CIA Header ===

{| class="wikitable" border="1"
|-
! START
! SIZE
! DESCRIPTION
|-
| 0x00
| 0x04
| Archive Header Size (Usually = 0x2020 bytes)
|-
| 0x04
| 0x02
| Type
|-
| 0x06
| 0x02
| Version
|-
| 0x08
| 0x04
| Certificate chain size
|-
| 0x0C
| 0x04
| [[Ticket]] size
|-
| 0x10
| 0x04
| [[TMD]] file size
|-
| 0x14
| 0x04
| Meta size (0 if no Meta data is present)
|-
| 0x18
| 0x08
| Content size
|-
| 0x20
| 0x2000
| Content Index
|}

The order of the sections in the CIA file:
* certificate chain
* Ticket
* TMD file data
* Content file data
* Meta file data (Not a necessary component)

The contents (NCCH/SRL) are encrypted using 128-bit AES-CBC. The encryption uses the decrypted titlekey from the [[Ticket#Structure|ticket]], and the content index from the TMD padded with zeros as the IV.

=== Certificate Chain ===

There are three [[Certificates|certificates]] in this chain:

{| class="wikitable" border="1"
|-
! CERTIFICATE
! SIGNATURE TYPE
! RETAIL CERT NAME
! DEBUG CERT NAME
! DESCRIPTION
|-
| CA
| RSA-4096
| CA00000003
| CA00000004
| Used to verify the Ticket/TMD Certificates
|-
| Ticket
| RSA-2048
| XS0000000c
| XS00000009
| Used to verify the Ticket signature
|-
| TMD
| RSA-2048
| CP0000000b
| CP0000000a
| Used to verify the TMD signature
|}

The CA certificate is issued by 'Root', the public key for which is stored in NATIVE_FIRM.

=== Meta ===

The structure of this data is as follows:

{| class="wikitable" border="1"
|-
! START
! SIZE
! DESCRIPTION
|-
| 0x00
| 0x180
| Title ID dependency list - Taken from the application's [[NCCH#Extended Header|ExHeader]]
|-
| 0x180
| 0x180
| Reserved
|-
| 0x300
| 0x4
| Core Version
|-
| 0x304
| 0xFC
| Reserved
|-
| 0x400
| 0x36C0
| [[SMDH|Icon Data]](.ICN) - Taken from the application's [[ExeFS]]
|}

Obviously this section is not present in TWL CIA files, or any other CIA file which does not contain a [[NCCH#CXI|CXI]].

== Tools ==

* [https://github.com/3dshax/ctr/tree/master/ctrtool ctrtool] - Reading/Extraction of CIA files. This can only decrypt the title-key for development CIAs, since retail CIAs use the [[AES]] hardware key-scrambler for the common-key keyslot.

* [https://github.com/Tiger21820/ctr_toolkit/tree/master/make_cia make_cia] - Generating CIA files. Requires CommonKey and ticket/TMD RSA-2048 private exponents.

* [https://github.com/Tiger21820/ctr_toolkit/tree/master/make_cdn_cia make_cdn_cia] - (CMD)(Windows/Linux) Generates CIA files from CDN Content

* [[makerom]] - Tool which can be used to create NCCH, CCI, and CIA files.

== Title Key Encryption ==

The unencrypted Title Key is used to encrypt the data in a CIA. The encrypted Title Key of a CIA can be found at offset 0x1BF in a CIA's Ticket.
Each Title Key is encrypted with AES-CBC to get the encrypted Title Key.

To encrypt an unencrypted title key, you need:

* Common key (as byte array)
* Title ID (as ulong)
* (and of course the unencrypted title key you want to encrypt) (as byte array)

The title key encryption process starts by converting the ulong (Title ID) into a byte array using by retrieving the bytes of the Title ID using BitConverter.GetBytes().
If the converted bytes (title ID) are in Little Endian, reverse those bytes. (in C# it would be Array.Reverse(byte_array_from_bitconverter))
This process makes the Title Key encryption IV.

Next, after you've gotten your Title Key's IV, you can start your cryptography transformation. Using AESManaged, where:

Key = Common Key

IV = the byte array found in the conversion process above

Mode = CipherMode.CBC

Create the encryptor (AesManaged.CreateEncryptor(key, iv)) where the key and IV are both the same as above.

Then, create a CryptoStream and a MemoryStream. The Crypto stream should start with the arguments (memorystream, aes_transform_from_above, CryptoStreamMode.Write).

Write to the CryptoStream where buffer=unencrypted_titlekey, offset=0, and count=the length of the unencrypted title key.

Use FlushFinalBlock() on the CryptoStream.

Finally, then, the encrypted title key will be available from your memory
stream. (to output the calculated encrypted title key as a byte array, you can use memorystream.ToArray(), for example)

Example function: (C#)

<pre>
public static byte[] EncryptMyTitleKey(byte[] commonKey, byte[] titleKey, ulong titleId)
{
// Make encryption IV
byte[] titleidasbytes = new byte[0x10];
for (int i = 0; i < 0x10; i++)
{
titleidasbytes[i] = 0;
}
byte[] bitBytes = BitConverter.GetBytes(titleId);
if (BitConverter.IsLittleEndian)
{
Array.Reverse(bitBytes);
}
bitBytes.CopyTo(titleidasbytes, 0);
// Encrypt
ICryptoTransform transform = new AesManaged { Key = commonKey, IV = titleidasbytes, Mode = CipherMode.CBC }.CreateEncryptor(commonKey, titleidasbytes);
MemoryStream memstream = new MemoryStream();
CryptoStream cryptostream = new CryptoStream(memstream, transform, CryptoStreamMode.Write);
cryptostream.Write(titleKey, 0, titleKey.Length);
cryptostream.FlushFinalBlock();
return memstream.ToArray();
}
</pre>

3DS System Flaws

2017-01-11T05:15:48Z

Einstein95: /* Hardware */

Exploits are used to execute unofficial code (homebrew) on the Nintendo 3DS. This page is a list of publicly known system flaws, for userland applications/applets flaws see [[3DS_Userland_Flaws|here]].

=Stale / Rejected Efforts=
* Neimod has been working on a RAM dumping setup for a little while now. He's de-soldered the 3DS's RAM chip and hooked it and the RAM pinouts on the 3DS' PCB up to a custom RAM dumping setup. A while ago he published photos showing his setup to be working quite well, with the 3DS successfully booting up. However, his flickr stream is now private along with most of his work.

* Someone (who will remain unnamed) has released CFW and CIA installers, all of which is copied from the work of others, or copyrighted material.

==Tips and info==
The 3DS uses the XN feature of the ARM11 processor. There's no official way from applications to enable executable permission for memory containing arbitrary unsigned code(there's a [[SVC]] for this, but only [[RO_Services|RO-module]] has access to it). A usable userland exploit would still be useful: you could only do return-oriented-programming with it initially. From ROP one could then exploit system flaw(s), see below.

SD card [[extdata]] and SD savegames can be attacked, for consoles where the console-unique [[Nand/private/movable.sed|movable.sed]] was dumped(accessing SD data is far easier by running code on the target 3DS however).

=System flaws=
== Hardware ==
{| class="wikitable" border="1"
! Summary
! Description
! Fixed with hardware model/revision
! Newest hardware model/revision this flaw was checked for
! Timeframe this was discovered
! Discovered by
|-
| ARM9/ARM11 bootrom vectors point at uninitialized RAM
| ARM9's and ARM11's exception vectors are hardcoded to point at the CPU's internal memory (0x08000000 region for ARM9, AXIWRAM for ARM11). While the bootrom does set them up to point to an endless loop at some point during boot, it does not do so immediately. As such, a carefully-timed fault injection (via hardware) to trigger an exception (such as an invalid instruction) will cause execution to fall into ARM9 RAM.
Since RAM isn't cleared on boot (see below), one can immediately start execution of their own code here to dump bootrom, OTP, etc.
The ARM9 bootrom does the following at reset: reset vector branches to another instruction, then branches to bootrom+0x8000. Hence, there's no way to know for certain when exactly the ARM9 exception-vector data stored in memory gets initialized.

This requires *very* *precise* timing for triggering the hardware fault.

It has been exploited by derrek to dump the ARM9 bootrom as of Summer 2015.
| None: all available 3DS models at the time of writing have the exact same ARM9/ARM11 bootrom for the unprotected areas.
| New3DS
| End of February 2014
| [[User:Derrek|derrek]], WulfyStylez (May 2015) independently
|-
| Missing AES key clearing
| The hardware AES engine does not clear keys when doing a hard reset/reboot.
| None
| New3DS
| August 2014
| Mathieulh/Others
|-
| No RAM clearing on reboots
| On an MCU-triggered reboot all RAM including FCRAM/ARM9 memory/AXIWRAM/VRAM keeps its contents.
| None
| New3DS
| March 2014
| [[User:Derrek|derrek]]
|-
| 32bits of actual console-unique TWLNAND keydata
| On retail the 8-bytes at ARM9 address [[Memory_layout|0x01FFB808]] are XORed with hard-coded data, to generate the TWL console-unique keys, including TWLNAND. On Old3DS the high u32 is always 0x0, while on New3DS that u32 is always 0x2. On top of this, the lower u32's highest bit is always ORed. only 31 bits of the TWL console-unique keydata / TWL consoleID are actually console-unique.
This allows one to easily bruteforce the TWL console-unique keydata with *just* data from TWLNAND. On DSi the actual console-unique data for key generation is 8-bytes(all bytes actually set).
| None
| New3DS
| 2012?
| [[User:Yellows8|Yellows8]]
|-
| DSi / 3DS-TWL key-generator
| After using the key generator to generate the normal-key, you could overwrite parts of the normal-key with your own data and then recover the key-generator output by comparing the new crypto output with the original crypto output. From the normal-key outputs, you could deduce the TWL key-generator function.
This applies to the keyX/keyY too.

This attack does not work for the 3DS key-generator because keyslots 0-3 are only for TWL keys.
| None
| New3DS
| 2011
| [[User:Yellows8|Yellows8]]
|-
| 3DS key-generator
| The algorithm for generating the normal-keys for keyslots is cryptographically weak. As a result, it is easily susceptible to differential cryptanalysis if the normal-key corresponding to any scrambler-generated keyslot is discovered.

Several such pairs of matching normal-keys and KeyY values were found, leading to deducing the key-generator function.
| None
| New3DS
| February 2015
| [[User:Yellows8|Yellows8]], [[User:Plutooo|plutoo]]
|-
| FIRM partitions known-plaintext
| The [[Flash_Filesystem|FIRM partitions]] are encrypted with AES-CTR without a MAC. Since this works by XOR'ing data with a static (per-console in this case) keystream, one can deduce the keystream of a portion of each FIRM partition if they have the actual FIRM binary stored in it.

This can be paired with many exploits. For example, it allows minor FIRM downgrades (i.e. 10.4 to 9.6 or 9.5 to 9.4, but not 9.6 to 9.5).

This can be somewhat addressed by having a FIRM header skip over previously used section offsets, but this would just air-gap newer FIRMs without fixing the core bug. This can also only be done a limited number of times due to the size of FIRM versus the size of the partitions.
| None
| New3DS
|
| Everyone
|-
| RSA keyslots don't clear exponent when setting modulus
| The [[RSA_Registers|RSA keyslots]] are set by boot ROM to have four private RSA keys. The exponent value in the RSA registers is write-only and not readable.

However, when setting a keyslot's modulus, the RSA hardware leaves the exponent alone. This allows retrieving the exponent by doing a discrete logarithm of the output.

By setting the modulus to a prime number whose modular multiplicative order is "smooth" (that is, p-1 is divisible by only small prime numbers), discrete logarithms can be calculated quickly using the [[wikipedia:Pohlig-Hellman algorithm|Pohlig-Hellman algorithm]]. If the prime chosen is greater than the modulus, but the same bit size, the discrete logarithm is the private exponent.

This exploit's usefulness is limited: these four keyslots' values are only used in current firmware for deriving the 6.x save and 7.x NCCH keys, which were already known. Additionally, with a boot ROM dump, this exploit is moot; these private keys are located in the protected ARM9 boot ROM.
| None
| New3DS
| March 2016
| [[User:Myria|Myria]]
|}

== ARM9 software ==

=== arm9loader ===
{| class="wikitable" border="1"
|-
! Summary
! Description
! Successful exploitation result
! Fixed in [[FIRM]] system version
! Last [[FIRM]] system version this flaw was checked for
! Timeframe this was discovered
! Public disclosure timeframe
! Discovered by
|-
| Generating the keysector console-unique keys with ITCM+Boot9
| [[Bootloader|Boot9]] decrypts the 0x100-byte [[OTP_Registers|OTP]] using AES-CBC with keydata stored in Boot9. If hash verification is successful, the plaintext of the first 0x90-bytes are copied into [[Memory_layout|ITCM]]. This is the ''exact'' ''same'' region hashed by arm9loader when generating the console-unique keys for decrypting the keysector, except arm9loader uses the raw encrypted OTP.

Therefore, with the OTP keydata+IV from Boot9 you can: encrypt the 0x90-bytes from ITCM, then hash the output to get the console-unique keys for the system's keysector. This can even be done for Old3DS which doesn't have the arm9loader keysector officially.

It's unknown why arm9loader only used the first 0x90-bytes of OTP. Using more data from OTP would've prevented this. Fixing this would require doing exactly that, but that would also mean updating the NAND keysector(which is dangerous).
| See description.
| None
|
| 2015
| January 6, 2017
| [[User:Yellows8|Yellows8]]
|-
| Rearrangable keys in the NAND keystore
| Due to the keystore being encrypted with AES-ECB, one can rearrange blocks and still have the NAND keystore decrypt in a deterministic way.

Using 10.0 FIRM it is possible to rearrange keys such that ARM9 memory is executed. As such using existing ARM9 execution 10.0 FIRM can be written to NAND and a payload written to memory, with the payload to be executed post-K9L using an MCU reboot.
| arm9loaderhax given existing ARM9 code execution
| None
| [[11.2.0-35|11.2.0-X]]
| Early 2016
| 27 September 2016
| Myria, [[User:Dark samus|dark_samus]]; mathieulh (independently); [[User:Plutooo|plutoo]] (independently) + others
|-
| Uncleared OTP hash keydata in console-unique 0x11 key-generation
| Kernel9Loader does not clear the [[SHA_Registers#SHA_HASH|SHA_HASH register]] after use. As a result, the data stored here as K9L hands over to Kernel9 is the hash of [[OTP_Registers|OTP data]] used to seed the [[FIRM#New_3DS_FIRM|console-unique NAND keystore decryption key]] set on keyslot 0x11.

Retrieving this keydata and the [[Flash_Filesystem#0x12C00|NAND keystore]] of the same device allows calculating the decrypted New3DS NAND keystore (non-unique, common to all New3DS units), which contains AES normal keys, also set on keyslot 0x11, which are then used to derive all current [[AES_Registers#Keyslots|New3DS-only AES keyXs]] including the newer batch introduced in [[9.6.0-24#arm9loader|9.6.0-X]]. From there, it is trivial to perform the same key derivation in order to initialize those keys on any system version, and even on Old3DS.

This can be performed by exploiting the "arm9loaderhax" vulnerability to obtain post-K9L code execution after an MCU reboot (the bootrom section-loading fail is not relevant here, this attack was performed without OTP data by brute-forcing keys), and using this to dump the SHA_HASH register. This attack works on any FIRM version shipping a vulnerable version of K9L, whereas OTP dumping required a boot of <[[3.0.0-6|3.0.0-X]].

This attack results in obtaining the entire (0x200-bytes) NAND keystore - it was confirmed at a later date that this keystore is encrypted with the same key (by comparing the decrypted data from multiple units), and therefore using another key in this store will not remedy the issue as all keys are known (i.e. later, unused keys decrypt to the same 0x200-bytes constant with the same OTP hash). Later keys could have been encrypted differently but this is not the case. As a result of this, it is not possible for Nintendo to use K9L again in its current format for its intended purpose, though this was not news from the moment people dumped a New3DS OTP.
| Derivation of all New3DS keys generated via the NAND keystore (0x1B "Secure4" etc.)
| None
| [[11.2.0-35|11.2.0-X]]
| ~April 2015, implemented in May 2015
| 13 January 2016
| [[User:WulfyStylez|WulfyStylez]], [[User:Dazzozo|Dazzozo]], [[User:Shinyquagsire23|shinyquagsire23]] (complimentary + implemented), [[User:Plutooo|plutoo]], Normmatt (discovered independently)
|-
| enhanced-arm9loaderhax
| See the 32c3 3ds talk.
Since this is a combination of a trick with the arm9-bootrom + arm9loaderhax, and since you have to manually write FIRM to the firm0/firm1 NAND partitions, this can't be completely fixed. Any system with existing ARM9 code execution and an OTP/OTP hash dump can exploit this. Additionally, by using the FIRM partition known-plaintext bug and bruteforcing the second entry in the keystore, this can currently be exploited on all New3DS systems without any other prerequisite hacks.
| arm9loaderhax which automatically occurs at hard-boot.
| See arm9loaderhax / description.
| See arm9loaderhax / description.
| Theorized around mid July, 2015. Later implemented+tested by [[User:Plutooo|plutoo]] and [[User:Derrek|derrek]].
| 32c3 3ds talk (December 27, 2015)
| [[User:Yellows8|Yellows8]]
|-
| Missing verification-block for the 9.6 keys (arm9loaderhax)
| Starting with [[9.6.0-24|9.6.0-X]] a new set of NAND-based keys were introduced. However, no verification block was added to verify that the new key read from NAND is correct. This was technically an issue from [[9.5.0-22|9.5.0-X]] with the original sector+0 keydata, however the below is only possible with [[9.6.0-24|9.6.0-X]] since keyslots 0x15 and 0x16 are generated from different 0x11 keyXs.

Writing an incorrect key to NAND will cause arm9loader to decrypt the ARM9 kernel as garbage and then jump to it.

This allows an hardware-based attack where you can boot into an older exploited firmware, fill all memory with NOP sleds/jump-instructions, and then reboot into executing garbage. By automating this process with various input keydata, eventually you'll find some garbage that jumps to your code.

This gives very early ARM9 code execution (pre-ARM9 kernel). As such, it is possible to dump RSA keyslots with this and calculate the 6.x [[Savegames#6.0.0-11_Savegame_keyY|save]], and 7.x [[NCCH]] keys. This cannot be used to recover keys initialized by arm9loader itself. This is due to it wiping the area used for its stack during NAND sector decryption and keyslot init.

Due to FIRMs on both Old and New 3DS using the same RSA data, this can be exploited on Old3DS as well, but only if one already has the actual plaintext normalkey from New3DS NAND sector 0x96 offset-0 and has dumped the OTP area of the Old3DS.
| Recovery of 6.x [[Savegames#6.0.0-11_Savegame_keyY|save key]]/7.x [[NCCH]] key, access to uncleared OTP hash keydata
| None
| [[11.2.0-35|11.2.0-X]]
| March, 2015
|
| [[User:Plutooo|plutoo]]
|-
| Uncleared New3DS keyslot 0x11
| Originally the New3DS [[FIRM]] arm9bin loader only cleared keyslot 0x11 when it gets executed at firmlaunch. This was fixed with [[9.5.0-22|9.5.0-X]] by completely clearing keyslot 0x11 immediately after the loader finishes using keyslot 0x11.
This means that any ARM9 code that can execute before the loader clears the keyslot at firmlaunch(including firmlaunch-hax) can get access to the uncleared keyslot 0x11, which then allows one to generate all <=v9.5 New3DS keyXs which are generated by keyslot 0x11.

Therefore, to completely fix this the loader would have to generate more keys using different keyslot 0x11 keydata. This was done with [[9.6.0-24|9.6.0-X]].
| New3DS keyXs generation
| Mostly fixed with [[9.5.0-22|9.5.0-X]], completely fixed with new keys with [[9.6.0-24|9.6.0-X]].
|
| February 3, 2015 (one day after [[9.5.0-22|9.5.0-X]] release)
|
| [[User:Yellows8|Yellows8]]
|}

=== Process9 ===
{| class="wikitable" border="1"
|-
! Summary
! Description
! Successful exploitation result
! Fixed in [[FIRM]] system version
! Last [[FIRM]] system version this flaw was checked for
! Timeframe this was discovered
! Public disclosure timeframe
! Discovered by
|-
| Leak of normal-key matching a key-scrambler key
| New 3DS firmware versions [[8.1.0-0 New3DS|8.1.0]] through [[9.2.0-20|9.2.0]] set the encryption key for [[Amiibo]] data using a hardcoded normal-key in Process9. In firmware [[9.3.0-21|9.3.0]], Nintendo "fixed" this by using the key scrambler instead, by calculating the keyY value for keyslot 0x39 that results in the same normal-key, then hardcoding that keyY into Process9.

Nintendo's fix is actually the problem: Nintendo revealed the normal-key matching an unknown keyX and a known keyY. Combined with the key scrambler using an insecure scrambling algorithm (see "Hardware" above), the key scrambler function could be deduced.
| Deducing the keyX for keyslot 0x39 and the key scrambler algorithm
| New 3DS [[9.3.0-21|9.3.0-X]], sort of
| [[10.0.0-27|10.0.0-X]]
| Sometime in 2015 after the hardware key-generator was broken.
| 32c3 3ds talk (December 27, 2015)
| [[User:Yellows8|Yellows8]]
|-
| Leak of normal-key matching a key-generator key
| During the 3DS' development (June/July 2010) Nintendo added support installing encrypted content ([[CIA]]). Common-key index1 was intended to be a [[AES|hardware generated key]]. However while they added code to generate the key in hardware, they forgot to remove the normal-key for index1 (used elsewhere, likely old debug code). Nintendo later removed the normal key sometime before the first non-prototype firmware release.

Knowing the keyY and the normal-key for common-key index1, the devkit key-generator algorithm can be deduced (see "Hardware" above). Additionally the remaining devkit common-keys can be generated once the common-key keyX is recovered.

Note the devkit key-generator was discovered to be the same as the retail key-generator.
| Deducing the keyX for keyslot 0x3D and hardware key-generator algorithm. Generate remaining devkit common-keys.
| pre-[[1.0.0-0|1.0.0-X]]
|
| Shortly after the key-generator was revealed to be flawed at the 32c3 3ds talk
| January 20, 2016
| [[User:Jakcron|jakcron]]
|-
| safefirmhax
| SAFE_MODE_FIRM is almost never updated(even when NATIVE_FIRM is updated for vuln fixes), this can be noticed by ''just'' checking 3dbrew/ninupdates title-listings.

The fix for firmlaunch-hax was only applied to NATIVE_FIRM in [[9.5.0-22|9.5.0-X]], leaving SAFE_FIRM exploitable. With ARM11-kernel execution, one can trigger FIRM-launch in to SAFE_FIRM, do Kernel9 <=> Kernel11 sync, PXI sync and then repeat the original attack on SAFE_FIRM instead.
| ARM9 code execution
| None
|
| 2012-2013?
| Wiki: January 2, 2017
| Everyone
|-
| ntrcardhax
| When reading the banner of a NTR title, Process9 relies on a hardware register to know when the banner was fully read.
However that register is shared between the ARM9 and the ARM11.
An attacker with k11 control can so make Process9 believe the banner continues forever and so trigger a buffer overflow.
With a custom banner for a NTR flashcart, this leads to code execution in Process9.

This was fixed by adding bound checks on the read data.
| ARM9 code execution
| [[10.4.0-29|10.4.0-X]]
|
| March 2015
| 32c3 3ds talk (December 27, 2015)
| [[User:Plutooo|plutoo]]
|-
| Title downgrading via [[Application_Manager_Services|AM]]([[Application_Manager_Services_PXI|PXI]])
| When a title is *already* installed, Process9 will compare the installed title-version with the title-version being installed. When the one being installed is older, Process9 would return an error.

However, this can be bypassed by just deleting the title first via the service command(s) for that: with the title removed from the [[Title_Database]], Process9 can't compare the input title-version with anything. Hence, titles can be downgraded this way.

[[11.0.0-33|11.0.0-X]] fixed this for key system titles (MSET, Home Menu, spider, ErrDisp, SKATER, NATIVE_FIRM, and every retail system module), by checking the version of the title to install against a hard-coded list of (titleID, minimumVersionRequired) pairs.
| Bypassing title version check at installation, which then allows downgrading any title.
| [[11.0.0-33|11.0.0-X]], for key system titles.
| NATIVE_FIRM / AM-sysmodule [[11.0.0-33|11.0.0-X]]
| ?
|
| ?
|-
| FAT FS code null-deref
| When FSFile:Read is used with a file which is corrupted on a FAT filesystem(in particular SD), Process9 can crash. This particular crash is caused by a function returning NULL instead of an actual ptr due to an error. The caller of that function doesn't check for NULL which then triggers a read based at NULL.

Sample "fsck.vfat -n -v -V <fat image backup>" output for the above crash:

<pre>...
Starting check/repair pass.
<FilePath0> and
<FilePath1>
share clusters.
Truncating second to 3375104 bytes.
<FilePath1>
File size is 2787392 bytes, cluster chain length is 16384 bytes.
Truncating file to 16384 bytes.
Checking for unused clusters.
Reclaimed 1 unused cluster (16384 bytes).
Checking free cluster summary.
Free cluster summary wrong (1404490 vs. really 1404491)
Auto-correcting.
Starting verification pass.
Checking for unused clusters.
Leaving filesystem unchanged.</pre>
| Useless null-based-read
| None
| [[9.6.0-24|9.6.0-X]]
| July 8-9, 2015
|
| [[User:Yellows8|Yellows8]]
|-
| RSA signature padding checks
| The TWL_FIRM RSA sig padding check code used for all TWL RSA sig-checks has issues, see [[FIRM|here]].
The main 3DS RSA padding check code(non-certificate, including NATIVE_FIRM) uses the function used with the above to extract more padding + the actual hash from the additional padding. This isn't really a problem here because there's proper padding check code which is executed prior to this.
|
| None
| [[9.5.0-22|9.5.0-X]]
| March 2015
|
| [[User:Yellows8|Yellows8]]
|-
| [[AMPXI:ValidateDSiWareSectionMAC]] [[AES_Registers|AES]] keyslot reuse
| When the input DSiWare section index is higher than <max number of DSiWare sections supported by this FIRM>, Process9 uses keyid 0x40 for calculating the AESMAC, which translates to keyslot 0x40. The result is that the keyslot is left at whatever was already selected before, since the AES selectkeyslot code will immediately return when keyslot is >=0x40. However, actually exploiting this is difficult: the calculated AESMAC is never returned, this command just compares the calculated AESMAC with the input AESMAC(result-code depends on whether the AESMACs match). It's unknown whether a timing attack would work with this.
This is basically a different form of the pxips9 keyslot vuln, except with AESMAC etc.
| See description.
| None
| [[11.2.0-35|11.2.0-X]]
| March 15, 2015
| December 29, 2015
| [[User:Yellows8|Yellows8]]
|-
| pxips9 [[AES_Registers|AES]] keyslot reuse
| This requires access to the [[Process_Services|ps:ps]]/pxi:ps9 services. One way to get access to this would be snshax on system-version <=10.1.0-X(see 32c3 3ds talk).
When an invalid key-type value is passed to any of the PS commands, Process9 will try to select keyslot 0x40. That aesengine_setkeyslot() code will then immediately return due to the invalid keyslot value. Since that function doesn't return any errors, Process9 will just continue to do crypto with whatever AES keyslot was selected before the PS command was sent.
| Reusing the previously used keyslot, for crypto with PS.
| None
| [[11.2.0-35|11.2.0-X]]
| Roughly the same time(same day?) as firmlaunch-hax.
| December 29, 2015
| [[User:Yellows8|Yellows8]]
|-
| firmlaunch-hax: FIRM header ToCToU
| This can't be exploited from ARM11 userland.
During [[FIRM]] launch, the only FIRM header the ARM9 uses at all is stored in FCRAM, this is 0x200-bytes(the actual used FIRM RSA signature is read to the Process9 stack however). The ARM9 doesn't expect "anything" besides the ARM9 to access this data.
With [[9.5.0-22]] the address of this FIRM header was changed from a FCRAM address, to ARM9-only address 0x01fffc00.
| ARM9 code execution
| [[9.5.0-22]]
|
| 2012, 3 days after [[User:Yellows8|Yellows8]] started Process9 code RE.
|
| [[User:Yellows8|Yellows8]]
|-
| Uninitialized data output for (PXI) command replies
| PXI commands for various services(including some [[Filesystem_services_PXI|here]] and many others) can write uninitialized data (like from ARM registers) to the command reply. This happens with stubbed commands, but this can also occur with certain commands when returning an error.
Certain ARM11 service commands have this same issue as well.
|
| None
| [[9.3.0-21|9.3.0-X]]
| ?
|
| [[User:Yellows8|Yellows8]]
|-
| [[Filesystem_services_PXI|FSPXI]] OpenArchive SD permissions
| Process9 does not use the exheader ARM9 access-mount permission flag for SD at all.
This would mean ARM11-kernelmode code / fs-module itself could directly use FSPXI to access SD card without ARM9 checking for SD access, but this is rather useless since a process is usually running with SD access(Home Menu for example) anyway.
|
| None
| [[9.3.0-21|9.3.0-X]]
| 2012
|
| [[User:Yellows8|Yellows8]]
|-
| [[AMPXI:ExportDSiWare]] export path
| Process9 allocates memory on Process9 heap for the export path then verifies that the actual allocated size matches the input size. Then Process9 copies the input path from FCRAM to this buffer, and uses it with the Process9 FS openfile code, which use paths in the form of "<mountpoint>:/<path>".
Process9 does not check the contents of this path at all before passing it to the FS code, besides writing a NUL-terminator to the end of the buffer.
| Exporting of DSiWare to arbitrary Process9 file-paths, such as "nand:/<path>" etc. This isn't really useful since the data which gets written can't be controlled.
| None
| [[9.5.0-22]]
| April 2013
|
| [[User:Yellows8|Yellows8]]
|-
| [[DSiWare_Exports]] [[CTCert]] verification
| Just like DSi originally did, 3DS verifies the APCert for DSiWare on SD with the CTCert also in the DSiWare .bin. On DSi this was fixed with with system-version 1.4.2 by verifying with the actual console-unique cert instead(stored in NAND), while on 3DS it's still not(?) fixed.
On 3DS however this is rather useless, due to the entire DSiWare .bin being encrypted with the console-unique movable.sed keyY.
| When the movable.sed keyY for the target 3DS is known and the target 3DS CTCert private-key is unknown, importing of modified DSiWare SD .bin files.
| Unknown, probably none.
| ?
| April 2013
|
| [[User:Yellows8|Yellows8]]
|-
| [[Gamecard_Services_PXI]] unchecked REG_CTRCARDCNT transfer-size
| The u8 REG_CTRCARDCNT transfer-size parameter for the [[Gamecard_Services_PXI]] read/write CTRCARD commands is used as an index for an array of u16 values. Before [[5.0.0-11|5.0.0-X]] this u8 value wasn't checked, thus out-of-bounds reads could be triggered(which is rather useless in this case).
| Out-of-bounds read for a value which gets written to a register.
| [[5.0.0-11|5.0.0-X]]
|
| 2013?
|
| [[User:Yellows8|Yellows8]]
|-
| [[PXI_Registers|PXI]] cmdbuf buffer overrun
| The Process9 code responsible [[PXI_Registers|PXI]] communications didn't verify the size of the incoming command before writing it to a C++ member variable.
| Probably ARM9 code execution
| [[5.0.0-11|5.0.0-11]]
|
| March 2015, original timeframe if any unknown
|
| [[User:Plutooo|plutoo]]/[[User:Yellows8|Yellows8]]/maybe others(?)
|-
| [[Application_Manager_Services_PXI|PXIAM]] command 0x003D0108(See also [[Application_Manager_Services|this]])
| When handling this command, Process9 allocates a 0x2800-byte heap buffer, then copies the 4 FCRAM input buffers to this heap buffer without checking the sizes at all(only the buffers with non-zero sizes are copied). Starting with [[5.0.0-11|5.0.0-X]], the total combined size of the input data must be <=0x2800.
| ARM9 code execution
| [[5.0.0-11|5.0.0-X]]
|
| May 2013
|
| [[User:Yellows8|Yellows8]]
|-
| [[Process_Services_PXI|PS RSA]] commands buffer overflows
| pxips9 cmd1(not accessible via ps:ps) and VerifyRsaSha256: unchecked copy to a buffer in Process9's .bss, from the input FCRAM buffer. The buffer is located before the pxi cmdhandler threads' stacks. SignRsaSha256 also has a buf overflow, but this isn't exploitable.
The buffer for this is the buffer for the signature data. With v5.0, the signature buffer was moved to stack, with a check for the signature data size. When the signature data size is too large, Process9 uses [[SVC|svcBreak]].
| ARM9 code execution
| [[5.0.0-11|5.0.0-X]]
|
| 2012
|
| [[User:Yellows8|Yellows8]]
|-
| [[PXI_Registers|PXI]] pxi_id bad check
| The Process9 code responsible for [[PXI_Registers|PXI]] communications read pxi_id as a signed char. There were two flaws:
* They used it as index to a lookup-table without checking the value at all.
* Another function verified that pxi_id < 7, allowing negative values to pass the check. This would also cause an out-of-range table-lookup.
| Maybe ARM9 code execution
| [[3.0.0-5|3.0.0-5]]
|
| March 2015, originally 2012 for the first issue at least
|
| [[User:Plutooo|plutoo]], [[User:Yellows8|Yellows8]], maybe others(?)
|}

=== Kernel9 ===
{| class="wikitable" border="1"
|-
! Summary
! Description
! Successful exploitation result
! Fixed in [[FIRM]] system version
! Last [[FIRM]] system version this flaw was checked for
! Timeframe this was discovered
! Discovered by
|-
| [[CONFIG Registers#CFG_SYSPROT9|CFG_SYSPROT9]] bit1 not set by Kernel9
| Old versions of Kernel9 never set bit1 of [[CONFIG Registers#CFG_SYSPROT9|CFG_SYSPROT9]]. This leaves the [[OTP Registers|0x10012000]]-region unprotected (this region should be locked early during boot!). Since it's never locked, you can dump it once you get ARM9 code execution.

From [[3.0.0-5|3.0.0-X]] this was fixed by setting the bit in Kernel9 after poking some registers in that region. On New3DS arm9loader sets this bit instead of Kernel9, which is exploitable through a hardware + software vulnerability (see arm9loaderhax / description).

This flaw resurged when it gained a new practical use: retrieving the OTP data for a New3DS console in order to decrypt the key data used in arm9loader (see enhanced-arm9loaderhax / description). This was performed by downgrading to a vulnerable system version. By accounting for differences in CTR-NAND crypto (0x05 -> 0x04, see partition encryption types [[Flash_Filesystem#NAND_structure|here]]), it is possible to boot a New3DS using Old3DS firmware 1.0-2.X and an Old3DS [[NCSD#NCSD_header|NCSD Header]] to retrieve the required OTP data using this flaw.
| Dumping of the [[OTP Registers|OTP]] area
| [[3.0.0-5|3.0.0-X]]
|
| February 2015
| [[User:Plutooo|plutoo]], Normmatt independently
|}

== ARM11 software ==
=== Kernel11 ===
{| class="wikitable" border="1"
|-
! Summary
! Description
! Successful exploitation result
! Fixed in [[FIRM]] system version
! Last [[FIRM]] system version this flaw was checked for
! Timeframe this was discovered
! Discovered by
|-
| ipctakeover
| When sending cmdreplies, it does not validate that the src_addr and src_size match the equivalent dst_addr and dst_size. With a modified addr/size specified in a cmdreply for an output buffer, the data-copy for the first/last pages could be used to overwrite data outside of the buffer specified by the original process.

Used by ctr-httpwn as of v1.2, for "ipctakeover/bosshaxx".

This can be used to takeover processes where the process is using your service session. Like HTTPC -> BOSS, for bosshaxx above. NIM takeover can be done too(actual stack buffer overflow can trigger), etc.
| See description.
| None
| [[11.2.0-35|11.2.0-X]]
| November 26, 2016
| [[User:Yellows8|Yellows8]]
|-
| Using IPC input buffers as output buffers
| When sending cmdreplies, it does not validate that the cmdreply descriptor type matches the equivalent cmdreq descriptor type. This could be used by an exploited sysmodule to use what was intended as an input-buffer as an output-buffer, and also combine other IPC vuln(s) with this.

Used by ctr-httpwn as of v1.2, for "ipctakeover/bosshaxx".
| See description.
| None
| [[11.2.0-35|11.2.0-X]]
| November 2016
| [[User:Yellows8|Yellows8]]
|-
| [[SVC]] table too small
| The table of function pointers for SVC's only contains entries up to 0x7D, but the biggest allowed SVC for the table is 0x7F. Thus, executing SVC7E or SVC7F would make the SVC-handler read after the buffer, and interpret some ARM instructions as function pointers.

However, this would require patching the kernel .text or modifying SVC-access-control. Even if you could get these to execute, they would still jump to memory that isn't mapped as executable.
|
| None
| [[11.2.0-35|11.2.0-X]]
| 2012
| Everyone
|-
| [[SVC|svcBackdoor (0x7B)]]
| This backdoor allows executing SVC-mode code at the user-specified code-address. This is used by Process9, using this on the ARM11 (with NATIVE_FIRM) required patching the kernel .text or modifying SVC-access-control.
| See description
| [[11.0.0-33|11.0.0-X]] (deleted)
|
|
| Everyone
|-
| veryslowpidhax
| '''This is completely different from the kernelmode-code-execution vuln described in the below separate entry.'''

When updating the kernel global PID counter under [[SVC|svcCreateProcess]] the kernel does not check for wraparound to 0x0(the PID for the very first process). This only matters because [[Services|SM-module]] allows processes with PID value less than <total ARM11 FIRM modules> to access ''all'' services, without checking exheader service-access-control; and because Kernel11 checks for the PID to be 1 (loader) to use the input mem-region value on ControlMemory. This alone does not affect access the [[SVC|SVCs]] access table at all.

Inlined ldrex+strex code is used for updating the above counter. [[11.2.0-35|11.2.0-X]] had changes for similar code, but it was only for dedicated ldrex+strex functions(mainly for kernel objects) and hence this PID code was not affected.

With launching+terminating a sysmodule repeatedly with this via ns:s, it would take weeks to finish(if not at least about a month?).
| Access to all [[Services_API|services]], ControlMemory on any given mem-region.
| None
| [[11.2.0-35|11.2.0-X]]
| 2012 maybe?
|
|-
| slowhax/waithax
| svcWaitSynchronizationN does not decrement the references to valid handles in an array before returning an error when it encounters an invalid handle. This allows one to (slowly) overflow the reference count for a handle object to zero.
| ARM11 kernel-mode code execution
| [[11.2.0-35|11.2.0-X]]
| [[11.2.0-35|11.2.0-X]]
| 2016
| nedwill, [[User:Derrek|derrek]]
|-
| [[Memory_layout#ARM11_Detailed_virtual_memory_map|0xEFF00000]] / 0xDFF00000 ARM11 kernel virtual-memory
| The ARM11 kernel-mode 0xEFF00000/0xDFF00000 virtual-memory(size 0x100000) is mapped to phys-mem 0x1FF00000(entire DSP-mem + entire AXIWRAM), with permissions RW-. This is used during ARM11 kernel startup for loading the FIRM-modules from the FIRM section located in DSP-mem, this never seems to be used after that, however. This is never unmapped either.
|
| None
| [[11.2.0-35|11.2.0-X]]
|
|
|-
| memchunkhax2.1
| Nintendo's fix for memchunkhax2 in [[10.4.0-29|10.4.0-X]] did not fix the GPU case: one may cause the requisite ToCToU race using gspwn, bypassing the new validation.
derrek's original 32c3 presentation for memchunkhax2 commented that a GPU-based attack was possible, but would be difficult. However, memchunkhax2.1 showed that it was possible to do fairly reliably.
| ARM11 kernel code execution
| [[11.0.0-33|11.0.0-X]], via the new [[Memory_Management#MemoryBlockHeader|memchunkhdr]] MAC which prevents modifying memchunkhdr data with DMA.
| [[11.0.0-33|11.0.0-X]]
|
| [[User:Derrek|derrek]], aliaspider
|-
| memchunkhax2
| When allocating a block of memory, the "next" pointer of the [[Memory_Management#MemoryBlockHeader|memchunkhdr]] is accessed without being checked after being mapped to userland.
This allows a race condition, where the process can change the next pointer just before it's accessed. By pointing the next pointer to a crafted memchunckhdr in the kernel SlabHeap, some of the SlabHeap is allocated to the calling process, allowing to change vtables of kernel objects.
| ARM11 kernel code execution
| [[10.4.0-29|10.4.0-X]] (partially, see memchunkhax2.1)
| [[10.4.0-29|10.4.0-X]]
|
| [[User:Derrek|derrek]]
|-
| heaphax
| Can change the size of free memchunk structures stored in FCRAM using DMA, which leads to the ability to allocate memory chunks over already-allocated memory. This can be used in the SYSTEM region to allocate RW memory over any part of the NS system module, which is enough to take it over.
| Code execution with access to all of NS's privileges. (including downgrading) Code execution within any applet.
| [[11.0.0-33|11.0.0-X]], via the new [[Memory_Management#MemoryBlockHeader|memchunkhdr]] MAC which prevents modifying memchunkhdr data with DMA.
| [[11.0.0-33|11.0.0-X]]
| April 2015 ?
| smea
|-
| snshax
| Can force creation of Safe NS process into gspwn-able memory, allowing for takeover.
| Code execution with access to all of NS's privileges. (including downgrading)
| [[10.1.0-27|10.1.0-X]]
| [[10.1.0-27|10.1.0-X]]
| April 2015 ?
| smea
|-
| AffinityMask/processorid validation
| With [[10.0.0-27|10.0.0-X]] the following functions were updated: svcGetThreadAffinityMask, svcGetProcessAffinityMask, svcSetProcessAffinityMask, and svcCreateThread. The code changes for all but svcCreateThread are identical.
The original code with the first 3 did the following:
* if(u32_processorcount > ~0x80000001)return 0xe0e01bfd;
* if(s32_processorcount > <total_cores>)return 0xd8e007fd;
The following code replaced the above:
* if(u32_processorcount >= <total_cores+1>)return 0xd8e007fd;
In theory the latter should catch everything that the former did, so it's unknown if this was really a security issue.

The svcCreateThread changes with [[10.0.0-27|10.0.0-X]] definitely did fix a security issue.
* Original code: "if(s32_processorid > <total_cores>)return 0xd8e007fd;"
* New code: "if(s32_processorid >= <total_cores> || s32_processorid <= -4)return 0xd8e007fd;"
This fixed an off-by-one issue: if one would use processorid=total_cores, which isn't actually a valid value, svcCreateThread would accept that value on <[[10.0.0-27|10.0.0-X]]. This results in data being written out-of-bounds(baseaddr = arrayaddr + entrysize*processorid), which has the following result:
* Old3DS: Useless kernel-mode crash due to accessing unmapped memory.
* New3DS: uncontrolled data write into a kernel-mode L1 MMU-table. This isn't really useful: the data can't be controlled, and the data which gets overwritten is all-zero anyway(this isn't anywhere near MMU L1 entries for actually mapped memory).
The previous version also allowed large negative s32_processorid values(negative processorid values are special values not actual procids), but it appears using values like that won't actually do anything(meaning no crash) besides the thread not running / thread not running for a while(besides triggering a kernelpanic with certain s32_processorid value(s)).
| Nothing useful
| [[10.0.0-27|10.0.0-X]]
| [[10.0.0-27|10.0.0-X]]
| svcCreateThread issue: May 31, 2015. The rest: September 8, 2015, via v9.6->v10.0 ARM11-kernel code-diff.
| [[User:Yellows8|Yellows8]]
|-
| memchunkhax
| The kernel originally did not validate the data stored in the FCRAM kernel heap [[Memchunkhdr|memchunk-headers]] for free-memory at all. Exploiting this requires raw R/W access to these memchunk-headers, like physical-memory access with gspwn.

There are ''multiple'' ways to exploit this, but the end-result for most of these is the same: overwrite code in AXIWRAM via the 0xEFF00000/0xDFF00000 kernel virtual-memory mapping.

This was fixed in [[9.3.0-21|9.3.0-X]] by checking that the memchunk(including size, next, and prev ptrs) is located within the currently used heap memory. The kernel may also check that the next/prev ptrs are valid compared to other memchunk-headers basically. When any of these checks fail, kernelpanic() is called.
| When combined with other flaws: ARM11-kernelmode code execution
| [[9.3.0-21|9.3.0-21]]
|
| February 2014
| [[User:Yellows8|Yellows8]]
|-
| Multiple [[KLinkedListNode|KLinkedListNode]] SlabHeap use after free bugs
| The ARM11-kernel did access the 'key' field of [[KLinkedListNode|KLinkedListNode]] objects, which are located on the SlabHeap, after freeing them. Thus, triggering an allocation of a new [[KLinkedListNode|KLinkedListNode]] object at the right time could result in a type-confusion. Pseudo-code:
SlabHeap_free(KLinkedListNode);
KObject *obj = KLinkedListNode->key; // the object there might have changed!
This bug appeared all over the place.
| ARM11-kernelmode code exec maybe
| [[8.0.0-18|8.0.0-18]]
|
| April 2015
| [[User:Derrek|derrek]]
|-
| PXI [[RPC_Command_Structure|Command]] input/output buffer permissions
| Originally the ARM11-kernel didn't check permissions for PXI input/output buffers for commands. Starting with [[6.0.0-11|6.0.0]] PXI input/output buffers must have RW permissions, otherwise kernelpanic is triggered.
|
| [[6.0.0-11|6.0.0-11]]
|
| 2012
| [[User:Yellows8|Yellows8]]
|-
| [[SVC|svcStartInterProcessDma]]
| For svcStartInterProcessDma, the kernel code had the following flaws:

* Originally the ARM11-kernel read the input DmaConfig structure directly in kernel-mode(ldr(b/h) instructions), without checking whether the DmaConfig address is readable under userland. This was fixed by copying that structure to the SVC-mode stack, using the ldrbt instruction.

* Integer overflows for srcaddr+size and dstaddr+size are now checked(with [[6.0.0-11]]), which were not checked before.

* The kernel now also checks whether the srcaddr/dstaddr (+size) is within userland memory (0x20000000), the kernel now (with [[6.0.0-11]]) returns an error when the address is beyond userland memory. Using an address >=0x20000000 would result in the kernel reading from the process L1 MMU table, beyond the memory allocated for that MMU table(for vaddr->physaddr conversion).
|
| [[6.0.0-11]]
|
| DmaConfig issue: unknown. The rest: 2014
| [[User:Plutooo|plutoo]], [[User:Yellows8|Yellows8]] independently
|-
| [[SVC|svcControlMemory]] Parameter checks
| For svcControlMemory the parameter check had these two flaws:

* The allowed range for addr0, addr1, size parameters depends on which MemoryOperation is being specified. The limitation for GSP heap was only checked if op=(u32)0x10003. By setting a random bit in op that has no meaning (like bit17?), op would instead be (u32)0x30003, and the range-check would be less strict and not accurate. However, the kernel doesn't actually use the input address for LINEAR memory-mapping at all besides the range-checks, so this isn't actually useful. This was fixed in the kernel by just checking for the LINEAR bit, instead of comparing the entire MemoryOperation value with 0x10003.

* Integer overflows on (addr0+size) are now checked that previously weren't (this also applies to most other address checks elsewhere in the kernel).

|
| [[5.0.0-11]]
|
|
| [[User:Plutooo|plutoo]]
|-
| [[RPC_Command_Structure|Command]] request/response buffer overflow
| Originally the kernel did not check the word-values from the command-header. Starting with [[5.0.0-11]], the kernel will trigger a kernelpanic() when the total word-size of the entire command(including the cmd-header) is larger than 0x40-words (0x100-bytes). This allows overwriting threadlocalstorage+0x180 in the destination thread. However, since the data written there would be translate parameters (such as header-words + buffer addresses), exploiting this would likely be very difficult, if possible at all.

If the two words at threadlocalstorage+0x180 could be overwritten with controlled data this way, one could then use a command with a buffer-header of <nowiki>((size<<14) | 2)</nowiki> to write arbitrary memory to any RW userland memory in the destination process.
|
| [[5.0.0-11]]
|
| v4.1 FIRM -> v5.0 code diff
| [[User:Yellows8|Yellows8]]
|-
| [[SVC|SVC stack allocation overflows]]
|
* Syscalls that allocate a variable-length array on stack, only checked bit31 before multiplying by 4/16 (when calculating how much memory to allocate). If a large integer was passed as input to one of these syscalls, an integer overflow would occur, and too little memory would have been allocated on stack resulting in a buffer overrun.
* The alignment (size+7)&~7 calculation before allocation was not checked for integer overflow.

This might allow for ARM11 kernel code-execution.

(Applies to svcSetResourceLimitValues, svcGetThreadList, svcGetProcessList, svcReplyAndReceive, svcWaitSynchronizationN.)
|
| [[5.0.0-11]]
|
| v4.1 FIRM -> v5.0 code diff
| [[User:Plutooo|plutoo]], [[User:Yellows8|Yellows8]] complementary
|-
| [[SVC|svcControlMemory]] MemoryOperation MAP memory-permissions
| svcControlMemory with MemoryOperation=MAP allows mapping the already-mapped process virtual-mem at addr1, to addr0. The lowest address permitted for addr1 is 0x00100000. Originally the ARM11 kernel didn't check memory permissions for addr1. Therefore .text as addr1 could be mapped elsewhere as RW- memory, which allowed ARM11 userland code-execution.
|
| [[4.1.0-8]]
|
| 2012
| [[User:Yellows8|Yellows8]]
|-
| [[RPC_Command_Structure|Command]] input/output buffer permissions
| Originally the ARM11 kernel didn't check memory permissions for the input/output buffers for commands. Starting with [[4.0.0-7]] the ARM11 kernel will trigger a kernelpanic() if the input/output buffers don't have the required memory permissions. For example, this allowed a FSUSER file-read to .text, which therefore allowed ARM11-userland code execution.
|
| [[4.0.0-7]]
|
| 2012
| [[User:Yellows8|Yellows8]]
|-
| [[SVC|svcReadProcessMemory/svcWriteProcessMemory memory]] permissions
| Originally the kernel only checked the first page(0x1000-bytes) of the src/dst buffers, for svcReadProcessMemory and svcWriteProcessMemory. There is no known retail processes which have access to these SVCs.
|
| [[4.0.0-7]]
|
| 2012?
| [[User:Yellows8|Yellows8]]
|}

=== [[FIRM]] Sysmodules ===
{| class="wikitable" border="1"
|-
! Summary
! Description
! Successful exploitation result
! Fixed in [[FIRM]] system version
! Last [[FIRM]] system version this flaw was checked for
! Timeframe this was discovered
! Discovered by
|-
| [[Services|"srv:pm"]] process registration
| Originally any process had access to the port "srv:pm". The PID's used for the (un)registration commands are not checked either. This allowed any process to re-register itself with "srv:pm", and therefore allowed the process to give itself access to any service, bypassing the exheader service-access-control list.

This was fixed in [[7.0.0-13]]: starting with [[7.0.0-13]] "srv:pm" is now a service instead of a globally accessible port. Only processes with PID's less than 6 (in other words: fs, ldr, sm, pm, pxi modules) have access to it. With [[7.0.0-13]] there can only be one session for "srv:pm" open at a time(this is used by pm module), svcBreak will be executed if more sessions are opened by the processes which can access this.

This flaw was needed for exploiting the <=v4.x Process9 PXI vulnerabilities from ARM11 userland ROP, since most applications don't have access to those service(s).
| Access to arbitrary services
| [[7.0.0-13]]
|
| 2012
| [[User:Yellows8|Yellows8]]
|-
| FSDIR null-deref
| [[Filesystem_services|FS]]-module may crash in some cases when handling directory reading. The trigger seems to be due to using [[FSDir:Close]] without closing the dir-handle afterwards?(Perhaps this is caused by out-of-memory?) This seems to be useless since it's just a null-deref.
|
| None
| [[9.6.0-24|9.6.0-X]]
| May 19(?)-20, 2015
| [[User:Yellows8|Yellows8]]
|}

=== Standalone Sysmodules ===
{| class="wikitable" border="1"
|-
! Summary
! Description
! Successful exploitation result
! Fixed in system-module system-version
! Last system-module system-version this flaw was checked for
! Timeframe this was discovered
! Timeframe this was added to wiki
! Discovered by
|-
| AM stack/.bss infoleak via [[AM:ReadTwlBackupInfo]]([[AM:ReadTwlBackupInfoEx|Ex]])
| After writing the output-info structure to stack, it then copies that structure to the output buffer ptr using the size from the command. The size is not checked. This could be used to read data from the AM-service-thread stack handling the command + .bss.

'''This was not tested on hardware.'''
| Stack/.bss reading
| None
| [[10.0.0-27]](AM v9217)
| Roughly October 17, 2016
| October 25, 2016
| [[User:Yellows8|Yellows8]]
|-
| [[MVD_Services|MVD]]: Stack buffer overflow with [[MVDSTD:SetupOutputBuffers]].
| The input total_entries is not validated when initially processing the input entry-list. This fixed-size input entry-list is copied to stack from the command request. The loop for processing this initializes a global table, the converted linearmem->physaddrs used there are also copied to stack(0x8-bytes of physaddrs per entry).

If total_entries is too large, MVD-sysmodule will crash due to reading unmapped memory following the stack(0x10000000). Afterwards if the out-of-bounds total_entries is smaller than that, it will crash due accessing address 0x0, hence this useless.
| MVD-sysmodule crash.
| None
| [[9.0.0-20]]
| April 22, 2016 (Tested on the 25th)
| April 25, 2016
| [[User:Yellows8|Yellows8]]
|-
| [[NWM_Services|NWM]]: Using CTRSDK heap with UDS sharedmem from the user-process.
| See the HTTP-sysmodule section below.

CTRSDK heap is used with the sharedmem from [[NWMUDS:InitializeWithVersion]]. Buffers are allocated/freed under this heap using [[NWMUDS:Bind]] and [[NWMUDS:Unbind]].

Hence, overwriting sharedmem with gspwn then using [[NWMUDS:Unbind]] results in the usual controlled CTRSDK memchunk-header write, similar to HTTP-sysmodule.

This could be done by creating an UDS network, without any other nodes on the network.

Besides CTRSDK memchunk-headers, there are no addresses stored under this sharedmem.
| ROP under NWM-module.
| None
| [[9.0.0-20|9.0.0-X]]
| April 10, 2016
| April 16, 2016
| [[User:Yellows8|Yellows8]]
|-
| [[DLP_Services|DLP]]: Out-of-bounds memory access during spectator [[Download_Play|data-frame]] checksum calculation
| DLP doesn't validate the frame_size when receiving spectator data-frames at all, unlike non-spectator data-frames. The actual spectator data-frame parsing code doesn't use that field either. However, the data-frame checksum calculation code called during checksum verification does use the frame_size for loading the size of the framebuf.

Hence, using a large frame_size like 0xFFFF will result in the checksum calculation code reading data out-of-bounds. This isn't really useful, you could trigger a remote local-WLAN DLP-sysmodule crash while a 3DS system is scanning for DLP networks(due to accessing unmapped memory), but that's about all(trying to infoleak with this likely isn't useful either).
| DLP-sysmodule crash, handled by dlplay system-application by a "connection interrupted" error eventually then a fatal-error via ErrDisp.
| None
| [[10.0.0-27|10.0.0-X]]
| April 8, 2016 (Tested on the 10th)
| April 10, 2016
| [[User:Yellows8|Yellows8]]
|-
| [[DLP_Services|DLP]]: Out-of-bounds output data writing during spectator sysupdate titlelist [[Download_Play|data-frame]] handling
| The total_entries and out_entryindex fields for the titlelist DLP spectator data-frames are not validated. This is parsed during DLP network scanning. Hence, the specified titlelist data can be written out-of-bounds using the specified out_entryindex and total_entries. A crash will occur while reading the input data-frame titlelist if total_entries is larger than 0x27A, due to accessing unmapped memory.

There's not much non-zero data to overwrite following the output buffer(located in sharedmem), any ptrs are located in sharedmem. Overwriting certain ptr(s) are only known to cause a crash when attempting to use the DLP-client shutdown service-command.

There's no known way to exploit the above crash, since the linked-list code involves writes zeros(with a controlled start ptr).
|
| None
| [[10.0.0-27|10.0.0-X]]
| April 8-9, 2016
| April 10, 2016
| [[User:Yellows8|Yellows8]]
|-
| [[IR_Services|IR]]: Stack buffer overflow with custom hardware
| Originally IR sysmodule used the read value from the I2C-IR registers TXLVL and RXLVL without validating them at all. See [[10.6.0-31|here]] for the fix. This is the size used for reading the data-recv FIFO, etc. The output buffer for reading is located on the stack.

This should be exploitable if one could successfully setup the custom hardware for this and if the entire intended sizes actually get read from I2C.
| ROP under IR sysmodule.
| [[10.6.0-31|10.6.0-31]]
|
| February 23, 2016 (Unknown if it was noticed before then)
| February 23, 2016
| [[User:Yellows8|Yellows8]]
|-
| [[HTTP_Services|HTTP]]: Using CTRSDK heap with sharedmem from the user-process.
| The data from httpcAddPostDataAscii and other commands is stored under a CTRSDK heap. That heap is the sharedmem specified by the user-process via the HTTPC Initialize command.
Normally this sharedmem isn't accessible to the user-process once the sysmodule maps it, hence using it is supposed to be "safe".

This isn't the case due to gspwn however. Since CTRSDK heap code is so insecure in general, one can use gspwn to locate the HTTPC sharedmem + read/write it, then trigger a mem-write under the sysmodule. This can then be used to get ROP going under HTTP-sysmodule.

This is exploited by [https://github.com/yellows8/ctr-httpwn/ctr-httpwn ctr-httpwn].
| ROP under HTTP sysmdule.
| None
| [[9.6.0-24|9.6.0-X]] (Latest sysmodule version as of [[10.7.0-32|10.7.0-32]])
| Late 2015
| March 22, 2016
| [[User:Yellows8|Yellows8]]
|-
| [[NIM_Services|NIM]]: Downloading old title-versions from eShop
| Multiple NIM service commands(such as [[NIMS:StartDownload]]) use a title-version value specified by the user-process, NIM does not validate that this input version matches the latest version available via SOAP. Therefore, when combined with AM(PXI) [[#Process9|title-downgrading]] via deleting the target eShop title with System Settings Data Management(if the title was already installed), this allows downloading+installing any title-version from eShop ''if'' it's still available from CDN.
The easiest way to exploit this is to just patch the eShop system-application code using these NIM commands(ideally the code which loads the title-version).

Originally this was tested with a debugging-system via modded-FIRM, eventually smea implemented it in HANS for the 32c3 release.
| Downloading old title-versions from eShop
| None
| [[10.0.0-27|10.0.0-X]]
| October 24, 2015 (Unknown when exactly the first eShop title downgrade was actually tested, maybe November)
| January 7, 2016 (Same day Ironfall v1.0 was removed from CDN via the main-CXI files)
| [[User:Yellows8|Yellows8]]
|-
| [[SPI_Services|SPI]] service out-of-bounds write
| cmd1 has out-of-bounds write allowing overwrite of some static variables in .data.
|
| None
| [[9.5.0-22]]
| March 2015
|
| [[User:Plutooo|plutoo]]
|-
| [[NFC_Services|NFC]] module service command buf-overflows
| NFC module copies data with certain commands, from command input buffers to stack without checking the size. These commands include the following, it's unknown if there's more commands with similar issues: "nfc:dev" <0x000C....> and "nfc:s" <0x0037....>.
Since both of these commands are stubbed in the Old3DS NFC module from the very first version(those just return an error), these issues only affect the New3DS NFC module.

There's no known retail titles which have access to either of these services.
| ROP under NFC module.
| New3DS: None
| New3DS: [[9.5.0-22]]
| December 2014?
|
| [[User:Yellows8|Yellows8]]
|-
| [[News_Services|NEWSS]] service command notificationID validation failure
| This module does not validate the input notificationID for <nowiki>"news:s"</nowiki> service commands. This is an out-of-bounds array index bug. For example, [[NEWSS:SetNotificationHeader]] could be used to exploit news module: this copies the input data(size is properly checked) to: out = newsdb_savedata+0x10 + (someu32array[notificationID]*0x70).
| ROP under news module.
| None
| [[9.7.0-25|9.7.0-X]]
| December 2014
|
| [[User:Yellows8|Yellows8]]
|-
| [[NWMUDS:DecryptBeaconData]] heap buffer overflow
| input_size = 0x1E * <value the u8 from input_[[NWM_Services|networkstruct]]+0x1D>. Then input_tag0 is copied to a heap buffer. When input_size is larger than 0xFA-bytes, it will then copy input_tag1 to <end_address_of_previous_outbuf>, with size=input_size-0xFA.

This can be triggered by either using this command directly, or by boadcasting a wifi beacon which triggers it while a 3DS system running the target process is in range, when the process is scanning for hosts to connect to. Processes will only pass tag data to this command when the wlancommID and other thing(s) match the values for the process.

There's no known way to actually exploit this for getting ROP under NWM-module, at the time of originally adding this to the wiki. This is because the data which gets copied out-of-bounds *and* actually causes crash(es), can't be controlled it seems(with just broadcasting a beacon at least). It's unknown whether this could be exploited from just using NWMUDS service-cmd(s) directly.
| Without any actual way to exploit this: NWM-module DoS, resulting in process termination(process crash). This breaks *everything* involving wifi comms, a reboot is required to recover from this.
| None
| [[9.0.0-20]]
| ~September 23, 2014(see the [[NWMUDS:DecryptBeaconData]] page history)
| August 3, 2015
| [[User:Yellows8|Yellows8]]
|-
| [[HID_Services|HID]] module shared-mem
| HID module does not validate the index values in [[HID_Shared_Memory|sharedmem]](just changes index to 0 when index == maxval when updating), therefore large values will result in HID module writing HID data to arbitrary addresses.
| ROP under HID module, but this is *very* unlikely to be exploitable since the data written is HID data.
| None
| [[9.3.0-21]]
| 2014?
|
| [[User:Yellows8|Yellows8]]
|-
| gspwn
| GSP module does not validate addresses given to the GPU. This allows a user-mode application/applet to read/write to a large part of physical FCRAM using GPU DMA. From this, you can overwrite the .text segment of the application you're running under, and gain real code-execution from a ROP-chain. Normally applets' .text([[Home Menu]], [[Internet Browser]], etc) is located beyond the area accessible by the GPU, except for [[RO_Services|CROs]] used by applets([[Internet Browser]] for example).

FCRAM is gpu-accessible up to physaddr 0x26800000 on Old3DS, and 0x2DC00000 on New3DS. This is BASE_memregion_start(aka SYSTEM_memregion_end)-0x400000 with the default memory-layout on Old3DS/New3DS.
| User-mode code execution.
| None
| [[9.6.0-24|9.6.0-X]]
| Early 2014
|
| smea, [[User:Yellows8|Yellows8]]/others before then
|-
| rohax
| Using gspwn, it is possible to overwrite a loaded [[CRO0]]/[[CRR0]] after its RSA-signature has been validated. Badly validated [[CRO0]] header leads to arbitrary read/write of memory in the ro-process. This gives code-execution in the ro module, who has access to [[SVC|syscalls]] 0x70-0x72, 0x7D.

This was fixed after [[ninjhax]] release by adding checks on [[CRO0]]-based pointers before writing to them.
| Memory-mapping syscalls.
| [[9.3.0-21]]
| [[9.4.0-21]]
|
|
| smea, [[User:Plutooo|plutoo]] joint effort
|-
| Region free
| Only [[Home Menu]] itself checks gamecards' region when launching them. Therefore, any application launch that is done directly with [[NS]] without signaling Home Menu to launch the app, will result in region checks being bypassed.
This essentially means launching the gamecard with the [[NS_and_APT_Services|"ns:s"]] service. The main way to exploit this is to trigger a FIRM launch with an application specified, either with a normal FIRM launch or a hardware [[NSS:RebootSystem|reboot]].
| Launching gamecards from any region + bypassing Home Menu gamecard-sysupdate installation
| None
| Last tested with [[10.1.0-27|10.1.0-X]].
| June(?) 2014
|
| [[User:Yellows8|Yellows8]]
|-
| [[NWM_Services|NWM]] service-cmd state null-ptr deref
| The NWMUDS service command code loads a ptr from .data, adds an offset to that, then passes that as the state address for the actual command-handler function. The value of the ptr loaded from .data is not checked, therefore this will cause crashes due to that being 0x0 when NWMUDS was not properly initialized.
It's unknown whether any NWM services besides NWMUDS have this issue.
| This is rather useless since it's only a crash caused by a state ptr based at 0x0.
| None
| [[9.0.0-20]]
| 2013?
|
| [[User:Yellows8|Yellows8]]
|}

=== General/CTRSDK ===
{| class="wikitable" border="1"
|-
! Summary
! Description
! Successful exploitation result
! Fixed in version
! Last version this flaw was checked for
! Timeframe this was discovered
! Discovered by
|-
| [[NWM_Services|UDS]] beacon additional-data buffer overflow
| Originally CTRSDK did not validate the UDS additional-data size before using that size to copy the additional-data to a [[NWM_Services|networkstruct]]. This was eventually fixed.
This was discovered while doing code RE with an old dlp-module version. It's unknown in what specific CTRSDK version this was fixed, or even what system-version updated titles with a fixed version.

It's unknown if there's any titles using a vulnerable CTRSDK version which are also exploitable with this(dlp module can't be exploited with this).

The maximum number of bytes that can be written beyond the end of the outbuf is 0x37-bytes, with additionaldata_size=0xFF.
| Perhaps ROP, very difficult if possible with anything at all
| ?
|
| September(?) 2014
| [[User:Yellows8|Yellows8]]
|-
| CTPK buffer overflow
| At offset 0x20 in CTPK is an array for each texture, each entry is 0x20-bytes. This contains a wordindex(entry+0x18) for some srcdata relative to CTPK+0, and an u8 wordsize(entry+0x14) for this data. The CTRSDK function handling this doesn't validate the size, when copying srcdata using this size to the output buffer. Applications usually have the output buffer on the stack, hence stack buffer overflow.

While CTPK(*.ctpk) are normally only loaded from RomFS, some application(s) load from elsewhere too.
| ROP under the target application.
| None?
| "[SDK+NINTENDO:CTR_SDK-11_4_0_200_none]"
| November 14, 2016
| [[User:Yellows8|Yellows8]]
|}

Mysteries

2016-12-09T08:58:02Z

Einstein95: /* Why are there two CTRCARD controllers? */ imgur link as I can't upload anything

The following is a list of mysteries.

== General ==
* What is the CTR abbreviation?

== Hardware ==
=== Why are there two CTRCARD controllers? ===
'''Background:''' Also [http://problemkaputt.de/twl-core.jpg DSi SoC pinout] shows evidence of dual NTRCARD controllers on the final DSi SoC. (This was a [http://i.imgur.com/0kJlbEw.png planned feature] of the DSi before being axed later in development)

=== Why are there two EMMC controllers? ===
'''Theory:''' At some point during 3DS hardware development there was an idea to split up CTR and TWL nand into two different chips.
=== Is there a JTAG? ===
=== Is there more than one revision of the bootrom? ===
'''Background:''' Bootrom visible portion has been dumped on 3DS, 3DSXL, 2DS, New3DS. All matching exactly.
=== What is the EMMC controller @ 0x10100000 doing? ===
'''Background:''' There's dead code in NWM referencing it.
=== Why did they put NTRCARD accessible from ARM11? ===
'''Theory:''' At some point during 3DS hardware development there was a concept where ARM11 ran a menu with DS(i) icons while ARM9 was in TWL mode.

=== Is there a secret message embedded in the 3DS keyscrambler constant? ===
'''Background:''' TWL keyscrambler constant was Nintendo in Japanese, utf-8 encoded.

== Software ==
=== What was the problem in "initial program loader" that was mentioned in an FCC filing by Nintendo for 2DS? ===
'''Background:''' http://www.neogaf.com/forum/showthread.php?t=814624&page=1
=== What did SVC 0x74 in the ARM11 kernel do before it got stubbed? ===
=== What is the PTM abbreviation? ===
=== What is the PDN abbreviation? ===
=== Why is the DTCM not used anywhere except bootrom? ===
'''Background:''' Bootrom is known to use part of DTCM as state, memsetting it to 0 when it's done. After that, it is never used again.

Pyramids (3DSWare)

2016-10-31T04:55:56Z

Einstein95:

== Overview ==
A valid QR code contains 170 bytes of data and is LZ-10 compressed. The only byte that can cause a crash is at offset 0x01, as stated below.

== QR Image ==
https://s13.postimg.org/f2lqhhaon/img.png

== RAW Decompressed Data ==

<pre>
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00000000 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000080 00 00 12 00 00 09 13 00 00 00 00 00 00 00 00 00 ................
00000090 00 00 05 05 05 05 05 05 05 05 05 05 05 05 05 05 ................
000000A0 05 05 1E 00 00 00 C9 73 A8 1A ......És¨.
</pre>

== Raw Decompressed Data Explained ==
{| class="wikitable"
|'''Address'''
|'''Length'''
|'''Meaning'''
|-
|0x00
|1 byte
|Must be 0x01 or the game will not accept the level.
|-
|0x01
|1 byte
|This byte selects the level background. Valid bytes ranges from 0x00 to 0x04. Anything over 0x04 will cause a null exception and crash.
|-
|0x02
|160 bytes
|This section contains specific [[pyramids icon list | data bytes]] that makes up the level (16x10 grid thus 160 bytes).
|-
|0xA2
|4 bytes
|This represents the time required to complete the level. Its stored as Little Endian Unsigned Int
|-
|0xA6
|4 bytes
|This is a [http://www.scadacore.com/field-applications/programming-calculators/online-checksum-calculator/ Reversed CRC32] of the combined bytes from address 0x00 to 0xA5
|}

== Reason for not being exploitable ==

The only byte that causes a crash is located at address 0x01 (Level background byte). The crash results in a null ptr exception which is not exploitable.

{{:Pyramids (3DSWare)/Pyramids icon list}}

Pyramids (3DSWare)/Pyramids icon list

2016-10-31T04:55:36Z

Einstein95:

<noinclude>== Overview ==

This page details game asset bytes is used in both [[Pyramids_(3DSWare)| Pyramids]] and Pyramids 2.

TODO: Include Pyramids 2 game asset bytes

</noinclude>== Data bytes ==
{| class="wikitable"
|Asset Name
!|[[Pyramids_(3DSWare)|Pyramids]]
!|Pyramids 2
|-
!|Blank
|0x00
|??
|-
!|Sand
|0x01
|??
|-
!|Bullet
|0x02
|??
|-
!|Bullet covered with sand
|0x02
|??
|-
!|Spike Ball
|0x04
|??
|-
!|Block (Plain)
|0x05
|??
|-
!|Block (Bird)
|0x06
|??
|-
!|Block (4-blocks)
|0x07
|??
|-
!|Block (Tools)
|0x08
|??
|-
!|Amulet
|0x09
|??
|-
!|Snake
|0x0A
|??
|-
!|Skull (Horizontal)
|0x0B
|??
|-
!|Skull (Vertical)
|0x0C
|??
|-
!|Fire
|0x0D
|??
|-
!|Dog (Facing Up)
|0x0E
|??
|-
!|Dog (Facing Left)
|0x0F
|??
|-
!|Dog (Facing Right)
|0x10
|??
|-
!|Dog (Facing Down)
|0x11
|??
|-
!|Player
|0x12
|??
|-
!|Exit Door
|0x13
|??
|-
!|Fly
|0x14
|??
|-
!|Fly covered with sand
|0x15
|??
|-
!|Hourglass
|0x16
|??
|-
!|Hourglass covered with sand
|0x17
|??
|-
!|Rockdoor
|0x18
|??
|-
!|Coins (Collectible)
|0x19
|??
|-
!|Coins covered with sand (Collectible)
|0x1A
|??
|-
!|Chalice (Collectible)
|0x1B
|??
|-
!|Chalice covered with sand (Collectible)
|0x1C
|??
|-
!|Bug Chain (Collectible)
|0x1D
|??
|-
!|Bug Chain covered with sand
|0x1E
|??
|-
!|Pyramid Chain (Collectible)
|0x1F
|??
|-
!|Pyramid Chain covered with sand (Collectible)
|0x20
|??
|-
!|Wings (Collectible)
|0x21
|??
|-
!|Wings covered with sand (Collectible)
|0x22
|??
|-
!|Big block top-left (Plain)
|0x23
|??
|-
!|Big Block top-right (Plain)
|0x24
|??
|-
!|Big Block bottom-left (Plain)
|0x25
|??
|-
!|Big Block bottom-right (Plain)
|0x26
|??
|-
!|Big Block top-left (Cat-head)
|0x27
|??
|-
!|Big Block top-right (Cat-head)
|0x28
|??
|-
!|Big Block bottom-left (Cat-head)
|0x29
|??
|-
!|Big Block bottom-right (Cat-head)
|0x2A
|??
|-
!|Big Block top-left (Two figures)
|0x2B
|??
|-
!|Big Block top-right (Two figures)
|0x2C
|??
|-
!|Big Block bottom-left (Two figures)
|0x2D
|??
|-
!|Big Block bottom-right (Two figures)
|0x2E
|??
|-
!|TNT
|0x2F
|??
|-
!|TNT Detonator
|0x30
|??
|-
!|Spikes
|0x31
|??
|-
!|Pillar top
|0x32
|??
|-
!|Pillar
|0x33
|??
|}

Pyramids icon list

2016-10-31T04:54:41Z

Einstein95: Einstein95 moved page Pyramids icon list to Pyramids (3DSWare)/Pyramids icon list

#REDIRECT [[Pyramids (3DSWare)/Pyramids icon list]]

Pyramids (3DSWare)/Pyramids icon list

2016-10-31T04:54:41Z

Einstein95: Einstein95 moved page Pyramids icon list to Pyramids (3DSWare)/Pyramids icon list

== Overview ==

This page details game asset bytes is used in both [[Pyramids_(3DSWare)| Pyramids]] and Pyramids 2.

TODO: Include Pyramids 2 game asset bytes

== Data bytes ==
{| class="wikitable"
|Asset Name
!|[[Pyramids_(3DSWare)|Pyramids]]
!|Pyramids 2
|-
!|Blank
|0x00
|??
|-
!|Sand
|0x01
|??
|-
!|Bullet
|0x02
|??
|-
!|Bullet covered with sand
|0x02
|??
|-
!|Spike Ball
|0x04
|??
|-
!|Block (Plain)
|0x05
|??
|-
!|Block (Bird)
|0x06
|??
|-
!|Block (4-blocks)
|0x07
|??
|-
!|Block (Tools)
|0x08
|??
|-
!|Amulet
|0x09
|??
|-
!|Snake
|0x0A
|??
|-
!|Skull (Horizontal)
|0x0B
|??
|-
!|Skull (Vertical)
|0x0C
|??
|-
!|Fire
|0x0D
|??
|-
!|Dog (Facing Up)
|0x0E
|??
|-
!|Dog (Facing Left)
|0x0F
|??
|-
!|Dog (Facing Right)
|0x10
|??
|-
!|Dog (Facing Down)
|0x11
|??
|-
!|Player
|0x12
|??
|-
!|Exit Door
|0x13
|??
|-
!|Fly
|0x14
|??
|-
!|Fly covered with sand
|0x15
|??
|-
!|Hourglass
|0x16
|??
|-
!|Hourglass covered with sand
|0x17
|??
|-
!|Rockdoor
|0x18
|??
|-
!|Coins (Collectible)
|0x19
|??
|-
!|Coins covered with sand (Collectible)
|0x1A
|??
|-
!|Chalice (Collectible)
|0x1B
|??
|-
!|Chalice covered with sand (Collectible)
|0x1C
|??
|-
!|Bug Chain (Collectible)
|0x1D
|??
|-
!|Bug Chain covered with sand
|0x1E
|??
|-
!|Pyramid Chain (Collectible)
|0x1F
|??
|-
!|Pyramid Chain covered with sand (Collectible)
|0x20
|??
|-
!|Wings (Collectible)
|0x21
|??
|-
!|Wings covered with sand (Collectible)
|0x22
|??
|-
!|Big block top-left (Plain)
|0x23
|??
|-
!|Big Block top-right (Plain)
|0x24
|??
|-
!|Big Block bottom-left (Plain)
|0x25
|??
|-
!|Big Block bottom-right (Plain)
|0x26
|??
|-
!|Big Block top-left (Cat-head)
|0x27
|??
|-
!|Big Block top-right (Cat-head)
|0x28
|??
|-
!|Big Block bottom-left (Cat-head)
|0x29
|??
|-
!|Big Block bottom-right (Cat-head)
|0x2A
|??
|-
!|Big Block top-left (Two figures)
|0x2B
|??
|-
!|Big Block top-right (Two figures)
|0x2C
|??
|-
!|Big Block bottom-left (Two figures)
|0x2D
|??
|-
!|Big Block bottom-right (Two figures)
|0x2E
|??
|-
!|TNT
|0x2F
|??
|-
!|TNT Detonator
|0x30
|??
|-
!|Spikes
|0x31
|??
|-
!|Pillar top
|0x32
|??
|-
!|Pillar
|0x33
|??
|}

Pyramids (3DSWare)

2016-10-31T03:53:31Z

Einstein95: /* Overview */

Pyramids (3DSWare)

2016-10-31T03:51:38Z

Einstein95: /* Overview */

== Overview ==
A valid QR code contains 170 bytes of data and it's LZ-10 compressed. The only byte that can cause a crash is at offset 0x01, as stated below.

== QR Image ==
https://s13.postimg.org/f2lqhhaon/img.png

== RAW Decompressed Data ==

<pre>
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00000000 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000080 00 00 12 00 00 09 13 00 00 00 00 00 00 00 00 00 ................
00000090 00 00 05 05 05 05 05 05 05 05 05 05 05 05 05 05 ................
000000A0 05 05 1E 00 00 00 C9 73 A8 1A ......És¨.
</pre>

== Raw Decompressed Data Explained ==
{| class="wikitable"
|'''Address'''
|'''Length'''
|'''Meaning'''
|-
|0x00
|1 byte
|Must be 0x01 or the game will not accept the level.
|-
|0x01
|1 byte
|This byte selects the level background. Valid bytes ranges from 0x00 to 0x04. Anything over 0x04 will cause a null exception and crash.
|-
|0x02
|160 bytes
|This section contains specific [[pyramids icon list | data bytes]] that makes up the level (16x10 grid thus 160 bytes).
|-
|0xA2
|4 bytes
|This represents the time required to complete the level. Its stored as Little Endian Unsigned Int
|-
|0xA6
|4 bytes
|This is a [http://www.scadacore.com/field-applications/programming-calculators/online-checksum-calculator/ Reversed CRC32] of the combined bytes from address 0x00 to 0xA5
|}

== Reason for not being exploitable ==

The only byte that causes a crash is located at address 0x01 (Level background byte). The crash results in a null ptr exception which is not exploitable.

11.2.0-35

2016-10-25T19:02:10Z

Einstein95: /* loader */

The Old3DS+New3DS 11.2.0-35 system update was released on October 24, 2016. This Old3DS update was released for the following regions: USA, EUR, JPN, CHN, KOR, and TWN. This New3DS update was released for the following regions: USA, EUR, JPN, CHN, KOR, and TWN.

Security flaws fixed: <fill this in manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>.

==Change-log==
[http://en-americas-support.nintendo.com/app/answers/detail/a_id/667/p/430/c/267 Official] USA change-log:
* Further improvements to overall system stability and other minor adjustments have been made to enhance the user experience

==System Titles==
<fill this in (manually) later>

===NATIVE_FIRM===
====Process9====
Actual code seems to have changed in Process9 .text.

At least the same function that was updated on [[11.0.0-33|11.0.0-33]] (to check minimum versions when installing titles) was updated again: the versions of the titles to install are now checked ''twice''. This is most likely to fix a possible race condition.

====New3DS [[FIRM|arm9loader]]====
The arm9loader wasn't changed.

====ARM11-kernel====
3 functions were updated.

The first one is the actual handler function for svcWaitSynchronizationN.

After incrementing the counter with ldrex/strex, the last two functions now load the counter with plain ldr and executes kernelpanic() when it's zero.

====Modules====
The only updated FIRM module was loader.

=====loader=====
Only one function was updated, the same function involved with codebin-physmem-randomization as the previous updates.

All added titles:
* JPN/USA/EUR/CHN/TWN Paper Mario: Sticker Star
* JPN/USA/EUR Steel Diver: Sub Wars

When handling an APPLICATION memregion process and the uniqueID doesn't match any of the hard-coded ones, this then loads the [[NCCH/Extended_Header|exheader]] kernel release version. If loaded successfully, the codebin-physmem-randomization is automatically enabled if the version is >=0x234([[FIRM]] 2.52 for 11.2.0-35). Hence, all applications built for >=11.2.0-35 and have the kernel release version field will have codebin-physmem-randomization automatically enabled.

==See Also==
System update report(s):
* [https://yls8.mtheall.com/ninupdates/reports.php?date=10-24-16_08-00-49&sys=ctr]
* [https://yls8.mtheall.com/ninupdates/reports.php?date=10-24-16_08-01-02&sys=ktr]

IPCCommandExample

2016-09-10T10:12:26Z

Einstein95:

=Request=
{{IPC/Request}}
{{#vardefine:ipc_offset|0}}
{{IPC/RequestEntry|Header code [0x00040080]}}
{{IPC/RequestEntry|[[GPU]] address based at 0x1EB00000, must be word-aligned}}
{{IPC/RequestEntry|1 = Size, must be <=0x80 and word-aligned}}
{{IPC/RequestEnd}}

{{IPC/RequestStaticBuffers}}
{{#vardefine:ipc_offset|0}}
{{IPC/RequestEntry|Header code [0x00040080]}}
{{IPC/TranslateStaticBuffer|Output buffer address|0}}
{{IPC/RequestEnd}}

=Response=
{{IPC/Request}}
{{#vardefine:ipc_offset|0}}
{{IPC/RequestEntry|Header code}}
{{IPC/RequestEntry|Result code}}
{{IPC/TranslateStaticBuffer|Output data pointer|0}}
{{IPC/RequestEnd}}

=Description=
The GPU register offset must be <0x420000.

Template:Tooltip

2016-09-10T10:02:39Z

Einstein95: Trying this

{{#ifeq:{{{nodash|{{{3}}}}}}|nodash||border-bottom:thin dotted cornflowerblue;}}" title="{{{texttip|{{{2|}}}}}}">{{{target|{{{1}}}}}}

Template:Tooltip

2016-09-10T10:00:14Z

Einstein95: This should fix it

<includeonly> {{#ifeq:{{{nodash|{{{3}}}}}}|nodash||border-bottom:thin dotted cornflowerblue;}}" title="{{#if:{{{texttip|{{{2|}}}}}}|}}">{{{target|{{{1}}}}}}</includeonly><noinclude>
{{documentation}}
</noinclude>

Homebrew Exploits

2016-07-11T08:56:53Z

Einstein95: /* Standalone Homebrew Launcher Exploits */

==Standalone Homebrew Launcher Exploits==
The following homebrew exploits can be executed on a previously un-exploited system.

{| class="wikitable" border="1"
|-
! Works on latest fw
! Name
! Supported firmwares
! Requirements
! Author
! Install
|-
| style="background: salmon" | No
| [[ninjhax|Ninjhax 1.1b]]
| From '''4.0.0-7''' up to and including '''9.2.0-20'''.
| A cartridge or eShop version (JPN-only) of "Cubic Ninja".
| smea
| [http://smealum.net/ninjhax/ Install]
|-
| style="background: salmon" | No; needs update.
| [[ninjhax|Ninjhax 2.x]]
| From '''9.0.0-7''' up to and including '''10.7.0-32'''.
| A cartridge or eShop version (JPN-only) of "Cubic Ninja".
| smea
| [https://smealum.github.io/ninjhax2/ Install]
|-
| style="background: lightgreen" | Yes
| [http://plutooo.github.io/freakyhax/ freakyhax]
| From '''9.0.0-7''' up to and including '''11.0.0-33'''.
| A cartridge or eShop version (USA/EUR/JAP) of "Freakyform Deluxe".
| plutoo
| [http://plutooo.github.io/freakyhax/ Install]
|-
| style="background: lightgreen" | Yes
| [[smashbroshax|smashbroshax]] (beaconhax)
| (New 3DS only) From '''9.0.0-X''' up to and including '''11.0.0-33'''.
| Super Smash Bros 3DS (full-game) and a way to broadcast raw wifi beacons. The demo (prior to the updated November 2015 [https://github.com/yellows8/3ds_smashbroshax version]) isn't usable with the *hax payloads. Game-version v1.1.3 fixed the vuln used with this, see the repo for a workaround for that.
| [[User:Yellows8|Yellows8]]
| [https://github.com/yellows8/3ds_smashbroshax Install]
|-
| style="background: salmon" | No
| [[browserhax]]
| (Old 3DS) From '''9.0.0-16''' to '''9.5.0-22''', '''9.5.0-23''' to '''9.8.0-25''', '''9.9.0-26''' to '''10.1.0-27''', '''10.2.0-28''' to '''10.5.0-30'''

(New 3DS) From '''9.0.0-20''' to '''9.2.0-20''', '''9.3.0-21''' to '''9.5.0-23''', '''9.6.0-24''' to '''9.8.0-25''', '''9.9.0-26''' to '''10.1.0-27''', '''10.2.0-28''' to '''10.5.0-30'''

Note that the browser-version-check bypass is only usable prior to [[10.7.0-32]].
| An USA, EUR, or JPN system.
| [[User:Yellows8|Yellows8]]
| [http://yls8.mtheall.com/3dsbrowserhax.php Install]
|-
| style="background: lightgreen" | Yes
| [http://mrnbayoh.github.io/basicsploit/ BASICSploit]
| From '''9.0.0''' up to and including '''11.0.0'''
| SmileBASIC (USA only, JPN to be supported soon.) downloaded from the eShop. v3.3.1 update fixed this vuln.
| MrNbaYoh
| [http://mrnbayoh.github.io/basicsploit/ Install]
|}

Note that ninjhax 1.x is still not obsolete. Even though ninjhax 2.x can be run on 9.3+, this was made possible (amongst other things) by sacrificing the memory remapping exploit used in ninjhax 1.x (rohax). Therefore, things like JIT engines for emulators can only be supported on ninjhax 1.x. Furthermore, ninjhax 2.x does not run on system versions below 9.0.0-X, while ninjhax 1.x does.

==Secondary Exploits==
Installation of these exploits requires a previously exploited system to install. After installation, they can be used on their own.

{| class="wikitable" border="1"
! Works on latest fw
! Name
! Supported firmwares
! Requirements
! Author
! Install
|-
| style="background: salmon" | No
| [[ironhax]]
| From '''9.5.0-X''' up to and including '''10.3.0-X''', for '''X''' up to and including 28.
| A copy of "Ironfall: Invasion" downloaded from eShop before August 11th, 2015. Note the updated version that was released on October 13th, 2015 is not supported.
| smea
| [http://smealum.github.io/3ds/ Install]
|-
| style="background: salmon" | No; needs update.
| [https://github.com/yellows8/oot3dhax oot3dhax]
| From '''9.0.0-X''' up to and including '''10.7.0-X''', for '''X''' up to and including 32.
| A gamecard or eShop-install of Legend of Zelda: Ocarina of Time 3D. Besides using the installer app, writing raw saveimages with a save dongle for example is another option. Due to lack of free space with the size of the *hax payload, the only save-slot that can exist in the *gamecard* savedata is the oot3dhax save-slot.
| Yellows8 / smea et al.
| See [https://smealum.github.io/3ds/ here].
|-
| style="background: salmon" | No
| [[menuhax]]
| From '''9.0.0-X''' up to and including '''10.5.0-X''', for '''X''' up to and including 30.
|
| [[User:Yellows8|Yellows8]]
| [https://github.com/yellows8/3ds_homemenuhax/releases Download]
|-
| style="background: lightgreen" | Yes
| [https://github.com/shinyquagsire23/supermysterychunkhax supermysterychunkhax]
| From '''9.9.0-X''' (USA/JPN) / '''10.2.0-X''' (EUR) up to and including '''11.0.0-X''', for '''X''' up to and including 33.
| A gamecard or eShop-install of Pokémon Super Mystery Dungeon.
| Shiny Quagsire / SALT team
| [https://smd.salthax.org/ Install].
|-
| style="background: lightgreen" | Yes
| [https://github.com/shinyquagsire23/v_hax (v*)hax]
| From '''9.0.0-X''' up to and including '''11.0.0-X''', for '''X''' up to and including 33.
Note that '''9.0.0-X''' is only required for the Homebrew Launcher - the game itself only requires '''2.1.0-X''' for primitive userland code execution.
| A copy of VVVVVV downloaded after March 2012 (v1)
| Shiny Quagsire / SALT team
| [https://vvvvvv.salthax.org/ Install].
|-
| style="background: lightgreen" | Yes
| [https://github.com/Dazzozo/humblehax humblehax]
| From '''9.0.0-X''' (USA/EUR) up to and including '''11.0.0-X''', for '''X''' up to and including 33.
| An eShop-install of Citizens of Earth, featured in the Humble "Friends of Nintendo" Bundle.
| Dazzozo / SALT team
| [https://citizens.salthax.org/ Install].
|-
| style="background: lightgreen" | Yes
| [http://mrnbayoh.github.io/basehaxx/ basehaxx]
| From '''9.0.0-X''' up to and including '''11.0.0-X''', for '''X''' up to and including 33.
| A gamecard or eShop-install of Pokémon Omega Ruby / Alpha Sapphire.
| MrNbaYoh
| [http://mrnbayoh.github.io/basehaxx/ install]
|}

==Exploits without Homebrew Launcher (Not recommended)==

'''Warning:''' The following exploits can run code, but are missing a 3DSX launcher. They cannot launch any homebrew in the 3DSX format.

{| class="wikitable" border="1"
|-
! Works on latest fw
! Name
! Supported firmwares
! Requirements
! Author
! Install
|-
| style="background: salmon" | No
| [[browserhax]] (Without the loader in the 3ds_browserhax_common repo)
| (Old3DS) From '''2.1.0-4''' to '''3.0.0-6''', '''4.0.0-7''' to '''4.5.0-10''', '''5.0.0-11''' to '''7.0.0-13''', '''7.1.0-16''' to '''9.5.0-22''', '''9.5.0-23''' to '''9.8.0-25''', '''9.9.0-26''' to '''10.1.0-27''', '''10.2.0-28''' to '''10.5.0-30'''

(New3DS) From '''9.0.0-20''' to '''9.2.0-20''', '''9.3.0-21''' to '''9.5.0-23''', '''9.6.0-24''' to '''9.8.0-25''', '''9.9.0-26''' to '''10.1.0-27''', '''10.2.0-28''' to '''10.5.0-30'''

Note that the browser-version-check bypass is only usable prior to [[10.7.0-32]].
| An USA, EUR, or JPN system.
| [[User:Yellows8|Yellows8]]
| [[browserhax|Install]]
|}

==Previous Exploits==
'''Warning:''' These exploits '''do not work'''. They are exploits which no longer function at all, regardless of software or firmware revision.
{| class="wikitable" border="1"
! Works on latest fw
! Name
! Supported firmwares
! Requirements
! Author
! Install
|-
| style="background: salmon" | No
| [[tubehax|Tubehax]]
| None. '''Was''': From '''9.0.0-X''' up to and including '''10.1.0-X''', for '''X''' up to and including 27.
| The YouTube application and an Internet connection. As of October 15, 2015, this is no longer usable due to an update being released which fixes the vuln used by tubehax + app update being forced(see [[YouTube|here]]).
| smea
| [http://smealum.github.io/3ds/ Install]
|}

==Other Homebrew Loaders==
The [https://github.com/yellows8/hblauncher_loader hblauncher_loader] title can be used when running under modded-FIRM which allows running unsigned titles, to boot the *hax payloads.

==Sysmodule Exploits==
This section is for system-module exploits, which can be run from the *hax payloads.

{| class="wikitable" border="1"
! Works on latest fw
! Name
! Supported firmwares
! Requirements
! Author
|-
| Yes, that's not the intended default use however.
| [https://github.com/yellows8/ctr-httpwn/releases ctr-httpwn]
| From '''9.6.0-X''' up to and including '''11.0.0-X'''.
| None
| [[User:Yellows8|Yellows8]]
|}

==WebKit vuln testing==
See [https://github.com/yellows8/3ds_browserhax_common/issues/28 here].

Nandrw/sys/updater.log

2016-06-11T06:06:56Z

Einstein95:

The following is the contents of this file, from a launch-day regular 3DS (written during [[Factory Setup]]):

#Import(30) : size = 00013500

#Ticket(31) is deleted: 0004003000008102

#Import(31) : size = 00024b00

#Ticket(32) is deleted: 0004003000008A02

#Import(32) : size = 00024900

#Ticket(33) is deleted: 0004013800000002

#Import(33) : size = 000d1500

#Ticket(34) is deleted: 0004013800000102

#Import(34) : size = 0017c500

#Ticket(35) is deleted: 0004013800000202

#Import(35) : size = 0009c500

#Ticket(36) is deleted: 00048005484E4441

#Import(36) : size = 0006d4c0

#Ticket(37) is deleted: 0004800F484E4841

#Import(37) : size = 0004ecc0

#Ticket(38) is deleted: 0004800F484E4C41

#Import(38) : size = 00005480

#Ticket(39) is deleted: 0004800542383841

#Import(39) : size = 0018c900

#Commit

#UpdateFirmware: 0004013800000002

#UpdateTwlContents

#Twl contents num: 1

#path: twl:/sys/TWLFontTable.dat

#UpdateTwlContents end

#ImportFromCard end

#Update end

F
#Import(12) : size = 0001f300

#Ticket(13) is deleted: 0004013000001902

#Import(13) : size = 0000eb00

#Ticket(14) is deleted: 0004013000001B02

#Import(14) : size = 00006500

#Ticket(15) is deleted: 0004013000001F02

#Import(15) : size = 0000c300

#Ticket(16) is deleted: 0004013000001E02

#Import(16) : size = 00007700

#Ticket(17) is deleted: 0004013000001802

#Import(17) : size = 00008d00

#Ticket(18) is deleted: 0004013000002102

#Import(18) : size = 00005f00

#Ticket(19) is deleted: 0004013000002302

#Import(19) : size = 00006d00

#Ticket(20) is deleted: 0004013000001D02

#Import(20) : size = 0000b100

#Ticket(21) is deleted: 0004013000002E02

#Import(21) : size = 00024b00

#Ticket(22) is deleted: 0004013000001A02

#Import(22) : size = 00009700

#Ticket(23) is deleted: 0004013000002902

#Import(23) : size = 00012500

#Ticket(24) is deleted: 0004013000002002

#Import(24) : size = 00007700

#Ticket(25) is deleted: 0004013000001C02

#Import(25) : size = 0000c500

#Ticket(26) is deleted: 0004013000003102

#Import(26) : size = 00007100

#Ticket(27) is deleted: 0004013000002C02

#Import(27) : size = 00025900

#Ticket(28) is deleted: 0004013000003302

#Import(28) : size = 00008100

#Ticket(29) is deleted: 0004013000002A02

#Import(29) : size = 00019900

#Ticket(30) is deleted: 0004013000008002

The following is from a launch-day n3DS:
<pre>
#Import(30) : size = 0000e900

#Ticket(31) is deleted: 0004013020002302

#Import(31) : size = 00007100

#Ticket(32) is deleted: 0004013020004002

#Import(32) : size = 0002c300

#Ticket(33) is deleted: 0004013020004102

#Import(33) : size = 0001e700

#Ticket(34) is deleted: 0004013020004202

#Import(34) : size = 00086900

#Ticket(35) is deleted: 0004013820000002

#Import(35) : size = 000f7500

#Ticket(36) is deleted: 0004013820000102

#Import(36) : size = 001aa500

#Ticket(37) is deleted: 0004800542383841

#Import(37) : size = 00142500

#Ticket(38) is deleted: 00048005484E4441

#Import(38) : size = 0006d4c0

#Ticket(39) is deleted: 0004800F484E4841

#Import(39) : size = 0005f900

#Ticket(40) is deleted: 0004800F484E4C41

#Import(40) : size = 00005480

#Commit

#UpdateFirmware: 0004013820000002

#UpdateTwlContents

#Twl contents num: 1

#path: twl:/sys/TWLFontTable.dat

#UpdateTwlContents end

#ImportFromCard end

#ValidateLocalFriendCodeSeed failed.

#Update end

F
#Ticket(14) is deleted: 0004013000002902

#Import(14) : size = 00013b00

#Ticket(15) is deleted: 0004013000002A02

#Import(15) : size = 00019f00

#Ticket(16) is deleted: 0004013000002B02

#Import(16) : size = 0000c700

#Ticket(17) is deleted: 0004013000002C02

#Import(17) : size = 0003b900

#Ticket(18) is deleted: 0004013000002D02

#Import(18) : size = 0004d900

#Ticket(19) is deleted: 0004013000002E02

#Import(19) : size = 00024900

#Ticket(20) is deleted: 0004013000002F02

#Import(20) : size = 0003ff00

#Ticket(21) is deleted: 0004013000003102

#Import(21) : size = 00007700

#Ticket(22) is deleted: 0004013000003202

#Import(22) : size = 0004a700

#Ticket(23) is deleted: 0004013000003302

#Import(23) : size = 0000f500

#Ticket(24) is deleted: 0004013000003402

#Import(24) : size = 0003cb00

#Ticket(25) is deleted: 0004013000008002

#Import(25) : size = 00019300

#Ticket(26) is deleted: 0004013020001602

#Import(26) : size = 00017b00

#Ticket(27) is deleted: 0004013020001C02

#Import(27) : size = 0000dd00

#Ticket(28) is deleted: 0004013020001E02

#Import(28) : size = 00008100

#Ticket(29) is deleted: 0004013020001F02

#Import(29) : size = 0000cb00

#Ticket(30) is deleted: 0004013020002202

</pre>

Titles

2016-05-28T07:19:05Z

Einstein95: /* DLC Titles */

The Nintendo 3DS utilizes a similar title-based organization as seen in the Wii and DSi platforms. The update server is located [http://nus.cdn.c.shop.nintendowifi.net/ccs/download/ here]. When using SSL, the update/shop servers must be accessed via SSLv3.

For a list of 3DS titles see the [[Title list]].

= Title IDs =

The organization of Title IDs has not been documented fully yet. Region info isn't stored in title IDs however there does appear to be evidence that the regions are sequential, similar to how Wii System Menu Updates are ordered: JPN USA EUR KOR and CHN (introduced with the DSi). 3DS has one additional region: TWN.

Note: The terms 'Title ID', 'Partition ID' and 'Media ID' are interchangeable.

'''TitleID Structure''': 0xCCCCABCDLLLLLLRR

* CCCC defines the console '''Platform''' (5=WiiU, 4=3DS, 3=DSi, 1=[http://wiibrew.org/wiki/Title_database Wii])
* ABCD defines the '''Content Category''' of the title, Demo, DLPChild, etc.
* LLLLLL For CTR titles, this is the title's '''Unique ID'''. For TWL converted titles this is in two sections grouped as SSLLLL. SS is the old title identification used by the DSi and is made redundant by 'ABCD'. LLLL is the TWL title's 'Unique ID'. There are restrictions on the Unique ID, see below for more info.
* RR This is the Title ID '''Variation''', and has various uses.

'''Content Categories''':

This u16 is a collection bit mask flag. Each Category is a group of one or more bit masks.

Specific Bitmask Flags:
{| class="wikitable" border="1"
|-
! Category
! Bitmask
|-
| Normal
| 0x0
|-
| DlpChild
| 0x1
|-
| Demo
| 0x2
|-
| Contents
| 0x3
|-
| AddOnContents
| 0x4
|-
| Patch
| 0x6
|-
| CannotExecution
| 0x8
|-
| System
| 0x10
|-
| RequireBatchUpdate
| 0x20
|-
| NotRequireUserApproval
| 0x40
|-
| NotRequireRightForMount
| 0x80
|-
| CanSkipConvertJumpId
| 0x100
|-
| TWL
| 0x8000
|}

* TWL Category bit mask are carried over from original TWL category bitmasks (ignoring bit mask 0x8000), so TWL system titles have the bitmask of 0x8001.

* System titles (TWL and CTR) are eligible to be updated during a System Update.

* Bit Mask 0x4000 appears to be reserved, as it renders the ''TWL'' and ''System'' bit masks useless.

'''Unique ID Restrictions''':

For the CTR titles, there appears to be is a correlation between Unique IDs (UID) and 3DS 'title types'. For developer titles this is known(shown below), and retail titles *appear* to follow suite. It is unknown if this correlation is enforced on retail units, or if it is just for organisation purposes.

{| class="wikitable" border="1"
|-
! TITLE TYPE
! UNIQUE ID RANGE
|-
| System
| 0x0 - 0x2FF
|-
| Application
| 0x300 - 0xF7FFF
|-
| Evaluation
| 0xF8000 -0xFFFFF
|-
| Prototype*
| 0xFF000 - 0xFF3FF
|}
<nowiki>*</nowiki>On the home menu, titles with UIDs within the 'Prototype' range, appear on the home menu after install without the gift fanfare.

ProgramID/titleID low bitmask 0xF0000000(uniqueID bitmask 0xF00000) seems to be related to which hardware the title is allowed to run on. 3DS code tends to clear this bitmask when handling programIDs. This bitmask is normally zero. When this is 0x2, this indicates that the title only runs on [[New_3DS]](that is, programID-low 0x20000000 / uniqueID 0x200000).

'''TitleID Variation''':

This u8 allows enumeration of titles from the same category and unique ID. Common uses are explained below:

* CTR System Titles: The 3DS has two copies of most modules/applets/archives for usage with either the NATIVE_FIRM or SAFE_MODE_FIRM. This is allowed for, by changing the title ID variation of the title to match the core version set by the FIRM it is designed to be used with:
{| class="wikitable" border="1"
|-
! RR
! MEANING
|-
| 02
| System Title (Core version 0x2)
|-
| 03
| SAFE_MODE System Title (Core version 0x3)
|}
Normally on retail SAFE_MODE ARM11 [[NCCH#CXI|CXI]] titles can't be launched, since the [[Configuration_Memory|system]] core version doesn't match the CXI exheader core version.

* Only most non-Normal Applications are known to utilise Title ID variation, this is explained in their respective sections on this page.

* [[3DS Development Unit Software|Dev Menu]] installs CTR Applications with a TitleID variation of 0x02 to the CTR NAND.

* Title ID variation is ignored for TWL titles, this value is carried over from the original TWL title ID and is used for region lock:

= Versions =

v## = 0xHHHH = 0bBBBBBBBB...

* The version major,minor and micro can be extracted from the version number by converting the 16 bit number to binary
* 6 bits : Major, this matches the NCCH remaster-version.
* 6 bits : Minor
* 4 bits : Micro ('Build' in some contexts)
* i.e. v2069 (Taken from 000400DB00017302) = 0b000010 000001 0101 means that the title version is v2.1.5. For reasons unknown, the CVer build, stored in the RomFS of the title, has always been zero (at time of writing), regardless of the CVer build in the TMD. So when predicting the firmware version, this should be taken into account.

= Data Structure =

Titles are installed to either the NAND (System and Application) or to the SD Card (Application only), and their respective directory locations are:

{| class="wikitable" border="1" style="margin: auto;"
|-
|
! scope="col"| [[Flash Filesystem|NAND]]
! scope="col"| [[SD Filesystem|SD]]
|-
! scope="row"| Title Data
| nand/title
| rowspan="2" | sdmc/Nintendo 3DS/<ID0>/<ID1>/title
|-
! scope="row"| Save Data
| nand/data/<ID0>/sysdata
|-
|}

ID0 is the first 0x10-bytes from a SHA256 [[nand/private/movable.sed|hash]] and ID1 is generated from the SD card CID.

Title data stored on the SD Card is encrypted with the console-unique [[nand/private/movable.sed|keyslots]], whereas NAND title data is stored as cleartext.

The base CTR for files stored under /title is likely based on the /title path, similar to extdata. This base CTR is unique per titleID and filename. The base CTR never changes after creation of each file.

When a newer version of a title is installed, the new .app content, .tmd, and .cmd(and .ctx for NAND titles) are written to the /title directory, however the old files here are not yet deleted. Once installation of the title is [[AMNet:InstallTitlesFinish|finalized]], the info from [[Title_Database|import.db]] is moved to [[Title_Database|title.db]] so that the system uses the newer files instead, then the old /title files are deleted.

The title data is contained in this directory structure (note that [[Title list#0004008C - Add-on Content (DLC)|DLC]] titles are stored in a different way):

{| class="wikitable" border="1" style="margin: auto;"
!
! scope="col"| NAND
! scope="col"| SD (non-DLC)
! scope="col"| SD (DLC)
|-
! scope="row"| Title Data:
|
<Title ID High>
└── <Title ID Low>
├── 00000000.ctx
└── content
├── <ContentID>.app
├── <ContentID>.tmd
└── cmd
└── <ContentID>.cmd
| rowspan="2" |
<Title ID High>
└── <Title ID Low>
├── 00000000.ctx
├── content
│ ├── <ContentID>.app
│ ├── <ContentID>.tmd
│ └── cmd
│ └── <ContentID>.cmd
└── data
└── 00000001.sav
| rowspan="2" |
0004008C
└── <Title ID Low>
├── 00000000.ctx
└── content
├── <ContentID>.tmd
├── 00000000
│ └── <ContentID>.app
└── cmd
└── <ContentID>.cmd

|-
! scope="row"| Save Data:
|
<SaveID0>
└── <SaveID1>
└── 00000001.sav
|}

"'''<ContentID>.tmd'''" - (The Content ID is a u32, initially: '''00000000''' when the title is first installed. Changing by an increment of +'''0x1''' for each title update the 3DS installs) This is the [[Title metadata]] associated with the title, it is encrypted with a console-unique [[AES|keyslot]]. The decrypted TMD is available on Nintendo's CDN server at "http://nus.cdn.c.shop.nintendowifi.net/ccs/download/TitleIDhere/tmd". Though CDN version of the title TMD has a certificate chain attached at the end of the TMD, so removing it will give you the 1:1 decrypted TMD. After installation the "<ContentID>.tmd" is redundant, because important title data is extracted and imported into the [[Title Database|title.db]] and ".cmd" files, but is however kept as a reference.

"'''<ContentID>.app'''" - (The Content ID is a u32, taken from the title's [[TMD]]) These files are [[NCCH]] files, where the entire file is encrypted with a console-unique [[AES|keyslot]](this is on top of the encryption of the NCCH contents). There can be more than one NCCH in this directory, as seen with .[[CCI]] files, the game executable ([[CXI]]) can be accompanied with additional non-executable NCCH files ([[NCCH#CFA|CFA]]) such as the electronic manual and DLP Child containers. Determining the function of the encrypted NCCH, is done by finding the Content Index of the "XXXXXXXX.app" file in the title's TMD(see above for retrieving decrypted TMD), interpreting the Content Index is as follows (does not apply to DLC content):

{| class="wikitable" border="1"
|-
! Index
! Content Type
|-
| 0000
| Main Executable (.[[NCCH#CXI|CXI]])(In the case of [[Title list|System Data Archives]], this is a [[NCCH#CFA|CFA]] file)
|-
| 0001
| Home Menu Manual (.[[NCCH#CFA|CFA]])
|-
| 0002
| DLP Child Container (.[[NCCH#CFA|CFA]])
|}

Unlike the TMD, a decrypted version of the NCCH files cannot be retrieved from Nintendo's CDN, the NCCH files do exist on Nintendo's CDN but are [[AES|encrypted]]. Decrypting CDN versions of content, requires the title's [[CommonETicket|ticket]], and the common key specified by an index in the [[CommonETicket|ticket]]. Of course editing/deleting ".app" files will have an effect. Deleting/renaming the manual ".app' will cause the manual not to load when clicked on. And deleting/renaming the executable ".app" will cause the application to not load, and the 3D Banner does not show(The banner is loaded each time from the game's executable NCCH when the home menu loads, it is not cached like the icon and name).

"'''<ContentID>.cmd'''" - (The Content ID is a u32, initially: '''00000001''' when the title is first installed. Changing by an increment of +'''0x1''' for each time the 3DS adds/removes '.app' files) This file contains data taken from the title's [[TMD]]. See the below table for the format of the cleartext .cmd file. The [[Title Database|Title.db]] contains the Content ID for the '.cmd' file, but does not contain a hash of the '.cmd' file. In addition it is also encrypted with a console-unique [[AES|keyslot]]. This acts as part of the DRM for installed titles, along with the [[Title Database|title.db]].

The below AES-MACs(including the last 0x10-bytes of the header) are only used for SD titles, and for NAND [[Title_list|download-play]] titles. For other titles, these MACs are set to all-zero.

{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| .cmd ContentID, for the .cmd filename. This is the beginning of the header.
|-
| 0x4
| 0x1C
| For NAND titles' .cmd these 2 words are usually value 1, the rest of the header is all-zero. The last 0x10-bytes of this header is an AES MAC?
|-
| 0x20
| 0x8*(No. of entries)
| Entries for each content begin here with size 0x8.
|-
| 0x20+0x8*(No. of entries)
| 0x10*(No. of entries)
| These are MACs, one for each content.
|}

Entries format:
{| class="wikitable" border="1"
|-
! Start
! Size
! Description
|-
| 0x0
| 0x4
| ContentID
|-
| 0x4
| 0x8
| Unknown
|}

'''"00000001.sav"''' - This is the title's encrypted [[Savegames|savegame]]. Renaming these savegames causes home-menu to hang while launching titles, modifying these saves results in the same corruption errors as other savegames.

'''"00000000.ctx"''' - This file encrypted with a console-unique [[AES|keyslot]] is temporarily stored on SD card while a title is being downloaded from the eShop, it is deleted after the download is completed. This contains an AP0000000000000000 cert used to sign the data following the cert, this cert is signed by the [[CTCert]].
The unknown signed data is likely an ECDSA public key. There's .ctx files stored under the /title directory for NAND CTR/TWL titles, however those use the [[CTXT]] format which is completely different from this SD .ctx format. These .ctx files for NAND/SD titles only exist for titles where installation was not yet finalized(like when a system update install was not yet finalized).

=== DLC Titles ===

DLC titles have a different directory structure to most installed titles. This is because all DLC content for a given title is installed under the same Title ID, but DLC add-ons are usually separate purchases, hence the structure altered so any combination of DLC content can be installed. DLC titles can receive 'updates', this is usually in the form of more DLC content and/or DLC bug fixes. Individual DLC content can only be managed from with-in the application using the DLC.

'''"00000000"''' - This extra directory only found in DLC titles, contains the DLC [[NCCH]] content.

"'''<ContentID>.tmd'''" - This is not modified by the 3DS, and contains the details for all DLC content(installed or not).

"'''<ContentID>.cmd'''" - This contains entries for all '''installed''' DLC [[NCCH]] content, and is updated (<ContentID> will change) every time DLC content is installed/removed.

11.0.0-33

2016-05-11T04:33:15Z

Einstein95:

The Old3DS+New3DS 11.0.0-33 system update was released on May 9, 2016. This Old3DS update was released for the following regions: USA, EUR, JPN, CHN, KOR, and TWN. This New3DS update was released for the following regions: USA, EUR, JPN, CHN, and KOR.

Security flaws fixed: <fill this in manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>.

==Change-log==
[http://en-americas-support.nintendo.com/app/answers/detail/a_id/667/p/430/c/267 Official] USA change-log:
* Further improvements to overall system stability and other minor adjustments have been made to enhance the user experience

==System Titles==
<fill this in (manually) later>

===NATIVE_FIRM===
The ARM9 FIRM section is larger.

The only updated FIRM sysmodules are loader and pm.

svcBackdoor has been removed (on ARM11).

====loader====
Exactly one function was updated: L_140022b8 (same addr as previous version).

The codebin physical-memory randomization code introduced with [[10.4.0-29]] was updated so that it's now used for OoT3D and Cubic Ninja (checked in the same aforementioned order), for the USA+EUR+JPN titles. This means oot3dhax and ninjhax need to be updated to handle this. Using the pre-sysupdate exploit versions will result in the title randomly crashing. However, if you retry enough times, it should run fine.

====pm====
Two functions were updated for calling a new function for exheader handling.

This new function at L_101cfc immediately returns when the input programID isn't a CTR title / Cubic Ninja (USA/EUR/JPN uniqueID). This function removes all services in the exheader service-access-control which match services from a blacklist stored in pm-module. This blacklist contains two services: "http:C" and "soc:U".

This breaks QR-code ninjhax with the version available at the time of sysupdate release, since the QR-code build downloads the payload via HTTPC.

====ARM11-kernel====
57 functions were updated, 47 of these are the actual functions used for handling SVCs (see below). The lone function updated with v10.4 was updated with this version again.

3 new functions used for validation with memory management were added (kernelpanic() on failure). This is a new security feature for the kernel heaps. By adding a MAC to the kernel heap [[Memory Management#MemoryBlockHeader|memchunkhdr]] they can detect when it is modified by an outside DMA device ([[3DS System Flaws|gspwn]]).

The MAC itself is custom based on xor-rot-sub-mul, and is calculated as follows (pseudo-code):

u32* crypto_state = (u32*) r4; // Safe kernel memory. This is actually the [[Memory Management#RegionDescriptor|RegionDescriptor]].
u32* data_ptr = (u32*) lr; // Unsafe FCRAM pointer.

r0 = crypto_state[16/4] // Load "key".
r1 = crypto_state[20/4]
r2 = crypto_state[28/4]
r3 = crypto_state[24/4]

for(size_t i=0; i<2; i++) {
for(size_t j=0; j<5; j++) {
r0 -= data_ptr[j] + (r1 >>> 3)
r1 -= (r3 >>> (r2 & 0xf + 3)) ^ (r2 >>> (r0 & 0xf + 13))
r3 -= (r2 >>> r0) * r1
r2 -= (r0 >>> r1) * r3
}
}

// Verify MAC.
if(data_ptr[5] != (r0 ^ r1)) {
kernel_panic()
}

The function which initializes a memalloc heap had a major update (used for FCRAM memregions and the SlabHeap container). It generates a random MAC key based on svcGetSystemTick, like this:

crypto_state[16/4] = 0 //This is actually the [[Memory Management#RegionDescriptor|RegionDescriptor]].
crypto_state[20/4] = 0
crypto_state[24/4] = 0
crypto_state[28/4] = 0

u32* key = &crypto_state[16/4];

for(size_t i=0; i<0x40; i++) {
for(size_t j=0; j<4; j++) {
r0 = key[j] - GetSystemTick()
key[j] = r0 ^ ((r0 >>> 7) - (key[(i+j) % 4] >>> 17))
}
}

However, it's unknown how much the svcGetSystemTick() output really varies if anything(?) for each hard-boot during initialization of the heaps.

6 memory management functions were updated to use the above new functions, these func-calls replaced the validation code previously used in these functions in some cases. These were also updated for the above heap security implementation. One function had a validation func-call added where previously there wasn't any validation done in the beginning of the function for previous versions.

Another function(L_fff13b68 previously at L_fff13b68) was updated for offsets it uses, nothing else.

The function handling the arm11kernel exheader descriptors was updated, if anything changed besides the kernel-version value it seems minor.

The first 47 updated functions are used for the actual SVC handling. It seems each change just added code at the start of the function for initializing the output data. This includes SVCs which were already stubbed. All of the updated SVCs for this, in the same order as the arm11kernel code binary:
{| class="wikitable" border="1"
|-
! SVC
! Additional changes if any
|-
| svcCreatePort
| None
|-
| svcOpenThread
| None
|-
| svcCreateEvent
| None
|-
| svcCreateMutex
| None
|-
| svcCreateTimer
| None
|-
| svcGetThreadId
| None
|-
| svcRandomStub (SVC 0x74)
| None
|-
| svcOpenProcess
| None
|-
| svcQueryMemory
| None
|-
| svcCreateThread
| None
|-
| svcGetProcessId
| None
|-
| svcAcceptSession
| None
|-
| svcConnectToPort
| None
|-
| svcControlMemory
| None
|-
| svcCreateCodeSet (SVC 0x73)
| None
|-
| svcCreateProcess (SVC 0x75)
| None
|-
| svcCreateSession
| None
|-
| svcGetHandleInfo
| The code which clears the variables that get written into the output 8-byte buffer, was moved to before the code which checks the input type value (previously this was only executed for type 0x32107).
|-
| svcGetSystemInfo
| None
|-
| svcGetThreadInfo
| None
|-
| svcGetThreadList
| None
|-
| svcSignalAndWait
| None
|-
| svcGetProcessInfo
| None
|-
| svcGetProcessList
| None
|-
| svcCreateSemaphore
| None
|-
| svcDuplicateHandle
| None
|-
| svcReplyAndReceive
| None
|-
| svcGetResourceLimit
| None
|-
| svcReleaseSemaphore
| None
|-
| svcReplyAndReceive1
| None
|-
| svcReplyAndReceive2
| None
|-
| svcReplyAndReceive3
| None
|-
| svcReplyAndReceive4
| None
|-
| svcCreateMemoryBlock
| None
|-
| svcGetThreadPriority
| None
|-
| svcDebugActiveProcess
| None
|-
| svcQueryProcessMemory
| None
|-
| svcCreateResourceLimit
| None
|-
| svcCreateSessionToPort
| None
|-
| svcCreateAddressArbiter
| None
|-
| svcGetProcessIdOfThread
| None
|-
| svcWaitSynchronizationN
| None
|-
| svcGetThreadIdealProcessor
| None
|-
| svcQueryDebugProcessMemory
| None
|-
| svcGetProcessIdealProcessor
| None
|-
| svcControlPerformanceCounter
| None
|-
| svcStartInterProcessDma
| None
|}

====Process9====
Various data was moved around in the .data section (.data is 0x99C-bytes smaller than before).

Before installing titles, including NATIVE_FIRM, AMPXI will now check the version of the title to install against a hard-coded list of (titleID, minimumVersionRequired) pairs. This applies to MSET, Home Menu, spider, ErrDisp, SKATER, NATIVE_FIRM, and every retail system module.

This effectively prevents downgrading.

AMPXI_InstallFIRM's firm-writing code has changed, though it seems it is only a refactor.

====New3DS====
The arm9loader wasn't changed at all.

===friends-sysmodule===
Only the value used for fpdver changed in the codebin, from 5 to 6.

===IR-sysmodule===
Exactly two functions were updated with the same changes: L_1053b0 and L_10547c.

When the input value is zero, this now requires bitmask 0x2 to be clear in a certain state field before passing a ptr to a function, instead of 0x0.

===0004001B00010802===
The 1-byte content of "romfs:/dummy.txt" was changed from '2' to '3'.

==See Also==
System update report(s):
* [https://yls8.mtheall.com/ninupdates/reports.php?date=05-09-16_08-00-49&sys=ctr]
* [https://yls8.mtheall.com/ninupdates/reports.php?date=05-09-16_08-00-58&sys=ktr]

11.0.0-33

2016-05-11T04:31:00Z

Einstein95: /* loader */

The Old3DS+New3DS 11.0.0-33 system update was released on May 9, 2016. This Old3DS update was released for the following regions: USA, EUR, JPN, CHN, KOR, and TWN. This New3DS update was released for the following regions: USA, EUR, JPN, CHN, and KOR.

Security flaws fixed: <fill this in manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>.

==Change-log==
[http://en-americas-support.nintendo.com/app/answers/detail/a_id/667/p/430/c/267 Official] USA change-log:
* Further improvements to overall system stability and other minor adjustments have been made to enhance the user experience

==System Titles==
<fill this in (manually) later>

===NATIVE_FIRM===
The ARM9 FIRM section is larger.

The only updated FIRM sysmodules are loader and pm.

svcBackdoor has been removed (on ARM11).

====loader====
Exactly one function was updated: L_140022b8 (same addr as previous version).

The codebin physical-memory randomization code introduced with [[10.4.0-29]] was updated so that it's now used for OoT3D and Cubic Ninja (checked in the same aforementioned order), for the USA+EUR+JPN titles. This means oot3dhax and ninjhax need to be updated to handle this. Using the pre-sysupdate exploit versions will result in the title randomly crashing. However, if you retry enough times, it should run fine.

====pm====
Two functions were updated for calling a new function for exheader handling.

This new function at L_101cfc immediately returns when the input programID isn't a CTR title / Cubic Ninja(USA/EUR/JPN uniqueID). This function removes all services in the exheader service-access-control which match services from a blacklist stored in pm-module. This blacklist contains two services: "http:C" and "soc:U".

This breaks QR-code ninjhax with the version available at the time of sysupdate release, since the QR-code build downloads the payload via HTTPC.

====ARM11-kernel====
57 functions were updated, 47 of these are the actual functions used for handling SVCs(see below). The lone function updated with v10.4 was updated with this version again.

3 new functions used for validation with memory management were added (kernelpanic() on failure). This is a new security feature for the kernel heaps. By adding a MAC to the kernel heap [[Memory_Management#MemoryBlockHeader|memchunkhdr]] they can detect when it is modified by an outside DMA device ([[3DS_System_Flaws|gspwn]]).

The MAC itself is custom based on xor-rot-sub-mul, and is calculated as follows (pseudo-code):

u32* crypto_state = (u32*) r4; // Safe kernel memory. This is actually the [[Memory_Management#RegionDescriptor|RegionDescriptor]].
u32* data_ptr = (u32*) lr; // Unsafe FCRAM pointer.

r0 = crypto_state[16/4] // Load "key".
r1 = crypto_state[20/4]
r2 = crypto_state[28/4]
r3 = crypto_state[24/4]

for(size_t i=0; i<2; i++) {
for(size_t j=0; j<5; j++) {
r0 -= data_ptr[j] + (r1 >>> 3)
r1 -= (r3 >>> (r2 & 0xf + 3)) ^ (r2 >>> (r0 & 0xf + 13))
r3 -= (r2 >>> r0) * r1
r2 -= (r0 >>> r1) * r3
}
}

// Verify MAC.
if(data_ptr[5] != (r0 ^ r1)) {
kernel_panic()
}

The function which initializes a memalloc heap had a major update (used for FCRAM memregions and the SlabHeap container). It generates a random MAC key based on svcGetSystemTick, like this:

crypto_state[16/4] = 0 //This is actually the [[Memory_Management#RegionDescriptor|RegionDescriptor]].
crypto_state[20/4] = 0
crypto_state[24/4] = 0
crypto_state[28/4] = 0

u32* key = &crypto_state[16/4];

for(size_t i=0; i<0x40; i++) {
for(size_t j=0; j<4; j++) {
r0 = key[j] - GetSystemTick()
key[j] = r0 ^ ((r0 >>> 7) - (key[(i+j) % 4] >>> 17))
}
}

However, it's unknown how much the svcGetSystemTick() output really varies if anything(?) for each hard-boot during initialization of the heaps.

6 memory management functions were updated to use the above new functions, these func-calls replaced the validation code previously used in these functions in some cases. These were also updated for the above heap security implementation. One function had a validation func-call added where previously there wasn't any validation done in the beginning of the function for previous versions.

Another function(L_fff13b68 previously at L_fff13b68) was updated for offsets it uses, nothing else.

The function handling the arm11kernel exheader descriptors was updated, if anything changed besides the kernel-version value it seems minor.

The first 47 updated functions are used for the actual SVC handling. It seems each change just added code at the start of the function for initializing the output data. This includes SVCs which were already stubbed. All of the updated SVCs for this, in the same order as the arm11kernel code binary:
{| class="wikitable" border="1"
|-
! SVC
! Additional changes if any
|-
| svcCreatePort
| None
|-
| svcOpenThread
| None
|-
| svcCreateEvent
| None
|-
| svcCreateMutex
| None
|-
| svcCreateTimer
| None
|-
| svcGetThreadId
| None
|-
| svcRandomStub (SVC 0x74)
| None
|-
| svcOpenProcess
| None
|-
| svcQueryMemory
| None
|-
| svcCreateThread
| None
|-
| svcGetProcessId
| None
|-
| svcAcceptSession
| None
|-
| svcConnectToPort
| None
|-
| svcControlMemory
| None
|-
| svcCreateCodeSet (SVC 0x73)
| None
|-
| svcCreateProcess (SVC 0x75)
| None
|-
| svcCreateSession
| None
|-
| svcGetHandleInfo
| The code which clears the variables that get written into the output 8-byte buffer, was moved to before the code which checks the input type value(previously this was only executed for type 0x32107).
|-
| svcGetSystemInfo
| None
|-
| svcGetThreadInfo
| None
|-
| svcGetThreadList
| None
|-
| svcSignalAndWait
| None
|-
| svcGetProcessInfo
| None
|-
| svcGetProcessList
| None
|-
| svcCreateSemaphore
| None
|-
| svcDuplicateHandle
| None
|-
| svcReplyAndReceive
| None
|-
| svcGetResourceLimit
| None
|-
| svcReleaseSemaphore
| None
|-
| svcReplyAndReceive1
| None
|-
| svcReplyAndReceive2
| None
|-
| svcReplyAndReceive3
| None
|-
| svcReplyAndReceive4
| None
|-
| svcCreateMemoryBlock
| None
|-
| svcGetThreadPriority
| None
|-
| svcDebugActiveProcess
| None
|-
| svcQueryProcessMemory
| None
|-
| svcCreateResourceLimit
| None
|-
| svcCreateSessionToPort
| None
|-
| svcCreateAddressArbiter
| None
|-
| svcGetProcessIdOfThread
| None
|-
| svcWaitSynchronizationN
| None
|-
| svcGetThreadIdealProcessor
| None
|-
| svcQueryDebugProcessMemory
| None
|-
| svcGetProcessIdealProcessor
| None
|-
| svcControlPerformanceCounter
| None
|-
| svcStartInterProcessDma
| None
|}

====Process9====
Various data was moved around in the .data section(.data is 0x99C-bytes smaller than before).

Before installing titles, including NATIVE_FIRM, AMPXI will now check the version of the title to install against a hard-coded list of (titleID, minimumVersionRequired) pairs. This applies to MSET, Home Menu, spider, ErrDisp, SKATER, NATIVE_FIRM, and every retail system module.

This effectively prevents downgrading.

AMPXI_InstallFIRM's firm-writing code has changed, though it seems it is only a refactor.

====New3DS====
The arm9loader wasn't changed at all.

===friends-sysmodule===
Only the value used for fpdver changed in the codebin, from 5 to 6.

===IR-sysmodule===
Exactly two functions were updated with the same changes: L_1053b0 and L_10547c.

When the input value is zero, this now requires bitmask 0x2 to be clear in a certain state field before passing a ptr to a function, instead of 0x0.

===0004001B00010802===
The 1-byte content of "romfs:/dummy.txt" was changed from '2' to '3'.

==See Also==
System update report(s):
* [https://yls8.mtheall.com/ninupdates/reports.php?date=05-09-16_08-00-49&sys=ctr]
* [https://yls8.mtheall.com/ninupdates/reports.php?date=05-09-16_08-00-58&sys=ktr]

EShop

2016-04-28T05:46:23Z

Einstein95: /* Common Parameters to ninja and samurai */

{{DISPLAYTITLE:eShop}}
The Nintendo 3DS eShop was added in the June 2011 update for JP/EUR/USA.

From here, you can download Virtual Console games, 3D Classics, DSiware software, view screenshots, and 3D trailers for upcoming 3DS titles.

While eShop is loading, eShop will use command [[NIMS:CheckSysupdateAvailableSOAP]]. If a system update is available where title installation for system titles still needs finalized (or when the updated titles were not downloaded at all), eShop will then display the "system update is available" message.

The eShop application uses command [[AMNet:FinishInstallToMedia]] to finalize the SD title install (if the whole title is downloaded while eShop is still running), however, before using that command the eShop application also uses [[AMNet:FinishInstallToMedia]] to finalize installing all system titles (from system updates).

== eShop QR Codes ==
eShop QR Codes can be scanned with the camera, allowing one to quickly navigate to the desired eShop title with just two clicks. The QR Codes themselves is a simple text/url QR, started with "ESHOP://" string followed by a decimal eShop content link id(same IDs used internally by eShop for all content) and then some special data, delimited by a dot symbol, which can be ommited.

In order for the QR-code string data to be valid for eShop, it must begin with "ESHOP://5", with the first ID being all decimal.

{| class="wikitable"
|-
! QR Code source
! Region
! Title
! Serial
! Title ID
|-
| ESHOP://50010000000201.PEAALL000000 || EUR || nintendogs + cats: Golden Retriever & New Friends || ADAP || 0004000000030C00
|-
| ESHOP://50010000007870.PEAALL000000 || EUR || Crush 3D || ACRP || 0004000000040400
|-
| ESHOP://50010000008009.PEAALL000000 || EUR || Resident Evil Revelations || ABRE || 000400000005EE00
|-
| ESHOP://50010000008123.J00101Z00095 || JPN || Rhythm Kaitou R: Koutei Napoleon no Isan || ARTJ || 0004000000078100
|-
| ESHOP://50010000008404.PEAALL000000 || EUR || Mario & Sonic at the London 2012 Olympic Games || ACMP || 0004000000054900
|-
| ESHOP://50010000008447.J00101Z00094 || JPN || Biohazard Revelations || ABRJ || 0004000000053B00
|-
| ESHOP://50010000008449.J00101Z00082 || JPN || Itsu no Ma ni Koukan Nikki || JFRJ || 0004000000051600
|-
| ESHOP://50010000008561 || USA || Swapnote || JFRE || 0004000000051700
|-
| ESHOP://50010000008647.J00101Z00096 || JPN || Metal Gear Solid Snake Eater 3D || AMGJ || 000400000007A000
|-
| ESHOP://50010000008648.J00101Z00097 || JPN || Theatrythm Final Fantasy || ATHJ || 0004000000078200
|-
| ESHOP://50010000008782.PEAALL000000 || EUR || Metal Gear Solid Snake Eater 3D || AMGE || 0004000000082400
|-
| ESHOP://50010000008842.PEAALL000000 || EUR || Rhythm Thief And The Emperor's Treasure || ARTP || 000400000006DA00
|-
| ESHOP://50010000009084.J00101Z00121 || JPN || Hatsune Miku And Future Stars: Project Mirai || AM9J || 0004000000048000
|-
| ESHOP://50010000009102.J00101Z00106 || JPN || Denpa Ningen no RPG || JD8J || 0004000000077E00
|-
| ESHOP://50010000009161.J00101Z00118 || JPN || The Rolling Western || JAMJ || 0004000000059B00
|-
| ESHOP://50010000009261 || USA || Dillon's Rolling Western || JAME || 000400000007C400
|-
| ESHOP://50010000009401.J00101Z00120 || JPN || Kingdom Hearts 3D Nintendo Direct 2012.2.22 Video || JZ8J || 0004000000092E00
|-
| ESHOP://50010000009403.J00101Z00119 || JPN || Dragon Quest Monsters: Terry no Wonderland 3D Nintendo Direct 2012.2.22 Video || JZ7J || 0004000000092F00
|-
| ESHOP://50010000009575.PEAALL000000 || EUR || Kid Icarus: Of Myths And Monsters (Virtual Console) || RBLP || 0004000000069500
|-
| ESHOP://50010000009846 || USA || Ketzal's Corridors || JELE || 0004000000083800
|}

* New QR Code for Japanese "Photos with Super Mario" has a different code string: ESHOP://50010000013120.J00108Z00001.CD588EAE95A3A68D15C647DA2AC0945FD88F70AB8A31149E51C4B05FB927B0B8

* There is a link in the Japanese eShop <nowiki>[http://www.nintendo.co.jp/3ds/eshop/qrCode.html?####]</nowiki> where you can replace the #### with the Japanese eShop title's serial and you will get it's QR code. (i.e. http://www.nintendo.co.jp/3ds/eshop/qrCode.html?JCAJ will get you the pushmo QR code)

* You could use Google's Chart API to create a QR code from the codes above: https://chart.googleapis.com/chart?chs=150x150&cht=qr&chl=ESHOP (replace the ESHOP text with the ESHOP:// link from one of the above)

== NS eShop application parameters ==
This section describes the 0x1C-byte structure stored at the application parameters from [[APT:StartApplication]], under the 0x300-byte buffer listed there.

{| class="wikitable"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Unknown, usually 0x3?
|-
| 0x4
| 0x4
| Unknown, usually 0x0?
|-
| 0x8
| 0x8
| u64 binary eShop content ID, same ID from the first string in eShop QR-codes except in binary form.
|-
| 0x10
| 0x10
| This is the last string from the QR-code(if any), no NUL-termination.
|}

== ExtData ==
The ExtData [[Extdata#Filesystem|File System]] for eShop is as follows:

root
├── icon
├── boss
│ └── TIGER100.tmp
└── user

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! Firmware Introduced
! Plain text
|-
| icon
| Duplicate from application ExeFS. Always image 00000002
| 0x36C0 Bytes
| [[2.0.0-2]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/eShopExtdata/icon Download_EUR]
|-
| TIGER100.tmp
| Always image 00000003.
| 0xCE47 bytes (varies?)
| [[2.0.0-2]]
|
|}

== Music ==
The eShop pulls its music from a static, region-specific link in a format similar to the following:

https:// a248.e.akamai.net/f/248/103046/10m/npdl.c.app.nintendowifi.net/p01/nsa/CtfKXACbUPl8s7lk/BGM1/US_BGM1 ,
where region is one of the primary system regions (JP, US, EU, KR, etc.) Support also exists for 'BGM2', but this seems to be unused.
The music is held in a [[SpotPass|BOSS]] container.

The format consists of a brief XML header describing the audio (including the date it was set as the main eShop theme, loop times, size, etc) followed by a raw AAC stream. Tools such as FFmpeg can handle rebuilding this stream with ADTS headers for proper time info and such.

The [[Home_Menu|Home Menu]] uses nearly the same format for the Theme Shop's background music.

== URLs ==

eShop uses the following domains over HTTPS:

* cp3s-auth.c.shop.nintendowifi.net
* a248.e.akamai.net
* ninja.ctr.shop.nintendo.net
* samurai.ctr.shop.nintendo.net
* ccif.ctr.shop.nintendo.net
* eou.c.shop.nintendowifi.net

These domains are used by [[NIM_Services|NIM]]:

* nus.c.shop.nintendowifi.net
* ecs.c.shop.nintendowifi.net
* cas.c.shop.nintendowifi.net

ninja.ctr.shop.nintendo.net and samurai.ctr.shop.nintendo.net contain the bulk of the eShop information.

=== Common Parameters to ninja and samurai ===

For every request to the ninja and samurai servers, three parameters are always sent, though are not necessarily required:

{| class="wikitable" border="1"
|-
! Parameter
! Required
! Description
! Type
! Normal value
|-
| shop_id
| depends on the URL, usually no
| Describes which eShop instance should be used. 1 indicates the 3DS eShop, 2 indicates the Wii U eShop. 3 yields the same results as 2 but uses the img-eshop image server. 4 yields similar results as 3 but includes VC titles and updates, lacks image links for /titles and lacks release dates, prices and whether eShop and web sales are possible. For 4, links are given in both MP4 and Moflex formats for movies. Values greater than 4 or less than 1 are invalid. Defaults to 2 if not given.
| unsigned integer
| 1
|-
| lang
| no
| Describes the language. Seems to be an ISO 639-1 code in lower case. Every eShop region has a default language that is used if this parameter is not given. Some regions have multiple languages, such as CA (en and fr).
| string (two characters)
| depends on region and eShop settings; for US: en
|-
| _type
| no
| Describes whether the client wants to receive JSON or XML. This parameter seems actually unused and the servers always return XML.
| string
| json
|}

=== samurai ===

samurai.ctr.shop.nintendo.net (samurai) provides metadata about titles. The samurai server provides the backend for the eShop title search.

Common parameters described above can always be sent.

{| class="wikitable" border="1"
|-
! Path
! Description
! Parameters
|-
| /samurai/ws/'''region'''/titles
| Fetches the title list, containing the content id (not the 3DS title id), the product code and the localized title name
| All of these are optional.
* genre[]: genre ID (unsigned int)
* publisher[]: publisher ID (unsigned int)
* price_min: minimum price in region currency (signed int)
* price_max: maximum price in region currency (signed int)
* video_format: "moflex"
* freeword: keyword(s?) to look for (string)
* limit: maximum results
* offset: results to skip
* sort: one of "new", "popular" or "score"
* release_date_before: date/time title must have been released before (UNIX timestamp prefixed by +)
* release_date_after: date/time title must have been released after (UNIX timestamp prefixed by -)
|-
| /samurai/ws/'''region'''/news
| eShop news section
| (none)
|-
| /samurai/ws/'''region'''/telops
| Scrolling news on the top screen
| shop_id is required
|-
| /samurai/ws/'''region'''/directory/'''(long long unsigned int)''' and /samurai/ws/'''region'''/directory/~'''(string)'''
| Collections, like sales
| (none)
|-
| /samurai/ws/'''region'''/title/'''content id'''
| Returns information about the title, more verbose than /titles.
| (none)
|-
| /samurai/ws/'''region'''/demo/'''content id'''
| Returns information about a demo. Content ID is available in the main game's /title entry.
| (none)
|-
| /samurai/ws/'''region'''/contents
| Seems identical to /titles.
| see /titles
|-
| /samurai/ws/'''region'''/genres
| Returns a list of human-readable genre names and their corresponding genre id.
| (none)
|-
| /samurai/ws/'''region'''/publishers
| Returns a list of human-readable publisher names and their corresponding publisher id.
| (none)
|-
| /samurai/ws/'''region'''/platforms
| Returns a list of human-readable platform names and their corresponding platform id.
| (none)
|-
| /samurai/ws/'''region'''/title/'''content id'''/aocs
| Returns a list of add-on contents/downloadable content and prices in eShop region currency.
| (none)
|}

=== ninja ===

ninja.ctr.shop.nintendo.net (ninja) contains the seeds for the new 9.6 crypto, pricing information and handles actions that require authentication, such as purchases. Authentication information seems to be obtained from the [[ACT_Services|act:u sysmodule]] and works through OAuth2.

{| class="wikitable" border="1"
|-
! Path
! Description
! Parameters
|-
| /ninja/ws/'''region'''/title/'''content id'''/ec_info
| Contains information about the title. Such as title id, content size, and if available, the 9.6 crypto seed
| (none)
|-
| /ninja/ws/titles/id_pair
| Provides the content id for the given title id, or vice versa.
| title_id[] or ns_uid[] is required.
|-
| /ninja/ws/'''region'''/tax_locations
| Provides the tax location ID
| postal_code is required.
|-
| /ninja/ws/service_hosts
| Provides CCIF and Samurai servers
| country and shop_id is required.
|-
| /ninja/ws/country/'''region'''
| Various eshop related information for a given region
| (none)
|-
| /ninja/ws/country/'''region'''/replenish_amounts
| Provides the amounts of money you can replenish to your account.
| (none)
|}

=== Trusted Root CAs ===
The eShop application itself uses a [[HTTP_Services|RootCertChain]] for all HTTPS requests, all of the trusted root CAs are the following [[SSLC:RootCertChainAddDefaultCert|default]] ones:
* CertID 0x3
* CertID 0x6
* CertID 0x7
* CertID 0x8
* CertID 0x9
* CertID 0xA

=== Server changes following the November 2, 2015, maintenance ===
Pre-v10.0 eShop used an URL like this: "%s/samurai/ws/%s/title/%llu/other_purchased?shop_id=1&lang=%s&_type=json". That URL was removed with v10.0. That URL was requested when trying to load eShop app-pages. Following the maintenance mentioned above, this page was removed from the server, which broke pre-v10.0 eShop app whenever it tried to access that page.

URL changes between [[9.7.0-25]] and [[10.0.0-27]] are (green = add, red = remove):

%s/ninja/ws/%s/titles/online_prices?title%%5B%%5D=%s&lang=%s&include_coupon=true&shop_id=1&_type=json

%s/ninja/ws/%s/coupon/!check?shop_id=1&_type=json

%s/ninja/ws/my/owned_coupons?ns_uid=%llu&shop_id=1&_type=json

%s/ninja/ws/my/owned_coupons?shop_id=1&_type=json

%s/ninja/ws/my/parental_control/!put?shop_id=1&_type=json

%s/ninja/ws/%s/title/%llu/prepurchase_info?%s=%s&shop_id=1&_type=json

%s/samurai/ws/%s/coupon/%llu/titles?lang=%s&limit=%u&offset=%u&shop_id=1&_type=json

%s/ninja/ws/my/auto_billing/plans?limit=%u&offset=%u&shop_id=1&_type=json

%s/ninja/ws/%s/titles/online_prices?title%%5B%%5D=%s&lang=%s&include_coupon=true&coupon_id=%llu&shop_id=1&_type=json

%s/ninja/ws/my/auto_billing/%014llu/!cancel?shop_id=1&_type=json

%s/samurai/ws/%s/title/%llu/other_purchased?shop_id=1&lang=%s&_type=json

%s/samurai/movie/%s/%s/%014llu/moflex

==New3DS==
CheckNew3DS is called in two functions. This is only used for disabling UI button(s) for downloading New3DS titles when running on Old3DS. For example, on a New3DS patching a CheckNew3DS func-call with <retval=0>, results in the download button on the app page being grayed-out for a New3DS-only title.

==TitleID checks==
There's titleID checks in the system eShop application code for "Pokémon Omega Ruby". This appears to be used with UI-related code, unknown why.

EShop

2016-04-23T13:57:36Z

Einstein95: /* eShop QR Codes */ Filling in the rest of the table

{{DISPLAYTITLE:eShop}}
The Nintendo 3DS eShop was added in the June 2011 update for JP/EUR/USA.

From here, you can download Virtual Console games, 3D Classics, DSiware software, view screenshots, and 3D trailers for upcoming 3DS titles.

While eShop is loading, eShop will use command [[NIMS:CheckSysupdateAvailableSOAP]]. If a system update is available where title installation for system titles still needs finalized (or when the updated titles were not downloaded at all), eShop will then display the "system update is available" message.

The eShop application uses command [[AMNet:FinishInstallToMedia]] to finalize the SD title install (if the whole title is downloaded while eShop is still running), however, before using that command the eShop application also uses [[AMNet:FinishInstallToMedia]] to finalize installing all system titles (from system updates).

== eShop QR Codes ==
eShop QR Codes can be scanned with the camera, allowing one to quickly navigate to the desired eShop title with just two clicks. The QR Codes themselves is a simple text/url QR, started with "ESHOP://" string followed by a decimal eShop content link id(same IDs used internally by eShop for all content) and then some special data, delimited by a dot symbol, which can be ommited.

In order for the QR-code string data to be valid for eShop, it must begin with "ESHOP://5", with the first ID being all decimal.

{| class="wikitable"
|-
! QR Code source
! Region
! Title
! Serial
! Title ID
|-
| ESHOP://50010000000201.PEAALL000000 || EUR || nintendogs + cats: Golden Retriever & New Friends || ADAP || 0004000000030C00
|-
| ESHOP://50010000007870.PEAALL000000 || EUR || Crush 3D || ACRP || 0004000000040400
|-
| ESHOP://50010000008009.PEAALL000000 || EUR || Resident Evil Revelations || ABRE || 000400000005EE00
|-
| ESHOP://50010000008123.J00101Z00095 || JPN || Rhythm Kaitou R: Koutei Napoleon no Isan || ARTJ || 0004000000078100
|-
| ESHOP://50010000008404.PEAALL000000 || EUR || Mario & Sonic at the London 2012 Olympic Games || ACMP || 0004000000054900
|-
| ESHOP://50010000008447.J00101Z00094 || JPN || Biohazard Revelations || ABRJ || 0004000000053B00
|-
| ESHOP://50010000008449.J00101Z00082 || JPN || Itsu no Ma ni Koukan Nikki || JFRJ || 0004000000051600
|-
| ESHOP://50010000008561 || USA || Swapnote || JFRE || 0004000000051700
|-
| ESHOP://50010000008647.J00101Z00096 || JPN || Metal Gear Solid Snake Eater 3D || AMGJ || 000400000007A000
|-
| ESHOP://50010000008648.J00101Z00097 || JPN || Theatrythm Final Fantasy || ATHJ || 0004000000078200
|-
| ESHOP://50010000008782.PEAALL000000 || EUR || Metal Gear Solid Snake Eater 3D || AMGE || 0004000000082400
|-
| ESHOP://50010000008842.PEAALL000000 || EUR || Rhythm Thief And The Emperor's Treasure || ARTP || 000400000006DA00
|-
| ESHOP://50010000009084.J00101Z00121 || JPN || Hatsune Miku And Future Stars: Project Mirai || AM9J || 0004000000048000
|-
| ESHOP://50010000009102.J00101Z00106 || JPN || Denpa Ningen no RPG || JD8J || 0004000000077E00
|-
| ESHOP://50010000009161.J00101Z00118 || JPN || The Rolling Western || JAMJ || 0004000000059B00
|-
| ESHOP://50010000009261 || USA || Dillon's Rolling Western || JAME || 000400000007C400
|-
| ESHOP://50010000009401.J00101Z00120 || JPN || Kingdom Hearts 3D Nintendo Direct 2012.2.22 Video || JZ8J || 0004000000092E00
|-
| ESHOP://50010000009403.J00101Z00119 || JPN || Dragon Quest Monsters: Terry no Wonderland 3D Nintendo Direct 2012.2.22 Video || JZ7J || 0004000000092F00
|-
| ESHOP://50010000009575.PEAALL000000 || EUR || Kid Icarus: Of Myths And Monsters (Virtual Console) || RBLP || 0004000000069500
|-
| ESHOP://50010000009846 || USA || Ketzal's Corridors || JELE || 0004000000083800
|}

* New QR Code for Japanese "Photos with Super Mario" has a different code string: ESHOP://50010000013120.J00108Z00001.CD588EAE95A3A68D15C647DA2AC0945FD88F70AB8A31149E51C4B05FB927B0B8

* There is a link in the Japanese eShop <nowiki>[http://www.nintendo.co.jp/3ds/eshop/qrCode.html?####]</nowiki> where you can replace the #### with the Japanese eShop title's serial and you will get it's QR code. (i.e. http://www.nintendo.co.jp/3ds/eshop/qrCode.html?JCAJ will get you the pushmo QR code)

* You could use Google's Chart API to create a QR code from the codes above: https://chart.googleapis.com/chart?chs=150x150&cht=qr&chl=ESHOP (replace the ESHOP text with the ESHOP:// link from one of the above)

== NS eShop application parameters ==
This section describes the 0x1C-byte structure stored at the application parameters from [[APT:StartApplication]], under the 0x300-byte buffer listed there.

{| class="wikitable"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Unknown, usually 0x3?
|-
| 0x4
| 0x4
| Unknown, usually 0x0?
|-
| 0x8
| 0x8
| u64 binary eShop content ID, same ID from the first string in eShop QR-codes except in binary form.
|-
| 0x10
| 0x10
| This is the last string from the QR-code(if any), no NUL-termination.
|}

== ExtData ==
The ExtData [[Extdata#Filesystem|File System]] for eShop is as follows:

root
├── icon
├── boss
│ └── TIGER100.tmp
└── user

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! Firmware Introduced
! Plain text
|-
| icon
| Duplicate from application ExeFS. Always image 00000002
| 0x36C0 Bytes
| [[2.0.0-2]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/eShopExtdata/icon Download_EUR]
|-
| TIGER100.tmp
| Always image 00000003.
| 0xCE47 bytes (varies?)
| [[2.0.0-2]]
|
|}

== Music ==
The eShop pulls its music from a static, region-specific link in a format similar to the following:

https:// a248.e.akamai.net/f/248/103046/10m/npdl.c.app.nintendowifi.net/p01/nsa/CtfKXACbUPl8s7lk/BGM1/US_BGM1 ,
where region is one of the primary system regions (JP, US, EU, KR, etc.) Support also exists for 'BGM2', but this seems to be unused.
The music is held in a [[SpotPass|BOSS]] container.

The format consists of a brief XML header describing the audio (including the date it was set as the main eShop theme, loop times, size, etc) followed by a raw AAC stream. Tools such as FFmpeg can handle rebuilding this stream with ADTS headers for proper time info and such.

The [[Home_Menu|Home Menu]] uses nearly the same format for the Theme Shop's background music.

== URLs ==

eShop uses the following domains over HTTPS:

* cp3s-auth.c.shop.nintendowifi.net
* a248.e.akamai.net
* ninja.ctr.shop.nintendo.net
* samurai.ctr.shop.nintendo.net
* ccif.ctr.shop.nintendo.net
* eou.c.shop.nintendowifi.net

These domains are used by [[NIM_Services|NIM]]:

* nus.c.shop.nintendowifi.net
* ecs.c.shop.nintendowifi.net
* cas.c.shop.nintendowifi.net

ninja.ctr.shop.nintendo.net and samurai.ctr.shop.nintendo.net contain the bulk of the eShop information.

=== Common Parameters to ninja and samurai ===

For every request to the ninja and samurai servers, three parameters are always sent, though are not necessarily required:

{| class="wikitable" border="1"
|-
! Parameter
! Required
! Description
! Type
! Normal value
|-
| shop_id
| depends on the URL, usually no
| Describes which eShop instance should be used. 1 indicates the 3DS eShop, 2 indicates the Wii U eShop. 3 seems to yield the same results as 2. Values greater than 3 or less than 1 are invalid. Defaults to 2 or 3 if not given.
| unsigned integer
| 1
|-
| lang
| no
| Describes the language. Seems to be an ISO 639-1 code in lower case. Every eShop region has a default language that is used if this parameter is not given. Some regions have multiple languages, such as CA (en and fr).
| string (two characters)
| depends on region and eShop settings; for US: en
|-
| _type
| no
| Describes whether the client wants to receive JSON or XML. This parameter seems actually unused and the servers always return XML.
| string
| json
|}

=== samurai ===

samurai.ctr.shop.nintendo.net (samurai) provides metadata about titles. The samurai server provides the backend for the eShop title search.

Common parameters described above can always be sent.

{| class="wikitable" border="1"
|-
! Path
! Description
! Parameters
|-
| /samurai/ws/'''region'''/titles
| Fetches the title list, containing the content id (not the 3DS title id), the product code and the localized title name
| All of these are optional.
* genre[]: genre ID (unsigned int)
* publisher[]: publisher ID (unsigned int)
* price_min: minimum price in region currency (signed int)
* price_max: maximum price in region currency (signed int)
* video_format: "moflex"
* freeword: keyword(s?) to look for (string)
* limit: maximum results
* offset: results to skip
* sort: one of "new", "popular" or "score"
* release_date_before: date/time title must have been released before (UNIX timestamp prefixed by +)
* release_date_after: date/time title must have been released after (UNIX timestamp prefixed by -)
|-
| /samurai/ws/'''region'''/news
| eShop news section
| (none)
|-
| /samurai/ws/'''region'''/telops
| Scrolling news on the top screen
| shop_id is required
|-
| /samurai/ws/'''region'''/directory/'''(long long unsigned int)''' and /samurai/ws/'''region'''/directory/~'''(string)'''
| Collections, like sales
| (none)
|-
| /samurai/ws/'''region'''/title/'''content id'''
| Returns information about the title, more verbose than /titles.
| (none)
|-
| /samurai/ws/'''region'''/demo/'''content id'''
| Returns information about a demo. Content ID is available in the main game's /title entry.
| (none)
|-
| /samurai/ws/'''region'''/contents
| Seems identical to /titles.
| see /titles
|-
| /samurai/ws/'''region'''/genres
| Returns a list of human-readable genre names and their corresponding genre id.
| (none)
|-
| /samurai/ws/'''region'''/publishers
| Returns a list of human-readable publisher names and their corresponding publisher id.
| (none)
|-
| /samurai/ws/'''region'''/platforms
| Returns a list of human-readable platform names and their corresponding platform id.
| (none)
|-
| /samurai/ws/'''region'''/title/'''content id'''/aocs
| Returns a list of add-on contents/downloadable content and prices in eShop region currency.
| (none)
|}

=== ninja ===

ninja.ctr.shop.nintendo.net (ninja) contains the seeds for the new 9.6 crypto, pricing information and handles actions that require authentication, such as purchases. Authentication information seems to be obtained from the [[ACT_Services|act:u sysmodule]] and works through OAuth2.

{| class="wikitable" border="1"
|-
! Path
! Description
! Parameters
|-
| /ninja/ws/'''region'''/title/'''content id'''/ec_info
| Contains information about the title. Such as title id, content size, and if available, the 9.6 crypto seed
| (none)
|-
| /ninja/ws/titles/id_pair
| Provides the content id for the given title id, or vice versa.
| title_id[] or ns_uid[] is required.
|-
| /ninja/ws/'''region'''/tax_locations
| Provides the tax location ID
| postal_code is required.
|-
| /ninja/ws/service_hosts
| Provides CCIF and Samurai servers
| country and shop_id is required.
|-
| /ninja/ws/country/'''region'''
| Various eshop related information for a given region
| (none)
|-
| /ninja/ws/country/'''region'''/replenish_amounts
| Provides the amounts of money you can replenish to your account.
| (none)
|}

=== Trusted Root CAs ===
The eShop application itself uses a [[HTTP_Services|RootCertChain]] for all HTTPS requests, all of the trusted root CAs are the following [[SSLC:RootCertChainAddDefaultCert|default]] ones:
* CertID 0x3
* CertID 0x6
* CertID 0x7
* CertID 0x8
* CertID 0x9
* CertID 0xA

=== Server changes following the November 2, 2015, maintenance ===
Pre-v10.0 eShop used an URL like this: "%s/samurai/ws/%s/title/%llu/other_purchased?shop_id=1&lang=%s&_type=json". That URL was removed with v10.0. That URL was requested when trying to load eShop app-pages. Following the maintenance mentioned above, this page was removed from the server, which broke pre-v10.0 eShop app whenever it tried to access that page.

URL changes between [[9.7.0-25]] and [[10.0.0-27]] are (green = add, red = remove):

%s/ninja/ws/%s/titles/online_prices?title%%5B%%5D=%s&lang=%s&include_coupon=true&shop_id=1&_type=json

%s/ninja/ws/%s/coupon/!check?shop_id=1&_type=json

%s/ninja/ws/my/owned_coupons?ns_uid=%llu&shop_id=1&_type=json

%s/ninja/ws/my/owned_coupons?shop_id=1&_type=json

%s/ninja/ws/my/parental_control/!put?shop_id=1&_type=json

%s/ninja/ws/%s/title/%llu/prepurchase_info?%s=%s&shop_id=1&_type=json

%s/samurai/ws/%s/coupon/%llu/titles?lang=%s&limit=%u&offset=%u&shop_id=1&_type=json

%s/ninja/ws/my/auto_billing/plans?limit=%u&offset=%u&shop_id=1&_type=json

%s/ninja/ws/%s/titles/online_prices?title%%5B%%5D=%s&lang=%s&include_coupon=true&coupon_id=%llu&shop_id=1&_type=json

%s/ninja/ws/my/auto_billing/%014llu/!cancel?shop_id=1&_type=json

%s/samurai/ws/%s/title/%llu/other_purchased?shop_id=1&lang=%s&_type=json

%s/samurai/movie/%s/%s/%014llu/moflex

==New3DS==
CheckNew3DS is called in two functions. This is only used for disabling UI button(s) for downloading New3DS titles when running on Old3DS. For example, on a New3DS patching a CheckNew3DS func-call with <retval=0>, results in the download button on the app page being grayed-out for a New3DS-only title.

==TitleID checks==
There's titleID checks in the system eShop application code for "Pokémon Omega Ruby". This appears to be used with UI-related code, unknown why.

EShop

2016-04-21T14:31:48Z

Einstein95: /* samurai */ /demo/

The Nintendo 3DS eShop was added in the June 2011 update for JP/EUR/USA.

From here, you can download Virtual Console games, 3D Classics, DSiware software, view screenshots, and 3D trailers for upcoming 3DS titles.

While eShop is loading, eShop will use command [[NIMS:CheckSysupdateAvailableSOAP]]. If a system update is available where title installation for system titles still needs finalized (or when the updated titles were not downloaded at all), eShop will then display the "system update is available" message.

The eShop application uses command [[AMNet:FinishInstallToMedia]] to finalize the SD title install (if the whole title is downloaded while eShop is still running), however, before using that command the eShop application also uses [[AMNet:FinishInstallToMedia]] to finalize installing all system titles (from system updates).

== eShop QR Codes ==
eShop QR Codes can be scanned with the camera, allowing one to quickly navigate to the desired eShop title with just two clicks. The QR Codes themselves is a simple text/url QR, started with "ESHOP://" string followed by a decimal eShop content link id(same IDs used internally by eShop for all content) and then some special data, delimited by a dot symbol, which can be ommited.

In order for the QR-code string data to be valid for eShop, it must begin with "ESHOP://5", with the first ID being all decimal.

{| class="wikitable"
|-
! QR Code source
! Region
! Title
! Serial
! Title ID
|-
| ESHOP://50010000000201.PEAALL000000 || EUR || Nintendogs & Cats Demo || ADA/B/C || 0004000200030c01
|-
| ESHOP://50010000007870.PEAALL000000 || EUR || Crush 3D || A??P || 00040002
|-
| ESHOP://50010000008009.PEAALL000000 || EUR || Resident Evil Revelations Demo || ABRE || 000400020005ee01
|-
| ESHOP://50010000008123.J00101Z00095 || JPN || Rhythm Thief And The Emperor's Treasure Demo || ARTJ || 00040002
|-
| ESHOP://50010000008404.PEAALL000000 || EUR || Mario And Sonic At The London 2012 Olympic Games Demo || ACMP [http://mediacontent.nintendo-europe.com/NOE/images/game_content/ACMP-MarioAndSonicAtTheLondon2012OlympicGames-QRCode-EA_ALL_000_001.bmp] || 00040002
|-
| ESHOP://50010000008447.J00101Z00094 || JPN || Resident Evil Revelations Demo || ABRJ || 00040002
|-
| ESHOP://50010000008449.J00101Z00082 || JPN || Swapnote || JFRJ ||?
|-
| ESHOP://50010000008561 || USA || Swapnote || JFRE || 0004000000051700
|-
| ESHOP://50010000008647.J00101Z00096 || JPN || Metal Gear Solid Snake Eater 3D Demo || AMGJ || 0004000200048101
|-
| ESHOP://50010000008648.J00101Z00097 || JPN || Theatrythm Final Fantasy || ATHJ ||?
|-
| ESHOP://50010000008782.PEAALL000000 || EUR || Metal Gear Solid Snake Eater 3D Demo || AMGE || 0004000200082401
|-
| ESHOP://50010000008842.PEAALL000000 || EUR || Rhythm Thief And The Emperor's Treasure Demo || ARTP [http://mediacontent.nintendo-europe.com/NOE/images/game_content/ARTP-RhythmThief_TheEmperorsTreasure-QRCode-EA_ALL_000_001.bmp] || 00040002
|-
| ESHOP://50010000009084.J00101Z00121 || JPN || Hatsune Miku And Future Stars: Project Mirai Demo || AM9J || 00040002
|-
| ESHOP://50010000009102.J00101Z00106 || JPN || Denpa Ningen RPG || JD8J ||?
|-
| ESHOP://50010000009161.J00101Z00118 || JPN || Dillon's Rolling Western || JAMJ || 00040000
|-
| ESHOP://50010000009261 || USA || Dillon's Rolling Western || JAME? || 00040000
|-
| ESHOP://50010000009401.J00101Z00120 || JPN || Kingdom Hearts 3D Video Download || JZ8J ||?
|-
| ESHOP://50010000009403.J00101Z00119 || JPN || DQM 3D Video Download || JZ7J ||?
|-
| ESHOP://50010000009575.PEAALL000000 || EUR || Kid Icarus: Of Myths And Monsters (Virtual Console) ||? ||?
|-
| ESHOP://50010000009846 || USA || Ketzal's Corridors ||? ||?
|}

* New QR Code for Japanese "Photos with Super Mario" has a different code string: ESHOP://50010000013120.J00108Z00001.CD588EAE95A3A68D15C647DA2AC0945FD88F70AB8A31149E51C4B05FB927B0B8

* There is a link in the Japanese eShop <nowiki>[http://www.nintendo.co.jp/3ds/eshop/qrCode.html?####]</nowiki> where you can replace the #### with the Japanese eShop title's serial and you will get it's QR code. (i.e. http://www.nintendo.co.jp/3ds/eshop/qrCode.html?jcaj will get you the pushmo QR code)

* You could use Google's Chart API to create a QR code from the codes above: https://chart.googleapis.com/chart?chs=150x150&cht=qr&chl=ESHOP (replace the ESHOP text with the ESHOP:// link from one of the above)

== NS eShop application parameters ==
This section describes the 0x1C-byte structure stored at the application parameters from [[APT:StartApplication]], under the 0x300-byte buffer listed there.

{| class="wikitable"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Unknown, usually 0x3?
|-
| 0x4
| 0x4
| Unknown, usually 0x0?
|-
| 0x8
| 0x8
| u64 binary eShop content ID, same ID from the first string in eShop QR-codes except in binary form.
|-
| 0x10
| 0x10
| This is the last string from the QR-code(if any), no NUL-termination.
|}

== ExtData ==
The ExtData [[Extdata#Filesystem|File System]] for eShop is as follows:

root
├── icon
├── boss
│ └── TIGER100.tmp
└── user

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! Firmware Introduced
! Plain text
|-
| icon
| Duplicate from application ExeFS. Always image 00000002
| 0x36C0 Bytes
| [[2.0.0-2]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/eShopExtdata/icon Download_EUR]
|-
| TIGER100.tmp
| Always image 00000003.
| 0xCE47 bytes (varies?)
| [[2.0.0-2]]
|
|}

== Music ==
The eShop pulls its music from a static, region-specific link in a format similar to the following:

https:// a248.e.akamai.net/f/248/103046/10m/npdl.c.app.nintendowifi.net/p01/nsa/CtfKXACbUPl8s7lk/BGM1/US_BGM1 ,
where region is one of the primary system regions (JP, US, EU, KR, etc.) Support also exists for 'BGM2', but this seems to be unused.
The music is held in a [[SpotPass|BOSS]] container.

The format consists of a brief XML header describing the audio (including the date it was set as the main eShop theme, loop times, size, etc) followed by a raw AAC stream. Tools such as FFmpeg can handle rebuilding this stream with ADTS headers for proper time info and such.

The [[Home_Menu|Home Menu]] uses nearly the same format for the Theme Shop's background music.

== URLs ==

eShop uses the following domains over HTTPS:

* cp3s-auth.c.shop.nintendowifi.net
* a248.e.akamai.net
* ninja.ctr.shop.nintendo.net
* samurai.ctr.shop.nintendo.net
* ccif.ctr.shop.nintendo.net
* eou.c.shop.nintendowifi.net

These domains are used by [[NIM_Services|NIM]]:

* nus.c.shop.nintendowifi.net
* ecs.c.shop.nintendowifi.net
* cas.c.shop.nintendowifi.net

ninja.ctr.shop.nintendo.net and samurai.ctr.shop.nintendo.net contain the bulk of the eShop information.

=== Common Parameters to ninja and samurai ===

For every request to the ninja and samurai servers, three parameters are always sent, though are not necessarily required:

{| class="wikitable" border="1"
|-
! Parameter
! Required
! Description
! Type
! Normal value
|-
| shop_id
| depends on the URL, usually no
| Describes which eShop instance should be used. 1 indicates the 3DS eShop, 2 indicates the Wii U eShop. 3 seems to yield the same results as 2. Values greater than 3 or less than 1 are invalid. Defaults to 2 or 3 if not given.
| unsigned integer
| 1
|-
| lang
| no
| Describes the language. Seems to be an ISO 639-1 code in lower case. Every eShop region has a default language that is used if this parameter is not given. Some regions have multiple languages, such as CA (en and fr).
| string (two characters)
| depends on region and eShop settings; for US: en
|-
| _type
| no
| Describes whether the client wants to receive JSON or XML. This parameter seems actually unused and the servers always return XML.
| string
| json
|}

=== samurai ===

samurai.ctr.shop.nintendo.net (samurai) provides metadata about titles. The samurai server provides the backend for the eShop title search.

Common parameters described above can always be sent.

{| class="wikitable" border="1"
|-
! Path
! Description
! Parameters
|-
| /samurai/ws/'''region'''/titles
| Fetches the title list, containing the content id (not the 3DS title id), the product code and the localized title name
| All of these are optional.
* genre[]: genre ID (unsigned int)
* publisher[]: publisher ID (unsigned int)
* price_min: minimum price in region currency (signed int)
* price_max: maximum price in region currency (signed int)
* video_format: "moflex"
* freeword: keyword(s?) to look for (string)
* limit: maximum results
* offset: results to skip
* sort: one of "new", "popular" or "score"
* release_date_before: date/time title must have been released before (UNIX timestamp prefixed by +)
* release_date_after: date/time title must have been released after (UNIX timestamp prefixed by -)
|-
| /samurai/ws/'''region'''/news
| eShop news section
| (none)
|-
| /samurai/ws/'''region'''/telops
| Scrolling news on the top screen
| shop_id is required
|-
| /samurai/ws/'''region'''/directory/'''(long long unsigned int)''' and /samurai/ws/'''region'''/directory/~'''(string)'''
| Collections, like sales
| (none)
|-
| /samurai/ws/'''region'''/title/'''content id'''
| Returns information about the title, more verbose than /titles.
| (none)
|-
| /samurai/ws/'''region'''/demo/'''content id'''
| Returns information about a demo. Content ID is available in the main game's /title entry.
| (none)
|-
| /samurai/ws/'''region'''/contents
| Seems identical to /titles.
| see /titles
|-
| /samurai/ws/'''region'''/genres
| Returns a list of human-readable genre names and their corresponding genre id.
| (none)
|-
| /samurai/ws/'''region'''/publishers
| Returns a list of human-readable publisher names and their corresponding publisher id.
| (none)
|-
| /samurai/ws/'''region'''/platforms
| Returns a list of human-readable platform names and their corresponding platform id.
| (none)
|-
| /samurai/ws/'''region'''/title/'''content id'''/aocs
| Returns a list of add-on contents/downloadable content and prices in eShop region currency.
| (none)
|}

=== ninja ===

ninja.ctr.shop.nintendo.net (ninja) contains the seeds for the new 9.6 crypto, pricing information and handles actions that require authentication, such as purchases. Authentication information seems to be obtained from the [[ACT_Services|act:u sysmodule]] and works through OAuth2.

{| class="wikitable" border="1"
|-
! Path
! Description
! Parameters
|-
| /ninja/ws/'''region'''/title/'''content id'''/ec_info
| Contains information about the title. Such as title id, content size, and if available, the 9.6 crypto seed
| (none)
|-
| /ninja/ws/titles/id_pair
| Provides the content id for the given title id, or vice versa.
| title_id[] or ns_uid[] is required.
|-
| /ninja/ws/'''region'''/tax_locations
| Provides the tax location ID
| postal_code is required.
|-
| /ninja/ws/service_hosts
| Provides CCIF and Samurai servers
| country and shop_id is required.
|-
| /ninja/ws/country/'''region'''
| Various eshop related information for a given region
| (none)
|-
| /ninja/ws/country/'''region'''/replenish_amounts
| Provides the amounts of money you can replenish to your account.
| (none)
|}

=== Trusted Root CAs ===
The eShop application itself uses a [[HTTP_Services|RootCertChain]] for all HTTPS requests, all of the trusted root CAs are the following [[SSLC:RootCertChainAddDefaultCert|default]] ones:
* CertID 0x3
* CertID 0x6
* CertID 0x7
* CertID 0x8
* CertID 0x9
* CertID 0xA

=== Server changes following the November 2, 2015, maintenance ===
Pre-v10.0 eShop used an URL like this: "%s/samurai/ws/%s/title/%llu/other_purchased?shop_id=1&lang=%s&_type=json". That URL was removed with v10.0. That URL was requested when trying to load eShop app-pages. Following the maintenance mentioned above, this page was removed from the server, which broke pre-v10.0 eShop app whenever it tried to access that page.

URL changes between [[9.7.0-25]] and [[10.0.0-27]] are (green = add, red = remove):

%s/ninja/ws/%s/titles/online_prices?title%%5B%%5D=%s&lang=%s&include_coupon=true&shop_id=1&_type=json

%s/ninja/ws/%s/coupon/!check?shop_id=1&_type=json

%s/ninja/ws/my/owned_coupons?ns_uid=%llu&shop_id=1&_type=json

%s/ninja/ws/my/owned_coupons?shop_id=1&_type=json

%s/ninja/ws/my/parental_control/!put?shop_id=1&_type=json

%s/ninja/ws/%s/title/%llu/prepurchase_info?%s=%s&shop_id=1&_type=json

%s/samurai/ws/%s/coupon/%llu/titles?lang=%s&limit=%u&offset=%u&shop_id=1&_type=json

%s/ninja/ws/my/auto_billing/plans?limit=%u&offset=%u&shop_id=1&_type=json

%s/ninja/ws/%s/titles/online_prices?title%%5B%%5D=%s&lang=%s&include_coupon=true&coupon_id=%llu&shop_id=1&_type=json

%s/ninja/ws/my/auto_billing/%014llu/!cancel?shop_id=1&_type=json

%s/samurai/ws/%s/title/%llu/other_purchased?shop_id=1&lang=%s&_type=json

%s/samurai/movie/%s/%s/%014llu/moflex

==New3DS==
CheckNew3DS is called in two functions. This is only used for disabling UI button(s) for downloading New3DS titles when running on Old3DS. For example, on a New3DS patching a CheckNew3DS func-call with <retval=0>, results in the download button on the app page being grayed-out for a New3DS-only title.

==TitleID checks==
There's titleID checks in the system eShop application code for "Pokémon Omega Ruby". This appears to be used with UI-related code, unknown why.

3DS Userland Flaws

2016-04-17T06:59:49Z

Einstein95: New section fo crashes needing investigation, adding (Football|Soccer) Up Online

This page lists vulnerabilities / exploits for 3DS applications and applets. Exploiting these initially results in ROP, from that ROP one can then for example try exploiting [[3DS_System_Flaws|system]] flaw(s).

=Non-system applications=
{| class="wikitable" border="1"
|-
! Application name
! Summary
! Description
! Fixed in app/system version
! Last app/system version this flaw was checked for
! Timeframe info related to this was added to wiki
! Timeframe this vuln was discovered
! Vuln discovered by
|-
| Cubic Ninja
| Map-data stack smash
| See [[Ninjhax|here]] regarding Ninjhax.
| None
| App: Initial version. System: [[10.4.0-29]].
| Ninjhax release
| July 2014
| [[User:smea|smea]]
|-
| The Legend of Zelda: Ocarina of Time 3D
| UTF-16 name string buffer overflow via unchecked u8 length field
| The u8 at offset 0x2C in the savefile is the character-length of the UTF-16 string at offset 0x1C. When copying this string, it's essentially a memory-copy with lenval*2, not a string-copy. This can be used to trigger buffer overflows at various locations depending on the string length.
* When value is >=0x6E it crashes when saving the saveslot, this causes a stack-smash however it normally crashes before it returns from the function which had the stack-frame overwritten.
* With value >=0x9A, it crashes via stack-smash in-game once any dialogs are opened(touching buttons on the touch-screen can trigger it too).
* Length value>=0xCD causes a crash while loading the saveslot, via a heap buffer overflow. This buf-overflow overwrites a heap memchunk following the allocated buffer. When the first 16-bits overwriting that heap memchunk is not the memchunk magic-number(0x7373), the mem-alloc code will just return a NULL ptr which later results in a crash. When the magic-number is valid, the mem-alloc code will continue to attempt to parse the memchunk, which may crash depending on the data which overwrote the memchunk. This heap code is separate from the CTRSDK heap code. Exploiting this doesn't seem to be possible: since the heap code actually verifies that the magic-number for the next/prev memchunk ptrs are correct(unlike CTRSDK), it's not possible to change those ptrs to useful arbitrary addresses outside of savedata(like with triggering a write to a c++ object ptr which later is used with a vtable func-call, this is what one would do with CTRSDK heap here).

On March 11, 2015, an exploit using this vuln was released, that one was intended for warez/etc. The following exploit wasn't released before then mainly because doing so would (presumably) result in the vuln being fixed. The following old exploit was released on March 14, 2015: [https://github.com/yellows8/oot3dhax].
| None
| App: Initial version. System: [[10.6.0-31]].
| March 11, 2015
| Around October 22, 2012
| [[User:Yellows8|Yellows8]]
|-
| Super Smash Bros 3DS
| Buffer overflow in local-multiplayer beacon handling.
| See [[smashbroshax|here]].
| None
| See [[smashbroshax|here]]. System: [[10.3.0-28]].
| Time of exploit release.
| See [[smashbroshax|here]].
| [[User:Yellows8|Yellows8]]
|}

==Useless crashes / applications which were fuzzed==
* Pushmo (3DSWare), QR codes: level name is properly limited to 16 characters, game doesn't crash with a longer name. The only possible crashes are triggered by out-of-bounds array index values, these crashes are not exploitable due to the index value being 8bit.

* Pyramids (3DSWare), QR codes: no strings. Only crashes are from out-of-bounds values (like background ID) and are not exploitable.

* [https://github.com/yellows8/mm3d_re The Legend of Zelda: Majora's Mask 3D]

* "The Legend of Zelda: A Link Between Worlds" and "The Legend of Zelda: Tri Force Heroes": these games don't crash at all when the entire save-file(minus constant header data) is overwritten with /dev/random output / 0xFF-bytes. All of the CRC32s were updated for this of course.

==Crashes needing investigation==
* Disney Infinity crashes when all savedata overwritten with /dev/urandom. No checksums. 0xFF bytes don't cause a crash.

* Football Up Online / Soccer Up Online crashes "with a super long username"

=System applications=
{| class="wikitable" border="1"
|-
! Summary
! Description
! Fixed in version
! Last version this flaw was checked for
! Timeframe this was discovered
! Discovered by
|-
| 3DS [[System Settings]] DS profile string stack-smash
| Too long or corrupted strings (01Ah 2 Nickname length in characters 050h 2 Message length in characters) in the NVRAM DS user settings (System Settings->Other Settings->Profile->Nintendo DS Profile) cause it to crash in 3DS-mode due to a stack-smash. The DSi is not vulnerable to this, DSi launcher(menu) and DSi System Settings will reset the NVRAM user-settings if the length field values are too long(same result as when the CRCs are invalid). TWL_FIRM also resets the NVRAM user-settings when the string-length(s) are too long.
| [[7.0.0-13]]
| [[7.0.0-13]]
| 2012
| [[User:Ichfly|Ichfly]]
|}

=System applets=
{| class="wikitable" border="1"
|-
! Summary
! Description
! Fixed in version
! Last version this flaw was checked for
! Timeframe info related to this was added to wiki
! Timeframe this was discovered
! Discovered by
|-
| [[Home Menu]] [[System_SaveData|NAND-savedata]] Launcher.dat icons
| The homemenu code processing the titleid list @ launcherdat+8 copies those titleIDs to another buffer, where the offset relative to that buffer is calculated using the corresponding s8/s16 entries. Those two values are not range checked at all. Hence, one can use this to write u64(s) with arbitrary values to before/after this allocated output buffer. See [[Home_Menu|here]] regarding Launcher.dat structure.

This can be exploited(with Launcher.dat loading at startup at least) by using a s16 for the icon entry with value 0xFFEC(-20)(and perhaps more icons with similar s16 values to write multiple u64s). The result is that the u64 value is written to outbuf-0xA0, which overwrites object+0(vtable) and object+4(doesn't matter here) for an object that gets used a bit after the vulnerable function triggers. The low 32bits of the u64 can then be set to the address of controlled memory(either outbuf in regular heap or the entire launcherdat buffer in linearmem), for use as a fake vtable in order to get control of PC. From there one can begin ROP via vtable funcptrs to do a stack-pivot(r4=objectaddr at the time the above object gets used).

Originally this vuln could only be triggered via Launcher.dat at Home Menu startup, right after Launcher.dat gets loaded + memory gets allocated, once the file-format version code is finished running. Starting with v9.6 this can be triggered when loading layouts from SD extdata as well. The vuln itself triggers before the layout data is written to Launcher.dat, but it doesn't seem to be possible to overwrite anything which actually gets used before the function which writes Launcher.dat into the layout gets called.

Home Menu has some sort of fail-safe system(or at least on v9.7) when Home Menu crashes due to Launcher.dat(this also applies for other things with Home Menu): after crashing once, Home Menu resets Launcher.dat to a state where it no longer crashes anymore. However, note that any exploits using this which hang/etc without crashing will still brick the system. '''Hence, attempting anything with this on physnand without hw-nand-access isn't really recommended.'''
| None
| [[10.3.0-28|10.3.0-X]]
|
| May 14, 2015
| [[User:Yellows8|Yellows8]]
|-
| [[Home Menu]] theme-data decompression buffer overflow ([[menuhax|themehax]])
| The only func-call size parameter used by the theme decompression function is one for the compressed size, none for the decompressed size. The decompressed-size value from the LZ header is used by this function to check when to stop decompressing, but this function itself has nothing to verify the decompressed_size with. The code calling this function does not check or even use the decompressed size from the header either.

This function is separate from the rest of the Home Menu code: the function used for decompressing themes is *only* used for decompressing themes, nothing else. There's a separate decompression function in Home Menu used for decompressing everything else.

That other decompression function in Home Menu handles decompression size properly(decompressed size check for max buffer size is done by code calling the other function, not in the function itself). Unlike the other function, the theme function supports multiple LZ algorithms, but the one which actually gets used in official themes is the same one supported by the other function anyway.

See also [[menuhax|here]].

With [[10.2.0-28|10.2.0-X]] Home Menu, the only code change was that the following was added right after theme-load and before actual decompression: "if(<get_lzheader_decompressed_size>(compressed_buf) > 0x150000)<exit>;". This fixed the vuln.
| [[10.2.0-28|10.2.0-X]]
| [[10.2.0-28|10.2.0-X]]
|
| December 22, 2014
| [[User:Yellows8|Yellows8]], [[User:Myria|Myria]] independently (~spring 2015)
|-
| [[Home Menu]] shuffle body-data buffer overflow ([[menuhax|shufflehax]])
| See [[menuhax|here]].
| [[10.6.0-31|10.6.0-X]]
| [[10.6.0-31|10.6.0-X]]
|
| January 3, 2015
| [[User:Yellows8|Yellows8]]
|-
| Webkit/web-browser bugs
| spider has had at least three different code-execution exploits. Majority of them are use-after-free issues. See also [[browserhax|here]].
|
|
| 2013?
| A lot of people.
|-
| Old3DS/New3DS [[Internet_Browser|Browser-version-check]] bypass
| When the browser-version-check code runs where the savedata for it was never initialized(such as when the user used the "Initialize savedata" option), it will use base_timestamp=0 instead of the timestamp loaded from savedata. This is then used with "if(cur_timestamp - base_timestamp >= <24h timestamp>){Run browser-version-check HTTPS request code}".
Hence, if the savedata was just initialized, and if the system datetime is set to before January 2, 2000, the browser-version-check will be skipped. This includes January 1, 2000, 00:00, because that's the epoch(timestamp value 0x0) used with this timestamp.

See [http://yls8.mtheall.com/3dsbrowserhax.php here] for bypass usage instructions.

This was fixed with [[10.7.0-32|10.7.0-32]], see [[Internet_Browser|here]] for details.
| [[10.7.0-32|10.7.0-32]]
|
| February 25, 2016
| November 2, 2015 (Exactly one week after the browser version pages were initially updated server-side)
| [[User:Yellows8|Yellows8]]
|}

==Useless crashes==
Old3DS system web-browser:
* 2^32 characters long string(''finally'' fixed with v10.6): this is similar to the vulnerability fixed [http://git.chromium.org/gitweb/?p=external/Webkit.git;a=commitdiff;h=ec471f16fbd1f879cb631f9b022fd16acd75f4d4 here], concat-large-strings-crash2.html triggers a crash which is about the same as the one triggered by a 2^32 string. Most of the time this vulnerability will cause a memory page permissions fault, since the WebKit code attempts to copy the string text data to the output buffer located in read-only [[CRO0|CRO]] heap memory. The only difference between a crash triggered by a 2^32 string and the concat-large-strings-crash2.html crash is at the former copies the string data using the original string length(like 1 text character for "x", 4 for "xxxx") while the latter attempts to copy >12MB. In some ''very'' rare cases a thread separate from the string data-copy thread will crash, this might be exploitable. However, this is mostly useless since it rarely crashes this way.

* Trying to directly load a page via the browser "URL" option with [https://github.com/yellows8/3ds_browserhax_common webkitdebug] setup, causes a crash to trigger in oss.cro due to an use-after-free being caught with webkitdebug. This is presumably some sort of realloc() issue in the libcurl version used by the <={v10.2-v10.3} browser. This happens with *every* *single* *page* one tries to load via the "URL" option, but not when loading links on the current page, hence this is probably useless. A different use-after-free with realloc triggers with loading any page at all regardless of method too(libcurl probably).

* This WebKit build has ''a lot'' of crash-trigger bugs that only happen with [https://github.com/yellows8/3ds_browserhax_common webkitdebug] completely setup(addr accesses near 0x0), with ''just'' trying to load any page at all.

Home Menu

2016-04-02T14:48:28Z

Einstein95: /* Home-menu SpotPass usage */

The '''Home Menu''' is the heart of the Nintendo 3DS. From there one can start games, applications, and access various processes including the friends list. It is launched by [[NS]], and is always running in the background in 3DS-mode except when other programID-high 00040030 applications like Internet Browser, Friend-List, etc are running. Home Menu is still running while [[System Settings]] is running, however the System Settings application does not allow directly returning to home-menu. The system will normally re-launch Home Menu when the Home Menu process crashes/terminates. When this re-launch occurs while Home Menu is active, Home Menu displays an error message which says to manually reboot the system.

== System Versions ==
Nintendo devised a system, whereby updates would be delivered via two channels:
*Card Updates (CUP) - The Nintendo 3DS is updated with data from an [[System Update CFA|update partition]] on retail gamecard title.
*Network Updates (NUP) - The Nintendo 3DS is updated by downloading data from Nintendo's [[Title list|CDN]].

CUPs will only deliver updates to core features, such as the Home Menu, [[Nintendo 3DS Camera]] etc. CUPs will not deliver updates to Network features, such as [[System Transfer]], [[Internet Browser]], [[StreetPass Mii Plaza]] or [[EShop|eShop]].

NUPs can deliver updates to core features as well as (updated) Network Features.

As a result of deciding to make a distinction between what content could be updated and how, Nintendo split the system version displayed by [[System Settings]] into two parts: [[CVer]] (Console Version) and [[NVer]] (Network Update Version). Represented as:
<CVer Major>.<CVer Minor>.<CVer Micro>-<NUP Version><NUP Region>

The Console Version represents the version of the collectively installed core features. And the NUP Version represents the version of the collectively installed network features.

So if a 3DS' System Firmware read '''2.1.0-2U''', it would indicate a console version of '''2.1.0''' and a NUP version of '''2U'''.

NOTES:
* CUPs can only update core content, so [[NVer]] is never updated with CUPs.
* NUPs will not update [[NVer]] if network features are not updated. (Best seen with the USA vs JPN/EUR 6.0.0 NUP)

CUPs are implemented by adding a [[System Update CFA]] to retail NCSD gamecard images. Nintendo generally creates CUPs after NUPs are released.

When updating the system from 4.5.0-6 to 4.5.0-10, the following titles are updated(in the order of title download+install): [[Health and Safety Information]], [[Nintendo 3DS Camera]], [[eShop]], [[System Transfer]], [[Internet Browser]], [[Title_list|0004009B00014102]], [[Title_list|0004009B00014202]], [[Title_list|0004009B00014302]], [[NVer]], and [[FIRM|AGB_FIRM]].

=== System Versions List ===
{| class="wikitable"
|-
! System version
! Home Menu title version
! Release date
! Changelog
! System security [[3DS_System_Flaws|flaws]] fixed*
! Userland security [[3DS_Userland_Flaws|flaws]] fixed*
! 3DS-mode homebrew affected*
! CUP Released
! CDN Availability
! CDN Post Date
|-
| [[1.0.0-0|1.0.0-0]]
| 0
| February 26, 2011
| Shipped with 3DS on launch
|
|
|
| Yes
| Available
| February 18, 2011
|-
| [[1.1.0-1|1.1.0-1]]
| 0
| February ?, 2011
| General bug fixes
Added 3D Video title to menu. ("For a Limited Time Only")
|
|
|
| Yes
| Available
| March 1, 2011
|-
| [[2.0.0-2|2.0.0-2]]
| 1029
| June 6/7, 2011
| [[eShop]] added, web browser available, [[System Transfer]] added. Full DSiWare data management available. [[Automatic_System_Update_Download|Automatic]] downloading for system updates added.
|
|
|
| No
| Available
| June 6, 2011
|-
| [[2.1.0-3|2.1.0-3]]
| 2049
| June 15, 2011
| Fixes the Ridge Racer freeze.
|
|
|
| Yes
| Available
| June 15, 2011
|-
| [[2.1.0-4|2.1.0-4]]
| Not updated
| July 25, 2011
| System stability improvements and other adjustments.
|
|
|
| No
| Available
| July 25, 2011
|-
| [[2.2.0-X|2.2.0]]
| ?
| November 6, 2011
| CUP Only Release. Improved the arrangement of [[Friend List]]. Update from some game cards such as Super Mario 3D Land.
|
|
|
| Yes
| Unavailable
| ?
|-
| [[3.0.0-5|3.0.0-5]]
| 4111
| December 7, 2011
| Added 3D video recording to the camera title, updated Mii Streetpass Plaza, [[System Transfer]] between 3DS systems available, improved eShop, home menu QR code scanning with QR codes containing URLs. [[Nintendo Zone]] is now always accessible, 3D video streaming support was added to NZone. This added support for running GBA VC titles via AGB_FIRM as well, support for GBA VC titles was also added to NATIVE_FIRM.
|
|
|
| Yes
| Available
| December 7, 2011
|-
| [[3.0.0-6|3.0.0-6]]
| Not updated
| December 21, 2011
| Only StreetPass Mii Plaza and the [[NVer]] title were updated. From Nintendo's release notes: "System stability improvements and other adjustments".
|
|
|
| No
| Available
| December 21, 2011
|-
| [[4.0.0-7|4.0.0-7]]
| 5131
| April 24, 2012
| Add folders to Home Menu, game patching added, buy more expensive games than 1000 yen in JPN. System titles for CHN, TWN, and KOR became available.
| Yes
|
|
| Yes
| Available
| April 24, 2012
|-
| [[4.1.0-8|4.1.0-8]]
| Not updated
| May 14, 2012
| From changelog: "improvements to overall system stability and other minor adjustments". Once updated to [[4.1.0-8]], the parental-controls PIN is no longer required for future system updates.
| Yes
|
|
| Yes
| Available
| May 14, 2012
|-
| [[4.2.0-9|4.2.0-9]]
| 6146
| June 26, 2012
| Improved eShop safety for entering credit-card info, and behind the scenes improvements. Stored CC info will be deleted by this updated eShop, and can be re-entered again.
|
|
|
| Yes
| Available
| June 26, 2012
|-
| [[4.3.0-10|4.3.0-10]]
| Not updated
| July 24, 2012
| Updated eShop, bad word list and NZone hotspot list updated.
|
|
|
| Yes
| Available
| July 24, 2012
|-
| [[4.4.0-10|4.4.0-10]]
| Not updated
| September 19, 2012
| NZone hotspot list updated and TWL_FIRM updated for blocking flash cards.
|
|
|
| Yes
| Available
| September 19, 2012
|-
| [[4.4.0-10|4.4.0-10C]]
| Not updated
| October 17, 2012
| China-only, the *only* updated title was [[System Settings]]. This title was updated to a version already available in TWN/KOR.
|
|
|
| ?
| Available
| October 17, 2012
|-
| [[4.5.0-10|4.5.0-10]]
| Not updated
| December 4, 2012
| Flash-card block via updated TWL_FIRM and whitelist. NZone hotspot list updated as well.
|
|
|
| Yes
| Available
| December 4, 2012
|-
| [[5.0.0-11|5.0.0-11]]
| 7172
| March 25, 2013
| Many system titles including NATIVE_FIRM were updated, multiple vulnerabilities were fixed as well.
| Yes
|
| Yes
| No
| Available
| March 25, 2013
|-
| [[5.1.0-11|5.1.0-11]]
| Not updated
| April 4, 2013
| NATIVE_FIRM and NS were updated. According to the official change-log: "Resolves an issue that may prevent access to the System Settings or other features."
| No
|
| No
| Yes
| Available
| April 4, 2013
|-
| [[6.0.0-11|6.0.0-12 (-11U)]]
| 8198
| June 17, 2013
| Official change-log: "Users can now back up save data for downloadable versions of Nintendo 3DS software and most Virtual Console games". For EUR/JPN, the [[StreetPass Mii Plaza]] application and the [[Nintendo 3DS Camera]] application were updated. Other titles for all regions were updated as well.
| Yes
|
|
| No
| Available
| June 17, 2013
|-
| [[6.1.0-11|6.1.0-12 (-11U)]]
| Not updated
| June 27, 2013
| Official change-log: "Further improvements to overall system stability and other minor adjustments have been made to enhance the user experience."
|
|
|
| Yes
| Available
| June 27, 2013
|-
| [[6.1.0-12U]]
| Not updated
| July 11, 2013
| This USA-only update added the updated network features applications which were first released in JPN/EUR with the [[6.0.0-11|6.0.0-12 NUP]] update.
|
|
|
| No
| Available
| July 11, 2013
|-
| [[6.2.0-12]]
| Not updated
| August 6, 2013
| This update added support for the StreetPass relay feature, updated TWL_FIRM, and updated the Nintendo Zone hotspots list.
|
|
|
| Yes
| Available
| August 6, 2013
|-
| [[6.3.0-12]]
| Not updated
| September 13, 2013
| See [[6.3.0-12|this]].
| No
|
| No
| No
| Available
| September 13, 2013
|-
| [[6.4.0-12]]
| ?
| November 11, 2013
| See [[6.4.0-12|this]](Only for the KOR and TWN regions).
|
|
|
| No
| Available
| November 11, 2013
|-
| [[7.0.0-13]]
| 9230
| December 9, 2013
| See [[7.0.0-13|this]].
| Yes
| Yes
|
| No
| Available
| December 9, 2013
|-
| [[7.1.0-14]]
| Not updated
| December 19, 2013
| See [[7.1.0-14|this]].
| No
|
|
| Yes
| Available
| December 19, 2013
|-
| [[7.1.0-15]]
| Not updated
| January 22, 2014
| See [[7.1.0-15|this]].
| No
|
| No
| No
| Available
| January 22, 2014
|-
| [[7.1.0-16]]
| Not updated
| February 26, 2014
| See [[7.1.0-16|this]].
| No
|
| No
| No
| Available
| February 26, 2014
|-
| [[7.2.0-17]]
| Not updated
| May 12, 2014
| See [[7.2.0-17|this]].
|
|
| No
| Yes
| Available
| May 12, 2014
|-
| [[8.0.0-18]]
| Not updated
| July 7, 2014
| See [[8.0.0-18|this]].
| No
|
| No
| Yes
| Available
| July 7, 2014
|-
| [[8.1.0-18]]
| Not updated
| July 24, 2014
| See [[8.1.0-18|this]].
| No
|
| No
| Yes
| Available
| July 24, 2014
|-
| [[8.1.0-19]]
| Not updated
| August 7, 2014
| See [[8.1.0-19|this]].
| No
|
| No
| No
| Available
| August 7, 2014
|-
| [[8.1.0-0 New3DS]]
| Not updated
| September 26, 2014
| See [[8.1.0-0 New3DS|this]].
|
|
| No
| No
| Available
| September 26, 2014
|-
| 8.1.0-19
| Not updated
| October 2, 2014
| Japan-only "update", see [http://yls8.mtheall.com/ninupdates/reports.php?date=10-02-14_02-05-03&sys=ctr here]. The only change was that a new title([[New_3DS]]-only system application) was added, CVer/NVer titles were not even updated. The initial version of this [[Title_list|title]] is a stub.
| No
|
| No
| No
| Available
| October 2, 2014
|-
| [[9.0.0-20]]
| v11272
| October 6, 2014
| See [[9.0.0-20|this]].
|
|
| No
| No
| Available
| October 6, 2014
|-
| [[9.1.0-20J]]
| v14336(JPN-region title)
| October 10, 2014
| Japan-only, see [[9.1.0-20J|this]].
| No
|
| No
| No
| Available
| October 10, 2014
|-
| [[9.2.0-20]]
|
| October 29, 2014
| See [[9.2.0-20|this]].
| No
|
| No
| No
| Available
| October 29, 2014
|-
| [[9.3.0-21]]
|
| December 8, 2014
| See [[9.3.0-21|this]].
| Yes
|
| Yes
| No
| Available
| December 8, 2014
|-
| [[9.4.0-21]]
|
| December 11, 2014
| See [[9.4.0-21|this]].
| No
|
| No
| No
| Available
| December 11, 2014
|-
| [[9.5.0-22]]
|
| February 2, 2015
| See [[9.5.0-22|this]].
| Yes
|
|
| No
| Available
| February 2, 2015
|-
| [[9.5.0-23]]
|
| March 2, 2015
| See [[9.5.0-22|this]].
| No
| Yes
|
| No
| Available
| March 2, 2015
|-
| [[9.6.0-24]]
|
| March 23, 2015
| See [[9.6.0-24|this]].
| See [[9.6.0-24|here]].
|
|
| No
| Available
| March 23, 2015
|-
| [[9.7.0-25]]
|
| April 20, 2015
| See [[9.7.0-25|this]].
| Probably none?
|
| No
| No
| Available
| April 20, 2015
|-
| [[9.8.0-25]]
|
| June 1, 2015
| See [[9.8.0-25|this]].
| No
| No
| No
| No
| Available
| June 1, 2015
|-
| [[9.9.0-26|9.9.0-26]]
|
| July 13, 2015
| See [[9.9.0-26|this]].
|
|
|
| No
| Available
| July 13, 2015
|-
| [[10.0.0-27|10.0.0-27]]
|
| September 8, 2015
| See [[10.0.0-27|this]].
| Yes
| No
| No
| No
| Available
| September 8, 2015
|-
| [[10.1.0-27|10.1.0-27]]
|
| September 14, 2015
| See [[10.1.0-27|this]].
| No
| No
| No
| No
| Available
| September 14, 2015
|-
| [[10.2.0-28|10.2.0-28]]
|
| October 19, 2015
| See [[10.2.0-28|this]].
|
|
|
| No
| Available
| October 19, 2015
|-
| [[10.3.0-28|10.3.0-28]]
|
| November 9, 2015
| See [[10.3.0-28|this]].
|
|
|
| No
| Available
| November 9, 2015
|-
| [[10.4.0-29|10.4.0-29]]
|
| January 18, 2016
| See [[10.4.0-29|this]].
| Yes
| Launching old Ironfall was blocked.
| Yes
| No
| Available
| January 18, 2016
|-
| [[10.5.0-30|10.5.0-30]]
|
| January 25, 2016
| See [[10.5.0-30|this]].
|
|
|
| No
| Available
| January 25, 2016
|-
| [[10.6.0-31|10.6.0-31]]
|
| February 22, 2016
| See [[10.6.0-31|this]].
| Yes
| Yes
| Yes
| No
| Available
| February 22, 2016
|-
| [[10.7.0-32|10.7.0-32]]
|
| March 14, 2016
| See [[10.7.0-32|this]].
| No
| Yes
| Yes
| No
| Available
| March 14, 2016
|}

"[[3DS_System_Flaws|System]]/[[3DS_Userland_Flaws|Userland]] security flaws fixed*": This includes known flaws, and any fixed flaws discovered via code bin-diff.

"[[3DS_System_Flaws|System]]/[[3DS_Userland_Flaws|Userland]] security flaws fixed*" and "3DS-mode homebrew affected" only apply to the changes done with that specific system-update("affected" does not include hax codebases breaking *just* due to updated codebins).

[[Category:Nintendo Software]]

== Auto-Boot Function ==
When the Home Menu is initially loaded by [[NS]], it checks the gamecard ExeFS:/[[SMDH|icon]] for the auto-boot flag. If the auto-boot flag is set, it will load the application on the cartridge and the home menu will not remain running in the background, or at least not in an operational state. Using software cues to return to the home menu, or sleep menu while in this state, causes a shutdown.

Notable features of demo titles:
*Auto-boot demos generally disable the functionality of the home button.
*The ''New Super Mario Bros 2'' demo, retained the functionality of the home button, and had an timer which triggered the demo to quit after a period of inactivity.

Auto-boot cartridges, can bypass some of the functions of the Home Menu. Auto Booted software:
* Doesn't show usage history in the [[Activity Log]]
* Bypasses Parental controls
* Bypasses Forced Game Card Updates
* Bypasses Initial 3DS Setup
* The console does not have a friends list presence.
* Is still subject to region lock(see below).

Region lock is still active, so the home menu will refuse to launch demos with incorrect region lock will not load, displaying "An Error has Occurred". However, game card update partition checks are not done, which allows launching demos that have region free encoding, but have an alternate(or even invalid) region update partition.

The following auto-boot paths can be used by Home Menu, checked in the same order listed below(the above gamecard auto-boot is checked before this):
{| class="wikitable"
! Key-combo / requirements for this path
! Description
|-
| R, L, and X
| This launches [[System Settings]] for touchscreen calibration.
|-
| R, L, and Y
| This launches [[System Settings]] for circlepad calibration.
|}

The following is only checked when the low u16 from [[Config_Savegame|config]] block 0x00110000 is value zero(normally this is non-zero). Thus, the below is only handled when a system setup is required.
{| class="wikitable"
! Key-combo / requirements for this path
! Description
|-
| R, X, Y, A, and B, a 3DS gamecard must be inserted as well.
| This launches the gamecard application. Note that pressing the HOME button in the gamecard application launched this way will only result in the system shutting down.
|-
| This is used when the above path isn't used.
| This launches System Settings for the system setup.
|}

== Region Lockout ==

One of the Home Menu's functions, is to regulate region lockout. The region lockout data for any given title is held in the [[SMDH#BNR Region|ICN data]]. There are 6 regions of which have their own region lockout, Japan, USA, Europe(including Nintendo Australia), China, Taiwan and Korea. There is also a value which makes a title exempt from region lockout, and consequently accessible from any region of 3DS.

The region-field stored in the [[SMDH|ICN-data]] is only checked when Home Menu itself launches a title, not when other titles use NS to have Home Menu launch titles. This isn't actually useful for gamecard region-free however, due to the gamecard system-updates, see below.

Also note that while some gamecard games are mostly region-free(main CXI is identical for all regions of the gamecard), those gamecards can't actually be launched with all 3DS regions due to the gamecard system-update, see below. Note that the main CXI being identical for all regions of a gamecard also means the savedata keyY is identical for all regions of that gamecard too(except for old system-version <v2.2 games, in some cases, due to different cardIDs).

=== Effects of Region Lockout ===
Every 3DS title regardless of location (NAND/SD Card/Game Card) is subject to region lockout scrutiny by the Home Menu. And the home menu treats 'out-of-region' titles by simply refusing to show them on the home menu. No messages are shown on the home menu to notify the user, the title is simply ignored. However out-of-region SD Card titles, will appear and quickly disappear, while all the SD Titles are being processed. In cases where access to the home menu GUI is not needed to launch the title (like in the case of kiosk demos), the home menu states an error has occurred, and launching of the title is stopped.

=== Game Card Updates ===
Either intentionally a region lock mechanism or not, the function which checks the game card update partition returns an error when it is detected the update is for a region other than the 3DS's region (Most likely triggered by the absence of the correct CVer title). And errors returned from checking the update partition, will result in the home menu displaying "This Game Card cannnot be used", when the user attempts to launch the title.

== Home-menu [[SpotPass]] usage ==

Home-menu originally used two domains with HTTPS for SpotPass. SpotPass stores this content in Home-menu's NAND shared extdata.

* The system notifications are downloaded from: https://a248.e.akamai.net/f/248/103046/10m/npdl.c.app.nintendowifi.net/p01/nsa/<regionID>/<filename>/<langcode>/<filename> Where langcode is the two-character language codes from [[Config Savegame#Languages|config]], and regionID is from the below table. <filename> is bashoX/sysmsgX where X is 0-3.
* https://pls.c.shop.nintendowifi.net/pl/upload This URL is used for uploading data from the home menu NAND shared extdata, it's unknown what this is used for. This data is uploaded every 24 hours.
* https://npul.c.app.nintendowifi.net/p01/recv/<regionID>/<filename> This is used for uploading unknown data from extdata. <filename> can be "phu", "tiu", "splu", or "sendmgn".

{| class="wikitable"
|-
! Region
! ID
|-
| JPN
| gWr4JXxb2mKTG3lq
|-
| NA
| uuI82221UKkqmtbp
|-
| EUR / Others
| UrXSeurnxhPrq7AS
|}

The SpotPass content payload for notifications begin with a header, followed by an [[SMDH|icon]] and the UTF-16 text, and various metadata.

=== VersionList ===
During startup, Home Menu loads "/versionList.dat" from NAND extdata 0xf000000e. This is downloaded via SpotPass, the file-data downloaded via HTTPS here is raw (no SpotPass container):
* Retail: [https://tagaya-ctr.cdn.nintendo.net/tagaya/versionlist]
* Dev-unit: [https://tagaya-dev-ctr.cdn.nintendo.net/tagaya/versionlist] The titles listed in this are not available on the [[Title list|normal]] CDN.

This is a list of title-updates available on the eShop, for regular app titles and update-titles. This is what Home Menu checks to determine whether the currently selected application needs to be updated or not. When an Internet connection is not available or wifi is disabled, Home Menu will skip VersionList handling/messages when you launch applications.

File structure:
{| class="wikitable"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x10
| The first u32 is normally 0x1, the rest is normally all-zero.
|-
| 0x10
| <Filesize-0x10>
| Title entries, 0x10-bytes each.
|}

Title entry structure:
{| class="wikitable"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x8
| u64 TitleID
|-
| 0x8
| 0x4
| u32 titleversion
|-
| 0xC
| 0x4
| Unknown u32, usually zero?
|}

== Automatic System Update Download ==
See [[Automatic System Update Download]].

== Home Menu Error Messages ==
{| class="wikitable"
|-
! Dialog Text
! Description
|-
| "An error has occured. Please save your data ... then restart the system"
| This dialog is displayed when a system applet(including Home Menu) crashes/terminates. This dialog is also displayed for system errors as well.
|}

== Home Menu Themes ==
See [[Home_Menu/Themes|here]].

== Home Menu [[System_SaveData|NAND]] savedata ==
=== Launcher.dat ===
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x1
| Launcher.dat format version.
|-
| 0x1
| 0x1
| Padding?
|-
| 0x2
| 0x2
| Unknown, normally 0x1.
|-
| 0x4
| 0x4
| Unknown, normally 0x0.
|-
| 0x8
| 0xB40
| 360 u64s, list of titleIDs. For an unused entry, the u64 value is ~0(in that case, the corresponding entries at 0xD9A/0x106A for this titleID are not used either). This is used for the icons displayed on the main Home Menu screen.
|-
| 0xD9A
| 0x2D0
| Array of 360 s16 fields, each one corresponds to the titleIDs at the array located at offset 0x8. This is used for icon position, 0x0 for the very first icon, 0x1 for the next one and so on. This is completely linear, no X/Y coordinates.
|-
| 0x106A
| 0x168
| Array of 360 s8 fields, each one corresponds to the titleIDs at the array located at offset 0x8. This is used for icon position. When an s8 here is -1(which is the normal value), the icon is located with the first chunk of icons(outbuf+0), otherwise the base address is outbuf+0xB40+<s8val*0x1E0>(which is equivalent to 60 icons * s8val).
|}

== SD ExtData ==
The SD ExtData [[Extdata#Filesystem|File System]] for Home Menu is as follows:

root
├── icon
├── boss
└── user
├── SaveData.dat
├── Cache.dat
└── CacheD.dat

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! FW Introduced
! Plaintext
|-
| icon
| Stubbed. Always image 00000002.
| 0x4 Bytes
| n/a
|
|-
| SaveData.dat
| Always image 00000003.
| 0x2cb0 Bytes (0x2da0 starting with [[4.0.0-7]])
| [[2.0.0-2]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/HomeMenuExtdata/SaveData.dat Download]
|-
| Cache.dat
| Indexes and records details for the cached icon data. Always image 00000004.
| 0x1688 Bytes
| [[2.0.0-2]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/HomeMenuExtdata/Cache.dat Download]
|-
| CacheD.dat
| Cached icon data for Home Menu. Always image 00000005.
| 0x4cfe00 Bytes
| [[2.0.0-2]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/HomeMenuExtdata/CacheD.dat Download]
|}

=== Cache.dat & CacheD.dat ===
These two files work in tandem to allow the home menu to cache icon data for applications which are presented on the Home Menu. The size of both files suggests a maximum cache size of 360 icons. Cache.dat stores details about the cache icon data, and CacheD.dat stores the icon data. The icon cache stores icon data for *all* applications shown on the Home Menu, this includes DSi NAND Titles, and DS(i) cartridges. The format of cached DS(i) icon data is not understood, but they are the same size as 3DS icon data (0x36c0).

In Cache.dat the first 8 bytes are reserved, then follows each icon slots's entry in the format:
{| class="wikitable" border="1"
|-
! OFFSET
! SIZE
! DESCRIPTION
|-
| 0x0
| 8
| Title ID in Little Endian
|-
| 0x8
| 4
| Unknown
|-
| 0xc
| 4
| Unknown
|}

All unused entries have the Title IDs filled with "0xff".

In CacheD.dat, the icon data is concatenated together, with the first icon at offset 0x0.

=== SaveData.dat ===
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x1
| SaveData.dat format version.
|-
| 0x13b8
| 0x8
| Theme entry structure for the regular theme.
|-
| 0x13c0
| 0x8*10(0x50)
| Array of theme entry structures for theme [[9.3.0-21|shuffling]].
|-
| 0x141b
| 0x1
| 0 = one regular theme, 1 = multiple themes for theme [[9.3.0-21|shuffle]].
|}

When the theme cache is enabled via the above fields, Home Menu loads the cache at startup(if the used theme structure is valid).

Theme entry structure:
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Theme index: for DLC this is the content-index, for built-in themes this is an index for an array selecting the built-in theme.
|-
| 0x4
| 0x1
| Normally zero. This is the low 8-bits in the DLC titleID that this theme was originally loaded from.
|-
| 0x5
| 0x1
| Theme type, the valid range is 0..5. 0 = none, 1 = built-in theme from Home Menu RomFS, 2 = theme data loaded from SD cache / content archive. 3 = ?, 4 = ?, 5 = ?
|-
| 0x6
| 0x1
| Normally zero?
|-
| 0x7
| 0x1
| Normally zero?
|}

When the theme-type is value1 the themeindex must be <9. When the theme-type is value2 the themeindex has to be non-zero, and the u8 at offset 0x4 must not be >=10.

The theme-loader code (besides the AM <is-current-themeindex-DLC-installed> code) handles all theme-types >=2 the same way. However, it seems all DLC AM code involving checking the currently-used theme DLC only gets executed when the theme-type is value2. The code in the theme-loader for that also checks that a certain Home Menu state flag is non-zero, before running the AM DLC code(it's unknown where this flag value comes from).

== Home Menu [[Home_Menu/Themes|Theme]] SD [[Extdata|ExtData]] ==
The filesystem for this extdata is as follows:

root
├── icon
├── boss
└── user
├── ThemeManage.bin
├── BodyCache.bin
├── BgmCache.bin
└── nsalist

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! Extdata image ID
! FW Introduced
! Plaintext
|-
| ThemeManage.bin
| Theme management info. The filesize must match 0x800, otherwise the Home Menu code returns an error.
| 0x800
| 00000003
| [[9.0.0-20]]
|-
| BodyCache.bin
| Contains cached data from the last loaded [[Home_Menu/Themes|theme]] RomFS body_LZ.bin file. The filesize must match 0x150000, otherwise the Home Menu code returns an error.
| 0x150000
| 00000004
| [[9.0.0-20]]
|
|-
| BgmCache.bin
| Contains cached data from the last loaded [[Home_Menu/Themes|theme]] RomFS bgm.bcstm file. The filesize must match 0x337000, otherwise the Home Menu code returns an error.
| 0x337000
| 00000005
| [[9.0.0-20]]
|-
| nsalist
| Contains the list of DLC themes(IDs+prices), downloaded via [[SpotPass]].
|
| 00000007
| [[9.0.0-20]]
|}

BodyCache.bin and BgmCache.bin contain cached theme data for the currently used DLC theme. ThemeManage.bin is loaded by Home Menu during startup. The cached theme data is loaded at startup when a DLC theme is selected. This also contains theme-shop [[SpotPass]] data.

BodyCache.bin and BgmCache.bin are all-zero when no theme is selected.

Starting with [[9.3.0-21|9.3.0-X]] Home Menu can use more files in this extdata, for theme shuffling. "theme:/ThemeManage.bin" "theme:/BgmCache_%02d.bin" "theme:/BodyCache_rd.bin"

=== ThemeManage.bin ===
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Unknown, normally value 0x1?
|-
| 0x4
| 0x4
| Unknown, normally zero?
|-
| 0x8
| 0x4
| Actual size of the cached body_LZ.bin data.
|-
| 0xC
| 0x4
| Actual size of the cached bgm.bcstm data.
|-
| 0x10
| 0x4
| Unknown
|-
| 0x14
| 0x4
| Unknown
|-
| 0x18
| 0x4
| When a DLC theme is selected, this is the content-index of the DLC theme.
|-
| 0x1C
| 0x4
| Unknown, usually value 0x200 when the data in theme-cache is actually used?
|}

The total filesize is 0x800-bytes, normally the data starting at offset 0x1C is all-zero.

When no theme is actually used, the only non-zero fields are the following: the u32 stored at offset 0x0 in ThemeManage.bin is value 0x1, with offset 0x10 u32 set to value 0x1.

== Home Menu badge SD [[Extdata|ExtData]] ==
The filesystem for this extdata(when it actually exists) is as follows:

root
├── icon
├── boss
└── user
├── BadgeData.dat
└── BadgeMngFile.dat

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! Extdata image ID
! FW Introduced
|-
| BadgeData.dat
| [[Home_Menu#BadgeData.dat|See below.]]
| 0xF4DF80
|
| [[9.0.0-20]]
|-
| BadgeMngFile.dat
| [[Home_Menu#BadgeMngFile.dat|See below.]]
| 0xD4A8
|
| [[9.0.0-20]]
|}

=== BadgeData.dat ===
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 100 * 16 * 0x8A
| UTF-16 Badge Set Titles (16 per set for different languages)
|-
| 0x35E80
| 1000 * 16 * 0x8A
| UTF-16 Badge Titles (16 per set for different languages)
|-
| 0x250F80
| 100 * 0x2000
| [http://en.wikipedia.org/wiki/Z-order_curve Tiled] RGB565 64x64 Badge Set Icons
|-
| 0x318F80
| 1000 * 0x2800
| [http://en.wikipedia.org/wiki/Z-order_curve Tiled] RGB565 64x64 + Tiled A4 64x64 Badge Icons
|-
| 0xCDCF80
| 1000 * 0xA00
| [http://en.wikipedia.org/wiki/Z-order_curve Tiled] RGB565 32x32 + Tiled A4 32x32 Badge Icons
|}

=== BadgeMngFile.dat ===
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| u32, Must Be Zero
|-
| 0x4
| 0x4
| u32, Number of Badge Sets
|-
| 0x8
| 0x4
| u32, Number of Unique Badges
|-
| 0xC
| 0x4
| u32, Number of Placed Badges
|-
| 0x10
| 0x4
| u32, Selected Badge Set in Home Menu (0xFFFFFFFF = All Badges)
|-
| 0x14
| 0x4
| u32, Selected Badge Column in All Badges
|-
| 0x18
| 0x4
| u32, Number of Total Badges
|-
| 0x1C
| 0x4
| u32, Nintendo Network ID Number
|-
| 0x20
| 0x338
| Unknown (always zeros? unused?)
|-
| 0x358
| 0x80
| Used Badge Slots (each bit = 1 slot)
|-
| 0x3D8
| 0x10
| Used Badge Set Slots (each bit = 1 slot)
|-
| 0x3E8
| 1000 * 0x28
| [[Home_Menu#BadgeInfo|BadgeInfo]] Entries
|-
| 0xA028
| 100 * 0x30
| [[Home_Menu#BadgeSetInfo|BadgeSetInfo]] Entries
|-
| 0xB2E8
| 360 * 0x18
| [[Home_Menu#BadgeLayoutSlot|BadgeLayoutSlot]] Entries
|}

==== BadgeIdentifier ====
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| u32, Unknown
|-
| 0x4
| 0x4
| u32, Badge ID
|-
| 0x8
| 0x4
| u32, Badge Set ID
|-
| 0xC
| 0x2
| u16, Badge Index
|-
| 0xE
| 0x2
| u16, Badge Sub ID (used for multi-part badges)
|}

==== BadgeSetIdentifier ====
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| u32, Unknown (Usually 0xFFFFFFFF)
|-
| 0x4
| 0x4
| u32, Unknown (Usually 0xFFFFFFFF)
|-
| 0x8
| 0x4
| u32, Unknown (Usually 0x0)
|-
| 0xC
| 0x4
| u32, Unknown (Usually 0x2710)
|-
| 0x10
| 0x4
| u32, Badge Set ID
|-
| 0x14
| 0x4
| u32, Badge Set Index
|}

==== BadgeInfo ====
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x10
| [[Home_Menu#BadgeIdentifier|BadgeIdentifier]]
|-
| 0x10
| 0x2
| u16, Number Placed
|-
| 0x12
| 0x2
| u16, Quantity
|-
| 0x14
| 0x4
| u32, Unknown (packed data?)
|-
| 0x18
| 0x10
| u64[2], Shortcut Title ID (twice, once per u64)
|}

==== BadgeSetInfo ====
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x18
| [[Home_Menu#BadgeSetIdentifier|BadgeSetIdentifier]]
|-
| 0x18
| 0x4
| u32, Unknown (usually 0xFFFFFFFF)
|-
| 0x1C
| 0x4
| u32, Number of Unique Badges
|-
| 0x20
| 0x4
| u32, Number of Total Badges
|-
| 0x24
| 0x4
| u32, Start Badge Index
|-
| 0x28
| 0x4
| u32, Unknown (usually 0x0)
|-
| 0x2C
| 0x4
| u32, Unknown (usually 0x0)
|}

==== BadgeLayoutSlot ====
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x10
| [[Home_Menu#BadgeIdentifier|BadgeIdentifier]]
|-
| 0x10
| 0x4
| u32, Position
|-
| 0x14
| 0x4
| u32, Folder (0xF0FF = Icon of a folder, 0xFFFFFFFF = No folder)
|}

The file size must match 0xD4A8, otherwise the Home Menu code returns an error.

== Home Menu theme layout SD [[Extdata|ExtData]] ==
The filesystem for this extdata(when it actually exists) is as follows:

root
├── icon
├── boss
└── user
└── MngFile.dat

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! Extdata image ID
! FW Introduced
! Plaintext
|-
| MngFile.dat
| See below.
| 0x004D1280
| 00000003
| [[9.6.0-24]]
|}

=== MngFile.dat ===
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| u32, must be zero.
|-
| 0x4
| 0x4
| u32, total number of stored layouts.
|-
| 0x8
| 0x4
| ?
|-
| 0xC
| ?
| Start of the layout entries.
|}

Layout entries structure:
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x2558
| Exact copy of the entire Home Menu [[System_SaveData]] Launcher.dat, this is the actual layout data.
|-
| 0x2558
| ?
| Layout preview screenshot gfx data, displayed by the Home Menu layout settings menu.
|}

The filesize must match 0x004D1280, otherwise the Home Menu code returns an error. The saved Home Menu layouts are stored here.

When saving a layout, the total layout field is increased, then a new layout entry is created with the contents of the current Home Menu [[System_SaveData]](NAND savedata) Launcher.dat + a screenshot of the main Home Menu screen is written. When loading a layout, Launcher.dat in savedata is written with the current Launcher.dat data already stored in memory(unknown if any data gets changed for it here), then data from the layout entry is copied into the Home Menu [[System_SaveData]] Launcher.dat.

Home Menu *only* accesses this file with the Home Menu layout-settings menu / when entering that menu.

== Home Menu startup ==
The following is what Home Menu does at startup(converted from cmd-logs), from [[9.4.0-21]], in the same order Home Menu does it.

Originally Home Menu mounted sdmc in main(), starting(?) with [[6.0.0-11]] Home Menu only has sdmc mounted while handling [[SD_Savedata_Backups]].

{| class="wikitable" border="1"
|-
! Archive
! Filename
! Read size
! Notes
|-
|
|
|
| srv_init(), then srv_GetServiceHandle is used to initialize the service handles for the following services: [[NS_and_APT_Services|ns:s]], [[PTM_Services|ptm:sysm]], and [[Config_Services|cfg:s]].
|-
|
|
|
| [[CfgS:SecureInfoGetByte101]] and [[CfgS:GetLocalFriendCodeSeed]] are used, the output data from these are not used. If either of these return an error, Home Menu uses [[ERR:Throw]].
|-
|
|
|
| [[Cfg:GetSystemModel]] is then used to initialize a Home Menu state field.
|-
|
|
|
| Home Menu then loads the system language via [[CfgS:GetConfigInfoBlk2]], and uses [[Cfg:SecureInfoGetRegion]], to initialize Home Menu region/language state. Home Menu then uses [[Cfg:SecureInfoGetRegion]] again, then loads the [[Config_Savegame|CountryInfo]] via [[CfgS:GetConfigInfoBlk2]].
|-
|
|
|
| Home Menu initializes [[Filesystem_services|fs:USER]] here. Home Menu then mounts the Home Menu CXI RomFS. Then Home Menu uses [[Filesystem_services|FSUSER:GetPriority]].
|-
|
|
|
| Home Menu starts APT initialization / using APT service commands here. Eventually Home Menu then [[NSS:LaunchTitle|launches]] various system-modules.
|-
|
|
|
| Here Home Menu attempts to open NAND shared-[[extdata]] 0xe0000000, which will normally fail since it doesn't exist.
|-
|
|
|
| Here Home Menu uses [[Application_Manager_Services|AM]] command 0x00130040, with input u8 = value 0x0. Home Menu continues using APT commands after this.
|-
|
|
|
| [[HID_Services|hid:SPVR]] service initialization is done here.
|-
|
|
|
| [[PTM_Services|PTMSYSM:GetShellStatus]] is used here.
|-
|
|
|
| [[Filesystem_services|FSUSER:GetCardType]] is used here. AM commands are then used to get the inserted gamecard programID, when successful the gamecard ExeFS:/icon is then read to check the auto-boot flag(see the auto-boot section on this page). The system-setup-required flag is then read here if needed, as mentioned under the auto-boot section of this page.
|-
|
|
|
| Home Menu then uses cfg commands to load system language, region, and CountryInfo.
|-
| Home Menu CXI RomFS
| "/message/<Region>_<Language>/menu_msbt_LZ.bin"
| Presumably loaded from the filesize.
|
|-
| Home Menu CXI RomFS
| "/message/<Region>_<Language>/RI_mstl_LZ.bin"
| Presumably loaded from the filesize.
|
|-
| Home Menu CXI RomFS
| "/message_hud/<Region>_<Language>/hud_msbt_LZ.bin"
| Presumably loaded from the filesize.
|
|-
| Home Menu CXI RomFS
| "/message_hud/<Region>_<Language>/RI_mstl_LZ.bin"
| Presumably loaded from the filesize.
|
|-
|
|
|
| [[NS_and_APT_Services|APT:GetSharedFont]] is used here.
|-
| Home Menu CXI RomFS
| "/font/Hud_JP.bcfnt"
|
|
|-
|
|
|
| Here Home Menu loads the [[Config_Savegame|cfg]] state for blkID 0x50005.
|-
|
|
|
| Here Home Menu loads the GPU shaders from RomFS.
|-
|
|
|
| Here Home Menu does DSP initialization then starts using DSP commands etc + loads sound data from RomFS.
|-
|
|
|
| Here Home Menu does GSP initialization.
|-
|
|
|
| [[APT:GetCaptureInfo]] is used here.
|-
| Home Menu CXI RomFS
|
|
|
|-
|
|
|
| Here Home Menu uses [[PTM_Services|PTMSYSM:GetShellStatus]], [[PTM_Services|PTMSYSM:IsLegacyPowerOff]], and [[PTM_Services|PTMSYSM:ClearLegacyPowerOff]]. Home Menu then uses [[PTM_Services|PTMSYSM:GetShellStatus]] 3 times in a row. Starting from here, Home Menu uses [[PTM_Services|PTMSYSM:GetShellStatus]] frequently(presumably from a separate thread).
|-
|
|
|
| Home Menu opens the archive for the Home Menu [[System_SaveData]] here. Then Home Menu attempts to open "/Launcher.dat" for reading, when successful Home Menu just closes the file.
|-
| Home Menu [[System_SaveData]]
| "/Launcher.dat"
| 0x2490
| Prior to doing the read, Home Menu uses [[FSFile:GetSize]].
|-
| System CFA, titleID for USA: 0004009B00013302
| "/country.bin"
|
|
|-
| [[NS CFA]]
| "/ctr_backup_black_list"
|
| Home Menu first reads 0x10-bytes from offset 0x0, then after that it reads the rest of the file.
|-
| Home Menu CXI RomFS
|
|
| Home Menu reads various RomFS files here.
|-
|
|
|
| Home Menu [[NSS:LaunchTitle|launches]] the camera system-module here.
|-
| Home Menu CXI RomFS
|
|
| Home Menu reads various RomFS files here.
|-
| NGWord bad word list CFA
| "/version.dat"
| 0x4
| Home Menu mounts the ngword archive here, then reads version.dat. Home Menu then loads the [[Config_Savegame|cfg]] data for blkID 0x000A0000.
|-
|
|
|
| Home Menu [[NSS:LaunchTitle|launches]] various system-modules here(from a separate thread?).
|-
|
|
|
| Home Menu opens the following NAND shared extdata archives here: 0xf0000001, 0xf0000002, 0xf0000009, 0xf000000b, 0xf000000c, 0xf000000d, and 0xf000000b again.
|-
| NAND [[extdata]] 0xf000000b
| "/ubll.lst"
| 0x2ee0
| Prior to doing the read, Home Menu uses [[FSFile:GetSize]].
|-
|
|
|
| Home Menu opens NAND shared extdata archive 0xf000000b again.
|-
| NAND extdata 0xf000000b
| "/CFL_DB.dat"
| 0xe4c0
| Home Menu only does one read with size 0xe4c0 for this, even though the value it loads from [[FSFile:GetSize]] is larger than that.
|-
| NAND extdata 0xf000000b
| "/CFL_OldDB.dat"
|
| Home Menu just closes this file immediately after opening it, when opening it was successful at least.
|-
|
|
|
| Home Menu loads the [[Config_Savegame|cfg]] data for blkID 0x000C0000 here.
|-
|
|
|
| Home Menu opens NAND shared extdata archive 0xf000000b again.
|-
| NAND extdata 0xf000000b
| [[Extdata|"/gamecoin.dat"]]
| 0x14
| Home Menu first tries to use [[FS:CreateFile]] with this, which will fail when the file already exists. This file is then opened with openflags=RW. After reading this file, Home Menu then uses [[PTM:GetTotalStepCount]], then uses [[FSFile:GetSize]]. Then the service handle for [[NDM_Services|"ndm:u"]] is initialized with srv_GetServiceHandle(done from a separate thread perhaps?). Then Home Menu writes to the already opened gamecoin.dat file.
|-
|
|
|
| [[Filesystem_services|FSUSER:CardSlotIsInserted]] and [[Filesystem_services|FSUSER:GetCardType]] is used here. AM commands are then used to get the inserted gamecard programID, when successful the gamecard ExeFS:/icon is then read.
|-
|
|
|
| [[BOSS_Services|"boss:P"]] service handle initialization with srv_GetServiceHandle is done here. Then [[Services|srv_Subscribe]] is used with various noticationIDs. Home Menu then uses [[FS:IsSdmcDetected]] and [[FS:IsSdmcWritable]]. Home Menu then loads the [[Config_Savegame|cfg]] data for blkID 0x000D0000. Home Menu uses boss:P command 0x4010082, then uses srv_GetServiceHandle for initializing service handles with the following services: [[News_Services|"news:s"]] and "cecd:s".
|-
|
|
|
| srv_GetServiceHandle is used to initialize the service handle for service [[Friend_Services|"frd:a"]], then various service commands are used for that.
|-
| NAND [[extdata]] 0xf000000c
|
|
| Home Menu first attempts to use [[FS:CreateFile]] with "/bashotorya.dat", which normally fails since that file already exists. Home Menu then repeats this with "/bashotorya2.dat".
|-
|
|
|
| Here, Home Menu opens the following SD extdata archives: Home Menu badge SD extdata, Home Menu SD extdata, and the theme-cache SD extdata.
|-
| Home Menu SD extdata
| "/SaveData.dat"
| 0x2da0
| Prior to doing the read, Home Menu uses [[FSFile:GetSize]].
|-
| Home Menu SD extdata
| "/Cache.dat"
| 0x1688
| Prior to doing the read, Home Menu uses [[FSFile:GetSize]].
|-
| Home Menu SD extdata
| "/CacheD.dat"
| 0x36c0
| This is used to read the cached icon data for the currently inserted gamecard, if any. Prior to doing the read, Home Menu uses [[FSFile:GetSize]]. After opening the file and before [[FSFile:GetSize]] is used, Home Menu uses AM commands 0x10070102(for theme DLC) and 0x30084(gamecard "title-listing").
|-
|
|
|
| Home Menu uses the following AM commands for theme DLC here: 0x10050084 and 0x10020104.
|-
| Home Menu Theme SD extdata
| "/BodyCache.bin"
| 0x150000
| Before opening the file, Home Menu firsts opens this archive under a new archive-handle again, then closes it. Prior to doing the read, Home Menu uses [[FSFile:GetSize]].
|-
| Home Menu Theme SD extdata
| "/ThemeManage.bin"
| 0x8
| Prior to doing the read, Home Menu uses [[FSFile:GetSize]](the result is filesize 0x800).
|-
| Home Menu Theme SD extdata
| "/BgmCache.bin"
|
| The data is read from here as needed. After opening the file, Home Menu uses [[FSFile:GetSize]].
|-
|
|
|
| boss:P commands 0x00040000 and 0x04040080 are used here. Home Menu opens NAND shared-extdata 0xf000000e, then closes it when the archive was opened successfully. Then Home Menu uses boss:P command 0x04500102 with the theme extdata, with string "thmtop".
|-
|
|
|
| boss:P command 0x04040080 is used, with the input programID set to the gamecard one. Then boss:P commands 0x000E0000 and 0x00160082 are used.
|-
|
|
|
| [[AMNet:GetTitleIDList|AM:GetTitleIDList]] is used with mediatype=SD and maxTIDs = 0x1c00.
|-
|
|
|
| boss:P command 0x00160082 is used.
|-
|
|
|
| [[PTM_Services|PTM:GetStepHistory]] is used.
|-
|
|
|
| srv_GetServiceHandle is used to initialize the service handle for [[AC_Services|"ac:u"]], then [[AC_Services|ACU:SetClientVersion]] is used. [[Services|srv_Subscribe]] is used, then ACU command 0x002F0004 is used.
|-
|
|
|
| [[AMNet:GetTitleIDList|AM:GetTitleIDList]] is used with mediatype=NAND and maxTIDs = 0x1c00.
|-
| NAND extdata 0xf000000b
| "/gamecoin.dat"
| 0x14
| Home Menu first tries to use FS:CreateFile with this, which will fail when the file already exists. This file is then opened with openflags=RW. After reading this file, Home Menu then uses [[PTM_Services|PTM:GetTotalStepCount]], then uses FSFile:GetSize. Then Home Menu writes to the already opened gamecoin.dat file.

At the same time as doing the above, Home Menu also uses(probably from a different thread) [[AMNet:GetTitleIDList3|AM:GetTitleIDList3]] with mediatype=NAND and maxTIDs=0x2000. Then Home Menu uses [[AMNet:ListTitles|AM:ListTitles]] with the NAND promotional-video titleID. Then Home Menu attempts to open the ExeFS:/icon in the NAND promotional-video title.
|-
| Home Menu [[System_SaveData]]
| "/Launcher.dat"
|
| Prior to doing the write, Home Menu uses [[FSFile:GetSize]]. Home Menu writes 0x2490-bytes to the file here. From a separate thread(?) at the same time, Home Menu also uses [[AM:ReloadDBS]] and AM command 0x00130040 with input=0x1.
|-
|
|
|
| Home Menu loads the u8 value from [[Config_Savegame|cfg]] blkID 0x000E0000 here.
|-
|
|
|
| [[AM:ReloadDBS]], AM command 0x10070102(for theme DLC), AM command 0x00130040, and AM command 0x10050084(for theme DLC) are used here.
At the same time(from a different thread?), the "act:u" service handle is initialized with srv_GetServiceHandle. Then ACTU commands 0x00010084 and 0x000600C2 are used.
|-
|
|
|
| The [[NIM_Services|"nim:u"]] service handle is initialized with srv_GetServiceHandle. Then NIMU commands 0x000F0042, 0x00170042, 0x00150000, and 0x00050000 are used.
|-
|
|
|
| AM command 0x10020104(theme DLC) is used here. Then Home Menu CXI RomFS data is read.
|-
|
|
|
| Home Menu CXI RomFS data is read. [[Filesystem_services|FS:GetSpecialContentIndex]] for the gamecard is used, then MICU initialization is done here(separate thread maybe?).
|-
|
|
|
| [[ACU:GetWifiStatus]] is used, the NAND shared-extdata 0xf000000b archive is then opened here.
|-
| NAND extdata 0xf000000b
| "/idb.dat"
| 0x2008
| This first opens the file for writing, then uses [[FSFile:GetSize]](output filesize is 0x6d4000). Then it writes to the file using size 0, then closes the file. Then [[PTM_Services|PTM:GetStepHistory]] is used. Then Home Menu opens "/idbt.dat", then reads 0x2008-bytes.
|-
|
|
|
| Home Menu starts using [[News_Services|"news:s"]] commands here. While Home Menu is doing this, it also uses(from another thread?) [[NS_and_APT_Services|APT:PrepareToStartNewestHomeMenu]], [[NIM_Services|NIMU:GetState]], and [[NDM_Services|NDMU:OverrideDefaultDaemons]] with input value 0xF.
Later with that news-command code still running, Home Menu also uses the following commands: [[ACU:GetWifiStatus]], [[NDM_Services|NDMU:QueryExclusiveMode]], and CECDS command 0x000E0000. Then [[Config_Savegame|cfg]] blkID 0x000D0000 is loaded.
|-
| NAND extdata 0xf000000b
| "/idbt.dat"
|
| Home Menu writes 0x2008-bytes to this file.
|-
| NAND extdata 0xf000000e
| "/versionList.dat"
| Loaded from the filesize.
|
|-
|
|
|
| boss:P command 0x00200082 is used with string "mmVerDl".
|-
|
|
|
| ...
|-
| Home Menu [[System_SaveData]]
| "/Launcher.dat"
|
| When Home Menu is terminating(?), Home Menu writes 0x2490-bytes to the file here. After doing this, Home Menu opens, writes, and closes the file again.
|}

== Returning to Home Menu from a crashed application ==
When returning to Home Menu from an application that didn't properly shutdown(like with an exception), PTM module writes data to the PTM system savedata. Then the system terminates Home Menu, and starts Home Menu again.

== See Also ==
* http://www.nintendo.com/consumer/systems/3ds/en_na/menu_update.jsp
* http://www.nintendo.co.jp/netinfo/3ds/JPN/ja.html
* http://yls8.mtheall.com/ninupdates/reports.php

IRC Quotes

2016-03-28T07:02:46Z

Einstein95: Undo revision 16248 by ClassicToxin (talk)

''This page contains quotes from the IRC channel, #3dsdev.''
*"BARK BARK BARK BARK BARK BARK BARK BARK BARK BARK BARK BARK" -meowkins, January 21st 2016
*"emulife" -[[User:Tomsterley|tomsterle]], January 21st 2016
*"can we not vandalize the wiki" -Dazzozo, January 21st 2016
*"can you run citra on 3dsx" -plutoooo, January 21st 2016
*"(>ლ)" -profi200, January 21st 2016
*"[[User:Tomsterley|tomsterle]], the awkward fanboy" -meowkins, January 21st 2016
*"I think nobody wants to break your heart by telling you this, but you're not funny" -meowkins [In PM to [[User:Tomsterley|tomsterle]]], January 21st 2016
*"Plutobot does not have a sense of humor, thus he does not have any good quotes" -[[User:Tomsterley|tomsterle]], January 21st 2016
*"I hate to be that guy but dude, stop it. You make completely useless wiki edits and spam this channel with useless crap." - profi200, January 21st 2016
*"My farts sound like ARM code ;)" - profi200, January 26th 2016

YouTube

2016-03-25T05:13:44Z

Einstein95:

The YouTube application available from the eShop is a web-browser. Like the [[Internet Browser|main]] browser this uses WebKit. All data is downloaded with plaintext HTTP (3DS application).

The OSS for the 3DS / Wii U YouTube application is available at the following:
* [https://github.com/youtube/h5vcc_hh]
* [https://github.com/youtube/h5vcc]

==User-Agent and Browser Versions==
The user-agent format is almost identical to the main browser: "Mozilla/5.0 (Nintendo 3DS; U; ; Factory Media Production) Version/<version>.<region>". <lang> is "en", "fr", etc. <region> is "US", "EU", etc. See below for <version>.
{| class="wikitable" border="1"
|-
! Browser version
! USA/EUR CDN Title-version
! Release date
! Notes
|-
| 1.7498
| v16 and v0
|
| Initial app version.
|-
| 1.7498
| v1056 and v1040
|
| First app update. This build uses the [[7.0.0-13|v7.0]] [[NCCH]] encryption for the main CXI, this was the first retail title to use this.
|-
| 1.7498
| v2096 and v2080
| October 15, 2015
| This update fixed the vuln used for tubehax.
* This version was built with the latest CTRSDK, so NATIVE_FIRM [[9.6.0-24|9.6.0-X]] is now required.
* Plaintext HTTP is still used.
* The RomFS is empty, and accessinfo is still 0x0. Strings related to RO are still in the codebin, but during application startup ldr:ro isn't used at all. The CROs are now built with the main codebin(included with the main .text etc), hence the much larger sections listed below.
* The codebin sections are much larger:
** "Code text size: 0x003A9CF0" -> "Code text size: 0x00A81470"
** "Code ro size: 0x000B9360" -> "Code ro size: 0x0014C848"
** "Code data size: 0x00203F08" -> "Code data size: 0x00207788"
** "Code bss size: 0x00095748" -> "Code bss size: 0x00094F48"
* The USA codebin contains the following user-agent strings: "Mozilla/5.0 (Nintendo 3DS; U; Factory Media Production; en) Version/1.7498.US" and "Mozilla/5.0 (Nintendo 3DS New3DS; U; Factory Media Production; en) Version/1.7499.US".

'''None''' of the public Old3DS/New3DS [[browserhax]] which were public at the time this YouTube app was updated, affect the YouTube app at all (no crashes).
* The "range" html <input> no longer displays: the page background-color is displayed where the slider would have been. Hence, unless there's a way to get this to actually display, [[browserhax|sliderhax]] isn't usable with this YouTube app version.

See [https://github.com/youtube/h5vcc_hh/commit/f464b0a60c6bc99001d4fe3b1915d31dc22b5d69 here] for the WebKit changes. The only actual code changes (in this commit) besides an optimization changeset being integrated, is changes for fixing the vuln used by tubehax.

Originally the YouTube app used the DNS server from the system configuration. Now it's hard-coded to use Google's DNS server at IP address 8.8.8.8 via DNS-resolver socket code in the app itself (it's unknown whether this resolver code existed in the app before this version).
|}

Updates for this application are forced, since the app itself checks for a newer version of the title (this is done before any actual HTTP requests by the actual application are done). This is done with [[Friend Services]]: the application tries to authenticate itself with FRDU. When the installed version is outdated, it gets an error-code in the output buffer for [[FRDU:GetGameAuthenticationData]] (this error-code then gets passed to the error-display applet). This is exactly what official games do when initializing online multiplayer too.

The friend HTTP requests which are involved with the above use HTTPS, so blocking it isn't an option (the usual POST request(s) to https://nasc.nintendowifi.net/ac): blocking it via DNS only results in a different error-code.

==RomFS==
The RomFS only contains [[CRO0|CROs]] ("/cro/") and the [[CRR0|CRR]] ("/.crr/static.crr"), the following is the "/cro/" contents:
* JavaScriptCore_CTR.cro
* WebCore_CTR.cro
* WebkitMediaPlayer_CTR.cro
* WebKit_CTR.cro
* static.crs

==Webkit==
Looks like the YouTube application uses a newer version of Webkit than the Internet Browser applet. It has the ability to construct Blobs, of course the HTML5 video element, and possibly the Audio element (Visible, but untested). It also supports the localStorage API. Here a list of exposed apis: [http://pastie.org/private/cmtppzyqmopzi9umhg8za].

===embedded.ctr===
Inside the YouTube app, there is a pseudo-webserver running that links to a structure inside ExeFS. This structure provides a list of urls under the domain "http://embeded.ctr/".

10.6.0-31

2016-02-26T09:56:27Z

Einstein95: /* CHN-only titles */

The Old3DS+New3DS 10.6.0-31 system update was released on February 22, 2016. This Old3DS update was released for the following regions: USA, EUR, JPN, CHN, KOR, and TWN. This New3DS update was released for the following regions: USA, EUR, JPN, CHN, and KOR.

Security flaws fixed: yes, see below.

Titles which uses [[Friend_Services|friend]]-services(online multiplayer included) are not affected by this, since the friend-sysmodule wasn't updated. As long as the installed friend-module is for [[10.5.0-30]] no [[10.5.0-30|sysupdate-required]] message will be displayed with using friend-service functionality.

==Change-log==
[http://en-americas-support.nintendo.com/app/answers/detail/a_id/667/p/430/c/267 Official] USA change-log:
* Further improvements to overall system stability and other minor adjustments have been made to enhance the user experience

[http://www.ique.com/3ds/support/update/3dsxlupdate.html Official] China change-log:
* 改善了运行性能和安全保护
** 为了能让用户更舒适地使用我公司的产品，改善了系统的运行性能和安全保护。

[https://www.nintendo.co.jp/support/3ds/system_update/index.html Official] Japan change-log:
* システムの安定性や利便性の向上
** より快適にお楽しみいただけるよう、システムの安定性や利便性を向上させました。

==System Titles==
<fill this in (manually) later>

===Home Menu===
Only one function was updated, the function which loads theme body-data with theme-shuffling enabled. This now does: if(loadedsize > input_max_size)fail. Hence, the latest exploit used by [[menuhax]] at the time of this sysupdate release is now fixed.

RomFS was not changed at all.

===Internet Browser===
Old and New 3DS Internet Browser were updated. Both browserhax_fright_tx3g(New3DS) and spider28hax(Old3DS) were fixed.

As of "Wed, 24 Feb 16 20:00:01 -0500", updating to this browser version is now [[Internet_Browser|required]] since the server browser-version-check pages for Old3DS were updated. This does not affect New3DS currently.

===Socket sysmodule===
Minus changes from an older CTRSDK version(CTRSDK version seems to be the latest now), only one actual SOC-specific function(L_11154c) was updated. The previous version did: <write u8 0x0 to ptr and increase ptr by 1>. The current version removed this so that L_11f9f0() is called with ptr, without writing data to ptr+0/changing ptr.

===IR sysmodule===
Exactly two functions were changed. Originally the two functions for reading I2C-IR registers TXLVL and RXLVL just used i2c_ReadRegister8 then returned the output u8. Now each function reads the register, then returns the output value if it's <=0x40. Otherwise, the register is read again. If the output value is <=0x40, the output value is returned, otherwise 0x0 is returned.

With the original IR hardware the value returned by these registers are always 0x0..0x40 according to the datasheet.

This fixed the vuln described [[3DS_System_Flaws|here]].

===JPN-only titles===
Multiple titles for JPN-only were updated. For System Settings and "Nintendo 3DS Camera", only the manual content was updated(the main contentid in the TMD wasn't changed at all). Other titles were updated for JPN-only too, presumably with the same manual-only change.

===CHN-only titles===
The amiibo Settings system-applet was added for old 3DS, yet is identical to the Taiwan version.

==See Also==
System update report(s):
* [http://yls8.mtheall.com/ninupdates/reports.php?date=02-22-16_07-00-49&sys=ctr]
* [http://yls8.mtheall.com/ninupdates/reports.php?date=02-22-16_07-00-58&sys=ktr]

10.6.0-31

2016-02-26T09:55:42Z

Einstein95: /* System Titles */

The Old3DS+New3DS 10.6.0-31 system update was released on February 22, 2016. This Old3DS update was released for the following regions: USA, EUR, JPN, CHN, KOR, and TWN. This New3DS update was released for the following regions: USA, EUR, JPN, CHN, and KOR.

Security flaws fixed: yes, see below.

Titles which uses [[Friend_Services|friend]]-services(online multiplayer included) are not affected by this, since the friend-sysmodule wasn't updated. As long as the installed friend-module is for [[10.5.0-30]] no [[10.5.0-30|sysupdate-required]] message will be displayed with using friend-service functionality.

==Change-log==
[http://en-americas-support.nintendo.com/app/answers/detail/a_id/667/p/430/c/267 Official] USA change-log:
* Further improvements to overall system stability and other minor adjustments have been made to enhance the user experience

[http://www.ique.com/3ds/support/update/3dsxlupdate.html Official] China change-log:
* 改善了运行性能和安全保护
** 为了能让用户更舒适地使用我公司的产品，改善了系统的运行性能和安全保护。

[https://www.nintendo.co.jp/support/3ds/system_update/index.html Official] Japan change-log:
* システムの安定性や利便性の向上
** より快適にお楽しみいただけるよう、システムの安定性や利便性を向上させました。

==System Titles==
<fill this in (manually) later>

===Home Menu===
Only one function was updated, the function which loads theme body-data with theme-shuffling enabled. This now does: if(loadedsize > input_max_size)fail. Hence, the latest exploit used by [[menuhax]] at the time of this sysupdate release is now fixed.

RomFS was not changed at all.

===Internet Browser===
Old and New 3DS Internet Browser were updated. Both browserhax_fright_tx3g(New3DS) and spider28hax(Old3DS) were fixed.

As of "Wed, 24 Feb 16 20:00:01 -0500", updating to this browser version is now [[Internet_Browser|required]] since the server browser-version-check pages for Old3DS were updated. This does not affect New3DS currently.

===Socket sysmodule===
Minus changes from an older CTRSDK version(CTRSDK version seems to be the latest now), only one actual SOC-specific function(L_11154c) was updated. The previous version did: <write u8 0x0 to ptr and increase ptr by 1>. The current version removed this so that L_11f9f0() is called with ptr, without writing data to ptr+0/changing ptr.

===IR sysmodule===
Exactly two functions were changed. Originally the two functions for reading I2C-IR registers TXLVL and RXLVL just used i2c_ReadRegister8 then returned the output u8. Now each function reads the register, then returns the output value if it's <=0x40. Otherwise, the register is read again. If the output value is <=0x40, the output value is returned, otherwise 0x0 is returned.

With the original IR hardware the value returned by these registers are always 0x0..0x40 according to the datasheet.

This fixed the vuln described [[3DS_System_Flaws|here]].

===JPN-only titles===
Multiple titles for JPN-only were updated. For System Settings and "Nintendo 3DS Camera", only the manual content was updated(the main contentid in the TMD wasn't changed at all). Other titles were updated for JPN-only too, presumably with the same manual-only change.

===CHN-only titles===
The amiibo Settings system-applet was added, yet is identical to the Taiwan version.

==See Also==
System update report(s):
* [http://yls8.mtheall.com/ninupdates/reports.php?date=02-22-16_07-00-49&sys=ctr]
* [http://yls8.mtheall.com/ninupdates/reports.php?date=02-22-16_07-00-58&sys=ktr]

9.9.0-26

2016-02-26T09:54:43Z

Einstein95: /* System Titles */

The Old3DS+New3DS 9.9.0-26 system update was released on July 13, 2015 for all available regions.

== Change-log ==
Official change-log:
* Further improvements to overall system stability, system security, and other minor adjustments have been made to enhance the user experience

==System Titles==
All of the following titles were updated for Old3DS+New3DS: [[Home Menu]](only for certain regions), [[CVer]], and [[NVer]].

Both platforms' browsers ([[Internet_Browser|spider and SKATER]]) were updated, see [[Internet_Browser|here]] for details.

The Taiwan amiibo Settings system-applet was added.

==See Also==
System update reports:

10.6.0-31

2016-02-24T10:22:18Z

Einstein95: Japan

The Old3DS+New3DS 10.6.0-31 system update was released on February 22, 2016. This Old3DS update was released for the following regions: USA, EUR, JPN, CHN, KOR, and TWN. This New3DS update was released for the following regions: USA, EUR, JPN, CHN, and KOR.

Security flaws fixed: yes, see below.

Titles which uses [[Friend_Services|friend]]-services(online multiplayer included) are not affected by this, since the friend-sysmodule wasn't updated. As long as the installed friend-module is for [[10.5.0-30]] no [[10.5.0-30|sysupdate-required]] message will be displayed with using friend-service functionality.

==Change-log==
[http://en-americas-support.nintendo.com/app/answers/detail/a_id/667/p/430/c/267 Official] USA change-log:
* Further improvements to overall system stability and other minor adjustments have been made to enhance the user experience

[http://www.ique.com/3ds/support/update/3dsxlupdate.html Official] China change-log:
* 改善了运行性能和安全保护
** 为了能让用户更舒适地使用我公司的产品，改善了系统的运行性能和安全保护。

[https://www.nintendo.co.jp/support/3ds/system_update/index.html Official] Japan change-log:
* システムの安定性や利便性の向上
** より快適にお楽しみいただけるよう、システムの安定性や利便性を向上させました。

==System Titles==
<fill this in (manually) later>

===Home Menu===
Only one function was updated, the function which loads theme body-data with theme-shuffling enabled. This now does: if(loadedsize > input_max_size)fail. Hence, the latest exploit used by [[menuhax]] at the time of this sysupdate release is now fixed.

RomFS was not changed at all.

===Internet Browser===
Old and New 3DS Internet Browser were updated. Both browserhax_fright_tx3g (New 3DS) and spider28hax (old 3DS) were fixed.

As of February 23, 2016, updating to this browser version isn't [[Internet_Browser|required]] since the server browser-version-check pages still haven't changed at all(when the installed browser version is >=v10.2).

===Socket sysmodule===
Minus changes from an older CTRSDK version(CTRSDK version seems to be the latest now), only one actual SOC-specific function(L_11154c) was updated. The previous version did: <write u8 0x0 to ptr and increase ptr by 1>. The current version removed this so that L_11f9f0() is called with ptr, without writing data to ptr+0/changing ptr.

===IR sysmodule===
Exactly two functions were changed. Originally the two functions for reading I2C-IR registers TXLVL and RXLVL just used i2c_ReadRegister8 then returned the output u8. Now each function reads the register, then returns the output value if it's <=0x40. Otherwise, the register is read again. If the output value is <=0x40, the output value is returned, otherwise 0x0 is returned.

With the original IR hardware the value returned by these registers are always 0x0..0x40 according to the datasheet.

This fixed the vuln described [[3DS_System_Flaws|here]].

===JPN-only titles===
Multiple titles for JPN-only were updated. For System Settings and "Nintendo 3DS Camera", only the manual content was updated(the main contentid in the TMD wasn't changed at all). Other titles were updated for JPN-only too, presumably with the same manual-only change.

==See Also==
System update report(s):
* [http://yls8.mtheall.com/ninupdates/reports.php?date=02-22-16_07-00-49&sys=ctr]
* [http://yls8.mtheall.com/ninupdates/reports.php?date=02-22-16_07-00-58&sys=ktr]

10.6.0-31

2016-02-24T10:18:49Z

Einstein95: /* Change-log */ China

The Old3DS+New3DS 10.6.0-31 system update was released on February 22, 2016. This Old3DS update was released for the following regions: USA, EUR, JPN, CHN, KOR, and TWN. This New3DS update was released for the following regions: USA, EUR, JPN, CHN, and KOR.

Security flaws fixed: yes, see below.

Titles which uses [[Friend_Services|friend]]-services(online multiplayer included) are not affected by this, since the friend-sysmodule wasn't updated. As long as the installed friend-module is for [[10.5.0-30]] no [[10.5.0-30|sysupdate-required]] message will be displayed with using friend-service functionality.

==Change-log==
[http://en-americas-support.nintendo.com/app/answers/detail/a_id/667/p/430/c/267 Official] USA change-log:
* Further improvements to overall system stability and other minor adjustments have been made to enhance the user experience

[http://www.ique.com/3ds/support/update/3dsxlupdate.html Official] China change-log:
* 改善了运行性能和安全保护
** 为了能让用户更舒适地使用我公司的产品，改善了系统的运行性能和安全保护。

==System Titles==
<fill this in (manually) later>

===Home Menu===
Only one function was updated, the function which loads theme body-data with theme-shuffling enabled. This now does: if(loadedsize > input_max_size)fail. Hence, the latest exploit used by [[menuhax]] at the time of this sysupdate release is now fixed.

RomFS was not changed at all.

===Internet Browser===
Old and New 3DS Internet Browser were updated. Both browserhax_fright_tx3g (New 3DS) and spider28hax (old 3DS) were fixed.

As of February 23, 2016, updating to this browser version isn't [[Internet_Browser|required]] since the server browser-version-check pages still haven't changed at all(when the installed browser version is >=v10.2).

===Socket sysmodule===
Minus changes from an older CTRSDK version(CTRSDK version seems to be the latest now), only one actual SOC-specific function(L_11154c) was updated. The previous version did: <write u8 0x0 to ptr and increase ptr by 1>. The current version removed this so that L_11f9f0() is called with ptr, without writing data to ptr+0/changing ptr.

===IR sysmodule===
Exactly two functions were changed. Originally the two functions for reading I2C-IR registers TXLVL and RXLVL just used i2c_ReadRegister8 then returned the output u8. Now each function reads the register, then returns the output value if it's <=0x40. Otherwise, the register is read again. If the output value is <=0x40, the output value is returned, otherwise 0x0 is returned.

With the original IR hardware the value returned by these registers are always 0x0..0x40 according to the datasheet.

This fixed the vuln described [[3DS_System_Flaws|here]].

===JPN-only titles===
Multiple titles for JPN-only were updated. For System Settings and "Nintendo 3DS Camera", only the manual content was updated(the main contentid in the TMD wasn't changed at all). Other titles were updated for JPN-only too, presumably with the same manual-only change.

==See Also==
System update report(s):
* [http://yls8.mtheall.com/ninupdates/reports.php?date=02-22-16_07-00-49&sys=ctr]
* [http://yls8.mtheall.com/ninupdates/reports.php?date=02-22-16_07-00-58&sys=ktr]

Extdata

2016-02-02T03:51:57Z

Einstein95: /* NAND Shared Extdata */ VersionList info

This page describes the format and encryption of extdata, "extra data" stored on [[SD_Filesystem|SD card]] and [[Flash_Filesystem|NAND]].
At:
* nand/data/<ID>/extdata/<ExtdataID-High>
* sdmc/Nintendo 3DS/<ID0>/<ID1>/extdata/<ExtdataID-High>

(ExtdataID-High is always 00000000 for SD, and always 00048000 for NAND) Some titles can have Quota.dat stored in these directories. The directory-name for these directories is the ExtdataID-Low. Then there's a sub-directory 00000000, which contains the actual extdata. Size and number of files in this dir varies per title.
NAND stores the shared extdata and is structured exactly the same way, see [[Flash Filesystem]].

Extdata image 00000001 contains a VSXE partition for the FST, the actual file data is stored in the subsequent extdata images.

Regular apps can only mount SD extdata using the same extdataID which is stored in the [[NCCH#CXI|CXI]] exheader. Therefore, regular apps which have the exheader extdataID set to zero can't use extdata. This restriction doesn't apply for shared extdata with extdataID high bitmask 0x48000 stored on NAND. System apps with a certain access right can mount arbitrary extdata.
All NAND extdata is shared extdata, while all SD extdata is normal extdata. Thus, normal extdata doesn't exist on NAND, and shared extdata doesn't exist on SD. The extdataID high excluding that bitmask is always zero for shared extdata.

=== Encryption ===

These files are [[AES|encrypted]] with AES-CTR, the keyslot is initialized by [[nand/private/movable.sed|movable.sed]]. The same keyslot is used for the NAND/SD extdata MAC. The NAND extdata images are stored in cleartext. The WCHAR LowPath "/extdata/<ExtdataIDHigh>/<ExtdataIDLow>/<PathToImage>" text path is hashed with SHA-256, including the WCHAR null-terminator. A separate hash is used for Quota.dat. The base CTR seems to be then generated by XORing the calculated hash: CTRword[i] = Hashword[i] ^ Hashword[4+i].

The base CTR is fixed therefore the CTR never changes after each write. Thus it is possible to obtain some cleartext by XORing one file(like newly created extdata) with a newer file, where the newer file overwrote zeros in the original file with non-zero data.

=== Format ===

Extdata uses dual 'partitions' of IVFC hash trees to store data. The order of data in Extdata is as follows:

* AES MAC
* DIFF Header
* Secondary DIFI Partition descriptor
* Primary DIFI Partition descriptor
* Secondary Partition IVFC Hash Tree
* Primary Partition IVFC Hash Tree
* DATA Partition (If applicable)

Only one Partition is active at a given time, this is determined by the DIFF header. Normally the 'data' contained in extdata is stored at level4 of the IVFC hash tree, and hence there are two versions of the 'data' stored in the Extdata image (although only one is 'active'). However if DIFI flags[0] is set, this indicates it is a DATA partition and the 'data' is stored outside the IVFC hash tree, at a relative offset defined by the DIFI partition (in this case there will be only one version of the 'data' stored in the Extdata image).

==== Chain Of Trust ====

The chain of trust in extdata is as follows:

* MAC verifies DIFF Header
* DIFF Selects and verifies via Active DIFI partition descriptor
* Active DIFI partition descriptor points to the location of active IVFC tree (and data if applicable), and provides the hash blob to verify Level 1 of the IVFC hash tree
* Each IVFC level verifies the next level, until Level 4(data).

=== Filesystem ===

Title extdata contains a series of extdata images which comprise an independent file system. The first image (00000001) contains the VSXE (FST) partition, and subsequent images each containing a single file. Other extdata images, such as Quota.dat and [[Title Database|database extdata]], exist independent of a FS.

==== VSXE ====
{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x0
| 4
| Database Magic ("VSXE")
|-
| 0x4
| 4
| Magic Number (0x30000)
|-
| 0x8
| 8
| Data Table Offset
|-
| 0x10
| 8
| File Size, divided by the value at 0x18
|-
| 0x18
| 8
| Usually 0x1000
|-
| 0x20
| 8
| Unknown
|-
| 0x28
| 4
| 'Action' made on most recently mounted Extdata image
|-
| 0x2C
| 4
| Unknown
|-
| 0x30
| 4
| ID of most recently mounted Extdata image
|-
| 0x34
| 4
| Unknown
|-
| 0x38
| 0x100
| Mount path, from most recently mounted Extdata image
|}

Data Table:

{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x0
| 0x38
| Unknown
|-
| 0x38
| 8
| Folder Table Offset
|}

===== Folder Table =====

Header:
{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x0
| 0x4
| Equivalent to the Used Folder Entries + 1
|-
| 0x4
| 4
| Equivalent to the Maximum Folder Entries + 1
|-
| 0x8
| 0x20
| Unused
|}

Folder Entry:
{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x0
| 0x4
| Parent Folder Index
|-
| 0x4
| 0x10
| Folder Name (ASCII)
|-
| 0x14
| 0x4
| Previous Folder's Index
|-
| 0x18
| 0x4
| Last Folder Index Entry
|-
| 0x1C
| 0x4
| Last File Index Entry
|-
| 0x20
| 0x4
| Unknown
|-
| 0x2C
| 0x4
| Unknown
|}
* The folder id/index for the current entry is related to it's position in the Folder table. The folder table is accessed like an array of 0x28 byte chunks, with the header consuming index = 0, root directory at index = 1, and the subsequent folder entries following.

===== File Table =====

The location of the File table is calculated by aligning the end offset of the folder table to 0x1000 bytes.

Header:
{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x0
| 0x4
| Equivalent to the Used File Entries + 1
|-
| 0x4
| 4
| Equivalent to the Maximum File Entries + 1
|-
| 0x8
| 0x28
| Unused
|}

Folder Entry:
{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x0
| 0x4
| Parent Folder Index
|-
| 0x4
| 0x10
| File Name (ASCII)
|-
| 0x14
| 0x4
| Previous File's Index
|-
| 0x18
| 0x4
| Unknown
|-
| 0x1C
| 0x4
| Unknown
|-
| 0x20
| 0x8
| Unique Extdata ID
|-
| 0x28
| 0x4
| Unknown
|-
| 0x2C
| 0x4
| Unknown
|}
* The file id/index for the current entry is related to it's position in the File Table, much like the folder entries in the Folder Table. The file table is accessed like an array of 0x30 byte chunks, with the header consuming index = 0, and the subsequent file entries following. The relationship between the index value of the file entry, and the actual file name of the extdata image that contains it it = index+1. For instance icon (the only file in every extdata), comes right after the header, with an index value of '1', and the icon is stored in extdata image '00000002'.

* The Unique Extdata ID, is the same value found in the DIFF header of the referenced extdata image for that file. The value changes most times the file in question is modified. When mounting an extdata image in the VSXE filesystem, if the file's extdata image doesn't have the expected Unique Extdata ID, it won't be mounted.

==== VSXE Filesystem structure ====

When extdata is created, these are *always* created regardless of whether the title actually uses them.

* /icon This file contains the extdata [[SMDH|icon]] displayed in data management. This icon can only be written to by titles when creating extdata, titles would have to recreate extdata to change the icon. This file can't be read directly, instead it is read via [[FS:ReadExtSaveDataIcon]].
* /user/ Contains the title's actual extdata files.
* /boss/ Can contain [[SpotPass]] content. SpotPass content can only be downloaded to this /boss directory.

User extdata and SpotPass extdata use separate [[FS:OpenArchive|mount]] points at /user and /boss. Therefore one mount can't access the other directory, and also can't access /icon.(The title's SpotPass extdata can be mounted by the title itself, if it uses SpotPass)

Other optional but notable directories include:
* /user/ExBanner This directory can optionally store [[Extended_Banner| extended banners]]. When this is available, this banner is displayed instead of the [[CXI]] ExeFS banner. COMMON.bin stores the common exbanner, while <regionlang_code>.bin stores an optional separate region/language specific banner.(regionlang_code can be "JPN_JP", "USA_EN", etc)

=== Extdata without an independent FS ===

==== Quota.dat ====

* This is contained in the Quota.dat extdata image.

{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x0
| 4
| Magic ("QUOT")
|-
| 0x4
| 4
| Magic Number (0x30000)
|-
| 0x8
| 8
| Unknown
|-
| 0x10
| 0x38
| Unknown
|}
It's unknown what this is used for.

==== Database Extdata ====

See [[Title Database|here]].

=== SD Extdata ===
Usually the ExtdataID low is in the format '00<Unique ID>'

{| class="wikitable" border="1"
|-
! JPN ExtdataID
! USA ExtdataID
! EUR ExtdataID
! Description
! Extdata images
|-
| 00000082
| 0000008f
| 00000098
| [[Home Menu]] extdata, this contains home-menu savedata and cached icons for applications.
|
|-
| 00000200
| 00000210
| 00000220
| [[System_Settings|System Settings]] extdata added with [[2.0.0-2]].
|
|-
| 00000207
| 00000217
| 00000227
| [[Mii Maker]], contains an ExBanner
| [https://dl.dropbox.com/u/20520664/extdata00000217.zip cleartext]
|-
| 00000208
| 00000218
| 00000228
| Streetpass Mii Plaza
| 11 mb big!
|-
| 00000209
| 00000219
| 00000229
| [[eShop]], contains store music in AAC format.
|
|-
| 0000020d
| 0000021d
| 0000022d
| Face Raiders, likely contains an ExBanner
|
|-
| 0000020b
| 0000021b
| 0000022b
| Nintendo Zone
|
|-
| 000002cc
| 000002cd
| 000002ce
| [[Home Menu]] theme
|
|-
| ?
| 000004aa
| 000004ab
| Nintendo Video Extra Data
This is where the video files are stored, and [[Nintendo_Video|includes]] the thumbnail, the description, and possibly some checksum info in each video file stored in the extdata images. There are always 9 files within the subdirectory "00000000" of this folder, even without any videos downloaded. The files are "00000001" - "00000009", and "00000003" - "00000008" have the same filesize of 50.7 MB. It is possible to restore the older videos by overwriting all the files within this directory. Provided of course you have made a backup of the files before hand, by copying all the files within this directory to your computer. As far I'm aware its not possible to mix and match the files in order to get certain videos in one grouping, ie. having all 3 Zelda orchestral recordings in one group of 4 Nintendo videos.
|
|-
|00000306
|00000308
|00000307
|Mario Kart 7
|
|-
| 0000030b
| 0000030d
| 0000030c
| Nintendogs + Cats
|
|-
| 00000326
| 00000326
| 00000326
| Pokédex 3D
|
|-
| 00000305
| 0000032d
| 0000033c
| Super Street Fighter IV 3D
|
|-
| 00000328
| 00000358
| 0000033b
| Ridge Racer 3D
|
|-
| ?
| 0000034d
| 00000402
| Samurai Warriors Chronicles
|
|-
| ?
| 0000034f
| 0000038a
| Dead or Alive Dimensions
|
|-
| 00000481
| N/A
| N/A
| Monster Hunter Tri G (Download-Quests)
|
|-
| ?
| 00000517
| 00000518
| Swapnote
|
|-
| ?
| 00000725
| ?
| Ambassador Certificate
|
|-
| ?
| 00000863
| ?
| Animal Crossing: New Leaf
|
|-
| ?
| ?
| 00000a86
| Professor Layton and the Miracle Mask
|
|-
| ?
| ?
| 00000c24
| Denpa men
|
|-
| 00000c73
| 00000c73
| 00000c73
| Save Data Transfer Tool
|
|-
| ?
| ?
| 00000d9a
| Donkey Kong Country™ Returns 3D: Trailer
|
|-
| ?
| 00000a85
| 00000f1e
| Professor Layton and the Azran legacy
|
|-
| ?
| 00000edf
| 00000ee0
| Super Smash Bros. for Nintendo 3DS
|
|-
| ?
| 00000f14
| ?
| Phoenix Wright: Ace Attorney - Dual Destinies
|
|-
| ?
| 00001007
| 00001005
| Professor Layton vs Phoenix Wright: Ace Attorney
|
|-
| ?
| ?
| 00000ea6
| Etrian Odyssey IV
|
|-
| 000014d1
| 000014d1
| 000014d1
| [[Home Menu]] badge
|
|-
| 0000165c
| 0000165c
| 0000165c
| [[Home Menu]] saved theme layouts
|
|}

=== NAND Shared Extdata ===
{| class="wikitable" border="1"
|-
! ExtdataID
! Description
|-
| 0xe0000000
| Home Menu attempts to open this archive during boot, if [[FS:OpenArchive]] doesn't return an error Home Menu seems to then launch the [[System Transfer]] application. Home Menu doesn't actually use this archive at all except for checking whether it exists.
|-
| 0xf0000001
| NAND JPEG/MPO files and phtcache.bin from the camera application are stored here. This also contains UploadData.dat.
|-
| 0xf0000002
| NAND M4A files from the sound application are stored here
|-
| 0xf0000009
| ?
|-
| 0xf000000b
| Contains idb.dat, idbt.dat, gamecoin.dat, ubll.lst, CFL_DB.dat, and CFL_OldDB.dat. These files contain cleartext [[Mii_Maker|Miis]] and some data relating (including cached ICN data) to Play/Usage Records.
|-
| 0xf000000c
| Contains bashotorya.dat and bashotorya2.dat.
|-
| 0xf000000d
| ?
|-
| 0xf000000e
| Contains [[VersionList|versionlist.dat]], used by Home Menu for the software update notification added with [[7.0.0-13]].
|}

==== Shared Extdata 0xf000000b gamecoin.dat ====
{| class="wikitable" border="1"
|-
! Offset
! Size
! Description
|-
| 0x0
| 0x4
| Magic number: 0x4F00
|-
| 0x4
| 0x2
| Total Play Coins
|-
| 0x6
| 0x2
| Total Play Coins obtained on the date stored below. When the below date does not match the current date, this field is reset to zero, then the date(and other fields) are updated. Once this value is >=10, no more Play Coins can be obtained until the current date changes.
|-
| 0x8
| 0x4
| Total step [[PTM:GetTotalStepCount|count]] at the time a new Play Coin was obtained.
|-
| 0xC
| 0x4
| Step count for the day the last Play Coin was obtained, for that day's step count(same as the step count displayed by home-menu when this file was updated).
|-
| 0x10
| 0x2
| Year
|-
| 0x12
| 0x1
| Month
|-
| 0x13
| 0x1
| Day
|}

The above date stores the last time new Play Coin(s) were obtained. The contents of this file is updated by home-menu. [[PTM:GetTotalStepCount]] is not checked constantly, after home-menu boot this is only checked when waking from sleep-mode. Each time home-menu updates the contents of this file, home-menu will set the Play Coin total to 300 if it's higher than the 300 Play Coin limit.

[[Home Menu]] loads this file / opens this archive during [[Home Menu|startup]]. When accessing this file fails, like when the file/archive is corrupted(or at least on older system-versions), the result is a brick due to Home Menu using [[SVC|svcBreak]]. [[User:Yellows8|Yellows8]] bricked a 3DS this way due to corruption via invalid [[FSFile:Write]] flush flags. When opening this extdata archive(0xf000000b) fails, Home Menu executes svcBreak.

=== Tools ===

* [https://github.com/ps3hen/ctr_toolkit/tree/master/extdata_tool extdata_tool] - Extract/verifies standalone extdata images and title extdata FS.

3DS Userland Flaws

2016-01-31T07:35:47Z

Einstein95: /* Non-system applications */ It's a crash, but no idea if it's a useful one. Chucking it under useless for now.

This page lists vulnerabilities / exploits for 3DS applications and applets. Exploiting these initially results in ROP, from that ROP one can then for example try exploiting [[3DS_System_Flaws|system]] flaw(s).

=Non-system applications=
{| class="wikitable" border="1"
|-
! Application name
! Summary
! Description
! Fixed in app/system version
! Last app/system version this flaw was checked for
! Timeframe info related to this was added to wiki
! Timeframe this vuln was discovered
! Vuln discovered by
|-
| Cubic Ninja
| Map-data stack smash
| See [[Ninjhax|here]] regarding Ninjhax.
| None
| App: Initial version. System: [[10.4.0-29]].
| Ninjhax release
| July 2014
| [[User:smea|smea]]
|-
| The Legend of Zelda: Ocarina of Time 3D
| UTF-16 name string buffer overflow via unchecked u8 length field
| The u8 at offset 0x2C in the savefile is the character-length of the UTF-16 string at offset 0x1C. When copying this string, it's essentially a memory-copy with lenval*2, not a string-copy. This can be used to trigger buffer overflows at various locations depending on the string length.
* When value is >=0x6E it crashes when saving the saveslot, this causes a stack-smash however it normally crashes before it returns from the function which had the stack-frame overwritten.
* With value >=0x9A, it crashes via stack-smash in-game once any dialogs are opened(touching buttons on the touch-screen can trigger it too).
* Length value>=0xCD causes a crash while loading the saveslot, via a heap buffer overflow. This buf-overflow overwrites a heap memchunk following the allocated buffer. When the first 16-bits overwriting that heap memchunk is not the memchunk magic-number(0x7373), the mem-alloc code will just return a NULL ptr which later results in a crash. When the magic-number is valid, the mem-alloc code will continue to attempt to parse the memchunk, which may crash depending on the data which overwrote the memchunk. This heap code is separate from the CTRSDK heap code. Exploiting this doesn't seem to be possible: since the heap code actually verifies that the magic-number for the next/prev memchunk ptrs are correct(unlike CTRSDK), it's not possible to change those ptrs to useful arbitrary addresses outside of savedata(like with triggering a write to a c++ object ptr which later is used with a vtable func-call, this is what one would do with CTRSDK heap here).

On March 11, 2015, an exploit using this vuln was released, that one was intended for warez/etc. The following exploit wasn't released before then mainly because doing so would (presumably) result in the vuln being fixed. The following old exploit was released on March 14, 2015: [https://github.com/yellows8/oot3dhax].
| None
| App: Initial version. System: [[10.4.0-29]].
| March 11, 2015
| Around October 22, 2012
| [[User:Yellows8|Yellows8]]
|-
| Super Smash Bros 3DS
| Buffer overflow in local-multiplayer beacon handling.
| See [[smashbroshax|here]].
| None
| See [[smashbroshax|here]]. System: [[10.3.0-28]].
| Time of exploit release.
| See [[smashbroshax|here]].
| [[User:Yellows8|Yellows8]]
|}

==Useless crashes / applications which were fuzzed==
* Pushmo (3DSWare), QR codes: level name is properly limited to 16 characters, game doesn't crash with a longer name. The only possible crashes are triggered by out-of-bounds array index values, these crashes are not exploitable due to the index value being 8bit.

* Pyramids (3DSWare), QR codes: no strings. Only crashes are from out-of-bounds values (like background ID) and are not exploitable.

* [https://github.com/yellows8/mm3d_re The Legend of Zelda: Majora's Mask 3D]

* "The Legend of Zelda: A Link Between Worlds" and "The Legend of Zelda: Tri Force Heroes": these games don't crash at all when the entire save-file(minus constant header data) is overwritten with /dev/random output / 0xFF-bytes. All of the CRC32s were updated for this of course.

* Disney Infinity crashes when all savedata overwritten with /dev/urandom. No checksums. 0xFF bytes don't cause a crash.

=System applications=
{| class="wikitable" border="1"
|-
! Summary
! Description
! Fixed in version
! Last version this flaw was checked for
! Timeframe this was discovered
! Discovered by
|-
| 3DS [[System Settings]] DS profile string stack-smash
| Too long or corrupted strings (01Ah 2 Nickname length in characters 050h 2 Message length in characters) in the NVRAM DS user settings (System Settings->Other Settings->Profile->Nintendo DS Profile) cause it to crash in 3DS-mode due to a stack-smash. The DSi is not vulnerable to this, DSi launcher(menu) and DSi System Settings will reset the NVRAM user-settings if the length field values are too long(same result as when the CRCs are invalid). TWL_FIRM also resets the NVRAM user-settings when the string-length(s) are too long.
| [[7.0.0-13]]
| [[7.0.0-13]]
| 2012
| [[User:Ichfly|Ichfly]]
|}

=System applets=
{| class="wikitable" border="1"
|-
! Summary
! Description
! Fixed in version
! Last version this flaw was checked for
! Timeframe this was discovered
! Discovered by
|-
| [[Home Menu]] [[System_SaveData|NAND-savedata]] Launcher.dat icons
| The homemenu code processing the titleid list @ launcherdat+8 copies those titleIDs to another buffer, where the offset relative to that buffer is calculated using the corresponding s8/s16 entries. Those two values are not range checked at all. Hence, one can use this to write u64(s) with arbitrary values to before/after this allocated output buffer. See [[Home_Menu|here]] regarding Launcher.dat structure.

This can be exploited(with Launcher.dat loading at startup at least) by using a s16 for the icon entry with value 0xFFEC(-20)(and perhaps more icons with similar s16 values to write multiple u64s). The result is that the u64 value is written to outbuf-0xA0, which overwrites object+0(vtable) and object+4(doesn't matter here) for an object that gets used a bit after the vulnerable function triggers. The low 32bits of the u64 can then be set to the address of controlled memory(either outbuf in regular heap or the entire launcherdat buffer in linearmem), for use as a fake vtable in order to get control of PC. From there one can begin ROP via vtable funcptrs to do a stack-pivot(r4=objectaddr at the time the above object gets used).

Originally this vuln could only be triggered via Launcher.dat at Home Menu startup, right after Launcher.dat gets loaded + memory gets allocated, once the file-format version code is finished running. Starting with v9.6 this can be triggered when loading layouts from SD extdata as well. The vuln itself triggers before the layout data is written to Launcher.dat, but it doesn't seem to be possible to overwrite anything which actually gets used before the function which writes Launcher.dat into the layout gets called.

Home Menu has some sort of fail-safe system(or at least on v9.7) when Home Menu crashes due to Launcher.dat(this also applies for other things with Home Menu): after crashing once, Home Menu resets Launcher.dat to a state where it no longer crashes anymore. However, note that any exploits using this which hang/etc without crashing will still brick the system. '''Hence, attempting anything with this on physnand without hw-nand-access isn't really recommended.'''
| None
| [[10.3.0-28|10.3.0-X]]
| May 14, 2015
| [[User:Yellows8|Yellows8]]
|-
| [[Home Menu]] theme-data decompression buffer overflow ([[menuhax|themehax]])
| The only func-call size parameter used by the theme decompression function is one for the compressed size, none for the decompressed size. The decompressed-size value from the LZ header is used by this function to check when to stop decompressing, but this function itself has nothing to verify the decompressed_size with. The code calling this function does not check or even use the decompressed size from the header either.

This function is separate from the rest of the Home Menu code: the function used for decompressing themes is *only* used for decompressing themes, nothing else. There's a separate decompression function in Home Menu used for decompressing everything else.

That other decompression function in Home Menu handles decompression size properly(decompressed size check for max buffer size is done by code calling the other function, not in the function itself). Unlike the other function, the theme function supports multiple LZ algorithms, but the one which actually gets used in official themes is the same one supported by the other function anyway.

See also [[menuhax|here]].

With [[10.2.0-28|10.2.0-X]] Home Menu, the only code change was that the following was added right after theme-load and before actual decompression: "if(<get_lzheader_decompressed_size>(compressed_buf) > 0x150000)<exit>;". This fixed the vuln.
| [[10.2.0-28|10.2.0-X]]
| [[10.2.0-28|10.2.0-X]]
| December 22, 2014
| [[User:Yellows8|Yellows8]], [[User:Myria|Myria]] independently (~spring 2015)
|-
| Webkit/web-browser bugs
| spider has had at least three different code-execution exploits. Majority of them are use-after-free issues. See also [[browserhax|here]].
|
|
| 2013?
| A lot of people.
|}

==Useless crashes==
Old3DS system web-browser:
* 2^32 characters long string(still affects latest spider version as of system-version v10.3): this is similar to the vulnerability fixed [http://git.chromium.org/gitweb/?p=external/Webkit.git;a=commitdiff;h=ec471f16fbd1f879cb631f9b022fd16acd75f4d4 here], concat-large-strings-crash2.html triggers a crash which is about the same as the one triggered by a 2^32 string. Most of the time this vulnerability will cause a memory page permissions fault, since the WebKit code attempts to copy the string text data to the output buffer located in read-only [[CRO0|CRO]] heap memory. The only difference between a crash triggered by a 2^32 string and the concat-large-strings-crash2.html crash is at the former copies the string data using the original string length(like 1 text character for "x", 4 for "xxxx") while the latter attempts to copy >12MB. In some ''very'' rare cases a thread separate from the string data-copy thread will crash, this might be exploitable. However, this is mostly useless since it rarely crashes this way.

* Trying to directly load a page via the browser "URL" option with [https://github.com/yellows8/3ds_browserhax_common webkitdebug] setup, causes a crash to trigger in oss.cro due to an use-after-free being caught with webkitdebug. This is presumably some sort of realloc() issue in the libcurl version used by the <={v10.2-v10.3} browser. This happens with *every* *single* *page* one tries to load via the "URL" option, but not when loading links on the current page, hence this is probably useless. A different use-after-free with realloc triggers with loading any page at all regardless of method too(libcurl probably).

* This WebKit build has ''a lot'' of crash-trigger bugs that only happen with [https://github.com/yellows8/3ds_browserhax_common webkitdebug] completely setup(addr accesses near 0x0), with ''just'' trying to load any page at all.

VersionList

2016-01-27T00:19:25Z

Einstein95:

Used by the system menu to notify the user of updates.
{|class="wikitable sortable"
!Title ID
!Version
!Name
!Country
|-
|0004000000037500
|21
|Tom Clancy's Ghost Recon®
Shadow Wars
|EU
|-
|0004000000038b00
|410
|Resident Evil™
The Mercenaries 3D
|EU
|-
|000400000004a300
|400
|Petz Fantasy 3D
|EU
|-
|0004000000056c00
|890
|うごくメモ帳 3D
|JP
|-
|000400000005e300
|820
|熱血硬派くにおくんすぺしゃる
|JP
|-
|000400000005ee00
|10
|Resident Evil™ Revelations
|EU
|-
|0004000000066300
|400
|Mighty Switch Force!
|US
|-
|000400000006d100
|0
|Luxor
|EU
|-
|000400000006d700
|1
|Pets Resort 3D
|EU
|-
|000400000006e400
|400
|スーパーマリオブラザーズ
|JP
|-
|000400000006e500
|400
|Super Mario Bros.™
|US
|-
|000400000006e600
|400
|Super Mario Bros.™
|EU
|-
|000400000006ed00
|410
|メトロイド
|JP
|-
|000400000006ee00
|400
|Metroid™
|US
|-
|000400000006ef00
|400
|Metroid™
|EU
|-
|000400000006f000
|410
|ゼルダの伝説1
|JP
|-
|000400000006f100
|400
|The Legend of Zelda™
|US
|-
|000400000006f200
|400
|The Legend of Zelda™
|EU
|-
|000400000006f600
|400
|レッキングクルー
|JP
|-
|000400000006f900
|400
|マリオオープンゴルフ
|JP
|-
|000400000006fa00
|400
|NES Open Tournament Golf™
|US
|-
|000400000006fb00
|400
|NES Open Tournament Golf
|EU
|-
|000400000006ff00
|400
|ドンキーコングJR.
|JP
|-
|0004000000070000
|400
|Donkey Kong Jr.™
|US
|-
|0004000000070200
|400
|バルーンファイト
|JP
|-
|0004000000070500
|800
|アイスクライマー
|JP
|-
|0004000000070800
|400
|リンクの冒険
|JP
|-
|0004000000070900
|400
|Zelda II™ -
The Adventure of Link™
|US
|-
|0004000000070a00
|400
|Zelda II: The Adventure of Link
|EU
|-
|0004000000071100
|400
|ヨッシーのたまご
|JP
|-
|0004000000073c00
|401
|My Foal 3D
|EU
|-
|0004000000075f00
|1
|BIT.TRIP SAGA
|EU
|-
|0004000000077500
|400
|ラブプラスTOOLS
|JP
|-
|0004000000077e00
|400
|電波人間のRPG
|JP
|-
|000400000007a300
|10
|Harvest Moon:
The Tale of Two Towns
|EU
|-
|000400000007fd00
|400
|VVVVVV
|US
|-
|0004000000081100
|420
|Colors! 3D
|US
|-
|0004000000084b00
|10
|Cats and Dogs 3D
Pets at play
|EU
|-
|0004000000086800
|0
|推拉方塊(繁體中文版)
|TW
|-
|0004000000088400
|0
|Columns™
|EU
|-
|0004000000089200
|400
|夜の魔人といくさの国
～さまよえるヴァンピール～
|JP
|-
|000400000008b200
|420
|Coaster Creator 3D
|US
|-
|000400000008d100
|840
|Bit Boy!! ARCADE
|US
|-
|000400000008e300
|410
|Marvel Pinball 3D
|US
|-
|000400000008fc00
|20
|Sonic & All-Stars Racing
Transformed™
|EU
|-
|000400000008fe00
|830
|1001 Spikes
|US
|-
|0004000000090000
|410
|Johnny Kung Fu™
|US
|-
|0004000000099700
|4070
|レコチョク
|JP
|-
|000400000009b800
|0
|Dr. Robotnik's
Mean Bean Machine™
|EU
|-
|000400000009bb00
|0
|Shining Force™: The Sword of Hajya
|EU
|-
|000400000009d300
|10
|Riding Stables 3D
|EU
|-
|000400000009d600
|1830
|ドラゴンクエストⅩ
冒険者のおでかけ便利ツール
|JP
|-
|000400000009da00
|400
|悪魔城ドラキュラ
|JP
|-
|000400000009df00
|0
|Dig Dug
|EU
|-
|000400000009e300
|0
|Super C
|EU
|-
|000400000009e700
|10
|Crash City Mayhem
|EU
|-
|000400000009ea00
|410
|Turtle Tale
|US
|-
|00040000000a1200
|0
|Mega Man™ 4
|EU
|-
|00040000000a1400
|0
|Mega Man™ 5
|EU
|-
|00040000000a2f00
|420
|AiRace Speed
|US
|-
|00040000000a5400
|810
|Mutant Mudds™
|EU
|-
|00040000000a7900
|410
|電波人間のRPG2
|JP
|-
|00040000000a9000
|0
|Nintendo presents
New Style Boutique™
|EU
|-
|00040000000aa800
|400
|Fractured Soul
|US
|-
|00040000000aba00
|0
|Fractured Soul
|US
|-
|00040000000ad400
|0
|ぐるっとスプラッシュ!
|JP
|-
|00040000000aec00
|0
|The Beet Party:
Jurassic Fridge
|EU
|-
|00040000000b0f00
|830
|YouTube
|US
|-
|00040000000b4700
|3020
|どこでも本屋さん
|JP
|-
|00040000000b4f00
|400
|Fallblox™
|EU
|-
|00040000000b8f00
|400
|Gunman Clive
|US
|-
|00040000000bb100
|0
|Viking Invasion 2 -
Tower Defense
|EU
|-
|00040000000bb400
|10
|The Beet Party:
UnderWaterMelon
|EU
|-
|00040000000bba00
|0
|Sonic the Hedgehog™
|EU
|-
|00040000000bd200
|0
|ファミコン探偵倶楽部 PARTⅡ
うしろに立つ少女(前後編)
|JP
|-
|00040000000bea00
|0
|엽기토끼 시간여행 3D
|KR
|-
|00040000000bec00
|10
|레이맨 오리진
|KR
|-
|00040000000c1700
|410
|AiRace Speed
|EU
|-
|00040000000c2900
|420
|Shantae and the Pirate's Curse
|US
|-
|00040000000c3400
|400
|モンスターハンター3(トライ)G
データ移行プログラム
|JP
|-
|00040000000c3a00
|430
|デビルサバイバー2
ブレイクレコード
|JP
|-
|00040000000c4200
|0
|Rhythm Thief & the Emperor’s Treasure™
|KR
|-
|00040000000c5200
|0
|Reel Fishing® 3D
Paradise Mini
|EU
|-
|00040000000c5700
|410
|Real Heroes: Firefighter 3D
|US
|-
|00040000000c6f00
|410
|MH3U Data Transfer Program
|US
|-
|00040000000c7100
|410
|Monster Hunter™ 3 Ultimate
Data Transfer Program
|EU
|-
|00040000000c7700
|410
|Real Heroes: Firefighter 3D
|EU
|-
|00040000000c7f00
|0
|톰 클랜시의 고스트 리콘 섀도우 워즈
|KR
|-
|00040000000c8000
|0
|톰 클랜시의 스플린터 셀 3D
|KR
|-
|00040000000c8900
|0
|짜릿! 우물로 드롭
|KR
|-
|00040000000c8a00
|0
|밀고 떨구고
|KR
|-
|00040000000c8d00
|410
|Monster High™
Skultimate Roller Maze™
|EU
|-
|00040000000c9e00
|840
|実写でちびロボ!
|JP
|-
|00040000000cbb00
|0
|Picdun 2: Witch's Curse
|EU
|-
|00040000000cbd00
|420
|みんなのおしゃべりチャット
|JP
|-
|00040000000cca00
|0
|悄悄互動日記
|TW
|-
|00040000000ccd00
|820
|YouTube
|EU
|-
|00040000000cd600
|10
|Sudoku by Nikoli
|KR
|-
|00040000000cd700
|10
|Bird Mania 3D
|KR
|-
|00040000000cd800
|0
|SpeedX 3D
|KR
|-
|00040000000cef00
|410
|Swords & Soldiers 3D
|EU
|-
|00040000000cfd00
|0
|SENRAN KAGURA Burst
|KR
|-
|00040000000d0600
|430
|Swords & Soldiers 3D
|US
|-
|00040000000d1700
|0
|Air Battle Hockey 3D
|EU
|-
|00040000000d1800
|0
|Bloody Vampire
|EU
|-
|00040000000d2400
|0
|Witch & Hero
|EU
|-
|00040000000d2900
|420
|だるめしスポーツ店
|JP
|-
|00040000000d2e00
|0
|MONSTER HUNTER 3 ULTIMATE
|KR
|-
|00040000000d2f00
|0
|Mario and Donkey Kong™:
Minis on the Move
|EU
|-
|00040000000d3000
|830
|YouTube
|JP
|-
|00040000000d4800
|0
|My Riding Stables 3D–
Jumping for the Team
|EU
|-
|00040000000d4a00
|420
|Star Wars Pinball
|EU
|-
|00040000000d7700
|0
|Jewel Master Atlantis 3D
|EU
|-
|00040000000d7b00
|410
|3D スーパーハングオン
|JP
|-
|00040000000d8c00
|0
|@SIMPLE DLシリーズ Vol.10
THE浮気彼氏Xmas中止のお知らせ
|JP
|-
|00040000000d9300
|0
|The Beet Party:
Beet Poets
|EU
|-
|00040000000d9400
|0
|The Beet Party:
Unidentified Flying Waffle
|EU
|-
|00040000000db700
|c80
|@SIMPLE DLシリーズ Vol.15
THE 麻雀
|JP
|-
|00040000000db800
|450
|KORG M01D
|JP
|-
|00040000000de100
|10
|Lola's Math Train
|EU
|-
|00040000000e6100
|0
|Akari by Nikoli
|KR
|-
|00040000000e6800
|420
|Star Wars Pinball
|US
|-
|00040000000e8200
|0
|Groove Heaven
|EU
|-
|00040000000e9300
|410
|@SIMPLE DLシリーズ Vol.14
THE 脱出ゲーム～裏切りの密室～
|JP
|-
|00040000000e9800
|410
|3D 獣王記
|JP
|-
|00040000000ea800
|0
|SpeedX 3D Hyper Edition
|EU
|-
|00040000000eaf00
|0
|THE "DENPA" MEN 2:
Beyond the Waves
|EU
|-
|00040000000eb000
|1050
|ソリティ馬
|JP
|-
|00040000000edc00
|410
|Dillon's Rolling Western
The Last Ranger
|KR
|-
|00040000000edd00
|420
|Dillon's Rolling Western
|KR
|-
|00040000000ee600
|410
|どぎめぎインリョクちゃん
|JP
|-
|00040000000ee900
|410
|3D ベア･ナックル怒りの鉄拳
|JP
|-
|00040000000f7300
|0
|新・世界樹の迷宮ミレニアムの少女 (日文版)
|TW
|-
|00040000000fb900
|410
|3D ギャラクシーフォースⅡ
|JP
|-
|00040000000fc700
|0
|Donkey Kong Country Returns 3D
(英文版)
|TW
|-
|00040000000fc800
|1060
|honto for ニンテンドー3DS
|JP
|-
|00040000000fc900
|0
|魔女與勇者
|TW
|-
|00040000000fd300
|0
|逆轉裁判 5 (英文版)
|TW
|-
|00040000000fe200
|10
|Talking Phrasebook -
7 Languages
|US
|-
|0004000000103500
|410
|@SIMPLE DLシリーズ Vol.21
THE 鑑識官 File.1
|JP
|-
|0004000000103600
|410
|@SIMPLE DLシリーズ Vol.23
THE 鑑識官 File.2
|JP
|-
|0004000000104300
|1
|マイティースイッチフォース!
|JP
|-
|0004000000105800
|10
|世界樹の迷宮Ⅳ 伝承の巨神 (日文版)
|TW
|-
|0004000000105900
|10
|Etrian Odyssey Ⅳ Legends of the Titan (英文版)
|TW
|-
|0004000000105c00
|0
|爆走老精靈
|TW
|-
|0004000000108d00
|820
|Retro City Rampage: DX
|EU
|-
|0004000000109800
|28e0
|ニコニコ
|JP
|-
|000400000010cf00
|0
|Sonic Lost World™ (英文版)
|TW
|-
|000400000010d200
|820
|Retro City Rampage™: DX
|US
|-
|000400000010db00
|0
|邦妮早午餐
|TW
|-
|000400000010dc00
|0
|初音未來 Project mirai 2 (日文版)
|TW
|-
|000400000010e600
|420
|遊戯王ARC-Vオフィシャル
カードゲームかんたんマスター!
|JP
|-
|0004000000111100
|820
|Grinsia
|US
|-
|0004000000112300
|420
|Cubit The Hardcore Platformer Robot
|US
|-
|0004000000115700
|0
|The Legend of Zelda:
A Link Between Worlds (英文版)
|TW
|-
|0004000000119300
|0
|Mario Party: Island Tour (英文版)
|TW
|-
|0004000000119a00
|1040
|Shovel Knight
|US
|-
|0004000000120100
|420
|3D ファンタジーゾーン
オパオパブラザーズ
|JP
|-
|0004000000121d00
|820
|3D ファンタジーゾーンⅡダブル
|JP
|-
|0004000000123200
|0
|Kirby: Triple Deluxe (英文版)
|TW
|-
|0004000000124000
|410
|The Keep
|US
|-
|0004000000124300
|410
|Cubit The Hardcore
Platformer Robot
|EU
|-
|0004000000124a00
|c50
|リアル脱出ゲーム×ニンテンドー
3DS 超破壊計画からの脱出
|JP
|-
|0004000000127600
|401
|Alien On The Run
|US
|-
|0004000000128900
|410
|3D アウトラン
|JP
|-
|0004000000129600
|410
|AiRace Xeno
|EU
|-
|0004000000129f00
|440
|KORG DSN-12
|JP
|-
|000400000012bf00
|410
|AiRace Xeno
|US
|-
|000400000012cb00
|c30
|Shovel Knight
|EU
|-
|000400000012d000
|820
|Bit Boy!! ARCADE
|EU
|-
|000400000012e700
|430
|Moon Chronicles™
|US
|-
|0004000000130300
|c40
|拡散性ミリオンアーサー
|JP
|-
|0004000000132900
|0
|逆轉裁判123 / Phoenix Wright:
Ace Attorney Trilogy(日英版)
|TW
|-
|0004000000134600
|410
|バッジとれ～るセンター
|JP
|-
|0004000000136a00
|0
|鐵道日本！長良川鐵道出發篇
(繁體中文版)
|TW
|-
|0004000000138900
|410
|Proun+
|EU
|-
|0004000000139c00
|1080
|みんなでまもって騎士
姫のトキメキらぷそでぃ
|JP
|-
|000400000013d000
|820
|ドラゴンボールヒーローズ UM2
ゲームデータ引継ぎアプリ
|JP
|-
|000400000013d100
|1470
|ドラゴンクエストⅩ オンライン
|JP
|-
|000400000013ea00
|420
|Comic Workshop
|US
|-
|000400000013ee00
|430
|Woah Dave!
|US
|-
|000400000013f900
|420
|Glory of Generals
|US
|-
|0004000000140f00
|2cc0
|ドラゴンクエストⅩ
冒険者のおでかけ超便利ツール
|JP
|-
|0004000000141000
|830
|ポケとる
|JP
|-
|0004000000141a00
|0
|MONSTER HUNTER 4G(日文版)
|TW
|-
|0004000000141f00
|10
|Fossil Fighters™: Frontier(英文版)
|TW
|-
|0004000000143c00
|440
|Painting Workshop
|US
|-
|0004000000144d00
|c30
|Oh!ガッチマンデンゲキ
BAZOOKA!! スペシャルゲーム
|JP
|-
|0004000000146f00
|410
|マイティガンヴォルト
|JP
|-
|0004000000147d00
|0
|Dedede's Drum Dash Deluxe(英文版)
|TW
|-
|0004000000148100
|0
|Kirby Fighters Deluxe™(英文版)
|TW
|-
|0004000000148400
|810
|Comic Workshop
|EU
|-
|0004000000148c00
|10
|Hatsune Miku: Project Mirai DX
|US
|-
|0004000000148f00
|410
|Proun+
|US
|-
|0004000000149700
|810
|Painting Workshop
|EU
|-
|000400000014b000
|410
|ブレイブリーセカンド
無料で遊べる三銃士編
|JP
|-
|000400000014c900
|820
|Battleminer
|US
|-
|0004000000150d00
|420
|Bloo Kid 2
|US
|-
|0004000000151100
|410
|Cube Creator 3D
|US
|-
|0004000000151f00
|0
|Pokémon Art Academy(英文版)
|TW
|-
|0004000000152e00
|10
|カンフーラビット
|JP
|-
|000400000015a600
|0
|魔神少女 -Chronicle 2D ACT-(繁體中文版)
|TW
|-
|000400000015b100
|820
|IronFall: Invasion
|EU
|-
|000400000015d100
|0
|Fairune(繁體中文版)
|TW
|-
|000400000015d800
|820
|IRONFALL Invasion
|US
|-
|0004000000162200
|1890
|イジン爆闘!!ウデジマン
|JP
|-
|0004000000164600
|410
|みんなのポケモンスクランブル
|JP
|-
|0004000000166400
|10
|Toy Stunt Bike(日文版)
|TW
|-
|0004000000169000
|0
|PAZURU(日文版)
|TW
|-
|000400000016d100
|0
|Puzzle & Dragons Z + Puzzle & Dragons Super Mario Bros. Edition(英文版)
|TW
|-
|000400000016d200
|0
|Puzzle & Dragons Z + Super Mario Bros. Edition 特別試玩版
|TW
|-
|0004000000173d00
|410
|キューブクリエイター3D
|JP
|-
|0004000000175d00
|10
|PROJECT X ZONE 2：BRAVE NEW WORLD(日文版)
|TW
|-
|0004000000177d00
|410
|アルファディア
|JP
|-
|0004000000179100
|0
|Goonyan(日文版)
|TW
|-
|000400000017a900
|10
|Johnny's Payday Panic(英日版)
|TW
|-
|000400000017b800
|0
|ファイアーエムブレムif (日文版)
|TW
|-
|000400000017bf00
|0
|IRONFALL -Invasion- (日文版)
|TW
|-
|000400000017d200
|410
|超科学脱出ギア･ディテクティブ
|JP
|-
|000400000017da00
|0
|패밀리 루어피싱 3D
|KR
|-
|000400000017ec00
|0
|MONSTER HUNTER® X (日文版)
|TW
|-
|0004000000182c00
|0
|ゼルダの伝說　
トライフォース３銃士 (日文版)
|TW
|-
|0004000000185c00
|0
|The Legend of Zelda™ : Majora's Mask 3D(英文版)
|TW
|-
|000400000f700800
|c30
|The Binding of Isaac: Rebirth
|US
|-
|000400000f700900
|840
|The Binding of Isaac: Rebirth
|EU
|-
|000400020008c401
|820
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000b8b01
|410
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000edf01
|420
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000ee001
|410
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200132501
|420
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200136a01
|0
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200175d01
|0
|The Binding of Isaac: Rebirth
|EU
|-
|000400020017a901
|10
|The Binding of Isaac: Rebirth
|EU
|-
|0004000e00030600
|410
|更新データ Ver. 1.1
マリオカート7
|JP
|-
|0004000e00030700
|410
|Mario Kart 7
Update data
|EU
|-
|0004000e00030800
|410
|Mario Kart™ 7
Update Ver. 1.1
|US
|-
|0004000e00032100
|800
|更新データ Ver. 1.2
NEWラブプラス
|JP
|-
|0004000e00036f00
|400
|更新データ Ver. 1.1
花といきもの立体図鑑
|JP
|-
|0004000e00039a00
|400
|更新データ Ver. 1.1
カルドセプト®
|JP
|-
|0004000e00043700
|400
|更新データ Ver. 1.1 ものすごく脳を鍛える5分間の鬼トレーニング
|JP
|-
|0004000e0004b500
|430
|更新データ Ver. 1.1
モンスターハンター4
|JP
|-
|0004000e0004b700
|400
|更新データ Ver. 1.1
G1グランプリ
|JP
|-
|0004000e0004ee00
|400
|更新データ Ver. 1.1
KINGDOM HEARTS 3D
|JP
|-
|0004000e00053600
|800
|更新データ Ver. 1.1
ペンギンの問題ザ･ウォ―ズ
|JP
|-
|0004000e00055d00
|1470
|更新データ Ver. 1.5
ポケットモンスター X
|JP
|-
|0004000e00055e00
|1460
|更新データ Ver. 1.5
ポケットモンスター Y
|JP
|-
|0004000e0005d100
|c10
|更新データ Ver. 1.2
GIRLS MODE よくばり宣言!
|JP
|-
|0004000e0005e900
|410
|更新データ Ver.1.1
BRAVELY DEFAULT FF
|JP
|-
|0004000e00060600
|420
|更新データ Ver. 1.1
マリオ&ルイージRPG4
|JP
|-
|0004000e00065000
|410
|Secret Mysteries in London -
Update
|EU
|-
|0004000e0006cf00
|830
|Jewel Quest
The Sapphire Dragon - Update
|EU
|-
|0004000e0006d200
|2000
|更新データ Ver. 1.7
ファンタジーライフ
|JP
|-
|0004000e00072a00
|410
|更新データ Ver. 1.1
真･三國無双 VS
|JP
|-
|0004000e00074500
|820
|更新データ Ver. 1.1
探偵神宮寺三郎復讐の輪舞
|JP
|-
|0004000e00074600
|400
|更新データ Ver. 1.1 DQM
テリーのワンダーランド3D
|JP
|-
|0004000e00078500
|c00
|更新データ Ver. 1.2
ダンボール戦機爆ブースト
|JP
|-
|0004000e00078b00
|400
|更新データ Ver. 1.1
レイトン教授VS逆転裁判
|JP
|-
|0004000e0007a000
|400
|更新データ Ver. 1.1 METAL
GEAR SOLID SNAKE EATER 3D
|JP
|-
|0004000e00081e00
|410
|METAL GEAR SOLID SNAKE
EATER 3D Update Ver. 1.1
|US
|-
|0004000e00084d00
|430
|AeternoBlade
Update
|EU
|-
|0004000e00086200
|840
|更新データ Ver. 1.1
とびだせどうぶつの森
|JP
|-
|0004000e00086500
|820
|업데이트 데이터 Ver. 1.1
튀어나와요 동물의 숲
|KR
|-
|0004000e0008c300
|410
|Tomodachi Life™ Update
Ver. 1.1
|US
|-
|0004000e0008c400
|c40
|Tomodachi Life™: Update
|EU
|-
|0004000e0008c500
|c50
|更新データ Ver. 1.2
トモダチコレクション新生活
|JP
|-
|0004000e00091000
|440
|更新データ Ver. 1.1
デビルサマナーソウルハッカーズ
|JP
|-
|0004000e00091400
|410
|Real Heroes: Firefighter 3D - Update
|EU
|-
|0004000e00095c00
|430
|更新データ Ver. 1.1
ディズニーマジックキャッスル
|JP
|-
|0004000e0009c000
|410
|Shin Megami Tensei: Devil
Survivor Overclocked Patch
|EU
|-
|0004000e0009ef00
|430
|更新データ Ver. 1.1
メダロットDUAL カブトVer.
|JP
|-
|0004000e0009f000
|430
|更新データ Ver. 1.1
メダロットDUAL クワガタVer.
|JP
|-
|0004000e0009fe00
|440
|更新データ Ver. 1.1
もっと気軽に!お絵描き工房プラス
|JP
|-
|0004000e000a0b00
|14a0
|更新データ Ver. 2.1
大合奏!バンドブラザーズP
|JP
|-
|0004000e000a1b00
|1020
|更新データ Ver. 1.3
イナズマイレブンGO2 ネップウ
|JP
|-
|0004000e000a1c00
|1020
|更新データ Ver. 1.3
イナズマイレブンGO2 ライメイ
|JP
|-
|0004000e000a4d00
|400
|更新データ Ver. 1.1
戦国無双 Chronicle 2nd
|JP
|-
|0004000e000a9000
|400
|New Style Boutique™
Update
|EU
|-
|0004000e000a9100
|400
|Style Savvy: Trendsetters
Update Ver. 1.1
|US
|-
|0004000e000a9800
|400
|更新データ Ver. 1.1 モデル☆
おしゃれオーディションプラチナ
|JP
|-
|0004000e000aa700
|420
|更新データ Ver. 1.1
カセキホリダームゲンギア
|JP
|-
|0004000e000ac700
|c50
|更新データ Ver. 1.2
カードファイト!! ヴァンガード
|JP
|-
|0004000e000ada00
|820
|更新データ Ver. 1.1
ピカピカナース物語2
|JP
|-
|0004000e000af700
|410
|LEGO® Legends of CHIMA:
Laval's Journey Update
|EU
|-
|0004000e000afb00
|410
|更新データ Ver. 1.1
チャリ走DX
|JP
|-
|0004000e000afc00
|410
|更新データ Ver. 1.1 デジモンワールド Re:Digitize Decode
|JP
|-
|0004000e000afd00
|420
|更新データ Ver. 1.1
メタルマックス4 月光のディーヴァ
|JP
|-
|0004000e000b1700
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 1: Update
|EU
|-
|0004000e000b1800
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 2: Update
|EU
|-
|0004000e000b1900
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 3: Update
|EU
|-
|0004000e000b4a00
|420
|更新データ Ver. 1.1
とんがりボウシと魔法の町
|JP
|-
|0004000e000b6d00
|410
|更新データ Ver. 1.1
燐光のランツェ
|JP
|-
|0004000e000b8b00
|5160
|更新データ Ver. 1.1.3 大乱闘
スマッシュブラザーズ for 3DS
|JP
|-
|0004000e000b9900
|410
|Real Heroes: Firefighter 3D - Update
|EU
|-
|0004000e000bb800
|440
|更新データ Ver. 1.1 イナズマ
イレブン1･2･3!! 円堂守伝説
|JP
|-
|0004000e000c0100
|420
|更新データ Ver. 2.0
マギはじまりの迷宮
|JP
|-
|0004000e000c1c00
|410
|更新データ Ver. 1.1 オシャレで
かわいい子犬と遊ぼ!-海編-
|JP
|-
|0004000e000c2900
|840
|Shantae and the Pirate's Curse
Update Ver. 02.02
|US
|-
|0004000e000c3600
|830
|更新データ Ver. 1.2 ペルソナQ
シャドウオブザラビリンス
|JP
|-
|0004000e000c3a00
|840
|更新データ Ver. 1.1
デビルサバイバー2 ブレイクレコード
|JP
|-
|0004000e000c9b00
|c50
|更新データ Ver. 1.2
ポケモンバンク
|JP
|-
|0004000e000cb700
|420
|更新データ Ver. 1.1 ニンテンドー
3DSガイドルーヴル美術館
|JP
|-
|0004000e000cb900
|430
|Nintendo 3DS™ Guide: Louvre
(English Version) Update
|US
|-
|0004000e000cba00
|420
|업데이트 데이터 Ver. 1.1
닌텐도 3DS 가이드 루브르 박물관
|KR
|-
|0004000e000cbd00
|1090
|更新データ Ver. 1.4
みんなのおしゃべりチャット
|JP
|-
|0004000e000cc400
|430
|更新データ Ver. 1.1
初音ミク Project mirai 2
|JP
|-
|0004000e000cd300
|410
|AeternoBlade Update Ver. 1.0
|US
|-
|0004000e000cf300
|420
|更新データ Ver. 1.1
カスタムモンスターズ
|JP
|-
|0004000e000cf400
|850
|更新データ Ver. 1.2
妖怪ウォッチ
|JP
|-
|0004000e000cf500
|420
|更新データ Ver. 1.1 DQM2
イルとルカの不思議なふしぎな鍵
|JP
|-
|0004000e000cf600
|430
|更新データ Ver. 1.1
CONCEPTIONⅡ
|JP
|-
|0004000e000cf900
|420
|更新データ Ver. 1.1
ポケモンアートアカデミー
|JP
|-
|0004000e000d0900
|420
|Pokémon™ Art Academy™:
Update
|EU
|-
|0004000e000d5600
|430
|Nintendo 3DS™ Guide: Louvre
(French Version) Update
|US
|-
|0004000e000d5700
|430
|Nintendo 3DS™ Guide: Louvre
(German Version) Update
|EU
|-
|0004000e000d5800
|430
|Nintendo 3DS™ Guide: Louvre
(Italian Version) Update
|EU
|-
|0004000e000d5900
|430
|Nintendo 3DS™ Guide: Louvre
(Spanish Version) Update
|US
|-
|0004000e000d5a00
|410
|Mario & Luigi™: Dream Team
Update
|US
|-
|0004000e000d6e00
|410
|更新データ Ver. 1.1
ゼルダの伝説ムジュラの仮面 3D
|JP
|-
|0004000e000d7c00
|1450
|更新データ Ver. 4.1
STEELDIVER SUBWARS
|JP
|-
|0004000e000d7d00
|1450
|Steel Diver™: Sub Wars
Update Ver. 4.1
|US
|-
|0004000e000d7e00
|1450
|Steel Diver™: Sub Wars:
Update
|EU
|-
|0004000e000d8e00
|840
|更新データ Ver. 1.2 ほっぺちゃん
つくって!あそんで!ぷにぷにタウン!
|JP
|-
|0004000e000d8f00
|830
|更新データ Ver. 1.1 まめゴマ
はっぴー!スイーツファーム
|JP
|-
|0004000e000d9000
|410
|Mario & Luigi™:
Dream Team Bros. Update
|EU
|-
|0004000e000db600
|410
|更新データ Ver. 1.1
BRAVELY DEFAULT FtS
|JP
|-
|0004000e000dbd00
|14b0
|更新データ Ver. 1.3
SIMPLEシリーズ Vol.1 THE 麻雀
|JP
|-
|0004000e000dc700
|430
|更新データ Ver. 1.1
熱血硬派くにおくんSP 乱闘協奏曲
|JP
|-
|0004000e000dc800
|830
|更新データ Ver. 1.0.2
ブレイブリーセカンド
|JP
|-
|0004000e000dca00
|430
|更新データ Ver. 1.1
ダンボール戦機W 超カスタム
|JP
|-
|0004000e000dd900
|410
|Hakuoki: Memories of the
Shinsengumi Update
|US
|-
|0004000e000df800
|c70
|更新データ Ver. 1.2
進撃の巨人～人類最後の翼～
|JP
|-
|0004000e000e9a00
|830
|更新データ Ver. 1.2
TFF CURTAIN CALL
|JP
|-
|0004000e000e9c00
|1490
|更新データ Ver. 1.7
ファンタジーライフ LINK!
|JP
|-
|0004000e000ea900
|430
|Disney Magical World
Update Ver. 1.1
|US
|-
|0004000e000eb800
|820
|更新データ Ver. 1.2
ホームタウンストーリー
|JP
|-
|0004000e000ecd00
|410
|Adventure Timeâ˘: ETDBIDK
Update 1
|US
|-
|0004000e000edf00
|5130
|Super Smash Bros.™
Update Ver. 1.1.3
|US
|-
|0004000e000ee000
|5130
|Super Smash Bros.™
for Nintendo 3DS: Update
|EU
|-
|0004000e000ef000
|1070
|更新データ Ver. 1.4
電波人間のRPG3
|JP
|-
|0004000e000f1f00
|860
|更新データ Ver. 1.2 ポケモン
トレッタラボメインシステム
|JP
|-
|0004000e000f3f00
|420
|更新データ Ver. 2.0.0
ポポロクロイス牧場物語
|JP
|-
|0004000e000f4000
|840
|更新データ Ver. 1.2
ダンボール戦機ウォーズ
|JP
|-
|0004000e000f4200
|840
|更新データ Ver. 1.2
アイカツ! 2人のmy princess
|JP
|-
|0004000e000f4f00
|450
|更新データ Ver. 1.1
喧嘩番長6～ソウル&ブラッド～
|JP
|-
|0004000e000f5800
|820
|更新データ Ver. 1.2 ワンピース
アンリミテッドワールド R
|JP
|-
|0004000e000f7200
|420
|更新データ Ver. 1.1
ナナミ English上達のコツ
|JP
|-
|0004000e000f9700
|420
|更新データ Ver. 1.1
王だぁランド!
|JP
|-
|0004000e000f9b00
|1080
|更新データ Ver. 1.4
ダービースタリオンGOLD
|JP
|-
|0004000e000fb000
|430
|更新データ Ver. 1.1
文字パズルことだまーる★
|JP
|-
|0004000e000fb100
|c90
|更新データ Ver. 1.3
閃乱カグラ2 -真紅-
|JP
|-
|0004000e000fb300
|420
|更新データ Ver. 1.1
トリコアルティメットサバイバル
|JP
|-
|0004000e000fb400
|430
|更新データ Ver. 1.1 モデション
ドリームガール
|JP
|-
|0004000e000fc100
|420
|I am an Air Traffic Controller
Airport Hero Hawaii Update
|US
|-
|0004000e000fce00
|410
|Hakuoki
Update
|EU
|-
|0004000e00100900
|410
|更新資料 Ver. 1.1
MONSTER HUNTER 4
|TW
|-
|0004000e00101200
|420
|更新データ Ver. 1.1 ぷよぷよテトリス
|JP
|-
|0004000e00101300
|410
|更新データ Ver. 1.1
ヒーローバンク
|JP
|-
|0004000e00102000
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102100
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102200
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102600
|410
|Adventure Timeâ˘:
ETDBIDK Update
|EU
|-
|0004000e00102f00
|850
|更新データ Ver. 1.2.0 太鼓の
達人どんとかつの時空大冒険
|JP
|-
|0004000e00103200
|c30
|更新データ Ver. 1.2
わんニャンペットショップ
|JP
|-
|0004000e00103900
|420
|更新データ Ver.1.1 @SIMPLE DL
Vol.20 THE カード
|JP
|-
|0004000e00103e00
|410
|更新データ Ver. 1.1.0 @SIMPLE
DL Vol.27 THE イラストパズル
|JP
|-
|0004000e00104800
|420
|更新データ Ver. 1.1
メタルファイトベイブレード
|JP
|-
|0004000e00104900
|830
|更新データ Ver. 1.2
VitaminZ Revolution
|JP
|-
|0004000e00104a00
|420
|更新データ Ver.1.1ジュエルペット
カフェで魔法のクッキング!
|JP
|-
|0004000e00104c00
|420
|更新データ Ver. 1.1 こびとづかん　
こびとの不思議実験セット
|JP
|-
|0004000e00105000
|410
|업데이트 데이터 Ver. 1.1
몬스터헌터 4
|KR
|-
|0004000e00105100
|430
|更新データ Ver. 1.1
VitaminX Evolution Plus
|JP
|-
|0004000e00106700
|410
|更新データ Ver. 1.1
キャラペット
|JP
|-
|0004000e00108100
|430
|更新データ Ver. 1.1
アロー･オブ･ラピュタ
|JP
|-
|0004000e0010af00
|420
|Shantae and the
Pirate's Curse - Update
|EU
|-
|0004000e0010ba00
|420
|更新データ Ver. 1.1 イナズマ
イレブンGO ビッグバン
|JP
|-
|0004000e0010bb00
|420
|更新データ Ver. 1.1 イナズマ
イレブンGO スーパーノヴァ
|JP
|-
|0004000e0010bc00
|440
|更新データ Ver. 2.0.0
牧場物語つながる新天地
|JP
|-
|0004000e0010e200
|830
|更新データ Ver. 1.2
FINAL FANTASY EXPLORERS
|JP
|-
|0004000e0010f600
|410
|Harvest Moon®: The Lost
Valley Update Ver. 1.01
|US
|-
|0004000e00111e00
|830
|更新データ Ver. 1.2
チャリ走 DX2 ギャラクシー
|JP
|-
|0004000e00113300
|450
|更新データ Ver. 1.1
メダロット8 カブトVer.
|JP
|-
|0004000e00113400
|450
|更新データ Ver. 1.1
メダロット8 クワガタVer.
|JP
|-
|0004000e00114700
|840
|更新データ Ver. 1.2
コミック工房
|JP
|-
|0004000e00114900
|430
|更新データ Ver. 1.1
異史戦国伝宿業
|JP
|-
|0004000e00114b00
|410
|更新データ Ver. 1.1
タイムアベンジャー
|JP
|-
|0004000e00117200
|1480
|更新データ Ver. 3.2.1
プチコン3号 SmileBASIC
|JP
|-
|0004000e00118100
|430
|更新データ Ver. 1.1
名探偵コナンファントム狂詩曲
|JP
|-
|0004000e00118500
|420
|更新データ Ver. 1.1
漢検トレーニング
|JP
|-
|0004000e00119a00
|820
|Shovel Knight Update Ver. 1.1
|US
|-
|0004000e0011b200
|830
|更新データ Ver. 1.2
大人VSグレコ漢字完全フルセット
|JP
|-
|0004000e0011b300
|420
|更新データ Ver. 1.1
大人VSグレコ漢字激ムズ編
|JP
|-
|0004000e0011b400
|420
|更新データ Ver. 1.1
大人VSグレコ漢字ちょいムズ編
|JP
|-
|0004000e0011c200
|410
|LEGO® Batman™ 3:
BEYOND GOTHAM - Update
|EU
|-
|0004000e0011c400
|1c70
|更新データ Ver. 1.4 ポケット
モンスターオメガルビー
|JP
|-
|0004000e0011c500
|1c70
|更新データ Ver. 1.4 ポケット
モンスターアルファサファイア
|JP
|-
|0004000e0011d700
|1040
|更新データ Ver. 1.2
モンスターハンター4G
|JP
|-
|0004000e0011dd00
|410
|LEGO® Batman™ 3:
Beyond Gotham Update
|US
|-
|0004000e00120000
|420
|更新データ Ver. 1.1
ナナミ English日常会話
|JP
|-
|0004000e00120500
|820
|更新データ Ver. 1.2 新･世界樹
の迷宮2 ファフニールの騎士
|JP
|-
|0004000e00120600
|1880
|更新データ Ver. 1.6
ドラゴンボールヒーローズ UM2
|JP
|-
|0004000e00120700
|420
|更新データ Ver. 1.1 カード
ファイト!! ヴァンガード LOV
|JP
|-
|0004000e00120800
|410
|更新データ Ver. 1.1
IslandDays
|JP
|-
|0004000e00120900
|420
|更新データ Ver. 2.0.0 禁忌のマグナ
|JP
|-
|0004000e00121b00
|430
|更新データ Ver. 1.1 マル合格!
ITパスポート試験平成26年度版
|JP
|-
|0004000e00125500
|410
|The Legend of Zelda™:
Majora’s Mask 3D Update Ver. 1.1
|US
|-
|0004000e00125600
|410
|The Legend of Zelda™:
Majora's Mask 3D: Update
|EU
|-
|0004000e00125d00
|24c0
|更新データ Ver. 1.9
電波人間のRPG FREE!
|JP
|-
|0004000e00126100
|410
|Monster Hunter™ 4 Ultimate:
Update
|EU
|-
|0004000e00126300
|430
|Monster Hunter™ 4 Ultimate
Update Ver. 1.1
|US
|-
|0004000e00127a00
|410
|更新データ Ver. 1.1
ぼく管関空 SKY STORY
|JP
|-
|0004000e00129d00
|440
|更新データ Ver. 1.1
不思議の国の冒険酒場
|JP
|-
|0004000e0012a700
|820
|更新データ Ver. 1.2
蒼き雷霆ガンヴォルト
|JP
|-
|0004000e0012a800
|c50
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012a900
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012aa00
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012ab00
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012b700
|410
|更新データ Ver. 1.0.3 ぐんまの
やぼう for ニンテンドー3DS
|JP
|-
|0004000e0012be00
|410
|Harvest Moon®:
The Lost Valley: Update
|EU
|-
|0004000e0012c800
|410
|Mario vs. Donkey Kong™:
Tipping Stars Ver. 1.0.1
|US
|-
|0004000e0012c900
|410
|更新データ Ver. 1.0.1
マリオvs.ドンキーコング
|JP
|-
|0004000e0012ca00
|410
|Mario vs. Donkey Kong™
Tipping Stars: Update
|EU
|-
|0004000e0012d800
|c30
|更新データ Ver. 1.2.0
GIRLS MODE 3 キラキラ☆コーデ
|JP
|-
|0004000e0012dc00
|410
|【白夜王国】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012dd00
|410
|【暗夜王国】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012de00
|420
|【スペシャルエディション】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012f500
|410
|更新データ Ver. 1.1 テイルズオブ
ザワールドレーヴユナイティア
|JP
|-
|0004000e0012f800
|2050
|更新データ Ver. 2.1
妖怪ウォッチ2 本家
|JP
|-
|0004000e0012f900
|2050
|更新データ Ver. 2.1
妖怪ウォッチ2 元祖
|JP
|-
|0004000e0012fa00
|c60
|更新データ Ver. 1.2
ドーリィ♪カノン
|JP
|-
|0004000e00130300
|20a0
|更新データ Ver. 2.3.0
拡散性ミリオンアーサー
|JP
|-
|0004000e00132500
|820
|更新データ Ver. 1.2.0
Code Name: S.T.E.A.M.
|JP
|-
|0004000e00132c00
|410
|Siesta Fiesta - Update
|EU
|-
|0004000e00134300
|410
|更新データ Ver. 1.1.0
ロストヒーローズ2
|JP
|-
|0004000e00134500
|430
|更新データ Ver. 1.1
進撃の巨人～人類最後の翼～CHAIN
|JP
|-
|0004000e00134600
|1040
|更新データ Ver. 1.3.0
バッジとれ～るセンター
|JP
|-
|0004000e00137700
|430
|Puzzle & Dragons Z +
Super Mario Bros. Edition 2.0
|US
|-
|0004000e00137800
|420
|Puzzle & Dragons Z
|EU
|-
|0004000e00139300
|410
|Siesta Fiesta
Update Ver. 1.0
|US
|-
|0004000e00139a00
|440
|更新データ Ver. 1.1.0
コロロケの森ぽいっと
|JP
|-
|0004000e0013fe00
|420
|更新データ Ver. 1.0.2
王国の道具屋さん
|JP
|-
|0004000e00140100
|410
|更新データ Ver. 1.0.2
王国の道具屋さん
|JP
|-
|0004000e00140b00
|420
|更新データ Ver. 1.1
テラフォーマーズ紅き惑星の激闘
|JP
|-
|0004000e00141a00
|410
|MONSTER HUNTER 4G 更新資料 ver.1.1
|TW
|-
|0004000e00141d00
|830
|更新データ Ver. 1.2 大合奏!
バンドブラザーズP デビュー
|JP
|-
|0004000e00144300
|410
|更新データ Ver. 1.1.0
ヒーローバンク2
|JP
|-
|0004000e00144400
|18a0
|更新データ Ver. 1.5
ワンピース超グランドバトル!X
|JP
|-
|0004000e00144600
|410
|更新データ Ver. 1.1
弱虫ペダル明日への高回転
|JP
|-
|0004000e00145300
|410
|更新データ Ver. 1.1
魔神少女 -Chronicle 2D ACT-
|JP
|-
|0004000e00145500
|420
|更新データ Ver. 1.1.0
役満鳳凰
|JP
|-
|0004000e00146c00
|410
|更新データ Ver. 1.1.0 ロスト
ヒーローズ2 PREMIUM EDITION
|JP
|-
|0004000e00147800
|410
|更新データ Ver. 1.1.0 ブレイ
ブリーデフォルト無料で遊べる版
|JP
|-
|0004000e0014a900
|420
|更新データ Ver. 1.1 そろばん･
あんざん･フラッシュ暗算完全版
|JP
|-
|0004000e0014ab00
|420
|更新データ Ver. 1.1 まほコレ
～魔法☆あいどるコレクション～
|JP
|-
|0004000e0014ac00
|c40
|更新データ Ver. 1.3 フューチャー
カードバディファイト
|JP
|-
|0004000e0014ad00
|410
|大逆転裁判更新データ Ver. 1.1.0
|JP
|-
|0004000e0014ba00
|1040
|更新データ Ver. 1.1.1
ピンチ50連発!!
|JP
|-
|0004000e0014c800
|410
|Azure Striker GUNVOLT
Update Ver. 1.2
|US
|-
|0004000e0014dd00
|410
|LEGO® Ninjago™: Shadow
of Ronin - Update
|EU
|-
|0004000e0014df00
|1080
|更新データ Ver. 1.0.4
戦国無双 Chronicle 3
|JP
|-
|0004000e0014e000
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e700
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e800
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e900
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014eb00
|410
|LEGO® Ninjago™: Shadow
of Ronin™ Update Ver. 2.0
|US
|-
|0004000e0014f000
|410
|更新データ Ver. 2.0 どうぶつの森
ハッピーホームデザイナー
|JP
|-
|0004000e0014f100
|410
|Animal Crossing™: Happy Home
Designer Update Ver. 2.0
|US
|-
|0004000e0014f200
|410
|AC: Happy Home Designer:
Update
|EU
|-
|0004000e0014fb00
|820
|更新データ Ver. 1.2
PROJECT X ZONE 2
|JP
|-
|0004000e0014fc00
|820
|更新データ Ver. 1.2
PROJECT X ZONE 2 OGSE
|JP
|-
|0004000e00150100
|1870
|更新データ Ver. 1.5
チャリ走 DX3 タイムライダー
|JP
|-
|0004000e00152900
|420
|更新データ Ver. 1.1
暗殺教室殺せんせー大包囲網!!
|JP
|-
|0004000e00152a00
|c30
|更新データ Ver. 1.2 すみっコ
ぐらしここがおちつくんです
|JP
|-
|0004000e00155000
|860
|更新データ Ver. 1.2
ディズニーマジックキャッスル2
|JP
|-
|0004000e00155100
|c40
|更新データ Ver. 1.2
妖怪ウォッチ2 真打
|JP
|-
|0004000e00155400
|850
|更新データ Ver. 1.2.0
モンスターハンタークロス
|JP
|-
|0004000e00155800
|801
|更新データ Ver. 1.2.0
モンスターハンタークロス
|JP
|-
|0004000e00156100
|830
|更新データ Ver. 1.2
マーセナリーズサーガ2
|JP
|-
|0004000e00157700
|410
|更新データ Ver. 1.1
マル合格! FP3級平成26-27年度版
|JP
|-
|0004000e00157900
|820
|更新データ Ver. 2.1.0
エースコンバット 3D クロスランブル +
|JP
|-
|0004000e00158600
|410
|Titan Attacks! Update Ver. 1.1
|US
|-
|0004000e00159000
|410
|Titan Attacks! - Update
|EU
|-
|0004000e00159500
|410
|Shin Megami Tensei: Devil
Survivor 2 Update Ver. 1.1
|US
|-
|0004000e0015a200
|410
|OlliOlli - Update
|EU
|-
|0004000e0015a300
|820
|ACE COMBAT™ ASSAULT
HORIZON LEGACY + - Update
|EU
|-
|0004000e0015a400
|410
|OlliOlli Update Ver. 1.1.0
|US
|-
|0004000e0015a800
|440
|更新データ Ver. 2.0
6×1≠UNLIMITED?
|JP
|-
|0004000e0015bd00
|830
|업데이트 데이터 Ver. 1.2
Azure Striker GUNVOLT
|KR
|-
|0004000e0015c000
|820
|ACE COMBAT ASSAULT
HORIZON LEGACY+ Update
|US
|-
|0004000e0015cb00
|430
|更新データ Ver. 1.0.1 新･
ロロナのアトリエはじまりの物語
|JP
|-
|0004000e0015dc00
|410
|更新データ Ver. 1.1
エクスケーブ～運命の夢幻塔編～
|JP
|-
|0004000e0015e300
|430
|更新データ Ver. 1.0.1
ドラえもんのび太の宇宙英雄記
|JP
|-
|0004000e0015e700
|420
|更新データVer.1.1 ラングリッサー
リインカーネーション -転生-
|JP
|-
|0004000e0015e800
|410
|更新データ Ver. 1.1.0　
プリパラ&プリティーリズム 1450!
|JP
|-
|0004000e00160200
|410
|Goosebumps: The Game
Update Ver. 1.01
|US
|-
|0004000e00160800
|1060
|更新データ Ver. 1.4
コミック工房2
|JP
|-
|0004000e00162300
|440
|更新データ Ver. 2.0 パズドラ
SUPER MARIO BROS. EDITION
|JP
|-
|0004000e00163c00
|c60
|更新データ Ver. 1.2.0
ドラゴンボールZ 超究極武闘伝
|JP
|-
|0004000e00166f00
|820
|Comic Workshop 2: Update
|EU
|-
|0004000e00167700
|410
|YO-KAI WATCH™ Update
Ver. 1.1
|US
|-
|0004000e00167c00
|5060
|업데이트 데이터 Ver. 1.1.3
슈퍼 스매시브라더스
for 닌텐도 3DS
|KR
|-
|0004000e00167f00
|820
|Comic Workshop 2
Update Ver. 1.2
|US
|-
|0004000e00168600
|5050
|大亂鬥スマッシュブラザーズ for
Nintendo 3DS 更新資料 Ver. 1.1.3
|TW
|-
|0004000e00169500
|410
|Rodea the Sky Soldier -
Update
|EU
|-
|0004000e00169c00
|830
|更新データ Ver. 1.2
ちゃおイラストクラブ
|JP
|-
|0004000e00169d00
|410
|更新データ Ver. 1.1.0
アイカツ!My No.1 Stage!
|JP
|-
|0004000e0016a100
|410
|New Style Boutique™ 2 -
Fashion Forward: Update
|EU
|-
|0004000e0016b200
|410
|【ダウンロード版】
更新データファイアーエムブレムif
|JP
|-
|0004000e0016c600
|18b0
|更新データ Ver. 2.2
妖怪ウォッチバスターズ白犬隊
|JP
|-
|0004000e0016c700
|18b0
|更新データ Ver. 2.2
妖怪ウォッチバスターズ赤猫団
|JP
|-
|0004000e0016d100
|420
|Puzzle & Dragons Z + Puzzle & Dragons Super Mario Bros. Edition
更新資料 Ve
|TW
|-
|0004000e0016f200
|820
|SAMURAI WARRIORS:
Chronicles 3 Update Ver. 1.0.2
|US
|-
|0004000e00170800
|410
|更新データ Ver. 1.1
ほっぺちゃんぷにっとしぼって大冒険!
|JP
|-
|0004000e00173b00
|820
|SAMURAI WARRIORS:
Chronicles 3: Update
|EU
|-
|0004000e00174d00
|430
|更新データ Ver. 1.1
三國志2
|JP
|-
|0004000e00175d00
|420
|PROJECT X ZONE 2：BRAVE NEW WORLD 更新資料Ver.1.2
|TW
|-
|0004000e00176e00
|c30
|更新データ Ver. 2.1.0
ゼルダの伝説トライフォース3銃士
|JP
|-
|0004000e00176f00
|c30
|The Legend of Zelda™:
Tri Force Heroes Update
|US
|-
|0004000e00177000
|c30
|The Legend of Zelda™:
Tri Force Heroes: Update
|EU
|-
|0004000e00177e00
|420
|更新データ Ver. 1.1
モノカゲクエスト
|JP
|-
|0004000e00178000
|840
|更新データ Ver. 1.2
ドリームガールプルミエ
|JP
|-
|0004000e00178500
|430
|更新データ Ver. 1.1
すみっコぐらしおみせはじめるんです
|JP
|-
|0004000e0017c200
|410
|更新データ Ver. 1.1
すみっコぐらしおみせはじめるんです
|JP
|-
|0004000e0017c900
|820
|Shovel Knight:
Update
|EU
|-
|0004000e0017d800
|410
|更新データ Ver. 1.1.0 ダウン
タウンのガキの使いやあらへんで
|JP
|-
|0004000e0017e100
|410
|Shovel Knight Update Ver. 2.2
|US
|-
|0004000e0017ec00
|820
|MONSTER HUNTER X 更新資料 Ver. 1.2.0
|TW
|-
|0004000e0f700000
|410
|更新データ Ver. 1.1
New 3DS専用ゼノブレイド
|JP
|-
|0004000e0f700100
|410
|Xenoblade Chronicles™ 3D
Update Ver. 1.0
|US
|-
|0004000e0f700200
|410
|Xenoblade Chronicles 3D:
Update
|EU
|-
|000480044b333656
|0
|Jewel Quest 5 -
The Sleepless Star
|EU
|-
|000480044b343350
|10
|Jewel Quest 4 Heritage
|EU
|-
|000480044b354c50
|0
|Forgotten Legions
|EU
|-
|000480044b35544a
|400
|戦国Tactics
|JP
|-
|000480044b425150
|10
|Break Tactics
|EU
|-
|000480044b464a4a
|400
|マジカルファンタジスタ
|JP
|-
|000480044b464d4a
|400
|あたまごモンスターズ
|JP
|-
|000480044b465a4a
|400
|あたまご
|JP
|-
|000480044b4b5a50
|10
|Academy: Chess Puzzles
|EU
|-
|000480044b4e414a
|800
|プチコンmkII
|JP
|-
|000480044b514e45
|400
|Castle Conqueror - Revolution
|US
|-
|000480044b555650
|30
|Bloons® TD 4
|EU
|-
|000480044b564c45
|10
|Clash of Elementalists
|US
|-
|000480044b564c50
|0
|Clash of Elementalists
|EU
|-
|000480044b584650
|410
|Color Commando
|EU
|-
|000480044b584b50
|60
|Goony
|EU
|-
|000480044b585250
|30
|Retro Pocket™
|EU
|-
|000480044b585550
|10
|Publisher Dream
|EU
|-
|000480044b594e50
|20
|Cake Ninja: XMAS
|EU
|-
|000480044b59534a
|400
|あたまIQパニック
|JP
|}

==Removed==
{|class="wikitable sortable"
!Title ID
!Version
!Name
!Region
|-
|0004000e00176700
|410
|업데이트 데이터 Ver. 1.1
프로젝트 크로스 존 2
|KR
|}

VersionList

2016-01-26T10:39:26Z

Einstein95: Stupid encoding

Used by the system menu to notify the user of updates.
{|class="wikitable sortable"
!Title ID
!Version
!Name
!Country
|-
|0004000000037500
|21
|Tom Clancy's Ghost Recon®
Shadow Wars
|EU
|-
|0004000000038b00
|410
|Resident Evil™
The Mercenaries 3D
|EU
|-
|000400000004a300
|400
|Petz Fantasy 3D
|EU
|-
|0004000000056c00
|890
|うごくメモ帳 3D
|JP
|-
|000400000005e300
|820
|熱血硬派くにおくんすぺしゃる
|JP
|-
|000400000005ee00
|10
|Resident Evil™ Revelations
|EU
|-
|0004000000066300
|400
|Mighty Switch Force!
|US
|-
|000400000006d100
|0
|Luxor
|EU
|-
|000400000006d700
|1
|Pets Resort 3D
|EU
|-
|000400000006e400
|400
|スーパーマリオブラザーズ
|JP
|-
|000400000006e500
|400
|Super Mario Bros.™
|US
|-
|000400000006e600
|400
|Super Mario Bros.™
|EU
|-
|000400000006ed00
|410
|メトロイド
|JP
|-
|000400000006ee00
|400
|Metroid™
|US
|-
|000400000006ef00
|400
|Metroid™
|EU
|-
|000400000006f000
|410
|ゼルダの伝説1
|JP
|-
|000400000006f100
|400
|The Legend of Zelda™
|US
|-
|000400000006f200
|400
|The Legend of Zelda™
|EU
|-
|000400000006f600
|400
|レッキングクルー
|JP
|-
|000400000006f900
|400
|マリオオープンゴルフ
|JP
|-
|000400000006fa00
|400
|NES Open Tournament Golf™
|US
|-
|000400000006fb00
|400
|NES Open Tournament Golf
|EU
|-
|000400000006ff00
|400
|ドンキーコングJR.
|JP
|-
|0004000000070000
|400
|Donkey Kong Jr.™
|US
|-
|0004000000070200
|400
|バルーンファイト
|JP
|-
|0004000000070500
|800
|アイスクライマー
|JP
|-
|0004000000070800
|400
|リンクの冒険
|JP
|-
|0004000000070900
|400
|Zelda II™ -
The Adventure of Link™
|US
|-
|0004000000070a00
|400
|Zelda II: The Adventure of Link
|EU
|-
|0004000000071100
|400
|ヨッシーのたまご
|JP
|-
|0004000000073c00
|401
|My Foal 3D
|EU
|-
|0004000000075f00
|1
|BIT.TRIP SAGA
|EU
|-
|0004000000077500
|400
|ラブプラスTOOLS
|JP
|-
|0004000000077e00
|400
|電波人間のRPG
|JP
|-
|000400000007a300
|10
|Harvest Moon:
The Tale of Two Towns
|EU
|-
|000400000007fd00
|400
|VVVVVV
|US
|-
|0004000000081100
|420
|Colors! 3D
|US
|-
|0004000000084b00
|10
|Cats and Dogs 3D
Pets at play
|EU
|-
|0004000000086800
|0
|推拉方塊(繁體中文版)
|TW
|-
|0004000000088400
|0
|Columns™
|EU
|-
|0004000000089200
|400
|夜の魔人といくさの国
～さまよえるヴァンピール～
|JP
|-
|000400000008b200
|420
|Coaster Creator 3D
|US
|-
|000400000008d100
|840
|Bit Boy!! ARCADE
|US
|-
|000400000008e300
|410
|Marvel Pinball 3D
|US
|-
|000400000008fc00
|20
|Sonic & All-Stars Racing
Transformed™
|EU
|-
|000400000008fe00
|830
|1001 Spikes
|US
|-
|0004000000090000
|410
|Johnny Kung Fu™
|US
|-
|0004000000099700
|4070
|レコチョク
|JP
|-
|000400000009b800
|0
|Dr. Robotnik's
Mean Bean Machine™
|EU
|-
|000400000009bb00
|0
|Shining Force™: The Sword of Hajya
|EU
|-
|000400000009d300
|10
|Riding Stables 3D
|EU
|-
|000400000009d600
|1830
|ドラゴンクエストⅩ
冒険者のおでかけ便利ツール
|JP
|-
|000400000009da00
|400
|悪魔城ドラキュラ
|JP
|-
|000400000009df00
|0
|Dig Dug
|EU
|-
|000400000009e300
|0
|Super C
|EU
|-
|000400000009e700
|10
|Crash City Mayhem
|EU
|-
|000400000009ea00
|410
|Turtle Tale
|US
|-
|00040000000a1200
|0
|Mega Man™ 4
|EU
|-
|00040000000a1400
|0
|Mega Man™ 5
|EU
|-
|00040000000a2f00
|420
|AiRace Speed
|US
|-
|00040000000a5400
|810
|Mutant Mudds™
|EU
|-
|00040000000a7900
|410
|電波人間のRPG2
|JP
|-
|00040000000a9000
|0
|Nintendo presents
New Style Boutique™
|EU
|-
|00040000000aa800
|400
|Fractured Soul
|US
|-
|00040000000aba00
|0
|Fractured Soul
|US
|-
|00040000000ad400
|0
|ぐるっとスプラッシュ!
|JP
|-
|00040000000aec00
|0
|The Beet Party:
Jurassic Fridge
|EU
|-
|00040000000b0f00
|830
|YouTube
|US
|-
|00040000000b4700
|3020
|どこでも本屋さん
|JP
|-
|00040000000b4f00
|400
|Fallblox™
|EU
|-
|00040000000b8f00
|400
|Gunman Clive
|US
|-
|00040000000bb100
|0
|Viking Invasion 2 -
Tower Defense
|EU
|-
|00040000000bb400
|10
|The Beet Party:
UnderWaterMelon
|EU
|-
|00040000000bba00
|0
|Sonic the Hedgehog™
|EU
|-
|00040000000bd200
|0
|ファミコン探偵倶楽部 PARTⅡ
うしろに立つ少女(前後編)
|JP
|-
|00040000000bea00
|0
|엽기토끼 시간여행 3D
|KR
|-
|00040000000bec00
|10
|레이맨 오리진
|KR
|-
|00040000000c1700
|410
|AiRace Speed
|EU
|-
|00040000000c2900
|420
|Shantae and the Pirate's Curse
|US
|-
|00040000000c3400
|400
|モンスターハンター3(トライ)G
データ移行プログラム
|JP
|-
|00040000000c3a00
|430
|デビルサバイバー2
ブレイクレコード
|JP
|-
|00040000000c4200
|0
|Rhythm Thief & the Emperor’s Treasure™
|KR
|-
|00040000000c5200
|0
|Reel Fishing® 3D
Paradise Mini
|EU
|-
|00040000000c5700
|410
|Real Heroes: Firefighter 3D
|US
|-
|00040000000c6f00
|410
|MH3U Data Transfer Program
|US
|-
|00040000000c7100
|410
|Monster Hunter™ 3 Ultimate
Data Transfer Program
|EU
|-
|00040000000c7700
|410
|Real Heroes: Firefighter 3D
|EU
|-
|00040000000c7f00
|0
|톰 클랜시의 고스트 리콘 섀도우 워즈
|KR
|-
|00040000000c8000
|0
|톰 클랜시의 스플린터 셀 3D
|KR
|-
|00040000000c8900
|0
|짜릿! 우물로 드롭
|KR
|-
|00040000000c8a00
|0
|밀고 떨구고
|KR
|-
|00040000000c8d00
|410
|Monster High™
Skultimate Roller Maze™
|EU
|-
|00040000000c9e00
|840
|実写でちびロボ!
|JP
|-
|00040000000cbb00
|0
|Picdun 2: Witch's Curse
|EU
|-
|00040000000cbd00
|420
|みんなのおしゃべりチャット
|JP
|-
|00040000000cca00
|0
|悄悄互動日記
|TW
|-
|00040000000ccd00
|820
|YouTube
|EU
|-
|00040000000cd600
|10
|Sudoku by Nikoli
|KR
|-
|00040000000cd700
|10
|Bird Mania 3D
|KR
|-
|00040000000cd800
|0
|SpeedX 3D
|KR
|-
|00040000000cef00
|410
|Swords & Soldiers 3D
|EU
|-
|00040000000cfd00
|0
|SENRAN KAGURA Burst
|KR
|-
|00040000000d0600
|430
|Swords & Soldiers 3D
|US
|-
|00040000000d1700
|0
|Air Battle Hockey 3D
|EU
|-
|00040000000d1800
|0
|Bloody Vampire
|EU
|-
|00040000000d2400
|0
|Witch & Hero
|EU
|-
|00040000000d2900
|420
|だるめしスポーツ店
|JP
|-
|00040000000d2e00
|0
|MONSTER HUNTER 3 ULTIMATE
|KR
|-
|00040000000d2f00
|0
|Mario and Donkey Kong™:
Minis on the Move
|EU
|-
|00040000000d3000
|830
|YouTube
|JP
|-
|00040000000d4800
|0
|My Riding Stables 3D–
Jumping for the Team
|EU
|-
|00040000000d4a00
|420
|Star Wars Pinball
|EU
|-
|00040000000d7700
|0
|Jewel Master Atlantis 3D
|EU
|-
|00040000000d7b00
|410
|3D スーパーハングオン
|JP
|-
|00040000000d8c00
|0
|@SIMPLE DLシリーズ Vol.10
THE浮気彼氏Xmas中止のお知らせ
|JP
|-
|00040000000d9300
|0
|The Beet Party:
Beet Poets
|EU
|-
|00040000000d9400
|0
|The Beet Party:
Unidentified Flying Waffle
|EU
|-
|00040000000db700
|c80
|@SIMPLE DLシリーズ Vol.15
THE 麻雀
|JP
|-
|00040000000db800
|450
|KORG M01D
|JP
|-
|00040000000de100
|10
|Lola's Math Train
|EU
|-
|00040000000e6100
|0
|Akari by Nikoli
|KR
|-
|00040000000e6800
|420
|Star Wars Pinball
|US
|-
|00040000000e8200
|0
|Groove Heaven
|EU
|-
|00040000000e9300
|410
|@SIMPLE DLシリーズ Vol.14
THE 脱出ゲーム～裏切りの密室～
|JP
|-
|00040000000e9800
|410
|3D 獣王記
|JP
|-
|00040000000ea800
|0
|SpeedX 3D Hyper Edition
|EU
|-
|00040000000eaf00
|0
|THE "DENPA" MEN 2:
Beyond the Waves
|EU
|-
|00040000000eb000
|1050
|ソリティ馬
|JP
|-
|00040000000edc00
|410
|Dillon's Rolling Western
The Last Ranger
|KR
|-
|00040000000edd00
|420
|Dillon's Rolling Western
|KR
|-
|00040000000ee600
|410
|どぎめぎインリョクちゃん
|JP
|-
|00040000000ee900
|410
|3D ベア･ナックル怒りの鉄拳
|JP
|-
|00040000000f7300
|0
|新・世界樹の迷宮ミレニアムの少女 (日文版)
|TW
|-
|00040000000fb900
|410
|3D ギャラクシーフォースⅡ
|JP
|-
|00040000000fc700
|0
|Donkey Kong Country Returns 3D
(英文版)
|TW
|-
|00040000000fc800
|1060
|honto for ニンテンドー3DS
|JP
|-
|00040000000fc900
|0
|魔女與勇者
|TW
|-
|00040000000fd300
|0
|逆轉裁判 5 (英文版)
|TW
|-
|00040000000fe200
|10
|Talking Phrasebook -
7 Languages
|US
|-
|0004000000103500
|410
|@SIMPLE DLシリーズ Vol.21
THE 鑑識官 File.1
|JP
|-
|0004000000103600
|410
|@SIMPLE DLシリーズ Vol.23
THE 鑑識官 File.2
|JP
|-
|0004000000104300
|1
|マイティースイッチフォース!
|JP
|-
|0004000000105800
|10
|世界樹の迷宮Ⅳ 伝承の巨神 (日文版)
|TW
|-
|0004000000105900
|10
|Etrian Odyssey Ⅳ Legends of the Titan (英文版)
|TW
|-
|0004000000105c00
|0
|爆走老精靈
|TW
|-
|0004000000108d00
|820
|Retro City Rampage: DX
|EU
|-
|0004000000109800
|28e0
|ニコニコ
|JP
|-
|000400000010cf00
|0
|Sonic Lost World™ (英文版)
|TW
|-
|000400000010d200
|820
|Retro City Rampage™: DX
|US
|-
|000400000010db00
|0
|邦妮早午餐
|TW
|-
|000400000010dc00
|0
|初音未來 Project mirai 2 (日文版)
|TW
|-
|000400000010e600
|420
|遊戯王ARC-Vオフィシャル
カードゲームかんたんマスター!
|JP
|-
|0004000000111100
|820
|Grinsia
|US
|-
|0004000000112300
|420
|Cubit The Hardcore Platformer Robot
|US
|-
|0004000000115700
|0
|The Legend of Zelda:
A Link Between Worlds (英文版)
|TW
|-
|0004000000119300
|0
|Mario Party: Island Tour (英文版)
|TW
|-
|0004000000119a00
|1040
|Shovel Knight
|US
|-
|0004000000120100
|420
|3D ファンタジーゾーン
オパオパブラザーズ
|JP
|-
|0004000000121d00
|820
|3D ファンタジーゾーンⅡダブル
|JP
|-
|0004000000123200
|0
|Kirby: Triple Deluxe (英文版)
|TW
|-
|0004000000124000
|410
|The Keep
|US
|-
|0004000000124300
|410
|Cubit The Hardcore
Platformer Robot
|EU
|-
|0004000000124a00
|c50
|リアル脱出ゲーム×ニンテンドー
3DS 超破壊計画からの脱出
|JP
|-
|0004000000127600
|401
|Alien On The Run
|US
|-
|0004000000128900
|410
|3D アウトラン
|JP
|-
|0004000000129600
|410
|AiRace Xeno
|EU
|-
|0004000000129f00
|440
|KORG DSN-12
|JP
|-
|000400000012bf00
|410
|AiRace Xeno
|US
|-
|000400000012cb00
|c30
|Shovel Knight
|EU
|-
|000400000012d000
|820
|Bit Boy!! ARCADE
|EU
|-
|000400000012e700
|430
|Moon Chronicles™
|US
|-
|0004000000130300
|c40
|拡散性ミリオンアーサー
|JP
|-
|0004000000132900
|0
|逆轉裁判123 / Phoenix Wright:
Ace Attorney Trilogy(日英版)
|TW
|-
|0004000000134600
|410
|バッジとれ～るセンター
|JP
|-
|0004000000136a00
|0
|鐵道日本！長良川鐵道出發篇
(繁體中文版)
|TW
|-
|0004000000138900
|410
|Proun+
|EU
|-
|0004000000139c00
|c70
|みんなでまもって騎士
姫のトキメキらぷそでぃ
|JP
|-
|000400000013d000
|820
|ドラゴンボールヒーローズ UM2
ゲームデータ引継ぎアプリ
|JP
|-
|000400000013d100
|1470
|ドラゴンクエストⅩ オンライン
|JP
|-
|000400000013ea00
|420
|Comic Workshop
|US
|-
|000400000013ee00
|430
|Woah Dave!
|US
|-
|000400000013f900
|420
|Glory of Generals
|US
|-
|0004000000140f00
|2cc0
|ドラゴンクエストⅩ
冒険者のおでかけ超便利ツール
|JP
|-
|0004000000141000
|830
|ポケとる
|JP
|-
|0004000000141a00
|0
|MONSTER HUNTER 4G(日文版)
|TW
|-
|0004000000141f00
|10
|Fossil Fighters™: Frontier(英文版)
|TW
|-
|0004000000143c00
|440
|Painting Workshop
|US
|-
|0004000000144d00
|c30
|Oh!ガッチマンデンゲキ
BAZOOKA!! スペシャルゲーム
|JP
|-
|0004000000146f00
|410
|マイティガンヴォルト
|JP
|-
|0004000000147d00
|0
|Dedede's Drum Dash Deluxe(英文版)
|TW
|-
|0004000000148100
|0
|Kirby Fighters Deluxe™(英文版)
|TW
|-
|0004000000148400
|810
|Comic Workshop
|EU
|-
|0004000000148c00
|10
|Hatsune Miku: Project Mirai DX
|US
|-
|0004000000148f00
|410
|Proun+
|US
|-
|0004000000149700
|810
|Painting Workshop
|EU
|-
|000400000014b000
|410
|ブレイブリーセカンド
無料で遊べる三銃士編
|JP
|-
|000400000014c900
|820
|Battleminer
|US
|-
|0004000000150d00
|420
|Bloo Kid 2
|US
|-
|0004000000151100
|410
|Cube Creator 3D
|US
|-
|0004000000151f00
|0
|Pokémon Art Academy(英文版)
|TW
|-
|0004000000152e00
|10
|カンフーラビット
|JP
|-
|000400000015a600
|0
|魔神少女 -Chronicle 2D ACT-(繁體中文版)
|TW
|-
|000400000015b100
|820
|IronFall: Invasion
|EU
|-
|000400000015d100
|0
|Fairune(繁體中文版)
|TW
|-
|000400000015d800
|820
|IRONFALL Invasion
|US
|-
|0004000000162200
|1890
|イジン爆闘!!ウデジマン
|JP
|-
|0004000000164600
|410
|みんなのポケモンスクランブル
|JP
|-
|0004000000166400
|10
|Toy Stunt Bike(日文版)
|TW
|-
|0004000000169000
|0
|PAZURU(日文版)
|TW
|-
|000400000016d100
|0
|Puzzle & Dragons Z + Puzzle & Dragons Super Mario Bros. Edition(英文版)
|TW
|-
|000400000016d200
|0
|Puzzle & Dragons Z + Super Mario Bros. Edition 特別試玩版
|TW
|-
|0004000000175d00
|10
|PROJECT X ZONE 2：BRAVE NEW WORLD(日文版)
|TW
|-
|0004000000177d00
|410
|アルファディア
|JP
|-
|0004000000179100
|0
|Goonyan(日文版)
|TW
|-
|000400000017a900
|10
|Johnny's Payday Panic(英日版)
|TW
|-
|000400000017b800
|0
|ファイアーエムブレムif (日文版)
|TW
|-
|000400000017bf00
|0
|IRONFALL -Invasion- (日文版)
|TW
|-
|000400000017d200
|410
|超科学脱出ギア･ディテクティブ
|JP
|-
|000400000017da00
|0
|패밀리 루어피싱 3D
|KR
|-
|000400000017ec00
|0
|MONSTER HUNTER® X (日文版)
|TW
|-
|0004000000182c00
|0
|ゼルダの伝說　
トライフォース３銃士 (日文版)
|TW
|-
|0004000000185c00
|0
|The Legend of Zelda™ : Majora's Mask 3D(英文版)
|TW
|-
|000400000f700800
|c30
|The Binding of Isaac: Rebirth
|US
|-
|000400000f700900
|840
|The Binding of Isaac: Rebirth
|EU
|-
|000400020008c401
|820
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000b8b01
|410
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000edf01
|420
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000ee001
|410
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200132501
|420
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200136a01
|0
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200175d01
|0
|The Binding of Isaac: Rebirth
|EU
|-
|000400020017a901
|10
|The Binding of Isaac: Rebirth
|EU
|-
|0004000e00030600
|410
|更新データ Ver. 1.1
マリオカート7
|JP
|-
|0004000e00030700
|410
|Mario Kart 7
Update data
|EU
|-
|0004000e00030800
|410
|Mario Kart™ 7
Update Ver. 1.1
|US
|-
|0004000e00032100
|800
|更新データ Ver. 1.2
NEWラブプラス
|JP
|-
|0004000e00036f00
|400
|更新データ Ver. 1.1
花といきもの立体図鑑
|JP
|-
|0004000e00039a00
|400
|更新データ Ver. 1.1
カルドセプト®
|JP
|-
|0004000e00043700
|400
|更新データ Ver. 1.1 ものすごく脳を鍛える5分間の鬼トレーニング
|JP
|-
|0004000e0004b500
|430
|更新データ Ver. 1.1
モンスターハンター4
|JP
|-
|0004000e0004b700
|400
|更新データ Ver. 1.1
G1グランプリ
|JP
|-
|0004000e0004ee00
|400
|更新データ Ver. 1.1
KINGDOM HEARTS 3D
|JP
|-
|0004000e00053600
|800
|更新データ Ver. 1.1
ペンギンの問題ザ･ウォ―ズ
|JP
|-
|0004000e00055d00
|1470
|更新データ Ver. 1.5
ポケットモンスター X
|JP
|-
|0004000e00055e00
|1460
|更新データ Ver. 1.5
ポケットモンスター Y
|JP
|-
|0004000e0005d100
|c10
|更新データ Ver. 1.2
GIRLS MODE よくばり宣言!
|JP
|-
|0004000e0005e900
|410
|更新データ Ver.1.1
BRAVELY DEFAULT FF
|JP
|-
|0004000e00060600
|420
|更新データ Ver. 1.1
マリオ&ルイージRPG4
|JP
|-
|0004000e00065000
|410
|Secret Mysteries in London -
Update
|EU
|-
|0004000e0006cf00
|830
|Jewel Quest
The Sapphire Dragon - Update
|EU
|-
|0004000e0006d200
|2000
|更新データ Ver. 1.7
ファンタジーライフ
|JP
|-
|0004000e00072a00
|410
|更新データ Ver. 1.1
真･三國無双 VS
|JP
|-
|0004000e00074500
|820
|更新データ Ver. 1.1
探偵神宮寺三郎復讐の輪舞
|JP
|-
|0004000e00074600
|400
|更新データ Ver. 1.1 DQM
テリーのワンダーランド3D
|JP
|-
|0004000e00078500
|c00
|更新データ Ver. 1.2
ダンボール戦機爆ブースト
|JP
|-
|0004000e00078b00
|400
|更新データ Ver. 1.1
レイトン教授VS逆転裁判
|JP
|-
|0004000e0007a000
|400
|更新データ Ver. 1.1 METAL
GEAR SOLID SNAKE EATER 3D
|JP
|-
|0004000e00081e00
|410
|METAL GEAR SOLID SNAKE
EATER 3D Update Ver. 1.1
|US
|-
|0004000e00084d00
|430
|AeternoBlade
Update
|EU
|-
|0004000e00086200
|840
|更新データ Ver. 1.1
とびだせどうぶつの森
|JP
|-
|0004000e00086500
|820
|업데이트 데이터 Ver. 1.1
튀어나와요 동물의 숲
|KR
|-
|0004000e0008c300
|410
|Tomodachi Life™ Update
Ver. 1.1
|US
|-
|0004000e0008c400
|c40
|Tomodachi Life™: Update
|EU
|-
|0004000e0008c500
|c50
|更新データ Ver. 1.2
トモダチコレクション新生活
|JP
|-
|0004000e00091000
|440
|更新データ Ver. 1.1
デビルサマナーソウルハッカーズ
|JP
|-
|0004000e00091400
|410
|Real Heroes: Firefighter 3D - Update
|EU
|-
|0004000e00095c00
|430
|更新データ Ver. 1.1
ディズニーマジックキャッスル
|JP
|-
|0004000e0009c000
|410
|Shin Megami Tensei: Devil
Survivor Overclocked Patch
|EU
|-
|0004000e0009ef00
|430
|更新データ Ver. 1.1
メダロットDUAL カブトVer.
|JP
|-
|0004000e0009f000
|430
|更新データ Ver. 1.1
メダロットDUAL クワガタVer.
|JP
|-
|0004000e0009fe00
|440
|更新データ Ver. 1.1
もっと気軽に!お絵描き工房プラス
|JP
|-
|0004000e000a0b00
|14a0
|更新データ Ver. 2.1
大合奏!バンドブラザーズP
|JP
|-
|0004000e000a1b00
|1020
|更新データ Ver. 1.3
イナズマイレブンGO2 ネップウ
|JP
|-
|0004000e000a1c00
|1020
|更新データ Ver. 1.3
イナズマイレブンGO2 ライメイ
|JP
|-
|0004000e000a4d00
|400
|更新データ Ver. 1.1
戦国無双 Chronicle 2nd
|JP
|-
|0004000e000a9000
|400
|New Style Boutique™
Update
|EU
|-
|0004000e000a9100
|400
|Style Savvy: Trendsetters
Update Ver. 1.1
|US
|-
|0004000e000a9800
|400
|更新データ Ver. 1.1 モデル☆
おしゃれオーディションプラチナ
|JP
|-
|0004000e000aa700
|420
|更新データ Ver. 1.1
カセキホリダームゲンギア
|JP
|-
|0004000e000ac700
|c50
|更新データ Ver. 1.2
カードファイト!! ヴァンガード
|JP
|-
|0004000e000ada00
|820
|更新データ Ver. 1.1
ピカピカナース物語2
|JP
|-
|0004000e000af700
|410
|LEGO® Legends of CHIMA:
Laval's Journey Update
|EU
|-
|0004000e000afb00
|410
|更新データ Ver. 1.1
チャリ走DX
|JP
|-
|0004000e000afc00
|410
|更新データ Ver. 1.1 デジモンワールド Re:Digitize Decode
|JP
|-
|0004000e000afd00
|420
|更新データ Ver. 1.1
メタルマックス4 月光のディーヴァ
|JP
|-
|0004000e000b1700
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 1: Update
|EU
|-
|0004000e000b1800
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 2: Update
|EU
|-
|0004000e000b1900
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 3: Update
|EU
|-
|0004000e000b4a00
|420
|更新データ Ver. 1.1
とんがりボウシと魔法の町
|JP
|-
|0004000e000b6d00
|410
|更新データ Ver. 1.1
燐光のランツェ
|JP
|-
|0004000e000b8b00
|5160
|更新データ Ver. 1.1.3 大乱闘
スマッシュブラザーズ for 3DS
|JP
|-
|0004000e000b9900
|410
|Real Heroes: Firefighter 3D - Update
|EU
|-
|0004000e000bb800
|440
|更新データ Ver. 1.1 イナズマ
イレブン1･2･3!! 円堂守伝説
|JP
|-
|0004000e000c0100
|420
|更新データ Ver. 2.0
マギはじまりの迷宮
|JP
|-
|0004000e000c1c00
|410
|更新データ Ver. 1.1 オシャレで
かわいい子犬と遊ぼ!-海編-
|JP
|-
|0004000e000c2900
|840
|Shantae and the Pirate's Curse
Update Ver. 02.02
|US
|-
|0004000e000c3600
|830
|更新データ Ver. 1.2 ペルソナQ
シャドウオブザラビリンス
|JP
|-
|0004000e000c3a00
|840
|更新データ Ver. 1.1
デビルサバイバー2 ブレイクレコード
|JP
|-
|0004000e000c9b00
|c50
|更新データ Ver. 1.2
ポケモンバンク
|JP
|-
|0004000e000cb700
|420
|更新データ Ver. 1.1 ニンテンドー
3DSガイドルーヴル美術館
|JP
|-
|0004000e000cb900
|430
|Nintendo 3DS™ Guide: Louvre
(English Version) Update
|US
|-
|0004000e000cba00
|420
|업데이트 데이터 Ver. 1.1
닌텐도 3DS 가이드 루브르 박물관
|KR
|-
|0004000e000cbd00
|1090
|更新データ Ver. 1.4
みんなのおしゃべりチャット
|JP
|-
|0004000e000cc400
|430
|更新データ Ver. 1.1
初音ミク Project mirai 2
|JP
|-
|0004000e000cd300
|410
|AeternoBlade Update Ver. 1.0
|US
|-
|0004000e000cf300
|420
|更新データ Ver. 1.1
カスタムモンスターズ
|JP
|-
|0004000e000cf400
|850
|更新データ Ver. 1.2
妖怪ウォッチ
|JP
|-
|0004000e000cf500
|420
|更新データ Ver. 1.1 DQM2
イルとルカの不思議なふしぎな鍵
|JP
|-
|0004000e000cf600
|430
|更新データ Ver. 1.1
CONCEPTIONⅡ
|JP
|-
|0004000e000cf900
|420
|更新データ Ver. 1.1
ポケモンアートアカデミー
|JP
|-
|0004000e000d0900
|420
|Pokémon™ Art Academy™:
Update
|EU
|-
|0004000e000d5600
|430
|Nintendo 3DS™ Guide: Louvre
(French Version) Update
|US
|-
|0004000e000d5700
|430
|Nintendo 3DS™ Guide: Louvre
(German Version) Update
|EU
|-
|0004000e000d5800
|430
|Nintendo 3DS™ Guide: Louvre
(Italian Version) Update
|EU
|-
|0004000e000d5900
|430
|Nintendo 3DS™ Guide: Louvre
(Spanish Version) Update
|US
|-
|0004000e000d5a00
|410
|Mario & Luigi™: Dream Team
Update
|US
|-
|0004000e000d6e00
|410
|更新データ Ver. 1.1
ゼルダの伝説ムジュラの仮面 3D
|JP
|-
|0004000e000d7c00
|1450
|更新データ Ver. 4.1
STEELDIVER SUBWARS
|JP
|-
|0004000e000d7d00
|1450
|Steel Diver™: Sub Wars
Update Ver. 4.1
|US
|-
|0004000e000d7e00
|1450
|Steel Diver™: Sub Wars:
Update
|EU
|-
|0004000e000d8e00
|840
|更新データ Ver. 1.2 ほっぺちゃん
つくって!あそんで!ぷにぷにタウン!
|JP
|-
|0004000e000d8f00
|830
|更新データ Ver. 1.1 まめゴマ
はっぴー!スイーツファーム
|JP
|-
|0004000e000d9000
|410
|Mario & Luigi™:
Dream Team Bros. Update
|EU
|-
|0004000e000db600
|410
|更新データ Ver. 1.1
BRAVELY DEFAULT FtS
|JP
|-
|0004000e000dbd00
|14b0
|更新データ Ver. 1.3
SIMPLEシリーズ Vol.1 THE 麻雀
|JP
|-
|0004000e000dc700
|430
|更新データ Ver. 1.1
熱血硬派くにおくんSP 乱闘協奏曲
|JP
|-
|0004000e000dc800
|830
|更新データ Ver. 1.0.2
ブレイブリーセカンド
|JP
|-
|0004000e000dca00
|430
|更新データ Ver. 1.1
ダンボール戦機W 超カスタム
|JP
|-
|0004000e000dd900
|410
|Hakuoki: Memories of the
Shinsengumi Update
|US
|-
|0004000e000df800
|c70
|更新データ Ver. 1.2
進撃の巨人～人類最後の翼～
|JP
|-
|0004000e000e9a00
|830
|更新データ Ver. 1.2
TFF CURTAIN CALL
|JP
|-
|0004000e000e9c00
|1490
|更新データ Ver. 1.7
ファンタジーライフ LINK!
|JP
|-
|0004000e000ea900
|430
|Disney Magical World
Update Ver. 1.1
|US
|-
|0004000e000eb800
|820
|更新データ Ver. 1.2
ホームタウンストーリー
|JP
|-
|0004000e000ecd00
|410
|Adventure Timeâ˘: ETDBIDK
Update 1
|US
|-
|0004000e000edf00
|5130
|Super Smash Bros.™
Update Ver. 1.1.3
|US
|-
|0004000e000ee000
|5130
|Super Smash Bros.™
for Nintendo 3DS: Update
|EU
|-
|0004000e000ef000
|1070
|更新データ Ver. 1.4
電波人間のRPG3
|JP
|-
|0004000e000f1f00
|860
|更新データ Ver. 1.2 ポケモン
トレッタラボメインシステム
|JP
|-
|0004000e000f3f00
|420
|更新データ Ver. 2.0.0
ポポロクロイス牧場物語
|JP
|-
|0004000e000f4000
|840
|更新データ Ver. 1.2
ダンボール戦機ウォーズ
|JP
|-
|0004000e000f4200
|840
|更新データ Ver. 1.2
アイカツ! 2人のmy princess
|JP
|-
|0004000e000f4f00
|450
|更新データ Ver. 1.1
喧嘩番長6～ソウル&ブラッド～
|JP
|-
|0004000e000f5800
|820
|更新データ Ver. 1.2 ワンピース
アンリミテッドワールド R
|JP
|-
|0004000e000f7200
|420
|更新データ Ver. 1.1
ナナミ English上達のコツ
|JP
|-
|0004000e000f9700
|420
|更新データ Ver. 1.1
王だぁランド!
|JP
|-
|0004000e000f9b00
|1080
|更新データ Ver. 1.4
ダービースタリオンGOLD
|JP
|-
|0004000e000fb000
|430
|更新データ Ver. 1.1
文字パズルことだまーる★
|JP
|-
|0004000e000fb100
|c90
|更新データ Ver. 1.3
閃乱カグラ2 -真紅-
|JP
|-
|0004000e000fb300
|420
|更新データ Ver. 1.1
トリコアルティメットサバイバル
|JP
|-
|0004000e000fb400
|430
|更新データ Ver. 1.1 モデション
ドリームガール
|JP
|-
|0004000e000fc100
|420
|I am an Air Traffic Controller
Airport Hero Hawaii Update
|US
|-
|0004000e000fce00
|410
|Hakuoki
Update
|EU
|-
|0004000e00100900
|410
|更新資料 Ver. 1.1
MONSTER HUNTER 4
|TW
|-
|0004000e00101200
|420
|更新データ Ver. 1.1 ぷよぷよテトリス
|JP
|-
|0004000e00101300
|410
|更新データ Ver. 1.1
ヒーローバンク
|JP
|-
|0004000e00102000
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102100
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102200
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102600
|410
|Adventure Timeâ˘:
ETDBIDK Update
|EU
|-
|0004000e00102f00
|850
|更新データ Ver. 1.2.0 太鼓の
達人どんとかつの時空大冒険
|JP
|-
|0004000e00103200
|c30
|更新データ Ver. 1.2
わんニャンペットショップ
|JP
|-
|0004000e00103900
|420
|更新データ Ver.1.1 @SIMPLE DL
Vol.20 THE カード
|JP
|-
|0004000e00103e00
|410
|更新データ Ver. 1.1.0 @SIMPLE
DL Vol.27 THE イラストパズル
|JP
|-
|0004000e00104800
|420
|更新データ Ver. 1.1
メタルファイトベイブレード
|JP
|-
|0004000e00104900
|830
|更新データ Ver. 1.2
VitaminZ Revolution
|JP
|-
|0004000e00104a00
|420
|更新データ Ver.1.1ジュエルペット
カフェで魔法のクッキング!
|JP
|-
|0004000e00104c00
|420
|更新データ Ver. 1.1 こびとづかん　
こびとの不思議実験セット
|JP
|-
|0004000e00105000
|410
|업데이트 데이터 Ver. 1.1
몬스터헌터 4
|KR
|-
|0004000e00105100
|430
|更新データ Ver. 1.1
VitaminX Evolution Plus
|JP
|-
|0004000e00106700
|410
|更新データ Ver. 1.1
キャラペット
|JP
|-
|0004000e00108100
|430
|更新データ Ver. 1.1
アロー･オブ･ラピュタ
|JP
|-
|0004000e0010af00
|420
|Shantae and the
Pirate's Curse - Update
|EU
|-
|0004000e0010ba00
|420
|更新データ Ver. 1.1 イナズマ
イレブンGO ビッグバン
|JP
|-
|0004000e0010bb00
|420
|更新データ Ver. 1.1 イナズマ
イレブンGO スーパーノヴァ
|JP
|-
|0004000e0010bc00
|440
|更新データ Ver. 2.0.0
牧場物語つながる新天地
|JP
|-
|0004000e0010e200
|830
|更新データ Ver. 1.2
FINAL FANTASY EXPLORERS
|JP
|-
|0004000e0010f600
|410
|Harvest Moon®: The Lost
Valley Update Ver. 1.01
|US
|-
|0004000e00111e00
|830
|更新データ Ver. 1.2
チャリ走 DX2 ギャラクシー
|JP
|-
|0004000e00113300
|450
|更新データ Ver. 1.1
メダロット8 カブトVer.
|JP
|-
|0004000e00113400
|450
|更新データ Ver. 1.1
メダロット8 クワガタVer.
|JP
|-
|0004000e00114700
|840
|更新データ Ver. 1.2
コミック工房
|JP
|-
|0004000e00114900
|430
|更新データ Ver. 1.1
異史戦国伝宿業
|JP
|-
|0004000e00114b00
|410
|更新データ Ver. 1.1
タイムアベンジャー
|JP
|-
|0004000e00117200
|1480
|更新データ Ver. 3.2.1
プチコン3号 SmileBASIC
|JP
|-
|0004000e00118100
|430
|更新データ Ver. 1.1
名探偵コナンファントム狂詩曲
|JP
|-
|0004000e00118500
|420
|更新データ Ver. 1.1
漢検トレーニング
|JP
|-
|0004000e00119a00
|820
|Shovel Knight Update Ver. 1.1
|US
|-
|0004000e0011b200
|830
|更新データ Ver. 1.2
大人VSグレコ漢字完全フルセット
|JP
|-
|0004000e0011b300
|420
|更新データ Ver. 1.1
大人VSグレコ漢字激ムズ編
|JP
|-
|0004000e0011b400
|420
|更新データ Ver. 1.1
大人VSグレコ漢字ちょいムズ編
|JP
|-
|0004000e0011c200
|410
|LEGO® Batman™ 3:
BEYOND GOTHAM - Update
|EU
|-
|0004000e0011c400
|1c70
|更新データ Ver. 1.4 ポケット
モンスターオメガルビー
|JP
|-
|0004000e0011c500
|1c70
|更新データ Ver. 1.4 ポケット
モンスターアルファサファイア
|JP
|-
|0004000e0011d700
|1040
|更新データ Ver. 1.2
モンスターハンター4G
|JP
|-
|0004000e0011dd00
|410
|LEGO® Batman™ 3:
Beyond Gotham Update
|US
|-
|0004000e00120000
|420
|更新データ Ver. 1.1
ナナミ English日常会話
|JP
|-
|0004000e00120500
|820
|更新データ Ver. 1.2 新･世界樹
の迷宮2 ファフニールの騎士
|JP
|-
|0004000e00120600
|1880
|更新データ Ver. 1.6
ドラゴンボールヒーローズ UM2
|JP
|-
|0004000e00120700
|420
|更新データ Ver. 1.1 カード
ファイト!! ヴァンガード LOV
|JP
|-
|0004000e00120800
|410
|更新データ Ver. 1.1
IslandDays
|JP
|-
|0004000e00120900
|420
|更新データ Ver. 2.0.0 禁忌のマグナ
|JP
|-
|0004000e00121b00
|430
|更新データ Ver. 1.1 マル合格!
ITパスポート試験平成26年度版
|JP
|-
|0004000e00125500
|410
|The Legend of Zelda™:
Majora’s Mask 3D Update Ver. 1.1
|US
|-
|0004000e00125600
|410
|The Legend of Zelda™:
Majora's Mask 3D: Update
|EU
|-
|0004000e00125d00
|24c0
|更新データ Ver. 1.9
電波人間のRPG FREE!
|JP
|-
|0004000e00126100
|410
|Monster Hunter™ 4 Ultimate:
Update
|EU
|-
|0004000e00126300
|430
|Monster Hunter™ 4 Ultimate
Update Ver. 1.1
|US
|-
|0004000e00127a00
|410
|更新データ Ver. 1.1
ぼく管関空 SKY STORY
|JP
|-
|0004000e00129d00
|440
|更新データ Ver. 1.1
不思議の国の冒険酒場
|JP
|-
|0004000e0012a700
|820
|更新データ Ver. 1.2
蒼き雷霆ガンヴォルト
|JP
|-
|0004000e0012a800
|c50
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012a900
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012aa00
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012ab00
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012b700
|410
|更新データ Ver. 1.0.3 ぐんまの
やぼう for ニンテンドー3DS
|JP
|-
|0004000e0012be00
|410
|Harvest Moon®:
The Lost Valley: Update
|EU
|-
|0004000e0012c800
|410
|Mario vs. Donkey Kong™:
Tipping Stars Ver. 1.0.1
|US
|-
|0004000e0012c900
|410
|更新データ Ver. 1.0.1
マリオvs.ドンキーコング
|JP
|-
|0004000e0012ca00
|410
|Mario vs. Donkey Kong™
Tipping Stars: Update
|EU
|-
|0004000e0012d800
|c30
|更新データ Ver. 1.2.0
GIRLS MODE 3 キラキラ☆コーデ
|JP
|-
|0004000e0012dc00
|410
|【白夜王国】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012dd00
|410
|【暗夜王国】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012de00
|420
|【スペシャルエディション】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012f500
|410
|更新データ Ver. 1.1 テイルズオブ
ザワールドレーヴユナイティア
|JP
|-
|0004000e0012f800
|2050
|更新データ Ver. 2.1
妖怪ウォッチ2 本家
|JP
|-
|0004000e0012f900
|2050
|更新データ Ver. 2.1
妖怪ウォッチ2 元祖
|JP
|-
|0004000e0012fa00
|c60
|更新データ Ver. 1.2
ドーリィ♪カノン
|JP
|-
|0004000e00130300
|20a0
|更新データ Ver. 2.3.0
拡散性ミリオンアーサー
|JP
|-
|0004000e00132500
|820
|更新データ Ver. 1.2.0
Code Name: S.T.E.A.M.
|JP
|-
|0004000e00132c00
|410
|Siesta Fiesta - Update
|EU
|-
|0004000e00134300
|410
|更新データ Ver. 1.1.0
ロストヒーローズ2
|JP
|-
|0004000e00134500
|430
|更新データ Ver. 1.1
進撃の巨人～人類最後の翼～CHAIN
|JP
|-
|0004000e00134600
|1040
|更新データ Ver. 1.3.0
バッジとれ～るセンター
|JP
|-
|0004000e00137700
|430
|Puzzle & Dragons Z +
Super Mario Bros. Edition 2.0
|US
|-
|0004000e00137800
|420
|Puzzle & Dragons Z
|EU
|-
|0004000e00139300
|410
|Siesta Fiesta
Update Ver. 1.0
|US
|-
|0004000e00139a00
|440
|更新データ Ver. 1.1.0
コロロケの森ぽいっと
|JP
|-
|0004000e0013fe00
|420
|更新データ Ver. 1.0.2
王国の道具屋さん
|JP
|-
|0004000e00140100
|410
|更新データ Ver. 1.0.2
王国の道具屋さん
|JP
|-
|0004000e00140b00
|420
|更新データ Ver. 1.1
テラフォーマーズ紅き惑星の激闘
|JP
|-
|0004000e00141a00
|410
|MONSTER HUNTER 4G 更新資料 ver.1.1
|TW
|-
|0004000e00141d00
|830
|更新データ Ver. 1.2 大合奏!
バンドブラザーズP デビュー
|JP
|-
|0004000e00144300
|410
|更新データ Ver. 1.1.0
ヒーローバンク2
|JP
|-
|0004000e00144400
|18a0
|更新データ Ver. 1.5
ワンピース超グランドバトル!X
|JP
|-
|0004000e00144600
|410
|更新データ Ver. 1.1
弱虫ペダル明日への高回転
|JP
|-
|0004000e00145300
|410
|更新データ Ver. 1.1
魔神少女 -Chronicle 2D ACT-
|JP
|-
|0004000e00145500
|420
|更新データ Ver. 1.1.0
役満鳳凰
|JP
|-
|0004000e00146c00
|410
|更新データ Ver. 1.1.0 ロスト
ヒーローズ2 PREMIUM EDITION
|JP
|-
|0004000e00147800
|410
|更新データ Ver. 1.1.0 ブレイ
ブリーデフォルト無料で遊べる版
|JP
|-
|0004000e0014a900
|420
|更新データ Ver. 1.1 そろばん･
あんざん･フラッシュ暗算完全版
|JP
|-
|0004000e0014ab00
|420
|更新データ Ver. 1.1 まほコレ
～魔法☆あいどるコレクション～
|JP
|-
|0004000e0014ac00
|c40
|更新データ Ver. 1.3 フューチャー
カードバディファイト
|JP
|-
|0004000e0014ad00
|410
|大逆転裁判更新データ Ver. 1.1.0
|JP
|-
|0004000e0014ba00
|1040
|更新データ Ver. 1.1.1
ピンチ50連発!!
|JP
|-
|0004000e0014c800
|410
|Azure Striker GUNVOLT
Update Ver. 1.2
|US
|-
|0004000e0014dd00
|410
|LEGO® Ninjago™: Shadow
of Ronin - Update
|EU
|-
|0004000e0014df00
|1080
|更新データ Ver. 1.0.4
戦国無双 Chronicle 3
|JP
|-
|0004000e0014e000
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e700
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e800
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e900
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014eb00
|410
|LEGO® Ninjago™: Shadow
of Ronin™ Update Ver. 2.0
|US
|-
|0004000e0014f000
|410
|更新データ Ver. 2.0 どうぶつの森
ハッピーホームデザイナー
|JP
|-
|0004000e0014f100
|410
|Animal Crossing™: Happy Home
Designer Update Ver. 2.0
|US
|-
|0004000e0014f200
|410
|AC: Happy Home Designer:
Update
|EU
|-
|0004000e0014fb00
|820
|更新データ Ver. 1.2
PROJECT X ZONE 2
|JP
|-
|0004000e0014fc00
|820
|更新データ Ver. 1.2
PROJECT X ZONE 2 OGSE
|JP
|-
|0004000e00150100
|1870
|更新データ Ver. 1.5
チャリ走 DX3 タイムライダー
|JP
|-
|0004000e00152900
|420
|更新データ Ver. 1.1
暗殺教室殺せんせー大包囲網!!
|JP
|-
|0004000e00152a00
|c30
|更新データ Ver. 1.2 すみっコ
ぐらしここがおちつくんです
|JP
|-
|0004000e00155000
|860
|更新データ Ver. 1.2
ディズニーマジックキャッスル2
|JP
|-
|0004000e00155100
|c40
|更新データ Ver. 1.2
妖怪ウォッチ2 真打
|JP
|-
|0004000e00155400
|850
|更新データ Ver. 1.2.0
モンスターハンタークロス
|JP
|-
|0004000e00155800
|801
|更新データ Ver. 1.2.0
モンスターハンタークロス
|JP
|-
|0004000e00156100
|830
|更新データ Ver. 1.2
マーセナリーズサーガ2
|JP
|-
|0004000e00157700
|410
|更新データ Ver. 1.1
マル合格! FP3級平成26-27年度版
|JP
|-
|0004000e00157900
|820
|更新データ Ver. 2.1.0
エースコンバット 3D クロスランブル +
|JP
|-
|0004000e00158600
|410
|Titan Attacks! Update Ver. 1.1
|US
|-
|0004000e00159000
|410
|Titan Attacks! - Update
|EU
|-
|0004000e00159500
|410
|Shin Megami Tensei: Devil
Survivor 2 Update Ver. 1.1
|US
|-
|0004000e0015a200
|410
|OlliOlli - Update
|EU
|-
|0004000e0015a300
|820
|ACE COMBAT™ ASSAULT
HORIZON LEGACY + - Update
|EU
|-
|0004000e0015a400
|410
|OlliOlli Update Ver. 1.1.0
|US
|-
|0004000e0015a800
|440
|更新データ Ver. 2.0
6×1≠UNLIMITED?
|JP
|-
|0004000e0015bd00
|830
|업데이트 데이터 Ver. 1.2
Azure Striker GUNVOLT
|KR
|-
|0004000e0015c000
|820
|ACE COMBAT ASSAULT
HORIZON LEGACY+ Update
|US
|-
|0004000e0015cb00
|430
|更新データ Ver. 1.0.1 新･
ロロナのアトリエはじまりの物語
|JP
|-
|0004000e0015dc00
|410
|更新データ Ver. 1.1
エクスケーブ～運命の夢幻塔編～
|JP
|-
|0004000e0015e300
|430
|更新データ Ver. 1.0.1
ドラえもんのび太の宇宙英雄記
|JP
|-
|0004000e0015e700
|420
|更新データVer.1.1 ラングリッサー
リインカーネーション -転生-
|JP
|-
|0004000e0015e800
|410
|更新データ Ver. 1.1.0　
プリパラ&プリティーリズム 1450!
|JP
|-
|0004000e00160200
|410
|Goosebumps: The Game
Update Ver. 1.01
|US
|-
|0004000e00160800
|1060
|更新データ Ver. 1.4
コミック工房2
|JP
|-
|0004000e00162300
|440
|更新データ Ver. 2.0 パズドラ
SUPER MARIO BROS. EDITION
|JP
|-
|0004000e00163c00
|c60
|更新データ Ver. 1.2.0
ドラゴンボールZ 超究極武闘伝
|JP
|-
|0004000e00166f00
|820
|Comic Workshop 2: Update
|EU
|-
|0004000e00167700
|410
|YO-KAI WATCH™ Update
Ver. 1.1
|US
|-
|0004000e00167c00
|5060
|업데이트 데이터 Ver. 1.1.3
슈퍼 스매시브라더스
for 닌텐도 3DS
|KR
|-
|0004000e00167f00
|820
|Comic Workshop 2
Update Ver. 1.2
|US
|-
|0004000e00168600
|5050
|大亂鬥スマッシュブラザーズ for
Nintendo 3DS 更新資料 Ver. 1.1.3
|TW
|-
|0004000e00169500
|410
|Rodea the Sky Soldier -
Update
|EU
|-
|0004000e00169c00
|830
|更新データ Ver. 1.2
ちゃおイラストクラブ
|JP
|-
|0004000e00169d00
|410
|更新データ Ver. 1.1.0
アイカツ!My No.1 Stage!
|JP
|-
|0004000e0016a100
|410
|New Style Boutique™ 2 -
Fashion Forward: Update
|EU
|-
|0004000e0016b200
|410
|【ダウンロード版】
更新データファイアーエムブレムif
|JP
|-
|0004000e0016c600
|18b0
|更新データ Ver. 2.2
妖怪ウォッチバスターズ白犬隊
|JP
|-
|0004000e0016c700
|18b0
|更新データ Ver. 2.2
妖怪ウォッチバスターズ赤猫団
|JP
|-
|0004000e0016d100
|420
|Puzzle & Dragons Z + Puzzle & Dragons Super Mario Bros. Edition
更新資料 Ve
|TW
|-
|0004000e0016f200
|820
|SAMURAI WARRIORS:
Chronicles 3 Update Ver. 1.0.2
|US
|-
|0004000e00170800
|410
|更新データ Ver. 1.1
ほっぺちゃんぷにっとしぼって大冒険!
|JP
|-
|0004000e00173b00
|820
|SAMURAI WARRIORS:
Chronicles 3: Update
|EU
|-
|0004000e00174d00
|430
|更新データ Ver. 1.1
三國志2
|JP
|-
|0004000e00175d00
|420
|PROJECT X ZONE 2：BRAVE NEW WORLD 更新資料Ver.1.2
|TW
|-
|0004000e00176700
|410
|업데이트 데이터 Ver. 1.1
프로젝트 크로스 존 2
|KR
|-
|0004000e00176e00
|c30
|更新データ Ver. 2.1.0
ゼルダの伝説トライフォース3銃士
|JP
|-
|0004000e00176f00
|c30
|The Legend of Zelda™:
Tri Force Heroes Update
|US
|-
|0004000e00177000
|c30
|The Legend of Zelda™:
Tri Force Heroes: Update
|EU
|-
|0004000e00177e00
|420
|更新データ Ver. 1.1
モノカゲクエスト
|JP
|-
|0004000e00178000
|840
|更新データ Ver. 1.2
ドリームガールプルミエ
|JP
|-
|0004000e00178500
|430
|更新データ Ver. 1.1
すみっコぐらしおみせはじめるんです
|JP
|-
|0004000e0017c200
|410
|更新データ Ver. 1.1
すみっコぐらしおみせはじめるんです
|JP
|-
|0004000e0017c900
|820
|Shovel Knight:
Update
|EU
|-
|0004000e0017d800
|410
|更新データ Ver. 1.1.0 ダウン
タウンのガキの使いやあらへんで
|JP
|-
|0004000e0017e100
|410
|Shovel Knight Update Ver. 2.2
|US
|-
|0004000e0017ec00
|820
|MONSTER HUNTER X 更新資料 Ver. 1.2.0
|TW
|-
|0004000e0f700000
|410
|更新データ Ver. 1.1
New 3DS専用ゼノブレイド
|JP
|-
|0004000e0f700100
|410
|Xenoblade Chronicles™ 3D
Update Ver. 1.0
|US
|-
|0004000e0f700200
|410
|Xenoblade Chronicles 3D:
Update
|EU
|-
|000480044b333656
|0
|Jewel Quest 5 -
The Sleepless Star
|EU
|-
|000480044b343350
|10
|Jewel Quest 4 Heritage
|EU
|-
|000480044b354c50
|0
|Forgotten Legions
|EU
|-
|000480044b35544a
|400
|戦国Tactics
|JP
|-
|000480044b425150
|10
|Break Tactics
|EU
|-
|000480044b464a4a
|400
|マジカルファンタジスタ
|JP
|-
|000480044b464d4a
|400
|あたまごモンスターズ
|JP
|-
|000480044b465a4a
|400
|あたまご
|JP
|-
|000480044b4b5a50
|10
|Academy: Chess Puzzles
|EU
|-
|000480044b4e414a
|800
|プチコンmkII
|JP
|-
|000480044b514e45
|400
|Castle Conqueror - Revolution
|US
|-
|000480044b555650
|30
|Bloons® TD 4
|EU
|-
|000480044b564c45
|10
|Clash of Elementalists
|US
|-
|000480044b564c50
|0
|Clash of Elementalists
|EU
|-
|000480044b584650
|410
|Color Commando
|EU
|-
|000480044b584b50
|60
|Goony
|EU
|-
|000480044b585250
|30
|Retro Pocket™
|EU
|-
|000480044b585550
|10
|Publisher Dream
|EU
|-
|000480044b594e50
|20
|Cake Ninja: XMAS
|EU
|-
|000480044b59534a
|400
|あたまIQパニック
|JP
|}

VersionList

2016-01-26T10:38:07Z

Einstein95:

Used by the system menu to notify the user of updates.
{|class="wikitable sortable"
!Title ID
!Version
!Name
!Country
|-
|0004000000037500
|21
|Tom Clancy's Ghost Recon®
Shadow Wars
|EU
|-
|0004000000038b00
|410
|Resident Evil™
The Mercenaries 3D
|EU
|-
|000400000004a300
|400
|Petz Fantasy 3D
|EU
|-
|0004000000056c00
|890
|うごくメモ帳 3D
|JP
|-
|000400000005e300
|820
|熱血硬派くにおくんすぺしゃる
|JP
|-
|000400000005ee00
|10
|Resident Evil™ Revelations
|EU
|-
|0004000000066300
|400
|Mighty Switch Force!
|US
|-
|000400000006d100
|0
|Luxor
|EU
|-
|000400000006d700
|1
|Pets Resort 3D
|EU
|-
|000400000006e400
|400
|スーパーマリオブラザーズ
|JP
|-
|000400000006e500
|400
|Super Mario Bros.™
|US
|-
|000400000006e600
|400
|Super Mario Bros.™
|EU
|-
|000400000006ed00
|410
|メトロイド
|JP
|-
|000400000006ee00
|400
|Metroid™
|US
|-
|000400000006ef00
|400
|Metroid™
|EU
|-
|000400000006f000
|410
|ゼルダの伝説1
|JP
|-
|000400000006f100
|400
|The Legend of Zelda™
|US
|-
|000400000006f200
|400
|The Legend of Zelda™
|EU
|-
|000400000006f600
|400
|レッキングクルー
|JP
|-
|000400000006f900
|400
|マリオオープンゴルフ
|JP
|-
|000400000006fa00
|400
|NES Open Tournament Golf™
|US
|-
|000400000006fb00
|400
|NES Open Tournament Golf
|EU
|-
|000400000006ff00
|400
|ドンキーコングJR.
|JP
|-
|0004000000070000
|400
|Donkey Kong Jr.™
|US
|-
|0004000000070200
|400
|バルーンファイト
|JP
|-
|0004000000070500
|800
|アイスクライマー
|JP
|-
|0004000000070800
|400
|リンクの冒険
|JP
|-
|0004000000070900
|400
|Zelda II™ -
The Adventure of Link™
|US
|-
|0004000000070a00
|400
|Zelda II: The Adventure of Link
|EU
|-
|0004000000071100
|400
|ヨッシーのたまご
|JP
|-
|0004000000073c00
|401
|My Foal 3D
|EU
|-
|0004000000075f00
|1
|BIT.TRIP SAGA
|EU
|-
|0004000000077500
|400
|ラブプラスTOOLS
|JP
|-
|0004000000077e00
|400
|電波人間のRPG
|JP
|-
|000400000007a300
|10
|Harvest Moon:
The Tale of Two Towns
|EU
|-
|000400000007fd00
|400
|VVVVVV
|US
|-
|0004000000081100
|420
|Colors! 3D
|US
|-
|0004000000084b00
|10
|Cats and Dogs 3D
Pets at play
|EU
|-
|0004000000086800
|0
|推拉方塊(繁體中文版)
|TW
|-
|0004000000088400
|0
|Columns™
|EU
|-
|0004000000089200
|400
|夜の魔人といくさの国
～さまよえるヴァンピール～
|JP
|-
|000400000008b200
|420
|Coaster Creator 3D
|US
|-
|000400000008d100
|840
|Bit Boy!! ARCADE
|US
|-
|000400000008e300
|410
|Marvel Pinball 3D
|US
|-
|000400000008fc00
|20
|Sonic & All-Stars Racing
Transformed™
|EU
|-
|000400000008fe00
|830
|1001 Spikes
|US
|-
|0004000000090000
|410
|Johnny Kung Fu™
|US
|-
|0004000000099700
|4070
|レコチョク
|JP
|-
|000400000009b800
|0
|Dr. Robotnik's
Mean Bean Machine™
|EU
|-
|000400000009bb00
|0
|Shining Force™: The Sword of Hajya
|EU
|-
|000400000009d300
|10
|Riding Stables 3D
|EU
|-
|000400000009d600
|1830
|ドラゴンクエストⅩ
冒険者のおでかけ便利ツール
|JP
|-
|000400000009da00
|400
|悪魔城ドラキュラ
|JP
|-
|000400000009df00
|0
|Dig Dug
|EU
|-
|000400000009e300
|0
|Super C
|EU
|-
|000400000009e700
|10
|Crash City Mayhem
|EU
|-
|000400000009ea00
|410
|Turtle Tale
|US
|-
|00040000000a1200
|0
|Mega Man™ 4
|EU
|-
|00040000000a1400
|0
|Mega Man™ 5
|EU
|-
|00040000000a2f00
|420
|AiRace Speed
|US
|-
|00040000000a5400
|810
|Mutant Mudds™
|EU
|-
|00040000000a7900
|410
|電波人間のRPG2
|JP
|-
|00040000000a9000
|0
|Nintendo presents
New Style Boutique™
|EU
|-
|00040000000aa800
|400
|Fractured Soul
|US
|-
|00040000000aba00
|0
|Fractured Soul
|US
|-
|00040000000ad400
|0
|ぐるっとスプラッシュ!
|JP
|-
|00040000000aec00
|0
|The Beet Party:
Jurassic Fridge
|EU
|-
|00040000000b0f00
|830
|YouTube
|US
|-
|00040000000b4700
|3020
|どこでも本屋さん
|JP
|-
|00040000000b4f00
|400
|Fallblox™
|EU
|-
|00040000000b8f00
|400
|Gunman Clive
|US
|-
|00040000000bb100
|0
|Viking Invasion 2 -
Tower Defense
|EU
|-
|00040000000bb400
|10
|The Beet Party:
UnderWaterMelon
|EU
|-
|00040000000bba00
|0
|Sonic the Hedgehog™
|EU
|-
|00040000000bd200
|0
|ファミコン探偵倶楽部 PARTⅡ
うしろに立つ少女(前後編)
|JP
|-
|00040000000bea00
|0
|엽기토끼 시간여행 3D
|KR
|-
|00040000000bec00
|10
|레이맨 오리진
|KR
|-
|00040000000c1700
|410
|AiRace Speed
|EU
|-
|00040000000c2900
|420
|Shantae and the Pirate's Curse
|US
|-
|00040000000c3400
|400
|モンスターハンター3(トライ)G
データ移行プログラム
|JP
|-
|00040000000c3a00
|430
|デビルサバイバー2
ブレイクレコード
|JP
|-
|00040000000c4200
|0
|Rhythm Thief & the Emperor’s Treasure™
|KR
|-
|00040000000c5200
|0
|Reel Fishing® 3D
Paradise Mini
|EU
|-
|00040000000c5700
|410
|Real Heroes: Firefighter 3D
|US
|-
|00040000000c6f00
|410
|MH3U Data Transfer Program
|US
|-
|00040000000c7100
|410
|Monster Hunter™ 3 Ultimate
Data Transfer Program
|EU
|-
|00040000000c7700
|410
|Real Heroes: Firefighter 3D
|EU
|-
|00040000000c7f00
|0
|톰 클랜시의 고스트 리콘 섀도우 워즈
|KR
|-
|00040000000c8000
|0
|톰 클랜시의 스플린터 셀 3D
|KR
|-
|00040000000c8900
|0
|짜릿! 우물로 드롭
|KR
|-
|00040000000c8a00
|0
|밀고 떨구고
|KR
|-
|00040000000c8d00
|410
|Monster High™
Skultimate Roller Maze™
|EU
|-
|00040000000c9e00
|840
|実写でちびロボ!
|JP
|-
|00040000000cbb00
|0
|Picdun 2: Witch's Curse
|EU
|-
|00040000000cbd00
|420
|みんなのおしゃべりチャット
|JP
|-
|00040000000cca00
|0
|悄悄互動日記
|TW
|-
|00040000000ccd00
|820
|YouTube
|EU
|-
|00040000000cd600
|10
|Sudoku by Nikoli
|KR
|-
|00040000000cd700
|10
|Bird Mania 3D
|KR
|-
|00040000000cd800
|0
|SpeedX 3D
|KR
|-
|00040000000cef00
|410
|Swords & Soldiers 3D
|EU
|-
|00040000000cfd00
|0
|SENRAN KAGURA Burst
|KR
|-
|00040000000d0600
|430
|Swords & Soldiers 3D
|US
|-
|00040000000d1700
|0
|Air Battle Hockey 3D
|EU
|-
|00040000000d1800
|0
|Bloody Vampire
|EU
|-
|00040000000d2400
|0
|Witch & Hero
|EU
|-
|00040000000d2900
|420
|だるめしスポーツ店
|JP
|-
|00040000000d2e00
|0
|MONSTER HUNTER 3 ULTIMATE
|KR
|-
|00040000000d2f00
|0
|Mario and Donkey Kong™:
Minis on the Move
|EU
|-
|00040000000d3000
|830
|YouTube
|JP
|-
|00040000000d4800
|0
|My Riding Stables 3D–
Jumping for the Team
|EU
|-
|00040000000d4a00
|420
|Star Wars Pinball
|EU
|-
|00040000000d7700
|0
|Jewel Master Atlantis 3D
|EU
|-
|00040000000d7b00
|410
|3D スーパーハングオン
|JP
|-
|00040000000d8c00
|0
|@SIMPLE DLシリーズ Vol.10
THE浮気彼氏Xmas中止のお知らせ
|JP
|-
|00040000000d9300
|0
|The Beet Party:
Beet Poets
|EU
|-
|00040000000d9400
|0
|The Beet Party:
Unidentified Flying Waffle
|EU
|-
|00040000000db700
|c80
|@SIMPLE DLシリーズ Vol.15
THE 麻雀
|JP
|-
|00040000000db800
|450
|KORG M01D
|JP
|-
|00040000000de100
|10
|Lola's Math Train
|EU
|-
|00040000000e6100
|0
|Akari by Nikoli
|KR
|-
|00040000000e6800
|420
|Star Wars Pinball
|US
|-
|00040000000e8200
|0
|Groove Heaven
|EU
|-
|00040000000e9300
|410
|@SIMPLE DLシリーズ Vol.14
THE 脱出ゲーム～裏切りの密室～
|JP
|-
|00040000000e9800
|410
|3D 獣王記
|JP
|-
|00040000000ea800
|0
|SpeedX 3D Hyper Edition
|EU
|-
|00040000000eaf00
|0
|THE "DENPA" MEN 2:
Beyond the Waves
|EU
|-
|00040000000eb000
|1050
|ソリティ馬
|JP
|-
|00040000000edc00
|410
|Dillon's Rolling Western
The Last Ranger
|KR
|-
|00040000000edd00
|420
|Dillon's Rolling Western
|KR
|-
|00040000000ee600
|410
|どぎめぎインリョクちゃん
|JP
|-
|00040000000ee900
|410
|3D ベア･ナックル怒りの鉄拳
|JP
|-
|00040000000f7300
|0
|新・世界樹の迷宮ミレニアムの少女 (日文版)
|TW
|-
|00040000000fb900
|410
|3D ギャラクシーフォースⅡ
|JP
|-
|00040000000fc700
|0
|Donkey Kong Country Returns 3D
(英文版)
|TW
|-
|00040000000fc800
|1060
|honto for ニンテンドー3DS
|JP
|-
|00040000000fc900
|0
|魔女與勇者
|TW
|-
|00040000000fd300
|0
|逆轉裁判 5 (英文版)
|TW
|-
|00040000000fe200
|10
|Talking Phrasebook -
7 Languages
|US
|-
|0004000000103500
|410
|@SIMPLE DLシリーズ Vol.21
THE 鑑識官 File.1
|JP
|-
|0004000000103600
|410
|@SIMPLE DLシリーズ Vol.23
THE 鑑識官 File.2
|JP
|-
|0004000000104300
|1
|マイティースイッチフォース!
|JP
|-
|0004000000105800
|10
|世界樹の迷宮Ⅳ 伝承の巨神 (日文版)
|TW
|-
|0004000000105900
|10
|Etrian Odyssey Ⅳ Legends of the Titan (英文版)
|TW
|-
|0004000000105c00
|0
|爆走老精靈
|TW
|-
|0004000000108d00
|820
|Retro City Rampage: DX
|EU
|-
|0004000000109800
|28e0
|ニコニコ
|JP
|-
|000400000010cf00
|0
|Sonic Lost World™ (英文版)
|TW
|-
|000400000010d200
|820
|Retro City Rampage™: DX
|US
|-
|000400000010db00
|0
|邦妮早午餐
|TW
|-
|000400000010dc00
|0
|初音未來 Project mirai 2 (日文版)
|TW
|-
|000400000010e600
|420
|遊戯王ARC-Vオフィシャル
カードゲームかんたんマスター!
|JP
|-
|0004000000111100
|820
|Grinsia
|US
|-
|0004000000112300
|420
|Cubit The Hardcore Platformer Robot
|US
|-
|0004000000115700
|0
|The Legend of Zelda:
A Link Between Worlds (英文版)
|TW
|-
|0004000000119300
|0
|Mario Party: Island Tour (英文版)
|TW
|-
|0004000000119a00
|1040
|Shovel Knight
|US
|-
|0004000000120100
|420
|3D ファンタジーゾーン
オパオパブラザーズ
|JP
|-
|0004000000121d00
|820
|3D ファンタジーゾーンⅡダブル
|JP
|-
|0004000000123200
|0
|Kirby: Triple Deluxe (英文版)
|TW
|-
|0004000000124000
|410
|The Keep
|US
|-
|0004000000124300
|410
|Cubit The Hardcore
Platformer Robot
|EU
|-
|0004000000124a00
|c50
|リアル脱出ゲーム×ニンテンドー
3DS 超破壊計画からの脱出
|JP
|-
|0004000000127600
|401
|Alien On The Run
|US
|-
|0004000000128900
|410
|3D アウトラン
|JP
|-
|0004000000129600
|410
|AiRace Xeno
|EU
|-
|0004000000129f00
|440
|KORG DSN-12
|JP
|-
|000400000012bf00
|410
|AiRace Xeno
|US
|-
|000400000012cb00
|c30
|Shovel Knight
|EU
|-
|000400000012d000
|820
|Bit Boy!! ARCADE
|EU
|-
|000400000012e700
|430
|Moon Chronicles™
|US
|-
|0004000000130300
|c40
|拡散性ミリオンアーサー
|JP
|-
|0004000000132900
|0
|逆轉裁判123 / Phoenix Wright:
Ace Attorney Trilogy(日英版)
|TW
|-
|0004000000134600
|410
|バッジとれ～るセンター
|JP
|-
|0004000000136a00
|0
|鐵道日本！長良川鐵道出發篇
(繁體中文版)
|TW
|-
|0004000000138900
|410
|Proun+
|EU
|-
|0004000000139c00
|c70
|みんなでまもって騎士
姫のトキメキらぷそでぃ
|JP
|-
|000400000013d000
|820
|ドラゴンボールヒーローズ UM2
ゲームデータ引継ぎアプリ
|JP
|-
|000400000013d100
|1470
|ドラゴンクエストⅩ オンライン
|JP
|-
|000400000013ea00
|420
|Comic Workshop
|US
|-
|000400000013ee00
|430
|Woah Dave!
|US
|-
|000400000013f900
|420
|Glory of Generals
|US
|-
|0004000000140f00
|2cc0
|ドラゴンクエストⅩ
冒険者のおでかけ超便利ツール
|JP
|-
|0004000000141000
|830
|ポケとる
|JP
|-
|0004000000141a00
|0
|MONSTER HUNTER 4G(日文版)
|TW
|-
|0004000000141f00
|10
|Fossil Fighters™: Frontier(英文版)
|TW
|-
|0004000000143c00
|440
|Painting Workshop
|US
|-
|0004000000144d00
|c30
|Oh!ガッチマンデンゲキ
BAZOOKA!! スペシャルゲーム
|JP
|-
|0004000000146f00
|410
|マイティガンヴォルト
|JP
|-
|0004000000147d00
|0
|Dedede's Drum Dash Deluxe(英文版)
|TW
|-
|0004000000148100
|0
|Kirby Fighters Deluxe™(英文版)
|TW
|-
|0004000000148400
|810
|Comic Workshop
|EU
|-
|0004000000148c00
|10
|Hatsune Miku: Project Mirai DX
|US
|-
|0004000000148f00
|410
|Proun+
|US
|-
|0004000000149700
|810
|Painting Workshop
|EU
|-
|000400000014b000
|410
|ブレイブリーセカンド
無料で遊べる三銃士編
|JP
|-
|000400000014c900
|820
|Battleminer
|US
|-
|0004000000150d00
|420
|Bloo Kid 2
|US
|-
|0004000000151100
|410
|Cube Creator 3D
|US
|-
|0004000000151f00
|0
|Pokémon Art Academy(英文版)
|TW
|-
|0004000000152e00
|10
|カンフーラビット
|JP
|-
|000400000015a600
|0
|魔神少女 -Chronicle 2D ACT-(繁體中文版)
|TW
|-
|000400000015b100
|820
|IronFall: Invasion
|EU
|-
|000400000015d100
|0
|Fairune(繁體中文版)
|TW
|-
|000400000015d800
|820
|IRONFALL Invasion
|US
|-
|0004000000162200
|1890
|イジン爆闘!!ウデジマン
|JP
|-
|0004000000164600
|410
|みんなのポケモンスクランブル
|JP
|-
|0004000000166400
|10
|Toy Stunt Bike(日文版)
|TW
|-
|0004000000169000
|0
|PAZURU(日文版)
|TW
|-
|000400000016d100
|0
|Puzzle & Dragons Z + Puzzle & Dragons Super Mario Bros. Edition(英文版)
|TW
|-
|000400000016d200
|0
|Puzzle & Dragons Z + Super Mario Bros. Edition 特別試玩版
|TW
|-
|0004000000175d00
|10
|PROJECT X ZONE 2：BRAVE NEW WORLD(日文版)
|TW
|-
|0004000000177d00
|410
|アルファディア
|JP
|-
|0004000000179100
|0
|Goonyan(日文版)
|TW
|-
|000400000017a900
|10
|Johnny's Payday Panic(英日版)
|TW
|-
|000400000017b800
|0
|ファイアーエムブレムif (日文版)
|TW
|-
|000400000017bf00
|0
|IRONFALL -Invasion- (日文版)
|TW
|-
|000400000017d200
|410
|超科学脱出ギア･ディテクティブ
|JP
|-
|000400000017da00
|0
|패밀리 루어피싱 3D
|KR
|-
|000400000017ec00
|0
|MONSTER HUNTER® X (日文版)
|TW
|-
|0004000000182c00
|0
|ゼルダの伝說　
トライフォース３銃士 (日文版)
|TW
|-
|0004000000185c00
|0
|The Legend of Zelda™ : Majora's Mask 3D(英文版)
|TW
|-
|000400000f700800
|c30
|The Binding of Isaac: Rebirth
|US
|-
|000400000f700900
|840
|The Binding of Isaac: Rebirth
|EU
|-
|000400020008c401
|820
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000b8b01
|410
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000edf01
|420
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000ee001
|410
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200132501
|420
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200136a01
|0
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200175d01
|0
|The Binding of Isaac: Rebirth
|EU
|-
|000400020017a901
|10
|The Binding of Isaac: Rebirth
|EU
|-
|0004000e00030600
|410
|更新データ Ver. 1.1
マリオカート7
|JP
|-
|0004000e00030700
|410
|Mario Kart 7
Update data
|EU
|-
|0004000e00030800
|410
|Mario Kart™ 7
Update Ver. 1.1
|US
|-
|0004000e00032100
|800
|更新データ Ver. 1.2
NEWラブプラス
|JP
|-
|0004000e00036f00
|400
|更新データ Ver. 1.1
花といきもの立体図鑑
|JP
|-
|0004000e00039a00
|400
|更新データ Ver. 1.1
カルドセプト®
|JP
|-
|0004000e00043700
|400
|更新データ Ver. 1.1 ものすごく脳を鍛える5分間の鬼トレーニング
|JP
|-
|0004000e0004b500
|430
|更新データ Ver. 1.1
モンスターハンター4
|JP
|-
|0004000e0004b700
|400
|更新データ Ver. 1.1
G1グランプリ
|JP
|-
|0004000e0004ee00
|400
|更新データ Ver. 1.1
KINGDOM HEARTS 3D
|JP
|-
|0004000e00053600
|800
|更新データ Ver. 1.1
ペンギンの問題ザ･ウォ―ズ
|JP
|-
|0004000e00055d00
|1470
|更新データ Ver. 1.5
ポケットモンスター X
|JP
|-
|0004000e00055e00
|1460
|更新データ Ver. 1.5
ポケットモンスター Y
|JP
|-
|0004000e0005d100
|c10
|更新データ Ver. 1.2
GIRLS MODE よくばり宣言!
|JP
|-
|0004000e0005e900
|410
|更新データ Ver.1.1
BRAVELY DEFAULT FF
|JP
|-
|0004000e00060600
|420
|更新データ Ver. 1.1
マリオ&ルイージRPG4
|JP
|-
|0004000e00065000
|410
|Secret Mysteries in London -
Update
|EU
|-
|0004000e0006cf00
|830
|Jewel Quest
The Sapphire Dragon - Update
|EU
|-
|0004000e0006d200
|2000
|更新データ Ver. 1.7
ファンタジーライフ
|JP
|-
|0004000e00072a00
|410
|更新データ Ver. 1.1
真･三國無双 VS
|JP
|-
|0004000e00074500
|820
|更新データ Ver. 1.1
探偵神宮寺三郎復讐の輪舞
|JP
|-
|0004000e00074600
|400
|更新データ Ver. 1.1 DQM
テリーのワンダーランド3D
|JP
|-
|0004000e00078500
|c00
|更新データ Ver. 1.2
ダンボール戦機爆ブースト
|JP
|-
|0004000e00078b00
|400
|更新データ Ver. 1.1
レイトン教授VS逆転裁判
|JP
|-
|0004000e0007a000
|400
|更新データ Ver. 1.1 METAL
GEAR SOLID SNAKE EATER 3D
|JP
|-
|0004000e00081e00
|410
|METAL GEAR SOLID SNAKE
EATER 3D Update Ver. 1.1
|US
|-
|0004000e00084d00
|430
|AeternoBlade
Update
|EU
|-
|0004000e00086200
|840
|更新データ Ver. 1.1
とびだせどうぶつの森
|JP
|-
|0004000e00086500
|820
|업데이트 데이터 Ver. 1.1
튀어나와요 동물의 숲
|KR
|-
|0004000e0008c300
|410
|Tomodachi Life™ Update
Ver. 1.1
|US
|-
|0004000e0008c400
|c40
|Tomodachi Life™: Update
|EU
|-
|0004000e0008c500
|c50
|更新データ Ver. 1.2
トモダチコレクション新生活
|JP
|-
|0004000e00091000
|440
|更新データ Ver. 1.1
デビルサマナーソウルハッカーズ
|JP
|-
|0004000e00091400
|410
|Real Heroes: Firefighter 3D - Update
|EU
|-
|0004000e00095c00
|430
|更新データ Ver. 1.1
ディズニーマジックキャッスル
|JP
|-
|0004000e0009c000
|410
|Shin Megami Tensei: Devil
Survivor Overclocked Patch
|EU
|-
|0004000e0009ef00
|430
|更新データ Ver. 1.1
メダロットDUAL カブトVer.
|JP
|-
|0004000e0009f000
|430
|更新データ Ver. 1.1
メダロットDUAL クワガタVer.
|JP
|-
|0004000e0009fe00
|440
|更新データ Ver. 1.1
もっと気軽に!お絵描き工房プラス
|JP
|-
|0004000e000a0b00
|14a0
|更新データ Ver. 2.1
大合奏!バンドブラザーズP
|JP
|-
|0004000e000a1b00
|1020
|更新データ Ver. 1.3
イナズマイレブンGO2 ネップウ
|JP
|-
|0004000e000a1c00
|1020
|更新データ Ver. 1.3
イナズマイレブンGO2 ライメイ
|JP
|-
|0004000e000a4d00
|400
|更新データ Ver. 1.1
戦国無双 Chronicle 2nd
|JP
|-
|0004000e000a9000
|400
|New Style Boutique™
Update
|EU
|-
|0004000e000a9100
|400
|Style Savvy: Trendsetters
Update Ver. 1.1
|US
|-
|0004000e000a9800
|400
|更新データ Ver. 1.1 モデル☆
おしゃれオーディションプラチナ
|JP
|-
|0004000e000aa700
|420
|更新データ Ver. 1.1
カセキホリダームゲンギア
|JP
|-
|0004000e000ac700
|c50
|更新データ Ver. 1.2
カードファイト!! ヴァンガード
|JP
|-
|0004000e000ada00
|820
|更新データ Ver. 1.1
ピカピカナース物語2
|JP
|-
|0004000e000af700
|410
|LEGO® Legends of CHIMA:
Laval's Journey Update
|EU
|-
|0004000e000afb00
|410
|更新データ Ver. 1.1
チャリ走DX
|JP
|-
|0004000e000afc00
|410
|更新データ Ver. 1.1 デジモンワールド Re:Digitize Decode
|JP
|-
|0004000e000afd00
|420
|更新データ Ver. 1.1
メタルマックス4 月光のディーヴァ
|JP
|-
|0004000e000b1700
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 1: Update
|EU
|-
|0004000e000b1800
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 2: Update
|EU
|-
|0004000e000b1900
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 3: Update
|EU
|-
|0004000e000b4a00
|420
|更新データ Ver. 1.1
とんがりボウシと魔法の町
|JP
|-
|0004000e000b6d00
|410
|更新データ Ver. 1.1
燐光のランツェ
|JP
|-
|0004000e000b8b00
|5160
|更新データ Ver. 1.1.3 大乱闘
スマッシュブラザーズ for 3DS
|JP
|-
|0004000e000b9900
|410
|Real Heroes: Firefighter 3D - Update
|EU
|-
|0004000e000bb800
|440
|更新データ Ver. 1.1 イナズマ
イレブン1･2･3!! 円堂守伝説
|JP
|-
|0004000e000c0100
|420
|更新データ Ver. 2.0
マギはじまりの迷宮
|JP
|-
|0004000e000c1c00
|410
|更新データ Ver. 1.1 オシャレで
かわいい子犬と遊ぼ!-海編-
|JP
|-
|0004000e000c2900
|840
|Shantae and the Pirate's Curse
Update Ver. 02.02
|US
|-
|0004000e000c3600
|830
|更新データ Ver. 1.2 ペルソナQ
シャドウオブザラビリンス
|JP
|-
|0004000e000c3a00
|840
|更新データ Ver. 1.1
デビルサバイバー2 ブレイクレコード
|JP
|-
|0004000e000c9b00
|c50
|更新データ Ver. 1.2
ポケモンバンク
|JP
|-
|0004000e000cb700
|420
|更新データ Ver. 1.1 ニンテンドー
3DSガイドルーヴル美術館
|JP
|-
|0004000e000cb900
|430
|Nintendo 3DS™ Guide: Louvre
(English Version) Update
|US
|-
|0004000e000cba00
|420
|업데이트 데이터 Ver. 1.1
닌텐도 3DS 가이드 루브르 박물관
|KR
|-
|0004000e000cbd00
|1090
|更新データ Ver. 1.4
みんなのおしゃべりチャット
|JP
|-
|0004000e000cc400
|430
|更新データ Ver. 1.1
初音ミク Project mirai 2
|JP
|-
|0004000e000cd300
|410
|AeternoBlade Update Ver. 1.0
|US
|-
|0004000e000cf300
|420
|更新データ Ver. 1.1
カスタムモンスターズ
|JP
|-
|0004000e000cf400
|850
|更新データ Ver. 1.2
妖怪ウォッチ
|JP
|-
|0004000e000cf500
|420
|更新データ Ver. 1.1 DQM2
イルとルカの不思議なふしぎな鍵
|JP
|-
|0004000e000cf600
|430
|更新データ Ver. 1.1
CONCEPTIONⅡ
|JP
|-
|0004000e000cf900
|420
|更新データ Ver. 1.1
ポケモンアートアカデミー
|JP
|-
|0004000e000d0900
|420
|Pokémon™ Art Academy™:
Update
|EU
|-
|0004000e000d5600
|430
|Nintendo 3DS™ Guide: Louvre
(French Version) Update
|US
|-
|0004000e000d5700
|430
|Nintendo 3DS™ Guide: Louvre
(German Version) Update
|EU
|-
|0004000e000d5800
|430
|Nintendo 3DS™ Guide: Louvre
(Italian Version) Update
|EU
|-
|0004000e000d5900
|430
|Nintendo 3DS™ Guide: Louvre
(Spanish Version) Update
|US
|-
|0004000e000d5a00
|410
|Mario & Luigi™: Dream Team
Update
|US
|-
|0004000e000d6e00
|410
|更新データ Ver. 1.1
ゼルダの伝説ムジュラの仮面 3D
|JP
|-
|0004000e000d7c00
|1450
|更新データ Ver. 4.1
STEELDIVER SUBWARS
|JP
|-
|0004000e000d7d00
|1450
|Steel Diver™: Sub Wars
Update Ver. 4.1
|US
|-
|0004000e000d7e00
|1450
|Steel Diver™: Sub Wars:
Update
|EU
|-
|0004000e000d8e00
|840
|更新データ Ver. 1.2 ほっぺちゃん
つくって!あそんで!ぷにぷにタウン!
|JP
|-
|0004000e000d8f00
|830
|更新データ Ver. 1.1 まめゴマ
はっぴー!スイーツファーム
|JP
|-
|0004000e000d9000
|410
|Mario & Luigi™:
Dream Team Bros. Update
|EU
|-
|0004000e000db600
|410
|更新データ Ver. 1.1
BRAVELY DEFAULT FtS
|JP
|-
|0004000e000dbd00
|14b0
|更新データ Ver. 1.3
SIMPLEシリーズ Vol.1 THE 麻雀
|JP
|-
|0004000e000dc700
|430
|更新データ Ver. 1.1
熱血硬派くにおくんSP 乱闘協奏曲
|JP
|-
|0004000e000dc800
|830
|更新データ Ver. 1.0.2
ブレイブリーセカンド
|JP
|-
|0004000e000dca00
|430
|更新データ Ver. 1.1
ダンボール戦機W 超カスタム
|JP
|-
|0004000e000dd900
|410
|Hakuoki: Memories of the
Shinsengumi Update
|US
|-
|0004000e000df800
|c70
|更新データ Ver. 1.2
進撃の巨人～人類最後の翼～
|JP
|-
|0004000e000e9a00
|830
|更新データ Ver. 1.2
TFF CURTAIN CALL
|JP
|-
|0004000e000e9c00
|1490
|更新データ Ver. 1.7
ファンタジーライフ LINK!
|JP
|-
|0004000e000ea900
|430
|Disney Magical World
Update Ver. 1.1
|US
|-
|0004000e000eb800
|820
|更新データ Ver. 1.2
ホームタウンストーリー
|JP
|-
|0004000e000ecd00
|410
|Adventure Timeâ˘: ETDBIDK
Update 1
|US
|-
|0004000e000edf00
|5130
|Super Smash Bros.™
Update Ver. 1.1.3
|US
|-
|0004000e000ee000
|5130
|Super Smash Bros.™
for Nintendo 3DS: Update
|EU
|-
|0004000e000ef000
|1070
|更新データ Ver. 1.4
電波人間のRPG3
|JP
|-
|0004000e000f1f00
|860
|更新データ Ver. 1.2 ポケモン
トレッタラボメインシステム
|JP
|-
|0004000e000f3f00
|420
|更新データ Ver. 2.0.0
ポポロクロイス牧場物語
|JP
|-
|0004000e000f4000
|840
|更新データ Ver. 1.2
ダンボール戦機ウォーズ
|JP
|-
|0004000e000f4200
|840
|更新データ Ver. 1.2
アイカツ! 2人のmy princess
|JP
|-
|0004000e000f4f00
|450
|更新データ Ver. 1.1
喧嘩番長6～ソウル&ブラッド～
|JP
|-
|0004000e000f5800
|820
|更新データ Ver. 1.2 ワンピース
アンリミテッドワールド R
|JP
|-
|0004000e000f7200
|420
|更新データ Ver. 1.1
ナナミ English上達のコツ
|JP
|-
|0004000e000f9700
|420
|更新データ Ver. 1.1
王だぁランド!
|JP
|-
|0004000e000f9b00
|1080
|更新データ Ver. 1.4
ダービースタリオンGOLD
|JP
|-
|0004000e000fb000
|430
|更新データ Ver. 1.1
文字パズルことだまーる★
|JP
|-
|0004000e000fb100
|c90
|更新データ Ver. 1.3
閃乱カグラ2 -真紅-
|JP
|-
|0004000e000fb300
|420
|更新データ Ver. 1.1
トリコアルティメットサバイバル
|JP
|-
|0004000e000fb400
|430
|更新データ Ver. 1.1 モデション
ドリームガール
|JP
|-
|0004000e000fc100
|420
|I am an Air Traffic Controller
Airport Hero Hawaii Update
|US
|-
|0004000e000fce00
|410
|Hakuoki
Update
|EU
|-
|0004000e00100900
|410
|更新資料 Ver. 1.1
MONSTER HUNTER 4
|TW
|-
|0004000e00101200
|420
|更新データ Ver. 1.1 ぷよぷよテトリス
|JP
|-
|0004000e00101300
|410
|更新データ Ver. 1.1
ヒーローバンク
|JP
|-
|0004000e00102000
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102100
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102200
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102600
|410
|Adventure Timeâ˘:
ETDBIDK Update
|EU
|-
|0004000e00102f00
|850
|更新データ Ver. 1.2.0 太鼓の
達人どんとかつの時空大冒険
|JP
|-
|0004000e00103200
|c30
|更新データ Ver. 1.2
わんニャンペットショップ
|JP
|-
|0004000e00103900
|420
|更新データ Ver.1.1 @SIMPLE DL
Vol.20 THE カード
|JP
|-
|0004000e00103e00
|410
|更新データ Ver. 1.1.0 @SIMPLE
DL Vol.27 THE イラストパズル
|JP
|-
|0004000e00104800
|420
|更新データ Ver. 1.1
メタルファイトベイブレード
|JP
|-
|0004000e00104900
|830
|更新データ Ver. 1.2
VitaminZ Revolution
|JP
|-
|0004000e00104a00
|420
|更新データ Ver.1.1ジュエルペット
カフェで魔法のクッキング!
|JP
|-
|0004000e00104c00
|420
|更新データ Ver. 1.1 こびとづかん　
こびとの不思議実験セット
|JP
|-
|0004000e00105000
|410
|업데이트 데이터 Ver. 1.1
몬스터헌터 4
|KR
|-
|0004000e00105100
|430
|更新データ Ver. 1.1
VitaminX Evolution Plus
|JP
|-
|0004000e00106700
|410
|更新データ Ver. 1.1
キャラペット
|JP
|-
|0004000e00108100
|430
|更新データ Ver. 1.1
アロー･オブ･ラピュタ
|JP
|-
|0004000e0010af00
|420
|Shantae and the
Pirate's Curse - Update
|EU
|-
|0004000e0010ba00
|420
|更新データ Ver. 1.1 イナズマ
イレブンGO ビッグバン
|JP
|-
|0004000e0010bb00
|420
|更新データ Ver. 1.1 イナズマ
イレブンGO スーパーノヴァ
|JP
|-
|0004000e0010bc00
|440
|更新データ Ver. 2.0.0
牧場物語つながる新天地
|JP
|-
|0004000e0010e200
|830
|更新データ Ver. 1.2
FINAL FANTASY EXPLORERS
|JP
|-
|0004000e0010f600
|410
|Harvest Moon®: The Lost
Valley Update Ver. 1.01
|US
|-
|0004000e00111e00
|830
|更新データ Ver. 1.2
チャリ走 DX2 ギャラクシー
|JP
|-
|0004000e00113300
|450
|更新データ Ver. 1.1
メダロット8 カブトVer.
|JP
|-
|0004000e00113400
|450
|更新データ Ver. 1.1
メダロット8 クワガタVer.
|JP
|-
|0004000e00114700
|840
|更新データ Ver. 1.2
コミック工房
|JP
|-
|0004000e00114900
|430
|更新データ Ver. 1.1
異史戦国伝宿業
|JP
|-
|0004000e00114b00
|410
|更新データ Ver. 1.1
タイムアベンジャー
|JP
|-
|0004000e00117200
|1480
|更新データ Ver. 3.2.1
プチコン3号 SmileBASIC
|JP
|-
|0004000e00118100
|430
|更新データ Ver. 1.1
名探偵コナンファントム狂詩曲
|JP
|-
|0004000e00118500
|420
|更新データ Ver. 1.1
漢検トレーニング
|JP
|-
|0004000e00119a00
|820
|Shovel Knight Update Ver. 1.1
|US
|-
|0004000e0011b200
|830
|更新データ Ver. 1.2
大人VSグレコ漢字完全フルセット
|JP
|-
|0004000e0011b300
|420
|更新データ Ver. 1.1
大人VSグレコ漢字激ムズ編
|JP
|-
|0004000e0011b400
|420
|更新データ Ver. 1.1
大人VSグレコ漢字ちょいムズ編
|JP
|-
|0004000e0011c200
|410
|LEGO® Batman™ 3:
BEYOND GOTHAM - Update
|EU
|-
|0004000e0011c400
|1c70
|更新データ Ver. 1.4 ポケット
モンスターオメガルビー
|JP
|-
|0004000e0011c500
|1c70
|更新データ Ver. 1.4 ポケット
モンスターアルファサファイア
|JP
|-
|0004000e0011d700
|1040
|更新データ Ver. 1.2
モンスターハンター4G
|JP
|-
|0004000e0011dd00
|410
|LEGO® Batman™ 3:
Beyond Gotham Update
|US
|-
|0004000e00120000
|420
|更新データ Ver. 1.1
ナナミ English日常会話
|JP
|-
|0004000e00120500
|820
|更新データ Ver. 1.2 新･世界樹
の迷宮2 ファフニールの騎士
|JP
|-
|0004000e00120600
|1880
|更新データ Ver. 1.6
ドラゴンボールヒーローズ UM2
|JP
|-
|0004000e00120700
|420
|更新データ Ver. 1.1 カード
ファイト!! ヴァンガード LOV
|JP
|-
|0004000e00120800
|410
|更新データ Ver. 1.1
IslandDays
|JP
|-
|0004000e00120900
|420
|更新データ Ver. 2.0.0 禁忌のマグナ
|JP
|-
|0004000e00121b00
|430
|更新データ Ver. 1.1 マル合格!
ITパスポート試験平成26年度版
|JP
|-
|0004000e00125500
|410
|The Legend of Zelda™:
Majora’s Mask 3D Update Ver. 1.1
|US
|-
|0004000e00125600
|410
|The Legend of Zelda™:
Majora's Mask 3D: Update
|EU
|-
|0004000e00125d00
|24c0
|更新データ Ver. 1.9
電波人間のRPG FREE!
|JP
|-
|0004000e00126100
|410
|Monster Hunter™ 4 Ultimate:
Update
|EU
|-
|0004000e00126300
|430
|Monster Hunter™ 4 Ultimate
Update Ver. 1.1
|US
|-
|0004000e00127a00
|410
|更新データ Ver. 1.1
ぼく管関空 SKY STORY
|JP
|-
|0004000e00129d00
|440
|更新データ Ver. 1.1
不思議の国の冒険酒場
|JP
|-
|0004000e0012a700
|820
|更新データ Ver. 1.2
蒼き雷霆ガンヴォルト
|JP
|-
|0004000e0012a800
|c50
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012a900
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012aa00
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012ab00
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012b700
|410
|更新データ Ver. 1.0.3 ぐんまの
やぼう for ニンテンドー3DS
|JP
|-
|0004000e0012be00
|410
|Harvest Moon®:
The Lost Valley: Update
|EU
|-
|0004000e0012c800
|410
|Mario vs. Donkey Kong™:
Tipping Stars Ver. 1.0.1
|US
|-
|0004000e0012c900
|410
|更新データ Ver. 1.0.1
マリオvs.ドンキーコング
|JP
|-
|0004000e0012ca00
|410
|Mario vs. Donkey Kong™
Tipping Stars: Update
|EU
|-
|0004000e0012d800
|c30
|更新データ Ver. 1.2.0
GIRLS MODE 3 キラキラ☆コーデ
|JP
|-
|0004000e0012dc00
|410
|【白夜王国】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012dd00
|410
|【暗夜王国】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012de00
|420
|【スペシャルエディション】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012f500
|410
|更新データ Ver. 1.1 テイルズオブ
ザワールドレーヴユナイティア
|JP
|-
|0004000e0012f800
|2050
|更新データ Ver. 2.1
妖怪ウォッチ2 本家
|JP
|-
|0004000e0012f900
|2050
|更新データ Ver. 2.1
妖怪ウォッチ2 元祖
|JP
|-
|0004000e0012fa00
|c60
|更新データ Ver. 1.2
ドーリィ♪カノン
|JP
|-
|0004000e00130300
|20a0
|更新データ Ver. 2.3.0
拡散性ミリオンアーサー
|JP
|-
|0004000e00132500
|820
|更新データ Ver. 1.2.0
Code Name: S.T.E.A.M.
|JP
|-
|0004000e00132c00
|410
|Siesta Fiesta - Update
|EU
|-
|0004000e00134300
|410
|更新データ Ver. 1.1.0
ロストヒーローズ2
|JP
|-
|0004000e00134500
|430
|更新データ Ver. 1.1
進撃の巨人～人類最後の翼～CHAIN
|JP
|-
|0004000e00134600
|1040
|更新データ Ver. 1.3.0
バッジとれ～るセンター
|JP
|-
|0004000e00137700
|430
|Puzzle & Dragons Z +
Super Mario Bros. Edition 2.0
|US
|-
|0004000e00137800
|420
|Puzzle & Dragons Z
|EU
|-
|0004000e00139300
|410
|Siesta Fiesta
Update Ver. 1.0
|US
|-
|0004000e00139a00
|440
|更新データ Ver. 1.1.0
コロロケの森ぽいっと
|JP
|-
|0004000e0013fe00
|420
|更新データ Ver. 1.0.2
王国の道具屋さん
|JP
|-
|0004000e00140100
|410
|更新データ Ver. 1.0.2
王国の道具屋さん
|JP
|-
|0004000e00140b00
|420
|更新データ Ver. 1.1
テラフォーマーズ紅き惑星の激闘
|JP
|-
|0004000e00141a00
|410
|MONSTER HUNTER 4G 更新資料 ver.1.1
|TW
|-
|0004000e00141d00
|830
|更新データ Ver. 1.2 大合奏!
バンドブラザーズP デビュー
|JP
|-
|0004000e00144300
|410
|更新データ Ver. 1.1.0
ヒーローバンク2
|JP
|-
|0004000e00144400
|18a0
|更新データ Ver. 1.5
ワンピース超グランドバトル!X
|JP
|-
|0004000e00144600
|410
|更新データ Ver. 1.1
弱虫ペダル明日への高回転
|JP
|-
|0004000e00145300
|410
|更新データ Ver. 1.1
魔神少女 -Chronicle 2D ACT-
|JP
|-
|0004000e00145500
|420
|更新データ Ver. 1.1.0
役満鳳凰
|JP
|-
|0004000e00146c00
|410
|更新データ Ver. 1.1.0 ロスト
ヒーローズ2 PREMIUM EDITION
|JP
|-
|0004000e00147800
|410
|更新データ Ver. 1.1.0 ブレイ
ブリーデフォルト無料で遊べる版
|JP
|-
|0004000e0014a900
|420
|更新データ Ver. 1.1 そろばん･
あんざん･フラッシュ暗算完全版
|JP
|-
|0004000e0014ab00
|420
|更新データ Ver. 1.1 まほコレ
～魔法☆あいどるコレクション～
|JP
|-
|0004000e0014ac00
|c40
|更新データ Ver. 1.3 フューチャー
カードバディファイト
|JP
|-
|0004000e0014ad00
|410
|大逆転裁判更新データ Ver. 1.1.0
|JP
|-
|0004000e0014ba00
|1040
|更新データ Ver. 1.1.1
ピンチ50連発!!
|JP
|-
|0004000e0014c800
|410
|Azure Striker GUNVOLT
Update Ver. 1.2
|US
|-
|0004000e0014dd00
|410
|LEGO® Ninjago™: Shadow
of Ronin - Update
|EU
|-
|0004000e0014df00
|1080
|更新データ Ver. 1.0.4
戦国無双 Chronicle 3
|JP
|-
|0004000e0014e000
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e700
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e800
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e900
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014eb00
|410
|LEGO® Ninjago™: Shadow
of Ronin™ Update Ver. 2.0
|US
|-
|0004000e0014f000
|410
|更新データ Ver. 2.0 どうぶつの森
ハッピーホームデザイナー
|JP
|-
|0004000e0014f100
|410
|Animal Crossing™: Happy Home
Designer Update Ver. 2.0
|US
|-
|0004000e0014f200
|410
|AC: Happy Home Designer:
Update
|EU
|-
|0004000e0014fb00
|820
|更新データ Ver. 1.2
PROJECT X ZONE 2
|JP
|-
|0004000e0014fc00
|820
|更新データ Ver. 1.2
PROJECT X ZONE 2 OGSE
|JP
|-
|0004000e00150100
|1870
|更新データ Ver. 1.5
チャリ走 DX3 タイムライダー
|JP
|-
|0004000e00152900
|420
|更新データ Ver. 1.1
暗殺教室殺せんせー大包囲網!!
|JP
|-
|0004000e00152a00
|c30
|更新データ Ver. 1.2 すみっコ
ぐらしここがおちつくんです
|JP
|-
|0004000e00155000
|860
|更新データ Ver. 1.2
ディズニーマジックキャッスル2
|JP
|-
|0004000e00155100
|c40
|更新データ Ver. 1.2
妖怪ウォッチ2 真打
|JP
|-
|0004000e00155400
|850
|更新データ Ver. 1.2.0
モンスターハンタークロス
|JP
|-
|0004000e00155800
|801
|更新データ Ver. 1.2.0
モンスターハンタークロス
|JP
|-
|0004000e00156100
|830
|更新データ Ver. 1.2
マーセナリーズサーガ2
|JP
|-
|0004000e00157700
|410
|更新データ Ver. 1.1
マル合格! FP3級平成26-27年度版
|JP
|-
|0004000e00157900
|820
|更新データ Ver. 2.1.0
エースコンバット 3D クロスランブル +
|JP
|-
|0004000e00158600
|410
|Titan Attacks! Update Ver. 1.1
|US
|-
|0004000e00159000
|410
|Titan Attacks! - Update
|EU
|-
|0004000e00159500
|410
|Shin Megami Tensei: Devil
Survivor 2 Update Ver. 1.1
|US
|-
|0004000e0015a200
|410
|OlliOlli - Update
|EU
|-
|0004000e0015a300
|820
|ACE COMBAT™ ASSAULT
HORIZON LEGACY + - Update
|EU
|-
|0004000e0015a400
|410
|OlliOlli Update Ver. 1.1.0
|US
|-
|0004000e0015a800
|440
|更新データ Ver. 2.0
6×1≠UNLIMITED?
|JP
|-
|0004000e0015bd00
|830
|업데이트 데이터 Ver. 1.2
Azure Striker GUNVOLT
|KR
|-
|0004000e0015c000
|820
|ACE COMBAT ASSAULT
HORIZON LEGACY+ Update
|US
|-
|0004000e0015cb00
|430
|更新データ Ver. 1.0.1 新･
ロロナのアトリエはじまりの物語
|JP
|-
|0004000e0015dc00
|410
|更新データ Ver. 1.1
エクスケーブ～運命の夢幻塔編～
|JP
|-
|0004000e0015e300
|430
|更新データ Ver. 1.0.1
ドラえもんのび太の宇宙英雄記
|JP
|-
|0004000e0015e700
|420
|更新データVer.1.1 ラングリッサー
リインカーネーション -転生-
|JP
|-
|0004000e0015e800
|410
|更新データ Ver. 1.1.0　
プリパラ&プリティーリズム 1450!
|JP
|-
|0004000e00160200
|410
|Goosebumps: The Game
Update Ver. 1.01
|US
|-
|0004000e00160800
|1060
|更新データ Ver. 1.4
コミック工房2
|JP
|-
|0004000e00162300
|440
|更新データ Ver. 2.0 パズドラ
SUPER MARIO BROS. EDITION
|JP
|-
|0004000e00163c00
|c60
|更新データ Ver. 1.2.0
ドラゴンボールZ 超究極武闘伝
|JP
|-
|0004000e00166f00
|820
|Comic Workshop 2: Update
|EU
|-
|0004000e00167700
|410
|YO-KAI WATCH™ Update
Ver. 1.1
|US
|-
|0004000e00167c00
|5060
|업데이트 데이터 Ver. 1.1.3
슈퍼 스매시브라더스
for 닌텐도 3DS
|KR
|-
|0004000e00167f00
|820
|Comic Workshop 2
Update Ver. 1.2
|US
|-
|0004000e00168600
|5050
|大亂鬥スマッシュブラザーズ for
Nintendo 3DS 更新資料 Ver. 1.1.3
|TW
|-
|0004000e00169500
|410
|Rodea the Sky Soldier -
Update
|EU
|-
|0004000e00169c00
|830
|更新データ Ver. 1.2
ちゃおイラストクラブ
|JP
|-
|0004000e00169d00
|410
|更新データ Ver. 1.1.0
アイカツ!My No.1 Stage!
|JP
|-
|0004000e0016a100
|410
|New Style Boutique™ 2 -
Fashion Forward: Update
|EU
|-
|0004000e0016b200
|410
|【ダウンロード版】
更新データファイアーエムブレムif
|JP
|-
|0004000e0016c600
|18b0
|更新データ Ver. 2.2
妖怪ウォッチバスターズ白犬隊
|JP
|-
|0004000e0016c700
|18b0
|更新データ Ver. 2.2
妖怪ウォッチバスターズ赤猫団
|JP
|-
|0004000e0016d100
|420
|Puzzle & Dragons Z + Puzzle & Dragons Super Mario Bros. Edition
更新資料 Ve
|TW
|-
|0004000e0016f200
|820
|SAMURAI WARRIORS:
Chronicles 3 Update Ver. 1.0.2
|US
|-
|0004000e00170800
|410
|更新データ Ver. 1.1
ほっぺちゃんぷにっとしぼって大冒険!
|JP
|-
|0004000e00173b00
|820
|SAMURAI WARRIORS:
Chronicles 3: Update
|EU
|-
|0004000e00174d00
|430
|更新データ Ver. 1.1
三國志2
|JP
|-
|0004000e00175d00
|420
|PROJECT X ZONE 2：BRAVE NEW WORLD 更新資料Ver.1.2
|TW
|-
|0004000e00176700
|410
|업데이트 데이터 Ver. 1.1
프로젝트 크로스 존 2
|KR
|-
|0004000e00176e00
|c30
|更新データ Ver. 2.1.0
ゼルダの伝説トライフォース3銃士
|JP
|-
|0004000e00176f00
|c30
|The Legend of Zelda™:
Tri Force Heroes Update
|US
|-
|0004000e00177000
|c30
|The Legend of Zelda™:
Tri Force Heroes: Update
|EU
|-
|0004000e00177e00
|420
|更新データ Ver. 1.1
モノカゲクエスト
|JP
|-
|0004000e00178000
|840
|更新データ Ver. 1.2
ドリームガールプルミエ
|JP
|-
|0004000e00178500
|430
|更新データ Ver. 1.1
すみっコぐらしおみせはじめるんです
|JP
|-
|0004000e0017c200
|410
|更新データ Ver. 1.1
すみっコぐらしおみせはじめるんです
|JP
|-
|0004000e0017c900
|820
|Shovel Knight:
Update
|EU
|-
|0004000e0017d800
|410
|更新データ Ver. 1.1.0 ダウン
タウンのガキの使いやあらへんで
|JP
|-
|0004000e0017e100
|410
|Shovel Knight Update Ver. 2.2
|US
|-
|0004000e0017ec00
|820
|MONSTER HUNTER X 更新資料 Ver. 1.2.0
|TW
|-
|0004000e0f700000
|410
|更新データ Ver. 1.1
New 3DS専用ゼノブレイド
|JP
|-
|0004000e0f700100
|410
|Xenoblade Chronicles™ 3D
Update Ver. 1.0
|US
|-
|0004000e0f700200
|410
|Xenoblade Chronicles 3D:
Update
|EU
|-
|000480044b333656
|0
|Jewel Quest 5 -
The Sleepless Star
|EU
|-
|000480044b343350
|10
|Jewel Quest 4 Heritage
|EU
|-
|000480044b354c50
|0
|Forgotten Legions
|EU
|-
|000480044b35544a
|400
|戦国Tactics
|JP
|-
|000480044b425150
|10
|Break Tactics
|EU
|-
|000480044b464a4a
|400
|マジカルファンタジスタ
|JP
|-
|000480044b464d4a
|400
|あたまごモンスターズ
|JP
|-
|000480044b465a4a
|400
|あたまご
|JP
|-
|000480044b4b5a50
|10
|Academy: Chess Puzzles
|EU
|-
|000480044b4e414a
|800
|プチコンmkII
|JP
|-
|000480044b514e45
|400
|Castle Conqueror - Revolution
|US
|-
|000480044b555650
|30
|Bloons速 TD 4
|EU
|-
|000480044b564c45
|10
|Clash of Elementalists
|US
|-
|000480044b564c50
|0
|Clash of Elementalists
|EU
|-
|000480044b584650
|410
|Color Commando
|EU
|-
|000480044b584b50
|60
|Goony
|EU
|-
|000480044b585250
|30
|Retro Pocket™
|EU
|-
|000480044b585550
|10
|Publisher Dream
|EU
|-
|000480044b594e50
|20
|Cake Ninja: XMAS
|EU
|-
|000480044b59534a
|400
|あたまIQパニック
|JP
|}

VersionList

2016-01-26T10:36:53Z

Einstein95:

Used by the system menu to notify the user of updates.
{|class="wikitable sortable"
!Title ID
!Version
!Name
!Country
|-
|0004000000037500
|21
|Tom Clancy's Ghost Recon®
Shadow Wars
|EU
|-
|0004000000038b00
|410
|Resident Evil™
The Mercenaries 3D
|EU
|-
|000400000004a300
|400
|Petz Fantasy 3D
|EU
|-
|0004000000056c00
|890
|うごくメモ帳 3D
|JP
|-
|000400000005e300
|820
|熱血硬派くにおくんすぺしゃる
|JP
|-
|000400000005ee00
|10
|Resident Evil™ Revelations
|EU
|-
|0004000000066300
|400
|Mighty Switch Force!
|US
|-
|000400000006d100
|0
|Luxor
|EU
|-
|000400000006d700
|1
|Pets Resort 3D
|EU
|-
|000400000006e400
|400
|スーパーマリオブラザーズ
|JP
|-
|000400000006e500
|400
|Super Mario Bros.™
|US
|-
|000400000006e600
|400
|Super Mario Bros.™
|EU
|-
|000400000006ed00
|410
|メトロイド
|JP
|-
|000400000006ee00
|400
|Metroid™
|US
|-
|000400000006ef00
|400
|Metroid™
|EU
|-
|000400000006f000
|410
|ゼルダの伝説1
|JP
|-
|000400000006f100
|400
|The Legend of Zelda™
|US
|-
|000400000006f200
|400
|The Legend of Zelda™
|EU
|-
|000400000006f600
|400
|レッキングクルー
|JP
|-
|000400000006f900
|400
|マリオオープンゴルフ
|JP
|-
|000400000006fa00
|400
|NES Open Tournament Golf™
|US
|-
|000400000006fb00
|400
|NES Open Tournament Golf
|EU
|-
|000400000006ff00
|400
|ドンキーコングJR.
|JP
|-
|0004000000070000
|400
|Donkey Kong Jr.™
|US
|-
|0004000000070200
|400
|バルーンファイト
|JP
|-
|0004000000070500
|800
|アイスクライマー
|JP
|-
|0004000000070800
|400
|リンクの冒険
|JP
|-
|0004000000070900
|400
|Zelda II™ -
The Adventure of Link™
|US
|-
|0004000000070a00
|400
|Zelda II: The Adventure of Link
|EU
|-
|0004000000071100
|400
|ヨッシーのたまご
|JP
|-
|0004000000073c00
|401
|My Foal 3D
|EU
|-
|0004000000075f00
|1
|BIT.TRIP SAGA
|EU
|-
|0004000000077500
|400
|ラブプラスTOOLS
|JP
|-
|0004000000077e00
|400
|電波人間のRPG
|JP
|-
|000400000007a300
|10
|Harvest Moon:
The Tale of Two Towns
|EU
|-
|000400000007fd00
|400
|VVVVVV
|US
|-
|0004000000081100
|420
|Colors! 3D
|US
|-
|0004000000084b00
|10
|Cats and Dogs 3D
Pets at play
|EU
|-
|0004000000086800
|0
|推拉方塊(繁體中文版)
|TW
|-
|0004000000088400
|0
|Columns™
|EU
|-
|0004000000089200
|400
|夜の魔人といくさの国
～さまよえるヴァンピール～
|JP
|-
|000400000008b200
|420
|Coaster Creator 3D
|US
|-
|000400000008d100
|840
|Bit Boy!! ARCADE
|US
|-
|000400000008e300
|410
|Marvel Pinball 3D
|US
|-
|000400000008fc00
|20
|Sonic & All-Stars Racing
Transformed™
|EU
|-
|000400000008fe00
|830
|1001 Spikes
|US
|-
|0004000000090000
|410
|Johnny Kung Fu™
|US
|-
|0004000000099700
|4070
|レコチョク
|JP
|-
|000400000009b800
|0
|Dr. Robotnik's
Mean Bean Machine™
|EU
|-
|000400000009bb00
|0
|Shining Force™: The Sword of Hajya
|EU
|-
|000400000009d300
|10
|Riding Stables 3D
|EU
|-
|000400000009d600
|1830
|ドラゴンクエストⅩ
冒険者のおでかけ便利ツール
|JP
|-
|000400000009da00
|400
|悪魔城ドラキュラ
|JP
|-
|000400000009df00
|0
|Dig Dug
|EU
|-
|000400000009e300
|0
|Super C
|EU
|-
|000400000009e700
|10
|Crash City Mayhem
|EU
|-
|000400000009ea00
|410
|Turtle Tale
|US
|-
|00040000000a1200
|0
|Mega Man™ 4
|EU
|-
|00040000000a1400
|0
|Mega Man™ 5
|EU
|-
|00040000000a2f00
|420
|AiRace Speed
|US
|-
|00040000000a5400
|810
|Mutant Mudds™
|EU
|-
|00040000000a7900
|410
|電波人間のRPG2
|JP
|-
|00040000000a9000
|0
|Nintendo presents
New Style Boutique™
|EU
|-
|00040000000aa800
|400
|Fractured Soul
|US
|-
|00040000000aba00
|0
|Fractured Soul
|US
|-
|00040000000ad400
|0
|ぐるっとスプラッシュ!
|JP
|-
|00040000000aec00
|0
|The Beet Party:
Jurassic Fridge
|EU
|-
|00040000000b0f00
|830
|YouTube
|US
|-
|00040000000b4700
|3020
|どこでも本屋さん
|JP
|-
|00040000000b4f00
|400
|Fallblox™
|EU
|-
|00040000000b8f00
|400
|Gunman Clive
|US
|-
|00040000000bb100
|0
|Viking Invasion 2 -
Tower Defense
|EU
|-
|00040000000bb400
|10
|The Beet Party:
UnderWaterMelon
|EU
|-
|00040000000bba00
|0
|Sonic the Hedgehog™
|EU
|-
|00040000000bd200
|0
|ファミコン探偵倶楽部 PARTⅡ
うしろに立つ少女(前後編)
|JP
|-
|00040000000bea00
|0
|엽기토끼 시간여행 3D
|KR
|-
|00040000000bec00
|10
|레이맨 오리진
|KR
|-
|00040000000c1700
|410
|AiRace Speed
|EU
|-
|00040000000c2900
|420
|Shantae and the Pirate's Curse
|US
|-
|00040000000c3400
|400
|モンスターハンター3(トライ)G
データ移行プログラム
|JP
|-
|00040000000c3a00
|430
|デビルサバイバー2
ブレイクレコード
|JP
|-
|00040000000c4200
|0
|Rhythm Thief & the Emperor’s Treasure™
|KR
|-
|00040000000c5200
|0
|Reel Fishing速 3D
Paradise Mini
|EU
|-
|00040000000c5700
|410
|Real Heroes: Firefighter 3D
|US
|-
|00040000000c6f00
|410
|MH3U Data Transfer Program
|US
|-
|00040000000c7100
|410
|Monster Hunter™ 3 Ultimate
Data Transfer Program
|EU
|-
|00040000000c7700
|410
|Real Heroes: Firefighter 3D
|EU
|-
|00040000000c7f00
|0
|톰 클랜시의 고스트 리콘 섀도우 워즈
|KR
|-
|00040000000c8000
|0
|톰 클랜시의 스플린터 셀 3D
|KR
|-
|00040000000c8900
|0
|짜릿! 우물로 드롭
|KR
|-
|00040000000c8a00
|0
|밀고 떨구고
|KR
|-
|00040000000c8d00
|410
|Monster High™
Skultimate Roller Maze™
|EU
|-
|00040000000c9e00
|840
|実写でちびロボ!
|JP
|-
|00040000000cbb00
|0
|Picdun 2: Witch's Curse
|EU
|-
|00040000000cbd00
|420
|みんなのおしゃべりチャット
|JP
|-
|00040000000cca00
|0
|悄悄互動日記
|TW
|-
|00040000000ccd00
|820
|YouTube
|EU
|-
|00040000000cd600
|10
|Sudoku by Nikoli
|KR
|-
|00040000000cd700
|10
|Bird Mania 3D
|KR
|-
|00040000000cd800
|0
|SpeedX 3D
|KR
|-
|00040000000cef00
|410
|Swords & Soldiers 3D
|EU
|-
|00040000000cfd00
|0
|SENRAN KAGURA Burst
|KR
|-
|00040000000d0600
|430
|Swords & Soldiers 3D
|US
|-
|00040000000d1700
|0
|Air Battle Hockey 3D
|EU
|-
|00040000000d1800
|0
|Bloody Vampire
|EU
|-
|00040000000d2400
|0
|Witch & Hero
|EU
|-
|00040000000d2900
|420
|だるめしスポーツ店
|JP
|-
|00040000000d2e00
|0
|MONSTER HUNTER 3 ULTIMATE
|KR
|-
|00040000000d2f00
|0
|Mario and Donkey Kong™:
Minis on the Move
|EU
|-
|00040000000d3000
|830
|YouTube
|JP
|-
|00040000000d4800
|0
|My Riding Stables 3D–
Jumping for the Team
|EU
|-
|00040000000d4a00
|420
|Star Wars Pinball
|EU
|-
|00040000000d7700
|0
|Jewel Master Atlantis 3D
|EU
|-
|00040000000d7b00
|410
|3D スーパーハングオン
|JP
|-
|00040000000d8c00
|0
|@SIMPLE DLシリーズ Vol.10
THE浮気彼氏Xmas中止のお知らせ
|JP
|-
|00040000000d9300
|0
|The Beet Party:
Beet Poets
|EU
|-
|00040000000d9400
|0
|The Beet Party:
Unidentified Flying Waffle
|EU
|-
|00040000000db700
|c80
|@SIMPLE DLシリーズ Vol.15
THE 麻雀
|JP
|-
|00040000000db800
|450
|KORG M01D
|JP
|-
|00040000000de100
|10
|Lola's Math Train
|EU
|-
|00040000000e6100
|0
|Akari by Nikoli
|KR
|-
|00040000000e6800
|420
|Star Wars Pinball
|US
|-
|00040000000e8200
|0
|Groove Heaven
|EU
|-
|00040000000e9300
|410
|@SIMPLE DLシリーズ Vol.14
THE 脱出ゲーム～裏切りの密室～
|JP
|-
|00040000000e9800
|410
|3D 獣王記
|JP
|-
|00040000000ea800
|0
|SpeedX 3D Hyper Edition
|EU
|-
|00040000000eaf00
|0
|THE "DENPA" MEN 2:
Beyond the Waves
|EU
|-
|00040000000eb000
|1050
|ソリティ馬
|JP
|-
|00040000000edc00
|410
|Dillon's Rolling Western
The Last Ranger
|KR
|-
|00040000000edd00
|420
|Dillon's Rolling Western
|KR
|-
|00040000000ee600
|410
|どぎめぎインリョクちゃん
|JP
|-
|00040000000ee900
|410
|3D ベア･ナックル怒りの鉄拳
|JP
|-
|00040000000f7300
|0
|新・世界樹の迷宮ミレニアムの少女 (日文版)
|TW
|-
|00040000000fb900
|410
|3D ギャラクシーフォースⅡ
|JP
|-
|00040000000fc700
|0
|Donkey Kong Country Returns 3D
(英文版)
|TW
|-
|00040000000fc800
|1060
|honto for ニンテンドー3DS
|JP
|-
|00040000000fc900
|0
|魔女與勇者
|TW
|-
|00040000000fd300
|0
|逆轉裁判 5 (英文版)
|TW
|-
|00040000000fe200
|10
|Talking Phrasebook -
7 Languages
|US
|-
|0004000000103500
|410
|@SIMPLE DLシリーズ Vol.21
THE 鑑識官 File.1
|JP
|-
|0004000000103600
|410
|@SIMPLE DLシリーズ Vol.23
THE 鑑識官 File.2
|JP
|-
|0004000000104300
|1
|マイティースイッチフォース!
|JP
|-
|0004000000105800
|10
|世界樹の迷宮Ⅳ 伝承の巨神 (日文版)
|TW
|-
|0004000000105900
|10
|Etrian Odyssey Ⅳ Legends of the Titan (英文版)
|TW
|-
|0004000000105c00
|0
|爆走老精靈
|TW
|-
|0004000000108d00
|820
|Retro City Rampage: DX
|EU
|-
|0004000000109800
|28e0
|ニコニコ
|JP
|-
|000400000010cf00
|0
|Sonic Lost World™ (英文版)
|TW
|-
|000400000010d200
|820
|Retro City Rampage™: DX
|US
|-
|000400000010db00
|0
|邦妮早午餐
|TW
|-
|000400000010dc00
|0
|初音未來 Project mirai 2 (日文版)
|TW
|-
|000400000010e600
|420
|遊戯王ARC-Vオフィシャル
カードゲームかんたんマスター!
|JP
|-
|0004000000111100
|820
|Grinsia
|US
|-
|0004000000112300
|420
|Cubit The Hardcore Platformer Robot
|US
|-
|0004000000115700
|0
|The Legend of Zelda:
A Link Between Worlds (英文版)
|TW
|-
|0004000000119300
|0
|Mario Party: Island Tour (英文版)
|TW
|-
|0004000000119a00
|1040
|Shovel Knight
|US
|-
|0004000000120100
|420
|3D ファンタジーゾーン
オパオパブラザーズ
|JP
|-
|0004000000121d00
|820
|3D ファンタジーゾーンⅡダブル
|JP
|-
|0004000000123200
|0
|Kirby: Triple Deluxe (英文版)
|TW
|-
|0004000000124000
|410
|The Keep
|US
|-
|0004000000124300
|410
|Cubit The Hardcore
Platformer Robot
|EU
|-
|0004000000124a00
|c50
|リアル脱出ゲーム×ニンテンドー
3DS 超破壊計画からの脱出
|JP
|-
|0004000000127600
|401
|Alien On The Run
|US
|-
|0004000000128900
|410
|3D アウトラン
|JP
|-
|0004000000129600
|410
|AiRace Xeno
|EU
|-
|0004000000129f00
|440
|KORG DSN-12
|JP
|-
|000400000012bf00
|410
|AiRace Xeno
|US
|-
|000400000012cb00
|c30
|Shovel Knight
|EU
|-
|000400000012d000
|820
|Bit Boy!! ARCADE
|EU
|-
|000400000012e700
|430
|Moon Chronicles™
|US
|-
|0004000000130300
|c40
|拡散性ミリオンアーサー
|JP
|-
|0004000000132900
|0
|逆轉裁判123 / Phoenix Wright:
Ace Attorney Trilogy(日英版)
|TW
|-
|0004000000134600
|410
|バッジとれ～るセンター
|JP
|-
|0004000000136a00
|0
|鐵道日本！長良川鐵道出發篇
(繁體中文版)
|TW
|-
|0004000000138900
|410
|Proun+
|EU
|-
|0004000000139c00
|c70
|みんなでまもって騎士
姫のトキメキらぷそでぃ
|JP
|-
|000400000013d000
|820
|ドラゴンボールヒーローズ UM2
ゲームデータ引継ぎアプリ
|JP
|-
|000400000013d100
|1470
|ドラゴンクエストⅩ オンライン
|JP
|-
|000400000013ea00
|420
|Comic Workshop
|US
|-
|000400000013ee00
|430
|Woah Dave!
|US
|-
|000400000013f900
|420
|Glory of Generals
|US
|-
|0004000000140f00
|2cc0
|ドラゴンクエストⅩ
冒険者のおでかけ超便利ツール
|JP
|-
|0004000000141000
|830
|ポケとる
|JP
|-
|0004000000141a00
|0
|MONSTER HUNTER 4G(日文版)
|TW
|-
|0004000000141f00
|10
|Fossil Fighters™: Frontier(英文版)
|TW
|-
|0004000000143c00
|440
|Painting Workshop
|US
|-
|0004000000144d00
|c30
|Oh!ガッチマンデンゲキ
BAZOOKA!! スペシャルゲーム
|JP
|-
|0004000000146f00
|410
|マイティガンヴォルト
|JP
|-
|0004000000147d00
|0
|Dedede's Drum Dash Deluxe(英文版)
|TW
|-
|0004000000148100
|0
|Kirby Fighters Deluxe™(英文版)
|TW
|-
|0004000000148400
|810
|Comic Workshop
|EU
|-
|0004000000148c00
|10
|Hatsune Miku: Project Mirai DX
|US
|-
|0004000000148f00
|410
|Proun+
|US
|-
|0004000000149700
|810
|Painting Workshop
|EU
|-
|000400000014b000
|410
|ブレイブリーセカンド
無料で遊べる三銃士編
|JP
|-
|000400000014c900
|820
|Battleminer
|US
|-
|0004000000150d00
|420
|Bloo Kid 2
|US
|-
|0004000000151100
|410
|Cube Creator 3D
|US
|-
|0004000000151f00
|0
|Pokémon Art Academy(英文版)
|TW
|-
|0004000000152e00
|10
|カンフーラビット
|JP
|-
|000400000015a600
|0
|魔神少女 -Chronicle 2D ACT-(繁體中文版)
|TW
|-
|000400000015b100
|820
|IronFall: Invasion
|EU
|-
|000400000015d100
|0
|Fairune(繁體中文版)
|TW
|-
|000400000015d800
|820
|IRONFALL Invasion
|US
|-
|0004000000162200
|1890
|イジン爆闘!!ウデジマン
|JP
|-
|0004000000164600
|410
|みんなのポケモンスクランブル
|JP
|-
|0004000000166400
|10
|Toy Stunt Bike(日文版)
|TW
|-
|0004000000169000
|0
|PAZURU(日文版)
|TW
|-
|000400000016d100
|0
|Puzzle & Dragons Z + Puzzle & Dragons Super Mario Bros. Edition(英文版)
|TW
|-
|000400000016d200
|0
|Puzzle & Dragons Z + Super Mario Bros. Edition 特別試玩版
|TW
|-
|0004000000175d00
|10
|PROJECT X ZONE 2：BRAVE NEW WORLD(日文版)
|TW
|-
|0004000000177d00
|410
|アルファディア
|JP
|-
|0004000000179100
|0
|Goonyan(日文版)
|TW
|-
|000400000017a900
|10
|Johnny's Payday Panic(英日版)
|TW
|-
|000400000017b800
|0
|ファイアーエムブレムif (日文版)
|TW
|-
|000400000017bf00
|0
|IRONFALL -Invasion- (日文版)
|TW
|-
|000400000017d200
|410
|超科学脱出ギア･ディテクティブ
|JP
|-
|000400000017da00
|0
|패밀리 루어피싱 3D
|KR
|-
|000400000017ec00
|0
|MONSTER HUNTER® X (日文版)
|TW
|-
|0004000000182c00
|0
|ゼルダの伝說　
トライフォース３銃士 (日文版)
|TW
|-
|0004000000185c00
|0
|The Legend of Zelda™ : Majora's Mask 3D(英文版)
|TW
|-
|000400000f700800
|c30
|The Binding of Isaac: Rebirth
|US
|-
|000400000f700900
|840
|The Binding of Isaac: Rebirth
|EU
|-
|000400020008c401
|820
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000b8b01
|410
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000edf01
|420
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000ee001
|410
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200132501
|420
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200136a01
|0
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200175d01
|0
|The Binding of Isaac: Rebirth
|EU
|-
|000400020017a901
|10
|The Binding of Isaac: Rebirth
|EU
|-
|0004000e00030600
|410
|更新データ Ver. 1.1
マリオカート7
|JP
|-
|0004000e00030700
|410
|Mario Kart 7
Update data
|EU
|-
|0004000e00030800
|410
|Mario Kart™ 7
Update Ver. 1.1
|US
|-
|0004000e00032100
|800
|更新データ Ver. 1.2
NEWラブプラス
|JP
|-
|0004000e00036f00
|400
|更新データ Ver. 1.1
花といきもの立体図鑑
|JP
|-
|0004000e00039a00
|400
|更新データ Ver. 1.1
カルドセプト®
|JP
|-
|0004000e00043700
|400
|更新データ Ver. 1.1 ものすごく脳を鍛える5分間の鬼トレーニング
|JP
|-
|0004000e0004b500
|430
|更新データ Ver. 1.1
モンスターハンター4
|JP
|-
|0004000e0004b700
|400
|更新データ Ver. 1.1
G1グランプリ
|JP
|-
|0004000e0004ee00
|400
|更新データ Ver. 1.1
KINGDOM HEARTS 3D
|JP
|-
|0004000e00053600
|800
|更新データ Ver. 1.1
ペンギンの問題ザ･ウォ―ズ
|JP
|-
|0004000e00055d00
|1470
|更新データ Ver. 1.5
ポケットモンスター X
|JP
|-
|0004000e00055e00
|1460
|更新データ Ver. 1.5
ポケットモンスター Y
|JP
|-
|0004000e0005d100
|c10
|更新データ Ver. 1.2
GIRLS MODE よくばり宣言!
|JP
|-
|0004000e0005e900
|410
|更新データ Ver.1.1
BRAVELY DEFAULT FF
|JP
|-
|0004000e00060600
|420
|更新データ Ver. 1.1
マリオ&ルイージRPG4
|JP
|-
|0004000e00065000
|410
|Secret Mysteries in London -
Update
|EU
|-
|0004000e0006cf00
|830
|Jewel Quest
The Sapphire Dragon - Update
|EU
|-
|0004000e0006d200
|2000
|更新データ Ver. 1.7
ファンタジーライフ
|JP
|-
|0004000e00072a00
|410
|更新データ Ver. 1.1
真･三國無双 VS
|JP
|-
|0004000e00074500
|820
|更新データ Ver. 1.1
探偵神宮寺三郎復讐の輪舞
|JP
|-
|0004000e00074600
|400
|更新データ Ver. 1.1 DQM
テリーのワンダーランド3D
|JP
|-
|0004000e00078500
|c00
|更新データ Ver. 1.2
ダンボール戦機爆ブースト
|JP
|-
|0004000e00078b00
|400
|更新データ Ver. 1.1
レイトン教授VS逆転裁判
|JP
|-
|0004000e0007a000
|400
|更新データ Ver. 1.1 METAL
GEAR SOLID SNAKE EATER 3D
|JP
|-
|0004000e00081e00
|410
|METAL GEAR SOLID SNAKE
EATER 3D Update Ver. 1.1
|US
|-
|0004000e00084d00
|430
|AeternoBlade
Update
|EU
|-
|0004000e00086200
|840
|更新データ Ver. 1.1
とびだせどうぶつの森
|JP
|-
|0004000e00086500
|820
|업데이트 데이터 Ver. 1.1
튀어나와요 동물의 숲
|KR
|-
|0004000e0008c300
|410
|Tomodachi Life™ Update
Ver. 1.1
|US
|-
|0004000e0008c400
|c40
|Tomodachi Life™: Update
|EU
|-
|0004000e0008c500
|c50
|更新データ Ver. 1.2
トモダチコレクション新生活
|JP
|-
|0004000e00091000
|440
|更新データ Ver. 1.1
デビルサマナーソウルハッカーズ
|JP
|-
|0004000e00091400
|410
|Real Heroes: Firefighter 3D - Update
|EU
|-
|0004000e00095c00
|430
|更新データ Ver. 1.1
ディズニーマジックキャッスル
|JP
|-
|0004000e0009c000
|410
|Shin Megami Tensei: Devil
Survivor Overclocked Patch
|EU
|-
|0004000e0009ef00
|430
|更新データ Ver. 1.1
メダロットDUAL カブトVer.
|JP
|-
|0004000e0009f000
|430
|更新データ Ver. 1.1
メダロットDUAL クワガタVer.
|JP
|-
|0004000e0009fe00
|440
|更新データ Ver. 1.1
もっと気軽に!お絵描き工房プラス
|JP
|-
|0004000e000a0b00
|14a0
|更新データ Ver. 2.1
大合奏!バンドブラザーズP
|JP
|-
|0004000e000a1b00
|1020
|更新データ Ver. 1.3
イナズマイレブンGO2 ネップウ
|JP
|-
|0004000e000a1c00
|1020
|更新データ Ver. 1.3
イナズマイレブンGO2 ライメイ
|JP
|-
|0004000e000a4d00
|400
|更新データ Ver. 1.1
戦国無双 Chronicle 2nd
|JP
|-
|0004000e000a9000
|400
|New Style Boutique™
Update
|EU
|-
|0004000e000a9100
|400
|Style Savvy: Trendsetters
Update Ver. 1.1
|US
|-
|0004000e000a9800
|400
|更新データ Ver. 1.1 モデル☆
おしゃれオーディションプラチナ
|JP
|-
|0004000e000aa700
|420
|更新データ Ver. 1.1
カセキホリダームゲンギア
|JP
|-
|0004000e000ac700
|c50
|更新データ Ver. 1.2
カードファイト!! ヴァンガード
|JP
|-
|0004000e000ada00
|820
|更新データ Ver. 1.1
ピカピカナース物語2
|JP
|-
|0004000e000af700
|410
|LEGO® Legends of CHIMA:
Laval's Journey Update
|EU
|-
|0004000e000afb00
|410
|更新データ Ver. 1.1
チャリ走DX
|JP
|-
|0004000e000afc00
|410
|更新データ Ver. 1.1 デジモンワールド Re:Digitize Decode
|JP
|-
|0004000e000afd00
|420
|更新データ Ver. 1.1
メタルマックス4 月光のディーヴァ
|JP
|-
|0004000e000b1700
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 1: Update
|EU
|-
|0004000e000b1800
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 2: Update
|EU
|-
|0004000e000b1900
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 3: Update
|EU
|-
|0004000e000b4a00
|420
|更新データ Ver. 1.1
とんがりボウシと魔法の町
|JP
|-
|0004000e000b6d00
|410
|更新データ Ver. 1.1
燐光のランツェ
|JP
|-
|0004000e000b8b00
|5160
|更新データ Ver. 1.1.3 大乱闘
スマッシュブラザーズ for 3DS
|JP
|-
|0004000e000b9900
|410
|Real Heroes: Firefighter 3D - Update
|EU
|-
|0004000e000bb800
|440
|更新データ Ver. 1.1 イナズマ
イレブン1･2･3!! 円堂守伝説
|JP
|-
|0004000e000c0100
|420
|更新データ Ver. 2.0
マギはじまりの迷宮
|JP
|-
|0004000e000c1c00
|410
|更新データ Ver. 1.1 オシャレで
かわいい子犬と遊ぼ!-海編-
|JP
|-
|0004000e000c2900
|840
|Shantae and the Pirate's Curse
Update Ver. 02.02
|US
|-
|0004000e000c3600
|830
|更新データ Ver. 1.2 ペルソナQ
シャドウオブザラビリンス
|JP
|-
|0004000e000c3a00
|840
|更新データ Ver. 1.1
デビルサバイバー2 ブレイクレコード
|JP
|-
|0004000e000c9b00
|c50
|更新データ Ver. 1.2
ポケモンバンク
|JP
|-
|0004000e000cb700
|420
|更新データ Ver. 1.1 ニンテンドー
3DSガイドルーヴル美術館
|JP
|-
|0004000e000cb900
|430
|Nintendo 3DS™ Guide: Louvre
(English Version) Update
|US
|-
|0004000e000cba00
|420
|업데이트 데이터 Ver. 1.1
닌텐도 3DS 가이드 루브르 박물관
|KR
|-
|0004000e000cbd00
|1090
|更新データ Ver. 1.4
みんなのおしゃべりチャット
|JP
|-
|0004000e000cc400
|430
|更新データ Ver. 1.1
初音ミク Project mirai 2
|JP
|-
|0004000e000cd300
|410
|AeternoBlade Update Ver. 1.0
|US
|-
|0004000e000cf300
|420
|更新データ Ver. 1.1
カスタムモンスターズ
|JP
|-
|0004000e000cf400
|850
|更新データ Ver. 1.2
妖怪ウォッチ
|JP
|-
|0004000e000cf500
|420
|更新データ Ver. 1.1 DQM2
イルとルカの不思議なふしぎな鍵
|JP
|-
|0004000e000cf600
|430
|更新データ Ver. 1.1
CONCEPTIONⅡ
|JP
|-
|0004000e000cf900
|420
|更新データ Ver. 1.1
ポケモンアートアカデミー
|JP
|-
|0004000e000d0900
|420
|Pokémon™ Art Academy™:
Update
|EU
|-
|0004000e000d5600
|430
|Nintendo 3DS™ Guide: Louvre
(French Version) Update
|US
|-
|0004000e000d5700
|430
|Nintendo 3DS™ Guide: Louvre
(German Version) Update
|EU
|-
|0004000e000d5800
|430
|Nintendo 3DS™ Guide: Louvre
(Italian Version) Update
|EU
|-
|0004000e000d5900
|430
|Nintendo 3DS™ Guide: Louvre
(Spanish Version) Update
|US
|-
|0004000e000d5a00
|410
|Mario & Luigi™: Dream Team
Update
|US
|-
|0004000e000d6e00
|410
|更新データ Ver. 1.1
ゼルダの伝説ムジュラの仮面 3D
|JP
|-
|0004000e000d7c00
|1450
|更新データ Ver. 4.1
STEELDIVER SUBWARS
|JP
|-
|0004000e000d7d00
|1450
|Steel Diver™: Sub Wars
Update Ver. 4.1
|US
|-
|0004000e000d7e00
|1450
|Steel Diver™: Sub Wars:
Update
|EU
|-
|0004000e000d8e00
|840
|更新データ Ver. 1.2 ほっぺちゃん
つくって!あそんで!ぷにぷにタウン!
|JP
|-
|0004000e000d8f00
|830
|更新データ Ver. 1.1 まめゴマ
はっぴー!スイーツファーム
|JP
|-
|0004000e000d9000
|410
|Mario & Luigi™:
Dream Team Bros. Update
|EU
|-
|0004000e000db600
|410
|更新データ Ver. 1.1
BRAVELY DEFAULT FtS
|JP
|-
|0004000e000dbd00
|14b0
|更新データ Ver. 1.3
SIMPLEシリーズ Vol.1 THE 麻雀
|JP
|-
|0004000e000dc700
|430
|更新データ Ver. 1.1
熱血硬派くにおくんSP 乱闘協奏曲
|JP
|-
|0004000e000dc800
|830
|更新データ Ver. 1.0.2
ブレイブリーセカンド
|JP
|-
|0004000e000dca00
|430
|更新データ Ver. 1.1
ダンボール戦機W 超カスタム
|JP
|-
|0004000e000dd900
|410
|Hakuoki: Memories of the
Shinsengumi Update
|US
|-
|0004000e000df800
|c70
|更新データ Ver. 1.2
進撃の巨人～人類最後の翼～
|JP
|-
|0004000e000e9a00
|830
|更新データ Ver. 1.2
TFF CURTAIN CALL
|JP
|-
|0004000e000e9c00
|1490
|更新データ Ver. 1.7
ファンタジーライフ LINK!
|JP
|-
|0004000e000ea900
|430
|Disney Magical World
Update Ver. 1.1
|US
|-
|0004000e000eb800
|820
|更新データ Ver. 1.2
ホームタウンストーリー
|JP
|-
|0004000e000ecd00
|410
|Adventure Timeâ˘: ETDBIDK
Update 1
|US
|-
|0004000e000edf00
|5130
|Super Smash Bros.™
Update Ver. 1.1.3
|US
|-
|0004000e000ee000
|5130
|Super Smash Bros.™
for Nintendo 3DS: Update
|EU
|-
|0004000e000ef000
|1070
|更新データ Ver. 1.4
電波人間のRPG3
|JP
|-
|0004000e000f1f00
|860
|更新データ Ver. 1.2 ポケモン
トレッタラボメインシステム
|JP
|-
|0004000e000f3f00
|420
|更新データ Ver. 2.0.0
ポポロクロイス牧場物語
|JP
|-
|0004000e000f4000
|840
|更新データ Ver. 1.2
ダンボール戦機ウォーズ
|JP
|-
|0004000e000f4200
|840
|更新データ Ver. 1.2
アイカツ! 2人のmy princess
|JP
|-
|0004000e000f4f00
|450
|更新データ Ver. 1.1
喧嘩番長6～ソウル&ブラッド～
|JP
|-
|0004000e000f5800
|820
|更新データ Ver. 1.2 ワンピース
アンリミテッドワールド R
|JP
|-
|0004000e000f7200
|420
|更新データ Ver. 1.1
ナナミ English上達のコツ
|JP
|-
|0004000e000f9700
|420
|更新データ Ver. 1.1
王だぁランド!
|JP
|-
|0004000e000f9b00
|1080
|更新データ Ver. 1.4
ダービースタリオンGOLD
|JP
|-
|0004000e000fb000
|430
|更新データ Ver. 1.1
文字パズルことだまーる★
|JP
|-
|0004000e000fb100
|c90
|更新データ Ver. 1.3
閃乱カグラ2 -真紅-
|JP
|-
|0004000e000fb300
|420
|更新データ Ver. 1.1
トリコアルティメットサバイバル
|JP
|-
|0004000e000fb400
|430
|更新データ Ver. 1.1 モデション
ドリームガール
|JP
|-
|0004000e000fc100
|420
|I am an Air Traffic Controller
Airport Hero Hawaii Update
|US
|-
|0004000e000fce00
|410
|Hakuoki
Update
|EU
|-
|0004000e00100900
|410
|更新資料 Ver. 1.1
MONSTER HUNTER 4
|TW
|-
|0004000e00101200
|420
|更新データ Ver. 1.1 ぷよぷよテトリス
|JP
|-
|0004000e00101300
|410
|更新データ Ver. 1.1
ヒーローバンク
|JP
|-
|0004000e00102000
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102100
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102200
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102600
|410
|Adventure Timeâ˘:
ETDBIDK Update
|EU
|-
|0004000e00102f00
|850
|更新データ Ver. 1.2.0 太鼓の
達人どんとかつの時空大冒険
|JP
|-
|0004000e00103200
|c30
|更新データ Ver. 1.2
わんニャンペットショップ
|JP
|-
|0004000e00103900
|420
|更新データ Ver.1.1 @SIMPLE DL
Vol.20 THE カード
|JP
|-
|0004000e00103e00
|410
|更新データ Ver. 1.1.0 @SIMPLE
DL Vol.27 THE イラストパズル
|JP
|-
|0004000e00104800
|420
|更新データ Ver. 1.1
メタルファイトベイブレード
|JP
|-
|0004000e00104900
|830
|更新データ Ver. 1.2
VitaminZ Revolution
|JP
|-
|0004000e00104a00
|420
|更新データ Ver.1.1ジュエルペット
カフェで魔法のクッキング!
|JP
|-
|0004000e00104c00
|420
|更新データ Ver. 1.1 こびとづかん　
こびとの不思議実験セット
|JP
|-
|0004000e00105000
|410
|업데이트 데이터 Ver. 1.1
몬스터헌터 4
|KR
|-
|0004000e00105100
|430
|更新データ Ver. 1.1
VitaminX Evolution Plus
|JP
|-
|0004000e00106700
|410
|更新データ Ver. 1.1
キャラペット
|JP
|-
|0004000e00108100
|430
|更新データ Ver. 1.1
アロー･オブ･ラピュタ
|JP
|-
|0004000e0010af00
|420
|Shantae and the
Pirate's Curse - Update
|EU
|-
|0004000e0010ba00
|420
|更新データ Ver. 1.1 イナズマ
イレブンGO ビッグバン
|JP
|-
|0004000e0010bb00
|420
|更新データ Ver. 1.1 イナズマ
イレブンGO スーパーノヴァ
|JP
|-
|0004000e0010bc00
|440
|更新データ Ver. 2.0.0
牧場物語つながる新天地
|JP
|-
|0004000e0010e200
|830
|更新データ Ver. 1.2
FINAL FANTASY EXPLORERS
|JP
|-
|0004000e0010f600
|410
|Harvest Moon®: The Lost
Valley Update Ver. 1.01
|US
|-
|0004000e00111e00
|830
|更新データ Ver. 1.2
チャリ走 DX2 ギャラクシー
|JP
|-
|0004000e00113300
|450
|更新データ Ver. 1.1
メダロット8 カブトVer.
|JP
|-
|0004000e00113400
|450
|更新データ Ver. 1.1
メダロット8 クワガタVer.
|JP
|-
|0004000e00114700
|840
|更新データ Ver. 1.2
コミック工房
|JP
|-
|0004000e00114900
|430
|更新データ Ver. 1.1
異史戦国伝宿業
|JP
|-
|0004000e00114b00
|410
|更新データ Ver. 1.1
タイムアベンジャー
|JP
|-
|0004000e00117200
|1480
|更新データ Ver. 3.2.1
プチコン3号 SmileBASIC
|JP
|-
|0004000e00118100
|430
|更新データ Ver. 1.1
名探偵コナンファントム狂詩曲
|JP
|-
|0004000e00118500
|420
|更新データ Ver. 1.1
漢検トレーニング
|JP
|-
|0004000e00119a00
|820
|Shovel Knight Update Ver. 1.1
|US
|-
|0004000e0011b200
|830
|更新データ Ver. 1.2
大人VSグレコ漢字完全フルセット
|JP
|-
|0004000e0011b300
|420
|更新データ Ver. 1.1
大人VSグレコ漢字激ムズ編
|JP
|-
|0004000e0011b400
|420
|更新データ Ver. 1.1
大人VSグレコ漢字ちょいムズ編
|JP
|-
|0004000e0011c200
|410
|LEGO® Batman™ 3:
BEYOND GOTHAM - Update
|EU
|-
|0004000e0011c400
|1c70
|更新データ Ver. 1.4 ポケット
モンスターオメガルビー
|JP
|-
|0004000e0011c500
|1c70
|更新データ Ver. 1.4 ポケット
モンスターアルファサファイア
|JP
|-
|0004000e0011d700
|1040
|更新データ Ver. 1.2
モンスターハンター4G
|JP
|-
|0004000e0011dd00
|410
|LEGO® Batman™ 3:
Beyond Gotham Update
|US
|-
|0004000e00120000
|420
|更新データ Ver. 1.1
ナナミ English日常会話
|JP
|-
|0004000e00120500
|820
|更新データ Ver. 1.2 新･世界樹
の迷宮2 ファフニールの騎士
|JP
|-
|0004000e00120600
|1880
|更新データ Ver. 1.6
ドラゴンボールヒーローズ UM2
|JP
|-
|0004000e00120700
|420
|更新データ Ver. 1.1 カード
ファイト!! ヴァンガード LOV
|JP
|-
|0004000e00120800
|410
|更新データ Ver. 1.1
IslandDays
|JP
|-
|0004000e00120900
|420
|更新データ Ver. 2.0.0 禁忌のマグナ
|JP
|-
|0004000e00121b00
|430
|更新データ Ver. 1.1 マル合格!
ITパスポート試験平成26年度版
|JP
|-
|0004000e00125500
|410
|The Legend of Zelda™:
Majora’s Mask 3D Update Ver. 1.1
|US
|-
|0004000e00125600
|410
|The Legend of Zelda™:
Majora's Mask 3D: Update
|EU
|-
|0004000e00125d00
|24c0
|更新データ Ver. 1.9
電波人間のRPG FREE!
|JP
|-
|0004000e00126100
|410
|Monster Hunter™ 4 Ultimate:
Update
|EU
|-
|0004000e00126300
|430
|Monster Hunter™ 4 Ultimate
Update Ver. 1.1
|US
|-
|0004000e00127a00
|410
|更新データ Ver. 1.1
ぼく管関空 SKY STORY
|JP
|-
|0004000e00129d00
|440
|更新データ Ver. 1.1
不思議の国の冒険酒場
|JP
|-
|0004000e0012a700
|820
|更新データ Ver. 1.2
蒼き雷霆ガンヴォルト
|JP
|-
|0004000e0012a800
|c50
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012a900
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012aa00
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012ab00
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012b700
|410
|更新データ Ver. 1.0.3 ぐんまの
やぼう for ニンテンドー3DS
|JP
|-
|0004000e0012be00
|410
|Harvest Moon®:
The Lost Valley: Update
|EU
|-
|0004000e0012c800
|410
|Mario vs. Donkey Kong™:
Tipping Stars Ver. 1.0.1
|US
|-
|0004000e0012c900
|410
|更新データ Ver. 1.0.1
マリオvs.ドンキーコング
|JP
|-
|0004000e0012ca00
|410
|Mario vs. Donkey Kong™
Tipping Stars: Update
|EU
|-
|0004000e0012d800
|c30
|更新データ Ver. 1.2.0
GIRLS MODE 3 キラキラ☆コーデ
|JP
|-
|0004000e0012dc00
|410
|【白夜王国】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012dd00
|410
|【暗夜王国】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012de00
|420
|【スペシャルエディション】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012f500
|410
|更新データ Ver. 1.1 テイルズオブ
ザワールドレーヴユナイティア
|JP
|-
|0004000e0012f800
|2050
|更新データ Ver. 2.1
妖怪ウォッチ2 本家
|JP
|-
|0004000e0012f900
|2050
|更新データ Ver. 2.1
妖怪ウォッチ2 元祖
|JP
|-
|0004000e0012fa00
|c60
|更新データ Ver. 1.2
ドーリィ♪カノン
|JP
|-
|0004000e00130300
|20a0
|更新データ Ver. 2.3.0
拡散性ミリオンアーサー
|JP
|-
|0004000e00132500
|820
|更新データ Ver. 1.2.0
Code Name: S.T.E.A.M.
|JP
|-
|0004000e00132c00
|410
|Siesta Fiesta - Update
|EU
|-
|0004000e00134300
|410
|更新データ Ver. 1.1.0
ロストヒーローズ2
|JP
|-
|0004000e00134500
|430
|更新データ Ver. 1.1
進撃の巨人～人類最後の翼～CHAIN
|JP
|-
|0004000e00134600
|1040
|更新データ Ver. 1.3.0
バッジとれ～るセンター
|JP
|-
|0004000e00137700
|430
|Puzzle & Dragons Z +
Super Mario Bros. Edition 2.0
|US
|-
|0004000e00137800
|420
|Puzzle & Dragons Z
|EU
|-
|0004000e00139300
|410
|Siesta Fiesta
Update Ver. 1.0
|US
|-
|0004000e00139a00
|440
|更新データ Ver. 1.1.0
コロロケの森ぽいっと
|JP
|-
|0004000e0013fe00
|420
|更新データ Ver. 1.0.2
王国の道具屋さん
|JP
|-
|0004000e00140100
|410
|更新データ Ver. 1.0.2
王国の道具屋さん
|JP
|-
|0004000e00140b00
|420
|更新データ Ver. 1.1
テラフォーマーズ紅き惑星の激闘
|JP
|-
|0004000e00141a00
|410
|MONSTER HUNTER 4G 更新資料 ver.1.1
|TW
|-
|0004000e00141d00
|830
|更新データ Ver. 1.2 大合奏!
バンドブラザーズP デビュー
|JP
|-
|0004000e00144300
|410
|更新データ Ver. 1.1.0
ヒーローバンク2
|JP
|-
|0004000e00144400
|18a0
|更新データ Ver. 1.5
ワンピース超グランドバトル!X
|JP
|-
|0004000e00144600
|410
|更新データ Ver. 1.1
弱虫ペダル明日への高回転
|JP
|-
|0004000e00145300
|410
|更新データ Ver. 1.1
魔神少女 -Chronicle 2D ACT-
|JP
|-
|0004000e00145500
|420
|更新データ Ver. 1.1.0
役満鳳凰
|JP
|-
|0004000e00146c00
|410
|更新データ Ver. 1.1.0 ロスト
ヒーローズ2 PREMIUM EDITION
|JP
|-
|0004000e00147800
|410
|更新データ Ver. 1.1.0 ブレイ
ブリーデフォルト無料で遊べる版
|JP
|-
|0004000e0014a900
|420
|更新データ Ver. 1.1 そろばん･
あんざん･フラッシュ暗算完全版
|JP
|-
|0004000e0014ab00
|420
|更新データ Ver. 1.1 まほコレ
～魔法☆あいどるコレクション～
|JP
|-
|0004000e0014ac00
|c40
|更新データ Ver. 1.3 フューチャー
カードバディファイト
|JP
|-
|0004000e0014ad00
|410
|大逆転裁判更新データ Ver. 1.1.0
|JP
|-
|0004000e0014ba00
|1040
|更新データ Ver. 1.1.1
ピンチ50連発!!
|JP
|-
|0004000e0014c800
|410
|Azure Striker GUNVOLT
Update Ver. 1.2
|US
|-
|0004000e0014dd00
|410
|LEGO® Ninjago™: Shadow
of Ronin - Update
|EU
|-
|0004000e0014df00
|1080
|更新データ Ver. 1.0.4
戦国無双 Chronicle 3
|JP
|-
|0004000e0014e000
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e700
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e800
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e900
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014eb00
|410
|LEGO® Ninjago™: Shadow
of Ronin™ Update Ver. 2.0
|US
|-
|0004000e0014f000
|410
|更新データ Ver. 2.0 どうぶつの森
ハッピーホームデザイナー
|JP
|-
|0004000e0014f100
|410
|Animal Crossing™: Happy Home
Designer Update Ver. 2.0
|US
|-
|0004000e0014f200
|410
|AC: Happy Home Designer:
Update
|EU
|-
|0004000e0014fb00
|820
|更新データ Ver. 1.2
PROJECT X ZONE 2
|JP
|-
|0004000e0014fc00
|820
|更新データ Ver. 1.2
PROJECT X ZONE 2 OGSE
|JP
|-
|0004000e00150100
|1870
|更新データ Ver. 1.5
チャリ走 DX3 タイムライダー
|JP
|-
|0004000e00152900
|420
|更新データ Ver. 1.1
暗殺教室殺せんせー大包囲網!!
|JP
|-
|0004000e00152a00
|c30
|更新データ Ver. 1.2 すみっコ
ぐらしここがおちつくんです
|JP
|-
|0004000e00155000
|860
|更新データ Ver. 1.2
ディズニーマジックキャッスル2
|JP
|-
|0004000e00155100
|c40
|更新データ Ver. 1.2
妖怪ウォッチ2 真打
|JP
|-
|0004000e00155400
|850
|更新データ Ver. 1.2.0
モンスターハンタークロス
|JP
|-
|0004000e00155800
|801
|更新データ Ver. 1.2.0
モンスターハンタークロス
|JP
|-
|0004000e00156100
|830
|更新データ Ver. 1.2
マーセナリーズサーガ2
|JP
|-
|0004000e00157700
|410
|更新データ Ver. 1.1
マル合格! FP3級平成26-27年度版
|JP
|-
|0004000e00157900
|820
|更新データ Ver. 2.1.0
エースコンバット 3D クロスランブル +
|JP
|-
|0004000e00158600
|410
|Titan Attacks! Update Ver. 1.1
|US
|-
|0004000e00159000
|410
|Titan Attacks! - Update
|EU
|-
|0004000e00159500
|410
|Shin Megami Tensei: Devil
Survivor 2 Update Ver. 1.1
|US
|-
|0004000e0015a200
|410
|OlliOlli - Update
|EU
|-
|0004000e0015a300
|820
|ACE COMBAT™ ASSAULT
HORIZON LEGACY + - Update
|EU
|-
|0004000e0015a400
|410
|OlliOlli Update Ver. 1.1.0
|US
|-
|0004000e0015a800
|440
|更新データ Ver. 2.0
6×1≠UNLIMITED?
|JP
|-
|0004000e0015bd00
|830
|업데이트 데이터 Ver. 1.2
Azure Striker GUNVOLT
|KR
|-
|0004000e0015c000
|820
|ACE COMBAT ASSAULT
HORIZON LEGACY+ Update
|US
|-
|0004000e0015cb00
|430
|更新データ Ver. 1.0.1 新･
ロロナのアトリエはじまりの物語
|JP
|-
|0004000e0015dc00
|410
|更新データ Ver. 1.1
エクスケーブ～運命の夢幻塔編～
|JP
|-
|0004000e0015e300
|430
|更新データ Ver. 1.0.1
ドラえもんのび太の宇宙英雄記
|JP
|-
|0004000e0015e700
|420
|更新データVer.1.1 ラングリッサー
リインカーネーション -転生-
|JP
|-
|0004000e0015e800
|410
|更新データ Ver. 1.1.0　
プリパラ&プリティーリズム 1450!
|JP
|-
|0004000e00160200
|410
|Goosebumps: The Game
Update Ver. 1.01
|US
|-
|0004000e00160800
|1060
|更新データ Ver. 1.4
コミック工房2
|JP
|-
|0004000e00162300
|440
|更新データ Ver. 2.0 パズドラ
SUPER MARIO BROS. EDITION
|JP
|-
|0004000e00163c00
|c60
|更新データ Ver. 1.2.0
ドラゴンボールZ 超究極武闘伝
|JP
|-
|0004000e00166f00
|820
|Comic Workshop 2: Update
|EU
|-
|0004000e00167700
|410
|YO-KAI WATCH™ Update
Ver. 1.1
|US
|-
|0004000e00167c00
|5060
|업데이트 데이터 Ver. 1.1.3
슈퍼 스매시브라더스
for 닌텐도 3DS
|KR
|-
|0004000e00167f00
|820
|Comic Workshop 2
Update Ver. 1.2
|US
|-
|0004000e00168600
|5050
|大亂鬥スマッシュブラザーズ for
Nintendo 3DS 更新資料 Ver. 1.1.3
|TW
|-
|0004000e00169500
|410
|Rodea the Sky Soldier -
Update
|EU
|-
|0004000e00169c00
|830
|更新データ Ver. 1.2
ちゃおイラストクラブ
|JP
|-
|0004000e00169d00
|410
|更新データ Ver. 1.1.0
アイカツ!My No.1 Stage!
|JP
|-
|0004000e0016a100
|410
|New Style Boutique™ 2 -
Fashion Forward: Update
|EU
|-
|0004000e0016b200
|410
|【ダウンロード版】
更新データファイアーエムブレムif
|JP
|-
|0004000e0016c600
|18b0
|更新データ Ver. 2.2
妖怪ウォッチバスターズ白犬隊
|JP
|-
|0004000e0016c700
|18b0
|更新データ Ver. 2.2
妖怪ウォッチバスターズ赤猫団
|JP
|-
|0004000e0016d100
|420
|Puzzle & Dragons Z + Puzzle & Dragons Super Mario Bros. Edition
更新資料 Ve
|TW
|-
|0004000e0016f200
|820
|SAMURAI WARRIORS:
Chronicles 3 Update Ver. 1.0.2
|US
|-
|0004000e00170800
|410
|更新データ Ver. 1.1
ほっぺちゃんぷにっとしぼって大冒険!
|JP
|-
|0004000e00173b00
|820
|SAMURAI WARRIORS:
Chronicles 3: Update
|EU
|-
|0004000e00174d00
|430
|更新データ Ver. 1.1
三國志2
|JP
|-
|0004000e00175d00
|420
|PROJECT X ZONE 2：BRAVE NEW WORLD 更新資料Ver.1.2
|TW
|-
|0004000e00176700
|410
|업데이트 데이터 Ver. 1.1
프로젝트 크로스 존 2
|KR
|-
|0004000e00176e00
|c30
|更新データ Ver. 2.1.0
ゼルダの伝説トライフォース3銃士
|JP
|-
|0004000e00176f00
|c30
|The Legend of Zelda™:
Tri Force Heroes Update
|US
|-
|0004000e00177000
|c30
|The Legend of Zelda™:
Tri Force Heroes: Update
|EU
|-
|0004000e00177e00
|420
|更新データ Ver. 1.1
モノカゲクエスト
|JP
|-
|0004000e00178000
|840
|更新データ Ver. 1.2
ドリームガールプルミエ
|JP
|-
|0004000e00178500
|430
|更新データ Ver. 1.1
すみっコぐらしおみせはじめるんです
|JP
|-
|0004000e0017c200
|410
|更新データ Ver. 1.1
すみっコぐらしおみせはじめるんです
|JP
|-
|0004000e0017c900
|820
|Shovel Knight:
Update
|EU
|-
|0004000e0017d800
|410
|更新データ Ver. 1.1.0 ダウン
タウンのガキの使いやあらへんで
|JP
|-
|0004000e0017e100
|410
|Shovel Knight Update Ver. 2.2
|US
|-
|0004000e0017ec00
|820
|MONSTER HUNTER X 更新資料 Ver. 1.2.0
|TW
|-
|0004000e0f700000
|410
|更新データ Ver. 1.1
New 3DS専用ゼノブレイド
|JP
|-
|0004000e0f700100
|410
|Xenoblade Chronicles™ 3D
Update Ver. 1.0
|US
|-
|0004000e0f700200
|410
|Xenoblade Chronicles 3D:
Update
|EU
|-
|000480044b333656
|0
|Jewel Quest 5 -
The Sleepless Star
|EU
|-
|000480044b343350
|10
|Jewel Quest 4 Heritage
|EU
|-
|000480044b354c50
|0
|Forgotten Legions
|EU
|-
|000480044b35544a
|400
|戦国Tactics
|JP
|-
|000480044b425150
|10
|Break Tactics
|EU
|-
|000480044b464a4a
|400
|マジカルファンタジスタ
|JP
|-
|000480044b464d4a
|400
|あたまごモンスターズ
|JP
|-
|000480044b465a4a
|400
|あたまご
|JP
|-
|000480044b4b5a50
|10
|Academy: Chess Puzzles
|EU
|-
|000480044b4e414a
|800
|プチコンmkII
|JP
|-
|000480044b514e45
|400
|Castle Conqueror - Revolution
|US
|-
|000480044b555650
|30
|Bloons速 TD 4
|EU
|-
|000480044b564c45
|10
|Clash of Elementalists
|US
|-
|000480044b564c50
|0
|Clash of Elementalists
|EU
|-
|000480044b584650
|410
|Color Commando
|EU
|-
|000480044b584b50
|60
|Goony
|EU
|-
|000480044b585250
|30
|Retro Pocket™
|EU
|-
|000480044b585550
|10
|Publisher Dream
|EU
|-
|000480044b594e50
|20
|Cake Ninja: XMAS
|EU
|-
|000480044b59534a
|400
|あたまIQパニック
|JP
|}

VersionList

2016-01-26T07:47:02Z

Einstein95:

Used by the system menu to notify the user of updates.
{|class="wikitable sortable"
!Title ID
!Version
!Name
!Country
|-
|0004000000037500
|21
|Tom Clancy's Ghost Recon®
Shadow Wars
|EU
|-
|0004000000038b00
|410
|Resident Evil™
The Mercenaries 3D
|EU
|-
|000400000004a300
|400
|Petz Fantasy 3D
|EU
|-
|0004000000056c00
|890
|うごくメモ帳 3D
|JP
|-
|000400000005e300
|820
|熱血硬派くにおくんすぺしゃる
|JP
|-
|000400000005ee00
|10
|Resident Evil™ Revelations
|EU
|-
|0004000000066300
|400
|Mighty Switch Force!
|US
|-
|000400000006d100
|0
|Luxor
|EU
|-
|000400000006d700
|1
|Pets Resort 3D
|EU
|-
|000400000006e400
|400
|スーパーマリオブラザーズ
|JP
|-
|000400000006e500
|400
|Super Mario Bros.™
|US
|-
|000400000006e600
|400
|Super Mario Bros.™
|EU
|-
|000400000006ed00
|410
|メトロイド
|JP
|-
|000400000006ee00
|400
|Metroid™
|US
|-
|000400000006ef00
|400
|Metroid™
|EU
|-
|000400000006f000
|410
|ゼルダの伝説1
|JP
|-
|000400000006f100
|400
|The Legend of Zelda™
|US
|-
|000400000006f200
|400
|The Legend of Zelda™
|EU
|-
|000400000006f600
|400
|レッキングクルー
|JP
|-
|000400000006f900
|400
|マリオオープンゴルフ
|JP
|-
|000400000006fa00
|400
|NES Open Tournament Golf™
|US
|-
|000400000006fb00
|400
|NES Open Tournament Golf
|EU
|-
|000400000006ff00
|400
|ドンキーコングJR.
|JP
|-
|0004000000070000
|400
|Donkey Kong Jr.™
|US
|-
|0004000000070200
|400
|バルーンファイト
|JP
|-
|0004000000070500
|800
|アイスクライマー
|JP
|-
|0004000000070800
|400
|リンクの冒険
|JP
|-
|0004000000070900
|400
|Zelda II™ -
The Adventure of Link™
|US
|-
|0004000000070a00
|400
|Zelda II: The Adventure of Link
|EU
|-
|0004000000071100
|400
|ヨッシーのたまご
|JP
|-
|0004000000073c00
|401
|My Foal 3D
|EU
|-
|0004000000075f00
|1
|BIT.TRIP SAGA
|EU
|-
|0004000000077500
|400
|ラブプラスTOOLS
|JP
|-
|0004000000077e00
|400
|電波人間のRPG
|JP
|-
|000400000007a300
|10
|Harvest Moon:
The Tale of Two Towns
|EU
|-
|000400000007fd00
|400
|VVVVVV
|US
|-
|0004000000081100
|420
|Colors! 3D
|US
|-
|0004000000084b00
|10
|Cats and Dogs 3D
Pets at play
|EU
|-
|0004000000086800
|0
|推拉方塊(繁體中文版)
|TW
|-
|0004000000088400
|0
|Columns™
|EU
|-
|0004000000089200
|400
|夜の魔人といくさの国
～さまよえるヴァンピール～
|JP
|-
|000400000008b200
|420
|Coaster Creator 3D
|US
|-
|000400000008d100
|840
|Bit Boy!! ARCADE
|US
|-
|000400000008e300
|410
|Marvel Pinball 3D
|US
|-
|000400000008fc00
|20
|Sonic & All-Stars Racing
Transformed™
|EU
|-
|000400000008fe00
|830
|1001 Spikes
|US
|-
|0004000000090000
|410
|Johnny Kung Fu™
|US
|-
|0004000000099700
|4070
|レコチョク
|JP
|-
|000400000009b800
|0
|Dr. Robotnik's
Mean Bean Machine™
|EU
|-
|000400000009bb00
|0
|Shining Force™: The Sword of Hajya
|EU
|-
|000400000009d300
|10
|Riding Stables 3D
|EU
|-
|000400000009d600
|1830
|ドラゴンクエストⅩ
冒険者のおでかけ便利ツール
|JP
|-
|000400000009da00
|400
|悪魔城ドラキュラ
|JP
|-
|000400000009df00
|0
|Dig Dug
|EU
|-
|000400000009e300
|0
|Super C
|EU
|-
|000400000009e700
|10
|Crash City Mayhem
|EU
|-
|000400000009ea00
|410
|Turtle Tale
|US
|-
|00040000000a1200
|0
|Mega Man™ 4
|EU
|-
|00040000000a1400
|0
|Mega Man™ 5
|EU
|-
|00040000000a2f00
|420
|AiRace Speed
|US
|-
|00040000000a5400
|810
|Mutant Mudds™
|EU
|-
|00040000000a7900
|410
|電波人間のRPG2
|JP
|-
|00040000000a9000
|0
|Nintendo presents
New Style Boutique™
|EU
|-
|00040000000aa800
|400
|Fractured Soul
|US
|-
|00040000000aba00
|0
|Fractured Soul
|US
|-
|00040000000ad400
|0
|ぐるっとスプラッシュ!
|JP
|-
|00040000000aec00
|0
|The Beet Party:
Jurassic Fridge
|EU
|-
|00040000000b0f00
|830
|YouTube
|US
|-
|00040000000b4700
|3020
|どこでも本屋さん
|JP
|-
|00040000000b4f00
|400
|Fallblox™
|EU
|-
|00040000000b8f00
|400
|Gunman Clive
|US
|-
|00040000000bb100
|0
|Viking Invasion 2 -
Tower Defense
|EU
|-
|00040000000bb400
|10
|The Beet Party:
UnderWaterMelon
|EU
|-
|00040000000bba00
|0
|Sonic the Hedgehog™
|EU
|-
|00040000000bd200
|0
|ファミコン探偵倶楽部 PARTⅡ
うしろに立つ少女(前後編)
|JP
|-
|00040000000bea00
|0
|엽기토끼 시간여행 3D
|KR
|-
|00040000000bec00
|10
|레이맨 오리진
|KR
|-
|00040000000c1700
|410
|AiRace Speed
|EU
|-
|00040000000c2900
|420
|Shantae and the Pirate's Curse
|US
|-
|00040000000c3400
|400
|モンスターハンター3(トライ)G
データ移行プログラム
|JP
|-
|00040000000c3a00
|430
|デビルサバイバー2
ブレイクレコード
|JP
|-
|00040000000c4200
|0
|Rhythm Thief & the Emperor’s Treasure™
|KR
|-
|00040000000c5200
|0
|Reel Fishing速 3D
Paradise Mini
|EU
|-
|00040000000c5700
|410
|Real Heroes: Firefighter 3D
|US
|-
|00040000000c6f00
|410
|MH3U Data Transfer Program
|US
|-
|00040000000c7100
|410
|Monster Hunter™ 3 Ultimate
Data Transfer Program
|EU
|-
|00040000000c7700
|410
|Real Heroes: Firefighter 3D
|EU
|-
|00040000000c7f00
|0
|톰 클랜시의 고스트 리콘 섀도우 워즈
|KR
|-
|00040000000c8000
|0
|톰 클랜시의 스플린터 셀 3D
|KR
|-
|00040000000c8900
|0
|짜릿! 우물로 드롭
|KR
|-
|00040000000c8a00
|0
|밀고 떨구고
|KR
|-
|00040000000c8d00
|410
|Monster High™
Skultimate Roller Maze™
|EU
|-
|00040000000c9e00
|840
|実写でちびロボ!
|JP
|-
|00040000000cbb00
|0
|Picdun 2: Witch's Curse
|EU
|-
|00040000000cbd00
|420
|みんなのおしゃべりチャット
|JP
|-
|00040000000cca00
|0
|悄悄互動日記
|TW
|-
|00040000000ccd00
|820
|YouTube
|EU
|-
|00040000000cd600
|10
|Sudoku by Nikoli
|KR
|-
|00040000000cd700
|10
|Bird Mania 3D
|KR
|-
|00040000000cd800
|0
|SpeedX 3D
|KR
|-
|00040000000cef00
|410
|Swords & Soldiers 3D
|EU
|-
|00040000000cfd00
|0
|SENRAN KAGURA Burst
|KR
|-
|00040000000d0600
|430
|Swords & Soldiers 3D
|US
|-
|00040000000d1700
|0
|Air Battle Hockey 3D
|EU
|-
|00040000000d1800
|0
|Bloody Vampire
|EU
|-
|00040000000d2400
|0
|Witch & Hero
|EU
|-
|00040000000d2900
|420
|だるめしスポーツ店
|JP
|-
|00040000000d2e00
|0
|MONSTER HUNTER 3 ULTIMATE
|KR
|-
|00040000000d2f00
|0
|Mario and Donkey Kong™:
Minis on the Move
|EU
|-
|00040000000d3000
|830
|YouTube
|JP
|-
|00040000000d4800
|0
|My Riding Stables 3D–
Jumping for the Team
|EU
|-
|00040000000d4a00
|420
|Star Wars Pinball
|EU
|-
|00040000000d7700
|0
|Jewel Master Atlantis 3D
|EU
|-
|00040000000d7b00
|410
|3D スーパーハングオン
|JP
|-
|00040000000d8c00
|0
|@SIMPLE DLシリーズ Vol.10
THE浮気彼氏Xmas中止のお知らせ
|JP
|-
|00040000000d9300
|0
|The Beet Party:
Beet Poets
|EU
|-
|00040000000d9400
|0
|The Beet Party:
Unidentified Flying Waffle
|EU
|-
|00040000000db700
|c80
|@SIMPLE DLシリーズ Vol.15
THE 麻雀
|JP
|-
|00040000000db800
|450
|KORG M01D
|JP
|-
|00040000000de100
|10
|Lola's Math Train
|EU
|-
|00040000000e6100
|0
|Akari by Nikoli
|KR
|-
|00040000000e6800
|420
|Star Wars Pinball
|US
|-
|00040000000e8200
|0
|Groove Heaven
|EU
|-
|00040000000e9300
|410
|@SIMPLE DLシリーズ Vol.14
THE 脱出ゲーム～裏切りの密室～
|JP
|-
|00040000000e9800
|410
|3D 獣王記
|JP
|-
|00040000000ea800
|0
|SpeedX 3D Hyper Edition
|EU
|-
|00040000000eaf00
|0
|THE "DENPA" MEN 2:
Beyond the Waves
|EU
|-
|00040000000eb000
|1050
|ソリティ馬
|JP
|-
|00040000000edc00
|410
|Dillon's Rolling Western
The Last Ranger
|KR
|-
|00040000000edd00
|420
|Dillon's Rolling Western
|KR
|-
|00040000000ee600
|410
|どぎめぎインリョクちゃん
|JP
|-
|00040000000ee900
|410
|3D ベア･ナックル怒りの鉄拳
|JP
|-
|00040000000f7300
|0
|新・世界樹の迷宮ミレニアムの少女 (日文版)
|TW
|-
|00040000000fb900
|410
|3D ギャラクシーフォースⅡ
|JP
|-
|00040000000fc700
|0
|Donkey Kong Country Returns 3D
(英文版)
|TW
|-
|00040000000fc800
|1060
|honto for ニンテンドー3DS
|JP
|-
|00040000000fc900
|0
|魔女與勇者
|TW
|-
|00040000000fd300
|0
|逆轉裁判 5 (英文版)
|TW
|-
|00040000000fe200
|10
|Talking Phrasebook -
7 Languages
|US
|-
|0004000000103500
|410
|@SIMPLE DLシリーズ Vol.21
THE 鑑識官 File.1
|JP
|-
|0004000000103600
|410
|@SIMPLE DLシリーズ Vol.23
THE 鑑識官 File.2
|JP
|-
|0004000000104300
|1
|マイティースイッチフォース!
|JP
|-
|0004000000105800
|10
|世界樹の迷宮Ⅳ 伝承の巨神 (日文版)
|TW
|-
|0004000000105900
|10
|Etrian Odyssey Ⅳ Legends of the Titan (英文版)
|TW
|-
|0004000000105c00
|0
|爆走老精靈
|TW
|-
|0004000000108d00
|820
|Retro City Rampage: DX
|EU
|-
|0004000000109800
|28e0
|ニコニコ
|JP
|-
|000400000010cf00
|0
|Sonic Lost World™ (英文版)
|TW
|-
|000400000010d200
|820
|Retro City Rampage™: DX
|US
|-
|000400000010db00
|0
|邦妮早午餐
|TW
|-
|000400000010dc00
|0
|初音未來 Project mirai 2 (日文版)
|TW
|-
|000400000010e600
|420
|遊戯王ARC-Vオフィシャル
カードゲームかんたんマスター!
|JP
|-
|0004000000111100
|820
|Grinsia
|US
|-
|0004000000112300
|420
|Cubit The Hardcore Platformer Robot
|US
|-
|0004000000115700
|0
|The Legend of Zelda:
A Link Between Worlds (英文版)
|TW
|-
|0004000000119300
|0
|Mario Party: Island Tour (英文版)
|TW
|-
|0004000000119a00
|1040
|Shovel Knight
|US
|-
|0004000000120100
|420
|3D ファンタジーゾーン
オパオパブラザーズ
|JP
|-
|0004000000121d00
|820
|3D ファンタジーゾーンⅡダブル
|JP
|-
|0004000000123200
|0
|Kirby: Triple Deluxe (英文版)
|TW
|-
|0004000000124000
|410
|The Keep
|US
|-
|0004000000124300
|410
|Cubit The Hardcore
Platformer Robot
|EU
|-
|0004000000124a00
|c50
|リアル脱出ゲーム×ニンテンドー
3DS 超破壊計画からの脱出
|JP
|-
|0004000000127600
|401
|Alien On The Run
|US
|-
|0004000000128900
|410
|3D アウトラン
|JP
|-
|0004000000129600
|410
|AiRace Xeno
|EU
|-
|0004000000129f00
|440
|KORG DSN-12
|JP
|-
|000400000012bf00
|410
|AiRace Xeno
|US
|-
|000400000012cb00
|820
|Shovel Knight
|EU
|-
|000400000012d000
|820
|Bit Boy!! ARCADE
|EU
|-
|000400000012e700
|430
|Moon Chronicles™
|US
|-
|0004000000130300
|c40
|拡散性ミリオンアーサー
|JP
|-
|0004000000132900
|0
|逆轉裁判123 / Phoenix Wright:
Ace Attorney Trilogy(日英版)
|TW
|-
|0004000000134600
|410
|バッジとれ～るセンター
|JP
|-
|0004000000136a00
|0
|鐵道日本！長良川鐵道出發篇
(繁體中文版)
|TW
|-
|0004000000138900
|410
|Proun+
|EU
|-
|0004000000139c00
|c70
|みんなでまもって騎士
姫のトキメキらぷそでぃ
|JP
|-
|000400000013d000
|820
|ドラゴンボールヒーローズ UM2
ゲームデータ引継ぎアプリ
|JP
|-
|000400000013d100
|1470
|ドラゴンクエストⅩ オンライン
|JP
|-
|000400000013ea00
|420
|Comic Workshop
|US
|-
|000400000013ee00
|430
|Woah Dave!
|US
|-
|000400000013f900
|420
|Glory of Generals
|US
|-
|0004000000140f00
|2cc0
|ドラゴンクエストⅩ
冒険者のおでかけ超便利ツール
|JP
|-
|0004000000141000
|830
|ポケとる
|JP
|-
|0004000000141a00
|0
|MONSTER HUNTER 4G(日文版)
|TW
|-
|0004000000141f00
|10
|Fossil Fighters™: Frontier(英文版)
|TW
|-
|0004000000143c00
|440
|Painting Workshop
|US
|-
|0004000000144d00
|c30
|Oh!ガッチマンデンゲキ
BAZOOKA!! スペシャルゲーム
|JP
|-
|0004000000146f00
|410
|マイティガンヴォルト
|JP
|-
|0004000000147d00
|0
|Dedede's Drum Dash Deluxe(英文版)
|TW
|-
|0004000000148100
|0
|Kirby Fighters Deluxe™(英文版)
|TW
|-
|0004000000148400
|810
|Comic Workshop
|EU
|-
|0004000000148c00
|10
|Hatsune Miku: Project Mirai DX
|US
|-
|0004000000148f00
|410
|Proun+
|US
|-
|0004000000149700
|810
|Painting Workshop
|EU
|-
|000400000014b000
|410
|ブレイブリーセカンド
無料で遊べる三銃士編
|JP
|-
|000400000014c900
|820
|Battleminer
|US
|-
|0004000000150d00
|420
|Bloo Kid 2
|US
|-
|0004000000151100
|410
|Cube Creator 3D
|US
|-
|0004000000151f00
|0
|Pokémon Art Academy(英文版)
|TW
|-
|0004000000152e00
|10
|カンフーラビット
|JP
|-
|000400000015a600
|0
|魔神少女 -Chronicle 2D ACT-(繁體中文版)
|TW
|-
|000400000015b100
|820
|IronFall: Invasion
|EU
|-
|000400000015d100
|0
|Fairune(繁體中文版)
|TW
|-
|000400000015d800
|820
|IRONFALL Invasion
|US
|-
|0004000000162200
|1890
|イジン爆闘!!ウデジマン
|JP
|-
|0004000000164600
|410
|みんなのポケモンスクランブル
|JP
|-
|0004000000166400
|10
|Toy Stunt Bike(日文版)
|TW
|-
|0004000000169000
|0
|PAZURU(日文版)
|TW
|-
|000400000016d100
|0
|Puzzle & Dragons Z + Puzzle & Dragons Super Mario Bros. Edition(英文版)
|TW
|-
|000400000016d200
|0
|Puzzle & Dragons Z + Super Mario Bros. Edition 特別試玩版
|TW
|-
|0004000000175d00
|10
|PROJECT X ZONE 2：BRAVE NEW WORLD(日文版)
|TW
|-
|0004000000177d00
|410
|アルファディア
|JP
|-
|0004000000179100
|0
|Goonyan(日文版)
|TW
|-
|000400000017a900
|10
|Johnny's Payday Panic(英日版)
|TW
|-
|000400000017b800
|0
|ファイアーエムブレムif (日文版)
|TW
|-
|000400000017bf00
|0
|IRONFALL -Invasion- (日文版)
|TW
|-
|000400000017d200
|410
|超科学脱出ギア･ディテクティブ
|JP
|-
|000400000017da00
|0
|패밀리 루어피싱 3D
|KR
|-
|000400000017ec00
|0
|MONSTER HUNTER® X (日文版)
|TW
|-
|0004000000182c00
|0
|ゼルダの伝說　
トライフォース３銃士 (日文版)
|TW
|-
|0004000000185c00
|0
|The Legend of Zelda™ : Majora's Mask 3D(英文版)
|TW
|-
|000400000f700800
|c30
|The Binding of Isaac: Rebirth
|US
|-
|000400000f700900
|840
|The Binding of Isaac: Rebirth
|EU
|-
|000400020008c401
|820
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000b8b01
|410
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000edf01
|420
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000ee001
|410
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200132501
|420
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200136a01
|0
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200175d01
|0
|The Binding of Isaac: Rebirth
|EU
|-
|000400020017a901
|10
|The Binding of Isaac: Rebirth
|EU
|-
|0004000e00030600
|410
|更新データ Ver. 1.1
マリオカート7
|JP
|-
|0004000e00030700
|410
|Mario Kart 7
Update data
|EU
|-
|0004000e00030800
|410
|Mario Kart™ 7
Update Ver. 1.1
|US
|-
|0004000e00032100
|800
|更新データ Ver. 1.2
NEWラブプラス
|JP
|-
|0004000e00036f00
|400
|更新データ Ver. 1.1
花といきもの立体図鑑
|JP
|-
|0004000e00039a00
|400
|更新データ Ver. 1.1
カルドセプト®
|JP
|-
|0004000e00043700
|400
|更新データ Ver. 1.1 ものすごく脳を鍛える5分間の鬼トレーニング
|JP
|-
|0004000e0004b500
|430
|更新データ Ver. 1.1
モンスターハンター4
|JP
|-
|0004000e0004b700
|400
|更新データ Ver. 1.1
G1グランプリ
|JP
|-
|0004000e0004ee00
|400
|更新データ Ver. 1.1
KINGDOM HEARTS 3D
|JP
|-
|0004000e00053600
|800
|更新データ Ver. 1.1
ペンギンの問題ザ･ウォ―ズ
|JP
|-
|0004000e00055d00
|1470
|更新データ Ver. 1.5
ポケットモンスター X
|JP
|-
|0004000e00055e00
|1460
|更新データ Ver. 1.5
ポケットモンスター Y
|JP
|-
|0004000e0005d100
|c10
|更新データ Ver. 1.2
GIRLS MODE よくばり宣言!
|JP
|-
|0004000e0005e900
|410
|更新データ Ver.1.1
BRAVELY DEFAULT FF
|JP
|-
|0004000e00060600
|420
|更新データ Ver. 1.1
マリオ&ルイージRPG4
|JP
|-
|0004000e00065000
|410
|Secret Mysteries in London -
Update
|EU
|-
|0004000e0006cf00
|830
|Jewel Quest
The Sapphire Dragon - Update
|EU
|-
|0004000e0006d200
|2000
|更新データ Ver. 1.7
ファンタジーライフ
|JP
|-
|0004000e00072a00
|410
|更新データ Ver. 1.1
真･三國無双 VS
|JP
|-
|0004000e00074500
|820
|更新データ Ver. 1.1
探偵神宮寺三郎復讐の輪舞
|JP
|-
|0004000e00074600
|400
|更新データ Ver. 1.1 DQM
テリーのワンダーランド3D
|JP
|-
|0004000e00078500
|c00
|更新データ Ver. 1.2
ダンボール戦機爆ブースト
|JP
|-
|0004000e00078b00
|400
|更新データ Ver. 1.1
レイトン教授VS逆転裁判
|JP
|-
|0004000e0007a000
|400
|更新データ Ver. 1.1 METAL
GEAR SOLID SNAKE EATER 3D
|JP
|-
|0004000e00081e00
|410
|METAL GEAR SOLID SNAKE
EATER 3D Update Ver. 1.1
|US
|-
|0004000e00084d00
|430
|AeternoBlade
Update
|EU
|-
|0004000e00086200
|840
|更新データ Ver. 1.1
とびだせどうぶつの森
|JP
|-
|0004000e00086500
|820
|업데이트 데이터 Ver. 1.1
튀어나와요 동물의 숲
|KR
|-
|0004000e0008c300
|410
|Tomodachi Life™ Update
Ver. 1.1
|US
|-
|0004000e0008c400
|c40
|Tomodachi Life™: Update
|EU
|-
|0004000e0008c500
|c50
|更新データ Ver. 1.2
トモダチコレクション新生活
|JP
|-
|0004000e00091000
|440
|更新データ Ver. 1.1
デビルサマナーソウルハッカーズ
|JP
|-
|0004000e00091400
|410
|Real Heroes: Firefighter 3D - Update
|EU
|-
|0004000e00095c00
|430
|更新データ Ver. 1.1
ディズニーマジックキャッスル
|JP
|-
|0004000e0009c000
|410
|Shin Megami Tensei: Devil
Survivor Overclocked Patch
|EU
|-
|0004000e0009ef00
|430
|更新データ Ver. 1.1
メダロットDUAL カブトVer.
|JP
|-
|0004000e0009f000
|430
|更新データ Ver. 1.1
メダロットDUAL クワガタVer.
|JP
|-
|0004000e0009fe00
|440
|更新データ Ver. 1.1
もっと気軽に!お絵描き工房プラス
|JP
|-
|0004000e000a0b00
|14a0
|更新データ Ver. 2.1
大合奏!バンドブラザーズP
|JP
|-
|0004000e000a1b00
|1020
|更新データ Ver. 1.3
イナズマイレブンGO2 ネップウ
|JP
|-
|0004000e000a1c00
|1020
|更新データ Ver. 1.3
イナズマイレブンGO2 ライメイ
|JP
|-
|0004000e000a4d00
|400
|更新データ Ver. 1.1
戦国無双 Chronicle 2nd
|JP
|-
|0004000e000a9000
|400
|New Style Boutique™
Update
|EU
|-
|0004000e000a9100
|400
|Style Savvy: Trendsetters
Update Ver. 1.1
|US
|-
|0004000e000a9800
|400
|更新データ Ver. 1.1 モデル☆
おしゃれオーディションプラチナ
|JP
|-
|0004000e000aa700
|420
|更新データ Ver. 1.1
カセキホリダームゲンギア
|JP
|-
|0004000e000ac700
|c50
|更新データ Ver. 1.2
カードファイト!! ヴァンガード
|JP
|-
|0004000e000ada00
|820
|更新データ Ver. 1.1
ピカピカナース物語2
|JP
|-
|0004000e000af700
|410
|LEGO® Legends of CHIMA:
Laval's Journey Update
|EU
|-
|0004000e000afb00
|410
|更新データ Ver. 1.1
チャリ走DX
|JP
|-
|0004000e000afc00
|410
|更新データ Ver. 1.1 デジモンワールド Re:Digitize Decode
|JP
|-
|0004000e000afd00
|420
|更新データ Ver. 1.1
メタルマックス4 月光のディーヴァ
|JP
|-
|0004000e000b1700
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 1: Update
|EU
|-
|0004000e000b1800
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 2: Update
|EU
|-
|0004000e000b1900
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 3: Update
|EU
|-
|0004000e000b4a00
|420
|更新データ Ver. 1.1
とんがりボウシと魔法の町
|JP
|-
|0004000e000b6d00
|410
|更新データ Ver. 1.1
燐光のランツェ
|JP
|-
|0004000e000b8b00
|5160
|更新データ Ver. 1.1.3 大乱闘
スマッシュブラザーズ for 3DS
|JP
|-
|0004000e000b9900
|410
|Real Heroes: Firefighter 3D - Update
|EU
|-
|0004000e000bb800
|440
|更新データ Ver. 1.1 イナズマ
イレブン1･2･3!! 円堂守伝説
|JP
|-
|0004000e000c0100
|420
|更新データ Ver. 2.0
マギはじまりの迷宮
|JP
|-
|0004000e000c1c00
|410
|更新データ Ver. 1.1 オシャレで
かわいい子犬と遊ぼ!-海編-
|JP
|-
|0004000e000c2900
|840
|Shantae and the Pirate's Curse
Update Ver. 02.02
|US
|-
|0004000e000c3600
|830
|更新データ Ver. 1.2 ペルソナQ
シャドウオブザラビリンス
|JP
|-
|0004000e000c3a00
|840
|更新データ Ver. 1.1
デビルサバイバー2 ブレイクレコード
|JP
|-
|0004000e000c9b00
|c50
|更新データ Ver. 1.2
ポケモンバンク
|JP
|-
|0004000e000cb700
|420
|更新データ Ver. 1.1 ニンテンドー
3DSガイドルーヴル美術館
|JP
|-
|0004000e000cb900
|430
|Nintendo 3DS™ Guide: Louvre
(English Version) Update
|US
|-
|0004000e000cba00
|420
|업데이트 데이터 Ver. 1.1
닌텐도 3DS 가이드 루브르 박물관
|KR
|-
|0004000e000cbd00
|1090
|更新データ Ver. 1.4
みんなのおしゃべりチャット
|JP
|-
|0004000e000cc400
|430
|更新データ Ver. 1.1
初音ミク Project mirai 2
|JP
|-
|0004000e000cd300
|410
|AeternoBlade Update Ver. 1.0
|US
|-
|0004000e000cf300
|420
|更新データ Ver. 1.1
カスタムモンスターズ
|JP
|-
|0004000e000cf400
|850
|更新データ Ver. 1.2
妖怪ウォッチ
|JP
|-
|0004000e000cf500
|420
|更新データ Ver. 1.1 DQM2
イルとルカの不思議なふしぎな鍵
|JP
|-
|0004000e000cf600
|430
|更新データ Ver. 1.1
CONCEPTIONⅡ
|JP
|-
|0004000e000cf900
|420
|更新データ Ver. 1.1
ポケモンアートアカデミー
|JP
|-
|0004000e000d0900
|420
|Pokémon™ Art Academy™:
Update
|EU
|-
|0004000e000d5600
|430
|Nintendo 3DS™ Guide: Louvre
(French Version) Update
|US
|-
|0004000e000d5700
|430
|Nintendo 3DS™ Guide: Louvre
(German Version) Update
|EU
|-
|0004000e000d5800
|430
|Nintendo 3DS™ Guide: Louvre
(Italian Version) Update
|EU
|-
|0004000e000d5900
|430
|Nintendo 3DS™ Guide: Louvre
(Spanish Version) Update
|US
|-
|0004000e000d5a00
|410
|Mario & Luigi™: Dream Team
Update
|US
|-
|0004000e000d6e00
|410
|更新データ Ver. 1.1
ゼルダの伝説ムジュラの仮面 3D
|JP
|-
|0004000e000d7c00
|1450
|更新データ Ver. 4.1
STEELDIVER SUBWARS
|JP
|-
|0004000e000d7d00
|1450
|Steel Diver™: Sub Wars
Update Ver. 4.1
|US
|-
|0004000e000d7e00
|1450
|Steel Diver™: Sub Wars:
Update
|EU
|-
|0004000e000d8e00
|840
|更新データ Ver. 1.2 ほっぺちゃん
つくって!あそんで!ぷにぷにタウン!
|JP
|-
|0004000e000d8f00
|830
|更新データ Ver. 1.1 まめゴマ
はっぴー!スイーツファーム
|JP
|-
|0004000e000d9000
|410
|Mario & Luigi™:
Dream Team Bros. Update
|EU
|-
|0004000e000db600
|410
|更新データ Ver. 1.1
BRAVELY DEFAULT FtS
|JP
|-
|0004000e000dbd00
|14b0
|更新データ Ver. 1.3
SIMPLEシリーズ Vol.1 THE 麻雀
|JP
|-
|0004000e000dc700
|430
|更新データ Ver. 1.1
熱血硬派くにおくんSP 乱闘協奏曲
|JP
|-
|0004000e000dc800
|830
|更新データ Ver. 1.0.2
ブレイブリーセカンド
|JP
|-
|0004000e000dca00
|430
|更新データ Ver. 1.1
ダンボール戦機W 超カスタム
|JP
|-
|0004000e000dd900
|410
|Hakuoki: Memories of the
Shinsengumi Update
|US
|-
|0004000e000df800
|c70
|更新データ Ver. 1.2
進撃の巨人～人類最後の翼～
|JP
|-
|0004000e000e9a00
|830
|更新データ Ver. 1.2
TFF CURTAIN CALL
|JP
|-
|0004000e000e9c00
|1490
|更新データ Ver. 1.7
ファンタジーライフ LINK!
|JP
|-
|0004000e000ea900
|430
|Disney Magical World
Update Ver. 1.1
|US
|-
|0004000e000eb800
|820
|更新データ Ver. 1.2
ホームタウンストーリー
|JP
|-
|0004000e000ecd00
|410
|Adventure Timeâ˘: ETDBIDK
Update 1
|US
|-
|0004000e000edf00
|5130
|Super Smash Bros.™
Update Ver. 1.1.3
|US
|-
|0004000e000ee000
|5130
|Super Smash Bros.™
for Nintendo 3DS: Update
|EU
|-
|0004000e000ef000
|1070
|更新データ Ver. 1.4
電波人間のRPG3
|JP
|-
|0004000e000f1f00
|860
|更新データ Ver. 1.2 ポケモン
トレッタラボメインシステム
|JP
|-
|0004000e000f3f00
|420
|更新データ Ver. 2.0.0
ポポロクロイス牧場物語
|JP
|-
|0004000e000f4000
|840
|更新データ Ver. 1.2
ダンボール戦機ウォーズ
|JP
|-
|0004000e000f4200
|840
|更新データ Ver. 1.2
アイカツ! 2人のmy princess
|JP
|-
|0004000e000f4f00
|450
|更新データ Ver. 1.1
喧嘩番長6～ソウル&ブラッド～
|JP
|-
|0004000e000f5800
|820
|更新データ Ver. 1.2 ワンピース
アンリミテッドワールド R
|JP
|-
|0004000e000f7200
|420
|更新データ Ver. 1.1
ナナミ English上達のコツ
|JP
|-
|0004000e000f9700
|420
|更新データ Ver. 1.1
王だぁランド!
|JP
|-
|0004000e000f9b00
|1080
|更新データ Ver. 1.4
ダービースタリオンGOLD
|JP
|-
|0004000e000fb000
|430
|更新データ Ver. 1.1
文字パズルことだまーる★
|JP
|-
|0004000e000fb100
|c90
|更新データ Ver. 1.3
閃乱カグラ2 -真紅-
|JP
|-
|0004000e000fb300
|420
|更新データ Ver. 1.1
トリコアルティメットサバイバル
|JP
|-
|0004000e000fb400
|430
|更新データ Ver. 1.1 モデション
ドリームガール
|JP
|-
|0004000e000fc100
|420
|I am an Air Traffic Controller
Airport Hero Hawaii Update
|US
|-
|0004000e000fce00
|410
|Hakuoki
Update
|EU
|-
|0004000e00100900
|410
|更新資料 Ver. 1.1
MONSTER HUNTER 4
|TW
|-
|0004000e00101200
|420
|更新データ Ver. 1.1 ぷよぷよテトリス
|JP
|-
|0004000e00101300
|410
|更新データ Ver. 1.1
ヒーローバンク
|JP
|-
|0004000e00102000
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102100
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102200
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102600
|410
|Adventure Timeâ˘:
ETDBIDK Update
|EU
|-
|0004000e00102f00
|850
|更新データ Ver. 1.2.0 太鼓の
達人どんとかつの時空大冒険
|JP
|-
|0004000e00103200
|c30
|更新データ Ver. 1.2
わんニャンペットショップ
|JP
|-
|0004000e00103900
|420
|更新データ Ver.1.1 @SIMPLE DL
Vol.20 THE カード
|JP
|-
|0004000e00103e00
|410
|更新データ Ver. 1.1.0 @SIMPLE
DL Vol.27 THE イラストパズル
|JP
|-
|0004000e00104800
|420
|更新データ Ver. 1.1
メタルファイトベイブレード
|JP
|-
|0004000e00104900
|830
|更新データ Ver. 1.2
VitaminZ Revolution
|JP
|-
|0004000e00104a00
|420
|更新データ Ver.1.1ジュエルペット
カフェで魔法のクッキング!
|JP
|-
|0004000e00104c00
|420
|更新データ Ver. 1.1 こびとづかん　
こびとの不思議実験セット
|JP
|-
|0004000e00105000
|410
|업데이트 데이터 Ver. 1.1
몬스터헌터 4
|KR
|-
|0004000e00105100
|430
|更新データ Ver. 1.1
VitaminX Evolution Plus
|JP
|-
|0004000e00106700
|410
|更新データ Ver. 1.1
キャラペット
|JP
|-
|0004000e00108100
|430
|更新データ Ver. 1.1
アロー･オブ･ラピュタ
|JP
|-
|0004000e0010af00
|420
|Shantae and the
Pirate's Curse - Update
|EU
|-
|0004000e0010ba00
|420
|更新データ Ver. 1.1 イナズマ
イレブンGO ビッグバン
|JP
|-
|0004000e0010bb00
|420
|更新データ Ver. 1.1 イナズマ
イレブンGO スーパーノヴァ
|JP
|-
|0004000e0010bc00
|440
|更新データ Ver. 2.0.0
牧場物語つながる新天地
|JP
|-
|0004000e0010e200
|830
|更新データ Ver. 1.2
FINAL FANTASY EXPLORERS
|JP
|-
|0004000e0010f600
|410
|Harvest Moon®: The Lost
Valley Update Ver. 1.01
|US
|-
|0004000e00111e00
|830
|更新データ Ver. 1.2
チャリ走 DX2 ギャラクシー
|JP
|-
|0004000e00113300
|450
|更新データ Ver. 1.1
メダロット8 カブトVer.
|JP
|-
|0004000e00113400
|450
|更新データ Ver. 1.1
メダロット8 クワガタVer.
|JP
|-
|0004000e00114700
|840
|更新データ Ver. 1.2
コミック工房
|JP
|-
|0004000e00114900
|430
|更新データ Ver. 1.1
異史戦国伝宿業
|JP
|-
|0004000e00114b00
|410
|更新データ Ver. 1.1
タイムアベンジャー
|JP
|-
|0004000e00117200
|1480
|更新データ Ver. 3.2.1
プチコン3号 SmileBASIC
|JP
|-
|0004000e00118100
|430
|更新データ Ver. 1.1
名探偵コナンファントム狂詩曲
|JP
|-
|0004000e00118500
|420
|更新データ Ver. 1.1
漢検トレーニング
|JP
|-
|0004000e00119a00
|820
|Shovel Knight Update Ver. 1.1
|US
|-
|0004000e0011b200
|830
|更新データ Ver. 1.2
大人VSグレコ漢字完全フルセット
|JP
|-
|0004000e0011b300
|420
|更新データ Ver. 1.1
大人VSグレコ漢字激ムズ編
|JP
|-
|0004000e0011b400
|420
|更新データ Ver. 1.1
大人VSグレコ漢字ちょいムズ編
|JP
|-
|0004000e0011c200
|410
|LEGO® Batman™ 3:
BEYOND GOTHAM - Update
|EU
|-
|0004000e0011c400
|1c70
|更新データ Ver. 1.4 ポケット
モンスターオメガルビー
|JP
|-
|0004000e0011c500
|1c70
|更新データ Ver. 1.4 ポケット
モンスターアルファサファイア
|JP
|-
|0004000e0011d700
|1040
|更新データ Ver. 1.2
モンスターハンター4G
|JP
|-
|0004000e0011dd00
|410
|LEGO® Batman™ 3:
Beyond Gotham Update
|US
|-
|0004000e00120000
|420
|更新データ Ver. 1.1
ナナミ English日常会話
|JP
|-
|0004000e00120500
|820
|更新データ Ver. 1.2 新･世界樹
の迷宮2 ファフニールの騎士
|JP
|-
|0004000e00120600
|1880
|更新データ Ver. 1.6
ドラゴンボールヒーローズ UM2
|JP
|-
|0004000e00120700
|420
|更新データ Ver. 1.1 カード
ファイト!! ヴァンガード LOV
|JP
|-
|0004000e00120800
|410
|更新データ Ver. 1.1
IslandDays
|JP
|-
|0004000e00120900
|420
|更新データ Ver. 2.0.0 禁忌のマグナ
|JP
|-
|0004000e00121b00
|430
|更新データ Ver. 1.1 マル合格!
ITパスポート試験平成26年度版
|JP
|-
|0004000e00125500
|410
|The Legend of Zelda™:
Majora’s Mask 3D Update Ver. 1.1
|US
|-
|0004000e00125600
|410
|The Legend of Zelda™:
Majora's Mask 3D: Update
|EU
|-
|0004000e00125d00
|24c0
|更新データ Ver. 1.9
電波人間のRPG FREE!
|JP
|-
|0004000e00126100
|410
|Monster Hunter™ 4 Ultimate:
Update
|EU
|-
|0004000e00126300
|430
|Monster Hunter™ 4 Ultimate
Update Ver. 1.1
|US
|-
|0004000e00127a00
|410
|更新データ Ver. 1.1
ぼく管関空 SKY STORY
|JP
|-
|0004000e00129d00
|440
|更新データ Ver. 1.1
不思議の国の冒険酒場
|JP
|-
|0004000e0012a700
|820
|更新データ Ver. 1.2
蒼き雷霆ガンヴォルト
|JP
|-
|0004000e0012a800
|c50
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012a900
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012aa00
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012ab00
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012b700
|410
|更新データ Ver. 1.0.3 ぐんまの
やぼう for ニンテンドー3DS
|JP
|-
|0004000e0012be00
|410
|Harvest Moon®:
The Lost Valley: Update
|EU
|-
|0004000e0012c800
|410
|Mario vs. Donkey Kong™:
Tipping Stars Ver. 1.0.1
|US
|-
|0004000e0012c900
|410
|更新データ Ver. 1.0.1
マリオvs.ドンキーコング
|JP
|-
|0004000e0012ca00
|410
|Mario vs. Donkey Kong™
Tipping Stars: Update
|EU
|-
|0004000e0012d800
|c30
|更新データ Ver. 1.2.0
GIRLS MODE 3 キラキラ☆コーデ
|JP
|-
|0004000e0012dc00
|410
|【白夜王国】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012dd00
|410
|【暗夜王国】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012de00
|420
|【スペシャルエディション】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012f500
|410
|更新データ Ver. 1.1 テイルズオブ
ザワールドレーヴユナイティア
|JP
|-
|0004000e0012f800
|2050
|更新データ Ver. 2.1
妖怪ウォッチ2 本家
|JP
|-
|0004000e0012f900
|2050
|更新データ Ver. 2.1
妖怪ウォッチ2 元祖
|JP
|-
|0004000e0012fa00
|c60
|更新データ Ver. 1.2
ドーリィ♪カノン
|JP
|-
|0004000e00130300
|20a0
|更新データ Ver. 2.3.0
拡散性ミリオンアーサー
|JP
|-
|0004000e00132500
|820
|更新データ Ver. 1.2.0
Code Name: S.T.E.A.M.
|JP
|-
|0004000e00132c00
|410
|Siesta Fiesta - Update
|EU
|-
|0004000e00134300
|410
|更新データ Ver. 1.1.0
ロストヒーローズ2
|JP
|-
|0004000e00134500
|430
|更新データ Ver. 1.1
進撃の巨人～人類最後の翼～CHAIN
|JP
|-
|0004000e00134600
|1040
|更新データ Ver. 1.3.0
バッジとれ～るセンター
|JP
|-
|0004000e00137700
|430
|Puzzle & Dragons Z +
Super Mario Bros. Edition 2.0
|US
|-
|0004000e00137800
|420
|Puzzle & Dragons Z
|EU
|-
|0004000e00139300
|410
|Siesta Fiesta
Update Ver. 1.0
|US
|-
|0004000e00139a00
|440
|更新データ Ver. 1.1.0
コロロケの森ぽいっと
|JP
|-
|0004000e0013fe00
|420
|更新データ Ver. 1.0.2
王国の道具屋さん
|JP
|-
|0004000e00140100
|410
|更新データ Ver. 1.0.2
王国の道具屋さん
|JP
|-
|0004000e00140b00
|420
|更新データ Ver. 1.1
テラフォーマーズ紅き惑星の激闘
|JP
|-
|0004000e00141a00
|410
|MONSTER HUNTER 4G 更新資料 ver.1.1
|TW
|-
|0004000e00141d00
|830
|更新データ Ver. 1.2 大合奏!
バンドブラザーズP デビュー
|JP
|-
|0004000e00144300
|410
|更新データ Ver. 1.1.0
ヒーローバンク2
|JP
|-
|0004000e00144400
|18a0
|更新データ Ver. 1.5
ワンピース超グランドバトル!X
|JP
|-
|0004000e00144600
|410
|更新データ Ver. 1.1
弱虫ペダル明日への高回転
|JP
|-
|0004000e00145300
|410
|更新データ Ver. 1.1
魔神少女 -Chronicle 2D ACT-
|JP
|-
|0004000e00145500
|420
|更新データ Ver. 1.1.0
役満鳳凰
|JP
|-
|0004000e00146c00
|410
|更新データ Ver. 1.1.0 ロスト
ヒーローズ2 PREMIUM EDITION
|JP
|-
|0004000e00147800
|410
|更新データ Ver. 1.1.0 ブレイ
ブリーデフォルト無料で遊べる版
|JP
|-
|0004000e0014a900
|420
|更新データ Ver. 1.1 そろばん･
あんざん･フラッシュ暗算完全版
|JP
|-
|0004000e0014ab00
|420
|更新データ Ver. 1.1 まほコレ
～魔法☆あいどるコレクション～
|JP
|-
|0004000e0014ac00
|c40
|更新データ Ver. 1.3 フューチャー
カードバディファイト
|JP
|-
|0004000e0014ad00
|410
|大逆転裁判更新データ Ver. 1.1.0
|JP
|-
|0004000e0014ba00
|1040
|更新データ Ver. 1.1.1
ピンチ50連発!!
|JP
|-
|0004000e0014c800
|410
|Azure Striker GUNVOLT
Update Ver. 1.2
|US
|-
|0004000e0014dd00
|410
|LEGO® Ninjago™: Shadow
of Ronin - Update
|EU
|-
|0004000e0014df00
|1080
|更新データ Ver. 1.0.4
戦国無双 Chronicle 3
|JP
|-
|0004000e0014e000
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e700
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e800
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e900
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014eb00
|410
|LEGO® Ninjago™: Shadow
of Ronin™ Update Ver. 2.0
|US
|-
|0004000e0014f000
|410
|更新データ Ver. 2.0 どうぶつの森
ハッピーホームデザイナー
|JP
|-
|0004000e0014f100
|410
|Animal Crossing™: Happy Home
Designer Update Ver. 2.0
|US
|-
|0004000e0014f200
|410
|AC: Happy Home Designer:
Update
|EU
|-
|0004000e0014fb00
|820
|更新データ Ver. 1.2
PROJECT X ZONE 2
|JP
|-
|0004000e0014fc00
|820
|更新データ Ver. 1.2
PROJECT X ZONE 2 OGSE
|JP
|-
|0004000e00150100
|1870
|更新データ Ver. 1.5
チャリ走 DX3 タイムライダー
|JP
|-
|0004000e00152900
|420
|更新データ Ver. 1.1
暗殺教室殺せんせー大包囲網!!
|JP
|-
|0004000e00152a00
|c30
|更新データ Ver. 1.2 すみっコ
ぐらしここがおちつくんです
|JP
|-
|0004000e00155000
|860
|更新データ Ver. 1.2
ディズニーマジックキャッスル2
|JP
|-
|0004000e00155100
|c40
|更新データ Ver. 1.2
妖怪ウォッチ2 真打
|JP
|-
|0004000e00155400
|850
|更新データ Ver. 1.2.0
モンスターハンタークロス
|JP
|-
|0004000e00155800
|801
|更新データ Ver. 1.2.0
モンスターハンタークロス
|JP
|-
|0004000e00156100
|830
|更新データ Ver. 1.2
マーセナリーズサーガ2
|JP
|-
|0004000e00157700
|410
|更新データ Ver. 1.1
マル合格! FP3級平成26-27年度版
|JP
|-
|0004000e00157900
|820
|更新データ Ver. 2.1.0
エースコンバット 3D クロスランブル +
|JP
|-
|0004000e00158600
|410
|Titan Attacks! Update Ver. 1.1
|US
|-
|0004000e00159000
|410
|Titan Attacks! - Update
|EU
|-
|0004000e00159500
|410
|Shin Megami Tensei: Devil
Survivor 2 Update Ver. 1.1
|US
|-
|0004000e0015a200
|410
|OlliOlli - Update
|EU
|-
|0004000e0015a300
|820
|ACE COMBAT™ ASSAULT
HORIZON LEGACY + - Update
|EU
|-
|0004000e0015a400
|410
|OlliOlli Update Ver. 1.1.0
|US
|-
|0004000e0015a800
|440
|更新データ Ver. 2.0
6×1≠UNLIMITED?
|JP
|-
|0004000e0015bd00
|830
|업데이트 데이터 Ver. 1.2
Azure Striker GUNVOLT
|KR
|-
|0004000e0015c000
|820
|ACE COMBAT ASSAULT
HORIZON LEGACY+ Update
|US
|-
|0004000e0015cb00
|430
|更新データ Ver. 1.0.1 新･
ロロナのアトリエはじまりの物語
|JP
|-
|0004000e0015dc00
|410
|更新データ Ver. 1.1
エクスケーブ～運命の夢幻塔編～
|JP
|-
|0004000e0015e300
|430
|更新データ Ver. 1.0.1
ドラえもんのび太の宇宙英雄記
|JP
|-
|0004000e0015e700
|420
|更新データVer.1.1 ラングリッサー
リインカーネーション -転生-
|JP
|-
|0004000e0015e800
|410
|更新データ Ver. 1.1.0　
プリパラ&プリティーリズム 1450!
|JP
|-
|0004000e00160200
|410
|Goosebumps: The Game
Update Ver. 1.01
|US
|-
|0004000e00160800
|1060
|更新データ Ver. 1.4
コミック工房2
|JP
|-
|0004000e00162300
|440
|更新データ Ver. 2.0 パズドラ
SUPER MARIO BROS. EDITION
|JP
|-
|0004000e00163c00
|c60
|更新データ Ver. 1.2.0
ドラゴンボールZ 超究極武闘伝
|JP
|-
|0004000e00166f00
|820
|Comic Workshop 2: Update
|EU
|-
|0004000e00167700
|410
|YO-KAI WATCH™ Update
Ver. 1.1
|US
|-
|0004000e00167c00
|5060
|업데이트 데이터 Ver. 1.1.3
슈퍼 스매시브라더스
for 닌텐도 3DS
|KR
|-
|0004000e00167f00
|820
|Comic Workshop 2
Update Ver. 1.2
|US
|-
|0004000e00168600
|5050
|大亂鬥スマッシュブラザーズ for
Nintendo 3DS 更新資料 Ver. 1.1.3
|TW
|-
|0004000e00169500
|410
|Rodea the Sky Soldier -
Update
|EU
|-
|0004000e00169c00
|830
|更新データ Ver. 1.2
ちゃおイラストクラブ
|JP
|-
|0004000e00169d00
|410
|更新データ Ver. 1.1.0
アイカツ!My No.1 Stage!
|JP
|-
|0004000e0016a100
|410
|New Style Boutique™ 2 -
Fashion Forward: Update
|EU
|-
|0004000e0016b200
|410
|【ダウンロード版】
更新データファイアーエムブレムif
|JP
|-
|0004000e0016c600
|18b0
|更新データ Ver. 2.2
妖怪ウォッチバスターズ白犬隊
|JP
|-
|0004000e0016c700
|18b0
|更新データ Ver. 2.2
妖怪ウォッチバスターズ赤猫団
|JP
|-
|0004000e0016d100
|420
|Puzzle & Dragons Z + Puzzle & Dragons Super Mario Bros. Edition
更新資料 Ve
|TW
|-
|0004000e0016f200
|820
|SAMURAI WARRIORS:
Chronicles 3 Update Ver. 1.0.2
|US
|-
|0004000e00170800
|410
|更新データ Ver. 1.1
ほっぺちゃんぷにっとしぼって大冒険!
|JP
|-
|0004000e00173b00
|820
|SAMURAI WARRIORS:
Chronicles 3: Update
|EU
|-
|0004000e00174d00
|430
|更新データ Ver. 1.1
三國志2
|JP
|-
|0004000e00175d00
|420
|PROJECT X ZONE 2：BRAVE NEW WORLD 更新資料Ver.1.2
|TW
|-
|0004000e00176700
|410
|업데이트 데이터 Ver. 1.1
프로젝트 크로스 존 2
|KR
|-
|0004000e00176e00
|c30
|更新データ Ver. 2.1.0
ゼルダの伝説トライフォース3銃士
|JP
|-
|0004000e00176f00
|c30
|The Legend of Zelda™:
Tri Force Heroes Update
|US
|-
|0004000e00177000
|c30
|The Legend of Zelda™:
Tri Force Heroes: Update
|EU
|-
|0004000e00177e00
|420
|更新データ Ver. 1.1
モノカゲクエスト
|JP
|-
|0004000e00178000
|840
|更新データ Ver. 1.2
ドリームガールプルミエ
|JP
|-
|0004000e00178500
|430
|更新データ Ver. 1.1
すみっコぐらしおみせはじめるんです
|JP
|-
|0004000e0017c200
|410
|更新データ Ver. 1.1
すみっコぐらしおみせはじめるんです
|JP
|-
|0004000e0017c900
|820
|Shovel Knight:
Update
|EU
|-
|0004000e0017d800
|410
|更新データ Ver. 1.1.0 ダウン
タウンのガキの使いやあらへんで
|JP
|-
|0004000e0017e100
|410
|Shovel Knight Update Ver. 2.2
|US
|-
|0004000e0017ec00
|820
|MONSTER HUNTER X 更新資料 Ver. 1.2.0
|TW
|-
|0004000e0f700000
|410
|更新データ Ver. 1.1
New 3DS専用ゼノブレイド
|JP
|-
|0004000e0f700100
|410
|Xenoblade Chronicles™ 3D
Update Ver. 1.0
|US
|-
|0004000e0f700200
|410
|Xenoblade Chronicles 3D:
Update
|EU
|-
|000480044b333656
|0
|Jewel Quest 5 -
The Sleepless Star
|EU
|-
|000480044b343350
|10
|Jewel Quest 4 Heritage
|EU
|-
|000480044b354c50
|0
|Forgotten Legions
|EU
|-
|000480044b35544a
|400
|戦国Tactics
|JP
|-
|000480044b425150
|10
|Break Tactics
|EU
|-
|000480044b464a4a
|400
|マジカルファンタジスタ
|JP
|-
|000480044b464d4a
|400
|あたまごモンスターズ
|JP
|-
|000480044b465a4a
|400
|あたまご
|JP
|-
|000480044b4b5a50
|10
|Academy: Chess Puzzles
|EU
|-
|000480044b4e414a
|800
|プチコンmkII
|JP
|-
|000480044b514e45
|400
|Castle Conqueror - Revolution
|US
|-
|000480044b555650
|30
|Bloons速 TD 4
|EU
|-
|000480044b564c45
|10
|Clash of Elementalists
|US
|-
|000480044b564c50
|0
|Clash of Elementalists
|EU
|-
|000480044b584650
|410
|Color Commando
|EU
|-
|000480044b584b50
|60
|Goony
|EU
|-
|000480044b585250
|30
|Retro Pocket™
|EU
|-
|000480044b585550
|10
|Publisher Dream
|EU
|-
|000480044b594e50
|20
|Cake Ninja: XMAS
|EU
|-
|000480044b59534a
|400
|あたまIQパニック
|JP
|}

VersionList

2016-01-26T07:46:32Z

Einstein95:

Used by the system menu to notify the user of updates.
{|class=wikitable sortable
!Title ID
!Version
!Name
!Country
|-
|0004000000037500
|21
|Tom Clancy's Ghost Recon®
Shadow Wars
|EU
|-
|0004000000038b00
|410
|Resident Evil™
The Mercenaries 3D
|EU
|-
|000400000004a300
|400
|Petz Fantasy 3D
|EU
|-
|0004000000056c00
|890
|うごくメモ帳 3D
|JP
|-
|000400000005e300
|820
|熱血硬派くにおくんすぺしゃる
|JP
|-
|000400000005ee00
|10
|Resident Evil™ Revelations
|EU
|-
|0004000000066300
|400
|Mighty Switch Force!
|US
|-
|000400000006d100
|0
|Luxor
|EU
|-
|000400000006d700
|1
|Pets Resort 3D
|EU
|-
|000400000006e400
|400
|スーパーマリオブラザーズ
|JP
|-
|000400000006e500
|400
|Super Mario Bros.™
|US
|-
|000400000006e600
|400
|Super Mario Bros.™
|EU
|-
|000400000006ed00
|410
|メトロイド
|JP
|-
|000400000006ee00
|400
|Metroid™
|US
|-
|000400000006ef00
|400
|Metroid™
|EU
|-
|000400000006f000
|410
|ゼルダの伝説1
|JP
|-
|000400000006f100
|400
|The Legend of Zelda™
|US
|-
|000400000006f200
|400
|The Legend of Zelda™
|EU
|-
|000400000006f600
|400
|レッキングクルー
|JP
|-
|000400000006f900
|400
|マリオオープンゴルフ
|JP
|-
|000400000006fa00
|400
|NES Open Tournament Golf™
|US
|-
|000400000006fb00
|400
|NES Open Tournament Golf
|EU
|-
|000400000006ff00
|400
|ドンキーコングJR.
|JP
|-
|0004000000070000
|400
|Donkey Kong Jr.™
|US
|-
|0004000000070200
|400
|バルーンファイト
|JP
|-
|0004000000070500
|800
|アイスクライマー
|JP
|-
|0004000000070800
|400
|リンクの冒険
|JP
|-
|0004000000070900
|400
|Zelda II™ -
The Adventure of Link™
|US
|-
|0004000000070a00
|400
|Zelda II: The Adventure of Link
|EU
|-
|0004000000071100
|400
|ヨッシーのたまご
|JP
|-
|0004000000073c00
|401
|My Foal 3D
|EU
|-
|0004000000075f00
|1
|BIT.TRIP SAGA
|EU
|-
|0004000000077500
|400
|ラブプラスTOOLS
|JP
|-
|0004000000077e00
|400
|電波人間のRPG
|JP
|-
|000400000007a300
|10
|Harvest Moon:
The Tale of Two Towns
|EU
|-
|000400000007fd00
|400
|VVVVVV
|US
|-
|0004000000081100
|420
|Colors! 3D
|US
|-
|0004000000084b00
|10
|Cats and Dogs 3D
Pets at play
|EU
|-
|0004000000086800
|0
|推拉方塊(繁體中文版)
|TW
|-
|0004000000088400
|0
|Columns™
|EU
|-
|0004000000089200
|400
|夜の魔人といくさの国
～さまよえるヴァンピール～
|JP
|-
|000400000008b200
|420
|Coaster Creator 3D
|US
|-
|000400000008d100
|840
|Bit Boy!! ARCADE
|US
|-
|000400000008e300
|410
|Marvel Pinball 3D
|US
|-
|000400000008fc00
|20
|Sonic & All-Stars Racing
Transformed™
|EU
|-
|000400000008fe00
|830
|1001 Spikes
|US
|-
|0004000000090000
|410
|Johnny Kung Fu™
|US
|-
|0004000000099700
|4070
|レコチョク
|JP
|-
|000400000009b800
|0
|Dr. Robotnik's
Mean Bean Machine™
|EU
|-
|000400000009bb00
|0
|Shining Force™: The Sword of Hajya
|EU
|-
|000400000009d300
|10
|Riding Stables 3D
|EU
|-
|000400000009d600
|1830
|ドラゴンクエストⅩ
冒険者のおでかけ便利ツール
|JP
|-
|000400000009da00
|400
|悪魔城ドラキュラ
|JP
|-
|000400000009df00
|0
|Dig Dug
|EU
|-
|000400000009e300
|0
|Super C
|EU
|-
|000400000009e700
|10
|Crash City Mayhem
|EU
|-
|000400000009ea00
|410
|Turtle Tale
|US
|-
|00040000000a1200
|0
|Mega Man™ 4
|EU
|-
|00040000000a1400
|0
|Mega Man™ 5
|EU
|-
|00040000000a2f00
|420
|AiRace Speed
|US
|-
|00040000000a5400
|810
|Mutant Mudds™
|EU
|-
|00040000000a7900
|410
|電波人間のRPG2
|JP
|-
|00040000000a9000
|0
|Nintendo presents
New Style Boutique™
|EU
|-
|00040000000aa800
|400
|Fractured Soul
|US
|-
|00040000000aba00
|0
|Fractured Soul
|US
|-
|00040000000ad400
|0
|ぐるっとスプラッシュ!
|JP
|-
|00040000000aec00
|0
|The Beet Party:
Jurassic Fridge
|EU
|-
|00040000000b0f00
|830
|YouTube
|US
|-
|00040000000b4700
|3020
|どこでも本屋さん
|JP
|-
|00040000000b4f00
|400
|Fallblox™
|EU
|-
|00040000000b8f00
|400
|Gunman Clive
|US
|-
|00040000000bb100
|0
|Viking Invasion 2 -
Tower Defense
|EU
|-
|00040000000bb400
|10
|The Beet Party:
UnderWaterMelon
|EU
|-
|00040000000bba00
|0
|Sonic the Hedgehog™
|EU
|-
|00040000000bd200
|0
|ファミコン探偵倶楽部 PARTⅡ
うしろに立つ少女(前後編)
|JP
|-
|00040000000bea00
|0
|엽기토끼 시간여행 3D
|KR
|-
|00040000000bec00
|10
|레이맨 오리진
|KR
|-
|00040000000c1700
|410
|AiRace Speed
|EU
|-
|00040000000c2900
|420
|Shantae and the Pirate's Curse
|US
|-
|00040000000c3400
|400
|モンスターハンター3(トライ)G
データ移行プログラム
|JP
|-
|00040000000c3a00
|430
|デビルサバイバー2
ブレイクレコード
|JP
|-
|00040000000c4200
|0
|Rhythm Thief & the Emperor’s Treasure™
|KR
|-
|00040000000c5200
|0
|Reel Fishing速 3D
Paradise Mini
|EU
|-
|00040000000c5700
|410
|Real Heroes: Firefighter 3D
|US
|-
|00040000000c6f00
|410
|MH3U Data Transfer Program
|US
|-
|00040000000c7100
|410
|Monster Hunter™ 3 Ultimate
Data Transfer Program
|EU
|-
|00040000000c7700
|410
|Real Heroes: Firefighter 3D
|EU
|-
|00040000000c7f00
|0
|톰 클랜시의 고스트 리콘 섀도우 워즈
|KR
|-
|00040000000c8000
|0
|톰 클랜시의 스플린터 셀 3D
|KR
|-
|00040000000c8900
|0
|짜릿! 우물로 드롭
|KR
|-
|00040000000c8a00
|0
|밀고 떨구고
|KR
|-
|00040000000c8d00
|410
|Monster High™
Skultimate Roller Maze™
|EU
|-
|00040000000c9e00
|840
|実写でちびロボ!
|JP
|-
|00040000000cbb00
|0
|Picdun 2: Witch's Curse
|EU
|-
|00040000000cbd00
|420
|みんなのおしゃべりチャット
|JP
|-
|00040000000cca00
|0
|悄悄互動日記
|TW
|-
|00040000000ccd00
|820
|YouTube
|EU
|-
|00040000000cd600
|10
|Sudoku by Nikoli
|KR
|-
|00040000000cd700
|10
|Bird Mania 3D
|KR
|-
|00040000000cd800
|0
|SpeedX 3D
|KR
|-
|00040000000cef00
|410
|Swords & Soldiers 3D
|EU
|-
|00040000000cfd00
|0
|SENRAN KAGURA Burst
|KR
|-
|00040000000d0600
|430
|Swords & Soldiers 3D
|US
|-
|00040000000d1700
|0
|Air Battle Hockey 3D
|EU
|-
|00040000000d1800
|0
|Bloody Vampire
|EU
|-
|00040000000d2400
|0
|Witch & Hero
|EU
|-
|00040000000d2900
|420
|だるめしスポーツ店
|JP
|-
|00040000000d2e00
|0
|MONSTER HUNTER 3 ULTIMATE
|KR
|-
|00040000000d2f00
|0
|Mario and Donkey Kong™:
Minis on the Move
|EU
|-
|00040000000d3000
|830
|YouTube
|JP
|-
|00040000000d4800
|0
|My Riding Stables 3D–
Jumping for the Team
|EU
|-
|00040000000d4a00
|420
|Star Wars Pinball
|EU
|-
|00040000000d7700
|0
|Jewel Master Atlantis 3D
|EU
|-
|00040000000d7b00
|410
|3D スーパーハングオン
|JP
|-
|00040000000d8c00
|0
|@SIMPLE DLシリーズ Vol.10
THE浮気彼氏Xmas中止のお知らせ
|JP
|-
|00040000000d9300
|0
|The Beet Party:
Beet Poets
|EU
|-
|00040000000d9400
|0
|The Beet Party:
Unidentified Flying Waffle
|EU
|-
|00040000000db700
|c80
|@SIMPLE DLシリーズ Vol.15
THE 麻雀
|JP
|-
|00040000000db800
|450
|KORG M01D
|JP
|-
|00040000000de100
|10
|Lola's Math Train
|EU
|-
|00040000000e6100
|0
|Akari by Nikoli
|KR
|-
|00040000000e6800
|420
|Star Wars Pinball
|US
|-
|00040000000e8200
|0
|Groove Heaven
|EU
|-
|00040000000e9300
|410
|@SIMPLE DLシリーズ Vol.14
THE 脱出ゲーム～裏切りの密室～
|JP
|-
|00040000000e9800
|410
|3D 獣王記
|JP
|-
|00040000000ea800
|0
|SpeedX 3D Hyper Edition
|EU
|-
|00040000000eaf00
|0
|THE "DENPA" MEN 2:
Beyond the Waves
|EU
|-
|00040000000eb000
|1050
|ソリティ馬
|JP
|-
|00040000000edc00
|410
|Dillon's Rolling Western
The Last Ranger
|KR
|-
|00040000000edd00
|420
|Dillon's Rolling Western
|KR
|-
|00040000000ee600
|410
|どぎめぎインリョクちゃん
|JP
|-
|00040000000ee900
|410
|3D ベア･ナックル怒りの鉄拳
|JP
|-
|00040000000f7300
|0
|新・世界樹の迷宮ミレニアムの少女 (日文版)
|TW
|-
|00040000000fb900
|410
|3D ギャラクシーフォースⅡ
|JP
|-
|00040000000fc700
|0
|Donkey Kong Country Returns 3D
(英文版)
|TW
|-
|00040000000fc800
|1060
|honto for ニンテンドー3DS
|JP
|-
|00040000000fc900
|0
|魔女與勇者
|TW
|-
|00040000000fd300
|0
|逆轉裁判 5 (英文版)
|TW
|-
|00040000000fe200
|10
|Talking Phrasebook -
7 Languages
|US
|-
|0004000000103500
|410
|@SIMPLE DLシリーズ Vol.21
THE 鑑識官 File.1
|JP
|-
|0004000000103600
|410
|@SIMPLE DLシリーズ Vol.23
THE 鑑識官 File.2
|JP
|-
|0004000000104300
|1
|マイティースイッチフォース!
|JP
|-
|0004000000105800
|10
|世界樹の迷宮Ⅳ 伝承の巨神 (日文版)
|TW
|-
|0004000000105900
|10
|Etrian Odyssey Ⅳ Legends of the Titan (英文版)
|TW
|-
|0004000000105c00
|0
|爆走老精靈
|TW
|-
|0004000000108d00
|820
|Retro City Rampage: DX
|EU
|-
|0004000000109800
|28e0
|ニコニコ
|JP
|-
|000400000010cf00
|0
|Sonic Lost World™ (英文版)
|TW
|-
|000400000010d200
|820
|Retro City Rampage™: DX
|US
|-
|000400000010db00
|0
|邦妮早午餐
|TW
|-
|000400000010dc00
|0
|初音未來 Project mirai 2 (日文版)
|TW
|-
|000400000010e600
|420
|遊戯王ARC-Vオフィシャル
カードゲームかんたんマスター!
|JP
|-
|0004000000111100
|820
|Grinsia
|US
|-
|0004000000112300
|420
|Cubit The Hardcore Platformer Robot
|US
|-
|0004000000115700
|0
|The Legend of Zelda:
A Link Between Worlds (英文版)
|TW
|-
|0004000000119300
|0
|Mario Party: Island Tour (英文版)
|TW
|-
|0004000000119a00
|1040
|Shovel Knight
|US
|-
|0004000000120100
|420
|3D ファンタジーゾーン
オパオパブラザーズ
|JP
|-
|0004000000121d00
|820
|3D ファンタジーゾーンⅡダブル
|JP
|-
|0004000000123200
|0
|Kirby: Triple Deluxe (英文版)
|TW
|-
|0004000000124000
|410
|The Keep
|US
|-
|0004000000124300
|410
|Cubit The Hardcore
Platformer Robot
|EU
|-
|0004000000124a00
|c50
|リアル脱出ゲーム×ニンテンドー
3DS 超破壊計画からの脱出
|JP
|-
|0004000000127600
|401
|Alien On The Run
|US
|-
|0004000000128900
|410
|3D アウトラン
|JP
|-
|0004000000129600
|410
|AiRace Xeno
|EU
|-
|0004000000129f00
|440
|KORG DSN-12
|JP
|-
|000400000012bf00
|410
|AiRace Xeno
|US
|-
|000400000012cb00
|820
|Shovel Knight
|EU
|-
|000400000012d000
|820
|Bit Boy!! ARCADE
|EU
|-
|000400000012e700
|430
|Moon Chronicles™
|US
|-
|0004000000130300
|c40
|拡散性ミリオンアーサー
|JP
|-
|0004000000132900
|0
|逆轉裁判123 / Phoenix Wright:
Ace Attorney Trilogy(日英版)
|TW
|-
|0004000000134600
|410
|バッジとれ～るセンター
|JP
|-
|0004000000136a00
|0
|鐵道日本！長良川鐵道出發篇
(繁體中文版)
|TW
|-
|0004000000138900
|410
|Proun+
|EU
|-
|0004000000139c00
|c70
|みんなでまもって騎士
姫のトキメキらぷそでぃ
|JP
|-
|000400000013d000
|820
|ドラゴンボールヒーローズ UM2
ゲームデータ引継ぎアプリ
|JP
|-
|000400000013d100
|1470
|ドラゴンクエストⅩ オンライン
|JP
|-
|000400000013ea00
|420
|Comic Workshop
|US
|-
|000400000013ee00
|430
|Woah Dave!
|US
|-
|000400000013f900
|420
|Glory of Generals
|US
|-
|0004000000140f00
|2cc0
|ドラゴンクエストⅩ
冒険者のおでかけ超便利ツール
|JP
|-
|0004000000141000
|830
|ポケとる
|JP
|-
|0004000000141a00
|0
|MONSTER HUNTER 4G(日文版)
|TW
|-
|0004000000141f00
|10
|Fossil Fighters™: Frontier(英文版)
|TW
|-
|0004000000143c00
|440
|Painting Workshop
|US
|-
|0004000000144d00
|c30
|Oh!ガッチマンデンゲキ
BAZOOKA!! スペシャルゲーム
|JP
|-
|0004000000146f00
|410
|マイティガンヴォルト
|JP
|-
|0004000000147d00
|0
|Dedede's Drum Dash Deluxe(英文版)
|TW
|-
|0004000000148100
|0
|Kirby Fighters Deluxe™(英文版)
|TW
|-
|0004000000148400
|810
|Comic Workshop
|EU
|-
|0004000000148c00
|10
|Hatsune Miku: Project Mirai DX
|US
|-
|0004000000148f00
|410
|Proun+
|US
|-
|0004000000149700
|810
|Painting Workshop
|EU
|-
|000400000014b000
|410
|ブレイブリーセカンド
無料で遊べる三銃士編
|JP
|-
|000400000014c900
|820
|Battleminer
|US
|-
|0004000000150d00
|420
|Bloo Kid 2
|US
|-
|0004000000151100
|410
|Cube Creator 3D
|US
|-
|0004000000151f00
|0
|Pokémon Art Academy(英文版)
|TW
|-
|0004000000152e00
|10
|カンフーラビット
|JP
|-
|000400000015a600
|0
|魔神少女 -Chronicle 2D ACT-(繁體中文版)
|TW
|-
|000400000015b100
|820
|IronFall: Invasion
|EU
|-
|000400000015d100
|0
|Fairune(繁體中文版)
|TW
|-
|000400000015d800
|820
|IRONFALL Invasion
|US
|-
|0004000000162200
|1890
|イジン爆闘!!ウデジマン
|JP
|-
|0004000000164600
|410
|みんなのポケモンスクランブル
|JP
|-
|0004000000166400
|10
|Toy Stunt Bike(日文版)
|TW
|-
|0004000000169000
|0
|PAZURU(日文版)
|TW
|-
|000400000016d100
|0
|Puzzle & Dragons Z + Puzzle & Dragons Super Mario Bros. Edition(英文版)
|TW
|-
|000400000016d200
|0
|Puzzle & Dragons Z + Super Mario Bros. Edition 特別試玩版
|TW
|-
|0004000000175d00
|10
|PROJECT X ZONE 2：BRAVE NEW WORLD(日文版)
|TW
|-
|0004000000177d00
|410
|アルファディア
|JP
|-
|0004000000179100
|0
|Goonyan(日文版)
|TW
|-
|000400000017a900
|10
|Johnny's Payday Panic(英日版)
|TW
|-
|000400000017b800
|0
|ファイアーエムブレムif (日文版)
|TW
|-
|000400000017bf00
|0
|IRONFALL -Invasion- (日文版)
|TW
|-
|000400000017d200
|410
|超科学脱出ギア･ディテクティブ
|JP
|-
|000400000017da00
|0
|패밀리 루어피싱 3D
|KR
|-
|000400000017ec00
|0
|MONSTER HUNTER® X (日文版)
|TW
|-
|0004000000182c00
|0
|ゼルダの伝說　
トライフォース３銃士 (日文版)
|TW
|-
|0004000000185c00
|0
|The Legend of Zelda™ : Majora's Mask 3D(英文版)
|TW
|-
|000400000f700800
|c30
|The Binding of Isaac: Rebirth
|US
|-
|000400000f700900
|840
|The Binding of Isaac: Rebirth
|EU
|-
|000400020008c401
|820
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000b8b01
|410
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000edf01
|420
|The Binding of Isaac: Rebirth
|EU
|-
|00040002000ee001
|410
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200132501
|420
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200136a01
|0
|The Binding of Isaac: Rebirth
|EU
|-
|0004000200175d01
|0
|The Binding of Isaac: Rebirth
|EU
|-
|000400020017a901
|10
|The Binding of Isaac: Rebirth
|EU
|-
|0004000e00030600
|410
|更新データ Ver. 1.1
マリオカート7
|JP
|-
|0004000e00030700
|410
|Mario Kart 7
Update data
|EU
|-
|0004000e00030800
|410
|Mario Kart™ 7
Update Ver. 1.1
|US
|-
|0004000e00032100
|800
|更新データ Ver. 1.2
NEWラブプラス
|JP
|-
|0004000e00036f00
|400
|更新データ Ver. 1.1
花といきもの立体図鑑
|JP
|-
|0004000e00039a00
|400
|更新データ Ver. 1.1
カルドセプト®
|JP
|-
|0004000e00043700
|400
|更新データ Ver. 1.1 ものすごく脳を鍛える5分間の鬼トレーニング
|JP
|-
|0004000e0004b500
|430
|更新データ Ver. 1.1
モンスターハンター4
|JP
|-
|0004000e0004b700
|400
|更新データ Ver. 1.1
G1グランプリ
|JP
|-
|0004000e0004ee00
|400
|更新データ Ver. 1.1
KINGDOM HEARTS 3D
|JP
|-
|0004000e00053600
|800
|更新データ Ver. 1.1
ペンギンの問題ザ･ウォ―ズ
|JP
|-
|0004000e00055d00
|1470
|更新データ Ver. 1.5
ポケットモンスター X
|JP
|-
|0004000e00055e00
|1460
|更新データ Ver. 1.5
ポケットモンスター Y
|JP
|-
|0004000e0005d100
|c10
|更新データ Ver. 1.2
GIRLS MODE よくばり宣言!
|JP
|-
|0004000e0005e900
|410
|更新データ Ver.1.1
BRAVELY DEFAULT FF
|JP
|-
|0004000e00060600
|420
|更新データ Ver. 1.1
マリオ&ルイージRPG4
|JP
|-
|0004000e00065000
|410
|Secret Mysteries in London -
Update
|EU
|-
|0004000e0006cf00
|830
|Jewel Quest
The Sapphire Dragon - Update
|EU
|-
|0004000e0006d200
|2000
|更新データ Ver. 1.7
ファンタジーライフ
|JP
|-
|0004000e00072a00
|410
|更新データ Ver. 1.1
真･三國無双 VS
|JP
|-
|0004000e00074500
|820
|更新データ Ver. 1.1
探偵神宮寺三郎復讐の輪舞
|JP
|-
|0004000e00074600
|400
|更新データ Ver. 1.1 DQM
テリーのワンダーランド3D
|JP
|-
|0004000e00078500
|c00
|更新データ Ver. 1.2
ダンボール戦機爆ブースト
|JP
|-
|0004000e00078b00
|400
|更新データ Ver. 1.1
レイトン教授VS逆転裁判
|JP
|-
|0004000e0007a000
|400
|更新データ Ver. 1.1 METAL
GEAR SOLID SNAKE EATER 3D
|JP
|-
|0004000e00081e00
|410
|METAL GEAR SOLID SNAKE
EATER 3D Update Ver. 1.1
|US
|-
|0004000e00084d00
|430
|AeternoBlade
Update
|EU
|-
|0004000e00086200
|840
|更新データ Ver. 1.1
とびだせどうぶつの森
|JP
|-
|0004000e00086500
|820
|업데이트 데이터 Ver. 1.1
튀어나와요 동물의 숲
|KR
|-
|0004000e0008c300
|410
|Tomodachi Life™ Update
Ver. 1.1
|US
|-
|0004000e0008c400
|c40
|Tomodachi Life™: Update
|EU
|-
|0004000e0008c500
|c50
|更新データ Ver. 1.2
トモダチコレクション新生活
|JP
|-
|0004000e00091000
|440
|更新データ Ver. 1.1
デビルサマナーソウルハッカーズ
|JP
|-
|0004000e00091400
|410
|Real Heroes: Firefighter 3D - Update
|EU
|-
|0004000e00095c00
|430
|更新データ Ver. 1.1
ディズニーマジックキャッスル
|JP
|-
|0004000e0009c000
|410
|Shin Megami Tensei: Devil
Survivor Overclocked Patch
|EU
|-
|0004000e0009ef00
|430
|更新データ Ver. 1.1
メダロットDUAL カブトVer.
|JP
|-
|0004000e0009f000
|430
|更新データ Ver. 1.1
メダロットDUAL クワガタVer.
|JP
|-
|0004000e0009fe00
|440
|更新データ Ver. 1.1
もっと気軽に!お絵描き工房プラス
|JP
|-
|0004000e000a0b00
|14a0
|更新データ Ver. 2.1
大合奏!バンドブラザーズP
|JP
|-
|0004000e000a1b00
|1020
|更新データ Ver. 1.3
イナズマイレブンGO2 ネップウ
|JP
|-
|0004000e000a1c00
|1020
|更新データ Ver. 1.3
イナズマイレブンGO2 ライメイ
|JP
|-
|0004000e000a4d00
|400
|更新データ Ver. 1.1
戦国無双 Chronicle 2nd
|JP
|-
|0004000e000a9000
|400
|New Style Boutique™
Update
|EU
|-
|0004000e000a9100
|400
|Style Savvy: Trendsetters
Update Ver. 1.1
|US
|-
|0004000e000a9800
|400
|更新データ Ver. 1.1 モデル☆
おしゃれオーディションプラチナ
|JP
|-
|0004000e000aa700
|420
|更新データ Ver. 1.1
カセキホリダームゲンギア
|JP
|-
|0004000e000ac700
|c50
|更新データ Ver. 1.2
カードファイト!! ヴァンガード
|JP
|-
|0004000e000ada00
|820
|更新データ Ver. 1.1
ピカピカナース物語2
|JP
|-
|0004000e000af700
|410
|LEGO® Legends of CHIMA:
Laval's Journey Update
|EU
|-
|0004000e000afb00
|410
|更新データ Ver. 1.1
チャリ走DX
|JP
|-
|0004000e000afc00
|410
|更新データ Ver. 1.1 デジモンワールド Re:Digitize Decode
|JP
|-
|0004000e000afd00
|420
|更新データ Ver. 1.1
メタルマックス4 月光のディーヴァ
|JP
|-
|0004000e000b1700
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 1: Update
|EU
|-
|0004000e000b1800
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 2: Update
|EU
|-
|0004000e000b1900
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 3: Update
|EU
|-
|0004000e000b4a00
|420
|更新データ Ver. 1.1
とんがりボウシと魔法の町
|JP
|-
|0004000e000b6d00
|410
|更新データ Ver. 1.1
燐光のランツェ
|JP
|-
|0004000e000b8b00
|5160
|更新データ Ver. 1.1.3 大乱闘
スマッシュブラザーズ for 3DS
|JP
|-
|0004000e000b9900
|410
|Real Heroes: Firefighter 3D - Update
|EU
|-
|0004000e000bb800
|440
|更新データ Ver. 1.1 イナズマ
イレブン1･2･3!! 円堂守伝説
|JP
|-
|0004000e000c0100
|420
|更新データ Ver. 2.0
マギはじまりの迷宮
|JP
|-
|0004000e000c1c00
|410
|更新データ Ver. 1.1 オシャレで
かわいい子犬と遊ぼ!-海編-
|JP
|-
|0004000e000c2900
|840
|Shantae and the Pirate's Curse
Update Ver. 02.02
|US
|-
|0004000e000c3600
|830
|更新データ Ver. 1.2 ペルソナQ
シャドウオブザラビリンス
|JP
|-
|0004000e000c3a00
|840
|更新データ Ver. 1.1
デビルサバイバー2 ブレイクレコード
|JP
|-
|0004000e000c9b00
|c50
|更新データ Ver. 1.2
ポケモンバンク
|JP
|-
|0004000e000cb700
|420
|更新データ Ver. 1.1 ニンテンドー
3DSガイドルーヴル美術館
|JP
|-
|0004000e000cb900
|430
|Nintendo 3DS™ Guide: Louvre
(English Version) Update
|US
|-
|0004000e000cba00
|420
|업데이트 데이터 Ver. 1.1
닌텐도 3DS 가이드 루브르 박물관
|KR
|-
|0004000e000cbd00
|1090
|更新データ Ver. 1.4
みんなのおしゃべりチャット
|JP
|-
|0004000e000cc400
|430
|更新データ Ver. 1.1
初音ミク Project mirai 2
|JP
|-
|0004000e000cd300
|410
|AeternoBlade Update Ver. 1.0
|US
|-
|0004000e000cf300
|420
|更新データ Ver. 1.1
カスタムモンスターズ
|JP
|-
|0004000e000cf400
|850
|更新データ Ver. 1.2
妖怪ウォッチ
|JP
|-
|0004000e000cf500
|420
|更新データ Ver. 1.1 DQM2
イルとルカの不思議なふしぎな鍵
|JP
|-
|0004000e000cf600
|430
|更新データ Ver. 1.1
CONCEPTIONⅡ
|JP
|-
|0004000e000cf900
|420
|更新データ Ver. 1.1
ポケモンアートアカデミー
|JP
|-
|0004000e000d0900
|420
|Pokémon™ Art Academy™:
Update
|EU
|-
|0004000e000d5600
|430
|Nintendo 3DS™ Guide: Louvre
(French Version) Update
|US
|-
|0004000e000d5700
|430
|Nintendo 3DS™ Guide: Louvre
(German Version) Update
|EU
|-
|0004000e000d5800
|430
|Nintendo 3DS™ Guide: Louvre
(Italian Version) Update
|EU
|-
|0004000e000d5900
|430
|Nintendo 3DS™ Guide: Louvre
(Spanish Version) Update
|US
|-
|0004000e000d5a00
|410
|Mario & Luigi™: Dream Team
Update
|US
|-
|0004000e000d6e00
|410
|更新データ Ver. 1.1
ゼルダの伝説ムジュラの仮面 3D
|JP
|-
|0004000e000d7c00
|1450
|更新データ Ver. 4.1
STEELDIVER SUBWARS
|JP
|-
|0004000e000d7d00
|1450
|Steel Diver™: Sub Wars
Update Ver. 4.1
|US
|-
|0004000e000d7e00
|1450
|Steel Diver™: Sub Wars:
Update
|EU
|-
|0004000e000d8e00
|840
|更新データ Ver. 1.2 ほっぺちゃん
つくって!あそんで!ぷにぷにタウン!
|JP
|-
|0004000e000d8f00
|830
|更新データ Ver. 1.1 まめゴマ
はっぴー!スイーツファーム
|JP
|-
|0004000e000d9000
|410
|Mario & Luigi™:
Dream Team Bros. Update
|EU
|-
|0004000e000db600
|410
|更新データ Ver. 1.1
BRAVELY DEFAULT FtS
|JP
|-
|0004000e000dbd00
|14b0
|更新データ Ver. 1.3
SIMPLEシリーズ Vol.1 THE 麻雀
|JP
|-
|0004000e000dc700
|430
|更新データ Ver. 1.1
熱血硬派くにおくんSP 乱闘協奏曲
|JP
|-
|0004000e000dc800
|830
|更新データ Ver. 1.0.2
ブレイブリーセカンド
|JP
|-
|0004000e000dca00
|430
|更新データ Ver. 1.1
ダンボール戦機W 超カスタム
|JP
|-
|0004000e000dd900
|410
|Hakuoki: Memories of the
Shinsengumi Update
|US
|-
|0004000e000df800
|c70
|更新データ Ver. 1.2
進撃の巨人～人類最後の翼～
|JP
|-
|0004000e000e9a00
|830
|更新データ Ver. 1.2
TFF CURTAIN CALL
|JP
|-
|0004000e000e9c00
|1490
|更新データ Ver. 1.7
ファンタジーライフ LINK!
|JP
|-
|0004000e000ea900
|430
|Disney Magical World
Update Ver. 1.1
|US
|-
|0004000e000eb800
|820
|更新データ Ver. 1.2
ホームタウンストーリー
|JP
|-
|0004000e000ecd00
|410
|Adventure Timeâ˘: ETDBIDK
Update 1
|US
|-
|0004000e000edf00
|5130
|Super Smash Bros.™
Update Ver. 1.1.3
|US
|-
|0004000e000ee000
|5130
|Super Smash Bros.™
for Nintendo 3DS: Update
|EU
|-
|0004000e000ef000
|1070
|更新データ Ver. 1.4
電波人間のRPG3
|JP
|-
|0004000e000f1f00
|860
|更新データ Ver. 1.2 ポケモン
トレッタラボメインシステム
|JP
|-
|0004000e000f3f00
|420
|更新データ Ver. 2.0.0
ポポロクロイス牧場物語
|JP
|-
|0004000e000f4000
|840
|更新データ Ver. 1.2
ダンボール戦機ウォーズ
|JP
|-
|0004000e000f4200
|840
|更新データ Ver. 1.2
アイカツ! 2人のmy princess
|JP
|-
|0004000e000f4f00
|450
|更新データ Ver. 1.1
喧嘩番長6～ソウル&ブラッド～
|JP
|-
|0004000e000f5800
|820
|更新データ Ver. 1.2 ワンピース
アンリミテッドワールド R
|JP
|-
|0004000e000f7200
|420
|更新データ Ver. 1.1
ナナミ English上達のコツ
|JP
|-
|0004000e000f9700
|420
|更新データ Ver. 1.1
王だぁランド!
|JP
|-
|0004000e000f9b00
|1080
|更新データ Ver. 1.4
ダービースタリオンGOLD
|JP
|-
|0004000e000fb000
|430
|更新データ Ver. 1.1
文字パズルことだまーる★
|JP
|-
|0004000e000fb100
|c90
|更新データ Ver. 1.3
閃乱カグラ2 -真紅-
|JP
|-
|0004000e000fb300
|420
|更新データ Ver. 1.1
トリコアルティメットサバイバル
|JP
|-
|0004000e000fb400
|430
|更新データ Ver. 1.1 モデション
ドリームガール
|JP
|-
|0004000e000fc100
|420
|I am an Air Traffic Controller
Airport Hero Hawaii Update
|US
|-
|0004000e000fce00
|410
|Hakuoki
Update
|EU
|-
|0004000e00100900
|410
|更新資料 Ver. 1.1
MONSTER HUNTER 4
|TW
|-
|0004000e00101200
|420
|更新データ Ver. 1.1 ぷよぷよテトリス
|JP
|-
|0004000e00101300
|410
|更新データ Ver. 1.1
ヒーローバンク
|JP
|-
|0004000e00102000
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102100
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102200
|410
|The LEGO Movie Videogame
Software Update
|EU
|-
|0004000e00102600
|410
|Adventure Timeâ˘:
ETDBIDK Update
|EU
|-
|0004000e00102f00
|850
|更新データ Ver. 1.2.0 太鼓の
達人どんとかつの時空大冒険
|JP
|-
|0004000e00103200
|c30
|更新データ Ver. 1.2
わんニャンペットショップ
|JP
|-
|0004000e00103900
|420
|更新データ Ver.1.1 @SIMPLE DL
Vol.20 THE カード
|JP
|-
|0004000e00103e00
|410
|更新データ Ver. 1.1.0 @SIMPLE
DL Vol.27 THE イラストパズル
|JP
|-
|0004000e00104800
|420
|更新データ Ver. 1.1
メタルファイトベイブレード
|JP
|-
|0004000e00104900
|830
|更新データ Ver. 1.2
VitaminZ Revolution
|JP
|-
|0004000e00104a00
|420
|更新データ Ver.1.1ジュエルペット
カフェで魔法のクッキング!
|JP
|-
|0004000e00104c00
|420
|更新データ Ver. 1.1 こびとづかん　
こびとの不思議実験セット
|JP
|-
|0004000e00105000
|410
|업데이트 데이터 Ver. 1.1
몬스터헌터 4
|KR
|-
|0004000e00105100
|430
|更新データ Ver. 1.1
VitaminX Evolution Plus
|JP
|-
|0004000e00106700
|410
|更新データ Ver. 1.1
キャラペット
|JP
|-
|0004000e00108100
|430
|更新データ Ver. 1.1
アロー･オブ･ラピュタ
|JP
|-
|0004000e0010af00
|420
|Shantae and the
Pirate's Curse - Update
|EU
|-
|0004000e0010ba00
|420
|更新データ Ver. 1.1 イナズマ
イレブンGO ビッグバン
|JP
|-
|0004000e0010bb00
|420
|更新データ Ver. 1.1 イナズマ
イレブンGO スーパーノヴァ
|JP
|-
|0004000e0010bc00
|440
|更新データ Ver. 2.0.0
牧場物語つながる新天地
|JP
|-
|0004000e0010e200
|830
|更新データ Ver. 1.2
FINAL FANTASY EXPLORERS
|JP
|-
|0004000e0010f600
|410
|Harvest Moon®: The Lost
Valley Update Ver. 1.01
|US
|-
|0004000e00111e00
|830
|更新データ Ver. 1.2
チャリ走 DX2 ギャラクシー
|JP
|-
|0004000e00113300
|450
|更新データ Ver. 1.1
メダロット8 カブトVer.
|JP
|-
|0004000e00113400
|450
|更新データ Ver. 1.1
メダロット8 クワガタVer.
|JP
|-
|0004000e00114700
|840
|更新データ Ver. 1.2
コミック工房
|JP
|-
|0004000e00114900
|430
|更新データ Ver. 1.1
異史戦国伝宿業
|JP
|-
|0004000e00114b00
|410
|更新データ Ver. 1.1
タイムアベンジャー
|JP
|-
|0004000e00117200
|1480
|更新データ Ver. 3.2.1
プチコン3号 SmileBASIC
|JP
|-
|0004000e00118100
|430
|更新データ Ver. 1.1
名探偵コナンファントム狂詩曲
|JP
|-
|0004000e00118500
|420
|更新データ Ver. 1.1
漢検トレーニング
|JP
|-
|0004000e00119a00
|820
|Shovel Knight Update Ver. 1.1
|US
|-
|0004000e0011b200
|830
|更新データ Ver. 1.2
大人VSグレコ漢字完全フルセット
|JP
|-
|0004000e0011b300
|420
|更新データ Ver. 1.1
大人VSグレコ漢字激ムズ編
|JP
|-
|0004000e0011b400
|420
|更新データ Ver. 1.1
大人VSグレコ漢字ちょいムズ編
|JP
|-
|0004000e0011c200
|410
|LEGO® Batman™ 3:
BEYOND GOTHAM - Update
|EU
|-
|0004000e0011c400
|1c70
|更新データ Ver. 1.4 ポケット
モンスターオメガルビー
|JP
|-
|0004000e0011c500
|1c70
|更新データ Ver. 1.4 ポケット
モンスターアルファサファイア
|JP
|-
|0004000e0011d700
|1040
|更新データ Ver. 1.2
モンスターハンター4G
|JP
|-
|0004000e0011dd00
|410
|LEGO® Batman™ 3:
Beyond Gotham Update
|US
|-
|0004000e00120000
|420
|更新データ Ver. 1.1
ナナミ English日常会話
|JP
|-
|0004000e00120500
|820
|更新データ Ver. 1.2 新･世界樹
の迷宮2 ファフニールの騎士
|JP
|-
|0004000e00120600
|1880
|更新データ Ver. 1.6
ドラゴンボールヒーローズ UM2
|JP
|-
|0004000e00120700
|420
|更新データ Ver. 1.1 カード
ファイト!! ヴァンガード LOV
|JP
|-
|0004000e00120800
|410
|更新データ Ver. 1.1
IslandDays
|JP
|-
|0004000e00120900
|420
|更新データ Ver. 2.0.0 禁忌のマグナ
|JP
|-
|0004000e00121b00
|430
|更新データ Ver. 1.1 マル合格!
ITパスポート試験平成26年度版
|JP
|-
|0004000e00125500
|410
|The Legend of Zelda™:
Majora’s Mask 3D Update Ver. 1.1
|US
|-
|0004000e00125600
|410
|The Legend of Zelda™:
Majora's Mask 3D: Update
|EU
|-
|0004000e00125d00
|24c0
|更新データ Ver. 1.9
電波人間のRPG FREE!
|JP
|-
|0004000e00126100
|410
|Monster Hunter™ 4 Ultimate:
Update
|EU
|-
|0004000e00126300
|430
|Monster Hunter™ 4 Ultimate
Update Ver. 1.1
|US
|-
|0004000e00127a00
|410
|更新データ Ver. 1.1
ぼく管関空 SKY STORY
|JP
|-
|0004000e00129d00
|440
|更新データ Ver. 1.1
不思議の国の冒険酒場
|JP
|-
|0004000e0012a700
|820
|更新データ Ver. 1.2
蒼き雷霆ガンヴォルト
|JP
|-
|0004000e0012a800
|c50
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012a900
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012aa00
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012ab00
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!!
|JP
|-
|0004000e0012b700
|410
|更新データ Ver. 1.0.3 ぐんまの
やぼう for ニンテンドー3DS
|JP
|-
|0004000e0012be00
|410
|Harvest Moon®:
The Lost Valley: Update
|EU
|-
|0004000e0012c800
|410
|Mario vs. Donkey Kong™:
Tipping Stars Ver. 1.0.1
|US
|-
|0004000e0012c900
|410
|更新データ Ver. 1.0.1
マリオvs.ドンキーコング
|JP
|-
|0004000e0012ca00
|410
|Mario vs. Donkey Kong™
Tipping Stars: Update
|EU
|-
|0004000e0012d800
|c30
|更新データ Ver. 1.2.0
GIRLS MODE 3 キラキラ☆コーデ
|JP
|-
|0004000e0012dc00
|410
|【白夜王国】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012dd00
|410
|【暗夜王国】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012de00
|420
|【スペシャルエディション】
更新データファイアーエムブレムif
|JP
|-
|0004000e0012f500
|410
|更新データ Ver. 1.1 テイルズオブ
ザワールドレーヴユナイティア
|JP
|-
|0004000e0012f800
|2050
|更新データ Ver. 2.1
妖怪ウォッチ2 本家
|JP
|-
|0004000e0012f900
|2050
|更新データ Ver. 2.1
妖怪ウォッチ2 元祖
|JP
|-
|0004000e0012fa00
|c60
|更新データ Ver. 1.2
ドーリィ♪カノン
|JP
|-
|0004000e00130300
|20a0
|更新データ Ver. 2.3.0
拡散性ミリオンアーサー
|JP
|-
|0004000e00132500
|820
|更新データ Ver. 1.2.0
Code Name: S.T.E.A.M.
|JP
|-
|0004000e00132c00
|410
|Siesta Fiesta - Update
|EU
|-
|0004000e00134300
|410
|更新データ Ver. 1.1.0
ロストヒーローズ2
|JP
|-
|0004000e00134500
|430
|更新データ Ver. 1.1
進撃の巨人～人類最後の翼～CHAIN
|JP
|-
|0004000e00134600
|1040
|更新データ Ver. 1.3.0
バッジとれ～るセンター
|JP
|-
|0004000e00137700
|430
|Puzzle & Dragons Z +
Super Mario Bros. Edition 2.0
|US
|-
|0004000e00137800
|420
|Puzzle & Dragons Z
|EU
|-
|0004000e00139300
|410
|Siesta Fiesta
Update Ver. 1.0
|US
|-
|0004000e00139a00
|440
|更新データ Ver. 1.1.0
コロロケの森ぽいっと
|JP
|-
|0004000e0013fe00
|420
|更新データ Ver. 1.0.2
王国の道具屋さん
|JP
|-
|0004000e00140100
|410
|更新データ Ver. 1.0.2
王国の道具屋さん
|JP
|-
|0004000e00140b00
|420
|更新データ Ver. 1.1
テラフォーマーズ紅き惑星の激闘
|JP
|-
|0004000e00141a00
|410
|MONSTER HUNTER 4G 更新資料 ver.1.1
|TW
|-
|0004000e00141d00
|830
|更新データ Ver. 1.2 大合奏!
バンドブラザーズP デビュー
|JP
|-
|0004000e00144300
|410
|更新データ Ver. 1.1.0
ヒーローバンク2
|JP
|-
|0004000e00144400
|18a0
|更新データ Ver. 1.5
ワンピース超グランドバトル!X
|JP
|-
|0004000e00144600
|410
|更新データ Ver. 1.1
弱虫ペダル明日への高回転
|JP
|-
|0004000e00145300
|410
|更新データ Ver. 1.1
魔神少女 -Chronicle 2D ACT-
|JP
|-
|0004000e00145500
|420
|更新データ Ver. 1.1.0
役満鳳凰
|JP
|-
|0004000e00146c00
|410
|更新データ Ver. 1.1.0 ロスト
ヒーローズ2 PREMIUM EDITION
|JP
|-
|0004000e00147800
|410
|更新データ Ver. 1.1.0 ブレイ
ブリーデフォルト無料で遊べる版
|JP
|-
|0004000e0014a900
|420
|更新データ Ver. 1.1 そろばん･
あんざん･フラッシュ暗算完全版
|JP
|-
|0004000e0014ab00
|420
|更新データ Ver. 1.1 まほコレ
～魔法☆あいどるコレクション～
|JP
|-
|0004000e0014ac00
|c40
|更新データ Ver. 1.3 フューチャー
カードバディファイト
|JP
|-
|0004000e0014ad00
|410
|大逆転裁判更新データ Ver. 1.1.0
|JP
|-
|0004000e0014ba00
|1040
|更新データ Ver. 1.1.1
ピンチ50連発!!
|JP
|-
|0004000e0014c800
|410
|Azure Striker GUNVOLT
Update Ver. 1.2
|US
|-
|0004000e0014dd00
|410
|LEGO® Ninjago™: Shadow
of Ronin - Update
|EU
|-
|0004000e0014df00
|1080
|更新データ Ver. 1.0.4
戦国無双 Chronicle 3
|JP
|-
|0004000e0014e000
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e700
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e800
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014e900
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ
|JP
|-
|0004000e0014eb00
|410
|LEGO® Ninjago™: Shadow
of Ronin™ Update Ver. 2.0
|US
|-
|0004000e0014f000
|410
|更新データ Ver. 2.0 どうぶつの森
ハッピーホームデザイナー
|JP
|-
|0004000e0014f100
|410
|Animal Crossing™: Happy Home
Designer Update Ver. 2.0
|US
|-
|0004000e0014f200
|410
|AC: Happy Home Designer:
Update
|EU
|-
|0004000e0014fb00
|820
|更新データ Ver. 1.2
PROJECT X ZONE 2
|JP
|-
|0004000e0014fc00
|820
|更新データ Ver. 1.2
PROJECT X ZONE 2 OGSE
|JP
|-
|0004000e00150100
|1870
|更新データ Ver. 1.5
チャリ走 DX3 タイムライダー
|JP
|-
|0004000e00152900
|420
|更新データ Ver. 1.1
暗殺教室殺せんせー大包囲網!!
|JP
|-
|0004000e00152a00
|c30
|更新データ Ver. 1.2 すみっコ
ぐらしここがおちつくんです
|JP
|-
|0004000e00155000
|860
|更新データ Ver. 1.2
ディズニーマジックキャッスル2
|JP
|-
|0004000e00155100
|c40
|更新データ Ver. 1.2
妖怪ウォッチ2 真打
|JP
|-
|0004000e00155400
|850
|更新データ Ver. 1.2.0
モンスターハンタークロス
|JP
|-
|0004000e00155800
|801
|更新データ Ver. 1.2.0
モンスターハンタークロス
|JP
|-
|0004000e00156100
|830
|更新データ Ver. 1.2
マーセナリーズサーガ2
|JP
|-
|0004000e00157700
|410
|更新データ Ver. 1.1
マル合格! FP3級平成26-27年度版
|JP
|-
|0004000e00157900
|820
|更新データ Ver. 2.1.0
エースコンバット 3D クロスランブル +
|JP
|-
|0004000e00158600
|410
|Titan Attacks! Update Ver. 1.1
|US
|-
|0004000e00159000
|410
|Titan Attacks! - Update
|EU
|-
|0004000e00159500
|410
|Shin Megami Tensei: Devil
Survivor 2 Update Ver. 1.1
|US
|-
|0004000e0015a200
|410
|OlliOlli - Update
|EU
|-
|0004000e0015a300
|820
|ACE COMBAT™ ASSAULT
HORIZON LEGACY + - Update
|EU
|-
|0004000e0015a400
|410
|OlliOlli Update Ver. 1.1.0
|US
|-
|0004000e0015a800
|440
|更新データ Ver. 2.0
6×1≠UNLIMITED?
|JP
|-
|0004000e0015bd00
|830
|업데이트 데이터 Ver. 1.2
Azure Striker GUNVOLT
|KR
|-
|0004000e0015c000
|820
|ACE COMBAT ASSAULT
HORIZON LEGACY+ Update
|US
|-
|0004000e0015cb00
|430
|更新データ Ver. 1.0.1 新･
ロロナのアトリエはじまりの物語
|JP
|-
|0004000e0015dc00
|410
|更新データ Ver. 1.1
エクスケーブ～運命の夢幻塔編～
|JP
|-
|0004000e0015e300
|430
|更新データ Ver. 1.0.1
ドラえもんのび太の宇宙英雄記
|JP
|-
|0004000e0015e700
|420
|更新データVer.1.1 ラングリッサー
リインカーネーション -転生-
|JP
|-
|0004000e0015e800
|410
|更新データ Ver. 1.1.0　
プリパラ&プリティーリズム 1450!
|JP
|-
|0004000e00160200
|410
|Goosebumps: The Game
Update Ver. 1.01
|US
|-
|0004000e00160800
|1060
|更新データ Ver. 1.4
コミック工房2
|JP
|-
|0004000e00162300
|440
|更新データ Ver. 2.0 パズドラ
SUPER MARIO BROS. EDITION
|JP
|-
|0004000e00163c00
|c60
|更新データ Ver. 1.2.0
ドラゴンボールZ 超究極武闘伝
|JP
|-
|0004000e00166f00
|820
|Comic Workshop 2: Update
|EU
|-
|0004000e00167700
|410
|YO-KAI WATCH™ Update
Ver. 1.1
|US
|-
|0004000e00167c00
|5060
|업데이트 데이터 Ver. 1.1.3
슈퍼 스매시브라더스
for 닌텐도 3DS
|KR
|-
|0004000e00167f00
|820
|Comic Workshop 2
Update Ver. 1.2
|US
|-
|0004000e00168600
|5050
|大亂鬥スマッシュブラザーズ for
Nintendo 3DS 更新資料 Ver. 1.1.3
|TW
|-
|0004000e00169500
|410
|Rodea the Sky Soldier -
Update
|EU
|-
|0004000e00169c00
|830
|更新データ Ver. 1.2
ちゃおイラストクラブ
|JP
|-
|0004000e00169d00
|410
|更新データ Ver. 1.1.0
アイカツ!My No.1 Stage!
|JP
|-
|0004000e0016a100
|410
|New Style Boutique™ 2 -
Fashion Forward: Update
|EU
|-
|0004000e0016b200
|410
|【ダウンロード版】
更新データファイアーエムブレムif
|JP
|-
|0004000e0016c600
|18b0
|更新データ Ver. 2.2
妖怪ウォッチバスターズ白犬隊
|JP
|-
|0004000e0016c700
|18b0
|更新データ Ver. 2.2
妖怪ウォッチバスターズ赤猫団
|JP
|-
|0004000e0016d100
|420
|Puzzle & Dragons Z + Puzzle & Dragons Super Mario Bros. Edition
更新資料 Ve
|TW
|-
|0004000e0016f200
|820
|SAMURAI WARRIORS:
Chronicles 3 Update Ver. 1.0.2
|US
|-
|0004000e00170800
|410
|更新データ Ver. 1.1
ほっぺちゃんぷにっとしぼって大冒険!
|JP
|-
|0004000e00173b00
|820
|SAMURAI WARRIORS:
Chronicles 3: Update
|EU
|-
|0004000e00174d00
|430
|更新データ Ver. 1.1
三國志2
|JP
|-
|0004000e00175d00
|420
|PROJECT X ZONE 2：BRAVE NEW WORLD 更新資料Ver.1.2
|TW
|-
|0004000e00176700
|410
|업데이트 데이터 Ver. 1.1
프로젝트 크로스 존 2
|KR
|-
|0004000e00176e00
|c30
|更新データ Ver. 2.1.0
ゼルダの伝説トライフォース3銃士
|JP
|-
|0004000e00176f00
|c30
|The Legend of Zelda™:
Tri Force Heroes Update
|US
|-
|0004000e00177000
|c30
|The Legend of Zelda™:
Tri Force Heroes: Update
|EU
|-
|0004000e00177e00
|420
|更新データ Ver. 1.1
モノカゲクエスト
|JP
|-
|0004000e00178000
|840
|更新データ Ver. 1.2
ドリームガールプルミエ
|JP
|-
|0004000e00178500
|430
|更新データ Ver. 1.1
すみっコぐらしおみせはじめるんです
|JP
|-
|0004000e0017c200
|410
|更新データ Ver. 1.1
すみっコぐらしおみせはじめるんです
|JP
|-
|0004000e0017c900
|820
|Shovel Knight:
Update
|EU
|-
|0004000e0017d800
|410
|更新データ Ver. 1.1.0 ダウン
タウンのガキの使いやあらへんで
|JP
|-
|0004000e0017e100
|410
|Shovel Knight Update Ver. 2.2
|US
|-
|0004000e0017ec00
|820
|MONSTER HUNTER X 更新資料 Ver. 1.2.0
|TW
|-
|0004000e0f700000
|410
|更新データ Ver. 1.1
New 3DS専用ゼノブレイド
|JP
|-
|0004000e0f700100
|410
|Xenoblade Chronicles™ 3D
Update Ver. 1.0
|US
|-
|0004000e0f700200
|410
|Xenoblade Chronicles 3D:
Update
|EU
|-
|000480044b333656
|0
|Jewel Quest 5 -
The Sleepless Star
|EU
|-
|000480044b343350
|10
|Jewel Quest 4 Heritage
|EU
|-
|000480044b354c50
|0
|Forgotten Legions
|EU
|-
|000480044b35544a
|400
|戦国Tactics
|JP
|-
|000480044b425150
|10
|Break Tactics
|EU
|-
|000480044b464a4a
|400
|マジカルファンタジスタ
|JP
|-
|000480044b464d4a
|400
|あたまごモンスターズ
|JP
|-
|000480044b465a4a
|400
|あたまご
|JP
|-
|000480044b4b5a50
|10
|Academy: Chess Puzzles
|EU
|-
|000480044b4e414a
|800
|プチコンmkII
|JP
|-
|000480044b514e45
|400
|Castle Conqueror - Revolution
|US
|-
|000480044b555650
|30
|Bloons速 TD 4
|EU
|-
|000480044b564c45
|10
|Clash of Elementalists
|US
|-
|000480044b564c50
|0
|Clash of Elementalists
|EU
|-
|000480044b584650
|410
|Color Commando
|EU
|-
|000480044b584b50
|60
|Goony
|EU
|-
|000480044b585250
|30
|Retro Pocket™
|EU
|-
|000480044b585550
|10
|Publisher Dream
|EU
|-
|000480044b594e50
|20
|Cake Ninja: XMAS
|EU
|-
|000480044b59534a
|400
|あたまIQパニック
|JP
|}

VersionList

2016-01-26T07:37:31Z

Einstein95: Names!

Used by the system menu to notify the user of updates.
{|class=wikitable
!Title ID
!Version
!Name
|-
|0004000000037500
|21
|Tom Clancy's Ghost Recon®
Shadow Wars (EU)
|-
|0004000000038b00
|410
|Resident Evil™
The Mercenaries 3D (EU)
|-
|000400000004a300
|400
|Petz Fantasy 3D (EU)
|-
|0004000000056c00
|890
|うごくメモ帳 3D (JP)
|-
|000400000005e300
|820
|熱血硬派くにおくんすぺしゃる (JP)
|-
|000400000005ee00
|10
|Resident Evil™ Revelations (EU)
|-
|0004000000066300
|400
|Mighty Switch Force! (US)
|-
|000400000006d100
|0
|Luxor (EU)
|-
|000400000006d700
|1
|Pets Resort 3D (EU)
|-
|000400000006e400
|400
|スーパーマリオブラザーズ (JP)
|-
|000400000006e500
|400
|Super Mario Bros.™ (US)
|-
|000400000006e600
|400
|Super Mario Bros.™ (EU)
|-
|000400000006ed00
|410
|メトロイド (JP)
|-
|000400000006ee00
|400
|Metroid™ (US)
|-
|000400000006ef00
|400
|Metroid™ (EU)
|-
|000400000006f000
|410
|ゼルダの伝説1 (JP)
|-
|000400000006f100
|400
|The Legend of Zelda™ (US)
|-
|000400000006f200
|400
|The Legend of Zelda™ (EU)
|-
|000400000006f600
|400
|レッキングクルー (JP)
|-
|000400000006f900
|400
|マリオオープンゴルフ (JP)
|-
|000400000006fa00
|400
|NES Open Tournament Golf™ (US)
|-
|000400000006fb00
|400
|NES Open Tournament Golf (EU)
|-
|000400000006ff00
|400
|ドンキーコングJR. (JP)
|-
|0004000000070000
|400
|Donkey Kong Jr.™ (US)
|-
|0004000000070200
|400
|バルーンファイト (JP)
|-
|0004000000070500
|800
|アイスクライマー (JP)
|-
|0004000000070800
|400
|リンクの冒険 (JP)
|-
|0004000000070900
|400
|Zelda II™ -
The Adventure of Link™ (US)
|-
|0004000000070a00
|400
|Zelda II: The Adventure of Link (EU)
|-
|0004000000071100
|400
|ヨッシーのたまご (JP)
|-
|0004000000073c00
|401
|My Foal 3D (EU)
|-
|0004000000075f00
|1
|BIT.TRIP SAGA (EU)
|-
|0004000000077500
|400
|ラブプラスTOOLS (JP)
|-
|0004000000077e00
|400
|電波人間のRPG (JP)
|-
|000400000007a300
|10
|Harvest Moon:
The Tale of Two Towns (EU)
|-
|000400000007fd00
|400
|VVVVVV (US)
|-
|0004000000081100
|420
|Colors! 3D (US)
|-
|0004000000084b00
|10
|Cats and Dogs 3D
Pets at play (EU)
|-
|0004000000086800
|0
|推拉方塊(繁體中文版) (TW)
|-
|0004000000088400
|0
|Columns™ (EU)
|-
|0004000000089200
|400
|夜の魔人といくさの国
～さまよえるヴァンピール～ (JP)
|-
|000400000008b200
|420
|Coaster Creator 3D (US)
|-
|000400000008d100
|840
|Bit Boy!! ARCADE (US)
|-
|000400000008e300
|410
|Marvel Pinball 3D (US)
|-
|000400000008fc00
|20
|Sonic & All-Stars Racing
Transformed™ (EU)
|-
|000400000008fe00
|830
|1001 Spikes (US)
|-
|0004000000090000
|410
|Johnny Kung Fu™ (US)
|-
|0004000000099700
|4070
|レコチョク (JP)
|-
|000400000009b800
|0
|Dr. Robotnik's
Mean Bean Machine™ (EU)
|-
|000400000009bb00
|0
|Shining Force™: The Sword of Hajya (EU)
|-
|000400000009d300
|10
|Riding Stables 3D (EU)
|-
|000400000009d600
|1830
|ドラゴンクエストⅩ
冒険者のおでかけ便利ツール (JP)
|-
|000400000009da00
|400
|悪魔城ドラキュラ (JP)
|-
|000400000009df00
|0
|Dig Dug (EU)
|-
|000400000009e300
|0
|Super C (EU)
|-
|000400000009e700
|10
|Crash City Mayhem (EU)
|-
|000400000009ea00
|410
|Turtle Tale (US)
|-
|00040000000a1200
|0
|Mega Man™ 4 (EU)
|-
|00040000000a1400
|0
|Mega Man™ 5 (EU)
|-
|00040000000a2f00
|420
|AiRace Speed (US)
|-
|00040000000a5400
|810
|Mutant Mudds™ (EU)
|-
|00040000000a7900
|410
|電波人間のRPG2 (JP)
|-
|00040000000a9000
|0
|Nintendo presents
New Style Boutique™ (EU)
|-
|00040000000aa800
|400
|Fractured Soul (US)
|-
|00040000000aba00
|0
|Fractured Soul (US)
|-
|00040000000ad400
|0
|ぐるっとスプラッシュ! (JP)
|-
|00040000000aec00
|0
|The Beet Party:
Jurassic Fridge (EU)
|-
|00040000000b0f00
|830
|YouTube (US)
|-
|00040000000b4700
|3020
|どこでも本屋さん (JP)
|-
|00040000000b4f00
|400
|Fallblox™ (EU)
|-
|00040000000b8f00
|400
|Gunman Clive (US)
|-
|00040000000bb100
|0
|Viking Invasion 2 -
Tower Defense (EU)
|-
|00040000000bb400
|10
|The Beet Party:
UnderWaterMelon (EU)
|-
|00040000000bba00
|0
|Sonic the Hedgehog™ (EU)
|-
|00040000000bd200
|0
|ファミコン探偵倶楽部 PARTⅡ
うしろに立つ少女(前後編) (JP)
|-
|00040000000bea00
|0
|엽기토끼 시간여행 3D (KR)
|-
|00040000000bec00
|10
|레이맨 오리진 (KR)
|-
|00040000000c1700
|410
|AiRace Speed (EU)
|-
|00040000000c2900
|420
|Shantae and the Pirate's Curse (US)
|-
|00040000000c3400
|400
|モンスターハンター3(トライ)G
データ移行プログラム (JP)
|-
|00040000000c3a00
|430
|デビルサバイバー2
ブレイクレコード (JP)
|-
|00040000000c4200
|0
|Rhythm Thief & the Emperor’s Treasure™ (KR)
|-
|00040000000c5200
|0
|Reel Fishing速 3D
Paradise Mini (EU)
|-
|00040000000c5700
|410
|Real Heroes: Firefighter 3D (US)
|-
|00040000000c6f00
|410
|MH3U Data Transfer Program (US)
|-
|00040000000c7100
|410
|Monster Hunter™ 3 Ultimate
Data Transfer Program (EU)
|-
|00040000000c7700
|410
|Real Heroes: Firefighter 3D (EU)
|-
|00040000000c7f00
|0
|톰 클랜시의 고스트 리콘 섀도우 워즈 (KR)
|-
|00040000000c8000
|0
|톰 클랜시의 스플린터 셀 3D (KR)
|-
|00040000000c8900
|0
|짜릿! 우물로 드롭 (KR)
|-
|00040000000c8a00
|0
|밀고 떨구고 (KR)
|-
|00040000000c8d00
|410
|Monster High™
Skultimate Roller Maze™ (EU)
|-
|00040000000c9e00
|840
|実写でちびロボ! (JP)
|-
|00040000000cbb00
|0
|Picdun 2: Witch's Curse (EU)
|-
|00040000000cbd00
|420
|みんなのおしゃべりチャット (JP)
|-
|00040000000cca00
|0
|悄悄互動日記 (TW)
|-
|00040000000ccd00
|820
|YouTube (EU)
|-
|00040000000cd600
|10
|Sudoku by Nikoli (KR)
|-
|00040000000cd700
|10
|Bird Mania 3D (KR)
|-
|00040000000cd800
|0
|SpeedX 3D (KR)
|-
|00040000000cef00
|410
|Swords & Soldiers 3D (EU)
|-
|00040000000cfd00
|0
|SENRAN KAGURA Burst (KR)
|-
|00040000000d0600
|430
|Swords & Soldiers 3D (US)
|-
|00040000000d1700
|0
|Air Battle Hockey 3D (EU)
|-
|00040000000d1800
|0
|Bloody Vampire (EU)
|-
|00040000000d2400
|0
|Witch & Hero (EU)
|-
|00040000000d2900
|420
|だるめしスポーツ店 (JP)
|-
|00040000000d2e00
|0
|MONSTER HUNTER 3 ULTIMATE (KR)
|-
|00040000000d2f00
|0
|Mario and Donkey Kong™:
Minis on the Move (EU)
|-
|00040000000d3000
|830
|YouTube (JP)
|-
|00040000000d4800
|0
|My Riding Stables 3D–
Jumping for the Team (EU)
|-
|00040000000d4a00
|420
|Star Wars Pinball (EU)
|-
|00040000000d7700
|0
|Jewel Master Atlantis 3D (EU)
|-
|00040000000d7b00
|410
|3D スーパーハングオン (JP)
|-
|00040000000d8c00
|0
|@SIMPLE DLシリーズ Vol.10
THE浮気彼氏Xmas中止のお知らせ (JP)
|-
|00040000000d9300
|0
|The Beet Party:
Beet Poets (EU)
|-
|00040000000d9400
|0
|The Beet Party:
Unidentified Flying Waffle (EU)
|-
|00040000000db700
|c80
|@SIMPLE DLシリーズ Vol.15
THE 麻雀 (JP)
|-
|00040000000db800
|450
|KORG M01D (JP)
|-
|00040000000de100
|10
|Lola's Math Train (EU)
|-
|00040000000e6100
|0
|Akari by Nikoli (KR)
|-
|00040000000e6800
|420
|Star Wars Pinball (US)
|-
|00040000000e8200
|0
|Groove Heaven (EU)
|-
|00040000000e9300
|410
|@SIMPLE DLシリーズ Vol.14
THE 脱出ゲーム～裏切りの密室～ (JP)
|-
|00040000000e9800
|410
|3D 獣王記 (JP)
|-
|00040000000ea800
|0
|SpeedX 3D Hyper Edition (EU)
|-
|00040000000eaf00
|0
|THE "DENPA" MEN 2:
Beyond the Waves (EU)
|-
|00040000000eb000
|1050
|ソリティ馬 (JP)
|-
|00040000000edc00
|410
|Dillon's Rolling Western
The Last Ranger (KR)
|-
|00040000000edd00
|420
|Dillon's Rolling Western (KR)
|-
|00040000000ee600
|410
|どぎめぎインリョクちゃん (JP)
|-
|00040000000ee900
|410
|3D ベア･ナックル怒りの鉄拳 (JP)
|-
|00040000000f7300
|0
|新・世界樹の迷宮ミレニアムの少女 (日文版) (TW)
|-
|00040000000fb900
|410
|3D ギャラクシーフォースⅡ (JP)
|-
|00040000000fc700
|0
|Donkey Kong Country Returns 3D
(英文版) (TW)
|-
|00040000000fc800
|1060
|honto for ニンテンドー3DS (JP)
|-
|00040000000fc900
|0
|魔女與勇者 (TW)
|-
|00040000000fd300
|0
|逆轉裁判 5 (英文版) (TW)
|-
|00040000000fe200
|10
|Talking Phrasebook -
7 Languages (US)
|-
|0004000000103500
|410
|@SIMPLE DLシリーズ Vol.21
THE 鑑識官 File.1 (JP)
|-
|0004000000103600
|410
|@SIMPLE DLシリーズ Vol.23
THE 鑑識官 File.2 (JP)
|-
|0004000000104300
|1
|マイティースイッチフォース! (JP)
|-
|0004000000105800
|10
|世界樹の迷宮Ⅳ 伝承の巨神 (日文版) (TW)
|-
|0004000000105900
|10
|Etrian Odyssey Ⅳ Legends of the Titan (英文版) (TW)
|-
|0004000000105c00
|0
|爆走老精靈 (TW)
|-
|0004000000108d00
|820
|Retro City Rampage: DX (EU)
|-
|0004000000109800
|28e0
|ニコニコ (JP)
|-
|000400000010cf00
|0
|Sonic Lost World™ (英文版) (TW)
|-
|000400000010d200
|820
|Retro City Rampage™: DX (US)
|-
|000400000010db00
|0
|邦妮早午餐 (TW)
|-
|000400000010dc00
|0
|初音未來 Project mirai 2 (日文版) (TW)
|-
|000400000010e600
|420
|遊戯王ARC-Vオフィシャル
カードゲームかんたんマスター! (JP)
|-
|0004000000111100
|820
|Grinsia (US)
|-
|0004000000112300
|420
|Cubit The Hardcore Platformer Robot (US)
|-
|0004000000115700
|0
|The Legend of Zelda:
A Link Between Worlds (英文版) (TW)
|-
|0004000000119300
|0
|Mario Party: Island Tour (英文版) (TW)
|-
|0004000000119a00
|1040
|Shovel Knight (US)
|-
|0004000000120100
|420
|3D ファンタジーゾーン
オパオパブラザーズ (JP)
|-
|0004000000121d00
|820
|3D ファンタジーゾーンⅡダブル (JP)
|-
|0004000000123200
|0
|Kirby: Triple Deluxe (英文版) (TW)
|-
|0004000000124000
|410
|The Keep (US)
|-
|0004000000124300
|410
|Cubit The Hardcore
Platformer Robot (EU)
|-
|0004000000124a00
|c50
|リアル脱出ゲーム×ニンテンドー
3DS 超破壊計画からの脱出 (JP)
|-
|0004000000127600
|401
|Alien On The Run (US)
|-
|0004000000128900
|410
|3D アウトラン (JP)
|-
|0004000000129600
|410
|AiRace Xeno (EU)
|-
|0004000000129f00
|440
|KORG DSN-12 (JP)
|-
|000400000012bf00
|410
|AiRace Xeno (US)
|-
|000400000012cb00
|820
|Shovel Knight (EU)
|-
|000400000012d000
|820
|Bit Boy!! ARCADE (EU)
|-
|000400000012e700
|430
|Moon Chronicles™ (US)
|-
|0004000000130300
|c40
|拡散性ミリオンアーサー (JP)
|-
|0004000000132900
|0
|逆轉裁判123 / Phoenix Wright:
Ace Attorney Trilogy(日英版) (TW)
|-
|0004000000134600
|410
|バッジとれ～るセンター (JP)
|-
|0004000000136a00
|0
|鐵道日本！長良川鐵道出發篇
(繁體中文版) (TW)
|-
|0004000000138900
|410
|Proun+ (EU)
|-
|0004000000139c00
|c70
|みんなでまもって騎士
姫のトキメキらぷそでぃ (JP)
|-
|000400000013d000
|820
|ドラゴンボールヒーローズ UM2
ゲームデータ引継ぎアプリ (JP)
|-
|000400000013d100
|1470
|ドラゴンクエストⅩ オンライン (JP)
|-
|000400000013ea00
|420
|Comic Workshop (US)
|-
|000400000013ee00
|430
|Woah Dave! (US)
|-
|000400000013f900
|420
|Glory of Generals (US)
|-
|0004000000140f00
|2cc0
|ドラゴンクエストⅩ
冒険者のおでかけ超便利ツール (JP)
|-
|0004000000141000
|830
|ポケとる (JP)
|-
|0004000000141a00
|0
|MONSTER HUNTER 4G(日文版) (TW)
|-
|0004000000141f00
|10
|Fossil Fighters™: Frontier(英文版) (TW)
|-
|0004000000143c00
|440
|Painting Workshop (US)
|-
|0004000000144d00
|c30
|Oh!ガッチマンデンゲキ
BAZOOKA!! スペシャルゲーム (JP)
|-
|0004000000146f00
|410
|マイティガンヴォルト (JP)
|-
|0004000000147d00
|0
|Dedede's Drum Dash Deluxe(英文版) (TW)
|-
|0004000000148100
|0
|Kirby Fighters Deluxe™(英文版) (TW)
|-
|0004000000148400
|810
|Comic Workshop (EU)
|-
|0004000000148c00
|10
|Hatsune Miku: Project Mirai DX (US)
|-
|0004000000148f00
|410
|Proun+ (US)
|-
|0004000000149700
|810
|Painting Workshop (EU)
|-
|000400000014b000
|410
|ブレイブリーセカンド
無料で遊べる三銃士編 (JP)
|-
|000400000014c900
|820
|Battleminer (US)
|-
|0004000000150d00
|420
|Bloo Kid 2 (US)
|-
|0004000000151100
|410
|Cube Creator 3D (US)
|-
|0004000000151f00
|0
|Pokémon Art Academy(英文版) (TW)
|-
|0004000000152e00
|10
|カンフーラビット (JP)
|-
|000400000015a600
|0
|魔神少女 -Chronicle 2D ACT-(繁體中文版) (TW)
|-
|000400000015b100
|820
|IronFall: Invasion (EU)
|-
|000400000015d100
|0
|Fairune(繁體中文版) (TW)
|-
|000400000015d800
|820
|IRONFALL Invasion (US)
|-
|0004000000162200
|1890
|イジン爆闘!!ウデジマン (JP)
|-
|0004000000164600
|410
|みんなのポケモンスクランブル (JP)
|-
|0004000000166400
|10
|Toy Stunt Bike(日文版) (TW)
|-
|0004000000169000
|0
|PAZURU(日文版) (TW)
|-
|000400000016d100
|0
|Puzzle & Dragons Z + Puzzle & Dragons Super Mario Bros. Edition(英文版) (TW)
|-
|000400000016d200
|0
|Puzzle & Dragons Z + Super Mario Bros. Edition 特別試玩版 (TW)
|-
|0004000000175d00
|10
|PROJECT X ZONE 2：BRAVE NEW WORLD(日文版) (TW)
|-
|0004000000177d00
|410
|アルファディア (JP)
|-
|0004000000179100
|0
|Goonyan(日文版) (TW)
|-
|000400000017a900
|10
|Johnny's Payday Panic(英日版) (TW)
|-
|000400000017b800
|0
|ファイアーエムブレムif (日文版) (TW)
|-
|000400000017bf00
|0
|IRONFALL -Invasion- (日文版) (TW)
|-
|000400000017d200
|410
|超科学脱出ギア･ディテクティブ (JP)
|-
|000400000017da00
|0
|패밀리 루어피싱 3D (KR)
|-
|000400000017ec00
|0
|MONSTER HUNTER® X (日文版) (TW)
|-
|0004000000182c00
|0
|ゼルダの伝說　
トライフォース３銃士 (日文版) (TW)
|-
|0004000000185c00
|0
|The Legend of Zelda™ : Majora's Mask 3D(英文版) (TW)
|-
|000400000f700800
|c30
|The Binding of Isaac: Rebirth (US)
|-
|000400000f700900
|840
|The Binding of Isaac: Rebirth (EU)
|-
|000400020008c401
|820
|The Binding of Isaac: Rebirth (EU)
|-
|00040002000b8b01
|410
|The Binding of Isaac: Rebirth (EU)
|-
|00040002000edf01
|420
|The Binding of Isaac: Rebirth (EU)
|-
|00040002000ee001
|410
|The Binding of Isaac: Rebirth (EU)
|-
|0004000200132501
|420
|The Binding of Isaac: Rebirth (EU)
|-
|0004000200136a01
|0
|The Binding of Isaac: Rebirth (EU)
|-
|0004000200175d01
|0
|The Binding of Isaac: Rebirth (EU)
|-
|000400020017a901
|10
|The Binding of Isaac: Rebirth (EU)
|-
|0004000e00030600
|410
|更新データ Ver. 1.1
マリオカート7 (JP)
|-
|0004000e00030700
|410
|Mario Kart 7
Update data (EU)
|-
|0004000e00030800
|410
|Mario Kart™ 7
Update Ver. 1.1 (US)
|-
|0004000e00032100
|800
|更新データ Ver. 1.2
NEWラブプラス (JP)
|-
|0004000e00036f00
|400
|更新データ Ver. 1.1
花といきもの立体図鑑 (JP)
|-
|0004000e00039a00
|400
|更新データ Ver. 1.1
カルドセプト® (JP)
|-
|0004000e00043700
|400
|更新データ Ver. 1.1 ものすごく脳を鍛える5分間の鬼トレーニング (JP)
|-
|0004000e0004b500
|430
|更新データ Ver. 1.1
モンスターハンター4 (JP)
|-
|0004000e0004b700
|400
|更新データ Ver. 1.1
G1グランプリ (JP)
|-
|0004000e0004ee00
|400
|更新データ Ver. 1.1
KINGDOM HEARTS 3D (JP)
|-
|0004000e00053600
|800
|更新データ Ver. 1.1
ペンギンの問題ザ･ウォ―ズ (JP)
|-
|0004000e00055d00
|1470
|更新データ Ver. 1.5
ポケットモンスター X (JP)
|-
|0004000e00055e00
|1460
|更新データ Ver. 1.5
ポケットモンスター Y (JP)
|-
|0004000e0005d100
|c10
|更新データ Ver. 1.2
GIRLS MODE よくばり宣言! (JP)
|-
|0004000e0005e900
|410
|更新データ Ver.1.1
BRAVELY DEFAULT FF (JP)
|-
|0004000e00060600
|420
|更新データ Ver. 1.1
マリオ&ルイージRPG4 (JP)
|-
|0004000e00065000
|410
|Secret Mysteries in London -
Update (EU)
|-
|0004000e0006cf00
|830
|Jewel Quest
The Sapphire Dragon - Update (EU)
|-
|0004000e0006d200
|2000
|更新データ Ver. 1.7
ファンタジーライフ (JP)
|-
|0004000e00072a00
|410
|更新データ Ver. 1.1
真･三國無双 VS (JP)
|-
|0004000e00074500
|820
|更新データ Ver. 1.1
探偵神宮寺三郎復讐の輪舞 (JP)
|-
|0004000e00074600
|400
|更新データ Ver. 1.1 DQM
テリーのワンダーランド3D (JP)
|-
|0004000e00078500
|c00
|更新データ Ver. 1.2
ダンボール戦機爆ブースト (JP)
|-
|0004000e00078b00
|400
|更新データ Ver. 1.1
レイトン教授VS逆転裁判 (JP)
|-
|0004000e0007a000
|400
|更新データ Ver. 1.1 METAL
GEAR SOLID SNAKE EATER 3D (JP)
|-
|0004000e00081e00
|410
|METAL GEAR SOLID SNAKE
EATER 3D Update Ver. 1.1 (US)
|-
|0004000e00084d00
|430
|AeternoBlade
Update (EU)
|-
|0004000e00086200
|840
|更新データ Ver. 1.1
とびだせどうぶつの森 (JP)
|-
|0004000e00086500
|820
|업데이트 데이터 Ver. 1.1
튀어나와요 동물의 숲 (KR)
|-
|0004000e0008c300
|410
|Tomodachi Life™ Update
Ver. 1.1 (US)
|-
|0004000e0008c400
|c40
|Tomodachi Life™: Update (EU)
|-
|0004000e0008c500
|c50
|更新データ Ver. 1.2
トモダチコレクション新生活 (JP)
|-
|0004000e00091000
|440
|更新データ Ver. 1.1
デビルサマナーソウルハッカーズ (JP)
|-
|0004000e00091400
|410
|Real Heroes: Firefighter 3D - Update (EU)
|-
|0004000e00095c00
|430
|更新データ Ver. 1.1
ディズニーマジックキャッスル (JP)
|-
|0004000e0009c000
|410
|Shin Megami Tensei: Devil
Survivor Overclocked Patch (EU)
|-
|0004000e0009ef00
|430
|更新データ Ver. 1.1
メダロットDUAL カブトVer. (JP)
|-
|0004000e0009f000
|430
|更新データ Ver. 1.1
メダロットDUAL クワガタVer. (JP)
|-
|0004000e0009fe00
|440
|更新データ Ver. 1.1
もっと気軽に!お絵描き工房プラス (JP)
|-
|0004000e000a0b00
|14a0
|更新データ Ver. 2.1
大合奏!バンドブラザーズP (JP)
|-
|0004000e000a1b00
|1020
|更新データ Ver. 1.3
イナズマイレブンGO2 ネップウ (JP)
|-
|0004000e000a1c00
|1020
|更新データ Ver. 1.3
イナズマイレブンGO2 ライメイ (JP)
|-
|0004000e000a4d00
|400
|更新データ Ver. 1.1
戦国無双 Chronicle 2nd (JP)
|-
|0004000e000a9000
|400
|New Style Boutique™
Update (EU)
|-
|0004000e000a9100
|400
|Style Savvy: Trendsetters
Update Ver. 1.1 (US)
|-
|0004000e000a9800
|400
|更新データ Ver. 1.1 モデル☆
おしゃれオーディションプラチナ (JP)
|-
|0004000e000aa700
|420
|更新データ Ver. 1.1
カセキホリダームゲンギア (JP)
|-
|0004000e000ac700
|c50
|更新データ Ver. 1.2
カードファイト!! ヴァンガード (JP)
|-
|0004000e000ada00
|820
|更新データ Ver. 1.1
ピカピカナース物語2 (JP)
|-
|0004000e000af700
|410
|LEGO® Legends of CHIMA:
Laval's Journey Update (EU)
|-
|0004000e000afb00
|410
|更新データ Ver. 1.1
チャリ走DX (JP)
|-
|0004000e000afc00
|410
|更新データ Ver. 1.1 デジモンワールド Re:Digitize Decode (JP)
|-
|0004000e000afd00
|420
|更新データ Ver. 1.1
メタルマックス4 月光のディーヴァ (JP)
|-
|0004000e000b1700
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 1: Update (EU)
|-
|0004000e000b1800
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 2: Update (EU)
|-
|0004000e000b1900
|410
|Phonics Fun with Biff,
Chip & Kipper vol. 3: Update (EU)
|-
|0004000e000b4a00
|420
|更新データ Ver. 1.1
とんがりボウシと魔法の町 (JP)
|-
|0004000e000b6d00
|410
|更新データ Ver. 1.1
燐光のランツェ (JP)
|-
|0004000e000b8b00
|5160
|更新データ Ver. 1.1.3 大乱闘
スマッシュブラザーズ for 3DS (JP)
|-
|0004000e000b9900
|410
|Real Heroes: Firefighter 3D - Update (EU)
|-
|0004000e000bb800
|440
|更新データ Ver. 1.1 イナズマ
イレブン1･2･3!! 円堂守伝説 (JP)
|-
|0004000e000c0100
|420
|更新データ Ver. 2.0
マギはじまりの迷宮 (JP)
|-
|0004000e000c1c00
|410
|更新データ Ver. 1.1 オシャレで
かわいい子犬と遊ぼ!-海編- (JP)
|-
|0004000e000c2900
|840
|Shantae and the Pirate's Curse
Update Ver. 02.02 (US)
|-
|0004000e000c3600
|830
|更新データ Ver. 1.2 ペルソナQ
シャドウオブザラビリンス (JP)
|-
|0004000e000c3a00
|840
|更新データ Ver. 1.1
デビルサバイバー2 ブレイクレコード (JP)
|-
|0004000e000c9b00
|c50
|更新データ Ver. 1.2
ポケモンバンク (JP)
|-
|0004000e000cb700
|420
|更新データ Ver. 1.1 ニンテンドー
3DSガイドルーヴル美術館 (JP)
|-
|0004000e000cb900
|430
|Nintendo 3DS™ Guide: Louvre
(English Version) Update (US)
|-
|0004000e000cba00
|420
|업데이트 데이터 Ver. 1.1
닌텐도 3DS 가이드 루브르 박물관 (KR)
|-
|0004000e000cbd00
|1090
|更新データ Ver. 1.4
みんなのおしゃべりチャット (JP)
|-
|0004000e000cc400
|430
|更新データ Ver. 1.1
初音ミク Project mirai 2 (JP)
|-
|0004000e000cd300
|410
|AeternoBlade Update Ver. 1.0 (US)
|-
|0004000e000cf300
|420
|更新データ Ver. 1.1
カスタムモンスターズ (JP)
|-
|0004000e000cf400
|850
|更新データ Ver. 1.2
妖怪ウォッチ (JP)
|-
|0004000e000cf500
|420
|更新データ Ver. 1.1 DQM2
イルとルカの不思議なふしぎな鍵 (JP)
|-
|0004000e000cf600
|430
|更新データ Ver. 1.1
CONCEPTIONⅡ (JP)
|-
|0004000e000cf900
|420
|更新データ Ver. 1.1
ポケモンアートアカデミー (JP)
|-
|0004000e000d0900
|420
|Pokémon™ Art Academy™:
Update (EU)
|-
|0004000e000d5600
|430
|Nintendo 3DS™ Guide: Louvre
(French Version) Update (US)
|-
|0004000e000d5700
|430
|Nintendo 3DS™ Guide: Louvre
(German Version) Update (EU)
|-
|0004000e000d5800
|430
|Nintendo 3DS™ Guide: Louvre
(Italian Version) Update (EU)
|-
|0004000e000d5900
|430
|Nintendo 3DS™ Guide: Louvre
(Spanish Version) Update (US)
|-
|0004000e000d5a00
|410
|Mario & Luigi™: Dream Team
Update (US)
|-
|0004000e000d6e00
|410
|更新データ Ver. 1.1
ゼルダの伝説ムジュラの仮面 3D (JP)
|-
|0004000e000d7c00
|1450
|更新データ Ver. 4.1
STEELDIVER SUBWARS (JP)
|-
|0004000e000d7d00
|1450
|Steel Diver™: Sub Wars
Update Ver. 4.1 (US)
|-
|0004000e000d7e00
|1450
|Steel Diver™: Sub Wars:
Update (EU)
|-
|0004000e000d8e00
|840
|更新データ Ver. 1.2 ほっぺちゃん
つくって!あそんで!ぷにぷにタウン! (JP)
|-
|0004000e000d8f00
|830
|更新データ Ver. 1.1 まめゴマ
はっぴー!スイーツファーム (JP)
|-
|0004000e000d9000
|410
|Mario & Luigi™:
Dream Team Bros. Update (EU)
|-
|0004000e000db600
|410
|更新データ Ver. 1.1
BRAVELY DEFAULT FtS (JP)
|-
|0004000e000dbd00
|14b0
|更新データ Ver. 1.3
SIMPLEシリーズ Vol.1 THE 麻雀 (JP)
|-
|0004000e000dc700
|430
|更新データ Ver. 1.1
熱血硬派くにおくんSP 乱闘協奏曲 (JP)
|-
|0004000e000dc800
|830
|更新データ Ver. 1.0.2
ブレイブリーセカンド (JP)
|-
|0004000e000dca00
|430
|更新データ Ver. 1.1
ダンボール戦機W 超カスタム (JP)
|-
|0004000e000dd900
|410
|Hakuoki: Memories of the
Shinsengumi Update (US)
|-
|0004000e000df800
|c70
|更新データ Ver. 1.2
進撃の巨人～人類最後の翼～ (JP)
|-
|0004000e000e9a00
|830
|更新データ Ver. 1.2
TFF CURTAIN CALL (JP)
|-
|0004000e000e9c00
|1490
|更新データ Ver. 1.7
ファンタジーライフ LINK! (JP)
|-
|0004000e000ea900
|430
|Disney Magical World
Update Ver. 1.1 (US)
|-
|0004000e000eb800
|820
|更新データ Ver. 1.2
ホームタウンストーリー (JP)
|-
|0004000e000ecd00
|410
|Adventure Timeâ˘: ETDBIDK
Update 1 (US)
|-
|0004000e000edf00
|5130
|Super Smash Bros.™
Update Ver. 1.1.3 (US)
|-
|0004000e000ee000
|5130
|Super Smash Bros.™
for Nintendo 3DS: Update (EU)
|-
|0004000e000ef000
|1070
|更新データ Ver. 1.4
電波人間のRPG3 (JP)
|-
|0004000e000f1f00
|860
|更新データ Ver. 1.2 ポケモン
トレッタラボメインシステム (JP)
|-
|0004000e000f3f00
|420
|更新データ Ver. 2.0.0
ポポロクロイス牧場物語 (JP)
|-
|0004000e000f4000
|840
|更新データ Ver. 1.2
ダンボール戦機ウォーズ (JP)
|-
|0004000e000f4200
|840
|更新データ Ver. 1.2
アイカツ! 2人のmy princess (JP)
|-
|0004000e000f4f00
|450
|更新データ Ver. 1.1
喧嘩番長6～ソウル&ブラッド～ (JP)
|-
|0004000e000f5800
|820
|更新データ Ver. 1.2 ワンピース
アンリミテッドワールド R (JP)
|-
|0004000e000f7200
|420
|更新データ Ver. 1.1
ナナミ English上達のコツ (JP)
|-
|0004000e000f9700
|420
|更新データ Ver. 1.1
王だぁランド! (JP)
|-
|0004000e000f9b00
|1080
|更新データ Ver. 1.4
ダービースタリオンGOLD (JP)
|-
|0004000e000fb000
|430
|更新データ Ver. 1.1
文字パズルことだまーる★ (JP)
|-
|0004000e000fb100
|c90
|更新データ Ver. 1.3
閃乱カグラ2 -真紅- (JP)
|-
|0004000e000fb300
|420
|更新データ Ver. 1.1
トリコアルティメットサバイバル (JP)
|-
|0004000e000fb400
|430
|更新データ Ver. 1.1 モデション
ドリームガール (JP)
|-
|0004000e000fc100
|420
|I am an Air Traffic Controller
Airport Hero Hawaii Update (US)
|-
|0004000e000fce00
|410
|Hakuoki
Update (EU)
|-
|0004000e00100900
|410
|更新資料 Ver. 1.1
MONSTER HUNTER 4 (TW)
|-
|0004000e00101200
|420
|更新データ Ver. 1.1 ぷよぷよテトリス (JP)
|-
|0004000e00101300
|410
|更新データ Ver. 1.1
ヒーローバンク (JP)
|-
|0004000e00102000
|410
|The LEGO Movie Videogame
Software Update (EU)
|-
|0004000e00102100
|410
|The LEGO Movie Videogame
Software Update (EU)
|-
|0004000e00102200
|410
|The LEGO Movie Videogame
Software Update (EU)
|-
|0004000e00102600
|410
|Adventure Timeâ˘:
ETDBIDK Update (EU)
|-
|0004000e00102f00
|850
|更新データ Ver. 1.2.0 太鼓の
達人どんとかつの時空大冒険 (JP)
|-
|0004000e00103200
|c30
|更新データ Ver. 1.2
わんニャンペットショップ (JP)
|-
|0004000e00103900
|420
|更新データ Ver.1.1 @SIMPLE DL
Vol.20 THE カード (JP)
|-
|0004000e00103e00
|410
|更新データ Ver. 1.1.0 @SIMPLE
DL Vol.27 THE イラストパズル (JP)
|-
|0004000e00104800
|420
|更新データ Ver. 1.1
メタルファイトベイブレード (JP)
|-
|0004000e00104900
|830
|更新データ Ver. 1.2
VitaminZ Revolution (JP)
|-
|0004000e00104a00
|420
|更新データ Ver.1.1ジュエルペット
カフェで魔法のクッキング! (JP)
|-
|0004000e00104c00
|420
|更新データ Ver. 1.1 こびとづかん　
こびとの不思議実験セット (JP)
|-
|0004000e00105000
|410
|업데이트 데이터 Ver. 1.1
몬스터헌터 4 (KR)
|-
|0004000e00105100
|430
|更新データ Ver. 1.1
VitaminX Evolution Plus (JP)
|-
|0004000e00106700
|410
|更新データ Ver. 1.1
キャラペット (JP)
|-
|0004000e00108100
|430
|更新データ Ver. 1.1
アロー･オブ･ラピュタ (JP)
|-
|0004000e0010af00
|420
|Shantae and the
Pirate's Curse - Update (EU)
|-
|0004000e0010ba00
|420
|更新データ Ver. 1.1 イナズマ
イレブンGO ビッグバン (JP)
|-
|0004000e0010bb00
|420
|更新データ Ver. 1.1 イナズマ
イレブンGO スーパーノヴァ (JP)
|-
|0004000e0010bc00
|440
|更新データ Ver. 2.0.0
牧場物語つながる新天地 (JP)
|-
|0004000e0010e200
|830
|更新データ Ver. 1.2
FINAL FANTASY EXPLORERS (JP)
|-
|0004000e0010f600
|410
|Harvest Moon®: The Lost
Valley Update Ver. 1.01 (US)
|-
|0004000e00111e00
|830
|更新データ Ver. 1.2
チャリ走 DX2 ギャラクシー (JP)
|-
|0004000e00113300
|450
|更新データ Ver. 1.1
メダロット8 カブトVer. (JP)
|-
|0004000e00113400
|450
|更新データ Ver. 1.1
メダロット8 クワガタVer. (JP)
|-
|0004000e00114700
|840
|更新データ Ver. 1.2
コミック工房 (JP)
|-
|0004000e00114900
|430
|更新データ Ver. 1.1
異史戦国伝宿業 (JP)
|-
|0004000e00114b00
|410
|更新データ Ver. 1.1
タイムアベンジャー (JP)
|-
|0004000e00117200
|1480
|更新データ Ver. 3.2.1
プチコン3号 SmileBASIC (JP)
|-
|0004000e00118100
|430
|更新データ Ver. 1.1
名探偵コナンファントム狂詩曲 (JP)
|-
|0004000e00118500
|420
|更新データ Ver. 1.1
漢検トレーニング (JP)
|-
|0004000e00119a00
|820
|Shovel Knight Update Ver. 1.1 (US)
|-
|0004000e0011b200
|830
|更新データ Ver. 1.2
大人VSグレコ漢字完全フルセット (JP)
|-
|0004000e0011b300
|420
|更新データ Ver. 1.1
大人VSグレコ漢字激ムズ編 (JP)
|-
|0004000e0011b400
|420
|更新データ Ver. 1.1
大人VSグレコ漢字ちょいムズ編 (JP)
|-
|0004000e0011c200
|410
|LEGO® Batman™ 3:
BEYOND GOTHAM - Update (EU)
|-
|0004000e0011c400
|1c70
|更新データ Ver. 1.4 ポケット
モンスターオメガルビー (JP)
|-
|0004000e0011c500
|1c70
|更新データ Ver. 1.4 ポケット
モンスターアルファサファイア (JP)
|-
|0004000e0011d700
|1040
|更新データ Ver. 1.2
モンスターハンター4G (JP)
|-
|0004000e0011dd00
|410
|LEGO® Batman™ 3:
Beyond Gotham Update (US)
|-
|0004000e00120000
|420
|更新データ Ver. 1.1
ナナミ English日常会話 (JP)
|-
|0004000e00120500
|820
|更新データ Ver. 1.2 新･世界樹
の迷宮2 ファフニールの騎士 (JP)
|-
|0004000e00120600
|1880
|更新データ Ver. 1.6
ドラゴンボールヒーローズ UM2 (JP)
|-
|0004000e00120700
|420
|更新データ Ver. 1.1 カード
ファイト!! ヴァンガード LOV (JP)
|-
|0004000e00120800
|410
|更新データ Ver. 1.1
IslandDays (JP)
|-
|0004000e00120900
|420
|更新データ Ver. 2.0.0 禁忌のマグナ (JP)
|-
|0004000e00121b00
|430
|更新データ Ver. 1.1 マル合格!
ITパスポート試験平成26年度版 (JP)
|-
|0004000e00125500
|410
|The Legend of Zelda™:
Majora’s Mask 3D Update Ver. 1.1 (US)
|-
|0004000e00125600
|410
|The Legend of Zelda™:
Majora's Mask 3D: Update (EU)
|-
|0004000e00125d00
|24c0
|更新データ Ver. 1.9
電波人間のRPG FREE! (JP)
|-
|0004000e00126100
|410
|Monster Hunter™ 4 Ultimate:
Update (EU)
|-
|0004000e00126300
|430
|Monster Hunter™ 4 Ultimate
Update Ver. 1.1 (US)
|-
|0004000e00127a00
|410
|更新データ Ver. 1.1
ぼく管関空 SKY STORY (JP)
|-
|0004000e00129d00
|440
|更新データ Ver. 1.1
不思議の国の冒険酒場 (JP)
|-
|0004000e0012a700
|820
|更新データ Ver. 1.2
蒼き雷霆ガンヴォルト (JP)
|-
|0004000e0012a800
|c50
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!! (JP)
|-
|0004000e0012a900
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!! (JP)
|-
|0004000e0012aa00
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!! (JP)
|-
|0004000e0012ab00
|410
|更新データ Ver. 1.2 ほっぺちゃん
ワクワクほっぺランド!! (JP)
|-
|0004000e0012b700
|410
|更新データ Ver. 1.0.3 ぐんまの
やぼう for ニンテンドー3DS (JP)
|-
|0004000e0012be00
|410
|Harvest Moon®:
The Lost Valley: Update (EU)
|-
|0004000e0012c800
|410
|Mario vs. Donkey Kong™:
Tipping Stars Ver. 1.0.1 (US)
|-
|0004000e0012c900
|410
|更新データ Ver. 1.0.1
マリオvs.ドンキーコング (JP)
|-
|0004000e0012ca00
|410
|Mario vs. Donkey Kong™
Tipping Stars: Update (EU)
|-
|0004000e0012d800
|c30
|更新データ Ver. 1.2.0
GIRLS MODE 3 キラキラ☆コーデ (JP)
|-
|0004000e0012dc00
|410
|【白夜王国】
更新データファイアーエムブレムif (JP)
|-
|0004000e0012dd00
|410
|【暗夜王国】
更新データファイアーエムブレムif (JP)
|-
|0004000e0012de00
|420
|【スペシャルエディション】
更新データファイアーエムブレムif (JP)
|-
|0004000e0012f500
|410
|更新データ Ver. 1.1 テイルズオブ
ザワールドレーヴユナイティア (JP)
|-
|0004000e0012f800
|2050
|更新データ Ver. 2.1
妖怪ウォッチ2 本家 (JP)
|-
|0004000e0012f900
|2050
|更新データ Ver. 2.1
妖怪ウォッチ2 元祖 (JP)
|-
|0004000e0012fa00
|c60
|更新データ Ver. 1.2
ドーリィ♪カノン (JP)
|-
|0004000e00130300
|20a0
|更新データ Ver. 2.3.0
拡散性ミリオンアーサー (JP)
|-
|0004000e00132500
|820
|更新データ Ver. 1.2.0
Code Name: S.T.E.A.M. (JP)
|-
|0004000e00132c00
|410
|Siesta Fiesta - Update (EU)
|-
|0004000e00134300
|410
|更新データ Ver. 1.1.0
ロストヒーローズ2 (JP)
|-
|0004000e00134500
|430
|更新データ Ver. 1.1
進撃の巨人～人類最後の翼～CHAIN (JP)
|-
|0004000e00134600
|1040
|更新データ Ver. 1.3.0
バッジとれ～るセンター (JP)
|-
|0004000e00137700
|430
|Puzzle & Dragons Z +
Super Mario Bros. Edition 2.0 (US)
|-
|0004000e00137800
|420
|Puzzle & Dragons Z (EU)
|-
|0004000e00139300
|410
|Siesta Fiesta
Update Ver. 1.0 (US)
|-
|0004000e00139a00
|440
|更新データ Ver. 1.1.0
コロロケの森ぽいっと (JP)
|-
|0004000e0013fe00
|420
|更新データ Ver. 1.0.2
王国の道具屋さん (JP)
|-
|0004000e00140100
|410
|更新データ Ver. 1.0.2
王国の道具屋さん (JP)
|-
|0004000e00140b00
|420
|更新データ Ver. 1.1
テラフォーマーズ紅き惑星の激闘 (JP)
|-
|0004000e00141a00
|410
|MONSTER HUNTER 4G 更新資料 ver.1.1 (TW)
|-
|0004000e00141d00
|830
|更新データ Ver. 1.2 大合奏!
バンドブラザーズP デビュー (JP)
|-
|0004000e00144300
|410
|更新データ Ver. 1.1.0
ヒーローバンク2 (JP)
|-
|0004000e00144400
|18a0
|更新データ Ver. 1.5
ワンピース超グランドバトル!X (JP)
|-
|0004000e00144600
|410
|更新データ Ver. 1.1
弱虫ペダル明日への高回転 (JP)
|-
|0004000e00145300
|410
|更新データ Ver. 1.1
魔神少女 -Chronicle 2D ACT- (JP)
|-
|0004000e00145500
|420
|更新データ Ver. 1.1.0
役満鳳凰 (JP)
|-
|0004000e00146c00
|410
|更新データ Ver. 1.1.0 ロスト
ヒーローズ2 PREMIUM EDITION (JP)
|-
|0004000e00147800
|410
|更新データ Ver. 1.1.0 ブレイ
ブリーデフォルト無料で遊べる版 (JP)
|-
|0004000e0014a900
|420
|更新データ Ver. 1.1 そろばん･
あんざん･フラッシュ暗算完全版 (JP)
|-
|0004000e0014ab00
|420
|更新データ Ver. 1.1 まほコレ
～魔法☆あいどるコレクション～ (JP)
|-
|0004000e0014ac00
|c40
|更新データ Ver. 1.3 フューチャー
カードバディファイト (JP)
|-
|0004000e0014ad00
|410
|大逆転裁判更新データ Ver. 1.1.0 (JP)
|-
|0004000e0014ba00
|1040
|更新データ Ver. 1.1.1
ピンチ50連発!! (JP)
|-
|0004000e0014c800
|410
|Azure Striker GUNVOLT
Update Ver. 1.2 (US)
|-
|0004000e0014dd00
|410
|LEGO® Ninjago™: Shadow
of Ronin - Update (EU)
|-
|0004000e0014df00
|1080
|更新データ Ver. 1.0.4
戦国無双 Chronicle 3 (JP)
|-
|0004000e0014e000
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ (JP)
|-
|0004000e0014e700
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ (JP)
|-
|0004000e0014e800
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ (JP)
|-
|0004000e0014e900
|410
|更新データ Ver. 1.1
アイカツ!365日のアイドルデイズ (JP)
|-
|0004000e0014eb00
|410
|LEGO® Ninjago™: Shadow
of Ronin™ Update Ver. 2.0 (US)
|-
|0004000e0014f000
|410
|更新データ Ver. 2.0 どうぶつの森
ハッピーホームデザイナー (JP)
|-
|0004000e0014f100
|410
|Animal Crossing™: Happy Home
Designer Update Ver. 2.0 (US)
|-
|0004000e0014f200
|410
|AC: Happy Home Designer:
Update (EU)
|-
|0004000e0014fb00
|820
|更新データ Ver. 1.2
PROJECT X ZONE 2 (JP)
|-
|0004000e0014fc00
|820
|更新データ Ver. 1.2
PROJECT X ZONE 2 OGSE (JP)
|-
|0004000e00150100
|1870
|更新データ Ver. 1.5
チャリ走 DX3 タイムライダー (JP)
|-
|0004000e00152900
|420
|更新データ Ver. 1.1
暗殺教室殺せんせー大包囲網!! (JP)
|-
|0004000e00152a00
|c30
|更新データ Ver. 1.2 すみっコ
ぐらしここがおちつくんです (JP)
|-
|0004000e00155000
|860
|更新データ Ver. 1.2
ディズニーマジックキャッスル2 (JP)
|-
|0004000e00155100
|c40
|更新データ Ver. 1.2
妖怪ウォッチ2 真打 (JP)
|-
|0004000e00155400
|850
|更新データ Ver. 1.2.0
モンスターハンタークロス (JP)
|-
|0004000e00155800
|801
|更新データ Ver. 1.2.0
モンスターハンタークロス (JP)
|-
|0004000e00156100
|830
|更新データ Ver. 1.2
マーセナリーズサーガ2 (JP)
|-
|0004000e00157700
|410
|更新データ Ver. 1.1
マル合格! FP3級平成26-27年度版 (JP)
|-
|0004000e00157900
|820
|更新データ Ver. 2.1.0
エースコンバット 3D クロスランブル + (JP)
|-
|0004000e00158600
|410
|Titan Attacks! Update Ver. 1.1 (US)
|-
|0004000e00159000
|410
|Titan Attacks! - Update (EU)
|-
|0004000e00159500
|410
|Shin Megami Tensei: Devil
Survivor 2 Update Ver. 1.1 (US)
|-
|0004000e0015a200
|410
|OlliOlli - Update (EU)
|-
|0004000e0015a300
|820
|ACE COMBAT™ ASSAULT
HORIZON LEGACY + - Update (EU)
|-
|0004000e0015a400
|410
|OlliOlli Update Ver. 1.1.0 (US)
|-
|0004000e0015a800
|440
|更新データ Ver. 2.0
6×1≠UNLIMITED? (JP)
|-
|0004000e0015bd00
|830
|업데이트 데이터 Ver. 1.2
Azure Striker GUNVOLT (KR)
|-
|0004000e0015c000
|820
|ACE COMBAT ASSAULT
HORIZON LEGACY+ Update (US)
|-
|0004000e0015cb00
|430
|更新データ Ver. 1.0.1 新･
ロロナのアトリエはじまりの物語 (JP)
|-
|0004000e0015dc00
|410
|更新データ Ver. 1.1
エクスケーブ～運命の夢幻塔編～ (JP)
|-
|0004000e0015e300
|430
|更新データ Ver. 1.0.1
ドラえもんのび太の宇宙英雄記 (JP)
|-
|0004000e0015e700
|420
|更新データVer.1.1 ラングリッサー
リインカーネーション -転生- (JP)
|-
|0004000e0015e800
|410
|更新データ Ver. 1.1.0　
プリパラ&プリティーリズム 1450! (JP)
|-
|0004000e00160200
|410
|Goosebumps: The Game
Update Ver. 1.01 (US)
|-
|0004000e00160800
|1060
|更新データ Ver. 1.4
コミック工房2 (JP)
|-
|0004000e00162300
|440
|更新データ Ver. 2.0 パズドラ
SUPER MARIO BROS. EDITION (JP)
|-
|0004000e00163c00
|c60
|更新データ Ver. 1.2.0
ドラゴンボールZ 超究極武闘伝 (JP)
|-
|0004000e00166f00
|820
|Comic Workshop 2: Update (EU)
|-
|0004000e00167700
|410
|YO-KAI WATCH™ Update
Ver. 1.1 (US)
|-
|0004000e00167c00
|5060
|업데이트 데이터 Ver. 1.1.3
슈퍼 스매시브라더스
for 닌텐도 3DS (KR)
|-
|0004000e00167f00
|820
|Comic Workshop 2
Update Ver. 1.2 (US)
|-
|0004000e00168600
|5050
|大亂鬥スマッシュブラザーズ for
Nintendo 3DS 更新資料 Ver. 1.1.3 (TW)
|-
|0004000e00169500
|410
|Rodea the Sky Soldier -
Update (EU)
|-
|0004000e00169c00
|830
|更新データ Ver. 1.2
ちゃおイラストクラブ (JP)
|-
|0004000e00169d00
|410
|更新データ Ver. 1.1.0
アイカツ!My No.1 Stage! (JP)
|-
|0004000e0016a100
|410
|New Style Boutique™ 2 -
Fashion Forward: Update (EU)
|-
|0004000e0016b200
|410
|【ダウンロード版】
更新データファイアーエムブレムif (JP)
|-
|0004000e0016c600
|18b0
|更新データ Ver. 2.2
妖怪ウォッチバスターズ白犬隊 (JP)
|-
|0004000e0016c700
|18b0
|更新データ Ver. 2.2
妖怪ウォッチバスターズ赤猫団 (JP)
|-
|0004000e0016d100
|420
|Puzzle & Dragons Z + Puzzle & Dragons Super Mario Bros. Edition
更新資料 Ve (TW)
|-
|0004000e0016f200
|820
|SAMURAI WARRIORS:
Chronicles 3 Update Ver. 1.0.2 (US)
|-
|0004000e00170800
|410
|更新データ Ver. 1.1
ほっぺちゃんぷにっとしぼって大冒険! (JP)
|-
|0004000e00173b00
|820
|SAMURAI WARRIORS:
Chronicles 3: Update (EU)
|-
|0004000e00174d00
|430
|更新データ Ver. 1.1
三國志2 (JP)
|-
|0004000e00175d00
|420
|PROJECT X ZONE 2：BRAVE NEW WORLD 更新資料Ver.1.2 (TW)
|-
|0004000e00176700
|410
|업데이트 데이터 Ver. 1.1
프로젝트 크로스 존 2 (KR)
|-
|0004000e00176e00
|c30
|更新データ Ver. 2.1.0
ゼルダの伝説トライフォース3銃士 (JP)
|-
|0004000e00176f00
|c30
|The Legend of Zelda™:
Tri Force Heroes Update (US)
|-
|0004000e00177000
|c30
|The Legend of Zelda™:
Tri Force Heroes: Update (EU)
|-
|0004000e00177e00
|420
|更新データ Ver. 1.1
モノカゲクエスト (JP)
|-
|0004000e00178000
|840
|更新データ Ver. 1.2
ドリームガールプルミエ (JP)
|-
|0004000e00178500
|430
|更新データ Ver. 1.1
すみっコぐらしおみせはじめるんです (JP)
|-
|0004000e0017c200
|410
|更新データ Ver. 1.1
すみっコぐらしおみせはじめるんです (JP)
|-
|0004000e0017c900
|820
|Shovel Knight:
Update (EU)
|-
|0004000e0017d800
|410
|更新データ Ver. 1.1.0 ダウン
タウンのガキの使いやあらへんで (JP)
|-
|0004000e0017e100
|410
|Shovel Knight Update Ver. 2.2 (US)
|-
|0004000e0017ec00
|820
|MONSTER HUNTER X 更新資料 Ver. 1.2.0 (TW)
|-
|0004000e0f700000
|410
|更新データ Ver. 1.1
New 3DS専用ゼノブレイド (JP)
|-
|0004000e0f700100
|410
|Xenoblade Chronicles™ 3D
Update Ver. 1.0 (US)
|-
|0004000e0f700200
|410
|Xenoblade Chronicles 3D:
Update (EU)
|-
|000480044b333656
|0
|Jewel Quest 5 -
The Sleepless Star (EU)
|-
|000480044b343350
|10
|Jewel Quest 4 Heritage (EU)
|-
|000480044b354c50
|0
|Forgotten Legions (EU)
|-
|000480044b35544a
|400
|戦国Tactics (JP)
|-
|000480044b425150
|10
|Break Tactics (EU)
|-
|000480044b464a4a
|400
|マジカルファンタジスタ (JP)
|-
|000480044b464d4a
|400
|あたまごモンスターズ (JP)
|-
|000480044b465a4a
|400
|あたまご (JP)
|-
|000480044b4b5a50
|10
|Academy: Chess Puzzles (EU)
|-
|000480044b4e414a
|800
|プチコンmkII (JP)
|-
|000480044b514e45
|400
|Castle Conqueror - Revolution (US)
|-
|000480044b555650
|30
|Bloons速 TD 4 (EU)
|-
|000480044b564c45
|10
|Clash of Elementalists (US)
|-
|000480044b564c50
|0
|Clash of Elementalists (EU)
|-
|000480044b584650
|410
|Color Commando (EU)
|-
|000480044b584b50
|60
|Goony (EU)
|-
|000480044b585250
|30
|Retro Pocket™ (EU)
|-
|000480044b585550
|10
|Publisher Dream (EU)
|-
|000480044b594e50
|20
|Cake Ninja: XMAS (EU)
|-
|000480044b59534a
|400
|あたまIQパニック (JP)
|}

VersionList

2016-01-26T06:09:51Z

Einstein95:

Used by the system menu to notify the user of updates.
{|class=wikitable
!Title ID
!Version
|-
|0004000000037500
|21
|-
|0004000000038b00
|410
|-
|000400000004a300
|400
|-
|0004000000056c00
|890
|-
|000400000005e300
|820
|-
|000400000005ee00
|10
|-
|0004000000066300
|400
|-
|000400000006d100
|0
|-
|000400000006d700
|1
|-
|000400000006e400
|400
|-
|000400000006e500
|400
|-
|000400000006e600
|400
|-
|000400000006ed00
|410
|-
|000400000006ee00
|400
|-
|000400000006ef00
|400
|-
|000400000006f000
|410
|-
|000400000006f100
|400
|-
|000400000006f200
|400
|-
|000400000006f600
|400
|-
|000400000006f900
|400
|-
|000400000006fa00
|400
|-
|000400000006fb00
|400
|-
|000400000006ff00
|400
|-
|0004000000070000
|400
|-
|0004000000070200
|400
|-
|0004000000070500
|800
|-
|0004000000070800
|400
|-
|0004000000070900
|400
|-
|0004000000070a00
|400
|-
|0004000000071100
|400
|-
|0004000000073c00
|401
|-
|0004000000075f00
|1
|-
|0004000000077500
|400
|-
|0004000000077e00
|400
|-
|000400000007a300
|10
|-
|000400000007fd00
|400
|-
|0004000000081100
|420
|-
|0004000000084b00
|10
|-
|0004000000086800
|0
|-
|0004000000088400
|0
|-
|0004000000089200
|400
|-
|000400000008b200
|420
|-
|000400000008d100
|840
|-
|000400000008e300
|410
|-
|000400000008fc00
|20
|-
|000400000008fe00
|830
|-
|0004000000090000
|410
|-
|0004000000099700
|4070
|-
|000400000009b800
|0
|-
|000400000009bb00
|0
|-
|000400000009d300
|10
|-
|000400000009d600
|1830
|-
|000400000009da00
|400
|-
|000400000009df00
|0
|-
|000400000009e300
|0
|-
|000400000009e700
|10
|-
|000400000009ea00
|410
|-
|00040000000a1200
|0
|-
|00040000000a1400
|0
|-
|00040000000a2f00
|420
|-
|00040000000a5400
|810
|-
|00040000000a7900
|410
|-
|00040000000a9000
|0
|-
|00040000000aa800
|400
|-
|00040000000aba00
|0
|-
|00040000000ad400
|0
|-
|00040000000aec00
|0
|-
|00040000000b0f00
|830
|-
|00040000000b4700
|3020
|-
|00040000000b4f00
|400
|-
|00040000000b8f00
|400
|-
|00040000000bb100
|0
|-
|00040000000bb400
|10
|-
|00040000000bba00
|0
|-
|00040000000bd200
|0
|-
|00040000000bea00
|0
|-
|00040000000bec00
|10
|-
|00040000000c1700
|410
|-
|00040000000c2900
|420
|-
|00040000000c3400
|400
|-
|00040000000c3a00
|430
|-
|00040000000c4200
|0
|-
|00040000000c5200
|0
|-
|00040000000c5700
|410
|-
|00040000000c6f00
|410
|-
|00040000000c7100
|410
|-
|00040000000c7700
|410
|-
|00040000000c7f00
|0
|-
|00040000000c8000
|0
|-
|00040000000c8900
|0
|-
|00040000000c8a00
|0
|-
|00040000000c8d00
|410
|-
|00040000000c9e00
|840
|-
|00040000000cbb00
|0
|-
|00040000000cbd00
|420
|-
|00040000000cca00
|0
|-
|00040000000ccd00
|820
|-
|00040000000cd600
|10
|-
|00040000000cd700
|10
|-
|00040000000cd800
|0
|-
|00040000000cef00
|410
|-
|00040000000cfd00
|0
|-
|00040000000d0600
|430
|-
|00040000000d1700
|0
|-
|00040000000d1800
|0
|-
|00040000000d2400
|0
|-
|00040000000d2900
|420
|-
|00040000000d2e00
|0
|-
|00040000000d2f00
|0
|-
|00040000000d3000
|830
|-
|00040000000d4800
|0
|-
|00040000000d4a00
|420
|-
|00040000000d7700
|0
|-
|00040000000d7b00
|410
|-
|00040000000d8c00
|0
|-
|00040000000d9300
|0
|-
|00040000000d9400
|0
|-
|00040000000db700
|c80
|-
|00040000000db800
|450
|-
|00040000000de100
|10
|-
|00040000000e6100
|0
|-
|00040000000e6800
|420
|-
|00040000000e8200
|0
|-
|00040000000e9300
|410
|-
|00040000000e9800
|410
|-
|00040000000ea800
|0
|-
|00040000000eaf00
|0
|-
|00040000000eb000
|1050
|-
|00040000000edc00
|410
|-
|00040000000edd00
|420
|-
|00040000000ee600
|410
|-
|00040000000ee900
|410
|-
|00040000000f7300
|0
|-
|00040000000fb900
|410
|-
|00040000000fc700
|0
|-
|00040000000fc800
|1060
|-
|00040000000fc900
|0
|-
|00040000000fd300
|0
|-
|00040000000fe200
|10
|-
|0004000000103500
|410
|-
|0004000000103600
|410
|-
|0004000000104300
|1
|-
|0004000000105800
|10
|-
|0004000000105900
|10
|-
|0004000000105c00
|0
|-
|0004000000108d00
|820
|-
|0004000000109800
|28e0
|-
|000400000010cf00
|0
|-
|000400000010d200
|820
|-
|000400000010db00
|0
|-
|000400000010dc00
|0
|-
|000400000010e600
|420
|-
|0004000000111100
|820
|-
|0004000000112300
|420
|-
|0004000000115700
|0
|-
|0004000000119300
|0
|-
|0004000000119a00
|1040
|-
|0004000000120100
|420
|-
|0004000000121d00
|820
|-
|0004000000123200
|0
|-
|0004000000124000
|410
|-
|0004000000124300
|410
|-
|0004000000124a00
|c50
|-
|0004000000127600
|401
|-
|0004000000128900
|410
|-
|0004000000129600
|410
|-
|0004000000129f00
|440
|-
|000400000012bf00
|410
|-
|000400000012cb00
|820
|-
|000400000012d000
|820
|-
|000400000012e700
|430
|-
|0004000000130300
|c40
|-
|0004000000132900
|0
|-
|0004000000134600
|410
|-
|0004000000136a00
|0
|-
|0004000000138900
|410
|-
|0004000000139c00
|c70
|-
|000400000013d000
|820
|-
|000400000013d100
|1470
|-
|000400000013ea00
|420
|-
|000400000013ee00
|430
|-
|000400000013f900
|420
|-
|0004000000140f00
|2cc0
|-
|0004000000141000
|830
|-
|0004000000141a00
|0
|-
|0004000000141f00
|10
|-
|0004000000143c00
|440
|-
|0004000000144d00
|c30
|-
|0004000000146f00
|410
|-
|0004000000147d00
|0
|-
|0004000000148100
|0
|-
|0004000000148400
|810
|-
|0004000000148c00
|10
|-
|0004000000148f00
|410
|-
|0004000000149700
|810
|-
|000400000014b000
|410
|-
|000400000014c900
|820
|-
|0004000000150d00
|420
|-
|0004000000151100
|410
|-
|0004000000151f00
|0
|-
|0004000000152e00
|10
|-
|000400000015a600
|0
|-
|000400000015b100
|820
|-
|000400000015d100
|0
|-
|000400000015d800
|820
|-
|0004000000162200
|1890
|-
|0004000000164600
|410
|-
|0004000000166400
|10
|-
|0004000000169000
|0
|-
|000400000016d100
|0
|-
|000400000016d200
|0
|-
|0004000000175d00
|10
|-
|0004000000177d00
|410
|-
|0004000000179100
|0
|-
|000400000017a900
|10
|-
|000400000017b800
|0
|-
|000400000017bf00
|0
|-
|000400000017d200
|410
|-
|000400000017da00
|0
|-
|000400000017ec00
|0
|-
|0004000000182c00
|0
|-
|0004000000185c00
|0
|-
|000400000f700800
|c30
|-
|000400000f700900
|840
|-
|000400020008c401
|820
|-
|00040002000b8b01
|410
|-
|00040002000edf01
|420
|-
|00040002000ee001
|410
|-
|0004000200132501
|420
|-
|0004000200136a01
|0
|-
|0004000200175d01
|0
|-
|000400020017a901
|10
|-
|0004000e00030600
|410
|-
|0004000e00030700
|410
|-
|0004000e00030800
|410
|-
|0004000e00032100
|800
|-
|0004000e00036f00
|400
|-
|0004000e00039a00
|400
|-
|0004000e00043700
|400
|-
|0004000e0004b500
|430
|-
|0004000e0004b700
|400
|-
|0004000e0004ee00
|400
|-
|0004000e00053600
|800
|-
|0004000e00055d00
|1470
|-
|0004000e00055e00
|1460
|-
|0004000e0005d100
|c10
|-
|0004000e0005e900
|410
|-
|0004000e00060600
|420
|-
|0004000e00065000
|410
|-
|0004000e0006cf00
|830
|-
|0004000e0006d200
|2000
|-
|0004000e00072a00
|410
|-
|0004000e00074500
|820
|-
|0004000e00074600
|400
|-
|0004000e00078500
|c00
|-
|0004000e00078b00
|400
|-
|0004000e0007a000
|400
|-
|0004000e00081e00
|410
|-
|0004000e00084d00
|430
|-
|0004000e00086200
|840
|-
|0004000e00086500
|820
|-
|0004000e0008c300
|410
|-
|0004000e0008c400
|c40
|-
|0004000e0008c500
|c50
|-
|0004000e00091000
|440
|-
|0004000e00091400
|410
|-
|0004000e00095c00
|430
|-
|0004000e0009c000
|410
|-
|0004000e0009ef00
|430
|-
|0004000e0009f000
|430
|-
|0004000e0009fe00
|440
|-
|0004000e000a0b00
|14a0
|-
|0004000e000a1b00
|1020
|-
|0004000e000a1c00
|1020
|-
|0004000e000a4d00
|400
|-
|0004000e000a9000
|400
|-
|0004000e000a9100
|400
|-
|0004000e000a9800
|400
|-
|0004000e000aa700
|420
|-
|0004000e000ac700
|c50
|-
|0004000e000ada00
|820
|-
|0004000e000af700
|410
|-
|0004000e000afb00
|410
|-
|0004000e000afc00
|410
|-
|0004000e000afd00
|420
|-
|0004000e000b1700
|410
|-
|0004000e000b1800
|410
|-
|0004000e000b1900
|410
|-
|0004000e000b4a00
|420
|-
|0004000e000b6d00
|410
|-
|0004000e000b8b00
|5160
|-
|0004000e000b9900
|410
|-
|0004000e000bb800
|440
|-
|0004000e000c0100
|420
|-
|0004000e000c1c00
|410
|-
|0004000e000c2900
|840
|-
|0004000e000c3600
|830
|-
|0004000e000c3a00
|840
|-
|0004000e000c9b00
|c50
|-
|0004000e000cb700
|420
|-
|0004000e000cb900
|430
|-
|0004000e000cba00
|420
|-
|0004000e000cbd00
|1090
|-
|0004000e000cc400
|430
|-
|0004000e000cd300
|410
|-
|0004000e000cf300
|420
|-
|0004000e000cf400
|850
|-
|0004000e000cf500
|420
|-
|0004000e000cf600
|430
|-
|0004000e000cf900
|420
|-
|0004000e000d0900
|420
|-
|0004000e000d5600
|430
|-
|0004000e000d5700
|430
|-
|0004000e000d5800
|430
|-
|0004000e000d5900
|430
|-
|0004000e000d5a00
|410
|-
|0004000e000d6e00
|410
|-
|0004000e000d7c00
|1450
|-
|0004000e000d7d00
|1450
|-
|0004000e000d7e00
|1450
|-
|0004000e000d8e00
|840
|-
|0004000e000d8f00
|830
|-
|0004000e000d9000
|410
|-
|0004000e000db600
|410
|-
|0004000e000dbd00
|14b0
|-
|0004000e000dc700
|430
|-
|0004000e000dc800
|830
|-
|0004000e000dca00
|430
|-
|0004000e000dd900
|410
|-
|0004000e000df800
|c70
|-
|0004000e000e9a00
|830
|-
|0004000e000e9c00
|1490
|-
|0004000e000ea900
|430
|-
|0004000e000eb800
|820
|-
|0004000e000ecd00
|410
|-
|0004000e000edf00
|5130
|-
|0004000e000ee000
|5130
|-
|0004000e000ef000
|1070
|-
|0004000e000f1f00
|860
|-
|0004000e000f3f00
|420
|-
|0004000e000f4000
|840
|-
|0004000e000f4200
|840
|-
|0004000e000f4f00
|450
|-
|0004000e000f5800
|820
|-
|0004000e000f7200
|420
|-
|0004000e000f9700
|420
|-
|0004000e000f9b00
|1080
|-
|0004000e000fb000
|430
|-
|0004000e000fb100
|c90
|-
|0004000e000fb300
|420
|-
|0004000e000fb400
|430
|-
|0004000e000fc100
|420
|-
|0004000e000fce00
|410
|-
|0004000e00100900
|410
|-
|0004000e00101200
|420
|-
|0004000e00101300
|410
|-
|0004000e00102000
|410
|-
|0004000e00102100
|410
|-
|0004000e00102200
|410
|-
|0004000e00102600
|410
|-
|0004000e00102f00
|850
|-
|0004000e00103200
|c30
|-
|0004000e00103900
|420
|-
|0004000e00103e00
|410
|-
|0004000e00104800
|420
|-
|0004000e00104900
|830
|-
|0004000e00104a00
|420
|-
|0004000e00104c00
|420
|-
|0004000e00105000
|410
|-
|0004000e00105100
|430
|-
|0004000e00106700
|410
|-
|0004000e00108100
|430
|-
|0004000e0010af00
|420
|-
|0004000e0010ba00
|420
|-
|0004000e0010bb00
|420
|-
|0004000e0010bc00
|440
|-
|0004000e0010e200
|830
|-
|0004000e0010f600
|410
|-
|0004000e00111e00
|830
|-
|0004000e00113300
|450
|-
|0004000e00113400
|450
|-
|0004000e00114700
|840
|-
|0004000e00114900
|430
|-
|0004000e00114b00
|410
|-
|0004000e00117200
|1480
|-
|0004000e00118100
|430
|-
|0004000e00118500
|420
|-
|0004000e00119a00
|820
|-
|0004000e0011b200
|830
|-
|0004000e0011b300
|420
|-
|0004000e0011b400
|420
|-
|0004000e0011c200
|410
|-
|0004000e0011c400
|1c70
|-
|0004000e0011c500
|1c70
|-
|0004000e0011d700
|1040
|-
|0004000e0011dd00
|410
|-
|0004000e00120000
|420
|-
|0004000e00120500
|820
|-
|0004000e00120600
|1880
|-
|0004000e00120700
|420
|-
|0004000e00120800
|410
|-
|0004000e00120900
|420
|-
|0004000e00121b00
|430
|-
|0004000e00125500
|410
|-
|0004000e00125600
|410
|-
|0004000e00125d00
|24c0
|-
|0004000e00126100
|410
|-
|0004000e00126300
|430
|-
|0004000e00127a00
|410
|-
|0004000e00129d00
|440
|-
|0004000e0012a700
|820
|-
|0004000e0012a800
|c50
|-
|0004000e0012a900
|410
|-
|0004000e0012aa00
|410
|-
|0004000e0012ab00
|410
|-
|0004000e0012b700
|410
|-
|0004000e0012be00
|410
|-
|0004000e0012c800
|410
|-
|0004000e0012c900
|410
|-
|0004000e0012ca00
|410
|-
|0004000e0012d800
|c30
|-
|0004000e0012dc00
|410
|-
|0004000e0012dd00
|410
|-
|0004000e0012de00
|420
|-
|0004000e0012f500
|410
|-
|0004000e0012f800
|2050
|-
|0004000e0012f900
|2050
|-
|0004000e0012fa00
|c60
|-
|0004000e00130300
|20a0
|-
|0004000e00132500
|820
|-
|0004000e00132c00
|410
|-
|0004000e00134300
|410
|-
|0004000e00134500
|430
|-
|0004000e00134600
|1040
|-
|0004000e00137700
|430
|-
|0004000e00137800
|420
|-
|0004000e00139300
|410
|-
|0004000e00139a00
|440
|-
|0004000e0013fe00
|420
|-
|0004000e00140100
|410
|-
|0004000e00140b00
|420
|-
|0004000e00141a00
|410
|-
|0004000e00141d00
|830
|-
|0004000e00144300
|410
|-
|0004000e00144400
|18a0
|-
|0004000e00144600
|410
|-
|0004000e00145300
|410
|-
|0004000e00145500
|420
|-
|0004000e00146c00
|410
|-
|0004000e00147800
|410
|-
|0004000e0014a900
|420
|-
|0004000e0014ab00
|420
|-
|0004000e0014ac00
|c40
|-
|0004000e0014ad00
|410
|-
|0004000e0014ba00
|1040
|-
|0004000e0014c800
|410
|-
|0004000e0014dd00
|410
|-
|0004000e0014df00
|1080
|-
|0004000e0014e000
|410
|-
|0004000e0014e700
|410
|-
|0004000e0014e800
|410
|-
|0004000e0014e900
|410
|-
|0004000e0014eb00
|410
|-
|0004000e0014f000
|410
|-
|0004000e0014f100
|410
|-
|0004000e0014f200
|410
|-
|0004000e0014fb00
|820
|-
|0004000e0014fc00
|820
|-
|0004000e00150100
|1870
|-
|0004000e00152900
|420
|-
|0004000e00152a00
|c30
|-
|0004000e00155000
|860
|-
|0004000e00155100
|c40
|-
|0004000e00155400
|850
|-
|0004000e00155800
|801
|-
|0004000e00156100
|830
|-
|0004000e00157700
|410
|-
|0004000e00157900
|820
|-
|0004000e00158600
|410
|-
|0004000e00159000
|410
|-
|0004000e00159500
|410
|-
|0004000e0015a200
|410
|-
|0004000e0015a300
|820
|-
|0004000e0015a400
|410
|-
|0004000e0015a800
|440
|-
|0004000e0015bd00
|830
|-
|0004000e0015c000
|820
|-
|0004000e0015cb00
|430
|-
|0004000e0015dc00
|410
|-
|0004000e0015e300
|430
|-
|0004000e0015e700
|420
|-
|0004000e0015e800
|410
|-
|0004000e00160200
|410
|-
|0004000e00160800
|1060
|-
|0004000e00162300
|440
|-
|0004000e00163c00
|c60
|-
|0004000e00166f00
|820
|-
|0004000e00167700
|410
|-
|0004000e00167c00
|5060
|-
|0004000e00167f00
|820
|-
|0004000e00168600
|5050
|-
|0004000e00169500
|410
|-
|0004000e00169c00
|830
|-
|0004000e00169d00
|410
|-
|0004000e0016a100
|410
|-
|0004000e0016b200
|410
|-
|0004000e0016c600
|18b0
|-
|0004000e0016c700
|18b0
|-
|0004000e0016d100
|420
|-
|0004000e0016f200
|820
|-
|0004000e00170800
|410
|-
|0004000e00173b00
|820
|-
|0004000e00174d00
|430
|-
|0004000e00175d00
|420
|-
|0004000e00176700
|410
|-
|0004000e00176e00
|c30
|-
|0004000e00176f00
|c30
|-
|0004000e00177000
|c30
|-
|0004000e00177e00
|420
|-
|0004000e00178000
|840
|-
|0004000e00178500
|430
|-
|0004000e0017c200
|410
|-
|0004000e0017c900
|820
|-
|0004000e0017d800
|410
|-
|0004000e0017e100
|410
|-
|0004000e0017ec00
|820
|-
|0004000e0f700000
|410
|-
|0004000e0f700100
|410
|-
|0004000e0f700200
|410
|-
|000480044b333656
|0
|-
|000480044b343350
|10
|-
|000480044b354c50
|0
|-
|000480044b35544a
|400
|-
|000480044b425150
|10
|-
|000480044b464a4a
|400
|-
|000480044b464d4a
|400
|-
|000480044b465a4a
|400
|-
|000480044b4b5a50
|10
|-
|000480044b4e414a
|800
|-
|000480044b514e45
|400
|-
|000480044b555650
|30
|-
|000480044b564c45
|10
|-
|000480044b564c50
|0
|-
|000480044b584650
|410
|-
|000480044b584b50
|60
|-
|000480044b585250
|30
|-
|000480044b585550
|10
|-
|000480044b594e50
|20
|-
|000480044b59534a
|400
|}

IRC Quotes

2016-01-25T23:28:36Z

Einstein95: <profi200> eientei9: Not that crap again :p