3dbrew - User contributions [en]

User:Matyapiro31

2014-03-04T02:36:46Z

Matyapiro31:

I am not involved in deeply.
Just translated and suggested,info by japanese.

视频捕捉

2014-03-04T02:34:38Z

Matyapiro31: I don't want you to use the nick.

{{stub}}

本页面描述3DS上下屏幕捕捉视频信号的过程。

[[File:Pinout_point.jpg|300px]]

== 下屏幕DUMP ==

测试引脚在主板正面。
{| class="wikitable" border="1"
|-
! # || 名称 || TP || 红 || # || 名称 || TP || 绿 || # || 名称 || TP || 蓝
|-
| '''10''' || CN2-31 || 184 || R0 || '''20''' || CN2-39 || 186 || G0 || '''24''' || CN1-34 || 188 || B0
|-
| '''12''' || CN2-32 || 178 || R1 || '''19''' || CN2-40 || 180 || G1 || '''18''' || CN1-33 || 182 || B1
|-
| '''13''' || CN2-33 || 172 || R2 || '''21''' || CN1-40 || 174 || G2 || '''17''' || CN1-32 || 176 || B2
|-
| '''11''' || CN2-34 || 166 || R3 || '''14''' || CN1-39 || 大于180 || G3 || '''23''' || CN1-31 || 170 || B3
|-
| '''2''' || CN2-35 || 183 || R4 || '''22''' || CN1-38 || 185 || G4 || '''5''' || CN1-30 || 187 || B4
|-
| '''3''' || CN2-36 || 177 || R5 || '''16''' || CN1-37 || 179 || G5 || '''6''' || CN1-29 || 181 || B5
|-
| '''1''' || CN2-37 || 171 || R6 || '''15''' || CN1-36 || 小于179 || G6 || '''7''' || CN1-28 || 175 || B6
|-
| '''4''' || CN2-38 || 165 || R7 || '''9''' || CN1-35 || 167 || G7 || '''8''' || CN1-27 || 169 || B7
|}

{| class="wikitable" border="1"
|-
! # || 名称 || TP || 说明
|-
| '''25''' || CN2-30 || 189 || CLK
|-
| '''26''' || CN2-28 || 191 || VSYNC
|-
| '''27''' || CN2-27 || 190 || HSYNC
|}

这张表格(从上图中获得)显示了TP(测试引脚)对应的颜色值(R=红，G=绿，B=蓝)。

将TP相与以便获得时钟CLK，垂直同步VSYNC，水平同步HSYNC信号。

== 链接 ==

* DS版本 (DSCapture)：http://www.3dscapture.com/ds
* DS版本(NisetroCaptureDS)：http://www.3dsvideocapture.com/product-list/1
* DSi版本(NisetroCaptureDSi)：http://www.3dsvideocapture.com/product-list/2
* 3DS版本(NisetroCapture3DS)：http://www.3dsvideocapture.com/product-list/3
* Pics+Progress更新(3DSCapture)：http://www.3dscapture.com/
* 使用USB版回转设备的YouTube视频：http://www.youtube.com/watch?v=mT0DuQleuhY
* 使用HDMI版回转设备的YouTube视频：http://www.youtube.com/watch?v=s99fUS68AB4

Talk:Main Page/ja

2014-03-04T02:32:04Z

Matyapiro31: moved Talk:メインページ to Trash:Talk:メインページ: I do not involved in this anymore.

#REDIRECT [[Trash:Talk:メインページ]]

Trash:Talk:メインページ

2014-03-04T02:32:04Z

Matyapiro31: moved Talk:メインページ to Trash:Talk:メインページ: I do not involved in this anymore.

Friend code

2014-03-04T02:30:58Z

Matyapiro31:

This is a list of friend codes of different users.

Remember to [http://3dbrew.org/w/index.php?title=Friend_code&action=watch watch this article] if you wish to get notified when someone modifies the list.

{| class="wikitable" border="1"
|-
! width="20%" | User !! width="15%" | IrcNick !! width="20%" | Friend code !! width="10%" |Region !! width="30%" |Comment here !! Mii image
|-
|[[User:SynRxn|SynRxn]] || ||0962-9776-8195 ||USA ||Let's pwn the 3DS! ||[[File:SynRxn.JPG|120px]]
|-
| z2442 || || <nowiki>4554-0595-5890</nowiki> || USA || hack the 3ds yes! ||
|-
|[[User:Allnewryan1|Allnewryan1]] || || 0001-4540-5587 || USA || Looking to help the devs, add me and send me a message when you find crashes ||
|-
| Crediar || || 2535-3625-3742 || Europe || None ||
|-
| Kazuma || || 2277-6646-9164 || Europe || None ||
|-
| SaltyPancakes || || 0044-2836-4738 || Europe || None ||
|-
| Inspectah || || 3909-7495-9525 || Europe || None ||
|-
| XanLoves || || 3995-6523-2805 || Europe || None ||
|-
| muhkuh2005 || || 2449-4689-9707 || Europe || Germanfag ||
|-
| RHOPKINS13 || || 4854-6450-1577 || USA || None || [[File:RHOPKINS13_Mii.JPG]]
|-
| fishuyo || || 2535-3630-0678 || USA || None ||
|-
| marcosxd || || 0216-0901-5448 || Mexico || Crediar add me please, I already added you :) ||
|-
| Mafril || || 5112-3460-1421 || USA || None || [[File:Mafril_Mii.JPG]]
|-
| Epicdude || ||0130-1922-3022 ||USA || None ||
|-
| David || ||3553-9962-0973 ||USA ||Add me ||
|-
| Muzer || || 3136-6762-5385 || Europe || I have added everyone on this list who has a valid friend code (David and marcosxd don't) - so please add me if you get the chance. || [[File:Muzer_Mii.jpg|120px]]
|-
|[[User:Schumi|Schumi]] || || 1934-1000-7068 || Germany (Europe) || add and write with me ;) ||
|-
|[[User:Rikku2000|Rikku2000]] || || EUR: 1461-6425-0347 JPN: 1375-8084-1845 || Germany || Write me on 3DS Letterbox ||[[File:Rikku2000_Mii.JPG|100px]]
|-
|[[User:Elisherer|Elisherer]] || elisherer ||0001-3489-0550 ||USA ||None ||[[File:Elisherer_Mii.JPG|120px]]
|-
|Liam87 || ||2664-2361-9358 ||England ||Add me please, i have added everyone on here, thank you ||
|-
|Luishane || ||1289-8459-2533 ||Venezuela ||Add me...thanks ||
|-
|Immortal_no1 || ||0516-7257-0011 ||UK ||Add me and PM me on gbatemp.net with yours or e-mail me on "immortal_no1@hotmail.com" ||
|-
|CrimsonΣ (CrimsonSigma) || ||5284-1673-1864 ||Brazil ||Add me ||
|-
|E-Chan || ||2062-9187-2394 ||Spain ||Add me please~! Im up for online gaming of any sorts and discussing the scene! ||
|-
|Lazymarek9614 || ||1590-4676-4678 ||Europe ||Online gaming SSF IV 3D, I try to add everyone here! ||
|-
|FireFly || ||4554-0352-3499 ||Europe || None ||
|-
|Hikari06 || ||5241-1966-6545 ||Europe || I added everyone, please add me :) ||[[File:HIKARI06MII.jpg|120px]]
|-
|UpSilon_Project || ||1848-1843-3651 ||France (Europe) || UpSilon from the UpSilon Project ||
|-
|CVosler || ||4554-0499-6731 ||USA || I added everyone. You can also email me your code after you add me "cvosler@hotmail.com" ||[[File:Chip.JPG|120px]]
|-
|[[User:CHR15x94|CHR15x94]] || ||0688-5814-3517 ||Canada (USA) || Feel free to add me. I'll add anyone. If you need to contact me, message me on 3DBrew, or through one of my contacts on my 3DBrew profile. ||[[File:CHR15x94_-_Mii.JPG|120px]]
|-
|[[User:DarkWork0|DarkWork0]] || ||1075-0737-9684 ||USA ||Add me and email me your friends code: darkwork0@gmail.com I'll add anyone who adds me! ||[[File:HNI_0006.JPG‎|120px]]
|-
|[[User:Aliak11|Aliak11]] || ||1160-9718-1643 ||USA ||Add me and email me your friends code: atthegulf@gmail.com ||
|-
|[[User:capt.danny|capt.danny]] || ||4339:2914:5427 ||USA||Added everyone. Email fcs to danny9ds@gmail.com ||
|-
||[[user:jordan|jordan]]|| ||0473-8413-4597||USA||added all.||
|-
|[[User:Stopwatch8|Stopwatch8]] || Stopwatch8 ||2449-4811-6942 ||USA || I have added everyone here. I would be happy if I were added as well! I just like to see what titles everyone plays. :) ||[[File:Stopwatch8.JPG|120px]]
|-
| [[User:mr_seeker|mr_seeker]] || ||3909-7860-3744 ||EUR ||Add me, find me, streetpass me! ||
|-
|[[User:missou|missou]] || missou ||1762-3951-0686 ||EUR || I have added everyone...and everyone can add me! ||[[File:MissouMii.JPG|120px]]
|-
|[[User:GuyInDogSuit|GuyInDogSuit]] || ||4957-2209-2798 ||USA || I have added everyone except David and marcosxd (invalid codes), and everyone can add me in return. ||[[File:GuyInDogSuit.jpg|120px]]
|-

User:Matyapiro31

2014-03-04T02:29:51Z

Matyapiro31: Blanked the page

3DSExplorer

2013-05-23T12:41:15Z

Matyapiro31: /* Usage */

{{Infobox homebrew
| title = 3DSExplorer
| image = [[Image:3DSCube_128px.png|128px]]
| type = pc utility
| author = [[User:Elisherer|elisherer]]
| download = http://3dsexplorer.googlecode.com/files/3dsexplorer_v1.5.1.zip
| source = http://code.google.com/p/3dsexplorer/
| version = 1.5.1
}}

3DSExplorer can open 3DS files and view the information as described 3DBrew.

----

'''Please use the latest version. Older versions has bugs in them that I fix.'''

'''More over, refrain from uploading the application to your servers. Just link to google code site.'''

----

== Usage ==

Needs '''.NET Framework 4.0''', you can get it [http://www.microsoft.com/download/en/details.aspx?id=17851 here].

Note:If you want to install this program for Mac Linux or FreeBSD,you should install wine beta version 15 or later with wine mono.

It completely works on Linux,but I don't know on Mac OS X.

Opens:
* CTR Cartridge Image files ([[NCSD|CCI]]/[[NCSD|CSU]]) (NCSD)
* CTR eXecutable Image files ([[NCCH#CXI|CXI]]) (NCCH)
* CTR File Archives ([[NCCH#CFA|CFA]]) (NCCH)
* CTR Importable Archives ([[CIA]])
* CTR Icons ([[SMDH|ICN]]) (SMDH)
* CTR Banners (BNR) (CBMD + BCWAV)
* CTR Waves ([[BCWAV]])
* CTR Banner Model Data ([[CBMD]])
* CTR Graphics ([[CBMD|CGFX]]) (CBMD)
* [[DARC]] (file containers) / [[BCMA]] CTR-Manuals
* Save Flash binaries ([[Savegames|SAV]]) (decrypted or encrypted)
* Title meta data files ([[TMD]]),
* Multi-Picture Objects ([[MPO]]) , (3D Images)

Can convert:
* Videos to 2D/3D MJPG AVI files for the 3DS (Can download directly from YouTube)

Some of the file formats can be saved with replaced contents.

== Option for reading 3ds/cci/csu files from zip/7z files ==

Just compress your 3ds/cci/csu file into a 7z or zip (with any other file you want like nfo file)

Then you can open it from 3dsexplorer. '''But be aware that only the first cxi will be loaded and saving capabilities will not be available.'''

(3DSExplorer looks for the first file with the proper extension and reads the first 0x5000 bytes)

== Upcoming features ==

for v1.6
* Extracting binaries from CIA like ctrtool does.

== Change log ==

v1.5.1
* MPO: Added some info found by Thib
* Fixed: title.db update process.
* Parentool 3ds algorithm fixed (was wrong)
v1.5
* Added: QR Tool
* Added: Parental Control Unlocker (for 3DS as found by neimod, and for the DSi/Wii as on marcan's site)
v1.4
* Added: support for BCMA/DARC files/containers.
* Added: DSDecmp GUI for compression/decompression of LZ-10/11/Ovl & Huffman4/8.
* Updated: XOR Tool's file text boxes accept drag&drop (DSDecmp GUI's also).
v1.3 (3DSGuy)
* Added *.cfa as an openable file (associated with CXI module)
* Used more general terms for CXI/CFA and 3DS/CCI/CSU with NCCH and NCSD respectively, while the general terms are more broad, they are correct, as a CFA file is not a CXI file.
* Fixed the Number of NCCH from 13 to 8 in the CCI module
* Changed the NCSD header readings to match the current specs on 3DBrew, with the exception of the "ExHeader size/Exheader Hash", as they are always zero in every NCSD.
* Made the ExHeader an extractable file from NCCH files.
v1.2.1
* fixed opening of cia files (thanks 3dsguy)
* updated title.db up to release #183
v1.2
* Added: The product codes and maker codes are now in a file called title.db
* Added: 3ds/cci/csu can be opened from zip/7z files with limited information (cci,1st cxi & crc32)
v1.1.1
* fixed file tree activation bugs
* fixed some typos
* CCI: added an option to save cxi file (right click the CXI node in the file tree)
v1.1 - Happy Holidays
* New opens CXI files
* New opens CSU files (CTR System update - same as CCI)
* New opens ICN files (CTR Icons)
* Added QuickCRC32 tool to check for authenticity (also added CRC32 to hash tool)
* Generalized the explorer (the source code of the explorer is general, now it would be easier to add more file formats)
* 3D Video converter: Progress is working, fixed a lot, now works almost flawlessly.
* CCI: Added more information to the header.
* MPO: Added Nintendo's MakerNote structure.
v1.0
* Better late then ever...update to v1.0 so I can continue with the regular
version giving.
* Added MPO support (3D Images taken by the 3ds camera)
* 3D Video Conversion tool to convert youtube 3d videos to 3DS-3D MJPG videos...
* more bug fixes (as always)
v0.96
* Moved to .NET Framework 4.0 (because of OpenGL Support)
* Improved SRAM key search algorithm (fixes Starfox 3D)
* Added initial support for CWAV, CGFX
* New nifty about screen (3d logo)
* Preparations made for wav (CWAV) & 3d model (CMDL) decoding (WIP)
* Now the application needs 2 external DLLs for SharpGL
v0.9
* Now checks for update on startup (can be disabled)
* Added link to the Google-code site
* CIA: Can replace icons with any picture you want (Saving enabled)
* More bug fixes
v0.89
* CIA: Icons color mapping corrected (It's RGB565)
* ImageBox now has a zoom button.
* XOR Tool: New features: Xor byte arrays, AES-ctr sandbox.
* More bug fixes and mostly source code redesign
v0.83
* CIA: Fix: Correct Ticket
* CIA: Icon color mapping fixed (RGB -> GBR)
v0.82
* CIA: Added Banner icons viewing (Double click an icon to show it in the Banner's Metadata section)
v0.81
* Fix bug when opening TMD files
v0.8
* CIA support
* Changed GUI + Skin
* Fixed some bugs
v0.7
* More information on sav files
* Now all information is grouped
* Bug fixes for all contexts
* Hash tool supports HMAC
* Source code rewritten for optimization..
* [Experimental] Can now replace original files into sav image and save it to a new created sav file.
v0.62
* Bug fixes
* Rearranged the gui
* Now the exe file is a release and not a debug.
* Context menu for files in the filesystem list.
v0.61
* Fix for DATA partitions files save (wrong offsets)...
* Can now be associated with sav/bin/3ds/tmd files to open files from the explorer...
* Hashtool and XORtool can be opened while working with the explorer part of the program.
v0.6
* New GUI
* Improved algorithms (SAV files mainly)
* More information shown
* NEW and improved Hash Tool.
v0.55
* Works with most save files.
* More of the save structure understood
* Saving of files from the sav image fixed.
v0.53
* Fix for the tmd (now has certificates)
* TMD: Still not supporting SHA1 type
v0.52
* TMD now works
* Save opening was improved
* No question rather it's encrypted or not (autodetect)

v0.51
* fix for save files from save image
* feature: save image file from sav binary

v0.5
* new GUI now has file box
* fix for a few save files
* now can save files from save and 3ds (from 3ds still encrypted) by double clicking a file.
* when opening a crypted save you can save the key to a file
* now on google code using SVN (moved from github)

v0.3
* changed the name of the application
* initial work on opening save binary files
* already opens save binary files, decrypts them and shows some info

* I'll be happy to get some help from you guys on this...

v0.1
* opens 3DS files and creates a treeview with the information
* can't decrypt the ExeFS (as no key yet to be found)

== Screen shot ==

[[File:Screenshot 3dsexplorer.png]]

== Latest Build ==

You can download the latest build [http://3dsexplorer.googlecode.com/svn/trunk/3DSExplorer/bin/3DSExplorer.exe here].

Notice that this version might be buggy...

Talk:GPU/Commands

2013-03-04T10:36:07Z

Matyapiro31:

Hey,yellows8,What is the purpose of analyzing GPU Commands?

You should find AES keys first?
If you find it,other tasks will solved easily.--Matyapiro31 15:35, 3 March 2013 (CET)

:"What is the purpose of analyzing GPU Commands?" For properly rendering graphics instead of directly writing to the LCD framebuffers of course. "You should find AES keys first?" There's not really any [[AES]] normal-keys to find since that's done in hardware where the final normal-key is generated by the hardware. "If you find it,other tasks will solved easily" No, using the AES engine does not make other tasks such as GPU commands RE "easy" at all. --[[User:Yellows8|Yellows8]] 20:06, 3 March 2013 (CET)

Thank you.--Matyapiro31 12:36, 4 March 2013 (CET)

Talk:GPU/Commands

2013-03-03T13:35:25Z

Matyapiro31: question

Hey,yellows8,What is the purpose of analyzing GPU Commands?

You should find AES keys first?
If you find it,other tasks will solved easily.--Matyapiro31 15:35, 3 March 2013 (CET)

Talk:3DSExplorer

2013-02-14T13:21:40Z

Matyapiro31: /* questions */

Now I figured that I didn't explain the target of this app... It's suppose to be an Explorer like program to see inside the different filesystems that the 3ds has. Now it's the ExeFS, RomFS and SAVE. As knownledge keep flowing i'll continue to develop the application. With the goal of making a full functional drag&drop file explorer for image files. --[[User:Elisherer|Elisherer]] 18:35, 15 September 2011 (CEST)

It fails showing the tmd file content. Have you finshed working on this feature?--[[User:Lazymarek9614|Lazymarek9614]] 15:49, 20 September 2011 (CEST)
:No, I don't have time to work on it..it's not interesting enough --[[User:Elisherer|Elisherer]] 15:36, 21 September 2011 (CEST)
::Yeah, the 3DS doesn't care when the tmd file was modified... it's not useful for hacking.--[[User:Lazymarek9614|Lazymarek9614]] 21:09, 21 September 2011 (CEST)

I downloaded the sources,but I can't find Save.cs and reference "System.Development". Matyapiro31
:You are right... I fixed it.. notice that the source is not the released version it has some experimental stuff in it... --[[User:Elisherer|Elisherer]] 10:53, 30 September 2011 (CEST)

Do you know [http://monodevelop.com/ Mono Develop]?
You can release it as multi-patform,such as Linux,Machitosh,etc.
:I did not know that until now. But I don't have time to make the transition. I'm happy with VS2008 and it's relatively easy to make changes and new features for the app. The source is open and you can make a linux port if you want. --[[User:Elisherer|Elisherer]] 18:16, 30 September 2011 (CEST)
:You need no change.mono can run c# program like Java VM. Matyapiro31
::I tried to compile it,but That was old one,and there is "System.development."
:::[http://stackoverflow.com/questions/5865060/c-on-os-x-and-linux This] says that I need to fix stuff after I convert my project. and then work with the mono app which I don't find very convinient... and about the reference I don't know what it's about..I don't know a namespace called System.Development --[[User:Elisherer|Elisherer]] 17:42, 2 October 2011 (CEST) (P.s you can sign your messages with the quick signature button or 4 tildes: '~' 4 times)

lblBrew_Click() had no exception handler,

you have to change this method in fmExplorer.cs to
private void lblBrew_Click(object sender, EventArgs e)
{
try
{
System.Diagnostics.Process.Start(lblBrew.Text);
}
catch (Exception ex)
{
MessageBox.Show("Cannot open link that was clicled.\n"+ ex.Message);
}
}

Matyapiro31

The algorithm for the Image Hash might be either MD2 or MD4. I found out by using HxD and Notepad. --[[User:Kiddyshaq34|Kiddyshaq34]]
:Ok, but of what? (i know it's suppose to be 128 bit) And why not MD-5? --[[User:Elisherer|Elisherer]] 07:10, 9 October 2011 (CEST)
::Because MD5 is longer and the Image Hash has the same number of bytes as MD2 and MD4.
:::MD2, 4 & 5 are all 128bit which is 0x10 bytes... --[[User:Elisherer|Elisherer]] 20:28, 9 October 2011 (CEST)
::::Oh, I've forgotten about MD5. You are right.

3DS include RSA Securuty 's [http://www.rsa.com/node.aspx?id=1204 BSafe]

from 3DS manual. Matyapiro31
:Thanks Matyapiro31 but I think RSA is used for encryption and *not* hashing. So the RSA might be used for ROMs and WiFi... --[[User:Elisherer|Elisherer]] 14:48, 9 October 2011 (CEST)

あほ。RSA BSafe support all security method.See [http://www.rsa.com/japan/products/bsafe/CRYPTOCJ_DS_1101-J.pdf this.]

I cannot find English version,sorry.
Matyapiro31
:I guess if you mean [http://www.rsa.com/node.aspx?id=3063 this] then the digest algorithms are the ones that we know of..we havn't tried HMAC yet or CNG but from experience we see that nintendo uses regular digest algorithms like CRC16-Modbus and SHA-256. I'll add the HMAC ones to the brute force hash tool to see if it finds something... --[[User:Elisherer|Elisherer]] 22:36, 12 October 2011 (CEST)

I've tried to decrypt 'Super Mario 3D Land' but your tool shows me an 'Corrupt Save File' error.--[[User:Lazymarek9614|Lazymarek9614]] 18:36, 18 November 2011 (CET)
:Corrupted save file might be from 2 reasons: * Size is not right (128K or 512k) * CRC on wearleveling wrong. Both problems occur from NDS adapter plus malfunctioning...try blowing on the cart and the adapter and download the savefile again... --[[User:Elisherer|Elisherer]] 20:16, 18 November 2011 (CET)
::I actually don't use the useless NDS Adapter Plus, but I used DSM and I've tried it two times (always the same data).. I hope Nintendo doesn't use a new encryption now! Shall I send you the sav file?--[[User:Lazymarek9614|Lazymarek9614]] 20:27, 18 November 2011 (CET)
:::Yes please, I could check it within the application... --[[User:Elisherer|Elisherer]] 20:35, 18 November 2011 (CET)
::::Have you found anything?--[[User:Lazymarek9614|Lazymarek9614]] 21:25, 18 November 2011 (CET)
:::::No..it's seems that the key found isn't the right key (even that it appears 4 times in the file). we need to figure out how to decrypt the save files without searching blindly for the key. --[[User:Elisherer|Elisherer]] 21:33, 18 November 2011 (CET)
:::::I got an idea. Xor the image's 0x100-0x103 with every (0x200 block)'s 0x100-0x103 to see if it produces 'DISA' ..it should work with the already known files and might be faster to find. i'll try it tomorrow.. --[[User:Elisherer|Elisherer]] 21:40, 18 November 2011 (CET)
::::::Mind linking to a SM3DL save here so I could look at it?(Btw, you're not looking for a "key", you're looking for an AES-CTR xorpad.) --[[User:Yellows8|Yellows8]] 06:03, 22 November 2011 (CET)
:::::::I'll ask for permission. In the meanwhile, can we talk about it at n-dev.net? I made a [http://n-dev.net/showthread.php?tid=4 thread] there. --[[User:Elisherer|Elisherer]] 16:26, 22 November 2011 (CET)
::::::::Yes, you can share them!--[[User:Lazymarek9614|Lazymarek9614]] 17:24, 22 November 2011 (CET)
:::::::Catch the files on my server [http://www.sherer.co.il/saves http://www.sherer.co.il/saves] (Super Mario 3D Land).--[[User:Elisherer|Elisherer]] 17:43, 22 November 2011 (CET)
::::::::I'm stumped too. Since some chunks of data appears several times in these saves, in theory the CTR should still be repeating.(CTR seems to repeat >0x200 bytes now, not sure.) Didn't really manage to decrypt much via xor. --[[User:Yellows8|Yellows8]] 22:08, 22 November 2011 (CET)
::::::::I would guess they finally fixed the bug that limited the xor stream to just 0x200 bytes repeating, and now it behaves more like the data saved to SD cards? --[[User:Neimod|Neimod]] 01:30, 25 November 2011 (CET)
::::::::But you can see that same blocks share the same xorpad in the file...the DISA header is in the file 4 times and encrypted the same all the 4 times.. so the key may not repeat but maybe every block has it's own xorpad based on its offset in the image (my speculation) --[[User:Elisherer|Elisherer]] 09:02, 25 November 2011 (CET)

== *FS#.bin decrypt ==
Maybe I found the key: I think it's the unknown value at Rom. It's 16 characters long.
When I use it, it doesn't give a error or something.
--[[User:Gericom|Gericom]] 16:06, 12 December 2011 (CET)

== Extracting Data Files? ==

Hello! I'm SuperMario64DS, I hack Mario Kart Wii & The Super Mario Galaxy 1 & 2 ( Co-creator of the BDL Editor!). Okay, so I was wondering about extracting files from a 3DS ROM; can the program do that? I think I heard some where that it can decrypt 3DS ROMS and veiw their filesystem, is this true? And if not, will his feature be added? And if so, will an option to extract files from a ROM be added? I've been looking into studying Mario Kart 7's formats, and to see how to game works. --[[User:SuperMario64DS|SuperMario64DS]], 04:43, 20 December 2011 (CET)
:As soon as you get the 3ds common key we could decrpyt the romfs & exefs from the CXIs and then learn the file system... We could however have your help in understanding the CGFX format which has 3d models in it. --[[User:Elisherer|Elisherer]] 07:22, 20 December 2011 (CET)

::Well how faraway would you say we are from decrypting 3DS ROMs? I'd REALLY like to see inside of Mario Kart 7, I know it uses Yaz0, so it can be de-coded. 1: How might we find the decryption key? And 2: How much more longer do you think it will be until we can extract a 3DS ROM's file system? It would be really helpful. -- [[User:SuperMario64DS|SuperMario64DS]], 16:34, 20 December 2011 (CET)
:::We are VERY far. (but then again it could happen any day). Nintendo was smart enough to use AES-CTR which is a very strong encryption which can't be cracked even if you have encrypted and decrypted data (and even the initialization vector) you basicly need the key and it's far inside the 3ds (maybe even coded in hardware and not just inside the 3ds flash). So unless we were told what the key is I don't see us getting anywhere. For now, we do what we can. --[[User:Elisherer|Elisherer]] 18:29, 20 December 2011 (CET)
::::So, we just need that key? How might we look into the 3DS's Film Ware? Or couldn't you just observe the "Lock" (The 3DS ROM) And find the shape of the "Key"? (Encryption Key). Then if we took the "Lock" apart, we could re-build a replica of the "Key" and un-lock the File System. -- [[User:SuperMario64DS|SuperMario64DS]], 19:59, 20 December 2011 (CET)
:::::We know the "shape" of the key, it's 16 bytes long, combined with an IV you can decypher anything. Please read the rest of the pages on 3dbrew before posting more questions. And you might want to look at [http://gbatemp.net/f201-3ds-hacking-homebrew GBAtemp.net] for more information. --[[User:Elisherer|Elisherer]] 22:01, 20 December 2011 (CET)
::::::You completely missed my point there (A good point too), but since you want me to stop asking questions I will stop. --[[User:SuperMario64DS|SuperMario64DS]], 05:40, 21 December 2011 (CET)
:::::::Please don't stop asking questions. Asking questions leads us to finding things... just ask them in the right place, like GBAtemp or the irc channel. The title of this discussion is "Extracting data files" and clearly it can't happen for now so this talk is useless. --[[User:Elisherer|Elisherer]] 09:30, 21 December 2011 (CET)

== Xentax ==

I would love to get the models from ace combat assault horizon legacy but I know its a long long way off. but if you are looking to decrypt the files you might want to try xentax. they have a whole decompression section and since you have a tool you have some "street credit"
:I rekon you're talking about the website, I looked it up but it doesn't have any information about decryption.. only game file editors.. They do have a program called MultiEx editor (for blizzard files) that seems similiar to 3dsexplorer... --[[User:Elisherer|Elisherer]] 07:28, 29 January 2012 (CET)
:I only mean the other users might be of help on the forum anyway i look and see if anyone else is doing the same kind of work as you and send them your way

== questions ==

You can use Moma to scan 3DSExplorer for Mono compatibility--[[User:Jocopoco|Jocopoco]] 17:14, 10 February 2012 (CET)

Elisherer can you make the entries in the TMD sections editable for cia files?--[[User:3dsguy|3dsguy]] 13:04, 28 March 2012 (CEST)
:Probably, but I want to make an all-around solution for editing because it is needed by other formats too. I might need to add a struct to each line on the list which will include data-type and editable boolean... it might take some time... --[[User:Elisherer|Elisherer]] 08:09, 29 March 2012 (CEST)

Elisherer there is a bug in your program, when it tries to read .cia files which do not have a 'SMDH' or banner, like in the case of TWL converted applications and some old .CIA files, 3DS Explorer crashes. It is possible to read these kind of .CIA file in 3DSExplorer by entering a false banner size, so I know this is where the problem lies. Can you patch 3DSExplorer to read .cia files and not try to load information on banners when the banner size is '0'--[[User:3dsguy|3dsguy]] 02:25, 18 May 2012 (CEST)
:I don't really understand the problem...if you look at mdlCIA.cs file you'll see that i'm checking if the bannerLength > 0 so I wouldn't know what to change here.. --[[User:Elisherer|Elisherer]] 10:45, 18 May 2012 (CEST)
::Edit the sample .CIA on the .CIA wiki page and make the banner size zero, then try to open it 3DSExplorer. On my computer this causes 3DSExplorer to crash--[[User:3dsguy|3dsguy]] 12:50, 18 May 2012 (CEST)
::Sorry correction, it crashes when you try to open a .cia file(that has no banner size) when it is associated to be run with 3DSExplorer. But if you try to load a .cia file(that has no banner size) from the open file tab of 3DSExplorer, it tells me that an unhandled exception has occured, "Object reference not set to an instance of an object." --[[User:3dsguy|3dsguy]] 16:57, 18 May 2012 (CEST)
:::OK, I found the bug that you were talking about... If the banner's size is zero I try to put the icons in the file view anyway and that's wrong..I'll try to fix the association bug and release a new version. --[[User:Elisherer|Elisherer]] 10:22, 19 May 2012 (CEST)

Found some more bugs. 3DSExplorer crashes when it tries to open .BNR files and .BCWAV files. For example try the sample .BCWAV and .BNR file in the 0.2 CiTRus release.--[[User:3dsguy|3dsguy]] 12:32, 22 May 2012 (CEST)

I made it be able to send e-mail,but I don't have SMAP server and knowledge about web application.
Here.[https://docs.google.com/folder/d/0B_1DNe-beZjwaWdKME1PTF9zYjA/edit]

--Matyapiro31 14:53, 9 July 2012 (CEST)
:[+]How about release your source codes on Google Drive?
If you want to,everyone can edit it,see on web.
I think it is very good service.--Matyapiro31 14:53, 9 July 2012 (CEST)
::Hi Matyapiro31, thank you for you efforts, the source code is maintained by a version control system, this way i can revert to older versions if necessary, Google Drive can't do it. The source is free to download using checkout or browsing (on the site), You don't need to send feedback because the google code site offers "Issues" you can open and I will respond. --[[User:Elisherer|Elisherer]] 08:01, 10 July 2012 (CEST)

Thank you to reply me.

I think it is easier for light-users to send mails than to write comments on Google Code ----people who can debug,find solution of error,use software without seeing any helps is worth being called "Hacker".but they are minority in the 3DS game player.It is nice try to construct a system to send feedbacks easily.

This is the time to decide 3DS homebrew standard including support, internationalism,extensibility and easy development.--Matyapiro31 13:42, 10 July 2012 (CEST)

@elisherer are you going to update 3DSExplorer to read CIA files differently as with the updated specs(this includes reading the .ICN flags)? Also what about allowing the .CFA (NCCH) format to be read without renaming to .CXI, and destinguishing between CFA and CXI when viewing a CCI/CSU in 3DSExplorer?--[[User:3dsguy|3dsguy]] 20:10, 20 July 2012 (CEST)

Why don't you add the function to read-and-write phtcache.bin?
3DSCamera use the file to find the videos and pictures in ''SDDIR''/DCIM/XXXNIN03,but I succeeded to read a picture in other folder by changing it.
:That's nice, but I work only on small stuff for now because i'm very busy.. maybe in the future if it becomes necessary --[[User:Elisherer|Elisherer]] 00:31, 16 January 2013 (CET)

I changed bad codes.[https://docs.google.com/file/d/0B_1DNe-beZjwdHgxMEVBRnkxNTg/edit?usp=sharing MarshalUtil.cs]
--Matyapiro31 15:20, 14 February 2013 (CET)

Talk:3DSExplorer

2013-02-14T13:20:00Z

Matyapiro31: source changed.

Now I figured that I didn't explain the target of this app... It's suppose to be an Explorer like program to see inside the different filesystems that the 3ds has. Now it's the ExeFS, RomFS and SAVE. As knownledge keep flowing i'll continue to develop the application. With the goal of making a full functional drag&drop file explorer for image files. --[[User:Elisherer|Elisherer]] 18:35, 15 September 2011 (CEST)

It fails showing the tmd file content. Have you finshed working on this feature?--[[User:Lazymarek9614|Lazymarek9614]] 15:49, 20 September 2011 (CEST)
:No, I don't have time to work on it..it's not interesting enough --[[User:Elisherer|Elisherer]] 15:36, 21 September 2011 (CEST)
::Yeah, the 3DS doesn't care when the tmd file was modified... it's not useful for hacking.--[[User:Lazymarek9614|Lazymarek9614]] 21:09, 21 September 2011 (CEST)

I downloaded the sources,but I can't find Save.cs and reference "System.Development". Matyapiro31
:You are right... I fixed it.. notice that the source is not the released version it has some experimental stuff in it... --[[User:Elisherer|Elisherer]] 10:53, 30 September 2011 (CEST)

Do you know [http://monodevelop.com/ Mono Develop]?
You can release it as multi-patform,such as Linux,Machitosh,etc.
:I did not know that until now. But I don't have time to make the transition. I'm happy with VS2008 and it's relatively easy to make changes and new features for the app. The source is open and you can make a linux port if you want. --[[User:Elisherer|Elisherer]] 18:16, 30 September 2011 (CEST)
:You need no change.mono can run c# program like Java VM. Matyapiro31
::I tried to compile it,but That was old one,and there is "System.development."
:::[http://stackoverflow.com/questions/5865060/c-on-os-x-and-linux This] says that I need to fix stuff after I convert my project. and then work with the mono app which I don't find very convinient... and about the reference I don't know what it's about..I don't know a namespace called System.Development --[[User:Elisherer|Elisherer]] 17:42, 2 October 2011 (CEST) (P.s you can sign your messages with the quick signature button or 4 tildes: '~' 4 times)

lblBrew_Click() had no exception handler,

you have to change this method in fmExplorer.cs to
private void lblBrew_Click(object sender, EventArgs e)
{
try
{
System.Diagnostics.Process.Start(lblBrew.Text);
}
catch (Exception ex)
{
MessageBox.Show("Cannot open link that was clicled.\n"+ ex.Message);
}
}

Matyapiro31

The algorithm for the Image Hash might be either MD2 or MD4. I found out by using HxD and Notepad. --[[User:Kiddyshaq34|Kiddyshaq34]]
:Ok, but of what? (i know it's suppose to be 128 bit) And why not MD-5? --[[User:Elisherer|Elisherer]] 07:10, 9 October 2011 (CEST)
::Because MD5 is longer and the Image Hash has the same number of bytes as MD2 and MD4.
:::MD2, 4 & 5 are all 128bit which is 0x10 bytes... --[[User:Elisherer|Elisherer]] 20:28, 9 October 2011 (CEST)
::::Oh, I've forgotten about MD5. You are right.

3DS include RSA Securuty 's [http://www.rsa.com/node.aspx?id=1204 BSafe]

from 3DS manual. Matyapiro31
:Thanks Matyapiro31 but I think RSA is used for encryption and *not* hashing. So the RSA might be used for ROMs and WiFi... --[[User:Elisherer|Elisherer]] 14:48, 9 October 2011 (CEST)

あほ。RSA BSafe support all security method.See [http://www.rsa.com/japan/products/bsafe/CRYPTOCJ_DS_1101-J.pdf this.]

I cannot find English version,sorry.
Matyapiro31
:I guess if you mean [http://www.rsa.com/node.aspx?id=3063 this] then the digest algorithms are the ones that we know of..we havn't tried HMAC yet or CNG but from experience we see that nintendo uses regular digest algorithms like CRC16-Modbus and SHA-256. I'll add the HMAC ones to the brute force hash tool to see if it finds something... --[[User:Elisherer|Elisherer]] 22:36, 12 October 2011 (CEST)

I've tried to decrypt 'Super Mario 3D Land' but your tool shows me an 'Corrupt Save File' error.--[[User:Lazymarek9614|Lazymarek9614]] 18:36, 18 November 2011 (CET)
:Corrupted save file might be from 2 reasons: * Size is not right (128K or 512k) * CRC on wearleveling wrong. Both problems occur from NDS adapter plus malfunctioning...try blowing on the cart and the adapter and download the savefile again... --[[User:Elisherer|Elisherer]] 20:16, 18 November 2011 (CET)
::I actually don't use the useless NDS Adapter Plus, but I used DSM and I've tried it two times (always the same data).. I hope Nintendo doesn't use a new encryption now! Shall I send you the sav file?--[[User:Lazymarek9614|Lazymarek9614]] 20:27, 18 November 2011 (CET)
:::Yes please, I could check it within the application... --[[User:Elisherer|Elisherer]] 20:35, 18 November 2011 (CET)
::::Have you found anything?--[[User:Lazymarek9614|Lazymarek9614]] 21:25, 18 November 2011 (CET)
:::::No..it's seems that the key found isn't the right key (even that it appears 4 times in the file). we need to figure out how to decrypt the save files without searching blindly for the key. --[[User:Elisherer|Elisherer]] 21:33, 18 November 2011 (CET)
:::::I got an idea. Xor the image's 0x100-0x103 with every (0x200 block)'s 0x100-0x103 to see if it produces 'DISA' ..it should work with the already known files and might be faster to find. i'll try it tomorrow.. --[[User:Elisherer|Elisherer]] 21:40, 18 November 2011 (CET)
::::::Mind linking to a SM3DL save here so I could look at it?(Btw, you're not looking for a "key", you're looking for an AES-CTR xorpad.) --[[User:Yellows8|Yellows8]] 06:03, 22 November 2011 (CET)
:::::::I'll ask for permission. In the meanwhile, can we talk about it at n-dev.net? I made a [http://n-dev.net/showthread.php?tid=4 thread] there. --[[User:Elisherer|Elisherer]] 16:26, 22 November 2011 (CET)
::::::::Yes, you can share them!--[[User:Lazymarek9614|Lazymarek9614]] 17:24, 22 November 2011 (CET)
:::::::Catch the files on my server [http://www.sherer.co.il/saves http://www.sherer.co.il/saves] (Super Mario 3D Land).--[[User:Elisherer|Elisherer]] 17:43, 22 November 2011 (CET)
::::::::I'm stumped too. Since some chunks of data appears several times in these saves, in theory the CTR should still be repeating.(CTR seems to repeat >0x200 bytes now, not sure.) Didn't really manage to decrypt much via xor. --[[User:Yellows8|Yellows8]] 22:08, 22 November 2011 (CET)
::::::::I would guess they finally fixed the bug that limited the xor stream to just 0x200 bytes repeating, and now it behaves more like the data saved to SD cards? --[[User:Neimod|Neimod]] 01:30, 25 November 2011 (CET)
::::::::But you can see that same blocks share the same xorpad in the file...the DISA header is in the file 4 times and encrypted the same all the 4 times.. so the key may not repeat but maybe every block has it's own xorpad based on its offset in the image (my speculation) --[[User:Elisherer|Elisherer]] 09:02, 25 November 2011 (CET)

== *FS#.bin decrypt ==
Maybe I found the key: I think it's the unknown value at Rom. It's 16 characters long.
When I use it, it doesn't give a error or something.
--[[User:Gericom|Gericom]] 16:06, 12 December 2011 (CET)

== Extracting Data Files? ==

Hello! I'm SuperMario64DS, I hack Mario Kart Wii & The Super Mario Galaxy 1 & 2 ( Co-creator of the BDL Editor!). Okay, so I was wondering about extracting files from a 3DS ROM; can the program do that? I think I heard some where that it can decrypt 3DS ROMS and veiw their filesystem, is this true? And if not, will his feature be added? And if so, will an option to extract files from a ROM be added? I've been looking into studying Mario Kart 7's formats, and to see how to game works. --[[User:SuperMario64DS|SuperMario64DS]], 04:43, 20 December 2011 (CET)
:As soon as you get the 3ds common key we could decrpyt the romfs & exefs from the CXIs and then learn the file system... We could however have your help in understanding the CGFX format which has 3d models in it. --[[User:Elisherer|Elisherer]] 07:22, 20 December 2011 (CET)

::Well how faraway would you say we are from decrypting 3DS ROMs? I'd REALLY like to see inside of Mario Kart 7, I know it uses Yaz0, so it can be de-coded. 1: How might we find the decryption key? And 2: How much more longer do you think it will be until we can extract a 3DS ROM's file system? It would be really helpful. -- [[User:SuperMario64DS|SuperMario64DS]], 16:34, 20 December 2011 (CET)
:::We are VERY far. (but then again it could happen any day). Nintendo was smart enough to use AES-CTR which is a very strong encryption which can't be cracked even if you have encrypted and decrypted data (and even the initialization vector) you basicly need the key and it's far inside the 3ds (maybe even coded in hardware and not just inside the 3ds flash). So unless we were told what the key is I don't see us getting anywhere. For now, we do what we can. --[[User:Elisherer|Elisherer]] 18:29, 20 December 2011 (CET)
::::So, we just need that key? How might we look into the 3DS's Film Ware? Or couldn't you just observe the "Lock" (The 3DS ROM) And find the shape of the "Key"? (Encryption Key). Then if we took the "Lock" apart, we could re-build a replica of the "Key" and un-lock the File System. -- [[User:SuperMario64DS|SuperMario64DS]], 19:59, 20 December 2011 (CET)
:::::We know the "shape" of the key, it's 16 bytes long, combined with an IV you can decypher anything. Please read the rest of the pages on 3dbrew before posting more questions. And you might want to look at [http://gbatemp.net/f201-3ds-hacking-homebrew GBAtemp.net] for more information. --[[User:Elisherer|Elisherer]] 22:01, 20 December 2011 (CET)
::::::You completely missed my point there (A good point too), but since you want me to stop asking questions I will stop. --[[User:SuperMario64DS|SuperMario64DS]], 05:40, 21 December 2011 (CET)
:::::::Please don't stop asking questions. Asking questions leads us to finding things... just ask them in the right place, like GBAtemp or the irc channel. The title of this discussion is "Extracting data files" and clearly it can't happen for now so this talk is useless. --[[User:Elisherer|Elisherer]] 09:30, 21 December 2011 (CET)

== Xentax ==

I would love to get the models from ace combat assault horizon legacy but I know its a long long way off. but if you are looking to decrypt the files you might want to try xentax. they have a whole decompression section and since you have a tool you have some "street credit"
:I rekon you're talking about the website, I looked it up but it doesn't have any information about decryption.. only game file editors.. They do have a program called MultiEx editor (for blizzard files) that seems similiar to 3dsexplorer... --[[User:Elisherer|Elisherer]] 07:28, 29 January 2012 (CET)
:I only mean the other users might be of help on the forum anyway i look and see if anyone else is doing the same kind of work as you and send them your way

== questions ==

Elisherer,
Do you know function "__makeref()" is not defined in CSharp Language Standard?
in /3DSExplorer/Utils/MarshalUtil.cs you really often use it .--Matyapiro31 17:08, 10 February 2012 (CET)

Yes, it's a macro which is deprecated, the new way is too difficult for the purpose of the function using it, so i left it as is (it still works) --[[User:Elisherer|Elisherer]] 13:09, 10 February 2012 (CET)

But for System.Deployment and __makeref() are not defined in gtksharp,so I cannot compile 3DSExplorer.

Other member belonging to 3DBrew,I know a few of C#,therefore I hope some of you achieve compiling through MonoDevelop.

But even now 3DSExplorer crashes if you use Mono Runtime.

You can use Moma to scan 3DSExplorer for Mono compatibility--[[User:Jocopoco|Jocopoco]] 17:14, 10 February 2012 (CET)

Elisherer can you make the entries in the TMD sections editable for cia files?--[[User:3dsguy|3dsguy]] 13:04, 28 March 2012 (CEST)
:Probably, but I want to make an all-around solution for editing because it is needed by other formats too. I might need to add a struct to each line on the list which will include data-type and editable boolean... it might take some time... --[[User:Elisherer|Elisherer]] 08:09, 29 March 2012 (CEST)

Elisherer there is a bug in your program, when it tries to read .cia files which do not have a 'SMDH' or banner, like in the case of TWL converted applications and some old .CIA files, 3DS Explorer crashes. It is possible to read these kind of .CIA file in 3DSExplorer by entering a false banner size, so I know this is where the problem lies. Can you patch 3DSExplorer to read .cia files and not try to load information on banners when the banner size is '0'--[[User:3dsguy|3dsguy]] 02:25, 18 May 2012 (CEST)
:I don't really understand the problem...if you look at mdlCIA.cs file you'll see that i'm checking if the bannerLength > 0 so I wouldn't know what to change here.. --[[User:Elisherer|Elisherer]] 10:45, 18 May 2012 (CEST)
::Edit the sample .CIA on the .CIA wiki page and make the banner size zero, then try to open it 3DSExplorer. On my computer this causes 3DSExplorer to crash--[[User:3dsguy|3dsguy]] 12:50, 18 May 2012 (CEST)
::Sorry correction, it crashes when you try to open a .cia file(that has no banner size) when it is associated to be run with 3DSExplorer. But if you try to load a .cia file(that has no banner size) from the open file tab of 3DSExplorer, it tells me that an unhandled exception has occured, "Object reference not set to an instance of an object." --[[User:3dsguy|3dsguy]] 16:57, 18 May 2012 (CEST)
:::OK, I found the bug that you were talking about... If the banner's size is zero I try to put the icons in the file view anyway and that's wrong..I'll try to fix the association bug and release a new version. --[[User:Elisherer|Elisherer]] 10:22, 19 May 2012 (CEST)

Found some more bugs. 3DSExplorer crashes when it tries to open .BNR files and .BCWAV files. For example try the sample .BCWAV and .BNR file in the 0.2 CiTRus release.--[[User:3dsguy|3dsguy]] 12:32, 22 May 2012 (CEST)

I made it be able to send e-mail,but I don't have SMAP server and knowledge about web application.
Here.[https://docs.google.com/folder/d/0B_1DNe-beZjwaWdKME1PTF9zYjA/edit]

--Matyapiro31 14:53, 9 July 2012 (CEST)
:[+]How about release your source codes on Google Drive?
If you want to,everyone can edit it,see on web.
I think it is very good service.--Matyapiro31 14:53, 9 July 2012 (CEST)
::Hi Matyapiro31, thank you for you efforts, the source code is maintained by a version control system, this way i can revert to older versions if necessary, Google Drive can't do it. The source is free to download using checkout or browsing (on the site), You don't need to send feedback because the google code site offers "Issues" you can open and I will respond. --[[User:Elisherer|Elisherer]] 08:01, 10 July 2012 (CEST)

Thank you to reply me.

I think it is easier for light-users to send mails than to write comments on Google Code ----people who can debug,find solution of error,use software without seeing any helps is worth being called "Hacker".but they are minority in the 3DS game player.It is nice try to construct a system to send feedbacks easily.

This is the time to decide 3DS homebrew standard including support, internationalism,extensibility and easy development.--Matyapiro31 13:42, 10 July 2012 (CEST)

@elisherer are you going to update 3DSExplorer to read CIA files differently as with the updated specs(this includes reading the .ICN flags)? Also what about allowing the .CFA (NCCH) format to be read without renaming to .CXI, and destinguishing between CFA and CXI when viewing a CCI/CSU in 3DSExplorer?--[[User:3dsguy|3dsguy]] 20:10, 20 July 2012 (CEST)

Why don't you add the function to read-and-write phtcache.bin?
3DSCamera use the file to find the videos and pictures in ''SDDIR''/DCIM/XXXNIN03,but I succeeded to read a picture in other folder by changing it.
:That's nice, but I work only on small stuff for now because i'm very busy.. maybe in the future if it becomes necessary --[[User:Elisherer|Elisherer]] 00:31, 16 January 2013 (CET)

I changed bad codes.[https://docs.google.com/file/d/0B_1DNe-beZjwdHgxMEVBRnkxNTg/edit?usp=sharing MarshalUtil.cs]
--Matyapiro31 15:20, 14 February 2013 (CET)

Main Page/Navigation

2013-02-14T12:51:51Z

Matyapiro31: change the view of menu smarter.

{{Main page box|Navigation|Main Page/Navigation}}
<div style="margin: -.3em -1em -1em -1em;">
{| width="100%" bgcolor="#fff" border="0" cellpadding="2px" cellspacing="2px" style="margin:auto;"
|- align="center" bgcolor="#e7eef6"
! width="25%" | '''General'''
! width="25%" | '''3DS hardware'''
! width="25%" | '''3DS software'''
! width="25%" | '''3DS software'''
|- valign="top" style="background: #F5FAFF;"
|
*[[3DS exploits]]
*[[Glossary]]
*[[FAQ]]
*[[Friend code]]
*[[Games]]
*[[Serials]]
*[[:Category:PC utilities|PC Utilities]]
|
*[[Hardware]]
*[[Peripherals]]
*[[Gamecards]]
*[[Video Capture]]
|
*[[Nintendo Software]]
*[[3DS Development Unit Software]]
*[[Memory layout]]
*[[Services API]]
*[[SVC|List of systemcalls]]
*[[IO|List of IO registers]]
*[[:Category:Kernel_objects|Kernel objects]]
|
*[[:Category:File_formats|File Formats]] ([[NCSD|CCI]]/[[NCCH#CXI|CXI]]/[[CIA]])
*[[Title list]]
*[[Title metadata]]
*[[Update Data]]
*[[SD Filesystem]]
*[[Flash Filesystem]]
*[[Bootloader]]
*[[Savegames]]
|}
</div>
{{box-footer-empty}}

FLASH CARD

2013-02-03T07:09:59Z

Matyapiro31: moved FLASH CARD to Trash:FLASH CARD: NO ILLEGAL COPY HERE

#REDIRECT [[Trash:FLASH CARD]]

Talk:3DSExplorer

2013-01-15T09:54:49Z

Matyapiro31: /* questions */

Now I figured that I didn't explain the target of this app... It's suppose to be an Explorer like program to see inside the different filesystems that the 3ds has. Now it's the ExeFS, RomFS and SAVE. As knownledge keep flowing i'll continue to develop the application. With the goal of making a full functional drag&drop file explorer for image files. --[[User:Elisherer|Elisherer]] 18:35, 15 September 2011 (CEST)

It fails showing the tmd file content. Have you finshed working on this feature?--[[User:Lazymarek9614|Lazymarek9614]] 15:49, 20 September 2011 (CEST)
:No, I don't have time to work on it..it's not interesting enough --[[User:Elisherer|Elisherer]] 15:36, 21 September 2011 (CEST)
::Yeah, the 3DS doesn't care when the tmd file was modified... it's not useful for hacking.--[[User:Lazymarek9614|Lazymarek9614]] 21:09, 21 September 2011 (CEST)

I downloaded the sources,but I can't find Save.cs and reference "System.Development". Matyapiro31
:You are right... I fixed it.. notice that the source is not the released version it has some experimental stuff in it... --[[User:Elisherer|Elisherer]] 10:53, 30 September 2011 (CEST)

Do you know [http://monodevelop.com/ Mono Develop]?
You can release it as multi-patform,such as Linux,Machitosh,etc.
:I did not know that until now. But I don't have time to make the transition. I'm happy with VS2008 and it's relatively easy to make changes and new features for the app. The source is open and you can make a linux port if you want. --[[User:Elisherer|Elisherer]] 18:16, 30 September 2011 (CEST)
:You need no change.mono can run c# program like Java VM. Matyapiro31
::I tried to compile it,but That was old one,and there is "System.development."
:::[http://stackoverflow.com/questions/5865060/c-on-os-x-and-linux This] says that I need to fix stuff after I convert my project. and then work with the mono app which I don't find very convinient... and about the reference I don't know what it's about..I don't know a namespace called System.Development --[[User:Elisherer|Elisherer]] 17:42, 2 October 2011 (CEST) (P.s you can sign your messages with the quick signature button or 4 tildes: '~' 4 times)

lblBrew_Click() had no exception handler,

you have to change this method in fmExplorer.cs to
private void lblBrew_Click(object sender, EventArgs e)
{
try
{
System.Diagnostics.Process.Start(lblBrew.Text);
}
catch (Exception ex)
{
MessageBox.Show("Cannot open link that was clicled.\n"+ ex.Message);
}
}

Matyapiro31

The algorithm for the Image Hash might be either MD2 or MD4. I found out by using HxD and Notepad. --[[User:Kiddyshaq34|Kiddyshaq34]]
:Ok, but of what? (i know it's suppose to be 128 bit) And why not MD-5? --[[User:Elisherer|Elisherer]] 07:10, 9 October 2011 (CEST)
::Because MD5 is longer and the Image Hash has the same number of bytes as MD2 and MD4.
:::MD2, 4 & 5 are all 128bit which is 0x10 bytes... --[[User:Elisherer|Elisherer]] 20:28, 9 October 2011 (CEST)
::::Oh, I've forgotten about MD5. You are right.

3DS include RSA Securuty 's [http://www.rsa.com/node.aspx?id=1204 BSafe]

from 3DS manual. Matyapiro31
:Thanks Matyapiro31 but I think RSA is used for encryption and *not* hashing. So the RSA might be used for ROMs and WiFi... --[[User:Elisherer|Elisherer]] 14:48, 9 October 2011 (CEST)

あほ。RSA BSafe support all security method.See [http://www.rsa.com/japan/products/bsafe/CRYPTOCJ_DS_1101-J.pdf this.]

I cannot find English version,sorry.
Matyapiro31
:I guess if you mean [http://www.rsa.com/node.aspx?id=3063 this] then the digest algorithms are the ones that we know of..we havn't tried HMAC yet or CNG but from experience we see that nintendo uses regular digest algorithms like CRC16-Modbus and SHA-256. I'll add the HMAC ones to the brute force hash tool to see if it finds something... --[[User:Elisherer|Elisherer]] 22:36, 12 October 2011 (CEST)

I've tried to decrypt 'Super Mario 3D Land' but your tool shows me an 'Corrupt Save File' error.--[[User:Lazymarek9614|Lazymarek9614]] 18:36, 18 November 2011 (CET)
:Corrupted save file might be from 2 reasons: * Size is not right (128K or 512k) * CRC on wearleveling wrong. Both problems occur from NDS adapter plus malfunctioning...try blowing on the cart and the adapter and download the savefile again... --[[User:Elisherer|Elisherer]] 20:16, 18 November 2011 (CET)
::I actually don't use the useless NDS Adapter Plus, but I used DSM and I've tried it two times (always the same data).. I hope Nintendo doesn't use a new encryption now! Shall I send you the sav file?--[[User:Lazymarek9614|Lazymarek9614]] 20:27, 18 November 2011 (CET)
:::Yes please, I could check it within the application... --[[User:Elisherer|Elisherer]] 20:35, 18 November 2011 (CET)
::::Have you found anything?--[[User:Lazymarek9614|Lazymarek9614]] 21:25, 18 November 2011 (CET)
:::::No..it's seems that the key found isn't the right key (even that it appears 4 times in the file). we need to figure out how to decrypt the save files without searching blindly for the key. --[[User:Elisherer|Elisherer]] 21:33, 18 November 2011 (CET)
:::::I got an idea. Xor the image's 0x100-0x103 with every (0x200 block)'s 0x100-0x103 to see if it produces 'DISA' ..it should work with the already known files and might be faster to find. i'll try it tomorrow.. --[[User:Elisherer|Elisherer]] 21:40, 18 November 2011 (CET)
::::::Mind linking to a SM3DL save here so I could look at it?(Btw, you're not looking for a "key", you're looking for an AES-CTR xorpad.) --[[User:Yellows8|Yellows8]] 06:03, 22 November 2011 (CET)
:::::::I'll ask for permission. In the meanwhile, can we talk about it at n-dev.net? I made a [http://n-dev.net/showthread.php?tid=4 thread] there. --[[User:Elisherer|Elisherer]] 16:26, 22 November 2011 (CET)
::::::::Yes, you can share them!--[[User:Lazymarek9614|Lazymarek9614]] 17:24, 22 November 2011 (CET)
:::::::Catch the files on my server [http://www.sherer.co.il/saves http://www.sherer.co.il/saves] (Super Mario 3D Land).--[[User:Elisherer|Elisherer]] 17:43, 22 November 2011 (CET)
::::::::I'm stumped too. Since some chunks of data appears several times in these saves, in theory the CTR should still be repeating.(CTR seems to repeat >0x200 bytes now, not sure.) Didn't really manage to decrypt much via xor. --[[User:Yellows8|Yellows8]] 22:08, 22 November 2011 (CET)
::::::::I would guess they finally fixed the bug that limited the xor stream to just 0x200 bytes repeating, and now it behaves more like the data saved to SD cards? --[[User:Neimod|Neimod]] 01:30, 25 November 2011 (CET)
::::::::But you can see that same blocks share the same xorpad in the file...the DISA header is in the file 4 times and encrypted the same all the 4 times.. so the key may not repeat but maybe every block has it's own xorpad based on its offset in the image (my speculation) --[[User:Elisherer|Elisherer]] 09:02, 25 November 2011 (CET)

== *FS#.bin decrypt ==
Maybe I found the key: I think it's the unknown value at Rom. It's 16 characters long.
When I use it, it doesn't give a error or something.
--[[User:Gericom|Gericom]] 16:06, 12 December 2011 (CET)

== Extracting Data Files? ==

Hello! I'm SuperMario64DS, I hack Mario Kart Wii & The Super Mario Galaxy 1 & 2 ( Co-creator of the BDL Editor!). Okay, so I was wondering about extracting files from a 3DS ROM; can the program do that? I think I heard some where that it can decrypt 3DS ROMS and veiw their filesystem, is this true? And if not, will his feature be added? And if so, will an option to extract files from a ROM be added? I've been looking into studying Mario Kart 7's formats, and to see how to game works. --[[User:SuperMario64DS|SuperMario64DS]], 04:43, 20 December 2011 (CET)
:As soon as you get the 3ds common key we could decrpyt the romfs & exefs from the CXIs and then learn the file system... We could however have your help in understanding the CGFX format which has 3d models in it. --[[User:Elisherer|Elisherer]] 07:22, 20 December 2011 (CET)

::Well how faraway would you say we are from decrypting 3DS ROMs? I'd REALLY like to see inside of Mario Kart 7, I know it uses Yaz0, so it can be de-coded. 1: How might we find the decryption key? And 2: How much more longer do you think it will be until we can extract a 3DS ROM's file system? It would be really helpful. -- [[User:SuperMario64DS|SuperMario64DS]], 16:34, 20 December 2011 (CET)
:::We are VERY far. (but then again it could happen any day). Nintendo was smart enough to use AES-CTR which is a very strong encryption which can't be cracked even if you have encrypted and decrypted data (and even the initialization vector) you basicly need the key and it's far inside the 3ds (maybe even coded in hardware and not just inside the 3ds flash). So unless we were told what the key is I don't see us getting anywhere. For now, we do what we can. --[[User:Elisherer|Elisherer]] 18:29, 20 December 2011 (CET)
::::So, we just need that key? How might we look into the 3DS's Film Ware? Or couldn't you just observe the "Lock" (The 3DS ROM) And find the shape of the "Key"? (Encryption Key). Then if we took the "Lock" apart, we could re-build a replica of the "Key" and un-lock the File System. -- [[User:SuperMario64DS|SuperMario64DS]], 19:59, 20 December 2011 (CET)
:::::We know the "shape" of the key, it's 16 bytes long, combined with an IV you can decypher anything. Please read the rest of the pages on 3dbrew before posting more questions. And you might want to look at [http://gbatemp.net/f201-3ds-hacking-homebrew GBAtemp.net] for more information. --[[User:Elisherer|Elisherer]] 22:01, 20 December 2011 (CET)
::::::You completely missed my point there (A good point too), but since you want me to stop asking questions I will stop. --[[User:SuperMario64DS|SuperMario64DS]], 05:40, 21 December 2011 (CET)
:::::::Please don't stop asking questions. Asking questions leads us to finding things... just ask them in the right place, like GBAtemp or the irc channel. The title of this discussion is "Extracting data files" and clearly it can't happen for now so this talk is useless. --[[User:Elisherer|Elisherer]] 09:30, 21 December 2011 (CET)

== Xentax ==

I would love to get the models from ace combat assault horizon legacy but I know its a long long way off. but if you are looking to decrypt the files you might want to try xentax. they have a whole decompression section and since you have a tool you have some "street credit"
:I rekon you're talking about the website, I looked it up but it doesn't have any information about decryption.. only game file editors.. They do have a program called MultiEx editor (for blizzard files) that seems similiar to 3dsexplorer... --[[User:Elisherer|Elisherer]] 07:28, 29 January 2012 (CET)
:I only mean the other users might be of help on the forum anyway i look and see if anyone else is doing the same kind of work as you and send them your way

== questions ==

Elisherer,
Do you know function "__makeref()" is not defined in CSharp Language Standard?
in /3DSExplorer/Utils/MarshalUtil.cs you really often use it .--Matyapiro31 17:08, 10 February 2012 (CET)

Yes, it's a macro which is deprecated, the new way is too difficult for the purpose of the function using it, so i left it as is (it still works) --[[User:Elisherer|Elisherer]] 13:09, 10 February 2012 (CET)

But for System.Deployment and __makeref() are not defined in gtksharp,so I cannot compile 3DSExplorer.

Other member belonging to 3DBrew,I know a few of C#,therefore I hope some of you achieve compiling through MonoDevelop.

But even now 3DSExplorer crashes if you use Mono Runtime.

You can use Moma to scan 3DSExplorer for Mono compatibility--[[User:Jocopoco|Jocopoco]] 17:14, 10 February 2012 (CET)

Elisherer can you make the entries in the TMD sections editable for cia files?--[[User:3dsguy|3dsguy]] 13:04, 28 March 2012 (CEST)
:Probably, but I want to make an all-around solution for editing because it is needed by other formats too. I might need to add a struct to each line on the list which will include data-type and editable boolean... it might take some time... --[[User:Elisherer|Elisherer]] 08:09, 29 March 2012 (CEST)

Elisherer there is a bug in your program, when it tries to read .cia files which do not have a 'SMDH' or banner, like in the case of TWL converted applications and some old .CIA files, 3DS Explorer crashes. It is possible to read these kind of .CIA file in 3DSExplorer by entering a false banner size, so I know this is where the problem lies. Can you patch 3DSExplorer to read .cia files and not try to load information on banners when the banner size is '0'--[[User:3dsguy|3dsguy]] 02:25, 18 May 2012 (CEST)
:I don't really understand the problem...if you look at mdlCIA.cs file you'll see that i'm checking if the bannerLength > 0 so I wouldn't know what to change here.. --[[User:Elisherer|Elisherer]] 10:45, 18 May 2012 (CEST)
::Edit the sample .CIA on the .CIA wiki page and make the banner size zero, then try to open it 3DSExplorer. On my computer this causes 3DSExplorer to crash--[[User:3dsguy|3dsguy]] 12:50, 18 May 2012 (CEST)
::Sorry correction, it crashes when you try to open a .cia file(that has no banner size) when it is associated to be run with 3DSExplorer. But if you try to load a .cia file(that has no banner size) from the open file tab of 3DSExplorer, it tells me that an unhandled exception has occured, "Object reference not set to an instance of an object." --[[User:3dsguy|3dsguy]] 16:57, 18 May 2012 (CEST)
:::OK, I found the bug that you were talking about... If the banner's size is zero I try to put the icons in the file view anyway and that's wrong..I'll try to fix the association bug and release a new version. --[[User:Elisherer|Elisherer]] 10:22, 19 May 2012 (CEST)

Found some more bugs. 3DSExplorer crashes when it tries to open .BNR files and .BCWAV files. For example try the sample .BCWAV and .BNR file in the 0.2 CiTRus release.--[[User:3dsguy|3dsguy]] 12:32, 22 May 2012 (CEST)

I made it be able to send e-mail,but I don't have SMAP server and knowledge about web application.
Here.[https://docs.google.com/folder/d/0B_1DNe-beZjwaWdKME1PTF9zYjA/edit]

--Matyapiro31 14:53, 9 July 2012 (CEST)
:[+]How about release your source codes on Google Drive?
If you want to,everyone can edit it,see on web.
I think it is very good service.--Matyapiro31 14:53, 9 July 2012 (CEST)
::Hi Matyapiro31, thank you for you efforts, the source code is maintained by a version control system, this way i can revert to older versions if necessary, Google Drive can't do it. The source is free to download using checkout or browsing (on the site), You don't need to send feedback because the google code site offers "Issues" you can open and I will respond. --[[User:Elisherer|Elisherer]] 08:01, 10 July 2012 (CEST)

Thank you to reply me.

I think it is easier for light-users to send mails than to write comments on Google Code ----people who can debug,find solution of error,use software without seeing any helps is worth being called "Hacker".but they are minority in the 3DS game player.It is nice try to construct a system to send feedbacks easily.

This is the time to decide 3DS homebrew standard including support, internationalism,extensibility and easy development.--Matyapiro31 13:42, 10 July 2012 (CEST)

@elisherer are you going to update 3DSExplorer to read CIA files differently as with the updated specs(this includes reading the .ICN flags)? Also what about allowing the .CFA (NCCH) format to be read without renaming to .CXI, and destinguishing between CFA and CXI when viewing a CCI/CSU in 3DSExplorer?--[[User:3dsguy|3dsguy]] 20:10, 20 July 2012 (CEST)

Why don't you add the function to read-and-write phtcache.bin?
3DSCamera use the file to find the videos and pictures in ''SDDIR''/DCIM/XXXNIN03,but I succeeded to read a picture in other folder by changing it.

Category:Kernel objects

2012-12-31T08:17:29Z

Matyapiro31:

List of kernel objects (Note:KXX means Kernel XXX.)

Talk:Video Capture

2012-08-08T01:30:36Z

Matyapiro31: Created page with "Neal Tew succeeded to capture upper screeen. It has Nintendo "unique" system--~~~~"

Neal Tew succeeded to capture upper screeen.
It has Nintendo "unique" system--Matyapiro31 05:30, 8 August 2012 (CEST)

セーブデータ

2012-07-21T04:25:38Z

Matyapiro31:

:<div style="background-color:#FFFFCC; border: 1px solid #BFA3A3; color:#000; margin-bottom: 10px; padding:.3em; text-align:center;"><div class="notice metadata plainlinks" id="stub">''[[image:Exclamation_Point.png]] このページはまだ編集中のページです。3DBrewにログインして[{{fullurl:{{FULLPAGENAME}}|action=edit}} 編集する]ことができます。''</div></div><includeonly>[[Category:Stubs]]</includeonly><noinclude>
''このテンプレートは[[:Category:Stubs|カテゴリ:Stubs]]のタグが付きます。''</noinclude>

This page describes the format, encryption, etc. of savegames stored in 3DS game cartridges/gamecards and SD/NAND. You can find savegames from various 3DS games on the [[Games]] page.

=== Gamecard Savegame Encryption ===

On the 3DS savegames are stored much like on the DS, that is on a FLASH chip in the gamecart. On the DS these savegames were stored in plain-text but on the 3DS a layer of encryption was added. This is highly likely a streamcipher, as the contents of several savegames exhibit the odd behavior that xor-ing certain parts of the savegame together will result in the plain-text appearing.

The reason this works is because the stream cipher used has a period of 512 bytes. That is to say, it will repeat the same keystream after 512 bytes. The way you encrypt with a stream cipher is you XOR your data with the keystream as it is produced. Unfortunately, if your streamcipher repeats and you are encrypting a known plain-text (in our case, zeros) you are basically giving away your valuable keystream.

So how do you use this to decrypt a savegame on a 3DS? First off, you chunk up the savegame into 512 byte chunks. Then, you bin these chunks by their contents, discarding any that contain only FF. Now look for the most common chunk. This is your keystream. Now XOR the keystream with your original savegame and you should have a fully decrypted savegame. XOR with the keystream again to produce an encrypted savegame.

All savegames, including non-gamecard savegames, are encrypted with AES-CTR. The base CTR never changes after savegame creation. The CTR used for gamecard savegames eventually repeats, while non-gamecard savegames don't use a repeating CTR. For the old gamecard CTR method, it repeated every 0x200-bytes. With the new method it repeats at least every 0x1000-bytes, but the exact period isn't known for certain.

Update:

With system version [[2.0.0-4]] the system now uses a different CTR method, which fixed the above flaw. The xorpad seems to repeat in the file but not every 0x200 bytes. So for now it is unknown how to decrypt the newer save files.

'''Games to use the new encryption:'''
* Super Mario 3D Land
* Mario Kart 7
* Need for Speed - The Run

'''Some information:'''
* Old games saves still use the old 0x200-bytes AES-CTR xorpad.
* New games saves can be backed-up and restored.
* The wearleveling stayed the same.
* Xoring two files together can produce some clear text
* It's been spotted that the AES-CTR xorpad repeated after 0x1000 bytes (so it might be the maximum length but still it's not proved).

=== Wear leveling ===

The 3DS employs a wear leveling scheme on the savegame FLASH chips. This is done through the usage of blockmaps and a journal. The blockmap is located at offset 0 of the flash chip, and is immediately followed by the journal. The initial state is dictated by the blockmap, and the journal is then applied to that.

First, there are 8 bytes whose purposes are currently unknown. Then comes the actual blockmap.
The blockmap structure is simple:
<pre>
struct header_entry {
uint8_t phys_sec; // when bit7 is set, block has checksums, otherwise checksums are all zero
uint8_t alloc_cnt;
uint8_t chksums[8];
} __attribute__((__packed__));
</pre>

There's one entry per sector, counting from physical sector 1 (sector 0 contains the blockmap/journal).

The 2 bytes that follow the blockmap are the CRC16 (with starting value 0xFFFF (like modbus)) of the first 8 bytes and the blockmap.

Then comes the journal.
The journal structure is as follows:
<pre>
struct sector_entry {
uint8_t virt_sec; // Mapped to sector
uint8_t prev_virt_sec; // Physical sector previously mapped to
uint8_t phys_sec; // Mapped from sector
uint8_t prev_phys_sec; // Virtual sector previously mapped to
uint8_t phys_realloc_cnt; // Amount of times physical sector has been remapped
uint8_t virt_realloc_cnt; // Amount of times virtual sector has been remapped
uint8_t chksums[8];
} __attribute__((__packed__));

struct long_sector_entry{
struct sector_entry sector;
struct sector_entry dupe;
uint32_t magic;
}__attribute__((__packed__));
</pre>

With magic being a constant 0x080d6ce0.

The checksums in the blockmap/journal entries work as follows:
* each byte is the checksum of an encrypted 0x200 bytes large block
* to calculate the checksum, a CRC16 of the block (with starting value 0xFFFF) is calculated, and the two bytes of the CRC16 are XORed together to produce the 8bit checksum

=== Partitions ===

There can be multiple partitions on the chip.
The partitions are represented by tables of DIFI blobs inside a DISA structure.
The order of the DIFI blobs is the order of the partitions in the chip.

'''DISA'''

* If the uint32 @ 0x168 into the image in the DISA(the low 8-bits) is non-zero, then first table is is hashed, otherwise the second DIFI table is hashed.
* If the table has more then 1 DIFI then the uint32 @ 0x168 is the offset from the DATA partition to the file base (masked with 0xFFFFFFFE).
* At offset 0x0 in the image is a 0x10-byte MAC over the 0x100-byte DISA/DIFF, it might be AES-CCM MAC but it's unknown for certain. The following 0xf0-bytes after the MAC normally must be zero, it's unknown whether this can ever be non-zero.

{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x00
| 4
| Magic ("DISA")
|-
| 0x04
| 4
| Magic Number (0x40000)
|-
| 0x08
| 8
| Partition table size
|-
| 0x10
| 8
| Offset to primary partition table in DISA
|-
| 0x18
| 8
| Offset to secondary partition table in DISA
|-
| 0x20
| 8
| Partition table's length
|-
| 0x28
| 8
| SAVE Partition entry offset in the partition table
|-
| 0x30
| 8
| SAVE Partition entry length in the partition table
|-
| 0x38
| 8
| DATA Partition entry offset in the partition table
|-
| 0x40
| 8
| DATA Partition entry length in the partition table
|-
| 0x48
| 8
| SAVE Partition offset
|-
| 0x50
| 8
| SAVE Partition length
|-
| 0x58
| 8
| DATA Partition offset
|-
| 0x60
| 8
| DATA Partition length
|-
| 0x68
| 4
| Active table (and the offset to the filebase)
|-
| 0x6C
| 0x20
| Hash from active table
|-
| 0x8C
| 4*29
| Unknown
|}

* The hash in the DISA hashes the Active Table (starting from tables's offset to tables's offset + table length) with SHA256.

* The partitions offsets points to a 0x1000 long block which isn't understood yet. The actual information starts after that block.

The DIFIs table @ 0x200 (into the image) is written twice, (Meaning, if there's 4 DIFI blobs then the table is 2 DIFIs long).

The second table is for backup. The active table is mentioned at 0x13C into the image (1=First table, other=Second Table)

'''DIFF'''

* This is the [[extdata]] equivalent of DISA, for extdata which use FS. DIFF is *only* used with extdata, not regular savegames.

* When the active-table field low 8-bits is non-zero, the primary partition is used. Otherwise, the secondary partition is used.

{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x00
| 4
| Magic ("DIFF")
|-
| 0x04
| 4
| Magic Number (0x30000)
|-
| 0x08
| 8
| Primary partition table offset
|-
| 0x10
| 8
| Secondary partition table offset
|-
| 0x18
| 8
| Partition table length
|-
| 0x20
| 4
| Active table (and the offset to the filebase)
|-
| 0x24
| 0x20
| Unknown
|-
| 0x34
| 0x20
| Hash of the active partition table
|-
| 0x54
| 0x1ac
| Unknown
|}

'''DIFI'''

These 0x130 large blobs describe the partitions. Every DIFI blob describes a partition. Partitions are catted together, so after the end of one partition is the beginning of the next.

Actually DIFI blobs are 0x12C large because the last 4 are not used and appear 0xFFFFFFFF at the encrypted image.

For most games there's only 1 partition (The SAVE partition) and some (like Asphalt 3D, Steel Diver & Lego Star Wars III) has 2 partitions.

* 2 Partitions means that the files inside the SAVE partition is on the other partition (we would call it DATA partition).

* No more than 2 partitions have been seen yet (and can't be because of the DISA known structure).

{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x00
| 4
| Magic ("DIFI")
|-
| 0x04
| 4
| Magic Number (0x10000)
|-
| 0x08
| 8
| Offset to "IVFC" blob in DIFI (usually 0x44)
|-
| 0x10
| 8
| Size of "IVFC" blob
|-
| 0x18
| 8
| Offset to "DPFS" blob in DIFI (usually 0xBC)
|-
| 0x20
| 8
| Size of "DPFS" blob
|-
| 0x28
| 8
| Offset to the hash in DIFI (usually 0x010C)
|-
| 0x30
| 8
| Size of this hash
|-
| 0x38
| 4
| Flags (when this byte is non-zero, this is a DATA partition)
|-
| 0x3C
| 8
| File base offset (for DATA partitions)
|}

'''IVFC'''

{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x00
| 4
| Magic ("IVFC")
|-
| 0x04
| 4
| Magic Number (0x20000)
|-
| 0x08
| 8
| Unknown (0x20?)
|-
| 0x10
| 8
| First Hash Offset
|-
| 0x18
| 8
| First Hash Length
|-
| 0x20
| 8
| First Hash Block Size (1<<value)
|-
| 0x28
| 8
| Second Hash Offset
|-
| 0x30
| 8
| Second Hash Length
|-
| 0x38
| 8
| Second Hash Block Size (1<<value)
|-
| 0x40
| 8
| HashTable Offset
|-
| 0x48
| 8
| HashTable Length
|-
| 0x50
| 8
| HashTable Block Size (1<<value)
|-
| 0x58
| 8
| FileSystem Offset
|-
| 0x60
| 8
| FileSystem Length
|-
| 0x68
| 8
| FileSystem Block Size (1<<value)
|-
| 0x70
| 8
| Unknown (usually 0x78=120)
|-
|}

* First & Second hash are not understood yet.

'''DPFS'''

{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x00
| 4
| Magic ("DPFS")
|-
| 0x04
| 4
| Magic Number (0x10000)
|-
| 0x08
| 8
| Offset To First table
|-
| 0x10
| 8
| First table length
|-
| 0x18
| 8
| First table block size (1<<value)
|-
| 0x20
| 8
| Offset To Second table
|-
| 0x28
| 8
| Second table length
|-
| 0x30
| 8
| Second table block size (1<<value)
|-
| 0x38
| 8
| Offset to Data
|-
| 0x40
| 8
| Data Length
|-
| 0x48
| 8
| Data block size (1<<value)
|-
|}

* Every block this table point to is written twice (concatenated). You can see that the offset to the next block is twice the length (except the data which always begin after 0x1000).

The first partition's data starts at 0x2000. First comes the hashtable (usually start @ 0x40 into the partition) and then the filesystem.

The hashtable entries' size is 2^x where x is the 'Hashed block size' from the IVFC block.

'''Hash'''

After the DIFI,IVFC & DPFS comes a 0x20 long hash, it is unknown what it's hashing.

'''Summary Drawing'''

[[File:Sfimg_drawing.png]]

==== The SAVE partition ====

* The SAVE filesystem works with a backup. There are two SAVE blocks inside the partition concatenated. Which SAVE block is the updated one is unknown yet.. (I'm guessing from experience that (image[0x100B] & 0x20) == 0x20 --> 1st SAVE --[[User:Elisherer|Elisherer]] 01:30, 18 October 2011 (CEST))

'''Finding the folders table:'''
* If DATA partition exists: At folder table exact offset from the SAVE struct (from the beginning of the struct).
* Otherwise: The 'folder table offset' * 'folder table media' (=0x200) from the 'filestore offset'. (usually 0 from filebase)

'''Finding the files table:'''
* If DATA partition exists: At file table exact offset from the SAVE struct (from the beginning of the struct).
* Otherwise: The 'file table offset' * 'file table media' (=0x200) from the 'filestore offset'.

'''Detemining the filestore base:'''
* If DATA partition exists: At file base from the DATA's DIFI struct into the DATA partition.
* Otherwise: At the 'filestore offset' from the beginning of the SAVE struct.

Folder's entry structure:
<pre>
struct folder_entry {
u32 parent_folder_index;
u8 filename[0x10];
u32 folder_index;
u32 unk1;
u32 last_file_index;
u32 unk3;
u32 unk4;
}
</pre>

File's entry structure:
<pre>
struct file_entry {
u32 parent_folder_index;
u8 filename[0x10];
u32 index;
u32 unk1; // magic?
u32 block_offset;
u64 file_size;
u32 unk2; // flags?
u32 unk3;
}
</pre>

The first entry in both tables is the count of the table, the parent directory index will be the amount of table rows. The root includes itself, so there are the amount - 1 (minus one) folders in the root directory (or files). The entries that follow after the root are the actual folders/files.

Reading the files out is as simple as taking the file base offset and adding (block_offset * 0x200) to it.

Here's a follow-up example from the Legend of Zelda: Ocarina of Time 3D:
<pre>
//FST entry = SAVE base + File base + (FST offset * 0x200) + (FST entry # * 0x30)
//0x2600 = 0x2000 + 0x400 + (0x1 * 0x200) + (0x0 * 0x30)

00002600: 03000000 09000000 00000000 00000000 ................
00002610: 00000000 00000000 00000000 00000000 ................
00002620: 00000000 00000000 00000000 00000000 ................
00002630: 01000000 73797374 656D2E64 61740000 ....system.dat..
00002640: 00000000 00000000 D57B1100 02000000 ........Õ{......
00002650: 22000000 00000000 E8121500 00000000 ".......è.......
00002660: 01000000 73617665 30302E62 696E0000 ....save00.bin..
00002670: 00000000 01000000 69921100 03000000 ........i’......
00002680: DC140000 00000000 04000000 00000000 Ü...............
</pre>

{| class="wikitable"
|-
! Start
! Length
! Description
|-
| 0x00
| 4
| Magic ("SAVE")
|-
| 0x04
| 4
| Magic Number (0x40000)
|-
| 0x08
| 8
| Offset to data in this SAVE header(normally 0x20)
|-
| 0x10
| 8
| Partition Size [medias]
|-
| 0x18
| 4
| Partition Media Size
|-
| 0x1C
| 8
| Unknown
|-
| 0x24
| 4
| Unknown
|-
| 0x28
| 8
| FolderMap Offset
|-
| 0x30
| 4
| FolderMap Size
|-
| 0x34
| 4
| FolderMap Media Size
|-
| 0x38
| 8
| FileMap Offset
|-
| 0x40
| 4
| FileMap Size
|-
| 0x44
| 4
| FileMap Media Size
|-
| 0x48
| 8
| BlockMap Offset
|-
| 0x50
| 4
| BlockMap Size
|-
| 0x54
| 4
| BlockMap Media Size
|-
| 0x58
| 8
| File store offset (from SAVE)
|-
| 0x60
| 4
| File store length [medias]
|-
| 0x64
| 4
| File store media size
|-
| 0x68
| 4/8
| Folders Table offset (8 bytes in DATA)
|-
| 0x6C
| 4
| Folders Table Length (medias) (Only in no DATA)
|-
| 0x70
| 4
| Folders Table unknown
|-
| 0x74
| 4
| Folders Table Media size
|-
| 0x78
| 4/8
| Files Table offset (8 bytes in DATA)
|-
| 0x7C
| 4
| Files Table Length (medias) (Only in no DATA)
|-
| 0x80
| 4
| Files Table unknown
|-
| 0x84
| 4
| Files Table Media size
|-
|}

* The FolderMap and FileMap still unknown. They are tables of uint32.
* The BlockMap is a map of the blocks in the filestore. An entry in the BlockMap is 2 uint32: {uint32 start_block; uint32 end_block; }. This is still being researched. (You can use [[3DSExplorer]] to see those maps.

'''Summary Drawing'''

[[File:Sfsave_drawing.png]]

=== Initialization ===

When a save FLASH contains all xFFFF blocks it's assumed uninitialized by the game cartridges and it initializes default data in place, without prompting the user. The 0xFFFFFFFF blocks are uninitialized data. When creating a non-gamecard savegame and other images/files, it's initially all 0xFFFFFFFF until it's formatted where some of the blocks are overwritten with encrypted data.

I got a new game SplinterCell3D-Pal and I downloaded the save and it was 128KB of 0xFF, except the first 0x10 bytes which were the letter 'Z' (uppercase) --[[User:Elisherer|Elisherer]] 22:41, 15 October 2011 (CEST)

=== Fun Facts ===

If you have facts that you found out by looking at the binary files please share them here:

* From one save to another the game backups the last files that were in the partition and the entire image header in "random" locations.. --[[User:Elisherer|Elisherer]] 22:41, 15 October 2011 (CEST)

[[Category:Stubs]]

[[Savegames|English]]

セーブデータ

2012-07-21T04:24:42Z

Matyapiro31:

Talk:3DSExplorer

2012-07-10T09:42:06Z

Matyapiro31: /* questions */

Now I figured that I didn't explain the target of this app... It's suppose to be an Explorer like program to see inside the different filesystems that the 3ds has. Now it's the ExeFS, RomFS and SAVE. As knownledge keep flowing i'll continue to develop the application. With the goal of making a full functional drag&drop file explorer for image files. --[[User:Elisherer|Elisherer]] 18:35, 15 September 2011 (CEST)

It fails showing the tmd file content. Have you finshed working on this feature?--[[User:Lazymarek9614|Lazymarek9614]] 15:49, 20 September 2011 (CEST)
:No, I don't have time to work on it..it's not interesting enough --[[User:Elisherer|Elisherer]] 15:36, 21 September 2011 (CEST)
::Yeah, the 3DS doesn't care when the tmd file was modified... it's not useful for hacking.--[[User:Lazymarek9614|Lazymarek9614]] 21:09, 21 September 2011 (CEST)

I downloaded the sources,but I can't find Save.cs and reference "System.Development". Matyapiro31
:You are right... I fixed it.. notice that the source is not the released version it has some experimental stuff in it... --[[User:Elisherer|Elisherer]] 10:53, 30 September 2011 (CEST)

Do you know [http://monodevelop.com/ Mono Develop]?
You can release it as multi-patform,such as Linux,Machitosh,etc.
:I did not know that until now. But I don't have time to make the transition. I'm happy with VS2008 and it's relatively easy to make changes and new features for the app. The source is open and you can make a linux port if you want. --[[User:Elisherer|Elisherer]] 18:16, 30 September 2011 (CEST)
:You need no change.mono can run c# program like Java VM. Matyapiro31
::I tried to compile it,but That was old one,and there is "System.development."
:::[http://stackoverflow.com/questions/5865060/c-on-os-x-and-linux This] says that I need to fix stuff after I convert my project. and then work with the mono app which I don't find very convinient... and about the reference I don't know what it's about..I don't know a namespace called System.Development --[[User:Elisherer|Elisherer]] 17:42, 2 October 2011 (CEST) (P.s you can sign your messages with the quick signature button or 4 tildes: '~' 4 times)

lblBrew_Click() had no exception handler,

you have to change this method in fmExplorer.cs to
private void lblBrew_Click(object sender, EventArgs e)
{
try
{
System.Diagnostics.Process.Start(lblBrew.Text);
}
catch (Exception ex)
{
MessageBox.Show("Cannot open link that was clicled.\n"+ ex.Message);
}
}

Matyapiro31

The algorithm for the Image Hash might be either MD2 or MD4. I found out by using HxD and Notepad. --[[User:Kiddyshaq34|Kiddyshaq34]]
:Ok, but of what? (i know it's suppose to be 128 bit) And why not MD-5? --[[User:Elisherer|Elisherer]] 07:10, 9 October 2011 (CEST)
::Because MD5 is longer and the Image Hash has the same number of bytes as MD2 and MD4.
:::MD2, 4 & 5 are all 128bit which is 0x10 bytes... --[[User:Elisherer|Elisherer]] 20:28, 9 October 2011 (CEST)
::::Oh, I've forgotten about MD5. You are right.

3DS include RSA Securuty 's [http://www.rsa.com/node.aspx?id=1204 BSafe]

from 3DS manual. Matyapiro31
:Thanks Matyapiro31 but I think RSA is used for encryption and *not* hashing. So the RSA might be used for ROMs and WiFi... --[[User:Elisherer|Elisherer]] 14:48, 9 October 2011 (CEST)

あほ。RSA BSafe support all security method.See [http://www.rsa.com/japan/products/bsafe/CRYPTOCJ_DS_1101-J.pdf this.]

I cannot find English version,sorry.
Matyapiro31
:I guess if you mean [http://www.rsa.com/node.aspx?id=3063 this] then the digest algorithms are the ones that we know of..we havn't tried HMAC yet or CNG but from experience we see that nintendo uses regular digest algorithms like CRC16-Modbus and SHA-256. I'll add the HMAC ones to the brute force hash tool to see if it finds something... --[[User:Elisherer|Elisherer]] 22:36, 12 October 2011 (CEST)

I've tried to decrypt 'Super Mario 3D Land' but your tool shows me an 'Corrupt Save File' error.--[[User:Lazymarek9614|Lazymarek9614]] 18:36, 18 November 2011 (CET)
:Corrupted save file might be from 2 reasons: * Size is not right (128K or 512k) * CRC on wearleveling wrong. Both problems occur from NDS adapter plus malfunctioning...try blowing on the cart and the adapter and download the savefile again... --[[User:Elisherer|Elisherer]] 20:16, 18 November 2011 (CET)
::I actually don't use the useless NDS Adapter Plus, but I used DSM and I've tried it two times (always the same data).. I hope Nintendo doesn't use a new encryption now! Shall I send you the sav file?--[[User:Lazymarek9614|Lazymarek9614]] 20:27, 18 November 2011 (CET)
:::Yes please, I could check it within the application... --[[User:Elisherer|Elisherer]] 20:35, 18 November 2011 (CET)
::::Have you found anything?--[[User:Lazymarek9614|Lazymarek9614]] 21:25, 18 November 2011 (CET)
:::::No..it's seems that the key found isn't the right key (even that it appears 4 times in the file). we need to figure out how to decrypt the save files without searching blindly for the key. --[[User:Elisherer|Elisherer]] 21:33, 18 November 2011 (CET)
:::::I got an idea. Xor the image's 0x100-0x103 with every (0x200 block)'s 0x100-0x103 to see if it produces 'DISA' ..it should work with the already known files and might be faster to find. i'll try it tomorrow.. --[[User:Elisherer|Elisherer]] 21:40, 18 November 2011 (CET)
::::::Mind linking to a SM3DL save here so I could look at it?(Btw, you're not looking for a "key", you're looking for an AES-CTR xorpad.) --[[User:Yellows8|Yellows8]] 06:03, 22 November 2011 (CET)
:::::::I'll ask for permission. In the meanwhile, can we talk about it at n-dev.net? I made a [http://n-dev.net/showthread.php?tid=4 thread] there. --[[User:Elisherer|Elisherer]] 16:26, 22 November 2011 (CET)
::::::::Yes, you can share them!--[[User:Lazymarek9614|Lazymarek9614]] 17:24, 22 November 2011 (CET)
:::::::Catch the files on my server [http://www.sherer.co.il/saves http://www.sherer.co.il/saves] (Super Mario 3D Land).--[[User:Elisherer|Elisherer]] 17:43, 22 November 2011 (CET)
::::::::I'm stumped too. Since some chunks of data appears several times in these saves, in theory the CTR should still be repeating.(CTR seems to repeat >0x200 bytes now, not sure.) Didn't really manage to decrypt much via xor. --[[User:Yellows8|Yellows8]] 22:08, 22 November 2011 (CET)
::::::::I would guess they finally fixed the bug that limited the xor stream to just 0x200 bytes repeating, and now it behaves more like the data saved to SD cards? --[[User:Neimod|Neimod]] 01:30, 25 November 2011 (CET)
::::::::But you can see that same blocks share the same xorpad in the file...the DISA header is in the file 4 times and encrypted the same all the 4 times.. so the key may not repeat but maybe every block has it's own xorpad based on its offset in the image (my speculation) --[[User:Elisherer|Elisherer]] 09:02, 25 November 2011 (CET)

== *FS#.bin decrypt ==
Maybe I found the key: I think it's the unknown value at Rom. It's 16 characters long.
When I use it, it doesn't give a error or something.
--[[User:Gericom|Gericom]] 16:06, 12 December 2011 (CET)

== Extracting Data Files? ==

Hello! I'm SuperMario64DS, I hack Mario Kart Wii & The Super Mario Galaxy 1 & 2 ( Co-creator of the BDL Editor!). Okay, so I was wondering about extracting files from a 3DS ROM; can the program do that? I think I heard some where that it can decrypt 3DS ROMS and veiw their filesystem, is this true? And if not, will his feature be added? And if so, will an option to extract files from a ROM be added? I've been looking into studying Mario Kart 7's formats, and to see how to game works. --[[User:SuperMario64DS|SuperMario64DS]], 04:43, 20 December 2011 (CET)
:As soon as you get the 3ds common key we could decrpyt the romfs & exefs from the CXIs and then learn the file system... We could however have your help in understanding the CGFX format which has 3d models in it. --[[User:Elisherer|Elisherer]] 07:22, 20 December 2011 (CET)

::Well how faraway would you say we are from decrypting 3DS ROMs? I'd REALLY like to see inside of Mario Kart 7, I know it uses Yaz0, so it can be de-coded. 1: How might we find the decryption key? And 2: How much more longer do you think it will be until we can extract a 3DS ROM's file system? It would be really helpful. -- [[User:SuperMario64DS|SuperMario64DS]], 16:34, 20 December 2011 (CET)
:::We are VERY far. (but then again it could happen any day). Nintendo was smart enough to use AES-CTR which is a very strong encryption which can't be cracked even if you have encrypted and decrypted data (and even the initialization vector) you basicly need the key and it's far inside the 3ds (maybe even coded in hardware and not just inside the 3ds flash). So unless we were told what the key is I don't see us getting anywhere. For now, we do what we can. --[[User:Elisherer|Elisherer]] 18:29, 20 December 2011 (CET)
::::So, we just need that key? How might we look into the 3DS's Film Ware? Or couldn't you just observe the "Lock" (The 3DS ROM) And find the shape of the "Key"? (Encryption Key). Then if we took the "Lock" apart, we could re-build a replica of the "Key" and un-lock the File System. -- [[User:SuperMario64DS|SuperMario64DS]], 19:59, 20 December 2011 (CET)
:::::We know the "shape" of the key, it's 16 bytes long, combined with an IV you can decypher anything. Please read the rest of the pages on 3dbrew before posting more questions. And you might want to look at [http://gbatemp.net/f201-3ds-hacking-homebrew GBAtemp.net] for more information. --[[User:Elisherer|Elisherer]] 22:01, 20 December 2011 (CET)
::::::You completely missed my point there (A good point too), but since you want me to stop asking questions I will stop. --[[User:SuperMario64DS|SuperMario64DS]], 05:40, 21 December 2011 (CET)
:::::::Please don't stop asking questions. Asking questions leads us to finding things... just ask them in the right place, like GBAtemp or the irc channel. The title of this discussion is "Extracting data files" and clearly it can't happen for now so this talk is useless. --[[User:Elisherer|Elisherer]] 09:30, 21 December 2011 (CET)

== Xentax ==

I would love to get the models from ace combat assault horizon legacy but I know its a long long way off. but if you are looking to decrypt the files you might want to try xentax. they have a whole decompression section and since you have a tool you have some "street credit"
:I rekon you're talking about the website, I looked it up but it doesn't have any information about decryption.. only game file editors.. They do have a program called MultiEx editor (for blizzard files) that seems similiar to 3dsexplorer... --[[User:Elisherer|Elisherer]] 07:28, 29 January 2012 (CET)
:I only mean the other users might be of help on the forum anyway i look and see if anyone else is doing the same kind of work as you and send them your way

== questions ==

Elisherer,
Do you know function "__makeref()" is not defined in CSharp Language Standard?
in /3DSExplorer/Utils/MarshalUtil.cs you really often use it .--Matyapiro31 17:08, 10 February 2012 (CET)

Yes, it's a macro which is deprecated, the new way is too difficult for the purpose of the function using it, so i left it as is (it still works) --[[User:Elisherer|Elisherer]] 13:09, 10 February 2012 (CET)

But for System.Deployment and __makeref() are not defined in gtksharp,so I cannot compile 3DSExplorer.

Other member belonging to 3DBrew,I know a few of C#,therefore I hope some of you achieve compiling through MonoDevelop.

But even now 3DSExplorer crashes if you use Mono Runtime.

You can use Moma to scan 3DSExplorer for Mono compatibility--[[User:Jocopoco|Jocopoco]] 17:14, 10 February 2012 (CET)

Elisherer can you make the entries in the TMD sections editable for cia files?--[[User:3dsguy|3dsguy]] 13:04, 28 March 2012 (CEST)
:Probably, but I want to make an all-around solution for editing because it is needed by other formats too. I might need to add a struct to each line on the list which will include data-type and editable boolean... it might take some time... --[[User:Elisherer|Elisherer]] 08:09, 29 March 2012 (CEST)

Elisherer there is a bug in your program, when it tries to read .cia files which do not have a 'SMDH' or banner, like in the case of TWL converted applications and some old .CIA files, 3DS Explorer crashes. It is possible to read these kind of .CIA file in 3DSExplorer by entering a false banner size, so I know this is where the problem lies. Can you patch 3DSExplorer to read .cia files and not try to load information on banners when the banner size is '0'--[[User:3dsguy|3dsguy]] 02:25, 18 May 2012 (CEST)
:I don't really understand the problem...if you look at mdlCIA.cs file you'll see that i'm checking if the bannerLength > 0 so I wouldn't know what to change here.. --[[User:Elisherer|Elisherer]] 10:45, 18 May 2012 (CEST)
::Edit the sample .CIA on the .CIA wiki page and make the banner size zero, then try to open it 3DSExplorer. On my computer this causes 3DSExplorer to crash--[[User:3dsguy|3dsguy]] 12:50, 18 May 2012 (CEST)
::Sorry correction, it crashes when you try to open a .cia file(that has no banner size) when it is associated to be run with 3DSExplorer. But if you try to load a .cia file(that has no banner size) from the open file tab of 3DSExplorer, it tells me that an unhandled exception has occured, "Object reference not set to an instance of an object." --[[User:3dsguy|3dsguy]] 16:57, 18 May 2012 (CEST)
:::OK, I found the bug that you were talking about... If the banner's size is zero I try to put the icons in the file view anyway and that's wrong..I'll try to fix the association bug and release a new version. --[[User:Elisherer|Elisherer]] 10:22, 19 May 2012 (CEST)

Found some more bugs. 3DSExplorer crashes when it tries to open .BNR files and .BCWAV files. For example try the sample .BCWAV and .BNR file in the 0.2 CiTRus release.--[[User:3dsguy|3dsguy]] 12:32, 22 May 2012 (CEST)

I made it be able to send e-mail,but I don't have SMAP server and knowledge about web application.
Here.[https://docs.google.com/folder/d/0B_1DNe-beZjwaWdKME1PTF9zYjA/edit]

--Matyapiro31 14:53, 9 July 2012 (CEST)
:[+]How about release your source codes on Google Drive?
If you want to,everyone can edit it,see on web.
I think it is very good service.--Matyapiro31 14:53, 9 July 2012 (CEST)
::Hi Matyapiro31, thank you for you efforts, the source code is maintained by a version control system, this way i can revert to older versions if necessary, Google Drive can't do it. The source is free to download using checkout or browsing (on the site), You don't need to send feedback because the google code site offers "Issues" you can open and I will respond. --[[User:Elisherer|Elisherer]] 08:01, 10 July 2012 (CEST)

Thank you to reply me.

I think it is easier for light-users to send mails than to write comments on Google Code ----people who can debug,find solution of error,use software without seeing any helps is worth being called "Hacker".but they are minority in the 3DS game player.It is nice try to construct a system to send feedbacks easily.

This is the time to decide 3DS homebrew standard including support, internationalism,extensibility and easy development.--Matyapiro31 13:42, 10 July 2012 (CEST)

Talk:3DSExplorer

2012-07-09T10:53:12Z

Matyapiro31:

Now I figured that I didn't explain the target of this app... It's suppose to be an Explorer like program to see inside the different filesystems that the 3ds has. Now it's the ExeFS, RomFS and SAVE. As knownledge keep flowing i'll continue to develop the application. With the goal of making a full functional drag&drop file explorer for image files. --[[User:Elisherer|Elisherer]] 18:35, 15 September 2011 (CEST)

It fails showing the tmd file content. Have you finshed working on this feature?--[[User:Lazymarek9614|Lazymarek9614]] 15:49, 20 September 2011 (CEST)
:No, I don't have time to work on it..it's not interesting enough --[[User:Elisherer|Elisherer]] 15:36, 21 September 2011 (CEST)
::Yeah, the 3DS doesn't care when the tmd file was modified... it's not useful for hacking.--[[User:Lazymarek9614|Lazymarek9614]] 21:09, 21 September 2011 (CEST)

I downloaded the sources,but I can't find Save.cs and reference "System.Development". Matyapiro31
:You are right... I fixed it.. notice that the source is not the released version it has some experimental stuff in it... --[[User:Elisherer|Elisherer]] 10:53, 30 September 2011 (CEST)

Do you know [http://monodevelop.com/ Mono Develop]?
You can release it as multi-patform,such as Linux,Machitosh,etc.
:I did not know that until now. But I don't have time to make the transition. I'm happy with VS2008 and it's relatively easy to make changes and new features for the app. The source is open and you can make a linux port if you want. --[[User:Elisherer|Elisherer]] 18:16, 30 September 2011 (CEST)
:You need no change.mono can run c# program like Java VM. Matyapiro31
::I tried to compile it,but That was old one,and there is "System.development."
:::[http://stackoverflow.com/questions/5865060/c-on-os-x-and-linux This] says that I need to fix stuff after I convert my project. and then work with the mono app which I don't find very convinient... and about the reference I don't know what it's about..I don't know a namespace called System.Development --[[User:Elisherer|Elisherer]] 17:42, 2 October 2011 (CEST) (P.s you can sign your messages with the quick signature button or 4 tildes: '~' 4 times)

lblBrew_Click() had no exception handler,

you have to change this method in fmExplorer.cs to
private void lblBrew_Click(object sender, EventArgs e)
{
try
{
System.Diagnostics.Process.Start(lblBrew.Text);
}
catch (Exception ex)
{
MessageBox.Show("Cannot open link that was clicled.\n"+ ex.Message);
}
}

Matyapiro31

The algorithm for the Image Hash might be either MD2 or MD4. I found out by using HxD and Notepad. --[[User:Kiddyshaq34|Kiddyshaq34]]
:Ok, but of what? (i know it's suppose to be 128 bit) And why not MD-5? --[[User:Elisherer|Elisherer]] 07:10, 9 October 2011 (CEST)
::Because MD5 is longer and the Image Hash has the same number of bytes as MD2 and MD4.
:::MD2, 4 & 5 are all 128bit which is 0x10 bytes... --[[User:Elisherer|Elisherer]] 20:28, 9 October 2011 (CEST)
::::Oh, I've forgotten about MD5. You are right.

3DS include RSA Securuty 's [http://www.rsa.com/node.aspx?id=1204 BSafe]

from 3DS manual. Matyapiro31
:Thanks Matyapiro31 but I think RSA is used for encryption and *not* hashing. So the RSA might be used for ROMs and WiFi... --[[User:Elisherer|Elisherer]] 14:48, 9 October 2011 (CEST)

あほ。RSA BSafe support all security method.See [http://www.rsa.com/japan/products/bsafe/CRYPTOCJ_DS_1101-J.pdf this.]

I cannot find English version,sorry.
Matyapiro31
:I guess if you mean [http://www.rsa.com/node.aspx?id=3063 this] then the digest algorithms are the ones that we know of..we havn't tried HMAC yet or CNG but from experience we see that nintendo uses regular digest algorithms like CRC16-Modbus and SHA-256. I'll add the HMAC ones to the brute force hash tool to see if it finds something... --[[User:Elisherer|Elisherer]] 22:36, 12 October 2011 (CEST)

I've tried to decrypt 'Super Mario 3D Land' but your tool shows me an 'Corrupt Save File' error.--[[User:Lazymarek9614|Lazymarek9614]] 18:36, 18 November 2011 (CET)
:Corrupted save file might be from 2 reasons: * Size is not right (128K or 512k) * CRC on wearleveling wrong. Both problems occur from NDS adapter plus malfunctioning...try blowing on the cart and the adapter and download the savefile again... --[[User:Elisherer|Elisherer]] 20:16, 18 November 2011 (CET)
::I actually don't use the useless NDS Adapter Plus, but I used DSM and I've tried it two times (always the same data).. I hope Nintendo doesn't use a new encryption now! Shall I send you the sav file?--[[User:Lazymarek9614|Lazymarek9614]] 20:27, 18 November 2011 (CET)
:::Yes please, I could check it within the application... --[[User:Elisherer|Elisherer]] 20:35, 18 November 2011 (CET)
::::Have you found anything?--[[User:Lazymarek9614|Lazymarek9614]] 21:25, 18 November 2011 (CET)
:::::No..it's seems that the key found isn't the right key (even that it appears 4 times in the file). we need to figure out how to decrypt the save files without searching blindly for the key. --[[User:Elisherer|Elisherer]] 21:33, 18 November 2011 (CET)
:::::I got an idea. Xor the image's 0x100-0x103 with every (0x200 block)'s 0x100-0x103 to see if it produces 'DISA' ..it should work with the already known files and might be faster to find. i'll try it tomorrow.. --[[User:Elisherer|Elisherer]] 21:40, 18 November 2011 (CET)
::::::Mind linking to a SM3DL save here so I could look at it?(Btw, you're not looking for a "key", you're looking for an AES-CTR xorpad.) --[[User:Yellows8|Yellows8]] 06:03, 22 November 2011 (CET)
:::::::I'll ask for permission. In the meanwhile, can we talk about it at n-dev.net? I made a [http://n-dev.net/showthread.php?tid=4 thread] there. --[[User:Elisherer|Elisherer]] 16:26, 22 November 2011 (CET)
::::::::Yes, you can share them!--[[User:Lazymarek9614|Lazymarek9614]] 17:24, 22 November 2011 (CET)
:::::::Catch the files on my server [http://www.sherer.co.il/saves http://www.sherer.co.il/saves] (Super Mario 3D Land).--[[User:Elisherer|Elisherer]] 17:43, 22 November 2011 (CET)
::::::::I'm stumped too. Since some chunks of data appears several times in these saves, in theory the CTR should still be repeating.(CTR seems to repeat >0x200 bytes now, not sure.) Didn't really manage to decrypt much via xor. --[[User:Yellows8|Yellows8]] 22:08, 22 November 2011 (CET)
::::::::I would guess they finally fixed the bug that limited the xor stream to just 0x200 bytes repeating, and now it behaves more like the data saved to SD cards? --[[User:Neimod|Neimod]] 01:30, 25 November 2011 (CET)
::::::::But you can see that same blocks share the same xorpad in the file...the DISA header is in the file 4 times and encrypted the same all the 4 times.. so the key may not repeat but maybe every block has it's own xorpad based on its offset in the image (my speculation) --[[User:Elisherer|Elisherer]] 09:02, 25 November 2011 (CET)

== *FS#.bin decrypt ==
Maybe I found the key: I think it's the unknown value at Rom. It's 16 characters long.
When I use it, it doesn't give a error or something.
--[[User:Gericom|Gericom]] 16:06, 12 December 2011 (CET)

== Extracting Data Files? ==

Hello! I'm SuperMario64DS, I hack Mario Kart Wii & The Super Mario Galaxy 1 & 2 ( Co-creator of the BDL Editor!). Okay, so I was wondering about extracting files from a 3DS ROM; can the program do that? I think I heard some where that it can decrypt 3DS ROMS and veiw their filesystem, is this true? And if not, will his feature be added? And if so, will an option to extract files from a ROM be added? I've been looking into studying Mario Kart 7's formats, and to see how to game works. --[[User:SuperMario64DS|SuperMario64DS]], 04:43, 20 December 2011 (CET)
:As soon as you get the 3ds common key we could decrpyt the romfs & exefs from the CXIs and then learn the file system... We could however have your help in understanding the CGFX format which has 3d models in it. --[[User:Elisherer|Elisherer]] 07:22, 20 December 2011 (CET)

::Well how faraway would you say we are from decrypting 3DS ROMs? I'd REALLY like to see inside of Mario Kart 7, I know it uses Yaz0, so it can be de-coded. 1: How might we find the decryption key? And 2: How much more longer do you think it will be until we can extract a 3DS ROM's file system? It would be really helpful. -- [[User:SuperMario64DS|SuperMario64DS]], 16:34, 20 December 2011 (CET)
:::We are VERY far. (but then again it could happen any day). Nintendo was smart enough to use AES-CTR which is a very strong encryption which can't be cracked even if you have encrypted and decrypted data (and even the initialization vector) you basicly need the key and it's far inside the 3ds (maybe even coded in hardware and not just inside the 3ds flash). So unless we were told what the key is I don't see us getting anywhere. For now, we do what we can. --[[User:Elisherer|Elisherer]] 18:29, 20 December 2011 (CET)
::::So, we just need that key? How might we look into the 3DS's Film Ware? Or couldn't you just observe the "Lock" (The 3DS ROM) And find the shape of the "Key"? (Encryption Key). Then if we took the "Lock" apart, we could re-build a replica of the "Key" and un-lock the File System. -- [[User:SuperMario64DS|SuperMario64DS]], 19:59, 20 December 2011 (CET)
:::::We know the "shape" of the key, it's 16 bytes long, combined with an IV you can decypher anything. Please read the rest of the pages on 3dbrew before posting more questions. And you might want to look at [http://gbatemp.net/f201-3ds-hacking-homebrew GBAtemp.net] for more information. --[[User:Elisherer|Elisherer]] 22:01, 20 December 2011 (CET)
::::::You completely missed my point there (A good point too), but since you want me to stop asking questions I will stop. --[[User:SuperMario64DS|SuperMario64DS]], 05:40, 21 December 2011 (CET)
:::::::Please don't stop asking questions. Asking questions leads us to finding things... just ask them in the right place, like GBAtemp or the irc channel. The title of this discussion is "Extracting data files" and clearly it can't happen for now so this talk is useless. --[[User:Elisherer|Elisherer]] 09:30, 21 December 2011 (CET)

== Xentax ==

I would love to get the models from ace combat assault horizon legacy but I know its a long long way off. but if you are looking to decrypt the files you might want to try xentax. they have a whole decompression section and since you have a tool you have some "street credit"
:I rekon you're talking about the website, I looked it up but it doesn't have any information about decryption.. only game file editors.. They do have a program called MultiEx editor (for blizzard files) that seems similiar to 3dsexplorer... --[[User:Elisherer|Elisherer]] 07:28, 29 January 2012 (CET)
:I only mean the other users might be of help on the forum anyway i look and see if anyone else is doing the same kind of work as you and send them your way

== questions ==

Elisherer,
Do you know function "__makeref()" is not defined in CSharp Language Standard?
in /3DSExplorer/Utils/MarshalUtil.cs you really often use it .--Matyapiro31 17:08, 10 February 2012 (CET)

Yes, it's a macro which is deprecated, the new way is too difficult for the purpose of the function using it, so i left it as is (it still works) --[[User:Elisherer|Elisherer]] 13:09, 10 February 2012 (CET)

But for System.Deployment and __makeref() are not defined in gtksharp,so I cannot compile 3DSExplorer.

Other member belonging to 3DBrew,I know a few of C#,therefore I hope some of you achieve compiling through MonoDevelop.

But even now 3DSExplorer crashes if you use Mono Runtime.

You can use Moma to scan 3DSExplorer for Mono compatibility--[[User:Jocopoco|Jocopoco]] 17:14, 10 February 2012 (CET)

Elisherer can you make the entries in the TMD sections editable for cia files?--[[User:3dsguy|3dsguy]] 13:04, 28 March 2012 (CEST)
:Probably, but I want to make an all-around solution for editing because it is needed by other formats too. I might need to add a struct to each line on the list which will include data-type and editable boolean... it might take some time... --[[User:Elisherer|Elisherer]] 08:09, 29 March 2012 (CEST)

Elisherer there is a bug in your program, when it tries to read .cia files which do not have a 'SMDH' or banner, like in the case of TWL converted applications and some old .CIA files, 3DS Explorer crashes. It is possible to read these kind of .CIA file in 3DSExplorer by entering a false banner size, so I know this is where the problem lies. Can you patch 3DSExplorer to read .cia files and not try to load information on banners when the banner size is '0'--[[User:3dsguy|3dsguy]] 02:25, 18 May 2012 (CEST)
:I don't really understand the problem...if you look at mdlCIA.cs file you'll see that i'm checking if the bannerLength > 0 so I wouldn't know what to change here.. --[[User:Elisherer|Elisherer]] 10:45, 18 May 2012 (CEST)
::Edit the sample .CIA on the .CIA wiki page and make the banner size zero, then try to open it 3DSExplorer. On my computer this causes 3DSExplorer to crash--[[User:3dsguy|3dsguy]] 12:50, 18 May 2012 (CEST)
::Sorry correction, it crashes when you try to open a .cia file(that has no banner size) when it is associated to be run with 3DSExplorer. But if you try to load a .cia file(that has no banner size) from the open file tab of 3DSExplorer, it tells me that an unhandled exception has occured, "Object reference not set to an instance of an object." --[[User:3dsguy|3dsguy]] 16:57, 18 May 2012 (CEST)
:::OK, I found the bug that you were talking about... If the banner's size is zero I try to put the icons in the file view anyway and that's wrong..I'll try to fix the association bug and release a new version. --[[User:Elisherer|Elisherer]] 10:22, 19 May 2012 (CEST)

Found some more bugs. 3DSExplorer crashes when it tries to open .BNR files and .BCWAV files. For example try the sample .BCWAV and .BNR file in the 0.2 CiTRus release.--[[User:3dsguy|3dsguy]] 12:32, 22 May 2012 (CEST)

I made it be able to send e-mail,but I don't have SMAP server and knowledge about web application.
Here.[https://docs.google.com/folder/d/0B_1DNe-beZjwaWdKME1PTF9zYjA/edit]

--Matyapiro31 14:53, 9 July 2012 (CEST)
[+]How about release your source codes on Google Drive?

If you want to,everyone can edit it,see on web.

I think it is very good service.--Matyapiro31 14:53, 9 July 2012 (CEST)

Talk:3DSExplorer

2012-07-09T10:47:38Z

Matyapiro31: /* questions */

Now I figured that I didn't explain the target of this app... It's suppose to be an Explorer like program to see inside the different filesystems that the 3ds has. Now it's the ExeFS, RomFS and SAVE. As knownledge keep flowing i'll continue to develop the application. With the goal of making a full functional drag&drop file explorer for image files. --[[User:Elisherer|Elisherer]] 18:35, 15 September 2011 (CEST)

It fails showing the tmd file content. Have you finshed working on this feature?--[[User:Lazymarek9614|Lazymarek9614]] 15:49, 20 September 2011 (CEST)
:No, I don't have time to work on it..it's not interesting enough --[[User:Elisherer|Elisherer]] 15:36, 21 September 2011 (CEST)
::Yeah, the 3DS doesn't care when the tmd file was modified... it's not useful for hacking.--[[User:Lazymarek9614|Lazymarek9614]] 21:09, 21 September 2011 (CEST)

I downloaded the sources,but I can't find Save.cs and reference "System.Development". Matyapiro31
:You are right... I fixed it.. notice that the source is not the released version it has some experimental stuff in it... --[[User:Elisherer|Elisherer]] 10:53, 30 September 2011 (CEST)

Do you know [http://monodevelop.com/ Mono Develop]?
You can release it as multi-patform,such as Linux,Machitosh,etc.
:I did not know that until now. But I don't have time to make the transition. I'm happy with VS2008 and it's relatively easy to make changes and new features for the app. The source is open and you can make a linux port if you want. --[[User:Elisherer|Elisherer]] 18:16, 30 September 2011 (CEST)
:You need no change.mono can run c# program like Java VM. Matyapiro31
::I tried to compile it,but That was old one,and there is "System.development."
:::[http://stackoverflow.com/questions/5865060/c-on-os-x-and-linux This] says that I need to fix stuff after I convert my project. and then work with the mono app which I don't find very convinient... and about the reference I don't know what it's about..I don't know a namespace called System.Development --[[User:Elisherer|Elisherer]] 17:42, 2 October 2011 (CEST) (P.s you can sign your messages with the quick signature button or 4 tildes: '~' 4 times)

lblBrew_Click() had no exception handler,

you have to change this method in fmExplorer.cs to
private void lblBrew_Click(object sender, EventArgs e)
{
try
{
System.Diagnostics.Process.Start(lblBrew.Text);
}
catch (Exception ex)
{
MessageBox.Show("Cannot open link that was clicled.\n"+ ex.Message);
}
}

Matyapiro31

The algorithm for the Image Hash might be either MD2 or MD4. I found out by using HxD and Notepad. --[[User:Kiddyshaq34|Kiddyshaq34]]
:Ok, but of what? (i know it's suppose to be 128 bit) And why not MD-5? --[[User:Elisherer|Elisherer]] 07:10, 9 October 2011 (CEST)
::Because MD5 is longer and the Image Hash has the same number of bytes as MD2 and MD4.
:::MD2, 4 & 5 are all 128bit which is 0x10 bytes... --[[User:Elisherer|Elisherer]] 20:28, 9 October 2011 (CEST)
::::Oh, I've forgotten about MD5. You are right.

3DS include RSA Securuty 's [http://www.rsa.com/node.aspx?id=1204 BSafe]

from 3DS manual. Matyapiro31
:Thanks Matyapiro31 but I think RSA is used for encryption and *not* hashing. So the RSA might be used for ROMs and WiFi... --[[User:Elisherer|Elisherer]] 14:48, 9 October 2011 (CEST)

あほ。RSA BSafe support all security method.See [http://www.rsa.com/japan/products/bsafe/CRYPTOCJ_DS_1101-J.pdf this.]

I cannot find English version,sorry.
Matyapiro31
:I guess if you mean [http://www.rsa.com/node.aspx?id=3063 this] then the digest algorithms are the ones that we know of..we havn't tried HMAC yet or CNG but from experience we see that nintendo uses regular digest algorithms like CRC16-Modbus and SHA-256. I'll add the HMAC ones to the brute force hash tool to see if it finds something... --[[User:Elisherer|Elisherer]] 22:36, 12 October 2011 (CEST)

I've tried to decrypt 'Super Mario 3D Land' but your tool shows me an 'Corrupt Save File' error.--[[User:Lazymarek9614|Lazymarek9614]] 18:36, 18 November 2011 (CET)
:Corrupted save file might be from 2 reasons: * Size is not right (128K or 512k) * CRC on wearleveling wrong. Both problems occur from NDS adapter plus malfunctioning...try blowing on the cart and the adapter and download the savefile again... --[[User:Elisherer|Elisherer]] 20:16, 18 November 2011 (CET)
::I actually don't use the useless NDS Adapter Plus, but I used DSM and I've tried it two times (always the same data).. I hope Nintendo doesn't use a new encryption now! Shall I send you the sav file?--[[User:Lazymarek9614|Lazymarek9614]] 20:27, 18 November 2011 (CET)
:::Yes please, I could check it within the application... --[[User:Elisherer|Elisherer]] 20:35, 18 November 2011 (CET)
::::Have you found anything?--[[User:Lazymarek9614|Lazymarek9614]] 21:25, 18 November 2011 (CET)
:::::No..it's seems that the key found isn't the right key (even that it appears 4 times in the file). we need to figure out how to decrypt the save files without searching blindly for the key. --[[User:Elisherer|Elisherer]] 21:33, 18 November 2011 (CET)
:::::I got an idea. Xor the image's 0x100-0x103 with every (0x200 block)'s 0x100-0x103 to see if it produces 'DISA' ..it should work with the already known files and might be faster to find. i'll try it tomorrow.. --[[User:Elisherer|Elisherer]] 21:40, 18 November 2011 (CET)
::::::Mind linking to a SM3DL save here so I could look at it?(Btw, you're not looking for a "key", you're looking for an AES-CTR xorpad.) --[[User:Yellows8|Yellows8]] 06:03, 22 November 2011 (CET)
:::::::I'll ask for permission. In the meanwhile, can we talk about it at n-dev.net? I made a [http://n-dev.net/showthread.php?tid=4 thread] there. --[[User:Elisherer|Elisherer]] 16:26, 22 November 2011 (CET)
::::::::Yes, you can share them!--[[User:Lazymarek9614|Lazymarek9614]] 17:24, 22 November 2011 (CET)
:::::::Catch the files on my server [http://www.sherer.co.il/saves http://www.sherer.co.il/saves] (Super Mario 3D Land).--[[User:Elisherer|Elisherer]] 17:43, 22 November 2011 (CET)
::::::::I'm stumped too. Since some chunks of data appears several times in these saves, in theory the CTR should still be repeating.(CTR seems to repeat >0x200 bytes now, not sure.) Didn't really manage to decrypt much via xor. --[[User:Yellows8|Yellows8]] 22:08, 22 November 2011 (CET)
::::::::I would guess they finally fixed the bug that limited the xor stream to just 0x200 bytes repeating, and now it behaves more like the data saved to SD cards? --[[User:Neimod|Neimod]] 01:30, 25 November 2011 (CET)
::::::::But you can see that same blocks share the same xorpad in the file...the DISA header is in the file 4 times and encrypted the same all the 4 times.. so the key may not repeat but maybe every block has it's own xorpad based on its offset in the image (my speculation) --[[User:Elisherer|Elisherer]] 09:02, 25 November 2011 (CET)

== *FS#.bin decrypt ==
Maybe I found the key: I think it's the unknown value at Rom. It's 16 characters long.
When I use it, it doesn't give a error or something.
--[[User:Gericom|Gericom]] 16:06, 12 December 2011 (CET)

== Extracting Data Files? ==

Hello! I'm SuperMario64DS, I hack Mario Kart Wii & The Super Mario Galaxy 1 & 2 ( Co-creator of the BDL Editor!). Okay, so I was wondering about extracting files from a 3DS ROM; can the program do that? I think I heard some where that it can decrypt 3DS ROMS and veiw their filesystem, is this true? And if not, will his feature be added? And if so, will an option to extract files from a ROM be added? I've been looking into studying Mario Kart 7's formats, and to see how to game works. --[[User:SuperMario64DS|SuperMario64DS]], 04:43, 20 December 2011 (CET)
:As soon as you get the 3ds common key we could decrpyt the romfs & exefs from the CXIs and then learn the file system... We could however have your help in understanding the CGFX format which has 3d models in it. --[[User:Elisherer|Elisherer]] 07:22, 20 December 2011 (CET)

::Well how faraway would you say we are from decrypting 3DS ROMs? I'd REALLY like to see inside of Mario Kart 7, I know it uses Yaz0, so it can be de-coded. 1: How might we find the decryption key? And 2: How much more longer do you think it will be until we can extract a 3DS ROM's file system? It would be really helpful. -- [[User:SuperMario64DS|SuperMario64DS]], 16:34, 20 December 2011 (CET)
:::We are VERY far. (but then again it could happen any day). Nintendo was smart enough to use AES-CTR which is a very strong encryption which can't be cracked even if you have encrypted and decrypted data (and even the initialization vector) you basicly need the key and it's far inside the 3ds (maybe even coded in hardware and not just inside the 3ds flash). So unless we were told what the key is I don't see us getting anywhere. For now, we do what we can. --[[User:Elisherer|Elisherer]] 18:29, 20 December 2011 (CET)
::::So, we just need that key? How might we look into the 3DS's Film Ware? Or couldn't you just observe the "Lock" (The 3DS ROM) And find the shape of the "Key"? (Encryption Key). Then if we took the "Lock" apart, we could re-build a replica of the "Key" and un-lock the File System. -- [[User:SuperMario64DS|SuperMario64DS]], 19:59, 20 December 2011 (CET)
:::::We know the "shape" of the key, it's 16 bytes long, combined with an IV you can decypher anything. Please read the rest of the pages on 3dbrew before posting more questions. And you might want to look at [http://gbatemp.net/f201-3ds-hacking-homebrew GBAtemp.net] for more information. --[[User:Elisherer|Elisherer]] 22:01, 20 December 2011 (CET)
::::::You completely missed my point there (A good point too), but since you want me to stop asking questions I will stop. --[[User:SuperMario64DS|SuperMario64DS]], 05:40, 21 December 2011 (CET)
:::::::Please don't stop asking questions. Asking questions leads us to finding things... just ask them in the right place, like GBAtemp or the irc channel. The title of this discussion is "Extracting data files" and clearly it can't happen for now so this talk is useless. --[[User:Elisherer|Elisherer]] 09:30, 21 December 2011 (CET)

== Xentax ==

I would love to get the models from ace combat assault horizon legacy but I know its a long long way off. but if you are looking to decrypt the files you might want to try xentax. they have a whole decompression section and since you have a tool you have some "street credit"
:I rekon you're talking about the website, I looked it up but it doesn't have any information about decryption.. only game file editors.. They do have a program called MultiEx editor (for blizzard files) that seems similiar to 3dsexplorer... --[[User:Elisherer|Elisherer]] 07:28, 29 January 2012 (CET)
:I only mean the other users might be of help on the forum anyway i look and see if anyone else is doing the same kind of work as you and send them your way

== questions ==

Elisherer,
Do you know function "__makeref()" is not defined in CSharp Language Standard?
in /3DSExplorer/Utils/MarshalUtil.cs you really often use it .--Matyapiro31 17:08, 10 February 2012 (CET)

Yes, it's a macro which is deprecated, the new way is too difficult for the purpose of the function using it, so i left it as is (it still works) --[[User:Elisherer|Elisherer]] 13:09, 10 February 2012 (CET)

But for System.Deployment and __makeref() are not defined in gtksharp,so I cannot compile 3DSExplorer.

Other member belonging to 3DBrew,I know a few of C#,therefore I hope some of you achieve compiling through MonoDevelop.

But even now 3DSExplorer crashes if you use Mono Runtime.

You can use Moma to scan 3DSExplorer for Mono compatibility--[[User:Jocopoco|Jocopoco]] 17:14, 10 February 2012 (CET)

Elisherer can you make the entries in the TMD sections editable for cia files?--[[User:3dsguy|3dsguy]] 13:04, 28 March 2012 (CEST)
:Probably, but I want to make an all-around solution for editing because it is needed by other formats too. I might need to add a struct to each line on the list which will include data-type and editable boolean... it might take some time... --[[User:Elisherer|Elisherer]] 08:09, 29 March 2012 (CEST)

Elisherer there is a bug in your program, when it tries to read .cia files which do not have a 'SMDH' or banner, like in the case of TWL converted applications and some old .CIA files, 3DS Explorer crashes. It is possible to read these kind of .CIA file in 3DSExplorer by entering a false banner size, so I know this is where the problem lies. Can you patch 3DSExplorer to read .cia files and not try to load information on banners when the banner size is '0'--[[User:3dsguy|3dsguy]] 02:25, 18 May 2012 (CEST)
:I don't really understand the problem...if you look at mdlCIA.cs file you'll see that i'm checking if the bannerLength > 0 so I wouldn't know what to change here.. --[[User:Elisherer|Elisherer]] 10:45, 18 May 2012 (CEST)
::Edit the sample .CIA on the .CIA wiki page and make the banner size zero, then try to open it 3DSExplorer. On my computer this causes 3DSExplorer to crash--[[User:3dsguy|3dsguy]] 12:50, 18 May 2012 (CEST)
::Sorry correction, it crashes when you try to open a .cia file(that has no banner size) when it is associated to be run with 3DSExplorer. But if you try to load a .cia file(that has no banner size) from the open file tab of 3DSExplorer, it tells me that an unhandled exception has occured, "Object reference not set to an instance of an object." --[[User:3dsguy|3dsguy]] 16:57, 18 May 2012 (CEST)
:::OK, I found the bug that you were talking about... If the banner's size is zero I try to put the icons in the file view anyway and that's wrong..I'll try to fix the association bug and release a new version. --[[User:Elisherer|Elisherer]] 10:22, 19 May 2012 (CEST)

Found some more bugs. 3DSExplorer crashes when it tries to open .BNR files and .BCWAV files. For example try the sample .BCWAV and .BNR file in the 0.2 CiTRus release.--[[User:3dsguy|3dsguy]] 12:32, 22 May 2012 (CEST)

I made it be able to send e-mail,but I don't have SMAP server and knowledge about web application.
Here.[https://docs.google.com/folder/d/0B_1DNe-beZjwaWdKME1PTF9zYjA/edit]

Talk:PSPXI:EncryptDecryptAes

2012-06-27T03:04:07Z

Matyapiro31: Created page with "If you examine this,do you find the keys?--~~~~　　"

If you examine this,do you find the keys?--Matyapiro31 07:04, 27 June 2012 (CEST)　　

Hardware

2012-06-26T02:52:49Z

Matyapiro31:

{{stub}}

This page lists and describes the hardware found inside the Nintendo 3DS. Many of these parts are custom made and are expanded upon here or in other pages.

== Specifications ==

{| class="wikitable"
! Type !! Name !! Datasheet !! Source
|-
| SoC || Nintendo 1048 0H (Custom): CPU, GPU, VRAM & DSP all on one chip. || N/A || N/A
|-
| Processor Core || ARM11 MPCore 2x 268MHz & 2x VFP Co-Processor || [http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.ddi0360f/index.html] || [11]
|-
| GPU || [http://en.wikipedia.org/wiki/PICA200 DMP PICA] 268MHz || N/A || [11]
|-
| DSP || 134Mhz. 24ch 32728Hz sampling rates. || N/A || [11]
|-
| VRAM || 6 MB within SoC. Independent of system memory (FCRAM). || N/A || [11]
|-
| FCRAM || 2x64MB Fujitsu MB82M8080-07L ||[http://crediar.no-ip.com/sg_/download.php?id=d67d1c][http://edevice.fujitsu.com/fj/DATASHEET/e-ds/e511463.pdf][http://edevice.fujitsu.com/jp/datasheet/j-ds/j511463.pdf]|| [5]
|-
| Storage || Toshiba THGBM2G3P1FBAI8 1GB NAND Flash || N/A || N/A
|-
| Power Management || Texas Instruments PAIC3010B 0AA37DW || N/A || FCC filing
|-
| Gyroscope || Invensense ITG-3270 MEMS Gyroscope || [http://dl-web.dropbox.com/u/20520664/references/PS-ITG-3200-00-01.4.pdf] || N/A
|-
| Accelerometer || ST Micro 2048 33DH X1MAQ Accelerometer Model LIS331DH || [http://dl.dropbox.com/u/20520664/references/CD00213470.pdf] || N/A
|-
| Wifi || 802.11b/g Atheros AR6014 || [http://www.db.pokestation.net/3DS/Wi-Fi%20module%20pinouts.pdf] || N/A
|-
| Infrared IC || NXP infrared IC, "S750 0803 TSD031C" || N/A || [10]
|-
| Auxiliary Microcontroller || Renesas Electronics UC CTR, custom Nintendo microcontroller || N/A || N/A
|}

* [11] Official Documentation

* [5],[10] According to iFixit.com ([http://www.ifixit.com/Teardown/Nintendo-3DS-Teardown/5029/1#s22696 source]):

* Datasheet for memory is for a chip in the same series, it has less memory than the one inside the 3DS (128mbits vs 512mbits).

* There is a trove of data on the FCC website at [https://fjallfoss.fcc.gov/oetcf/eas/reports/ViewExhibitReport.cfm?mode=Exhibits&RequestTimeout=500&calledFromFrame=N&application_id=462292&fcc_id=%27EW4DWMW028%27].

== FCRAM ==

There is one FCRAM (Fast Cycle RAM) IC in the 3DS, produced by Fujitsu and branded as MB82M8080-07L. The Fujitsu MB82M8080-07L chip internally contains 2 dies, where each die is branded MB81EDS516545 and MB82DBS08645.

The MB81EDS516545 die is a CMOS Fast Cycle Random Access Memory (FCRAM) with Low Power Double Data Rate (LPDDR) SDRAM Interface containing 512MBit storage accessible in a 64-bit format. The MB81EDS516545 is suited for consumer applications requiring high data bandwidth with low power consumption.

== SoC ==

The 3DS has much of it's internals housed in a SoC (System on Chip) just like it's predecessors. This is done to reduce build costs, cut down on power consumption, as well as make the PCB layout less complex and make the system harder to tamper with. The SoC, branded as the Nintendo 1048 0H, contains the CPU, GPU, DSP and VRAM.

According to official documents, the CPU used is a dual-core ARM11 CPU, clocked at 268MHz. One core is dedicated to system software, while the other is used for application programming, each known as the syscore and appcore, respectively.

== GPU ==

As mentioned, DMP's (Digital Media Proffesionals) PICA 200, 268Mhz

[[File:Pica200BlockDiagram.png]]

Block diagram of an ULTRAY2000 based architecture PICA200

== Images ==

=== Front ===

[[Image:CTR_Front.jpg|600px]]

[http://guide-images.ifixit.net/igi/ishJaSCOwLkvbLYK High Resolution]

=== Back ===

[[Image:CTR_Back.jpg]]

[http://guide-images.ifixit.net/igi/n1CKAdbPrHyNPNuW High Resolution]

=== NAND pinout ===
[[Image:CTR_NAND_pinout.png]]

NAND dumping has been successful, but the image is encrypted.

=== WiFi dongle pinout ===
[[Image:CTR_WiFiDongle_pinout.png|600px]]

SDIO interface is colored red:
* CLK
* CMD
* D0, D1, D2, D3

This is the interface for the 'NEW' WiFi module (based on Atheros AR6002) first included in DSi.

The proprietary and by now ancient DS-mode WiFi is colored yellow, pins are unknown.

I2C eeprom is colored blue:
* SCL
* SDA

SPI Flash is colored purple:
* CLK
* CS#
* SI
* SO
* WP#
* NC

=== Auxiliary Microntroller ===
[[Image:CTR_UC.png|600px]]

Monitors HOME button, WiFi switch, 3D slider, volume control slider.
Controls LEDs, various power supplies.

Devices attached to I2C bus:
* UC (master?)
* Accelerometer (slave address 0x18)
* SoC (master? slave?)

User talk:Neimod

2012-06-25T05:30:56Z

Matyapiro31: Blanked the page

Mode Control Services PXI

2012-06-22T12:11:20Z

Matyapiro31: add an inner link.

{| class="wikitable" border="1"
|-
! Command Header
! Description
|-
| 0x0001....
| ? (don't send with zero params, freezes)
|-
| 0x0002....
| ?
|-
| 0x0003....
| ?
|-
| 0x0004....
| ?
|-
| 0x0005....
| ?
|-
| 0x0006....
| ?
|-
| 0x00070000
| ? (returns bunch of data.. unknown)
|-
| 0x0008....
| ?
|-
| 0x0009....
| ?
|-
| 0x000A....
| ?
|-
| 0x000B....
| ?
|-
| 0x000C....
| ?
|}

Back to↓

[[Services API]]

Talk:Mode Control Services PXI

2012-06-22T12:04:52Z

Matyapiro31: Created page with "I think you can jump back to the parent from this page...--~~~~"

I think you can jump back to the parent from this page...--Matyapiro31 16:04, 22 June 2012 (CEST)

Language selection/ja

2012-06-08T09:03:32Z

Matyapiro31:

{{Main page box|言語|Main Page/Language_selection}}
<div style="margin: -.3em -1em -1em -1em;">
{| width="30%" bgcolor="#fff" border="0" cellpadding="2px" cellspacing="2px" style="margin:auto;"
|- align="center" bgcolor="#e7eef6"
|- valign="top" style="background: #F5FAFF;"
</div>
<div style="margin-left:38%">
[[File:FRFLAG.jpg|alt="French Flag"|link=Main_Page/Fr|50px]] [[File:JPFLAG.gif|50px| alt="Japan Flag"| link=メインページ]] [[File:USFLAG.gif|50px| alt="USA Flag"| link=Main_Page]] [[File:ESFLAG.jpg|alt="Spain Flag"|link=Main_Page/es|50px]] [[File:Drapeau chine.gif|alt="China Flag"|link=首页|50px]]

</div>
{{box-footer-empty}}

サービス API

2012-06-06T10:49:13Z

Matyapiro31:

{{スタッブ}}

任天堂は、API(詳しくはWikipedia等を参照)を正規の開発者に配布しており、which behind the scenes communicate with certain services. Services in this sense are system processes running in the background which wait for incoming requests. When a process wants to communicate with a service, it first needs to get a handle to the named service, and then it can communicate with the service via interprocess communication. Each service has a name up to 8 characters, for example "nim:u".

List of services:
* [[Filesystem services‎]]
* [[Process Services‎]]
* [[Application Manager Services]]
* [[NIM Services]]
* [[Config Services]]

List of PXI services:
* [[Filesystem services PXI]]
* [[Process Services PXI]]
* [[Application Manager Services PXI]]
* [[Process Manager Services PXI]]

サービス API

2012-06-06T10:46:32Z

Matyapiro31:

任天堂は、API(詳しくはWikipedia等を参照)を正規の開発者に配布しており、which behind the scenes communicate with certain services. Services in this sense are system processes running in the background which wait for incoming requests. When a process wants to communicate with a service, it first needs to get a handle to the named service, and then it can communicate with the service via interprocess communication. Each service has a name up to 8 characters, for example "nim:u".

List of services:
* [[Filesystem services‎]]
* [[Process Services‎]]
* [[Application Manager Services]]
* [[NIM Services]]
* [[Config Services]]

List of PXI services:
* [[Filesystem services PXI]]
* [[Process Services PXI]]
* [[Application Manager Services PXI]]
* [[Process Manager Services PXI]]

サービス API

2012-06-06T10:40:57Z

Matyapiro31: Created page with "Nintendo provides application developers with an API, which behind the scenes communicate with certain services. Services in this sense are system processes running in the backgr..."

Nintendo provides application developers with an API, which behind the scenes communicate with certain services. Services in this sense are system processes running in the background which wait for incoming requests. When a process wants to communicate with a service, it first needs to get a handle to the named service, and then it can communicate with the service via interprocess communication. Each service has a name up to 8 characters, for example "nim:u".

List of services:
* [[Filesystem services‎]]
* [[Process Services‎]]
* [[Application Manager Services]]
* [[NIM Services]]
* [[Config Services]]

List of PXI services:
* [[Filesystem services PXI]]
* [[Process Services PXI]]
* [[Application Manager Services PXI]]
* [[Process Manager Services PXI]]

Home Menu

2012-04-22T08:49:41Z

Matyapiro31:

{{Stub}}
The '''Home Menu''' is the heart of the Nintendo 3DS. From there one can start games, channels, and manage contacts and settings. It is launched first, and working background with 3DS games, without System Settings or DS/DSi mode game.

== Versions ==
{| class="wikitable"
|-
! Version
! JPN
! USA
! EUR
! Release date
! Changelog
! CDN Availability
! CDN Post Date
|-
| [[1.0.0-0|1.0.0-0]]
| 432
| 432
| 432
| February 26, 2011
| Shipped with 3DS on launch
| Available
| February 18, 2011
|-
| [[1.1.0-0|1.1.0-0]]
| ?
| ?
| ?
| ?
| Update from some game cards
| Unavailable
| N/A
|-
| [[1.1.0-1|1.1.0-1]]
| 1472
| 1472
| 1472
| February ?, 2011
| General bug fixes
Added 3D Video title to menu. ("For a Limited Time Only")
| Available
| March 1, 2011
|-
| [[2.0.0-2|2.0.0-2]]
| 2516
| 2516
| 2516
| June 6/7, 2011
| From the update notification:(DSiWare management isn't mentioned in the notice but is available) [[Nintendo eShop]] added, web browser available, [[System Transfer]] added. Full DSiWare data management available. [[SpotPass|Automatic]] system updates added.
| Available
| June 6, 2011
|-
| [[2.1.0-1|2.1.0-1]]
| ?
| ?
| ?
| ?
| Found as an update on some game cards. This firmware appears to build on 2.0.0-2 as if it is used to upgrade a 3DS from 1.1.0-1 all of the features introduced in 2.0.0-2 are not present. Despite the 3DS being on a higher version than 2.0.0-2, the Internet Browser is stubbed, and the E-Shop is not present and the Demonstration Video is still present. However the revised Home Menu, DSiWare Managment and other features found in firmware 2.0.0-2 are present in this firmware.
| Unavailable
| ?
|-
| [[2.1.0-3|2.1.0-3]]
| 3553
| 3553
| 3553
| June 15, 2011
| Fixes the Ridge Racer freeze.
| Available
| June 15, 2011
|-
| [[2.1.0-4|2.1.0-4]]
| ?
| ?
| ?
| July 25, 2011
| System stability improvements and other adjustments.
| Available
| ?
|-
| [[2.2.0-4|2.2.0-4]]
| ?
| ?
| ?
| November 6, 2011
| Improve the arrangement of [[Friend List]]. Update from some game cards such as Mario 3D Land(JPN).
| Unavailable
| ?
|-
| [[3.0.0-5|3.0.0-5]]
| 5647
| 5647
| 5647
| December 7, 2011
| Added 3D video recording to the camera title, updated Mii Streetpass Plaza, downloaded 3DS titles transfer between systems, improved eShop, home menu QR code scanning with QR codes containing URLs. [[Nintendo Zone]] is now always accessible, 3D video streaming support was added to NZone.
| Available
| December 7, 2011
|-
| [[3.0.0-6|3.0.0-6]]
| 5647
| 5647
| 5647
| December 21, 2011
| Home menu wasn't updated, only StreetPass Mii Plaza and a system title were updated. From Nintendo's system update page: "System stability improvements and other adjustments".
| Available
| December 21, 2011
|-
| [[The next version|The next version]]
| ?
| ?
| ?
| April 25, 2012
| add Folder to HomeMenu ,able to patch games,buy a more expensive game than 1000 yen(JPN)
| ?
| April 25, 2012
|}

[[Category:Nintendo Software]]

=== See Also ===
http://www.nintendo.com/consumer/systems/3ds/en_na/menu_update.jsp

Talk:Main Page

2012-04-19T08:51:25Z

Matyapiro31:

So how about a [http://wiisixtyfour.webs.com/images/3dsbrew-bg4545.png logo]? --[[User:Bg4545|wiisixtyfour]] 06:59, 1 April 2011 (CEST)

Great one, let's put it as default logo ! --[[User:GeekShadow|GeekShadow]] 09:37, 1 April 2011 (CEST)

Here's one I made, which doesn't use any official artwork/photography: [http://dl.dropbox.com/u/1077900/Graphics/3dbrew.png PNG] [http://dl.dropbox.com/u/1077900/Graphics/3dbrew.svg SVG] --[[User:BHSPitMonkey|BHSPitMonkey]] 05:36, 7 April 2011 (CEST)

How about making the default skin [http://3dbrew.org/w/index.php?title=Main_Page&useskin=monobook MonoBook]?, I like the it better. --[[User:Elisherer|Elisherer]] 10:58, 6 October 2011 (CEST)

I want to dump RAM.What can I do now?How can I learn? --[[User:Matyapiro31|Matyapiro31]] 16:30, 20 November 2011 (CET)
:Sorry, this is not the correct page to talk about that. However, it's a good topic for our new forum! http://n-dev.net/index.php --[[User:Lazymarek9614|Lazymarek9614]] 17:43, 20 November 2011 (CET)

-Hello, I would like to translate this great wiki into French, how should I do ? Thanks :)
:I guess each page you want to translate you need to edit the page's link with a '/' (slash) after it and the language code (fr for french i think), for instance edit the page http://www.3dbrew.org/wiki/Main_Page/Fr and then put a link on the bottom next to Japanese.. --[[User:Elisherer|Elisherer]] 17:49, 21 December 2011 (CET)
::You should take a look [http://www.mediawiki.org/wiki/Template:Languages here]...Apperantly we don't have the needed template for it to work automaticaly maybe we need the admin to install some kind of extension to support this type of thing. --[[User:Elisherer|Elisherer]] 18:59, 21 December 2011 (CET)

-Yes, it would be more practical. For now, I'll continue translating like that, please tell me when the plugin is added.
---I added a language selection bar at the bottom of each main page.

I cannot have be accessing for a week.Why?--Matyapiro31 12:51, 19 April 2012 (CEST)
== SVG upload ==

Hey neimod, can you enable svg uploading? I want to upload graphics for the buttons [http://sherer.co.il/svg/ I made] (for future homebrew and stuff)--[[User:Elisherer|Elisherer]] 14:41, 9 February 2012 (CET)
: You can address this issue to [[User:Mha|Mha]] (mha on irc) --[[User:Neimod|Neimod]] 19:04, 9 February 2012 (CET)

Game Screenshots...

Hey guys how can i export the photos from DoA:D from 3DS to PC i have the right file but on mc if i change to .jpg or mpo it does not open...

Talk:Main Page

2012-04-19T08:49:00Z

Matyapiro31:

So how about a [http://wiisixtyfour.webs.com/images/3dsbrew-bg4545.png logo]? --[[User:Bg4545|wiisixtyfour]] 06:59, 1 April 2011 (CEST)

Great one, let's put it as default logo ! --[[User:GeekShadow|GeekShadow]] 09:37, 1 April 2011 (CEST)

Here's one I made, which doesn't use any official artwork/photography: [http://dl.dropbox.com/u/1077900/Graphics/3dbrew.png PNG] [http://dl.dropbox.com/u/1077900/Graphics/3dbrew.svg SVG] --[[User:BHSPitMonkey|BHSPitMonkey]] 05:36, 7 April 2011 (CEST)

How about making the default skin [http://3dbrew.org/w/index.php?title=Main_Page&useskin=monobook MonoBook]?, I like the it better. --[[User:Elisherer|Elisherer]] 10:58, 6 October 2011 (CEST)

I want to dump RAM.What can I do now?How can I learn? --[[User:Matyapiro31|Matyapiro31]] 16:30, 20 November 2011 (CET)
:Sorry, this is not the correct page to talk about that. However, it's a good topic for our new forum! http://n-dev.net/index.php --[[User:Lazymarek9614|Lazymarek9614]] 17:43, 20 November 2011 (CET)

-Hello, I would like to translate this great wiki into French, how should I do ? Thanks :)
:I guess each page you want to translate you need to edit the page's link with a '/' (slash) after it and the language code (fr for french i think), for instance edit the page http://www.3dbrew.org/wiki/Main_Page/Fr and then put a link on the bottom next to Japanese.. --[[User:Elisherer|Elisherer]] 17:49, 21 December 2011 (CET)
::You should take a look [http://www.mediawiki.org/wiki/Template:Languages here]...Apperantly we don't have the needed template for it to work automaticaly maybe we need the admin to install some kind of extension to support this type of thing. --[[User:Elisherer|Elisherer]] 18:59, 21 December 2011 (CET)

-Yes, it would be more practical. For now, I'll continue translating like that, please tell me when the plugin is added.
---I added a language selection bar at the bottom of each main page.

I cannot access 3dbrew for a week!Why ?--Matyapiro31 12:49, 19 April 2012 (CEST)

== SVG upload ==

Hey neimod, can you enable svg uploading? I want to upload graphics for the buttons [http://sherer.co.il/svg/ I made] (for future homebrew and stuff)--[[User:Elisherer|Elisherer]] 14:41, 9 February 2012 (CET)
: You can address this issue to [[User:Mha|Mha]] (mha on irc) --[[User:Neimod|Neimod]] 19:04, 9 February 2012 (CET)

Game Screenshots...

Hey guys how can i export the photos from DoA:D from 3DS to PC i have the right file but on mc if i change to .jpg or mpo it does not open...

Talk:Main Page

2012-04-19T08:48:17Z

Matyapiro31:

So how about a [http://wiisixtyfour.webs.com/images/3dsbrew-bg4545.png logo]? --[[User:Bg4545|wiisixtyfour]] 06:59, 1 April 2011 (CEST)

Great one, let's put it as default logo ! --[[User:GeekShadow|GeekShadow]] 09:37, 1 April 2011 (CEST)

Here's one I made, which doesn't use any official artwork/photography: [http://dl.dropbox.com/u/1077900/Graphics/3dbrew.png PNG] [http://dl.dropbox.com/u/1077900/Graphics/3dbrew.svg SVG] --[[User:BHSPitMonkey|BHSPitMonkey]] 05:36, 7 April 2011 (CEST)

How about making the default skin [http://3dbrew.org/w/index.php?title=Main_Page&useskin=monobook MonoBook]?, I like the it better. --[[User:Elisherer|Elisherer]] 10:58, 6 October 2011 (CEST)

I want to dump RAM.What can I do now?How can I learn? --[[User:Matyapiro31|Matyapiro31]] 16:30, 20 November 2011 (CET)
:Sorry, this is not the correct page to talk about that. However, it's a good topic for our new forum! http://n-dev.net/index.php --[[User:Lazymarek9614|Lazymarek9614]] 17:43, 20 November 2011 (CET)

-Hello, I would like to translate this great wiki into French, how should I do ? Thanks :)
:I guess each page you want to translate you need to edit the page's link with a '/' (slash) after it and the language code (fr for french i think), for instance edit the page http://www.3dbrew.org/wiki/Main_Page/Fr and then put a link on the bottom next to Japanese.. --[[User:Elisherer|Elisherer]] 17:49, 21 December 2011 (CET)
::You should take a look [http://www.mediawiki.org/wiki/Template:Languages here]...Apperantly we don't have the needed template for it to work automaticaly maybe we need the admin to install some kind of extension to support this type of thing. --[[User:Elisherer|Elisherer]] 18:59, 21 December 2011 (CET)

-Yes, it would be more practical. For now, I'll continue translating like that, please tell me when the plugin is added.
---I added a language selection bar at the bottom of each main page.

I cannot access 3dbrew for a week!Why ?--Matyapiro31 12:48, 19 April 2012 (CEST)

== SVG upload ==

Hey neimod, can you enable svg uploading? I want to upload graphics for the buttons [http://sherer.co.il/svg/ I made] (for future homebrew and stuff)--[[User:Elisherer|Elisherer]] 14:41, 9 February 2012 (CET)
: You can address this issue to [[User:Mha|Mha]] (mha on irc) --[[User:Neimod|Neimod]] 19:04, 9 February 2012 (CET)

Game Screenshots...

Hey guys how can i export the photos from DoA:D from 3DS to PC i have the right file but on mc if i change to .jpg or mpo it does not open...

Talk:PXI Registers

2012-04-13T13:53:28Z

Matyapiro31:

Is this Main RAM or VRAM? --Matyapiro31 11:11, 13 April 2012 (CEST)
: Neither, these are IO registers. --[[User:Neimod|Neimod]] 16:22, 13 April 2012 (CEST)

I cannot jump to this page and your new page from Main page...

Please make a link of them there.

Talk:PXI Registers

2012-04-13T07:11:43Z

Matyapiro31: question

Is this Main RAM or VRAM? --Matyapiro31 11:11, 13 April 2012 (CEST)

Talk:Hardware

2012-03-31T12:32:59Z

Matyapiro31:

If the CPU is ARM does it have JTAG or SWD test access points.

We need a datasheet about the ARM11!

I thought the ARM11 has a JTAG support?
How can we dump the NAND, through its pinout yes, but how can we do it exactly? I would like to do some tests on it to see how it works.--[[User:Lazymarek9614|Lazymarek9614]] 23:36, 10 September 2011 (CEST)
:The ARM11 IP (intellectual property) has JTAG support, however this port can probably be permanently disabled internally. So there is no way of knowing if this port even still works or exists in the first place.
:For dumping NAND, you need to hook up the NAND pins to an FPGA or microcontroller. Then you need to follow the eMMC hardware protocol to read out the data in the various sectors. --[[User:Neimod|Neimod]] 07:06, 11 September 2011 (CEST)
:- Was there data on the raw NAND dumps that wasn't encrypted? Also, was it from a retail unit?
:- Are pins exposed underneath the white-banding on the edges of the 3 largest chips? thx [[User talk:Jl12|Jl12]]

Are there any photos of the back of the 3DS's PCB? Anything available in a higher resolution (front or back)? Closeups of the SoC and surrounding components (front and back)? Any help greatly appreciated, thanks! --[[User:CHR15x94|CHR15x94]] 00:35, 13 September 2011 (CEST)
:You could ask the [http://www.youtube.com/watch?v=OFoZGt8tCNw&feature=related Doctor] --[[User:Elisherer|Elisherer]] 19:16, 13 September 2011 (CEST)
::Hop... found [http://tvgzone.com/viewthread.php?tid=6136&highlight=3ds some]. Maybe we should add them to our page? --[[User:Elisherer|Elisherer]] 19:23, 13 September 2011 (CEST)
:::That's [http://www.ifixit.com/Teardown/Nintendo-3DS-Teardown/5029/2 from] [http://guide-images.ifixit.net/igi/IkjXAUHUgmdZch6A.large iFixit], which is already linked to on the page. --[[User:Yellows8|Yellows8]] 20:50, 13 September 2011 (CEST)
::::Crap, I always manage to miss things like that... >_< Anyway, thanks Elisherer and Yellows8. --[[User:CHR15x94|CHR15x94]] 21:11, 13 September 2011 (CEST)

Yes, please add them or replace the existing ones if nesessary.--[[User:Lazymarek9614|Lazymarek9614]]

== Disply dump ==
pinout point ("TP"+number)
{| class="wikitable" border="1"
|-
| point name
| signal name
|-
| 184
| R0
|-
| 178
| R1
|-
| 172
| R2
|-
| 166
| R3
|-
| 183
| R4
|-
| 177
| R5
|-
| 171
| R6
|-
| 165
| R7
|-
| 186
| G0
|-
| 180
| G1
|-
| 174
| G2
|-
| below 180(14)
| G3
|-
| 185
| G4
|-
| 179
| G5
|-
| below 179(15)
| G6
|-
| 167
| G7
|-
| 188
| B0
|-
| 182
| B1
|-
| 176
| B2
|-
| 170
| B3
|-
| 187
| B4
|-
| 181
| B5
|-
| 175
| B6
|-
| 169
| B7
|-
| CLK
| 189
|-
| VSYNC
| 191
|-
| HSYNC
| 190
|-
|}

<nowiki>[[File:Pinout_point.jpg]]</nowiki>
RGB signal (touch screen)...
I'll add later.--Matyapiro31 16:59, 4 March 2012 (CET)

If you want to buy the kit ,e-mail or pm me with :

Name

Estimation or buy

the number

way to purchase

way to sending

Postal code

Your address

--Matyapiro31 03:07, 31 March 2012 (CEST)

Talk:Hardware

2012-03-30T23:07:39Z

Matyapiro31:

If the CPU is ARM does it have JTAG or SWD test access points.

We need a datasheet about the ARM11!

I thought the ARM11 has a JTAG support?
How can we dump the NAND, through its pinout yes, but how can we do it exactly? I would like to do some tests on it to see how it works.--[[User:Lazymarek9614|Lazymarek9614]] 23:36, 10 September 2011 (CEST)
:The ARM11 IP (intellectual property) has JTAG support, however this port can probably be permanently disabled internally. So there is no way of knowing if this port even still works or exists in the first place.
:For dumping NAND, you need to hook up the NAND pins to an FPGA or microcontroller. Then you need to follow the eMMC hardware protocol to read out the data in the various sectors. --[[User:Neimod|Neimod]] 07:06, 11 September 2011 (CEST)
:- Was there data on the raw NAND dumps that wasn't encrypted? Also, was it from a retail unit?
:- Are pins exposed underneath the white-banding on the edges of the 3 largest chips? thx [[User talk:Jl12|Jl12]]

Are there any photos of the back of the 3DS's PCB? Anything available in a higher resolution (front or back)? Closeups of the SoC and surrounding components (front and back)? Any help greatly appreciated, thanks! --[[User:CHR15x94|CHR15x94]] 00:35, 13 September 2011 (CEST)
:You could ask the [http://www.youtube.com/watch?v=OFoZGt8tCNw&feature=related Doctor] --[[User:Elisherer|Elisherer]] 19:16, 13 September 2011 (CEST)
::Hop... found [http://tvgzone.com/viewthread.php?tid=6136&highlight=3ds some]. Maybe we should add them to our page? --[[User:Elisherer|Elisherer]] 19:23, 13 September 2011 (CEST)
:::That's [http://www.ifixit.com/Teardown/Nintendo-3DS-Teardown/5029/2 from] [http://guide-images.ifixit.net/igi/IkjXAUHUgmdZch6A.large iFixit], which is already linked to on the page. --[[User:Yellows8|Yellows8]] 20:50, 13 September 2011 (CEST)
::::Crap, I always manage to miss things like that... >_< Anyway, thanks Elisherer and Yellows8. --[[User:CHR15x94|CHR15x94]] 21:11, 13 September 2011 (CEST)

Yes, please add them or replace the existing ones if nesessary.--[[User:Lazymarek9614|Lazymarek9614]]

== Disply dump ==
pinout point ("TP"+number)
{| class="wikitable" border="1"
|-
| point name
| signal name
|-
| 184
| R0
|-
| 178
| R1
|-
| 172
| R2
|-
| 166
| R3
|-
| 183
| R4
|-
| 177
| R5
|-
| 171
| R6
|-
| 165
| R7
|-
| 186
| G0
|-
| 180
| G1
|-
| 174
| G2
|-
| below 180(14)
| G3
|-
| 185
| G4
|-
| 179
| G5
|-
| below 179(15)
| G6
|-
|
|
|-
|}

<nowiki>[[File:Pinout_point.jpg]]</nowiki>
RGB signal (touch screen)...
I'll add later.--Matyapiro31 16:59, 4 March 2012 (CET)

If you want to buy the kit ,e-mail or pm me with :

Name

Estimation or buy

the number

way to purchase

way to sending

Postal code

Your address

--Matyapiro31 03:07, 31 March 2012 (CEST)

????????

2012-03-27T20:20:10Z

Matyapiro31: Undo revision 2731 by Pepsiman (talk)

3×Nintendo restore/check tools.
this is used in Nintendo customer center.

File talk:Pinout point.jpg

2012-03-27T10:00:46Z

Matyapiro31:

Without the description of these numbers the photo is useless, please add them!--[[User:Lazymarek9614|Lazymarek9614]] 17:36, 19 March 2012 (CET)

Looks interesting. Are there more points labeled? And is there a description of the points? --[[User:Neimod|Neimod]] 23:14, 21 March 2012 (CET)

[[Talk:Hardware|Here.]]--Matyapiro31 23:21, 21 March 2012 (CET)

Some interesting links I found:
* http://katsukity.ocnk.net/product/20 [http://cart05.lolipop.jp/LA04663495/?mode=ITEM2&p_id=PR00102193854 In Japan]
* http://home.comcast.net/~olimar/3DSCapture/dev/04.jpg
* Obviously works... http://www.youtube.com/watch?v=FI4qVzaM1PI
--[[User:Elisherer|Elisherer]] 00:41, 27 March 2012 (CEST)

Yes,the former is Nintendo official,the latter is same as mine.

Talk:Title list

2012-03-26T08:52:12Z

Matyapiro31:

Obviously the 3DS Retail titles have TitleIDs as well and they share the same prefix as the eShop titles:

Should we put a new category or put eShop and retail titles togather? --[[User:Elisherer|Elisherer]] 19:15, 6 September 2011 (CEST)

0004000000037500 Tom Clancy's Ghost Recon: Shadow Wars - EUR
0004000000038900 Super Monkeyball 3D - EUR
0004000000038c00 Lego Star Wars III: The Clone Wars - EUR

IMO that extdata section would be more appropriate on the [[SD_Filesystem]] page, this Title list page isn't meant for savedata/extdata-related info.(Those "TitleID low/high" aren't correct either, 00000000 is just an extdata ID while the other ID is the titleID_low>>8.) --[[User:Yellows8|Yellows8]] 17:26, 16 November 2011 (CET)

Game trials have .ctx files...
Why?
--Matyapiro31 16:03, 13 December 2011 (CET)

I think 0004000200060201 is the Resident Evil Revelations Trial.
--11111.11106^2 21:37, 19 January 2012 (EST)

"Serial structure" The info described there is not a "serial", it's the TitleID. This is actual [[serials]]. --[[User:Yellows8|Yellows8]] 20:33, 1 March 2012 (CET)
:"A [http://en.wikipedia.org/wiki/Serial_number serial number] is a unique number assigned for identification which varies from its successor or predecessor by a fixed discrete integer value". I think it matches its definition...but you can change it if you like :) --[[User:Elisherer|Elisherer]] 23:03, 1 March 2012 (CET)

I think there is no merit to write all eshop titles information here,
how do you think about?

Talk:????????

2012-03-25T13:10:01Z

Matyapiro31:

Could you elaborate?--[[User:3dsguy|3dsguy]] 11:52, 25 March 2012 (CEST)

Because I sent my 3DS to Nintendo ,I found unknown title game "????????" played.

It seems Nintendo used them to check.

????????

2012-03-24T16:13:43Z

Matyapiro31: add nintendo check/restore tool.

3×Nintendo restore/check tools.
this is used in Nintendo customer center.

Nintendo Software

2012-03-24T16:10:43Z

Matyapiro31:

*[[Home Menu]]
*[[3D Video]]
*[[Activity Log]]
*[[AR Games]]
*[[Download Play]]
*[[eShop]]
*[[Face Raiders]]
*[[Friend List]]
*[[Game Notes]]
*[[Health & Safety Information]]
*[[Internet Browser]]
*[[Mii Maker]]
*[[Nintendo 3DS Camera]]
*[[Nintendo 3DS Sound]]
*[[Nintendo Zone]]
*[[Notifications]]
*[[SpotPass]]
*[[StreetPass]]
*[[StreetPass Mii Plaza]]
*[[Swapnote]]
*[[System Settings]]
*[[System Transfer]]
*[[Nintendo Video]]
*[[Eurosport]]
*[[????????]]

Talk:Hardware

2012-03-22T08:21:57Z

Matyapiro31: Hey,you

If the CPU is ARM does it have JTAG or SWD test access points.

We need a datasheet about the ARM11!

I thought the ARM11 has a JTAG support?
How can we dump the NAND, through its pinout yes, but how can we do it exactly? I would like to do some tests on it to see how it works.--[[User:Lazymarek9614|Lazymarek9614]] 23:36, 10 September 2011 (CEST)
:The ARM11 IP (intellectual property) has JTAG support, however this port can probably be permanently disabled internally. So there is no way of knowing if this port even still works or exists in the first place.
:For dumping NAND, you need to hook up the NAND pins to an FPGA or microcontroller. Then you need to follow the eMMC hardware protocol to read out the data in the various sectors. --[[User:Neimod|Neimod]] 07:06, 11 September 2011 (CEST)
:- Was there data on the raw NAND dumps that wasn't encrypted? Also, was it from a retail unit?
:- Are pins exposed underneath the white-banding on the edges of the 3 largest chips? thx [[User talk:Jl12|Jl12]]

Are there any photos of the back of the 3DS's PCB? Anything available in a higher resolution (front or back)? Closeups of the SoC and surrounding components (front and back)? Any help greatly appreciated, thanks! --[[User:CHR15x94|CHR15x94]] 00:35, 13 September 2011 (CEST)
:You could ask the [http://www.youtube.com/watch?v=OFoZGt8tCNw&feature=related Doctor] --[[User:Elisherer|Elisherer]] 19:16, 13 September 2011 (CEST)
::Hop... found [http://tvgzone.com/viewthread.php?tid=6136&highlight=3ds some]. Maybe we should add them to our page? --[[User:Elisherer|Elisherer]] 19:23, 13 September 2011 (CEST)
:::That's [http://www.ifixit.com/Teardown/Nintendo-3DS-Teardown/5029/2 from] [http://guide-images.ifixit.net/igi/IkjXAUHUgmdZch6A.large iFixit], which is already linked to on the page. --[[User:Yellows8|Yellows8]] 20:50, 13 September 2011 (CEST)
::::Crap, I always manage to miss things like that... >_< Anyway, thanks Elisherer and Yellows8. --[[User:CHR15x94|CHR15x94]] 21:11, 13 September 2011 (CEST)

Yes, please add them or replace the existing ones if nesessary.--[[User:Lazymarek9614|Lazymarek9614]]

== Disply dump ==
pinout point ("TP"+number)
{| class="wikitable" border="1"
|-
| point name
| signal name
|-
| 184
| R0
|-
| 178
| R1
|-
| 172
| R2
|-
| 166
| R3
|-
| 183
| R4
|-
| 177
| R5
|-
| 171
| R6
|-
| 165
| R7
|-
| 186
| G0
|-
| 180
| G1
|-
| 174
| G2
|-
| below 180(14)
| G3
|-
| 185
| G4
|-
| 179
| G5
|-
| below 179(15)
| G6
|-
|
|
|-
|}

<nowiki>[[File:Pinout_point.jpg]]</nowiki>
RGB signal (touch screen)...
I'll add later.--Matyapiro31 16:59, 4 March 2012 (CET)

Talk:Hardware

2012-03-22T08:11:14Z

Matyapiro31: /* Disply dump */

If the CPU is ARM does it have JTAG or SWD test access points.

We need a datasheet about the ARM11!

I thought the ARM11 has a JTAG support?
How can we dump the NAND, through its pinout yes, but how can we do it exactly? I would like to do some tests on it to see how it works.--[[User:Lazymarek9614|Lazymarek9614]] 23:36, 10 September 2011 (CEST)
:The ARM11 IP (intellectual property) has JTAG support, however this port can probably be permanently disabled internally. So there is no way of knowing if this port even still works or exists in the first place.
:For dumping NAND, you need to hook up the NAND pins to an FPGA or microcontroller. Then you need to follow the eMMC hardware protocol to read out the data in the various sectors. --[[User:Neimod|Neimod]] 07:06, 11 September 2011 (CEST)
:- Was there data on the raw NAND dumps that wasn't encrypted? Also, was it from a retail unit?
:- Are pins exposed underneath the white-banding on the edges of the 3 largest chips? thx [[User talk:Jl12|Jl12]]

Are there any photos of the back of the 3DS's PCB? Anything available in a higher resolution (front or back)? Closeups of the SoC and surrounding components (front and back)? Any help greatly appreciated, thanks! --[[User:CHR15x94|CHR15x94]] 00:35, 13 September 2011 (CEST)
:You could ask the [http://www.youtube.com/watch?v=OFoZGt8tCNw&feature=related Doctor] --[[User:Elisherer|Elisherer]] 19:16, 13 September 2011 (CEST)
::Hop... found [http://tvgzone.com/viewthread.php?tid=6136&highlight=3ds some]. Maybe we should add them to our page? --[[User:Elisherer|Elisherer]] 19:23, 13 September 2011 (CEST)
:::That's [http://www.ifixit.com/Teardown/Nintendo-3DS-Teardown/5029/2 from] [http://guide-images.ifixit.net/igi/IkjXAUHUgmdZch6A.large iFixit], which is already linked to on the page. --[[User:Yellows8|Yellows8]] 20:50, 13 September 2011 (CEST)
::::Crap, I always manage to miss things like that... >_< Anyway, thanks Elisherer and Yellows8. --[[User:CHR15x94|CHR15x94]] 21:11, 13 September 2011 (CEST)

Yes, please add them or replace the existing ones if nesessary.--[[User:Lazymarek9614|Lazymarek9614]]

== Disply dump ==
pinout point ("TP"+number)
{| class="wikitable" border="1"
|-
| point name
| signal name
|-
| 184
| R0
|-
| 178
| R1
|-
| 172
| R2
|-
| 166
| R3
|-
| 183
| R4
|-
| 177
| R5
|-
| 171
| R6
|-
| 165
| R7
|-
| 186
| G0
|-
| 180
| G1
|-
| 174
| G2
|-
| below 180(14)
| G3
|-
|}

<nowiki>[[File:Pinout_point.jpg]]</nowiki>
RGB signal (touch screen)...
I'll add later.--Matyapiro31 16:59, 4 March 2012 (CET)

File:Pinout point.jpg

2012-03-22T03:37:41Z

Matyapiro31: uploaded a new version of "File:Pinout point.jpg"

3DS dump pinout point

File talk:Pinout point.jpg

2012-03-21T21:21:19Z

Matyapiro31:

Talk:Hardware

2012-03-20T12:49:16Z

Matyapiro31:

If the CPU is ARM does it have JTAG or SWD test access points.

We need a datasheet about the ARM11!

I thought the ARM11 has a JTAG support?
How can we dump the NAND, through its pinout yes, but how can we do it exactly? I would like to do some tests on it to see how it works.--[[User:Lazymarek9614|Lazymarek9614]] 23:36, 10 September 2011 (CEST)
:The ARM11 IP (intellectual property) has JTAG support, however this port can probably be permanently disabled internally. So there is no way of knowing if this port even still works or exists in the first place.
:For dumping NAND, you need to hook up the NAND pins to an FPGA or microcontroller. Then you need to follow the eMMC hardware protocol to read out the data in the various sectors. --[[User:Neimod|Neimod]] 07:06, 11 September 2011 (CEST)
:- Was there data on the raw NAND dumps that wasn't encrypted? Also, was it from a retail unit?
:- Are pins exposed underneath the white-banding on the edges of the 3 largest chips? thx [[User talk:Jl12|Jl12]]

Are there any photos of the back of the 3DS's PCB? Anything available in a higher resolution (front or back)? Closeups of the SoC and surrounding components (front and back)? Any help greatly appreciated, thanks! --[[User:CHR15x94|CHR15x94]] 00:35, 13 September 2011 (CEST)
:You could ask the [http://www.youtube.com/watch?v=OFoZGt8tCNw&feature=related Doctor] --[[User:Elisherer|Elisherer]] 19:16, 13 September 2011 (CEST)
::Hop... found [http://tvgzone.com/viewthread.php?tid=6136&highlight=3ds some]. Maybe we should add them to our page? --[[User:Elisherer|Elisherer]] 19:23, 13 September 2011 (CEST)
:::That's [http://www.ifixit.com/Teardown/Nintendo-3DS-Teardown/5029/2 from] [http://guide-images.ifixit.net/igi/IkjXAUHUgmdZch6A.large iFixit], which is already linked to on the page. --[[User:Yellows8|Yellows8]] 20:50, 13 September 2011 (CEST)
::::Crap, I always manage to miss things like that... >_< Anyway, thanks Elisherer and Yellows8. --[[User:CHR15x94|CHR15x94]] 21:11, 13 September 2011 (CEST)

Yes, please add them or replace the existing ones if nesessary.--[[User:Lazymarek9614|Lazymarek9614]]

== Disply dump ==
pinout point ("TP"+number)
{| class="wikitable" border="1"
|-
| point name
| signal name
|-
| 184
| R0
|-
| 178
| R1
|-
| 172
| R2
|-
| 166
| R3
|-
| 183
| R4
|-
| 177
| R5
|-
| 171
| R6
|-
| 165
| R7
|-
| 186
| G0
|-
| 180
| G1
|-
| 174
| G2
|-
| below 180(14)
| G3
|-
|}
[[File:Pinout_point.jpg]]
RGB signal (touch screen)...
I'll add later.--Matyapiro31 16:59, 4 March 2012 (CET)

Friend code

2012-03-20T12:42:42Z

Matyapiro31:

This is a list of friend codes of different users.

Remember to [http://3dbrew.org/w/index.php?title=Friend_code&action=watch watch this article] if you wish to get notified when someone modifies the list.

{| class="wikitable" border="1"
|-
! width="20%" | User !! width="15%" | IrcNick !! width="20%" | Friend code !! width="10%" |Region !! width="30%" |Comment here !! Mii image
|-
| Matyapiro31
| matyapiro31
| 3351-4131-7014
2191-7963-6031
| Japan
| Let's hack 3DS! I add the sub code. * I am this page holder.If you want to meet someone in 3DS,write a message [[User:Matyapiro31|here]]
| [[File:HNI 0019.JPG|120px]]
|-
| z2442 || || <nowiki>4554-0595-5890</nowiki> || USA || hack the 3ds yes! ||
|-
| Crediar || || 2535-3625-3742 || Europe || None ||
|-
| Kazuma || || 2277-6646-9164 || Europe || None ||
|-
| SaltyPancakes || || 0044-2836-4738 || Europe || None ||
|-
| Inspectah || || 3909-7495-9525 || Europe || None ||
|-
| XanLoves || || 3995-6523-2805 || Europe || None ||
|-
| muhkuh2005 || || 2449-4689-9707 || Europe || Germanfag ||
|-
| RHOPKINS13 || || 4854-6450-1577 || USA || None || [[File:RHOPKINS13_Mii.JPG]]
|-
| fishuyo || || 2535-3630-0678 || USA || None ||
|-
| marcosxd || || 0216-0901-5448 || Mexico || Crediar add me please, I already added you :) ||
|-
| Mafril || || 5112-3460-1421 || USA || None || [[File:Mafril_Mii.JPG]]
|-
| Epicdude || ||0130-1922-3022 ||USA || None ||
|-
| David || ||3553-9962-0973 ||USA ||Add me ||
|-
| Muzer || || 3136-6762-5385 || Europe || I have added everyone on this list who has a valid friend code (David and marcosxd don't) - so please add me if you get the chance. || [[File:Muzer_Mii.jpg|120px]]
|-
|[[User:Rikku2000|Rikku2000]] || || EUR: 1461-6425-0347 JPN: 1375-8084-1845 || Germany || Write me on 3DS Letterbox ||[[File:Rikku2000_Mii.JPG|100px]]
|-
|[[User:Elisherer|Elisherer]] || elisherer ||0001-3489-0550 ||USA ||None ||[[File:Elisherer_Mii.JPG|120px]]
|-
|Liam87 || ||2664-2361-9358 ||England ||Add me please, i have added everyone on here, thank you ||
|-
|Luishane || ||1289-8459-2533 ||Venezuela ||Add me...thanks ||
|-
|Immortal_no1 || ||0516-7257-0011 ||UK ||Add me and PM me on gbatemp.net with yours or e-mail me on "immortal_no1@hotmail.com" ||
|-
|CrimsonΣ (CrimsonSigma) || ||5284-1673-1864 ||Brazil ||Add me ||
|-
|E-Chan || ||2062-9187-2394 ||Spain ||Add me please~! Im up for online gaming of any sorts and discussing the scene! ||
|-
|Lazymarek9614 || ||1590-4676-4678 ||Europe ||Online gaming SSF IV 3D, I try to add everyone here! ||
|-
|FireFly || ||4554-0352-3499 ||Europe || None ||
|-
|Hikari06 || ||5241-1966-6545 ||Europe || I added everyone, please add me :) ||[[File:HIKARI06MII.jpg|120px]]
|-
|CVosler || ||4554-0499-6731 ||USA || I added everyone. You can also email me your code after you add me "cvosler@hotmail.com" ||[[File:Chip.JPG|120px]]
|-
|[[User:CHR15x94|CHR15x94]] || ||0688-5814-3517 ||Canada (USA) || Feel free to add me. I'll add anyone. If you need to contact me, message me on 3DBrew, or through one of my contacts on my 3DBrew profile. ||[[File:CHR15x94_-_Mii.JPG|120px]]
|-
|[[User:DarkWork0|DarkWork0]] || ||1075-0737-9684 ||USA ||Add me and email me your friends code: darkwork0@gmail.com I'll add anyone who adds me! ||[[File:HNI_0006.JPG‎|120px]]
|-
|[[User:Aliak11|Aliak11]] || ||1160-9718-1643 ||USA ||Add me and email me your friends code: atthegulf@gmail.com ||
|-
|[[User:capt.danny|capt.danny]] || ||4339:2914:5427 ||USA||Added everyone. Email fcs to danny9ds@gmail.com ||
|-
||[[user:jordan|jordan]]|| ||0473-8413-4597||USA||added all.||
|-
|Stopwatch8 || Stopwatch8 ||2449-4811-6942 ||USA || I have added everyone here. I would be happy if I were added as well! I just like to see what titles everyone plays. :) ||[[File:Stopwatch8.JPG|120px]]
|}