3dbrew - User contributions [en]

Mii Maker

2014-09-07T19:39:45Z

Origamiguy:

'''Mii Maker''' lets you create Miis, like Wii Mii Channel. Here you can transfer Miis over [[NWM_Services|local-WLAN]] from other systems running Mii Maker(3DS/Wii U), or from Wii Mii Channel. 3DS Miis can't be transfered to Wii Mii Channel, only from Wii.

== Wii Mii Channel transfer protocol ==

The Wii beacons are similar to the usual multi-cart NDS beacons, except: beacon_type is zero, and payload size is 0x14. The payload data is just the Wii UTF-16 nickname, with some extra unused zero data. The usual multi-cast NDS protocol is used for sending the 3DS nick to the Wii. After many keep-alive frames, it eventually sends a bunch of frames, each containing the whole Mii. There's a 6-byte header, followed by [http://wiibrew.org/wiki/Wiimote/Mii_Data Mii data]. At the end of these frames like most NDS frames is the 0200 byte marker.

== Mii QR Code format ==

3DS Mii QR is a standard 57x57 pixel Level 10 High ECC QR code with 'Mii' logo in center (refer to [http://www.denso-wave.com/qrcode Denso-Wave Inc] web site for QR Code format specifications). It contains 0x70-bytes of binary data. 3DS seems to have a fully implemented QR-code decoder, as it can interpret such Mii binary data being encoded even in the smallest possible for that data size Level 6 Low ECC QR code.

The data itself is encrypted with AES-CCM, xorpads can be determined from known plaintext here. The Mii Maker application uses the [[NS]] APT Wrap/Unwrap commands to encrypt/decrypt this Mii data. For the NS [[APT:Unwrap|Unwrap]] command, the Mii Maker application uses blocksize=12, noncesize=10, and inputbuffer-size=0x60. The first 8-bytes(cleartext MiiID+MAC address) in the below Mii data is the nonce used with the NS Unwrap/Wrap commands, the rest of the data at 0x8-0x5F is encrypted.

{| class="wikitable"
|-
! Offset
! Length
!
|-
| 0x0
| 0x4
| Mii ID (big-endian 32-bit unsigned integer) The most significant 3 bits determine whether the Mii is Special, Foreign, or Normal [http://www.davidhawley.co.uk/special-miis-gold-pants-and-creating.aspx] time_offset = (mii_id & 0x0FFFFFFF) * 2; time_offset is the time the Mii was created, represented as the number of seconds since 01/01/2010 00:00:00
|-
| 0x4
| 0x4
| High 4 octets of MAC address [http://www.adminsub.net/mac-address-finder/nintendo]
|-
| 0x8
| 0x1
| Unknown, the encrypted data begins here.
|-
| 0x9
| 0x1
| Allow Copying
|-
| 0xA
| 0xE
| unknown
|-
| 0x18
| 0x2
| Bit-mapped: Birthday (4bit-day,5bit-month), Sex, Shirt, ??
|-
| 0x1A
| 0x14
| UTF-16 Mii Name (10 chars max)
|-
| 0x2E
| 0x2
| unknown
|-
| 0x30
| 0x1
| bit 0: sharing enable bit 1-4: face shape bit 5-7: skin color
|-
| 0x31
| 0x1
| bit 0-3: wrinkles bit 4-7: makeup
|-
| 0x32
| 0x1
| hair style
|-
| 0x33
| 0x1
| bit 0-2: hair color bit 3: flip hair
|-
| 0x34
| 0x4
| unknown
|-
| 0x38
| 0x1
| bit 0-4: eyebrow style bit 5-7: eyebrow color
|-
| 0x39
| 0x1
| bit 0-3: eyebrow scale bit 4-6: eyebrow yscale
|-
| 0x3A
| 0x2
| note that the bytes are swapped over (little-endian layout) bit 0-3: eyebrow rotation bit 5-8: eyebrow x spacing bit 9-13: eyebrow y position
|-
| 0x3C
| 0x1
| Allow Copying
|-
| 0x3D
| 0x3
| unknown
|-
| 0x40
| 0x1
| Mii Sharing Value
|-
| 0x41
| 0x7
| unknown
|-
| 0x48
| 0x14
| UTF-16 Author Name (10 chars max)
|-
| 0x5C
| 0x2
| unknown
|-
| 0x5E
| 0x2
| unknown
|-
| 0x60
| 0x10
| AES-CCM MAC
|}

* QR codes made from the same 3DS for the same Mii are use the same AES-CCM nonce (you can recreate the xorpad by xoring with known values from this table).

== ExtData ==
The ExtData [[Extdata#Filesystem|File System]] for Mii Maker is as follows:

root
├── icon
├── boss
└── user
└── ExBanner
└── COMMON.bin

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! FW Introduced
! Plaintext
|-
| icon
| Duplicate from Application ExeFS. Always image 00000002.
| 0x36c0 Bytes
| [[1.0.0-0]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/MiiMakerExtdata/icon Download]
|-
| COMMON.bin
| [[Extended Banner]] for Home Menu. Always image 00000003.
| 0x20224 Bytes
| [[1.0.0-0]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/MiiMakerExtdata/COMMON.bin Download]
|}

Mii Maker

2014-09-07T18:23:11Z

Origamiguy: document 0x32-0x33

'''Mii Maker''' lets you create Miis, like Wii Mii Channel. Here you can transfer Miis over [[NWM_Services|local-WLAN]] from other systems running Mii Maker(3DS/Wii U), or from Wii Mii Channel. 3DS Miis can't be transfered to Wii Mii Channel, only from Wii.

== Wii Mii Channel transfer protocol ==

The Wii beacons are similar to the usual multi-cart NDS beacons, except: beacon_type is zero, and payload size is 0x14. The payload data is just the Wii UTF-16 nickname, with some extra unused zero data. The usual multi-cast NDS protocol is used for sending the 3DS nick to the Wii. After many keep-alive frames, it eventually sends a bunch of frames, each containing the whole Mii. There's a 6-byte header, followed by [http://wiibrew.org/wiki/Wiimote/Mii_Data Mii data]. At the end of these frames like most NDS frames is the 0200 byte marker.

== Mii QR Code format ==

3DS Mii QR is a standard 57x57 pixel Level 10 High ECC QR code with 'Mii' logo in center (refer to [http://www.denso-wave.com/qrcode Denso-Wave Inc] web site for QR Code format specifications). It contains 0x70-bytes of binary data. 3DS seems to have a fully implemented QR-code decoder, as it can interpret such Mii binary data being encoded even in the smallest possible for that data size Level 6 Low ECC QR code.

The data itself is encrypted with AES-CCM, xorpads can be determined from known plaintext here. The Mii Maker application uses the [[NS]] APT Wrap/Unwrap commands to encrypt/decrypt this Mii data. For the NS [[APT:Unwrap|Unwrap]] command, the Mii Maker application uses blocksize=12, noncesize=10, and inputbuffer-size=0x60. The first 8-bytes(cleartext MiiID+MAC address) in the below Mii data is the nonce used with the NS Unwrap/Wrap commands, the rest of the data at 0x8-0x5F is encrypted.

{| class="wikitable"
|-
! Offset
! Length
!
|-
| 0x0
| 0x4
| Mii ID (big-endian 32-bit unsigned integer)

The most significant 3 bits determine whether the Mii is Special, Foreign, or Normal [http://www.davidhawley.co.uk/special-miis-gold-pants-and-creating.aspx]

time_offset = (mii_id & 0x0FFFFFFF) * 2;

time_offset is the time the Mii was created, represented as the number of seconds since 01/01/2010 00:00:00
|-
| 0x4
| 0x4
| High 4 octets of MAC address [http://www.adminsub.net/mac-address-finder/nintendo]
|-
| 0x8
| 0x1
| Unknown, the encrypted data begins here.
|-
| 0x9
| 0x1
| Allow Copying
|-
| 0xA
| 0xE
| unknown
|-
| 0x18
| 0x2
| Bit-mapped: Birthday (4bit-day,5bit-month), Sex, Shirt, ??
|-
| 0x1A
| 0x14
| UTF-16 Mii Name (10 chars max)
|-
| 0x2E
| 0x2
| unknown
|-
| 0x30
| 0x1
| bit 0: sharing enable bit 1-4: face shape bit 5-7: skin color
|-
| 0x31
| 0x1
| bit 0-3: wrinkles bit 4-7: makeup
|-
| 0x32
| 0x1
| hair style
|-
| 0x33
| 0x1
| bit 0-2: hair color bit 3: flip hair
|-
| 0x34
| 0x4
| unknown
|-
| 0x38
| 0x1
| bit 0-4: eyebrow style bit 5-7: eyebrow color
|-
| 0x39
| 0x1
| bit 0-3: eyebrow scale bit 4-6: eyebrow yscale
|-
| 0x3A
| 0x2
| note that the bytes are swapped over (little-endian layout) bit 0-3: eyebrow rotation bit 5-8: eyebrow x spacing bit 9-13: eyebrow y position
|-
| 0x3C
| 0x1
| Allow Copying
|-
| 0x3D
| 0x3
| unknown
|-
| 0x40
| 0x1
| Mii Sharing Value
|-
| 0x41
| 0x7
| unknown
|-
| 0x48
| 0x14
| UTF-16 Author Name (10 chars max)
|-
| 0x5C
| 0x2
| unknown
|-
| 0x5E
| 0x2
| unknown
|-
| 0x60
| 0x10
| AES-CCM MAC
|}

* QR codes made from the same 3DS for the same Mii are use the same AES-CCM nonce (you can recreate the xorpad by xoring with known values from this table).

== ExtData ==
The ExtData [[Extdata#Filesystem|File System]] for Mii Maker is as follows:

root
├── icon
├── boss
└── user
└── ExBanner
└── COMMON.bin

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! FW Introduced
! Plaintext
|-
| icon
| Duplicate from Application ExeFS. Always image 00000002.
| 0x36c0 Bytes
| [[1.0.0-0]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/MiiMakerExtdata/icon Download]
|-
| COMMON.bin
| [[Extended Banner]] for Home Menu. Always image 00000003.
| 0x20224 Bytes
| [[1.0.0-0]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/MiiMakerExtdata/COMMON.bin Download]
|}

Mii Maker

2014-09-07T18:12:34Z

Origamiguy:

'''Mii Maker''' lets you create Miis, like Wii Mii Channel. Here you can transfer Miis over [[NWM_Services|local-WLAN]] from other systems running Mii Maker(3DS/Wii U), or from Wii Mii Channel. 3DS Miis can't be transfered to Wii Mii Channel, only from Wii.

== Wii Mii Channel transfer protocol ==

The Wii beacons are similar to the usual multi-cart NDS beacons, except: beacon_type is zero, and payload size is 0x14. The payload data is just the Wii UTF-16 nickname, with some extra unused zero data. The usual multi-cast NDS protocol is used for sending the 3DS nick to the Wii. After many keep-alive frames, it eventually sends a bunch of frames, each containing the whole Mii. There's a 6-byte header, followed by [http://wiibrew.org/wiki/Wiimote/Mii_Data Mii data]. At the end of these frames like most NDS frames is the 0200 byte marker.

== Mii QR Code format ==

3DS Mii QR is a standard 57x57 pixel Level 10 High ECC QR code with 'Mii' logo in center (refer to [http://www.denso-wave.com/qrcode Denso-Wave Inc] web site for QR Code format specifications). It contains 0x70-bytes of binary data. 3DS seems to have a fully implemented QR-code decoder, as it can interpret such Mii binary data being encoded even in the smallest possible for that data size Level 6 Low ECC QR code.

The data itself is encrypted with AES-CCM, xorpads can be determined from known plaintext here. The Mii Maker application uses the [[NS]] APT Wrap/Unwrap commands to encrypt/decrypt this Mii data. For the NS [[APT:Unwrap|Unwrap]] command, the Mii Maker application uses blocksize=12, noncesize=10, and inputbuffer-size=0x60. The first 8-bytes(cleartext MiiID+MAC address) in the below Mii data is the nonce used with the NS Unwrap/Wrap commands, the rest of the data at 0x8-0x5F is encrypted.

{| class="wikitable"
|-
! Offset
! Length
!
|-
| 0x0
| 0x4
| Mii ID (big-endian 32-bit unsigned integer)

The most significant 3 bits determine whether the Mii is Special, Foreign, or Normal [http://www.davidhawley.co.uk/special-miis-gold-pants-and-creating.aspx]

time_offset = (mii_id & 0x0FFFFFFF) * 2;

time_offset is the time the Mii was created, represented as the number of seconds since 01/01/2010 00:00:00
|-
| 0x4
| 0x4
| High 4 octets of MAC address [http://www.adminsub.net/mac-address-finder/nintendo]
|-
| 0x8
| 0x1
| Unknown, the encrypted data begins here.
|-
| 0x9
| 0x1
| Allow Copying
|-
| 0xA
| 0xE
| unknown
|-
| 0x18
| 0x2
| Bit-mapped: Birthday (4bit-day,5bit-month), Sex, Shirt, ??
|-
| 0x1A
| 0x14
| UTF-16 Mii Name (10 chars max)
|-
| 0x2E
| 0x2
| unknown
|-
| 0x30
| 0x1
| bit 0: sharing enable bit 1-4: face shape bit 5-7: skin color
|-
| 0x31
| 0x1
| bit 0-3: wrinkles bit 4-7: makeup
|-
| 0x32
| 0x6
| unknown
|-
| 0x38
| 0x1
| bit 0-4: eyebrow style bit 5-7: eyebrow color
|-
| 0x39
| 0x1
| bit 0-3: eyebrow scale bit 4-6: eyebrow yscale
|-
| 0x3A
| 0x2
| note that the bytes are swapped over (little-endian layout) bit 0-3: eyebrow rotation bit 5-8: eyebrow x spacing bit 9-13: eyebrow y position
|-
| 0x3C
| 0x1
| Allow Copying
|-
| 0x3D
| 0x3
| unknown
|-
| 0x40
| 0x1
| Mii Sharing Value
|-
| 0x41
| 0x7
| unknown
|-
| 0x48
| 0x14
| UTF-16 Author Name (10 chars max)
|-
| 0x5C
| 0x2
| unknown
|-
| 0x5E
| 0x2
| unknown
|-
| 0x60
| 0x10
| AES-CCM MAC
|}

* QR codes made from the same 3DS for the same Mii are use the same AES-CCM nonce (you can recreate the xorpad by xoring with known values from this table).

== ExtData ==
The ExtData [[Extdata#Filesystem|File System]] for Mii Maker is as follows:

root
├── icon
├── boss
└── user
└── ExBanner
└── COMMON.bin

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! FW Introduced
! Plaintext
|-
| icon
| Duplicate from Application ExeFS. Always image 00000002.
| 0x36c0 Bytes
| [[1.0.0-0]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/MiiMakerExtdata/icon Download]
|-
| COMMON.bin
| [[Extended Banner]] for Home Menu. Always image 00000003.
| 0x20224 Bytes
| [[1.0.0-0]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/MiiMakerExtdata/COMMON.bin Download]
|}

Mii Maker

2014-09-07T18:02:27Z

Origamiguy: document 0x39-0x3B

'''Mii Maker''' lets you create Miis, like Wii Mii Channel. Here you can transfer Miis over [[NWM_Services|local-WLAN]] from other systems running Mii Maker(3DS/Wii U), or from Wii Mii Channel. 3DS Miis can't be transfered to Wii Mii Channel, only from Wii.

== Wii Mii Channel transfer protocol ==

The Wii beacons are similar to the usual multi-cart NDS beacons, except: beacon_type is zero, and payload size is 0x14. The payload data is just the Wii UTF-16 nickname, with some extra unused zero data. The usual multi-cast NDS protocol is used for sending the 3DS nick to the Wii. After many keep-alive frames, it eventually sends a bunch of frames, each containing the whole Mii. There's a 6-byte header, followed by [http://wiibrew.org/wiki/Wiimote/Mii_Data Mii data]. At the end of these frames like most NDS frames is the 0200 byte marker.

== Mii QR Code format ==

3DS Mii QR is a standard 57x57 pixel Level 10 High ECC QR code with 'Mii' logo in center (refer to [http://www.denso-wave.com/qrcode Denso-Wave Inc] web site for QR Code format specifications). It contains 0x70-bytes of binary data. 3DS seems to have a fully implemented QR-code decoder, as it can interpret such Mii binary data being encoded even in the smallest possible for that data size Level 6 Low ECC QR code.

The data itself is encrypted with AES-CCM, xorpads can be determined from known plaintext here. The Mii Maker application uses the [[NS]] APT Wrap/Unwrap commands to encrypt/decrypt this Mii data. For the NS [[APT:Unwrap|Unwrap]] command, the Mii Maker application uses blocksize=12, noncesize=10, and inputbuffer-size=0x60. The first 8-bytes(cleartext MiiID+MAC address) in the below Mii data is the nonce used with the NS Unwrap/Wrap commands, the rest of the data at 0x8-0x5F is encrypted.

{| class="wikitable"
|-
! Offset
! Length
!
|-
| 0x0
| 0x4
| Mii ID (big-endian 32-bit unsigned integer)

The most significant 3 bits determine whether the Mii is Special, Foreign, or Normal [http://www.davidhawley.co.uk/special-miis-gold-pants-and-creating.aspx]

time_offset = (mii_id & 0x0FFFFFFF) * 2;

time_offset is the time the Mii was created, represented as the number of seconds since 01/01/2010 00:00:00
|-
| 0x4
| 0x4
| High 4 octets of MAC address [http://www.adminsub.net/mac-address-finder/nintendo]
|-
| 0x8
| 0x1
| Unknown, the encrypted data begins here.
|-
| 0x9
| 0x1
| Allow Copying
|-
| 0xA
| 0xE
| unknown
|-
| 0x18
| 0x2
| Bit-mapped: Birthday (4bit-day,5bit-month), Sex, Shirt, ??
|-
| 0x1A
| 0x14
| UTF-16 Mii Name
|-
| 0x2E
| 0x2
| unknown
|-
| 0x30
| 0x1
| from MSB to LSB: 3-bit skin color, 4-bit face shape, 1-bit sharing enable
|-
| 0x31
| 0x1
| from MSB to LSB: 4-bit makeup, 4-bit wrinkles
|-
| 0x32
| 0x6
| unknown
|-
| 0x38
| 0x1
| from MSB to LSB: 3-bit eyebrow color, 5-bit eyebrow style
|-
| 0x39
| 0x1
| from MSB to LSB: 1-bit unknown, 3-bit eyebrow yscale, 4-bit eyebrow scale
|-
| 0x3A
| 0x2
| from MSB to LSB (note that MSB is in 0x3B, LSB is in 0x3A, little-endian bytes yay)
2-bit unknown, 5-bit eyebrow elevation, 4-bit eyebrow spacing, 1-bit unknown, 4-bit eyebrow rotation
|-
| 0x3C
| 0x1
| Allow Copying
|-
| 0x3D
| 0x3
| unknown
|-
| 0x40
| 0x1
| Mii Sharing Value
|-
| 0x41
| 0x7
| unknown
|-
| 0x48
| 0x14
| UTF-16 Author Name
|-
| 0x5C
| 0x2
| unknown
|-
| 0x5E
| 0x2
| unknown
|-
| 0x60
| 0x10
| AES-CCM MAC
|}

* QR codes made from the same 3DS for the same Mii are use the same AES-CCM nonce (you can recreate the xorpad by xoring with known values from this table).

== ExtData ==
The ExtData [[Extdata#Filesystem|File System]] for Mii Maker is as follows:

root
├── icon
├── boss
└── user
└── ExBanner
└── COMMON.bin

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! FW Introduced
! Plaintext
|-
| icon
| Duplicate from Application ExeFS. Always image 00000002.
| 0x36c0 Bytes
| [[1.0.0-0]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/MiiMakerExtdata/icon Download]
|-
| COMMON.bin
| [[Extended Banner]] for Home Menu. Always image 00000003.
| 0x20224 Bytes
| [[1.0.0-0]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/MiiMakerExtdata/COMMON.bin Download]
|}

Mii Maker

2014-09-07T16:17:24Z

Origamiguy: documenting 0x38

'''Mii Maker''' lets you create Miis, like Wii Mii Channel. Here you can transfer Miis over [[NWM_Services|local-WLAN]] from other systems running Mii Maker(3DS/Wii U), or from Wii Mii Channel. 3DS Miis can't be transfered to Wii Mii Channel, only from Wii.

== Wii Mii Channel transfer protocol ==

The Wii beacons are similar to the usual multi-cart NDS beacons, except: beacon_type is zero, and payload size is 0x14. The payload data is just the Wii UTF-16 nickname, with some extra unused zero data. The usual multi-cast NDS protocol is used for sending the 3DS nick to the Wii. After many keep-alive frames, it eventually sends a bunch of frames, each containing the whole Mii. There's a 6-byte header, followed by [http://wiibrew.org/wiki/Wiimote/Mii_Data Mii data]. At the end of these frames like most NDS frames is the 0200 byte marker.

== Mii QR Code format ==

3DS Mii QR is a standard 57x57 pixel Level 10 High ECC QR code with 'Mii' logo in center (refer to [http://www.denso-wave.com/qrcode Denso-Wave Inc] web site for QR Code format specifications). It contains 0x70-bytes of binary data. 3DS seems to have a fully implemented QR-code decoder, as it can interpret such Mii binary data being encoded even in the smallest possible for that data size Level 6 Low ECC QR code.

The data itself is encrypted with AES-CCM, xorpads can be determined from known plaintext here. The Mii Maker application uses the [[NS]] APT Wrap/Unwrap commands to encrypt/decrypt this Mii data. For the NS [[APT:Unwrap|Unwrap]] command, the Mii Maker application uses blocksize=12, noncesize=10, and inputbuffer-size=0x60. The first 8-bytes(cleartext MiiID+MAC address) in the below Mii data is the nonce used with the NS Unwrap/Wrap commands, the rest of the data at 0x8-0x5F is encrypted.

{| class="wikitable"
|-
! Offset
! Length
!
|-
| 0x0
| 0x4
| Mii ID (big-endian 32-bit unsigned integer)

The most significant 3 bits determine whether the Mii is Special, Foreign, or Normal [http://www.davidhawley.co.uk/special-miis-gold-pants-and-creating.aspx]

time_offset = (mii_id & 0x0FFFFFFF) * 2;

time_offset is the time the Mii was created, represented as the number of seconds since 01/01/2010 00:00:00
|-
| 0x4
| 0x4
| High 4 octets of MAC address [http://www.adminsub.net/mac-address-finder/nintendo]
|-
| 0x8
| 0x1
| Unknown, the encrypted data begins here.
|-
| 0x9
| 0x1
| Allow Copying
|-
| 0xA
| 0xE
| unknown
|-
| 0x18
| 0x2
| Bit-mapped: Birthday (4bit-day,5bit-month), Sex, Shirt, ??
|-
| 0x1A
| 0x14
| UTF-16 Mii Name
|-
| 0x2E
| 0x2
| unknown
|-
| 0x30
| 0x1
| from MSB to LSB: 3-bit skin color, 4-bit face shape, 1-bit sharing enable
|-
| 0x31
| 0x1
| from MSB to LSB: 4-bit makeup, 4-bit wrinkles
|-
| 0x32
| 0x6
| unknown
|-
| 0x38
| 0x1
| from MSB to LSB: 3-bit eyebrow color, 5-bit eyebrow style
|-
| 0x39
| 0x3
| unknown
|-
| 0x3C
| 0x1
| Allow Copying
|-
| 0x3D
| 0x3
| unknown
|-
| 0x40
| 0x1
| Mii Sharing Value
|-
| 0x41
| 0x7
| unknown
|-
| 0x48
| 0x14
| UTF-16 Author Name
|-
| 0x5C
| 0x2
| unknown
|-
| 0x5E
| 0x2
| unknown
|-
| 0x60
| 0x10
| AES-CCM MAC
|}

* QR codes made from the same 3DS for the same Mii are use the same AES-CCM nonce (you can recreate the xorpad by xoring with known values from this table).

== ExtData ==
The ExtData [[Extdata#Filesystem|File System]] for Mii Maker is as follows:

root
├── icon
├── boss
└── user
└── ExBanner
└── COMMON.bin

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! FW Introduced
! Plaintext
|-
| icon
| Duplicate from Application ExeFS. Always image 00000002.
| 0x36c0 Bytes
| [[1.0.0-0]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/MiiMakerExtdata/icon Download]
|-
| COMMON.bin
| [[Extended Banner]] for Home Menu. Always image 00000003.
| 0x20224 Bytes
| [[1.0.0-0]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/MiiMakerExtdata/COMMON.bin Download]
|}

Mii Maker

2014-09-07T15:54:22Z

Origamiguy: Added description for bytes 0x30 and 0x31

'''Mii Maker''' lets you create Miis, like Wii Mii Channel. Here you can transfer Miis over [[NWM_Services|local-WLAN]] from other systems running Mii Maker(3DS/Wii U), or from Wii Mii Channel. 3DS Miis can't be transfered to Wii Mii Channel, only from Wii.

== Wii Mii Channel transfer protocol ==

The Wii beacons are similar to the usual multi-cart NDS beacons, except: beacon_type is zero, and payload size is 0x14. The payload data is just the Wii UTF-16 nickname, with some extra unused zero data. The usual multi-cast NDS protocol is used for sending the 3DS nick to the Wii. After many keep-alive frames, it eventually sends a bunch of frames, each containing the whole Mii. There's a 6-byte header, followed by [http://wiibrew.org/wiki/Wiimote/Mii_Data Mii data]. At the end of these frames like most NDS frames is the 0200 byte marker.

== Mii QR Code format ==

3DS Mii QR is a standard 57x57 pixel Level 10 High ECC QR code with 'Mii' logo in center (refer to [http://www.denso-wave.com/qrcode Denso-Wave Inc] web site for QR Code format specifications). It contains 0x70-bytes of binary data. 3DS seems to have a fully implemented QR-code decoder, as it can interpret such Mii binary data being encoded even in the smallest possible for that data size Level 6 Low ECC QR code.

The data itself is encrypted with AES-CCM, xorpads can be determined from known plaintext here. The Mii Maker application uses the [[NS]] APT Wrap/Unwrap commands to encrypt/decrypt this Mii data. For the NS [[APT:Unwrap|Unwrap]] command, the Mii Maker application uses blocksize=12, noncesize=10, and inputbuffer-size=0x60. The first 8-bytes(cleartext MiiID+MAC address) in the below Mii data is the nonce used with the NS Unwrap/Wrap commands, the rest of the data at 0x8-0x5F is encrypted.

{| class="wikitable"
|-
! Offset
! Length
!
|-
| 0x0
| 0x4
| Mii ID (big-endian 32-bit unsigned integer)

The most significant 3 bits determine whether the Mii is Special, Foreign, or Normal [http://www.davidhawley.co.uk/special-miis-gold-pants-and-creating.aspx]

time_offset = (mii_id & 0x0FFFFFFF) * 2;

time_offset is the time the Mii was created, represented as the number of seconds since 01/01/2010 00:00:00
|-
| 0x4
| 0x4
| High 4 octets of MAC address [http://www.adminsub.net/mac-address-finder/nintendo]
|-
| 0x8
| 0x1
| Unknown, the encrypted data begins here.
|-
| 0x9
| 0x1
| Allow Copying
|-
| 0xA
| 0xE
| unknown
|-
| 0x18
| 0x2
| Bit-mapped: Birthday (4bit-day,5bit-month), Sex, Shirt, ??
|-
| 0x1A
| 0x14
| UTF-16 Mii Name
|-
| 0x2E
| 0x2
| unknown
|-
| 0x30
| 0x1
| from MSB to LSB: 3-bit skin color, 4-bit face shape, 1-bit sharing enable
|-
| 0x31
| 0x1
| from MSB to LSB: 4-bit makeup, 4-bit wrinkles
|-
| 0x32
| 0xA
| unknown
|-
| 0x3C
| 0x1
| Allow Copying
|-
| 0x3D
| 0x3
| unknown
|-
| 0x40
| 0x1
| Mii Sharing Value
|-
| 0x41
| 0x7
| unknown
|-
| 0x48
| 0x14
| UTF-16 Author Name
|-
| 0x5C
| 0x2
| unknown
|-
| 0x5E
| 0x2
| unknown
|-
| 0x60
| 0x10
| AES-CCM MAC
|}

* QR codes made from the same 3DS for the same Mii are use the same AES-CCM nonce (you can recreate the xorpad by xoring with known values from this table).

== ExtData ==
The ExtData [[Extdata#Filesystem|File System]] for Mii Maker is as follows:

root
├── icon
├── boss
└── user
└── ExBanner
└── COMMON.bin

{| class="wikitable" border="1"
|-
! File
! Details
! Size
! FW Introduced
! Plaintext
|-
| icon
| Duplicate from Application ExeFS. Always image 00000002.
| 0x36c0 Bytes
| [[1.0.0-0]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/MiiMakerExtdata/icon Download]
|-
| COMMON.bin
| [[Extended Banner]] for Home Menu. Always image 00000003.
| 0x20224 Bytes
| [[1.0.0-0]]
| [https://dl.dropboxusercontent.com/u/60710927/CTR/Sample/MiiMakerExtdata/COMMON.bin Download]
|}

Mii Maker

2012-03-16T20:42:28Z

Origamiguy: More information regarding the Mii ID.. It's a timestamp.

'''Mii Maker''' lets you create Miis, like Wii Mii Channel. Here you can transfer Miis locally from other 3DSes, or from Wii Mii Channel. 3DS Miis can't be transfered to Wii Mii Channel, only from Wii.

== Wii Mii Channel transfer protocol ==

The Wii beacons are similar to the usual multi-cart NDS beacons, except: beacon_type is zero, and payload size is 0x14. The payload data is just the Wii UTF-16 nickname, with some extra unused zero data. The usual multi-cast NDS protocol is used for sending the 3DS nick to the Wii. After many keep-alive frames, it eventually sends a bunch of frames, each containing the whole Mii. There's a 6-byte header, followed by [http://wiibrew.org/wiki/Wiimote/Mii_Data Mii data]. At the end of these frames like most NDS frames is the 0200 byte marker.

== Mii QR Code format ==

3DS Mii QR is a standard 57x57 pixel Level 10 High ECC QR code with 'Mii' logo in center (refer to [http://www.denso-wave.com/qrcode Denso-Wave Inc] web site for QR Code format specifications). It contain 112 byte of binary data. 3DS seems to have fully implemented QR-code decoder, as it can interpret such Mii binary data being encoded even in the smallest possible for that data size Level 6 Low ECC QR code. The data itself is encrypted, presumably AES-CTR since some xorpads can be determined from known plaintext here. The CTR might be based on data stored here?

{| class="wikitable"
|-
! Offset
! Length
!
|-
| 0x0
| 0x4
| Mii ID (big-endian 32-bit unsigned integer)

The most significant 3 bits determine whether the Mii is Special, Foreign, or Normal [http://www.davidhawley.co.uk/special-miis-gold-pants-and-creating.aspx]

time_offset = (mii_id & 0x0FFFFFFF) * 2;

time_offset is the time the Mii was created, represented as the number of seconds since 01/01/2010 00:00:00
|-
| 0x4
| 0x4
| High 4 octets of MAC address [http://www.adminsub.net/mac-address-finder/nintendo]
|-
| 0x8
| 0x10
| unknown
|-
| 0x18
| 0x2
| Bit-mapped: Birthday (4bit-day,5bit-month), Sex, Shirt, ??
|-
| 0x1A
| 0x14
| UTF-16 Mii Name
|-
| 0x2E
| 0x1A
| unknown
|-
| 0x48
| 0x14
| UTF-16 Author Name
|-
| 0x5C
| 0x2
| unknown
|-
| 0x5E
| 0x2
| unknown (seems like the start of the checksum)
|-
| 0x60
| 0x10
| AES-CCM MAC?
|}

* Codes made from the same 3DS for the same Mii are encrypted with the same xorpad (you can recreate it by xoring with known values from this table).

Title list

2011-07-13T14:52:27Z

Origamiguy: /* 00040000 - eShop Titles */ added EUR: Pokedex 3D and Excitebike

The Nintendo 3DS utilizes a similar title-based organization as seen in the Wii and DSi platforms. The same [http://nus.cdn.c.shop.nintendowifi.net/ccs/download/ update server] is being used as was with the DSi, however a new common key has been introduced.

The organization of Title IDs has not been documented fully yet. It's unknown how regions are determined in titleids if at all though there does appear to be evidence that the regions are sequential, similar to how Wii System Menu Updates are ordered: JPN USA EUR KOR and CHN (introduced with the DSi).

== 00040010 - System Applications ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Region
! Description
! Versions
! Status
|-
| 00020000
| JPN
| ?
| v0, v1027
| Active
|-
| 00021000
| USA
| ?
| v0, v1027
| Active
|-
| 00022000
| EUR
| ?
| v0, v1027
| Active
|-
| 00020100
| JPN
| ?
| v0
| Active
|-
| 00021100
| USA
| ?
| v0
| Active
|-
| 00022100
| EUR
| ?
| v0
| Active
|-
| 00020200
| JPN
| ?
| v0, v1026
| Active
|-
| 00021200
| USA
| ?
| v0, v1026
| Active
|-
| 00022200
| EUR
| ?
| v0, v1026
| Active
|-
| 00020300
| JPN
| ?
| v0
| Active
|-
| 00021300
| USA
| ?
| v0
| Active
|-
| 00022300
| EUR
| ?
| v0
| Active
|-
| 00020400
| JPN
| [[Nintendo 3DS Camera]]
| v0
| Active
|-
| 00021400
| USA
| [[Nintendo 3DS Camera]]
| v0
| Active
|-
| 00022400
| EUR
| [[Nintendo 3DS Camera]]
| v0
| Active
|-
| 00020500
| JPN
| [[Nintendo 3DS Sound]]
| v0
| Active
|-
| 00021500
| USA
| [[Nintendo 3DS Sound]]
| v0
| Active
|-
| 00022500
| EUR
| [[Nintendo 3DS Sound]]
| v0
| Active
|-
| 00020700
| JPN
| ?
| v0, v1026
| Active
|-
| 00021700
| USA
| ?
| v0, v1026
| Active
|-
| 00022700
| EUR
| ?
| v0, v1026
| Active
|-
| 00020800
| JPN
| ?
| v0, v1027
| Active
|-
| 00021800
| USA
| ?
| v0, v1027
| Active
|-
| 00022800
| EUR
| ?
| v0, v1027
| Active
|-
| 00020900
| JPN
| [[eShop]]
| v4, v1026
| Active
|-
| 00021900
| USA
| [[eShop]]
| v4, v1026
| Active
|-
| 00022900
| EUR
| [[eShop]]
| v4, v1026
| Active
|-
| 00020A00
| JPN
| added with [[2.0.0-2]], probably web browser?
| v4
| Active
|-
| 00021A00
| USA
| added with [[2.0.0-2]], probably web browser?
| v4
| Active
|-
| 00022A00
| EUR
| added with [[2.0.0-2]], probably web browser?
| v4
| Active
|-
| 00023000
| JPN
| Promotional video
| v0, v2048
| Stubbed
|-
| 00024000
| USA
| Promotional video
| v0, v2048
| Stubbed
|-
| 00025000
| EUR
| Promotional video
| v0, v2048
| Stubbed
|}

== 0004001B ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! Versions
|-
| 00010002
| ?
| v0
|}

== 00040030 ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Region
! Description
! Versions
|-
| 00008202
| JPN
| ?
| v0, v1029
|-
| 00008A02
| All
| ?
| v0, v1025
|-
| 00008F02
| USA
| ?
| v0, v1027, v2049
|-
| 00009202
| USA
| ?
| v0, v1026
|-
| 00009302
| USA
| ?
| v0, v1026
|-
| 00009402
| USA
| ?
| v6
|-
| 00009602
| USA
| ?
| v0, v1026
|-
| 00009702
| USA
| ?
| v0, v1029
|-
| 00009802
| EUR
| ?
| v0, v1029
|-
| 0000C502
| All
| ?
| v0, v1026
|-
| 0000C802
| USA
| ?
| v0, v1026
|-
| 0000CC02
| USA
| ?
| v3
|}

== 0004009B ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Region
! Description
! Versions
|-
| 00010202
| All
| ?
| v0
|-
| 00010402
| All
| ?
| v0, v1024
|-
| 00010602
| All
| ?
| v2
|-
| 00011902
| JPN
| ?
| v0
|-
| 00011402
| USA
| ?
| v0
|-
| 00011202
| EUR
| ?
| v0
|-
| 00012202
| JPN
| ?
| v1026
|-
| 00012302
| USA
| ?
| v1026
|-
| 00012102
| EUR
| ?
| v1026
|-
| 00013302
| USA
| ?
| v1024
|}

== 000400DB ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Region
! Description
! Versions
|-
| 00016102
| EUR
| ?
| v32, v48
|-
| 00016302
| USA
| ?
| v32, v48
|-
| 00017102
| EUR
| ?
| v2049, v2069
|-
| 00017302
| USA
| ?
| v2049, v2069
|}

== 00040130 - FIRMWARE ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Title Name
! Description
! Versions
|-
| 00001502
| FIRMWARE 02_15
|
| v0. v1026
|-
| 00001503
| FIRMWARE 03_15
|
| v0
|-
| 00001602
| FIRMWARE 02_16
|
| v0, v1026
|-
| 00001702
| FIRMWARE 02_17
|
| v0, v1024
|-
| 00001703
| FIRMWARE 03_17
|
| v0
|-
| 00001802
| FIRMWARE 02_18
|
| v0, v1025
|-
| 00001803
| FIRMWARE 03_18
|
| v0
|-
| 00001A02
| FIRMWARE 02_1A
|
| v0
|-
| 00001A03
| FIRMWARE 03_1A
|
| v0
|-
| 00001B02
| FIRMWARE 02_1B
|
| v0
|-
| 00001B03
| FIRMWARE 03_1B
|
| v0
|-
| 00001C02
| FIRMWARE 02_1C
|
| v0, v1040, v2049
|-
| 00001C03
| FIRMWARE 03_1C
|
| v0
|-
| 00001D02
| FIRMWARE 02_1D
|
| v0, v1025
|-
| 00001D03
| FIRMWARE 03_1D
|
| v0
|-
| 00001E02
| FIRMWARE 02_1E
|
| v0
|-
| 00001E03
| FIRMWARE 03_1E
|
| v0
|-
| 00001F02
| FIRMWARE 02_1F
|
| v0, v1026
|-
| 00001F03
| FIRMWARE 03_1F
|
| v0
|-
| 00002002
| FIRMWARE 02_20
|
| v0
|-
| 00002102
| FIRMWARE 02_21
|
| v0
|-
| 00002103
| FIRMWARE 03_21
|
| v0
|-
| 00002202
| FIRMWARE 02_22
|
| v0, v1026
|-
| 00002203
| FIRMWARE 03_22
|
| v0
|-
| 00002302
| FIRMWARE 02_23
|
| v0, v1025
|-
| 00002303
| FIRMWARE 03_23
|
| v0
|-
| 00002402
| FIRMWARE 02_24
|
| v0, v1024, v2052
|-
| 00002403
| FIRMWARE 03_24
|
| v0
|-
| 00002602
| FIRMWARE 02_26
|
| v0, v1026
|-
| 00002702
| FIRMWARE 02_27
|
| v0, v1025
|-
| 00002703
| FIRMWARE 03_27
|
| v0
|-
| 00002802
| FIRMWARE 02_28
|
| v0, v1026
|-
| 00002902
| FIRMWARE 02_29
|
| v0, v1026
|-
| 00002903
| FIRMWARE 03_29
|
| v0
|-
| 00002A02
| FIRMWARE 02_2A
|
| v0
|-
| 00002A03
| FIRMWARE 03_2A
|
| v0
|-
| 00002B02
| FIRMWARE 02_2B
|
| v0, v1025
|-
| 00002C02
| FIRMWARE 02_2C
|
| v0, v1028
|-
| 00002C03
| FIRMWARE 03_2C
|
| v0
|-
| 00002D02
| FIRMWARE 02_2D
|
| v0, v1024, v2052
|-
| 00002D03
| FIRMWARE 03_2D
|
| v0
|-
| 00002E02
| FIRMWARE 02_2E
|
| v0, v1024, v2053
|-
| 00002E03
| FIRMWARE 03_2E
|
| v0
|-
| 00002F02
| FIRMWARE 02_2F
|
| v0, v1024
|-
| 00002F03
| FIRMWARE 03_2F
|
| v0
|-
| 00003102
| FIRMWARE 02_31
|
| v0, v1025
|-
| 00003103
| FIRMWARE 03_31
|
| v0
|-
| 00003202
| FIRMWARE 02_32
|
| v0, v1028
|-
| 00003203
| FIRMWARE 03_32
|
| v0
|-
| 00003302
| FIRMWARE 02_33
|
| v0, v1026
|-
| 00003303
| FIRMWARE 03_33
|
| v0
|-
| 00003402
| FIRMWARE 02_34
|
| v0, v1024, v2053
|-
| 00003502
| FIRMWARE 02_35
|
| v0, v1028
|-
| 00003702
| FIRMWARE 02_37
|
| v0
|-
| 00008002
| FIRMWARE 02_80
|
| v0, v1028
|-
| 00008003
| FIRMWARE 03_80
|
| v0
|}

== 00040138 ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! Versions
|-
| 00000002
| [[Home Menu]]
| v432, v1472, v2516, v3553
|-
| 00000003
| ?
| v432
|-
| 00000102
| ?
| v432, v1489
|}

== 00048005 ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! Versions
|-
| 42383841(B88A)
| [[DS Internet]]
| v0
|-
| 484E4441(HNDA)
| [[Download Play]]
| v1024
|}

== 0004800F ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! Versions
|-
| 484E4841(HNHA)
| [[Nintendo DS Cart Whitelist]]
| v0, v1026
|-
| 484E4C41(HNLA)
| Matches the DSi titleid low for [[Version Data]] but this title was never updated.(As of [[2.1.0-3]])
| v0
|}

== 00040000 - eShop Titles ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Region
! Description
! Versions
|-
| 00032600
| EUR
| Pokédex 3D
| v0
|-
| 00034700
| ?
| ?
| v0
|-
| 00040800
| ?
| ?
| v16
|-
| 00040900
| ?
| ?
| v16
|-
| 00040A00
| ?
| ?
| v16
|-
| 00040B00
| ?
| ?
| v16
|-
| 00040E00
| ?
| ?
| v0
|-
| 00041000
| ?
| ?
| v0
|-
| 00041100
| ?
| ?
| v0
|-
| 00041300
| ?
| ?
| v0
|-
| 00041500
| ?
| ?
| v0
|-
| 00041800
| ?
| ?
| v0
|-
| 00041D00
| ?
| ?
| v0
|-
| 00041E00
| ?
| ?
| v0
|-
| 00041F00
| ?
| ?
| v0
|-
| 00042400
| ?
| ?
| v0
|-
| 00042600
| ?
| ?
| v0
|-
| 00042700
| ?
| ?
| v0
|-
| 00042800
| ?
| ?
| v0
|-
| 00042900
| ?
| ?
| v16
|-
| 00042A00
| ?
| ?
| v0
|-
| 00042C00
| ?
| ?
| v0
|-
| 00042E00
| ?
| ?
| v0
|-
| 00043000
| ?
| ?
| v0
|-
| 00045C00
| JPN
| 3D Classics Excitebike
| v0
|-
| 00046C00
| EUR
| 3D Classics Excitebike
| v0
|-
| 00048900
| ?
| ?
| v0
|-
| 00049900
| ?
| ?
| v0
|-
| 00049D00
| ?
| ?
| v0
|-
| 0004A900
| ?
| ?
| v0
|-
| 0004AB00
| EUR
| Nintendo Video
| v0
|-
| 0004B400
| ?
| ?
| v0
|-
| 0004D500
| ?
| ?
| v0
|-
| 0004E700
| ?
| ?
| v16
|-
| 0004EF00
| ?
| ?
| v0
|-
| 0004F300
| ?
| ?
| v0
|-
| 0004FA00
| ?
| ?
| v0
|-
| 0004FD00
| ?
| ?
| v0
|-
| 00052600
| ?
| ?
| v32
|-
| 00052700
| ?
| ?
| v16
|-
| 00052800
| ?
| ?
| v0, v1024
|-
| 00052900
| ?
| ?
| v32
|-
| 00052A00
| ?
| ?
| v0
|-
| 00052D00
| ?
| ?
| v16
|-
| 00054300
| USA
| 3D Classics Excitebike
| v0
|-
| 00054E00
| ?
| ?
| v0, v1024
|-
| 00055800
| ?
| ?
| v16
|-
| 00059200
| ?
| ?
| v16
|-
| 0005AD00
| JPN
| Kid Icarus Uprising E3 Video
| v0
|-
| 0005AE00
| USA
| Kid Icarus Uprising E3 Video
| v0
|-
| 0005AF00
| JPN
| Paper Mario E3 Video
| v0
|-
| 0005B000
| USA
| Paper Mario E3 Video
| v0
|-
| 0005B100
| JPN
| Mario Kart E3 Video
| v0
|-
| 0005B200
| USA
| Mario Kart E3 Video
| v0
|-
| 0005B300
| JPN
| Animal Crossing E3 Video
| v0
|-
| 0005B400
| USA
| Animal Crossing E3 Video
| v0
|-
| 0005B500
| JPN
| Luigi's Mansion 2 E3 Video
| v0
|-
| 0005B600
| USA
| Luigi's Mansion 2 E3 Video
| v0
|-
| 0005B700
| JPN
| Zelda Ocarina of Time E3 Video
| v0
|-
| 0005B800
| USA
| Zelda Ocarina of Time E3 Video
| v0
|-
| 0005B900
| JPN
| Super Mario E3 Video
| v0
|-
| 0005BA00
| USA
| Super Mario E3 Video
| v0
|-
| 0005BB00
| JPN
| MGS Snake Eater 3D E3 Video
| v0
|-
| 0005BC00
| ?
| ?
| v32
|-
| 0005BD00
| JPN
| Biohazard Revelations E3 Video
| v16
|-
| 0005BE00
| ?
| ?
| v32
|-
| 0005BF00
| JPN
| Starfox 64 3D E3 Video
| v0
|-
| 0005C000
| USA
| Starfox 64 3D E3 Video
| v0
|-
| 0005EA00
| EUR
| Green Lantern 3D Trailer Video
| v0
|-
| 0005F000
| USA
| Green Lantern 3D Trailer Video
| v0
|-
| 0005F800
| ?
| ?
| v0
|-
| 0005F900
| ?
| ?
| v0
|-
| 0005FC00
| ?
| ?
| v0
|-
| 0005FD00
| ?
| ?
| v0
|-
| 00060000
| ?
| ?
| v0
|-
| 00062A00
| ?
| ?
| v0
|-
| 00062B00
| ?
| ?
| v0
|-
| 00062C00
| ?
| ?
| v0
|-
| 00063300
| ?
| ?
| v0
|-
| 00063400
| ?
| ?
| v0
|-
| 00063500
| ?
| ?
| v0
|-
| 00063600
| ?
| ?
| v0
|-
| 00063700
| ?
| ?
| v0
|-
| 00063800
| ?
| ?
| v0
|-
| 00063C00
| ?
| ?
| v0
|-
| 00063D00
| ?
| ?
| v0
|-
| 00063E00
| ?
| ?
| v0
|-
| 00063F00
| ?
| ?
| v0
|-
| 00064000
| ?
| ?
| v0
|-
| 00064100
| ?
| ?
| v0
|}

Title list

2011-07-13T13:59:36Z

Origamiguy: /* 00040000 - eShop Titles */

The Nintendo 3DS utilizes a similar title-based organization as seen in the Wii and DSi platforms. The same [http://nus.cdn.c.shop.nintendowifi.net/ccs/download/ update server] is being used as was with the DSi, however a new common key has been introduced.

The organization of Title IDs has not been documented fully yet. It's unknown how regions are determined in titleids if at all though there does appear to be evidence that the regions are sequential, similar to how Wii System Menu Updates are ordered: JPN USA EUR KOR and CHN (introduced with the DSi).

== 00040010 - System Applications ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Region
! Description
! Versions
! Status
|-
| 00020000
| JPN
| ?
| v0, v1027
| Active
|-
| 00021000
| USA
| ?
| v0, v1027
| Active
|-
| 00022000
| EUR
| ?
| v0, v1027
| Active
|-
| 00020100
| JPN
| ?
| v0
| Active
|-
| 00021100
| USA
| ?
| v0
| Active
|-
| 00022100
| EUR
| ?
| v0
| Active
|-
| 00020200
| JPN
| ?
| v0, v1026
| Active
|-
| 00021200
| USA
| ?
| v0, v1026
| Active
|-
| 00022200
| EUR
| ?
| v0, v1026
| Active
|-
| 00020300
| JPN
| ?
| v0
| Active
|-
| 00021300
| USA
| ?
| v0
| Active
|-
| 00022300
| EUR
| ?
| v0
| Active
|-
| 00020400
| JPN
| [[Nintendo 3DS Camera]]
| v0
| Active
|-
| 00021400
| USA
| [[Nintendo 3DS Camera]]
| v0
| Active
|-
| 00022400
| EUR
| [[Nintendo 3DS Camera]]
| v0
| Active
|-
| 00020500
| JPN
| [[Nintendo 3DS Sound]]
| v0
| Active
|-
| 00021500
| USA
| [[Nintendo 3DS Sound]]
| v0
| Active
|-
| 00022500
| EUR
| [[Nintendo 3DS Sound]]
| v0
| Active
|-
| 00020700
| JPN
| ?
| v0, v1026
| Active
|-
| 00021700
| USA
| ?
| v0, v1026
| Active
|-
| 00022700
| EUR
| ?
| v0, v1026
| Active
|-
| 00020800
| JPN
| ?
| v0, v1027
| Active
|-
| 00021800
| USA
| ?
| v0, v1027
| Active
|-
| 00022800
| EUR
| ?
| v0, v1027
| Active
|-
| 00020900
| JPN
| [[eShop]]
| v4, v1026
| Active
|-
| 00021900
| USA
| [[eShop]]
| v4, v1026
| Active
|-
| 00022900
| EUR
| [[eShop]]
| v4, v1026
| Active
|-
| 00020A00
| JPN
| added with [[2.0.0-2]], probably web browser?
| v4
| Active
|-
| 00021A00
| USA
| added with [[2.0.0-2]], probably web browser?
| v4
| Active
|-
| 00022A00
| EUR
| added with [[2.0.0-2]], probably web browser?
| v4
| Active
|-
| 00023000
| JPN
| Promotional video
| v0, v2048
| Stubbed
|-
| 00024000
| USA
| Promotional video
| v0, v2048
| Stubbed
|-
| 00025000
| EUR
| Promotional video
| v0, v2048
| Stubbed
|}

== 0004001B ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! Versions
|-
| 00010002
| ?
| v0
|}

== 00040030 ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Region
! Description
! Versions
|-
| 00008202
| JPN
| ?
| v0, v1029
|-
| 00008A02
| All
| ?
| v0, v1025
|-
| 00008F02
| USA
| ?
| v0, v1027, v2049
|-
| 00009202
| USA
| ?
| v0, v1026
|-
| 00009302
| USA
| ?
| v0, v1026
|-
| 00009402
| USA
| ?
| v6
|-
| 00009602
| USA
| ?
| v0, v1026
|-
| 00009702
| USA
| ?
| v0, v1029
|-
| 00009802
| EUR
| ?
| v0, v1029
|-
| 0000C502
| All
| ?
| v0, v1026
|-
| 0000C802
| USA
| ?
| v0, v1026
|-
| 0000CC02
| USA
| ?
| v3
|}

== 0004009B ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Region
! Description
! Versions
|-
| 00010202
| All
| ?
| v0
|-
| 00010402
| All
| ?
| v0, v1024
|-
| 00010602
| All
| ?
| v2
|-
| 00011902
| JPN
| ?
| v0
|-
| 00011402
| USA
| ?
| v0
|-
| 00011202
| EUR
| ?
| v0
|-
| 00012202
| JPN
| ?
| v1026
|-
| 00012302
| USA
| ?
| v1026
|-
| 00012102
| EUR
| ?
| v1026
|-
| 00013302
| USA
| ?
| v1024
|}

== 000400DB ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Region
! Description
! Versions
|-
| 00016102
| EUR
| ?
| v32, v48
|-
| 00016302
| USA
| ?
| v32, v48
|-
| 00017102
| EUR
| ?
| v2049, v2069
|-
| 00017302
| USA
| ?
| v2049, v2069
|}

== 00040130 - FIRMWARE ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Title Name
! Description
! Versions
|-
| 00001502
| FIRMWARE 02_15
|
| v0. v1026
|-
| 00001503
| FIRMWARE 03_15
|
| v0
|-
| 00001602
| FIRMWARE 02_16
|
| v0, v1026
|-
| 00001702
| FIRMWARE 02_17
|
| v0, v1024
|-
| 00001703
| FIRMWARE 03_17
|
| v0
|-
| 00001802
| FIRMWARE 02_18
|
| v0, v1025
|-
| 00001803
| FIRMWARE 03_18
|
| v0
|-
| 00001A02
| FIRMWARE 02_1A
|
| v0
|-
| 00001A03
| FIRMWARE 03_1A
|
| v0
|-
| 00001B02
| FIRMWARE 02_1B
|
| v0
|-
| 00001B03
| FIRMWARE 03_1B
|
| v0
|-
| 00001C02
| FIRMWARE 02_1C
|
| v0, v1040, v2049
|-
| 00001C03
| FIRMWARE 03_1C
|
| v0
|-
| 00001D02
| FIRMWARE 02_1D
|
| v0, v1025
|-
| 00001D03
| FIRMWARE 03_1D
|
| v0
|-
| 00001E02
| FIRMWARE 02_1E
|
| v0
|-
| 00001E03
| FIRMWARE 03_1E
|
| v0
|-
| 00001F02
| FIRMWARE 02_1F
|
| v0, v1026
|-
| 00001F03
| FIRMWARE 03_1F
|
| v0
|-
| 00002002
| FIRMWARE 02_20
|
| v0
|-
| 00002102
| FIRMWARE 02_21
|
| v0
|-
| 00002103
| FIRMWARE 03_21
|
| v0
|-
| 00002202
| FIRMWARE 02_22
|
| v0, v1026
|-
| 00002203
| FIRMWARE 03_22
|
| v0
|-
| 00002302
| FIRMWARE 02_23
|
| v0, v1025
|-
| 00002303
| FIRMWARE 03_23
|
| v0
|-
| 00002402
| FIRMWARE 02_24
|
| v0, v1024, v2052
|-
| 00002403
| FIRMWARE 03_24
|
| v0
|-
| 00002602
| FIRMWARE 02_26
|
| v0, v1026
|-
| 00002702
| FIRMWARE 02_27
|
| v0, v1025
|-
| 00002703
| FIRMWARE 03_27
|
| v0
|-
| 00002802
| FIRMWARE 02_28
|
| v0, v1026
|-
| 00002902
| FIRMWARE 02_29
|
| v0, v1026
|-
| 00002903
| FIRMWARE 03_29
|
| v0
|-
| 00002A02
| FIRMWARE 02_2A
|
| v0
|-
| 00002A03
| FIRMWARE 03_2A
|
| v0
|-
| 00002B02
| FIRMWARE 02_2B
|
| v0, v1025
|-
| 00002C02
| FIRMWARE 02_2C
|
| v0, v1028
|-
| 00002C03
| FIRMWARE 03_2C
|
| v0
|-
| 00002D02
| FIRMWARE 02_2D
|
| v0, v1024, v2052
|-
| 00002D03
| FIRMWARE 03_2D
|
| v0
|-
| 00002E02
| FIRMWARE 02_2E
|
| v0, v1024, v2053
|-
| 00002E03
| FIRMWARE 03_2E
|
| v0
|-
| 00002F02
| FIRMWARE 02_2F
|
| v0, v1024
|-
| 00002F03
| FIRMWARE 03_2F
|
| v0
|-
| 00003102
| FIRMWARE 02_31
|
| v0, v1025
|-
| 00003103
| FIRMWARE 03_31
|
| v0
|-
| 00003202
| FIRMWARE 02_32
|
| v0, v1028
|-
| 00003203
| FIRMWARE 03_32
|
| v0
|-
| 00003302
| FIRMWARE 02_33
|
| v0, v1026
|-
| 00003303
| FIRMWARE 03_33
|
| v0
|-
| 00003402
| FIRMWARE 02_34
|
| v0, v1024, v2053
|-
| 00003502
| FIRMWARE 02_35
|
| v0, v1028
|-
| 00003702
| FIRMWARE 02_37
|
| v0
|-
| 00008002
| FIRMWARE 02_80
|
| v0, v1028
|-
| 00008003
| FIRMWARE 03_80
|
| v0
|}

== 00040138 ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! Versions
|-
| 00000002
| [[Home Menu]]
| v432, v1472, v2516, v3553
|-
| 00000003
| ?
| v432
|-
| 00000102
| ?
| v432, v1489
|}

== 00048005 ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! Versions
|-
| 42383841(B88A)
| [[DS Internet]]
| v0
|-
| 484E4441(HNDA)
| [[Download Play]]
| v1024
|}

== 0004800F ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Description
! Versions
|-
| 484E4841(HNHA)
| [[Nintendo DS Cart Whitelist]]
| v0, v1026
|-
| 484E4C41(HNLA)
| Matches the DSi titleid low for [[Version Data]] but this title was never updated.(As of [[2.1.0-3]])
| v0
|}

== 00040000 - eShop Titles ==
{| class="wikitable" border="1"
|-
! TitleID Low
! Region
! Description
! Versions
|-
| 00032600
| ?
| ?
| v0
|-
| 00034700
| ?
| ?
| v0
|-
| 00040800
| ?
| ?
| v16
|-
| 00040900
| ?
| ?
| v16
|-
| 00040A00
| ?
| ?
| v16
|-
| 00040B00
| ?
| ?
| v16
|-
| 00040E00
| ?
| ?
| v0
|-
| 00041000
| ?
| ?
| v0
|-
| 00041100
| ?
| ?
| v0
|-
| 00041300
| ?
| ?
| v0
|-
| 00041500
| ?
| ?
| v0
|-
| 00041800
| ?
| ?
| v0
|-
| 00041D00
| ?
| ?
| v0
|-
| 00041E00
| ?
| ?
| v0
|-
| 00041F00
| ?
| ?
| v0
|-
| 00042400
| ?
| ?
| v0
|-
| 00042600
| ?
| ?
| v0
|-
| 00042700
| ?
| ?
| v0
|-
| 00042800
| ?
| ?
| v0
|-
| 00042900
| ?
| ?
| v16
|-
| 00042A00
| ?
| ?
| v0
|-
| 00042C00
| ?
| ?
| v0
|-
| 00042E00
| ?
| ?
| v0
|-
| 00043000
| ?
| ?
| v0
|-
| 00045C00
| JPN
| 3D Classic Excitebike
| v0
|-
| 00046C00
| ?
| ?
| v0
|-
| 00048900
| ?
| ?
| v0
|-
| 00049900
| ?
| ?
| v0
|-
| 00049D00
| ?
| ?
| v0
|-
| 0004A900
| ?
| ?
| v0
|-
| 0004AB00
| EUR
| Nintendo Video
| v0
|-
| 0004B400
| ?
| ?
| v0
|-
| 0004D500
| ?
| ?
| v0
|-
| 0004E700
| ?
| ?
| v16
|-
| 0004EF00
| ?
| ?
| v0
|-
| 0004F300
| ?
| ?
| v0
|-
| 0004FA00
| ?
| ?
| v0
|-
| 0004FD00
| ?
| ?
| v0
|-
| 00052600
| ?
| ?
| v32
|-
| 00052700
| ?
| ?
| v16
|-
| 00052800
| ?
| ?
| v0, v1024
|-
| 00052900
| ?
| ?
| v32
|-
| 00052A00
| ?
| ?
| v0
|-
| 00052D00
| ?
| ?
| v16
|-
| 00054300
| USA
| 3D Classics Excitebike
| v0
|-
| 00054E00
| ?
| ?
| v0, v1024
|-
| 00055800
| ?
| ?
| v16
|-
| 00059200
| ?
| ?
| v16
|-
| 0005AD00
| JPN
| Kid Icarus Uprising E3 Video
| v0
|-
| 0005AE00
| USA
| Kid Icarus Uprising E3 Video
| v0
|-
| 0005AF00
| JPN
| Paper Mario E3 Video
| v0
|-
| 0005B000
| USA
| Paper Mario E3 Video
| v0
|-
| 0005B100
| JPN
| Mario Kart E3 Video
| v0
|-
| 0005B200
| USA
| Mario Kart E3 Video
| v0
|-
| 0005B300
| JPN
| Animal Crossing E3 Video
| v0
|-
| 0005B400
| USA
| Animal Crossing E3 Video
| v0
|-
| 0005B500
| JPN
| Luigi's Mansion 2 E3 Video
| v0
|-
| 0005B600
| USA
| Luigi's Mansion 2 E3 Video
| v0
|-
| 0005B700
| JPN
| Zelda Ocarina of Time E3 Video
| v0
|-
| 0005B800
| USA
| Zelda Ocarina of Time E3 Video
| v0
|-
| 0005B900
| JPN
| Super Mario E3 Video
| v0
|-
| 0005BA00
| USA
| Super Mario E3 Video
| v0
|-
| 0005BB00
| JPN
| MGS Snake Eater 3D E3 Video
| v0
|-
| 0005BC00
| ?
| ?
| v32
|-
| 0005BD00
| JPN
| Biohazard Revelations E3 Video
| v16
|-
| 0005BE00
| ?
| ?
| v32
|-
| 0005BF00
| JPN
| Starfox 64 3D E3 Video
| v0
|-
| 0005C000
| USA
| Starfox 64 3D E3 Video
| v0
|-
| 0005EA00
| EUR
| Green Lantern 3D Trailer Video
| v0
|-
| 0005F000
| USA
| Green Lantern 3D Trailer Video
| v0
|-
| 0005F800
| ?
| ?
| v0
|-
| 0005F900
| ?
| ?
| v0
|-
| 0005FC00
| ?
| ?
| v0
|-
| 0005FD00
| ?
| ?
| v0
|-
| 00060000
| ?
| ?
| v0
|-
| 00062A00
| ?
| ?
| v0
|-
| 00062B00
| ?
| ?
| v0
|-
| 00062C00
| ?
| ?
| v0
|-
| 00063300
| ?
| ?
| v0
|-
| 00063400
| ?
| ?
| v0
|-
| 00063500
| ?
| ?
| v0
|-
| 00063600
| ?
| ?
| v0
|-
| 00063700
| ?
| ?
| v0
|-
| 00063800
| ?
| ?
| v0
|-
| 00063C00
| ?
| ?
| v0
|-
| 00063D00
| ?
| ?
| v0
|-
| 00063E00
| ?
| ?
| v0
|-
| 00063F00
| ?
| ?
| v0
|-
| 00064000
| ?
| ?
| v0
|-
| 00064100
| ?
| ?
| v0
|}

SD Filesystem

2011-07-13T13:56:57Z

Origamiguy: added Nintendo Video IDs.

The 3DS uses an SD Card for general storage of additional game data, music and photos taken with the 3DS.

/DCIM - Photos and images downloaded with the Internet Browser
/Music - Music Files
/Nintendo 3DS - Game Data

Additional game data is stored here:

/Nintendo 3DS/<SomeID>/<SomeID>/extdata/00000000

0000008f - Some [[2.0.0-2]] data, unknown doesn't appear in extdata management.
00000098 - eShop - EUR (Unconfirmed)
00000207 - Mii Maker - JPN
0000020d - Face Raiders - JPN
00000210 - Some [[2.0.0-2]] data, unknown doesn't appear in extdata management.
00000217 - Mii Maker - USA
00000219 - eShop USA
0000021d - Face Raiders - USA
00000227 - Mii Maker - EUR
0000022d - Face Raiders - EUR
0000030c - Nintendogs + Cats - EUR
00000326 - Pokédex 3D - EUR
0000032d - Super Street Fighter IV 3D - USA
0000033b - Ridge Racer 3D - EUR
0000033c - Super Street Fighter IV 3D - EUR
0000034d - Samurai Warriors Chronicles - USA
00000358 - Ridge Racer 3D - USA
000004ab - Nintendo Video - EUR

All "extra data" under [[extdata]] is encrypted. Although these files use 0xFF blocks similar to FLASH [[Savegames|saves]], extdata can't be decrypted with the xorpad fail like FLASH saves. All "extra data" files can't be copied to other 3DS SD cards, they are locked to the console.

With the introduction of the June update the folder structure changed slightly. You will now find "dbs" and "title" folders located in /Nintendo 3DS/<SomeID>/<SomeID>/ along with the extdata folder. "dbs" contains two files, import.db and title.db - usage currently unknown.

/title/00040000/ Contains eshop downloads (can someone verify these and add for different regions?):
00032600 - Pokedex 3D - EUR (verified)
00042a00 - Legend of Zelda - Link's Awakening - EUR
0004ab00 - Nintendo Video - EUR
00054300 - 3D Classics Excitebike - USA
00054e00 - 3D Classics Excitebike - EUR (verified)
00054300 - 3D Classics Excitebike - USA
00045C00 - 3D Classics Excitebike - JPN
For more IDs, see the 00040000 titles on the [[Title_list]].

The above title directories contain two dirs: content and data. content contains 00000000.tmd, .app files, and some cmd dir containing 00000001.cmd, all of which are encrypted with a console-unique key. The data dir contains 00000001.sav, this is the title's encrypted savegame. Although these saves look similar to FLASH savegames, these savegames use proper unique CTR for each AES block in the file, and the CTR properly changes for each savegame write. Renaming these savegames causes home-menu to hang while launching titles, modifying saves throws the usual checksum/hash corruption like gamecard flash saves.

When renaming _any_ of these files/dir under content, the icon in home-menu is still displayed. Modifying any of these files has same result as renaming them. When renaming the cmd dir/cmd file, or 00000000.app, the 3D banner isn't displayed. When renaming the cmd dir or the file contained in that dir, home-menu will refuse to run the title, and the manual will not work.(will display the black screen saying sdcard isn't inserted) Manual won't load when 00000001.app is renamed, so that .app might be the manual? When the main 00000000.app binary is renamed, the title will not launch and in the manual placeholder text is used for the title name/icon. Home-menu doesn't care at all when tmd is renamed. So the manual does not read the data from the same address of the .app file
like the the menu. If the manual does not find the name/icon at the correct location in the file, it will display the placeholder text too.

"Private" data is stored here:

/Nintendo 3DS/Private/<Title ID Low>/

00020400 - Nintendo 3DS Camera
00020500 - Nintendo 3DS Sound

"Private" data for 3DS Sound/Camera are cleartext.
Under the camera priv dir is [[phtcache.bin]], this seems to list the pictures on SD card?
Under the sound priv dir is: voice/XX/*.m4a. Where XX is 01-10, with sound saved as .m4a.