Disney MagicBand+ Bluetooth Codes

Disney's MagicBand+ makes use of various BLE features to achieve the things it does. This is jjdb210's documentation of what he has been able to figure out so far.

Opening Knowledge

Disney's Magicband's seem to rely on modified broadcast messages to trigger activity in the magicbands. This appears to be similar in design to how they were using bluetooth in the Made With Magic Gen 3 Bluetooth ears. The identify codes and commands however are vastly different and the two are not interchangable.

Codes all appear to come from Disney on the 83 01 code.

The cc Codes

Codes starting with cc03 seem to be quite prevalent in the recordings made in the park. Our first guess was that it was an "off" command, however, it's believed that this may be some sort of general "ping" request, to which the magicbands reply with their own CC code (albeit longer). Further recordings will need to be made to figure out what the additional data is coming from the band, and being sent to the band. It could be some sort of location ID to have it ping back with.

The e9 Codes

These appear to be the show codes, and can be used to trigger LED's and vibration in the Magicband. We will break this code down further.

E9 08 - Mostly solid colors

A full command might look like this: e9 08 00 f4 0f a0 a4 b9 b9 a4 Let's break that down tuple by tuple. All of this is "best guess" and by no means official. More research to be done on next trip.

e9 - Identifier for magic band e8 - Unknown, likely a function call within the magicband 00 - Unknown f4 - Unknown - Possibly Time Related 0f - Partially Unknown - May be partially "Pattern" a0 - Partially Pattern and First color a4 - Second Color b9 - Third Color b9 - Fourth Color a4 - Fifth Color

The system appears to currently use palatte colors as follows: a0 = cyan a1 = purle a2 = blue a3 = midnight blue a4 = blue a5 = bright pruple a6 = lavender a7 = purple a8 = pink a9 = pinker with slight blink aa = pink ab = pink ac = pink ad = pink ae = pink af = pink b0 = off yellow b1 = yelow orange b2 = lime b3 = orange b4 = red orange b5 = red b6 = cyan b7 = cyan b8 = cyahn b9 = green ba = lime green bb = White bc = white bd = off be = off bf = random?

Using anything other than an A or a B in the first slot color slot will have an impact on the PATTERN (likely only 1 bit is being used for additional colors.. Bringing the total "color pallette" on the device up to 32 colors, with only about 20 of them being used so far. It's possible that 2 bits are used bringing the total to 64 colors, however, the second bit seems to affect pattern in the lower numbers. Likely more colors could be added to the pallette via firmware updates.

It's possible the same 32 color pallete is used in multiple "functions" but uses the leading bits to achieve more with each color. Unsure at this time.

Pattern Codes with the first letter appear to do the following: 0 = Nothing 1 = Nothing 2 = 0010 - Middle Only Whitesh 3 = 0011 - Pallet B Spin 4 = 0100 - Pallet A 5 = 0101 - Pallet B 6 = 0110 - Nothing 7 = 0111 - Right Side - Pallet B 8 = 1000 - 4/5 - Pallet A 9 = 1001 - 4/5 - Pallet B a = 1010 - Pallet A b = All On - Pallet B c = 1100 - Pallet A d = All On - Pallet B e = 1110 - Pallet A f = All On - Pallet B

E9 0b - Circle Animation

Example Code: e9 0b 0b 0f 0f 5c 5d 48 a5 d1 45 32 05

E9 0c - Throbing Color

Example Code: e9 0c 00 0f 0f 5d 46 5b f0 05 32 37 48 95

E9 10 - Alternating Colors?

Example Code: e9 10 00 0f 0f 54 5d 58 f4 48 82 d1 46 09 0a d0 65 28

E9 12 - Circle With Vibration

Example Code: e9 12 00 01 0f bc bd bd bd bd 30 d0 37 f4 d2 46 00 00 fc bb

E9 13 - Another Animation

Example Code: e9 13 00 b6 0f 40 44 58 f4 48 82 d0 65 19 d1 46 06 0a 30 7b ff