Homebrew Unlaunch DSi | First public bootcode exploit for DSi

[Deleted member 424658]

The statement "Do not use any bootcode exploits until RocketLauncher is released!" is bullshit.
-RL needs downgrade, this doesn't
-RL needs a supported cartridge, this doesn't

This is clearly superior to RL in about every way. Sure, it's still a bit buggy and still in beta, but after the few remaining bugs are ironed out (which can be in a week) this is clearly superior to everything RL can and RL probably won't be released until this is perfectly stable.
Who knows if RL will be released anyways? This renders it completely useless.
And who knows which unknown bugs RL has when/if it gets the first release.
I have the impression that dsibrew discord is salty because they weren't informed about this and now their work is basically worthless to most of the userbase.

It's a public beta which has major issues still.
Accessing System Settings, DSi Shop, or 3DS Transfer Tool bricks the console.
The RSA patches don't even work. Homebrew doesn't boot from the home menu.
And the installer doesn't function for many users.

 

[huntertron1]

does anyone know if theres a installer script for twlnf? or whatever that dsi homebrew is called?

 

[Deleted member 424658]

does anyone know if theres a installer script for twlnf? or whatever that dsi homebrew is called?

The recommended way is to inject it into the NAND manually. To prevent from bricking, you need to set Launcher's app and tmd to read-only. twlnf unfortunately can't do that apparently, so it's back to the old days of manual injection.

 

[huntertron1]

The recommended way is to inject it into the NAND manually. To prevent from bricking, you need to set Launcher's app and tmd to read-only. twlnf unfortunately can't do that apparently, so it's back to the old days of manual injection.

because gbatemp hates my service and no one give a crap about it and that dsiguide go rid of the way i decrypt nads and juck i can figure out how to decrypt my nand to mount it to edit it

 

[Deleted member 424658]

because gbatemp hates my service and no one give a crap about it and that dsiguide go rid of the way i decrypt nads and juck i can figure out how to decrypt my nand to mount it to edit it

You're asking for people's nand backups. That's extremely shady.

 

[huntertron1]

You're asking for people's nand backups. That's extremely shady.

i help them i have team as well

 

[ry755]

because gbatemp hates my service and no one give a crap about it and that dsiguide go rid of the way i decrypt nads and juck i can figure out how to decrypt my nand to mount it to edit it

If you don't know how to install it manually, you can use TempNand to install it. But don't use the modified NAND on a real DSi until the exploit is more stable! Just try it out in no$gba for now.

 

[ThisIsDaAccount]

because gbatemp hates my service and no one give a crap about it and that dsiguide go rid of the way i decrypt nads and juck i can figure out how to decrypt my nand to mount it to edit it

I'm one of the guys who works on DSiguide, you should know that we didn't get rid of the old pages, they're still there. If you want to access them, just add "_(Manual)" to the URL. For example, if you want to access the old downgrading page, which used to be at https://dsiguide.me/downgrading, just go to https://dsiguide.me/downgrading_(Manual)


However, the tool I made, TempNand, was made to decrease the likelihood of user errors leading to bricks. It has an Unlaunch installer, and it's pretty easy to use - you just have to click the button and navigate to the unlaunch.dsi file. Please give the tool a shot, and let me know if anything is wrong so I can fix it. I heard from @Mnecraft368 thst there's a bug that several users have experienced, that I had no idea about. I need users to actually test the tool and let me know if there's something wrong, so it can be as good as possible.

 

[Apache Thunder]

However, the tool I made, TempNand, was made to decrease the likelihood of user errors leading to bricks. It has an Unlaunch installer, and it's pretty easy to use - you just have to click the button and navigate to the unlaunch.dsi file. Please give the tool a shot, and let me know if anything is wrong so I can fix it. I heard from @Mnecraft368 thst there's a bug that several users have experienced, that I had no idea about. I need users to actually test the tool and let me know if there's something wrong, so it can be as good as possible.

Does TempNAND support setting file attributes? It's required to set read only on Launcher and TMD to prevent apps like Data Management and DSi Shop from deleting them.

 

[ThisIsDaAccount]

Does TempNAND support setting file attributes? It's required to set read only on Launcher and TMD to prevent apps like Data Management and DSi Shop from deleting them.

Yup! I added an unlaunch installer and it sets the read only flags for both the tmd and the launcher

Edit:
If you wanna take a look, I'll leave the link to the source here:
https://github.com/ThisIsDaAccount/TempNand
https://github.com/ThisIsDaAccount/NandInAJar

TempNand is actually a GUI for the second repo linked, NandInAJar, which actually does all of the work besides handling exceptions and taking user input.

It's all made in java, so that's why it's a pc side tool and not a console side tool

 

[huntertron1]

I'm one of the guys who works on DSiguide, you should know that we didn't get rid of the old pages, they're still there. If you want to access them, just add "_(Manual)" to the URL. For example, if you want to access the old downgrading page, which used to be at https://dsiguide.me/downgrading, just go to https://dsiguide.me/downgrading_(Manual)


However, the tool I made, TempNand, was made to decrease the likelihood of user errors leading to bricks. It has an Unlaunch installer, and it's pretty easy to use - you just have to click the button and navigate to the unlaunch.dsi file. Please give the tool a shot, and let me know if anything is wrong so I can fix it. I heard from @Mnecraft368 thst there's a bug that several users have experienced, that I had no idea about. I need users to actually test the tool and let me know if there's something wrong, so it can be as good as possible.

thx

 

[Technicmaster0]

It's a public beta which has major issues still.
Accessing System Settings, DSi Shop, or 3DS Transfer Tool bricks the console.
The RSA patches don't even work. Homebrew doesn't boot from the home menu.
And the installer doesn't function for many users.

Yep but it's in PUBLIC beta and the issues will probably be fixed until RL comes out. Who knows which issues RL has which apache etc. didn't encounter when it gets it's first release.

 

[guicrith]

For anyone who wants to know how it works without launching it I ran "strings UNLAUNCH.DSI" and here is the explanation included in the binary.

Bootstage 2 is loading the launcher's TITLE.TMD file to memory, that's done without any FILESIZE>LIMIT check (it's only checking FILESIZE>FILESIZE That is allowing to load about 80Kbytes of useful code, and to overwrite a task switching structure, causing ARM9 execute the loaded code, which can then tweak ARM7 to execute custom code by remapping some portions of shared WRAM, it's actually that simple.
The bigger problem has been to find this exploit within the 400,000 lines of code that bootstages 2 and 3 consist of.

 

[ThisIsDaAccount]

@Apache Thunder, would it be possible to code a full fledged ntrboot installer for DSi now that we have Unlaunch to unlock both the cart slot and sd card permissions?

 

[huntertron1]

ok the site is down for this
https://dsiguide.me/downgrading_(Manual)

also is this normal for unlauch on emu?

 

[ThisIsDaAccount]

ok the site is down for this
https://dsiguide.me/downgrading_(Manual)

also is this normal for unlauch on emu?

Sorry, i moved around a few pages again. The site is back at

https://dsiguide.me/downgrading

 

[huntertron1]

thx

Sorry, i moved around a few pages again. The site is back at

https://dsiguide.me/downgrading

 

[Mnecraft368]

The Ver. in System Settings is changeable.
0xDB8A4 in the System Settings .app file.

 

[huntertron1]

The Ver. in System Settings is changeable.
0xDB8A4 in the System Settings .app file.

when will there be an automated installer for hiyacfw btw? @evreyone

 

[bennyman123abc]

when will there be an automated installer for hiyacfw btw? @evreyone

There is a guide over at https://dsiguide.me/ in the form of Plailect's 3DS guide