Tutorial  Updated

Installing Sudokuhax on 3DS 4.x-9.2

So yeah... Title says it all. Ever heard of the DSi exploit named Sudokuhax? You want it? Okay! Here's some info:

  • DSiWare does NOT have access to game card, slot 1.
  • DSi Homebrew Channel ONLY supports a maximum SD card size of 2GBs, because of libnds? (If anyone want's to fix that problem, go ahead).
  • Does not support DLDI patching (sucks, right? Can't even run moonshell or a lot of legacy homebrew with that -_-)
  • You need a NDS mode flash card, so ROP Multiloader can be installed. (New method, doesn't have this requirement :D)
  • DSiWare already installed on the console (it must be at least 4MB's in size!) UNLESS you use the NEW method.
  • Ninjhax or Spiderhax (browser, O3DS) is currently required for the NEW method. The old method, requires a NDS flashcard or other method of installing the ROP chain for MSET.
NOTE - QUOTES ON FREEZING:

It works on my 32gb fat32 32k cluster. I used the modified boot.nds from zoogie link.

Yes cluster size is the issue with hbMenu. If it's anything beyond 8192K on 16+ GB size SD cards (not sure if this counts for anything smaller) then hbMenu won't start anything. You just get that white screen. But the problem was I had screen buffer bugs with GBA games when I had my 32GB SD card formatted to 8192k cluster size.

The ROM

1.) Google "DSiWare SDATs" - click on the link with the domain "hcs64".
2.) Scroll down to the bottom and select "page 3" - you'll see a post by "CaitSith2", posted on "March 27, 2015".
3.) Click on "nomodcrypt" and download the archive.

I can't post a direct link to the files, as it isn't allowed here. Sorry.

PC Utility

1.) Search that ISO site for "Play DSiWare in your 3DS!".
2.) Click on the link and go to page 6, post 59.
3.) Download "DSiWare_Injector.zip".

Good! That's the PC utilities downloaded.

Edit: For those of you who can't find the post, I uploaded the injector to my dropbox. Here it is: https://dl.dropbox.com/s/8pjwmgyiwg5bil4/DSiWare_Injector.zip

DSi Homebrew Channel (Mileage may vary)

1.) Download this: http://filetrip.net/nds-downloads/applications/download-dsi-homebrew-channel-1-0-f25356.html

OR Download this modified version, by @zoogie : http://gbatemp.net/attachments/boot-zip.18916/

OR the latest release (also credits to Zoogie): http://gbatemp.net/attachments/boot-zip.21417/

You don't need a 2gb card. just use nds_hb_menu.
Freshly compiled build attached for your homebrewing pleasure. :P

That's pretty much all you need :P Okay, now for the messing about.

***New Method: 4.x-9.2*** (Concept by Zoogie)

1.) Download a copy of Decrypt9, from either of the two links:
OR try @zoogie 's tool:

Here's a version of TWL_PADGEN that includes a browser-launchable decrypt9 -- no cubic ninja needed.
Use gateway firmware for nand dumping and reinjection and such.
Press select to create xorpad.

http://gbatemp.net/attachments/twln_padgen_spider_launcher-zip.21674/

2.) Place the file in their respective places (Launcher.dat, goes at the root of the 3DS SD card. "Decrypt9", goes in the "3ds" directory, if you're using Ninjhax).
3.) Launch the payload.
4.) Select "Decrypt Nand Partitions" then press "x", to backup.
5.) Once finished, shutdown the console.
6.) Rename "SUDOKU-Electronic_Arts_Inc..nds" to "00000002.app".
7.) Rename "dsiware.sav" to "public.sav" (this file is located in "DSiWare_Injector".
8.) Remove the 3DS's SD card and insert it into your computer. Navigate to SD:/Decrypt9 and open "TWLN.bin" with a piece of software such as WinImage.
9.) In WinImage, go to "\title\00030005\42383841\content" and inject the "new" 00000002.app. You can inject the new file by clicking on "Image" then "Inject".
10.) Go to "\title\00030005\42383841" and create the directory "data" (Image -> Create Folder).
11.) Open the "data" directory and inject the "public.sav" file.
12.) Go to File -> Save.
13.) Remove all files from "SD:/Decrypt9", EXCEPT FOR TWLN.bin!
14.) Eject the SD card and put it back into the 3DS.
15.) Re-launch D9, then click "Decypt Nand Partitions" then press the restore button (y).
16.) Accept the confirmation (if any) and wait for it to finish.
17.) Reboot the console, then go to System Settings -> Internet -> Nintendo DS Connections.
18.) Sudoku should load. Press start and Sudokuhax should load. It'll show an error about boot.nds
19.) Power down the console, eject the SD card and put it into your computer.
20.) Transfer the DSiHomebrew channel (boot.nds), to the root of your SD card.
21.) Reinsert the SD card into the console and relaunch Sudokuhax.


***BELOW INSTRUCTIONS ARE 4.x ONLY!***

3DS Injection Tools

1.) Download ROP Multiloader here: http://filetrip.net/3ds-downloads/homebrew/download-ropmultiloader-1-1-f32981.html

Getting your DSiWare Title ID's

1.) Go to system settings ---> Data Management ---> DSiWare.
2.) Copy the DSiWare that you want to be "Sudokuhaxed" to the SD card (make sure no other DSiWare is on your SD! It'll make things easier).
3.) Shutdown the 3DS.
4.) Remove the SD card and insert it into your computer.
5.) Go to "SD:\Nintendo 3DS\<ID1>\<ID2>\Nintendo DSiWare" - you'll see a title with a name similar to this: 4B344856 (This is just an example).
6.) Make sure it's at least 4MB's in size.
7.) Note down the name of the file (don't bother about the file extension - you don't need this).
That's the ID's sorted! Great! :vul2:

Sorting out the stuff

1.) Extract "SUDOKU-Electronic_Arts_Inc..nds" from "decrypted_titles_nomodcrypt.7z" (requires 7Zip or any other archive handler that supports the .7z file extension).
2.) Extract "DSiWare_Injector.zip".
3.) Copy/Move "SUDOKU-Electronic_Arts_Inc..nds" into the "DSiWare_Injector" directory so that it is with it's pals "dsiware_InjectTitleIDinMset.py" and "MsetForBoss.dat".
4.) Rename "SUDOKU-Electronic_Arts_Inc..nds" to "dsiware.nds".
5.) Open "dsiware_InjectTitleIDinMset.py" with a text editor, so that the title ID can be changed.
6.) Change this:
title_ID="xxxxxxxx" # 8 characters or die.

to this:

title_ID="<THE TITLE ID THAT YOU SHOULD'VE NOTED DOWN EARLIER!" # 8 characters or die.

7.) Save the changes and run "dsiware_InjectTitleIDinMset.py" (You must have Python installed!).
8.) Copy "dsiware.nds", "dsiware.sav" and "MsetForBoss.dat" to the root of your 3DS's SD card, (NOT THE NDS FLASH CARD!).
9.) Extract the DSiHomebrew channel and copy "boot.nds" to the root of your 3DS's SD card, just like the previous step.
10.) Extract "235679-ropMultiloader 1.1.zip" and copy "rop_multiloader.nds" to your flashcards SD card (NOT 3DS's!)

You're almost done!

11.) Eject all SD cards and put them back where they belong (don't ask stupid questions. You know where to put it, hehe.)

Installation onto the console


1.) Launch ROP multiloader from your flashcard and install the MsetForBoss exploit.
2.) Go to system settings ---> Profile ---> Nintendo DS profile - you'll see a magical menu, hehe.
3.) Select the option to inject the DSiWare. Wait for it to finish and shutdown the console.
4.) Turn the console back on and launch the DSiWare that you had injected Sudoku into.
5.) The exploit will load after the start menu.

You're done! I've only found this useful for installing the profile exploit, on the go without the need of carrying a flashcard with me. This lets you play NDS games and you could just re-install the exploit with Sudokuhax. Just copy any ROP installer to your 3DS's SD card and rename it to boot.nds.

Would be great if Moonshell2 could be ported to work with this :) Or even better - have a DLDI patch that lets you use more homebrew (nothing is impossible), though I doubt someone would be willing enough to make this happen -_-.

Any errors in this tutorial? Let me know and I'll correct them.

DISCLAIMER: If you break your console, I am not responsible for that. You do these sort of stupid things at your OWN risk. ALWAYS HAVE A BACKUP! Don't come crying to this forum if you've bricked your 3DS and don't have a backup of your NAND - it's just plain sense to have backed up your console, you're an idiot if you don't have one.

Special thanks to a certain user on this forum, for helping me out with the details. He prefers not to be mentioned as he'd rather not receive nooby PM's.

Credits/Info

I do NOT take credit for anything other than taking the time to write this tutorial. All files/tools mentioned in this thread belong to their respective owners - you already know where to go if you want to thank them.

Video evidence



 
Last edited by WhoAmI?,

pakrett

Well-Known Member
Member
Joined
Apr 6, 2015
Messages
1,519
Trophies
0
Age
34
XP
1,351
Country
France
Yeah mount it a disk image with winimage or similar program. I use OFSMount.
As for injecting, zoogie has covered that here pretty much http://gbatemp.net/threads/tutorial-installing-sudokuhax-on-3ds.388621/page-19#post-5567103
Reading the whole? probably not needed, last couple of pages could help though. :)
Yup. Just download the DSiWare_Injector (as this has the save file) and the Sudoku nds file (can't be linked here. Sorry). Then, decrypt your partitions with D9, mount the TWLN.bin, with WinImage.

Once mounted, go to the path that zoogie mentioned, rename the .nds to 0000002.app and then drag n' drop it onto WinImage - it'll ask to overwrite the file. Click yes.

Then create the data directory (the option to create a folder, is within the Options of WinImage. Then open that folder, click inject (options at the top) and select the .sav file. Make sure that the .sav, has the correct file name. Read zoogie's instructions, for more info :)

Ok guys perfect !
I have all the files, all posts bookmarked and most important, I understood everything ^^ I will try it tommorow and I'll report !

And is this works without CFW ? I have a friend who could be happy to have an offline mset installer! But maybe I will do what @Apache Thunder said for him ^^
You can also buy Sodoku from eShop (it's like...2 bucks. :P ) and just inject the older version over that. ;)
But personnally I have sync my NNID in my emunand and my nands are unlinked so I don't want to create a new one for sysnand and I don't really want connect my sysnand to internet ^^ (never again hahaha!)
 
  • Like
Reactions: WhoAmI?
Joined
Feb 15, 2015
Messages
1,464
Trophies
0
XP
1,099
Country
United States
Ok guys perfect !
I have all the files, all posts bookmarked and most important, I understood everything ^^ I will try it tommorow and I'll report !

And is this works without CFW ? I have a friend who could be happy to have an offline mset installer! But maybe I will do what @Apache Thunder said for him ^^

But personnally I have sync my NNID in my emunand and my nands are unlinked so I don't want to create a new one for sysnand and I don't really want connect my sysnand to internet ^^ (never again hahaha!)
Just overwrite ds wifi. It's useless now that the old servers are down.
 

Apache Thunder

I have cameras in your head!
Member
Joined
Oct 7, 2007
Messages
4,426
Trophies
3
Age
36
Location
Levelland, Texas
Website
www.mariopc.co.nr
XP
6,794
Country
United States
And is this works without CFW ?

Yes assuming the DSiWare you injected it over was legit to begin with. Unlike CTR titles TWL security isn't as strong. (at least on the 3DS. On the DSi, the tickets are stored on the same NAND that the TWL titles on, so DSi probably would not have been fooled. But 3DS stores all tickets even those for AGB and TWL titles on CTR NAND which TWL does not have access to once in TWL mode. 3DS Arm9 verifies the tickets, but for whatever reason it doesn't actually verify the relationship between the tickets and the app files stored on TWL NAND. So this works for whatever reason. :P )

So as long as the .app file you are injecting isn't "modified" and the RSA sigs of the arm7i and arm9i and the DSi Extended header are valid, the 3DS will boot it without having to be in CFW. :D
 
  • Like
Reactions: zoogie and pakrett

pakrett

Well-Known Member
Member
Joined
Apr 6, 2015
Messages
1,519
Trophies
0
Age
34
XP
1,351
Country
France
Yes assuming the DSiWare you injected it over was legit to begin with. Unlike CTR titles TWL security isn't as strong. (at least on the 3DS. On the DSi, the tickets are stored on the same NAND that the TWL titles on, so DSi probably would not have been fooled. But 3DS stores all tickets even those for AGB and TWL titles on CTR NAND which TWL does not have access to once in TWL mode. 3DS Arm9 verifies the tickets, but for whatever reason it doesn't actually verify the relationship between the tickets and the app files stored on TWL NAND. So this works for whatever reason. :P )

So as long as the .app file you are injecting isn't "modified" and the RSA sigs of the arm7i and arm9i and the DSi Extended header are valid, the 3DS will boot it without having to be in CFW. :D

Mmmm ok ok this is funny XD. But I need a pre-installed legit DSIware as base, no ?
 

Apache Thunder

I have cameras in your head!
Member
Joined
Oct 7, 2007
Messages
4,426
Trophies
3
Age
36
Location
Levelland, Texas
Website
www.mariopc.co.nr
XP
6,794
Country
United States
Yes you need something legit to replace. The "DS INTERNET" app is one candidate if you don't have eShop access to download the one free DSi app available on the eShop. It's normally used as the DS Internet Configuration Menu in System Settings. If you inject Sudokuhax over that, Sudoku will launch from System Settings. ;)

The title ID for "DS INTERNET" is 42383841 so look for that folder in TWL NAND. It doesn't have a data folder for the .sav file though. Just create the folder and place the save in it.
 
  • Like
Reactions: pakrett and WhoAmI?

pakrett

Well-Known Member
Member
Joined
Apr 6, 2015
Messages
1,519
Trophies
0
Age
34
XP
1,351
Country
France
Yes you need something legit to replace. The "DS INTERNET" app is one candidate if you don't have eShop access to download the one free DSi app available on the eShop. It's normally used as the DS Internet Configuration Menu in System Settings. If you inject Sudokuhax over that, Sudoku will launch from System Settings. ;)

The title ID for "DS INTERNET" is 42383841 so look for that folder in TWL NAND. It doesn't have a data folder for the .sav file though. Just create the folder and place the save in it.
Inject it over the ds internet app. It's the same one Apache Thunder said in the last post.

Ahhh ok, this is awesome !?!?!!!! Thank you both !
 
Last edited by pakrett,

Shadowtrance

Well-Known Member
Member
Joined
May 9, 2014
Messages
2,493
Trophies
0
Location
Hervey Bay, Queensland
XP
1,807
Country
Yes you need something legit to replace. The "DS INTERNET" app is one candidate if you don't have eShop access to download the one free DSi app available on the eShop. It's normally used as the DS Internet Configuration Menu in System Settings. If you inject Sudokuhax over that, Sudoku will launch from System Settings. ;)

The title ID for "DS INTERNET" is 42383841 so look for that folder in TWL NAND. It doesn't have a data folder for the .sav file though. Just create the folder and place the save in it.
Unless I'm totally blind, there is no free DSi app on the ehsop, not the EU one anyway. :( Just looked earlier.
 

Apache Thunder

I have cameras in your head!
Member
Joined
Oct 7, 2007
Messages
4,426
Trophies
3
Age
36
Location
Levelland, Texas
Website
www.mariopc.co.nr
XP
6,794
Country
United States
Yeah. I forget the name of the app, but it's some odd sports app that only works in Seattle or something. It has no practical use anywhere else. :P

And if you still want the ability to configure DS internet settings. You can still launch a game that has the Wifi config menu from a DS flashcart (or a legit game if you have one) while in DS mode. Replacing DS Internet doesn't break anything. :D
 
  • Like
Reactions: WhoAmI?

zoogie

playing around in the end of life
Developer
Joined
Nov 30, 2014
Messages
8,560
Trophies
2
XP
15,000
Country
Micronesia, Federated States of
Yeah. I forget the name of the app, but it's some odd sports app that only works in Seattle or something. It has no practical use anywhere else. :P

And if you still want the ability to configure DS internet settings. You can still launch a game that has the Wifi config menu from a DS flashcart (or a legit game if you have one) while in DS mode. Replacing DS Internet doesn't break anything. :D
It's called Nintendo Fan Network. :P
 

WhoAmI?

PASTA's dirty animal
OP
Member
Joined
Mar 15, 2015
Messages
1,276
Trophies
0
Location
Poké Ball
Website
lavanoid.github.io
XP
1,279
Country
I know, I've already done it... Just silently having a bitch about US getting all the cool stuff (also Japan) lol Japan mostly :( they get ALLLLLLLLLL the cool stuff. :(

I know, right? America, even have Attack on Titan, on the eShop. Lucky sods, they are. Not to mention Netflix (not that anyone actually wants to use a 3DS, to watch stuff - the screen sorta sucks).
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    K3Nv2 @ K3Nv2: It's a shame some people's cake always resort to the same taste