First, some USEFUL NOTES

Tickets are not actually required by the DSi launcher (this was unknown at the time the above procedure was written), you may skip the related steps

While still incomplete, @MarioMasta64 is working on automating this process for Windows+Python users:
http://gbatemp.net/threads/a-tool-to-make-converting-dsiware-from-3ds-to-dsi-easier.479996/

If you are using an emunand (through Hiya, for example), consider using DSi Title Manager instead; there's no reason it couldn't work on sysnand with minor changes but... it doesn't do that, yet or ever

---

Steal Acquire some decrypted DSiware apps. You can use Funkeycia, 3DSeStuff, etc the 3DS eShop to legally download them, rip them to cia, then use ctrtool to extract the cia into "contents" = .app (the very newest versions of ctrtool decrypt them during this extraction); alternatively you can use Godmode9 to directly copy the appropriate .app under twln:/title/00030004/* to the SD.
There's also a no-intro catalogue but no romset I know of, officer...

Backup your console's NAND, CID, and ConsoleID using well documented methods (hardmod if you have some DSiware that can be copied to SD, or fwTool+safety mod if you have an usable DSiware exploit - Team Twiizer's original sudokuhax is not suitable #clobberedkeyslots, while fourswordshax and the leaked ugopwn use minitwlpayload).
If you're using NO$GBA with a nand you didn't dump yourself, you can find the CID and the byteswapped ConsoleID by looking at the end of the dump with a hex editor.

(Adding this block is also how you convert a raw backup for use with NO$GBA, just in case you didn't read the manual)

Use TwlTool to decrypt the nand.


Mount the 1st partition of the decrypted image with OSFMount (Linux equivalent: losetup + mount; Mac equivalent, hdiutil + mount I guess?).


Pick (any?) ticket from the NAND, preferably from the regular DSiware category = 00030004, and decrypt it with TwlTool. This will be a base for the edited tickets we will make.


Open the folder with our dumped title. You will find a "content" folder, possibly a "data" folder, and a .ctx file if it came from a 3DS.
Delete it, then go to the content folder.
Remove the "cmd" folder, and the 3DS-format TMD.


Search the TMD pack for the full TitleID of the DSiware; copy the TMD to the content folder, renaming it to "title.tmd".
Open title.tmd in a hex editor.


Find offset 1E7; rename the .app file (better known as .srl or .nds) so that the last 2 digits are the ones written at 1E7.
Find offset 208; delete everything from there to the end of the file. (A small number of tmds are already trimmed).
Save the file.


Open the ticket we decrypted earlier in a hex editor.
Find offset 1DC and replace the next 8 bytes with the TitleID of the app we're installing;
Save the file with a name equal to the TitleID-low of the app.


Use TwlTool to encrypt the ticket, and put it into the NAND.


Copy the title's (content & data) folder to the NAND.


Unmount the NAND and re-encrypt it.


If you're using NO$GBA, you will have to re-add the footer since it will have been removed by TwlTool's NAND features.


Enjoy your DSiWarez, and if you liked it, BUY THE ORIGINAL... oh wait, they closed the DSi shop

 

[BlastedGuy9905]

Enjoy your DSiWarez, and if you liked it, BUY THE ORIGINAL... oh wait, they closed the DSi shop

9/11 Not enough irony - everyone

 

[Ryccardo]

Theoretically couldn't we use this method of to install an exploitable DsiWare, and then transfer from the DSi to a 3DS and use the dsiware exploit to install b9s on another 3DS?

Most likely not, license transfers are done server-side

(And people doing this are just removing perfectly playable DSiwares from their original console... I personally find this unacceptable)

 

[Oleboy555]

Most likely not, license transfers are done server-side

(And people doing this are just removing perfectly playable DSiwares from their original console... I personally find this unacceptable)

ye i wanted to transfer my dsi to 3ds but then I thought why though? what will I play on my dsi? so I didnt do it

 

[wg93589]

i have a friend's DSi with Flipnote, can i extract the nand or something right now? or is an incoming exploit? XD

Incoming.

Not to be a pest but how much longer

 

[Thunder Hawk]

Not to be a pest but how much longer

It's just around the corner.

 

[wg93589]

It's just around the corner.

So... Soon™

 

[PrincessLillie]

You think I could use this to put homebrew on the system menu?

 

[Ryccardo]

You think I could use this to put homebrew on the system menu?

You can certainly install an exploitable game and its save...

It may be possible to replace any DSiware with a DSi-compatible .nds file, but the permissions in the tmd (which can't be edited) would get in the way depending on what you're trying to run

 

[PrincessLillie]

You can certainly install an exploitable game and its save...

It may be possible to replace any DSiware with a DSi-compatible .nds file, but the permissions in the tmd (which can't be edited) would get in the way depending on what you're trying to run

I heard it was possible to forge TMDs... Any way you could help me with that?

 

[Pomegrenade]

kewl, this is soooo KEWL !!!

 

[incidentallyscribble]

Is there going to be an easier way to do this when THIS releases? If so, what would the steps probably be? Also, do you need to hardmod your DSi for this guide? It's a little bit confusing.

 

[Thunder Hawk]

Is there going to be an easier way to do this when THIS releases? If so, what would the steps probably be? Also, do you need to hardmod your DSi for this guide? It's a little bit confusing.

If you have 1.4 only. Another exploit to downgrade (or upgrade) is required.

 

[Ryccardo]

Also, do you need to hardmod your DSi for this guide?

You need a way to access and edit the filesystem of twlnand; how you actually do that doesn't matter

Hardmod + knowing CID and ConsoleID is the most viable way, but you can use a DSiware exploit if you're one of the 400 people or so who installed one while they could

As far (as little) as I understood RocketLauncher, you need to edit the whitelist anyway, which has the same prerequisites

 

[incidentallyscribble]

You need a way to access and edit the filesystem of twlnand; how you actually do that doesn't matter

Hardmod + knowing CID and ConsoleID is the most viable way, but you can use a DSiware exploit if you're one of the 400 people or so who installed one while they could

As far (as little) as I understood RocketLauncher, you need to edit the whitelist anyway, which has the same prerequisites

So if a DSiWare exploit is released that I can use, then would I need anything else for this guide?

 

[Ryccardo]

So if a DSiWare exploit is released that I can use, then would I need anything else for this guide?

Well, a suitable computer and the actual files to install, but they're already mentioned in this guide soooo...

 

[Thunder Hawk]

Well, a suitable computer and the actual files to install, but they're already mentioned in this guide soooo...

@jerbear64 told me that if you do "If you're using NO$GBA, you will have to re-add the footer since it will have been removed by TwlTool's NAND features." on a real system, you will brick. Might want to add a warning, but a new guide is on the way anyway.

 

[Ryccardo]

@jerbear64 told me that if you do "If you're using NO$GBA, you will have to re-add the footer since it will have been removed by TwlTool's NAND features." on a real system, you will brick. Might want to add a warning, but a new guide is on the way anyway.

This sounds rather weird, first because the footer is outside the partitions and wouldn't affect the operation anyway, but mostly because if the full nand backup is 256 MB big, 256+something wouldn't fit anyway...
Isn't "if you're using NO$GBA" clear enough for someone with an idea on how to use a hex editor, anyway?

 

[jerbear64]

This sounds rather weird, first because the footer is outside the partitions and wouldn't affect the operation anyway, but mostly because if the full nand backup is 256 MB big, 256+something wouldn't fit anyway...
Isn't "if you're using NO$GBA" clear enough for someone with an idea on how to use a hex editor, anyway?

I'm just going off of information I heard elsewhere- it's possible that's incorrect.

 

[Ryccardo]

I'm just going off of information I heard elsewhere- it's possible that's incorrect.

Let's avoid another round of misinformation, like "installing foreign games may brick your WiiU" that was rampant in the early days of the "brazilian exploit"
Any made-up idea should be clearly stated as an hypothesis, never as a fact - and according to the scientific method, unproven statements with no efforts to try to demostrate them are something you should really distance yourself from

 

[jerbear64]

Let's avoid another round of misinformation, like "installing foreign games may brick your WiiU" that was rampant in the early days of the "brazilian exploit"
Any made-up idea should be clearly stated as an hypothesis, never as a fact - and according to the scientific method, unproven statements with no efforts to try to demostrate them are something you should really distance yourself from

Noted.