Hacking R4iSDHC Gold Pro 2015 firmware expire.

olshrimpeyes

Your question is bad and you should feel bad
OP
Member
Joined
Jul 30, 2015
Messages
454
Trophies
0
Location
GNU/Somewhere
XP
312
Country
United States
I bought a Gold Pro 2015 from http://www.r4isdhc.com/ and its been okay until today when a error message popped up that the firmware expired. It was remedied by setting the date back on my DS, but I don't want have to set the date back on my 3DS. Is there anything I can do?
 

Pedro Vieira

Member
Newcomer
Joined
Sep 3, 2015
Messages
18
Trophies
0
Age
32
XP
87
Country
Brazil
Same problem. Was wondering if I can change some line in the firmware files so I don't have to wait for the next one when this happens
 

Rezatron

Well-Known Member
Newcomer
Joined
Oct 12, 2012
Messages
81
Trophies
0
XP
142
Country
Canada
They will update the kernel in a few days to fix this issue. You can work around this by setting a date in your system settings to any date before September 3 2015. Fixing the kernel yourself would require hex editing or FPGA programming there is no easily changed line in a settings file for this.
 
  • Like
Reactions: Technicmaster0

Pedro Vieira

Member
Newcomer
Joined
Sep 3, 2015
Messages
18
Trophies
0
Age
32
XP
87
Country
Brazil
They will update the kernel in a few days to fix this issue. You can work around this by setting a date in your system settings to any date before September 3 2015. Fixing the kernel yourself would require hex editing or FPGA programming there is no easily changed line in a settings file for this.

I see. Well I'll wait for their fix patiently then. Thanks
 

NuttyS

Well-Known Member
Newcomer
Joined
Apr 30, 2015
Messages
67
Trophies
0
Age
39
Location
Reading, UK
XP
111
Country
So glad I'm not the only one with this problem!

Will there really be an update though? The last one was last year =/
 

Rioluwott

Well-Known Member
Member
Joined
Feb 23, 2014
Messages
853
Trophies
1
Age
28
XP
2,545
Country
Mexico
i have the same problem but in a r4i sdhc dual core 2014 i already downloaded the latest frimware but it doesn´t work im going to wait for now im going to set the date to 2014
 

NekoKat

Well-Known Member
Newcomer
Joined
Oct 18, 2013
Messages
87
Trophies
0
Age
34
XP
169
Country
Mexico
Ah, I remember this happened last year as well. Exact same date, too, if memory doesn't fail me. Last year, they had the firmware update 2 days afterwards (September 5th), so chances are the same is going to happen again this year.

...why does this firmware expire thing keeps happening though?
 

Adeka

Beta Tester
Member
Joined
Mar 19, 2013
Messages
4,168
Trophies
0
Age
30
XP
1,633
Country
United States
tested in 3ds and i get this error. does not get this error in dsi.

— Posts automatically merged - Please don't double post! —

double post because I found the fix. Set your 3ds date back to 2014
 

NekoKat

Well-Known Member
Newcomer
Joined
Oct 18, 2013
Messages
87
Trophies
0
Age
34
XP
169
Country
Mexico
tested in 3ds and i get this error. does not get this error in dsi.

--------------------- MERGED ---------------------------

double post because I found the fix. Set your 3ds date back to 2014

Yeah, having it on any date before September 3, 2015 will do the trick.

Last year, this EXACT same thing happened, that's why the last update was last year, September 5, 2014.

What I wonder is why this firmware expire thing keeps happening on the 3DS...? It's strange. Quite strange.
 

Adeka

Beta Tester
Member
Joined
Mar 19, 2013
Messages
4,168
Trophies
0
Age
30
XP
1,633
Country
United States
Yeah, having it on any date before September 3, 2015 will do the trick.

Last year, this EXACT same thing happened, that's why the last update was last year, September 5, 2014.

What I wonder is why this firmware expire thing keeps happening on the 3DS...? It's strange. Quite strange.
I have the 2012 model (says new on the sticker) but it runs wood firmware (its a clone im pretty sure). It never has this problem.

The funny part is the card arrived in the mail yesterday. Planned to give it to my sisters boyfriend to reinstall rxtools.
 

NekoKat

Well-Known Member
Newcomer
Joined
Oct 18, 2013
Messages
87
Trophies
0
Age
34
XP
169
Country
Mexico
as long as his sysnand's date is any day prior September 3, 2015, it'll do the trick anyway. For running rxTools.

Once you have an emuNAND on yer console, I dont think date on sysnand matters anymore, does it? Much like languages (english in emunand, spanish in sysnand in my case).
 
  • Like
Reactions: elmuchogamer

NuttyS

Well-Known Member
Newcomer
Joined
Apr 30, 2015
Messages
67
Trophies
0
Age
39
Location
Reading, UK
XP
111
Country
Odd that your dsi doesn't get the error as mine does, as does my Mum's xl.
We've done the date trick for now and remembered to set Animal Crossing to the proper one before starting up!
 

CKCésar000

New Member
Newbie
Joined
Sep 4, 2015
Messages
1
Trophies
0
Age
33
XP
41
Country
Brazil
I am thinking in use an alternative firmware to fix this, but i can't found anyone... I want keep with today date to continue playing PKMN online :/
 

Rezatron

Well-Known Member
Newcomer
Joined
Oct 12, 2012
Messages
81
Trophies
0
XP
142
Country
Canada
New kernel update 3.6b is up on the official site now. Just tested and new expiry is September 3, 2018. Seems so pointless just delete the expiry date or if they can't/don't know how make it the year 2500 of whatever. :rolleyes:
 
  • Like
Reactions: NuttyS

kuwanger

Well-Known Member
Member
Joined
Jul 26, 2006
Messages
1,510
Trophies
0
XP
1,783
Country
United States
Well, testing and the key seems to be R4.dat. Doing a diff of R4.dat v3.4 -> v3.5 gives me:

Code:
@@ -13747,8 +13747,8 @@
00035b20  01 10 63 e0 0e 10 81 e0  81 21 a0 e1 8c 02 a0 e1  |..c......!......|
00035b30  02 20 61 e0 0c 01 40 e0  0c 00 80 e0 02 21 a0 e1  |. a...@......!..|
00035b40  03 10 d8 e5 02 20 6e e0  00 31 a0 e1 01 20 82 e0  |..... n..1... ..|
-00035b50  03 30 60 e0 02 30 83 e0  a1 3c 83 e2 bf 2b a0 e3  |.0`..0...<...+..|
-00035b60  21 30 83 e2 7b 2f 82 e2  02 00 53 e1 27 06 00 8a  |!0..{/....S.'...|
+00035b50  03 30 60 e0 02 30 83 e0  a1 3c 83 e2 ca 2b a0 e3  |.0`..0...<...+..|
+00035b60  21 30 83 e2 e7 20 82 e2  02 00 53 e1 27 06 00 8a  |!0... ....S.'...|
00035b70  34 10 9d e5 00 00 51 e3  be 05 00 1a 63 33 ff eb  |4.....Q.....c3..|
00035b80  88 39 9f e5 94 29 9f e5  01 c0 a0 e3 00 c0 c3 e5  |.9...)..........|
00035b90  d0 00 d2 e1 03 10 a0 e3  34 20 9d e5 ff d6 ff eb  |........4 ......|
@@ -27336,8 +27336,8 @@
0006ac70  05 23 0c a9 5e a1 10 39  3a c9 41 50 64 19 6e d8  |.#..^..9:.APd.n.|
0006ac80  2b b9 67 59 35 59 3f c8  13 09 5f d9 4f 89 45 48  |+.gY5Y?..._.O.EH|
0006ac90  4b db 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |K...............|
-0006aca0  00 00 00 00 3f 2f 23 40  1f ff 3d a7 fe b3 a1 f7  |....?/#@..=.....|
-0006acb0  24 be 54 d7 04 00 00 00  11 11 11 11 11 22 22 22  |$.T.........."""|
+0006aca0  00 00 00 00 3f 2f 23 40  c2 b2 3d a7 fe b3 99 39  |....?/#@..=....9|
+0006acb0  1a 2d 54 d7 04 00 00 00  11 11 11 11 11 22 22 22  |.-T.........."""|
0006acc0  21 22 22 22 21 32 33 33  21 32 33 33 21 32 44 44  |!"""!233!233!2DD|
0006acd0  21 32 44 44 21 32 43 44  11 11 11 11 22 22 22 22  |!2DD!2CD....""""|
0006ace0  22 22 22 22 33 33 33 33  33 33 33 33 44 44 44 34  |""""33333333DDD4|
@@ -36491,7 +36491,7 @@
0008e8a0  74 74 6f 6d 49 6e 69 74  2e 62 6d 70 00 ff ff ff  |ttomInit.bmp....|
0008e8b0  74 78 74 00 25 73 25 73  00 00 00 00 25 73 2f 25  |txt.%s%s....%s/%|
0008e8c0  73 00 ff ff 70 6f 69 6e  74 65 72 2e 62 69 6e 00  |s...pointer.bin.|
-0008e8d0  56 33 2e 34 00 00 00 00  2f 52 34 69 4d 65 6e 75  |V3.4..../R4iMenu|
+0008e8d0  56 33 2e 35 00 00 00 00  2f 52 34 69 4d 65 6e 75  |V3.5..../R4iMenu|
0008e8e0  2f 73 61 76 6c 69 62 2e  64 61 74 00 59 55 4b 45  |/savlib.dat.YUKE|
0008e8f0  00 00 00 00 59 4d 50 4b  00 00 00 00 48 45 4c 4c  |....YMPK....HELL|
0008e900  4f 4b 49 54 54 59 42 43  53 41 56 45 00 00 00 00  |OKITTYBCSAVE....|

And a diff of R4.dat v3.5 -> v3.6 gives me:

Code:
@@ -13747,8 +13747,8 @@
00035b20  01 10 63 e0 0e 10 81 e0  81 21 a0 e1 8c 02 a0 e1  |..c......!......|
00035b30  02 20 61 e0 0c 01 40 e0  0c 00 80 e0 02 21 a0 e1  |. a...@......!..|
00035b40  03 10 d8 e5 02 20 6e e0  00 31 a0 e1 01 20 82 e0  |..... n..1... ..|
-00035b50  03 30 60 e0 02 30 83 e0  a1 3c 83 e2 ca 2b a0 e3  |.0`..0...<...+..|
-00035b60  21 30 83 e2 e7 20 82 e2  02 00 53 e1 27 06 00 8a  |!0... ....S.'...|
+00035b50  03 30 60 e0 02 30 83 e0  a1 3c 83 e2 ea 2b a0 e3  |.0`..0...<...+..|
+00035b60  21 30 83 e2 76 2f 82 e2  02 00 53 e1 27 06 00 8a  |!0..v/....S.'...|
00035b70  34 10 9d e5 00 00 51 e3  be 05 00 1a 63 33 ff eb  |4.....Q.....c3..|
00035b80  88 39 9f e5 94 29 9f e5  01 c0 a0 e3 00 c0 c3 e5  |.9...)..........|
00035b90  d0 00 d2 e1 03 10 a0 e3  34 20 9d e5 ff d6 ff eb  |........4 ......|
@@ -27336,8 +27336,8 @@
0006ac70  05 23 0c a9 5e a1 10 39  3a c9 41 50 64 19 6e d8  |.#..^..9:.APd.n.|
0006ac80  2b b9 67 59 35 59 3f c8  13 09 5f d9 4f 89 45 48  |+.gY5Y?..._.O.EH|
0006ac90  4b db 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |K...............|
-0006aca0  00 00 00 00 3f 2f 23 40  c2 b2 3d a7 fe b3 99 39  |....?/#@..=....9|
-0006acb0  1a 2d 54 d7 04 00 00 00  11 11 11 11 11 22 22 22  |.-T.........."""|
+0006aca0  00 00 00 00 3f 2f 23 40  d6 cc 3d a7 fe b3 3a 9c  |....?/#@..=...:.|
+0006acb0  3c 12 54 d7 04 00 00 00  11 11 11 11 11 22 22 22  |<.T.........."""|
0006acc0  21 22 22 22 21 32 33 33  21 32 33 33 21 32 44 44  |!"""!233!233!2DD|
0006acd0  21 32 44 44 21 32 43 44  11 11 11 11 22 22 22 22  |!2DD!2CD....""""|
0006ace0  22 22 22 22 33 33 33 33  33 33 33 33 44 44 44 34  |""""33333333DDD4|
@@ -36491,7 +36491,7 @@
0008e8a0  74 74 6f 6d 49 6e 69 74  2e 62 6d 70 00 ff ff ff  |ttomInit.bmp....|
0008e8b0  74 78 74 00 25 73 25 73  00 00 00 00 25 73 2f 25  |txt.%s%s....%s/%|
0008e8c0  73 00 ff ff 70 6f 69 6e  74 65 72 2e 62 69 6e 00  |s...pointer.bin.|
-0008e8d0  56 33 2e 35 00 00 00 00  2f 52 34 69 4d 65 6e 75  |V3.5..../R4iMenu|
+0008e8d0  56 33 2e 36 00 00 00 00  2f 52 34 69 4d 65 6e 75  |V3.6..../R4iMenu|
0008e8e0  2f 73 61 76 6c 69 62 2e  64 61 74 00 59 55 4b 45  |/savlib.dat.YUKE|
0008e8f0  00 00 00 00 59 4d 50 4b  00 00 00 00 48 45 4c 4c  |....YMPK....HELL|
0008e900  4f 4b 49 54 54 59 42 43  53 41 56 45 00 00 00 00  |OKITTYBCSAVE....|

Disassembling the earlier area and it seems to be adding up a 32-bit value in to a register and I presume is some representation of a time (based on the value seeming getting larger each newer version). Trying to direct hexedit the value and it gets stuck at the "Loading ..." screen. Further, the second part seems almost random and I presume is either an encrypted something or a hash. I've not done enough testing but simply changing the third part (the version string) and it'll boot fine so I presume whatever the check is, it's not done over the whole file.

In short, I'll look further into it and perhaps work something out. But if anyone else happens to recognize a pattern to this that I don't and could help, it'd be appreciated.

PS - One big hint that I don't see any "expired" string in R4.dat makes me think that it's the firmware that is doing the checking. It's why I haven't been so quick to try looking further in the disassemble, even if it might contain the key checking code.
 

NekoKat

Well-Known Member
Newcomer
Joined
Oct 18, 2013
Messages
87
Trophies
0
Age
34
XP
169
Country
Mexico
So they're intentionally programming this expiring thing? Damn...

Eugh, too bad I know nothing about programming.
 

kuwanger

Well-Known Member
Member
Joined
Jul 26, 2006
Messages
1,510
Trophies
0
XP
1,783
Country
United States
Not really much progress made so far. I've gotten as far as figuring out that my PS was wrong. R4.dat includes the "Loading ..." as one big image and although I still don't understand how it constructs it it generates the strings in memory (with 6-bytes between each letter) which I presume (probably incorrectly) has something to do with multi-language support. In any case, the code is copied to WRAM and so the actual hash/decryption/whatever check seems to reside at 0x2035344 (in ROM 0x8035544); this was all deduced by taking a memory dump and figuring out where the relevant "hash" was copied into RAM and then searching for where its memory address is used.

Unfortunately, I'm not sure how much real progress I'll make from here. As much use as No$gba's debugger has been, it really has a long list of unfortunately quirks that make it less useful given its intended audience. Even if it were perfect, the real issue is the real hardware will obviously play differently, so it's very slow going. I'll still keep trying, but again if anyone else is interested... Unfortunately, with a 2018 deadline it's hard to be TOO motivated to a solution.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Veho @ Veho:
    I only wish it was actually playable.
  • Veho @ Veho:
    There's a guy on the Tube of You that makes playable mechanical arcade games out of Lego. This could work on the same principle.
  • Veho @ Veho:
    Just a couple of guys taking their manatee out for some fresh air, why you have to molest them?
  • Veho @ Veho:
    Stupid Chinese shop switched their shipping company and this one is slooooooow.
  • LeoTCK @ LeoTCK:
    STOP BUYING CHINESE CRAP THEN
  • LeoTCK @ LeoTCK:
    SUPPORT LOCAL PRODUCTS, MAKE REVOLUTION
  • LeoTCK @ LeoTCK:
    THEY KEEP REMOVING LOCAL SHIt AND REPLACING WItH INFERIOR CHINESE CRAP
  • LeoTCK @ LeoTCK:
    THATS WHY MY PARTNER CANT GET A GOOTWEAR HIS SIZE ANYMORE
  • LeoTCK @ LeoTCK:
    HE HAS BIG FOOT AND BIG DUCK
  • LeoTCK @ LeoTCK:
    d*ck i mean*
  • LeoTCK @ LeoTCK:
    lol
  • Veho @ Veho:
    Mkay.
  • Veho @ Veho:
    I just ordered another package from China just to spite you.
  • SylverReZ @ SylverReZ:
    Communism lol
  • SylverReZ @ SylverReZ:
    OUR products
  • The Real Jdbye @ The Real Jdbye:
    @LeoTCK actually good quality products are dying out because they can't compete with dropshipped chinese crap
    +2
  • BakerMan @ BakerMan:
    @LeoTCK is your partner the sascrotch or smth?
  • Xdqwerty @ Xdqwerty:
    Good morning
  • Xdqwerty @ Xdqwerty:
    Out of nowhere I got several scars on my forearm and part of my arm and it really itches.
  • AdRoz78 @ AdRoz78:
    Hey, I bought a modchip today and it says "New 2040plus" in the top left corner. Is this a legit chip or was I scammed?
  • Veho @ Veho:
    @AdRoz78 start a thread and post a photo of the chip.
    +2
    Veho @ Veho: @AdRoz78 start a thread and post a photo of the chip. +2