ROM Hack DSiWare ROM Hacking Thread (for signature-patched TWL_FIRM)

[I pwned U!]

(At the time the thread was first made, only the 3DS line of systems were capable of running unsigned DSi titles on native hardware, instead of through the less accurate process of emulation.)

I decided to create this thread due to the recent development of being able to run unsigned DSiWare with CFW and a modified TWL_FIRM installed.

To this day DSiWare ROM hacking has been nearly non-existent. The first version of DSi_SRL_Extract (a tool for decrypting DSiWare TADs (installable titles; DSi equivalents of CIAs, WADs, etc) exported from a DSi) was released just under a year and a half ago. The ability to run DSiWare in an emulator has only been possible since just one year ago, and there are still many bugs and unsupported features. Decrypting and encrypting the NAND on a DSi to downgrade titles was a development from just last summer. This, however, still does not allow DSi systems to run unsigned DSi titles.

The main reason why I created this thread in this particular forum is simple:

The purpose of this thread is to let your DSiWare ROM hacking ideas run wild! If you have an idea of a ROM hack that you would like to see, post it in this thread! Need help with creating a ROM hack for a particular title? Ask for help here! Stumped about how to convert, open, and/or edit some files that you found in a particular DSi title. Come here to ask other users for support! Want to create a fan translation for a Japan-exclusive DSi title? This is the thread for you!

If you want to discuss other things about TWL_FIRM mods that are not directly related to ROM hacks of DSiWare and/or DSi system titles, then please discuss them here.

Hopefully, with this recent 3DS development, a proper DSi ROM hacking scene can develop and prosper!

I cannot wait to see everyone's ideas and projects!

 

[jackb994]

Well, would it be possible to create a custom dsiware app of pictochat. I found a file on that iso site with a .app and a cia file that requires dev menu/fbi to open.

 

[I pwned U!]

It should be now! Maybe it would be possible to add support for custom colors instead of just the black and rainbow options!

In addition, it would be awesome if the color switching also applied to keyboard text, instead of just the pencil option!

 

[redunka]

Yay, that's what I was waiting for!
I hope it will be possible to create undub version of BlayzBloo.
And maybe even Russian fan translation of Zelda 4 Swords.

 

[laharl22]

Me i want play ds games on dstwo at fullscreen

 

[I pwned U!]

Me i want play ds games on dstwo at fullscreen

For something like this, it would probably be possible with another TWL_FIRM mod. I know that each virtual console release comes with a configuration file in the title, including how many pixels to take up on the top screen.

TWL_FIRM probably does something similar. For example, when you launch a TWL title while holding down the Select button, a configuration is used where the images do not fill up either screen and only use up the minimum number of pixels. Considering how (almost) nobody bothers to use that option, perhaps it would be possible to replace it with an option similar to booting without Select pressed, but with an edit the configuration so that holding down Select while launching a TWL title will cause the image to stretch to 400 X 240 pixels used, instead of the default option.

On another note, is anyone able to help me with the following Photo Dojo problem?

Recently, I have been going through the Photo Dojo ROM in search of the SDAT containing the game's music, but I have only been able to find a small SDAT containing the instruction manual sounds.

I have searched in a hex editor, but the only result that comes up is for the instruction manual one.

The game was one that I copied to a SD card from a DSi, then decrypted with dsi_srl_extract.

If anyone is able to help, it will be greatly appreciated.

Another idea that I have is a Mario Vs. Donkey Kong Minis March Again mod that redirects the level sharing feature to a custom server (such as Wiimmfi) now that the Nintendo WFC option is long gone.

 

[matt!]

Are DS download play titles applicable here?

 

[Asia81]

https://gbatemp.net/threads/ds-i-mode-hacking-progress-thread.413015/

 

[I pwned U!]

Are DS download play titles applicable here?

Probably not, but what do you have in mind?

 

[loco365]

I do have a WIP level viewer for Trajectile/Reflect Missile: http://tf.caveoforig.in/projects/trajectory

The code is an abomination, but it's on my radar to refactor that code and learn about implementing an editable interface. Once @nocash123 fixes DSiWare touch screen support, I may start working on Trajectory again.

 

[I pwned U!]

Does anyone know how I would go about building a DSi title CIA?

After a bit of searching, I came up empty.

 

[redunka]

Does anyone know how I would go about building a DSi title CIA?

After a bit of searching, I came up empty.

If you want to rebuild DSiWare SRL (.nds) as CIA, use make_cia.
Open command line and type:
make_cia --srl=something.nds

 

[I pwned U!]

Does anyone know if it is possible to make a title that normally uses SSEQs and SWARs for BGM to use STRMs instead?

I would like to take the sequenced music and replace it with much higher quality music.

(Imagine opening up the DSi Shop and hearing this!)

 

[Deleted User]

Sorry for the bump, but has anyone actually managed to successfully romhack a dsiware game?
I've been trying to, with the goal of making a fan translation, but apparently there's some kind of NitroFS protection implemented in TWL titles.

 

[I pwned U!]

Sorry for the bump, but has anyone actually managed to successfully romhack a dsiware game?
I've been trying to, with the goal of making a fan translation, but apparently there's some kind of NitroFS protection implemented in TWL titles.

I tried months ago to do a simple text edit in Photo Dojo's BMG file, but it did not boot in NO$GBA after that. @Apache Thunder has lots of NTR and TWL reverse engineering experience. Perhaps we have been missing something, and he may be able to help.

On an unrelated note, I still have not found the Photo Dojo BGM yet, and I would appreciate help from anyone who is interested.

Recently, I have been going through the Photo Dojo ROM in search of the SDAT containing the game's music, but I have only been able to find a small SDAT containing the instruction manual sounds.

I have searched in a hex editor, but the only result that comes up is for the instruction manual one.

The game was one that I copied to a SD card from a DSi, then decrypted with dsi_srl_extract.

If anyone is able to help, it will be greatly appreciated.

 

[Deleted User]

I tried months ago to do a simple text edit in Photo Dojo's BMG file, but it did not boot in NO$GBA after that. @Apache Thunder has lots of NTR and TWL reverse engineering experience. Perhaps we have been missing something, and he may be able to help.

On an unrelated note, I still have not found the Photo Dojo BGM yet, and I would appreciate help from anyone who is interested.

Yeah, I'd imagine Apache Thunder or one of those guys could help. unfortunately they're busy with the ds SD loading thing, so I don't know if they'd be willing to help, at least right now.
I might be able to help with the Photo Dojo thing though. I'll sent you a pm.

 

[Apache Thunder]

I tried months ago to do a simple text edit in Photo Dojo's BMG file, but it did not boot in NO$GBA after that. @Apache Thunder has lots of NTR and TWL reverse engineering experience. Perhaps we have been missing something, and he may be able to help.

On an unrelated note, I still have not found the Photo Dojo BGM yet, and I would appreciate help from anyone who is interested.

I've mentioned a few times that currently you can't rom hack newer TWL titles (DSiWare and this includes DSI Enhanced games as well) because they use a digest sector hash table system. You have to patch this function out of the game before you can modify them. This is not something you can patch out of TWL_FIRM. Each and every game handles this so you have to patch each and every game you want to modify.

 

[Deleted User]

I've mentioned a few times that currently you can't rom hack newer TWL titles (DSiWare and this includes DSI Enhanced games as well) because they use a digest sector hash table system. You have to patch this function out of the game before you can modify them. This is not something you can patch out of TWL_FIRM. Each and every game handles this so you have to patch each and every game you want to modify.

Yeah, I probably should've mentioned that since you said the same thing to me a while ago.
I found some info on the digest sector tables on dsibrew
http://dsibrew.org/wiki/DSi_Cartridge_Header
I'll try to play around with the values at those offsets and see if I can manage to patch it out.

 

[Deleted User]

Well I tried modifying every value that is related to the digests. Namely these -

Every time it either did nothing or made the game freeze at boot.
I guess I'm at a loss, like I was before. I'll keep experimenting with the rom, but at this point it looks like I might be forced to drop this project.
Oh well, maybe someday it'll be possible.

 

[MRJPGames]

Sorry for the bump... But I feel it is justified with the recent developments in the DSi scene. Now that DSiWare loading in the form of a .nds file is possible on the DSi with unlaunch 0.9 and DSiMenu++. I tried to romhack a DSiWare title as well with no success. So I started looking around and found this thread. Has any progress been made on the digest sector hash table patching? Has anyone succeeded, and would it be possible for a tool te be created to automate this process at some point?