Hacking 3DS rom dump info

[Cyan]

If I remember correctly, DS emulator was like the GBA Emulator : They existed BEFORE the console launch date

All the hardware (CPU architecture), was known and well documented by the chipset manufacturer.
There where homebrew and emulator before the console and before the first retail game dump.

The only problem for the DS emulator was that the games were signed and we didn't know the keys. So the emulator could only launch unsigned homebrew.


With the 3DS, first we don't know the keys and second we don't know the architecture of the ARM CPUs used by the console. I don't know if they are well documented. but based on the lack of knowledge, we can't even code unsigned homebrew without an official devkit.


PS: correct me if I said wrong thing, my memory is not at its best

 

[Deltaechoe]

What is going on right now is that a few teams are trying to figure out just exactly what makes the 3ds tick. Nintendo and the hardware manufacturers they hired are keeping their mouths shut pretty tight on how the hardware works so its up to the crackers to figure out how the hardware really works and once we have that, then we have to find the keys and brute forcing isn't going to work so well considering prime factorizations of that level take an extremely long time (if you have to ask search RSA Cryptography on google).

 

[Pong20302000]

What is going on right now is that a few teams are trying to figure out just exactly what makes the 3ds tick. Nintendo and the hardware manufacturers they hired are keeping their mouths shut pretty tight on how the hardware works so its up to the crackers to figure out how the hardware really works and once we have that, then we have to find the keys and brute forcing isn't going to work so well considering prime factorizations of that level take an extremely long time (if you have to ask search RSA Cryptography on google).

this is not a thread about the 3DS progress of 3DS hacking
it is for rom information

 

[Etkar.H]

It's hard to believe that no one has released a rom for Mario Open Tennis yet seeing how Kid Icarus Uprising was dumped 2-3 days before release...

 

[Thorhian]

Hey Guys, first post

Anyways, I was reading earlier that the dumping tools were available, but I have searched google and other places, I got nothing. Someone wanna help me out? I wanna dump my own games, not be a pirate >:/ Fair Use and all that jazz here in america you know.

 

[Pong20302000]

Hey Guys, first post

Anyways, I was reading earlier that the dumping tools were available, but I have searched google and other places, I got nothing. Someone wanna help me out? I wanna dump my own games, not be a pirate >:/ Fair Use and all that jazz here in america you know.

sorry no tool are publically available at this time

 

[Thorhian]

Hmmm, I thought others got it some how. I also tried finding the LGC teams website, do they even have one? Man... Why aren't they releasing the ROM dumper? Cause when neimod and others get the hacks out onto the 3ds, I wanna be able to be able to have all my games on my 3ds (really hope they dont go the flash cart route again, soft mod would be amazing :3) and to have backups. I refuse to download them.

But anyways, thanks For all the information you guys are providing, I have been looking at gbatemp for years for my homebrew and hacking needs.

 

[Pong20302000]

Hmmm, I thought others got it some how. I also tried finding the LGC teams website, do they even have one? Man... Why aren't they releasing the ROM dumper? Cause when neimod and others get the hacks out onto the 3ds, I wanna be able to be able to have all my games on my 3ds (really hope they dont go the flash cart route again, soft mod would be amazing :3) and to have backups. I refuse to download them.

But anyways, thanks For all the information you guys are providing, I have been looking at gbatemp for years for my homebrew and hacking needs.

lol well flashcards are a way of making money so most hackers will opt for that option
(at a guess it will be a flashcard that allows loading game data off the SD card slot or a storage on the card)

there is indeed a dumper and it requires assembly and programming
the pictures they posted are the key to what you need
you can buy the most parts but you need to build a PCB board to a 3DS card slot
and also program that items to dump.
not cheap and knowledge needed tho

Remember the 3DS Rom Dumping Pic that Legacy released with their first 3DS Rom...
http://i.imgur.com/NBJLZ.jpg

In the bottom left of that picture is a small white box,
It is a 'Zeroplus logic cube' (LAP-C 16032?) Logic Analyzer. (costs about $140usd)
http://i.imgur.com/T4Mtq.jpg
Legacy's has 32 pins, but only 16 of them are used + 1 ground)
http://i.imgur.com/rE0fQ.jpg

At the top of the picture, there are Pink, Blue and Green ports that looks like sound ports on a motherboard...
That is a 'Terasic FPGA Altera DE1 Mainboard - Cyclone II' (costs about $150usd)
http://i.imgur.com/S0zeH.jpg

In the bottom left is a MicroSD to SD Adapter with a MicroSD inserted,
The FPGA board has a SD Slot on the side so I guess the Roms are dumped to an SD Card.
One of the 40 pin expansion ports (that looks similar to an IDE port), is connected
to a PCB board with a Cartridge slot and cartridge using a 40 wire IDE Cable.


from 3DS 0001 NFO:
Quote

| :: | P.S. Most people are probably asking themselves "HOW?". | :: |
| :: | The answer is "Yes, it is THAT simple". This | :: |
| :: | release is 100% complete and was tested on our own | :: |
| :: | hardware. Just wait for the chinese to figure it | :: |
| :: | all out aswell, then you can play this release too.| :: |
| :: | Like our first DS and DSi dumps, we have included | :: |
| :: | a picture of the dumper with this release. Make of | :: |
| :: | it what you want, we have no intention of giving | :: |
| :: | out further information. | :: |


It looks like the pins of the cartridge are connected through that PCB (underneath the board) to both GPIO ports on the DE1.
Maybe GPIO_1 is connected to one of the DS Lites and that is being used to unlock the cart? (or supply power to the cart?)
also, on the NDS Lite Bottom Screen, you can just make out the text "There is no DS cart Inserted"

3DS Carts have 17 pins, 16 pins are connected from the cart PCB to the Zeroplus logic cube,
and the 17th pin is ground which is that single black wire on the end the Zeroplus logic cube.

 

[Thorhian]

Well thank you pong, thats what I needed. looks like I have a project I can do this summer lol, im guessing we have no idea how they programed it to dump, thats the main challenge IMO. However, we don't have to rely on the guys that MAKE flash carts for a soft mod, if the 3ds gets hacked, and we find out how they did it, them we can get some other people to make soft mods. Im being absoulutely honest here, I know someone who helped with some of the stuff for the homebrew channel.

-Might be able to get some help from him

 

[ichichfly]

Remember the 3DS Rom Dumping Pic that Legacy released with their first 3DS Rom...
http://i.imgur.com/NBJLZ.jpg

In the bottom left of that picture is a small white box,
It is a 'Zeroplus logic cube' (LAP-C 16032?) Logic Analyzer. (costs about $140usd)
http://i.imgur.com/T4Mtq.jpg
Legacy's has 32 pins, but only 16 of them are used + 1 ground)
http://i.imgur.com/rE0fQ.jpg

At the top of the picture, there are Pink, Blue and Green ports that looks like sound ports on a motherboard...
That is a 'Terasic FPGA Altera DE1 Mainboard - Cyclone II' (costs about $150usd)
http://i.imgur.com/S0zeH.jpg

In the bottom left is a MicroSD to SD Adapter with a MicroSD inserted,
The FPGA board has a SD Slot on the side so I guess the Roms are dumped to an SD Card.
One of the 40 pin expansion ports (that looks similar to an IDE port), is connected
to a PCB board with a Cartridge slot and cartridge using a 40 wire IDE Cable.


from 3DS 0001 NFO:
Quote

| :: | P.S. Most people are probably asking themselves "HOW?". | :: |
| :: | The answer is "Yes, it is THAT simple". This | :: |
| :: | release is 100% complete and was tested on our own | :: |
| :: | hardware. Just wait for the chinese to figure it | :: |
| :: | all out aswell, then you can play this release too.| :: |
| :: | Like our first DS and DSi dumps, we have included | :: |
| :: | a picture of the dumper with this release. Make of | :: |
| :: | it what you want, we have no intention of giving | :: |
| :: | out further information. | :: |


It looks like the pins of the cartridge are connected through that PCB (underneath the board) to both GPIO ports on the DE1.
Maybe GPIO_1 is connected to one of the DS Lites and that is being used to unlock the cart? (or supply power to the cart?)
also, on the NDS Lite Bottom Screen, you can just make out the text "There is no DS cart Inserted"

3DS Carts have 17 pins, 16 pins are connected from the cart PCB to the Zeroplus logic cube,
and the 17th pin is ground which is that single black wire on the end the Zeroplus logic cube.

No you don't need a DS to supply power to the card the Dev Board has a 3,3V power supply http://www.altera.com/products/devkits/altera/documents/cy2_fpga_starter_board_schematic.pdf

ADD: http://www.3dbrew.org/wiki/Gamecards

 

[Thorhian]

Remember the 3DS Rom Dumping Pic that Legacy released with their first 3DS Rom...
http://i.imgur.com/NBJLZ.jpg

In the bottom left of that picture is a small white box,
It is a 'Zeroplus logic cube' (LAP-C 16032?) Logic Analyzer. (costs about $140usd)
http://i.imgur.com/T4Mtq.jpg
Legacy's has 32 pins, but only 16 of them are used + 1 ground)
http://i.imgur.com/rE0fQ.jpg

At the top of the picture, there are Pink, Blue and Green ports that looks like sound ports on a motherboard...
That is a 'Terasic FPGA Altera DE1 Mainboard - Cyclone II' (costs about $150usd)
http://i.imgur.com/S0zeH.jpg

In the bottom left is a MicroSD to SD Adapter with a MicroSD inserted,
The FPGA board has a SD Slot on the side so I guess the Roms are dumped to an SD Card.
One of the 40 pin expansion ports (that looks similar to an IDE port), is connected
to a PCB board with a Cartridge slot and cartridge using a 40 wire IDE Cable.


from 3DS 0001 NFO:
Quote

| :: | P.S. Most people are probably asking themselves "HOW?". | :: |
| :: | The answer is "Yes, it is THAT simple". This | :: |
| :: | release is 100% complete and was tested on our own | :: |
| :: | hardware. Just wait for the chinese to figure it | :: |
| :: | all out aswell, then you can play this release too.| :: |
| :: | Like our first DS and DSi dumps, we have included | :: |
| :: | a picture of the dumper with this release. Make of | :: |
| :: | it what you want, we have no intention of giving | :: |
| :: | out further information. | :: |


It looks like the pins of the cartridge are connected through that PCB (underneath the board) to both GPIO ports on the DE1.
Maybe GPIO_1 is connected to one of the DS Lites and that is being used to unlock the cart? (or supply power to the cart?)
also, on the NDS Lite Bottom Screen, you can just make out the text "There is no DS cart Inserted"

3DS Carts have 17 pins, 16 pins are connected from the cart PCB to the Zeroplus logic cube,
and the 17th pin is ground which is that single black wire on the end the Zeroplus logic cube.

No you don't need a DS to supply power to the card the Dev Board has a 3,3V power supply http://www.altera.co...d_schematic.pdf

ADD: http://www.3dbrew.org/wiki/Gamecards

Thanks ichifly, good to know. Im guessing no one else in public has really been able to build one of these yet?

 

[AndreDPalhares]

About all the games dumps released by these strange groups: When exploits for running flash carts(for example) will be found, will they have to dump all them again to be playable? Or users can use those files right away?

 

[Pong20302000]

About all the games dumps released by these strange groups: When exploits for running flash carts(for example) will be found, will they have to dump all them again to be playable? Or users can use those files right away?

strange groups? as your quite new here you should know these arnt STRANGE groups as you call them. they are very well known.
well we dont know of an exploit as there is yet to be one for retail 3DS systems
no they will not need to be re-dumped. these are full copyies of the data on the game carts
so at most you might need a patch to apply to make them the same region as a 3DS, but obviosly if a exploit is found that doesnt give a monkeys about the region there will be no need for that



side note*

Wooo 189 roms now

 

[Thorhian]

Im being quite honest here.. but what is the point of all this ROM dump information, piracy? :/

 

[Pong20302000]

Im being quite honest here.. but what is the point of all this ROM dump information, piracy? :/

its backup information

so you can see that the info is scene

so when own bakcups done you can CRC check that you have backed up your own data sucessfully

194 3DS scene releases now complete on list

 

[El Bastardo]

What happened to the OfflineList?

Wanted to update the list the other day but the "newest" ROM on the list is 153.

Is the project dead before it even really started?

 

[Cyan]

I didn't have time to update mine, sorry. (and I don't know when I'll do it either, currently focusing on usbGX development).
I don't know about the other OfflineList.

 

[Zonzorg]

hello you can download my dat for offlineList here : http://scene.release...eases_3DS_N.zip
you must also download datas.xsd (http://scene.release...datas/datas.xsd) and put this in /datas directory (right click to select download under ...)
go http://www.playeradv...isplay.php?f=55 for my plugins

 

[El Bastardo]

@[member='Zonzorg']: Tanks for the tip. I just tried it out and it works.

One suggestion for improvement: Within the XML the line "" you mix .3ds and .3DS (in caps). That isn't optimal for the renamer because it's inconsistent.
Would be great if you would unify it to .3ds


Also I checked the forum with your other plugins and wanted to try the Sheet_read.dll but my anti virus program says Trojan found.

 

[Cyan]

I'm sure it's a false positive.
that's just a plugin for offline list, maybe the antivirus don't like some dll extensions.

I scanned it with nod32 and Microsoft security essential, no harm found.