Hacking Hacking DSi 2015?

[Jiro2]

So would it be possible with a DS flashcart that can be updated in such a way as to change the header that the DSi sees on the flashcart? (I suppose you'd have to reverse-engineer how the flashcart is updated in order to do this.) Or are there no such DS flashcarts?

 

[WulfyStylez]

For the record, this will re-enable dsiwarehax from software documented here. You'll have to buy one of those games - though I wouldn't until everything's finished and released. There's ways to get around buying DSiware (probably), but I don't have any interest in researching those since the DSi Shop still has exploitable software for sale.

Also fwiw: DSiWarehax = SD access, no gamecard access.
DSi savegamehax = gamecard access, no SD access.
This is controlled by a one-shot register that we can't do anything about. DSiWarehax is definitely ideal since loading over wifi is so tricky and inconvenient.

 

[loco365]

For the record, this will re-enable dsiwarehax from software documented here. You'll have to buy one of those games - though I wouldn't until everything's finished and released. There's ways to get around buying DSiware (probably), but I don't have any interest in researching those since the DSi Shop still has exploitable software for sale.

Also fwiw: DSiWarehax = SD access, no gamecard access.
DSi savegamehax = gamecard access, no SD access.
This is controlled by a one-shot register that we can't do anything about. DSiWarehax is definitely ideal since loading over wifi is so tricky and inconvenient.

What about the copy protection in the latest firmwares? I presume you've found a way to circumvent that? (A simple yes or no is sufficient, I don't think you want to make this too public as of yet, then again, the DSi is old news so I don't think it'd matter to Nintendo at this point)

 

[Apache Thunder]

Wulfy, you happen to know why TwlNandFiler doesn't boot on retail 3DS? I mean the specific technical reason why it doesn't boot. I know it's because 3DS isn't using dev version of TWL. but would like to know if it's because of how it's encrypted or if it's the RSA sigs of the SRL that is the issue. Heck it's probably both...

 

[WulfyStylez]

What about the copy protection in the latest firmwares? I presume you've found a way to circumvent that? (A simple yes or no is sufficient, I don't think you want to make this too public as of yet, then again, the DSi is old news so I don't think it'd matter to Nintendo at this point)

I've got like 3 different ways to get around copy protection, yes. All of them are non-revocable methods, too.

 

[Gadorach]

For the record, this will re-enable dsiwarehax from software documented here. You'll have to buy one of those games - though I wouldn't until everything's finished and released. There's ways to get around buying DSiware (probably), but I don't have any interest in researching those since the DSi Shop still has exploitable software for sale.

Also fwiw: DSiWarehax = SD access, no gamecard access.
DSi savegamehax = gamecard access, no SD access.
This is controlled by a one-shot register that we can't do anything about. DSiWarehax is definitely ideal since loading over wifi is so tricky and inconvenient.

Just checking, but for all intents and purposes, SudokuHax is no longer an option for DSiWareHax, right? The latest version available in the DSi Store is patched and it can't be unpatched with your exploit, right?

 

[loco365]

I've got like 3 different ways to get around copy protection, yes. All of them are non-revocable methods, too.

Oh, that's good to hear. I guess I may not need my copy of Cooking Coach for much longer then.

 

[atkfromabove]

For the record, this will re-enable dsiwarehax from software documented here. You'll have to buy one of those games - though I wouldn't until everything's finished and released. There's ways to get around buying DSiware (probably), but I don't have any interest in researching those since the DSi Shop still has exploitable software for sale.

Also fwiw: DSiWarehax = SD access, no gamecard access.
DSi savegamehax = gamecard access, no SD access.
This is controlled by a one-shot register that we can't do anything about. DSiWarehax is definitely ideal since loading over wifi is so tricky and inconvenient.

I just hardmodded my DSi in anticipation for this now! I have everything working but I cannot get my computer to show the eMMC when I plug in my SD reader. I am getting the code: 0000FE00 when I boot with the SD reader attached.

When I remove the SD reader and boot the DSi it works like expected. I am on firmware 1.4. Is there a trick with the DSi that is different from the 3DS when dumping the NAND?

 

[hippy dave]

For the record, this will re-enable dsiwarehax from software documented here.

I enjoyed how they tried extra hard to word the last part of the instructions differently for each game.

 

[zoogie]

I enjoyed how they tried extra hard to word the last part of the instructions differently for each game.

Yellows8 really wants you to know he's totally not a robot ;p

btw - you guys still have 'Guitar Rock Tour' across the pond? It's not available over here any more. The video for it still exists but no game, lol.

 

[eggsample]

@atkfromabove Try different SD reader. For 3dsXL I switched to TS-RDP5K USB. No nand dump issues till then.

 

[loco365]

I just hardmodded my DSi in anticipation for this now! I have everything working but I cannot get my computer to show the eMMC when I plug in my SD reader. I am getting the code: 0000FE00 when I boot with the SD reader attached.

When I remove the SD reader and boot the DSi it works like expected. I am on firmware 1.4. Is there a trick with the DSi that is different from the 3DS when dumping the NAND?

View attachment 21669 View attachment 21670

What did you refer to when setting up your NAND mod? I may do this to my DSi as well so I can have my 1.4U NAND backed up. Then I can update and use any new haxx without having to worry about losing anything.

 

[atkfromabove]

What did you refer to when setting up your NAND mod? I may do this to my DSi as well so I can have my 1.4U NAND backed up. Then I can update and use any new haxx without having to worry about losing anything.

I used this image for the hard mod.

http://dsibrew.org/wiki/Hardware

 

[Gadorach]

I used this image for the hard mod.

http://dsibrew.org/wiki/Hardware

For those trying to do it with just that picture, you're going to want both of these instead:

Spoiler: Full Board

http://dsibrew.org/w/images/4/43/Dsi_nand.jpg

Spoiler: DAT points

http://dsibrew.org/w/images/5/51/Dsi_nanddat.png

Spoiler: AND TOGETHER THEY MAKE

 

[loco365]

Hm, I'll probably have to take it in to someone that can work with parts that small. I'll probably screw it up somehow. I do have soldering experience, but not with points that small.

 

[Gadorach]

Hm, I'll probably have to take it in to someone that can work with parts that small. I'll probably screw it up somehow. I do have soldering experience, but not with points that small.

Yeah, probably a good idea. I'm just lucky I have 10+ years under my belt for soldering small shit. This isn't that awful bad though, just touch-and-go points. You don't have anything to worry about until someone brings you a Dreamcast that they used the wrong length screws on. 5 destroyed traces from the CPU to GPU, all right beside each other, all about 0.3mm of space between them. That shit isn't fun, have to stagger the wires and everything. Anyway, point is, taking your shit to someone who knows their shit is always a good idea. Cell phone repair companies are usually a possible option, if no local mod shops are available.

 

[loco365]

Yeah, probably a good idea. I'm just lucky I have 10+ years under my belt for soldering small shit. This isn't that awful bad though, just touch-and-go points. You don't have anything to worry about until someone brings you a Dreamcast that they used the wrong length screws on. 5 destroyed traces from the CPU to GPU, all right beside each other, all about 0.3mm of space between them. That shit isn't fun, have to stagger the wires and everything. Anyway, point is, taking your shit to someone who knows their shit is always a good idea. Cell phone repair companies are usually a possible option, if no local mod shops are available.

Yeah. I have a few friends in Computer Tech that probably have more experience than I, so they'll probably be my first stop.

As for the other end of the connector, I simply use the same format as the 3DS on the SD card reader, then plug it in and use Win32DiskImager to read the NAND?

 

[WulfyStylez]

You don't have anything to worry about until someone brings you a Dreamcast that they used the wrong length screws on. 5 destroyed traces from the CPU to GPU, all right beside each other, all about 0.3mm of space between them.

I've done literally exactly this and it's the worst thing holy shit

Also, for what it's worth, Martin Korth has a really high-res map of traces on the DSi, including eMMC. It's a super solid reference.

 

[loco365]

The closest I've come is disassembling and reassembling a DS Lite with a new shell, and even that had interesting moments. Especially that fucking hinge and having to thread the ribbon cable through it without breaking it.

 

[Gadorach]

The closest I've come is disassembling and reassembling a DS Lite with a new shell, and even that had interesting moments. Especially that fucking hinge and having to thread the ribbon cable through it without breaking it.

Try a regular 3DS.

JK, I wish that torture on no one.