Tutorial  Updated

Photo guide to installing DSiWare backups on real hardware and emulator

First, some USEFUL NOTES

Tickets are not actually required by the DSi launcher (this was unknown at the time the above procedure was written), you may skip the related steps

While still incomplete, @MarioMasta64 is working on automating this process for Windows+Python users:
http://gbatemp.net/threads/a-tool-to-make-converting-dsiware-from-3ds-to-dsi-easier.479996/

If you are using an emunand (through Hiya, for example), consider using DSi Title Manager instead; there's no reason it couldn't work on sysnand with minor changes but... it doesn't do that, yet or ever




Steal Acquire some decrypted DSiware apps. You can use Funkeycia, 3DSeStuff, etc the 3DS eShop to legally download them, rip them to cia, then use ctrtool to extract the cia into "contents" = .app (the very newest versions of ctrtool decrypt them during this extraction); alternatively you can use Godmode9 to directly copy the appropriate .app under twln:/title/00030004/* to the SD.
There's also a no-intro catalogue but no romset I know of, officer...

Backup your console's NAND, CID, and ConsoleID using well documented methods (hardmod if you have some DSiware that can be copied to SD, or fwTool+safety mod if you have an usable DSiware exploit - Team Twiizer's original sudokuhax is not suitable #clobberedkeyslots, while fourswordshax and the leaked ugopwn use minitwlpayload).
If you're using NO$GBA with a nand you didn't dump yourself, you can find the CID and the byteswapped ConsoleID by looking at the end of the dump with a hex editor.
1 NOCASHNAND.PNG
(Adding this block is also how you convert a raw backup for use with NO$GBA, just in case you didn't read the manual)

Use TwlTool to decrypt the nand.
2 nand decrypt.PNG

Mount the 1st partition of the decrypted image with OSFMount (Linux equivalent: losetup + mount; Mac equivalent, hdiutil + mount I guess?).
3 osfmount.PNG 4 osfmount.PNG

Pick (any?) ticket from the NAND, preferably from the regular DSiware category = 00030004, and decrypt it with TwlTool. This will be a base for the edited tickets we will make.
5 ticket crypto.PNG

Open the folder with our dumped title. You will find a "content" folder, possibly a "data" folder, and a .ctx file if it came from a 3DS.
Delete it, then go to the content folder.
Remove the "cmd" folder, and the 3DS-format TMD.
6 source.PNG 7 source content.PNG

Search the TMD pack for the full TitleID of the DSiware; copy the TMD to the content folder, renaming it to "title.tmd".
Open title.tmd in a hex editor.
8 tmd.PNG

Find offset 1E7; rename the .app file (better known as .srl or .nds) so that the last 2 digits are the ones written at 1E7.
Find offset 208; delete everything from there to the end of the file. (A small number of tmds are already trimmed).
Save the file.
9 tmd edit.PNG

Open the ticket we decrypted earlier in a hex editor.
Find offset 1DC and replace the next 8 bytes with the TitleID of the app we're installing;
Save the file with a name equal to the TitleID-low of the app.
10 ticket edit.PNG 11 ticket save.PNG

Use TwlTool to encrypt the ticket, and put it into the NAND.
12 ticket crypto.PNG

Copy the title's (content & data) folder to the NAND.
13 app copy.PNG

Unmount the NAND and re-encrypt it.
14 unmount.PNG 15 nand crypt.PNG

If you're using NO$GBA, you will have to re-add the footer since it will have been removed by TwlTool's NAND features.
16 nand footer.PNG

Enjoy your DSiWarez, and if you liked it, BUY THE ORIGINAL... oh wait, they closed the DSi shop
17.PNG 18.PNG
 
Last edited by Ryccardo,

mariogamer

Well-Known Member
Member
Joined
Aug 12, 2015
Messages
1,256
Trophies
0
Age
28
XP
790
Country
Canada
No$GBA is not 100% accurate, but yes, after reencrypting your nand, you can add a footer with your CID and ConsoleID to emulate your own console
You will also need the (partial) DSi bootroms = BiosDSi.rom

All there in the No$GBA manual
I can't seem to find how to dump it.

No$gba does not seem to work in wine btw.
 

DarkGabbz

Resident XBOX Guy
Member
Joined
Dec 29, 2015
Messages
1,185
Trophies
0
Age
21
Location
Modding Xbox'es
XP
621
Country
Micronesia, Federated States of
upload_2017-8-10_20-13-18.png

"Error: 1-2435-8325" Invalid signature or partition type in MBR, invalid starting LBA.
I can't get it working.

--------------------- MERGED ---------------------------

Nvm i got it working.

--------------------- MERGED ---------------------------

Next problem im trying to launch the Dsi sound thing and it says not yet 16.
upload_2017-8-10_20-25-28.png
 

TheCyberQuake

Certified Geek
Member
Joined
Dec 2, 2014
Messages
5,012
Trophies
1
Age
28
Location
Las Vegas, Nevada
XP
4,432
Country
United States
Double checked every step but I bricked it LMAO
at least I have some NAND backups... i'll go find someone that hardmod the DSi xD
View attachment 95272
Yep. Same exact brick. Luckily it was on my throw-away test system so I still have a working system.

I don't think fwTool 1.6 is good to reflash your DSI had the same problem but lucky for me I know how to hardmod. Got it back to normal.
fwtool 1.6 seems to work perfectly fine when I reflash a downgrade modification (twice) so it can't be that.
 
  • Like
Reactions: Diego788

TheCyberQuake

Certified Geek
Member
Joined
Dec 2, 2014
Messages
5,012
Trophies
1
Age
28
Location
Las Vegas, Nevada
XP
4,432
Country
United States
OK so it might of been the Sudoku I added, funny I followed the guide to the T.
funny mine was also sudoku that bricked.
I guess it's kinda a good thing this happened, I've been wanting to do a hardmod and now this makes me. And I still have another dsi to poke around with while I do that. Though I definitely won't be trying this again until I can successfully hardmod my bricked system or an easier way comes around.
 

ToneCapone-RF

Well-Known Member
Newcomer
Joined
Jun 30, 2017
Messages
65
Trophies
0
Age
51
XP
359
Country
United States
OK so this is NO&GBA running my Nand seems to be working fine but if I flash it I will get the 00000FEFE.
 

Attachments

  • dsi.jpg
    dsi.jpg
    21.1 KB · Views: 282

ToneCapone-RF

Well-Known Member
Newcomer
Joined
Jun 30, 2017
Messages
65
Trophies
0
Age
51
XP
359
Country
United States
how do you pull it up in no$gba, can't seem to find any options to actually do that. Though I've never used no$gba anyway so I may just be completely missing something obvious.

There's a website that teaches you how and I don't know if I can add it here for fear of getting kicked.
 

DinohScene

Gay twink catboy
Global Moderator
Joined
Oct 11, 2011
Messages
22,558
Trophies
4
Location
Восторг
XP
22,835
Country
Antarctica
People that attempt this need to remember to re-encrypt the NAND.
This severely reduces the chances of bricking (literally all bricking).

I would not attempt this on a DSi if you don't have the means to restore it with hardware.

Just a friendly reminder, that's all.
 

ToneCapone-RF

Well-Known Member
Newcomer
Joined
Jun 30, 2017
Messages
65
Trophies
0
Age
51
XP
359
Country
United States
People that attempt this need to remember to re-encrypt the NAND.
This severely reduces the chances of bricking (literally all bricking).

I would not attempt this on a DSi if you don't have the means to restore it with hardware.

Just a friendly reminder, that's all.

Yep exactly what he said, try it, bricked it, had to hard mod it and wont try again ontill something solid come up like Rocketlauncher.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Xdqwerty @ Xdqwerty: @SylverReZ, @Psionic Roshambo sorry but im not that used to listening to non game music +1