First, some USEFUL NOTES

Tickets are not actually required by the DSi launcher (this was unknown at the time the above procedure was written), you may skip the related steps

While still incomplete, @MarioMasta64 is working on automating this process for Windows+Python users:
http://gbatemp.net/threads/a-tool-to-make-converting-dsiware-from-3ds-to-dsi-easier.479996/

If you are using an emunand (through Hiya, for example), consider using DSi Title Manager instead; there's no reason it couldn't work on sysnand with minor changes but... it doesn't do that, yet or ever

---

Steal Acquire some decrypted DSiware apps. You can use Funkeycia, 3DSeStuff, etc the 3DS eShop to legally download them, rip them to cia, then use ctrtool to extract the cia into "contents" = .app (the very newest versions of ctrtool decrypt them during this extraction); alternatively you can use Godmode9 to directly copy the appropriate .app under twln:/title/00030004/* to the SD.
There's also a no-intro catalogue but no romset I know of, officer...

Backup your console's NAND, CID, and ConsoleID using well documented methods (hardmod if you have some DSiware that can be copied to SD, or fwTool+safety mod if you have an usable DSiware exploit - Team Twiizer's original sudokuhax is not suitable #clobberedkeyslots, while fourswordshax and the leaked ugopwn use minitwlpayload).
If you're using NO$GBA with a nand you didn't dump yourself, you can find the CID and the byteswapped ConsoleID by looking at the end of the dump with a hex editor.

(Adding this block is also how you convert a raw backup for use with NO$GBA, just in case you didn't read the manual)

Use TwlTool to decrypt the nand.


Mount the 1st partition of the decrypted image with OSFMount (Linux equivalent: losetup + mount; Mac equivalent, hdiutil + mount I guess?).


Pick (any?) ticket from the NAND, preferably from the regular DSiware category = 00030004, and decrypt it with TwlTool. This will be a base for the edited tickets we will make.


Open the folder with our dumped title. You will find a "content" folder, possibly a "data" folder, and a .ctx file if it came from a 3DS.
Delete it, then go to the content folder.
Remove the "cmd" folder, and the 3DS-format TMD.


Search the TMD pack for the full TitleID of the DSiware; copy the TMD to the content folder, renaming it to "title.tmd".
Open title.tmd in a hex editor.


Find offset 1E7; rename the .app file (better known as .srl or .nds) so that the last 2 digits are the ones written at 1E7.
Find offset 208; delete everything from there to the end of the file. (A small number of tmds are already trimmed).
Save the file.


Open the ticket we decrypted earlier in a hex editor.
Find offset 1DC and replace the next 8 bytes with the TitleID of the app we're installing;
Save the file with a name equal to the TitleID-low of the app.


Use TwlTool to encrypt the ticket, and put it into the NAND.


Copy the title's (content & data) folder to the NAND.


Unmount the NAND and re-encrypt it.


If you're using NO$GBA, you will have to re-add the footer since it will have been removed by TwlTool's NAND features.


Enjoy your DSiWarez, and if you liked it, BUY THE ORIGINAL... oh wait, they closed the DSi shop

 

[ToneCapone-RF]

it still says the same thing.

ran a test to see what's the problem and it seems your console id may be wrong. the id is 16 digit check to see if that's correct.

 

[3EGaming]

The console ID is correct I checked it with fwtool through ugopwn.

 

[ToneCapone-RF]

The console ID is correct I checked it with fwtool through ugopwn.

Ok question are these your own .tik cause if there not you wont be able to decrypt them.

 

[3EGaming]

Ok question are these your own .tik cause if there not you wont be able to decrypt them.

yes. it came from my nand dump

 

[ToneCapone-RF]

yes. it came from my nand dump

I say redo you CID again from your DSI and see what happens from there.

 

[3EGaming]

it still says the same thing

 

[lAkdaOpeKA]

it still says the same thing

Make sure you're not mistakenly trying to decrypt a tmd instead of a ticked, that got me the first time I tried to follow this guide

 

[3EGaming]

Make sure you're not mistakenly trying to decrypt a tmd instead of a ticked, that got me the first time I tried to follow this guide

It is a ticket that I got from the nand dump in this folder:

 

[ww97]

I'm confused a bit. This guide has nothing to do with "injecting/installing" DSi ROM dumps into the NAND. All it does is decrypting the NAND, trimming a ticket from the NAND itself, and re-encrypting it again.

 

[Ryccardo]

I'm confused a bit. This guide has nothing to do with "injecting/installing" DSi ROM dumps into the NAND. All it does is decrypting the NAND, trimming a ticket from the NAND itself, and re-encrypting it again.

Try to re-read it with quite a little bit more care, since it describes:

Decrypting the nand
Copying a DSiware executable sourced elsewhere, and an appropriate TMD for it, to the appropriate place in twlnand
Decrypting an original DSiware ticket, editing a copy so that it has the titleID of the above title, renaming it appropriately, re-encrypting it, and copying it to the appropriate place in twlnand
Re-encrypting the nand

That said, this procedure has some unnecessary steps which weren't known to be so at the time (the console doesn't even care for the presence of a ticket; and if you are using a CFW with "emunand", no flash crypto required, of course) if all you want is Fr33 G4m3z

 

[Deleted-376337]

That said, this procedure has some unnecessary steps which weren't known to be so at the time (the console doesn't even care for the presence of a ticket; and if you are using a CFW with "emunand", no flash crypto required, of course) if all you want is Fr33 G4m3z

This guide has still been pretty useful for me (for personal reasons).

 

[dpad_5678]

Try to re-read it with quite a little bit more care, since it describes:

Decrypting the nand
Copying a DSiware executable sourced elsewhere, and an appropriate TMD for it, to the appropriate place in twlnand
Decrypting an original DSiware ticket, editing a copy so that it has the titleID of the above title, renaming it appropriately, re-encrypting it, and copying it to the appropriate place in twlnand
Re-encrypting the nand

That said, this procedure has some unnecessary steps which weren't known to be so at the time (the console doesn't even care for the presence of a ticket; and if you are using a CFW with "emunand", no flash crypto required, of course) if all you want is Fr33 G4m3z

Wow, wish I knew some of this at the time. Probably doubled the time it took for me to install DSiWare by just making up the tickets alone. 10 years later, and the console's finally cracked wide open.

 

[SilverTheGamer]

Steal Acquire some decrypted DSiware apps. A not terribly efficient (but pretty simple to do and understand) way is getting them from FreeShop on a modded 3DS, then copying twln:/title/00030004/* to the SD.
Alternatively you can use Funkeycia, 3DSeStuff, etc to download them as cia, then use ctrtool to extract the cia into "contents" = .app (the very newest versions of ctrtool decrypt them during this extraction)

How do i extract the .app file?

 

[Ryccardo]

How do i extract the .app file?

"ctrtool the-dsiware.cia --contents=pizza" or something like that (check out ctrtool's built in help)
That will create a file with "pizza" in its name (whatever you typed, of course), for a DSiware cia that's your content/app/srl/dsi/nds

 

[SilverTheGamer]

"ctrtool the-dsiware.cia --contents=pizza" or something like that (check out ctrtool's built in help)
That will create a file with "pizza" in its name (whatever you typed, of course), for a DSiware cia that's your content/app/srl/dsi/nds

The extension is a string of numbers and letters. Will it work fine if i change the extension to .app?

 

[Ryccardo]

The extension is a string of numbers and letters. Will it work fine if i change the extension to .app?

Yeah, the format is {prefix you input like "pizza"}.{content number}.{content id} - content id is the name of the .app file as it would be on 3DS (unsurprisingly, ctrtool's naming scheme is designed for 3DS software)

 

[SilverTheGamer]

Yeah, the format is {prefix you input like "pizza"}.{content number}.{content id} - content id is the name of the .app file as it would be on 3DS (unsurprisingly, ctrtool's naming scheme is designed for 3DS software)

I did it with a certain game and the end is just a string of zeros, will it still work?

--------------------- MERGED ---------------------------

I did it with a certain game and the end is just a string of zeros, will it still work?

I checked the string of text the program output, apparently it read the titleid correctly, just didn't name it accordingly

 

[Ryccardo]

I did it with a certain game and the end is just a string of zeros, will it still work?
I checked the string of text the program output, apparently it read the titleid correctly, just didn't name it accordingly

Sure, it's a content id (ie official file name when installed) which is completely unrelated to the titleid

 

[Firexploit]

Has someone successfully created a valid ticket without using a base ticket from 00030004? For example a system title ticket (00030005). My dsi didn't came with any dsi ware pre installed

 

[banjo2]

Has someone successfully created a valid ticket without using a base ticket from 00030004? For example a system title ticket (00030005). My dsi didn't came with any dsi ware pre installed

You could try the DSi System Transfer Tool, maybe?