Homebrew [WIP] twlnf, DSi NAND File ... thing ... testers with hardmod wanted

[Lord_Friky]

Wow, nice work dude, I will try it later since I hardmodded my DSi XL to test some things

Even, when I'm bored, I use it as a USB Flash Drive x'd

 

[JimmyZ]

The transfer tool isn't a 00030004 anyway

Oops, didn't know that, by the way I learnt the whole fake ticket tmd install procedure from your tutorial, maybe you have more to share on this matter?

 

[Ryccardo]

Oops, didn't know that, by the way I learnt the whole fake ticket tmd install procedure from your manual, maybe you have more to share on this matter?

Not really, any 00030004 you have (if the nand wasn't already screwed with) is either a legit title or something obtained from the DSi shop (on a 3DS I'm not sure of the titleid of the DS network settings tool, but it's on 3dbrew)

 

[JimmyZ]

Not really, any 00030004 you have (if the nand wasn't already screwed with) is either a legit title or something obtained from the DSi shop (on a 3DS I'm not sure of the titleid of the DS network settings tool, but it's on 3dbrew)

I don't know what it is then, and after all, "do not allow you to copy to SD" and "Could not copy. Please check SD Card." are different things. Maybe @Lyrin you should check your SD card? or, if you want and don't mind, dump the files(there's an option in the start button menu, it dumps all files so it takes a long time) and send the tickets to me to inspect.

BTW I tested other two dsiware titles injected using this and they copied to SD fine.

 

[Deleted member 424658]

What's the "corrupted save" case? is it caused by this program? if true, this could be a serious problem, and I definitely need to look into that. or is the .sav corrupted already? then why do you inject that.... If you accidentally copied a bad .sav with tmd install, you could fix it by copy a correct .sav file over using the script feature.

I don't have access to a 3DS to backup saves and stuff. Someone told me you could make a .sav filled with 00s based on like line "238 08-0B" in the DSiWare byteswapped.
If you don't have a valid save it just says it's corrupt. And for whatever magical reason, copying Petit Computer to the SD and back to the NAND actually generated a proper save file. So that's what I've been going with.

I don't know what it is then, and after all, "do not allow you to copy to SD" and "Could not copy. Please check SD Card." are different things. Maybe @Lyrin you should check your SD card? or, if you want and don't mind, dump the files(there's an option in the start button menu, it dumps all files so it takes a long time) and send the tickets to me to inspect.

BTW I tested other two dsiware titles injected using this and they copied to SD fine.

Other titles I've injected manually (Petit Computer, Four Swords, Sudoku) copy to SD fine. I'll dump the files if it'll help.

 

[JimmyZ]

I don't have access to a 3DS to backup saves and stuff. Someone told me you could make a .sav filled with 00s based on like line "238 08-0B" in the DSiWare byteswapped.
If you don't have a valid save it just says it's corrupt. And for whatever magical reason, copying Petit Computer to the SD and back to the NAND actually generated a proper save file. So that's what I've been going with.

If you really can't get one, you can reuse one from another game with the same save file size, mount it, delete all files in it, that's a not "very clean" clean .sav for you.

I also tested zero filled .sav files, sadly they don't work.

It's a relief for me though it's not a problem caused by twlnf.

"cleanest" 16K save in attachment.

--------------------- MERGED ---------------------------

I'll dump the files if it'll help.

Yes please

 

[RosalinaFan573]

Is TIA support coming soon?

 

[JimmyZ]

Is TIA support coming soon?

No, at least not by me.

 

[JimmyZ]

update: 0.3.1, I/O activity indicator.

 

[Jhynjhiruu]

I have a bit of a problem: the program tells me my Console ID is wrong and doesn't load up. I'm 100% sure the Console ID is correct. Halp mii!

 

[JimmyZ]

I have a bit of a problem: the program tells me my Console ID is wrong and doesn't load up. I'm 100% sure the Console ID is correct. Halp mii!

Screenshot or transcript.

 

[Jhynjhiruu]

Screenshot or transcript.

FAT init succeed, 50294μs
eMMC: 502784 sectors, 245.50 MB
eMMC CID: bc57ba08f030363532435d4d4e01f300
loaded console_id.txt(16)
Console ID (from file): 0820229704112139
invalid partition table
most likely Console ID is wrong
press A to exit...

 

[JimmyZ]

FAT init succeed, 50294μs
eMMC: 502784 sectors, 245.50 MB
eMMC CID: bc57ba08f030363532435d4d4e01f300
loaded console_id.txt(16)
Console ID (from file): 0820229704112139
invalid partition table
most likely Console ID is wrong
press A to exit...

That's a very strange case to me, all DSi eMMC I've seen had 491520 sectors, 240MB, yours is different, is that a dev kit or something else?

 

[Jhynjhiruu]

That's a very strange case to me, all DSi eMMC I've seen had 491520 sectors, 240MB, yours is different, is that a dev kit or something else?

AFAIK it's a retail, USA region DSi XL

 

[JimmyZ]

AFAIK it's a retail, USA region DSi XL

If you don't mind, send the first 512 bytes of your NAND dump to me to inspect.
BTW I might not be able to respond in the next 12 hours.

 

[Jhynjhiruu]

If you don't mind, send the first 512 bytes of your NAND dump to me to inspect.
BTW I might not be able to respond in the next 12 hours.

I *think* the one I just sent is the version I was using, but I have a few dumps so not 100% sure

 

[JimmyZ]

I *think* the one I just sent is the version I was using, but I have a few dumps so not 100% sure

I used the Console ID and eMMC CID you provided to decrypt the mbr, the result looks like garbage. I'm pretty sure your Console ID is wrong, are you able to decrypt the NAND using TWLTool? decrypted:

00000000  bb 95 ee 82 4f a0 a5 31  26 ee 9e b3 79 de ce 62  |....O..1&...y..b|
00000010  a3 03 bc a5 9a bf 45 aa  43 90 bd be d9 5a d3 82  |......E.C....Z..|
00000020  1e 49 5a 24 61 3c 48 6e  70 a0 34 26 df 88 a0 ee  |.IZ$a<Hnp.4&....|
00000030  42 a4 58 4a dd 24 d9 89  51 95 bb 80 ab c9 2d d5  |B.XJ.$..Q.....-.|
00000040  1a 00 84 d1 d9 52 e5 0f  f7 7b 8d c7 48 84 af 0b  |.....R...{..H...|
00000050  73 93 4d 1b 93 9a 10 5a  04 52 2e 8f 7b 19 41 a1  |s.M....Z.R..{.A.|
00000060  ec 20 dd 3d f9 2f 17 58  59 47 98 64 85 61 ba 23  |. .=./.XYG.d.a.#|
00000070  c0 6f ee 00 d5 c5 52 01  30 96 b5 c3 e3 33 03 4c  |.o....R.0....3.L|
00000080  7b e3 a4 59 d0 d8 d9 a6  4a 70 6d 5c 93 3d 74 f9  |{..Y....Jpm\.=t.|
00000090  b7 c9 cb bf 7b 66 df 81  54 af 5a 95 35 cd 80 78  |....{f..T.Z.5..x|
000000a0  e1 63 fd 68 bc bb 83 b3  ab cb 2e 63 64 ea a1 2c  |.c.h.......cd..,|
000000b0  28 22 86 cb 0a 9e a8 6b  b9 2d 1e 42 28 70 88 5f  |(".....k.-.B(p._|
000000c0  2f 2c b7 f4 54 d7 34 b5  ee 0a 85 e0 70 32 28 e4  |/,..T.4.....p2(.|
000000d0  09 15 1c 01 bb 9b 4f 9d  21 e2 db 77 a8 21 7a 94  |......O.!..w.!z.|
000000e0  33 d2 ea b9 be d7 87 35  ad 84 e3 1e 59 58 47 47  |3......5....YXGG|
000000f0  c5 30 a1 4f af 5d e5 51  4a 40 36 25 ab 03 ef 06  |.0.O.].QJ@6%....|
00000100  ea 5c 97 18 c6 bd 49 f1  6a 5b 3b f4 c0 f6 fb cc  |.\....I.j[;.....|
00000110  14 f8 7f 17 1d 4d 3c e4  d0 ed ed 36 e9 c7 cf 22  |.....M<....6..."|
00000120  cb a9 d9 70 52 71 6b 1f  6a 1a e0 9d d6 64 7c 80  |...pRqk.j....d|.|
00000130  32 d6 15 78 54 79 38 a7  b5 5a c8 59 35 6f f2 4a  |2..xTy8..Z.Y5o.J|
00000140  fd df dd 63 3f da 34 8f  cb 90 84 01 65 be 63 4c  |...c?.4.....e.cL|
00000150  f5 5f 17 dc ee 3e 20 82  07 c7 12 11 93 44 f0 5e  |._...> ......D.^|
00000160  06 9e 51 f7 e9 99 0c 01  46 11 ca c4 00 3a 4e f5  |..Q.....F....:N.|
00000170  a8 b1 8c 46 23 ba e2 f8  2a d8 38 2e f0 b2 d3 a4  |...F#...*.8.....|
00000180  25 01 4d 0b f9 0d d8 46  5e 71 5b 58 fc 39 73 38  |%.M....F^q[X.9s8|
00000190  ff d6 81 03 af cf 37 09  85 1c 6e 78 5a cf 27 19  |......7...nxZ.'.|
000001a0  89 ba 7b 67 22 13 34 0b  8f 15 b8 34 23 a4 11 f5  |..{g".4....4#...|
000001b0  10 82 35 cd e7 3d 73 00  fe 57 6a f9 0a 64 d7 90  |..5..=s..Wj..d..|
000001c0  92 bd 88 ee 9b 69 05 44  ef bd 48 92 37 c3 ac e7  |.....i.D..H.7...|
000001d0  82 41 a6 ae d3 ad 73 62  6a 25 5f c0 a7 6d 48 c9  |.A....sbj%_..mH.|
000001e0  05 df 8f df 24 20 68 c9  54 12 9b 32 43 19 7e 51  |....$ h.T..2C.~Q|
000001f0  15 a5 30 2a 16 b8 5f b8  3a dc cd 41 5b b1 65 d0  |..0*.._.:..A[.e.|
00000200

update: I'm not able to brute force your console id in the 08201~08204 range, now I suspect you gave me the wrong dump.

 

[Jhynjhiruu]

I used the Console ID and eMMC CID you provided to decrypt the mbr, the result looks like garbage. I'm pretty sure your Console ID is wrong, are you able to decrypt the NAND using TWLTool? decrypted:

00000000  bb 95 ee 82 4f a0 a5 31  26 ee 9e b3 79 de ce 62  |....O..1&...y..b|
00000010  a3 03 bc a5 9a bf 45 aa  43 90 bd be d9 5a d3 82  |......E.C....Z..|
00000020  1e 49 5a 24 61 3c 48 6e  70 a0 34 26 df 88 a0 ee  |.IZ$a<Hnp.4&....|
00000030  42 a4 58 4a dd 24 d9 89  51 95 bb 80 ab c9 2d d5  |B.XJ.$..Q.....-.|
00000040  1a 00 84 d1 d9 52 e5 0f  f7 7b 8d c7 48 84 af 0b  |.....R...{..H...|
00000050  73 93 4d 1b 93 9a 10 5a  04 52 2e 8f 7b 19 41 a1  |s.M....Z.R..{.A.|
00000060  ec 20 dd 3d f9 2f 17 58  59 47 98 64 85 61 ba 23  |. .=./.XYG.d.a.#|
00000070  c0 6f ee 00 d5 c5 52 01  30 96 b5 c3 e3 33 03 4c  |.o....R.0....3.L|
00000080  7b e3 a4 59 d0 d8 d9 a6  4a 70 6d 5c 93 3d 74 f9  |{..Y....Jpm\.=t.|
00000090  b7 c9 cb bf 7b 66 df 81  54 af 5a 95 35 cd 80 78  |....{f..T.Z.5..x|
000000a0  e1 63 fd 68 bc bb 83 b3  ab cb 2e 63 64 ea a1 2c  |.c.h.......cd..,|
000000b0  28 22 86 cb 0a 9e a8 6b  b9 2d 1e 42 28 70 88 5f  |(".....k.-.B(p._|
000000c0  2f 2c b7 f4 54 d7 34 b5  ee 0a 85 e0 70 32 28 e4  |/,..T.4.....p2(.|
000000d0  09 15 1c 01 bb 9b 4f 9d  21 e2 db 77 a8 21 7a 94  |......O.!..w.!z.|
000000e0  33 d2 ea b9 be d7 87 35  ad 84 e3 1e 59 58 47 47  |3......5....YXGG|
000000f0  c5 30 a1 4f af 5d e5 51  4a 40 36 25 ab 03 ef 06  |.0.O.].QJ@6%....|
00000100  ea 5c 97 18 c6 bd 49 f1  6a 5b 3b f4 c0 f6 fb cc  |.\....I.j[;.....|
00000110  14 f8 7f 17 1d 4d 3c e4  d0 ed ed 36 e9 c7 cf 22  |.....M<....6..."|
00000120  cb a9 d9 70 52 71 6b 1f  6a 1a e0 9d d6 64 7c 80  |...pRqk.j....d|.|
00000130  32 d6 15 78 54 79 38 a7  b5 5a c8 59 35 6f f2 4a  |2..xTy8..Z.Y5o.J|
00000140  fd df dd 63 3f da 34 8f  cb 90 84 01 65 be 63 4c  |...c?.4.....e.cL|
00000150  f5 5f 17 dc ee 3e 20 82  07 c7 12 11 93 44 f0 5e  |._...> ......D.^|
00000160  06 9e 51 f7 e9 99 0c 01  46 11 ca c4 00 3a 4e f5  |..Q.....F....:N.|
00000170  a8 b1 8c 46 23 ba e2 f8  2a d8 38 2e f0 b2 d3 a4  |...F#...*.8.....|
00000180  25 01 4d 0b f9 0d d8 46  5e 71 5b 58 fc 39 73 38  |%.M....F^q[X.9s8|
00000190  ff d6 81 03 af cf 37 09  85 1c 6e 78 5a cf 27 19  |......7...nxZ.'.|
000001a0  89 ba 7b 67 22 13 34 0b  8f 15 b8 34 23 a4 11 f5  |..{g".4....4#...|
000001b0  10 82 35 cd e7 3d 73 00  fe 57 6a f9 0a 64 d7 90  |..5..=s..Wj..d..|
000001c0  92 bd 88 ee 9b 69 05 44  ef bd 48 92 37 c3 ac e7  |.....i.D..H.7...|
000001d0  82 41 a6 ae d3 ad 73 62  6a 25 5f c0 a7 6d 48 c9  |.A....sbj%_..mH.|
000001e0  05 df 8f df 24 20 68 c9  54 12 9b 32 43 19 7e 51  |....$ h.T..2C.~Q|
000001f0  15 a5 30 2a 16 b8 5f b8  3a dc cd 41 5b b1 65 d0  |..0*.._.:..A[.e.|
00000200

update: I'm not able to brute force your console id in the 08201~08204 range, now I suspect you gave me the wrong dump.

I am 100% sure the Console ID is correct, due to the fact that I've obtained it about 10 times from this one console and gotten the same result each time.

 

[JimmyZ]

I am 100% sure the Console ID is correct, due to the fact that I've obtained it about 10 times from this one console and gotten the same result each time.

Answer the question: are you able to decrypt the image using twltool

 

[Billy Acuña]

Could you add some kind of whitelist flasher?