Tutorial  Updated

Photo guide to installing DSiWare backups on real hardware and emulator

First, some USEFUL NOTES

Tickets are not actually required by the DSi launcher (this was unknown at the time the above procedure was written), you may skip the related steps

While still incomplete, @MarioMasta64 is working on automating this process for Windows+Python users:
http://gbatemp.net/threads/a-tool-to-make-converting-dsiware-from-3ds-to-dsi-easier.479996/

If you are using an emunand (through Hiya, for example), consider using DSi Title Manager instead; there's no reason it couldn't work on sysnand with minor changes but... it doesn't do that, yet or ever




Steal Acquire some decrypted DSiware apps. You can use Funkeycia, 3DSeStuff, etc the 3DS eShop to legally download them, rip them to cia, then use ctrtool to extract the cia into "contents" = .app (the very newest versions of ctrtool decrypt them during this extraction); alternatively you can use Godmode9 to directly copy the appropriate .app under twln:/title/00030004/* to the SD.
There's also a no-intro catalogue but no romset I know of, officer...

Backup your console's NAND, CID, and ConsoleID using well documented methods (hardmod if you have some DSiware that can be copied to SD, or fwTool+safety mod if you have an usable DSiware exploit - Team Twiizer's original sudokuhax is not suitable #clobberedkeyslots, while fourswordshax and the leaked ugopwn use minitwlpayload).
If you're using NO$GBA with a nand you didn't dump yourself, you can find the CID and the byteswapped ConsoleID by looking at the end of the dump with a hex editor.
1 NOCASHNAND.PNG
(Adding this block is also how you convert a raw backup for use with NO$GBA, just in case you didn't read the manual)

Use TwlTool to decrypt the nand.
2 nand decrypt.PNG

Mount the 1st partition of the decrypted image with OSFMount (Linux equivalent: losetup + mount; Mac equivalent, hdiutil + mount I guess?).
3 osfmount.PNG 4 osfmount.PNG

Pick (any?) ticket from the NAND, preferably from the regular DSiware category = 00030004, and decrypt it with TwlTool. This will be a base for the edited tickets we will make.
5 ticket crypto.PNG

Open the folder with our dumped title. You will find a "content" folder, possibly a "data" folder, and a .ctx file if it came from a 3DS.
Delete it, then go to the content folder.
Remove the "cmd" folder, and the 3DS-format TMD.
6 source.PNG 7 source content.PNG

Search the TMD pack for the full TitleID of the DSiware; copy the TMD to the content folder, renaming it to "title.tmd".
Open title.tmd in a hex editor.
8 tmd.PNG

Find offset 1E7; rename the .app file (better known as .srl or .nds) so that the last 2 digits are the ones written at 1E7.
Find offset 208; delete everything from there to the end of the file. (A small number of tmds are already trimmed).
Save the file.
9 tmd edit.PNG

Open the ticket we decrypted earlier in a hex editor.
Find offset 1DC and replace the next 8 bytes with the TitleID of the app we're installing;
Save the file with a name equal to the TitleID-low of the app.
10 ticket edit.PNG 11 ticket save.PNG

Use TwlTool to encrypt the ticket, and put it into the NAND.
12 ticket crypto.PNG

Copy the title's (content & data) folder to the NAND.
13 app copy.PNG

Unmount the NAND and re-encrypt it.
14 unmount.PNG 15 nand crypt.PNG

If you're using NO$GBA, you will have to re-add the footer since it will have been removed by TwlTool's NAND features.
16 nand footer.PNG

Enjoy your DSiWarez, and if you liked it, BUY THE ORIGINAL... oh wait, they closed the DSi shop
17.PNG 18.PNG
 
Last edited by Ryccardo,

PrincessLillie

(Future) VTuber
Member
Joined
Nov 28, 2013
Messages
2,921
Trophies
3
Age
21
Location
Virtual Earth
Website
lillie2523.carrd.co
XP
4,806
Country
United States

Ryccardo

Penguin accelerator
OP
Member
Joined
Feb 13, 2015
Messages
7,696
Trophies
1
Age
28
Location
Imola
XP
6,919
Country
Italy
Yes, """""backups.""""" ;)
As I said, the most beginner-friendly way is indeed backing them up from a 3DS :)

The debug version of NO$GBA already allows for RSA signature modifying to allow decrypted/homebrew apps.
Martin himself said to not trust that function too much, and I actually don't think there's only RSA on apps
The answer to the original question is mostly obvious - DSi homebrews usually run fine if loaded as gamecards, else there's sudoku and friends
 
  • Like
Reactions: CatmanFan

Ryccardo

Penguin accelerator
OP
Member
Joined
Feb 13, 2015
Messages
7,696
Trophies
1
Age
28
Location
Imola
XP
6,919
Country
Italy
I tried to test Sudokuhax on NO$GBA, but the second the exploit launched, the emulator gave me an error that won't go away until I closed all the NO$GBA windows.
Never said No$gba is 100% accurate... no DS emulator is, even without considering DSi mode... better be thankful Martin is still working at it
 
  • Like
Reactions: CatmanFan

ToneCapone-RF

Well-Known Member
Newcomer
Joined
Jun 30, 2017
Messages
65
Trophies
0
Age
51
XP
359
Country
United States
I did everything in the guild but one thing puzzles me, decrypting the .tik every time I try it just say command not found.
 

Ryccardo

Penguin accelerator
OP
Member
Joined
Feb 13, 2015
Messages
7,696
Trophies
1
Age
28
Location
Imola
XP
6,919
Country
Italy
I did everything in the guild but one thing puzzles me, decrypting the .tik every time I try it just say command not found.
You must have twltool in your PATH (the same issue is true of every program launched via the command line), practically speaking this means either leaving the terminal in the same folder as TwlTool itself (like you apparently successfully did for nand decrypting), or adding the folder with TwlTool to your PATH
 

Thunder Hawk

Firefox Master Race
Member
Joined
Jan 21, 2013
Messages
804
Trophies
1
XP
2,610
Country
United States

MarioMasta64

hi. i make batch stuff and portable shiz
Member
Joined
Dec 21, 2016
Messages
2,297
Trophies
0
Age
26
Website
github.com
XP
2,106
Country
United States
holy hell O.o sempai has noticed. (this actually gave me a reason to work on it more :D i was gonna give up but imma try more to iron out the kinks)

--------------------- MERGED ---------------------------

btw question: i edit the .app files last to digits to the one in the .tmd correct? or is it the other way around? just making sure because something is wrong and im trying to find what it is.
 

Attachments

  • screenshot-gbatemp.net-2017-08-07-18-13-12.png
    screenshot-gbatemp.net-2017-08-07-18-13-12.png
    3.8 KB · Views: 291

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Psionic Roshambo @ Psionic Roshambo: Glad he is OK and complaining is cool :) +1