#52186 - olimar - Sun Aug 28, 2005 4:34 am
Last edited by olimar on Wed Aug 20, 2008 9:49 pm; edited 2 times in total
#52187 - chishm - Sun Aug 28, 2005 4:39 am
Nice work! So can you give us a run down of all the new security features you have found, such as limited start address ranges, etc. Also, I noticed on the old page it came up with an error when you flashed the iQue, is there a way to flash it?
#52191 - olimar - Sun Aug 28, 2005 5:02 am
Last edited by olimar on Wed Aug 20, 2008 9:49 pm; edited 1 time in total
#52228 - tepples - Sun Aug 28, 2005 3:40 pm
| olimar wrote: |
ARM9 allowed jump range is 2000000 -> 227FFFF.
ARM7 allowed jump range is 2000000 -> 23FDFFF, and 37F8000 -> 380EFFF. |
So the new DS security did almost exactly what I had predicted: prohibit jumping anywhere outside of internal RAM.
So how would saving work with this new setup?
_________________
-- Where is he?
-- Who?
-- You know, the human.
-- I think he moved to Tilwick.
#52230 - olimar - Sun Aug 28, 2005 3:56 pm
Last edited by olimar on Wed Aug 20, 2008 9:53 pm; edited 2 times in total
#57218 - Ackman - Fri Oct 14, 2005 11:21 am
hi
you could say me step by step how use a ique code of passme with a blue console? i can put flashme in the console
i have a blue console, passme, demo of metroid prime and G6flash
thanks
#57219 - Onori - Fri Oct 14, 2005 11:32 am
does anyone have actually tested iQue passme method with blue DS ?
does it work ?
#57222 - olimar - Fri Oct 14, 2005 11:58 am
Last edited by olimar on Wed Aug 20, 2008 9:49 pm; edited 1 time in total
#57245 - darkfader - Fri Oct 14, 2005 2:51 pm
I thought about making an automatic ROM analyzer. The problem however is how to get the patched addresses into the PassMe. The analyzer could generate the VHDL code. The VHDL can then be submitted when ordering a PassMe. The VHDL can then be synthesized and programmed to the CPLD. Marking the PassMe with gamecode before shipping.
Then, also no CRC logic is even required :)
It is most likely Nintendo will add an alignment check in next firmware which will reduce potential jump addresses.
I will get an updated international version of DS to dump/test.
#57246 - Ackman - Fri Oct 14, 2005 3:19 pm
thanks, i will try
bye
#57248 - Onori - Fri Oct 14, 2005 3:49 pm
so we can actually order a simple passme in a hope that we can program it later for the blue ds or other ds with new firmware ?
#57266 - natrium42 - Fri Oct 14, 2005 5:52 pm
| darkfader wrote: |
I thought about making an automatic ROM analyzer. The problem however is how to get the patched addresses into the PassMe. The analyzer could generate the VHDL code. The VHDL can then be submitted when ordering a PassMe. The VHDL can then be synthesized and programmed to the CPLD. Marking the PassMe with gamecode before shipping.
Then, also no CRC logic is even required :)
It is most likely Nintendo will add an alignment check in next firmware which will reduce potential jump addresses.
I will get an updated international version of DS to dump/test. |
That's exactly my idea :)
People who have working PassMe setup, could run it with different DS games.
And we can make a list of jump positions for different DS cards.
Olimar, could you modify FlashMe to recognize the new FW, please?
_________________
www.natrium42.com
#57268 - natrium42 - Fri Oct 14, 2005 5:55 pm
| Onori wrote: |
| so we can actually order a simple passme in a hope that we can program it later for the blue ds or other ds with new firmware ? |
You can already order PassMe with the new code, just specify it in the comments when ordering from me. Right now it's going to work with Metroid Prime Demo (US) DS card, but I am planning to add more cards on this weekend.
_________________
www.natrium42.com
#57272 - Onori - Fri Oct 14, 2005 6:41 pm
I don't have metroid demo, I can have it from friend but only the european version. does it work with it too ?
#57276 - Ackman - Fri Oct 14, 2005 7:04 pm
| natrium42 wrote: |
| You can already order PassMe with the new code, just specify it in the comments when ordering from me. Right now it's going to work with Metroid Prime Demo (US) DS card, but I am planning to add more cards on this weekend. |
if i order a passme with the new code, you can guarantee me that this passme works with a blue nds pal?
i have a metroid demo US and G6flash
thanks
bye
#57277 - WileEQuixote - Fri Oct 14, 2005 7:08 pm
I'll buy a PassMe programmed with the new code, and test it with my blue ds that doesn't work with my PassKey. I have access to the metroid demo, so hopefully I'll be able to create a dump of the new blue firmware.
Before I order the PassMe, does anyone know of a reason that the SRAM code wouldn't work with my M3?
#57284 - Lynx - Fri Oct 14, 2005 8:42 pm
| olimar wrote: |
Then load sram.bin into your flash cart's sram. I'm not familiar with the G6flash software, so you'll need to figure that out yourself.
|
Ok, as I've only used 2 different flash cart apps, how do you know if it's going to work? I mean, my EZFA III uses a .sav format for save games.. I tried putting the sram.bin on it, but it didn't seem to like it. Ideas?
#57294 - natrium42 - Fri Oct 14, 2005 9:08 pm
| Ackman wrote: |
| natrium42 wrote: | | You can already order PassMe with the new code, just specify it in the comments when ordering from me. Right now it's going to work with Metroid Prime Demo (US) DS card, but I am planning to add more cards on this weekend. |
if i order a passme with the new code, you can guarantee me that this passme works with a blue nds pal?
i have a metroid demo US and G6flash
thanks
bye |
Yep, I will guarantee it for you. Just specify "NEW DS FIRMWARE" or something similar in the comments when ordering.
_________________
www.natrium42.com
#57296 - natrium42 - Fri Oct 14, 2005 9:09 pm
| Onori wrote: |
| I don't have metroid demo, I can have it from friend but only the european version. does it work with it too ? |
I didn't test it, but most likely it will not work with the European version.
_________________
www.natrium42.com
#57297 - natrium42 - Fri Oct 14, 2005 9:11 pm
| Lynx wrote: |
| olimar wrote: |
Then load sram.bin into your flash cart's sram. I'm not familiar with the G6flash software, so you'll need to figure that out yourself.
|
Ok, as I've only used 2 different flash cart apps, how do you know if it's going to work? I mean, my EZFA III uses a .sav format for save games.. I tried putting the sram.bin on it, but it didn't seem to like it. Ideas? |
I used Flash2Advance 128M. It didn't want to burn the 4KB file, so I padded it to 8KB and it worked.
_________________
www.natrium42.com
#57316 - Ackman - Fri Oct 14, 2005 10:24 pm
| natrium42 wrote: |
| Yep, I will guarantee it for you. Just specify "NEW DS FIRMWARE" or something similar in the comments when ordering. |
then i will order a passme with new code ;)
one question more... only with this passme i can run homebrew, backups and emus from my g6 and blue nds?
Then load sram.bin into my flash cart's sram... no?
thanks
#57352 - chishm - Sat Oct 15, 2005 2:48 am
Another alternative that would not require a specific game is to get wifime working with the new firmware. This still doesn't help people who want a passme, but it increases the options.
_________________
http://chishm.drunkencoders.com
http://dldi.drunkencoders.com
#57355 - tepples - Sat Oct 15, 2005 4:50 am
| chishm wrote: |
| Another alternative that would not require a specific game is to get wifime working with the new firmware. This still doesn't help people who want a passme, but it increases the options. |
That would still be blockable, as Nintendo could just make new firmware that, given a data signature for each WMB stub released prior to the firmware revision, checks for the correct hash value for the header as well.
Once sgstair gets done, I'd suggest at least starting to reverse the Ni-Fi receive code in the SM64DS WMB stub, and then making something that can send to that on Ralink cards. Provided one can get it working, it would never be blockable.
_________________
-- Where is he?
-- Who?
-- You know, the human.
-- I think he moved to Tilwick.
#57373 - Ackman - Sat Oct 15, 2005 11:44 am
| Lynx wrote: |
| olimar wrote: |
Then load sram.bin into your flash cart's sram. I'm not familiar with the G6flash software, so you'll need to figure that out yourself.
|
Ok, as I've only used 2 different flash cart apps, how do you know if it's going to work? I mean, my EZFA III uses a .sav format for save games.. I tried putting the sram.bin on it, but it didn't seem to like it. Ideas? |
i need know how put the sram.bin in my g6flash.... anyone can help me?
thanks
#57395 - olimar - Sat Oct 15, 2005 3:27 pm
Last edited by olimar on Wed Aug 20, 2008 9:53 pm; edited 1 time in total
#57456 - Ackman - Sun Oct 16, 2005 12:47 am
| olimar wrote: |
| Save the sram of your cart. Whatever format that's in, is what you need to make sram.bin look like. |
sorry, but I am a little inexperienced in this subject, you could say to me like doing it?
thanks
#57970 - Lynx - Wed Oct 19, 2005 6:10 pm
Yeah, I also had to pad the file for it to work.. Didn't try 8k, but 32k worked.
#58291 - Cojones - Sat Oct 22, 2005 10:47 am
How to handle this sram.bin stuff with supercard and are you sure, that the blue ds(german) is going to work with your new passme??
cojones
#58325 - natrium42 - Sat Oct 22, 2005 6:11 pm
| Cojones wrote: |
How to handle this sram.bin stuff with supercard and are you sure, that the blue ds(german) is going to work with your new passme??
|
What games do you have?
I am trying to get more games supported: http://forum.gbadev.org/viewtopic.php?t=7248
No idea if SC has usable SRAM, since I haven't used SC....
_________________
www.natrium42.com
#58355 - Cojones - Sat Oct 22, 2005 10:08 pm
game doesnt matter, i can try a working game. supercard is just some kind of compact flash/sd card adapter, dont know anything about sram =)
thx =)
#58412 - sneef - Sun Oct 23, 2005 11:05 am
supercard uses hynix SDRAM as its memory, with no battery-backed sram.. so i doubt it will work.
hope that clears something up.
#58414 - Cojones - Sun Oct 23, 2005 1:03 pm
Hmm so what kind of flashcards are working with sram?! Anybody knows?!
#58427 - tepples - Sun Oct 23, 2005 3:43 pm
Most of the NOR cards should work.
_________________
-- Where is he?
-- Who?
-- You know, the human.
-- I think he moved to Tilwick.
#58474 - Cojones - Sun Oct 23, 2005 10:17 pm
Stupid question:
NOR means...? =)
#58482 - tepples - Sun Oct 23, 2005 11:22 pm
In the context of GBA and Nintendo DS homebrew, "NOR" usually means anything you don't slide a CF or SD card into. NOR-based cards include the F2A, EZ-Flash, EZFA, XG, NeoFlash, etc. RAM-based cards include GBA Movie Player, SuperCard, and M3.
More detail at the PH Wiki articles NAND and NOR and Block device.
_________________
-- Where is he?
-- Who?
-- You know, the human.
-- I think he moved to Tilwick.
#58708 - Ackman - Tue Oct 25, 2005 2:50 pm
I have received my passme for new firmware, I have been able to put flashme in my nds blue console correctly, thanks natrium42
bye
#58710 - natrium42 - Tue Oct 25, 2005 3:21 pm
| Ackman wrote: |
I have received my passme for new firmware, I have been able to put flashme in my nds blue console correctly, thanks natrium42
|
Glad to hear! What kind of GBA flashcart did you end up using?
_________________
www.natrium42.com
#58730 - Ackman - Tue Oct 25, 2005 4:55 pm
| natrium42 wrote: |
| Ackman wrote: | I have received my passme for new firmware, I have been able to put flashme in my nds blue console correctly, thanks natrium42
|
Glad to hear! What kind of GBA flashcart did you end up using? |
G6 ;)
thanks
#58733 - Endy - Tue Oct 25, 2005 5:05 pm
I've heard that the timing of the SRAM jump can be rather tricky... but (and note, I don't remember -any- ARM assembly anymore) would it be possible in some way to add a delay loop to allow swapping out cards?
Basically, since I only have a GBAMP (no SRAM) and a SuperCard (volatile SRAM), I was thinking about being able to copy into the SRAM of a GBA game and switching carts to run flashme from the SC or GBAMP...
I just can't afford Yet Another Device :)
#58745 - natrium42 - Tue Oct 25, 2005 6:59 pm
| Endy wrote: |
I've heard that the timing of the SRAM jump can be rather tricky... but (and note, I don't remember -any- ARM assembly anymore) would it be possible in some way to add a delay loop to allow swapping out cards?
Basically, since I only have a GBAMP (no SRAM) and a SuperCard (volatile SRAM), I was thinking about being able to copy into the SRAM of a GBA game and switching carts to run flashme from the SC or GBAMP... |
Yeah, I had that idea too. It would involve few cart swappings between GBAMP (or similar) and a GBA game. Only thing needed is wait-for-key-press in the SRAM code.
_________________
www.natrium42.com
#58754 - thoop - Tue Oct 25, 2005 8:36 pm
I think it would be a very good way, because most ds owners have a gba game and then could use their gbamp/m3/sc instead of an expensive flash cart.
#58859 - jojjy - Wed Oct 26, 2005 9:08 pm
I asked this in a different thread already, but perhaps this is the more appropriate thread...
So what of the Nintendogs packed Teal DS? Does it have the same protection scheme as the red DS? This would be helpful to know for people who want to get one...
#58869 - pepsiman - Wed Oct 26, 2005 10:33 pm
| jojjy wrote: |
| So what of the Nintendogs packed Teal DS? Does it have the same protection scheme as the red DS? |
Yes.
#59610 - Modus Pwnens - Wed Nov 02, 2005 9:57 pm
Is there any progress on a PassMe for the new firmware that doesn't require code placed in the SRAM? I just got a SuperCard SD and a 1 gig card three days ago, and today I received a refurbished DS that it no longer works on! I don't want all that to be wasted. Please help. :(
#59641 - socket - Wed Nov 02, 2005 11:27 pm
Well, there's a method for the SC that supposedly has been successfully tested: http://www.scdev.org/forum/viewtopic.php?t=1241