Difference between revisions of "SystemUpdater"

From Rare Gaming Dump
(Fixed calling encryption signing.)
 
(12 intermediate revisions by 4 users not shown)
Line 6: Line 6:
 
  | caption = Picture of v1.4a, running on No$GBA
 
  | caption = Picture of v1.4a, running on No$GBA
 
  | label1 = Cart ID  
 
  | label1 = Cart ID  
−
  | data1 = NTRJ
+
  | data1 = NTRJ - 0SUA
 
  | label2 = Found versions
 
  | label2 = Found versions
 
  | data2 = v1.3a, v1.4, v1.4a
 
  | data2 = v1.3a, v1.4, v1.4a
−
| label3 = Cart Appearance
+
  | label4 = ROM Build Date
−
| data3 = A white reflashable Nintendo cartridge
 
−
  | label4 = Cart Release Date
 
 
  | data4 = 2010-04-15 (v1.4a)
 
  | data4 = 2010-04-15 (v1.4a)
 
}}
 
}}
  
−
The '''SystemUpdater''' is a collection of cartridges/SRL files that allow you to update or downgrade an IS-TWL-DEBUGGER. These were mainly used for development consoles, and they do not work on retail units.
+
The '''SystemUpdater''' is a collection of TAD files that allow you to update an IS-TWL-DEBUGGER or DSi Panda. These were only used for development consoles, and they do not work on retail units.
  
−
== Features ==
+
==Features==
−
The features for this cartridge are very simple. The cartridge contains updates for all regions (including China and Korea since v1.4) and they will be installed when selected. When a region has been selected, all the data will be deleted from the NAND and devsigned TAD's will be installed. Unlike regular TWL carts and exploits that do not have NAND access, this one does. If done correctly, the tickets, TWLCFG0.dat, TWLCFG1.dat and the system menu, with the bundled DSi applications have been installed. [[TwlNmenu]] and [[NandFiler]] are optional.
+
The cartridge contains updates for all regions (including China and Korea since v1.4) and they will be installed when selected. When a region has been selected, all the data will be deleted from the NAND and update-signed TAD's will be installed. The stage2 bootloader will also be installed if needed. Unlike regular TWL carts and exploits that do not have NAND access, this one does. If done correctly, the tickets, TWLCFG0.dat, TWLCFG1.dat and the system menu, with the bundled DSi applications have been installed. [[TwlNmenu]] and [[NandFiler]] are optional.
  
 
The cartridge can also detect if you're on a Panda or Debugger. If 16MB of memory is found, it will be listed as '''TWL CONSOLE''' (Panda, IS-TWL-CAPTURE).
 
The cartridge can also detect if you're on a Panda or Debugger. If 16MB of memory is found, it will be listed as '''TWL CONSOLE''' (Panda, IS-TWL-CAPTURE).
 
If 32MB of memory is found, it will be listed as '''IS_TWL_DEBUGGER'''.
 
If 32MB of memory is found, it will be listed as '''IS_TWL_DEBUGGER'''.
 +
<gallery widths="200px" heights="200px" mode="packed" caption="SystemUpdater Images">
 +
File:UpdaterScreenNoCash1.png|The main menu, showing a selection of regions.
 +
File:UpdaterScreenNoCash2.png|You can cancel the update by pressing B, freezing the menu, forcing you to restart.
 +
File:UpdaterScreenNoCash3.png|The menu asking you if you want to continue.
 +
File:UpdaterScreenNoCash4.png|The menu testing if it can write to the NAND. It copies TWLCFG#.dat files afterwards.
 +
File:UpdaterScreenNoCash5.png|The updater failing to install, due to update-signed TAD files.
 +
File:UpdaterScreenNoCash6.png|The updater completing the installation. You have to turn off the DSi yourself.
 +
</gallery>
 +
[[File:TWLCartNonWatermark.jpg|thumb|150px|left|Confirmed image of the cartridge. The same cartridge is used for TWL prototypes and other development applications.]]
 +
==Uniquely signed TADs==
 +
The TAD files in NitroFS are not development encryped<ref>[https://randommeaninglesscharacters.com/dsidev/twlsystemupdater.html Twl SystemUpdater (rmc)]</ref>. Rather than being created with "[https://randommeaninglesscharacters.com/dsidev/man/maketad.html maketad.exe]" like most TADs, these are created with "maketad.updater.exe" from TwlIPL. This tool encrypts the TAD contents with the debugger common key, found in the ARM7 bootrom right after the dev/prod common key. TwlNmenu does not work with debugger key, so you'll need to decrypt the TADs with [https://github.com/rvtr/remaketad.pl/ this script].
  
−
== Surface ==
+
The debugger common key: <code>A2FDDDF2E423574AE7ED8657B5AB19D3</code>
−
On 09-02-2019, a user named Voodooween started DMing Trash_Bandatcoot about a specific TWL cartridge that can update to v1.4 and change regions. With no dumps being possible, Voodooween did send Trash_Bandatcoot screenshots to see the cart in action. At the time, both were not sure how the cartridge worked and how it operates.
 
  
−
On 1-5-2019, after conversations with d0k3, the creator of GodMode9, another user named Normmatt said that he has 3 SRL's versions, not only for v1.4a, but also for v1.4 and v1.3a. He also stated that the cartridge works on an IS-TWL-DEBUGGER and that it does contain devsigned TAD's. Later, the SRL files were made publicly.
+
The signing process for the updater TADs can be found in the gigaleaks at: '''TwlIPL/trunk/build/systemMenu_tools/SystemUpdater/data/Makefile'''  
 +
[[File:twlsystemupdater maketad.png|center|thumb|388x388px|Twl SystemUpdater uses "maketad.updater.exe" to sign its TAD files.]]
  
−
== Available versions==
+
==Available versions==
−
With the updater comes a HTML file for instructions and troubleshooting. On the bottom of the page, is a changelog listed.
+
With the updater comes a HTML file for instructions and troubleshooting. On the bottom of the page is a changelog<ref>[https://randommeaninglesscharacters.com/dsidev/man/twlsystemupdater.html Twl SystemUpdater README (rmc)]</ref> listed.
−
[[File:RevisionHistory.png|thumb|500px|center]]
+
[[File:twlsystemupdater history.png|center|thumb|464x464px|Twl SystemUpdater revision history from the TwlSDK.]]
  
−
{|style="margin: 0 auto;"
+
==References==
−
| [[File:TWLCartNonWatermark.jpg|thumb|150px|Confirmed image of the cartridge. Same cartridge used for TWL prototypes and other development applications.]]
+
<references />
−
| [[File:UpdaterScreenNoCash1.png|thumb|150px|The main menu, showing a selection of regions.]]
 
−
| [[File:UpdaterScreenNoCash2.png|thumb|150px|You can cancel the update by pressing B, freezing the menu, forcing you to restart.]]
 
−
|}
 
−
{|style="margin: 0 auto;"
 
−
|[[File:UpdaterScreenNoCash3.png|thumb|150px|The menu asking you if you want to continue.]]
 
−
| [[File:UpdaterScreenNoCash4.png|thumb|150px|The menu testing if it can write to the NAND. It copies TWLCFG#.dat files afterwards.]]
 
−
| [[File:UpdaterScreenNoCash5.png|thumb|150px|The updater failing to install, due to devsigned TAD files.]]
 
−
| [[File:UpdaterScreenNoCash6.png|thumb|150px|The updater completing the installation. You have to turn off the DSi yourself.]]
 
−
|}
 
  
−
== Notes ==
+
==Notes==
−
*Holding SELECT and A at the same time when continuing an update skips the installation for TwlNmenu and NandFiler. This was mainly for retail units, despite these carts not working on retail units without modification.
+
 
−
*Instead of the version number being (eg.) v1.4E, it says v1.4E_dev, notifying you it has been updated using a SystemUpdater cartridge.
+
*Holding SELECT and A at the same time when continuing an update skips the installation for TwlNmenu and NandFiler.
−
*The dev-version cannot import or export .bin files from the system settings like a retail unit. It can only delete applications, therefore, TwlNmenu must be used.
+
*Instead of the version number being (eg.) v1.4E, it will be appended with "_dev", notifying you it has been updated using a SystemUpdater cartridge.
−
*v1.4 were not availible in China and Korea. Around that time, Nintendo and iQue were still dealing with the goverment in order to get their games released. This means that these are the earliest K & C versions availible.
+
*The development DSi firmware cannot import or export .bin files from the system settings like a retail unit. It can only delete applications, therefore, TwlNmenu must be used.

Latest revision as of 11:38, 23 November 2024

SystemUpdater
SystemUpdaterMenu.png
Picture of v1.4a, running on No$GBA
Cart IDNTRJ - 0SUA
Found versionsv1.3a, v1.4, v1.4a
ROM Build Date2010-04-15 (v1.4a)

The SystemUpdater is a collection of TAD files that allow you to update an IS-TWL-DEBUGGER or DSi Panda. These were only used for development consoles, and they do not work on retail units.

Features

The cartridge contains updates for all regions (including China and Korea since v1.4) and they will be installed when selected. When a region has been selected, all the data will be deleted from the NAND and update-signed TAD's will be installed. The stage2 bootloader will also be installed if needed. Unlike regular TWL carts and exploits that do not have NAND access, this one does. If done correctly, the tickets, TWLCFG0.dat, TWLCFG1.dat and the system menu, with the bundled DSi applications have been installed. TwlNmenu and NandFiler are optional.

The cartridge can also detect if you're on a Panda or Debugger. If 16MB of memory is found, it will be listed as TWL CONSOLE (Panda, IS-TWL-CAPTURE). If 32MB of memory is found, it will be listed as IS_TWL_DEBUGGER.

  • SystemUpdater Images

  • The main menu, showing a selection of regions.

  • You can cancel the update by pressing B, freezing the menu, forcing you to restart.

  • The menu asking you if you want to continue.

  • The menu testing if it can write to the NAND. It copies TWLCFG#.dat files afterwards.

  • The updater failing to install, due to update-signed TAD files.

  • The updater completing the installation. You have to turn off the DSi yourself.

Confirmed image of the cartridge. The same cartridge is used for TWL prototypes and other development applications.

Uniquely signed TADs

The TAD files in NitroFS are not development encryped[1]. Rather than being created with "maketad.exe" like most TADs, these are created with "maketad.updater.exe" from TwlIPL. This tool encrypts the TAD contents with the debugger common key, found in the ARM7 bootrom right after the dev/prod common key. TwlNmenu does not work with debugger key, so you'll need to decrypt the TADs with this script.

The debugger common key: A2FDDDF2E423574AE7ED8657B5AB19D3

The signing process for the updater TADs can be found in the gigaleaks at: TwlIPL/trunk/build/systemMenu_tools/SystemUpdater/data/Makefile

Twl SystemUpdater uses "maketad.updater.exe" to sign its TAD files.

Available versions

With the updater comes a HTML file for instructions and troubleshooting. On the bottom of the page is a changelog[2] listed.

Twl SystemUpdater revision history from the TwlSDK.

References

  1. ↑ Twl SystemUpdater (rmc)
  2. ↑ Twl SystemUpdater README (rmc)

Notes

  • Holding SELECT and A at the same time when continuing an update skips the installation for TwlNmenu and NandFiler.
  • Instead of the version number being (eg.) v1.4E, it will be appended with "_dev", notifying you it has been updated using a SystemUpdater cartridge.
  • The development DSi firmware cannot import or export .bin files from the system settings like a retail unit. It can only delete applications, therefore, TwlNmenu must be used.
Retrieved from "https://wiki.raregamingdump.ca/index.php?title=SystemUpdater&oldid=5073"