Difference between revisions of "SystemUpdater"

From Rare Gaming Dump
m (putting these in more appropriate places)
(Add debugger common key for decrypting TADs in NitroFS.)
 
(7 intermediate revisions by 4 users not shown)
Line 6: Line 6:
 
  | caption = Picture of v1.4a, running on No$GBA
 
  | caption = Picture of v1.4a, running on No$GBA
 
  | label1 = Cart ID  
 
  | label1 = Cart ID  
  | data1 = NTRJ
+
  | data1 = NTRJ - 0SUA
 
  | label2 = Found versions
 
  | label2 = Found versions
 
  | data2 = v1.3a, v1.4, v1.4a
 
  | data2 = v1.3a, v1.4, v1.4a
| label3 = Cart Appearance
+
  | label4 = ROM Build Date
| data3 = A white reflashable Nintendo cartridge
 
  | label4 = Cart Release Date
 
 
  | data4 = 2010-04-15 (v1.4a)
 
  | data4 = 2010-04-15 (v1.4a)
 
}}
 
}}
  
The '''SystemUpdater''' is a collection of cartridges/SRL files that allow you to update or downgrade an IS-TWL-DEBUGGER. These were mainly used for development consoles, and they do not work on retail units.
+
The '''SystemUpdater''' is a collection of TAD files that allow you to update an IS-TWL-DEBUGGER or DSi Panda. These were mainly used for development consoles, and they do not work on retail units.
  
== Features ==
+
==Features==
The features for this cartridge are very simple. The cartridge contains updates for all regions (including China and Korea since v1.4) and they will be installed when selected. When a region has been selected, all the data will be deleted from the NAND and devsigned TAD's will be installed. Unlike regular TWL carts and exploits that do not have NAND access, this one does. If done correctly, the tickets, TWLCFG0.dat, TWLCFG1.dat and the system menu, with the bundled DSi applications have been installed. [[TwlNmenu]] and [[NandFiler]] are optional.
+
The features for this cartridge are very simple. The cartridge contains updates for all regions (including China and Korea since v1.4) and they will be installed when selected. When a region has been selected, all the data will be deleted from the NAND and update-signed TAD's will be installed. Unlike regular TWL carts and exploits that do not have NAND access, this one does. If done correctly, the tickets, TWLCFG0.dat, TWLCFG1.dat and the system menu, with the bundled DSi applications have been installed. [[TwlNmenu]] and [[NandFiler]] are optional.
  
 
The cartridge can also detect if you're on a Panda or Debugger. If 16MB of memory is found, it will be listed as '''TWL CONSOLE''' (Panda, IS-TWL-CAPTURE).
 
The cartridge can also detect if you're on a Panda or Debugger. If 16MB of memory is found, it will be listed as '''TWL CONSOLE''' (Panda, IS-TWL-CAPTURE).
 
If 32MB of memory is found, it will be listed as '''IS_TWL_DEBUGGER'''.
 
If 32MB of memory is found, it will be listed as '''IS_TWL_DEBUGGER'''.
<gallery caption="SystemUpdater Images" widths="200px" heights="200px" mode=packed >
+
<gallery widths="200px" heights="200px" mode="packed" caption="SystemUpdater Images">
File:UpdaterScreenNoCash1.png|thumb|The main menu, showing a selection of regions.
+
File:UpdaterScreenNoCash1.png|The main menu, showing a selection of regions.
File:UpdaterScreenNoCash2.png|thumb|You can cancel the update by pressing B, freezing the menu, forcing you to restart.
+
File:UpdaterScreenNoCash2.png|You can cancel the update by pressing B, freezing the menu, forcing you to restart.
File:UpdaterScreenNoCash3.png|thumb|The menu asking you if you want to continue.
+
File:UpdaterScreenNoCash3.png|The menu asking you if you want to continue.
File:UpdaterScreenNoCash4.png|thumb|The menu testing if it can write to the NAND. It copies TWLCFG#.dat files afterwards.
+
File:UpdaterScreenNoCash4.png|The menu testing if it can write to the NAND. It copies TWLCFG#.dat files afterwards.
File:UpdaterScreenNoCash5.png|thumb|The updater failing to install, due to devsigned TAD files.
+
File:UpdaterScreenNoCash5.png|The updater failing to install, due to update-signed TAD files.
File:UpdaterScreenNoCash6.png|thumb|The updater completing the installation. You have to turn off the DSi yourself.
+
File:UpdaterScreenNoCash6.png|The updater completing the installation. You have to turn off the DSi yourself.
 
</gallery>
 
</gallery>
[[File:TWLCartNonWatermark.jpg|thumb|150px|left|Confirmed image of the cartridge. Same cartridge used for TWL prototypes and other development applications.]]
+
[[File:TWLCartNonWatermark.jpg|thumb|150px|left|Confirmed image of the cartridge. The same cartridge is used for TWL prototypes and other development applications.]]
== Surface ==
+
==Uniquely signed TADs==
On 09-02-2019, a user named Voodooween started DMing Trash_Bandatcoot about a specific TWL cartridge that can update to v1.4 and change regions. With no dumps being possible, Voodooween did send Trash_Bandatcoot screenshots to see the cart in action. At the time, both were not sure how the cartridge worked and how it operates.
+
The TAD files in NitroFS are not development signed<ref>[https://randommeaninglesscharacters.com/dsidev/twlsystemupdater.html Twl SystemUpdater (rmc)]</ref>. Rather than being signed with "[https://randommeaninglesscharacters.com/dsidev/man/maketad.html maketad.exe]" like most TADs, these are signed with "maketad.updater.exe" from TwlIPL. This tool uses the debugger common key, found in the ARM7 bootrom right after the dev/prod common key. TwlNmenu does not work with debugger key, so you'll need to decrypt the TADs with [https://gist.github.com/rvtr/f1069530129b7a57967e3fc4b30866b4/ this script].  
  
On 1-5-2019, after conversations with d0k3, the creator of GodMode9, another user named Normmatt said that he has 3 SRL's versions, not only for v1.4a, but also for v1.4 and v1.3a. He also stated that the cartridge works on an IS-TWL-DEBUGGER and that it does contain devsigned TAD's. Later, the SRL files were made publicly.
+
The debugger common key: <code>A2FDDDF2E423574AE7ED8657B5AB19D3</code>
  
== Available versions==
+
The signing process for the updater TADs can be found in the gigaleaks at: '''TwlIPL/trunk/build/systemMenu_tools/SystemUpdater/data/Makefile'''
With the updater comes a HTML file for instructions and troubleshooting. On the bottom of the page is a changelog listed.
+
[[File:twlsystemupdater maketad.png|center|thumb|388x388px|Twl SystemUpdater uses "maketad.updater.exe" to sign its TAD files.]]
[[File:RevisionHistory.png|thumb|500px|center]]
 
  
 +
==Available versions==
 +
With the updater comes a HTML file for instructions and troubleshooting. On the bottom of the page is a changelog<ref>[https://randommeaninglesscharacters.com/dsidev/man/twlsystemupdater.html Twl SystemUpdater README (rmc)]</ref> listed.
 +
[[File:twlsystemupdater history.png|center|thumb|464x464px|Twl SystemUpdater revision history from the TwlSDK.]]
 +
 +
==References==
 +
<references />
 +
 +
==Notes==
  
== Notes ==
 
 
*Holding SELECT and A at the same time when continuing an update skips the installation for TwlNmenu and NandFiler.
 
*Holding SELECT and A at the same time when continuing an update skips the installation for TwlNmenu and NandFiler.
 
*Instead of the version number being (eg.) v1.4E, it says v1.4E_dev, notifying you it has been updated using a SystemUpdater cartridge.
 
*Instead of the version number being (eg.) v1.4E, it says v1.4E_dev, notifying you it has been updated using a SystemUpdater cartridge.
*The dev-version cannot import or export .bin files from the system settings like a retail unit. It can only delete applications, therefore, TwlNmenu must be used.
+
*The development DSi firmware cannot import or export .bin files from the system settings like a retail unit. It can only delete applications, therefore, TwlNmenu must be used.

Latest revision as of 02:49, 26 January 2024

SystemUpdater
SystemUpdaterMenu.png
Picture of v1.4a, running on No$GBA
Cart IDNTRJ - 0SUA
Found versionsv1.3a, v1.4, v1.4a
ROM Build Date2010-04-15 (v1.4a)

The SystemUpdater is a collection of TAD files that allow you to update an IS-TWL-DEBUGGER or DSi Panda. These were mainly used for development consoles, and they do not work on retail units.

Features

The features for this cartridge are very simple. The cartridge contains updates for all regions (including China and Korea since v1.4) and they will be installed when selected. When a region has been selected, all the data will be deleted from the NAND and update-signed TAD's will be installed. Unlike regular TWL carts and exploits that do not have NAND access, this one does. If done correctly, the tickets, TWLCFG0.dat, TWLCFG1.dat and the system menu, with the bundled DSi applications have been installed. TwlNmenu and NandFiler are optional.

The cartridge can also detect if you're on a Panda or Debugger. If 16MB of memory is found, it will be listed as TWL CONSOLE (Panda, IS-TWL-CAPTURE). If 32MB of memory is found, it will be listed as IS_TWL_DEBUGGER.

Confirmed image of the cartridge. The same cartridge is used for TWL prototypes and other development applications.

Uniquely signed TADs

The TAD files in NitroFS are not development signed[1]. Rather than being signed with "maketad.exe" like most TADs, these are signed with "maketad.updater.exe" from TwlIPL. This tool uses the debugger common key, found in the ARM7 bootrom right after the dev/prod common key. TwlNmenu does not work with debugger key, so you'll need to decrypt the TADs with this script.

The debugger common key: A2FDDDF2E423574AE7ED8657B5AB19D3

The signing process for the updater TADs can be found in the gigaleaks at: TwlIPL/trunk/build/systemMenu_tools/SystemUpdater/data/Makefile

Twl SystemUpdater uses "maketad.updater.exe" to sign its TAD files.

Available versions

With the updater comes a HTML file for instructions and troubleshooting. On the bottom of the page is a changelog[2] listed.

Twl SystemUpdater revision history from the TwlSDK.

References

Notes

  • Holding SELECT and A at the same time when continuing an update skips the installation for TwlNmenu and NandFiler.
  • Instead of the version number being (eg.) v1.4E, it says v1.4E_dev, notifying you it has been updated using a SystemUpdater cartridge.
  • The development DSi firmware cannot import or export .bin files from the system settings like a retail unit. It can only delete applications, therefore, TwlNmenu must be used.