Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ace3DS X firm size limit for ntrboot part #139

Open
danny8376 opened this issue May 26, 2023 · 1 comment
Open

Ace3DS X firm size limit for ntrboot part #139

danny8376 opened this issue May 26, 2023 · 1 comment

Comments

@danny8376
Copy link

danny8376 commented May 26, 2023

Not sure if real/original Ace3DS X do have this issue.

I just get this Ace3DS X from here, https://www.aliexpress.com/item/1005005333119692.html
After some tinkering, find out that this card have normal 16mbit flash for ds mode, but only 8mbit flash for ntrboot mode.
(I do take it apart and read/write the 8mbit flash with flasher, so I'm sure it's really 8mbit one.)
However, if i dump flash with ntrboot_flasher, they both appear to be 16mbit.
The ntrboot one is looped twice with that 8mbit flash's content.
After tested, if the injected firm is bigger than 0x100000 - 0xAE00 bytes, it'll start overwriting from the begin of the 8mbit flash and corrupt the real firmware section and brick it.

I'm not sure if there's a good way to check this apart from crudely comparing hig-8mbit and low-8mbit of the flash (maybe just partially?)

Here's the ntrboot.log:

[ERROR]: Ace3DSPlus: tryBlowfishKey: init key1 (key = 0) failed: 11
[INFO]: Ace3DSPlus version: 22330000
[INFO]: Ace3DSPlus: spiRdid: FFFFFF
[INFO]: Ace3DSPlus: cartSdInit: success
[INFO]: Ace3DSPlus: spiRdid: 138020
[INFO]: Ace3DSPlus: spiRdid: 1440C8
[INFO]: Ace3DSPlus RDID: 1440C8

and the dumped flash:
Ace3DSPlus-X-ntrboot.zip

@reminon
Copy link

reminon commented Jul 26, 2024

Support for the second flash size would need to be added. The mirrored dumping is due to it trying to dump 16Mbit from the 8Mbit flash. Currently it has no way of knowing the second flash is 8Mbit

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants