Editing Modding consoles/flashcarts

'''Modding''' - Modding (sometimes referred as "homebrew-ing" or "hacking") usually exploits some flaw in the system in order to achieve things that were never intended, in most cases to allow to load games from an external device to the system or launch "homebrew" applications. Oftentimes this involves installing custom firmware (CFW) to help maintain full control over the system after being exploited. There are two types of modding:

* ''Hardmod'' ^(HM) - Exploits a flaw found in the consoles hardware. Requires you to open up your console and perform some modification to the board itself.  May involve some soldering, but isn't always the case.  A popular form of hardmodding is the installation of [[wikipedia:Modchip|modchips]] in order to bypass copy protection on disc-based consoles, or installing SD/USB readers to systems that lack them in order to load homebrew applications.  These are normally more technical and have a higher chance of bricking/damaging your console.

''In regards of modding'' - You are at risk of rendering your console unusable, aka a "brick", when attempting to mod it.  Each system is different in terms of difficulty, so use your own judgement when deciding if you want to mod it or not and to follow each step carefully.  Any form of modding will void your warranty, though this is normally only a problem for newer systems, and may be difficult to resell if there's no way to "un-mod" it.  Generally, it is <b>NOT</b> recommended to use video guides when modding, the reason being is they can become outdated and often don't follow all the steps or uses their own pre-configured "tools" for downloading which may not be the latest version.  If you do decide to use one, make sure to check the date and see if there's also a some kind of written guide to compare it with and follow to make sure it's still accurate.   

''In regards of flashcarts'' - Flashcarts can only be purchased online and there are typically no official "reseller" for them, so take caution and avoid scams.  Another thing to avoid is cheap clones which are common for EverDrives. EverDrive firmware contains DRM and will brick clone EverDrives. You should try to buy directly from KRIKzz, or from an official reseller; however between parts shortages and the difficulty of getting anything in or out of an occupied territory you may be forced to buy from a scalper or a local seller on Craigslist etc. as current shipping times from KRIKzz are measured in months. Clone EverDrives will generally require you to use an older firmware with crippled functionality. If the price seems too good to be true, then it's probably a fake. If you're buying from eBay or a local seller, look at the item photos carefully to make sure you aren't overpaying for a clone. Note that SD2SNES/FXPak is an open source design (KRIKzz is just the largest seller) and "clones" of it aren't worse than buying any other cheap hardware from China.

[http://ps-io.com/store/psio-cartridge/ PSIO] (~$112) Requires internal modification and an available parallel port.  Requires serial number and linked email account to get firmware updates and the developer has shut down third-party firmware development with legal threats.

[https://stoneagegamer.com/xstation-playstation-ode.html xStation] (~$125) Requires fine-pitch soldering and pin lifting. Supports all models through SCPH-5xxx in theory, but QSBs for PCB revisions other than PU-18 (SCPH-5xxx) and later PU-8s are hard to find.

[https://github.com/brad-lin/FreePSXBoot FreePSXBoot] - Requires a method to write raw data to a memory card, like a hacked PS2, [https://github.com/ShendoXT/memcarduino Memcarduino], PC with a DexDrive or PS3 Memory Card Adapter, or an installer disc you can run using the swap trick. Needs a backup loader it can chainload to be useful.

[https://unirom.github.io/ UniROM] Requires parallel port and cheat device or a memory card with FreePSXBoot installed. Doesn't work on NTSC-J consoles without also using the swap trick.

 

[https://orca.pet/tonyhax/ tonyhax] Requires [https://orca.pet/tonyhax/game-exploit.html an exploitable game] and a method to write data to a memory card, but can also be chainloaded by FreePSXBoot on the same memory card. Doesn't work on NTSC-J consoles.

[https://github.com/CTurt/FreeDVDBoot FreeDVDBoot] - A recently discovered exploit that takes advantage of the CD/DVD optical drive.  With it, you're able to launch homebrew and even backups without needing any kind of special hardware or external modification.  Only certain models are exploitable, however this includes all slim consoles.  

* [http://web.archive.org/web/20121219080442/http://freemcboot.info/ps2%20ohje/indexe.html Agent Under Fire] [[File:007AgentUnderFireCoverF.png|thumb|230px|Cheapest ModChip(?) Ever]]

[https://krikzz.com/our-products/cartridges/everdrive-n8-pro-72pin.html EverDrive N8 PRO] ^(FC) (~$175) The "don't ask questions just consume product" option. Takes microSD cards, supports oversized ROMs (up to 8MB each PRG & CHR), a dedicated coprocessor for running the firmware and mapper sound, an RTC and proper bus conflicts emulation. That last one means it will run pretty much every NES game known to man that isn't a pirate mapper. Massively overpriced and overkill, especially compared to its predecessors.

[https://krikzz.com/our-products/cartridges/n8-pro-fami.html EverDrive N8 PRO Fami] ^(FC) (~$175) The same product as the above, but 60-pin for Famicom and various 60-pin Famiclones.

[https://krikzz.com/our-products/legacy/edn8-72pin.html EverDrive N8] ^(FC) Sometimes appears used or as new old stock on the KRIKzz Amazon store. Compared to the N8 PRO it has longer load times for games, no fancy features like in-game menu and less compatibility in a few edge-case-of-an-edge-case situations. It will still run just about every licensed game under the sun and almost every romhack that doesn't depend on emulator bugs, so don't be afraid to get it if it's available. Also available in 60-pin.

 

Look at the [http://krikzz.com/pub/support/everdrive-n8/pro-series/mappers.png compatibility chart] to see if the games you want to play are supported.<br/>

Expansion audio is supported by both the EverDrive and the PowerPak, but a [http://www.retrofixes.com/2014/05/open-hidden-sound-channels-in-nes.html modification] to the NES is necessary to support it. The Famicom does not require this modification.

[https://krikzz.com/our-products/cartridges/fxpak-pro.html FXPAK PRO] ^(FC) (USD $240+) Has an [[FPGA]] to support most special chips, along with MSU-1 support (exceptions being SPC7110 chips, Sufami Turbo games, and the Hayazashi Nidan Morita Shougi series). Will play large ROMs such as Star Ocean and Tales of Phantasia. Firmware updates can be downloaded [https://sd2snes.de/blog/downloads here].

SD2SNES Rev. X: A hybrid of the original SD2SNES and SD2SNES Pro designs, this is the predominant lazy clone <abbr title="english must be your 2nd language, "chink shit" doesn't make grammartical sense"> </abbr> flashcart that you'll find on Aliexpress, eBay, and random "retro" stores. Same great compatibility as "genuine" (ie. built to the open-source specs by Ikari or KRIKzz) flashcarts, but may have random minor issues from earlier hardware revisions like bad MSU-1 volume balance, and don't expect any updates or help if something goes wrong.

[https://terraonion.com/en/producto/neosd-aes/ NeoSD AES] ^(FC) ($367+) The very first Neo Geo AES flash cartridge with an outrageous price tag to match. The ebay prices for in-demand Neo-Geo games make it look downright affordable though, so it's worth considering if you already have an AES and want to play more than one game on it.

[http://64drive.retroactive.be/ 64Drive] ^(FC) ($199 including CIC chip) Supports ROMs up to 256MB (2Gb) in size, includes RTC, possible future 64DD support with no need for ROM conversions. Much better option for developers than the EverDrive (when it's in stock) due to USB and WiFi support, along with a debugging button on the back. Also supports the separate UltraSave, which can dump/write saves from real carts to the 64Drive. 100% compatibility with all released games.

<strike>[http://krikzz.com/store/home/30-everdrive-64-v25.html EverDrive 64 v2.5] ^(FC) ($106 including CIC chip)</strike>  

<strike>[http://krikzz.com/store/home/28-everdrive-64-v3.html EverDrive 64 v3.0] ^(FC) ($174 including CIC chip)</strike>  

[https://krikzz.com/our-products/cartridges/ed64x5.html EverDrive 64 X5] ^(FC) ($120+ including CIC chip) Supports ROMs up to 64MB (512Mb) in size, no RTC, 99.9% compatibility (no Animal Forest due to lack of RTC). Must reset before powering off to save. Also includes support for 64DD cart conversions.

[https://krikzz.com/our-products/cartridges/ed64x7.html EverDrive 64 X7] ^(FC) ($200+ including CIC chip) Supports ROMs up to 64MB (512Mb) in size, includes RTC, 100% compatibility with all released games without special hardware (no memory card emulation for Mario no Photopie) and no need to reset before powering off to save.

[http://128bit.me/index.php?topic=26113.0 POT Tweak] ^(HM) is needed to run burned DVDs in combination with another mod. Ritek G04 mini DVDs are recommended for this purpose, as other brands can wear out the laser. Note that mini DVDs aren't made anymore and all remaining stock is in the hands of scalpers. The GameCube can read full-size DVDs if the top lid is removed/modified/replaced, but this reduces the life of the spindle motor due to the increased weight.

[https://flippydrive.com/ FlippyDrive] ^(HM) (~$50) Upcoming GameCube ODE that doesn't replace the optical drive (but can if your existing drive is busted) and has experimental support for loading games over Wi-Fi. Patches the IPL to use as a snazzy loader menu instead of piggybacking on Swiss by default.

[https://gc-loader.com/product/gc-loader-pnp/ GCLoader] ^(HM) (~$80) The only GameCube ODE. Compatible with Swiss and with GCVideo mods.

[http://www.gc-forever.com/forums/viewforum.php?f=39 Numerous game exploits] ^(SM) Most need a softmodded Wii or another homebrew capable GameCube to write the exploited save to an SD card. Homebrew and games are generally launched from a memory card to SD adapter in slot B or Serial Port 2, sometimes called an SD Gecko or SD2SP2. The SD Gecko does not have access to DMA like the DVD drive has, so many games will lag/freeze, especially when using streaming audio or during FMVs; the SD2SP2 is slightly more compatible. This can be bypassed by burning DVDs (lol) or by getting an ODE, such as a GCLoader or an (out-of-print) WASP Fusion with an adapter board.

[http://www.gc-forever.com/wiki/index.php?title=XenoGC XenoGC] ^(HM) (Quick Solder Board, ~$10) Simple drivechip, requires a burned Swiss disc to be useful unless you have genuine out-of-region games to play.

 

 

[http://www.gc-forever.com/forums/viewtopic.php?f=25&t=1375 Swiss] is a homebrew utility that can launch burned games, homebrew and games from an SD Gecko (supporting SDHC) or ODE, and can force options per game. Highly recommended and essentially mandatory for most exploits.

The Wii is probably one of the safest and easiest consoles to mod (provided you follow everything correctly). Currently, the two best guides to use are:

*[https://wii.hacks.guide/ wii.hacks.guide] - Made by the same people behind the other [https://hacks.guide/ hacks.guide] tutorials. Slightly a work-in-progress.

*[https://wii.guide/ wii.guide] - Maintained by RiiConnect24.

*[https://github.com/wiidev/usbloadergx USB Loader GX] - Useful for running Wii games off an external hard drive (some flash drives will work, but not all are compatible). It can also rip disc images to an HDD as well.

*[https://github.com/Fledge68/WiiFlow_Lite WiiFlow] - An alternative to USB Loader GX which can run games off of the SD card, and is updated more frequently. Can also run GameCube games if Nintendont is installed.

*[https://github.com/FIX94/Nintendont Nintendont] - Used to play GameCube games off a USB and even allows for official hardware to be used (provided your Wii has these ports) such as memory cards, GCN Microphone, GBA-link cable, etc.

*[https://wii.hacks.guide/bluebomb BlueBomb] ^(SM): An exploit that takes advantage of a flaw in the Wii and Wii mini's Bluetooth libraries. The payload has to be delivered by a Bluetooth-enabled computer that's running Linux, either installed directly or live-booted from a flash drive.<br />This is the only exploit that works for the Wii mini, and on the original Wii it can enable recovery from certain bricks, such as a banner brick. Outside of said brick recovery usefulness, however, using BlueBomb on the original Wii is generally not recommended as there are better and simpler exploits available that don't require uninterrupted radio transmissions from a specific host OS.

[https://wiiu.hacks.guide/ wiiu.hacks.guide] ^(SM) - The Wii U is easily hackable even on the latest firmware. Through the use of injectors, you can install Wii and Gamecube games directly to your Wii U home menu as well. Follow [https://gbatemp.net/threads/release-wiivc-injector-script-gc-wii-homebrew-support.483577/ this thread] for details on injection. ([https://gbatemp.net/threads/release-uwuvci-injectiine.486781/ alternative injector that can also inject retro games]) 

*[https://www.wiiubrew.org/wiki/WUP_Installer_GX2 WUP Installer GX2] - Installs backups to the Wii U Menu (basically as if they were installed via the eShop).

*[https://gbatemp.net/threads/loadiine-gx2.413823/ Loadiine] - A backup loader for Wii U firmware 3.0.0 - 5.5.1, and is the only way to load games from SD. As it loads games via the Mii Maker app, which doesn't use online features, it cannot play online at the moment. It only supports DLC if you bought the DLC first. It doesn't support Wii VC injection (i.e. Xenoblade and friends for Gamepad controls).

The Wii U also has a virtual [http://wiiubrew.org/wiki/WiiMode Wii Mode] (vWii) for backward compatibility which, you guessed it, is also hackable using similar exploits found in the original Wii. This means that most Wii homebrew, including the apps mentioned in the [[#Wii|Wii section]], will also function on vWii as well.

[https://wiiu.hacks.guide/#/vwii-modding vWii Modding Guide] ^(SM) - Requires CFW to be installed on your Wii U first as the process isn't the same as hacking the OG Wii. It should be noted that the vWii is a bit more delicate than the OG Wii, so it's a bit easier to "brick" the vWii if you don't know what you're messing with. For example, installing any IOS (including TED IOSes) or WADS made for the original Wii on your vWii <b>will brick it</b>.

An exploit was found early in the Switch's launch which not only made it vulnerable but [https://www.ktemkin.com/faq-fusee-gelee/ multiple NVIDIA Tegra devices] also.  Since then Nintendo has released patched versions of the Switch which are currently "unhackable" at the moment.  You can find out if it's been patched by [https://gbatemp.net/threads/switch-informations-by-serial-number-read-the-first-post-before-asking-questions.481215/ the serial number].  Be warned that Nintendo is especially obnoxious about hunting down softmodders on the Switch. Assume you <b>will</b> be console banned if you use CFW, especially if you pirate.

[https://web.archive.org/web/20200308221331/https://sx.xecuter.com/#prod-sxpro SX Pro by Team Xecuter] ^(HM) (~$60) - A dongle that launches its own custom firmware and attaches to the charging port of the Switch.  Useful for launching backups and homebrew applications. Ironically the product itself contains an anti-piracy measure that "bricks" the system if you try to reverse-engineer the dongle <ref name="SX OS DRM">https://torrentfreak.com/team-xecutor-piracy-code-has-drm-can-brick-your-nintendo-switch-180628/</ref>. That and the fact that it contains stolen code from other open-sourced projects have left Team Xecuter with a bad image in the homebrew community.  Even better is the fact that two of the people leading Team Xecuter were [https://www.justice.gov/opa/pr/two-members-notorious-videogame-piracy-group-team-xecuter-custody arrested by the U.S. Federal Government], so it may become harder to order their stuff online.

[http://web.archive.org/web/20201028024756/https://team-xecuter.com/sx-core-sx-lite-review-and-test-samples-are-underway/ Xecuter SX Core/Lite] ^(HM) ($?) - A modchip that solders onto the SoC of the Nintendo Switch, which works on Switch units that have been patched from software (RCM) exploits, including Switch Lite. Discontinued after Team Xecuter got busted.

[https://github.com/Atmosphere-NX/Atmosphere Atmosphère] ^(HM/SM) - CFW for the Switch.  Currently supports firmware up to 17.0.0, while the support for firmware 18.0.0 has been implemented but not fully completed.  [https://switch.homebrew.guide/index This guide] appears to be the easiest to follow to install CFW.

 

[https://github.com/Reisyukaku/ReiNX ReiNX] ^(HM/SM) - Another CFW for the Switch.  Again, similar install situation as mentioned before (unpatched, low firmware, etc.).  This one appears to be developing an easier way of loading backups. No longer maintained.

[https://migswitch.com/ Mig Switch] ^(FC) ($64.04) - First ever flashcart for Switch. Requires game dumps with certifications and cartridge ID, which public cartridge dumps don't have. Has no menu system and switches games by ejecting and then inserting back. Unable to run homebrews.  

[https://shop.terraonion.com/shop/product/megasd/view MegaSD] ^(FC) ($244.10) A flash cart with built-in FPGA to simulate both the Sega/Mega CD addon and the SVP for Virtua Racing. The price tag is really something to consider though.

[https://satiator.net/ Satiator] ^(HM) ($259) Works on any Saturn without invasive mods, doesn't replace the optical drive and has high compatibility. The main downside (apart from the price) is that it plugs in via the MPEG-1 decoder card slot and doesn't replicate an actual decoder card, so you won't be able to watch [[wikipedia:Video CD|VCD]]s or play the handful of Saturn games that rely on MPEG-1 FMVs.

 

[https://www.ebay.com/sch/i.html?_nkw=saroo&_sacat=0 SAROO] ^(FC) ($50-150) A Chinese-made (as in designed by a Chinese hobbyist) flashcart that enables playing backups from the cartridge slot. Emulates expansion RAM carts and supports virtual saves, bypassing the Saturn's internal save RAM. Actually a decade old, but only mass-produced by the big PCB shops in 2023. It's hard to beat the price but all the documentation is in Chinese and [https://github.com/williamdsw/saroo-compatibility-list compatibility is dependent on read timing hacks], as it emulates the entire CDB interface in an FPGA. Cost and quality vary wildly as some of the chips used are EOL and sellers on Aliexpress and eBay will use chips from scrappers without testing if they actually work. Some sellers are now offering "Elite" builds of the SAROO board made with all NOS chips at a higher price.

[http://3do-renovation.ru/USB-GDROM_Controller.htm USB-GDROM] ^(HM) (~$175-230) Uses any USB 2 media to load images from. Region Free, compatible with GDI, ISO, and CDI images. Works with all VA0 & VA1 models.

[https://terraonion.com/en/producto/terraonion-mode/ MODE] ^(HM) ($200) Works with VA0 and VA1 models, uses SATA, microSD and USB. Compatible with CDI, GDI, CCD, MDF, and bin/cue images.

[http://krikzz.com/store/home/35-turbo-everdrive-v24.html Turbo EverDrive V2] ^(FC) ($90)

 

[http://www.xbmchub.com/forums/xbox-media-center/269-%5Bvideo-guide%5D-1-softmod-xbox-part-1-a.html Game Exploit] ^(SM) (Requires MechAssault black label, Splinter Cell or 007 Agent Under Fire)

[https://consolemods.org/wiki/Xbox:ENDGAME ENDGAME] ^(SM)

[https://consolemods.org/wiki/Xbox:TSOP_Flashing TSOP Flash] ^(HM) (Requires soldering and a softmodded console)

[https://www.se7ensins.com/forums/threads/rgh-3-0-guide-phat-slim-includes-quick-tool.1832979 RGH 3.0 (Slim and Phat)] (Requires soldering and a NAND programmer)

[https://consolemods.org/wiki/Xbox_360:Drive_Flashing DVD Flashing] ^(HM) (Requires a dedicated drive flasher tool and PC with compatible SATA controller)

[https://consolemods.org/wiki/Xbox_360:RGH Reset Glitch Hack] ^(HM) (Requires soldering, a NAND programmer and a compatible glitch chip)

Don't use PRO-C2 listed there, use a version found [https://wololo.net/talk/viewtopic.php?f=17&t=41249 here] instead. The version of PRO-C2 listed on CFW4Dummies is outdated and has a bug that breaks PSN PS1 EBOOTs.

<strike>El Cheapo SD</strike> ^(FC) ($52) Supports mappers MBC1, MBC2, MBC3, and MBC5, no RTC until version 2.0 is released, accepts microSD cards, supports games up to 4MB (32Mb), has 128KB (1Mb) SRAM (big enough for LSDj). Saving must be done manually in the menu before loading a new ROM (both saving to SD and loading from SD). There are other cheaper versions with lesser ROM sizes available (for example, if you don't care about Game Boy Color enhanced/exclusive games).

 

[https://bennvenn.myshopify.com/products/mbc3000-rtc-gbc-cart-v5 MBC3000 RTC] ^(FC) ($52) Supports MBC3 with an alternate MBC3/MBC5 version available while supplies last. Supports RTC and can interface correctly with Pokemon Stadium when flashed with Gold/Silver/Crystal. Requires a [https://bennvenn.myshopify.com/products/usb-gb-c-cart-dumper-the-joey-jr Joey Jr.] to upload a game to its internal flash and has no means of selecting multiple ROMs other than a DIP switch on the MBC3/MBC5 version.

<strike>[http://krikzz.com/store/home/8-everdrive-gb.html EverDrive GB] ^(FC) ($88)</strike> No RTC, supports the use of MicroSD cards, mappers MBC1, MBC2, MBC3, MBC5, Game Genie cheats, individual ROM sizes up to 8MB (64Mb), and saves for each game. Requires returning to the menu (with a reset button on the cart) to record saves.

 

 

[https://krikzz.com/our-products/cartridges/edgbx7.html EverDrive GB X7] ^(FC) ($140+) Supports RTC and an in-game menu with savesate support.

[https://imgur.com/K5zrSyD Ace3DS Plus clone] ^(FC) (~$5-10): Generally the best Nintendo DS flashcart at the moment, these very common on AliExpress and eBay. Their compatibility isn't perfect, but they run a version of Wood and work on unmodded DSi and 3DS consoles. Be warned that there is a [https://cdn.discordapp.com/attachments/286686210225864725/921177429073092688/s-l225.png timebomb clone] that looks very similar. Use the [https://flashcard-archive.ds-homebrew.com/Ace3DS+_R4iLS/Ace3DS+_R4iLS_Wood_R4_1.62.7z Ace3DS Plus kernel]. Supports the DSi's latest firmware and MicroSDHC.

[http://www.sky3ds.com/ '''SKY3DS/SKY3DS+'''] ^(FC) (~$75): Works on all firmware (as of 11.4.0), as it emulates a real card. Only useful for backups/piracy, as homebrew will not work, although Ninjhax will work with Cubic Ninja as a ROM. Non-upgradeable. The blue-button version will support unlimited games, whereas the red-button version will only support 10 games forever (even if you switch out microSD cards), although this has been cracked. There is also an orange button version, SKY3DS+, which supports recent anti-piracy in games. Use this one where available, if going this route. Clones are available (QQ3DS which comes with a DS flash cart, r5sdhc). If playing games online, you will need a private header, which can be retrieved from any physical 3DS cart. You will be banned from Nintendo's servers otherwise.