Loopy figured out how to read the firmware from the DS.

Here is a program to dump it in blocks of 32KB.
http://natrium42.com/blog/