Hacking R4i-B9S flashcart: tested and impression

[spkuja]

Oh well, that's a shame then.

Did you dump you flash after restoring it? Does it match the backup.bin?

Yup.

Both before and after are identical. The flasher goes through the motions but in the log it states there is an error writing the file.

I get this after the flash is complete:

Reading...
Checking 003F0000
Writing Chunk 003F0000
Chunks written 64 (00000040)

Restoring Complete!

But then in the log file I have this:

: writeNor: failed to read

 

[yacepi15]

I have a console with litterally fried NAND (shitty hardmod / error F800FE bluescreen) and i've received the card today. In the broken console, the screens stay in black (i put the magnet, i do the button combo while powering on), and in my working console, i can't tell if the exploit worked because it has already B9S.

I've already tried with Luma and with GM9.

I'm doing something wrong?

 

[some1ne]

Yup.

Both before and after are identical. The flasher goes through the motions but in the log it states there is an error writing the file.

I get this after the flash is complete:

Reading...
Checking 003F0000
Writing Chunk 003F0000
Chunks written 64 (00000040)

Restoring Complete!

But then in the log file I have this:

: writeNor: failed to read

If both dumps match it should be working, unless they have some anti-counterfeit system going on.
Did you try restoring the "working as a normal flashcart" dump from @pandavova ?

--------------------- MERGED ---------------------------

I have a console with litterally fried NAND (shitty hardmod / error F800FE bluescreen) and i've received the card today. In the broken console, the screens stay in black (i put the magnet, i do the button combo while powering on), and in my working console, i can't tell if the exploit worked because it has already B9S.

I'm doing something wrong?

Put godmode9 as ntrboot.firm on the bricked console and try doing the magnet combo with the flashcart.

 

[spkuja]

If both dumps match it should be working, unless they have some anti-counterfeit system going on.
Did you try restoring the "working as a normal flashcart" dump from @pandavova ?

--------------------- MERGED ---------------------------


Put godmode9 as ntrboot.firm on the bricked console and try doing the magnet combo with the flashcart.

I used the flasher from here:
https://gbatemp.net/threads/r4i-b9s-flashcart-tested-and-impression.484620/page-18#post-7630718

And the backup that @pandavova provided here:
https://gbatemp.net/threads/r4i-b9s-flashcart-tested-and-impression.484620/page-21#post-7632969

 

[some1ne]

I used the flasher from here:
https://gbatemp.net/threads/r4i-b9s-flashcart-tested-and-impression.484620/page-18#post-7630718

And the backup that @pandavova provided here:
https://gbatemp.net/threads/r4i-b9s-flashcart-tested-and-impression.484620/page-21#post-7632969

Could you please try flashing the nds.bin from this post?
https://gbatemp.net/threads/r4i-b9s-flashcart-tested-and-impression.484620/page-22#post-7633078

 

[spkuja]

Could you please try flashing the nds.bin from this post?
https://gbatemp.net/threads/r4i-b9s-flashcart-tested-and-impression.484620/page-22#post-7633078

Still the same. Though I have an idea.

@pandavova would you mind checking the code on the back of your cart, the one used to check if the cart is real on the r4i website. Does it have any match with these numbers 20130628?

 

[charlieSIGMA]

It seems that the guys from R4I-SDHC just released an official flasher to convert their B9S cart to a regular DS cart. Apparently it works the other way around too, and converts their regular DS cart to a B9S one.

 

[spkuja]

It seems that the guys from R4I-SDHC just released an official flasher to convert their B9S cart to a regular DS cart. Apparently it works the other way around too, and converts their regular DS cart to a B9S one.

You're a bit late to the party

 

[Criminal90]

It's possible to flash the r4i RTS with the new flasher?
Thanks

 

[some1ne]

@spkuja Can you try flashing this one?
https://up1.secretalgorithm.com/#sDkpSOhnk9rlwOebdgj5bA
It boots boot.firm after the magnet combo

 

[spkuja]

@spkuja Can you try flashing this one?
https://up1.secretalgorithm.com/#sDkpSOhnk9rlwOebdgj5bA
It boots boot.firm after the magnet combo

Still no luck

It's as if the software won't flash anything to the card

 

[some1ne]

Still no luck

It's as if the software won't flash anything to the card

Nvm, I was told it actually boots "b00t.firm", not "boot.firm". Try renaming the file and trying again.

 

[spkuja]

Nvm, I was told it actually boots "b00t.firm", not "boot.firm". Try renaming the file and trying again.

The thing is, it hasn't flashed anything to the card. The dump is identical to the bricked dump I made

 

[some1ne]

The thing is, it hasn't flashed anything to the card. The dump is identical to the bricked dump I made

Oh well, we got a problem with the flasher then.

 

[Spwnrpe]

Has anyone else tried it? Writing something that is (a lot of successful dumps to backup.bin has been made)

 

[AngelSL]

The thing is, it hasn't flashed anything to the card. The dump is identical to the bricked dump I made

Oh well, we got a problem with the flasher then.

Yeah, the one above had a sanity check that would fail if the NOR was garbage.

Try this.

 

[spkuja]

Yeah, the one above had a sanity check that would fail if the NOR was garbage.

Try this.

I'll give it a go now and let you know what happens

 

[Yandere-chan]

I'll give it a go now and let you know what happens

Testing aswell.

 

[spkuja]

Yeah, the one above had a sanity check that would fail if the NOR was garbage.

Try this.

It certainly seems to be doing something the other hadn't.

It's currently writing chunk 12 (I assume out of 64) and has a process bar for each one.

 

[Yandere-chan]

It certainly seems to be doing something the other hadn't.

It's currently writing chunk 12 (I assume out of 64) and has a process bar for each one.

Mine is at 7