Hacking 2DSaver (Beta) - Fix your 2DS format brick - Testers needed

[adiktus]

How would one know which OOT cart they have?

 

[gatekeeper1122]

can someone help me build the correct save for my card please pm me i would like to recover my 2DS along with the CFW if all possible

 

[Gavjbrown77]

Any chance someone can help me get my daughters 2ds up and running again. I've stuffed it up not long after she had it, months ago. It's stuck on the 3ds slider screen and I don't really understand what to do from what I've read on here. Any help would be greatly appreciated.

Gav

 

[Deleted User]

Any chance someone can help me get my daughters 2ds up and running again. I've stuffed it up not long after she had it, months ago. It's stuck on the 3ds slider screen and I don't really understand what to do from what I've read on here. Any help would be greatly appreciated.

Gav

Do you have Legend of Zelda Ocarina of Time 3D (cart)? If so, you can inject the save into the cart (using either a homebrewed 3DS that works, or a PowerSaves), and then put it in the 2DS and use a keycombo to run it.

If you have a Sky3DS(+) and a "legally" obtained Cubic Ninja cart, you can also use the QR.

 

[proflayton123]

Do you have Legend of Zelda Ocarina of Time 3D (cart)? If so, you can inject the save into the cart (using either a homebrewed 3DS that works, or a PowerSaves), and then put it in the 2DS and use a keycombo to run it.

If you have a Sky3DS(+) and a "legally" obtained Cubic Ninja cart, you can also use the QR.

Pft you mean backups


Sent from my iPhone using Tapatalk

 

[Angelo Spagnol]

Hey Guys! How`s <7.0 Firmware work going so far? I have 2 2DS in my cabinet waiting for this =)

 

[3than_H]

Is the installer file payload in the installer zip or the src zip. im not sure what is or where to put the payload.

 

[3than_H]

Also it says no oot gamecard detected

Edit:

So now i got the save in from jksm but I cant boot my 2ds to turn on the game

 

[zoogie]

For those waiting for >= 9.2 support, just use this instead
https://gbatemp.net/threads/ntrboot-is-out.480586/

I honestly expected this to release sooner, sorry about that.

 

[Nigleet]

For those waiting for >= 9.2 support, just use this instead
https://gbatemp.net/threads/ntrboot-is-out.480586/

I honestly expected this to release sooner, sorry about that.

Hey @zoogie , can you possibly give some insight on this matter? Using 2DSaver got all of these units past the initial setup which was fantastic and I thank you for. All 3 unfortunately had no previous nand backup. All stuck, with the only thing we are able to do is a 2.1.0 CTRTransfer. Any help would be appreciated.

Thanks
https://gbatemp.net/threads/stuck-o...-a9lh-weirdo-brick.460351/page-4#post-7471976

https://gbatemp.net/threads/help-cant-boot-after-9-2-0-ctrtransfer.478151/

https://gbatemp.net/questions/tryin...-ago-partially-bricked-2ds.3665/#answer-11865

 

[Shad0w136]

Hey @zoogie , can you possibly give some insight on this matter? Using 2DSaver got all of these units past the initial setup which was fantastic and I thank you for. All 3 unfortunately had no previous nand backup. All stuck, with the only thing we are able to do is a 2.1.0 CTRTransfer. Any help would be appreciated.

Thanks
https://gbatemp.net/threads/stuck-o...-a9lh-weirdo-brick.460351/page-4#post-7471976

https://gbatemp.net/threads/help-cant-boot-after-9-2-0-ctrtransfer.478151/

https://gbatemp.net/questions/tryin...-ago-partially-bricked-2ds.3665/#answer-11865

This really does suck that it happened, but I'm glad its not just me, but a few others as well ^^; That being said, I'm sure we all learned our own valuable lessons from this. (Also, I realized I didn't make a thread but a question instead (I didn't know how to actually make the thread XD)

 

[zoogie]

Ok, we've found a fix for those who use 2dsaver, but also don't have a nand backup and are experiencing problems with updating from 2.1:
Special thanks to @Shad0w for help with the movable.sed editing and @Nigleet for compiling these instructions.
This post will be linked from the OP to keep it from being any more cluttered than it already is.

Pre-requisites:
A. Use 2DSaver ( https://gbatemp.net/threads/2dsaver-beta-fix-your-2ds-format-brick-testers-needed.457828/ )
B. Install the latest setup of B9S and stop after you finish the "Installing boot9strap" page(https://3ds.guide/installing-boot9strap-(2xrsa) ).
C. Complete a 9.2.0 CTRTransfer ( https://3ds.guide/9.2.0-ctrtransfer )

ON SOURCE UNIT

1. Using another functional 2DS boot into GM9 by holding start and selecting it from the luma chain loader menu
2. Navigate to CTRNAND/private/ and copy the movable.sed
3. Paste it to the root of the SD.
4. Select it and choose "show in Hexeditor"
5. Change the last 4 values on the first line to 00 00 00 00. The text at the end should read "SEED ".
6. Save your changes.

ON TARGET UNIT

7. Insert this SD into the affected unit and boot into GM9, selecting your SD card.
8. Copy the "movable.sed" file.
9. Backout of the SD, and navigate to the CTRNAND/Private.
10. Delete the "movable.sed" file in here.
11. Paste the new "movable.sed" file.
12. Press start to reboot.
13. Go through the initial setup.
14. If you had a NNID linked to the source unit, it will show up on the affected unit. Mitigate this by formatting the system memory (Settings>Last Page>Format System Memory).
15. Update the System.

 

[DocKlokMan]

Hey @zoogie if one were to have access to their save config file, such as through GodMode9 what would I hex edit to accomplish the same task as 2DSaver? I looked in the source and see it uses a service call but if I were to directly edit the file do you know what address to change and to what value?

 

[felix.200]

@zoogie Ist there a chance for this to work on higher Firmwares? I am asking because I formated a 3ds with a broken 3D Slider. Great job by the way

 

[zoogie]

Hey @zoogie if one were to have access to their save config file, such as through GodMode9 what would I hex edit to accomplish the same task as 2DSaver? I looked in the source and see it uses a service call but if I were to directly edit the file do you know what address to change and to what value?

I'm not even going to begin to mess with that. Even accessing it with service calls has unintended consequences. See my last post.
Anyway, if you want to do so, I can't stop you. Configsav.bin is a 32KB file inside a 256KB archive. Make sure to fix the hmac with gm9 after you're done editing.
3dbrew should have enough info if you want to mess with it.
https://3dbrew.org/wiki/System_SaveData
https://3dbrew.org/wiki/Config_Savegame
I'm also wondering if you can get past the setup with just a borrowed config save from someone else. Worth checking out.

@zoogie Ist there a chance for this to work on higher Firmwares? I am asking because I formated a 3ds with a broken 3D Slider. Great job by the way

I'm working on something else right now. I currently recommend ntrboot for higher firmwares.

 

[gamesquest1]

I'm not even going to begin to mess with that. Even accessing it with service calls has unintended consequences. See my last post.
Anyway, if you want to do so, I can't stop you. Configsav.bin is a 32KB file inside a 256KB archive. Make sure to fix the hmac with gm9 after you're done editing.
3dbrew should have enough info if you want to mess with it.
https://3dbrew.org/wiki/System_SaveData
https://3dbrew.org/wiki/Config_Savegame
I'm also wondering if you can get past the setup with just a borrowed config save from someone else. Worth checking out.

I'm working on something else right now. I currently recommend ntrboot for higher firmwares.

Iirc I think at one point I used decrypt9 to import a config save to bypass the initial setup on a system that had a broken slider.......I'm guessing it probably worked as I don't remember it not working

 

[felix.200]

Iirc I think at one point I used decrypt9 to import a config save to bypass the initial setup on a system that had a broken slider.......I'm guessing it probably worked as I don't remember it not working

That would be nice. The thing is that I don't know how to run decrypt9 and the 3DS wasn't modded before I formated it.

 

[DocKlokMan]

I'm not even going to begin to mess with that. Even accessing it with service calls has unintended consequences. See my last post.
Anyway, if you want to do so, I can't stop you. Configsav.bin is a 32KB file inside a 256KB archive. Make sure to fix the hmac with gm9 after you're done editing.
3dbrew should have enough info if you want to mess with it.
https://3dbrew.org/wiki/System_SaveData
https://3dbrew.org/wiki/Config_Savegame
I'm also wondering if you can get past the setup with just a borrowed config save from someone else. Worth checking out.

I'm working on something else right now. I currently recommend ntrboot for higher firmwares.

Thanks for the tips! I found the value to alter that caused system setup to run once again, but oddly enough when I went back to restore the value, it had already reverted to how it was, but I still needed to do system setup. Restoring a backup I had resolved it. So now I'm going to make the change once again and compare the backup to the newly modified file and see what differences there are.

Edit: Yeah, this is fruitless. Modifying just about anything in the config save makes the 3DS go through setup but when it does, hundreds of changes are made. I assume the system call modifies multiple things at once and is likely the only feasible way to do it. Injecting another person's config likely would work but the config also stores the screen flicker values which can mess things up. For the 2DS stuck on a low firmware, this is no problem as you can update and then restore your original config and then resume setting it up as intended, but for 3DS's with broken 3D Sliders (which is why I was researching this) this is not a good work around. I'll see about changing 2DSaver into a FIRM payload or something similar.

EDIT2: Also, I wiped my Mii's. That's my fault for thinking that running the system setup wouldn't affect more than one thing and thinking that backing up just the config file would be enough.

EDIT3: Forgot that I used 3DSMiiModifier to change some names and so I had a backup save in JK's Save Manager, so no data lost. But I know my lesson now.

 

[ferrums]

@zoogie, anything new to the +7.0 support?
Don't want to buy a new flashcard for fixing this.

 

[AngelusKnight]

@zoogie, anything new to the +7.0 support?
Don't want to buy a new flashcard for fixing this.

I think you will have to. Zoogie is doing other projects. So you may as well take the solution of the 3ds flashcard