[TUTORIAL] How To Dump OTP.bin If You Lose It After Installing A9LH

Discussion in '3DS - Tutorials' started by Acelib, Jan 28, 2017.

  1. Acelib
    OP

    Acelib Member

    Newcomer
    25
    8
    Jan 14, 2017
    United States
    While the OTP isn't really needed once A9LH is installed, if the file is lost, than here is a guide to get it back if you really want it.

    1- Back everything on your SD Card to a folder on your PC. Then launch Hourglass9 and make a NAND backup. Then rename it to sysNAND-A9LHAX.bin as well as sysNAND-A9LHAX.bin.sha and put it somewhere on your PC.
    2- Follow these steps https://3ds.guide/9.2.0-ctrtransfer , then restore your original Health and Safety through Decrypt9. (Should be named "hs.app")
    3- Download SafeA9LHInstaller and copy all the files to the root of your SD Card, even replacing arm9loaderhax.bin.
    4- When your system boots up, press the button to uninstall Arm9LoaderHax.
    5- Then when your system boots up, follow https://3ds.guide/ and get to the point where you downgrade to 2.1. Then, download OTPHelper https://github.com/d0k3/OTPHelper/releases and extract all the files and folders to the root of your SD Card. Now, follow these steps.
    1. Go to http://dukesrg.github.io/2xrsa.html?arm11.bin on your 3ds
    2. OTPHelper will launch, then select the "Dump otp.bin (0x108)" option
    3. Go back to the main menu, then Select the "Dump otp.bin (0x100)" option
    4. Press Select on the main menu to eject your SD card
    5. Put your SD card in your computer, then copy over otp0x108.bin and otp.bin to a safe folder on your computer.
    6. Ensure that otp.bin is 256 bytes and otp0x108.bin is 264 bytes
    7. Backup otp.bin and otp0x108.bin to multiple locations (such as online file storage)
    7- Next, follow these steps.
    1. Reinsert your SD card into your 3DS then press B to return to the main menu
    2. Go to "NAND Backup & Restore"
    3. Restore SysNAND from sysNAND_A9LHAX.bin
    4. Cross your fingers
    5. Reboot!
    8- Now, format your 3DS's SD Card (MAKE SURE THE OTP AND ALL THE NAND BACKUPS ARE ON YOUR PC!!!) and copy over all of the files you backed up in Step 1 on your PC to the root of your SD Card.

    And that's it! Also, credit to Plailect for parts of Step 5 and 6.
     


  2. PokeAcer

    PokeAcer Banned

    Banned
    1,430
    1,061
    May 28, 2015
    United Kingdom
    Wales
    So basically, a copy of Plailect's Guide, and a link saying "go do this and downgrade to 2.1"?
    So... Why is this needed?
     
    Alex1234 and Acelib like this.
  3. Acelib
    OP

    Acelib Member

    Newcomer
    25
    8
    Jan 14, 2017
    United States
    Because someone in another thread asked about it and I put it here if anyone else wants to know. Whatever a mod can just delete it or something.
     
    Last edited by Acelib, Jan 28, 2017
  4. Gnarmagon

    Gnarmagon Noob <3

    Member
    467
    68
    Dec 12, 2016
    Germany
    Why would someone need to do that ?
    How did he lost A9LH ;) ?
     
  5. Acelib
    OP

    Acelib Member

    Newcomer
    25
    8
    Jan 14, 2017
    United States
    He lost his OTP file and wanted it back.
     
  6. zoogie

    zoogie simple pimp tool

    Member
    6,251
    7,917
    Nov 30, 2014
    United States
    A while back, I made a little arm9 app to dump your otp sha256 to file for fun. It could be pretty useful if safea9lhinstaller supported installing from it :P
     
    TarkinMX likes this.
  7. Gnarmagon

    Gnarmagon Noob <3

    Member
    467
    68
    Dec 12, 2016
    Germany
    It caused a lot of Bricks....(OTPless installer)
    My install was fine but later I dumped my OTP with Stoneage Tools xD
     
  8. Acelib
    OP

    Acelib Member

    Newcomer
    25
    8
    Jan 14, 2017
    United States
    You mean the thing that made the screen flash a bunch of colors and you had to power down after like 30 seconds and hope it worked?
     
  9. C0mm4nd_

    C0mm4nd_ Aspirant Wii U homebrew dev :P

    Member
    697
    337
    Oct 9, 2016
    Italy
    Why downgrade to 9.2...
    It can be loaded as A9 payload via luma/corbenik
     
  10. Acelib
    OP

    Acelib Member

    Newcomer
    25
    8
    Jan 14, 2017
    United States
    Because it detects your firmware version and doesn't let you if your on any firmware above 11.0
     
  11. C0mm4nd_

    C0mm4nd_ Aspirant Wii U homebrew dev :P

    Member
    697
    337
    Oct 9, 2016
    Italy
    With the latest version of SafeA9LHInstaller? I don't think so
     
  12. Acelib
    OP

    Acelib Member

    Newcomer
    25
    8
    Jan 14, 2017
    United States
    Last time I checked it does.
     
  13. C0mm4nd_

    C0mm4nd_ Aspirant Wii U homebrew dev :P

    Member
    697
    337
    Oct 9, 2016
    Italy
    On the code it says this:
    posY = drawString("FIRM 11.0/11.1/11.2 has been detected!", 10, posY + SPACING_Y, COLOR_RED);
    posY = drawString("Press SELECT to load 10.4 FIRM from SD", 10, posY + SPACING_Y, COLOR_WHITE);
    posY = drawString("Press any other button to load FIRM from CTRNAND", 10, posY, COLOR_RED);


    So it's possible even in 11.2
     
  14. Gnarmagon

    Gnarmagon Noob <3

    Member
    467
    68
    Dec 12, 2016
    Germany
    No I mean the Method from December where you just had to downgrade to 9.2 and it will generate from the hash thats stored (not sure but I think it's the Ram).
     
  15. ScarletDreamz

    ScarletDreamz [Debug Mode]

    Member
    2,574
    1,113
    Feb 16, 2015
    United States
    California
    or.. OR!! Just:

    1. Load the payload [Hourglass9 - Decrypt9 ] via luma.
    2. Backup sysnand.
    3. Downgrade to 2.1
    4. Get otp.
    5. Restore sysnand back up.
    6. Profit!
     
    XRaTiX and Gray_Jack like this.
  16. Acelib
    OP

    Acelib Member

    Newcomer
    25
    8
    Jan 14, 2017
    United States
    That doesn't work because Luma can't boot 2.1 FIRMs.

    — Posts automatically merged - Please don't double post! —

    Ah that one. Also TCPixel is awesome xD
     
  17. Columbo2811

    Columbo2811 GBAtemp Maniac

    Member
    1,290
    756
    Jul 19, 2015
    Where does it say to boot luma on 2.1?
     
  18. Acelib
    OP

    Acelib Member

    Newcomer
    25
    8
    Jan 14, 2017
    United States
    CTRTransfer doesn't remove A9LH so you have to boot through some sort of CFW. Luma, as well as all other CFWs, (Cakes, Rei, RX etc.), don't support 2.1 FIRM booting. Therefore, that method is currently impossible. I mean I guess you could CTRTransfer to 2.1 and then unistall though, now that I think about it.
     
    Last edited by Acelib, Jan 29, 2017
  19. Columbo2811

    Columbo2811 GBAtemp Maniac

    Member
    1,290
    756
    Jul 19, 2015
    You clearly shouldn't be writing tutorials
     
  20. Acelib
    OP

    Acelib Member

    Newcomer
    25
    8
    Jan 14, 2017
    United States
    k. same could be said to you
     
    Last edited by Acelib, Jan 29, 2017