Hacking Official [Source Release] ReiNand CFW

[Zidapi]

Similar to how the O3DS can boot into an 80/96 MB memory mode for Smash/MH4U, the New 3DS can boot into a mode which gives the currently running app/game up to 174MB of RAM to play with.

Is this different to the feature that NTR/HANS has that allows new3DS users to run games with more RAM?

The pastebin seems to be legit; the SHA256 matches the first one posted on salthax.org.

And people say Team SALT never share anything...

And a new wild pastebin from a certain person starting with R appears... haha

Who is this mysterious "R" who cannot be named?

Is it Roldemort? It is Roldemort isn't it? Awwww fuck.

 

[urherenow]

That's exactly what I meant. If I remembered correctly, to update from 9.0 to 9.2, all we need is install 2 titles. So there is almost no difference between 9.0 and 9.2. I used the N3DS 9.2.0-20U package from that site to downgrade the 2 N3DS I mentioned earlier. I ended up with 9.2 for both.

Is this different to the feature that NTR/HANS has that allows new3DS users to run games with more RAM?

And people say Team SALT never share anything...

Who is this mysterious "R" who cannot be named?

Is it Roldemort? It is Roldemort isn't it? Awwww fuck.

Edit: never mind. Pointless.

 

[mathieulh]

Why dump the OTP area when you can use the kernel9 loader hack to dump the content of the SHA_HASH register (which the kernel9 loader does not clear) to attain the same result ?

 

[DjoeN]

What's the size of the firmware.bin used by reiNand?

Doing something wrong, if i boot from HBL or straight from ctrbootmanager, always balck screens :/

Got everything in place and firmware.bin (967kB) in \rei folder

 

[urherenow]

What's the size of the firmware.bin used by reiNand?

Doing something wrong, if i boot from HBL or straight from ctrbootmanager, always balck screens :/

Got everything in place and firmware.bin (967kB) in \rei folder

006559E2567DC7DF6C0F1AF17EDD9CE8

 

[DjoeN]

006559E2567DC7DF6C0F1AF17EDD9CE8

Got it fixed, was using a wrong firmware.bin found the correct on on my hdd and now it boots fine into reiNand

Thanks

 

[Nintendo4DSXL]

Got it fixed, was using a wrong firmware.bin found the correct on on my hdd and now it boots fine into reiNand

Thanks

9.5 or 10.3?

 

[DjoeN]

9.5

Waiting for an official release for 10.3.

 

[urherenow]

9.5 or 10.3?

There is no 10.3 yet unless you're Rei

Edit:

 

[SomeGamer]

This may be a stupid question, but if I have the keys (I guess everyone has them now), is there any way to boot into 10.3 EmuNAND 2 DAY?

 

[JackyD]

BTW, when using the NEW sysUpdater to downgrade, you are "generally" safe. Even if it "bricks" it SHOULD be a "soft-brick" now. Fully recoverable.
Just make sure to take a NAND backup first.

For those with "incomplete" downgrades, mostly from the original sysUpdater, you can just re-upgrade and then attempt another downgrade.

I have now downgraded 6 N3DSs fully and without issue. I recommend using themehax as your exploit, and quickly opening/closing ftbrony right before running sysUpdater.

Of course there is always some risk involved. The only potentially legit brick stories I have heard though (2) were using the original sysUp-

 

[DjoeN]

Well, my downgraded n3dsxl with old sysupdater works fine, no issues so i keep it that way

This may be a stupid question, but if I have the keys (I guess everyone has them now), is there any way to boot into 10.3 EmuNAND 2 DAY?

Not me google is a mystery for me, it always points me to the wrong pages :/

 

[RednaxelaNnamtra]

This may be a stupid question, but if I have the keys (I guess everyone has them now), is there any way to boot into 10.3 EmuNAND 2 DAY?

Its easy to load the key and add support for firmware loading, but it cant be patched without the offsets. If somebody finds the offsets, it is mostly done.
I don't know exactly how to search for them, so I'm only able to load the 10.2 firm to my sysnand, without any signature patches removed.

 

[ketal]

9.5

Waiting for an official release for 10.3.

Where did you get the 9.5 from? all the links I find are dead

 

[urherenow]

This may be a stupid question, but if I have the keys (I guess everyone has them now), is there any way to boot into 10.3 EmuNAND 2 DAY?

No. And you don't have all the keys. There's at least one that you can only get from YOUR 3DS. Just wait until the smart people release it. Then the work will be done for you.

 

[DjoeN]

Where did you get the 9.5 from? all the links I find are dead

Well since 3DNUS came out i downloaded every Firmware the day after it got released, so i have them on my harddisk

 

[tatundria]

There should be a payload file on the root of your microSD after you set up yls8's homebrew launcher CIA, you can also manually download it from the "otherapp payload" downloader on smea's github 3DS page. Open up HxD, drag the payload file into it, and do a Ctrl-F search for "boot.3dsx" then change "boot" to "menu" and make sure your Homebrew Launcher 3dsx is named that.

After I do that, everytime I boot the 3ds menuhax loads Homebrew Launcher instead of Reinand. Any chance to boot Reinand and then make the homebrew launcher cia to load the Homebrew Launcher only when it is executed from reinand?

 

[SomeGamer]

No. And you don't have all the keys. There's at least one that you can only get from YOUR 3DS. Just wait until the smart people release it. Then the work will be done for you.

But if the key is only on my 3DS, no one, except me could release it.

 

[Cap'n Josh]

After I do that, everytime I boot the 3ds menuhax loads Homebrew Launcher instead of Reinand. Any chance to boot Reinand and then make the homebrew launcher cia to load the Homebrew Launcher only when it is executed from reinand?

I've found the best way to deal with autobooting is with CTRBootManager. You can use that thread for the basic idea of how to set it up. I just set my default boot to whatever I'd like to run automatically (ReiNAND for N3DS, RxTools for O3DS), and set the timeout to 0. It takes a little bit longer at startup, but it works well. It's especially helpful if you're setting up a console for a young child. You can keep some things inaccessible unless you hold the button to open the CTRBootManager interface.

 

[tatundria]

I've found the best way to deal with autobooting is with CTRBootManager. You can use that thread for the basic idea of how to set it up. I just set my default boot to whatever I'd like to run automatically (ReiNAND for N3DS, RxTools for O3DS), and set the timeout to 0. It takes a little bit longer at startup, but it works well. It's especially helpful if you're setting up a console for a young child. You can keep some things inaccessible unless you hold the button to open the CTRBootManager interface.

That is precisely what I want to avoid. I want to autoboot reinand and then load homebrew launcher as cia. Any help please?