Hacking Luma3DS - Noob-proof 3DS Custom Firmware

[Deleted member 373223]

yes, using 9.2 emunand i can reach decrypt9 and backup my secureinfo_A

also, i am working on a fan-tranlsation of decrypt9 still not approved by d0k3

 

[dkabot]

yes, using 9.2 emunand i can reach decrypt9 and backup my secureinfo_A

Oh, Decrpyt9 does that now?
It's been nearly a year since I did that, it was a bunch of stuff back then.
So long as you're sure you've got A9LH working and are up for it, go nuts. Good luck,

 

[RayFirefist]

Unused? No.
Unmodified and valid signature? Sure.

In the short while I had eShop (only thanks to YifanLu himself, though I think I killed it at some point accidentally) I just used NTR debugger to rewrite the serial in memory to be sure.

What did ya rewrote??

 

[Supster131]

Of course, though it's basically a "goodbye eShop" if you do so.
Rather than modifying SecureInfo_A, I used an unmodified USA one from that ISO site and it just did the thing.

I read a way to get the eShop working, it requires you to have 3 SD cards. You'd do this on an emuNAND, but I assume you can simply flash it to your sysNAND once you got the eShop working on your emuNAND.

 

[dkabot]

What did ya rewrote??

I have the txt that contained all my commands, but I can't remember what they mean offhand and they contain my serials.
Plus, the addresses might've changed over time with new versions.

write(0xfffffd5,tuple(map(ord, "CWXXXXXXXXX\0")),pid=0x7); write(0x0013E74C,tuple(map(ord, "CWXXXXXXXXX\0")),pid=0x22);

Where "CWXXXXXXXXX" was the serial the command I used back then... no idea if those are the right addresses now.

I read a way to get the eShop working, it requires you to have 3 SD cards. You'd do this on an emuNAND, but I assume you can simply flash it to your sysNAND once you got the eShop working on your emuNAND.

That's O3DS. N3DS comes with preloaded stuff in all regions which throws a wrench in it.
The workaround was something involving spoofing a connection from another 3DS and then not using the new one in anything but the region swapped setup with spoofed IDs... I can't remember

 

[RayFirefist]

I have the txt that contained all my commands, but I can't remember what they mean offhand and they contain my serials.
Plus, the addresses might've changed over time with new versions.

write(0xfffffd5,tuple(map(ord, "CWXXXXXXXXX\0")),pid=0x7); write(0x0013E74C,tuple(map(ord, "CWXXXXXXXXX\0")),pid=0x22);

Where "CWXXXXXXXXX" was the serial the command I used back then... no idea if those are the right addresses now.


That's O3DS. N3DS comes with preloaded stuff in all regions which throws a wrench in it.
The workaround was something involving spoofing a connection from another 3DS and then not using the new one in anything but the region swapped setup with spoofed IDs... I can't remember

On which version did you do that??

 

[Supster131]

I have the txt that contained all my commands, but I can't remember what they mean offhand and they contain my serials.
Plus, the addresses might've changed over time with new versions.

write(0xfffffd5,tuple(map(ord, "CWXXXXXXXXX\0")),pid=0x7); write(0x0013E74C,tuple(map(ord, "CWXXXXXXXXX\0")),pid=0x22);

Where "CWXXXXXXXXX" was the serial the command I used back then... no idea if those are the right addresses now.


That's O3DS. N3DS comes with preloaded stuff in all regions which throws a wrench in it.
The workaround was something involving spoofing a connection from another 3DS and then not using the new one in anything but the region swapped setup with spoofed IDs... I can't remember

Er.. If it's that complicated, then it's not really worth.

 

[dkabot]

Er.. If it's that complicated, then it's not really worth.

Hence why I just CIA on it now.

On which version did you do that??

9.2U (not sure if U matters)

 

[RayFirefist]

Hence why I just CIA on it now.


9.2U (not sure if U matters)

I may download it and use that region XD

 

[dkabot]

I may download it and use that region XD

If you don't care about eShop, then the NTR code doesn't really matter.

 

[RayFirefist]

If you don't care about eShop, then the NTR code doesn't really matter.

Just a bit, I wanna try it :3

 

[ShadowOne333]

Woa what happened here?
This is getting quite random, I just wanted to drop by and see if there was any update on the mod, but I see just some random stuff not directly related to AuReiNAND.

Please try to keep things on topic, guys.
If you want to continue conversations, that's what PMs are for.

 

[RayFirefist]

Woa what happened here?
This is getting quite random, I just wanted to drop and see if there was any update on the mod, but I see just some random stuff not directly related to AuReiNAND.

Please try to keep things on topic, guys.
If you want to continue conversations, that's what PMs are for.

Ups, sorry xP

 

[Deleted member 373223]

Ups, sorry xP

can i see those mp's too? (i am curios, i like to lurk)

 

[Supster131]

Woa what happened here?
This is getting quite random, I just wanted to drop and see if there was any update on the mod, but I see just some random stuff not directly related to AuReiNAND.

Please try to keep things on topic, guys.
If you want to continue conversations, that's what PMs are for.

Well, there isn't much to talk about >.> So much stuff has happened these past few days in terms of A9LH and AuReiNAND, that thing's have slowed down for now.

Besides helping people with issues on AuReiNAND, there isn't much to talk about.

 

[RayFirefist]

can i see those mp's too? (i am curios, i like to lurk)

I did nothing for now xP

 

[Deleted member 373223]

I did nothing for now xP

when that mp will be online...

 

[RayFirefist]

when that mp will be online...

Especially IF I'll do that :v

 

[democracy]

Of course. Why wouldn't it be? But... why do you want to overcomplicate it? What should the default be (no button presses)?

Here's a list of button codes for firm.h, if that's the part hurting your head:

#define BUTTON_A        (1 << 0)
#define BUTTON_B        (1 << 1)
#define BUTTON_SELECT   (1 << 2)
#define BUTTON_START    (1 << 3)
#define BUTTON_RIGHT    (1 << 4)
#define BUTTON_LEFT     (1 << 5)
#define BUTTON_UP       (1 << 6)
#define BUTTON_DOWN     (1 << 7)
#define BUTTON_R1       (1 << 8)
#define BUTTON_L1       (1 << 9)
#define BUTTON_X        (1 << 10)
#define BUTTON_Y        (1 << 11)

Thanks for this! I have two emumand's and don't plan on using sysnand.

I see this reinand release as more as an extra security measure I can implement in an effort to preserve an exploitable 9.0 system however it's still useful to enter system from time to time so a complex button combo is just what I'm looking for. Maybe a complicated button mod to enter sysnand will appeal more to just emumands users?

 

[democracy]

Advantages:

• You're a
• Don't necessarily need an EmuNAND on your SD card (but can have one)
• Can use multiple SDs with the same instance of system firmware

Disadvantages:

• Appears safe at the moment, but still new and who knows where things will go
• Need a 9.0-9.2 EmuNAND (though it can be on another card) or to downgrade (just do the EmuNAND instead) to run any sort of exploit stuff like non-blind Decrypt9
• As A9LH loads EmuNAND as fast as SysNAND, there's not many reasons to use it [SysNAND] unless you really just want to.

Limited to 300 titles on sysnand