Hacking OTP dump from a 1.0.0-0E console

[retrofan_k]

Is it possible to grab the OTP by using http://dukesrg.github.io/2xrsa.html?arm11.bin as I cannot remember whether the very first stock firmware had a browser. I managed to get a console with this firmware and wanted to check.

Cheers

 

[Deleted User]

i don't think that 1.0.0E had one, since europe seems to enjoy not having important things added... like a power cord, and a browser. but i know 1.0.0-0U did

 

[xIce101x]

I think there's an cubic ninja exploit to dump the OTP on 1.0. I know it can dump the nand. I never tried it but here's the link

https://gbatemp.net/threads/got-a-3ds-with-ver-1-0-0-0u-what-should-i-do.413870/page-2

 

[Jayro]

I think there's an cubic ninja exploit to dump the OTP on 1.0. I know it can dump the nand. I never tried it but here's the link

https://gbatemp.net/threads/got-a-3ds-with-ver-1-0-0-0u-what-should-i-do.413870/page-2

If you can dump the 1.0.0 NAND, what's stopping you from extracting the OTP.bin from the NAND dump?

 

[xIce101x]

If you can dump the 1.0.0 NAND, what's stopping you from extracting the OTP.bin from the NAND dump?

Idk I never tried dumping a 1.0 nand or extracting an OTP from a nand nump

 

[retrofan_k]

was making a thread neccesary
how about you just open the browser and check

How about you relax. I don't have the console to hand yet to check.

 

[enarky]

Is it possible to grab the OTP by using http://dukesrg.github.io/2xrsa.html?arm11.bin as I cannot remember whether the very first stock firmware had a browser. I managed to get a console with this firmware and wanted to check.

Cheers

The number behind the dash indicates the Browser version. -0 indicates it doesn't have one. The first Browser was distributed with 2.0 Firmware, according to 3dbrew.

 

[CrispyYoshi]

1.0 does not have a browser. However, if you want to get your OTP before updating, you will want to get yourself Cubic Ninja EU, download this and copy code.bin and load.bin to the root of the SD card (make sure the SD is formatted as FAT32 so the 3DS can actually read it!), scan the 1.0 QR code in-game. I believe the QR you want is the 2nd-lowest QR on this page: https://imgur.com/a/M67mE (If not, just try them all)

If you want to dump your NAND.img too (highly recommended), you should use this version of code.bin and load.bin (dump both NAND.img and OTP.bin).

Note that you will also want to dump your Xorpads, which (to my knowledge) does not have a publicly-known method to do so without updating your system. After you dump your OTP and NAND, use a cart to update to 4.x, use a DS-mode flashcart to install MSET ROP for RxTools and update the system to 9.2, then use Decrypt9 to dump your NANDFat16Xorpads and all the other Xorpads in the Decrypt9 menu.

Also note that you should not update to anything higher than 4.5, and that 4.1/4.2 are more likely to support more DS flashcarts than 4.3-4.5. Finally, keep in mind that a game card update will not give you the web browser, and this is your only (publicly-known) solution to get the xorpads from your 1.0 system.

EDIT: Special thanks to Normmatt for making the 1.0 QR dumping tools, and Plailect/d0k3 for the advice/support when I helped two other people dump with this method.

EDIT2: Actually nevermind about this being the only solution, you can dump your NAND.img with a hardmod (probably more dangerous if you don't know what you're doing), update to latest firm, downgrade NATIVE_FIRM via hardmod, downgrade to 9.2, dump xorpads, downgrade to 2.1, get the OTP, restore back to 9.2 and set up A9LH. Note that you'll still need Cubic Ninja to downgrade from 11.0.

 

[Mazamin]

If you can dump the 1.0.0 NAND, what's stopping you from extracting the OTP.bin from the NAND dump?

But the otp is not in the Nand!

 

[retrofan_k]

1.0 does not have a browser. However, if you want to get your OTP before updating, you will want to get yourself Cubic Ninja EU, download this and copy code.bin and load.bin to the root of the SD card (make sure the SD is formatted as FAT32 so the 3DS can actually read it!), scan the 1.0 QR code in-game. I believe the QR you want is the 2nd-lowest QR on this page: https://imgur.com/a/M67mE (If not, just try them all)

If you want to dump your NAND.img too (highly recommended), you should use this version of code.bin and load.bin (dump both NAND.img and OTP.bin).

Note that you will also want to dump your Xorpads, which (to my knowledge) does not have a publicly-known method to do so without updating your system. After you dump your OTP and NAND, use a cart to update to 4.x, use a DS-mode flashcart to install MSET ROP for RxTools and update the system to 9.2, then use Decrypt9 to dump your NANDFat16Xorpads and all the other Xorpads in the Decrypt9 menu.

Also note that you should not update to anything higher than 4.5, and that 4.1/4.2 are more likely to support more DS flashcarts than 4.3-4.5. Finally, keep in mind that a game card update will not give you the web browser, and this is your only (publicly-known) solution to get the xorpads from your 1.0 system.

EDIT: Special thanks to Normmatt for making the 1.0 QR dumping tools, and Plailect/d0k3 for the advice/support when I helped two other people dump with this method.

EDIT2: Actually nevermind about this being the only solution, you can dump your NAND.img with a hardmod (probably more dangerous if you don't know what you're doing), update to latest firm, downgrade NATIVE_FIRM via hardmod, downgrade to 9.2, dump xorpads, downgrade to 2.1, get the OTP, restore back to 9.2 and set up A9LH. Note that you'll still need Cubic Ninja to downgrade from 11.0.

Appreciate that thanks Yoshi. Luckily I have a retail CN cart to hand to do this.

 

[CrispyYoshi]

Appreciate that thanks Yoshi. Luckily I have a retail CN cart to hand to do this.

No problem! Actually, any cart update between 4.0.0 and 9.2 should be fine, but in any case you'll still need to run SysUpdater in RxTools Dev Mode through MSET to get to 9.2+browser. However, I think Nintendo started blocking some DS flashcarts after 4.2, so you should make sure your DS flashcart will work before actually updating. The OTP won't change from it's initial state if you update and then downgrade to a firm below 3.0 like everyone else, but I don't think you'll be able to re-downgrade your system unless you rely on a dump from a different 1.0 system.

By the way, after you get your NAND.img and NAND.Fat16.xorpad, would you mind using this tool to dump the .ncch titles from your NAND and send them to @PabloMK7? I think they could put that information to good use. (I pre-compiled the tool from Rei's pastebin and included the readme for useage)

 

[retrofan_k]

No problem! Actually, any cart update between 4.0.0 and 9.2 should be fine, but in any case you'll still need to run SysUpdater in RxTools Dev Mode through MSET to get to 9.2+browser. However, I think Nintendo started blocking some DS flashcarts after 4.2, so you should make sure your DS flashcart will work before actually updating. The OTP won't change from it's initial state if you update and then downgrade to a firm below 3.0 like everyone else, but I don't think you'll be able to re-downgrade your system unless you rely on a dump from a different 1.0 system.

By the way, after you get your NAND.img and NAND.Fat16.xorpad, would you mind using this tool to dump the .ncch titles from your NAND and send them to @PabloMK7? I think they could put that information to good use. (I pre-compiled the tool from Rei's pastebin and included the readme for useage)

Sure, once i get the console, which should be soon and get around to doing this, i'll help out no problem.

 

[mgrev]

i don't think that 1.0.0E had one, since europe seems to enjoy not having important things added... like a power cord, and a browser. but i know 1.0.0-0U did

i got a power cord with mine

 

[Nyap]

I remember getting a charger with my launch day 3ds
I don't think the browser was available until they released an update the day after

 

[solress]

was making a thread neccesary
how about you just open the browser and check

You do the exact same

 

[Nyap]

You do the exact same

op never said that he didn't actually have the 3ds yet

 

[Arubaro]

Well, you cannot open the browser if you don't have a browser

 

[Nyap]

I had no fucking clue if 1.0E had a browser
It's not like me getting my launch day 3ds is something that happened to me anytime recently

 

[solress]

I had no fucking clue if 1.0E had a browser
It's not like me getting my launch day 3ds is something that happened to me anytime recently

you spam the forums with questions that can be found on the internet too without making a post, that's why you're kind of acting like a hypocrite.

 

[InsaneNutter]

i got a power cord with mine

The 3DS XL sold in the UK didn't include a charger / power cord, the reasoning been Nintendo presumed you would be upgrading from the original 3DS so wouldn't require one...

I never got one with mine, however you might well get one now as i notice Amazon (UK) have removed the paragraph stating a charger is not included.