Hacking [GUIDE][PLEASE FORGIVE] How to Autoboot EmuNAND on FW 9.0.0-11.2.0 (without A9LH)

  • Thread starter Deleted User
  • Start date
  • Views 8,040
  • Replies 49
  • Likes 8
D

Deleted User

Guest
OP
I KNOW THAT THIS IS SEVERELY OUTDATED BUT IT NEEDS TO BE DONE TO GIVE AN OPTION TO THOSE WHO DO NOT WANT TO INSTALL A9LH! THIS HAS NOT BEEN TESTED YET BECAUSE I ONLY OWN A A9LH N3DS!
WHENEVER YOU MOD A 3DS THERE IS ALWAYS A POSSIBILITY FOR A BRICK, SO I AM NOT RESPONSIBLE. UPON PARTICIPATING IN THE ACTIONS DESCRIBED BELOW, I AM NOT RESPONSIBLE FOR ANY DAMAGE DONE TO YOUR SYSTEM!
THOSE WITH A HARDMOD TEST FIRST JUST IN CASE!​
Edit: Added some steps to make it actually work! Still not complete though.
Today, yellows8 released the FW 11.1.0 and 11.2.0 compatible version of homemenuhax! This means that in cooperation of the recent release of safehax and fasthax we can autoboot emuNAND straight off of stock FW!
Here is how:
Edit v2: Changed CtrBootManager again to include the homemenu, restart, and reboot options because otherwise it breaks CtrBootManager. (Thanks @annson24)
  1. Download CtrBootLoader
  2. Download Luma3DS
  3. Download TinyFormat
  4. Download ctr-httpwn
  5. Download safehax
  6. Download fasthax
  7. Download safehax+fasthax
  8. Download Hourglass9
  9. Download Emunand9 (i know, outdated but for simplistic purposes)
  10. Download menuhax
  11. Download the homebrew starter kit
  12. Download the .m4a file for your region
    EUR N3DS
    USA N3DS
    JPN N3DS
    KOR N3DS (9.6.0 and up)
    EUR O3DS
    USA O3DS
    JPN O3DS
    KOR O3DS (9.6.0 and up)
  13. Go here and download the otherapp payload for your FW version and region
  14. Rename the downloaded otherapp to otherapp.bin
  15. Place the otherapp.bin to the root of the SD card along side the .m4a file for your region
  16. Copy the contents of the starter kit to the root of the SD card. You should have a boot.3dsx and a 3ds folder on your SD card now
  17. Copy the contents of the safehax.zip to the root of the SD card. You should be prompted to merge the 3ds folder. Say yes.
  18. Copy the fasthax.3dsx to the 3ds folder on the root of the SD card.
  19. Copy the Hourglass9.bin to the root of your SD card and rename it to arm9.bin
  20. Put your SD card into your 3ds and turn it on.
  21. Go into the Sound application and wait for the SD card files to load
  22. Click on the one with nedwill in the title
  23. You should enter the homebrew launcher. If you didn't make sure the .m4a is the one for your region, you are on fw 9.0-11.2 (9.6-11.2 for Korea) , and the .m4a is for your 3ds version
  24. Scroll down to fasthax and launch it.
  25. If the kernel exploit does not succeed, you need to repeat steps 16-20 until it works.
  26. If it succeeds, then you need to launch safehax (even though it was patched out put a cartridge in your system. it doesn't hurt and do it just to be safe)
  27. If it succeeds, you should enter Hourglass9 (celebrate a little, it means you have access to ARM9)
  28. From the menu of Hourglass9, go to "SysNAND Backup/Restore..."
  29. Then "SysNAND Backup"
  30. Then press A when it says NANDmin.bin
  31. Let it dump your NAND, we are doing this just on the offchance something goes wrong :(
  32. Once it is done, press select to eject your SD card, then put your SD card in the computer
  33. Move the NANDmin.bin file from the files9 directory to multiple safe locations (online storage, local storage, a flashdrive, whatever you want really)
  34. Delete the arm9.bin file from the root of the SD card
  35. Copy the EmuNAND9.bin file from the EmuNAND9.zip to the root of your SD card and rename it arm9.bin
  36. AT THIS POINT, IF YOU DO NOT BACKUP ALL OF YOUR SD CARD CONTENTS, YOU WILL LOSE THE DATA
  37. Put your SD card back in your 3ds and repeat steps 18-23
  38. You should now enter EmuNAND9
  39. AGAIN, IF YOU HAVEN'T BACKED UP YOUR FILES, PRESS SELECT, PUT THE SD CARD IN THE COMPUTER, AND DO IT NOW
  40. Now that you have backed up your files, press "Complete EmuNAND Setup"
  41. Not finding starter.bin is fine, do not worry about it
  42. If you want to use a different SD card with your emuNAND, switch to it now as the SD card in the system will be formatted and have emuNAND put on it
  43. Press Down, Up, Left, Right, and A in that order
  44. Wait as it copies your system NAND to your emuNAND
  45. Once it is finished, press select to eject your SD card and copy all of the files back onto it.
  46. Copy the tinformat.3dsx from the TinyFormat.zip file to the 3ds file on your SD card
  47. Put the SD card back into the 3DS and run Soundhax again
  48. Run TinyFormat, this unlinks your SysNAND from the emuNAND so you don't get problems
  49. Once you reload your sysNAND follow through with the setup without linking an NNID
  50. Go to the sound application and launch soundhax
  51. Eject your SD card and put it into the computer
  52. Copy the contents of the ctr-httpwn.zip to the SD card
  53. Rename the boot.3dsx to bhbt.3dsx
  54. Copy the contents from the CtrBootManager.zip to the root of the SD card
  55. Copy the arm9loaderhax.bin from the Luma3ds.7z to the root of the SD card (DO NOT RENAME IT! IT CAUSES PROBLEMS! Thanks @annson24)
  56. Copy the safehax.3dsx from the safehax+fasthax.zip to the root of the SD card
  57. Put the SD card back into the 3ds and press Start to restart.
  58. Launch soundhax
  59. Scroll down to Homebrew Menu (not sure what it is called exactly) but choose the one that has bhbt.3dsx and select it
  60. Launch ctr-httpwn and let it do its thing
  61. From there launch menuhax manager v3.2
  62. Install it and do not configure it if you want true autoboot.
  63. Restart your 3ds and test menuhax
  64. If it works do nothing and let it load safehax.3dsx off of your SD card. If it fails press start and it should retry (not sure)
  65. Profit?!?!
Where I am it is very late so please help those who have questions as I am not able to at this time. Like I stated above, I cannot test this because I am running Luma3ds a9lh so I cannot test. The thing I am most worried about is that the arm9loaderhax.bin is not compatible with the safehax edition. The rest should be fairly safe, but I will not be held responsible if anything bad happens due to something in this guide. Please wait for a generous hardmod user to test this and post the results. @Sketchy1 you might be able to help ;).

Will post credits tomorrow. Again, very late here.​
 

Attachments

  • safehax-fasthax[cb6a1bc].zip
    279.6 KB · Views: 353
  • CtrBootManager-1.9.zip
    173.9 KB · Views: 339
Last edited by ,
  • Like
Reactions: Deleted member 359653, nccom, DrkBeam and 5 others
heam021

heam021

New Member
Newbie
Level 1
Joined
Jan 10, 2017
Messages
1
Trophies
0
Age
32
XP
51
Country
Spain
hello i try tu write english its difficult but i try i have problem i week a go i started the tutorial but i dont install fbi i try more forms to instal but i cant my questtion is what its the form for start tutorial one more time because in hombrew i cant open safehax
 
x65943

x65943

i can be your sega dreamcast or sega nightmarecast
Supervisor
GBAtemp Patron
Level 31
Joined
Jun 23, 2014
Messages
6,230
Trophies
3
Location
ΗΠΑ
XP
26,334
Country
United States
heam021 said:
hello i try tu write english its difficult but i try i have problem i week a go i started the tutorial but i dont install fbi i try more forms to instal but i cant my questtion is what its the form for start tutorial one more time because in hombrew i cant open safehax
Click to expand...
If you want a9lh go here 3ds.guide

Otherwise, please restate your issue with injecting fbi. Are you using sysnand + emunand with menuhax?
 
annson24

annson24

The Patient One
Member
Level 9
Joined
May 5, 2016
Messages
1,191
Trophies
0
Age
32
XP
1,843
Country
Philippines
menuhax doesn't autoboot on firmwares >=v11.1. You'll have to scroll to face raiders to execute menuhax. Also, reading back at your guide here are things I saw;

blujay said:
43. Once it is finished, press select to eject your SD card and copy all of the files back onto it.
Click to expand...

After this step, before anything else, you should run tinyformat first to unlink sysNAND with emuNAND.

blujay said:
46. Copy the arm9loaderhax.bin to the root of the SD card and rename it arm9.bin
Click to expand...

This will break Luma3DS. You won't be able to run GBA/DSiWare games, or certain games that need more RAM on the device (such as Super Smash Bros). I suggest to retain its name as arm9loaderhax.bin since safehax can also load it.

Lastly, I looked at your modified boot.cfg of the ctrbootmanager.

This is your code:
Code: 
// Boot menu configuration
boot_config =
{
    // Default timeout in seconds
    // If timeout = -1, disable autoboot
    timeout = 3;

    // Some devices (n3ds?) seems to have
    // some timing problems when using timeout=0 (autoboot).
    // You may increase this value to improve boot success rate.
    // Default delay (8) should be good for o3ds, 2 seems good for n3ds
    autobootfix = 8;

    // if timeout = 0 (autoboot),
    // hold this key to enter the menu
    // keycode list : https://goo.gl/4XLDIL
    recovery = 2; // SELECT

    // Default boot entry
    default = 0;

    // Boot menu entries (11 max)
    entries =
    (
        {
            title = "Luma3ds";
            path = "/safehax.3dsx";
            offset = "0x12000";
        },
        {
            title  = "HomeBrewMenu";
            path = "/bhbt.3dsx";
        },
        {
            title  = "HomeMenu";
            path = "homemenu"; // magic path for homemenu, do not change
        },
        {
            title  = "Reboot";
            path = "reboot"; // magic path for reboot, do not change
        },
        {
            title  = "Shutdown";
            path = "shutdown"; // magic path for poweroff, do not change
        }
    );

    // RGB colors
    theme =
    {
        bgTop1 = "4a0031";
        bgTop2 = "6f0149";
        bgBottom = "6f0149";
        highlight = "dcdcdc";
        borders = "ffffff";
        font1 = "ffffff";
        font2 = "000000"; // selection
        bgImgTop = "/yourimage.bin"; // 400x240 pixels
        bgImgBot = "/yourimage2.bin"; // 320x240 pixels
    };
};

You should edit it to this:
Code: 
// Boot menu configuration
boot_config =
{
    // Default timeout in seconds
    // If timeout = -1, disable autoboot
*    timeout = 0; // changed from "3" to "0" for true "autoboot"

    // Some devices (n3ds?) seems to have
    // some timing problems when using timeout=0 (autoboot).
    // You may increase this value to improve boot success rate.
    // Default delay (8) should be good for o3ds, 2 seems good for n3ds
    autobootfix = 8;

    // if timeout = 0 (autoboot),
    // hold this key to enter the menu
    // keycode list : https://goo.gl/4XLDIL
    recovery = 2; // SELECT

    // Default boot entry
    default = 0;

    // Boot menu entries (11 max)
    entries =
    (
        {
            title = "Luma3ds";
            path = "/safehax.3dsx";
x            offset = "0x12000"; // should be removed
        },
        {
            title  = "HomeBrewMenu";
            path = "/bhbt.3dsx";
        },
x        {
x            title  = "HomeMenu";
x            path = "homemenu"; // THIS DOESN'T WORK ON >=v9.3, ctrbootmanager should be updated
x        },
x        {
x            title  = "Reboot";
x            path = "reboot"; // THIS DOESN'T WORK ON >=v9.3, ctrbootmanager should be updated
x        },
x        {
x            title  = "Shutdown";
x            path = "shutdown"; // THIS DOESN'T WORK ON >=v9.3, ctrbootmanager should be updated
x        }
    );

    // RGB colors
    theme =
    {
        bgTop1 = "4a0031";
        bgTop2 = "6f0149";
        bgBottom = "6f0149";
        highlight = "dcdcdc";
        borders = "ffffff";
        font1 = "ffffff";
        font2 = "000000"; // selection
        bgImgTop = "/yourimage.bin"; // 400x240 pixels
        bgImgBot = "/yourimage2.bin"; // 320x240 pixels
    };
};

Legend:
* = edit
x = delete

Hope this helps :)
 
D

Deleted User

Guest
OP
Alright thanks guys. Like I said, was very late last night, I will see if I can fix it this morning before work. If not I will definitelty fix it afterwards. Sorry about the incompletd guide.

--------------------- MERGED ---------------------------

annson24 said:
menuhax doesn't autoboot on firmwares >=v11.1. You'll have to scroll to face raiders to execute menuhax. Also, reading back at your guide here are things I saw;



After this step, before anything else, you should run tinyformat first to unlink sysNAND with emuNAND.



This will break Luma3DS. You won't be able to run GBA/DSiWare games, or certain games that need more RAM on the device (such as Super Smash Bros). I suggest to retain its name as arm9loaderhax.bin since safehax can also load it.

Lastly, I looked at your modified boot.cfg of the ctrbootmanager.

This is your code:
Code: 
// Boot menu configuration
boot_config =
{
    // Default timeout in seconds
    // If timeout = -1, disable autoboot
    timeout = 3;

    // Some devices (n3ds?) seems to have
    // some timing problems when using timeout=0 (autoboot).
    // You may increase this value to improve boot success rate.
    // Default delay (8) should be good for o3ds, 2 seems good for n3ds
    autobootfix = 8;

    // if timeout = 0 (autoboot),
    // hold this key to enter the menu
    // keycode list : https://goo.gl/4XLDIL
    recovery = 2; // SELECT

    // Default boot entry
    default = 0;

    // Boot menu entries (11 max)
    entries =
    (
        {
            title = "Luma3ds";
            path = "/safehax.3dsx";
            offset = "0x12000";
        },
        {
            title  = "HomeBrewMenu";
            path = "/bhbt.3dsx";
        },
        {
            title  = "HomeMenu";
            path = "homemenu"; // magic path for homemenu, do not change
        },
        {
            title  = "Reboot";
            path = "reboot"; // magic path for reboot, do not change
        },
        {
            title  = "Shutdown";
            path = "shutdown"; // magic path for poweroff, do not change
        }
    );

    // RGB colors
    theme =
    {
        bgTop1 = "4a0031";
        bgTop2 = "6f0149";
        bgBottom = "6f0149";
        highlight = "dcdcdc";
        borders = "ffffff";
        font1 = "ffffff";
        font2 = "000000"; // selection
        bgImgTop = "/yourimage.bin"; // 400x240 pixels
        bgImgBot = "/yourimage2.bin"; // 320x240 pixels
    };
};

You should edit it to this:
Code: 
// Boot menu configuration
boot_config =
{
    // Default timeout in seconds
    // If timeout = -1, disable autoboot
*    timeout = 0; // changed from "3" to "0" for true "autoboot"

    // Some devices (n3ds?) seems to have
    // some timing problems when using timeout=0 (autoboot).
    // You may increase this value to improve boot success rate.
    // Default delay (8) should be good for o3ds, 2 seems good for n3ds
    autobootfix = 8;

    // if timeout = 0 (autoboot),
    // hold this key to enter the menu
    // keycode list : https://goo.gl/4XLDIL
    recovery = 2; // SELECT

    // Default boot entry
    default = 0;

    // Boot menu entries (11 max)
    entries =
    (
        {
            title = "Luma3ds";
            path = "/safehax.3dsx";
x            offset = "0x12000"; // should be removed
        },
        {
            title  = "HomeBrewMenu";
            path = "/bhbt.3dsx";
        },
x        {
x            title  = "HomeMenu";
x            path = "homemenu"; // THIS DOESN'T WORK ON >=v9.3, ctrbootmanager should be updated
x        },
x        {
x            title  = "Reboot";
x            path = "reboot"; // THIS DOESN'T WORK ON >=v9.3, ctrbootmanager should be updated
x        },
x        {
x            title  = "Shutdown";
x            path = "shutdown"; // THIS DOESN'T WORK ON >=v9.3, ctrbootmanager should be updated
x        }
    );

    // RGB colors
    theme =
    {
        bgTop1 = "4a0031";
        bgTop2 = "6f0149";
        bgBottom = "6f0149";
        highlight = "dcdcdc";
        borders = "ffffff";
        font1 = "ffffff";
        font2 = "000000"; // selection
        bgImgTop = "/yourimage.bin"; // 400x240 pixels
        bgImgBot = "/yourimage2.bin"; // 320x240 pixels
    };
};

Legend:
* = edit
x = delete

Hope this helps :)
Click to expand...
Sorrt, forgot to quote you. This helps a lot.
 
annson24

annson24

The Patient One
Member
Level 9
Joined
May 5, 2016
Messages
1,191
Trophies
0
Age
32
XP
1,843
Country
Philippines
blujay said:
Alright thanks guys. Like I said, was very late last night, I will see if I can fix it this morning before work. If not I will definitelty fix it afterwards. Sorry about the incompletd guide.

--------------------- MERGED ---------------------------


Sorrt, forgot to quote you. This helps a lot.
Click to expand...
One thing I forgot to mention. Menuhax won't install on v11.1-11.2 without running ctr-httpwn v1.2 first.

Sent from my SM-G935F using Tapatalk
 
D

Deleted User

Guest
OP
Alright, I am back guys. If there are any questions let me know, but keep in mind I am currently setting up a Github guide with more simplicity and peace of mind.
 
annson24

annson24

The Patient One
Member
Level 9
Joined
May 5, 2016
Messages
1,191
Trophies
0
Age
32
XP
1,843
Country
Philippines
blujay said:
Alright, I am back guys. If there are any questions let me know, but keep in mind I am currently setting up a Github guide with more simplicity and peace of mind.
Click to expand...
Just installed rednand to another 3ds. Found out that deleting the homemenu, reboot, and shutdown boot entry on the boot.cfg breaks ctrbootmanager so it's best to place it back (though reboot and shutdown doesn't work). Sorry.

Sent from my SM-G935F using Tapatalk
 
annson24

annson24

The Patient One
Member
Level 9
Joined
May 5, 2016
Messages
1,191
Trophies
0
Age
32
XP
1,843
Country
Philippines
foolalay said:
Can I use this to access my old rxTools emuNAND on 11.2 without losing any data? My sysnand is empty, btw.
Click to expand...
You can access your old emunand but we'll be using luma3ds masterrace since rxtool peasant is old and outdated.

Sent from my SM-G935F using Tapatalk
 
annson24

annson24

The Patient One
Member
Level 9
Joined
May 5, 2016
Messages
1,191
Trophies
0
Age
32
XP
1,843
Country
Philippines
foolalay said:
Yeah, I'm ready to switch to Luma. I just want to know the easiest way to launch emunand on 11.2. I don't need the auto boot or anything for now. I'll be doing the A9LH down the line when I get a stable internet connection.
Click to expand...
If you're going for a9lh. Then you need not to access emunand anymore. Just transfer it to sysnand (which is included in the guide)

Sent from my SM-G935F using Tapatalk
 
annson24

annson24

The Patient One
Member
Level 9
Joined
May 5, 2016
Messages
1,191
Trophies
0
Age
32
XP
1,843
Country
Philippines
foolalay said:
I know, but I won't be able to do that for many months. I think a variation of this method will be safer for me to attempt at this time.
Click to expand...
Oh. If you don't need autoboot:

1. Download fasthax+safehax
2. Download the soundhax
3. Download the otherapp.bin
4. Download luma3ds
4.5 download homebrew starter pack

5. Extract safehax.bin to /3ds folder of your sd
6. Copy the soundhax to the root of your sd card
7. Copy the otherapp you downloaded and rename it to otherapp.bin
7.5 exttact homebrew starter pack to the root of your sd card
8. Extract arm9loaderhax.bin from luma3ds to the root of your sd card.
9. Reinsert sd card to 3ds.

10. Open sound app on 3ds.
11. Browse for the "<3 nedwill 2016" music file
12. If you did everything right, you'll boot to homebrew launcher.
13. Open safehax.
14. If you did everything right, you'll boot to luma3ds.
15. ???
16. Profit

Sorry for the shortcut tutorial, I'm currently commuting back home.

Sent from my SM-G935F using Tapatalk
 
Last edited by annson24,
Platinum Lucario

Platinum Lucario

Well-Known Member
Member
Level 4
Joined
May 17, 2014
Messages
535
Trophies
0
Age
31
Location
Warrnambool, Victoria, Australia
XP
499
Country
Australia
Okay, so I've got everything that is needed in this guide on my microSD card on my New Nintendo 3DS. I launched Fasthax and when the process begins, it's stuck at "[*] Beginning attempt 0x0".

Is this meant to happen? What should I do? I really don't want to do anything that will corrupt my sysNAND (especially since I really want to back it up, but can't do it without using fasthax). And I've got the RC2 of fasthax, if you're wondering.
 
D

Deleted User

Guest
OP
Platinum Lucario said:
Okay, so I've got everything that is needed in this guide on my microSD card on my New Nintendo 3DS. I launched Fasthax and when the process begins, it's stuck at "[*] Beginning attempt 0x0".

Is this meant to happen? What should I do? I really don't want to do anything that will corrupt my sysNAND (especially since I really want to back it up, but can't do it without using fasthax). And I've got the RC2 of fasthax, if you're wondering.
Click to expand...
What Firmware are you on? Fasthax only works on 11.2. If you want to wait a day I will have a better tutorial on Github.

If you are on 11.0/11.1 go here
 

Site & Scene News

Go to forum More news

Popular threads in this forum

Hacking Homebrew  A new way to experience StreetPass

Is it possible...?

After the 8th of April, will it still be possible to create a new NNID (Nintendo Network ID) and/or transfer a NNID from one console to another?

Hacking Homebrew  how to link pnid to 3ds/how to use juxtaposition?

Hacking  New 2ds Refuses to boot

Hacking Misc  VCRUNTIME140.dll UCRTBASED.dll Master Thread

Translation Project  DQM2SP translation

3DS won't boot into DS Mode, Extended Memory Mode and more

General chit-chat
Help Users
  • No one is chatting at the moment.
    Psionic Roshambo @ Psionic Roshambo: https://www.youtube.com/@legolambs