How to UNBRICK your N3dsXL with NO SysNAND Backup File With B9S (Sighax) and Hardmod

daxtsu · May 27, 2017

Quantumcat said:
I was thinking maybe this button combination was found in reverse engineered code, and it was just assumed rather than tested. I couldn't find any video showing it working.

There's probably no PoC for it yet, it was only discovered just recently by people outside of the #3dsdev circle (i.e. people that aren't Derrek/smea/yellows8).

sniper_x002 · May 27, 2017

Quantumcat said:
SUCCESS!! Thanks for telling me where! Most of my problem was not knowing where to put the magnets.
View attachment 88249

--------------------- MERGED ---------------------------

I tried with a DSTwo and Start-Select-X but it just booted into Luma config (a9lh).

Just tried it on a stock system too - boots into home menu in sleep mode, when I remove the magnet it's just the home menu.

In @SciresM's presentation it says that you can at least play DS games with a bricked system because of being able to do this - but it doesn't work. Maybe it would require an original DS cartridge, of which I have none.

Well somebody owns a cat (or dog).

Quantumcat · May 27, 2017

sniper_x002 said:
Well somebody owns a cat (or dog).

Lol yes everything I own is covered in cat hair. I'm so used to it now I don't even notice.

gamesquest1 · May 27, 2017

sniper_x002 said:
Well somebody owns a cat (or dog).

Or someone is a cat hence the name

eworm · May 27, 2017

Now this is something I'm gonna keep my eye out for. I'm not gonna even attempt to hardmod, since soldering is a big unknown to me, but seeing as I do own a bricked N3DSXL, I am more than excited to see a glimpse of hope with the DScard-magnet trickery.

And no, it doesn't seem like I can use the magnet to play DS cartridges. This is only for specially prepared boot-cartridges, it seems.

joker_77 · May 27, 2017

mikey420 said:
Will this unbrick an n3ds that was bricked by the 11.3+ update and gateway cfw?

I could say yes. anyway your console couldn´t be worst than a brick but anyway it would be better to take your sysnand to a safe place on your PC to be used as a checkpoint in the future just in case this tutorial can´t help you... keep in mind: if you don´t know how to use an iron soldering, it would be better to keep it bricked ...

mikey420 · May 28, 2017

The soldering isn't the issue. I'm just wondering if this method will fix the corrupted secret sector or whatever that causes the brick. I'd venture to guess not. If I recall correctly it's a per console specific item that would only be recoverable if we could recreate that data or have a backup of the original before the corruption occurred. Was just wondering if anyone had some deeper insight on this than I. As I know a few people who have this brick but no backup to fix it with...

Shawnj · May 28, 2017

Either that, waiting for NTRCardhax, or sending in your 3DS to be hardmodded

Quantumcat said:
SUCCESS!! Thanks for telling me where! Most of my problem was not knowing where to put the magnets.
View attachment 88249

--------------------- MERGED ---------------------------

I tried with a DSTwo and Start-Select-X but it just booted into Luma config (a9lh).

Just tried it on a stock system too - boots into home menu in sleep mode, when I remove the magnet it's just the home menu.

In @SciresM's presentation it says that you can at least play DS games with a bricked system because of being able to do this - but it doesn't work. Maybe it would require an original DS cartridge, of which I have none.

In this case, NTR cart -= DS game. You need an NTR cart specifically designed to be loaded from the 3DS bootrom, not just any ol' DS game/DS flashcard.

BARNWEY · May 28, 2017

Shawnj said:
Either that, waiting for NTRCardhax, or sending in your 3DS to be hardmodded

In this case, NTR cart -= DS game. You need an NTR cart specifically designed to be loaded from the 3DS bootrom, not just any ol' DS game/DS flashcard.

Not quite, the bootrom is coded to load any NTR cart if you hold a combination with the lid closed. However, the lid can be tricked into thinking it's closed using magnets. Therefore allowing for a fake cartridge the ability to restore the NAND...
P.S. I love your avatar, are you a fan of Dave as well?

Quantumcat · May 28, 2017

BARNWEY said:
Not quite, the bootrom is coded to load any NTR cart if you hold a combination with the lid closed. However, the lid can be tricked into thinking it's closed using magnets. Therefore allowing for a fake cartridge the ability to restore the NAND...
P.S. I love your avatar, are you a fan of Dave as well?

What exactly is the definition of "any NTR cart"? Did not work with DSTwo on either an a9lh N3DS or a stock N3DS.

BARNWEY · May 28, 2017

Quantumcat said:
What exactly is the definition of "any NTR cart"? Did not work with DSTwo on either an a9lh N3DS or a stock N3DS.

That's what I recall at least, what happens with the DSTwo out of curiosity?

Quantumcat · May 28, 2017

BARNWEY said:
That's what I recall at least, what happens with the DSTwo out of curiosity?

It just boots into sleep mode, and the home menu comes up when the magnet is removed (stock system) and boots into Luma config or HG9 (a9lh system).

BARNWEY · May 28, 2017

Quantumcat said:
It just boots into sleep mode, and the home menu comes up when the magnet is removed (stock system) and boots into Luma config or HG9 (a9lh system).

It sounds exactly like what happens during core gameplay XD, It sounds like it needs a special NTR cart... @SciresM's presentation made it seem like it could use just any ol' DS cart...

Shawnj · May 28, 2017

BARNWEY said:
Not quite, the bootrom is coded to load any NTR cart if you hold a combination with the lid closed. However, the lid can be tricked into thinking it's closed using magnets. Therefore allowing for a fake cartridge the ability to restore the NAND...
P.S. I love your avatar, are you a fan of Dave as well?

The BootROM loading an NTR card is very different from just loading an NTR card normally, though- otherwise, we would be able to run NTRcardhax on an Acekard 2i/DSTWO simply running the card through the home menu. Think about it this way- I can create a .cia file for a 3DS, but that doesn't mean that something like Decrypt9 would be able to install it because not enough of the system has loaded at that point for a CIA install to take place, nor for the system to be able to do anything with the CIA at that point (if it is bigger than the health and safety app). That's a metaphor I'll use to describe this, at least.

Also, thank you very much! I am.

BARNWEY · May 28, 2017

Shawnj said:
The BootROM loading an NTR card is very different from just loading an NTR card normally, though- otherwise, we would be able to run NTRcardhax on an Acekard 2i/DSTWO simply running the card through the home menu. Think about it this way- I can create a .cia file for a 3DS, but that doesn't mean that something like Decrypt9 would be able to install it because not enough of the system has loaded at that point for a CIA install to take place, nor for the system to be able to do anything with the CIA at that point (if it is bigger than the health and safety app). That's a metaphor I'll use to describe this, at least.

Also, thank you very much! I am.

I understand, @Quantumcat pointed out my misinformation.

Kubas_inko · May 28, 2017

This should be included on 3ds.guide if it works 99% of the time

gamesquest1 · May 28, 2017

mikey420 said:
The soldering isn't the issue. I'm just wondering if this method will fix the corrupted secret sector or whatever that causes the brick. I'd venture to guess not. If I recall correctly it's a per console specific item that would only be recoverable if we could recreate that data or have a backup of the original before the corruption occurred. Was just wondering if anyone had some deeper insight on this than I. As I know a few people who have this brick but no backup to fix it with...

Should work just the same, there shouldn't really be any reason for firm payloads to use the key sector, So you should be able to inject sighax, boot decrypt9 and then fix the secret sector anyway

I guess the gateway bricks just cause firm0 and firm1 to be over wrote with the original 11.3/11.4 firm so just use either of them as the "current" firm

Stephano · May 28, 2017

Myria said:
I think I'll wait until there are DS flash cart methods of recovery, which won't require soldering.

Wait, that's a thing?

osm70 · May 28, 2017

Stephano said:
Wait, that's a thing?

If you have a magnet on your 3DS (really, I am not kidding) and you hold Start+Select+X on boot, it tries to boot from a DS cart. All we need is a cart with B9S installer and we are good to go.

Stephano · May 29, 2017

osm70 said:
If you have a magnet on your 3DS (really, I am not kidding) and you hold Start+Select+X on boot, it tries to boot from a DS cart. All we need is a cart with B9S installer and we are good to go.

are we able to perform this now? How would I do it and what are the dangers of it. I'm not bricked, I'm just curious

Well-Known Member

Well-Known Member

Dead and alive

Nabnut

Well-Known Member

Member

Well-Known Member

Well-Known Member

Well-Known Member

Dead and alive

Well-Known Member

Dead and alive

Well-Known Member

Well-Known Member

Well-Known Member

"Something funny goes here."

Nabnut

pessimism = Realism

Well-Known Member

pessimism = Realism

Similar threads

Popular threads in this forum