Hacking Sysnand not visible/writable in Godemode9

[fusobotic]

I'm trying to unbrick my sysnand rn through ntrboot into luma emunand. I've tried many different methods and only Sysnand Virtual shows up in my Godmode9 and Decrypt9 doesn't work either. Whenever I try to restore (safe) it always says "NAND restore failed" and I know it's not the SD card or the .bin file that I'm using because I've switched cards and verified the bin. Is there some reason why Godemode9 can't see my sysnand? Is my sysnand destroyed?

Currently my BSOD (Gateway related I think) is:
BOORTOM 8046 ERRCODE: 00F800EF FFFFFFFF FFFFFFFF 00000008 00000000

I'm still able to boot into emunand (ntrboot B9S with luma) at the moment. I'd like to restore my old sysnand and not have to use a magnet every time. Any help would be great!

 

[NicknameGoesHere]

I'm trying to unbrick my sysnand rn through ntrboot into luma emunand. I've tried many different methods and only Sysnand Virtual shows up in my Godemode9 and Decrypt9 doesn't work either. Whenever I try to restore (safe) it always says "NAND restore failed" and I know it's not the SD card or the .bin file that I'm using because I've switched cards and verified the bin. Is there some reason why Godemode9 can't see my sysnand? Is my sysnand destroyed?

Currently my BSOD (Gateway related I think) is:
BOORTOM 8046 ERRCODE: 00F800EF FFFFFFFF FFFFFFFF 00000008 00000000

I'm still able to boot into emunand (ntrboot B9S with luma) at the moment. I'd like to restore my old sysnand and not have to use a magnet every time. Any help would be great!

If it's a Gateway brick, you can't fix it with ntrboot, you have to do some kind of hardmod that connects it to a rasPi

--------------------- MERGED ---------------------------

If it's a Gateway brick, you can't fix it with ntrboot, you have to do some kind of hardmod that connects it to a rasPi

Wait, if B9S is installed, can't you just Autobot emuNAND until you fix the issue?

 

[fusobotic]

Here's another error I get, whenever running the Safe B9S installer:
Crypto Status: FIRM partition fail

But B9S was previously installed so it still lets me boot luma by using a ntrboot flashcart and a magnet. I'm just curious why Godmode doesn't let me access Sysnand from there... I don't mind wiping the sysnand and starting over, I've got an older nand backup.
I remember hearing at some point about a way to unbrick a 3ds without a rasPi- https://gbatemp.net/threads/how-to-...ckup-file-with-b9s-sighax-and-hardmod.471919/

Idk how this older guide translates to now, but CTR transfer seems to be the way to do it and the 3ds.guide page on that doesn't exist anymore. Does the gateway brick lockout modifying sysnand even from Boot 9?

 

[Lacius]

Here's another error I get, whenever running the Safe B9S installer:
Crypto Status: FIRM partition fail

But B9S was previously installed so it still lets me boot luma by using a ntrboot flashcart and a magnet. I'm just curious why Godmode doesn't let me access Sysnand from there... I don't mind wiping the sysnand and starting over, I've got an older nand backup.
I remember hearing at some point about a way to unbrick a 3ds without a rasPi- https://gbatemp.net/threads/how-to-...ckup-file-with-b9s-sighax-and-hardmod.471919/

Idk how this older guide translates to now, but CTR transfer seems to be the way to do it and the 3ds.guide page on that doesn't exist anymore. Does the gateway brick lockout modifying sysnand even from Boot 9?

I would try a CTRNAND transfer.
https://3ds.guide/ctrtransfer.html

 

[The Real Jdbye]

Here's another error I get, whenever running the Safe B9S installer:
Crypto Status: FIRM partition fail

But B9S was previously installed so it still lets me boot luma by using a ntrboot flashcart and a magnet. I'm just curious why Godmode doesn't let me access Sysnand from there... I don't mind wiping the sysnand and starting over, I've got an older nand backup.
I remember hearing at some point about a way to unbrick a 3ds without a rasPi- https://gbatemp.net/threads/how-to-...ckup-file-with-b9s-sighax-and-hardmod.471919/

Idk how this older guide translates to now, but CTR transfer seems to be the way to do it and the 3ds.guide page on that doesn't exist anymore. Does the gateway brick lockout modifying sysnand even from Boot 9?

GW brick code actually password protects the NAND, it can be removed with a Raspberry Pi connected to a hardmod as someone else mentioned. There's no homebrew to do that, it was never really an option because until recently you couldn't run homebrew on a fully bricked 3DS, and now almost no one uses Gateway, even less people use Gateway clones, so it's not such a big issue anymore. I'm not sure if such a homebrew would actually be possible as it would require direct hardware access to the eMMC from software.
What did you do to get it bricked though? Did you use a GW clone?

 

[fusobotic]

I would try a CTRNAND transfer.
https://3ds.guide/ctrtransfer.html

Thanks, guess they switched the address of that page on me. I'll give that a try.

@The Real Jdbye
My case is probably extremely uncommon. I was experimenting with getting DSTwo+ to chainload into emunand through luma when it froze up and gave a black screen. I was stupid and removed the flashcart first before powering it off (just panicked I guess). The next time I powered on it had a BSOD. Supposedly the newer launcher.dat wasn't supposed to have any brick code in it (I was using the latest version which hadn't been modded by Supercard yet). The funny bit was, before it bricked, that it loaded fine but the rom selector never worked.

 

[The Real Jdbye]

Thanks, guess they switched the address of that page on me. I'll give that a try.

@The Real Jdbye
My case is probably extremely uncommon. I was experimenting with getting DSTwo+ to chainload into emunand through luma when it froze up and gave a black screen. I was stupid and removed the flashcart first before powering it off (just panicked I guess). The next time I powered on it had a BSOD. Supposedly the newer launcher.dat wasn't supposed to have any brick code in it (I was using the latest version which hadn't been modded by Supercard yet). The funny bit was, before it bricked, that it loaded fine but the rom selector never worked.

Wrong, SuperCard modded the launcher.dat to remove the brick code. Using the unmodded launcher.dat with a DSTWO+ is a death sentence for your 3DS.
It's a good thing you have a NAND backup, as you'll need it.
You're going to need a hardmod though. If you don't have soldering experience, it might be best to get someone else to do it for you. @vb_encryption_vb does them in the US.
The unbricking method can be used with either a Raspberry Pi or an Arduino: https://gbatemp.net/threads/3ds-unbricking-progress.361171/
I don't know if he has a Raspberry Pi or an Arduino on hand to perform the unbrick for you, if that is the case then he could do a temporary hardmod to unbrick it so the 3DS shell doesn't have to be modded to fit a connector and it would be cheaper.

 

[DocKlokMan]

I'm trying to unbrick my sysnand rn through ntrboot into luma emunand. I've tried many different methods and only Sysnand Virtual shows up in my Godmode9 and Decrypt9 doesn't work either. Whenever I try to restore (safe) it always says "NAND restore failed" and I know it's not the SD card or the .bin file that I'm using because I've switched cards and verified the bin. Is there some reason why Godemode9 can't see my sysnand? Is my sysnand destroyed?

Currently my BSOD (Gateway related I think) is:
BOORTOM 8046 ERRCODE: 00F800EF FFFFFFFF FFFFFFFF 00000008 00000000

I'm still able to boot into emunand (ntrboot B9S with luma) at the moment. I'd like to restore my old sysnand and not have to use a magnet every time. Any help would be great!

Rename your nand backup to "nand.bin" and then use GodMode9 to copy it from your SD card to S:/nand.bin, replacing the one that's there. Confirm the lvl3 sysNAND writing when it prompts you to. Depending on how old the backup is you may then need to boot SafeBoot9StrapInstaller to reinstall B9S again.

 

[fusobotic]

Rename your nand backup to "nand.bin" and then use GodMode9 to copy it from your SD card to S:/nand.bin, replacing the one that's there. Confirm the lvl3 sysNAND writing when it prompts you to. Depending on how old the backup is you may then need to boot SafeBoot9StrapInstaller to reinstall B9S again.

Says "Failed copying path: nand.bin"

Also tried the CTRNAND transfer but it just seemed to mess up titles in emunand. (some of them have white icons and no labels now). Not really an issue since all of my important titles were on the sysnand anyway.

Idk if it's worth cracking open the 3ds just for this. It's a really old XL and it'd be less effort to get a new 2DS XL anyway. If I can find a way to do it from software side it might help others since I'm assuming other Gateway bricks can still get to godmode9 at least or access emunand at best? I do have some programming background, is there any .firm or homebrew application I could try to look at/modify eMMC? It might be fun to mess around with. Looking at how this file works they seem to understand how to generate keys properly.

 

[NicknameGoesHere]

Says "Failed copying path: nand.bin"

Also tried the CTRNAND transfer but it just seemed to mess up titles in emunand. (some of them have white icons and no labels now). Not really an issue since all of my important titles were on the sysnand anyway.

Idk if it's worth cracking open the 3ds just for this. It's a really old XL and it'd be less effort to get a new 2DS XL anyway. If I can find a way to do it from software side it might help others since I'm assuming other Gateway bricks can still get to godmode9 at least or access emunand at best? I do have some programming background, is there any .firm or homebrew application I could try to look at/modify eMMC? It might be fun to mess around with. Looking at how this file works they seem to understand how to generate keys properly.

There is no current homebrew tool, to my knowledge, that does that, although it's technically possible. If you know how to develop, I guess you can try that

 

[DocKlokMan]

Says "Failed copying path: nand.bin"

Also tried the CTRNAND transfer but it just seemed to mess up titles in emunand. (some of them have white icons and no labels now). Not really an issue since all of my important titles were on the sysnand anyway.

Idk if it's worth cracking open the 3ds just for this. It's a really old XL and it'd be less effort to get a new 2DS XL anyway. If I can find a way to do it from software side it might help others since I'm assuming other Gateway bricks can still get to godmode9 at least or access emunand at best? I do have some programming background, is there any .firm or homebrew application I could try to look at/modify eMMC? It might be fun to mess around with. Looking at how this file works they seem to understand how to generate keys properly.

If GodMode9 fails to copy to S:/nand.bin it's a hardware issue. Last time I saw this error it was because someone left solder on the DAT0 pad during a hard mod attempt. If you have not hard modded this 3DS or done any hardware modifications to it yourself, then it's very likely just broken.

 

[NicknameGoesHere]

If GodMode9 fails to copy to S:/nand.bin it's a hardware issue. Last time I saw this error it was because someone left solder on the DAT0 pad during a hard mod attempt. If you have not hard modded this 3DS or done any hardware modifications to it yourself, then it's very likely just broken.

No, GW bricks completely erase & lock the eMMC. This would make it unusable

--------------------- MERGED ---------------------------

No, GW bricks completely erase & lock the eMMC. This would make it unusable

And unreadable

 

[tivu100]

Just come across similar case (different bootrom error, but same sympton). Can't access to restore sysNAND or install B9S into sysnand. Any update?