NTRBoot Released!

It's here!
ntrboot_checklist_2.png

Info


@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?


This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.
The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?


  1. Any 3DS model on any firmware can be hacked with minimal effort
  2. You can unbrick any 3DS model from any type of brick.
    - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
    - This does not apply to MCU bricks.
  3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this
This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ


Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

:arrow: Release
:arrow: Guide
:arrow: Free NTRBoot Flashing
:arrow: Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.
 
Last edited by Deleted member 381889,
The Gateway brick (if you refer to that) , was F800FF , if im correct.

There were other cases of BlueSOD during the OTP/2.1 downgrade era (especially the early stage where 2.1 NAND patching was done on PC, which was very prone to user error).

http://3dbrew.org/wiki/Bootloader

00F800FE 00000000 00000000 00000200 00000000 Error when having SD-card reader connected to NAND during boot.
00F800FE 00000000 00000000 00000400 00000000 NAND not found error (?)
00F800FE FFFFFFFF FFFFFFFF 00000080 00800000 NAND error when DAT1 was used as DAT0.
00F800FE FFFFFFFF FFFFFFFF 00000005 00800000 NAND error when DAT2 was used as DAT0.
00F800FE FFFFFFFF FFFFFFFF 00000005 00000000 NAND error when DAT3 was used as DAT0.
00F800FF F8F8FFFF FFFFFFFF 00000000 00000000 Both the firm0 and firm1 partitions are corrupt (failed signature checks).
00F800EE FFFFFFFF FFFFFFFF 00000000 00000000 NCSD header in sector 0 is corrupt (failed signature check).

I think the bolded one is the only in concern about not being able to unbrick. Since by the sound of it, NAND chip can't be located. Dead, physical, hardware damage (?)
 
Last edited by tivu100,
  • Like
Reactions: Deleted User
Nintendo 2DS can't power on if the sleep switch is to the right, so.. is this possible in 2DS?
Try this:
turn off 2ds and switch it to sleep mode
hold Start + Select + X then press power for a couple of seconds.

see what happens
 
if i have a hardmod and i patch it using the boot9strap hardmod installer and the 3ds still doesn't boot are my odds of this working less?

im thinking that may be the case but any input is appreciated. i have 3 known working nand dumps but no matter which i use, this 3ds fails to boot.

i was thinking using the button combo + magnet should trigger the bootrom but i tried a couple times and nothing.
 
F800FE: doesn't matter, we still might be able to ignore built-in memory altogether.
Also Scires has released a B9S .firm. So it's up to Normmatt now. If there's any way we can help you, let us know.

--------------------- MERGED ---------------------------

if i have a hardmod and i patch it using the boot9strap hardmod installer and the 3ds still doesn't boot are my odds of this working less?

im thinking that may be the case but any input is appreciated. i have 3 known working nand dumps but no matter which i use, this 3ds fails to boot.

i was thinking using the button combo + magnet should trigger the bootrom but i tried a couple times and nothing.
Depends on why it is bricked, but most likely, SleepHax should save you.
 
F800FE: doesn't matter, we still might be able to ignore built-in memory altogether.
Also Scires has released a B9S .firm. So it's up to Normmatt now. If there's any way we can help you, let us know.

--------------------- MERGED ---------------------------


Depends on why it is bricked, but most likely, SleepHax should save you.

its
00F800FE 0000400 error which is weird. i just re-soldered in a new JST connector i guess ill see what happens with sleephax
 
You need a correct NTR cartrige to boot off of.
i figured that, thanks.

funny part here is that when the sd is removed, it doesn't boot just like normal when boot.firm isn't present. when the sd card is in, it just stays black screen. so the bootrom is hacked its just not getting past the damn bootrom. grrrrrr. i should just give up but i want this thing to revive just a matter of pride now lol
 
i figured that, thanks.

funny part here is that when the sd is removed, it doesn't boot just like normal when boot.firm isn't present. when the sd card is in, it just stays black screen. so the bootrom is hacked its just not getting past the damn bootrom. grrrrrr. i should just give up but i want this thing to revive just a matter of pride now lol
Or wait for @Normmatt to stop teasing us.
 
Ntrboothax was announced months ago but we're no suddenly getting a lot of news regarding it's (very impressive) progress. I expect a release date to be soon. Please, be patient.
 
Ntrboothax was announced months ago but we're no suddenly getting a lot of news regarding it's (very impressive) progress. I expect a release date to be soon. Please, be patient.
Now that Scires has released a NTR .firm for B9S 1.2, it should be within an arm's reach.
 

Site & Scene News

Popular threads in this forum