NTRBoot Released!

It's here!
ntrboot_checklist_2.png

Info


@Normmatt has created a way to run B9S .firm files from bootrom via a DSi Flashcard and a magnet! This works on every 3DS on any firmware version.

For installation without a PC, user @TheCyberQuake has created a pack which will automatically install B9S and copy over essential starter homebrew from the flashcard's SD to the 3DS's. This will mainly be used for PC-less B9S installations. If you have a PC with you, use 3ds.guide. Read more here: https://gbatemp.net/threads/481141/

How does this work?


This works because of a flaw in the bootrom. Before the bootrom boots the NAND, it checks to see if Start+Select+X is held down, and if the shell is closed. If these requirements are met, it will boot an NDS cartridge from the bootrom. This give that cartridge bootrom access. You might be wondering how you'd hold down buttons while the shell is closed, and why you need a magnet. If you put a magnet in a specific spot on the 3DS, it will go into sleep mode. Using this, you can boot the NDS cartridge with the buttons held down while in sleep mode! Using a reflashable flashcard, you can boot B9SInstaller using the flashcard, and easily install it on your 3DS.
The 2DS doesn't need a magnet since a switch puts it to sleep instead of a magnet.

What does this mean?


  1. Any 3DS model on any firmware can be hacked with minimal effort
  2. You can unbrick any 3DS model from any type of brick.
    - Remember, you don't need a NAND backup for this. Just do a CTRTransfer.
    - This does not apply to MCU bricks.
  3. Even consoles with fried NAND, or even the NAND chip physically removed, can use this
This is incredibly impressive stuff, and will most likely be released soon! edit: now!

FAQ


Q: Can Nintendo patch this?
A: Nope! Not without a new hardware revision.

Q: My flashcard is blocked by my firmware! Can I still use this?
A: Yes! The flashcard blacklist is not enabled on the bootrom.

Q: Why can't this work with my flashcard?
A: The installation requires you to flash NTRBoot to the flashcard's nand. Most DS flashcards, such as the original R4, have a ROM, which is not flashable.

Q: Can I install NTRBoot on my flashcard without another 3DS system?
A: If you can run NDS roms on your 3DS with it, then yes. If it's blocked on your 3DS version, then you'll need another 3DS system to use it.

Q: Will my 3DS flashcard work?
A: No, only the NDSi flashcards listed above.

Q: Will any other flash cards work?
A: Only the ones listed in the OP. However keep in mind that flashcards such as the DSTT, Supercard DS2 and R4 SDHC Dualcore are planned to be supported in the future.

Q: I tried to do this with my cartridge and it didn't work?
A: It doesn't work with regular DS cards.

Q: Can I unbrick from a ____ brick?
A: Considering the card has access to the bootrom, yes! This can unbrick any brick (except MCU), unless you've taken a knife to the motherboard.

Q: Can I install B9S on the latest firmware with this?
A: Again, since the card has access to the bootrom, you can do this easily! Just plug in your flashcard, boot up using the magnet and button combination, and install.

Q: Does this work on the New Nintendo 2DS XL?
A: Yes!

:arrow: Release
:arrow: Guide
:arrow: Free NTRBoot Flashing
:arrow: Free B9S Installations

Here is SciresM's post about this

Please see SciresM's presentation on bootromhax.
 
Last edited by Deleted member 381889,
I'll do it when I get to somewhere with wifi. I'm currently in the middle of travelling.
Man, thank you for all the patience you've had all this time, and for keeping us updated the way it was possible ^^

I felt like I needed to say that xD
 
Hmm?

Dumping Flash
ChipID: E636F2FF
HW Rev: EA17C4FF
Supported cartridge not detected!

This is my pretty old Acekard 2i, it looks geuine according to the clone guides.
 
  • Like
Reactions: Alex1234
I tested it out using my R4i RTS 3DS and it worked like a charm!!! Although i have no reason to re-flash it back to normal. :glare: I never got the darn thing to work in the first place.
Would anyone be willing to share their flash backup of that same flashcard with me to see if i can get it working.
 
Hmm?
Dumping Flash
ChipID: E636F2FF
HW Rev: EA17C4FF
Supported cartridge not detected!

This is my pretty old Acekard 2i, it looks geuine according to the clone guides.

I get the same thing you get, but its 'EA17C4FF' for both 'ChipID' and 'HW Rev'
(edit: It sometimes shows as FFFFFFFF or 00000000 if i insert the card quickly and try and dump)
I got my Acekard2i around 2011 when the DSi-XL was released, unsure which online store i got it from...
The Card shows up as a 'Chessmaster' icon and the card works on my old DSi on 1.4.1 and my 3DS with CFW.
I've also tried updating it with the official updater to the one with the horse icon but same thing happens,
I get unsupported cart error. I have 'AKAIO 1.8.9' running on it and it shows as HW81 in the help menu.

edit: I have the same issue as this: https://github.com/kitling/ntrboot_flasher/issues/1
 
Last edited by c4388354,
I get the same thing you get, but its 'EA17C4FF' for both 'ChipID' and 'HW Rev'
(edit: It sometimes shows as FFFFFFFF or 00000000 if i insert the card quickly and try and dump)
I got my Acekard2i around 2011 when the DSi-XL was released, unsure which online store i got it from...
The Card shows up as a 'Chessmaster' icon and the card works on my old DSi on 1.4.1 and my 3DS with CFW.
I've also tried updating it with the official updater to the one with the horse icon but same thing happens,
I get unsupported cart error. I have 'AKAIO 1.8.9' running on it and it shows as HW81 in the help menu.
I got some horse game "Pippa" and It's HW81 for me as well. Maybe it's just a bug at the moment that they need to solve.

EDIT: Intresting now my ChipID is 53F301FF
EDIT2: I got it working. I just went back and retried until it worked (The dumping).
EDIT3: Now it can't find it when I try to flash it. Seems a bit buggy the installer at the moment.
 
Last edited by linuxares,
I got some horse game "Pippa" and It's HW81 for me as well. Maybe it's just a bug at the moment that they need to solve.

EDIT: Intresting now my ChipID is 53F301FF
EDIT2: I got it working. I just went back and retried until it worked (The dumping).

I did manage to get it to dump once, but the output file backup.bin when opened in a hex-editor was just full of FF's.
 
Can someone please do a video of how to start this on a 2ds? I have the flash card setup and I am holding Start+Select+X then switching on and switching sleep button straight away but nothing
 
How does on check that it works on an already hacked 3DS?
Try putting another firm file to activate the chainloader menu, in that case, if you put the magnet and press the combo while its turned off, luma chainloader will pop up even though you didnt press start
 
  • Like
Reactions: democracy
Can someone please do a video of how to start this on a 2ds? I have the flash card setup and I am holding Start+Select+X then switching on and switching sleep button straight away but nothing
Have the sleep mode switch on before you press the power button.
 
Can someone please do a video of how to start this on a 2ds? I have the flash card setup and I am holding Start+Select+X then switching on and switching sleep button straight away but nothing
leave the sleep button in the sleep position, then turn on while holding the other buttons.
 
I did manage to get it to dump once, but the output file backup.bin when opened in a hex-editor was just full of FF's.
I seem to have gotten a valid dump. I wonder if @Normmatt would want a copy of it and analyze it why it seem to be able to dump after a while.
Also it was when the chipid and hwid matched it managed to dump it.

EDIT: http://i.imgur.com/IyT3A3V.png - top of the dump
 
Last edited by linuxares,

Site & Scene News

Popular threads in this forum