Full Guide Release!

https://plailect.github.io/OTP/

All regions now supported!

If you appreciate this guide and the work I put into maintaining it, I accept donations through both Bitcoin and PayPal.

If you felt like the guide helped you out then I'd really appreciate it! If I get enough I may buy a 2DS for testing hardware stuff so I don't break another N3DS.

If the guide didn't help you out then I'm really sorry about that

 

[Plailect]

For some reason the linux version of 3DSFAT16tool decrypts to garbage even after a compile of v2 from source. The windows v2, however, works fine. I'm looking into it. If you bricked n3ds on linux, that's why.

--------------------- MERGED ---------------------------

Fixed, uploading new version now

 

[Just Passing By]

You could maybe try installing it separately with FBI, destination NAND (the latest FBI should offer to automatically uninstall the current one and then install in its place). Since it's not NATIVE_FIRM, it probably shouldn't matter if you use sysUpdater for that particular CIA or not.

Hmm alright if I don't have any other way I will. But since the downgrade process for me errors out at only the 28th cia (yeah I actually counted), and theres 112 that need to be installed in all, what should I do about the remaining 84 uninstalled cias?

I'm looking into it.

Thanks I really appreciate it.

 

[Plailect]

Updated linux version of 3DSFAT16tool uploaded, refresh and redownload.

 

[thaikhoa]

US and EUR, JAP support coming soon

https://plailect.github.io/OTP/

For N3DS
A quick question, where is ctr.bin? Is it CTRNAND Partition on sysNAND or bricked emuNAND (2.1)

3DSFAT16tool (C version) by d0k3
--------------------------------

injecting & encrypting ctr.bin
to emuNAND.bin
using nand.fat16_0x4_.xorpad

open ctr.bin failed!

I've got successfully dumped OTP.bin using O3DS/XL
Thanks for your amazing guide.

 

[democracy]

After I format Emunand using tiny format and complet new 3ds setup, once I exit with home button I can no longer boot back into emunand? Can someone offer some wisdom? thanks

 

[Plailect]

For N3DS
A quick question, where is ctr.bin? Is it CTRNAND Partition on sysNAND or bricked emuNAND (2.1)

3DSFAT16tool (C version) by d0k3
--------------------------------

injecting & encrypting ctr.bin
to emuNAND.bin
using nand.fat16_0x4_.xorpad

open ctr.bin failed!

I've got successfully dumped OTP.bin using O3DS/XL
Thanks for your amazing guide.

CTR.bin is extracted from your emuNAND.bin with the command "3DSFAT16tool.exe -d -n emuNAND.bin ctr.bin nand.fat16_0x5_xorpad"
It is than modified and reinjected with the command "3DSFAT16tool.exe -i -o emuNAND.bin ctr.bin nand.fat16_0x4_xorpad"

 

[thaikhoa]

CTR.bin is extracted from your emuNAND.bin with the command "3DSFAT16tool.exe -d -n emuNAND.bin ctr.bin nand.fat16_0x5_xorpad"
It is than modified and reinjected with the command "3DSFAT16tool.exe -i -o emuNAND.bin ctr.bin nand.fat16_0x4_xorpad"

Do you mean it's extracted from my 9.2 emuNAND.bin then modified and reinjected to the bricked 2.1 emuNAND.bin?

 

[Plailect]

Do you mean it's extracted from my 9.2 emuNAND.bin then modified and reinjected to the bricked 2.1 emuNAND.bin?

No. It is extracted from the bricked 2.1 emuNAND, then modified and reinjected into the bricked 2.1 emuNAND.

--------------------- MERGED ---------------------------

Linux version is still borked. Decrypts only partially to garbage...

 

[thaikhoa]

No. It is extracted from the bricked 2.1 emuNAND, then modified and reinjected into the bricked 2.1 emuNAND.

My bad! I've just done the job. Thanks.

 

[Plailect]

Some updates:

• The linux version is not fucked, it just looked to be.
• 2DS will work, but some emunand related things need to be done first, it will be once again split into a separate guide
• old 3DS guide will be updated to use emunand as well for general safety
• JAP is still on the way
• Once all guides are on emunand for downgrade, Normmatt gets 2.1 working in emunand, and AHP person finishes his 2.x nand restore, I will consider making this guide officially safe enough to use without a hardmod.

 

[thaikhoa]

A very big thank to @Plailect

 

[Plailect]

A very big thank to @Plailect
View attachment 39252

Awesome!

 

[Halo249]

Having a problem. Downgrading to 2.1 in 9.2 gave me errors so I downgraded to 4.2, but then when launching sysupdater and pressing Y it boots me back to the homebrew launcher. Any fixes?

 

[cooroxd]

I'm a little ignorant. What's the benefits of downgrading to 2.1? What's the use of the otp.bin file after dumping it?

 

[fafaffy]

I'm a little ignorant. What's the benefits of downgrading to 2.1? What's the use of the otp.bin file after dumping it?

You can do an ARM9hax which is pretty much the best entry point ever. You hack your 3DS before the home menu or anything important loads.

Pretty much, if things get done and is polished, you can imagine it as BootMii for the 3DS. It would be very difficult to brick, and we can have CFW/etc.. on cold boot startup.

 

[thaikhoa]

Awesome!

Another one

 

[cearp]

You can do an ARM9hax which is pretty much the best entry point ever. You hack your 3DS before the home menu or anything important loads.

Pretty much, if things get done and is polished, you can imagine it as BootMii for the 3DS. It would be very difficult to brick, and we can have CFW/etc.. on cold boot startup.

but what benefits does it really have over homemenuhax? sure bootmii is nice, but since most people use emunand we don't touch sysnand and no real change of bricking/even touching the nand.
like, can we use this unique key to find another key to decrypt our games on the pc, or to reencrypt to our 3ds?

 

[Deleted User]

Used this guide to successfully dump the OTPs of both my O3DS and N3DS without hardmods, thanks.

 

[TR_mahmutpek]

Why we try using arm9loaderhax?

(Sorry for these noob questions)

 

[Ricardo Cariaga]

Why we try using arm9loaderhax?

(Sorry for these noob questions)

lol. back read bro's so your question will be answered..