Full Guide Release!

https://plailect.github.io/OTP/

All regions now supported!

If you appreciate this guide and the work I put into maintaining it, I accept donations through both Bitcoin and PayPal.

If you felt like the guide helped you out then I'd really appreciate it! If I get enough I may buy a 2DS for testing hardware stuff so I don't break another N3DS.

If the guide didn't help you out then I'm really sorry about that

 

[Just Passing By]

So i dont inject it to sysnand i do it to emunand? Im confused where they said just downgrade emunand to 2.1 but i thought thats what we were supposed to do to begin with.

No you can't get OTP from emunand only sysnand

 

[Chuu]

Wait, since you're formatting emunand, wouldn't that disconnect your nnid from your device?

 

[FenrirWolf]

Not if you use TinyFormat. The idea is that after you're done with everything, you restore your old emunand backup and get right back to where you were before you started the process to get your OTP dump.

 

[Audioboxer]

Bricked whilst trying to get arm9loaderhax.3dsx executed (it loaded and ran what looked to be the code, but then blackscreened). If you're a newbie like me I'd stay well clear for now!

 

[urherenow]

So i dont inject it to sysnand i do it to emunand? Im confused where they said just downgrade emunand to 2.1 but i thought thats what we were supposed to do to begin with.

What? I'd ask if you were actually following the guide, but you don't even understand what I wrote... Perhaps you shouldn't do this thing because you can BRICK. I hope your system is hard modded...

 

[Stack3r]

What? I'd ask if you were actually following the guide, but you don't even understand what I wrote... Perhaps you shouldn't do this thing because you can BRICK. I hope your system is hard modded...

I am reading the guide, im doing stuff step by step. It doesnt hurt to ask if you are confused by multiple peoples input on what to do.

 

[Raugo]

https://gbatemp.net/threads/otp-guide.415140/page-19#post-6084203

Put a 9.2 sysnand backup at /NAND.bin

How work this decrypt9? I launched it from the browser but the browser as been freezed can i turn off my 3ds or is working?

Edit: Ok, I don't rename the decrypt9 to arm9. Now works well.

 

[Just Passing By]

Ugghhhh so let me get this straight. You have to format emunand through Tinyformat, then downgrade, then what? Can you go from there to sysnand or no?

 

[laramie]

It's probably for the best, I bricked @laramie 's n3ds several times. Not saying I didn't enjoy that, though.

Hey, if anyone wants an amazing brick code, I have one that deletes 1/2 of nand!

 

[Mrrraou]

Hey, if anyone wants an amazing brick code, I have one that deletes 1/2 of nand!

can I use it with arm9loaderhax?

 

[Just Passing By]

I don't know if tinyformat works from HBL, sysupdater definitely doesn't. You need to install it in .cia. I did it using Brickway, I suppose you could do it with FBI (as the emunand will have 9.0, so I think FBI should work on it). So, using the entrypoint of your choice, get into HBL, open FBI, install tinyformat .cia, use it to format, configure emuNAND, get into HBL again on emuNAND, open FBI, install sysupdater, downgrade to 2.1 (check that there were no errors), if you wish make safety checks, dump emuNAND, create xorpads, decrypt/re-encrypt ctrnand with the xorpads, paste header, flash on sysnand and pray.

OK how do you do all these safety checks cause I ain't bricking mine yet?

 

[AHP_person]

can I use it with arm9loaderhax?

Absolutely

 

[Nintendo4DSXL]

Absolutely

Short Question: Did you get a9lh to run?

 

[laramie]

Yes a9lh works

 

[Nintendo4DSXL]

Yes a9lh works

When you use the installer what exectly did it?
On my and on @Audioboxer n3ds its (craches?) it gets black and do nothing and now it loads nothing

 

[Audioboxer]

When you use the installer what exectly did it?
On my and on @Audioboxer n3ds its (craches?) it gets black and do nothing and now it loads nothing

We're definitely bricked! Only option is hardmod.

 

[laramie]

if it just powers off like ~1 second then it worked. All thats
's needed is to write a payload with sig patches to nand

 

[Stack3r]

So i completed step 1 on the n3ds without cubic ninja tutorial, now just follow step 2 step by step? Nothing extra to add?

 

[laramie]

yeah, just DG. then dump otp

 

[Stack3r]

yeah, just DG. then dump otp

So why is the brick rate so high? Is it because n3ds doesnt fully recognize 2.1 firmware?