[POC] - Fixing OFW Blackscreens with Boot9strap

Discussion in '3DS - Flashcards & Custom Firmwares' started by leerz, May 22, 2017.

  1. leerz
    OP

    leerz GBAtemp Advanced Fan

    Member
    529
    134
    Jan 11, 2015
    Makati
    So this is a POC I've been lobbying since the Announcement of Sighax

    the POC was strengthened in concept now with the release of sighax & Boot9strap

    Since the days of 3DS, there have been reports of what we call a "Black screen of death" that even the recovery mode can't fix.
    Signs:
    Back screen upon boot, freezing on HM, even after updating via Recovery. (these are OFW Virgin 3DS')


    perhaps it has something to do with the system prereq's that might have gone bad (bad flashchip/blocks etc)

    Theory is as Follows

    1. Dump Nand of BSOD 3DS
    2. Patch the Nand
    3. Flash to NAND
    4. Launch the Godmode9 Payload
    5. do a CTRnand Transfer to 9x
    6. decide to if you wish to CFW or remain Virgin XD
    7. ?????
    8. Profit

    I have not tested this, but in Theory is should.
    I have a N3ds with this exact issue and will probably do the procedure this week after work lol


    Let me know your thoughts. :)


    -----UPDATE------
     
    Last edited by leerz, May 30, 2017
    Soulsilve2010 likes this.
  2. vb_encryption_vb

    vb_encryption_vb That hardmod guy....

    Member
    1,882
    901
    Nov 21, 2015
    United States
    Acworth, GA
    If you know what firm it was bricked on, just write that firm to the console and your done... If you don't know what version, flash everyone till you find the correct one. ( Could take awhile or just flash firm 0/1 )
     
  3. leerz
    OP

    leerz GBAtemp Advanced Fan

    Member
    529
    134
    Jan 11, 2015
    Makati
    Haven't tried that, but I know this is on 11.3 since from an unknown (bso'd firmware) i updated to latest (when 11.3 was the latest) via Recovery - so I'm almost 100% sure that it is 11.3

    thing is I'm not sure if it is a firm issue and not other system files (which i hope the ctrnand trans will fix)
     
    vb_encryption_vb likes this.
  4. leerz
    OP

    leerz GBAtemp Advanced Fan

    Member
    529
    134
    Jan 11, 2015
    Makati
    okay, just a progress report from my test.

    Here's what I have

    1. Hardmod nand dump "nand.bin"
    2. Patched the "nand.bin" (used hardmod b9 installer)
    3. reflashed "patched nand.bin"
    4. setup the luma files (gm9)

    So I have Luma (config) loading (I can set show nand string / brightness / l2 clocks etc)
    I can also access Godmode9, view CTR Contents and other Partitions.

    Result:

    Test 0 - Raw setup - Blackscreen but still with sounds
    Test 1 - CTRNAND Donor Ctrnand 11.3 - Blackscreen but still with sounds
    Test 2 - CTRNAND NEW 9.2(same region) - Blackscreen but still with sounds
    Test 3 - CTRNAND NEW 9.2 (different region) - Blackscreen but still with sounds
    Test 4 - CTRNAND old/new 2.1 (same Region) - Just an error on Luma

    What I will test later
    1. setup an Emunand and boot it (not sure if it will make a difference)
    2. ???
    3. ???
     
    Last edited by leerz, May 25, 2017
    Soulsilve2010 likes this.
  5. OrGoN3

    OrGoN3 GBAtemp Addict

    Member
    2,043
    460
    Apr 23, 2007
    United States
    So basically what you're saying is, this doesn't work.
     
  6. leerz
    OP

    leerz GBAtemp Advanced Fan

    Member
    529
    134
    Jan 11, 2015
    Makati
    "YET"

    Somehow, there's something that's not allowing the 3DS to boot properly -

    The System freezes after a while (You can hear the sound upon boot, press a few buttons, then freeze * buttons no longer responding along with the touch)

    just not sure if this is indeed software related or a totally different thing (Black screen caused by the WiFi, as seen on the Wii and afaik DS's )
     
    Last edited by leerz, May 25, 2017
    Mexicalipc and OrGoN3 like this.
  7. vb_encryption_vb

    vb_encryption_vb That hardmod guy....

    Member
    1,882
    901
    Nov 21, 2015
    United States
    Acworth, GA
    You are flashing the correct firm that was on the system at the time of brick?
     
  8. mitroux

    mitroux GBAtemp Regular

    Member
    263
    51
    Sep 12, 2007
    Macau
    leerz , i already fixed a 3dsxl having that black screen of death
    the problem comes from moveable sed file , (ctrnand/private/moveable.sed)
    you'd better flash your patched 11.3 nand (no ctr transfer) patched with b9 , then use godmode to replace the moveable file with the 0 key moveable sed file from this theard :
    https://gbatemp.net/threads/release-0-key-movable-sed-『no-more-cia-installation-』.433356/
    after , the 3ds boot normally , just format you 3ds so the ciorrect key x (or key y maybe) , get set proprely (the file contains also the localfriendcodeseed data set )
    good luck
     
    Last edited by mitroux, May 25, 2017
  9. leerz
    OP

    leerz GBAtemp Advanced Fan

    Member
    529
    134
    Jan 11, 2015
    Makati
    Trying that now! Will get back to you!
     
    Last edited by leerz, May 25, 2017
  10. liomajor

    liomajor GBAtemp Maniac

    Member
    1,463
    1,065
    Jun 10, 2008
    United States
    @leerz

    Depending of what did break, it might work or not.

    As mitroux said, it can be a missing moveable.sed, also it could be broken settings > \data in nand.

    Using godmode9 after patching nand, you can open and remove all content from \data
    (not the folder itself!) to simulate a factory reset. Next boot should take a little bit longer
    and asks for first time settings (remove nintendo3ds folder from memorycard!).

    decrypt9 allows dumping system files, dump them to check if anything else is missing or broken.

    In any case, keep a nand backup before doing any changes!
     
    Last edited by liomajor, May 25, 2017
  11. mitroux

    mitroux GBAtemp Regular

    Member
    263
    51
    Sep 12, 2007
    Macau
    just replacing the moveable sed will make the 3ds boot like after a format or just the first time to boot ( it take about 20 seconds to start up)
     
  12. liomajor

    liomajor GBAtemp Maniac

    Member
    1,463
    1,065
    Jun 10, 2008
    United States
    True, but if he doesn't replace moveable.sed, cleaning out \data should do the trick.
     
  13. leerz
    OP

    leerz GBAtemp Advanced Fan

    Member
    529
    134
    Jan 11, 2015
    Makati
    Thanks

    just flashing my 11.3 bin file back.

    I forgot which FW the last i ctrtransferred last night.

    so here are my next steps.

    Flash my patched nand bin back (for a more factory setup)
    put the 0 movable.sed
    clear the data folder

    (i backed all those up in gm9out)

    eta 6m for the reflash according to gm9
     
  14. mitroux

    mitroux GBAtemp Regular

    Member
    263
    51
    Sep 12, 2007
    Macau
    i think that the problem comes from that file , it got corrupted somehow (because it contains majority of key_y to decrypt stuff on nand during boot up
    that's what written in 3ds brew : The movable.sed keyY is only used for AES MACs for nand/data/<ID0>. The nand/data/<ID0>/extdata directory contains the shared extdata, and is structured exactly the same way as SD extdata.
     
    Last edited by mitroux, May 25, 2017
  15. Spore2

    Spore2 GBAtemp Regular

    Member
    206
    51
    Jan 12, 2016
    I also started this on a 2ds blackscreen. Problem is I don't know the original firm version and if it is a nand corruption problem at all.
     
  16. mitroux

    mitroux GBAtemp Regular

    Member
    263
    51
    Sep 12, 2007
    Macau
    you can always try a hardmod and patching the nand , if the problem presists , you can can flash back your dumped corruptrd nand back
    don't forget to get 2 copies of your nand , because the hardmod-b9s-installer program doesn't make a backup during patching
     
    Last edited by mitroux, May 25, 2017
    Spore2 likes this.
  17. leerz
    OP

    leerz GBAtemp Advanced Fan

    Member
    529
    134
    Jan 11, 2015
    Makati
    So I flashed it back
    cleared the data folder
    put the 0 movable sed

    blacksreen

    I realized it could take longer so i waited around 5 minutes more.
    still Blackscreen

    here are my next steps.
    try the ctrnand 9x again
    clear the data and redo the 0movable

    just trying all the possibilities.

    Which sort of "system files" should I check?




    btw, this is OT:
    I noticed the 3ds.guide's been updated - no longer shows the hardmod option :P
    https://3ds.guide/installing-boot9strap-(hardmod).html
    Thanks
     
  18. mitroux

    mitroux GBAtemp Regular

    Member
    263
    51
    Sep 12, 2007
    Macau
    can you access the recovery mode?
     
  19. Spore2

    Spore2 GBAtemp Regular

    Member
    206
    51
    Jan 12, 2016
  20. leerz
    OP

    leerz GBAtemp Advanced Fan

    Member
    529
    134
    Jan 11, 2015
    Makati
    Yes, I can,

    I actually tried that just a while ago and updated to the latest.
    There's a note regarding this. Hardmod still works.[/QUOTE]

    Yes I read that too. it is no longer in the Chart
     
    Last edited by leerz, May 25, 2017
    Spore2 likes this.