Nintendo 3ds: Difference between revisions

From miki
Jump to navigation Jump to search
 
(54 intermediate revisions by the same user not shown)
Line 1: Line 1:
== CAUTION ==
== Summary ==
{| class=wikitable
'''{{red|ON SYSNAND, DO NOT DO A FIRMWARE UPDATE WHEN IN GATEWAY MODE - DOING SO WILL DELETE A9LH AND PROBABLY BRICK THE 3DS. THE A9LH LOADER FROM GATEWAY DOES NOT HAVE THE FIRM PROTECTION THAT PREVENTS REMOVAL OF A9LH.}}''''
|-
! Module !! New 3DS XL Blue !! New 3DS XL Samus
|-
| Boot || B9S v1.3 (boot9strap) || B9S v1.3 (boot9strap)
|-
| CFW || [https://github.com/AuroraWright/Luma3DS Luma3DS] v9.1 || [https://github.com/AuroraWright/Luma3DS Luma3DS] v9.1
|-
| Luma payload || GodMode9 v1.7.1 || GodMode9 v1.7.1
|}
Both systems hacked using [https://3ds.hacks.guide/ Plailect's 3DS guide].

;Luma3DS
* {{kb|START + POWER}} — Go to '''chainloader''' menu (files in {{file|/luma/payloads}}).
* {{kb|SELECT + POWER}} — Go to Luma3DS config menu
* {{kb|SELECT + X + POWER}} — Dump the ARM11 bootrom (boot11.bin), the ARM9 bootrom (boot9.bin), and your console unique OTP (OTP.bin) to the /boot9strap/ folder on your SD card (note that this will not have any kind of prompt or message)
* {{kb|L + POWER}} (maybe old version) — Boot alternateNAND (emuNAND)

When booted, the following in-game commands are available:
* {{kb|L + DOWN + SELECT}} -- Lauch Rosalina (cheat, debug, HB launcher)

=== Maintenance ===
;Update Luma3DS
* Use ''LumaUpdater'' , or see Plailect's guide.
;Update B9S
* See Plailect's guide.
;Update GodMode9
* Download {{file|.firm}} file from GitHub, and install it in {{file|/luma/payloads}}.

=== History ===

;New 3DS XL Blue
* Original system <code>9.9.0-26E</code>.
* Install '''A9LH''' (arm9loaderhax) following Plailect's guide (see '''wiki history''' before 2018/12/08).
* Update system to 11.0.0_33E
:Some issues with HB Launcher. Fixed by updating Luma 3DS, and following Plailect's guide.
* Update to '''B9S'''.

;New 3DS XL Samus
* System version <code>11.4.0-37E</code>.
* Installed '''B9S''' using Plailect's guide.


== Links ==
== Links ==
;Hack guides
* [https://3ds.hacks.guide/ Plailect's 3DS guide].
: The main guide to hack a 3DS and install B9S / Luma3DS.

;Database
;Database
* http://www.3dsdb.com/
* http://www.3dsdb.com/
* https://3dbrew.org/wiki/Title_list &mdash; List of <code>TitleID</code>.


;Custom firmware
;Custom firmware (CFW)
* [https://github.com/AuroraWright/Luma3DS Luma3DS] (was ''Aureinand'') ([https://github.com/AuroraWright/Luma3DS/wiki Luma3DS Wiki], [https://github.com/AuroraWright/Luma3DS/releases download], [https://gbatemp.net/threads/luma3ds-noob-proof-3ds-custom-firmware.411110/page-586 GBATemp Thread]).
* Aureinand / Luma3DS
: The '''recommended CFW''' in Plailect's guide.
:* [https://github.com/AuroraWright/Luma3DS/wiki Luma3DS Wiki] / [https://github.com/AuroraWright/Luma3DS/releases Download on GitHub]
* [https://github.com/d0k3/GodMode9 GodMode9]
:* [https://gbatemp.net/threads/luma3ds-noob-proof-3ds-custom-firmware.411110/page-586 GBATemp Thread]
: See '''Usage guide''' in Plailect's guide [https://3ds.hacks.guide/godmode9-usage.html here].
: Can be installed as Luma3DS payload.
* [https://github.com/d0k3/Decrypt9WIP Decrypt9WIP]
: '''Old''' &mdash; superseded by GodMode9.

;Wikis
* [https://www.3dbrew.org/wiki/Main_Page 3DBrew] -- a wiki dedicated to homebrew on the Nintendo 3DS.


;Homebrew Launchers:
;Homebrew Launchers:
Line 15: Line 67:
* https://github.com/yellows8/hblauncher_loader/releases
* https://github.com/yellows8/hblauncher_loader/releases
Loader as CIA for CFW.
Loader as CIA for CFW.

;Original flashcard:
* [http://www.gateway-3ds.com/ gateway 3ds] -- Original manufacturer of the Gateway 3DS flashcard (the red and blue one)
* [http://www.gateway3ds.info/ gateway3ds] -- an alternate site it seems, but with more detailed info


;GBAtemp.net wiki:
;GBAtemp.net wiki:
* [http://wiki.gbatemp.net/wiki/Gateway_3DS Gateway 3DS]
* [http://wiki.gbatemp.net/wiki/Gateway_3DS Gateway 3DS]
* [http://wiki.gbatemp.net/wiki/3DS_Flashcart_FAQ 3DS Flashcart FAQ] -- A must read
* [http://wiki.gbatemp.net/wiki/3DS_Flashcart_FAQ 3DS Flashcart FAQ] -- A must read

=== Gateway links ===
;Gateway flashcard
* [http://www.gateway-3ds.com/ gateway 3ds] -- Original manufacturer of the Gateway 3DS flashcard (the red and blue one)
* [http://www.gateway3ds.info/ gateway3ds] -- an alternate site it seems, but with more detailed info

=== Old links ===


;Youtube tutorials (informative, but not essential):
;Youtube tutorials (informative, but not essential):
Line 40: Line 95:
;Stuff:
;Stuff:
* https://github.com/yellows8/hblauncher_loader
* https://github.com/yellows8/hblauncher_loader
* [https://gbatemp.net/threads/tutorial-noob-friendly-nand-dumping-2ds-3ds-3ds-xl-n3ds-n3ds-xl.414498/ hard-mode install guide]
*a ''certain'' website, or ''iso'' site: this refers to http://www.3dsiso.com.
* Firmware <code>2.1.0E(Full).zip</code>, downloaded from [https://drive.google.com/file/d/0BzPfvjeuhqoDajdOM1QyQlhjRUk/view Google Drive] (from [https://github.com/Plailect/Guide/wiki Plailect A9LH Guide])
sha256sum 5736ec8d40303b549f11c06b3811817531e17646a91ee2bb0d94afff69cf3a4e 2.1.0E(Full).zip
* Get DevMenu / SaveDataFiler from link "[MEGA] Retail Encrypted DevApps! (Caution. These will install to NAND!)" (see guide [https://gbatemp.net/threads/howto-install-devmenu-and-savedatafiler-to-nand-to-survive-formats-and-sd-card-wipes.421501/])


;Interesting stuff to look someday:
;Interesting stuff to look someday:
Line 45: Line 105:
* [https://github.com/hartmannaf/BootCtr9/wiki BootCtr9], a boot manager for A9LH, including a fork of A9LH. Might help loading Gateway A9LH payload (see [https://gbatemp.net/threads/tutorial-guide-using-multiple-a9lh-payloads-without-r-l-buttons-setting-up-bootctr9-boot-manager.419827/ here] for quick setup guide).
* [https://github.com/hartmannaf/BootCtr9/wiki BootCtr9], a boot manager for A9LH, including a fork of A9LH. Might help loading Gateway A9LH payload (see [https://gbatemp.net/threads/tutorial-guide-using-multiple-a9lh-payloads-without-r-l-buttons-setting-up-bootctr9-boot-manager.419827/ here] for quick setup guide).


== Hardware specification ==
== General information ==
;3DS processors
Specification of our '''nintendo 3ds'''
* New 3DS
* Arm9,
* Arm11.
* Firmware: 9.9.0-26E

== General ==
;Hardware
* Processor in N3DS: Arm9, and also Arm10?


;3DS variants
;3DS variants
* 2DS,
* There are 3 types of 3DS:
* O3DS, the original 3DS (aka. Old 3DS), and
** The 2DS
** The O3DS, the original 3DS (aka. Old 3DS), and
* N3DS, the new 3DS that features among others a new StickC button.
** The N3DS, the new 3DS that features among others a new StickC button.

;Firmware
* The N3DS '''CANNOT''' be downgraded to 4.x firmware


=== Glossary ===
=== Glossary ===
Line 69: Line 121:
:* '''SysNAND''' refers to the original data/system information on a NAND chip embedded in the 3DS.
:* '''SysNAND''' refers to the original data/system information on a NAND chip embedded in the 3DS.
:* '''EmuNAND''' refers to a backup/copy/emulated version of your SysNAND that runs off the SD card.
:* '''EmuNAND''' refers to a backup/copy/emulated version of your SysNAND that runs off the SD card.

The best SySNAND version (i.e. ''System Menu version'', see below) for now is 9.2.


* SD Card
* SD Card
:* '''3DS microSD card''' -- The 3DS comes bundled with an SD card (O3DS) or a microSD card (N3DS). When EmuNAND is setup, it contains two partitions.
:* '''3DS microSD card''' -- The 3DS comes bundled with an SD card (O3DS) or a microSD card (N3DS). When EmuNAND is setup, it contains two partitions.
The EmuNAND partition, when present, is formatted via the homebrew program EmuNAND9.
:: The EmuNAND partition, when present, is formatted via the homebrew program EmuNAND9.
The other partition stores homebrew, custom themes, save files, eShop and .cia home menu channels. It must be formatted as FAT32, cluster size 32kB.
:: The other partition stores homebrew, custom themes, save files, eShop and .cia home menu channels. It must be formatted as FAT32, cluster size 32kB.
:* '''Gateway microSD card''' -- On system with flashcards (like Gateway or Sky3DS), there is a second microSD in the flashcard that contains ROM games (.3ds or .3dz rom images).
:* '''Gateway microSD card''' -- On system with flashcards (like Gateway or Sky3DS), there is a second microSD in the flashcard that contains ROM games (.3ds or .3dz rom images).


Line 82: Line 132:
:* '''Custom Firmware, CFW''' -- A program launched by an exploit (like DS profile exploit or MenuHax) that patches the System Menu in memory, and then "jumps" back to it.
:* '''Custom Firmware, CFW''' -- A program launched by an exploit (like DS profile exploit or MenuHax) that patches the System Menu in memory, and then "jumps" back to it.


* Homebrew
:* '''ARM9 homebrew''' -- Applications (aka. ''ARM9 payloads'') that run on the ARM9 processor on the 3DS. Note that applications running on the ARM9 have the most privileges (see ARM9 section).


== Games ==
=== Technical ===
* Regular SysNAND size = 0x003B0000 x 0x0100 bytes
* Look on 3dsdb.com for the releasename of a given game (for instance <code>New.Super.Mario.Bros.2.EUR.3DS-CONTRAST</code> for _New Super Mario Bros 2_).
* Technical reference 3dbrew site, like https://www.3dbrew.org/wiki/NCCH
* Search the releasename on Google.
* Download.


=== Nintendo FW History ===
History - games:
* 6.1.0-12 &mdash; Blue gateway card blacklisted.
* New Super Mario Bros 2 <code>New.Super.Mario.Bros.2.EUR.3DS-CONTRAST</code>: http://nitroroms.com/show/file-info/200204/unk/unk
* Tomodachi life, v0.2 <code>Tomodachi.Life.v02.EUR.3DS-CONTRAST</code> : http://www.nds-passion.xyz/download--dd13612.html

History - website:
* http://www.nds-passion.xyz -- Requires subscription, but quality links and little nags (many different possibilities for download).


== How-to ==
== How-to ==
=== Transfer file from / to microSD card via WIFI ===
=== Transfer file from / to microSD card via WIFI ===
; Using Homebrew - [https://github.com/mtheall/ftpd ftpd (aka. Super ftpd II Turbo)]
* For instance, connect with ''Midnight Commander'':
<source lang=bash>
cd ftp://192.168.43.242:5000/
</source>
* Review:
:* Worked flawless over mobile hotspot tethering.
:* Some files / folder missing (in particular in root folder). No idea why.
:*{{red|'''Issue'''}} &mdash; Midnight Commander is quite unstable. For maximum stability, launch mc, connect & transfer, then '''exit''' mc.

; Using Nintendo microSD application
; Using Nintendo microSD application
From [http://gaming.stackexchange.com/questions/207147/new-3ds-microsd-management-connecting-from-linux]
From [http://gaming.stackexchange.com/questions/207147/new-3ds-microsd-management-connecting-from-linux]
Line 111: Line 168:
</source>
</source>


;Using FTP-3DS
; (OLD) Using FTP-3DS
* From [https://mega.nz/#!6RImwRAD!gcvCWL8CvXyQaY8FBtNPlq5coOORFIcci0zFpHZHljM]
* From [https://mega.nz/#!6RImwRAD!gcvCWL8CvXyQaY8FBtNPlq5coOORFIcci0zFpHZHljM]
* Errors on connect.

; (OLD) Using ftBrony
* Use homebrew application ''ftBRONY''. It is available in the default HB launcher kit. See [http://joshuaeagles1.wix.com/3ds-homebrew-guide#!ftp-file-transfers/k2uj4] for details.
* To connect, launch the app to get IP and port number.
* Start a FTP client. For instance in ''Midnight Commander'':

<source lang=text>
cd ftp://192.168.1.33:5000/
</source>

=== Dump a 3DS cartridge ===
;GodMode9
* See [https://3ds.hacks.guide/godmode9-usage.html GodMode9 Usage] on Plailect's guide, or [https://github.com/citra-emu/citra/wiki/Dumping-Game-Cartridges Citra wiki].
* Start GodMode9 (press {{kb|START + POWER}}).
* Navigate to <code>[C:] GAMECART</code>.
* For '''3DS Game Cartridge''':
:* Press {{kb|(A)}} on <code>[TitleID].trim.3ds</code> to select it, then select <code>NCSD image options…</code>, then select <code>Build CIA from file</code> to produce a {{file|.cia}} file or <code>Decrypt file (0:/gm9out)</code> to produce a {{file|.3ds}} file.
* For '''NDS Game Cartridge''':
:* Press {{kb|(A)}} on <code>[TitleID].trim.nds</code> to select it, then select <code>Copy to 0:/gm9/out</code>.

;(old) DecryptWIP9
* Had some issue with ''Mario Kart 7'' (game crashed in the middle of a race).

;(old) Uncart
* tbc.

=== Dumping a Title ===

;GodMode9
* Start GodMode9 (press {{kb|START + POWER}}).
* To dump a user installed title, navigate to <code>[A:] SYSNAND SD</code>. To dump a system title, navigate to <code>[A:] SYSNAND SD</code>.
* Hold {{kb|(R)+(A)}} to open drive options.
* Select <code>Search for titles</code>.
* Press {{kb|(A)}} to continue.
* Press {{kb|(A)}} on the {{file|.tmd}} file to select it, then select <code>TMD file options...</code>, then select <code>Build CIA (standard)</code> to generate a {{file|.cia}} file in {{file|/gm9/out}} on the SD card.

See also [https://github.com/citra-emu/citra/wiki/Dumping-Installed-Titles Citra's guide].


=== Convert a .3ds game into .cia game ===
=== Convert a .3ds game into .cia game ===


;Using 3DS Simple CIA Converter
;On PC, using 3DS Simple CIA Converter
* Latest version : 4.3, 2015-07-03. [https://gbatemp.net/threads/release-3ds-simple-cia-converter.384559/ guide and download here]
* Latest version : 4.3, 2015-07-03. [https://gbatemp.net/threads/release-3ds-simple-cia-converter.384559/ guide and download here]
786dcbba10092cf57ae007d08ac8f916e764d93684f5e8d052a963922881740e 3DS Simple CIA Converter v4.3.rar
786dcbba10092cf57ae007d08ac8f916e764d93684f5e8d052a963922881740e 3DS Simple CIA Converter v4.3.rar
Line 123: Line 218:
* Copy the .3ds file into the roms/ folder
* Copy the .3ds file into the roms/ folder
* Click the generate ncchfile stuff button
* Click the generate ncchfile stuff button
* Copy the file to 3DS uSD root folder.
* Copy the file to 3DS uSD card, in folder {{file|/files9/}}.
* Launch Decrypt9. Select <code>XORpad Generator Options</code> and <code>NCCH Padgen</code>.
* Launch Decrypt9. Select <code>XORpad Generator Options</code> and <code>NCCH Padgen</code>.
:Ignore error about missing {{file|seeddb.bin}} file.
:Ignore error about missing {{file|seeddb.bin}} file.
Line 130: Line 225:
* When done, copy the .cia file to 3DS uSD and import them using FBI or BigBlueMenu.
* When done, copy the .cia file to 3DS uSD and import them using FBI or BigBlueMenu.


;On the 3DS, using GodMode9
;Using Decrypt9
* Start GodMode9 (press {{kb|START + POWER}}).
* Can extract {{file|.cia}} file directly from the cartridge.
* Navigate to <code>[0:] SDCARDcias</code>, then <code>cias</code> folder.
: ''But I had an issue with Mario Kart 7...''
* Press {{kb|(A)}} on the {{file|.3ds}} file to select it, then select <code>NCSD image options…</code>, then select <code>Build CIA from file</code> to generate a {{file|.cia}} file in {{file|/gm9/out}} on the SD card.


;Other converters or guides:
;Other converters or guides:
Line 138: Line 234:
* https://www.reddit.com/r/3dshacks/comments/40etaz/
* https://www.reddit.com/r/3dshacks/comments/40etaz/
* http://3ds-flashcard.com/blog/tutorial-how-to-convert-3ds-game-to-cia/
* http://3ds-flashcard.com/blog/tutorial-how-to-convert-3ds-game-to-cia/
* https://www.reddit.com/r/3dshacks/comments/4hwuhf/
:* See also https://www.reddit.com/r/3dshacks/comments/4n2uek/guide_generating_seeddbbin_for_converting_newer/, for generating a <code>seeddb.bin</code> file, needed for some games.k


=== Installing .cia from the network ===
=== Installing .cia from the network ===
Line 147: Line 245:
</source>
</source>


=== Downgrade firmware (with A9LH) ===
=== Backup / restore savegames ===
'''Only do this on CFW with A9LH and FIRM protection of course'''


See https://github.com/Plailect/sysDowngrader
;Using [https://github.com/FlagBrew/Checkpoint Checkpoint]
* Install ''Checkpoint'' with {{file|.cia}} file.
* Create dir {{file|/updates}} on microSD, and extract inside all fw .cia files (for instance, using [http://gbatemp.net/threads/3dnus.376488 3DSNUS])
* Usage is straightforward.
* Install Plailect [https://github.com/Plailect/sysDowngrader sysDowngrader] as CIA
* Used successfully to transfer saves between consoles for ''Hyrule Warrior Legends'', ''Ocarina of Time'', ''A Link Between Worlds''...
* Run the downgrader.


;Using [https://github.com/J-D-K/JKSM JKSM]
'''{{red|Does NOT work. Application complains it can open directory /updates, although it exists}}'''
* Reference: [https://github.com/J-D-K/JKSM GitHub], [https://gbatemp.net/threads/release-jks-savemanager-homebrew-cia-save-manager.413143/ gbatemp]
* Get CIA file from GitHub.
* Note: Running <code>MHGSV.3dsx</code> from HomeBrew gives an error <code>Error opening MHG's ExtData! Error opening MHG's Extra Data! Press start to exit</code>. On CFW like Luma3DS, don't bother running the 3dsx version, but instead runs the CIA version [https://www.reddit.com/r/MonsterHunter/comments/4w2xtq/guide_backing_up_your_mhgenmhx_save_file/].
* JKSM can also sets '''play coins''' to any arbitrary value (max 300?).


;Anti-Savegame Restore
=== Use Gateway Beta 4.1B on A9LH / Luma 3DS ===
* {{red|'''Caution'''}} &mdash; Some games implement anti-savegame restore features. See https://www.3dbrew.org/wiki/Anti_Savegame_Restore.
* Install the {{file|v2gw.bin}} / {{file|gateway.bin}} trick

* Hold <code>down</code> key when booting to boot into Gateway mode.
;(old) Using SaveDataFiler (Dev kit leaked from Nintendo)
: Better make sure you have an EmuNAND setup (safer).
* Usage guide ([http://www.maxconsole.com/maxcon_forums/threads/287072-Game-saves-and-how-to-manage-them guide and info], [http://www.logic-sunrise.com/forums/topic/64198-savedatafiler-decrypter-et-modifier-ses-sauvegardes/ guide 1], [https://gbatemp.net/threads/tutorial-how-to-export-import-gateway-card1-sav-to-eshop-3ds-3dz-with-savedatafiler.380246/ guide 2]):
* When seeing the dragon logo:
:* This can be used to backup 3DS ROM / cartridge / eshop / cia games, or exchange saves between all these.
:* Do nothing to go to home menu
:* For 3DS ROM, select the game using Gateway but don't launch it. For cartridge, insert the cartridge first.
:* Hold L + Select to go to Gateway Menu
:* Start SaveDataFiler
:* Hold R to update the Red Card.
:To backup a savegame:
* In Home Menu, press Select to select another ROM on the card.
:* For ROM/cartridge, select CTR Card, or the game id for eshop / cia.
::For some games (like Fantasy Life), go to extdata/ and select the correct id (Fantasy Life <code>00001131</code>).
:To restore a savegame:
:* Go to SD tab. For ROM/cartridge, select the file and press L+A. For eshop / cia, press R+A. For extdata/ games (like Fantasy Life), simply press A.
:'''Caution'''. For card1 games (except Fantasy Life), rename the file 000400000FF40A00.sav to game id.
:'''Caution'''. For card2 games, the save are stored within the game itself. So for GW rom, the save are stored in the .3ds file on the red gateway card!

== A9LH ==
Source: https://github.com/Plailect/Guide/wiki

* Excellent troubleshooting section (to avoid bricking)

* Downgrade the firmware: https://gbatemp.net/threads/simple-guide-to-downgrading-your-3ds.407888/

== Gateway ==

'''{{red|ON SYSNAND, DO NOT DO A FIRMWARE UPDATE WHEN IN GATEWAY MODE - DOING SO WILL DELETE A9LH AND PROBABLY BRICK THE 3DS. THE A9LH LOADER FROM GATEWAY DOES NOT HAVE THE FIRM PROTECTION THAT PREVENTS REMOVAL OF A9LH.}}''''

The '''Gateway flashcart'''.


== Gateway flashcart ==
;Status
;Status
* [https://gbatemp.net/threads/the-status-of-gateway-and-a9lh.427889/ the-status-of-gateway-and-a9lh]
* [https://gbatemp.net/threads/the-status-of-gateway-and-a9lh.427889/ the-status-of-gateway-and-a9lh]
Line 174: Line 293:
* [http://www.maxconsole.com/votings/63/edit Add anti-brick protection when using SysNAND mode with A9LH (i.e. FIRM0/FIRM1 protection on firmware update, like e.g. in Luma 3DS)]
* [http://www.maxconsole.com/votings/63/edit Add anti-brick protection when using SysNAND mode with A9LH (i.e. FIRM0/FIRM1 protection on firmware update, like e.g. in Luma 3DS)]


== List of Haxes ==
=== Info ===
* BrowserHax
* TubeHax
* MenuHax

== BrowserHax ==
Reference: https://yls8.mtheall.com/3dsbrowserhax.php
For NEW3DS:
http://yls8.mtheall.com/browserhax_fright_tx3g.php

== Downgrade the firmware ==
https://gbatemp.net/threads/simple-guide-to-downgrading-your-3ds.407888/

== Info ==
* microSD card
* microSD card
: The 3DS comes with a pre-bundled microSD card that is used to store user custom data like themes, but also pictures. We refer to it as the 3DS microSD card.
: The 3DS comes with a pre-bundled microSD card that is used to store user custom data like themes, but also pictures. We refer to it as the 3DS microSD card.
Line 205: Line 311:
: Pending. See [http://www.maxconsole.com/maxcon_forums/threads/289649-FAQ-Supported-System-Versions-O3DS-2DS-N3DS?p=1767395#post1767395 this comment] and follow-up answers.
: Pending. See [http://www.maxconsole.com/maxcon_forums/threads/289649-FAQ-Supported-System-Versions-O3DS-2DS-N3DS?p=1767395#post1767395 this comment] and follow-up answers.


== A9LH ==
=== Tips ===
*Distinguish EmuNAND and SysNAND
Source: https://github.com/Plailect/Guide/wiki
* (source Gateway manual) To easily differentiate between booting from SysNAND or EmuNAND, just setup folders with initials "S Y S" for SysNAND, and "E M U" for EmuNAND.
:Not that setting a theme color does not work since themes are shared by both NAND.


*Boot back directly in SysNAND*
* Excellent troubleshooting section (to avoid bricking)
* Simply go to the System Settings, and leave. '''LEAVING SYSTEM SETTINGS !ALWAYS! RESUME INTO SYSNAND, SO BE CAREFUL NOT TO DO ANY UPDATE THERE!'''

=== Shortcuts ===
* hold 'L' when booting Gateway menu --> Go into Gateway menu.
* In gateway menu, hold down + B to power off.
* In GW Menu, HBL Menu: 'B' is often used to exit.
* Hold D-PAD Down button while booting to boot into HBL (MenuHax shortcut, configured as Type1).


== History ==
=== Reference manual ===
=== Reference manual ===
* http://www.gateway-3ds.com/
* http://www.gateway-3ds.com/
Line 220: Line 334:
: Including the Menuhax manager
: Including the Menuhax manager
* [http://3dsfirmware.blogspot.be/2016/01/mega-ciabin-mset-4x-6x-backups-browser.html List of System Menu firmwares] (including MSET version, browser version...)
* [http://3dsfirmware.blogspot.be/2016/01/mega-ciabin-mset-4x-6x-backups-browser.html List of System Menu firmwares] (including MSET version, browser version...)

=== Setup ===
* New 3DS with firmware 9.9.0-26E (Out-of-the-box, ie. no WiFi profile, etc).

=== Firmware downgrade ===

* Using <code>9.2.0-20E(Full)_n3DS.zip</code> downloaded from [http://3dsfirmware.blogspot.be/2016/01/mega-ciabin-mset-4x-6x-backups-browser.html here] (google query <code>[MEGA] [CIA/BIN] MSET 4.X & 6.X backups, Browser backups, Update packs (All Regions)</code>)
(md5sum) aaa5960a3061da1f08d944d8e7017bd6 9.2.0-20E(Full)_n3DS.zip
(sha1sum) 306d0aa8cd195f9ee4388a9686db5658a330b59b 9.2.0-20E(Full)_n3DS.zip
(sha256sum) e7fbaf4ee01b81a3c2297028ef3fddc002f6933bfd20c2453bc6137bda89e5fd 9.2.0-20E(Full)_n3DS.zip
(not the same as the one reported on gbatemp forum thread, but as reported by some commenters, these work as well)
* Before update:
:* Reset DNS settings to 'Auto-obtain'
Just in case the downgrade process fails and we want to resort to recovery mode.
* Used SafeSysUpdater
* Had to retry 3 times (updater froze at <code>#7 Clean memory...</code>)
* After update, got the system error message from nintendo, so power down the system.
* Black screen after reboot. To fix that, remove the microSD card.
* Back up the microSD card on PC, and delete all content.
* '''UPDATE''' Actually the nintendo error message indicated the downgrade was wrong (even though the 3DS menu showed v9.2).
* '''Solution''' repeat the process again until it says 'success'!

* Reference:
:* https://gbatemp.net/threads/simple-guide-to-downgrading-your-3ds.407888/
:* [https://gbatemp.net/threads/wip-safesysupdater.409392/ SafeSysUpdater] ([https://github.com/Cpasjuste/SafeSysUpdater github])
::* Fork: [https://github.com/Plailect/PlaiSysUpdater PlaiSysUpdater]
:* [https://gbatemp.net/threads/wip-list-of-known-bricks-due-to-an-attempt-to-downgrade-to-9-2.407920/ Tips to prevent brick on downgrade]
:* http://3dscfwguide.blogspot.be/

=== Install ===


Entering the gateway menu. We follow the Gateway manual:
Entering the gateway menu. We follow the Gateway manual:
Line 361: Line 445:
* Check that hax works: boot Zelda OoT, select 1st save (it's normal it save title exceeds the box), and then press 'A' (Check/Voir) to go to GW Menu.
* Check that hax works: boot Zelda OoT, select 1st save (it's normal it save title exceeds the box), and then press 'A' (Check/Voir) to go to GW Menu.


=== EmuNAND ===
Will now follow the A9LH guide from Plailect (https://github.com/Plailect/Guide/wiki ).
* List of files used (and CRC):
{| class=wikitable
|-
! Name !! sha256sum !! filename !! Source
|-
| Homebrew Starter Kit || fea1bd4bc7d961b419dfd1819534586d749bff1f9e9cdc9675ae843fd28de2c4 || {{file|starter.zip}} || [https://smealum.github.io/ninjhax2/starter.zip]
|-
| New 3DS 9.2.0 - EUR || e7fbaf4ee01b81a3c2297028ef3fddc002f6933bfd20c2453bc6137bda89e5fd || {{file|9.2.0-20E(Full)_n3DS.zip}} || [http://3dsfirmware.blogspot.be/2016/01/mega-ciabin-mset-4x-6x-backups-browser.html]
|-
| New 3DS / Old 3DS or 2DS 2.1.0 - EUR || 5736ec8d40303b549f11c06b3811817531e17646a91ee2bb0d94afff69cf3a4e || {{file|2.1.0E(Full).zip}} || [https://drive.google.com/file/d/0BzPfvjeuhqoDajdOM1QyQlhjRUk/view?usp=sharing]
|-
| EmuNAND9 || 5cb845cc79199b4db2c169094be69fd2a7ea907fc79f67e322dd23895118b88f || {{file|EmuNAND9-20160326-150056.zip}} || [https://github.com/d0k3/EmuNAND9/releases]
|-
| PlaiSysUpdater || 1c727727f11123a4bf7544c77ecb2bc109348c38ff18051fd0bb1e93905c7aa5 || {{file|PlaiSysUpdater_v04.zip}} || [https://github.com/Plailect/PlaiSysUpdater/releases/]
|-
| Slot0x05KeyY.bin || 9824271422b06bf210969c3642537c8662225cfd6fae9b0a85a5ce21aab6c84d || {{file|Slot0x05KeyY.bin}} || [https://drive.google.com/file/d/0BzPfvjeuhqoDekc3YVVjN3dUTWs/view]
|-
| slot0x11key96.bin || 8bb9777686bdccff30e94dc65f2343f7412e3d6c1912e318da9f173596b9e898 || {{file|slot0x11key96.bin}} || [https://drive.google.com/file/d/0BzPfvjeuhqoDZzB5dUhtMjlfcnc/view]
|-
| slot0x25KeyX.bin || 7e878dde92938e4c717dd53d1ea35a75633f5130d8cfd7c76c8f4a8fb87050cd || {{file|slot0x25KeyX.bin}} || [https://drive.google.com/file/d/0BzPfvjeuhqoDZ1VNUHpQd2owUlE/view]
|-
| TinyFormat || 4affcec758bf48f135cd6a2f89d3bb54cd7a6ea6500e9882937fcb504bdae0da || {{file|TinyFormat_v1.0.0.zip}} || [https://github.com/javimadgit/TinyFormat/releases]
|-
| CakesFW (zip) || d0d9215ba76b3258d78561851c4796b3ab9b5029a6e38a6e76d0dd1d2117ac79 || {{file|Cakes_138.zip}} || [https://github.com/mid-kid/CakesForeveryWan/releases]
|-
| CakesFW - firmware.bin (N3DS) || 2682cdda651d5822b05056a9dddaad19b4bac211376753b6d2e02e0b8cab6cf2 || {{file|firmkey.bin}} || [https://drive.google.com/open?id=0BzPfvjeuhqoDR3VUY1BQTjloSDA]
|-
| CakesFW - firmkey.bin (N3DS) || e0a58d52e45d5b530909ad1540c88754922856d93a9941d46efe6f46887ce74e || {{file|firmware.bin}} || [https://drive.google.com/file/d/0BzPfvjeuhqoDOHlpR2t4S2ZlTlU/view?usp=sharing]
|-
| Decrypt9WIP || ca08c62aab848ac6669ae1b242fe59ec6311b0657c351c97cbf3394984f6164f || {{file|Decrypt9WIP-20160309-160637.zip}} || [https://github.com/d0k3/Decrypt9WIP/releases]
|-
| Decrypt9WIP (with April's fools joke) || 1b0bb189745b74da60d6c74198f60e19758c5e1cd76ff6a6ecf71329a5f748aa || {{file|Decrypt9WIP-20160401-012607.zip}} || [https://github.com/d0k3/Decrypt9WIP/releases]
|-
| Decrypt9WIP || 5327b591b5927b03c91a43e68a1697d736aa90b9cc44cef8abd0dd3e2582b481 || {{file|Decrypt9WIP-20160401-201317.zip}} || [https://github.com/d0k3/Decrypt9WIP/releases]
|-
| OTPHelper || 80714b1294e05a547da5120747a27d500a5590eb61396c66a1226a933de35f6c || {{file|OTPHelper-20160330-104342.zip}} || [https://github.com/d0k3/OTPHelper/releases/]
|-
| FBI || a8831d099b3803f5ea43d0f99da32ea7d7cc306d3fcdf4812b15b85f8071e80a || {{file|FBI.zip}} || [https://github.com/Steveice10/FBI/releases]
|-
| Universal Inject Generator || 11f9a74c9348cb8bd98408b5ae66fb0f55c5fbd11fbd07dbd55257af5dfbc48e || {{file|Universal-Inject-Generator-master.zip}} || [https://github.com/d0k3/Universal-Inject-Generator/archive/master.zip]
|-
| data_input.zip || ab8cf68a11a5a9bc83913b8365aaa4895f0089a9abb72323c39bf23f3e5ae45c || {{file|data_input.zip}} || [https://drive.google.com/file/d/0BzPfvjeuhqoDZUVfWkJkYlM1UEU/view]
|-
| payload_input.zip || 99934daec4415123853415cbdac5cf5c11bc3cab448627d8221a7739e1c6ac6d || {{file|payload_input.zip}} || [https://drive.google.com/file/d/0BzPfvjeuhqoDRjh1eXZDRmhXWUk/view]
|-
| MiniPasta || ed5e42a8d305753a3f4c08fa77668181a981fc4f56404747ffda7015da9b91c6 || {{file|MiniPastaCFW_v1_GitHub.zip}} || [https://github.com/d0k3/MiniPasta/releases]
|-
| hblauncher_loader || dc5482f5a21dd5ec9867e8f1b744739b9edb8f34254010f87e684093dac9c77e || {{file|hblauncher_loader_v1.1.zip}} || [https://github.com/yellows8/hblauncher_loader/releases]
|-
| AuReiNand || c98d97ad7cf562369a7485530ab5b8a084035013bb717bb4c94038acc3c4c505 || {{file|AuReiNandv4.1.7z}} || [https://github.com/AuroraWright/AuReiNand/releases]
|-
| SafeA9LHInstaller || 9221fa49ebb60fd173975b9a964a44c2179df601d380d57fa2d5ff6a33314d9a || {{file|SafeA9LHInstallerv1.5.2.7z}} || [https://github.com/AuroraWright/SafeA9LHInstaller/releases]
|-
| AuReiNAND NTR firmware.bin N3DS || b4b01172a57312bbac97baacdaa178f2e5f015a3d17b7ec3eadc5aa25845afa1 || {{file|Firmware_NTR_n3DS.zip}} || [https://drive.google.com/file/d/0BzPfvjeuhqoDM016eHZBQV95anc/view]
|-
| Uncart for arm9loaderhax || 6627ecf28c5b1073039a4c28112b7d0d62070b266acb684e80f7b2558b769459 || {{file|Uncart.zip}} || [https://drive.google.com/file/d/0BzPfvjeuhqoDdFhoQWJZZ0dKYnc/view]
|}


; Unlinking EmuNAND and SysNAND
<source lang=text>
By default, EmuNAND uses the same NNID as SysNAND, and hence all system menu settings are shared (like theme selection). To prevent this, NANDs must be unlinked.
From https://gist.github.com/d3m3vilurr/c826737bdf6f7fcf5ea2#file-slot0x18keyx-bin
76c76b655db85219c5d35d517ffaf7a43ebad66e31fbdd5743925937a893ccfc slot0x18KeyX.bin
9a201e7c3737f3722e5b578d11837f197ca65bf52625b2690693e4165352c6bb slot0x1BKeyX.bin
7e878dde92938e4c717dd53d1ea35a75633f5130d8cfd7c76c8f4a8fb87050cd slot0x25KeyX.bin


Some guides to do that:
e8bcc1cbb0ebe0f83ef0a3b7401d15db8d8b8c7c4808ff8e9e34f7a95dc4e2a2 asr.dat
* On [https://www.reddit.com/r/3dshacks/comments/3yzoez/q_cold_boot_to_emunand_with_the_option_to_launch/ this page] suggest to format the SysNAND without any 3DS uSD card inserted.
ffb040b039532ba7ffef7d5f308c73283beb9741717966d7f95b8fbed0f5b8c1 svdt.3dsx
4caa07f15297c37edd04e78601c240a5ced8d8852f1c49a44ac870715ccd91fb svdt.smdh
eda68cea4fd212d6894597de60e806432b794c628e708b4a92d7303cfe94f74d svdt.xml
</source>


=== DS / DSi game support ===
https://github.com/mid-kid/CakesForeveryWan/releases
; DS / DSi game support
* Gateway RED card CANNOT run DS/DSi games. Only the BLUE card can (and possibly from CIA games on the 3DS microSD).
* SOurce: http://www.r4sdhc3ds.com/blog/comment-convertir-un-fichier-3ds-en-nds-sur-r4/


* Can boot in EmuNAND (default) or SysNAND (with nag screen, NOT RECOMMENDED because firmware update can brick your device)
* First restore the SysNAND using GW Menu. Scary... but at least I'm sure I start from a fresh state.
* on EmuNAND, either in GATEWAY mode or CLASSIC mode.
:I checked that my backup was correctly copied to 3DS uSD (using sha1sum) and that it has the correct size:
* DSi ware, DS card, acekard2i DOES NOT work in gateway mode.

* With A9HL, Classic mode is obsolete since it is better to boot in SysNAND directly and boot acekard2i from there.
<source lang=text>
+ Toshiba NAND:
1.979.711.488 bytes = 1.84GB
</source>

:Reboot. We are in 9.2.0-21E. The DS profile exploit is gone.
* Clean the 3DS uSD: remove /updates, Launcher.dat, and /3ds/GW folder.
* Part 1 - Homebrew:
:* Install starter.zip on 3DS uSD.
:* Boot into HBL. COnfigure menuhax to Type 1, D-PAD Down.
* Part 2 - Downgrading:
:* Install PlaiSysUpdater + EmuNAND9 on 3DS uSD.
:* Make a SysNAND backup using EmuNAND9.
::Launch EmuNAND9 from HBL (can take several tries).
::Go to 'EmuNAND Manager Options', select 'Backup SysNAND to file', filename 'sysNAND.bin'
:* Move the backup to PC.
::In EmuNAND9, press SELECT to eject the 3DS uSD, then on PC, copy 'sysNAND.bin' on a safe location, and delete it from the uSD.
::Insert back the uSD in the 3DS and reboot.
* Part 3 (EmuNAND):
:* Setup EmuNAND.
::Boot 'Complete EmuNAND Setup'.
:* Copy back files to 3DS uSD
:* Open Cakes from within HBM
* Part 4 (Getting the OTP):
:* Injecting
:* Injecting FBI into hs.app (Linux fails, but do 'wine cmd.exe', then run go.bat works (ignore errors). Same results as on win7), it gives

<source lang=text>
c947512f37d6e9a2faeec54e5c03a721d3f6291e93c079a3881ea9ea4cc7035f FBI_inject_no_banner.app
86afaf58943ac4fa6b4795e9b0e9a48018381ac02b0f0b366dbdd9d90c40b2e3 FBI_inject_with_banner.app
$ sha256sum otp.bin
792fe44b0b861df75d47edb935370a2ec2019299591ce4ed25f24e6dbabaa2cf otp.bin

$ sha256sum *
3049df18550020a5942dda0a1e98fab94c69a49adaa9e314c3624b64700be129 emuNAND_formatted.bin
c86b2281e477b03dbce7b3a01dcbf3feca511294c9809d0994dcd69903602bb3 emuNAND_original.bin
792fe44b0b861df75d47edb935370a2ec2019299591ce4ed25f24e6dbabaa2cf otp.bin
4034527b90cf6b318b4d851a1e0329cdcd09c9b9745ef90a0f3904e362e6bace sysNAND_original.bin
</source>


=== Install GW on Luma 3DS ===
=== Install GW on Luma 3DS ===
Line 489: Line 475:
* Reboot... press {{kb|Down}}, and Voila! we are in GW mode!
* Reboot... press {{kb|Down}}, and Voila! we are in GW mode!


== Recovery Tomodashi life ==
== Games ==
* Look on 3dsdb.com for the releasename of a given game (for instance <code>New.Super.Mario.Bros.2.EUR.3DS-CONTRAST</code> for _New Super Mario Bros 2_).
* Search the releasename on Google.
* Download.


History - games:
* A9LH -> Decrypt9, restore to sysnand original SysNAND backup (with FIRM protection)
* New Super Mario Bros 2 <code>New.Super.Mario.Bros.2.EUR.3DS-CONTRAST</code>: http://nitroroms.com/show/file-info/200204/unk/unk
* Need an new version of Decrypt9
* Tomodachi life, v0.2 <code>Tomodachi.Life.v02.EUR.3DS-CONTRAST</code> : http://www.nds-passion.xyz/download--dd13612.html
<source lang=text>
5bc69ea34434c6364868cbc2e75758a81e862d3470ce2d883bacf8892774703c Decrypt9WIP-20160402-133714.zip
</source>
* Reference link how to recover: https://www.reddit.com/r/tomodachilife/comments/2vqtyg/can_i_transfer_the_save_data_to_a_different_3ds/
* After a save these files changed:
<source lang=diff>
-3dffe200606094710346ed68bb8ab6d3e76c6b9c /media/peetersm/EMUNAND9SD/Nintendo 3DS/4d7b1ee4ad5cec881141d845de0731e4/44a300f64707b06d534530340002544d/extdata/00000000/0000009d/00000000/00000001
+a3a6c5fd5a6fb62327edca0e5c6a44718f367058 /media/peetersm/EMUNAND9SD/Nintendo 3DS/4d7b1ee4ad5cec881141d845de0731e4/44a300f64707b06d534530340002544d/extdata/00000000/0000009d/00000000/00000001
+278c6db376f5508cd92d08d74b42b6b470511c3f /media/peetersm/EMUNAND9SD/Nintendo 3DS/4d7b1ee4ad5cec881141d845de0731e4/44a300f64707b06d534530340002544d/extdata/00000000/0000009d/00000000/00000003
-1c8b2562be3413abe87cbe61cdcd8729f2c4e919 /media/peetersm/EMUNAND9SD/Nintendo 3DS/4d7b1ee4ad5cec881141d845de0731e4/44a300f64707b06d534530340002544d/extdata/00000000/000008c4/00000000/00000003
+b1ff8617c0446cf268a6374977db824d1441155a /media/peetersm/EMUNAND9SD/Nintendo 3DS/4d7b1ee4ad5cec881141d845de0731e4/44a300f64707b06d534530340002544d/extdata/00000000/000008c4/00000000/00000003
</source>


History - website:
* http://www.nds-passion.xyz -- Requires subscription, but quality links and little nags (many different possibilities for download).


== More stuff ==
== Homebrew ==


== DS / DSi game support ==
=== Install ===
On A9LH system:
* Gateway RED card CANNOT run DS/DSi games. Only the BLUE card can (and possibly from CIA games on the 3DS microSD).
* Use CFW like Luma 3DS.
* SOurce: http://www.r4sdhc3ds.com/blog/comment-convertir-un-fichier-3ds-en-nds-sur-r4/
* Install HW starter kit on 3DS uSD
* Install HB Launcher as CIA (use FBI to install).
* Start the HB Launcher to go to HB menu (first launch requires internet access to dowload the hax payload).


== Troubleshooting ==
== Applications ==
* 3D not working on system menu (EmuNAND)
:Solution: Close the lid and open it back.


List of current applications:
* Can't boot anymore in Gateway menu using MenuHax? But using BrowserHax is still work fine.


{| class=wikitable
* Can't open FAT32 partition on 3DS uSD with EmuNAND
|-
:On Linux, use instead an SD adapter to read the uSD card.
| [https://github.com/FlagBrew/Checkpoint/ Checkpoint] || To save / restore savegames.
|-
| [https://github.com/astronautlevel2/Anemone3DS/ Anemone3DS] || A theme and boot splash manager for the Nintendo 3DS console.
|-
| [https://github.com/d0k3/GodMode9/ GodMode9] || multipurpose tool which can do NAND and cartridge function. See [https://3ds.hacks.guide/godmode9-usage GodMode9 Usage] page in Plailect's guide.
|-
| [https://github.com/Steveice10/FBI/ FBI] || To install {{file|.cia}} files. Homebrew version of Nintendo ''DevMenu''.
|-
| [https://github.com/mtheall/ftpd/ ftpd] || aka. ''Super FTP Turbo II'. For file transfer.
|}


List of old applications (no longer used, superseded by better applications above):
* Can't open the exfat partition on linux.
:Install the exfat FUSE package (! unstable it seems).


{| class=wikitable
= Questions =
|-
* What are _arm9 payloads_?
| [https://github.com/d0k3/Decrypt9WIP/releases DECRYPT9] || Best use the WIP version. Superseded by GodMode9.
* Can I copy the ROM files in a subfolder instead of root folder of the GW uSD card? (maybe look into gbatemp FAQ).
|-
* What is _themehax_? Is it the same as _menuHax_?
| [https://github.com/d0k3/EmuNAND9/releases EMUNAND9] || Best tool to format and adminstrate EmuNAND. Better than using Gateway's tool.
* What is _rxTools_?
|}
* Are TWL_FIRM and TWL_NAND the same? From [https://gbatemp.net/threads/gateway-blue-card-not-showing-up-in-sysnand-do-i-need-to-modify-anything.416380/page-4#post-6112444 this post] it seems TWL_FIRM is correct.


== Tips ==
== CIA ==
* CIA is the format used to install software (games, tools) on the 3DS device uSD card.
*Distinguish EmuNAND and SysNAND
* Legit CIA software are usually installed via eShop.
* (source Gateway manual) To easily differentiate between booting from SysNAND or EmuNAND, just setup folders with initials "S Y S" for SysNAND, and "E M U" for EmuNAND.
* Alternatively they can be installed using a ''CIA installer'' and a {{file|.cia}} file.
:Not that setting a theme color does not work since themes are shared by both NAND.

*Boot back directly in SysNAND*
* Simply go to the System Settings, and leave. '''LEAVING SYSTEM SETTINGS !ALWAYS! RESUME INTO SYSNAND, SO BE CAREFUL NOT TO DO ANY UPDATE THERE!'''

== Shortcuts ==
* hold 'L' when booting Gateway menu --> Go into Gateway menu.
* In gateway menu, hold down + B to power off.
* In GW Menu, HBL Menu: 'B' is often used to exit.
* Hold D-PAD Down button while booting to boot into HBL (MenuHax shortcut, configured as Type1).

== TODO ==
* https://github.com/yellows8/ctr-httpwn
* Custom Firmware like [https://gbatemp.net/threads/aureinand-n3ds-o3ds-a9lh.411110/ AuReiNand] ([https://github.com/AuroraWright/AuReiNand GitHub]) and [https://github.com/Reisyukaku/ReiNand ReiNand]
* arm9loaderhax ([https://github.com/Plailect/Guide/wiki complete guide])
* Installing games in CIA format in the 3ds microSD.
* The Blue GW card was blocked by Nintendo in SysNAND 6.1.0-12.
:Possible to whitelist back: [https://gbatemp.net/threads/release-use-blocked-ds-flashcards-on-3ds-probably-n3ds-too.376719/]
:--> A long thread about possibility to patch the official sysnand.
:--> Better to use bluecardfix.cia instead.
* Have a look at this [http://nintendo-ds.logic-sunrise.com/news-852896-plaisysupdater-v04-disponible.html site (nintendo-ds.logic-sunrise)].
* https://gbatemp.net/threads/how-to-play-3ds-games-using-gateway-3ds-the-complete-guide.360176/
* https://www.reddit.com/r/3dshacks/comments/3ouxw8/psa_if_tubehax_stopped_working_for_you_just_use/
* 3DS ROM: How to TRIM them (see the GBAtemp FAQ)? How to compute CRC?
* What is a CIA Manager? Not we can install it in Health & Safety using [https://gbatemp.net/threads/release-inject-any-app-into-health-safety-o3ds-n3ds-cfw-only.402236/ this].
:Apparently it is recommended to install them both on SysNAND and EmuNAND.
:Some installers (it seems):
:* FBI (open-source)
:* BigBlueMenu
:* DevMenu
:gbatemp FAQ suggest to inject FBI in H&S App, then install DevMenu using the injected FBI.
:[https://gbatemp.net/threads/gateway-blue-card-not-showing-up-in-sysnand-do-i-need-to-modify-anything.416380/page-3#post-6112364 Some] reports says that FBI does not work as well as BBM or DevMenu.
* It is possible to host the BrowserHax locally (on an intranet)?
:Should be simply a matter of extracting the repo locally.
:Not however we can't bypass 9.9-10.x enforced update this way since the 3DS must connect to Nintendo first ([https://gbatemp.net/threads/host-sliderhax-locally-for-browserhax.413821/ link]),
:unless of course date/time is set to 2000/01/01 00:00.
* Boot into GW EmuNAND directly ([https://www.youtube.com/watch?v=27S___KNULw link], [https://gbatemp.net/threads/boot-directly-into-emunand.391634/ links]). Several options:
:* [https://gbatemp.net/threads/ctrbootmanager-3ds-boot-manager-loader-homemenuhax.398383/ CtrBootManager]
:* See https://gbatemp.net/threads/release-rxtools-roxas75-3ds-toolkit-fw-2-0-9-2.382782/ , Check RXMode section
* Cold boot into EmuNAND: https://www.reddit.com/r/3dshacks/comments/3yzoez/q_cold_boot_to_emunand_with_the_option_to_launch/
:On [https://www.reddit.com/r/3dshacks/comments/3yzoez/q_cold_boot_to_emunand_with_the_option_to_launch/ this page] they speak about '''UNLINKING''' the NANDs:
:* Format the SysNAND without any 3DS uSD card inserted.
:Some suggestions:
:* Use hblauncher_loader instead of using MenuHax on the EmuNAND.
:* Menuhax / CtrBootManager to cold boot into RxTools, then use hblauncher_loader from EmuNand to boot into HBL. Make sure to add an entry for HBL to CTRBootManager to avoid a boot loop.
* '''MUST FOLLOW''' This very recent post, for Gateway setup: [https://gbatemp.net/threads/whats-the-best-way-to-install-homebrew-launcher-for-a-gateway-user.420185/ whats the best way to install homebrew launcher for a gateway user]
:* Boot directly into Gateway EmuNAND
:* Install bluecardfix.cia
* Much better hax? A9HL instead of MenuHax
* MenuHax: SELECT on Boot bypass MenuHax?!?
* About installing bluecardfix.cia:
:* https://gbatemp.net/threads/aureinand-n3ds-o3ds-a9lh.411110/page-255#post-6202467 :
::* just use patched TWL_Firm (CIA of it is on that iso site, install to NAND) and if needed, TWL Slot-1 Launcher.(install this CIA to NAND as it is a DSi title)
::* Worked like a charm, thanks. I'm guessing bluecardfix isn't compatible with A9LH (Invalid CIA with both dev menu and fbi)
* So my best option seems to use AuReiNAND + A9HL (see [https://gbatemp.net/threads/aureinand-n3ds-o3ds-a9lh.411110/page-255 this thread]) instead of using bluecardfix.cia.
:However I'd like to know what is bluecardfix.cia exactly, what it does, is it revertible, etc.
* RxTools and Gateway uses the same EmuNAND. So a working configuration would be (https://gbatemp.net/threads/playing-nds-roms-on-gateway-emunand.420137/#post-6193938)
:* Gateway Emunand to play 3ds files on red card (autoboot) - In this mode, only red card works.
::(So here we boot in EmuNAND but using Gateway CFW)
:* rxTools to load same Emunand, but be able to play ds file on blue card. - In this mode, only blue card works.
::(So here we boot also in EmuNAND, but using a different CFW than Gateway's)
* Summary: DS mode does NOT work when booting in Gateway mode (either be it EmuNAND or SysNAND).
:But DS mode DOES work in EmuNAND. Just need to install bluecardfix.cia or better yet TWL_FIRM patch or TWL Slot 1 Launcher.
* Info on bluecardfix.cia: (mainly from [https://gbatemp.net/threads/gateway-blue-card-not-showing-up-in-sysnand-do-i-need-to-modify-anything.416380/page-4 this thread])
:* Works either in SysNAND or EmuNAND.
:* Only needed for system menu > 4.5.
:* [https://gbatemp.net/threads/gateway-blue-card-not-showing-up-in-sysnand-do-i-need-to-modify-anything.416380/page-2#post-6112351 this post]: Bluecardfix.cia/DSWHITELIST1.0.cia runs in DS mode. TWL_FIRM is *DSi MODE*.
:* [https://gbatemp.net/threads/gateway-blue-card-not-showing-up-in-sysnand-do-i-need-to-modify-anything.416380/page-3#post-6112393 this post from Tony_93] suggests to install bluecardfix.cia both in EmuNAND and SysNAND. Later it explains this is necessary because the system reboots in DS Mode (not emulation), and hence will look for the DS mode in SysNAND.
::To install into SysNAND, he also suggests to
::* Boot some CFW into sysnand (PastaCFW/rxTools Pasta Mode/Minipasta, etc...)
::* Boot FBI (homebrew launcher version is fine).
::* Select destination to NAND.
::* Install it.
::Or you can boot browserhax > boot PastaCFW > boot browserhax > boot FBI.3dsx > Install to NAND.
:* TWL_NAND: For anything DS related (DSiWare or carts). Patched one will allow the blue card to work ([https://gbatemp.net/threads/gateway-blue-card-not-showing-up-in-sysnand-do-i-need-to-modify-anything.416380/page-3#post-6112428 source] for detailed installation). !!! One need to patch SigCheck when modifying a system firmware!!!
:* Read [https://gbatemp.net/threads/gateway-blue-card-not-showing-up-in-sysnand-do-i-need-to-modify-anything.416380/page-4#post-6112444 these posts] and further down about difference TWL_FIRM whatever and bluecardfix.cia.
:* Patched TWL_FIRM can boot Blue GW Card (using TWL Launcher), and can do more as well. But one can boot the card directly with bluecardfix/DS whitelist.
:From https://gbatemp.net/threads/gateway-blue-card-not-showing-up-in-sysnand-do-i-need-to-modify-anything.416380/page-4#post-6112460:

<source lang=text>
I think op is better off by sticking to bluecardfix/DSwhitelist since they are official signed versions released by Nintendo, he won't need a CFW to use it.
If he patches TWL_FIRM he will need to use a CFW permanently to use DS related stuff since you can't run patched firms without having signature checks disabled.
</source>

:* [https://gbatemp.net/threads/gateway-blue-card-not-showing-up-in-sysnand-do-i-need-to-modify-anything.416380/page-4#post-6113017 this post] says that flashcardtimewarp is better because eshop will complain about an update iirc

:From [https://gbatemp.net/threads/whats-bluecardfix-cia-in-gw-3-2-1.387929/ this thread]:
:* From member _cearp_:

<source lang=text>
the bluecardfix is v0 of the ds whitelist. it's legit. if you update the fw, you will lose it and you will need to install it again.
flashcardtimewarp.cia' is spoofed to the max version so it is not legit, but it will not be removed if you update your fw.
you basically get the same results no matter what you install
</source>

:* From [https://gbatemp.net/threads/whats-bluecardfix-cia-in-gw-3-2-1.387929/#post-5490056 here]: After boot strapping the process, install bluecardfix.cia to allow booting the Blue GW Card. On that card, one can start the Gateway menu, which in turn can install the MSET exploit that allows to restore
:the DS Profile exploit. MSET.CIA install an old version of System Settings with a hole. This hole is exploited by the NVRAM profile to reboot into GW menu. Running DS Mode game sometimes remove that exploit and
:must be restored. GW Menu only install the NVRAM profile. So MSET.CIA installs the exploits. The exploits payload is the NVRAM profile, which sometimes is removed when running DS games. It can be restored by booting into
:GW menu. An easy way to do this is to use the blue cartridge (or BrowserHax, or ...).
:So
::* MSET opens the door. Must be installed only once.
::* NVRAM profile is the instructions to run Launcher.dat.

* !!! Careful !!! There is a difference between booting in SysNAND mode and patching the SysNAND. You might write things in SysNAND, but actually these things are written onto the 3DS uSD card, so
:possibly affecting EmuNAND as well. Unless EmuNAND and SysNAND are _unlinked_, whatever that means.
* Enabling DS flash cards:
:* https://gbatemp.net/threads/gateway-blue-card-not-showing-up-in-sysnand-do-i-need-to-modify-anything.416380/page-2#post-6112291
::But [https://gbatemp.net/threads/gateway-blue-card-not-showing-up-in-sysnand-do-i-need-to-modify-anything.416380/page-2#post-6112296 this guy] says it is a old video and proposes a better one.
::New method allows to play from EmuNAND, but with a CFW (not Gateway mode CFW).
* Seen some post saying they don't need HBL anymore (but for EMUNAND9 and DECRYPT9). They do everything in RxTool/CtrBootManager.
* Formatting EmuNAND: Can be done with Gateway, but EmuNAND9 is best option because open-source and optimization ([http://wiki.gbatemp.net/wiki/3DS_Flashcart_FAQ source]). What are these optimisations?
* Gateway mode = Go to EmuNAND from a Gateway red card (triggered when selecting "Gateway" entry in HBL). In that mode DS Games, DS flashcards, GBA and DSiWARE games won't not work
* From FAQ, there are 2 EmuNAND mode with GW: EmuNAND Gateway and EmuNAND Classic. Both boot in EmuNAND, but the first allows to play 3DS games using GW, the second allows to play retail's game cartdridge.
* From [http://www.maxconsole.com/maxcon_forums/threads/288811-GATEWAY-Ultra-v3-2-1-BETA-with-even-better-New-3DS-support this announcement]:
:* Press B while booting into GW to ask whether to boot in SysNAND (X to confirm). Allows for installing back the NVRAM exploit w/o anything more than the gateway cards. This only requires bootstrapping the process
::once (with eg. OoTHax, NinjHax, or BrowserHax...) to install MSET.cia and bluecardfix.cia in the SysNAND, and ever do need these Hax again in the future. (see [http://www.maxconsole.com/maxcon_forums/threads/288811-GATEWAY-Ultra-v3-2-1-BETA-with-even-better-New-3DS-support?p=1748665#post1748665 explanation]).

<source lang=text>
From now on, while in the Gateway menu with the boot icons visible, simply hold B while booting into Gateway mode or Classic mode!
</source>

* '''THE''' tutorial to install MSET + NVRAM exploit (and make it STICK): [http://www.maxconsole.com/maxcon_forums/threads/288767-TUTORIAL-Downgrade-N3DS-MSET-*proper-way* MSET Tutorial]
* Best DevMenu show version 0.15.8(r37904) ([http://www.maxconsole.com/maxcon_forums/threads/288767-TUTORIAL-Downgrade-N3DS-MSET-*proper-way* source]). Do not use version 6.2.
* To uninstall MSET, simply install the original upgraded version, or restore the untouched backup. Use 3DNUS or 3DNUS mod, and get the titleid

<source lang=text>
USA = 0004001000021000 9.0-9.5 = v8203 MD5: 5077D839633EC80E7A9D3CA98B794D4B
EUR = 0004001000022000 9.0-9.5 = v8202 MD5: 7D9E073A6349DDEF77E67B2102B4EEA5
JPN = 0004001000020000 8.1-9.5 = v9224 MD5: 375EDB36DA62AE44D4D8C91DAB854573
</source>

:Note: these are simply files coming from the official firmware updates (9.2.0-20E(Full)_n3DS.zip)
* [https://gbatemp.net/threads/3dnus-mod-by-dr-hacknik.392360/ A mod of 3DNUS] -- A tool to download a given version of SysNAND TitleID ([https://gbatemp.net/threads/3dnus.376488/ original 3DNUS])
* bluecardfix.cia - this is v0 of the whitelist titleid.
* FlashcardTimewarp.cia: See checksum below, or can build your own ([http://www.maxconsole.com/maxcon_forums/threads/287719-Flashcard-Timewarp guide])

<source lang=text>
CRC-32: 16cd0729
MD4: c638525f886a9f56fdb340cd0957fa1e
MD5: c35645251e1332c3b5d7d2d724e39e27
SHA-1: fb7f845d9293212c548403c5c7e55db5550abdcc
</source>

* List of titleid and version: https://3dbrew.org/wiki/Title_list :
* TWL_FIRM : DSi Firmware

* Fragmentation error: If a fragmentation error is shown, you need to fix it on your PC with -

<source lang=winbatch>
GW3DS.EXE FIX DRIVELETTER:
</source>

* Remove bluecardfix.cia: Open the .cia into FBI/title_manager, find the titleid of that cia. Then remove that exact same titleid from SysNAND. ([https://gbatemp.net/threads/gw-bluecardfix-destroyed-ds-compatibility.410607/#post-5981932 source]).
* Firmware <code>2.1.0E(Full).zip</code>, downloaded from [https://drive.google.com/file/d/0BzPfvjeuhqoDajdOM1QyQlhjRUk/view Google Drive] (from [https://github.com/Plailect/Guide/wiki Plailect A9LH Guide])
sha256sum 5736ec8d40303b549f11c06b3811817531e17646a91ee2bb0d94afff69cf3a4e 2.1.0E(Full).zip
* Another link for browserhax like it seems: http://www.reboot.ms/3ds/load.html?Launcher.dat (From Plailect A9LH guide)
* An even better updater that safeSysUpdater: [https://github.com/Plailect/PlaiSysUpdater PlaiSysUpdater] (a fork of safeSysUpdater, itself a fork of sysUpdater)
* Note: http://go.gateway-3ds.com/ is a browser exploit, like BrowserHax. But it is only for Spider, the browser on O3DS.
* Note that changing the menu theme removes the menuhax.
* Regular SysNAND size = 0x003B0000 x 0x0100 bytes
* Transfer to bigger SD card:
:* Copied with pv
:* Backup file content of FAT16
:* In GParted, resize FAT16 (extend to the RIGHT), then format it to FAT32 (label EMUNAND9SD)
:* Copy back the files
:* Unmount the FAT32 partition, edit the MBR sector such that textual part match the MBR record (see below).

<source lang=text>
0000000: 474154455741594e 414e442020202020 454d554e414e4439 5344202020202020 GATEWAYNAND EMUNAND9SD
0000020: 53444353495a453a 3030373436303030 53595353495a453a 3030334230303030 SDCSIZE:00746000SYSSIZE:003B0000
0000040: 454d5553495a453a 3030334230303030 46415453495a453a 3030333934303030 EMUSIZE:003B0000FATSIZE:00394000
0000060: 4641544f4646533a 3030334232303030 0000000000000000 0000000000000000 FATOFFS:003B2000................
0000080: 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ................................
00000a0: 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ................................
00000c0: 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ................................
00000e0: 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ................................
0000100: 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ................................
0000120: 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ................................
0000140: 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ................................
0000160: 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ................................
0000180: 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ................................
00001a0: 0000000000000000 0000000000000000 0000000000000000 0000000000008001 ................................
00001c0: 010006feffff0020 3b00004039008001 01001cfeffff0100 000000003b000000 ....... ;..@9...............;...
==== ====________ ========
FATOFFS FATSIZE EMUSIZE
00001e0: 0000000000000000 0000000000000000 0000000000000000 00000000000055aa ..............................U.

GATEWAYNAND
EMNUAND9SD
SDCSIZE:00746000 -> equal to FATSIZE + FATOFFS
SYSSIZE:003B0000 -> Must be same as EMUSIZE
EMUSIZE:003B0000 -> MBR @ofs=01da
FATSIZE:00394000 -> MBR @ofs=01ca
FATOFFS:003B2000 -> MBR @ofs=01c6
</source>

* Technical reference 3dbrew site, like https://www.3dbrew.org/wiki/NCCH
* Difference between EmuNAND / RedNAND ([https://gbatemp.net/threads/emunand-rednand-technical-implementation.401969/#post-5783813 source]) Beware, the first 512-byte block is at different location between EmuNAND/RedNAND!
* Read Decrypt9 README
* Read EmuNAND9 README
* Reformat the 32GB uSD using EmuNAND9
* Get a mini-description of all the sw i used for the 19LH process.
* See http://3dbrew.org/wiki/3DS_System_Flaws
* Try CakesFW 6.6.9-38 Platinum Edition Lite (apparently an April's fool joke)
* Installed firmware90.bin in AuReiNand (start with L button)
* TWLSLOT1Launcher
:* Install with FBI. See section below.

* Aureinand
:* Install firmware90.bin into rei folder (boot by pressing 'L')
:* More instruction at http://gbatemp.net/threads/aureinand-n3ds-o3ds-a9lh.411110/
* Done after the SYSNAND backup:
:* Install HBLauncher (into SD)
:* Inject TWL_FIRM (into NAND)
:* Install TWL SLOT1 Launcher CIA (into NAND, I think)
:* Install SaveDataFiler (into )


List of CIA installer:
* A CIA to start gateway: https://gbatemp.net/threads/release-hb-launcher-mod-cia-for-gateway.416449/page-5
* '''DevMenu'''
* To send CIA over the network using FBI:
:From Nintendo dev kit. Install it using FBI injected in H&S app.
:* Start FBI, select destination, etc, then press Y
* '''FBI'''
:* On the PC:
:Open-source. Can be safely injected in Nintendo's Health&Safety app on system menu, even on unpatched (non-rooted) device.
* '''BigBlueMenu'''
:Another CIA installer.


;FBI - network transfer
* Use ''falconpunch'':
<source lang=bash>
<source lang=bash>
python FalconPunch.py hblauncher_loader.cia
python FalconPunch.py hblauncher_loader.cia
</source>
</source>
* There is also a GUI alternatives: SocketPunch_0.3.4.zip


== CFW ==
:* There is also a GUI alternatives: SocketPunch_0.3.4.zip
'''CFW''', or '''Custom Firmware''' are modified Firmware for the 3DS that uses the Official firmware as a base. It allows to use applications that aren’t allowed by Nintendo, and among other play game backups.
* Get DevMenu / SaveDataFiler from link "[MEGA] Retail Encrypted DevApps! (Caution. These will install to NAND!)" (see guide [https://gbatemp.net/threads/howto-install-devmenu-and-savedatafiler-to-nand-to-survive-formats-and-sd-card-wipes.421501/])


Recent:
=== Save backup ===
;Luma 3DS
* Use SaveDataFiler (Dev kit leaked from Nintendo)
* Was called AuReiNand before, a fork of ReiNand from AuroraWright.
* Usage guide ([http://www.maxconsole.com/maxcon_forums/threads/287072-Game-saves-and-how-to-manage-them guide and info], [http://www.logic-sunrise.com/forums/topic/64198-savedatafiler-decrypter-et-modifier-ses-sauvegardes/ guide 1], [https://gbatemp.net/threads/tutorial-how-to-export-import-gateway-card1-sav-to-eshop-3ds-3dz-with-savedatafiler.380246/ guide 2]):
* List of features:
:* This can be used to backup 3DS ROM / cartridge / eshop / cia games, or exchange saves between all these.
:* Disable firmware checks (allows to use patched firmware like TWL_FIRM patch to use acekard2i).
:* For 3DS ROM, select the game using Gateway but don't launch it. For cartridge, insert the cartridge first.
:* Remove some nintendo restrictions (like region lock)
:* Start SaveDataFiler
:* Start (ie. ''chainload'') ARM9 homebrew applications (like DECRYPT9, EMUNAND9...)
:To backup a savegame:
:* For ROM/cartridge, select CTR Card, or the game id for eshop / cia.
::For some games (like Fantasy Life), go to extdata/ and select the correct id (Fantasy Life <code>00001131</code>).
:To restore a savegame:
:* Go to SD tab. For ROM/cartridge, select the file and press L+A. For eshop / cia, press R+A. For extdata/ games (like Fantasy Life), simply press A.
:'''Caution'''. For card1 games (except Fantasy Life), rename the file 000400000FF40A00.sav to game id.
:'''Caution'''. For card2 games, the save are stored within the game itself. So for GW rom, the save are stored in the .3ds file on the red gateway card!


Old:
* Several versions are available:
;Reinand
* A old CFW by Reisyukaku.


=== Security flaws ===
<source lang=text>
* See http://3dbrew.org/wiki/3DS_System_Flaws
|------------------------------------------------------------------|--------|-------------------|
| sha256sum | length | name |
|------------------------------------------------------------------|--------|-------------------|
| 3703611dd03ea71c2faab0aca963134472d64957089d335afe67ec9503e5b30d | 498624 | savedatafiler.cia |
| 290721315f2eb465acc0311bc3b8c9e764b54bf3accf1175d2951315edae1146 | 490432 | SaveDataFiler.cia |
|------------------------------------------------------------------|--------|-------------------|
</source>


== Acekard2i ==
<code>savedatafiler.txt</code> seems to have a more recent version:


Thanks to latest CFW like Luma3DS (which disables N3DS blacklist), Acekard2i flashcard works out-of-the-box provided they have the latest firmware. Here we give the procedure to update the flashcard.
<source lang=diff>
--- savedatafiler.cia.txt 2016-04-05 07:52:13.788224844 +0200
+++ SaveDataFiler.cia.txt 2016-04-05 07:52:18.924175572 +0200
@@ -1,4 +1,4 @@
-0000000: 2020000000000000 000a000050030000 340b0000c03a0000 0028070000000000 ..........P...4....:...(......
+0000000: 2020000000000000 000a000050030000 340b0000c03a0000 0008070000000000 ..........P...4....:..........
</source>


;Links
* Dev applications
* Official update wiki: http://wiki.gbatemp.net/wiki/Updating_the_AK2i_Bootloader

* See also [https://gbatemp.net/threads/getting-the-acekard-2i-to-work-on-my-3ds.348840/]
<source lang=text>
a8b9a63eea50cd58fa71ede5942dd78effd4122c4c9e74e5dbf41fb74cfbb02b DevMegaPack.rar http://www.3dsiso.com/cia-downloads/271435-mega-retail-encrypted-devapps-caution-install-nand.html?highlight=%5BMEGA%5D+Retail+Encrypted+DevApps%21+%28Caution.+install+NAND%21%29
45934b134e9ed7a1b3f78054c1c1b1342c513a63a3b097cc1dea8d5935723e19 DevMenuPack_SDK11_4.rar http://www.3dsiso.com/cia-downloads/271435-mega-retail-encrypted-devapps-caution-install-nand.html?highlight=%5BMEGA%5D+Retail+Encrypted+DevApps%21+%28Caution.+install+NAND%21%29
f541b9f666751edb45ea2cec351e22e4313c29327b672ac47f140444eacf6ca6 RepackedDevPack.rar http://www.3dsiso.com/cfw-discussions/268058-mega-devmenu-savedatafiler-playcoinsetter-banners.html
</source>

:* Latest version of dev app (2016/01/18) from Apache Thunder
:* <code>RepackedDevPack.rar</code> -- Latest version of PlayCoinSetter (install in SD only)
:* <code>DevMenuPack_SDK11_4.rar</code> -- 3D Banner version will install to NAND. Other version will install to SD
::* Version 11.4 does not launch on firmware 9.2
::* Use FBI to install in NAND
::* Uninstall SD version before installing NAND version
:* <code>DevMegaPack.rar</code> -- NAND application
::* DevMenu in this pack is 6.2
::* All these apps show up in DevMenu (because the content ID is not set to SystemApplication)
::* 2 versions of SaveDataFiler / DevMenu, one with standard banner, one with 3D banner


=== 3DS freezes at boot / sleep wake-up w/ Acekard 2i inserted ===
* TWLSLOT1Launcher
:* Install with FBI. Start FBI. Press 'L' button to set destination to 'NAND'. Then press 'A' to install.
:* Download the TWL_FIRM patched CIA from aurorawright on www.3dsiso.com site
{| class=wikitable
|-
!sha256sum !! Name !! TItle ID !! Unique ID !! Product code !! Category !! Version !! Install to
|-
<source lang=text>
50f9180696e96fce36b0e4b6be8deae5700be682bfae96495b9674b54d854101 TWL_FIRM.zip
f8a9a00265c444ccfdf1c32dc3901510d012e4b7daf8999de85fd864462bdf29 v1/twlfirm_n3ds.cia
274405f3a5d3cde1e177e40ebfe67b0026e38c6b86b846660b4d8f6d70b888ea v1/twlfirm_o3ds.cia
</source>
| 0x0004013820000102 || 0x20000102 || || System || 0xffff || NAND
|-
<source lang=text>
4edb7ef691bf411a729d4c50fbb637f1925d24d6d6b69d0c3466f019a5d2f003 twlfirm_v2.zip
6d0d65abd5892ff9c23dd8ee94da5e3f7830cab1b4f96918dadda41571a26612 v2/twlfirm_n3ds.cia
38787f0175ffaa13e6c460bbeacb73b12c0c55871656e3fea9ed4395ed52b563 v2/twlfirm_o3ds.cia
</source>
| 0x0004013820000102 || 0x20000102 || || System || 0x26d0 || NAND
|-
<source lang=text>
513419f6dea6b3c001baa1b09eef162f1dadc600fe5d48cdcb103823dafb7e0d TWLSlot1Launcher_v3.rar
c3a03b2500db8cc199437515685d0f5d5d000f0887ba3b0f581d7fe2678ddf98 TWLSlot1Launcher.cia
ce75502bb51f74e53a8ce7f4d720a6e369d63a7fb98bb434fa3da6d6fdf1c075 TWLSlot1Launcher.nds
</source>
| 0x00048000544f4f42 || 0x544f4f42 || || TWL || 0x800 || NAND
|}

::* This can be fixed by patching TWL_FIRM:
:::* http://www.logic-sunrise.com/forums/topic/71156-3ds-la-premiere-custom-app-dsiware-pour-les-vieux-linkers-dsi/
:::* https://www.reddit.com/r/3dshacks/comments/453c9w/twl_firm_patches_%CA%96_o3ds_only_atm/
:::* https://github.com/roxas75/rxTools/pull/403
:::* https://gbatemp.net/threads/tutorial-patch-twl_firm-to-play-normally-blocked-ds-games.414578/
:::* Find the patched TWL_FIRM: [http://www.3dsiso.com/cfw-discussions/272246-patched-twl_firm-cias-o3ds-n3ds.html?highlight=aurorawright look for aurorawright on 3DSISO]
:::* To install the patched TWL_FIRM, in FBI, choose NAND as destination, then inject twlfirm_n3ds.cia. Confirm overwriting.
:::* Requires running a CFW that disables/stubs firmware signature verification.
:::* To uninstall:
:::* Extract file <code>0004013820000102.cia</code> from a recent firmware (<code>9.2.0-20E(Full)_n3DS.zip</code> or <code>10.3.0-28E(Full)_n3DS.zip</code>)

<source lang=text>
89d884a01ed8593c58d3f23d777e772d87cc9f57b432cf899309cd96e8911838 0004013820000102.cia
</source>

!!! make sure you take the N3DS version (not the old 3DS version) !!!
::::Problem is we can't install it with FBI, which complains about bad signature stuff. But DevMenu will complain that title already exists, so won't do the import.
::::So
:::* Install DevMenu in NAND using FBI. Make sure it is available in the Home menu.
:::* Go in FBI. Delete the Title ID with FBI (double check to make sure you selected indeed Title ID <code>0x0004013820000102</code>).
:::* Then press Home button (DO NOT REBOOT THE N3DS), start DevMenu, and import the original TWL_FIRM file.

:::* Note that Gateway DS can be launched directly. Acekard 2i, we need the _TWL Slot1 launcher_.
::::* [https://gbatemp.net/threads/twl-slot-1-launcher-first-custom-dsiware-app.414501/ TWL Slot 1 Launcher]
::::* TWL Slot1 Launcher must be installed to '''NAND''' using FBI, or we get the error:

<source lang=text>
summary: summary_invalid argument (ox7)
description: description_invalid_combination (0x3ee)
</source>

::::* To delete, in FBI, select destination NAND, select 'delete Title', then select line <code>SLOT1BOOTER</code> (check that title ID matches data above).

* When inserting Acekard 2i into 3DS, the HOME menu freezes.
* But still, we get black screen freeze at wake-up from sleep mode. Even though the suspended game is a 3DS (CIA) games.
:Only solution in that case is to remove the cartridge and hard reset by pressing power button.
* Note that on CakesFW, we have to check also option <code>Survive reboots when launching some titles</code>.
* Available update:


;Update
* Download the udpate:
<source lang=text>
<source lang=text>
fdf49f11bdeb42e9fd9355ef42317f8a6436a8735b2f5cd40007b1e0ff00de37 18392-AceKard_2_v4.23_menu.zip
fdf49f11bdeb42e9fd9355ef42317f8a6436a8735b2f5cd40007b1e0ff00de37 18392-AceKard_2_v4.23_menu.zip
Line 895: Line 577:
891f3d59781bf530ae33fb506abc0bbacd4915218d1422c42c7f4e96d0bddd78 ak2ifw_update_dsi-v1.44_3ds-v4.3.7z (but very slow start)
891f3d59781bf530ae33fb506abc0bbacd4915218d1422c42c7f4e96d0bddd78 ak2ifw_update_dsi-v1.44_3ds-v4.3.7z (but very slow start)
</source>
</source>
* Use the official Acekard menu v4.23 to update (remove everything else on the card).
* On N3DS, to get the best boot performance, it is recommended to use update dsi v1.42 (Chessmaster), and use the patched TWL_FIRM to bypass black list check.


;More troubleshooting
Possible solutions:
* Update Ak2i kernel (see https://gbatemp.net/threads/getting-the-acekard-2i-to-work-on-my-3ds.348840/ and <code>ak2ifw_update_3ds43_dsi144.zip</code>).
:* To update, use the official Acekard Kernel v4.23 (remove everything else on the card).
:* Perso, I did first upgrade with v1.41 (giving Alex Rider icon), then the latest (with horse icon).
* Official update wiki: http://wiki.gbatemp.net/wiki/Updating_the_AK2i_Bootloader
* Fix contact issues - see https://gbatemp.net/threads/solving-acekard-contact-issues.231412/
* Fix contact issues - see https://gbatemp.net/threads/solving-acekard-contact-issues.231412/


== Troubleshoot ==
Final solution:
=== Fragmentation error ===
* Update to ak2ifw_update_dsi-v1.42_3ds-v2.0.7z
* Install bluecardfix.cia (this remove all black list from nintendo)
* No need for TWL Slot 1 Launcher
* But we need the patched TWL_FIRM on n3DS (because the acekard2i is blacklisted already beyond O3DS fw4.4.0)
* Installed latest AKAIO, v1.9.0 (optional)


* Fragmentation error: If a fragmentation error is shown, you need to fix it on your PC with -
== File transfer ==
* Use homebrew application _ftBRONY_. It is available in the default HB launcher kit.
* See http://joshuaeagles1.wix.com/3ds-homebrew-guide#!ftp-file-transfers/k2uj4 for details.
* To connect, launch the app to get IP and port number.
* Start a FTP client. For instance _Midnight Commander_:


<source lang=text>
<source lang=winbatch>
GW3DS.EXE FIX DRIVELETTER:
cd ftp://192.168.1.33:5000/
</source>
</source>


=== 3DS freezes at boot / sleep wake-up w/ Acekard 2i inserted ===
== Firmware ==
When inserting Acekard 2i into 3DS, the HOME menu freezes. But still, we get black screen freeze at wake-up from sleep mode. Even though the suspended game is a 3DS (CIA) games. Only solution in that case is to remove the cartridge and hard reset by pressing power button.
{| class=wikitable
&rarr;See Enable Acekard 2i / GW Blue card.
|-
!sha256sum !! Name !! Verified
|-
| <code>dffd2d602ccfd187d07c756de18856453fde3bb0c3d1393facda865428428062</code> || {{file|10.3.0-28E(Full)_n3DS.zip}} || Same md5sum as reported on <code>[MEGA] [CIA/BIN]</code>
|-
| <code>62153c81205b507c589a881cd7592b6402be97ab296e591287905b31a6f6c628</code> || {{file|10.7.0-32E(Full)_n3DS.tgz}} || Maybe downloaded via 3DNUS
|}


=== 3D not working on system menu (GW EmuNAND) ===
== Maintenance ==
Solution: Close the lid and open it back.
* Update Decrypt9WIP, AuReiNAND, ...

=== Can't open FAT32 partition ===
Can't open FAT32 partition on 3DS uSD with EmuNAND
:On Linux, use instead an SD adapter to read the uSD card.


=== Can't open exfat partition ===
== History ==
On Linux, install the exfat FUSE package (! unstable it seems).
* 2016/05/11 -- Update SysNAND to 11.0-33E, pushed by Nintendo.
:* This breaks HBL Loader CIA. Possible Fix: rename the otherapp payload. See [https://gbatemp.net/threads/release-yellows8s-homebrew-launcher-loader-for-cfw-users-cia-hbl-launcher.404151/page-22][https://gbatemp.net/threads/update-11-0-and-homebrew.425973/page-9].
:* This breaks OOTHax in general. But OOTHax works on CFW.
:* List of patched exploits: https://3dbrew.org/wiki/Homebrew_Exploits (see also [https://gbatemp.net/threads/update-11-0-and-homebrew.425973/ this thread]).
:* Update AuReiNand to new version (aka Luma3DS), with in-place firmware patching
:* Update to latest Plailect guide (namelly using Firmware 10.2)

Latest revision as of 20:48, 7 April 2019

Summary

Module New 3DS XL Blue New 3DS XL Samus
Boot B9S v1.3 (boot9strap) B9S v1.3 (boot9strap)
CFW Luma3DS v9.1 Luma3DS v9.1
Luma payload GodMode9 v1.7.1 GodMode9 v1.7.1

Both systems hacked using Plailect's 3DS guide.

Luma3DS
  • START + POWER — Go to chainloader menu (files in /luma/payloads).
  • SELECT + POWER — Go to Luma3DS config menu
  • SELECT + X + POWER — Dump the ARM11 bootrom (boot11.bin), the ARM9 bootrom (boot9.bin), and your console unique OTP (OTP.bin) to the /boot9strap/ folder on your SD card (note that this will not have any kind of prompt or message)
  • L + POWER (maybe old version) — Boot alternateNAND (emuNAND)

When booted, the following in-game commands are available:

  • L + DOWN + SELECT -- Lauch Rosalina (cheat, debug, HB launcher)

Maintenance

Update Luma3DS
  • Use LumaUpdater , or see Plailect's guide.
Update B9S
  • See Plailect's guide.
Update GodMode9
  • Download .firm file from GitHub, and install it in /luma/payloads.

History

New 3DS XL Blue
  • Original system 9.9.0-26E.
  • Install A9LH (arm9loaderhax) following Plailect's guide (see wiki history before 2018/12/08).
  • Update system to 11.0.0_33E
Some issues with HB Launcher. Fixed by updating Luma 3DS, and following Plailect's guide.
  • Update to B9S.
New 3DS XL Samus
  • System version 11.4.0-37E.
  • Installed B9S using Plailect's guide.

Links

Hack guides
The main guide to hack a 3DS and install B9S / Luma3DS.
Database
Custom firmware (CFW)
The recommended CFW in Plailect's guide.
See Usage guide in Plailect's guide here.
Can be installed as Luma3DS payload.
Old — superseded by GodMode9.
Wikis
  • 3DBrew -- a wiki dedicated to homebrew on the Nintendo 3DS.
Homebrew Launchers
 Loader as CIA for CFW.
GBAtemp.net wiki

Gateway links

Gateway flashcard
  • gateway 3ds -- Original manufacturer of the Gateway 3DS flashcard (the red and blue one)
  • gateway3ds -- an alternate site it seems, but with more detailed info

Old links

Youtube tutorials (informative, but not essential)
Including Userspace hax (for Homebrew access), ARM11 Kernel Hax, ARM9 Kernel Hax (ARM9LoaderHax)
Fake / outdated
Often has outdated information about Gateway flashcard, and promotes other cards.
Stuff
 sha256sum 5736ec8d40303b549f11c06b3811817531e17646a91ee2bb0d94afff69cf3a4e  2.1.0E(Full).zip
  • Get DevMenu / SaveDataFiler from link "[MEGA] Retail Encrypted DevApps! (Caution. These will install to NAND!)" (see guide [1])
Interesting stuff to look someday
  • free e-shop — allow to install game if you already have the title key.
  • BootCtr9, a boot manager for A9LH, including a fork of A9LH. Might help loading Gateway A9LH payload (see here for quick setup guide).

General information

3DS processors
  • Arm9,
  • Arm11.
3DS variants
  • 2DS,
  • O3DS, the original 3DS (aka. Old 3DS), and
  • N3DS, the new 3DS that features among others a new StickC button.

Glossary

Sources: [2]

  • NAND
  • SysNAND refers to the original data/system information on a NAND chip embedded in the 3DS.
  • EmuNAND refers to a backup/copy/emulated version of your SysNAND that runs off the SD card.
  • SD Card
  • 3DS microSD card -- The 3DS comes bundled with an SD card (O3DS) or a microSD card (N3DS). When EmuNAND is setup, it contains two partitions.
The EmuNAND partition, when present, is formatted via the homebrew program EmuNAND9.
The other partition stores homebrew, custom themes, save files, eShop and .cia home menu channels. It must be formatted as FAT32, cluster size 32kB.
  • Gateway microSD card -- On system with flashcards (like Gateway or Sky3DS), there is a second microSD in the flashcard that contains ROM games (.3ds or .3dz rom images).
  • Firmware / System menu
  • System Menu -- This is the official name for "_firmware_" running in the SysNAND.
  • Custom Firmware, CFW -- A program launched by an exploit (like DS profile exploit or MenuHax) that patches the System Menu in memory, and then "jumps" back to it.
  • Homebrew
  • ARM9 homebrew -- Applications (aka. ARM9 payloads) that run on the ARM9 processor on the 3DS. Note that applications running on the ARM9 have the most privileges (see ARM9 section).

Technical

Nintendo FW History

  • 6.1.0-12 — Blue gateway card blacklisted.

How-to

Transfer file from / to microSD card via WIFI

Using Homebrew - ftpd (aka. Super ftpd II Turbo)
  • For instance, connect with Midnight Commander:
cd ftp://192.168.43.242:5000/
  • Review:
  • Worked flawless over mobile hotspot tethering.
  • Some files / folder missing (in particular in root folder). No idea why.
  • Issue — Midnight Commander is quite unstable. For maximum stability, launch mc, connect & transfer, then exit mc.
Using Nintendo microSD application

From [3]

  • On N3DS, go to device setting, and microSD management
  • Enter user name, password, and device name.
  • On Linux, use command:
mount -t cifs //DEVICE_NAME/microSD /mnt -o user=USER_NAME,password=PASSWORD,ip=IP_ADDRESS,servern=DEVICE_NAME
Issue: very instable. Often disconnect.
  • Use pv to copy and have progress bar:
pv myfile > myfile
(OLD) Using FTP-3DS
  • From [4]
  • Errors on connect.
(OLD) Using ftBrony
  • Use homebrew application ftBRONY. It is available in the default HB launcher kit. See [5] for details.
  • To connect, launch the app to get IP and port number.
  • Start a FTP client. For instance in Midnight Commander:
cd ftp://192.168.1.33:5000/

Dump a 3DS cartridge

GodMode9
  • See GodMode9 Usage on Plailect's guide, or Citra wiki.
  • Start GodMode9 (press START + POWER).
  • Navigate to [C:] GAMECART.
  • For 3DS Game Cartridge:
  • Press (A) on [TitleID].trim.3ds to select it, then select NCSD image options…, then select Build CIA from file to produce a .cia file or Decrypt file (0:/gm9out) to produce a .3ds file.
  • For NDS Game Cartridge:
  • Press (A) on [TitleID].trim.nds to select it, then select Copy to 0:/gm9/out.
(old) DecryptWIP9
  • Had some issue with Mario Kart 7 (game crashed in the middle of a race).
(old) Uncart
  • tbc.

Dumping a Title

GodMode9
  • Start GodMode9 (press START + POWER).
  • To dump a user installed title, navigate to [A:] SYSNAND SD. To dump a system title, navigate to [A:] SYSNAND SD.
  • Hold (R)+(A) to open drive options.
  • Select Search for titles.
  • Press (A) to continue.
  • Press (A) on the .tmd file to select it, then select TMD file options..., then select Build CIA (standard) to generate a .cia file in /gm9/out on the SD card.

See also Citra's guide.

Convert a .3ds game into .cia game

On PC, using 3DS Simple CIA Converter
786dcbba10092cf57ae007d08ac8f916e764d93684f5e8d052a963922881740e  3DS Simple CIA Converter v4.3.rar
e8e55830a795e337a89589bf267ac815                                  3DS Simple CIA Converter v4.3.rar
  • Run from wine
  • Copy the .3ds file into the roms/ folder
  • Click the generate ncchfile stuff button
  • Copy the file to 3DS uSD card, in folder /files9/.
  • Launch Decrypt9. Select XORpad Generator Options and NCCH Padgen.
Ignore error about missing seeddb.bin file.
  • Back on PC, copy the .xorpad files into converter xorpad/ directory, and click Convert 3DS ROM to CIA button.
(Click FW Spoof first if FW spoofing is needed)
  • When done, copy the .cia file to 3DS uSD and import them using FBI or BigBlueMenu.
On the 3DS, using GodMode9
  • Start GodMode9 (press START + POWER).
  • Navigate to [0:] SDCARDcias, then cias folder.
  • Press (A) on the .3ds file to select it, then select NCSD image options…, then select Build CIA from file to generate a .cia file in /gm9/out on the SD card.
Other converters or guides

Installing .cia from the network

Using SocketPunch
  • On 3DS, start FBI application
  • On PC, go to location where the CIA are, then:
java -jar /smb/lacie-cloudbox/family/backup/nintendo_3ds/nintendo/cia/SocketPunch/SocketPunch_v0.3.4.jar

Backup / restore savegames

Using Checkpoint
  • Install Checkpoint with .cia file.
  • Usage is straightforward.
  • Used successfully to transfer saves between consoles for Hyrule Warrior Legends, Ocarina of Time, A Link Between Worlds...
Using JKSM
  • Reference: GitHub, gbatemp
  • Get CIA file from GitHub.
  • Note: Running MHGSV.3dsx from HomeBrew gives an error Error opening MHG's ExtData! Error opening MHG's Extra Data! Press start to exit. On CFW like Luma3DS, don't bother running the 3dsx version, but instead runs the CIA version [6].
  • JKSM can also sets play coins to any arbitrary value (max 300?).
Anti-Savegame Restore
(old) Using SaveDataFiler (Dev kit leaked from Nintendo)
  • This can be used to backup 3DS ROM / cartridge / eshop / cia games, or exchange saves between all these.
  • For 3DS ROM, select the game using Gateway but don't launch it. For cartridge, insert the cartridge first.
  • Start SaveDataFiler
To backup a savegame:
  • For ROM/cartridge, select CTR Card, or the game id for eshop / cia.
For some games (like Fantasy Life), go to extdata/ and select the correct id (Fantasy Life 00001131).
To restore a savegame:
  • Go to SD tab. For ROM/cartridge, select the file and press L+A. For eshop / cia, press R+A. For extdata/ games (like Fantasy Life), simply press A.
Caution. For card1 games (except Fantasy Life), rename the file 000400000FF40A00.sav to game id.
Caution. For card2 games, the save are stored within the game itself. So for GW rom, the save are stored in the .3ds file on the red gateway card!

A9LH

Source: https://github.com/Plailect/Guide/wiki

  • Excellent troubleshooting section (to avoid bricking)

Gateway

ON SYSNAND, DO NOT DO A FIRMWARE UPDATE WHEN IN GATEWAY MODE - DOING SO WILL DELETE A9LH AND PROBABLY BRICK THE 3DS. THE A9LH LOADER FROM GATEWAY DOES NOT HAVE THE FIRM PROTECTION THAT PREVENTS REMOVAL OF A9LH.'

The Gateway flashcart.

Status
My feature requests

Info

  • microSD card
The 3DS comes with a pre-bundled microSD card that is used to store user custom data like themes, but also pictures. We refer to it as the 3DS microSD card.
In a system with a flashcart, there is actually a second microSD card, in the flashcart itself. This is flashcart microSD card, or for gateway users, the gateway microSD card.
  • Sysnand vs emunand
Sysnand is the real nand memory on the 3DS itself, containing the original 3ds fw. Emunand is the one emulated on the 3DS microSD card.
  • Homebrew vs Gateway (flashcart) exploits
Howebrew only requires a userland exploit to launch. Gateway requires a kernel level exploit. So homebrew can run on more recent sysnand version than gateway does.
See this comment for a detailed answer.
Gateway's firmware is updated instead to run its exploit on specific sysnand versions.
...
And Gateway won't support 10.5 in the near future, as homebrew and Gateway (or other CFWs) are completely different things. Homebrew can be run with a userland exploit (some rights on the system, but nothing severe), while Gateway, rxTools, etc. need a kernel exploit (execution and manipulation rights for many parts of the console's memory, only achievable through exploits that can be run in userland mode).
  • Sysnand >9.2 support by gateway
Pending. See this comment and follow-up answers.

Tips

  • Distinguish EmuNAND and SysNAND
  • (source Gateway manual) To easily differentiate between booting from SysNAND or EmuNAND, just setup folders with initials "S Y S" for SysNAND, and "E M U" for EmuNAND.
Not that setting a theme color does not work since themes are shared by both NAND.
  • Boot back directly in SysNAND*
  • Simply go to the System Settings, and leave. LEAVING SYSTEM SETTINGS !ALWAYS! RESUME INTO SYSNAND, SO BE CAREFUL NOT TO DO ANY UPDATE THERE!

Shortcuts

  • hold 'L' when booting Gateway menu --> Go into Gateway menu.
  • In gateway menu, hold down + B to power off.
  • In GW Menu, HBL Menu: 'B' is often used to exit.
  • Hold D-PAD Down button while booting to boot into HBL (MenuHax shortcut, configured as Type1).

Reference manual

Reference software

Including the Menuhax manager

Entering the gateway menu. We follow the Gateway manual:

  • We must create a new WiFi profile, but also prevent firmware update. For this, we use custom DNS settings.
So create a new WiFi profile on the 3DS manually, with
  • SSID / Security: enter your WiFi settings
  • IP Address: Auto-obtain
  • DNS: DO NOT auto-obtain. Set primary DNS to 107.211.140.165, and secondary DNS to 107.211.140.065.
(The gateway manual refers only to 107.211.140.065. Got both addresses from here.)
Run a Connection Test to make sure the WiFi settings are correct.
  • Go to Home Menu Settings, and select Change Theme. Select a random theme (like red), and back to Default.
This is to make sure the required files are created for the MenuHax to work.
  • Power off the 3DS, and move the 3DS internal microSD to the PC, then:
  • HBL Starter Pack -- Extract starter.zip to microSD root folder
  • GW Firmware -- Copy latest Launcher.dat to microSD root folder
  • GW Firmware -- Extract GW_3DSX.zip to microSD root folder (will create a /3ds/GW folder).
The microSD root folder should look as follows:
3ds/
    CHMM2/
    ctr-httpwn/
    ftbrony/
    GW/                                <---
        GW.3dsx
        GW.smdh
    hans/
    install/
    menuhax_manager/
    mgba/
    prboom/
    qtm/
    scrtool/
    eshop.smdh
    eshop.xml
    ironhax.smdh
    ironhax.xml
    sploit_installer_oot3dhax.smdh
    sploit_installer_oot3dhax.xml
Nintendo 3DS/
boot.3dsx
Launcher.dat                           <---
webkithax_tmp.bin
  • !!! ISSUE ON 9.9.0-26E !!!
We get the following message:
The Internet Browser cannot be used at this time. Please try again later or in a different network environment.
Solution from https://yls8.mtheall.com/3dsbrowserhax.php:
  • Go to browser, and close all opened pages. The browser should display the empty URL bar (with text Enter a URL or search item).
  • Back to HOME menu, set date/time to 2000/01/01 00:00 (that exact day and year, i.e. year two thousand)
  • Go to browser, and quickly click the setting button (bottom left) and select Settings. Then click Clear All Save Data.
  • Then either scan the QR code using the camera or open the browser, and enter the auto browserhax URL.
  • On launch, the browser will welcome you again. Select your favorite search engine, and then browserhax should start normally.
Don't move back to HOME menu after going to the browser. Also, steps above must be repeated when date reaches January 2. So better install a more permanent hax.
  • In HBL menu, select and start menuhax_manager v2.2. In order:
  • Select Configure/check haxx trigger button. I choose Type 1 with 'L' key.
  • Select Install.
  • Select Configure menuhax main-screen image.
  • Reboot, and press 'L' to go into HBL menu using the menuhax trigger.
  • CANNOT go into Gateway menu
  • Downgrade to 9.2 (see above)
  • Still CANNOT go into Gateway menu
  • --> From the forum, I have to redo the firmware downgrade again. So tried again (had to try 4x). Indeed one file was updated.
  • Now, finally, CAN start the Gateway menu from HBL!

Updating the RED Card

  • Start HBL, and start the Gateway menu
  • Select 'BOOT GATEWAY MODE', press A. Press A again to proceed to update, and press START to confirm. Wait a minute for update to complete.

Backing up the SysNAND

  • In the Gateway menu, select "BACKUP SYSTEM NAND", press A then START to start.
  • When done, move the internal microsd to PC, and move the file NAND.BIN to a safe location (for later restore if needed).

EmuNAND Setup

  • !!! THIS WILL DELETE EVERYTHING ON INTERNAL MICROSD !!! So backup all data first.
  • In the Gateway menu (Don't forget to press L when booting from HBL because RED card is now setup), select "FORMAT EMUNAND".
  • Setup again HBL and MenuHax as usual (since the microSD has been formatted).

Install ROM on the Gateway microSD

  • Format the gateway microSD card in ExFat format (done in Windows 7)
  • Copy the *.3ds file in the microSD root folder.
  • Rename the *.3dz file to enable online play (only if game backup was done from the same 3DS console).

Update to latest System Menu in EmuNAND

  • Done it via the System Settings menu (NOT via eShop, since gbatemp FAQ reports that doing so would actually update the SysNAND).

Restore the extdata backup:

  • See https://3dbrew.org/wiki/Extdata for reference info (extdata identifier)
  • Copied back 00000227 (Mii Maker)
  • copied back 00000228 (Streetpass Mii Plaza)
  • Copied back 0000022d (Face Raiders)
  • Note: had to boot browserHax 3x before could get successfully into EmuNAND.

Install bluecardfix.cia (or similar):

  • Boot into GW Menu using BrowserHax -> HBL -> hold 'L' key and select GW Menu.
  • Follow the GW Manual, but after importing mset_eur.cia, also import bluecardfix.cia (to enable back the Blue GW card).
  • IT WORKS! Don't forget to:
   * Remove DevMenu.3ds for the Red GW (or rename it). To avoid innocent hands to mess with it.

Install OoTHax on Zelda OoT Game

  • Copied the file AQEP.sav (for EUR) to 3DS uSD.
  • Boot into GW menu, insert Zelda OoT cartridge, and select Restore Game Save.
  • Check that hax works: boot Zelda OoT, select 1st save (it's normal it save title exceeds the box), and then press 'A' (Check/Voir) to go to GW Menu.

EmuNAND

Unlinking EmuNAND and SysNAND

By default, EmuNAND uses the same NNID as SysNAND, and hence all system menu settings are shared (like theme selection). To prevent this, NANDs must be unlinked.

Some guides to do that:

  • On this page suggest to format the SysNAND without any 3DS uSD card inserted.

DS / DSi game support

DS / DSi game support
  • Can boot in EmuNAND (default) or SysNAND (with nag screen, NOT RECOMMENDED because firmware update can brick your device)
  • on EmuNAND, either in GATEWAY mode or CLASSIC mode.
  • DSi ware, DS card, acekard2i DOES NOT work in gateway mode.
  • With A9HL, Classic mode is obsolete since it is better to boot in SysNAND directly and boot acekard2i from there.

Install GW on Luma 3DS

See https://gbatemp.net/threads/tutorial-using-luma3ds-with-gateway-on-v2-a9lh.431691/

First attempt (on Sys 11.0.0_33E)
  • Without emunand. GW not booting after dragon logo. According to post above, this would be because the old EMUNand was not completely deleted.
Second attempt (on Sys 11.0.0_33E)
  • Using GW w/o EMUNand is dangerous because there is no FIRM0/FIRM1 protection. So a FW update can brick the console and/or remove A9LH, locking us to the newest firmware. So we'll create again a new EMUNand.
  • Use recent EMUNand9 to create a new EMUNand.
  • At boot, press Down to trigger GW, then R to trigger GW Red Card Update.
  • Wait for the Red Card Update to complete
  • Reboot... press Down, and Voila! we are in GW mode!

Games

  • Look on 3dsdb.com for the releasename of a given game (for instance New.Super.Mario.Bros.2.EUR.3DS-CONTRAST for _New Super Mario Bros 2_).
  • Search the releasename on Google.
  • Download.

History - games:

History - website:

  • http://www.nds-passion.xyz -- Requires subscription, but quality links and little nags (many different possibilities for download).

Homebrew

Install

On A9LH system:

  • Use CFW like Luma 3DS.
  • Install HW starter kit on 3DS uSD
  • Install HB Launcher as CIA (use FBI to install).
  • Start the HB Launcher to go to HB menu (first launch requires internet access to dowload the hax payload).

Applications

List of current applications:

Checkpoint To save / restore savegames.
Anemone3DS A theme and boot splash manager for the Nintendo 3DS console.
GodMode9 multipurpose tool which can do NAND and cartridge function. See GodMode9 Usage page in Plailect's guide.
FBI To install .cia files. Homebrew version of Nintendo DevMenu.
ftpd aka. Super FTP Turbo II'. For file transfer.

List of old applications (no longer used, superseded by better applications above):

DECRYPT9 Best use the WIP version. Superseded by GodMode9.
EMUNAND9 Best tool to format and adminstrate EmuNAND. Better than using Gateway's tool.

CIA

  • CIA is the format used to install software (games, tools) on the 3DS device uSD card.
  • Legit CIA software are usually installed via eShop.
  • Alternatively they can be installed using a CIA installer and a .cia file.

List of CIA installer:

  • DevMenu
From Nintendo dev kit. Install it using FBI injected in H&S app.
  • FBI
Open-source. Can be safely injected in Nintendo's Health&Safety app on system menu, even on unpatched (non-rooted) device.
  • BigBlueMenu
Another CIA installer.
FBI - network transfer
  • Use falconpunch:
python FalconPunch.py hblauncher_loader.cia
  • There is also a GUI alternatives: SocketPunch_0.3.4.zip

CFW

CFW, or Custom Firmware are modified Firmware for the 3DS that uses the Official firmware as a base. It allows to use applications that aren’t allowed by Nintendo, and among other play game backups.

Recent:

Luma 3DS
  • Was called AuReiNand before, a fork of ReiNand from AuroraWright.
  • List of features:
  • Disable firmware checks (allows to use patched firmware like TWL_FIRM patch to use acekard2i).
  • Remove some nintendo restrictions (like region lock)
  • Start (ie. chainload) ARM9 homebrew applications (like DECRYPT9, EMUNAND9...)

Old:

Reinand
  • A old CFW by Reisyukaku.

Security flaws

Acekard2i

Thanks to latest CFW like Luma3DS (which disables N3DS blacklist), Acekard2i flashcard works out-of-the-box provided they have the latest firmware. Here we give the procedure to update the flashcard.

Links
Update
  • Download the udpate:
fdf49f11bdeb42e9fd9355ef42317f8a6436a8735b2f5cd40007b1e0ff00de37  18392-AceKard_2_v4.23_menu.zip
d3f2c724d656e2584f3e15a0ae27348a9842a6bf17ad1706629d93445696cc0d  ak2ifw_update_dsi-v1.41.7z
b5b0fccf2536bf46915817b381ddaae4fdf705ed8deb7ecbd1d9611feb6312d8  ak2ifw_update_dsi-v1.42_3ds-v2.0.7z    (fast start as usual)
9c80186547e6cd8d1ccb0aa4cfdafe9b6186e832e83f302e50f067622c895645  ak2ifw_update_dsi-v1.43_3ds-v3.0.7z    (not tested. Possibly slower start)
891f3d59781bf530ae33fb506abc0bbacd4915218d1422c42c7f4e96d0bddd78  ak2ifw_update_dsi-v1.44_3ds-v4.3.7z    (but very slow start)
  • Use the official Acekard menu v4.23 to update (remove everything else on the card).
  • On N3DS, to get the best boot performance, it is recommended to use update dsi v1.42 (Chessmaster), and use the patched TWL_FIRM to bypass black list check.
More troubleshooting

Troubleshoot

Fragmentation error

  • Fragmentation error: If a fragmentation error is shown, you need to fix it on your PC with -
GW3DS.EXE FIX DRIVELETTER:

3DS freezes at boot / sleep wake-up w/ Acekard 2i inserted

When inserting Acekard 2i into 3DS, the HOME menu freezes. But still, we get black screen freeze at wake-up from sleep mode. Even though the suspended game is a 3DS (CIA) games. Only solution in that case is to remove the cartridge and hard reset by pressing power button. →See Enable Acekard 2i / GW Blue card.

3D not working on system menu (GW EmuNAND)

Solution: Close the lid and open it back.

Can't open FAT32 partition

Can't open FAT32 partition on 3DS uSD with EmuNAND

On Linux, use instead an SD adapter to read the uSD card.

Can't open exfat partition

On Linux, install the exfat FUSE package (! unstable it seems).