flashcart_core
flashcart_core copied to clipboard
ntrteam
R4i Gold 3ds (r4ids.cn) (rev.6)
Alright, I got some pics for you all with my r4 gold 3ds. This is the LAST update that officially worked with this revision. You can find the revision on the bottom right on the back of the card, on the board. http://filetrip.net/dl?9l07ieOpEm - .nds update file
Pics arent sideways if you click on them, sorry bout that.
Images (Click to Expand)
I've got a similar flashcard from r4i-sdhc.com, but I don't think it's compatible... It's also use the main menu to upgrade the flashcards... Should I create another issue?
@dark-samus I have the same card, but revision C. That one has HW Rev: A7A7A7A7. Shows up as R4i Gold 3DS. Works fine with ntrboot flasher 0.1.2.
Pretty sure any card before the cutoff doesnt work. So all pre 4.5 r4i gold 3ds, dont work.
@Juanito9001, if this is the cart you're talking about mentioned in the issue... well, it's been over what they think works and doesn't work at the moment.
If it's not this card mentioned in this issue, then this is not the place. If you want to ask questions like this, I'd suggest that IRC would be a better place (though the answer is most likely to be "No", "Not Yet", or "We don't know").
@Banamy when you're around, please attempt to dump flash with this: ntrboot_flasher.zip
post the result here. An (untrimmed) dump from GM9 would be useful as well :)
http://s000.tinyupload.com/index.php?file_id=02820229957007339507 - dump flash
https://mega.nz/#!qkUnQRCZ!iPRJ1S1ksmggytkI_AuuxgJLOPOAWHg_Q_V5gmBDdsg - untrimmed dump
@dark-samus
excellent, it looks like the flash is dumpable with the standard commands :D it does have different crypto though. I'll see what I can do :)
I see why I didn't just RE this thing at first; I was busy with another flashcart and most of the program seems encrypted. Multiple layers too. I've already got through one of the layers, but it appears that they actually open the .nds file again and do some manipulation there... It's odd but I'm getting there...
Just wanted to throw my name in the hat for possible testers down the road when you are ready. I did note one thing when making my own dump. It showed all 0's when there was no microSD inserted. It showed FC2 as above when one was present. The dump itself didn't change regardless of the state. Just thought to let you know.
EDIT: Would it help at all if I supplied my dump as well?
lol, ok, looks like the encryption for this revision is the same as the other revs. The updater checks for HW rev 0xA4A4A4A4, so I'm not sure why we're getting that HW rev.... in any case, it should be fairly simple to support your cart once we figure that out :)
tell me what HW rev this build says when you try to dump flash. [removed old build]
@dark-samus I tried to use the same approach that worked with my rev5 with Banamy's rev6, but it didn't work for him in our tests. (maybe the blowfish goes somewhere other than 0?)
Anyway, here's my notes in case they may help: ntr_blowfish_retail = 0x0 (plain) b9s_payload = 0x80000 (enc) b9s_header = 0x1FFE00 (enc) enc = same memecrypto as latest r4ids.cn versions
the main problem really is detection. Though, that may be going away in the near future...
try this build: ntrboot_flasher.zip
this just has the HW revision check patched out. From what I've seen, should work fine.
@dark-samus I might just be doing the whole thing wrong, but when I use that build everything seems fine. I dump the flash and after the dump I use the inject ntrboot option. However, I do not get booted into b9safeboot on the 3ds I'm trying to hack (N3DS)(I do have the boot files etc.). Am I using this wrong? Or is my cart broken? (Also, I should not have a SD-card in the flashcart slot, right?)
@dark-samus I got the backup.bin here http://s000.tinyupload.com/index.php?file_id=04402297391933793406
Any updates on this?
EDIT: I tried restoring the backup.bin and now my card is no longer recognized even though the flasher says everything is good to go
backup.bin here: https://www.mediafire.com/file/on7fca4w6pfr5t1/backup.bin
