add waithax

This commit is contained in:
Plailect 2016-12-12 23:30:44 -05:00 committed by Plailect
parent 43231344dc
commit f1c130e195
No known key found for this signature in database
GPG key ID: F8A415C5EA602A41
6 changed files with 200 additions and 63 deletions

View file

@ -1,26 +1,10 @@
---
title: "DSiWare Downgrade"
permalink: /dsiware-downgrade.html
title: "DSiWare Downgrade (App Injection and Second 3DS)"
permalink: /dsiware-downgrade-(app-injection-and-second-3ds).html
---
**If you are on 11.0.0 or 11.1.0, do NOT update to 11.2.0. A new update will be coming soon that allows for DSiWare NFIRM Downgrading _without_ a second 3DS or hardmod for versions under 11.2.0.**
{: .notice--primary}
{: .notice--success}
{% capture notice-old %}
If you already own one of the following games on **the source 3DS**, check out [the old version of this page](dsiware-downgrade-(old)):
+ **Fieldrunners**
+ **Legends of Exidia**
+ **Guitar Rock Tour**
+ **The Legend of Zelda: Four Swords**
{% endcapture %}
<div class="notice">{{ notice-old | markdownify }}</div>
If you are between versions 11.0.0 and 11.2.0, you must follow this guide to downgrade your NATIVE_FIRM using DSiWare and a second 3DS which has already has a Custom Firmware installed on it in order to dump and restore your NAND.
{: .notice}
{: .notice}
If you are below 11.2.0 on either device, then you should do the ctr-httpwn steps (when prompted) on each device under 11.2.0 to allow you to System Transfer with them.
{: .notice--info}
@ -37,6 +21,9 @@ This guide will assume the CFW 3DS is running arm9loaderhax and was setup with t
You can skip everything related to **Steel Diver: Sub Wars** and steelhax if you already have a working primary entrypoint (e.g: OOT3dHax, FreakyHax) for **the target 3DS**, and use that instead.
{: .notice--info}
Your DSiWare's save will be backed up before getting replaced by the hacked save.
{: .notice--info}
{% capture notice-4 %}
This exploit requires you to [System Transfer](http://en-americas-support.nintendo.com/app/answers/detail/a_id/13996/) from a CFW 3DS to a stock 3DS as part of the steps. System Transfers will work in the following directions *only*:
+ New 3DS -> New 3DS
@ -106,7 +93,20 @@ Use a [save manager](https://github.com/J-D-K/JKSM/releases/latest) to backup an
11. Reinsert each SD card back into their corresponding 3DS
12. Press (Start) to reboot
##### Section II - Injecting the game and save
##### Section II - Backup DSiWare
After completing the entire guide, you can use this backup to restore your DSiWare saves
{: .notice--info}
This backup can only be used on this NAND. If you format your 3DS or restore another NAND (specifically if `movable.sed` is ever modified), it will become unusable.
{: .notice--info}
1. Go to System Settings, then "Data Management", then "DSiWare", then "Nintendo DS Profile" on **the source 3DS**
2. Copy any DSiWare games that are already on the SD Card back to the System Memory
3. Copy the DSiWare game you intend to use to the SD Card
4. Exit System Settings
##### Section III - Injecting the game and save
1. Open GodMode9 from arm9loaderhax by holding (Up) during boot
2. Navigate to `SDCARD`
@ -147,7 +147,7 @@ Use a [save manager](https://github.com/J-D-K/JKSM/releases/latest) to backup an
+ If you get a black screen, [follow this troubleshooting guide](troubleshooting#twl_broken)
+ If the game is missing from **the target 3DS** or has an error about corrupted or inaccessible save data, [follow this troubleshooting guide](troubleshooting#ts_dsiware)
##### Section III - steelhax
##### Section IV - steelhax
**This will allow you to enter the homebrew launcher after the System Transfer.**
@ -186,7 +186,7 @@ Use a [save manager](https://github.com/J-D-K/JKSM/releases/latest) to backup an
+ Even though you will be downgrading its NFIRM, you should still select the system version it is on now
12. Copy _the contents of_ the `starter.zip` to the root of **the target 3DS**'s SD card, then put the SD card back into **the target 3DS**
##### Section IV - ctr-httpwn
##### Section V - ctr-httpwn
**This section is only required if _the target 3DS_ is under 11.2.0.**
@ -208,7 +208,7 @@ Use a [save manager](https://github.com/J-D-K/JKSM/releases/latest) to backup an
+ Keep in mind that exiting the System Settings will reboot the system
+ If the system is rebooted, you'll have to re-run ctr-httpwn before System Transfer will work
##### Section V - System Transfer
##### Section VI - System Transfer
1. **Backup every file on both 3DS's SD cards to two separate folders on your computer (keep track of which is which)!**
2. Reinsert each SD card back into their corresponding 3DS
@ -226,7 +226,7 @@ Use a [save manager](https://github.com/J-D-K/JKSM/releases/latest) to backup an
+ Slowest Method: If you don't have the ability to move the data on a PC use the **full** "Wireless Transfer" option (option 1).
6. Go to [this link](http://en-americas-support.nintendo.com/app/answers/detail/a_id/227/) and follow Nintendo's official instructions for System Transferring from one system to another while keeping in mind what you just read
##### Section VI - Restoring the source 3DS
##### Section VII - Restoring the source 3DS
1. On **the source 3DS**, complete initial setup
2. Do one of the following
@ -236,7 +236,7 @@ Use a [save manager](https://github.com/J-D-K/JKSM/releases/latest) to backup an
3. Reboot **the source 3DS** while holding Start to launch Hourglass9
4. Go to SysNAND Backup/Restore and restore SysNAND from `NANDmin.bin`
##### Section VII - Backing up the target 3DS's NFIRM
##### Section VIII - Backing up the target 3DS's NFIRM
1. Copy `boot.nds` to the root of **the target 3DS**'s SD card
1. Create a folder named `dgTool` on the root of **the target 3DS**'s SD card if it does not already exist
@ -250,9 +250,9 @@ Use a [save manager](https://github.com/J-D-K/JKSM/releases/latest) to backup an
+ You may have to force power off by holding the power button
8. Put your SD card in your computer, then copy `F0F1_N3DS.bin` or `F0F1_O3DS.bin` (depending on your device) to a safe location; make backups in multiple locations; this backup will save you from a brick if anything goes wrong
##### Section VIII - Flashing the target 3DS's NFIRM
##### Section IX - Flashing the target 3DS's NFIRM
**Do NOT downgrade with dgTool on a device that already has arm9loaderhax installed or you will BRICK!**
**Never downgrade with dgTool on a device that already has arm9loaderhax installed or you will BRICK!**
1. Launch your DSiWare game on **the target 3DS**
4. Launch dgTool by starting your DSiWare game
@ -261,7 +261,7 @@ Use a [save manager](https://github.com/J-D-K/JKSM/releases/latest) to backup an
+ You may have to force power off by holding the power button
5. Reboot
##### Section IX - Exploit verification
##### Section X - Exploit verification
1. Copy and merge the `3ds` folder from the 3DSident `.zip` to **the target 3DS**'s SD card
2. Reinsert your SD card into **the target 3DS**
@ -275,10 +275,10 @@ Use a [save manager](https://github.com/J-D-K/JKSM/releases/latest) to backup an
Continue to [Homebrew Launcher (No Browser)](homebrew-launcher-(no-browser)), using steelhax for your entrypoint instead of one of the ones listed.
{: .notice--primary}
You can use another entrypoint if you want to, I just recommend steelhax because it is free.
You can use another entrypoint if you want to; steelhax is recommended because it is free.
{: .notice--info}
**the target 3DS**'s version number will *not* have changed in the settings.
**The target 3DS**'s version number will *not* have changed in the settings.
{: .notice--info}
If, once transferred, steelhax only crashes to a black screen on **the target 3DS**, [follow this troubleshooting guide](troubleshooting#ts_steelhax).

View file

@ -0,0 +1,131 @@
---
title: "DSiWare Downgrade (Save Injection)"
permalink: /dsiware-downgrade-(save-injection).html
---
If you are between versions 11.0.0 and 11.2.0, you must follow this guide to downgrade your NATIVE_FIRM using DSiWare
{: .notice}
**They are only useful if you already own "Fieldrunners", "Legends of Exidia", "Guitar Rock Tour", or "The Legend of Zelda: Four Swords" on the source 3DS. Each game has been pulled from the eShop; you must have already gotten them.**
{: .notice--primary}
This takes advantage of an oversight which allows DSiWare titles to read and write anywhere in NAND.
{: .notice--info}
Be prepared to wait 20 minutes (New 3DS) to an hour (Old 3DS). Slowhax (waithax) is named so for a reason.
{: .notice--info}
This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed [here](https://www.3dbrew.org/wiki/3DS_System_Flaws).
{: .notice--info}
Your DSiWare's save will be backed up before getting replaced by the hacked save.
{: .notice--info}
#### What you need
* Already own one of the following exploitable DSiWare games installed on your 3DS *(you must have already installed one; they have all been pulled from the eShop)*
+ **Fieldrunners**
+ **Legends of Exidia**
+ **Guitar Rock Tour**
+ **The Legend of Zelda: Four Swords**
* An entrypoint from [Homebrew Launcher (No Browser)](homebrew-launcher-(no-browser))
* The latest release of [3ds_dsiwarehax_installer](https://github.com/yellows8/3ds_dsiwarehax_installer/releases/latest)
* The latest release of [waithax](https://github.com/Mrrraou/waithax/releases/latest)
* The latest release of [3DSident](https://github.com/joel16/3DSident/releases/latest)
* The latest release of [dgTool](https://github.com/Plailect/dgTool/releases/latest)
* The NFIRM `.zip` corresponding to the device and version of **the target 3DS**:
+ [New 3DS 11.0.0 to 10.4.0](magnet:?xt=urn:btih:2d13a5ea1570f911bd5c6423e0c30e51d548837a&dn=11.0.0%5Fto%5F10.4.0%5Fn3ds.zip&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=http%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fzer0day.ch%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969%2Fannounce&tr=http%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2F9.rarbg.com%3A2710%2Fannounce&tr=udp%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=http%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker1.wasabii.com.tw%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.baravik.org%3A6970%2Fannounce&tr=http%3A%2F%2Ftracker.tfile.me%2Fannounce&tr=udp%3A%2F%2Ftorrent.gresille.org%3A80%2Fannounce&tr=http%3A%2F%2Ftorrent.gresille.org%2Fannounce&tr=udp%3A%2F%2Ftracker.yoshi210.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.filetracker.pl%3A8089%2Fannounce)
+ [Old 3DS 11.0.0 to 10.4.0](magnet:?xt=urn:btih:72393bbd99bc285db84a9cabf39d9b3200058d6a&dn=11.0.0%5Fto%5F10.4.0%5Fo3ds.zip&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=http%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fzer0day.ch%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969%2Fannounce&tr=http%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2F9.rarbg.com%3A2710%2Fannounce&tr=udp%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=http%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker1.wasabii.com.tw%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.baravik.org%3A6970%2Fannounce&tr=http%3A%2F%2Ftracker.tfile.me%2Fannounce&tr=udp%3A%2F%2Ftorrent.gresille.org%3A80%2Fannounce&tr=http%3A%2F%2Ftorrent.gresille.org%2Fannounce&tr=udp%3A%2F%2Ftracker.yoshi210.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.filetracker.pl%3A8089%2Fannounce)
~
+ [New 3DS 11.1.0 to 10.4.0](magnet:?xt=urn:btih:d7d60c27c18f53bd8508a194656a465f6448bedf&dn=11.1.0%5Fto%5F10.4.0%5Fn3ds.zip&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=http%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fzer0day.ch%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969%2Fannounce&tr=http%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2F9.rarbg.com%3A2710%2Fannounce&tr=udp%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=http%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker1.wasabii.com.tw%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.baravik.org%3A6970%2Fannounce&tr=http%3A%2F%2Ftracker.tfile.me%2Fannounce&tr=udp%3A%2F%2Ftorrent.gresille.org%3A80%2Fannounce&tr=http%3A%2F%2Ftorrent.gresille.org%2Fannounce&tr=udp%3A%2F%2Ftracker.yoshi210.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.filetracker.pl%3A8089%2Fannounce)
+ [Old 3DS 11.1.0 to 10.4.0](magnet:?xt=urn:btih:0caf9a948a2d8bf23606d641f6628e2baeb983bb&dn=11.1.0%5Fto%5F10.4.0%5Fo3ds.zip&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=http%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fzer0day.ch%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969%2Fannounce&tr=http%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2F9.rarbg.com%3A2710%2Fannounce&tr=udp%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=http%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker1.wasabii.com.tw%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.baravik.org%3A6970%2Fannounce&tr=http%3A%2F%2Ftracker.tfile.me%2Fannounce&tr=udp%3A%2F%2Ftorrent.gresille.org%3A80%2Fannounce&tr=http%3A%2F%2Ftorrent.gresille.org%2Fannounce&tr=udp%3A%2F%2Ftracker.yoshi210.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.filetracker.pl%3A8089%2Fannounce)
~
+ [New 3DS 11.2.0 to 10.4.0](magnet:?xt=urn:btih:881388a552a1ce9a963d391bf1a023642270991c&dn=11.2.0%5Fto%5F10.4.0%5Fn3ds.zip&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=http%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fzer0day.ch%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969%2Fannounce&tr=http%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2F9.rarbg.com%3A2710%2Fannounce&tr=udp%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=http%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker1.wasabii.com.tw%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.baravik.org%3A6970%2Fannounce&tr=http%3A%2F%2Ftracker.tfile.me%2Fannounce&tr=udp%3A%2F%2Ftorrent.gresille.org%3A80%2Fannounce&tr=http%3A%2F%2Ftorrent.gresille.org%2Fannounce&tr=udp%3A%2F%2Ftracker.yoshi210.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.filetracker.pl%3A8089%2Fannounce)
+ [Old 3DS 11.2.0 to 10.4.0](magnet:?xt=urn:btih:a479e4ee55efbc18c181d426cd77a34815388151&dn=11.2.0%5Fto%5F10.4.0%5Fo3ds.zip&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=http%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fzer0day.ch%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969%2Fannounce&tr=http%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2F9.rarbg.com%3A2710%2Fannounce&tr=udp%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=http%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker1.wasabii.com.tw%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.baravik.org%3A6970%2Fannounce&tr=http%3A%2F%2Ftracker.tfile.me%2Fannounce&tr=udp%3A%2F%2Ftorrent.gresille.org%3A80%2Fannounce&tr=http%3A%2F%2Ftorrent.gresille.org%2Fannounce&tr=udp%3A%2F%2Ftracker.yoshi210.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.filetracker.pl%3A8089%2Fannounce)
#### Instructions
##### Section I - Prep Work
1. Do [Homebrew Launcher (No Browser)](homebrew-launcher-(no-browser)) to get an entrypoint to the Homebrew Launcher
4. Copy and merge the `3ds` folder from the 3ds_dsiwarehax_installer `.zip` to the root of your SD card
5. Copy and merge the `3ds` folder from the 3DSident `.zip` to your SD card
5. Copy `waithax.3dsx` to the `/3ds/` folder on your SD card
6. Copy `boot.nds` to the root of your SD card
1. Create a folder named `dgTool` on the root of your SD card if it does not already exist
3. Copy the contents of the NFIRM `.zip` to the `dgTool` folder on the root of your SD card
4. Reinsert your SD card into your 3DS
##### Section II - Backup DSiWare
After completing the entire guide, you can use this backup to restore your DSiWare saves
{: .notice--info}
This backup can only be used on this NAND. If you format your 3DS or restore another NAND (specifically if `movable.sed` is ever modified), it will become unusable.
{: .notice--info}
1. Go to System Settings, then "Data Management", then "DSiWare", then "Nintendo DS Profile" on **the source 3DS**
2. Copy any DSiWare games that are already on the SD Card back to the System Memory
3. Copy the DSiWare game you intend to use to the SD Card
4. Exit System Settings
##### Section III - waithax
1. Get into the Homebrew Launcher using your entrypoint
2. Launch waithax
3. Wait
+ On New 3DS, this will take about 20 minutes
+ On Old 3DS, this will take about an hour
4. Once it's done, press (Start) to exit
5. Launch 3ds_dsiwarehax_installer
6. Select the DSiWare game you want to install the exploit on
7. Once it's done, press (A) to exit
8. Press (Start) to open the homebrew launcher exit menu
9. Press (A) to exit
##### Section IV - Backing up NFIRM
3. Launch your DSiWare game
4. Launch dgTool using your DSiWare game
+ **Fieldrunners**: Touch the 'Scores' button at the main menu
+ **Legends of Exidia**: After pressing (A) or (Start) at the two title screens, select the first save slot and press continue
+ **Guitar Rock Tour**: Scroll down and go to High-Scores -> Drums -> Easy
+ **The Legend of Zelda: Four Swords**: Just start the game
+ If your game does not have the hacked save file installed, restart from the beginning
5. Select "Dump f0f1" to backup your NFIRM
6. Make note of the NFIRM backup's location
7. Exit dgTool
+ You may have to force power off by holding the power button
8. Put your SD card in your computer, then copy `F0F1_N3DS.bin` or `F0F1_O3DS.bin` (depending on your device) to a safe location; make backups in multiple locations; this backup will save you from a brick if anything goes wrong
##### Section V - Flashing NFIRM
**Never downgrade with dgTool on a device that already has arm9loaderhax installed or you will BRICK!**
{: .notice--danger}
1. Launch your DSiWare game on
4. Launch dgTool using your DSiWare game
+ **Fieldrunners**: Touch the 'Scores' button at the main menu
+ **Legends of Exidia**: After pressing (A) or (Start) at the two title screens, select the first save slot and press continue
+ **Guitar Rock Tour**: Scroll down and go to High-Scores -> Drums -> Easy
+ **The Legend of Zelda: Four Swords**: Just start the game
3. Select "Downgrade FIRM to 10.4" and confirm to flash the 10.4.0 NFIRM bin
4. Exit dgTool
+ You may have to force power off by holding the power button
5. Reboot
##### Section VI - Exploit verification
2. Reinsert your SD card into your 3DS
3. Launch the homebrew launcher on using your entrypoint
4. Launch 3DSident
5. Verify that the following:
+ **Kernel version**: 2.50-11
+ **FIRM version**: 2.50-11
+ If either of these do not display the versions above, make sure you used the correct NFIRM zip and try flashing NFIRM again
Your version number will *not* have changed in the settings.
{: .notice--info}
Continue to [9.2.0 Downgrade](9.2.0-downgrade)
{: .notice--primary}

View file

@ -1,13 +1,13 @@
---
title: "DSiWare Downgrade (Old)"
permalink: /dsiware-downgrade-(old).html
title: "DSiWare Downgrade (Save Injection and Second 3DS)"
permalink: /dsiware-downgrade-(save-injection-and-second-3ds).html
---
**This is the old version of the DSiWare Downgrade instructions. They are only useful if you already own "Fieldrunners", "Legends of Exidia", "Guitar Rock Tour", or "The Legend of Zelda: Four Swords" on the source 3DS**
**They are only useful if you already own "Fieldrunners", "Legends of Exidia", "Guitar Rock Tour", or "The Legend of Zelda: Four Swords" on the source 3DS. Each game has been pulled from the eShop; you must have already gotten them.**
{: .notice--primary}
If you are between versions 11.0.0 and 11.2.0, you must follow this guide to downgrade your NATIVE_FIRM using DSiWare and a second 3DS which has already has a Custom Firmware installed on it in order to dump and restore your NAND.
{: .notice}
{: .notice}
If you are below 11.2.0 on either device, then you should do the ctr-httpwn steps (when prompted) on each device under 11.2.0 to allow you to System Transfer with them.
{: .notice--info}
@ -24,6 +24,9 @@ This guide will assume the CFW 3DS is running arm9loaderhax and was setup with t
You can skip everything related to **Steel Diver: Sub Wars** and steelhax if you already have a working primary entrypoint (e.g: OOT3dHax, FreakyHax) for **the target 3DS**, and use that instead.
{: .notice--info}
Your DSiWare's save will be backed up before getting replaced by the hacked save.
{: .notice--info}
{% capture notice-4 %}
This exploit requires you to [System Transfer](http://en-americas-support.nintendo.com/app/answers/detail/a_id/13996/) from a CFW 3DS to a stock 3DS as part of the steps. System Transfers will work in the following directions *only*:
+ New 3DS -> New 3DS
@ -56,7 +59,6 @@ System Transfers can only be performed once a week.
* The latest release of [3DSident](https://github.com/joel16/3DSident/releases/latest)
* The latest release of [FBI](https://github.com/Steveice10/FBI/releases/latest)
* The latest release of [dgTool](https://github.com/Plailect/dgTool/releases/latest)
* The Homebrew [Starter Kit](http://smealum.github.io/ninjhax2/starter.zip)
* The NFIRM `.zip` corresponding to the device and version of **the target 3DS**:
+ [New 3DS 11.0.0 to 10.4.0](magnet:?xt=urn:btih:2d13a5ea1570f911bd5c6423e0c30e51d548837a&dn=11.0.0%5Fto%5F10.4.0%5Fn3ds.zip&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=http%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fzer0day.ch%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969%2Fannounce&tr=http%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2F9.rarbg.com%3A2710%2Fannounce&tr=udp%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=http%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker1.wasabii.com.tw%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.baravik.org%3A6970%2Fannounce&tr=http%3A%2F%2Ftracker.tfile.me%2Fannounce&tr=udp%3A%2F%2Ftorrent.gresille.org%3A80%2Fannounce&tr=http%3A%2F%2Ftorrent.gresille.org%2Fannounce&tr=udp%3A%2F%2Ftracker.yoshi210.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.filetracker.pl%3A8089%2Fannounce)
+ [Old 3DS 11.0.0 to 10.4.0](magnet:?xt=urn:btih:72393bbd99bc285db84a9cabf39d9b3200058d6a&dn=11.0.0%5Fto%5F10.4.0%5Fo3ds.zip&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=http%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fzer0day.ch%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969%2Fannounce&tr=http%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2F9.rarbg.com%3A2710%2Fannounce&tr=udp%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=http%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker1.wasabii.com.tw%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.baravik.org%3A6970%2Fannounce&tr=http%3A%2F%2Ftracker.tfile.me%2Fannounce&tr=udp%3A%2F%2Ftorrent.gresille.org%3A80%2Fannounce&tr=http%3A%2F%2Ftorrent.gresille.org%2Fannounce&tr=udp%3A%2F%2Ftracker.yoshi210.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.filetracker.pl%3A8089%2Fannounce)
@ -88,7 +90,7 @@ System Transfers can only be performed once a week.
+ **The Legend of Zelda: Four Swords EUR Region**: `4b513956`
+ **The Legend of Zelda: Four Swords USA Region**: `4b513945`
4. Reinsert **the source 3DS**'s SD card
5. On **the source 3DS**, hold Start on boot to launch Hourglass9
5. On **the source 3DS**, hold (Start) on boot to launch Hourglass9
6. Go to SysNAND Options, then SysNAND Backup/Restore, then backup **(min size)** SysNAND to `NANDmin.bin`
7. Press (Select) on the main menu to eject **the source 3DS**'s SD card, then put it in your computer
8. Copy `NANDmin.bin` and `NANDmin.bin.sha` from the `/files9/` folder on your SD card to a safe location; make backups in multiple locations; this backup will save you from a brick if anything goes wrong in the future **(Your backup should match one of the sizes on [this](nand-size) page; if it does not, you should delete it and make a new one!)**
@ -97,7 +99,20 @@ System Transfers can only be performed once a week.
11. Reinsert each SD card back into their corresponding 3DS
12. Press (Start) to reboot
##### Section II - Installing the save
##### Section II - Backup DSiWare
After completing the entire guide, you can use this backup to restore your DSiWare saves
{: .notice--info}
This backup can only be used on this NAND. If you format your 3DS or restore another NAND (specifically if `movable.sed` is ever modified), it will become unusable.
{: .notice--info}
1. Go to System Settings, then "Data Management", then "DSiWare", then "Nintendo DS Profile" on **the source 3DS**
2. Copy any DSiWare games that are already on the SD Card back to the System Memory
3. Copy the DSiWare game you intend to use to the SD Card
4. Exit System Settings
##### Section III - Installing the save
1. Purchase one of the following exploitable DSiWare games (a pirated copy of the game will **not** work)
+ **Fieldrunners**: Works for **USA + EUR**
@ -133,7 +148,7 @@ System Transfers can only be performed once a week.
+ If your game behaves normally and does not give you this error, then you should stop and figure out what went wrong
+ If you get a black screen, [follow this troubleshooting guide](troubleshooting#twl_broken)
##### Section III - steelhax
##### Section IV - steelhax
**This will allow you to enter the homebrew launcher after the System Transfer.**
@ -172,7 +187,7 @@ System Transfers can only be performed once a week.
+ Even though you will be downgrading its NFIRM, you should still select the system version it is on now
12. Copy _the contents of_ the `starter.zip` to the root of **the target 3DS**'s SD card, then put the SD card back into **the target 3DS**
##### Section IV - ctr-httpwn
##### Section V - ctr-httpwn
**This section is only required if _the target 3DS_ is under 11.2.0.**
@ -194,7 +209,7 @@ System Transfers can only be performed once a week.
+ Keep in mind that exiting the System Settings will reboot the system
+ If the system is rebooted, you'll have to re-run ctr-httpwn before System Transfer will work
##### Section V - System Transfer
##### Section VI - System Transfer
1. **Backup every file on both 3DS's SD cards to two separate folders on your computer (keep track of which is which)!**
2. Reinsert each SD card back into their corresponding 3DS
@ -212,7 +227,7 @@ System Transfers can only be performed once a week.
+ Slowest Method: If you don't have the ability to move the data on a PC use the **full** "Wireless Transfer" option (option 1).
6. Go to [this link](http://en-americas-support.nintendo.com/app/answers/detail/a_id/227/) and follow Nintendo's official instructions for System Transferring from one system to another while keeping in mind what you just read
##### Section VI - Restoring the source 3DS
##### Section VII - Restoring the source 3DS
1. On **the source 3DS**, complete initial setup
2. Do one of the following *(or neither if you don't mind __the source 3DS__'s NNID being nonfunctional)*
@ -221,7 +236,7 @@ System Transfers can only be performed once a week.
3. Reboot **the source 3DS** while holding Start to launch Hourglass9
4. Go to SysNAND Backup/Restore and restore SysNAND from `NANDmin.bin`
##### Section VII - Backing up the target 3DS's NFIRM
##### Section VIII - Backing up the target 3DS's NFIRM
1. Copy `boot.nds` to the root of **the target 3DS**'s SD card
1. Create a folder named `dgTool` on the root of **the target 3DS**'s SD card if it does not already exist
@ -239,9 +254,9 @@ System Transfers can only be performed once a week.
+ You may have to force power off by holding the power button
8. Put your SD card in your computer, then copy `F0F1_N3DS.bin` or `F0F1_O3DS.bin` (depending on your device) to a safe location; make backups in multiple locations; this backup will save you from a brick if anything goes wrong
##### Section VIII - Flashing the target 3DS's NFIRM
##### Section IX - Flashing the target 3DS's NFIRM
**Do NOT downgrade with dgTool on a device that already has arm9loaderhax installed or you will BRICK!**
**Never downgrade with dgTool on a device that already has arm9loaderhax installed or you will BRICK!**
1. Launch your DSiWare game on **the target 3DS**
4. Launch dgTool using your DSiWare game
@ -254,7 +269,7 @@ System Transfers can only be performed once a week.
+ You may have to force power off by holding the power button
5. Reboot
##### Section IX - Exploit verification
##### Section X - Exploit verification
1. Copy and merge the `3ds` folder from the 3DSident `.zip` to **the target 3DS**'s SD card
2. Reinsert your SD card into **the target 3DS**
@ -268,10 +283,10 @@ System Transfers can only be performed once a week.
Continue to [Homebrew Launcher (No Browser)](homebrew-launcher-(no-browser)), using steelhax for your entrypoint instead of one of the ones listed.
{: .notice--primary}
You can use another entrypoint if you want to, I just recommend steelhax because it is free.
You can use another entrypoint if you want to; steelhax is recommended because it is free.
{: .notice--info}
**the target 3DS**'s version number will *not* have changed in the settings.
**The target 3DS**'s version number will *not* have changed in the settings.
{: .notice--info}
If, once transferred, steelhax only crashes to a black screen on **the target 3DS**, [follow this troubleshooting guide](troubleshooting#ts_steelhax).

View file

@ -3,17 +3,9 @@ title: "DSiWare List"
permalink: /dsiware-list.html
---
This is a list of all [DSiWare Downgrade](dsiware-downgrade) compatible games generated by an automated script.
This is a list of all [DSiWare Downgrade (App Injection and Second 3DS)](dsiware-downgrade-(app-injection-and-second-3ds)) compatible games generated by an automated script.
{: .notice--primary}
{% capture notice-old %}
If you already own one of the following games on **the source 3DS**, check out [the old version of this page](dsiware-downgrade-(old)):
+ **Fieldrunners**
+ **Legends of Exidia**
+ **Guitar Rock Tour**
+ **The Legend of Zelda: Four Swords**
{% endcapture %}
<div class="notice">{{ notice-old | markdownify }}</div>
The list is sectioned off by region in the order USA, EUR, JPN.

View file

@ -3,9 +3,6 @@ title: "NFIRM Downgrade"
permalink: /nfirm-downgrade.html
---
**If you are on 11.0.0 or 11.1.0, do NOT update to 11.2.0. A new update will be coming soon that allows for DSiWare NFIRM Downgrading _without_ a second 3DS or hardmod for versions under 11.2.0.**
{: .notice--primary}
If you are between 11.0.0 and 11.2.0, you must follow this guide to downgrade your NFIRM using one of the methods at the bottom of this page to directly dump and restore your NAND.
{: .notice--info}
@ -17,5 +14,7 @@ This will work on New 3DS, Old 3DS, and 2DS (although the DSiWare method has som
---
+ Use [this](hardmod-downgrade) link to downgrade your NFIRM with a [hardmod](https://gbatemp.net/threads/414498/)
+ Use [this](dsiware-downgrade) link to downgrade your NFIRM with DSiWare and a second 3DS (which already has CFW)
+ Use [this](hardmod-downgrade) link to downgrade your NFIRM with a [hardmod](https://gbatemp.net/threads/414498/)
+ Use [this](dsiware-downgrade-(app-injection-and-second-3ds)) link to downgrade your NFIRM with DSiWare and a second 3DS (which already has CFW)
+ Use [this](dsiware-downgrade-(save-injection)) link to downgrade your NFIRM with DSiWare, one of four listed games, and a homebrew launcher entrypoint *(11.0.0 and 11.1.0 only)*
+ Use [this](dsiware-downgrade-(save-injection-and-second-3ds)) link to downgrade your NFIRM with DSiWare, one of four listed games, and a second 3DS (which already has CFW)

View file

@ -134,8 +134,8 @@ This is because you selected the wrong version in the steelhax installer.
4. Go to SysNAND Backup/Restore and restore SysNAND from `NANDmin.bin` (the one made before the system transfer)
1. If you don't see the game at all on **the target 3DS**, link the NNID you bought the game with to **the target 3DS** and redownload it
+ You may have to delete the game from "Data Management" in the "System Settings" first
+ If **the target 3DS** is not the latest version, you may have to run [DSiWare Downgrade - Section IV - ctr-httpwn](dsiware-downgrade#section-iv---ctr-httpwn) to access the eShop
2. On **the source 3DS**, do [DSiWare Downgrade - Section II - Injecting the game and save](dsiware-downgrade#section-ii---injecting-the-game-and-save)
+ If **the target 3DS** is not the latest version, you may have to run ctr-httpwn to access the eShop
2. On **the source 3DS**, do the the save (and `.app` if you are using the `.app` page) injection steps
3. On **the source 3DS**, go to System Settings, "Data Management", "DSiWare", then copy your DSiWare game to your SD card
4. Either put **the source 3DS**'s SD card in **the target 3DS**, or rename the `Nintendo 3DS` on **the target 3DS**'s SD card and copy the `Nintendo 3DS` folder from **the source 3DS**'s SD card to **the target 3DS**'s SD card
5. On **the target 3DS**, go to System Settings, "Data Management", "DSiWare", then copy your DSiWare game to the system