[Tutorial] From 9.2 (or any lower firmware) to CFW 4.5, without Gateway

Discussion in '3DS - Tutorials' started by Chaldron, Jan 12, 2015.

  1. Chaldron
    OP

    Chaldron GBATemp's Official Attorney

    Member
    434
    238
    Mar 29, 2013
    United States
    `Murica
    Preparation

    Hardware Requirements:
    • A Windows PC
    • A 3DS on 9.2 or lower
    • A SD Card reader or some other adapter to allow you to copy files from your PC to the SD
    • A DS flashcard that works on 4.5 (R4i, etc),
    • A SD Card (preferably 16 GB to hold games, but even 4 GB should work)
    Software Download Links:


    Part 1 - Downgrading

    1. Copy the Gateway Launcher.dat and Gateway.dg file to your SD Card.
    2. Turn off wifi and open the 3DS Browser. Go into the settings and delete cookies/cache.
    3. Optionally, reboot your 3DS.
    4. Navigate to the browser with wifi on this time, and go to go.gateway-3ds.com.
    5. The exploit will now load. Go over the options using the D-Pad and backup your NAND.
    6. After the NAND backup is done, power off the 3DS by holding down the power button. Put the SD Card into your computer, and copy the NAND.bin somewhere safe. This is your fail-safe, so don’t lose it!
    7. Put the SD card back into the console, with the NAND.bin still on it.
    8. Go run the downgrade process (it’s the last one in the menu). Wait for it to finish. Once it’s done, reboot your system. Put the SD card into the computer and ensure Launcher.dat is still on it. Do not delete NAND.bin just yet.

    Part 2 - Installing CFW

    1. Now, copy the GW Installer DS file to your DS flashcard. Pop it into the console and run that file from your flashcard. When it’s done, press home and go into System Settings. Go into other settings —> profile and tap DS Profile. The Gateway menu will load once again. This time, run the format emuNand process. When it’s done, shutdown your 3DS.
    2. Pop the SD Card back into your PC. Run the emuNand tool you downloaded earlier and press “Extract emuNand”. Save the file as emuNand.bin somewhere.
    3. Now, drag the emuNand.bin onto the bat file that was downloaded. After a while, a resulting REDNAND.bin will appear.
    4. In the emuNand tool, press “Inject NAND into emuNAND”. Select the REDNAND.bin file, and just ignore the warnings about not finding NAND.bin.
    5. After it’s done, delete everything on the SD card. It should only be a LAUNCHER.DAT file.
    6. Now, copy everything from the SD Card folder in Palantine CFW onto the SD card. Delete the launcher.dat, and rename the launcher_gw.dat to launcher.dat
    7. Insert the SD card into the console and boot up. It will create software management information. Take the SD card out again and open it on your computer.
    8. Now, in your SD card, there should be a Nintendo 3DS folder. Open it, and open the folder inside that. There should be another, so open that too. You should see a exdata folder.
    9. Make a new folder (not inside the exdata folder, but in the same directory as it) called “dbs”. Go into the folder and make a blank text file, named “title.db” or “import.db”. Doesn’t matter which.
    10. Insert the SD back into the system and go into Settings —> Data Management —> Software. It’ll ask to reset your software management information, so allow it to do so.
    11. Now, go into Other —> Profile. Hold down the L button, and tap DS Profile. If all goes well, the bottom screen will flash white and the CFW will load. If not, simply reboot the system by holding down power and trying again. Make sure to hold L while you do it.
    12. Now, once you’ve gotten into CFW, you’ll need your 3DS’ IP Address. You can use the tool you downloaded earlier (the network scanner) to find the devices from Nintendo. Note the IP (usually looks like 192.168.1.1xx)
    13. Edit the run.bat file in the Palantine CIA folder. Replace the DevMenu_2x.cia part with the name of your CIA, and the IPTOMODIFY with your IP.

    Code:
    installcia IPTOMODIFY 1 DevMenu_2x.cia
    
    Code:
    installcia 192.168.1.155 1 DevMenu_2x.cia

    22. Now execute run.bat by double clicking on it. It should return result-code of 0.

    • If you get a failed to connect, make sure the IP is correct and the 3DS is connected to the Internet.
    • If there’s another return code, try steps 8 and onward again.

    23. Once you’ve succeeded, press Power —> Home and unwrap your new gift. You can now enter the CFW without holding L using the regular way.

    Installing CIAs

    1. Find a CIA to install. Google is your friend.
    2. Copy the CIA to your SD Card.
    3. Use the standard method to get into the CFW. Open the DevMenu and import away.
     
    digibay, Adr990, jamieyello and 11 others like this.


  2. naxil

    naxil GBAtemp Advanced Fan

    Member
    740
    96
    Oct 26, 2011
    Italy
    Any possibilities with Linux?
     
    Margen67 likes this.
  3. Chaldron
    OP

    Chaldron GBATemp's Official Attorney

    Member
    434
    238
    Mar 29, 2013
    United States
    `Murica

    I'd compile neimod's tools here and take a look at the bat files and replicate those commands.
     
    Margen67 likes this.
  4. Some1CP

    Some1CP GBAtemp Fan

    Member
    411
    110
    Sep 12, 2009
    United States
    Is there any guide on creating custom rom VC CIAs?

    Also, thanks for the tutorial. Finally something well written and organised.
     
  5. sumark

    sumark Newbie

    Newcomer
    6
    0
    Jan 8, 2015
    Switzerland
    there should be a method before that using the Hex Workshop without the step creating the title.db..
    i tried it at least 10 times.
    it goes well first,and after sending the cia through the run.bat,i roboot my console,there's no gift to open. just as the origin system.
    i google it,and find many guys just like me,they say the reason is the cfw is still unstable.
    so,i just want to kown,this version is better than that i used?
     
  6. Chaldron
    OP

    Chaldron GBATemp's Official Attorney

    Member
    434
    238
    Mar 29, 2013
    United States
    `Murica

    I've used this method on 2 3DS's today without even touching a hex editor. Make sure the CIA is being sent "correctly" with a return code of 0.
     
  7. Canadacdn

    Canadacdn GBAtemp Regular

    Member
    147
    73
    Jul 20, 2007
    Canada
    Canada
    Well, well. Now we all know why Gateway took so long to release their latest exploit, likely knowing that it could be used without the card. They let the hype train get as large as possible and racked up many sales as they could before Supercard forced their hands. Well played.
     
  8. LinkmstrYT

    LinkmstrYT ( ͡° ͜ʖ ͡°)

    Member
    1,457
    799
    Dec 16, 2013
    United States
    You wanted to see where I live? You stalker...
    This looks amazing to try out.
     
  9. sumark

    sumark Newbie

    Newcomer
    6
    0
    Jan 8, 2015
    Switzerland
    thank you,i'll try this tonight.
     
  10. VashTS

    VashTS Beat it, son

    Member
    3,868
    690
    Mar 14, 2009
    United States
    Upstate NY
    i cant get the run.bat to work, man this is frustrating. i knew this would be my downfall too...

    when i just double click it, i get "The application was unable to start correctl (0x0000007b). Clock OK to close the application"

    If i right click and run as admin, it closes so fast, i cannot tell what happens.

    all firewalls off, win8 firewall off and router settings firewall is off as well.

    I probably should mention the error is from ctrclient.exe
     
  11. AdityaNese

    AdityaNese GBAtemp Regular

    Member
    100
    25
    Feb 4, 2012
    United States
    Well, I did part 1 already.
    I'll do part 2 later tomorrow.

    -snip-
     
  12. Chaldron
    OP

    Chaldron GBATemp's Official Attorney

    Member
    434
    238
    Mar 29, 2013
    United States
    `Murica

    Dev Menu can only play firmware spoofed CIAs, with save encryption before 7.x So no Smash, no Pokemon, no newer games. It's basically a poor man's piracy - you can only load a certain amount of games, and you will lose all your eShop stuff.

    Gateway allows 9.4 emuNand, so you can play all games and use the eShop. If you can wait, I'd hold off on Gateway. There's the Supercard team likely coming soon along with (I'm hoping) advances in CFW, hopefully up to 9.4.
     
  13. Chaldron
    OP

    Chaldron GBATemp's Official Attorney

    Member
    434
    238
    Mar 29, 2013
    United States
    `Murica

    Can you try another computer? I'm using Windows 8 and it worked just fine, without any admin rights.
     
  14. VashTS

    VashTS Beat it, son

    Member
    3,868
    690
    Mar 14, 2009
    United States
    Upstate NY
    Im trying on Win7 laptop but its PAINFULLY slow lol.

    are there any special drivers or software that ctrclient needs?

    it worked on the Win7 laptop, very odd but AWWW YISSS!!!
     
  15. ieatpixels

    ieatpixels GBAtemp Fan

    Member
    344
    110
    Nov 1, 2008
    presumably this only works on 3DSes that have previously been on 4.5?
     
  16. VashTS

    VashTS Beat it, son

    Member
    3,868
    690
    Mar 14, 2009
    United States
    Upstate NY

    No, it works on all 3DS models - take note it doesn't work on New 3DS or 2DS.
     
  17. keyra

    keyra Spoderman self proclamed fan

    Member
    817
    210
    Dec 23, 2008
    France
    ok that's what i was gonna write. :)
     
  18. FearItSelf23

    FearItSelf23 GBAtemp Regular

    Member
    122
    12
    Feb 24, 2013
    United States
    If I downgrade my 9.2 3DS XL using this guide can I easily restore it back to 9.2 without losing my eshop purchases?
     
  19. KeepPlanC

    KeepPlanC GBAtemp Regular

    Member
    117
    46
    Jan 8, 2015
    United States
    so if i try to put cfw ill lose all my eshop games and i wont be able to get them back?
     
  20. MaK11-12

    MaK11-12 GBAtemp Regular

    Member
    229
    115
    Jul 26, 2009
    Namek
    An excellent tutorial!

    Just one question: can you install .cia files if you upgrade the firmware from 4.5 to 7.2?