Hacking Possible leadway to downgrade 10.5.0.30u

[vb_encryption_vb]

Seems a program would need to be written to patch all the files, needed to make thing easier. Than install hardmod and make a dump in case something goes wrong, which I believe it will. Since 3dsbrew talks about it, maybe it is legit. I personally don't grasp the full concept here, but with more reading I should. ( I have more knowledge in the ps3 scene and have downgraded 2000+ consoles ) 3DS I'm rather new to, but have started installing hardmod and recovering people from bricks. So with that being said, I have 2 o3ds with hardmods, that I can run test on as well.

 

[fuducker81]

Great! any help would be appreciated, as I'm resoldering the wires on mine at the moment to work with.

 

[GoodCookie88]

You guys trying to downgrade from 10.5?

 

[ZAMI]

Great! any help would be appreciated, as I'm resoldering the wires on mine at the moment to work with.

good luck

 

[Lightyose]

sounds good, I'd use mediafire, as they usually crack down on stuff like this, but it should be up just enough to where I can download it.

Do u hav mega?

 

[vb_encryption_vb]

You guys trying to downgrade from 10.5?

Yes, theoretically it's possible by swapping some files around in the NAND.

Seems this may only work on N3DS though? At least that's what it was checked on. I assume it may still apply to o3ds / 2ds as well not entirely sure.

 

[GoodCookie88]

Yes, theoretically it's possible by swapping some files around in the NAND.

Seems this may only work on N3DS though? At least that's what it was checked on. I assume it may still apply to o3ds / 2ds as well not entirely sure.

Thats a really clever idea please update us if anything works out

 

[fuducker81]

Bad news... I'll have to pass work down to other people with the 10.5 firmware that could do a hardmod or have a way of backing up and writing to nand. While attempting to resolder on wires, I lifted up and destroyed the cmd pad. I cannot continue, as I will need a completely new motherboard. I already bought one, but seeing as it's 9.2 firmware, I have no need to continue this. Sorry!

--------------------- MERGED ---------------------------

I'm asking though that other people continue this, as it seems like a lot of people would benefit from this work. Hopefully a kernel exploit that we could use to directly write to nand, as this should work. All i ask is that people with the resources continue.

 

[vb_encryption_vb]

Bad news... I'll have to pass work down to other people with the 10.5 firmware that could do a hardmod or have a way of backing up and writing to nand. While attempting to resolder on wires, I lifted up and destroyed the cmd pad. I cannot continue, as I will need a completely new motherboard. I already bought one, but seeing as it's 9.2 firmware, I have no need to continue this. Sorry!

The only thing I don't understand is what files need to be extracted from where and than patched into whatever NAND is going to be written back.

 

[GoodCookie88]

Bad news... I'll have to pass work down to other people with the 10.5 firmware that could do a hardmod or have a way of backing up and writing to nand. While attempting to resolder on wires, I lifted up and destroyed the cmd pad. I cannot continue, as I will need a completely new motherboard. I already bought one, but seeing as it's 9.2 firmware, I have no need to continue this. Sorry!

--------------------- MERGED ---------------------------

I'm asking though that other people continue this, as it seems like a lot of people would benefit from this work. Hopefully a kernel exploit that we could use to directly write to nand, as this should work. All i ask is that people with the resources continue.

Damn....

 

[fuducker81]

If it seems right, page 2 has a batch file that automatically does this process. All you need is any nand.bin of your 10.4.0.30u or 10.5.0.30u Nand.bin, and extract the fw partition of both your Nand.bin and a Nand.bin of 10.3.0.28u/10.2.0.28u. The batch should automatically do the work from there. Good luck, I'll still be here to give help, just can't physically test or work anymore.

 

[vb_encryption_vb]

If it seems right, page 2 has a batch file that automatically does this process. All you need is any nand.bin of your 10.4.0.30u or 10.5.0.30u Nand.bin, and extract the fw partition of both your Nand.bin and a Nand.bin of 10.3.0.28u/10.2.0.28u. The batch should automatically do the work from there. Good luck, I'll still be here to give help, just can't physically test or work anymore.

Ok, is there a tool that extracts the FW partition? I can update sysNAND to get 10 10.5.30u. And I think I already have a 10.3.0.28u NAND as well.

I believe both NANDs are form the same console though, so that may not be the best idea for testing.

 

[fuducker81]

Ok, is there a tool that extracts the FW partition? I can update sysNAND to get 10 10.5.30u. And I think I already have a 10.3.0.28u NAND as well.

I believe both NANDs are form the same console though, so that may not be the best idea for testing.

On the 3ds homebrew wiki, It has specifics on hex addresses and points in which the fw partition is available. I believe I read somewhere that there was a tool to extract partitions in this thread.

It would be a good idea to use someone elses, though if you try to achieve it through the methods in this forum, it should be helpful enough.

 

[Raugo]

what is 10.4 native_firm cia

Is the 10.4 native_firm cia file, you can download it with 3dnus

If it seems right, page 2 has a batch file that automatically does this process. All you need is any nand.bin of your 10.4.0.30u or 10.5.0.30u Nand.bin, and extract the fw partition of both your Nand.bin and a Nand.bin of 10.3.0.28u/10.2.0.28u. The batch should automatically do the work from there. Good luck, I'll still be here to give help, just can't physically test or work anymore.

You don't need a nand.bin of a 10.2 firmware only the cias downloaded with 3dnus of the 10.2 native_firm

 

[ketal]

How come NTRCardHax and memchunkhax2 were not patched in 10.3 then?

Because when the conference was held there was 10.3 as current firmware, lol

 

[vb_encryption_vb]

Seems 3dnus isn't properly working? I get an empty folder when trying to download 10.2.0.28u

 

[Apache Thunder]

Not sure why people are using CIAs..I was under the impression you need the FIRM partitions. Unless what ever stuff that guy on page 2 posted can convert them to proper FIRM0/FIRM1 partition layout?

 

[Raugo]

Seems 3dnus isn't properly working? I get an empty folder when trying to download 10.2.0.28u

Not need al the firmware only the native_firm cia, put in titleid 0004013800000002 for old or 0004013820000002 for new and version 22313 for 10.2 and 23341 for 10.4

Not sure why people are using CIAs..I was under the impression you need the FIRM partitions. Unless what ever stuff that guy on page 2 posted can convert them to proper FIRM0/FIRM1 partition layout?

My bat extract the firm.bin from the cia but need to be decrypted

 

[Apache Thunder]

The firm.bin extracted from CIA is the CXI. You can't use the CXI of FIRM as the FIRM partition.

 

[Raugo]

Yes you can, I used this method to downgrade from 10.5 and works. The firm.bin of the cia file is the firm installed in the firm partition, you can check it extracting and decrypting your actual firm0 and comparing it with the firm.bin of your actual firmware, the firm0 partition have more data but dont need to be replaced