Homebrew Uninstall Arm9LoaderHax ?

[Olivier78640]

Hello Everyone,

I recently got a New 3DS to upgrade my Old 3DS and it is working great so far.
Now that everything is transferred over to my N3DS, I would like to sell my O3DS to a friend.
He is actually OK to buy it with the sole condition of the console being completely free of any exploit.
I already uninstalled FBI from Health And Safety so there is pretty much no homebrew left on the Home Menu since the transfer process formatted my O3DS at the end.

The only hax left is A9LH because even if the first time setup appears, I still need to have a A9LH payload on the SD card to make it boot (otherwise, it instantly shuts down).
Many people on internet says that you need a NAND backup to (I guess) rewrite the FIRMs to something stock to get rid of A9LH. But as far as I understand, FIRMs are part of the NAND so backuping the curent NAND and re-writing it immediately after with Decrypt9 would not work even without the "Keep A9LH" option in D9. I also do not have any NAND backups for this console anymore.

So my question is: Can you get rid of A9LH with anything other than a NAND backup ?

I would be really grateful to anyone who would point me the right direction.

 

[4gionz]

If you don't have a clean NAND backup then it won't be easy. I think their may be a way but it's probably super complicated and convoluted

 

[MrHuu]

How about, downgrading (if on latest firm) and then updating without the FIRM protect option.

That would remove A9LH, right?

 

[Deleted member 333767]

NAND access mod plus clean NAND dump is the easiest way

 

[Olivier78640]

Thanks for the fast reply.

If you don't have a clean NAND backup then it won't be easy. I think their may be a way but it's probably super complicated and convoluted

Wall, that is unfortunate. Worst case, I can try selling the console with a SD card containing A9LH and tell him that if he ever wants to change the SD card, he will need to copy everything over.

How about, downgrading (if on latest firm) and then updating without the FIRM protect option.

That would remove A9LH, right?

That is a pretty interesting idea but it seems pretty dangerous, right? Because if the downgrade process fails, I wont have anything to recover the failed downgrade. The console is on the latest system version available by the way.

NAND access mod plus clean NAND dump is the easiest way

I do have NAND access through A9LH but I do not have any Clean NAND Dump ! That is why I actually posted this message.

 

[MrHuu]

That is a pretty interesting idea but it seems pretty dangerous, right? Because if the downgrade process fails, I wont have anything to recover the failed downgrade. The console is on the latest system version available by the way.

Not having a NAND backup is also quite dangerous

Maybe backup before downgrading

 

[astrangeone]

I had to do that recently to get a "stock 9.2" firmware. Make a emunand, downgrade that with Plaisysupdater, tinyformat X2, inject your unaltered h&s, and write that to the firmware. Only thing is that the icon for the h&s stays with FBI. (Is there a way to fix it?)

 

[Deleted member 333767]

I do have NAND access through A9LH but I do not have any Clean NAND Dump ! That is why I actually posted this message.

Ouch, thats mega unfortunate! I'm sure i don't need to remind you, but ill say it anyways for outsiders that pop in here: A good practice with sensitive files such as NAND dumps is to keep a copy stored in online cloud storage and another on your hard drive. I've also got a rewritable blue-ray disc that stores all my NANDs and dumped OTPs aswell.

 

[Olivier78640]

Not having a NAND backup is also quite dangerous

Maybe backup before downgrading

Ouch, thats mega unfortunate! I'm sure i don't need to remind you, but ill say it anyways for outsiders that pop in here: A good practice with sensitive files such as NAND dumps is to keep a copy stored in online cloud storage and another on your hard drive. I've also got a rewritable blue-ray disc that stores all my NANDs and dumped OTPs aswell.

I actually HAD the original pre-A9LH NAND backup at some point but I actually deleted the file because everything was working and I only kept the post-A9LH one for a few days. I actually backup my N3DS every week or so and I keep only the most recent backup. So yeah that is a major fail on my part.

I had to do that recently to get a "stock 9.2" firmware. Make a emunand, downgrade that with Plaisysupdater, tinyformat X2, inject your unaltered h&s, and write that to the firmware. Only thing is that the icon for the h&s stays with FBI. (Is there a way to fix it?)

Thanks! I was thinking of something like that after MrHuu replied. I am going to try it out after I successfully made a backup

 

[astrangeone]

It works, but I swear that the next o3DS I do for a friend, I will keep every damn file.

Just make sure you tinyformat twice. Oh, and if you don't have a copy of your unaltered H&S, PM me. I have mine...

 

[DjoeN]

Make an emunand of your current sysnand with emunand9, boot into emunand, set IT up, then boot with luma3ds into decrypt9 payload, inject emunand into sysnand, you should Have now a Clean sysnand, then format it and sell it to him

 

[sweis12]

Wait for a system update, and then update without the firm protection

 

[Olivier78640]

It works, but I swear that the next o3DS I do for a friend, I will keep every damn file.

Just make sure you tinyformat twice. Oh, and if you don't have a copy of your unaltered H&S, PM me. I have mine...

No problem ther since I actually already removed H&S that contained FBI through another FBI that I installed as a CIA, rebooted, downloaded the original H&S with the help of PlaiCDN and installed it as a CIA and it worked. I also did that with my N3DS.

Make an emunand of your current sysnand with emunand9, boot into emunand, set IT up, then boot with luma3ds into decrypt9 payload, inject emunand into sysnand, you should Have now a Clean sysnand, then format it and sell it to him

Wouldn't that carry A9LH? Because creating EmuNAND requires copying the entire NAND that contains A9LH and then re-copying it to SysNAND even after reformatting it would still imply having A9LH installed, right?

Wait for a system update, and then update without the firm protection

He wants to buy it this next Monday

 

[astrangeone]

No problem ther since I actually already removed H&S that contained FBI through another FBI that I installed as a CIA, rebooted, downloaded the original H&S with the help of PlaiCDN and installed it as a CIA and it worked. I also did that with my N3DS.



Wouldn't that carry A9LH? Because creating EmuNAND requires copying the entire NAND that contains A9LH and then re-copying it to SysNAND even after reformatting it would still imply having A9LH installed, right?



He wants to buy it this next Monday

It seemed to work for me, and I could boot the thing without the card too.

 

[Ekaitz]

Why would someone wants to get rid of such a wonderful thing? A9LH is great and I don't see the point of deleting it.
Sometimes, I don't understand my own compatriots.

Anywoo, I would try the downgrade then update thing, I don't see anything else really. You should always keep a backup dude, for your own safety!

 

[Olivier78640]

It seemed to work for me, and I could boot the thing without the card too.

Wait, can I boot EmuNAND with Luma3DS without FIRM protection? Downgrading, TinyFormatting twice, looks like the way to go, but if PlaiSysUpdater can't write the FIRM space, this is useless right?

Why would someone wants to get rid of such a wonderful thing? A9LH is great and I don't see the point of deleting it.
Sometimes, I don't understand my own compatriots.

Anywoo, I would try the downgrade then update thing, I don't see anything else really. You should always keep a backup dude, for your own safety!

I know, right? Seeing my few hours of work just poof like that just makes me sad But the buyer is the scary type that feels like having a hack is something that will make him go to jail or being killed by a gang

 

[astrangeone]

Luma3DS's only does a firm protect if you launch sysnand, not emunand. That's why I ended up doing that from emunand. I should write a tutorial on doing that to get "stock firmware" back onto a 3DS.

 

[Olivier78640]

Luma3DS's only does a firm protect if you launch sysnand, not emunand. That's why I ended up doing that from emunand. I should write a tutorial on doing that to get "stock firmware" back onto a 3DS.

Okay, thanks for the info! I am going to try this out right now!

 

[Seriel]

Yeah, update without FIRM protection. If you're on latest, downgrade then update without protection.

--------------------- MERGED ---------------------------

Luma3DS's only does a firm protect if you launch sysnand, not emunand. That's why I ended up doing that from emunand. I should write a tutorial on doing that to get "stock firmware" back onto a 3DS.

Please write that tutorial

 

[astrangeone]

Yeah, update without FIRM protection. If you're on latest, downgrade then update without protection.

--------------------- MERGED ---------------------------


Please write that tutorial

Definitely will, as soon as I get home from work. Seems like a lot of people were in my boat without a pre-a9lh backup and they needed a way to restore stock firmware.