Hacking OTPHelper - APP(0) is in unmapped area after 2.1 downgrade

[pwnerstorm]

Downgrading N3DS XL to 2.1.0 to get OTP for install of a9lh. (Pialect guide, part 4, section IV, step 15).

Every run of OTPHelper after a successful downgrade with PlaiSys fails the One Click validation check. Always with "app(0) is in unmapped area", and always for the same title (0004009B00013302).

The troubleshooting guide just says "restore both NANDs and try again". I've tried this at least 10 times, but it doesn't appear to be making any difference. There are some other instructions about what to do for TMD errors, but nothing for these APP errors.

How can I clear this error to make it safe to flash the RedNAND to SysNAND? The full log from OTPHelper is below.

Spoiler

Your region is: USA
Checking title 0004001000021000...
Checking title 0004001000021100...
Checking title 0004001000021200...
Checking title 0004001000021300...
Checking title 0004001000021400...
Checking title 0004001000021500...
Checking title 0004001000021700...
Checking title 0004001000021900...
Checking title 0004001000021A00...
Checking title 0004001000021B00...
Checking title 0004001000021D00...
Checking title 0004001000021E00...
Checking title 0004001000021F00...
Checking title 0004001B00010002...
Checking title 0004003000008A02...
Checking title 0004003000008A03...
Checking title 0004003000008F02...
Checking title 0004003000009002...
Checking title 0004003000009202...
Checking title 0004003000009302...
Checking title 0004003000009402...
Checking title 0004003000009602...
Checking title 0004003000009702...
Checking title 000400300000C502...
Checking title 000400300000C503...
Checking title 000400300000C802...
Checking title 000400300000C803...
Checking title 000400300000C902...
Checking title 000400300000CB02...
Checking title 000400300000CC02...
Checking title 0004009B00010202...
Checking title 0004009B00010402...
Checking title 0004009B00010602...
Checking title 0004009B00011402...
Checking title 0004009B00011602...
Checking title 0004009B00011D02...
Checking title 0004009B00011E02...
Checking title 0004009B00012302...
Checking title 0004009B00013302...
APP(0) is in unmapped area
Checking title 0004009B00014002...
Checking title 0004009B00014102...
Checking title 0004009B00014202...
Checking title 0004009B00014302...
Checking title 0004009B00015302...
Checking title 000400DB00010302...
Checking title 000400DB00010502...
Checking title 000400DB00016302...
Checking title 000400DB00017302...
Checking title 0004013000001502...
Checking title 0004013000001503...
Checking title 0004013000001602...
Checking title 0004013000001702...
Checking title 0004013000001703...
Checking title 0004013000001802...
Checking title 0004013000001803...
Checking title 0004013000001A02...
Checking title 0004013000001A03...
Checking title 0004013000001B02...
Checking title 0004013000001B03...
Checking title 0004013000001C02...
Checking title 0004013000001C03...
Checking title 0004013000001D02...
Checking title 0004013000001D03...
Checking title 0004013000001E02...
Checking title 0004013000001E03...
Checking title 0004013000001F02...
Checking title 0004013000001F03...
Checking title 0004013000002002...
Checking title 0004013000002102...
Checking title 0004013000002103...
Checking title 0004013000002202...
Checking title 0004013000002203...
Checking title 0004013000002302...
Checking title 0004013000002303...
Checking title 0004013000002402...
Checking title 0004013000002403...
Checking title 0004013000002602...
Checking title 0004013000002702...
Checking title 0004013000002703...
Checking title 0004013000002802...
Checking title 0004013000002902...
Checking title 0004013000002903...
Checking title 0004013000002A02...
Checking title 0004013000002A03...
Checking title 0004013000002B02...
Checking title 0004013000002C02...
Checking title 0004013000002C03...
Checking title 0004013000002D02...
Checking title 0004013000002D03...
Checking title 0004013000002E02...
Checking title 0004013000002E03...
Checking title 0004013000002F02...
Checking title 0004013000002F03...
Checking title 0004013000003102...
Checking title 0004013000003103...
Checking title 0004013000003202...
Checking title 0004013000003203...
Checking title 0004013000003302...
Checking title 0004013000003303...
Checking title 0004013000003402...
Checking title 0004013000003502...
Checking title 0004013000003702...
Checking title 0004013000008002...
Checking title 0004013000008003...
Checking title 0004013800000002...
Checking title 0004013800000003...
Checking title 0004013800000102...
Checking title 0004800542383841...
Is a TWL title, skipped
Checking title 00048005484E4441...
Is a TWL title, skipped
Checking title 0004800F484E4841...
Is a TWL title, skipped
Checking title 0004800F484E4C41...
Is a TWL title, skipped

Validation Stage 0: SUCCESS
Validation Stage 1: FAILED
Validation Stage 2: FAILED
# TWL titles : 4
# In unmapped area : 1
# TMD success : 107
# TMD not found : 0
# APP success : 106
# APP not found : 0
# APP fragmented : 0

WARNING: Validation Stage 1 failed!
!DO NOT RESTORE THIS TO SYSNAND!
Starting from scratch is recommended

Did you forget about downgrading first?
One Click Setup: failed!

Press B to return, START to reboot.

Unmounting SD card...

 

[yacepi15]

Do not restore NANDs. Start from scratch. Try another SD card or format the actual one with SDFormatter.
And... Did you update your RedNAND to 11.0 before downgrading? Do not skip steps or you will have a paperweight.

 

[pwnerstorm]

I have restarted completely from scratch 3 times now, on 2 different microSDs from different manufactuers, both of which were formatted with SDFormatter beforehand. I get exactly the same result, it bombs out on the same title every time.

 

[yacepi15]

I have restarted completely from scratch 3 times now, on 2 different microSDs from different manufactuers, both of which were formatted with SDFormatter beforehand. I get exactly the same result, it bombs out on the same title every time.

Did you update RedNAND to 11.0 before downgrading? Did you check the checksums of the DGPack? Do you have installed DsiWare (remove it) or TWL patches? (Bluecardfix.cia doesnt count)

 

[SomeGamer]

Did you update your RedNAND to 11.0 before downgrading?

Is that really necessary? I did the whole thing on 10.7 with rxTools 3.0.

 

[pwnerstorm]

Yep, RedNAND was 11.0, upgraded OTA via System Settings. The checksum for the downgrade files are good, as well as the MD5 checks done by PlaiSys on the CIAs - all pass. Did a factory reset on SysNAND before starting the whole guide, so there shouldn't be anything else installed on it, no patches etc.

 

[Quantumcat]

I think maybe the format doesn't restore TWL and AGB titles. Where would it get the data from? I think you should try sourcing the original titles and install them. I am only guessing though.

 

[EmperorOfCanada]

@Plailect any ideas, or just keep trying?

 

[yacepi15]

Is that really necessary? I did the whole thing on 10.7 with rxTools 3.0.

The problem is with 9.X. 10.X doesnt have that issue.

--------------------- MERGED ---------------------------

Yep, RedNAND was 11.0, upgraded OTA via System Settings. The checksum for the downgrade files are good, as well as the MD5 checks done by PlaiSys on the CIAs - all pass. Did a factory reset on SysNAND before starting the whole guide, so there shouldn't be anything else installed on it, no patches etc.

Some "non-legit" dsiware didnt uninstall with a system format in my case. Go to system settings and check it.

--------------------- MERGED ---------------------------

The problem is with 9.X. 10.X doesnt have that issue.

--------------------- MERGED ---------------------------


Some "non-legit" dsiware didnt uninstall with a system format in my case. Go to system settings and check it.

@pwnerstorm And... I wont take any responsability but... The "0004009B00013302" title, for the USA region is the EULA. Can you try reinstalling the one from 11.0 (download it with 3DNUS) and reinstall it on the 11.X rednand and retry?

 

[pwnerstorm]

And... I wont take any responsability but... The "0004009B00013302" title, for the USA region is the EULA. Can you try reinstalling the one from 11.0 (download it with 3DNUS) and reinstall it on the 11.X rednand and retry?

I downloaded the 11.0.0-33U 0004009B00013302 title as a cia, and installed it to the RedNAND v11 via FBI. Restarted to RedNAND via HBL for good measure, came right up, then kicked off PlaiSys again to downgrade to 2.1.

The downgrade reported success, but OTPHelper still isn't happy.

That actually cleared the APP(0) error for 0004009B00013302, but now there are tons of TMD errors for lots of different titles, and I have a new APP(0) error for something else. I restored emunand_formatted, and now it just fails on the original title again.

 

[pwnerstorm]

Thanks for all the help guys. I ended up fixing this by batch installing the entire 2.1 updates folder into RedNAND via FBI instead of PlaiSys, deleting the offending app(0) title via FBI in RedNAND, and then reinstalling just that specific CIA file again (all on the same boot). Rebooted to HBL, ran OTPHelper, all errors now gone. Finished the rest of the a9lh guide without a hitch after that.

 

[EmperorOfCanada]

Thanks for all the help guys. I ended up fixing this by batch installing the entire 2.1 updates folder into RedNAND via FBI instead of PlaiSys, deleting the offending app(0) title via FBI in RedNAND, and then reinstalling just that specific CIA file again (all on the same boot). Rebooted to HBL, ran OTPHelper, all errors now gone. Finished the rest of the a9lh guide without a hitch after that.

Kinda an odd situation you ran into, but glad you got through it!