Hacking Safehax (11.1/2) downgrade without DSIWare

[Blue]

O3DS/2DS v11.2.0-35U with soundhax as entrypoint: https://mega.nz/#!25d2XKCK!nwp7NIdMmYZduFhydSaZsH9zGy2a6DlP71SqXTdXCYE
N3DS v11.2.0-35U with soundax as entrypoint: https://mega.nz/#!j91g2CxI!YrxPgicql_vQ_SK4h5f8KhFUmXoKE4NcpKuVgswBv_k

Here are the instructions:

1. Go to the link above that contains the ZIP for your device.
2. Go to this link and download the SafeA9LHInstaller 7z. We'll get to it later.
3. Go to (Note: it's a torrent magnet link, you'll need a torrent client to open it) and extract the zip.
4. Extract the Safehax ZIP you downloaded to your microSD root.
5. Get the 2.1.0 ctrtransfer files and put them in your files9 folder in your microSD root.
6. Put your microSD in your console.
7. Open Nintendo 3DS Sound, press DOWN (d-pad) two times and press A two times.
8. Homebrew will boot. Scroll down and launch Safehax.
9. Decrypt9WIP will launch. Choose "SysNAND Options", "CTRNAND tranfer...", "Auto CTRNAND Transfer". Press LEFT, UP, RIGHT, UP and A. Press A twice (one to select the zip file and the other to create a backup).
10. Press B and SELECT.
11. Now you can delete the 2.1.0 ctrtransfer files from your files9 folder.
12. Extract the SafeA9LHInstaller 7z and copy the "arm9.bin" to your microSD root.
13. Open the folder: "Nintendo 3DS/(32 Character ID)/(32 Character ID)/extdata/00000000" and delete the folder "0000008f".
14. Put the microSD in your console and press START.
15. Open your browser, do the initial setup, click URL and go to "http://dukesrg.github.io/2xrsa.html?arm11.bin"
16. It'll open a black screen with a few things written on it. Press SELECT, wait a few seconds and press any button to shutdown your console.
17. Power it on. The Luma3DS config screen will show. Press A at each one of the options (from "Autoboot SysNAND" to "Patch SVC/service/archive/ARM9 access). If you're on N3DS, also, Press A thrice at "New 3DS CPU". Press START and power off your console
18. Power it on again. Exactly after you press the POWER button, hold START. It'll boot Houglass9.
19. Select "SysNAND Backup/Restore...", "SysNAND Restore (keep a9lh)". Now, press LEFT, UP, RIGHT, UP and A. Press A. After it successfully restores your 11.2 backup, just reboot your console.

--------------------- MERGED ---------------------------


Totally.

I think you can't give that CTR transfer link.

 

[myki]

@EdgierSundew049
Found this in the old guide :
https://github.com/Plailect/Guide_RedNAND/wiki/Part-4-(2.1.0-Downgrade)

"Make sure your WiFi is on (it has not been disabled from the SysNAND home menu settings), you can only toggle it by pulling the battery which resets it to be on"

But I never did it before !

 

[ifreedoms]

Wait for my ZIP. It has all files and instructions. Am doing the instructions.

Ok! i hope this will work.

 

[jacob1223]

O3DS/2DS v11.2.0-35U with soundhax as entrypoint: https://mega.nz/#!25d2XKCK!nwp7NIdMmYZduFhydSaZsH9zGy2a6DlP71SqXTdXCYE
N3DS v11.2.0-35U with soundax as entrypoint: https://mega.nz/#!j91g2CxI!YrxPgicql_vQ_SK4h5f8KhFUmXoKE4NcpKuVgswBv_k

Here are the instructions:

1. Go to the link above that contains the ZIP for your device.
2. Go to this link and download the SafeA9LHInstaller 7z. We'll get to it later.
3. Go to this link (Note: it's a torrent magnet link, you'll need a torrent client to open it) and extract the zip.
4. Extract the Safehax ZIP you downloaded to your microSD root.
5. Get the 2.1.0 ctrtransfer files and put them in your files9 folder in your microSD root.
6. Put your microSD in your console.
7. Open Nintendo 3DS Sound, press DOWN (d-pad) two times and press A two times.
8. Homebrew will boot. Scroll down and launch Safehax.
9. Decrypt9WIP will launch. Choose "SysNAND Options", "CTRNAND tranfer...", "Auto CTRNAND Transfer". Press LEFT, UP, RIGHT, UP and A. Press A twice (one to select the zip file and the other to create a backup).
10. Press B and SELECT.
11. Now you can delete the 2.1.0 ctrtransfer files from your files9 folder.
12. Extract the SafeA9LHInstaller 7z and copy the "arm9.bin" to your microSD root.
13. Open the folder: "Nintendo 3DS/(32 Character ID)/(32 Character ID)/extdata/00000000" and delete the folder "0000008f".
14. Put the microSD in your console and press START.
15. Open your browser, do the initial setup, click URL and go to "http://dukesrg.github.io/2xrsa.html?arm11.bin"
16. It'll open a black screen with a few things written on it. Press SELECT, wait a few seconds and press any button to shutdown your console.
17. Power it on. The Luma3DS config screen will show. Press A at each one of the options (from "Autoboot SysNAND" to "Patch SVC/service/archive/ARM9 access). If you're on N3DS, also, Press A thrice at "New 3DS CPU". Press START and power off your console
18. Power it on again. Exactly after you press the POWER button, hold START. It'll boot Houglass9.
19. Select "SysNAND Backup/Restore...", "SysNAND Restore (keep a9lh)". Now, press LEFT, UP, RIGHT, UP and A. Press A. After it successfully restores your 11.2 backup, just reboot your console.

--------------------- MERGED ---------------------------


Totally.

So update to 11.2

 

[Blaine20]

no i'm trying to run safehax it will run the code then black screen... i did not think the 3ds turns off on its own does it.

ok just use oothax for this worked like heaven for me im in process of ctr transferrin to 2.1

 

[Jhnsn]

13. Open the folder: "Nintendo 3DS/(32 Character ID)/(32 Character ID)/extdata/00000000" and delete the folder "0000008f".

You should include other regions too.

 

[EdgierSundew049]

@EdgierSundew049
Found this in the old guide :
https://github.com/Plailect/Guide_RedNAND/wiki/Part-4-(2.1.0-Downgrade)

"Make sure your WiFi is on (it has not been disabled from the SysNAND home menu settings), you can only toggle it by pulling the battery which resets it to be on"

But I never did it before !

You and @Sascha93 help me. Thanks! I thought that i've done something wrong

 

[davidkanto]

So

Thats not true, the crt transfer wont touch his data.

In order to perform the crt transfer at this point, your gonna need to add decrypt9.bin as a payload for luma, placing it in sd:/luma/payloads, and renaming it to x_decrypt9.bin, then, you need to place the 9.2U New 3ds crt transfer image, you can find it in the region change section of the guide.

so do I do these instead

--------------------- MERGED ---------------------------

You and @Sascha93 help me. Thanks! I thought that i've done something wrong

 

[Hyoretsu]

Can we use Hyoretsu's guide with o3DS E?

Just remeber to replace the soundhax file and download the 2.1.0 ctrtransfer file for EU.

 

[bbcali89]

imo hyoretsu don't put soundhax for the guide. use oot oir steelhax. cuz' soundhax is BARELY working for ppl lol

 

[jengablock15]

Just remeber to replace the soundhax file and download the 2.1.0 ctrtransfer file for EU.

How about the extdata folder?

 

[Hyoretsu]

I think you can't give that CTR transfer link.

Removed it.

 

[Sascha93]

i won't dont worry but i cant find my problem on the 3ds.guide there is something about ds functionally broken but how can i even open fbi?

Here is the solution quoted from 3DS.guide: "If you downgrade to 2.1.0 on a 2DS or New 3DS and left Wireless Communication off, you can re-enable the wireless by removing the battery for several seconds then booting back up."

My bad, was near the top op the 2.1.. page, not in the troubleshoot guide.

 

[Hyoretsu]

imo hyoretsu don't put soundhax for the guide. use oot oir steelhax. cuz' soundhax is BARELY working for ppl lol

Soundhax worked thrice for me.

--------------------- MERGED ---------------------------

How about the extdata folder?

I'll update the instructions with instructions for other regions.

 

[bbcali89]

Soundhax worked thrice for me.

--------------------- MERGED ---------------------------


I'll update the instructions with instructions for other regions.

idk man. cuz' it didn't work for most people. not calling you a liar at all. just saying the method that worked overall was oot lol.

 

[jhuebert95]

I ended up using plailect's guide and used waithax and safehax. Running a9lh and luma now you honestly don't need to wait for fasthax if you don't want to.

 

[SRKTiberious]

Now, I don't have a dog in this race since I've already A9LHed my system, but how easy is this newly-released exploit to patch by Nintendo?

The way I understand this to work, it's using a 'backup' firmware that hasn't been updated. Can Nintendo easily update both the main and this backup firm without bricking legit systems should anything go wrong with the update?

 

[NoNAND]

Help i get an error message saying a9lh not detected no usable files found when trying to ctr transfer..

 

[ifreedoms]

O3DS/2DS v11.2.0-35U with soundhax as entrypoint: https://mega.nz/#!25d2XKCK!nwp7NIdMmYZduFhydSaZsH9zGy2a6DlP71SqXTdXCYE
N3DS v11.2.0-35U with soundax as entrypoint: https://mega.nz/#!j91g2CxI!YrxPgicql_vQ_SK4h5f8KhFUmXoKE4NcpKuVgswBv_k

Here are the instructions:

1. Go to the link above that contains the ZIP for your device.
2. Go to this link and download the SafeA9LHInstaller 7z. We'll get to it later.
3. Go to this link (Note: it's a torrent magnet link, you'll need a torrent client to open it), download the file for your region and extract the zip.
4. Extract the Safehax ZIP you downloaded to your microSD root.
5. Get the 2.1.0 ctrtransfer files and put them in your files9 folder in your microSD root.
6. Put your microSD in your console.
7. Open Nintendo 3DS Sound, press DOWN (d-pad) two times and press A two times.
8. Homebrew will boot. Scroll down and launch Safehax.
9. Decrypt9WIP will launch. Choose "SysNAND Options", "CTRNAND tranfer...", "Auto CTRNAND Transfer". Press LEFT, UP, RIGHT, UP and A. Press A twice (one to select the zip file and the other to create a backup).
10. Press B and SELECT.
11. Now you can delete the 2.1.0 ctrtransfer files from your files9 folder.
12. Extract the SafeA9LHInstaller 7z and copy the "arm9.bin" to your microSD root.
13. Open the folder: "Nintendo 3DS/(32 Character ID)/(32 Character ID)/extdata/00000000" and delete the folder "0000008f".
14. Put the microSD in your console and press START.
15. Open your browser, do the initial setup, click URL and go to "http://dukesrg.github.io/2xrsa.html?arm11.bin".
16. It'll open a black screen with a few things written on it. Press SELECT, wait a few seconds and press any button to shutdown your console.
17. Power it on. The Luma3DS config screen will show. Press A at each one of the options (from "Autoboot SysNAND" to "Patch SVC/service/archive/ARM9 access). If you're on N3DS, also, Press A thrice at "New 3DS CPU". Press START and power off your console.
18. Power it on again. Exactly after you press the POWER button, hold START. It'll boot Houglass9.
19. Select "SysNAND Backup/Restore...", "SysNAND Restore (keep a9lh)". Now, press LEFT, UP, RIGHT, UP and A. Press A. After it successfully restores your 11.2 backup, just reboot your console.
20. Put your microSD into your PC and backup the "otp.bin" inside your "a9lh" folder.
21. Now you can delete the "3ds" (if you don't want Homebrew), "a9lh", "files9", "Themes" folders and the "arm9.bin", "arm11.bin", "SafeA9LHInstaller.dat" and "soundhax-usa-o3ds.m4a" (on O3DSes, on N3DSes it's "soundhax-usa-n3ds.m4a") files. Also delete "boot.3dsx" if you don't want homebrew.

--------------------- MERGED ---------------------------


Totally.

magnet link not working

 

[bbcali89]

Now, I don't have a dog in this race since I've already A9LHed my system, but how easy is this newly-released exploit to patch by Nintendo?

The way I understand this to work, it's using a 'backup' firmware that hasn't been updated. Can Nintendo easily update both the main and this backup firm without bricking legit systems should anything go wrong with the update?

nintendo cannot update NFIRM because of luma.