Well, i just doengraded my 3ds. So this is the plan:
1. Borrow some ds mode card.
2. Install palantine's cfw and bbmenu the usual way.
3. This is the interesting part: launch gw 3.0 browser exploit from cfw and select make a nand backup (I think it will backup the emunand, so the cfw too).
4. Go...