Hacking [Tutorial] How to downgrade from 9.2 and install CFW without owning Gateway card

lisreal2401

Well-Known Member
OP
Member
Joined
Jun 4, 2013
Messages
859
Trophies
1
Age
27
XP
2,997
Country
United States
OK, I've seen tons of confusion over this today. I've personally downgraded my 9.2 3DS, and went through the VERY tedious process of installing the CFW, without owning a GW. Here's everything you need to know.

1. What you need -

3DS or 3DS XL (2DS isn't supported, nor is New 3DS or New 3DS XL) with 9.2 or lower
Any Nintendo DS flashcart that works on your current firmware
Lots of patience

First things first. Go ahead and grab the Gateway 3.0 launcher from somewhere. Place this in the root of your SD card. Now, download the downgrade file appropriate for your region and have this on the root of your SD card. Put the thing in your 3DS. Install the DS mode exploit using any flashcart now.

Now, load the Internet Browser, and go to www.go.gateway-3ds.com to load the exploit. Make sure you clear your cookies, and disable the wireless before launching the internet browser. Re-enable once you have your cookies cleared. Once you're in, dump your current nand and back it up somewhere. This is required to downgrade, so don't back it up before downgrading. After this, run the downgrade app and be patient. You'll now be on 4.2 firmware. From here, backup your nand to your PC. This is very important if you ever want to return to 9.2, or if you have retail eShop stuff you want to keep when you go legit again.

I won't be delving into making a separate emunand in this tutorial. So if you still want to use your retail carts, I can't help you at the moment. Someone surely can point me in the right direction however.

Now for the tedious part. Give all your thanks to Devin, he wrote this, not me. Make sure you use Palentine CFW for this, but other than that, follow this 1:1

I know I had issues installing the DevMenu so I'm writing this tutorial to show a pretty painless way of installing it.​
1. Launch the GW3DS exploit so you're at the GW3DS menu. You want to dump your NAND to the SD card.​
2. Backup your NAND.bin file to your PC.​
3. Now you'll want to boot into the GW3DS menu again and select "Format emuNAND".​
4. Once that's done go to your PC and open the NAND.bin you extracted earlier in HxD. Now here's where things get tricky. You want to copy lines going from offset 00000000 all the way to and including line 000001F0.​
5. Once copied go to the beginning of the code. (To the right of where it says 00000000 under offsets.) And click Copy Insert. Once you've done that go ahead and save the NAND.bin file.​
6. Almost done. Next put your SD card that you formatted emuNAND on and open up the emuNAND tool made by n1ghty. Click the option to insert emuNAND and insert the NAND.bin file you modified.​
7. Now you're going to want to download the files off of GovanifY's website. Throw the files in the 3DS_Stuff folder into the root of your SD card. Extract the rest of it to your Desktop or wherever.​
8. Next up you're going to want to get your DS flashcart's microSD card ready, you'll just want to throw thisfile onto it.​
Alright so you think you're ready to install the DevMenu? Hope you're ready to reset your 3DS about 50 times.​
1. Boot up your DS flashcart and run the NDS file you downloaded. You want to install the Homebrew Rop Loader 4X, (Not the MSETBOSS one. The other one.) Once that's done go ahead and exit to the 3DS main menu.​
2. Make sure you have your SD card that you formatted emuNANDon and injected the NAND.bin in the 3DS and go to Settings->Profile->Nintendo DS Profile. Hold L when pressing Nintendo DS Profile.​
3. Now your top screen should be blue, and the bottom screen should flash white for a second. If it didn't flash white then you're going to have to restart your 3DS. Keep doing step 2 until it flashes white and your 3DS reboots. (It won't give you an error.)​
4. Perfect. Now that your 3DS rebooted and you're in the 3DS' main menu go to your computer. Those files you downloaded from GovanifY's website are going to come in handy. Open run.bat in Notepad and replace "IPTOMODIFY" with your 3DS' IP address. Save run.bat.​
5. Now run the run.bat file. If it says it can't connect, keep trying. Eventually it should send a CIA Install command. Congrats. If it doesn't then you'll want to reboot the 3DS, and try again from step 2. (You don't have to keep editing the run.bat file. Once is enough.)​
6. If it worked, turn off the 3DS. Turn it back on and do the Settings->Profile->Nintendo DS Profile exploit again except don't hold L. It make take you a few tries like it did before until the 3DS actually reboots into the menu.​
7. You should see a gift box on your 3DS' main screen. If not then you might need to download something from the eShop. Which requires you to be on the latest emuNAND, connect to the eShop, download a demo, and then reinjecting your modified NAND.bin file into the SD card. (I had a backup of my SD card with demos from the eShop so I just copied that over to the SD card.) Congrats.​



Grab the required files from this topic here http://gbatemp.net/threads/4-x-only-cia-cfw-complete-guide.373532/

This should be all you need to get this up and running. A bunch of other stuff I haven't covered, but again, this is the bare basic guide for CFW on 9.2 without a Gateway. Post questions or anything I missed here. Thanks to everyone above.

EDIT: OK, thanks to spinal_cord I've found out you can run a separate emunand on a different SD card on 9.4, allowing you to use this CFW AND stay on the latest firmware to play 7.X and higher games on CFW and access the eShop. What you need for this -

Additional SD card
MT Card 2.3 launcher.dat (here http://www.mt-card.com/index.html)
The Gateway Launcher installed to the DS profile exploit

So, assuming you've already followed the steps here, run the rop multiloader we used earlier to install the Gateway Launcher. Note that you'll need to switch back to the Homebrew Launcher if you want to use the CFW again. Put the MT Card Launcher.dat in the root of your other SD card. Load the DS profile exploit, and the MT Card menu should pop up. Dump your NAND, then format it using the tool in the MT Card menu. From here, launch Classic Mode, then enter the System Settings again. If you're firmware version starts with MT3D, you've done it correctly and can safely update to 9.4 firmware. If not, DO NOT update your system and try again. You'll reboot back into your stock nand after updating. From here, run Classic Mode again and you should be running your emulated 9.4 nand.
 

54321

Well-Known Member
Newcomer
Joined
Dec 29, 2011
Messages
74
Trophies
0
XP
106
Country
United States
I think that people may be having more trouble with downgrading than cfw since there is already a thread on how to install it, but I'm not gonna complain about a convenient 2 in 1 thread.
 

videogamefanatic

Well-Known Member
Newcomer
Joined
May 26, 2010
Messages
69
Trophies
1
XP
742
Country
United States
What features exactly does CFW provide? I'm guessing it can't entirely replace a Gateway cart

It provides the ability to install .cia files (games, dlc, etc) built for firmwares 4.5 and below (and the odd few newer programs/games). It doesn't replace Gateway, but you can at least play older games.
 
  • Like
Reactions: Margen67

YayMii

hi
Member
Joined
Jun 24, 2009
Messages
4,916
Trophies
0
Age
28
Location
that place
XP
758
Country
Canada
I got it to work :D The rebooting process took forever (it froze more often than it did work, but no harm done. Just try over and over again), and I just kept my router control panel open to keep an eye on the 3DS's IP address (I had to move closer to the router to get it to work... you want to make sure the blue "Internet" text is showing on the top screen after the reboot instead of the green "StreetPass" text when you run the batch file). Oh, and yeah, you need to have something from the eShop (a game, a demo, etc) installed on the SD card prior to installing the devmenu .cia file.

This was a 9.2 3DS XL that was just catching dust on my desk, so downgrading it to 4.2 and installing devmenu might give this thing some use :D
QPERRtZ.jpg

(oh, and I noticed a typo in the instructions... it says "Copy Insert" on Step 5 instead of "Paste Insert". Confused me for a bit before I figured that out!)
 
  • Like
Reactions: Margen67

videogamefanatic

Well-Known Member
Newcomer
Joined
May 26, 2010
Messages
69
Trophies
1
XP
742
Country
United States
I got it to work :D The rebooting process took forever (it froze more often than it did work, but no harm done. Just try over and over again), and I just kept my router control panel open to keep an eye on the 3DS's IP address (I had to move closer to the router to get it to work... you want to make sure the blue "Internet" text is showing on the top screen after the reboot instead of the green "StreetPass" text when you run the batch file). Oh, and yeah, you need to have something from the eShop (a game, a demo, etc) installed on the SD card prior to installing the devmenu .cia file.

This was a 9.2 3DS XL that was just catching dust on my desk, so downgrading it to 4.2 and installing devmenu might give this thing some use :D
QPERRtZ.jpg

(oh, and I noticed a typo in the instructions... it says "Copy Insert" on Step 5 instead of "Paste Insert". Confused me for a bit before I figured that out!)

How do you install anything from the eShop since it asks you to update when you start it?
 

Uncle_Iroh

Well-Known Member
Newcomer
Joined
Dec 31, 2014
Messages
90
Trophies
0
Age
31
XP
161
Country
United States
It provides the ability to install .cia files (games, dlc, etc) built for firmwares 4.5 and below (and the odd few newer programs/games). It doesn't replace Gateway, but you can at least play older games.

Thanks. Can you run regular gateway while on cfw? Also retail carts that require>4.5 won't work, right?
 

YayMii

hi
Member
Joined
Jun 24, 2009
Messages
4,916
Trophies
0
Age
28
Location
that place
XP
758
Country
Canada
How do you install anything from the eShop since it asks you to update when you start it?
I had software on my SD card prior to downgrading, so I just copied that over after I formatted the emuNAND. You need at least one piece of software installed on the SD card in order for the devmenu icon to appear on the Home menu, even if you've installed it properly.

Don't have a DS flashcart that works on 4.5 :(
Now that we can exploit the browser, is there a way we can use that instead of a DS flashcart?
From what I understand, Gateway's version of the DS Profile exploit is more picky about the launcher.dat (you overwrite it with a different exploit after formatting the emuNAND)... I'm assuming Gateway's browser exploit is the same, so I'm not quite sure if there's a browser-based exploit that allows this to work.
 

Kakkoii

Old fart
Member
Joined
Sep 14, 2007
Messages
631
Trophies
0
XP
586
Country
Canada
Once you're in, dump your current nand and back it up somewhere. This is required to downgrade, so don't back it up before downgrading.
Don't you mean, "so back it up before downgrading"*? People reading that could get screwed over big time.

After this, run the downgrade app and be patient. You'll now be on 4.2 firmware. From here, backup your nand to your PC. This is very important if you ever want to return to 9.2
And here again, backing up your NAND after you've already gone to 4.2 isn't going to help you get back to 9.2. So this is again misleading.

Just a couple things you should probably correct in your post...
 

lisreal2401

Well-Known Member
OP
Member
Joined
Jun 4, 2013
Messages
859
Trophies
1
Age
27
XP
2,997
Country
United States
Don't you mean, "so back it up before downgrading"*? People reading that could get screwed over big time.


And here again, backing up your NAND after you've already gone to 4.2 isn't going to help you get back to 9.2. So this is again misleading.

Just a couple things you should probably correct in your post...
You can restore back to 9.2 through hardware... not sure if a software solution is possible yet. As for the former, it can be a bit confusing. I should have said, don't delete the file before downgrading, as you can't proceed without it in the root of your SD card.

Off topic: Despite being a very recent release, the US version of Fantasy Life works on 4.5 for those that care!
 

Pawed

( ͡° ͜ʖ ͡°)
Member
Joined
Sep 29, 2014
Messages
140
Trophies
0
XP
96
Country
India
Just did this, and it worked, although I used instructions from another thread.

Now I have a few questions: how do I get into emuNAND? how can I update the emuNAND to 9.4.0? In the emuNAND do I already have BigBlueMenu (I used this instead of devmenu) or will I have to install this again?

Also, how can I install games that are 7.0.0, like Pokemon Omega Ruby etc?
 

arehandero

Member
Newcomer
Joined
Oct 6, 2010
Messages
10
Trophies
0
XP
111
Country
United States
Great, I was able to do the setup with the help of lisreal2401.
My questions now are:
1. Do I have to execute the DS profile exploit everytime I turn on the 3ds?
2. What CIAs can I install? i mean, does this allow multiregion?
3. I heard if you use wrong CIAs you can bring your 3DS, is this true? if so, what should I avoid?

thanks in advance and thanks again lisreal!
 

YayMii

hi
Member
Joined
Jun 24, 2009
Messages
4,916
Trophies
0
Age
28
Location
that place
XP
758
Country
Canada
...from what I can tell, the exploit is technically running through emuNAND (I'm not brave enough to test that theory though). I'd just love it if it was possible to update this thing to the latest.
 
  • Like
Reactions: Margen67

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Veho @ Veho:
    He got charged with GTA, reckless driving, resisting arrest, and 3.5 million dollars for the use of the EMT van.
  • K3Nv2 @ K3Nv2:
    @Veho, still looking at these? https://a.co/d/ie8WhPM
  • Veho @ Veho:
    I'm not looking for one, I don't need it at the moment. I just came across the one I sent you and it caught my eye because it was $16 or something instead of $100.
  • Veho @ Veho:
    But thanks :)
  • K3Nv2 @ K3Nv2:
    Yeah saw it on my deal sites nearly $10
  • K3Nv2 @ K3Nv2:
    Had this damn blanket in the dryer for 1:15 minutes still damp
  • Veho @ Veho:
    My dryer cycle is 3 hours, I'm not surprised.
  • K3Nv2 @ K3Nv2:
    Know those moments when it feels dry put you put it down still wet af
  • Veho @ Veho:
    Yeah, it's not dry, it's just warm.
  • K3Nv2 @ K3Nv2:
    Use fire
  • Veho @ Veho:
    Can't, it's wet!
  • K3Nv2 @ K3Nv2:
    Mmm wet fire
  • Veho @ Veho:
    I think Adelle sang about that.
  • Veho @ Veho:
    SHE SET FAAAIYAAAH
    TO THE RAIIIIIN
  • K3Nv2 @ K3Nv2:
    Can't oil still catch fire in water
  • Veho @ Veho:
    Why is your blanket oily?
    +1
  • K3Nv2 @ K3Nv2:
    Ffs now the dryers shutting off every 5 minutes
  • SylverReZ @ SylverReZ:
    Good morning
  • Veho @ Veho:
    Sup.
    +1
  • K3Nv2 @ K3Nv2:
    Steak and eggs sound good
  • Veho @ Veho:
    Yup.
  • SylverReZ @ SylverReZ:
    @Veho, It's getting to around 30 degrees celsius here.
  • Veho @ Veho:
    Dropping or rising?
  • Veho @ Veho:
    It's getting to around 30°C here too, it was 35°C for two weeks in a row.
    Veho @ Veho: It's getting to around 30°C here too, it was 35°C for two weeks in a row.