Uninstall Arm9LoaderHax ?

Discussion in '3DS - Homebrew Development and Emulators' started by Olivier78640, May 5, 2016.

  1. Olivier78640
    OP

    Olivier78640 Member

    Newcomer
    14
    9
    Apr 30, 2016
    France
    Hello Everyone,

    I recently got a New 3DS to upgrade my Old 3DS and it is working great so far.
    Now that everything is transferred over to my N3DS, I would like to sell my O3DS to a friend.
    He is actually OK to buy it with the sole condition of the console being completely free of any exploit.
    I already uninstalled FBI from Health And Safety so there is pretty much no homebrew left on the Home Menu since the transfer process formatted my O3DS at the end.

    The only hax left is A9LH because even if the first time setup appears, I still need to have a A9LH payload on the SD card to make it boot (otherwise, it instantly shuts down).
    Many people on internet says that you need a NAND backup to (I guess) rewrite the FIRMs to something stock to get rid of A9LH. But as far as I understand, FIRMs are part of the NAND so backuping the curent NAND and re-writing it immediately after with Decrypt9 would not work even without the "Keep A9LH" option in D9. I also do not have any NAND backups for this console anymore.

    So my question is: Can you get rid of A9LH with anything other than a NAND backup ?

    I would be really grateful to anyone who would point me the right direction.
     
  2. 4gionz

    4gionz GBAtemp Advanced Fan

    Member
    786
    307
    Aug 16, 2014
    Canada
    If you don't have a clean NAND backup then it won't be easy. I think their may be a way but it's probably super complicated and convoluted
     
  3. MrHuu

    MrHuu GBAtemp Regular

    Member
    129
    102
    Sep 19, 2015
    Netherlands
    How about, downgrading (if on latest firm) and then updating without the FIRM protect option.

    That would remove A9LH, right?
     
  4. Jao Chu

    Jao Chu GBAtemp Advanced Maniac

    Member
    1,921
    1,211
    Aug 20, 2013
    straya m8
    NAND access mod plus clean NAND dump is the easiest way
     
  5. Olivier78640
    OP

    Olivier78640 Member

    Newcomer
    14
    9
    Apr 30, 2016
    France
    Thanks for the fast reply.

    Wall, that is unfortunate. Worst case, I can try selling the console with a SD card containing A9LH and tell him that if he ever wants to change the SD card, he will need to copy everything over.

    That is a pretty interesting idea but it seems pretty dangerous, right? Because if the downgrade process fails, I wont have anything to recover the failed downgrade. The console is on the latest system version available by the way.

    I do have NAND access through A9LH but I do not have any Clean NAND Dump ! That is why I actually posted this message.
     
  6. MrHuu

    MrHuu GBAtemp Regular

    Member
    129
    102
    Sep 19, 2015
    Netherlands
    Not having a NAND backup is also quite dangerous :teach:

    Maybe backup before downgrading ^_^
     
    vb_encryption_vb likes this.
  7. astrangeone

    astrangeone GBAtemp Addict

    Member
    2,080
    601
    Dec 1, 2009
    Canada
    Canada
    I had to do that recently to get a "stock 9.2" firmware. Make a emunand, downgrade that with Plaisysupdater, tinyformat X2, inject your unaltered h&s, and write that to the firmware. Only thing is that the icon for the h&s stays with FBI. (Is there a way to fix it?)
     
  8. Jao Chu

    Jao Chu GBAtemp Advanced Maniac

    Member
    1,921
    1,211
    Aug 20, 2013
    straya m8
    Ouch, thats mega unfortunate! I'm sure i don't need to remind you, but ill say it anyways for outsiders that pop in here: A good practice with sensitive files such as NAND dumps is to keep a copy stored in online cloud storage and another on your hard drive. I've also got a rewritable blue-ray disc that stores all my NANDs and dumped OTPs aswell.
     
  9. Olivier78640
    OP

    Olivier78640 Member

    Newcomer
    14
    9
    Apr 30, 2016
    France
    I actually HAD the original pre-A9LH NAND backup at some point but I actually deleted the file because everything was working and I only kept the post-A9LH one for a few days. I actually backup my N3DS every week or so and I keep only the most recent backup. So yeah that is a major fail on my part.

    Thanks! I was thinking of something like that after MrHuu replied. I am going to try it out after I successfully made a backup :P
     
    MrHuu likes this.
  10. astrangeone

    astrangeone GBAtemp Addict

    Member
    2,080
    601
    Dec 1, 2009
    Canada
    Canada
    It works, but I swear that the next o3DS I do for a friend, I will keep every damn file.

    Just make sure you tinyformat twice. Oh, and if you don't have a copy of your unaltered H&S, PM me. I have mine...
     
  11. DjoeN

    DjoeN Captain Haddock!

    Member
    5,207
    1,502
    Oct 21, 2005
    Belgium
    Somewhere in this potatoland!
    Make an emunand of your current sysnand with emunand9, boot into emunand, set IT up, then boot with luma3ds into decrypt9 payload, inject emunand into sysnand, you should Have now a Clean sysnand, then format it and sell it to him
     
  12. sweis12

    sweis12 GBAtemp Maniac

    Member
    1,242
    517
    Oct 20, 2013
    Saint Kitts and Nevis
    Wait for a system update, and then update without the firm protection
     
  13. Olivier78640
    OP

    Olivier78640 Member

    Newcomer
    14
    9
    Apr 30, 2016
    France
    No problem ther since I actually already removed H&S that contained FBI through another FBI that I installed as a CIA, rebooted, downloaded the original H&S with the help of PlaiCDN and installed it as a CIA and it worked. I also did that with my N3DS.

    Wouldn't that carry A9LH? Because creating EmuNAND requires copying the entire NAND that contains A9LH and then re-copying it to SysNAND even after reformatting it would still imply having A9LH installed, right?

    He wants to buy it this next Monday :)
     
  14. astrangeone

    astrangeone GBAtemp Addict

    Member
    2,080
    601
    Dec 1, 2009
    Canada
    Canada
    It seemed to work for me, and I could boot the thing without the card too.
     
  15. Ekaitz

    Ekaitz Pokémon Master

    Member
    606
    214
    Jun 13, 2010
    France
    Lens
    Why would someone wants to get rid of such a wonderful thing? A9LH is great and I don't see the point of deleting it.
    Sometimes, I don't understand my own compatriots.

    Anywoo, I would try the downgrade then update thing, I don't see anything else really. You should always keep a backup dude, for your own safety! :P
     
    hobbledehoy899 likes this.
  16. Olivier78640
    OP

    Olivier78640 Member

    Newcomer
    14
    9
    Apr 30, 2016
    France
    Wait, can I boot EmuNAND with Luma3DS without FIRM protection? Downgrading, TinyFormatting twice, looks like the way to go, but if PlaiSysUpdater can't write the FIRM space, this is useless right?

    I know, right? Seeing my few hours of work just poof like that just makes me sad :( But the buyer is the scary type that feels like having a hack is something that will make him go to jail or being killed by a gang :P
     
  17. astrangeone

    astrangeone GBAtemp Addict

    Member
    2,080
    601
    Dec 1, 2009
    Canada
    Canada
    Luma3DS's only does a firm protect if you launch sysnand, not emunand. That's why I ended up doing that from emunand. I should write a tutorial on doing that to get "stock firmware" back onto a 3DS.
     
  18. Olivier78640
    OP

    Olivier78640 Member

    Newcomer
    14
    9
    Apr 30, 2016
    France
    Okay, thanks for the info! I am going to try this out right now!
     
  19. Seriel

    Seriel Worshipper of Skiddos

    Member
    2,764
    5,489
    Aug 18, 2015
    United Kingdom
    /home/erisa/
    Yeah, update without FIRM protection. If you're on latest, downgrade then update without protection.

    — Posts automatically merged - Please don't double post! —

    Please write that tutorial :D
     
  20. astrangeone

    astrangeone GBAtemp Addict

    Member
    2,080
    601
    Dec 1, 2009
    Canada
    Canada
    Definitely will, as soon as I get home from work. Seems like a lot of people were in my boat without a pre-a9lh backup and they needed a way to restore stock firmware.