• $0.00
    Your cart is currently empty.

3DS 11.2 Custom Firmware Installation Guide

3DS 11.2 CFW GUIDE BY PLAILECT & VIDEO GUIDE BY MODZLINK

THIS IS NOT MY GUIDE! THIS IS A COPY OF THE ORIGINAL GUIDE AS THE ORIGINAL GUIDE MAY CHANGE AT A LATER POINT. ORIGINAL GUIDE

This guide is compatible with

  • Old 3DS on firmware 11.2
  • Old 3DS XL on firmware 11.
  • 2DS on firmware 11.2
  • New 3DS on firmware 11.2
  • New 3DS XL on firmware 11.2

REQUIREMENTS

3DS console
SD CARD (old 3ds / 2ds)
Micro SD card (new 3DS / XL)
SD card reader
Computer
Internet connection

FAT32 Formatter

STEP 1

Homebrew Launcher (SoundHax)

The Homebrew Launcher has many different entrypoints, or methods of launching.

SoundHax is compatible with versions 9.0.0 through 11.2.0 in the EUR, JPN, KOR, and USA regions.

What you need

Instructions

  1. Copy the contents of the starter folder in starter.zip to the root of your SD card
  2. Copy the SoundHax .m4a to the root of your SD card
  3. Copy the otherapp payload to the root of your SD card and rename it to otherapp.bin
  4. Reinsert your SD card into your 3DS
  5. Launch Nintendo 3DS Sound
  6. Go through all of the bird tips, then close the app normally and reopen it
    • Launching SoundHax immediately would cause these tips to appear on every launch of the Nintendo 3DS Sound until this is done
  7. Play the SoundHax .m4a
  8. Your console should load the homebrew menu

STEP 2

Decrypt9 (Homebrew Launcher)

What you need

Instructions

  1. Create a folder named files9 on the root of your SD card if it does not already exist
  2. Copy safehax.3dsx to the /3ds/ folder on your SD card
  3. Copy fasthax.3dsx to the /3ds/ folder on your SD card
  4. Copy Decrypt9WIP.bin from the Decrypt9WIP .zip to the root of your SD card and rename Decrypt9WIP.bin to safehaxpayload.bin
  5. Reinsert your SD card into your 3DS
  6. Enter the homebrew launcher
  7. Launch fasthax
  8. Once it has completed, press (Start) to exit back to the homebrew launcher
    • This may take several tries
  9. Launch safehax
  10. If the exploit was successful, you will have booted into Decrypt9

STEP 3

2.1.0 ctrtransfer

If you downgrade to 2.1.0 on a 2DS or New 3DS and left Wireless Communication off, you can re-enable the wireless by removing the battery and unplugging the charger for several seconds then booting back up.

If you’ve been using the New 3DS’s microSD Management to transfer files to your SD card, this will no longer work on 2.1.0, make sure to have a microSD card reader on hand before proceeding.

Your device may not show your installed games after the ctrtransfer. This is due to the tickets being removed by the transfer, which is why you back them up. They will be restored at the end of the guide.

For now, connecting your device to the internet is REQUIRED to continue after the 2.1.0 ctrtransfer.

Disable the parental controls of your device before doing the 2.1.0 ctrtransfer. If you do not know the password, see this site.

Performing a ctrtransfer will remove all user-installed tickets from the device until a backup is restored. Under NO CIRCUMSTANCES should you skip creating a backup!

Never format a 2DS while on a version <6.0.0 or you will be unable to complete initial setup and will BRICK!

Never update a New 3DS running 2.1.0 (an Old 3DS firmware) or you will BRICK! You MUST restore a NAND backup or ctrtransfer back to standard New 3DS firmware first!

Overview of steps

In this section, we will be flashing your console’s CTRNAND partition to 2.1.0 in order to take advantage of an oversight in 2.1.0 for the purpose of extracting the OTP unique to your console. This OTP file is required to install arm9loaderhax, and cannot be shared with other consoles.

This is accomplished by installing a premade ctrtransfer image containing 2.1.0, copying your console specific files (such as moveable.sed and SecureInfo_A) to it, then fixing the title databases.

What you need

Instructions

Section I – Prep work

You should be in Decrypt9 for these steps.

  1. Press (Select) on the main menu to eject your SD card, then put it in your computer
  2. Copy the 2.1.0 .bin and .bin.sha from the ctrtransfer .zip to the /files9/ folder on your SD card
  3. Reinsert your SD card into your 3DS
  4. Press (B) to get to the Decrypt9 main menu
Section II – ctrtransfer

Having a backup of your device’s NAND is REQUIRED. You will be prompted to create one as part of the steps if you do not already have one.

If you do not know whether or not you already have a NAND backup, create one when prompted by pressing (A) just to be sure.

If you do not have enough space to create the backup, you can either backup to a different SD card or clear space on your current SD card by pressing (Select) on the Decrypt9WIP main menu to eject your SD card and allow it to be swapped with a different SD card or to clear space on your current SD card

  1. Go to “SysNAND Options”, then “CTRNAND Transfer”, then “Auto CTRNAND Transfer”
  2. Select the 2.1.0 ctrtransfer image when prompted by pressing (A), then input the key combo given
  3. If you do not already have a NAND backup, backup SysNAND to NANDmin.bin when prompted by pressing (A)
    • Having a backup of your device’s NAND is REQUIRED.
    • Skipping this backup will result in the LOSS of all installed games and saves!
  4. Allow the transfer process to proceed automatically, this may take some time
  5. Once the transfer is complete, press (B) to go back
  6. Press (Select) to eject your SD card
  7. Delete the 2.1.0 ctrtransfer image .bin and .bin.sha from the /files9/ folder on your SD card
  8. Press (Start) to reboot without reinserting your SD card
    • While on 2.1.0, the device will black screen on boot if your SD card is inserted before the home menu loads
    • Every time the device is rebooted on 2.1.0, you will need to take out your SD card before boot and put it back in after the home menu loads
    • For now, leave the SD card out as you will be copying files to it in the next page
    • This will be fixed once you restore your device in the next page

The initial boot of 2.1.0 can take slightly longer than a standard boot on some devices.

(Screen distortions or discolorations are normal for some devices while on 2.1.0, they will go away once you restore your backup)

Putting a New 3DS on 2.1.0 in sleep mode is known to cause an UNRECOVERABLE brick! This only happens when shutting the lid while the device is on; this does not apply to turning the device off. The device only enters sleep mode when the lid is closed. It is not on a timer or anything like that. You should continue without delay to avoid any possibility of this happening!

STEP 4

Installing arm9loaderhax

The final Step of this guide is to install arm9loaderhax and setup Luma3DS to run just milliseconds into the boot. This is accomplished by using SafeA9LHInstaller by AuroraWright.

This will install AuroraWright’s Fork of arm9loaderhax.

We will also setup the ability to launch payloads from arm9loaderhax, giving us the ability to unbrick our SysNAND from situations that would normally brick us by restoring from backup.

You cannot use another console’s OTP or you will brick GUARANTEED.

Overview of steps

In this section, we will go through the process that all the other steps have led up to: actually installing arm9loaderhax.

This is nearly the best possible kind of device exploit because it is permanently installable into the NAND firm partitions, and runs before most of the OS loads, allowing it to not only work on all versions once installed, but also protect itself and recover from most situations that would brick a non-A9LH 3DS such as a nonfunctional home menu or bad title install.

The file arm9loaderhax.bin is what is launched by arm9loaderhax itself after it finishes loading off of NAND, and can be any valid arm9 payload. This file can be replaced at any time, although Luma3DS allows for the launch of other arm9 payloads by holding buttons on boot.

In this case, we use Luma3DS by AuroraWright to boot a patched SysNAND directly, allowing us to completely bypass the need for any kind of EmuNAND, vastly simplifying the usage of a hacked 3DS in addition to saving SD card space.

Once arm9loaderhax is installed and Luma3DS is setup with the correct options, we then restore our previous backup.

During this process, we also setup programs such as the following:

  • FBI (installs CIA formatted games and applications)
  • Luma3DS Updater (updates our CFW installation easily)
  • Hourglass9 (multipurpose tool which can do NAND and cartridge functions)

What you need

Instructions

Section I – Prep work

Ensure you are using an SD card that is not corrupted!

If you use a corrupted SD card without fixing it, you may BRICK!

If you think your SD card may be corrupted, check your SD card for errors using H2testw (Windows), F3 (Linux), or F3X (Mac)!

  1. If it exists, copy the /files9/ folder on your SD card to a safe location on your computer and back it up to multiple locations (such as online file storage); the files inside could save you from total data loss if you break your system
  2. Create a folder named cias on the root of your SD card if it does not already exist
  3. Delete the a9lh folder from the root of your SD card if it exists
    • If you accidentally install arm9loaderhax using another device’s OTP.bin, you will BRICK!
  4. Delete the 3ds folder from the root of your SD card if it exists
  5. Copy the contents of the starter folder in starter.zip to the root of your SD card
    • This will include a brand new 3ds folder to replace the one you just deleted
  6. Copy the contents of the SafeA9LHInstaller .7z to the root of your SD card
  7. Copy the a9lh folder from the data_input .zip to the root of your SD Card
  8. Copy the contents of the arm9loaderhax release .7z to a9lh folder on your SD card
  9. Copy hblauncher_loader.cia from the hblauncher_loader .zip to the /cias/ folder on your SD card
  10. Copy lumaupdater.cia from the Luma3DS Updater .zip to the /cias/ folder on your SD card
  11. Copy FBI.cia from the FBI .zip to the /cias/ folder on your SD card
  12. Copy arm9loaderhax.bin from the Luma3DS .7z to the root of your SD card, overwrite existing files
  13. Create a folder named luma on the root of your SD card
  14. Create a folder named payloads in the luma folder on your SD card
  15. Copy Hourglass9.bin from the Hourglass9 .zip to the /luma/payloads/ folder on your SD card and rename Hourglass9.bin to start_Hourglass9.bin
  16. Copy GodMode9.bin from the GodMode9 .zip to the /luma/payloads/ folder on your SD card and rename GodMode9.bin to up_GodMode9.bin
  17. Copy aeskeydb.bin to the /files9/ folder on your SD card
  18. Copy DspDump.3dsx to the /3ds/ folder on your SD card
  19. Copy the contents of fbi-2.4.2-injectable.zip to the /files9/ folder on your SD card
Section II – Installing arm9loaderhax
  1. Reinsert your SD card into your 3DS
  2. Do the steps for installing arm9loaderhax on your device:
    • You should be on 2.1.0
    • Go to http://dukesrg.github.io/2xrsa.html?arm11.bin on your 3DS
    • If you get the error “This service is not available in your region”, use the System Settings to set your device’s country to match the NAND region you installed with 2.1.0 ctrtransfer
    • If you get another error, follow this troubleshooting guide
    • If you get a glitched screen, follow this troubleshooting guide
    • If your wifi switch is off, unplug the 3DS and remove the battery for several seconds to enable wifi
    • Press (Select) to Full Install
    • The installer will now install arm9loaderhax on your device (this is very fast)
    • Shut down your console, hold the power button until it turns off if necessary
    • Copy your console specific OTP.bin from the /a9lh/ folder on your SD card to a safe location on your computer and back it up to multiple locations (such as online file storage), then reinsert your SD card into your 3DS
Section III – Configuring Luma3DS
  1. Hold select on boot to enter the Luma3DS menu
  2. Use the (A) button and the D-Pad to turn on the following:
    • “Autoboot SysNAND”
    • “Use SysNAND FIRM if booting with R”
    • “Show NAND or user string in System Settings”
  3. If you are using a New 3DS, you should also enable the following:
    • “New 3DS CPU” to “Clock+L2(x)”
    • This will increase the framerate of many games, but may cause instability in others
    • If some games do not work properly, disable this option and try again
  4. Press Start to save and reboot
    • If you get a black screen, just continue to the next section
    • If you get a “Failed to mount CTRNAND” error, just continue to the next section
Section IV – Restoring the System

If, before following this guide, you already had an EmuNAND setup and would like to move the contents of your previous EmuNAND to your new SysNAND CFW, now is the time to follow Move EmuNAND instead of doing the first four steps in this section.

  1. Open Hourglass9 from arm9loaderhax by holding (Start) on boot
  2. Go to “SysNAND Backup/Restore”
  3. Go to “SysNAND Restore (keep a9lh)” and restore from NANDmin.bin
  4. Press (Start) to reboot
  5. If your backup was of a version between 3.0.0 and 4.5.0, your console will not boot until you manually download the required firmware:
    • Download this file and rename it to firmware.bin
    • Download this file
    • Copy firmware.bin and cetk to the /luma/ folder on your SD card
    • Delete both of these files after updating your 3DS
  6. Update your 3DS by going to System Settings, then “Other Settings”, then going all the way to the right and using “System Update”
    • Updates while using A9LH + Luma (what you have) are safe, stop asking about it
    • The warning about never updating a New 3DS from 2.1.0 does not apply after restoring your NAND backup.
    • If this gives you an error, set your DNS settings to “auto”
    • If this still gives you an error and your NAND is below 9.2.0, follow 9.2.0 ctrtransfer
Section V – Injecting FBI
  1. Open Hourglass9 from arm9loaderhax by holding (Start) on boot
  2. Go to “SysNAND Backup/Restore”, then select the “Health&Safety Dump” option to dump Health & Safety to hs.app (you can use Up and Down / Left and Right to change the name)
  3. Press (B), then select the “Health&Safety Inject” option
  4. Select the FBI injectable .app for your region
  5. Press (A) and confirm to inject
  6. Press (Start) to reboot
  7. If you still launch to the stock Health & Safety app and have downgraded with Gateway in the past, follow this troubleshooting guide
Section VI – Finalizing setup
  1. Open Health and Safety (which is now FBI)
  2. Select “SD”
  3. Select “cias”
  4. Navigate to FBI.cia and press (A) to install
  5. Navigate to hblauncher_loader.cia and press (A) to install
  6. Navigate to lumaupdater.cia and press (A) to install
  7. Return to the SD directory with (B)
  8. Navigate to arm9loaderhax.bin, then press (A) on it and select the “Copy” option
  9. Return to the FBI main menu with (B)
  10. Select “CTR NAND”
  11. Select “<current directory>”
  12. Select the “Paste” option, then press (A) to confirm
  13. Exit with the home button
  14. Launch the Homebrew Launcher from the home menu
  15. Select “DSP Dump”
  16. Press (Start) when prompted to exit
  17. Reboot while holding Start to launch Hourglass9
  18. Go to “SysNAND Backup/Restore”, then select “Health&Safety Inject”
  19. Select hs.app (the original one that doesn’t contain FBI), then press (A) and confirm to inject
  20. Press (Select) on the main menu to eject your SD card
  21. Press (Start) to reboot with the SD card removed
    • Booting the device at least once with the SD card removed will allow you to configure the CTRNAND based luma installation
  22. Use the (A) button and the D-Pad to turn on the following:
    • “Show NAND or user string in System Settings”
  23. If you are using a New 3DS, you should also enable the following:
    • “New 3DS CPU” to “Clock+L2(x)”
    • This will increase the framerate of many games, but may cause instability in others
    • If some games do not work properly, disable this option and try again
  24. Reinsert your SD card, then press Start to save and reboot!

If DSi / DS functionality has broken (such as DS carts or DSiWare no longer working), follow this troubleshooting guide

You can now use Luma3DS Updater to update your Luma3DS to the latest version just by opening it and pressing (A).
This is not the same thing as a System Update; it just downloads and extracts the newest Luma3DS files. Luma3DS Updater only updates the files located on the SD card.
This will only update the Luma3DS files on the SD Card. If you boot the device without an SD card, it will use whatever version you placed in CTR NAND.

You will now boot a Custom Firmware based SysNAND by default.
You can now hold (Select) on boot to launch the Luma3DS configuration menu.
You can now hold (Start) on boot to launch Hourglass9, an arm9loaderhax safe multipurpose NAND and cartridge tool.

You can update your arm9loaderhax installation in the future by following the instructions on the Updating A9LH page.

To use NTR CFW, get ntr.bin from the appropriate .zip on this page and copy it to the root of your SD card, then install BootNTR.cia from this page.

Keep your NANDmin.bin file, it can be restored by Hourglass9 to save you from a brick in the future.

You can remove your NAND backups from /files9/ as long as you still have them backed up to a safe location.

You can remove any extra files and folders from the root of the SD card that are not in the following list:

+ 3ds
+ files9
+ hblauncherloader
+ luma
+ Nintendo 3DS
+ arm9loaderhax.bin
+ boot.3dsx

For information on changing your device to another region, check out the Region Changing page.

For information on keeping your A9LH installation up to date, check out the Updating A9LH page.

For information on using Luma3DS’s various features, check out its wiki.

Support Plailect

Similar posts
  • How to Install LineageOS on a OnePlus... CyanogenMod otherwise known as CyanogenOS has been one of my favorite Android custom roms, because it not only makes Android usable and clean, but it also speeds up your smartphone so you can get it’s full usability without having bloatware and adware applications that hog up resources. Today I bring you another OnePlus One (What [...]
  • Halo Revamped 3DS Update – Perf... TCPixel has pushed out a new update for Halo Revamped a homebrew application for the Nintendo 3DS! The new update brings Stability updates New maps Up to 8 players! For more info follow the video above and read the description on TCPixel’s [...]
  • Nintendo Goes On a Copyright Strike F... It seems that Nintendo has employed or is in the works with the Belgian Anti-Piracy Federation which has gone on a copyright frenzy on youtube. Various content creators have received one or multiple copyright strikes on youtube and have had their videos completely removed; some users have also been completely shut down! Users affected include ModzLink [...]
  • Smealum Updates Homebrew Payload for ... Firmware 11.3 was released recently by Nintendo. Along with the release the homebrew launcher was temporarily broken as the current payloads were no longer working. Smealum has been hard at work patching up the payloads to allow execution on 11.3 firmware. This proves that smealum is a talented hacker and if a challenge is posed [...]
  • New Nintendo 3DS C Stick Upgrade Mod If you recently purchased the New Nintendo 3DS or New Nintendo 3DS XL you should know that the C stick on these consoles is not the best and hardly even moves which doesn’t give you much feedback. Additionally the stick is very small which ends up being difficult to use sometimes. Alas! I show you [...]

1 Comment

  1. March 18, 2017    

    ass

Leave a Reply

Your email address will not be published.

two × four =

Older Posts

Submit a News Story
We will thank you for your submission using this alias
Sending