Hardmod Downgrade

The version of autofirm used in this guide was modified from Raugo's original autofirm by Reboot.ms, it is being rehosted with permission.

If you are on 11.0.0, you must follow this guide to downgrade your NATIVE_FIRM using a hardmod in order to directly dump and restore your NAND.

An excellent guide to getting a hardmod can be found here.

This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed here.

This will work on both a New and Old 3DS.

What you need

• Your 11.0.0 NAND extracted using your hardmod
• Autofirm 11.0 - Reboot edition (mirror) (mirror)
• The 10.4.0 and 11.0.0 decrypted NATIVE_FIRM CIAs for your device:
  • Old 3DS 10.4.0 - 0004013800000002 v23341 (mirror) (mirror)
  • Old 3DS 11.0.0 - 0004013800000002 v24368 (mirror) (mirror)
  • New 3DS 10.4.0 - 0004013820000002 v23341 (mirror) (mirror)
  • New 3DS 11.0.0 - 0004013820000002 v24368 (mirror) (mirror)

Instructions

1. Extract the autofirm_Reboot_11.0.zip file to a folder called autofirm_Reboot_11.0
2. Place a copy of your NAND backup (named nand.bin) in the autofirm_Reboot_11.0 folder
3. Place both NATIVE_FIRM CIAs that correspond to your device in the autofirm_Reboot_11.0 folder
4. Run "autofirm_ENG.bat" and select which device the NAND backup is for
5. Wait while the script runs
6. If everything worked, then your original NAND will have been renamed to backup_nand.bin and you will have a modified nand.bin containing the 10.4.0 NATIVE_FIRM on version 11.0.0
7. Flash this nand.bin to your device with your hardmod

Your version number will not have changed in the settings, but the exploit has worked.

You can now continue from either Homebrew Launcher (No Browser) or Homebrew Launcher (Browser), depending on what the Part 1 - Decrypt9 chart specified for your version.