Hacking [Report] Installing spoofed 1.1.0-1 exclusive video to SysNAND succeeded

[MelonGx]

Only for O3DS

-------------------------------------

Steps:

1. Spoof the 1.1.0-1 exclusive video

Title ID:
JPN: 0004001000023000
USA: 0004001000024000
EUR: 0004001000025000

- Open the Video CIA with Hex editor
- Change offset 0x2F90 0C-0D from 00 00 (v0, USA/EUR) or 00 02 (v2, JPN) to 08 00 (v2048)

2. Install spoofed video CIA with

- FBI (Destination: NAND)
or
- Sysupdater

in miniPasta / rxTools Pasta Mode.

(NASA's SysNAND direct installation failed. You must enter Pasta mode to install it.)

-------------------------------------

[For O3DS]

The installed video can be watched directly. No CFW is needed.
Do not install different region videos otherwise you need region-free CFW to see them.

[For N3DS]

New3DS does not have this title in NAND.
Do not install these videos into New3DS otherwise you need CFW to see them.

-------------------------------------

If you install unspoofed video to SysNAND (which version stays at v0/v2), Nintendo will throw you an update nag.

 

[GBHAKC75]

What is this video ?

 

[RealityNinja]

These videos were promotional exclusive video included in 1.1.0-1 update, and removed with the 2.0.0 update.

 

[wormdood]

What is this video ?

answer = pointless

 

[GBHAKC75]

These videos were promotional exclusive video included in 1.1.0-1 update, and removed with the 2.0.0 update.

Never seen it, do you have a link for it like on Youtube ?

answer = pointless

I'm just curious

 

[RealityNinja]

Never seen it, do you have a link for it like on Youtube ?


This is a link for the EUR video (different video for US and JP), at 1m30 :

 

[DjoeN]

These videos were promotional exclusive video included in 1.1.0-1 update, and removed with the 2.0.0 update.

Haha, yes i remember having those on my O3DS bit pointless, but damned nice to know you can get them to work on a later FW

 

[cearp]

just for an explanation of why it works without hacks even after we edit it, it's because we still have the legit ticket - i guess.

 

[MelonGx]

Updates:

Installing these videos with HBL launched NASA on SysNAND 9.2 failed.
I have to enter miniPasta to install it.

So did SysNAND 9.3-10.3, I thought.

 

[MelonGx]

New report:
If you have injected this spoofed video and have performed a System Transfer, then the video icon will remain on the Target 3DS but you can't execute it properly, unless you have injected the spoofed video into Target 3DS either.