Hacking [PoC] 3DS Region Changing + proof

[einstein95]

I mean you see my FC there, but I change my name to japanese caracters and back to US emunand?

JP, EU and US 3DSs use the same font file. Only CH, KO and TW use different font files.

 

[Sliter]

yes, when i changed to eur, my profile name was still my name with japanese characters. although if you wanted to just change the name you could probably use one of the sdk tools maybe? or i'm sure someone could make a launcher.dat to edit the file in nand where the profile name is (i saw the file somewhere...)

but how it works? xD

I heard that the Aikatsu! games are unplayable if you don't have a JP console (something to do with the keyboard), so that'd be awesome! Do you by chance know of any other games that are still region locked?
sorry for going kinda off topic

I don't saw much about games about this ... hey we could look for this and make a trhead! XD not only japanese but others regions and stuff

JP, EU and US 3DSs use the same font file. Only CH, KO and TW use different font files.

I know this, but I mean, i change to jap emunand , change my display name for something in katakana, back to the us and/emunand, it wills aty in katakana ?

and btw can I make all the font disponible at time ? (talkig about this XD)
and about the eshop? o-o

 

[Searinox]

So basically when a new version comes out, I can what, use UpdateCDN with say, a US build on my EU console to install it on emuNAND?

 

[player0]

I only want those beautiful JP themes to show up on my EU console

 

[laurorual]

WOW! So now i can buy my new3DS JAP without worring about not knowing japanese! Thats awesome news!

 

[.:drk_drgn:.]

Nice work! Looking forward to seeing if this will work on the N3DS when the GW update comes out, especially for Americans importing a EUR/JAP N3DS.

 

[Venseer]

WOW! So now i can buy my new3DS JAP without worring about not knowing japanese! Thats awesome news!

Not wanting to be an asshole, but in the OP it says 4.5 is required. We don't know yet if it's possible to downgrade N3DS to 4.5 yet.

 

[DSlite2]

Not wanting to be an asshole, but in the OP it says 4.5 is required. We don't know yet if it's possible to downgrade N3DS to 4.5 yet.

If the 2DS can't be downgraded, the N3DS most likely can't be either. The 2DS can't be downgraded because the hardware has a manual sleep button AND is missing the wireless switch - the switch is now software based in the OS. The N3DS also has a software based wireless switch. I believe that wasn't added into the OS until 6.2

I think another reason why the 2DS can't be downgraded is the way the screen works. It's one LCD vs the normal two LCDs in the 3DS'.

 

[Nollog]

excellent work. i hope you get inundated with people with hardware mods willing to test it out for you so I get a safe version faster .

 

[laurorual]

Not wanting to be an asshole, but in the OP it says 4.5 is required. We don't know yet if it's possible to downgrade N3DS to 4.5 yet.

Damn, got so excited that i forgot about this LOL
Hope to make it work with new3DS so

 

[gamesquest1]

assuming its figured out how to get different roploaders loading from the new web exploit, i guess it would also be possible on the N3DS.....plus gateway said they have more tricks up their sleeves....could be possible they have also designed a way to switch reagion.....they had the downgrading feature, so i suspect one of these "surprises" may be region changing too

 

[michyprima]

My N3DS will be JAP so please make it happen!

 

[Nollog]

Not wanting to be an asshole, but in the OP it says 4.5 is required. We don't know yet if it's possible to downgrade N3DS to 4.5 yet.

probably says that because he did it before the 9.2 exploit was released

 

[gamesquest1]

probably says that because he did it before the 9.2 exploit was released

pretty sure he was using a launcher.dat app to change the region of the console, only the GW 3.0/3.0.1 launchers are compatible with the web exploit atm, so unless thats figured out, or a different way of modding the nand that is runnable from within the system(i dont think that would be possible though)

so yeah atm it would only really work for 4.x console's

 

[boomie0123]

So from what I gather in this thread, I'm pretty sure of the following:

1) It's possible to change the 3DS region around, but since Nintendo has a data base of serial numbers pertaining to 3DS's by region, you wouldn't be able to play online without also having a legit serial from the region you're spoofing.

2) This is only currently possible on firmwares at 4.2 or something, and because the 2DS can't be downgraded, it's highly unlikely the New 3DS can be.

The questions I have about this are pretty much, is the change permanent, like can I change the region, and then be fine updating through normal system updates? And then, if I were to use the serial of a 3DS XL on a standard 3DS to spoof, would that cause any problems? Essentially, I just want a small New 3DS in NA region with the least amount of hassle possible.

 

[liomajor]

cearp i had some fun testing some things out with my emuNAND.

My 9.4.0 emuNAND already has NNID and you need internet/actual
fw to remove it, so i thought about a way to remove it without internet.

NNID is listed in: \data\<your unique id>\sysdata\00010038 > 00000000

It was pretty simple to do it and here it is how i did it:

1. I extracted my fat16 xorpad using launcher.dat from 3DS_Multi_Decryptor
2. Dumped emuNAND.bin using emuNANDTool
3. Extracted emunand.fat16.bin
4. xor'ed emunand.fat16.bin
5. Mounted emunand.fat16.bin.out with WinImage
6. Browsed to \data\<your unique id>\sysdata\00010038
7. Replaced 00000000 with another one i've extracted the same way that never had nnid
8. Renamed emunand.fat16.bin.out to test.bin
9. xor'ed test.bin
10. Injected test.bin.out into emunand.fat16.bin with HxD
11. Injected emunand.fat16.bin @ offset B930000 with HxD
12. Injected my new emunand.fat16.bin into my SD Card using emuNANDTool

Eh, voila, after booting into emuNAND NNID was gone

I could have switched out or deleted any other files i wanted,
maybe this will help your research

EDIT:

Wifi Data is located with SSID and readable Password in:
\data\<your unique id>\sysdata\00010017

Foldernames (on Dashboard) are located in:
\data\<your unique id>\sysdata\00020098

 

[cearp]

liomajor - nice stuff! I did not know it was possible to simply reXOR the nand and write it back... haha
I thought there would be some checksum at the least, thanks.
I was going to start testing with NNID deleted consoles, but maybe the change still needs to sync with Nintendo...

Thanks for the system save files, I was going to work on removing demo play count history

 

[liomajor]

liomajor - nice stuff! I did not know it was possible to simply reXOR the nand and write it back... haha
I thought there would be some checksum at the least, thanks.
I was going to start testing with NNID deleted consoles, but maybe the change still needs to sync with Nintendo...

Thanks for the system save files, I was going to work on removing demo play count history

I was curious about the unique id, so i decided to change it in emuNAND, the result was a first time 3ds setup

 

[cearp]

the unique id where? movable.sed?

 

[liomajor]

the unique id where? movable.sed?

\data\<unique id>\exdata

The System removed the faulty directory itself and offered first time setup.