Hacking [PoC] 3DS Region Changing + proof

[cearp]

What are the chances GW implements this to their card in the future, if its doable that is?

sure they could have something to do a region change, just like then made the downgrade packs, it would be easy for them to do

 

[tony_2018]

i didn't really put much effort into making a guide/little tool before because i didn't want to have endless questions from people who want to change to jpn region to download some weird game demo etc etc, even if gateway patch so we don't need a legit file, to do the region change you still need all the fw files to install, explaining how to do it is fine enough, but seeing some of the questions and threads created, some people really have no idea or do not try to think about things for themselves.
the best thing would be if we could spoof the region, and access other eshops, i'm not sure if that would be possible to access the usa shop with a eur nnid (for example)
so yeah, i don't personally want to make a guide/release thread because honestly i just don't want to have to deal with the noobs most people who had the knowledge could/have probably done this already (lol, i'm not some 3ds hacker dev, and i figured it out!), all the info is on this page anyway, so, good luck

COMPLETELY UNDERSTANDABLE.

 

[guitarheroknight]

sure they could have something to do a region change, just like then made the downgrade packs, it would be easy for them to do

Just another quick question. Would this work on the N3DS? Not that I need it Im just curious

 

[gamesquest1]

Just another quick question. Would this work on the N3DS? Not that I need it Im just curious

no way to know unless you have a n3ds hack, but it most probably will

 

[Wowfunhappy]

USA eshop work + USA NNID=A SDSD card
USA eshop work+no NNID=B SDSD card（Bridge）
EUR no eshop+EUR NNID=C SDSD card

1.A card is properly identified ESHOP

2.In other B card, run eshop an error number 110

3.Shutdown

4.Run C card, run the eshop EUR
You can log in to work! ! !

What if you're changing the region of Sysnand? I have a 3DS in the target region to obtain a legit SecureInfo_A from.

 

[Apache Thunder]

What if you're changing the region of Sysnand? I have a 3DS in the target region to obtain a legit SecureInfo_A from.

I would assume you could decrypt NAND dump from other region 3DS using it's xorpad, then xorpad that back using the xorpad of your home region console and use that as sysnand since it's correctly encrypted and since it isn't modified, the files inside are signed correctly. The console encryption over the NAND image is only one layer of the encryption. The "signing" of the files inside isn't unique per console like the NAND image encryption is. Unless I'm wrong, someone can correct me if that's the case.

You should test the image in emunand before you try it on sysnand. Unless you have a NAND hard mod, then flash away!

Once n3DS support gets released, I could see someone buying a Japanese normal n3DS and transferring their USA n3DS XL's nand over to it. (once 9.x version of decrypter tool has NAND xorpad generation. Until, then you can't do this with n3DS yet) Then perhaps resell the XL as a Japanese console. They'd have to change out the serial code stickers because that would get transferred over as well.

Your basically swapping motherboards, but without actually swapping motherboards....

So you could transfer region/NAND from different form factors like an XL to a smaller unit or a smaller unit to a XL where a motherboard swap wouldn't normally be possible. (as long as it's in the same model family. Obviously, you can't transfer a classic 3DS NAND over to an n3DS or from a 3DS to a 2DS. )

 

[Wowfunhappy]

Once n3DS support gets released, I could see someone buying a Japanese normal n3DS and transferring their USA n3DS XL's nand over to it. (once 9.x version of decrypter tool has NAND xorpad generation. Until, then you can't do this with n3DS yet) Then perhaps resell the XL as a Japanese console. They'd have to change out the serial code stickers because that would get transferred over as well.

Can anyone confirm that this would actually work? As I think you've guessed, I'm hoping to eventually do this on a EU N3DS, so I can have a non-XL USA console. I want to swap the region and update it officially (killing of Gateway support). Swapping NANDs sounds a heck of a lot simpler.

The problem is, since Gateway's Emunand won't support 9.5+ on the N3DS, I won't know if the eShop works until after I've updated and lost Gateway support. If, at that point, the eShop doesn't work, I'm completely screwed.

Edit: I created a new thread here, because I didn't want to have to keep hijacking Cearp's topic wondering about the N3DS.

 

[SolidSnail55]

Can anyone confirm that this would actually work? As I think you've guessed, I'm hoping to eventually do this on a EU N3DS, so I can have a non-XL USA console. I want to swap the region and update it officially (killing of Gateway support). Swapping NANDs sounds a heck of a lot simpler.

The problem is, since Gateway's Emunand won't support 9.5+ on the N3DS, I won't know if the eShop works until after I've updated and lost Gateway support. If, at that point, the eShop doesn't work, I'm completely screwed.

I honestly have no idea what you have to do to switch regions...
It got more complicated as I read down this page lol

 

[AquaX101]

How do you get the ctrnand xorpad?

 

[gamesquest1]

i didn't really put much effort into making a guide/little tool before because i didn't want to have endless questions from people who want to change to jpn region to download some weird game demo etc etc, even if gateway patch so we don't need a legit file, to do the region change you still need all the fw files to install, explaining how to do it is fine enough, but seeing some of the questions and threads created, some people really have no idea or do not try to think about things for themselves.
the best thing would be if we could spoof the region, and access other eshops, i'm not sure if that would be possible to access the usa shop with a eur nnid (for example)
so yeah, i don't personally want to make a guide/release thread because honestly i just don't want to have to deal with the noobs most people who had the knowledge could/have probably done this already (lol, i'm not some 3ds hacker dev, and i figured it out!), all the info is on this page anyway, so, good luck

....just putting this out there, this thread is not a [tutorial] or a [how to], this is just a "here is the general idea" its a complicated process that has the potential for bricking peoples consoles,anyone who knows how to read and read up the process of decrypting their nand and extracting etc should be capable of doing this with no hand holding.....anyone who needs hand holding should probably wait until someone makes a super simple solution, im fairly sure gateway will offer something like this in an upcoming firmware

 

[AquaX101]

I want a tutorial so badly for this but I know we're not getting one lol

 

[tony_2018]

....just putting this out there, this thread is not a [tutorial] or a [how to], this is just a "here is the general idea" its a complicated process that has the potential for bricking peoples consoles,anyone who knows how to read and read up the process of decrypting their nand and extracting etc should be capable of doing this with no hand holding.....anyone who needs hand holding should probably wait until someone makes a super simple solution, im fairly sure gateway will offer something like this in an upcoming firmware

I guess they don't know what PoC stands for.

 

[cearp]

What if you're changing the region of Sysnand? I have a 3DS in the target region to obtain a legit SecureInfo_A from.

i have already said it will work with sysnand.
no need to make a whole new thread about it.
swapping the nand has already been tried, for some reason it did not work when i tried it once, and someone else told me they tried it and they had no luck too. maybe we just made a mistake, but i doubt it, there is not much involved ha.

....just putting this out there, this thread is not a [tutorial] or a [how to], this is just a "here is the general idea" its a complicated process that has the potential for bricking peoples consoles,anyone who knows how to read and read up the process of decrypting their nand and extracting etc should be capable of doing this with no hand holding.....anyone who needs hand holding should probably wait until someone makes a super simple solution, im fairly sure gateway will offer something like this in an upcoming firmware

sure, i know this thread is just the PoC, but that is why i was hesitant about making the real guide/release/how to thread
you make it seem like i am personally complaining that the op didn't make a guide, but i am the op...

I want a tutorial so badly for this but I know we're not getting one lol

there is basically a tutorial. did you miss it?
http://gbatemp.net/threads/poc-3ds-region-changing-proof.378110/page-11#post-5346168
is it good enough for you?

 

[gamesquest1]

i have already said it will work with sysnand.
no need to make a whole new thread about it.
swapping the nand has already been tried, for some reason it did not work when i tried it once, and someone else told me they tried it and they had no luck too. maybe we just made a mistake, but i doubt it, there is not much involved ha.

sure, i know this thread is just the PoC, but that is why i was hesitant about making the real guide/release/how to thread
you make it seem like i am personally complaining that the op didn't make a guide, but i am the op...


there is basically a tutorial. did you miss it?
http://gbatemp.net/threads/poc-3ds-region-changing-proof.378110/page-11#post-5346168
is it good enough for you?

oh no i was quoting your post to remind people that you werent making a tutorial, as pretty much every post after that was "how do i do this" or how can i do that".....maybe i worded it a bit wrongly

 

[Wowfunhappy]

i have already said it will work with sysnand.
no need to make a whole new thread about it.

Oops, sorry, I just hadn't wanted to overtake your thread with N3DS discussions, since it seemed like a different a very specific topic.

I know it works with Sysnand, but does the eShop work? Since the nature of Sysnand means you can't do that trick with swapping out SD cards.

 

[cearp]

Oops, sorry, I just hadn't wanted to overtake your thread with N3DS discussions, since it seemed like a different a very specific topic.

I know it works with Sysnand, but does the eShop work? Since the nature of Sysnand means you can't do that trick with swapping out SD cards.

i have not tested that trick thing, but sure i hope it works for people, i guess it is still possible to make it work with that trick. ideally someone will be able to see the real problem why eshop does not work and directly fix that

 

[AquaX101]

i have already said it will work with sysnand.
there is basically a tutorial. did you miss it?
http://gbatemp.net/threads/poc-3ds-region-changing-proof.378110/page-11#post-5346168
is it good enough for you?

I understand everything except going into the nand.

 

[AquaX101]

I know I am acting like a noob but how do I go "into" the nand? Would this be by using VoID's tools?

 

[shinyquagsire23]

yellows8 also posted this guide up on 3DBrew. Pretty much the same, but doesn't require a donor Secureinfo_A file so you can just modify it yourself:https://gist.github.com/yellows8/f15be7a51c38cea14f2c

Although you have to patch out VerifyRsaSha256, so that might be tricky I guess.

 

[AquaX101]

yellows8 also posted this guide up on 3DBrew. Pretty much the same, but doesn't require a donor Secureinfo_A file so you can just modify it yourself: https://gist.github.com/yellows8/f15be7a51c38cea14f2c

I don't know how to get the ctrnand xorpad... I'll wait for a video tutorial soon