Hacking [How-to] Spoof firmware (to access eShop and more) on New 3DS and Old 3DS

[dkabot]

ok yifan_lu - would it be possible to patch something, to allow to to visit other region's eshops? or is that more involved that the hack on this thread?
(regardless of the content not being able to run without region free, and most likely needing an nnid for the new eshop)

I recall them saying you can force it to connect but only without a NNID, and that downloading anything wasn't tested. Free software (excluding updates, as I now know) needs a NNID, however, so it gets awkward in its current state.

Would be nice to use in NTR for updating out-of-region games, but rather situational if it works currently.

 

[dubbz82]

It's not emunand. I like having my eshop purchases tied to my sysnand. Also, it'll support region free on home menu once it's finished.

Cool, in that case, that sounds like an awesome project.

 

[yifan_lu]

ok yifan_lu - would it be possible to patch something, to allow to to visit other region's eshops? or is that more involved that the hack on this thread?
(regardless of the content not being able to run without region free, and most likely needing an nnid for the new eshop)

A bit more involved. NIM gets region info from CFG. Changing the region return in CFG also screws up other things (like launching region locked titles and error message languages). You need to patch NIM to hard code CFG responses. You also need to patch tiger (eshop) to not check region responses (or patch am/pm or whatever to run other region's eshop title). Of course all this is pointless because you can't buy anything or link a nnid since that's tied to your device clcert. You can browse other regions and that's about it. I'm still trying to find a way to link other region nnids (I've heard about the multiple sd cards swap method but I can't see how that would work).

 

[Wowfunhappy]

It really works! No reason to think it wouldn't, but still! This is great.

 

[tony_2018]

Awesome, wheres the guide?

 

[Oishikatta]

Awesome, wheres the guide?

There is no guide, it's a single line you paste into NTR debugger. It's been edited into the first post.

 

[Shadowtrance]

Awesome, wheres the guide?

Pretty simple really.

1. Boot up NTR
2. Press X and Y, go to "Enable Debugger", press A.
3. Open NTR Debugger on PC.
4. enter this command in the debugger... connect("192.168.1.xxx", 8000) replacing 192.168.1.xxx with whatever your 3ds IP address is.
5. enter this command in the debugger... write(0x10DD28, (0x00, 0x20, 0x70, 0x47), pid=0x25)
6. Open eshop!
7. Download stuff! (just downloaded Pokemon Rumble World no problem on my 9.0E n3ds)

 

[tony_2018]

There is no guide, it's a single line you paste into NTR debugger. It's been edited into the first post.

I know, I was playing along...

 

[cearp]

7. Download stuff! (just downloaded Pokemon Rumble World no problem on my 9.0E n3ds)

do you have an nnid set up?
i have one on my emunand, and i know i won't be able to log in to my emunand one on sysnand.
i guess i could copy the nnid savedata in nand over, it should be that simple... but it would be a chore

I know, I was playing along...

can you make a video?
(joking) - most of the time i would always rather read than watch a video

 

[Shadowtrance]

do you have an nnid set up?
i have one on my emunand, and i know i won't be able to log in to my emunand one on sysnand.
i guess i could copy the nnid savedata in nand over, it should be that simple... but it would be a chore

Yeah I've got an NNID setup.

 

[liomajor]

Solved

 

[cearp]

Not working for me, eShop freezes.

what fw are you on? i'm not sure if that one line would work for every region/fw... - but i don't know...

 

[liomajor]

I'm on 9.0.0E

EDIT:

8th try, connection worked, write success, eshop asks me to update.

See below

 

[cearp]

I'm on 9.0.0E

and Shadowtrance has the same fw and region and it worked for him... very weird

 

[Shadowtrance]

Yeah that's pretty odd.

 

[yafeee]

Working perfectly on 9.0.0-20E

A huge thank you !

 

[liomajor]

Ok, it can be tricky, make sure to test your internet connection in system settings before executing ntr.

Next is, connect the debugger and to enter the write command.

> connect("192.168.2.199", 8000)
null
Server connected.
patching smdh
starting applet: 000400000004b300
FSUSER_OpenDirectory failed, ret=XXXXXXXXFSUSER_OpenDirectory failed, ret=XXXXXXXXpatching smdh
patching smdh
starting applet: 000400000004b300
FSUSER_OpenDirectory failed, ret=XXXXXXXXFSUSER_OpenDirectory failed, ret=XXXXXXXXpatching smdh
patching smdh
> write(0x10DD28, (0x00, 0x20, 0x70, 0x47), pid=0x25)
null
finished

If your connection didn't work, don't try to open eShop, start over by rebooting 3ds.

 

[cearp]

Ok, it can be tricky, make sure to test your internet connection in system settings before executing ntr.

Next is, connect the debugger and to enter the write command.

> connect("192.168.2.199", 8000)
null
Server connected.
patching smdh
starting applet: 000400000004b300
FSUSER_OpenDirectory failed, ret=XXXXXXXXFSUSER_OpenDirectory failed, ret=XXXXXXXXpatching smdh
patching smdh
starting applet: 000400000004b300
FSUSER_OpenDirectory failed, ret=XXXXXXXXFSUSER_OpenDirectory failed, ret=XXXXXXXXpatching smdh
patching smdh
> write(0x10DD28, (0x00, 0x20, 0x70, 0x47), pid=0x25)
null
finished

If your connection didn't work, don't try to open eShop, start over by rebooting 3ds.

yeah it took a few tries.
the time it worked, i got a different error message than usual (a grey one, smaller than the others)
i clicked ok, and i thought it would send me back to home menu, but it just tried to connect to eshop again, this time it worked
-- so, just like you liomajor, it ran the applet twice. whatever, i'm in
thanks! (9.2j)

 

[motezazer]

Updated the OP with advices to improve stablility.

 

[The Real Jdbye]

inb4 Gateway release an update with this feature added, and improve upon it.
Who needs 9.6?