Hacking [How-to] Spoof firmware (to access eShop and more) on New 3DS and Old 3DS

[motezazer]

ah, right.

So having them both on 9.2... should hopefully work?

Hopefully.
It can fail fo a random reason.

 

[Shadowtrance]

Yeah yifan_lu said a few pages back that both systems need to be the same version for it to work.

 

[AlanWeird]

Hopefully yifanlu'll help out. I just want all my genuine content onto a hackable system.

I've never pirated anything on 3ds, and even bought a gateway just so I could have emunand and transfer my things.

Thanks for everything sofar guys

 

[Click This]

If I download stuff on a linked 9.2 sysnand, will they show up and work on my 9.5 emunand?

 

[motezazer]

If I download stuff on a linked 9.2 sysnand, will they show up and work on my 9.5 emunand?

No, you have to install the tickets.

 

[Click This]

No, you have to install the tickets.

Right. Would it be possible to move tickets from sysnand to emunand?

 

[Killaclown]

No, you have to install the tickets.

So if we do this whole process on sysnand, we will most likely get the update nag right? Seems a bit risky when an update makes gateway and my emunand completely obsolete tbh. I hope there will be an option to do this all on emunand after a while. Thanks for releasing this guide though, great to have a lot of possibilities!

 

[Click This]

So if we do this whole process on sysnand, we will most likely get the update nag right? Seems a bit risky when an update makes gateway and my emunand completely obsolete tbh. I hope there will be an option to do this all on emunand after a while. Thanks for releasing this guide though, great to have a lot of possibilities!

Easy fix, L+R+UP+A+Power will reboot into recovery mode where you can remove the nag by canceling the update.

 

[gamesquest1]

So if we do this whole process on sysnand, we will most likely get the update nag right? Seems a bit risky when an update makes gateway and my emunand completely obsolete tbh. I hope there will be an option to do this all on emunand after a while. Thanks for releasing this guide though, great to have a lot of possibilities!

there is ways to delete the update nag by entering recovery mode.....but idk if i have just got luck and it hasnt nagged me for a while, but it seems running this patch removes the pending update as the system thinks its upto date.....i used to get nagged every time i turned on my n3ds, but havent since i have been using this patch

i think really we need this as a plugin now so its run automatically....or just added into the main NTR firmware

 

[motezazer]

Right. Would it be possible to move tickets from sysnand to emunand?

Yes. You extract the tickets from your ticket.db, then you install them with this (basically a cia port of yifanlu's 3DSInstallTickets (yes, him again)).

 

[Killaclown]

Easy fix, L+R+UP+A+Power will reboot into recovery mode where you can remove the nag by canceling the update.

That's great! I thought if I got the dreaded nag I would be doomed to never play drunk again lol.

there is ways to delete the update nag by entering recovery mode.....but idk if i have just got luck and it hasnt nagged me for a while, but it seems running this patch removes the pending update as the system thinks its upto date.....i used to get nagged every time i turned on my n3ds, but havent since i have been using this patch

i think really we need this as a plugin now so its run automatically....or just added into the main NTR firmware

That would be an awesome feature for complete peace of mind, I agree. Thanks for the answers, looks like I might get me some of that MH4U item box E-Shop and NNID tied DLC after all

 

[thaikhoa]

Yes. You extract the tickets from your ticket.db, then you install them with this (basically a cia port of yifanlu's 3DSInstallTickets (yes, him again)).

A stupid question, how can I extract the tickets from ticket.db sysnand? Thanks

 

[motezazer]

A stupid question, how can I extract the tickets from ticket.db sysnand? Thanks

You extract them
Seriously, you open your ticket.db in an hew editor, you search for the title id you want to have a ticket to.
A little above, you will have Root-CA00000003-XS0000000c. You go 0x140 before, then you select from here a block of size 0x350.
You copy that, you open a new file, you past, you save. You have your ticket.

 

[Ichii Giki]

Right. it works brilliantly on my now 9.2.0 new3ds. I get to the screen telling me to choose my target console... i hit it... and i instantly get the local wireless error. *sigh*

both are on 9.2 sysnand, but i'm running roxastools 9.7 emunand on the o3ds. maybe I should wait for you to compile the thing yifanlu made, remove all emunand, and just go for it with as few hacks as possible?

couldn't I also run ntr on my old 3ds?

I had a thought, since the System Transfer applet changed from 9.0 to 9.6, if you downgraded the System Transfer applet on your 9.7 EmuNAND to the 9.0 version of the System Transfer applet, would you then be able to system transfer from the 9.7 EmuNAND O3DS to the 9.2 SysNAND N3DS... I want to try this once we figure out the final step with getting eShop working on region-changed N3DS (need to do some SOAP response filtering...) myself. For the downgrading System Transfer step, I guess we either have to wait for homebrew support in rxTools (to use something like FBI) or if we can manually downgrade the app in the EmuNAND image itself by decrypting the NAND.

Or you could manually transfer all your files from 9.7 EmuNAND (saves/tickets.db) to 9.2 SysNAND and then initiate the transfer on O3DS with yifan_lu's code.

 

[Click This]

Yes. You extract the tickets from your ticket.db, then you install them with this (basically a cia port of yifanlu's 3DSInstallTickets (yes, him again)).

Must the sysnand still be 9.2? Or can I take my 9.5 emunand and flash it to sysnand, download stuff, and get the ticket.db as well? Assuming hardmod, of course.

 

[motezazer]

Must the sysnand still be 9.2? Or can I take my 9.5 emunand and flash it to sysnand, download stuff, and get the ticket.db as well? Assuming hardmod, of course.

As long as the ticket is inside your ticket.db, it shouldn't matter.

 

[AlanWeird]

It checks a couple of times. The main reason for same fw is that the system transfer protocol changed at least three times.

Can you help with your spider based spoofing solution for the O3DS? The guys have tried to compile from your source to no avail.

I'd love to get my O3DS spoofed so I can transfer to my new 3DS. Hoping you could help!

Sorry to beg. I know you're busy, and everyone wants your expertise.

 

[motezazer]

Can you help with your spider based spoofing solution for the O3DS? The guys have tried to compile from your source to no avail.

I'd love to get my O3DS spoofed so I can transfer to my new 3DS. Hoping you could help!

Sorry to beg. I know you're busy, and everyone wants your expertise.

We must compile it with UVLoader, and I don't have time right now.
But if someone...

 

[AquaX101]

We must compile it with UVLoader, and I don't have time right now.
But if someone...

How do i compile using UVLoader?

 

[motezazer]

How do i compile using UVLoader?

It's not that easy.
You must have little experience with assembly.
It's why i don't have time. If it was easy, I could make it myself right now.