Hacking [Guide] System Transfer Non-Updated O3DS and/or N3DS via NTR Firmware Spoof

[Maximilious]

So it's been mentioned and done before, but I've see no definitive guide on how to do a full sysNAND to sysNAND System Transfer by taking advantage of NTR CFW's firmware spoofing mechanisms. After asking questions and researching some threads that were pointed out to me, I wanted to post the full steps I took to get my Old 3DS sysNAND properly transferred to my New 3DS. Theres a Q/A section below the guide, and I can add to it if more people ask.

Also, now that Ninjhax 2.0 has been released, I'm sure it won't be long before we can do this kind of operation between systems that are on >9.6 - But I won't get ahead of myself.

This is my first go at a guide and made it as complete as I could - So here we go!

Requirements
1. Both systems sysNAND on version 9.0-9.2
2. Project Pokemon for O3DS

Spoiler

• https://gbatemp.net/threads/how-to-...eshop-and-more-on-new-3ds-and-old-3ds.386591/

3. NTR CFW on N3DS

Spoiler

• http://gbatemp.net/threads/release-...gion-free-cfw-on-jp-eu-us-aus-new-3ds.385142/
  
• Download zip: http://filetrip.net/dl?c0fcnfa5mZ

4. NTR Debugger

Spoiler

• http://gbatemp.net/threads/release-...st-public-real-time-debugger-for-n3ds.384858/
  
• http://filetrip.net/dl?Hnp6C8NakH
• IronPython: http://ironpython.net/

***DISCLAIMER***
I highly recommend taking sysNAND backups of both units before doing this. I'd also recommend restoring them over your current NAND with the backup to ensure you have a good copy. If you continue you are doing so on your own and I take no responsibility if something goes wrong in the transfer or your system(s) become bricked.

Procedure
1. If you had unlinked NAND's, you must restore your previous NAND to your system.

• You could transfer emuNAND to a target sysNAND, but I would recommend a clean NAND with no invalid/custom CIA's installed as they could brick the target system.

Spoiler

1. Copy NAND backup to your SD card if it is not present - Name it NAND.bin if not currently
2. Launch GW menu
3. Navigate to the far right and highlight "Downgrade System"
4. Hold "Up+A" and you will be prompted to restore using a NAND backup already present on the SD card.

2. Run Project Pokemon firmware spoof on your O3DS

Spoiler

• OLD 3DS METHOD

1. Download the code.bin and code.c from step 2 above
2. Copy them to the root of your SD card
3. Launch the web browser
4. Clear cookies and history
5. Go to loadcode.projectpokemon.org
6. Wait for the load bar and the message "failed to load" to disappear
7. Press Home
8. Done - Check connection to eShop

2. Run NTR Mode on your N3DS

Spoiler

1. Copy ntr.bin to your N3DS's microsd card from link in Step 3 above
2. Start Cubic Ninja, Click Edit->QR Code and scan the QR file. (JAPAN.png for JP consoles, and EUROPE_USA.png for other consoles)
   • (Hint: If you have installed other exploits already, hold L+R+X+Y at game's main menu to erase the savedata)
3. Press A to install the BootNTR
4. Turn off your console.

• How to boot into NTR Mode:

1. Turn on you console, wait a few seconds before starting Cubic Ninja.
2. Click Edit->QR Code, after booted up successfully, the screen will flashes blue and return to Home Menu.
3. If it was failed, hold power button to turn off the N3DS and try again.

3. Start the NTR Debugger on your N3DS

Spoiler

1. Once your N3DS is running NTR CFW, press "X+Y"
2. Scroll to "Enable Debugger" and Press "A"
3. If you had CN in the game slot, it may start - Exit to the home screen
4. Launch NTR Debugger on your computer - It also requires IronPython to run if you're having trouble - http://ironpython.net/
5. Connect the debugger with the command : connect('192.168.XXX.XXX', 8000)
   1. Replace 192.168.XXX.XXX with your 3DS IP address - If you can't find it, look in your home router's DHCP address table
6. Once connected, type the following command (may not work on 8.1J) : write(0x10DD28, (0x00, 0x20, 0x08, 0x60, 0x70, 0x47), pid=0x25)

4.Verify both systems can log into the eShop and you do not get a system update prompt. If you get the update prompt, you are not running NTR or the Project Pokemon spoofs corrently on your units. Read above to fix.

• Note: If you're having trouble with the NTR/Project Pokemon programs, please read through and use those threads in your troubleshooting. There's no need to fill this guide with questions that may have already been answered in their respective places.

5. Once both units can reach the eShop correctly, enter System Settings and go through with the System Transfer as you normally would.

I performed a local wireless transfer, transferring all of my SD card data over wireless (took forever), but can vouch it worked without issue. If you want a speedier transfer, you can do a local copy of your SD card data on your computer.

Question/Answer:
Q: "Why not just transfer your O3DS emuNAND to your N3DS emuNAND?"
A: You can, and there is a simpler method using the MultiPatcher CIA. I however wanted to have a sysNAND backup of my N3DS with my legitimate NNID and purchases. This way if my emuNAND for whatever reason gets royally F'd, I won't lose my NNID along with my purchases and can restore properly to start from square one.

If you're intersted in doing an emuNAND to emuNAND transfer, look here: http://www.maxconsole.com/maxcon_fo...m-Transfer-Old-3ds-to-New-3ds-Gateway-Emunand

Q: Can't I just use the MuliPatcher to do this on sysNAND?
A: No. MultiPatcher is an invalid (non-legitimate eShop purchased) CIA and could cause a bricked system during the transfer to sysNAND. In emuNAND however, this is okay.

Q: What if one of my systems is already on the latest sysNAND?
A: Start the sysTransfer like normal on that system from system settings. Follow the steps for NTR or Project Pokemon on the exploitable system.

Credits:
Ronhero - Helped with providing links and also creating the emuNAND transfer guide over on MaxConsole
The Real Jdbye - Also helped in providing links
motezazer - Project Pokemon guide

NTR CFW Team
tpu, enler, amuro, etc. NTR CFW will not be possible without them.
ChiChou(https://github.com/ChiChou). For designing the logo.
Myria, shinyquagsire23, Zidapi, etc. For testing on various consoles.
Smealum, for the amazing 'ninjhax' solution that runs unsigned code on 3DS consoles.

 

[Ronhero]

http://www.maxconsole.com/maxcon_fo...New-3ds-Gateway-Emunand?p=1754044#post1754044

Here is mine if it helps, it's emunand to emunand but it works system nand to emunand, system nand to system nand and emunand to system nand

 

[Maximilious]

http://www.maxconsole.com/maxcon_fo...New-3ds-Gateway-Emunand?p=1754044#post1754044

Here is mine if it helps

Already linked and credited at the end of my guide
Thanks for your help Ronhero - My transfer just finished, just thought a sysNAND guide would be nice too. Don't want to steal any of your thunder.

 

[Ronhero]

Already linked and credited at the end of my guide
Thanks for your help Ronhero - My transfer just finished, just thought a sysNAND guide would be nice too. Don't want to steal any of your thunder.

For system nand it's easiest to use project pokemon for the o3ds since it avoids unassigned cia files on the nand but on the n3ds NTR all the way for system nand

Oh and it's not stealing my thunder, the more people that help others the less full my inbox is

 

[Maximilious]

For system nand it's easiest to use project pokemon for the o3ds since it avoids unassigned cia files on the nand but on the n3ds NTR all the way for system nand

Yeah, NTR doesn't work for O3DS with CN - It crashed on me a few times and I couldn't understand why until I saw the loadcode.projectpokemon.org link. Then it all made sense haha.

 

[Ronhero]

Yeah, NTR doesn't work for O3DS with CN - It crashed on me a few times and I couldn't understand why until I saw the loadcode.projectpokemon.org link. Then it all made sense haha.

Well it might, you just need to have the correct offsets since the ones you where most likely using was for the n3ds

 

[robertorpg94]

This works in N3DS ?

why there saw mixed O3ds steps and do not know exactly where to start

 

[Kajiarashi Suzaku]

It will help me a lot. Thanks for the great tutorial.

 

[robertorpg94]

every time I enter the eShop , I pass unnoticed , even with the fimware 9.0 on my N3DS , but when I get into my new 3DS to effect the transfer of systema , I have this error, what should I do ?

 

[robertorpg94]

help?

 

[TrapperKeeperX]

I have to ask is it possible for me to transfer my old sysNAND 10.2 to an old emuNAND 10.2 and vice versa? I'll be using rxTools as my emuNAND if that does help.

 

[Uring]

does this procces still works? since the eshop was updated near november.

 

[Maximilious]

I have to ask is it possible for me to transfer my old sysNAND 10.2 to an old emuNAND 10.2 and vice versa? I'll be using rxTools as my emuNAND if that does help.

I'm not sure what you mean "old". If your referring to the same 10.2 console, then a sysNAND restore is what you want, then create a new emuNAND. If they are seperate consoles and you're on 10.2 why not upgrade to 10.3 and do a normal systransfer? I don't know what has been done for 9.6+ firmware's though and am honestly not going to bother with 10.3 support coming soon from gateway.

does this procces still works? since the eshop was updated near november.

It will, but you need to spoof the eShop in a different way now for your sysNAND and emuNAND. I haven't touched my console in a couple of months, and with the news of 10.3 support coming, I'm just going to wait on updating this guide since everything is going to change once again.

 

[Uring]

well... system transfer is not possible i change the nver and the cver with pasta and no luck I could enter the eshop but on system trasnfer i got and error so since downgrading is easy i update both 3dss to 10.3 did a system trasnfer and downgrade both again, so easy. It took me 2 hs cause the sd transfer on the pc but is the best solution since nintendo hasn't updated the new firmware. both consoles working with cfw and gateway

 

[lpchaim]

So I gather this isn't working anymore without some tinkering, right @Maximilious? My n3dsxl will probably arrive after 10.4 drops, so this'd be quite useful to me.