Hacking N3ds 10.3 EMUNAND testing

[ShadowOne333]

N3DS(E) 9.0.0-20E - Emunand 10.3.0-28E (half firmware) (Gateway & Reinand)

Would you mind explaining that part of your sig?

 

[urherenow]

Nope, his signature clearly says N3DS.

oh, snap. I must be tired...

 

[Deleted User]

Would you mind explaining that part of your sig?

Yep just look at the post above yours

 

[ShadowOne333]

Yep just look at the post above yours

You replied a sec before me

 

[Deleted User]

You replied a sec before me

 

[Aroth]

https://gbatemp.net/threads/new-3ds-firmspoof-only-games-10-2-emunand.400577/
Used this to get 10.3 emuNAND without this encrypt thing. It works perfectly for me, and I have an emuNAND backup. It would be great if I didn't have to use this and FreeMultiPatcher just to use eShop and stuff.

There is actually no real reason to do this. Yes your system settings look all pretty and say 10.2 or 10.3 or whatever. And yes retail games stop asking to update. But since it does not update the native_firm/kernel, 9.6+ games still hang on the 3ds logo if you don't have gateway. You can just as easily bypass the update prompt on the carts with the latest BootNTR.cia and bin files.

 

[ShadowOne333]

Well, it's 6 am and haven't slept a bit. (Thanks, douche brain).
I'll try to rest or I'll be fucked.

If this comes to a conclusion, please drop me a PM because I'm sure this shit'll be 100 pages when I wake up.

 

[Deleted User]

There is actually no real reason to do this. Yes your system settings look all pretty and say 10.2 or 10.3 or whatever. And yes retail games stop asking to update. But since it does not update the native_firm/kernel, 9.6+ games still hang on the 3ds logo if you don't have gateway. You can just as easily bypass the update prompt on the carts with the latest BootNTR.cia and bin files.

I did that so I could easily use eShop with FreeMultiPatcher because NTR is too much work. Can we please stop talking about my half firmware since it's out of topic.

 

[Toiry921]

Alright for all of you guys who have been asking for replies in sorry I was overwhelmed by the amount of request and I would rather have given out proof and have more people believe me so I wanted to push the videos out quicker to have proof that I have done is possible and I will release wat I have done no matter how crazy it sounds it could just be a weird occurrence that had happened due to some weird glitch or it could be something I messed with earlier and didn't realize that it created this results but in the recent hours I first I created an emunand backup because I lost saves to some of my sysnand games that I had before creating emunand using the emunand9 tool emunand was gateway
Second I restored nand backup to emunand
I then rebooted to check if my games have returned sadly they didn't
Then I went back to emunand9 tool then restored the emunand backup when I then went into emunand and a kitten crawled over my system settings launching I realized it was 10.3 rxtools mode.
I don't know if it has anything to do with the nands I restored or if it had to do with during my downgrade my 3ds getting stuck at the 10 seconds until reboot screen then I forced reboot after a half hour of waiting. But there is what I have done believe it or not that is how I got my emunand the way it is.
EDIT:

Spoiler: Video

[

 

[Aroth]

I did that so I could easily use eShop with FreeMultiPatcher because NTR is too much work. Can we please stop talking about my half firmware since it's out of topic.

Just took another look at that thread, and he IS updating the native firm. Wtf. That shouldn't be possible

--------------------- MERGED ---------------------------

Alright for all of you guys who have been asking for replies in sorry I was overwhelmed by the amount of request and I would rather have given out proof and have more people believe me so I wanted to push the videos out quicker to have proof that I have done is possible and I will release wat I have done no matter how crazy it sounds it could just be a weird occurrence that had happened due to some weird glitch or it could be something I messed with earlier and didn't realize that it created this results but in the recent hours I first I created an emunand backup because I lost saves to some of my sysnand games that I had before creating emunand using the emunand9 tool emunand was gateway
Second I restored nand backup to emunand
I then rebooted to check if my games have returned sadly they didn't
Then I went back to emunand9 tool then restored the emunand backup when I then went into emunand and a kitten crawled over my system settings launching I realized it was 10.3 rxtools mode.
I don't know if it has anything to do with the nands I restored or if it had to do with during my downgrade my 3ds getting stuck at the 10 seconds until reboot screen then I forced reboot after a half hour of waiting. But there is what I have done believe it or not that is how I got my emunand the way it is

Yeah this sounds way too coincidental dude.

 

[Suiginou]

Alright for all of you guys who have been asking for replies in sorry I was overwhelmed by the amount of request and I would rather have given out proof and have more people believe me so I wanted to push the videos out quicker to have proof that I have done is possible and I will release wat I have done no matter how crazy it sounds it could just be a weird occurrence that had happened due to some weird glitch or it could be something I messed with earlier and didn't realize that it created this results but in the recent hours I first I created an emunand backup because I lost saves to some of my sysnand games that I had before creating emunand using the emunand9 tool emunand was gateway
Second I restored nand backup to emunand
I then rebooted to check if my games have returned sadly they didn't
Then I went back to emunand9 tool then restored the emunand backup when I then went into emunand and a kitten crawled over my system settings launching I realized it was 10.3 rxtools mode.
I don't know if it has anything to do with the nands I restored or if it had to do with during my downgrade my 3ds getting stuck at the 10 seconds until reboot screen then I forced reboot after a half hour of waiting. But there is what I have done believe it or not that is how I got my emunand the way it is

So do I read this right?

1. Create emuNAND backup using emunand9
2. Restore sysNAND backup
3. Restore emuNAND backup

That's it? Bullshit.

 

[Mrrraou]

So do I read this right?

1. Create emuNAND backup using emunand9
2. Restore sysNAND backup
3. Restore emuNAND backup

That's it? Bullshit.

NO YOU FORGOT THAT

when I then went into emunand and a kitten crawled over my system settings launching I realized it was 10.3 rxtools mode

 

[Aroth]

So do I read this right?

1. Create emuNAND backup using emunand9
2. Restore sysNAND backup
3. Restore emuNAND backup

That's it? Bullshit.

I suppose it is possible that somehow his downgrade was borked in some magical way that allowed him to install cfw and yeah kept just the right files to allow the emunand to read as 10.3 and play games?

Its a bit of a stretch though.

--------------------- MERGED ---------------------------

NO YOU FORGOT THAT

Mustn't forget the magical kitten of unintended updates.

 

[mashers]

So do I read this right?

1. Create emuNAND backup using emunand9
2. Restore sysNAND backup
3. Restore emuNAND backup

That's it? Bullshit.

You forgot a step. You have to get a kitten to crawl over your system settings for it to work.

 

[Toiry921]

Sorry if none believe me but it could have been due to some fact that I was switching the SD card between multiple 3ds to try the updater before I did my LOZ n3ds

 

[Aroth]

Sorry if none believe me but it could have been due to some fact that I was switching the SD card between multiple 3ds to try the updater before I did my LOZ n3ds

Maybe. Still seems a bit of a stretch.

At the end of the day there is nothing usable here for anyone so lets all head home and get some rest.

False alarm everyone. False alarm.

 

[Suiginou]

I suppose it is possible that somehow his downgrade was borked in some magical way that allowed him to install cfw and yeah kept just the right files to allow the emunand to read as 10.3 and play games?

Its a bit of a stretch though.

No, that's nonsense. 9.6+ NAND requires a 9.6+ NATIVE_FIRM. The 9.6+ NATIVE_FIRM can only be decrypted with the specific keys derived from OTP, which you just can't get on an N3DS unless you're in early boot.

How does game version checking work, again? Just CVer/NVer?

Crackpot theory: The system version wasn't shown in the proof, neither was the cart being inserted, and the lighting was mysteriously bad.

Thus: Make fake rxMode launcher that just makes a reboot on a physically separate 3DS and use the cart.
Alternatively: Use real rxMode launcher and a fwspoofed .3ds on a Sky3DS.

 

[CrispyYoshi]

Sky3DS?

 

[Aroth]

No, that's nonsense. 9.6+ NAND requires a 9.6+ NATIVE_FIRM. The 9.6+ NATIVE_FIRM can only be decrypted with the specific keys derived from OTP, which you just can't get on an N3DS.

How does game version checking work, again? Just CVer/NVer?

Basically yeah. It decides whether to prompt to install the packaged update based on the installed CVer version. Games won't launch without a native_firm that meets or exceeds the version specified in the exheader though.

And the nand thing was my understanding as well, but apparently the dude who did the 10.2 semi-updated emunand back in October updated his native firm just fine.

 

[Suiginou]

Basically yeah. It decides whether to prompt to install the packaged update based on the installed CVer version. Games won't launch without a native_firm that meets or exceeds the version specified in the exheader though.

And the nand thing was my understanding as well, but apparently the dude who did the 10.2 semi-updated emunand back in October updated his native firm just fine.

NATIVE_FIRM runs entirely separately. You can update it in emuNAND all day, every day. What matters is the NATIVE_FIRM used to launch into emuNAND, because that's the one that's going to get used.