Hacking [Report] Spoofing menu/mint/mset/tiger on MT-card emuNAND failed

[MelonGx]

Everybody knows that MT-card emuNAND can be partially upgraded:

- Download latest firmware with 3DNUS
- Replace the latest menu/mint/mset/tiger with 9.4 ones (otherwise emuNAND will blackscreen)
- Use BigBlueMenu to install all the rest CIAs

But since menu/mint/mset/tiger are not the latest version, the update nag will be downloaded normally.

I tried spoofing 9.4 menu/mint/mset/tiger to make the system recognize them as 10.5 ones, for expecting it could remove the update nag:
(Thanks somebody in GBATEMP who introduced this spoofing method.)

- Open 9.4 menu/mint/mset/tiger CIA with Hex editor
- Change offset 0x2F90 0C-0D values (they are in Hex) to 10.5 menu/mint/mset/tiger's values
(You can find the values on 3dbrew.org, but they are in Dec, you need to convert them to Hex manually)
- Overwrite installing modified CIA with FBI (menu cannot be overwritten)

But unfortunately the result is - emuNAND blackscreens.
That means this spoofing method doesn't work for MT-card emuNAND.

-----------------------------

BTW, this spoofing method works for SysNAND 1.1.0 exclusive Promotion Videos (0004001000023000/24000/25000) installing to emuNAND.
It also fixes "Cannot install the video in same region" issue.
To be noticed that "different region video" need RegionFree-enhanced system (GW/rxTools) otherwise they will not be displayed (Rei/Cakes).

- Open the Video CIA with Hex editor
- Change offset 0x2F90 0C-0D from 00 00 (v0, USA/EUR) or 00 02 (v2, JPN) to 08 00 (v2048)
- Normally install modified CIA with BBM/FBI

Haven't tried installing spoofed 1.1.0 videos to SysNAND though.

 

[Zidapi]

This holds no interest or relevance to me personally, and only a very small group of users here will find it useful.

But I appreciate your documenting your experiences all the same. Something that may seem useless now, may end up being very useful in the future. Good work.

 

[MelonGx]

This holds no interest or relevance to me personally, and only a very small group of users here will find it useful.

But I appreciate your documenting your experiences all the same. Something that may seem useless now, may end up being very useful in the future. Good work.

At least someone who want this information can search a result in this board haha

 

[telon22]

Last time I had my o3ds and mt-card(have bought a n3ds now) it was working with 10.3.
This is what needs to done as far as I remember. You don't need to overwrite those 4 titles if you already have 9.4 emunand because it will result in error/black screen

1-take those 4 tiles out from a 9.4 emunand pack and spoof them to 10.5 emunand no's.
2-directly upgrade your o3ds from 4.x emunand to 10.5 without those 4 titles(delete them form the pack)
3-once you have tested your emunand is working you can easily install those 4 titles with devmenu
4 Profit??

 

[MelonGx]

Last time I had my o3ds and mt-card(have bought a n3ds now) it was working with 10.3.
This is what needs to done as far as I remember. You don't need to overwrite those 4 titles if you already have 9.4 emunand because it will result in error/black screen

1-take those 4 tiles out from a 9.4 emunand pack and spoof them to 10.5 emunand no's.
2-directly upgrade your o3ds from 4.x emunand to 10.5 without those 4 titles(delete them form the pack)
3-once you have tested your emunand is working you can easily install those 4 titles with devmenu
4 Profit??

Never tried installing spoofed 4 titles on emuNAND 4.X.
I'll try it later.