Hacking [PSA]DSiware downgrade can be done with hyperbanned 3DS as a source

Queno138

Ravens
Member
Joined
Sep 18, 2010
Messages
2,425
Trophies
0
Location
Luigi's Dark Mansion
XP
1,070
Country
Senegal
1.Before the transfer, only the source console was A9LH'd, obviously. Now, both consoles are running A9LH.
2.Not that I know of, no.

Wasn't sure if you were transferring because you were testing, or really due to DSiware downgrading.

In any case, thanks!

Would like to hear from 2 3DS thread on whether it was the same for them, whereas the values were simply swapped.
 

Wojton

Well-Known Member
OP
Member
Joined
Mar 7, 2014
Messages
180
Trophies
0
Age
32
XP
239
Country
Poland
Wasn't sure if you were transferring because you were testing, or really due to DSiware downgrading.

In any case, thanks!

Would like to hear from 2 3DS thread on whether it was the same for them, whereas the values were simply swapped.
I have only realised that I can't use obtained movable.sed to unban the source console when I compared it with the LocalFriendCodeSeed_B of the target console and found that they matched.
 
Last edited by Wojton,

fodder

STARMAN
Member
Joined
Aug 3, 2014
Messages
863
Trophies
0
XP
544
Country
United States
Did the transfer with ban, everything went okay, will try going online in a sec, restoring nand backup and doing something else on target system

--------------------- MERGED ---------------------------

Yeah source system is definitely still banned for me, gonna finish up DSiWare downgrade and then report on target system
 

KytuzuEX

Recreate your Re:Creators by Recreating.
Member
Joined
Apr 21, 2014
Messages
755
Trophies
0
Age
25
XP
688
Country
Puerto Rico
I have Zelda Four Swords on my source banned 3DS, if I remove the NNID, the game will not transfer?

Even though beforehand I did unlink the NNID and re-injected it back and the games didn't come. but TikShop for some reason got back those games opened eshop but obviously, I'm banned. I wonder if the TikShop gets the tickets legally or not legal.
 
Last edited by KytuzuEX,

blazedroid62

Member
Newcomer
Joined
Nov 18, 2016
Messages
10
Trophies
0
Age
27
XP
44
Country
United States
For the people who did this successfully: is there a way to restore the movable.sed file of the target 3ds after system transferring? I don't like the idea of having a movable.sed file from my banned 3ds on my target 3ds.
 

Flora Cherry

I'm unhappy
Member
Joined
Mar 2, 2014
Messages
330
Trophies
1
Age
34
Website
www.youtube.com
XP
502
Country
France
I think I have an idea you need 2 new 3ds and 1 old 3ds take all SecureInfo_A ect.. of you old 3ds put it in a new 3ds save all info of you new 3ds transfer you 3ds ban to the new 3ds with the information from the old 3ds uban im not sure xD It's just an idea I have them sorry for my bad english
 

wsquan171

Well-Known Member
Member
Joined
Feb 14, 2015
Messages
289
Trophies
0
XP
669
Country
China
Why the guys in the other thread get their target console banned while guys here are not is simple. OP suggests editing secure info before transferring while in the other thread the edit is done after transfer.

It's now cleared that Nintendo do check the console id during transfer, and if the source system's device id is on the 2812 banning list the ban will be transferred to target system. However, since here the id is edited before transferring, Nintendo won't think the source is banned so the ban won't transfer.
 
  • Like
Reactions: Wojton and KytuzuEX

Cuphat

Well-Known Member
Member
Joined
May 16, 2011
Messages
1,295
Trophies
1
XP
1,223
Country
United States
I can play smash online but can't go to eshop, miiverse or anything that checks the ID first, gives me a 022 2501 error. What's this code exactly ?
IIRC 022 2501 means that your NNID is no longer associated with that console. I assume you transferred off of it but then restored your backup? You need to remove the NNID by injecting a blank nnidsave with Decrypt9. If you want the NNID back on that console, contact Nintendo or wait 7 days and transfer back (if possible).
 

Yamakawa Bros

Active Member
Newcomer
Joined
Dec 16, 2008
Messages
34
Trophies
0
Location
Brazil, but we born on Japan
XP
194
Country
Brazil
IIRC 022 2501 means that your NNID is no longer associated with that console. I assume you transferred off of it but then restored your backup? You need to remove the NNID by injecting a blank nnidsave with Decrypt9. If you want the NNID back on that console, contact Nintendo or wait 7 days and transfer back (if possible).
Well they said to do the following, never heard of this method before.

1. Go to the system’s HOME menu. Select “System Settings,” then select “Nintendo Network ID Settings.”
2. Select “Sign In.” Enter the password associated to the Nintendo Network ID, then “Confirm.”
3. The error message (“You cannot use this Nintendo Network ID on this console”) will appear on the screen.
4. While the error message is onscreen, hold down the X button and Y button, and tap “OK.”
5. Select “Yes” to unlink the Nintendo Network ID from the system.
6. You will receive a message that the NNID link has been removed. Tap “OK” to return to the system settings.

Then reloggin would fix. Is this safe?
 

gnmmarechal

Well-Known Member
Member
GBAtemp Patron
Joined
Jul 13, 2014
Messages
6,039
Trophies
2
Age
25
Location
https://gs2012.xyz
Website
gs2012.xyz
XP
5,990
Country
Portugal
I'm pretty sure the everything Nintendo checks for 022-2812 is in OTP (and SecureInfo_A, which would be stupid if it transferred over because the target system would essentially have the same serial as the source system), or some write only area, so that shouldn't transfer, since well, it should be technically impossible.

For 002-0102, it seems all they check is LocalFriendCodeSeed_B, which has been confirmed to not change in multiple tests by multiple people, so it's looking good (and probably safe), granted you can initiate the system transfer in the first place.

Will be trying this myself tomorrow, I'll post in this thread how it goes as well.
How... could they check the OTP? Access to the OTP is locked during boot, is it not? Which is why downgrading to 2.1 is necessary to obtain it, since it wasn't locked back then?
 

fodder

STARMAN
Member
Joined
Aug 3, 2014
Messages
863
Trophies
0
XP
544
Country
United States
How... could they check the OTP? Access to the OTP is locked during boot, is it not? Which is why downgrading to 2.1 is necessary to obtain it, since it wasn't locked back then?
Well like it'd be loaded into ram from OTP or Bootrom I'm pretty sure
 

fodder

STARMAN
Member
Joined
Aug 3, 2014
Messages
863
Trophies
0
XP
544
Country
United States
And you can edit ram.
Of course, but I'm saying that it wouldn't transfer a 2812 ban since it's not going to transfer the console specific values from bootrom loaded into the ram to the other system because one, it wouldnt do anything, and two, it wouldn't make sense
 

reymund602

Member
Newcomer
Joined
Dec 8, 2016
Messages
10
Trophies
0
Age
32
XP
99
Country
United States
Just performed a successful DSiware downgrade with hyperbanned 3DS as a source. Source 3DS had both 002-0102 and 022-2812 ban.
  • I've used this method to bypass 002-0102 ban (regain access to eShop) and unlink my NNID from banned console (changing the console ID, stored at the end of SecureInfo_A AND injecting a blank nnidsave.bin is neccessary on the banned console!) Accessing NNID settings still resulted in 022-2812 error, but it allowed me to use System Transfer again.
  • I've purchased Fieldrunners with no NNID linked to the source 3DS and System Transfered it to unbanned, target 3DS without any issues.
  • Most importantly, it seems that SecureInfo_A and LocalFriendCodeSeed_B didn't get transferred from the banned, source 3DS - I have used a hex editor to compare these files dumped from source console before the transfer and dumped from target console after the transfer with hex editor, their contents are completely different.
  • Target console has A9LH installed now and remains unbanned after the process - no issues with accessing NNID settings, eShop, playing games online.

I haven't found any informations on that so I decided to mention it here. That said, use this information at your own risk - I take no responsibility if your target console ends up getting banned after performing a system transfer - I'm just saying that was not the case for me. I would also like to know if there are any other files (that are checked by Nintendo servers) that I should compare to make sure they haven't been transferred? If so, which ones?
Wait so you injected the friend code seed b, blank NNID and the edited secure info and were able to unlink the NNID. How did you remove NNID when there no NNID from injecting the blank NNID? Did you do a system transfer after injecting?
 
  • Like
Reactions: KytuzuEX

Waterblade

Member
Newcomer
Joined
Sep 1, 2016
Messages
14
Trophies
0
Age
26
XP
63
Country
United States
Can I do this with fieldrunners being purchased on the nnid. I know if you go to eshop it will delete it I think if the correct nnid isn't linked but I'm not sure if it's the same with transferring.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    Veho @ Veho: Firefox users be like "look at what they have to do to mimic a fraction of our power."