Hey,
just wanted to report that I got it working yesterday, using a fresh EmuNAND with nothing installed yet and the exploit worked straight away (was using Firmware 7.1 on that NAND Backup).
Unfortunately, I was less lucky finding the values I would have liked to change in Nintendo Pocket...