Hacking [PoC] 3DS Region Changing + proof

[vingt-2]

Hey man that looks freaking awesome. Do you think you can comment on the ability to inject your spoofed region fw on an N3DS if an exploit is ever released? I'm also curious to know vaguely how this is even possible with encrypted nands.

Nevermind, I'm new to the scene and had to get up to speed with what is currently possible with the nand dump.

 

[Wowfunhappy]

i thought there was a 'breakthough' with regards to getting eshop working, but no, so, that's a shame. it never had to be perfect anyway

So changing the serial number isn't enough?

 

[liomajor]

So changing the serial number isn't enough?

No, i did my best to get it working. Out of pure luck it worked once, but i can't repeat that and ends with 005-5602 error :/

 

[boomie0123]

No, i did my best to get it working. Out of pure luck it worked once, but i can't repeat that and ends with 005-5602 error :/

So then doing a system transfer from a US 3DS to a JPN 3DS with the spoofed region wouldn't be viable would it? Even with the serial number too... But hey, if you got it work once, then there must be something there that's letting it through.

 

[cearp]

So changing the serial number isn't enough?

So then doing a system transfer from a US 3DS to a JPN 3DS with the spoofed region wouldn't be viable would it? Even with the serial number too... But hey, if you got it work once, then there must be something there that's letting it through.

nintendo probably COULD check the region via serial number, but i don't think they do...
when you run a game, it is not checked against your serial number, it is checked against your 'region value'.
no, i doubt the system transfer would work, because it would say you are on the wrong region etc

 

[Wowfunhappy]

No, i did my best to get it working. Out of pure luck it worked once, but i can't repeat that and ends with 005-5602 error :/

Oh hey!

http://www.nintendo.com/consumer/wfc/en_na/ds/results.jsp?error_code=005-5602&system=3DS&locale=lang

This is likely the result of your Nintendo 3DS region setting being incorrect.

I'm sure you've already looked at this, but it's super interesting that the error is specifically listed as indicating an incorrect region setting. I wonder, what would trigger this error without hacking?

 

[boomie0123]

nintendo probably COULD check the region via serial number, but i don't think they do...
when you run a game, it is not checked against your serial number, it is checked against your 'region value'.
no, i doubt the system transfer would work, because it would say you are on the wrong region etc

But then isn't this whole thing about changing the region value? Didn't you have it changed to the different values in the video? Of course, I'm pretty sure all these things will be answered when it's released, but the questions are burning!

 

[boomie0123]

Oh hey!

http://www.nintendo.com/consumer/wfc/en_na/ds/results.jsp?error_code=005-5602&system=3DS&locale=lang



I'm sure you've already looked at this but it's super interesting that the error is specifically listed as indicating an incorrect region setting. I wonder, what would trigger this error without hacking?

!!!! This! Maybe the if the NNID on the device is from a different region, it won't allow eshop? Or if the console's region is set to like Canada and you're in the USA it wont connect either? Sounds like this might need some testing!

 

[Wowfunhappy]

It seems to be a very finicky sort of error.

http://www.reddit.com/r/3DS/comments/2pvqgd/for_everyone_who_bought_the_new_3ds_from/
http://www.neogaf.com/forum/showpost.php?p=140713846&postcount=857

 

[Pink Gold Peach]

NEW -
<snip>
A nice video showing off a JPN console region changed to all regions! (I had to get some help to build a launcher.dat for iQue)
The method is by me but I gave it to tanglangxia at duowan and he tested it lots, and had some fun! (He made the video, it's his)

--------

Ok, so whilst everyone had a ticket for the hype train... here is a video that is showing my JPN 3DS loading JPN emunand on one sd card, then changing the sd card and loading up a different sd card to an EUR emunand.
It wasn't so super simple to achieve, and the result is not 100% perfect, but it is good progress!
I won't share the program I made to do this just yet, because it is not ready for 'public release'. But, it is nice to share progress and things

(I had this yesterday, but I took the video today - it has nothing to do with GW's new launcher, I just updated to it before I took the video, all that is really required is 4.5 and a ds mode flashcart)
http://v.youku.com/v_show/id_XODY4NjMwNjEy.html
(sorry about the youku link, it's the best i can do with my internet at the moment)

thanks to enler for sharing some filesystem code with me, without it i would not have been able to have done this!

--if someone wants to make a mirror of the video on youtube, i would appreciate it!

So when you release it, will it work on 9.4?

 

[WulfyStylez]

So when you release it, will it work on 9.4?

Nope, not until 9.4 gets emunand support.

 

[cearp]

Nope, not until 9.4 gets emunand support.

not emunand support, just GW support/nand access

 

[WulfyStylez]

not emunand support, just GW support/nand access

Ahhh right, I forgot about the ability to do this on sysnand.

 

[Pink Gold Peach]

not emunand support, just GW support/nand access

Will it work with no flashcards once its finished?

 

[liomajor]

To do that without flashcard would mean to mess around with sysNAND.

The slightest mistake could prevent your 3DS from booting and needs hardware mod to fix.

 

[Wowfunhappy]

Liomajor, when you said:

Out of pure luck it worked once, but i can't repeat that and ends with 005-5602 error :/

Did you mean:
1) Out of pure luck it worked once, and even then I got a 005-5602 error code
or
2) Out of pure luck it worked once, but every other time I get a 005-5602 error code

I originally thought you meant #2, but then I re-read your post and realized it isn't clear.

 

[liomajor]

As i said, it was possible until i looked into it.

Maybe they block my 3DS now when i boot region switched
emunand, because 'Internet' is always greyed out since then
and gets only green in my real region.

I've no chance to find out and stopped messing with it.

 

[Subtle Demise]

To do that without flashcard would mean to mess around with sysNAND.

The slightest mistake could prevent your 3DS from booting and needs hardware mod to fix.

You can use mtcard emunand without the card.

 

[liomajor]

I don't own MTCard, but i expect that they too have checks to prevent booting emuNAND without their card like Gateway does.

 

[Sheimi]

I don't own MTCard, but i expect that they too have checks to prevent booting emuNAND without their card like Gateway does.

Nah, they don't have any checks. You can boot into classic emunand without MT Card.