ROM Hack [Release] 3DS NAND SecureInfo Tool (For region change)

[Riku]

Here's simple program I made for easy 'SecureInfo_A' extraction/injection I want to share. With it you don't need to worry about cutting/XORing whole FAT16 partition every time, just select untouched encrypted 'NAND.BIN' along with corresponding 'nand.fat16.xorpad' and in few seconds job is done.

SecureInfo used for system region changing (JP/US/EU etc). Basically, you install few system CIA files for your target region (3DNUS/UpdateCDN), extract and inject new SecureInfo_A to emuNAND from target region donor, write emuNAND back and 'Format System Memory' in System Settings.

Region Changing Steps:
1) Downgrade to 4.x FW and prepare 4.x emuNAND with DevMenu/BigBlueMenu

2) Download and install following system CIAs using 3DNUS for desired region:

Spoiler: 4.5.0-10J

0004001000020000 v3074
0004001000020100 v2051
0004001000020200 v2051
0004001000020300 v1024
0004001000020400 v2048
0004001000020500 v3072
0004001000020700 v1026
0004001000020800 v4096
0004001000020900 v6146
0004001000020a00 v2050
0004001000020b00 v1034
0004001000020d00 v1028
0004001000020e00 v1026
0004001000020f00 v1024
0004001000023000 v2048
0004001b00010702 v0
0004003000008202 v6146
0004003000008402 v1036
0004003000008602 v3072
0004003000008702 v2049
0004003000008802 v2050
0004003000008d02 v4099
0004003000008e02 v3075
000400300000c002 v2053
000400300000c003 v0
000400300000c102 v1026
000400300000c302 v1024
000400300000c402 v3
000400300000c502 v3074
000400300000c602 v2050
000400300000cd02 v1026
0004009b00010402 v3072
0004009b00010602 v2
0004009b00011902 v0
0004009b00012202 v4096
0004009b00013202 v0
0004009b00015202 v0
000400db00010302 v4096
000400db00010502 v6144
000400db00016202 v160
000400db00017202 v4176
0004013800000003 v5632
0004013800000102 v6704
0004800f484e4841 v8192

Spoiler: 4.5.0-10E

0004001000022000 v3075
0004001000022100 v2051
0004001000022200 v2054
0004001000022300 v2050
0004001000022400 v2048
0004001000022500 v3072
0004001000022700 v1026
0004001000022800 v4096
0004001000022900 v6146
0004001000022a00 v2050
0004001000022b00 v1034
0004001000022d00 v1028
0004001000022e00 v1026
0004001000022f00 v1024
0004001000025000 v2048
0004001b00010702 v0
0004003000009802 v6146
0004003000009902 v1036
0004003000009b02 v3072
0004003000009c02 v2049
0004003000009d02 v2050
0004003000009f02 v4099
000400300000a002 v3075
000400300000c502 v3074
000400300000cd02 v1026
000400300000d002 v2053
000400300000d003 v0
000400300000d102 v1026
000400300000d302 v1024
000400300000d402 v3
000400300000d602 v2050
0004009b00010402 v3072
0004009b00010602 v2
0004009b00011202 v0
0004009b00011302 v0
0004009b00011502 v0
0004009b00011702 v0
0004009b00011802 v0
0004009b00011b02 v0
0004009b00011c02 v0
0004009b00011d02 v0
0004009b00012102 v4096
0004009b00013102 v2049
0004009b00015102 v1024
000400db00010302 v4096
000400db00010502 v6144
000400db00016102 v160
000400db00017102 v4176
0004013800000002 v7712
0004013800000003 v5632
0004013800000102 v6704
0004800f484e4841 v8192

Spoiler: 4.5.0-10U

Nothing here yet, may add later.

3) Extract your emuNAND from SD card, inject into emuNAND target region 'SecureInfo_A' from donor system, insert emuNAND back to SD

4) Load emuNAND and perform 'Format System Memory/本体の初期化' in System Settings

 

[ChrisX930]

Here's simple program I made for easy 'SecureInfo_A' extraction/injection I want to share. With it you don't need to worry about cutting/XORing whole FAT16 partition every time, just select untouched encrypted 'NAND.BIN' along with corresponding 'nand.fat16.xorpad' and in few seconds job is done.

SecureInfo used for system region changing (JP/US/EU etc). Basically, you install few system CIA files for your target region (3DNUS/UpdateCDN), extract and inject new SecureInfo_A to emuNAND from target region donor, write emuNAND back and 'Format System Memory' in System Settings.

Wait... Can I switch to a JPN-Firmware, download a japanese eShop Game, dump it and switch back to my EUR-Firmware?
(Yes, I have a Nand-Mod)

And if this really works...
How to do it exactly?
Can I do this without any Flashcard (only CFW for example)?
I've a Nand-Dump of 4.5 (OFW and CFW) and one 9.5 Nand-Dump and a european 3DS.

 

[Queno138]

Here's simple program I made for easy 'SecureInfo_A' extraction/injection I want to share. With it you don't need to worry about cutting/XORing whole FAT16 partition every time, just select untouched encrypted 'NAND.BIN' along with corresponding 'nand.fat16.xorpad' and in few seconds job is done.

SecureInfo used for system region changing (JP/US/EU etc). Basically, you install few system CIA files for your target region (3DNUS/UpdateCDN), extract and inject new SecureInfo_A to emuNAND from target region donor, write emuNAND back and 'Format System Memory' in System Settings.

Great job, thanks so much!

All that's left is for me to figure out how to do the other steps

 

[ChrisX930]

OKay, downloaded all System-Cias (JPN) from 2.0.0 up to 9.0.0
I've dumped my NAND.bin (4.5), created the xorpad file and extracted the SecurityInfo_A and replaced the "02" with "00" in 0x100 to switch from EUR to JPN.
I've not reinsterted the SecurityInfo yet.

How can I switch the region without a Flashcard? Can I install the .cia's with Palantine CFW?

Need a small explaination pls.

 

[Riku]

Wait... Can I switch to a JPN-Firmware, download a japanese eShop Game, dump it and switch back to my EUR-Firmware?
(Yes, I have a Nand-Mod)

And if this really works...
How to do it exactly?
Can I do this without any Flashcard (only CFW for example)?
I've a Nand-Dump of 4.5 (OFW and CFW) and one 9.5 Nand-Dump and a european 3DS.

Yes, you can use 4.5 CFW for installing system CIAs. You still need target region SecureInfo_A file though (from Japanese system in your case).

 

[ChrisX930]

Yes, you can use 4.5 CFW for installing system CIAs. You still need target region SecureInfo_A file though (from Japanese system in your case).

So it will work if I do this?
- Download System Cias with UpdateCDN (done)
- Dump NAND.bin + xorpad / extracting SecurityInfo_A / replaced "02" with "00" in 0x100 to change EUR to JPN (done)
- Install Sys-cias with CFW
- Dump modded NAND.bin from RedNAND (CFW)
- insert SecurityInfo_A
- Format System Memory
- Update to latest Firmware with Nintendo Update?

Will this work?
Can I install all System Cias (JPN) or which of them do I need exactly?

 

[cearp]

nice tool riku, i thought it was a 3ds tool to inject and dump the file (the one i made is very unstable lol and only works on 4.5 -- that way you don't need to dump or flash your nand at all), but it just makes it a bit easier to get the file out of the nand from your computer, still nice to have i guess

Wait... Can I switch to a JPN-Firmware, download a japanese eShop Game, dump it and switch back to my EUR-Firmware?
(Yes, I have a Nand-Mod)

And if this really works...
How to do it exactly?
Can I do this without any Flashcard (only CFW for example)?
I've a Nand-Dump of 4.5 (OFW and CFW) and one 9.5 Nand-Dump and a european 3DS.

finish the rune factory 4 undub and i will give you a japanese secureinfo_a file that will let you change to jpn region (offer not valid for anyone else)
lol


Riku - you might like this i hope - http://gbatemp.net/threads/release-...is-safe-to-delete-after-region-change.383796/ i did it ages ago but figured now would be a good time to share, i kept forgetting

 

[gamesquest1]

So it will work if I do this?
- Download System Cias with UpdateCDN (done)
- Dump NAND.bin + xorpad / extracting SecurityInfo_A / replaced "02" with "00" in 0x100 to change EUR to JPN (done)
- Install Sys-cias with CFW
- Dump modded NAND.bin from RedNAND (CFW)
- insert SecurityInfo_A
- Format System Memory
- Update to latest Firmware with Nintendo Update?

Will this work?
Can I install all System Cias (JPN) or which of them do I need exactly?

Afaik none of the public cfw/gateway methods have the signature checks on the secureinfo file disabled, so to do this you would need a actual donor secureinfo file from a actual Japanese system....not just editing your own secureinfo file

 

[cearp]

uhhmmm ... :/ Where can I get one? x_x
I thought I only need to edit my secureinfo and need to modify it.
http://3dbrew.org/wiki/Nandrw/sys/SecureInfo_A
I found the info with the region info here. (does a another secureinfo with another RSA-2048 Signature and another Serial-Number really works?!)

i told you how to get one, finish the rf4 undub guide
and yes, i had a whole thread about region changing like 2 months ago, it works

 

[gamesquest1]

uhhmmm ... :/ Where can I get one? x_x
Can someone upload a SecureInfo_A of a JPN-3DS for me?
I thought I only need to edit my secureinfo and need to modify it.
http://3dbrew.org/wiki/Nandrw/sys/SecureInfo_A
I found the info with the region info here. (does a another secureinfo with another RSA-2048 Signature and another Serial-Number really works?!)

yeah you need a secure info from another system unless you have your own private cfw with signature checks disabled....but then it wont work with sysnand.

 

[plasma]

I remember reading around that there was a method without having to have a donor console for the SecureInfo_A?

Or did I read wrong?
I am interested in doing this, just need to get my head round how to do it.

 

[gamesquest1]

that`s weird :/

Could someone provide his SecureInfo_A for me so I can use it to Change the Region of my 3DS (temporary)?
Need to get something from the JPN eShop :/

i doubt you will find anyone really willing to just hand out their unique console serial etc, which could be abused and posted publicly and promptly banned from ever accessing any online features again.....buuuuutt on the other hand if you have a EU secureinfo_A file you dont plan to use any more i did see someone looking to swap a SecureInfo_A JPN for a SecureInfo_A EU/US in one of the threads....couldn't tell you which one but in sure some searching would help, you would probably be better off looking for a dumped cia of whatever it is you need from the JPN eshop

 

[Shadowtrance]

I remember reading around that there was a method without having to have a donor console for the SecureInfo_A?

Or did I read wrong?
I am interested in doing this, just need to get my head round how to do it.

There is... but as it has been said, stuff has to be patched for it to work.

As mentioned here "the RSA sig-check for this to be patched out(specifically, VerifyRsaSha256: http://3dbrew.org/wiki/Process_Services_PXI)."

 

[ChrisX930]

i doubt you will find anyone really willing to just hand out their unique console serial etc, which could be abused and posted publicly and promptly banned from ever accessing any online features again.....buuuuutt on the other hand if you have a EU secureinfo_A file you dont plan to use any more i did see someone looking to swap a SecureInfo_A JPN for a SecureInfo_A EU/US in one of the threads....couldn't tell you which one but in sure some searching would help, you would probably be better off looking for a dumped cia of whatever it is you need from the JPN eshop

I don't want to swap the Region forever.
I only want to use the JPN-Firmware temporary to buy some eShop-Games from the JPN eShop

 

[plasma]

There is... but as it has been said, stuff has to be patched for it to work.

As mentioned here "the RSA sig-check for this to be patched out(specifically, VerifyRsaSha256: http://3dbrew.org/wiki/Process_Services_PXI)."

Ah right, thank you.
Now I don't have a JPN Secure_InfoA, but I can get a US one ill never use haha, maybe someone could swap?

 

[gamesquest1]

I don't want to swap the Region forever.
I only want to use the JPN-Firmware temporary to buy some eShop-Games from the JPN eShop

yeah unless someone is really trusting i doubt there will be any takers

Ah right, thank you.
Now I don't have a JPN Secure_InfoA, but I can get a US one ill never use haha, maybe someone could swap?

in which case if you never intend to use the US one hunt down the guy who needed a US/EU one in exchange for a JPN one and both of you will be happy

 

[plasma]

yeah unless someone is really trusting i doubt there will be any takers

in which case if you never intend to use the US one hunt down the guy who needed a US/EU one in exchange for a JPN one and both of you will be happy

Was he on this forum? ;-;

 

[ChrisX930]

So there's no way to change the region without exchange the SecureInfo_A with a jpn-console to use the JPN-eShoP?-.-

 

[gamesquest1]

Was he on this forum? ;-;

yeah i forget what thread though....just try searching stuff like "trade secureinfo_A"...shouldn't be too hard to find it was only a few days ago

 

[cearp]

i did give someone my eur secureinfo_z, but in return in got the 4 missing regions i did not have... so now i have a complete set
eventually someone will patch out the check and release publicly in their cfw or whatever so we won't be relying on other people's files anyway, just be patient
it has been possible even since we could decrypt nand, there is no sudden rush to do it now