1
00:00:05,275 --> 00:00:18,336
Hello, my friends, and welcome back to 3D Cast, the podcast about the Nintendo 3DS and now
DS line of handhelds, because I, as of a day or two ago, have sourced a DSI XL.

2
00:00:18,336 --> 00:00:20,127
So excited, you guys.

3
00:00:20,127 --> 00:00:21,198
God, I can't wait.

4
00:00:21,198 --> 00:00:22,309
my god, my god, my god.

5
00:00:22,309 --> 00:00:27,333
So now I'm gonna have a new 3ds XL, a 2DS, and a DSI XL.

6
00:00:27,333 --> 00:00:29,334
I think that'll cover the gamut.

7
00:00:29,375 --> 00:00:33,018
I'm very, very if you're wondering what do you play Game Boy games on, Brian?

8
00:00:33,018 --> 00:00:35,047
I have a GB ISP, don't worry about that.

9
00:00:35,047 --> 00:00:38,130
But friends, ~ my god, friends, we have a guest.

10
00:00:38,130 --> 00:00:39,949
This is our first guest.

11
00:00:39,949 --> 00:00:44,075
I'm very excited and a little nervous because I haven't interviewed anybody in a while.

12
00:00:44,075 --> 00:00:48,769
I I used to interview a lot more people on one of my other shows, but I haven't done it in
a while.

13
00:00:48,769 --> 00:00:52,692
So this is our first guest joining us from Portugal.

14
00:00:52,692 --> 00:00:55,054
God, I hope I say this right, and I'm gonna try.

15
00:00:55,054 --> 00:00:56,945
Hugo Lama.

16
00:00:57,106 --> 00:00:59,137
What I do, Luego Lama.

17
00:00:59,867 --> 00:01:00,739
Close enough.

18
00:01:00,739 --> 00:01:01,297
Hello.

19
00:01:01,297 --> 00:01:02,487
Okay, I know.

20
00:01:02,487 --> 00:01:05,409
I I have a terrible American ~

21
00:01:05,409 --> 00:01:06,699
Pennsylvania accent.

22
00:01:06,699 --> 00:01:08,150
So I I I try.

23
00:01:08,150 --> 00:01:09,590
I try my best.

24
00:01:09,710 --> 00:01:11,381
~ sorry, I try to get it right.

25
00:01:11,381 --> 00:01:12,532
I try to get it right.

26
00:01:12,532 --> 00:01:13,672
So welcome.

27
00:01:13,672 --> 00:01:20,435
friends, if you're unaware, Luego, I'm just gonna say Luigo for short, if that's okay.

28
00:01:20,435 --> 00:01:28,258
~ was recommended to me by Vendel, the I guess lead admin of the three DS Discord server.

29
00:01:29,799 --> 00:01:30,621
head admin.

30
00:01:30,621 --> 00:01:35,079
~ it's one of the moderators, not owner moderators.

31
00:01:35,562 --> 00:01:36,682
I could say like that.

32
00:01:36,682 --> 00:01:42,576
~ one of the mods of the 3DS Discord server, which I talked about a couple episodes ago.

33
00:01:42,576 --> 00:01:43,726
If you haven't joined, you should.

34
00:01:43,726 --> 00:01:44,957
It's a great server.

35
00:01:44,957 --> 00:01:57,181
He recommended, ~ he recommended I talk to Luigi Lama here because ~ you have your hand in
a bunch of pies in terms of three DS ~ development.

36
00:01:57,242 --> 00:02:01,123
And he thought he recommended you as someone interesting to talk to.

37
00:02:01,319 --> 00:02:04,620
So that's all I needed because Vendel is great, his server is great.

38
00:02:04,620 --> 00:02:06,381
So I'm like, that's all you need.

39
00:02:06,381 --> 00:02:11,943
So ~ so let's start kind of in the beginning.

40
00:02:12,084 --> 00:02:16,526
Cause I want to talk about you a little bit before we talk about the 3DS.

41
00:02:16,746 --> 00:02:19,196
So ~

42
00:02:19,196 --> 00:02:20,069
would you like to know?

43
00:02:20,069 --> 00:02:21,555
I was gonna ask.

44
00:02:21,555 --> 00:02:22,748
I've I I wrote

45
00:02:22,748 --> 00:02:23,679
down some questions.

46
00:02:23,679 --> 00:02:32,253
So let's I wanna I wanna ask you what got you started in development, what got you started
in programming, whatcha got you started in reverse engineering, that kind of thing.

47
00:02:32,253 --> 00:02:34,125
Where did you when did all that start?

48
00:02:34,125 --> 00:02:36,410
in general, not just V D S, yeah.

49
00:02:36,890 --> 00:02:37,084
Yeah,

50
00:02:37,084 --> 00:02:37,501
in general.

51
00:02:37,501 --> 00:02:37,950
In general.

52
00:02:37,950 --> 00:02:38,613
Yeah.

53
00:02:39,727 --> 00:02:49,980
I remember being curious about literally just doing anything work in a computer because ~
at one point I started using Linux in my device and my computer.

54
00:02:50,020 --> 00:02:51,340
When did I start?

55
00:02:51,340 --> 00:02:55,241
I think I was fourteen or so when I started spoking at Linux.

56
00:02:55,241 --> 00:03:08,205
~ I stood poking at I was like because I was using I tried Fedora first and

57
00:03:08,507 --> 00:03:11,960
Then I jump to Davy and yeah it's one that's one.

58
00:03:12,302 --> 00:03:13,385
It's one of things.

59
00:03:13,385 --> 00:03:14,246
even I've heard of that.

60
00:03:14,246 --> 00:03:15,288
So that's one of the

61
00:03:15,288 --> 00:03:17,311
bigger ones, right, though, right?

62
00:03:18,335 --> 00:03:18,624
Okay.

63
00:03:18,624 --> 00:03:20,435
you tip y you tip and say melee.

64
00:03:20,435 --> 00:03:21,916
It's just the one that does the Linux.

65
00:03:21,916 --> 00:03:23,547
~ but

66
00:03:23,547 --> 00:03:24,508
Nice.

67
00:03:27,921 --> 00:03:36,646
it's but yeah, like I started it when I got to Debian more specifically because I tried
Fedora for a while.

68
00:03:37,628 --> 00:03:38,258
I liked it.

69
00:03:38,258 --> 00:03:40,960
I think I poked a bit in the coding, but almost nothing.

70
00:03:40,960 --> 00:03:45,653
I did compilations of software because I wanted so few things and I had to figure out

71
00:03:45,679 --> 00:03:50,333
And I found it interesting and I just started like, what if I can make my own programs?

72
00:03:50,333 --> 00:03:52,435
Obviously I never really published anything.

73
00:03:52,435 --> 00:03:57,238
It was just my own like advertis curiosity of like exploring and trying.

74
00:03:58,520 --> 00:04:04,365
of which I have and then making a few tools because I do have things published or else I
wouldn't be here now.

75
00:04:04,365 --> 00:04:07,488
But ~

76
00:04:07,488 --> 00:04:08,649
how do you know me?

77
00:04:08,649 --> 00:04:10,049
But anyway.

78
00:04:11,391 --> 00:04:12,066
I know, I know.

79
00:04:12,066 --> 00:04:12,247
that.

80
00:04:12,247 --> 00:04:13,788
I want to build I want to build a pic

81
00:04:13,788 --> 00:04:15,043
I want to paint a picture.

82
00:04:15,043 --> 00:04:16,390
I want to paint a picture.

83
00:04:16,390 --> 00:04:17,971
Put the jigsaw puzzle together.

84
00:04:17,971 --> 00:04:18,892
You know what I mean?

85
00:04:18,892 --> 00:04:22,015
So so it's not just about the 3DS.

86
00:04:22,015 --> 00:04:27,051
It's not just about the 3DS, it's about the people that help keep this community alive.

87
00:04:27,051 --> 00:04:28,740
That help keep it going.

88
00:04:28,900 --> 00:04:31,242
I'm also interested in the people aspect as well.

89
00:04:31,242 --> 00:04:32,323
I find it fascinating.

90
00:04:32,323 --> 00:04:37,527
~ so you started with Linux, Debian, and then what eventually

91
00:04:37,727 --> 00:04:38,579
For coding s

92
00:04:38,579 --> 00:04:38,997
Go ahead.

93
00:04:38,997 --> 00:04:39,848
Sorry, go ahead.

94
00:04:39,848 --> 00:04:40,318
yeah.

95
00:04:40,318 --> 00:04:41,769
For coding, mind you.

96
00:04:42,450 --> 00:04:45,111
before Linux I was tech shabby already.

97
00:04:46,153 --> 00:04:53,538
I would reinstall Windows way too many times for too exp too much exploration, but that's
that's an oopsie.

98
00:04:53,538 --> 00:04:58,921
I think my record was like reinstalling Windows seven like

99
00:04:58,925 --> 00:05:00,738
about twenty times in the same year.

100
00:05:00,738 --> 00:05:03,832
But like I'm sorry I

101
00:05:03,832 --> 00:05:05,624
tried to explore a little too much.

102
00:05:05,624 --> 00:05:08,539
But anyway hey, that's how you learn.

103
00:05:08,539 --> 00:05:09,986
That's that's how you learn.

104
00:05:09,986 --> 00:05:10,576
fair, but

105
00:05:10,576 --> 00:05:13,117
I I hate installing Windows or reinstalling it.

106
00:05:13,117 --> 00:05:13,887
I hate it so much.

107
00:05:13,887 --> 00:05:18,059
I I'm I have an eight-year-old computer that's running

108
00:05:18,059 --> 00:05:18,699
same.

109
00:05:18,699 --> 00:05:20,860
I've never reinstalled Windows on this thing.

110
00:05:20,860 --> 00:05:23,981
It it started with Windows 10, it's now on Windows 11.

111
00:05:23,981 --> 00:05:28,542
I've never reinstalled Windows on your old computer because I hate doing it so much.

112
00:05:29,803 --> 00:05:31,513
I hate it so much.

113
00:05:31,559 --> 00:05:32,596
an eight year old?

114
00:05:32,596 --> 00:05:34,182
An eight year old computer?

115
00:05:34,182 --> 00:05:35,363
~ boy.

116
00:05:35,904 --> 00:05:38,767
You shouldn't I I didn't even mention

117
00:05:38,767 --> 00:05:40,448
my computer yet.

118
00:05:42,536 --> 00:05:44,188
Still kicking, it's still a good

119
00:05:44,188 --> 00:05:45,699
is still cooking.

120
00:05:46,701 --> 00:05:48,202
I have I

121
00:05:49,824 --> 00:05:58,973
I don't even remember I don't even know exactly the the year my computer l like released,
but I have ~ a computer that still has a fourth gen Intel.

122
00:05:58,973 --> 00:06:01,857
We're talking f I'm talking from this machine right now.

123
00:06:01,857 --> 00:06:02,617
~

124
00:06:03,356 --> 00:06:04,517
well you sound great.

125
00:06:04,517 --> 00:06:09,302
I mean that that's it's good thing about Riverside is it makes people sound good.

126
00:06:09,302 --> 00:06:11,705
So ~ so you start with Linux.

127
00:06:11,705 --> 00:06:14,247
Now what exactly led you to the three D S?

128
00:06:16,783 --> 00:06:18,034
had a Free D S.

129
00:06:18,034 --> 00:06:24,251
I like to play I like to play on the Free D S and then I got I got like curious.

130
00:06:24,251 --> 00:06:27,605
I I don't remember exactly what I was searching at that time.

131
00:06:27,605 --> 00:06:30,467
Ma ~ it's been quite a few years now, but

132
00:06:33,967 --> 00:06:39,742
I remember that I wanted to like have my console act from Umber.

133
00:06:40,183 --> 00:06:48,477
And at the time I had the version that I couldn't do that 'cause the systems were not as
as easily exploitable as they were now.

134
00:06:48,477 --> 00:06:52,072
I was like, well damn.

135
00:06:53,174 --> 00:06:53,954
I

136
00:06:54,956 --> 00:06:57,478
and then I kept like looking into it.

137
00:06:57,478 --> 00:07:01,441
I never got ~ like I didn't reverse engineer yet.

138
00:07:01,441 --> 00:07:04,664
I was just curious like how things developed.

139
00:07:05,846 --> 00:07:10,370
And then Tubeax and Iron X showed from Smealm.

140
00:07:10,370 --> 00:07:11,692
I think I said that properly.

141
00:07:11,692 --> 00:07:16,676
I I also have bad with names, but of which I was like,

142
00:07:18,183 --> 00:07:18,839
Now

143
00:07:18,839 --> 00:07:20,989
let's try it works.

144
00:07:20,989 --> 00:07:24,692
I'm I'm still relatively new to all this, so I'm still learning about this stuff.

145
00:07:24,692 --> 00:07:27,354
Those are some of the earlier hacks that people

146
00:07:27,354 --> 00:07:31,036
released for the three DS earlier in its lifetime.

147
00:07:31,036 --> 00:07:32,727
Am I remembering that correctly?

148
00:07:32,727 --> 00:07:37,080
It's one but it's not the few of the earliest.

149
00:07:37,111 --> 00:07:43,045
the earliest was w I had ~ no.

150
00:07:44,907 --> 00:07:46,597
No, it's just

151
00:07:46,597 --> 00:07:47,187
from back

152
00:07:47,187 --> 00:07:54,641
in the like the 3DS was still being made, it was still being updated, it was still being s
they were still trying to patch these things out.

153
00:07:54,902 --> 00:07:56,883
And and yeah, yeah.

154
00:07:56,883 --> 00:07:57,153
And those

155
00:07:57,153 --> 00:08:04,927
were some of the early early ~ hacks that you could use to try and homebrew the thing, if
I remember correctly.

156
00:08:05,123 --> 00:08:11,155
Yeah, I remember looking at Ninjax as well because it was the option that one of the
options you had.

157
00:08:11,155 --> 00:08:13,655
I don't remember if there was any others.

158
00:08:13,696 --> 00:08:20,898
I mean there was the g there was the whole gateway thing of which thank goodness I didn't
touch because I will get into that later.

159
00:08:20,898 --> 00:08:21,868
But like

160
00:08:22,225 --> 00:08:23,606
Who

161
00:08:25,699 --> 00:08:30,621
If you ever seen anyone being d doing soon t T I'll explain that as well.

162
00:08:30,621 --> 00:08:31,779
~ but like

163
00:08:31,779 --> 00:08:32,781
no.

164
00:08:32,865 --> 00:08:34,256
~ okay, that's a meme.

165
00:08:34,256 --> 00:08:45,756
But anyway, so Ninjax was one of the options, but it was getting expensive as well because
it was a card game and you know you can expect the console.

166
00:08:46,249 --> 00:08:46,630
Right.

167
00:08:46,630 --> 00:08:49,973
Like some of those early hacks were on physical cards.

168
00:08:50,234 --> 00:08:51,317
Am I remembering that correctly?

169
00:08:51,317 --> 00:08:52,789
you could buy physical.

170
00:08:52,789 --> 00:08:53,320
Yeah.

171
00:08:53,320 --> 00:08:55,542
I mean a lot of games in the 3DS are physical.

172
00:08:55,542 --> 00:08:57,183
We're not in if we were not in this

173
00:08:57,183 --> 00:09:00,106
era the era that Sony decided to be like as well.

174
00:09:00,106 --> 00:09:03,329
Not it this is Nintendo, but Sony now is being like digital media.

175
00:09:03,329 --> 00:09:08,012
~ I hope Nintendo doesn't fall with that of every game as well, but ~ so

176
00:09:08,012 --> 00:09:12,060
I'm remembering correctly, one of the earlier hacks was actually a card you had to buy.

177
00:09:12,060 --> 00:09:13,221
Cartridge.

178
00:09:13,743 --> 00:09:14,924
Right, okay.

179
00:09:16,188 --> 00:09:18,551
Can't remember can't remember the name of it.

180
00:09:18,869 --> 00:09:22,190
that's exactly my biggest issue is remembering names as well.

181
00:09:22,791 --> 00:09:24,672
the names are the worst things for me.

182
00:09:24,672 --> 00:09:26,293
But you had to buy a gang.

183
00:09:26,293 --> 00:09:31,296
I am searching for the game name real quick because I had a blank ~ but a kube ninja.

184
00:09:31,296 --> 00:09:40,011
But you had to buy kube ninja and have an act essentially to basically you would scan a a
QR code.

185
00:09:40,325 --> 00:09:42,727
Which was meant for label transfer.

186
00:09:42,887 --> 00:09:54,336
And ~ it was malformed as just the right way, obviously, to s just start doing what it's
not supposed to do.

187
00:09:56,018 --> 00:09:56,769
basically.

188
00:09:56,769 --> 00:09:58,280
~

189
00:09:58,280 --> 00:10:03,114
I can explain a bit better later, but I'm giving you at least the s at the start the
general gist.

190
00:10:03,114 --> 00:10:09,609
I don't know the exact ~ code underneath 'cause I never looked deep enough in that thing
because

191
00:10:11,139 --> 00:10:15,251
Exploits are difficult to read, I'm gonna tell you that much, but at least Robchains.

192
00:10:15,251 --> 00:10:16,991
I'll tell you what a Robchain is there.

193
00:10:16,991 --> 00:10:33,018
But but it it's just it's a basic QR code with the wrong well-formed data, of which would
break the co the the expected co ~ code flow to start doing something else.

194
00:10:33,018 --> 00:10:36,049
That's essentially our exploits run in a free DS.

195
00:10:36,049 --> 00:10:38,460
It's you break the code flow essentially.

196
00:10:41,553 --> 00:10:45,082
Sorry, I think I'm getting a little diverted to the depths of it already.

197
00:10:45,082 --> 00:10:45,553
But

198
00:10:45,553 --> 00:10:46,183
I want that.

199
00:10:46,183 --> 00:10:47,074
No, that's good.

200
00:10:47,074 --> 00:10:47,484
That's good.

201
00:10:47,484 --> 00:10:48,054
That's the kind of

202
00:10:48,054 --> 00:10:48,784
stuff I want.

203
00:10:48,784 --> 00:10:51,015
And I'm hoping our listeners will want as well.

204
00:10:51,015 --> 00:11:01,159
Because I find this fascinating that that people, if I may just interject, I just find the
homebrew scene, I guess that's the best way to call it the homebrew community, the

205
00:11:01,159 --> 00:11:03,390
homebrew scene around this 3DS

206
00:11:03,390 --> 00:11:05,071
absolutely fascinating.

207
00:11:05,071 --> 00:11:06,211
Because the

208
00:11:06,211 --> 00:11:13,154
the reverse engineering, the hacks, the it's so easily like an idiot like me just follows
the guide and can hack it.

209
00:11:13,154 --> 00:11:14,975
I mean, that's amazing.

210
00:11:14,975 --> 00:11:15,375
That's

211
00:11:15,375 --> 00:11:16,776
Utterly amazing.

212
00:11:16,776 --> 00:11:20,449
And so I am fascinated to learn how that came about, how it works.

213
00:11:20,449 --> 00:11:22,551
You know, I mean, I'm not very technically minded.

214
00:11:22,551 --> 00:11:23,161
I'm an idiot.

215
00:11:23,161 --> 00:11:25,263
Like I said, explain it to me like I'm a child.

216
00:11:25,263 --> 00:11:33,610
But at the same time, it's fascinating to hear someone talk about it because, you know,
this this I just find this little console fascinating.

217
00:11:33,610 --> 00:11:35,081
It's just a fascinating device.

218
00:11:35,081 --> 00:11:36,432
It's a wonderful device.

219
00:11:36,432 --> 00:11:44,729
And I find that the people who have done what you like what you've done, reverse engineer
it, like you and other pe others, of course, just

220
00:11:44,729 --> 00:11:52,191
I find that all fascinating that there's such a dedicated group of people who have done
this and just make the device better for the rest of us.

221
00:11:52,191 --> 00:11:52,913
You know what I mean?

222
00:11:52,913 --> 00:11:53,944
So I just find it

223
00:11:53,944 --> 00:11:54,812
fascinating.

224
00:11:54,812 --> 00:11:57,734
yeah, go ahead, sorry, I got I thought you were gonna pause.

225
00:11:58,035 --> 00:11:59,041
I'm better

226
00:11:59,041 --> 00:12:00,242
that that's what I was ending

227
00:12:00,242 --> 00:12:01,854
on is I find it fascinating.

228
00:12:01,854 --> 00:12:04,506
So please go as deep as you want.

229
00:12:04,506 --> 00:12:05,908
Please go as deep as you want.

230
00:12:05,908 --> 00:12:13,895
Remembering there I'm a child, technically, but there are probably people that are
listening that might be more technically inclined that are might grok onto what you're

231
00:12:13,895 --> 00:12:14,156
saying.

232
00:12:14,156 --> 00:12:15,517
So just go, just go.

233
00:12:15,517 --> 00:12:17,238
Just don't str just go.

234
00:12:17,251 --> 00:12:17,791
Well you're

235
00:12:17,791 --> 00:12:21,774
while you're talking to someone and I'm not the worst offender to this I'm about to say.

236
00:12:21,774 --> 00:12:29,000
I have three Free DS of three different regions, so well I do you want the Taiwanese one?

237
00:12:29,000 --> 00:12:29,811
I have it right here.

238
00:12:29,811 --> 00:12:32,663
Anyway, but Okay.

239
00:12:32,663 --> 00:12:41,470
So and also I'd like to note because I just realized if I interrupt you, I'm sorry, I'm
very bad at catching the end of a sentence.

240
00:12:41,470 --> 00:12:45,263
I thought that you were about to end as early earlier than you did.

241
00:12:45,263 --> 00:12:46,833
Well anyway, so

242
00:12:46,833 --> 00:12:47,684
Well, hang on.

243
00:12:47,684 --> 00:12:50,606
I can just say, folks, this is a little behind the scenes stuff.

244
00:12:50,606 --> 00:12:50,826
If

245
00:12:50,826 --> 00:12:54,168
there's a there's a react button on the bottom of the riverside.

246
00:12:55,250 --> 00:12:55,890
And

247
00:12:55,890 --> 00:12:57,381
and there's a raise hand thing.

248
00:12:57,381 --> 00:13:02,045
If you want me to shut up, if you want me to stop my current thought, you can raise your
hand and I'll see that and I

249
00:13:02,045 --> 00:13:03,967
can just I can just stop.

250
00:13:03,967 --> 00:13:12,493
So ~ if if you feel more comfortable doing that, ~ and then I'll know to stop talking so
you can get in your next thought if that makes you feel more comfortable.

251
00:13:12,625 --> 00:13:13,748
Makes this better, yes.

252
00:13:13,748 --> 00:13:15,693
Thank you for pointing out I didn't know that.

253
00:13:15,693 --> 00:13:17,819
Anyway, I didn't explore the platform.

254
00:13:17,819 --> 00:13:18,801
Anyway, but anyway.

255
00:13:18,801 --> 00:13:19,942
So

256
00:13:19,990 --> 00:13:20,420
I I'm

257
00:13:20,420 --> 00:13:21,911
still learning about this thing.

258
00:13:21,911 --> 00:13:22,972
And it's amazing.

259
00:13:22,972 --> 00:13:23,833
Anyway, anyway.

260
00:13:23,833 --> 00:13:29,768
So you were saying about ~ you were saying about these early hacks that you could use the
QR code.

261
00:13:29,768 --> 00:13:37,824
Because yeah, I remember seeing a video about the the history of hacking the 3DS, and
there was a specific game, I think you mentioned it.

262
00:13:38,024 --> 00:13:41,499
I I can't remember the name of it, but you mentioned it that ~ yeah.

263
00:13:41,499 --> 00:13:54,575
That ~ and and apparently it's just set the sales charts for that one game ~ off off the
chain because everyone was buying it for this one reason to to hack the to hack the thing.

264
00:13:54,701 --> 00:13:55,622
Yeah.

265
00:13:55,622 --> 00:13:59,523
And unfortunately the price spiked up because you know what people gonna do.

266
00:14:00,184 --> 00:14:00,557
Mm-hmm.

267
00:14:00,557 --> 00:14:00,972
Yeah.

268
00:14:00,972 --> 00:14:01,326
Yeah.

269
00:14:01,326 --> 00:14:02,059
Yeah.

270
00:14:02,906 --> 00:14:05,927
unfortunately that's how things go when this stuff happens.

271
00:14:05,927 --> 00:14:09,890
Nowada thankfully we got to a point that you don't need to buy anything.

272
00:14:09,890 --> 00:14:17,794
But that early start was rough for anyone that wanted to buy the game.

273
00:14:17,814 --> 00:14:19,075
But yes.

274
00:14:19,075 --> 00:14:22,577
One but that was the start of everything.

275
00:14:22,577 --> 00:14:23,121
And

276
00:14:23,121 --> 00:14:26,792
Do you want to get ~ we want to explain a bit more than nitty gritty?

277
00:14:26,792 --> 00:14:28,133
Just a bit more?

278
00:14:28,621 --> 00:14:29,156
At least

279
00:14:29,156 --> 00:14:29,526
gritty.

280
00:14:29,526 --> 00:14:30,268
We want

281
00:14:30,268 --> 00:14:32,811
give me all the all the nitty and all the gritty.

282
00:14:32,811 --> 00:14:34,384
Just just duck just pour it on.

283
00:14:34,384 --> 00:14:35,105
Just pour it on.

284
00:14:35,105 --> 00:14:36,217
I want all the deets.

285
00:14:36,217 --> 00:14:36,708
All of it.

286
00:14:36,708 --> 00:14:37,585
All of it.

287
00:14:37,585 --> 00:14:46,951
For me it put it on me like a hot jar anyway, but ~ but yeah like okay.

288
00:14:46,951 --> 00:14:47,705
Sorry.

289
00:14:48,412 --> 00:14:59,799
But yeah, so ~ I'm going to explain the general gist of exploits because they're not all
the same, but I'm going to explain how an exploit can happen, how the chain tends to

290
00:14:59,799 --> 00:15:03,109
happen, but some

291
00:15:03,109 --> 00:15:07,733
Cases could always be a bit different because you're just trying to fool a program in
different ways.

292
00:15:07,733 --> 00:15:09,734
But ~ okay.

293
00:15:10,215 --> 00:15:11,816
Let's start with the first one.

294
00:15:11,816 --> 00:15:14,678
At least the first one that we know of Ninjax.

295
00:15:14,678 --> 00:15:25,907
~ as I explained earlier, the QR code you would read and it would start a an malformed
data chain of code execution.

296
00:15:26,248 --> 00:15:28,349
But how do you start a code chain?

297
00:15:28,349 --> 00:15:33,353
~ essentially you look for a ~

298
00:15:33,997 --> 00:15:35,998
And correct parsing of data.

299
00:15:35,998 --> 00:15:44,183
Because the game is expecting you to give a ~ certain format of the information in the QR
code, it doesn't expect you to be changing it.

300
00:15:44,183 --> 00:15:54,408
~ and also developers are not security developers, they're game developers, so this tends
to happen sometimes if you don't have anyone that does the security checks.

301
00:15:54,408 --> 00:16:03,323
~ basically that data tends to explode the stack.

302
00:16:03,323 --> 00:16:05,284
That's how we usually attack it.

303
00:16:05,284 --> 00:16:09,285
But sometimes we don't explode a stack, we explode other pointers.

304
00:16:09,285 --> 00:16:10,516
specifically Ninjax.

305
00:16:10,516 --> 00:16:18,899
Unfortunately I cannot tell you what exactly hit because I didn't read it deep enough for
me to say it was this specific thing.

306
00:16:18,899 --> 00:16:27,283
However, I can tell you a few examples that is not specifically Ninjax soon, but you break
the you break the data.

307
00:16:27,283 --> 00:16:32,705
The the game tries to p parse that data that you specifically crafted.

308
00:16:33,313 --> 00:16:44,733
and you you inject a thing that you call a rob chain, which is a return oriented
programming, like blob, ~ a blob being a

309
00:16:44,733 --> 00:16:47,425
b a chunk of binary data.

310
00:16:49,467 --> 00:17:01,425
once you hit the stack or a pointer of to something, because you could hit a a like ~ a
number that's a pointer to like a reference to a function

311
00:17:01,425 --> 00:17:02,065
for example.

312
00:17:02,065 --> 00:17:05,928
~ and you can start breaking from there if you know what you're doing.

313
00:17:05,928 --> 00:17:21,339
It's not easy, but but ~ once you steal the first initial chain of the code, ~ you start
doing something funny, which is that ROP thing.

314
00:17:21,500 --> 00:17:26,103
You cannot inject code to the f to the 3DS as is period.

315
00:17:26,273 --> 00:17:28,665
now you can't just ~

316
00:17:28,665 --> 00:17:34,037
Rob the stack pointer, rob a pointer and point to random data just load it as is
immediately.

317
00:17:34,037 --> 00:17:34,767
No.

318
00:17:34,767 --> 00:17:44,610
You have to use existing code on the application and you you what you do, you steal the
stack pointer.

319
00:17:44,610 --> 00:17:45,610
What is a stack?

320
00:17:45,610 --> 00:17:47,771
A stack is just to explain real quick.

321
00:17:47,771 --> 00:17:56,379
It's a set of data that in the memory that the functions keep track of essentially like
variables and all of that, including the return.

322
00:17:56,379 --> 00:18:05,256
pointer, the return pointer being in a reference to hey I came from this function, I need
to return to this function at this point when I'm about to go back.

323
00:18:06,277 --> 00:18:20,729
You corrupt or steal the stack pointer to take that to to ~ to take away the return
pointer and you start executing a chain of returns with existing code and existing and

324
00:18:20,729 --> 00:18:25,213
data that you injected along and you proceed to do a chain

325
00:18:25,371 --> 00:18:33,327
To the point that you want to reach a f ~ a funny way of ~ hitting the 3ds actual code at
that point.

326
00:18:34,069 --> 00:18:45,918
You don't load coin, you don't load coin ~ sorry, I don't load code, ~ but you do load a
blob of code, but you don't execute it immediately, you cannot do that.

327
00:18:47,080 --> 00:18:48,641
One way

328
00:18:48,641 --> 00:18:53,441
that we inject code to the application that's being ext

329
00:18:53,441 --> 00:19:05,248
one way, basically the way, not just the way, that we inject the code to the application
that we are running on, or at least the application we start exploiting, in this case it

330
00:19:05,248 --> 00:19:07,069
would be Ninjax if I was talking Ninjax.

331
00:19:07,069 --> 00:19:10,291
~ cube ninja, sorry, the Ninjax is exploit name.

332
00:19:10,291 --> 00:19:13,673
But essentially we use the GPU.

333
00:19:16,017 --> 00:19:18,004
~ we use

334
00:19:18,004 --> 00:19:22,367
so So the GPU has a vulnerability that allows you to do this?

335
00:19:23,629 --> 00:19:24,553
~ okay.

336
00:19:24,553 --> 00:19:25,303
properly.

337
00:19:25,303 --> 00:19:26,383
That's the thing is

338
00:19:26,383 --> 00:19:29,847
it's doing its job properly the wrong with the wrong instructions.

339
00:19:29,847 --> 00:19:31,859
It's the GPU being the Pika two hundred.

340
00:19:31,859 --> 00:19:32,759
We don't

341
00:19:34,989 --> 00:19:36,369
We do a thing

342
00:19:36,369 --> 00:19:43,792
we usually do a thing called texture copy into memory sections that the that are protected
by the CPU.

343
00:19:45,032 --> 00:19:54,235
The GPU has absolutely no idea that that code that the memory section is protected by the
CPU.

344
00:19:54,235 --> 00:19:54,675
Nothing.

345
00:19:54,675 --> 00:19:55,566
It knows nothing.

346
00:19:55,566 --> 00:20:00,017
It only knows that you gave it address A to copy to address B.

347
00:20:02,129 --> 00:20:09,511
So you just point to the physical address that you want to inject to in the linear memory,
I'll explain what that is.

348
00:20:09,511 --> 00:20:26,556
But ~ to replace the code because you just ask the ~ casually ask the the v the the the
the GPU to copy from your loaded data, which it has the ~ what's it called?

349
00:20:26,556 --> 00:20:29,667
I forgot the name of the but it has the basically the code blob.

350
00:20:29,797 --> 00:20:33,199
That will be replacing part of the game's code blob.

351
00:20:33,279 --> 00:20:36,801
Code basically part of the game's code in memory.

352
00:20:37,021 --> 00:20:38,983
Because you cannot write to it at all.

353
00:20:38,983 --> 00:20:42,164
If you try to write to memory, you just get an you just get an exception.

354
00:20:42,164 --> 00:20:45,036
The CPU just says, Stop right there, what the hell are you doing?

355
00:20:45,036 --> 00:20:45,826
But

356
00:20:46,235 --> 00:20:47,227
Yeah.

357
00:20:47,428 --> 00:20:54,362
literally it's just you'll you game will just crash, you get that c crash pop up saying,
Oops, your software f crashed, but

358
00:20:55,569 --> 00:20:56,302
That terrible

359
00:20:56,302 --> 00:21:02,211
black and white screen with the push for a for a for a log and then shut down.

360
00:21:02,211 --> 00:21:03,933
that's for an Act 3DS.

361
00:21:03,933 --> 00:21:11,718
But for a regular Free D S for the regular state free DS you just get the pop up on the
home screen saying that the program is unexpectedly.

362
00:21:11,718 --> 00:21:12,689
I forgot the exact

363
00:21:12,689 --> 00:21:14,300
message, but yes.

364
00:21:17,573 --> 00:21:24,226
But yes, essentially you use ~ a function that the GPU is capable to do.

365
00:21:24,226 --> 00:21:32,680
The GPU can access the RAM and the code is running well in the RAM as well, but it doesn't
have access to the whole RAM.

366
00:21:33,520 --> 00:21:44,685
It only has access to an exter of like an extent of data in RAM because the home menu
needs to also draw

367
00:21:45,091 --> 00:21:46,201
on the screen.

368
00:21:46,201 --> 00:21:50,503
So and not just the whole menu, like applets need to draw on the screen.

369
00:21:50,503 --> 00:21:56,865
The internet like the internet browser, the the friends listing as an applet.

370
00:21:56,865 --> 00:21:59,225
The me selector has an applet.

371
00:21:59,465 --> 00:22:03,766
And the problem with the 3DS is that it laid out memory this way.

372
00:22:04,167 --> 00:22:07,658
And I'm going to speak specifically old 3DS for a second.

373
00:22:07,658 --> 00:22:11,189
Which is sixty four megabytes.

374
00:22:11,269 --> 00:22:11,983
It's for

375
00:22:11,983 --> 00:22:14,014
The your app regular applications.

376
00:22:14,014 --> 00:22:20,496
Basically, which game is open at that time or an app in general, if it it's not a game,
like you do.

377
00:22:23,138 --> 00:22:24,538
64.

378
00:22:24,538 --> 00:22:29,480
44 megabytes for ~ another part of system memory.

379
00:22:29,480 --> 00:22:38,084
~ and then 20 megabytes reserved for very critical like modules that need to always have
that amount of memory available to them.

380
00:22:38,084 --> 00:22:40,684
That memory section never changes size.

381
00:22:40,745 --> 00:22:41,765
Unfortunately.

382
00:22:41,765 --> 00:22:54,174
Because the home menu needs to draw, ~ the GPU has ~ a very specific register that
protects it from going beyond like the whole RAM.

383
00:22:54,174 --> 00:22:59,857
You can just programmably say that you can only access so much so far into RAM.

384
00:23:02,320 --> 00:23:10,523
But since but since the layout of the system is first application, then system, then we a
thing called base memory, which is that.

385
00:23:10,523 --> 00:23:12,418
Critical section I spoke about.

386
00:23:14,203 --> 00:23:19,376
For the whole menu to draw, the GPU has to access the whole entire application memory.

387
00:23:20,817 --> 00:23:23,658
because it only knows the end address.

388
00:23:23,658 --> 00:23:25,339
It doesn't know the start address.

389
00:23:25,339 --> 00:23:34,944
So this ~ side effect, you could just replace the whole program application data,
technically speaking.

390
00:23:36,846 --> 00:23:37,766
and ta-ta.

391
00:23:37,766 --> 00:23:43,465
You just need to know where the code was going to be loaded at and replace it.

392
00:23:43,465 --> 00:23:44,485
Not usually at the start.

393
00:23:44,485 --> 00:23:48,626
You replace it ~ just a few like one memory page ahead.

394
00:23:48,626 --> 00:23:58,649
~ with your new code that would start that chain that you've probably seen in videos or
yourself if you've done that method.

395
00:24:00,009 --> 00:24:06,250
where you should see that sudden like black screen flashing colors and then suddenly home
menu.

396
00:24:06,400 --> 00:24:07,331
home launcher, sorry.

397
00:24:07,331 --> 00:24:09,851
~ god, I'm tired.

398
00:24:09,851 --> 00:24:10,331
brew launcher.

399
00:24:10,331 --> 00:24:13,058
~

400
00:24:13,058 --> 00:24:16,393
I'm I'm gonna have a few derps in my speech, I'm sorry.

401
00:24:16,393 --> 00:24:16,887
But

402
00:24:16,887 --> 00:24:17,318
okay.

403
00:24:17,318 --> 00:24:18,138
It's late for you.

404
00:24:18,138 --> 00:24:18,449
It's

405
00:24:18,449 --> 00:24:20,431
it's it's nine thirty at night.

406
00:24:20,431 --> 00:24:21,312
nine fifty at night.

407
00:24:21,312 --> 00:24:22,303
So yeah, it's late for you.

408
00:24:22,303 --> 00:24:23,914
I appreciate you coming on.

409
00:24:23,914 --> 00:24:24,764
For me, that's late.

410
00:24:24,764 --> 00:24:25,886
I'd be asleep by then.

411
00:24:25,886 --> 00:24:28,647
So I appreciate you coming on this late.

412
00:24:28,647 --> 00:24:31,421
at f ~ f four thirty yesterday.

413
00:24:31,421 --> 00:24:33,142
And huh.

414
00:24:33,142 --> 00:24:33,904
I'm sorry.

415
00:24:33,904 --> 00:24:36,069
~ well I still I appreciate you still

416
00:24:36,069 --> 00:24:36,891
coming on, man.

417
00:24:36,891 --> 00:24:38,485
I'd I'd I'd be a wreck.

418
00:24:38,485 --> 00:24:39,237
You're doing great.

419
00:24:39,237 --> 00:24:42,122
So keep on plug keep on going.

420
00:24:42,122 --> 00:24:45,252
I slept a chunk of the early afternoon at least.

421
00:24:45,963 --> 00:24:48,543
I I I I had to.

422
00:24:48,704 --> 00:24:49,664
But anyway

423
00:24:49,664 --> 00:24:54,125
and I and I got a work haul at ten, so but

424
00:24:54,285 --> 00:24:56,076
I went immediately to sleep after that.

425
00:24:56,076 --> 00:24:56,846
But

426
00:24:56,923 --> 00:24:57,847
Okay.

427
00:24:58,886 --> 00:24:59,547
I survived.

428
00:24:59,547 --> 00:25:03,968
Anyway, but ~ yes.

429
00:25:04,368 --> 00:25:08,309
You essentially use a feature that the f that the GPU has.

430
00:25:08,369 --> 00:25:18,936
because the CPU is able to do DMA, which is der direct memory access, which is the ability
to access RAM without the the intervention of the CPU.

431
00:25:20,377 --> 00:25:25,621
w the why do you give the function like that to a device like the GPU?

432
00:25:25,621 --> 00:25:26,391
You want speed.

433
00:25:26,391 --> 00:25:37,893
Your games probably wouldn't even run thirty FPS, probably run five, but if you're lucky.

434
00:25:37,893 --> 00:25:51,981
But you give unfortunately a little too much power for a basic limit basic memory
restriction that they give to the GPU.

435
00:25:51,981 --> 00:25:52,941
It's too basic.

436
00:25:52,941 --> 00:25:58,024
It just says the end address that is is allowed in memory chunks.

437
00:25:58,024 --> 00:26:03,007
It's it's not an exact address, it's like in a certain amount extent of memory.

438
00:26:03,007 --> 00:26:05,608
~ to all far it can access.

439
00:26:05,608 --> 00:26:07,209
~

440
00:26:09,061 --> 00:26:18,745
Well essentially you just use this unintended function on the GPU to replace the code.

441
00:26:18,745 --> 00:26:30,530
After that you jump into your new code, the chain starts, the homebrew launcher ~ the
homebrew launcher doesn't start immediately, a whole new chain starts now.

442
00:26:30,530 --> 00:26:33,351
Which will try to not exploit the game this time.

443
00:26:33,351 --> 00:26:36,882
It will try to exploit the home brew the home menu.

444
00:26:36,882 --> 00:26:37,233
Sorry.

445
00:26:37,233 --> 00:26:38,703
The home menu.

446
00:26:38,787 --> 00:26:41,338
instead to start the homebrew launcher.

447
00:26:43,020 --> 00:26:48,544
You will essentially end up exploiting the home menu or at least tricking the home menu
enough.

448
00:26:48,544 --> 00:26:53,667
That's why you can't go to the home screen when there's no homebrew launcher.

449
00:26:54,428 --> 00:27:01,353
to start your the rest of ~ of like the rest of the homebrew space.

450
00:27:01,353 --> 00:27:07,415
This is the early sections of the homebrew nowadays because nowadays you don't really need
to do the expo

451
00:27:07,415 --> 00:27:15,366
the whole XY chain except in certain scenarios because now there's other ways to exploit
the system.

452
00:27:18,095 --> 00:27:20,874
And I really want to speak about N set nine, but we'll get there.

453
00:27:20,874 --> 00:27:21,725
But

454
00:27:22,779 --> 00:27:22,920
Good.

455
00:27:22,920 --> 00:27:24,266
I've read I've read about that,

456
00:27:24,266 --> 00:27:26,354
but I haven't had to do it myself.

457
00:27:26,478 --> 00:27:27,565
Read about MSAT9.

458
00:27:27,565 --> 00:27:38,849
bit more about it because I was talking to Zoogie at the time and helping with theories
and attempts and like I was fearizing with him it was him that was doing the exploit, but

459
00:27:38,849 --> 00:27:39,919
he was talking to me.

460
00:27:39,919 --> 00:27:40,989
I used to talk to Zugi.

461
00:27:40,989 --> 00:27:45,370
Zoogie has been ~ not talking ~ at all lately.

462
00:27:45,511 --> 00:27:49,132
lately for a while, but I don't know s specifically the reasons.

463
00:27:49,132 --> 00:27:50,572
I just know not.

464
00:27:50,592 --> 00:27:52,753
He showed up before, but then left.

465
00:27:52,753 --> 00:27:53,553
So

466
00:27:54,373 --> 00:27:56,175
He's alive, at least, I hope.

467
00:27:56,175 --> 00:27:58,097
~ at

468
00:27:58,097 --> 00:27:59,299
least the same as my last talk.

469
00:27:59,299 --> 00:28:00,399
But like

470
00:28:03,745 --> 00:28:07,363
Yeah, like ~ we'll get to that.

471
00:28:09,179 --> 00:28:14,974
But once you get that whole chain, ta da, you get ~ the ability to start new applications.

472
00:28:14,974 --> 00:28:18,898
~ well, unsigned applications.

473
00:28:18,898 --> 00:28:20,478
But you're restricted.

474
00:28:21,200 --> 00:28:34,651
You're restricted as far as the home ~ the home menu can give you as well in terms of
permissions, because their services, I'll explain that soon.

475
00:28:34,651 --> 00:28:36,923
And as far as you can get

476
00:28:36,923 --> 00:28:50,063
permissions from an different application because you can actually choose and you're in
the basic well not in the basic in the dot x version of the homebrew launcher to start a

477
00:28:50,063 --> 00:28:56,037
different application and then do what's called a takeover and you can use its
permissions.

478
00:28:56,037 --> 00:29:03,632
~ unfortunately the takeover as well was a bit of a hit or miss sometimes because you r
you have to fight the clock.

479
00:29:04,811 --> 00:29:11,585
you'd have to do at very specific timing and sometimes you'd get the red the red screen,
which means you just scratched.

480
00:29:12,026 --> 00:29:16,149
You just crashed you you you missed you missed the cue, unfortunately.

481
00:29:16,149 --> 00:29:17,675
But you missed the queue.

482
00:29:17,675 --> 00:29:19,071
It's just reboot.

483
00:29:19,311 --> 00:29:21,172
Well well, reboot.

484
00:29:21,172 --> 00:29:25,776
But I have one application that uses takeovers and I'll explain why.

485
00:29:25,776 --> 00:29:34,161
But ~ w ~ one of my exploit ~ alternatives that are available for certain p cases.

486
00:29:34,894 --> 00:29:40,076
it's not part of the main guide at this time if I recall, but it's it can be used for a
certain thing.

487
00:29:40,076 --> 00:29:57,046
But that is the major way I can explain you and of imagin well the best way I can think of
explaining you the basic gist of basic quote unquote because I explain very intricate

488
00:29:57,046 --> 00:29:59,965
details, but p but

489
00:29:59,965 --> 00:30:00,615
that's great.

490
00:30:00,615 --> 00:30:01,516
No, that's great.

491
00:30:01,516 --> 00:30:02,516
I I

492
00:30:02,516 --> 00:30:04,467
I was following along as best I could.

493
00:30:04,467 --> 00:30:12,832
So basically, ~ you you use the GPU to run an exploit because it has access to the entire
system memory.

494
00:30:12,832 --> 00:30:17,724
And that lets you put in a, as you said, code blob that allows

495
00:30:17,724 --> 00:30:21,806
you to start putting injects and things to have the console do what you want it to do.

496
00:30:21,806 --> 00:30:23,867
~

497
00:30:23,867 --> 00:30:25,778
you you inject the code.

498
00:30:25,778 --> 00:30:29,339
You inject code into the application to then start a new chain.

499
00:30:30,300 --> 00:30:31,600
basically

500
00:30:31,761 --> 00:30:39,242
yeah, because a GPU has no concept of memory permissions of the of the CPU.

501
00:30:40,444 --> 00:30:43,205
it just believes that you're doing things correctly.

502
00:30:43,205 --> 00:30:44,237
Hopefully.

503
00:30:44,237 --> 00:30:45,406
I th this guy

504
00:30:45,406 --> 00:30:46,727
gave me instructions.

505
00:30:46,727 --> 00:30:49,368
I'll follow them I'll follow them.

506
00:30:49,368 --> 00:30:52,609
~ completely and without any questions.

507
00:30:54,282 --> 00:30:56,303
unfortunately that's some people IRL.

508
00:30:56,303 --> 00:30:57,895
That that shouldn't be as well.

509
00:30:57,895 --> 00:31:03,458
But Go ahead, go ahead, sorry.

510
00:31:03,458 --> 00:31:04,634
It's it's about finishing.

511
00:31:04,634 --> 00:31:14,165
find what I find fascinating is today when you wanna mod the the thing, you use a use an
audio file, which at least that's what I did twice.

512
00:31:14,165 --> 00:31:15,636
~ which

513
00:31:15,636 --> 00:31:16,906
if you're certain versions, yes.

514
00:31:16,906 --> 00:31:20,828
~ that's if you read

515
00:31:20,828 --> 00:31:30,823
the 3DS guide itself, you have that as an option, yes, but you don't have to do that
method necessarily for the latest versions.

516
00:31:30,823 --> 00:31:32,615
The latest versions use something else.

517
00:31:32,615 --> 00:31:35,496
That exploit has been patched, if I recall correctly.

518
00:31:35,496 --> 00:31:38,978
~ it's currently patched, it does not work in the latest version.

519
00:31:38,978 --> 00:31:39,838
What?

520
00:31:40,139 --> 00:31:41,679
Were you updated?

521
00:31:41,680 --> 00:31:42,520
I don't think so.

522
00:31:42,520 --> 00:31:44,067
I th exactly.

523
00:31:44,067 --> 00:31:47,119
So so that that was that was handy.

524
00:31:47,720 --> 00:31:48,481
Yeah.

525
00:31:48,481 --> 00:31:50,362
Well that's ~

526
00:31:50,923 --> 00:31:51,343
yeah.

527
00:31:51,343 --> 00:31:52,474
Well, there's other ways.

528
00:31:52,474 --> 00:31:57,889
And folks, if you're not aware, the guide is the guide that we're talking about that I've
linked to multiple times.

529
00:31:57,889 --> 00:32:02,203
It asks you for which specific version of the 3DS you have.

530
00:32:02,203 --> 00:32:06,537
~ and then it directs you to what hack you should be using.

531
00:32:06,537 --> 00:32:07,548
It's fascinating.

532
00:32:07,548 --> 00:32:09,419
It's absolutely fascinating.

533
00:32:09,457 --> 00:32:15,473
For me, both times for my three DS and two DS, it directed me to this audio file that you
run in the music player.

534
00:32:15,473 --> 00:32:16,574
And that's what did it.

535
00:32:16,574 --> 00:32:22,529
But there are other methods, like I believe one of them is the one you mentioned earlier,
set nine, I think it's it's called.

536
00:32:22,549 --> 00:32:29,752
I'm not sure if it was the latest or the s second to latest version now that I think about
it.

537
00:32:29,752 --> 00:32:34,414
I've been a little dormant in the scene unfortunately because I'm tired with work.

538
00:32:34,414 --> 00:32:36,115
I cannot follow everything now.

539
00:32:36,115 --> 00:32:37,575
But like I'm

540
00:32:37,575 --> 00:32:40,996
s ~ I still I'm still part of the scene.

541
00:32:40,996 --> 00:32:42,397
Yeah, but like

542
00:32:43,639 --> 00:32:47,032
set nine was one of still MZ9, okay.

543
00:32:47,032 --> 00:32:52,877
But like MZ9, I w I literally opened the guide as we speak to double check if it was still
MZ9.

544
00:32:52,877 --> 00:32:53,677
I'm tired.

545
00:32:53,677 --> 00:32:57,470
But like ~

546
00:32:57,470 --> 00:33:07,669
yes, it's set nine is one of the methods of of which it's it doesn't exploit a game on
this one.

547
00:33:07,669 --> 00:33:13,133
This one does not exploit a game nor a s nor the system setting specifically.

548
00:33:13,477 --> 00:33:18,259
Because you have to open the system settings at one point, but I'll I'll explain.

549
00:33:18,259 --> 00:33:20,160
I'll explain.

550
00:33:20,160 --> 00:33:21,521
You're going to say more stuff.

551
00:33:21,521 --> 00:33:23,962
You're going to explain to the people that there's more stuff.

552
00:33:23,962 --> 00:33:26,063
~ or were you done?

553
00:33:26,063 --> 00:33:26,683
I don't know.

554
00:33:26,683 --> 00:33:29,266
~ okay.

555
00:33:29,266 --> 00:33:29,857
that

556
00:33:29,857 --> 00:33:38,952
I was just explaining that if they haven't used the guide, which they should, ~ it's it I
was just telling them how amazing the guide is because it once you tell it the version

557
00:33:38,952 --> 00:33:44,305
you're on, it points you to the right method to to mod your system.

558
00:33:44,305 --> 00:33:50,458
And so for me it was the audio file, but for some other people I've noticed it's set
because they're probably on a newer version.

559
00:33:50,458 --> 00:33:54,360
~ and that was leading into you explaining set.

560
00:33:54,360 --> 00:33:56,821
So you're ~ absolutely on the right track.

561
00:33:57,106 --> 00:33:59,136
Okay, so set.

562
00:33:59,136 --> 00:34:02,987
Set I need to pull my memory a slight bit, but MSAT.

563
00:34:03,827 --> 00:34:05,668
It's called set9 for a reason.

564
00:34:05,668 --> 00:34:10,689
I didn't explain you one thing either yet about this this the 3DS.

565
00:34:10,909 --> 00:34:20,972
You could exploit a game like I explained with Ninjax and you could get Umbre running, but
you don't have system access by itself, like like that alone.

566
00:34:20,972 --> 00:34:24,093
You just have the application layer.

567
00:34:25,285 --> 00:34:33,671
You don't even have the kernel access in the ARM nine sorry, the ARM eleven, which is the
free DS mode essentially like CPU.

568
00:34:33,671 --> 00:34:36,613
~ you have the ARM nine as well.

569
00:34:37,994 --> 00:34:39,715
Have you heard about this?

570
00:34:40,496 --> 00:34:41,261
Have you ever have

571
00:34:41,261 --> 00:34:44,825
ever heard about the explanation about the CPUs and the Free D S?

572
00:34:45,179 --> 00:34:47,801
I have Okay.

573
00:34:47,855 --> 00:34:51,467
They're they're arm, they're arm base, but that's really all I know.

574
00:34:51,629 --> 00:34:52,549
Okay.

575
00:34:53,791 --> 00:34:58,775
You could say there's the the ~ free trif types of arm in the free DS.

576
00:35:00,197 --> 00:35:09,765
there's the ARM eleven, which runs the free DS mode and a few things on when you're in D
SI mode and

577
00:35:12,123 --> 00:35:16,096
~ in also GBA mode but it's just assistance.

578
00:35:16,096 --> 00:35:20,819
It's more of an assistance when it's in those two modes, specific modules.

579
00:35:22,462 --> 00:35:25,625
in the 3DS mode it's the main CPU where the games will run.

580
00:35:25,625 --> 00:35:29,428
The system modules will also run, which are services.

581
00:35:32,931 --> 00:35:38,596
and let me not lose my frame of my train of thought trying to explain this.

582
00:35:38,596 --> 00:35:39,657
But like

583
00:35:40,699 --> 00:35:43,885
because I'm getting really nitty gritty at this point.

584
00:35:45,720 --> 00:35:48,482
because go ahead, sorry.

585
00:35:48,482 --> 00:35:52,532
we're talking about the three different ARM processors you were saying in the in the

586
00:35:52,532 --> 00:35:54,275
in the in the three D S.

587
00:35:54,371 --> 00:35:54,901
Yes.

588
00:35:54,901 --> 00:35:58,774
One you can basically forget about because it's not used for exploitation.

589
00:35:58,774 --> 00:35:59,625
It's the ARM seven.

590
00:35:59,625 --> 00:36:01,385
I'll tell you what's for though.

591
00:36:01,436 --> 00:36:06,750
but let me get to the main two, which is ARM eleven and arm nine.

592
00:36:06,750 --> 00:36:15,005
And the ARM eleven runs well, what we call the kernel eleven and the applications, ~ on
the 3DS mode.

593
00:36:17,677 --> 00:36:23,521
kernel eleven has some responsibilities, but it does not have all those responsibilities
of the system.

594
00:36:26,199 --> 00:36:30,881
the main the main security processor is the ARM9.

595
00:36:31,462 --> 00:36:41,850
Which you're not running code f which you're not running code as is, especially from just
exploiting an application without doing more things ahead.

596
00:36:41,850 --> 00:36:45,792
Once you get Ombrew launch launched, you could do more.

597
00:36:46,433 --> 00:36:47,343
But an asterisk.

598
00:36:47,343 --> 00:36:50,515
I'll explain why 'cause things change o over the times.

599
00:36:51,756 --> 00:36:52,457
and

600
00:36:52,657 --> 00:36:58,793
~ one ~ I guess I have to explain what Nintendo has tried to do to prevent certain things.

601
00:36:58,793 --> 00:37:01,064
But yeah.

602
00:37:03,365 --> 00:37:08,097
You essentially have to get to the application layer.

603
00:37:08,097 --> 00:37:14,850
~ exploit probably if you need to, because unless you find something directly.

604
00:37:14,850 --> 00:37:23,145
The to the ARM9, but the kernel eleven, because it's a lot easier to exploit probably the
arm nine if you have the kernel eleven already in.

605
00:37:23,754 --> 00:37:30,057
But sometimes you just get lucky and you get something directly in the ARM9.

606
00:37:30,219 --> 00:37:31,870
set9 is directly one of them.

607
00:37:31,870 --> 00:37:38,171
You just ~ you literally just give Mullform file names.

608
00:37:39,752 --> 00:37:40,162
Which

609
00:37:40,162 --> 00:37:50,615
actually which is actually if you look at the if you look at the final result of the tool
when you and run it and into your SC card essentially, you when you do the pointing at the

610
00:37:50,615 --> 00:37:59,457
SC card and prepare it at MZ9, if you look at it you see a file that looks very broken.

611
00:37:59,901 --> 00:38:02,083
~ at least a folder, I should say.

612
00:38:02,083 --> 00:38:04,585
I'll explain those folders.

613
00:38:04,585 --> 00:38:11,330
But essentially that folder if you ever looked at the SD card, you have a folder called
the Nintendo Free DS.

614
00:38:11,330 --> 00:38:14,673
That's the actual like s systems like folder.

615
00:38:14,693 --> 00:38:23,320
Inside of it there's ~ one thing called the ID zero, which is a very bro which is a
basically it looks like an exadecimal number.

616
00:38:24,101 --> 00:38:28,164
And then there's ID one, which is also an exadecimal number.

617
00:38:28,164 --> 00:38:29,445
~

618
00:38:29,809 --> 00:38:33,090
I forgot which one I set9 modified now.

619
00:38:33,090 --> 00:38:36,171
I have been sleeping in the scene a little.

620
00:38:36,171 --> 00:38:41,352
I need to double check if I want to tell which one it malformed, but I think it was ID
one.

621
00:38:41,352 --> 00:38:47,474
Essentially the 3DS lists ~ the the the file contents of ID zero.

622
00:38:48,935 --> 00:38:51,696
Which is a random string, as I was saying earlier.

623
00:38:51,696 --> 00:38:53,536
Does well looks random.

624
00:38:53,596 --> 00:38:55,937
It's not really random for a 3ds, but

625
00:38:58,211 --> 00:39:08,228
Unfortunately, the way that the 3DS processes a few strings, it overflows a bit just
enough to start a bit of a chain.

626
00:39:11,211 --> 00:39:15,604
basically it it sh you just need to break the text processor.

627
00:39:15,604 --> 00:39:25,647
~ if I recall the instruction from Juki Sugi, 'cause I was I was debating with him and now
trying to help find the proper string that would

628
00:39:25,647 --> 00:39:30,518
be valid in a file system because that was the challenge of that specific exploit.

629
00:39:32,879 --> 00:39:46,323
and also at the same time we could actually use it to put anything in there because you'd
have to break that text processor, but you also have to make sure you don't use certain

630
00:39:46,323 --> 00:39:50,124
certain characters because the file system will break them.

631
00:39:50,124 --> 00:39:53,085
~ especially from a tool.

632
00:39:53,381 --> 00:39:56,342
that that has to run from a file system.

633
00:39:56,342 --> 00:40:03,125
A file s sorry, a f an actual regular OS, which ~ will try to fix a few characters.

634
00:40:04,266 --> 00:40:07,147
we we had to find a few things that would work.

635
00:40:07,147 --> 00:40:11,479
But essentially you just do the same thing but directly in the ARM9.

636
00:40:11,479 --> 00:40:19,132
~ a smaller string, but you can do you can do a few ~ can do a few more things to to solve
that problem.

637
00:40:19,132 --> 00:40:21,873
You just need to break the initial chain of code.

638
00:40:22,125 --> 00:40:24,706
And from there you just proceed to the rest.

639
00:40:24,706 --> 00:40:29,554
I need to find I need to remember wh the whole set of details.

640
00:40:31,196 --> 00:40:32,678
because I forgot.

641
00:40:32,678 --> 00:40:37,224
Again, I as I s as I mentioned before, I've been a bit out of the scene.

642
00:40:37,224 --> 00:40:40,408
It's been a while and this thing released.

643
00:40:40,408 --> 00:40:41,501
~

644
00:40:41,501 --> 00:40:41,921
stress.

645
00:40:41,921 --> 00:40:43,653
I am learning so much.

646
00:40:43,653 --> 00:40:45,504
And I hope that our listeners are as well.

647
00:40:45,504 --> 00:40:47,326
This to me, this is fascinating.

648
00:40:47,326 --> 00:40:48,242
To me, this is fascinating.

649
00:40:48,242 --> 00:40:50,589
I never knew why God mode nine was called that.

650
00:40:50,589 --> 00:40:53,161
~ I thought it was just version nine.

651
00:40:53,161 --> 00:40:55,823
~ no, I get that now.

652
00:40:55,823 --> 00:40:56,784
I get that now.

653
00:40:56,784 --> 00:40:57,485
So I'm

654
00:40:57,485 --> 00:40:59,346
I'm learning a lot and I love it.

655
00:40:59,346 --> 00:41:05,229
I wanna because again, this system fascinates me, and and I'm I'm ~ it's such a

656
00:41:05,413 --> 00:41:08,186
It's not the most powerful handheld, but it does so much.

657
00:41:08,186 --> 00:41:11,628
And just modding it lets it do so much more.

658
00:41:11,669 --> 00:41:13,140
So it just fascinates

659
00:41:13,140 --> 00:41:13,341
me.

660
00:41:13,341 --> 00:41:15,933
So please just dive in.

661
00:41:15,933 --> 00:41:16,574
That's what I'm saying.

662
00:41:16,574 --> 00:41:17,455
Just keep going, man.

663
00:41:17,455 --> 00:41:17,946
I love it.

664
00:41:17,946 --> 00:41:24,268
I'm I mean the first variant of this exploit was released in two thousand twenty three.

665
00:41:24,268 --> 00:41:27,660
~ and like the seventh of August.

666
00:41:27,660 --> 00:41:29,710
So it's almost making for years.

667
00:41:30,341 --> 00:41:30,687
wow.

668
00:41:30,687 --> 00:41:31,491
That's funny.

669
00:41:31,491 --> 00:41:35,553
So as a first release that is.

670
00:41:37,034 --> 00:41:40,435
The first release of Enumerate the Lenny Edition.

671
00:41:40,435 --> 00:41:41,995
The Lenny's Edition.

672
00:41:43,956 --> 00:41:45,733
that's was the exploit name.

673
00:41:45,733 --> 00:41:48,644
But ~ but yeah, basically

674
00:41:48,644 --> 00:41:49,875
yeah, that was the explain.

675
00:41:49,875 --> 00:41:55,377
But basically, if you look at the initial release, there's a few hints.

676
00:41:55,377 --> 00:41:59,439
~ that there's there's probably a few hints that something looks weird.

677
00:41:59,439 --> 00:42:05,051
~ like why why do I see ~ meat sticky emoji in the middle of the string?

678
00:42:05,051 --> 00:42:14,225
Anyway, but yeah, it's just the the text processor is broken in the three DS.

679
00:42:15,011 --> 00:42:21,883
It doesn't proper synergy checks in converting the string into preventing it from going
beyond the limit.

680
00:42:23,083 --> 00:42:24,944
so whoops.

681
00:42:24,944 --> 00:42:33,986
But like it did conversions, I forgot if it was to UTF eight or to utte.

682
00:42:34,266 --> 00:42:35,366
I just know it broke.

683
00:42:35,366 --> 00:42:36,987
I forgot the details.

684
00:42:37,017 --> 00:42:41,978
but I didn't do homework before I came to this call.

685
00:42:41,978 --> 00:42:42,377
but

686
00:42:42,377 --> 00:42:43,198
You're doing great.

687
00:42:43,198 --> 00:42:44,060
You're doing great.

688
00:42:44,060 --> 00:42:44,961
I'm I'm learning

689
00:42:44,961 --> 00:42:45,471
so much.

690
00:42:45,471 --> 00:42:46,593
You're doing great.

691
00:42:46,953 --> 00:42:48,273
just like school.

692
00:42:48,304 --> 00:42:52,573
do do homework but I didn't study enough because I just was too bored.

693
00:42:52,573 --> 00:42:53,858
I did my work though.

694
00:42:53,858 --> 00:42:54,879
I did my stuff.

695
00:42:54,879 --> 00:43:04,705
Anyway, but you break immediately the ARM9, which is great because it's the security
processor.

696
00:43:05,346 --> 00:43:07,046
That's just wonderful.

697
00:43:07,067 --> 00:43:08,808
You immediately get in.

698
00:43:08,808 --> 00:43:09,909
Knock knock.

699
00:43:09,909 --> 00:43:11,970
It's me, baby.

700
00:43:11,970 --> 00:43:12,655
But

701
00:43:12,655 --> 00:43:13,373
Yeah.

702
00:43:15,573 --> 00:43:16,355
but

703
00:43:16,355 --> 00:43:21,287
Like I forgot how big the string is actually.

704
00:43:21,287 --> 00:43:23,148
But like the string is quite big.

705
00:43:23,148 --> 00:43:26,450
Yeah, it's basically just the the blob and the string.

706
00:43:26,450 --> 00:43:37,495
But but but essentially you just get the chain broken you write then too much data into
memory.

707
00:43:37,495 --> 00:43:41,477
I forgot if it was the stack at the in this specific exploit, I think it was.

708
00:43:41,477 --> 00:43:42,327
But

709
00:43:44,669 --> 00:43:46,551
~ the harm knights tries to do its work.

710
00:43:46,551 --> 00:43:48,032
Oopsie doopsie, I'm elsewhere.

711
00:43:48,032 --> 00:43:48,670
Where am I?

712
00:43:48,670 --> 00:43:50,133
The association.

713
00:43:51,295 --> 00:43:54,457
these are the actors I took the I took away your control.

714
00:43:55,838 --> 00:43:57,820
All your 3DS is not belong to us.

715
00:43:57,820 --> 00:44:11,992
But but ~ that's that's the best way I can think of explaining this in a way that might
sound a little more funny to people and not too and not too monotone as well.

716
00:44:11,992 --> 00:44:13,385
~

717
00:44:13,385 --> 00:44:13,837
no, no.

718
00:44:13,837 --> 00:44:15,210
Not monotone at all.

719
00:44:15,293 --> 00:44:15,700
Now

720
00:44:15,700 --> 00:44:16,302
what I'm saying.

721
00:44:16,302 --> 00:44:19,881
That's the best way you can think of explaining it without being a bit monotone.

722
00:44:19,881 --> 00:44:29,913
because I mean, even though I've I've I've gone through the guide myself, I find it
fascinating that so many people, yourself included, helped make this happen.

723
00:44:29,913 --> 00:44:31,295
And so I love that kind of thing.

724
00:44:31,295 --> 00:44:33,097
And so that's what I'm fascinated with.

725
00:44:33,097 --> 00:44:34,484
~ now.

726
00:44:34,484 --> 00:44:41,074
~ as we say, I'm not like I wouldn't say and w I would not say that I'm a main face of the
scene.

727
00:44:41,074 --> 00:44:42,045
I'm not.

728
00:44:42,627 --> 00:44:43,065
I'm

729
00:44:43,065 --> 00:44:44,416
you're you're in there, you

730
00:44:44,416 --> 00:44:50,258
know and you explained it very well, and you explained it well enough that even an idiot
like me can understand it.

731
00:44:50,477 --> 00:44:58,522
Now, Bendel, one of the reasons he wanted me to talk to you is because of these things
called soap transfer, which

732
00:44:58,522 --> 00:45:04,364
I know very little about ~ because I've never region changed ~ any of my systems.

733
00:45:04,865 --> 00:45:05,425
So

734
00:45:05,425 --> 00:45:07,096
yeah, so I've never done a region change.

735
00:45:07,096 --> 00:45:10,575
So would you mind explaining what a soap transfer is?

736
00:45:10,577 --> 00:45:11,340
For for idiots

737
00:45:11,340 --> 00:45:13,879
like me who aren't f familiar with them.

738
00:45:14,147 --> 00:45:15,117
Okay.

739
00:45:15,538 --> 00:45:19,279
I agree to explain one quick thing about programming in general.

740
00:45:20,400 --> 00:45:23,722
The two most difficult things, at least it used to be.

741
00:45:23,722 --> 00:45:30,645
The two most difficult things about programming is giving names and invalidating caches.

742
00:45:30,645 --> 00:45:32,506
So anyway, the naming part.

743
00:45:32,506 --> 00:45:36,067
It does why a soap transfer?

744
00:45:36,848 --> 00:45:40,069
There is a protocol that the 3DS uses.

745
00:45:40,369 --> 00:45:41,850
for infrastructural reasons.

746
00:45:41,850 --> 00:45:46,273
~ specifically anything related to the eShop.

747
00:45:47,574 --> 00:46:02,464
Not only s not only that protocol, there's more, but one of them is it sends and receives
from Nintendo whenever it tries to talk to it about certain things, a SOAP XML.

748
00:46:03,005 --> 00:46:09,679
It really is ~ called a soap XML, which I forg ~ which I forgot what was abbreviated for.

749
00:46:09,765 --> 00:46:11,036
But like I was

750
00:46:11,036 --> 00:46:11,488
front of me.

751
00:46:11,488 --> 00:46:14,475
It's simple object access protocol.

752
00:46:14,607 --> 00:46:15,417
Yes.

753
00:46:16,137 --> 00:46:16,582
Soap.

754
00:46:16,582 --> 00:46:17,461
looked that up.

755
00:46:18,378 --> 00:46:19,178
yeah.

756
00:46:19,758 --> 00:46:20,479
Soap.

757
00:46:20,479 --> 00:46:22,559
So s and what does Cleanini do?

758
00:46:22,559 --> 00:46:23,840
It does soap.

759
00:46:23,840 --> 00:46:28,541
It does soap commands with your information off your 3DS.

760
00:46:29,761 --> 00:46:36,163
And it was called soap transfer as a nickname from the Nintendo Home Reserver.

761
00:46:36,843 --> 00:46:38,724
Or at least at the Nintendo Home Reserver.

762
00:46:38,724 --> 00:46:43,811
Because I was mentioning about the soap and then it's just

763
00:46:43,811 --> 00:46:44,781
It became a joke.

764
00:46:44,781 --> 00:46:45,602
It's a soap.

765
00:46:45,602 --> 00:46:47,092
It's a soap dresser.

766
00:46:48,643 --> 00:46:54,385
because essentially what I do okay, well first off, before I explain what I do, what was
the problem?

767
00:46:54,385 --> 00:46:56,646
What made me wonder about this?

768
00:46:56,646 --> 00:47:00,227
I already was reversing a module called NIM.

769
00:47:00,648 --> 00:47:02,788
What's what's NIM for?

770
00:47:02,789 --> 00:47:03,579
I have no idea.

771
00:47:03,579 --> 00:47:05,330
That's not a public information.

772
00:47:05,330 --> 00:47:07,501
Anyway, but at least

773
00:47:07,501 --> 00:47:08,671
in terms of the name.

774
00:47:08,671 --> 00:47:13,563
~ but I'm sure there's probably some leak that says that name.

775
00:47:13,563 --> 00:47:15,014
But I don't wanna look at the links.

776
00:47:15,014 --> 00:47:16,936
But anyway.

777
00:47:16,936 --> 00:47:33,751
~ Lim's job is to perform certain operations, well, most of the ~ sh of the ho the shop
operations ~ in the general broad system.

778
00:47:33,751 --> 00:47:38,105
The eShop itself does a few others that are not through NIM.

779
00:47:38,105 --> 00:47:40,965
~ it uses

780
00:47:40,965 --> 00:47:42,356
The Ninja API?

781
00:47:42,356 --> 00:47:43,786
Yes, the Ninja.

782
00:47:43,786 --> 00:47:45,467
They called it Ninja.

783
00:47:48,768 --> 00:47:49,318
They called

784
00:47:49,318 --> 00:47:50,729
it Ninja.

785
00:47:50,789 --> 00:47:59,452
But I do have a few ninja calls in in the in the clean ninety force f set set things.

786
00:47:59,452 --> 00:48:06,255
But ~ the major of it is doing the subpart of NIM.

787
00:48:06,315 --> 00:48:09,556
But NIM essentially can.

788
00:48:11,139 --> 00:48:30,065
and will p gets information of the current account registration of the e-commerce which is
basically saying the shop and will change that state depending on what you're telling to

789
00:48:30,065 --> 00:48:30,265
do.

790
00:48:30,265 --> 00:48:36,770
What you can be registered, unregistered, transferred and P.

791
00:48:37,791 --> 00:48:40,333
Yes, P, the letter P

792
00:48:40,441 --> 00:48:41,952
Wha why do I call it P?

793
00:48:41,952 --> 00:48:43,883
I have no idea what P stands for.

794
00:48:43,883 --> 00:48:45,543
I just know it's P.

795
00:48:47,784 --> 00:48:48,145
I

796
00:48:48,145 --> 00:48:54,587
I I took the guess from R U and T because those are easy to guess.

797
00:48:54,587 --> 00:48:57,448
You have a new console that never connected to eShop?

798
00:48:57,549 --> 00:48:58,309
Ooh status.

799
00:48:58,309 --> 00:49:03,421
You deleted the eShop account on the eShop if you didn't have an internet e account
associated.

800
00:49:03,421 --> 00:49:05,232
Ooh state again.

801
00:49:05,232 --> 00:49:06,353
Okay, unregistered.

802
00:49:06,353 --> 00:49:07,233
Easy.

803
00:49:07,375 --> 00:49:11,447
You you opened the eShop for the first time and it got a new account status?

804
00:49:11,447 --> 00:49:11,948
Easy.

805
00:49:11,948 --> 00:49:17,871
Also the call that does the registration is literally called like account registration
account register.

806
00:49:17,871 --> 00:49:20,142
So it's like ~ like something registered.

807
00:49:20,142 --> 00:49:27,375
I forgot that well so it's was pretty obvious that after that call it it's changed it to
an R state, so it's registered.

808
00:49:27,456 --> 00:49:30,417
T is after a system threat.

809
00:49:32,278 --> 00:49:36,541
the console that received the account from a different console changed the state to T.

810
00:49:36,541 --> 00:49:37,283
So

811
00:49:37,283 --> 00:49:39,554
I can only assume it's referring to transferred.

812
00:49:39,554 --> 00:49:41,665
So this was probably T

813
00:49:41,665 --> 00:49:48,259
i the distinguishing of T and R was probably for Nintendo support more than anything, I
imagine.

814
00:49:48,259 --> 00:49:50,740
Because it changes nothing.

815
00:49:50,740 --> 00:49:52,802
It's it behaves exactly the same as R.

816
00:49:52,802 --> 00:50:06,625
So and then there's P which will be funny to speak about here because if anyone got eShop
banned ever from like st the Street Broken Dates

817
00:50:06,625 --> 00:50:09,526
of the times of Pokemon Sun and Moon.

818
00:50:09,526 --> 00:50:12,787
Congratulations, you're stuck on the P State loop.

819
00:50:14,128 --> 00:50:27,054
Because the Nint for what I and for what I saw out of a band console, Nintendo does not
have banning code ready at all because they they they just break your 3DS essentially by

820
00:50:27,054 --> 00:50:28,475
doing a different thing.

821
00:50:28,475 --> 00:50:30,815
They put it stuck on the loop.

822
00:50:33,497 --> 00:50:33,849
it

823
00:50:33,849 --> 00:50:34,440
They don't

824
00:50:34,440 --> 00:50:40,825
have a way to the the way they ban someone from the shop is breaking the shop for that
person.

825
00:50:40,825 --> 00:50:41,971
essentially.

826
00:50:41,971 --> 00:50:42,832
Yes.

827
00:50:43,634 --> 00:50:44,980
That's so funny.

828
00:50:44,997 --> 00:50:45,758
Because

829
00:50:45,758 --> 00:50:51,801
when you get the P state, the PDS c it does one very ch call chain, specific call chain.

830
00:50:53,422 --> 00:50:57,545
I thought it was called account transfer no, wait, no, it was talking about register.

831
00:50:57,545 --> 00:50:58,205
Okay, sorry.

832
00:50:58,205 --> 00:51:06,130
But like ~ but yeah, like when you get to a P-State, the p the console knows that, ~ I'm
not registered.

833
00:51:06,130 --> 00:51:11,193
However, I received an indication that I'm supposed to receive an account.

834
00:51:11,959 --> 00:51:25,060
And I'm going to do the the ~ the identification chain calls, it's like a set of calls of
of with soap to receive the account that I'm supposed to receive.

835
00:51:25,060 --> 00:51:33,547
It does that process and then you get slapped with the soap error of nine two four I think
it was nine two four if I'm not mistaken on my memory.

836
00:51:34,328 --> 00:51:35,809
nine two four.

837
00:51:35,869 --> 00:51:40,603
But essentially, once you get nine two four, if I'm not

838
00:51:40,603 --> 00:51:41,063
mistaken.

839
00:51:41,063 --> 00:51:42,414
I think I'm not mistaken.

840
00:51:42,414 --> 00:51:44,503
But I mean it's easy to double check.

841
00:51:44,503 --> 00:51:51,557
It's just go to Google Google and or Doctor Co and zero zero five dash five nine two six.

842
00:51:51,557 --> 00:51:55,618
Nine two six and if anyone's complaining, I know it was that number.

843
00:51:56,419 --> 00:51:57,999
was it nine two six?

844
00:51:58,229 --> 00:52:02,101
but anyway, ~ but I'll I'm double checking while talking.

845
00:52:02,101 --> 00:52:03,651
Essentially that code

846
00:52:05,325 --> 00:52:10,472
Well it's an error for and I don't think it was that number.

847
00:52:10,472 --> 00:52:12,234
numbers are so difficult to remember.

848
00:52:12,234 --> 00:52:13,415
Anyway, but

849
00:52:13,479 --> 00:52:14,295
Sure.

850
00:52:16,581 --> 00:52:17,292
It's fine.

851
00:52:17,292 --> 00:52:17,543
It's

852
00:52:17,543 --> 00:52:17,873
fine.

853
00:52:17,873 --> 00:52:18,534
Don't stress.

854
00:52:18,534 --> 00:52:21,940
I'm I'm following along and I hopefully our listeners are listeners are too.

855
00:52:21,940 --> 00:52:27,107
I don't I if if anyone is out there in the audience yelling right now, it's this number.

856
00:52:27,107 --> 00:52:28,288
Calm down.

857
00:52:28,350 --> 00:52:28,971
Calm down.

858
00:52:28,971 --> 00:52:29,341
Okay.

859
00:52:29,341 --> 00:52:30,943
Nine nine six four.

860
00:52:30,943 --> 00:52:31,534
That was it.

861
00:52:31,534 --> 00:52:32,506
Sorry.

862
00:52:32,506 --> 00:52:34,267
It was close enough, but

863
00:52:34,298 --> 00:52:35,379
Nothing to apologize

864
00:52:35,379 --> 00:52:35,610
for.

865
00:52:35,610 --> 00:52:36,261
I would never know.

866
00:52:36,261 --> 00:52:40,066
But it again, if someone's out there yelling, nine six four, calm down.

867
00:52:40,066 --> 00:52:40,517
Okay.

868
00:52:40,517 --> 00:52:42,009
This is very technical stuff.

869
00:52:42,009 --> 00:52:43,171
Numbers are hard to remember,

870
00:52:43,171 --> 00:52:44,673
like you said, so calm down.

871
00:52:44,673 --> 00:52:46,262
Anyway, continue, please.

872
00:52:46,262 --> 00:52:51,664
nine six four, which is literally described because when you have cleaned into I can
actually get the text a little easier.

873
00:52:51,664 --> 00:52:53,706
You don't see this text on the 3DS.

874
00:52:53,706 --> 00:52:59,749
IE ~ IAS transferred to same device, not allowed

875
00:53:02,075 --> 00:53:09,081
So it's so it's literally trying to do an account transfer from itself to itself.

876
00:53:10,469 --> 00:53:14,303
~ and because it can't, it's basically broken.

877
00:53:16,135 --> 00:53:18,898
that's that's diabolical, honestly.

878
00:53:18,898 --> 00:53:19,809
I kinda hate

879
00:53:19,809 --> 00:53:21,451
it and love it at the same time.

880
00:53:21,451 --> 00:53:29,069
Cause it's like it sounds like lazy programmer bullcrap, but at the same time it sounds so
effective that why change it, you know?

881
00:53:29,313 --> 00:53:30,824
I I can tell you one thing.

882
00:53:30,824 --> 00:53:36,257
I probably they didn't really know how to change either not change it or they didn't
bother.

883
00:53:36,257 --> 00:53:39,158
They just found the first thing that would work quicker.

884
00:53:39,819 --> 00:53:40,567
Because

885
00:53:40,567 --> 00:53:41,942
Sounds right.

886
00:53:42,000 --> 00:53:45,842
because I do know about this.

887
00:53:45,842 --> 00:53:58,219
I heard I hear I heard it and like the company that backboned the development of the fr of
like this API was brought on.

888
00:53:58,447 --> 00:54:00,518
Which then was bought by Acer.

889
00:54:00,618 --> 00:54:03,697
And I'm talking from an Acer laptop, but that doesn't none sense.

890
00:54:03,697 --> 00:54:18,157
But but but essentially Acer bought or bought that section of Broadon or brought whatever
the hell it was from Brodon that basically apparently would affect Nintendo.

891
00:54:18,157 --> 00:54:20,069
~ I don't know to what point.

892
00:54:20,069 --> 00:54:21,890
That's not public information.

893
00:54:21,890 --> 00:54:23,671
But that's not public information.

894
00:54:23,671 --> 00:54:27,553
You'd probably have to dig the leaks d the the leaks long enough.

895
00:54:27,553 --> 00:54:28,207
But

896
00:54:28,207 --> 00:54:36,944
The act of finding out that there is a company is not difficult because the strings on the
3DS you see the Broadon slapped in there.

897
00:54:36,944 --> 00:54:44,130
So you just have to do a little searching and you find out that Broadon is a company that
got bought by Acer.

898
00:54:44,130 --> 00:54:54,397
But like ~ I assume that probably the the relations between ~ Nintendo and Broadon after
Acer probably were a little more complicated.

899
00:54:54,397 --> 00:54:56,440
I assume, I imagine.

900
00:54:58,061 --> 00:55:00,963
~ I cannot confirm no deny because I have no clue.

901
00:55:00,963 --> 00:55:02,764
Don't A don't sue me, Acer.

902
00:55:02,764 --> 00:55:04,225
I didn't say anything.

903
00:55:04,225 --> 00:55:05,006
I don't know.

904
00:55:05,006 --> 00:55:06,126
I actually have no idea.

905
00:55:06,126 --> 00:55:07,958
~ I'm curious.

906
00:55:07,958 --> 00:55:11,410
I wish I kinda knew what happened behind the scenes.

907
00:55:11,410 --> 00:55:14,162
Well I don't know.

908
00:55:14,162 --> 00:55:16,813
Only if Nintendo decides to speak about it, I guess.

909
00:55:16,813 --> 00:55:18,621
But I doubt that.

910
00:55:18,621 --> 00:55:20,442
I don't a hundred percent.

911
00:55:20,442 --> 00:55:21,536
probably never will.

912
00:55:21,536 --> 00:55:21,696
Yeah.

913
00:55:21,696 --> 00:55:22,580
Yeah,

914
00:55:22,580 --> 00:55:23,497
we'll never know.

915
00:55:23,497 --> 00:55:29,677
only if a developer that breaks NDA or leaves NDA, the NDA breaks probably would speak.

916
00:55:29,677 --> 00:55:31,261
~ size that no.

917
00:55:31,261 --> 00:55:43,676
But ~ but yeah, essentially the broad on probably was not there to help as well, or
probably not fast enough because Broken Street Dates probably was the decision that made

918
00:55:43,676 --> 00:55:50,209
Nintendo quickly find a way to break like a way of like people not actually gang online.

919
00:55:51,409 --> 00:55:53,310
~ to the shop

920
00:55:53,531 --> 00:56:00,316
because you could be banned by the way you could be banned on your console for like
cheating if you did cheat.

921
00:56:00,377 --> 00:56:03,018
But you can still open the eShop by the way.

922
00:56:03,399 --> 00:56:04,930
You can still buy games if you want.

923
00:56:04,930 --> 00:56:10,985
You can't play online but screw you but you can you can definitely buy games if you want.

924
00:56:10,985 --> 00:56:17,411
~ the the the

925
00:56:17,411 --> 00:56:17,871
weird.

926
00:56:17,871 --> 00:56:19,793
Nintendo is so weird.

927
00:56:19,793 --> 00:56:20,393
I love

928
00:56:20,393 --> 00:56:21,814
but they're so weird.

929
00:56:21,814 --> 00:56:26,526
And I s ~

930
00:56:26,526 --> 00:56:29,159
how NIM how broken NIM is.

931
00:56:29,361 --> 00:56:35,751
well how badly programmed ~ in some regards NIM is, I would be here for a few hours.

932
00:56:35,751 --> 00:56:36,703
But any

933
00:56:36,703 --> 00:56:37,304
I

934
00:56:37,304 --> 00:56:49,040
I do get kind of skews c to the question I did another question I did have because it
sounds like stuff like that is a real console specific challenge of a unique

935
00:56:49,040 --> 00:57:00,657
challenge to modding this particular device is it sounds like there's like eighteen clocks
going at the same time and you have to f and you have to work with clock number two, four,

936
00:57:00,657 --> 00:57:02,548
and eight to get the thing to mod.

937
00:57:02,548 --> 00:57:04,815
That's what it sounds like to me, is that

938
00:57:04,815 --> 00:57:06,166
Like this thing has so many things.

939
00:57:06,166 --> 00:57:12,200
This thing has so this thing is a gobbledygook of of processors and programming.

940
00:57:12,201 --> 00:57:24,450
And it sounds like because of that, to me, and tell me if I'm wrong, it sounds to me like
because of this gobbledygook, it has taken so much work reverse engineering it to do these

941
00:57:24,450 --> 00:57:30,474
things like soap transfers because of all these different things, because of it sounds
like a mess in there, honestly.

942
00:57:30,474 --> 00:57:31,543
It sounds like a mess.

943
00:57:31,543 --> 00:57:32,705
being nice.

944
00:57:32,705 --> 00:57:35,320
Anyway, well a

945
00:57:35,320 --> 00:57:35,550
right.

946
00:57:35,550 --> 00:57:37,612
a mess is being simplified.

947
00:57:38,140 --> 00:57:38,604
wow.

948
00:57:38,604 --> 00:57:39,328
Okay.

949
00:57:39,328 --> 00:57:41,330
No, that's on no that's no that

950
00:57:41,330 --> 00:57:42,051
things are okay.

951
00:57:42,051 --> 00:57:42,933
Some things are okay.

952
00:57:42,933 --> 00:57:43,804
Some things are okay.

953
00:57:43,804 --> 00:57:44,997
But not most of the things.

954
00:57:44,997 --> 00:57:46,029
but talking to you.

955
00:57:46,029 --> 00:57:46,610
And the more I'm

956
00:57:46,610 --> 00:57:54,662
learning about like 'cause I lurk on the homebrew server and I watch people help solve ~
people's problems with through DS and some of the solutions

957
00:57:54,662 --> 00:57:55,173
they come up with.

958
00:57:55,173 --> 00:57:57,806
I'm like, what is going on in this little machine?

959
00:57:57,806 --> 00:57:58,319
It's like

960
00:57:58,319 --> 00:57:59,802
had I had to build custom

961
00:57:59,802 --> 00:58:02,135
solutions for f few people before, yeah.

962
00:58:02,557 --> 00:58:03,408
my gosh.

963
00:58:03,408 --> 00:58:03,848
Yeah.

964
00:58:03,848 --> 00:58:11,014
~ soap because but soap transfers sound particularly complicated because you're talking to
Nintendo servers.

965
00:58:11,155 --> 00:58:20,834
And because of that, you have to find a way to not get banned, but also be able to
transfer your stuff over to a different region so you could use the eShop, so you could

966
00:58:20,834 --> 00:58:23,457
use the Pokemon Bank and things like that.

967
00:58:23,457 --> 00:58:28,641
If I'm if I if I'm right, if I if if what you're telling me, if I'm understanding
correctly.

968
00:58:29,529 --> 00:58:32,870
Okay, the challenge of the the challenge of transferring.

969
00:58:32,870 --> 00:58:36,531
Why would you need a tool in the countr in like in the first place?

970
00:58:37,991 --> 00:58:41,252
or at least why would anyone try to build a tool in the first place?

971
00:58:41,412 --> 00:58:47,634
I remember that people that bought why people bought auto region consoles was because it
was cheaper.

972
00:58:47,634 --> 00:58:54,296
Because they were being sculped in the US, a bit in the Europe's and but Japan was still
okay.

973
00:58:54,296 --> 00:58:55,283
Yes it still is.

974
00:58:55,283 --> 00:58:55,554
now.

975
00:58:55,554 --> 00:58:58,016
It's exactly the same thing, mid twenty twenty

976
00:58:58,016 --> 00:58:58,356
six.

977
00:58:58,356 --> 00:59:01,869
That's the so many people are buying Japanese consoles.

978
00:59:02,320 --> 00:59:02,860
yeah, as this

979
00:59:02,860 --> 00:59:04,212
as supplies dwindle.

980
00:59:04,212 --> 00:59:05,623
Absolutely it's gonna keep going.

981
00:59:05,623 --> 00:59:08,136
Cause there aren't any more of these things being made, folks.

982
00:59:08,136 --> 00:59:11,419
If you want a three DS, now is the time 'cause it's not gonna get any better.

983
00:59:11,419 --> 00:59:11,843
Anyway.

984
00:59:11,843 --> 00:59:22,789
I and I wanna buy the Chin the Chinese one I saw in the listing in the ch in Bao Hau but ~
whatever you say that name, the the application is purely in Chinese.

985
00:59:22,789 --> 00:59:26,171
~ it's ~ but it's

986
00:59:26,171 --> 00:59:27,681
not easy to ship.

987
00:59:28,622 --> 00:59:32,494
not easy to ship because it has a battery and it doesn't let you buy immediately.

988
00:59:32,494 --> 00:59:39,028
I have to talk to the seller and then the seller has to speak in Chinese and it's like But
anyway I also need to have

989
00:59:39,028 --> 00:59:40,128
money on the ready.

990
00:59:40,128 --> 00:59:41,413
But ~

991
00:59:41,413 --> 00:59:52,942
Essentially the people would buy the console, they would reach and change it, and they
couldn't buy the couldn't buy they couldn't open the shop.

992
00:59:53,323 --> 00:59:54,494
But why couldn't they open a shop?

993
00:59:54,494 --> 00:59:55,545
There's two reasons.

994
00:59:55,545 --> 01:00:02,210
One was very simple to solve if it was if you were lucky, which was like, Okay, return
back to the Japanese region.

995
01:00:02,210 --> 01:00:07,495
~ open the shop without any Nintendo ID account in your system.

996
01:00:07,495 --> 01:00:10,657
Like could like in the settings, nothing like

997
01:00:10,725 --> 01:00:13,548
You just delete the data and first open the eShop.

998
01:00:13,548 --> 01:00:16,531
It will probably error once and then it'll open normally.

999
01:00:16,531 --> 01:00:18,212
There's a chance of doing that.

1000
01:00:18,793 --> 01:00:23,197
Then you delete the eShop, immediately region change.

1001
01:00:23,497 --> 01:00:24,578
And open it.

1002
01:00:24,819 --> 01:00:25,940
With the eShop.

1003
01:00:25,940 --> 01:00:27,641
If you're lucky that was enough.

1004
01:00:29,219 --> 01:00:30,570
If you are not lucky, you'd

1005
01:00:30,570 --> 01:00:33,771
have to buy a second Japanese console to transfer to another one.

1006
01:00:33,956 --> 01:00:35,352
for God's sakes.

1007
01:00:36,732 --> 01:00:45,256
But why but why in the hell would you need why in the hell would you need to buy and
transfer to a second console?

1008
01:00:45,256 --> 01:00:46,956
Okay.

1009
01:00:46,956 --> 01:00:48,897
Now we get to the nitty gritty.

1010
01:00:50,218 --> 01:00:51,358
Yay.

1011
01:00:53,459 --> 01:00:56,180
So there's a thing in the VTS called preinstalls.

1012
01:00:57,681 --> 01:00:58,981
Of which survives

1013
01:00:58,981 --> 01:01:00,621
the eShop deletions.

1014
01:01:02,362 --> 01:01:18,949
Your console, and basically every console, came with at least one title pre-installed,
which it there's multiple, but one of the earlier ones was the 3D video demo.

1015
01:01:21,173 --> 01:01:29,656
If you ever not seen that, it's literally an application that you open it, there's a video
player and a video that you can turn on the 3D.

1016
01:01:30,297 --> 01:01:31,717
It's just a demonstration.

1017
01:01:31,717 --> 01:01:32,798
That's it.

1018
01:01:33,758 --> 01:01:33,988
It's

1019
01:01:33,988 --> 01:01:36,239
just it's a demonstration.

1020
01:01:36,379 --> 01:01:41,842
However, that demonstration is enough to make things confusing.

1021
01:01:41,842 --> 01:01:50,317
Anyone that was able to just open the eShop?

1022
01:01:50,317 --> 01:01:54,413
after like just deleting it back in the original region, you're lucky.

1023
01:01:54,413 --> 01:02:00,592
That means your console was already transferred from one to another in in its entire
lifespan.

1024
01:02:01,114 --> 01:02:05,951
If your console does not want to open after the eShop deletion, it was never transferred.

1025
01:02:08,067 --> 01:02:18,463
Essentially, no matter how many times you delete the eShop and you to go back in the
Japanese eShop or whatever region eShop because it is not just Japanese, whatever original

1026
01:02:18,463 --> 01:02:21,425
eShop region, you'd get back those titles.

1027
01:02:21,425 --> 01:02:23,346
You'd get back the princess.

1028
01:02:24,787 --> 01:02:27,889
Basically the princess would return to you.

1029
01:02:30,671 --> 01:02:34,633
because they were meant to stay with your console unless they were transferred.

1030
01:02:35,449 --> 01:02:38,042
Because it's like it came with your console.

1031
01:02:38,042 --> 01:02:45,500
Like you had the bundle of the you had you had game console bundles that probably came I
don't remember which ones.

1032
01:02:45,741 --> 01:02:49,748
I don't remember ~ which like exactly.

1033
01:02:49,748 --> 01:02:53,252
~ Mario Le Mario Maker, I think.

1034
01:02:53,252 --> 01:02:54,503
So there there were a few.

1035
01:02:54,503 --> 01:02:55,961
Yeah, there were a few, yeah.

1036
01:02:55,961 --> 01:02:59,542
If it was not a physical copy, it would come at digitally.

1037
01:02:59,822 --> 01:03:02,443
And it would s be stuck to your console.

1038
01:03:02,443 --> 01:03:12,326
That's why that's why there was the if you never heard of at the time there was a thing
was called the universal ticket.

1039
01:03:12,326 --> 01:03:16,447
The universal ticket was a ticket that was signed for every console, basically.

1040
01:03:16,447 --> 01:03:17,827
It would work in any console.

1041
01:03:17,827 --> 01:03:23,939
~ because it was signed with the account ID of zero zero.

1042
01:03:23,939 --> 01:03:26,791
Zero zero zero zero zero zero exatestable.

1043
01:03:26,791 --> 01:03:27,751
AK nothing.

1044
01:03:27,751 --> 01:03:29,232
It's not assigned to account.

1045
01:03:29,232 --> 01:03:37,136
~ at least if you open the e if you act the eShop before connecting it to the store ever ~
the ticket would be there.

1046
01:03:39,518 --> 01:03:51,625
unfortunately, ~ that whole story, as as pretty as it is, it those titles when you ever
when you try to open the eShop in the wrong region

1047
01:03:52,793 --> 01:03:56,015
It would tell you that the title was not available.

1048
01:03:56,215 --> 01:04:00,488
The error you don't see, because there's soap ears nobody sees.

1049
01:04:00,488 --> 01:04:15,757
You have to have ways to either intercept the egg the connections w re signing or using
tools like cleaning the you don't see the errors, the descriptive errors, unless you have

1050
01:04:15,757 --> 01:04:19,589
the tools telling them to you and the error was literally

1051
01:04:19,589 --> 01:04:23,153
That title ID basically was just not available in that region.

1052
01:04:23,153 --> 01:04:27,138
Or at least it didn't exist or s I don't remember the exact detects now.

1053
01:04:27,138 --> 01:04:29,440
But basically it just didn't exist.

1054
01:04:29,440 --> 01:04:31,402
For the shopping question, it didn't exist.

1055
01:04:31,402 --> 01:04:33,225
~ you were stuck.

1056
01:04:33,225 --> 01:04:34,126
Congratulations.

1057
01:04:34,126 --> 01:04:37,209
You can't open it besides the the shop itself.

1058
01:04:37,690 --> 01:04:40,993
However, if you system transfer to a different console,

1059
01:04:42,587 --> 01:04:43,962
They no longer exist.

1060
01:04:45,723 --> 01:04:53,793
They would be given to the other console and no matter what happens on that console,
deleting the eShop, ~ transferring to a different console, whatever the hell you want to

1061
01:04:53,793 --> 01:04:57,731
do with it, it would never return to the pr original console.

1062
01:04:57,731 --> 01:05:02,685
The preinstalls would be gone out of that console and your life would be easier.

1063
01:05:02,685 --> 01:05:10,089
You just have to delete the eShop, ~ like count on the eShop, go to the new region, and da
da.

1064
01:05:10,090 --> 01:05:12,572
S clean ninty was just a tool to make things easier.

1065
01:05:12,572 --> 01:05:14,893
~

1066
01:05:16,680 --> 01:05:18,590
Basically Clean Indy will do

1067
01:05:20,485 --> 01:05:27,132
The system transfer process but it will also do the eShop delete process if you need if
you want it.

1068
01:05:28,094 --> 01:05:32,345
I don't know if you saw the list of commands that was available for cleaning day.

1069
01:05:32,899 --> 01:05:34,661
Did you see that list?

1070
01:05:37,411 --> 01:05:40,956
I'm I mean I see I I'm looking at the GitHub page.

1071
01:05:41,037 --> 01:05:42,303
Is that what I'm looking for?

1072
01:05:42,303 --> 01:05:44,448
I don't have the comments described.

1073
01:05:44,448 --> 01:05:48,084
You probably seen the w axe wiki, right?

1074
01:05:51,311 --> 01:05:52,873
The wiki dot axe.

1075
01:05:54,133 --> 01:05:54,785
I have s

1076
01:05:54,785 --> 01:05:55,520
that I've seen.

1077
01:05:55,520 --> 01:06:00,855
I have that right in front of me and that I tried I tried reading this and my brain
melted.

1078
01:06:01,633 --> 01:06:06,696
but if you go to features because they explain it for me, someone wrote this for me, thank
you.

1079
01:06:06,696 --> 01:06:08,317
Anyway, I don't wanna write this.

1080
01:06:08,317 --> 01:06:10,198
I'm lazy for text, but

1081
01:06:10,492 --> 01:06:11,563
Ha ha.

1082
01:06:12,240 --> 01:06:25,849
but basically you have a few commands, some of them is just preparation, but you have
system transfer, which will not transfer the Nintendo like the Nintendo Nintendo Network

1083
01:06:25,849 --> 01:06:26,929
ID account.

1084
01:06:27,119 --> 01:06:29,349
It was just transferred the eShop itself.

1085
01:06:30,410 --> 01:06:39,042
because there was two account systems, which was the eShop account, the e-commerce
account, the SOAP account, whatever you want to call it, and it was a Nintendo ID account.

1086
01:06:39,042 --> 01:06:39,722
They would link.

1087
01:06:39,722 --> 01:06:41,473
They virtually link to each other.

1088
01:06:41,473 --> 01:06:45,734
But they ~ they they're different accounts.

1089
01:06:45,734 --> 01:06:52,186
You just need to get rid of the the the the the eShop account that's stuck with the
preinstalls.

1090
01:06:52,186 --> 01:06:53,996
You don't need to remove the Nintendo ID.

1091
01:06:53,996 --> 01:06:56,137
~

1092
01:06:56,137 --> 01:06:59,880
at least if you intended to return to the original region with that Nintendo ID account.

1093
01:06:59,880 --> 01:07:06,744
But essentially you transferred to a donor, you probably heard this b ~ this talk.

1094
01:07:06,744 --> 01:07:11,768
~ maybe if you s if you searched wh all things were happening.

1095
01:07:11,928 --> 01:07:17,012
And donors were literally usually dead consoles at the time.

1096
01:07:17,012 --> 01:07:23,976
With Nintendo ~ like Nintendo Homebrew when Nintendo Homebrew was helping and I was
basically developing that program.

1097
01:07:26,833 --> 01:07:31,517
It's just consoles that are either dead or they are irrelevant, like nobody's using them.

1098
01:07:31,517 --> 01:07:35,400
So we could just ch change the region at any time and transfer stuff to it.

1099
01:07:36,101 --> 01:07:40,144
Unfortunately we have to wait seven days per per donor per transfer.

1100
01:07:41,986 --> 01:07:46,030
because you you can only transfer one time every seven days in the 3DS.

1101
01:07:46,030 --> 01:07:53,626
Probably those donors, if Nintendo looked at the logs of the transfers of those of those
consoles, they probably are like, Hum, well there's so many

1102
01:07:53,626 --> 01:07:54,577
transfers.

1103
01:07:54,869 --> 01:07:58,411
If there's if there's log of the transfers it's gonna be a lot of them.

1104
01:07:58,411 --> 01:07:59,392
But

1105
01:07:59,872 --> 01:08:00,718
my.

1106
01:08:01,073 --> 01:08:03,094
I mean they've been used multiple times.

1107
01:08:03,094 --> 01:08:19,094
So ~ but yeah, like I've used them for research, I've used them for transfer and ~ we
basically we do the favor to the people of you don't have to buy the console, we have a

1108
01:08:19,094 --> 01:08:21,955
set of consoles we can use to

1109
01:08:22,169 --> 01:08:23,169
just in the command line.

1110
01:08:23,169 --> 01:08:26,290
We don't have to f have physically the consoles together.

1111
01:08:27,071 --> 01:08:44,088
Emulate them in the normal connection process to essentially Hi, I would like to transfer
from console A to console B and Nintendo would say yes or no, usually yes, unless we

1112
01:08:44,088 --> 01:08:44,638
messed up.

1113
01:08:44,638 --> 01:08:45,498
But

1114
01:08:46,419 --> 01:08:47,199
Yeah.

1115
01:08:47,619 --> 01:08:50,961
I mean s I mean if I do a mistake it's a whole different story.

1116
01:08:50,961 --> 01:08:51,761
But

1117
01:08:51,921 --> 01:09:00,247
essentially I would tell it to just transfer, the transfer will complete, the console
would enter and register, and you just open the eShop and there's no s pre-installs.

1118
01:09:00,247 --> 01:09:01,508
Congratulations.

1119
01:09:01,508 --> 01:09:05,290
You can your your console is free for basically forever.

1120
01:09:05,290 --> 01:09:10,133
I only saw one case where the pre-installs returned and I have no idea why.

1121
01:09:10,174 --> 01:09:16,618
I assume that I assume that Nintendo might have might have had to restore a backup of some
sort.

1122
01:09:16,618 --> 01:09:17,899
I don't know why.

1123
01:09:18,680 --> 01:09:19,290
I can only

1124
01:09:19,290 --> 01:09:21,149
imagine what happened in the background.

1125
01:09:21,149 --> 01:09:29,976
~ like I I feel like there was just something in infrastructure that happened that day
because I never seen the Princess return to the console except like one time.

1126
01:09:29,976 --> 01:09:34,260
~ I assume it was just metrical timing.

1127
01:09:34,260 --> 01:09:36,842
~ but yes.

1128
01:09:37,753 --> 01:09:38,503
well.

1129
01:09:38,744 --> 01:09:39,985
I work in infrastructure

1130
01:09:39,985 --> 01:09:42,288
as well, so I would understand that.

1131
01:09:42,288 --> 01:09:45,450
But I would understand that.

1132
01:09:45,450 --> 01:09:47,251
I'm a technician, I suffer.

1133
01:09:47,251 --> 01:09:49,793
And you but ~

1134
01:09:50,713 --> 01:09:55,109
I wouldn't have gone to bed at four thirty last night if I didn't have infrastructure

1135
01:09:55,109 --> 01:09:55,913
work.

1136
01:09:58,567 --> 01:10:02,433
So that's your wait, so that's your main that's your full time job is is

1137
01:10:05,773 --> 01:10:06,974
Wow.

1138
01:10:07,696 --> 01:10:11,843
No wonder you need a break from this every now and again, because it's kinda like your
job, it sounds like.

1139
01:10:11,843 --> 01:10:17,621
So you like need to step back a little bit every now and again to avoid some burnout, it
sounds like.

1140
01:10:17,753 --> 01:10:18,013
Yeah.

1141
01:10:18,013 --> 01:10:20,967
I actually spoken to my boss about the 3DS stuff as well.

1142
01:10:20,967 --> 01:10:21,848
But

1143
01:10:22,543 --> 01:10:23,784
That's amazing.

1144
01:10:24,245 --> 01:10:25,585
That's awesome.

1145
01:10:25,726 --> 01:10:26,466
Wow.

1146
01:10:26,466 --> 01:10:31,523
So so I gotta say, you have given us so much information.

1147
01:10:31,523 --> 01:10:34,174
We we're we're over an hour at this.

1148
01:10:34,715 --> 01:10:36,046
We're over an hour at this point.

1149
01:10:36,046 --> 01:10:37,883
We should probably start wrapping up.

1150
01:10:37,883 --> 01:10:38,743
~

1151
01:10:38,743 --> 01:10:39,024
flies.

1152
01:10:39,024 --> 01:10:42,047
I I I got to the point I was as I was about to say.

1153
01:10:42,047 --> 01:10:42,928
I stand up.

1154
01:10:42,928 --> 01:10:43,909
I'm walking around.

1155
01:10:43,909 --> 01:10:45,291
I'm literally pacing right now.

1156
01:10:45,291 --> 01:10:46,582
I'm s literally explaining things.

1157
01:10:46,582 --> 01:10:49,695
I know you cannot see me.

1158
01:10:50,197 --> 01:10:50,546
But

1159
01:10:50,546 --> 01:10:54,143
wanted to get out or sh is this a good is this a good stopping point?

1160
01:10:54,427 --> 01:10:56,638
Okay, I am going to say a few things.

1161
01:10:57,519 --> 01:10:58,077
I didn't

1162
01:10:58,077 --> 01:11:01,942
I didn't explain you the ARM 7 in the two CPU scenarios, by the way.

1163
01:11:01,942 --> 01:11:04,042
I was just going to tell you something real quick.

1164
01:11:04,423 --> 01:11:04,633
And

1165
01:11:04,633 --> 01:11:11,467
I'm going to and I want to tell you about the the attempts of protecting against exploits
in the 3DS, because I didn't explain that as well.

1166
01:11:11,467 --> 01:11:13,328
So I'm going to try to be quick.

1167
01:11:13,369 --> 01:11:14,069
The ARM 7

1168
01:11:14,069 --> 01:11:18,771
only exists for two reasons: DSI mode, GBA mode.

1169
01:11:18,872 --> 01:11:19,682
That's it.

1170
01:11:19,682 --> 01:11:21,073
Essentially.

1171
01:11:21,221 --> 01:11:25,023
You can if you didn't know, you can play GBA in your 3DS.

1172
01:11:25,423 --> 01:11:28,965
But ~ did you know?

1173
01:11:29,471 --> 01:11:29,952
Yes.

1174
01:11:29,952 --> 01:11:32,733
Yeah, I I play GBA games all the time on it.

1175
01:11:33,028 --> 01:11:35,629
And there's the open source if you've seen it.

1176
01:11:35,629 --> 01:11:39,411
The open source launcher for the for the GBA ROMs.

1177
01:11:39,411 --> 01:11:42,753
That's some limitations because the system doesn't support everything.

1178
01:11:42,753 --> 01:11:44,624
Itself, the support the hardware itself.

1179
01:11:44,624 --> 01:11:48,236
But like that's that's it.

1180
01:11:48,316 --> 01:11:49,507
I didn't mention it.

1181
01:11:49,507 --> 01:11:51,803
I mentioned that I was going to explain it and I didn't explain it.

1182
01:11:51,803 --> 01:11:52,806
I just remembered.

1183
01:11:52,806 --> 01:11:53,210
So

1184
01:11:53,210 --> 01:11:54,362
you you remembered better

1185
01:11:54,362 --> 01:11:54,965
than I did.

1186
01:11:54,965 --> 01:11:58,215
It's all in one ear, out the other.

1187
01:11:58,215 --> 01:12:00,825
You remembered better than I did, so I appreciate that.

1188
01:12:00,825 --> 01:12:01,145
Yes.

1189
01:12:01,145 --> 01:12:08,559
~ but yeah like basically ~ that's it.

1190
01:12:08,559 --> 01:12:10,280
~ but now protections.

1191
01:12:10,280 --> 01:12:14,452
What does Nintendo try to do in the console asides the obvious code patching?

1192
01:12:14,452 --> 01:12:16,253
~

1193
01:12:18,117 --> 01:12:27,055
There's the obvious code patches to fix the exploit entry point itself, but they have done
other things to attempt to the event the events of a successful exploitation.

1194
01:12:30,445 --> 01:12:41,075
One of the things that they did was at the time there was an exploit at the time, like
around version nine point something or ten point something, I forgot which version.

1195
01:12:41,075 --> 01:12:43,036
There was a the firm launch.

1196
01:12:44,619 --> 01:12:54,328
Like the firm launch exploit essentially would run ask ~ I think if I recall correctly,
you d you get enough remissions and essentially trick the system into launching a custom

1197
01:12:54,328 --> 01:12:54,768
firmware.

1198
01:12:54,768 --> 01:12:56,129
~

1199
01:12:57,839 --> 01:12:59,432
You'd break the chain.

1200
01:12:59,432 --> 01:13:07,055
But after but their attempt to prevent this was firm launches are meant for

1201
01:13:09,101 --> 01:13:11,982
to to start the S D S mode slash D SI mode.

1202
01:13:11,982 --> 01:13:17,645
~ and to start GVA mode to start different like firmwares.

1203
01:13:17,645 --> 01:13:22,787
~ and I think to start safe mode as well if you do the combo.

1204
01:13:22,787 --> 01:13:25,268
But like I don't think it started directly.

1205
01:13:25,268 --> 01:13:29,229
Well yeah you you had to start yeah the safe mode as well.

1206
01:13:30,130 --> 01:13:37,873
Basically they made a variable that if any application starting started

1207
01:13:38,967 --> 01:13:45,419
after the system has booted, not counting the home s menu.

1208
01:13:45,419 --> 01:13:48,760
Like you open the game, you open the store, you open anything.

1209
01:13:48,760 --> 01:13:51,680
You open the ~ browser as well, I think.

1210
01:13:53,061 --> 01:13:54,401
it's like anything.

1211
01:13:55,422 --> 01:13:59,603
You firm launches have been prohibited, basically.

1212
01:13:59,603 --> 01:14:00,883
Basically.

1213
01:14:02,384 --> 01:14:03,984
it just it would prevent this.

1214
01:14:03,984 --> 01:14:05,184
This was one of the protections.

1215
01:14:05,184 --> 01:14:07,715
Another thing they did, remember me telling

1216
01:14:07,715 --> 01:14:13,466
about how you just when you know where things are, you could just basically use the GPU to
write data.

1217
01:14:16,347 --> 01:14:18,198
They randomized the addresses.

1218
01:14:18,438 --> 01:14:20,519
They did P S P

1219
01:14:20,599 --> 01:14:22,800
they did P A S L R.

1220
01:14:22,800 --> 01:14:29,583
~ which is it's just L S R with physical addressing.

1221
01:14:29,583 --> 01:14:32,604
~ I need to remember the abbreviation.

1222
01:14:32,604 --> 01:14:33,784
But anyway.

1223
01:14:34,445 --> 01:14:42,588
Your console, when you open a game, the addresses that you see in the CPU are not the same
they're gonna be for the GPU.

1224
01:14:42,788 --> 01:14:44,751
But you can know where things are.

1225
01:14:44,751 --> 01:14:51,604
when things are relatively consistent because you just know it's gonna load in the same
place at the same time every time you open.

1226
01:14:51,604 --> 01:14:53,645
So at the game.

1227
01:14:53,645 --> 01:14:58,146
So you just need to know where things are and you just tell the GPU to do the thing.

1228
01:14:58,547 --> 01:15:13,493
They changed it by randomizing by randomizing the physical address space while the while
the no while the the virtual address space stayed the same.

1229
01:15:13,839 --> 01:15:17,151
But basically it's address based layout randomization.

1230
01:15:17,151 --> 01:15:19,229
I had to search up because I forgot the previous.

1231
01:15:19,229 --> 01:15:20,652
But ~

1232
01:15:22,703 --> 01:15:27,096
This would break the exploits most of the time.

1233
01:15:27,617 --> 01:15:29,058
We worked around it.

1234
01:15:29,058 --> 01:15:31,099
We still worked around it anyway.

1235
01:15:31,300 --> 01:15:32,991
I was not part of that sorry.

1236
01:15:32,991 --> 01:15:37,389
It was behind it was before I was actually getting into the nitty-gritty at the time.

1237
01:15:37,389 --> 01:15:52,025
But one way that people worked around it, I forgot who worked around it, if it was me or
more, yellows eight or other or I don't know if Derek was on the scene.

1238
01:15:52,025 --> 01:15:53,935
I forg ~ names forget about it.

1239
01:15:53,935 --> 01:15:54,780
I forget them.

1240
01:15:54,780 --> 01:15:55,903
But like

1241
01:15:57,851 --> 01:16:00,083
You do you do two copy operations.

1242
01:16:00,083 --> 01:16:06,168
You do it copy from where the code will be because it would stay still around the same
section.

1243
01:16:06,168 --> 01:16:09,841
It just would be randomized in the pages.

1244
01:16:09,841 --> 01:16:15,996
~ it was just do a little shuffling first and then we actually start playing the game.

1245
01:16:15,996 --> 01:16:26,965
But you'd copy out of the code into accessible memory, like l like linear memory, which is
consistent.

1246
01:16:28,259 --> 01:16:34,825
It does not randomize so that's all that and you just look for the memory pages they were
looking for.

1247
01:16:34,825 --> 01:16:35,795
Okay.

1248
01:16:35,856 --> 01:16:38,458
Visible address space is in this location.

1249
01:16:38,458 --> 01:16:43,262
Virtual address space this is virtual address space is in this address.

1250
01:16:43,262 --> 01:16:44,603
So etc.

1251
01:16:44,603 --> 01:16:49,877
You just it'd find it's fine what you want to and then you'd get to the to the point.

1252
01:16:49,877 --> 01:16:53,330
Okay, my code is here, I exploit my code here.

1253
01:16:53,330 --> 01:16:53,991
Okay.

1254
01:16:53,991 --> 01:16:54,930
But basically it.

1255
01:16:54,930 --> 01:16:56,731
That's how we worked around that one.

1256
01:16:56,731 --> 01:16:59,842
There was other exploits methods and other fixes.

1257
01:16:59,842 --> 01:17:05,223
There was things that I cannot remember right now and they're very specific.

1258
01:17:05,223 --> 01:17:07,014
They're very like memory specific

1259
01:17:07,014 --> 01:17:15,126
and I would not get it I would not s it would take way too long to one ~ quickly
reinterpret what it was, ~ because I forgot.

1260
01:17:15,126 --> 01:17:18,067
And two I blah

1261
01:17:18,167 --> 01:17:23,248
and two to explain it as well would take way too long.

1262
01:17:23,248 --> 01:17:24,705
That's that's

1263
01:17:24,705 --> 01:17:26,736
we'll have maybe we'll have you back.

1264
01:17:26,736 --> 01:17:31,909
Maybe we'll have you back to explain all that stuff because the gist of it, the gist of it
basically

1265
01:17:31,909 --> 01:17:43,535
is well Nintendo would try several different methods to stop what y'all were doing and
y'all were smart enough to eventually figure out how to work around it or break it or what

1266
01:17:43,535 --> 01:17:43,966
have you.

1267
01:17:43,966 --> 01:17:46,827
~ yeah, break it again.

1268
01:17:46,827 --> 01:17:48,038
Which is how we're here today.

1269
01:17:48,038 --> 01:17:49,729
Which is how we're here today because

1270
01:17:49,729 --> 01:17:52,870
and they stopped eventually because they don't make them anymore.

1271
01:17:53,251 --> 01:17:53,789
Man.

1272
01:17:53,789 --> 01:17:54,669
They

1273
01:17:54,730 --> 01:18:01,775
~ they did stop at one point and then they patched something and we had to have N set nine
again ~ happen.

1274
01:18:01,789 --> 01:18:03,998
I I I think

1275
01:18:03,998 --> 01:18:07,000
I think due to legal reasons someone told me this.

1276
01:18:07,000 --> 01:18:11,263
I'm not sure about this one, but due to legal reasons to have the rights to do DMCA.

1277
01:18:11,514 --> 01:18:13,695
you have to do any attempts to do protection.

1278
01:18:13,695 --> 01:18:20,431
So I wouldn't be surprised if Nintendo at some point actually sent a a attempt to patch
something.

1279
01:18:20,431 --> 01:18:23,375
~ just to keep whatever.

1280
01:18:23,375 --> 01:18:27,366
they want whatever legal rights to DMCA if they need to.

1281
01:18:27,366 --> 01:18:30,307
But ~ at least some

1282
01:18:30,507 --> 01:18:31,897
yeah, keeping the rights of something.

1283
01:18:31,897 --> 01:18:38,649
Because if they don't do any attempts to protect things, they lose like I think they lose
the rights to do things.

1284
01:18:38,649 --> 01:18:42,890
At least like ~ to protect the system, I guess, certain certain things.

1285
01:18:42,890 --> 01:18:45,101
~ they might not care about the 3DS

1286
01:18:45,101 --> 01:18:47,512
as much now, but it's still their stuff.

1287
01:18:47,512 --> 01:18:49,652
And if you know Nintendo

1288
01:18:53,318 --> 01:19:07,269
i i if you have a game from your j from your n S N E S times and you wanna play it on your
PC emulation No They're very aggressive in that regard.

1289
01:19:07,269 --> 01:19:07,691
Yes.

1290
01:19:07,691 --> 01:19:10,221
That's all we'll say because I don't want to be shut down.

1291
01:19:11,059 --> 01:19:12,042
I don't know

1292
01:19:12,042 --> 01:19:12,943
if they're listening.

1293
01:19:12,943 --> 01:19:14,303
I hope they're not.

1294
01:19:14,303 --> 01:19:15,383
Because we

1295
01:19:15,383 --> 01:19:17,784
we're coming from a place of positivity, Nintendo.

1296
01:19:17,784 --> 01:19:18,875
We love the three DS.

1297
01:19:18,875 --> 01:19:20,445
We're coming from a place of positivity.

1298
01:19:20,445 --> 01:19:20,885
Please.

1299
01:19:20,885 --> 01:19:23,246
~ my god.

1300
01:19:23,246 --> 01:19:24,427
I love it so much.

1301
01:19:24,427 --> 01:19:25,805
I love it so much.

1302
01:19:25,805 --> 01:19:29,086
it's for it was for the 3DS I met my current girlfriend as well.

1303
01:19:29,086 --> 01:19:30,127
Yay.

1304
01:19:30,601 --> 01:19:32,161
that's adorable.

1305
01:19:32,161 --> 01:19:33,483
~ my God.

1306
01:19:33,483 --> 01:19:34,833
That's great.

1307
01:19:35,213 --> 01:19:36,894
~ we've been going for

1308
01:19:36,894 --> 01:19:38,475
an hour twenty, basically.

1309
01:19:38,475 --> 01:19:39,355
Holy moly.

1310
01:19:39,355 --> 01:19:40,256
~

1311
01:19:40,256 --> 01:19:41,546
that's that's amazing though.

1312
01:19:41,546 --> 01:19:48,869
I've I have learned, man, I have learned so much today about how these things work, about
system transfers and everything.

1313
01:19:48,869 --> 01:19:53,331
I d I knew I know so I feel like I know so much more now before I walked into this.

1314
01:19:53,331 --> 01:19:54,072
So thank you.

1315
01:19:54,072 --> 01:19:57,871
Because you did a great job explaining things for a

1316
01:19:57,903 --> 01:20:01,946
intellectual child such as myself and I really appreciate

1317
01:20:02,051 --> 01:20:05,669
And I feel like I didn't explain everything properly anyway.

1318
01:20:05,669 --> 01:20:11,644
Someone is going to be screaming at me, I feel like at least in but like

1319
01:20:11,644 --> 01:20:11,794
them.

1320
01:20:11,794 --> 01:20:11,954
You

1321
01:20:11,954 --> 01:20:20,401
did a great I'm telling you as an absolute idiot, you did a great job because I understood
what you were saying and I learned, like I said, I learned a lot.

1322
01:20:20,401 --> 01:20:27,918
So if I learned a lot, people who are ~ on the same wavelength as me, maybe a little
smarter, will also have learned something.

1323
01:20:27,918 --> 01:20:29,278
That's important.

1324
01:20:29,290 --> 01:20:29,590
I'm

1325
01:20:29,590 --> 01:20:41,702
gonna say however, if anyone has corrections to what I said, or at least better or better
descriptions to what I said, please go ahead because I'm not the best explaining things.

1326
01:20:41,702 --> 01:20:44,566
~

1327
01:20:44,566 --> 01:20:55,986
an invitation for to leave comments, folks, if you have If you want a correction or go
into a deeper dive about something that we covered today, please feel free to do so in the

1328
01:20:55,986 --> 01:20:56,992
comments.

1329
01:20:56,992 --> 01:20:57,643
Especially

1330
01:20:57,643 --> 01:21:00,637
about the names of the people because I'm very bad at that board.

1331
01:21:00,637 --> 01:21:03,398
~ like who did what basically.

1332
01:21:03,398 --> 01:21:04,982
like there are so many people involved.

1333
01:21:04,982 --> 01:21:07,137
It sounds like there are a lot of people involved.

1334
01:21:07,137 --> 01:21:09,111
It's it sounds like you can't keep track of everybody.

1335
01:21:09,111 --> 01:21:09,801
Fine.

1336
01:21:09,801 --> 01:21:13,766
sure if it's I wouldn't say like probably a lot.

1337
01:21:13,766 --> 01:21:16,789
If more like there's at least enough people.

1338
01:21:16,789 --> 01:21:18,752
You probably hear fireworks in the background.

1339
01:21:18,752 --> 01:21:19,532
I don't know why.

1340
01:21:19,532 --> 01:21:20,864
There's something happening outside.

1341
01:21:20,864 --> 01:21:22,636
I'm sorry everyone if you hear that.

1342
01:21:22,636 --> 01:21:29,303
But I don't know if the soccer game finished for the Americans or football.

1343
01:21:29,347 --> 01:21:30,733
Someone want a football game,

1344
01:21:30,733 --> 01:21:32,494
or as we say, soccer.

1345
01:21:32,494 --> 01:21:33,595
I don't know why.

1346
01:21:33,715 --> 01:21:35,827
~ so man, I wanna

1347
01:21:35,827 --> 01:21:40,370
I wanna thank you for taking the time because it's late where you are now.

1348
01:21:40,370 --> 01:21:43,182
It's like almost a I'm guessing it's almost 11 p.m.

1349
01:21:43,182 --> 01:21:44,422
where you are.

1350
01:21:45,023 --> 01:21:45,473
Yeah,

1351
01:21:45,473 --> 01:21:46,364
my goodness.

1352
01:21:46,364 --> 01:21:48,155
~ so thank you so much.

1353
01:21:48,155 --> 01:21:51,067
I mean, maybe we'll have you back to explain more things because

1354
01:21:51,067 --> 01:21:53,596
Like I said, I feel like I learned a lot.

1355
01:21:53,596 --> 01:21:56,363
And friends who are listening go ahead, sorry.

1356
01:21:56,497 --> 01:22:03,365
I was just gonna say, I not kinda like the having the explaining the things to people.

1357
01:22:03,406 --> 01:22:05,690
I don't know, it's f it's fun to explain things.

1358
01:22:05,690 --> 01:22:06,390
Unfortunately

1359
01:22:06,390 --> 01:22:10,125
I'm not the most structured in regards to explaining things.

1360
01:22:10,125 --> 01:22:11,657
But well.

1361
01:22:11,910 --> 01:22:13,022
This isn't a white paper.

1362
01:22:13,022 --> 01:22:14,013
It's a conversation.

1363
01:22:14,013 --> 01:22:17,528
So don't s conversations aren't usually structured in any way.

1364
01:22:17,528 --> 01:22:18,739
So don't stress about it.

1365
01:22:18,739 --> 01:22:19,283
It was fine.

1366
01:22:19,283 --> 01:22:20,961
It was great, actually.

1367
01:22:21,062 --> 01:22:21,866
I loved it.

1368
01:22:21,866 --> 01:22:32,013
of ~ the meme of the I forgot what show that was, but the guy at the w a board doing an
investigation, going literally mental with all the points connected, and just trying to

1369
01:22:32,013 --> 01:22:33,013
explain.

1370
01:22:33,325 --> 01:22:34,686
It's excellent.

1371
01:22:34,686 --> 01:22:35,286
Yeah, yeah.

1372
01:22:35,286 --> 01:22:37,478
I know exactly what you no, no, you did great.

1373
01:22:37,478 --> 01:22:38,989
We we covered I had

1374
01:22:38,989 --> 01:22:40,430
~ about ten questions.

1375
01:22:40,430 --> 01:22:42,262
We covered all of them, basically.

1376
01:22:42,262 --> 01:22:43,963
So you did great.

1377
01:22:43,963 --> 01:22:44,954
No stress.

1378
01:22:44,954 --> 01:22:45,995
So friends,

1379
01:22:45,995 --> 01:22:50,388
I hope you enjoyed this first interview for three DSCAS.

1380
01:22:50,388 --> 01:22:51,719
It's not my first interview.

1381
01:22:51,719 --> 01:22:53,671
I've done more before, but I haven't done one in a while.

1382
01:22:53,671 --> 01:22:56,805
So again, I'm I I apologize if I was rusty.

1383
01:22:56,805 --> 01:22:58,466
But I think we had a great time.

1384
01:22:58,466 --> 01:22:59,917
I learned a lot, friends.

1385
01:22:59,917 --> 01:23:01,398
I hope you learned a lot too.

1386
01:23:01,398 --> 01:23:02,919
Thank you so much for listening.

1387
01:23:02,919 --> 01:23:06,040
~ and have a great, enjoyful day.

1388
01:23:06,040 --> 01:23:08,355
And enjoy and if you enjoy your 3DS.

1389
01:23:08,355 --> 01:23:10,463
And if you don't have one, get one.

1390
01:23:10,463 --> 01:23:13,304
Have a great day, everyone, and we'll see you next time.

1391
01:23:13,925 --> 01:23:14,265
Huh?

1392
01:23:14,265 --> 01:23:17,307
~ yeah.

1393
01:23:17,707 --> 01:23:18,028
yeah.

1394
01:23:18,028 --> 01:23:18,608
I'm I'm

1395
01:23:18,608 --> 01:23:20,999
I'm gonna try and do a buying guide at some point.

1396
01:23:20,999 --> 01:23:23,973
I've been learning a lot about good ways to find a product.

1397
01:23:23,973 --> 01:23:24,704
Or 3DS.

1398
01:23:24,704 --> 01:23:26,767
So I do want to do a buying guide at some point.

1399
01:23:26,767 --> 01:23:28,089
Yeah, avoid the scalpers.

1400
01:23:28,089 --> 01:23:30,792
It's not that hard if you know where to look.

1401
01:23:30,853 --> 01:23:31,965
so have a great day, everyone.

1402
01:23:31,965 --> 01:23:34,128
Have some joyful gaming and we'll see you next time.

1403
01:23:34,128 --> 01:23:35,119
Bye bye.

1404
01:23:35,727 --> 01:23:36,601
People.