Tutorial  Updated

Layered FS With Updated exefs

If you want to use NTR CFW's LayeredFS plugin with a game that has had it's code updated; like Super Smash Brothers, you will need to extract the exefs from the update. I will explain how this is done.

Required Tools:

Step 1: Find game TID
Goto 3dsdb and search for the name of your game and copy the titleid of it somewhere, for example the TID of the US version of "Super Smash Brothers" is "00040000000EDF00".

Step 2: Dump ticket.db
Now we need to dump the tickets from your 3DS, so launch Decrypt9 WIP. Select "EmuNAND" or "SysNAND" options, depending on where the update is installed. The proceed to "File Dump" and select "ticket.db". Then press A, this might take a few moments to complete. When it is done power off your 3DS and copy "Decrypt9/ticket.db" to where you put FunkyCIA2.

Step 3: Download the update
Using the TID we found before, in this case "00040000000EDF00"; we need to change it slightly to get the update from FunkyCIA2. To figure out what the TID of the update is we need to replace the first eight digets of the TID to "0004000E", so Smash would be "0004000E000EDF00". Now open a terminal in the directory of FunkyCIA2 and execute "python FunkyCIA2.py ticket.db -title <TITLE ID>", for smash this would be "python FunkyCIA2.py ticket.db -title 0004000E000EDF00". Since the updates can be large this might take a while.

Step 4: Decrypt the update
Now that we have the update downloaded, we need to decrypt it. You need to copy the cia to your SD card, so copy the CIA from the CIA folder that FunkyCIA2 creates to "D9Game/". Then launch Decrypt9 again. Select "game Decryptor Options", then "CIA Decryptor (deep)". Again, this might take a while to complete. Now shutdown your 3DS.

Step 5: Extract exefs
Now copy the cia to a working directory on your computer. Then open a shell in the work dir and execute "ctrtool --content=content <TID>.cia", for Smash this would be "ctrtool --content=content 0004000e000edf00.cia". Then execute "ctrtool --exefs=exefs.bin <content>", where content is the larger content file, again for Smash this would be "ctrtool --exefs=exefs.bin content.0000.00000012".

Step 6: Create plugin
Replace the CTRTool that it has with the one you downloaded. Copy exefs.bin to "workdir" in the layeredFS directory, and open a shell. Execute "ctrtool --decompresscode -t exefs --exefsdir=workdir/exefs workdir/exefs.bin", then execute "python locate.py workdir/exefs/code.bin" and enter the path you want. If you want a sub-directory just separate the directory names with a forward-slash "/". Then press enter to disable language emulation. Execute "cd plugin", then set your PATH to include DevkitARM. On Windows this would be "set PATH=%PATH%;<devkit arm>", on my computer it is "set PATH=%PATH%;D:\devkitPro\devkitARM\bin". Now execute "python build.py", there should be a file called "layeredfs.plg" in the plugin directory.

Step 7: Install plugin
Create a directory in the root of your SD card called "plugin", and in there create a directory with the TID of your application, for Smash this is "00040000000EDF00". Copy layeredfs.plg into the directory with the TID. I recommend creating a text document in the plugin directory that lists the TIDs of the applications that you have plugins for.

Step 8: Profit


Please note:
It is legal to share the layeredFS plugins, since they just use the code to find a few pointers in the exefs; this means that they do not use anything that is in the CIA.
 
Last edited by gudenau,

pokemoner2500

Well-Known Member
Member
Joined
Aug 14, 2013
Messages
882
Trophies
1
Age
24
XP
1,588
Country
United States
I guess this answers my PM, thanks!

EDIT: I used your plugin and the screen doesn't flash green and nothing custom loads. Is it due to the fact that I'm using an o3ds?
 
Last edited by pokemoner2500,

pokemoner2500

Well-Known Member
Member
Joined
Aug 14, 2013
Messages
882
Trophies
1
Age
24
XP
1,588
Country
United States
You're using a cfw right?
Yep, rxtools and NTR CFW 3.0, I have a layeredfs.plg working with Fire Emblem If so I know it's not NTR or my CFW, and yes my Smash is on 1.1.2, I think it may be due to the fact I'm on an o3ds and it has to reboot but even then I believe it would still flash green.
 

LoganK93

Well-Known Member
Member
Joined
Dec 5, 2012
Messages
672
Trophies
1
Age
31
XP
1,992
Country
United States
Yep, rxtools and NTR CFW 3.0, I have a layeredfs.plg working with Fire Emblem If so I know it's not NTR or my CFW, and yes my Smash is on 1.1.2, I think it may be due to the fact I'm on an o3ds and it has to reboot but even then I believe it would still flash green.

Yeah I can't help much there as I have a N3DS. But I'm running the exact same setup (rxtools and then ntr 3.0) are you sure your smash Bros is the same region as the plugin was created for?
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
  • Veho @ Veho:
    The fuuuuu---
  • Veho @ Veho:
    I thought it was an actual xBox at that price.
  • Sicklyboy @ Sicklyboy:
    I wanna grab a 360 Slim and a 360 E one of these days. Missed the boat of getting them at their lowest though, once they were discontinued. Could've got them for cheap back when I was a broke 20 something working at Target, but then again, I was a broke 20 something working at Target
  • Veho @ Veho:
    Being broke is no fun.
  • K3Nv2 @ K3Nv2:
    @Sicklyboy, $150 isn't that bad for a jtag slim on ebay
  • Veho @ Veho:
    I only wish it was actually playable.
  • Veho @ Veho:
    There's a guy on the Tube of You that makes playable mechanical arcade games out of Lego. This could work on the same principle.
  • Veho @ Veho:
    Just a couple of guys taking their manatee out for some fresh air, why you have to molest them?
  • Veho @ Veho:
    Stupid Chinese shop switched their shipping company and this one is slooooooow.
  • LeoTCK @ LeoTCK:
    STOP BUYING CHINESE CRAP THEN
  • LeoTCK @ LeoTCK:
    SUPPORT LOCAL PRODUCTS, MAKE REVOLUTION
  • LeoTCK @ LeoTCK:
    THEY KEEP REMOVING LOCAL SHIt AND REPLACING WItH INFERIOR CHINESE CRAP
  • LeoTCK @ LeoTCK:
    THATS WHY MY PARTNER CANT GET A GOOTWEAR HIS SIZE ANYMORE
  • LeoTCK @ LeoTCK:
    HE HAS BIG FOOT AND BIG DUCK
  • LeoTCK @ LeoTCK:
    d*ck i mean*
  • LeoTCK @ LeoTCK:
    lol
  • Veho @ Veho:
    Mkay.
  • Veho @ Veho:
    I just ordered another package from China just to spite you.
  • SylverReZ @ SylverReZ:
    Communism lol
  • SylverReZ @ SylverReZ:
    OUR products
  • The Real Jdbye @ The Real Jdbye:
    @LeoTCK actually good quality products are dying out because they can't compete with dropshipped chinese crap
    +1
    The Real Jdbye @ The Real Jdbye: @LeoTCK actually good quality products are dying out because they can't compete with dropshipped... +1