I tried the same process with two of my decrypted .3ds roms, with two different versions of HackingToolkit (4.3 and 5.2) but it doesn't extract anything!
It "extracts" too much fast (I can't even read the extracting process).
I can attempt to help you. So did you after dumping your roms onto your 3DS SD card, move it into the D9Game folder and use Decrypt9 to fully decrypt it? I am assuming you did. Make sure you use the latest version (so 5.2). In the pack hack folder make sure to use SetupUS to install just in case (might help you out). After that open HackingToolkit3DS. Press D and type the rom name without the .3ds extension (I advise that after you decrypt the rom to rename it something simple since special characters and the cmd don't go well) it should decrypt your rom. Also run it as an administrator!
Did you dump the rom using brain dump? I suggest using Uncart if you have a cfw, they actually dump the .3ds file itself and decrypt 9 can easily decrypt that! If you used braindump (correct me if I am wrong) but Braindump actually decrypts the rom as a .cxi file which means you just need to extract it using the 3ds tool in step 3?
Hi, I'm new to 3DS hacking and I want to know how to edit the actual game. I have already extracted all of the stuff but I haven't been able to edit any of the files. I just want to edit the textures and dialogue in Pokemon ORAS.
Hi, I decrypted my installed cia of bravely second using braindump to CXI. I then edited it with Asia81's uncensoring MINI pack and changed the icon.bin using EFE. I repacked the game afterwards following the tutorial but after installing the cia the icon is a black square and it causes an error on launch.
Anyone know where I may have gone wrong or able to help???
EDIT: I realise it may not have helped that there is another guide for .cia's (rather than .3ds). The only real difference however seems to be the decryption method... suggestions?
Thanks for the speedy reply. In a way I'm glad it was something so simple.
So I guess I'll unpack it with D9 then (I assume it'll work fine on A9LH updated sysNAND?) or will the hacking tool kits mass extract command do as good of a job?
With this tutorial, you will be able to decrypt, extract, and rebuild a 3DS ROM / File.
You will also be able to launch X/Y, OmegaRuby/AlphaSapphire without having to update.
Thanks a lot to Ericzander & BullyWiiPlaza for their help to translate this tutorial in english (Because I'm French, it’s difficult to make a full tutorial in a good English...)
If anyone see any typo or something wrong with my english (in the setup, the script, the tutorial...) let me know!
This tutorial will try to help you decrypt a 3DS ROM to change its content and will also explain how to rebuild an edited game.
First Way: Dump your file contents on 10.7 First of all, you'll need to have a way to launch HBs on your 3DS.
For this, I recommend Ninjhax, OoTHax or IronHax if you have an updated payload.
There is some other ways, you can choose one of them here: http://smealum.github.io/3ds/
Once you have access to the HBL, copy the BrainDump folder in your 3ds folder (like another HB).
Start HBL, start BrainDump, and use the Title Selector for choose your game (can also be a system title, but some are not dumpables, same with SDK9+ games).
Press A, and wait while it's dumping.
Once done, you have on your 3DS' SD Card, 1 new cxi file called with a TitleID.
Copy the cxi file in PackHack folder.
Now it's done, go to Extracting.
Second Way: Decrypt your rom on 9.2 First of all, you'll need to have a way to launch HBs on your 3DS.
For this, I recommend BrowserHax or MenuHax.
There is some other ways, you can choose one of them here: http://smealum.github.io/3ds/
Once you have access to the HBL, copy the Decrypt9WIP folder to your 3ds folder (like another HB).
Put in the root of your SD Card: - seeddb.bin - slot0x1BKeyX.bin - slot0x11key96.bin - slot0x25KeyX.bin
In the root of your 3DS' SD Card, create a new folder, and call it D9Game, then put inside YourRom.3ds. Make sure Windows is not hidding extensions.
Start HBL, start Decrypt9WIP, choose Game Decryptor Options, then NCCH/NCSD Decryptor.
Wait while it's decrypting.
Once done, copy and past your decrypted game in your PackHack folder.
Now it's done, go to Extracting.
Note: If you don't see any decrypted files, it's normal. Decrypt9WIP decrypt the game itself. Check the date, it can also be something like 01/01/2000.
If you used the First Way:
Write CXI.
Enter the name of your cxi file (without extension). Your file should not have any spaces in its name, nor special characters.
Wait while it's extracting.
You are asked if you want decompress your code.bin file, choose (y/n).
3 files and the banner folder will be created: - DecryptedExHeader.bin (Can't be used for 3DS Builder...) - DecryptedExeFS.bin - DecryptedRomFS.bin
The ExeFS content will be extracted in an ExtractedExeFS folder.
The RomFS content will be extracted in a ExtractedRomFS folder.
Now you’re able to edit the game, go to Editing.
If you used the Second Way:
Write D, and enter the name of your decrypted file. Your file should not have any spaces in its name, nor special characters.
Wait while it's extracting.
You are asked if you want decompress your code.bin file, choose (y/n).
3 (up to 7) files and the banner folder will be created: - DecryptedExHeader.bin - DecryptedExeFS.bin - DecryptedRomFS.bin - DecryptedDownloadPlay.bin - DecryptedO3DSUpdate.bin - DecryptedN3DSUpdate.bin - DecryptedManual.bin
The ExeFS content will be extracted in an ExtractedExeFS folder.
The RomFS content will be extracted in a ExtractedRomFS folder.
The DownloadPlay content will be extracted in a ExtractedDownloadPlay folder.
The Old3DS update will be extracted in a ExtractedO3DSUpdate folder.
The New3DS update will be extracted in a ExtractedN3DSUpdate folder.
The Manual will be extracted in a ExtractedManual folder, called DecryptedManual.bcma.
The Banner(shown on the Home Menu) will be extracted in a ExtractedBanner folder.
Do what you want.
Edit music, textures..
If you follow this tutorial, you know what you want to do.
Once it's finished, rebuild your game.
Optional: If you want, you can also edit the TitleID of your game.
Open your DecryptedExHeader.bin in HxD, and check the Offsets on the Left, you have the TitleID on the right (Be careful, it's reversed):
In this picture, it's the TitleID for Pokémon Alpha Sapphire.
Open HackingToolkit3DS, write RFSB. RomFS Builder is now open.
With it, open your ExtractedRomFS folder (in PackHack).
Click GO. Wait and save it named RomFS.bin.
Done !
Part 2: Set the files on your SD Card First of all, you'll need to have HBL and HANS ready on your 3DS.
In the root of your 3DS' SD Card, create a new folder, and name it HANS.
Inside, put your new RomFS file, and name it with the TitleID of your game + romfs as the extension.
Do the same for the code.bin file (Only if you edited it). The code.bin is in your ExtractedExeFS folder.
00XXXX00.romfs & 00XXXX00.code
For example, for Pokémon Alpha Sapphire, it's:
It's ready. Start your HBL, then start HANS.
Use the Title Selector, select your game, and confirm.
In HANS, you will have to edit:
And OK, now start your game and check if it's working.
Open HackingToolkit3DS, write RFSB. RomFS Builder is now open.
With it open your ExtractedRomFS folder (in PackHack)
Click GO. Wait and save it named RomFS.bin.
Done !
Part 2: Rebuild your Rom
Open HackingToolkit3DS, write 3DSB. 3DS Builder is now open.
Open an ExtractedRomFS folder, or check the Use a RomFS binary box and select a RomFS binary (Decrypted or Rebuild).
Open an ExtractedExeFS folder, or check the Use a ExeFS binary box and select a ExeFS binary (Decrypted or Rebuild).
Open the DecryptedExHeader.bin for the game you're rebuilding.
Check Media CARD2. If not working in CARD2, try CARD1(so uncheck the button).
If the game in question was released before the tool, 3DS Builder should recognize the game's name and provide the correct serial.
You can also enter a custom serial, if you want, of the form (CTR|KTR)-(P|U|N)-([A-Z0-9]){4}.
Choose a location to save the resulting file.
Hit Go, and the program will generate a playable .3ds.
Optional: Turn this .3ds in .cia for CFW
Downoad 3DS Simple CIA Converter:
Put the .3ds in the rom folder.
Open the tool.
Check FW Spoof and hit Convert 3DS ROM to CIA.
Target the rom folder.
Wait, and the tool will generate a cia file in the cia folder.
Install it.
- Tutorial updated and HackingToolkit3DS updated to V5
-New Build added. You'll have to uninstall the previous Setup and install the new one. For uninstall, it's as all your other tools, use the uninstall.exe in the ProgramFiles folder.
- Added a Full VirusTotal Scan : http://pastebin.com/AzCq4QGD
- FIXED the Pokemon Patch Injection. The Updated Tutorial will follow. - Fixed a typo in the cxi script extraction. -HackingToolkit3DS is always more faster to load (The main file is just 100kb). - New Links
Asia81 In this word:
In the root of your 3DS' SD Card, create a new folder, and call it D9Game, then put inside YourRom.3ds. Make sure Windows is not hidding extensions.
The game is need name YourRom.3ds or it can rename the game?
Asia81 In this word:
In the root of your 3DS' SD Card, create a new folder, and call it D9Game, then put inside YourRom.3ds. Make sure Windows is not hidding extensions.
The game is need name YourRom.3ds or it can rename the game?
I think you are referring to a CIA which you are trying to decrypt? In that case, you shouldn't follow the steps for a .3ds file. Instead follow these:
You need Decrypt9, either through Arm9loaderhax or the HB menu. Note that Decrypt9 has been removed from the official Arm9loaderhax install guide, so you will need to install it yourself. It's easy though. Just place the payload in the luma/payloads folder on your sd card and name it like so: X_Dec9.bin . Replace X with the key you want to hold during boot. For details on how to install a payload, see the Luma3DS wiki.
Aside from that you also need the latest version of the starter pack
Create a folder on the root of your SD card and call it D9Game.
Move the CIA you're trying to decrypt in said folder.
Unplug the SD card from your PC and put it in the 3DS.
Run Decrypt9, and select 'Game Decryptor Options'.
Then select 'CIA Decryptor (deep)'
Wait until it finishes.
Shutdown your 3DS.
Take out the SD card from your 3DS and put it in your PC.
Move the CIA you copied in step 4 to the PackHack folder.
Run PackHack, and enter 'cia', and enter the name of your CIA (without the extension).
I think you are referring to a CIA which you are trying to decrypt? In that case, you shouldn't follow the steps for a .3ds file. Instead follow these:
You need Decrypt9, either through Arm9loaderhax or the HB menu. Note that Decrypt9 has been removed from the official Arm9loaderhax install guide, so you will need to install it yourself. It's easy though. Just place the payload in the luma/payloads folder on your sd card and name it like so: X_Dec9.bin . Replace X with the key you want to hold during boot. For details on how to install a payload, see the Luma3DS wiki.
Aside from that you also need the latest version of the starter pack
Create a folder on the root of your SD card and call it D9Game.
Move the CIA you're trying to decrypt in said folder.
Unplug the SD card from your PC and put it in the 3DS.
Run Decrypt9, and select 'Game Decryptor Options'.
Then select 'CIA Decryptor (deep)'
Wait until it finishes.
Shutdown your 3DS.
Take out the SD card from your 3DS and put it in your PC.
Move the CIA you copied in step 4 to the PackHack folder.
Run PackHack, and enter 'cia', and enter the name of your CIA (without the extension).
Wait until it finishes.
Profit.
All files are saved in either the root or the D9Game folder, depending on the location of the original file.
With this tutorial, you will be able to decrypt, extract, and rebuild a 3DS ROM / File.
You will also be able to launch X/Y, OmegaRuby/AlphaSapphire without having to update.
Thanks a lot to Ericzander & BullyWiiPlaza for their help to translate this tutorial in english (Because I'm French, it’s difficult to make a full tutorial in a good English...)
If anyone see any typo or something wrong with my english (in the setup, the script, the tutorial...) let me know!
This tutorial will try to help you decrypt a 3DS ROM to change its content and will also explain how to rebuild an edited game.
First Way: Dump your file contents on 10.7 First of all, you'll need to have a way to launch HBs on your 3DS.
For this, I recommend Ninjhax, OoTHax or IronHax if you have an updated payload.
There is some other ways, you can choose one of them here: http://smealum.github.io/3ds/
Once you have access to the HBL, copy the BrainDump folder in your 3ds folder (like another HB).
Start HBL, start BrainDump, and use the Title Selector for choose your game (can also be a system title, but some are not dumpables, same with SDK9+ games).
Press A, and wait while it's dumping.
Once done, you have on your 3DS' SD Card, 1 new cxi file called with a TitleID.
Copy the cxi file in PackHack folder.
Now it's done, go to Extracting.
Second Way: Decrypt your rom on 9.2 First of all, you'll need to have a way to launch HBs on your 3DS.
For this, I recommend BrowserHax or MenuHax.
There is some other ways, you can choose one of them here: http://smealum.github.io/3ds/
Once you have access to the HBL, copy the Decrypt9WIP folder to your 3ds folder (like another HB).
Put in the root of your SD Card: - seeddb.bin - slot0x1BKeyX.bin - slot0x11key96.bin - slot0x25KeyX.bin
In the root of your 3DS' SD Card, create a new folder, and call it D9Game, then put inside YourRom.3ds. Make sure Windows is not hidding extensions.
Start HBL, start Decrypt9WIP, choose Game Decryptor Options, then NCCH/NCSD Decryptor.
Wait while it's decrypting.
Once done, copy and past your decrypted game in your PackHack folder.
Now it's done, go to Extracting.
Note: If you don't see any decrypted files, it's normal. Decrypt9WIP decrypt the game itself. Check the date, it can also be something like 01/01/2000.
If you used the First Way:
Write CXI.
Enter the name of your cxi file (without extension). Your file should not have any spaces in its name, nor special characters.
Wait while it's extracting.
You are asked if you want decompress your code.bin file, choose (y/n).
3 files and the banner folder will be created: - DecryptedExHeader.bin (Can't be used for 3DS Builder...) - DecryptedExeFS.bin - DecryptedRomFS.bin
The ExeFS content will be extracted in an ExtractedExeFS folder.
The RomFS content will be extracted in a ExtractedRomFS folder.
Now you’re able to edit the game, go to Editing.
If you used the Second Way:
Write D, and enter the name of your decrypted file. Your file should not have any spaces in its name, nor special characters.
Wait while it's extracting.
You are asked if you want decompress your code.bin file, choose (y/n).
3 (up to 7) files and the banner folder will be created: - DecryptedExHeader.bin - DecryptedExeFS.bin - DecryptedRomFS.bin - DecryptedDownloadPlay.bin - DecryptedO3DSUpdate.bin - DecryptedN3DSUpdate.bin - DecryptedManual.bin
The ExeFS content will be extracted in an ExtractedExeFS folder.
The RomFS content will be extracted in a ExtractedRomFS folder.
The DownloadPlay content will be extracted in a ExtractedDownloadPlay folder.
The Old3DS update will be extracted in a ExtractedO3DSUpdate folder.
The New3DS update will be extracted in a ExtractedN3DSUpdate folder.
The Manual will be extracted in a ExtractedManual folder, called DecryptedManual.bcma.
The Banner(shown on the Home Menu) will be extracted in a ExtractedBanner folder.
Do what you want.
Edit music, textures..
If you follow this tutorial, you know what you want to do.
Once it's finished, rebuild your game.
Optional: If you want, you can also edit the TitleID of your game.
Open your DecryptedExHeader.bin in HxD, and check the Offsets on the Left, you have the TitleID on the right (Be careful, it's reversed):
In this picture, it's the TitleID for Pokémon Alpha Sapphire.
Open HackingToolkit3DS, write RFSB. RomFS Builder is now open.
With it, open your ExtractedRomFS folder (in PackHack).
Click GO. Wait and save it named RomFS.bin.
Done !
Part 2: Set the files on your SD Card First of all, you'll need to have HBL and HANS ready on your 3DS.
In the root of your 3DS' SD Card, create a new folder, and name it HANS.
Inside, put your new RomFS file, and name it with the TitleID of your game + romfs as the extension.
Do the same for the code.bin file (Only if you edited it). The code.bin is in your ExtractedExeFS folder.
00XXXX00.romfs & 00XXXX00.code
For example, for Pokémon Alpha Sapphire, it's:
It's ready. Start your HBL, then start HANS.
Use the Title Selector, select your game, and confirm.
In HANS, you will have to edit:
And OK, now start your game and check if it's working.
Open HackingToolkit3DS, write RFSB. RomFS Builder is now open.
With it open your ExtractedRomFS folder (in PackHack)
Click GO. Wait and save it named RomFS.bin.
Done !
Part 2: Rebuild your Rom
Open HackingToolkit3DS, write 3DSB. 3DS Builder is now open.
Open an ExtractedRomFS folder, or check the Use a RomFS binary box and select a RomFS binary (Decrypted or Rebuild).
Open an ExtractedExeFS folder, or check the Use a ExeFS binary box and select a ExeFS binary (Decrypted or Rebuild).
Open the DecryptedExHeader.bin for the game you're rebuilding.
Check Media CARD2. If not working in CARD2, try CARD1(so uncheck the button).
If the game in question was released before the tool, 3DS Builder should recognize the game's name and provide the correct serial.
You can also enter a custom serial, if you want, of the form (CTR|KTR)-(P|U|N)-([A-Z0-9]){4}.
Choose a location to save the resulting file.
Hit Go, and the program will generate a playable .3ds.
Optional: Turn this .3ds in .cia for CFW
Downoad 3DS Simple CIA Converter:
Put the .3ds in the rom folder.
Open the tool.
Check FW Spoof and hit Convert 3DS ROM to CIA.
Target the rom folder.
Wait, and the tool will generate a cia file in the cia folder.
Install it.
- Tutorial updated and HackingToolkit3DS updated to V5
-New Build added. You'll have to uninstall the previous Setup and install the new one. For uninstall, it's as all your other tools, use the uninstall.exe in the ProgramFiles folder.
- Added a Full VirusTotal Scan : http://pastebin.com/AzCq4QGD
- FIXED the Pokemon Patch Injection. The Updated Tutorial will follow. - Fixed a typo in the cxi script extraction. -HackingToolkit3DS is always more faster to load (The main file is just 100kb). - New Links
It's the first Nintendo Switch firmware update of 2024. Made available as of today is system software version 18.0.0, marking a new milestone. According to the patch...
After a couple days of Nintendo releasing their 18.0.0 firmware update, @SciresM releases a brand new update to his Atmosphere NX custom firmware for the Nintendo...
Today, April 8th, 2024, at 4PM PT, marks the day in which Nintendo permanently ends support for both the 3DS and the Wii U online services, which include co-op play...
Hello, GBAtemp members! After a prolonged absence, I am delighted to announce my return and upgraded form to you today...
Introducing tempBOT AI 🤖
As the embodiment...
With Apple having recently updated their guidelines for the App Store, iOS users have been left to speculate on specific wording and whether retro emulators as we...
Yet another casualty goes down in the never-ending battle of copyright enforcement, and this time, it hit a big website which was the host for many fangames based and...
The highly popular and accurate FPGA hardware, MisterFGPA, has received today a brand new update with a long-awaited feature, or rather, a new core for hardcore...
The time has finally come, and after many, many years (if not decades) of Apple users having to side load emulator apps into their iOS devices through unofficial...
The romhacking community is always a source for new ways to play retro games, from completely new levels or stages, characters, quality of life improvements, to flat...
Retro handheld manufacturer Anbernic is releasing a refreshed model of its RG35XX handheld line. This new model, named RG35XX 2024 Edition, features the same...
It's the first Nintendo Switch firmware update of 2024. Made available as of today is system software version 18.0.0, marking a new milestone. According to the patch...
Today, April 8th, 2024, at 4PM PT, marks the day in which Nintendo permanently ends support for both the 3DS and the Wii U online services, which include co-op play...
Hello, GBAtemp members! After a prolonged absence, I am delighted to announce my return and upgraded form to you today...
Introducing tempBOT AI 🤖
As the embodiment...
After a couple days of Nintendo releasing their 18.0.0 firmware update, @SciresM releases a brand new update to his Atmosphere NX custom firmware for the Nintendo...
With Apple having recently updated their guidelines for the App Store, iOS users have been left to speculate on specific wording and whether retro emulators as we...
The time has finally come, and after many, many years (if not decades) of Apple users having to side load emulator apps into their iOS devices through unofficial...
A new Nintendo Switch firmware update is here. System software version 18.0.1 has been released. This update offers the typical stability features as all other...
Yet another casualty goes down in the never-ending battle of copyright enforcement, and this time, it hit a big website which was the host for many fangames based and...
The highly popular and accurate FPGA hardware, MisterFGPA, has received today a brand new update with a long-awaited feature, or rather, a new core for hardcore...
Nintendo has recently announced through their social media accounts that a new Indie World stream will be airing tomorrow, scheduled for April 17th, 2024 at 7 a.m. PT...
