edit: I can't emphasize this enough.
If there are errors, check the guide under T5 first, then learn how to report from there ><

Converting .3DS/3DZ to .CIA Pictorial

Hopefully noob friendly!​

UPDATED! V5.1.4b @ UTC+8 2.45am 24-Nov-14:​

http://filetrip.net/3ds-downloads/utilities/download-quenopack-3ds-to-cia-5-1-4b-f33005.html​

​

Updated calling routine:​

Most questions all in front, so that users can doze off after​

Included the most recent exinjector & rsfgen.py​

Testing 32-bit compatibility​

​

Note: Haven't updated tutorial, but the prompts should be fool proof.​

Table of contents.​

T1 - Disclaimer​

T2 - Basics​

T3 - Requirements​

_____What you need to know, what programs to have.​

T4 - The Main Tutorial​

_____Steps 0, 1 & 2.​

T5 - Reference code (and how to report errors)​

_____Reference code 1 - 5, Faux errors, how to report errors​

T6 - [The not so] Frequently Asked Questions (FAQ)​

_____Is it region free, does .3DZ work, help w/ errors, what not to do​

T7 - User Guides and Credits!!!​

_____Valiant effort by our community.​

​

Control+Find the header number (eg: T5 ) to jump to the section!​

T1 - Disclaimer

​

gbaTEMP and I shall not be responsible for your own misdoing and misdeeds. ​

Use at your own risk! ;P​

T2 - Basics

What are .cia files?​

Basically a somewhat stripped down decrypted version of .3DS files.​

You can't just rename .3DS > .CIA, you have to carry out a set of slightly complicated steps,​

which I have tried to get it dummified.​

Make sure you follow the steps concisely.​

Now, purpose of this tutorial is to guide users to convert 3DS games (not warez, not dev apps) to .CIA files for installation.​

​

Does not matter whether .3DS or .3DZ, and scene roms won't need to add 'header' to go online (GW users should know what's I'm talking about)​

T3 - Requirements

​

First off, these are the requirements:​

1. Using a 3DS that is FW 4.1-4.5 (also known as FW 4.X)
   I recommend that these users get a Gateway 3DS.
   .
2. A DS flashcart that works on your 3DS, for loading DS profile exploit
   Supercard DStwo or GW blue card (r4i) works.
   Gateway loader works fine. (cannot link you the link)
   .
3. Install 2.7 Python. You can find it will a quick Google search.
   Or just download the one for your computer from here:
   https://www.python.org/download/releases/2.7/
   ...
4. This package.
   Paste it on your desktop, in a folder named "CIA"
   http://filetrip.net/3ds-downloads/utilities/download-quenopack-3ds-to-cia-5-1-4b-f33005.html
   
   Please the files in the folders they were in.
   The program reads the stuff based on the location!
   I will not provide the 7.x key. To find it, simply search the guy who leaked it. ><
   .
5. A game backup (rom)
   .
6. Patience, and not fearful of looking at folders with multiple items!

Okay, let's get started.

T4 - The Main Tutorial

​

Video Version:It's based on older revisions, but still counts.
Thanks to TeamNinja for uploading, and DrWhoJan who brought it to our attention!

Spoiler

Step 0: Tools usage and folder placement

Spoiler

Okay before we begin,
a short reminder: strictly please use only the tools I provided for this tutorial:
http://filetrip.net/3ds-downloads/utilities/download-quenopack-3ds-to-cia-5-1-4b-f33005.html

The folder layout and location of the files are to be the same,
as I have optimized the calling procedure of the .bats (the programs).

Unless you have a working understanding of reading those and modifying them to your liking,
I suggest you follow as I have provided

As an addition, follow the images to unblock the .rar, before unzipping:

Step 1: Decrypting the Rom

Spoiler

1a. Getting ncchinfo.bin

Spoiler

Go to CIA\Step 1
Paste your rom in this folder.
Rename it to "rom.3ds"

Drag the rom.3ds onto ctrKeyGen
A file called ncchinfo.bin will be in your directory.

Now, go to CIA\For 3DS SD Card
Copy the launcher you use over to your 3DS SD card.
I will not provide slot0x25KeyX.bin, so find it yourself.
When you the value, HXD into a blank file, and save as slot0x25KeyX.bin

Spoiler: slot0x25KeyX.bin guide

hxd website: http://mh-nexus.de/en/hxd/

Also copy and paste ncchinfo.bin into the root of the 3DS SD card.

Now insert SD card back into your 3DS

1b. Getting xorpads

Spoiler

Go to your 3DS.
Run System Settings > Other Settings > Profile > Nintendo DS Profile

Spoiler

The program will load and run.
Allow it to run until it tells you, that you can turn off your 3DS.

Once done, insert your SD card back on your computer.
Copy only these xorpads to this directory:
CIA\Step 2
Not every rom provides exefs_7x.xorpad. If you do see it, you must copy it!
Only copy manual.romfs.xorpad if you want to have a user manual option on home screen.

If you game has Download Play support, and you want it,
copy this too:

Step 2: Decrypting + Compiling the .cia!

Spoiler

Move rom.3DS to CIA\Step 2

Drag and drop or Double click on 'decrypt and make.bat'

Hit enter, and it will run.
The latest update has all the questions at the start of the process,
so one may mostly doze off and wait after doing so.
The image that says it all!

When you see this, you are at the end of the program!
If you see install.cia, it means you were successful!

"But Queno138, I want to repack another rom, must I unpack again?"

Spoiler

No!
This feature allows you to repack, as long as you have the items there.
It's been around since, 2.0? I just never properly documented it.

After this image, go up to (continue)

Installation Success!

Spoiler

Custom rsf guide:

Spoiler

T5 - Reference Codes (and how to report errors)

Reference codes has appeared in the batch program, for ease of referencing.

Genuine Errors

Spoiler

Reference code 1: Required .bins not located.

If the required .bins for the operation is not found,
it means that either you deleted it, or it could not be extracted, due to decryption error.

Associated with (and fix):
1. Invalid slot0x25KeyX.bin for FW 7x games (refer to guide on how to acquire it correctly)
2. Files have been moved (kindly keep them in the same place as guide dictates)
3. Decryption error. (Delete everything and try again.)
4. Mismatched tools (Ensure you are using the tools provided)


Reference code 2: rom.3ds not located.

Decryption cannot be done without the exact file, "rom.3ds"

Associated with (and fix):
1. rom name is not rom.3ds (Kindly rename the rom to rom.3ds)
2. rom not in folder (kindly place rom.3ds in Step 2)


Reference code 3: xorpad not located.

Xorpads are required for decryption

Associated with (and fix):
1. xorpad not named as per guide (simple, eg: 01.exefs_norm.xorpad)
2. xorpad not in directory (don't forget to transfer over the xorpad from 3DS SD card)


Reference code 4: Tools folder not found

Tools are required for the operation.

Associated with (and fix):
1. Tools folder has been renamed. (It needs to be named "tools")
2. Tools folder has been moved. (Move it back to the original directory)
3. Tools folder lost. (Redownload and extract the whole package)


Reference code 5: Folders located before decryption

This message only pops up when you have chosen to decrypt a rom.

Associated with:
1. Exefs, Encrypted_bin, decrypted, xorpad folder exists. (delete them before decrypting new rom)
2. Selected choice by accident. (ignore, proceed to pack rom.)

Faux errors:

Spoiler

Some of the text displayed tends to scare users.
If you get any one of these, please don't report, as it's not an error.

Reference code not shown/code persists:

Spoiler

If code persists, or error with no code:
Do us a favor and save each other some time.
Before showing errors,
ensure that:
1. you downloaded the lastest package.
2. followed the tutorial to the latter
3. did not use express

​

If error still occurs:
1. What Game you are using
2. Inform me if you are using CFW or GW
3. Tell me what error you get in game (or if you don't reach there)
4. screenshot \exefs, \decrypted, \xorpads, \step 2
5. show me the error page on the normal bat

this way, easier for me to identify the error.

T6 - [The not so] Frequently Asked Questions (FAQ)

What must I not do?​

Don't go into sysnand and check data management. (content will be deleted)​

Don't forget to back up data when necessary (to prevent losing saves)​

Don't forget to read T5 of my guide regarding errors. (to not plague this thread)​

Don't format 3DS for no reason (I mean, imagine one day you need to upgrade, and can't connect to NNID or something)​

Don't update firmware in CFW (cause it stops working)​

How to install .cia files​

What, you're here without knowing!?​

Basically, get Devmenu or bigbluemenu (can't tell you where)​

Will I be able to delete them afterwards?​

Devmenu and BBM has options for deleting them.​

Just don't delete your updates or important warez by mistake.​

Check the ID against http://3ds.essh.co/​

Does this require FW 4.5 like other exploits​

.....​

You think?​

</sarcasm> YES​

Does this work with trimmed roms?​

YES! (link)​

Does this work with FW 7.X games?​

GW = YES!​

CFW = NO.​

And before you ask, if there were any workarounds​

(well, besides obviously getting a GW that is so worth it now),​

I'll be happy to share.​

Does your tutorial contain "region free and firmware spoofing"?​

YES!​

​

Does the package support download play?​

YES!​

​

Does this work with .3DZ?​

YES!​

After all, it's just a file extension. doesn't affect conversion.​

Does your tutorial contain "user manuals"​

YES!​

I have an existing save on Gateway. Why is it not on the .cia game?​

Imagine the .cia game being like an eshop game.​

Every game comes with a new save.​

Are saves brought forward?​

NO.​

Because that's not how the mechanics of conversion works.​

Gateway makes the redcard 'find and see' the saves, not the homepage apps.​

What about nand saving/card2?​

NO.​

But ONLY for card2, you can use savefiler or save data transfer tool.​

If you were already playing your roms as a card2, go ahead and transfer ​

Why can't I modify to card2 then transfer?​

By making it card2, you broke the header,​

which the 3DS will check if the save is corrupt before transfer.​

Based on the chain of events mentioned, it is considered corrupted.​

Can user manuals be repacked together?​

YES!​

Take note that if using different region game,​

enable region free.​

Does this work with VC roms?​

NO (link) or YES? (link)​

Try it yourself!​

Does this conversion method work with Dev apps (devmenu and SDK stuff)​

NO!​

However, link to show you how to get them converted: (link)​

Do I need .rsf files?​

Up to you. The batch program will generate one for you,​

but if you follow the prompt, you can insert your own.​

Not all work at the moment.​

Can I load games above 4.5 on CFW?​

From what I know, some games require firmware spoofing​

and the FW6/7 games is a big NO​

Where can I find slot0x25KeyX.bin/7.X keys?​

Can't tell you where. But I know who has it (the guy you leaked it, duh)​

get it, type it in hex using HXD, save as slot0x25KeyX.bin​

Paste it into your SD card.​

Why do I see no errors but there is no .cia?​

Most likely you are using express. IF you are noob, just don't.​

Chances are it's decryption or your key 7 is wrong.​

Go to section T5, it'll teach you something.​

It says not enough memory, why? I have x GB ram.​

Well, your computer probably already runs a lot of processes,​

and packing the rom can take up to 2-3x it's original size.​

Don't tell me you got 16GB ram.​

Just go o into safe mode, and launch the .bat there.​

As long as the folders are still there,​

you can choose to continue with repacking, without re-depacking.​

​

If it still doesn't work,​

rename _makerom.exe to makerom.exe and try again.​

​

I've already added a new makerom to circumnavigate that,​

but I still recommend keeping your processes low.​

Help, can't drag and drop on python​

try either option:​

Spoiler

put this into a .bat

c:\Python27\python.exe" ctrKeyGen.py %1

then drag and drop the rom.3ds onto the .bat

Or

regedit
 
[HKEY_CLASSES_ROOT\Python.File\shellex\DropHandler]@="{60254CA5-953B-11CF-8C96-00AA00B8708C}"
 
[HKEY_CLASSES_ROOT\Python.NoConFile\shellex\DropHandler]@="{60254CA5-953B-11CF-8C96-00AA00B8708C}"
 
[HKEY_CLASSES_ROOT\Python.CompiledFile\shellex\Drop Handler]@="{60254CA5-953B-11CF-8C96-00AA00B8708C}"

​

​

What is the express.bat in your package​

It's a program NOT for noobs.​

It doesn't ask questions; simply repacks if there are folders,​

decrypt and unpack if there are xorpads​

Doesn't prompt, just runs.​

It has some preset settings.​

It won't decrypt the whole romfs.bin. Creates its own rsf.​

Due to it's nature, error prompts might be skipped.​

So I repeat,​

It's a program NOT for noobs.​

Help, my errors aren't resolved!​

Do us a favor and save each other some time.​

Before showing errors,​

ensure that:​

1. you downloaded the lastest package.​

2. followed the tutorial to the latter​

3. did not use express​

​

If error still occurs:​

1. What Game you are using​

2. Inform me if you are using CFW or GW​

3. Tell me what error you get in game (or if you don't reach there)​

4. screenshot \exefs, \decrypted, \xorpads, \step 2​

5. show me the error page on the normal bat​

​

this way, easier for me to identify the error.​

​

Wondering if you have a faux error?​

Ctrl Find "T5"​

​

​

T7 - User Guides and Credits!!!

Palantine and the CFW and CIA guide that (almost) started it all!:​

http://gbatemp.net/threads/4-x-only-cia-cfw-complete-guide.373532/​

​

gamesquest1; the first ever decrypting guide I could understand:​

https://gbatemp.net/threads/tutorial-how-to-decrypt-3ds-roms-for-dummies.372653/page-2#post-5136907​

​

ryanrocks462, which I also cross refer to:​

https://gbatemp.net/threads/tutorial-how-to-decrypt-3ds-roms-for-dummies.372653/​

​

Versehell's also very comprehensive guide:​

http://gbatemp.net/goto/post?id=5149679#post-5149679​

​

Liomajor's first most automatic guide:​

http://gbatemp.net/threads/release-...into-repacked-roms.373839/page-7#post-5153600​

​

piratesephiroth's Exinjector!​

http://gbatemp.net/threads/release-exinjector-inject-original-exheaders-into-repacked-roms.373839/​

​

Kyogre123's savedatafiler tutorial​

http://gbatemp.net/threads/how-to-put-savedatafiler-on-homescreen.373756/​

​

relys and the NCCH/SD programs!​

http://gbatemp.net/threads/release-3ds_ctr_decryptor-void.370684/​

​

ground, whom I never spoke to, but I thank your efforts in Exheader research!​

​

Vappy's, rsfgen.py!​

​

​

​

Also to neimod, 3DSguy, 3Dbrew, and many others that slipped my mind!​

​

​

And last but not least,​

everyone on gbatemp ​

​

I'm not reinventing the wheel, I'm merely gathering all information into one.

 

[Queno138]

Yes I am. I am using the exact same RSF file you used in the guide, edited to my dump ofcourse.

The RSF errors are with the 64bit version. I'll see if I can compile a more recent version myself

paste your rsf here in spoiler and code tags

Got the .xorpad for my DLC but not really sure where to go from there. I can xor each file but can't figure any way to get the rest of the information I'd need to make a .cia, thought I might be able to get it from the .tmd file but 3DS Explorer doesn't want to touch it even after xor with the xorpad. Kind of at a dead end for now.

you extracted your dlc using what?
(im curious ><)

 

[OrangeFlavored]

I used SD Decryptor v2 to get xorpads for everything on my SD card (since I don't know which are the DLC) which worked well enough though it gave me 83 xorpads so it might be tedious trying to figure out which are the files I want.

Got it from first post in https://gbatemp.net/threads/release-3ds_ctr_decryptor-void.370684/

 

[Queno138]

I used SD Decryptor v2 to get xorpads for everything on my SD card (since I don't know which are the DLC) which worked well enough though it gave me 83 xorpads so it might be tedious trying to figure out which are the files I want.

Got it from first post in https://gbatemp.net/threads/release-3ds_ctr_decryptor-void.370684/

mind screenshooting the whole list
(or part of the list),

and tell me which DLC you trying to extract?

 

[OrangeFlavored]

mind screenshooting the whole list
(or part of the list),

and tell me which DLC you trying to extract?

This good enough? http://pastebin.com/5m0ib3WW

Right now I mostly want the DLC for Shin Megami Tensei IV (I have no idea what files in my SD card that corresponds to or how to find out...) but I would eventually like to decrypt all of this stuff so that I can put it back on my non-hack 3DS and leave the decrypted copy on the hack 3DS. I've temporarily moved everything over that I bought (using a System Transfer) since I wanted to decrypt it so I could have it on my hack 3DS too.

Well, I have to wait a week before I can transfer it back anyway so not in a real big hurry.

 

[Queno138]

This good enough? http://pastebin.com/5m0ib3WW

Right now I mostly want the DLC for Shin Megami Tensei IV (I have no idea what files in my SD card that corresponds to or how to find out...) but I would eventually like to decrypt all of this stuff so that I can put it back on my non-hack 3DS and leave the decrypted copy on the hack 3DS. I've temporarily moved everything over that I bought (using a System Transfer) since I wanted to decrypt it so I could have it on my hack 3DS too.

Well, I have to wait a week before I can transfer it back anyway so not in a real big hurry.

which region is your SMT

 

[OrangeFlavored]

Region is US/NA region.

 

[Quincy]

Spoiler

BasicInfo:
  Title                  : "Super Smash Bros." # Change this
  CompanyCode            : "00" # Change this
  ProductCode            : "CTR-P-AXCP" # Change this
  ContentType            : Application
  Logo                    : Nintendo
 
TitleInfo:
  UniqueId                : 0x0EE0 # Change this
  Category                : Application
 
Option:
  UseOnSD                : true 
  EnableCompress          : true 
  FreeProductCode        : true 
  EnableCrypt            : true 
  MediaFootPadding        : true 
 
AccessControlInfo:
  UseExtSaveData : true
  ExtSaveDataId: 0x0EE0 # Change this
  SystemSaveDataId1: 0x00000000 
  SystemSaveDataId2: 0x00000000 
  OtherUserSaveDataId1: 0x00000 
  OtherUserSaveDataId2: 0x00000 
  OtherUserSaveDataId3: 0x00000 
  UseOtherVariationSaveData : false
 
SystemControlInfo:
  SaveDataSize: 512KB # Change this
  RemasterVersion: 0 
  StackSize: 0x00040000 
  JumpId: 0x00040000000EE000L # plaintext exheader (<full UniqueID>L)

 

[Queno138]

Region is US/NA region.

I figured out its US.

If you search "000E5C" through your list,
you will find those xorpads are for SMT IV.

Spoiler

BasicInfo:
  Title                  : "Super Smash Bros." # Change this
  CompanyCode            : "00" # Change this
  ProductCode            : "CTR-P-AXCP" # Change this
  ContentType            : Application
  Logo                    : Nintendo
 
TitleInfo:
  UniqueId                : 0x0EE0 # Change this
  Category                : Application
 
Option:
  UseOnSD                : true
  EnableCompress          : true
  FreeProductCode        : true
  EnableCrypt            : true
  MediaFootPadding        : true
 
AccessControlInfo:
  UseExtSaveData : true
  ExtSaveDataId: 0x0EE0 # Change this
  SystemSaveDataId1: 0x00000000
  SystemSaveDataId2: 0x00000000
  OtherUserSaveDataId1: 0x00000
  OtherUserSaveDataId2: 0x00000
  OtherUserSaveDataId3: 0x00000
  UseOtherVariationSaveData : false
 
SystemControlInfo:
  SaveDataSize: 512KB # Change this
  RemasterVersion: 0
  StackSize: 0x00040000
  JumpId: 0x00040000000EE000L # plaintext exheader (<full UniqueID>L)

That's weird: your " UseExtSaveData : true" is fine.

Well, I had to add that line cause my version required it.

You can try removing it, and see what happens.

 

[Queno138]

edit: double post, please remove

 

[OrangeFlavored]

I figured out its US.

If you search "000E5C" through your list,
you will find those xorpads are for SMT IV.



That's weird: your " UseExtSaveData : true" is fine.

Well, I had to add that line cause my version required it.

You can try removing it, and see what happens.

Ok thanks, this helps.

 

[Queno138]

Ok thanks, this helps.

Well even so,

I don't know how to reassemble those files into a .cia

And sadly, bigbluemenu doesn't offer extraction to those files. :/

 

[Quincy]

I figured out its US.

If you search "000E5C" through your list,
you will find those xorpads are for SMT IV.



That's weird: your " UseExtSaveData : true" is fine.

Well, I had to add that line cause my version required it.

You can try removing it, and see what happens.

Told you I was using the exact RSF as you

Without being an wise-ass: I've removed that line, and surely now it's doing something and it's taking a while, so I'm guessing that did the trick. I will report back once it's finished and I've either installed it or errored it out

 

[lisuete]

I´ve tested yoshis new island (4.5+) on CFW with a 4.1.0 firmware 3ds and it works!

 

[Quincy]

Queno138
Is it okay if there isn't any [??] output at all? I ain't seeing nothing and the process isn't eating up memory as I expected. The only thing the bat shows is the command that is executed :S

 

[Queno138]

Told you I was using the exact RSF as you

Without being an wise-ass: I've removed that line, and surely now it's doing something and it's taking a while, so I'm guessing that did the trick. I will report back once it's finished and I've either installed it or errored it out

That's brilliant news!

Queno138
Is it okay if there isn't any [??] output at all? I ain't seeing nothing and the process isn't eating up memory as I expected. The only thing the bat shows is the command that is executed :S

yeah it will not show anything till it shows the warning that ncch and cia won't be encrypted (which is fine)

I´ve tested yoshis new island (4.5+) on CFW with a 4.1.0 firmware 3ds and it works!

Could be the SDK!

The CFW is based off early GW launcher,
and it could run games (firmware spoofing) until pokemon xy and it's lackeys came along.

 

[Quincy]

Well, it errored out. YAY D:

[ROMFS ERROR] Invalid RomFS Binary.
[NCCH ERROR] NCCH Build Process Failed
[RESULT] Failed to build outfile

I'm guessing this has something to do with the encryption? It's Sm4sh, in case you didn't notice yet.

 

[AceyBwoi]

how would one get header used for online into the rsf or the .3ds file before decrypt encrypt build?
where to place it, has anyone confirmed online with a method?

 

[Dark Fulgore]

Could be the SDK!

The CFW is based off early GW launcher,
and it could run games (firmware spoofing) until pokemon xy and it's lackeys came along.

What?! The CFW can run games that requires firmware above 4.5?

 

[Queno138]

how would one get header used for online into the rsf or the .3ds file before decrypt encrypt build?
where to place it, has anyone confirmed online with a method?

you place the header into the game while it is a .3ds.

It's before the WHOLE decryption process.


lack of header won't fail the compiling,
and I'm not sure if lack of header will result of lack of online capability.

you can give it a try, if you want ><

What?! The CFW can run games that requires firmware above 4.5?

I am saying it as an explanation, without citations XD


A lot of users didn't use emunand until some games started locking users out.
it's more of an SDK issue, rather than a FW issue.

It's just that usually, newer FW tends to be newer SDK. citation required.

 

[Ziver.W]

Excuse me,how to rebuild a manual?How should I define the rsf document?