Hacking (4.x only) CIA CFW Complete Guide

[aliak11]

When I try to import a CIA I get this error, "Summary_invalid_argument(7)".

 

[xyzmanas]

finally got it working, took me two days phew.

 

[Huntereb]

Also, what about the -target option?

"-target" should be set to "d", for "developer".

 

[asesin22]

not working for me forever all steps good but the conection failed failed failed and ip is correct pfffffffffff

 

[Vappy]

"-target" should be set to "d", for "developer".

"-target t" for "test" has worked for me.

 

[Huntereb]

not working for me forever all steps good but the conection failed failed failed and ip is correct pfffffffffff

Try it on another computer. I switched from a Windows 8 computer to a Windows 7 one and now it works every time.

 

[xyzmanas]

not working for me forever all steps good but the conection failed failed failed and ip is correct pfffffffffff

I faced the same problem as you. Go and re-inject the Nand again to the SD card. And if that doesn't work you might need to do it all over again and make a new NAND abckup

 

[Vappy]

When I try to import a CIA I get this error, "Summary_invalid_argument(7)".

How did you make the CIA? If you just converted an encrypted .3ds with -ccitocia it won't work.

 

[asesin22]

I faced the same problem as you. Go and re-inject the Nand again to the SD card. And if that doesn't work you might need to do it all over again and make a new NAND abckup

omg good idea thanks

 

[VerseHell]

Someone can tell me what I'm doing wrong please?

Like I said earlier I decrypted my rom (MK7 this time) using that :
https://gbatemp.net/threads/tutorial-how-to-decrypt-3ds-roms-for-dummies.372653/page-2#post-5136907
( I got this during the decryption process,don't know if it's important :

error programm id mismatch

)
then I put the rsf file and the makerom.exe in the decrypted folder ) and I typed this

makerom.exe -f cia -target d -rsf RSF.rsf -o 3dsrom.cia -exheader exheader.bin -code exefs/code.bin -icon exefs/icon.bin -banner exefs/banner.bin -romfs romfs.bin -logo exefs/logo.bin

I got this

[NCCH WARNING] NCCH AES Key could not be loaded, NCCH will not be encrypted
[CIA WARNING] Common Key could not be loaded, CIA will not be encrypted

I installed the .cia generated with devmenu and when I try to launch the game I have a SD Card Removed black screen error.

Here's my RSF file :

BasicInfo:
  Title                  : "MK7"
  CompanyCode            : "00"
  ProductCode            : "CTR-P-AMKP"
  ContentType            : Application
  Logo                    : Licensed # Nintendo / Licensed / Distributed / iQue / iQueForSystem
 
Rom:
  # Specifies the root path of the file system to include in the ROM.
  HostRoot                : "romfs"
 
 
TitleInfo:
  UniqueId                : 0x00307
  Category                : Application
 
CardInfo:
  MediaSize              : 1GB # 128MB / 256MB / 512MB / 1GB / 2GB / 4GB
  MediaType              : Card1 # Card1 / Card2
  CardDevice              : NorFlash # NorFlash(Pick this if you use savedata) / None
 
 
Option:
  UseOnSD                : true # true if App is to be installed to SD
  FreeProductCode        : true # Removes limitations on ProductCode
  MediaFootPadding        : true # If true CCI files are created with padding
  EnableCrypt            : true # Enables encryption for NCCH and CIA
  EnableCompress          : true # Compresses exefs code
 
ExeFs: # these are the program segments from the ELF, check your elf for the appropriate segment names
  ReadOnly:
  - .rodata
  - RO
  ReadWrite:
  - .data
  - RO
  Text:
  - .init
  - .text
  - STUP_ENTRY
 
PlainRegion: # only used with SDK ELFs
- .module_id
 
AccessControlInfo:
  #UseExtSaveData : true
  #ExtSaveDataId: 0xff3ff
  #UseExtendedSaveDataAccessControl: true
  #AccessibleSaveDataIds: [0x101, 0x202, 0x303, 0x404, 0x505, 0x606]
 
SystemControlInfo:
  SaveDataSize: 512KB
  RemasterVersion: 0
  StackSize: 0x40000
 
# DO NOT EDIT BELOW HERE OR PROGRAMS WILL NOT LAUNCH (most likely)
 
AccessControlInfo:
  FileSystemAccess:
  - Debug
  - DirectSdmc
  - DirectSdmcWrite
 
  IdealProcessor                : 0
  AffinityMask                  : 1
 
  Priority                      : 16
 
  MaxCpu                        : 0x9E # Default
 
  CoreVersion                  : 2
  DescVersion                  : 2
 
  ReleaseKernelMajor            : "02"
  ReleaseKernelMinor            : "33"
  MemoryType                    : Application
  HandleTableSize: 512
  IORegisterMapping:
  - 1ff50000-1ff57fff
  - 1ff70000-1ff77fff
  MemoryMapping:
  - 1f000000-1f5fffff:r
  SystemCallAccess:
    ArbitrateAddress: 34
    Break: 60
    CancelTimer: 28
    ClearEvent: 25
    ClearTimer: 29
    CloseHandle: 35
    ConnectToPort: 45
    ControlMemory: 1
    CreateAddressArbiter: 33
    CreateEvent: 23
    CreateMemoryBlock: 30
    CreateMutex: 19
    CreateSemaphore: 21
    CreateThread: 8
    CreateTimer: 26
    DuplicateHandle: 39
    ExitProcess: 3
    ExitThread: 9
    GetCurrentProcessorNumber: 17
    GetHandleInfo: 41
    GetProcessId: 53
    GetProcessIdOfThread: 54
    GetProcessIdealProcessor: 6
    GetProcessInfo: 43
    GetResourceLimit: 56
    GetResourceLimitCurrentValues: 58
    GetResourceLimitLimitValues: 57
    GetSystemInfo: 42
    GetSystemTick: 40
    GetThreadContext: 59
    GetThreadId: 55
    GetThreadIdealProcessor: 15
    GetThreadInfo: 44
    GetThreadPriority: 11
    MapMemoryBlock: 31
    OutputDebugString: 61
    QueryMemory: 2
    ReleaseMutex: 20
    ReleaseSemaphore: 22
    SendSyncRequest1: 46
    SendSyncRequest2: 47
    SendSyncRequest3: 48
    SendSyncRequest4: 49
    SendSyncRequest: 50
    SetThreadPriority: 12
    SetTimer: 27
    SignalEvent: 24
    SleepThread: 10
    UnmapMemoryBlock: 32
    WaitSynchronization1: 36
    WaitSynchronizationN: 37
  InterruptNumbers:
  ServiceAccessControl:
  - APT:U
  - $hioFIO
  - $hostio0
  - $hostio1
  - ac:u
  - boss:U
  - cam:u
  - cecd:u
  - cfg:u
  - dlp:FKCL
  - dlp:SRVR
  - dsp::DSP
  - frd:u
  - fs:USER
  - gsp::Gpu
  - hid:USER
  - http:C
  - mic:u
  - ndm:u
  - news:u
  - nwm::UDS
  - ptm:u
  - pxi:dev
  - soc:U
  - ssl:C
  - y2r:u
  - ldr:ro
  - ir:USER
 
 
SystemControlInfo:
  Dependency:
    ac: 0x0004013000002402L
    am: 0x0004013000001502L
    boss: 0x0004013000003402L
    camera: 0x0004013000001602L
    cecd: 0x0004013000002602L
    cfg: 0x0004013000001702L
    codec: 0x0004013000001802L
    csnd: 0x0004013000002702L
    dlp: 0x0004013000002802L
    dsp: 0x0004013000001a02L
    friends: 0x0004013000003202L
    gpio: 0x0004013000001b02L
    gsp: 0x0004013000001c02L
    hid: 0x0004013000001d02L
    http: 0x0004013000002902L
    i2c: 0x0004013000001e02L
    ir: 0x0004013000003302L
    mcu: 0x0004013000001f02L
    mic: 0x0004013000002002L
    ndm: 0x0004013000002b02L
    news: 0x0004013000003502L
    nim: 0x0004013000002c02L
    nwm: 0x0004013000002d02L
    pdn: 0x0004013000002102L
    ps: 0x0004013000003102L
    ptm: 0x0004013000002202L
    ro: 0x0004013000003702L
    socket: 0x0004013000002e02L
    spi: 0x0004013000002302L
    ssl: 0x0004013000002f02L
CommonHeaderKey:
  D: |
    jL2yO86eUQnYbXIrzgFVMm7FVze0LglZ2f5g+c42hWoEdnb5BOotaMQPBfqt
    aUyAEmzQPaoi/4l4V+hTJRXQfthVRqIEx27B84l8LA6Tl5Fy9PaQaQ+4yRfP
    g6ylH2l0EikrIVjy2uMlFgl0QJCrG+QGKHftxhaGCifdAwFNmiZuyJ/TmktZ
    0RCb66lYcr2h/p2G7SnpKUliS9h9KnpmG+UEgVYQUK+4SCfByUa9PxYGpT0E
    nw1UcRz0gsBmdOqcgzwnAd9vVqgb42hVn6uQZyAl+j1RKiMWywZarazIR/k5
    Lmr4+groimSEa+3ajyoIho9WaWTDmFU3mkhA2tUDIQ==
  Exponent: |
    AQAB
  Modulus: |
    zwCcsyCgMkdlieCgQMVXA6X2jmb1ICjup0Q+jk/AydPkOgsx7I/MjUymFEkU
    vgXBtCKtzh3NKXtFFuW51tJ60GPOabLKuG0Qm5li+UXALrWhzWuvd5vv2FZI
    dTQCbrq/MFS/M02xNtwqzWiBjE/LwqIdbrDAAvX4HGy0ydaQJ1DKYeQeph5D
    lAGBw2nQ4izXhhuLaU3w8VQkIJHdhxIKI5gJY/20AGkG0vHD553Mh5kBINrWp
    CRYmmJS8DCYbAiQtKbkeUfzHViGTZuj6PwaY8Mv39PGO47a++pt45IUyCEs4/
    LjMS72cyfo8tU4twRGp76SFGYejYj3wGC1f/POQw==
  Signature: |
    BOPR0jL0BOV5Zx502BuPbOvi/hvOq5ID8Dz1MQfOjkey6FKP/6cb4f9YXpm6c
    ZCHAZLo0GduKdMepiKPUq1rsbbAxkRdQdjOOusEWoxNA58x3E4373tCAhlqM2
    DvuQERrIIQ/XnYLV9C3uw4efZwhFqog1jvVyoEHpuvs8xnYtGbsKQ8FrgLwXv
    pOZYy9cSgq+jqLy2D9IxiowPcbq2cRlbW9d2xlUfpq0AohyuXQhpxn7d9RUor
    9veoARRAdxRJK12EpcSoEM1LhTRYdJnSRCY3x3p6YIV3c+l1sWvaQwKt0sZ/U
    8TTDx2gb9g7r/+U9icneu/zlqUpSkexCS009Q==
  Descriptor: |
    AP///wAABAACAAAAAAAFGJ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiIAAAAAAAABBUFQ6VQAAACRo
    aW9GSU8AJGhvc3RpbzAkaG9zdGlvMWFjOnUAAAAAYm9zczpVAABjYW06dQAA
    AGNlY2Q6dQAAY2ZnOnUAAABkbHA6RktDTGRscDpTUlZSZHNwOjpEU1BmcmQ6
    dQAAAGZzOlVTRVIAZ3NwOjpHcHVoaWQ6VVNFUmh0dHA6QwAAbWljOnUAAABu
    ZG06dQAAAG5ld3M6dQAAbndtOjpVRFNwdG06dQAAAHB4aTpkZXYAc29jOlUA
    AABzc2w6QwAAAHkycjp1AAAAbGRyOnJvAABpcjpVU0VSAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAABOn/rw/7//8ec/APIA8JH/APaR/1D/gf9Y/4H/cP+B/3j/gf8B
    AQD/AAIA/iECAPz/////////////////////////////////////////////
    ////////////////////////////////////////AAAAAAAAAAAAAAAAAAAA
    AAADAAAAAAAAAAAAAAAAAAI=

Anyone ?

 

[Huntereb]

Anyone ?

You shouldn't rely on the rsf for permissions. Add "-desc app:4" to your parameters.

 

[aliak11]

How did you make the CIA? If you just converted an encrypted .3ds with -ccitocia it won't work.

It is decrypted, here is how I made it.

makerom -f cia -target t -desc app:4 -rsf RSF.rsf -romfs romfs.bin -exheader decrypted/exheader.bin -code decrypted/exefs/code.bin -icon decrypted/exefs/icon.bin -banner decrypted/exefs/banner.bin -alignwr -o rom.cia

 

[CalebW]

It is decrypted, here is how I made it.

makerom -f cia -target t -desc app:4 -rsf RSF.rsf -romfs romfs.bin -exheader decrypted/exheader.bin -code decrypted/exefs/code.bin -icon decrypted/exefs/icon.bin -banner decrypted/exefs/banner.bin -alignwr -o rom.cia

You're not using your decrypted romfs? And I thought -alignwr was only for cci files...

 

[Huntereb]

aliak11 What game are you attempting?

And I thought -alignwr was only for cci files...

That's right.

 

[aliak11]

aliak11 What game are you attempting?




That's right.

The Legend of Zelda - Ocarina of Time

 

[Gameplayer9198]

to do the dbs trick
1. uncheck hide file exten. in folder options
2. make two texts files and rename to title.db and import.db
3. make a folder name it dbs
4. drop the two files from step 2 in it
5. cut and paste the dbs folder next to extdata in the sd

sdmc
├── DCIM
└── Nintendo 3DS
├── <ID0>
│ └── <ID1>
│ ├── backups
│ ├── dbs <---
│ ├── extdata <--- like so
│ ├── title
│ └── Nintendo DSiWare
└── Private

^^^^ pasted from 3dbrew ^^^^

6. eject the sd place it in your 3ds turn it on enter system settings > data management > nintendo 3ds > software then a prompt will ask to fix the flies

 

[Huntereb]

The Legend of Zelda - Ocarina of Time

I can't really diagnose much, I haven't really looked into the devmenu errors. That's a fairly young game, though. Try setting -desc lower to like 2 or something.

 

[BobPwnz]

Can someone help me? I installed the dev menu and i can see it however when i try to launch it, I get a black screen. Another thing is that sometimes when I get into the cfw the logos stop appearing then my 3ds freezes. PLease help me fix this problem.

 

[VerseHell]

You shouldn't rely on the rsf for permissions. Add "-desc app:4" to your parameters.

Thanks, but I still got the sd card removed at the end.

Edit : Trying with -target d now.

 

[VerseHell]

double post, delete please.