Hacking (4.x only) CIA CFW Complete Guide

[Reecey]

I got it working! Thanks Vappy and daxtsu!

How did you get it working dude? was you getting similar issues to me by any chance? I keep getting result code: c8a0802b. also do you just put 2 data base files and name them import.db and title.db is that correct?

 

[Vappy]

Yeah that should be all you need, under whatever the id folders are on your 3DS. For example, mine is Nintendo 3DS\70cefa7342c7ef927b869a8dec8c6c73\48b300c647801a815355313600035344\dbs

 

[Ziver.W]

Step1: decrypt the .3ds rom.
I will not explain it in this tutorial, as it is explained a couple of times around the forum. (http://gbatemp.net/threads/release-3ds_ctr_decryptor-void.370684/)

If you end up with a decrypted romfs.bin, exheader.bin, code.bin (decompressed), icon.bin and banner.bin you did everything correct.

Hello,I can get the romfs.bin,exheader.bin,exefs.bin by decrypting the 3ds rom,but where's the code.bin,icon.bin and banner.bin come from?

 

[Vappy]

Hello,I can get the romfs.bin,exheader.bin,exefs.bin by decrypting the 3ds rom,but where's the code.bin,icon.bin and banner.bin come from?

ctrtool -t exefs --exefsdir=exefs exefs.bin --decompresscode

 

[VerseHell]

It was built with SDK 5.x, so probably!

I tried again with -desc app:3 -target t and it worked.

Thanks a lot, it's worked for with with MK7

Tip : If you want to add the game manual (if the game have one) you can extract it with rom_tool -x then add -content XXX-X-XXXX_1_MANUAL.cfa:1:1 to the makerom command

 

[Ziver.W]

ctrtool -t exefs --exefsdir=exefs exefs.bin --decompresscode

Thank you ,thank you very much

 

[sudeki300]

Thanks a lot, it's worked for with with MK7

Tip : If you want to add the game manual (if the game have one) you can extract it with rom_tool -x then add -content XXX-X-XXXX_1_MANUAL.cfa:1:1 to the makerom command

would this mean that we can add other documents such as game guides if they were in the same format as the game manuals?.......................sudeki300

 

[gamesquest1]

would this mean that we can add other documents such as game guides if they were in the same format as the game manuals?.......................sudeki300

well if you can create a manual i dont see why not.....idk what format the manual is in though

 

[djalmafreestyler]

You'll have to create the dbs folder.

Thank you.

Does anyone know if Donkey Kong Country Returns work?

 

[Ziver.W]

ctrtool -t exefs --exefsdir=exefs exefs.bin --decompresscode

but... it didn't work

 

[Henceforth]

I get stuck in the end, first i do sdmc:/Nintendo 3DS/<id0>/<id1>/dbs/, create de two files, go to management data, your data is not working i press "delete", now you can download for eshop.
Then trying to install dev_menu (cia), this happends

Thats means that is need to install something from the eshop. The first time appears "uptade 3ds" i choose cancel, the next time only the image above apear.
When i go to the management data, apears a dev_menu slot that ocuppy 4 slots, but when restart the console is not more there.

Some user try to give me a shinny passageway, how to install eshop with other form or something i miss.
Process: Microsd Hombrew 4>Profile SD (Palantine CFW)>Cpu run.bat (image above).

 

[astur]

Hi there guays!
First of all thank you so much to all sceners and users that works for the comunity.

Here is the question:
-I want to convert .3ds to .cia,I drop the .3ds file in ctrkeygen.py and a 1kb ncchinfo.bin was generated.I paste this into root of sd card,and when I launch the exploit,I recived this:

''Nothing to do:-1''
Where is the fail?
Thank you so much guys

 

[cearp]

maybe someone has said this already, but, from what i understand, the dev menu is installed to an emunand... right?
has anyone tried flashing that emunand to their nand, to make it an easier process, so you don't need to load up the emunand each time you want to install something?

 

[VerseHell]

Did you put the launcher.dat file too ?

 

[ground]

maybe someone has said this already, but, from what i understand, the dev menu is installed to an emunand... right?
has anyone tried flashing that emunand to their nand, to make it an easier process, so you don't need to load up the emunand each time you want to install something?

well it is installed to your sd card. and actually someone tried flashing their emunand to realnand. it boots but the devmenu wont work. this is logical as it the exploit is needed to bypass some checks

 

[cearp]

well it is installed to your sd card. and actually someone tried flashing their emunand to realnand. it boots but the devmenu wont work. this is logical as it the exploit is needed to bypass some checks

ok so it doesn't work since checks have to be bypassed, that makes sense i guess, thanks

 

[ground]

Hi there guays!
First of all thank you so much to all sceners and users that works for the comunity.

Here is the question:
-I want to convert .3ds to .cia,I drop the .3ds file in ctrkeygen.py and a 1kb ncchinfo.bin was generated.I paste this into root of sd card,and when I launch the exploit,I recived this:

''Nothing to do:-1''
Where is the fail?
Thank you so much guys

seems like a faulty ncchinfo.bin, maybe to remake it will help. (or if jsut the index number is wrong, open it with a hex editor and change te first byte from 00 to ?, where ? is the amount of xorpads you want to generate)

 

[Ziver.W]

maybe someone has said this already, but, from what i understand, the dev menu is installed to an emunand... right?
has anyone tried flashing that emunand to their nand, to make it an easier process, so you don't need to load up the emunand each time you want to install something?

You can have a try,but I think it wouldn't work

 

[nervx]

does this cfw stuff modify the actual 3ds at all or only the emunand?

if it does modify the actual 3ds, has anyone that can restore their nand tried to update after installing the mod? does the update still work like normal or does it brick/fail to install kind of like a bad wii u mod?

 

[piratesephiroth]

maybe someone has said this already, but, from what i understand, the dev menu is installed to an emunand... right?
has anyone tried flashing that emunand to their nand, to make it an easier process, so you don't need to load up the emunand each time you want to install something?

yeah, someone already tried and it didn't work. I guess the system processes are patched in RAM instead of the actual files.