Hacking (4.x only) CIA CFW Complete Guide

  • Thread starter Thread starter palantine
  • Start date Start date
  • Views Views 546,006
  • Replies Replies 2,082
  • Likes Likes 29
The main issues I can see might be your computer's unicode settings messing with the application, or your computer prioritizing a secondary network over the one that your 3DS is connected to. It could be a lot of things really, but as we don't know your working environment details, we can't really help any more than we already have.
 
The main issues I can see would be that we haven't included any sort of header into the CIA, so it has no ID data. Past that, we can't install DLC yet, so games that need it won't connect. Plus, I was under the impression that we needed higher firmwares running to connect to NN now, so it would fail regardless.


The games are recompiled in "Developer" or "Test" mode in order to install them, which is an automatic flag on Nintendo WFC to deny online access.
 
The games are recompiled in "Developer" or "Test" mode in order to install them, which is an automatic flag on Nintendo WFC to deny online access.
Ah, good catch, I forgot that we can't boot them when compiled in retail mode just yet. We'll just have to wait on the opensourcing to complete so we can try to fix that.
 
Does card2 works the same as card 1 for the rsf file ?
Because Tomodachi life is card 2, and trying to run it locks the 3DS in the NINTENDO3DS animation.
Maybe it's just because it's too new and even uses 7.x crypto.
(Also where to find company code, ctrtool doesn't seem to give it)
 
You can't change out the .sav in the respective folder?

Little update.

Can't switch files, caused 'eshop version' is encrypted, and I don't know how to encrypt to that stage.

Tried using the .cia version of the save transfer tool.

Couldn't get it to run in GW classic mode,
and it couldn't read data in GW mode (of course -.-)
 
When does this gotta be compatible with v9.x?
Once the developers have time to finish reversing it and opensourcing it, that will be done. I would assume that it will be shortly after payload launching is corrected. Until then, get yourself a Gateway 3DS and enjoy the pre-made user environment.

In short, don't bother asking this particular question. It'll be ready when it's ready, and no earlier.
 
Once the developers have time to finish reversing it and opensourcing it, that will be done. I would assume that it will be shortly after payload launching is corrected. Until then, get yourself a Gateway 3DS and enjoy the pre-made user environment.

In short, don't bother asking this particular question. It'll be ready when it's ready, and no earlier.
I really hope so, but gateway 3DS is so hard to find or buy here.
 
But I remember reading St4rk saying he's playing in a XL with v9.x with this, was he talking about emunand's?
If he's actually talking about this particular firmware, that would be odd, but it would have to be through EmuNAND. Remember, St4rk has his own version of this firmware that he made partly himself. It does run on EmuNAND though, not realNAND.
 
Oh, and to anyone who's having trouble getting ALBWs going, I managed to get it going with this .rsf:

Code:
BasicInfo:
  Title                  : "LoZ-ALBW - USA"
  CompanyCode            : "01"
  ProductCode            : "CTR-P-BZLE"
  ContentType            : Application # Application / SystemUpdate / Manual / Child / Trial
  Logo                    : Nintendo # Nintendo / Licensed / Distributed / iQue / iQueForSystem
 
TitleInfo:
  UniqueId                : 0x0ec3
  Category                : Application
 
Option:
  UseOnSD                : true # true if App is to be #installed to SD
  EnableCompress          : true # Compresses exefs code
  FreeProductCode        : true # Removes limitations on ProductCode
  EnableCrypt            : false # Enables encryption for NCCH and CIA
  MediaFootPadding        : true # If true CCI files are created with padding
 
AccessControlInfo:
  ExtSaveDataId: 0xb0ec3 # same as UniqueId
  SystemSaveDataId1: 0x000ec300 # plaintext exheader
  SystemSaveDataId2: 0x000ec300 # plaintext exheader
  OtherUserSaveDataId1: 0xec300 # plaintext exheader
  OtherUserSaveDataId2: 0xec300 # plaintext exheader
  OtherUserSaveDataId3: 0xec300 # plaintext exheader
  UseOtherVariationSaveData : false
 
SystemControlInfo:
  SaveDataSize: 1M # plaintext exheader
  RemasterVersion: 0 # plaintext exheader
  StackSize: 0x00040000 # plaintext exheader
  JumpId: 0x00040000000ec300L # plaintext exheader (<full UniqueID>L)

And these switches:

Code:
makerom -f cia -rsf cia.rsf -target t -desc app:4 -icon icon.bin -banner banner.bin -exefslogo -code code.bin -exheader decrypted_exheader.bin -romfs decrypted_romfs.bin -o LoZ-ALBW.cia

Using the latest version of MakeROM, compiled from source, right here: http://www.mediafire.com/download/868d8yykqjsequ1/CTR.rar
 
I'm having some issues:
-CIAs will install, but give me a "The SD card was removed" error. If it's on NAND, it'll simply tell me an error has occurred and return me to redNAND.
-7.x CIAs boot, but hang on the "Nintendo 3DS" screen. (I thought it hung because of encryption, but apparently not?)

The makerom commands I used were:
makerom -f cia -target t -desc app:4 -rsf <rsf> -romfs <romfs> -exheader <exheader> -code <code.bin> -exefslogo -banner <banner> -icon <icon> -o CTR-P-XXXX.cia

I replaced the <*> accordingly. -desc app:1 and app:4 were both attempted with the same results. Any suggestions?

Also something neat:

Games not of your region will not show up from the Home menu, but will show up on DevMenu and boot fine. (Tested with New Super Mario Bros. 2 + 10 DLC on a USA 3DS)
 
I'm having some issues:
-CIAs will install, but give me a "The SD card was removed" error. If it's on NAND, it'll simply tell me an error has occurred and return me to redNAND.
-7.x CIAs boot, but hang on the "Nintendo 3DS" screen. (I thought it hung because of encryption, but apparently not?)

The makerom commands I used were:
makerom -f cia -target t -desc app:4 -rsf <rsf> -romfs <romfs> -exheader <exheader> -code <code.bin> -exefslogo -banner <banner> -icon <icon> -o CTR-P-XXXX.cia

I replaced the <*> accordingly. -desc app:1 and app:4 were both attempted with the same results. Any suggestions?

Also something neat:

Games not of your region will not show up from the Home menu, but will show up on DevMenu and boot fine. (Tested with New Super Mario Bros. 2 + 10 DLC on a USA 3DS)


Try this :
http://gbatemp.net/threads/4-x-only-cia-cfw-complete-guide.373532/page-33#post-5147414
 
Oh, and to anyone who's having trouble getting ALBWs going, I managed to get it going with this .rsf:


SystemControlInfo:
SaveDataSize: 1M # plaintext exheader


The game's save size is actually 128k according to ctrtool, but I don't know if that will affect your saving/loading or not.
 
Harvest Moon works. Saves and stuff, too.

WI3DS6X.jpg


OkynHqt.jpg
 
  • Like
Reactions: 1 person
palantine You should update your makerom parameters in the first post to include "-desc app:4". Some users may encounter issues trying to run newer games that require newer firmware permissions.
 

Site & Scene News

Popular threads in this forum