Hacking (4.x only) CIA CFW Complete Guide

[Huntereb]

You're on 9.x???

He's using Gateway's latest firmware update, which gave users higher permissions access.

 

[AHP_person]

He's using Gateway's latest firmware update, which gave users higher permissions access.

OH! I didn't know they updated.

 

[daxtsu]

No luck with Pokémon Y, just hangs on a black screen. I have a few ideas on what might be wrong though. I didn't set it to card2 in the RSF.

 

[Huntereb]

No luck with Pokémon Y, just hangs on a black screen. I have a few ideas on what might be wrong though. I didn't set it to card2 in the RSF.

That'll do it.

 

[Gadorach]

The game's save size is actually 128k according to ctrtool, but I don't know if that will affect your saving/loading or not.

As long as your save-size is the same, or larger than the game's actual save size, it will work. The parameter only seems to affect the maximum allowed save size, not the enforced save size. I use 1M as it keeps me from having to edit it between all the different games I'm converting. Also, I'm getting ready to try to figure out how to do extensive ROM modding. I'm talking English translation for Project Mirai 2. Should be a painful ordeal, I can't wait.

 

[Huntereb]

Also, I'm getting ready to try to figure out how to do extensive ROM modding. I'm talking English translation for Project Mirai 2. Should be a painful ordeal, I can't wait.

Good luck with all those lovely proprietary formats.

 

[Rizzorules]

Could someone give me the command to see the uniqueid?

 

[daxtsu]

As long as your save-size is the same, or larger than the game's actual save size, it will work. The parameter only seems to affect the maximum allowed save size, not the enforced save size.

Didn't know that. Thanks for the info.

 

[Gadorach]

Could someone give me the command to see the uniqueid?

This what you're looking for?

ctrtool -t exheader decrypted_exheader.bin > exheader.txt

Or this?

ctrtool -i <romname.3ds>

You'll probably need both anyway, unless you use 3DSExplorer for part of the info.

 

[AHP_person]

Try this :
http://gbatemp.net/threads/4-x-only-cia-cfw-complete-guide.373532/page-33#post-5147414

Failed, but thanks. Any other suggestions?

 

[Gadorach]

Good luck with all those lovely proprietary formats.

I know right?
Considering, I'll probably have to figure out the file-types and formats all myself... yay...
But oh well, that's half the fun I guess. Feel free to help if you're so inclined. I don't plan to start until Friday anyway, so I'm postponing the suffering until then.

 

[Lordjontan]

I really hope so, but gateway 3DS is so hard to find or buy here.

Not much, $160000 cop

 

[gothicall]

Not much, $160000 cop

Jah! Digame donde, porque ni en Bogota lo encontré.

 

[Gameplayer9198]

Got New Love Plus working how to make it region-free and show on the home screen like the kunio-kun games?

 

[windwakr]

Got New Love Plus working how to make it region-free and show on the home screen like the kunio-kun games?

Try changing the region in the icon.bin.

http://3dbrew.org/wiki/SMDH#Application_Settings

 

[daxtsu]

That'll do it.

Setting it to card2 didn't seem to make a difference. Oh well. I'm not sure how those people on Youtube did it, giving them the benefit of the doubt that the videos aren't fake (low chance, but meh, one can hope).

 

[VerseHell]

Setting it to card2 didn't seem to make a difference. Oh well. I'm not sure how those people on Youtube did it, giving them the benefit of the doubt that the videos aren't fake (low chance, but meh, one can hope).

I made Pokemon X works using this : https://gbatemp.net/threads/4-x-only-cia-cfw-complete-guide.373532/page-33#post-5147414

with this rsf file

BasicInfo:
  Title                  : "Pokemon X" #edit
  CompanyCode            : "01"
  ProductCode            : "CTR-P-EKJA" #edit
  ContentType            : Application
  Logo                    : Licensed # Nintendo / Licensed / Distributed / iQue / iQueForSystem
 
RomFs:
  #Specifies the root path of the file system to include in the ROM.
  #HostRoot                : "decrypted/romfs"
 
 
TitleInfo:
  UniqueId                : 0x0055d#edit
  Category                : Application
 
CardInfo:
  MediaSize              : 2GB # 128MB / 256MB / 512MB / 1GB / 2GB / 4GB #edit
  MediaType              : Card2 # Card1 / Card2
  CardDevice              : None # NorFlash(Pick this if you use savedata) / None (Choose None if it's a card2 game)
 
Option:
  UseOnSD                : true # true if App is to be installed to SD
  FreeProductCode        : true # Removes limitations on ProductCode
  MediaFootPadding        : true # If true CCI files are created with padding
  EnableCrypt            : true # Enables encryption for NCCH and CIA
  EnableCompress          : true # Compresses exefs code
 
ExeFs: # these are the program segments from the ELF, check your elf for the appropriate segment names
  ReadOnly:
  - .rodata
  - RO
  ReadWrite:
  - .data
  - RO
  Text:
  - .init
  - .text
  - STUP_ENTRY
 
PlainRegion: # only used with SDK ELFs
- .module_id
 
AccessControlInfo:
  #UseExtSaveData : true
  #ExtSaveDataId: 0x0055d #edit, same as UniqueId
  #SystemSaveDataId1: 0x00000000 # plaintext exheader
  #SystemSaveDataId2: 0x00000000 # plaintext exheader
#OtherUserSaveDataId1: 0x00000 # plaintext exheader
  #OtherUserSaveDataId2: 0x00000 # plaintext exheader
#OtherUserSaveDataId3: 0x00000 # plaintext exheader
#UseOtherVariationSaveData : false
 
SystemControlInfo:
  SaveDataSize: 1MB
  RemasterVersion: 0
  StackSize: 0x40000
 
# DO NOT EDIT BELOW HERE OR PROGRAMS WILL NOT LAUNCH (most likely)
 
AccessControlInfo:
  FileSystemAccess:
  - Debug
  - DirectSdmc
  - DirectSdmcWrite
 
  IdealProcessor                : 0
  AffinityMask                  : 1
 
  Priority                      : 16
 
  MaxCpu                        : 0x9E # Default
 
  CoreVersion                  : 2
  DescVersion                  : 2
 
  ReleaseKernelMajor            : "02"
  ReleaseKernelMinor            : "33"
  MemoryType                    : Application
  HandleTableSize: 512
  IORegisterMapping:
  - 1ff50000-1ff57fff
  - 1ff70000-1ff77fff
  MemoryMapping:
  - 1f000000-1f5fffff:r
  SystemCallAccess:
    ArbitrateAddress: 34
    Break: 60
    CancelTimer: 28
    ClearEvent: 25
    ClearTimer: 29
    CloseHandle: 35
    ConnectToPort: 45
    ControlMemory: 1
    CreateAddressArbiter: 33
    CreateEvent: 23
    CreateMemoryBlock: 30
    CreateMutex: 19
    CreateSemaphore: 21
    CreateThread: 8
    CreateTimer: 26
    DuplicateHandle: 39
    ExitProcess: 3
    ExitThread: 9
    GetCurrentProcessorNumber: 17
    GetHandleInfo: 41
    GetProcessId: 53
    GetProcessIdOfThread: 54
    GetProcessIdealProcessor: 6
    GetProcessInfo: 43
    GetResourceLimit: 56
    GetResourceLimitCurrentValues: 58
    GetResourceLimitLimitValues: 57
    GetSystemInfo: 42
    GetSystemTick: 40
    GetThreadContext: 59
    GetThreadId: 55
    GetThreadIdealProcessor: 15
    GetThreadInfo: 44
    GetThreadPriority: 11
    MapMemoryBlock: 31
    OutputDebugString: 61
    QueryMemory: 2
    ReleaseMutex: 20
    ReleaseSemaphore: 22
    SendSyncRequest1: 46
    SendSyncRequest2: 47
    SendSyncRequest3: 48
    SendSyncRequest4: 49
    SendSyncRequest: 50
    SetThreadPriority: 12
    SetTimer: 27
    SignalEvent: 24
    SleepThread: 10
    UnmapMemoryBlock: 32
    WaitSynchronization1: 36
    WaitSynchronizationN: 37
  InterruptNumbers:
  ServiceAccessControl:
  - APT:U
  - $hioFIO
  - $hostio0
  - $hostio1
  - ac:u
  - boss:U
  - cam:u
  - cecd:u
  - cfg:u
  - dlp:FKCL
  - dlp:SRVR
  - dsp::DSP
  - frd:u
  - fs:USER
  - gsp::Gpu
  - hid:USER
  - http:C
  - mic:u
  - ndm:u
  - news:u
  - nwm::UDS
  - ptm:u
  - pxi:dev
  - soc:U
  - ssl:C
  - y2r:u
  - ldr:ro
  - ir:USER
 
 
SystemControlInfo:
  Dependency:
    ac: 0x0004013000002402L
    am: 0x0004013000001502L
    boss: 0x0004013000003402L
    camera: 0x0004013000001602L
    cecd: 0x0004013000002602L
    cfg: 0x0004013000001702L
    codec: 0x0004013000001802L
    csnd: 0x0004013000002702L
    dlp: 0x0004013000002802L
    dsp: 0x0004013000001a02L
    friends: 0x0004013000003202L
    gpio: 0x0004013000001b02L
    gsp: 0x0004013000001c02L
    hid: 0x0004013000001d02L
    http: 0x0004013000002902L
    i2c: 0x0004013000001e02L
    ir: 0x0004013000003302L
    mcu: 0x0004013000001f02L
    mic: 0x0004013000002002L
    ndm: 0x0004013000002b02L
    news: 0x0004013000003502L
    nim: 0x0004013000002c02L
    nwm: 0x0004013000002d02L
    pdn: 0x0004013000002102L
    ps: 0x0004013000003102L
    ptm: 0x0004013000002202L
    ro: 0x0004013000003702L
    socket: 0x0004013000002e02L
    spi: 0x0004013000002302L
    ssl: 0x0004013000002f02L
CommonHeaderKey:
  D: |
    jL2yO86eUQnYbXIrzgFVMm7FVze0LglZ2f5g+c42hWoEdnb5BOotaMQPBfqt
    aUyAEmzQPaoi/4l4V+hTJRXQfthVRqIEx27B84l8LA6Tl5Fy9PaQaQ+4yRfP
    g6ylH2l0EikrIVjy2uMlFgl0QJCrG+QGKHftxhaGCifdAwFNmiZuyJ/TmktZ
    0RCb66lYcr2h/p2G7SnpKUliS9h9KnpmG+UEgVYQUK+4SCfByUa9PxYGpT0E
    nw1UcRz0gsBmdOqcgzwnAd9vVqgb42hVn6uQZyAl+j1RKiMWywZarazIR/k5
    Lmr4+groimSEa+3ajyoIho9WaWTDmFU3mkhA2tUDIQ==
  Exponent: |
    AQAB
  Modulus: |
    zwCcsyCgMkdlieCgQMVXA6X2jmb1ICjup0Q+jk/AydPkOgsx7I/MjUymFEkU
    vgXBtCKtzh3NKXtFFuW51tJ60GPOabLKuG0Qm5li+UXALrWhzWuvd5vv2FZI
    dTQCbrq/MFS/M02xNtwqzWiBjE/LwqIdbrDAAvX4HGy0ydaQJ1DKYeQeph5D
    lAGBw2nQ4izXhhuLaU3w8VQkIJHdhxIKI5gJY/20AGkG0vHD553Mh5kBINrWp
    CRYmmJS8DCYbAiQtKbkeUfzHViGTZuj6PwaY8Mv39PGO47a++pt45IUyCEs4/
    LjMS72cyfo8tU4twRGp76SFGYejYj3wGC1f/POQw==
  Signature: |
    BOPR0jL0BOV5Zx502BuPbOvi/hvOq5ID8Dz1MQfOjkey6FKP/6cb4f9YXpm6c
    ZCHAZLo0GduKdMepiKPUq1rsbbAxkRdQdjOOusEWoxNA58x3E4373tCAhlqM2
    DvuQERrIIQ/XnYLV9C3uw4efZwhFqog1jvVyoEHpuvs8xnYtGbsKQ8FrgLwXv
    pOZYy9cSgq+jqLy2D9IxiowPcbq2cRlbW9d2xlUfpq0AohyuXQhpxn7d9RUor
    9veoARRAdxRJK12EpcSoEM1LhTRYdJnSRCY3x3p6YIV3c+l1sWvaQwKt0sZ/U
    8TTDx2gb9g7r/+U9icneu/zlqUpSkexCS009Q==
  Descriptor: |
    AP///wAABAACAAAAAAAFGJ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiIAAAAAAAABBUFQ6VQAAACRo
    aW9GSU8AJGhvc3RpbzAkaG9zdGlvMWFjOnUAAAAAYm9zczpVAABjYW06dQAA
    AGNlY2Q6dQAAY2ZnOnUAAABkbHA6RktDTGRscDpTUlZSZHNwOjpEU1BmcmQ6
    dQAAAGZzOlVTRVIAZ3NwOjpHcHVoaWQ6VVNFUmh0dHA6QwAAbWljOnUAAABu
    ZG06dQAAAG5ld3M6dQAAbndtOjpVRFNwdG06dQAAAHB4aTpkZXYAc29jOlUA
    AABzc2w6QwAAAHkycjp1AAAAbGRyOnJvAABpcjpVU0VSAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAABOn/rw/7//8ec/APIA8JH/APaR/1D/gf9Y/4H/cP+B/3j/gf8B
    AQD/AAIA/iECAPz/////////////////////////////////////////////
    ////////////////////////////////////////AAAAAAAAAAAAAAAAAAAA
    AAADAAAAAAAAAAAAAAAAAAI=

And it even works online.

 

[daxtsu]

I made Pokemon X works using this : https://gbatemp.net/threads/4-x-only-cia-cfw-complete-guide.373532/page-33#post-5147414

And it even works online.

I'll try it out. Thanks.

 

[CalebW]

Can ALBW run on CFW 4.x or only with GW?

 

[Gadorach]

Can ALBW run on CFW 4.x or only with GW?

I personally have it running on Palantine CFW 1.0, 4.4.0. I installed it from the DevMenu, not that that makes any difference, besides installation speed.