Hacking (4.x only) CIA CFW Complete Guide

drwhojan

Well-Known Member
Member
Joined
Jul 14, 2009
Messages
4,196
Trophies
1
Age
45
Location
Where I Am!
XP
1,702
Country
United Kingdom
Here's my new 3ds to cia conversion guide :
Download this : http://jheberg.net/captcha/3ds-cia-conversion-tools-v3-2/
1. Put you rom in the folder, run rom_tool info.bat, enter your rom name without the .3ds extension and edit the rsf file with the right informations.
2. Follow the 3 first step of this tutorial : https://gbatemp.net/threads/tutorial-how-to-decrypt-3ds-roms-for-dummies.372653/page-2#post-5136907
3. Run unpack-makerom.bat, enter your rom name without the .3ds extension. A cia file will be generated.


Sorry is they a 32bit system package ?

Chears , app wont run , IE: not win32 accsess denied .
 

kamo

Well-Known Member
Member
Joined
Aug 7, 2006
Messages
180
Trophies
0
Age
46
Website
Visit site
XP
413
Country
Italy
https://mega.co.nz/#!709SEJrD!5kg83SClvZk6oR-q_XNDhsXiIk6A4s6akgkZxWcHPYI Updated my batch file for building a .cia, now it's a single drag and drop job that's self cleaning. :P (Though obviously you still need to run the NCCH Decryptor to generate the xorpads) I still expect anyone at all experienced in python to look at the rsfgen.py and cringe, but it does the job!

Doesn't work for me. Could someone please have a look?

Code:
"Making .rsf copy"
        1 file(s) copied.
Is your ROM already decrypted? (y/n)?y
Header:                NCSD
Signature:              210C5B1DB00D819C65D1F31A6603A42F30C3C66C6A2FBFD305F0C7F6
F3F7A4CE
                        5BA780524A33A84AFE8BB9CDD0879BE4FB3224A0B59317770214C3B9
4D3981E5
                        A6DCC58B9B4E72D8C3B985028C5C0F408DB93447D13201C7C42948BD
FAC97BB6
                        A9428CCB2EAF69665309D3410A454E6CADD4C245739A2D68CE103AB0
6AC4D7E0
                        452FD517C560417FFFAE1BCBCB04EF1A091C43616AEEF4804DFB6461
73640A07
                        4E53DA7CDAA2AC7ABA8A4F29B62FC83AB4747622F0173F74E10E58B5
D074E56C
                        CF733A33A8924B51BCCD02F7745C4C3F911122EF225312831927416D
689C4E63
                        A7A55FBD4598A399333C429F153E41750DBD256C7BF0EA80B6924A0A
892CD433
Media size:            0x00200000
Media id:              00040000000ec400
 
Partition 0
Id:                    00C40E0000000400
Area:                  0x00004000-0x2AAC0000
Filesystem:            00
Encryption:            00
 
Partition 1
Id:                    00C40E0000000500
Area:                  0x2AAC0000-0x2AC93000
Filesystem:            00
Encryption:            00
 
Partition 7
Id:                    00C40E0000002218
Area:                  0x2AC93000-0x2C9E7000
Filesystem:            00
Encryption:            00
 
Extended header hash:  00000000000000000000000000000000000000000000000000000000
00000000
Additional header size: 00000000
Sector zero offset:    00000000
Flags:                  0001000101010000
> Mediaunit size:      0x200
> Mediatype:          Card1
> Card Device:        NorFlash
Warning, could not read secure key.
 
NCCH:
Header:                NCCH
Signature:              37C5E9084AED4075F56AAEBE2CE55EBDD60B2620E0FF76F3D7BBDAB6
BCD93A43
                        C8ECC2F5B3E67B4D17AC4ABC6839BAD59382763BE125DA316774A9D3
625993C6
                        35208961E8379486C32698339AEF86DB58110A294C2C366B099974A4
6E7EBB43
                        16368FB61ED6D807D36923D400D23FA897942542154CD217216EA815
A57E85DB
                        59F87B7F8BD6DC00032DE810311365994B9D8D0357E497EFF4FE05E5
2F34AF97
                        43AF025BCB79C89E46D503D02A0D6C3F12A7F5059A9A5A3CB201069A
E7AF3A7B
                        4918601D9B62CA1A67C4735EAAC973C138E651A72B5D38075C711CF3
BE8B7885
                        50596DC567F97B57B5C3FEF57B00617EA11C4622E5C1D48FEFBD360F
1E370FF3
Content size:          0x2aabc000
Partition id:          00040000000ec400
Maker code:            3030
Version:                0002
Program id:            00040000000ec400
Logo hash:              2A98C49D919E254E15DC213CAB47A800ED63B248DCD43119E8FB82D9
E62AE51C
Product code:          CTR-P-BZLP
Exheader size:          00000400
Exheader hash:          6A10DF5482C33E079A426E133E1DEE2E69C70895FB14A3678CF7D560
4ABA1B42
Flags:                  0000030100000000
> Mediaunit size:      0x200
> Crypto key:          Secure
> Form type:          Executable content
> Content type:        Application
> Content platform:    CTR
Plain region offset:    0x00006a00
Plain region size:      0x00000200
Logo offset:            0x00004a00
Logo size:              0x00002000
ExeFS offset:          0x00006c00
ExeFS size:            0x00654e00
ExeFS hash region size: 0x00000200
RomFS offset:          0x0065c000
RomFS size:            0x2a464000
RomFS hash region size: 0x00000200
ExeFS Hash:            8C9AE5E09BE82CD0EC0297FE341682BF88C4FF11594243EE3B7112D0
031ED038
RomFS Hash:            0D455DA211E288AC94B605C4A72566D4F789CE8D702695AAB17D60EB
04A64DEA
Saving ExeFS...
Saving RomFS...
Saving Extended Header...
Saving Logo...
Error, exheader hash mismatch. Wrong key?
"Extracting decrypted exefs and exheader..."
 
ExeFS:
Section name:          ÉKÍFg╝½9
Section offset:        0x2a1d0452
Section size:          0xc6d5ebed
Section hash:          4D1BA1A910994860BBD104C1DF1B9B7FEFC6DB8EDE2FAD96643D27BD
7415A337
Section name:          ö1ü▲7
Tl
Section offset:        0x614f8b0d
Section size:          0x5afcbb30
Section hash:          C77239BB37F31B9B65171A610A8A868E60FA778056A826076D6B662E
CABFB2E9
Section name:          v°ñ┬7◄▲ÿ
Section offset:        0x206717c2
Section size:          0xdc4013a4
Section hash:          E6B7E76E31840EB9DD31587616827178429BBE111FE87C0B67132BDB
28088119
Section name:          óùì}±╦¶¸
Section offset:        0xe462215e
Section size:          0x1c89eab7
Section hash:          540920445B4DECA25E66280537E8116852B9BF35977CF18A3632328F
97B17BAE
Section name:          ┼Ë
Section offset:        0x90b364b3
Section size:          0x611bebf1
Section hash:          91865C72EE17898A5926613F18B4D96ECEDFE509FA9A43E22C3FBFC4
C43C72E5
Section name:          @ê¿♫CĶu
Section offset:        0xabc951e1
Section size:          0x7047f084
Section hash:          46E53B5F1360C184A96F03D934A722CF19395EC4D9BD4A11E568BE5E
70179103
Section name:          ►!Z8▀ß
Section offset:        0x11c8a7c0
Section size:          0xef810aec
Section hash:          2B76AE88BE1D65ACE313A1AB4F9AF3CE8B3A3003025B5F729CBAC4E5
47D5AE48
Section name:          ╗Ú├¬▼é\Û
Section offset:        0x83223d58
Section size:          0xbe0ad538
Section hash:          61DB628681A9B36CB22DD8A300A5BF72617528456A530B9704797769
A7626462
Error, ExeFS section 0 size invalid
Error, ExeFS section 1 size invalid
Error, ExeFS section 2 size invalid
Error, ExeFS section 3 size invalid
Error, ExeFS section 4 size invalid
Error, ExeFS section 5 size invalid
Error, ExeFS section 6 size invalid
Error, ExeFS section 7 size invalid
Remove region lock (y/n)?y
"Removing regionlock and filling .rsf"
'python' is not recognized as an internal or external command,
operable program or batch file.
"Building .cia"
[NCCH ERROR] Failed to open banner file 'exefs\banner.bin'
[NCCH ERROR] NCCH Build Process Failed
[RESULT] Failed to build outfile
'mv' is not recognized as an internal or external command,
operable program or batch file.
'mv' is not recognized as an internal or external command,
operable program or batch file.
"Done."
Press any key to continue . . .
 

GibWaffles

Active Member
Newcomer
Joined
Nov 6, 2014
Messages
42
Trophies
0
XP
116
Country
Slovenia
I'm looking to install my retail game cartridges to my 3ds.
I'm running system version 4.3.0-10E. Is this doable on my system?
Also, I don't have a gateway, but I do have the supercard DS 2 which runs on my system. Can I use that instead?
 

fpen

Active Member
Newcomer
Joined
Nov 4, 2014
Messages
25
Trophies
0
Age
53
XP
53
Country
France
hello

Gadorach have take your tuto

but when i put my rom 3ds on ctrkeygen.py , dont create ncchinfo.bin ???

have installed python 3.4

thanks
 

drwhojan

Well-Known Member
Member
Joined
Jul 14, 2009
Messages
4,196
Trophies
1
Age
45
Location
Where I Am!
XP
1,702
Country
United Kingdom
hello

Gadorach have take your tuto

but when i put my rom 3ds on ctrkeygen.py , dont create ncchinfo.bin ???

have installed python 3.4

thanks


Made an easyer version

Open ctrkeygen-ncchinfo.bin dump.bat , have game in same folder , type in games name without .3ds extension , it will dump the ncchinfo.bin

Attached in .zip

PS: anyone can use it for there tool builds, with better guild then me xd .
 

Attachments

  • ctrkeygen-ncchinfo.bin dump.zip
    97.9 KB · Views: 272

kiryu1

Well-Known Member
Member
Joined
Apr 4, 2014
Messages
296
Trophies
0
Age
35
XP
231
Country
Made an easyer version

Open ctrkeygen-ncchinfo.bin dump.bat , have game in same folder , type in games name without .3ds , it will dump the ncchinfo.bin

Attached in .zip


Can I dump and play my 3DS carts with these without buying gateway?


And also will these have 9.x CFW and be able to play cart2 and/or newer games like fantasy life/Smash Bros/Pokemon X/Y?


Sorry for the question, I am a noob in this..
 

fpen

Active Member
Newcomer
Joined
Nov 4, 2014
Messages
25
Trophies
0
Age
53
XP
53
Country
France
thanjs work fine

can decrypt 7.x ?

have done animal crossing witg your tuto many many thanks
 

drwhojan

Well-Known Member
Member
Joined
Jul 14, 2009
Messages
4,196
Trophies
1
Age
45
Location
Where I Am!
XP
1,702
Country
United Kingdom
Can I dump and play my 3DS carts with these without buying gateway?
And also will these have 9.x CFW and be able to play cart2 and/or newer games like fantasy life/Smash Bros/Pokemon X/Y?
Sorry for the question, I am a noob in this..

No idea, I'm only looking into the extraction tools and rebuild .
 

NoSmokingBandit

Well-Known Member
Member
Joined
Jan 17, 2009
Messages
451
Trophies
0
XP
648
Country
United States
Forgive my noob-ness, but I'm a little unclear about what this cfw is good for.

From what I gather, you can convert roms to cia files, which install as a system app, like wii channels, right? Do the installed cias have to use the system storage or do they install to the sd card? I've read comments about bricking, but nothing conclusive, is it a known problem? If this works the way I'm thinking, does it effectively render Gateway useless? Can one return to official firmware?
 

Huntereb

Well-Known Member
Member
Joined
Sep 1, 2013
Messages
3,234
Trophies
0
Website
lewd.pics
XP
2,456
Country
United States

Reecey

Mario 64 (favorite game of all time)
Member
Joined
Mar 7, 2010
Messages
5,871
Trophies
2
Location
At Home :)
XP
4,495
Country
Made an easyer version

Open ctrkeygen-ncchinfo.bin dump.bat , have game in same folder , type in games name without .3ds extension , it will dump the ncchinfo.bin

Attached in .zip

PS: anyone can use it for there tool builds, with better guild then me xd .

On this bit:

3. copy your ROM and XOR pads here, leave out any CTR-P-CTAP.romfs*.xorpad files they are un-needed and may cause issues you just need
the 3 Xor pads for the game exefs,romfs and exh

where is Here? do you mean the "For the 3ds sd card" folder or in the main folder?

I just get erros all the time. When you name your rom do you name it for eample Luigis Mansion 2, thats it no .cia at the end or .3ds cause mine is just erroring out. I've got the 3 files, exefs.xorpad, exh.xorpad, .romfs.xorpad all 0 and my .3ds file so is that all correct?
 

Reecey

Mario 64 (favorite game of all time)
Member
Joined
Mar 7, 2010
Messages
5,871
Trophies
2
Location
At Home :)
XP
4,495
Country
I'm looking for a 32bit 86X version of XOR.exe anyone know ? , Then I can look into this Reecey ^ .

I get this happen:-
Untitled.jpg
 

drwhojan

Well-Known Member
Member
Joined
Jul 14, 2009
Messages
4,196
Trophies
1
Age
45
Location
Where I Am!
XP
1,702
Country
United Kingdom
Assume so in cmd command reecey , sorry not on 64.bit system, Will like to borrow my niece laptop some time :) she dose ;)

PS: edit: you may have to have the game in same folder as the files, not in archive of .zip
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    BigOnYa @ BigOnYa: Caller -"Everytime I start a Pc game on my S24, playing on a external monitor, someone calls or...