Toggle sidebar

ROM Hack [Release] ExInjector - Inject original exheaders into repacked roms

  • Thread starter Thread starter piratesephiroth
  • Start date Start date
  • Views Views 123,683
  • Replies Replies 343
  • Likes Likes 29
CalebW said:
How? Just xor the cfa or do I need to extract the contents, xor, then rebuild? And if I were to xor the cfa, would the output still be in cfa format?
Click to expand...
Just xor it against the xorpad. No need for rebuilding it.
Yeah the output will still be a cfa.
 
piratesephiroth said:
Just xor it against the xorpad. No need for rebuilding it.
Yeah the output will still be a cfa.
Click to expand...
Ok, I'll see how it works. I've been getting an "Invalid Cia" in the bbbmenu when I try to install, so this may be the problem.

Edit: makerom says the decrypted manual is corrupted...
 
piratesephiroth said:
Also Pokemon Y + 1.3 updates confirmed working 100% fine installed on 4.x
Click to expand...

working on cfw?
can you post the .ref?
i conversion mh4g and Pokemon many times...but is fail.
did not run at cfw.always black screen.or show the error msg:"SD card remove xxxxx"
can I get some help?
my english is so bad.sorry...:lol:
 
gulupao said:
working on cfw?
can you post the .ref?
i conversion mh4g and Pokemon many times...but is fail.
did not run at cfw.always black screen.or show the error msg:"SD card remove xxxxx"
can I get some help?
my english is so bad.sorry...:lol:
Click to expand...

Here's the bat code I used. The game's files were in a subfolder called 'extracted' (exefs files were in the folder extracted\exefs). Makerom.exe and ExInjector.exe were in a subfolder called 'tools'.
Code: 
tools\makerom -f ncch -target t -desc app:3 -rsf POKEMONY.rsf -logo extracted\logo.bin -romfs extracted\xored_romfs.bin -exheader extracted\xored_exheader.bin -code extracted\exefs\code.bin -icon extracted\exefs\icon.bin -banner extracted\exefs\banner.bin -alignwr -o POKEMONY.CXI
tools\exinjector -rom POKEMONY.cxi -exheader extracted\xored_exheader.bin -sd -fwspoof
tools\makerom -f cia -target t -content POKEMONY.cxi:0:0 -o POKEMONY.cia

Now for the rsf, apart from the obvious ProductCode, UniqueID, etc, you must set:

For CardInfo:
MediaSize: 2GB
MediaType: Card2
CardDevice: None

For Option:
MediaFootPadding: true
 
liomajor said:
3ds to cia v1.03

Required:
Python 2.7
(Add Path to windows enviroments!)

How to use:
1. Create your xorpads and put all files into 3ds to cia dir
2. Drag n drop .3ds / .3dz on make.bat

Freatures:

7.x Support
Region Free fix
Offers injecting original EXHEADER
Offers spoofing Firmware to 4.x
Offers using your own .rsf (no exinjector)
If a game manual is detected, it will be included
Choice to compress EXEFS - thx @ piratesephiroth

Info:
_makerom is 64bit makerom is 32bit

If your windows is 32bit, rename
makerom to _makerom (using _ in script!)

Included in Package:

ctrKeyGen
Launcher
slot0x25KeyX (you need to insert the key - google it!)

It looks pretty good at my side,
everything works well now.
Click to expand...


awnnn thank you ! you made my day
 
  • Like
Reactions: Margen67
piratesephiroth said:
Here's the bat code I used. The game's files were in a subfolder called 'extracted' (exefs files were in the folder extracted\exefs). Makerom.exe and ExInjector.exe were in a subfolder called 'tools'.
Code: 
tools\makerom -f ncch -target t -desc app:3 -rsf POKEMONY.rsf -logo extracted\logo.bin -romfs extracted\xored_romfs.bin -exheader extracted\xored_exheader.bin -code extracted\exefs\code.bin -icon extracted\exefs\icon.bin -banner extracted\exefs\banner.bin -alignwr -o POKEMONY.CXI
tools\exinjector -rom POKEMONY.cxi -exheader extracted\xored_exheader.bin -sd -fwspoof
tools\makerom -f cia -target t -content POKEMONY.cxi:0:0 -o POKEMONY.cia

Now for the rsf, apart from the obvious Procudt Code, UniqueID, etc, you must set:

For CardInfo:
MediaSize: 2GB
MediaType: Card2
CardDevice: None

For Option:
MediaFootPadding: true
Click to expand...
thx, i try it.
 
  • Like
Reactions: Margen67
liomajor said:
Indeed, i can confirm it working. As usual, i tested with my own .rsf
Code: 
BasicInfo:
  Title                  : "mirai200" # 0x0 exheader.bin
  CompanyCode            : "00" # 0x1110 game.3ds
  ProductCode            : "CTR-P-AHNJ" # 0x1150 game.3ds
  ContentType            : Application
  Logo                    : Nintendo
 
TitleInfo:
  UniqueId                : 0x00000cc4 # 0x1108 game.3ds in little endian
  Category                : Application
 
CardInfo:
  MediaType              : Card1 # Card1 / Card2
 
Option:
  UseOnSD                : true
  FreeProductCode        : true # Removes limitations on ProductCode
  EnableCrypt            : false # Enables encryption for NCCH and CIA
  MediaFootPadding        : false # If true CCI files are created with padding
  EnableCompress          : true # Compresses exefs code
 
AccessControlInfo:
  ExtSaveDataId: 0x00000cc4 # same as UniqueId
  SystemSaveDataId1: 0x00000000 # plaintext exheader
  SystemSaveDataId2: 0x00000000 # plaintext exheader
  OtherUserSaveDataId1: 0x00000 # plaintext exheader
  OtherUserSaveDataId2: 0x00000 # plaintext exheader
  OtherUserSaveDataId3: 0x00000 # plaintext exheader
  UseOtherVariationSaveData : false
 
SystemControlInfo:
  SaveDataSize: 128K # plaintext exheader / 0x1C0 exheader.bin
  RemasterVersion: 0000 # 0xE exheader.bin
  StackSize: 0x00008000 # 0x1C exheader.bin
 
CardInfo:
  MediaSize              : 4GB # 128MB / 256MB / 512MB / 1GB / 2GB / 4GB / 8GB / 16GB / 32GB #CHANGE ME
  CardDevice              : NorFlash # NorFlash / None #CHANGE ME
 
ExeFs: # these are the program segments from the ELF, check your elf for the appropriate segment names
  ReadOnly:
  - .rodata
  - RO
  ReadWrite:
  - .data
  - RO
  Text:
  - .init
  - .text
  - STUP_ENTRY
 
AccessControlInfo:
  FileSystemAccess:
  #- CategorySystemApplication
  #- CategoryHardwareCheck
  #- CategoryFileSystemTool
  - Debug
  #- TwlCardBackup
  #- TwlNandData
  #- Boss
  - DirectSdmc
  - DirectSdmcWrite
  #- Core
  #- CtrNandRo
  #- CtrNandRw
  #- CtrNandRoWrite
  #- CategorySystemSettings
  #- CardBoard
  #- ExportImportIvs
  #- DirectSdmcWrite
  #- SwitchCleanup
  #- SaveDataMove
  #- Shop
  #- Shell
  #- CategoryHomeMenu
  IoAccessControl:
  #- FsMountNand
  #- FsMountNandRoWrite
  #- FsMountTwln
  #- FsMountWnand
  #- FsMountCardSpi
  #- UseSdif3
  #- CreateSeed
  #- UseCardSpi
 
  IdealProcessor                : 0
  AffinityMask                  : 1
 
  Priority                      : 48
 
  MaxCpu                        : 0x9E # Default
 
  DisableDebug                  : false
  EnableForceDebug              : false
  CanWriteSharedPage            : false
  CanUsePrivilegedPriority      : false
  CanUseNonAlphabetAndNumber    : false
  PermitMainFunctionArgument    : false
  CanShareDeviceMemory          : false
  RunnableOnSleep              : false
  SpecialMemoryArrange          : false
 
  CoreVersion                  : 2
  DescVersion                  : 2
 
  ReleaseKernelMajor            : "02"
  ReleaseKernelMinor            : "33"
  MemoryType                    : Application # Application / System / Base
  HandleTableSize: 200
  IORegisterMapping:
  - 1ff50000-1ff57fff
  - 1ff70000-1ff77fff
  MemoryMapping:
  - 1f000000-1f5fffff:r
  SystemCallAccess:
    ArbitrateAddress: 34
    Break: 60
    CancelTimer: 28
    ClearEvent: 25
    ClearTimer: 29
    CloseHandle: 35
    ConnectToPort: 45
    ControlMemory: 1
    CreateAddressArbiter: 33
    CreateEvent: 23
    CreateMemoryBlock: 30
    CreateMutex: 19
    CreateSemaphore: 21
    CreateThread: 8
    CreateTimer: 26
    DuplicateHandle: 39
    ExitProcess: 3
    ExitThread: 9
    GetCurrentProcessorNumber: 17
    GetHandleInfo: 41
    GetProcessId: 53
    GetProcessIdOfThread: 54
    GetProcessIdealProcessor: 6
    GetProcessInfo: 43
    GetResourceLimit: 56
    GetResourceLimitCurrentValues: 58
    GetResourceLimitLimitValues: 57
    GetSystemInfo: 42
    GetSystemTick: 40
    GetThreadContext: 59
    GetThreadId: 55
    GetThreadIdealProcessor: 15
    GetThreadInfo: 44
    GetThreadPriority: 11
    MapMemoryBlock: 31
    OutputDebugString: 61
    QueryMemory: 2
    ReleaseMutex: 20
    ReleaseSemaphore: 22
    SendSyncRequest1: 46
    SendSyncRequest2: 47
    SendSyncRequest3: 48
    SendSyncRequest4: 49
    SendSyncRequest: 50
    SetThreadPriority: 12
    SetTimer: 27
    SignalEvent: 24
    SleepThread: 10
    UnmapMemoryBlock: 32
    WaitSynchronization1: 36
    WaitSynchronizationN: 37
  InterruptNumbers:
  ServiceAccessControl:
  - APT:U
  - $hioFIO
  - $hostio0
  - $hostio1
  - ac:u
  - boss:U
  - cam:u
  - cecd:u
  - cfg:u
  - dlp:FKCL
  - dlp:SRVR
  - dsp::DSP
  - frd:u
  - fs:USER
  - gsp::Gpu
  - hid:USER
  - http:C
  - mic:u
  - ndm:u
  - news:u
  - nwm::UDS
  - ptm:u
  - pxi:dev
  - soc:U
  - ssl:C
  - y2r:u
  - ldr:ro
  - ir:USER
 
SystemControlInfo:
  JumpId: 0x00040000000cc400
  Dependency:
    ac: 0x0004013000002402L
    am: 0x0004013000001502L
    boss: 0x0004013000003402L
    camera: 0x0004013000001602L
    cecd: 0x0004013000002602L
    cfg: 0x0004013000001702L
    codec: 0x0004013000001802L
    csnd: 0x0004013000002702L
    dlp: 0x0004013000002802L
    dsp: 0x0004013000001a02L
    friends: 0x0004013000003202L
    gpio: 0x0004013000001b02L
    gsp: 0x0004013000001c02L
    hid: 0x0004013000001d02L
    http: 0x0004013000002902L
    i2c: 0x0004013000001e02L
    ir: 0x0004013000003302L
    mcu: 0x0004013000001f02L
    mic: 0x0004013000002002L
    ndm: 0x0004013000002b02L
    news: 0x0004013000003502L
    nim: 0x0004013000002c02L
    nwm: 0x0004013000002d02L
    pdn: 0x0004013000002102L
    ps: 0x0004013000003102L
    ptm: 0x0004013000002202L
    ro: 0x0004013000003702L
    socket: 0x0004013000002e02L
    spi: 0x0004013000002302L
    ssl: 0x0004013000002f02L

EDIT:

Did create the game again using exinjector + spoof + region free, works as well fine.

aliak11

Maybe your src is borked, i dumped it myself and trimmed it with rom_tool because
my SD is FAT32 and the Size was too big for it untrimmed.
Click to expand...

I tried using your rsf, and having it make one. Yes I am using exinjector + spoof + region free. No matter what I do it hangs on the 3ds logo.
 
Filesize 2.012.451.840 Bytes? I still have my .cia, i can offer zidrav fix, this can create patch files so it doesnt contain nintendos code ;)

BUT, works only if its the same size!
 
liomajor said:
Filesize 2.012.451.840 Bytes? I still have my .cia, i can offer zidrav fix, this can create patch files so it doesnt contain nintendos code ;)

BUT, works only if its the same size!
Click to expand...

Mine is only 1,915,731,968 bytes, could that be the problem?
 
aliak11 said:
Yes it is the CIA. Should I dump the game again?
Click to expand...

romfs.bin should be 2.007.883.776 Bytes and there is a manual

Aurora Wright said:
piratesephiroth could it be possible to make a tool to make a rsf out of a ROM's exheader data? Coupled with the 3dbrew documentation it would make it easier to learn
Click to expand...

I already thought about that, but currently too tired for more than simple batch ;)
 

Site & Scene News

Go to forum More news

Popular threads in this forum

Gaming Homebrew ROM Hack Others  I overhauled a plugin for Pokémon X/Y/OR/AS — spawn any Pokémon, shop anywhere, edit your team, know your enemy, teleport and many more!

Homebrew Homebrew app  [WIP] Spoti3DS – Native Spotify Connect Client for 3DS

Homebrew  NightClock : a relaxing clock app

Homebrew  Twilight Princess Port Indev by Game of Tobi

Hacking  How do I fix 3DS blue light black screen?

[Project Idea] Super Mario Galaxy Demake for Nintendo 3DS

[Project Idea] Splatoon Demake for Nintendo 3DS

Homebrew Project  reBadge is finally live!