ROM Hack [Release] UpdateCDN - download 3DS FW contents, create installable .cia

[liomajor]

Okay, i managed to update from 4.5.0-20E to 8.1.0-19E.

4.5.0-20E to 9.0.0-20 didn't work, dunno if it has anything to do with 9.0.0-20 stage1-4.

 

[sgtkwol]

I have an idea for how this could be super-helpful in very specific situations, in the future.

Situation: Update > 9.4 launches, update not available for EmuNAND, super cool eshop/update thing you want was released after the 3ds update.

Steps: Back up SD card, run the update via CIA install, open Eshop and get what you want, decrypt it and create the CIA, restore SD card backup and install your CIA file.

 

[Belmondo]

This would be the sure fire way for people not to "accidently" update their SYSnand.

 

[loco365]

So I was talking on an irc chat with someone that updated only CVer and NVer on their emuNAND. Not only did it do this:

Spoiler

Note: This was taken prior to GW 2.7's release.

But it also seems to have prevented his emuNAND from updating! If correct, you could just update the NVer and CVer, and have a permanent fix for accidental updates.

 

[Thomas12345]

wait i'm confused... we can already install CIAs with devmenu, so what's the point of using this tool to install cia?

 

[Shadowtrance]

It doesn't install cia's. It DOWNLOADS system updates from nintendo and converts them to cia so you can manually update to a specific version.

 

[Thomas12345]

It doesn't install cia's. It DOWNLOADS system updates from nintendo and converts them to cia so you can manually update to a specific version.

Oh ok i see, thx.

But what's special about these videos people are downloading?

 

[Shadowtrance]

I have no idea what's so special about the videos they're downloading.

Guess they wanted to see if they'd work or not.

 

[The Real Jdbye]

I suppose the reason region changing didn't work that easily is because the region flag is actually set in a configuration file or similar somewhere, but if we could spoof the region for the out-of-region eShop and such, they might be able to work without changing the region of the NAND itself. I guess it's up to Gateway or some hackers to find out of that's at all possible and perhaps release something.
This is the beginning of great things The 3DS scene is really speeding up, there have been new advancements made for the public rather frequently lately. First the CTR decryptor, then the SD decryptor, and now this. Not to mention all the leaks and the advancements made by Gateway.

Good things are in store for 3DS hacking.
Also, wouldn't this make it relatively easy to modify the firmware and do all sorts of things we can't with GW alone? If we have working cia files of the entire system firmware, then decrypting them should be a breeze

 

[loco365]

I have no idea what's so special about the videos they're downloading.

Guess they wanted to see if they'd work or not.

The reason they're so special is because they were ONLY in 1.1.0, and were removed in 2.0.0, and was never released again.

 

[Thomas12345]

oh ok i see. This is all for emunand though right? I still cannot change my system firmware?

 

[liomajor]

cearp

I've trouble to update beyond 8.1.0 EUR, i tried from 4.5.0 and 8.1.0 to 9.0.0/9.2.0/9.4.0.

Did anyone manage to do that?

 

[loco365]

oh ok i see. This is all for emunand though right? I still cannot change my system firmware?

For now, no. However, with the GW update that promises 9.X support, it might be feasible.

 

[williamcesar2]

'' Decrypt and Re-Encrypt NAND? ''

 

[Duo8]

I suppose the reason region changing didn't work that easily is because the region flag is actually set in a configuration file or similar somewhere, but if we could spoof the region for the out-of-region eShop and such, they might be able to work without changing the region of the NAND itself. I guess it's up to Gateway or some hackers to find out of that's at all possible and perhaps release something.
This is the beginning of great things The 3DS scene is really speeding up, there have been new advancements made for the public rather frequently lately. First the CTR decryptor, then the SD decryptor, and now this. Not to mention all the leaks and the advancements made by Gateway.

Good things are in store for 3DS hacking.
Also, wouldn't this make it relatively easy to modify the firmware and do all sorts of things we can't with GW alone? If we have working cia files of the entire system firmware, then decrypting them should be a breeze

Have anyone tried to look in the system data archives?
I heard that even 2 new, OoTB 3DS's NANDs are different (and not just movable.sed)
Maybe we'll eventually be able to build NAND images.

 

[nanika]

cearp Have you tried installing the regional promotional videos? I can't get them to work for some reason.

They're considered 'downgrading' the files to how they once were in 1.1.0, so you'll have to edit the tmd to give it a higher version number.

 

[cearp]

No, they have their own cetk and tmd, but make_cdn_cia can't handle multiple folders and create one cia

so my python script has a bug?
maybe, what csv did you use?

I have an idea for how this could be super-helpful in very specific situations, in the future.
Situation: Update > 9.4 launches, update not available for EmuNAND, super cool eshop/update thing you want was released after the 3ds update.
Steps: Back up SD card, run the update via CIA install, open Eshop and get what you want, decrypt it and create the CIA, restore SD card backup and install your CIA file.

how would this be useful? you cannot use the theoretical new version you just updated to because gw does not support it yet... otherwise you could have updated normally... right?

They're considered 'downgrading' the files to how they once were in 1.1.0, so you'll have to edit the tmd to give it a higher version number.

i guess i should share my tmd editor soon

 

[liomajor]

so my python script has a bug?
maybe, what csv did you use?

No, make_cdn_cia is the problem. It's no big deal, l+r+a works.

Updating to 8.1.0-19 EUR is no problem (start has to be between 4.0.0-7 and 5.0.0-11) using your included csv.

Used Files updating to 8.1.0-19 EUR

Spoiler

5.0.0-11\0004003000009B02.cia
5.0.0-11\0004003000009C02.cia
5.0.0-11\000400DB00010302.cia
6.0.0-11\0004001000022300.cia
6.0.0-11\0004001000022800.cia
6.0.0-11\0004001000022F00.cia
6.0.0-11\0004013000002D03.cia
6.0.0-11\0004013800000202.cia
6.2.0-12E\0004013800000102.cia
6.3.0-12\0004001B00010802.cia
7.0.0-13\0004001000022200.cia
7.0.0-13\0004001000022400.cia
7.0.0-13\0004001000022500.cia
7.0.0-13\0004001000022700.cia
7.0.0-13\0004001000022A00.cia
7.0.0-13\0004001000022D00.cia
7.0.0-13\0004001000022E00.cia
7.0.0-13\0004001B00010702.cia
7.0.0-13\0004001B00018102.cia
7.0.0-13\0004001B00018202.cia
7.0.0-13\0004003000009802.cia
7.0.0-13\0004003000009F02.cia
7.0.0-13\000400300000D002.cia
7.0.0-13\000400300000F602.cia
7.0.0-13\0004009B00010402.cia
7.0.0-13\0004009B00015102.cia
7.0.0-13\0004800F484E4841.cia
7.1.0-16\0004003000009D02.cia
7.2.0-17\0004001000022000.cia
7.2.0-17\000400100002C100.cia
7.2.0-17\0004001B00018002.cia
7.2.0-17\000400300000BE02.cia
7.2.0-17\0004009B00013102.cia
8.0.0-18\0004003000008A02.cia
8.0.0-18\000400300000D402.cia
8.0.0-18\000400300000D602.cia
8.0.0-18\0004009B00012102.cia
8.0.0-18\000400DB00010502.cia
8.0.0-18\0004013000001502.cia
8.0.0-18\0004013000001602.cia
8.0.0-18\0004013000001702.cia
8.0.0-18\0004013000001802.cia
8.0.0-18\0004013000001A02.cia
8.0.0-18\0004013000001B02.cia
8.0.0-18\0004013000001C02.cia
8.0.0-18\0004013000001D02.cia
8.0.0-18\0004013000001E02.cia
8.0.0-18\0004013000001F02.cia
8.0.0-18\0004013000002002.cia
8.0.0-18\0004013000002102.cia
8.0.0-18\0004013000002202.cia
8.0.0-18\0004013000002302.cia
8.0.0-18\0004013000002402.cia
8.0.0-18\0004013000002602.cia
8.0.0-18\0004013000002702.cia
8.0.0-18\0004013000002802.cia
8.0.0-18\0004013000002A02.cia
8.0.0-18\0004013000002B02.cia
8.0.0-18\0004013000002C02.cia
8.0.0-18\0004013000002D02.cia
8.0.0-18\0004013000002E02.cia
8.0.0-18\0004013000002F02.cia
8.0.0-18\0004013000003102.cia
8.0.0-18\0004013000003202.cia
8.0.0-18\0004013000003302.cia
8.0.0-18\0004013000003402.cia
8.0.0-18\0004013000003502.cia
8.0.0-18\0004013000003702.cia
8.0.0-18\0004013000003802.cia
8.0.0-18\0004013000008002.cia
8.0.0-18\0004013800000002.cia
8.1.0-18\000400DB00017102.cia
8.1.0-18\0004013000002902.cia
8.1.0-19\0004001000022900.cia
8.1.0-19\000400DB00016102.cia

I tried different tests and going beyond 8.1.0-19 ends in blackscreen :/

Used Files 4.5.0 > 9.4.0 (not working) - 9.4.0-21.csv

Spoiler

6.0.0-11\0004001000022300.cia
6.0.0-11\0004001000022800.cia
6.0.0-11\0004001000022F00.cia
6.0.0-11\0004013000002D03.cia
6.0.0-11\0004013800000202.cia
6.2.0-12E\0004013800000102.cia
6.3.0-12\0004001B00010802.cia
7.0.0-13\0004001000022200.cia
7.0.0-13\0004001000022500.cia
7.0.0-13\0004001000022700.cia
7.0.0-13\0004001000022D00.cia
7.0.0-13\0004001000022E00.cia
7.0.0-13\0004009B00010402.cia
7.0.0-13\0004009B00015102.cia
7.0.0-13\0004800F484E4841.cia
7.1.0-16\0004003000009D02.cia
8.0.0-18\0004013000001A02.cia
8.0.0-18\0004013000001B02.cia
8.0.0-18\0004013000001F02.cia
8.0.0-18\0004013000002002.cia
8.0.0-18\0004013000002102.cia
8.0.0-18\0004013000002202.cia
8.0.0-18\0004013000002302.cia
8.0.0-18\0004013000002A02.cia
9.0.0-20\0004001000022000.cia
9.0.0-20\0004001000022100.cia
9.0.0-20\0004001000022400.cia
9.0.0-20\0004001000022A00.cia
9.0.0-20\0004001020022300.cia
9.0.0-20\0004001020022D00.cia
9.0.0-20\0004001020025100.cia
9.0.0-20\000400102002D200.cia
9.0.0-20\000400102002D400.cia
9.0.0-20\000400102002D600.cia
9.0.0-20\0004001B00010702.cia
9.0.0-20\0004001B00018102.cia
9.0.0-20\0004001B00018202.cia
9.0.0-20\0004003000008A02.cia
9.0.0-20\0004003000009902.cia
9.0.0-20\0004003000009B02.cia
9.0.0-20\0004003000009C02.cia
9.0.0-20\0004003000009F02.cia
9.0.0-20\000400300000A002.cia
9.0.0-20\000400300000BA02.cia
9.0.0-20\000400300000C502.cia
9.0.0-20\000400300000CD02.cia
9.0.0-20\000400300000D002.cia
9.0.0-20\000400300000D402.cia
9.0.0-20\0004003020008A03.cia
9.0.0-20\000400302000C503.cia
9.0.0-20\000400302000D003.cia
9.0.0-20\0004009B00013102.cia
9.0.0-20\0004013000001502.cia
9.0.0-20\0004013000001802.cia
9.0.0-20\0004013000002602.cia
9.0.0-20\0004013000002702.cia
9.0.0-20\0004013000002802.cia
9.0.0-20\0004013000002902.cia
9.0.0-20\0004013000002B02.cia
9.0.0-20\0004013000002D02.cia
9.0.0-20\0004013000002E02.cia
9.0.0-20\0004013000002F02.cia
9.0.0-20\0004013000003102.cia
9.0.0-20\0004013000003202.cia
9.0.0-20\0004013000003402.cia
9.0.0-20\0004013000003502.cia
9.0.0-20\0004013020001503.cia
9.0.0-20\0004013020001703.cia
9.0.0-20\0004013020001803.cia
9.0.0-20\0004013020001A03.cia
9.0.0-20\0004013020001B03.cia
9.0.0-20\0004013020001C03.cia
9.0.0-20\0004013020001D03.cia
9.0.0-20\0004013020001E03.cia
9.0.0-20\0004013020001F02.cia
9.0.0-20\0004013020001F03.cia
9.0.0-20\0004013020002103.cia
9.0.0-20\0004013020002202.cia
9.0.0-20\0004013020002203.cia
9.0.0-20\0004013020002302.cia
9.0.0-20\0004013020002303.cia
9.0.0-20\0004013020002403.cia
9.0.0-20\0004013020002703.cia
9.0.0-20\0004013020002903.cia
9.0.0-20\0004013020002C03.cia
9.0.0-20\0004013020002D03.cia
9.0.0-20\0004013020002E03.cia
9.0.0-20\0004013020002F03.cia
9.0.0-20\0004013020003103.cia
9.0.0-20\0004013020003203.cia
9.0.0-20\0004013020003303.cia
9.0.0-20\0004013020004102.cia
9.0.0-20\0004013020008003.cia
9.0.0-20\0004013820000003.cia
9.0.0-20\0004013820000102.cia
9.0.0-20\0004013820000202.cia
9.3.0-21-stage2\0004001000022900.cia
9.3.0-21-stage2\000400100002C100.cia
9.3.0-21-stage2\0004001B00018002.cia
9.3.0-21-stage2\0004001B00019002.cia
9.3.0-21-stage2\000400300000B902.cia
9.3.0-21-stage2\000400300000BE02.cia
9.3.0-21-stage2\000400300000D102.cia
9.3.0-21-stage2\000400300000D302.cia
9.3.0-21-stage2\000400300000D602.cia
9.3.0-21-stage2\000400300000F602.cia
9.3.0-21-stage2\0004009B00012102.cia
9.3.0-21-stage2\000400DB00010302.cia
9.3.0-21-stage2\000400DB00010502.cia
9.3.0-21-stage2\000400DB00016102.cia
9.3.0-21-stage2\0004013000001602.cia
9.3.0-21-stage2\0004013000001702.cia
9.3.0-21-stage2\0004013000001C02.cia
9.3.0-21-stage2\0004013000001D02.cia
9.3.0-21-stage2\0004013000001E02.cia
9.3.0-21-stage2\0004013000002402.cia
9.3.0-21-stage2\0004013000002C02.cia
9.3.0-21-stage2\0004013000003302.cia
9.3.0-21-stage2\0004013000003702.cia
9.3.0-21-stage2\0004013000003802.cia
9.3.0-21-stage2\0004013000004002.cia
9.3.0-21-stage2\0004013000008002.cia
9.3.0-21-stage2\0004013800000002.cia
9.3.0-21-stage3\000400102002D000.cia
9.3.0-21-stage3\0004003020009D02.cia
9.3.0-21-stage3\000400DB20016102.cia
9.3.0-21-stage3\0004013020001602.cia
9.3.0-21-stage3\0004013020001C02.cia
9.3.0-21-stage3\0004013020001E02.cia
9.3.0-21-stage3\0004013020004002.cia
9.3.0-21-stage3\0004013020004202.cia
9.3.0-21-stage3\0004013820000002.cia
9.4.0-21\0004003000009802.cia
9.4.0-21\000400DB00017102.cia

EDIT:

Looks like i found why 8.1.0 > 9.X.X gives blackscreen

Testing...

 

[liomajor]

sorry, browser lagged and refreshing posted content again

 

[Relys]

Sorry if this has been mentioned already (I rarely read these forums lately because of all the useless duplicate threads) but I think the reason that people on firmwares below/including 4.5 shouldn't upgrade is not only because of the fact that they don't have support yet, but also because shit like Relys 3DS_Multi_Decryptor don't (and probably never will) support +4.5
I really hope they end up enabling region spoofing for eShop

Ummm, well it would be trivial to port my code over if we reverse the ROP chain and payload stages in the new Gateway exploit to gain at least ARM9 access. Someone will just need to crack the undoubted layer of new obfuscation techniques that Gateway adds every major release. Also, New 3DS models have an extra layer of encryption on FIRM for ARM9.

 

[pikatsu]

Can anyone make a list of what files needed to be installed to get each firmware? If anyone knows i downloaded doth 4.5.0-10E and 9.2.0-20E without error and there is in both a folder 2.0.0-2 with different size and files inside. Why that?