ROM Hack Dump eShop Games from 10.2.0 3DS?

[xXDungeon_CrawlerXx]

Hey Guys,

I want to know if it's possible to dump eShop Games on Firmware 10.2.0.
I know that you can dump the romfs and exefs of a game with braindump but it there a way to dump ALL Files (including exheader?)?
I've got some stuff on my 3DS which is on Firmware 10.2.0 and I'm able to start homebrew stuff on it but can I dump the eshop-games of it to create CIAS of them for my N3DS (9.0)?

 

[Wuigi]

Sorry to disappoint you, but you need the console-unique file ticket.db for this which contains the tickets for downloadable content as well as firmware files and you can only get this file if you are on 9.2 or below or have the fat16 xorpad you previously created on a firmware that is 9.2 or below on your 3DS to decrypt a NAND dump you can also create via a hardmod. So for now a clear no.

 

[xXDungeon_CrawlerXx]

Sorry to disappoint you, but you need the console-unique file ticket.db for this which contains the tickets for downloadable content as well as firmware files and you can only get this file if you are on 9.2 or below or have the fat16 xorpad you previously created on a firmware that is 9.2 or below on your 3DS to decrypt a NAND dump you can also create via a hardmod. So for now a clear no.

hmm... that's weird :/ braindump is able to extract decrypted romfs AND exefs on 10.2.0.
So other question: Do I REALLY need the exheader-file of the game or can I use one of another game (or a template?)
It's because I know someone who is able to get a Retail game as eShop-Code ~1month before release (Press staff)

 

[Wuigi]

The exheader must match the game of course, so there is no possibility to do that. I think all three partitions of a game must be present to create a cia with makerom or make_cia. Neobrain teasered that exefs and romfs won't be the only thing you can dump in the future, but for now that's it. The only way to get a full cia of a game you own is only FunkyCia and this requires as I said the ticket.db of the 3DS.
Edit:
Neobrain even said that dumping the exheader is not possible in a userland exploit, the additional features don't regard the addition of exheader dumping then.