Hacking Emunand 9.6+ on N3DS

[Deleted-236924]

Then how does rxtools work? When was N3DS support added exactly?

 

[Deleted-19228]

So there's not much hope of being able to play legit cartridges on a downgraded N3DS any time soon, then?

What are you talking about? No new games require any firmware passed 9.4 and even that's only required if you use Amiibo.

 

[Ailuros27]

Games like Tri Force Heroes have the new encryption, no?

 

[Deleted-236924]

What are you talking about? No new games require any firmware passed 9.4 and even that's only required if you use Amiibo.

Plenty of retail cartridges come with an update on them and they require you to update if you want to play them. A lot of them have an update higher than 9.4 on them.

Games like Tri Force Heroes have the new encryption, no?

eShop version yes (digital version.)
Retail cartridge no.

 

[Aroth]

Then how does rxtools work? When was N3DS support added exactly?

N3DS support was added wit the 3.0 nightlies. It works the same way as GW and Reinand and all the rest. The only difference is GW patches the kernel version (apparently, not 100% sure how they do it or if this is exactly what they are doing)

What are you talking about? No new games require any firmware passed 9.4 and even that's only required if you use Amiibo.

Um, yes they do. The newest games "require" 9.9 at the moment. In reality they are all SDK7 games so they only really require whatever update coincides with SDK7 support, but they ship with 9.9 on the cart and if you are lower than that it will prompt to install it. In addition they all have exheaders expecting a newer kernel version than is used with 9.5 so they hang on the 3DS logo unless the exheader is patched or the kernel version is spoofed.

--------------------- MERGED ---------------------------

Games like Tri Force Heroes have the new encryption, no?

eShop version yes (digital version.)
Retail cartridge no.

This ONLY applies to versions downloaded from the eshop. If you are using a CFW and convert a rom ripped from a retail cart (.3ds) to .cia it will install just fine.

That said it will still hang on the 3ds logo if you did not patch the exheader.

 

[Deleted-236924]

N3DS support was added wit the 3.0 nightlies. It works the same way as GW and Reinand and all the rest. The only difference is GW patches the kernel version (apparently, not 100% sure how they do it or if this is exactly what they are doing)

When exactly during the 3.0 nightlies was N3DS support added? Was it added with the first 3.0 nightly or somewhere at some point?
Also how does firmlaunch work anyway?

Because I know the 9/28 nightly just uses one firmware.bin file, that you generate with cdn_firm.py and place in the sys folder.
Works for me on O3DS, but then if you tried running that on N3DS it would work too no? Or would it be unable to load the firmware because it is 9.6 or higher? If 9/28 3.0 is supposed to be compatible with both O3DS and N3DS then that would be weird because then the firmware.bin is compatible with O3DS but not N3DS.

Or I guess if rxtools uses a 9.5 firm even on O3DS then it would work on both, hmm. But would be a waste to limit o3ds to 9.5 firm when you could be on higher firm.

 

[Ailuros27]

So I won't be able to play MH4U, TFH, or Hyrule Warriors Legends on a New 3DS without turning them into CIAs and fixing the Exheader?

 

[Aroth]

When exactly during the 3.0 nightlies was N3DS support added? Was it added with the first 3.0 nightly or somewhere at some point?
Also how does firmlaunch work anyway?

Because I know the 9/28 nightly just uses one firmware.bin file, that you generate with cdn_firm.py and place in the sys folder.
Works for me on O3DS, but then if you tried running that on N3DS it would work too no? Or would it be unable to load the firmware because it is 9.6 or higher?

Or I guess if rxtools uses a 9.5 firm even on O3DS then it would work on both, hmm. But would be a waste to limit o3ds to 9.5 firm when you could be on higher firm.

It was added pretty early on iirc.

Firmlaunch is the process of launching a firm from your sd card (this is basically the concept behind emunand in the first place)

No you cannot use the same file. You need a firmware.bin file from a N3DS native_firm. There is a tutorial (by @Xenon Hacks iirc) that does a wonderful job explaining how to set up rxtools on a N3DS and where to get the proper firmware.bin

 

[Deleted-236924]

Ah okay, so the firmware.bin generated by cdn_firm.py in the rxTools download won't actually work on N3DS and you need to download a different one from a different source.
It all makes sense now.

 

[Aroth]

Or I guess if rxtools uses a 9.5 firm even on O3DS then it would work on both, hmm. But would be a waste to limit o3ds to 9.5 firm when you could be on higher firm.

The O3DS doesnt have the key change that is causing problems on the N3DS so we are still able to decrypt its native_firm. Thats why O3DS has 10.3 emunand support but N3DS is limited to 9.5

So I won't be able to play MH4U, TFH, or Hyrule Warriors Legends on a New 3DS without turning them into CIAs and fixing the Exheader?

Correct

--------------------- MERGED ---------------------------

Ah okay, so the firmware.bin generated by cdn_firm.py in the rxTools download won't actually work on N3DS and you need to download a different one from a different source.
It all makes sense now.

Exactly

edit:

last i checked you should use the one from reinand for the N3DS (that might have changed since October when i set up mine)

 

[Ailuros27]

Well, I can dump them from the Gateway tool or other tools, and follow a tutorial to fix the exheader, or wait for fixed versions to show up on that site, right?

 

[Aroth]

Well, I can dump them from the Gateway tool or other tools, and follow a tutorial to fix the exheader, or wait for fixed versions to show up on that site, right?

YOu dont need gateways cart to dump them. So use the menu (you can launch it with hbl now) to dump the cart, then look for 3DS Simple CIA Converter v4.3 and use it to generate the ncchinfo.bin file, then use that with Decrypt9WIP to generate xorpads. Then use the xorpads with the converter to create the cia files. The converter has an option you can enable to spoof the fw.

edit:

For updates I would suggest getting them on that site since fixing updates is a pain in the ass in my opinion.

Also this obviously wont work for eshop only games. Those you will have to find cryptofixed versions of on that site.

 

[Deleted-236924]

Also can we say we're safe in thinking we'll always be able to update emunand to latest firmware on O3DS?

Since the additional layer of security the N3DS has is hardware-based, they can't exactly go back and add it to the O3DS.

I think that's pretty cool because if you have an O3DS then you can rest easy because then as long as you never update sysnand you'll always be able to be on latest firmware with emunand, still have access to all the newer features, still have access to everything online, etc.... never lose cfw, never lose hacks, always be able to access all the newer stuff as if you had your system updated legit.

I'm not sure if there's anything Nintendo can possibly do to add extra security that would prevent us from updating emunand on O3DS. If there was a way I'm sure they'd have done it a long time ago.

 

[Aroth]

Also can we say we're safe in thinking we'll always be able to update emunand to latest firmware on O3DS?

Since the additional layer of security the N3DS has is hardware-based, they can't exactly go back and add it to the O3DS.

I think that's pretty cool because if you have an O3DS then you can rest easy because then as long as you never update sysnand you'll always be able to be on latest firmware with emunand, still have access to all the newer features, still have access to everything online, etc.

Yes, there only time you can't update to the latest version on an O3DS is when a change to native_firm or the home menu breaks some feature of the cfw. This is why it is recommended that you not take updates as soon as they become available and wait for confirmation on the forums that it is still safe.

That said if you are smart you can just back up your emunand with the pc tool, then update. If something doesnt work or it blackscreens, just use the tool to inject the backup you made back into the sd card and carry on until someone says its safe.

 

[Deleted-236924]

But if a change breaks some feature of the cfw, it'll be possible for us to fix it and make it work again without much trouble yeah? Compared to N3DS where we are pretty much stuck because we can't get the keys, at least not yet.

 

[Aroth]

But if a change breaks some feature of the cfw, it'll be possible for us to fix it and make it work again without much trouble yeah? Compared to N3DS where we are pretty much stuck because we can't get the keys, at least not yet.

Yeah, usually its a quick fix on the devs side (like when an update breaks the multi-rom menu in GW).

Specifically the problem with the N3DS is they added a keyslot and then with 9.6 they started using that key and then clearing it immediately after use so we can't dump it. It is possible even that they could change the keys in the future with another update, rendering the existing ones useless if we do manage to crack them. Basically we would get emunand access up to, say, 10.3, then with 10.4 they change the keys and we are stuck. Not 100% sure they can do this with the N3DS but from what I have seen it looks like it.

 

[Ailuros27]

What are you talking about? No new games require any firmware passed 9.4 and even that's only required if you use Amiibo.

YOu dont need gateways cart to dump them. So use the menu (you can launch it with hbl now) to dump the cart, then look for 3DS Simple CIA Converter v4.3 and use it to generate the ncchinfo.bin file, then use that with Decrypt9WIP to generate xorpads. Then use the xorpads with the converter to create the cia files. The converter has an option you can enable to spoof the fw.

edit:

For updates I would suggest getting them on that site since fixing updates is a pain in the ass in my opinion.

Also this obviously wont work for eshop only games. Those you will have to find cryptofixed versions of on that site.

Got any suggestions for a good tutorial for that, then? I may have one in my watched threads, but probably not, since I'm new to this.

 

[Aroth]

Got any suggestions for a good tutorial for that, then? I may have one in my watched threads, but probably not, since I'm new to this.

For cryptofixing?

 

[Ailuros27]

For this:
"YOu dont need gateways cart to dump them. So use the menu (you can launch it with hbl now) to dump the cart, then look for 3DS Simple CIA Converter v4.3 and use it to generate the ncchinfo.bin file, then use that with Decrypt9WIP to generate xorpads. Then use the xorpads with the converter to create the cia files. The converter has an option you can enable to spoof the fw."

--------------------- MERGED ---------------------------

And I meant the Gateway menu, not the card.

 

[Aroth]

For this:
"YOu dont need gateways cart to dump them. So use the menu (you can launch it with hbl now) to dump the cart, then look for 3DS Simple CIA Converter v4.3 and use it to generate the ncchinfo.bin file, then use that with Decrypt9WIP to generate xorpads. Then use the xorpads with the converter to create the cia files. The converter has an option you can enable to spoof the fw."

Don't really need a tutorial.
Download 3DS Simple CIA Converter v4.3 and extract it to your computer.
Download Decrypt9WIP (i dont have a link for this or the converter) and put in on your sd card in the /3ds/ folder.
Download gateways latest update (3.6.2) and copy the launcher.dat file and /3ds/ folder to the root of your sd card.
Put the game you want to dump in the card slot.
Launch the hbl then gateway from the hbl.
Navigate to "dump game cartridge".
When its done copy the .3ds file from your sd card to the "roms" folder of your sd card and then follow the instructions that come with the converter.

If you are using rxtools you do not need decrypt9