ROM Hack [Tutorial] How to Decrypt, Extract & Rebuild 3DS|CIA|CXI Files

[Asia81]

You can also read my entire message.

 

[IWantAHug]

So yesterday, I used HackingToolkit9ds to extract a fire emblem fates cia that I wanted to mod, I rebuilt it with the V9 of the tool but when I try to install i, it fails and deletes my old game, is there a way to fix this?


edit1: I tried to reextract the cia file and it asks me if I want to decompress the code.bin file, I press yes and it extracts it as normal

 

[PrincessLillie]

So, I've been attempting to extract the ui_character_db.bin from Smash 3DS, but HackingToolkit9DS will just not do it. It extracts the CIA fine, but when attempting to extract the .bin files, I get an empty ExtractedExeFS folder and nothing else. Help?

 

[Asia81]

Extraction of SSB work fine here. Make sure your game is NOT decrypted...

 

[PrincessLillie]

Extraction of SSB work fine here. Make sure your game is NOT decrypted...

I have ensured that it is not decrypted, and it still doesn't work right. Could it be because I'm using a CIA?

 

[Asia81]

No, I also tried a CIa and it extract just fine.
Something is wrong with your CIA.

 

[PrincessLillie]

No, I also tried a CIa and it extract just fine.
Something is wrong with your CIA.

:thinking:
All I did was build a CIA from the .app files using GM9

 

[Majickhat55]

:thinking:
All I did was build a CIA from the .app files using GM9

Pretty sure Godmode builds decrypted .CIAs. Just throw it in D9 and encrypt it real quick or use V9 of hackingtoolkit.

 

[Asia81]

And this is exactly what's the problem

You still can decrypt it and use V9 instead (it's a workaround for now).

By clean, I meant downloaded from nintendo's servers (with FunkyCIA2 or FunkeyCIA), or a .CIA converted from a .3DS using 3dsconv.
If I'm right, GodeMode9 dump the CIA already decrypted, what is not compatible with V10+, as it need a clean/encrypted .3DS or .CIA to work.

Ninja'd

 

[PrincessLillie]

Pretty sure Godmode builds decrypted .CIAs. Just throw it in D9 and encrypt it real quick or use V9 of hackingtoolkit.

Well, fuck
I think I found a Smash dumping tutorial that'll solve all of my problems, though
I'll let you know how it goes

 

[Majickhat55]

Well, fuck
I think I found a Smash dumping tutorial that'll solve all of my problems, though
I'll let you know how it goes

If it's already decrypted you can just use CTRTool to extract the ExeFs/RomFS contents from the .bins if that's your goal.

 

[easycrashing]

are you able to go from encrypted .3ds > decrypted .3ds?

3dsconv just does to cia

 

[Majickhat55]

are you able to go from encrypted .3ds > decrypted .3ds?

3dsconv just does to cia

You can use godmode/D9 to encrypt .3DS files.

 

[easycrashing]

You can use godmode/D9 to encrypt .3DS files.

i was hoping to do it without copying big files back and forth to 3ds

 

[MPorras00]

i'm decrypt but when i need to rebuild, if i hexedit the .bin (ncch0 or 1, exfs, header o decryptheader) for a new tittleid the tool don´t builds anythig; somebody can give me a clue ?

 

[Majickhat55]

i was hoping to do it without copying big files back and forth to 3ds

As far as I know, most programs have been updated to decrypt with the dumped bootrom, but no one is concerned about encryption because the files come that way already most of the time. Did you download the game from some warez site? Because most of the time they're decrypted (cryptofixed) so they don't give people issues during installation.

You have to either dump the file yourself, or move it to the SD card and use a program to encrypt it. Though I haven't checked, but I think 3DStool has been updated to use the dumped bootroms. I don't know if it includes and encryption command though.

i'm decrypt but when i need to rebuild, if i hexedit the .bin (ncch0 or 1, exfs, header o decryptheader) for a new tittleid the tool don´t builds anythig; somebody can give me a clue ?

IIRC the title ID is present twice in the NCCH header and up to three times in the exheader used for CXIs, you have to change all instances for it to work. They are also displayed backwards in HxD as they are in little-endian. So instead of ABC (00ABC) you'll see something like CB 0A 00....

 

[MPorras00]

IIRC the title ID is present twice in the NCCH header and up to three times in the exheader used for CXIs, you have to change all instances for it to work. They are also displayed backwards in HxD as they are in little-endian. So instead of ABC (00ABC) you'll see something like BC 0A 00....

Yes i did exactly that, but don´t work, in the last try i hexedited xxxxncch0.bin xxxxxncch1.bin & xxxxxxexheader.bin without change the ROM (the final porpouse a pokemon green spanish translation over pokemon blue Spanish), the final size increase and fbi give me NCCH (37) error

maybe i can work with a english cia but don't have manual (i want a fully cia) ant the trade system start to give me issues, thanks for help

 

[Majickhat55]

Yes i did exactly that, but don´t work, in the last try i hexedited xxxxncch0.bin xxxxxncch1.bin & xxxxxxexheader.bin without change the ROM (the final porpouse a pokemon green spanish translation over pokemon blue Spanish), the final size increase and fbi give me NCCH (37) error

maybe i can work with a english cia but don't have manual (i want a fully cia) ant the trade system start to give me issues, thanks for help

Hmm is it necessary to edit both of the NCCH headers (I imagine it is, I'm just thinking out loud Lol)? Try just editing one of them along with the exheader and see what happens.

 

[MPorras00]

Hmm is it necessary to edit both of the NCCH headers (I imagine it is, I'm just thinking out loud Lol)? Try just editing one of them along with the exheader and see what happens.

I have a USA "beta" that i've found in that ISO Site, when i change the ROM the only issue is that the trades don't work, and don't have manual, in the last option, any tutorial or solution to these 2 issues ?

 

[Majickhat55]

I have a USA "beta" that i've found in that ISO Site, when i change the ROM the only issue is that the trades don't work, and don't have manual, in the last option, any tutorial or solution to these 2 issues ?

Hmm this is the only tutorial of sort I know of that is related to what you're doing..https://gbatemp.net/threads/release...tual-console-wireless-linking-patches.439986/

I know it's for Gen 2, but that's all I could really find.