Hacking (4.x only) CIA CFW Complete Guide

[Cacacea]

Does anyone tried to install DevMenu on 3DS fw 4.1? It doesn't work. Screen flashes white then black for a second but top screen is blue, then my 3DS just freeze.
I installed DevMenu in my 3DS XL fw 4.2 it worked fine.

- Changed SD Card
- I did the guide 3 times, always same result.

I'm thinking that the exploit doesn't run on fw 4.1.

Now I'm waiting arrive the game Donkey Kong Country Returns, which have fw 4.5, to update this 3DS and try to install cfw again.

I can confirm is working on 4.1

 

[djalmafreestyler]

I can confirm is working on 4.1

To be exact, my brother's 3DS is with 4.1.0-6U version, which version is yours?

Can you explain me what's 6U?
The U I understand that is USA, what about 6?

 

[4gionz]

To be exact, my brother's 3DS is with 4.1.0-6U version, which version is yours?

Can you explain me what's 6U?
The U I understand that is USA, what about 6?

The 6 is your browser or eshop version number an absolutely useless number

 

[daicon]

If the new Gateway exploit gets reversed, any possibility of it being able to be used to launch this CFW?

 

[Zidapi]

If the new Gateway exploit gets reversed, any possibility of it being able to be used to launch this CFW?

Yeah, because people have so much success in reversing Gateway's work so far.

In theory yes, but we can't even update the cfw to 9.x, and you wouldn't be able to use a 9.x sysNAND to launch a 4.x cfw.

 

[daicon]

Yeah, because people have so much success in reversing Gateway's work so far.

In theory yes, but we can't even update the cfw to 9.x, and you wouldn't be able to use a 9.x sysNAND to launch a 4.x cfw.

No one's trying to update it, because it's only fro 4.5 sysnand and everyone on 4.5 already has a Gateway.

The DS profile exploit gateway launches into Emunand is basically known to all right from the gitgo and it's how we launch this CFW. I think the same might as well happen when the new 9.x exploit gets revealed soon.

 

[Cacacea]

To be exact, my brother's 3DS is with 4.1.0-6U version, which version is yours?

Can you explain me what's 6U?
The U I understand that is USA, what about 6?

I have 4.1.0-4E...

 

[hippy dave]

In case anyone was interested, I successfully used SaveDataFiler on the CFW to extract the save from the card1 Luigi's Mansion cartridge, but I couldn't restore it to the .cia version on Gateway emunand, it always gave a "Failure" message. Haven't tried doing it as a card2 .3ds rom, not sure it'll help.

Turns out I'm an utter muppet. Just had to press R+A (import to sd) instead of just A to import.

 

[Areseru]

Most of you guys can't make the ctrclient work due to your router... This "script" send ACK commands that for most of the routers out there could be target as a brute force attacking. I fixed it using my Android hotspot, that doesn't include any of this safety systems on ACK or ARP requests.

Perhaps you should give it a try

 

[Subtle Demise]

Most of you guys can't make the ctrclient work due to your router... This "script" send ACK commands that for most of the routers out there could be target as a brute force attacking. I fixed it using my Android hotspot, that doesn't include any of this safety systems on ACK or ARP requests.

Perhaps you should give it a try

What sort of settings would you recommend on a household router to get around this issue?

 

[piratesephiroth]

What sort of settings would you recommend on a household router to get around this issue?

Disable its firewall?

 

[Misiel]

how can i transfer this emunand to a bigger SD card?
emunand tool gives "unknown nand size" error.

 

[piratesephiroth]

how can i transfer this emunand to a bigger SD card?
emunand tool gives "unknown nand size" error.

The easiest way is by using Hex workshop. Go to 'Disk' > 'Save sectors...'

 

[Misiel]

The easiest way is by using Hex workshop. Go to 'Disk' > 'Save sectors...'

i get a file with a size of 2.7gb, called sectordump.bin
Do i just restore this to the new SD card?

 

[nop90]

how can i transfer this emunand to a bigger SD card?
emunand tool gives "unknown nand size" error.

Under Windows I did this way:

1. download bbcopy (similar to dd under linux)
2. backup all the files on your SD (simply copy all the files and folders in the root of the SD in a convenient palce on your pc disk)
3. in a dos shell run "bbcopy ifd=1 of=cfwnand.bin count=1931265"
4. in an hex editor (e.g. HxD) cut the first sector (first 512 bytes) from cfwnand.bin and save the modified file
5. prepare a new bigger SD formatting the emunand
6. turn on the 3DS with the new SD inserted ad let create its folders
7. inject cfwnand.bin with emunand tools
8. copy back the backuped file and folders in the new SD
9. enjoy the CFW with your installed CIA

but beware that you have to adjust step #3:

1. ifd=1 is for reading from the second disk mounted(ifd=0 is c: ), if you have more than a hard disk you have to try a different number for your SD (after creating cfwnand.bin check it with HxD and when the contents is the same of the beginning of your SD, you know the disk number is right)
2. count=1931265" is for a Toshiba NAND. For a Samsung NAND you have to use count=1931265

To know your NAND type check the size of the file of your sysnand backup.

Toshiba NAND:
1931264 sectors
NAND size 988.807.168 bytes = 943 MB 988807168

Samsung NAND:
1953792 sectors
NAND size 1.000.341.504 bytes = 954 MB

Good luck.

 

[piratesephiroth]

i get a file with a size of 2.7gb, called sectordump.bin
Do i just restore this to the new SD card?

You need to select the number of sectors. Just get your emunand's size and divide by 512.

Then you fill in the sector range accordingly. The dump should start from sector 1.
For example, mine has 988807168 bytes, so it's 1931264 sectors,

 

[Zidapi]

No one's trying to update it, because it's only fro 4.5 sysnand and everyone on 4.5 already has a Gateway.

The DS profile exploit gateway launches into Emunand is basically known to all right from the gitgo and it's how we launch this CFW. I think the same might as well happen when the new 9.x exploit gets revealed soon.

Your reply starts to fall apart in the middle here as your grasp of the English language begins to fail. I've read it multiple time and still can't decipher it.

I'm not sure if I misinterpreted your initial post or you misinterpreted my reply, but I'll address what I see as the two obvious interpretations.

If you meant that if we took a new 9.x system and used the new exploit to launch the cfw as it exists at present (that being 4.5 based); then no, that would be impossible. This was my initial interpretation of what you wrote and my initial reply reflected that.

*If* however you meant that if you took a 4.5 3DS, created your 4.5 cfw, and then updated your sysNAND to 9.x would you be able to use the new 9.x exploit to launch your 4.5 cfw? Then yes, I believe that this would be possible.

If my current theory about the new vulnerability/exploit is correct then it's going to be a lot quicker to launch the gateway menu this time around. No more delving deep into the settings, and no more getting kicked back into sysNAND if you launch the settings app in gateway mode.

Anyhow, I hope I've been a little clearer with my reply this time around.

 

[Areseru]

In case anyone was interested, I successfully used SaveDataFiler on the CFW to extract the save from the card1 Luigi's Mansion cartridge, but I couldn't restore it to the .cia version on Gateway emunand, it always gave a "Failure" message. Haven't tried doing it as a card2 .3ds rom, not sure it'll help.

How did you do that? I always get "SD has been removed" error with SaveDataFiler... I really need a backup of my Pokémon X savefile...

 

[metroid maniac]

I'm using a 3DS on 4.1.0-7E.
I've managed to make it to the final part, but when I try to install my DevMenu_2x.cia no present appears on my home screen.

It may be because I'm getting a ctrclient: failed to connect error.

 

[Areseru]

I'm using a 3DS on 4.1.0-7E.
I've managed to make it to the final part, but when I try to install my DevMenu_2x.cia no present appears on my home screen.

It may be because I'm getting a ctrclient: failed to connect error.

Yes.
As said before, make sure that your console actually connects to your router, and try disable built-in firewall on router.
Otherwise, connect PC and Nintendo to an hotspot created by your smartphone, I resolved this way