Hacking NTR CFW 3.0!

[Monty Kensicle]

I'm sorry, but it still fails to boot on 10.1. EDIT: My SD card messed up. It works great.

 

[samiam144]

I'm sorry, but it still fails to boot on 10.1.

A few pages back, there's a fix.

Edit: http://gbatemp.net/threads/ntr-cfw-3-0.393710/page-33#post-5672453

 

[Monty Kensicle]

A few pages back, there's a fix.

Edit: http://gbatemp.net/threads/ntr-cfw-3-0.393710/page-33#post-5672453

My SD card corrupted whilst trying to boot it. I used another card and all is well.

 

[LoganK93]

Any word on how to fix the freeze after the green flash with plugins? If it helps I'm trying to use layeredfs with MK7 US CIA on a New 3ds Rxtools Emunand 9.0. Trying to just load any custom file gives me the green flash followed by a never ending 3ds screen...

 

[darklinkpower]

Any word on how to fix the freeze after the green flash with plugins? If it helps I'm trying to use layeredfs with MK7 US CIA on a New 3ds Rxtools Emunand 9.0. Trying to just load any custom file gives me the green flash followed by a never ending 3ds screen...

Do you have the latest release? If not, download it and try again.
Also I was having the same issue: I had a few images with the cheat butons inside the folders and that was the problem. I removed them and it worked. Just keep the .plg files inside the plugin folder.

 

[LoganK93]

Do you have the latest release? If not, download it and try again.
Also I was having the same issue: I had a few images with the cheat butons inside the folders and that was the problem. I removed them and it worked. Just keep the .plg files inside the plugin folder.

I've used all files from the links in the first post. The file structure was sd:/plugin/longassnumbers/layeredfs.plg (no other files, hidden or otherwise) and the modified romfs was in SD:/longassgameid/. It seems to be the plugin itself causing the freeze as even with an empty folder (no replacements) it won't load. Starting to think it's more to do with how I'm generating the plugin.

(Also I had the proper 0004003etc number in the filenames but am away from my pc right now)

 

[gudenau]

Has anyone gotten the LayeredFS plugin working on Sm4sh? I have a n3DS and it crashes.

 

[LoganK93]

Has anyone gotten the LayeredFS plugin working on Sm4sh? I have a n3DS and it crashes.

Haven't tried it with smash yet but I did finally get working with majoras mask. Orchestrated music from SD card is lovely.

 

[gudenau]

Haven't tried it with smash yet but I did finally get working with majoras mask. Orchestrated music from SD card is lovely.

How did you get it to work?

 

[LoganK93]

I'll do my best to explain:
So the first thing I used was this tutorial to extract files and get the exefs.bin. Make sure you can see hidden file extensions (as the problem with mine was that I had named it exefs.bin.bin on accident).

Anyways once you've used the hackpack to extract a decrypted 3ds file (I just used rx tools) you will be left with decryptedExeFS.bin (also, and forgive me here but I believe that I chose to decrypt "code.bin" in the extractor, but I'm writing this quick so I don't have time to double check ATM). Make a copy of that and put in the workdir folder from the layeredfs zip file you can download here.

Make sure you have it named exefs.bin. There also should have been a folder called exe that was created when you extracted your rom. Rename this folder to exefs and put that in the workdir folder as well. Double click the buildlayeredfs.bat and when it gets to a point where it asks for an sd folder just type something game specific, i.e. "smashbros" and hit enter.

If everything worked right there should be a file in the workdir called layeredfs.plg. Now on the sd card you need to make a folder called "plugin" and inside that a folder that uses the title id (0004000000125500 for Majoras Mask for example, I just used FBI to look at the I.D. of my installed cia's). Inside that folder is where you put your layeredfs.plg.

The last thing you will need is the folder name you entered when you ran layeredfs.bat, which in this example case was smashbros. Inside that folder, match the way the folders were in the romfs when you extracted the rom (example: if romfs/sound/stream/<list of sound files> then the sd card would have smashbros/sound/stream/<your edited files>.
If it was all done correctly then when you run your game using ntr it should flash green very quickly and then the game should start. I will write a more in depth post later/edit this one later today.

Also if anyone is interested I can share the edited files for Majora's Mask.

Edit: Will be trying this with Smash Bros in a little while too so I can make a more personalized tutorial on that game alone.

 

[gudenau]

I'll do my best to explain:
So the first thing I used was this tutorial to extract files and get the exefs.bin. Make sure you can see hidden file extensions (as the problem with mine was that I had named it exefs.bin.bin on accident).

Anyways once you've used the hackpack to extract a decrypted 3ds file (I just used rx tools) you will be left with decryptedExeFS.bin (also, and forgive me here but I believe that I chose to decrypt "code.bin" in the extractor, but I'm writing this quick so I don't have time to double check ATM). Make a copy of that and put in the workdir folder from the layeredfs zip file you can download here.

Make sure you have it named exefs.bin. There also should have been a folder called exe that was created when you extracted your rom. Rename this folder to exefs and put that in the workdir folder as well. Double click the buildlayeredfs.bat and when it gets to a point where it asks for an sd folder just type something game specific, i.e. "smashbros" and hit enter.

If everything worked right there should be a file in the workdir called layeredfs.plg. Now on the sd card you need to make a folder called "plugin" and inside that a folder that uses the title id (0004000000125500 for Majoras Mask for example, I just used FBI to look at the I.D. of my installed cia's). Inside that folder is where you put your layeredfs.plg.

The last thing you will need is the folder name you entered when you ran layeredfs.bat, which in this example case was smashbros. Inside that folder, match the way the folders were in the romfs when you extracted the rom (example: if romfs/sound/stream/<list of sound files> then the sd card would have smashbros/sound/stream/<your edited files>.
If it was all done correctly then when you run your game using ntr it should flash green very quickly and then the game should start. I will write a more in depth post later/edit this one later today.

Also if anyone is interested I can share the edited files for Majora's Mask.

Edit: Will be trying this with Smash Bros in a little while too so I can make a more personalized tutorial on that game alone.

I did that. :-/
My SHA-256 for the exefs is 9476B66ED76F556EBCE17F4F0C49ACA3815B5598A0B20CBFE6E81A764340D909
I also called the folder layeredFS-smash. I do get the "Hello world" green screen at least.

 

[LoganK93]

How are you running NTR? I know I had to go back and forth with it for a while and after a lot of tries I finally got it. I still can't do a lot at the moment but maybe try keeping your folder name simple, as in one word and no dashes. That's what I did with majora's mask (just called the folder "mask"). I also need to know if you are using a cartridge or an installed cia. I am using an unlinked emunand with rxtools and then running ntr from cia on the home menu. I have the files I need for smash so at some point either tonight or tomorrow I can do a little more digging on how it works with that game and I will post my results. In the meantime just keep trying, and make sure your rom is DECRYPTED before running the hack pack bat. If you get a folder called romfs full of the game files and an exe folder with some files named like .code.bin you did it right. if you get an empty exe folder and no romfs your rom was not decrypted properly. Hope this helps for now.

 

[gudenau]

How are you running NTR? I know I had to go back and forth with it for a while and after a lot of tries I finally got it. I still can't do a lot at the moment but maybe try keeping your folder name simple, as in one word and no dashes. That's what I did with majora's mask (just called the folder "mask"). I also need to know if you are using a cartridge or an installed cia. I am using an unlinked emunand with rxtools and then running ntr from cia on the home menu. I have the files I need for smash so at some point either tonight or tomorrow I can do a little more digging on how it works with that game and I will post my results. In the meantime just keep trying, and make sure your rom is DECRYPTED before running the hack pack bat. If you get a folder called romfs full of the game files and an exe folder with some files named like .code.bin you did it right. if you get an empty exe folder and no romfs your rom was not decrypted properly. Hope this helps for now.

I get all of the files, I am using CTR 3 on reiNand with an eshop cia of smash.

Edit:
I will try with a shorter name, but I get the feeling that it will not work. At least the lang plugin works for the jap stuff.

Edit 2:
Could you quote me so I get a notification when you respond?

 

[LoganK93]

I get all of the files, I am using CTR 3 on reiNand with an eshop cia of smash.

Edit:
I will try with a shorter name, but I get the feeling that it will not work. At least the lang plugin works for the jap stuff.

Edit 2:
Could you quote me so I get a notification when you respond?

Yeah sorry, like I said I am just replying quick. I will have more time tomorrow to help you out as I know getting it to work right can be frustrating.

Also make sure you are using the same region .3ds as your eshop game, as I believe that can cause problems as well. (Don't use the exefs from a JAP rom if you are running the US version on your ds etc)

 

[gudenau]

Yeah sorry, like I said I am just replying quick. I will have more time tomorrow to help you out as I know getting it to work right can be frustrating.

Also make sure you are using the same region .3ds as your eshop game, as I believe that can cause problems as well. (Don't use the exefs from a JAP rom if you are running the US version on your ds etc)

Yep, same region, still will not work.

 

[LoganK93]

Yep, same region, still will not work.

Alright, gimme a second here and I'll try it myself. Just copying some files.

Edit: If you're using the us version and I get it working I can just PM you the plg I get and see if that works for you.

 

[gudenau]

Alright, gimme a second here and I'll try it myself. Just copying some files.

Edit: If you're using the us version and I get it working I can just PM you the plg I get and see if that works for you.

Sure, all the info it gets are offsets inside the code. So no Ninty content.

 

[Zidapi]

Also if anyone is interested I can share the edited files for Majora's Mask.

I'd love it if you could share your orchestrated music mod for MM.

Perhaps you could look at doing one for Ocarina of Time at some point?

 

[LoganK93]

Sure, all the info it gets are offsets inside the code. So no Ninty content.

Well, IDK where it usually stops for you, but when I try to replace the menu music for smash bros as a test it gets passed the 3ds logo then hangs at a black screen and eventually kicks me back to the home menu with an error.

I'd love it if you could share your orchestrated music mod for MM.

Perhaps you could look at doing one for Ocarina of Time at some point?

I will upload what I have so far tomorrow at some point. We'll call it an early beta as some songs are still missing, and some songs are in a different audio quality and are causing me problems. I used what I could from ZREO for most, and am filling in the blanks with some of my own projects. All in all it really goes well with the updated graphics and I'm not sure why they didn't do it themselves as the music files are just simple .bcstm streams...

Edit: Also I looked into OOT already but for some reason that game still uses sequenced music rather than streamed... I really don't know why they switched how the music was stored from OOT to MM, as they still used the old N64 versions of the music in both.

Edit2: Well I retested twice and while the process works with majora's mask something seems broken with the actual smash bros game when using layeredfs... Will keep fiddling with it for a while.

Edit3: WELL. This got upsetting. So on a whim I decided to uninstall my dlc and wouldn't you know it? The song I replaced loaded just fine. So apparently the way the dlc is read is incompatible with layeredfs? Maybe someone with more knowledge could look into this?

 

[gudenau]

Well, IDK where it usually stops for you, but when I try to replace the menu music for smash bros as a test it gets passed the 3ds logo then hangs at a black screen and eventually kicks me back to the home menu with an error.



I will upload what I have so far tomorrow at some point. We'll call it an early beta as some songs are still missing, and some songs are in a different audio quality and are causing me problems. I used what I could from ZREO for most, and am filling in the blanks with some of my own projects. All in all it really goes well with the updated graphics and I'm not sure why they didn't do it themselves as the music files are just simple .bcstm streams...

Edit: Also I looked into OOT already but for some reason that game still uses sequenced music rather than streamed... I really don't know why they switched how the music was stored from OOT to MM, as they still used the old N64 versions of the music in both.

Edit2: Well I retested twice and while the process works with majora's mask something seems broken with the actual smash bros game when using layeredfs... Will keep fiddling with it for a while.

Edit3: WELL. This got upsetting. So on a whim I decided to uninstall my dlc and wouldn't you know it? The song I replaced loaded just fine. So apparently the way the dlc is read is incompatible with layeredfs? Maybe someone with more knowledge could look into this?

That is what it does for me.

Edit:
I bet the dlc has an updated efefs, chaning the offsets. I need to male one that find offsets itself it seems. Should not be *that* hard, just more loading times.