Hacking ROM Headers Question

  • Thread starter Thread starter fuzzdawg11
  • Start date Start date
  • Views Views 30,338
  • Replies Replies 111
'backup' being a polite term for a copy found elsewhere. The dumper can be executed on any firmware from 9.0 to 9.5 with loadcode.dat or http://loadcode.projectpokemon.org/ .


I assume you put the code.bin file on the root of the 3DS's SD card, press home while the given online game is connecting, and launch the web browser to that URL?
I've been investigating any way possible to change header data on scene ROMs (I'm pretty sure they're called), I found the K3DS "Online ID" Generator that changes the header data, although I haven't found any information on the forums about this.
Has anyone tried this program to generate new header data? The only place I could find it is here: http://www.3dsinfo.com/show.php?id=509 Is this a way you can get a private header without a dump? Is it just Randomly generated up to a point? I've no idea. I haven't got a Sky3DS yet, as I'm still researching which cart I want to get, so I can't test it myself. Maybe someone else could?
 
so this allows us to get genuine info from our genuine carts, and insert into headers so then can play copy of that rom that we download?
nothing special needed? just my 3ds 9.5, genuine cart and my sky3ds?
 
also do we need each individual game header, from each individual genuine game cart?
so for example, if i wanted to play mario kart 7 online, i would have to get the header from my genuine mario kart 7 cart? if i want to play smash bros online, then i have to get a genuine smash bros cart to get header off?..... or does one header from a genuine cart work for all roms?
surely if we have the genuine game carts, we just use these to play online?

its unfair that nintendo block all online gaming... they should just block use of flash carts, but allow the use of online gameing using legit game carts, as we own them as we brought them with our money... surely they dont have rights to stop us playing fully using our full paid for, genuine carts? lawsuit against this? :)
 
also do we need each individual game header, from each individual genuine game cart?
so for example, if i wanted to play mario kart 7 online, i would have to get the header from my genuine mario kart 7 cart? if i want to play smash bros online, then i have to get a genuine smash bros cart to get header off?..... or does one header from a genuine cart work for all roms?


I believe one header from any of your genuine carts works with all roms, and I think you can use that same one for all the games you put on your Sky3DS.
 
SO I have the header of a private game. How do I mass update the template.exe with this header? Changing everygame by hand is gonna cost me days, is there an easier way?
 
You can't. Your only options are getting a GW or finding someone who has one and is willing to dump something for you.

I was able to dump my own rom and extract the header without a Gateway. The Gateway web exploit allows you to dump cartridges without the actual Gateway cart. And then you can extract the header using Gateway's ROM Patcher.
Assuming you're on 9.2 or below, it's not too much of a hassle.
 
I'm trying to update all of them so that when I copy a game I don't firrst have to look it up in the template to manually change the header. Is there a way to mass update the entire list?


No, not at once. You would have to make a template for each game separately.
 
I'm too busy with some other RE to type up a full guide at the moment, but the gist is:
1) Use a public header on your rom of the game you own. Note the cartridge (unique) ID of that rom. (0x1240, 16 bytes, or 0x40 in sky3ds template)
2) Start the backup of that game up, try to connect to its online functions, then hit home as it's trying to connect and dump memory.

3) Do that again, but with your real cart.
4) Find your unique ID from your public header in your dump from that. Flip byte order if you can't find it.
5) Search for the same region in your genuine dump. Do this by either jumping to the same address in your first dump (unlikely) or searching for data that was close to your ID in the first dump (do this).
6) When you've found your legit unique ID, add it to your template with sky template maker (or manually if you hate yourself)
EDIT: Oh and here's the dumper I use for my 9.x hax, use it if you don't have your own already.
Okay, this guy needs to make a full tutorial, i would love to get my private header from my Pokemon Y retail cart, and use it on my sky3ds template so i can safely play online.
 
  • Like
Reactions: 4ur0r
Okay, this guy needs to make a full tutorial, i would love to get my private header from my Pokemon Y retail cart, and use it on my sky3ds template so i can safely play online.
I agree, this would make happy a LOT of players. Also, is this procedure compatible with New 3DS?
 
  • Like
Reactions: fuzzdawg11
I agree, this would make happy a LOT of players. Also, is this procedure compatible with New 3DS?

Yes, exactly what was on my mind. I'd also really appreciate a video-tutorial that shows the exact steps that you listed above, as I am still a little bit confused. :) Thanks for the good info though!
 
I'm too busy with some other RE to type up a full guide at the moment, but the gist is:
1) Use a public header on your rom of the game you own. Note the cartridge (unique) ID of that rom. (0x1240, 16 bytes, or 0x40 in sky3ds template)
2) Start the backup of that game up, try to connect to its online functions, then hit home as it's trying to connect and dump memory.

3) Do that again, but with your real cart.
4) Find your unique ID from your public header in your dump from that. Flip byte order if you can't find it.
5) Search for the same region in your genuine dump. Do this by either jumping to the same address in your first dump (unlikely) or searching for data that was close to your ID in the first dump (do this).
6) When you've found your legit unique ID, add it to your template with sky template maker (or manually if you hate yourself)
EDIT: Oh and here's the dumper I use for my 9.x hax, use it if you don't have your own already.

Wouldn't connecting with a public header trigger the banning system and get me banned?

Also, thought the home button was disabled when you're connecting online.
 
Is there any video of this being done? I'm sort of confused how you are accessing the save data and dumping it on your PC. Also what type of program do you need to use to sift through the save data? I'm assuming it is encrypted to some degree.
 
is this Legit? has anyone tried this to confirm if it works??

I'm on 9.4, I try to go online with my Pokémon OR but tells me to update. I would assume that I wont get banned for doing that as I didn't actually connect to anything.

would be interesting to find out more on this.
 

Site & Scene News

Popular threads in this forum