I can get a dump of ultra sun from my CFWed 2ds, giodude said this in one of my older posts about this. "Do you have access to the hbl? You can use braindump to dump a sumo cxi. Then, you can split that into an exefs.bin and romfs.bin. You can then decompress the exefs.bin to get the code.bin. Edit the hex files in the code.bin to patch the outlines (which is extremely easy actually), recompress the code.bin into the exefs.bin, then use hans to load it."