Tutorial How To Use Rom hacks on 10.3 With Hans

Red

Newbie
VIP
Retired
Messages
15,340
Reaction score
10,390
  1. Install ironhax etc.
  2. Download packhack (from here: https://gbatemp.net/threads/tutoria...d-3ds-roms-run-xy-oras-without-update.383055/) and extract it
  3. Go to a site of your choice and download a CIA (in this case it's pre-patched)

  4. Meanwhile look for the gameid of the game you want to run with hans. You can do so by opening hans.

  5. So in this case we will want to name our final file 0011C400.romfs which is the gameid for Omega Ruby
  6. Exit Hans.
  7. Power off the 3DS
  8. Extract the zips on your PC. (Put the CIA in the same folder as the packhack)
  9. Use the following code by shift+right clicking the pack hack folder and clicking open command window here.

  10. Once you do that enter the following code
Code:
ctrtool --contents=contents name.cia
ctrtool -p --exefs=exefs.bin contents.0000.00000000
ctrtool -t exefs --exefsdir=exefs --decompresscode exefs.bin
ctrtool -p --romfs=romfs.bin contents.0000.00000000
(replace name with program name) So if your cia is named omega.cia enter
Code:
ctrtool --contents=contents omega.cia
ctrtool -p --exefs=exefs.bin contents.0000.00000000
ctrtool -t exefs --exefsdir=exefs --decompresscode exefs.bin
ctrtool -p --romfs=romfs.bin contents.0000.00000000
  1. Once the command comes to a halt you should see a romfs.bin in your packhack folder. I recommend making a backup of this in case you make a mistake.

  2. After extracting your rom open HxD and drop your new romfs.bin file into it, and highlight all of the offsets until you find the highlighted (blue number to the left) offset)

  3. Once you find it select all of the 0's from that line all the way to the top of the document and press backspace

  4. If it alerts you to confirm the deletion click yes.
  5. Save The file
  6. Rename romfs.bin file that you just edited to the gameid that you wrote down beforehand and have the file look like the following name: gameid.romfs

  7. Put it on your SD card in a Hans Folder located in /hans/
  8. Run Hans
  9. Select Yes next to " Romfs --> SD
  10. Click Ok
  11. You should be homefree!
 
Last edited:

VinnyHaw

Se7enSinner
Messages
14,105
Reaction score
5,436
  1. Install ironhax etc.
  2. Install python2.7
  3. Download packhack (from here: https://gbatemp.net/threads/tutoria...d-3ds-roms-run-xy-oras-without-update.383055/) and extract it
  4. Go to a site of your choice and download a CIA (in this case it's pre-patched)

  5. Meanwhile look for the gameid of the game you want to run with hans. You can do so by opening hans.

  6. So in this case we will want to name our final file 0011C400.romfs which is the gameid for Omega Ruby
  7. Exit Hans.
  8. Power off the 3DS
  9. Extract the zips on your PC. (Put the CIA in the same folder as the packhack)
  10. Use the following code by shift+right clicking the pack hack folder and clicking open command window here.

  11. Once you do that enter the following code
Code:
ctrtool --contents=contents name.cia
ctrtool -p --exefs=exefs.bin contents.0000.00000000
ctrtool -t exefs --exefsdir=exefs --decompresscode exefs.bin
ctrtool -p --romfs=romfs.bin contents.0000.00000000
(replace name with program name) So if your cia is named omega.cia enter
Code:
ctrtool --contents=contents omega.cia
ctrtool -p --exefs=exefs.bin contents.0000.00000000
ctrtool -t exefs --exefsdir=exefs --decompresscode exefs.bin
ctrtool -p --romfs=romfs.bin contents.0000.00000000
  1. Once the command comes to a halt you should see a romfs.bin in your packhack folder. I recommend making a backup of this in case you make a mistake.

  2. After extracting your rom open HxD and drop your new romfs.bin file into it, and highlight all of the offsets until you find the highlighted (blue number to the left) offset)

  3. Once you find it select all of the 0's from that line all the way to the top of the document and press backspace

  4. If it alerts you to confirm the deletion click yes.
  5. Save The file
  6. Rename romfs.bin file that you just edited to the gameid that you wrote down beforehand and have the file look like the following name: gameid.romfs

  7. Put it on your SD card in a Hans Folder
  8. Run Hans
  9. Select Yes next to " Romfs --> SD
  10. Click Ok
  11. You should be homefree!

This is ****ing sick. Definitely nominating for ToTM next month.
 

Krokodil

The World's Deadliest Drug
Messages
167
Reaction score
71
Wait I'm confused I saw this on Twitter but I want to know if there is any way for emulating 3DS on a PC?
 

trZef

Newbie
Messages
5
Reaction score
0
oh god ignore this i totally misread the tutorial..
 
Last edited:

trZef

Newbie
Messages
5
Reaction score
0
yeah, thanks. i totally misread your whole tutorial. anyway, i'm doing it now but didn't get a romfs.bin
 

Red

Newbie
VIP
Retired
Messages
15,340
Reaction score
10,390
yeah, thanks. i totally misread your whole tutorial. anyway, i'm doing it now but didn't get a romfs.bin
You most likely have some files in the incorrect spot or entered the cmd incorrectly
 

trZef

Newbie
Messages
5
Reaction score
0
yeah this won't work for me no matter what i do, i even have the same prepatched CIA as you. oh well, thanks for this anyway!
 

trZef

Newbie
Messages
5
Reaction score
0
a Romfs.bin just won't appear using this method, and using a Romfs extractor gives me an error saying 'Not a valid Romfs binary'.
 

Red

Newbie
VIP
Retired
Messages
15,340
Reaction score
10,390
a Romfs.bin just won't appear using this method, and using a Romfs extractor gives me an error saying 'Not a valid Romfs binary'.
Dont use romfs extractor use the code like I did with ctr tool.
 

FlingyFish

Newbie
Messages
4
Reaction score
0
Help plz. This is what comes up when I input the command. I even changed the cia name to omega. Does it matter if it is not patched.


C:\Users\Connor\Desktop\Pack Hack>ctrtool --contents=contents omega.cia
Header size 0x00002020
Type 0000
Version 0000
Certificates offset: 0x00002040
Certificates size: 0x0a00
Ticket offset: 0x00002a40
Ticket size 0x0350
TMD offset: 0x00002dc0
TMD size: 0x0b34
Meta offset: 0x51700
Meta size: 0x3ac0
Content offset: 0x00003900
Content size: 0x000000000004de00
Warning, could not read common key.

Ticket content:
Signature Type: 04000100
Issuer: Root-CA00000003-XS0000000c
Signature:
000000: 67 e9 e7 0c a2 0a 84 95 e2 de c0 77 1a 99 7e 7b g..........w..~{
000010: 09 f2 d9 15 d5 74 a9 e3 8f 1f b4 f9 09 bf f2 41 .....t.........A
000020: ca 76 68 27 58 b4 e9 5e 75 b2 13 fc 8f ff 84 a9 .vh'X..^u.......
000030: 33 1a 79 b9 70 87 40 e1 5b 88 f0 8c b9 a4 75 2d [email protected][.....u-
000040: 88 2a 53 15 af ac f7 4d ba 80 a3 bf 30 f5 02 f0 .*S....M....0...
000050: 3f 9d f2 b9 20 24 65 89 20 8f 9d e8 b5 7d ba 62 ?... $e. ....}.b
000060: e4 72 7a d0 b8 3b 66 09 a3 56 49 9b 5f 8c b5 bd .rz..;f..VI._...
000070: ed 00 0a e6 f3 ad 34 ba 10 49 8c 83 67 a9 b0 00 ......4..I..g...
000080: 71 67 14 2e cb 79 7c 53 95 03 df 98 d6 60 75 2f qg...y|S.....`u/
000090: 56 ee e6 75 30 86 b5 62 20 b0 48 5f ea cc 09 d4 V..u0..b .H_....
0000a0: e4 0a 2d 88 37 84 eb 0d 3c d4 6e a2 84 a8 69 e0 ..-.7...<.n...i.
0000b0: e6 fe 9b 07 20 b2 db e5 fd a2 a9 82 f0 b2 50 3d .... .........P=
0000c0: 4d 08 68 ac bb 9b c1 b3 b8 0f 60 35 41 cb 34 d8 M.h.......`5A.4.
0000d0: 28 d9 c1 28 ec 2c b7 15 ec a6 20 63 24 07 41 d8 (..(.,.... c$.A.
0000e0: ef f6 a5 e7 58 f7 70 4b 71 ff 4d 1d 74 ef 4b 5d ....X.pKq.M.t.K]
0000f0: ff e3 4e cf d9 10 77 d8 58 69 78 0e a9 cf 78 30 ..N...w.Xix...x0

Encrypted Titlekey: 00000000000000000000000000000000
Ticket ID: C77421C7ECA2F52F
Ticket Version: 0
Title ID: 000400000D000200
Common Key Index: 1
Content permission map:
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00


TMD header:
Signature type: RSA 2048 - SHA256
Issuer: Root-CA00000003-CP0000000b
Version: 1
CA CRL version: 0
Signer CRL version: 0
System version: 0000000000000000
Title id: 000400000D000200
Title type: 00000040
Group id: 0000
Save Size: 00000000
Access rights: 00000000
Title version: 0000
Content count: 0001
Boot content: 0000
Hash: 734D8EE0D2D69EBDD42E51B9A5DDA598FED155F5E1A6D52F36B136722A926465

TMD content info:
Content index: 0000
Command count: 0001
Unknown: 9DBDEBE1BBC3AC8D51625571CFE26EE2A2E7950F2EAC221D432A76E604246528

TMD contents:
Content id: 93b7aa45
Content index: 0000
Content type: 0000
Content size: 000000000004de00
Content hash: 75458F7CE45A365480F8FE685C1FECC20BA48DBB7C4D7A683D7DA3170C7F350B

Saving content #0000 to contents.0000.93b7aa45

C:\Users\Connor\Desktop\Pack Hack>ctrtool -p --exefs=exefs.bin contents.0000.00000000
error: could not open input file!

C:\Users\Connor\Desktop\Pack Hack>ctrtool -t exefs --exefsdir=exefs --decompresscode exefs.bin
error: could not open input file!

C:\Users\Connor\Desktop\Pack Hack>ctrtool -p --romfs=romfs.bin contents.0000.00000000
 

Red

Newbie
VIP
Retired
Messages
15,340
Reaction score
10,390
Help plz. This is what comes up when I input the command. I even changed the cia name to omega. Does it matter if it is not patched.


C:\Users\Connor\Desktop\Pack Hack>ctrtool --contents=contents omega.cia
Header size 0x00002020
Type 0000
Version 0000
Certificates offset: 0x00002040
Certificates size: 0x0a00
Ticket offset: 0x00002a40
Ticket size 0x0350
TMD offset: 0x00002dc0
TMD size: 0x0b34
Meta offset: 0x51700
Meta size: 0x3ac0
Content offset: 0x00003900
Content size: 0x000000000004de00
Warning, could not read common key.

Ticket content:
Signature Type: 04000100
Issuer: Root-CA00000003-XS0000000c
Signature:
000000: 67 e9 e7 0c a2 0a 84 95 e2 de c0 77 1a 99 7e 7b g..........w..~{
000010: 09 f2 d9 15 d5 74 a9 e3 8f 1f b4 f9 09 bf f2 41 .....t.........A
000020: ca 76 68 27 58 b4 e9 5e 75 b2 13 fc 8f ff 84 a9 .vh'X..^u.......
000030: 33 1a 79 b9 70 87 40 e1 5b 88 f0 8c b9 a4 75 2d [email protected][.....u-
000040: 88 2a 53 15 af ac f7 4d ba 80 a3 bf 30 f5 02 f0 .*S....M....0...
000050: 3f 9d f2 b9 20 24 65 89 20 8f 9d e8 b5 7d ba 62 ?... $e. ....}.b
000060: e4 72 7a d0 b8 3b 66 09 a3 56 49 9b 5f 8c b5 bd .rz..;f..VI._...
000070: ed 00 0a e6 f3 ad 34 ba 10 49 8c 83 67 a9 b0 00 ......4..I..g...
000080: 71 67 14 2e cb 79 7c 53 95 03 df 98 d6 60 75 2f qg...y|S.....`u/
000090: 56 ee e6 75 30 86 b5 62 20 b0 48 5f ea cc 09 d4 V..u0..b .H_....
0000a0: e4 0a 2d 88 37 84 eb 0d 3c d4 6e a2 84 a8 69 e0 ..-.7...<.n...i.
0000b0: e6 fe 9b 07 20 b2 db e5 fd a2 a9 82 f0 b2 50 3d .... .........P=
0000c0: 4d 08 68 ac bb 9b c1 b3 b8 0f 60 35 41 cb 34 d8 M.h.......`5A.4.
0000d0: 28 d9 c1 28 ec 2c b7 15 ec a6 20 63 24 07 41 d8 (..(.,.... c$.A.
0000e0: ef f6 a5 e7 58 f7 70 4b 71 ff 4d 1d 74 ef 4b 5d ....X.pKq.M.t.K]
0000f0: ff e3 4e cf d9 10 77 d8 58 69 78 0e a9 cf 78 30 ..N...w.Xix...x0

Encrypted Titlekey: 00000000000000000000000000000000
Ticket ID: C77421C7ECA2F52F
Ticket Version: 0
Title ID: 000400000D000200
Common Key Index: 1
Content permission map:
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00


TMD header:
Signature type: RSA 2048 - SHA256
Issuer: Root-CA00000003-CP0000000b
Version: 1
CA CRL version: 0
Signer CRL version: 0
System version: 0000000000000000
Title id: 000400000D000200
Title type: 00000040
Group id: 0000
Save Size: 00000000
Access rights: 00000000
Title version: 0000
Content count: 0001
Boot content: 0000
Hash: 734D8EE0D2D69EBDD42E51B9A5DDA598FED155F5E1A6D52F36B136722A926465

TMD content info:
Content index: 0000
Command count: 0001
Unknown: 9DBDEBE1BBC3AC8D51625571CFE26EE2A2E7950F2EAC221D432A76E604246528

TMD contents:
Content id: 93b7aa45
Content index: 0000
Content type: 0000
Content size: 000000000004de00
Content hash: 75458F7CE45A365480F8FE685C1FECC20BA48DBB7C4D7A683D7DA3170C7F350B

Saving content #0000 to contents.0000.93b7aa45

C:\Users\Connor\Desktop\Pack Hack>ctrtool -p --exefs=exefs.bin contents.0000.00000000
error: could not open input file!

C:\Users\Connor\Desktop\Pack Hack>ctrtool -t exefs --exefsdir=exefs --decompresscode exefs.bin
error: could not open input file!

C:\Users\Connor\Desktop\Pack Hack>ctrtool -p --romfs=romfs.bin contents.0000.00000000
screenshot your folder please
 
Top Bottom