Sm4sh 3DS - Simple Custom Updates

How to decrypt, extract, and rebuild a Super Smash Bros. for Nintendo 3DS update file with custom content. Now a lot less verbose and without any need to install updates to sysNAND.
Updated for 1.1.6.
Hello, /hbg/ and /ssbg/!

If you are attempting to extract and rebuild any other .cia file, try this guide: http://pastebin.com/fD3Fs7Pf


. . . What you'll need:


. Sufficient free space on your computer's hard drive. If you don't have enough space, rebuilding the .cia may fail or result in strange side effects.
Anything above ~20GB should be fine.

. A 3DS on 9.2 or below, with ways to install .cia files (BBM, Devmenu, etc.) and run .3dsx files (HBL).
At a risk, you can attempt to downgrade your 3DS. Check out /hbg/.

. Decrypt9. https://github.com/d0k3/Decrypt9/releases

. Python 2.7. https://www.python.org/

. FunkyCIA2. https://gbatemp.net/threads/376941/

. Asia81's Pack Hack. http://pastebin.com/A1s8cmsD

. This tool kit I made just for you. https://a.pomf.cat/rlygid.7z (Password: Chocolate Disco)
Comes with now outdated 1.1.5 .rsf files for each region, instructions on how to tweak them if necessary, as well as all necessary tools, available in a super convenient fashion.

. 1.1.6 RSF files. https://a.pomf.cat/grzbsd.7z (Password: Polyrhythm)
These should be compatible with all releases. It's interesting how they made such a huge leap in versions while adding so little.


. . . Does this cause any negative side effects?


Nothing particular negative that I am aware of, as long as you limit yourself to modifying music.
Music may cut out if you use items which temporarily cause a different tune to play, such as a Super Star or the Hammers.
You can still play online, you can still play on stages with multiple tracks, you can still do everything just fine.
If you were to modify moveset related things, it would most likely cause issues when attempting to play with others who don't share these modifications. Online gameplay might suffer from issues as well.

. . . Let's do this!


. . Preparation


If you already have your region's update .cia file, place the update .cia in your SD card's "D9Game" folder and skip ahead to the "Navigate to..." step at the end of this section. Else, continue reading.

Copy Decrypt9's "Decrypt9WIP" folder over to your 3DS SD card's "3ds" folder.
Load up Decrypt9. Choose "EmuNAND Options", then "File Dump...", then "Dump ticket.db".
Once it's done, access your SD card with your PC. Copy the ticket.db found in your "Decrypt9" folder over to FunkyCIA2's folder.

Hold Shift, right click, then choose "Open command window here". Copy and paste the following line (right click -> paste) with necessary alterations in there:

FunkyCIA2.py ticket.db -title (your region's UID)

Complete UID's for each region's update should be as follows, based on 3dsdb.com:

EU: 0004000E000EE000 (00EE0, 000ee000)
US: 0004000E000EDF00 (00EDF, 000edf00)
JP: 0004000E000B8B00 (00B8B, 000b8b00)

Once FunkyCIA2 is done downloading and generating the update's .cia file, place the update .cia in your SD card's "D9Game" folder.

Navigate to and point at your update .cia in Devmenu or BBM and note down its Unique ID and Version. For 1.1.6 EU, this should be:
UID: 0x00ee0
Version: 32.27.0


. . Decryption

If you haven't done so yet, copy Decrypt9's "Decrypt9WIP" folder over to your 3DS SD card's "3ds" folder.
After having verified that your update .cia is the only .cia located in "D9Game", load up Decrypt9.
Choose "Game Decryptor Options", then "CIA Decryptor (deep)".
Once it is done decrypting (this might take a while, be patient!), access your SD card with your PC.
Copy your update .cia into the Pack Hack folder. Ensure that it is located in the same folder as HackingToolkit.exe.


. . Extraction


Open up HackingToolkit.exe.
Type in "cia" and your region's update UID/the update .cia's file name. Let it do its thing.
Write "y" when asked about decompression.
Go to "ExtractedExeFS" and rename ".code.bin" to "code.bin".
Done.


. . Adding custom music, editing data


Go to http://brawlcustommusic.com/ and look for tunes you like. Choose "Super Smash Bros. for Nintendo 3DS". Choose the tune you want to replace.
No, you can't have more than two tunes per stage as of now, and yes, you will have to replace tunes. It sucks, I know.

Move the resulting file into PackHack\ExtractedRomFS\sound\bgm. Should your OS ask whether or not you'd like to replace a file, you're likely about to replace a DLC track or a track you already placed in there. Agree to that if you're fine with it.

If you are trying to add music to one of the more recent DLC stages, follow this guide, kindly written by another anon.
http://pastebin.com/X70Dvhpt

A guide has been released which explains how to modify non-music files.
If you are interested in editing sound files, textures, models, or other things, look into this:
https://gbatemp.net/threads/414548/

Sm4shCommand is also a thing. It allows you to modify a fighter's moves and their properties.
Nothing's stopping you from turning your favourite fighter into a broken powerhouse now!
https://gbatemp.net/threads/378245/

. . Rebuilding


Load the RomFS Builder. Hit "Open" and point it at the modified ExtractedRomFS folder. Hit "Go" and save the output as "romfs.bin" into the "Makerom" folder.
Copy the "ExtractedExeFS" folder and "DecryptedExHeader.bin" over into the Makerom folder, too.

Go into "RSF", read the "important.txt" if on a version other than 1.1.6. Once done, copy the smash_update_repack.rsf corresponding to your game's region into the "Makerom" folder.

Navigate into the "Makerom" folder. Make sure it contains the "ExtractedExeFS" folder, "romfs.bin", "DecryptedExHeader.bin", and your region's "smash_update_repack.rsf".
Hold Shift, right click, then choose "Open command window here". Copy and paste the following line (right click -> paste) in there:


makerom.exe -f cxi -rsf smash_update_repack.rsf -exheader DecryptedExHeader.bin -code ExtractedExeFS/code.bin -icon ExtractedExeFS/icon.bin -banner ExtractedExeFS/banner.bin -romfs romfs.bin -o smash_customupdate.cxi


Navigate into ExInjector and load "ExInjector.exe". Point it at "smash_customupdate.cxi", then point it at "DecryptedExHeader.bin".
Yes, you are trying to build a CIA file.

After a message claiming that the operation has been successful, return to your cmd window.

If you are on a version other than 1.1.6, adjust the "-minor XX -micro XX" part for the following line. If you aren't, just use it as is.
As an example, 1.1.6's "Version" would be 32.27.0 - "RemasterVersion".Minor.Micro. If your update's "Version", which we looked up earlier, would be 35.29.0, edit the "-minor 27" into "-minor 29".

Once done, paste the following line, with possible alterations, in there:


makerom.exe -f cia -o smash_customupdate.cia -content smash_customupdate.cxi:0:0 -minor 27 -micro 0


You should end up with a "smash_customupdate.cia". If all went well, you should hear your own tunes in-game after you installed it.
A message along the lines of "[CIA WARNING] Common Key could not be loaded, CIA will not be encrypted" might appear - don't pay attention to that. It shouldn't matter at all. At least it hasn't whenever I rebuilt .cia files.


. . . Preserving files for easy rebuilds


All you should need should be the "ExtractedRomFS" folder (to add new music and rebuild it with the RomFS Builder), the "ExtractedExeFS" folder (for rebuilding purposes, of course) and "DecryptedExHeader.bin" (which we need to inject with ExInjector), as well as the Sm4sh DIY Kit (for its tools).
All other files shouldn't be needed from this point onward and can be disposed of.


. . . It doesn't work!


Try again. Follow the steps again. You likely skipped out on or messed up a small, yet important step.
If you didn't, complain about it and hope that I or somebody who knows how to do it right will notice.

Here's the verbose, dated guide, in case you want to read through it all and maybe learn some things crucial to know in order to apply this guide to other games' files. http://pastebin.com/02EKD4D1