Hacking FBI - Health and safety issue

[Dooboo]

Hey guys,

I'm up to step 30 on https://github.com/Plailect/Guide/wiki/Part-4-(Getting-the-OTP).

I can't open FBI, it's just the standard health and safety menu in rednand.

Help?!

 

[jerrmy12]

You didn't follow the guide

 

[Dooboo]

Yes I did

 

[hobbledehoy899]

Use DevMenu 11.4.

 

[Deleted member 370671]

You didn't inject the h&s.app file properly (either you injected it in SysNAND, or you simply didn't inject the modified file, but the original one).
Just try to do it again, and double check that you do exactly as the guide says.

 

[Dooboo]

I've done everything correctly as per the guide, still doesn't work..

 

[Deleted User]

Post your Decrypt9.log, or attach it.

 

[Dooboo]

Decrypt9 log:
Initializing SD card... success
0x03 KeyX & KeyY: already set up
0x05 KeyY: already set up
0x25 KeyX: already set up
0x18 KeyX: already set up
0x1B KeyX: not found
Finalizing Initialization...

Initialization: partially failed

Using RedNAND @ 000001/000001
Searching title "Health&Safety (N3DS)"...
Method 1: Search in title.db...
Found title 0004001020022300
TMD0 found at 1AA20000, size 2916b
APP0 found at 1AA30000, size 1016kB
APP1 found at 1AB30000, size 1884kB
Use arrow keys and <A> to choose a name
hs.app
Dumping & decrypting APP0...
Creating hs.app ...
Code / Crypto: CTR-N-HACP / 7x
Decrypt ExHdr/ExeFS/RomFS (2kB/733kB/0MB)
Verify ExHdr/ExeFS/RomFS: OK/OK/OK
Health&Safety Dump: succeeded!

Press B to return, START to reboot.

Unmounting SD card...

You selected "Health&Safety Inject".
This feature writes to the EmuNAND.
Doing this is potentially dangerous!

If you wish to proceed, enter:
<Left>, <Right>, <Down>, <Up>, <A>

(B to return, START to reboot)

Using RedNAND @ 000001/000001
Searching title "Health&Safety (N3DS)"...
Method 1: Search in title.db...
Found title 0004001020022300
TMD0 found at 1AA20000, size 2916b
APP0 found at 1AA30000, size 1016kB
APP1 found at 1AB30000, size 1884kB
Use arrow keys and <A> to choose a file
hs.app
Opening hs.app ...
Creating hs.enc ...
Code / Crypto: CTR-N-HACP / 7x
Encrypt ExHdr/ExeFS/RomFS (2kB/733kB/0MB)
Injecting H&S app...
Opening hs.enc ...
Fixing TMD...
Health&Safety Inject: succeeded!

Press B to return, START to reboot.
Initializing SD card... success
0x03 KeyX & KeyY: already set up
0x05 KeyY: already set up
0x25 KeyX: already set up
0x18 KeyX: already set up
0x1B KeyX: not found
Finalizing Initialization...

Initialization: partially failed

Unmounting SD card...
Initializing SD card... success
0x03 KeyX & KeyY: already set up
0x05 KeyY: already set up
0x25 KeyX: already set up
0x18 KeyX: already set up
0x1B KeyX: not found
Finalizing Initialization...

Initialization: partially failed

You selected "Health&Safety Inject".
This feature writes to the EmuNAND.
Doing this is potentially dangerous!

If you wish to proceed, enter:
<Left>, <Right>, <Down>, <Up>, <A>

(B to return, START to reboot)

Using RedNAND @ 000001/000001
Searching title "Health&Safety (N3DS)"...
Method 1: Search in title.db...
Found title 0004001020022300
TMD0 found at 1AA20000, size 2916b
APP0 found at 1AA30000, size 1016kB
APP1 found at 1AB30000, size 1884kB
Use arrow keys and <A> to choose a file
hs.app
Opening hs.app ...
Creating hs.enc ...
Code / Crypto: CTR-N-HACP / 7x
Encrypt ExHdr/ExeFS/RomFS (2kB/733kB/0MB)
Injecting H&S app...
Opening hs.enc ...
Fixing TMD...
Health&Safety Inject: succeeded!

Press B to return, START to reboot.
Initializing SD card... success
0x03 KeyX & KeyY: already set up
0x05 KeyY: already set up
0x25 KeyX: already set up
0x18 KeyX: already set up
0x1B KeyX: not found
Finalizing Initialization...

Initialization: partially failed

Using RedNAND @ 000001/000001
Searching title "Health&Safety (N3DS)"...
Method 1: Search in title.db...
Found title 0004001020022300
TMD0 found at 1AA20000, size 2916b
APP0 found at 1AA30000, size 1016kB
APP1 found at 1AB30000, size 1884kB
Use arrow keys and <A> to choose a name
hs.app (!)
Press <A> to overwrite existing file
Dumping & decrypting APP0...
Creating hs.app ...
Code / Crypto: CTR-N-HACP / 7x
Decrypt ExHdr/ExeFS/RomFS (2kB/733kB/0MB)
Verify ExHdr/ExeFS/RomFS: OK/OK/OK
Health&Safety Dump: succeeded!

Press B to return, START to reboot.

Unmounting SD card...

You selected "Health&Safety Inject".
This feature writes to the EmuNAND.
Doing this is potentially dangerous!

If you wish to proceed, enter:
<Left>, <Right>, <Down>, <Up>, <A>

(B to return, START to reboot)

Using RedNAND @ 000001/000001
Searching title "Health&Safety (N3DS)"...
Method 1: Search in title.db...
Found title 0004001020022300
TMD0 found at 1AA20000, size 2916b
APP0 found at 1AA30000, size 1016kB
APP1 found at 1AB30000, size 1884kB
Use arrow keys and <A> to choose a file
hs.app
Opening hs.app ...
Creating hs.enc ...
Code / Crypto: CTR-N-HACP / 7x
Encrypt ExHdr/ExeFS/RomFS (2kB/733kB/0MB)
Injecting H&S app...
Opening hs.enc ...
Fixing TMD...
Health&Safety Inject: succeeded!

Press B to return, START to reboot.

 

[MelonGx]

(Deleted)

 

[GothicIII]

Yes I did

No you didn't.
The guide clearly said to press down once on dpad at step 17 on part 4. And the log file you posted tells that you just inject the normal health and safety app into emu/rednand.

If you don't rename the files it should be FBI_inject_with_banner.app you are injecting and not hs.app

 

[Deleted User]

Your log shows nothing more than you dumping H&S and then re-injecting the same file back.

You're skipping all of 13-18

1. Extract Universal Inject Generator, then copy both hs.app from your SD card and FBI.ciafrom the FBI zip to the input folder
2. Double click go.bat (or execute go.shwith Terminal on Linux / Mac)
3. Copy FBI_inject_with_banner.app to the root of your SD card and reinsert your SD card into your 3DS
4. Press B on Decrypt9, then go to "EmuNAND Options" and select the "Health & Safety Inject" option
5. Press down once to select FBI_inject_with_banner.app, then press A to inject

 

[infernogott]

I have the same problem. How can I get the log?

 

[007manyo]

The log for dumping H&S should be at the root of your SD after dumping, IIRC.

 

[infernogott]

Thanks.

Here it is:

Initializing SD card... success
sector0x96 Key: otp.bin not found
0x03 KeyX & KeyY: already set up
0x25 KeyX: already set up
0x18 KeyX: not found
0x1B KeyX: not found
Finalizing Initialization...

Initialization: partially failed

Using EmuNAND @ 1D7800/000000
Searching title "Health&Safety"...
Method 1: Search in title.db...
Found title 0004001000022300
TMD0 found at 15ED8000, size 2868b
APP0 found at 15EE0000, size 896kB
Use arrow keys and <A> to choose a name
hs.app
Dumping & decrypting APP0...
Creating hs.app ...
Code / Crypto: CTR-N-HACP / Standard
Decrypt ExHdr/ExeFS/RomFS (2kB/681kB/0MB)
Verify ExHdr/ExeFS/RomFS: OK/OK/OK
Health&Safety Dump: succeeded!

Press B to return, START to reboot.

Unmounting SD card...


You selected "Health&Safety Inject".
This feature writes to the EmuNAND.
Doing this is potentially dangerous!

If you wish to proceed, enter:
<Left>, <Right>, <Down>, <Up>, <A>

(B to return, START to reboot)

Using EmuNAND @ 1D7800/000000
Searching title "Health&Safety"...
Method 1: Search in title.db...
Found title 0004001000022300
TMD0 found at 15ED8000, size 2868b
APP0 found at 15EE0000, size 896kB
Use arrow keys and <A> to choose a file
FBI_inject_with_banner.app
Opening FBI_inject_with_banner.app ...
Code / Crypto: CTR-N-HACP / Standard
Encrypt ExHdr/ExeFS/RomFS (2kB/681kB/0MB)
Injecting H&S app...
Opening hs.enc ...
Fixing TMD...
Health&Safety Inject: succeeded!

Press B to return, START to reboot.