Homebrew Official [Download] Decrypt9 - Open Source Decryption Tools (WIP)

[d0k3]

Using the 20150918 WIP from github, Decrypt Titles refuses to decrypt my 7.X crypto games because I don't have slot0x25keyX.bin...
But I'm running Decrypt9 from 9.2 sysNAND on my 2DS. Really annoying, sounds simple to fix.

Will be fixed in the next release. Of course you don't need slot0x25keyX.bin on an O3DS >= 7.x.

With your old Decrypt9 you can launch it with Decrypt9.3dsx for Ninjhax or Launcher.dat for browser hax.

With your new version you have included Decrypt9.dat.In @Shadowtrance version Decrypt9.dat is lunched from MSET/DS profile exploit.To launch anything from MSET you need to include a rop.nds or you can't launch it.If you look in @Shadowtrance version you will see Decrypt9UI.dat and Decrypt9UIROP.nds.

Didn't know that! Decrypt9.3dsx and Launcher.dat for the spider exploit are still included, of course. @Shadowtrance : I have no idea how to generate the required rop.NDS. Is this the CakeHax exploit? I always thought the new Decrypt9.dat could be loaded via CakesFW and wouldn't require other things. Can you enlighten me?

And my NAND dumps are.

o3ds 943MB 965,632KB 988,807,168 bytes

n3ds 1.21GB 1,269,760KB 1,300,234,240 bytes

The sizes of your NAND dumps look good, and normally the EmuNAND detection routines should work fine. I will have to take a closer look. The EmuNAND you are using, is it a RedNAND or a GW type EmuNAND? RedNANDs will not work at the moment.

I can help out with this. I can test as soon as I get home. Is there a certain type of results you would like? Or I can just tell you any speed differences and if it creates any issues on the nand.

Thank you! Well, for now, the number one priority is getting the new EmuNAND features to work. You may check if it works now or wait until I release the next version with (hopefully) some fixes.

Hello,
Spider Launcher not work on my O3DS XL (4.5E), it does not work properly, the way I've found is, start loading decrypt9.dat and once the loading bar 100% I open the menu and loading is done properly.

You need to use the Launcher.dat for the browser exploit, not the Decrypt9.dat.

 

[Shadowtrance]

Didn't know that! Decrypt9.3dsx and Launcher.dat for the spider exploit are still included, of course. @Shadowtrance : I have no idea how to generate the required rop.NDS. Is this the CakeHax exploit? I always thought the new Decrypt9.dat could be loaded via CakesFW and wouldn't require other things. Can you enlighten me?

Nah it's separate from cakehax. https://github.com/mid-kid/CakesROP

 

[d0k3]

Nah it's separate from cakehax. https://github.com/mid-kid/CakesROP

Wait, what? Does that mean that the CakeHax build goal commited by @mid-kid generates output that cannot be run without further coding? Or is the CakeRop just an additional method of running it?

 

[mid-kid]

Wait, what? Does that mean that the CakeHax build goal commited by @mid-kid generates output that cannot be run without further coding? Or is the CakeRop just an additional method of running it?

CakesROP is the ROP installer for MSET.
If you want to run it with MSET, get CakesROP.nds, and put it along with a ropCustom.txt which's contents are "Decrypt9.dat" on the root of your DS flashcard's SD card (or use the code.bin, with the same ropCustom.txt, on your 3DS SD card, and load it with http://dukesrg.no-ip.org/3ds/cakes?code.bin). Then just go to the usual DS profile settings. (CakesROP.nds and code.bin can be downloaded here: http://mkiddy.leerik.nl/cakes/)
Or, if you just want to load it with the browser: http://dukesrg.no-ip.org/3ds/cakes?Decrypt9.dat

Also worth noting is the misconception of CakeHax being an exploit, which is entirely untrue. It's a loader that loads code in ARM9 kernel mode. To do that it uses exploits (namely memchunkhax and firmlaunchax), yes, but it isn't an exploit on it's own.

 

[Shadowtrance]

Wait, what? Does that mean that the CakeHax build goal commited by @mid-kid generates output that cannot be run without further coding? Or is the CakeRop just an additional method of running it?

What mid-kid said i guess. ^^^

 

[d0k3]

CakesROP is the ROP installer for MSET.
If you want to run it with MSET, get CakesROP.nds, and put it along with a ropCustom.txt which's contents are "Decrypt9.dat" on the root of your DS flashcard's SD card (or use the code.bin, with the same ropCustom.txt, on your 3DS SD card, and load it with http://dukesrg.no-ip.org/3ds/cakes?code.bin). Then just go to the usual DS profile settings. (CakesROP.nds and code.bin can be downloaded here: http://mkiddy.leerik.nl/cakes/)
Or, if you just want to load it with the browser: http://dukesrg.no-ip.org/3ds/cakes?Decrypt9.dat

Also worth noting is the misconception of CakeHax being an exploit, which is entirely untrue. It's a loader that loads code in ARM9 kernel mode. To do that it uses exploits (namely memchunkhax and firmlaunchax), yes, but it isn't an exploit on it's own.

Thanks a ton, good explanation! I might think about adding a CakesRop submodule then. Might be a stupid question, but running via Browser will only work on O3DS 4.x, correct?

 

[key1340]

@d0k3

Both my o3ds + n3ds are using gw type emuNANDs.They both worked fine with Decrypt9E that you made before.

Browser hax only work on the o3ds 4.x-9.2.

As for making a rop.nds file.Maybe the source for @Shadowtrance version has his rop in it,and you could just change it to look for Decrypt9.dat instead of Decrypt9UI.dat.

 

[mid-kid]

Thanks a ton, good explanation! I might think about adding a CakesRop submodule then. Might be a stupid question, but running via Browser will only work on O3DS 4.x, correct?

The CakeHax version supports the exact same entrypoints as CakesFW, rxTools and reiNAND (I think), since they all use CakeHax.
Which means 4.x-9.2 browser, 4.x and 6.x MSET (with downgrade for both until 9.2), and optionally Ninjhax via CakeBrah.

 

[d0k3]

@d0k3

Both my o3ds + n3ds are using gw type emuNANDs.They both worked fine with Decrypt9E that you made before.

Browser hax only work on the o3ds 4.x-9.2.

As for making a rop.nds file.Maybe the source for @Shadowtrance version has his rop in it,and you could just change it to look for Decrypt9.dat instead of Decrypt9UI.dat.

Creating the ROP.nds file: Shadowtrance created this outside of the Decrypt9UI source code, what I'm (possibly) interested in doing is adding a new build goal to the Makefile that will automagically create that ROP.nds file. Still considering it, though. One way or another, thanks again, @mid-kid for the explanation.

As for the previously working EmuNAND features - well, that was because there was no safety, no EmuNAND detection function in there previously. Meaning it would try to do it's stuff even if there was no EmuNAND there, possibly messing up your SD card. That's okay for an experimental release, but not if my intention is for a stable release.


I've also got a new release:

• Removed universal title decryptor requirement for slot0x25keyX.bin on O3DS - you're responsible for that on your own now. (You need it only below FW 7.x).
• Replaced FATFS and SDMMC with their most recent versions. File IO might be faster now.
• EmuNAND features should now be correctly detected. Seedsave dumper still untested, though.

Yup, EmuNAND features should be working now, it at least worked on my N3DS. @key1340 , can you test again? I especially need to know if it works on O3DS and if the seedsave dumper feature does what it should do. Also, @atkfromabove , you offered to do speed tests, and as all file io functions are replaced with newer versions now, it would in fact be interesting if everything still works as intended and if it is faster. If you have the time, you could compare todays version (20150921) with the previous one (20150918). Interesting features to test for speed and output would be NCCH padgen, NAND dump, and one of the NAND partition dumper features. If you have the time.

Thanks to everyone who tests my stuff and gives me feedback!

 

[atkfromabove]

Creating the ROP.nds file: Shadowtrance created this outside of the Decrypt9UI source code, what I'm (possibly) interested in doing is adding a new build goal to the Makefile that will automagically create that ROP.nds file. Still considering it, though. One way or another, thanks again, @mid-kid for the explanation.

As for the previously working EmuNAND features - well, that was because there was no safety, no EmuNAND detection function in there previously. Meaning it would try to do it's stuff even if there was no EmuNAND there, possibly messing up your SD card. That's okay for an experimental release, but not if my intention is for a stable release.


I've also got a new release:

• Removed universal title decryptor requirement for slot0x25keyX.bin on O3DS - you're responsible for that on your own now. (You need it only below FW 7.x).
• Replaced FATFS and SDMMC with their most recent versions. File IO might be faster now.
• EmuNAND features should now be correctly detected. Seedsave dumper still untested, though.

Yup, EmuNAND features should be working now, it at least worked on my N3DS. @key1340 , can you test again? I especially need to know if it works on O3DS and if the seedsave dumper feature does what it should do. Also, @atkfromabove , you offered to do speed tests, and as all file io functions are replaced with newer versions now, it would in fact be interesting if everything still works as intended and if it is faster. If you have the time, you could compare todays version (20150921) with the previous one (20150918). Interesting features to test for speed and output would be NCCH padgen, NAND dump, and one of the NAND partition dumper features. If you have the time.

Thanks to everyone who tests my stuff and gives me feedback!

Here is a screen of my speedtests. I did not have much of a speed difference between the 2 versions. Also I had a different size NAND dump from the two versions (about 1MB) do you know why that would be different?

I can do more tests if you would like! Let me know what you would like me to try, thank you for your work on this!

 

[key1340]

@d0k3

I have test the new version on the o3ds.

Titlekey Decrypt works fine

Ticket Dump works fine

Seedsave Dump failed

Searching for seedsave...
Failed!
Seedsave Dump: failed!

 

[Madridi]

Probably a stupid question but I'll ask it anyway:

If I already have gateway, meaning I already have launcher.dat on my sd root, does it mean that I can't have I can't use the web browser to launch this? (unless I am delete gateway's launcher.dat of course)

Anyone?

 

[Shadowtrance]

Probably a stupid question but I'll ask it anyway:

If I already have gateway, meaning I already have launcher.dat on my sd root, does it mean that I can't have I can't use the web browser to launch this? (unless I am delete gateway's launcher.dat of course)

Anyone?

That would be correct i believe. Except you don't have to delete the GW one, just rename it.
Someone else might want to chime in though. I usually use the ninjhax and mset versions myself.

 

[Madridi]

That would be correct i believe. Except you don't have to delete the GW one, just rename it.
Someone else might want to chime in though. I usually use the ninjhax and mset versions myself.

Thanks, but renaming it would achieve similar results to deleting it correct? As in, the exploit will only launch whatever is named as launcher.dat .. So you can't have both?

If that's the case, any limitations why it's set up this way? Why not have it called decrypt9.dat and have a dedicated URL to launch it like the way rxTools, cakes, etc are set up?

I would love to play a bit with this tool if it was possible

 

[Shadowtrance]

Thanks, but renaming it would achieve similar results to deleting it correct? As in, the exploit will only launch whatever is named as launcher.dat .. So you can't have both?

If that's the case, any limitations why it's set up this way? Why not have it called decrypt9.dat and have a dedicated URL to launch it like the way rxTools, cakes, etc are set up?

I would love to play a bit with this tool if it was possible

Well what do you know, it turns out that it can be loaded like that.
The MSET version (cakehax) can be loaded via mset or from the browser (on old 3ds).
For example, loading my version would be
http://dukesrg.no-ip.org/3ds/cakes?Decrypt9UI.dat

 

[Madridi]

Well what do you know, it turns out that it can be loaded like that.
The MSET version (cakehax) can be loaded via mset or from the browser (on old 3ds).
For example, loading my version would be
http://dukesrg.no-ip.org/3ds/cakes?Decrypt9UI.dat

No way really? I am going to test it out right now! (Both original and your GUI version)

Anything I should know about the 2 versions?

Thanks a lot for your help

 

[Shadowtrance]

No way really? I am going to test it out right now! (Both original and your GUI version)

Anything I should know about the 2 versions?

Thanks a lot for your help

Yeah i just tried it myself and it works (my version did atleast, didn't try the other).
Mine looks prettier? haha

 

[Madridi]

Yeah i just tried it myself and it works (my version did atleast, didn't try the other).
Mine looks prettier? haha

Haha I just thought that since your last release was about a month ago and the original one was updated yesterday, there would be lots of notable differences

 

[Shadowtrance]

Haha I just thought that since your last release was about a month ago and the original one was updated yesterday, there would be lots of notable differences

Yeah there will be a few differences, just waiting on d0k3 to iron out any issues ppl report/add whatever he's adding before updating mine to be honest seeing as he's more the code guy than i am.

 

[d0k3]

@atkfromabove & @key1340
Here's a new release for you and anyone else who is interested to test (not on GitHub yet).

For @atkfromabove: This has the 32bit fifo disabled, but still using the new SDMMC and FATFS routines. I think it is faster that way, but I'm entirely unsure. These speed results would be very helpful.

For @key1340: I'm almost sure the seedsave dumper will work as intended now. There's also a new seeddb.bin updater in there. It will work as SEEDconv does, but if seeddb.bin already exists it will update it (also doing duplicate checks). At this time I can only hope it works as intended. Backup your seeddb.bin file, just in case.