For S1 carts, MigFlash stores the raw encrypted files and they are decoded by switch 1 & 2. No need to decrypt prior.
Also as others have said, the cart format of S2 is just wildly different than S1. MigFlash and TotalJustice are probably the closest at getting dumps, and I am sure they are...