Homebrew Official [Download] Decrypt9 - Open Source Decryption Tools (WIP)

[Dean_]

This doesn't work, it aborts with an error when i try:

[CCI ERROR] Failed to decrypt CIA content: 0x00000000
[RESULT] Failed to build CCI

Decrypt CIA with decrypt9..

 

[Krude]

Oh well, if that's the problem, i already extracted the game portion as a .CXI from the decrypted .CIA before, it's how to continue from there and get a decrypted romfs that's my problem.

 

[Dean_]

That is ncch format.
ctrtool -t ncch -p --romfs=./romfs.bin {CXI FILE}

 

[d0k3]

This doesn't work, it aborts with an error when i try:

[CCI ERROR] Failed to decrypt CIA content: 0x00000000
[RESULT] Failed to build CCI

You did not decrypt the CIA and that's the output for the unaltered CIA, correct? If it is decrypted, that error should not happen even if you only used shallow CIA decryption. Can you give us some more details about the CIA? What does it contain? Is it installable? And, if not, are you 100% sure it is not broken to begin with?

 

[Ninoh-FOX]

I reinstall ninjhax 1.1b and the last versions (ui and wip) works great!!

 

[bbsniua]

你好！
一直关注 Decrypt9 (WIP)，我在想能不能支持10.1系统，功能不需要太多，能提取nand.fat16.xorpad和备份/注入sysNAND即可，假设能解密NAND那就有可能实现降级（替换掉里面的文件后再注入即可，我在虚拟系统10.1测试过了）。
10.1虚拟系统内可以安装themehax。
很抱歉我不懂英文，只能用谷歌翻译了。

Hello there!
Has been concerned Decrypt (WIP), I think the system can support 10.1, functions do not require too much energy to extract nand.fat16.xorpad and backup / injection sysNAND be assumed decription NAND it is possible to achieve downgrade (replace inside the file and then injected into the can, I tested had a virtual system 10.1).
It can be installed within 10.1 themehax virtual system.
I'm sorry I do not speak English, only translated by Google.

 

[Dean_]

你好！
一直关注 Decrypt9 (WIP)，我在想能不能支持10.1系统，功能不需要太多，能提取nand.fat16.xorpad和备份/注入sysNAND即可，假设能解密NAND那就有可能实现降级（替换掉里面的文件后再注入即可，我在虚拟系统10.1测试过了）。
10.1虚拟系统内可以安装themehax。
很抱歉我不懂英文，只能用谷歌翻译了。

Hello there!
Has been concerned Decrypt (WIP), I think the system can support 10.1, functions do not require too much energy to extract nand.fat16.xorpad and backup / injection sysNAND be assumed decription NAND it is possible to achieve downgrade (replace inside the file and then injected into the can, I tested had a virtual system 10.1).
It can be installed within 10.1 themehax virtual system.
I'm sorry I do not speak English, only translated by Google.

Not possible. Only for below 9.3.

 

[bbsniua]

Not possible. Only for below 9.3.

实测FBI支持到10.1，可以读取系统，可行性是存在的，
假设不做备份/注入系统，仅提取nand.fat16.xorpad，再拆机用读卡器焊线导出NAND也可以解密系统。
Found FBI support to 10.1, you can read system, the feasibility is there,
Suppose not backup / injection system, to extract only nand.fat16.xorpad, then disassemble export NAND wire can be decrypted with a card reader system.

 

[Dean_]

实测FBI支持到10.1，可以读取系统，可行性是存在的，
假设不做备份/注入系统，仅提取nand.fat16.xorpad，再拆机用读卡器焊线导出NAND也可以解密系统。
Found FBI support to 10.1, you can read system, the feasibility is there,
Suppose not backup / injection system, to extract only nand.fat16.xorpad, then disassemble export NAND wire can be decrypted with a card reader system.

I said that is not possible including xorpad generation. And FBI does not work on above 9.2.

 

[bbsniua]

I said that is not possible including xorpad generation. And FBI does not work on above 9.2.

实测FBI_1.4.15的3dsx可以在10.1的HBL内启动并进入FBI菜单，可以读取到系统文件。
Found 3dsx FBI1.4.15 may start menu and enter the FBI in 10.1 HBL, a file can be read into the system.

 

[Dean_]

实测FBI_1.4.15的3dsx可以在10.1的HBL内启动并进入FBI菜单，可以读取到系统文件。
Found 3dsx FBI1.4.15 may start menu and enter the FBI in 10.1 HBL, a file can be read into the system.

Kernel access is needed for decryption, and 9.3 does not have one.

 

[Krude]

You did not decrypt the CIA and that's the output for the unaltered CIA, correct? If it is decrypted, that error should not happen even if you only used shallow CIA decryption. Can you give us some more details about the CIA? What does it contain? Is it installable? And, if not, are you 100% sure it is not broken to begin with?

Yeah, that was the error for encrypted CIA. However, i just tried again with a (decrypt9 shallow decrypted) CIA and got a slightly different error again:

[CCI ERROR] CIA content: 0x00000001 is corrupt
[RESULT] Failed to build CCI

It's a CIA made from the preinstalled MH4U bundle. I've successfully deleted and re-installed it before, and it even works without CFW, so i'm pretty damn sure it isn't broken.

 

[MelonGx]

Since MSET of Decrypt9 is out, how about upgrading 8.1.0-0J N3DS to 9.2.0-20J with the following steps?

1) MSET-boot Decrypt9 on 8.1.0-0J
2) Dump FAT16 XORPAD
3) Decrypt both SysNAND 8.1.0-0J and emuNAND 9.2.0-20J
4) Inject emuNAND files to SysNAND
5) Re-encrypt and then restore the modified SysNAND

(edit)
To be noticed that restoring modified SysNAND may cause a brick due to unexpected factors.
So the tester should have hardmod skill before doing the test.

 

[atkfromabove]

That was fast . Nice release, and good readme, too! I already updated post #1 with the most recent screenshots.


On the matter of automating SudokuHax installation - that's not as easy as I thought. The problem is, the app that gets replaced by Sudoku(Hax) is smaller in size than Sudoku(Hax). To properly replace this, we'd need proper FAT16 routines, which we don't have for the encrypted NAND memory. Still looking into the possibilities but not looking too good now, especially given that SudokuHax installation is a one time affair.

Another thing that I'm looking into now is injecting to the Health & Safety app. The typical app to inject there is FBI, of course. Problem here is, the app to inject has to be properly processed, and I'm clueless as to how that works now. Riku has released a tool to do this, but it only works for O3DS & FBI. As there is no source code available, I can't figure out what exactly it does. Does anyone know anything about that?

Eh no worries! Since it is a one time thing anyway it isn't too hard to do manually.

 

[Nuzzgok]

Since MSET of Decrypt9 is out, how about upgrading 8.1.0-0J N3DS to 9.2.0-20J with the following steps?

1) MSET-boot Decrypt9 on 8.1.0-0J
2) Dump FAT16 XORPAD
3) Decrypt both SysNAND 8.1.0-0J and emuNAND 9.2.0-20J
4) Inject emuNAND files to SysNAND
5) Re-encrypt and then restore the modified SysNAND

Can I ask where you're finding the MSET decrypt9? I don't think it will work on 8.1J anyway, only the gateway MSET works.

 

[Shadowtrance]

Can I ask where you're finding the MSET decrypt9? I don't think it will work on 8.1J anyway, only the gateway MSET works.

In the release zip files maybe (both mine and d0k3's have Cakehax (mset) versions)?
As for it working on 8.1 i have no idea and don't have an 8.1j n3ds so can't test that theory you quoted.

 

[Nuzzgok]

In the release zip files maybe (both mine and d0k3's have Cakehax (mset) versions)?
As for it working on 8.1 i have no idea and don't have an 8.1j n3ds so can't test that theory you quoted.

Ahh, I didn't realise at first. Anyway, I went and tested it, the console just reboots on 8.1J

 

[Shadowtrance]

Ahh, I didn't realise at first. Anyway, I went and tested it, the console just reboots on 8.1J

Yeah sadly i think you still need a way to downgrade mset to the 4.x version for it to work.

 

[d0k3]

Yeah, that was the error for encrypted CIA. However, i just tried again with a (decrypt9 shallow decrypted) CIA and got a slightly different error again:

[CCI ERROR] CIA content: 0x00000001 is corrupt
[RESULT] Failed to build CCI

It's a CIA made from the preinstalled MH4U bundle. I've successfully deleted and re-installed it before, and it even works without CFW, so i'm pretty damn sure it isn't broken.

What was the output of the shallow CIA decrypt? If the verification passed, there is no way in hell anything went wrong with decryption or with you dumping it. It might even be a problem in Makerom.
What is the size of the .CIA? Sizes above 4GB may be problematic in all softwares and can't even be used on the internal SD card.

EDIT: And, a suggestion. Use CTRtools verification feature on the decrypted rom. It is "ctrtool -y yourcia.cia > textdump.txt" afaik. The output is then found in a file called "textdump.txt". Could you post this here?

 

[Shadowtrance]

What was the output of the shallow CIA decrypt? If the verification passed, there is no way in hell anything went wrong with decryption or with you dumping it. It might even be a problem in Makerom.
What is the size of the .CIA? Sizes above 4GB may be problematic in all softwares and can't even be used on the internal SD card.

EDIT: And, a suggestion. Use CTRtools verification feature. It is "ctrtool -y yourcia.cia > textdump.txt" afaik. The output is then found in a file called "textdump.txt". Could you post this here?

As far as i know there's current zero games that would be above 4gb in cia format.