Homebrew Official [Download] Decrypt9 - Open Source Decryption Tools (WIP)

[dkabot]

Yes, I'm confused with the whole xoring part.

I have the nand.fat16.xorpad and of course the NAND.bin file. Now I don't understand / know what do do from here.

Get the C rewrite of 3DSFAT16Tool and use that.
It takes a NAND dump, FAT16 xorpad and outputs a decrypted image of the partition.
Windows, you need some sort of software like WinImage (though prolly not that itself, crashes on me too damn much) and on OSX using a disk image extension works. Linux I'd prolly just try a mount command.

 

[MK73DS]

I think the SDto3DS.py script from here can help you. I never used that, though, so if you've got problems with that you'll need to ask someone in the know.

Thank you very much

 

[vb_encryption_vb]

Get the C rewrite of 3DSFAT16Tool and use that.
It takes a NAND dump, FAT16 xorpad and outputs a decrypted image of the partition.
Windows, you need some sort of software like WinImage (though prolly not that itself, crashes on me too damn much) and on OSX using a disk image extension works. Linux I'd prolly just try a mount command.

What's the command I need to type in? I see someone made a GUI for it, but it's no longer available for download.

 

[dkabot]

What's the command I need to type in? I see someone made a GUI for it, but it's no longer available for download.

Just open cmd (or terminal, if not windows) in that folder and use it without arguments, it gives you usage information.

 

[d0k3]

Yes, I'm confused with the whole xoring part.

I have the nand.fat16.xorpad and of course the NAND.bin file. Now I don't understand / know what do do from here.

Read the readme! What you really want is dumping the CTRNAND partition (in the SysNAND / EmuNAND menu).

--------------------- MERGED ---------------------------

Get the C rewrite of 3DSFAT16Tool and use that.
It takes a NAND dump, FAT16 xorpad and outputs a decrypted image of the partition.
Windows, you need some sort of software like WinImage (though prolly not that itself, crashes on me too damn much) and on OSX using a disk image extension works. Linux I'd prolly just try a mount command.

Exactly. OSFmount is the best option for Windows, by the way

 

[vb_encryption_vb]

Read the readme! What you really want is dumping the CTRNAND partition (in the SysNAND / EmuNAND menu).

--------------------- MERGED ---------------------------


Exactly. OSFmount is the best option for Windows, by the way

I have read the read me, the link there took me to C rewrite which I downloaded. I also noticed someone made a GUI which is no longer available. I'm obviously typing in the wrong command.

Command sorted out.

 

[Februarysn0w]

Yes, I'm confused with the whole xoring part.

I have the nand.fat16.xorpad and of course the NAND.bin file. Now I don't understand / know what do do from here.

there is a xoring command line software. IIRC OTP starter pack has this tool. and batch file too.

 

[dkabot]

there is a xoring command line software. IIRC OTP starter pack has this tool. and batch file too.

Manually xoring is irrelevant with C rewrite of FAT16Tool, it handles that internally.

 

[vb_encryption_vb]

When using CTRNAND it just stops at 81% than says finished or something or other.

 

[d0k3]

When using CTRNAND it just stops at 81% than says finished or something or other.

That doesn't help us figuring it out... We need the exact output and the exact option you used. Maybe everything is okay, you need to try it in OSFmount.

 

[vb_encryption_vb]

That doesn't help us figuring it out... We need the exact output and the exact option you used. Maybe everything is okay, you need to try it in OSFmount.

C:\Users\Administrator\Desktop\Kiosk n3ds>3DSFAT16tool -d NAND.bin nand.fat16.bi
n nand.fat16.xorpad

3DSFAT16tool (C version) by d0k3
--------------------------------

dumping & decrypting nand.fat16.bin
from NAND.bin
using nand.fat16.xorpad

processing... 81%
C:\Users\Administrator\Desktop\Kiosk n3ds>

Mounting still errors out. That's using the CTRNAND.

Regular sysnand completes but won't mount and let me view as well.

 

[d0k3]

C:\Users\Administrator\Desktop\Kiosk n3ds>3DSFAT16tool -d NAND.bin nand.fat16.bi
n nand.fat16.xorpad

3DSFAT16tool (C version) by d0k3
--------------------------------

dumping & decrypting nand.fat16.bin
from NAND.bin
using nand.fat16.xorpad

processing... 81%
C:\Users\Administrator\Desktop\Kiosk n3ds>

Mounting still errors out. That's using the CTRNAND.

Regular sysnand completes but won't mount and let me view as well.

... I told you a few posts ago, use the CTRNAND partition dumping option in Decrypt9 instead :/. Read the readme, use CTRL+F to quicksearch what you need to find!

 

[vb_encryption_vb]

... I told you a few posts ago, use the CTRNAND partition dumping option in Decrypt9 instead :/. Read the readme, use CTRL+F to quicksearch what you need to find!

I did, CTRNAND is what stops at 81% I renamed it to NAND...

 

[d0k3]

I did, CTRNAND is what stops at 81% I renamed it to NAND...

You need a regular NAND dump (backup) with 3DSFAT16Tool, or you just mount your dumped CTRNAND partition directly in OSFmount. Hope that's clear enough. Otherwise use one of the many tutorials on this site.

 

[Shadowtrance]

@d0k3 the wall is over there waiting for your head to be banged against. haha --------------------------------->>>>>>>>
RIP d0k3's head...

 

[vb_encryption_vb]

You need a regular NAND dump (backup) with 3DSFAT16Tool, or you just mount your dumped CTRNAND partition directly in OSFmount. Hope that's clear enough. Otherwise use one of the many tutorials on this site.

LOL, that makes sense than. I must have been reading alot of out dated material than and was confused along the lines.

 

[vb_encryption_vb]

I just compared all the "title" files to the 3dswiki. Nothing extra was found, there was a few things missing, but the wiki don't know what they are. I doubt they are related to the issue of Kiosk system having to have a power source at all times. I don't have a dump of a retail n3ds to compare. Thinking this may be a retail unit after all and a blown fuse maybe...

 

[dark_samus3]

I just compared all the "title" files to the 3dswiki. Nothing extra was found, there was a few things missing, but the wiki don't know what they are. I doubt they are related to the issue of Kiosk system having to have a power source at all times. I don't have a dump of a retail n3ds to compare. Thinking this may be a retail unit after all and a blown fuse maybe...

If a battery fuse was blown then the system wouldn't work even with a power supply plugged in, so it's probably not that... Stupid question, have you tried a different battery? The amount of use/abuse the systems get in the kiosk might mean the battery literally cannot hold any sort of charge and just needs to be replaced

 

[vb_encryption_vb]

If a battery fuse was blown then the system wouldn't work even with a power supply plugged in, so it's probably not that... Stupid question, have you tried a different battery? The amount of use/abuse the systems get in the kiosk might mean the battery literally cannot hold any sort of charge and just needs to be replaced

Yes, I swapped batteries. I even swapped just the motherboard into another system. Same issue. I changed the power plug out as well. I made a thread about this already, but didn't get much help other than take a look at the titles installed and compare.

If I power the console off and remove the power cord, the time / date reset as well.

It's a N3DS XL, 9.0.0.2U is current version

https://gbatemp.net/threads/n3ds-only-powers-on-when-plugged-in.415937/

 

[d0k3]

@Shadowtrance, @dark_samus3, @Apache Thunder and everyone else dabbling around in the dark and dangerous art of OTP dumping, I made a little something that may help streamline the OTP dumping process in the future.

I did some basic testing, but without a hardmod and only a N3DS at my disposal I can't test everything of course.

This is what this can / should do:

• Dump the OTP.bin (0x100 or 0x108)
• On-the-fly switching of the CTRNAND crypto slot 0x4 -> 0x5 or slor 0x5 -> 0x4
• Dumping the NCSD NAND header
• Inject the NCSD NAND header
• Includes a basic set of Decrypt9WIP functionality, including...
• ... dumping / injecting the cryptoswitched CTRNAND partition!

This is what needs testing:

• Duming the NAND header on O3DS (not dangerous!)
• OTP Dumping, cryptoswitching, injecting the NAND header
• Dumping / injecting the cryptoswitched CTRNAND partition

The code is rather simple, so I'm pretty sure we won't need a whole lot of testing, but i still need to refine some stuff until this can have a proper release.