Homebrew Official [Download] Decrypt9 - Open Source Decryption Tools (WIP)

  • Thread starter Thread starter d0k3
  • Start date Start date
  • Views Views 935,059
  • Replies Replies 4,476
  • Likes Likes 71
I hit a roadblock with Plailect's guide (Started with a stock 10.3.0-28U N3DS LL). Everything been going 100% until Part 4 Step 15. Health&Safety inject keeps failing.

Decrypt9 log file
Code:
Initializing SD card... success
0x03 KeyX & KeyY: already set up
0x05 KeyY: already set up
0x25 KeyX: already set up
0x18 KeyX: already set up
0x1B KeyX: not found
Finalizing Initialization...
Initialization: partially failed
Using RedNAND @ 000001/000001
Searching title "Health&Safety (N3DS)"...
Method 1: Search in title.db...
Found title 0004001020021300
TMD0 found at 1A4E8000, size 2916b
APP0 found at 1A4F8000, size 956kB
APP1 found at 1A5E8000, size 388kB
Use arrow keys and <A> to choose a name
hs.app
Dumping & decrypting APP0...
Creating hs.app ...
Code / Crypto: CTR-N-HACE / 7x
Decrypt ExHdr/ExeFS/RomFS (2kB/670kB/0MB)
Verify ExHdr/ExeFS/RomFS: OK/OK/OK
Health&Safety Dump: succeeded!
Press B to return, START to reboot.
Unmounting SD card...
You selected "Health&Safety Inject".
This feature writes to the EmuNAND.
Doing this is potentially dangerous!
If you wish to proceed, enter:
<Left>, <Right>, <Down>, <Up>, <A>
(B to return, START to reboot)
Using RedNAND @ 000001/000001
Searching title "Health&Safety (N3DS)"...
Method 1: Search in title.db...
Found title 0004001020021300
TMD0 found at 1A4E8000, size 2916b
APP0 found at 1A4F8000, size 956kB
APP1 found at 1A5E8000, size 388kB
No usable file found
Health&Safety Inject: failed!
Press B to return, START to reboot.
It is possible something went wrong in the Universal Inject Generator. Check Plailects guide again (making sure you did everything right), and if it still does not work, write in the Universal Inject Generator thread.
 
  • Like
Reactions: temp2000
It is possible something went wrong in the Universal Inject Generator. Check Plailects guide again (making sure you did everything right), and if it still does not work, write in the Universal Inject Generator thread.
Double checked everything, only thing I didn't follow correctly was naming nand backup to sysNAND.bin in Part 2 of the tutorial because write up didn't state you can change name with directional pad. I doubt it's because of that. Tried using VMware and still no luck. Will report in the Universal Inject Generator thread.
 
Last edited by temp2000,
can you inject FBI to sysnand? if so, then we will be able to install CIA from sysnand straight away? or we have to use someting like pastaSYSNAND?
 
can you inject FBI to sysnand? if so, then we will be able to install CIA from sysnand straight away? or we have to use someting like pastaSYSNAND?
Not without sig checks being patched

Sent from my LG-D851 using Tapatalk
 
Hey, quick question I'm in a bit of a pinch, is there a way to run decrypt 9 on arm9loaderhax whilst on the lastest firmware just to get xorpads? Or is there an app that will run on this setup?
I rather not downgrade or have to setup rednand.
 
Hey, quick question I'm in a bit of a pinch, is there a way to run decrypt 9 on arm9loaderhax whilst on the lastest firmware just to get xorpads? Or is there an app that will run on this setup?
I rather not downgrade or have to setup rednand.
just use "Decrypt9WIP.bin" through some kind of payload loader (like BootCTR9 or Luma3DS chain loader)
 
Followed Plailect's guide until I got stuck at Injecting the Health & Safety part. looked around and found out that CTRNAND may have been fragmented and it needed to be defragged. I did all that [it was fragmented thanks to RxTools] but then I came to the realization that I can't inject CTRNAND neither!

Am I just boned? Is there any way to get around this?
 
Hello everyone! I need to compile a custom Decrypt9 in order to bypass the security check before injecting *nand files because my left D-Pad button doesn't work anymore. But when I type 'make brahma' in the Linux console to get the homebrew's Decrypt9 files, I get an error that says something like this:

make[1]: *** No target was specified and no makefile found.
Stop.
Makefile:141: failure in the instructions for the target 'brahma'
make: *** [brahma] Error 2

This screenshot is the original output in spanish:
brahma.png


What I need to do? I already have the devkitARM installed and defined the path to this files.
 
Hello everyone! I need to compile a custom Decrypt9 in order to bypass the security check before injecting *nand files because my left D-Pad button doesn't work anymore. But when I type 'make brahma' in the Linux console to get the homebrew's Decrypt9 files, I get an error that says something like this:

make[1]: *** No target was specified and no makefile found.
Stop.
Makefile:141: failure in the instructions for the target 'brahma'
make: *** [brahma] Error 2

This screenshot is the original output in spanish:
brahma.png


What I need to do? I already have the devkitARM installed and defined the path to this files.
You probably need to download submodules (projects within projects). It's not done automatically.

git clone --recursive https://github.com/d0k3/Decrypt9WIP.git
 
  • Like
Reactions: AlexRT07
It's possible to add a progress number? I mean something like:

Opening /D9Game ...
Processing CIA "PokemonEmerald.cia" (1/4)
Pass #1: CIA decryption...
Pass #2: NCCH decryption...
Processing Content 1 of 1 (16MB)...
NCCH is not encrypted
Code / Crypto: CTR-N-BPEE / Standard
Encrypt ExHdr/ExeFS/RomFS (2kB/16846kB/0MB)
Recalculating hash...
Recalculating TMD hashes...
Success!
Processing CIA "PokemonEmeraude.cia" (2/4)
Pass #1: CIA decryption...
Pass #2: NCCH decryption...
Processing Content 1 of 1 (16MB)...
NCCH is not encrypted
Code / Crypto: CTR-N-BPEF / Standard
Encrypt ExHdr/ExeFS/RomFS (2kB/16846kB/0MB)
Recalculating hash...
Recalculating TMD hashes...
Success!
Processing CIA "PokemonFireRed.cia" (3/4)
Pass #1: CIA decryption...
Pass #2: NCCH decryption...
Processing Content 1 of 1 (16MB)...
NCCH is not encrypted
Code / Crypto: CTR-N-BPRE / Standard
Encrypt ExHdr/ExeFS/RomFS (2kB/16838kB/0MB)
Recalculating hash...
Recalculating TMD hashes...
Success!
Processing CIA "PokemonLeafGreen.cia" (4/4)
Pass #1: CIA decryption...
Pass #2: NCCH decryption...
Processing Content 1 of 1 (16MB)...
NCCH is not encrypted
Code / Crypto: CTR-N-BPGE / Standard
Encrypt ExHdr/ExeFS/RomFS (2kB/16836kB/0MB)
Recalculating hash...
Recalculating TMD hashes...
Success!

4x processed / 0x failed
CIA Encryptor (NCCH): succeeded!

Press B to return, START to reboot.
 
Last edited by Asia81,
  • Like
Reactions: Ryccardo
Just curious, How did you manage the source code to build cia?
Took the .elf from the brahmaloader folder and rebuilt it with makerom. I also removed libkhax from brahma.c since svcBackdoor access is already added with the .rsf.

here's my batch.
Code:
bannertool makebanner -i "r/banner.png" -a "r/audio.wav" -o "r/banner.bnr"
bannertool makesmdh -i "r/icon.png" -s "Mult-Crypto Tool for 3DS" -l "Decrypt9WIP" -p "d0k3" -o "r/icon.icn"
makerom -f cia -o Decrypt9WIP.cia -rsf r/template.rsf -target t -elf Decrypt9WIP.elf -icon r/icon.icn -banner r/banner.bnr
 
Took the .elf from the brahmaloader folder and rebuilt it with makerom. I also removed libkhax from brahma.c since svcBackdoor access is already added with the .rsf.

here's my batch.
Code:
bannertool makebanner -i "r/banner.png" -a "r/audio.wav" -o "r/banner.bnr"
bannertool makesmdh -i "r/icon.png" -s "Mult-Crypto Tool for 3DS" -l "Decrypt9WIP" -p "d0k3" -o "r/icon.icn"
makerom -f cia -o Decrypt9WIP.cia -rsf r/template.rsf -target t -elf Decrypt9WIP.elf -icon r/icon.icn -banner r/banner.bnr

thank you so much. I love you.
 
  • Like
Reactions: zoogie
Hey there. I have a problem to start Decrypt9 on sysnand 9.0.0-22E.
I start the Homebrew Launcher in this sysnand and try to start Decrypt9. I tried it at least 20 times to start it, but it keeps kicking me back to the homebrew launcher.
It first starts up, turns the touch screen red, then black, then red again and then it kicks me back.
I used DevMenu.3ds through the Gateway3DS on version 4.0b to install the homebrew_launcher.cia. I read in the first post that there are problems with cia's and therefore there weren't be a cia version of decrypt9.
Does this mean I can't use the cia version of the homebrew launcher, too?
Maybe there are other problems?

Thx in advance.
 
Last edited by onepiecefreak,
It's possible to add a progress number? I mean something like...
Not possible with the current routines. I'll consider it for later, though.

Hey there. I have a problem to start Decrypt9 on sysnand 9.0.0-22E.
I start the Homebrew Launcher in this sysnand and try to start Decrypt9. I tried it at least 20 times to start it, but it keeps kicking me back to the homebrew launcher.
It first starts up, turns the touch screen red, then black, then red again and then it kicks me back.
I used DevMenu.3ds through the Gateway3DS on version 4.0b to install the homebrew_launcher.cia. I read in the first post that there are problems with cia's and therefore there weren't be a cia version of decrypt9.
Does this mean I can't use the cia version of the homebrew launcher, too?
Maybe there are other problems?

Thx in advance.
Sounds like an incomplete downgrade or a problem with your CFW.

--------------------- MERGED ---------------------------

Everyone, new release, and a big one this time. This is new:
  • Proper support for devkit units
  • Added NAND dump verification via .SHA files
  • Added support for dumping / injecting the sector 0x96
  • Added support for dumping / injecting the NAND header
  • Added ability to dump FIRMs from SysNAND / EmuNAND
  • Added ability to decrypt the N3DS FIRM ARM9 binary
  • Improved checks for FIRM validity
  • Vastly improved checks for NAND header validity
  • Titlekey decryptor / encryptor: allow file name selection
  • Cleaned up & restructured the menu
  • Multiple bug fixes and improvements
As always have fun, and be sure to report any bugs!
 

Site & Scene News

Popular threads in this forum