Hacking How can I decrypt and extract the NAND?

Isle41

Well-Known Member
Member
Joined
Nov 24, 2011
Messages
207
Trophies
0
XP
305
Country
Gambia, The
Just thinking about it this would probably only work with firmwares up to 7.x due to the fact we only have the 7.x key.

We could however have a shot at dumping the nand directly from the 3ds.
 

DarkMatterCore

I like turtles.
Developer
Joined
May 30, 2009
Messages
1,288
Trophies
1
Age
27
Location
Madrid, Spain
Website
github.com
XP
2,514
Country
Spain
You need to get the xorpad for the CTR-NAND FAT16 partition and XOR it with the data block that goes from 0x0B930000 to 0x3AF00000 in the NAND dump (approximately 757 MB). Afterwards, you can extract the content of the decrypted file using WinImage.

Use Decrypt9 to get this xorpad under 9.2 (without needing to downgrade to 4.X).
 

cearp

瓜老外
Developer
Joined
May 26, 2008
Messages
8,660
Trophies
2
XP
7,997
Country
Tuvalu
You need to get the xorpad for the CTR-NAND FAT16 partition and XOR it with the data block that goes from 0x0B930000 to 0x3AF00000 in the NAND dump (approximately 757 MB). Afterwards, you can extract the content of the decrypted file using WinImage.

Use Decrypt9 to get this xorpad under 9.2 (without needing to downgrade to 4.X).

use this python tool i made if you don't want to worry about using a hex editor etc - http://gbatemp.net/threads/release-...ct-the-fat16-partition-from-nand-dumps.380101
and yes, very happy that we now hand nand padgen on 4.5+ :)
 

JoostinOnline

Certified Crash Test Dummy
OP
Member
Joined
Apr 2, 2011
Messages
11,005
Trophies
1
Location
The Twilight Zone
Website
www.hacksden.com
XP
4,323
Country
United States
You need to get the xorpad for the CTR-NAND FAT16 partition and XOR it with the data block that goes from 0x0B930000 to 0x3AF00000 in the NAND dump (approximately 757 MB). Afterwards, you can extract the content of the decrypted file using WinImage.

Use Decrypt9 to get this xorpad under 9.2 (without needing to downgrade to 4.X).
Those are a mighty awful lot of big words.

Anyway, do you have a compiled version of Decrypt9?
use this python tool i made if you don't want to worry about using a hex editor etc - http://gbatemp.net/threads/release-...ct-the-fat16-partition-from-nand-dumps.380101
and yes, very happy that we now hand nand padgen on 4.5+ :)
What am I doing wrong?

Code:
C:\projects\3ds\NAND>3DSFAT16tool.py -n3ds -d NAND.BIN fat16
*******
3DSFAT16tool
*******
 
Dumping... please wait
Traceback (most recent call last):
  File "C:\projects\3ds\NAND\3DSFAT16tool.py", line 57, in <module>
    fat16 = nand[start:end]
MemoryError
 

Vappy

Well-Known Member
Member
Joined
May 23, 2012
Messages
1,508
Trophies
2
XP
2,390
Country

You may also like...

General chit-chat
Help Users
    Psionic Roshambo @ Psionic Roshambo: Lol