ROM Hack [Release] 3DS_CTR_Decryptor-VOiD

  • Thread starter Thread starter Relys
  • Start date Start date
  • Views Views 648,849
  • Replies Replies 2,226
  • Likes Likes 30
Will this perhaps make fan translations a possibility?
We now have the means to edit rom data, but I don't think it's possible to run edited roms yet? It seems like we're pretty close to rom editing territory though.
 
We now have the means to edit rom data, but I don't think it's possible to run edited roms yet? It seems like we're pretty close to rom editing territory though.
Decrypt, mod, rebuild as homebrew. Like the scened pokemon VC games.
 
We now have the means to edit rom data, but I don't think it's possible to run edited roms yet? It seems like we're pretty close to rom editing territory though.

AES is symmetric, as in you use the same xor-pad to encrypt it again (assuming the size of the rom is unchanged, should be possible to make a new xor-pad to compensate size changes though).

...I think.
 
AES is symmetric, as in you use the same xor-pad to encrypt it again (assuming the size of the rom is unchanged, should be possible to make a new xor-pad to compensate size changes though).

...I think.
Isn't there some signing magick going on in the header to prevent that sort of thing? But yeah, if rebuilding as homebrew works, that'd be pretty awesome. Out of curiosity, would online still work if you did that?
 
Would this tool be useful in a near future to edit Pokémon saves without Cyber Gadget Save Editor ?

Kaphotics, author of PKHEX wrote this :
Saving changes to a SAV is only available if you can dump your own XORpad and have a 100% decrypted save (ie, no Powersaves).

Si, if I understand 3DS CTR Decryptor allow to get our own XORpad ?
But I did not really understand if we can have a 100% decrypted save.
 
This is what I'm doing. Can someone please point out what I'm doing wrong? I've tried with the Yoshi NES VC USA rom, and with BBB's Pokemon Gold rom.

Run the rom through ctrKeyGen to get the ncchinfo.bin
Put ncchinfo.bin, rom and padgen launcher on the root of SD card
Run the launcher through the Nintendo DS Profile
Everything finished successfully. Moved the xorpads to my computer
Extract the RomFS.bin from the rom using 3DSExplorer, keeping it encrypted
edit the romfs xorpad in a hex editor, making it the same amount of lines as the RomFS.bin from the rom that was used (I cut the lines off the bottom)
use XOR Tool in 3DSExplorer, put RomFS.bin as First File, xorpad as Second File
Save the resulting xor file, renaming it to bin
Finally, did ctrtool -t romfs --romfsdir=outromfs.bin


Gives the following errors:

Error, IVFC segment corrupted
Error, RomFS corrupted
 
After a bit of trouble, I got A Link Between Words extracted, Man this music is so epic. Now to look at all the other kinds of files... if anyone is having trouble getting the romfs to decrypt properly, I couldn't get it working until I used Twili's tool to extract the romfs from the rom. Seems 3dsExplorer has an issue or something. after that, it decrypted properly.
 
  • Like
Reactions: Twili and y03usw6e
After a bit of trouble, I got A Link Between Words extracted, Man this music is so epic. Now to look at all the other kinds of files... if anyone is having trouble getting the romfs to decrypt properly, I couldn't get it working until I used Twili's tool to extract the romfs from the rom. Seems 3dsExplorer has an issue or something. after that, it decrypted properly.

That's probably my problem then.

EDIT: That was my problem. Used Twili's tool to get the romfs, and worked perfectly fine this time.
 
Okay, the instructions say:

"If using Gateway ROP loader, place included Launcher.dat onroot of SD card.
If not using Gateway ROP loader, place Launcher_noGW.dat on root of SD card and rename to Launcher.dat"

Pardon my utter noobishness, but what's the "Gateway ROP loader"?
 
Okay, the instructions say:

"If using Gateway ROP loader, place included Launcher.dat onroot of SD card.
If not using Gateway ROP loader, place Launcher_noGW.dat on root of SD card and rename to Launcher.dat"

Pardon my utter noobishness, but what's the "Gateway ROP loader"?
the gatewayinstaller.nds exploit, there is also a "homebrew" equivalent that does basically the same thing minus the encryption....so the gateway one is encrypted to work with the gateway exploit, the noGW launcher is to be used with the homebrew rop loader

so the gateway one is to use alongside the gateway launcher.dat, so you dont have to switch between the 2 roploaders
 

Site & Scene News

Popular threads in this forum