ROM Hack [Release] 3DS_CTR_Decryptor-VOiD

  • Thread starter Thread starter Relys
  • Start date Start date
  • Views Views 649,172
  • Replies Replies 2,226
  • Likes Likes 30
  • Like
Reactions: Ryanrocks462
I was Re-encrypted from Secure2 to ZerosCrypto using mergerom
7.x game like Pokemon Art Academy is working at the MT-CARD.
 
Okay, so i used the SD Decryptor to decrypt the 1.3 update data for Pokemon X, and I was able to find out that there are a lot of added directories. Starting from a/2/7/1 - a/3/2/1, there are extra garcs. I'm not entirely sure if there are more .cro files, but here's the whole RomFS content list if anyone wants it: http://pastebin.com/vdtRRrEu

they're just 100% copied from existing garcs, they screwed up
 
Out of curiosity, how beneficial would a 3DS rom editor be for you folks? lol
Heres what i got after ~4 - 5 days of work:

2zgGw8f.png


I just wanna make the process faster and it'd also probably be good for noobs, but yea..
(for those who care about the details, so far is can decrypt the romfs and parse GARCs and and export them.. i've only been testing it on pokemon games, but adding support for other stuff wont be hard.. also im writing it in 2 languages.. C# for the GUI and im compiling C into DLLs that deal with the grunt work)
Basically im designing this to be used with Rely's decryptor and Gericom's EFE, so it looks for the xorpads with a specific format and it wont have built in editors.. its just a way to edit and rebuild roms... and maybe CIAs some day.


Lest us all know when you release this tool :)

Nice work.
 
"Once you have the xorpads, you can use them with padxorer to decrypt your files(it should be obvious by the filenames which xorpads to use on what files)."

So once I have my xorpads with my SDinfo.bin , hopeful to get them later .

what commands lines can with padxorer.exe are xor.exe we use to decrypt our files ?

?file.xor title.db -o saveme.out

somethink like this...

I only see basic options to use.

kQDJ790.png


With the SDinfo_gen.bat open in text - SDinfo_gen.py "C:\Nintendo 3DS\00000000000000000000000000000000\00000000000000000000000000000000"

Replace In .bat file the Nintendo 3DS , 00's with you're two folder long names IE: Nintendo 3DS\Folder Name \ Folder Name

Also replace you're letter drive of you're SD card where C:\ is like you're SD reader is F:\

Attached .bat below with file .
 

Attachments

OK, got my files with thanks to someone

So I try xor.exe
Code:
c:\xor dbs.title.db.xorpad title.db
, The xored_dbs.title.db.xorpad was junk either decrypted are a mix of two.. but was not decrypted..

Maybe I'm doing some think wrong ? - cheers guy's and girl's .

zEy415O.png
 
OK, got my files with thanks to someone

So I try xor.exe
Code:
c:\xor dbs.title.db.xorpad title.db
, The xored_dbs.title.db.xorpad was junk either decrypted are a mix of two.. but was not decrypted..

Maybe I'm doing some think wrong ? - cheers guy's and girl's .

You find the 2 matching files and use padxorer
Code:
padxorer [originalfilename].app [xorpadname].app.xorpad

Which results in a decrypted .out file
 
  • Like
Reactions: drwhojan
You find the 2 matching files and use padxorer
Code:
padxorer [originalfilenamehere].app [xorpadname].app.xorpad[/COLOR][/COLOR]
[COLOR=#000000][COLOR=#000000]
Which results in a decrypted .out file


Thanks I'll give it a go, padxorer.exe is just a renamed version of xor.exe , Well so I know of.

I don't think they is an original .app for the Title file are is they ?

Maybe that could be the issue here
 
Thanks I'll give it a go, padxorer.exe is just a renamed version of xor.exe , Well so I know of.

I don't think they is an original .app for the Title file are is they ?

Maybe that could be the issue here
It won't be a .app but you'll see it inside your Nintendo 3DS folder in dbs folder I think?
Also ignore the colour codes of that command, it was me screwing up :D
 
It won't be a .app but you'll see it inside your Nintendo 3DS folder in dbs folder I think?
Also ignore the colour codes of that command, it was me screwing up :D


OK xd :)

Ok try somethink else like this maybe
Code:
xor [00000000].app [title.00040000.000d7e00.content.00000000.app.xorpad].app.xorpad

Not the title.db for now , I do keep a backup copy on my HD ;)

EDIT:
Code:
xor 00000000.app title.00040000.000d7e00.content.00000000.app.xorpad

Worked , but xored_00000000.app still look like junk in hex editor , decrypted files should have few 00's in hex and readable .
 
OK xd :)

Ok try somethink else like this maybe
Code:
xor [00000000].app [title.00040000.000d7e00.content.00000000.app.xorpad].app.xorpad

Not the title.db for now , I do keep a backup copy on my HD ;)

EDIT:
Code:
xor 00000000.app title.00040000.000d7e00.content.00000000.app.xorpad

Worked , but xored_00000000.app still look like junk in hex editor , decrypted files should have few 00's in hex and readable .
That's the .out file you checked right?
 
That's the .out file you checked right?


Yes although I'm trying other version of padxorer.exe just downloaded - now it's asking for cygwin1.dll , well try and get all files needed

Just hex's data look scrambled and not decrypted

EDIT: It OK - padxorer 00000000.app title.00040000.000d7e00.content.00000000.app.xorpad

Same output .

I'll try the .tmd are was that 00000001.app , it should have a readable header if correct decrypted .
 
Yes although I'm trying other version of padxorer.exe just downloaded - now it's asking for cygwin1.dll , well try and get all files needed

Just hex's data look scrambled and not decrypted

EDIT: It OK - padxorer 00000000.app title.00040000.000d7e00.content.00000000.app.xorpad

Same output .

I'll try the .tmd are was that 00000001.app , it should have a readable header if correct decrypted .
Strange, see if any other files are readable
 
  • Like
Reactions: drwhojan
ctrtool crashed on extract romfs of Monster hunter 4G.

here is a quick fix on romfs.c for this bug.

original code is a recursion call with only fileoffset upate. always carshed on folder contains lots of file.
if depth is untouched, recursion must be prevent.
Quick fix on Verify error romfs of Monster hunter 4G.
-y Verify hashes and signatures checks passed.
There is a need to broaden the range of seek.
 

Attachments

hi, how can we decrypt the ORAS trial? i know some people have done it... but i'm still confused. if there's a guide someone, please show me.

once we have the XORd files, what now?
i read something about mex.py...? and when do i need to use the 7.x keys?

any help is appreciated, thanks :)
 
hi, how can we decrypt the ORAS trial? i know some people have done it... but i'm still confused. if there's a guide someone, please show me.

once we have the XORd files, what now?
i read something about mex.py...? and when do i need to use the 7.x keys?

any help is appreciated, thanks :)

you need key 7.x on decryptor (on 3ds side), so you need v4 of 3ds ctr decryptor. just edit key variable on main.c or just create file containing key 7.x
 

Site & Scene News

Popular threads in this forum