ROM Hack [Release] 3DS_CTR_Decryptor-VOiD

  • Thread starter Thread starter Relys
  • Start date Start date
  • Views Views 648,847
  • Replies Replies 2,226
  • Likes Likes 30
Is there any way to make the cias made with cdnto3ds work on sysnand (without gateway)?

if the cia is made with makecdncia, from files straight from cdn, yes it will work, but if you changed anything in the files at all, if you decrypt it etc, no.
 
I used this tutorial https://gbatemp.net/threads/how-to-dump-and-backup-eshop-games-and-dlc.375586/ to dump the ambassador games, and I want to install them on my sysnand (because gba games don't work on gw mode), but I still get the "The software title could not be launched" error when I try to launch it in the normal mode.

sure, that is because you decrypted them, and rebuilt them, correct? that is what it looks like in the guide.
you cannot make a cia straight from cdn with makecdncia, with the content you are trying to use.
so it doesn't seem (at least yet) that you can make a 100% legit looking cia to install that will work withOUT GW mode. for some things it is possible, but only if everything you need is on CDN, and for most/all non-system things, it cannot be done
 
  • Like
Reactions: VerseHell
Any ideas why I keep getting this error when I try to build a cia with the CDNto3DS tool?

[NCCH ERROR] Failed to load ncch aes key
[CIA WARNING] CXI AES Key could not be loaded
Meta Region, SaveDataSize, Remaster Version cannot be obtained

Command used by the tool and the files themselves should be okay so I have no idea what's wrong...
makerom -f cia -rsf rom.rsf -o TitleID.cia -ckeyid 0 -major 0 -minor 0 -micro 0 -DSaveSize=512 -i TitleID/00000000.dec:0x0000

DevMenu says the cia is invalid too. (A bit shitty to test too since the cia is ~2.7gb...)
 
Any plans on making a decypter that isn't in the form of a launcher.dat file? I have a feeling the new Gateway update won't use a launcher file. There's some useful homebrew in launcher form that may not work on the new Gateway update. :(
 
Any plans on making a decypter that isn't in the form of a launcher.dat file? I have a feeling the new Gateway update won't use a launcher file. There's some useful homebrew in launcher form that may not work on the new Gateway update. :(

In what form then?
 
  • Like
Reactions: cearp
CIA/3DS I would assume. I'm aware the launcher.dat method was there so one could use it without a $80 flashcart. (only a DS mode flashcart is needed then)

However the new exploit Gateway found probably won't use a launcher.dat file at all. So there's a LOT of new users that could benefit from this if the decrypter is recompiled in a CIA/3DS container. Aka, users on consoles above 4.5 firmware. 4.5 users can probably just keep using the launcher.

I suppose one could wait till some one reverse engineers the new exploit and then decrypting things would be completely free as no external hardware is needed (and perhaps more stable since the MSETT exploit has it's known issues). But lets face it...that's going to take awhile. A long long while.:P
 
CIA/3DS I would assume. I'm aware the launcher.dat method was there so one could use it without a $80 flashcart. (only a DS mode flashcart is needed then)

However the new exploit Gateway found probably won't use a launcher.dat file at all. So there's a LOT of new users that could benefit from this if the decrypter is recompiled in a CIA/3DS container.

I suppose one could wait till some one reverse engineers the new exploit and then decrypting things would be completely free as no external hardware is needed (and perhaps more stable since the MSETT exploit has it's known issues). But lets face it...that's going to take awhile. A long long while.:P

Why do you think it won't use a launcher.dat?

Also this is made in this form mostly because you can gain direct arm9 exec this way, meaning direct access to the aes engine thing. I'm not if this is possible from arm11, don't recall a service for decrypting things.
Maybe the fs service will do but again not sure.
And afaik exheader sig check is still applied to .3ds on gw (though if so then how'd devmen run).
 
The nature of the Arm9 exploit they are using might have also changed. They might still use a launcher.dat file, but it's probably not going to be backwards compatible with Launcher.dat files designed to be started from the old MSETT exploit. I assumed CIA files at the least would have arm9 access. But I guess I was wrong? Either way I hope people will try and update this to work with the new exploit when it's released.
 
The nature of the Arm9 exploit they are using might have also changed. They might still use a launcher.dat file, but it's probably not going to be backwards compatible with Launcher.dat files designed to be started from the old MSETT exploit. I assumed CIA files at the least would have arm9 access. But I guess I was wrong? Either way I hope people will try and update this to work with the new exploit when it's released.

No normal program have arm9 access.
But I think services and kernel do.
 
Hey Relys, do you know if there's a way to decrypt retail CIA's? I've got this download play CIA that I'd love to open up and take some music from.
Got bored. Generates an encTitleKey.bin that works with the TitleKey decryptor, use the titlekey tools to dump the key, ctrtool to extract the contents and then the command "aescbc content content.out key 00000000000000000000000000000000" (that's 32 zeroes) (minus quotes) replacing "content" with the extracted and encrypted content and "key" with the key printed out by printKeys.py.
 

Attachments

  • Like
Reactions: Huntereb
Got bored. Generates an encTitleKey.bin that works with the TitleKey decryptor, use the titlekey tools to dump the key, ctrtool to extract the contents and then the command "aescbc content content.out key 00000000000000000000000000000000" (that's 32 zeroes) (minus quotes) replacing "content" with the extracted and encrypted content and "key" with the key printed out by printKeys.py.


Exactly what I needed, thanks!
 

Site & Scene News

Popular threads in this forum