1. SirNapkin1334

    SirNapkin1334 Renound Aritst
    Member

    Joined:
    Aug 20, 2017
    Messages:
    1,666
    Country:
    United States
    @PabloMK7 how can I generate a FAT16 XORPAD w/ D9WIP? I can't find the option under XORPAD GENERATER OPTIONS.
     
  2. PabloMK7

    OP PabloMK7 Red Yoshi! ^ω^
    Developer

    Joined:
    Feb 21, 2014
    Messages:
    2,295
    Country:
    Spain
    Try using godmode9. Select the bin file and see what options it shows.
     
  3. SirNapkin1334

    SirNapkin1334 Renound Aritst
    Member

    Joined:
    Aug 20, 2017
    Messages:
    1,666
    Country:
    United States
    Which one?
     
  4. PabloMK7

    OP PabloMK7 Red Yoshi! ^ω^
    Developer

    Joined:
    Feb 21, 2014
    Messages:
    2,295
    Country:
    Spain
    NAND.bin
     
  5. SirNapkin1334

    SirNapkin1334 Renound Aritst
    Member

    Joined:
    Aug 20, 2017
    Messages:
    1,666
    Country:
    United States
    Nothing with XORPads. I'll look into using the OG D9.
     
  6. SirNapkin1334

    SirNapkin1334 Renound Aritst
    Member

    Joined:
    Aug 20, 2017
    Messages:
    1,666
    Country:
    United States
    @PabloMK7 okay, I finally figured out how to dump the XORPAD. It's dumping as we speak. I'll tell you if it ends up working.
     
    PabloMK7 likes this.
  7. Razor83

    Razor83 GBAtemp Fan
    Member

    Joined:
    Dec 23, 2009
    Messages:
    363
    Country:
    @PabloMK7 I seem to be having trouble using this tool. I have managed to decrypt my NAND.bin and now have a NAND.fat16.bin file, which after searching with a hex editor does appear to contain traces of CTRaging. However when I try to use the fck.exe to extract the files I get the following error:-
    "NAND size is uneven, should be a multiple of 0x2000"
    Is there a way to bypass this error?

    ...Or might there be new/better methods to find traces of CTRaging nowadays? Perhaps a script for Godmode9?
     
  8. piratesephiroth

    piratesephiroth I wish I could read
    Member

    Joined:
    Sep 5, 2013
    Messages:
    3,402
    Country:
    Brazil
    well, perhaps you could just add bytes to the end of the dump just to make its size a multiple of 0x2000 (8192)
     
  9. SirNapkin1334

    SirNapkin1334 Renound Aritst
    Member

    Joined:
    Aug 20, 2017
    Messages:
    1,666
    Country:
    United States
    Terrible idea. Then the sig would Ben invalid. And no, this tool is very outdated (you can tell - it uses XORpads), but I don’t really know of a way to find it. I guess your best bet is to decrypt and extract the CTRNAND and search with a hex editor.
     
  10. PabloMK7

    OP PabloMK7 Red Yoshi! ^ω^
    Developer

    Joined:
    Feb 21, 2014
    Messages:
    2,295
    Country:
    Spain
    If you searched manually then that's enough.
     
  11. Razor83

    Razor83 GBAtemp Fan
    Member

    Joined:
    Dec 23, 2009
    Messages:
    363
    Country:
    I searched manually with a hex editor and found two instances of TitleID 0000980F00000400, but I dont know how to extract them.
    Is it possible to modify the fck.exe so it skips decrypting/verifying the NAND.bin, and simply searches and extracts any relevant files?
    Or perhaps searching for leftovers of CTRaging is something that could be added to Godmode9 @d0k3?
     
    Last edited: May 21, 2018
  12. PabloMK7

    OP PabloMK7 Red Yoshi! ^ω^
    Developer

    Joined:
    Feb 21, 2014
    Messages:
    2,295
    Country:
    Spain
    That program is closed source, no way to edit it. Send screenshots of where you found those matches showing at least 5 lines upwards and downwards
     
  13. zoogie

    zoogie playing around in the dsiware
    Developer

    Joined:
    Nov 30, 2014
    Messages:
    7,986
    Country:
    Micronesia, Federated States of
  14. Razor83

    Razor83 GBAtemp Fan
    Member

    Joined:
    Dec 23, 2009
    Messages:
    363
    Country:
    But as far as I know anyone can write scripts for Godmode9? Also the source code is available on the github:-
    https://github.com/d0k3/GodMode9/releases
    Heres a picture of one of the instances:-
    [​IMG]
    However I have another two NANDs to check, so it wouler be better if I could recover the ncch.

    Thanks but unfortunately I just get the error:-
    "terminate called after throwing an instance of 'std::bad_alloc'
    what(): std::bad_alloc

    This application has requested the Runtime to terminate it in an unusual way.
    Please contact the application's support team for more information."
     
  15. PabloMK7

    OP PabloMK7 Red Yoshi! ^ω^
    Developer

    Joined:
    Feb 21, 2014
    Messages:
    2,295
    Country:
    Spain
    You have only shown the lines below, "show 5 lines upwards and downwards"
     
  16. Razor83

    Razor83 GBAtemp Fan
    Member

    Joined:
    Dec 23, 2009
    Messages:
    363
    Country:
    Apologies, here is a new picture:-
    [​IMG]
     
  17. PabloMK7

    OP PabloMK7 Red Yoshi! ^ω^
    Developer

    Joined:
    Feb 21, 2014
    Messages:
    2,295
    Country:
    Spain
    That's definitely not ctraging
     
  18. Razor83

    Razor83 GBAtemp Fan
    Member

    Joined:
    Dec 23, 2009
    Messages:
    363
    Country:
    Ok, so since searching for the string using a hex editor isn't 100% reliable, whats the best way for me to search and extract from my other NAND dumps?
     
  19. PabloMK7

    OP PabloMK7 Red Yoshi! ^ω^
    Developer

    Joined:
    Feb 21, 2014
    Messages:
    2,295
    Country:
    Spain
    Wait for @zoogie to reply what's the problem with the program.
     
  20. zoogie

    zoogie playing around in the dsiware
    Developer

    Joined:
    Nov 30, 2014
    Messages:
    7,986
    Country:
    Micronesia, Federated States of
    The program works for me. It's supposed to have the input file dropped on top of the program exe.
     
Draft saved Draft deleted
Loading...

Hide similar threads Similar threads with keywords - [Request], CTRAging, research