Hacking seedminer (single system DSiWare injection)

[zoogie]

Okay. Who should I ask to get a guaranteed answer?
Maybe if I could find a 3dbrew page on ctrcert.bin I could figure it out myself.

CTcert is nothing but a glorified deviceID + signature of the deviceID and issuer.
I don't see what makes that illegal, but they ban localFriendCodeSeed_B and it's a kinda similar thing (LFCS+signature).
GBAtemp always leans heavily on the side of "not allowed" because they get so much attention about these things from lawyers etc.

 

[Kroowze]

Hey, dumb question but do I patch the movable_part1.sed on the same 3DS that I dumped it?

 

[Hunter]

going to have a nice msed for you soon hopefully..... almost 3 hours and over 700 offset currently

 

[danmod1]

Please tell me you didn't type in the command just like that

@d0k3 's quote in my sig becomes more true every day

I should find a friend that knows what they're doing to help me with this and stop embarrassing myself... lol I entered it the way I was supposed to and am getting an error again. I think it has something to do with Pycryptodomex

 

[MrJason005]

Hey, dumb question but do I patch the movable_part1.sed on the same 3DS that I dumped it?

put seedminer_launcher.py inside the nintendo 3ds folder along with movable_part1.sed, and run the python script with argument "id0" and it will append the sha hash to your movable_part1.sed

 

[zoogie]

I should find a friend that knows what they're doing to help me with this and stop embarrassing myself... lol I entered it the way I was supposed to and am getting an error again. I think it has something to do with Pycryptodomex

No worries, we all have to start somewhere.

I remember the first day setting up my r4 years ago, I was confused by what "root" meant, haha.

 

[Hunter]

Hey, dumb question but do I patch the movable_part1.sed on the same 3DS that I dumped it?

do you mean that it doesnt have it's ID0 ?

 

[SirNapkin1334]

CTcert is nothing but a glorified deviceID + signature of the deviceID and issuer.
I don't see what makes that illegal, but they ban localFriendCodeSeed_B and it's a kinda similar thing (LFCS+signature).
GBAtemp always leans heavily on the side of "not allowed" because they get so much attention about these things from lawyers etc.

Well, the LFCS_B does allow unbanning, which may be illegal.

 

[Kroowze]

do you mean that it doesnt have it's ID0 ?

Actually, I did but I mined it for 2 hours using the wrong 3DS

 

[Hunter]

Actually, I did but I mined it for 2 hours using the wrong 3DS

just repeat the original process again, to get the correct information, it doesnt take too long overall

 

[danmod1]

https://i.gyazo.com/b2bced6043cb1538388aa3fc6e80dc88.png

What am I doing wrong here? Do I need to install cryptodomex or something? (I have no idea how to do that)

 

[Hunter]

https://i.gyazo.com/b2bced6043cb1538388aa3fc6e80dc88.png

What am I doing wrong here? Do I need to install cryptodomex or something? (I have no idea how to do that)

the movable.sed is the wrong one for the bin

 

[Kroowze]

It would be really nice if someone could mine it for me since I don't really have the time to mine

 

[Hunter]

It would be really nice if someone could mine it for me since I don't really have the time to mine

I am currently doing one, and have another one to do after that, it is almost my bedtime, and I will have to do it tomorrow if someone else does not pick it up

 

[Kroowze]

I am currently doing one, and have another one to do after that, it is almost my bedtime, and I will have to do it tomorrow if someone else does not pick it up

Alright, thanks anyway

 

[Eddy119]

Hello guys,
I want the "correct" movable.sed with the correct high KeyY (is that what it's called?) to decrypt my Pokemon saves from a broken 3DS from a year ago. I have a movable.sed and id0 from the broken 3DS backed up but I think the movable.sed is incorrect because when I try to decrypt my Pokemon save, it outputs garbage. Is there any efficient way to find the correct high KeyY? I'm not sure what I'm talking about, I completely skipped sleeping during the night...

 

[teseting]

Hello guys,
I want the "correct" movable.sed with the correct high KeyY (is that what it's called?) to decrypt my Pokemon saves from a broken 3DS from a year ago. I have a movable.sed and id0 from the broken 3DS backed up but I think the movable.sed is incorrect because when I try to decrypt my Pokemon save, it outputs garbage. Is there any efficient way to find the correct high KeyY? I'm not sure what I'm talking about, I completely skipped sleeping during the night...

if seedminer says hit, then you have the correct keyY. ID0 is the hash of the keyY, so seedminer bruteforces every combo to find the keyY that matches that hash and only the correct one should match. if you dumped the movable.sed already, then you don't need to use seedminer

what are you using to decrypt the save? you should be using https://github.com/wwylele/3ds-save-tool

 

[Eddy119]

if seedminer says hit, then you have the correct keyY. ID0 is the hash of the keyY, so seedminer bruteforces every combo to find the keyY that matches that hash and only the correct one should match. if you dumped the movable.sed already, then you don't need to use seedminer

what are you using to decrypt the save? you should be using

Um I suspect the movable.sed/save file was created after a system transfer/format when I did the tedious DSiWare Downgrade over a year ago... so the savegame was encrypted under a different second half of the KeyY than the one I have on my backed up movable.sed... 3dbrew says

The movable.sed keyY high u64 is updated on the source 3DS during a System Transfer, and when doing a system format with System Settings.

 

[zoogie]

Um I suspect the movable.sed/save file was created after a system transfer/format when I did the tedious DSiWare Downgrade over a year ago... so the savegame was encrypted under a different second half of the KeyY than the one I have on my backed up movable.sed... 3dbrew says

https://zoogie.github.io/web/34⅕c3/#/22

Look in the middle. You may be able to figure out what the correct movable sed is by subtracting values from that .sed you have.

msed2 is the 3rd int on the overall keyy. Make sure to account for little endian.

00 00 00 00 00 00 00 00 XX 00 00 00 00 00 00 00
The byte you subtract is XX

 

[Hunter]

https://zoogie.github.io/web/34⅕c3/#/22

Look in the middle. You may be able to figure out what the correct movable sed is by subtracting values from that .sed you have.

msed2 is the 3rd int on the overall keyy. Make sure to account for little endian.

00 00 00 00 00 00 00 00 XX 00 00 00 00 00 00 00
The byte you subtract is XX

have you had a bruteforce over 1100 offset? this one is tiring, i started up my laptop to do the other one I promised before bed