Godmode9: Dump of Aging Card NTR is bad?
GameHeader and Crappy Tiny Reader seem to think it isn't decrypted (or maybe bad in some other way).
Is this an oddity with the cart or a problem with GodMode9? The version used was v1.2.1
The ROM details can be found in the No-Intro dat.
mariomadproductions
All 34 comments
Remove the ROM link please. That's copyright content and has no place here.
fox8091
on 23 Jul 2017
What cart is this about? A flashcart? If so, flashcarts are special and not a real priority in the GM9 cart dumper. If it is a flashcart, and if you know it works elsewhere, I may still be able to look into it.
d0k3
on 24 Jul 2017
It is a testing cart made by Nintendo. It checks if the DS is functioning properly.
mariomadproductions
on 24 Jul 2017
@d0k3 NTR Aging is a DS cart that does system testing and likely burns the final firmware, similar to CTRAging.
fox8091
on 25 Jul 2017
As far as I know, there is no good dump of NTRAGING available. @mariomadproductions - can you send me a pm (GBAtemp maybe) or contact me on IRC (freenode, Cakey)?
d0k3
on 25 Jul 2017
Its a recent dump. I've PM'd you.
mariomadproductions
on 25 Jul 2017
Okay, I've checked it, it's a good dump, and the secure area is not decrypted for some reason. The latter puzzles me. We may keep that as is, but I'll first have to look into this some more.
d0k3
on 25 Jul 2017
Alright, here's some more info. There are titles with known bad secure areas. Dragon Quest 5 is a known commercial one, and NTR AGING also has a bad secure area (the one other known good dump has, too). If the secure area is bad, well... it may not be possible to be decrypted either.
As the dump is still good, I'm somewhat tempted to handle this as a non-issue. @mariomadproductions - does the cart itself still work?
d0k3
on 26 Jul 2017
The old DS homebrew "NDS Backup Tool Wi-Fi v0.31f" produces a decrypted dump of Aging Card NTR. You may want to look into that. I can send you the decrypted dump if you want.
The cart and both dumps work. I didn't make the dump and I don't own the cart, btw.
mariomadproductions
on 26 Jul 2017
Okay, that tool is closed source, we can't learn anything from it. I have a suspicion it just detects the secure are as invalid and inserts a placeholder (maybe?).
d0k3
on 27 Jul 2017
Perhaps we can test by dumping another known problem cart and comparing it?
fox8091
on 28 Jul 2017
So... is anyone in possesion of Dragon Quest 5?
d0k3
on 28 Jul 2017
Okay, @mariomadproductions - I think I now have a clue what happend. That secure area may have been decrypted from the start, we tried to decrypt again, and the end result is what you got.
Try this GM9 build:
https://transfer.sh/13Z6GD/GodMode9-20170729-121300.zip
Does it dump that cart the same as "NDS Backup Tool Wi-Fi v0.31f"?
d0k3
on 29 Jul 2017
I've asked the owner of the cart to dump it again with that.
mariomadproductions
on 29 Jul 2017
@mariomadproductions - got any news for me?
d0k3
on 2 Aug 2017
The owner is busy for about a week, sorry.
mariomadproductions
on 2 Aug 2017
He said
GodMode9-20170729-121300 crashes on my system, giving me this ARM9 dump: https://transfer.sh/QUUYU/crash_dump_00000000.dmp
mariomadproductions
on 5 Aug 2017
Can you tell me what entrypoint he uses?
EDIT: Just use this one, this should work
https://transfer.sh/10Fj9n/GodMode9-20170805-114242.zip
d0k3
on 5 Aug 2017
With that last link he still got a crc32 of 3703322e.
mariomadproductions
on 5 Aug 2017
Okay, we'll try this differently then.
Can you try this build:
https://transfer.sh/LJ21L/GodMode9-20170805-160149.zip
... then send me a dump (it will be different now) via pm.
d0k3
on 5 Aug 2017
got a CRC32 of D912301A now. PM sent
Localhorst86
on 6 Aug 2017
If it is at all relevant, this is what the 3DS shows me when inserting the cartridge. The title seems to be blank. My entrypoint is B9S 1.2
Localhorst86
on 6 Aug 2017
@Localhorst86 - you're the owner of the cart? And the same cart has a different CRC when dumped via that other tool, right?
Did you try running the new dump via a flashcart, and does it work?
d0k3
on 8 Aug 2017
Yes, I am the owner of the cartridge. I have dumped it using various tools and versions, both wooddumper and Godmode9 gave me the same CRC32 of 3703322e, whereas "NDS Backup Tool Wi-Fi v0.31f" results in a different CRC.
It never occured to me to run the dumped ROM on a flashcard, though. I am going to give this a try later tonight and report back.
Localhorst86
on 8 Aug 2017
Actually, none of the dumps work on my R4i-sdhc flashcard. Neither the one using NDS Backup Tool Wi-Fi v0.31f (b7f1a15e), nor the ones using Godmode9 1.2.9 (3703322e) or the last one from GodMode9-20170805-160149 (d912301a). They fail to load with an error code 5 - not sure what that means, though.
Localhorst86
on 8 Aug 2017
b7f1a15e worked on my Acekard 2i and has worked on other peoples flash carts. I'll test 3703322e, but first could you (Localhort76) send me d912301a?
mariomadproductions
on 8 Aug 2017
3703322e and d912301a work too.
mariomadproductions
on 9 Aug 2017
I've had some unexpected help from resident genius @Normmatt. This one should generate a correct result:
https://transfer.sh/i4G9B/GodMode9-20170809-235158.zip
Secure area will appear as encrypted, but only cause it isn't actually used. Secure area CRC should match. You can use Crappy Tiny Reader to check. Could you also check with one regular gamecart, to see if my fix broke anything?
d0k3
on 10 Aug 2017
GodMode9-20170809-235158 gave me a CRC of d912301a again for the Aging Cartridge. (same as GodMode9-20170805-160149)
I also dumped a retail cartridge of "Guitar Hero on Tour Decades" (http://datomatic.no-intro.org/?page=show_record&s=28&n=2897) and for this i got the proper CRC of c9dd37c5
Localhorst86
on 10 Aug 2017
d912301a is the correct CRC for that cart. Both earlier options (Woodumper and NTR Backup Tool Wifi) were wrong.
See here:
http://problemkaputt.de/gbatek.htm#dscartridgesecurearea
"1) Set NDS9 ROM offset to 4000h, and leave the first 800h bytes of the Secure Area 00h-filled, which can be (and will be) safely destroyed during loading; due to the missing "encryObj" ID; that method is used by Nintendo's devkit."
Meaning: What you got there is the first ever good dump of this cart (check in Crappy Tiny Reader for the Secure Area CRC if you want). Can you, maybe, also update the entry on NoIntro? Also, thanks a lot, both of you.
d0k3
on 10 Aug 2017
Of course. Thank you for adding support for it.
mariomadproductions
on 10 Aug 2017
Sorry for posting about this again, but does the current GodMode9 dump the secure area of this cart, or does it blank it out. If it does the latter, why does it do that?
mariomadproductions
on 19 Jun 2018
GM9 dumps what it can and doesn't blank the Secure Area out. It just dumps what it can find. As you see, the Secure Area is supposed to be all zeroes, at least the first 0x800 byte even have to be.
d0k3
on 19 Jun 2018
I see, thanks for the explanation.
mariomadproductions
on 19 Jun 2018
Related issues
Jisagi
路
6Comments
NWPlayer123
路
7Comments
zoogie
路
4Comments
Nemris
路
9Comments
HIDE810
路
11Comments
Most helpful comment
d912301a is the correct CRC for that cart. Both earlier options (Woodumper and NTR Backup Tool Wifi) were wrong.
See here:
http://problemkaputt.de/gbatek.htm#dscartridgesecurearea
"1) Set NDS9 ROM offset to 4000h, and leave the first 800h bytes of the Secure Area 00h-filled, which can be (and will be) safely destroyed during loading; due to the missing "encryObj" ID; that method is used by Nintendo's devkit."
Meaning: What you got there is the first ever good dump of this cart (check in Crappy Tiny Reader for the Secure Area CRC if you want). Can you, maybe, also update the entry on NoIntro? Also, thanks a lot, both of you.