比较文本

查找两个文本文件之间的差异

Real-time diff

Unified diff

Collapse lines

Highlight change

Syntax highlighting

工具

Diffchecker Desktop The most secure way to run Diffchecker. Get the Diffchecker Desktop app: your diffs never leave your computer!Get Desktop

Untitled diff

Created 9 years agoDiff never expires

Lines
Total
Removed

Words
Total
Removed

To continue using this feature, upgrade to Diffchecker Pro View Pricing

170 lines

Lines
Total
Added

Words
Total
Added

To continue using this feature, upgrade to Diffchecker Pro View Pricing

535 lines

#This script is old and shitty

#!/usr/bin/env python3

#script is modified from https://github.com/Relys/3DS_Multi_Decryptor/blob/master/to3DS/CDNto3DS/CDNto3DS.py

#requires PyCrypto to be installed ("python3 -m ensurepip" then "pip3 install PyCrypto")

#requires makerom (https://github.com/profi200/Project_CTR/releases)

#this is a Python 3 script

import os

import platform

import struct

import errno

import sys

import urllib2

import shlex

import ssl

import urllib.request, urllib.error, urllib.parse

from xml.dom import minidom

from subprocess import DEVNULL, STDOUT, call, check_call

from struct import unpack, pack

from subprocess import call

from binascii import hexlify

from binascii import hexlify, unhexlify

from hashlib import sha256

from Crypto.Cipher import AES

##########From http://stackoverflow.com/questions/377017/test-if-executable-exists-in-python/377028#377028

def which(program):

import os

def is_exe(fpath):

return os.path.isfile(fpath) and os.access(fpath, os.X_OK)

##########From https://stackoverflow.com/questions/5783517/downloading-progress-bar-urllib2-python

fpath, fname = os.path.split(program)

if fpath:

if is_exe(program):

return program

else:

for path in os.environ["PATH"].split(os.pathsep):

path = path.strip('"')

exe_file = os.path.join(path, program)

if is_exe(exe_file):

return exe_file

return None

def mkdir_p(path):

try:

os.makedirs(path)

except OSError as exc: # Python >2.5

if exc.errno == errno.EEXIST and os.path.isdir(path):

pass

else: raise

##########Based on https://stackoverflow.com/questions/5783517/downloading-progress-bar-urllib2-python

def chunk_report(bytes_so_far, chunk_size, total_size):

percent = float(bytes_so_far) / total_size

percent = round(percent*100, 2)

sys.stdout.write("Downloaded %d of %d bytes (%0.2f%%)\r" % (bytes_so_far, total_size, percent))

sys.stdout.write('\rDownloaded and decrypted %d of %d bytes (%0.2f%%)' % (bytes_so_far, total_size, percent))

sys.stdout.flush()

if bytes_so_far >= total_size:

sys.stdout.write('\n')

print('\n')

def chunk_read(response, outfname, chunk_size=2*1024*1024, report_hook=None):

# download in 0x200000 byte chunks, decrypt the chunk with IVs described below, then write the decrypted chunk to disk (half the file size of decrypting separately!)

def chunk_read(response, outfname, intitlekey, first_iv, chunk_size=0x200000, report_hook=None):

fh = open(outfname,'wb')

total_size = response.info().getheader('Content-Length').strip()

total_size = int(response.getheader('Content-Length'))

total_size = int(total_size)

bytes_so_far = 0

data = []

first_chunk_read = 0

while 1:

if report_hook:

report_hook(bytes_so_far, chunk_size, total_size)

chunk = response.read(chunk_size)

bytes_so_far += len(chunk)

if not chunk:

break

fh.write(chunk)

# IV of first chunk should be the Content ID + 28 0s like with the entire file, but each subsequent chunk should be the last 16 bytes of the previous still ciphered chunk

if first_chunk_read == 0:

decryptor = AES.new(intitlekey, AES.MODE_CBC, unhexlify(first_iv))

first_chunk_read = 1

else:

decryptor = AES.new(intitlekey, AES.MODE_CBC, prev_chunk[(0x200000 - 16):0x200000])

dec_chunk = decryptor.decrypt(chunk)

prev_chunk = chunk

fh.write(dec_chunk)

fh.close()

##########

if len(sys.argv) < 4:

def SystemUsage():

print 'Usage: CDNto3DS.py TitleID TitleKey cardType'

print('Usage: python3 PlaiCDN.py <TitleID TitleKey [-redown -redec -no3ds -nocia] or [-check]> or [-deckey] or [-checkbin]')

print "cardType: valid options are 'card1' and 'card2'"

print('-deckey : print keys from decTitleKeys.bin')

print('-check : checks if title id matches key')

print('-checkbin : checks titlekeys from decTitleKeys.bin')

print('-redown : redownload content')

print('-redec : re-attempt content decryption')

print('-no3ds : don\'t build 3DS file')

print('-nocia : don\'t build CIA file')

raise SystemExit(0)

def getTitleInfo(titleId):

if ((hexlify(titleId)).decode()).upper()[:8] == '00040010':

return('-System Application-', '---', '-------')

if ((hexlify(titleId)).decode()).upper()[:8] == '0004001B':

return('-System Data Archive-', '---', '-------')

if ((hexlify(titleId)).decode()).upper()[:8] == '000400DB':

return('-System Data Archive-', '---', '-------')

if ((hexlify(titleId)).decode()).upper()[:8] == '0004009B':

return('-System Data Archive-', '---', '-------')

if ((hexlify(titleId)).decode()).upper()[:8] == '00040030':

return('-System Applet-', '---', '-------')

if ((hexlify(titleId)).decode()).upper()[:8] == '00040130':

return('-System Module-', '---', '-------')

if ((hexlify(titleId)).decode()).upper()[:8] == '00040138':

return('-System Firmware-', '---', '-------')

if ((hexlify(titleId)).decode()).upper()[:8] == '00040001':

return('-Download Play Title-', '---', '-------')

if ((hexlify(titleId)).decode()).upper()[:8] == '00048005':

return('-TWL System Application-', '---', '-------')

if ((hexlify(titleId)).decode()).upper()[:8] == '0004800F':

return('-TWL System Data Archive-', '---', '-------')

if ((hexlify(titleId)).decode()).upper()[:8] == '00040002':

return('-Game Demo-', '---', '-------')

if ((hexlify(titleId)).decode()).upper()[:8] == '0004008C':

return('-Addon DLC-', '---', '-------')

# create new SSL context to load decrypted CLCert-A off directory, key and cert are in PEM format

# see https://github.com/SciresM/ccrypt

ctrcontext = ssl.SSLContext(ssl.PROTOCOL_SSLv23)

ctrcontext.load_cert_chain('ctr-common-1.crt', keyfile='ctr-common-1.key')

# ninja handles handles actions that require authentication, in addition to converting title ID to internal NUS content ID

ninjurl = 'https://ninja.ctr.shop.nintendo.net/ninja/ws/titles/id_pair'

# use GET request with parameter "title_id[]=mytitleid" with SSL context to retrieve XML response

try:

shopRequest = urllib.request.Request(ninjurl + '?title_id[]=' + (hexlify(titleId)).decode())

shopRequest.get_method = lambda: 'GET'

response = urllib.request.urlopen(shopRequest, context=ctrcontext)

xmlResponse = minidom.parseString((response.read()).decode('UTF-8', 'replace'))

except urllib.error.URLError as e:

raise

# set ns_uid (the internal content ID) to field from XML

ns_uid = xmlResponse.getElementsByTagName('ns_uid')[0].childNodes[0].data

# samurai handles metadata actions, including getting a title's info

# URL regions are by country instead of geographical regions... for some reason

samuraiurl = 'https://samurai.ctr.shop.nintendo.net/samurai/ws/'

# nested try loop to figure out which region the title is from; there is no easy way to do this other than try them all

try:

country_code = 'JP'

titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)

titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)

region = 'JPN'

try:

country_code = 'US'

titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)

titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)

region = 'WLD'

except urllib.error.URLError as e:

pass

except urllib.error.URLError as e:

try:

country_code = 'US'

titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)

titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)

region = 'USA'

except urllib.error.URLError as e:

try:

country_code = 'GB'

titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)

titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)

region = 'EUR'

except urllib.error.URLError as e:

try:

country_code = 'DE'

titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)

titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)

region = 'EUR'

except urllib.error.URLError as e:

try:

country_code = 'FR'

titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)

titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)

region = 'EUR'

except urllib.error.URLError as e:

try:

country_code = 'ES'

titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)

titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)

region = 'EUR'

except urllib.error.URLError as e:

try:

country_code = 'NL'

titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)

titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)

region = 'EUR'

except urllib.error.URLError as e:

try:

country_code = 'IT'

titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)

titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)

region = 'EUR'

except urllib.error.URLError as e:

raise

# get title's name from the returned XML from the URL

xmlResponse = minidom.parseString((titleResponse.read()).decode('UTF-8'))

title_name = xmlResponse.getElementsByTagName('name')[0].childNodes[0].data

title_name_stripped = title_name.replace('\n', '')

if 'Windows' in platform.system():

title_name_stripped = bytes(title_name_stripped, 'utf-8')

title_name_stripped = title_name_stripped.decode('utf-8').encode('cp850','replace').decode('cp850')

product_code = xmlResponse.getElementsByTagName('product_code')[0].childNodes[0].data

return(title_name_stripped, region, product_code)

#from https://github.com/Relys/3DS_Multi_Decryptor/blob/master/ticket-titlekey_stuff/printKeys.py

for i in range(len(sys.argv)):

if sys.argv[i] == '-deckey':

with open('decTitleKeys.bin', 'rb') as fh:

nEntries = os.fstat(fh.fileno()).st_size / 32

fh.seek(16, os.SEEK_SET)

for i in range(int(nEntries)):

fh.seek(8, os.SEEK_CUR)

titleId = fh.read(8)

decryptedTitleKey = fh.read(16)

print('%s: %s' % ((hexlify(titleId)).decode(), (hexlify(decryptedTitleKey)).decode()))

raise SystemExit(0)

for i in range(len(sys.argv)):

if sys.argv[i] == '-checkbin':

with open('decTitleKeys.bin', 'rb') as fh:

nEntries = os.fstat(fh.fileno()).st_size / 32

fh.seek(16, os.SEEK_SET)

final_output = []

print('\n')

# format: Title Name (left aligned) gets 40 characters, Title ID (Right aligned) gets 16, Titlekey (Right aligned) gets 32, and Region (Right aligned) gets 3

# anything longer is truncated, anything shorter is padded

print("{0:<40} {1:>16} {2:>32} {3:>3}".format('Name', 'Title ID', 'Titlekey', 'Region'))

print("-"*100)

for i in range(int(nEntries)):

fh.seek(8, os.SEEK_CUR)

titleId = fh.read(8)

decryptedTitleKey = fh.read(16)

# regular CDN URL for downloads off NUS

baseurl = 'http://nus.cdn.c.shop.nintendowifi.net/ccs/download/' + (hexlify(titleId)).decode()

# download TMD and set to object

try:

tmd = urllib.request.urlopen(baseurl + '/tmd')

except urllib.error.URLError as e:

continue

tmd = tmd.read()

# try to get info from the CDN, if it fails then set title and region to unknown

try:

ret_title_name_stripped, ret_region, ret_product_code = getTitleInfo(titleId)

except (KeyboardInterrupt, SystemExit):

raise

except:

ret_region = '---'

ret_title_name_stripped = '---Unknown---'

ret_product_code = '---Unknown---'

contentCount = unpack('>H', tmd[0x206:0x208])[0]

for i in range(contentCount):

cOffs = 0xB04+(0x30*i)

cID = format(unpack('>I', tmd[cOffs:cOffs+4])[0], '08x')

# use range requests to download bytes 0 through 271, needed 272 instead of 260 because AES-128-CBC encrypts in chunks of 128 bits

try:

checkReq = urllib.request.Request('%s/%s'%(baseurl, cID))

checkReq.headers['Range'] = 'bytes=%s-%s' % (0, 271)

checkTemp = urllib.request.urlopen(checkReq)

except urllib.error.URLError as e:

continue

# set IV to offset 0xf0 length 0x10 of ciphertext; thanks to yellows8 for the offset

checkTempPerm = checkTemp.read()

checkIv = checkTempPerm[0xf0:0x100]

decryptor = AES.new(decryptedTitleKey, AES.MODE_CBC, checkIv)

# check for magic ('NCCH') at offset 0x100 length 0x104 of the decrypted content

checkTempOut = decryptor.decrypt(checkTempPerm)[0x100:0x104]

if 'NCCH' in checkTempOut.decode('UTF-8', 'ignore'):

# format: Title Name (left aligned) gets 40 characters, Title ID (Right aligned) gets 16, Titlekey (Right aligned) gets 32, and Region (Right aligned) gets 3

# anything longer is truncated, anything shorter is padded

print("{0:<40.40} {1:>16} {2:>32} {3:>3}".format(ret_title_name_stripped, (hexlify(titleId).decode()).strip(), ((hexlify(decryptedTitleKey)).decode()).strip(), ret_region))

raise SystemExit(0)

#if args for deckeys or checkbin weren't used above, remaining functions require 3 args minimum

if len(sys.argv) < 3:

SystemUsage()

# default values

titleid = sys.argv[1]

titlekey = sys.argv[2]

cardType = sys.argv[3].lower()

forceDownload = 0

if cardType not in ['', 'card1', 'card2']:

forceDecrypt = 0

print 'Invalid cardType.'

make3ds = 1

raise SystemExit(0)

makecia = 1

cardType = ['', 'card1', 'card2'].index(cardType)

nohash = 0

checkKey = 0

checkTempOut = None

# check args

for i in range(len(sys.argv)):

if sys.argv[i] == '-redown': forceDownload = 1

elif sys.argv[i] == '-redec': forceDecrypt = 1

elif sys.argv[i] == '-no3ds': make3ds = 0

elif sys.argv[i] == '-nocia': makecia = 0

elif sys.argv[i] == '-check': checkKey = 1

if len(titleid) != 16 or len(titlekey) != 32:

print 'Invalid arguments'

print('Invalid arguments')

raise SystemExit(0)

eShopContent = ['00040000', '00040002']

if titleid[:8] not in eShopContent:

print 'This only works with eShop content.'

raise SystemExit(0)

# set CDN default URL

baseurl = 'http://nus.cdn.c.shop.nintendowifi.net/ccs/download/' + titleid

print 'Downloading TMD...'

# download tmd and set to 'tmd' object

try:

tmd = urllib2.urlopen(baseurl + '/tmd')

tmd = urllib.request.urlopen(baseurl + '/tmd')

except urllib2.URLError, e:

except urllib.error.URLError as e:

print 'ERROR: Bad title ID?'

print('ERROR: Bad title ID?')

raise SystemExit(0)

tmd = tmd.read()

open('tmd.out','wb').write(tmd)

#create folder

print 'Done\n'

mkdir_p(titleid)

# https://www.3dbrew.org/wiki/Title_metadata#Signature_Data

if bytes('\x00\x01\x00\x04', 'UTF-8') not in tmd[:4]:

print('Unexpected signature type.')

raise SystemExit(0)

if tmd[:4] != '\x00\x01\x00\x04':

# If not normal application, don't make 3ds

print 'Unexpected signature type.'

if titleid[:8] != '00040000':

make3ds = 0

# Check OS, path, and current dir to set makerom location

if 'Windows' in platform.system():

if os.path.isfile('makerom.exe'):

makerom_command = 'makerom.exe'

else:

makerom_command = which('makerom.exe')

else:

if os.path.isfile('makerom'):

makerom_command = './makerom'

else:

makerom_command = which('makerom')

if makerom_command == None:

print('Could not find makerom!')

raise SystemExit(0)

# Set Proper CommonKey ID

if unpack('>H', tmd[0x18e:0x190])[0] & 0x10 == 0x10:

ckeyid = 1

else:

ckeyid = 0

# Set Proper Version

version = unpack('>H', tmd[0x1dc:0x1de])[0]

# Set Save Size

saveSize = (unpack('<I', tmd[0x19a:0x19e])[0])/1024

# If DLC Set DLC flag

dlcflag = ''

if titleid[:8] == '0004008c':

dlcflag = '-dlc'

contentCount = unpack('>H', tmd[0x206:0x208])[0]

# If not normal application, don't make 3ds

if contentCount > 8:

print 'Content count too high.'

make3ds = 0

raise SystemExit(0)

print 'Content count: ' + str(contentCount) + '\n'

indextypes = [' (Main Content)', ' (Manual)', '(Download Play container)', '', '', '', '', '']

mRomCmd = 'makerom -f cci -rsf rom.rsf -o ' + titleid + '.3ds -nomodtid'

command_cID = []

# Download Contents

fSize = 16*1024

for i in range(contentCount):

for i in xrange(contentCount):

cOffs = 0xB04+(0x30*i)

cID = unpack('>I', tmd[cOffs:cOffs+4])[0]

cID = format(unpack('>I', tmd[cOffs:cOffs+4])[0], '08x')

cIDX = unpack('>H', tmd[cOffs+4:cOffs+6])[0]

cIDX = format(unpack('>H', tmd[cOffs+4:cOffs+6])[0], '04x')

print 'Content ID: ' + str(cID).zfill(8)

cSIZE = format(unpack('>Q', tmd[cOffs+8:cOffs+16])[0], 'd')

print 'Content Index: ' + str(cIDX).zfill(8) + indextypes[cIDX]

cHASH = tmd[cOffs+16:cOffs+48]

# If not normal application, don't make 3ds

if unpack('>H', tmd[cOffs+4:cOffs+6])[0] >= 8:

make3ds = 0

outfname = titleid + '.' + str(cID).zfill(8)

print('Content ID: ' + cID)

response = urllib2.urlopen(baseurl + '/' + str(cID).zfill(8))

print('Content Index: ' + cIDX)

chunk_read(response, outfname, report_hook=chunk_report)

print('Content Size: ' + cSIZE)

print('Content Hash: ' + (hexlify(cHASH)).decode())

call(["aescbc", outfname, outfname + '_dec', titlekey, str(cIDX).zfill(4) + '0000000000000000000000000000'])

# set output location to a folder named for title id and contentid.dec as the file

outfname = titleid + '/' + cID + '.dec'

with open(outfname + '_dec','rb') as fh:

if checkKey == 1:

fh.seek(0x100)

print('\nDownloading and decrypting the first 272 bytes of ' + cID + ' for key check\n')

if fh.read(4) != 'NCCH':

# use range requests to download bytes 0 through 271, needed 272 instead of 260 because AES-128-CBC encrypts in chunks of 128 bits

print 'Decryption failed. Wrong title key?'

try:

checkReq = urllib.request.Request('%s/%s'%(baseurl, cID))

checkReq.headers['Range'] = 'bytes=%s-%s' % (0, 271)

checkTemp = urllib.request.urlopen(checkReq)

except urllib.error.URLError as e:

print('ERROR: Possibly wrong container?\n')

continue

try:

ret_title_name_stripped, ret_region, ret_product_code = getTitleInfo(unhexlify(titleid))

except (KeyboardInterrupt, SystemExit):

raise

except:

print('Could not retrieve CDN data!')

ret_region = '---'

ret_title_name_stripped = '---Unknown---'

ret_product_code = '---Unknown---'

# set IV to offset 0xf0 length 0x10 of ciphertext; thanks to yellows8 for the offset

checkTempPerm = checkTemp.read()

decryptor = AES.new(unhexlify(titlekey), AES.MODE_CBC, checkTempPerm[0xf0:0x100])

# check for magic ('NCCH') at offset 0x100 length 0x104 of the decrypted content

checkTempOut = decryptor.decrypt(checkTempPerm)[0x100:0x104]

print('Title Name: ' + ret_title_name_stripped)

print('Region: ' + ret_region)

print('Product Code: ' + ret_product_code)

if 'NCCH' not in checkTempOut.decode('UTF-8', 'ignore'):

print('\nERROR: Decryption failed; invalid titlekey?')

raise SystemExit(0)

print('\nTitlekey successfully verified to match title ID ' + titleid)

raise SystemExit(0)

# if the content location does not exist, redown is set, or the size is incorrect redownload

if os.path.exists(outfname) == 0 or forceDownload == 1 or os.path.getsize(outfname) != unpack('>Q', tmd[cOffs+8:cOffs+16])[0]:

response = urllib.request.urlopen(baseurl + '/' + cID)

chunk_read(response, outfname, unhexlify(titlekey), cIDX + '0000000000000000000000000000', report_hook=chunk_report)

# check hash and NCCH of downloaded content

with open(outfname,'rb') as fh:

fh.seek(0, os.SEEK_END)

fhSize = fh.tell()

if fh.tell() != unpack('>Q', tmd[cOffs+8:cOffs+16])[0]:

print('Title size mismatch. Download likely incomplete')

print('Downloaded: ' + format(fh.tell(), 'd'))

raise SystemExit(0)

fh.seek(0)

hash = sha256()

while fh.tell() != fhSize:

hash.update(fh.read(0x1000000))

print('Checking Hash: ' + format(float(fh.tell()*100)/fhSize,'.1f') + '% done\r', end=' ')

sha256file = hash.hexdigest()

if sha256file != (hexlify(cHASH)).decode():

print('hash mismatched, Decryption likely failed, wrong key or file modified?')

print('got hash: ' + sha256file)

raise SystemExit(0)

print('Hash verified successfully.')

fh.seek(0x100)

if (fh.read(4)).decode('UTF-8', 'ignore') != 'NCCH':

makecia = 0

make3ds = 0

fh.seek(0x60)

if fh.read(4) != 'WfA\0':

print('Not NCCH, nor DSiWare, file likely corrupted')

raise SystemExit(0)

else:

print('Not an NCCH container, likely DSiWare')

fh.seek(0, os.SEEK_END)

fSize += fh.tell()

print '\n'

print('\n')

mRomCmd = mRomCmd + ' -content ' + outfname + '_dec' + ':' + str(cIDX)

command_cID = command_cID + ['-i', outfname + ':0x' + cIDX + ':0x' + cID]

romrsf = ''

romrsf1 = 'CardInfo:\n MediaSize : '

romrsf2 = '\n MediaType : '

romrsf3 = '\n CardDevice : '

romrsf4 = '\n\nSystemControlInfo:\n SaveDataSize: 512KB\n'

mediaSizes = ['128MB', '256MB', '512MB', '1GB', '2GB', '4GB', '8GB']

romSizes = [128*1024*1024, 256*1024*1024, 512*1024*1024, 1*1024*1024*1024, 2*1024*1024*1024, 4*1024*1024*1024, 8*1024*1024*1024]

sizeIDX = min(range(len(romSizes)), key=lambda i: abs(romSizes[i]-fSize))

if romSizes[sizeIDX] < fSize:

sizeIDX += 1

if cardType == 1: #Card1

print('\n')

romrsf = romrsf1 + mediaSizes[sizeIDX] + romrsf2 + 'Card1' + romrsf3 + 'NorFlash' + romrsf4

print('The NCCH on eShop games is encrypted and cannot be used')

else: #Card2

print('without decryption on a 3DS. To fix this you should copy')

romrsf = romrsf1 + mediaSizes[sizeIDX] + romrsf2 + 'Card2' + romrsf3 + 'None'

print('all .dec files in the Title ID folder to \'/D9Game/\'')

print('on your SD card, then use the following option in Decrypt9:')

print('\n')

print('\'Game Decryptor Options\' > \'NCCH/NCSD Decryptor\'')

print('\n')

print('Once you have decrypted the files, copy the .dec files from')

print('\'/D9Game/\' back into the Title ID folder, overwriting them.')

print('\n')

input('Press Enter once you have done this...')

# Create RSF File

romrsf = 'Option:\n MediaFootPadding: true\n EnableCrypt: false\nSystemControlInfo:\n SaveDataSize: $(SaveSize)K'

with open('rom.rsf', 'wb') as fh:

fh.write(romrsf)

fh.write(romrsf.encode())

print 'Building ' + titleid + '.3ds...\n'

#set makerom command with subproces, removing '' if dlcflag isn't set (otherwise makerom breaks)

dotcia_command_array = ([makerom_command, '-f', 'cia', '-rsf', 'rom.rsf', '-o', titleid + '.cia', '-ckeyid', str(ckeyid), '-major', str((version & 0xfc00) >> 10), '-minor', str((version & 0x3f0) >> 4), '-micro', str(version & 0xF), '-DSaveSize=' + str(saveSize), str(dlcflag)] + command_cID)

dot3ds_command_array = ([makerom_command, '-f', 'cci', '-rsf', 'rom.rsf', '-nomodtid', '-o', titleid + '.3ds', '-ckeyid', str(ckeyid), '-major', str((version & 0xfc00) >> 10), '-minor', str((version & 0x3f0) >> 4), '-micro', str(version & 0xF), '-DSaveSize=' + str(saveSize), str(dlcflag)] + command_cID)

if '' in dotcia_command_array:

dotcia_command_array.remove('')

if '' in dot3ds_command_array:

dot3ds_command_array.remove('')

os.system(mRomCmd)

if makecia == 1:

print('\nBuilding ' + titleid + '.cia...')

call(dotcia_command_array, stderr=STDOUT)

if not os.path.isfile(titleid + '.3ds'):

if make3ds == 1:

print "Something went wrong."

print('\nBuilding ' + titleid + '.3ds...')

call(dot3ds_command_array, stderr=STDOUT)

os.remove('rom.rsf')

if not os.path.isfile(titleid + '.cia') and makecia == 1:

print('Something went wrong.')

raise SystemExit(0)

if not os.path.isfile(titleid + '.3ds') and make3ds == 1:

#This should be done with makerom in the RSF

print('Something went wrong.')

with open(titleid + '.3ds', 'ab+') as fh: #File padding

raise SystemExit(0)

fh.seek(0, os.SEEK_END)

paddingLeft = (romSizes[sizeIDX])-fh.tell()

while paddingLeft > 0:

if paddingLeft < 0x400000:

padSize = paddingLeft

else:

padSize = 0x400000

fh.write('\xFF'*padSize)

paddingLeft -= 0x400000

print 'Done!'

print('Done!')

已保存差异

原始文本

打开文件

#This script is old and shitty

import os
import sys
import urllib2
from struct import unpack, pack
from subprocess import call
from binascii import hexlify

##########From https://stackoverflow.com/questions/5783517/downloading-progress-bar-urllib2-python
def chunk_report(bytes_so_far, chunk_size, total_size):
    percent = float(bytes_so_far) / total_size
    percent = round(percent*100, 2)
    sys.stdout.write("Downloaded %d of %d bytes (%0.2f%%)\r" % (bytes_so_far, total_size, percent))

if bytes_so_far >= total_size:
        sys.stdout.write('\n')

def chunk_read(response, outfname, chunk_size=2*1024*1024, report_hook=None):
    fh = open(outfname,'wb')
    total_size = response.info().getheader('Content-Length').strip()
    total_size = int(total_size)
    bytes_so_far = 0
    data = []

while 1:
        if report_hook:
            report_hook(bytes_so_far, chunk_size, total_size)

chunk = response.read(chunk_size)
        bytes_so_far += len(chunk)

if not chunk:
             break

fh.write(chunk)

fh.close()
##########

if len(sys.argv) < 4:
    print 'Usage: CDNto3DS.py TitleID TitleKey cardType'
    print "cardType: valid options are 'card1' and 'card2'"
    raise SystemExit(0)

titleid = sys.argv[1]
titlekey = sys.argv[2]
cardType = sys.argv[3].lower()
if cardType not in ['', 'card1', 'card2']:
    print 'Invalid cardType.'
    raise SystemExit(0)
cardType = ['', 'card1', 'card2'].index(cardType)

if len(titleid) != 16 or len(titlekey) != 32:
    print 'Invalid arguments'
    raise SystemExit(0)

eShopContent = ['00040000', '00040002']
if titleid[:8] not in eShopContent:
    print 'This only works with eShop content.'
    raise SystemExit(0)

baseurl = 'http://nus.cdn.c.shop.nintendowifi.net/ccs/download/' + titleid

print 'Downloading TMD...'

try:
    tmd = urllib2.urlopen(baseurl + '/tmd')
except urllib2.URLError, e:
    print 'ERROR: Bad title ID?'
    raise SystemExit(0)

tmd = tmd.read()

open('tmd.out','wb').write(tmd)
print 'Done\n'

if tmd[:4] != '\x00\x01\x00\x04':
    print 'Unexpected signature type.'
    raise SystemExit(0)

contentCount = unpack('>H', tmd[0x206:0x208])[0]

if contentCount > 8:
    print 'Content count too high.'
    raise SystemExit(0)

print 'Content count: ' + str(contentCount) + '\n'

indextypes = [' (Main Content)', ' (Manual)', '(Download Play container)', '', '', '', '', '']

mRomCmd = 'makerom -f cci -rsf rom.rsf -o ' + titleid + '.3ds -nomodtid'

fSize = 16*1024

for i in xrange(contentCount):
    cOffs = 0xB04+(0x30*i)
    cID = unpack('>I', tmd[cOffs:cOffs+4])[0]
    cIDX = unpack('>H', tmd[cOffs+4:cOffs+6])[0]
    print 'Content ID:    ' + str(cID).zfill(8)
    print 'Content Index: ' + str(cIDX).zfill(8) + indextypes[cIDX]

outfname = titleid + '.' + str(cID).zfill(8)
    response = urllib2.urlopen(baseurl + '/' + str(cID).zfill(8))
    chunk_read(response, outfname, report_hook=chunk_report)

call(["aescbc", outfname, outfname + '_dec', titlekey, str(cIDX).zfill(4) + '0000000000000000000000000000'])

with open(outfname + '_dec','rb') as fh:
        fh.seek(0x100)
        if fh.read(4) != 'NCCH':
            print 'Decryption failed. Wrong title key?'
            raise SystemExit(0)
        fh.seek(0, os.SEEK_END)
        fSize += fh.tell()

print '\n'
    mRomCmd = mRomCmd + ' -content ' + outfname + '_dec' + ':' + str(cIDX)

romrsf = ''

romrsf1 = 'CardInfo:\n  MediaSize               : '
romrsf2 = '\n  MediaType               : '
romrsf3 = '\n  CardDevice              : '
romrsf4 = '\n\nSystemControlInfo:\n  SaveDataSize: 512KB\n'

mediaSizes = ['128MB', '256MB', '512MB', '1GB', '2GB', '4GB', '8GB']
romSizes = [128*1024*1024, 256*1024*1024, 512*1024*1024, 1*1024*1024*1024, 2*1024*1024*1024, 4*1024*1024*1024, 8*1024*1024*1024]
sizeIDX = min(range(len(romSizes)), key=lambda i: abs(romSizes[i]-fSize))
if romSizes[sizeIDX] < fSize:
    sizeIDX += 1

if cardType == 1: #Card1
    romrsf = romrsf1 + mediaSizes[sizeIDX] + romrsf2 + 'Card1' + romrsf3 + 'NorFlash' + romrsf4
else: #Card2
    romrsf = romrsf1 + mediaSizes[sizeIDX] + romrsf2 + 'Card2' + romrsf3 + 'None'

with open('rom.rsf', 'wb') as fh:
    fh.write(romrsf)

print 'Building ' + titleid + '.3ds...\n'

os.system(mRomCmd)

if not os.path.isfile(titleid + '.3ds'):
    print "Something went wrong."
    raise SystemExit(0)

#This should be done with makerom in the RSF
with open(titleid + '.3ds', 'ab+') as fh: #File padding
    fh.seek(0, os.SEEK_END)
    paddingLeft = (romSizes[sizeIDX])-fh.tell()
    while paddingLeft > 0:
        if paddingLeft < 0x400000:
            padSize = paddingLeft
        else:
            padSize = 0x400000
        fh.write('\xFF'*padSize)
        paddingLeft -= 0x400000

print 'Done!'

更改后文本

打开文件

#!/usr/bin/env python3

#script is modified from https://github.com/Relys/3DS_Multi_Decryptor/blob/master/to3DS/CDNto3DS/CDNto3DS.py
#requires PyCrypto to be installed ("python3 -m ensurepip" then "pip3 install PyCrypto")
#requires makerom (https://github.com/profi200/Project_CTR/releases)
#this is a Python 3 script

import os
import platform
import struct
import errno
import sys
import shlex
import ssl
import urllib.request, urllib.error, urllib.parse
from xml.dom import minidom
from subprocess import DEVNULL, STDOUT, call, check_call
from struct import unpack, pack
from subprocess import call
from binascii import hexlify, unhexlify
from hashlib import sha256
from Crypto.Cipher import AES

##########From http://stackoverflow.com/questions/377017/test-if-executable-exists-in-python/377028#377028
def which(program):
    import os
    def is_exe(fpath):
        return os.path.isfile(fpath) and os.access(fpath, os.X_OK)

fpath, fname = os.path.split(program)
    if fpath:
        if is_exe(program):
            return program
    else:
        for path in os.environ["PATH"].split(os.pathsep):
            path = path.strip('"')
            exe_file = os.path.join(path, program)
            if is_exe(exe_file):
                return exe_file

return None

def mkdir_p(path):
    try:
        os.makedirs(path)
    except OSError as exc: # Python >2.5
        if exc.errno == errno.EEXIST and os.path.isdir(path):
            pass
        else: raise

##########Based on https://stackoverflow.com/questions/5783517/downloading-progress-bar-urllib2-python
def chunk_report(bytes_so_far, chunk_size, total_size):
    percent = float(bytes_so_far) / total_size
    percent = round(percent*100, 2)
    sys.stdout.write('\rDownloaded and decrypted %d of %d bytes (%0.2f%%)' % (bytes_so_far, total_size, percent))
    sys.stdout.flush()

if bytes_so_far >= total_size:
        print('\n')

# download in 0x200000 byte chunks, decrypt the chunk with IVs described below, then write the decrypted chunk to disk (half the file size of decrypting separately!)
def chunk_read(response, outfname, intitlekey, first_iv, chunk_size=0x200000, report_hook=None):
    fh = open(outfname,'wb')
    total_size = int(response.getheader('Content-Length'))
    total_size = int(total_size)
    bytes_so_far = 0
    data = []
    first_chunk_read = 0

while 1:
        if report_hook:
            report_hook(bytes_so_far, chunk_size, total_size)

chunk = response.read(chunk_size)
        bytes_so_far += len(chunk)

if not chunk:
             break

# IV of first chunk should be the Content ID + 28 0s like with the entire file, but each subsequent chunk should be the last 16 bytes of the previous still ciphered chunk
        if first_chunk_read == 0:
            decryptor = AES.new(intitlekey, AES.MODE_CBC, unhexlify(first_iv))
            first_chunk_read = 1
        else:
            decryptor = AES.new(intitlekey, AES.MODE_CBC, prev_chunk[(0x200000 - 16):0x200000])

dec_chunk = decryptor.decrypt(chunk)
        prev_chunk = chunk

fh.write(dec_chunk)

fh.close()

def SystemUsage():
    print('Usage: python3 PlaiCDN.py <TitleID TitleKey [-redown -redec -no3ds -nocia] or [-check]> or [-deckey] or [-checkbin]')
    print('-deckey   : print keys from decTitleKeys.bin')
    print('-check    : checks if title id matches key')
    print('-checkbin : checks titlekeys from decTitleKeys.bin')
    print('-redown   : redownload content')
    print('-redec    : re-attempt content decryption')
    print('-no3ds    : don\'t build 3DS file')
    print('-nocia    : don\'t build CIA file')
    raise SystemExit(0)

def getTitleInfo(titleId):
    if ((hexlify(titleId)).decode()).upper()[:8] == '00040010':
        return('-System Application-', '---', '-------')
    if ((hexlify(titleId)).decode()).upper()[:8] == '0004001B':
        return('-System Data Archive-', '---', '-------')
    if ((hexlify(titleId)).decode()).upper()[:8] == '000400DB':
        return('-System Data Archive-', '---', '-------')
    if ((hexlify(titleId)).decode()).upper()[:8] == '0004009B':
        return('-System Data Archive-', '---', '-------')
    if ((hexlify(titleId)).decode()).upper()[:8] == '00040030':
        return('-System Applet-', '---', '-------')
    if ((hexlify(titleId)).decode()).upper()[:8] == '00040130':
        return('-System Module-', '---', '-------')
    if ((hexlify(titleId)).decode()).upper()[:8] == '00040138':
        return('-System Firmware-', '---', '-------')
    if ((hexlify(titleId)).decode()).upper()[:8] == '00040001':
        return('-Download Play Title-', '---', '-------')
    if ((hexlify(titleId)).decode()).upper()[:8] == '00048005':
        return('-TWL System Application-', '---', '-------')
    if ((hexlify(titleId)).decode()).upper()[:8] == '0004800F':
        return('-TWL System Data Archive-', '---', '-------')
    if ((hexlify(titleId)).decode()).upper()[:8] == '00040002':
        return('-Game Demo-', '---', '-------')
    if ((hexlify(titleId)).decode()).upper()[:8] == '0004008C':
        return('-Addon DLC-', '---', '-------')

# create new SSL context to load decrypted CLCert-A off directory, key and cert are in PEM format
    # see https://github.com/SciresM/ccrypt
    ctrcontext = ssl.SSLContext(ssl.PROTOCOL_SSLv23)
    ctrcontext.load_cert_chain('ctr-common-1.crt', keyfile='ctr-common-1.key')

# ninja handles handles actions that require authentication, in addition to converting title ID to internal NUS content ID
    ninjurl = 'https://ninja.ctr.shop.nintendo.net/ninja/ws/titles/id_pair'

# use GET request with parameter "title_id[]=mytitleid" with SSL context to retrieve XML response
    try:
        shopRequest = urllib.request.Request(ninjurl + '?title_id[]=' + (hexlify(titleId)).decode())
        shopRequest.get_method = lambda: 'GET'
        response = urllib.request.urlopen(shopRequest, context=ctrcontext)
        xmlResponse = minidom.parseString((response.read()).decode('UTF-8', 'replace'))
    except urllib.error.URLError as e:
        raise

# set ns_uid (the internal content ID) to field from XML
    ns_uid = xmlResponse.getElementsByTagName('ns_uid')[0].childNodes[0].data

# samurai handles metadata actions, including getting a title's info
    # URL regions are by country instead of geographical regions... for some reason
    samuraiurl = 'https://samurai.ctr.shop.nintendo.net/samurai/ws/'

# nested try loop to figure out which region the title is from; there is no easy way to do this other than try them all
    try:
        country_code = 'JP'
        titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)
        titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)
        region = 'JPN'
        try:
            country_code = 'US'
            titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)
            titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)
            region = 'WLD'
        except urllib.error.URLError as e:
            pass
    except urllib.error.URLError as e:
        try:
            country_code = 'US'
            titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)
            titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)
            region = 'USA'
        except urllib.error.URLError as e:
            try:
                country_code = 'GB'
                titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)
                titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)
                region = 'EUR'
            except urllib.error.URLError as e:
                try:
                    country_code = 'DE'
                    titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)
                    titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)
                    region = 'EUR'
                except urllib.error.URLError as e:
                    try:
                        country_code = 'FR'
                        titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)
                        titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)
                        region = 'EUR'
                    except urllib.error.URLError as e:
                        try:
                            country_code = 'ES'
                            titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)
                            titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)
                            region = 'EUR'
                        except urllib.error.URLError as e:
                            try:
                                country_code = 'NL'
                                titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)
                                titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)
                                region = 'EUR'
                            except urllib.error.URLError as e:
                                try:
                                    country_code = 'IT'
                                    titleRequest = urllib.request.Request(samuraiurl + country_code + '/title/' + ns_uid)
                                    titleResponse = urllib.request.urlopen(titleRequest, context=ctrcontext)
                                    region = 'EUR'
                                except urllib.error.URLError as e:
                                    raise

# get title's name from the returned XML from the URL
    xmlResponse = minidom.parseString((titleResponse.read()).decode('UTF-8'))
    title_name = xmlResponse.getElementsByTagName('name')[0].childNodes[0].data
    title_name_stripped = title_name.replace('\n', '')

if 'Windows' in platform.system():
        title_name_stripped = bytes(title_name_stripped, 'utf-8')
        title_name_stripped = title_name_stripped.decode('utf-8').encode('cp850','replace').decode('cp850')

product_code = xmlResponse.getElementsByTagName('product_code')[0].childNodes[0].data

return(title_name_stripped, region, product_code)

#from https://github.com/Relys/3DS_Multi_Decryptor/blob/master/ticket-titlekey_stuff/printKeys.py
for i in range(len(sys.argv)):
    if sys.argv[i] == '-deckey':
        with open('decTitleKeys.bin', 'rb') as fh:
            nEntries = os.fstat(fh.fileno()).st_size / 32
            fh.seek(16, os.SEEK_SET)
            for i in range(int(nEntries)):
                fh.seek(8, os.SEEK_CUR)
                titleId = fh.read(8)
                decryptedTitleKey = fh.read(16)
                print('%s: %s' % ((hexlify(titleId)).decode(), (hexlify(decryptedTitleKey)).decode()))
        raise SystemExit(0)

for i in range(len(sys.argv)):
    if sys.argv[i] == '-checkbin':
        with open('decTitleKeys.bin', 'rb') as fh:
            nEntries = os.fstat(fh.fileno()).st_size / 32
            fh.seek(16, os.SEEK_SET)
            final_output = []
            print('\n')
            # format: Title Name (left aligned) gets 40 characters, Title ID (Right aligned) gets 16, Titlekey (Right aligned) gets 32, and Region (Right aligned) gets 3
            # anything longer is truncated, anything shorter is padded
            print("{0:<40} {1:>16} {2:>32} {3:>3}".format('Name', 'Title ID', 'Titlekey', 'Region'))
            print("-"*100)
            for i in range(int(nEntries)):
                fh.seek(8, os.SEEK_CUR)
                titleId = fh.read(8)
                decryptedTitleKey = fh.read(16)
                # regular CDN URL for downloads off NUS
                baseurl = 'http://nus.cdn.c.shop.nintendowifi.net/ccs/download/' + (hexlify(titleId)).decode()

# download TMD and set to object
                try:
                    tmd = urllib.request.urlopen(baseurl + '/tmd')
                except urllib.error.URLError as e:
                    continue
                tmd = tmd.read()

# try to get info from the CDN, if it fails then set title and region to unknown
                try:
                    ret_title_name_stripped, ret_region, ret_product_code = getTitleInfo(titleId)
                except (KeyboardInterrupt, SystemExit):
                    raise
                except:
                    ret_region = '---'
                    ret_title_name_stripped = '---Unknown---'
                    ret_product_code = '---Unknown---'

contentCount = unpack('>H', tmd[0x206:0x208])[0]
                for i in range(contentCount):
                    cOffs = 0xB04+(0x30*i)
                    cID = format(unpack('>I', tmd[cOffs:cOffs+4])[0], '08x')
                    # use range requests to download bytes 0 through 271, needed 272 instead of 260 because AES-128-CBC encrypts in chunks of 128 bits
                    try:
                        checkReq = urllib.request.Request('%s/%s'%(baseurl, cID))
                        checkReq.headers['Range'] = 'bytes=%s-%s' % (0, 271)
                        checkTemp = urllib.request.urlopen(checkReq)
                    except urllib.error.URLError as e:
                        continue

# set IV to offset 0xf0 length 0x10 of ciphertext; thanks to yellows8 for the offset
                checkTempPerm = checkTemp.read()
                checkIv = checkTempPerm[0xf0:0x100]
                decryptor = AES.new(decryptedTitleKey, AES.MODE_CBC, checkIv)

# check for magic ('NCCH') at offset 0x100 length 0x104 of the decrypted content
                checkTempOut = decryptor.decrypt(checkTempPerm)[0x100:0x104]
                if 'NCCH' in checkTempOut.decode('UTF-8', 'ignore'):
                    # format: Title Name (left aligned) gets 40 characters, Title ID (Right aligned) gets 16, Titlekey (Right aligned) gets 32, and Region (Right aligned) gets 3
                    # anything longer is truncated, anything shorter is padded
                    print("{0:<40.40} {1:>16} {2:>32} {3:>3}".format(ret_title_name_stripped, (hexlify(titleId).decode()).strip(), ((hexlify(decryptedTitleKey)).decode()).strip(), ret_region))
            raise SystemExit(0)

#if args for deckeys or checkbin weren't used above, remaining functions require 3 args minimum
if len(sys.argv) < 3:
    SystemUsage()

# default values
titleid = sys.argv[1]
titlekey = sys.argv[2]
forceDownload = 0
forceDecrypt = 0
make3ds = 1
makecia = 1
nohash = 0
checkKey = 0
checkTempOut = None

# check args
for i in range(len(sys.argv)):
    if sys.argv[i] == '-redown': forceDownload = 1
    elif sys.argv[i] == '-redec': forceDecrypt = 1
    elif sys.argv[i] == '-no3ds': make3ds = 0
    elif sys.argv[i] == '-nocia': makecia = 0
    elif sys.argv[i] == '-check': checkKey = 1

if len(titleid) != 16 or len(titlekey) != 32:
    print('Invalid arguments')
    raise SystemExit(0)

# set CDN default URL
baseurl = 'http://nus.cdn.c.shop.nintendowifi.net/ccs/download/' + titleid

# download tmd and set to 'tmd' object
try:
    tmd = urllib.request.urlopen(baseurl + '/tmd')
except urllib.error.URLError as e:
    print('ERROR: Bad title ID?')
    raise SystemExit(0)
tmd = tmd.read()

#create folder
mkdir_p(titleid)

# https://www.3dbrew.org/wiki/Title_metadata#Signature_Data
if bytes('\x00\x01\x00\x04', 'UTF-8') not in tmd[:4]:
    print('Unexpected signature type.')
    raise SystemExit(0)

# If not normal application, don't make 3ds
if titleid[:8] != '00040000':
    make3ds = 0

# Check OS, path, and current dir to set makerom location
if 'Windows' in platform.system():
    if os.path.isfile('makerom.exe'):
        makerom_command = 'makerom.exe'
    else:
        makerom_command = which('makerom.exe')
else:
    if os.path.isfile('makerom'):
        makerom_command = './makerom'
    else:
        makerom_command = which('makerom')

if makerom_command == None:
    print('Could not find makerom!')
    raise SystemExit(0)

# Set Proper CommonKey ID
if unpack('>H', tmd[0x18e:0x190])[0] & 0x10 == 0x10:
    ckeyid = 1
else:
    ckeyid = 0

# Set Proper Version
version = unpack('>H', tmd[0x1dc:0x1de])[0]

# Set Save Size
saveSize = (unpack('<I', tmd[0x19a:0x19e])[0])/1024

# If DLC Set DLC flag
dlcflag = ''
if titleid[:8] == '0004008c':
    dlcflag = '-dlc'

contentCount = unpack('>H', tmd[0x206:0x208])[0]

# If not normal application, don't make 3ds
if contentCount > 8:
    make3ds = 0

command_cID = []

# Download Contents
fSize = 16*1024
for i in range(contentCount):
    cOffs = 0xB04+(0x30*i)
    cID = format(unpack('>I', tmd[cOffs:cOffs+4])[0], '08x')
    cIDX = format(unpack('>H', tmd[cOffs+4:cOffs+6])[0], '04x')
    cSIZE = format(unpack('>Q', tmd[cOffs+8:cOffs+16])[0], 'd')
    cHASH = tmd[cOffs+16:cOffs+48]
    # If not normal application, don't make 3ds
    if unpack('>H', tmd[cOffs+4:cOffs+6])[0] >= 8:
        make3ds = 0

print('Content ID:    ' + cID)
    print('Content Index: ' + cIDX)
    print('Content Size:  ' + cSIZE)
    print('Content Hash:  ' + (hexlify(cHASH)).decode())

# set output location to a folder named for title id and contentid.dec as the file
    outfname = titleid + '/' + cID + '.dec'

if checkKey == 1:
        print('\nDownloading and decrypting the first 272 bytes of ' + cID + ' for key check\n')
        # use range requests to download bytes 0 through 271, needed 272 instead of 260 because AES-128-CBC encrypts in chunks of 128 bits
        try:
            checkReq = urllib.request.Request('%s/%s'%(baseurl, cID))
            checkReq.headers['Range'] = 'bytes=%s-%s' % (0, 271)
            checkTemp = urllib.request.urlopen(checkReq)
        except urllib.error.URLError as e:
            print('ERROR: Possibly wrong container?\n')
            continue

try:
            ret_title_name_stripped, ret_region, ret_product_code = getTitleInfo(unhexlify(titleid))
        except (KeyboardInterrupt, SystemExit):
            raise
        except:
            print('Could not retrieve CDN data!')
            ret_region = '---'
            ret_title_name_stripped = '---Unknown---'
            ret_product_code = '---Unknown---'

# set IV to offset 0xf0 length 0x10 of ciphertext; thanks to yellows8 for the offset
        checkTempPerm = checkTemp.read()
        decryptor = AES.new(unhexlify(titlekey), AES.MODE_CBC, checkTempPerm[0xf0:0x100])

# check for magic ('NCCH') at offset 0x100 length 0x104 of the decrypted content
        checkTempOut = decryptor.decrypt(checkTempPerm)[0x100:0x104]

print('Title Name: ' + ret_title_name_stripped)
        print('Region: ' + ret_region)
        print('Product Code: ' + ret_product_code)

if 'NCCH' not in checkTempOut.decode('UTF-8', 'ignore'):
            print('\nERROR: Decryption failed; invalid titlekey?')
            raise SystemExit(0)

print('\nTitlekey successfully verified to match title ID ' + titleid)
        raise SystemExit(0)

# if the content location does not exist, redown is set, or the size is incorrect redownload
    if os.path.exists(outfname) == 0 or forceDownload == 1 or os.path.getsize(outfname) != unpack('>Q', tmd[cOffs+8:cOffs+16])[0]:
        response = urllib.request.urlopen(baseurl + '/' + cID)
        chunk_read(response, outfname, unhexlify(titlekey), cIDX + '0000000000000000000000000000', report_hook=chunk_report)

# check hash and NCCH of downloaded content
    with open(outfname,'rb') as fh:
        fh.seek(0, os.SEEK_END)
        fhSize = fh.tell()
        if fh.tell() != unpack('>Q', tmd[cOffs+8:cOffs+16])[0]:
            print('Title size mismatch.  Download likely incomplete')
            print('Downloaded: ' + format(fh.tell(), 'd'))
            raise SystemExit(0)
        fh.seek(0)
        hash = sha256()

while fh.tell() != fhSize:
            hash.update(fh.read(0x1000000))
            print('Checking Hash: ' + format(float(fh.tell()*100)/fhSize,'.1f') + '% done\r', end=' ')

sha256file = hash.hexdigest()
        if sha256file != (hexlify(cHASH)).decode():
            print('hash mismatched, Decryption likely failed, wrong key or file modified?')
            print('got hash: ' + sha256file)
            raise SystemExit(0)
        print('Hash verified successfully.')
        fh.seek(0x100)
        if (fh.read(4)).decode('UTF-8', 'ignore') != 'NCCH':
            makecia = 0
            make3ds = 0
            fh.seek(0x60)
            if fh.read(4) != 'WfA\0':
                print('Not NCCH, nor DSiWare, file likely corrupted')
                raise SystemExit(0)
            else:
                print('Not an NCCH container, likely DSiWare')
        fh.seek(0, os.SEEK_END)
        fSize += fh.tell()

print('\n')
    command_cID = command_cID + ['-i', outfname + ':0x' + cIDX + ':0x' + cID]

print('\n')
print('The NCCH on eShop games is encrypted and cannot be used')
print('without decryption on a 3DS. To fix this you should copy')
print('all .dec files in the Title ID folder to \'/D9Game/\'')
print('on your SD card, then use the following option in Decrypt9:')
print('\n')
print('\'Game Decryptor Options\' > \'NCCH/NCSD Decryptor\'')
print('\n')
print('Once you have decrypted the files, copy the .dec files from')
print('\'/D9Game/\' back into the Title ID folder, overwriting them.')
print('\n')
input('Press Enter once you have done this...')

# Create RSF File
romrsf = 'Option:\n  MediaFootPadding: true\n  EnableCrypt: false\nSystemControlInfo:\n  SaveDataSize: $(SaveSize)K'
with open('rom.rsf', 'wb') as fh:
    fh.write(romrsf.encode())

#set makerom command with subproces, removing '' if dlcflag isn't set (otherwise makerom breaks)
dotcia_command_array = ([makerom_command, '-f', 'cia', '-rsf', 'rom.rsf', '-o', titleid + '.cia', '-ckeyid', str(ckeyid), '-major', str((version & 0xfc00) >> 10), '-minor', str((version & 0x3f0) >> 4), '-micro', str(version & 0xF), '-DSaveSize=' + str(saveSize), str(dlcflag)] + command_cID)
dot3ds_command_array = ([makerom_command, '-f', 'cci', '-rsf', 'rom.rsf', '-nomodtid', '-o', titleid + '.3ds', '-ckeyid', str(ckeyid), '-major', str((version & 0xfc00) >> 10), '-minor', str((version & 0x3f0) >> 4), '-micro', str(version & 0xF), '-DSaveSize=' + str(saveSize), str(dlcflag)] + command_cID)
if '' in dotcia_command_array:
    dotcia_command_array.remove('')
if '' in dot3ds_command_array:
    dot3ds_command_array.remove('')

if makecia == 1:
    print('\nBuilding ' + titleid + '.cia...')
    call(dotcia_command_array, stderr=STDOUT)

if make3ds == 1:
    print('\nBuilding ' + titleid + '.3ds...')
    call(dot3ds_command_array, stderr=STDOUT)

os.remove('rom.rsf')

if not os.path.isfile(titleid + '.cia') and makecia == 1:
    print('Something went wrong.')
    raise SystemExit(0)

if not os.path.isfile(titleid + '.3ds') and make3ds == 1:
    print('Something went wrong.')
    raise SystemExit(0)

print('Done!')