v10.0.21

[Satsuoni]

I have attempted to create a variation of KFXArchiver for MS Store version of the K4PC app (MSIXKFXArchiver1_15230.exe). Supported version in the name. Use link generator if MSStore does not give you the app for whatever reason, or figure out powershell.
The important differences and caveats are as follows:

• The tool creates a folder on your C: drive (C:\Data), and copies temp data there. That includes the whole of the installation of the App since for whatever reason I cannot read the dlls without copying them first. So that is about ~800MB of free space necessary (folder can be deleted after tool is done)
• Command line is mostly the same as KFXArchiver, without the fourth (version switcher one), but now they have defaults, so book folder defaults to the content folder of the app (c:\Users\User\AppData\Local\Packages\AMZNKindle.AmazonKindleReadingApp_xxxxx\LocalState\Classic\Content\), output folder defaults to archived_kfx and k4i file to oldbooks.k4i. if keyword default is used for value, it will pull from defaults. It can be run without any arguments at all, as well.
• It attempts to make a fake book and read it for secrets, so hopefully getting free books will not be necessary
• Probably other things that I don't remember
• As usual, works for me, may not work for thee, and provide the output of the tool if you are asking for help, please.

In addition, the artifacts of this release include kfxdedrm_kual.zip. It is a KUAL extension for jailbroken Kindles, which was tested on a variety of devices, so I am mostly satisfied, though I expect edge cases. It works better with KOReader since it uses output tool from it. But should work either way. Its default mode does need space for decrypted books, though, so be careful and maybe go into airplane mode before running it.

Note: The python version plugin did not have any real changes for this release.
Also, @jadehawk, you might be interested, so I am tagging you.
Edit: the issue with running it from non-C: paths should be fixed. Now it should generate Data folder depending on where it is run from
Edit 2 (2026/06/11): replaced copying folder with explicit file lists, hopefully would help with some encrypted file setups.

---

This discussion was created from the release v10.0.21.

[2778995958]

I'm encountering an issue here. I am running Windows 11 25H2.
I just ran it in cmd like this: MSIXKFXArchiver1_15230.exe

TpmManager: Secret unsealed from TPM successfully
QObject::startTimer: Timers can only be used with threads started with QThread
Kindle storage is 082E98C0
Secret tokens:
Could not get any secrets... Check TPM messages

[Satsuoni]

Hmm... Not normal, no. Let me check that...

[Satsuoni]

OK, Amazon is weird. That does seem to be the cause. I always ran it from C: (source/repos folder)

[Satsuoni]

OK, I made it write to the Data dir on the disk it is run from. That seems more flexible than the alternative of always writing to C:
MSIXKFXArchiver.zip
Please try and tell me if it works?

[2778995958]

Wow, we spent so much time troubleshooting, and it was a path issue all along!

I moved MSIXKFXArchiver into C:\Data and managed to get the .kfx-zip files successfully! Also, I tested your new version, and it now successfully generates the files on my E: drive as well.

Thank you so much for your patience, all your help, and for fixing this!

[Satsuoni]

The issue is that I have no idea how Amazon generates the path. Previous K4PC always generated storage in Local/ folder when I ran it outside. This one generated it in C:\Data and I just assumed it takes the root disk of its installation, but no~ I am not the one that chooses that folder, see?
I will update the release (and leave storage dump in for now)

[LplChen]

I have encountered an issue on Windows 11 25H2.

• The folder and file icons inside WindowsApps\KindleAPP have a padlock symbol in the top right corner. When I try to copy the folder using MSIXKFXArchiver1_15230.exe, it throws the error: Your organization does not allow you to place this file here.

• My computer has never been connected to a "Work or school account". I created a local user first and then logged in with a standard personal Microsoft account. A friend of mine, who is also logged into a Microsoft account on their PC, does not have these lock icons on their files and folders, and they can successfully complete the entire DeDRM process by obtaining permissions for the WindowsApps folder.

• I searched for various methods using Gemini to get permissions, but none of them allowed MSIXKFXArchiver1_15230.exe to copy the folder properly. Even when I use the command line to manually copy them to C:\data, the copied folders and files still retain the lock icon. After running a command to bypass the copy errors, the terminal outputs the following:
  Storage hdata: 17 nodesize: 16 amount: 1
Value: ??????zAnZiBaR??????
Could not get any secrets... Check TPM messages

• Afterwards, I used a VM to install Windows 11 LTSC on my computer, manually installed the Microsoft Store and the Kindle app to run a test. The folders and files inside WindowsApps\KindleAPP in the VM did not have the lock icon, and I was able to complete the entire DeDRM process normally.

[Satsuoni]

@LplChen

Perhaps the extraction tool needs to be modified to create the required folder structure in the current directory first, and then copy only the files over from those restricted directories.

It looks like your files are somehow encrypted for some reason. I hope you are not using EFS? Did you try either right click/take ownership of the folder (not give it Full control, but assign it to yourself) or remove "encrypt to preserve data"? Anyway, it seems like a valid enough concern. I will see what I can do, but as I have never seen a "padlock" on my folders or encountered such errors, I am somewhat baffled. I will probably try to read out necessary files and ten write them instead of copying, that sometimes works. I will add an executable for you to try when I am done.

@jadehawk , sadly it seems that the Amazon fallback for not having TPM is to crash and burn. Their logs suggested otherwise, but what do I know? Maybe it is Win11 only. I am not sure why they use TPM at all, still. And yes, typing out the version and the hash every time are bothersome... Maybe it tells you the reason in the log? (AMZNKindle.AmazonKindleReadingApp_m1sc522ngdk36\LocalState\logs\)

[LplChen]

After changing EFS from Not Defined to Not Allowed, the folders with the lock icon remained unchanged.

I cannot manually uncheck Encrypt contents to secure data for the subfolders and files inside the locked directory. It prompts the message: Error Applying Attributes: This machine is disabled for file encryption.

Right-clicking to take ownership throws an error :
An unexpected error is keeping you from applying properties to the folder. If you continue to receive this error, you can use the error code to search for help with this problem.
Error 0x8007177F: This machine is disabled for file encryption.

[Satsuoni]

Maybe it needs to be enabled to be removed?

[Satsuoni]

@LplChen Ok, try this abomination.
MSIXKFXArchiver.zip
I am done for today...

[LplChen]

Thanks, the new program works perfectly

[Dear-moon]

I was trying to get MSIXKFXArchiver to work, but it stopped because the required Kindle UWP version (1.0.15230) is no longer available anywhere, not even on store.rg-adguard.net.

Has anyone kept an installer of that specific version? If so, would you be able to dump and share the MSIX package for AMZNKindle.AmazonKindleReadingApp_1.0.15230.0_x86__m1sc522ngdk36?

Alternatively, if there's another way to dump it from an existing installation (via PowerShell or a tool like UWPDumper), I'd be more than happy to learn that as well.

Any pointers or files would be much appreciated. Thanks in advance!

[Satsuoni]

That is often a good idea, yes.

[Satsuoni]

@Dear-moon , this should work? Try...

[Dear-moon]

@Dear-moon , this should work? Try...

Amazing work. The new C++ compiled exe works perfectly and exports k4i and kfx-zip without issues.

[Satsuoni]

Keep the msix around in case they update again...

[LplChen]

Before installing the Kindle app, I changed the Where new content is saved option in the Storage settings from the system drive to another drive partition.

After that, I installed the Kindle app from the MSIX package. When I clicked to update it in the Microsoft Store, the update failed with the following message:

This app must be installed to the system drive, but that is not the default. Go to Storage > Change where new content is saved, select the system drive, and try the install again.
0x80073D21

If you want to prevent it from automatically updating in the background, you could give this a try.

[regisnox]

Is there any way to run this on Linux? I was trying to use it on my Linux machine but it fails and Proton version cannot connect to my Kindle. Are the any plans to make it available for Linux?

[Dear-moon]

Tested on a non‑jailbroken KPW4 running firmware version 5.18.1, the ebooks can be decrypted successfully. However, the ebooks on my device are relatively old, so this may not apply?

Edit: The reason I can't test whether newer ebooks can be decrypted is a bit awkward: Amazon China has withdrawn its service. However, I've noticed that despite the withdrawal, they are still actively pushing firmware updates to China‑version e‑ink devices, so the DRM algorithm should have been pushed along with them. Looking at it that way, maybe it could still work?

[Satsuoni]

I believe 5.18.1 is one of the FW left that does work, but I don't think it is the latest FW for your device? They only activated "sideloaded" DRM on 2 FW versions to my knowledge (5.12.2.2,5.16.2.1.1, but I am not sure, both the latest for some devices with discontinued upgrades), but they have the capability on the other FW versions as well. So 5.18.1 would be in "still works, but at risk" category.
Edit: There is also question of when the book was downloaded, of course. I think they started messing with DRM this year or last one.

[Dear-moon]

That's close. So maybe the best option for the OP is to jailbreak their Kindle. For newer devices, nosebleed should be relatively simple, but unfortunately it doesn't work on my KPW4. Meanwhile, adbreak obviously won't work on Chinese devices that can't refresh ads. I hope the information I've provided helps the OP.

[regisnox]

I have my old Kindle 1 will try to connect it and download books and see it that can work

[ElleKayEm]

A Kindle 1 will only have whatever was already downloaded to it. All of the oldest Kindles - Paperwhite 1 (5th gen) and older - were cut off last month.

[kaufmand]

It looks like they updated the app again. I just downloaded and installed the app, and now it is v1.0.16118.

Copying folder to make it accessible: C:\Program Files\WindowsApps\AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36 --> C:\Data
Trying to move to "C:\Data\AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36\KatxopoApp"
Success
Loaded QT lib from: C:\Data\AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36\KatxopoApp\Qt5Core.dll
MD5 of dsx120.dll not in supported map, check your App version (md5:db8035b8f8673ec4c3247161b5f57ded

[jadehawk]

@Satsuoni New release works perfectly for 16118. question, in the included Calibre DeDRM plugin, your included version is 10.0.18. Will you be updating the version number to match main tool release # (10.0.23) for future releases?

[Satsuoni]

Wait, is it? I don't think it is, let me check. I think it is .23? But technically, that should not matter since Calibre part did not change since the start of KFXArchiver usage. I think? Maybe some cosmetic tweaks, but nothing functional.

[jadehawk]

@Satsuoni
Nah. It was my fault. Current DeDRM_plugin.zip included does display 10.0.23, I reinstalled the older version 10.0.18 by mistake.
even if no changes are made in the Calibre plugin, it will be nice to keep the version updated, if possible, to match your release versions.

I can probably do this programmatically when packaging my script each time we update your tools. So do not think to much on it.

[Satsuoni]

@jadehawk, please be aware of the added fallback functionality (if it was ran before and Data folder not emptied, it will try scanning it for supported dlls and use those, since change in encryption/scrambling is not every version). That can fail if update did happen (or if somebody deleted half of dlls, I only check for one) It does spit out WARNING in the logs for that.
Hmm, I might as well reiterate, just FYI... IIRC

• Book error 14 - Book not KFX but earlier format, this tool does not work, k4i should be used. (maybe I can vibecode port from dedrm plugin proper, ha)
• Book error 31 - credential do not match. Book is from different login/device/etc.
• Book error 32 - DRM version is not supported, book is either from another device (like Mac/iOS, Android, etc) or version used for decryption too old.

[anil4523]

@agentxan , try this new release, it should search Data folder.

Work Perfectly..... Genius..... Thanks

[jarsondsantos-debug]

Hi guys, is this guide still working?

https://techy-notes.com/remove-drm-from-kindle-ebooks/

[jadehawk]

@Satsuoni P.S. That KUAL Plugin worked like a charm!

[2778995958]

@Satsuoni
If you're saying there's nothing new in the update, I'm guessing it's an update for regional availability. This is because the initial version (15230) couldn't even be downloaded using non-US VPN IPs. Version 16034 added download support for the regions of some of my friends, but Japan (JP) was still unsupported. It wasn't until this current 16118 version that Japan finally got download support.

[Satsuoni]

... Did not stop me from downloading it, now did it? And I was not using VPN, either. (I am in Japan) When I say "nothing new", I mean in context of the tool. They might have fixed some of the UI bugs people complained about, I would not know. And maybe they disabled it on Win10, since it is no longer lists that as supported. But the parts that touch my work did not change. In general, I might recommend downloading MSIX bundle and installing it outside store, for both simplicity and preservation of older versions.

[Dear-moon]

@Satsuoni Not sure about the auto-update. However the version installed on Laptop is via Windows store directly and it has NOT force me to update yet. I do however have Windows Store updates delayed for 5 weeks.

I do remember that you can use Group Policy to disable automatic updates for the Microsoft Store because I've set it up before, and it actually worked without preventing manual updates. But I've forgotten exactly which policy it is.

[Dear-moon]

@Satsuoni If you're saying there's nothing new in the update, I'm guessing it's an update for regional availability. This is because the initial version (15230) couldn't even be downloaded using non-US VPN IPs. Version 16034 added download support for the regions of some of my friends, but Japan (JP) was still unsupported. It wasn't until this current 16118 version that Japan finally got download support.

That makes sense. When I was using version 16034, I kept failing to download it with a JP VPN, but it worked fine with a HK IP address. I've never used version 15230 myself, so I can't provide any information about that.

[jaan143]

@Satsuoni so this new Release of your setup will work latest k4pc which version is using in usa and uk and will available worldwide after 30th june ?

[jadehawk]

@jaan143
No. this version is strictly for the Windows Store (MSIX) Amazon Kindle Reading App version currently 16118. Currently only runs on Win 11 and needs TPM.

[jaan143]

@jadehawk with this setup we can get KU books in epub or pdf format ?
doesn't matter k4pc which version is current and we don't it ?
we just need windows store (MSIX) Amazon kindle Reading app version 16118 only and that can get evan latest KU books ?

Thanks for your help

[jadehawk]

@jaan143

Needs MSIX 16118 (as of today)
Doesn't matter if you have OLD K4PC installed.

You works on all books, except Text Books(School stuff). No PDF.

Best to try it yourself.

[ElleKayEm]

Once you get the DRM off, you can convert to whatever format you want. Just FYI, when you remove the DRM from KU books the author doesn't get paid.

[DavidNSB]

I ran into the same issue with 1.0.16118 where the dsx120.dll gives:

MD5 of dsx120.dll not in supported map, check your App version (md5:db8035b8f8673ec4c3247161b5f57ded

[DavidNSB]

I'm running the tool vanilla from the command line. No options given. The AMZN Kindle version is reported as 1.0.16118 updated June 10, 2026. If I revert to 1.0.15230, there is no error. The faulting dsx120.dll shows a version of 3.0.0.50 while the version from 15320 shows a version of 3.0.0.46.

Matched Full Name: AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36

Install Path: C:\Program Files\WindowsApps\AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36
AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36 --> C:\Program Files\WindowsApps\AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36
Kindle keys folder C:\Users<username>\AppData\Local\Packages\AMZNKindle.AmazonKindleReadingApp_m1sc522ngdk36\LocalCache\Local\Microsoft\Crypto\PCPKSP\ does not appear to exist. Ensure that you are logged in. It may also happen if you don't have TPM, so continuing.
Storage at: C:\Users<username>\AppData\Local\Packages\AMZNKindle.AmazonKindleReadingApp_m1sc522ngdk36\LocalState\Classic\Data\storage
Reg data at: C:\Users<username>\AppData\Local\Packages\AMZNKindle.AmazonKindleReadingApp_m1sc522ngdk36\LocalState\registration_data
copying ".kinf2024" to "C:\Data\storage\.kinf2024"
copying "main_shared.blob" to "C:\Data\storage\main_shared.blob"
copying "main_shared.blob.sha256" to "C:\Data\storage\main_shared.blob.sha256"
copying "main_shared.salt" to "C:\Data\storage\main_shared.salt"
JSON successfully parsed!
DSN: "0F4429E59288396205EA172B8273D92B"
[+] Success: Decrypted data saved to "C:\Data\decrypted_registration_data.dat"
Found malloc
TargetHookRVA 8a716430
Found free
TargetHookRVA 8a716630
Found memcpy
TargetHookRVA 92df6830
Found NCryptOpenKey
TargetHookRVA 95b56a80
Found NCryptDecrypt
TargetHookRVA 95b56aa0
Found NCryptCreatePersistedKey
TargetHookRVA 95b56ba0
Found NCryptEncrypt
TargetHookRVA 95b56c30
Copying folder to make it accessible: C:\Program Files\WindowsApps\AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36 --> C:\Data
Trying to move to "C:\Data\AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36\KatxopoApp"
Loaded QT lib from: C:\Data\AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36\KatxopoApp\Qt5Core.dll
MD5 of dsx120.dll not in supported map, check your App version (md5:db8035b8f8673ec4c3247161b5f57ded

[jadehawk]

@DavidNSB
Did you Re-Download the books you tested with version 16118?
Books downloaded with previous version of MSIX stay encrypted with that particular version (So I understand). Try 16118, delete and redownload books. run tool again.

[DavidNSB]

Edit: Did a complete uninstall and wipe of the data directories for both the KIndle apps. Reinstalled, removed and recreated the Data directory, copied the MSIXKFXArchiver1_16118.exe into the Data directory and ran. All went happily and the 4 books I downloaded after the re-install were importable to calibre.

[Satsuoni]

Looks like you were running MSIXKFXArchiver1_16108 or below? Not the latest one.

[DavidNSB]

Entirely possible. I would have corrected that during my wipe and reinstall.

[jadehawk]

@Satsuoni
Got asked this on an email.
User running:
Windows 11 Home (Windows-11-10.0.26200-SP0)
MSIX 16118
TPM Installed and CONFIRMED Ready via "tpm.msc"

It seems like a TPM issue, I had user reset/clear TMP (They aren't using BitLocker) and reboot, redownload book and try again, that did not work.

User tested same install on another machine, with no issues.
Any ideas? Thx

Windows event log provided:

event log:
Log Name:      System
Source:        Microsoft-Windows-TPM-WMI
Date:          16.06.2026 12:38:23
Event ID:      1040
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      Aurora-Joerg
Description:
Pre-attestation health checks confirm a critical component has failed, and the device is not expected to pass attestation.
 Please see C:\WINDOWS\Logs\MeasuredBoot\0000000451-0000000000.json for detailed information on what checks were made.
Event Xml:
<Event xmlns="[http://schemas.microsoft.com/win/2004/08/events/event](https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fschemas.microsoft.com%2Fwin%2F2004%2F08%2Fevents%2Fevent&data=05%7C02%7C%7Ca753a5dc7b2946113cd208decb99f9df%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C639172059483309305%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=zTjlFmesZzQZrEkvGbEX9qJlvr68obI6URX9Pa0VL%2BE%3D&reserved=0)">
  <System>
    <Provider Name="Microsoft-Windows-TPM-WMI" Guid="{7d5387b0-cbe0-11da-a94d-0800200c9a66}" />
    <EventID>1040</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2026-06-16T10:38:23.3248214Z" />
    <EventRecordID>98954</EventRecordID>
    <Correlation />
    <Execution ProcessID="2824" ThreadID="9880" />
    <Channel>System</Channel>
    <Computer>Aurora-Joerg</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="Path">C:\WINDOWS\Logs\MeasuredBoot\0000000451-0000000000.json</Data>
  </EventData>
</Event>

Error log capture by my script:

======================================================================
RAW DEBUG LOG - 01_EXTRACTION PHASE
======================================================================
Script Version:    MSIX.2026.06.12.JH
Satsuoni's Tools:  10.0.23
Log Created:       2026-06-16 13:03:00
Run ID:            RUN_20260616_130259
Platform:          Windows-11-10.0.26200-SP0
Python:            3.14.6
Admin Rights:      YES (elevated)
Extraction Mode:   MSIX Mode - MSIXKFXArchiver (Windows Store App v1.0.16118.0)
======================================================================

----------------------------------------------------------------------
[13:03:45] Book: B0FNJ3915V - B0FNJ3915V
Command: D:\Downloads\KindleBooks\DeDRM_MSIX\code\tools\MSIXKFXArchiver1_16118.exe D:\Downloads\KindleBooks\DeDRM_MSIX\temp_extraction D:\Downloads\KindleBooks\DeDRM_MSIX\Extracted_Books D:\Downloads\KindleBooks\DeDRM_MSIX\Keys\kindlekey.k4i
----------------------------------------------------------------------
STDOUT:
Scanning 421 registry keys for: "AmazonKindleReadingApp"...

Matched Full Name: AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36
--------------------------------------------------
Install Path: C:\Program Files\WindowsApps\AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36
AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36 --> C:\Program Files\WindowsApps\AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36
Making key(s) accessible
Could not openNo such file or directory
 Could not open file "C:\\Users\\joerg\\AppData\\Local\\Microsoft\\Crypto\\PCPKSP\\d8c37e00045ea5de98d93811f777d227040edd50\\4111**HIDDEN**3b17ac83.PCPKEY" For writing No such file or directory
 copying "85ecbbd3**HIDDEN**e40402add" to "C:\\Users\\joerg\\AppData\\Local\\Microsoft\\Crypto\\PCPKSP\\85ecbbd3**HIDDEN**e40402add"
Storage at: C:\Users\joerg\AppData\Local\Packages\AMZNKindle.AmazonKindleReadingApp_m1sc522ngdk36\LocalState\Classic\Data\storage\
Reg data at: C:\Users\joerg\AppData\Local\Packages\AMZNKindle.AmazonKindleReadingApp_m1sc522ngdk36\LocalState\registration_data
JSON successfully parsed!
DSN: "****HIDDEN****"
[+] Success: Decrypted data saved to "D:\\Data\\decrypted_registration_data.dat"
Found malloc 
TargetHookRVA 896361b0
Found free 
TargetHookRVA 896363b0
Found memcpy 
TargetHookRVA 8b9465b0
Found NCryptOpenKey 
TargetHookRVA 8c386800
Found NCryptDecrypt 
TargetHookRVA 8c386820
Found NCryptCreatePersistedKey 
TargetHookRVA 8c386920
Found NCryptEncrypt 
TargetHookRVA 8c3869b0
Copying folder to make it accessible: C:\Program Files\WindowsApps\AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36 --> D:\Data
Trying to move to "D:\\Data\\AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36\\KatxopoApp"
Success
Detected installed Kindle version 
Loaded QT lib from: D:\Data\AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36\KatxopoApp\Qt5Core.dll
Loaded dsx120 lib from: D:\Data\AMZNKindle.AmazonKindleReadingApp_1.0.16118.0_x86__m1sc522ngdk36\KatxopoApp\dsx120.dll
Going back to cwd 1
Lucene 79C76B60
[+] Successfully patched spatch
Alg RSA name KindleForPC_SS_Probe
NCryptCreatePersistedKeyFake result: 0
Kindle storage is 0770C4A0
Storage hdata: 0 nodesize: 0 amount: 0
Secret tokens: 
Could not get any secrets... Check TPM messages

STDERR:
Error copying "85ecbbd3**HIDDEN**e40402add": The specified file could not be encrypted.
TpmManager: Failed to open TPM key
SecureStorageV9: TPM unseal failed, preserving blob for retry
TpmManager: Failed to open TPM key
SecureStorageV9: TPM unseal failed, preserving blob for retry

Exit Code: 4294967291
======================================================================

[Satsuoni]

Hmm, this is tricky. Looks like it fails... something and uses a different key, but the key does not copy properly due to EFS, and my EFS bypass only works for the key that I know about? I will need to look at it.

[jadehawk]

@Satsuoni User got it running on another machine and is debating whether to reformat and start fresh (Win 11 Full install) on the machine that is giving issues.

Figured you may have more Insite, thank you anyways for looking at the code.

[Satsuoni]

I mean, user can try copying the key folder manually with robocopy, that might help? Somewhere in C:\Users\joerg\AppData\Local\Packages\AMZNKindle.AmazonKindleReadingApp_m1sc522ngdk36\ there is a key folder, probably LocalCache\Local\Microsoft\Crypto\PCPKSP\ . It (its contents) needs to be copied to C:\Users\joerg\AppData\Local\Microsoft\Crypto\PCPKSP\, then it might work? I do need to know which keys are in there if I were to add this bypass to the source. It seems like a rare case. EFS is a blight. Ugh.

[colehill]

Does the new version of the Kindle Windows client only support Windows 11?

Right now, I can only find it in the Microsoft Store, and after downloading it on my Windows 10, it says the system is not supported. Is there any way to fix this?

[DavidNSB]

The MSIX bundle for 15230 can be downloaded from: https://drive.google.com/file/d/1bLDc0yJVAZK-Aws0P64BmxoW_BvvsmNG/view?usp=drive_link for the next couple of weeks at least.

The MS Store version needs at least Windows 11 21H2 to install.

[cristobalmendez901-creator]

Hello, I keep getting a: Unable to resolve book's title error on all the books I try to download.

[Satsuoni]

When does that error appear? If it is in the app itself, complain to Amazon... The tool only works after books are downloaded.

[cristobalmendez901-creator]

To clarify: the error is not appearing inside the Kindle app itself. Kindle for PC is working normally.

The books are downloaded in Kindle for PC, they open normally, and I can read them offline without internet.

The errors appear only when I run KFXArchiver from Command Prompt.

My current setup:

• Windows 11
• No physical Kindle device
• Kindle for PC / Legacy Kindle for PC 2
• KFXArchiver291.exe
• Running from normal Command Prompt, not as administrator
• Tool folder: C:\KindleTool
• Kindle content folder: C:\Users\crist\OneDrive\Documents\My Kindle Content
• Output folder: C:\KindleTool\Output291

The full command I am currently using is:

KFXArchiver291.exe "C:\Users\crist\OneDrive\Documents\My Kindle Content" "C:\KindleTool\Output291" "C:\KindleTool\KindleKeys291.k4i"

The tool detects Kindle correctly:

Found Kindle executable of version Kindle 2.9.1(71006)

But then it stops here:

Tokens
Could not get account tokens from storage, aborting

So with KFXArchiver291, the current problem is not “Unable to resolve book’s title” anymore. The current blocker is:

Could not get account tokens from storage, aborting

Earlier, before switching to KFXArchiver291, I was getting errors like:

B0CW1H1QVQ - Unable to resolve book's title
B097TWK5MH - Unable to resolve book's title

But after updating to KFXArchiver291, the process now aborts earlier at the account tokens step.

The output folder remains empty.

Also, the _EBOK folders inside My Kindle Content look very small, around 184 KB, even though the books are readable offline in Kindle for PC.

So the clean current situation is:

1. Kindle app works.
2. Books are readable offline.
3. KFXArchiver291 detects Kindle 2.9.1(71006).
4. KFXArchiver291 aborts with: Could not get account tokens from storage, aborting.
5. Nothing is written to the output folder.

[Satsuoni]

@cristobalmendez901-creator This is not a KFXArchiver291 discussion... But OK. I am not sure what is going on. Ensure that Kindle 2.9.1 is logged in, of course. (In case you did not open it after update). Try copying your books off the network storage, it sometimes does not work (not sure how OneDrive is mounted). Check if you have .kinfo2024 in AppData\Local\Storage and compare it to the one in Amazon Kindle folder. Also, does it output DSN? Is it non-empty?

[SouthJade47]

Running MSIXKFXArchiver on Kindle for Windows 1.0.16118, Windows 11 Home, Microsoft account.

Tool successfully found the app, copied files, and decrypted registration data, but exited with:

MD5 of dsx120.dll not in supported map, check your App version (md5:db8035b8f8673ec4c3247161b5f57ded)
Full output available if needed.

[Satsuoni]

@SouthJade47, the line MD5 of dsx120.dll not in supported map, check your App version (md5:db8035b8f8673ec4c3247161b5f57ded means that you were running the older version, yes. Not sure which one. Maybe I should print supported md5. Use the latest one and see. I stick numbers to the end of the file name for a reason... (yes, they all compile to MSIXKFXArchiver.exe for me, but I manually stick latest supported version for convenience)

[Satsuoni]

@cristobalmendez901-creator This is a silly question, but have you confirmed that that your version of Kindle for PC is logged into amazon, tool (AFAIK) reads tokens from your kindle app, but this app needs to be sign into amazon and be registered in amazon.

You can confirm by deleting and redownloading a fresh set of books while on K4PC Version 2.9.1.

If you still get the error, then We must await @Satsuoni for input here.

Yes, that was my question as well. It either cannot read token storage or it is empty.

[cristobalmendez901-creator]

Yes, I confirmed that Kindle for PC 2.9.1 is logged into my Amazon account and registered.

I can see my Kindle library inside the app. Sync works. I can remove a book from the device, download it again inside Kindle for PC 2.9.1, open it, and read it offline without internet.

So Kindle itself appears to be signed in, registered, and working correctly.

However, KFXArchiver291 still aborts with:

Could not get account tokens from storage, aborting

The tool also detects Kindle correctly:

Found Kindle executable of version Kindle 2.9.1(71006)

So the issue seems to be that KFXArchiver291 detects the Kindle installation, but still cannot read the account tokens from storage, even though Kindle is logged in and registered.

[SouthJade47]

@SouthJade47 yes run it.

Post output again if it doesn't work and we wait on Satsuoni input

v10.0.23 worked successfully. Book imported into Calibre with no DRM errors. Thanks for the assist.

[jadehawk]

@cristobalmendez901-creator
Out of ideas..
However you are on Win 11, why not transition to the latest MSIX Kindle version instead?
Install the current Windows store version of Amazon Kindle Reading app (16118).
You already have the tool needed "MSIXKFXArchiver1_16118.exe" Tool needs no parameters.
If you run it from "C:\KindleTool" a new folder called "archived_kfx" will be generated with the decrypted books inside instead of trying to run the older version for K4PC. Is going to die on June 30 anyways and you will need to use MSIX version in the future.

Just make sure to download fresh book using MSIX kindle version before running tool