Hacking [Release] rxTools - Roxas75 3DS Toolkit [fw 2.0 - 9.2]

[Slushie3DS]

Is the original post outdated, or is this version still 2.1? I was curious if you had changed anything to maybe help the 9.2 boot problem.

 

[lPolarisl]

Still 2.1, but a new version should be up in a few days which will fix the 9.2 boot problem.

 

[Apache Thunder]

I'm curious as to if the TWL partition decryption will ever be fixed.....

 

[froggestspirit]

Roxas75 If you have time, I think a RAM dumper, injector, and editor would be very nice. maybe let it specify the region of RAM it dumps/injects, and then the editor could be like a basic hex editor?

 

[Zidapi]

So I did everything, booted up emuNAND, and then checked the system settings, it said RX-... as it should. But when I quit system settings and came back, it was back to Sysnand. If I had updated there I'd get into trouble... Is that normal behavior?

just some thoughts; if you leave the Settings menu, will it do a Firm reboot ?

The 3DS always reboots after exiting the Settings app even in sysNAND, it's only now that you're running emuNAND that you're aware of it.

Check for the RX E, then make your way to the update option, after updating the system will reboot kicking you back into sysNAND.

Roxas, Im curious to wonder if rxTools would support New3DS through OOT?

The problem is Roxas doesn't have a new3DS test support on.

He may be able to do it blindly with a team of testers when it's been documented further, but would you volunteer? I wouldn't.

 

[plasma]

The 3DS always reboots after exiting the Settings app even in sysNAND, it's only now that you're running emuNAND that you're aware of it.

Check for the RX E, then make your way to the update option, after updating the system will reboot kicking you back into sysNAND.


The problem is Roxas doesn't have a new3DS test support on.

He may be able to do it blindly with a team of testers when it's been documented further, but would you volunteer? I wouldn't.

I was asking on behalf of a friend as he wants to decrypt his NAND on his N3DS haha

 

[gudenau]

The github is not up to datemit seems...

 

[laramie]

The 3DS always reboots after exiting the Settings app even in sysNAND, it's only now that you're running emuNAND that you're aware of it.

Check for the RX E, then make your way to the update option, after updating the system will reboot kicking you back into sysNAND.


The problem is Roxas doesn't have a new3DS test support on.

He may be able to do it blindly with a team of testers when it's been documented further, but would you volunteer? I wouldn't.

I already offered to do the N3ds and I have a hard mod on mine. He respectfully declined that though.

 

[Fishaman P]

The github is not up to datemit seems...

If you're thinking the source to the CFW itself is on Github, you'd be mistaken.

 

[Zidapi]

I already offered to do the N3ds and I have a hard mod on mine. He respectfully declined that though.

That's too bad.

 

[Roxas75]

Updated to v2.2!
Changelog:

• Updated the launching method to the one used by Gateway 3.1. This should hopefully fix the KOR bug when booting rxTools.

• Changed the ticket dumping method : Now the whole ticket.db is dumped, to evoid errors (ticket_emu.db for emuNAND). This slows down a bit the dumping process.
• Fixed a bug that in certain cases made the rxMode booting endless
• Fixed a graphical glitch in the Partition Injection function

Enjoy!

 

[bbmax]

thx

 

[AtlanticBit]

Updated to v2.2!
Changelog:

• Updated the launching method to the one used by Gateway 3.1. This should hopefully fix the KOR bug when booting rxTools.

• Changed the ticket dumping method : Now the whole ticket.db is dumped, to evoid errors (ticket_emu.db for emuNAND). This slows down a bit the dumping process.
• Fixed a bug that in certain cases made the rxMode booting endless
• Fixed a graphical glitch in the Partition Injection function

Enjoy!

so i'll have two on my sdcard XD

 

[bbmax]

Roxas75
have used ver 2.1 to dump my Emunand 9.2.0-8E got size 965632KB extracted via emunandtool same emuand got 976896KB booth files are identical when comparing in HxD

its used some compresion?

 

[Roxas75]

Nope, it just extracts the nand with an hardcoded size.

 

[Stella0219]

Updated to v2.2!
Changelog:

• Updated the launching method to the one used by Gateway 3.1. This should hopefully fix the KOR bug when booting rxTools.

• Changed the ticket dumping method : Now the whole ticket.db is dumped, to evoid errors (ticket_emu.db for emuNAND). This slows down a bit the dumping process.
• Fixed a bug that in certain cases made the rxMode booting endless
• Fixed a graphical glitch in the Partition Injection function

Enjoy!

I'll try right away~!! Great job !! Will post after~!

 

[V3NUS_M1NER]

Explanation​

​

Hello guys!
Today i introduce you this little project of mine i started a week ago.
This is supposed to be a complete collection of all the useful tools for 3DS hacking, and you are free to ask new features for the future updates! Also, report any buf you'll eventually find too.
This is supposed to work on any firmware version between 2.0 and 9.2.

It now boots as rxTools.dat, so you can use both this and Gateway Launcher.dat.
Here there is the QR code that link to the exploit page:

Also, it supports emuNAND reading, and the use of slot0x25KeyX.bin (Google for it), necessary for newer titles decryption.
It will show in the left-bottom corner of the screen if they are successfully loaded by printing them in green.

Tools​

So, here we go with the utilities rxTools can offer.

• rxMode : See below for details
• Decrypt CTR Titles : That's something new. Right now the titles/rom decryption has been done with the xorpad-method, but that's different. What this does, is decrypting every title/rom present in your SD. It will search trough the folders, except the "Nintendo 3DS" one, and it will patch the NCCH header too, so it will appear completely plaintext, like homebrews. This should speed up the CIA generation methods here around.
• Decrypt Title Keys : Right now, everyone who wanted to obtain his private title keys had to dump ticket.db from the NAND, and then use many scripts to decrypt. This does all the steps in one.
  It will create the decTitleKeys.bin in your SD card, ready for scripts like cdn-download.
• Dump Tickets : This dumps the whole ticket.db file from your sysNAND and from your emuNAND, if it's present.
  It works great with the FunkyCIA script.
• Generate Xorpads : For the nostalgic ones, here it is the xorpad utility too. It will open ncchinfo.bin and SDinfo.bin. You can use the scripts in the package to generate them with your title/sd informations.
• NAND Features :
  • Create NAND dump : For both sysNAND and emuNAND. An essential. Not that special, it will simply make a backup of your system NAND in you SD card.
  • Decrypt NAND Partitions : For both sysNAND and emuNAND. This will dump TWLN, TWLP, AGB_SAVE, FIRM0, FIRM1, CTRNAND partitions from your system NAND, totally decrypted in your sdcard.
    TWLN, TWLP and AGB_SAVE have been cutten out, for now they a
  • Generate fat16 Xorpad : As i've been asked, here is the old function that creates the xorpad for the NAND fat16 partition. It's console-unique, and you can use it for every NAND dump of yours.
  • Dump System Titles : For both sysNAND and emuNAND. This will search through your entire ctrnand for all the CTR titles it can find. So even the ones hidden from the filesystem can appear. Since the ctrnand is pretty big itself, it can take a while.
    Since they are CTR titles, you are free to move them in the root of your sdcard and use CTRDecryptor to decrypt them all.
  • Inject NAND partitions : As requested, here it is a function that can inject back the decrypted partitions created with the previous fuctions. It only supports EmuNAND for now, becouse i don't want to cause bricks everywhere. If you really want support for sysNAND too, i need some hard-modded beta-testers.

rxMode​

​

rxMode is probably the first free custom firmware for the Nintendo 3DS.
Since it's part of rxTools, it is bootable from the main menu.


How it works :
It supports all Gateway emuNAND up to the latest version (9.5.0-23 right now). It will boot in emuNAND in automatic, if it is present in your sdcard.

To make it work, you need to put the firmware.bin file in the root of your sdcard, just like rxTools.dat; the problem is that it contains material protected by copyright, so it's illegal to share this file, though we can legally download it from the Nintendo CDN. I included a simple tool that does it for you (with sources) : click on cdn_firm.exe and it will download the file for you.

Note : To boot emuNAND 8.0 or higher, or to play newer games, you need
slot0x25KeyX.bin in the root of your sdcard too, if you are on a sysNAND below 7.0.

Features :

• Full and free EmuNAND support, up to the latest version
• Access to the eShop and to online playing (requires an updated emuNAND)
• Support for 100% of the games (newer ones will require emuNAND)
• Support for sysNAND, in case an emuNAND is not found

As for now it doesn't patch signature checks, so no piracy or homebrews. Also, Ninjhax will not work while in rxMode.

The main scope for now is to give people free emuNAND support without the need of a flashcard.

FAQs:

• How do i know if i'm in sysNAND or emuNAND?
  • Check in System Settings, near the system version. RX-S stays for sysNAND, while RX-E stays for emuNAND. Be sure to be in emuNAND before updating.
• Does this boot roms or homebrews? Any plan?
  • Not now. Too early to say.
• Can i use flashcards with this?
  • Sky3DS should work, no other will work. This is like a Classic Mode.
• Does it work on New3DS?
  • No. I have no plans for it right now.
• Can i fill your mail/pm-box with silly questions?
  • No you can't, i'll rape you all.

Download​

​

Since it now is a custom firmware too, rxTools will close his sources.
But i promised to show the sources of the tools, so i'll continue to keep the GitHub repo updated excluding the cfw side. Just i'll be slower than before to do it.

• rxTools [v2.2] ---> Download!
• Github Repo ---> https://github.com/roxas75/rxTools

Enjoy!​

[Roxas75]​

Does this boot 3DS retail carts, or is it only for legal CIAs? If it works with carts, I can finally play Alpha Sapphire ans Smash again!

 

[Doumekxkai]

Does this boot 3DS retail carts, or is it only for legal CIAs? If it works with carts, I can finally play Alpha Sapphire ans Smash again!

Nop, it's only like GW classic mode.

"As for now it doesn't patch signature checks, so no piracy or homebrews. Also, Ninjhax will not work while in rxMode."

 

[V3NUS_M1NER]

Nop, it's only like GW classic mode.

"As for now it doesn't patch signature checks, so no piracy or homebrews. Also, Ninjhax will not work while in rxMode."

I was asking if it supported retail cart booting in sysNAND 4.x (emuNAND of course), with carts that require 7.x+. Sorry, probably worded that incorrectly

 

[Roxas75]

I was asking if it supported retail cart booting in sysNAND 4.x (emuNAND of course), with carts that require 7.x+. Sorry, probably worded that incorrectly

Yes, and all the games up to date should work.