Hacking rxTools with Signatures patched out!

[samiam144]

Thank you. But damn I wish I found this a few hours ago before I downgraded to 4.5...

Did you already install devmenu with palantine? You can still use the palantine-less method. If you really want to go back, use the gateway menu to restore your nand backup to 9.x (or whichever version you were on)

 

[Adeka]

Thank you. But damn I wish I found this a few hours ago before I downgraded to 4.5...

downgrading is totally worth it.

The mset exploit is sooooo much better then the web browser

 

[leerz]

sorry, but i dont have time to skim through the 66 pages, is this sysnand compatible too?

yes, up to 9.2 only via spider

 

[godstriker8]

downgrading is totally worth it.

The mset exploit is sooooo much better then the web browser

I got saves off my cartridge I wanna use. No way I'm restarting Smash or Pokemon

 

[VerseHell]

May I attach this to the OP?

Fine for me.

 

[godstriker8]

Alright, thanks to zoogie and his tool, we may found a way to install FBI on a 2DS :

Download this pack : http://jheberg.net/captcha/fbi-injection/

1. Use the gateway launcher.dat to create your emunand (format emunand, backup your sd card content first
2. Setup rxTools : http://www.rxtools.net/#!howto (replace the rxTools.dat with one of the patched one)
3. Use rxTools to get your nand xorpad (Decryption Options -> Generate fat16 Xorpad). Put it on the FBI injection folder
4. Open emunand tool, choose extract emunand then choose the FBI injection folder for the destination
5. Drag and drop your emunand on dragNandDumpForFat16.bat
6. When it's done (Ignore the error if you get one) , execute decrypt.bat
7. Execute the MAKE_FBI_NCCH which match your console region. It will generate a 0000000X.app file.
8. Open WinImage.
9. Drag and drop the emuNAND.fat16.bin.out on the program then click on OK
10. Go to title/0040010/00022300/content for a EU console or title/0040010/00021300/content for US one.
11. Delete the 0000000X.app inside. (You can extract it first if you want)
12. Click on Image->Inject then choose your own 0000000X.app.
13. Save and close WinImage.
14. Execute reencrypt.bat
15. Restore your emunand with emunand tool.
16. Boot on the emunand with rxTools. Select Health & Safety app. FBI should boot instead.

Tested it on a 4.2 O3DS and it works fine, so it should work on a 2DS too.

WinImage can't read the file, is there an alternative program?

 

[samiam144]

WinImage can't read the file, is there an alternative program?

Are you dragging it onto the exe or into the program itself?

 

[pakrett]

Wait... I can boot into Palantine using RXTools?! How? Does it have a better success rate?

No you can boot rxtools through the profile exploit like palantine that's what I say.
But palantine is over -> switch to rxtools, last updated emunand with sign check disable !

 

[godstriker8]

Are you dragging it onto the exe or into the program itself?

I tried both ways, none of the worked. Dragging onto the exe just makes it start normally, as if I had just double clicked on the exe. Also, trying to open the file as an image gives an error.

The emunand.fat16.bin and emunand.fat16.bin.out are both 0 kb, is that normal?

 

[pakrett]

sorry, but i dont have time to skim through the 66 pages, is this sysnand compatible too?

Yes, if you doesn't have an emunand partition on your sd card the rxMode will boot on sysnand without sign check.

 

[samiam144]

I tried both ways, none of the worked. Dragging onto the exe just makes it start normally, as if I had just double clicked on the exe. Also, trying to open the file as an image gives an error.

The emunand.fat16.bin and emunand.fat16.bin.out are both 0 kb, is that normal?

Yeah, that's not normal. Is your xorpad also 0kb? If not, try again from step 5. If yes, try again from step 3.

 

[godstriker8]

Yeah, that's not normal. Is your xorpad also 0kb? If not, try again from step 5. If yes, try again from step 3.

XORPAD is like 750mb around there. Anyways, I think I found the problem, when I drag onto the dragnanddumpforFAT16.bat it says "The system cannot find the path specified" so I dunno what to do now.

 

[samiam144]

XORPAD is like 750mb around there. Anyways, I think I found the problem, when I drag onto the dragnanddumpforFAT16.bat it says "The system cannot find the path specified" so I dunno what to do now.

Okay I ran into this too. Right-click "dragnanddumpforFAT16.bat" and click Edit.

Copy everything in it and paste it into a new txt file.

Rename the txt file to something like "nandfat16.bat" (make sure it is .bat, not .bat.txt or whatever) and place it in the same folder where dragnanddumpforFAT16.bat is

Try dragging the xorpad into that new file

 

[godstriker8]

Okay I ran into this too. Right-click "dragnanddumpforFAT16.bat" and click Edit.

Copy everything in it and paste it into a new txt file.

Rename the txt file to something like "nandfat16.bat" (make sure it is .bat, not .bat.txt or whatever) and place it in the same folder where dragnanddumpforFAT16.bat is

Try dragging the xorpad into that new file

Copying and pasting into a new file results in the same thing. Also, I think you meant to say drag the emunand into the new file. Either way any input results in a 0kb file.

 

[VerseHell]

Put this bat in your FBI injection folder and try to run it as admin.

 

[godstriker8]

Put this bat in your FBI injection folder and try to run it as admin.

Still cannot find the path specified

 

[VerseHell]

Does your emunand.bin is in the same folder?

 

[godstriker8]

Does your emunand.bin is in the same folder?

yep

 

[VerseHell]

You can also try to do it with 3DSFAT16tool.py, open a windows cmd in the FBI injection folder and type

3DSFAT16tool.py -d emunand.bin emunand.fat16.bin

 

[godstriker8]

You can also try to do it with 3DSFAT16tool.py, open a windows cmd in the FBI injection folder and tyoe

3DSFAT16tool.py -d emunand.bin emunand.fat16.bin

Thank you, I used the C port of the app and it seems to be working