Hacking rxTools with Signatures patched out!

[zoogie]

Ok, double checked 8.1 and can confirm it totally works with installing FBI to H&S. This is using xorpad nand injection on both possible US H&S versions, 1026 and 2051.

Need someone else to give 8.1 a spin on EUR systems. Viva la 2DS.

 

[Vappy]

That would restore some hope for 2ds (via a dangerous downgrade admittingly).

But how do you downgrade a 2DS without already having some method of running homebrew or installing .cias?

 

[VerseHell]

Wait, I never said that in my post.

 

[zoogie]

But how do you downgrade a 2DS without already having some method of running homebrew or installing .cias?

That's my brain derp.

Anywho, testing 9.0 now, maybe I'll get lucky.

 

[Vappy]

Wait, I never said that in my post.

Sorry, fucked up the quote
Hope you can get 9.2 working, but even if not, it's still an option for plenty of 2DS owners on lower firmwares.

 

[Falo]

Can you explain us what have you done exactly?

All what i did was replace 00000008.app with the FBI app file, but i used my own decryption/encryption tools and OSFMount instead of WinImage, but this doesn't make a difference, just easier for me since i only need like 4 steps to modify any file on the emunand and i don't need to work with bat/python files.

If you talk about the cmd part, there is a cmd folder and a *.cmd file, this is actually read by the 3ds to identify files.
The "nand" cmd files don't have a checksum, so you can easily modify them.

File Structure:
4 byte = *.cmd filename
4 byte = number of contents1
4 byte = number of contents2
14 byte = empty
4 byte * number of contents1 = *.app filename(s)
4 byte * number of contents2 = *.app filename(s)

The icon not showing up is a different issue and doesn't have anything to do with the filenames.

 

[VerseHell]

Yeah I misread your post, I thought you modified the cmd file but you just renamed the app file.
But why you don't want to downgrade? You can still restore your nand backup if you want at the end. :/

 

[Falo]

Yeah I misread your post, I thought you modified the cmd file but you just renamed the app file.
But why you don't want to downgrade? You can still restore your nand backup if you want at the end. :/

Because i don't trust the downgrade and i want to avoid modifying my sysnand if possible.
Also except for piracy (and finally being able to make translation patches for 3ds) there is no reason for me to downgrade, i do buy games if i want them.

 

[zoogie]

9.0 test failed. So nand injection works up to 8.1 period.
Will do some more testing later.

 

[VerseHell]

Because i don't trust the downgrade and i want to avoid modifying my sysnand if possible.
Also except for piracy (and finally being able to make translation patches for 3ds) there is no reason for me to downgrade, i do buy games if i want them.

The downgrade is 100% safe as long as you're following the , instructions uneess your battery runs out during the process. And you will restore your clean backup at the end so it's not really a problem.

 

[sarkwalvein]

Is anybody working on an mset rxTools launcher for sysnand FW9.2?
(using the downgraded system settings app with ds profile hack of course)

Downgrading the FW is not an option as getting "corrupt save data" on legit games is not a nice side effect.

 

[NeoSlyde]

Guys now we need a issue for downgarding or launching rxpasta from 9.8 and above

 

[guitarheroknight]

Guys now we need a issue for downgarding or launching rxpasta from 9.8 and above

Yeah, no.

 

[Riku]

9.0 test failed. So nand injection works up to 8.1 period.
Will do some more testing later.

I done it some time ago (different app, though), and it works perfectly fine on latest patched rxTools 9.8 emuNAND.
Here's FBI injected into Health Warning app:
http://rghost.net/8bWnNbCH5
JPN system only (don't own usa/eur), tested and works on latest 9.8 with icon and banner.

 

[Vappy]

I done it some time ago (different app, though), and it works perfectly fine on latest patched rxTools 9.8 emuNAND.

Did you do anything different to the steps given in this thread to get it working?

 

[pikatsu]

I done it some time ago (different app, though), and it works perfectly fine on latest patched rxTools 9.8 emuNAND.
Here's FBI injected into Health Warning app:
http://rghost.net/8bWnNbCH5
JPN system only (don't own usa/eur), tested and works on latest 9.8 with icon and banner.

And what we suppose to do with that. Copy it to sd card system folder?

 

[Riku]

Did you do anything different to the steps given in this thread to get it working?

I just replaced 2 files: *.tmd and *.app

 

[Vappy]

I just replaced 2 files: *.tmd and *.app

While the tutorial here only says to replace the .app. Did you generate the .tmd yourself or get it from somewhere?

 

[Riku]

While the tutorial here only says to replace the .app. Did you generate the .tmd yourself or get it from somewhere?

Yes, I made it along with .app file. You need to edit hashes stored in .tmd.

 

[Falo]

I done it some time ago (different app, though), and it works perfectly fine on latest patched rxTools 9.8 emuNAND.
Here's FBI injected into Health Warning app:
http://rghost.net/8bWnNbCH5
JPN system only (don't own usa/eur), tested and works on latest 9.8 with icon and banner.

The difference here is, your *.app file is encrypted.
Just fixing tmd checksums is not making it work.

Can you make a step by step guide what you did, so we can make eur/usa files?