Hacking rxTools with Signatures patched out!

[Garro]

Since this thing is supposed to work with dsiware, has _anyone_ gotten it to work like at all? Does it _only_ work with the browser exploit or something?

I keep getting the damned "an errorhas occurred".

I am using emunand as I hate installing anything to sysnand unless absolutely required.

It's absolutely required to have the DSiWare/GBA game installed in SysNAND in order to make it work from EmuNAND.

 

[VerseHell]

Inside the above archive http://rghost.net/6Z54JB9Kq
there is a txt with a small guide

Yes, I already explained how to decrypt your emunand earlier.

 

[pikatsu]

Yes, I already explained how to decrypt your emunand earlier.

So the use is for them who dont want to downgrade, dont own a gateway and want to use a cia installer on rxtools emunand.

 

[VerseHell]

So the use is for them who dont want to downgrade, dont own a gateway and want to use a cia installer on rxtools emunand.

Exactly.

 

[dubbz82]

Downgrade by gateway method = 100% safe

Really? I'll say there's minimal risk, but I wouldn't go so far as to say 100% safe, because that's simply not true.

 

[godstriker8]

Alright, thanks to zoogie and his tool, we may found a way to install FBI on a 2DS (It's also useful for O3DS if you don't want to do the whole cfw process) :

Edit : Seems like it doesn't work on 9.0-9.2.

Download this pack : http://jheberg.net/captcha/fbi-injection-v12/

1. Use the gateway launcher.dat to create your emunand (format emunand, backup your sd card content first
2. Setup rxTools : http://www.rxtools.net/#!howto (replace the rxTools.dat with one of the patched one)
3. Use rxTools to get your nand xorpad (Decryption Options -> Generate fat16 Xorpad). Put it on the FBI injection folder
4. Open emunand tool, choose extract emunand then choose the FBI injection folder for the destination
5. Execute decrypt.bat
6. Open WinImage.
7. Drag and drop the emuNAND.fat16.bin on the program then click on OK
8. Go to title/0040010/00022300/content for a EU console or title/0040010/00021300/content for US one.
9. Execute the MAKE_FBI_NCCH which match your console region. It will generate a 0000000X.app file. If needed, rename it to match the 0000000X.app in the content folder.
10. Delete the 0000000X.app from the content folder.
11. Click on Image->Inject then choose your own 0000000X.app.
12. Save and close WinImage.
13. Execute reencrypt.bat
14. Restore your emunand with emunand tool.
15. Boot on the emunand with rxTools. Select Health & Safety app. FBI should boot instead.
16. If you're on 4.X, install another CIA installer from it before updating your emunand, because the update will restore the original Health & Safety app.

Tested it on a 4.2 O3DS and it works fine, so it should work on a 2DS too.

Alright, thanks to zoogie and his tool, we may found a way to install FBI on a 2DS (It's also useful for O3DS if you don't want to do the whole cfw process) :

Edit : Seems like it doesn't work on 9.0-9.2.

Download this pack : http://jheberg.net/captcha/fbi-injection-v12/

1. Use the gateway launcher.dat to create your emunand (format emunand, backup your sd card content first
2. Setup rxTools : http://www.rxtools.net/#!howto (replace the rxTools.dat with one of the patched one)
3. Use rxTools to get your nand xorpad (Decryption Options -> Generate fat16 Xorpad). Put it on the FBI injection folder
4. Open emunand tool, choose extract emunand then choose the FBI injection folder for the destination
5. Execute decrypt.bat
6. Open WinImage.
7. Drag and drop the emuNAND.fat16.bin on the program then click on OK
8. Go to title/0040010/00022300/content for a EU console or title/0040010/00021300/content for US one.
9. Execute the MAKE_FBI_NCCH which match your console region. It will generate a 0000000X.app file. If needed, rename it to match the 0000000X.app in the content folder.
10. Delete the 0000000X.app from the content folder.
11. Click on Image->Inject then choose your own 0000000X.app.
12. Save and close WinImage.
13. Execute reencrypt.bat
14. Restore your emunand with emunand tool.
15. Boot on the emunand with rxTools. Select Health & Safety app. FBI should boot instead.
16. If you're on 4.X, install another CIA installer from it before updating your emunand, because the update will restore the original Health & Safety app.

Tested it on a 4.2 O3DS and it works fine, so it should work on a 2DS too.

Thanks, the revised download pack worked perfectly

 

[VerseHell]

@Falo
http://rghost.net/6Z54JB9Kq
EUR version tested under 9.5.0-23E, works fine.

Thanks a lot, works perfectly on my clean 9.8 emunand. Like I said would be wonderful if you can do it for the US region too.

 

[Riku]

Thanks a lot, works perfectly on my clean 9.8 emunand. Like I said would be wonderful if you can do it for the US region too.

Making those are somewhat exhausting for me.. and I don't have US testers.

 

[Jaitsu]

Making those are somewhat exhausting for me.. and I don't have US testers.

If all you need is someone to inject that into a 9.8 emuNAND and see if it successfully replaces the Health and Safety app, I could give it a shot for you. Whenever you've got the time.

 

[VerseHell]

Making those are somewhat exhausting for me.. and I don't have US testers.

It's ok, you don't need to hurry, we already have a high compatibility range now. And I'm sure you cand find some volunteers here.

--------------------- MERGED ---------------------------

Updated my guides with Riku files : https://gbatemp.net/threads/rxtools-with-signatures-patched-out.390607/page-65#post-5540327

 

[Riku]

Updated my guides with Riku files : https://gbatemp.net/threads/rxtools-with-signatures-patched-out.390607/page-65#post-5540327

My files are for FW 6.0 (US will be 6.1) and higher. There is at least 2 reasons why they won't work under 4.x: different app version and sdk5-style exefs without logo in it.

 

[samiam144]

Making those are somewhat exhausting for me.. and I don't have US testers.

I can do testing for you Riku, I'll send you a PM. Take your time, we know we're asking a lot from you.

@VerseHell Nice, I'll update the noob tutorial as well

 

[masterz87]

It's absolutely required to have the DSiWare/GBA game installed in SysNAND in order to make it work from EmuNAND.

the fuck? Then what's the point ofeven using emunand then? I thought the whole damned reason for using emunand was so that you _didn't_ have to use sysnand. So Ihave to install it in _both_ places. Seriously?

What's the piont of emunand if you can't use it to save writes on your nand. I see no real point ni it at all if you have to install each and every damned game on sysnand to use it in emunand. Emunand is supposed to be just that, completely redirecting reads/writes to t instead of sysnand. Why would rxtools even be touching sysnand?

 

[laharl22]

after modify the safety app it wont launch on rx e 9.8 what can i do ?

 

[VerseHell]

I tried two times (to be sure I didn't upload the wrong files) and it worked, you must have done something wrong. (or you didn't follow the new guide)

 

[Garro]

the fuck? Then what's the point ofeven using emunand then? I thought the whole damned reason for using emunand was so that you _didn't_ have to use sysnand. So Ihave to install it in _both_ places. Seriously?

What's the piont of emunand if you can't use it to save writes on your nand. I see no real point ni it at all if you have to install each and every damned game on sysnand to use it in emunand. Emunand is supposed to be just that, completely redirecting reads/writes to t instead of sysnand. Why would rxtools even be touching sysnand?

That's just how it works, when loading DSiWare or GBA the console has to reboot and switch from native_firm (3DS) to agb_firm for GBA or twl_firm for DSiWare, in that process the console lose its emunand access I guess. Your options are doing that or having both NANDs linked.

 

[masterz87]

well i wish it'd give me the option of having a link to what'son sysnandor something similar so that iwouldn't have to waste time installing the game(again) and taking up even more space. Does rx allow you to boot notinto emunand from the main menu? If so then I might be able to do this without having a seperate sd card.

 

[Chelsea_Fantasy]

Yeah, I don't think that's going to happen.

@AHP_person has taken over the project, so I'm sure he'll be adding region free & all sorts of exciting features soon!

maybe I must show him my WIP-tools......just maybe.....

 

[powersaver]

Can you follow this process, then install a different installer like DevMenu/BBM, and then re-install the real Health and Safety App? And then write the emuNAND image to sysNAND?

Alright, thanks to zoogie and his tool, we may found a way to install FBI on a 2DS (It's also useful for O3DS if you don't want to do the whole cfw process) :

Works up to 9.8 (emunand) for EU and JP consoles :
Works up to 8.1 for US consoles :

Download this pack : http://jheberg.net/captcha/fbi-injection-13/

1. Use the gateway launcher.dat to create your emunand (format emunand, backup your sd card content first
2. Setup rxTools : http://www.rxtools.net/#!howto (replace the rxTools.dat with one of the patched one). If you have an EU or JP console, update your emunand now.
3. Use rxTools to get your nand xorpad (Decryption Options -> Generate fat16 Xorpad). Put it on the FBI injection folder
4. Open emunand tool, choose extract emunand then choose the FBI injection folder for the destination
5. Execute decrypt.bat
6. Open WinImage.
7. Drag and drop the emuNAND.fat16.bin on the program then click on OK
8. Go to title/0040010/00022300/content for a EU console, title/0040010/00021300/content for a US one, and title/0040010/00020300/content for a JP one.
9. For EU and JP consoles :
- Delete the *.app and the *.tmp from the content folder.
- Click on Image->Inject then choose the *.app in the content_region folder.
- Same process for the *.tmd file
For US consoles :
- Go to the content_US folder
- If needed, rename the *.app to match the one in the title/0040010/00021300/content folder
- Delete the *.app from the content folder. (in WinImage)
- Click on Image->Inject then choose the *.app in the content_USA folder.
10. Save and close WinImage.
11. Execute reencrypt.bat
12. Restore your emunand with emunand tool.
13. Boot on the emunand with rxTools. Select Health & Safety app. FBI should boot instead.
14. If you have an US console, install another CIA installer from it (because the update will restore the original Health & Safety app) then update your emunand.

Tested it on a 4.2 O3DS and it works fine, so it should work on a 2DS too.

A big thanks to @zoogie for the original method and @Riku for making it work on 9.0-9.8 (emunand) on JP and EU consoles.

 

[NyaakoXD]

Offtopic: Does anyone know how to update a New3DS 9.0 to 9.2? Do I just go into PastaCFW and then use sysupdater? Also, is it possible to include the 9.3 home menu so that I can have the amiibo settings while still in 9.2?