Hacking [Release] rxTools - Roxas75 3DS Toolkit [fw 2.0 - 9.2]

[Fishaman P]

It'd be interesting to know who here ran into a decryption bug with rxTools. Where did the hash check fail (exefs or romfs)? Does it happen if you have rxTools generate a xorpad instead of doing in-place decryption?

According to Apache Thunder, romfs can sometimes have corrupted blocks with direct decryption, but Asia81 has said that it's just fine, even on huge ROMs like Pokemon.
xorpads are apparently generated correctly, but I'm sticking with Decrypt9 Ninjhax Edition just to be safe.

 

[Kwartel]

Does anyone have a code.bin for rxTools 2.5? I don't have a DS Flashcard and I prefer the profile route.

 

[AquaX101]

Does anyone have a code.bin for rxTools 2.5? I don't have a DS Flashcard and I prefer the profile route.

I have made one but I have to find it so expect an upload within 5 minutes?

 

[Kwartel]

I have made one but I have to find it so expect an upload within 5 minutes?

You are a hero! If you could point me to the place explaining how you made it, it would be even better! <3

 

[Apache Thunder]

Note that rxTools CTR Decrypter also fails to decrypt romfs of system apps. (they are still encrypted afterwords). Also, for whatever reason, CTR Decrypter doesn't decrypt exefs of Home Menu correctly when used on that. The result is a corrupted .code. Home Menu's exefs.bin only contains a .code. It doesn't have a banner or icon and perhaps that contributed to the decryption issue it had.

Of coarse everything still decrypts fine using the xorpad generator.

 

[DSoryu]

emuNAND bricked afeter using mset downgrade...

 

[AquaX101]

http://filetrip.net/dl?WM8DHPcrJn

Download, put in root of sd, go to http://dukesrg.no-ip.org/3ds/rop/?LoadCode4.dat&code.bin . Wait for the screen to blink and then power off the 3ds and then mset should be installed. Specifically for rxTools.dat

 

[powersaver]

Thanks for the report Dartz. Someone should make a list of bugs and a list of features we're waiting for. =)

emuNAND bricked afeter using mset downgrade...

--------------------- MERGED ---------------------------

What is this? And what MSET/Firmware versions is this for? Thx!

http://filetrip.net/dl?WM8DHPcrJn

Download, put in root of sd, go to http://www.battlefieldsingleplayer.com/apachethunder/Images/gateway/index_msett.html . Wait for the screen to blink and then power off the 3ds and then mset should be installed. Specifically for rxTools.dat

 

[Kwartel]

http://filetrip.net/dl?WM8DHPcrJn

Download, put in root of sd, go to http://www.battlefieldsingleplayer.com/apachethunder/Images/gateway/index_msett.html . Wait for the screen to blink and then power off the 3ds and then mset should be installed. Specifically for rxTools.dat

Thanks! For people preferring a QR code:

 

[AquaX101]

Thanks for the report Dartz. Someone should make a list of bugs and a list of features we're waiting for. =)

--------------------- MERGED ---------------------------

What is this? And what MSET/Firmware versions is this for? Thx!

It installs the mset exploit for rxTools without the need of a flashcart. I've only tested it on 4.5 and it should work. (If not, of course you need to tell me! lol )

 

[zero2exe]

Does the mset exploit still get overwritten if you launch a nds game? In case something goes wrong it would be nice to have that as a way to revert it back

 

[DSoryu]

Thanks for the report Dartz. Someone should make a list of bugs and a list of features we're waiting for. =)

--------------------- MERGED ---------------------------

What is this? And what MSET/Firmware versions is this for? Thx!

Yeah that is a good idea, and not a problem since I'm restoring my emuNAND.

Current list:

-AGB_FIRM support.
-Proper MSET downgrade for 8.+ (not sure if this is possible thoug).
-Proper FBI injection (it keeps failing for me ATM).
-EmuNAND formatting without gateway (maybe it's hard to implement)
-N3DS support.


Also, I don't know if I'm doiing something wrong but, I0m trying to get xorpads for Attack on Titan: Humanity in Chains and all I get is a "s" named file, 2MB sized.

 

[Bkool999]

http://filetrip.net/dl?WM8DHPcrJn

Download, put in root of sd, go to http://www.battlefieldsingleplayer.com/apachethunder/Images/gateway/index_msett.html . Wait for the screen to blink and then power off the 3ds and then mset should be installed. Specifically for rxTools.dat

You aren't supposed to turn off the 3ds after the screen blinks. To avoid any issues, you need to wait for it to crash back to the Home Menu.

 

[Fatalanus]

Dartz150 you can add the CN support with Ninjhax. It's broken too.

 

[powersaver]

Thanks Dartz, this is just what I needed to determine when to switch over to rxTools v2.5+. However, I would remove the last 2 items until the first 3 items are complete. =)

Yeah that is a good idea, and not a problem since I'm restoring my emuNAND.

Current list:

-AGB_FIRM support.
-Proper MSET downgrade for 8.+ (not sure if this is possible thoug).
-Proper FBI injection (it keeps failing for me ATM).
-EmuNAND formatting without gateway (maybe it's hard to implement)
-N3DS support.


Also, I don't know if I'm doiing something wrong but, I0m trying to get xorpads for Attack on Titan: Humanity in Chains and all I get is a "s" named file, 2MB sized.

--------------------- MERGED ---------------------------

Thanks for this, but shouldn't people just use webMultiloader to install rxTools MSET on v4.5 via Spider?

You aren't supposed to turn off the 3ds after the screen blinks. To avoid any issues, you need to wait for it to crash back to the Home Menu.

 

[zoogie]

Seems like the FBI injection will only work for Europe going by this code
https://github.com/roxas75/rxTools/...c/rxtools/source/features/downgradeapp.c#L158

The US tiD of H&S is 0004001000021300.

 

[powersaver]

Has anyone in EUR reported this as working? Thanks for the info, if Roxas doesn't provide a new version, someone can compile, however Apache said his custom-compile doesn't work.

Seems like the FBI injection will only work for Europe going by this code
https://github.com/roxas75/rxTools/...c/rxtools/source/features/downgradeapp.c#L158

The US tiD of H&S is 0004001000021300.

 

[megazero1x1]

Thanks! For people preferring a QR code:

What was your sysnand version ?

 

[Cyan]

Yeah that is a good idea, and not a problem since I'm restoring my emuNAND.
Current list:
-AGB_FIRM support.
-Proper MSET downgrade for 8.+ (not sure if this is possible thoug).
-Proper FBI injection (it keeps failing for me ATM).
-EmuNAND formatting without gateway (maybe it's hard to implement)
-N3DS support.

If not fixed in 2.5, you can add this bug: injecting titledb in reaNAND bricks emuNAND.
I haven't tested it myself, but I remember users had to make a nand backup of their emuNAND and restore it after sysNAND injection.

 

[Kwartel]

What was your sysnand version ?

4.5

It turned out that that link wasn't working for me, but this one is:
http://dukesrg.no-ip.org/3ds/rop/?LoadCode4.dat&code.bin