Hacking Using custom launcher.dat with Gateway Go

[krisztian1997]

Falo, could you possibly supply me with a .bin of your ram dumper? I'll try to load it, and see what happens.

Your bottom screen plays the sliding animation and then it freezes on white ?

 

[shutterbug2000]

Your bottom screen plays the sliding animation and then it freezes on white ?

It used to do that, but not anymore.

Now, it freezes on the garbage/glitchy screen before that, but the 3DS still functions(can turn off/on wireless, wireless LED still flashes, normal power-off time)

 

[leerpsp]

It used to do that, but not anymore.

Now, it freezes on the garbage/glitchy screen before that, but the 3DS still functions(can turn off/on wireless, wireless LED still flashes, normal power-off time)

I don't know if this helps any but if it stopped doing the sliding animation it may be corrupted like if you use the gateway web hack if you take the sd card out why you are in the gateway web mode the 3ds will freeze up then the launcher file will be corrupted and would freeze on a fuzzy screen when i try and boot the launcher so i would always have to recopy it back on to the sd card.

 

[shutterbug2000]

I don't know if this helps any but if it stopped doing the sliding animation it may be corrupted like if you use the gateway web hack if you take the sd card out why you are in the gateway mode the 3ds will freeze up then the launcher file will be corrupted and would freeze on a fuzzy screen when i try and boot so i would always have to recopy it back on to the sd card.

Possibly. But unless you were getting the same effects(can turn off/on wireless, wireless LED still flashes, normal power-off time), then I don't think that is the case. If it truely "crashed" nothing should work, and I should have to hold power for 10-20 seconds.

 

[leerpsp]

Possibly. But unless you were getting the same effects(can turn off/on wireless, wireless LED still flashes, normal power-off time), then I don't think that is the case. If it truely "crashed" nothing should work, and I should have to hold power for 10-20 seconds.

The wireless led would still be on would not turn off and the blue led and the Orange led were both on and i had to hold the power button for ever to turn it off.

 

[shutterbug2000]

The wireless led would still be on would not turn off and the blue led and the Orange led were both on and i had to hold the power button for ever to turn it off.

And see, that's not what I'm getting. Meaning something is still running.

Also, the video mentioned earlier is done uploading, if anyone wants to take a look. (turn on annotations.)

 

[shinyquagsire23]

For those wishing to develop their own custom launcher.dats (based on smea's regionthree or whatever), I made a site which lets you launch unencrypted unlaunch.dats instead. Before anyone asks:

• No, this doens't let you launch older launcher.dats
• No, this doesn't let you launch launcher.dats for GW on 9.4
• No, this will not make you a pizza and materialize it from your 3DS
• This is a development tool (or maybe a potential launch site for those who dislike Gateway and want easier launching)

That aside, you can launch your unlaunch.dats over at go.plxhack.us. It should work just fine, I just tested it with an unencrypted version of smea's regionthree and it worked perfectly with Cubic Ninja on 4.2.

EDIT:

• No, this doesn't let you launch CFW launcher.dats, those are old launcher.dats. Use your brain.
• No, this doesn't let you launch homebrew, although it technically could in the future if someone did it, idk

Also, if anyone wants to try regionthree through this, download the unlaunch.dat from here.

 

[naxil]

For those wishing to develop their own custom launcher.dats (based on smea's regionthree or whatever), I made a site which lets you launch unencrypted unlaunch.dats instead. Before anyone asks:

• No, this doens't let you launch older launcher.dats
• No, this doesn't let you launch launcher.dats for GW on 9.4
• No, this will not make you a pizza and materialize it from your 3DS
• This is a development tool (or maybe a potential launch site for those who dislike Gateway and want easier launching)

That aside, you can launch your unlaunch.dats over at go.plxhack.us. It should work just fine, I just tested it with an unencrypted version of smea's regionthree and it worked perfectly with Cubic Ninja on 4.2.

shiny i can use it for launch palatine? if yes.. how???

 

[Vappy]

shiny i can use it for launch palatine? if yes.. how???

Literally the very first "Don't ask" answer is "won't boot old Launcher.dats". So no.

 

[naxil]

Literally the very first "Don't ask" answer is "won't boot old Launcher.dats". So no.

Vappy u think come out a way for cfw via web hack?

 

[st4rk]

What the people here wanna ? just userland code execution through the browser ?

 

[shutterbug2000]

For those wishing to develop their own custom launcher.dats (based on smea's regionthree or whatever), I made a site which lets you launch unencrypted unlaunch.dats instead. Before anyone asks:

• No, this doens't let you launch older launcher.dats
• No, this doesn't let you launch launcher.dats for GW on 9.4
• No, this will not make you a pizza and materialize it from your 3DS
• This is a development tool (or maybe a potential launch site for those who dislike Gateway and want easier launching)

That aside, you can launch your unlaunch.dats over at go.plxhack.us. It should work just fine, I just tested it with an unencrypted version of smea's regionthree and it worked perfectly with Cubic Ninja on 4.2.

So, is it possible to run Homebrew through this? If so, how would I compile it?

 

[krisztian1997]

So, is it possible to run Homebrew through this? If so, how would I compile it?

It's the same like the go website only that this one has the addcipher removed, it has no magics to launch CFW or homebrew.

 

[shutterbug2000]

It's the same like the go website only that this one has the addcipher removed, it has no magics to launch CFW or homebrew.

Ok. Have you had a chance to look at the video? Also, what about the ram dumping bin?

 

[Slushie3DS]

"Progress" report: I've injected homebrew code into the 7.x-9.4 portion of the Launcher, and it still gives the same results as 4.2 3ds. On... 9.4!! So, my thought is: figure out how to refresh the screen. and see if it will output to screen. If I get the same results, I would think we "could" run the Homebrew on 9.4, if we could just figure that out... Any ideas?

Edit: Hmm.. Maybe Falo's decrypter/encrypter's "debug" txt files could help us figure out how to refresh? I would look, but I know absolutely nothing about asm, especially arm asm.

Spider/SKATER has limited RAM privileges, friend. It'd be better to grab onto an application like Mii Plaza or Download Play from the browser applet. Smea was actually the one to tell me this.

My theory is to stuff a .CIA inside of Download Play's cache as it should stay there until reintroduced with another .CIA. This, sadly, has a few guards to bypass. I've been working on this, too.

 

[krisztian1997]

Ok. Have you had a chance to look at the video? Also, what about the ram dumping bin?

I looked at the video, its interesting because and I cant replicate the same thing on my 3ds, after the ROP (even if I use the gw ROP) it crashes back to home menu. Falo was working on the ram dumping now me, I was trying to write some text to a file but it didn't worked and accidentally deleted my code, and now I am too lazy to try to rewrite it.

What the people here wanna ? just userland code execution through the browser ?

Yup, and launching ninjahax like homebrews.

 

[AquaX101]

Literally the very first "Don't ask" answer is "won't boot old Launcher.dats". So no.

Is MT Card's launcher considered old?

 

[Vappy]

Is MT Card's launcher considered old?

Old = uses the 4.x exploit, so yes.

 

[krisztian1997]

Is MT Card's launcher considered old?

You can only launch your own arm code with this, no GW/R4/CFW/MT launchers. Even the new gw launcher crashes if you try to use it because of a checksum hidden deep somewhere in the ugly asm code.

 

[st4rk]

I looked at the video, its interesting because and I cant replicate the same thing on my 3ds, after the ROP (even if I use the gw ROP) it crashes back to home menu. Falo was working on the ram dumping now me, I was trying to write some text to a file but it didn't worked and accidentally deleted my code, and now I am too lazy to try to rewrite it.


Yup, and launching ninjahax like homebrews.

AFAIK there is no much space to do it, i dunno what is the size of .text of RO, but probably is not big and the .text of browser if i am not mistaken ² it's not in the GSP/LINEAR heap :/ (and you can't mapper other regions with RWX permission without other flaw).