Hacking GATEWAY 3.2 ULTRA PUBLIC BETA
- Thread starter TheShadowRunner
- Start date
- Views 187,734
- Replies 1,328
- Likes 24
Just a note for developers mainly (and very good news). The msetforboss rop chain on ROPinstaller.nds works for dumping mset RAM memory for both old3ds and new3ds on 9.x (assuming a 4.5 downgraded mset). Use the 4x ram dumper here,
https://github.com/WinterMute/ROPInstaller
(this is the repo N3DS_ropinstaller is based on, included with the app)
with msetforboss 4x chain for old 3ds. It works. I dumped 3MB of mset memory for old3ds (2DS) and n3ds on 9.x.
https://github.com/WinterMute/ROPInstaller
(this is the repo N3DS_ropinstaller is based on, included with the app)
with msetforboss 4x chain for old 3ds. It works. I dumped 3MB of mset memory for old3ds (2DS) and n3ds on 9.x.
Well, you see, tickets for eShop stuff includes your console id and are signed, so... without Nintendo's private keys, never.
Would it be possible to purchase, say zelda from the shop (in emuNAND), dump it with funkyCIA, and install it on sysNAND and then inject the custom save to it?
Doesn't the eShop generate keys for the game that match your console while it is downloading it?
But then you would need to mess with the NAND tickets, no?
the GW save doesnt work with the eshop version, their save is hardcoded to load the exploit payload at a specific offset on the games save chip.....so even if you install the exploit you would need a cart in with the exploit injected at 0x1E000.....doesnt even need to be zelda
I was thinking that, and then I thought "Hey, wait. PGP works the other way round." According to the PGP model, to sign/encrypt stuff just for you, Nintendo would use the Public Key for your 3DS. And to validate that key, your console would use the corresponding Private Key, included when the firmware was written. Many key systems allow you to generate the Public Key from the Private Key. I'm not aware of a key system that works the other way round, but I'm no expert on the topic. Maybe today I will learn new things.
It does but emunand and sysnand are two completely different things. When you're installing something to emunand think of it as if you're installing it on a completely different console.
Oh, there goes my idea of getting rid of the physical cartrdige...the GW save doesnt work with the eshop version, their save is hardcoded to load the exploit payload at a specific offset on the games save chip.....so even if you install the exploit you would need a cart in with the exploit injected at 0x1E000.....doesnt even need to be zelda
And CN was taken from the eShop, so, we'll stick with cartridges.
No. Your console id is included in the ticket, (the whole ticket is signed with Nintendo private key), and your 3DS checks if the console id in te ticket is the same than the console id of the console.
well if they re-worked their exploit it *should* be possible to load from a files stored in the save like how CN works by reading "GW3DS.BIN" stored in the save rather than at a specific offset on the save chip
I've still not got this DevMenu.3ds to work in GW Mode in sysNAND. I've tried 4 MicroSD cards of sizes 1GB, 4GB, 32GB and 64GB, all formatted fully with SD Formatter and Windows; and several different copies of DevMenu.3ds. Any other .3ds file works fine, it's just DevMenu that won't.
Similar threads
-
BakerMan
I rather enjoy a life of taking it easy. I haven't reached that life yet though.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
@
Jayro:
Eventhough the New 3DS XL is more powerful, I still feel like the DS Lite was a more polished system. It's a real shame that it never got an XL variant keeping the GBA slot. You'd have to go on AliExpress and buy an ML shell to give a DS phat the unofficial "DS Lite" treatment, and that's the best we'll ever get I'm afraid.+1 -
-
@
SylverReZ:
@Jayro, I don't see whats so special about the DS ML, its just a DS lite in a phat shell. At least the phat model had louder speakers, whereas the lite has a much better screen.+1
-
@
SylverReZ:
They probably said "Hey, why not we combine the two together and make a 'new' DS to sell".
-
-
-
@
Veho:
Nothing special about it other than it's more comfortable than the Lite+1
for people with beefy hands. -
-
-
-
-
