Hacking 2DS + Flashcardtimewarp + MSET = DS profile exploit?

[u4ia24]

Is this possible with the recent advancements? Can you now downgrade the System Settings app of a 2DS on 9.x FW? I'm not completely familiar with all the exploits but I hope we can do something like this so we can maybe use the Gateway Blue Card to trigger the DS profile exploit or something similar so we'll no longer need to use the browser.

 

[sarkwalvein]

It would be possible but not yet.
It seems you can downgrade, you get MSET, but current version of GW launcher.dat doesn't work with it.

EDIT: Complain to GW asking for this and they will probably implement it.

 

[u4ia24]

It would be possible but not yet.
It seems you can downgrade, you get MSET, but current version of GW launcher.dat doesn't work with it.

EDIT: Complain to GW asking for this and they will probably implement it.

Thanks for the explanation! Hopefully a lot of other 2DS owners are interested in this as well so that there will be a chance of Gateway implementing it.

Follow up question, the other CFWs also use Gateway's launcher.dat to boot right? So it's also a no-go for CFWs?

 

[sarkwalvein]

Thanks for the explanation! Hopefully a lot of other 2DS owners are interested in this as well so that there will be a chance of Gateway implementing it.

Follow up question, the other CFWs also use Gateway's launcher.dat to boot right? So it's also a no-go for CFWs?

Sorry, I haven't tried them myself, but unless they somewhat create a modified launcher.dat they shouldn't work.
Ask Roxas75, he sure has some knowledge in this.
But it seems he is quite busy and unavailable lately.

 

[tony_2018]

If it didn't work on the 3ds/3dsxl than its probably not going to work for the 2ds.

 

[nastys]

Just tryed with my 3DS and it worked, but crashed instead of loading Launcher.dat (black screen with error text).
I played a DS game then tried again and this time it went to the DS profile settings.
It might be the launcher.dat but... it wouldn't make sense!! Why does it work on o3DS 4.1-4.5 and on N3DS but not on o3DS >=5.0??

 

[WhoAmI?]

Just tryed with my 3DS and it worked, but crashed instead of loading Launcher.dat (black screen with error text).
I played a DS game then tried again and this time it went to the DS profile settings.
It might be the launcher.dat but... it wouldn't make sense!! Why does it work on o3DS 4.1-4.5 and on N3DS but not on o3DS >=5.0??

Because of the offsets. Devs have to implement an ROP chain for different firms. Look at Ninjhax for example. See how many different barcodes there are for different firmware revisions? Same applies.

 

[nastys]

Because of the offsets. Devs have to implement an ROP chain for different firms. Look at Ninjhax for example. See how many different barcodes there are for different firmware revisions? Same applies.

Does this mean that their launcher.dat contains code for every single firmware version?

 

[WhoAmI?]

Does this mean that their launcher.dat contains code for every single firmware version?

Yes, the Launcher.dat contains code that get's launched at different "sectors". For example, 9.2 instructions are stored at 0x16000, I think? It's separated into 7 pieces.

Edit: Each "sector" is 16kb.

 

[Lush]

I hope that gateway sees the desire for this to work on 2ds... I would love an offline exploit for my 4 year old sons 2ds...

 

[MAXLEMPIRA]

I own a 2DS, we, 2DS users, should make a petition to Gateway with this thread, who is with me?

 

[WhoAmI?]

I own a 2DS, we, 2DS users, should make a petition to Gateway with this treath, who is with me?

IKR? The N3DS gets attention because its "new" but the 2DS doesn't? You'd think that the 2DS was a priority as well....

 

[nastys]

I own a 2DS, we, 2DS users, should make a petition to Gateway with this treath, who is with me?

And I'd like this too for my old 3DS. I downgraded once but since I lost all my DSiWare, I had to restore my backup, so an offline exploit for old 3DS <=9.2 would be useful too.

 

[MAXLEMPIRA]

And I'd like this too for my old 3DS. I downgraded once but since I lost all my DSiWare, I had to restore my backup, so an offline exploit for old 3DS <=9.2 would be useful too.

yeah.. you're right... then, why not take note of how many users have 2DS and 3DS, do some kind of signature and send it to Gateway with a "representative temper"?

 

[toto621]

Just tryed with my 3DS and it worked, but crashed instead of loading Launcher.dat (black screen with error text).
I played a DS game then tried again and this time it went to the DS profile settings.
It might be the launcher.dat but... it wouldn't make sense!! Why does it work on o3DS 4.1-4.5 and on N3DS but not on o3DS >=5.0??

Backup SysNAND first then try with N3DS ROP Chain, since both NVRAM and nds ROP installer were done for Firm 9.x you will probably be force to update your SySNAND to 9.0-9.2 (max !! don't go further!!).
You can update to 9.2 with Cooking Mama (EU) or using CIAs pack (for each console region) floating around the net.

If it still not work then simply downgrade to 4.5 sysNAND using your NAND backup

 

[nastys]

yeah.. you're right... then, why not take note of how many users have 2DS and 3DS, do some kind of signature and send it to Gateway with a "representative temper"?

And who is this "representative temper"?

Backup SysNAND first then try with N3DS ROP Chain, since both NVRAM and nds ROP installer were done for Firm 9.x you will probably be force to update your SySNAND to 9.0-9.2 (max !! don't go further!!).
You can update to 9.2 with Cooking Mama (EU) or using CIAs pack (for each console region) floating around the net?

If it still not work then simply downgrade to 4.5 sysNAND using your NAND backup

I'm already on 9.2...

 

[toto621]

K, so you're stuck until Gateway Team or one of the smart guys here make new ROP chain for O3DS with firm 9.x

 

[MAXLEMPIRA]

And who is this "representative temper"? .

Maybe u4ia24?

 

[u4ia24]

Maybe u4ia24?

I'd like to but it would be best if it was someone who has done that kind of thing before At least we know that there are a lot of us who have 2DS' and want an offline exploit.

 

[Random Joe]

+1 for 2ds support

I really need offline boot method for my 2ds. This is sad stuff.