Homebrew DevMenu as Launcher.dat possible?

[nop90]

why not try to decrypt any if these launchers, change some magic value to true(isCardInserted) and profit!

Because the code is obfuscated, full of ROP calls (so it's difficoult to understand), protected with CRC check to avoid modifications, and last but not least there is the possibility of some timebomb bricking code hidden somewhere if you bypass all these protection.

Not to say that if one have onought knowledge to understand fully the GW code, he can write it's emunand loader and FW patcher with less effort (and propably will not share it)

 

[AtlanticBit]

well, anyone who shares a 9.2 cfw is my god. i have cfw, but can't test CTRepo's(my sig) theme features on CFW!

 

[WulfyStylez]

*cough*mt-card*cough*

Pff, if you can actually get a dump of MT's later stages and their FPGA firmware, you're easily ready to RE gateway. It's not much better, as far as I've heard.

 

[AtlanticBit]

fpga firm is contained in those funny microusb updates i guess

 

[WulfyStylez]

fpga firm is contained in those funny microusb updates i guess

Yeah, but from the few minutes I spent looking at their updater, it would seem that updates are encrypted with keys found/derived from the actual cart itself plugged in over USB.

 

[AtlanticBit]

usb fuzzing duh

 

[WulfyStylez]

usb fuzzing duh

Fuzzing wouldn't be the word, but dumping data transmitted over USB could work pretty well, actually. If I remember, the writes to the card are all in plaintext... it's almost like they don't care if their software gets reverse-engineered so long as somebody bought their product to do it. That being said, though, I don't own the cart. Nor do I want to, really.

 

[AtlanticBit]

well, now we have to wait for someone with mt to come up

 

[Slushie3DS]

I can verify that this works. Incredible. Thank god gateway's launchers are so simple to effortlessly decrypt and modify!

I laughed so fucking hard.

In order to run the illegitimate CIAs, you'd need gateway (or MT) mode. Which requires a card, and you'd just be able to run devmenu on that anyway. Which defeats the purpose of using it as a launcher.dat.

Pretty sure .CIA are archives, not executables.

 

[Kafke]

Pretty sure .CIA are archives, not executables.

They are. You technically need to install them.

 

[Slushie3DS]

They are. You technically need to install them.

I was just making sure you knew, because of how you said 'running' .CIA.

 

[Kafke]

I was just making sure you knew, because of how you said 'running' .CIA.

It's pretty much the same thing. Install and then run. I just say running a CIA as shorthand, since it's implied, and I don't know if there's a name for an installed cia.