Using custom launcher.dat with Gateway Go

Discussion in '3DS - Flashcards & Custom Firmwares' started by AtlanticBit, Jan 16, 2015.

  1. shutterbug2000

    shutterbug2000 Cubic NINJHAX!

    Member
    12
    Oct 11, 2014
    United States

    So, about the 0x003B643C. Is that for the top, or the bottom screen? If its the bottom... I may be onto something here *evil smile*

    Also, what is the address for the top screen, if its the bottom?
     
  2. st4rk

    st4rk nah

    Member
    6
    Feb 11, 2014
    Brazil
    It`s the address to gspGpuHandle, to use GSPGPU Services.
     
  3. shutterbug2000

    shutterbug2000 Cubic NINJHAX!

    Member
    12
    Oct 11, 2014
    United States
    So, what would I do if I wanted to draw to the bottom or top screen?
     
  4. shutterbug2000

    shutterbug2000 Cubic NINJHAX!

    Member
    12
    Oct 11, 2014
    United States
    As in, what memory offset would I write to? Think I have an idea, but that's something I'm not sure about.
     
  5. st4rk

    st4rk nah

    Member
    6
    Feb 11, 2014
    Brazil

    eh... as far as i know you need use the services to draw on screen(look the ctrulib examples) in user-land.
     
  6. tHciNc

    tHciNc Total Random

    Member
    6
    Jan 14, 2006
    New Zealand
    It works on 4.x - 9.x

    region free loader for 3DS/3DSXL/2DS on firmware versions 4.0-9.4 this also allows you to bypass mandatory gamecard firmware updates
     
  7. Slushie3DS

    Slushie3DS Cold Beverage Lover

    Member
    3
    Jan 9, 2015
    United States
    Maybe the cartridge I'm using isn't compatible.
     
  8. krisztian1997

    krisztian1997 GBAtemp Fan

    Member
    3
    Dec 14, 2013
    Romania
    Any tips/ideas where I could find the gpuhandle on 9.2 ? I understood what I have to do after that to draw on the screen but I can't find the gpu services in the memory.
     
  9. st4rk

    st4rk nah

    Member
    6
    Feb 11, 2014
    Brazil

    Ah, you can look for the GSPGPU Services, just look the command header in ctrulib, go to code and try find it, it will load the command header in a register.

    The structure to service call is(GPU):
    MRC p15, 0, <Reg>, c13, c0, 3
    ADD <reg>, <reg>(/\), #0x80
    LDR <reg>, 0x<command header>

    and there is a BL to SendSyncRequest(SVC 0x32)

    So, if you're using IDA, just press in the part of CODE XREF to back to the function which call the service and in the "R0" probably is the address of gspGpuHandle(if you're looking the GSPGPU of course), i belive which it should be the enough
     
  10. Slushie3DS

    Slushie3DS Cold Beverage Lover

    Member
    3
    Jan 9, 2015
    United States
    Bump.
     
  11. shutterbug2000

    shutterbug2000 Cubic NINJHAX!

    Member
    12
    Oct 11, 2014
    United States
    Hmmm... Hmm. need help here. If I'm using the OLD build script(build.bat, 3ds.ld, know what I'm talking about?), how do I output to screen? http://3dbrew.org/wiki/Memory_layout#VRAM_Map_While_Running_System_Applets would seem to tell me how, but that isn't working either. SHOULD be outputting, but its not. Do I need to do something to switch framebuffers, or anything else?
     
  12. nop90

    nop90 GBAtemp Advanced Maniac

    Member
    12
    Jan 11, 2014
    Italy
    Rome
    which FB addresses are you using? and are you trying to link the compiled files at the same base addrress of the previous launcher dat or you modifieed 3ds.ld?
     
  13. shutterbug2000

    shutterbug2000 Cubic NINJHAX!

    Member
    12
    Oct 11, 2014
    United States

    Well, for the FB addresses, I'm using VRAM+the addresses at the bottom of that page. Not sure what to change in to 3ds.ld, so haven't modified that.
     
    Kakkoii likes this.
  14. nop90

    nop90 GBAtemp Advanced Maniac

    Member
    12
    Jan 11, 2014
    Italy
    Rome
    The thread created in the exploit will likely have a new framebuffers set, you has to find them searching in memory.

    To link the the code look in the GW decompiled source and find where the hack load the code than change the base address in 3ds.ld (previusly was 0x080C3EE0). maybe there tou can find the FB addresses too.

    Good luck, I really don't want to switch again to barebone coding like a year ago .
     
    Kakkoii likes this.
  15. shutterbug2000

    shutterbug2000 Cubic NINJHAX!

    Member
    12
    Oct 11, 2014
    United States

    Alright, thanks!
     
  16. DarkKnightPT

    DarkKnightPT GBAtemp Regular

    Member
    2
    May 18, 2014
    Hi guys, I have mt-card im thinking on getting a Nintendo 2ds.. so would it be possible to use this exploit to downgrade a Nintendo 2ds to fw 4.5 with gateway launcher, and than use the default Nintendo ds profile exploit with mtcard launcher to use mt card as any normal 3ds system nand 4.5?
     
  17. shinyquagsire23

    shinyquagsire23 SALT/Sm4sh Leak Guy

    Member
    13
    Nov 18, 2012
    United States
    Las Vegas
    Nope, 2DS cannot downgrade.
     
  18. DarkKnightPT

    DarkKnightPT GBAtemp Regular

    Member
    2
    May 18, 2014
    ok thanks :)
     
  19. mordorer

    mordorer Advanced Member

    Newcomer
    2
    Jan 17, 2015
    Italy
  20. naxil

    naxil GBAtemp Advanced Fan

    Member
    3
    Oct 26, 2011
    Italy
    Good tools? We can use it for launch homebrew with broswer hack?
     
Quick Reply
Draft saved Draft deleted
Loading...