- Joined
- Oct 7, 2007
- Messages
- 4,470
- Trophies
- 3
- Age
- 36
- Location
- Levelland, Texas
- Website
- www.mariopc.co.nr
- XP
- 6,911
- Country
If I can boot gateway mode with this, I'm pretty sure the same can be done with any 4.x compatible launcher.dat file. MSETT ROP code installed to DS Profile is pretty much the same for everything. Unless you have something very exotic where the MSET ROP code loads a bin file from SD card with a custom file name that isn't launcher.dat. But I know of nothing that does this. Only the new spidertools exploit has differing payloads that point to different payload files on the SD card. The web browser has more flexibility in terms of what could be loaded and how compared to the old MSETT exploit.
Well the main difference here is that the MSETT exploit sticks and only has to be installed once. Only time one has to install it again is if emunand or sysnand undergoes a format or if a DS game is played. I would assume GBA VC titles booted from sysnand would also result in MSETT exploit being cleared out, but have no GBA titles of my own to test that.
I could see Gateway using this to cut costs. It would not be that big of a problem for consumers to need internet access every now and then to reinstall MSETT. The new exploit has to be booted from web browser everytime and that's one reason why Gateway made the downgrade pack and what not for those who don't want to be near an internet connection.
Hey for all we know, Gateway could pull a rabbit out of their ass and come out with their own DS game loader tacked on to their Gateway menu which wouldn't clear out the MSETT exploit (as they have been rumered to be working on getting GBA/DS games to boot in gateway/classic mode). In theory they could modify/patch Arm9 to load DS games from SD card and simply remap where the DS profile is stored while DS games are running so as to not interfere with the existing profile used by the MSETT exploit.
Not likely anytime soon, but one could dream....
- Joined
- Jul 18, 2008
- Messages
- 923
- Trophies
- 0
- Age
- 46
- Location
- Glastonbury
- Website
- xat.com
- XP
- 296
- Country
Just used that method to get emunand and everything is working so far, just updating the emunand at the the moment.
Can you please supply source so I may set 6.x ROP chain? Many thanks.
https://github.com/WinterMute/ROPInstaller/tree/master/ROPChains
Will im not gonna get this working iv did this https://gbatemp.net/threads/tutorial-4-5-sysnand-4-5-cfw-9-4-emunand-without-gateway.378721/ and all i keep getting is a failed to connect so no CIA install for me im doing every thing right so don't know whats up.
im doing every thing right so don't know whats up.
- Joined
- Oct 7, 2007
- Messages
- 4,470
- Trophies
- 3
- Age
- 36
- Location
- Levelland, Texas
- Website
- www.mariopc.co.nr
- XP
- 6,911
- Country
I don't see how this will make it work on 6.x. MSETT exploit existed up until 7.x, But it was only really an entry point. The exploit loaded from launcher.dat was patched in 5.0.
Though you could in theory do a new ROP chain for MSETT on 6.x/7.x that is somehow a hybrid of what the spider tools exploit does. But whether or not that could be done from DS Profile or not is the question. Either way, you are in for a LOT of code work if you ever hope to do that with MSETT.
EDIT: Oh so that's just a memory dumper (which apparently still works in 6.x). Thought it was something involving booting into CFW or something....Never mind then.
Nope, but if you needed to use any DS Profile hacks without a DS cart you could do that with this.
- Joined
- Oct 7, 2007
- Messages
- 4,470
- Trophies
- 3
- Age
- 36
- Location
- Levelland, Texas
- Website
- www.mariopc.co.nr
- XP
- 6,911
- Country
No. That still requires the Gateway card. (if you are using Gateway's launcher) And if it's the MT-Card launcher, you still need the MT-Card to boot into the mode that allows booting CIAs/roms. Classic mode with either one does not allow that currently.
EDIT: Oh so that's just a memory dumper (which apparently still works in 6.x). Thought it was something involving booting into CFW or something....Never mind then.
Did you not see this?
https://github.com/WinterMute/ROPInstaller/tree/master/ROPChains/6.x/BootStrap
i went into the browser with code.bin on my sd card went on apache thunder's website and got an error has occured(dialog), i pressed ok and was on the homemenu. is it supposed to work this way?
Yep that is what it did with me and the DS Profile hack was installed. to test if it worked go to the ds profile and see if it locks up if it does then it did.
