Hacking [WIP] KARL3DS - Kernel access on N3DS via Ninjhax + Loadcode

[shinyquagsire23]

"muh warez" again

Anyway, how about running translations? I really, really want to play the Re: Digitize Decode translation that Romsstar and his pals are cooking up and I'd hate having to pay $60 for a flashcart for it, at that point I might as well just pirate the ROM. But if I only need to buy the game and there's some on-the-fly patching app or something like that it'd be golden.

I kinda want to do some romFS patching/redirection stuff, partially as a research tool and also as a way for translation stuff as well. I haven't looked at how the romFS mounting is done though.

 

[Zidapi]

In a nutshell, we all ended up on agreeing to it because we would rather this project stay to it's original goals rather than becoming the base for a warez loader.

Good for you. The fact of the matter is that those with the skills to make a CFW are antipiracy. You guys are the first who take that stance and are willing to make your work public. Pro-piracy folk are just going the have to deal with that fact.

Those looking for a free ROM loader are going to have to find someone who shares their point of view and has both the skill and the willingness to make it public. But, it seems that such a person doesn't exist right now.

Although I can appreciate and respect this, I'm not certain I get the point of it, when there's already numerous other ways to load pirate games (flash carts, cfw, etc). Either way, good luck on the project, it seems promising.

Precisely. You said it; there's already numerous other ways to load pirate games. So why do these guys need to provide another?

 

[loco365]

Precisely. You said it; there's already numerous other ways to load pirate games. So why do these guys need to provide another?

It's because current methods require you spending obscene amounts of money.

 

[WulfyStylez]

I kinda want to do some romFS patching/redirection stuff, partially as a research tool and also as a way for translation stuff as well. I haven't looked at how the romFS mounting is done though.

RomFS redirection to SD, as well as romfs patching in general I think, require title sig checks to be removed. Probably not something to be messed with.

 

[Wowfunhappy]

Hi, I really don't want to bring the open/closed discussion up again, or add the number of questions from people asking what will or will not be possible with this project, but I have to ask:

The main reason I'm following this project—the main reason I'm following the 3DS hacking scene, for that matter—is that I want to create a North American, non-XL New 3DS. I know this already listed as a goal of the project, but I want to do it in a somewhat unique way: I don't want to use EmuNand or have to patch anything. I want to use an official SecureInfo_A file from a donor system to change SysNand's region, and then update the console past the point of homebrew compatibility and use it like a normal North American unit.

At least on old 3DS's, this process (as outlined by Cearp) requires you to be able to do three things:

1) Dump and restore NANDs.
2) Dump the NAND's Xorpad.
3) Install cia files.

The one I'm worried about is #3. In order to change the region, you have to install cia files for the firmware of the target region. If you guys are putting anti-piracy measures in place—which, in general, I greatly applaud—is this going to be impossible?

 

[Vappy]

I kinda want to do some romFS patching/redirection stuff, partially as a research tool and also as a way for translation stuff as well. I haven't looked at how the romFS mounting is done though.

Something like cell9's patchrom? I haven't tried it myself, but seems to be similar to what you're describing.

I want to create a North American, non-XL New 3DS. I know this already listed as a goal of the project, but I want to do it in a somewhat unique way: I don't want to use EmuNand or have to patch anything. I want to use an official SecureInfo_A file from a donor system to change SysNand's region, and then update console past the point of homebrew compatibility and use it like a normal North American unit.

Doesn't that method of changing region lock you out of the eShop? Or does it access the eShop normally, but with the original region of the console?

 

[Wowfunhappy]

Doesn't that method of changing region lock you out of the eShop? Or does it access the eShop normally, but with the original region of the console?

I don't want to get too into this here—I made a dedicated topic a while back specifically so that it wouldn't clog up other threads—but essentially, sometimes it does, and sometimes it doesn't, and we're not sure why.

While I'm nervous about the eShop—I won't know if it works until after I've updated, so it's risky—I'm reasonably confident I won't have issues. The error seems to be related to NNIDs and/or the network services agreement, and I've been careful to not set up or accept either.

 

[WulfyStylez]

Hi, I really don't want to bring the open/closed discussion up again, or add the number of questions from people asking what will or will not be possible with this project, but I have to ask:

The main reason I'm following this project—the main reason I'm following the 3DS hacking scene—is that I want to create a North American, non-XL New 3DS. I know this already listed as a goal of the project, but I want to do it in a somewhat unique way: I don't want to use EmuNand or have to patch anything. I want to use an official SecureInfo_A file from a donor system to change SysNand's region, and then update console past the point of homebrew compatibility and use it like a normal North American unit.

At least on old 3DS's, this process (as outlined by Cearp) requires you to be able to do three things:

1) Dump and restore NANDs.
2) Dump the NAND's Xorpad.
3) Install cia files.

The one I'm worried about is #3. In order to change the region, you have to install cia files for the firmware of the target region. If you guys are putting anti-piracy measures in place—which, in general, I greatly applaud—is this going to be impossible?

Decryption stuff should be pretty easy to port to karl3ds. Explicitly speaking, you can install signed CIAs without removing signing checks. I think even 0x7B and access to all services should let someone make an installer for signed CIAs. Grab those from a game's update partition and you'd be good to go there. You're going to have to sit tight for a bit, though. I'm sure someone'll make a guide for it when the time comes.

 

[Dazzozo]

Apparently I'm not listed as part of the "team" but...

 

[boomie0123]

Apparently I'm not listed as part of the "team" but...

... Go on...

 

[MasterBro10]

Came back on this thread and wow, no CIA support, I'm not upset, but would this limit homebrew? If it doesn't, how would using KARL3DS speed up homebrew, and would certain emulators hopefully have sound support, speed etc. using KARL3DS?

 

[AquaX101]

Apparently I'm not listed as part of the "team" but...

...CFW on 9.2?

 

[Psi-hate]

Apparently I'm not listed as part of the "team" but...

This is really interesting! You said you weren't listed as part of the team, but the "but" implies you might've used the exploit for this perhaps? I hope that's true!

 

[Vappy]

would certain emulators hopefully have sound support

Could probably use this, once it's further developed, to rip a DSP binary from a retail game and use that for sound.

 

[Dazzozo]

This is really interesting! You said you weren't listed as part of the team, but the "but" implies you might've used the exploit for this perhaps? I hope that's true!

I've been working with them on this since about Monday or so. It's really just so we can get our eyes in and play around for now but we're constantly bouncing around ideas.

I'm not sure what you mean by "the" exploit. We plan on supporting <=9.2.

Thought it would be nice if you saw we do have "stuff".

 

[puss2puss]

..interresting.. would be hyper if it was on new3ds but hey..whatever it is..pretty sure it could be ported for the n3ds if, IF, its a ''real'' deal.. ..
..hum hum...Dazzozo, linux? ..

nevermind..wrote to fast

 

[AquaX101]

I've been working with them on this since about Monday or so. It's really just so we can get our eyes in and play around for now but we're constantly bouncing around ideas.

I'm not sure what you mean by "the" exploit. We plan on supporting <=9.2.

Thought it would be nice if you saw we do have "stuff".

So it is cfw?

 

[Psi-hate]

I've been working with them on this since about Monday or so. It's really just so we can get our eyes in and play around for now but we're constantly bouncing around ideas.

I'm not sure what you mean by "the" exploit. We plan on supporting <=9.2.

Thought it would be nice if you saw we do have "stuff".

Either way, it's really impressive! I wonder if you or other people will release this version/type as a separate thing or maybe something similar, while keeping the original Karl3DS true to what it's for. One for the main goal, and one for whatever else? Probably not gonna happen from the team, but it'd be really cool!

 

[Apache Thunder]

...CFW on 9.2?

Now that...is interesting...Probably not going to see the light of day unfortunately. inb4 the mass of users demanding a release and whining about never getting it.

 

[TehLexinator]

Apparently I'm not listed as part of the "team" but...

Cool.

Thanks for sharing!