Homebrew Finishing Yifan's SpiderNinja

Slushie3DS

Cold Beverage Lover
OP
Member
Joined
Jan 9, 2015
Messages
707
Trophies
0
Age
29
XP
420
Country
United States
Yifan's Github said:
"Make all code run on thread 0."
"Close other spider threads: Right now, the main problem is that some other thread running on another core is crashing when the 0x00100000 code pages are replaced. We need to find what thread is running and using where the thread stacks are located, we patch the stack to return to CloseThread. This may be made possible by hooking ARM11 kernel undefined instruction vector and finding the SP of crashing threads."
I figured I'd create a thread in hope that the various developers that trek the forums would see and not know of his project. Yifan set out to bring The Homebrew Launcher to the browser for those that do not own copies of Cubic Ninja. He completed most of the issues, but abandoned the project quite some time ago. If I remember correct, he said it was because he saw a lack of desire for it in the community. I looked at what was needed, and it is far beyond my understanding. For those of you that may understand, and would like to help the community a ton, you can find the repository here.

It can be accomplished through teamwork!
 

Suiginou

(null)
Member
Joined
Jun 26, 2012
Messages
565
Trophies
0
Location
pc + 8
XP
738
Country
Gambia, The
It's not happening, m8. It hasn't happened for months and it's been brought up often enough for the relevant people to know.

Gotta support that defunct Cubic Ninja studio!

EDIT: New idea, though: Why not abuse the bootstrap stuff? Someone made it spider-usable in https://gbatemp.net/threads/how-to-spoof-firmware-to-access-eshop-and-more-on-new-3ds.386591/. That way, you could just launch a new KProcess, kill spider from within kernel and declare the new process the running process. There'll be a slight problem that the hb pseudo-service isn't running, but I have my doubts that most apps really need it in the first place.
 

duke_srg

Well-Known Member
Member
Joined
Mar 1, 2011
Messages
1,862
Trophies
0
Age
44
Location
Moscow
XP
807
Country
Serbia, Republic of
I'm only gathered smea, Yifan lu and GW launcher data and know nothing note than is available to public :( Even Korean/Chinese/Taiwan versions of spider3DSTools fork is suspended because of no use without addresses of gadgets like file write, which I just can't get.
 

yifan_lu

@yifanlu
Member
Joined
Apr 28, 2007
Messages
663
Trophies
0
XP
1,671
Country
United States
It's not happening, m8. It hasn't happened for months and it's been brought up often enough for the relevant people to know.

Gotta support that defunct Cubic Ninja studio!

EDIT: New idea, though: Why not abuse the bootstrap stuff? Someone made it spider-usable in https://gbatemp.net/threads/how-to-spoof-firmware-to-access-eshop-and-more-on-new-3ds.386591/. That way, you could just launch a new KProcess, kill spider from within kernel and declare the new process the running process. There'll be a slight problem that the hb pseudo-service isn't running, but I have my doubts that most apps really need it in the first place.

That someone is me btw. and on the subject of unfinished projects, I also have this unfinished project https://github.com/yifanlu/service-patch which is the start of what you're proposing
 

Suiginou

(null)
Member
Joined
Jun 26, 2012
Messages
565
Trophies
0
Location
pc + 8
XP
738
Country
Gambia, The
That someone is me btw. and on the subject of unfinished projects, I also have this unfinished project https://github.com/yifanlu/service-patch which is the start of what you're proposing
First, allow me to thank you for your work with fwspoof.

In my experience, you can't apparently safely write to anything in usermode from within kernelmode without a fixed address (which obviously changes because of memory mapping). Plus kernel mode from spider seems to be very picky sometimes and nobody knows why.

I'm only gathered smea, Yifan lu and GW launcher data and know nothing note than is available to public :( Even Korean/Chinese/Taiwan versions of spider3DSTools fork is suspended because of no use without addresses of gadgets like file write, which I just can't get.
You can get those, actually. Get the NCCH and cetk for those regions from the CDN, get the decrypted titlekey (via Decrypt9), decrypt the NCCH with the titlekey (AES-CBC, dunno what the AES key is, though; I think it's related to something in the TMD). Load up the exefs for both in a hex editor, jump to IFile_* in a spider version you do have the correct offsets to, take eight bytes, and look for those eight bytes in the exefs for the region you don't know the IFile_* function address to. Prerequisite: Having an idea how the exefs address relates to the address in RAM, but that's likely just a static offset.
 
  • Like
Reactions: Oishikatta

dubbz82

Well-Known Member
Member
Joined
Feb 2, 2014
Messages
1,572
Trophies
0
Age
41
XP
1,215
Country
United States
You mean the one that doesn't exist anymore? XD At least Ubisoft gets money still, I guess...



Cubic ninja carts have long since been out of production, and most (all?) retailers simply buy the product outright as far as video games are concerned, and eat the cost at the store level if it doesn't sell. I know this is a little off topic, but figured it'd be worth mentioning. Source - I worked retail for 12 years.
 
  • Like
Reactions: TotalInsanity4

Idaho

Well-Known Member
Member
Joined
Oct 3, 2013
Messages
884
Trophies
1
Age
29
XP
1,408
Country
France
Especially since Pasta is out, finishing SpiderNinja would be amazing and groundbreaking, I bought Cubic Ninja but I know a lot of guys with not as much money as I have who'd appreciate such a thing to be available :)
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Bunjolio @ Bunjolio:
    if ur on a Chromebook and cant change jack about the laptop that's what I gotta use
  • SylverReZ @ SylverReZ:
    One of the sites that weren't blocked on the school's network was some file uploading sites. I would upload some games, write down the URL and take it to school one day.
  • Bunjolio @ Bunjolio:
    lol
  • SylverReZ @ SylverReZ:
    I did it when the teachers werent looking ofc. I even managed to take in a USB stick that wasn't allowed.
  • Bunjolio @ Bunjolio:
    my school has a chrome extension called light speed filter agent and it legit blocks YouTube pfps since the file cdn(I think aka yt3.ggpht.com) is classed as mature
  • Bunjolio @ Bunjolio:
    mhm
  • Bunjolio @ Bunjolio:
    they have other stuff like goguardian too
  • SylverReZ @ SylverReZ:
    Ours mainly relied on the router, I believe.
  • Bunjolio @ Bunjolio:
    our school network and chrome policies block stuff too
  • Bunjolio @ Bunjolio:
    alot of yt to mp3 sites are blocked by light speed for "Security"
  • SylverReZ @ SylverReZ:
    It was easy to bypass some of the restrictions, as one of the admins left a registry key in the administrative shares drive, which allowed me to get around the blocking of some sites.
  • Bunjolio @ Bunjolio:
    tf does tta mean
  • Bunjolio @ Bunjolio:
    yeah this is chrome os
  • Bunjolio @ Bunjolio:
    cant do shit
  • SylverReZ @ SylverReZ:
    @Bunjolio, Wdym 'TTA'?
  • Bunjolio @ Bunjolio:
    that* as in why yt to mp3 sites are blocked for security
  • SylverReZ @ SylverReZ:
    @Bunjolio, Remember when YouTubetoMP3 was a thing back in the 2010s?
  • SylverReZ @ SylverReZ:
    Until YT updated some stuffs and broke the website.
  • Bunjolio @ Bunjolio:
    I was 2 in 2010
  • SylverReZ @ SylverReZ:
    Oh lol
  • Bunjolio @ Bunjolio:
    lol
  • SylverReZ @ SylverReZ:
    This was in the Minecraft-era.
  • AncientBoi @ AncientBoi:
    lol Bun rockin out at 2 :rofl2:
    AncientBoi @ AncientBoi: lol Bun rockin out at 2 :rofl2: