Hacking [RCM Payload] Hekate - CTCaer mod

[Quiggy]

Is there anything we can do to support you with the 3.0.1 support? I have a console with this firmware and everything is prepared ...

 

[CTCaer]

Is there anything we can do to support you with the 3.0.1 support? I have a console with this firmware and everything is prepared ...

Thanks. I have the required files for 3.0.1/.2 but I have problems with IDA pro, where it crashes on me after the an update.
I don't have time to reinstall it and migrate all my settings, workspaces, plugins, etc for now.

 

[Rune]

Any chance you can double the size of the text?

 

[Hodorian]

Using version 1.6.
Started a dump on fat32 but it failed on a (16 gB) card.
Then i formatted the card on exFat on a pc.
Then formatted a second time on the switch.

Now if i start the dump, it stucks on 0%.

 

[chronoss]

Using version 1.6.
Started a dump on fat32 but it failed on a (16 gB) card.
Then i formatted the card on exFat on a pc.
Then formatted a second time on the switch.

Now if i start the dump, it stucks on 0%.

Be patient when you launch the dump...

 

[CTCaer]

Using version 1.6.
Started a dump on fat32 but it failed on a (16 gB) card.
Then i formatted the card on exFat on a pc.
Then formatted a second time on the switch.

Now if i start the dump, it stucks on 0%.

No error on both times? Can't help without the yellow one.

 

[Hodorian]

No error on both times? Can't help without the yellow one.

the first one was an writing error. and with the 0% stuck, nothing happens.(same error with version 1.5)

there was only a 0kb big bin file on the sd card. no partial.idx file.

i try to check the sd card and try again later.

 

[CTCaer]

Format it with FAT32 or exFAT in windows. Make sure the cluster size is 32KB.

Btw, there are 45 different errors that can happen on that time, so make sure you write it down on your next try.

 

[coned_miro]

Thanks. I have the required files for 3.0.1/.2 but I have problems with IDA pro, where it crashes on me after the an update.
I don't have time to reinstall it and migrate all my settings, workspaces, plugins, etc for now.

Are you saying the files are ready ,you just can't compile? Bummer.

 

[dapharsyde]

Are you saying the files are ready ,you just can't compile? Bummer.

No, I get the feeling that CTCaer has the required files dumped from the 3.0.1 and 3.0.2 firmwares, but he still needs to load them into IDA pro so he can run a debug trace and figure out the correct offsets to add to the secmon_patch. Unfortunately, his installation of IDA Pro is no longer functional, so he can't do this for us.

If by chance CTCaer is willing to teach us how to fish, we can install IDA Pro and do it ourselves, but that would probably be a lot to ask.

 

[CTCaer]

Are you saying the files are ready ,you just can't compile? Bummer.

You misunderstood.

To develop the patches, I need to reverse engineer nintendo's code first. It's the opposite of compiling. And then I can compile a new hekate version.
Anyway, I can't do that with damn IDA pro crashing on me.


On the other hand, I've implemented a 16px font (original text is 8px).
But it breaks all long text, because now the limit is 45 characters (from 90).
It will take a while because I have to fix:

----------------------

No, I get the feeling that CTCaer has the required files dumped from the 3.0.1 and 3.0.2 firmwares, but he still needs to load them into IDA pro so he can run a debug trace and figure out the correct offsets to add to the secmon_patch. Unfortunately, his installation of IDA Pro is no longer functional, so he can't do this for us.

If by chance CTCaer is willing to teach us how to fish, we can install IDA Pro and do it ourselves, but that would probably be a lot to ask.

That's absolutely correct.

Maybe, I'll do a new installation in a VM. But still, I don't want to find the correct variables all over again..

 

[Hodorian]

Format it with FAT32 or exFAT in windows. Make sure the cluster size is 32KB....

Thanks, now it works perfectly. I formatted in slow mode with exFat and 32kB.

I don't know why it stucked on 0%. Maybe the cluster size was different as i formatted the sd with the switch.

 

[dapharsyde]

That's absolutely correct.

Maybe, I'll do a new installation in a VM. But still, I don't want to find the correct variables all over again..

By any chance is there a writeup on how to find these variables and offsets? It's been ages since I worked in IDA Pro but I'm a little curious how this stuff works, if you're willing to push me in the right direction. I have dump files from my 4.1.0 switch and my 3.0.2 switch. If I had the instructions available, I could try them out with my 4.1.0 dump files and see if I arrive at the same offsets that have already been committed to the source code. If I'm successful there, I assume I could then do the same with my 3.0.2 files.

 

[CTCaer]

Thanks, now it works perfectly. I formatted in slow mode with exFat and 32kB.

I don't know why it stucked on 0%. Maybe the cluster size was different as i formatted the sd with the switch.

Slow mode writes zeroes all over the created partition.
If this fixed it, it means that your sd card had bad sectors, which now are either corrected or marked for avoidance.
If it's the latter, you can normally check by doing a chkdsk Z: (If you run chkdsk /f /r /x Z: it will try to correct them also).
But anyway, now it's fixed.

Too bad you didn't write down the yellow error. I wanted to know what error FatFS spits for a bad sector. :/

By any chance is there a writeup on how to find these variables and offsets? It's been ages since I worked in IDA Pro but I'm a little curious how this stuff works, if you're willing to push me in the right direction. I have dump files from my 4.1.0 switch and my 3.0.2 switch. If I had the instructions available, I could try them out with my 4.1.0 dump files and see if I arrive at the same offsets that have already been committed to the source code. If I'm successful there, I assume I could then do the same with my 3.0.2 files.

You need the secure engine binary from package1.
The only one I've done before was for 1.0.0. And Switchbrew helped a lot.

 

[cicciopas]

Thanks. I have the required files for 3.0.1/.2 but I have problems with IDA pro, where it crashes on me after the an update.
I don't have time to reinstall it and migrate all my settings, workspaces, plugins, etc for now.

Hi CTCaer, if you are able to start the CFW on version 3.0.x, please try to release a working version as soon as possible. We are many around the world blocked on 3.0.x firmware without the ability to access the homebrew launcher.
The most we can get is the pink screen.
The temptation to update is so great but we are always hoping to receive the HBL by staying on a low firmware.
If you can help us we would be infinitely grateful.
I write from Italy and I specifically registered for this request.
Keep it up and greetings.

 

[metaljay]

Just ran this on a brand new 2.1 switch. Worked perfect!
Thanks

 

[neomarin]

Im whaiting on 3.0.1 version.
@CTCaer thanks for you work.

 

[Deleted member 373223]

Been wondering something. This says that the autorcm included is v2, but the github link only has a v1?

 

[SleepyPrince]

You probably have read it wrong, the thread said this feature “.. is based on @Reisyukaku AutoRCM v2”
Which is included in hekate V1.6

 

[:-infern:]

What is left todo for 3.0.1/3.0.2 support?