Hacking Official Corbenik - Another CFW for advanced users (with bytecode patches!)

The Catboy

GBAtemp Official Catboy™: Big Smug
Member
Joined
Sep 13, 2009
Messages
26,705
Trophies
4
Location
Making a non-binary fuss
XP
33,795
Country
Antarctica
I'd rather set up a bootloader and use d0k3's *9 tools. They do the same job but are separate from the CFW, which helps it keep the code clean, something which is very important in projects of this magnitude (THERE'S A WHOLE VM IN THERE FFS)
It wasn't so much of serious statement as a random thought.
 
  • Like
Reactions: chaoskagami

chaoskagami

G̷̘̫̍̈́̊̓̈l̴̙͔̞͠i̵̳͊ţ̸̙͇͒̓c̵̬̪̯̥̳͒͌̚h̵̹̭͛̒̊̽̚
OP
Developer
Joined
Mar 26, 2016
Messages
1,365
Trophies
1
Location
↑↑↓↓←→←→BA
Website
github.com
XP
2,248
Country
United States
I'd rather set up a bootloader and use d0k3's *9 tools. They do the same job but are separate from the CFW, which helps it keep the code clean, something which is very important in projects of this magnitude (THERE'S A WHOLE VM IN THERE FFS)

Ahahaha. Yeah, there's a VM here. That's enough to maintain already, and I have the code sort of cleanly split up as much as possible. NAND dumping and decryption has no place in a CFW, IMHO.

An ARM9 or ARM11 thread, though...would be nice.

It was originally a closed source project that Roxas released after he got salty that someone RE'd it, so the codebase is pretty shit for starters. There's a "bloat" meme with Luma, but rxTools deserves the bloat label. There are the "tools" that are totally outclassed by the *9 tools (and half the rxTools tools don't even work) and a good deal of the CFW features (ie TWL_FIRM on n3ds) don't work either. The main dev Roxas abandoned support and left it to the Pasta team, which now is abandoning it because they can't figure out how the codebase works.

Sounds like a long, storied, and crappy history. No wonder, I guess. I'm seeing parallels to NTR here. Maybe.

Who has said Luma is bloated? Have they even gone through the code? Luma is a bit bigger than ReiNand, sure, but it's still tiny and readable for the most part, and kBs isn't a lot of space taken. I'm not seeing the bloat.
 

astronautlevel

Well-Known Member
Member
Joined
Jan 26, 2016
Messages
4,127
Trophies
0
Location
Maryland
Website
ataber.pw
XP
4,975
Country
United States
Who has said Luma is bloated? Have they even gone through the code? Luma is a bit bigger than ReiNand, sure, but it's still tiny and readable for the most part, and kBs isn't a lot of space taken. I'm not seeing the bloat.
It was about a month or two ago that the bloat meme started, people were calling it "AuReiTools" (or something like that) and joking about bloat after Aurora added in stuff like TWL/AGB firm patches. It's mostly died down now, thank god, given that it was mostly people who have no idea what they're talking about
 
Last edited by astronautlevel,

Wolfvak

nyaa~
Member
Joined
Oct 25, 2015
Messages
918
Trophies
1
XP
3,158
Country
Uruguay
Who has said Luma is bloated? Have they even gone through the code? Luma is a bit bigger than ReiNand, sure, but it's still tiny and readable for the most part, and kBs isn't a lot of space taken. I'm not seeing the bloat.

Heh, 12KBs of the whole payload are taken up by the loader module :P. People should really learn to read the code...

@Crystal the Glaceon, my recommendation would be to set up a boot manager and start from there: you will not regret it.
 

chaoskagami

G̷̘̫̍̈́̊̓̈l̴̙͔̞͠i̵̳͊ţ̸̙͇͒̓c̵̬̪̯̥̳͒͌̚h̵̹̭͛̒̊̽̚
OP
Developer
Joined
Mar 26, 2016
Messages
1,365
Trophies
1
Location
↑↑↓↓←→←→BA
Website
github.com
XP
2,248
Country
United States
Salty people do ;O;

SaltFW is without a doubt, completely impossible to call bloated. And yeah, suppose it depends on your definition.

It was about a month or two ago that the bloat meme started, people were calling it "AuReiTools? (or something like that) after Aurora added in stuff like TWL/AGB firm patches. It's mostly died down now, thank god, given that it was mostly people who have no idea what they're talking about

Considering that TWL and AGB are so tiny, this is hilarious. In a bad way. If they want to complain about bloat, the AGB/TWL patches are the wrong thing to complain about.
 

The Catboy

GBAtemp Official Catboy™: Big Smug
Member
Joined
Sep 13, 2009
Messages
26,705
Trophies
4
Location
Making a non-binary fuss
XP
33,795
Country
Antarctica
Heh, 12KBs of the whole payload are taken up by the loader module :P. People should really learn to read the code...

@Crystal the Glaceon, my recommendation would be to set up a boot manager and start from there: you will not regret it.
I am actually running ctrbootmanager9 with 6 different CFW's and several A9LH apps. I don't regret it.
SaltFW is without a doubt, completely impossible to call bloated. And yeah, suppose it depends on your definition.



Considering that TWL and AGB are so tiny, this is hilarious. In a bad way. If they want to complain about bloat, the AGB/TWL patches are the wrong thing to complain about.
Actually the name SaltFW was in response to the community. Otherwise the dev was pretty unsalty.
I do recall a rather short period of time when it was becoming "cool" to attack Luma3DS because it was getting so popular.
 
Last edited by The Catboy,
  • Like
Reactions: chaoskagami

Elveman

Just passing by
Member
Joined
Feb 1, 2015
Messages
456
Trophies
0
Age
26
Location
Moscow city
XP
956
Country
Russia
Mystery Machine in Corbenik... This is awesome! Does that mean we're getting closer to RomFS patching/redirection?

Interestingly enough, Pasta team became abandoning this project after the A9LH shenanigans. I think they tried to make rxTools as minimalistic as possible in that period of time (and there were forks with A9LH payloads but those didn't even have FIRM patching) but quickly shut it down.
There's one dev that continues working on rxTools though. It's Duke (or duke_srg) with his Yet Another rxTools but... that's a lot of work for him alone :/
 

chaoskagami

G̷̘̫̍̈́̊̓̈l̴̙͔̞͠i̵̳͊ţ̸̙͇͒̓c̵̬̪̯̥̳͒͌̚h̵̹̭͛̒̊̽̚
OP
Developer
Joined
Mar 26, 2016
Messages
1,365
Trophies
1
Location
↑↑↓↓←→←→BA
Website
github.com
XP
2,248
Country
United States
Mystery Machine in Corbenik... This is awesome! Does that mean we're getting closer to RomFS patching/redirection?

Well, I won't make any promises, but I'll at least say this: HANS could be directly baked into loader with some minor changes. Overlays are harder if you want NTR-style, since it requires resident code (which has to go somewhere.) It's possible. It also isn't the kind of thing that can be done in bytecode.

Another approach to overlays might be to RE FS and take it over directly...but that's a lot harder on the 'hard' scale.

Either way, I will say one of my goals may or may not be to put the final nail in NTR's coffin. I want overlays as much as the next guy. :wink:

As far as mysterymachine goes, it's a simple code patch. We're not any closer. Yet.

Interestingly enough, Pasta team became abandoning this project after the A9LH shenanigans. I think they tried to make rxTools as minimalistic as possible in that period of time (and there were forks with A9LH payloads but those didn't even have FIRM patching) but quickly shut it down.
There's one dev that continues working on rxTools though. It's Duke (or duke_srg) with his Yet Another rxTools but... that's a lot of work for him alone :/

Considering that codebase? Yeah, a lot of work is ahead of him. Props to him, though.
 
Last edited by chaoskagami,

Orkna

Well-Known Member
Member
Joined
Feb 7, 2014
Messages
379
Trophies
0
Location
Sviiiiiden
XP
277
Country
I can't boot the latest version (from source). The screen freezes at "emunand: head is on sector xxxxxx".
It is very hard to test removing patches with the cursor jumping around like crazy. ;)
Same on both O3DS and N3DS.

Config file loaded.
Loading firmware...
FIRM load triggered.
NATIVE_FIRM
[lkdne9sfp]
Ver: 00000021, 1
TWL_FIRM
[lkdne9sfp]
Ver: 00000000, 1
AGB_FIRM
[lkdne9sfp]
Ver: 00000000, 1
Patching firmware...
rel 1
l:0 g:0 e:0 f:0 m:1 o:0x00000000
c:0x00000002 m:0x24300000 n:24500002
find 4 ...
l:0 g:0 e:0 f:1 m:1 o:0x000d8b88
c:0x00000008 m:0x243d8b88 n:24500008
abortnf
l:0 g:0 e:0 f:1 m:1 o:0x000d8b88
c:0x00000009 m:0x243d8b88 n:24500009
fwd 2
l:0 g:0 e:0 f:1 m:1 o:0x000d8b8a
c:0x0000000b m:0x243d8b8a n:2450000b
set 1, ...
l:0 g:0 e:0 f:1 m:1 o:0x000d8b8b
c:0x0000000e m:0x243d8b8b n:2450000e
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x24080300 n:2450000f
rel 3
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000002 m:0x24080300 n:24500011
find 4 ...
l:0 g:0 e:0 f:1 m:3 o:0x0001bfbc
c:0x00000008 m:0x2409c2bc n:24500017
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x0001bfbc
c:0x00000009 m:0x2409c2bc n:24500018
back 1
l:0 g:0 e:0 f:1 m:3 o:0x0001bfbb
c:0x0000000b m:0x2409c2bb n:2450001a
back 255
l:0 g:0 e:0 f:1 m:3 o:0x0001bebc
c:0x0000000d m:0x2409c1bc n:2450001c
find 4 ...
l:0 g:0 e:0 f:1 m:3 o:0x0001bf7a
c:0x00000013 m:0x2409c27a n:24500022
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x0001bf7a
c:0x00000014 m:0x2409c27a n:24500023
set 4, ...
l:0 g:0 e:0 f:1 m:3 o:0x0001bf7e
c:0x0000001a m:0x2409c27e n:24500029
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x24080300 n:2450002a
rel 1
l:0 g:0 e:0 f:0 m:1 o:0x00000000
c:0x00000002 m:0x24300000 n:2450002c
find 6 ...
l:0 g:0 e:0 f:1 m:1 o:0x0009df64
c:0x0000000a m:0x2439df64 n:24500034
abortnf
l:0 g:0 e:0 f:1 m:1 o:0x0009df64
c:0x0000000b m:0x2439df64 n:24500035
set 6, ...
l:0 g:0 e:0 f:1 m:1 o:0x0009df6a
c:0x00000013 m:0x2439df6a n:2450003d
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x24080300 n:2450003e
rel 2
l:0 g:0 e:0 f:0 m:2 o:0x00000000
c:0x00000002 m:0x24100000 n:24500040
n3ds
l:0 g:0 e:1 f:0 m:2 o:0x00000000
c:0x00000003 m:0x24100000 n:24500041
jmpeq 6
l:0 g:0 e:1 f:0 m:2 o:0x00000000
c:0x00000006 m:0x24100000 n:24500044
seek 1465700
l:0 g:0 e:1 f:0 m:2 o:0x00165d64
c:0x0000000b m:0x24265d64 n:24500049
set 6, ...
l:0 g:0 e:1 f:0 m:2 o:0x00165d6a
c:0x00000013 m:0x24265d6a n:24500051
seek 1525578
l:0 g:0 e:1 f:0 m:2 o:0x0017474a
c:0x00000018 m:0x2427474a n:24500056
set 2, ...
l:0 g:0 e:1 f:0 m:2 o:0x0017474c
c:0x0000001c m:0x2427474c n:2450005a
seek 1529150
l:0 g:0 e:1 f:0 m:2 o:0x0017553e
c:0x00000021 m:0x2427553e n:2450005f
set 4, ...
l:0 g:0 e:1 f:0 m:2 o:0x00175542
c:0x00000027 m:0x24275542 n:24500065
seek 1529504
l:0 g:0 e:1 f:0 m:2 o:0x001756a0
c:0x0000002c m:0x242756a0 n:2450006a
set 4, ...
l:0 g:0 e:1 f:0 m:2 o:0x001756a4
c:0x00000032 m:0x242756a4 n:24500070
seek 1530510
l:0 g:0 e:1 f:0 m:2 o:0x00175a8e
c:0x00000037 m:0x24275a8e n:24500075
set 4, ...
l:0 g:0 e:1 f:0 m:2 o:0x00175a92
c:0x0000003d m:0x24275a92 n:2450007b
seek 1530522
l:0 g:0 e:1 f:0 m:2 o:0x00175a9a
c:0x00000042 m:0x24275a9a n:24500080
set 4, ...
l:0 g:0 e:1 f:0 m:2 o:0x00175a9e
c:0x00000048 m:0x24275a9e n:24500086
seek 1530534
l:0 g:0 e:1 f:0 m:2 o:0x00175aa6
c:0x0000004d m:0x24275aa6 n:2450008b
set 4, ...
l:0 g:0 e:1 f:0 m:2 o:0x00175aaa
c:0x00000053 m:0x24275aaa n:24500091
seek 1530770
l:0 g:0 e:1 f:0 m:2 o:0x00175b92
c:0x00000058 m:0x24275b92 n:24500096
set 4, ...
l:0 g:0 e:1 f:0 m:2 o:0x00175b96
c:0x0000005e m:0x24275b96 n:2450009c
jmp 185
l:0 g:0 e:1 f:0 m:2 o:0x00175b96
c:0x000000b9 m:0x24275b96 n:245000f7
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x24080300 n:245000f8
rel 3
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000002 m:0x24080300 n:245000fa
find 4 ...
l:0 g:0 e:0 f:1 m:3 o:0x0003ab9c
c:0x00000008 m:0x240bae9c n:24500100
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x0003ab9c
c:0x00000009 m:0x240bae9c n:24500101
set 2, ...
l:0 g:0 e:0 f:1 m:3 o:0x0003ab9e
c:0x0000000d m:0x240bae9e n:24500105
rewind
l:0 g:0 e:0 f:1 m:3 o:0x00000000
c:0x0000000e m:0x24080300 n:24500106
find 4 ...
l:0 g:0 e:0 f:1 m:3 o:0x00034331
c:0x00000014 m:0x240b4631 n:2450010c
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x00034331
c:0x00000015 m:0x240b4631 n:2450010d
back 1
l:0 g:0 e:0 f:1 m:3 o:0x00034330
c:0x00000017 m:0x240b4630 n:2450010f
set 4, ...
l:0 g:0 e:0 f:1 m:3 o:0x00034334
c:0x0000001d m:0x240b4634 n:24500115
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x24080300 n:24500116
rel 3
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000002 m:0x24080300 n:24500118
find 6 ...
l:0 g:0 e:0 f:1 m:3 o:0x0002a3aa
c:0x0000000a m:0x240aa6aa n:24500120
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x0002a3aa
c:0x0000000b m:0x240aa6aa n:24500121
fwd 5
l:0 g:0 e:0 f:1 m:3 o:0x0002a3af
c:0x0000000d m:0x240aa6af n:24500123
set 1, ...
l:0 g:0 e:0 f:1 m:3 o:0x0002a3b0
c:0x00000010 m:0x240aa6b0 n:24500126
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x24080300 n:24500127
module: Grow 2 units
Module: Injecting 610271512
Module: injected modules.
reboot: proc9 mem @ 08028000
reboot: firmlaunch @ 240dd1e0
reboot: fopen @ 08059d21
reboot: NATF @ 240dd30c
reboot: TWLF @ 240dd310
reboot: AGBF @ 240dd314
reboot: rebc @ 240dd2f8
svc: 0x7B (backdoor) missing.
Svc: backdoor is 40 bytes
Svc: Read code to 24064668
svc: Injected 0x7B.
emunand: free space @ 2407dfc0
emunand: size is 83392 bytes
emunand: read in emunand code - 2407dfc0

emunand: found NCSD magic for 0

Config file is missing:
/corbenik/config/main.conf
Will create it with defaults.
Config file written.
Config file loaded.
Saving config.
Loading firmware...
FIRM load triggered.
NATIVE_FIRM
[lkdnesp]
Ver: 00000052, 0
TWL_FIRM
[lkdnesp]
Ver: 00000016, 0
AGB_FIRM
[lkdnesp]
Ver: 0000000b, 0
Generating patch cache...
Cache: AGB Bootscreen
Cache: FIRM Protect
Cache: RO signature fix
Version: 9
cache: 0004013000003702
Cache: Block eShop Updates
Version: 9
cache: 0004013000002C02
Cache: AGB Signature fix
Cache: Block Cart Updates
Version: 9
cache: 0004013000008002
Cache: TWL Patches
Cache: ErrDisp devmode
Version: 9
cache: 0004003000008A02
Cache: Signature Fix
Cache: Region free HOME
Version: 9
cache: 0004003000008F02
cache: 0004003000008202
cache: 0004003000009802
cache: 000400300000A102
cache: 000400300000A902
cache: 000400300000B102
Cache: Title Downgrade Fix
Cache: MSET Version
Version: 9
cache: 0004001000021000
cache: 0004001000020000
cache: 0004001000022000
cache: 0004001000026000
cache: 0004001000027000
cache: 0004001000028000
Cache: Block NIM updates
Version: 9
cache: 0004013000002C02
Patching firmware...
rel 1
l:0 g:0 e:0 f:0 m:1 o:0x00000000
c:0x00000002 m:0x24300000 n:24500002
find 4 ...
l:0 g:0 e:0 f:1 m:1 o:0x000d7a10
c:0x00000008 m:0x243d7a10 n:24500008
abortnf
l:0 g:0 e:0 f:1 m:1 o:0x000d7a10
c:0x00000009 m:0x243d7a10 n:24500009
fwd 2
l:0 g:0 e:0 f:1 m:1 o:0x000d7a12
c:0x0000000b m:0x243d7a12 n:2450000b
set 1, ...
l:0 g:0 e:0 f:1 m:1 o:0x000d7a13
c:0x0000000e m:0x243d7a13 n:2450000e
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x2407db00 n:2450000f
rel 3
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000002 m:0x2407db00 n:24500011
find 4 ...
l:0 g:0 e:0 f:1 m:3 o:0x0001bff8
c:0x00000008 m:0x24099af8 n:24500017
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x0001bff8
c:0x00000009 m:0x24099af8 n:24500018
back 1
l:0 g:0 e:0 f:1 m:3 o:0x0001bff7
c:0x0000000b m:0x24099af7 n:2450001a
back 255
l:0 g:0 e:0 f:1 m:3 o:0x0001bef8
c:0x0000000d m:0x240999f8 n:2450001c
find 4 ...
l:0 g:0 e:0 f:1 m:3 o:0x0001bfb6
c:0x00000013 m:0x24099ab6 n:24500022
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x0001bfb6
c:0x00000014 m:0x24099ab6 n:24500023
set 4, ...
l:0 g:0 e:0 f:1 m:3 o:0x0001bfba
c:0x0000001a m:0x24099aba n:24500029
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x2407db00 n:2450002a
rel 1
l:0 g:0 e:0 f:0 m:1 o:0x00000000
c:0x00000002 m:0x24300000 n:2450002c
find 6 ...
l:0 g:0 e:0 f:1 m:1 o:0x0009d2a8
c:0x0000000a m:0x2439d2a8 n:24500034
abortnf
l:0 g:0 e:0 f:1 m:1 o:0x0009d2a8
c:0x0000000b m:0x2439d2a8 n:24500035
set 6, ...
l:0 g:0 e:0 f:1 m:1 o:0x0009d2ae
c:0x00000013 m:0x2439d2ae n:2450003d
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x2407db00 n:2450003e
rel 2
l:0 g:0 e:0 f:0 m:2 o:0x00000000
c:0x00000002 m:0x24100000 n:24500040
n3ds
l:0 g:0 e:0 f:0 m:2 o:0x00000000
c:0x00000003 m:0x24100000 n:24500041
jmpeq 97
l:0 g:0 e:0 f:0 m:2 o:0x00000000
c:0x00000061 m:0x24100000 n:2450009f
seek 1462464
l:0 g:0 e:0 f:0 m:2 o:0x001650c0
c:0x00000066 m:0x242650c0 n:245000a4
set 6, ...
l:0 g:0 e:0 f:0 m:2 o:0x001650c6
c:0x0000006e m:0x242650c6 n:245000ac
seek 1522190
l:0 g:0 e:0 f:0 m:2 o:0x00173a0e
c:0x00000073 m:0x24273a0e n:245000b1
set 2, ...
l:0 g:0 e:0 f:0 m:2 o:0x00173a10
c:0x00000077 m:0x24273a10 n:245000b5
seek 1525762
l:0 g:0 e:0 f:0 m:2 o:0x00174802
c:0x0000007c m:0x24274802 n:245000ba
set 4, ...
l:0 g:0 e:0 f:0 m:2 o:0x00174806
c:0x00000082 m:0x24274806 n:245000c0
seek 1526116
l:0 g:0 e:0 f:0 m:2 o:0x00174964
c:0x00000087 m:0x24274964 n:245000c5
set 4, ...
l:0 g:0 e:0 f:0 m:2 o:0x00174968
c:0x0000008d m:0x24274968 n:245000cb
seek 1527122
l:0 g:0 e:0 f:0 m:2 o:0x00174d52
c:0x00000092 m:0x24274d52 n:245000d0
set 4, ...
l:0 g:0 e:0 f:0 m:2 o:0x00174d56
c:0x00000098 m:0x24274d56 n:245000d6
seek 1527134
l:0 g:0 e:0 f:0 m:2 o:0x00174d5e
c:0x0000009d m:0x24274d5e n:245000db
set 4, ...
l:0 g:0 e:0 f:0 m:2 o:0x00174d62
c:0x000000a3 m:0x24274d62 n:245000e1
seek 1527146
l:0 g:0 e:0 f:0 m:2 o:0x00174d6a
c:0x000000a8 m:0x24274d6a n:245000e6
set 4, ...
l:0 g:0 e:0 f:0 m:2 o:0x00174d6e
c:0x000000ae m:0x24274d6e n:245000ec
seek 1527382
l:0 g:0 e:0 f:0 m:2 o:0x00174e56
c:0x000000b3 m:0x24274e56 n:245000f1
set 4, ...
l:0 g:0 e:0 f:0 m:2 o:0x00174e5a
c:0x000000b9 m:0x24274e5a n:245000f7
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x2407db00 n:245000f8
rel 3
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000002 m:0x2407db00 n:245000fa
find 4 ...
l:0 g:0 e:0 f:1 m:3 o:0x0003aba0
c:0x00000008 m:0x240b86a0 n:24500100
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x0003aba0
c:0x00000009 m:0x240b86a0 n:24500101
set 2, ...
l:0 g:0 e:0 f:1 m:3 o:0x0003aba2
c:0x0000000d m:0x240b86a2 n:24500105
rewind
l:0 g:0 e:0 f:1 m:3 o:0x00000000
c:0x0000000e m:0x2407db00 n:24500106
find 4 ...
l:0 g:0 e:0 f:1 m:3 o:0x00034335
c:0x00000014 m:0x240b1e35 n:2450010c
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x00034335
c:0x00000015 m:0x240b1e35 n:2450010d
back 1
l:0 g:0 e:0 f:1 m:3 o:0x00034334
c:0x00000017 m:0x240b1e34 n:2450010f
set 4, ...
l:0 g:0 e:0 f:1 m:3 o:0x00034338
c:0x0000001d m:0x240b1e38 n:24500115
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x2407db00 n:24500116
rel 3
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000002 m:0x2407db00 n:24500118
find 6 ...
l:0 g:0 e:0 f:1 m:3 o:0x0002a3ae
c:0x0000000a m:0x240a7eae n:24500120
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x0002a3ae
c:0x0000000b m:0x240a7eae n:24500121
fwd 5
l:0 g:0 e:0 f:1 m:3 o:0x0002a3b3
c:0x0000000d m:0x240a7eb3 n:24500123
set 1, ...
l:0 g:0 e:0 f:1 m:3 o:0x0002a3b4
c:0x00000010 m:0x240a7eb4 n:24500126
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x2407db00 n:24500127
module: Grow 2 units
Module: Injecting 610271512
Module: injected modules.
reboot: proc9 mem @ 08028000
reboot: firmlaunch @ 240da9e8
reboot: fopen @ 08059d25
reboot: NATF @ 240dab14
reboot: TWLF @ 240dab18
 
Last edited by Orkna,

chaoskagami

G̷̘̫̍̈́̊̓̈l̴̙͔̞͠i̵̳͊ţ̸̙͇͒̓c̵̬̪̯̥̳͒͌̚h̵̹̭͛̒̊̽̚
OP
Developer
Joined
Mar 26, 2016
Messages
1,365
Trophies
1
Location
↑↑↓↓←→←→BA
Website
github.com
XP
2,248
Country
United States
I can't boot the latest version (from source). The screen freezes at "emunand: head is on sector xxxxxx".
It is very hard to test removing patches with the cursor jumping around like crazy. ;)
Same on both O3DS and N3DS.

Config file loaded.
Loading firmware...
FIRM load triggered.
NATIVE_FIRM
[lkdne9sfp]
Ver: 00000021, 1
TWL_FIRM
[lkdne9sfp]
Ver: 00000000, 1
AGB_FIRM
[lkdne9sfp]
Ver: 00000000, 1
Patching firmware...
rel 1
l:0 g:0 e:0 f:0 m:1 o:0x00000000
c:0x00000002 m:0x24300000 n:24500002
find 4 ...
l:0 g:0 e:0 f:1 m:1 o:0x000d8b88
c:0x00000008 m:0x243d8b88 n:24500008
abortnf
l:0 g:0 e:0 f:1 m:1 o:0x000d8b88
c:0x00000009 m:0x243d8b88 n:24500009
fwd 2
l:0 g:0 e:0 f:1 m:1 o:0x000d8b8a
c:0x0000000b m:0x243d8b8a n:2450000b
set 1, ...
l:0 g:0 e:0 f:1 m:1 o:0x000d8b8b
c:0x0000000e m:0x243d8b8b n:2450000e
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x24080300 n:2450000f
rel 3
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000002 m:0x24080300 n:24500011
find 4 ...
l:0 g:0 e:0 f:1 m:3 o:0x0001bfbc
c:0x00000008 m:0x2409c2bc n:24500017
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x0001bfbc
c:0x00000009 m:0x2409c2bc n:24500018
back 1
l:0 g:0 e:0 f:1 m:3 o:0x0001bfbb
c:0x0000000b m:0x2409c2bb n:2450001a
back 255
l:0 g:0 e:0 f:1 m:3 o:0x0001bebc
c:0x0000000d m:0x2409c1bc n:2450001c
find 4 ...
l:0 g:0 e:0 f:1 m:3 o:0x0001bf7a
c:0x00000013 m:0x2409c27a n:24500022
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x0001bf7a
c:0x00000014 m:0x2409c27a n:24500023
set 4, ...
l:0 g:0 e:0 f:1 m:3 o:0x0001bf7e
c:0x0000001a m:0x2409c27e n:24500029
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x24080300 n:2450002a
rel 1
l:0 g:0 e:0 f:0 m:1 o:0x00000000
c:0x00000002 m:0x24300000 n:2450002c
find 6 ...
l:0 g:0 e:0 f:1 m:1 o:0x0009df64
c:0x0000000a m:0x2439df64 n:24500034
abortnf
l:0 g:0 e:0 f:1 m:1 o:0x0009df64
c:0x0000000b m:0x2439df64 n:24500035
set 6, ...
l:0 g:0 e:0 f:1 m:1 o:0x0009df6a
c:0x00000013 m:0x2439df6a n:2450003d
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x24080300 n:2450003e
rel 2
l:0 g:0 e:0 f:0 m:2 o:0x00000000
c:0x00000002 m:0x24100000 n:24500040
n3ds
l:0 g:0 e:1 f:0 m:2 o:0x00000000
c:0x00000003 m:0x24100000 n:24500041
jmpeq 6
l:0 g:0 e:1 f:0 m:2 o:0x00000000
c:0x00000006 m:0x24100000 n:24500044
seek 1465700
l:0 g:0 e:1 f:0 m:2 o:0x00165d64
c:0x0000000b m:0x24265d64 n:24500049
set 6, ...
l:0 g:0 e:1 f:0 m:2 o:0x00165d6a
c:0x00000013 m:0x24265d6a n:24500051
seek 1525578
l:0 g:0 e:1 f:0 m:2 o:0x0017474a
c:0x00000018 m:0x2427474a n:24500056
set 2, ...
l:0 g:0 e:1 f:0 m:2 o:0x0017474c
c:0x0000001c m:0x2427474c n:2450005a
seek 1529150
l:0 g:0 e:1 f:0 m:2 o:0x0017553e
c:0x00000021 m:0x2427553e n:2450005f
set 4, ...
l:0 g:0 e:1 f:0 m:2 o:0x00175542
c:0x00000027 m:0x24275542 n:24500065
seek 1529504
l:0 g:0 e:1 f:0 m:2 o:0x001756a0
c:0x0000002c m:0x242756a0 n:2450006a
set 4, ...
l:0 g:0 e:1 f:0 m:2 o:0x001756a4
c:0x00000032 m:0x242756a4 n:24500070
seek 1530510
l:0 g:0 e:1 f:0 m:2 o:0x00175a8e
c:0x00000037 m:0x24275a8e n:24500075
set 4, ...
l:0 g:0 e:1 f:0 m:2 o:0x00175a92
c:0x0000003d m:0x24275a92 n:2450007b
seek 1530522
l:0 g:0 e:1 f:0 m:2 o:0x00175a9a
c:0x00000042 m:0x24275a9a n:24500080
set 4, ...
l:0 g:0 e:1 f:0 m:2 o:0x00175a9e
c:0x00000048 m:0x24275a9e n:24500086
seek 1530534
l:0 g:0 e:1 f:0 m:2 o:0x00175aa6
c:0x0000004d m:0x24275aa6 n:2450008b
set 4, ...
l:0 g:0 e:1 f:0 m:2 o:0x00175aaa
c:0x00000053 m:0x24275aaa n:24500091
seek 1530770
l:0 g:0 e:1 f:0 m:2 o:0x00175b92
c:0x00000058 m:0x24275b92 n:24500096
set 4, ...
l:0 g:0 e:1 f:0 m:2 o:0x00175b96
c:0x0000005e m:0x24275b96 n:2450009c
jmp 185
l:0 g:0 e:1 f:0 m:2 o:0x00175b96
c:0x000000b9 m:0x24275b96 n:245000f7
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x24080300 n:245000f8
rel 3
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000002 m:0x24080300 n:245000fa
find 4 ...
l:0 g:0 e:0 f:1 m:3 o:0x0003ab9c
c:0x00000008 m:0x240bae9c n:24500100
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x0003ab9c
c:0x00000009 m:0x240bae9c n:24500101
set 2, ...
l:0 g:0 e:0 f:1 m:3 o:0x0003ab9e
c:0x0000000d m:0x240bae9e n:24500105
rewind
l:0 g:0 e:0 f:1 m:3 o:0x00000000
c:0x0000000e m:0x24080300 n:24500106
find 4 ...
l:0 g:0 e:0 f:1 m:3 o:0x00034331
c:0x00000014 m:0x240b4631 n:2450010c
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x00034331
c:0x00000015 m:0x240b4631 n:2450010d
back 1
l:0 g:0 e:0 f:1 m:3 o:0x00034330
c:0x00000017 m:0x240b4630 n:2450010f
set 4, ...
l:0 g:0 e:0 f:1 m:3 o:0x00034334
c:0x0000001d m:0x240b4634 n:24500115
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x24080300 n:24500116
rel 3
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000002 m:0x24080300 n:24500118
find 6 ...
l:0 g:0 e:0 f:1 m:3 o:0x0002a3aa
c:0x0000000a m:0x240aa6aa n:24500120
abortnf
l:0 g:0 e:0 f:1 m:3 o:0x0002a3aa
c:0x0000000b m:0x240aa6aa n:24500121
fwd 5
l:0 g:0 e:0 f:1 m:3 o:0x0002a3af
c:0x0000000d m:0x240aa6af n:24500123
set 1, ...
l:0 g:0 e:0 f:1 m:3 o:0x0002a3b0
c:0x00000010 m:0x240aa6b0 n:24500126
next
l:0 g:0 e:0 f:0 m:3 o:0x00000000
c:0x00000000 m:0x24080300 n:24500127
module: Grow 2 units
Module: Injecting 610271512
Module: injected modules.
reboot: proc9 mem @ 08028000
reboot: firmlaunch @ 240dd1e0
reboot: fopen @ 08059d21
reboot: NATF @ 240dd30c
reboot: TWLF @ 240dd310
reboot: AGBF @ 240dd314
reboot: rebc @ 240dd2f8
svc: 0x7B (backdoor) missing.
Svc: backdoor is 40 bytes
Svc: Read code to 24064668
svc: Injected 0x7B.
emunand: free space @ 2407dfc0
emunand: size is 83392 bytes
emunand: read in emunand code - 2407dfc0

emunand: found NCSD magic for 0

I've forgotten to mention this: please don't report bugs against git. It's not helpful to me, since I break shit there all the time and it isn't expected to be stable, only compile. If you want to keep your sanity, don't use git. Please.

And again, I can't get the jumping around behavior to occur on any of my consoles. I even added a delay to movement, so if you're still having the jumpiness, either I need to fine tune it more or your console has issues.

As for that crash, I can't reproduce it. What does the top screen say for rXXX:NNNNNNNN? Actually, there's more buggy pointer math there. I'll assume maybe that's causing it. Ugh, I need to go on a hunt.
 
Last edited by chaoskagami,

Orkna

Well-Known Member
Member
Joined
Feb 7, 2014
Messages
379
Trophies
0
Location
Sviiiiiden
XP
277
Country
I've forgotten to mention this: please don't report bugs against git. It's not helpful to me, since I break shit there all the time and it isn't expected to be stable, only compile. If you want to keep your sanity, don't use git. Please.

And again, I can't get the jumping around behavior to occur on any of my consoles. I even added a delay to movement, so if you're still having the jumpiness, either I need to fine tune it more or your console has issues.

As for that crash, I can't reproduce it. What does the top screen say for rXXX:NNNNNNNN?

Update addict. No sanity left. ;-)
But I understand. I will try to keep to the releases or just wait for it to work again.
I don't think my console has any issues with the d-pad. It works as it should for everything except Corbenik.

The top screen shows the config. The bottom screen clears and shows
emunand: layout is gateway
emunand: nand is on sector 0
emunand: head is on sector 3866624

On O3DS the top screen also shows the config menu, bottom show a lot of information, last line: emunand: head is on sector 1931264.
 

Attachments

  • 20160613_192351.jpg
    20160613_192351.jpg
    1.8 MB · Views: 120
  • 20160613_192359.jpg
    20160613_192359.jpg
    1.3 MB · Views: 122

Kirtai

Well-Known Member
Member
Joined
May 6, 2016
Messages
236
Trophies
0
XP
193
Country
United Kingdom
That is exactly what it looks like. It applies the mysterymachine patch to X/Y/OR/AS. It doesn't require using the official patcher or HANS, statically patching or whatever it is people do now to use this. Like everything else, it is toggleable. Any patches like this in the future will come in a `/contrib` directory and you'll have to manually copy what you want to use to `/corbenik/patch`.
Ooh, shiny. This is exactly the sort of thing I was hoping for. Though, maybe put unused patches in /corbenik/contrib instead of /contrib?

Either way, I will say one of my goals may or may not be to put the final nail in NTR's coffin. I want overlays as much as the next guy. :wink:
Awesome.

I do recall a rather short period of time when it was becoming "cool" to attack Luma3DS because it was getting so popular.
It's popular so now it sucks is what I thought was the cause of it.
 

chaoskagami

G̷̘̫̍̈́̊̓̈l̴̙͔̞͠i̵̳͊ţ̸̙͇͒̓c̵̬̪̯̥̳͒͌̚h̵̹̭͛̒̊̽̚
OP
Developer
Joined
Mar 26, 2016
Messages
1,365
Trophies
1
Location
↑↑↓↓←→←→BA
Website
github.com
XP
2,248
Country
United States
Ooh, shiny. This is exactly the sort of thing I was hoping for. Though, maybe put unused patches in /corbenik/contrib instead of /contrib?

I actually thought of that after commiting. Hey, not like I've made a release yet. I can do that.

Update addict. No sanity left. ;-)
But I understand. I will try to keep to the releases or just wait for it to work again.
I don't think my console has any issues with the d-pad. It works as it should for everything except Corbenik.

The top screen shows the config. The bottom screen clears and shows
emunand: layout is gateway
emunand: nand is on sector 0
emunand: head is on sector 3866624

On O3DS the top screen also shows the config menu, bottom show a lot of information, last line: emunand: head is on sector 1931264.

It indeed is broken in git right now, and it's doing it here too. I'll have it fixed in git as soon as I figure out what's wrong here, but it's going to take time. For reference - does it work on 0.0.9?
 

chaoskagami

G̷̘̫̍̈́̊̓̈l̴̙͔̞͠i̵̳͊ţ̸̙͇͒̓c̵̬̪̯̥̳͒͌̚h̵̹̭͛̒̊̽̚
OP
Developer
Joined
Mar 26, 2016
Messages
1,365
Trophies
1
Location
↑↑↓↓←→←→BA
Website
github.com
XP
2,248
Country
United States
Out of curiosity: Does an IRC channel or something for this exist or are you, @chaoskagami, reachable some other way than gbatemp?

No, no IRC channel exists. I could make one, but I'm lazy. Besides, there's not really a lot of people using this yet (if there ever will be), so I'd probably be looking at a mostly dead channel.

I'm reachable plenty of ways aside from gbatemp - hell, I have my email pasted directly on my github's sidebar. I have a twitter account that I barely touch, and if anybody wants my steam username, G+ or whatever, there's that too. And reddit too, I watch r/3dshacks. I should probably update my account info here.

Yes. 0.0.9 works. :)

So it's a regression then, or something I did triggered it. Time to rewind and find where things broke.
 
Last edited by chaoskagami,
  • Like
Reactions: Orkna
A

a9lh-1user

Guest
I'm reachable plenty of ways aside from gbatemp - hell, I have my email pasted directly on my github's sidebar. I have a twitter account that I barely touch, and if anybody wants my steam username, G+ or whatever, there's that too. I should probably update my account info here.

Beware of that........you will be spamed to death sometime ;)
 
  • Like
Reactions: chaoskagami

chaoskagami

G̷̘̫̍̈́̊̓̈l̴̙͔̞͠i̵̳͊ţ̸̙͇͒̓c̵̬̪̯̥̳͒͌̚h̵̹̭͛̒̊̽̚
OP
Developer
Joined
Mar 26, 2016
Messages
1,365
Trophies
1
Location
↑↑↓↓←→←→BA
Website
github.com
XP
2,248
Country
United States
Beware of that........you will be spamed to death sometime ;)

There's this thing called a 'spam filter' that works very very well. Plus, anything not in my whitelist automatically goes to spam.
 
  • Like
Reactions: a9lh-1user
General chit-chat
Help Users
    Psionic Roshambo @ Psionic Roshambo: Seasons in the abyss lol