Hacking Official Corbenik - Another CFW for advanced users (with bytecode patches!)

[DjoeN]

ok, maybe stupid question, but what configuration are you ppl using?

Setup:
- O3DS
- SysNAND 9.2 / EmuNAND 11.0
- Corbenik//r184: 6b9f56df
- Firmware: 11.0.0 (00000052)
- GBA Firmware (AGB): 6.0.0 (0000000b)
- DSi Firmware (TWL): 6.2.0 (00000016)

Spoiler: My Corbenik Configuration

Options:
General Options
- [x] svcBackdoor Fixup
- [x] Reboot Hook
- [x] Use EmuNAND
- [0] Index
- [ ] Autoboot
- [ ] Silent mode

Loader Options
- [ ] Use Loader Replacement
- [ ] Language Emulation
- [ ] Load Code Sections
- [ ] Dump Title Code Sections
- [ ] + System Titles

Developer Options
- [ ] Step Through
- [ ] Verbose
- [ ] Logging

Patches:
- [ ] Title Downgrade Fix (11.0 NFIRM)
- [x] AGB Bootscreen
- [x] AGB Signature fix
- [ ] Block Cart Updates (Loader)
- [ ] Block eShop Updates (Loader)
- [x] Block NIM updates (Loader)
- [ ] ErrDisp devmode (Loader)
- [ ] Fake Friends module version (Loader)
- [ ] ARM11 XN Disable
- [ ] MSET Version (Loader)
- [ ] Force Testmenu (Loader)
- [x] FIRM Protect
- [x] Region free HOME (Loader)
- [x] RO signature fix (Loader)
- [ ] SecureInfo_A Signature Fix (Loader)
- [ ] Signature Fix
- [x] TWL Patches
- [ ] Developer UNITINFO

 

[Orkna]

ok, maybe stupid question, but what configuration are you ppl using?

Setup:
- O3DS
- SysNAND 9.2 / EmuNAND 11.0
- Corbenik//r184: 6b9f56df
- Firmware: 11.0.0 (00000052)
- GBA Firmware (AGB): 6.0.0 (0000000b)
- DSi Firmware (TWL): 6.2.0 (00000016)

Spoiler: My Corbenik Configuration

Options:
General Options
- [x] svcBackdoor Fixup
- [x] Reboot Hook
- [x] Use EmuNAND
- [0] Index
- [ ] Autoboot
- [ ] Silent mode

Loader Options
- [ ] Use Loader Replacement
- [ ] Language Emulation
- [ ] Load Code Sections
- [ ] Dump Title Code Sections
- [ ] + System Titles

Developer Options
- [ ] Step Through
- [ ] Verbose
- [ ] Logging

Patches:
- [ ] Title Downgrade Fix (11.0 NFIRM)
- [x] AGB Bootscreen
- [x] AGB Signature fix
- [ ] Block Cart Updates (Loader)
- [ ] Block eShop Updates (Loader)
- [x] Block NIM updates (Loader)
- [ ] ErrDisp devmode (Loader)
- [ ] Fake Friends module version (Loader)
- [ ] ARM11 XN Disable
- [ ] MSET Version (Loader)
- [ ] Force Testmenu (Loader)
- [x] FIRM Protect
- [x] Region free HOME (Loader)
- [x] RO signature fix (Loader)
- [ ] SecureInfo_A Signature Fix (Loader)
- [ ] Signature Fix
- [x] TWL Patches
- [ ] Developer UNITINFO

All patches but developer unitinfo, secureinfo_a signature fix, force testmenu, fake friends module version. No developers options enabled and only "use loader replacement" under loader options.

 

[chaoskagami]

Me being the dev and all, this is what I usually do for regular use:

Spoiler

- N3DS (non-XL)
- SysNAND 11.0.0 / Two usable EmuNANDs (9.2.0 / 10.7.0) + SysNAND Backup + 2.1 Debrick
- r184 (There's no more commits I've made locally yet - but some code is in the works and uncommited)
- NATIVE: 00000021 / 11.0.0
- AGB: 00000000 (Not that there's any other option)
- TWL: 00000000 (^)

General Options
- [X] svcBackdoor Fixup
- [X] Reboot Hook
- [ ] Use EmuNAND
- [0] Index
- [X] Autoboot
- [ ] Silent mode

Loader Options
- [X] Use Loader Replacement
- [X] CPU - L2 cache (n3ds) (This and 800Mhz are automatically hidden on O3DS now)
- [X] CPU - 800Mhz (n3ds)
- [X] Language Emulation
- [X] Load Code Sections
- [X] Dump Title Code Sections
- [X] + System Titles

Developer Options
- [ ] Step Through
- [X] Verbose
- [X] Logging

Patches
- [X] Title Downgrade Fix (11.0 NFIRM)
- [X] AGB Bootscreen
- [X] AGB Signature fix
- [X] Block Cart Updates (Loader)
- [X] Block eShop Updates (Loader)
- [X] Block NIM updates (Loader)
- [X] ErrDisp devmode (Loader)
- [ ] Fake Friends module version (Loader)
- [X] ARM11 XN Disable
- [X] MSET Version (Loader)
- [ ] Force Testmenu (Loader)
- [X] FIRM Protect
- [X] Region free HOME (Loader)
- [X] RO signature fix (Loader)
- [X] SecureInfo_A Signature Fix (Loader)
- [X] Signature Fix
- [X] TWL Patches
- [ ] Developer UNITINFO

By the way, for those unaware - Region free HOME is just for installed titles. For carts, you want 'Block Cart Updates' which has the secondary function of making carts region free.

 

[The Catboy]

Old3DS
sysNAND 11.0.0-33

Spoiler: My config

Options:
General Options
- [x] svcBackdoor Fixup
- [x] Reboot Hook
- [ ] Use EmuNAND
- [0] Index
- [x] Autoboot
- [x] Silent mode

Loader Options
- [x] Use Loader Replacement
- [ ] Language Emulation
- [ ] Load Code Sections
- [ ] Dump Title Code Sections
- [ ] + System Titles

Developer Options
- [ ] Step Through
- [ ] Verbose
- [ ] Logging

Patches:
- [x] Title Downgrade Fix (11.0 NFIRM)
- [x] AGB Bootscreen
- [x] AGB Signature fix
- [x] Block Cart Updates (Loader)
- [x] Block eShop Updates (Loader)
- [x] Block NIM updates (Loader)
- [ ] ErrDisp devmode (Loader)
- [x] Fake Friends module version (Loader)
- [ ] ARM11 XN Disable
- [x] MSET Version (Loader)
- [ ] Force Testmenu (Loader)
- [x] FIRM Protect
- [x] Region free HOME (Loader)
- [x] RO signature fix (Loader)
- [x] SecureInfo_A Signature Fix (Loader)
- [x] Signature Fix
- [x] TWL Patches
- [ ] Developer UNITINFO

 

[Temptress Cerise]

The following is my setup for my USA, JPN and Region Changed EUR o3DS consoles.

- o3DS
- SysNAND 11.0.0
- NATIVE: 00000052 / 11.0.0
- Corbenik//r184: 6b9f56df

Spoiler

General Options
- [ ] svcBackdoor Fixup
- [X] Reboot Hook
- [ ] Use EmuNAND
- [0] Index
- [X] Autoboot
- [ ] Silent mode

Loader Options
- [X] Use Loader Replacement
- [X] Language Emulation
- [ ] Load Code Sections
- [ ] Dump Title Code Sections
- [ ] + System Titles

Developer Options
- [ ] Step Through
- [ ] Verbose
- [ ] Logging

Patches
- [X] Title Downgrade Fix (11.0 NFIRM)
- [ ] AGB Bootscreen
- [ ] AGB Signature fix
- [X] Block Cart Updates (Loader)
- [X] Block eShop Updates (Loader)
- [X] Block NIM updates (Loader)
- [X] ErrDisp devmode (Loader)
- [ ] Fake Friends module version (Loader)
- [ ] ARM11 XN Disable
- [X] MSET Version (Loader)
- [ ] Force Testmenu (Loader)
- [X] FIRM Protect
- [X] Region free HOME (Loader)
- [X] RO signature fix (Loader)
- [X] SecureInfo_A Signature Fix (Loader)
- [X] Signature Fix
- [ ] TWL Patches
- [ ] Developer UNITINFO

Everything works~ I also REALLY love the change to MSET, love seeing .hack// ~

Also, I lost it when I saw my name in the README. I was fangirling so hard when I saw that~

 

[myki]

First, thank you chaoskagami for all of your work. Noob speaking
I am reading the evolution of Corbenik from start, even if I understand nearly nothing. But I can feel the power of the engine under the hood
I will not install it because as a noob, I would surely brick my console one day or the other...
But instead of having full options to validate one by one for advanced or dev users, why not having a noob friendly frontend with options like "activate GBA", or "activate cartridge" who will securely validate the good options for us ?
I ask because if I understand well (with my poor english) Corbenik has become a cfw as good for devs as for everyday use, and being able to choose only the patches we need is promising, even for noobs (imo)

Thanks for reading

 

[DjoeN]

I think Corbenik CFW is really made with experienced/expert users in mind.
My daily used 3ds system has luma3ds because of the noob friendly setup
I don't understand everything and i don't know what most options mean in Corbenik
I like to try out stuff on my hardmodded O3DS test system (lucky i have a few systems)

1. It's not that hard to install if you already have an a9lh ready system
2. If you look close at the configuration options, it's not that hard to setup to boot with your basic needs

I like it how it is, no need for a noob friendly setup, if you consider Corbenik, i think you need to read up on it and see what other more experienced users post in here
That way you get to learn the options and what you need, that's why i asked for others config, so i can see and learn what to use and if i want to know what a certain option does
i'll ask in here and i'm sure i'll get a descent answer that will satisfy me.

I do think it's a good idea to have somebody make a readme with the config options explained:
example:

General Options:
- [ ] svcBackdoor Fixup
???

- [ ] Reboot Hook
* If a game/app reboots your 3ds system it reboots into your working NAND again
* For example:
If you boot into emunand and play SSB or enter system settings, when going back to the home menu your system reboots
This will make sure it boots back into your emunand instead of sysnand.

- [ ] Use EmuNAND
* Boots your 3DS system in Emunand if an emunand is pressent

- [0] Index
???

- [ ] Autoboot
* Autoboots your 3DS into sysnand/emunand, skipping the configuration menu
* Hold "R" when powering on your system to re-enter config menu

- [ ] Silent mode
* Boots into your sysnand/emunand without screenoutput

etc...

 

[chaoskagami]

First, thank you chaoskagami for all of your work. Noob speaking
I am reading the evolution of Corbenik from start, even if I understand nearly nothing. But I can feel the power of the engine under the hood
I will not install it because as a noob, it would surely brick one day or the other...
But instead of having full options to validate one by one for advanced or dev users, why not having a noob friendly frontend with options like "activate GBA", or "activate cartridge" who will securely validate the good options for us ?
I ask because if I understand well (with my poor english) Corbenik has become a cfw as good for devs as for everyday use, and being able to choose only the patches we need is promising, even for noobs (imo)

Thanks for reading

tl;dr No.

Long: Design decisions. Here's my general view on this:

The current way Corbenik functions is meant as a tool. It's not meant as a one-click noob-friendly thing, nor will it ever be. This is a strength, not a weakness. It's a conscious design decision, and mostly my philosophy on how things should work.

I have different design goals than other CFWs that I believe are mutually incompatible with a noob-friendly approach. This means that I expose more unsafe toggles and give more control over what it does and how it does so. I'm catering to a different (and much smaller) userbase, and I don't intend to change this.

Your English is fine, by the way. I've seen worse.

I do think it's a good idea to have somebody make a readme with the config options explained:

Most of the options actually ARE documented with a proper description - this just isn't exposed in the interface yet, though I'm planning to get that working soon.

 

[DjoeN]

...

Most of the options actually ARE documented with a proper description - this just isn't exposed in the interface yet, though I'm planning to get that working soon.

I know, i like to look at code (i don't understand anything, but i really don't need to )
i looked a few days ago at the vco/pco files in the patch folder and inside it's explained.

Example:

vco:
AIDA    Block Cart Updates (Loader)                                     Blocks update checks on cartridges (and also allows region free carts, as a byproduct.)

pco:
# $name  Block Cart Updates (Loader)
# $desc  Blocks update checks on cartridges (and also allows region free carts, as a byproduct.)
# $title 0004013000008002
# $ver   09
# $uuid  01

Like said, i really like your approach on your CFW and your gui, no need to change!

[EDIT]
One thing i like to ask:
do i leave the mystermachine.vco in the contrib folder in Corbenik or move it over to the patch folder with the other *.vco files? And is it autoactivated or once moved to the patch folder an extra option in the config menu appears? (can't test since i'm at work and don't have my system with me)

 

[myki]

I like your approach too anyway, I'm not noob lobbying I think your approach is the best way to tune things precisely as never before and offers devs new (and future) possibilities.
Reading the readme is a good idea lol I didn't thought about this as I haven't download it.
Now I go back to the backyards silently

 

[Elveman]

Here's mine:

- N3DS
- SysNAND 11.0 / EmuNAND 11.0
- Corbenik//r184: 6b9f56df
- Firmware: 11.0.0
- GBA Firmware (AGB): 9.0.0
- DSi Firmware (TWL): 9.0.0

Spoiler

Options:
General Options
- [x] svcBackdoor Fixup
- [x] Reboot Hook
- [ ] Use EmuNAND
- [0] Index
- [x] Autoboot
- [ ] Silent mode

Loader Options
- [x] Use Loader Replacement
- [x] Language Emulation
- [ ] Load Code Sections
- [ ] Dump Title Code Sections
- [ ] + System Titles

Developer Options
- [ ] Step Through
- [x] Verbose
- [x] Logging

Patches:
- [x] Title Downgrade Fix (11.0 NFIRM)
- [x] AGB Bootscreen
- [x] AGB Signature fix
- [x] Block Cart Updates (Loader)
- [x] Block eShop Updates (Loader)
- [x] Block NIM updates (Loader)
- [x] ErrDisp devmode (Loader)
- [ ] Fake Friends module version (Loader)
- [ ] ARM11 XN Disable
- [x] MSET Version (Loader)
- [ ] Force Testmenu (Loader)
- [x] FIRM Protect
- [x] Region free HOME (Loader)
- [x] RO signature fix (Loader)
- [ ] SecureInfo_A Signature Fix (Loader)
- [x] Signature Fix
- [x] TWL Patches
- [ ] Developer UNITINFO
- [x] MysteryMachine Patcher (Loader)

 

[DjoeN]

Here's mine:

- N3DS
- SysNAND 11.0 / EmuNAND 11.0
- Corbenik//r184: 6b9f56df
- Firmware: 11.0.0
- GBA Firmware (AGB): 9.0.0
- DSi Firmware (TWL): 9.0.0

...

Ow, looks like i'm using outdated AGB and TWL firms
Time to go hunting again

Nevermind, could because your's a N3Ds and mine an O3DS

 

[chaoskagami]

One thing i like to ask:
do i leave the mystermachine.vco in the contrib folder in Corbenik or move it over to the patch folder with the other *.vco files? And is it autoactivated or once moved to the patch folder an extra option in the config menu appears? (can't test since i'm at work and don't have my system with me)

All patches must be in the patch folder. Move everything you want from contrib to patch.

Ow, looks like i'm using outdated AGB and TWL firms
Time to go hunting again

Nevermind, could because your's a N3Ds and mine an O3DS

Yeah, the N3DS ones are different and have more recent versions.

Here's mine:

- N3DS
- SysNAND 11.0 / EmuNAND 11.0
- Corbenik//r184: 6b9f56df
- Firmware: 11.0.0
- GBA Firmware (AGB): 9.0.0
- DSi Firmware (TWL): 9.0.0

Spoiler

Options:
General Options
- [x] svcBackdoor Fixup
- [x] Reboot Hook
- [ ] Use EmuNAND
- [0] Index
- [x] Autoboot
- [ ] Silent mode

Loader Options
- [x] Use Loader Replacement
- [x] Language Emulation
- [ ] Load Code Sections
- [ ] Dump Title Code Sections
- [ ] + System Titles

Developer Options
- [ ] Step Through
- [x] Verbose
- [x] Logging

Patches:
- [x] Title Downgrade Fix (11.0 NFIRM)
- [x] AGB Bootscreen
- [x] AGB Signature fix
- [x] Block Cart Updates (Loader)
- [x] Block eShop Updates (Loader)
- [x] Block NIM updates (Loader)
- [x] ErrDisp devmode (Loader)
- [ ] Fake Friends module version (Loader)
- [ ] ARM11 XN Disable
- [x] MSET Version (Loader)
- [ ] Force Testmenu (Loader)
- [x] FIRM Protect
- [x] Region free HOME (Loader)
- [x] RO signature fix (Loader)
- [ ] SecureInfo_A Signature Fix (Loader)
- [x] Signature Fix
- [x] TWL Patches
- [ ] Developer UNITINFO
- [x] MysteryMachine Patcher (Loader)

Enjoying the shiny Yvelta? ;P

One of the things I'm working on now is getting rid of the god-awful 8x8 font. Not only am I not sure where it originates from, but it's terrible. I'm replacing it with Tewi (https://github.com/Lucy/tewi-font) - and maybe adding unicode support to the backend. When I finish and push this, people building off git will need to check out submodules in the future, FYI.

 

[Suiginou]

One of the things I'm working on now is getting rid of the god-awful 8x8 font. Not only am I not sure where it originates from, but it's terrible. I'm replacing it with Tewi (https://github.com/Lucy/tewi-font) - and maybe adding unicode support to the backend. When I finish and push this, people building off git will need to check out submodules in the future, FYI.

Why not just Terminus?

 

[chaoskagami]

Why not just Terminus?

Because Terminus is ugly. I don't even have it on my system. That said, I'm also going to move the actual font outside the program, so people will be able to do whatever they want.

 

[The Catboy]

- [x] MysteryMachine Patcher (Loader)

 

[chaoskagami]

View attachment 53030

It redirects mystery gift in Pokemon X/Y/OR/AS to SALT's clone servers. They archive previous mystery gifts. See here, here: https://mys.salthax.org/ , https://gbatemp.net/threads/pokemon-xyoras-mystery-machine-mystery-gift-spoofer.422613/

It performs the same functionality as the official patcher shinyquagsire23 has. You can punch in any number listed on the salthax page to get previous mystery gifts.

 

[Deleted User]

@chaoskagami
Am i able to brick if it goes wrong

 

[chaoskagami]

Am i able to brick if it goes wrong

O3DS has long since been working. That's a reaaaaally old post.

Having it set up wrong means it just outright won't work.

 

[Deleted User]

O3DS has long since been working. That's a reaaaaally old post.

Having it set up wrong means it just outright won't work.

sorry i quoted the wrong post i meant would i brick if the brahma thing bricks