Homebrew *hax 2.5 source code released!

Osakasan · Jan 12, 2016

kje123 said:
I DID IT I DOWNGRADED.

Which CFW do you recommend? I'm torn between CakesFW, PastaCFW, and rxTools.

¡Awesome!

I went with RxTools, it may be a bit of a pain to set it up (the guide even adds innecesary steps such as using Getaway software when you can just use EmuNAND9 to set up your EmuNAND) but it worth every second spent on it.

zoogie · Jan 12, 2016

Reminder: the topic here is " *hax source code released ".

ihaveahax · Jan 12, 2016

zoogie said:
That line is supposed to read
REGION equ ("U")
Those assembly files are generated by python so I suspect it may be a problem of how python is parsing command line arguments.
Try the firmware without quotes.
python scripts/buildVersion.py 9.5.0-23U
or
python scripts/buildAll.py

I forgot to say this but neither of these worked (same thing).

zoogie · Jan 12, 2016

ihaveamac said:
I forgot to say this but neither of these worked (same thing).

Can you paste your build/constants.s file?

I've attached my ARMIPS build, see if that works.

Urbanshadow · Jan 12, 2016

It's not coincidence its on the maintenance day, is it? This is like a defiant announce that 10.4 would be exploitable (user mode at least).

ihaveahax · Jan 12, 2016

zoogie said:
Can you paste your build/constants.s file?

I've attached my ARMIPS build, see if that works.

this ARMIPS build was larger than the one I got and seemed to work after installing this. the one I used before was from https://github.com/d0k3/3DS-Tools-Collection/blob/master/armips.exe (@d0k3 maybe you can look into this?)

however now it's a new error; it's saying readelf was not found and something else so... the command I used (since not all of the output is available) was: python scripts/buildVersion.py "9.5.0-23U"

Code:

WEST/cn_initial'
all cleaned up !
make[2]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_qr_initial_loader/
WEST'
make[2]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_qr_initial_loader
/JPN'
make[3]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_qr_initial_loader
/JPN/cn_initial'
all cleaned up !
make[3]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_qr_initial_loader/
JPN/cn_initial'
all cleaned up !
make[2]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_qr_initial_loader/
JPN'
all cleaned up !
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_qr_initial_loader'

make[1]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_load
er'
make[2]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_load
er/WEST'
make[3]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_load
er/WEST/cn_initial'
all cleaned up !
make[3]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_loade
r/WEST/cn_initial'
all cleaned up !
make[2]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_loade
r/WEST'
make[2]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_load
er/JPN'
make[3]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_load
er/JPN/cn_initial'
all cleaned up !
make[3]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_loade
r/JPN/cn_initial'
all cleaned up !
make[2]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_loade
r/JPN'
all cleaned up !
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_loade
r'
make[1]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_secondary_payload
'
all cleaned up !
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_secondary_payload'

make[1]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/menu_payload'
all cleaned up !
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/menu_payload'
make[1]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/app_bootloader'
all cleaned up !
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/app_bootloader'
make[1]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/app_code'
all cleaned up !
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/app_code'
make[1]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/menu_ropbin_patcher'

all cleaned up !
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/menu_ropbin_patcher'
all cleaned up !
make[1]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/firm_constants'
make[2]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/firm_constants/POST5
'
make[2]: Nothing to be done for `all'.
make[2]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/firm_constants/POST5'

make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/firm_constants'
make[1]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_constants'
make[2]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_constants/WEST'
make[2]: Nothing to be done for `all'.
make[2]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_constants/WEST'
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_constants'
make[1]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/region_constants'
make[2]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/region_constants/U'
make[2]: Nothing to be done for `all'.
make[2]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/region_constants/U'
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/region_constants'
make[1]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/menu_ropdb'
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/menu_ropdb'
make[1]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_qr_initial_loader
'
make[2]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_qr_initial_loader
/WEST'
# probably a bad idea; dependencies won't work well i guess
make -C cn_initial
make[3]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_qr_initial_loader
/WEST/cn_initial'
arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -mthumb-interwork -Os -I"/
c/Users/Ian/Desktop/ninjhax2x/libctru/include" -I/c/devkitPro/libnds/include -c
source/decomp.c -o build/decomp.o
arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -mthumb-interwork -Os -I"/
c/Users/Ian/Desktop/ninjhax2x/libctru/include" -I/c/devkitPro/libnds/include -c
source/font.c -o build/font.o
arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -mthumb-interwork -Os -I"/
c/Users/Ian/Desktop/ninjhax2x/libctru/include" -I/c/devkitPro/libnds/include -c
source/main.c -o build/main.o
source/main.c: In function '_main':
source/main.c:252:6: warning: unused variable 'line' [-Wunused-variable]
  int line=10;
      ^
arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -mthumb-interwork -Os -I"/
c/Users/Ian/Desktop/ninjhax2x/libctru/include" -I/c/devkitPro/libnds/include -c
source/text.c -o build/text.o
arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -mthumb-interwork -Os -I"/
c/Users/Ian/Desktop/ninjhax2x/libctru/include" -I/c/devkitPro/libnds/include -c
source/crt0.s -o build/crt0.o
cd "/c/Users/Ian/Desktop/ninjhax2x/libctru" && make
make[4]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/libctru'
mkdir -p build
mkdir -p lib
arm-none-eabi-gcc-ar rvs lib/"libctru".a build/AC.o build/APT.o build/CFGNOR.o b
uild/CSND.o build/FS.o build/GPU.o build/GSP.o build/GX.o build/HID.o build/HTTP
C.o build/IR.o build/OS.o build/SHDR.o build/SOC.o build/_GSP.o build/gpuResetSe
quence.o build/srv.o build/svc.o
r - build/AC.o
r - build/APT.o
r - build/CFGNOR.o
r - build/CSND.o
r - build/FS.o
r - build/GPU.o
r - build/GSP.o
r - build/GX.o
r - build/HID.o
r - build/HTTPC.o
r - build/IR.o
r - build/OS.o
r - build/SHDR.o
r - build/SOC.o
r - build/_GSP.o
r - build/gpuResetSequence.o
r - build/srv.o
r - build/svc.o
make[4]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/libctru'
arm-none-eabi-ld --script=ccd00.ld -L"/c/devkitPro/devkitARM/arm-none-eabi/lib"
-L"/c/Users/Ian/Desktop/ninjhax2x/libctru/lib" -Map=output.map -o cn_initial.elf
build/decomp.o build/font.o build/main.o build/text.o -g -lm
arm-none-eabi-objcopy -O binary cn_initial.elf cn_initial.bin
make[3]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_qr_initial_loader/
WEST/cn_initial'
armips sploit.s
ARMIPS Assembler v0.7d (Apr 26 2014 04:24:30) by Kingcom
Done.
make[2]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_qr_initial_loader/
WEST'
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_qr_initial_loader'

make[1]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_load
er'
make[2]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_load
er/WEST'
make -C cn_initial
make[3]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_load
er/WEST/cn_initial'
arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -Os -I"/c/Users/Ian/Deskto
p/ninjhax2x/libctru/include" -I/c/devkitPro/libnds/include -c source/decomp.c -o
build/decomp.o
arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -Os -I"/c/Users/Ian/Deskto
p/ninjhax2x/libctru/include" -I/c/devkitPro/libnds/include -c source/font.c -o b
uild/font.o
arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -Os -I"/c/Users/Ian/Deskto
p/ninjhax2x/libctru/include" -I/c/devkitPro/libnds/include -c source/main.c -o b
uild/main.o
source/main.c: In function '_main':
source/main.c:195:9: warning: variable 'ret' set but not used [-Wunused-but-set-
variable]
  Result ret;
         ^
source/main.c:194:6: warning: unused variable 'line' [-Wunused-variable]
  int line=10;
      ^
source/main.c:192:10: warning: unused variable 'srvHandle' [-Wunused-variable]
  Handle* srvHandle=(Handle*)CN_SRVHANDLE_ADR;
          ^
c:\devkitpro\devkitarm\arm-none-eabi\include\string.h: In function 'memset':
source/main.c:120:1: warning: control reaches end of non-void function [-Wreturn
-type]
}
^
arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -Os -I"/c/Users/Ian/Deskto
p/ninjhax2x/libctru/include" -I/c/devkitPro/libnds/include -c source/text.c -o b
uild/text.o
arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -Os -I"/c/Users/Ian/Deskto
p/ninjhax2x/libctru/include" -I/c/devkitPro/libnds/include -c source/crt0.s -o b
uild/crt0.o
cd "/c/Users/Ian/Desktop/ninjhax2x/libctru" && make
make[4]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/libctru'
mkdir -p build
mkdir -p lib
arm-none-eabi-gcc-ar rvs lib/"libctru".a build/AC.o build/APT.o build/CFGNOR.o b
uild/CSND.o build/FS.o build/GPU.o build/GSP.o build/GX.o build/HID.o build/HTTP
C.o build/IR.o build/OS.o build/SHDR.o build/SOC.o build/_GSP.o build/gpuResetSe
quence.o build/srv.o build/svc.o
r - build/AC.o
r - build/APT.o
r - build/CFGNOR.o
r - build/CSND.o
r - build/FS.o
r - build/GPU.o
r - build/GSP.o
r - build/GX.o
r - build/HID.o
r - build/HTTPC.o
r - build/IR.o
r - build/OS.o
r - build/SHDR.o
r - build/SOC.o
r - build/_GSP.o
r - build/gpuResetSequence.o
r - build/srv.o
r - build/svc.o
make[4]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/libctru'
arm-none-eabi-ld --script=ccd00.ld -L"/c/devkitPro/devkitARM/arm-none-eabi/lib"
-L"/c/Users/Ian/Desktop/ninjhax2x/libctru/lib" -Map=output.map -o cn_initial.elf
build/decomp.o build/font.o build/main.o build/text.o -g -lctru -lm
arm-none-eabi-objcopy -O binary cn_initial.elf cn_initial.bin
make[3]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_loade
r/WEST/cn_initial'
ARMIPS Assembler v0.7d (Apr 26 2014 04:24:30) by Kingcom
Done.
make[2]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_loade
r/WEST'
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/cn_save_initial_loade
r'
make[1]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/app_code'
arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -Os -fpie -I"/c/Users/Ian/
Desktop/ninjhax2x/libctru-fpic/include" -I/c/devkitPro/libnds/include -c source/
font.c -o build/font.o
arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -Os -fpie -I"/c/Users/Ian/
Desktop/ninjhax2x/libctru-fpic/include" -I/c/devkitPro/libnds/include -c source/
main.c -o build/main.o
source/main.c: In function '_main':
source/main.c:360:12: warning: passing argument 1 of 'print_hex' makes integer f
rom pointer without a cast [-Wint-conversion]
  print_hex(_bootloaderAddress);
            ^
source/main.c:172:6: note: expected 'u32 {aka long unsigned int}' but argument i
s of type 'u32 * {aka long unsigned int *}'
void print_hex(u32 val)
      ^
source/main.c:436:30: warning: passing argument 2 of 'GSPGPU_FlushDataCache' fro
m incompatible pointer type [-Wincompatible-pointer-types]
  GSPGPU_FlushDataCache(NULL, (u32*)&gspHeap[0x00100000], MENU_PARAMETER_SIZE);
                              ^
In file included from source/main.c:7:0:
c:/Users/Ian/Desktop/ninjhax2x/libctru-fpic/include/ctr/GSP.h:40:8: note: expect
ed 'u8 * {aka unsigned char *}' but argument is of type 'u32 * {aka long unsigne
d int *}'
Result GSPGPU_FlushDataCache(Handle *handle, u8* adr, u32 size);
        ^
source/main.c:350:9: warning: unused variable 'hbSpecialHandle' [-Wunused-variab
le]
  Handle hbSpecialHandle, fsuHandle, nssHandle, irrstHandle, amsysHandle;
         ^
arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -Os -fpie -I"/c/Users/Ian/
Desktop/ninjhax2x/libctru-fpic/include" -I/c/devkitPro/libnds/include -c source/
text.c -o build/text.o
arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -Os -fpie -I"/c/Users/Ian/
Desktop/ninjhax2x/libctru-fpic/include" -I/c/devkitPro/libnds/include -c source/
crt0.s -o build/crt0.o
cd "/c/Users/Ian/Desktop/ninjhax2x/libctru-fpic" && make
make[2]: Entering directory `/c/Users/Ian/Desktop/ninjhax2x/libctru-fpic'
mkdir -p build
mkdir -p lib
arm-none-eabi-gcc-ar rvs lib/"libctru".a build/AC.o build/APT.o build/CFGNOR.o b
uild/CSND.o build/FS.o build/GPU.o build/GSP.o build/GX.o build/HID.o build/HTTP
C.o build/IR.o build/OS.o build/SHDR.o build/SOC.o build/gpuResetSequence.o buil
d/srv.o build/svc.o
r - build/AC.o
r - build/APT.o
r - build/CFGNOR.o
r - build/CSND.o
r - build/FS.o
r - build/GPU.o
r - build/GSP.o
r - build/GX.o
r - build/HID.o
r - build/HTTPC.o
r - build/IR.o
r - build/OS.o
r - build/SHDR.o
r - build/SOC.o
r - build/gpuResetSequence.o
r - build/srv.o
r - build/svc.o
make[2]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/libctru-fpic'
arm-none-eabi-ld --script=ccd00.ld -L"/c/devkitPro/devkitARM/arm-none-eabi/lib"
-L"/c/Users/Ian/Desktop/ninjhax2x/libctru-fpic/lib" -Map=output.map -o app_code.
elf build/font.o build/main.o build/text.o -g -lctru -lm -lc -lg
arm-none-eabi-objcopy -O binary app_code.elf app_code.bin
/bin/sh: readelf: command not found
Traceback (most recent call last):
  File "../scripts/relocROP.py", line 48, in <module>
    for i in range(_got_start - base_adr, _got_end - base_adr, 0x4):
TypeError: unsupported operand type(s) for -: 'NoneType' and 'int'
make[1]: *** [app_code_reloc.s] Error 1
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/app_code'
make: *** [app_code/app_code.bin] Error 2

C:\Users\Ian\Desktop\ninjhax2x>

in particular the ending:

Code:

arm-none-eabi-ld --script=ccd00.ld -L"/c/devkitPro/devkitARM/arm-none-eabi/lib"
-L"/c/Users/Ian/Desktop/ninjhax2x/libctru-fpic/lib" -Map=output.map -o app_code.
elf build/font.o build/main.o build/text.o -g -lctru -lm -lc -lg
arm-none-eabi-objcopy -O binary app_code.elf app_code.bin
/bin/sh: readelf: command not found
Traceback (most recent call last):
  File "../scripts/relocROP.py", line 48, in <module>
    for i in range(_got_start - base_adr, _got_end - base_adr, 0x4):
TypeError: unsupported operand type(s) for -: 'NoneType' and 'int'
make[1]: *** [app_code_reloc.s] Error 1
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/app_code'
make: *** [app_code/app_code.bin] Error 2

Code:

_RO_VERSION equ (4096)
FIRM_VERSION equ ("POST5")
CN_VERSION equ ("WEST")
MSET_VERSION equ (8203)
RO_VERSION equ ("4096")
MENU_VERSION equ ("15360")
REGION equ ("U")
REGION_ID equ (1)
IS_N3DS equ (0)
CN_NINJHAX_URL equ ("http://192.168.109.1/")
OUTNAME equ ("POST5_U_15360_8203")
BUILDTIME equ ("2016-01-12 01:27:38")
HAX_NAME_VERSION equ ("*hax 2.5 beta")
HB_NUM_HANDLES equ (16)
CN_TEXTPAOFFSET equ (0x03E00000)
CN_TEXTPA_OFFSET_FROMEND equ (CN_TEXTPAOFFSET-0x04000000)
FIRM_LINEAROFFSET equ (-0x0C000000)
FIRM_APPMEMALLOC equ (0x04000000)
FIRM_LINEARSYSTEM equ (0x34000000)
HB_MEM0_SIZE equ (10*1024*1024)
HB_MEM0_ADDR equ (0x0A000000)
MENU_LOADEDROP_BUFADR equ (0x35040000)
MENU_LOADEDROP_BKP_BUFADR equ ((MENU_LOADEDROP_BUFADR + 0x8000))
MENU_PARAMETER_SIZE equ ((0x800))
MENU_PARAMETER_BUFADR equ ((MENU_LOADEDROP_BUFADR - MENU_PARAMETER_SIZE*6))
CN_GSPHEAP equ (0x14000000)
CN_FSHANDLE_ADR equ (0x00334828)
CN_GSPHANDLE_ADR equ (0x00334F28)
CN_GSPSHAREDBUF_ADR equ ((0x356208+0x58))
CN_SRVHANDLE_ADR equ (0x00334F6C)
CN_APTLOCKHANDLE_ADR equ (0x00334720)
CN_HIDMEMHANDLE_ADR equ (0x0034EC98)
CN_GSPMEMHANDLE_ADR equ (0x00356254)
CN_DATABSS_START equ ((0x0031A000))
CN_DATABSS_SIZE equ ((0x2773C+0x20070))
CN_HEAPSIZE equ (0x01d9a000)
CN_GSPGPU_FlushDataCache_ADR equ (0x002D15D4)
CN_nn__gxlow__CTR__CmdReqQueueTx__TryEnqueue equ (0x001C2B54)
CN_INITIALCODE_OFFSET equ (0x001D9700)
CN_STACKPAYLOADADR_SAVE equ (0x0FFFFA64)
CN_HEAPPAYLOADADR_SAVE equ (0x8E3D968)
CN_STACKPAYLOADADR equ (0x0FFFFA64)
CN_HEAPPAYLOADADR equ (0x8E3D968)
CN_CODELOCATIONPAOFF equ ((0x100000))
CN_CODELOCATIONGSP equ ((CN_GSPHEAP+CN_CODELOCATIONPAOFF))
CN_TOPFBADR1 equ ((0x1444B9C0))
CN_TOPFBADR2 equ ((0x14491EE0))
CN_TOTALPAGES equ (0x262)
CN_ADDPAGES equ (0x0)
CN_NEWTOTALPAGES equ ((CN_TOTALPAGES+CN_ADDPAGES))
CN_ALLOCPAGES_ADR equ (0x138F0000)
CN_BOOTLOADER_LOC equ (0x00100000)
CN_MENULOADER_LOC equ (0x00101000)
CN_ARGSETTER_LOC equ (0x00102000)
CN_ARGCV_LOC equ (0x00103000)
CN_HBHANDLE_LOC equ (0x00106000)
CN_SERVICESTRUCT_LOC equ (0x00107000)
CN_3DSX_LOADADR equ (0x00108000)
CN_TOTAL3DSXPAGES equ ((CN_NEWTOTALPAGES-(CN_3DSX_LOADADR-0x00100000)/0x1000))
CAMAPP_TIDLOW equ (0x00021400)
DLPLAY_TIDLOW equ (0x00021100)
ACTAPP_TIDLOW equ (0x0002C000)
MSET_TIDLOW equ (0x00021000)
NFACE_TIDLOW equ (0x20021D00)
ROP_MENU_POP_PC equ (0x10203c)
ROP_MENU_POP_R0PC equ (0x154ef0)
ROP_MENU_POP_R1PC equ (0x226264)
ROP_MENU_POP_R2R3R4R5R6PC equ (0x1512b4)
ROP_MENU_POP_R4PC equ (0x101be8)
ROP_MENU_POP_R4R5PC equ (0x102470)
ROP_MENU_POP_R4R5R6PC equ (0x101b94)
ROP_MENU_POP_R4R5R6R7R8PC equ (0x101ed0)
ROP_MENU_POP_R4R5R6R7R8R9R10PC equ (0x103bbc)
ROP_MENU_POP_R4LR_BX_R0 equ (0x15a98c)
ROP_MENU_BX_LR equ (0x10003c)
ROP_MENU_ADD_SPSPx64_POP_R4RR11PC equ (0x1057dc)
ROP_MENU_STACK_PIVOT equ (0x100fdc)
ROP_MENU_LDR_R0R0_POP_R4PC equ (0x1235c0)
ROP_MENU_LDR_R1R0x4_ADD_R0R0R1_POP_R3R4R5PC equ (0x13cb78)
ROP_MENU_STREQ_R5R2x30_POP_R4R5R6PC equ (0x1525ac)
ROP_MENU_STRNE_R4R0x4_POP_R4PC equ (0x192aa8)
ROP_MENU_STR_R0R4_POP_R4PC equ (0x10b3f8)
ROP_MENU_STRB_R0R4_POP_R4PC equ (0x10296c)
ROP_MENU_STR_R1R0_POP_R4PC equ (0x10b0ac)
ROP_MENU_AND_R0R0R4_POP_R4R5R6R7R8PC equ (0x123138)
ROP_MENU_ADD_R0R0R1LSL2_POP_R4PC equ (0x1f3758)
ROP_MENU_ADD_R0R0R1_POP_R4R5R6PC equ (0x13459c)
ROP_MENU_AND_R0R0x7_POP_R4PC equ (0x2d09b4)
ROP_MENU_ADD_R1R1x1_STR_R1R5x10_POP_R4R5R6PC equ (0x102324)
ROP_MENU_CMP_R0R1_MVNLS_R0x0_MOVHI_R0x1_POP_R4PC equ (0x20a474)
ROP_MENU_BLXNE_R2_ADD_SPx8_MOV_R0R4_POP_R4R5R6R7R8PC equ (0x1a4608)
ROP_MENU_MRC_R0C13C03_ADD_R0R0x5C_BX_LR equ (0x13d33c)
ROP_MENU_LDR_R0R0_SVC_x32_AND_R1R0x80000000_CMP_R1x0_LDRGE_R0R4x4_POP_R4PC equ (0x102b6c)
ROP_MENU_SLEEPTHREAD equ (0x12b584)
ROP_MENU_WAITSYNCHRONIZATIONN equ (0x11c668)
ROP_MENU_CREATEMEMORYBLOCK equ (0x136198)
ROP_MENU_CONTROLMEMORY equ (0x22467c)
ROP_MENU_CONNECTTOPORT equ (0x11c650)
ROP_MENU_APT_OPENSESSION equ (0x225a20)
ROP_MENU_APT_CLOSESESSION equ (0x2259b0)
ROP_MENU_APT_SENDPARAMETER equ (0x12e904)
ROP_MENU_APT_GLANCEPARAMETER equ (0x12ea74)
ROP_MENU_APT_RECEIVEPARAMETER equ (0x144304)
ROP_MENU_APT_PREPARETOSTARTAPPLICATION equ (0x12ec88)
ROP_MENU_APT_STARTAPPLICATION equ (0x1388f0)
ROP_MENU_APT_ORDERTOCLOSEAPPLICATION equ (0x12ec58)
ROP_MENU_APT_APPLETUTILITYCMD2 equ (0x11e0d4)
ROP_MENU_APT_APPLETUTILITYCMD7 equ (0x214c98)
ROP_MENU_CLEARHOMEBUTTONSTATE equ (0x214c50)
ROP_MENU_APT_WAKEUPAPPLICATION equ (0x11e748)
ROP_MENU_APT_INQUIRENOTIFICATION equ (0x11e778)
ROP_MENU_APT_REPLYSLEEPQUERY equ (0x12eb00)
ROP_MENU_APT_REPLYSLEEPNOTIFICATIONCOMPLETE equ (0x12edb4)
ROP_MENU_APT_ISREGISTERED equ (0x20e5bc)
ROP_MENU_APT_SENDDELIVERARG equ (0x17d57c)
ROP_MENU_APT_PREPARETOLEAVEHOMEMENU equ (0x11e864)
ROP_MENU_APT_LEAVEHOMEMENU equ (0x11e578)
ROP_MENU_NSS_REBOOT equ (0x136a04)
ROP_MENU_NSS_LAUNCHTITLE equ (0x2201b8)
ROP_MENU_GSPGPU_RELEASERIGHT equ (0x12e47c)
ROP_MENU_GSPGPU_ACQUIRERIGHT equ (0x138440)
ROP_MENU_GSPGPU_WRITEHWREGS equ (0x14aedc)
ROP_MENU_GSPGPU_FLUSHDATACACHE equ (0x14e940)
ROP_MENU_GSPGPU_GXTRYENQUEUE equ (0x20443c)
ROP_MENU_GSPGPU_IMPORTDISPLAYCAPTUREINFO equ (0x14411c)
ROP_MENU_DSP_REGISTERINTERRUPTEVENTS equ (0x1370fc)
ROP_MENU_DSP_UNLOADCOMPONENT equ (0x12caec)
ROP_MENU_SRV_SUBSCRIBE equ (0x201e00)
ROP_MENU_SRV_GETHANDLE equ (0x10f900)
ROP_MENU_MEMCPY equ (0x224c0c)
ROP_MENU_MOUNTSDMC equ (0x11cac0)
ROP_MENU_FOPEN equ (0x218ba8)
ROP_MENU_FWRITE equ (0x20d024)
ROP_MENU_FSEEK equ (0x20d7d0)
ROP_MENU_FCLOSE equ (0x21dc48)
MENU_DSP_BINARY_AFTERSIG equ (0x314dec)
MENU_DSP_BINARY_SIZE equ (0xc25c)
MENU_IRRST_HANDLE equ (0x322214)
MENU_AMSYS_HANDLE equ (0x314940)
MENU_NSS_HANDLE equ (0x314018)
MENU_APT_HANDLE equ (0x314970)
MENU_FS_HANDLE equ (0x313fb0)
MENU_SRV_HANDLE equ (0x3210ec)
MENU_NEWSS_HANDLE equ (0x322220)
MENU_PTMSYSM_HANDLE equ (0x31404c)
MENU_GSPLCD_HANDLE equ (0x320f74)
MENU_DSP_HANDLE_STRUCT equ (0x313f38)
MENU_GSPGPU_HANDLE equ (0x320f70)
MENU_GSPGPU_INTERRUPT_RECEIVER_STRUCT equ (0x312580)

zoogie · Jan 12, 2016

You should be using libctru not libctru-fpic

ihaveahax · Jan 12, 2016

zoogie said:
You should be using libctru not libctru-fpic

I'm pretty sure I'm building with the included libctru folder...

zoogie · Jan 12, 2016

ihaveamac said:
I'm pretty sure I'm building with the included libctru folder...

That's not what your error output shows
L"/c/Users/Ian/Desktop/ninjhax2x/libctru-fpic/lib"

ihaveahax · Jan 12, 2016

zoogie said:
That's not what your error output shows
L"/c/Users/Ian/Desktop/ninjhax2x/libctru-fpic/lib"

I have no idea how this happened because I set "CTRULIB" to "/c/Users/Ian/Desktop/ninjhax2x/libctru". would adding a / to the end fix this?

zoogie · Jan 12, 2016

ihaveamac said:
I have no idea how this happened because I set "CTRULIB" to "/c/Users/Ian/Desktop/ninjhax2x/libctru". would adding a / to the end fix this?

I don't think so. This is what I have
export CTRULIB=$(shell pwd)/libctru (in the makefile)

Honestly, I don't think it's that. What python are you using?

ihaveahax · Jan 12, 2016

zoogie said:
I don't think so. This is what I have
export CTRULIB=$(shell pwd)/libctru (in the makefile)

Honestly, I don't think it's that. What python are you using?

well first, I decided to add the / anyway and got something like this:

Code:

arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -Os -fpie -I"/c/Users/Ian/
Desktop/ninjhax2x/libctru/-fpic/include" -I/c/devkitPro/libnds/include -c source
/font.c -o build/font.o
source/font.c:1:23: fatal error: ctr/types.h: No such file or directory
compilation terminated.
make[1]: *** [build/font.o] Error 1
make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/app_code'
make: *** [app_code/app_code.bin] Error 2

"/c/Users/Ian/Desktop/ninjhax2x/libctru/-fpic/include"

I'm using 3.5.1 with this. I chose 3 since the original https://github.com/smealum/ninjhax mentions 3.

zoogie · Jan 12, 2016

ihaveamac said:
well first, I decided to add the / anyway and got something like this:

Code:

arm-none-eabi-gcc -Wall -std=c99 -march=armv6 -mthumb -Os -fpie -I"/c/Users/Ian/ Desktop/ninjhax2x/libctru/-fpic/include" -I/c/devkitPro/libnds/include -c source /font.c -o build/font.o source/font.c:1:23: fatal error: ctr/types.h: No such file or directory compilation terminated. make[1]: *** [build/font.o] Error 1 make[1]: Leaving directory `/c/Users/Ian/Desktop/ninjhax2x/app_code' make: *** [app_code/app_code.bin] Error 2

"/c/Users/Ian/Desktop/ninjhax2x/libctru/-fpic/include"

I'm using 3.5.1 with this. I chose 3 since the original https://github.com/smealum/ninjhax mentions 3.

It wouldn't hurt to try python 2.7.10. It installs alongside python 3.

You're path in the beginning was probably fine but you should try my suggestion. The last one you tried was definitely the wrong idea.

ihaveahax · Jan 12, 2016

zoogie said:
It wouldn't hurt to try python 2.7.10. It installs alongside python 3.

You're path in the beginning was probably fine but you should try my suggestion. The last one you tried was definitely the wrong idea.

I decided to try adding "export CTRULIB=$(shell pwd)/libctru" to the root Makefile yet the same thing occurred with 2.7.11 and 3.5.1: "/bin/sh: readelf: command not found"

I'm guessing I need to install something, but I don't know what

Favna · Jan 12, 2016

sweis12 said:
Yeah, I get notifications as soon as he tweets

Go for pro. Use IFTTT to make you not only get push notifications but also emails, text messages and whatever else more huahahaha

https://ifttt.com/

I personally just use Twitter's Tweetdeck and have Smea added to my 3DS Homebrew list which gives notifications when a new tweet is in that list, but then again, so does my favourites list so when I hear a *bloop* it can be either.

ihaveahax · Jan 12, 2016

I looked at C:\devkitPro\devkitARM\bin\ and found "arm-none-eabi-readelf.exe", so I copied it to "readelf.exe" and added this to PATH. sure enough it got past that error, but now it complains that it can't find gcc. I'm pretty sure I could get around this by just copying "arm-none-eabi-gcc" to "gcc.exe" but there has to be a better way.

zoogie · Jan 12, 2016

ihaveamac said:
I decided to try adding "export CTRULIB=$(shell pwd)/libctru" to the root Makefile yet the same thing occurred with 2.7.11 and 3.5.1: "/bin/sh: readelf: command not found"

I'm guessing I need to install something, but I don't know what

aha! It's a part of minGW and you should install it.

there's couple of small pc apps that need to be compiled in that repo (should be automatic if you have gcc/mingw)

ihaveahax · Jan 12, 2016

zoogie said:
aha! It's a part of minGW and you should install it. there's couple of small pc apps that need to be compiled in that repo (should be automatic if you have gcc/mingw)

I knew it... I don't usually work with windows (using an OS X host) so this was very confusing.

ihaveahax · Jan 12, 2016

now we're rolling

I can't really do anything with this other than show off though, but hey. I tried out "MiniWeb" for the web server, pointing it to the payload directory.

SANNIC789 · Jan 12, 2016

EpicLPer said:
I do too and the first thing I actually do is go here and count the seconds till someone makes a thread

so how many seconds?

Homebrew *hax 2.5 source code released!

Well-Known Member

playing around in the end of life

Well-Known Member

playing around in the end of life

Attachments

Well-Known Member

Well-Known Member

playing around in the end of life

Well-Known Member

playing around in the end of life

Well-Known Member

playing around in the end of life

Well-Known Member

playing around in the end of life

Well-Known Member

#PCMasterRace

Well-Known Member

playing around in the end of life

Well-Known Member

Well-Known Member

Well-Known Member

Similar threads