Homebrew Homebrew Development

[fierce waffle]

We're not going to be able to swap buffers until we can execute ARM11 right? So that will be a while...

What makes you think it'll take a while?

 

[fierce waffle]

unrelated to that ^

Here's a binary loader I've been working on:

 

[CalebW]

What makes you think it'll take a while?

Mainly because everybody is so worried about protecting against backup loaders that they won't release it. Sure, someone could come along tomorrow who will open ARM11 code execution, but it's not probable.

Related to the binary loader: That looks great, would it be possible to exit out of a program and back into the loader?

 

[fierce waffle]

Mainly because everybody is so worried about protecting against backup loaders that they won't release it. Sure, someone could come along tomorrow who will open ARM11 code execution, but it's not probable.

Related to the binary loader: That looks great, would it be possible to exit out of a program and back into the loader?

It is. Still need to clean up the reloading however. You can also reload the loader itself with an updating version from the SD(that's go.bin on the SD in the vid).

 

[Searinox]

unrelated to that ^

Here's a binary loader I've been working on:

At this point it would be nice to standardize a small memory area that's "safe" prior to passing control to the binary, one that homebrews can "leave alone" where code could be put for soft reset, possibly the same area used for the home menu during normal game execution. If respected from this early age of development it would be nice because we could finally have a working soft reset from within all homebrew, something that was missing during the DS age. Would be nice to not have to keep shutting down the console to quit an app.

 

[YoshiInAVoid]

Can't we run ARM 11 with Gateway 2.01b loader?

 

[KazoWAR]

it sucks having to sit on the side lines. i really want to see what i can do

 

[PedroDJavier]

unrelated to that ^

Here's a binary loader I've been working on:

Download link ?

 

[YoshiInAVoid]

Downloading OpenSSL, changing Makefile to produce ROPLauncher.dat and then adding an extra stage to build.bat:

make
openssl enc -aes-128-cbc -K 580006192800C5F0FBFB04E06A682088 -iv 00000000000000000000000000000000 -in ROPLauncher.dat -out Launcher.dat
pause

We can produce Launcher.dats which will run on Gateway 2.01b loader.

Is this ARM 11 mode?

Don't kill me for the noob question please!

 

[Kane49]

Is this ARM 11 mode?

Short answer: no.

 

[YoshiInAVoid]

So how is Gateway running ARM 11 code? Exploiting another bug when in ARM 9 to gain access to ARM 11?

 

[KazoWAR]

is gateway even running arm11?

 

[gamesquest1]

is gateway even running arm11?

Well they have patched the OS so most probably....I'm no expert though, I'm sure an expert will know for sure that's just my assumption XD

 

[Kane49]

Well they have patched the OS so most probably....I'm no expert though, I'm sure an expert will know for sure that's just my assumption XD

Not an expert as well but i can confirm Gateway runs quite a bit of arm11 code.

 

[Slashmolder]

The arm9 CPU has pretty much full access to the system's memory. Overwriting something and getting the arm11 CPU to reach that code isn't hard.

 

[TheCruel]

The arm9 CPU has pretty much full access to the system's memory. Overwriting something and getting the arm11 CPU to reach that code isn't hard.3

I agree, it's pretty easy.

Now could you remind me how to do that again? I'm a little rusty.

 

[Kane49]

The arm9 CPU has pretty much full access to the system's memory. Overwriting something and getting the arm11 CPU to reach that code isn't hard.3

No argument there, if only someone would publicly release the way to enter arm9 privileged mode.

 

[profi200]

Spoiler

That's just a RAM edit and means something like "Unhealthiness".

 

[YoshiInAVoid]

Where do we inject ARM 11 code? Where is the program counter at once the exploit loads?

 

[CalebW]

I have been having so much trouble trying to get 3D working on by Breakout game.

Here's the function I'm using from Snailface:

Spoiler

void draw_fill3Drect(int x, int y,int w,int h, char r, char g, char b, int offset3D) {
 
    int lcoord = 720 * (x - offset3D) + 720 - (3 * y + 3);
    int rcoord = 720 * (x + offset3D) + 720 - (3 * y + 3);
 
 
    char* L1 = (char*) (lcoord + TOP_LEFT_FRAME0);
    char* L2 = (char*) (lcoord + TOP_LEFT_FRAME1);
    char* R1 = (char*) (rcoord + TOP_RIGHT_FRAME0);
    char* R2 = (char*) (rcoord + TOP_RIGHT_FRAME1);
    char* L1temp;
    char* L2temp;
    char* R1temp;
    char* R2temp;
    L1temp = L1;
    L2temp = L2;
    R1temp = R1;
    R2temp = R2;
 
    for (x = 0; x < w; x++) {
 
        for (y = 0; y < h; y++) {
            * L1 = b;
            *(L1 + 1) = g;
            *(L1 + 2) = r;
 
            * L2 = b;
            *(L2 + 1) = g;
            *(L2 + 2) = r;
 
            * R1 = b;
            *(R1 + 1) = g;
            *(R1 + 2) = r;
 
            * R2 = b;
            *(R2 + 1) = g;
            *(R2 + 2) = r;
       
            L1 += 3;
            L2 += 3;
            R1 += 3;
            R2 += 3;
        }
        L1temp += 720;
        L2temp += 720;
        R1temp += 720;
        R2temp += 720;
        L1 = L1temp;
        L2 = L2temp;
        R1 = R1temp;
        R2 = R2temp;
    }
}

I refer to the function with

draw_fill3Drect(x*BRICK_WIDTH,y*BRICK_HEIGHT,BRICK_WIDTH-1,BRICK_HEIGHT-1,0,255,0,offset3D);

The "-1" used to be a -2 which is the amount of space between the bricks, but for some reason, this function wants to double that value so I had to drop it down, the offset3D is set at five. This function will draw 3D boxes, but it writes most of the top layer of bricks to the bottom of the screen and I can't figure out why...here's a very bad photo (sorry!, I think the lens had a fingerprint on it and there was really bad lighting):

Spoiler

So why are the bricks being written to the bottom of the screen and what can I do to fix the problem?