How to start 9.2 CFW dev?

Discussion in '3DS - Flashcards & Custom Firmwares' started by AtlanticBit, Feb 27, 2015.

  1. AtlanticBit
    OP

    AtlanticBit Yeh, fuck this

    Member
    365
    189
    Jan 15, 2015
    Poland
    DEEP IN SPACE
    Title self explanatory.
     
    Margen67 likes this.
  2. MeisterFenster

    MeisterFenster GBAtemp Regular

    Member
    167
    33
    Nov 18, 2014
    Gambia, The
    Learn coding. Self explanatory.
     
    otto888, MrJason005 and ichichfly like this.
  3. Jayro

    Jayro MediCat USB and Mini Windows 10 Developer

    Member
    GBAtemp Patron
    Jayro is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    5,144
    2,809
    Jul 23, 2012
    United States
    Octo Canyon
    Yeah, we need more 9.2 development to ditch the 4.5 dependency, but I can't code to save my life, and know nothing about the 3DS beyond basic hardware. :/
     
    Margen67 and SLiV3R like this.
  4. SLiV3R

    SLiV3R 3DS Friend Code: 0473-9069-2206

    Member
    2,212
    1,044
    Jan 9, 2006
    Devotion. Time. Skill. Knowledge in programming.

    I guess its like how to build a house. Start with a solid ground and so on :)
     
    Zidapi, Vappy and Jayro like this.
  5. Vappy

    Vappy GBAtemp Advanced Maniac

    Member
    1,508
    1,155
    May 23, 2012
    Yeah, pick smaller projects, learn programming, learn about systems, about hardware and operating systems, read and try to memorize the ARM manual a few dozen times, do the same for 3dbrew, ask lots of questions. That's probably roughly how anyone else has done it. :P
     
    SLiV3R likes this.
  6. BobDoleOwndU

    BobDoleOwndU GBAtemp Maniac

    Member
    1,168
    351
    Dec 28, 2013
    Canada
    Best place to start would be to learn as much about the 3DS as possible. I don't know much about the 3DS personally, but I know there's a lot of readily available information on 3dbrew. Looking at the 4.X CFW and the Gateway exploit files would probably also be helpful.
     
    SLiV3R likes this.
  7. illicit

    illicit GBAtemp Regular

    Member
    140
    43
    Sep 28, 2010
    United States
    wait for someone else to do it
     
  8. KazoWAR

    KazoWAR GBAtemp Advanced Maniac

    Member
    1,805
    685
    Aug 12, 2008
    United States
    Winter Haven
    I wanted to take mem dumps of 4.2 sysand, and 4.2 CFW and try to find what have been patched. then try to make patches for 9.X and see if i could get something out of it. but i could never find out how to do mem dumps in 4.X
     
    Margen67 likes this.
  9. mathieulh

    mathieulh GBAtemp Fan

    Member
    335
    394
    Feb 28, 2008
    France
    You need to learn ARM assembly to begin with, you also need to know more on how the 3DS Operating System works (FIRM, the services...) you need to look into current vulnerabilities implementations and so forth.
    If you haven't done any of this before, it might take you weeks before you get any tangible results.
     
  10. Duo8

    Duo8 I don't like video games

    Member
    3,444
    1,144
    Jul 16, 2013
    Not wasting time with threads like these.
     
  11. SLiV3R

    SLiV3R 3DS Friend Code: 0473-9069-2206

    Member
    2,212
    1,044
    Jan 9, 2006
    Everyone has to be a beginner at some point. You'll never know who will be the next Smealum :)
     
  12. The Real Jdbye

    The Real Jdbye Always Remember 30/07/08

    Member
    GBAtemp Patron
    The Real Jdbye is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    12,343
    5,349
    Mar 17, 2010
    Norway
    Alola
    Start by learning ARM assembly, then you can reverse engineer the GW launcher by looking at the ROP chain, cross reference that with the code at the addresses it calls, see what each instruction does and by that point you should know enough to begin working on your own version of the exploit. Then you will just have to figure out what needs to be patched in the firmware to do what you want (reverse engineering GWs code can also be of help in this)
    Knowledge of the 3DS system will be important but you can learn a lot of that as you go :)
     
    Margen67 and SLiV3R like this.
  13. Duo8

    Duo8 I don't like video games

    Member
    3,444
    1,144
    Jul 16, 2013
    Yeah but we had at least 5 threads like these at some point. Throwing this question at google would be much quicker with the same results.
    Make a thread if there's some specific thing you want to know, not a vague question.
     
    SLiV3R likes this.
  14. MrJason005

    MrJason005 √2

    Member
    2,255
    1,220
    Nov 26, 2014
    Greece
    Κάπου
    Why not downgrade?
     
  15. Jao Chu

    Jao Chu GBAtemp Advanced Maniac

    Member
    1,921
    1,211
    Aug 20, 2013
    straya m8
    Lol, this thread. :rofl2:
     
  16. ewin00

    ewin00 GBAtemp Regular

    Member
    146
    32
    Mar 24, 2011
    Indonesia
    wait till someone leak it. but wait its all about WAITING right? and i guess this thread wont reach a thousand pages
     
    Margen67 and MrJason005 like this.
  17. WulfyStylez

    WulfyStylez SALT/Bemani Princess

    Member
    1,149
    2,609
    Nov 3, 2013
    United States
    CFW dev? Like booting into a hacked FIRM? Literally go look at Gateway's 1.0 launcher. Then make a 9.x native_firm with checks patched out. Done.
    That's for booting from 4.x. Every single thing you need to make a custom firmware is public and has been for a really long time.
     
    Margen67 and SLiV3R like this.
  18. dela

    dela Advanced Member

    Newcomer
    78
    62
    Dec 6, 2014
    Italy
    Cagliari
    I think first of all needs:
    extrapolate from CFW booting of 4.5 and clean it from all the patches to enable cia services.
    Second phase from firmware 9.2 to try to dump the axiwram and FCRAM during a softreboot to understand how is the boot of sysnand.
    Then once you understand how you start a firmware 9.2, we can think about how to rewrite the boot it.
     
  19. WulfyStylez

    WulfyStylez SALT/Bemani Princess

    Member
    1,149
    2,609
    Nov 3, 2013
    United States
    To boot a different version, you just load that native_firm instead. version-independent setup stuff is done in firm, after all.
     
  20. Oishikatta

    Oishikatta GBAtemp Advanced Fan

    Member
    971
    545
    Oct 30, 2014
    United States

    You don't have to do anything special to handle the 7.x encryption?