Hacking [Realease] ReiNand Cfw

[NyaakoXD]

Where can I find it?

https://gbatemp.net/threads/look-this-ntr-cfw.374954/

 

[OctopusRift]

https://gbatemp.net/threads/look-this-ntr-cfw.374954/

thx m8

 

[stapled]

So how do we get the Reinand to 9.8 like in the video? Mine is still 4.2

 

[Ericss]

thx m8

It won't help you a lot when it comes to Smash, though.

 

[OctopusRift]

It won't help you a lot when it comes to Smash, though.

True... but it's confusing BTW and I cant quite understand it already.

 

[williamcesar2]

yeah more CFW! I can not get enough.

 

[froggestspirit]

What's the progress on LayeredFS?

 

[Domino101]

great job, cant wait for the official release

 

[Reisyukaku]

I'm adding and subtracting features as I go and trying to make something not coded like ass.. anyways, screenshots is working for pokemon games.. i'll try to setup some kind of logic for other games eventually.
https://twitter.com/Reisyukaku/status/616139417833603072

 

[Xenon Hacks]

@Reisyukaku You should rename this project to NotAnotherCFW :^)

 

[Reisyukaku]

Guess I'll post cheat sheets here too for those interested.
http://pastebin.com/7P5SYsjQ

 

[Syphurith]

Guess I'll post cheat sheets here too for those interested. http://pastebin.com/7P5SYsjQ

Thanks for your hard work. Are you still working on finding a way to N3DS emunand? Have that stuck or something else?
You know there are too many people hoping for a emunand for N3DS.. (Ha What i have is an O3DS JPN, now running rx with mset. so I don't really care about it too much.)

BTW Sorry for unable to access pastebin now. All pages from pastebin shows "stolen content" (GAE) so I think I'm blocked (so do most of others in China - even connection reset).

 

[Xenon Hacks]

Thanks for your hard work. Are you still working on finding a way to N3DS emunand? Have that stuck or something else?
You know there are too many people hoping for a emunand for N3DS.. (Ha What i have is an O3DS JPN, now running rx with mset. so I don't really care about it too much.)

BTW Sorry for unable to access pastebin now. All pages from pastebin shows "stolen content" (GAE) so I think I'm blocked (so do most of others in China - even connection reset).

Here you go

Spoiler: ARM9 Cheat Sheet

1. #include "lib.h"
2. #include "FS.h"
3. #include <wchar.h>
4. #include <stdio.h>
5. 
   
6. #define VRAM (unsigned char*)0x18000000
7. #define FCRAM (unsigned char*)0x20000000
8. #define ARM9_RAM (unsigned char*)0x8000000
9. #define TOP_FRAME 0
10. #define BOT_FRAME 1
11. 
    
12. unsigned char handle[32];
13. unsigned char bmpHead[] = {
14. 0x42, 0x4D, 0x36, 0x65, 0x04, 0x00, 0x00, 0x00,
15. 0x00, 0x00, 0x36, 0x00, 0x00, 0x00, 0x28, 0x00,
16. 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0xF0, 0x00,
17. 0x00, 0x00, 0x01, 0x00, 0x18, 0x00, 0x00, 0x00,
18. 0x00, 0x00, 0x00, 0x65, 0x04, 0x00, 0x00, 0x00,
19. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
20. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
21. };
22. 
    
23. void memdump(wchar_t* filename, unsigned char* buf, unsigned int size){
24. unsigned int br = 0;
25. memset(&handle, 0, 32);
26. fopen9(&handle, filename, 6);
27. fwrite9(&handle, &br, buf, size);
28. fclose9(&handle);
29. for(int i = 0; i < 0x46500; i++) *(VRAM+0x1E6000 + i) = 0xFF;
30. }
31. 
    
32. void transpose (void * dst, const void * src, unsigned dim1, unsigned dim2, unsigned item_length) {
33. char * ptr_write;
34. const char * ptr_read;
35. unsigned x, y, z;
36. for (x = 0; x < dim1; x ++) for (y = 0; y < dim2; y ++) {
37. ptr_write = ((char *) dst) + item_length * (y * dim1 + x);
38. ptr_read = ((const char *) src) + item_length * (x * dim2 + y);
39. for (z = 0; z < item_length; z ++) *(ptr_write ++) = *(ptr_read ++);
40. }
41. }
42. 
    
43. void screenShot(int frame){
44. unsigned int br;
45. short width = frame == 0 ? 400 : 320;
46. short height = 240;
47. int frameOff = frame == 0 ? 0x300000 : 0; //0x1E6000 : 0x48F000; //<- Defaults
48. int length = frame == 0 ? 0x46500 : 0x38400;
50. memset(&handle, 0, 32);
51. fopen9(&handle, frame == 0 ? L"sdmc:/screen_top.bmp" : L"sdmc:/screen_bot.bmp", 6);
52. transpose(FCRAM+0xF80000, VRAM+frameOff, width, height, 3);
53. bmpHead[18] = frame == 0 ? 0x90 : 0x40;
54. fwrite9(&handle, &br, bmpHead, 0x36);
55. fwrite9(&handle, &br, FCRAM+0xF80000, length);
56. fclose9(&handle);
57. for(int i = 0; i < length; i++) *(VRAM+frameOff + i) = 0xFF;
58. }
59. 
    
60. void myThread(){
61. while(1){
62. if(getHID() & BUTTON_SELECT){
63. screenShot(TOP_FRAME);
64. screenShot(BOT_FRAME);
65. }
66. if(getHID() & BUTTON_START) memdump(L"sdmc:/VRAM.bin", VRAM, 0x00600000);
67. }
68. __asm("SVC 0x09");
69. }

--------------------- MERGED ---------------------------

Thanks for your hard work. Are you still working on finding a way to N3DS emunand? Have that stuck or something else?
You know there are too many people hoping for a emunand for N3DS.. (Ha What i have is an O3DS JPN, now running rx with mset. so I don't really care about it too much.)

BTW Sorry for unable to access pastebin now. All pages from pastebin shows "stolen content" (GAE) so I think I'm blocked (so do most of others in China - even connection reset).

@Syphurith you might want to look into using
https://www.torproject.org/ for stuff that is blocked by your ISP or country (its hella slow though)

 

[Syphurith]

Here you go. -- Snip --

Thanks for your help. Looks quite similar as RxTools (the familar MyThread, lol).
Seems to be doing BMP buffer writing in "transpose". Wait i remember that BMP is row by row (bottom to top) and column by column (left to right).
The code itself could be optimized sometime later. Still happy to see those stuff.

Thank you Xenon. Still, TOR is also polluted here, ORZ. So I think i would wait for its being open-sourced oneday with patience.

 

[Xenon Hacks]

Thanks for your help. Looks quite similar as RxTools (the familar MyThread, lol).
Seems to be doing BMP buffer writing in "transpose". Wait i remember that BMP is row by row (bottom to top) and column by column (left to right).
The code itself could be optimized sometime later. Still happy to see those stuff.

Thank you Xenon. Still, TOR is also polluted here, ORZ. So I think i would wait for its being open-sourced oneday with patience.

Orz I tried :/

 

[Syphurith]

Orz I tried :/

Don't tell me that is really upside-down. I mean the BMP file generated from screen shots.
Eh.. Also the screen buffer should be B,G,R that not the same as BMP's R,G,B.
>>Trying to take a closer look at the code. yup

 

[Xenon Hacks]

Don't tell me that is really upside-down. I mean the BMP file generated from screen shots.
Eh.. Also the screen buffer should be B,G,R that not the same as BMP's R,G,B.
>>Trying to take a closer look at the code. yup

Do you think this would ever result in screen recording?
Or at the very least tiny GIF's?

 

[Home_Rowed]

Have you gotten past the v9.2 SysNAND barrier? Has anyone? I assume the answer is no because of the ninjhax requirement. Will it be possible with the limited form of ninjhax for past v9.2 being work on?

 

[Syphurith]

Do you think this would ever result in screen recording?
Or at the very least tiny GIF's?

To avoid R,G,B order you can modify the BMP header (see those BMP565 format images) with a little research.
Just for the code you showed to me. I think the result BMP might be upside-down, unless the header is crafted carefully.
I used to copy those data in such a way (not C!):
A = dst + (WIDTH)*(LINE-1)*(PIXELSIZE);
for (HEIGHT: max to min) {
for (WIDTH) A<=B; A++,B++.
if (A == LINEEND){A -= 2*LINESIZE; LINEEND = A + LINESIZE; }}
For GIFs sorry i don't know its internals.

 

[Reisyukaku]

Thanks for your hard work. Are you still working on finding a way to N3DS emunand? Have that stuck or something else?
You know there are too many people hoping for a emunand for N3DS.. (Ha What i have is an O3DS JPN, now running rx with mset. so I don't really care about it too much.)

BTW Sorry for unable to access pastebin now. All pages from pastebin shows "stolen content" (GAE) so I think I'm blocked (so do most of others in China - even connection reset).

I'll try to get it to work with that soon, although it's not as easy as just switching firm files, lol