Homebrew This doesn't sound like anything, but why is START and SELECT used to exit/update Luma

petethepug

PUG
OP
Member
Joined
May 2, 2016
Messages
1,504
Trophies
0
Age
23
Location
COMPUTER
XP
1,261
Country
United States
Most people forget to that you don't even need an SD card to have something running in the background. Since the NDS and 3DS are ramed based. They do not use prioritized functions to call other functions. Instead they call a set of classes or written code like in PythonLib or C++. Since other consoles that use CFW like the Switch and GC. Call classes or redefined values based on class recurrison (which is one of the heaviest weaknesses of the 3ds and nds. When you compare it to a more front end device like the PSP or PS Vita.)

Other consoles use intergrated backups to actually load or fetch the application data... So in your case. The only difference between arm9 and boot9 is that they both used different prioritized functions to call or fetch a function of data. Arm9 used a method of communicating with the DSi Profile back in 2006 or in earlier developments of Homebrew. And Boot9 in 2011 used intergrated checks to make sure a CFW was running in the background. (But it all had to be pre-written. And probably with an exploit.) But these weren't called until the 3ds was really late in development. In matter of fact almost until its eol because it was thought that users would not prioritize the 3ds tools that much. Until RXTools came out and was released. Later becoming open source tools or foundations for the homebrew community.




One of the sys updates of the consoles (11.8) or 11.9. Tried to reverse engineer the 3dstools or boot9 to lock users out of pirated software. But it never worked until users realized that all they had pre-fetch an abort. And even that didn't work.

Then the 3ds. Actually locked and loaded onto pirated software. And without getting into to many details... CIA Files were either encrypted or de-encrypted to run background software. So that no matter what the 3ds would always launch with select advertisements or various sorts of information. Even if a game was in cartridge format on a non-hacked brand new never ran before homebrew stock 3ds on a later or older version of the console... The same with Wii U and Switch.





Anyone can make their own custom FIRM loader or strap if they wanted to. Many users have done it. Even with non-integrated FIRM modules. Even on PC for prioritary uses on or for the 3ds. Like loading reminesent software or creating custom intergrated code. Two games that were in development. SSB3DS and Smash Wii U did this explicity to make character models or creations without use of sketchup or 3dsmax. With no mistakes once so ever. So everything can be loaded into and booted perfectly.




But there's one exception or excerpt to this type of CFW. To be explicit. Everything has to absolutely always be ran on the arm9 or arm11 console of the 3ds. Somehow. And if it can't everything falls like a brick of dominos unless you have a way to fix it or the developer does it. The GBA, and DS do you arm9 and arm11 kernals that are found in some retail games actually. But they do not utilize it to their adventege instead use it for CPU prioritizes or GPU power. So games like Fire Emblem: The Blazing Blade would run at a faster clock speed, and F Zero Climax would not crash during hours or minutes of gameplay. So while the cores or processing units do matter for arm9 and arm11 kernals or services/loaders like boot9 or arm11. They do not explicitly address why or how something is running in the background. Even if it has services checks or security built into the CFW. Even if its better then Nintendo's own intergrated FW for the stock 3ds(s)




Background renderations of. Whatever it is. (like 3ds clock, battery life, and internet/miiverse.) Are a different story. Even if you use or buy the explicit software or hardware built into the chip. (Like the 3ds arm11 core battery life functionality. Idk why you would but you could if you really wanted to.) Cannot change what's running in the background or software of the application running. Unless its already been encrypted.unencrypted somehow or someway. (I will leave that up to you.) People are able to run vague or notorious software found in some flash CD's or hard-disks. To run explicit or unappropriate/suitable content if they were to just use something like that battery life or the clock time. Or a bootlegged cartridge its self (even if it was destroyed.)




All of this has to do with the start and b/a button because when loading or asking what FIRM to boot. The console is asking an explicit security question like "What is your name or address" however it is not shown. But GodMode9 its self completely reverses engineer's the questions put into or onto the 3ds. But they do not recall them. To launch godmode9 and NAND backup's.

Its hard to trust others is what i'm saying. Even if you had a Stargate card and ran a game on your friends system you don't know if its legit. Even if its downloaded from the CDN server of Nintendo or a 3rd party site. :/

--------------------- MERGED ---------------------------

If your wondering how I know this to. In early versions of software development flashcarts like r4i for the 3ds or gateway. Asked those same kind of questions but they were not used to ask security protocalls or questions to the console. Instead it was only used for launching. And playing a game. On 3ds software/hardware in .3ds format. (before the original .cia format was leaked 5 or 8 years later.) In a Nintendo Direct interview between one or two people at a live event held at e3.

That to or it was just published online somewhere on the internet.

"How do you make a .3ds file if you don't have the game" all games were in a graphed chart format (xml.) and were backed up in .3ds a custom format to run or load 3ds games to recognize xml in a flashcart or add modification patches to launch a game. To remove hardware or stock ware limitations on older FW's. By default or by manually modifying the games code. Luma is capable of running graphed. .cia format and .3ds format (or any other that exists in any other region.) But it comes with software limitations for right now.
 
Last edited by petethepug,

Ryccardo

Penguin accelerator
Member
Joined
Feb 13, 2015
Messages
7,691
Trophies
1
Age
28
Location
Imola
XP
6,913
Country
Italy
If you're running a DS cart, those aren't designed to look for the SD card anyways so there would be no benefit.
Aren't designed, but you can exploit some of them ;)
(Of course, if you can install and run a modified kernel, you can also make your DSiwares with all permissions enabled...)

Does that mean someone can make their own firm if they wanted to?
You already could make new kernels, install them to ctrnand (as it's normally done for GBA and DSi ones), and create a title that depends on your new one to run it - as long of course as you were running a 3DS-mode kernel with signature patches;

the new option allowed by sighax is that your custom kernel (= arm9 homebrew) can now be signed (at least according to the biased opinion of the bootrom), and installed to the kernel partitions (which, combined with the way to figure out said partition's encryption key as long as a known kernel is installed, results in any console with a standard kernel installed being moddable with hardmod)
- and combined with the discovery and practical implementation of ntrboot, that same kernel signed in a different way can be loaded from slot-1 (resulting in any console, even without a nand chip fitted or a fully erased one, being moddable)

(in practice, recent guesses and experiments that ultimately resulted in the creation of https://github.com/Ordim3n/That-Shortcut-Thingy proved that the kernel-on-ctrnand way is not trivial to implement, or at least not directly compatible with the 2 newer methods)

of course, nothing forbids you from installing or ntrbooting a forwarder to other arm9 programs even from nonstandard locations (that's indeed the purpose of the original sighax implementation, of b9s, of fastboot3ds, of gm9's bootloader mode, ...) but the leading reason for many arm9 homebrews discontinuing other formats than .firm is simply effort-saving by not having to be compatible with not-directly-compatible environments!
 
  • Like
Reactions: SCOTT0852

petethepug

PUG
OP
Member
Joined
May 2, 2016
Messages
1,504
Trophies
0
Age
23
Location
COMPUTER
XP
1,261
Country
United States
the kernel for ctrnand (where you sourced.) could have been ported or exchanged but the task would have been to fatal. Even if the 3ds supported multiple bootmodules (which has not been regarded as a good way to hack a 3ds.) That's why when 3dslauncher launched. People had skepticism of using it because they thought there would be no use to it. Other than playing older archived games for homebrew entertainment.


This could be of help to. But when the homebrew scene first kicked in. Homebrew applications would work or not at all because of limitations of ram processing speed compared to the wii. It was considered very stabe up to July of 2014. And the 3ds launched in 2011. Making that huge leap for a foundation or foundating discovery... Is a lot especially with exploit chains.

We know for a crucial fact that the 3ds can be used with other programs without any permissions. But we also know that the 3ds does not have depected or designed ways to actually run custom software. No matter what even if it was linked to the wii and ds somehow with full written write permissions. Being more vague...




Why would a 3ds not boot into arm11 or arm9. Before the actual ""seasoned exploit of whatever kind."" Is ran or released. Even with homebrew kernel foundation active.
 
Last edited by petethepug,

SCOTT0852

shiny rubber creature
Member
Joined
Jan 20, 2018
Messages
1,140
Trophies
0
Location
The Moon
XP
1,133
Country
United States
Arm9 used a method of communicating with the DSi Profile
That's not A9LH, that's MSET.
Boot9 in 2011 used intergrated checks to make sure a CFW was running in the background
How would a cfw be running in the background when the system has just powered on? It checks for one on the SD card and then loads it.
CIA Files were either encrypted or de-encrypted to run background software.
CIAs don't run background stuff though??? (aside from the 2 mentioned later that do, but those don't involve decrypting anything)
So that no matter what the 3ds would always launch with select advertisements or various sorts of information.
I've never seen a 3DS boot into ads...
Even if a game was in cartridge format on a non-hacked brand new never ran before homebrew stock 3ds on a later or older version of the console... The same with Wii U and Switch.
I can't tell what this part is trying to say. Using a legit cart on a brand new 3DS installs adware?
Anyone can make their own custom FIRM loader or strap if they wanted to. Many users have done it.
3 isn't exactly many... (SciresM's B9S, derrekr's Fastboot3DS, and d0k3's GodMode9, I suppose if you really wanted you could count Luma as a bootloader since they added that so people don't install luma to f0f1 and brick)
Two games that were in development. SSB3DS and Smash Wii U did this explicity to make character models or creations without use of sketchup or 3dsmax. With no mistakes once so ever. So everything can be loaded into and booted perfectly.
I really doubt that ninty made their own completely bug free 3D modelling software specifically for 2 games...
arm9 and arm11 kernals that are found in some retail games actually.
Are you sure about that? The GBA doesn't have an arm11, why would they put a chip in every single cart (only for a single game, I know) that's more powerful than the chips in the console itself?
Cannot change what's running in the background or software of the application running. Unless its already been encrypted.unencrypted somehow or someway.
Ever heard of BootNTR (not to be confused with NTRBoot) or ButtonSwap3DS? Those change what's running in the background.
To run explicit or unappropriate/suitable content if they were to just use something like that battery life or the clock time
...I'm sorry, are you saying that someone would abuse a bug in the battery icon??? What bugs could there even be? How would you exploit them? Why would you use them exclusively for inappropriate things? This makes literally no sense!
But GodMode9 its self completely reverses engineer's the questions
GM9 didn't reverse it though? That's what Sighax is for...
uma is capable of running graphed. .cia format and .3ds format
1) I've never had to make any sort of graph for my CIAs.
2) Luma can't even load .3ds files.
But it comes with software limitations for right now.
What limits? I have no clue what you're talking about. The entire point of cfw is that it removes limits, why would some be left in?
 

petethepug

PUG
OP
Member
Joined
May 2, 2016
Messages
1,504
Trophies
0
Age
23
Location
COMPUTER
XP
1,261
Country
United States
involve decrypting anything)
At the time of the 3ds's release. The only way to run applications through the system background was to install a clock on the 3ds (a clock that would spontaneously regenerate.) Use SpotPass, or StreetPass. But little applications actually used Streetpass because of its complex manner. So it was left abandoned by many. Who may enjoy online social interaction between Miiverse and Streetpass (exclusive to the 3ds console btw.) In order for these services to work they either have to be ran by a server or a service... Or a legitmate protocall defined function that recall's the amount of hours or days passed in memory or ram.

The technics of that are dis-closed and not discussed. I don't know any about it.

I've never seen a 3DS boot into ads...
That's exactly my point.


I can't tell what this part is trying to say. Using a legit cart on a brand new 3DS installs adware?
Some post-factories that make the 3ds based cartridges either have security checks or they don't. Only a few games like the Legend of Zelda Majora's Mask and Occariana of time have had not been checked by select deposits. But those "built in" factories are probably not of service anymore. In the North of America region where I live atleast. Very few of those "select factories" have lived near North America. Let alone California. But I swear few exisit.




I can't show any proof. But if you ask someone at a super market where milk might come from. They might have an answer basically.
If you buy a game of Splatoon it might be a CD porn DVD or it might be Splatoon except slightly or ever so modified from its original state. If copies are legally distributed to factories across the world digitally. OR physically. Blu-Ray had this problem on the Sony PS3. But not until Post 2011.


2 games...
You would be surprised just how many actually use custom architecture. Just to run games at a full 60fps or 30 frames a second like Mario Kart 8. Which isn't based in any renderation that exisits as far as I know.

Ever heard of BootNTR (not to be confused with NTRBoot) or ButtonSwap3DS? Those change what's running in the background.
Those. Are not directly ran on the console. Or the software. However.

exclusively for inappropriate things? This makes literally no sense!
Advertisement, stock campaign, or money. Because everytime a 3ds sends data out to the web or receives. It just acts like a regular eshop CDN server with cutback latency and permissions. It means someone who installs a game might just find out other companies are actually making money or profit off of their games. Which is not good or bad. But its horrific if you calculate the average of how much users use. Every day.

That's what Sighax is for...
Sighax (not sure if your talking about the new one or the old one.) Was used as an exploit chain with the 3ds websites or with luma to incorporate software on the system. By using bits and lines of code to send or receive information out or on the web. And that data is written permantly to the 3ds web browser. Even if you delete it. Because its built into NAND.FIRM
If your talking about the sighax exploit for boot9strap (also 3ds sound.) The same thing. Except it calls sound to the console to display a decrypted image. Which then takes you to homebrew launcher exploit. Using tools that probably do not even exist yet beyond my ability to solve math problems or equations.

GM9 didn't reverse it though?
A lot of users are not aware. But the console ""break-limit"" is when the console is using to many ram priorties so it just crashes. So to change that FIRM Modules (FIRM is the Firmware used for .3dsfirm or .bin by the way.) Are ran externally instead of internally on the software thanks to RXTools. Which became obsoleted quickly after it was released to the public.

GM9 reversed the firm modules in a original exploit called "smhpons" for smash bros. To hack the system. So that way when it was first launched externally and internally. The consoles life cycle would always be saved. Even if a brick or a crashed occurred of any time. Or a power outage not found in GM9.


1) I've never had to make any sort of graph for my CIAs.
That's because you don't have to. It does it for you. Its became an outdated obsoleted feature in the 3ds library because the only reason NOT to include an XML graph for a 3ds or stock values. Is to manually use, take, and manipulate the software so it can be used or played on a server or server side service. Kind of like Snicker Stream homebrew. Except with Snicker Stream. The website is loaded on a 3ds capture card. Not the 3ds its self. Even though its already booted.

Luma can't even load .3ds files.
Luma or any stock or cfw (with written permissions if gained or written somehow.) Can

* Turn a .XML into a .CIA by manipulating software
* Turn a .CIA into a .XML into an unplayable format
* Turn a .3ds into a .cia by having godmode9 change or convert the rom by its self.
* Have a .cia changed and unpacked into a unuseable .3ds (for flashcarts.) To use outdates or malicious software. If I made a chart of everything the 3ds can be used and converted for it might become obsoleted so quick that their would be no reason to play 3ds games or gamecarts. At all.




.3ds --> .cia displays a screen or retina image that cannot be freely distorted by a retina camera or a image using stock CFW or custom fw. Wherever it was downloaded from.

.cia --> .3ds displays a screened image but does not have a retina image similar to the .cia format. Only this time the .3ds format can be debugged or debunked by developers. If they choose to, to play test their exploit or chainloader/game module.

.3ds --> xml displays no image but provides debunked written info on how a game openly performs. Like rendered software for example.

.cia --> xml displays a open black and white image to test screen brightness. There is no use beyond this except testing the consoles backlight. Which is commonly found in 3ds homebrew software.

xml --> 3ds graphs a chart of all written information.

and xml --> cia graphs a chart based off of unwritten debugged information. But its not used or closure for other tools or utillites like Godmode9 for example. (A cia xml cannot be opened in godmode9 but it could to debug the software for a rom hack if someone wanted to.)



why would some be left in?
Because there's always more to be found.
 

petethepug

PUG
OP
Member
Joined
May 2, 2016
Messages
1,504
Trophies
0
Age
23
Location
COMPUTER
XP
1,261
Country
United States
The GBA doesn't have an arm11, why would they put a chip in every single cart (only for a single game, I know) that's more powerful than the chips in the console itself?

The entire point of cfw is that it removes limits
I forgot to mention this to. The gba does not have an arm11 processor. Yes. But the hacked or non hacked software flashcarts. Use them for games like Need for speed most wanted on the gba or frogger's adventure to not cause screen tearing or frame lag.

This was before 3ds max I think to. Or before when it was considered affordable or similar tools. So when some games were being developed. Every and each company had their own intergrated software for how a game runs or launches. Kind of like when Fire Emblem launched on the 3ds for the first time. It was amazing and more stealer than what Nintendo had even planned.




So the arm processors do exisit on the gba or another similar device. But they are or they are never used.
The fw does remove limits. But while it does the 3ds does not actually call or redefine. I'm just going to call it moduling. They do not module the games in anyway they are just purely aesthic. Which is why when the PlayStation 2 and Gamecube were made the same but utilized differently. More PS2 Units sold over the Gamecube because of its dynamic lighting and functionality with games. (More difficult to develop for then just simply opening a game. And then playing it on DVD-R or r format.)



The differences with the lowercase r and high r have to do with memory usage or leakage. If a game uses a lot of compression its DVD-R and if it doesn't its all dvd-r because all textures are streamlined smoothly. The only difference is the speed when it was first made or created.
 

SCOTT0852

shiny rubber creature
Member
Joined
Jan 20, 2018
Messages
1,140
Trophies
0
Location
The Moon
XP
1,133
Country
United States
it might be Splatoon except slightly or ever so modified from its original state.
You can't do that, 1) the game has been signed with a key that only Ninty has, 2) the wii u discs are a proprietary format so you can't just get ahold of blank ones that easily, 3) they're not rewritable so you can't even rewrite some shovelware disc into modified splatoon
You would be surprised just how many actually use custom architecture.
I know most games have custom engines, but that's not what you mentioned before. "SSB3DS and Smash Wii U did this explicity to make character models or creations without use of sketchup or 3dsmax." implies that Ninty made an entire 3D modelling program, not a game engine.
Those. Are not directly ran on the console.
Then where are they run? I'm not talking about InputRedirection or NTR's streaming, just 2 apps that are both CIAs installed on the console that run code in the background. They certainly aren't run on the SD card...
NAND.FIRM
...look, I'm not even going to explain why this is wrong. There's only FIRM0, FIRM1, NATIVE_FIRM, AGB_FIRM, and TWL_FIRM, not NAND.FIRM.
the sighax exploit for boot9strap (also 3ds sound.)
Sighax for B9S? But B9S is sighax...
Also, sighax has nothing to do with soundhax. Just because you can load stuff like udsploit doesn't make them the same.
(FIRM is the Firmware used for .3dsfirm or .bin
I have never seen a .3dsfirm and .firms are definitely not the same as A9LH .bins.
GM9 reversed the firm modules in a original exploit called "smhpons" for smash bros.
...those have literally nothing to do with each other...
GM9 is a file manager, scripting API, bootloader, and a few more things, it can't make an exploit. I can't find anything about "smhpons" for smash either, just SmashBrosHax. SBH wasn't even created by GM9's creator, d0k3.
.3ds --> .cia displays a screen or retina image that cannot be freely distorted by a retina camera or a image using stock CFW or custom fw. Wherever it was downloaded from.

.cia --> .3ds displays a screened image but does not have a retina image similar to the .cia format. Only this time the .3ds format can be debugged or debunked by developers. If they choose to, to play test their exploit or chainloader/game module.

.3ds --> xml displays no image but provides debunked written info on how a game openly performs. Like rendered software for example.

.cia --> xml displays a open black and white image to test screen brightness. There is no use beyond this except testing the consoles backlight. Which is commonly found in 3ds homebrew software.

xml --> 3ds graphs a chart of all written information.

and xml --> cia graphs a chart based off of unwritten debugged information. But its not used or closure for other tools or utillites like Godmode9 for example. (A cia xml cannot be opened in godmode9 but it could to debug the software for a rom hack if someone wanted to.)
This section makes no sense. Why would a .3DS be debuggable but not a .CIA? Last I checked, Luma could debug either. Also, what's a "retina image" or "screened image"? Why would the XML be a screen tester?
 

petethepug

PUG
OP
Member
Joined
May 2, 2016
Messages
1,504
Trophies
0
Age
23
Location
COMPUTER
XP
1,261
Country
United States
When I said explicitly before. I meant how it was done. When the time came for the 3ds it was either cutback textures, reduce or hide resolution with low poly, or take things in or out of the game. When you compare both of the smash games to each others size's it is almost amazing to see why smash bros is so much smaller than the wii u's cartridge size at the time. That's why I did say. Explicitly. Because its always verbatim on how a game was made or disclosed once it was released.

FIRM0, FIRM1, NATIVE_FIRM, AGB_FIRM, and TWL_FIRM
All those firm module are linked with each other.
.FIRM uses the NAND of the 3ds to actually run the software it needs. But Godmode9 always loads FIRM0 and FIRM1, AGB_FIRM is a different firm and TWL_Firm are used for DSi ware or software. (which runs DS Flashcarts and modes.)




What i'm trying to explain is that the custom format for the file .FIRM it relies on something.

definitely not the same as A9LH .bins.
No the FW has been dumped by developers and its a key feature. (I think.) in godmode9 or some PC application we all forgot about. Which is why I just gave out some file formats I do know of. But did not explain. I will leave them up to you if they are true or not.

SmashBrosHax
That's the one your looking for. If you want to go anywhere with luma's release or cakecfw…



This section makes no sense.
The 3ds has some left over software used in the game(s) or the console. Like the actual start/select buttons that have functionality. But they don't serve a purpose. For debugging necessarly.




That's why when you hold start and select it always goes somewhere.
Kind of like when you boot a computer or tablet. It always turns on but the actual code used for turning it on. Doesn't turn on until a few seconds later.




The start and select buttons are clearly labeled start and select on the buttons. But they do not serve a purpose?
It makes me wonder how a computer turns on at first when it loads a splash screen. !
 

SCOTT0852

shiny rubber creature
Member
Joined
Jan 20, 2018
Messages
1,140
Trophies
0
Location
The Moon
XP
1,133
Country
United States
But Godmode9 always loads FIRM0 and FIRM1
If it did that, then loading GM9 would load the normal 3DS OS, not the GM9 menu.
That's the one your looking for. If you want to go anywhere with luma's release or cakecfw…
What does a single *hax entrypoint have to do with learning how compiled luma works?
The start and select buttons are clearly labeled start and select on the buttons. But they do not serve a purpose?
They do. That purpose is to pause your game or to be another less-used button (like the drop ability button in Kirby, for example). They do literally nothing when you hold them while booting on the stock firmware (aka without luma).
 

petethepug

PUG
OP
Member
Joined
May 2, 2016
Messages
1,504
Trophies
0
Age
23
Location
COMPUTER
XP
1,261
Country
United States
Yeah. I know. The whole idea though is to make sure that the exploit works and its running. And to make sure it is linked or chained to more than one instance. Which is why when a 3ds exploit (of any kind is launched.) its to most popular fail safe to hack the fail safe first. But it always fails. No matter what. Even if the software is run or ranned on intergrated firmware or fedellics of any kind.




Luma works differently by grabbing those exploit chains and making them apart of themselves. (PS Vita has this patched...) The chains of those compiled meassurements or tools is to be able and take those tools and use them for more homebrew or utillites to essintally hack the 3ds. But its considered cheating because luma3ds is not a fail safe entry point like Smash or the one on Web explorer.




Other than that i'm out of ideas. But I know for sure that the LCD screen's on the 3ds can be used to hack the 3ds and make a screen ultra gamma or un-ultra gamma if its not a ips screen at a lower resolution and framerate.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    S @ salazarcosplay: though if it s important to go online for a game I would much rather buy it