Update description for "enable game patching"

This reverts commit 62d51fd99d.

.github/ISSUE_TEMPLATE.md

@@ -1,27 +1,34 @@
 <!--
--- THIS IS NOT A SUPPORT FORUM! For support please go to:
--- Luma3DS GBATemp thread: https://gbatemp.net/threads/luma3ds-noob-proof-3ds-custom-firmware.411110/
+-- THIS IS NOT A SUPPORT FORUM! For support go here:
 -- Nintendo Hacking: https://discord.gg/MjzatM8y
 --
 -- Also check the Wiki (https://github.com/AuroraWright/Luma3DS/wiki) before making an issue.
 --
--- For those with GBA/DSiWare/DS/AGB_FIRM/TWL_FIRM problems: https://3ds.guide/troubleshooting
+-- For GBA/DSiWare/DS/AGB_FIRM/TWL_FIRM problems: https://3ds.guide/troubleshooting
 -- If you're using an emu/redNAND anything related to that must also be installed to sysNAND.
 -- Please make sure to read "Enable game patching" https://github.com/AuroraWright/Luma3DS/wiki/Options-and-usage before posting any issues about the "Enable game patching" option(s).
 --
--- Please fill in the placeholders.
+-- Luma updaters that don't support Boot9Strap/Sighax won't work.
+-- This is due to support for non-B9S/Sighax entrypoints being dropped.
 --
--->
-**System model:** [e.g. 2DS, New 3DS, Old 3DS]
+-- Please fill in the placeholders.-->
+**System model:**
 
-**SysNAND version (+emu/redNAND version if applicable):** [e.g. 11.4.0-37U]
+[e.g. 2DS, New 3DS, Old 3DS]
 
-**Entrypoint (How/what you're using to boot Luma3DS):** [e.g. A9LH]
+**SysNAND version (+emu/redNAND version if applicable):**
+
+[e.g. 11.4.0-37U SysNAND, 11.4.0-37J EmuNAND]
+
+**Entrypoint (How/what you're using to boot Luma3DS):**
+
+[e.g. Boot9Strap/Sighax, etc.]
+
+**Luma3DS version:**
+
+[e.g. 7.1 stable or if using nightly/hourly specify the commit like this https://github.com/AuroraWright/Luma3DS/commit/9570e6cbeca53128433abbf5e3473cb8a07fe69e]
+<!--You can check which version you're on in System Settings. It will be on the bottom right of the top screen.-->
 
-**Luma3DS version:** [e.g. 7.0.5 stable or if using nightly specify the commit like this https://github.com/AuroraWright/Luma3DS/commit/5fe83588eb4b8faafc7773b3739a3d3307160b04]
-<!--
--- You can check which version you're on in the configuration menu. It will be on the top of the screen.
--->
 
 **Luma3DS configuration/options:**
 
@@ -34,22 +41,17 @@ Splash: ( )
 PIN lock: ( )
 
 New 3DS CPU: ( )
-<!--
--- This option is only available for New 3DS/2DS.
--->
-
+<!--This option is only available for New 3DS/2DS.-->
 
 --
 
-Autoboot SysNAND: ( )
+Autoboot EmuNAND: ( )
 
-Use SysNAND FIRM if booting with R: ( )
+Use EmuNAND FIRM if booting with R: ( )
 
 Enable loading external FIRMs and modules: ( )
-<!--
--- Firmware (.bin) files are not required by Luma, or NTR CFW anymore.
--- If you're having issues with this option enabled try deleting them from the luma folder on the root of the SD card and disabling this option.
--->
+<!--Firmware (.bin) files are not required by Luma, or NTR CFW anymore.
+-- If you're having issues with this option enabled try deleting them from the luma folder on the root of the SD card and disabling this option.-->
 
 Use custom path: ( )
 
@@ -59,14 +61,13 @@ Show NAND or user string in System Settings: ( )
 
 Show GBA boot screen in patched AGB_FIRM: ( )
 
-Patch SVC/service/archive/ARM9 access: ( )
+Patch ARM9 access: ( )
 
 Set developer UNITINFO: ( )
 
-Enable exception handlers: ( )
-
 --
 
+
 **Explanation of the issue:**
 
 
@@ -82,6 +83,6 @@ Enable exception handlers: ( )
 
 
 **Dump file:**
-<!-- If the issue leads to a crash you can generate a crash dump by checking the "Enable exception handlers" option.
+<!--If the issue leads to a crash you can generate a crash dump by checking the "Enable exception handlers" option.
 -- The error message will tell you where the dump is.
-Zip the dmp file and drag & drop it below. -->
+-- Zip the dmp file and drag & drop it below.-->

.gitignore

@@ -1,13 +1,16 @@
+.vscode
 out
 build
-loader/build
-injector/build
+arm11/build
+sysmodules/loader/build
+sysmodules/rosalina/build
+chainloader/build
 exceptions/arm9/build
 exceptions/arm11/build
-haxloader/build
 *.bin
-*.3dsx
-*.smdh
+*.firm
 *.o
 *.d
 *.elf
+*.cxi
+.DS_Store

Makefile

@@ -4,32 +4,70 @@ ifeq ($(strip $(DEVKITARM)),)
 $(error "Please set DEVKITARM in your environment. export DEVKITARM=<path to>devkitARM")
 endif
 
+ifneq ($(strip $(shell firmtool -v 2>&1 | grep usage)),)
+$(error "Please install firmtool v1.1 or greater")
+endif
+
 include $(DEVKITARM)/base_tools
 
+UNAME_S := $(shell uname -s)
+ifeq ($(UNAME_S),Darwin)
+	size := stat -f%z
+else
+	size := stat -c%s
+endif
+
 name := Luma3DS
-revision := $(shell git describe --tags --match v[0-9]* --abbrev=8 | sed 's/-[0-9]*-g/-/i')
+revision := $(shell git describe --tags --match v[0-9]* --abbrev=8 | sed 's/-[0-9]*-g/-/')
+version_major := $(shell git describe --tags --match v[0-9]* | cut -c2- | cut -f1 -d- | cut -f1 -d.)
+version_minor := $(shell git describe --tags --match v[0-9]* | cut -c2- | cut -f1 -d- | cut -f2 -d.)
+version_build := $(shell git describe --tags --match v[0-9]* | cut -c2- | cut -f1 -d- | cut -f3 -d.)
 commit := $(shell git rev-parse --short=8 HEAD)
+is_release := 0
+
+ifeq ($(strip $(revision)),)
+	revision := v0.0.0-0
+	version_major := 0
+	version_minor := 0
+	version_build := 0
+endif
+
+ifeq ($(strip $(commit)),)
+	commit := 0
+endif
+
+ifeq ($(strip $(version_build)),)
+	version_build := 0
+endif
+
+ifeq ($(strip $(shell git describe --tags --match v[0-9]* | grep -)),)
+	is_release := 1
+endif
 
 dir_source := source
 dir_patches := patches
-dir_loader := loader
-dir_injector := injector
+dir_arm11 := arm11
+dir_chainloader := chainloader
 dir_exceptions := exceptions
 dir_arm9_exceptions := $(dir_exceptions)/arm9
-dir_arm11_exceptions := $(dir_exceptions)/arm11
+dir_k11_extension := k11_extension
+dir_sysmodules := sysmodules
+dir_loader := $(dir_sysmodules)/loader
+dir_rosalina := $(dir_sysmodules)/rosalina
 dir_build := build
 dir_out := out
 
 ASFLAGS := -mcpu=arm946e-s
 CFLAGS := -Wall -Wextra $(ASFLAGS) -fno-builtin -std=c11 -Wno-main -O2 -flto -ffast-math
-LDFLAGS := -nostartfiles
+LDFLAGS := -nostartfiles -Wl,--nmagic
 
 objects = $(patsubst $(dir_source)/%.s, $(dir_build)/%.o, \
           $(patsubst $(dir_source)/%.c, $(dir_build)/%.o, \
           $(call rwildcard, $(dir_source), *.s *.c)))
 
-bundled = $(dir_build)/reboot.bin.o $(dir_build)/emunand.bin.o $(dir_build)/svcGetCFWInfo.bin.o $(dir_build)/k11modules.bin.o \
-          $(dir_build)/injector.bin.o $(dir_build)/loader.bin.o $(dir_build)/arm9_exceptions.bin.o $(dir_build)/arm11_exceptions.bin.o
+bundled = $(dir_build)/reboot.bin.o $(dir_build)/emunand.bin.o $(dir_build)/chainloader.bin.o $(dir_build)/arm9_exceptions.bin.o
+
+modules = $(dir_build)/loader.cxi $(dir_build)/rosalina.cxi
 
 define bin2o
 	bin2s $< | $(AS) -o $(@)
@@ -46,38 +84,58 @@ firm: $(dir_out)/boot.firm
 
 .PHONY: clean
 clean:
-	@$(MAKE) -C $(dir_loader) clean
+	@$(MAKE) -C $(dir_arm11) clean
+	@$(MAKE) -C $(dir_chainloader) clean
 	@$(MAKE) -C $(dir_arm9_exceptions) clean
-	@$(MAKE) -C $(dir_arm11_exceptions) clean
-	@$(MAKE) -C $(dir_injector) clean
+	@$(MAKE) -C $(dir_k11_extension) clean
+	@$(MAKE) -C $(dir_loader) clean
+	@$(MAKE) -C $(dir_rosalina) clean
 	@rm -rf $(dir_out) $(dir_build)
 
 .PRECIOUS: $(dir_build)/%.bin
 
-.PHONY: $(dir_loader)
+.PHONY: $(dir_arm11)
+.PHONY: $(dir_chainloader)
 .PHONY: $(dir_arm9_exceptions)
-.PHONY: $(dir_arm11_exceptions)
-.PHONY: $(dir_injector)
+.PHONY: $(dir_k11_extension)
+.PHONY: $(dir_loader)
+.PHONY: $(dir_rosalina)
 
 $(dir_out)/$(name)$(revision).7z: all
 	@mkdir -p "$(@D)"
 	@7z a -mx $@ ./$(@D)/* ./$(dir_exceptions)/exception_dump_parser.py
 
-$(dir_out)/boot.firm: $(dir_build)/main.elf
+$(dir_out)/boot.firm: $(dir_build)/modules.bin $(dir_build)/arm11.elf $(dir_build)/main.elf $(dir_build)/k11_extension.bin
 	@mkdir -p "$(@D)"
-	@firmtool build $@ -e 0 -D $^ -C NDMA
+	@firmtool build $@ -D $^ -A 0x18180000 0x18000000 -C XDMA XDMA NDMA XDMA
+
+$(dir_build)/modules.bin: $(modules)
+	@mkdir -p "$(@D)"
+	cat $^ > $@
+
+$(dir_build)/arm11.elf: $(dir_arm11)
+	@mkdir -p "$(@D)"
+	@$(MAKE) -C $<
 
 $(dir_build)/main.elf: $(bundled) $(objects)
 	$(LINK.o) -T linker.ld $(OUTPUT_OPTION) $^
 
-$(dir_build)/%.bin.o: $(dir_build)/%.bin
-	@$(bin2o)
-
-$(dir_build)/injector.bin: $(dir_injector)
+$(dir_build)/k11_extension.bin: $(dir_k11_extension)
 	@mkdir -p "$(@D)"
 	@$(MAKE) -C $<
 
-$(dir_build)/loader.bin: $(dir_loader)
+$(dir_build)/loader.cxi: $(dir_loader)
+	@mkdir -p "$(@D)"
+	@$(MAKE) -C $<
+
+$(dir_build)/rosalina.cxi: $(dir_rosalina)
+	@mkdir -p "$(@D)"
+	@$(MAKE) -C $<
+
+$(dir_build)/%.bin.o: $(dir_build)/%.bin
+	@$(bin2o)
+
+$(dir_build)/chainloader.bin: $(dir_chainloader)
 	@mkdir -p "$(@D)"
 	@$(MAKE) -C $<
 
@@ -85,17 +143,16 @@ $(dir_build)/arm9_exceptions.bin: $(dir_arm9_exceptions)
 	@mkdir -p "$(@D)"
 	@$(MAKE) -C $<
 
-$(dir_build)/arm11_exceptions.bin: $(dir_arm11_exceptions)
-	@mkdir -p "$(@D)"
-	@$(MAKE) -C $<
-
 $(dir_build)/%.bin: $(dir_patches)/%.s
 	@mkdir -p "$(@D)"
 	@armips $<
 
 $(dir_build)/memory.o $(dir_build)/strings.o: CFLAGS += -O3
 $(dir_build)/config.o: CFLAGS += -DCONFIG_TITLE="\"$(name) $(revision) configuration\""
-$(dir_build)/patches.o: CFLAGS += -DREVISION=\"$(revision)\" -DCOMMIT_HASH="0x$(commit)"
+$(dir_build)/patches.o: CFLAGS += -DVERSION_MAJOR="$(version_major)" -DVERSION_MINOR="$(version_minor)"\
+						-DVERSION_BUILD="$(version_build)" -DISRELEASE="$(is_release)" -DCOMMIT_HASH="0x$(commit)"
+$(dir_build)/firm.o: $(dir_build)/modules.bin
+$(dir_build)/firm.o: CFLAGS += -DLUMA_SECTION0_SIZE="$(shell $(size) $(dir_build)/modules.bin)"
 
 $(dir_build)/bundled.h: $(bundled)
 	@$(foreach f, $(bundled),\

README.md

@@ -7,12 +7,14 @@
 It also allows you to run unauthorized ("homebrew") content by removing signature checks.  
 To use it, you will need a console capable of running homebrew software on the ARM9 processor. We recommend [Plailect's guide](https://3ds.guide/) for details on how to get your system ready.
 
+Since Luma3DS v8.0, Luma3DS has its own in-game menu, triggerable by `L+Down+Select` (see the [release notes](https://github.com/AuroraWright/Luma3DS/releases/tag/v8.0)).
+
 ---
 
 ## Compiling
 
-First you need to clone the repository recursively with: `git clone --recursive https://github.com/AuroraWright/Luma3DS.git`  
-To compile, you'll need [armips](https://github.com/Kingcom/armips) and a build of a recent commit of [makerom](https://github.com/profi200/Project_CTR) added to your PATH.  
+First you need to clone the repository with: `git clone https://github.com/AuroraWright/Luma3DS.git`  
+To compile, you'll need [armips](https://github.com/Kingcom/armips) and a build of a recent commit of [makerom](https://github.com/profi200/Project_CTR) added to your PATH. You'll also need to install [firmtool](https://github.com/TuxSH/firmtool), its README contains installation instructions.
 For now, you'll also need to update your [libctru](https://github.com/smealum/ctrulib) install, building from the latest commit.  
 For your convenience, here are [Windows](http://www91.zippyshare.com/v/ePGpjk9r/file.html) and [Linux](https://mega.nz/#!uQ1T1IAD!Q91O0e12LXKiaXh_YjXD3D5m8_W3FuMI-hEa6KVMRDQ) builds of armips (thanks to who compiled them!).  
 Finally just run `make` and everything should work!  

arm11/Makefile

@@ -6,32 +6,29 @@ endif
 
 include $(DEVKITARM)/base_tools
 
-name := arm11_exceptions
+name := $(shell basename $(CURDIR))
 
 dir_source := source
 dir_build := build
-dir_out := ../../$(dir_build)
+dir_out := ../$(dir_build)
 
-ASFLAGS := -mcpu=mpcore -mfpu=vfp
-CFLAGS := -Wall -Wextra -MMD -MP -mthumb $(ASFLAGS) -fno-builtin -std=c11 -Wno-main -O2 -flto -ffast-math
-LDFLAGS := -nostdlib
+ASFLAGS := -mcpu=mpcore
+CFLAGS  := -Wall -Wextra -MMD -MP -marm $(ASFLAGS) -fno-builtin -std=c11 -Wno-main -O2 -flto -ffast-math
+LDFLAGS := -nostartfiles -Wl,--nmagic
 
 objects = $(patsubst $(dir_source)/%.s, $(dir_build)/%.o, \
           $(patsubst $(dir_source)/%.c, $(dir_build)/%.o, \
           $(call rwildcard, $(dir_source), *.s *.c)))
 
 .PHONY: all
-all: $(dir_out)/$(name).bin
+all: $(dir_out)/$(name).elf
 
 .PHONY: clean
 clean:
 	@rm -rf $(dir_build)
 
-$(dir_out)/$(name).bin: $(dir_build)/$(name).elf
-	$(OBJCOPY) -S -O binary $< $@
-
-$(dir_build)/$(name).elf: $(objects)
-	$(CC) $(LDFLAGS) -T linker.ld $(OUTPUT_OPTION) $^
+$(dir_out)/$(name).elf: $(objects)
+	$(LINK.o) -T linker.ld $(OUTPUT_OPTION) $^
 
 $(dir_build)/%.o: $(dir_source)/%.c
 	@mkdir -p "$(@D)"

arm11/linker.ld

@@ -4,11 +4,13 @@ OUTPUT_ARCH(arm)
 ENTRY(_start)
 SECTIONS
 {
-    . = 0x27FFE000;
+    . = 0x1FF80000;
 
     .text   : ALIGN(4) { *(.text.start) *(.text*); . = ALIGN(4); }
     .rodata : ALIGN(4) { *(.rodata*); . = ALIGN(4); }
-    .data   : ALIGN(4) { *(.data*); . = ALIGN(8); *(.bss* COMMON); . = ALIGN(8); }
+    .data   : ALIGN(4) { *(.data*); . = ALIGN(4); }
+    .bss    : ALIGN(8) { __bss_start = .; *(.bss* COMMON); . = ALIGN(8); __bss_end = .; }
 
+    __stack_top__    = 0x1FFFF000;
     . = ALIGN(4);
 }

arm11/source/main.c

@@ -0,0 +1,198 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+/*
+*   Screen init code by dark_samus, bil1s, Normmatt, delebile and others
+*   LCD deinit code by tiniVi
+*/
+
+#include "types.h"
+#include "memory.h"
+
+void prepareForFirmlaunch(void);
+extern u32 prepareForFirmlaunchSize;
+
+extern volatile Arm11Operation operation;
+
+static void initScreens(u32 brightnessLevel, struct fb *fbs)
+{
+    *(vu32 *)0x10141200 = 0x1007F;
+    *(vu32 *)0x10202014 = 0x00000001;
+    *(vu32 *)0x1020200C &= 0xFFFEFFFE;
+    *(vu32 *)0x10202240 = brightnessLevel;
+    *(vu32 *)0x10202A40 = brightnessLevel;
+    *(vu32 *)0x10202244 = 0x1023E;
+    *(vu32 *)0x10202A44 = 0x1023E;
+
+    //Top screen
+    *(vu32 *)0x10400400 = 0x000001c2;
+    *(vu32 *)0x10400404 = 0x000000d1;
+    *(vu32 *)0x10400408 = 0x000001c1;
+    *(vu32 *)0x1040040c = 0x000001c1;
+    *(vu32 *)0x10400410 = 0x00000000;
+    *(vu32 *)0x10400414 = 0x000000cf;
+    *(vu32 *)0x10400418 = 0x000000d1;
+    *(vu32 *)0x1040041c = 0x01c501c1;
+    *(vu32 *)0x10400420 = 0x00010000;
+    *(vu32 *)0x10400424 = 0x0000019d;
+    *(vu32 *)0x10400428 = 0x00000002;
+    *(vu32 *)0x1040042c = 0x00000192;
+    *(vu32 *)0x10400430 = 0x00000192;
+    *(vu32 *)0x10400434 = 0x00000192;
+    *(vu32 *)0x10400438 = 0x00000001;
+    *(vu32 *)0x1040043c = 0x00000002;
+    *(vu32 *)0x10400440 = 0x01960192;
+    *(vu32 *)0x10400444 = 0x00000000;
+    *(vu32 *)0x10400448 = 0x00000000;
+    *(vu32 *)0x1040045C = 0x00f00190;
+    *(vu32 *)0x10400460 = 0x01c100d1;
+    *(vu32 *)0x10400464 = 0x01920002;
+    *(vu32 *)0x10400468 = (u32)fbs[0].top_left;
+    *(vu32 *)0x1040046C = (u32)fbs[1].top_left;
+    *(vu32 *)0x10400470 = 0x80341;
+    *(vu32 *)0x10400474 = 0x00010501;
+    *(vu32 *)0x10400478 = 0;
+    *(vu32 *)0x10400494 = (u32)fbs[0].top_right;
+    *(vu32 *)0x10400498 = (u32)fbs[1].top_right;
+    *(vu32 *)0x10400490 = 0x000002D0;
+    *(vu32 *)0x1040049C = 0x00000000;
+
+    //Disco register
+    for(u32 i = 0; i < 256; i++)
+        *(vu32 *)0x10400484 = 0x10101 * i;
+
+    //Bottom screen
+    *(vu32 *)0x10400500 = 0x000001c2;
+    *(vu32 *)0x10400504 = 0x000000d1;
+    *(vu32 *)0x10400508 = 0x000001c1;
+    *(vu32 *)0x1040050c = 0x000001c1;
+    *(vu32 *)0x10400510 = 0x000000cd;
+    *(vu32 *)0x10400514 = 0x000000cf;
+    *(vu32 *)0x10400518 = 0x000000d1;
+    *(vu32 *)0x1040051c = 0x01c501c1;
+    *(vu32 *)0x10400520 = 0x00010000;
+    *(vu32 *)0x10400524 = 0x0000019d;
+    *(vu32 *)0x10400528 = 0x00000052;
+    *(vu32 *)0x1040052c = 0x00000192;
+    *(vu32 *)0x10400530 = 0x00000192;
+    *(vu32 *)0x10400534 = 0x0000004f;
+    *(vu32 *)0x10400538 = 0x00000050;
+    *(vu32 *)0x1040053c = 0x00000052;
+    *(vu32 *)0x10400540 = 0x01980194;
+    *(vu32 *)0x10400544 = 0x00000000;
+    *(vu32 *)0x10400548 = 0x00000011;
+    *(vu32 *)0x1040055C = 0x00f00140;
+    *(vu32 *)0x10400560 = 0x01c100d1;
+    *(vu32 *)0x10400564 = 0x01920052;
+    *(vu32 *)0x10400568 = (u32)fbs[0].bottom;
+    *(vu32 *)0x1040056C = (u32)fbs[1].bottom;
+    *(vu32 *)0x10400570 = 0x80301;
+    *(vu32 *)0x10400574 = 0x00010501;
+    *(vu32 *)0x10400578 = 0;
+    *(vu32 *)0x10400590 = 0x000002D0;
+    *(vu32 *)0x1040059C = 0x00000000;
+
+    //Disco register
+    for(u32 i = 0; i < 256; i++)
+        *(vu32 *)0x10400584 = 0x10101 * i;
+}
+
+static void clearScreens(struct fb *fb)
+{
+    //Setting up two simultaneous memory fills using the GPU
+
+    vu32 *REGs_PSC0 = (vu32 *)0x10400010,
+         *REGs_PSC1 = (vu32 *)0x10400020;
+
+    REGs_PSC0[0] = (u32)fb->top_left >> 3; //Start address
+    REGs_PSC0[1] = (u32)(fb->top_left + SCREEN_TOP_FBSIZE) >> 3; //End address
+    REGs_PSC0[2] = 0; //Fill value
+    REGs_PSC0[3] = (2 << 8) | 1; //32-bit pattern; start
+
+    REGs_PSC1[0] = (u32)fb->bottom >> 3; //Start address
+    REGs_PSC1[1] = (u32)(fb->bottom + SCREEN_BOTTOM_FBSIZE) >> 3; //End address
+    REGs_PSC1[2] = 0; //Fill value
+    REGs_PSC1[3] = (2 << 8) | 1; //32-bit pattern; start
+
+    while(!((REGs_PSC0[3] & 2) && (REGs_PSC1[3] & 2)));
+}
+
+static void swapFramebuffers(bool isAlternate)
+{
+    u32 isAlternateTmp = isAlternate ? 1 : 0;
+    *(vu32 *)0x10400478 = (*(vu32 *)0x10400478 & 0xFFFFFFFE) | isAlternateTmp;
+    *(vu32 *)0x10400578 = (*(vu32 *)0x10400478 & 0xFFFFFFFE) | isAlternateTmp;
+}
+
+static void updateBrightness(u32 brightnessLevel)
+{
+    //Change brightness
+    *(vu32 *)0x10202240 = brightnessLevel;
+    *(vu32 *)0x10202A40 = brightnessLevel;
+}
+
+static void deinitScreens(void)
+{
+    //Shutdown LCDs
+    *(vu32 *)0x10202A44 = 0;
+    *(vu32 *)0x10202244 = 0;
+    *(vu32 *)0x10202014 = 0;
+}
+
+void main(void)
+{
+    operation = ARM11_READY;
+
+    while(true)
+    {
+        switch(operation)
+        {
+            case ARM11_READY:
+                continue;
+            case INIT_SCREENS:
+                initScreens(*(vu32 *)ARM11_PARAMETERS_ADDRESS, (struct fb *)(ARM11_PARAMETERS_ADDRESS + 4));
+                break;
+            case CLEAR_SCREENS:
+                clearScreens((struct fb *)ARM11_PARAMETERS_ADDRESS);
+                break;
+            case SWAP_FRAMEBUFFERS:
+                swapFramebuffers(*(volatile bool *)ARM11_PARAMETERS_ADDRESS);
+                break;
+            case UPDATE_BRIGHTNESS:
+                updateBrightness(*(vu32 *)ARM11_PARAMETERS_ADDRESS);
+                break; 
+            case DEINIT_SCREENS:
+                deinitScreens();
+                break;
+            case PREPARE_ARM11_FOR_FIRMLAUNCH:
+                memcpy((void *)0x1FFFFC00, (void *)prepareForFirmlaunch, prepareForFirmlaunchSize);
+                *(vu32 *)0x1FFFFFFC = 0;
+                ((void (*)(u32, volatile Arm11Operation *))0x1FFFFC00)(ARM11_READY, &operation);
+        }
+
+        operation = ARM11_READY;
+    }
+}

arm11/source/memory.c

@@ -0,0 +1,56 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+/*
+*   memcpy adapted from https://github.com/mid-kid/CakesForeveryWan/blob/557a8e8605ab3ee173af6497486e8f22c261d0e2/source/memfuncs.c
+*/
+
+#include "memory.h"
+
+void memcpy(void *dest, const void *src, u32 size)
+{
+    u8 *destc = (u8 *)dest;
+    const u8 *srcc = (const u8 *)src;
+
+    for(u32 i = 0; i < size; i++)
+        destc[i] = srcc[i];
+}
+
+void memset(void *dest, u32 filler, u32 size)
+{
+    u8 *destc = (u8 *)dest;
+
+    for(u32 i = 0; i < size; i++)
+        destc[i] = (u8)filler;
+}
+
+void memset32(void *dest, u32 filler, u32 size)
+{
+    u32 *dest32 = (u32 *)dest;
+
+    for(u32 i = 0; i < size / 4; i++)
+        dest32[i] = filler;
+}

arm11/source/memory.h

@@ -0,0 +1,37 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+/*
+*   memcpy adapted from https://github.com/mid-kid/CakesForeveryWan/blob/557a8e8605ab3ee173af6497486e8f22c261d0e2/source/memfuncs.c
+*/
+
+#pragma once
+
+#include "types.h"
+
+void memcpy(void *dest, const void *src, u32 size);
+void memset(void *dest, u32 value, u32 size) __attribute__((used));
+void memset32(void *dest, u32 filler, u32 size);

arm11/source/start.s

@@ -0,0 +1,81 @@
+@   This file is part of Luma3DS
+@   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+@
+@   This program is free software: you can redistribute it and/or modify
+@   it under the terms of the GNU General Public License as published by
+@   the Free Software Foundation, either version 3 of the License, or
+@   (at your option) any later version.
+@
+@   This program is distributed in the hope that it will be useful,
+@   but WITHOUT ANY WARRANTY; without even the implied warranty of
+@   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+@   GNU General Public License for more details.
+@
+@   You should have received a copy of the GNU General Public License
+@   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+@
+@   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+@       * Requiring preservation of specified reasonable legal notices or
+@         author attributions in that material or in the Appropriate Legal
+@         Notices displayed by works containing it.
+@       * Prohibiting misrepresentation of the origin of that material,
+@         or requiring that modified versions of such material be marked in
+@         reasonable ways as different from the original version.
+ 
+.section .text.start
+.align 4
+.global _start
+.type   _start, %function
+_start:
+b start
+
+.global operation
+operation:
+    .word 0
+
+start:
+    @ Disable interrupts and switch to supervisor mode
+    cpsid aif, #0x13
+
+    @ Set the control register to reset default: everything disabled
+    ldr r0, =0x54078
+    mcr p15, 0, r0, c1, c0, 0
+
+    @ Set the auxiliary control register to reset default.
+    @ Enables instruction folding, static branch prediction,
+    @ dynamic branch prediction, and return stack.
+    mov r0, #0xF
+    mcr p15, 0, r0, c1, c0, 1
+
+    @ Invalidate both caches, flush the prefetch buffer then DSB
+    mov r0, #0
+    mcr p15, 0, r0, c7, c5, 4
+    mcr p15, 0, r0, c7, c7, 0
+    mcr p15, 0, r0, c7, c10, 4
+
+    @ Clear BSS
+    ldr r0, =__bss_start
+    mov r1, #0
+    ldr r2, =__bss_end
+    sub r2, r0
+    bl memset32
+
+    ldr sp, =__stack_top__
+    b main
+
+.global prepareForFirmlaunch
+.type   prepareForFirmlaunch, %function
+prepareForFirmlaunch:
+    str r0, [r1]            @ tell ARM9 we're done
+    mov r0, #0x20000000
+
+    _wait_for_core0_entrypoint_loop:
+        ldr r1, [r0, #-4]   @ check if core0's entrypoint is 0
+        cmp r1, #0
+        beq _wait_for_core0_entrypoint_loop
+
+    bx r1                   @ jump to core0's entrypoint
+prepareForFirmlaunchEnd:
+
+.global prepareForFirmlaunchSize
+prepareForFirmlaunchSize: .word prepareForFirmlaunchEnd - prepareForFirmlaunch

arm11/source/types.h

@@ -0,0 +1,64 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include <stdint.h>
+#include <stdbool.h>
+
+//Common data types
+typedef uint8_t u8;
+typedef uint16_t u16;
+typedef uint32_t u32;
+typedef uint64_t u64;
+typedef volatile u8 vu8;
+typedef volatile u16 vu16;
+typedef volatile u32 vu32;
+typedef volatile u64 vu64;
+
+#define SCREEN_TOP_WIDTH     400
+#define SCREEN_BOTTOM_WIDTH  320
+#define SCREEN_HEIGHT        240
+#define SCREEN_TOP_FBSIZE    (3 * SCREEN_TOP_WIDTH * SCREEN_HEIGHT)
+#define SCREEN_BOTTOM_FBSIZE (3 * SCREEN_BOTTOM_WIDTH * SCREEN_HEIGHT)
+#define ARM11_PARAMETERS_ADDRESS  0x1FFFF000
+
+struct fb {
+     u8 *top_left;
+     u8 *top_right;
+     u8 *bottom;
+} __attribute__((packed));
+
+typedef enum
+{
+    INIT_SCREENS = 0,
+    CLEAR_SCREENS,
+    SWAP_FRAMEBUFFERS,
+    UPDATE_BRIGHTNESS,
+    DEINIT_SCREENS,
+    PREPARE_ARM11_FOR_FIRMLAUNCH,
+    ARM11_READY,
+} Arm11Operation;

chainloader/Makefile

@@ -13,8 +13,8 @@ dir_build := build
 dir_out := ../$(dir_build)
 
 ASFLAGS := -mcpu=arm946e-s
-CFLAGS  := -Wall -Wextra -mthumb $(ASFLAGS) -fno-builtin -std=c11 -Wno-main -O2 -flto -ffast-math
-LDFLAGS := -nostdlib
+CFLAGS  := -Wall -Wextra -marm $(ASFLAGS) -fno-builtin -std=c11 -Wno-main -O2 -flto -ffast-math
+LDFLAGS := -nostartfiles -Wl,--nmagic
 
 objects = $(patsubst $(dir_source)/%.s, $(dir_build)/%.o, \
           $(patsubst $(dir_source)/%.c, $(dir_build)/%.o, \

chainloader/linker.ld

@@ -4,11 +4,18 @@ OUTPUT_ARCH(arm)
 ENTRY(_start)
 SECTIONS
 {
-    . = 0;
+    . = 0x01FF9000;
+    
+    __start__ = ABSOLUTE(.);
 
     .text   : ALIGN(4) { *(.text.start) *(.text*); . = ALIGN(4); }
     .rodata : ALIGN(4) { *(.rodata*); . = ALIGN(4); }
     .data   : ALIGN(4) { *(.data*); . = ALIGN(8); *(.bss* COMMON); . = ALIGN(8); }
 
     . = ALIGN(4);
+
+    __end__ = ABSOLUTE(.);
+
+    __stack_top__    = 0x01FFB800;
+    __stack_bottom__ = 0x01FFA800;
 }

chainloader/source/cache.h

@@ -1,6 +1,6 @@
 /*
 *   This file is part of Luma3DS
-*   Copyright (C) 2016 Aurora Wright, TuxSH
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 *
 *   This program is free software: you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
@@ -15,9 +15,13 @@
 *   You should have received a copy of the GNU General Public License
 *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
-*   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-*   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
 *         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
 */
 
 #pragma once

chainloader/source/cache.s

@@ -1,5 +1,5 @@
 @   This file is part of Luma3DS
-@   Copyright (C) 2016 Aurora Wright, TuxSH
+@   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 @
 @   This program is free software: you can redistribute it and/or modify
 @   it under the terms of the GNU General Public License as published by
@@ -14,9 +14,13 @@
 @   You should have received a copy of the GNU General Public License
 @   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 @
-@   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-@   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+@   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+@       * Requiring preservation of specified reasonable legal notices or
+@         author attributions in that material or in the Appropriate Legal
 @         Notices displayed by works containing it.
+@       * Prohibiting misrepresentation of the origin of that material,
+@         or requiring that modified versions of such material be marked in
+@         reasonable ways as different from the original version.
 
 .text
 .arm

chainloader/source/firm.c

@@ -1,6 +1,6 @@
 /*
 *   This file is part of Luma3DS
-*   Copyright (C) 2017 Aurora Wright, TuxSH
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 *
 *   This program is free software: you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
@@ -15,30 +15,28 @@
 *   You should have received a copy of the GNU General Public License
 *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
-*   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-*   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
 *         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
 */
 
 #include "firm.h"
 #include "memory.h"
 #include "cache.h"
 
+void disableMpuAndJumpToEntrypoints(int argc, char **argv, void *arm11Entry, void *arm9Entry);
+
 void launchFirm(Firm *firm, int argc, char **argv)
 {
-
     //Copy FIRM sections to respective memory locations
-    for(u32 sectionNum = 0; sectionNum < 4 && firm->section[sectionNum].size != 0; sectionNum++)
+    for(u32 sectionNum = 0; sectionNum < 4; sectionNum++)
         memcpy(firm->section[sectionNum].address, (u8 *)firm + firm->section[sectionNum].offset, firm->section[sectionNum].size);
 
-    //Set ARM11 entrypoint
-    *(vu32 *)0x1FFFFFFC = (u32)firm->arm11Entry;
-
-    //Ensure that all memory transfers have completed and that the caches have been flushed
-    flushCaches();
-
-    //Jump to ARM9 entrypoint. Also give it additional arguments it can dismiss
-    ((void (*)(int, char**, u32))firm->arm9Entry)(argc, argv, 0x0000BEEF);
+    disableMpuAndJumpToEntrypoints(argc, argv, firm->arm9Entry, firm->arm11Entry);
 
     __builtin_unreachable();
 }

chainloader/source/firm.h

@@ -1,6 +1,6 @@
 /*
 *   This file is part of Luma3DS
-*   Copyright (C) 2017 Aurora Wright, TuxSH
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 *
 *   This program is free software: you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
@@ -15,9 +15,13 @@
 *   You should have received a copy of the GNU General Public License
 *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
-*   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-*   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
 *         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
 */
 
 #pragma once

chainloader/source/main.c

@@ -0,0 +1,58 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "memory.h"
+#include "cache.h"
+#include "firm.h"
+
+void main(int argc, char **argv, Firm *firm)
+{
+    char *argvPassed[2],
+         absPath[24 + 255];
+    struct fb fbs[2];
+
+    if(argc > 0)
+    {
+        u32 i;
+        for(i = 0; i < sizeof(absPath) - 1 && argv[0][i] != 0; i++)
+            absPath[i] = argv[0][i];
+        absPath[i] = 0;
+
+        argvPassed[0] = (char *)absPath;
+    }
+
+    if(argc == 2)
+    {
+        struct fb *fbsrc = (struct fb *)argv[1];
+
+        fbs[0] = fbsrc[0];
+        fbs[1] = fbsrc[1];
+
+        argvPassed[1] = (char *)&fbs;
+    }
+
+    launchFirm(firm, argc, argvPassed);
+}

chainloader/source/memory.c

@@ -1,6 +1,6 @@
 /*
 *   This file is part of Luma3DS
-*   Copyright (C) 2016 Aurora Wright, TuxSH
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 *
 *   This program is free software: you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
@@ -15,9 +15,13 @@
 *   You should have received a copy of the GNU General Public License
 *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
-*   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-*   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
 *         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
 */
 
 /*

chainloader/source/memory.h

@@ -1,6 +1,6 @@
 /*
 *   This file is part of Luma3DS
-*   Copyright (C) 2016 Aurora Wright, TuxSH
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 *
 *   This program is free software: you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
@@ -15,9 +15,13 @@
 *   You should have received a copy of the GNU General Public License
 *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
-*   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-*   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
 *         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
 */
 
 /*

chainloader/source/start.s

@@ -0,0 +1,60 @@
+@   This file is part of Luma3DS
+@   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+@
+@   This program is free software: you can redistribute it and/or modify
+@   it under the terms of the GNU General Public License as published by
+@   the Free Software Foundation, either version 3 of the License, or
+@   (at your option) any later version.
+@
+@   This program is distributed in the hope that it will be useful,
+@   but WITHOUT ANY WARRANTY; without even the implied warranty of
+@   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+@   GNU General Public License for more details.
+@
+@   You should have received a copy of the GNU General Public License
+@   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+@
+@   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+@       * Requiring preservation of specified reasonable legal notices or
+@         author attributions in that material or in the Appropriate Legal
+@         Notices displayed by works containing it.
+@       * Prohibiting misrepresentation of the origin of that material,
+@         or requiring that modified versions of such material be marked in
+@         reasonable ways as different from the original version.
+.arm
+
+.section .text.start
+.align 4
+.global _start
+_start:
+    ldr sp, =__stack_top__
+    b main
+
+.text
+.balign 4
+.global disableMpuAndJumpToEntrypoints
+.type   disableMpuAndJumpToEntrypoints, %function
+disableMpuAndJumpToEntrypoints:
+    mov r4, r0
+    mov r5, r1
+    mov r6, r2
+    mov r7, r3
+
+    bl flushCaches
+
+    @ Disable caches / MPU
+    mrc p15, 0, r0, c1, c0, 0  @ read control register
+    bic r0, #(1<<12)           @ - instruction cache disable
+    bic r0, #(1<<2)            @ - data cache disable
+    bic r0, #(1<<0)            @ - MPU disable
+    mcr p15, 0, r0, c1, c0, 0  @ write control register
+
+    @ Set the ARM11 entrypoint
+    mov r0, #0x20000000
+    str r7, [r0, #-4]
+
+    @ Jump to the ARM9 entrypoint
+    mov r0, r4
+    mov r1, r5
+    ldr r2, =0x2BEEF
+    bx r6

chainloader/source/types.h

@@ -1,6 +1,6 @@
 /*
 *   This file is part of Luma3DS
-*   Copyright (C) 2016 Aurora Wright, TuxSH
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 *
 *   This program is free software: you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
@@ -15,9 +15,13 @@
 *   You should have received a copy of the GNU General Public License
 *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
-*   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-*   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
 *         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
 */
 
 #pragma once
@@ -33,3 +37,9 @@ typedef volatile u8 vu8;
 typedef volatile u16 vu16;
 typedef volatile u32 vu32;
 typedef volatile u64 vu64;
+
+struct fb {
+     u8 *top_left;
+     u8 *top_right;
+     u8 *bottom;
+}  __attribute__((packed));

exceptions/arm11/source/handlers.s

@@ -1,151 +0,0 @@
-@   This file is part of Luma3DS
-@   Copyright (C) 2016 Aurora Wright, TuxSH
-@
-@   This program is free software: you can redistribute it and/or modify
-@   it under the terms of the GNU General Public License as published by
-@   the Free Software Foundation, either version 3 of the License, or
-@   (at your option) any later version.
-@
-@   This program is distributed in the hope that it will be useful,
-@   but WITHOUT ANY WARRANTY; without even the implied warranty of
-@   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-@   GNU General Public License for more details.
-@
-@   You should have received a copy of the GNU General Public License
-@   along with this program.  If not, see <http://www.gnu.org/licenses/>.
-@
-@   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-@   reasonable legal notices or author attributions in that material or in the Appropriate Legal
-@   Notices displayed by works containing it.
-
-.macro GEN_HANDLER name
-    .global \name
-    .type   \name, %function
-    \name:
-        ldr sp, =#0xffff3000
-        stmfd sp!, {r0-r7}
-        mov r1, #\@         @ macro expansion counter
-        b _commonHandler
-
-    .size   \name, . - \name
-.endm
-
-.text
-.arm
-.align 4
-
-.global _commonHandler
-.type   _commonHandler, %function
-_commonHandler:
-    clrex
-    cpsid aif
-    mrs r2, spsr
-    mov r6, sp
-    mrs r3, cpsr
-
-    tst r2, #0x20
-    bne noFPUInitNorSvcBreak
-    sub r0, lr, #4
-    stmfd sp!, {lr}
-    bl cannotAccessVA
-    ldmfd sp!, {lr}
-    cmp r0, #0
-    bne noFPUInitNorSvcBreak
-    ldr r4, [lr, #-4]
-    cmp r1, #1
-    bne noFPUInit
-
-    lsl r4, #4
-    sub r4, #0xc0000000
-    cmp r4, #0x30000000
-    bcs noFPUInitNorSvcBreak
-    fmrx r0, fpexc
-    tst r0, #0x40000000
-    bne noFPUInitNorSvcBreak
-
-    sub lr, #4
-    srsfd sp!, #0x13
-    ldmfd sp!, {r0-r7}          @ restore context
-    cps #0x13                   @ FPU init
-    stmfd sp, {r0-r3, r11-lr}^
-    sub sp, #0x20
-    bl .                        @ will be replaced
-    ldmfd sp, {r0-r3, r11-lr}^
-    add sp, #0x20
-    rfefd sp!
-
-    noFPUInit:
-    cmp r1, #2
-    bne noFPUInitNorSvcBreak
-    ldr r5, =#0xe12fff7f
-    cmp r4, r5
-    bne noFPUInitNorSvcBreak
-    cps #0x13                   @ switch to supervisor mode
-    cmp r10, #0
-    addne sp, #0x28
-    ldmfd sp, {r8-r11}^         @ implementation details of the official svc handler
-    ldr r2, [sp, #0x1c]         
-    ldr r4, [sp, #0x18]
-    msr cpsr_c, r3              @ restore processor mode
-    tst r2, #0x20
-    addne lr, r4, #2            @ adjust address for later
-    moveq lr, r4
-
-    noFPUInitNorSvcBreak:
-    ands r4, r2, #0xf       @ get the mode that triggered the exception
-    moveq r4, #0xf          @ usr => sys
-    bic r5, r3, #0xf
-    orr r5, r4
-    msr cpsr_c, r5          @ change processor mode
-    stmfd r6!, {r8-lr}
-    msr cpsr_c, r3          @ restore processor mode
-    mov sp, r6
-
-    stmfd sp!, {r2,lr}
-
-    mrc p15,0,r4,c5,c0,0    @ dfsr
-    mrc p15,0,r5,c5,c0,1    @ ifsr
-    mrc p15,0,r6,c6,c0,0    @ far
-    fmrx r7, fpexc
-    fmrx r8, fpinst
-    fmrx r9, fpinst2
-
-    stmfd sp!, {r4-r9}      @ it's a bit of a mess, but we will fix that later
-                            @ order of saved regs now: dfsr, ifsr, far, fpexc, fpinst, fpinst2, cpsr, pc + (2/4/8), r8-r14, r0-r7
-
-    bic r3, #(1<<31)
-    fmxr fpexc, r3          @ clear the VFP11 exception flag (if it's set)
-
-    mov r0, sp
-    mrc p15,0,r2,c0,c0,5    @ CPU ID register
-
-    b mainHandler
-
-GEN_HANDLER FIQHandler
-GEN_HANDLER undefinedInstructionHandler
-GEN_HANDLER prefetchAbortHandler
-GEN_HANDLER dataAbortHandler
-
-.global mcuReboot
-.type   mcuReboot, %function
-mcuReboot:
-    b .                     @ will be replaced
-
-.global cleanInvalidateDCacheAndDMB
-.type   cleanInvalidateDCacheAndDMB, %function
-cleanInvalidateDCacheAndDMB:
-    mov r0, #0
-    mcr p15,0,r0,c7,c14,0   @ Clean and Invalidate Entire Data Cache
-    mcr p15,0,r0,c7,c10,4   @ Drain Memory Barrier
-    bx lr
-
-.global cannotAccessVA
-.type   cannotAccessVA, %function
-cannotAccessVA:
-    @ Thanks yellows8 for the hint 
-    lsr r0, #12
-    lsl r0, #12
-    mcr p15,0,r0,c7,c8,0    @ VA to PA translation with privileged read permission check
-    mrc p15,0,r0,c7,c4,0    @ read PA register
-    and r0, #1              @ failure bit
-    bx lr

exceptions/arm11/source/mainHandler.c

@@ -1,109 +0,0 @@
-/*
-*   This file is part of Luma3DS
-*   Copyright (C) 2016 Aurora Wright, TuxSH
-*
-*   This program is free software: you can redistribute it and/or modify
-*   it under the terms of the GNU General Public License as published by
-*   the Free Software Foundation, either version 3 of the License, or
-*   (at your option) any later version.
-*
-*   This program is distributed in the hope that it will be useful,
-*   but WITHOUT ANY WARRANTY; without even the implied warranty of
-*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-*   GNU General Public License for more details.
-*
-*   You should have received a copy of the GNU General Public License
-*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
-*
-*   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-*   reasonable legal notices or author attributions in that material or in the Appropriate Legal
-*   Notices displayed by works containing it.
-*/
-
-#include "handlers.h"
-
-#define REG_DUMP_SIZE   4 * 23
-#define CODE_DUMP_SIZE  48
-
-#define CODESET_OFFSET  0xBEEFBEEF
-
-static u32 __attribute__((noinline)) copyMemory(void *dst, const void *src, u32 size, u32 alignment)
-{
-    u8 *out = (u8 *)dst;
-    const u8 *in = (const u8 *)src;
-
-    if(((u32)src & (alignment - 1)) != 0 || cannotAccessVA(src) || (size != 0 && cannotAccessVA((u8 *)src + size - 1)))
-        return 0;
-
-    for(u32 i = 0; i < size; i++)
-        *out++ = *in++;
-
-    return size;
-}
-
-void __attribute__((noreturn)) mainHandler(u32 *regs, u32 type, u32 cpuId)
-{
-    ExceptionDumpHeader dumpHeader;
-
-    u32 registerDump[REG_DUMP_SIZE / 4];
-    u8 codeDump[CODE_DUMP_SIZE];
-    u8 *finalBuffer = cannotAccessVA((void *)0xE5000000) ? (u8 *)0xF5000000 : (u8 *)0xE5000000; //VA for 0x25000000
-    u8 *final = finalBuffer;
-
-    while(*(vu32 *)final == 0xDEADC0DE && *((vu32 *)final + 1) == 0xDEADCAFE);
-
-    dumpHeader.magic[0] = 0xDEADC0DE;
-    dumpHeader.magic[1] = 0xDEADCAFE;
-    dumpHeader.versionMajor = 1;
-    dumpHeader.versionMinor = 2;
-
-    dumpHeader.processor = 11;
-    dumpHeader.core = cpuId & 0xF;
-    dumpHeader.type = type;
-
-    dumpHeader.registerDumpSize = REG_DUMP_SIZE;
-    dumpHeader.codeDumpSize = CODE_DUMP_SIZE;
-
-    //Dump registers
-    //Current order of saved regs: dfsr, ifsr, far, fpexc, fpinst, fpinst2, cpsr, pc, r8-r12, sp, lr, r0-r7
-    u32 cpsr = regs[6];
-    u32 pc   = regs[7] - (type < 3 ? (((cpsr & 0x20) != 0 && type == 1) ? 2 : 4) : 0);
-
-    registerDump[15] = pc;
-    registerDump[16] = cpsr;
-    for(u32 i = 0; i < 6; i++) registerDump[17 + i] = regs[i];
-    for(u32 i = 0; i < 7; i++) registerDump[8 + i]  = regs[8 + i];
-    for(u32 i = 0; i < 8; i++) registerDump[i]      = regs[15 + i];
-
-    //Dump code
-    u8 *instr = (u8 *)pc + ((cpsr & 0x20) ? 2 : 4) - dumpHeader.codeDumpSize; //Doesn't work well on 32-bit Thumb instructions, but it isn't much of a problem
-    dumpHeader.codeDumpSize = copyMemory(codeDump, instr, dumpHeader.codeDumpSize, ((cpsr & 0x20) != 0) ? 2 : 4);
-
-    //Copy register dump and code dump
-    final = (u8 *)(finalBuffer + sizeof(ExceptionDumpHeader));
-    final += copyMemory(final, registerDump, dumpHeader.registerDumpSize, 1);
-    final += copyMemory(final, codeDump, dumpHeader.codeDumpSize, 1);
-
-    //Dump stack in place
-    dumpHeader.stackDumpSize = copyMemory(final, (const void *)registerDump[13], 0x1000 - (registerDump[13] & 0xFFF), 1);
-    final += dumpHeader.stackDumpSize;
-
-    if(!cannotAccessVA((void *)0xFFFF9004))
-    {
-        vu64 *additionalData = (vu64 *)final;
-        dumpHeader.additionalDataSize = 16;
-        vu8 *currentKCodeSet = *(vu8 **)(*(vu8 **)0xFFFF9004 + CODESET_OFFSET); //currentKProcess + CodeSet
-
-        additionalData[0] = *(vu64 *)(currentKCodeSet + 0x50); //Process name
-        additionalData[1] = *(vu64 *)(currentKCodeSet + 0x5C); //Title ID
-    }
-    else dumpHeader.additionalDataSize = 0;
-
-    dumpHeader.totalSize = sizeof(ExceptionDumpHeader) + dumpHeader.registerDumpSize + dumpHeader.codeDumpSize + dumpHeader.stackDumpSize + dumpHeader.additionalDataSize;
-
-    //Copy header (actually optimized by the compiler)
-    *(ExceptionDumpHeader *)finalBuffer = dumpHeader;
-
-    cleanInvalidateDCacheAndDMB();
-    mcuReboot(); //Also contains DCache-cleaning code
-}

exceptions/arm11/source/start.s

@@ -1,31 +0,0 @@
-@   This file is part of Luma3DS
-@   Copyright (C) 2016 Aurora Wright, TuxSH
-@
-@   This program is free software: you can redistribute it and/or modify
-@   it under the terms of the GNU General Public License as published by
-@   the Free Software Foundation, either version 3 of the License, or
-@   (at your option) any later version.
-@
-@   This program is distributed in the hope that it will be useful,
-@   but WITHOUT ANY WARRANTY; without even the implied warranty of
-@   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-@   GNU General Public License for more details.
-@
-@   You should have received a copy of the GNU General Public License
-@   along with this program.  If not, see <http://www.gnu.org/licenses/>.
-@
-@   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-@   reasonable legal notices or author attributions in that material or in the Appropriate Legal
-@   Notices displayed by works containing it.
-
-.section .text.start
-.align 4
-.global _start
-_start:
-    add pc, r0, #(handlers - .) @ Dummy instruction to prevent compiler optimizations
-
-handlers:
-    .word FIQHandler
-    .word undefinedInstructionHandler
-    .word prefetchAbortHandler
-    .word dataAbortHandler

exceptions/arm9/source/handlers.h

@@ -1,6 +1,6 @@
 /*
 *   This file is part of Luma3DS
-*   Copyright (C) 2016 Aurora Wright, TuxSH
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 *
 *   This program is free software: you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
@@ -15,9 +15,13 @@
 *   You should have received a copy of the GNU General Public License
 *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
-*   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-*   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
 *         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
 */
 
 #pragma once

exceptions/arm9/source/handlers.s

@@ -1,5 +1,5 @@
 @   This file is part of Luma3DS
-@   Copyright (C) 2016 Aurora Wright, TuxSH
+@   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 @
 @   This program is free software: you can redistribute it and/or modify
 @   it under the terms of the GNU General Public License as published by
@@ -14,9 +14,13 @@
 @   You should have received a copy of the GNU General Public License
 @   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 @
-@   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-@   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+@   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+@       * Requiring preservation of specified reasonable legal notices or
+@         author attributions in that material or in the Appropriate Legal
 @         Notices displayed by works containing it.
+@       * Prohibiting misrepresentation of the origin of that material,
+@         or requiring that modified versions of such material be marked in
+@         reasonable ways as different from the original version.
 
 .macro GEN_HANDLER name
     .global \name

exceptions/arm9/source/i2c.c

@@ -1,6 +1,6 @@
 /*
 *   This file is part of Luma3DS
-*   Copyright (C) 2016 Aurora Wright, TuxSH
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 *
 *   This program is free software: you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
@@ -15,13 +15,17 @@
 *   You should have received a copy of the GNU General Public License
 *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
-*   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-*   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
 *         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
 */
 
 /*
-*   Thanks to the everyone who contributed in the development of this file
+*   Thanks to whoever contributed in the development of this file
 */
 
 #include "i2c.h"

exceptions/arm9/source/i2c.h

@@ -1,6 +1,6 @@
 /*
 *   This file is part of Luma3DS
-*   Copyright (C) 2016 Aurora Wright, TuxSH
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 *
 *   This program is free software: you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
@@ -15,13 +15,17 @@
 *   You should have received a copy of the GNU General Public License
 *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
-*   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-*   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
 *         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
 */
 
 /*
-*   Thanks to the everyone who contributed in the development of this file
+*   Thanks to whoever contributed in the development of this file
 */
 
 #pragma once

exceptions/arm9/source/mainHandler.c

@@ -1,6 +1,6 @@
 /*
 *   This file is part of Luma3DS
-*   Copyright (C) 2016 Aurora Wright, TuxSH
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 *
 *   This program is free software: you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
@@ -15,9 +15,13 @@
 *   You should have received a copy of the GNU General Public License
 *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
-*   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-*   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
 *         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
 */
 
 #include "i2c.h"

exceptions/arm9/source/start.s

@@ -1,5 +1,5 @@
 @   This file is part of Luma3DS
-@   Copyright (C) 2016 Aurora Wright, TuxSH
+@   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 @
 @   This program is free software: you can redistribute it and/or modify
 @   it under the terms of the GNU General Public License as published by
@@ -14,9 +14,13 @@
 @   You should have received a copy of the GNU General Public License
 @   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 @
-@   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-@   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+@   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+@       * Requiring preservation of specified reasonable legal notices or
+@         author attributions in that material or in the Appropriate Legal
 @         Notices displayed by works containing it.
+@       * Prohibiting misrepresentation of the origin of that material,
+@         or requiring that modified versions of such material be marked in
+@         reasonable ways as different from the original version.
 
 .section .text.start
 .align 4

exceptions/arm9/source/types.h

@@ -1,6 +1,6 @@
 /*
 *   This file is part of Luma3DS
-*   Copyright (C) 2016 Aurora Wright, TuxSH
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 *
 *   This program is free software: you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
@@ -15,9 +15,13 @@
 *   You should have received a copy of the GNU General Public License
 *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
-*   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-*   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
 *         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
 */
 
 #pragma once

injector/source/CFWInfo.h

@@ -1,19 +0,0 @@
-#pragma once
-
-#include <3ds/types.h>
-
-typedef struct __attribute__((packed))
-{
-    char magic[4];
-    
-    u8 versionMajor;
-    u8 versionMinor;
-    u8 versionBuild;
-    u8 flags;
-
-    u32 commitHash;
-
-    u32 config;
-} CFWInfo;
-
-u32 svcGetCFWInfo(CFWInfo *info);

injector/source/CFWInfo.s

@@ -1,9 +0,0 @@
-.text
-.arm
-.align 4
-
-.global svcGetCFWInfo
-.type	svcGetCFWInfo, %function
-svcGetCFWInfo:
-	svc 0x2e
-	bx lr

injector/source/exheader.h

@@ -1,97 +0,0 @@
-#pragma once
-
-#include <3ds/types.h>
-
-typedef struct
-{
-	u8 reserved[5];
-	u8 flag;
-	u8 remasterversion[2];
-} PACKED exheader_systeminfoflags;
-
-typedef struct
-{
-	u32 address;
-	u32 nummaxpages;
-	u32 codesize;
-} PACKED exheader_codesegmentinfo;
-
-typedef struct
-{
-	u8 name[8];
-	exheader_systeminfoflags flags;
-	exheader_codesegmentinfo text;
-	u8 stacksize[4];
-	exheader_codesegmentinfo ro;
-	u8 reserved[4];
-	exheader_codesegmentinfo data;
-	u32 bsssize;
-} PACKED exheader_codesetinfo;
-
-typedef struct
-{
-	u64 programid[0x30];
-} PACKED exheader_dependencylist;
-
-typedef struct
-{
-	u8 savedatasize[4];
-	u8 reserved[4];
-	u8 jumpid[8];
-	u8 reserved2[0x30];
-} PACKED exheader_systeminfo;
-
-typedef struct
-{
-	u8 extsavedataid[8];
-	u8 systemsavedataid[8];
-	u8 reserved[8];
-	u8 accessinfo[7];
-	u8 otherattributes;
-} PACKED exheader_storageinfo;
-
-typedef struct
-{
-	u64 programid;
-	u8 flags[8];
-	u16 resourcelimitdescriptor[0x10];
-	exheader_storageinfo storageinfo;
-	u64 serviceaccesscontrol[0x20];
-	u8 reserved[0x1f];
-	u8 resourcelimitcategory;
-} PACKED exheader_arm11systemlocalcaps;
-
-typedef struct
-{
-	u32 descriptors[28];
-	u8 reserved[0x10];
-} PACKED exheader_arm11kernelcapabilities;
-
-typedef struct
-{
-	u8 descriptors[15];
-	u8 descversion;
-} PACKED exheader_arm9accesscontrol;
-
-typedef struct
-{
-	// systemcontrol info {
-	//   coreinfo {
-	exheader_codesetinfo codesetinfo;
-	exheader_dependencylist deplist;
-	//   }
-	exheader_systeminfo systeminfo;
-	// }
-	// accesscontrolinfo {
-	exheader_arm11systemlocalcaps arm11systemlocalcaps;
-	exheader_arm11kernelcapabilities arm11kernelcaps;
-	exheader_arm9accesscontrol arm9accesscontrol;
-	// }
-	struct {
-		u8 signature[0x100];
-		u8 ncchpubkeymodulus[0x100];
-		exheader_arm11systemlocalcaps arm11systemlocalcaps;
-		exheader_arm11kernelcapabilities arm11kernelcaps;
-		exheader_arm9accesscontrol arm9accesscontrol;
-	} PACKED accessdesc;
-} PACKED exheader_header;

k11_extension/Makefile

@@ -0,0 +1,47 @@
+rwildcard = $(foreach d, $(wildcard $1*), $(filter $(subst *, %, $2), $d) $(call rwildcard, $d/, $2))
+
+ifeq ($(strip $(DEVKITARM)),)
+$(error "Please set DEVKITARM in your environment. export DEVKITARM=<path to>devkitARM")
+endif
+
+include $(DEVKITARM)/base_tools
+
+name := k11_extension
+
+dir_source := source
+dir_include := include
+dir_build := build
+
+ARCH    := -mcpu=mpcore -mfpu=vfp
+ASFLAGS := $(ARCH)
+CFLAGS  := -Wall -Wextra -MMD -MP -marm $(ASFLAGS) -I$(dir_include) -fno-builtin -std=c11 -Wno-main -g -flto -O2 -ffast-math \
+-mword-relocations -ffunction-sections -fdata-sections
+LDFLAGS := -nostdlib -Wl,--gc-sections,--nmagic $(ARCH)
+
+objects = $(patsubst $(dir_source)/%.s, $(dir_build)/%.o, \
+		$(patsubst $(dir_source)/%.c, $(dir_build)/%.o, \
+		$(call rwildcard, $(dir_source), *.s *.c)))
+
+.PHONY: all
+all: ../$(dir_build)/$(name).bin
+
+.PHONY: clean
+clean:
+	@rm -rf $(dir_build)
+
+../$(dir_build)/$(name).bin: $(dir_build)/$(name).elf
+	$(OBJCOPY) -S -O binary $< $@
+
+$(dir_build)/$(name).elf: $(objects)
+	$(CC) $(LDFLAGS) -T linker.ld $(OUTPUT_OPTION) $^
+
+$(dir_build)/memory.o : CFLAGS += -O3 -marm
+
+$(dir_build)/%.o: $(dir_source)/%.c
+	@mkdir -p "$(@D)"
+	$(COMPILE.c) $(OUTPUT_OPTION) $<
+
+$(dir_build)/%.o: $(dir_source)/%.s
+	@mkdir -p "$(@D)"
+	$(COMPILE.s) $(OUTPUT_OPTION) $<
+include $(call rwildcard, $(dir_build), *.d)

k11_extension/include/config.h

@@ -0,0 +1,36 @@
+#pragma once
+
+#include "types.h"
+
+#define MAKE_BRANCH(src,dst)      (0xEA000000 | ((u32)((((u8 *)(dst) - (u8 *)(src)) >> 2) - 2) & 0xFFFFFF))
+#define MAKE_BRANCH_LINK(src,dst) (0xEB000000 | ((u32)((((u8 *)(dst) - (u8 *)(src)) >> 2) - 2) & 0xFFFFFF))
+
+#define CONFIG(a)        (((cfwInfo.config >> (a)) & 1) != 0)
+#define MULTICONFIG(a)   ((cfwInfo.multiConfig >> (2 * (a))) & 3)
+#define BOOTCONFIG(a, b) ((cfwInfo.bootConfig >> (a)) & (b))
+
+#define BOOTCFG_NAND         BOOTCONFIG(0, 7)
+#define BOOTCFG_FIRM         BOOTCONFIG(3, 7)
+#define BOOTCFG_NOFORCEFLAG  BOOTCONFIG(6, 1)
+
+enum multiOptions
+{
+    DEFAULTEMU = 0,
+    BRIGHTNESS,
+    SPLASH,
+    PIN,
+    NEWCPU
+};
+
+enum singleOptions
+{
+    AUTOBOOTEMU = 0,
+    USEEMUFIRM,
+    LOADEXTFIRMSANDMODULES,
+    PATCHGAMES,
+    PATCHVERSTRING,
+    SHOWGBABOOT,
+    PATCHACCESS,
+    PATCHUNITINFO,
+    DISABLEARM11EXCHANDLERS
+};

k11_extension/include/fatalExceptionHandlers.h

@@ -1,6 +1,6 @@
 /*
 *   This file is part of Luma3DS
-*   Copyright (C) 2016 Aurora Wright, TuxSH
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 *
 *   This program is free software: you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
@@ -15,15 +15,27 @@
 *   You should have received a copy of the GNU General Public License
 *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
-*   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-*   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
 *         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
 */
 
 #pragma once
 
 #include "types.h"
 
+bool isExceptionFatal(u32 spsr, u32 *regs, u32 index);
+bool isDataAbortExceptionRangeControlled(u32 spsr, u32 addr);
+
+void FIQHandler(void);
+void undefinedInstructionHandler(void);
+void prefetchAbortHandler(void);
+void dataAbortHandler(void);
+
 typedef struct __attribute__((packed))
 {
     u32 magic[2];
@@ -38,11 +50,3 @@ typedef struct __attribute__((packed))
     u32 stackDumpSize;
     u32 additionalDataSize;
 } ExceptionDumpHeader;
-
-void __attribute__((noreturn)) mcuReboot(void);
-void cleanInvalidateDCacheAndDMB(void);
-bool cannotAccessVA(const void *address);
-void FIQHandler(void);
-void undefinedInstructionHandler(void);
-void dataAbortHandler(void);
-void prefetchAbortHandler(void);

k11_extension/include/globals.h

@@ -0,0 +1,136 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "config.h"
+#include "kernel.h"
+
+extern KRecursiveLock *criticalSectionLock;
+extern KObjectList *threadList;
+extern KObjectMutex *synchronizationMutex;
+
+extern void (*KRecursiveLock__Lock)(KRecursiveLock *this);
+extern void (*KRecursiveLock__Unlock)(KRecursiveLock *this);
+
+extern void (*KAutoObject__AddReference)(KAutoObject *this);
+
+extern KProcess * (*KProcessHandleTable__ToKProcess)(KProcessHandleTable *this, Handle processHandle);
+extern KThread * (*KProcessHandleTable__ToKThread)(KProcessHandleTable *this, Handle threadHandle);
+extern KAutoObject * (*KProcessHandleTable__ToKAutoObject)(KProcessHandleTable *this, Handle handle);
+extern void (*KSynchronizationObject__Signal)(KSynchronizationObject *this, bool isPulse);
+extern Result (*WaitSynchronization1)(void *this_unused, KThread *thread, KSynchronizationObject *syncObject, s64 timeout);
+extern Result (*KProcessHandleTable__CreateHandle)(KProcessHandleTable *this, Handle *out, KAutoObject *obj, u8 token);
+extern Result (*KProcessHwInfo__MapProcessMemory)(KProcessHwInfo *this, KProcessHwInfo *other, void *dst, void *src, u32 nbPages);
+extern Result (*KProcessHwInfo__UnmapProcessMemory)(KProcessHwInfo *this, void *addr, u32 nbPages);
+extern Result (*KEvent__Clear)(KEvent *this);
+extern void (*KObjectMutex__WaitAndAcquire)(KObjectMutex *this);
+extern void (*KObjectMutex__ErrorOccured)(void);
+
+extern void (*KScheduler__AdjustThread)(KScheduler *this, KThread *thread, u32 oldSchedulingMask);
+extern void (*KScheduler__AttemptSwitchingThreadContext)(KScheduler *this);
+
+extern Result (*ControlMemory)(u32 *addrOut, u32 addr0, u32 addr1, u32 size, MemOp op, MemPerm perm, bool isLoader);
+extern void (*SleepThread)(s64 ns);
+extern Result (*CloseHandle)(Handle handle);
+extern Result (*GetSystemInfo)(s64 *out, s32 type, s32 param);
+extern Result (*GetProcessInfo)(s64 *out, Handle processHandle, u32 type);
+extern Result (*GetThreadInfo)(s64 *out, Handle threadHandle, u32 type);
+extern Result (*ConnectToPort)(Handle *out, const char *name);
+extern Result (*SendSyncRequest)(Handle handle);
+extern Result (*OpenProcess)(Handle *out, u32 processId);
+extern Result (*GetProcessId)(u32 *out, Handle process);
+extern Result (*DebugActiveProcess)(Handle *out, u32 processId);
+extern Result (*UnmapProcessMemory)(Handle processHandle, void *dst, u32 size);
+extern Result (*KernelSetState)(u32 type, u32 varg1, u32 varg2, u32 varg3);
+
+extern void (*flushDataCacheRange)(void *addr, u32 len);
+extern void (*invalidateInstructionCacheRange)(void *addr, u32 len);
+
+extern bool (*usrToKernelMemcpy8)(void *dst, const void *src, u32 len);
+extern bool (*usrToKernelMemcpy32)(u32 *dst, const u32 *src, u32 len);
+extern s32 (*usrToKernelStrncpy)(char *dst, const char *src, u32 len);
+extern bool (*kernelToUsrMemcpy8)(void *dst, const void *src, u32 len);
+extern bool (*kernelToUsrMemcpy32)(u32 *dst, const u32 *src, u32 len);
+extern s32 (*kernelToUsrStrncpy)(char *dst, const char *src, u32 len);
+
+extern void (*svcFallbackHandler)(u8 svcId);
+extern void (*kernelpanic)(void);
+extern void (*officialPostProcessSvc)(void);
+
+extern Result (*SignalDebugEvent)(DebugEventType type, u32 info, ...);
+
+extern bool isN3DS;
+extern u32 *exceptionStackTop;
+
+extern u32 TTBCR;
+extern u32 L1MMUTableAddrs[4];
+
+extern void *kernelUsrCopyFuncsStart, *kernelUsrCopyFuncsEnd;
+
+extern bool *isDevUnit;
+
+extern vu8 *configPage;
+extern u32 kernelVersion;
+extern FcramLayout fcramLayout;
+
+extern KCoreContext *coreCtxs;
+
+extern void *originalHandlers[8];
+extern u32 nbSection0Modules;
+
+extern u8 __start__[], __end__[], __bss_start__[], __bss_end__[];
+
+extern Result (*InterruptManager__MapInterrupt)(InterruptManager *manager, KBaseInterruptEvent *iEvent, u32 interruptID,
+                                                u32 coreID, u32 priority, bool disableUponReceipt, bool levelHighActive);
+extern InterruptManager *interruptManager;
+extern KBaseInterruptEvent *customInterruptEvent;
+
+extern void (*initFPU)(void);
+extern void (*mcuReboot)(void);
+extern void (*coreBarrier)(void);
+
+typedef struct CfwInfo
+{
+    char magic[4];
+
+    u8 versionMajor;
+    u8 versionMinor;
+    u8 versionBuild;
+    u8 flags;
+
+    u32 commitHash;
+
+    u16 configFormatVersionMajor, configFormatVersionMinor;
+    u32 config, multiConfig, bootConfig;
+    u64 hbldr3dsxTitleId;
+    u32 rosalinaMenuCombo;
+} CfwInfo;
+
+extern CfwInfo cfwInfo;
+
+extern vu32 rosalinaState;
+extern bool hasStartedRosalinaNetworkFuncsOnce;

k11_extension/include/ipc.h

@@ -0,0 +1,61 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "types.h"
+#include "globals.h"
+#include "kernel.h"
+#include "utils.h"
+
+#define MAX_SESSION     345
+
+// the structure of sessions is apparently not the same on older versions...
+
+typedef struct SessionInfo
+{
+    KSession *session;
+    char name[12];
+} SessionInfo;
+
+typedef struct LangemuAttributes
+{
+    u64 titleId;
+    u8 mask, region, language, country, state;
+} LangemuAttributes;
+
+extern KRecursiveLock processLangemuLock;
+extern LangemuAttributes processLangemuAttributes[0x40];
+
+SessionInfo *SessionInfo_Lookup(KSession *session);
+SessionInfo *SessionInfo_FindFirst(const char *name);
+void SessionInfo_ChangeVtable(KSession *session);
+void SessionInfo_Add(KSession *session, const char *name);
+void SessionInfo_Remove(KSession *session);
+
+bool doLangEmu(Result *res, u32 *cmdbuf);
+Result doPublishToProcessHook(Handle handle, u32 *cmdbuf);
+bool doErrfThrowHook(u32 *cmdbuf);

k11_extension/include/memory.h

@@ -0,0 +1,42 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "types.h"
+
+void *memcpy(void *dest, const void *src, u32 size) USED;
+int memcmp(const void *buf1, const void *buf2, u32 size) USED;
+void *memset(void *dest, u32 value, u32 size) USED; // thanks binutils for the nice bug involving memset.
+void *memset32(void *dest, u32 value, u32 size);
+u8 *memsearch(u8 *startPos, const void *pattern, u32 size, u32 patternSize);
+char *strcpy(char *dest, const char *src);
+char *strncpy(char *dest, const char *src, u32 size);
+s32 strnlen(const char *string, s32 maxlen);
+s32 strlen(const char *string);
+s32 strcmp(const char *str1, const char *str2);
+s32 strncmp(const char *str1, const char *str2, u32 size);
+void hexItoa(u64 number, char *out, u32 digits, bool uppercase);

k11_extension/include/svc.h

@@ -0,0 +1,38 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "types.h"
+#include "globals.h"
+#include "kernel.h"
+#include "utils.h"
+
+extern void *officialSVCs[0x7E];
+
+void postprocessSvc(void);
+void svcDefaultHandler(u8 svcId);
+void *svcHook(u8 *pageEnd);

k11_extension/include/svc/Backdoor.h

@@ -0,0 +1,33 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+void Backdoor(void *function);

k11_extension/include/svc/Break.h

@@ -0,0 +1,32 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+
+void __attribute__((noreturn)) Break(UserBreakType type, ...);

k11_extension/include/svc/ConnectToPort.h

@@ -0,0 +1,34 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+Result ConnectToPortHookWrapper(u32 dummy, const char *name);
+Result ConnectToPortHook(Handle *out, const char *name);

k11_extension/include/svc/ControlMemory.h

@@ -0,0 +1,35 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+Result ControlMemoryHookWrapper(u32 *addrOut, u32 addr0, u32 addr1, u32 size, MemOp op, MemPerm perm);
+Result ControlMemoryHook(u32 *addrOut, u32 addr0, u32 addr1, u32 size, MemOp op, MemPerm perm);
+Result ControlMemoryEx(u32 *addrOut, u32 addr0, u32 addr1, u32 size, MemOp op, MemPerm perm, bool isLoader);

k11_extension/include/svc/ControlService.h

@@ -0,0 +1,40 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+/// Operations for svcControlService
+typedef enum ServiceOp
+{
+    SERVICEOP_STEAL_CLIENT_SESSION = 0, ///< Steal a client session given a service or global port name
+    SERVICEOP_GET_NAME,                 ///< Get the name of a service or global port given a client or session handle
+} ServiceOp;
+
+Result ControlService(ServiceOp op, u32 varg1, u32 varg2);

k11_extension/include/svc/CopyHandle.h

@@ -0,0 +1,34 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+Result CopyHandleWrapper(Handle *outHandle, Handle outProcessHandle, Handle inHandle, Handle inProcessHandle);
+Result CopyHandle(Handle *outHandle, Handle outProcessHandle, Handle inHandle, Handle inProcessHandle);

k11_extension/include/svc/CustomBackdoor.h

@@ -0,0 +1,33 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+void CustomBackdoor(void *function, ...);

k11_extension/include/svc/GetCFWInfo.h

@@ -0,0 +1,35 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+#include "globals.h"
+
+// DEPRECATED
+Result GetCFWInfo(CfwInfo *out);

k11_extension/include/svc/GetProcessInfo.h

@@ -0,0 +1,34 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+Result GetProcessInfoHookWrapper(u32 dummy, Handle processHandle, u32 type);
+Result GetProcessInfoHook(s64 *out, Handle processHandle, u32 type);

k11_extension/include/svc/GetSystemInfo.h

@@ -0,0 +1,34 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+Result GetSystemInfoHookWrapper(u32 dummy, s32 type, s32 param);
+Result GetSystemInfoHook(s64 *out, s32 type, s32 param);

k11_extension/include/svc/GetThreadInfo.h

@@ -0,0 +1,34 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+Result GetThreadInfoHookWrapper(u32 dummy, Handle threadHandle, u32 type);
+Result GetThreadInfoHook(s64 *out, Handle threadHandle, u32 type);

k11_extension/include/svc/KernelSetState.h

@@ -0,0 +1,34 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+bool shouldSignalSyscallDebugEvent(KProcess *process, u8 svcId);
+Result KernelSetStateHook(u32 type, u32 varg1, u32 varg2, u32 varg3);

k11_extension/include/svc/MapProcessMemoryEx.h

@@ -0,0 +1,33 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+Result MapProcessMemoryEx(Handle processHandle, void *dst, void *src, u32 size);

k11_extension/include/svc/SendSyncRequest.h

@@ -0,0 +1,33 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+Result SendSyncRequestHook(Handle handle);

k11_extension/include/svc/SetGpuProt.h

@@ -0,0 +1,33 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+Result SetGpuProt(bool prot);

k11_extension/include/svc/SetWifiEnabled.h

@@ -0,0 +1,33 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+void SetWifiEnabled(bool enable);

k11_extension/include/svc/TranslateHandle.h

@@ -0,0 +1,34 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+Result TranslateHandleWrapper(u32 *outKAddr, char *outClassName, Handle handle);
+Result TranslateHandle(u32 *outKAddr, char *outClassName, Handle handle);

k11_extension/include/svc/UnmapProcessMemoryEx.h

@@ -0,0 +1,33 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "utils.h"
+#include "kernel.h"
+#include "svc.h"
+
+Result UnmapProcessMemoryEx(Handle processHandle, void *dst, u32 size);

k11_extension/include/svcHandler.h

@@ -1,6 +1,6 @@
 /*
 *   This file is part of Luma3DS
-*   Copyright (C) 2016 Aurora Wright, TuxSH
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 *
 *   This program is free software: you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
@@ -15,23 +15,15 @@
 *   You should have received a copy of the GNU General Public License
 *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
-*   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-*   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
 *         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
 */
 
 #pragma once
 
-#include <stdint.h>
-#include <stdlib.h>
-#include <stdbool.h>
-
-//Common data types
-typedef uint8_t u8;
-typedef uint16_t u16;
-typedef uint32_t u32;
-typedef uint64_t u64;
-typedef volatile u8 vu8;
-typedef volatile u16 vu16;
-typedef volatile u32 vu32;
-typedef volatile u64 vu64;
+void svcHandler(void);

k11_extension/include/synchronization.h

@@ -0,0 +1,119 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "types.h"
+#include "kernel.h"
+
+typedef KSchedulableInterruptEvent* (*SGI0Handler_t)(KBaseInterruptEvent *this, u32 interruptID);
+
+// http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.ddi0360f/CCHDIFIJ.html
+void executeFunctionOnCores(SGI0Handler_t func, u8 targetList, u8 targetListFilter);
+
+void KScheduler__TriggerCrossCoreInterrupt(KScheduler *this);
+void KThread__DebugReschedule(KThread *this, bool lock);
+bool rosalinaThreadLockPredicate(KThread *thread);
+void rosalinaRescheduleThread(KThread *thread, bool lock);
+void rosalinaLockThread(KThread *thread);
+void rosalinaLockAllThreads(void);
+void rosalinaUnlockAllThreads(void);
+
+// Taken from ctrulib:
+
+static inline void __dsb(void)
+{
+	__asm__ __volatile__("mcr p15, 0, %[val], c7, c10, 4" :: [val] "r" (0) : "memory");
+}
+
+static inline void __clrex(void)
+{
+    __asm__ __volatile__("clrex" ::: "memory");
+}
+
+static inline s32 __ldrex(s32* addr)
+{
+    s32 val;
+    __asm__ __volatile__("ldrex %[val], %[addr]" : [val] "=r" (val) : [addr] "Q" (*addr));
+    return val;
+}
+
+static inline bool __strex(s32* addr, s32 val)
+{
+    bool res;
+    __asm__ __volatile__("strex %[res], %[val], %[addr]" : [res] "=&r" (res) : [val] "r" (val), [addr] "Q" (*addr));
+    return res;
+}
+
+static inline s8 __ldrex8(s8* addr)
+{
+    s8 val;
+    __asm__ __volatile__("ldrexb %[val], %[addr]" : [val] "=r" (val) : [addr] "Q" (*addr));
+    return val;
+}
+
+static inline bool __strex8(s8* addr, s8 val)
+{
+    bool res;
+    __asm__ __volatile__("strexb %[res], %[val], %[addr]" : [res] "=&r" (res) : [val] "r" (val), [addr] "Q" (*addr));
+    return res;
+}
+
+static inline s16 __ldrex16(s16* addr)
+{
+    s16 val;
+    __asm__ __volatile__("ldrexh %[val], %[addr]" : [val] "=r" (val) : [addr] "Q" (*addr));
+    return val;
+}
+
+static inline bool __strex16(s16* addr, s16 val)
+{
+    bool res;
+    __asm__ __volatile__("strexh %[res], %[val], %[addr]" : [res] "=&r" (res) : [val] "r" (val), [addr] "Q" (*addr));
+    return res;
+}
+
+static inline u32 __get_cpsr(void)
+{
+    u32 cpsr;
+    __asm__ __volatile__("mrs %0, cpsr" : "=r"(cpsr));
+    return cpsr;
+}
+
+static inline void __set_cpsr_cx(u32 cpsr)
+{
+    __asm__ __volatile__("msr cpsr_cx, %0" :: "r"(cpsr));
+}
+
+static inline void __enable_irq(void)
+{
+    __asm__ __volatile__("cpsie i");
+}
+
+static inline void __disable_irq(void)
+{
+    __asm__ __volatile__("cpsid i");
+}

k11_extension/include/types.h

@@ -0,0 +1,97 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+// Taken from ctrulib
+
+#pragma once
+
+#include <stdint.h>
+#include <stdbool.h>
+#include <stddef.h>
+
+/// The maximum value of a u64.
+#define U64_MAX	UINT64_MAX
+
+/// would be nice if newlib had this already
+#ifndef SSIZE_MAX
+#ifdef SIZE_MAX
+#define SSIZE_MAX ((SIZE_MAX) >> 1)
+#endif
+#endif
+
+typedef uint8_t u8;   ///<  8-bit unsigned integer
+typedef uint16_t u16; ///< 16-bit unsigned integer
+typedef uint32_t u32; ///< 32-bit unsigned integer
+typedef uint64_t u64; ///< 64-bit unsigned integer
+
+typedef int8_t s8;   ///<  8-bit signed integer
+typedef int16_t s16; ///< 16-bit signed integer
+typedef int32_t s32; ///< 32-bit signed integer
+typedef int64_t s64; ///< 64-bit signed integer
+
+typedef volatile u8 vu8;   ///<  8-bit volatile unsigned integer.
+typedef volatile u16 vu16; ///< 16-bit volatile unsigned integer.
+typedef volatile u32 vu32; ///< 32-bit volatile unsigned integer.
+typedef volatile u64 vu64; ///< 64-bit volatile unsigned integer.
+
+typedef volatile s8 vs8;   ///<  8-bit volatile signed integer.
+typedef volatile s16 vs16; ///< 16-bit volatile signed integer.
+typedef volatile s32 vs32; ///< 32-bit volatile signed integer.
+typedef volatile s64 vs64; ///< 64-bit volatile signed integer.
+
+typedef u32 Handle;                 ///< Resource handle.
+typedef s32 Result;                 ///< Function result.
+
+/// Creates a bitmask from a bit number.
+#define BIT(n) (1U<<(n))
+
+/// Aligns a struct (and other types?) to m, making sure that the size of the struct is a multiple of m.
+#define ALIGN(m)   __attribute__((aligned(m)))
+/// Packs a struct (and other types?) so it won't include padding bytes.
+#define PACKED      __attribute__((packed))
+#define USED        __attribute__((used))
+#define UNUSED      __attribute__((unused))
+/// Packs a system version from its components.
+#define SYSTEM_VERSION(major, minor, revision) \
+    (((major)<<24)|((minor)<<16)|((revision)<<8))
+
+#define CUR_THREAD_HANDLE       0xFFFF8000
+#define CUR_PROCESS_HANDLE      0xFFFF8001
+
+#define MPCORE_REGS_BASE        (0x17E00000 | (1u << 31))
+#define MPCORE_SCU_CFG          (*(vu32 *)(MPCORE_REGS_BASE + 4))
+#define MPCORE_INT_ACK          (*(vu32 *)(MPCORE_REGS_BASE + 0x10C))
+
+#define MPCORE_GID_REGS_BASE    (MPCORE_REGS_BASE + 0x1000)
+#define MPCORE_GID_SGI          (*(vu32 *)(MPCORE_GID_REGS_BASE + 0xF00))
+
+#define CFG11_REGS_BASE           (0x10140000 | (1u << 31))
+#define CFG11_WIFICNT             (*(vu8  *)(CFG11_REGS_BASE + 0x180))
+#define CFG11_MPCORE_CFG          (*(vu16 *)(CFG11_REGS_BASE + 0xFFC))
+#define CFG11_MPCORE_CLKCNT       (*(vu16 *)(CFG11_REGS_BASE + 0x1300))
+
+#define L2C_REGS_BASE           (0x17E10000 | (1u << 31))
+#define L2C_CTRL                (*(vu32 *)(L2C_REGS_BASE + 0x100))

k11_extension/include/utils.h

@@ -0,0 +1,87 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#pragma once
+
+#include "types.h"
+#include "kernel.h"
+
+// For accessing physmem uncached (and directly)
+#define PA_PTR(addr)            (void *)((u32)(addr) | 1u << 31)
+#define PA_FROM_VA_PTR(addr)    PA_PTR(convertVAToPA(addr, false))
+
+static inline u32 makeARMBranch(const void *src, const void *dst, bool link) // the macros for those are ugly and buggy
+{
+    u32 instrBase = link ? 0xEB000000 : 0xEA000000;
+    u32 off = (u32)((const u8 *)dst - ((const u8 *)src + 8)); // the PC is always two instructions ahead of the one being executed
+
+    return instrBase | ((off >> 2) & 0xFFFFFF);
+}
+
+static inline void *decodeARMBranch(const void *src)
+{
+    u32 instr = *(const u32 *)src;
+    s32 off = (instr & 0xFFFFFF) << 2;
+    off = (off << 6) >> 6; // sign extend
+
+    return (void *)((const u8 *)src + 8 + off);
+}
+
+// For ARM prologs in the form of: push {regs} ... sub sp, #off (this obviously doesn't intend to cover all cases)
+static inline u32 computeARMFrameSize(const u32 *prolog)
+{
+    const u32 *off;
+
+    for(off = prolog; (*off >> 16) != 0xE92D; off++); // look for stmfd sp! = push
+    u32 nbPushedRegs = 0;
+    for(u32 val = *off & 0xFFFF; val != 0; val >>= 1) // 1 bit = 1 pushed register
+        nbPushedRegs += val & 1;
+    for(; (*off >> 8) != 0xE24DD0; off++); // look for sub sp, #offset
+    u32 localVariablesSpaceSize = *off & 0xFF;
+
+    return 4 * nbPushedRegs + localVariablesSpaceSize;
+}
+
+static inline u32 getNumberOfCores(void)
+{
+    return (MPCORE_SCU_CFG & 3) + 1;
+}
+
+static inline u32 getCurrentCoreID(void)
+{
+    u32 coreId;
+    __asm__ volatile("mrc p15, 0, %0, c0, c0, 5" : "=r"(coreId));
+    return coreId & 3;
+}
+
+u32 convertVAToPA(const void *addr, bool writeCheck);
+
+u32 safecpy(void *dst, const void *src, u32 len);
+void KObjectMutex__Acquire(KObjectMutex *this);
+void KObjectMutex__Release(KObjectMutex *this);
+
+void flushEntireDataCache(void);
+void invalidateEntireInstructionCache(void);

k11_extension/linker.ld

@@ -0,0 +1,19 @@
+OUTPUT_FORMAT("elf32-littlearm", "elf32-bigarm", "elf32-littlearm")
+OUTPUT_ARCH(arm)
+
+ENTRY(_start)
+SECTIONS
+{
+    . = 0x40000000;
+
+    __start__ = .;
+
+    .text       : ALIGN(4) { *(.text.start) *(.text*); . = ALIGN(4); }
+    .rodata     : ALIGN(4) { *(.rodata*); . = ALIGN(4); }
+    .data       : ALIGN(4) { *(.data*); . = ALIGN(4); }
+    .bss        : ALIGN(8) { __bss_start__ = .; *(.bss* COMMON); . = ALIGN(8); __bss_end__ = .; }
+
+    . = ALIGN(0x1000);
+
+    __end__ = .;
+}

k11_extension/source/fatalExceptionHandlers.s

@@ -0,0 +1,251 @@
+@   This file is part of Luma3DS
+@   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+@
+@   This program is free software: you can redistribute it and/or modify
+@   it under the terms of the GNU General Public License as published by
+@   the Free Software Foundation, either version 3 of the License, or
+@   (at your option) any later version.
+@
+@   This program is distributed in the hope that it will be useful,
+@   but WITHOUT ANY WARRANTY; without even the implied warranty of
+@   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+@   GNU General Public License for more details.
+@
+@   You should have received a copy of the GNU General Public License
+@   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+@
+@   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+@       * Requiring preservation of specified reasonable legal notices or
+@         author attributions in that material or in the Appropriate Legal
+@         Notices displayed by works containing it.
+@       * Prohibiting misrepresentation of the origin of that material,
+@         or requiring that modified versions of such material be marked in
+@         reasonable ways as different from the original version.
+
+.macro TEST_IF_MODE_AND_ARM_INST_OR_JUMP lbl, mode
+    cpsid aif
+    mrs sp, spsr
+    tst sp, #0x20
+    bne \lbl
+    and sp, #0x1f                @ get previous processor mode
+    cmp sp, #\mode
+    bne \lbl
+
+    sub sp, lr, #4
+    mcr p15, 0, sp, c7, c8, 0    @ VA to PA translation with privileged read permission check
+    mrc p15, 0, sp, c7, c4, 0    @ read PA register
+    tst sp, #1                   @ failure bit
+    bne \lbl
+.endm
+
+
+.macro GEN_USUAL_HANDLER name, index, pos
+    \name\()Handler:
+        ldr sp, =exceptionStackTop
+        ldr sp, [sp]
+        sub sp, #0x100
+
+        push {r0-r12, lr}
+        mrs r0, spsr
+        mov r1, sp
+        mov r2, #\index
+        bl isExceptionFatal
+        cmp r0, #0
+        pop {r0-r12, lr}
+        bne _exc_is_fatal_\name
+
+        ldr sp, =originalHandlers
+        ldr sp, [sp, #\pos]
+        bx sp
+
+        _exc_is_fatal_\name:
+        push {r8, r9}
+        mov r8, #\index
+        b _commonHandler
+.endm
+
+.text
+.arm
+.balign 4
+
+_die:
+    cpsid aif
+_die_loop:
+    wfi
+    b _die_loop
+
+_commonHandler:
+    cpsid aif
+
+    push {r0}
+    ldr r0, =_fatalExceptionOccured
+    ldr r0, [r0]
+    cmp r0, #0
+    bne _die_loop
+    pop {r0}
+
+    ldr r9, =_regs
+    stmia r9, {r0-r7}
+    mov r1, r8
+    pop {r8,r9}
+
+    ldr r0, =_fatalExceptionOccured
+    mov r4, #1
+
+    _try_lock:
+        ldrex r2, [r0]
+        strex r3, r4, [r0]
+        cmp r3, #0
+        bne _try_lock
+
+    push {r1, r12, lr}           @ attempt to hang the other cores
+    adr r0, _die
+    mov r1, #0xf
+    mov r2, #1
+    mov r3, #0
+    bl executeFunctionOnCores
+    pop {r1, r12, lr}
+
+    mrs r2, spsr
+    mrs r3, cpsr
+    ldr r6, =_regs
+    add r6, #0x20
+
+    ands r4, r2, #0xf       @ get the mode that triggered the exception
+    moveq r4, #0xf          @ usr => sys
+    bic r5, r3, #0xf
+    orr r5, r4
+    msr cpsr_c, r5          @ change processor mode
+    stmia r6!, {r8-lr}
+    msr cpsr_c, r3          @ restore processor mode
+
+    str lr, [r6], #4
+    str r2, [r6], #4
+
+    mov r0, r6
+
+    mrc p15, 0, r4, c5, c0, 0    @ dfsr
+    mrc p15, 0, r5, c5, c0, 1    @ ifsr
+    mrc p15, 0, r6, c6, c0, 0    @ far
+    fmrx r7, fpexc
+    fmrx r8, fpinst
+    fmrx r9, fpinst2
+    bic r3, #(1<<31)
+    fmxr fpexc, r3          @ clear the VFP11 exception flag (if it's set)
+
+    stmia r0!, {r4-r9}
+
+    mov r0, #0
+    mcr p15, 0, r0, c7, c14, 0   @ Clean and Invalidate Entire Data Cache
+    mcr p15, 0, r0, c7, c10, 4   @ Drain Synchronization Barrier
+
+    ldr r0, =isN3DS
+    ldrb r0, [r0]
+    cmp r0, #0
+    beq _no_L2C
+    ldr r0, =(0x17e10100 | 1 << 31)
+    ldr r0, [r0]
+    tst r0, #1                          @ is the L2C enabled?
+    beq _no_L2C
+
+    ldr r0, =0xffff
+    ldr r2, =(0x17e10730 | 1 << 31)
+    str r0, [r2, #0x4c]                @ invalidate by way
+
+    _L2C_sync:
+        ldr r0, [r2]                   @ L2C cache sync register
+        tst r0, #1
+        bne _L2C_sync
+
+    _no_L2C:
+
+    cps #0x1F
+    ldr sp, =exceptionStackTop
+    ldr sp, [sp]
+    sub sp, #0x100
+
+    mov r0, #0
+    mcr p15, 0, r0, c7, c10, 5   @ Drain Memory Barrier
+    ldr r0, =_regs
+    mrc p15, 0, r2, c0, c0, 5    @ CPU ID register
+    bl fatalExceptionHandlersMain
+
+    ldr r12, =mcuReboot
+    ldr r12, [r12]
+    bx r12
+
+.global FIQHandler
+.type   FIQHandler, %function
+GEN_USUAL_HANDLER FIQ, 0, 28
+
+.global undefinedInstructionHandler
+.type   undefinedInstructionHandler, %function
+undefinedInstructionHandler:
+    TEST_IF_MODE_AND_ARM_INST_OR_JUMP _undefinedInstructionNormalHandler, 0x10
+
+    ldr sp, [lr, #-4]   @ test if it's an VFP instruction that was aborted
+    lsl sp, #4
+    sub sp, #0xc0000000
+    cmp sp, #0x30000000
+    bcs _undefinedInstructionNormalHandler
+    fmrx sp, fpexc
+    tst sp, #0x40000000
+    bne _undefinedInstructionNormalHandler
+
+    @ FPU init
+    sub lr, #4
+    srsfd sp!, #0x13
+    cps #0x13
+    stmfd sp, {r0-r3, r11-lr}^
+    sub sp, #0x20
+    ldr r12, =initFPU
+    ldr r12, [r12]
+    blx r12
+    ldmfd sp, {r0-r3, r11-lr}^
+    add sp, #0x20
+    rfefd sp!  @ retry aborted instruction
+
+    GEN_USUAL_HANDLER _undefinedInstructionNormal, 1, 4
+
+.global prefetchAbortHandler
+.type   prefetchAbortHandler, %function
+prefetchAbortHandler:
+    TEST_IF_MODE_AND_ARM_INST_OR_JUMP _prefetchAbortNormalHandler, 0x13
+
+    ldr sp, =(Break + 3*4 + 4)
+    cmp lr, sp
+    bne _prefetchAbortNormalHandler
+
+    sub sp, r0, #0x110
+    pop {r0-r7, r12, lr}
+    pop {r8-r11}
+    ldr lr, [sp, #8]!
+    ldr sp, [sp, #4]
+    msr spsr, sp
+    addne lr, #2                        @ adjust address for later
+
+    GEN_USUAL_HANDLER _prefetchAbortNormal, 2, 12
+
+.global dataAbortHandler
+.type   dataAbortHandler, %function
+dataAbortHandler:
+    ldr sp, =exceptionStackTop
+    ldr sp, [sp]
+    push {r0-r12, lr}
+    mrs r0, spsr
+    sub r1, lr, #8
+    bl isDataAbortExceptionRangeControlled
+    cmp r0, #0
+    pop {r0-r12, lr}
+    beq _dataAbortNormalHandler
+
+    msr spsr_f, #(1 << 30)
+    mov r12, #0
+    subs pc, lr, #4
+
+    GEN_USUAL_HANDLER _dataAbortNormal, 3, 16
+
+.bss
+.balign 4
+_regs: .skip (4 * 23)
+_fatalExceptionOccured: .word 0

k11_extension/source/fatalExceptionHandlersMain.c

@@ -0,0 +1,131 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "fatalExceptionHandlers.h"
+#include "utils.h"
+#include "kernel.h"
+#include "memory.h"
+#include "globals.h"
+
+#define REG_DUMP_SIZE   4 * 23
+#define CODE_DUMP_SIZE  48
+
+bool isExceptionFatal(u32 spsr, u32 *regs, u32 index)
+{
+    if(CONFIG(DISABLEARM11EXCHANDLERS)) return false;
+
+    if((spsr & 0x1f) != 0x10) return true;
+
+    KThread *thread = currentCoreContext->objectContext.currentThread;
+    KProcess *currentProcess = currentCoreContext->objectContext.currentProcess;
+
+    if(thread != NULL && thread->threadLocalStorage != NULL && *((vu32 *)thread->threadLocalStorage + 0x10) != 0)
+       return false;
+
+    if(currentProcess != NULL)
+    {
+        if(debugOfProcess(currentProcess) != NULL)
+            return false;
+
+        thread = KPROCESS_GET_RVALUE(currentProcess, mainThread);
+        if(thread != NULL && thread->threadLocalStorage != NULL && *((vu32 *)thread->threadLocalStorage + 0x10) != 0)
+           return false;
+
+        if(index == 3 && strcmp(codeSetOfProcess(currentProcess)->processName, "menu") == 0 && // workaround a Home Menu bug leading to a dabort
+           regs[0] == 0x3FFF && regs[2] == 0 && regs[5] == 2 && regs[7] == 1)
+            return false;
+    }
+
+    return true;
+}
+
+extern u32 safecpy_sz;
+bool isDataAbortExceptionRangeControlled(u32 spsr, u32 addr)
+{
+    return ((spsr & 0x1F) != 0x10) && (
+                ((u32)kernelUsrCopyFuncsStart <= addr && addr < (u32)kernelUsrCopyFuncsEnd) ||
+                ((u32)safecpy <= addr && addr < (u32)safecpy + safecpy_sz)
+            );
+}
+void fatalExceptionHandlersMain(u32 *registerDump, u32 type, u32 cpuId)
+{
+    ExceptionDumpHeader dumpHeader;
+
+    u8 codeDump[CODE_DUMP_SIZE];
+    u8 *finalBuffer = (u8 *)PA_PTR(0x25000000);
+    u8 *final = finalBuffer;
+
+    dumpHeader.magic[0] = 0xDEADC0DE;
+    dumpHeader.magic[1] = 0xDEADCAFE;
+    dumpHeader.versionMajor = 1;
+    dumpHeader.versionMinor = 2;
+
+    dumpHeader.processor = 11;
+    dumpHeader.core = cpuId & 0xF;
+    dumpHeader.type = type;
+
+    dumpHeader.registerDumpSize = REG_DUMP_SIZE;
+    dumpHeader.codeDumpSize = CODE_DUMP_SIZE;
+
+    u32 cpsr = registerDump[16];
+    u32 pc   = registerDump[15] - (type < 3 ? (((cpsr & 0x20) != 0 && type == 1) ? 2 : 4) : 8);
+
+    registerDump[15] = pc;
+
+    //Dump code
+    u8 *instr = (u8 *)pc + ((cpsr & 0x20) ? 2 : 4) - dumpHeader.codeDumpSize; //Doesn't work well on 32-bit Thumb instructions, but it isn't much of a problem
+    dumpHeader.codeDumpSize = ((u32)instr & (((cpsr & 0x20) != 0) ? 1 : 3)) != 0 ? 0 : safecpy(codeDump, instr, dumpHeader.codeDumpSize);
+
+    //Copy register dump and code dump
+    final = (u8 *)(finalBuffer + sizeof(ExceptionDumpHeader));
+    memcpy(final, registerDump, dumpHeader.registerDumpSize);
+    final += dumpHeader.registerDumpSize;
+    memcpy(final, codeDump, dumpHeader.codeDumpSize);
+    final += dumpHeader.codeDumpSize;
+
+    //Dump stack in place
+    dumpHeader.stackDumpSize = safecpy(final, (const void *)registerDump[13], 0x1000 - (registerDump[13] & 0xFFF));
+    final += dumpHeader.stackDumpSize;
+
+    if(currentCoreContext->objectContext.currentProcess)
+    {
+        vu64 *additionalData = (vu64 *)final;
+        KCodeSet *currentCodeSet = codeSetOfProcess(currentCoreContext->objectContext.currentProcess);
+        if(currentCodeSet != NULL)
+        {
+            dumpHeader.additionalDataSize = 16;
+            memcpy((void *)additionalData, currentCodeSet->processName, 8);
+            additionalData[1] = currentCodeSet->titleId;
+        }
+        else dumpHeader.additionalDataSize = 0;
+    }
+    else dumpHeader.additionalDataSize = 0;
+
+    dumpHeader.totalSize = sizeof(ExceptionDumpHeader) + dumpHeader.registerDumpSize + dumpHeader.codeDumpSize + dumpHeader.stackDumpSize + dumpHeader.additionalDataSize;
+
+    //Copy header (actually optimized by the compiler)
+    *(ExceptionDumpHeader *)finalBuffer = dumpHeader;
+}

k11_extension/source/globals.c

@@ -0,0 +1,113 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "globals.h"
+
+KRecursiveLock *criticalSectionLock;
+KObjectList *threadList;
+KObjectMutex *synchronizationMutex;
+
+void (*KRecursiveLock__Lock)(KRecursiveLock *this);
+void (*KRecursiveLock__Unlock)(KRecursiveLock *this);
+
+void (*KAutoObject__AddReference)(KAutoObject *this);
+KProcess * (*KProcessHandleTable__ToKProcess)(KProcessHandleTable *this, Handle processHandle);
+KThread * (*KProcessHandleTable__ToKThread)(KProcessHandleTable *this, Handle threadHandle);
+KAutoObject * (*KProcessHandleTable__ToKAutoObject)(KProcessHandleTable *this, Handle handle);
+void (*KSynchronizationObject__Signal)(KSynchronizationObject *this, bool isPulse);
+Result (*WaitSynchronization1)(void *this_unused, KThread *thread, KSynchronizationObject *syncObject, s64 timeout);
+Result (*KProcessHandleTable__CreateHandle)(KProcessHandleTable *this, Handle *out, KAutoObject *obj, u8 token);
+Result (*KProcessHwInfo__MapProcessMemory)(KProcessHwInfo *this, KProcessHwInfo *other, void *dst, void *src, u32 nbPages);
+Result (*KProcessHwInfo__UnmapProcessMemory)(KProcessHwInfo *this, void *addr, u32 nbPages);
+Result (*KEvent__Clear)(KEvent *this);
+void (*KObjectMutex__WaitAndAcquire)(KObjectMutex *this);
+void (*KObjectMutex__ErrorOccured)(void);
+
+void (*KScheduler__AdjustThread)(KScheduler *this, KThread *thread, u32 oldSchedulingMask);
+void (*KScheduler__AttemptSwitchingThreadContext)(KScheduler *this);
+
+Result (*ControlMemory)(u32 *addrOut, u32 addr0, u32 addr1, u32 size, MemOp op, MemPerm perm, bool isLoader);
+void (*SleepThread)(s64 ns);
+Result (*CloseHandle)(Handle handle);
+Result (*GetSystemInfo)(s64 *out, s32 type, s32 param);
+Result (*GetProcessInfo)(s64 *out, Handle processHandle, u32 type);
+Result (*GetThreadInfo)(s64 *out, Handle threadHandle, u32 type);
+Result (*ConnectToPort)(Handle *out, const char *name);
+Result (*SendSyncRequest)(Handle handle);
+Result (*OpenProcess)(Handle *out, u32 processId);
+Result (*GetProcessId)(u32 *out, Handle process);
+Result (*DebugActiveProcess)(Handle *out, u32 processId);
+Result (*UnmapProcessMemory)(Handle processHandle, void *dst, u32 size);
+Result (*KernelSetState)(u32 type, u32 varg1, u32 varg2, u32 varg3);
+
+void (*flushDataCacheRange)(void *addr, u32 len);
+void (*invalidateInstructionCacheRange)(void *addr, u32 len);
+
+bool (*usrToKernelMemcpy8)(void *dst, const void *src, u32 len);
+bool (*usrToKernelMemcpy32)(u32 *dst, const u32 *src, u32 len);
+s32 (*usrToKernelStrncpy)(char *dst, const char *src, u32 len);
+bool (*kernelToUsrMemcpy8)(void *dst, const void *src, u32 len);
+bool (*kernelToUsrMemcpy32)(u32 *dst, const u32 *src, u32 len);
+s32 (*kernelToUsrStrncpy)(char *dst, const char *src, u32 len);
+
+void (*svcFallbackHandler)(u8 svcId);
+void (*kernelpanic)(void);
+void (*officialPostProcessSvc)(void);
+
+Result (*SignalDebugEvent)(DebugEventType type, u32 info, ...);
+
+bool isN3DS;
+u32 *exceptionStackTop;
+
+u32 TTBCR;
+u32 L1MMUTableAddrs[4];
+
+void *kernelUsrCopyFuncsStart, *kernelUsrCopyFuncsEnd;
+
+bool *isDevUnit;
+
+vu8 *configPage;
+u32 kernelVersion;
+FcramLayout fcramLayout;
+KCoreContext *coreCtxs;
+
+void *originalHandlers[8] = {NULL};
+
+u32 nbSection0Modules;
+
+Result (*InterruptManager__MapInterrupt)(InterruptManager *manager, KBaseInterruptEvent *iEvent, u32 interruptID,
+                                         u32 coreID, u32 priority, bool disableUponReceipt, bool levelHighActive);
+InterruptManager *interruptManager;
+KBaseInterruptEvent *customInterruptEvent;
+
+void (*initFPU)(void);
+void (*mcuReboot)(void);
+void (*coreBarrier)(void);
+
+CfwInfo cfwInfo;
+
+vu32 rosalinaState;
+bool hasStartedRosalinaNetworkFuncsOnce;

k11_extension/source/ipc.c

@@ -0,0 +1,318 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "ipc.h"
+#include "memory.h"
+
+static SessionInfo sessionInfos[MAX_SESSION] = { {NULL} };
+static u32 nbActiveSessions = 0;
+static KRecursiveLock sessionInfosLock = { NULL };
+
+KRecursiveLock processLangemuLock;
+LangemuAttributes processLangemuAttributes[0x40];
+
+static void *customSessionVtable[0x10] = { NULL }; // should be enough
+
+static u32 SessionInfo_FindClosestSlot(KSession *session)
+{
+    if(nbActiveSessions == 0 || session <= sessionInfos[0].session)
+        return 0;
+    else if(session > sessionInfos[nbActiveSessions - 1].session)
+        return nbActiveSessions;
+
+    u32 a = 0, b = nbActiveSessions - 1, m;
+
+    do
+    {
+        m = (a + b) / 2;
+        if(sessionInfos[m].session < session)
+            a = m;
+        else if(sessionInfos[m].session > session)
+            b = m;
+        else
+            return m;
+    }
+    while(b - a > 1);
+
+    return b;
+}
+
+SessionInfo *SessionInfo_Lookup(KSession *session)
+{
+    KRecursiveLock__Lock(criticalSectionLock);
+    KRecursiveLock__Lock(&sessionInfosLock);
+
+    SessionInfo *ret;
+    u32 id = SessionInfo_FindClosestSlot(session);
+    if(id == nbActiveSessions)
+        ret = NULL;
+    else
+        ret = (void **)(sessionInfos[id].session->autoObject.vtable) == customSessionVtable ? &sessionInfos[id] : NULL;
+    
+    KRecursiveLock__Unlock(&sessionInfosLock);
+    KRecursiveLock__Unlock(criticalSectionLock);
+
+    return ret;
+}
+
+SessionInfo *SessionInfo_FindFirst(const char *name)
+{
+    KRecursiveLock__Lock(criticalSectionLock);
+    KRecursiveLock__Lock(&sessionInfosLock);
+
+    SessionInfo *ret;
+    u32 id;
+    for(id = 0; id < nbActiveSessions && strncmp(sessionInfos[id].name, name, 12) != 0; id++);
+    if(id == nbActiveSessions)
+        ret = NULL;
+    else
+        ret = (void **)(sessionInfos[id].session->autoObject.vtable) == customSessionVtable ? &sessionInfos[id] : NULL;
+
+    KRecursiveLock__Unlock(&sessionInfosLock);
+    KRecursiveLock__Unlock(criticalSectionLock);
+
+    return ret;
+}
+
+void SessionInfo_Add(KSession *session, const char *name)
+{
+    KAutoObject__AddReference(&session->autoObject);
+    SessionInfo_ChangeVtable(session);
+    session->autoObject.vtable->DecrementReferenceCount(&session->autoObject);
+
+    KRecursiveLock__Lock(criticalSectionLock);
+    KRecursiveLock__Lock(&sessionInfosLock);
+
+    if(nbActiveSessions == MAX_SESSION)
+    {
+        KRecursiveLock__Unlock(&sessionInfosLock);
+        KRecursiveLock__Unlock(criticalSectionLock);
+        return;
+    }
+
+    u32 id = SessionInfo_FindClosestSlot(session);
+
+    if(id != nbActiveSessions && sessionInfos[id].session == session)
+    {
+        KRecursiveLock__Unlock(&sessionInfosLock);
+        KRecursiveLock__Unlock(criticalSectionLock);
+        return;
+    }
+
+    for(u32 i = nbActiveSessions; i > id && i != 0; i--)
+        sessionInfos[i] = sessionInfos[i - 1];
+
+    nbActiveSessions++;
+
+    sessionInfos[id].session = session;
+    strncpy(sessionInfos[id].name, name, 12);
+
+    KRecursiveLock__Unlock(&sessionInfosLock);
+    KRecursiveLock__Unlock(criticalSectionLock);
+}
+
+void SessionInfo_Remove(KSession *session)
+{
+    KRecursiveLock__Lock(criticalSectionLock);
+    KRecursiveLock__Lock(&sessionInfosLock);
+
+    if(nbActiveSessions == MAX_SESSION)
+    {
+        KRecursiveLock__Unlock(&sessionInfosLock);
+        KRecursiveLock__Unlock(criticalSectionLock);
+        return;
+    }
+
+    u32 id = SessionInfo_FindClosestSlot(session);
+
+    if(id == nbActiveSessions)
+    {
+        KRecursiveLock__Unlock(&sessionInfosLock);
+        KRecursiveLock__Unlock(criticalSectionLock);
+        return;
+    }
+
+    for(u32 i = id; i < nbActiveSessions - 1; i++)
+        sessionInfos[i] = sessionInfos[i + 1];
+
+    memset(&sessionInfos[--nbActiveSessions], 0, sizeof(SessionInfo));
+
+    KRecursiveLock__Unlock(&sessionInfosLock);
+    KRecursiveLock__Unlock(criticalSectionLock);
+}
+
+static void (*KSession__dtor_orig)(KAutoObject *this);
+static void KSession__dtor_hook(KAutoObject *this)
+{
+    KSession__dtor_orig(this);
+    SessionInfo_Remove((KSession *)this);
+}
+
+void SessionInfo_ChangeVtable(KSession *session)
+{
+    if(customSessionVtable[2] == NULL)
+    {
+        memcpy(customSessionVtable, session->autoObject.vtable, 0x40);
+        KSession__dtor_orig = session->autoObject.vtable->dtor;
+        customSessionVtable[2] = (void *)KSession__dtor_hook;
+    }
+    session->autoObject.vtable = (Vtable__KAutoObject *)customSessionVtable;
+}
+
+bool doLangEmu(Result *res, u32 *cmdbuf)
+{
+    KRecursiveLock__Lock(criticalSectionLock);
+    KRecursiveLock__Lock(&processLangemuLock);
+
+    u64 titleId = codeSetOfProcess(currentCoreContext->objectContext.currentProcess)->titleId;
+    LangemuAttributes *attribs = NULL;
+    bool skip = true;
+
+    *res = 0;
+    for(u32 i = 0; i < 0x40; i++)
+    {
+        if(processLangemuAttributes[i].titleId == titleId)
+            attribs = &processLangemuAttributes[i];
+    }
+
+    if(attribs == NULL)
+    {
+        KRecursiveLock__Unlock(&processLangemuLock);
+        KRecursiveLock__Unlock(criticalSectionLock);
+        return false;
+    }
+
+    if((cmdbuf[0] == 0x20000 || cmdbuf[0] == 0x4060000 || cmdbuf[0] == 0x8160000) && (attribs->mask & 1)) // SecureInfoGetRegion
+    {
+        cmdbuf[0] = (cmdbuf[0] & 0xFFFF0000) | 0x80;
+        cmdbuf[1] = 0;
+        cmdbuf[2] = attribs->region;
+    }
+    else if(cmdbuf[1] == 1 && cmdbuf[2] == 0xA0002 && cmdbuf[3] == 0x1C && (attribs->mask & 2))
+    {
+        cmdbuf[0] = (cmdbuf[0] & 0xFFFF0000) | 0x40;
+        cmdbuf[1] = 0;
+        *(u8 *)cmdbuf[4] = attribs->language;
+    }
+    else if(cmdbuf[1] == 4 && cmdbuf[2] == 0xB0000 && cmdbuf[3] == 0x4C && (attribs->mask & 0xC))
+    {
+        u8 *ptr = (u8 *)cmdbuf[4];
+        if(attribs->mask & 4)
+            ptr[3] = attribs->country;
+        if(attribs->mask & 8)
+            ptr[2] = attribs->state;
+
+        ptr[0] = ptr[1] = 0;
+    }
+    else
+        skip = false;
+
+    KRecursiveLock__Unlock(&processLangemuLock);
+    KRecursiveLock__Unlock(criticalSectionLock);
+    return skip;
+}
+
+Result doPublishToProcessHook(Handle handle, u32 *cmdbuf)
+{
+    Result res = 0;
+    u32 pid;
+    bool terminateRosalina = cmdbuf[1] == 0x100 && cmdbuf[2] == 0; // cmdbuf[2] to check for well-formed requests
+    u32 savedCmdbuf[4];
+    memcpy(savedCmdbuf, cmdbuf, 16);
+    
+    if(!terminateRosalina || GetProcessId(&pid, cmdbuf[3]) != 0)
+        terminateRosalina = false;
+    else
+    {
+        KProcessHandleTable *handleTable = handleTableOfProcess(currentCoreContext->objectContext.currentProcess);
+        KProcess *process = KProcessHandleTable__ToKProcess(handleTable, cmdbuf[3]);
+        if((strcmp(codeSetOfProcess(process)->processName, "socket") == 0 && (rosalinaState & 2)) ||
+            strcmp(codeSetOfProcess(process)->processName, "pxi") == 0)
+            terminateRosalina = true;
+        else
+            terminateRosalina = false;
+        ((KAutoObject *)process)->vtable->DecrementReferenceCount((KAutoObject *)process);
+    }
+    
+    if(terminateRosalina && nbSection0Modules == 6)
+    {
+        Handle rosalinaProcessHandle;
+        res = OpenProcess(&rosalinaProcessHandle, 5);
+        if(res == 0)
+        {
+            cmdbuf[0] = cmdbuf[0];
+            cmdbuf[1] = 0x100;
+            cmdbuf[2] = 0;
+            cmdbuf[3] = rosalinaProcessHandle;
+
+            res = SendSyncRequest(handle);
+            CloseHandle(rosalinaProcessHandle);
+            memcpy(cmdbuf, savedCmdbuf, 16);
+        }
+    }
+
+    return SendSyncRequest(handle);
+}
+
+bool doErrfThrowHook(u32 *cmdbuf)
+{
+    // If fatalErrorInfo->type is "card removed" or "logged", returning from ERRF:Throw is a no-op
+    // for the SDK function
+
+    // r6 (arm) or r4 (thumb) is copied into cmdbuf[1..31]
+    u32 *r0_to_r7_r12_usr = (u32 *)((u8 *)currentCoreContext->objectContext.currentThread->endOfThreadContext - 0x110);
+    u32 spsr = *(u32 *)((u8 *)currentCoreContext->objectContext.currentThread->endOfThreadContext - 0xCC);
+    u8 *srcerrbuf = (u8 *)r0_to_r7_r12_usr[(spsr & 0x20) ? 4 : 6];
+    const char *pname = codeSetOfProcess(currentCoreContext->objectContext.currentProcess)->processName;
+
+    static const struct
+    {
+        const char *name;
+        Result errCode;
+    } errorCodesToIgnore[] =
+    {
+        /*
+            If you're getting this error, you have broken your head-tracking hardware,
+            and should uncomment the following line:
+        */
+        //{ "qtm", (Result)0xF96183FE },
+
+        { "", 0 }, // impossible case to ensure the array has at least 1 element 
+    };
+
+    for(u32 i = 0; i < sizeof(errorCodesToIgnore) / sizeof(errorCodesToIgnore[0]); i++)
+    {
+        if(strcmp(pname, errorCodesToIgnore[i].name) == 0 && (Result)cmdbuf[2] == errorCodesToIgnore[i].errCode)
+        {
+            srcerrbuf[0] = 5;
+            cmdbuf[0] = 0x10040;
+            cmdbuf[1] = 0;
+            return true;
+        }
+    }
+
+    return false;
+}

k11_extension/source/main.c

@@ -0,0 +1,281 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "utils.h"
+#include "globals.h"
+#include "synchronization.h"
+#include "fatalExceptionHandlers.h"
+#include "svc.h"
+#include "svc/ConnectToPort.h"
+#include "svcHandler.h"
+#include "memory.h"
+
+struct KExtParameters
+{
+    u32 ALIGN(0x400) L2MMUTableFor0x40000000[256];
+    u32 basePA;
+    void *originalHandlers[4];
+    u32 L1MMUTableAddrs[4];
+
+    CfwInfo cfwInfo;
+} kExtParameters = { .basePA = 0x12345678 }; // place this in .data
+
+void relocateAndSetupMMU(u32 coreId, u32 *L1Table)
+{
+    struct KExtParameters *p0 = (struct KExtParameters *)((u32)&kExtParameters - 0x40000000 + 0x18000000);
+    struct KExtParameters *p = (struct KExtParameters *)((u32)&kExtParameters - 0x40000000 + p0->basePA);
+
+    if(coreId == 0)
+    {
+        // Relocate ourselves, and clear BSS
+        memcpy((void *)p0->basePA, (const void *)0x18000000, __bss_start__ - __start__);
+        memset32((u32 *)(p0->basePA + (__bss_start__ - __start__)), 0, __bss_end__ - __bss_start__);
+
+        // Map the kernel ext to 0x40000000
+        // 4KB extended small pages: [SYS:RW USR:-- X  TYP:NORMAL SHARED OUTER NOCACHE, INNER CACHED WB WA]
+        for(u32 offset = 0; offset < (u32)(__end__ - __start__); offset += 0x1000)
+            p->L2MMUTableFor0x40000000[offset >> 12] = (p0->basePA + offset) | 0x516;
+
+        __asm__ __volatile__ ("sev");
+    }
+    else
+        __asm__ __volatile__ ("wfe");
+
+    // bit31 idea thanks to SALT
+    // Maps physmem so that, if addr is in physmem(0, 0x30000000), it can be accessed uncached&rwx as addr|(1<<31)
+    u32 attribs = 0x40C02; // supersection (rwx for all) of strongly ordered memory, shared
+    for(u32 PA = 0; PA < 0x30000000; PA += 0x01000000)
+    {
+        u32 VA = (1 << 31) | PA;
+        for(u32 i = 0; i < 16; i++)
+            L1Table[i + (VA >> 20)] = PA | attribs;
+    }
+
+    L1Table[0x40000000 >> 20] = (u32)p->L2MMUTableFor0x40000000 | 1;
+
+    p->L1MMUTableAddrs[coreId] = (u32)L1Table;
+}
+
+void bindSGI0Hook(void)
+{
+    if(InterruptManager__MapInterrupt(interruptManager, customInterruptEvent, 0, getCurrentCoreID(), 0, false, false) != 0)
+        __asm__ __volatile__ ("bkpt 0xdead");
+}
+
+void configHook(vu8 *cfgPage)
+{
+    configPage = cfgPage;
+
+    kernelVersion = *(vu32 *)configPage;
+    *(vu32 *)(configPage + 0x40) = fcramLayout.applicationSize;
+    *(vu32 *)(configPage + 0x44) = fcramLayout.systemSize;
+    *(vu32 *)(configPage + 0x48) = fcramLayout.baseSize;
+    *isDevUnit = true; // enable debug features
+}
+
+static void findUsefulSymbols(void)
+{
+    u32 *off;
+
+    for(off = (u32 *)0xFFFF0000; *off != 0xE1A0D002; off++);
+    off += 3;
+    initFPU = (void (*) (void))off;
+
+    for(; *off != 0xE3A0A0C2; off++);
+    mcuReboot = (void (*) (void))--off;
+    coreBarrier = (void (*) (void))decodeARMBranch(off - 4);
+
+    for(off = (u32 *)originalHandlers[2]; *off != 0xE1A00009; off++);
+    svcFallbackHandler = (void (*)(u8))decodeARMBranch(off + 1);
+    for(; *off != 0xE92D000F; off++);
+    officialPostProcessSvc = (void (*)(void))decodeARMBranch(off + 1);
+
+    KProcessHandleTable__ToKProcess = (KProcess * (*)(KProcessHandleTable *, Handle))decodeARMBranch(5 + (u32 *)officialSVCs[0x76]);
+
+    for(off = (u32 *)KProcessHandleTable__ToKProcess; *off != 0xE1A00004; off++);
+    KAutoObject__AddReference = (void (*)(KAutoObject *))decodeARMBranch(off + 1);
+
+    for(; *off != 0xE320F000; off++);
+    KProcessHandleTable__ToKAutoObject = (KAutoObject * (*)(KProcessHandleTable *, Handle))decodeARMBranch(off + 1);
+
+    for(off = (u32 *)decodeARMBranch(3 + (u32 *)officialSVCs[9]); /* KThread::Terminate */ *off != 0xE5D42034; off++);
+    off -= 2;
+    criticalSectionLock = (KRecursiveLock *)off[2 + (off[0] & 0xFF) / 4];
+    KRecursiveLock__Lock = (void (*)(KRecursiveLock *))decodeARMBranch(off + 1);
+    off += 4;
+
+    for(; (*off >> 16) != 0xE59F; off++);
+    KRecursiveLock__Unlock = (void (*)(KRecursiveLock *))decodeARMBranch(off + 1);
+
+    for(; *off != 0xE5C4007D; off++);
+    KSynchronizationObject__Signal = (void (*)(KSynchronizationObject *, bool))decodeARMBranch(off + 3);
+
+    for(off = (u32 *)officialSVCs[0x19]; *off != 0xE1A04005; off++);
+    KEvent__Clear = (Result (*)(KEvent *))decodeARMBranch(off + 1);
+    for(off = (u32 *)KEvent__Clear; *off != 0xE8BD8070; off++);
+    synchronizationMutex = *(KObjectMutex **)(off + 1);
+
+    for(off = (u32 *)officialSVCs[0x24]; *off != 0xE59F004C; off++);
+    WaitSynchronization1 = (Result (*)(void *, KThread *, KSynchronizationObject *, s64))decodeARMBranch(off + 6);
+
+    for(off = (u32 *)decodeARMBranch(3 + (u32 *)officialSVCs[0x33]) /* OpenProcess */ ; *off != 0xE1A05000; off++);
+    KProcessHandleTable__CreateHandle = (Result (*)(KProcessHandleTable *, Handle *, KAutoObject *, u8))decodeARMBranch(off - 1);
+
+    for(off = (u32 *)decodeARMBranch(3 + (u32 *)officialSVCs[0x34]) /* OpenThread */; *off != 0xD9001BF7; off++);
+    threadList = *(KObjectList **)(off + 1);
+
+    KProcessHandleTable__ToKThread = (KThread * (*)(KProcessHandleTable *, Handle))decodeARMBranch((u32 *)decodeARMBranch((u32 *)officialSVCs[0x37] + 3) /* GetThreadId */ + 5);
+
+    for(off = (u32 *)officialSVCs[0x50]; off[0] != 0xE1A05000 || off[1] != 0xE2100102 || off[2] != 0x5A00000B; off++);
+    InterruptManager__MapInterrupt = (Result (*)(InterruptManager *, KBaseInterruptEvent *, u32, u32, u32, bool, bool))decodeARMBranch(--off);
+    interruptManager = *(InterruptManager **)(off - 4 + (off[-6] & 0xFFF) / 4);
+    for(off = (u32 *)officialSVCs[0x54]; *off != 0xE8BD8008; off++);
+    flushDataCacheRange = (void (*)(void *, u32))(*(u32 **)(off[1]) + 3);
+
+    for(off = (u32 *)officialSVCs[0x71]; *off != 0xE2101102; off++);
+    KProcessHwInfo__MapProcessMemory = (Result (*)(KProcessHwInfo *, KProcessHwInfo *, void *, void *, u32))decodeARMBranch(off - 1);
+
+    // From 4.x to 6.x the pattern will match but the result will be wrong
+    for(off = (u32 *)officialSVCs[0x72]; *off != 0xE2041102; off++);
+    KProcessHwInfo__UnmapProcessMemory = (Result (*)(KProcessHwInfo *, void *, u32))decodeARMBranch(off - 1);
+
+    for(off = (u32 *)officialSVCs[0x7C]; *off != 0x03530000; off++);
+    KObjectMutex__WaitAndAcquire = (void (*)(KObjectMutex *))decodeARMBranch(++off);
+    for(; *off != 0xE320F000; off++);
+    KObjectMutex__ErrorOccured = (void (*)(void))decodeARMBranch(off + 1);
+
+    for(off = (u32 *)originalHandlers[4]; *off != (u32)exceptionStackTop; off++);
+    kernelUsrCopyFuncsStart = (void *)off[1];
+    kernelUsrCopyFuncsEnd = (void *)off[2];
+
+    u32 n_cmp_0;
+    for(off = (u32 *)kernelUsrCopyFuncsStart, n_cmp_0 = 1; n_cmp_0 <= 6; off++)
+    {
+        if(*off == 0xE3520000)
+        {
+            // We're missing some funcs
+            switch(n_cmp_0)
+            {
+                case 1:
+                    usrToKernelMemcpy8 = (bool (*)(void *, const void *, u32))off;
+                    break;
+                case 2:
+                    usrToKernelMemcpy32 = (bool (*)(u32 *, const u32 *, u32))off;
+                    break;
+                case 3:
+                    usrToKernelStrncpy = (s32 (*)(char *, const char *, u32))off;
+                    break;
+                case 4:
+                    kernelToUsrMemcpy8 = (bool (*)(void *, const void *, u32))off;
+                    break;
+                case 5:
+                    kernelToUsrMemcpy32 = (bool (*)(u32 *, const u32 *, u32))off;
+                    break;
+                case 6:
+                    kernelToUsrStrncpy = (s32 (*)(char *, const char *, u32))off;
+                    break;
+                default: break;
+            }
+            n_cmp_0++;
+        }
+    }
+
+    // The official prototype of ControlMemory doesn't have that extra param'
+    ControlMemory = (Result (*)(u32 *, u32, u32, u32, MemOp, MemPerm, bool))
+                    decodeARMBranch((u32 *)officialSVCs[0x01] + 5);
+    SleepThread = (void (*)(s64))officialSVCs[0x0A];
+    CloseHandle = (Result (*)(Handle))officialSVCs[0x23];
+    GetSystemInfo = (Result (*)(s64 *, s32, s32))decodeARMBranch((u32 *)officialSVCs[0x2A] + 3);
+    GetProcessInfo = (Result (*)(s64 *, Handle, u32))decodeARMBranch((u32 *)officialSVCs[0x2B] + 3);
+    GetThreadInfo = (Result (*)(s64 *, Handle, u32))decodeARMBranch((u32 *)officialSVCs[0x2C] + 3);
+    ConnectToPort = (Result (*)(Handle *, const char*))decodeARMBranch((u32 *)officialSVCs[0x2D] + 3);
+    SendSyncRequest = (Result (*)(Handle))officialSVCs[0x32];
+    OpenProcess = (Result (*)(Handle *, u32))decodeARMBranch((u32 *)officialSVCs[0x33] + 3);
+    GetProcessId = (Result (*)(u32 *, Handle))decodeARMBranch((u32 *)officialSVCs[0x35] + 3);
+    DebugActiveProcess = (Result (*)(Handle *, u32))decodeARMBranch((u32 *)officialSVCs[0x60] + 3);
+    UnmapProcessMemory = (Result (*)(Handle, void *, u32))officialSVCs[0x72];
+    KernelSetState = (Result (*)(u32, u32, u32, u32))((u32 *)officialSVCs[0x7C] + 1);
+
+    for(off = (u32 *)svcFallbackHandler; *off != 0xE8BD4010; off++);
+    kernelpanic = (void (*)(void))decodeARMBranch(off + 1);
+
+    for(off = (u32 *)0xFFFF0000; off[0] != 0xE3A01002 || off[1] != 0xE3A00004; off++);
+    SignalDebugEvent = (Result (*)(DebugEventType type, u32 info, ...))decodeARMBranch(off + 2);
+
+    for(; *off != 0x96007F9; off++);
+    isDevUnit = *(bool **)(off - 1);
+
+    ///////////////////////////////////////////
+
+    // Shitty/lazy heuristic but it works on even 4.5, so...
+    u32 textStart = ((u32)originalHandlers[2]) & ~0xFFFF;
+    u32 rodataStart = (u32)(interruptManager->N3DS.privateInterrupts[1][0x1D].interruptEvent->vtable) & ~0xFFF;
+    u32 textSize = rodataStart - textStart;
+    for(off = (u32 *)textStart; off < (u32 *)(textStart + textSize - 12); off++)
+    {
+        if(off[0] == 0xE5D13034 && off[1] == 0xE1530002)
+            KScheduler__AdjustThread = (void (*)(KScheduler *, KThread *, u32))off;
+        else if(off[0] == (u32)interruptManager && off[1] == (u32)&currentCoreContext->objectContext)
+            KScheduler__AttemptSwitchingThreadContext = (void (*)(KScheduler *))(off - 2);
+        else if(off[0] == 0xE3510B1A && off[1] == 0xE3A06000)
+        {
+            u32 *off2;
+            for(off2 = off; *off2 != 0xE92D40F8; off2--);
+            invalidateInstructionCacheRange = (void (*)(void *, u32))off2;
+        }
+    }
+}
+
+void main(FcramLayout *layout, KCoreContext *ctxs)
+{
+    struct KExtParameters *p = &kExtParameters;
+    u32 TTBCR_;
+    s64 nb;
+
+    layout->systemSize -= __end__ - __start__;
+    fcramLayout = *layout;
+    coreCtxs = ctxs;
+
+    __asm__ __volatile__("mrc p15, 0, %0, c2, c0, 2" : "=r"(TTBCR_));
+    TTBCR = TTBCR_;
+    isN3DS = getNumberOfCores() == 4;
+    memcpy(L1MMUTableAddrs, (const void *)p->L1MMUTableAddrs, 16);
+    exceptionStackTop = (u32 *)0xFFFF2000 + (1 << (32 - TTBCR - 20));
+    cfwInfo = p->cfwInfo;
+
+    memcpy(originalHandlers + 1, p->originalHandlers, 16);
+    void **arm11SvcTable = (void**)originalHandlers[2];
+    while(*arm11SvcTable != NULL) arm11SvcTable++; //Look for SVC0 (NULL)
+    memcpy(officialSVCs, arm11SvcTable, 4 * 0x7E);
+
+    findUsefulSymbols();
+
+    GetSystemInfo(&nb, 26, 0);
+    nbSection0Modules = (u32)nb;
+
+    rosalinaState = 0;
+    hasStartedRosalinaNetworkFuncsOnce = false;
+}

k11_extension/source/memory.c

@@ -0,0 +1,176 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "memory.h"
+#include "utils.h"
+
+void *memcpy(void *dest, const void *src, u32 size)
+{
+    u8 *destc = (u8 *)dest;
+    const u8 *srcc = (const u8 *)src;
+
+    for(u32 i = 0; i < size; i++)
+        destc[i] = srcc[i];
+
+    return dest;
+}
+
+int memcmp(const void *buf1, const void *buf2, u32 size)
+{
+    const u8 *buf1c = (const u8 *)buf1;
+    const u8 *buf2c = (const u8 *)buf2;
+
+    for(u32 i = 0; i < size; i++)
+    {
+        int cmp = buf1c[i] - buf2c[i];
+        if(cmp)
+          return cmp;
+    }
+
+    return 0;
+}
+
+void *memset(void *dest, u32 value, u32 size)
+{
+    u8 *destc = (u8 *)dest;
+
+    for(u32 i = 0; i < size; i++) destc[i] = (u8)value;
+
+    return dest;
+}
+
+void *memset32(void *dest, u32 value, u32 size)
+{
+    u32 *dest32 = (u32 *)dest;
+
+    for(u32 i = 0; i < size/4; i++) dest32[i] = value;
+
+    return dest;
+}
+
+//Boyer-Moore Horspool algorithm, adapted from http://www-igm.univ-mlv.fr/~lecroq/string/node18.html#SECTION00180
+u8 *memsearch(u8 *startPos, const void *pattern, u32 size, u32 patternSize)
+{
+    const u8 *patternc = (const u8 *)pattern;
+    u32 table[256];
+
+    //Preprocessing
+    for(u32 i = 0; i < 256; i++)
+        table[i] = patternSize;
+    for(u32 i = 0; i < patternSize - 1; i++)
+        table[patternc[i]] = patternSize - i - 1;
+
+    //Searching
+    u32 j = 0;
+    while(j <= size - patternSize)
+    {
+        u8 c = startPos[j + patternSize - 1];
+        if(patternc[patternSize - 1] == c && memcmp(pattern, startPos + j, patternSize - 1) == 0)
+            return startPos + j;
+        j += table[c];
+    }
+
+    return NULL;
+}
+
+char *strcpy(char *dest, const char *src)
+{
+    u32 i;
+    for(i = 0; src[i] != 0; i++)
+        dest[i] = src[i];
+
+    dest[i] = 0;
+
+    return dest;
+}
+
+char *strncpy(char *dest, const char *src, u32 size)
+{
+    u32 i;
+    for(i = 0; i < size && src[i] != 0; i++)
+        dest[i] = src[i];
+
+    for(; i < size; i++)
+        dest[i] = 0;
+
+    return dest;
+}
+
+s32 strnlen(const char *string, s32 maxlen)
+{
+    s32 size;
+    for(size = 0; *string && size < maxlen; string++, size++);
+
+    return size;
+}
+
+s32 strlen(const char *string)
+{
+    char *stringEnd = (char *)string;
+    while(*stringEnd) stringEnd++;
+
+    return stringEnd - string;
+}
+
+s32 strcmp(const char *str1, const char *str2)
+{
+    while(*str1 && (*str1 == *str2))
+    {
+        str1++;
+        str2++;
+    }
+
+    return *str1 - *str2;
+}
+
+s32 strncmp(const char *str1, const char *str2, u32 size)
+{
+    while(size && *str1 && (*str1 == *str2))
+    {
+        str1++;
+        str2++;
+        size--;
+    }
+    if (!size)
+        return 0;
+    else
+        return *str1 - *str2;
+}
+
+void hexItoa(u64 number, char *out, u32 digits, bool uppercase)
+{
+    const char hexDigits[] = "0123456789ABCDEF";
+    const char hexDigitsLowercase[] = "0123456789abcdef";
+    u32 i = 0;
+
+    while(number > 0)
+    {
+        out[digits - 1 - i++] = uppercase ? hexDigits[number & 0xF] : hexDigitsLowercase[number & 0xF];
+        number >>= 4;
+    }
+
+    while(i < digits) out[digits - 1 - i++] = '0';
+}

k11_extension/source/start.s

@@ -0,0 +1,72 @@
+@   This file is part of Luma3DS
+@   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+@
+@   This program is free software: you can redistribute it and/or modify
+@   it under the terms of the GNU General Public License as published by
+@   the Free Software Foundation, either version 3 of the License, or
+@   (at your option) any later version.
+@
+@   This program is distributed in the hope that it will be useful,
+@   but WITHOUT ANY WARRANTY; without even the implied warranty of
+@   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+@   GNU General Public License for more details.
+@
+@   You should have received a copy of the GNU General Public License
+@   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+@
+@   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+@       * Requiring preservation of specified reasonable legal notices or
+@         author attributions in that material or in the Appropriate Legal
+@         Notices displayed by works containing it.
+@       * Prohibiting misrepresentation of the origin of that material,
+@         or requiring that modified versions of such material be marked in
+@         reasonable ways as different from the original version.
+
+.section .text.start
+.balign 4
+.global _start
+_start:
+    b start
+    b startPhys
+
+    b _bindSGI0Hook
+    b configHook
+
+    b undefinedInstructionHandler
+    b svcHandler
+    b prefetchAbortHandler
+    b dataAbortHandler
+
+    .word __end__
+    .word kExtParameters
+    .word 1 @ enableUserExceptionHandlersForCPUExc
+
+    b KThread__DebugReschedule
+start:
+    @ Only core0 executes this, the other cores are running coreBarrier
+
+    @ Skipped instruction:
+    str r1, [r4, #0x8]
+
+    push {r0-r12, lr}
+
+    sub r0, r4, #8
+    sub r1, r8, #0x8000
+    bl main
+
+    pop {r0-r12, pc}
+
+startPhys:
+    push {r0-r12, lr}
+    mrc p15, 0, r0, c0, c0, 5   @ CPUID register
+    and r0, #3
+    mov r1, r2
+    bl relocateAndSetupMMU
+    pop {r0-r12, lr}
+    mov r12, #0x20000000        @ instruction that has been patched
+    bx lr
+
+_bindSGI0Hook:
+    push {r0-r12, lr}
+    bl bindSGI0Hook
+    pop {r0-r12, pc}

k11_extension/source/svc.c

@@ -0,0 +1,168 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "memory.h"
+#include "synchronization.h"
+#include "svc.h"
+#include "svc/ControlMemory.h"
+#include "svc/GetProcessInfo.h"
+#include "svc/GetThreadInfo.h"
+#include "svc/GetSystemInfo.h"
+#include "svc/GetCFWInfo.h"
+#include "svc/ConnectToPort.h"
+#include "svc/SendSyncRequest.h"
+#include "svc/Break.h"
+#include "svc/SetGpuProt.h"
+#include "svc/SetWifiEnabled.h"
+#include "svc/Backdoor.h"
+#include "svc/KernelSetState.h"
+#include "svc/CustomBackdoor.h"
+#include "svc/MapProcessMemoryEx.h"
+#include "svc/UnmapProcessMemoryEx.h"
+#include "svc/ControlService.h"
+#include "svc/CopyHandle.h"
+#include "svc/TranslateHandle.h"
+
+void *officialSVCs[0x7E] = {NULL};
+
+void signalSvcEntry(u8 *pageEnd)
+{
+    u32 svcId = (u32) *(u8 *)(pageEnd - 0xB5);
+    KProcess *currentProcess = currentCoreContext->objectContext.currentProcess;
+
+    if(svcId == 0xFE)
+        svcId = *(u32 *)(pageEnd - 0x110 + 8 * 4); // r12 ; note: max theortical SVC atm: 0x3FFFFFFF. We don't support catching svcIds >= 0x100 atm either
+
+    // Since DBGEVENT_SYSCALL_ENTRY is non blocking, we'll cheat using EXCEVENT_UNDEFINED_SYSCALL (debug->svcId is fortunately an u16!)
+    if(debugOfProcess(currentProcess) != NULL && shouldSignalSyscallDebugEvent(currentProcess, svcId))
+        SignalDebugEvent(DBGEVENT_OUTPUT_STRING, 0xFFFFFFFE, svcId);
+}
+
+void signalSvcReturn(u8 *pageEnd)
+{
+    u32 svcId = (u32) *(u8 *)(pageEnd - 0xB5);
+    KProcess *currentProcess = currentCoreContext->objectContext.currentProcess;
+
+    if(svcId == 0xFE)
+        svcId = *(u32 *)(pageEnd - 0x110 + 8 * 4); // r12 ; note: max theortical SVC atm: 0x1FFFFFFF. We don't support catching svcIds >= 0x100 atm either
+
+    // Since DBGEVENT_SYSCALL_RETURN is non blocking, we'll cheat using EXCEVENT_UNDEFINED_SYSCALL (debug->svcId is fortunately an u16!)
+    if(debugOfProcess(currentProcess) != NULL && shouldSignalSyscallDebugEvent(currentProcess, svcId))
+        SignalDebugEvent(DBGEVENT_OUTPUT_STRING, 0xFFFFFFFF, svcId);
+}
+
+void postprocessSvc(void)
+{
+    KThread *currentThread = currentCoreContext->objectContext.currentThread;
+    if(!currentThread->shallTerminate && rosalinaThreadLockPredicate(currentThread))
+        rosalinaRescheduleThread(currentThread, true);
+
+    officialPostProcessSvc();
+}
+
+static bool doingVeryShittyPmResLimitWorkaround = false; // I feel dirty
+
+void *svcHook(u8 *pageEnd)
+{
+    KProcess *currentProcess = currentCoreContext->objectContext.currentProcess;
+
+    u32 svcId = *(u8 *)(pageEnd - 0xB5);
+    if(svcId == 0xFE)
+        svcId = *(u32 *)(pageEnd - 0x110 + 8 * 4); // r12 ; note: max theortical SVC atm: 0x3FFFFFFF. We don't support catching svcIds >= 0x100 atm either
+    switch(svcId)
+    {
+        case 0x01:
+            return ControlMemoryHookWrapper;
+        case 0x17:
+            if(strcmp(codeSetOfProcess(currentProcess)->processName, "pm") == 0) // only called twice in pm, by the same function
+            {
+                *(vu32 *)(configPage + 0x44) += __end__ - __start__;
+                doingVeryShittyPmResLimitWorkaround = true;
+            }
+            return officialSVCs[0x17];
+        case 0x2A:
+            return GetSystemInfoHookWrapper;
+        case 0x2B:
+            return GetProcessInfoHookWrapper;
+        case 0x2C:
+            return GetThreadInfoHookWrapper;
+        case 0x2D:
+            return ConnectToPortHookWrapper;
+        case 0x2E:
+            return GetCFWInfo; // DEPRECATED
+        case 0x32:
+            return SendSyncRequestHook;
+        case 0x3C:
+            return (debugOfProcess(currentProcess) != NULL) ? officialSVCs[0x3C] : (void *)Break;
+        case 0x59:
+            return SetGpuProt;
+        case 0x5A:
+            return SetWifiEnabled;
+        case 0x79:
+            if(doingVeryShittyPmResLimitWorkaround)
+            {
+                *(vu32 *)(configPage + 0x44) -= __end__ - __start__;
+                doingVeryShittyPmResLimitWorkaround = false;
+            }
+            return officialSVCs[0x79];
+        case 0x7B:
+            return Backdoor;
+        case 0x7C:
+            return KernelSetStateHook;
+
+
+        case 0x80:
+            return CustomBackdoor;
+
+        case 0x90:
+            return convertVAToPA;
+        case 0x91:
+            return flushDataCacheRange;
+        case 0x92:
+            return flushEntireDataCache;
+        case 0x93:
+            return invalidateInstructionCacheRange;
+        case 0x94:
+            return invalidateEntireInstructionCache;
+
+        case 0xA0:
+            return MapProcessMemoryEx;
+        case 0xA1:
+            return UnmapProcessMemoryEx;
+        case 0xA2:
+            return ControlMemoryEx;
+
+        case 0xB0:
+            return ControlService;
+        case 0xB1:
+            return CopyHandleWrapper;
+        case 0xB2:
+            return TranslateHandleWrapper;
+
+        default:
+            return (svcId <= 0x7D) ? officialSVCs[svcId] : NULL;
+    }
+}

k11_extension/source/svc/Backdoor.s

@@ -0,0 +1,43 @@
+@   This file is part of Luma3DS
+@   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+@
+@   This program is free software: you can redistribute it and/or modify
+@   it under the terms of the GNU General Public License as published by
+@   the Free Software Foundation, either version 3 of the License, or
+@   (at your option) any later version.
+@
+@   This program is distributed in the hope that it will be useful,
+@   but WITHOUT ANY WARRANTY; without even the implied warranty of
+@   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+@   GNU General Public License for more details.
+@
+@   You should have received a copy of the GNU General Public License
+@   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+@
+@   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+@       * Requiring preservation of specified reasonable legal notices or
+@         author attributions in that material or in the Appropriate Legal
+@         Notices displayed by works containing it.
+@       * Prohibiting misrepresentation of the origin of that material,
+@         or requiring that modified versions of such material be marked in
+@         reasonable ways as different from the original version.
+
+.text
+.arm
+.balign 4
+
+.global Backdoor
+.type   Backdoor, %function
+Backdoor:
+    @ Nintendo's code
+    bic   r1, sp, #0xff
+    orr   r1, r1, #0xf00
+    add   r1, r1, #0x28     @ get user stack.
+
+    ldr   r2, [r1]
+    stmdb r2!, {sp, lr}
+    mov   sp, r2            @ sp_svc = sp_usr. You'll get nice crashes if an interrupt or context switch occurs during svcBackdoor
+    blx   r0
+    pop   {r0, r1}
+    mov   sp, r0
+    bx    r1

k11_extension/source/svc/Break.s

@@ -1,5 +1,5 @@
 @   This file is part of Luma3DS
-@   Copyright (C) 2017 Aurora Wright, TuxSH
+@   Copyright (C) 2016-2017 Aurora Wright, TuxSH
 @
 @   This program is free software: you can redistribute it and/or modify
 @   it under the terms of the GNU General Public License as published by
@@ -14,17 +14,22 @@
 @   You should have received a copy of the GNU General Public License
 @   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 @
-@   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-@   reasonable legal notices or author attributions in that material or in the Appropriate Legal
+@   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+@       * Requiring preservation of specified reasonable legal notices or
+@         author attributions in that material or in the Appropriate Legal
 @         Notices displayed by works containing it.
+@       * Prohibiting misrepresentation of the origin of that material,
+@         or requiring that modified versions of such material be marked in
+@         reasonable ways as different from the original version.
 
-.section .text.start
-.align 4
-.global _start
-_start:
-    ldr sp, =0x27ffe000
-    b main
+.text
+.arm
+.balign 4
 
-.global payloadSize
-payloadSize:
-    .word 0
+.global Break
+.type   Break, %function
+Break:
+    bic r0, sp, #0xf00
+    bic r0, #0xff
+    add r0, #0x1000 @ get page context top
+    bkpt 0xffff

k11_extension/source/svc/ConnectToPort.c

@@ -0,0 +1,56 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "svc/ConnectToPort.h"
+#include "memory.h"
+#include "ipc.h"
+
+Result ConnectToPortHook(Handle *out, const char *name)
+{
+    char portName[12] = {0};
+    Result res = 0;
+    if(name != NULL)
+    {
+        s32 nb = usrToKernelStrncpy(portName, name, 12);
+        if(nb < 0)
+            return 0xD9001814;
+        else if(nb == 12 && portName[11] != 0)
+            return 0xE0E0181E;
+    }
+    res = ConnectToPort(out, name);
+    if(res != 0)
+        return res;
+
+    KProcessHandleTable *handleTable = handleTableOfProcess(currentCoreContext->objectContext.currentProcess);
+    KClientSession *clientSession = (KClientSession *)KProcessHandleTable__ToKAutoObject(handleTable, *out);
+    if(clientSession != NULL)
+    {
+        SessionInfo_Add(clientSession->parentSession, portName);
+        clientSession->syncObject.autoObject.vtable->DecrementReferenceCount(&clientSession->syncObject.autoObject);
+    }
+
+    return res;
+}

k11_extension/source/svc/ControlMemory.c

@@ -0,0 +1,34 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "svc/ControlMemory.h"
+
+Result ControlMemoryHook(u32 *addrOut, u32 addr0, u32 addr1, u32 size, MemOp op, MemPerm perm)
+{
+    KProcess *currentProcess = currentCoreContext->objectContext.currentProcess;
+    return ControlMemory(addrOut, addr0, addr1, size, op, perm, idOfProcess(currentProcess) == 1);
+}
+

k11_extension/source/svc/ControlService.c

@@ -0,0 +1,108 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "svc/ControlService.h"
+#include "memory.h"
+#include "ipc.h"
+
+Result ControlService(ServiceOp op, u32 varg1, u32 varg2)
+{
+    Result res = 0;
+    KProcessHandleTable *handleTable = handleTableOfProcess(currentCoreContext->objectContext.currentProcess);
+
+    switch(op)
+    {
+        case SERVICEOP_GET_NAME:
+        {
+            KSession *session = NULL;
+            SessionInfo *info = NULL;
+            KAutoObject *obj = KProcessHandleTable__ToKAutoObject(handleTable, (Handle)varg2);
+            if(obj == NULL)
+                return 0xD8E007F7; // invalid handle
+            else if(kernelVersion >= SYSTEM_VERSION(2, 46, 0))
+            {
+                KClassToken tok;
+                obj->vtable->GetClassToken(&tok, obj);
+                if(tok.flags == 0x95)
+                    session = ((KServerSession *)obj)->parentSession;
+                else if(tok.flags == 0xA5)
+                    session = ((KClientSession *)obj)->parentSession;
+            }
+            else
+            {   // not the exact same tests but it should work
+                if(strcmp(obj->vtable->GetClassName(obj), "KServerSession") == 0)
+                    session = ((KServerSession *)obj)->parentSession;
+                else if(strcmp(obj->vtable->GetClassName(obj), "KClientSession") == 0)
+                    session = ((KClientSession *)obj)->parentSession;
+            }
+
+            if(session != NULL)
+                info = SessionInfo_Lookup(session);
+
+            if(info == NULL)
+                res = 0xD8E007F7;
+            else
+            {
+                // names are limited to 11 characters (for ports)
+                // kernelToUsrStrncpy doesn't clear trailing bytes
+                char name[12] = { 0 };
+                strncpy(name, info->name, 12);
+                res = kernelToUsrMemcpy8((void *)varg1, name, strlen(name) + 1) ? 0 : 0xE0E01BF5;
+            }
+
+            obj->vtable->DecrementReferenceCount(obj);
+            return res;
+        }
+
+        case SERVICEOP_STEAL_CLIENT_SESSION:
+        {
+            char name[12] = { 0 };
+            SessionInfo *info = NULL;
+            if(name != NULL)
+            {
+                s32 nb = usrToKernelStrncpy(name, (const char *)varg2, 12);
+                if(nb < 0)
+                    return 0xD9001814;
+                else if(nb == 12 && name[11] != 0)
+                    return 0xE0E0181E;
+            }
+
+            info = SessionInfo_FindFirst(name);
+
+            if(info == NULL)
+                return 0x9401BFE; // timeout (the wanted service is likely not initalized)
+            else
+            {
+                Handle out;
+                res = createHandleForThisProcess(&out, &info->session->clientSession.syncObject.autoObject);
+                return (res != 0) ? res : (kernelToUsrMemcpy32((u32 *)varg1, (u32 *)&out, 4) ? 0 : (Result)0xE0E01BF5);
+            }
+        }
+
+        default:
+            return 0xF8C007F4;
+    }
+}

k11_extension/source/svc/CopyHandle.c

@@ -0,0 +1,76 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "svc/CopyHandle.h"
+#include "memory.h"
+
+Result CopyHandle(Handle *outHandle, Handle outProcessHandle, Handle inHandle, Handle inProcessHandle)
+{
+    KProcessHandleTable *handleTable = handleTableOfProcess(currentCoreContext->objectContext.currentProcess);
+    KProcess *inProcess, *outProcess;
+    Result res;
+
+    if(inProcessHandle == CUR_PROCESS_HANDLE)
+    {
+        inProcess = currentCoreContext->objectContext.currentProcess;
+        KAutoObject__AddReference((KAutoObject *)inProcess);
+    }
+    else
+        inProcess = KProcessHandleTable__ToKProcess(handleTable, inProcessHandle);
+
+    if(inProcess == NULL)
+        return 0xD8E007F7; // invalid handle
+
+    if(outProcessHandle == CUR_PROCESS_HANDLE)
+    {
+        outProcess = currentCoreContext->objectContext.currentProcess;
+        KAutoObject__AddReference((KAutoObject *)outProcess);
+    }
+    else
+        outProcess = KProcessHandleTable__ToKProcess(handleTable, outProcessHandle);
+
+    if(outProcess == NULL)
+    {
+        ((KAutoObject *)inProcess)->vtable->DecrementReferenceCount((KAutoObject *)inProcess);
+        return 0xD8E007F7; // invalid handle
+    }
+
+    KAutoObject *obj = KProcessHandleTable__ToKAutoObject(handleTableOfProcess(inProcess), inHandle);
+    if(obj == NULL)
+    {
+        ((KAutoObject *)inProcess)->vtable->DecrementReferenceCount((KAutoObject *)inProcess);
+        ((KAutoObject *)outProcess)->vtable->DecrementReferenceCount((KAutoObject *)outProcess);
+        return 0xD8E007F7; // invalid handle
+    }
+
+    res = createHandleForProcess(outHandle, outProcess, obj);
+
+    obj->vtable->DecrementReferenceCount(obj);
+    ((KAutoObject *)inProcess)->vtable->DecrementReferenceCount((KAutoObject *)inProcess);
+    ((KAutoObject *)outProcess)->vtable->DecrementReferenceCount((KAutoObject *)outProcess);
+
+    return res;
+}

k11_extension/source/svc/CustomBackdoor.s

@@ -0,0 +1,38 @@
+@   This file is part of Luma3DS
+@   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+@
+@   This program is free software: you can redistribute it and/or modify
+@   it under the terms of the GNU General Public License as published by
+@   the Free Software Foundation, either version 3 of the License, or
+@   (at your option) any later version.
+@
+@   This program is distributed in the hope that it will be useful,
+@   but WITHOUT ANY WARRANTY; without even the implied warranty of
+@   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+@   GNU General Public License for more details.
+@
+@   You should have received a copy of the GNU General Public License
+@   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+@
+@   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+@       * Requiring preservation of specified reasonable legal notices or
+@         author attributions in that material or in the Appropriate Legal
+@         Notices displayed by works containing it.
+@       * Prohibiting misrepresentation of the origin of that material,
+@         or requiring that modified versions of such material be marked in
+@         reasonable ways as different from the original version.
+
+.text
+.arm
+.balign 4
+
+.global CustomBackdoor
+.type   CustomBackdoor, %function
+CustomBackdoor:
+    push {r4, lr}
+    mov r4, r0
+    mov r0, r1
+    mov r1, r2
+    mov r2, r3
+    blx r4
+    pop {r4, pc}

k11_extension/source/svc/GetCFWInfo.c

@@ -0,0 +1,33 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "svc/GetCFWInfo.h"
+
+// DEPRECATED
+Result GetCFWInfo(CfwInfo *out)
+{
+    return kernelToUsrMemcpy8(out, &cfwInfo, 16) ? 0 : 0xE0E01BF5;
+}

k11_extension/source/svc/GetProcessInfo.c

@@ -0,0 +1,94 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "svc/GetProcessInfo.h"
+#include "memory.h"
+
+Result GetProcessInfoHook(s64 *out, Handle processHandle, u32 type)
+{
+    Result res = 0;
+
+    if(type >= 0x10000)
+    {
+        KProcessHandleTable *handleTable = handleTableOfProcess(currentCoreContext->objectContext.currentProcess);
+        KProcess *process;
+        if(processHandle == CUR_PROCESS_HANDLE)
+        {
+            process = currentCoreContext->objectContext.currentProcess;
+            KAutoObject__AddReference((KAutoObject *)process);
+        }
+        else
+            process = KProcessHandleTable__ToKProcess(handleTable, processHandle);
+
+        if(process == NULL)
+            return 0xD8E007F7; // invalid handle
+
+        switch(type)
+        {
+            case 0x10000:
+                memcpy(out, codeSetOfProcess(process)->processName, 8);
+                break;
+            case 0x10001:
+                *(u64 *)out = codeSetOfProcess(process)->titleId;
+                break;
+            case 0x10002:
+                *out = codeSetOfProcess(process)->nbTextPages << 12;
+                break;
+            case 0x10003:
+                *out = codeSetOfProcess(process)->nbRodataPages << 12;
+                break;
+            case 0x10004:
+                *out = codeSetOfProcess(process)->nbRwPages << 12;
+                break;
+            case 0x10005:
+                *out = (s64)(u64)(u32)codeSetOfProcess(process)->textSection.section.loadAddress;
+                break;
+            case 0x10006:
+                *out = (s64)(u64)(u32)codeSetOfProcess(process)->rodataSection.section.loadAddress;
+                break;
+            case 0x10007:
+                *out = (s64)(u64)(u32)codeSetOfProcess(process)->dataSection.section.loadAddress;
+                break;
+            case 0x10008:
+                *out = (isN3DS ? hwInfoOfProcess(process)->N3DS.translationTableBase :
+                                (kernelVersion >= SYSTEM_VERSION(2, 44, 6)
+                                    ? hwInfoOfProcess(process)->O3DS8x.translationTableBase
+                                    : hwInfoOfProcess(process)->O3DSPre8x.translationTableBase)
+                        ) & ~((1 << (14 - TTBCR)) - 1);
+                break;
+            default:
+                res = 0xD8E007ED; // invalid enum value
+                break;
+        }
+
+        ((KAutoObject *)process)->vtable->DecrementReferenceCount((KAutoObject *)process);
+    }
+
+    else
+        res = GetProcessInfo(out, processHandle, type);
+
+    return res;
+}

k11_extension/source/svc/GetSystemInfo.c

@@ -0,0 +1,140 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "svc/GetSystemInfo.h"
+#include "utils.h"
+#include "ipc.h"
+#include "synchronization.h"
+
+Result GetSystemInfoHook(s64 *out, s32 type, s32 param)
+{
+    Result res = 0;
+
+    switch(type)
+    {
+        case 0x10000:
+        {
+            switch(param)
+            {
+                case 0:
+                    *out = SYSTEM_VERSION(cfwInfo.versionMajor, cfwInfo.versionMinor, cfwInfo.versionBuild);
+                    break;
+                case 1:
+                    *out = cfwInfo.commitHash;
+                    break;
+                case 2:
+                    *out = (cfwInfo.configFormatVersionMajor << 16) | cfwInfo.configFormatVersionMinor;
+                    break;
+                case 3:
+                    *out = cfwInfo.config;
+                    break;
+                case 4:
+                    *out = cfwInfo.multiConfig;
+                    break;
+                case 5:
+                    *out = cfwInfo.bootConfig;
+                    break;
+
+                case 0x100:
+                    *out = (s64)cfwInfo.hbldr3dsxTitleId;
+                    break;
+                case 0x101:
+                    *out = cfwInfo.rosalinaMenuCombo;
+                    break;
+
+                case 0x200: // isRelease
+                    *out = cfwInfo.flags & 1;
+                    break;
+                case 0x201: // isN3DS
+                    *out = (cfwInfo.flags >> 4) & 1;
+                    break;
+                case 0x202: // isSafeMode
+                    *out = (cfwInfo.flags >> 5) & 1;
+                    break;
+                case 0x203: // isSdMode
+                    *out = (cfwInfo.flags >> 6) & 1;
+                    break;
+                default:
+                    res = 0xF8C007F4; // not implemented
+                    break;
+            }
+            break;
+        }
+
+        case 0x10001: // N3DS-related info
+        {
+            if(isN3DS)
+            {
+                switch(param)
+                {
+                    case 0: // current clock rate
+                        *out = (((CFG11_MPCORE_CLKCNT >> 1) & 3) + 1) * 268;
+                        break;
+                    case 1: // higher clock rate
+                        *out = (((CFG11_MPCORE_CFG >> 2) & 1) + 2) * 268;
+                        break;
+                    case 2: // L2C enabled status
+                        *out = L2C_CTRL & 1;
+                        break;
+                    default:
+                        res = 0xF8C007F4;
+                        break;
+                }
+            }
+            else
+                res = 0xF8C007F4;
+
+            break;
+        }
+
+        case 0x10002: // MMU config (cached values from booting)
+        {
+            switch(param)
+            {
+                case 0:
+                    *out = TTBCR;
+                    break;
+
+                default:
+                {
+                    if((u32)param <= getNumberOfCores())
+                        *out = L1MMUTableAddrs[param - 1];
+                    else
+                        res = 0xF8C007F4;
+
+                    break;
+                }
+            }
+
+            break;
+        }
+        default:
+            GetSystemInfo(out, type, param);
+            break;
+    }
+
+    return res;
+}

k11_extension/source/svc/GetThreadInfo.c

@@ -0,0 +1,60 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "svc/GetThreadInfo.h"
+#include "memory.h"
+
+Result GetThreadInfoHook(s64 *out, Handle threadHandle, u32 type)
+{
+    Result res = 0;
+
+    if(type == 0x10000) // Get TLS
+    {
+        KProcessHandleTable *handleTable = handleTableOfProcess(currentCoreContext->objectContext.currentProcess);
+        KThread *thread;
+
+        if(threadHandle == CUR_THREAD_HANDLE)
+        {
+            thread = currentCoreContext->objectContext.currentThread;
+            KAutoObject__AddReference(&thread->syncObject.autoObject);
+        }
+        else
+            thread = KProcessHandleTable__ToKThread(handleTable, threadHandle);
+
+        if(thread == NULL)
+            return 0xD8E007F7; // invalid handle
+
+        *out = (s64)(u64)(u32)thread->threadLocalStorage;
+
+        KAutoObject *obj = (KAutoObject *)thread;
+        obj->vtable->DecrementReferenceCount(obj);
+    }
+
+    else
+        res = GetThreadInfo(out, threadHandle, type);
+
+    return res;
+}

k11_extension/source/svc/KernelSetState.c

@@ -0,0 +1,154 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "svc/KernelSetState.h"
+#include "synchronization.h"
+#include "ipc.h"
+#include "memory.h"
+
+#define MAX_DEBUG 3
+
+static u32 nbEnabled = 0;
+static u32 maskedPids[MAX_DEBUG];
+static u32 masks[MAX_DEBUG][8] = {0};
+
+bool shouldSignalSyscallDebugEvent(KProcess *process, u8 svcId)
+{
+    u32 pid = idOfProcess(process);
+    u32 id;
+    for(id = 0; id < nbEnabled && maskedPids[id] != pid; id++);
+    if(id == MAX_DEBUG)
+        return false;
+    else
+        return ((masks[id][svcId / 32] >> (31 - (svcId % 32))) & 1) != 0;
+}
+
+Result SetSyscallDebugEventMask(u32 pid, bool enable, const u32 *mask)
+{
+    static KRecursiveLock syscallDebugEventMaskLock = { NULL };
+
+    u32 tmpMask[8];
+    if(enable && nbEnabled == MAX_DEBUG)
+        return 0xC86018FF; // Out of resource (255)
+
+    if(enable && !usrToKernelMemcpy8(&tmpMask, mask, 32))
+        return 0xE0E01BF5;
+
+    KRecursiveLock__Lock(criticalSectionLock);
+    KRecursiveLock__Lock(&syscallDebugEventMaskLock);
+
+    if(enable)
+    {
+        maskedPids[nbEnabled] = pid;
+        memcpy(&masks[nbEnabled++], tmpMask, 32);
+    }
+    else
+    {
+        u32 id;
+        for(id = 0; id < nbEnabled && maskedPids[id] != pid; id++);
+        if(id == nbEnabled)
+        {
+                KRecursiveLock__Unlock(&syscallDebugEventMaskLock);
+                KRecursiveLock__Unlock(criticalSectionLock);
+                return 0xE0E01BFD; // out of range (it's not fully technically correct but meh)
+        }
+
+        for(u32 i = id; i < nbEnabled - 1; i++)
+        {
+            maskedPids[i] = maskedPids[i + 1];
+            memcpy(&masks[i], &masks[i + 1], 32);
+        }
+        maskedPids[--nbEnabled] = 0;
+        memset(&masks[nbEnabled], 0, 32);
+    }
+
+    KRecursiveLock__Unlock(&syscallDebugEventMaskLock);
+    KRecursiveLock__Unlock(criticalSectionLock);
+    return 0;
+}
+
+Result KernelSetStateHook(u32 type, u32 varg1, u32 varg2, u32 varg3)
+{
+    Result res = 0;
+
+    switch(type)
+    {
+        case 0x10000:
+        {
+            do
+            {
+                __ldrex((s32 *)&rosalinaState);
+            }
+            while(__strex((s32 *)&rosalinaState, (s32)(rosalinaState ^ varg1)));
+
+            if(rosalinaState & 2)
+                hasStartedRosalinaNetworkFuncsOnce = true;
+
+            if(rosalinaState & 1)
+                rosalinaLockAllThreads();
+            else if(varg1 & 1)
+                rosalinaUnlockAllThreads();
+
+            break;
+        }
+        case 0x10001:
+        {
+            KRecursiveLock__Lock(criticalSectionLock);
+            KRecursiveLock__Lock(&processLangemuLock);
+
+            u32 i;
+            for(i = 0; i < 0x40 && processLangemuAttributes[i].titleId != 0ULL; i++);
+            if(i < 0x40)
+            {
+                processLangemuAttributes[i].titleId = ((u64)varg3 << 32) | (u32)varg2;
+                processLangemuAttributes[i].state = (u8)(varg1 >> 24);
+                processLangemuAttributes[i].country = (u8)(varg1 >> 16);
+                processLangemuAttributes[i].language = (u8)(varg1 >> 8);
+                processLangemuAttributes[i].region = (u8)((varg1 >> 4) & 0xf);
+                processLangemuAttributes[i].mask = (u8)(varg1 & 0xf);
+            }
+            else
+                res = 0xD8609013;
+
+            KRecursiveLock__Unlock(&processLangemuLock);
+            KRecursiveLock__Unlock(criticalSectionLock);
+            break;
+        }
+        case 0x10002:
+        {
+            res = SetSyscallDebugEventMask(varg1, (bool)varg2, (const u32 *)varg3);
+            break;
+        }
+
+        default:
+        {
+            res = KernelSetState(type, varg1, varg2, varg3);
+            break;
+        }
+    }
+
+    return res;
+}

k11_extension/source/svc/MapProcessMemoryEx.c

@@ -0,0 +1,44 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "svc/MapProcessMemoryEx.h"
+
+Result MapProcessMemoryEx(Handle processHandle, void *dst, void *src, u32 size)
+{
+    KProcessHandleTable *handleTable = handleTableOfProcess(currentCoreContext->objectContext.currentProcess);
+    KProcessHwInfo *currentHwInfo = hwInfoOfProcess(currentCoreContext->objectContext.currentProcess);
+    KProcess *process = KProcessHandleTable__ToKProcess(handleTable, processHandle);
+
+    if(process == NULL)
+        return 0xD8E007F7;
+
+    Result res = KProcessHwInfo__MapProcessMemory(currentHwInfo, hwInfoOfProcess(process), dst, src, size >> 12);
+
+    KAutoObject *obj = (KAutoObject *)process;
+    obj->vtable->DecrementReferenceCount(obj);
+
+    return res;
+}

k11_extension/source/svc/SendSyncRequest.c

@@ -0,0 +1,237 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "svc/SendSyncRequest.h"
+#include "memory.h"
+#include "ipc.h"
+
+Result SendSyncRequestHook(Handle handle)
+{
+    KProcessHandleTable *handleTable = handleTableOfProcess(currentCoreContext->objectContext.currentProcess);
+    KClientSession *clientSession = (KClientSession *)KProcessHandleTable__ToKAutoObject(handleTable, handle);
+
+    u32 *cmdbuf = (u32 *)((u8 *)currentCoreContext->objectContext.currentThread->threadLocalStorage + 0x80);
+    bool skip = false;
+    Result res = 0;
+
+    bool isValidClientSession = false;
+    if(clientSession != NULL && kernelVersion >= SYSTEM_VERSION(2, 46, 0))
+    {
+        KClassToken tok;
+        clientSession->syncObject.autoObject.vtable->GetClassToken(&tok, &clientSession->syncObject.autoObject);
+        isValidClientSession = tok.flags == 0xA5;
+    }
+    else if(clientSession != NULL) // not the exact same test but it should work
+        isValidClientSession = strcmp(clientSession->syncObject.autoObject.vtable->GetClassName(&clientSession->syncObject.autoObject), "KClientSession") == 0;
+
+    if(isValidClientSession)
+    {
+        switch (cmdbuf[0])
+        {
+            case 0x10042:
+            {
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession);
+                if(info != NULL && strcmp(info->name, "srv:pm") == 0)
+                {
+                    res = doPublishToProcessHook(handle, cmdbuf);
+                    skip = true;
+                }
+                else if(info != NULL && strcmp(info->name, "ndm:u") == 0 && hasStartedRosalinaNetworkFuncsOnce)
+                {
+                    cmdbuf[0] = 0x10040;
+                    cmdbuf[1] = 0;
+                    skip = true;
+                }
+
+                break;
+            }
+
+            case 0x10082:
+            {
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession);
+                if(info != NULL && (strcmp(info->name, "cfg:u") == 0 || strcmp(info->name, "cfg:s") == 0 || strcmp(info->name, "cfg:i") == 0)) // GetConfigInfoBlk2
+                    skip = doLangEmu(&res, cmdbuf);
+
+                break;
+            }
+
+            case 0x10800:
+            {
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession);
+                if(info != NULL && strcmp(info->name, "err:f") == 0) // Throw
+                    skip = doErrfThrowHook(cmdbuf);
+
+                break;
+            }
+
+            case 0x20000:
+            {
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession);
+                if(info != NULL && (strcmp(info->name, "cfg:u") == 0 || strcmp(info->name, "cfg:s") == 0 || strcmp(info->name, "cfg:i") == 0)) // SecureInfoGetRegion
+                    skip = doLangEmu(&res, cmdbuf);
+
+                break;
+            }
+
+            case 0x20002:
+            {
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession);
+                if(info != NULL && strcmp(info->name, "ndm:u") == 0 && hasStartedRosalinaNetworkFuncsOnce)
+                {
+                    cmdbuf[0] = 0x20040;
+                    cmdbuf[1] = 0;
+                    skip = true;
+                }
+
+                break;
+            }
+
+            case 0x50100:
+            {
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession);
+                if(info != NULL && strcmp(info->name, "srv:") == 0)
+                {
+                    char name[9] = { 0 };
+                    memcpy(name, cmdbuf + 1, 8);
+
+                    skip = true;
+                    res = SendSyncRequest(handle);
+                    if(res == 0)
+                    {
+                        KClientSession *outClientSession;
+
+                        outClientSession = (KClientSession *)KProcessHandleTable__ToKAutoObject(handleTable, (Handle)cmdbuf[3]);
+                        if(outClientSession != NULL)
+                        {
+                            SessionInfo_Add(outClientSession->parentSession, name);
+                            outClientSession->syncObject.autoObject.vtable->DecrementReferenceCount(&outClientSession->syncObject.autoObject);
+                        }
+                    }
+                }
+
+                break;
+            }
+
+            case 0x80040:
+            {
+                if(!hasStartedRosalinaNetworkFuncsOnce)
+                    break;
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession);
+                skip = info != NULL && strcmp(info->name, "ndm:u") == 0; // SuspendScheduler
+                if(skip)
+                    cmdbuf[1] = 0;
+                break;
+            }
+
+            case 0x90000:
+            {
+                if(!hasStartedRosalinaNetworkFuncsOnce)
+                    break;
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession);
+                if(info != NULL && strcmp(info->name, "ndm:u") == 0) // ResumeScheduler
+                {
+                    cmdbuf[0] = 0x90040;
+                    cmdbuf[1] = 0;
+                    skip = true;
+                }
+                break;
+            }
+
+            case 0x4010042:
+            {
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession);
+                if(info != NULL && strcmp(info->name, "srv:pm") == 0)
+                {
+                    res = doPublishToProcessHook(handle, cmdbuf);
+                    skip = true;
+                }
+
+                break;
+            }
+
+            case 0x4010082:
+            {
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession);
+                if(info != NULL && (strcmp(info->name, "cfg:s") == 0 || strcmp(info->name, "cfg:i") == 0)) // GetConfigInfoBlk4
+                    skip = doLangEmu(&res, cmdbuf);
+
+                break;
+            }
+
+            case 0x4020082:
+            {
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession);
+                if(info != NULL && (strcmp(info->name, "cfg:s") == 0 || strcmp(info->name, "cfg:i") == 0)) // GetConfigInfoBlk8
+                    skip = doLangEmu(&res, cmdbuf);
+
+                break;
+            }
+
+            case 0x8010082:
+            {
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession);
+                if(info != NULL && (strcmp(info->name, "cfg:s") == 0 || strcmp(info->name, "cfg:i") == 0)) // GetConfigInfoBlk4
+                    skip = doLangEmu(&res, cmdbuf);
+
+                break;
+            }
+
+            case 0x8020082:
+            {
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession);
+                if(info != NULL && strcmp(info->name, "cfg:i") == 0) // GetConfigInfoBlk8
+                    skip = doLangEmu(&res, cmdbuf);
+
+                break;
+            }
+
+            case 0x4060000:
+            {
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession); // SecureInfoGetRegion
+                if(info != NULL && (strcmp(info->name, "cfg:s") == 0 || strcmp(info->name, "cfg:i") == 0))
+                    skip = doLangEmu(&res, cmdbuf);
+
+                break;
+            }
+
+            case 0x8160000:
+            {
+                SessionInfo *info = SessionInfo_Lookup(clientSession->parentSession); // SecureInfoGetRegion
+                if(info != NULL && strcmp(info->name, "cfg:i") == 0)
+                    skip = doLangEmu(&res, cmdbuf);
+
+                break;
+            }
+        }
+    }
+
+    if(clientSession != NULL)
+        clientSession->syncObject.autoObject.vtable->DecrementReferenceCount(&clientSession->syncObject.autoObject);
+
+    res = skip ? res : SendSyncRequest(handle);
+
+    return res;
+}

k11_extension/source/svc/SetGpuProt.c

@@ -0,0 +1,32 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "svc/SetGpuProt.h"
+
+Result SetGpuProt(bool prot UNUSED)
+{
+    return 0;
+}

k11_extension/source/svc/SetWifiEnabled.c

@@ -0,0 +1,35 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "svc/SetWifiEnabled.h"
+
+void SetWifiEnabled(bool enable)
+{
+    if(enable)
+        CFG11_WIFICNT |= 1;
+    else
+        CFG11_WIFICNT &= ~1;
+}

k11_extension/source/svc/TranslateHandle.c

@@ -0,0 +1,70 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "svc/TranslateHandle.h"
+#include "memory.h"
+
+Result TranslateHandle(u32 *outKAddr, char *outClassName, Handle handle)
+{
+    KProcessHandleTable *handleTable = handleTableOfProcess(currentCoreContext->objectContext.currentProcess);
+    KAutoObject *obj;
+    Result res;
+    const char *name;
+
+    if(handle == CUR_THREAD_HANDLE)
+    {
+        obj = (KAutoObject *)currentCoreContext->objectContext.currentProcess;
+        KAutoObject__AddReference(obj);
+    }
+    else if(handle == CUR_PROCESS_HANDLE)
+    {
+        obj = (KAutoObject *)currentCoreContext->objectContext.currentProcess;
+        KAutoObject__AddReference(obj);
+    }
+    else
+        obj = KProcessHandleTable__ToKAutoObject(handleTable, handle);
+
+    if(obj == NULL)
+        return 0xD8E007F7; // invalid handle
+
+    if(kernelVersion >= SYSTEM_VERSION(2, 46, 0))
+    {
+        KClassToken tok;
+        obj->vtable->GetClassToken(&tok, obj);
+        name = tok.name;
+    }
+    else
+        name = obj->vtable->GetClassName(obj);
+
+    if(name == NULL) // shouldn't happen
+        name = "KAutoObject";
+
+    *outKAddr = (u32)obj;
+    res = kernelToUsrMemcpy8(outClassName, name, strlen(name) + 1) ? 0 : 0xE0E01BF5;
+
+    obj->vtable->DecrementReferenceCount(obj);
+    return res;
+}

k11_extension/source/svc/UnmapProcessMemoryEx.c

@@ -0,0 +1,43 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "globals.h"
+#include "svc/MapProcessMemoryEx.h"
+
+Result UnmapProcessMemoryEx(Handle processHandle, void *dst, u32 size)
+{
+    if(kernelVersion < SYSTEM_VERSION(2, 37, 0)) // < 6.x
+        return UnmapProcessMemory(processHandle, dst, size); // equivalent when size <= 64MB
+
+    KProcessHwInfo *currentHwInfo = hwInfoOfProcess(currentCoreContext->objectContext.currentProcess);
+
+    Result res = KProcessHwInfo__UnmapProcessMemory(currentHwInfo, dst, size >> 12);
+
+    invalidateEntireInstructionCache();
+    flushEntireDataCache();
+
+    return res;
+}

k11_extension/source/svc/wrappers.s

@@ -0,0 +1,85 @@
+@   This file is part of Luma3DS
+@   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+@
+@   This program is free software: you can redistribute it and/or modify
+@   it under the terms of the GNU General Public License as published by
+@   the Free Software Foundation, either version 3 of the License, or
+@   (at your option) any later version.
+@
+@   This program is distributed in the hope that it will be useful,
+@   but WITHOUT ANY WARRANTY; without even the implied warranty of
+@   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+@   GNU General Public License for more details.
+@
+@   You should have received a copy of the GNU General Public License
+@   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+@
+@   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+@       * Requiring preservation of specified reasonable legal notices or
+@         author attributions in that material or in the Appropriate Legal
+@         Notices displayed by works containing it.
+@       * Prohibiting misrepresentation of the origin of that material,
+@         or requiring that modified versions of such material be marked in
+@         reasonable ways as different from the original version.
+
+.text
+.arm
+.balign 4
+
+.macro GEN_GETINFO_WRAPPER, name
+    .global Get\name\()InfoHookWrapper
+    .type   Get\name\()InfoHookWrapper, %function
+    Get\name\()InfoHookWrapper:
+        push {r12, lr}
+        sub sp, #8
+        mov r0, sp
+        bl Get\name\()InfoHook
+        pop {r1, r2, r12, pc}
+.endm
+
+GEN_GETINFO_WRAPPER System
+GEN_GETINFO_WRAPPER Process
+GEN_GETINFO_WRAPPER Thread
+
+.macro GEN_OUT1_WRAPPER, name
+    .global \name\()Wrapper
+    .type   \name\()Wrapper, %function
+    \name\()Wrapper:
+        push {lr}
+        sub sp, #4
+        mov r0, sp
+        bl \name
+        pop {r1, pc}
+.endm
+
+GEN_OUT1_WRAPPER ConnectToPortHook
+GEN_OUT1_WRAPPER CopyHandle
+GEN_OUT1_WRAPPER TranslateHandle
+
+.global ControlMemoryHookWrapper
+.type   ControlMemoryHookWrapper, %function
+ControlMemoryHookWrapper:
+    push {lr}
+    sub sp, #12
+    stmia sp, {r0, r4}
+    add r0, sp, #8
+    bl ControlMemoryHook
+    ldr r1, [sp, #8]
+    add sp, #12
+    pop {pc}
+
+.global ControlMemoryEx
+.type   ControlMemoryEx, %function
+ControlMemoryEx:
+    push {lr}
+    sub sp, #8
+    cmp r5, #0
+    movne r5, #1
+    push {r0, r4, r5}
+    add r0, sp, #12
+    ldr r12, =ControlMemory
+    ldr r12, [r12]
+    blx r12
+    ldr r1, [sp, #12]
+    add sp, #20
+    pop {pc}

k11_extension/source/svcHandler.s

@@ -0,0 +1,125 @@
+@   This file is part of Luma3DS
+@   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+@
+@   This program is free software: you can redistribute it and/or modify
+@   it under the terms of the GNU General Public License as published by
+@   the Free Software Foundation, either version 3 of the License, or
+@   (at your option) any later version.
+@
+@   This program is distributed in the hope that it will be useful,
+@   but WITHOUT ANY WARRANTY; without even the implied warranty of
+@   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+@   GNU General Public License for more details.
+@
+@   You should have received a copy of the GNU General Public License
+@   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+@
+@   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+@       * Requiring preservation of specified reasonable legal notices or
+@         author attributions in that material or in the Appropriate Legal
+@         Notices displayed by works containing it.
+@       * Prohibiting misrepresentation of the origin of that material,
+@         or requiring that modified versions of such material be marked in
+@         reasonable ways as different from the original version.
+
+.text
+.arm
+.balign 4
+
+.global svcHandler
+.type   svcHandler, %function
+svcHandler:
+    srsdb sp!, #0x13
+    stmfd sp, {r8-r11, sp, lr}^
+    sub sp, #0x18
+    mrs r9, spsr
+    ands r9, #0x20
+    ldrneb r9, [lr, #-2]
+    ldreqb r9, [lr, #-4]
+
+    mov lr, #0              @ do stuff as if the "allow debug" flag is always set
+    push {r0-r7, r12, lr}
+    mov r10, #1
+    strb r9, [sp, #0x58+3]  @ page end - 0xb8 + 3: svc being handled
+    strb r10, [sp, #0x58+1] @ page end - 0xb8 + 1: "allow debug" flag
+
+    @ sp = page end - 0x110
+    add r0, sp, #0x110       @ page end
+    bl svcHook
+    cpsid i
+    mov r8, r0
+    ldmfd sp, {r0-r7, r12, lr}
+    cmp r8, #0
+    beq _fallback            @ invalid svc, or svc 0xff (stop point)
+
+    _handled_svc:            @ unused label, just here for formatting
+        push {r0-r12, lr}
+        add r0, sp, #0x148
+        cpsie i
+        bl signalSvcEntry
+        cpsid i
+        pop {r0-r12, lr}
+
+        cpsie i
+        blx r8
+        cpsid i
+
+        ldrb lr, [sp, #0x58+0] @ page end - 0xb8 + 0: scheduling flags
+        b _fallback_end
+
+    _fallback:
+        mov r0, r9
+        ldr r8, =svcFallbackHandler
+        ldr r8, [r8]
+        blx r8
+        mov lr, #0
+
+    _fallback_end:
+
+    ldr r8, [sp, #0x24]     @ page_end - 0xec: saved lr (see above) : should reload regs
+    cmp r8, #0
+    addeq sp, #0x24
+    popne {r0-r7, r12}
+    add sp, #4
+
+    cmp r9, #0xff
+    beq _no_signal_return
+
+    push {r0-r7, r12, lr}
+    add r0, sp, #0x110      @ page end
+    cpsie i
+    bl signalSvcReturn
+    cpsid i
+    pop {r0-r7, r12}
+    add sp, #4
+
+    _no_signal_return:
+
+    mov r8, #0
+    strb r8, [sp, #0x30+3]  @ page_end - 0xb8 + 3: svc being handled
+
+    _svc_finished:
+
+    ldmfd sp, {r8-r11, sp, lr}^
+    cmp lr, #0
+    bne _postprocess_svc
+
+    _svc_return:
+        add sp, #0x18
+        rfefd sp!           @ return to user mode
+
+    _postprocess_svc:
+        mov lr, #0
+        push {r0-r7, r12, lr}
+
+        push {r0-r3}
+        bl postprocessSvc
+        pop {r0-r3}
+
+        ldrb lr, [sp, #0x58+0] @ page end - 0xb8 + 0: scheduling flags
+        ldr r8, [sp, #0x24]    @ page_end - 0xec: saved lr (see above) : should reload regs
+        cmp r8, #0
+        addeq sp, #0x24
+        popne {r0-r7, r12}
+        add sp, #4
+        b _svc_finished

k11_extension/source/synchronization.c

@@ -0,0 +1,160 @@
+/*
+*   This file is part of Luma3DS
+*   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+*
+*   This program is free software: you can redistribute it and/or modify
+*   it under the terms of the GNU General Public License as published by
+*   the Free Software Foundation, either version 3 of the License, or
+*   (at your option) any later version.
+*
+*   This program is distributed in the hope that it will be useful,
+*   but WITHOUT ANY WARRANTY; without even the implied warranty of
+*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+*   GNU General Public License for more details.
+*
+*   You should have received a copy of the GNU General Public License
+*   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*
+*   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+*       * Requiring preservation of specified reasonable legal notices or
+*         author attributions in that material or in the Appropriate Legal
+*         Notices displayed by works containing it.
+*       * Prohibiting misrepresentation of the origin of that material,
+*         or requiring that modified versions of such material be marked in
+*         reasonable ways as different from the original version.
+*/
+
+#include "synchronization.h"
+#include "utils.h"
+#include "kernel.h"
+#include "globals.h"
+
+extern SGI0Handler_t SGI0Handler;
+
+void executeFunctionOnCores(SGI0Handler_t handler, u8 targetList, u8 targetListFilter)
+{
+    u32 coreID = getCurrentCoreID();
+    SGI0Handler = handler;
+
+    if(targetListFilter == 0 && (targetListFilter & (1 << coreID)) != 0)
+        __enable_irq(); // make sure interrupts aren't masked
+    MPCORE_GID_SGI = (targetListFilter << 24) | (targetList << 16) | 0;
+}
+
+void KScheduler__TriggerCrossCoreInterrupt(KScheduler *this)
+{
+    this->triggerCrossCoreInterrupt = false;
+    for(s16 i = 0; i < (s16)getNumberOfCores(); i++)
+    {
+        if(this->coreNumber != i)
+            MPCORE_GID_SGI = (1 << (16 + i)) | 8;
+    }
+}
+
+void KThread__DebugReschedule(KThread *this, bool lock)
+{
+    KRecursiveLock__Lock(criticalSectionLock);
+
+    u32 oldSchedulingMask = this->schedulingMask;
+    if(lock) // the original k11 function discards the other flags
+        this->schedulingMask |= 0x80;
+    else
+        this->schedulingMask &= ~0x80;
+
+    KScheduler__AdjustThread(currentCoreContext->objectContext.currentScheduler, this, oldSchedulingMask);
+
+    KRecursiveLock__Unlock(criticalSectionLock);
+}
+
+bool rosalinaThreadLockPredicate(KThread *thread)
+{
+    KProcess *process = thread->ownerProcess;
+    if(process == NULL)
+        return false;
+
+    u64 titleId = codeSetOfProcess(process)->titleId;
+    u32 highTitleId = (u32)(titleId >> 32), lowTitleId = (u32)titleId;
+    return
+        ((rosalinaState & 1) && idOfProcess(process) >= nbSection0Modules &&
+        (highTitleId != 0x00040130 || (highTitleId == 0x00040130 && (lowTitleId == 0x1A02 || lowTitleId == 0x1C02))));
+}
+
+void rosalinaRescheduleThread(KThread *thread, bool lock)
+{
+    KRecursiveLock__Lock(criticalSectionLock);
+
+    u32 oldSchedulingMask = thread->schedulingMask;
+    if(lock)
+        thread->schedulingMask |= 0x40;
+    else
+        thread->schedulingMask &= ~0x40;
+
+    KScheduler__AdjustThread(currentCoreContext->objectContext.currentScheduler, thread, oldSchedulingMask);
+
+    KRecursiveLock__Unlock(criticalSectionLock);
+}
+
+void rosalinaLockThread(KThread *thread)
+{
+    KThread *syncThread = synchronizationMutex->owner;
+
+    if(syncThread == NULL || syncThread != thread)
+        rosalinaRescheduleThread(thread, true);
+}
+
+void rosalinaLockAllThreads(void)
+{
+    bool currentThreadsFound = false;
+
+    KRecursiveLock__Lock(criticalSectionLock);
+    for(KLinkedListNode *node = threadList->list.nodes.first; node != (KLinkedListNode *)&threadList->list.nodes; node = node->next)
+    {
+        KThread *thread = (KThread *)node->key;
+        if(!rosalinaThreadLockPredicate(thread))
+            continue;
+        if(thread == coreCtxs[thread->coreId].objectContext.currentThread)
+            currentThreadsFound = true;
+        else
+            rosalinaLockThread(thread);
+    }
+
+    if(currentThreadsFound)
+    {
+        for(KLinkedListNode *node = threadList->list.nodes.first; node != (KLinkedListNode *)&threadList->list.nodes; node = node->next)
+        {
+            KThread *thread = (KThread *)node->key;
+            if(!rosalinaThreadLockPredicate(thread))
+                continue;
+            if(!(thread->schedulingMask & 0x40))
+            {
+                rosalinaLockThread(thread);
+                KRecursiveLock__Lock(criticalSectionLock);
+                if(thread->coreId != getCurrentCoreID())
+                {
+                    u32 cpsr = __get_cpsr();
+                    __disable_irq();
+                    coreCtxs[thread->coreId].objectContext.currentScheduler->triggerCrossCoreInterrupt = true;
+                    currentCoreContext->objectContext.currentScheduler->triggerCrossCoreInterrupt = true;
+                    __set_cpsr_cx(cpsr);
+                }
+                KRecursiveLock__Unlock(criticalSectionLock);
+            }
+        }
+        KScheduler__TriggerCrossCoreInterrupt(currentCoreContext->objectContext.currentScheduler);
+    }
+    KRecursiveLock__Unlock(criticalSectionLock);
+}
+
+void rosalinaUnlockAllThreads(void)
+{
+    for(KLinkedListNode *node = threadList->list.nodes.first; node != (KLinkedListNode *)&threadList->list.nodes; node = node->next)
+    {
+        KThread *thread = (KThread *)node->key;
+
+        if((thread->schedulingMask & 0xF) == 2) // thread is terminating
+            continue;
+
+        if(thread->schedulingMask & 0x40)
+            rosalinaRescheduleThread(thread, false);
+    }
+}

k11_extension/source/utils.s

@@ -0,0 +1,139 @@
+@   This file is part of Luma3DS
+@   Copyright (C) 2016-2017 Aurora Wright, TuxSH
+@
+@   This program is free software: you can redistribute it and/or modify
+@   it under the terms of the GNU General Public License as published by
+@   the Free Software Foundation, either version 3 of the License, or
+@   (at your option) any later version.
+@
+@   This program is distributed in the hope that it will be useful,
+@   but WITHOUT ANY WARRANTY; without even the implied warranty of
+@   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+@   GNU General Public License for more details.
+@
+@   You should have received a copy of the GNU General Public License
+@   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+@
+@   Additional Terms 7.b and 7.c of GPLv3 apply to this file:
+@       * Requiring preservation of specified reasonable legal notices or
+@         author attributions in that material or in the Appropriate Legal
+@         Notices displayed by works containing it.
+@       * Prohibiting misrepresentation of the origin of that material,
+@         or requiring that modified versions of such material be marked in
+@         reasonable ways as different from the original version.
+
+.text
+.arm
+.balign 4
+
+.global convertVAToPA
+.type   convertVAToPA, %function
+convertVAToPA:
+    mov r3, r1
+    mov r1, #0xf00
+    orr r1, #0xff
+    and r2, r0, r1
+    bic r0, r1
+    cmp r3, #1
+    beq _convertVAToPA_write_check
+    _convertVAToPA_read_check:
+        mcr p15, 0, r0, c7, c8, 0    @ VA to PA translation with privileged read permission check
+        b _convertVAToPA_end_check
+    _convertVAToPA_write_check:
+        mcr p15, 0, r0, c7, c8, 1    @ VA to PA translation with privileged write permission check
+    _convertVAToPA_end_check:
+    mrc p15, 0, r0, c7, c4, 0    @ read PA register
+    tst r0, #1                   @ failure bit
+    bic r0, r1
+    addeq r0, r2
+    movne r0, #0
+    bx lr
+
+.global flushEntireDataCache
+.type   flushEntireDataCache, %function
+flushEntireDataCache:
+    mvn r1, #0              @ this is translated to a full cache flush
+    ldr r12, =flushDataCacheRange
+    ldr r12, [r12]
+    bx r12
+
+.global invalidateEntireInstructionCache
+.type   invalidateEntireInstructionCache, %function
+invalidateEntireInstructionCache:
+    mvn r1, #0              @ this is translated to a full cache flush
+    ldr r12, =invalidateInstructionCacheRange
+    ldr r12, [r12]
+    bx r12
+
+.global KObjectMutex__Acquire
+.type   KObjectMutex__Acquire, %function
+KObjectMutex__Acquire:
+    ldr r1, =0xFFFF9000     @ current thread addr
+
+    ldr r1, [r1]
+    ldrex r2, [r0]
+    cmp r2, #0
+    strexeq r3, r1, [r0]    @ store current thread
+    strexne r3, r2, [r0]    @ stored thread != NULL, no change
+    cmpeq r3, #0
+    bxeq lr
+
+    ldr r12, =KObjectMutex__WaitAndAcquire
+    ldr r12, [r12]
+    bx r12
+
+.global KObjectMutex__Release
+.type   KObjectMutex__Release, %function
+KObjectMutex__Release:
+    mov r1, #0
+    str r1, [r0]
+    ldrh r1, [r0, #4]
+    cmp r1, #0
+    bxle lr
+
+    ldr r12, =KObjectMutex__ErrorOccured
+    ldr r12, [r12]
+    blx r12
+    bx lr
+
+.global safecpy
+.type   safecpy, %function
+safecpy:
+    push {r4, lr}
+    mov r3, #0
+    movs r12, #1
+
+    _safecpy_loop:
+        ldrb r4, [r1, r3]
+        cmp r12, #0
+        beq _safecpy_loop_end
+        strb r4, [r0, r3]
+        add r3, #1
+        cmp r3, r2
+        blo _safecpy_loop
+
+    _safecpy_loop_end:
+    mov r0, r3
+    pop {r4, pc}
+
+_safecpy_end:
+
+.section .rodata
+
+.global safecpy_sz
+safecpy_sz: .word _safecpy_end - safecpy
+
+.bss
+.balign 4
+
+.global SGI0Handler
+SGI0Handler: .word 0  @ see synchronization.c
+
+.balign 4
+
+.section .data
+.balign 4
+
+_customInterruptEventObj: .word SGI0Handler
+.global customInterruptEvent
+customInterruptEvent: .word _customInterruptEventObj

linker.ld

@@ -4,7 +4,7 @@ OUTPUT_ARCH(arm)
 ENTRY(_start)
 SECTIONS
 {
-    . = 0x23F00000;
+    . = 0x08006000;
 
     .text       : ALIGN(4) { *(.text.start) *(.text*); . = ALIGN(4); }
     .rodata     : ALIGN(4) { *(.rodata*); . = ALIGN(4); }

patches/k11modules.s

@@ -1,105 +0,0 @@
-;
-;   This file is part of Luma3DS
-;   Copyright (C) 2016 Aurora Wright, TuxSH
-;
-;   This program is free software: you can redistribute it and/or modify
-;   it under the terms of the GNU General Public License as published by
-;   the Free Software Foundation, either version 3 of the License, or
-;   (at your option) any later version.
-;
-;   This program is distributed in the hope that it will be useful,
-;   but WITHOUT ANY WARRANTY; without even the implied warranty of
-;   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-;   GNU General Public License for more details.
-;
-;   You should have received a copy of the GNU General Public License
-;   along with this program.  If not, see <http://www.gnu.org/licenses/>.
-;
-;   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-;   reasonable legal notices or author attributions in that material or in the Appropriate Legal
-;   Notices displayed by works containing it.
-;
-
-; Code originally from Subv
-
-.arm.little
-
-.create "build/k11modules.bin", 0
-.arm
-    ; This code searches the sm module for a specific byte pattern and patches some of the instructions
-    ; in the code to disable service access checks when calling srv:GetServiceHandle
-
-    ; It also searches the fs module for archive access check code
-
-    ; Save the registers we'll be using
-    ; Register contents:
-    ; r4: Pointer to a pointer to the exheader of the current NCCH
-    ; r6: Constant 0
-    ; SP + 4: Pointer to the memory location where the NCCH text was loaded
-
-    ; Execute the instruction we overwrote in our detour
-    ldr r0, [r4]
-
-    ; Save the value of the register we use
-    push {r0-r4}
-
-    ldr r1, [sp, #24]    ; Load the .text address
-    ldr r2, [r0, #0x200] ; Load the low title id of the current NCCH
-    ldr r0, [r0, #0x18]  ; Load the size of the .text
-    add r0, r1, r0       ; Max bounds of the memory region
-
-    ldr r3, =0x1002 ; Low title id of the sm module
-    cmp r2, r3 ; Compare the low title id to the id of the sm module
-    bne fs_patch ; Skip if they're not the same
-
-    ldr r2, =0xE1A01006 ; mov r1, r6
-
-    loop:
-        cmp r0, r1
-        blo die ; Check if we didn't go past the bounds of the memory region
-        ldr r3, [r1]
-        cmp r3, r2
-        ldreqh r3, [r1, #4]
-        cmpeq r3, #5
-        addne r1, #4
-        bne loop
-
-    ; r1 now contains the start address of the pattern we found
-    ldr r0, =0xE3A00001 ; mov r0, #1
-    str r0, [r1, #8] ; Patch the bl
-    b out
-
-    fs_patch: ; patch adapted from BootNTR
-        ldr r3, =0x1102 ; Low title id of the fs module
-        cmp r2, r3 ; Compare the low title id to the id of the sm module
-        bne out ; Skip if they're not the same
-
-        ldr r2, =0x7401 ; strb r1, [r0, #16]
-        ldr r3, =0x2000 ; movs r0, #0
-
-        loop_fs:
-            cmp r0, r1
-            blo die
-            ldrh r4, [r1]
-            cmp r4, r2
-            ldreqh r4, [r1, #2]
-            cmpeq r4, r3
-            addeq r1, #8
-            addne r1, #2
-            bne loop_fs
-
-        ; r1 now contains the start address of the pattern we found
-        ldr r0, =0x2001 ; mov r0, #1
-        ldr r2, =0x4770 ; bx lr
-        strh r0, [r1]
-        strh r2, [r1, #2]
-
-    out:
-        pop {r0-r4} ; Restore the registers we used
-        bx lr ; Jump back to whoever called us
-
-    die:
-        b die
-
-.pool
-.close

patches/reboot.s

@@ -2,15 +2,17 @@
 
 .arm.little
 
-argv_addr equ 0x27FFDF00
-fname_addr equ 0x27FFDF80
-low_tid_addr equ 0x27FFDFE0
-copy_launch_stub_addr equ 0x27FFE000
+copy_launch_stub_stack_top      equ 0x01FFB800
+copy_launch_stub_stack_bottom   equ 0x01FFA800
+copy_launch_stub_addr           equ 0x01FF9000
 
-firm_addr equ 0x24000000
-firm_maxsize equ (copy_launch_stub_addr - 0x1000 - firm_addr)
+argv_addr                       equ (copy_launch_stub_stack_bottom - 0x100)
+fname_addr                      equ (copy_launch_stub_stack_bottom - 0x200)
+low_tid_addr                    equ (copy_launch_stub_stack_bottom - 0x300)
+
+firm_addr                       equ 0x20001000
+firm_maxsize                    equ 0x07FFF000
 
-arm11_entrypoint_addr equ 0x1FFFFFFC
 .create "build/reboot.bin", 0
 .arm
     ; Interesting registers and locations to keep in mind, set just before this code is ran:
@@ -53,15 +55,16 @@ arm11_entrypoint_addr equ 0x1FFFFFFC
     ldr r6, [r6, #0x28]
     blx r6
 
-    ; Copy the low TID (in UTF-16) of the wanted firm to the 5th byte of the payload
+    ; Copy the low TID (in UTF-16) of the wanted firm
     ldr r0, =low_tid_addr
     add r1, r8, #0x1A
     mov r2, #0x10
     bl memcpy16
 
+    ; Copy argv[0]
     ldr r0, =fname_addr
     adr r1, fname
-    mov r2, #42
+    mov r2, #82
     bl memcpy16
 
     ldr r0, =argv_addr
@@ -110,9 +113,6 @@ fopen: .ascii "OPEN"
 fname: .ascii "FILE"
 .endarea
 
-.pool
-nand_mount: .dcw "nand"
-
 .align 4
     kernelcode_start:
 
@@ -120,7 +120,7 @@ nand_mount: .dcw "nand"
     orr r0, #0xC0
     msr cpsr, r0
 
-    ldr sp, =0x27FFDF00
+    ldr sp, =copy_launch_stub_stack_top
 
     ldr r0, =copy_launch_stub_addr
     adr r1, copy_launch_stub
@@ -147,32 +147,27 @@ nand_mount: .dcw "nand"
         add r3, r5,lsl #5
         add r3, r5,lsl #4
         ldmia r3, {r6-r8}
-        mov r0, r7
-        add r1, r4, r6
-        mov r2, r8
-        bl memcpy32
+        cmp r8, #0
+        movne r0, r7
+        addne r1, r4, r6
+        movne r2, r8
+        blne memcpy32
         add r5, #1
-        cmp r5, #3
+        cmp r5, #4
         blo load_section_loop
 
-    ldr r0, =arm11_entrypoint_addr
-    ldr r1, [r4, #0x08]
-    str r1, [r0]
-
     mov r0, #2 ; argc
     ldr r1, =argv_addr ; argv
-    ldr r2, =0xBEEF    ; magic word
+    ldr r2, =0xBABE    ; magic word
 
-    ldr r5, =arm11_entrypoint_addr
+    mov r5, #0x20000000
     ldr r6, [r4, #0x08]
-    str r6, [r5]
+    str r6, [r5, #-4]   ; store arm11 entrypoint
 
     ldr lr, [r4, #0x0c]
     bx lr
 
     memcpy32:
-    cmp r2, #0
-    bxeq lr
     add r2, r0, r2
     copy_loop32:
         ldr r3, [r1], #4

patches/svcGetCFWInfo.s

@@ -1,48 +0,0 @@
-;
-;   This file is part of Luma3DS
-;   Copyright (C) 2016 Aurora Wright, TuxSH
-;
-;   This program is free software: you can redistribute it and/or modify
-;   it under the terms of the GNU General Public License as published by
-;   the Free Software Foundation, either version 3 of the License, or
-;   (at your option) any later version.
-;
-;   This program is distributed in the hope that it will be useful,
-;   but WITHOUT ANY WARRANTY; without even the implied warranty of
-;   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-;   GNU General Public License for more details.
-;
-;   You should have received a copy of the GNU General Public License
-;   along with this program.  If not, see <http://www.gnu.org/licenses/>.
-;
-;   Additional Terms 7.b of GPLv3 applies to this file: Requiring preservation of specified
-;   reasonable legal notices or author attributions in that material or in the Appropriate Legal
-;   Notices displayed by works containing it.
-;
-
-.arm.little
-
-.create "build/svcGetCFWInfo.bin", 0
-.arm
-
-    adr r1, infoStart
-    add r2, r0, #(infoEnd - infoStart)
-
-    loop:
-        ldrb r3, [r1], #1
-        strbt r3, [r0], #1
-        cmp r0, r2
-        blo loop
-
-    mov r0, #0
-
-    bx lr
-
-.pool
-infoStart:
-    .ascii "LUMA"   ; magic
-    .word 0         ; version
-    .word 0         ; truncated commit hash
-    .word 0         ; config
-infoEnd:
-.close