Hacking The status of Gateway and A9LH

daxtsu

Well-Known Member
Member
Joined
Jun 9, 2007
Messages
5,627
Trophies
2
XP
5,194
Country
Antarctica
I don't have a hard mod. Just taking educated risks. I used the known safe methods of getting to 2.1 (I remember the SysUpdater horror stories, and wasn't about to try the beta version of Time Machine). So the only risk I took was that the A9LH installer and NAND restorer would mess things up. GW's NAND restoration code has been solid for a long time, so this seemed unlikely. I also have Sky Blue and Sky+ laying around, so I'm maybe a bit overconfident, having every trick in the book at my disposal. I took another educated risk again, updating to 9.9 with PSMD, when none of my NAND.bin files worked, after reading that firm protection was not enabled, and that people were getting factory 11.0 (and not getting a brick) when updating online. It worked, and I was then able to downgrade, and restore my original A9LH SysNAND.



Don't mess with it. There are enough people who have FIRM and NAND dumps to provide them to those that can make good use of them to provide us with a working alternative should GW fail to provide a .bin file. It's not worth risking getting stuck. Especially if you don't have a Sky+ loaded up with PSMD and CN ROMs to bail yourself out.

In my case I just installed NATIVE_FIRM from 9.3 via FBI and then downgraded with browserhax, but our methods were basically the same in the end. :P
 

RednaxelaNnamtra

Well-Known Member
Member
Joined
Dec 8, 2011
Messages
1,210
Trophies
1
XP
3,368
Country
Germany
I created a a9lh payloads which loads the gw stage 2, but it seems their a11 code is not loaded properly. So it can't setup the framebuffer will be properly for their payload and firmlaunch will fail.
If somebody knows how to fix this or wants to experiment with it, here is the source and binary.
 

Attachments

  • bootgw.zip
    100.5 KB · Views: 208

tony_2018

Well-Known Member
Member
Joined
Jan 3, 2014
Messages
3,107
Trophies
0
XP
1,022
Country
United States
Someone here doesn't understand how coding works.....Go work for developers buddy...you don't roll shit out in production unless you know for sure its good to go. Thats why they had beta testers, they aren't testing to make sure A9LH is working, they're checking for something else to work after A9LH is installed....
 

Kazuma77

Well-Known Member
Member
Joined
May 11, 2008
Messages
1,066
Trophies
1
XP
985
Country
United States
In my case I just installed NATIVE_FIRM from 9.3 via FBI and then downgraded with browserhax, but our methods were basically the same in the end. :P

Interesting. Installing an NF from FBI hadn't crossed my mind. But all of d0k3's apps were just returning me back to the HB menu in HBL, so I had quickly written off being able to use *hax to get out of it. Good to know you were able to get it resolved.
 

daxtsu

Well-Known Member
Member
Joined
Jun 9, 2007
Messages
5,627
Trophies
2
XP
5,194
Country
Antarctica
Interesting. Installing an NF from FBI hadn't crossed my mind. But all of d0k3's apps were just returning me back to the HB menu in HBL, so I had quickly written off being able to use *hax to get out of it. Good to know you were able to get it resolved.

Yeah, I ended up using a .3ds version of FBI to do it.
 

Kazuma77

Well-Known Member
Member
Joined
May 11, 2008
Messages
1,066
Trophies
1
XP
985
Country
United States
Oh yeah, forgot to mention, for anyone who can't find the CFW Discussion forum on that iso site, and wants to use Cakes to try liomajor's method, if you need to decrypt cetk in Cakes, just boot another CFW first, go to System Settings and close, and reboot into Cakes. What Cakes needs in order to decrypt will stay in memory after the reboot.
 

tony_2018

Well-Known Member
Member
Joined
Jan 3, 2014
Messages
3,107
Trophies
0
XP
1,022
Country
United States
If this works, my sister has a 3ds w/ gw card and I don't have to worry about her fubering with cfw..it just plays roms..w/ cheat system(doubt she'll be able to figure it out but maybe in time).
 

loco365

Well-Known Member
Member
Joined
Sep 1, 2010
Messages
5,457
Trophies
0
XP
2,927
Don't mess with it. There are enough people who have FIRM and NAND dumps to provide them to those that can make good use of them to provide us with a working alternative should GW fail to provide a .bin file. It's not worth risking getting stuck. Especially if you don't have a Sky+ loaded up with PSMD and CN ROMs to bail yourself out.
Eh, I have three 3DS handhelds so if one breaks in some way, I can still get some carts loaded with hax, like CN or OoT. I'm still not going to risk it though.
 

Ryu Kenshin

Well-Known Member
Member
Joined
Jul 15, 2015
Messages
275
Trophies
0
Age
39
XP
1,306
Country
I hope Gateway could add those functions in the final release:
- Update to 11.x for online purpose
- Region swap for DLC
- Multi a9lh switch
:glare:
 
Last edited by Ryu Kenshin,

izy

Advanced Tech Pleb
Member
Joined
Sep 17, 2010
Messages
2,311
Trophies
2
XP
4,036
Country
United Kingdom
Okay, I made a better video showing POC of me having Gateway A9LH without Hardmod. It even has my voice. See here:



Well you either did 2 things.
Already had OTP and ran the installer on a higher Firmware than
or
You downgraded to 2.1 and used OTPHelper to Unbrick your firmware


Because if you didnt do any of these things im gonna cal bullshit because the tool is 100% Brick chance for N3DS if you didnt
 

CreAtor135

GBATemp's #1 Nothing
OP
Member
Joined
Jan 10, 2015
Messages
814
Trophies
0
Location
Ikeb, Ukuro
XP
1,499
Country
United States
Well you either did 2 things.
Already had OTP and ran the installer on a higher Firmware than
or
You downgraded to 2.1 and used OTPHelper to Unbrick your firmware


Because if you didnt do any of these things im gonna cal bullshit because the tool is 100% Brick chance for N3DS if you didnt
He's said before that he combined Plail's and Gateway's guide.
 
  • Like
Reactions: izy

dyingyam

Member
Newcomer
Joined
Jan 9, 2016
Messages
7
Trophies
0
Age
30
XP
64
Country
United States
Honestly, this is just embarrassing at this point. Alpha or beta status does not excuse this level of incompetency. 100% brickrate on N3DS? Do the Gateway devs not own a N3DS? Jesus. I'm not expecting them to have a robust testing system (though I should, this is a paid product—people pay them for this, being more negligent then the people working for free is completely unacceptable), but did they even test it out once? How does this happen?

The previous bricking incident showed that they had no issue incorporating malicious anti-consumer features into their propriety software—this incident shows that they're incompetent as well. Whenever you're doing this kind of software modding, you are doing so with the implicit risk that you may break your system forever. Malice and incompetence without the ability for the community to check their work is a sure recipe for disaster. I am not sure why anyone would choose to go down this path, especially new customers, who have to pay 90 bucks for this.
 

Kazuma77

Well-Known Member
Member
Joined
May 11, 2008
Messages
1,066
Trophies
1
XP
985
Country
United States
Ok, i've used for now old dark_samus a9lh installer (had the files already): https://github.com/dark-samus/arm9loaderhax/tree/1ee8d8849bf8c340bc1421b8a642b8d64d31d165

payload_stage1 > main.c (for A Button)

Code:
#include "common.h"
#include "sdmmc.h"
#include "i2c.h"
#define HID_PAD  ((~*(u16*)0x10146000) & 0xFFF)
#define BUTTON_A  (1 << 0)
#define BUTTON_B  (1 << 1)

u16 pressed;

int main()
{
  // Initialize sdcard and nand
  *(vu32*)0x10000020 = 0;
  *(vu32*)0x10000020 = 0x340;
  sdmmc_sdcard_init();

  pressed = HID_PAD;

  if (pressed & BUTTON_A) //if a button is pressed
  {
  //Jump to alternate stage2
  sdmmc_nand_readsectors(0x5A000, 0x20, (u8*)0x08006000);
  }
  else
  {
  //jump to normal stage2
  sdmmc_nand_readsectors(0x5C000, 0x20, (u8*)0x08006000);
  }
 
  // Jump to secondary payload
  ((void (*)())0x08006000)();
  return 0;
}

To use B Button change the line to " if (pressed & BUTTON_B) //if b button is pressed "

Currently i'm too tired adding this to aurora's SafeA9LHInstaller... nightshift and +12h without sleep ^^'''

It works, a9lh and gw a9lh :)


Well, I got it to compile. Now I'm not 100% sure what to do with it. I can't seem to get the .3dsx file to work in Cakes. Keeps saying "exploiting arm9" or something and flashing a red screen. Do I have to revert to a clean SysNAND in order to make this work?
 

astronautlevel

Well-Known Member
Member
Joined
Jan 26, 2016
Messages
4,128
Trophies
2
Location
Maryland
Website
ataber.pw
XP
5,008
Country
United States
Well, I got it to compile. Now I'm not 100% sure what to do with it. I can't seem to get the .3dsx file to work in Cakes. Keeps saying "exploiting arm9" or something and flashing a red screen. Do I have to revert to a clean SysNAND in order to make this work?
SysNAND has to be on 9.2. Try running minipasta before running the installer (Don't know if that was necessary, I heard conflicting reports)
 

CreAtor135

GBATemp's #1 Nothing
OP
Member
Joined
Jan 10, 2015
Messages
814
Trophies
0
Location
Ikeb, Ukuro
XP
1,499
Country
United States
This is not the thread for complaints. We're all.. well, most of us are disappointed with this alpha, but I didn't make this thread for people to show their distaste. It was made to document the errors in the beta/alpha//whatever so Gateway can fix them when they push out their next beta.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • The Real Jdbye @ The Real Jdbye:
    @SylverReZ if you could find a v5 DS ML you would have the best of both worlds since the v5 units had the same backlight brightness levels as the DS Lite unlockable with flashme
  • The Real Jdbye @ The Real Jdbye:
    but that's a long shot
  • The Real Jdbye @ The Real Jdbye:
    i think only the red mario kart edition phat was v5
  • BigOnYa @ BigOnYa:
    A woman with no arms and no legs was sitting on a beach. A man comes along and the woman says, "I've never been hugged before." So the man feels bad and hugs her. She says "Well i've also never been kissed before." So he gives her a kiss on the cheek. She says "Well I've also never been fucked before." So the man picks her up, and throws her in the ocean and says "Now you're fucked."
    +2
  • BakerMan @ BakerMan:
    lmao
  • BakerMan @ BakerMan:
    anyways, we need to re-normalize physical media

    if i didn't want my games to be permanent, then i'd rent them
    +1
  • BigOnYa @ BigOnYa:
    Agreed, that why I try to buy all my games on disc, Xbox anyways. Switch games (which I pirate tbh) don't matter much, I stay offline 24/7 anyways.
    +1
  • AncientBoi @ AncientBoi:
    I don't pirate them, I Use Them :mellow:. Like I do @BigOnYa 's couch :tpi::evil::rofl2:
    +1
  • cearp @ cearp:
    @BakerMan - you can still "own" digital media, arguably easier and better than physical since you can make copies and backups, as much as you like.

    The issue is DRM
    +1
  • cearp @ cearp:
    You can buy drm free games / music / ebooks, and if you keep backups of your data (like documents and family photos etc), then you shouldn't lose the game. but with a disk, your toddler could put it in the toaster and there goes your $60

    :rofl2:
  • cearp @ cearp:
    still, I agree physical media is nice to have. just pointing out the issue is drm
    +1
  • rqkaiju2 @ rqkaiju2:
    i like physical media because it actually feels like you own it. thats why i plan on burning music to cds
  • cearp @ cearp:
    It's nice to not have to have a lot of physical things though, saves space
    +1
  • AncientBoi @ AncientBoi:
    Nor clothes 🤮 . Saves on time, soap, water and money having to wash them. :D
  • SylverReZ @ SylverReZ:
    @rqkaiju2, Physical media is a great source for archiving your data, none of that cloud storage shiz.
    +1
  • AncientBoi @ AncientBoi:
    [squeezes @SylverReZ onto a physical media, then archives you in my old stuff box] :tpi::rofl2::tpi:
    +1
  • BakerMan @ BakerMan:
    guys, should i change my pfp to one of these or keep it the same?
    iu

    iu

    (i guess i could change it to one of my other pfps too, but i just want to see what you guys think first)
  • SylverReZ @ SylverReZ:
    @BakerMan, Up to you.
  • BakerMan @ BakerMan:
    smug sonic time lmao
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    Chronic The HempHog
    SylverReZ @ SylverReZ: https://www.youtube.com/watch?v=EtapU5nI6G4 +1