Hacking The status of Gateway and A9LH

abdellbobo

000
Member
Joined
Dec 28, 2015
Messages
528
Trophies
0
XP
694
Country
France
red screen! are this is normal for the GW to do that I hope on the final release we don't need to see this red screen.
sorry for my bad English and if anybody can explain why a red screen.thx
 

Kazuma77

Well-Known Member
Member
Joined
May 11, 2008
Messages
1,067
Trophies
1
XP
1,000
Country
United States
someone with harmod please confirm my theory :) if i have a 9.2 A9LH SYSNAND+LUMA+GATEWAY PAYLOAD i think we can use luma A9LH protection to update the sysnand to 11.x an then use the gateway payload again

No hard mod confirmation necessary. Updating with Luma isn't even dangerous, lol. GW works with 11.x SysNAND fine. My N3DS XL was already on 11.x when I installed it, and it works.

Ok, nobody helped me fast enough so I did everything manually. I now have a decrypted firm0/1 from when I tried the payloads here, and from a GW a9lh install.
There are 3 chunks of data that differ between the two. Keep in mind that these offsets are from examining just the 8,192KB (8,388,608 bytes) that make up the firm0 & Firm1 combined)

000f0760-000f0f64 (yes, it stops being different in the middle of a row)
006D0000-006d24F0
006d2800-006D4000

Edit: and I learned 2 things by looking at the stage2_2.bin from here.
1) I didn't even need to decrypt the firms :nayps3:

2) That particular payload isn't one of those 3 above. It starts at 002D0000.

I hope this is enough information, because I need to sleep. Or do I need to up those 3 sections somewhere for use (from my encrypted firm0/1, now that I know better)? But surely I can't link to them from here, can I?

Edit: The last bit is unimportant (I think). On the GW a9lh, it's zeroed out. It's not on my pre-GW dump.

Edit2: Here are the 2 sections that are different. Hope this helps. If it's not allowed, please have a mod edit the post as I am going to sleep for real now and won't be on tomorrow...
https://dl.dropboxusercontent.com/u/24345169/NewN3ds_GW_payloads.zip

@liomajor

The Firm0 and FIRM1 were already up on a certain iso site before you did all of that. You could have just grabbed them instead of installing GW A9LH yourself. Oh well. I saw the first offset you mentioned. Hadn't got around to comparing FIRM1s though. It's weird that the difference ends at F0F64 though -- that to F1FFF are all overwritten with "00" on mine (and they had something there before).
 
Last edited by Kazuma77,

driverdis

I am Justice
Member
Joined
Sep 21, 2011
Messages
2,867
Trophies
2
Age
31
Location
1.048596β
XP
2,838
Country
United States
well, using SafeA9LHInstaller provided by liomajor in his zip to update your a9lh, you only risk a red screen and a poweroff if you boot gw and you have a samsung nand. you can still boot luma or other cfw with no problem.

This is true, I used it on all my 3DSs without checking the NANDs first as i knew that if it worked, I had Toshiba NAND in that console.
Turns out, my Friends Blue O3DS XL, My LBW O3DS XL, and my Aqua O3DS have Samsung NANDs (my spare O3DS XL motherboard has Samsung also, I checked the chip itself :/ )

However, my MM N3DS XL has Toshiba NAND so GW booted fine (YaY, as this is my primary system B-))
 
Last edited by driverdis, , Reason: Fixed Grammar

AlucardjX

Well-Known Member
Member
Joined
Mar 6, 2016
Messages
215
Trophies
0
XP
89
Country
Italy
This is true, I used it on all my 3DSs without checking the NANDs first as i knew that if it worked, I had Toshiba NAND in that console.
Turns out, my Friends Blue O3DS XL, My LBW O3DS XL, and my Aqua O3DS have Samsung NANDs (my spare O3DS XL motherboard has Samsung also, I checked the chip itself :/ )

However, my MM N3DS XL has Toshiba NAND so GW booted fine (YaY, as this is my primary system B-))
what files i have to sobstitute?only the arm9loaderhax.bin?i have mine in the SD root,i need the payloads to be in what folder?sorry for the noob questions...
 

driverdis

I am Justice
Member
Joined
Sep 21, 2011
Messages
2,867
Trophies
2
Age
31
Location
1.048596β
XP
2,838
Country
United States
what files i have to sobstitute?only the arm9loaderhax.bin?i have mine in the SD root,i need the payloads to be in what folder?sorry for the noob questions...

the payloads go into the "A9LH" Folder on the root of your SD Card. make sure you have the files from @Plailect's guide that go into the A9LH folder also. if you followed his guide, you already have the files there.
If asked to replace the files when you copy the payloads from @liomajor's SafeA9LHInstaller to the A9LH folder, press Yes/OK

backup your current arm9loaderhax.bin to your computer or rename it to arm9loaderhax.bin.bak
copy the arm9loaderhax.bin from liomajor's SafeA9LHInstaller to the root of your SD Card.

Bootup your 3ds with the SD Card in, it will boot into SafeA9LHInstaller, press the button mentioned to install then the button to poweroff

put your SD Card into your computer then delete arm9loaderhax.bin and copy your backup from your computer or rename arm9loaderhax.bin.bak to arm9loaderhax.bin

Now, Luma3DS/Cakes (whichever you use) will boot by default (works on both Toshiba and Samsung NANDS) and holding (button depends on which payload you are using) should boot Gateway (works on Toshiba NANDs and progress is being made on booting with Samsung NANDs)

EDIT: @liomajor got Samsung NANDs working also
 
Last edited by driverdis,

Kazuma77

Well-Known Member
Member
Joined
May 11, 2008
Messages
1,067
Trophies
1
XP
1,000
Country
United States
what files i have to sobstitute?only the arm9loaderhax.bin?i have mine in the SD root,i need the payloads to be in what folder?sorry for the noob questions...

You place them in the "a9lh" folder, just as they are in the archive. Never mind, driverdis beat me to it.
 
Last edited by Kazuma77,

AlucardjX

Well-Known Member
Member
Joined
Mar 6, 2016
Messages
215
Trophies
0
XP
89
Country
Italy
the payloads go into the "A9LH" Folder on the root of your SD Card. make sure you have the files from @Plailect's guide that go into the A9LH folder also. if you followed his guide, you already have the files there.
If asked to replace the files when you copy the payloads from @liomajor's SafeA9LHInstaller to the A9LH folder, press Yes/OK

backup your current arm9loaderhax.bin to your computer or rename it to arm9loaderhax.bin.bak
copy the arm9loaderhax.bin from liomajor's SafeA9LHInstaller to the root of your SD Card.

Bootup your 3ds with the SD Card in, it will boot into SafeA9LHInstaller, press the button mentioned to install then the button to poweroff

put your SD Card into your computer then delete arm9loaderhax.bin and copy your backup from your computer or rename arm9loaderhax.bin.bak to arm9loaderhax.bin

Now, Luma3DS/Cakes (whichever you use) will boot by default (works on both Toshiba and Samsung NANDS) and holding (button depends on which payload you are using) should boot Gateway (works on Toshiba NANDs, progress is being made on booting with Samsung NANDs)
i've installed A9LH with no plailects guide and i never had/see/created an a9lh folder!my arm9loaderhax.bin was on root and my payloads are in the luma folder...

i need my otp file too in that folder?i don't have firo firm1 files or secret files...i missing something for sure.. :(

i put the a9lh folder on my root with all stages.bin in plus the safeinstaller.dat and arm9loaderhax.bin on root and renamed my actual one to .bin.bak,i start and popups a menu safeinstaller 1.5.1 select to install other button to exit...what do?if i miss some files i risk to brick or what?
 
Last edited by AlucardjX,

Billy Acuña

Well-Known Member
Member
Joined
Oct 10, 2015
Messages
3,126
Trophies
1
Age
31
XP
3,701
Country
Mexico
Could someone the current features of GW + A9LH?

Does GW mode boot on updated sysNAND?
Does GW have Firm Protection?
Could we use chainloading with GW's payload?

Enviado desde mi BLU LIFE XL mediante Tapatalk
 

driverdis

I am Justice
Member
Joined
Sep 21, 2011
Messages
2,867
Trophies
2
Age
31
Location
1.048596β
XP
2,838
Country
United States
i've installed A9LH with no plailects guide and i never had/see/created an a9lh folder!my arm9loaderhax.bin was on root and my payloads are in the luma folder...
https://github.com/Plailect/Guide/wiki/Part-5-(arm9loaderhax)
grab payload_input.zip and data_input.zip from the links on that page and copy the files to the A9LH folder on the root of your SD card (create this folder, as you do not have one)
next, copy the files from liomajor's SafeA9LHInstaller to the A9LH folder and the arm9loaderhax.bin goes on the root of your SD Card, move it/delete it from the A9LH folder and put it on your SD Card root.

you can then bootup your 3DS and will be prompted to update A9LH. do so then you will be prompted to poweroff. afterward, copy Luma/or Cakes back to the root of your SD Card as arm9loaderhax.bin on the root of your SD Card.
you should be able to boot GW via a button press and Luma/ or Cakes by default.

--------------------- MERGED ---------------------------

Could someone the current features of GW + A9LH?

Does GW mode boot on updated sysNAND? | Yes (I have 11.0 SysNAND)
Does GW have Firm Protection? | GW 3.7.1 (SysNAND: Possibly? | EmuNAND: Yes) , GW 4.0 Alpha (SysNAND: NO, BE CAREFUL | EmuNAND: Possibly?)
Could we use chainloading with GW's payload? | No, but that is not needed with dual boot as Luma/Cakes can load other A9LH payloads while GW will load just it's own payload (Launcher.dat)
 
Last edited by driverdis,

AlucardjX

Well-Known Member
Member
Joined
Mar 6, 2016
Messages
215
Trophies
0
XP
89
Country
Italy
https://github.com/Plailect/Guide/wiki/Part-5-(arm9loaderhax)
grab payload_input.zip and data_input.zip from the links on that page and copy the files to the A9LH folder on the root of your SD card (create this folder, as you do not have one)
next, copy the files from liomajor's SafeA9LHInstaller to the A9LH folder and the arm9loaderhax.bin goes on the root of your SD Card, move it/delete it from the A9LH folder and put it on your SD Card root.

you can then bootup your 3DS and will be prompted to update A9LH. do so then you will be prompted to poweroff. afterward, copy Luma/or Cakes back to the root of your SD Card as arm9loaderhax.bin on the root of your SD Card.
you should be able to boot GW via a button press and Luma/ or Cakes by default.

--------------------- MERGED ---------------------------



Does GW mode boot on updated sysNAND? | Yes (I have 11.0 SysNAND)
Does GW have Firm Protection? | GW 3.7.1 (SysNAND: Possibly? | EmuNAND: Yes) , GW 4.0 Alpha (SysNAND: NO, BE CAREFUL | EmuNAND: Possibly?)
Could we use chainloading with GW's payload? | No, but that is not needed with dual boot as Luma/Cakes can load other A9LH payloads while GW will load just it's own payload (Launcher.dat)


ok pratically the plailects payloads where overwritten by the liomajors one right? i have now all the stages.bin firm 0 firm1 secret.bin in a9lh folder,armloaderhax.bin and safeinstaller.dat on root i need other things?i need my otp files too in a9lh folder before proceding?
 

Kazuma77

Well-Known Member
Member
Joined
May 11, 2008
Messages
1,067
Trophies
1
XP
1,000
Country
United States
OK, just got around to comparing FIRM1s. There is a difference between 0x000F2000 and 0x000FFFFF that urherenow failed to mention. Actually, I'm seeing it on FIRM0 as well.

ok pratically the plailects payloads where overwritten by the liomajors one right? i have now all the stages.bin firm 0 firm1 secret.bin in a9lh folder,armloaderhax.bin and safeinstaller.dat on root i need other things?i need my otp files too in a9lh folder before proceding?

Yes, otp.bin is the only other thing you should need.
 
Last edited by Kazuma77,
  • Like
Reactions: 20mark

driverdis

I am Justice
Member
Joined
Sep 21, 2011
Messages
2,867
Trophies
2
Age
31
Location
1.048596β
XP
2,838
Country
United States
I just realized, for people who really want GW now, sellers on eBay are selling boards for $25 to $50 and can get a Toshiba NAND board now. of course asking the seller first would be highly recommended to avoid getting a Samsung NAND one.

--------------------- MERGED ---------------------------

my root: http://imgur.com/slkcEgo my a9lh folder: http://imgur.com/ZYknSlX is all right?i can proceed?

as long as the arm9loaderhax.bin on the root of your SD Card is the SafeA9LHInstaller, yes as that will boot and allow you to upgrade. Do not forgot to put Luma or Cakes arm9loaderhax.bin back on the root of your SD Card when you are done updating.
 

AlucardjX

Well-Known Member
Member
Joined
Mar 6, 2016
Messages
215
Trophies
0
XP
89
Country
Italy
I just realized, for people who really want GW now, sellers on eBay are selling boards for $25 to $50 and can get a Toshiba NAND board now. of course asking the seller first would be highly recommended to avoid getting a Samsung NAND one.

--------------------- MERGED ---------------------------



as long as the arm9loaderhax.bin on the root of your SD Card is the SafeA9LHInstaller, yes as that will boot and allow you to upgrade. Do not forgot to put Luma or Cakes arm9loaderhax.bin back on the root of your SD Card when you are done updating.
my own otp.bin was needed or no?i've no touched the luma folder i only renamed loaderhax.bin to .bin.bak if i left luma folder on root during the update can cause some trouble?
 
Last edited by AlucardjX,

AlucardjX

Well-Known Member
Member
Joined
Mar 6, 2016
Messages
215
Trophies
0
XP
89
Country
Italy
ok installed SUCCES!!!!replaced majors loaderhax with luma ones(deleted safeinstaller.dat too)now???what i have to press to see if GW card works?i put 3.7.1 Launcher.dat on my SD and a .3ds file on red card...help please :)
 

driverdis

I am Justice
Member
Joined
Sep 21, 2011
Messages
2,867
Trophies
2
Age
31
Location
1.048596β
XP
2,838
Country
United States
nothing to do...two red screen then shutdown i have the wrong nand :(((
well, that sucks. I guess we will play the waiting game like the rest of the Samsung NAND 3DS owners.
it seems Samsung NANDs are more common then Toshiba NANDs for O3DS. all 4 of my O3DS Motherboards have Samsung and my only N3DS has Toshiba.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    SylverReZ @ SylverReZ: https://www.youtube.com/watch?v=IZ1-Z0hCIH8