https://github.com/yellows8/3ds_dsiwarehax_installerAfaik you NEED arm9 access to do that, you can't reach dsiware or any arm9 payload with just userland (*hax) or arm11. It just can't make the right syscalls and would fail.
Then again, people here have achieved things deemed impossible by everyone else before.
this probably won't work above 10.7 though due to the svcBackdoor requirement.