Hacking The status of Gateway and A9LH

[urherenow]

Okay, so if i restore my sysnand, my emunand will still be there and i just have to run homebrew to reinstall a9lh with my otp?

yes. Restoring sysnand won't touch emunand.

 

[Kazuma77]

Okay, so if i restore my sysnand, my emunand will still be there and i just have to run homebrew to reinstall a9lh with my otp?

Yes. liomajor includes a copy of Safe A9LH Installer in .3dsx form, so you can just use that. Just remember to include all 3 payloads this time.

 

[Stack3r]

Yes.

Okay, after this im not fucking with gateway anymore.

 

[urherenow]

Yes.

You were

And posting 1 word replies is actually against the rules. Don't know how often that rule is enforced... just sayin'.

 

[Stack3r]

So why would renaming arm9loader.bin to launcher.dat not work?

 

[liomajor]

So why would renaming arm9loader.bin to launcher.dat not work?

Dunno what went wrong, if its your fault or not, can't examine your broked nand.

 

[Stack3r]

Dunno what went wrong, if its your fault or not, can't examine your broked nand.

I think what i did was renamed stage2_2 to stage 2 so it set the default load as gateway

 

[Kazuma77]

You were

And posting 1 word replies is actually against the rules. Don't know how often that rule is enforced... just sayin'.

Fixed.

So why would renaming arm9loader.bin to launcher.dat not work?

Well, Launcher.dat's payload is probably somewhere in the middle of the file, not at the start, so, it's extremely unlikely to work.

 

[Stack3r]

Fixed.



Well, Launcher.dat's payload is probably somewhere in the middle of the file, not at the start, so, it's extremely unlikely to work.

Even luma3ds.dat huh

 

[Kazuma77]

Even luma3ds.dat huh

Different offset. I've tried loading Launcher.dat with a boot manager and offset 0x12000 before. It failed.

 

[urherenow]

Easy Install using safeA9LHinstaller

This allows to have three stage 2 inside nand to load them
using button combinations while powering your console on!



(snip)

Using @liomajor Easy Installer and @Kazuma77 alternate stage1 payload to make gateway boot using A I can confirm the following consoles as working

• n3DS EUR v11.0.0-33 + AL9H updated through arm9loaderhax.bin
• 2DS EUR v11.0.0-33 + AL9H updated through arm9loaderhax.bin

Excellent job to both of you for providing such a great solution to the community

Hate to repeat information, but it's easy to get lost in fast moving threads. @liomajor I think it can be confirmed that this works on all Toshiba NANDs and fails on Samsung NANDS. Do you have an idea of what to do to make it work on a Samsung NAND?

and @CreAtor135 on the OP, somebody must be confused and thought they were in GW mode instead of CFW. Flash carts do NOT work in GW emunand.

 

[stl25]

Hopefully with all the effort to get GW loading with current A9LH forks, GW will just succumb and give us what they can obviously see that we want. I'll wait for the official release. Just don't expect a GW response to come soon.

 

[Stack3r]

Different offset. I've tried loading Launcher.dat with a boot manager and offset 0x12000 before. It failed.

So i tried restoring with 4.0 and 3.7.1 i get NAND.BIN error

 

[Kazuma77]

Hate to repeat information, but it's easy to get lost in fast moving threads. @liomajor I think it can be confirmed that this works on all Toshiba NANDs and fails on Samsung NANDS. Do you have an idea of what to do to make it work on a Samsung NAND?

and @CreAtor135 on the OP, somebody must be confused and thought they were in GW mode instead of CFW. Flash carts do NOT work in GW emunand.

I might have an idea. Just did an fc/b of my before and after NAND dumps. Found another set of 00s that got overwritten. Another payload if you will. Location is 0x0B21F000 - 0X0B221FFF. Payload is 12288 bytes exactly. What do you make of this, @liomajor?

So i tried restoring with 4.0 and 3.7.1 i get NAND.BIN error

That's not good. The only way out then is probably a cart/ROM update (preferably in the 9.3 to 9.9 range -- before the browser checks). Only attempt it with 4.0a. If you try it with 3.7.1 it will brick you.

 

[liomajor]

I would need a dump of that part to ckeck it.

Currently im driving home...

 

[Stack3r]

I might have an idea. Just did an fc/b of my before and after NAND dumps. Found another set of 00s that got overwritten. Another payload if you will. Location is 0x0B21F000 - 0X0B221FFF. Payload is 12288 bytes exactly. What do you make of this, @liomajor?



That's not good. Only way out then is a cart/ROM update (preferably in the 9.3 to 9.9 range -- before the browser checks). Only attempt it with 4.0a. If you try it with 3.7.1 it will brick you.

What do you mean, i cant even get to the system. When i turn it on its red screen and boots to gateway without pressing any buttons

 

[Kazuma77]

What do you mean, i cant even get to the system. When i turn it on its red screen and boots to gateway without pressing any buttons

So, you can't enter GW mode? You mean, you have no cart. I hope you know someone you can borrow one from. If not, you could be facing a hard mod.

 

[Stack3r]

So, you can't enter GW mode? You mean, you have no cart. I hope you know someone you can borrow one from. If not, you could be facing a hard mod.

Yeah i dont own a gateway cart, and classic mode just stays at a black screen.

 

[urherenow]

Yeah i dont own a gateway cart,

Why exactly did you even attempt ANY of this? Why are you even in this thread? I can't even...

 

[Stack3r]

Why exactly did you even attempt ANY of this? Why are you in this thread? I can't even...

I dont know, this was a big fucking mistake. I had my 3ds perfect.