Homebrew ARM9Loader -- Technical Details and Discussion

[BurningDesire]

It's not overly complicated, just requires dumping an extra xorpad with a modified version of decrypt9.

Well that I can do. I have done it before for a emunand region change

 

[MassExplosion213]

If anyone's interested in the downgrade method, PM me.

 

[cpasjuste]

If anyone's interested in the downgrade method, PM me.

You could also expose the complete procedure here isn't it ? I don't see the point of doing this in PM but, it would not be the first time, i may miss something.
Also someone could post the tool to dump otp on < 3.0 fw, this could save some time for everybody and is 100% legit (well this is maybe the easiest thing but still).

Edit:
To @MassExplosion213 : this is not a complain Your offer is really cool.

 

[MassExplosion213]

You could also expose the complete procedure here isn't it ? I don't see the point of doing this in PM but, it would not be the first time, i may miss something.
Also someone could post the tool to dump otp on < 3.0 fw, this could save some time for everybody and is 100% legit.

--------------------- MERGED ---------------------------

I'll upload the OTP dumper. But I say PM because update CIAs.

 

[AHP_person]

If anyone's interested in the downgrade method, PM me.

But who doesn't know it by now? ;^)

 

[MassExplosion213]

EDIT: Disregard. This one does not seem to work.

 

[cpasjuste]

But who doesn't know it by now? ;^)

Well, people like me which does not have the knowledge or the time, and that are not "inside"

 

[Vappy]

But who doesn't know it by now? ;^)

Downgrading is easy, provided you've got a .cia pack to cover you It's the rest of the process that gets in the way atm.

 

[cpasjuste]

https://mega.nz/#!Zg0QQayL!gm-iuQ9Z67rIASQb6deORq55xIU42C3z96OSCPbKuiQ
OTP dumper. CN only atm.

Many (many) thanks. Do you have the source code by luck ?

In any case, tomorrow is hardmod day That's cool thanks to you guys.

 

[AHP_person]

https://mega.nz/#!Zg0QQayL!gm-iuQ9Z67rIASQb6deORq55xIU42C3z96OSCPbKuiQ
OTP dumper. CN only atm.

Wait, Mass, I thought that payload didn't work? (At least when I tried, it didn't 0.o)

 

[cpasjuste]

Wait, Mass, I thought that payload didn't work? (At least when I tried, it didn't 0.o)

Then upload the "working one"

 

[AHP_person]

Then upload the "working one"

It's literally just a file write with the source buf being OTP.
Something like:

f_write(&file, (void*)0x10012000, 0x100 /* or 0x108 */, br);

 

[cpasjuste]

By the way, i will go totally of topic but since there's some nice guys there ....

I'm going to do a "special" hardmod on my n3ds, the question is does someone see a problem with this ? :

- put a conductive thing on each sides of the 3ds gamecards slot, for CLK/CMD
- use gamecard PIN1 for ground and PIN3 (unused?) for DAT0
- make a custom DS CARD with conductive thing on each side (CLK/CMD) + PIN1>ground + PIN3>DAT0 ?

--------------------- MERGED ---------------------------

It's literally just a file write with the source buf being OTP.
Something like:

f_write(&file, (void*)0x10012000, 0x100 /* or 0x108 */, br);

I tough arm9 on < 3.0 would require special "magic"

 

[Vappy]

I tough arm9 on < 3.0 would require special "magic"

The "magic" is getting the arm9 payload running, which so far has only been accomplished with Cubic Ninja.

 

[cpasjuste]

The "magic" is getting the arm9 payload running, which so far has only been accomplished with Cubic Ninja.

Ok, like you said me before, and why people are searching for other arm9 hax as you said (which doesn't rely on "norman" arm9 cn hax).
It's now "more clear" to me, thanks again.

 

[laramie]

You actually can dg right now on any region to 1.0 if you can find them you can dg regardless of region. It's tricky but I did it. Now as to if I'll help.. Well no. Good luck its not hard to figure out[emoji14]I'm not feeling on helping this scene anymore[emoji14]

 

[Vappy]

You actually can dg right now on any region to 1.0 if you can find them you can dg regardless of region. It's tricky but I did it. Now as to if I'll help.. Well no. Good luck its not hard to figure out[emoji14]I'm not feeling on helping this scene anymore[emoji14]

Then why keep posting here?

 

[Shadowtrance]

Then why keep posting here?

To annoy people of course.... why else?

 

[Psi-hate]

I have an 9.2 O3DS lying around. I'm planning to have @hundshamer hardmod it along with my N3DS within the next few months anyway so if it bricks downgrading to <3.0 I have a backup and all that. I don't care if I brick my O3DS as I can get it fixed so can someone direct me on how to dump the OTP? Do I simply downgrade using sysupdater and then run Cubic Ninja's OTP dumper?

 

[cpasjuste]

I have an 9.2 O3DS lying around. I'm planning to have @hundshamer hardmod it along with my N3DS within the next few months anyway so if it bricks downgrading to <3.0 I have a backup and all that. I don't care if I brick my O3DS as I can get it fixed so can someone direct me on how to dump the OTP? Do I simply downgrade using sysupdater and then run Cubic Ninja's OTP dumper?

From what i understand for o3ds :
- get a < 3.0 fw (cia), downgrade with sysUpdatder
- dump otp with the binary posted a few post ago (thanks @MassExplosion213) (need cn or linker/cn + normatt 1.0 qrcode for arm9 to load it)