Hacking [IDEA]arm9loaderhax boot without SD

Is this possible?


  • Total voters
    55

cavolo

Well-Known Member
Member
Joined
Jun 3, 2015
Messages
162
Trophies
0
Age
31
XP
131
Country
France
Personnaly I think its not really usefull, because all my games are on my sd card so....
Only usefull if you sell your 3ds, but who sell his 3ds ? :'(
 

Salamencizer

Cute Hot Whatever
OP
Member
Joined
Oct 3, 2015
Messages
802
Trophies
0
Age
24
Location
In your heart
Website
gbatemp.net
XP
728
Country
India
Personnaly I think its not really usefull, because all my games are on my sd card so....
Only usefull if you sell your 3ds, but who sell his 3ds ? :'(
Yeah, that is true. But people get annoyed bout thier 3DS not booting without an SD Card, a possible excuse which they make to not install a9lh.
 
Last edited by Salamencizer,

Olmectron

Well-Known Member
Member
Joined
Dec 31, 2012
Messages
2,657
Trophies
2
Age
31
Location
A game
XP
3,855
Country
Mexico
This can also be useful in case the SD port breaks (because you're a brute :P), so the 3DS is still usable. Well, obviously you can't really do a lot of stuff with a broken SD port but at least you can do stuff...
It seems so.

Altough, it would still be unusable for some people. Like me. I have all my 3DS games bought from the eShop (not a single 3DS game card).
 

The Real Jdbye

*is birb*
Member
Joined
Mar 17, 2010
Messages
23,287
Trophies
4
Location
Space
XP
13,844
Country
Norway
So I was thinking, can we just use a SaltFW (SaltLite) payload to load arm9loaderhax without SD? Its size is super small, And it doesn't require any folder/firmware/etc for sigcheckpatching.
Is this possible?
Unlike most other people in this thread I would really like for this to happen. Although there is not much reason not to have a SD card in the 3DS it just irks me that the console cannot function normally without specific hack files. At the very least the console should be able to boot like a regular unmodded 3DS when no SD card is inserted. Such a thing would be simple to do by simply triggering a FIRM launch using the FIRM binary from CTRNAND when no file is found on SD. Shouldn't take more than a few lines of extra code in the FIRM payload.
 

astronautlevel

Well-Known Member
Member
Joined
Jan 26, 2016
Messages
4,128
Trophies
2
Location
Maryland
Website
ataber.pw
XP
5,008
Country
United States
This is entirely possible, but it's somewhat of a pain.

First of all you need a way to read files off the NAND via arm9 - this definitely possible, but difficult when you consider the space limit of k9lh payloads.

You'd then need a payload that's small enough to fit in the NAND (smaller the better, mainly for DSiWare and stuff). In addition, it would need patches for FIRM write protection at the very least, and would need to be able to load firmware.bin from NAND. SaltFW works perfectly for this, as it is relatively lightweight and contains necessary patches. Another option would be Mizuki.

Like I said, it's possible but a pain. Most developers aren't going to be working on it given that it's relatively low priority as few people boot without an SD card. I would be looking into it if I had a hardmod, but since I don't I'm too afraid to brick :P
 
Last edited by astronautlevel,

The Catboy

GBAtemp Official Catboy™: Boywife
Member
Joined
Sep 13, 2009
Messages
27,946
Trophies
4
Location
Making a non-binary fuss
XP
39,324
Country
Antarctica
From what I understand, A9LH actually works by booting part of the exploitable code from the SD card. Basically disabling part of the code the FIRM0/1 from booting from the 3DS and having them boot through the SD card instead to allow exploitable code to work. So could be possible to install that code directly to the 3DS, but may run a higher chance of bricking.
I could be wrong, but that's what it looks like it functions.
 

Halvorsen

Well-Known Member
Member
Joined
Aug 12, 2015
Messages
2,060
Trophies
0
Website
halcove.com
XP
1,891
Country
United States
I have arm9loaderhax, and it's still idiotic that the system is useless without a 2 centimeter SD Card. If I'm copying files to my computer or phone my 3DS is literally useless unless I happen to have it on.
And even then I can't access the Settings or hope the system doesn't reboot from a crash.
At this very moment I'm copying 64 gigs to my computer and haven't used my n3DS in a few hours.
 
Last edited by Halvorsen,

VIERcntHOLZ

yep, theres missing an "u".
Member
Joined
Mar 26, 2016
Messages
187
Trophies
0
XP
345
Country
Germany
Actually - if you "hardcode" the CFW into the initial payload, the FIRMpatch would have to be reapplied whenever a new update/commit appears, nor?
 

Shadowhand

Slim, Alternative Dev.
Member
Joined
Feb 27, 2016
Messages
522
Trophies
0
Age
31
XP
1,958
Country
United Kingdom
Actually - if you "hardcode" the CFW into the initial payload, the FIRMpatch would have to be reapplied whenever a new update/commit appears, nor?
Yes, but there won't be a release that won't do good stuff, so it'll be far in between I think. I'm not promising anything, but the initial usable version would be after 14-19 days.
 

Wolfvak

nyaa~
Member
Joined
Oct 25, 2015
Messages
918
Trophies
1
XP
3,386
Country
Uruguay
So I was thinking, can we just use a SaltFW (SaltLite) payload to load arm9loaderhax without SD? Its size is super small, And it doesn't require any folder/firmware/etc for sigcheckpatching.
Is this possible?
Let me clarify something first; you all appear to be a little wrong on thinking how arm9loaderhax works. The exploit itself already lives in you FIRM partitions, the fact that there's no SD card just doesn't allow you to run custom code, but it doesn't mean that the exploit is dead or something like that.

With that out of the way, yes it's not only "possible" but perfectly doable. However, you appear to want a CFW, not just any payload. That introduces certain issues, especially with O3DS and the requirement of reboot patches. But it's still perfectly doable, the only issue would be that you'd need it as a "secondary" a9lh payload living somewhere in your NAND, which the stage1 calls upon booting. In case no SD card is detected, or no arm9loaderhax.bin file exists, then load that secondary payload which is somewhere in your NAND. AFAIK there's been some work done, and not just PoCs, but actual projects.

SaltFW for example, was thought as a base to expand upon and introduce this SD-less boot.
 

migles

All my gbatemp friends are now mods, except for me
Member
Joined
Sep 19, 2013
Messages
8,033
Trophies
0
Location
Earth-chan
XP
5,299
Country
China
From what I understand, A9LH actually works by booting part of the exploitable code from the SD card. Basically disabling part of the code the FIRM0/1 from booting from the 3DS and having them boot through the SD card instead to allow exploitable code to work. So could be possible to install that code directly to the 3DS, but may run a higher chance of bricking.
I could be wrong, but that's what it looks like it functions.
couldn't they do something "if file is not found, boot from firmware" ?

the hability to not using a sd card would be great, so you could use the console with a broken sd card reader
and it would be helpfull to noobs, currently there is a change of blackscreen that a simple fix is ejecting and putting back the sd card, some noobs start the console without the card and think its broken..
and plus it doesn't make sence that you require something to boot the console...
 
Last edited by migles,

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Psionic Roshambo @ Psionic Roshambo: In emulation overclocked FX chips makes a pretty big difference in frame rate