Homebrew ARM9Loader -- Technical Details and Discussion

[Suiginou]

They make a custom ARM9 payload for spider to restore NAND from SD card.

That sounds awful.

 

[Psi-hate]

Edit: misread post

 

[DigitalJosee]

Psi-hate, Have you installed A9L using the 3dsx?
Or manual injection?

 

[OctopusRift]

if A9F.bin is OTP, then 256 (0x100) bytes is accurate.

I've checked it. Byte to byte its the same. Checked in my hex editor.

 

[Nintendo4DSXL]

Does someone test it on an european 3ds?
Edit: I mean to downgrade it and dump the OTP

 

[Toiry921]

Does someone test it on an european 3ds?
Edit: I mean to downgrade it and dump the OTP

last I checked shadowtrance was able to downgrade and dump the OTP but I'm not sure if it was with spider or not

 

[OctopusRift]

last I checked shadowtrance was able to downgrade and dump the OTP but I'm not sure if it was with spider or not

yes

 

[Sgt. Lulz]

Does someone test it on an european 3ds?
Edit: I mean to downgrade it and dump the OTP

It should theoretically work on all regions, but the only public 2.0.0E dump I've been able to find is missing a lot of titles, which means it's a guaranteed brick.
This is what's missing, according to one guy (plus title versions Yellows8's 2.0.0E Report):

Spoiler

titles missing on 2.0.0-2E update pack

0004001000022800 v1027 streetpass
0004001000022E00 v0 argames
0004001000022F00 v0 safe sysupdater
0004001000025000 v2048 promo vid (stub)

0004003000009802 v1027 home menu
0004003000009902 v0 cam applet
0004003000009B02 v1026 instruction manual applet
0004003000009C02 v1026 game notes
0004003000009D02 v6 spider
0004003000009F02 v1026 friend list
000400300000A002 v1029 notifications
000400300000D002 v1026 keyboard
000400300000D003 v0 safe keyboard
000400300000D102 v0 mii selector
000400300000D302 v0 photo file selector
000400300000D402 v3 sound file selector

0004009B00011202 v0 ?
0004009B00011302 v0 ?
0004009B00011502 v0 ?
0004009B00011702 v0 ?
0004009B00011802 v0 ?
0004009B00011B02 v0 ?
0004009B00011C02 v0 ?
0004009B00012102 v1026 ?
0004009B00013102 v1024 eula:/
0004009B00015102 v1024 rate:/

000400DB00016102 v32 nver
000400DB00017102 v2049 cver

You can get everything except Mii Plaza and Spider through the NUS. Mii Plaza is completely missing and Spider just hangs on the download.
For lack of a hardmod, I'm downgrading emuNAND before flashing to sysNAND. I don't feel like doing a shitty soldering job yet, so if it bricks, I'll cross that bridge when and if I get to it.
At the moment I'm trying to double check that the downgrade went fine by booting emuNAND on Cakes v128, and end up with a black screen. This is normal, isn't it? That's definitely not normal.

 

[Urbanshadow]

They make a custom ARM9 payload for spider to restore NAND from SD card.

Dumb question, but why won't D9 arm9 payload work as is? It has nand restore from SD...

 

[OctopusRift]

MPU registers I think.

Dumb question, but why won't D9 arm9 payload work as is? It has nand restore from SD...

 

[Mrrraou]

Dumb question, but why won't D9 arm9 payload work as is? It has nand restore from SD...

Framebuffers

 

[peteruk]

It should theoretically work on all regions, but the only public 2.0.0E dump I've been able to find is missing a lot of titles, which means it's a guaranteed brick.
This is what's missing, according to one guy (plus title versions Yellows8's 2.0.0E Report):
You can get everything except Mii Plaza and Spider through the NUS. Mii Plaza is completely missing and Spider just hangs on the download.
For lack of a hardmod, I'm downgrading emuNAND before flashing to sysNAND. I don't feel like doing a shitty soldering job yet, so if it bricks, I'll cross that bridge when and if I get to it.
At the moment I'm trying to double check that the downgrade went fine by booting emuNAND on Cakes v128, and end up with a black screen. This is normal, isn't it?

So, as it stands am i right in thinking anyone with a EURO N3DS & a hard-mod couldn't take advantage of arm9loaderhax because the full set of cia's don't exist ? Or is there a work around ?

 

[Mrrraou]

So, as it stands am i right in thinking anyone with a EURO N3DS & a hard-mod couldn't take advantage of arm9loaderhax because the full set of cia's don't exist ? Or is there a work around ?

Well I have a work-around: patience

 

[peteruk]

Well I have a work-around: patience

I always trust in the cat picture

 

[Sgt. Lulz]

So, as it stands am i right in thinking anyone with a EURO N3DS & a hard-mod couldn't take advantage of arm9loaderhax because the full set of cia's don't exist ? Or is there a work around ?

As already stated, you'd be way better off waiting for a proper 2.0.0-2E upload that's been tested and confirmed to work.
3DNUS won't spit out the full package, so that's out of the window.

 

[Nintendo4DSXL]

On that ISO site is a 2.1.0-4E title dump it needs only to convert to cia(i dont know how to do this)

 

[RednaxelaNnamtra]

So, as it stands am i right in thinking anyone with a EURO N3DS & a hard-mod couldn't take advantage of arm9loaderhax because the full set of cia's don't exist ? Or is there a work around ?

Massexplosion has 1.0 EUR cias.
Edit: Also there is a 2.1 Update pack on that iso site. But I haven't testet it(I have Cubic ninja, so I don't need the spider method).

 

[guisadop]

So this is impossible to do for people without emuNAND?

 

[Mrrraou]

So this is impossible to do for people without emuNAND?

Well, if you can't use emuNAND, I highly doubt that you could do it as well.

 

[Earth97]

Just a question to sum things up: what's the point of dumping a console's OTP at the moment?
I could downgrade my Old3DS flashing the emuNAND, dump the OTP and get back to 4.1 using a gamecard (then MSET payload via R4 -> rxTools -> Back to 9.2). Would this be of any use?