Homebrew ARM9Loader -- Technical Details and Discussion

  • Thread starter Thread starter Selver
  • Start date Start date
  • Views Views 578,828
  • Replies Replies 4,025
  • Likes Likes 42
That's the one.
Doesn't really help though when you have to compile it yourself anyway (or get someone else to).
I heard that some guy on GBAtemp with a Sylveon profile pic had an almost-ready to compile fork of arm9loaderhax... And that you just had to replace the OTP and run make...
 
  • Like
Reactions: capito27
  1. Did a new, fresh 9.2 emuNAND
  2. Unlinked it using TinyFormat
  3. Downgraded it using sysUpdater CIA
  4. Dumped emuNAND, generated 0x4 and 0x5 CTRNAND xorpads
  5. Decrypted the CTRNAND from emuNAND using the 0x5 CTRNAND xorpad
  6. Encrypted the decrypted CTRNAND using the 0x4 CTRNAND xorpad, and reinjected it into the emuNAND dump
  7. Replaced the NCSD header from my emuNAND dump with an O3DS NCSD header
  8. Flashed it into my sysNAND
  9. Removed the SD card
  10. Pressed the power button
I used the Decrypt9 payload for the Spider 2.1 RSA_VERIFY exploit. Then, I flashed my 9.2 sysNAND backup.
Sorry but where can I find the payload? Is it in the latest release Decrypt9WIP-20160217-221257.zip?
 
So I done a lot more reading of this topic which I should probably have done before going head first off a cliff to get my OTP!

Basically I now understand I'm just going to have to be patient and wait for a payload that can boot directly into sysnand.

But hey thanks to the guys in the beginning who got all of this working.
 

Site & Scene News

Popular threads in this forum