Homebrew ARM9Loader -- Technical Details and Discussion

[Mrrraou]

AuReiNand works very well for this. For those of us without hardmods, it's very useful to have the ability to boot into 9.0 sysNAND to run Decrypt9.

Does AuReiNAND runs into sysNAND with 9.2 FIRM ?
Are signatures patched ?
How are you running D9 ?

 

[Raugo]

Does AuReiNAND runs into sysNAND with 9.2 FIRM ?
Are signatures patched ?
How are you running D9 ?

Yes and cake to, you can use browserhax or homemenuhax to launch decrypt9.

 

[subcon959]

Does AuReiNAND runs into sysNAND with 9.2 FIRM ?
Are signatures patched ?
How are you running D9 ?

I believe it's using sig patched 9.0 firm. I was using oot3dhax to boot into hbl, but now I've installed hbl loader.cia in sysNAND so I'm using that to get to Decrypt9.

 

[Mrrraou]

Yes and cake to, you can use browserhax or homemenuhax to launch decrypt9.

I believe it's using sig patched 9.0 firm. I was using oot3dhax to boot into hbl, but now I've installed hbl loader.cia in sysNAND so I'm using that to get to Decrypt9.

http://gbatemp.net/threads/download...yption-tools-wip.388831/page-105#post-6089574
Maybe that you could be interested, guys.

I believe it's using sig patched 9.0 firm. I was using oot3dhax to boot into hbl, but now I've installed hbl loader.cia in sysNAND so I'm using that to get to Decrypt9.

I'll ask Aurora on this. I think that if you can do that, it's definitely using a signpatched 9.0-9.2 FIRM.

 

[subcon959]

Looks like she updated the first post in her thread with the info..

If your console has 9.0/9.2 on SysNAND, you can boot SysNAND with the 9.0 FIRM and patched signature checks. To do this hold L+R on boot. On O3DS, the reboot patch won't be applied. If your console (O3DS) is not on 9.x, it will be detected and it will just hang on a black screen.

 

[JacksonS]

Could I have someone compile a .3dsx file if I provide he necessary things? I might need help booting a CFW with this too. The answers are somewhere on this thread, I'm sure, but I can't sift through 65 pages of conversations...

 

[Sgt. Lulz]

Could I have someone compile a .3dsx file if I provide he necessary things? I might need help booting a CFW with this too. The answers are somewhere on this thread, I'm sure, but I can't sift through 65 pages of conversations...

Sure, hit me up.
Fair warning: If your OTP dump is invalid, don't hold me responsible for it.
My build environment has spit out two functioning .3dsx installers already, so I'm pretty sure it'll work.

 

[Epicdaftman]

I have a question. I know you cannot use other people's OTPs, but could you use someone else's modified 2.1 N3DS sysnand.bin instead of modifying your own?

 

[Orkna]

So, now i use latest AuReiNAND with arm9loader.

Not holding any buttons:
emuNAND "cold" boot.

Holding L+R when booting (i need my dose of GW):
sysNAND "cold" boot -> Menuhax -> CtrBootManager -> Gateway -> Profit.

 

[FenrirWolf]

I have a question. I know you cannot use other people's OTPs, but could you use someone else's modified 2.1 N3DS sysnand.bin instead of modifying your own?

Nah. That would be functionally equivalent to having an invalid OTP except in reverse. You'd have the right OTP but then the wrong everything else and you'd end up mega bricked.

 

[Sgt. Lulz]

I have a question. I know you cannot use other people's OTPs, but could you use someone else's modified 2.1 N3DS sysnand.bin instead of modifying your own?

Absolutely not.
The new version of the OTP dumping guide is significantly safer, and you would have a much better time downgrading, decrypting and hex editing than you would trying to get a different console's NAND dump working.

 

[Apache Thunder]

NAND dumps are always console unique never use one from another console on sysnand. You'll end up with a brick.

C'mon man, why you gotta be like this? Where's my jingle?

I made a new A9L test video. It's got the jingle at the end. You happy now? (though a higher quality version of it. The one you linked to was like 240p...lol no.)


(This video just shows off that I can boot into emunand by pressing L on boot. And yes that's an exploitable 9.2 emunand! My sysnand is now 10.5.

 

[Epicdaftman]

The links are broken on the github. Where can I find the all-in-one-pack?

 

[Plailect]

https://mega.nz/#F!k8sXCSyb!3ngmGyCn7rEJj4mZhN1xIw

Switching hosts, here's temp storage

 

[Mrrraou]

NAND dumps are always console unique never use one from another console on sysnand. You'll end up with a brick.



I made a new A9L test video. It's got the jingle at the end. You happy now? (though a higher quality version of it. The one you linked to was like 240p...lol no.)


(This video just shows off that I can boot into emunand by pressing L on boot. And yes that's an exploitable 9.2 emunand! My sysnand is now 10.5.

My D9 CIA base is nice, huh ?

 

[Supster131]

NAND dumps are always console unique never use one from another console on sysnand. You'll end up with a brick.



I made a new A9L test video. It's got the jingle at the end. You happy now? (though a higher quality version of it. The one you linked to was like 240p...lol no.)


(This video just shows off that I can boot into emunand by pressing L on boot. And yes that's an exploitable 9.2 emunand! My sysnand is now 10.5.

Did you do the same thing as Shadawtrance to update to sysNAND 10.5?

 

[FenrirWolf]

https://mega.nz/#F!k8sXCSyb!3ngmGyCn7rEJj4mZhN1xIw

Switching hosts, here's temp storage

Do those packs have the proper python scripts in them?

 

[Plailect]

Do those packs have the proper python scripts in them?

No, the new one later will. I'm switching to github branches and master zips to make updating easier

 

[FenrirWolf]

Cool. Things are looking stable™ enough that I just might have to try grabbing my OTP tonight.

 

[Apache Thunder]

Did you do the same thing as Shadawtrance to update to sysNAND 10.5?

Actually no. I just swapped CTRNAND, AGBSAVE, TWLN, and TWLP of emunand with sysnand. (As long as the FIRM partitions aren't touched, A9L survives this). I had a 10.5 emunand. I basically just transferred that to my sysannd and used the 9.2 sysnand I had before as my emunand.

You have to swap the individual partitions though. Octopus Rift made the mistake of writing the entire 10.5 emunand partition to his sysnand. He ended up with a non exploitable 10.5 console.

Though he did manage downgrade it without a nand mod though. The details of which I'm not at liberty to discuss at the moment.