Hacking [IDEA]arm9loaderhax boot without SD

Is this possible?


  • Total voters
    55

cavolo

Well-Known Member
Member
Joined
Jun 3, 2015
Messages
162
Trophies
0
Age
30
XP
121
Country
France
Personnaly I think its not really usefull, because all my games are on my sd card so....
Only usefull if you sell your 3ds, but who sell his 3ds ? :'(
 

Salamencizer

Cute Hot Whatever
OP
Member
Joined
Oct 3, 2015
Messages
802
Trophies
0
Age
23
Location
In your heart
Website
gbatemp.net
XP
718
Country
India
Personnaly I think its not really usefull, because all my games are on my sd card so....
Only usefull if you sell your 3ds, but who sell his 3ds ? :'(
Yeah, that is true. But people get annoyed bout thier 3DS not booting without an SD Card, a possible excuse which they make to not install a9lh.
 
Last edited by Salamencizer,

Olmectron

Well-Known Member
Member
Joined
Dec 31, 2012
Messages
2,649
Trophies
2
Age
30
Location
A game
XP
3,677
Country
Mexico
This can also be useful in case the SD port breaks (because you're a brute :P), so the 3DS is still usable. Well, obviously you can't really do a lot of stuff with a broken SD port but at least you can do stuff...
It seems so.

Altough, it would still be unusable for some people. Like me. I have all my 3DS games bought from the eShop (not a single 3DS game card).
 

The Real Jdbye

*is birb*
Member
Joined
Mar 17, 2010
Messages
22,599
Trophies
4
Location
Space
XP
12,575
Country
Norway
So I was thinking, can we just use a SaltFW (SaltLite) payload to load arm9loaderhax without SD? Its size is super small, And it doesn't require any folder/firmware/etc for sigcheckpatching.
Is this possible?
Unlike most other people in this thread I would really like for this to happen. Although there is not much reason not to have a SD card in the 3DS it just irks me that the console cannot function normally without specific hack files. At the very least the console should be able to boot like a regular unmodded 3DS when no SD card is inserted. Such a thing would be simple to do by simply triggering a FIRM launch using the FIRM binary from CTRNAND when no file is found on SD. Shouldn't take more than a few lines of extra code in the FIRM payload.
 

astronautlevel

Well-Known Member
Member
Joined
Jan 26, 2016
Messages
4,127
Trophies
0
Location
Maryland
Website
ataber.pw
XP
4,975
Country
United States
This is entirely possible, but it's somewhat of a pain.

First of all you need a way to read files off the NAND via arm9 - this definitely possible, but difficult when you consider the space limit of k9lh payloads.

You'd then need a payload that's small enough to fit in the NAND (smaller the better, mainly for DSiWare and stuff). In addition, it would need patches for FIRM write protection at the very least, and would need to be able to load firmware.bin from NAND. SaltFW works perfectly for this, as it is relatively lightweight and contains necessary patches. Another option would be Mizuki.

Like I said, it's possible but a pain. Most developers aren't going to be working on it given that it's relatively low priority as few people boot without an SD card. I would be looking into it if I had a hardmod, but since I don't I'm too afraid to brick :P
 
Last edited by astronautlevel,

The Catboy

GBAtemp Official Catboy™: Big Smug
Member
Joined
Sep 13, 2009
Messages
26,707
Trophies
4
Location
Making a non-binary fuss
XP
33,804
Country
Antarctica
From what I understand, A9LH actually works by booting part of the exploitable code from the SD card. Basically disabling part of the code the FIRM0/1 from booting from the 3DS and having them boot through the SD card instead to allow exploitable code to work. So could be possible to install that code directly to the 3DS, but may run a higher chance of bricking.
I could be wrong, but that's what it looks like it functions.
 

Halvorsen

Well-Known Member
Member
Joined
Aug 12, 2015
Messages
2,058
Trophies
0
Website
ha1vorsen.com
XP
1,807
Country
United States
I have arm9loaderhax, and it's still idiotic that the system is useless without a 2 centimeter SD Card. If I'm copying files to my computer or phone my 3DS is literally useless unless I happen to have it on.
And even then I can't access the Settings or hope the system doesn't reboot from a crash.
At this very moment I'm copying 64 gigs to my computer and haven't used my n3DS in a few hours.
 
Last edited by Halvorsen,

VIERcntHOLZ

yep, theres missing an "u".
Member
Joined
Mar 26, 2016
Messages
187
Trophies
0
XP
335
Country
Germany
Actually - if you "hardcode" the CFW into the initial payload, the FIRMpatch would have to be reapplied whenever a new update/commit appears, nor?
 

Shadowhand

Slim, Alternative Dev.
Member
Joined
Feb 27, 2016
Messages
522
Trophies
0
Age
30
XP
1,944
Country
United Kingdom
Actually - if you "hardcode" the CFW into the initial payload, the FIRMpatch would have to be reapplied whenever a new update/commit appears, nor?
Yes, but there won't be a release that won't do good stuff, so it'll be far in between I think. I'm not promising anything, but the initial usable version would be after 14-19 days.
 

Wolfvak

nyaa~
Member
Joined
Oct 25, 2015
Messages
918
Trophies
1
XP
3,159
Country
Uruguay
So I was thinking, can we just use a SaltFW (SaltLite) payload to load arm9loaderhax without SD? Its size is super small, And it doesn't require any folder/firmware/etc for sigcheckpatching.
Is this possible?
Let me clarify something first; you all appear to be a little wrong on thinking how arm9loaderhax works. The exploit itself already lives in you FIRM partitions, the fact that there's no SD card just doesn't allow you to run custom code, but it doesn't mean that the exploit is dead or something like that.

With that out of the way, yes it's not only "possible" but perfectly doable. However, you appear to want a CFW, not just any payload. That introduces certain issues, especially with O3DS and the requirement of reboot patches. But it's still perfectly doable, the only issue would be that you'd need it as a "secondary" a9lh payload living somewhere in your NAND, which the stage1 calls upon booting. In case no SD card is detected, or no arm9loaderhax.bin file exists, then load that secondary payload which is somewhere in your NAND. AFAIK there's been some work done, and not just PoCs, but actual projects.

SaltFW for example, was thought as a base to expand upon and introduce this SD-less boot.
 

migles

All my gbatemp friends are now mods, except for me
Member
Joined
Sep 19, 2013
Messages
8,033
Trophies
0
Location
Earth-chan
XP
5,264
Country
China
From what I understand, A9LH actually works by booting part of the exploitable code from the SD card. Basically disabling part of the code the FIRM0/1 from booting from the 3DS and having them boot through the SD card instead to allow exploitable code to work. So could be possible to install that code directly to the 3DS, but may run a higher chance of bricking.
I could be wrong, but that's what it looks like it functions.
couldn't they do something "if file is not found, boot from firmware" ?

the hability to not using a sd card would be great, so you could use the console with a broken sd card reader
and it would be helpfull to noobs, currently there is a change of blackscreen that a simple fix is ejecting and putting back the sd card, some noobs start the console without the card and think its broken..
and plus it doesn't make sence that you require something to boot the console...
 
Last edited by migles,
General chit-chat
Help Users
  • No one is chatting at the moment.
  • JuanMena @ JuanMena:
    Kissing random dudes choking in celery? Really? Need to study for that?
  • K3N1 @ K3N1:
    Yes it requires a degree
  • K3N1 @ K3N1:
    I could also yank out the rest of my teeth but theirs professionals for that
  • x65943 @ x65943:
    If your throat closes, putting oxygen in your mouth will not solve anything - as you will be introducing oxygen prior to the area of obstruction
  • JuanMena @ JuanMena:
    Just kiss me Kyle.
  • x65943 @ x65943:
    You either need to be intubated to bypass obstruction or create a stoma inferior to the the area of obstruction to survive
  • x65943 @ x65943:
    "Just kiss me Kyle." And I thought all the godreborn gay stuff was a smear campaign
  • JuanMena @ JuanMena:
    If I die, tell my momma I won't be carrying Baby Jesus this christmas :sad::cry:
  • K3N1 @ K3N1:
    Smear campaigns are in The political section now?
  • JuanMena @ JuanMena:
    Chary! Chary! Chary, Chary, Chary!
  • Sonic Angel Knight @ Sonic Angel Knight:
    Pork Provolone :P
  • Psionic Roshambo @ Psionic Roshambo:
    Sounds yummy
  • K3N1 @ K3N1:
    Sweet found my Wii u PSU right after I ordered a new one :tpi:
  • JuanMena @ JuanMena:
    It was waiting for you to order another one.
    Seems like, your PSU was waiting for a partner.
  • JuanMena @ JuanMena:
    Keep them both
    separated or you'll have more PSUs each year.
  • K3N1 @ K3N1:
    Well one you insert one PSU into the other one you get power
  • JuanMena @ JuanMena:
    It literally turns it on.
  • K3N1 @ K3N1:
    Yeah power supplies are filthy perverts
  • K3N1 @ K3N1:
    @Psionic Roshambo has a new friend
    +1
  • JuanMena @ JuanMena:
    It's Kyle, the guy that went to school to be a Certified man Kisser.
  • Psionic Roshambo @ Psionic Roshambo:
    Cartmans hand has taco flavored kisses
  • A @ abraarukuk:
    hi guys
  • Iron_Masuku @ Iron_Masuku:
    Hello
    Skelletonike @ Skelletonike: hmm