Apparently, the emulator has a lot of interesting command line switches and even save states.
I wonder if someone can get the GUI to work (I'm not good at cross-referencing strings in ARM64 code).
(there's also a reference to "hagi-gui.config")
EDIT: can probably just use rom:/default_cmd.txt
Also, when attempting to replace the .gcm, the Vulkan cache file should probably be deleted from romfs (or patch main so that it doesn't reference ".cache").
I have an idea, with the dolphin emulator I was able to inject a gamesave with mario sunshine exploit, called shinehax, this save can execute any boot.gci on the memory card, such as swiss ..
and if we could modify the save of all stars and extract the virtual memory card?
If you're lucky, you can probably just keep A.sav's header and replace the used bytes.

But since the exploit itself crashes, you're going to have to compare the .dol files of both the original and SM3DAS ISOs with BinDiff, find the corresponding addresses, and fix the exploit accordingly... Or perhaps you can just replace the .dol or the .gcm.