MassExplosion

[3DS] Manually injecting arm9loaderhax

Feb 15th, 2016
231
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.74 KB | None | 0 0
  1. EDIT: DO NOT USE THIS! (YET)
  2. 1. Compile delebile's arm9loaderhax. (You're on your own for this one)
  3. 2. Encrypt the outputted firm0.bin and firm1.bin with your 3DS's firm0firm1 xorpad. You can make this with Decrypt9.
  4. To encrypt it, use padxorer. (Syntax: padxorer firmX.bin firm0firm1.xorpad)
  5. 3. Inject FIRM0 at 0x0B130000. Overwrite the existing data there.
  6. 4. Inject FIRM1 at 0x0B530000. Overwrite the existing data there.
  7. 5. Inject sector.bin at 0x12C00. Overwrite the existing data there. (sector.bin should be encrypted with a SHA-256 hash of your OTP.
  8. delebile's arm9loaderhax does this during compile)
  9. 6. Inject stage0x5C000 to 0xB800000. Overwrite the existing data there.
  10. 7. You're done! Flash the modified NAND.bin back to sysNAND.
Advertisement
Add Comment
Please, Sign In to add comment