91 lines
5.9 KiB
Text
91 lines
5.9 KiB
Text
|
---
|
|||
|
|
title: "Installing boot9strap (USM)"
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
{% include toc title="Содержание" %}
|
|||
|
|
|
|||
|
|
### Обязательно к прочтению
|
|||
|
|
|
|||
|
|
In order to exploit the SAFE_MODE firmware of our system, we need to inject an exploited WiFi profile.
|
|||
|
|
|
|||
|
|
We can do this using an existing exploit, BannerBomb3.
|
|||
|
|
|
|||
|
|
To accomplish this, we use your system's encryption key (movable.sed) to build a DSiWare backup that exploits the system in order to inject the exploited WiFi profile to your connections list.
|
|||
|
|
|
|||
|
|
Once the WiFi profile has been injected, we will use SAFE_MODE, which is a recovery feature present on all 3DS consoles, to activate the exploited WiFi profile.
|
|||
|
|
|
|||
|
|
Эти инструкции работают на консолях регионов USA, Europe, Japan и Korea. На регион консоли указывает буква U, E, J или K после версии прошивки.
|
|||
|
|
|
|||
|
|
If your (Right/Left Shoulder), (D-Pad Up) or (A) buttons do not work, you will need to use a [Legacy Method](legacy-methods). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
|||
|
|
{: .notice--danger}
|
|||
|
|
|
|||
|
|
### Что понадобится
|
|||
|
|
|
|||
|
|
* Ваш файл `movable.sed`, полученный на странице [Seedminer](seedminer)
|
|||
|
|
* Свежая версия [Luma3DS](https://github.com/AuroraWright/Luma3DS/releases/latest)
|
|||
|
|
|
|||
|
|
#### Часть I - Подготовительные работы
|
|||
|
|
|
|||
|
|
1. Open [unSAFE_MODE-bb3 tool](https://usm.bruteforcemovable.com/) on your computer
|
|||
|
|
1. Загрузите свой movable.sed, используя опцию "Выберите файл"
|
|||
|
|
1. Click "Download unSAFE_MODE-bb3 archive"
|
|||
|
|
+ This will download an exploit DSiWare called `F00D43D5.bin` and a SAFE_MODE exploit data file called `usm.bin` inside of a zip folder (`unSAFE_MODE-bb3.zip`)
|
|||
|
|
1. Если консоль включена, выключите консоль
|
|||
|
|
1. Вставьте SD-карту в компьютер
|
|||
|
|
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
|||
|
|
1. Copy `usm.bin` from the USM archive (`unSAFE_MODE-bb3.zip`) to the root of your SD card
|
|||
|
|
1. Перейдите в папку `Nintendo 3DS` -> `<ID0>` -> `<32-значный-id>` -> `Nintendo DSiWare` на SD-карте
|
|||
|
|
+ `<ID0>` будет таким же, как и на странице [Seedminer](seedminer)
|
|||
|
|
+ Если папка `Nintendo DSiWare` не существует, создайте ее
|
|||
|
|
1. Если в этой папке уже есть файлы бэкапа DSiWare (`<8-значный-id>.bin`), переместите их на компьютер
|
|||
|
|
+ На этом шаге папка Nintendo DSiWare должна быть пустой. Moving the files to your PC ensures you don't delete any intentional backups
|
|||
|
|
1. Copy the `F00D43D5.bin` file from the USM archive (`unSAFE_MODE-bb3.zip`) to the `Nintendo DSiWare` folder
|
|||
|
|
|
|||
|
|
#### Section II - BannerBomb3
|
|||
|
|
|
|||
|
|
1. Вставьте SD-карту обратно в консоль
|
|||
|
|
1. Включите консоль
|
|||
|
|
1. Откройте Системные настройки на вашей консоли
|
|||
|
|
1. Перейдите в `Управление данными` -> `DSiWare`
|
|||
|
|
1. Перейдите в раздел Карта microSD
|
|||
|
|
+ Your bottom screen should flash Red and then the system will reboot to home menu a few seconds later. This means the exploit profile was successfully copied
|
|||
|
|
1. Выключите консоль
|
|||
|
|
|
|||
|
|
#### Section III - unSAFE_MODE
|
|||
|
|
|
|||
|
|
1. With your system still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), then press (Power)
|
|||
|
|
+ Release the buttons after a few seconds. Your console will boot into Safe Mode
|
|||
|
|
1. Press "OK" to accept the update
|
|||
|
|
+ There is no update. This is part of the exploit
|
|||
|
|
1. Press "I accept" to accept the terms and conditions
|
|||
|
|
1. The update will eventually fail, with error code `003-1099`. This is intended behaviour
|
|||
|
|
1. When asked "Would you like to configure Internet settings?", select "Yes"
|
|||
|
|
1. On the following menu, navigate to `Connection 1` -> `Change Settings` -> `Next Page (right arrow)` -> `Proxy Settings` -> `Detailed Setup`
|
|||
|
|
1. Once you see `B9S install SUCCESS` on the top screen, press any button to reboot to Luma Configuration
|
|||
|
|
|
|||
|
|
#### Часть IV - Настройка Luma3DS
|
|||
|
|
|
|||
|
|
1. Your device should automatically show the Luma Configuration menu
|
|||
|
|
1. Нажимая (A) выберите следующие пункты:
|
|||
|
|
+ **"Show NAND or user string in System Settings"**
|
|||
|
|
1. Нажмите (Start), чтобы сохранить настройки и перезагрузиться
|
|||
|
|
+ После короткой задержки консоль должна загрузить меню HOME. Если экран остаётся чёрным дольше 5 минут, обратитесь к разделу [Проблемы и их решения](troubleshooting#черный-экран-при-загрузке-sysnand-после-установки-boot9strap)
|
|||
|
|
|
|||
|
|
#### Section V - Restoring WiFi Configuration Profiles
|
|||
|
|
|
|||
|
|
1. Откройте Системные настройки на вашей консоли
|
|||
|
|
1. Перейдите в `Управление данными` -> `DSiWare`
|
|||
|
|
1. Перейдите в раздел Карта microSD
|
|||
|
|
+ Your bottom screen should flash Green and then the system will reboot to home menu a few seconds later. This means your WiFi configuration profiles were successfully restored
|
|||
|
|
1. Power your system off
|
|||
|
|
1. Вставьте SD-карту в компьютер
|
|||
|
|
1. Перейдите в папку `Nintendo 3DS` -> `<ID0>` -> `<32-значный-id>` -> `Nintendo DSiWare` на SD-карте
|
|||
|
|
+ `<ID0>` будет таким же, как и на странице [Seedminer](seedminer)
|
|||
|
|
1. Delete `F00D43D5.bin` from your Nintendo DSiWare folder
|
|||
|
|
1. Continue to Finalizing Setup
|
|||
|
|
|
|||
|
|
___
|
|||
|
|
|
|||
|
|
### Следующий шаг: [Завершение установки](finalizing-setup)
|
|||
|
|
{: .notice--primary}
|