Merge pull request #2074 from lifehackerhansol/pichaxx
Bring back HBL-USM
This commit is contained in:
commit
8571ba3832
4 changed files with 106 additions and 59 deletions
|
@ -1,15 +1,12 @@
|
||||||
---
|
---
|
||||||
title: "Installing boot9strap (PicHaxx)"
|
title: "Homebrew Launcher (PicHaxx)"
|
||||||
---
|
---
|
||||||
|
|
||||||
{% include toc title="Table of Contents" %}
|
{% include toc title="Table of Contents" %}
|
||||||
|
|
||||||
### Required Reading
|
### Required Reading
|
||||||
|
|
||||||
The instructions on this page do not currently work on the latest firmware (11.16.0). If you were directly linked to this page, [return to Seedminer](seedminer) or join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
This method of using Seedminer for further exploitation uses your `movable.sed` file to write a custom save file for Pokémon Picross, which can then be used with unSAFE_MODE to run SafeB9SInstaller.
|
||||||
{: .notice--warning}
|
|
||||||
|
|
||||||
This method of using Seedminer for further exploitation uses your `movable.sed` file to write a custom save file for Pokémon Picross, which can then be used with universal-otherapp to run SafeB9SInstaller.
|
|
||||||
|
|
||||||
This process will overwrite your Pokémon Picross save file, if you have one. If you wish to preserve your Pokémon Picross game data, you should make a backup of your `00000001.sav` file before overwriting it.
|
This process will overwrite your Pokémon Picross save file, if you have one. If you wish to preserve your Pokémon Picross game data, you should make a backup of your `00000001.sav` file before overwriting it.
|
||||||
{: .notice--warning}
|
{: .notice--warning}
|
||||||
|
@ -20,10 +17,8 @@ This process will overwrite your Pokémon Picross save file, if you have one. If
|
||||||
+ You can scan [this QR code](http://api.qrserver.com/v1/create-qr-code/?color=000000&bgcolor=FFFFFF&data=ESHOP://50010000037815&margin=0&qzone=1&size=400x400&ecc=L) using the Nintendo 3DS Camera for a direct link to the eShop app
|
+ You can scan [this QR code](http://api.qrserver.com/v1/create-qr-code/?color=000000&bgcolor=FFFFFF&data=ESHOP://50010000037815&margin=0&qzone=1&size=400x400&ecc=L) using the Nintendo 3DS Camera for a direct link to the eShop app
|
||||||
+ Your SD card must be inserted in your device to install Pokémon Picross
|
+ Your SD card must be inserted in your device to install Pokémon Picross
|
||||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||||
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
|
||||||
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
|
||||||
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
* The latest release of [Luma3DS](https://github.com/LumaTeam/Luma3DS/releases/latest) (the Luma3DS `.zip` file)
|
||||||
* The latest release of [universal-otherapp](https://github.com/TuxSH/universal-otherapp/releases/latest) (`otherapp.bin`)
|
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file)
|
||||||
|
|
||||||
### Instructions
|
### Instructions
|
||||||
|
|
||||||
|
@ -39,15 +34,10 @@ This process will overwrite your Pokémon Picross save file, if you have one. If
|
||||||
+ Your SD card must be inserted in your device to install Pokémon Picross
|
+ Your SD card must be inserted in your device to install Pokémon Picross
|
||||||
1. Power off your device
|
1. Power off your device
|
||||||
1. Insert your SD card into your computer
|
1. Insert your SD card into your computer
|
||||||
1. Copy `otherapp.bin` to the root of your SD card
|
|
||||||
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
|
||||||
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
1. Copy `boot.firm` and `boot.3dsx` from the Luma3DS `.zip` to the root of your SD card
|
||||||
1. Create a folder named `boot9strap` on the root of your SD card
|
+ The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
|
||||||
1. Copy `boot9strap.firm` and `boot9strap.firm.sha` from the boot9strap `.zip` to the `/boot9strap/` folder on your SD card
|
1. Create a folder named `3ds` on the root of your SD card
|
||||||
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
1. Copy the `slotTool` folder from the unSAFE_MODE `.zip` to the `3ds` folder on your SD card
|
||||||
|
|
||||||
![]({{ "/images/screenshots/pichaxx-root-layout.png" | absolute_url }})
|
|
||||||
{: .notice--info}
|
|
||||||
|
|
||||||
#### Section II - PicHaxx
|
#### Section II - PicHaxx
|
||||||
|
|
||||||
|
@ -67,26 +57,10 @@ This process will overwrite your Pokémon Picross save file, if you have one. If
|
||||||
1. Reinsert your SD card into your device
|
1. Reinsert your SD card into your device
|
||||||
1. Power on your device
|
1. Power on your device
|
||||||
1. Launch "Pokémon Picross"
|
1. Launch "Pokémon Picross"
|
||||||
1. If the exploit was successful, your device will have booted into SafeB9SInstaller
|
1. If the exploit was successful, your device will have booted into the Homebrew Launcher
|
||||||
+ If you get an error message, [follow this troubleshooting guide](troubleshooting#installing-boot9strap-pichaxx)
|
+ If you get an error message, [follow this troubleshooting guide](troubleshooting#homebrew-launcher-pichaxx)
|
||||||
|
|
||||||
#### Section III - Installing boot9strap
|
|
||||||
|
|
||||||
1. When prompted, input the key combo given on the top screen to install boot9strap
|
|
||||||
+ If the top screen is blank, reboot your device and re-launch Pokémon Picross
|
|
||||||
1. Once it is complete, press (A) to reboot your device
|
|
||||||
1. Your device should have rebooted into the Luma3DS configuration menu
|
|
||||||
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
|
||||||
1. Press (Start) to save and reboot
|
|
||||||
|
|
||||||
At this point, your console will boot to Luma3DS by default.
|
|
||||||
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
|
||||||
+ On the next page, you will install useful homebrew applications to complete your setup.
|
|
||||||
|
|
||||||
|
|
||||||
At this point, Pokémon Picross is no longer necessary and can be removed from your device. If you wish to play the game, restore your `00000001.sav` backup or re-download the game from the Nintendo eShop.
|
|
||||||
{: .notice--info}
|
|
||||||
___
|
___
|
||||||
|
|
||||||
### Continue to [Finalizing Setup](finalizing-setup)
|
### Continue to [Installing boot9strap (HBL-USM)](installing-boot9strap-(hbl-usm))
|
||||||
{: .notice--primary}
|
{: .notice--primary}
|
86
_pages/en_US/installing-boot9strap-(hbl-usm).txt
Normal file
86
_pages/en_US/installing-boot9strap-(hbl-usm).txt
Normal file
|
@ -0,0 +1,86 @@
|
||||||
|
---
|
||||||
|
title: "Installing boot9strap (HBL-USM)"
|
||||||
|
---
|
||||||
|
|
||||||
|
{% include toc title="Table of Contents" %}
|
||||||
|
|
||||||
|
### Required Reading
|
||||||
|
|
||||||
|
In order to exploit the SAFE_MODE firmware of our system, we need to inject an exploited WiFi profile.
|
||||||
|
|
||||||
|
As we already have Homebrew access, we can use slotTool to do this.
|
||||||
|
|
||||||
|
Once the WiFi profile has been injected, we will use SAFE_MODE, which is a recovery feature present on all 3DS consoles, to activate the exploited WiFi profile.
|
||||||
|
|
||||||
|
### What You Need
|
||||||
|
|
||||||
|
* The latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip) (direct download)
|
||||||
|
* The latest release of [boot9strap](https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip) (direct download)
|
||||||
|
* The latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest)
|
||||||
|
* You may already have this from a prior section of the guide
|
||||||
|
|
||||||
|
#### Section I - Prep Work
|
||||||
|
|
||||||
|
1. Your console should be powered on and showing the Homebrew Launcher from the previous part of the guide
|
||||||
|
1. Launch slotTool from the list of homebrew
|
||||||
|
+ If you get stuck on a red screen, forcefully power off the console by holding the power button for fifteen seconds, then retry this section
|
||||||
|
1. Select the "INSTALL exploit to wifi slots 1,2,3 & shutdown" option
|
||||||
|
+ You will see some on-screen text and then your system will shut down
|
||||||
|
1. Remove your SD card from your console and connect it to your computer
|
||||||
|
1. Create a folder named `boot9strap` on the root of your SD card
|
||||||
|
1. Copy `boot9strap.firm` and `boot9strap.firm.sha` from the boot9strap `.zip` to the `/boot9strap/` folder on your SD card
|
||||||
|
1. Copy `SafeB9SInstaller.bin` from the SafeB9SInstaller `.zip` to the root of your SD card
|
||||||
|
1. Copy `usm.bin` from the unSAFE_MODE `.zip` to the root of your SD card
|
||||||
|
1. Put your SD card back into your console
|
||||||
|
|
||||||
|
#### Section II - unSAFE_MODE
|
||||||
|
|
||||||
|
If your (Right/Left Shoulder), (D-Pad Up) or (A) buttons do not work, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||||
|
{: .notice--danger}
|
||||||
|
|
||||||
|
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), then press (Power)
|
||||||
|
+ Keep holding the buttons until the device boots into Safe Mode
|
||||||
|
1. Press "OK" to accept the update
|
||||||
|
+ There is no update. This is part of the exploit
|
||||||
|
1. Press "I accept" to accept the terms and conditions
|
||||||
|
1. The update will eventually fail, with the error code `003-1099`. This is intended behaviour
|
||||||
|
1. When asked "Would you like to configure Internet settings?", select "Yes"
|
||||||
|
1. On the following menu, navigate to `Connection 1` -> `Change Settings` -> `Next Page (right arrow)` -> `Proxy Settings` -> `Detailed Setup`
|
||||||
|
+ This is a [visual representation](https://uwuu.ca/images/safemode_highlighted.png)
|
||||||
|
1. If the exploit was successful, your device will have booted into SafeB9SInstaller
|
||||||
|
|
||||||
|
#### Section III - Installing boot9strap
|
||||||
|
|
||||||
|
1. When prompted, input the key combo given on the top screen to install boot9strap
|
||||||
|
+ If the top screen is blank, power off your device and re-do Section III
|
||||||
|
1. Once it is complete, press (A) to reboot your device
|
||||||
|
1. Your device should have rebooted into the Luma3DS configuration menu
|
||||||
|
+ If your device shuts down when you try to power it on, ensure that you have copied `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
||||||
|
1. Press (Start) to save and reboot
|
||||||
|
|
||||||
|
At this point, your console will boot to Luma3DS by default.
|
||||||
|
+ Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
|
||||||
|
+ On the next page, you will install useful homebrew applications to complete your setup.
|
||||||
|
|
||||||
|
#### Section IV - Restoring WiFi Configuration Profiles
|
||||||
|
|
||||||
|
1. Launch the Download Play application
|
||||||
|
1. Wait until you see the two buttons
|
||||||
|
+ Do not press either of the buttons
|
||||||
|
1. Press (Left Shoulder) + (D-Pad Down) + (Select) at the same time to open the Rosalina menu
|
||||||
|
1. Select "Miscellaneous options"
|
||||||
|
1. Select "Switch the hb. title to the current app."
|
||||||
|
1. Press (B) to continue
|
||||||
|
1. Press (B) to return to the Rosalina main menu
|
||||||
|
1. Press (B) to exit the Rosalina menu
|
||||||
|
1. Press (Home), then close Download Play
|
||||||
|
1. Relaunch the Download Play application
|
||||||
|
1. Your device should load the Homebrew Launcher
|
||||||
|
1. Launch slotTool from the list of homebrew
|
||||||
|
1. Select "RESTORE original wifi slots 1,2,3"
|
||||||
|
1. Your device will then reboot
|
||||||
|
|
||||||
|
___
|
||||||
|
|
||||||
|
### Continue to [Finalizing Setup](finalizing-setup)
|
||||||
|
{: .notice--primary}
|
|
@ -16,9 +16,6 @@ Once the WiFi profile has been injected, we will use SAFE_MODE, which is a recov
|
||||||
|
|
||||||
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
These instructions work on USA, Europe, Japan, and Korea region consoles as indicated by the letters U, E, J, or K after the system version.
|
||||||
|
|
||||||
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
|
||||||
{: .notice--warning}
|
|
||||||
|
|
||||||
### What You Need
|
### What You Need
|
||||||
|
|
||||||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||||||
|
@ -63,11 +60,15 @@ If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will
|
||||||
1. Navigate to `Data Management` -> `DSiWare`
|
1. Navigate to `Data Management` -> `DSiWare`
|
||||||
1. Click on the SD Card section
|
1. Click on the SD Card section
|
||||||
+ Your device should show a menu with some text
|
+ Your device should show a menu with some text
|
||||||
|
+ If this step causes your device to crash, [follow this troubleshooting guide](troubleshooting#dsiware-management-menu-crashes-without-showing-usm-menu)
|
||||||
1. Select "Inject haxx"
|
1. Select "Inject haxx"
|
||||||
+ Your device will automatically power off
|
+ Your device will automatically power off
|
||||||
|
|
||||||
#### Section III - unSAFE_MODE
|
#### Section III - unSAFE_MODE
|
||||||
|
|
||||||
|
If your (Right/Left Shoulder), (D-Pad Up), or (A) buttons do not work, you will need to follow [an alternate branch of Seedminer](bannerbomb3). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||||
|
{: .notice--warning}
|
||||||
|
|
||||||
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), then press (Power)
|
1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), then press (Power)
|
||||||
+ Keep holding the buttons until the device boots into Safe Mode
|
+ Keep holding the buttons until the device boots into Safe Mode
|
||||||
1. Press "OK" to accept the update
|
1. Press "OK" to accept the update
|
||||||
|
|
|
@ -64,7 +64,7 @@ The website has determined that your `movable.sed` cannot be brute-forced. Ensur
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Installing boot9strap (PicHaxx)
|
## Homebrew Launcher (PicHaxx)
|
||||||
|
|
||||||
### "An error has occurred. Hold down the POWER button to turn off the power..." (black screen with text)
|
### "An error has occurred. Hold down the POWER button to turn off the power..." (black screen with text)
|
||||||
|
|
||||||
|
@ -78,30 +78,12 @@ Your device already has custom firmware. You should [check for CFW](checking-for
|
||||||
|
|
||||||
### "An error has occurred, forcing the software to close..." (white message box)
|
### "An error has occurred, forcing the software to close..." (white message box)
|
||||||
|
|
||||||
There is an issue with your `otherapp.bin` file. Download the latest release of [universal-otherapp](https://github.com/TuxSH/universal-otherapp/releases/latest) and place it on the root of your SD card. Do not add the `.bin` extension if you do not already see it.
|
There is an issue with your `otherapp.bin` file. Download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest), place the `.bin` file relevant to your console from the `otherapps_with_CfgS` folder to the root of your SD card, and rename it to `otherapp.bin`. Do not add the `.bin` extension if you do not already see it.
|
||||||
|
|
||||||
### Game starts normally
|
### Game starts normally
|
||||||
|
|
||||||
Your modified `00000001.sav` file may be misplaced, or you may have used the wrong `movable.sed` when creating it. Re-generate your `movable.sed` from [Bruteforce Movable](https://seedminer.hacks.guide), then re-create the save using the [PicHaxx Save Tool](https://3ds.nhnarwhal.com/3dstools/pichaxx.php) and place the resulting file (`00000001.sav`) in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `title` -> `00040000` -> `0017c100` -> `data`.
|
Your modified `00000001.sav` file may be misplaced, or you may have used the wrong `movable.sed` when creating it. Re-generate your `movable.sed` from [Bruteforce Movable](https://seedminer.hacks.guide), then re-create the save using the [PicHaxx Save Tool](https://3ds.nhnarwhal.com/3dstools/pichaxx.php) and place the resulting file (`00000001.sav`) in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `title` -> `00040000` -> `0017c100` -> `data`.
|
||||||
|
|
||||||
### Failed to open SafeB9SInstaller.bin
|
|
||||||
|
|
||||||
The file `SafeB9SInstaller.bin` is missing or misplaced. Download the latest release of [SafeB9SInstaller](https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip), extract it, and place `SafeB9SInstaller.bin` on the root of your SD card. Do not add the `.bin` extension if you do not already see it.
|
|
||||||
|
|
||||||
### Frozen on "Doing agbhax..."
|
|
||||||
|
|
||||||
There may be an issue with your `otherapp.bin` file. Download the latest release of [universal-otherapp](https://github.com/TuxSH/universal-otherapp/releases/latest) and place it on the root of your SD card. Do not add the `.bin` extension if you do not already see it.
|
|
||||||
|
|
||||||
### "PrepareArm9ForTwl returned error c8804631!"
|
|
||||||
|
|
||||||
You will need to follow an alternate method, like [Installing boot9strap (USM)](installing-boot9strap-(usm)).
|
|
||||||
|
|
||||||
### Failed to mount the SD card!
|
|
||||||
|
|
||||||
Back up your data and reformat your SD card as FAT32 with the recommended tool depending on your operating system ([Windows](formatting-sd-(windows)), [macOS](formatting-sd-(mac)), [Linux](formatting-sd-(linux))). MiniTool and the HP formatting tool are known to cause issues with 3DS SD cards.
|
|
||||||
|
|
||||||
If this is unsuccessful, try using another SD card.
|
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Installing boot9strap (Soundhax)
|
## Installing boot9strap (Soundhax)
|
||||||
|
@ -146,7 +128,11 @@ If this is unsuccessful, try using another SD card.
|
||||||
|
|
||||||
### DSiWare Management menu crashes without showing USM menu
|
### DSiWare Management menu crashes without showing USM menu
|
||||||
|
|
||||||
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php). If this fails, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) for assistance.
|
Ensure that `F00D43D5.bin` is the only file in `Nintendo 3DS` -> `<ID0>` -> `<ID1>` -> `Nintendo DSiWare`. If it is, then re-create it with the [unSAFE_MODE Exploit Injector](https://3ds.nhnarwhal.com/3dstools/unsafemode.php).
|
||||||
|
|
||||||
|
Also, ensure that `usm.bin` is on the root of the SD card. If it is missing, then download the latest release of [unSAFE_MODE](https://github.com/zoogie/unSAFE_MODE/releases/latest) (the RELEASE `.zip` file), and copy the `usm.bin` file to the root of your SD card.
|
||||||
|
|
||||||
|
If neither of these solutions fixes this problem, then custom firmware may have been uninstalled on this device in a way that makes this method impossible to perform. If this is the case, you will need to follow [an alternate branch of Seedminer](homebrew-launcher-(pichaxx)). For assistance with this matter, join [Nintendo Homebrew on Discord](https://discord.gg/MWxPgEp) and ask, in English, for help.
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue