安装 boot9strap（通过 HBL-USM）

如果有疑问并且懂英语的话，可以到 Nintendo Homebrew Discord 服务器上使用英文寻求帮助。（请注意，如果你身处中国大陆，你可能需要通过科学上网来访问 Discord） 你也可以到译者的 QQ 群寻求帮助，群号为 942052497。
如果你喜欢我们的教程，可以通过捐赠支持我们。
技术细节（选看）

为了破解系统的 SAFE_MODE 固件，我们需要注入一个写入了漏洞的 WiFi 配置文件到主机中。

现在我们能够使用 Homebrew 程序了，接下来我们会利用它进入 slotTool 继续破解下去。

一旦 WiFi 配置文件被注入，我们将会使用到 SAFE_MODE 来继续此教程。SAVE_MODE 是一个所有的 3DS 主机都存在的修复功能，之后它将用于激活被破解的 WiFi 配置文件。

如果你想知道有关 unSAFE_MODE 的更多技术细节，请见这里。

兼容性注意

如果你的 LR↑A 键其中有一个坏掉了，请加入 Nintendo Homebrew Discord 服务器然后以英文寻求帮助。（请注意，如果你身处中国大陆，访问 Discord 可能需要科学上网），你也可以到译者的 QQ 群寻求帮助，群号为 942052497。

你需要准备点啥？

第一步 – 准备工作

In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your console’s SD card. Then, you will use Homebrew Launcher to launch slotTool, which will overwrite your Wi-Fi slots with hacked data. 你自己设置的 Wi-Fi 链接点将在这个过程中被暂时覆盖。

  1. 将你的 SD 卡插入到电脑
  2. 在 SD 卡根目录创建一个名为 boot9strap 的文件夹
  3. Copy boot9strap.firm and boot9strap.firm.sha from the RELEASE .zip to the /boot9strap/ folder on your SD card
  4. 检查 SD 卡的根目录是否存在一个名为 3ds 的文件夹，如果没有则手动新建一个
    • This folder stores homebrew applications and data; it is different from the Nintendo 3DS folder that the console automatically generates
  5. Copy slotTool.3dsx from the slotTool folder inside the RELEASE .zip to the /3ds/ folder on your SD card
  6. Copy usm.bin from the RELEASE .zip to the root folder on your SD card
  7. 从 SafeB9SInstaller .zip 压缩包中复制 SafeB9SInstaller.bin 到 SD 卡根目录下
  8. Reinsert your SD card into your console
  9. Power on your console
  10. Open the Homebrew Launcher through your method of choice (likely the Internet Browser)
  11. 从自制程序列表中找到并启动 slotTool
    • 如果你的主机卡在了红屏，请长按住电源键来强制关机，然后重试本步骤
  12. 选择 “INSTALL exploit to wifi slots 1,2,3 & shutdown” 选项
    • 你应该会看到屏幕上出现了一些文字，然后你的主机就关机了

第二步 – unSAFE_MODE

In this section, you will enter Safe Mode (a feature available on all 3DS family consoles) and navigate to a menu where unSAFE_MODE will be triggered, which will launch you into the boot9strap (custom firmware) installer.

  1. With your console still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your console
    • Keep holding the buttons until the console boots into Safe Mode (a “system update” menu)
  2. Press “OK” to accept the update
    • There is no update. This is part of the exploit
  3. Press “I accept” to accept the terms and conditions
  4. The update will eventually fail, with the error code 003-1099. This is intended behaviour
  5. When asked “Would you like to configure Internet settings?”, select “Yes”
  6. On the following menu, navigate to Connection 1 -> Change Settings -> Next Page (right arrow) -> Proxy Settings -> Detailed Setup (image)
  7. If the exploit was successful, your console will have booted into SafeB9SInstaller
    • If your console instead freezes on a white screen, hold the POWER button until it turns off, then retry this section
    • If your console instead freezes on a red screen, you are missing usm.bin from the root of your SD card
    • If you get a different error, follow this troubleshooting guide

第三步 – 安装 boot9strap

In this section, you will install custom firmware onto your console.

  1. When prompted, input the key combo given on the top screen to install boot9strap
  2. Once it is complete, press (A) to reboot your console
  3. Your console should have booted into the Luma3DS configuration menu
    • Luma3DS 配置菜单用于设置 Luma3DS 自制固件的可选功能 其中有许多功能可用于个性化或调试
    • For the purpose of this guide, leave these options on the default settings (do not check or uncheck anything)
    • If your console shuts down when you try to power it on, ensure that you have copied boot.firm from the Luma3DS .zip to the root of your SD card
  4. 按下 “Start” 键保存设置并重启

At this point, your console will boot to Luma3DS by default.

  • Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
  • On the next page, you will install useful homebrew applications to complete your setup.

第四步 – 还原 WiFi 配置文件

In this section, you will enter the Homebrew Launcher (using custom firmware) so that you can restore the Wi-Fi connection slots that were overwritten in Section I.

  1. 运行“下载通信（Download Play）”程序
  2. 等到你看到两个按钮
    • Do not press either of the buttons
  3. 同时按下 “L” + “↓” + “Select” 键来打开 Rosalina 菜单
  4. 选择 “Miscellaneous options”
  5. 选择 “Switch the hb. title to the current app.”
  6. 按 “B” 键继续
  7. 按 “B” 键返回 Rosalina 主菜单
  8. 按 “B” 键退出 Rosalina 菜单
  9. 按下 “Home” 键，然后关闭“下载通信(Download Play)”
  10. Relaunch the Download Play application
  11. Your console should load the Homebrew Launcher
  12. 从自制程序列表中找到并启动 slotTool
  13. Select “RESTORE original wifi slots 1,2,3”
  14. Your console will then reboot

继续至完成安装