c2f6f7e98b
* remove 7z references in mset instructions * remove 7z reference on latest luma * forgot the section 1 mention of 7z * remove luma 7z references * remove luma 7z references from 2xrsa * remove luma 7z references from browserhax * remove luma 7z references from fredtool * remove luma 7z references from frogtool * remove luma 7z reference from hardmod * remove luma 7z reference from ntrboot * remove luma 7z reference from soundhax * remove 7z reference in b9s update guide also add boot.3dsx update to it * remove rar reference on fredtool page. * missed a 7z reference
113 lines
6.4 KiB
Text
113 lines
6.4 KiB
Text
---
|
|
title: "Installing Boot9strap (Fredtool)"
|
|
---
|
|
|
|
{% include toc title="Table of Contents" %}
|
|
|
|
### Required Reading
|
|
|
|
This method of using Seedminer for further exploitation uses your `movable.sed` file to decrypt any DSiWare eShop title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to already own (or download / buy) a DSiWare game from the eShop.
|
|
|
|
This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed [here](https://www.3dbrew.org/wiki/3DS_System_Flaws).
|
|
|
|
### What You Need
|
|
|
|
* Any eShop DSiWare game
|
|
+ JPN region users can download the free title "ほぼ日の健康手帳™" ([![]({{ "/images/qrcodes/50010000005133.png" | absolute_url }}){: height="24px" width="24px"})]({{ "/images/qrcodes/50010000005133.png" | absolute_url }})
|
|
+ USA region users can download the free title "Nintendo Fan Network" ([![]({{ "/images/qrcodes/50010000013696.png" | absolute_url }}){: height="24px" width="24px"})]({{ "/images/qrcodes/50010000013696.png" | absolute_url }})
|
|
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
|
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest)
|
|
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest)
|
|
* The latest release of [Luma3DS](https://github.com/AuroraWright/Luma3DS/releases/latest)
|
|
* The latest release of [the Homebrew Launcher](https://github.com/fincs/new-hbmenu/releases/latest)
|
|
|
|
#### Section I - Prep Work
|
|
|
|
1. Launch System Settings on your device
|
|
1. Navigate to `Data Management` -> `DSiWare`
|
|
1. Under the "System Memory" section, select your DSiWare game
|
|
1. Select "Copy", then select "OK"
|
|
+ If prompted, overwrite any existing copy
|
|
1. Power off your device
|
|
1. Insert your SD card into your computer
|
|
1. Copy your `movable.sed` file to the root of your SD card
|
|
1. Copy `boot.firm` from the Luma3DS `.zip` to the root of your SD card
|
|
1. Copy `boot.nds` (B9STool) to the root of your SD card
|
|
1. Copy `boot.3dsx` to the root of your SD card
|
|
1. Copy the `private` folder from the Frogminer_save `.zip` to the root of your SD card
|
|
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<32-character-id>` -> `Nintendo DSiWare` on your SD card
|
|
+ This `<ID0>` will be the same one that you used in [Seedminer](seedminer)
|
|
1. Copy `<8-character-id>.bin` to a folder on your computer
|
|
+ If there are multiple `<8-character-id>.bin` files, just pick one. It doesn't matter which you use.
|
|
|
|
#### Section II - Fredtool
|
|
|
|
1. Open [Fredtool](https://fredtool.bruteforcemovable.com/) on your computer
|
|
1. Select your `movable.sed` file for the "Your movable.sed" field
|
|
1. Select your `<8-character-id>.bin` file for the "Your dsiware.bin" field
|
|
1. Complete the "I'm not a robot" captcha
|
|
1. Select "Start"
|
|
1. Wait for the process to complete
|
|
1. When the process has completed, download your modified DSiWare archive from the site
|
|
1. Copy the `42383841.bin` file from the `output/hax/` folder of the downloaded DSiWare archive (`fredtool_output.zip`) to the `Nintendo 3DS/<ID0>/<32-character-id>/Nintendo DSiWare/` folder on your SD card
|
|
+ This should be different than your initial `<8-character-id>.bin` file
|
|
+ Do not remove any existing `<8-character-id>.bin` files
|
|
1. Reinsert your SD card into your device
|
|
1. Power on your device
|
|
1. Launch System Settings on your device
|
|
1. Navigate to `Data Management` -> `DSiWare`
|
|
1. Under the "SD Card" section, select the "Haxxxxxxxxx!" title
|
|
1. Select "Copy", then select "OK"
|
|
1. Return to main menu of the System Settings
|
|
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK"
|
|
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
|
|
|
#### Section III - Flipnote Exploit
|
|
|
|
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
|
{: .notice--info}
|
|
|
|
1. Complete the initial setup process for the launched game until you reach the main menu
|
|
+ Select the left option whenever prompted during the setup process
|
|
1. Using the touch-screen, select the large left box, then select the box with an SD card icon
|
|
1. Once the menu loads, select the face icon, then the bottom right icon to continue
|
|
1. Select the frog icon at the bottom left
|
|
+ Alternatively, press (X) or (UP) on the D-Pad depending on which is shown on the top screen
|
|
1. Select the second button along the top with a film-reel icon
|
|
1. Scroll right until reel "3/3" is selected
|
|
1. Tap the third box with the letter "A" in it
|
|
1. Scroll left until reel "1/3" is selected
|
|
1. Tap the fourth box with the letter "A" in it
|
|
1. If the exploit was successful, your device will have loaded b9sTool
|
|
1. Using the D-Pad, move to "Install boot9strap"
|
|
1. Press (A), then press START and SELECT at the same time to begin the process
|
|
1. Once completed and the bottom screen says "done.", exit b9sTool, then power off your device
|
|
+ You may have to force power off by holding the power button
|
|
+ If you see the Luma Configuration screen, continue with the guide without powering off
|
|
|
|
#### Section IV - Configuring Luma3DS
|
|
|
|
1. Boot your device while holding (Select) to launch the Luma configuration menu
|
|
+ If you encounter issues launching the Luma configuration menu, [follow this troubleshooting guide](https://github.com/zoogie/b9sTool/blob/master/TROUBLESHOOTING.md)
|
|
1. Use the (A) button and the D-Pad to turn on the following:
|
|
+ **"Show NAND or user string in System Settings"**
|
|
1. Press (Start) to save and reboot
|
|
+ Your device should load the Home Menu after a short delay. If you get a black screen lasting longer than 5 minutes, [follow this troubleshooting guide](troubleshooting#black-screen-on-sysnand-boot-after-installing-boot9strap)
|
|
|
|
#### Section V - Restoring DS Connection Settings
|
|
|
|
1. Power off your device
|
|
1. Insert your SD card into your computer
|
|
1. Copy the `42383841.bin` file from the `output/clean/` folder of the downloaded DSiWare archive (`fredtool_output.zip`) to the `Nintendo 3DS/<ID0>/<32-character-id>/Nintendo DSiWare/` folder on your SD card
|
|
+ Replace the existing `42383841.bin` file
|
|
1. Reinsert your SD card into your device
|
|
1. Power on your device
|
|
1. Launch System Settings on your device
|
|
1. Navigate to `Data Management` -> `DSiWare`
|
|
1. Under the "SD Card" section, select the "Nintendo DSi™" title
|
|
1. Select "Copy", then select "OK"
|
|
|
|
___
|
|
|
|
### Continue to [Finalizing Setup](finalizing-setup)
|
|
{: .notice--primary}
|