259 lines
No EOL
17 KiB
Text
259 lines
No EOL
17 KiB
Text
---
|
|
title: "Installing arm9loaderhax" #
|
|
lang: en
|
|
permalink: /installing-arm9loaderhax.html
|
|
---
|
|
|
|
The final Step of this guide is to install arm9loaderhax and setup Luma3DS to run just milliseconds into the boot. This is accomplished by using SafeA9LHInstaller by [AuroraWright](https://github.com/AuroraWright/).
|
|
{: .notice}
|
|
|
|
This will install [AuroraWright's Fork](https://github.com/AuroraWright/arm9loaderhax) of arm9loaderhax.
|
|
{: .notice--info}
|
|
|
|
We will also setup the ability to launch payloads from arm9loaderhax, giving us the ability to unbrick our SysNAND from situations that would normally brick us by restoring from backup.
|
|
{: .notice--info}
|
|
|
|
To use the [magnet](https://en.wikipedia.org/wiki/Magnet_URI_scheme) links on this page, you will need a torrent client like [Deluge](http://dev.deluge-torrent.org/wiki/Download)
|
|
{: .notice--info}
|
|
|
|
**You cannot use another console's OTP or you will brick GUARANTEED.**
|
|
{: .notice--danger}
|
|
|
|
#### Overview of steps
|
|
|
|
{% capture notice-2 %}
|
|
|
|
In this section, we will go through the process that all the other steps have led up to: actually installing arm9loaderhax.
|
|
<br><br>
|
|
This is nearly the best possible kind of device exploit because it is permanently installable into the NAND firm partitions, and runs before most of the OS loads, allowing it to not only work on *all* versions once installed, but also protect itself and recover from most situations that would brick a non-A9LH 3DS such as a nonfunctional home menu or bad title install.
|
|
<br><br>
|
|
The file `arm9loaderhax.bin` is what is launched by arm9loaderhax itself after it finishes loading off of NAND, and can be any valid arm9 payload. This file can be replaced at any time, although Luma3DS allows for the launch of other arm9 payloads using the Luma3DS chainloader.
|
|
<br><br>
|
|
In this case, we use Luma3DS by [AuroraWright](https://github.com/AuroraWright/) to boot a patched SysNAND directly, allowing us to completely bypass the need for any kind of EmuNAND, vastly simplifying the usage of a hacked 3DS in addition to saving SD card space.
|
|
<br><br>
|
|
Once arm9loaderhax is installed and Luma3DS is setup with the correct options, we then restore our previous backup.
|
|
<br><br>
|
|
During this process, we also setup programs such as the following:
|
|
|
|
+ **FBI** *(installs CIA formatted games and applications)*
|
|
+ **Themely** *(installs custom themes)*
|
|
+ **Luma3DS Updater** *(updates your CFW installation easily)*
|
|
+ **GodMode9** *(multipurpose tool which can do NAND and cartridge functions)*
|
|
|
|
{% endcapture %}
|
|
|
|
<div class="notice--info">{{ notice-2 | markdownify }}</div>
|
|
|
|
#### What you need
|
|
|
|
* <i class="fa fa-magnet" aria-hidden="true" title="This is a magnet link. Use a torrent client to download the file."></i> - [`aeskeydb.bin`](magnet:?xt=urn:btih:18b3a17f78e2376e05feaa150749d9fd689b25dc&dn=aeskeydb.bin&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=http%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fzer0day.ch%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969%2Fannounce&tr=http%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2F9.rarbg.com%3A2710%2Fannounce&tr=udp%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=http%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker1.wasabii.com.tw%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.baravik.org%3A6970%2Fannounce&tr=http%3A%2F%2Ftracker.tfile.me%2Fannounce&tr=udp%3A%2F%2Ftorrent.gresille.org%3A80%2Fannounce&tr=http%3A%2F%2Ftorrent.gresille.org%2Fannounce&tr=udp%3A%2F%2Ftracker.yoshi210.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.filetracker.pl%3A8089%2Fannounce)
|
|
* <i class="fa fa-magnet" aria-hidden="true" title="This is a magnet link. Use a torrent client to download the file."></i> - [`data_input_v3.zip`](magnet:?xt=urn:btih:a1195c9f7ab650fa7c7bf020b51fc19ea8d9440c&dn=data%5Finput%5Fv3.zip&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=http%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fzer0day.ch%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969%2Fannounce&tr=http%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2Fexplodie.org%3A6969%2Fannounce&tr=udp%3A%2F%2F9.rarbg.com%3A2710%2Fannounce&tr=udp%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=http%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker.aletorrenty.pl%3A2710%2Fannounce&tr=http%3A%2F%2Ftracker1.wasabii.com.tw%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.baravik.org%3A6970%2Fannounce&tr=http%3A%2F%2Ftracker.tfile.me%2Fannounce&tr=udp%3A%2F%2Ftorrent.gresille.org%3A80%2Fannounce&tr=http%3A%2F%2Ftorrent.gresille.org%2Fannounce&tr=udp%3A%2F%2Ftracker.yoshi210.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.filetracker.pl%3A8089%2Fannounce)
|
|
* The latest fork of [SafeA9LHInstaller](https://github.com/Plailect/SafeA9LHInstaller/releases/latest) *(the `.7z` file)*
|
|
* The latest release of [arm9loaderhax](https://github.com/AuroraWright/arm9loaderhax/releases/latest) *(the `.7z` file)*
|
|
* The latest release of [Luma3DS](https://github.com/AuroraWright/Luma3DS/releases/latest) *(the `.7z` file)*
|
|
* The latest release of [Themely](https://github.com/ErmanSayin/Themely/releases/latest) *(the `.cia` file)*
|
|
* The latest release of [hblauncher_loader](https://github.com/yellows8/hblauncher_loader/releases/latest)
|
|
* The latest release of [GodMode9](https://github.com/d0k3/GodMode9/releases/latest)
|
|
* The latest release of [Luma3DS Updater](https://github.com/Hamcha/lumaupdate/releases/latest)
|
|
* The latest release of [DSP1](https://github.com/zoogie/DSP1/releases/latest)
|
|
* The latest release of [FBI](https://github.com/Steveice10/FBI/releases/latest)
|
|
* **Old 3DS and 2DS Only:** The Old 3DS 11.2.0-35 [otherapp payload](https://smealum.github.io/3ds/#otherapp) for your region
|
|
|
|
#### Instructions
|
|
|
|
##### Section I - Prep Work
|
|
|
|
1. Insert your SD card into your computer
|
|
1. If they exist, copy `<serialnumber>_nand.bin` and `<serialnumber>_nand.bin.sha` from the `/CTRTransfer/` folder on your SD card to a safe location on your computer
|
|
+ Make backups in multiple locations (such as online file storage)
|
|
+ This backup will save you from a brick if anything goes wrong in the future
|
|
1. Create a folder named `cias` on the root of your SD card if it does not already exist
|
|
1. Create a folder named `files9` on the root of your SD card if it does not already exist
|
|
1. Create a folder named `hblauncherloader` on the root of your SD card if it does not already exist
|
|
1. Copy _the contents of_ the SafeA9LHInstaller `.7z` to the root of your SD card
|
|
1. Copy the `a9lh` folder from the data_input `.zip` to the root of your SD card
|
|
1. Copy _the contents of_ the arm9loaderhax release `.7z` to `a9lh` folder on your SD card
|
|
1. Copy `hblauncher_loader.cia` from the hblauncher_loader `.zip` to the `/cias/` folder on your SD card
|
|
1. Copy `lumaupdater.cia` from the Luma3DS Updater `.zip` to the `/cias/` folder on your SD card
|
|
1. Copy `FBI.cia` from the FBI `.zip` to the `/cias/` folder on your SD card
|
|
1. Copy `DSP1.cia` to the `/cias/` folder on your SD card
|
|
1. Copy `Themely.cia` to the `/cias/` folder on your SD card
|
|
|
|
|
|
{: .notice--info}
|
|
|
|
1. Copy `arm9loaderhax.bin` from the Luma3DS `.7z` to the root of your SD card, overwrite existing files
|
|
1. Create a folder named `luma` on the root of your SD card
|
|
1. Create a folder named `payloads` in the `luma` folder on your SD card
|
|
1. Copy `GodMode9.bin` from the GodMode9 `.zip` to the `/luma/payloads/` folder on your SD card
|
|
1. Copy `aeskeydb.bin` to the `/files9/` folder on your SD card
|
|
1. **Old 3DS and 2DS Only:** Copy the Old 3DS 11.2.0-35 otherapp payload for your region to the `/hblauncherloader/` folder on your SD card
|
|
1. **Old 3DS and 2DS Only:** Rename the Old 3DS 11.2.0-35 otherapp payload on your SD card to match your region:
|
|
+ **EUR:** `OLD-11-4-0-37-EUR.bin`
|
|
+ **JPN:** `OLD-11-4-0-37-JPN.bin`
|
|
+ **KOR:** `OLD-11-4-0-37-KOR.bin`
|
|
+ **USA:** `OLD-11-4-0-37-USA.bin`
|
|
|
|
|
|
{: .notice--info}
|
|
|
|
##### Section II - Installing arm9loaderhax
|
|
|
|
1. Reinsert your SD card into your device
|
|
1. You should be already on 2.1.0 and powered on
|
|
1. Go to URL `http://2xrsa.3ds.guide` in the browser of your device
|
|
+ If you get the error "This service is not available in your region", use the System Settings to set your device's country to match the NAND region you installed with 2.1.0 CTRTransfer
|
|
+ If you forgot to disable parental controls before CTRTransfering or otherwise cannot access wireless settings, note that the device will autoconnect to any network named `attwifi` with no password
|
|
+ If you get another error, [follow this troubleshooting guide](troubleshooting#ts_browser)
|
|
+ If you get a glitched screen, [follow this troubleshooting guide](troubleshooting#ts_safe_a9lh_screen)
|
|
+ If you are on a 2DS or New 3DS and Wireless Communication is off, you can re-enable the wireless by removing the battery and unplugging the charger for several seconds then booting back up
|
|
1. Press (Select) to Full Install
|
|
1. The installer will now install arm9loaderhax on your device (this is very fast)
|
|
1. Power off your device by pressing any button
|
|
1. Insert your SD card into your computer
|
|
1. Copy your device specific `otp.bin` from the `/a9lh/` folder on your SD card to a safe location on your computer and back it up to multiple locations (such as online file storage)
|
|
1. Reinsert your SD card into your device
|
|
|
|
##### Section III - Configuring Luma3DS
|
|
|
|
1. Boot your device while holding (Select) to enter the Luma3DS configuration menu
|
|
+ Make sure to start holding the button before pressing power
|
|
+ If you get a black screen, [follow this troubleshooting guide](troubleshooting#ts_sys_a9lh)
|
|
+ If you boot to SafeA9LHInstaller, [follow this troubleshooting guide](troubleshooting#ts_safe_a9lh)
|
|
1. Use the (A) button and the D-Pad to turn on the following:
|
|
+ **"Autoboot SysNAND"**
|
|
+ **"Use SysNAND FIRM if booting with R"**
|
|
+ **"Show NAND or user string in System Settings"**
|
|
1. Press (Start) to save and reboot
|
|
+ If you get a black screen, just continue to the next section
|
|
+ If you get a "Failed to mount CTRNAND" error, just continue to the next section
|
|
|
|
##### Section IV - Restoring the System
|
|
|
|
If, before following this guide, you already had an EmuNAND setup and would like to move the contents of your previous EmuNAND to your new SysNAND CFW, now is the time to [follow Move EmuNAND](move-emunand) instead of doing the first nine steps in this section.
|
|
{: .notice--info}
|
|
|
|
1. Boot your device while holding (Start) to launch the Luma3DS chainloader menu
|
|
1. Launch GodMode9 by pressing (A)
|
|
1. Navigate to `[0:] SDCARD` -> `ctrtransfer`
|
|
1. Press (A) on `<serialnumber>_nand.bin` to select it, then select "NAND image options...", then select "Restore SysNAND (safe)"
|
|
1. Press (A) to unlock SysNAND overwriting, then input the key combo given
|
|
+ This will not overwrite your arm9loaderhax installation
|
|
1. Input the key combo given to unlock SysNAND (lvl1) writing
|
|
+ This process will take some time
|
|
1. Once it has completed, press (A) to continue
|
|
1. Press (Start) to reboot your device
|
|
+ If you get a black screen, [follow 9.2.0 CTRTransfer](9.2.0-ctrtransfer)
|
|
+ It is now safe to put New 3DSs in sleep mode again
|
|
1. If your backup was of a version between 3.0.0 and 4.5.0, your device will not boot until you manually download the required firmware:
|
|
+ Download [this file](http://nus.cdn.c.shop.nintendowifi.net/ccs/download/0004013800000002/00000056) and rename it to `firmware.bin`
|
|
+ Download [this file](http://nus.cdn.c.shop.nintendowifi.net/ccs/download/0004013800000002/cetk)
|
|
+ Copy `firmware.bin` and `cetk` to the `/luma/` folder on your SD card
|
|
+ Delete both of these files after updating your device
|
|
1. Update your device by going to System Settings, then "Other Settings", then going all the way to the right and using "System Update"
|
|
+ Updates while using A9LH + Luma (what you have) are safe
|
|
+ The warning about never updating a New 3DS from 2.1.0 does not apply after restoring your NAND backup.
|
|
+ If this gives you an error, set your DNS settings to "auto"
|
|
+ If this still gives you an error and your NAND is below 9.2.0, [follow 9.2.0 CTRTransfer](9.2.0-ctrtransfer)
|
|
|
|
##### Section V - Injecting FBI
|
|
|
|
1. Reboot holding (Start) during boot to launch the Luma3DS chainloader menu
|
|
1. Launch GodMode9 by pressing (A)
|
|
1. Navigate to `[0:] SDCARD` -> `cias`
|
|
1. Press (A) on `FBI.cia` to select it, then select "CIA image options...", then select "Mount image to drive"
|
|
1. Press (A) on the `.app` file, then select "NCCH image options", then select "Inject to H&S"
|
|
1. Press (A) to unlock SysNAND (lvl1) writing, then input the key combo given
|
|
1. Press (A) to continue
|
|
1. Press (Start) to reboot your device
|
|
1. If you still launch to the stock Health & Safety app and have downgraded with Gateway in the past, [follow this troubleshooting guide](troubleshooting#gw_fbi)
|
|
|
|
##### Section VI - Installing CIAs
|
|
|
|
1. Launch Health and Safety (which is now FBI)
|
|
1. Navigate to `SD` -> `cias`
|
|
1. Select "\<current directory>"
|
|
1. Select the "Install all CIAs" option, then press (A) to confirm
|
|
1. Press (Home) to exit FBI
|
|
|
|
##### Section VII - DSP Dump
|
|
|
|
1. Launch DSP1
|
|
1. Once it has completed, press (Start) to exit
|
|
|
|
##### Section VIII - Restore Health and Safety
|
|
|
|
1. Reboot holding (Start) during boot to launch the Luma3DS chainloader menu
|
|
1. Launch GodMode9 by pressing (A)
|
|
1. Press (Home) to bring up the action menu
|
|
1. Select "More..."
|
|
1. Select "Restore H&S"
|
|
1. Press (A) to unlock SysNAND (lvl1) writing, then input the key combo given
|
|
|
|
##### Section IX - CTRNAND Luma3DS
|
|
|
|
1. Navigate to `[0:] SDCARD`
|
|
1. Press (Y) on `arm9loaderhax.bin` to copy it
|
|
1. Press (B) to return to the main menu
|
|
1. Navigate to `[1:] SYSNAND CTRNAND`
|
|
1. Press (Y) to paste `arm9loaderhax.bin`
|
|
1. Select "Copy path(s)"
|
|
1. Press (B) to return to the main menu
|
|
1. Hold (R) and press (B) at the same time to eject your SD card
|
|
1. Remove your SD card from your device
|
|
1. Press (Start) to reboot your device with your SD card removed
|
|
+ Booting your device at least once with your SD card removed will allow you to configure the CTRNAND based Luma3DS installation
|
|
1. Use the (A) button and the D-Pad to turn on the following:
|
|
+ **"Show NAND or user string in System Settings"**
|
|
1. Reinsert your SD card into your device
|
|
1. Press (Start) to save and reboot
|
|
|
|
___
|
|
|
|
If DSi / DS functionality has broken (such as DS carts or DSiWare no longer working), [follow this troubleshooting guide](troubleshooting#twl_broken)
|
|
{: .notice--warning}
|
|
|
|
{% capture notice-10 %}
|
|
You can now use Luma3DS Updater to update your Luma3DS to the latest version just by opening it and pressing (A).
|
|
This is not the same thing as a System Update; it just downloads and extracts the newest Luma3DS files.
|
|
This will only update the Luma3DS files on your SD card. If you boot your device without an SD card, it will use the version you placed in CTRNAND.
|
|
{% endcapture %}
|
|
|
|
<div class="notice--info">{{ notice-10 | markdownify }}</div>
|
|
|
|
{% capture notice-6 %}
|
|
You will now boot Luma3DS CFW SysNAND by default.
|
|
You can now hold (Select) on boot to launch the Luma3DS configuration menu.
|
|
You can now hold (Start) on boot to launch the Luma3DS chainloader menu.
|
|
{% endcapture %}
|
|
|
|
<div class="notice--info">{{ notice-6 | markdownify }}</div>
|
|
|
|
To use [NTR CFW](https://github.com/44670/BootNTR/), install [BootNTR Selector](https://gbatemp.net/threads/432911/).
|
|
{: .notice--info}
|
|
|
|
Keep your `<serialnumber>_nand.bin` file, it can be restored by GodMode9 to save you from a brick in the future.
|
|
{: .notice--info}
|
|
|
|
{% capture notice-7 %}
|
|
Remove any extra files and folders from the root of your SD card that are *not* in the following image:
|
|
<br><br>
|
|
|
|
{% endcapture %}
|
|
|
|
<div class="notice--info">{{ notice-7 | markdownify }}</div>
|
|
|
|
For information on changing your device to another region, check out the [Region Changing](region-changing) page.
|
|
{: .notice--success}
|
|
|
|
For information on keeping your A9LH installation up to date, check out the [Updating A9LH](updating-a9lh) page.
|
|
{: .notice--success}
|
|
|
|
For information on using GodMode9's various features, check out the [GodMode9 Usage](godmode9-usage) page.
|
|
{: .notice--success}
|
|
|
|
For information on using Luma3DS's various features, check out [its wiki](https://github.com/AuroraWright/Luma3DS/wiki/Options-and-usage).
|
|
{: .notice--success}
|
|
|
|
For information on installing custom themes, badges, and splash screens, check out [3dsthem.es](https://3dsthem.es/about.php).
|
|
{: .notice--success} |