114 lines
6.3 KiB
Text
114 lines
6.3 KiB
Text
---
|
||
title: "Installing Boot9strap (Fredtool)"
|
||
---
|
||
|
||
{% include toc title = "İçindekiler"%}
|
||
|
||
### Okumanız Gerekli
|
||
|
||
This method of using Seedminer for further exploitation uses your `movable.sed` file to decrypt any DSiWare eShop title for the purposes of injecting an exploitable DSiWare title into the DS Internet Settings application. This requires you to already own (or download / buy) a DSiWare game from the eShop.
|
||
|
||
This is a currently working implementation of the "FIRM partitions known-plaintext" exploit detailed [here](https://www.3dbrew.org/wiki/3DS_System_Flaws).
|
||
|
||
To extract the `.7z` and `.rar` files linked on this page, you will need a file archiver like [7-Zip](http://www.7-zip.org/) or [The Unarchiver](https://theunarchiver.com/).
|
||
|
||
### What You Need
|
||
|
||
* Any eShop DSiWare game
|
||
+ JPN region users can download the free title "ほぼ日の健康手帳™" ([![]({{ "/images/qrcodes/50010000005133.png" | absolute_url }}){: height="24px" width="24px"})]({{ "/images/qrcodes/50010000005133.png" | absolute_url }})
|
||
+ USA region users can download the free title "Nintendo Fan Network" ([![]({{ "/images/qrcodes/50010000013696.png" | absolute_url }}){: height="24px" width="24px"})]({{ "/images/qrcodes/50010000013696.png" | absolute_url }})
|
||
* Your `movable.sed` file from completing [Seedminer](seedminer)
|
||
* The latest release of [Frogminer_save](https://github.com/zoogie/Frogminer/releases/latest)
|
||
* The latest release of [b9sTool](https://github.com/zoogie/b9sTool/releases/latest)
|
||
* The latest release of [Luma3DS](https://github.com/AuroraWright/Luma3DS/releases/latest) *(the `.7z` file)*
|
||
* The latest release of [the Homebrew Launcher](https://github.com/fincs/new-hbmenu/releases/latest)
|
||
|
||
#### Section I - Prep Work
|
||
|
||
1. Launch System Settings on your device
|
||
1. Navigate to `Data Management` -> `DSiWare`
|
||
1. Under the "System Memory" section, select your DSiWare game
|
||
1. Select "Copy", then select "OK"
|
||
+ If prompted, overwrite any existing copy
|
||
1. Cihazınızı kapatın
|
||
1. SD kartınızı bilgisayarınıza takın
|
||
1. Copy your `movable.sed` file to the root of your SD card
|
||
1. Copy `boot.firm` from the Luma3DS `.7z` to the root of your SD card
|
||
1. Copy `boot.nds` (B9STool) to the root of your SD card
|
||
1. Copy `boot.3dsx` to the root of your SD card
|
||
1. Copy the `private` folder from the Frogminer_save `.zip` to the root of your SD card
|
||
1. Navigate to `Nintendo 3DS` -> `<ID0>` -> `<32-character-id>` -> `Nintendo DSiWare` on your SD card
|
||
+ This `<ID0>` will be the same one that you used in [Seedminer](seedminer)
|
||
1. Copy `<8-character-id>.bin` to a folder on your computer
|
||
+ If there are multiple `<8-character-id>.bin` files, just pick one. It doesn't matter which you use.
|
||
|
||
#### Section II - Fredtool
|
||
|
||
1. Open [Fredtool](https://fredtool.bruteforcemovable.com/) on your computer
|
||
1. Select your `movable.sed` file for the "Your movable.sed" field
|
||
1. Select your `<8-character-id>.bin` file for the "Your dsiware.bin" field
|
||
1. Complete the "I'm not a robot" captcha
|
||
1. Select "Start"
|
||
1. Wait for the process to complete
|
||
1. When the process has completed, download your modified DSiWare archive from the site
|
||
1. Copy the `42383841.bin` file from the `output/hax/` folder of the downloaded DSiWare archive to the `Nintendo 3DS/<ID0>/<32-character-id>/Nintendo DSiWare/` folder on your SD card
|
||
+ This should be different than your initial `<8-character-id>.bin` file
|
||
+ Do not remove any existing `<8-character-id>.bin` files
|
||
1. SD kartınızı cihazınıza tekrar takın
|
||
1. Power on your device
|
||
1. Launch System Settings on your device
|
||
1. Navigate to `Data Management` -> `DSiWare`
|
||
1. Under the "SD Card" section, select the "Haxxxxxxxxx!" title
|
||
1. Select "Copy", then select "OK"
|
||
1. Return to main menu of the System Settings
|
||
1. Navigate to `Internet Settings` -> `Nintendo DS Connections`, then select "OK"
|
||
1. If the exploit was successful, your device will have loaded the JPN version of Flipnote Studio
|
||
|
||
#### Section III - Flipnote Exploit
|
||
|
||
If you would prefer a visual guide to this section, one is available [here](https://zoogie.github.io/web/flipnote_directions/).
|
||
{: .notice--info}
|
||
|
||
1. Complete the initial setup process for the launched game until you reach the main menu
|
||
+ Select the left option whenever prompted during the setup process
|
||
1. Using the touch-screen, select the large left box, then select the box with an SD card icon
|
||
1. Once the menu loads, select the face icon, then the bottom right icon to continue
|
||
1. Select the frog icon at the bottom left
|
||
+ Alternatively, press (X) or (UP) on the D-Pad depending on which is shown on the top screen
|
||
1. Select the second button along the top with a film-reel icon
|
||
1. Scroll right until reel "3/3" is selected
|
||
1. Tap the third box with the letter "A" in it
|
||
1. Scroll left until reel "1/3" is selected
|
||
1. Tap the fourth box with the letter "A" in it
|
||
1. If the exploit was successful, your device will have loaded b9sTool
|
||
1. Select "Install boot9strap" and confirm
|
||
1. Exit b9sTool, then power off your device
|
||
+ You may have to force power off by holding the power button
|
||
+ If you see the Luma Configuration screen, continue with the guide without powering off
|
||
|
||
#### Section IV - Configuring Luma3DS
|
||
|
||
1. Boot your device while holding (Select) to launch the Luma configuration menu
|
||
+ If you encounter issues launching the Luma configuration menu, [follow this troubleshooting guide](https://github.com/zoogie/b9sTool/blob/master/TROUBLESHOOTING.md)
|
||
1. Use the (A) button and the D-Pad to turn on the following:
|
||
+ **"Show NAND or user string in System Settings"**
|
||
1. Kaydedip yeniden başlatmak için (Start) basın
|
||
+ If you get a black screen, [follow this troubleshooting guide](troubleshooting#black-screen-on-sysnand-boot-after-installing-boot9strap)
|
||
|
||
#### Section V - Restoring DS Connection Settings
|
||
|
||
1. Cihazınızı kapatın
|
||
1. SD kartınızı bilgisayarınıza takın
|
||
1. Copy the `42383841.bin` file from the `output/clean/` folder of the downloaded DSiWare archive to the `Nintendo 3DS/<ID0>/<32-character-id>/Nintendo DSiWare/` folder on your SD card
|
||
+ Replace the existing `42383841.bin` file
|
||
1. SD kartınızı cihazınıza tekrar takın
|
||
1. Power on your device
|
||
1. Launch System Settings on your device
|
||
1. Navigate to `Data Management` -> `DSiWare`
|
||
1. Under the "SD Card" section, select the "Nintendo DSi™" title
|
||
1. Select "Copy", then select "OK"
|
||
|
||
___
|
||
|
||
### Continue to [Finalizing Setup](finalizing-setup)
|
||
{: .notice--primary}
|