3DS:Alternate Exploits/Homebrew Launcher (PicHaxx)

Required Reading

This method of using Seedminer for further exploitation uses your movable.sed file to write a custom save file for Pokémon Picross, which can then be used with unSAFE_MODE to run SafeB9SInstaller.

This process will overwrite your Pokémon Picross save file, if you have one. If you wish to preserve your Pokémon Picross game data, you should make a backup of your 00000001.sav file before overwriting it.

What You Need

• The game "Pokémon Picross" (free on eShop) installed on your device
  • You can scan this QR code using the Nintendo 3DS Camera for a direct link to the eShop app
  • Your SD card must be inserted in your device to install Pokémon Picross
• Your movable.sed file from completing Seedminer
• The latest release of SafeB9SInstaller (direct download)
• The latest release of boot9strap (direct download)
• The latest release of Luma3DS (the Luma3DS .zip file)
• The latest release of unSAFE_MODE

Instructions

Section I - Prep Work

1. Power on your device
2. Open the Nintendo eShop
3. Tap the Search icon (small magnifying glass)
4. Search for picross
5. Open the store page for Pokémon Picross
6. Download Pokémon Picross
   • You can scan this QR code using the Nintendo 3DS Camera for a direct link to the eShop app
   • Your SD card must be inserted in your device to install Pokémon Picross
7. Power off your device
8. Insert your SD card into your computer
9. Copy boot.firm and boot.3dsx from the Luma3DS .zip to the root of your SD card
10. Create a folder named boot9strap on the root of your SD card
11. Copy boot9strap.firm and boot9strap.firm.sha from the boot9strap .zip to the /boot9strap/ folder on your SD card
12. Copy SafeB9SInstaller.bin from the SafeB9SInstaller .zip to the root of your SD card
13. Copy usm.bin from the unSAFE_MODE .zip to the root of your SD card
14. Copy the otherapp payload for your region/version from the unSAFE_MODE .zip's otherapps_with_CfgS folder and rename it to otherapp.bin
15. Create a folder named 3ds on the root of your SD card
16. Copy the slotTool folder from the unSAFE_MODE .zip to the 3ds folder on your SD card

Section II - PicHaxx

1. Open the PicHaxx Injector website on your computer
2. Select your movable.sed file
3. Select "Build and Download"
4. Wait for the process to complete
5. Navigate to Nintendo 3DS -> <ID0> -> <ID1> -> title -> 00040000 -> 0017c100 -> data on your SD card
   • The <ID0> will be the same one that you used in Seedminer
   • The <ID1> is a 32 character long folder inside of the <ID0>
6. Copy the newly downloaded 00000001.sav file to the data folder on your SD card
   • Overwrite the old save file when prompted
7. Reinsert your SD card into your device
8. Power on your device
9. Launch "Pokémon Picross"
10. If the exploit was successful, your device will have loaded the Homebrew Launcher
    • If you get an error message, follow this troubleshooting guide

Section III - slotTool

1. Launch slotTool from the list of homebrew
   • If you get stuck on a red screen, delete slotTool.xml from the /3ds/slotTool/ directory, then retry this section
2. Select the "INSTALL exploit to wifi slots 1,2,3 & shutdown" option
   • You will see some on-screen text and then your system will shut down

Section IV - unSAFE_MODE

1. With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), then press (Power)
   • Keep holding the buttons until the device boots into Safe Mode
2. Press "OK" to accept the update
   • There is no update. This is part of the exploit
3. Press "I accept" to accept the terms and conditions
4. The update will eventually fail, with the error code 003-1099. This is intended behaviour
5. When asked "Would you like to configure Internet settings?", select "Yes"
6. On the following menu, navigate to Connection 1 -> Change Settings -> Next Page (right arrow) -> Proxy Settings -> Detailed Setup
   • This is a visual representation
7. If the exploit was successful, your device will have booted into SafeB9SInstaller

Section V - Installing boot9strap

1. When prompted, input the key combo given on the top screen to install boot9strap
2. Once it is complete, press (A) to reboot your device
3. Your device should have rebooted into the Luma3DS configuration menu
   • If your device shuts down when you try to power it on, ensure that you have copied boot.firm from the Luma3DS .zip to the root of your SD card
4. Press (Start) to save and reboot
   • If you get an error, just continue to the next page

At this point, your console will boot to Luma3DS by default.

• Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
• On the next page, you will install useful homebrew applications to complete your setup.

Section VI - Restoring WiFi Configuration Profiles

1. Launch the Download Play application
2. Wait until you see the two buttons
   • Do not press either of the buttons
3. Press (Left Shoulder) + (D-Pad Down) + (Select) at the same time to open the Rosalina menu
4. Select "Miscellaneous options"
5. Select "Switch the hb. title to the current app."
6. Press (B) to continue
7. Press (B) to return to the Rosalina main menu
8. Press (B) to exit the Rosalina menu
9. Press (Home), then close Download Play
10. Relaunch the Download Play application
11. Your device should load the Homebrew Launcher
12. Launch slotTool from the list of homebrew
13. Select "RESTORE original wifi slots 1,2,3"
14. Your device will then reboot

At this point, Pokémon Picross is no longer necessary and can be removed from your device. If you wish to play the game, restore your `00000001.sav` backup or re-download the game from the Nintendo eShop.

---