3DS:Alternate Exploits/Homebrew Launcher (PicHaxx): Difference between revisions

From Hacks Guide Wiki
(move the TOC to distinguish the Required Reading section)
(Swap HBL-USM/Frogtool for nimdsphax)
 
(26 intermediate revisions by 6 users not shown)
Line 1: Line 1:
{{3DS unavailable eShop|Pokémon Picross}}{{System version outdated article|console=ctr|sysversion=11.17.0-50|reason=The otherapp payload may have been broken in the latest update.}}
==Required Reading==
==Required Reading==


This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to write a custom save file for Pokémon Picross, which can then be used with unSAFE_MODE to run SafeB9SInstaller.
[https://github.com/zoogie/pichaxx Pichaxx] is an exploit for the game Pokémon Picross released by [https://github.com/zoogie zoogie], originally discovered and [https://twitter.com/mrnbayoh/status/744899681663258624?lang=en demonstrated] by [https://github.com/MrNbaYoh MrNbaYoh]. This method of using Seedminer for further exploitation uses your <code>movable.sed</code> file to write a custom save file for Pokémon Picross, which can then be used to launch the Homebrew Launcher.
 
{{warning|text=This process requires your console-specific <code>movable.sed</code> file. If you don't have it yet, you can get it by following [[3dsguide:seedminer|seedminer]]. (Don't continue to BannerBomb3.)}}


{{warning|text=This process will overwrite your Pokémon Picross save file, if you have one. If you wish to preserve your Pokémon Picross game data, you should make a backup of your <code>00000001.sav</code> file before overwriting it.}}
{{warning|text=This process will overwrite your Pokémon Picross save file, if you have one. If you wish to preserve your Pokémon Picross game data, you should make a backup of your <code>00000001.sav</code> file before overwriting it.}}
Line 11: Line 15:
**You can scan [http://api.qrserver.com/v1/create-qr-code/?color=000000&bgcolor=FFFFFF&data=ESHOP://50010000037815&margin=0&qzone=1&size=400x400&ecc=L this QR code] using the Nintendo 3DS Camera for a direct link to the eShop app
**You can scan [http://api.qrserver.com/v1/create-qr-code/?color=000000&bgcolor=FFFFFF&data=ESHOP://50010000037815&margin=0&qzone=1&size=400x400&ecc=L this QR code] using the Nintendo 3DS Camera for a direct link to the eShop app
**Your SD card must be inserted in your device to install Pokémon Picross
**Your SD card must be inserted in your device to install Pokémon Picross
*Your <code>movable.sed</code> file from completing [https://3ds.hacks.guide/seedminer Seedminer]
*Your <code>movable.sed</code> file from completing Seedminer
*The latest release of [https://github.com/d0k3/SafeB9SInstaller/releases/download/v0.0.7/SafeB9SInstaller-20170605-122940.zip SafeB9SInstaller] (direct download)
* The latest release of [https://github.com/LumaTeam/Luma3DS/releases/latest Luma3DS] (the Luma3DS <code>.zip</code> file)
*The latest release of [https://github.com/SciresM/boot9strap/releases/download/1.4/boot9strap-1.4.zip boot9strap] (direct download)
*[[Media:Otherapps.zip|otherapps.zip]]
*The latest release of [https://github.com/LumaTeam/Luma3DS/releases/latest Luma3DS] (the Luma3DS <code>.zip</code> file)
*The latest release of [https://github.com/zoogie/unSAFE_MODE/releases/v1.3 unSAFE_MODE]


==Instructions==
==Instructions==


===Section I - Prep Work===
===Section I - Prep Work ===


#Power on your device
# Power off your device
#Open the Nintendo eShop
#Tap the Search icon (small magnifying glass)
#Search for <code>picross</code>
#Open the store page for Pokémon Picross
#Download Pokémon Picross
#*You can scan [http://api.qrserver.com/v1/create-qr-code/?color=000000&bgcolor=FFFFFF&data=ESHOP://50010000037815&margin=0&qzone=1&size=400x400&ecc=L this QR code] using the Nintendo 3DS Camera for a direct link to the eShop app
#*Your SD card must be inserted in your device to install Pokémon Picross
#Power off your device
#Insert your SD card into your computer
#Insert your SD card into your computer
#Copy <code>boot.firm</code> and <code>boot.3dsx</code> from the Luma3DS <code>.zip</code> to the root of your SD card
# Copy <code>boot.firm</code> and <code>boot.3dsx</code> from the Luma3DS <code>.zip</code> to the root of your SD card
#Create a folder named <code>boot9strap</code> on the root of your SD card
#*The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
#Copy <code>boot9strap.firm</code> and <code>boot9strap.firm.sha</code> from the boot9strap <code>.zip</code> to the <code>/boot9strap/</code> folder on your SD card
#Copy the otherapp payload for your region/version/model from the otherapps <code>.zip</code> file to the root of your SD card and rename it to <code>otherapp.bin</code>
#Copy <code>SafeB9SInstaller.bin</code> from the SafeB9SInstaller <code>.zip</code> to the root of your SD card
#Copy <code>usm.bin</code> from the unSAFE_MODE <code>.zip</code> to the root of your SD card
#Copy the otherapp payload for your region/version from the unSAFE_MODE <code>.zip</code>'s <code>otherapps_with_CfgS</code> folder and rename it to <code>otherapp.bin</code>
#Create a folder named <code>3ds</code> on the root of your SD card
#Copy the <code>slotTool</code> folder from the unSAFE_MODE <code>.zip</code> to the <code>3ds</code> folder on your SD card


===Section II - PicHaxx===
===Section II - PicHaxx===
#Open [https://3ds.nhnarwhal.com/3dstools/pichaxx.php the PicHaxx Injector website] on your computer
#Open [https://3dstools.nhnarwhal.com/#/pichaxx the PicHaxx Injector website] on your computer
#Select your <code>movable.sed</code> file
#Select your <code>movable.sed</code> file
#Select "Build and Download"
#Select "Build and Download"
#Wait for the process to complete
#Wait for the process to complete
#Navigate to <code>Nintendo 3DS</code> -> <code><ID0></code> -> <code><ID1></code> -> <code>title</code> -> <code>00040000</code> -> <code>0017c100</code> -> <code>data</code> on your SD card
#Navigate to <code>Nintendo 3DS</code> -> <code><ID0></code> -> <code><ID1></code> -> <code>title</code> -> <code>00040000</code> -> <code>0017c100</code> -> <code>data</code> on your SD card  
#*The <code><ID0></code> will be the same one that you used in [https://3ds.hacks.guide/seedminer Seedminer]
#*The <code><ID0></code> will be the same one that you used in [[3dsguide:seedminer|Seedminer]]
#*The <code><ID1></code> is a 32 character long folder inside of the <code><ID0></code>
#*The <code><ID1></code> is a 32 character long folder inside of the <code><ID0></code>
#Copy the newly downloaded <code>00000001.sav</code> file to the <code>data</code> folder on your SD card
#Copy the newly downloaded <code>00000001.sav</code> file to the <code>data</code> folder on your SD card
#*Overwrite the old save file when prompted
#*Overwrite the old save file when prompted
#Reinsert your SD card into your device
# Reinsert your SD card into your device
#Power on your device
#Power on your device
#Launch "Pokémon Picross"
#Launch "Pokémon Picross"
#If the exploit was successful, your device will have loaded the Homebrew Launcher
#If the exploit was successful, your device will have loaded the Homebrew Launcher
#*If you get an error message, [https://3ds.hacks.guide/troubleshooting#installing-boot9strap-pichaxx follow this troubleshooting guide]
#*If you get an error message, [[3dsguide:troubleshooting#installing-boot9strap-pichaxx|follow this troubleshooting guide]]


===Section III - slotTool===
-----
#Launch slotTool from the list of homebrew
#*If you get stuck on a red screen, delete <code>slotTool.xml</code> from the <code>/3ds/slotTool/</code> directory, then retry this section
#Select the "INSTALL exploit to wifi slots 1,2,3 & shutdown" option
#*You will see some on-screen text and then your system will shut down
 
===Section IV - unSAFE_MODE===
#With your device still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), then press (Power)
#*Keep holding the buttons until the device boots into Safe Mode
#Press "OK" to accept the update
#*There is no update. This is part of the exploit
#Press "I accept" to accept the terms and conditions
#The update will eventually fail, with the error code <code>003-1099</code>. This is intended behaviour
#When asked "Would you like to configure Internet settings?", select "Yes"
#On the following menu, navigate to <code>Connection 1</code> -> <code>Change Settings</code> -> <code>Next Page (right arrow)</code> -> <code>Proxy Settings</code> -> <code>Detailed Setup</code>
#*This is a [https://uwuu.ca/images/safemode_highlighted.png visual representation]
#If the exploit was successful, your device will have booted into SafeB9SInstaller
 
===Section V - Installing boot9strap===
#When prompted, input the key combo given on the top screen to install boot9strap
#Once it is complete, press (A) to reboot your device
#Your device should have rebooted into the Luma3DS configuration menu
#*If your device shuts down when you try to power it on, ensure that you have copied <code>boot.firm</code> from the Luma3DS <code>.zip</code> to the root of your SD card
#Press (Start) to save and reboot
#*If you get an error, just continue to the next page
 
 
At this point, your console will boot to Luma3DS by default.
*Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
*On the next page, you will install useful homebrew applications to complete your setup.
 
===Section VI - Restoring WiFi Configuration Profiles===
 
#Launch the Download Play application
#Wait until you see the two buttons
#*Do not press either of the buttons
#Press (Left Shoulder) + (D-Pad Down) + (Select) at the same time to open the Rosalina menu
#Select "Miscellaneous options"
#Select "Switch the hb. title to the current app."
#Press (B) to continue
#Press (B) to return to the Rosalina main menu
#Press (B) to exit the Rosalina menu
#Press (Home), then close Download Play
#Relaunch the Download Play application
#Your device should load the Homebrew Launcher
#Launch slotTool from the list of homebrew
#Select "RESTORE original wifi slots 1,2,3"
#Your device will then reboot


{{info|text=At this point, Pokémon Picross is no longer necessary and can be removed from your device. If you wish to play the game, restore your `00000001.sav` backup or re-download the game from the Nintendo eShop.}}
<span style="font-size:200%;">Continue to [[3DS:Alternate Exploits/Installing boot9strap (nimdsphax)|Installing boot9strap (nimdsphax)]]</span>
 
-----


==Continue to [https://3ds.hacks.guide/finalizing-setup Finalizing Setup]==
[[Category:Nintendo 3DS guides]]

Latest revision as of 22:43, 1 August 2023

Required Reading

Pichaxx is an exploit for the game Pokémon Picross released by zoogie, originally discovered and demonstrated by MrNbaYoh. This method of using Seedminer for further exploitation uses your movable.sed file to write a custom save file for Pokémon Picross, which can then be used to launch the Homebrew Launcher.

OOjs UI icon information-warning.svg This process requires your console-specific movable.sed file. If you don't have it yet, you can get it by following seedminer. (Don't continue to BannerBomb3.)
OOjs UI icon information-warning.svg This process will overwrite your Pokémon Picross save file, if you have one. If you wish to preserve your Pokémon Picross game data, you should make a backup of your 00000001.sav file before overwriting it.

What You Need

  • The game "Pokémon Picross" (free on eShop) installed on your device
    • You can scan this QR code using the Nintendo 3DS Camera for a direct link to the eShop app
    • Your SD card must be inserted in your device to install Pokémon Picross
  • Your movable.sed file from completing Seedminer
  • The latest release of Luma3DS (the Luma3DS .zip file)
  • otherapps.zip

Instructions

Section I - Prep Work

  1. Power off your device
  2. Insert your SD card into your computer
  3. Copy boot.firm and boot.3dsx from the Luma3DS .zip to the root of your SD card
    • The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
  4. Copy the otherapp payload for your region/version/model from the otherapps .zip file to the root of your SD card and rename it to otherapp.bin

Section II - PicHaxx

  1. Open the PicHaxx Injector website on your computer
  2. Select your movable.sed file
  3. Select "Build and Download"
  4. Wait for the process to complete
  5. Navigate to Nintendo 3DS -> <ID0> -> <ID1> -> title -> 00040000 -> 0017c100 -> data on your SD card
    • The <ID0> will be the same one that you used in Seedminer
    • The <ID1> is a 32 character long folder inside of the <ID0>
  6. Copy the newly downloaded 00000001.sav file to the data folder on your SD card
    • Overwrite the old save file when prompted
  7. Reinsert your SD card into your device
  8. Power on your device
  9. Launch "Pokémon Picross"
  10. If the exploit was successful, your device will have loaded the Homebrew Launcher

Continue to Installing boot9strap (nimdsphax)