Hey everybody, this is the thread where if you have successfully SeedMined your movable.sed and have CFW on your 3ds and want to help others out by exchanging freind codes. If you have not done so already cause you don't have access to homebrew, or don't have powerful hardware, you can request help here. If you don't have access to a powerful enough computer and don't want to share your friend code, go ahead and upload Msed_data to the Original Thread. With more Msed_data means less time to Brute Force the movable.sed. Also, this process will not brick your system, Installing CFW might (a tiny chance, but still a chance.)
The Original Thread is here:
https://gbatemp.net/threads/seedminer-single-system-dsiware-injection.495685/
My friend code is 4700-1523-8278; tag me in a post saying done with your friend code.
Tutorial:
Alright Kiddos, Today is the Fun day you get CFW on your 3DS for 2 whole dollars (Video coming soon)
Requirements:
SeedStarter and SeedMiner
The latest release of
GodMode9
The latest release of
b9sTool
The latest release of
Luma3DS (the .7z file)
The latest release of
the Homebrew Launcher
NO longer need the .firm files thanks to
@zoogie's fork of b9sTool
Starting off:
First things first, to get this done, we need to grab part of your movable seed. (the thing that allows games on an sdcard to be transferred back to the system, correct me if I’m wrong
@zoogie.) This can be done with 1 of 3 methods:
1st Method (aka) Dumping it from your own 3DS
you fool (Requires Homebrew access, does not need CFW)
- Download SeedStarter
- Mount sdcard
- Extract SeedStarter to the 3ds folder on your sdcard.
- Pop that baby (aka sdcard) back into your 3DS
- Launch the Homebrew Channel though a primary or secondary entry point (does not matter at this point.)
- Launch SeedStarter from the list of apps.
- Once lunched press A to dump LFCS from GetConfigInfoBlk2.
- Once done and successful, you will now have a movable_part1.sed file.
- Move on to acquiring movable.sed
2nd Method (aka) Having a “Friend” Dump it for yo
u or bug em till they do it (Requires HomeBrew Access, does not need CFW)
- Be “Friends” with someone that has HomeBrew Access (How you become friends on 3DS is by exchanging friend codes.)
- Ask politely for them to dump LFCS (Don’t be a dick. Ask politely and wait for a message, we all have a life outside of these forums. Also if your friend does not know how to do this, tell them to follow Friend Side of the 2nd Method.)
- Wait (Takes time to dump and upload the file.)
- Once friend has giving the required file, move on to getting ID0.
3rd Method (aka) Please dump Mii (Does not require Homebrew or CFW)
- Find a mii in mii maker that was created on YOUR system. That's very important. Make one from scratch if you're not sure where it came from.
- Export the mii to a QR code. They're found in the "sdmc:/DCIM/100NIN03/" and named something like "HNI_1234.JPG".
- Upload it to https://3ds.goombi.fr/editMii/ then "Import from -> QR code"
- "Export to -> encrypted .bin"
- Take resulting input.bin, place it in the seedminer/ directory, and run: python seedminer_launcher.py mii new|old [year of 3ds manufacture] (NOTE: If you have a new3ds, you *might* have to choose "mii old". If you sys-transferred from an old3ds, and have ever system formatted, you will need to select old. Although an incorrect guess will cause the brute force to fail, you can try the other option next time. NOTE2: You can optionally select the year you guess the 3ds was manufactured. This is done in hopes of reducing the brute-force time. If you have no clue, just don't enter a year. The brute force will then start in the midpoint of the possible LFCS range. A wrong year guess will not fail the brute force.(old3ds 2011-2017, new3ds 2014-2017 inclusive are accepted year options))
- Wait until movable_part1.sed dumps then move on to brute forcing movable.sed.
Getting ID0:
Now, if you dump your LFCS using the 1st Method, you usually don’t need to do this, but if you had a friend dump your LFCS using the Friend Code method, you most likely need to do this.
- Put the movable_part1.sed on the SD Card of your 3DS in the "Nintendo 3DS" folder (sdmc:/Nintendo 3DS/)
- Copy all files from seedminer to the same folder (sdmc:/Nintendo 3DS/)
- Run "seedminer_launcher.py ID0" in CMD (Pyton 2.7 is needed)
- ID0 will be aded to movable_part1.sed
- Continue to acquiring movable.sed
Acquiring movable.sed:
Whew, we are almost at the end of the Tutorial yay. There is only one method of Acquiring the full movable.sed file. (sometimes it is faster just to ask someone to do it for you, if you have really crappy computer hardware for example, but this will be based on if someone wants to do go through the steps for you, so be nice and patient if asking to “borrow” somebody’s computer resources.)
- Download SeedMiner from the Original Thread.
- Extract SeedMiner to anywhere on your computer.
- Make sure you put the movable_part1.sed file in the same folder as the SeedMiner program.
- Make sure you have Python 2.7 installed on your computer. (HAS TO BE 2.7)
- On Windows (no Mac or Linux version…yet,) Open CMD (Command Prompt).
- Cd into the SeedMiner Dir. (example cd C:\Users\User\Desktop\SeedMiner\)
- Run the script with either commands “python seedminer_launcher.py gpu” (for use with a dedicated gpu, not an integrated gpu) or if you want to use cpu, “python seedminer_launcher.py cpu” (this is a lot slower than the gpu method)
- Let it run (with a dedicated gpu it will take about 0-6 hours, 3 hours avg. with latest build of SeedMiner, and for cpus with the latest build of SeedMiner, it will take about 0-7 days, 1-2 days avg)
- Wait for it to complete.
- Once completed, follow Signing the Exploited Dsiware Game.
Friend Side of the 2nd method:
- Download SeedStarter
- Mount sdcard
- Extract SeedStarter to the 3ds folder on your sdcard.
- Pop that baby (aka sdcard) back into your 3DS
- Launch the Homebrew Channel though a primary or secondary entry point (does not matter at this point.)
- Launch SeedStarter from the list of apps.
- Once lunched press B to dump LFCS from friendlist.
- Once done and successful, you will now have a XXXX_movable_part1.sed file. (XXXX being the friend code of your “Friend”)
- Pass that damn file on to your “Friend”
So, you have your movable.sed file, but you have no idea how to use it. Well luckily for you, I know how to use it. Now it is recommended to have Sudoku as the dsiware game you will be exploiting because it is so damn easy. If you do not have Sudoku, you will need some additional files. One of those files I can’t provide and it are hard to find (at least it was for me.)
Using Sudoku:
If you choose this method, you can bypass having to get the CTcert and the patch files.
- Go to website https://jenkins.nelthorya.net/job/DSIHaxInjector/
- Once there, click on build with parameters.
- Enter your info and upload your .bin and movable.sed file (note: pirated copies of Sudoku will NOT work. You must buy the game legit.)
- Once done, wait for about 5-15 secs. You will be brought back to the main page.
- Go to the side bar that says build history, and enter your Username you entered in step 3.
- Press enter and your Build number should show up as the only one.
- Click on the number that shows up and click on the file to download it. (it should show up as shortid.bin.patched, shortid being the Short Id of the game, or the name of the original uploaded file.)
- Delete the .patched that is on the end of the file name. (You can’t use the file as it is when you downloaded it, as the 3ds won’t recognize it. Ex: 43b44445.bin.patched needs to be changed to 43b44445.bin)
- Put the patched .bin file back into the same dir you got the original .bin
- Put your sdcard back into your 3ds.
- Power on your 3ds and go to System Settings —> Data management —> DsiWare —> Sdcard —> Sudoku.
- If all went well, you should receive a pop up saying that the transfer was successful.
- Move on to install LumaCFW
Using any other Dsiware exploitable game:
Coming soon as I have not tried this method as of writing this tutorial.
Installing CFW:
So you got the Dsiware exploited game working, but you ask yourself, what now? Well, may I introduce you to my religion, CFW? But can we even install CFW? The answer is yes. Using this method, we can install the dsiware exploit, and then run a custom .nds file that will have full read and write nand access, to then install B9S, then letting us load CFW. Here's how:
Disclaimer: I am not responsible for any bricks. Do this at your own risk. Also, Do
NOT, I repeat, Do
NOT, use b9sTool on a device that already has arm9loaderhax installed or you will BRICK!
- Copy boot.firm from the Luma3DS archive to the root of the sd card
- Copy boot.3dsx from the homebrew launcher.
- Copy boot.nds from B9STool to the root of the sd card
- Create a folder named boot9strap on the root of the sd card
- Launch B9STool by starting your game. (Sudoku users have to go all the way to "touch to start" for the exploit to trigger)
- Select Dump F0F1 to backup the 3ds Firm
- Exit B9STool, then power down. (you may need to force shutdown.)
- After that, make a backup of the Dump you made in Step 7.
- Launch B9STool again
- Select "Install boot9strap" and confirm
- Exit B9STool, then power down.
- If all went successful, hold select while booting up your 3ds and you should see the Luma config menu.
- If you can see this config menu use the D-Pad to go down to Show NAND or user string in System Settings and press A on it. Make sure it has an x mark by it so you know it's active.
- press the start button and reboot.
If you want more like enabling non sdcard CFW boot,
3ds.guide is great for continuing this tut.
FAQ:
Q: How do I use PMs?
If you just signed up and don't have 10 posts, you can't use them.
However, you can ask
them to PM you if they have 10 posts.
Clicking on their name will give an option to see their profile page. That's a good place to request a PM.
Q: How do I extract my dsiware game for exploitation?
System Settings --> Data management --> Dsiware --> (Your exploitable game) --> Copy.
I have more than one IDO!
It's ok, don't panic. Rename one folder with the 32 long hex by adding Test in front of it, don't delete any part of the name, or you will mess it up, and plug the sd card back into your system, if it does not say something along the lines about creating home menu/ something about creating something at start. Continue with the Getting the IDO guide. If it does say something about creating data managment, repeat the process.
Following 3ds guide give me an exception accured when relaunching the download play app?
Did you copy the homebrew boot.3dsx? Cause that is most likley the reason why.
Credits
@zoogie for Seedminer
@Blackfall for the website that creates and signs your hacked dsiware game.
3ds.guide for the CFW Tutorial that I had made easier to understand.
@Dasun for the ID0 part.
And everyone else that helped make SeedMiner a thing. (Whether the know about it or not.)
Have fun modding.
.
