Setup script for exploit, simpler instructions

Python3 script automates and checks a lot of things regarding installation.
Windows - works for me
Linux - SD removal FS issues
macOS - immediate rejection of our hax ID1

Author: zoogie

MSET9_installer_script/mset9.bat

@@ -0,0 +1,2 @@
+python mset9.py
+pause

MSET9_installer_script/mset9.py

@@ -0,0 +1,197 @@
+#!/usr/bin/python3
+import os,sys,platform,time,shutil,binascii
+
+p=platform.system()
+if p == 'Windows':	#0-win, 1-lin, 2-mac, x-win   lol go with the market leader i guess
+	OPSYS=0
+elif p == 'Linux':
+	OPSYS=1
+elif p == 'Darwin': 
+	OPSYS=2
+else:
+	OPSYS=0
+
+cwd=os.getcwd()
+trigger="254DEFE0.txt"
+#trigger="290BEFE0.txt"   #new3ds
+
+haxid1=bytes.fromhex("300032003800360030003000610061003600340008909FE26988A0116808A0117B0000EFD3F021E30C109FE5104F11EE014004E0104F01EE4CF09DE5FAEFFFFF") #ID1 - arm injected payload in readable format
+haxid1=haxid1.decode("utf-16le")
+haxid1_path=""
+id1=""
+id1_root=""
+id1_path=""
+
+ext_root=""
+oldtag="_oldid1"
+mode=0 #0 setup state, 1 hax state
+id0_count=0
+
+home_menu=[0x8f,0x98,0x82]  #us,eu,jp
+mii_maker=[0x217,0x227,0x207]
+
+if not os.path.exists("Nintendo 3DS/"):
+	print("Are you sure you're running this script from the root of your SD card (right next to 'Nintendo 3DS')? You need to!")
+	print("Current dir: %s" % cwd)
+	time.sleep(10)
+	sys.exit(0)
+	
+
+for root, dirs, files in os.walk("Nintendo 3DS/", topdown=True):
+	for name in files:
+		pass
+	for name in dirs:
+		if haxid1 not in name and len(name[:32]) == 32:
+			try:
+				temp=int(name[:32],16)
+			except:
+				continue
+			if type(temp) is int:
+				if os.path.exists(os.path.join(root, name)+"/extdata"):
+					id1=name
+					id1_root=root
+					id1_path=os.path.join(root, name)
+					if oldtag in name:
+						mode=1
+				else:
+					id0_count+=1
+
+
+def setup():
+	global mode, id1_path, id1_root, id1
+	print("Setting up...", end='')
+	if mode:
+		print("Already setup!")
+		return
+	check(id1_path+"/dbs/title.db", 0x31e400, 0)
+	check(id1_path+"/dbs/import.db", 0x31e400, 0)
+	if os.path.exists(id1_path+"/extdata/"+trigger):
+		os.remove(id1_path+"/extdata/"+trigger)
+	if not os.path.exists(id1_root+"/"+haxid1):
+		haxid1_path=id1_root+"/"+haxid1
+		os.mkdir(haxid1_path)
+		os.mkdir(haxid1_path+"/extdata")
+		os.mkdir(haxid1_path+"/extdata/00000000")
+	if not os.path.exists(haxid1_path+"/dbs"):
+		shutil.copytree(id1_path+"/dbs",haxid1_path+"/dbs")
+	
+	ext_root=id1_path+"/extdata/00000000"
+	
+	for i in home_menu:
+		temp=ext_root+"/%08X" % i
+		if os.path.exists(temp):
+			#print(temp,haxid1_path+"/extdata/00000000/%08X" % i)
+			shutil.copytree(temp,haxid1_path+"/extdata/00000000/%08X" % i)
+	for i in mii_maker:
+		temp=ext_root+"/%08X" % i
+		if os.path.exists(temp):
+			shutil.copytree(temp,haxid1_path+"/extdata/00000000/%08X" % i)	
+	
+	if os.path.exists(id1_path):
+		os.rename(id1_path, id1_path+oldtag)
+	id1+=oldtag
+	id1_path=id1_root+"/"+id1
+	mode=1
+	print(" done.")
+		
+def inject():
+	if mode==0:
+		print("Run setup first!")	
+		return
+	print("Injecting...", end='')
+	trigger_path=id1_root+"/"+haxid1+"/extdata/"+trigger
+	if not os.path.exists(trigger_path):
+		with open(trigger_path,"w") as f:
+			f.write("plz be haxxed mister arm9, thx")
+			f.close()
+	print(" done.")
+
+def delete():
+	if mode==0:
+		print("Run setup first!")	
+		return
+	print("Deleting...", end='')
+	trigger_path=id1_root+"/"+haxid1+"/extdata/"+trigger
+	if os.path.exists(trigger_path):
+		os.remove(trigger_path)
+	print(" done.")
+
+def remove():
+	global mode, id1_path, id1_root, id1
+	print("Removing...", end='')
+	if mode==0:
+		print("Nothing to remove!")
+		return
+	if os.path.exists(id1_path) and oldtag in id1_path:
+		os.rename(id1_path, id1_root+"/"+id1[:32])
+	#print(id1_path, id1_root+"/"+id1[:32])
+	if os.path.exists(id1_root+"/"+haxid1):
+		shutil.rmtree(id1_root+"/"+haxid1)
+	id1=id1[:32]
+	id1_path=id1_root+"/"+id1
+	mode=0
+	print(" done.")
+
+def check(keyfile, size, crc32):
+		if not os.path.exists(keyfile):
+			print("%s \ndoes not exist on SD card!" % keyfile)
+			sys.exit(0)
+		elif size:
+			s=os.path.getsize(keyfile)
+			if size != s:
+				print("%s \nis size %08X, not expected %08X" % (keyfile,s,size))
+				sys.exit(0)
+		elif crc32:
+			with open(keyfile,"rb") as f:
+				temp=f.read()
+			c=binascii.crc32(temp)
+			if crc32 != c:
+				print("%s \n was not recognized as the correct file" % keyfile)
+				sys.exit(0)
+
+check("boot9strap/boot9strap.firm", 0, 0x08129c1f)
+check("Nintendo 3DS/Private/00020400/phtcache.bin", 0x7f53c, 0)
+check("boot.firm", 0, 0)
+check("boot.3dsx", 0, 0)
+if id0_count == 0:
+	print("\nYou're supposed to be running this on the 3DS SD card!")
+	print("NOT \n%s" % cwd)
+	time.sleep(10)
+	sys.exit(0)
+assert(id0_count == 1)
+
+if OPSYS == 0:				#windows
+	_ = os.system('cls')
+else:						#linux or mac
+	_ = os.system('clear')
+	
+print("MSET9 SETUP by zoogie")
+
+print("-- Please type in a number then hit return --\n")
+print("1. Setup MSET9")
+print("2. Inject trigger file %s" % trigger)
+print("3. Delete trigger file %s" % trigger)
+print("4. Remove MSET9, restore original ID1")
+print("5. Exit")
+
+while 1:
+	try:
+		command = int(input('>>>'))
+	except:
+		command = 42
+	
+	if command   == 1:
+		setup()
+	elif command == 2:
+		inject()
+	elif command == 3:
+		delete()	
+	elif command == 4:
+		remove()
+	elif command == 5:
+		print("Goodbye!")
+		break
+	else:
+		print("What you say?")
+
+time.sleep(2)

build.py

@@ -5,7 +5,7 @@
 254AEFE0  top screen    old 11.17  us/eu/jp e0 ef 54 02
 2550fbe0  both screens
 
-2908efe0  new 11.17
+2908EFE0  new 11.17
 
 2dbf0000  new heap
 fffb541c FFFFFFFF0004ABE4