Boot9.bin 3ds [patched] [2025]

This allowed the execution of arbitrary code before the operating system loaded. But to make this exploit permanent, they needed the actual BootROM code to analyze. Thus, the first groups of researchers extracted boot9.bin directly from a 3DS using voltage glitching or by removing the CPU (a process called "decapping").