")),e.inlineElement=i):(h.updateStatus("ready"),h._parseMarkup(t,{},e),t)}}}),"ajax");u.magnificPopup.registerModule(N,{options:{settings:null,cursor:"mfp-ajax-cur",tError:'The content could not be loaded.'},proto:{initAjax:function(){h.types.push(N),b=h.st.ajax.cursor,c(x+"."+N,t),c("BeforeChange."+N,t)},getAjax:function(i){b&&u(document.body).addClass(b),h.updateStatus("loading");var e=u.extend({url:i.src,success:function(e,t,n){e={data:e,xhr:n};f("ParseAjax",e),h.appendContent(u(e.data),N),i.finished=!0,r(),h._setFocus(),setTimeout(function(){h.wrap.addClass(k)},16),h.updateStatus("ready"),f("AjaxContentAdded")},error:function(){r(),i.finished=i.loadError=!0,h.updateStatus("error",h.st.ajax.tError.replace("%url%",i.src))}},h.st.ajax.settings);return h.req=u.ajax(e),""}}});var I;u.magnificPopup.registerModule("image",{options:{markup:'
',cursor:"mfp-zoom-out-cur",titleSrc:"title",verticalFit:!0,tError:'The image could not be loaded.'},proto:{initImage:function(){var e=h.st.image,t=".image";h.types.push("image"),c(C+t,function(){"image"===h.currItem.type&&e.cursor&&u(document.body).addClass(e.cursor)}),c(x+t,function(){e.cursor&&u(document.body).removeClass(e.cursor),A.off("resize"+T)}),c("Resize"+t,h.resizeImage),h.isLowIE&&c("AfterChange",h.resizeImage)},resizeImage:function(){var e,t=h.currItem;t&&t.img&&h.st.image.verticalFit&&(e=0,h.isLowIE&&(e=parseInt(t.img.css("padding-top"),10)+parseInt(t.img.css("padding-bottom"),10)),t.img.css("max-height",h.wH-e))},_onImageHasSize:function(e){e.img&&(e.hasSize=!0,I&&clearInterval(I),e.isCheckingImgSize=!1,f("ImageHasSize",e),e.imgHidden)&&(h.content&&h.content.removeClass("mfp-loading"),e.imgHidden=!1)},findImageSize:function(t){function n(e){I&&clearInterval(I),I=setInterval(function(){0
")),e.inlineElement=i):(h.updateStatus("ready"),h._parseMarkup(t,{},e),t)}}}),"ajax");u.magnificPopup.registerModule(N,{options:{settings:null,cursor:"mfp-ajax-cur",tError:'The content could not be loaded.'},proto:{initAjax:function(){h.types.push(N),b=h.st.ajax.cursor,c(x+"."+N,t),c("BeforeChange."+N,t)},getAjax:function(i){b&&u(document.body).addClass(b),h.updateStatus("loading");var e=u.extend({url:i.src,success:function(e,t,n){e={data:e,xhr:n};f("ParseAjax",e),h.appendContent(u(e.data),N),i.finished=!0,r(),h._setFocus(),setTimeout(function(){h.wrap.addClass(k)},16),h.updateStatus("ready"),f("AjaxContentAdded")},error:function(){r(),i.finished=i.loadError=!0,h.updateStatus("error",h.st.ajax.tError.replace("%url%",i.src))}},h.st.ajax.settings);return h.req=u.ajax(e),""}}});var I;u.magnificPopup.registerModule("image",{options:{markup:'
',cursor:"mfp-zoom-out-cur",titleSrc:"title",verticalFit:!0,tError:'The image could not be loaded.'},proto:{initImage:function(){var e=h.st.image,t=".image";h.types.push("image"),c(C+t,function(){"image"===h.currItem.type&&e.cursor&&u(document.body).addClass(e.cursor)}),c(x+t,function(){e.cursor&&u(document.body).removeClass(e.cursor),A.off("resize"+T)}),c("Resize"+t,h.resizeImage),h.isLowIE&&c("AfterChange",h.resizeImage)},resizeImage:function(){var e,t=h.currItem;t&&t.img&&h.st.image.verticalFit&&(e=0,h.isLowIE&&(e=parseInt(t.img.css("padding-top"),10)+parseInt(t.img.css("padding-bottom"),10)),t.img.css("max-height",h.wH-e))},_onImageHasSize:function(e){e.img&&(e.hasSize=!0,I&&clearInterval(I),e.isCheckingImgSize=!1,f("ImageHasSize",e),e.imgHidden)&&(h.content&&h.content.removeClass("mfp-loading"),e.imgHidden=!1)},findImageSize:function(t){function n(e){I&&clearInterval(I),I=setInterval(function(){0
',srcAction:"iframe_src",patterns:{youtube:{index:"youtube.com",id:"v=",src:"//www.youtube.com/embed/%id%?autoplay=1"},vimeo:{index:"vimeo.com/",id:"/",src:"//player.vimeo.com/video/%id%?autoplay=1"},gmaps:{index:"//maps.google.",src:"%id%&output=embed"}}},proto:{initIframe:function(){h.types.push(P),c("BeforeChange",function(e,t,n){t!==n&&(t===P?L():n===P&&L(!0))}),c(x+"."+P,function(){L()})},getIframe:function(e,t){var n=e.src,i=h.st.iframe,r=(u.each(i.patterns,function(){if(-1',preload:[0,2],navigateByImgClick:!0,arrows:!0,tPrev:"Previous (Left arrow key)",tNext:"Next (Right arrow key)",tCounter:"%curr% of %total%"},proto:{initGallery:function(){var o=h.st.gallery,e=".mfp-gallery";if(h.direction=!0,!o||!o.enabled)return!1;g+=" mfp-gallery",c(C+e,function(){o.navigateByImgClick&&h.wrap.on("click"+e,".mfp-img",function(){if(1=h.index,h.index=e,h.updateItemHTML()},preloadNearbyImages:function(){for(var e=h.st.gallery.preload,t=Math.min(e[0],h.items.length),n=Math.min(e[1],h.items.length),i=1;i<=(h.direction?n:t);i++)h._preloadItem(h.index+i);for(i=1;i<=(h.direction?t:n);i++)h._preloadItem(h.index-i)},_preloadItem:function(e){var t;e=O(e),h.items[e].preloaded||((t=h.items[e]).parsed||(t=h.parseEl(e)),f("LazyLoad",t),"image"===t.type&&(t.img=u('').on("load.mfploader",function(){t.hasSize=!0}).on("error.mfploader",function(){t.hasSize=!0,t.loadError=!0,f("LazyLoadError",t)}).attr("src",t.src)),t.preloaded=!0)}}}),"retina");u.magnificPopup.registerModule(H,{options:{replaceSrc:function(e){return e.src.replace(/\.\w+$/,function(e){return"@2x"+e})},ratio:1},proto:{initRetina:function(){var n,i;1t.durationMax?t.durationMax:t.durationMin&&e=l)return x.cancelScroll(!0),e=t,n=g,0===(t=i)&&document.body.focus(),n||(t.focus(),document.activeElement!==t&&(t.setAttribute("tabindex","-1"),t.focus(),t.style.outline="none"),w.scrollTo(0,e)),T("scrollStop",m,i,r),!(b=d=null)},h=function(e){var t,n,i;u+=e-(d=d||e),f=o+s*(n=1<(f=0===c?0:u/c)?1:f,"easeInQuad"===(t=m).easing&&(i=n*n),"easeOutQuad"===t.easing&&(i=n*(2-n)),"easeInOutQuad"===t.easing&&(i=n<.5?2*n*n:(4-2*n)*n-1),"easeInCubic"===t.easing&&(i=n*n*n),"easeOutCubic"===t.easing&&(i=--n*n*n+1),"easeInOutCubic"===t.easing&&(i=n<.5?4*n*n*n:(n-1)*(2*n-2)*(2*n-2)+1),"easeInQuart"===t.easing&&(i=n*n*n*n),"easeOutQuart"===t.easing&&(i=1- --n*n*n*n),"easeInOutQuart"===t.easing&&(i=n<.5?8*n*n*n*n:1-8*--n*n*n*n),"easeInQuint"===t.easing&&(i=n*n*n*n*n),"easeOutQuint"===t.easing&&(i=1+--n*n*n*n*n),"easeInOutQuint"===t.easing&&(i=n<.5?16*n*n*n*n*n:1+16*--n*n*n*n*n),(i=t.customEasing?t.customEasing(n):i)||n),w.scrollTo(0,Math.floor(f)),p(f,a)||(b=w.requestAnimationFrame(h),d=e)},0===w.pageYOffset&&w.scrollTo(0,0),e=i,t=m,g||history.pushState&&t.updateURL&&history.pushState({smoothScroll:JSON.stringify(t),anchor:e.id},document.title,e===document.documentElement?"#top":"#"+e.id),"matchMedia"in w&&w.matchMedia("(prefers-reduced-motion)").matches?w.scrollTo(0,Math.floor(a)):(T("scrollStart",m,i,r),x.cancelScroll(!0),w.requestAnimationFrame(h)))},x.destroy=function(){v&&(document.removeEventListener("click",t,!1),w.removeEventListener("popstate",n,!1),x.cancelScroll(),b=y=r=v=null)};if("querySelector"in document&&"addEventListener"in w&&"requestAnimationFrame"in w&&"closest"in w.Element.prototype)return x.destroy(),v=C(k,e||{}),y=v.header?document.querySelector(v.header):null,document.addEventListener("click",t,!1),v.updateURL&&v.popstate&&w.addEventListener("popstate",n,!1),x;throw"Smooth Scroll: This browser does not support the required JavaScript methods and browser APIs."}}),function(e,t){"function"==typeof define&&define.amd?define([],function(){return t(e)}):"object"==typeof exports?module.exports=t(e):e.Gumshoe=t(e)}("undefined"!=typeof global?global:"undefined"!=typeof window?window:this,function(c){"use strict";function d(e){e&&e.sort(function(e,t){return i(e.content)=Math.max(document.body.scrollHeight,document.documentElement.scrollHeight,document.body.offsetHeight,document.documentElement.offsetHeight,document.body.clientHeight,document.documentElement.clientHeight)}function f(e,t){var n;e&&(n=e.nav.closest("li"))&&(n.classList.remove(t.navClass),e.content.classList.remove(t.contentClass),r(n,t),h("gumshoeDeactivate",n,{link:e.nav,content:e.content,settings:t}))}var p={navClass:"active",contentClass:"active",nested:!1,nestedClass:"active",offset:0,reflow:!1,events:!0},h=function(e,t,n){n.settings.events&&(e=new CustomEvent(e,{bubbles:!0,cancelable:!0,detail:n}),t.dispatchEvent(e))},i=function(e){var t=0;if(e.offsetParent)for(;e;)t+=e.offsetTop,e=e.offsetParent;return 0<=t?t:0},m=function(e,t,n){e=e.getBoundingClientRect(),t="function"==typeof(t=t).offset?parseFloat(t.offset()):parseFloat(t.offset);return n?parseInt(e.bottom,10)<(c.innerHeight||document.documentElement.clientHeight):parseInt(e.top,10)<=t},g=function(e,t){return!(!n()||!m(e.content,t,!0))},r=function(e,t){t.nested&&(e=e.parentNode.closest("li"))&&(e.classList.remove(t.nestedClass),r(e,t))},v=function(e,t){t.nested&&(e=e.parentNode.closest("li"))&&(e.classList.add(t.nestedClass),v(e,t))};return function(e,t){function n(e){s&&c.cancelAnimationFrame(s),s=c.requestAnimationFrame(u.detect)}function i(e){s&&c.cancelAnimationFrame(s),s=c.requestAnimationFrame(function(){d(o),u.detect()})}var r,o,a,s,l,u={setup:function(){r=document.querySelectorAll(e),o=[],Array.prototype.forEach.call(r,function(e){var t=document.getElementById(decodeURIComponent(e.hash.substr(1)));t&&o.push({nav:e,content:t})}),d(o)}};u.detect=function(){var e,t,n,i=function(e,t){var n=e[e.length-1];if(g(n,t))return n;for(var i=e.length-1;0<=i;i--)if(m(e[i].content,t))return e[i]}(o,l);i?a&&i.content===a.content||(f(a,l),t=l,(e=i)&&(n=e.nav.closest("li"))&&(n.classList.add(t.navClass),e.content.classList.add(t.contentClass),v(n,t),h("gumshoeActivate",n,{link:e.nav,content:e.content,settings:t})),a=i):a&&(f(a,l),a=null)},u.destroy=function(){a&&f(a,l),c.removeEventListener("scroll",n,!1),l.reflow&&c.removeEventListener("resize",i,!1),l=s=a=r=o=null};return l=function(){var n={};return Array.prototype.forEach.call(arguments,function(e){for(var t in e){if(!e.hasOwnProperty(t))return;n[t]=e[t]}}),n}(p,t||{}),u.setup(),u.detect(),c.addEventListener("scroll",n,!1),l.reflow&&c.addEventListener("resize",i,!1),u}}),$(document).ready(function(){for(var e=location.hostname,t=document.querySelectorAll("a"),n=0;nImage #%curr% could not be loaded.'},removalDelay:500,mainClass:"mfp-zoom-in",callbacks:{beforeOpen:function(){this.st.image.markup=this.st.image.markup.replace("mfp-figure","mfp-figure mfp-with-anim")}},closeOnContentClick:!0,midClick:!0}),$(".page__content").find("h1, h2, h3, h4, h5, h6").each(function(){var e,t=$(this).attr("id");t&&((e=document.createElement("a")).className="header-link",e.href="#"+t,e.innerHTML='Permalink',e.title="Permalink",$(this).append(e))}),(-1.hidden-links:before{right:inherit !important;}"),$("nav.greedy-nav").prepend(""),$("nav.greedy-nav").prepend(""),$("nav.greedy-nav").prepend(""));for(var r=!0,o=["404","a9lh-to-b9s","credits","donations","dumping-titles-and-game-cartridges","f3-(linux)","f3xswift-(mac)","faq","file-extensions-(windows)","godmode9-usage","h2testw-(windows)","region-changing","site-navigation","troubleshooting","uninstall-cfw","updating-b9s","why-ads","privacy-policy","checking-for-cfw"],n=0;nJekyll2023-07-22T17:08:07+00:00https://3ds.hacks.guide/feed.xml3DS Hacks GuideA complete guide to 3DS custom firmwareNintendo Homebrew
\ No newline at end of file
+Jekyll2023-07-22T18:11:46+00:00https://3ds.hacks.guide/feed.xml3DS Hacks GuideA complete guide to 3DS custom firmwareNintendo Homebrew
\ No newline at end of file
diff --git a/images/screenshots/kart-3ds-layout.png b/images/screenshots/kart-3ds-layout.png
new file mode 100644
index 0000000000..548c5a0755
Binary files /dev/null and b/images/screenshots/kart-3ds-layout.png differ
diff --git a/images/screenshots/kart-root-layout.png b/images/screenshots/kart-root-layout.png
new file mode 100644
index 0000000000..5e08a4bddc
Binary files /dev/null and b/images/screenshots/kart-root-layout.png differ
diff --git a/installing-boot9strap-(kartdlphax).html b/installing-boot9strap-(kartdlphax).html
index 2fa3ece861..4579a1b196 100644
--- a/installing-boot9strap-(kartdlphax).html
+++ b/installing-boot9strap-(kartdlphax).html
@@ -486,16 +486,17 @@ window.cookieconsent.initialise({
In order to exploit the SAFE_MODE firmware of our system, we need to inject an exploited WiFi profile.
+
In order to install custom firmware on our console, we need to get Homebrew Launcher access.
To accomplish this, we can use the Download Play functionality of the game Mario Kart 7, using a 3DS with custom firmware already installed along with a custom game plugin.
-
This custom plugin will send a hacked payload to an unhacked console, which then exploits the system in order to inject the exploited WiFi profile into your connections list.
+
This custom plugin will send a hacked payload to an unhacked console, which then exploits the system in order to inject menuhax67, which will allow us to get Homebrew Launcher access.
-
Once the WiFi profile has been injected, we will use SAFE_MODE, which is a recovery feature present on all 3DS consoles, to activate the exploited WiFi profile.
+
Once we have Homebrew Launcher access, we can run nimdsphax to install boot9strap.
-
For a more technical explanation, see the following links for information on the kartdlphax and unSAFE_MODE exploits: kartdlphax, unSAFE_MODE.
+
See here for information about kartdlphax, here for information about menuhax67, and here for information about nimdsphax.
In this section, you will see whether your shoulder buttons are working on your console. This will determine which method you will follow on the next page.
-
-
-
Power on your console
-
Once you see the HOME Menu, press the (Left Shoulder) and (Right Shoulder) buttons at the same time
-
-
The camera applet should appear
-
-
-
Power off your console
-
-
-
If the camera does not open, you cannot follow this method. If this is the case, join Nintendo Homebrew on Discord and ask, in English, for help.
-
-
Section II - Prep Work (source 3DS)
+
Section I - Prep Work (source 3DS)
In this section, you will set up your source 3DS (the 3DS with custom firmware) for delivery of the exploit data to the target 3DS.
In this section, you will copy the files needed to trigger the unSAFE_MODE exploit onto your target 3DS (the 3DS that you are trying to modify)’s SD card.
+
In this section, you will set up the files that the target 3DS will need to install custom firmware.
Insert the SD card of your target 3DS in your computer
Create a folder named boot9strap on the root of your SD card
Copy boot9strap.firm and boot9strap.firm.sha from the RELEASE .zip to the /boot9strap/ folder on your SD card
Copy SafeB9SInstaller.bin from the SafeB9SInstaller .zip to the root of your SD card
-
Copy usm.bin from the RELEASE .zip to the root of your SD card
-
Create a folder called 3ds on the root of your SD card
-
Copy slotTool.3dsx from the slotTool folder inside the RELEASE .zip to the /3ds/ folder on your SD card
+
Create a folder named 3ds on the root of your SD card if it does not already exist
+
+
This folder stores homebrew applications and data; it is different from the Nintendo 3DS folder that the console automatically generates
+
+
+
Copy the nimdsphax folder from the nimdsphax.zip to the /3ds/ folder on your SD card
+
Copy menuhax_manager.3dsx from the menuhax .zip to the /3ds/ folder on your SD card
+
Copy Launcher.dat from the folder for your model and region inside the menuhax .zip to the root of your SD card
Eject the SD card and put it in the target 3DS
-
Section IV - kartdlphax
+
-
In this section, you will use Download Play to transfer the exploit data from the source 3DS to the target 3DS, which can be used to overwrite your Wi-Fi slots with hacked data. Your Wi-Fi connection settings will be temporarily overwritten while the exploit is active.
+
+
+
Section III - kartdlphax
+
+
In this section, you will use Download Play to transfer the exploit data from the source 3DS to the target 3DS, which can be used to install menuhax67, a Homebrew Launcher entrypoint. Your HOME Menu settings will be temporarily inaccessible on the target 3DS while this exploit is active.
Power on the source 3DS
@@ -650,45 +645,32 @@ window.cookieconsent.initialise({
If the exploit was not successful, power off the source 3DS and target 3DS and start again from the beginning of Section III - kartdlphax
-
Press (X) to inject unSAFE_MODE
-
If the injection was successful, the screen will turn green and the target 3DS will automatically power off
-
-
If the screen turns red, power off the target 3DS and start again from the beginning of Section III - kartdlphax. If this doesn’t work, ask for help at Nintendo Homebrew on Discord)
-
-
-
You will not need to use your source 3DS to complete any further steps on this guide. Any further steps should only be completed on the target 3DS.
-
-
Section V - unSAFE_MODE
-
-
In this section, you will enter Safe Mode (a feature available on all 3DS family consoles) and navigate to a menu where unSAFE_MODE will be triggered, which will launch you into the boot9strap (custom firmware) installer.
+
Section IV - Installing menuhax67
-
With your console still powered off, hold the following buttons: (Left Shoulder) + (Right Shoulder) + (D-Pad Up) + (A), and while holding these buttons together, power on your console
+
Press (Y) + (D-Pad Down) to install menuhax67
-
Keep holding the buttons until the console boots into Safe Mode (a “system update” menu)
+
The console will automatically power off
-
Press “OK” to accept the update
+
Power on your console
+
Tap on the small HOME Menu settings icon in the top left of the bottom screen ()
-
There is no update. This is part of the exploit
+
If the console freezes for a while and then crashes, make sure you have Launcher.dat on the root of your SD card
-
Press “I accept” to accept the terms and conditions
-
The update will eventually fail, with the error code 003-1099. This is intended behaviour
-
When asked “Would you like to configure Internet settings?”, select “Yes”
-
On the following menu, navigate to Connection 1 -> Change Settings -> Next Page (right arrow) -> Proxy Settings -> Detailed Setup (image)
-
If the exploit was successful, your console will have booted into SafeB9SInstaller
+
If the exploit was successful, your console will have booted into the Homebrew Launcher
+
Launch nimdsphax from the list of homebrew
+
If the exploit was successful, you will have booted into SafeB9SInstaller
-
If your console instead freezes on a white screen, hold the POWER button until it turns off, then retry this section
-
If your console instead freezes on a red screen, you are missing usm.bin from the root of your SD card
If your console freezes on a red screen, hold the POWER button until it turns off, then try running menuhax again by powering on your console and tapping on the HOME Menu settings icon
-
Section VI - Installing boot9strap
+
Section V - Installing boot9strap
In this section, you will install custom firmware onto your console.
On the next page, you will install useful homebrew applications to complete your setup.
-
Section VII - Restoring WiFi Configuration Profiles
+
Section VI - Removing menuhax67
-
In this section, you will enter the Homebrew Launcher (using custom firmware) so that you can restore the Wi-Fi connection slots that were overwritten in Section I.
+
In this section, you will use the Homebrew Launcher to remove menuhax67, which will let you access the HOME Menu Settings option normally.
If you appreciate this guide, we accept Donations.
+
+
+
+
+
+
+
+Technical Details (optional)
+
+
To install boot9strap on your console, we derive your console’s unique encryption key. To accomplish this, we use a tool called Seedminer to calculate the data encryption key (movable.sed) for your console.
+
+
Once we have movable.sed, we can edit the SD card data of the game Mario Kart 7 to install menuhax67, which will allow us to get Homebrew Launcher access.
+
+
Once we have Homebrew Launcher access, we can run nimdsphax to install boot9strap.
+
+
See here for information about Kartminer7, here for information about menuhax67, and here for information about nimdsphax.
+
+
+
+
What You Need
+
+
+
A physical or digital copy of Mario Kart 7 updated to the latest version (v1.2)
+
+
You can update Mario Kart 7 from eShop or by following the update prompt when you launch the game
In this section, you will have the 3DS generate some data in Mario Kart 7 that will be used to install the exploit in a later section.
+
+
+
Insert your SD card into your console
+
Open Mario Kart 7
+
Tap the “Mario Kart Channel” button on the bottom
+
If you are prompted to, hit “Next” and “OK” to all of the prompts that you see
+
Tap the “StreetPass List” button on the bottom of the screen, in the middle
+
Press the (Home) button to suspend Mario Kart 7
+
Disable wireless connections by flicking the wireless switch on the side of the console or by navigating to HOME Menu Settings (top left) -> Wireless Communication -> OFF
+
Power off your console
+
+
+
Section II - SD Card Prep Work
+
+
+
Insert your SD card into your computer
+
Copy boot.firm and boot.3dsx from the Luma3DS .zip to the root of your SD card
+
+
The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
+
+
+
Create a folder named boot9strap on the root of your SD card
+
Copy boot9strap.firm and boot9strap.firm.sha from the boot9strap .zip to the /boot9strap/ folder on your SD card
+
Copy SafeB9SInstaller.bin to the root of your SD card
+
Create a folder named 3ds on the root of your SD card if it does not already exist
+
+
This folder stores homebrew applications and data; it is different from the Nintendo 3DS folder that the console automatically generates
+
+
+
Copy the nimdsphax folder from the nimdsphax .zip to the /3ds/ folder on your SD card
+
Copy menuhax_manager.3dsx from the menuhax .zip to the /3ds/ folder on your SD card
+
Copy Launcher.dat from the folder for your model and region inside the menuhax .zip to the root of your SD card
+
Keep your SD card inserted in your computer, as it is still required in the next section
+
+
+
+
+
+
+
Section III - Installing Kartminer7
+
+
+
Extract the Release_BETA_mk7 .zip to somewhere on your computer (i.e. your desktop)
+
Copy your movable.sed file to the resources folder of the Release_BETA_mk7 folder
+
+
Ensure that the file is named exactly movable.sed
+
+
+
Open the backup folder inside of the Release_BETA_mk7 folder
+
Double-click on the BACKUP .bat file corresponding to your console’s region (e.g. backup_USA.bat if you have a USA copy of Mario Kart 7)
+
+
If you are unsure of your console region, you can check System Settings. U = USA; E = EUR, J = JPN
+
If you get a message from Windows Defender, click “More info”, “Run anyway”, then press any key to continue
+
If the backup was successful, you should see a new folder appear
+
If you wish to restore this data at a later date (after finishing this guide), insert your SD card and double-click on the RESTORE .bat file corresponding to your console’s region
+
+
+
Go back to the Release_BETA_mk7 folder, then double-click on the .bat file corresponding to your console’s region (e.g. USA.bat if you have a USA copy of Mario Kart 7)
+
Reinsert your SD card into your console
+
+
+
Section IV - Kartminer7
+
+
+
Power on your console
+
Open Mario Kart 7
+
Tap the “Mario Kart Channel” button on the bottom
+
Tap the “StreetPass List” button on the bottom of the screen, in the middle
+
Press (A) over and over again
+
+
The colours on the bottom screen should change from red, to blue, to white
+
If you see the red/blue/white screens but the 3DS crashes, just reboot and try again
+
If you don’t see ANY colours, change your system language (if possible), then try the exploit again
+
+
+
If the exploit was successful, the 3DS will have booted into the 3DS ROP xPloit Injector
+
+
+
Section V - Installing menuhax67
+
+
+
Press (Y) + (D-Pad Down) to install menuhax67
+
+
The console will automatically power off
+
+
+
Power on your console
+
Tap on the small HOME Menu settings icon in the top left of the bottom screen ()
+
+
If the console freezes for a while and then crashes, make sure you have Launcher.dat on the root of your SD card
+
+
+
If the exploit was successful, your console will have booted into the Homebrew Launcher
+
Launch nimdsphax from the list of homebrew
+
If the exploit was successful, you will have booted into SafeB9SInstaller
+
+
If your console freezes on a red screen, hold the POWER button until it turns off, then try running menuhax again by powering on your console and tapping on the HOME Menu settings icon
+
+
+
+
+
Section VI - Installing boot9strap
+
+
In this section, you will install custom firmware onto your console.
+
+
+
When prompted, input the key combo given on the top screen to install boot9strap
+
+
If a step on the lower screen has red-colored text, and you are not prompted to input a key combo, follow this troubleshooting guide
+
+
+
Once it is complete, press (A) to reboot your console
+
Your console should have booted into the Luma3DS configuration menu
+
+
Luma3DS configuration menu are settings for the Luma3DS custom firmware. Many of these settings may be useful for customization or debugging
+
For the purpose of this guide, leave these options on the default settings (do not check or uncheck anything)
+
If your console shuts down when you try to power it on, ensure that you have copied boot.firm from the Luma3DS .zip to the root of your SD card
+
+
+
Press (Start) to save and reboot
+
+
+
At this point, your console will boot to Luma3DS by default.
+
+
Luma3DS does not look any different from the normal HOME Menu. If your console has booted into the HOME Menu, it is running custom firmware.
+
On the next page, you will install useful homebrew applications to complete your setup.
+
+
+
Section VII - Removing menuhax67
+
+
In this section, you will use the Homebrew Launcher to remove menuhax67, which will let you access the HOME Menu Settings option normally.
+
+
+
Launch the Download Play application ()
+
Wait until you see the Nintendo 3DS and Nintendo DS buttons
+
Press (Left Shoulder) + (D-Pad Down) + (Select) at the same time to open the Rosalina menu
+
Select “Miscellaneous options”
+
Select “Switch the hb. title to the current app.”
+
Press (B) to continue
+
Press (B) to return to the Rosalina main menu
+
Press (B) to exit the Rosalina menu
+
Press (Home) to suspend Download Play
+
Press the “Close” button on the bottom screen to close Download Play
+
Re-launch the Download Play application
+
Your console should load the Homebrew Launcher
+
+
If your console is stuck on the loading splash screen, you are missing boot.3dsx from the root of your SD card
+
+
+
Launch menuhax_manager from the list of homebrew
+
Select REMOVE menuhax67
+
When you see “done.”, press (A), then press (A) on “EXIT to menu”
Select the method based on the application that you have installed on your 3DS. No matter which method you pick, the end result will be the same.
+
Mario Kart 7
+
+
This method uses a cartridge or digital copy of Mario Kart 7. Using the movable.sed file, you can modify Mario Kart 7’s SD card data that will give you access to Homebrew Launcher, which will be used for further exploitation.
If you own any DSiWare title on your 3DS, you can dump it to the SD card so that it can be used to temporarily inject Flipnote into DS Connection Settings.