3DS:Alternate Exploits/Preparing menuhax67 (kartdlphax)

Required Reading

kartdlphax is an exploit for the game "Mario Kart 7", compatible with System Versions 1.0.0 through 11.16.0 for USA/EUR/JPN region consoles primarily made made by PabloMK7. It was used to launch universal-otherapp in the past, that got patched with the latest version, so this exploit can be used now to prepare the secondary exploits unSAFE_MODE(you can find this on the main guide) or menuhax67 on 11.16.0-49X. Credits go to zoogie for both of these exploits. If you're on an older version(<=11.15.0-47X), you can use universal-otherapp instead. This page covers preparing menuhax67 to access the Homebrew Launcher since accessing the Homebrew Launcher from kartdlphax directly not possible currently. On the next page you will find out how to access the Homebrew Launcher with menuhax67 set up. To use these exploits, kartdlphax includes the 3DS ROP xPloit Injector

To use this exploit, you need:

A second 3DS with custom firmware (the source 3DS) that is the same region as the 3DS you are trying to modify (the target 3DS)
A physical or digital copy of Mario Kart 7 that is the same region as both consoles
An SD card for both devices

If you are on the latest version of Mario Kart 7(v1.2), you'll have to delete the update in System Settings before following the instructions

What you need

On the source 3DS (the 3DS with custom firmware):

The latest release of kartdlphax (plugin.3gx)
The latest release of Luma3DS 3GX Loader Edition (boot.firm)

On the target 3DS (the 3DS that you are trying to launch the Homebrew Launcher on):

The latest release of standard Luma3DS (the Luma3DS .zip file)
The latest release of menuhax67 (the menuhax67 .zip file)

Instructions

Section I - Prep Work

On the source 3DS (the 3DS with custom firmware):

Insert the SD card of your source 3DS in your computer
Copy Luma 3GX Loader Edition’s boot.firm to the root of the source 3DS’s SD card, replacing any existing file
- The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
Copy kartdlphax’s plugin.3gx to the following directory on the source 3DS’s SD card, depending on the region of your copy of Mario Kart 7:
- USA: luma/plugins/0004000000030800
- EUR: luma/plugins/0004000000030700
- JPN: luma/plugins/0004000000030600
- Create the plugins and 00040000... folders if they do not already exist
Eject the SD card and put it in the source 3DS

On the target 3DS (the 3DS that you are trying to launch the Homebrew Launcher on):

Insert the SD card of your target 3DS in your computer
Copy boot.firm and boot.3dsx from the standard Luma3DS .zip to the root of your SD card
Copy the Launcher.dat for your region/version from the menuhax67 .zip to the root of your SD card

Section II - kartdlphax

Power on the source 3DS
- If you are prompted to set up Luma3DS, just press START to save the configuration
Once in the HOME Menu, press (Left Shoulder) + (Down D-Pad) + (Select) to bring up the Rosalina menu
Select “Enable plugin loader”
Press (B) to exit the Rosalina menu
Launch Mario Kart 7
- Ensure that wireless connectivity is enabled
Navigate to Local Multiplayer. A menu should pop up
- If the screen freezes, hold the power button for fifteen seconds to force power off your device, then try again
- If you have launched kartdlphax previously, the last selected settings will be loaded. If they are correct, select Use settings and skip the next 3 steps. If they are incorrect, select Change settings and proceed.
Select your target 3DS device type (Old 3DS family or New 3DS family)
Select the exploit type 3DS ROP xPloit Injector
A confirmation menu will show up. If the settings shown on the top screen are correct, select Use settings
- If the settings are not correct, press Change settings and modify them accordingly
Select Create Group
- If the source 3DS freezes at this point and you are using a cartridge, try installing the cartridge to the system
Power on the target 3DS
- Ensure that wireless connectivity is enabled
On the target 3DS, open the Download Play application (), then select “Nintendo 3DS”
Join the group created by the source 3DS
Select “Start” on the source 3DS once it has detected the target 3DS
Once multiplayer has loaded, navigate to Grand Prix -> 50cc -> (any driver) -> Mushroom Cup -> OK
Wait a while (a percentage should be displayed on the source 3DS)
If the exploit was successful, the target 3DS will have booted into the 3DS ROP xPloit Injector
- If the exploit was not successful, power off the source 3DS and target 3DS and start again from the beginning of Section II - kartdlphax
Press (Y) to install menuhax67
The target 3DS will automatically power off

You will not need to use your source 3DS to complete any further steps on this guide. Any further steps should only be completed on the target 3DS.

Continue to menuhax67