info - please read before starting

This guide can potentially cause unexpected results if done wrong. Please ensure you read the steps carefully to prevent these unexpected results from happening.

Do NOT inject a movable.sed from Bruteforce Movable for this guide. Doing so will cause a brick if you uninstall custom firmware after following the guide. Always keep a backup of your original movable.sed if you do so.

Note that uninstalling CFW anytime after doing these steps WILL brick your console, as we have tampered with console-unique files which can have dangerous effects if stock/native.firm is booted. These unique files will be extracted during the process of this tutorial.

If you are confused in any way, join the Nintendo Homebrew server and ask for help in the 3DS assistance channels.

What you need

Two 3DS consoles, both modded with Luma3DS CFW
essential.exefs from the initial hacking procedures from 3DS Hacks Guide
The latest version of faketik (the .3dsx file)
The latest version of GodMode9 (the GodMode9 .zip file)

Prep Work

Follow this section on the destination console only.

Power off your device
Insert your SD card into your computer
Copy GodMode9.firm from the GodMode9 .zip to the /luma/payloads/ folder on your SD card
Copy the gm9 folder from the GodMode9 .zip to the root of your SD card
Create a folder named 3ds on the root of your SD card if it does not already exist
- This folder stores homebrew applications and data; it is different from the Nintendo 3DS folder that the device automatically generates
Copy faketik.3dsx to the 3ds folder on the root of your SD card
Copy essential.exefs to the root of your SD card and rename it to old-essential.exefs
Reinsert your SD card into your device

Backing up destination console's essential.exefs

If you do not back up the destination console's essential.exefs before following the remainder of the guide, your console will not be able to uninstall custom firmware.

Press and hold Start, and while holding Start, power on your device. This will launch GodMode9
Navigate to [S:] SYSNAND VIRTUAL
Press A on essential.exefs to select it
Select “Copy to 0:/gm9/out”
- If you see “Destination already exists”, press (A) on “Overwrite file(s)”
Press A to continue
Press B until you return to the main menu

This console's original essential.exefs file will be in /gm9/out folder on your SD card. It is highly recommended to back it up to a safe location.

Extracting the movable file from `essential.exefs`

Press A on the [0:] SDCARD
Select the old-essential.exefs, and press A on Mount as EXEFS image
Look for a file named movable inside the old-essential.exefs image mount
Press Y on movable, then proceed to the next section

Replacing the movable.sed

Press B to exit the essential.exefs mount.
Enter the SYSNAND CTRNAND drive, then enter the private folder
Press X on the movable.sed file unlock write permissions when prompted
Press A to unlock SysNAND (lvl1) writing, then input the key combo given
Press Y to paste the movable in the clipboard, rename it to movable.sed
Press B until you are back at the main menu, press R + A on the SYSNAND CTRNAND drive, select "Fix CMACS for drive"
Press Start to reboot your device
Your console will act like it has just been formatted, this is meant to happen. Proceed through initial setup.

Getting your apps back

Launch the Download Play application
Wait until you see the two buttons
- Do not press either of the buttons
Press (Left Shoulder) + (D-Pad Down) + (Select) at the same time to open the Rosalina menu
Select "Miscellaneous options"
Select "Switch the hb. title to the current app."
Press B to continue
Press B to return to the Rosalina main menu
Press B to exit the Rosalina menu
Press Home, then close Download Play
Relaunch the Download Play application
Your device should load the Homebrew Launcher
Launch faketik from the list of homebrew
Wait until the process is completed
Press Start to exit
Reboot your device

Congratulations, you just performed a complex procedure.