3DS:Alternate Exploits/Preparing menuhax67 (kartdlphax)

Required Reading

kartdlphax is an exploit for the game "Mario Kart 7", compatible with System Versions 1.0.0 through 11.16.0 for USA/EUR/JPN region consoles primarily made made by PabloMK7. It was used to launch universal-otherapp in the past, that got patched with the latest version, so this exploit can be used now to prepare the secondary exploitsunSAFE_MODE(you can find this on the main guide) or menuhax67 on 11.16.0-49X. Credits go to zoogie for both of these exploits. If you're on an older version(<=11.15.0-47X), you can use universal-otherapp instead. This page covers installing menuhax67 to access the Homebrew Launcher since accessing the Homebrew Launcher from kartdlphax directly not possible currently. To use these exploits, kartdlphax includes the 3DS ROP xPloit Injector

To use this exploit, you need:

• A second 3DS with custom firmware (the source 3DS) that is the same region as the 3DS you are trying to modify (the target 3DS)
• A physical or digital copy of Mario Kart 7 that is the same region as both consoles
• An SD card for both devices

What you need

On the source 3DS (the 3DS with custom firmware):

• The latest release of kartdlphax (plugin.3gx)
• The latest release of Luma3DS 3GX Loader Edition (boot.firm)

On the target 3DS (the 3DS that you are trying to launch the Homebrew Launcher on):

• The latest release of standard Luma3DS (the Luma3DS .zip file)
• The latest release of menuhax67 (the menuhax67 .zip file)

Instructions

Section I - Prep Work

On the source 3DS (the 3DS with custom firmware):

1. Insert the SD card of your source 3DS in your computer
2. Copy Luma 3GX Loader Edition’s boot.firm to the root of the source 3DS’s SD card, replacing any existing file
   • The root of the SD card refers to the initial directory on your SD card where you can see the Nintendo 3DS folder, but are not inside of it
3. Copy kartdlphax’s plugin.3gx to the following directory on the source 3DS’s SD card, depending on the region of your copy of Mario Kart 7:
   • USA: luma/plugins/0004000000030800
   • EUR: luma/plugins/0004000000030700
   • JPN: luma/plugins/0004000000030600
   • Create the plugins and 00040000... folders if they do not already exist
4. Eject the SD card and put it in the source 3DS

On the target 3DS (the 3DS that you are trying to launch the Homebrew Launcher on):

1. Insert the SD card of your target 3DS in your computer
2. Copy boot.firm and boot.3dsx from the standard Luma3DS .zip to the root of your SD card
3. Copy the Launcher.dat for your region/version from the menuhax67 .zip to the root of your SD card

Section II - kartdlphax

1. Power on the source 3DS
   • If you are prompted to set up Luma3DS, just press START to save the configuration
2. Once in the HOME Menu, press (Left Shoulder) + (Down D-Pad) + (Select) to bring up the Rosalina menu
3. Select “Enable plugin loader”
4. Press (B) to exit the Rosalina menu
5. Launch Mario Kart 7
   • Ensure that wireless connectivity is enabled
6. Navigate to Local Multiplayer. A menu should pop up
   • If the screen freezes, hold the power button for fifteen seconds to force power off your device, then try again
   • If you have launched kartdlphax previously, the last selected settings will be loaded. If they are correct, select Use settings and skip the next 3 steps. If they are incorrect, select Change settings and proceed.
7. Select your target 3DS device type (Old 3DS family or New 3DS family)
8. Select the exploit type 3DS ROP xPloit Injector
9. A confirmation menu will show up. If the settings shown on the top screen are correct, select Use settings
   • If the settings are not correct, press Change settings and modify them accordingly
10. Select Create Group
    • If the source 3DS freezes at this point and you are using a cartridge, try installing the cartridge to the system
11. Power on the target 3DS
    • Ensure that wireless connectivity is enabled
12. On the target 3DS, open the Download Play application (), then select “Nintendo 3DS”
13. Join the group created by the source 3DS
14. Select “Start” on the source 3DS once it has detected the target 3DS
15. Once multiplayer has loaded, navigate to Grand Prix -> 50cc -> (any driver) -> Mushroom Cup -> OK
16. Wait a while (a percentage should be displayed on the source 3DS)
17. If the exploit was successful, the target 3DS will have booted into the 3DS ROP xPloit Injector
    • If the exploit was not successful, power off the source 3DS and target 3DS and start again from the beginning of Section II - kartdlphax
18. Press (Y) to install menuhax67
19. The target 3DS will automatically power off

You will not need to use your source 3DS to complete any further steps on this guide. Any further steps should only be completed on the target 3DS.

Section III - menuhax67

1. Power on your device(target 3DS)
2. Press on the small home icon on the top left of the touch screen in the home menu

If the exploit was successful, your device will have booted into the Homebrew Launcher

At this point, there are a number of processes you may follow. Continue to the next section of the guide based on what you have access to.

Method	Requirements
---	Working shoulder buttons	Working DS mode	System version
Installing boot9strap (HBL-USM)	Yes	No	Latest
Dumping movable.sed (nimhax)	No	Yes	Latest
Installing boot9strap (uloader)	No	No	11.15.0 or lower

Uninstall menuhax67

This is an add-on section for people who successfully did what they needed to do in the Homebrew Launcher. This section describes uninstalling menuhax67 to make the small home icon usable again.

Instructions

1. Create a folder called 3ds on the root of your SD card
2. Copy the menuhax67_installer.3dsx from the menuhax67 .zip to the root of your SD card
3. Insert the SD card into the 3DS
4. Launch the Homebrew Launcher with any method(normally with Rosalina & Download Play or from the home menu)
5. Launch the menuhax67_installer.3dsx from the list of homebrew
6. Select "REMOVE menuhax67"