Before anything I am going to say: I really don't know how these kind of things work, so please don't be harsh. That said, I had an idea. I was watching some video where a person used a modified version of PkHex, a really nice "Gen 6" Pokemon Save edito, where he had made it that he could insert invalid addresses of Pokemon. Now do no quote me, but could it be possible to have a Pokemon that triggers a crash to one of the payloads, then run the "boot.3ds" file? Thanks for any replies and help. Have a good one.