Download the latest version of safeA9LHinstaller
here, and copy the 3ds folder from that .7z file and place it on your SD card.
Download
this .zip, and place the a9lh folder from it onto your 3ds SD card.
Take your otp.bin and place that in the a9lh folder as well.
Download the noscreeninit verison from
here, then place payload_stage1.bin and payload_stage2.bin from that .7z and place it in the a9lh folder on your SD card.
So you should have a folder called a9lh in the root of your SD card with:
payload_stage1.bin
payload_stage2.bin
secret_sector.bin
firm1.bin
firm0.bin
otp.bin
You'll also want to download the homebrew stater pack
here, and place those on your SD, merging folders if it asks you to.
Finally download the non-dev version of Luma3DS from
here and place the arm9loaderhax.bin from it onto the root of your SD card
From there you can use any entrypoint to access Homebrew Launcher (though browserhax may cause issues, so install menuhax if that is your only option) and then run safeA9LHinstaller. Then press select when prompted to install A9LH.
From there you can reboot, and hold select to bring up the options menu for Luma. Select "Autoboot SysNAND", "Show current NAND in System Settings", and "Show GBA boot screen in patched AGB_FIRM".
Press start and you should boot into CFW sysNAND. To check you can open the System Settings and you should see "Sys" in front of your firmware version instead of "Ver".
After that I would download Hourglass9 from
here, and place Hourglass9.bin from it into Luma/payloads on your SD card. Then while booting you can hold start to boot Hourglass9 to dump and restore NAND
--------------------- MERGED ---------------------------
correction, put the file Hourglass9.bin into payloads folder, and then rename it to start_hourglass9.bin. Then it will load when holding start while powering on.