Hacking [GUIDE] Upgrading 8.1.0-0J to 9.2.0-20J

[TheShadowRunner]

I have a 9.1 dump and a 9.2 dump from the same console if it helps. @TheShadowRunner

Thanks for proposing but I don't think it'd help; I wouldn't know how to extract/decrypt the nand images to compare them.

So it turns out my OCD paid off since I have the original server logs of when I updated my N3DS, which contains the complete responses to the NUS requests (including the content). I've extracted them and you guys are free to have it.

Thanks very much to your OCD! ^^;
I checked your 9.1.0-20J-n3ds-nus for the mysterious 000400102002CA00 title and it isn't there as a download, but it IS there in your GetSystemUpdateResponse.xml :
--------------
<TitleVersion><TitleId>000400102002CA00</TitleId><Version>0</Version><FsSize>229376</FsSize><TicketSize>848</TicketSize><TMDSize>4708</TMDSize></TitleVersion>
--------------
Am I correct to assume, then, that this title was already installed on 8.1J and it's not present in your capture as it wasn't updated?

I did not capture the 9.2.0-20J update because they were literally two titles (menu v15360 and cver v9248, you can find them anywhere and manually flash them).

Arg, well it turns out that these 2 titles were apparently not dumped by anyone, anywhere.
At least I can't find them..
I asked @Oishikatta if he has them since he hosted 9.2J on his server at some point, but I think what he was really hosting was 9.1J..

(I also have 10.3.0-28U-n3ds and 10.3.0-28U-n3ds captured for when the time comes)

Excellent but I hope you mean "10.3.0-28U-n3ds and 10.3.0-28J-n3ds" ^^;

what firmware version has those?

9.2J
But yeah I cannot find those either..

 

[yifan_lu]

what firmware version has those?

9.2. What else?

 

[mooglazer]

You're now on 9.2.0-20U, enjoy!

@yifan_lu Thanks for all your work on this. My n3DS arrives tomorrow so I should be able to test the process.

I'm not clear on the "Remember to respond to the commoneticket request", but I assume this means your local httpd should be configured to respond appropriately, much in the same way it does during the 8.1J->9.1J process?

And it appears that menu v15360 and cver v9248 are both commonly available (the specifics are here) - I believe I found them where you'd expect them to be.

 

[yifan_lu]

Thanks for proposing but I don't think it'd help; I wouldn't know how to extract/decrypt the nand images to compare them.


Thanks very much to your OCD! ^^;
I checked your 9.1.0-20J-n3ds-nus for the mysterious 000400102002CA00 title and it isn't there as a download, but it IS there in your GetSystemUpdateResponse.xml :
--------------
<TitleVersion><TitleId>000400102002CA00</TitleId><Version>0</Version><FsSize>229376</FsSize><TicketSize>848</TicketSize><TMDSize>4708</TMDSize></TitleVersion>
--------------
Am I correct to assume, then, that this title was already installed on 8.1J and it's not present in your capture as it wasn't updated?


Arg, well it turns out that these 2 titles were apparently not dumped by anyone, anywhere.
At least I can't find them..
I asked @Oishikatta if he has them since he hosted 9.2J on his server at some point, but I think what he was really hosting was 9.1J..


Excellent but I hope you mean "10.3.0-28U-n3ds and 10.3.0-28J-n3ds" ^^;


9.2J
But yeah I cannot find those either..

Yes, I guess the 3DS never requested it (since the version was not updated). Are you sure NOBODY has them? I can dig farther but I would be really surprised if nobody captured those as a CIA or anything (I remember plenty of people using CIAs to upgrade).

 

[TheShadowRunner]

And it appears that menu v15360 and cver v9248 are both commonly available (the specifics are here) - I believe I found them where you'd expect them to be.

This is for old3DS though, not N3DS, doesn't that make any difference?

Are you sure NOBODY has them? I can dig farther but I would be really surprised if nobody captured those as a CIA or anything (I remember plenty of people using CIAs to upgrade).

No I cannot say I am 100% sure..

 

[yifan_lu]

This is for old3DS though, not N3DS, doesn't that make any difference?[/user]

No difference for these two specific titles.

 

[TheShadowRunner]

No difference for these two specific titles.

Which means they can be grabbed from 9.2J o3DS cia package?

 

[yifan_lu]

Which means they can be grabbed from 9.2J o3DS cia package?

Yes

 

[TheShadowRunner]

Yes

This is great! I thought they were different files. Yellow8's site doesn't store MD5 hashes, is there a place with confirmed good hashes for these specific title revisions?

And coming back to the infamous 000400102002CA00 title, It seems quite clear now that it wasn't updated in either 9.1J or 9.2J (not changed from 8.1J).
But somehow users who downgraded from 10.3J HAD to remove the title during the dg process otherwise the console would brick. I still can't wrap my head around that.. Is it possible that 10.3J has an updated version of this title, that cannot be uninstalled/downgraded for some reason?

 

[yifan_lu]

This is great! I thought they were different files. Yellow8's site doesn't store MD5 hashes, is there a place with confirmed good hashes for these specific title revisions?

And coming back to the infamous 000400102002CA00 title, It seems quite clear now that it wasn't updated in either 9.1J or 9.2J (not changed from 8.1J).
But somehow users who downgraded from 10.3J HAD to remove the title during the dg process otherwise the console would brick. I still can't wrap my head around that.. Is it possible that 10.3J has an updated version of this title, that cannot be uninstalled/downgraded for some reason?

No hashes, but you can check the version with ctrtool.

I can only speculate, but since the official update doesn't touch it and nintendo changed the version number internally, it must have caused problems (aka an error on their end). My guess is that when they released v1, it caused the bricks we see, so they renamed it to v0 and kept the files on the server (because why not, they did this for everything until recently). Then when someone went to capture the update, they used a PC tool that tried to download all titles (rather than what the 3DS does which is only download updated titles) and pulled this bad v1/v0 title.

 

[MelonGx]

The 9.2J provider sent me a message that he just checked menu & cver version by CDN-CIA-unpacking.
Unfortunately, both the menu (14336) and the cver (9232) did be the 9.1J ones.
So it could only be either a mistake that 3DNUS 1.9 actually dragged 9.1J instead of 9.2J, or the provider typed 9.1.0-20 instead of 9.2.0-20.

 

[TheShadowRunner]

Here's the file info for those who want to go from 9.1J to 9.2J (ocd here as well ^^)

- 0004003000008202.cia Home Menu v15360
MD5: 8560591C6951C680A8498EA344F40546

- 000400DB00017202.cia CVer v9248
MD5: 4F165A321A4D78BE55E8209E2E8BC35A

Additionaly, a cleanup is needed for those who downgraded from 10.3J to 9.1J/9.2J:
This title should be deleted from sysnand:
0004003000009502 JPN amiibo Settings v7, v1031 9.3.0-21 (stage2), 9.6.0-24

Once done, you'll be on a "perfect" 9.2J = exactly the same as if you had upgraded from 8.1J to 9.2J the official way.
(those titles shouldn't interfere with the 9.1J titles, since 9.1J titles aren't aware of them, but if an amiibo compatible game sees the "amiibo Settings v7" title available and tries to use it, when the other 9.1J modules aren't aware of it, it cannot be good..)

 

[reiyu]

what about those who upgraded with the false 9.1? do we need to delete anything?

also, side note, the whole difference between 9.1 and 9.2 were really only those 2 files?

 

[TheShadowRunner]

what about those who upgraded with the false 9.1? do we need to delete anything?

If you upgraded from 8.1J to the false 9.1J directly and never touched 10.3J, you don't need to delete anything.

 

[reiyu]

sorry, slipped this on an edit to avoid double post.. you replied faster than i can edit lol.

also, side note, the whole difference between 9.1 and 9.2 were really only those 2 files?

 

[TheShadowRunner]

also, side note, the whole difference between 9.1 and 9.2 were really only those 2 files?

yes.

 

[reiyu]

so if someone just repackages the 9.1 files with the cver and menu .cias, it should be full 9.2?

would this also fix the mystery of 000400102002CA00 bricks though?

 

[TheShadowRunner]

so if someone just repackages the 9.1 files with the cver and menu .cias, it should be full 9.2?

Absolutely.

would this also fix the mystery of 000400102002CA00 bricks though?

No, it's unrelated. As conjectured by yifan, the 000400102002CA00.cia in the fake 9.1J is either corrupted or a bad dump so it should be removed from the pack. Removing it doesn't matter as this title is already installed on 8.1J and wasn't modified.

 

[reiyu]

As conjectured by yifan, the 000400102002CA00.cia in the fake 9.1J is either corrupted or a bad dump so it should be removed from the pack. Removing it doesn't matter as it's already installed on 8.1J and wasn't modified.

huh, but didn't @Ronhero say he didn't bother to remove it and it worked for him?

also, at what version did 000400102002CA00 change btw? would we be able to get a better one from a different pack if its the same version anyway?

 

[TheShadowRunner]

huh, but didn't @Ronhero say he didn't bother to remove it and it worked for him?

also, at what version did 000400102002CA00 change btw? would we be able to get a better one from a different pack if its the same version anyway?

Ronhero used the server update method, not the 10.3J downgrade method, so since this title was already installed on his 8.1J, it was probably skipped by the official updater (my conjecture).

From http://www.3dbrew.org/wiki/9.1.0-20J, "The version of JPN-region New3DS application title 000400102002CA00 listed in SOAP was changed to v0, originally this title was added under SOAP with the Oct 2 JPN-only "update" as v1. Note that this title wasn't actually changed, the TMD is identical besides the title-version. Both versions of this title already existed."
From this, it seems the title never changed, it went from v1 to v0, which is what we got on 8.1J in the first place (v0).