Hacking [GUIDE] Upgrading 8.1.0-0J to 9.2.0-20J

[tarovisions]

...


For anyone interesting in using their own server and updating to any version (for example, EUR), I've added a function to automatically generate the ETickets to my .php file.

https://github.com/Oishikatta/NUS

It can be used with raw soap replies from http://yls8.mtheall.com/ninupdates/reports.php - you just have to edit the titlehash in titlehash.xml to match the file you use for titleversion.xml.

Thanks again for this, was able to go from 8.1J to 9.1J; all that work and nothing special from me

 

[Oishikatta]

Thanks again for this, was able to go from 8.1J to 9.1J; all that work and nothing special from me

Why 9.1J instead of 9.2J though?

 

[tarovisions]

Why 9.1J instead of 9.2J though?

Just trying things out, no real reason actually. I'll be trying 9.0J next haha

 

[Oishikatta]

Just trying things out, no real reason actually. I'll be trying 9.0J next haha

Do be careful though, while testing my 3DS downloaded 9.6J in sleep mode and I accidentally updated to that despite patching nim. (Enter and exit recovery mode first if you're not sure!)

Also, note that the offsets will be different for each base version. Now that you're on 9.1J you'll either have to find your offsets (see page 10) or restore to 8.1 from gateway's launcher.

 

[CharlesX]

why when me update from 8.1j to 9.2j with this method i update success

but i can't boot to NTR CFW agian

when i try to boot it with cubic ninja it black screen on top and then hang and crash to home menu

 

[Link'sSpiritualAwakening]

why when me update from 8.1j to 9.2j with this method i update success

but i can't boot to NTR CFW agian

when i try to boot it with cubic ninja it black screen on top and then hang and crash to home menu

You might have to reinstall the exploit. Make sure your internet is on

 

[CharlesX]

i change my internet and it can reinstall


thanks for advice becoz internet connection
first one i try use brower it can use but i don't know why it can't reinstall exploit

 

[verdin551]

So this does not work in the old 3ds?

 

[innercy]

thanks. nice work.

 

[BerserkLeon]

So this does not work in the old 3ds?

I guess. You need to be able to boot NTR CFW, which apparently only works on the n3ds.
I'm going to be getting an o3dsLL soon so I was hoping it was for o3ds as well. Though, I haven't searched too hard, so maybe there's something else that'll work on whatever firmware the Eevee 3dsLL comes with (I read 5.0 somewhere...)

 

[Chelsea_Fantasy]

is there any way to set up an update server for the o3ds?
i mean download all the update files (not the cia, the raws) then create a virtual host in the pc with the files in and try to update the o3ds

 

[BobsYurUncle]

I feel like an idiot reading this. I understand the concept but get lost in the execution.

If someone where to make a well documented video showing the steps, that would be swell.

 

[innercy]

I feel like an idiot reading this. I understand the concept but get lost in the execution.

If someone where to make a well documented video showing the steps, that would be swell.

it basically straight forward, which step u lost?

 

[alin72]

He already did release: https://gbatemp.net/threads/creating-a-north-american-non-xl-new-3ds.381775/page-8#post-5425577

My issue is that I don't have the client cert for getting the official NUS responses, so I can't make my own CommonETicket response.

Edit: Client cert was in the ram of the ssl process, that was kind of an obvious place for it...
*removed client cert

And the CommonETicket response for 9.2U:
-removed because partial

Edit2: After sending that response, I got another request for more CommonETickets...

<nus:TitleId>0004003000009702</nus:TitleId><nus:TitleId>000400300000BD02</nus:TitleId><nus:TitleId>000400300000C802</nus:TitleId><nus:TitleId>000400300000C902</nus:TitleId><nus:TitleId>000400300000CB02</nus:TitleId><nus:TitleId>000400300000CC02</nus:TitleId><nus:TitleId>000400300000CE02</nus:TitleId><nus:TitleId>0004003020009402</nus:TitleId><nus:TitleId>000400302000C803</nus:TitleId><nus:TitleId>0004009B00012302</nus:TitleId><nus:TitleId>0004009B00013302</nus:TitleId><nus:TitleId>000400DB00017302</nus:TitleId><nus:TitleId>000400DB20016302</nus:TitleId>

Edit3: I have merged all of the required responses. http://pastebin.com/cVswFk4m

Offsets for 9.2J: 0x14E4F4, 0x14E1BC, 0x14E533

I have added the 9.2U files and etickets to my server.

connect('3ds ip', 8000)
write(0x14E4F4, tuple(map(ord, "http://us92.jp81to92update.tk/\0")), pid=0x25)
write(0x14E1BC, tuple(map(ord, "http://us92.jp81to92update.tk/\0")), pid=0x25)
write(0x14E533, tuple(map(ord, "http://us92.jp81to92update.tk/\0")), pid=0x25)

Reminder that by not using your own server you send your console's serial, device id/token, etc... over the internet. I do not log them.

After running the update to 9.2U, my 3DS rebooted perfectly fine into 9.2J.

I can't connect to my new 3ds. Pressing X+Y told me that the debugger is enabled on the 3ds and I'm sure I've got the correct IP for it. Nothing happened after I type in the connect('my 3ds ip', 8000) on my laptop using the debugger. Help!!

 

[davhuit]

I'm not in this situation (have a 9.0 EUR) but couldn't this method be modified to run with OOT?

Because it seems Cubic Ninja in Japan is pretty damn rare.

One could argue OOT price is now near a Sky3DS one but I suppose most 3DS players have OOT as it was the first "big" game on the system.

 

[kamesenin888]

im trying to do this process with the debugger, but it keeps bouncing off the connection with the 3ds, do you need to config something in the 3ds to let you access?

 

[Oishikatta]

I can't connect to my new 3ds. Pressing X+Y told me that the debugger is enabled on the 3ds and I'm sure I've got the correct IP for it. Nothing happened after I type in the connect('my 3ds ip', 8000) on my laptop using the debugger. Help!!

im trying to do this process with the debugger, but it keeps bouncing off the connection with the 3ds, do you need to config something in the 3ds to let you access?

You need to be on the same network, and on a network that allows connections between devices (many public networks do not).

After booting NTR, press XY to get the menu and then 'Enable Debugger'.

Check your router for the IP address of your 3DS and connect to it with port 8000.

I'm not in this situation (have a 9.0 EUR) but couldn't this method be modified to run with OOT?

Because it seems Cubic Ninja in Japan is pretty damn rare.

One could argue OOT price is now near a Sky3DS one but I suppose most 3DS players have OOT as it was the first "big" game on the system.

I used a sky for it as CN would have cost more to import. The author of NTR has no intention of porting to OOT at this time.

 

[kamesenin888]

I put the files I used on a server, hopefully this makes it simpler.

It is still recommended of course to make a backup of your 8.1 sysnand first with gateway's launcher, and to enter and exit recovery mode to clear any pending updates.

connect("your 3ds ip", 8000)
write(0x15E424, tuple(map(ord, "http://jp81to92update.tk/\0")), pid=0x25)
write(0x15E0EC, tuple(map(ord, "http://jp81to92update.tk/\0")), pid=0x25)
write(0x15E463, tuple(map(ord, "http://jp81to92update.tk/\0")), pid=0x25)

i love ya, it was that i wasnt enabling the debugger, what is the purpose of the nim?


this is my whole process i want to know if everything is fine



> connect("************",8000)
null
Server connected.
patching smdh
starting applet: 0004000000034300
FSUSER_OpenDirectory failed, ret=c8804478FSUSER_OpenDirectory failed, ret=c8804478patching smdh
patching smdh
> listprocess()
null

the whole process with nim in x25

end of process list.

> write(0x15E424, tuple(map(ord, "http://jp81to92update.tk/\0")), pid=0x25)
null
finished
> write(0x15E0EC, tuple(map(ord, "http://jp81to92update.tk/\0")), pid=0x25)
null
finished
> write(0x15E463, tuple(map(ord, "http://jp81to92update.tk/\0")), pid=0x25)
null
finished


system settings
starting applet: 0004001000020000
FSUSER_OpenDirectory failed, ret=c8804478FSUSER_OpenDirectory failed, ret=c8804478





No se puede escribir datos de en la conexión de transporte: Se produjo un error durante el intento de conexión ya que la parte conectada no respondió adecuadamente tras un periodo de tiempo, o bien se produjo un error en la conexión establecida ya que el host conectado no ha podido responder.

Server disconnected.



WELL I ALMOST DIED A LITTLE BUT IT UPDATED AWESOMELY thank you oishikata

 

[alin72]

You need to be on the same network, and on a network that allows connections between devices (many public networks do not).

After booting NTR, press XY to get the menu and then 'Enable Debugger'.

Check your router for the IP address of your 3DS and connect to it with port 8000.




I used a sky for it as CN would have cost more to import. The author of NTR has no intention of porting to OOT at this time.

The ntr says it's already enabled. They are all connected to my home wifi...I typed in the connect command any press enter, nothing happened. What could possibly go wrong? I wanted to try using my iPhone as a hotspot then I realized I can't find 3ds's ip that way. Sigh..

 

[Oishikatta]

The ntr says it's already enabled. They are all connected to my home wifi...I typed in the connect command any press enter, nothing happened. What could possibly go wrong? I wanted to try using my iPhone as a hotspot then I realized I can't find 3ds's ip that way. Sigh..

Nothing at all happened? Are you sure you're typing in the right box (not where the text shows up)?