Hacking [GUIDE] Upgrading 8.1.0-0J to 9.2.0-20J

[innercy]

I wanted to say that I think I might have been misinformed when I said that I didn't think there was any way to restore sysnand to a N3DS yet..
I'm not sure there is a post in this thread yet saying "Don't worry, you can restore your sysnand via hardware method".. So I want to say that now just to be clear..

I think a lot of people with japanese N3DSs check this thread, so I wanted to say, first back-up your sysnand of course, and then try to update it to 9.2.0 using this thread's method, but if you fail, I wanted to post this link to how you can do a hardware modification on your N3DS: https://gbatemp.net/threads/n3ds-nand-backup-possible-i-hope.381506

Although if you are careful enough, hopefully you won't need to do that..

u can restore nand using gateway

 

[FF777]

u can restore nand using gateway

I am talking about people that fail with this method and accidentally end up updating to some thing like 9.7.. At that point, I think only the hardware exploit of restoring the sysnand will work..

 

[Kracken]

Is this the only viable method to update an 8.1J sysnand to 9.2J?

 

[TheShadowRunner]

Is this the only viable method to update an 8.1J sysnand to 9.2J?

sadly, yes.

 

[Kracken]

sadly, yes.

And even then is there any way to get 9.5 emunand? I saw someone post you could, but they were unaware of the method.

 

[hippy dave]

Yeah you can get 9.5 emunand with the nus/cia method apparently, I'm not going to tell you how because I haven't done it.

 

[Melon__Bread]

Is this the only viable method to update an 8.1J sysnand to 9.2J?

It is not as bad as it looks. Pretty much load up NTR, run the debugger in windows, enter some commands, update

 

[MelonGx]

What is the parameters for 9.1.0-20J -> 9.2.0-20J?

 

[cearp]

What is the parameters for 9.1.0-20J -> 9.2.0-20J?

if the destination fw is still 9.2j, you will not have to change anything anything that you already have will simply be skipped, i guess...

 

[Aquaboy11]

Is it possible to reroute the needed traffic to my webserver instead of patching the 3ds?

 

[Ichii Giki]

Is it possible to reroute the needed traffic to my webserver instead of patching the 3ds?

Patching the 3DS is required as it uses HTTPS for the traffic by default, so you can't just spoof/reroute the traffic unpatched.

 

[Deleted member 129634]

is this method still working? and if it is, is it still the only way to do this?

 

[dkabot]

is this method still working? and if it is, is it still the only way to do this?

Considering http://jp81to92update.tk/ still returns a response, I'd assume so.
Double considering 8.1.0-0, pretty much. Cart updates [to 9.2j don't exist and] don't include browser.

 

[tipsytoto]

is this method still working? and if it is, is it still the only way to do this?

https://gbatemp.net/threads/how-to-...om-4-1-8-1-to-9-2-0-20-with-pasta-cfw.389187/

Should work for you.

Edit: NVM, it apparently won't work. Sorry.

 

[Nuzzgok]

Still no way to do this with only a gateway and OoT? I can never seem to get my head around a method that will work. With the new NTR 3.0 I can launch NTR from within Gateway sysnand mode, but as far as I know, that will brick as soon as I update it..

 

[Tokiopop]

Still no way to do this with only a gateway and OoT? I can never seem to get my head around a method that will work. With the new NTR 3.0 I can launch NTR from within Gateway sysnand mode, but as far as I know, that will brick as soon as I update it..

What about installing BootNTR.cia in Sysnand? That should let you boot straight into NTR mode without GW/CN and this method should work from there(?)

I'm in the same boat as you, 8.1j n3DS and no CN.

 

[Nuzzgok]

What about installing BootNTR.cia in Sysnand? That should let you boot straight into NTR mode without GW/CN and this method should work from there(?)

I'm in the same boat as you, 8.1j n3DS and no CN.

Unfortunately this is something I tried. NTR cia can't be booted without some sort of patch active.. like gateway. Seems we'll just have to wait.

 

[Tokiopop]

Unfortunately this is something I tried. NTR cia can't be booted without some sort of patch active.. like gateway. Seems we'll just have to wait.

Doesn't NTR have some sort of clean boot option?

 

[ayanekochan]

Hi all,

Just got a 8.1 japan n3ds here recently and tried Ichii Giki's tutorial on it, strangely enough it keeps erroring out at GetSystemUpdate. I had successfully updated my friend's japan n3ds on 8.1j last week using the same method with the same setup (wireless, webserver, etc) and it worked out very well updating smoothly to 9.2j. I didn't change a single thing this time around on my own device and it keeps throwing me errors and rebooting back to home.

Am I a week too late and Nintendo has already taken down their 9.2j fw from their update servers?

As a last ditch effort (I got desperate) I tried oshikatta's server as well. Same result =(

FWIW here's my error log:

Host: xxx
User-Agent: CTR NUP 040600 Mar 14 2012 13:33:20
Connection: Keep-Alive
Accept-Charset: UTF-8
Content-type: text/xml; charset=utf-8
SOAPAction: urn:nus.wsapi.broadon.com/GetSystemTitleHash
GetSystemTitleHash detected
com.broadon.RequesterName: unitTest
com.broadon.RequesterHash: xxx
com.broadon.RequesterTimestamp: xxx
Transfer-Encoding: chunked

Host: xxx
User-Agent: CTR NUP 040600 Mar 14 2012 13:33:20
Connection: Keep-Alive
Accept-Charset: UTF-8
Content-type: text/xml; charset=utf-8
SOAPAction: urn:nus.wsapi.broadon.com/GetSystemUpdate
GetSystemUpdate detected
com.broadon.RequesterName: unitTest
com.broadon.RequesterHash: xxx
com.broadon.RequesterTimestamp: xxx
Transfer-Encoding: chunked

Basically, you need to (FOR 8.1.0-0J TO 9.2.0-20J ONLY!):

Spoiler

1. Set up a webserver to locally host PHP. I used EasyPHP on Windows 8.1: http://www.easyphp.org/easyphp-devserver.php

2. Once you have your webserver running, you need to host 5 main files:
a. GetAccountStatus_response.xml: https://gist.github.com/yifanlu/e0787ca48473cdf992f8
*. You need to change the NusURL value to match the path of your webserver host!
b. GetSystemCommonETicket_response.xml: https://gbatemp.net/threads/guide-upgrading-8-1-0-0j-to-9-2-0-20j.384960/page-2#post-5414650
c. GetSystemTitleHash_response.xml: https://gist.github.com/yifanlu/3a6fab2ea14a2b2f081f
*. You need to change the TitleHash value to match the one in GetSystemUpdate_response.xml: 8564645C8A1B36E6E13F93D6C5348763
d. GetSystemUpdate_response.xml: https://gist.github.com/yifanlu/bdcd22073cb5096942bb
e. update.php: https://gbatemp.net/threads/guide-upgrading-8-1-0-0j-to-9-2-0-20j.384960/#post-5414057
*. You will need to add an elseif statement for the GetSystemCommonETicket case that returns the GetSystemCommonETicket_response.xml file.

3. Once your webserver is all configured, boot up NTR-CFW on your 8.1.0-0J New3DS: https://gbatemp.net/threads/release...gion-free-cfw-on-jp-eu-us-aus-new-3ds.385142/

4. Once you are in the NTR-CFW environment, press X+Y simultaneously to bring up the system menu. Enable the debugger from there.

5. Launch the NTRclient debugger application: https://gbatemp.net/threads/release...st-public-real-time-debugger-for-n3ds.384858/

6. In the NTRclient application, run the following 5 commands:
a. connect('#.#.#.#', 8000)
*. Replace #.#.#.# with the IP address of your New3DS.
b. listprocess()
c. write(0x15E424, tuple(map(ord, "http://hostname/update.php\0")), pid=0x25)
d. write(0x15E0EC, tuple(map(ord, "http://hostname/GetAccountStatus_response.xml\0")), pid=0x25)
e. write(0x15E463, tuple(map(ord, "http://hostname/GetAccountStatus_response.xml\0")), pid=0x25)
*. In all of these, replace hostname with the path to your webserver host!

7. Once you have run all the patching commands, launch System Settings on the New3DS.
*. DO NOT EXIT SYSTEM SETTINGS OR YOU WILL HAVE TO REPERFORM ALL PREVIOUS PATCHING STEPS!!!

8. Perform a system update as normal.

9. When the update is complete, the system should reboot into 9.2.0-20J (with new NTR 2.1 version, the system no longer hangs on reboot!).

I found this whole exercise to be a nice learning experience in web SOAP calls and how the 3DS update process works. It was very interesting and I thank everyone in this thread for contributing to my success!

Good luck!

 

[Ronhero]

Hi all,

Just got a 8.1 japan n3ds here recently and tried Ichii Giki's tutorial on it, strangely enough it keeps erroring out at GetSystemUpdate. I had successfully updated my friend's japan n3ds on 8.1j last week using the same method with the same setup (wireless, webserver, etc) and it worked out very well updating smoothly to 9.2j. I didn't change a single thing this time around on my own device and it keeps throwing me errors and rebooting back to home.

Am I a week too late and Nintendo has already taken down their 9.2j fw from their update servers?

As a last ditch effort (I got desperate) I tried oshikatta's server as well. Same result =(

FWIW here's my error log:

Host: xxx
User-Agent: CTR NUP 040600 Mar 14 2012 13:33:20
Connection: Keep-Alive
Accept-Charset: UTF-8
Content-type: text/xml; charset=utf-8
SOAPAction: urn:nus.wsapi.broadon.com/GetSystemTitleHash
GetSystemTitleHash detected
com.broadon.RequesterName: unitTest
com.broadon.RequesterHash: xxx
com.broadon.RequesterTimestamp: xxx
Transfer-Encoding: chunked

Host: xxx
User-Agent: CTR NUP 040600 Mar 14 2012 13:33:20
Connection: Keep-Alive
Accept-Charset: UTF-8
Content-type: text/xml; charset=utf-8
SOAPAction: urn:nus.wsapi.broadon.com/GetSystemUpdate
GetSystemUpdate detected
com.broadon.RequesterName: unitTest
com.broadon.RequesterHash: xxx
com.broadon.RequesterTimestamp: xxx
Transfer-Encoding: chunked

Since 3dnus servers are no longer working this method will no longer work