Does the browser hack work on 8.x? If so (provided your friend doesn't care about hacking his 3DS) you can install an update with devmenu or set up an emuNAND or something. If that's not an option, I think the US release of Sm4sh has a 9.2 update on it.