[RELEASE] Regionthree: Region Free loader for 3DS/2DS/xl from 9.0~9.4, Sky3DS Users, regionfree!!

Discussion in '3DS - Flashcards & Custom Firmwares' started by Dartz150, Jan 17, 2015.

  1. Dartz150
    OP

    Member Dartz150 GBATemp Official Lolicon Onii-chan™

    Joined:
    May 5, 2010
    Messages:
    1,393
    Location:
    On a Strange Journey
    Country:
    Mexico
    https://github.com/smealum/regionthree/

    As the tittle says, this has become a reality.

    ¿What does this mean?

    -Now, we can play any legit cart game regardless the region of both the console or the cart, it will load without any objection.

    -Sky3DS and QQ3DS Users are finally able to load any region ROM now.

    Sky3DS proof (thanks to DjoeN:

    Warning: Spoilers inside!

    Japanese Smash Bros Cart on an EUR 3DS console proof:



    How to use

    • Download Launcher.dat from the repo (or compile it yourself) : https://github.com/smealum/regionthree/raw/master/Launcher.dat
    • Copy Launcher.dat to the root of your SD card
    • Insert the game you want to run into your 3DS and power it up
    • Open the "Download Play" application
    • Hit the home menu button, but do not exit the Download Play application (keep it running in the background)
    • Open the Web Browser applet
    • Go to Gateway's exploit page (not linking directly to it here because not a fan of their whole piracy thing they've got going)
    • Wait a few seconds; screen should turn black and after a bit your game should boot up !
    FAQ

    • Does this work on the latest firmware version ? Yes, 9.4 is supported.
    • Does this work using a Sky3DS or QQ3DS Flashcards? Yes, they will load, but the process is a very random game, because foreign region games for your 3DS will not show their banner; this means that you will need to change the game with the button totally blind, but it will load of course.
    • Does this let me run homebrew and/or roms ? No, it just lets you run legit physical games from other regions.
    • Do I need to connect to the internet every time I want to use this ? Yes, or you can use an Android app that hosts the exploit (php server), there are some here in the temp, such as Go! Android!
    • Do I need a flashcart/game/hardware for this ? No.
    • Will this work on my New 3DS ? No, at the moment this only works on 3DS, 3DS XL and 2DS models.
    • Will it ever work on the New 3DS ? Maybe. I don't plan on working on it, like, ever, but the code is out there now so...
    • Will this break or brick my 3DS ? No. There's virtually 0 chance of that happening, all this runs is run of the mill usermode code, nothing dangerous. Nothing unusual is written to your NAND, nothing permanent is done. With that in mind, use at your own risk, I won't take responsibility if something weird does happen.
    • Do you take donations ? No, I do not.
    • How does it work ? See below.
    Technical stuff

    Basically we use GW's entrypoint to get ROP (not code execution, either userland or kernel) under spider (that's what the browser applet is called). From there, we use the GPU DMA vuln to take over the download play application (this is done by overwriting the GSP interrupt handler funcptr table). The download play application has access to the ns:s service (spider does not), and we use that service to launch our out-of-region game.
    For more detail on the webkit/spider exploit, visit http://yifan.lu/2015/01/10/reversing-gateway-ultra-first-stage-part-1/
    For more detail on the GPU DMA exploit, visit http://smealum.net/?p=517
    To build the ROP, use Kingcom's armips assembler https://github.com/Kingcom/armips



    Credits

    • All ROP and code written on this repo written by smealum.
    • ns:s region free booting trick found by yellows8.
    • Neatly packaged spider exploit by Gateway.
    • Bond697, sm, yifanlu for working on the GW payload so I wouldn't have to.
    • Myria for helping with testing.
    https://twitter.com/smealum/
    smealum.net
     


  2. someonewhodied

    Member someonewhodied Lazy Person

    Joined:
    Sep 21, 2008
    Messages:
    869
    Country:
    United States
    Clicking home button while in ssb 3ds freezes the 3ds when using this exploit
     
  3. shinyquagsire23

    Member shinyquagsire23 SALT/Sm4sh Leak Guy

    Joined:
    Nov 18, 2012
    Messages:
    1,925
    Location:
    Las Vegas
    Country:
    United States
    There's like two other threads on this ;-;
     
    2Hack and VinsCool like this.
  4. keyra

    Member keyra Spoderman self proclamed fan

    Joined:
    Dec 23, 2008
    Messages:
    781
    Country:
    France
    so? another thread?
     
    VinsCool likes this.
  5. EvilMakiPR

    Member EvilMakiPR GBAtemp Advanced Maniac

    Joined:
    Apr 9, 2013
    Messages:
    1,920
    Country:
    Puerto Rico
  6. kaizerJ

    Newcomer kaizerJ Member

    Joined:
    Jul 11, 2014
    Messages:
    37
    Country:
    United States
    could this be used to boot into older DS Flashcards that 4.5+ no longer support?
     
    Margen67 and TUWieZ like this.
  7. Dartz150
    OP

    Member Dartz150 GBATemp Official Lolicon Onii-chan™

    Joined:
    May 5, 2010
    Messages:
    1,393
    Location:
    On a Strange Journey
    Country:
    Mexico
    I would test but my card is a DSTWO lol

    BTW Just noticed that my predictive keyboard typed "rejoyce" instead of "regionfree" lol. Can a mod fix that? thanks :D.
     
    Lycanroc and TUWieZ like this.
  8. driverdis

    Member driverdis I am Justice

    Joined:
    Sep 21, 2011
    Messages:
    2,058
    Location:
    1.048596β
    Country:
    United States
    this should not work as the console should reboot into DS Mode if it happens to not crash instead (which I think it will do).
    If it even makes it to DS Mode, It will run into the same problems as starting the card directly.

    If I manage to find my AK2i, I will try it just because.
     
    TUWieZ likes this.
  9. LinkmstrYT

    Member LinkmstrYT ( ͡° ͜ʖ ͡°)

    Joined:
    Dec 16, 2013
    Messages:
    1,410
    Location:
    You wanted to see where I live? You stalker...
    Country:
    United States
    Well, smealum showed on his video to press the power button and then press home to avoid that problem.
     
    Margen67 likes this.
  10. flarn2006

    Member flarn2006 GBAtemp Fan

    Joined:
    Apr 6, 2014
    Messages:
    375
    Country:
    United States
    Wait...does this mean Gateway's launcher.dat also works on 9.4 as long as you have Download Play running in the background?
     
    Margen67 likes this.
  11. shinyquagsire23

    Member shinyquagsire23 SALT/Sm4sh Leak Guy

    Joined:
    Nov 18, 2012
    Messages:
    1,925
    Location:
    Las Vegas
    Country:
    United States
    No.
     
  12. otto888

    Member otto888 I break things for a living.

    Joined:
    Mar 12, 2008
    Messages:
    311
    Country:
    United States
    No. It still only works up to 9.2 for now.
     
  13. Josephvb10

    Member Josephvb10 The Pokémon guy

    Joined:
    Aug 26, 2009
    Messages:
    490
    Location:
    Lumiose City
    Country:
    Costa Rica
    According to Smealum, on the topic if it could be used to load blocked DS flashcards...



    Edit: Nvm.

     
  14. Duo8

    Member Duo8 I don't like video games

    Joined:
    Jul 16, 2013
    Messages:
    3,329
    Country:
    Vietnam
    I doubt it. DS card is fully handled by twl firm.
     
  15. flarn2006

    Member flarn2006 GBAtemp Fan

    Joined:
    Apr 6, 2014
    Messages:
    375
    Country:
    United States
    I downgraded and no brick! Thanks!

    EDIT: Oops, wrong thread.....this can not to my knowledge be used to downgrade your 3DS :wink:
     
  16. Duo8

    Member Duo8 I don't like video games

    Joined:
    Jul 16, 2013
    Messages:
    3,329
    Country:
    Vietnam
    <@smea> <duo8> smea did you "not as-is... but maybe if you modify it somehow, idk" <= turns out no i was wrong
     
  17. Josephvb10

    Member Josephvb10 The Pokémon guy

    Joined:
    Aug 26, 2009
    Messages:
    490
    Location:
    Lumiose City
    Country:
    Costa Rica

    Yeah, edited the post.
     
  18. gokuguy

    Member gokuguy GBAtemp Fan

    Joined:
    Dec 5, 2008
    Messages:
    403
    Country:
    United States
    Has anyone tried this on a Sky3DS card yet? I don't have a 3DS flash cart mainly because I updated to 9.4. If it were to work with whatever game is set at the time on Sky3DS, then that could end up being my choice eventually.
     
  19. shinyquagsire23

    Member shinyquagsire23 SALT/Sm4sh Leak Guy

    Joined:
    Nov 18, 2012
    Messages:
    1,925
    Location:
    Las Vegas
    Country:
    United States
    Doesn't work.
     
  20. gokuguy

    Member gokuguy GBAtemp Fan

    Joined:
    Dec 5, 2008
    Messages:
    403
    Country:
    United States
    Alright, thanks for the heads up. Once again stepped away from the idea of the Sky3DS.
     

Share This Page