Updated my Mario Kart 7 "Unlock Everything" code.bin to work with all regions and game versions (Only tested USA and PAL v1.0 & v1.1).
http://pastebin.com/Exb98yWR
http://pastebin.com/Exb98yWR
Updated my Mario Kart 7 "Unlock Everything" code.bin to work with all regions and game versions (Only tested USA and PAL v1.0 & v1.2).
http://pastebin.com/Exb98yWR
Can you compile it please?
You should check the decrypted 9.2 gw payload and try to find the offsets, then in the 8.x launcher they should be around the same place.So, I was talking to Yifan about porting to spider3DStools to 8.x, seeing as how a lot of people are still there and how no way to safely land on 9.2. He said that I can easily just change offsets in the .html/.dat payloads like that of Gateway's payloads. I figure it will be a nice small project to contribute as my first for the homebrew scene while the big dogs are up to other stuff. I'm sure I can modify things sufficiently once I have the payloads, the only problem is that I am clueless as to how I can get these payloads broken down to where I can see the offset differences. You all are a nice, helpful bunch of mates, so I figured I'd ask for a crash course/download here.
To test, I just found the difference between the New 3DS virtual address maps for 8.1 and 9.0. These would obviously be different on the Old 3DS, but I was just testing to see if it was a similar concept.
8.1:
[L1 ] VA 1f300000..1f400000 -> PA 1f300000..1f400000 [ X ] [ Priv: RW, User: -- ]
[L1 ] VA d8000000..d8600000 -> PA 18000000..18600000 [ XN ] [ Priv: RW, User: -- ]
[L1 ] VA df000000..df400000 -> PA 1f000000..1f400000 [ XN ] [ Priv: RW, User: -- ]
[L1 ] VA dff00000..e0000000 -> PA 1ff00000..20000000 [ XN ] [ Priv: RW, User: -- ]
[L1 ] VA e0000000..f0000000 -> PA 20000000..30000000 [ XN ] [ Priv: RW, User: -- ]
...
[L2L] VA fff00000..fff20000 -> PA 1ff80000..1ffa0000 [ X ] [ Priv: R-, User: -- ]
[L2S] VA fff20000..fff2d000 -> PA 1ffdf000..1ffec000 [ X ] [ Priv: R-, User: -- ]
[L2S] VA fff2d000..fff2e000 -> PA 1ffec000..1ffed000 [ XN ] [ Priv: R-, User: -- ]
[L2S] VA fff2e000..fff33000 -> PA 1ffed000..1fff2000 [ XN ] [ Priv: RW, User: -- ]
[L2L] VA fff70000..fffa0000 -> PA 1ffa0000..1ffd0000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffa0000..fffaf000 -> PA 1ffd0000..1ffdf000 [ XN ] [ Priv: RW, User: -- ]
THIS IS THE DIFFERENCE. THERE IS A WHOLE NEW LINE OF CODE, WITH NOTHING ELSE ALTERED.
[L2S] VA fffb8000..fffb9000 -> PA 17e10000..17e11000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffba000..fffbb000 -> PA 10144000..10145000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffbc000..fffbd000 -> PA 10400000..10401000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffbe000..fffbf000 -> PA 10141000..10142000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffc0000..fffc1000 -> PA 10163000..10164000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffc2000..fffc3000 -> PA 10146000..10147000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffc4000..fffc5000 -> PA 10202000..10203000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffc6000..fffc7000 -> PA 10140000..10141000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffc8000..fffc9000 -> PA 10206000..10207000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffca000..fffce000 -> PA 1fff8000..1fffc000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffcf000..fffd0000 -> PA 1fff2000..1fff3000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffd1000..fffd2000 -> PA 1fff3000..1fff4000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffd3000..fffd7000 -> PA 1fffc000..20000000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffd8000..fffd9000 -> PA 1f3f2000..1f3f3000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffda000..fffdb000 -> PA 1f3f5000..1f3f6000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffdc000..fffe0000 -> PA 1f3f8000..1f3fc000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffe1000..fffe2000 -> PA 1f3f3000..1f3f4000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffe3000..fffe4000 -> PA 1f3f6000..1f3f7000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffe5000..fffe9000 -> PA 1f3fc000..1f400000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffea000..fffeb000 -> PA 1f3f4000..1f3f5000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffec000..fffed000 -> PA 1f3f7000..1f3f8000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffee000..ffff0000 -> PA 17e00000..17e02000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA ffff0000..ffff1000 -> PA 1fff4000..1fff5000 [ X ] [ Priv: R-, User: -- ]
[L2S] VA ffff2000..ffff6000 -> PA 1fff8000..1fffc000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA ffff7000..ffff8000 -> PA 1fff2000..1fff3000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA ffff9000..ffffa000 -> PA 1fff3000..1fff4000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA ffffb000..ffffe000 -> PA 1fff5000..1fff8000 [ XN ] [ Priv: RW, User: -- ]
9.0:
[L1 ] VA 1f300000..1f400000 -> PA 1f300000..1f400000 [ X ] [ Priv: RW, User: -- ]
[L1 ] VA d8000000..d8600000 -> PA 18000000..18600000 [ XN ] [ Priv: RW, User: -- ]
[L1 ] VA df000000..df400000 -> PA 1f000000..1f400000 [ XN ] [ Priv: RW, User: -- ]
[L1 ] VA dff00000..e0000000 -> PA 1ff00000..20000000 [ XN ] [ Priv: RW, User: -- ]
[L1 ] VA e0000000..f0000000 -> PA 20000000..30000000 [ XN ] [ Priv: RW, User: -- ]
...
[L2L] VA fff00000..fff20000 -> PA 1ff80000..1ffa0000 [ X ] [ Priv: R-, User: -- ]
[L2S] VA fff20000..fff2d000 -> PA 1ffdf000..1ffec000 [ X ] [ Priv: R-, User: -- ]
[L2S] VA fff2d000..fff2e000 -> PA 1ffec000..1ffed000 [ XN ] [ Priv: R-, User: -- ]
[L2S] VA fff2e000..fff33000 -> PA 1ffed000..1fff2000 [ XN ] [ Priv: RW, User: -- ]
[L2L] VA fff70000..fffa0000 -> PA 1ffa0000..1ffd0000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffa0000..fffaf000 -> PA 1ffd0000..1ffdf000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffaf000..fffb0000 -> PA 1f3f1000..1f3f2000 [ XN ] [ Priv: RW, User: -- ] ///THIS IS THE NEW LINE.
[L2S] VA fffb8000..fffb9000 -> PA 17e10000..17e11000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffba000..fffbb000 -> PA 10144000..10145000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffbc000..fffbd000 -> PA 10400000..10401000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffbe000..fffbf000 -> PA 10141000..10142000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffc0000..fffc1000 -> PA 10163000..10164000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffc2000..fffc3000 -> PA 10146000..10147000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffc4000..fffc5000 -> PA 10202000..10203000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffc6000..fffc7000 -> PA 10140000..10141000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffc8000..fffc9000 -> PA 10206000..10207000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffca000..fffce000 -> PA 1fff8000..1fffc000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffcf000..fffd0000 -> PA 1fff2000..1fff3000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffd1000..fffd2000 -> PA 1fff3000..1fff4000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffd3000..fffd7000 -> PA 1fffc000..20000000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffd8000..fffd9000 -> PA 1f3f2000..1f3f3000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffda000..fffdb000 -> PA 1f3f5000..1f3f6000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffdc000..fffe0000 -> PA 1f3f8000..1f3fc000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffe1000..fffe2000 -> PA 1f3f3000..1f3f4000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffe3000..fffe4000 -> PA 1f3f6000..1f3f7000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffe5000..fffe9000 -> PA 1f3fc000..1f400000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffea000..fffeb000 -> PA 1f3f4000..1f3f5000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffec000..fffed000 -> PA 1f3f7000..1f3f8000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA fffee000..ffff0000 -> PA 17e00000..17e02000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA ffff0000..ffff1000 -> PA 1fff4000..1fff5000 [ X ] [ Priv: R-, User: -- ]
[L2S] VA ffff2000..ffff6000 -> PA 1fff8000..1fffc000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA ffff7000..ffff8000 -> PA 1fff2000..1fff3000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA ffff9000..ffffa000 -> PA 1fff3000..1fff4000 [ XN ] [ Priv: RW, User: -- ]
[L2S] VA ffffb000..ffffe000 -> PA 1fff5000..1fff8000 [ XN ] [ Priv: RW, User: -- ]
Can anyone confirm this to be similar to what will need to be done?
You should check the decrypted 9.2 gw payload and try to find the offsets, then in the 8.x launcher they should be around the same place.
Which webpage are you using to launch this?
I'm guessing load the game then home to launch browser to the exploit page?How do I use it? Boot Mario Kart 7 first? Throw lemons at it? what?
can't it be used for something like booting a game on a desired language ? for example I'm on a US console and want to boot an eur oot 3D in german
The game probably doesn't come with a German language. Most US games only come with English, French, and Spanish.
...Unless it's a worldwide launch game like Pokemon. Damn Pokemon is easy to mess with on this.
id imagine it would probably be possible....but im not sure though as the system defines what language is loaded, meaning that it would probably have to be done on a per game basis, rather than a simple launcher for each each languageI forgot to say a detail XD ... using an eur cart / rom (if in Gw , sky etc)
also sometimes US games have more language hidden there but it's nor acessible o-o
I tried to run smash brothers4 in portuguese with an eur rom but don't worked, even with my sys in portuguese (but Us console)
id imagine it would probably be possible....but im not sure though as the system defines what language is loaded, meaning that it would probably have to be done on a per game basis, rather than a simple launcher for each each language
with gateway you could probably just decrypt some games and switch the language files around....but again this would need to be done on a per game basis, and some/most games probably wouldn't work like that
final option would be waiting with gateway for the system region changing stuff to be released, so you could just boot up into a EU nand and select whatever language you want, this would more than likely give you 100% compatibility
You could change your console region, and dump the ram for each different language. Compare the dumps for differences, edit what you think controls it.
oh hm ... I have no idea how to do it XD I have to learn more...
Is it possible to save this page and launch it locally. For example addressing to sd:// or file://?I used http://loadcode.projectpokemon.org and it worked fine Unlocked everything after playing a game otherwise you can wait for the screensaver race to start![]()