Hacking [RELEASE] Regionthree: Region Free loader for 3DS/2DS/xl from 9.0~9.4, Sky3DS Users, regionfree!!

Dartz150

Yet another Onii-chan
OP
Member
Joined
May 5, 2010
Messages
2,228
Trophies
1
Age
30
Location
Over your head
XP
3,838
Country
Mexico
https://github.com/smealum/regionthree/

As the tittle says, this has become a reality.

¿What does this mean?

-Now, we can play any legit cart game regardless the region of both the console or the cart, it will load without any objection.

-Sky3DS and QQ3DS Users are finally able to load any region ROM now.

Sky3DS proof (thanks to DjoeN:

DSC04755.jpg
DSC04762.jpg
DSC04752.jpg

Japanese Smash Bros Cart on an EUR 3DS console proof:


How to use

  • Download Launcher.dat from the repo (or compile it yourself) : https://github.com/smealum/regionthree/raw/master/Launcher.dat
  • Copy Launcher.dat to the root of your SD card
  • Insert the game you want to run into your 3DS and power it up
  • Open the "Download Play" application
  • Hit the home menu button, but do not exit the Download Play application (keep it running in the background)
  • Open the Web Browser applet
  • Go to Gateway's exploit page (not linking directly to it here because not a fan of their whole piracy thing they've got going)
  • Wait a few seconds; screen should turn black and after a bit your game should boot up !
FAQ

  • Does this work on the latest firmware version ? Yes, 9.4 is supported.
  • Does this work using a Sky3DS or QQ3DS Flashcards? Yes, they will load, but the process is a very random game, because foreign region games for your 3DS will not show their banner; this means that you will need to change the game with the button totally blind, but it will load of course.
  • Does this let me run homebrew and/or roms ? No, it just lets you run legit physical games from other regions.
  • Do I need to connect to the internet every time I want to use this ? Yes, or you can use an Android app that hosts the exploit (php server), there are some here in the temp, such as Go! Android!
  • Do I need a flashcart/game/hardware for this ? No.
  • Will this work on my New 3DS ? No, at the moment this only works on 3DS, 3DS XL and 2DS models.
  • Will it ever work on the New 3DS ? Maybe. I don't plan on working on it, like, ever, but the code is out there now so...
  • Will this break or brick my 3DS ? No. There's virtually 0 chance of that happening, all this runs is run of the mill usermode code, nothing dangerous. Nothing unusual is written to your NAND, nothing permanent is done. With that in mind, use at your own risk, I won't take responsibility if something weird does happen.
  • Do you take donations ? No, I do not.
  • How does it work ? See below.
Technical stuff

Basically we use GW's entrypoint to get ROP (not code execution, either userland or kernel) under spider (that's what the browser applet is called). From there, we use the GPU DMA vuln to take over the download play application (this is done by overwriting the GSP interrupt handler funcptr table). The download play application has access to the ns:s service (spider does not), and we use that service to launch our out-of-region game.
For more detail on the webkit/spider exploit, visit http://yifan.lu/2015/01/10/reversing-gateway-ultra-first-stage-part-1/
For more detail on the GPU DMA exploit, visit http://smealum.net/?p=517
To build the ROP, use Kingcom's armips assembler https://github.com/Kingcom/armips



Credits

  • All ROP and code written on this repo written by smealum.
  • ns:s region free booting trick found by yellows8.
  • Neatly packaged spider exploit by Gateway.
  • Bond697, sm, yifanlu for working on the GW payload so I wouldn't have to.
  • Myria for helping with testing.
https://twitter.com/smealum/
smealum.net
 

driverdis

I am Justice
Member
Joined
Sep 21, 2011
Messages
2,835
Trophies
1
Age
29
Location
1.048596β
XP
2,514
Country
United States
could this be used to boot into older DS Flashcards that 4.5+ no longer support?

this should not work as the console should reboot into DS Mode if it happens to not crash instead (which I think it will do).
If it even makes it to DS Mode, It will run into the same problems as starting the card directly.

If I manage to find my AK2i, I will try it just because.
 
  • Like
Reactions: TUWieZ

flarn2006

Well-Known Member
Member
Joined
Apr 6, 2014
Messages
394
Trophies
0
Age
28
XP
502
Country
United States
I downgraded and no brick! Thanks!

EDIT: Oops, wrong thread.....this can not to my knowledge be used to downgrade your 3DS :wink:
 

gokuguy

Well-Known Member
Member
Joined
Dec 5, 2008
Messages
415
Trophies
0
Age
28
XP
860
Country
United States
Has anyone tried this on a Sky3DS card yet? I don't have a 3DS flash cart mainly because I updated to 9.4. If it were to work with whatever game is set at the time on Sky3DS, then that could end up being my choice eventually.
 
General chit-chat
Help Users
  • Dark_Phoras @ Dark_Phoras:
    215 shootings in the US just this year, according to the BBC
    Gift
  • Dark_Phoras @ Dark_Phoras:
    That's almost a shooting per month in each state
    +1
    Gift
  • KenniesNewName @ KenniesNewName:
    Nice improvement
    Gift
  • mthrnite @ mthrnite:
    dangerously close to buying a miyoo mini :/
    Gift
  • KenniesNewName @ KenniesNewName:
    I was just looking at those the other day
    Gift
  • KenniesNewName @ KenniesNewName:
    But $50 could get a retroid that does some ps2
    Gift
  • KenniesNewName @ KenniesNewName:
    $50 more*
    Gift
  • KenniesNewName @ KenniesNewName:
    Then $100 more added to that $100 could get you an Odin 🤷‍♂️
    Gift
  • Noctosphere @ Noctosphere:
    I want a gun to kill all
    guns, then make this gun commit suicide
    Gift
  • mthrnite @ mthrnite:
    60 bucks is pretty good deal, i mainly play gba and gb anyway
    Gift
  • mthrnite @ mthrnite:
    using a gb micro and v1 gb sp, be nice to get a bigger brighter screen
    Gift
  • KenniesNewName @ KenniesNewName:
    I still like my powkiddy v90
    Gift
  • mthrnite @ mthrnite:
    got tempted by that too, and mainly the ambernic woodgrain gameboy, almost bought that
    Gift
  • KenniesNewName @ KenniesNewName:
    Powkiddy quality control is pretty trash and software glitchy but the screes nice
    Gift
  • KenniesNewName @ KenniesNewName:
    The ANBERNIC RG280V looks nice
    Gift
  • mthrnite @ mthrnite:
    i like the v90, i dig clamshells, love my sp but it's the old version with the dull-ass screen
    Gift
  • mthrnite @ mthrnite:
    and my micro has a sharp screen but it's tiny and i have old person eyes
    Gift
  • M @ MrWhosHacking:
    i need help with my switch can anyone help me
    Gift
  • KenniesNewName @ KenniesNewName:
    Saw powkiddy.com had the on sale for $35
    Gift
  • Veho @ Veho:
    The Retroid Pocket 2+ is great value for money, $99, it's still in the "budget" range somewhat but it has a nice large screen and can run a whole lot of platforms.
    Gift
  • Veho @ Veho:
    The Myoo Mini is cyoot, but mini :P
    Gift
  • Veho @ Veho:
    The Funkey S is even cuter and mini-er :tpi:
    Gift
  • KenniesNewName @ KenniesNewName:
    Like ure weeeee
    Gift
  • Veho @ Veho:
    Ladies love my weewee.
    Gift
  • Veho @ Veho:
    Cute, handy, discreet.
    Gift
    Veho @ Veho: Cute, handy, discreet.