Nice work, but wouldn't it be better to patch the cfw to be region free instead of having a separate loader that just does what DevMenu does?
Sure, it would be better, if I discover a way for doing that I'll send a pull-request into pastacfw repo... I think it may be just a little patch in the home process.
Yup but you will have to launch them with pasta + ntr or from bbm
Not if the cia is patched for region free.
I think the function Home Menu uses to read the icon/check the region lock would be in one of these, but I don't really see anything that's obviously related.
http://3dbrew.org/wiki/Application_Manager_Services
http://3dbrew.org/wiki/NS_and_APT_Services
Either patching the home menu to ignore the region lock, or patch the related function so that it always returns 0x7FFFFFFF would work.
There's a lot of information on the Home Menu boot process here.
http://3dbrew.org/wiki/Home_Menu#Home_Menu_startup
It doesn't specifically mention where the banner is read or where the region lock is checked though.
I'm still studying that bit I think that no, we have to inject ARM11 code through ARM9...
Or create a .3dsx and call it somehow using firm launch arguments
So you admit that even if it is a piracy cfw it is still a cool cfw?Nice work, kinda silly how nobody even thought to just do the proper calls which regionthree did to get this. Still neat though, I never liked region locking. Always felt kinda silly to me
sure of course, but we might as well do one more patch to the cfw to allow region free, than have to decrypt and patch every single game in existence to make it 'region free'
That's OK.....
--------------------------------
Just tested that this app doesn't work on MT-card emuNAND 9.4.0-21J.
It can be installed and executed. But after applied the spoof, the e-shop still reminds me updating firmware.
I never said a piracy CFW was cool, I said this was cool. eShop spoof is nice for several things and it's nice to see it usable from something besides NTR.
"The FIRM-launch parameters structure is located at FCRAM+0, size 0x1000-bytes."
we're talking physical addresses in arm9 context here. so this should be 0x23000000.
0x440 0x10 Titleinfo structure, used by NS during NS startup, to launch the specified title when the below flag is set.
0x460 0x4 Bit0: 0 = titleinfo structure isn't set, 1 = titleinfo structure is set.
get title id of your process patching application and make arm9 code of pasta cfw (loader.bin) set the above fields at offset 0x440 and 0x460. didnt try myself but should be worth a shot.
sth like
memcpy((void *)0x23000440, &titleinfo, sizeof(titleinfo));
*(u32 *)0x23000460 |= 1;
doesn't the ntr firmware remove cia region lock? the guy who wrote brahma has a disassembly of the ntr firmware on his github, so you could just look it up there and "steal" the technique
Similar threads
-
Psionic Roshambo
-
Xdqwerty
what are you looking at?
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
@
Xdqwerty:
@SylverReZ, I dislike the kind of drm where you have to play single player games online all the time bc of some verification bs+1
-
-
-
-
@
Xdqwerty:
@SylverReZ, I also heard one of the Prince of Persia games was so unfinished that it required the "24/7 online" drm so a puzzle could be done and the game could be finished. And that when the Ubisoft servers were closed the (cracked) game was impossible to finish or something like that
-
@
SylverReZ:
@Xdqwerty, That's extra scummy. Ubisoft nowadays ship out incomplete games like Skull and Bones which was being worked on for nearly a decade now.+1
-
-
-
@
Psionic Roshambo:
I like that games can be fixed after the fact, hate that it's being abused via beta tests... And DLC... I was a 7800 owner back in the day and loved Impossible Mission, turns out I couldn't beat it because it was actually impossible lol
-
@
Psionic Roshambo:
I never knew about it at the time but a fixed version was available but you had to mail in your broken copy lol
-
