NWM-sysmodule
The CONFIG11_Registers are no longer directly mapped under userland for NWM-sysmodule. This prevents anything under NWM-module from modifying the GPUPROT register. This was used by both *hax payload(prior to v11.4 release) and udsploit.
The codebin was updated.
The crt0-poke in PDN that NWM previously did:
0x1EC4010C |= 0x10
.. has been removed from NWM. This one has been moved into kernel bootup.
All accesses to 0x1EC40180 have been replaced by a new syscall, 0x5A.
This now includes code from old CTRSDK update(s). A new func was added for calling a func, previously that func was directly called via vtable funcptr. The only other changes was new heap code(and the code for using it basically), for fixing the NWMUDS sharedmem vuln. This includes code which actually validates heap memchunkhdrs, with svcBreak being executed on failure.
A new string was added at 0x13E200: "used"(with 3 0xFF bytes afterwards), this is used by the new heap code. The wifi-fw was moved from .data to .rodata.