gbadev.org forum archive

Some hacker dude found a way to play all of the offline tracks over WFC. (Including the battle tracks, but not in battle mode. That tended to crash things).

http://www.gscentral.org/bb/viewtopic.php?t=764&postdays=0&postorder=asc&start=25

There are 2 videos posted as well, of racing in Tick-Tock Clock online:
http://mmii.info/misc/ticktockclockwifi.avi
http://mmii.info/misc/ticktockclockwifi_long.mov

He won't share, because he is being paid by someone to make a comemrcial cheat device for NDS.

However, now that it is known that it can be done, I'm sure someone else will figure it out, and hopefully be more willing to share.

That will also be eventually possible when sgstair releases DSTunnel :)

josath wrote:

He won't share, because he is being paid by someone to make a comemrcial cheat device for NDS.

I seriously hope that's the only "cheat" he puts in for Mario Kart, or any online DS game for that matter.

Looking on the nintendo fourms, his name appears to be Parasyte.

The first post seems to match this person's description on who we're talking about.
http://forums.nintendo.com/nintendo/board/message?board.id=mario_kart_ds&message.id=166351

Dude-man wrote:

Looking on the nintendo fourms, his name appears to be Parasyte.

The first post seems to match this person's description on who we're talking about.
http://forums.nintendo.com/nintendo/board/message?board.id=mario_kart_ds&message.id=166351

uhh, did you even click the link I posted? it's from Parasyte, the page shows his name very clearly.

And that link you posted is full of BS...adding 200 losses? I don't think that's even possible to do remotely. Might be possible to add losses to yourself, but I would think that would be something that is checked on the server.

Edit: SWEET he released how to do it:
http://www.gscentral.org/bb/viewtopic.php?p=9944#9944

Quote:

Edit: SWEET he released how to do it:
http://www.gscentral.org/bb/viewtopic.php?p=9944#9944

PERFECT! Now all I need to do is figure out how to do any of that!

*opens HexEdit... stares into black abyss of octals... closes HexEdit*

Ah, the blissful beauty of ignorance!
_________________
3 is not an "e",
7 is not a "t",
1 is not an "l",
And for the love of God,
Learn how to spell!

Natruim42 got it to work apparently... here is his code:

Code:

.section ".init"
.global _start

@.align
@.arm
.code 32

@---------------------------------------------------------------------------------
_start:
@---------------------------------------------------------------------------------
b rom_header_end

.fill 156,1,0                @ Nintendo Logo Character Data (8000004h)
.fill 16,1,0                @ Game Title
.byte 0x30,0x31             @ Maker Code (80000B0h)
.byte 0x96                @ Fixed Value (80000B2h)
.byte 0x00                @ Main Unit Code (80000B3h)
.byte 0x00                @ Device Type (80000B4h)
.fill 7,1,0                @ unused
.byte 0x00                @ Software Version No (80000BCh)
.byte 0xf0                @ Complement Check (80000BDh)
.byte 0x00,0x00             @ Checksum (80000BEh)

@---------------------------------------------------------------------------------
rom_header_end:
@---------------------------------------------------------------------------------

#define ARM9_ENTRY_ORIGINAL          0x02000800
#define ARM7_ENTRY_ORIGINAL          0x02380000

@ bl DisableInterrupts

@ Boot ARM9 with: *(volatile unsigned int *)0x027FFE24 = 0x02004000;
ldr r2, =ARM9_ENTRY_ORIGINAL
ldr r4, =ARM7_ENTRY_ORIGINAL
ldr r3, =0x027FFE24
str r2, [r3]       @ redirect ARM9

ldr r0, =0x400000
delayLoop:
nop
subs r0, r0, #1
bgt delayLoop

@ New Courses on WFC
ldr r0, =0x02153A4C
adr r1, CourseList
mov r2, #12
listLoop:
ldrb r3, [r1],#1
str r3, [r0],#4
subs r2, r2, #1
bgt listLoop

   mov pc, r4       @ redirect ARM7

infin:
b infin

   .pool

CourseList:
.byte 0x0C, 0x0F, 0x11, 0x13, 0x17, 0x18, 0x1A, 0x20, 0x21, 0x23, 0x25, 0x26
.align 2

//////////////////////////////////////////////////////////////////////////////
// DisableInterrupts
//////////////////////////////////////////////////////////////////////////////

DisableInterrupts:
// disable IRQ/FIQ interrupts
mrs    r0, CPSR
orr    r0, r0, #0xC0
msr    CPSR_fsxc, r0
mov    pc, lr

.align
.pool
.end

And here's a compiled version: http://www.natrium42.com/downloads/mktest.ds.gba

To use, load mktest.ds.gba on a flashcart, put mario kart in your DS slot along with passme. YOU MUST USE PASSME, not flashme. then turn on your DS, and it should load (maybe take a few extra seconds).
Then play some tracks online on WFC, the first few in the list should get replaced with different tracks! (i haven't tested it myself, but others reported it works)

Ever going to work with FlashMe (or WifiMe)? :/

To make it work for flashme or wifime would be a lot of extra work.
The way it's written now, he just waits for the arm9 mariokart binary to be loaded into RAM, then patches a couple bytes. However, if you boot with flashme, it messes up the RAM somewhat (in a way that doesn't affect homebrew) but some things are not loaded correctly.

And if you boot from wifime, obviously it's not going to be loading data from the cart at all.

The way to fix it, would be to manually load the data off of the cart into RAM yourself, instead of depending on the firmware to do it for you. But this is going to be much more work than simply twiddling a few bytes in RAM.

josath wrote:

And if you boot from wifime, obviously it's not going to be loading data from the cart at all.

How about using wifime to boot from the cart? It worked like this originally, and I bet it still can. I'll try an older version and post the resu...FAILURE :(

Last edited by IxthusTiger on Thu Dec 15, 2005 7:17 am; edited 1 time in total

If you were to use WMB/WiFiMe, then what would you specify after -data? If you use wmb -data wifime, then you get the Super Mario 64 DS multiplayer bootloader, not the Mario Kart DS .nds file. (Are the initial .nds files on DS Game Cards signed?) You'd have to make a .nds loader that 1. copies the .nds from the cart to RAM, 2. patches it, and 3. runs it. Using PassMe is a convenient way to skip step 1.
_________________
-- Where is he?
-- Who?
-- You know, the human.
-- I think he moved to Tilwick.

Is there an .nds version out there?

MaHe wrote:

Is there an .nds version out there?

No need, since the only way to get it working right now is with a Flashcart and Passme.

IxthusTiger wrote:

josath wrote:

And if you boot from wifime, obviously it's not going to be loading data from the cart at all.

How about using wifime to boot from the cart? It worked like this originally, and I bet it still can. I'll try an older version and post the resu...FAILURE :(

What I meant to say, is if you boot from wifime, it's not going to be loading data from the cart in the DS slot.

jus wanna say a quick thank you, been using it and works great =D

Any chance for a rom patch?

Filb wrote:

Any chance for a rom patch?

Sorry, this implies piracy and we do not condone it here.

IxthusTiger wrote:

Filb wrote:

Any chance for a rom patch?

Sorry, this implies piracy and we do not condone it here.

How come it implies piracy? Where I live it's legal to backup software, just not distribute it.
But alright...

Do it work with neoflash?

Or do I have to get a natrium passme?

Stan64 wrote:

Do it work with neoflash?

Or do I have to get a natrium passme?

As of now, these are the REQUIREMENTS to use this:

Mario Kart DS
PassMe or equivalent (SuperPass, Passkey, etc.)
a flashcart that does not have removable media and can be flashed without a menu

Nothing else works yet, quit asking.

Does not work with original passme from natrium42.com/x-rom/and retail US mario kart DS...

All i get are white screens when i turn it on...

Do I have to un-install flashme for this to work?

Cbass182 wrote:

Do I have to un-install flashme for this to work?

No, just hold Select.
There is a long delay in the patcher, it should start mkds within 20seconds.

Cbass182 wrote:

Does not work with original passme from natrium42.com/x-rom/and retail US mario kart DS...

It won't work if your *pass* is scrambling the data, i.e. if it's not supported when you run my callfinder.ds.gba. (For example, I noticed that my SuperPass is scrambling and hence it doesn't work.) If that's the case, you could reprogramm your *pass*...

pepsiman wrote:

There is a long delay in the patcher, it should start mkds within 20seconds.

I made the delay shorter (by a factor of 16) since it was way too conservative. :)
_________________
www.natrium42.com

Quote:

As of now, these are the REQUIREMENTS to use this:

* Mario Kart DS
* PassMe or equivalent (SuperPass, Passkey, etc.)
* a flashcart that does not have removable media and can be flashed without a menu

Nothing else works yet, quit asking.

Yeah, but what about the M3?

(J/k :P)
_________________
3 is not an "e",
7 is not a "t",
1 is not an "l",
And for the love of God,
Learn how to spell!

Well, I let my DS sit with white screens for 5 minutes or so...and still no luck...I'll see if it works with the passme i'm getting with my m3 for christmas...

Empyrean wrote:

Yeah, but what about the M3?

(J/k :P)

I know you were joking, but Parasyte himself actually gave me an answer to that one, so I thought I'd relay. When I tried the loader on my M3-SD, my DS started alternating between blank screens and periodically showing the M3's loading screen. Parasyte explains:

Quote:

The "M3 loading screen" is the firmware, and one of the issues I have with these "fake" flash carts. Natrium's loader must take priority over any other program stored on the flash cart, or it will not work. The loader expects PassMe to hand control over to itself directly. When firmware gets in the way, it screws up any chance of the loader ever working.

Natrium's stated on gscentral that he's not interested in making a loader for the M3 or other such methods, so dead end there.

As for the "steps" to modding the rom, Parasyte has told me there are no tools for decompressing and recompressing the arm9 executable. That's something for people with extraordinarilly rocking programming knowledge to do manually, who for whatever reason are either unwilling or unable to program a loader.

Quote:

I would suggest you get yourself a decent GBA flash cart and use Natrium's loader. It will be much MUCH less hassle. Extracting the ARM9 executable is completely trivial. If you were to go through with attempting to edit the ROM, you would have to decompress the executable. And on that note, there are no known tools available [to the public] which can do that, apart from emulation. With the decompressed executable, you could apply the patch, but then you would need to recompress the executable (again, no known tools available to the public, and no emulator is able recompress anything). Finally you would have to inject the patched/recompressed executable into the ROM and load it with one of the pirate solutions.
I'd say that's about as step-by-step as you need, because you're currently at a dead end. ;(

So yeah, use Natrium's loader.

_________________
MKDS friend code: 459633-596796
Contact me on AIM to exchange. I have accessed the extra 12 tracks online.
NOTE: Projectile items will not work in the docked ship of Airship Fortress, or the tunnel of Waluigi Pinball.

m2pt5 wrote:

As of now, these are the REQUIREMENTS to use this:

Mario Kart DS
PassMe or equivalent (SuperPass, Passkey, etc.)
a flashcart that does not have removable media and can be flashed without a menu

Nothing else works yet, quit asking.

What do you mean by "can be flashed without a menu"?
Would a Smart Flash Cart 128Mb work?

dualscreenman wrote:

What do you mean by "can be flashed without a menu"?

It means that you can choose to write one ROM to the cart such that the ROM starts running without a ROM select menu between the "GAME BOY / Nintendo?" screen and the ROM's first screen.
_________________
-- Where is he?
-- Who?
-- You know, the human.
-- I think he moved to Tilwick.

I think he means boot without a menu. Once you put the program on your flash card, and you start up your DS, the app needs to be able to start immediately without going through any sort of menu from the flash card itself. That's why the CF/SD card adapters don't work, they all have firmware menus you need to go through before starting any application, and that gets in the way of Natrium's loader.
_________________
MKDS friend code: 459633-596796
Contact me on AIM to exchange. I have accessed the extra 12 tracks online.
NOTE: Projectile items will not work in the docked ship of Airship Fortress, or the tunnel of Waluigi Pinball.

Hypershell wrote:

I think he means boot without a menu. Once you put the program on your flash card, and you start up your DS, the app needs to be able to start immediately without going through any sort of menu from the flash card itself. That's why the CF/SD card adapters don't work, they all have firmware menus you need to go through before starting any application, and that gets in the way of Natrium's loader.

Thank You Hypershell and Tepples. I get it now.

I can't get this to work and I don't know which is wrong.

I have the following:

- Magic Card 256M (a purple transparent GBA cartridge)
- PassMe (It's not Natrium's passme, it is just a black device with the word "PASSME" with an oval surrounding it on the front)
- Mario Kart DS (USA Version)
- My DS is old firmware
- Flashme_Stealth installed (when using passme I press select to bypass flashme)

I have tested the natrium's callfinder app with passme/MKDS and get some text, which I suppose it means the passme is compatible, isn't it?

But when I try to load the mktest app with passme/MKDS, the screens just stay blank and Mkds never loads.

Hope someone can help me

Thanks

Try reading your GBA flashcart back and compare to the binary using some hex editor.
_________________
www.natrium42.com

natrium42 wrote:

Try reading your GBA flashcart back and compare to the binary using some hex editor.

Thanks for replying natrium!!, but unfortunately I don't know how to do that.

Hypershell wrote:

As for the "steps" to modding the rom, Parasyte has told me there are no tools for decompressing and recompressing the arm9 executable. That's something for people with extraordinarilly rocking programming knowledge to do manually, who for whatever reason are either unwilling or unable to program a loader.

hehe, I got the tools, and you don't need to recompress it. You don't even need to decompress it. I have a patch that can run from a GBAMP, but it requires a ROM dump (and the original cartridge), so it won't be released. You know, encouraging piracy and all that.

But for those who want to do it themselves, here are the steps (purposely vague, so only bother if you know what you are doing):
1) Dump yourself a copy of the game. This is legal, downloading it is not.
2) Find a gap in the ROM, close to the start. Insert your patching code there.
3) Find the branch address to the main game. It will be 02003000, located at around 0x4918 in the file.
4)Change this to point to your patch code.
5) At the end of the patch code, bx back to 02003000 to start the game.
6) Start the game from a flash cart or M3 or SC SD. Do not patch it any further. You will still need the original game to run it. It won't work from a GBAMP, since it won't load commercial ROMs.
_________________
http://chishm.drunkencoders.com
http://dldi.drunkencoders.com

chishm wrote:

hehe, I got the tools, and you don't need to recompress it. You don't even need to decompress it. I have a patch that can run from a GBAMP, but it requires a ROM dump (and the original cartridge), so it won't be released. You know, encouraging piracy and all that.

But surely if you need the original cart i can't encourage be piracy?
The aim of piracy is that you don't need to purchase the original media to play or use a key or anything.
If you need the original cart you can dump the rom legally using that tool that's around somewhere (dumps to GBAMP's CF i think) like that.
Surely that wouldn't be piracy?
Unless of course you mean that people might work you patch into something that allows the GBAMP to run commercial roms, which would be bad...

Well all the methods used to dump a ROM require a GBA flash cart (not a GBAMP). So if someone can dump the ROM themself (to make it legal), then they can also play it without the original cartridge (using a patch). But I suppose people would pirate without the patch anyway, so I am being a bit too cautious.

And yes, the online track patch can also help to at least start commercial ROMs (since it must defeat the firmware's lack of commercial ROM support). I guess this is kind of a moot point, because it is difficult to pirate using the GBAMP, unless you really know what you're doing.

I am working around needing the ROM dump but it is taking some time because people won't share. I guess I could post the IPS in the mean time...

EDIT: IPS removed
_________________
http://chishm.drunkencoders.com
http://dldi.drunkencoders.com

Last edited by chishm on Wed Jan 04, 2006 9:43 am; edited 1 time in total

Thank you, chishm!
I'm sure all the USA/AUS people will like it. (I'll try with my EUR ver. but I doubt it'll work.)

Edit: I can confirm it DOES work with the EUR version!!

Tried on M3-SD and it works!!! Just apply the IPS patch, send the rom to your card directly (as in WITHOUT going through the game manager), stick your MKDS cartridge in your PassKey, and start the rom as a demo (press the Start button instead of the A button). Awesome! Keeps all saved data on your original cartridge, more than I could have hoped for from a rom-hack. Chishm, I love you!
_________________
MKDS friend code: 459633-596796
Contact me on AIM to exchange. I have accessed the extra 12 tracks online.
NOTE: Projectile items will not work in the docked ship of Airship Fortress, or the tunnel of Waluigi Pinball.

Last edited by Hypershell on Mon Dec 26, 2005 1:41 am; edited 1 time in total

Hoepfully this is good and all, but what are the chances of this wiping the whole mkDS card from the passkey/me/super* ?

Wiping? None. With the exception of saved data, a DS card can only be read, and not overwritten. And I can tell you my saved data survived nicely, even though I've been tinkering with the rom looking for a way to modify all 20 tracks (WHICH I DID!). The worst case scenario is that your game may freeze up if the connection with your PassMe/Key gets loose; in which case, there is no harm done, all you gotta do is turn the game off.

Now, here are the steps to customizing the course list however you want!

1. Follow Chishm's instructions for creating a modified rom. You may want to test it online to make sure you got it right before going any further.

2. Open the modified rom in a hex editor. Go to 0x00004C34. The value there should be 0C (which is hex for 12). This is the number of tracks in your customized list. Change it to 14 (hex for 20). This will allow you change every course in the WFC track list.

3. From 0x00004C64 to 0x00004C6F, you should find the string "0C0F111317181A2021232526." This is the 12 new tracks. Change them, and the following 8 bytes (up to 0x00004C77) to adjust your track list.

Here are the values for all tracks in the game, along with their internal names (from Parasyte). Grand Prix courses not normally available are marked with *'s. Also, I added the menu name for all Grand Prix courses in brackets. The other courses are either battle arenas or incomplete tracks, I do not recommend trying them as they may crash your game.

Quote:

01 - old_yoshi_gc [GCN Yoshi Circuit]
02 - old_mario_gc
03 - luigi_course
04 - dokan_course
05 - test1_course
06 - donkey_course
07 - wario_course
08 - nokonoko_course
09 - old_baby_gc [GCN Baby Park]
0A - old_mario_sfc [SNES Mario Circuit 1]
0B - old_momo_64 [N64 Moo Moo Farm]
0C - old_koopa_agb * [GBA Bowser Castle 2] *
0D - old_peach_agb [GBA Peach Circuit]
0E - old_luigi_gc [GCN Luigi Circuit]
0F - old_noko_sfc * [SNES Koopa Beach 2] *
10 - old_frappe_64 [N64 Frappe Snowland]
11 - clock_course * [Tick-Tock Clock] *
12 - mansion_course [Luigi's Mansion]
13 - airship_course * [Airship Fortress] *
14 - cross_course [Figure 8 Circuit]
15 - test_circle
16 - bank_course [Yoshi Falls]
17 - old_hyudoro_64 * [N64 Banshee Boardwalk] *
18 - ridge_course * [Shroom Ridge] *
19 - mario_course [Mario Circuit]
1A - garden_course * [Peach Gardens] *
1B - desert_course [Desert Hills]
1C - town_course [Delfino Square]
1D - rainbow_course [Rainbow Road]
1E - snow_course [DK Pass]
1F - beach_course [Cheep Cheep Beach]
20 - koopa_course * [Bowser Castle] *
21 - pinball_course * [Waluigi Pinball] *
22 - stadium_course [Wario Stadium]
23 - old_donut_sfc * [SNES Donut Plains 1] *
24 - old_choco_64 [N64 Choco Mountain]
25 - old_luigi_agb * [GBA Luigi Circuit] *
26 - old_kinoko_gc * [GCN Mushroom Bridge] *
27 - old_choco_sfc [SNES Choco Island 2]
28 - old_sky_agb [GBA Sky Garden]
29 - mini_block_course
2A - mini_block_64
2B - mini_dokan_gc
2C - mini_stage1
2D - mini_stage2
2E - mini_stage3
2F - mini_stage4
30 - mr_stage1
31 - mr_stage2
32 - mr_stage3
33 - mr_stage4
34 - Award
35 - StaffRoll
36 - StaffRollTrue

_________________
MKDS friend code: 459633-596796
Contact me on AIM to exchange. I have accessed the extra 12 tracks online.
NOTE: Projectile items will not work in the docked ship of Airship Fortress, or the tunnel of Waluigi Pinball.

Last edited by Hypershell on Mon Dec 26, 2005 7:21 pm; edited 5 times in total

Thanks a lot Chishm, this is great.

You rock.

Yeah!!, chishm, You rock man!!

Thanks a lot chishm, Natrium's loader unfortunately didn't work for me, but your patch works excellent, thank you man.

Hypershell, I have noticed that not only the red and green shell have problems in the in-door segment of the ship, but also bananas and fake item boxes (they disappear), those are what I have tested.

Team Goon Rocks! Kart just got 100 times better! Thanx to everyone for making it all possible!
Friend Code 107433 637627

Yeah, awesome patch, chishm! ;)

Simple enough for even a programming-illiterate idiot like me!
_________________
3 is not an "e",
7 is not a "t",
1 is not an "l",
And for the love of God,
Learn how to spell!

RAB_DS wrote:

Hypershell, I have noticed that not only the red and green shell have problems in the in-door segment of the ship, but also bananas and fake item boxes (they disappear), those are what I have tested.

Are you sure? I could have sworn banana peels work, but maybe I was wrong...
_________________
MKDS friend code: 459633-596796
Contact me on AIM to exchange. I have accessed the extra 12 tracks online.
NOTE: Projectile items will not work in the docked ship of Airship Fortress, or the tunnel of Waluigi Pinball.

I tried it too. Banana peels disappear. You see them drop but then if you look on your map they aren't there.

Chishm: I LOVE YOU!

Now where would I get a ROM dumper?

Hypershell wrote:

I think he means boot without a menu. Once you put the program on your flash card, and you start up your DS, the app needs to be able to start immediately without going through any sort of menu from the flash card itself. That's why the CF/SD card adapters don't work, they all have firmware menus you need to go through before starting any application, and that gets in the way of Natrium's loader.

Aww man, my cart's got a laoder screen... *cries*

any way to get it off?

On most NOR cards, you can uncheck "Use Loader" or choose "Single ROM" or something similar in the included PC software.
_________________
-- Where is he?
-- Who?
-- You know, the human.
-- I think he moved to Tilwick.

chishm wrote:

So if someone can dump the ROM themself (to make it legal)...

What do you mean by "make it legal". Did you not just say that is was legal to dump the rom in an earlier post?

I think he means legal as opposed to the illegal act obtaining the dump someone else (*cough* some guy with "Trash" in his name *cough*) made.
_________________
3 is not an "e",
7 is not a "t",
1 is not an "l",
And for the love of God,
Learn how to spell!

dexter0 wrote:

chishm wrote:

So if someone can dump the ROM themself (to make it legal)...

What do you mean by "make it legal". Did you not just say that is was legal to dump the rom in an earlier post?

AFAIK, It is legal to make 1 copy of a game for backup purposes, as well as reverse engineering, etc. This is sort of a grey area. However, it is completely illegal to distribute that copy, or to download another copy, even if you own the game.
_________________
http://chishm.drunkencoders.com
http://dldi.drunkencoders.com

It's not illegal to download a copy if you own it.
Distributing is illegal.

ProdigySim wrote:

It's not illegal to download a copy if you own it.
Distributing is illegal.

Please read the ESA's Anti-Piracy FAQ (applies only to the USA). I direct your attention to the question "Isn?t it legal to copy video and computer games as a backup as long as you own a legitimate copy?", in particular, this:

ESA wrote:

U.S. Copyright laws permit making a "backup" copy of computer programs for archival purposes. However, the right to make backup copies of computer programs for archival purposes, as embodied in 17 U.S.C. Section 117(2), does not in any way authorize the owner of a copy of a video or computer game to post or download a copy of that game to or from the Internet or make such copy available to other people for their use.

Basically it says you can make a backup, but you can't share this backup, nor can you download another person's backup.
_________________
http://chishm.drunkencoders.com
http://dldi.drunkencoders.com

"Does not authorize" and "Makes illegal" are two different things.
In other words, it does not secure this right. There is no law against it though.

This is a topic that has cropped up time and time again.
Under most "fair" (most european countries and the US) copyright acts it is legal to make a backup copy (although in truth you'd probably archive the original and use the backup because often your right to have a backup is lost if the original media is) as long as you don't break any encryption (breaking encryption is illegal) and provided you do it with your own hardware, using your own copy of the software's media (no borrowing a friends even though all the disks/roms are the same).
It is illlegal to transmit or recieve images of media (.iso's or Romz for example) even if you and the recipiant own the original software media.
You also aren't allowed to copy the copy.
If in doubt check with a lawyer or other legal advisor.
Don't listen to that crap that Nintendo give you.

Don't ruin this topic with those anti-piracy rules 'cause I'm sick of them.
Back to topic: Are the MIRROR tracks stored separately from their originals or are they just 'rendered' mirrored?

Off topic again:
I'm fed up with repeating the whole Rom backup/Piracy thing too.
On topic:
Looking at the track list on the previous page there are no indications that they are stored mirrored, so i'd assume they're rendered mirrored.

Has anyone gotten this ot work with Passme2? I can't seem to get past 2 white screens at startup

I want to use Natruim42's patch, can I use GBA movie player for that, or do I need a different GBA flash cart?

noname224 wrote:

I want to use Natruim42's patch, can I use GBA movie player for that, or do I need a different GBA flash cart?

Anyone?

No, as stated in one of the first posts in this thread. You could try chishm's patch, though.
_________________
www.natrium42.com

What GBA flash carts would be compatible then?

You DO NOT need anything except GBAmp + one of the boot methods.

I have made a combined dumper and patcher. Get it here.

It only works with the GBAMP, so you still need to use the IPS patch (included) with other flash carts.
_________________
http://chishm.drunkencoders.com
http://dldi.drunkencoders.com

Nice! Thanks, chishm!

Now I no longer have to have the whole 32MB ROM taking up space on my measly 256MB card.

mntorankusu wrote:

Nice! Thanks, chishm!

Now I no longer have to have the whole 32MB ROM taking up space on my measly 256MB card.

How big is the file you get then?

I have Supercard SD so the IPS patch is what i use, but I cut the rom after applying the patch @ 0x0016A000 (making it 1.41MB).

Then i apply a loader to it.

Edit
Works great on my EZF Advance 256mbit GBA-flashcart too.

Last edited by Mithos on Sat Jan 14, 2006 4:21 pm; edited 1 time in total

Mithos wrote:

mntorankusu wrote:

Nice! Thanks, chishm!

Now I no longer have to have the whole 32MB ROM taking up space on my measly 256MB card.

How big is the file you get then?

I have Supercard SD so the IPS patch is what i use, but I cut the rom after applying the patch @ 0x0016A000 (making it 1.41MB).

Then i apply a loader to it.

The resulting file from chishm's dumper is 4MB.

I assumed it would be possible to trim most of the ROM, but I wasn't sure, so I left it alone because I didn't want to break anything.

Edit: Thanks for the tip on where to cut the file. Now it takes up even less space!

I was thinking... Is it possible to make game MODs this way?

Does chishm's patch need a passme too?

Nope, works fine with FlashMe.

Chishm's patch does not work for me. It dumps the 4mb .nds file, but when I launch it (from either Moonshell or as _BOOT_MP.nds) I just get two white screens.

ChronoDK wrote:

Chishm's patch does not work for me. It dumps the 4mb .nds file, but when I launch it (from either Moonshell or as _BOOT_MP.nds) I just get two white screens.

Make sure you're running it with Mario Kart in your DS slot.

ChronoDK wrote:

Chishm's patch does not work for me. It dumps the 4mb .nds file, but when I launch it (from either Moonshell or as _BOOT_MP.nds) I just get two white screens.

Did you read the Readme? The dumper must be run as _BOOT_MP.nds, or it won't work correctly.

MaHe wrote:

Nope, works fine with FlashMe.

Will it work with WiFiMe? If so, how would I go about dumping my rom using WiFime?

mntorankusu wrote:

Did you read the Readme? The dumper must be run as _BOOT_MP.nds, or it won't work correctly.

Yes, that is what I did. And after that i get "MKDS new online tracks.nds" which gives me two white screens no matter how I run it. Mario Kart DS (US-version) is in the DS slot too.

When I run the extract tool, mine gives me a message that the ROM will not work.
_________________
It's 'CubeGuy.' One word. No space.

ChronoDK wrote:

Chishm's patch does not work for me. It dumps the 4mb .nds file, but when I launch it (from either Moonshell or as _BOOT_MP.nds) I just get two white screens.

Are you using the latest version of Chishm's GBAMP firmware?

CubeGuy wrote:

When I run the extract tool, mine gives me a message that the ROM will not work.

You haven't run it without a menu. Menus (like MightyMax's or MoonShell) mess with some memory required for it to work properly.
_________________
http://chishm.drunkencoders.com
http://dldi.drunkencoders.com

pepsiman wrote:

Are you using the latest version of Chishm's GBAMP firmware?

Yes, just updated and tried on another flashcard. Same result.

The IPS-patch is only for patching a full rom dump and not the 4mb file, right?

Right.

Just remembered, the dump tool tells me to reinsert the cart and press A even though I never removed it. It looks like it works fine, but could it be an error instead?

Im having the same problem as ChronoDK.
It dumps fine but the dump never starts it just white screens.
Im using the EUR MK but someone earlier reported that this one _does_ work.
If i boot the dumper with passme it just white screens.
If i boot the dumper with flashme it works.
If i boot the dump with passme it white screens.
If i boot the dump with flashme it white screens.

I am using Flashme V6 and the latest available GBAMP firmware hack (website says 2.04 installer says 2.03).

When it says reinsert the DS Card, you have to pull it out and put it back in again.
_________________
http://chishm.drunkencoders.com
http://dldi.drunkencoders.com

Thanks, that did it.

chishm wrote:

CubeGuy wrote:

When I run the extract tool, mine gives me a message that the ROM will not work.

You haven't run it without a menu. Menus (like MightyMax's or MoonShell) mess with some memory required for it to work properly.

I ran it as the default program. Nothing in the way of boot menus.
_________________
It's 'CubeGuy.' One word. No space.

OK, I'm using a GBAMP with Chishm's hack on it, with Flashme V6.

I have run the .nds, as _BOOT_MP.nds or whatever it is. I have run it, taking out the cart and putting it back in at the appropriate time, and then run the thing from moonshell. I just get blank screens, my MK:DS card IS inserted.

I've had the hardest time with this.

But I finally figured it out. I guess a lot of the items disappear because of memory limitations of the DS, which is why those tracks were excluded to be online, maybe?

At any rate, here's what I did:

I erased any bad dumps that my improper dumping methods created.. making sure only the _BOOT_MP.NDS were on the flash card, and IPS were as well.

I then allowed it to do it's job. It dumped. It came to the point where it said "reinsert DS card" (chishm, you should make it say, "Please remove, then reinsert DS game card" to clear up confusion. I got majorly confused when I saw this step.. and the readme was so vague)

It patched, I popped moonshell/mighty max's multiboot menus back in as _BOOT_MP.NDS, then I ran it.

It white screened for a few seconds, then it booted Mario Kart.

Instead of "Yahoo!" Mario says, "here we go!" (this is exactly what Mario said in the pirated rom of Mario Kart DS.. I wonder why that is? You guys didn't screw with this did you? or does patching the memory make Nintendo know who's stealing MKDS and who isn't?)

Anyway it's fun. thanks for a cool tool Chishm.
_________________
Mathew Valente [TSSF]
------
Chrono Resurrection Musician

I can't seem to get Chishm's tool to work. I've tried everything, but all I get are two white screens. I eventually just had to use a "different" dump of the game and use the IPS patch. Once I did that, it worked. The only thing I noticed is that not all of the 32 tracks are available. I still have only 20, but some of the excluded tracks have replaced ones that used to be available. Well, I can play Shroom Ridge and Bowser's Castle online, so I'm happy. Thanks Chishm!

tssf wrote:

Instead of "Yahoo!" Mario says, "here we go!" (this is exactly what Mario said in the pirated rom of Mario Kart DS.. I wonder why that is? You guys didn't screw with this did you? or does patching the memory make Nintendo know who's stealing MKDS and who isn't?)

Never thought of that before.. ;p

Actually, it does that even when an unpatched binary is loaded from something other than the DS card.
_________________
http://chishm.drunkencoders.com
http://dldi.drunkencoders.com

How long will it white screen before it starts MKDS? I'm sure it shouldn't take more than 30 seconds.

Anyway, I've noticed that, after I run Chism's dumper/patcher on my MP, the NDS file it creates is always fragmented. I defrag my flash card and try to run it, but it's a no-go.

Could having the dump fragmented cause the patcher to not work correctly? It's all I can think of, so I'll try to find out on my own!

[update] I guess that wasn't the problem. [/update]

I don't know if it's just me, but NDSMP 2.11 breaks this hack. I just got white screens when I tried to load it. I had to revert back to 2.04.

Heh, yeah, I realised that about a day after I released NDSMP v2.11. I changed the commercial ROM detection method, and it now picks up the track hack as a commercial ROM and stops execution of it. The old hack had a workaround, but the thing it worked around no longer exists.
_________________
http://chishm.drunkencoders.com
http://dldi.drunkencoders.com

So, do you have to buy something other than a DS and a MKDS game? I'm not really familiar with all this stuff but if somebody can help me I'll really appriciate it.

Does this .ds.gba file work when put onto the CF card of an M3, or are M3 users out of luck..?

Just as a note, I had a bit of a problem the othe day with this hack.

I'm a little bit depressed, but ah well, I expected something to go wrong eventually. after using the patch (GBAMP) for quite some time (A month or maybe a bit less?) I booted up my MKDS two days ago, with the patch, and found my game destroyed. saved info, that is. All wifi and other records, and unlocked stuff, were gone. Was back to factory brand new condition.

A little upsetting, as I said, but, hey. I had backed up a copy of the game about 2 weeks prior to this, however, it had since become corrupt. eek.

Just leavin' a bit of a feedback for ya'll. Not mad at anyone or anything, just leaving my expereince with it. It still won't stop me from using it again. Sure, I gotta redo all the grand prixs' and ghosts and such, but hey. Something to do. plus, I have a clean record now. :P

I was using Flashme V5, with the newest GBAMP hacked firmware that works. I jsut updated to flashme v6, today, though.

I hope that doesn't affect people on the recieving end...
It should be looked into. I'll probably be obsessed with this hack once I finally get my hands on that wireless router that I'm planning to buy, so I'll try to confirm it.

It would be kind of fun to see the reactions of other players when they find themselves in Tick-Tock Clock, but ah well...

Edit:
I was thinking the same thing, MaHe, but since I don't really know how it works I decided to avoid making an imbecile of myself again.
So... where has the game card been lately? I've had data clear itself out for no reason in a few older Game Boy games, but only once or twice from games that hadn't been touched for (probably) a year.
_________________
Thanks!
MKDS Friend Code: 511165-679586
MP:H Friend Code: 2105 2377 6896

Last edited by Mr. Picklesworth on Sat Jan 28, 2006 11:19 pm; edited 3 times in total

Huh, that never happened to me. It must have been something else I guess (this hack doesn't even affect EEPROM).

So, there's no way to force the track you want to be played, right? BTW, mine said "Here we go" the first time, and then "Yahoo" all the other times.

No. And even if it'd be possible, I doubt anybody would release it. Using it with friends is O.K. while playing against some random people isn't.

You're right, It isn't neccesarrily the patch that messed my cart, but It was the only thing I could think of. It's almost always in my DS, or in my DS case. Nothing else in the room or anything that could damage it. Could have just been a fluke. I too have had games mysteriously delete my data in the past (SNES and GBC days), but I havent had any current generation problems till now.

Mine always said "Here we go!" whenever I ran the game with the patch. I just figured it was always gonna happen, since it was a part of the patch.

Anyways, I can't think of anyhting else that could have effected the game data's loss, But since I don't know anything about how its storeed and what effects it, it might've been some weird thing I'm not thinking of, however, The game got pretty normal use aside from the patch being ran.

At any rate, I'm rebuilding my stats now, so I gotta get back to that. ;)

Well, I just keep getting this error:

Searching for secure region...
Not found! ROM will not work!

Then the dumping + patching continues as there was no error, but the generated .nds-file won't work.

I'm using FlashmeV6 and GBAMP with firmware version 2.04 and MKDS US.
I also tried using WifiMe, however the only thing I get is two white screens.

Does anyone know what I am doing wrong?

Did you use a loader (Mighy Max's or MoonShell) to load the dump/patch program?

You have to make the program _BOOT_MP.nds or it'll give you that error.

Nope, I formatted the whole card before putting _BOOT_MP.NDS (and nothing else) on it.

The Dumper/Patcher doesn't work here either :(
Just white screens. I have tried booting through Moonshell, MightyMax's loader, and as _BOOT_MP.nds

I am running Flashme v6, with hacked GBAMP 2.07. It will boot any official demos.

I tried the full 4MB NDS and the manually trimmed NDS file (consuming 1.41 MB). The actual dumper/patcher seems to work fine; it creates the file that I have to run and dumps it in the root dir of my CF card.

So... has anybody gotten this to work?
_________________
Thanks!
MKDS Friend Code: 511165-679586
MP:H Friend Code: 2105 2377 6896

It doesn't work, because Chishm has integrated anti-piracy protection in there. MK:DS hack is misunderstood as a commercial ROM and therefore won't run. BTW, where did you get 2.07?!

I didn't update.
I may be wrong about the version number, actually.

So... the piracy protection doesn't block official demos?
_________________
Thanks!
MKDS Friend Code: 511165-679586
MP:H Friend Code: 2105 2377 6896

With the 2.07 hack, it *should* work (altough I have the same problem as Mr. Picklesworth)

chishm wrote:

Heh, yeah, I realised that about a day after I released NDSMP v2.11. I changed the commercial ROM detection method, and it now picks up the track hack as a commercial ROM and stops execution of it. The old hack had a workaround, but the thing it worked around no longer exists.

Firstly: Oops, I meant 2.04 :)

Anyway, I just took a look at the loader file with a hex editor, where perhaps the problem would reveal itself.
The file appears to be almost completely empty!
Mostly 0s, with a few occasional chunks of the exact same number repeated many times... then back to 0s. There are two exceptions near the beginning which actually have a bit of content (address 16384 to 19567, and 20480 to 24147).
The header appears to be completely empty; all 255 up to adress 120, except for four 0s at address 80 to 84 (FAT size?). This is followed by 0s from then on.

I tried redoing it with a different and empty CF card, but still got the same thing.

Upon comparing this to a regular NDS file, I see that it is totally different. (Duh).

Now, I'm not saying that I am in any way knowledgeable about the low-level stuff here, but this looks like a rather tiny amount of real code, and all those 0s tell me that perhaps something rather important is missing.
...Especially considering that the header contains nothing... which would cause it to not work, right?

Would anyone be willing to email their working patched file to me?'
If you want, I can give a proof that I own the game and a promise that I won't distribute the file.

I am using GBAMP, now FW 2.11 (used to be 2.04), and fwnitro 1.4A (used to be Flashme 6).
My CF cards are both Lexar Media with a Fat32 filesystem. One is 128 MB with 4x speed, the other is 512 MB with 40x speed.

My attempts have never worked on any of those setups, and they have both given me the same file as described.

Edit:
Here is the sparse header:
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
_________________
Thanks!
MKDS Friend Code: 511165-679586
MP:H Friend Code: 2105 2377 6896

2 questions:

1)Can the "all-tracks unlocked" be a .sav extension? Because I'm in possesion of one. ...Which brings me to the 2nd question:

2)How can I play the extra tracks without erasing my current FC? Will the following steps work for me?
a)Dump my curent firmware(is the FC written in there?)
b)Dump my current .sav from my official MKDS cart using Rain
c)Patching the .sav that has all tracks unlocked to my MKDS cart using
Rain.
d)Creating a new FC when I'll connect.
e)Play the extra-tracks
f)Recover my firmware and original .sav ,and no harm is done.

Well? (SC SD+FW V6)

All tracks unlocked in this manner is NOT in the SAV, it's in the ROM.

I have a Mario Kart DS ROM, with the bit edited, truncated to about 1.5MB. With the Mario Kart DS game card in my Slot-1, I boot that ROM. As soon as it loads the hacked binaries into memory, I can pull out my flashcart and the execution continues from the DS card. Once this is done, I can play online, and my first 12 tracks are replaced with the 12 "forbidden" tracks.

There is no way to do this from the SAV file.
_________________
Don't sign your posts, it's dumb.

m2pt5 wrote:

All tracks unlocked in this manner is NOT in the SAV, it's in the ROM.

I have a Mario Kart DS ROM, with the bit edited, truncated to about 1.5MB. With the Mario Kart DS game card in my Slot-1, I boot that ROM. As soon as it loads the hacked binaries into memory, I can pull out my flashcart and the execution continues from the DS card. Once this is done, I can play online, and my first 12 tracks are replaced with the 12 "forbidden" tracks.

There is no way to do this from the SAV file.

offcourse you can!
he has a supercard.. and thats why he asks a .sav file..

if you have a M3 you can go to this site (there are also .sav files to be find) and download the save games so you dont have to unlock everything by your self :)

http://www.dualscene.net/viewpage.php?page_id=30

oh.. you can upload your own save file but remember..
!!!!!do not upload savegames from online enabled games, unless you don't have a friend code associated yet.!!!!!

;)

I don't think that's what he was asking...

And if it is, then that's not what this thread is about.
_________________
Don't sign your posts, it's dumb.

Something funny happened to me last night.

I was playing on Shroom Ridge (one of the locked tracks) against a friend, he told me that my icon had changed (from a mexican mushroom) to the drybones logo, with a giant red X on top of it.

I'll try to play him again today, and ill take pictures if possible..

It seems that Nintendo now looks at the selected tracks and 'bans' people.

I havent tried logging on MKDS again since last nite, I hope I didnt get banned...

I somehow can't see the sense in banning people for this...
Methinks it's just a myth.

I will only believe that Nintendo is banning people for improving their game if I see some actual reliable evidence. (Perhaps photographics proof).
I realize that it is possible to ban someone from WFC, but I have big doubts the Nintendo would do it.

Heh... sounds like Nintendo may be doing quite a bit, actually.
http://news.spong.com/detail/news.asp?prid=9414&cb=705
So I'll keep an open mind. Though, apparently, Spong is a very unreliable source.
_________________
Thanks!
MKDS Friend Code: 511165-679586
MP:H Friend Code: 2105 2377 6896

The wierd thing is that now I am having connection problems too.

I can connect to NWC, but when i try to search for somebody, it never works. I get yellow dots, but right near the end I get an 85030 or similar error and am disconnected. Even while trying ot connect with my brother. I hope they aren't banning and this is a coincedential problem from my end.
_________________

dualscreenman wrote:

What about Gaim DS? Gaim pretty much has support for all IM programs.

tepples wrote:

"Goshdammit, the DS is not a Gaim-boy! It's a third pillar!"

dualscreenman wrote:

The wierd thing is that now I am having connection problems too.

I can connect to NWC, but when i try to search for somebody, it never works. I get yellow dots, but right near the end I get an 85030 or similar error and am disconnected. Even while trying ot connect with my brother. I hope they aren't banning and this is a coincedential problem from my end.

I get those problems all the time too. I'm assuming you own an actual copy of the game, so you could try just booting that normally. I'm pretty sure it's just because NWC isn't very robust. If they start banning for using the course hack, they better make the courses playable without the need for a hack.

ssj4android wrote:

If they start banning for using the course hack, they better make the courses playable without the need for a hack.

That's called Mario Kart DS II: We Optimized Our Netcode So Pay Us $34.95 Again Edition.
_________________
-- Where is he?
-- Who?
-- You know, the human.
-- I think he moved to Tilwick.

Well, I wasn't banned. It was just a crappy connetcion day. I don't think they have started banning hackers yet.
_________________

dualscreenman wrote:

What about Gaim DS? Gaim pretty much has support for all IM programs.

tepples wrote:

"Goshdammit, the DS is not a Gaim-boy! It's a third pillar!"

Im not sure whether they can actually detect the track hack.
I think it can check it's running from an offical cart by checking for secure area or something, but because the hack just patches memory before passing control to the offical cart they don't/can't check for it.

JaJa wrote:

because the hack just patches memory before passing control to the offical cart they don't/can't check for it.

Yes they can. They can re-read the part of the .text and rodata outside the secure area from the DS Game Card and compare it bit-for-bit to the values in RAM.
_________________
-- Where is he?
-- Who?
-- You know, the human.
-- I think he moved to Tilwick.

tepples wrote:

JaJa wrote:

because the hack just patches memory before passing control to the offical cart they don't/can't check for it.

Yes they can. They can re-read the part of the .text and rodata outside the secure area from the DS Game Card and compare it bit-for-bit to the values in RAM.

Ok, so they can. Thank you for enlightening me on that.
But the one question is do they?

I hope they Do. Maybe the track courses do not afect to much but other hacks like cheating hacks need to be detected

JaJa wrote:

tepples wrote:

JaJa wrote:

because the hack just patches memory before passing control to the offical cart they don't/can't check for it.

Yes they can. They can re-read the part of the .text and rodata outside the secure area from the DS Game Card and compare it bit-for-bit to the values in RAM.

Ok, so they can. Thank you for enlightening me on that.
But the one question is do they?

That would take centuries to answer. The checking is done with SSL.
_________________
-- Where is he?
-- Who?
-- You know, the human.
-- I think he moved to Tilwick.

Detecting the track hack, by rereading the section of the game card, that is patched, is not possible, since the exact section that is patched, is the secure area. They would have to find other ways of detecting the patch, for example, read the areas of the secure area that is patched, and compare them against known values.

caitsith2 wrote:

Detecting the track hack, by rereading the section of the game card, that is patched, is not possible, since the exact section that is patched, is the secure area. They would have to find other ways of detecting the patch, for example, read the areas of the secure area that is patched, and compare them against known values.

Actually, the IPS patches the secure area with code that runs and then patches other parts of the game. The reason for this is ... explained below.

tepples wrote:

Yes they can. They can re-read the part of the .text and rodata outside the secure area from the DS Game Card and compare it bit-for-bit to the values in RAM.

Although caitsith2 wasn't quite right with his reasoning, you still can't do this because the ARM9 binary is compressed. Code in the secure area decompresses it at startup, then jumps to the decompressed code. The IPS track patch patches the secure area to jump to a patcher after the binary is decompressed.

Nearly all DS games have the same code to decompress themselves a startup, although many don't use it snce they aren't compressed. This leads me to believe it is part of the official startup file (crt0).
_________________
http://chishm.drunkencoders.com
http://dldi.drunkencoders.com

Is there a way to hack the course selection menu to have 32 options instead of 20? Probably pretty tough though...

Parasyte wrote (over at GSCentral):

Quote:

There are ways to list all 32 tracks, but it's a bit more complicated and requires a different kind of patch.

As for Nintendo knowing about the course hack. I once ran a packet tracer while playing online. It seemed like all connection with nintendo's servers droped after the back button went away and all further communication was done directly with your opponent. (Peer 2 Peer Maybe?)

Couldn't they just check what course you voted for? Or is that done P2P as well?
And, BTW, they did say you could play on all courses at first.

I don't think they care. They're after cheaters and moreso pirates, not people that play on locked tracks.

Hey, but here's a thought... if the game is downloading and running encrypted code, Nintendo could add the ability to play all the tracks! Maybe even fixing whatever it was that made them want to hide them in the first place. So who knows?

Hello folks, I hope this is okay to post this here?

I've been searching for a current tutorial on how to access these locked tracks using a CF SuperCard and a DSpassme1.

I've been trying a few methods I've found online but, so far I can't get it to work. I must be doing something wrong or maybe it just can't be done with a SuperCard?

Do I need to Flash my ds first? -Thanks

You don't necessarily need to flash your DS, but you need to put the Mario Kart game card directly in the slot before running the hacked stub. Boot to the SC menu, remove the PassMe (or Superpass) and put Mario Kart directly in slot 1. Then run the hacked stub. (This is just speculation - if this doesn't work, I'd suggest flashing your DS. It's a good idea anyway; does away with an extra bit of hardware and increases battery life.)
_________________
Don't sign your posts, it's dumb.

m2pt5 wrote:

You don't necessarily need to flash your DS, but you need to put the Mario Kart game card directly in the slot before running the hacked stub. Boot to the SC menu, remove the PassMe (or Superpass) and put Mario Kart directly in slot 1. Then run the hacked stub. (This is just speculation - if this doesn't work, I'd suggest flashing your DS. It's a good idea anyway; does away with an extra bit of hardware and increases battery life.)

That won't work. Putting Mario Kart in the PassMe does work, though if you so much as touch a regular PassMe it can easily lose connection and freeze the game.

It seems like there are as many ways of doing this as there are types of ds's?

I guess I'll just keep having to play with it and keep trying until I figure out what will work for me.

m2pt5, you said "hacked stub". Could you point me to the one that your using? The one I'm trying is called "mktest.ds.gba" I got it via an email from someone but, it's not doing the job :(

Here's what I'm doing:
First, I run it via the root menu of my SuperCard, top screen turns white then black.

Second, I plug in my mkds&passme1 and turn it off and on again quickly.

Third, SuperCard root menu comes back up and the ds slot is displayed in the menu.

Fourth, I click the ds slot from the root menu and all I get is the same white then dark screen.

So, I've been trying to do this as it was explained to me and some of the ways I think that others are doing this... but, I can't get it to work.

I feel like I'm getting close, I don't want to have to fork out more cash for another flashCart... please help.

mktest.ds.gba doesn't work with the SuperCard.
_________________

dualscreenman wrote:

What about Gaim DS? Gaim pretty much has support for all IM programs.

tepples wrote:

"Goshdammit, the DS is not a Gaim-boy! It's a third pillar!"

Is that a question or an affirmation?

Does anyone know what will work with a SuperCard?

Did you try prepending a loader? I'm lazy and use dslazy for that stuff. ;)

Hypershell wrote:

I think he means boot without a menu. Once you put the program on your flash card, and you start up your DS, the app needs to be able to start immediately without going through any sort of menu from the flash card itself. That's why the CF/SD card adapters don't work, they all have firmware menus you need to go through before starting any application, and that gets in the way of Natrium's loader.

See above quote. That was an affirmation. mktest.ds.gba doesn't work with Supercard.
_________________

dualscreenman wrote:

What about Gaim DS? Gaim pretty much has support for all IM programs.

tepples wrote:

"Goshdammit, the DS is not a Gaim-boy! It's a third pillar!"

Okay, I got it to work. This is how I did it:

First, I downloaded this file: http://home.skhtst.edu.hk/~wanck/Mario_Kart_DS_Online_Hack.nds

Then, I put the SuperCard and the MKDS&passme1 in at the same time.

Tuned it on.

Started in GBA mode.

Clicked on the file in the SuperCard root menu.

And it started MKDS. Now I can play forbidden tracks online. COOL!

Grassy wrote:

Okay, I got it to work. This is how I did it:

First, I downloaded this file: http://home.skhtst.edu.hk/~wanck/Mario_Kart_DS_Online_Hack.nds

Then, I put the SuperCard and the MKDS&passme1 in at the same time.

Tuned it on.

Started in GBA mode.

Clicked on the file in the SuperCard root menu.

And it started MKDS. Now I can play forbidden tracks online. COOL!

I'm curious to know how, on SuperCard, you have seen a ".nds" file, without rename it, in GBA mode... ;)
_________________
DS v2 - FWNitro 1.4d - SCSD - 2*1Gb

Is there some sort of PC patcher that can apply the IPS patch and then give you a set of checkboxes so that you can pick which of the 32 tracks you want to appear in the 20 box list? I know you can modify this using a hex editor, but I feel like a program that does this automatically would be very helpful for many people.

I guess the only way is to do it manually using a Hex Editor, but if someone wants to look into making a tool like that, it seems like it'd be very useful.

Zemysterieux wrote:

I'm curious to know how, on SuperCard, you have seen a ".nds" file, without rename it, in GBA mode... ;)

I dunno why it works for me? I just know that it does work... I mean, why would I lie?

Would you like me to post a video of what I'm doing?

EDIT: I have video here---> http://media.putfile.com/MKDS-Offline-Track-Hack see for yourself ;-)

Has anyone got the .nds file floating around? I can't find it on any of the links posted or google.

MSN is bensplatfalconerssplotcosplotuk
AIM is Zed0h

Here you go.

http://www.megaupload.com/?d=VL0EU1QP

That doesn't seem to work, it can't find the file when you try to download.

Keep trying.... it's there I promise. The site makes you wait a minute in the hopes you'll click on some ads. If you still can't get it, just PM me your email address and I can send it to you as an attatchment :P

Grassy wrote:

Here you go.

http://www.megaupload.com/?d=VL0EU1QP

thanks,
works perfectly :)

its fun how people freak out on these courses...
but they still play good :P
tick-tock clock is so fun online :D
_________________

1x WII 2x remotes
2x NDS/L(FMv7-ORG:v4,FMv7-org:DSL)
1x GBAMP
2x 1gb (MicroDrive{typeII}&SanDisk{typeI})
1x SuperPass2
1x Supercard-CF
MoonShell skins

Well I did manage to download it but got 2 white screens, I think that version was for supercard though, I've got a GBAMP =/

If anyone has the GBAMP version could they post a link or send it to:
bensplatfalconerssplotcosplotuk

cheers

I'd also like the GBAMP version so I can test it with the Max Media Launcher (is probably going to have to quickly swap the games round in the 2 seconds when the MML splash screens come up)

Hypershell wrote:

Tried on M3-SD and it works!!! Just apply the IPS patch, send the rom to your card directly (as in WITHOUT going through the game manager), stick your MKDS cartridge in your PassKey, and start the rom as a demo (press the Start button instead of the A button). Awesome! Keeps all saved data on your original cartridge, more than I could have hoped for from a rom-hack. Chishm, I love you!

IPS File? Where is this to be found?

How exactly is the rom sent directly to the card w/o use of game manager?

This is a pretty awesome trick that I would like to try out.

TIA!

BUMP!

There was no need to bump.
It's a long thread and understandably you didn't want to wade through the 14 pages.
http://forum.gbadev.org/viewtopic.php?p=65607#65607
_________________
LAWL HOOGE
My Blog

JaJa wrote:

There was no need to bump.
It's a long thread and understandably you didn't want to wade through the 14 pages.
http://forum.gbadev.org/viewtopic.php?p=65607#65607

the link is bad lol,
_________________

1x WII 2x remotes
2x NDS/L(FMv7-ORG:v4,FMv7-org:DSL)
1x GBAMP
2x 1gb (MicroDrive{typeII}&SanDisk{typeI})
1x SuperPass2
1x Supercard-CF
MoonShell skins

I did go through all 14 pages. I downloaded a few files as well, yet do not know which does what.

Could someone post a working link to the IPS file, please?

TIA!

I was wondering if someone could possibly help me out.
I have a M3 Adapter w/ passkey 2 and Datel Max Media Launcher.

I just recently heard about being able to play these extra tracks online and also saw footage on youtube. ( I know, I'm LATE!)

Could someone possibly lend me a hand and show me how to do this?

I think it's pretty damn cool!

I have downloaded various files already: MKDS_Hack.nds, ndsmp 2.11 and 2.04, mktest.ds.gba, and MKDS.exe.

I do not know if these are the files to use, yet it's all I can find for now.

Am I missing an IPS file?
How do I directly launch roms without the game manager?

Any help will be much appreciated. TIA!

:)

Any help would be much appreciated.

swimgod wrote:

JaJa wrote:

There was no need to bump.
It's a long thread and understandably you didn't want to wade through the 14 pages.
http://forum.gbadev.org/viewtopic.php?p=65607#65607

the link is bad lol,

Heh, it was supposed to point to a post by chishm with this link.
http://www.geocities.com/chishm1/MKDS_patcher.zip
Unfortuantley this link is now gone (as chishm moved to drunkencoders).
I had a quick look on my HD, and found my copy.
This file contains an automated patcher tool for GBAMP and the ips patch.
http://rapidshare.de/files/22338203/MKDS_patcher.zip.html
Enjoy!
_________________
LAWL HOOGE
My Blog

THANK YOU

__

WHY!? two white screens.

It dumped and then it said reinsert DS card which confused me a bit because it was still in.. and then it said it was done, i ran the NDS and it doesn't work.

Thank you very much, JaJa. :)

Is there a way of bypassing Game Manager and load directly w/ M3 Adapter SD?

TIA!

@Dan2552 you must take out and re-insert the card.
You must also place the patcher alone on the CF in the GBAMP i.e. no launchers (moonshell, MightMax loader).
(And it must be renamed _boot_mp.nds so it loads)

@heisty I don't use M3 so I can't help you.
_________________
LAWL HOOGE
My Blog

JaJa wrote:

@Dan2552 you must take out and re-insert the card.
You must also place the patcher alone on the CF in the GBAMP i.e. no launchers (moonshell, MightMax loader).
(And it must be renamed _boot_mp.nds so it loads)

Tried that :/

apparently the newer chishms firmware made this stop working i installed the older but it still isn't working for me - does the older one detect the newer one and not actually do anything or what? I tried 'repair' and rewriting with official firmware, and tried the older version. Still no hacked MK. :( why exactly cant people upload the working NDS file? It's not like you can run it without the actual game itself anyway...

Because it is still a ROM and people can play it on M3s and Supercards. That's also why I removed the IPS. It seemed more people were using the IPS file with illegal copies than were using a dump they made themself.
_________________
http://chishm.drunkencoders.com
http://dldi.drunkencoders.com

FWNITRO has the track hack built in, you might want to look at that. I use it whenever I play online and it works every time :)

Yes, and that way they can't detect that the game was launched from a GBAMP and ban you for using an illegal copy.
_________________
I'm a PSP hacker now, but I still <3 DS.

I'd prefer to keep DS download play and pictochat..

HyperHacker wrote:

Yes, and that way they can't detect that the game was launched from a GBAMP and ban you for using an illegal copy.

How exactly does FWNITRO keep you from getting banned? I thought N banning users had to do with the CartID of the pirated ROM or something.

I'm not sure how, but they detect whether the game was actually launched from a DS card or from the GBA slot. With the track hack you're technically launching from the GBA slot even though it still needs the DS card. FWNitro launches from the DS card and patches in memory.
_________________
I'm a PSP hacker now, but I still <3 DS.

FWNitro has a built in card dumper too

What, they're banning people now? Huh?

I am using a SuperCard SD and a SuperPass2, which automatically boots to the SuperCard in DS mode. I have tried to use the IPS patch on a clean dump, but I only get two white screens. Does anyone know anything that can help me?

Hey, does anyone know where I can find the patch (for FlashMe + SuperCard, similar to the MKDS_Hack.nds posted earlier in this topic) that allows me to play the battle mode courses online? I know it would be really weird and wouldn't actually play in battle mode, but I want to play it just to test it out and glitch around with friends and friends only. Thanks to anyone who helps...

So has anyone been able to figure out how to change the WIFI track list with only a dumped ROM?

I think this would definatly be useful for the mods that I have been trying to make towards the ROM itself (yes, it's dumped; No illegal action). I have been able to access, and run, BETA courses, which is fairly easy.

But my main priority is to change the "stats" of the karts. And to do that, I use a running ROM of the game.

So again I ask: Has it been figured out, or released, on how to modify the WIFI Track List using only a ROM, and not the Game-Card also?

Parasyte said It would be a lot of work, something about decompressing the ARM7 executable and hacking it.
_________________

dualscreenman wrote:

What about Gaim DS? Gaim pretty much has support for all IM programs.

tepples wrote:

"Goshdammit, the DS is not a Gaim-boy! It's a third pillar!"

All kart physical parameters appear to be stored in a carc along with the model file for the karts and characters used during the races.

Hi,
i dont really understand how to do that i can play the hidden tracks (like old_mario_gc) offline on supercard cf.
i have got the rom, IPSWin2.0, the IPS Patch and a Hex Editor.
Can anyone explain me how i can do that ?
sorry for my bad english im german

Okay, first off, you'll need DSLazy to unpack the ROM.

Use the "Unpack" feature of DSLazy on the ROM. Then, Navigate the folder created to \NDS_UNPACK\data\data\courses.

Now you should be in a folder named "course."

- Make a copy of the hidden course you want to play.

- Delete the course you want the hidden course to replace to replace.

- Rename the copy of the hidden course to the deleted course.

- Using the "packer" feature of dslazy, repack the ROM and run on your Supercard.
_________________

dualscreenman wrote:

What about Gaim DS? Gaim pretty much has support for all IM programs.

tepples wrote:

"Goshdammit, the DS is not a Gaim-boy! It's a third pillar!"

the dslazy site isn't working over here, can you upload the latest version for me please?

Now i have extract the Rom and copied old_mario_gc to bank_course
and then i packed it again to a .nds file.Now i runned the Supercard Software and copied the files on my CF Card then i startet the Game select Yoshi Falls in Versus mode and i became two black screens.
what did i wrong ?

I don't know actually. Try it in time trials too. See if that works.

Oh, and about DSLazy, I'll try to see if I can upload it soon.
_________________

dualscreenman wrote:

What about Gaim DS? Gaim pretty much has support for all IM programs.

tepples wrote:

"Goshdammit, the DS is not a Gaim-boy! It's a third pillar!"

I Tried all Modes, always black screens.
Is there no other way ? Or do i anything wrong ?

gamerply5 wrote:

I am using a SuperCard SD and a SuperPass2, which automatically boots to the SuperCard in DS mode. I have tried to use the IPS patch on a clean dump, but I only get two white screens. Does anyone know anything that can help me?

Only works with the actual cart, AFAIK. Go out and buy it.

Nope. You actually need a dumped copy so you can edit it and run it from the flashcart.

Chris: Try changing the texture carc's too.
_________________

dualscreenman wrote:

What about Gaim DS? Gaim pretty much has support for all IM programs.

tepples wrote:

"Goshdammit, the DS is not a Gaim-boy! It's a third pillar!"

ssj4android wrote:

gamerply5 wrote:

I am using a SuperCard SD and a SuperPass2, which automatically boots to the SuperCard in DS mode. I have tried to use the IPS patch on a clean dump, but I only get two white screens. Does anyone know anything that can help me?

Only works with the actual cart, AFAIK. Go out and buy it.

I do have the original cart and I have flashed my DS. Does anybody know how to get the hacks to work on the original cart or on a clean rom dump on a supercard?

There was an IPS patch floating around for patching rom dumps of the game.

hmmm... yeah I realize I'm doing a bit of necromancy here with this dead topic, but I think this may be usefull...

After doing a bit of browsing for the patch (with no success) I found this guy (he wants to remain anonymous) who has the patch. After suggesting he put it online, I gave him a little webspace and he is now offering the ips patch for download.

I'm not to sure about the specs, but the patch works for my US rom... not to mention it is the only one I've found that is still online.

www.darknovagames.com/Hx0r/
_________________
I'm a bomb technitian. If you see me running, try to keep up ;)

gbadev.org forum archive

DS Misc > Play extra Mario Kart tracks online

#63221 - josath - Sat Dec 10, 2005 4:22 am

#63226 - MaHe - Sat Dec 10, 2005 9:00 am

#63254 - Habeeb1000 - Sat Dec 10, 2005 5:37 pm

#63260 - Dude-man - Sat Dec 10, 2005 7:47 pm

#63359 - josath - Mon Dec 12, 2005 10:27 am

#63423 - Empyrean - Tue Dec 13, 2005 12:20 am

#63595 - josath - Wed Dec 14, 2005 9:44 pm

#63603 - Filb - Wed Dec 14, 2005 11:50 pm

#63619 - josath - Thu Dec 15, 2005 1:51 am

#63645 - IxthusTiger - Thu Dec 15, 2005 6:46 am

#63646 - tepples - Thu Dec 15, 2005 6:52 am

#63649 - MaHe - Thu Dec 15, 2005 8:05 am

#63652 - IxthusTiger - Thu Dec 15, 2005 8:26 am

#63653 - josath - Thu Dec 15, 2005 8:44 am

#63824 - adrian783 - Fri Dec 16, 2005 5:05 pm

#63868 - Filb - Sat Dec 17, 2005 1:31 am

#63876 - IxthusTiger - Sat Dec 17, 2005 2:54 am

#63895 - Filb - Sat Dec 17, 2005 10:36 am

#63911 - Stan64 - Sat Dec 17, 2005 4:17 pm

#63915 - m2pt5 - Sat Dec 17, 2005 5:01 pm

#64376 - Cbass182 - Wed Dec 21, 2005 8:23 pm

#64383 - pepsiman - Wed Dec 21, 2005 9:38 pm

#64393 - natrium42 - Wed Dec 21, 2005 11:14 pm

#64394 - Empyrean - Wed Dec 21, 2005 11:19 pm

#64412 - Cbass182 - Thu Dec 22, 2005 4:01 am

#64524 - Hypershell - Fri Dec 23, 2005 6:57 am

#64565 - dualscreenman - Fri Dec 23, 2005 4:38 pm

#64577 - tepples - Fri Dec 23, 2005 6:24 pm

#64578 - Hypershell - Fri Dec 23, 2005 6:29 pm

#64584 - dualscreenman - Fri Dec 23, 2005 8:02 pm

#64594 - RAB_DS - Fri Dec 23, 2005 10:14 pm

#64599 - natrium42 - Fri Dec 23, 2005 10:52 pm

#64609 - RAB_DS - Sat Dec 24, 2005 2:39 am

#64615 - chishm - Sat Dec 24, 2005 8:34 am

#64637 - JaJa - Sat Dec 24, 2005 3:32 pm

#64681 - chishm - Sun Dec 25, 2005 11:58 am

#64682 - Filb - Sun Dec 25, 2005 12:35 pm

#64711 - Hypershell - Sun Dec 25, 2005 10:54 pm

#64721 - fun41 - Mon Dec 26, 2005 12:46 am

#64725 - Hypershell - Mon Dec 26, 2005 1:40 am

#64733 - mntorankusu - Mon Dec 26, 2005 3:47 am

#64809 - RAB_DS - Mon Dec 26, 2005 11:28 pm

#64823 - BossLarge - Tue Dec 27, 2005 2:40 am

#64824 - Empyrean - Tue Dec 27, 2005 3:08 am

#64831 - Hypershell - Tue Dec 27, 2005 7:21 am

#64837 - ProdigySim - Tue Dec 27, 2005 10:12 am

#64845 - MaHe - Tue Dec 27, 2005 1:15 pm

#64973 - dualscreenman - Thu Dec 29, 2005 1:20 am

#64983 - tepples - Thu Dec 29, 2005 4:09 am

#65032 - dexter0 - Thu Dec 29, 2005 6:19 pm

#65069 - Empyrean - Fri Dec 30, 2005 12:07 am

#65096 - chishm - Fri Dec 30, 2005 2:03 am

#65110 - ProdigySim - Fri Dec 30, 2005 6:56 am

#65111 - chishm - Fri Dec 30, 2005 7:12 am

#65112 - ProdigySim - Fri Dec 30, 2005 7:24 am

#65122 - JaJa - Fri Dec 30, 2005 11:32 am

#65123 - MaHe - Fri Dec 30, 2005 11:41 am

#65131 - JaJa - Fri Dec 30, 2005 3:12 pm

#65142 - dualscreenman - Fri Dec 30, 2005 4:52 pm

#65335 - noname224 - Mon Jan 02, 2006 3:18 am

#65576 - noname224 - Wed Jan 04, 2006 1:49 am

#65577 - natrium42 - Wed Jan 04, 2006 2:00 am

#65580 - noname224 - Wed Jan 04, 2006 2:40 am

#65595 - MaHe - Wed Jan 04, 2006 8:10 am

#65607 - chishm - Wed Jan 04, 2006 10:07 am

#65614 - mntorankusu - Wed Jan 04, 2006 12:06 pm

#65622 - Mithos - Wed Jan 04, 2006 1:01 pm

#65625 - mntorankusu - Wed Jan 04, 2006 1:26 pm

#65629 - MaHe - Wed Jan 04, 2006 2:24 pm

#65632 - noname224 - Wed Jan 04, 2006 3:33 pm

#65638 - MaHe - Wed Jan 04, 2006 4:35 pm

#65652 - ChronoDK - Wed Jan 04, 2006 7:57 pm

#65675 - m2pt5 - Wed Jan 04, 2006 11:00 pm

#65682 - mntorankusu - Wed Jan 04, 2006 11:40 pm

#65717 - dexter0 - Thu Jan 05, 2006 5:09 am

#65729 - ChronoDK - Thu Jan 05, 2006 8:17 am

#65757 - CubeGuy - Thu Jan 05, 2006 3:07 pm

#65786 - pepsiman - Thu Jan 05, 2006 6:43 pm