Hacking Badge Arcade Cheating with Gateway

[marksteele]

Niiiice. Still trying to get that done on my cousin's 3DS. And then my internet decided to triple one of my posts, I'm starting to think today's not my day...

Might be possible to just use sysupdater without doing a format but I dunno, for sure back up emunand if ur gonna try that. I suspect there's a CIA file missing for the home menu (mine looked updated when I did the clean install and update)

 

[Godson777]

Might be possible to just use sysupdater without doing a format but I dunno, for sure back up emunand if ur gonna try that. I suspect there's a CIA file missing for the home menu (mine looked updated when I did the clean install and update)

Yeah I'm definitely gonna back it up. I mean, I already backed it up twice before I did some other stuff, I think a third time might do some good too. xD

Just to clarify (because I don't want to screw over his 3DS), I simply just go to Homebrew Launcher while on emuNAND and use sysUpdater?

edit: welp, nevermind, finally found a thread explaining the process. -.-

 

[marksteele]

Yeah I'm definitely gonna back it up. I mean, I already backed it up twice before I did some other stuff, I think a third time might do some good too. xD

Just to clarify (because I don't want to screw over his 3DS), I simply just go to Homebrew Launcher while on emuNAND and use sysUpdater?

I used the sysupdater cia but I assume the homebrew version would work as well?

I basically followed this guide

http://gbatemp.net/threads/tutorial-how-to-update-emunand-on-a-n3ds.393701/

 

[Localhorst86]

So an example would be
[What do I press and what does it do? ]
DD000000 00000240
D3000000 36468C4C
00000000 00000004
D0000000 00000000

for real plays on a US N3DS

Both codes for N3DS US

[L+UP unlocks real grabber and sets pay to 5]
DD000000 00000240
D3000000 36468C3C
20000000 00000004
D2000000 00000000

[R+Up adds 5 real plays]
DD000000 00000140
D3000000 36468C4C
DB000000 00000000
D4000000 00000005
D8000000 00000000
D2000000 00000000

(this one is quite iffy, Gateway apparently registers the button combo multiple times)

 

[Localhorst86]

Hey any idea how I can calculate the unlock play address for JP O3DS?

The practice play value is 32C2A5DC
The real play value is 32849ACC

Thanks in advance!

If the address for the real plays is 32849ACC

The address for unlocking is 32849ABC, just 0x10 down

 

[cearp]

If the address for the real plays is 32849ACC

The address for unlocking is 32849ABC, just 0x10 down

cool so with this we don't need to play the practice? nice!

--------------------- MERGED ---------------------------

The code works fine, interesting to know that it is simply one 0x10 addresses down to the real plays. since the offset between the trial plays and real plays seems to be always 0x3BA110, we can assume the unlock address is 0x3BA111 down from the number of practice plays.
Now all we need to do is find the pointer in the RAM dump that points to that adress.

(just be aware that this might be the offset for you but not the offset for every region

 

[Localhorst86]

yes,

If the address for the real plays is 32849ACC

The address for unlocking is 32849ABC, just 0x10 down

Yes, if we set the address to the value 04, the game apparently thinks we are just at that moment paying 1€/$/whatever for 5 plays. So we need to make it execute on a button combo. We need to be on the real grabber while doing this. Credits for finding the address go to @TheGreek Boy. Note that an 8 bit write is enough, no need to reak havoc with a 32bit write

Of course, as it is with badge arcade, these addresses can change rather shortly (maybe one week from now)

N3DS US:

[L+UP unlocks real grabber]
DD000000 00000240
D3000000 36468C3C
20000000 00000004
D2000000 00000000

N3DS Jap:

[L+UP unlocks real grabber]
DD000000 00000240
D3000000 36469ABC
20000000 00000004
D2000000 00000000

N3DS Eur:

[L+UP unlocks real grabber]
DD000000 00000220
D3000000 3646AD3C
20000000 00000004
D2000000 00000000

--------------------- MERGED ---------------------------

cool so with this we don't need to play the practice? nice!

--------------------- MERGED ---------------------------


(just be aware that this might be the offset for you but not the offset for every region

Yes, but it worked on the O3DS US and N3DS US so it is very safe to assume the offset will always be 0x10. That's just too close to have other data inbetween.

 

[WallK]

Are there a way to convert Gateway cheats to AR codes?

 

[TheGreek Boy]

here is my video how to unlock the catcher with my cheat code

 

[cearp]

here is my video how to unlock the catcher with my cheat code

I can't see the video, but why do we need it? anything special? don't we just press the button?

 

[plt2so6]

Anyone can explain where do i write the cheat i don't understand

 

[aos10]

yes,


Yes, if we set the address to the value 04, the game apparently thinks we are just at that moment paying 1€/$/whatever for 5 plays. So we need to make it execute on a button combo. We need to be on the real grabber while doing this. Credits for finding the address go to @TheGreek Boy. Note that an 8 bit write is enough, no need to reak havoc with a 32bit write

Of course, as it is with badge arcade, these addresses can change rather shortly (maybe one week from now)

N3DS US:

[L+UP unlocks real grabber]
DD000000 00000240
D3000000 36468C3C
20000000 00000004
D2000000 00000000

N3DS Jap:

[L+UP unlocks real grabber]
DD000000 00000240
D3000000 36469ABC
20000000 00000004
D2000000 00000000

N3DS Eur:

[L+UP unlocks real grabber]
DD000000 00000220
D3000000 3646AD3C
20000000 00000004
D2000000 00000000

--------------------- MERGED ---------------------------



Yes, but it worked on the O3DS US and N3DS US so it is very safe to assume the offset will always be 0x10. That's just too close to have other data inbetween.

any code for OG 3DS US ?

 

[Localhorst86]

any code for OG 3DS US ?

http://gbatemp.net/index.php?posts/5951186

 

[aos10]

N3DS US
Apparantly, these are for O3DS
[Unlock Catcher L+UP]
DD000000 00000240
D3000000 32868C3C
20000000 00000004
D2000000 00000000

Should do it, if the Adresses posted on Page 8 are the current ones.

I haven't tested it, im on EU. I simply used Binebina87's code and modified it (I am only doing an 8bit write, cause that's enough) and switched out the presumed address.

oh thanks , what should i name the cheat file ? i mean the id of this game

 

[Bimmel]

You must put it in the micro sd card where you store your 3ds/3dz games, the one for your GW card.
Not the big one. (inside the 3DS).

Be sure you have at least 1 free play.)
Activate it in the in the real play machine only, and not earlier. (optional press L or R to refresh the crane value.)

Oh and I recommend my tweaked version on page 4. It's more stable them my first one on page 2.

Thanks for the information, but nothing works out for me. I always get the error "could not load cheats" when I'm in GW cheat menu.

Here step by step what I do:

1. Download / Create a .txt file with the game ID and the code in it.
2. Put the .txt file on the root of the microSD card
3. Start EmuNAND
4. Open GW game menu, set cheat combination L + R
5. Start application
6. Press combination
7. Press configure cheats

Could not load cheats

..where did I go wrong?

 

[Localhorst86]

2. Put the .txt file on the root of the microSD card

..where did I go wrong?

There. You do not put it on the root of the SD card. You create a folder called cheats and put it there. Note that it has to be on the SD that fits in the red gateway card, not your 3DS SD card.

 

[Bimmel]

There. You do not put it on the root of the SD card. You create a folder called cheats and put it there. Note that it has to be on the SD that fits in the red gateway card, not your 3DS SD card.

Thanks. I tried that. Sadly, it's the same outcome.

To go into more detail, I tried the Mii Plaza cheat from Fort42.

It can't be that hard, can it?

 

[aos10]

Thanks for the information, but nothing works out for me. I always get the error "could not load cheats" when I'm in GW cheat menu.

Here step by step what I do:

1. Download / Create a .txt file with the game ID and the code in it.
2. Put the .txt file on the root of the microSD card
3. Start EmuNAND
4. Open GW game menu, set cheat combination L + R
5. Start application
6. Press combination
7. Press configure cheats

Could not load cheats

..where did I go wrong?

make sure the text file of the cheat is the same id of the game you are using
game id is different from US to EU to JP

 

[Bimmel]

make sure the text file of the cheat is the same id of the game you are using
game id is different from US to EU to JP

I feel like an idiot now. The downloaded text file had a wrong ID.

Thanks a bunch aos! And of course you too, Localhorst!

 

[Localhorst86]

I shall again point out that credit goes to @TheGreek Boy for finding the address. All I did do was meth... Err math