Hacking Badge Arcade Cheating with Gateway

[HappyzLife]

I don't think you did anything wrong, I've also got an old 3ds (EUR) and this address doesn't work with my gateway either [emoji6]

Oh, so i can just change write(0xTHIS,(0x04,0x00), pid=0x??) with the code who i found here? >

(ps: excuse me for the double post, i didn't want D

 

[Simone]

The Code for Activate the Real catcher is

[EU N3DS - Unlock Catcher L+UP]
DD000000 00000240
D3000000 3646B23C
20000000 00000004
D2000000 00000000

But the offset for Add plays today is 3646B24C

[EU N3DS - Press L+Down to stop]
DD000000 00000280
D3000000 3646B24C
00000000 00000000
D0000000 00000000

 

[HappyzLife]

15/01/2016 NTR CODE (thanks @Godson777)

EUR-o3ds

Unlock 5 Plays
write(0x3286B23C,(0x04,0x00), pid=0x??)

Set 99 Plays
write(0x3286B24C,(0x64,0x00), pid=0x??)

EUR-n3ds

Unlock 5 Plays
write(0x3646B23C,(0x04,0x00), pid=0x??)

Set 99 Plays
write(0x3646B24C,(0x64,0x00), pid=0x??)

 

[Godson777]

So, I think I'm the only one who's noticed this. But there's a pattern. A pattern for all the codes.

Old3DS codes always start with 328
New3DS codes always start with 364

Today's EUR-N3DS play code: 3646B24C
Today's EUR-O3DS play code: 3286B24C

With this, anyone can translate a code from one region, to another system by simply changing the first three numbers.

I'll also mention something else I pointed out earlier again.

Unlock codes are always 16 less than the play code.

Today's US-N3DS play code: 364686CC
Today's US-N3DS unlock code: 364686BC

Hopefully this makes hunting down badge addresses far more easier.

 

[urherenow]

WTF are you talking about there's no point in making a cheat code? The point is to be able to get all the new shit each time the offsets change. You say that and then give a detailed explanation about how to find cheat codes.

No, I didn't. I gave an explanation on how to find the address. It's pointless to make a cheat code when a day or two later some new guy will come in crying about why your code doesn't work. You don't need one. Just edit the address directly when you find it. The Gateway system is good like that

[Press L + Left for 99 plays RealCatcher]
DD000000 00000240
D3000000 3286B24C
00000000 00000063
D0000000 00000000

[Press L + Down to stop playing]
DD000000 00000280
D3000000 3286B24C
00000000 00000000
D0000000 00000000
[/CODE]

Why are you writing 32 bits for an 8 bit number? This could be dangerous...

e.g. use this instead:

[Press L + Left for 99 plays RealCatcher]
DD000000 00000240
D3000000 3286B24C
20000000 00000063
D0000000 00000000

 

[Localhorst86]

Why are you writing 32 bits for an 8 bit number? This could be dangerous...

The address in question is actually 32bit. If you write 32bit value of FFFFFFFF to that address it won't hurt you, except for the fact that you're still gonna be playing in a few weeks because you just set your number of plays to 4,294,967,295.

That's not trying to object to your valid concern, just a note that in this case it definitely doesn't break anything. I agree with you, using a 32bit write here when, reasonably, we only need 8bits (in a sane environment the three other 24 other bits will always be 0 anyways) is overkill. But then again, you could argue that you want to be 100% sure they will be 0, so you set them regardless using a 32bit write. One can argue both ways here.

 

[urherenow]

The address in question is actually 32bit. If you write 32bit value of FFFFFFFF to that address it won't hurt you, except for the fact that you're still gonna be playing in a few weeks because you just set your number of plays to 4,294,967,295.

That's not trying to object to your valid concern, just a note that in this case it definitely doesn't break anything. I agree with you, using a 32bit write here when, reasonably, we only need 8bits (in a sane environment the three other 24 other bits will always be 0 anyways) is overkill. But then again, you could argue that you want to be 100% sure they will be 0, so you set them regardless using a 32bit write. One can argue both ways here.

My argument is for newbs writing code and not realizing what they're doing. Take for example a game similar to MH, where there are all kinds of items that you need to collect to craft things. Then consider that there is a block of consecutive addresses that hold the number of each item. Then suppose that the very first address is the location of that hard to get item, so you write a 32 bit code to give yourself 50 of them.

But wait... you just erased the next 3 items in the process!
It's super important to develop good practices from the beginning. What if a value you're messing with (such as an address that controls how high you jump in a game) is surrounded by executable code, or code that is otherwise used for important calculations in execution? You can wreak havoc to the system.

 

[Localhorst86]

My argument is for newbs writing code and not realizing what they're doing. Take for example a game similar to MH, where there are all kinds of items that you need to collect to craft things. Then consider that there is a block of consecutive addresses that hold the number of each item. Then suppose that the very first address is the location of that hard to get item, so you write a 32 bit code to give yourself 50 of them.

But wait... you just erased the next 3 items in the process!
It's super important to develop good practices from the beginning. What if a value you're messing with (such as an address that controls how high you jump in a game) is surrounded by executable code, or code that is otherwise used for important calculations in execution? You can wreak havoc to the system.

I do not object to your argument in general, I am just pointing out that your example of using the number of real plays is not an optimal choice as the address in question *IS* 32 bit and you might have (though paranoid) reasons to write the full 4 bytes.

 

[urherenow]

I do not object to your argument in general, I am just pointing out that your example of using the number of real plays is not an optimal choice as the address in question *IS* 32 bit and you might have (though paranoid) reasons to write the full 4 bytes.

Edit: derp. Don't mind me. It's late in Japan

 

[soaresden]

I think we are done in the G.Sheets file... Feel free to modify and update the codes
if anything is not working (functionnaly speaking), let us know here

Hope you @ appreciate this

 

[DaftMink]

Can anyone post the GW codes for the O3DS USA ?.
Thanks.

 

[Sirence]

Practice 32C2535C
Real 3286B24C

Thanks but I meant the unlock code to start playing. I really appreciate your help though, thank you!

 

[Wilsonec]

Thanks but I meant the unlock code to start playing. I really appreciate your help though, thank you!

3286B23C

check the spreadsheet in future

 

[Sirence]

3286B23C

check the spreadsheet in future

Nice, I will! Thank you a lot.

 

[aos10]

Can anyone post the GW codes for the O3DS USA ?.
Thanks.

real address 328686CC
unlock code 328686BC

--------------------- MERGED ---------------------------

PM'd the OP to get it added to the first page of the thread

R. Address is real address ? so T. Address is for training ?

 

[Godson777]

real address 328686BC
unlock code 328686CC

uh. Other way around. Plays is CC, unlock is BC.

And yes, T. Address is training.

 

[aos10]

uh. Other way around. Plays is CC, unlock is BC.

thank , i was copying and pasting my cheat file.

 

[Slade.AU]

The address in question is actually 32bit. If you write 32bit value of FFFFFFFF to that address it won't hurt you, except for the fact that you're still gonna be playing in a few weeks because you just set your number of plays to 4,294,967,295.

At least you won't miss out on the badges !

 

[DjoeN]

Decided to give it a go on my O3DS for fun but when opening "Configure Cheats" i always get Could not load cheats!?

Made a txt file gave it the name for EU O3DS - 0004000000153600.txt
placed all files from the spreadsheet in there, so it looks exactly like the other gateway cheats
placed 0004000000153600.txt in the cheats folder in the root of the sd

[EDIT]
Nevermind
cheats goes on the Gateway SD :/

 

[DarkenedMatter]

There is no new badges for me today.