Hacking Finding 3ds offset and convert to ntr cheat plugin

[Amuyea]

Hello everyone,

I recently bought N3DSXL and it's on latest version 11.6.0-39U with CFW Installed.

I'm trying to get in 3ds hacking scene, but not able to. You see, I wanted to find the offsets/address on 3ds game then convert ntr patch and patch to ntrboot's game plugins. But how can I do this? There are many different ways to do this or the tutorial for x is not there.

I have Mac (used alot) and if it's possible to do on Windows then fine.

 

[Sonansune]

simple "value lock" type cheats can be done with ram search + pointer research sometime.
advance cheats require break/watch point debugging with citra, ntr and luma. (RE skills needed. or understand arm ASM at least..)

 

[Amuyea]

I did use citra and cheat engine and I successfully hacked it, but not sure about what's next.

 

[Sonansune]

I did use citra and cheat engine and I successfully hacked it, but not sure about what's next.

you can do it with ctrfp on 3ds. if you are just searching for a bunch of value and trying to modify it...
citra "ram" does not allocate the same way as 3ds. any offset you found with citra, require additional calculation.

 

[Amuyea]

you can do it with ctrfp on 3ds. if you are just searching for a bunch of value and trying to modify it...
citra "ram" does not allocate the same way as 3ds. any offset you found with citra, require additional calculation.

What is ctrfp and How can I do this?

 

[EvieMaye]

Ctrpf is Ctr Plugin Framework. it's a plugin that can find and make ar codes for games. it requires a version of luma that loads plugins. or you can use ntr boot, but i find pluggin enabled luma to be more convenient since it doesn't require you to run an app at startup everytime. it's a set once and forget.

Here's the link to get it installed. there's basically two methods you can use. Ntrboot, or luma with pluggin support.
https://github.com/JourneyOver/CTRPF-AR-CHEAT-CODES

Also i want to point out that you will likely need to reboot your 3ds after every game. sometimes you do, sometimes you don't. because it will hang at the 3ds logo when launching a game. i'm not sure why this happens. it seems to happen whether you use ntr or pluggin enabled luma.

Also if you use both pluggin enabled luma and ntr, then ntr will be disabled and pluggin luma will run instead. you have to disable pluggin loading in the rosalina menu if you want to use ntrboot.