Hacking NTR CFW 3.0!

[hashcheck1]

> memlayout (0x2b)
null
valid memregions:
00100000 - 006acfff , size: 005ad000
06000000 - 06010fff , size: 00011000
07000000 - 07005fff , size: 00006000
08000000 - 08d7ffff , size: 00d80000
0e000000 - 0e000fff , size: 00001000
0e002000 - 0e002fff , size: 00001000
0e004000 - 0e005fff , size: 00002000
0e007000 - 0e008fff , size: 00002000
0fffc000 - 10000fff , size: 00005000
10002000 - 10002fff , size: 00001000
14000000 - 16bfffff , size: 02c00000
end of memlayout.

is memlayout now but i guess i can use arcode to ntr without making dumps as always out of region
Infinity money

03599BF0 0098967F

17599bf0 ntr

 

[dsrules]

> memlayout (0x2b)
null
valid memregions:
00100000 - 006acfff , size: 005ad000
06000000 - 06010fff , size: 00011000
07000000 - 07005fff , size: 00006000
08000000 - 08d7ffff , size: 00d80000
0e000000 - 0e000fff , size: 00001000
0e002000 - 0e002fff , size: 00001000
0e004000 - 0e005fff , size: 00002000
0e007000 - 0e008fff , size: 00002000
0fffc000 - 10000fff , size: 00005000
10002000 - 10002fff , size: 00001000
14000000 - 16bfffff , size: 02c00000
end of memlayout.

is memlayout now but i guess i can use arcode to ntr without making dumps as always out of region
Infinity money

03599BF0 0098967F

17599bf0 ntr

depends it's dynamic or not, at least my arcode address is different

17599bf0-16d00000+08000000

 

[hashcheck1]

depends it's dynamic or not, at least my arcode address is different

17599bf0-16d00000+08000000

trying now write(0x08899bf0, (0x7f, 0x96, 0x98, 0x00), pid=0x31)

nope didnt work still shows as same ammount of credits think i will just compile a ntrcheat plugin, the arcode i have may not work or dynamic like you said. thanks for the help

 

[dsrules]

trying now write(0x08899bf0, (0x7f, 0x96, 0x98, 0x00), pid=0x31)

nope didnt work still shows as same ammount of credits think i will just compile a ntrcheat plugin, the arcode i have may not work or dynamic like you said. thanks for the help

try the address I posted in the arcode thread, both person got the same address

 

[hashcheck1]

write(0x08a916f0, (0x7f, 0x96, 0x98, 0x00), pid=0x31)

nope its dynamic or not converting via ntr the same

 

[dsrules]

write(0x08a916f0, (0x7f, 0x96, 0x98, 0x00), pid=0x31)

nope its dynamic or not converting via ntr the same

I guess so
but, it should only need to make 2 memory dumps to find the money address, not too bad
or did you did the wrong math, my arcode address is smaller, so the converted address can't be larger than the previous code
0x175=0x088

 

[hashcheck1]

ARCODE:035916F0

I did 035916F0+01400000-16d00000+08000000
also I did 035916F0+01400000-16c00000+08000000

*Should 16d00000 be 16c00000

valid memregions:
00100000 - 006acfff , size: 005ad000
06000000 - 06010fff , size: 00011000
07000000 - 07005fff , size: 00006000
08000000 - 08d7ffff , size: 00d80000
0e000000 - 0e000fff , size: 00001000
0fffc000 - 10000fff , size: 00005000
10002000 - 10002fff , size: 00001000
14000000 - 16bfffff , size: 02c00000
end of memlayout.


write(0x089916f0, (0x7f, 0x96, 0x98, 0x00), pid=0x2b)

175916f0 − 16c00000 = 9916f0
9916f0 + 08000000 = 089916f0

 

[dsrules]

I did 035916F0+01400000-16d00000+08000000

which can't be = 0x08a916f0

 

[hashcheck1]

write(0x08a916f0, (0x7f, 0x96, 0x98, 0x00), pid=0x2d) nope still nothing how many credits should show?

ARCODE:035916F0

I did 035916F0+01400000-16d00000+08000000
also I did 035916F0+01400000-16c00000+08000000

*Should 16d00000 be 16c00000

valid memregions:
00100000 - 006acfff , size: 005ad000
06000000 - 06010fff , size: 00011000
07000000 - 07005fff , size: 00006000
08000000 - 08d7ffff , size: 00d80000
0e000000 - 0e000fff , size: 00001000
0fffc000 - 10000fff , size: 00005000
10002000 - 10002fff , size: 00001000
14000000 - 16bfffff , size: 02c00000
end of memlayout.

Should 16bfffff be + 1 which equals 16c00000 not 16d00000

also have not idea how you got 0x08a916f0 was using http://www.miniwebtool.com/hex-calculator/ so confused

 

[dsrules]

write(0x08a916f0, (0x7f, 0x96, 0x98, 0x00), pid=0x2d) nope still nothing how many credits should show?

ARCODE:035916F0

I did 035916F0+01400000-16d00000+08000000
also I did 035916F0+01400000-16c00000+08000000

*Should 16d00000 be 16c00000

valid memregions:
00100000 - 006acfff , size: 005ad000
06000000 - 06010fff , size: 00011000
07000000 - 07005fff , size: 00006000
08000000 - 08d7ffff , size: 00d80000
0e000000 - 0e000fff , size: 00001000
0fffc000 - 10000fff , size: 00005000
10002000 - 10002fff , size: 00001000
14000000 - 16bfffff , size: 02c00000
end of memlayout.

Should 16bfffff be + 1 which equals 16c00000 not 16d00000

also have not idea how you got 0x08a916f0 was using http://www.miniwebtool.com/hex-calculator/ so confused

02c+1=02d00000+14000000=16d00000
035916f0+14000000-16d00000+08000000=088916f0

 

[hashcheck1]

Yeah that's what I got originally but I thought you said it was 0x08a916f0.
So I got maths right which is reliving lol
0x088916f0.

Either way not working still have 100cr

 

[dsrules]

Yeah that's what I got originally but I thought you said it was 0x08a916f0.
So I got maths right which is reliving lol
0x088916f0.

Either way not working still have 100cr

that's why I said it might be dynamic
anyways, dump address 0x08800000 length 0x00200000 might find the address ends with F0

 

[hashcheck1]

Thanks for your help with dump later. It's the data command right?

 

[dsrules]

Thanks for your help with dump later. It's the data command right?

data(0x08800000, 0x00200000, filename='money100', pid=0xXX)

 

[hashcheck1]

I have noticed after writing and dumping that offset is not changing
data(0x08800000, 0x00200000, filename='money100', pid=0xXX)

hexworkshop
000916F0: 64000000000004 = 100credits
000916F0: 2C010000000006 = 300credits

Offset seems right but when writing ARCODE 03599BF0 0098967F
write(0x089916f0, (0x7f, 0x96, 0x98, 0x00), pid=0x31)
and dumping that offset doesn't change at 000916F0 in the dump

 

[dsrules]

I have noticed after writing and dumping that offset is not changing
data(0x08800000, 0x00200000, filename='money100', pid=0xXX)

hexworkshop
000916F0: 64000000000004 = 100credits
000916F0: 2C010000000006 = 300credits

Offset seems right but when writing ARCODE 03599BF0 0098967F
write(0x089916f0, (0x7f, 0x96, 0x98, 0x00), pid=0x31)
and dumping that offset doesn't change at 000916F0 in the dump

000916F0+08800000 = 088916F0 why do you write with 0x089916f0 address??

 

[mancasoko]

Is there any place or site for english cheat plugins(or at least one place with all plugins that are done so far) like it is on speedfly for japanese ones?

 

[Phil5004]

Will I still need Cubic Ninja to Install it? (New 3DS and OLD 3DS)

 

[hashcheck1]

That's a typo I did write to 088916F0. It's a Hotkey in ntrclient. Just writes not sticking now?

 

[Zidapi]

Is there any place or site for english cheat plugins(or at least one place with all plugins that are done so far) like it is on speedfly for japanese ones?

No, but there should be.

If someone wants to create a thread for NTR cheats over in ROM hacking, that'd be awesome!

I'm growing tired of scrolling through post after post of memory addresses in this thread.

Will I still need Cubic Ninja to Install it? (New 3DS and OLD 3DS)

Nope. Just install the launcher cia and you're good to go.