Hacking NTR CFW 3.0!

[Kirbs]

there
169bffff is less than 16CBE7D4

So that means I can't use the ar code, or do I have to write it differently?

 

[MopSec]

ok here are the memregions:
valid memregions:
00100000 - 00495fff , size: 00396000
08000000 - 09269fff , size: 0126a000
0ffc0000 - 10000fff , size: 00041000
10002000 - 10002fff , size: 00001000
14000000 - 169bffff , size: 029c0000
end of memlayout.

Well 16C....is bigger than 169... which means that it is, in fact, out of range. You need to dump the data at 0x00100000 and 0x08000000 to find the data you want

 

[froggestspirit]

So the data greater than the 14000000 range is in either 08000000 or 00100000?

 

[MopSec]

So the data greater than the 14000000 range is in either 08000000 or 00100000?

That's what I've read on here, I personally never had any addresses that were out of range

 

[Kirbs]

Well 16C....is bigger than 169... which means that it is, in fact, out of range. You need to dump the data at 0x00100000 and 0x08000000 to find the data you want

So I have to find the ar code myself then? How can I use cheat engine to find the correct offset?

 

[dsrules]

So I have to find the ar code myself then? How can I use cheat engine to find the correct offset?

dump memory and search with cheatengine

 

[Kirbs]

means you need to search in other memory region 08000000 or 00100000

edit: quoted the wrong post lol

I tried both of those memory regions and it still didn't work.

--------------------- MERGED ---------------------------

dump memory and search with cheatengine

ok, I'll search with cheat engine and see if I find the correct value.

 

[dsrules]

.

I tried both of those memory regions and it still didn't work.

you mean you changed the address to those regions then write, or find the address then write

 

[Kirbs]

you mean you changed the address to those regions then write, or find the address then write

I changed the address to those regions then I wrote.

 

[dsrules]

I changed the address to those regions then I wrote.

wish it was that easy

here's a formula for arcodes that are out of ntr memory region, no guarantee this will work on all games, but at least it will give an idea on which region the codes can be found in

Spoiler

arcode 0x16CBE7D4

ntr valid memregions:
08000000 - 09269fff , size: 0126a000
14000000 - 169bffff , size: 029c0000// round 169C0000 to the next 16x00000 value = 16A00000
end of memlayout.

0x16CBE7D4 - 16A00000 = 0x002BE7D4 + 08000000 = 082BE7D4 (with in 08000000 - 09269fff range),
if out of ( 08000000 - 09269fff) range then search the code in 00100000 region

face values like Money should take only 1 or 2 memory dumps to find if dumped the correct region

 

[Kirbs]

.

you mean you changed the address to those regions then write, or find the address then write

wish it was that easy

here's a formula for arcodes that are out of ntr memory region, no guarantee this will work on all games, but at least it will give an idea on which region the codes can be found in

Spoiler

arcode 0x16CBE7D4

ntr valid memregions:
08000000 - 09269fff , size: 0126a000
14000000 - 169bffff , size: 029c0000// round 169bffff to the next 16x00000 value = 16A00000
end of memlayout.

0x16CBE7D4 - 16A00000 = 0x002BE7D4 + 08000000 = 082BE7D4 (with in 08000000 - 09269fff range),
if out of ( 08000000 - 09269fff) range then search the code in 00100000 region

face values like Money should take only 1 or 2 memory dumps to find if dumped the correct region

ok, I'll dump the memory and report back.

 

[dsrules]

ok, I'll dump the memory and report back.

try 082BE7D4

 

[Kirbs]

try 082BE7D4

It worked! Thanks for your help! How did you do it? I would also like to use this ar code: 02CBF3B0 00000012

 

[dsrules]

It worked! Thanks for your help! How did you do it? I would also like to use this ar code: 02CBF3B0 00000012

I've already posted the formula in the above post

 

[Kirbs]

I've already posted the formula in the above post

oh, sorry I sort of got sidetracked but, thank you so much for your help!

 

[dsrules]

oh, sorry I sort of got sidetracked but, thank you so much for your help!

0x16CBE7D4 - 16A00000 = 0x002BE7D4 + 08000000 = 082BE7D4
now, for this game you already know 0x16C = 082
so just replace 0x16C with 0x082

 

[Kirbs]

0x16CBE7D4 - 16A00000 = 0x002BE7D4 + 08000000 = 082BE7D4
now, for this game you already know 0x16C = 082
so just replace 0x16C with 0x082

ok, thanks I'll be sure to remember this.

 

[froggestspirit]

I heard that 03979C5C is the address for the trainers hat type in X. I can't find it for Y

 

[bache]

Is there a tutorial somewhere for all of this cheat stuff? I'd like to start using cheats, but have no idea how to find the correct memory addresses/processes.

 

[MelonGx]

Well, I don't know if this thread gets 44670's permission for discussing everything about NTR 3.0.

If not, I'll not say the method of playing other-region-DLC on rxTools or other CFWs via NTR 3.0.