Hacking NTR CFW 3.0!

[Intronaut]

Nooooo

nobody knows. The release says a ninjhax is a work in progress. and if you see the github page, you will check NTR is not using khax anymore. Maybe NTR will be compatible with Ninjhax 2.0, and maybe the arm 11 kernel hack it uses would be helpful to gain access to arm11 services like am:net

 

[Zidapi]

maybe its better the things as they are now. even as CIA, NTR still uses a kernelhax. AFAIK, making the project open source will notify nintendo about the internal hax

That's true. I'm of the belief that an exploit's source shouldn't be published until said exploits have been patched.

Wait A Minute Will This Work with 3ds 9.9??

No, and nothing in the post you quoted indicates otherwise. Where'd you get that idea?

 

[The_Meistro]

That's true. I'm of the belief that an exploit's source shouldn't be published until said exploits have been patched.


No, and nothing in the post you quoted indicates otherwise. Where'd you get that idea?

It said It suppported ALL 3DS versions

 

[dsrules]

It said It suppported ALL 3DS versions

if your 9.9 could install .cia

 

[The_Meistro]

O I understand.... That should be on its way though shouldn't it? .cia installation through ninjhax, Ironhax, etc.

 

[Zidapi]

It said It suppported ALL 3DS versions

No, it says "All model support!"(sic). It's talking about hardware eg. old3DS, new3DS and 2DS.

The only mention of software revisions is in this line "all region supported, most emunand version supported"

O I understand.... That should be on its way though shouldn't it? .cia installation through ninjhax, Ironhax, etc.

On systems running 9.2 lower perhaps, but not on your 9.9 system I'm afraid.

 

[The_Meistro]

No, it says "All model support!"(sic). It's talking about hardware old3DS, new3DS and 2DS.

The only mention of software revisions is in this line "all region supported, most emunand version supported"


On systems running 9.2 lower perhaps, but not on your 9.9 system I'm afraid.

I see.....

 

[guitarheroknight]

RE'd as in the full source is available for study and modification.

Sig-check patching isn't needed since the latest update introduced the .cia for launching from the homescreen. Obviously you need sig-checks patched to be able to launch it, so they remain patched in "NTR mode".

Well I do hope they get it to work with MSET or at least port the plugin engine to rxTools or GW.

 

[gudenau]

The launcher does not work for me on 9.5 reiNAND.

 

[thaikhoa]

The launcher does not work for me on 9.5 reiNAND.

What did you mean 'the launcher'? NTR 3.0 CIA works flawlessly on ReiNAND CFW 2.1.

 

[gudenau]

What did you mean 'the launcher'? NTR 3.0 CIA works flawlessly on ReiNAND CFW 2.1.

Not for me, it causes the home menu to cransh and triggers a reboot.

 

[MassExplosion213]

Could someone pm me that source?

 

[PandaMayFire]

I would love for both the Plugin engine and the screenshot function to be ported to RxTools. Then it would be the ultimate CFW

 

[hashcheck1]

Can anyone help me with these codes to use with ntrclient

LBX: Little Battle eXperience (U) Via Gateway
Infinity money
03599BF0 0098967F

valid memregions:
00100000 - 00302fff , size: 00203000
08000000 - 08000fff , size: 00001000
0ffff000 - 0fffffff , size: 00001000
end of memlayout.

17599bf0 ntr (03599BF0+14000000)

Can work out the code via ntr method)

Any ideas

 

[dsrules]

Can anyone help me with these codes to use with ntrclient

LBX: Little Battle eXperience (U) Via Gateway
Infinity money
03599BF0 0098967F

valid memregions:
00100000 - 00302fff , size: 00203000
08000000 - 08000fff , size: 00001000
0ffff000 - 0fffffff , size: 00001000
end of memlayout.

17599bf0 ntr (03599BF0+14000000)

Can work out the code via ntr method)

Any ideas

valid memregions looks so short
are you sure, you are using the correct pid for the game?

 

[hashcheck1]

I'm running rom via gateway card as i normally only cia my region stuff EUR for emunand and keep out of region games as 3ds on gateway. Maybe I should convert to cia. Title ID shows when list processes but I thought it looked short too as any other I have done had way more regions. (Most were cias though)

 

[dsrules]

I'm running rom via gateway card as i normally only cia my region stuff EUR for emunand and keep out of region games as 3ds on gateway. Maybe I should convert to cia. Title ID shows when list processes but I thought it looked short too as any other I have done had way more regions. (Most were cias though)

I don't think it matters with .3ds or .cia
If you power on, emunand, boot ntr then boot first game, the pid is always 28
If exit game then boot again or next game pid will increase by 2 or 3

 

[hashcheck1]

loaded lbx via gateway menu and listprocess () command shows

> listprocess ()
null
pid: 0x00000000, pname: fs, tid: 0000000000000000, kpobj: fff75c30
pid: 0x00000001, pname: loader, tid: 0000000000000000, kpobj: fff75ea0
pid: 0x00000002, pname: pm, tid: 0000000000000000, kpobj: fff76110
pid: 0x00000003, pname: sm, tid: 0000000000000000, kpobj: fff76380
pid: 0x00000004, pname: pxi, tid: 0000000000000000, kpobj: fff765f0
pid: 0x00000005, pname: ns, tid: 0004013000008002, kpobj: fff76860
pid: 0x00000006, pname: ptm, tid: 0004013000002202, kpobj: fff76ad0
pid: 0x00000007, pname: cfg, tid: 0004013000001702, kpobj: fff76d40
pid: 0x00000008, pname: gpio, tid: 0004013000001b02, kpobj: fff76fb0
pid: 0x00000009, pname: i2c, tid: 0004013000001e02, kpobj: fff77220
pid: 0x0000000a, pname: mcu, tid: 0004013000001f02, kpobj: fff77490
pid: 0x0000000b, pname: pdn, tid: 0004013000002102, kpobj: fff77700
pid: 0x0000000c, pname: spi, tid: 0004013000002302, kpobj: fff77970
pid: 0x0000000d, pname: ps, tid: 0004013000003102, kpobj: fff77be0
pid: 0x0000000e, pname: ErrDisp, tid: 0004003000008a02, kpobj: fff77e50
pid: 0x0000000f, pname: menu, tid: 0004003000009802, kpobj: fff780c0
pid: 0x00000010, pname: hid, tid: 0004013000001d02, kpobj: fff78330
pid: 0x00000011, pname: codec, tid: 0004013000001802, kpobj: fff785a0
pid: 0x00000012, pname: dsp, tid: 0004013000001a02, kpobj: fff78810
pid: 0x00000013, pname: am, tid: 0004013000001502, kpobj: fff78a80
pid: 0x00000014, pname: gsp, tid: 0004013000001c02, kpobj: fff78cf0
pid: 0x00000015, pname: qtm, tid: 0004013000004202, kpobj: fff78f60
pid: 0x00000016, pname: camera, tid: 0004013000001602, kpobj: fff791d0
pid: 0x00000017, pname: csnd, tid: 0004013000002702, kpobj: fff79440
pid: 0x00000018, pname: mic, tid: 0004013000002002, kpobj: fff796b0
pid: 0x00000019, pname: ir, tid: 0004013000003302, kpobj: fff79920
pid: 0x0000001a, pname: nwm, tid: 0004013000002d02, kpobj: fff79b90
pid: 0x0000001b, pname: socket, tid: 0004013000002e02, kpobj: fff79e00
pid: 0x0000001c, pname: http, tid: 0004013000002902, kpobj: fff7a070
pid: 0x0000001d, pname: ssl, tid: 0004013000002f02, kpobj: fff7a2e0
pid: 0x0000001e, pname: cecd, tid: 0004013000002602, kpobj: fff7a550
pid: 0x0000001f, pname: friends, tid: 0004013000003202, kpobj: fff7a7c0
pid: 0x00000020, pname: ac, tid: 0004013000002402, kpobj: fff7aa30
pid: 0x00000021, pname: boss, tid: 0004013000003402, kpobj: fff7aca0
pid: 0x00000022, pname: act, tid: 0004013000003802, kpobj: fff7af10
pid: 0x00000023, pname: news, tid: 0004013000003502, kpobj: fff7b180
pid: 0x00000024, pname: ndm, tid: 0004013000002b02, kpobj: fff7b3f0
pid: 0x00000025, pname: nim, tid: 0004013000002c02, kpobj: fff7b660
pid: 0x00000026, pname: dlp, tid: 0004013000002802, kpobj: fff7b8d0
pid: 0x00000039, pname: db1, tid: 0004000000147100, kpobj: fff7bb40
pid: 0x0000003a, pname: ro, tid: 0004013000003702, kpobj: fff7bdb0
end of process list.

the game is pid: 0x00000039, pname: db1, tid: 0004000000147100, kpobj: fff7bb40

> memlayout (0x25)
null
valid memregions:
00100000 - 00302fff , size: 00203000
08000000 - 08000fff , size: 00001000
0ffff000 - 0fffffff , size: 00001000
end of memlayout.

 

[dsrules]

loaded lbx via gateway menu and listprocess ()

pid: 0x00000039, pname: db1, tid: 0004000000147100, kpobj: fff7bb40

the game is pid: 0x00000039, pname: db1, tid: 0004000000147100, kpobj: fff7bb40

> memlayout (0x25)
null
valid memregions:
00100000 - 00302fff , size: 00203000
08000000 - 08000fff , size: 00001000
0ffff000 - 0fffffff , size: 00001000
end of memlayout.

you have played quite a few games after launched ntr
memlayout(0x39)

 

[hashcheck1]

Der forgot x39 instead of 0x25