Hacking [Release]NTR CFW 3.2 with experimental Real-Time Save feature.

Status
Not open for further replies.

zdgr4ye5

Well-Known Member
Newcomer
Joined
Nov 7, 2014
Messages
90
Trophies
0
Age
34
XP
168
Country
United States
I really love NTR cfw, I use it with pasta cfw on my japan system.
But I cant get - why pasta loads with 100% success, and NTR not?
 
  • Like
Reactions: Margen67

tyrran

Well-Known Member
Newcomer
Joined
May 17, 2008
Messages
84
Trophies
0
XP
360
Country
United States
I really love NTR cfw, I use it with pasta cfw on my japan system.
But I cant get - why pasta loads with 100% success, and NTR not?


NTR relies on connecting to the internet and downloading the package everytime. If there is anything temperamental with your internet, it will fail and hang. You sometimes have to try a few times before it connects and executes correctly.
 

Kuifa

Well-Known Member
Newcomer
Joined
Feb 22, 2015
Messages
95
Trophies
0
Age
31
XP
152
Country
NTR relies on connecting to the internet and downloading the package everytime. If there is anything temperamental with your internet, it will fail and hang. You sometimes have to try a few times before it connects and executes correctly.
But I can run NTR with Internet disabled... Isn't the installation part that requires the internet connection?
 
  • Like
Reactions: Margen67

tyrran

Well-Known Member
Newcomer
Joined
May 17, 2008
Messages
84
Trophies
0
XP
360
Country
United States
But I can run NTR with Internet disabled... Isn't the installation part that requires the internet connection?


I'm fairly certain you need an internet connection to launch NTR everytime. Not just install, actually running it. To be honest, I've given up on NTR and gone the way of Pasta, so I'm not positive.
 
  • Like
Reactions: Margen67

urherenow

Well-Known Member
Member
Joined
Mar 8, 2009
Messages
4,794
Trophies
2
Age
48
Location
Japan
XP
3,698
Country
United States
So... new news on smealum's regionFOUR. Yellows8 made some changes that, with a bit of work, can lead to launching it from OOT instead of CN. Perhaps this knowledge can be adapted to NTR for non CN owners? (not begging; I own both games... just think it would be awesome for the community)

Edit: and I doubt this will be looked into since it involves .cia files, but .cia is the only way to use DLC from out of region games... anyway, I installed a .cia of DLC stuff for a certain Japanese game on my US console, and tried to use it (in conjunction with pastaCFW+NTR) but it did not show up in-game. But I just realized that is DOES show up in Gateway mode (I'm using sysnand for this, in case that wasn't obvious from the use of pasta and NTR)

Edit2: just realized I failed to make a point on edit1. What I was trying to get at, is that there might be another bit or two missing from the region-free patch since it doesn't seem to play nice with DLC and I think I had a bit of difficulty grabbing the latest update for xenoblade so the firmware spoof may be missing a little something as well...
 
  • Like
Reactions: cearp and Margen67

cearp

瓜老外
Developer
Joined
May 26, 2008
Messages
8,729
Trophies
2
XP
8,537
Country
Tuvalu
I'm fairly certain you need an internet connection to launch NTR everytime. Not just install, actually running it. To be honest, I've given up on NTR and gone the way of Pasta, so I'm not positive.

just like ninjhax, gw cn, and ntr 2, you only need internet to install the hack... it saves to the save files.
internet is only used that one time
 

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
Most games store their values inside 14000000, so it's a single dump.

Depending on what you are looking for, you'll find it fast or it needs time using cheat engine.

If you need help, we need the name of the game and what you are looking for.
 
  • Like
Reactions: Margen67

_eyCaRambA_

Well-Known Member
Member
Joined
Apr 22, 2009
Messages
525
Trophies
1
Location
Right around the corner™
XP
409
Country
United States
I've no issues with figuring out the addresses I'm looking for, I was rather asking if you found a way to determine the pointers for changing addresses (basically I'm asking if you found a solution for the "For a few games, the found offset is not fixed and you need to find it once per use." problem you described).
 
  • Like
Reactions: Margen67

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
The fastest way would be to dissassemlbe the code on how the game creates the memory array.

I'm not that much into cheating for myself, so i didn't investigate it ^_^
 
  • Like
Reactions: Margen67

_eyCaRambA_

Well-Known Member
Member
Joined
Apr 22, 2009
Messages
525
Trophies
1
Location
Right around the corner™
XP
409
Country
United States
Nevermind, figured it out I myself, sort of.
region1.00F8BB8C seems to work most of the time even after restarting the game (which is MH4U EU btw). I'm not sure what the game actually points to there but it's reliable enough to pin down various variables I played around with.

i.e.
region1.00F8BB8C+118 = max player HP bar value
region1.00F8BB8C+1442A = Monster 1 HP value
region1.00F8BB8C+206BA = Monster 2 HP value

But that's probably not directly related to this thread, just leaving this here if sb comes across a similar problem.
 

SlateXD

Well-Known Member
Member
Joined
Apr 22, 2013
Messages
173
Trophies
0
Age
32
XP
174
Country
United States
How to use NTR CFW + Debugger with ARCode Cheats

You need:

- A retail Cartridge or legit CIA buyed from eShop
(unsigned cia works with pre bootet PASTA CFW)
- Cubic Ninja with NTR QR Code
- NTR.BIN in root folder of internal memorycard
- Create empty file 'debug.flag' in root folder of internal memorycard
- NTR Debugger
- Activated WLAN with Internet and a PC in the same Network

debug.flag or activate it inside NTR Menu (press X+Y)

Used Commands:

To connect to your console's IP use:
connect('XXX.XXX.XXX.XXX', 8000)

A few games disconnect wlan when playing movie / loading,
if that happens, don't close NTR Debugger, re-connect it!

To get your App/Game's PID:
listprocess()

Example MH4U-EUR:
(pid: 0x00000028, pname: redgiant, tid: 0004000000126100)

PID might change once per boot!

You can find TitleID's for games here: http://3ds.essh.co/

To write your value:
write(0x<OFFSET>, (0x<VALUE>, 0x<VALUE> ,0x<VALUE> ,0x<VALUE>), pid=0x<PID>)

OFFSET = Cheat Offset // VALUE = The Value you want to write // PID = The Apps/Games Process ID

NTR Debugger:

- Start Cubic Ninja and execute NTR Exploit
- Start your desired game
- Start NTR Debugger on PC
- Connect NTR Debugger Example: connect('192.168.1.100', 8000)
- To get the PID, write listprocess() and look for your Games TitleID (TID)

As example i took PID 0x28.

Now how to use ARCode:

Example ARCode
-=[Paper Mario Sticker Star]=-
$9999
02CBCE9C 0000270F

NTR will be 14000000 + ARCode Offset = OFFSET:
write(0x16CBCE9C, (0x0F>, 0x27 ,0x00 ,0x00), pid=0x28)

Depending on what you cheated, it might be necessary to
buy/sell,enter/exit map/house or gain exp to take affect.

To dump your games flash memory:

Additional Commands:

Display Apps/Games Memory Layout:
memlayout (pid=0xPID)

Example MH4U (EUR):
valid memregions:
00100000 - 0111dfff , size: 0101e000
08000000 - 0b13efff , size: 0313f000
0ffc0000 - 10000fff , size: 00041000
10002000 - 10002fff , size: 00001000
1e800000 - 1e9fffff , size: 00200000
end of memlayout.

You have to find the region where your value
belongs to! In most cases, it will be inside
the region that covers offset around 14000000!

To DUMP memoryregions:
data(0x<START OFFSET>, 0x<size>, filename='<name of the file>', pid=0x<PID>)

To find cheats:

Make as many dumps you need and use Cheatengine to find your offset.

Example:
Dump 01 > 1000
Dump 02 > 2000

To use Cheatengine with dumped files:
Press "Open Process", then press "Open File" and choose
your file. After searching, switch to the next dump.

To get the real offset from Cheatengine to NTR it's:
<START OFFSET> + <FOUND OFFSET> = <OFFSET>

To write the offset with your value (4 Bytes): (Example 50000 dec // 0000C350 Hex)
write(0x<OFFSET>, (0x50>, 0xC3 ,0x00 ,0x00), pid=0x<PID>)

To export the offset to ARCode (HEX):
<START OFFSET> + <FOUND OFFSET> - 14000000 = <ARCode OFFSET>

If the result is negative (<0), ARCode is unable to use the cheat!

For a few games, the found offset is not fixed and you need to find it once per use.

You are free to copy my Tutorial as long you share it for everyone!


Could you explain how i would input an ARCode into Fire Emblem Awakening using NTR Debugger in a bit of emphasis? For example this code :
Money:
009997D0 000F423F

Such as what i would write and how to do so, just a simple step by step so i can understand. I have a headache from reading your tutorial. I did my best to follow it!

Maybe i get it now, i add 14 to the 00, so it would be 149997D0 as offset, now i just need to do the rest and figure out the pid. right?
 
Status
Not open for further replies.

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • K3Nv2 @ K3Nv2:
    Jaws is on a diet
  • K3Nv2 @ K3Nv2:
    Damn power went out
  • BigOnYa @ BigOnYa:
    Ok xdqwerty, your little bro prob tripped On the cord and unplugged you
  • K3Nv2 @ K3Nv2:
    Ya I'm afraid of the dark hug me
  • BigOnYa @ BigOnYa:
    Grab and hold close your AncientBoi doll.
  • K3Nv2 @ K3Nv2:
    Damn didn't charge my external battery either
  • BigOnYa @ BigOnYa:
    Take the batteries out of your SuperStabber3000... Or is it gas powered?
  • K3Nv2 @ K3Nv2:
    I stole batteries from your black mamba
    +1
  • K3Nv2 @ K3Nv2:
    My frozen food better hold up for an hour I know that
  • BigOnYa @ BigOnYa:
    Or else gonna be a big lunch and dinner tomorrow.
  • BigOnYa @ BigOnYa:
    Did you pay your power bill? Or give all yo money to my wife, again.
  • K3Nv2 @ K3Nv2:
    Oh good the estimated time is the same exact time they just said
    +1
  • BigOnYa @ BigOnYa:
    Load up your pc and monitor, and head to a McDonalds dining room, they have free WiFi
  • K3Nv2 @ K3Nv2:
    Sir please watch your porn in the bathroom
    +2
  • BigOnYa @ BigOnYa:
    No sir we can not sell you anymore apple pies, after what you did with the last one.
  • K3Nv2 @ K3Nv2:
    We ran out
  • HiradeGirl @ HiradeGirl:
    for your life
    +1
  • K3Nv2 @ K3Nv2:
    My life has no value my fat ass is staying right here
  • K3Nv2 @ K3Nv2:
    Nearly 4 hours without power :(
  • Veho @ Veho:
    SO POWERLESS
  • K3Nv2 @ K3Nv2:
    Tell Kanye I need power
  • DinohScene @ DinohScene:
    Better start running in your hamster wheel
    DinohScene @ DinohScene: Better start running in your hamster wheel