--- /dev/null
+ntr_move_paths.bin - Patch ntr.bin with the pathhack but same paths as unmodified\r
+ntr_move_paths_to_3ds_ntr.bin - Patch ntr with pathhack, put everything normally on root in /3ds/ntr and use a modified BootNTR (not provided here)\r
+\r
+------------------------------------------------------------------------------\r
+\r
+The actual hack: add static buffers to the end of ntr.bin (256 each, FAT max) and patch refs to them keeping with the relocations (e.g. add 0x100100 to the offset rel to 0):\r
+ 0x3E624 - "/ntr.bin"\r
+ 0x2C44C: 24 E7\r
+ 0x3E724 - "/plugin/%s"\r
+ 0x2BC90: 24 E8\r
+ 0x3E824 - "/debug.flag"\r
+ 0x259B4: 24 E9\r
+ 0x3E924 - "/axiwram.dmp"\r
+ 0x267C4: 24 EA\r
+ 0x3EA24 - "/pid0.dmp"\r
+ 0x267CC: 24 EB\r
+ 0x3EB24 - "/pid2.dmp"\r
+ 0x267D0: 24 EC\r
+ 0x3EC24 - "/pid3.dmp"\r
+ 0x267D4: 24 ED\r
+ 0x3ED24 - "/pidf.dmp"\r
+ 0x267D8: 24 EE\r
+ 0x3EE24 - "/arm11.bin"\r
+ 0x28FE4: 24 EF\r
+\r
+Afterwards, null out the original strings.\r
+\r
+Short version - you can now modify the paths NTR uses, you're welcome. Pop it open in a hex editor and modify the end buffers as needed (they're all 256 chars) or someone code a pathchanger\r