Hacking Any way to backup saves from retail 3DS carts to use with Sky3DS?

[Sharpzz]

Edit: Redundant post

 

[Sharpzz]

Got my Sky3DS and sucessfully transferred all my Card1 saves (over two dozens). Only need to have an original CardID and correct EEPROM ID size (may differ for several titles in the Sky3DS template). Save converter attached.

Where do I use the attacment?

 

[UsualNoise]

I ran the perl script on my save file (EEPROM) dumped via launcher.dat. However, it was not recognized still. I used a template file with my own private headers and IDs so I thought it would work. Are there any missing pieces that might be preventing it from working? The two carts I tried were Mario Kart 7 and Crosswords Plus - both failed.

Sharpzz - you'll need a perl interpreter to be able to run the script, they are freely available for download for various OSes. Once you have it installed rename it to skysave.pl and do:

perl skysave.pl <template file name> <save file / EEPROM> <cart code (e.g. AMKE for MK7)>

 

[duke_srg]

I ran the perl script on my save file (EEPROM) dumped via launcher.dat. However, it was not recognized still. I used a template file with my own private headers and IDs so I thought it would work. Are there any missing pieces that might be preventing it from working? The two carts I tried were Mario Kart 7 and Crosswords Plus - both failed.

Sharpzz - you'll need a perl interpreter to be able to run the script, they are freely available for download for various OSes. Once you have it installed rename it to skysave.pl and do:

perl skysave.pl <template file name> <save file / EEPROM> <cart code (e.g. AMKE for MK7)>

For Mario Kart there is two versions - 1.0 and 1.1 win integrated patch, saves are not compatible between them, so just try with the right rom.
For Crosswords Plus, check the EEPROM dump size, I suppose it is 128K, but template is for 512k saves and this matters!
Change C2 22 13 with C2 22 11, rewrite ROM to micro SD, restore save and try once again.

 

[UsualNoise]

For Mario Kart there is two versions - 1.0 and 1.1 win integrated patch, saves are not compatible between them, so just try with the right rom.
For Crosswords Plus, check the EEPROM dump size, I suppose it is 128K, but template is for 512k saves and this matters!
Change C2 22 13 with C2 22 11, rewrite ROM to micro SD, restore save and try once again.

Duke - I don't think the issue is with the Mario Kart version. I opened the result of your perl script (amke.sav) in a hex editor and after the initial header (which was correct) it was all 0xFF the rest of the way. For some reason it is not copying the original info from my sav file (which I viewed in the hex editor so I know it exists). Any idea why that might happen? Same deal with Crosswords, all 0xFF after the header (even after changing to C2 22 11).

 

[duke_srg]

Duke - I don't think the issue is with the Mario Kart version. I opened the result of your perl script (amke.sav) in a hex editor and after the initial header (which was correct) it was all 0xFF the rest of the way. For some reason it is not copying the original info from my sav file (which I viewed in the hex editor so I know it exists). Any idea why that might happen? Same deal with Crosswords, all 0xFF after the header (even after changing to C2 22 11).

It just must work, I've converted all my saves with that tool. Check your perl version

 

[UsualNoise]

GAH!!

I found my problem - the original save file was named AMKE.SAV, and the output file was ALSO named AMKE.SAV. I renamed the source to something else and it worked!! Got my MK7 save on Sky3DS. I'm stoked! Now to do the rest of my games. Huge thanks to you duke for providing the perl script to make this possible so easily.

 

[Fotonic]

For Mario Kart there is two versions - 1.0 and 1.1 win integrated patch, saves are not compatible between them, so just try with the right rom.

So it's better to use ROM 1.1 to avoid having to download the update and leaving more free space on the 3DS?

 

[duke_srg]

So it's better to use ROM 1.1 to avoid having to download the update and leaving more free space on the 3DS?

Yes, unless you have to transfer save data from your retail card with 1.0 rom. However even so you cantry both versions with your save. I have 1.0 retail save and was able to transfer only to the same version byt that was at the time I was experimenting with the template EEPROM sizes, so maybe the version is really does not matter.

 

[Fotonic]

Yes, unless you have to transfer save data from your retail card with 1.0 rom.

That's nice to know.
Just checked my ROM, it says CTR-P-AMKP so it should be v. 1.1.

 

[duke_srg]

That's nice to know.
Just checked my ROM, it says CTR-P-AMKP so it should be v. 1.1.

Check firmware version, they are both AMKP, but 1.1 is fw 4+

 

[Fotonic]

Check firmware version, they are both AMKP, but 1.1 is fw 4+

How do I check this?

Nevermind, found a tool to check the ROM...
It says: Firmware update: 4.3.0 (v4145)

Ok, CRC32 is the same of rev.1 ROM.

 

[UsualNoise]

One final question - more a curiosity than anything. How difficult would it be to convert from the Sky3DS save back to the version that could be copied back to the retail cart via launcher.dat browser exploit? I know a little perl but haven't programmed in it for quite a while.

 

[duke_srg]

One final question - more a curiosity than anything. How difficult would it be to convert from the Sky3DS save back to the version that could be copied back to the retail cart via launcher.dat browser exploit? I know a little perl but haven't programmed in it for quite a while.

If you played on the sky with the default template, only the repeat CTR fail encoded saves can be converted back because you can't change card Id of the retail card while save is cyphered with the key derived from it. Skip 88 bytes header in sky save and trim to the original 128 or 512 KB and you have the EEPROM dump.

 

[UsualNoise]

If you played on the sky with the default template, only the repeat CTR fail encoded saves can be converted back because you can't change card Id of the retail card while save is cyphered with the key derived from it. Skip 88 bytes header in sky save and trim to the original 128 or 512 KB and you have the EEPROM dump.

Prior to playing on the Sky3DS I manually created the template.txt file using some of the tools on this site and my own private card IDs. So it sounds like if I just trim the save to the original size (and remove the header) it should be compatible with the original cart. I'll give it a try sometime. Thanks!

 

[UsualNoise]

Just did it successfully. Chopped off first 88 bytes, then removed all the 0xFF at the end to bring it to the correct size. Then used launcher.dat exploit to restore to the original cartridge. It worked!! I now have a safe method of going back to the cartridge if needed, it looks like. Thanks again for the help, we might want to make this info a sticky / FAQ since it's the only way I've found so far to use original saves on Sky3DS (and vice-versa).

 

[thebib62]

Just did it successfully. Chopped off first 88 bytes, then removed all the 0xFF at the end to bring it to the correct size. Then used launcher.dat exploit to restore to the original cartridge. It worked!! I now have a safe method of going back to the cartridge if needed, it looks like. Thanks again for the help, we might want to make this info a sticky / FAQ since it's the only way I've found so far to use original saves on Sky3DS (and vice-versa).

Wait, so does this allow you to backup and restore save files to a 3DS game cartidge, even if it's not the same copy that you used for the Gateway 3DS?

For example, if I have 5 copies of a 3DS game, all brand new and sealed, this would allow me to write a gamesave to all copies of that game?

I ask this because I know before you were not able to do this, and now it seems like you can.

Thanks!

 

[UsualNoise]

Wait, so does this allow you to backup and restore save files to a 3DS game cartidge, even if it's not the same copy that you used for the Gateway 3DS?

For example, if I have 5 copies of a 3DS game, all brand new and sealed, this would allow me to write a gamesave to all copies of that game?

I ask this because I know before you were not able to do this, and now it seems like you can.

My original problem was dealing with the same cartridge. I was looking for a way to get the save of my cartridge into Sky3DS; this is what the perl script duke provided allowed me to do. I was able to go back the other way by just stripping off what that script added. I don't know if it would work with a different game, but if so you'd have to edit at least the private header / ID first. Someone more familiar with the compatibility between saves and games might have a more definitive answer.

 

[duke_srg]

Wait, so does this allow you to backup and restore save files to a 3DS game cartidge, even if it's not the same copy that you used for the Gateway 3DS?

For example, if I have 5 copies of a 3DS game, all brand new and sealed, this would allow me to write a gamesave to all copies of that game?

I ask this because I know before you were not able to do this, and now it seems like you can.

Thanks!

Saves with 1.0/repeat CTR fail encryption are compatible with any card of the title, while newer save encryptions based on the CardID unique for each physical game card, so save transfer is not possible.

 

[thebib62]

Saves with 1.0/repeat CTR fail encryption are compatible with any card of the title, while newer save encryptions based on the CardID unique for each physical game card, so save transfer is not possible.

I see. Is there a list that shows which games would be compatible?