Hacking Save game file back-up and testing (for digital download version)

[conanac]

I am not sure if this has been discussed before or not. This test is for Professor Layton and the Miracle Mask game, but I think the steps could be generalized to other games.

I am also preparing this for the Animal Crossing New Leaf game so that I could have more than one town.

If you have a digital download version, you could back-up your save game file to other storage device (like your PC hard-drive, or another SD-card, or USB flash-drive etc). Here are the steps that I did and worked (I have US version of 3DS):

1. Open your 3DS SD-card on PC (using Windows Explorer)
2. You will see two folders: one is labelled as "DCIM", and another one is labelled "Nintendo 3DS" (this is assuming you only use this SD-card for your 3DS)
3. Open the folder "Nintendo 3DS", and you will see two folders: one is labelled with a lot of hexadecimal numbers [let 's say folder X], and another one is labelled as "Private"
4. Open that folder X, and you will see a folder with a lot of hexadecimal numbers again [let's say folder Y]
5. Open that folder Y, and you will see three folders: (1) folder "dbs", (2) folder "extdata", and (3) folder "title"
6. Open that folder "title", and in my case (US 3DS), I have two folders: (1) folder "00040000", and (2) folder "00040002"
7. Open that folder "00040000", and you will see inside one of the folders with label "000a8500" (this is the folder for US digital version of Professor Layton and the Miracle Mask, I would expect/guess "000a8600" for EU version and "000a8400" for JP version)
8. Inside that game folder, you will see two folders: (1) folder "content", and (2) folder "data"
9. We are very close to the end step, now open folder "data", and inside this folder you will see a file named "00000001.sav" with the size about 128KB. This is the save game file that if you want you could back it up

I had tried copying that file to another SD-card, and then continued playing by solving more puzzles, and then saved it, and then re-copied back the older file from the other SD-card, and when I played it again, I was back to the point before solving the additional puzzles.

Do not try this yourselves if you are not comfortable with the risks. If you did perform the test, let me know if those steps work for you and what your game version (US, EU or JP).

Now, what I would like to test is that whether any players could use other player save game files.

Therefore, if any of you are willing to share your save game file (that "00000001.sav" file), that would be a great help.

 

[trumpet-205]

Do not try this yourselves if you are not comfortable with the risks. If you did perform the test, let me know if those steps work for you and what your game version (US, EU or JP).

Now, what I would like to test is that whether any players could use other player save game files.

Each save file on SD card is encrypted and signed with unique console key. It will never work on another 3DS system. Period.

 

[conanac]

Each save files is encrypted and signed with unique console key. It will never work on another 3DS system. Period.

Assuming the save game file works similarly for cartridge version, a player could play the game cartridge with associated save game file to another 3DS. What I understand is the digital version of the game content has the associated unique console key.
Perhaps I miss something here. Nevertheless, players then still could back-up the save game file for their own 3DS.

 

[trumpet-205]

Assuming the save game file works similarly for cartridge version, a player could play the game cartridge with associated save game file to another 3DS. What I understand is the digital version of the game content has the associated unique console key.
Perhaps I miss something here. Nevertheless, players then still could back-up the save game file for their own 3DS.

Cartridge stores save file on the cartridge and any additional game data on SD card. Save file stored on cartridge is encrypted by security chip inside the cartridge, hence no problem using it on another 3DS.

Save files created by digital copies (on SD card) are encrypted by 3DS itself, so you cannot use it on another 3DS system.

 

[3DSGuy]

Save file stored on cartridge is encrypted by security chip inside the cartridge, hence no problem using it on another 3DS.

There is no "security chip" inside game cartridges. It's true that cartridge save games are encrypted, but encryption/decryption is handled on the 3DS.

 

[Pong20302000]

There is no "security chip" inside game cartridges. It's true that cartridge save games are encrypted, but encryption/decryption is handled on the 3DS.

could you not use one of the saves that we have the decryption for, then transfer it, get the save file off the internal system, - the save encryption and compare the raw unencrypted save from the cart and compare to the one on the system which has the basic save encryption removed, the remains to see the console code encryption?

id assume not, just thinking out loud

 

[Eerpow]

could you not use one of the saves that we have the decryption for, then transfer it, get the save file off the internal system, - the save encryption and compare the raw unencrypted save from the cart and compare to the one on the system which has the basic save encryption removed, the remains to see the console code encryption?

id assume not, just thinking out loud

Different encryptions, we have been able to decrypt some saves already, but we can't modify them without the system not recognizing the saves afterwards. We can't even back-up and reuse the saves in newer 3DS games anymore as it results in "this save is corrupted" errors.

 

[Silverthorn]

Different encryptions, we have been able to decrypt some saves already, but we can't modify them without the system not recognizing the saves afterwards. We can't even back-up and reuse the saves in newer 3DS games anymore as it results in "this save is corrupted" errors.

What do you mean by that? Does that mean it's not possible to just copy everything on your SD, paste it on another SD, and then use that new one ?

 

[Eerpow]

What do you mean by that? Does that mean it's not possible to just copy everything on your SD, paste it on another SD, and then use that new one ?

No because as already mentioned, they're uniquely encrypted for each 3DS. We can't sign them. However you can backup your old saves for later use on your own system with some of the older 3DS titles.

 

[Silverthorn]

No because as already mentioned, they're uniquely encrypted for each 3DS. We can't sign them. However you can backup your old saves for later use on your own system with some of the older 3DS titles.

Ah ok, I knew 'bout that, just thought you were speaking about re-using them on the same 3ds.

 

[beta4attack]

I can confirm it works with SM3DL, I tried the same trick a few months ago.

 

[3DSGuy]

could you not use one of the saves that we have the decryption for, then transfer it, get the save file off the internal system, - the save encryption and compare the raw unencrypted save from the cart and compare to the one on the system which has the basic save encryption removed, the remains to see the console code encryption?

id assume not, just thinking out loud

No, can't get the encryption key with a clear-text attack like that.

 

[Pong20302000]

No, can't get the encryption key with a clear-text attack like that.

too simple lol, least neimod has his tho gives hope