Hacking Savegame dump from retail card with Pasta CFW

[PHF]

I have a 4.x O3DS, and a retail Pokemon Y card which was played on sysNAND > 6.x.
I would like to dump the savegame in order to play it on my Gateway 3DS.

I know that it is now possible to use the Savegame Manager Plugin for the NTR CFW 2.x, but it is only available on N3DS.

As a workaround, I am able to play my retail card with these boring steps :

1. Backup the 4.x sysNAND.
2. Upgrade sysNAND to 6.x using the retail card.
3. Play my game.
4. Restore the 4.x sysNAND backup made at step 1.

So, could anyone tell me if the following scenario is likely to work ?

1. Backup the 4.x sysNAND.
2. Upgrade sysNAND to 6.x using the retail card.
3. Install SaveDataFiler to sysNAND (using FBI or PBT-CFW).
4. Launch SaveDataFiler from Pasta CFW.
5. Dump the savegame from the retail card.
6. Restore the 4.x sysNAND backup made at step 1.

 

[Shady Guy Jose]

It probably will work, since Gateway will allow you to restore the unencrypted backup to the ROM. If you want to restore it to the original card in 4.X format, you probably need another CFW such as the early 4.5 ones.

 

[VerseHell]

It would work, but the only issue is that you need CN to boot in pasta cfw on 6.X. If you don't have it there is another way though :
- Upgrade your sysnand
- If you didn't do it yet, update your emunand to 9.8
- Foind the legit cia of pokemon Y and install it on your emunand.
- Boot in classic mode, and download the save data transfer tool from eshop
- Use it to transfer your save in the cia.

 

[Shady Guy Jose]

It would work, but the only issue is that you need CN to boot in pasta cfw on 6.X. If you don't have it there is another way though :
- Upgrade your sysnand
- If you didn't do it yet, update your emunand to 9.8
- Foind the legit cia of pokemon Y and install it on your emunand.
- Boot in classic mode, and download the save data transfer tool from eshop
- Use it to transfer your save in the cia.

This erases the cart's save, though, IIRC

 

[VerseHell]

Yes but he would still be able to restore the save with sdf if he buy CN or if pasta becomes compatible with spider.

 

[PHF]

Thanks for your answers!

Actually, I didn't noticed the need for CN. I thought I would be able to install SaveDataFiler with PBT-CFW before the upgrade, but forgot about launching Pasta CFW on 6.x .

In the next months, I will be able to access my sister's Sky3DS, which could replace CN. But it's not ideal.

For now, I could try the @VerseHell's method since I don't care about keeping the savegame on the retail card. However, I have some questions :

• With classic mode, will I be able to read my 6.x savegame after upgrade? I may be wrong, but I remember reading somewhere that classic mode always uses the old encryption method, even with sysNAND > 6.x.
• Does the region matter for installing the legit CIA?
• Will I be able to dump the savegame from the CIA with SaveDataFiler once back to Gateway mode?

 

[VerseHell]

- Yes, the save encryption in classic mode depends of your sysnand version, but in gateway mode the old encryption is always used. eshop and cias games always use the old encryption too.
- Pokemon games share the same title id for the 3 regions so it doesn't matter.
- Yes.

 

[PHF]

I tried this yesterday, and it worked perfectly! Thanks a lot !

To sum up what I did for future readers:

1. I found an archive containing the Pokemon Y CETK (3DSLegitCIA_DATs.7z).
2. I used FunkyCIA to download and build a legit Pokemon Y CIA from the Nintendo CDN :

   FunkyCIA2.py "[...]\Tickets_CETKs\ALL_Pokemon_Y_(World)_(0004000000055E00).cetk" -title 0004000000055E00 -preinstalled

3. I upgraded my sysNAND to 6.x with the retail card.
4. I installed the legit CIA to my up-to-date emuNAND.
5. I installed the Save Data Transfer Tool from the Nintendo eShop.
6. From classic mode, I checked that my retail card save was readable, and that the legit CIA could be launched.
7. Always from classic mode, I used the Save Data Transfer Tool to move the save from my retail card to the legit CIA.
8. From Gateway mode, I used SaveDataFiler to extract the unencrypted save from the legit CIA.

Now, my retail card is blank, but I can play my game either on the legit CIA or on a ROM (3DZ dumped from the retail card).
I could also restore the save to the retail card with the old encryption: it will be playable from classic mode on 4.x, but not from a console with sysNAND > 6.x.

 

[VerseHell]

Well now it's easier, you can just use th sig patched rxtools with SaveDataFiler. (you still have to update first if you're on 4.X though).
It's too late now, but just in case of you want to put the save back on the cartdrige with the correct encryption.

 

[PHF]

OMG, bad timing
Anyway, thanks for the information, I will try it tonight!

 

[gamesquest1]

well you could at least use the patched RXTools to dump the eshop save and restore it to your cart too

 

[TOPSECRET]

So I'll extract my Save from a Retail Cartridge with rxTools and SaveDataFiler, it will be deleted or stays the Save on the Cartridge and on the SDCard?
I hope someone can help to clear this?

 

[VerseHell]

It will be on both.

 

[TOPSECRET]

So thanks for the fast reply, so i can try it.

 

[PHF]

Mine got deleted because I used the Save Data Transfer Tool provided by Nintendo.
SaveDataFiler does not delete anything (unless you ask it to).

 

[TOPSECRET]

So the Problem ist when i start SaveDataFiler ind rxTools-E then CTR-Card is broken... i can extract the Savegame... any tricks?

 

[PHF]

I successfully restored my save to its original retail cart, with the correct encryption. Thanks a lot for your help @VerseHell!

@TOPSECRET: it looks like your save encryption does not match your sysNAND version (only sysNAND matters here, emuNAND does not). You probably need sysNAND > 6.x, is it your case?