(Just made an account to spit this idea out).
Is it possible to attach wires to the connectors of the 3DS cartridge, and sniff the data that gets sent and received into the card as it is mounted into the 3DS console?
I am just reminded of how, in order to obtain the DVD Drive-key from an Xbox...