Hacking [Need testing] 6.x encrypted Retail Cart Save convertable?

MelonGx

Well-Known Member
OP
Member
Joined
Jan 8, 2009
Messages
1,653
Trophies
1
XP
915
Country
China
Requirements:
- 3DS with 6.0-9.2 firmware (DO NOT downgrade, DO NOT use 4.1-5.1 consoles instead)
- Gateway
- A 6.x encrypted retail cart (later than mid-2013, such as Pokemon XYORAS, MH4G, SSB, etc.)
- emuNAND ready
- SaveDataFiler CIA installed

Instruction:
1) Play retail cart in 6.0-9.4 SysNAND (NOT emuNAND classic), then do a save.
2) Dump the retail cart save and rename it into 000400000FF40A00.sav. (Card1 game only)
3) Dump the retail cart ROM and rename it into .3DZ.
4) Enter the emuNAND and mount that .3DZ.
5) Use SaveDataFiler to export CTR card.

If step 5 is available, then it's convertable.
If not then it fails.
 
  • Like
Reactions: Margen67

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
Saves from Pokemon retail cards are 1.048.576 Bytes insted of 524.288 Bytes.

queno138 informed me that CFW with SDF could help, so i added it to my tutorial.
 
  • Like
Reactions: Margen67

MelonGx

Well-Known Member
OP
Member
Joined
Jan 8, 2009
Messages
1,653
Trophies
1
XP
915
Country
China
Saves from Pokemon retail cards are 1.048.576 Bytes insted of 524.288 Bytes.

queno138 informed me that CFW with SDF could help, so i added it to my tutorial.
Here are some reports of RetailCartSave on GW-Classic:
SysNAND 4.x-5.x / RetailCartSave 2.2 - OK
SysNAND 4.x-5.x / RetailCartSave 6.x - Corrupt and initialize
SysNAND 6.x-9.x / RetailCartSave 2.2 - OK
SysNAND 6.x-9.x / RetailCartSave 6.x - OK

Here are some reports of RetailCartSave on SysNAND 9.4:
Saved on GW-Classic with SysNAND 4.x-5.x / RetailCartSave 2.2 - OK
Saved on GW-Classic with SysNAND 4.x-5.x / RetailCartSave 6.x - Corrupt and initialize
Saved on GW-Classic with SysNAND 6.x-9.x / RetailCartSave 2.2 - OK
Saved on GW-Classic with SysNAND 6.x-9.x / RetailCartSave 6.x - OK

This post is talking about SaveDataFiler exporting RetailCartSave on SysNAND 6.x-9.x / RetailCartSave 6.x.
CFW is locked into SysNAND 4.x which doesn't have 6.x decryption.
(If a 6.x Retail Cart Save is readable by CFW, then it has been already saved on GW-Classic with SysNAND 4.x-5.x, which forces gerenated the save into 2.2 encryption.)
So if only my theory is wrong, CFW will not work for this case.
 
  • Like
Reactions: liomajor and cearp

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
Requirements:
- 3DS with 6.0-9.2 firmware (DO NOT downgrade, DO NOT use 4.1-5.1 consoles instead)
- Gateway
- A 6.x encrypted retail cart (later than mid-2013, such as Pokemon XYORAS, MH4G, SSB, etc.)
- emuNAND ready
- SaveDataFiler CIA installed

Instruction:
1) Play retail cart in 6.0-9.42 SysNAND (NOT emuNAND classic), then do a save.
2) Dump the retail cart save and rename it into 000400000FF40A00.sav. (Card1 game only)
3) Dump the retail cart ROM and rename it into .3DZ.
4) Enter the emuNAND and mount that .3DZ.
5) Use SaveDataFiler to export CTR card.

If step 5 is available, then it's convertable.
If not then it fails.

Only possible if Gateway doesn't interfere with forced encryption and filesize matches (accepting .sav).

I don't think this will work either. Sad Workaround is owning the eShop Title and to use the Savegame Transfer Title.

Best chance would be porting CFW to 9.x and work on stability with sysNAND at least 6.x.
 
  • Like
Reactions: Margen67

gamesquest1

Nabnut
Former Staff
Joined
Sep 23, 2013
Messages
15,153
Trophies
2
XP
12,247
has anyone actually tested using the save transfer tool to a fake cia, iirc it just scans for a installed game using the same titleI....doesnt really matter if it was legit on the eshop, just as long as the system see's there is a eshop title there that matches the cart, so legit cart+save data transfer tool+ cia installed version of the game in classic mode run on a 6.x base system *should* work i would imagine
 

Raugo

Well-Known Member
Member
Joined
Nov 22, 2014
Messages
630
Trophies
0
XP
2,451
Country
Spain
Only possible if Gateway doesn't interfere with forced encryption and filesize matches (accepting .sav).

I don't think this will work either. Sad Workaround is owning the eShop Title and to use the Savegame Transfer Title.

Best chance would be porting CFW to 9.x and work on stability with sysNAND at least 6.x.


Or a method to Launch the 4.x CFW o a 6.x+ sysnand. I tried a 4.5 emunand classic in a 6.2 sysnand and the 6.x sav works.
 
  • Like
Reactions: cearp

tony_2018

Well-Known Member
Member
Joined
Jan 3, 2014
Messages
3,107
Trophies
0
XP
1,022
Country
United States
Requirements:
- 3DS with 6.0-9.2 firmware (DO NOT downgrade, DO NOT use 4.1-5.1 consoles instead)
- Gateway
- A 6.x encrypted retail cart (later than mid-2013, such as Pokemon XYORAS, MH4G, SSB, etc.)
- emuNAND ready
- SaveDataFiler CIA installed

Instruction:
1) Play retail cart in 6.0-9.4 SysNAND (NOT emuNAND classic), then do a save.
2) Dump the retail cart save and rename it into 000400000FF40A00.sav. (Card1 game only)
3) Dump the retail cart ROM and rename it into .3DZ.
4) Enter the emuNAND and mount that .3DZ.
5) Use SaveDataFiler to export CTR card.

If step 5 is available, then it's convertable.
If not then it fails.


If card1 gamesaves had the capabilities of having a softtop this I gotta see.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
  • SylverReZ @ SylverReZ:
    @mthrnite, Cheetah Girls, the sequel to Action 52's Cheetah Men.
    +2
  • Psionic Roshambo @ Psionic Roshambo:
    Pokemon Black I played that one a lot
  • K3Nv2 @ K3Nv2:
    Honestly never messed with Pokémon on ds much
  • mthrnite @ mthrnite:
    I played pokemon once, was bored, never tried again
  • Psionic Roshambo @ Psionic Roshambo:
    Oh Dragon Quest IX
  • K3Nv2 @ K3Nv2:
    Spent like 5 hours on switch one never touched it again
  • Psionic Roshambo @ Psionic Roshambo:
    Sentinel of the stary skies
  • K3Nv2 @ K3Nv2:
    Ds is 20 years old this year
  • Psionic Roshambo @ Psionic Roshambo:
    So MJ no longer wants to play with it?
  • K3Nv2 @ K3Nv2:
    He put it down when the 3ds came out
  • SylverReZ @ SylverReZ:
    @K3Nv2, RIP Felix does great videos on the PS3 yellow-light-of-death.
  • Jayro @ Jayro:
    Eventhough the New 3DS XL is more powerful, I still feel like the DS Lite was a more polished system. It's a real shame that it never got an XL variant keeping the GBA slot. You'd have to go on AliExpress and buy an ML shell to give a DS phat the unofficial "DS Lite" treatment, and that's the best we'll ever get I'm afraid.
    +1
  • Jayro @ Jayro:
    The phat model had amazingly loud speakers tho.
    +1
  • SylverReZ @ SylverReZ:
    @Jayro, I don't see whats so special about the DS ML, its just a DS lite in a phat shell. At least the phat model had louder speakers, whereas the lite has a much better screen.
    +1
  • SylverReZ @ SylverReZ:
    They probably said "Hey, why not we combine the two together and make a 'new' DS to sell".
  • Veho @ Veho:
    It's a DS Lite in a slightly bigger DS Lite shell.
    +1
  • Veho @ Veho:
    It's not a Nintendo / iQue official product, it's a 3rd party custom.
    +1
  • Veho @ Veho:
    Nothing special about it other than it's more comfortable than the Lite
    for people with beefy hands.
    +1
  • Jayro @ Jayro:
    I have yaoi anime hands, very lorge but slender.
  • Jayro @ Jayro:
    I'm Slenderman.
  • Veho @ Veho:
    I have hands.
    Veho @ Veho: +1