Hacking [Need testing] 6.x encrypted Retail Cart Save convertable?

MelonGx

Well-Known Member
OP
Member
Joined
Jan 8, 2009
Messages
1,653
Trophies
1
XP
915
Country
China
Requirements:
- 3DS with 6.0-9.2 firmware (DO NOT downgrade, DO NOT use 4.1-5.1 consoles instead)
- Gateway
- A 6.x encrypted retail cart (later than mid-2013, such as Pokemon XYORAS, MH4G, SSB, etc.)
- emuNAND ready
- SaveDataFiler CIA installed

Instruction:
1) Play retail cart in 6.0-9.4 SysNAND (NOT emuNAND classic), then do a save.
2) Dump the retail cart save and rename it into 000400000FF40A00.sav. (Card1 game only)
3) Dump the retail cart ROM and rename it into .3DZ.
4) Enter the emuNAND and mount that .3DZ.
5) Use SaveDataFiler to export CTR card.

If step 5 is available, then it's convertable.
If not then it fails.
 
  • Like
Reactions: Margen67

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
Saves from Pokemon retail cards are 1.048.576 Bytes insted of 524.288 Bytes.

queno138 informed me that CFW with SDF could help, so i added it to my tutorial.
 
  • Like
Reactions: Margen67

MelonGx

Well-Known Member
OP
Member
Joined
Jan 8, 2009
Messages
1,653
Trophies
1
XP
915
Country
China
Saves from Pokemon retail cards are 1.048.576 Bytes insted of 524.288 Bytes.

queno138 informed me that CFW with SDF could help, so i added it to my tutorial.
Here are some reports of RetailCartSave on GW-Classic:
SysNAND 4.x-5.x / RetailCartSave 2.2 - OK
SysNAND 4.x-5.x / RetailCartSave 6.x - Corrupt and initialize
SysNAND 6.x-9.x / RetailCartSave 2.2 - OK
SysNAND 6.x-9.x / RetailCartSave 6.x - OK

Here are some reports of RetailCartSave on SysNAND 9.4:
Saved on GW-Classic with SysNAND 4.x-5.x / RetailCartSave 2.2 - OK
Saved on GW-Classic with SysNAND 4.x-5.x / RetailCartSave 6.x - Corrupt and initialize
Saved on GW-Classic with SysNAND 6.x-9.x / RetailCartSave 2.2 - OK
Saved on GW-Classic with SysNAND 6.x-9.x / RetailCartSave 6.x - OK

This post is talking about SaveDataFiler exporting RetailCartSave on SysNAND 6.x-9.x / RetailCartSave 6.x.
CFW is locked into SysNAND 4.x which doesn't have 6.x decryption.
(If a 6.x Retail Cart Save is readable by CFW, then it has been already saved on GW-Classic with SysNAND 4.x-5.x, which forces gerenated the save into 2.2 encryption.)
So if only my theory is wrong, CFW will not work for this case.
 
  • Like
Reactions: liomajor and cearp

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
Requirements:
- 3DS with 6.0-9.2 firmware (DO NOT downgrade, DO NOT use 4.1-5.1 consoles instead)
- Gateway
- A 6.x encrypted retail cart (later than mid-2013, such as Pokemon XYORAS, MH4G, SSB, etc.)
- emuNAND ready
- SaveDataFiler CIA installed

Instruction:
1) Play retail cart in 6.0-9.42 SysNAND (NOT emuNAND classic), then do a save.
2) Dump the retail cart save and rename it into 000400000FF40A00.sav. (Card1 game only)
3) Dump the retail cart ROM and rename it into .3DZ.
4) Enter the emuNAND and mount that .3DZ.
5) Use SaveDataFiler to export CTR card.

If step 5 is available, then it's convertable.
If not then it fails.

Only possible if Gateway doesn't interfere with forced encryption and filesize matches (accepting .sav).

I don't think this will work either. Sad Workaround is owning the eShop Title and to use the Savegame Transfer Title.

Best chance would be porting CFW to 9.x and work on stability with sysNAND at least 6.x.
 
  • Like
Reactions: Margen67

gamesquest1

Nabnut
Former Staff
Joined
Sep 23, 2013
Messages
15,153
Trophies
2
XP
12,247
has anyone actually tested using the save transfer tool to a fake cia, iirc it just scans for a installed game using the same titleI....doesnt really matter if it was legit on the eshop, just as long as the system see's there is a eshop title there that matches the cart, so legit cart+save data transfer tool+ cia installed version of the game in classic mode run on a 6.x base system *should* work i would imagine
 

Raugo

Well-Known Member
Member
Joined
Nov 22, 2014
Messages
630
Trophies
0
XP
2,451
Country
Spain
Only possible if Gateway doesn't interfere with forced encryption and filesize matches (accepting .sav).

I don't think this will work either. Sad Workaround is owning the eShop Title and to use the Savegame Transfer Title.

Best chance would be porting CFW to 9.x and work on stability with sysNAND at least 6.x.


Or a method to Launch the 4.x CFW o a 6.x+ sysnand. I tried a 4.5 emunand classic in a 6.2 sysnand and the 6.x sav works.
 
  • Like
Reactions: cearp

tony_2018

Well-Known Member
Member
Joined
Jan 3, 2014
Messages
3,107
Trophies
0
XP
1,012
Country
United States
Requirements:
- 3DS with 6.0-9.2 firmware (DO NOT downgrade, DO NOT use 4.1-5.1 consoles instead)
- Gateway
- A 6.x encrypted retail cart (later than mid-2013, such as Pokemon XYORAS, MH4G, SSB, etc.)
- emuNAND ready
- SaveDataFiler CIA installed

Instruction:
1) Play retail cart in 6.0-9.4 SysNAND (NOT emuNAND classic), then do a save.
2) Dump the retail cart save and rename it into 000400000FF40A00.sav. (Card1 game only)
3) Dump the retail cart ROM and rename it into .3DZ.
4) Enter the emuNAND and mount that .3DZ.
5) Use SaveDataFiler to export CTR card.

If step 5 is available, then it's convertable.
If not then it fails.


If card1 gamesaves had the capabilities of having a softtop this I gotta see.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • BigOnYa @ BigOnYa:
    Do you have the mini radiator cooler? I Jerry rigged a heatsink and 5volt fan from a dead graphics card on mine, but eventually wanna get a real cooler/fan.
  • Psionic Roshambo @ Psionic Roshambo:
    Pure copper heat sink kit and fans
    +1
  • BigOnYa @ BigOnYa:
    I don't know bout sets, I downloaded all the roms for mine separately.
  • Psionic Roshambo @ Psionic Roshambo:
    My 1500ish games is all hand picked and scraped it's taken me months but zero trash well except MAME.... Tried deleting clones and broke the originals uugghh
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    I legit have been complaining about MAME for over 20 years... Hate the way they handle roms
  • BigOnYa @ BigOnYa:
    Yea is a pain sometimes
  • Psionic Roshambo @ Psionic Roshambo:
    Now that they decided to add Tiger handheld and fruit machines.... Newer sets are worthless
  • Psionic Roshambo @ Psionic Roshambo:
    Because who doesn't want to emulate Halo LCD by Tiger when the machine needed to emulate it... Could just play Halo....
  • K3Nv2 @ K3Nv2:
    Batocera has some tiger games
  • Psionic Roshambo @ Psionic Roshambo:
    I don't have them on mine Ken lol
  • K3Nv2 @ K3Nv2:
    Waste of the 128kb they take
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    Tiger handhelds are good for one thing.... Occupying space in a landfill
  • K3Nv2 @ K3Nv2:
    They make good burning plastic
  • BigOnYa @ BigOnYa:
    Makes me wonder if the Pi5 can play PS2? If there's even a core for it yet.
  • K3Nv2 @ K3Nv2:
    Pi5 should be able to do ps2
  • Psionic Roshambo @ Psionic Roshambo:
    Try Dragon Quest VIII it ran perfectly on a core 2 Duo I had
  • Psionic Roshambo @ Psionic Roshambo:
    Easiest game to run I found
  • K3Nv2 @ K3Nv2:
    Ps2 emulation is cake compared to 3 years ago
  • Psionic Roshambo @ Psionic Roshambo:
    Hardest is probably Gran Turismo 4
  • Psionic Roshambo @ Psionic Roshambo:
    It's much better now yes but Gran Turismo 4 is still the hardest one to emulate that I have in my collection
  • Psionic Roshambo @ Psionic Roshambo:
    Runs perfectly fine but it's as if I can feel it always on the boarder line of dropping a frame lol
  • BigOnYa @ BigOnYa:
    I ordered a spin ball couple days ago to add to my arcade cabinet, will be nice for games like golden tee, or bowling
  • Psionic Roshambo @ Psionic Roshambo:
    I always wanted a controller for like Ikari Warriors, Time Soldiers, Heavy Barrel, Forgotten Worlds games like those
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    Not even sure what to call that controller
  • Xdqwerty @ Xdqwerty:
    an online friend I've known since 2021 left me :( bc my attitude is "cutty"
    Xdqwerty @ Xdqwerty: an online friend I've known since 2021 left me :( bc my attitude is "cutty"