Hacking [Need testing] 6.x encrypted Retail Cart Save convertable?

MelonGx

Well-Known Member
OP
Member
Joined
Jan 8, 2009
Messages
1,653
Trophies
1
XP
915
Country
China
Requirements:
- 3DS with 6.0-9.2 firmware (DO NOT downgrade, DO NOT use 4.1-5.1 consoles instead)
- Gateway
- A 6.x encrypted retail cart (later than mid-2013, such as Pokemon XYORAS, MH4G, SSB, etc.)
- emuNAND ready
- SaveDataFiler CIA installed

Instruction:
1) Play retail cart in 6.0-9.4 SysNAND (NOT emuNAND classic), then do a save.
2) Dump the retail cart save and rename it into 000400000FF40A00.sav. (Card1 game only)
3) Dump the retail cart ROM and rename it into .3DZ.
4) Enter the emuNAND and mount that .3DZ.
5) Use SaveDataFiler to export CTR card.

If step 5 is available, then it's convertable.
If not then it fails.
 
  • Like
Reactions: Margen67

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
Saves from Pokemon retail cards are 1.048.576 Bytes insted of 524.288 Bytes.

queno138 informed me that CFW with SDF could help, so i added it to my tutorial.
 
  • Like
Reactions: Margen67

MelonGx

Well-Known Member
OP
Member
Joined
Jan 8, 2009
Messages
1,653
Trophies
1
XP
915
Country
China
Saves from Pokemon retail cards are 1.048.576 Bytes insted of 524.288 Bytes.

queno138 informed me that CFW with SDF could help, so i added it to my tutorial.
Here are some reports of RetailCartSave on GW-Classic:
SysNAND 4.x-5.x / RetailCartSave 2.2 - OK
SysNAND 4.x-5.x / RetailCartSave 6.x - Corrupt and initialize
SysNAND 6.x-9.x / RetailCartSave 2.2 - OK
SysNAND 6.x-9.x / RetailCartSave 6.x - OK

Here are some reports of RetailCartSave on SysNAND 9.4:
Saved on GW-Classic with SysNAND 4.x-5.x / RetailCartSave 2.2 - OK
Saved on GW-Classic with SysNAND 4.x-5.x / RetailCartSave 6.x - Corrupt and initialize
Saved on GW-Classic with SysNAND 6.x-9.x / RetailCartSave 2.2 - OK
Saved on GW-Classic with SysNAND 6.x-9.x / RetailCartSave 6.x - OK

This post is talking about SaveDataFiler exporting RetailCartSave on SysNAND 6.x-9.x / RetailCartSave 6.x.
CFW is locked into SysNAND 4.x which doesn't have 6.x decryption.
(If a 6.x Retail Cart Save is readable by CFW, then it has been already saved on GW-Classic with SysNAND 4.x-5.x, which forces gerenated the save into 2.2 encryption.)
So if only my theory is wrong, CFW will not work for this case.
 
  • Like
Reactions: liomajor and cearp

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
Requirements:
- 3DS with 6.0-9.2 firmware (DO NOT downgrade, DO NOT use 4.1-5.1 consoles instead)
- Gateway
- A 6.x encrypted retail cart (later than mid-2013, such as Pokemon XYORAS, MH4G, SSB, etc.)
- emuNAND ready
- SaveDataFiler CIA installed

Instruction:
1) Play retail cart in 6.0-9.42 SysNAND (NOT emuNAND classic), then do a save.
2) Dump the retail cart save and rename it into 000400000FF40A00.sav. (Card1 game only)
3) Dump the retail cart ROM and rename it into .3DZ.
4) Enter the emuNAND and mount that .3DZ.
5) Use SaveDataFiler to export CTR card.

If step 5 is available, then it's convertable.
If not then it fails.

Only possible if Gateway doesn't interfere with forced encryption and filesize matches (accepting .sav).

I don't think this will work either. Sad Workaround is owning the eShop Title and to use the Savegame Transfer Title.

Best chance would be porting CFW to 9.x and work on stability with sysNAND at least 6.x.
 
  • Like
Reactions: Margen67

gamesquest1

Nabnut
Former Staff
Joined
Sep 23, 2013
Messages
15,153
Trophies
2
XP
12,247
has anyone actually tested using the save transfer tool to a fake cia, iirc it just scans for a installed game using the same titleI....doesnt really matter if it was legit on the eshop, just as long as the system see's there is a eshop title there that matches the cart, so legit cart+save data transfer tool+ cia installed version of the game in classic mode run on a 6.x base system *should* work i would imagine
 

Raugo

Well-Known Member
Member
Joined
Nov 22, 2014
Messages
630
Trophies
0
XP
2,451
Country
Spain
Only possible if Gateway doesn't interfere with forced encryption and filesize matches (accepting .sav).

I don't think this will work either. Sad Workaround is owning the eShop Title and to use the Savegame Transfer Title.

Best chance would be porting CFW to 9.x and work on stability with sysNAND at least 6.x.


Or a method to Launch the 4.x CFW o a 6.x+ sysnand. I tried a 4.5 emunand classic in a 6.2 sysnand and the 6.x sav works.
 
  • Like
Reactions: cearp

tony_2018

Well-Known Member
Member
Joined
Jan 3, 2014
Messages
3,107
Trophies
0
XP
1,012
Country
United States
Requirements:
- 3DS with 6.0-9.2 firmware (DO NOT downgrade, DO NOT use 4.1-5.1 consoles instead)
- Gateway
- A 6.x encrypted retail cart (later than mid-2013, such as Pokemon XYORAS, MH4G, SSB, etc.)
- emuNAND ready
- SaveDataFiler CIA installed

Instruction:
1) Play retail cart in 6.0-9.4 SysNAND (NOT emuNAND classic), then do a save.
2) Dump the retail cart save and rename it into 000400000FF40A00.sav. (Card1 game only)
3) Dump the retail cart ROM and rename it into .3DZ.
4) Enter the emuNAND and mount that .3DZ.
5) Use SaveDataFiler to export CTR card.

If step 5 is available, then it's convertable.
If not then it fails.


If card1 gamesaves had the capabilities of having a softtop this I gotta see.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • K3Nv2 @ K3Nv2:
    I'll reformat and have a 3tb raid0 m. 2 at least
    +1
  • K3Nv2 @ K3Nv2:
    Lmao that sold out fast
    +1
  • Veho @ Veho:
    Yeet the cat.
    +1
  • K3Nv2 @ K3Nv2:
    Good idea
    +1
  • The Real Jdbye @ The Real Jdbye:
    i thought everybody knew cocktails are like 75% ice
  • Veho @ Veho:
    Yeah but not like this.
  • Veho @ Veho:
    It's not like they're complaining that their Slurpee is 99% ice or something, but if the cocktail calls for "shot of vodka, shot of vermouth, shot of gin, shot of Campari, three shots of juice, squirt of lemon" and ends up being a thimbleful of booze, that's a problem.
  • The Real Jdbye @ The Real Jdbye:
    the funny thing is cocktails in norway are only allowed to have 1 20ml shot of booze
  • The Real Jdbye @ The Real Jdbye:
    so..... yeah
  • The Real Jdbye @ The Real Jdbye:
    we're used to only having a thimbleful of booze
  • Veho @ Veho:
    Booo.
  • The Real Jdbye @ The Real Jdbye:
    same thing if you want whisky on the rocks or something, you can't get a double
  • The Real Jdbye @ The Real Jdbye:
    but you could buy as many shots of whisky (or anything else) as you want and ask for a glass of ice and pour them in
  • The Real Jdbye @ The Real Jdbye:
    it's dumb
  • Veho @ Veho:
    Maybe.
  • Veho @ Veho:
    There was a comparison of the number of Ibuprofen poisonings before and after they limited the maximum dosage per box or per pill (i'll look that up). No limit on the number of boxes you can still buy as many as you want, so people argued it was pointless.
  • Veho @ Veho:
    But the number of (accidental) poisonings dropped because drinking an entire package of ibuprofen pills went from "I need a new liver" to "I need a new box of Ibuprofen".
  • Veho @ Veho:
    Here we have ketoprofen that used to be prescription-only because of the risk of toxic dosages, but then they halved the dose per pill and sell them in bottles of six pills apiece instead of twenty and it doesn't need a prescription any more. Yes you can buy more than one bottle but people simply don't.
  • Psionic Roshambo @ Psionic Roshambo:
    Usually accidentally overdose of ibuprofen here is from people taking like cold medicine then ibuprofen for a headache and the combination is over what they need
    Veho @ Veho: https://imgur.com/gallery/QQkYnQu