Hacking [Need testing] 6.x encrypted Retail Cart Save convertable?

MelonGx

Well-Known Member
OP
Member
Joined
Jan 8, 2009
Messages
1,653
Trophies
1
XP
915
Country
China
Requirements:
- 3DS with 6.0-9.2 firmware (DO NOT downgrade, DO NOT use 4.1-5.1 consoles instead)
- Gateway
- A 6.x encrypted retail cart (later than mid-2013, such as Pokemon XYORAS, MH4G, SSB, etc.)
- emuNAND ready
- SaveDataFiler CIA installed

Instruction:
1) Play retail cart in 6.0-9.4 SysNAND (NOT emuNAND classic), then do a save.
2) Dump the retail cart save and rename it into 000400000FF40A00.sav. (Card1 game only)
3) Dump the retail cart ROM and rename it into .3DZ.
4) Enter the emuNAND and mount that .3DZ.
5) Use SaveDataFiler to export CTR card.

If step 5 is available, then it's convertable.
If not then it fails.
 
  • Like
Reactions: Margen67

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
Saves from Pokemon retail cards are 1.048.576 Bytes insted of 524.288 Bytes.

queno138 informed me that CFW with SDF could help, so i added it to my tutorial.
 
  • Like
Reactions: Margen67

MelonGx

Well-Known Member
OP
Member
Joined
Jan 8, 2009
Messages
1,653
Trophies
1
XP
915
Country
China
Saves from Pokemon retail cards are 1.048.576 Bytes insted of 524.288 Bytes.

queno138 informed me that CFW with SDF could help, so i added it to my tutorial.
Here are some reports of RetailCartSave on GW-Classic:
SysNAND 4.x-5.x / RetailCartSave 2.2 - OK
SysNAND 4.x-5.x / RetailCartSave 6.x - Corrupt and initialize
SysNAND 6.x-9.x / RetailCartSave 2.2 - OK
SysNAND 6.x-9.x / RetailCartSave 6.x - OK

Here are some reports of RetailCartSave on SysNAND 9.4:
Saved on GW-Classic with SysNAND 4.x-5.x / RetailCartSave 2.2 - OK
Saved on GW-Classic with SysNAND 4.x-5.x / RetailCartSave 6.x - Corrupt and initialize
Saved on GW-Classic with SysNAND 6.x-9.x / RetailCartSave 2.2 - OK
Saved on GW-Classic with SysNAND 6.x-9.x / RetailCartSave 6.x - OK

This post is talking about SaveDataFiler exporting RetailCartSave on SysNAND 6.x-9.x / RetailCartSave 6.x.
CFW is locked into SysNAND 4.x which doesn't have 6.x decryption.
(If a 6.x Retail Cart Save is readable by CFW, then it has been already saved on GW-Classic with SysNAND 4.x-5.x, which forces gerenated the save into 2.2 encryption.)
So if only my theory is wrong, CFW will not work for this case.
 
  • Like
Reactions: liomajor and cearp

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
Requirements:
- 3DS with 6.0-9.2 firmware (DO NOT downgrade, DO NOT use 4.1-5.1 consoles instead)
- Gateway
- A 6.x encrypted retail cart (later than mid-2013, such as Pokemon XYORAS, MH4G, SSB, etc.)
- emuNAND ready
- SaveDataFiler CIA installed

Instruction:
1) Play retail cart in 6.0-9.42 SysNAND (NOT emuNAND classic), then do a save.
2) Dump the retail cart save and rename it into 000400000FF40A00.sav. (Card1 game only)
3) Dump the retail cart ROM and rename it into .3DZ.
4) Enter the emuNAND and mount that .3DZ.
5) Use SaveDataFiler to export CTR card.

If step 5 is available, then it's convertable.
If not then it fails.

Only possible if Gateway doesn't interfere with forced encryption and filesize matches (accepting .sav).

I don't think this will work either. Sad Workaround is owning the eShop Title and to use the Savegame Transfer Title.

Best chance would be porting CFW to 9.x and work on stability with sysNAND at least 6.x.
 
  • Like
Reactions: Margen67

gamesquest1

Nabnut
Former Staff
Joined
Sep 23, 2013
Messages
15,153
Trophies
2
XP
12,247
has anyone actually tested using the save transfer tool to a fake cia, iirc it just scans for a installed game using the same titleI....doesnt really matter if it was legit on the eshop, just as long as the system see's there is a eshop title there that matches the cart, so legit cart+save data transfer tool+ cia installed version of the game in classic mode run on a 6.x base system *should* work i would imagine
 

Raugo

Well-Known Member
Member
Joined
Nov 22, 2014
Messages
630
Trophies
0
XP
2,450
Country
Spain
Only possible if Gateway doesn't interfere with forced encryption and filesize matches (accepting .sav).

I don't think this will work either. Sad Workaround is owning the eShop Title and to use the Savegame Transfer Title.

Best chance would be porting CFW to 9.x and work on stability with sysNAND at least 6.x.


Or a method to Launch the 4.x CFW o a 6.x+ sysnand. I tried a 4.5 emunand classic in a 6.2 sysnand and the 6.x sav works.
 
  • Like
Reactions: cearp

tony_2018

Well-Known Member
Member
Joined
Jan 3, 2014
Messages
3,107
Trophies
0
XP
1,012
Country
United States
Requirements:
- 3DS with 6.0-9.2 firmware (DO NOT downgrade, DO NOT use 4.1-5.1 consoles instead)
- Gateway
- A 6.x encrypted retail cart (later than mid-2013, such as Pokemon XYORAS, MH4G, SSB, etc.)
- emuNAND ready
- SaveDataFiler CIA installed

Instruction:
1) Play retail cart in 6.0-9.4 SysNAND (NOT emuNAND classic), then do a save.
2) Dump the retail cart save and rename it into 000400000FF40A00.sav. (Card1 game only)
3) Dump the retail cart ROM and rename it into .3DZ.
4) Enter the emuNAND and mount that .3DZ.
5) Use SaveDataFiler to export CTR card.

If step 5 is available, then it's convertable.
If not then it fails.


If card1 gamesaves had the capabilities of having a softtop this I gotta see.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    Psionic Roshambo @ Psionic Roshambo: https://www.youtube.com/@legolambs