Hacking [Tutorial] Dump Retail Pokemon XY/ORAS Saves to Gateway with Powersaves

mastermodr94

Well-Known Member
OP
Member
Joined
Dec 3, 2014
Messages
137
Trophies
0
Age
29
XP
204
Country
United States
Ok So I spent a lot of time yesterday trying to get this to work because there wasn't one main guide that went into detail on how this process worked. Here is a guide with pictures that shows the entire process. I will be using Pokemon X to show this process but it can be done with any of the 4 GenIV games.

Things You will need:
Windows Computer
Pokemon XY/ORAS game
Powersaves Device
Gateway Cartridge

Software Needed:
PowerSaves 3DS software
Hex Editor, I prefer HxD
Pokemon GenIV Save Decrypter
PKHex
ChecksumFixer
SaveDataFiler (Google is your friend)


The Process:

1. Make A Backup of your Pokemon game through the Powersaves Software


a7876d6643.jpg


e2c49f6bfa.jpg


2. Locate the Backed up file and Copy it to a different Folder. It should be in C:\Users\{user}\Powersaves3DS

fc13db6ae9.png


02fd99ea8b.png


3. Make a Copy Of the save so we can restore it back to the card later.

e84c0ecfa3.png


4. Open the file that is not a copy in HxD and replace Everything from 90x9C to the end with FF by selecting it all and using Fill Selection under the Edit menu. Then hit Save.

dd0d27d9ba.png


6dad0b5785.png


5. Use Datel Checksum Fixer on the Edited Save.

63344168d9.png



6. Copy the Fixed Save File Back to the PowerSaves Folder and then removed the " - [Fixed]" from it. Then open back up Powersaves and Restore the Save File to your Pokemon Card.

841660064d.jpg


7. Put the Cartridge Into a 3ds that has a 9.0-9.2 SysNand and Run the game. You only need to run the game and get to the Language Selection Screen on XY/ORAS then hit the Home Button and close the game.

29fa527a61.jpg


8. Put the game Cartridge back into the Powersaves Adapter and Run the Item Slot 1 x999 code on the cartridge.

f6e3990944.jpg


9. Remove the card from the Adapter and then put it back in. Then Make a backup of the save that is currently on the card Name it save1Keystream.

55a94a34eb.jpg


10. Go into the powersaves folder and copy the save1keystream backup to your decryption folder.

78a639a660.png


11. Open the PokemonSaveDecrypter select whether you are decrypting XY or ORAS and in the first box select the save1keystream backup we made and in the second select the Copy of the Save for Gateway that still contains our legit save. Hit Decrypt Save and save the decrypted save into our Decryption Folder.

c0b005cb54.png


2eefcc02de.png


12. Open the decrypted save in PKHex. If Everything went well your decrypted save should open without any errors.

5f553d5a9c.png


13. If your save opens in PKHEX then you should be all good to import it into a .3ds or a .cia using savedatafiler. Make sure when you do, you import the save and also delete the securekey so that the game will recognize the new save file.

If you have any questions feel free to post them below or shoot me a PM.
 

Sammt424

If you read this, you are an idiot.
Banned
Joined
Dec 27, 2012
Messages
191
Trophies
0
Location
The Universe
XP
184
Country
United States
Thanks bruh

Edit: In Datel Checksum Fixer, do we save it as a bin file because it normally saves a regular file on my computer.
 

ubergeek77

Post editing world champ.
Member
Joined
Dec 6, 2014
Messages
584
Trophies
0
XP
607
Country
United States
Since Pokemon is a more popular game that uses 6.0 encryption, can a similar process involving a Powersaves device and a decryption program allow us to dump other games that use 6.0 encryption? To name a few: Smash, Kirby Triple Deluxe, Bravely Default, and LoZ - A Link Between Worlds.

It looks like someone wrote a utility specifically for Pokemon, and found out where in hex things needed to be modified in order for the game to read it. But regardless, this means someone figured out 6.0 encryption, and most of the "hard" work in getting 6.0 saves is already done.
 
  • Like
Reactions: Margen67

jm_plata

Well-Known Member
Newcomer
Joined
Sep 12, 2009
Messages
60
Trophies
1
XP
255
Country
Mexico
There is a simple tutorial (credits to swarzesherz from project pokemon):

Directory of Powersaves: C:\Users\Your Name\Powersaves3DS

1.- Create a backup with Powersaves
2.- Open backup with "Open SAV1" in XORpad (just google it)
3.- Press "Clean SAV1"
4.- Copy new file to your PowerSaves directory and remove "-Fixed"
5.- Restore "-Fixed" save
6.- Run game, go to selection language, and exit from the game
7.- Put your game in Powersaves and apply "Slot 1 x999 modifier code."
8.- Remove your game and put again in Powersaves and create new backup and named Keystream
9.- Open Keystram whit "Open SAV1" in XORpad an open other save in "Open SAV2"
10.- Press "XOR ..." and the result can view with PKHeX
 
  • Like
Reactions: thaikhoa

mastermodr94

Well-Known Member
OP
Member
Joined
Dec 3, 2014
Messages
137
Trophies
0
Age
29
XP
204
Country
United States
Since Pokemon is a more popular game that uses 6.0 encryption, can a similar process involving a Powersaves device and a decryption program allow us to dump other games that use 6.0 encryption? To name a few: Smash, Kirby Triple Deluxe, Bravely Default, and LoZ - A Link Between Worlds.

It looks like someone wrote a utility specifically for Pokemon, and found out where in hex things needed to be modified in order for the game to read it. But regardless, this means someone figured out 6.0 encryption, and most of the "hard" work in getting 6.0 saves is already done.

well this works on save2 games because of the way we get the keystream. This technically will work with any save2 game by following the procedure and then instead of using the pokemon tool, xor the savestream with the encrypted save file using an xor utility. So this method will work with save2 games but not save1
 

Sammt424

If you read this, you are an idiot.
Banned
Joined
Dec 27, 2012
Messages
191
Trophies
0
Location
The Universe
XP
184
Country
United States
well this works on save2 games because of the way we get the keystream. This technically will work with any save2 game by following the procedure and then instead of using the pokemon tool, xor the savestream with the encrypted save file using an xor utility. So this method will work with save2 games but not save1

For save1 games we can use Gateway's default save extractor or an R4i Save Dongle?
 

ShizzleMyDizzle

Well-Known Member
Newcomer
Joined
Jan 2, 2015
Messages
70
Trophies
0
Age
29
XP
147
Country
Gambia, The
If you want to keep your pokemon than just upload them on pokemon bank, and download them back into your "InsertPokémongametitle"rom.
  1. Update your downgraded sysNand from 4.5 to 6.1 with your retail pokemon card game (Pokemon X for example) :!:
  2. Download Pokemon Bank! (If you already did it before, just to test it, then maybe you have to pay for a license).
  3. Transfer all of your pokemon into the "cloud".
  4. Reboot your 3DS.
  5. Boot into gateway mode (with Webbroswer exploit)
  6. Press [SELECT] and choose "InsertPokémongametitle", (for example Pokemon Omage Ruby). Do not start the game!
  7. Click on Pokemon Bank and get your pokemon back from the cloud.
  8. After that, start "InsertPokémongametitle" and you should see your digimons.
  9. Now you can downgrade your 3DS back if you want.
But, 4,99€/$ just to keep your pokemon :lol: ... Gateway have to solve this....
 

mastermodr94

Well-Known Member
OP
Member
Joined
Dec 3, 2014
Messages
137
Trophies
0
Age
29
XP
204
Country
United States
If you want to keep your pokemon than just upload them on pokemon bank, and download them back into your "InsertPokémongametitle"rom.
  1. Update your downgraded sysNand from 4.5 to 6.1 with your retail pokemon card game (Pokemon X for example) :!:
  2. Download Pokemon Bank! (If you already did it before, just to test it, then maybe you have to pay for a license).
  3. Transfer all of your pokemon into the "cloud".
  4. Reboot your 3DS.
  5. Boot into gateway mode (with Webbroswer exploit)
  6. Press [SELECT] and choose "InsertPokémongametitle", (for example Pokemon Omage Ruby). Do not start the game!
  7. Click on Pokemon Bank and get your pokemon back from the cloud.
  8. After that, start "InsertPokémongametitle" and you should see your digimons.
  9. Now you can downgrade your 3DS back if you want.
But, 4,99€/$ just to keep your pokemon :lol: ... Gateway have to solve this....

I have a feeling they will because the MT card can do it but this is mainly a guide for people who already own a powersaves for whatever reason and want to transfer their entire save not just the pokemon.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    K3Nv2 @ K3Nv2: Probably organic and healthier also +1