Hacking [Tutorial] Dump Retail Pokemon XY/ORAS Saves to Gateway with Powersaves

[mastermodr94]

Ok So I spent a lot of time yesterday trying to get this to work because there wasn't one main guide that went into detail on how this process worked. Here is a guide with pictures that shows the entire process. I will be using Pokemon X to show this process but it can be done with any of the 4 GenIV games.

Things You will need:
Windows Computer
Pokemon XY/ORAS game
Powersaves Device
Gateway Cartridge

Software Needed:
PowerSaves 3DS software
Hex Editor, I prefer HxD
Pokemon GenIV Save Decrypter
PKHex
ChecksumFixer
SaveDataFiler (Google is your friend)


The Process:

1. Make A Backup of your Pokemon game through the Powersaves Software

2. Locate the Backed up file and Copy it to a different Folder. It should be in C:\Users\{user}\Powersaves3DS

3. Make a Copy Of the save so we can restore it back to the card later.

4. Open the file that is not a copy in HxD and replace Everything from 90x9C to the end with FF by selecting it all and using Fill Selection under the Edit menu. Then hit Save.

5. Use Datel Checksum Fixer on the Edited Save.

6. Copy the Fixed Save File Back to the PowerSaves Folder and then removed the " - [Fixed]" from it. Then open back up Powersaves and Restore the Save File to your Pokemon Card.

7. Put the Cartridge Into a 3ds that has a 9.0-9.2 SysNand and Run the game. You only need to run the game and get to the Language Selection Screen on XY/ORAS then hit the Home Button and close the game.

8. Put the game Cartridge back into the Powersaves Adapter and Run the Item Slot 1 x999 code on the cartridge.

9. Remove the card from the Adapter and then put it back in. Then Make a backup of the save that is currently on the card Name it save1Keystream.

10. Go into the powersaves folder and copy the save1keystream backup to your decryption folder.

11. Open the PokemonSaveDecrypter select whether you are decrypting XY or ORAS and in the first box select the save1keystream backup we made and in the second select the Copy of the Save for Gateway that still contains our legit save. Hit Decrypt Save and save the decrypted save into our Decryption Folder.

12. Open the decrypted save in PKHex. If Everything went well your decrypted save should open without any errors.

13. If your save opens in PKHEX then you should be all good to import it into a .3ds or a .cia using savedatafiler. Make sure when you do, you import the save and also delete the securekey so that the game will recognize the new save file.

If you have any questions feel free to post them below or shoot me a PM.

 

[Sammt424]

Thanks bruh

Edit: In Datel Checksum Fixer, do we save it as a bin file because it normally saves a regular file on my computer.

 

[Margen67]

Can you edit retail saves without powersaves?

 

[mastermodr94]

Thanks bruh

Edit: In Datel Checksum Fixer, do we save it as a bin file because it normally saves a regular file on my computer.

Yes save it as a bin

 

[mastermodr94]

Can you edit retail saves without powersaves?

There is no way currently to edit the save and put it back onto the retail cart. Once you dump the save and decrypt it you cannot put it back onto the cartridge.

 

[Margen67]

There is no way currently to edit the save and put it back onto the retail cart. Once you dump the save and decrypt it you cannot put it back onto the cartridge.

Could I transfer the save to cia/eshop?

 

[mastermodr94]

Could I transfer the save to cia/eshop?

Yes you an use savedatafiler to import the decrypted save into cia using a gateway but there is no way to get the save back into a legitimate game.

 

[Gaara4]

It is possible to transfer Pokemon from Pokemon Y Gateway Savegame to a Alpha Saphier Savegame?

 

[thorasgar]

Can this method work with Animal Crossing new leaf?

 

[thaikhoa]

It is possible to transfer Pokemon from Pokemon Y Gateway Savegame to a Alpha Saphier Savegame?

Obviously wrongful. Use Pokebank/ manual transferring.

 

[Sammt424]

Thanks, it worked. Here is a cookie.

 

[ubergeek77]

Since Pokemon is a more popular game that uses 6.0 encryption, can a similar process involving a Powersaves device and a decryption program allow us to dump other games that use 6.0 encryption? To name a few: Smash, Kirby Triple Deluxe, Bravely Default, and LoZ - A Link Between Worlds.

It looks like someone wrote a utility specifically for Pokemon, and found out where in hex things needed to be modified in order for the game to read it. But regardless, this means someone figured out 6.0 encryption, and most of the "hard" work in getting 6.0 saves is already done.

 

[jm_plata]

There is a simple tutorial (credits to swarzesherz from project pokemon):

Directory of Powersaves: C:\Users\Your Name\Powersaves3DS

1.- Create a backup with Powersaves
2.- Open backup with "Open SAV1" in XORpad (just google it)
3.- Press "Clean SAV1"
4.- Copy new file to your PowerSaves directory and remove "-Fixed"
5.- Restore "-Fixed" save
6.- Run game, go to selection language, and exit from the game
7.- Put your game in Powersaves and apply "Slot 1 x999 modifier code."
8.- Remove your game and put again in Powersaves and create new backup and named Keystream
9.- Open Keystram whit "Open SAV1" in XORpad an open other save in "Open SAV2"
10.- Press "XOR ..." and the result can view with PKHeX

 

[mastermodr94]

Since Pokemon is a more popular game that uses 6.0 encryption, can a similar process involving a Powersaves device and a decryption program allow us to dump other games that use 6.0 encryption? To name a few: Smash, Kirby Triple Deluxe, Bravely Default, and LoZ - A Link Between Worlds.

It looks like someone wrote a utility specifically for Pokemon, and found out where in hex things needed to be modified in order for the game to read it. But regardless, this means someone figured out 6.0 encryption, and most of the "hard" work in getting 6.0 saves is already done.

well this works on save2 games because of the way we get the keystream. This technically will work with any save2 game by following the procedure and then instead of using the pokemon tool, xor the savestream with the encrypted save file using an xor utility. So this method will work with save2 games but not save1

 

[Sammt424]

well this works on save2 games because of the way we get the keystream. This technically will work with any save2 game by following the procedure and then instead of using the pokemon tool, xor the savestream with the encrypted save file using an xor utility. So this method will work with save2 games but not save1

For save1 games we can use Gateway's default save extractor or an R4i Save Dongle?

 

[mastermodr94]

For save1 games we can use Gateway's default save extractor or an R4i Save Dongle?

Yea ive heard the R4i Dongle works with save1 games but for right now the gateway's extractor only works with 512kb saves

 

[mat128]

Does this work with .3dz files?

 

[mastermodr94]

You need a powersaves and a retail cartridge for a .3dz file just use savedatafiler.

 

[ShizzleMyDizzle]

If you want to keep your pokemon than just upload them on pokemon bank, and download them back into your "InsertPokémongametitle"rom.

1. Update your downgraded sysNand from 4.5 to 6.1 with your retail pokemon card game (Pokemon X for example)
2. Download Pokemon Bank! (If you already did it before, just to test it, then maybe you have to pay for a license).
3. Transfer all of your pokemon into the "cloud".
4. Reboot your 3DS.
5. Boot into gateway mode (with Webbroswer exploit)
6. Press [SELECT] and choose "InsertPokémongametitle", (for example Pokemon Omage Ruby). Do not start the game!
7. Click on Pokemon Bank and get your pokemon back from the cloud.
8. After that, start "InsertPokémongametitle" and you should see your digimons.
9. Now you can downgrade your 3DS back if you want.

But, 4,99€/$ just to keep your pokemon ... Gateway have to solve this....

 

[mastermodr94]

If you want to keep your pokemon than just upload them on pokemon bank, and download them back into your "InsertPokémongametitle"rom.

1. Update your downgraded sysNand from 4.5 to 6.1 with your retail pokemon card game (Pokemon X for example)
2. Download Pokemon Bank! (If you already did it before, just to test it, then maybe you have to pay for a license).
3. Transfer all of your pokemon into the "cloud".
4. Reboot your 3DS.
5. Boot into gateway mode (with Webbroswer exploit)
6. Press [SELECT] and choose "InsertPokémongametitle", (for example Pokemon Omage Ruby). Do not start the game!
7. Click on Pokemon Bank and get your pokemon back from the cloud.
8. After that, start "InsertPokémongametitle" and you should see your digimons.
9. Now you can downgrade your 3DS back if you want.

But, 4,99€/$ just to keep your pokemon ... Gateway have to solve this....

I have a feeling they will because the MT card can do it but this is mainly a guide for people who already own a powersaves for whatever reason and want to transfer their entire save not just the pokemon.