Hacking [HOWTO] Use OOT Exploit on SKY3DS/Non Working Carts

[roxararmada]

EU GW OOT Save WIP is not available yet. Not all Oot retail cart is compatible. You will have to wait for GW to provide a bug free saves in thier next release. Read is thread about Oot compatiblilty: https://gbatemp.net/threads/gateway-3-1-zelda-oot-compatibility-list-please-post.383544/

Ok thank's, I just have to wait

 

[Wowfunhappy]

Yep, I've confirmed that the crc of my OOT rom is correct. I don't get what could be causing the white screen... I'm not doing anything differently from anyone else!

 

[DjoeN]

I don't get it now? So, I can run GW exploit using Ocarina and Sky3DS without GW?

My friend already has a GW, just no Zelda OOT or Sky3DS

 

[sonic2756]

Do you still need some? I didn't send you mine, I thought you had already everything you need.

Do you still need some? I didn't send you mine, I thought you had already everything you need.

I can have the save fixed in ~10 minutes if you PM me that dump. What I need you to do first is open the game, make a new save in the profile 1 slot, then dump it and PM it to me.

 

[Breith]

I've already a full dump of the game!

I'll do that as soon I'm back home.

 

[Suthek]

I don't get it now? So, I can run GW exploit using Ocarina and Sky3DS without GW?

The Sky3ds is to replace the requirement of a retail Ocarina of time.

You need.
Gateway Card
Zelda OoT (or Sky3ds running OoT) - With an exploited save on either. (depending on your choice.)

 

[Suthek]

I can have the save fixed in ~10 minutes if you PM me that dump. What I need you to do first is open the game, make a new save in the profile 1 slot, then dump it and PM it to me.

Have you tried exploiting Rev01 saves yet? Or is the whole Rev01 thing just being avoided?
I don't even own zelda OoT but I'm holding off buying the game until I know a new in box retail copy will work. :/

 

[sonic2756]

Have you tried exploiting Rev01 saves yet? Or is the whole Rev01 thing just being avoided?
I don't even own zelda OoT but I'm holding off buying the game until I know a new in box retail copy will work. :/

I'm assuming game offsets and such changed in r01 so I don't think I can fix that myself, but I can give it a shot I suppose.

 

[delt31]

To make the thread a little less confusing - on the first post, it might make sense to put the GW steps after SKY steps or explain why it's listed. I figure most are looking to use sky to replace Zelda disk yet the instructions start with GW which might confuse some (they might think it's necessary to get this to work but it's not). Just an FYI - this is what I'm ref to:

GW Fix Steps (For those with corrupted saves):
Step 1: Download SAV linked below
Step 2: Restore to card
Step 3: ??????
Step 4: PROFIT

 

[TheBroCode]

Is there a guide for dumping saves using SaveDataFiler? never done it before and I'm just getting -- broken -- for CTR Card and everything else.

 

[sonic2756]

Is there a guide for dumping saves using SaveDataFiler? never done it before and I'm just getting -- broken -- for CTR Card and everything else.

You need to be using the CFW to dump retail carts with SDF

 

[TheBroCode]

Oh damn, I'll leave it then >_<

 

[Redeman9911]

Hi Sonic.

Would a full dump of my non working EU version be of any use to help us EU gateway users?

 

[Nephiel]

Say, do I need to hunt for a Rev00 retail OoT cart, or would a Rev01 or Rev02 do?

 

[Aurora Wright]

I followed the following steps:
I used the old save decrypter, since Oot is old enough to have the crypto fail. This way, I extracted the hacked save00.bin and system.DAT (if I remember the filenames correctly). Then, I dumped the save with 4.5 CFW from my non working oot EU cart and replaced the decrypted files with gw ones. Imported back, the save appears to work but the screen only flashes white after pressing A, it doesn't load the Launcher. I assume a later part of the ROP chain isn't in the decrypted files but somewhere else in the save structure.

 

[sonic2756]

I followed the following steps:
I used the old save decrypter, since Oot is old enough to have the crypto fail. This way, I extracted the hacked save00.bin and system.DAT (if I remember the filenames correctly). Then, I dumped the save with 4.5 CFW from my non working oot EU cart and replaced the decrypted files with gw ones. Imported back, the save appears to work but the screen only flashes white after pressing A, it doesn't load the Launcher. I assume a later part of the ROP chain isn't in the decrypted files but somewhere else in the save structure.

PM me the .sav, I can fix it.

 

[sonic2756]

Updated OP with a fixed EU retail save. Uploading another one just in case that one doesn't work for certain people.

 

[dashkiller]

Updated OP with a fixed EU retail save. Uploading another one just in case that one doesn't work for certain people.

Can confirm this works with AQEP510192 (LNA-CTR-AQEP-EUR)! Thank you very much!

 

[TheBroCode]

Tested, worked perfectly first time. Thank you sonic!

 

[Redeman9911]

You are a legend!!!