Hacking Discussion Switch backup loading using Atmosphere-NX LayeredFS

[EmanueleBGN]

i feel like this invalidates staying on 3.0.0. i also ordered a TX device, so honestly with Homebrew and backups on 5.1.0, why bother with 3.0.0 anymore???

Maybe for 1.0 and 3.0 will be a coldboot sooner than for +3.0.1

 

[naamloosNL]

If only someone would modify hekate-ipl to make the process a bit easier


I'd love to try but I'd likely break something as I'm more used to the comfort and safety of languages like C# or Java

 

[ZeGerman]

By doing this you're running one game with it's cert on another game's TitleID. Doesn't sound like it would be hard at all for Nintendo to detect and ban for this.

Don´t go online with backups. Problem solved.

 

[Aldoria]

i feel like this invalidates staying on 3.0.0. i also ordered a TX device, so honestly with Homebrew and backups on 5.1.0, why bother with 3.0.0 anymore???

You can update but WAIT because there is a way to update without burning eFuses

 

[Thetoto]

Same error with Fortnite Title ID. :/

 

[cearp]

TX crying now

No, not yet.
This exact method is a very cheap+dirty way of piracy.

It doesn't compare to what tx offer.

 

[Thetoto]

Oh ! I made an error on Hex editing. I'll try again

 

[ehnoah]

1) Get a title id of any game you have installed from http://switchbrew.org/index.php?title=Title_list/Games (this is your target titleid)
2) Create a directory on SD : sd:/atmosphere/titles/*target_titleid*
3) use hactool to extract the romfs.bin and exefs files from your main game nca (its in secure from XCI - the biggest one)
4) put romfs.bin in sd:/atmosphere/titles/*target_titleid*/romfs.bin, exefs files into sd:/atmosphere/titles/*target_titleid*/exefs/
5) Edit titleid in main.npdm (in exefs) to contain target title id (this might help http://switchbrew.org/index.php?title=NPDM)
6) run a fs_mitm containing CFW release, run your target app (https://gbatemp.net/threads/how-to-get-layeredfs-working.507460/)

Note that saves don't work for me atm, you should wait for mememenu/similar.
Minecraft works, others not tested.

proof video:

What I dont get currently is, where we put the Game we want to run?

Step 1: Get Tittle ID of own game (Like Splatoon)
Step 2: Create a Folder with Splatoon Title ID (since we target this App to be overwritten)
Step 3: Extract the Romfs.bin and exefs File System from your Main Game NCA? (so again from Splatoon?, I just managed to extract the romFS)
Step 4...

Or is Step 3 already the game we want to run?

 

[Bladexdsl]

too much hassle i'll just use SX pro plug and play

 

[Deleted User]

By doing this you're running one game with it's cert on another game's TitleID. Doesn't sound like it would be hard at all for Nintendo to detect and ban for this.

What I dont get currently is, where we put the Game we want to run?

Step 1: Get Tittle ID of own game (Like Splatoon)
Step 2: Create a Folder with Splatoon Title ID (since we target this App to be overwritten)
Step 3: Extract the Romfs.bin and exefs File System from your Main Game NCA? (so again from Splatoon?, I just managed to extract the romFS)
Step 4...

Or is Step 3 already the game we want to run?

Step 3 is already the game you want to run.

 

[ehnoah]

Step 3 is already the game you want to run.

Got it thy! So about the exefs what is the command for? Using HackToolGUI so maybe this option is missing, extracting RomFS is fine, you get a RomFS File, I guess you can just rename to .bin

 

[wii94]

No, not yet.
This exact method is a very cheap+dirty way of piracy.

It doesn't compare to what tx offer.

bro, give it 1-2 month... free solution will be better than TX

 

[Deleted User]

Got it thy! So about the exefs what is the command for? Using HackToolGUI so maybe this option is missing, extracting RomFS is fine, you get a RomFS File, I guess you can just rename to .bin

--exefsdir
you need to give it a folder to put the exefs files into

 

[Thetoto]

After some try, i can't play anything. Will wait for more proper method ^^

 

[Shirpie]

Bye sx os

 

[cearp]

bro, give it 1-2 month... free solution will be better than TX

Sure, but tx are not crying.
In a month, maybe.

 

[Thetoto]

Th

Got it thy! So about the exefs what is the command for? Using HackToolGUI so maybe this option is missing, extracting RomFS is fine, you get a RomFS File, I guess you can just rename to .bin

Threre is no command for this in HactoolGUI. You need to use the black terminal.

 

[MHDestination]

What I dont get currently is, where we put the Game we want to run?

Step 1: Get Tittle ID of own game (Like Splatoon)
Step 2: Create a Folder with Splatoon Title ID (since we target this App to be overwritten)
Step 3: Extract the Romfs.bin and exefs File System from your Main Game NCA? (so again from Splatoon?, I just managed to extract the romFS)
Step 4...

Or is Step 3 already the game we want to run?

No you'll have to extract the romfs and exefs of the game you actually want to run

 

[Deleted member 384851]

Working all good here, thanks for the easy tutorial. Happy to upload proof if anyone cares, otherwise I'm off to fiddle some more.

 

[Deleted member 361542]

Working all good here, thanks for the easy tutorial. Happy to upload proof if anyone cares, otherwise I'm off to fiddle some more.

Please upload proof, i care