Tutorial  Updated

Play NSP (eShop Games) via Hekate LayeredFS (WITHOUT SX OS / DEVMENU)

WARNING! If you get banned somehow, I'm not responsible

------------------------------------------------------------
------------------------------------------------------------

UPDATE 7/23:

Tutorial is now outdated because you can now "Install" NSP via DevMenu
Follow either one of these threads
Hekate LayeredFS Full Sig Patches
CTCaer Hekate patch

------------------------------------------------------------
------------------------------------------------------------

UPDATE 7/22:
The following script is a All-In-One tool, thanks to @Assasin1990 and @Ericjwg and replaces STEP 3 below (along with titlekey step)
Simply download the script NCA-NSP-XCI To LayeredFS v1.6
Note: You will need to have keys.ini file
Run the .bat file and follow the commands

------------------------------------------------------------
------------------------------------------------------------

OVERVIEW:
This guide will explain how to play eShop games (aka NSP files) without SX OS and without Dev Menu
Note: if this guide is too advanced for you, wait for automated tools

REQUIREMENTS (TESTED WITH):
Nintendo Switch Firmware 5.1.0
Hekate - CTCaer mod v3.1
TomGer's SDFiles v5 - Rocket Man
Hactool 1.1.0

Note: if you test on older SDFiles/CTCaer/Switch FW and it doesn't work, you are on your own

DO NOT NEED:
Dev Menu
SX OS

--------------------------------------------------------------

Note: Following steps were tested successfully with Hollow Knight, Enter the Gungeon, Poly Bridge & Fast RMX (NSPs)

STEP 1: READ
Meet the requirements mentioned above

STEP 2: PREP FILES
Acquire the NSP file by whatever means
Extract hactool files in the same folder as NSP file
Make sure your keys file also exists in same folder
(if you dont have keys file ready, google Maxconsole Underground Skull & Crossbones)
Note: this guide uses "keys" as .txt file

STEP 3: EXTRACT
Extract the NSP file via hactool by going into command prompt and execute in your working directory;

hactool -t pfs0 -k keys.txt game.nsp --pfs0dir=extract

(keys.txt or keys.ini or keys.dat whatever you want to use, make sure to rename in command and as long as it contains all the keys needed)

All the files will now be located in your currentFolder/extract

upload_2018-7-17_23-40-48.png


Find the biggest NCA in filesize located in the 'extract' folder (Tip: rename the file into game.nca)

Then execute one of the following;

If you prefer 1 RomFS.bin file, execute the following:

hactool -k keys.txt --titlekey=CopyPasteKeyHere --exefsdir=exefs --romfs=romfs.bin game.nca

upload_2018-7-17_23-45-3.png


Otherwise if you prefer all game file extracted into a folder, execute the following:

hactool -k keys.txt --titlekey=CopyPasteKeyHere --exefsdir=exefs --romfsdir=romfs game.nca

-------------------------------------------------------------
FOLLOWING STEPS ARE FOR FINDING TITLE KEY
-------------------------------------------------------------

Note: Following steps were tested with Hollow Knight

PICK 1 METHOD: Web-based or Stand Alone Application

WEB-BASED

Go to https://hexed.it/ (or use any Hex Editor)

upload_2018-7-17_23-50-56.png


OR Stand Alone Application
Download HxD - Freeware Hex Editor
Change view by going to 'VIEW > Byte group size > set it to 16
(Able to select the entire key and copy / paste easily)

upload_2018-7-19_12-58-9.png

(Key above modified to mask actual values)

Open the .tik file located in your currentFolder/extract (you can even drag and drop)
Go to address 0x180 and you will see a long string of values (16 columns, 32 characters)
This is the unique title key for your nsp file (note it down without spaces)
Example: 18420AE8##############E3FEAC (values masked due to legal reason)

-------------------------------------------------------------

STEP 4: PATCH
Patch the main.npdm file with donor title by going to
http://carlus.altervista.org/nx/title_id_patcher.html

Enter the TitleID of the donor title
Drag and Drop your main.npdm file
Download and overwrite

upload_2018-7-17_23-51-52.png


STEP 5: TRANSFER
Using the donor TitleID from previous step, create a folder on your Switch SD Card
//atmosphere/titles/<donorTitleID>/
Copy the romfs and exefs files in this Donor TitleID folder

STEP 6: PLAY
Begin by launching firmware "Older LayeredFS" option (some games 'might' work in newer LayeredFS option)
Run the Donor Title
If any error occurs, simply patch the main.npdm with another donor title ID and rename the folder with new donor title ID

-------------------------------------------------------

Sample Donor Titles to use:
Pinball FX3 - 0100DB7003828000
Happy Birthdays Demo - 010083600AE9E000
Octopath Demo - 010096000B3EA000
Pokemon Quest - 01005D100807A000
Fallout Shelter - 010043500A17A000

-------------------------------------------------------

TOOL:
Once you understand how all of this works "manually", I highly recommend following this other guide by @huma_dawii and tool created by @Assasin1990
https://gbatemp.net/threads/extract-nsp-nca-xci-update-all-in-one-tool-for-layeredfs.511156/

-------------------------------------------------------

TROUBLESHOOTING:

Error:
Invalid NCA header! Are keys correct?

Fix 1:

Make sure your keys file is valid, format is
master_key_00 = C2...
master_key_01 = 54...
and so on

Fix 2:
if your keys file is .ini, make sure your hactool command mentions keys.ini (replace .txt)

----------------------------------------------------------------------------

Error: section 0 is corrupted!
Error: section 1 is corrupted!

Fix 1:
Wrong title key, hex edit again and grab the 0x180 address values again
Sample entry for Sonic Mania : --titlekey=4BFF1#####DAC57#####B322 (Full value masked due to legal reasons)
 
Last edited by HoTsHoTz79,

HoTsHoTz79

GIC-Developer
OP
Member
Joined
May 9, 2018
Messages
322
Trophies
0
Age
39
XP
964
Country
Canada
I am wondering how this thread has not gone crazy yet. This seems to be what many of us have been waiting for, or am I missing something?

Is there better compatibility with this then LayeredFS with xci's? Looking forward to some results. I plan to test soon, can't just yet.

I saw multiple tutorials for NSP / eShop games but with SX OS... and couple users asked about LayeredFS ... because theres so a lot out there in each thread... useful info like this gets buried, so i decided to make this tutorial

I discovered this method in the LayeredFS thread - @Mat37 & @EmperorX provided directions on how to do

as far as compatibility goes.. i am not sure... i have cartridge games as XCI and eShop only titles as NSP
so i didn't try games like Super Mario Odyssey as NSP...
 
Last edited by HoTsHoTz79,

Wolfy

Person That Never Was
Member
Joined
Aug 18, 2015
Messages
1,131
Trophies
0
Age
25
Location
Somewhere In The Aether...
XP
3,004
Country
United States
It is cool that this is a thing now, though I'll probably wait till it's easier to do without having to check Hexes.

*thought it was Sig Patches with hekate before so I was hyped XD too good to be true I guess*
 

HoTsHoTz79

GIC-Developer
OP
Member
Joined
May 9, 2018
Messages
322
Trophies
0
Age
39
XP
964
Country
Canada
Stand Alone Application
Download HxD - Freeware Hex Editor
Change view by going to 'VIEW > Byte group size > set it to 16
(Able to select the entire key and copy / paste easily)

View attachment 136341
(Key above modified to mask actual values)

Added optional step for retreiveing TitleKey via HxD
Allows user to copy the key by selecting the value.. the HexEd.it site doesn't allow copy command
 

HoTsHoTz79

GIC-Developer
OP
Member
Joined
May 9, 2018
Messages
322
Trophies
0
Age
39
XP
964
Country
Canada
I get Section 0 is corrupted with the correct titlekey. I am using Enter The Gungeon
gotta be the titlekey

try to get the key again (try the new step i added, using HxD)

key for enter the gungeon is something like .... DF9A-----------FE83
 

HoTsHoTz79

GIC-Developer
OP
Member
Joined
May 9, 2018
Messages
322
Trophies
0
Age
39
XP
964
Country
Canada
Nevermind romfs.bin now extracts but exefs does not extract!

if the NCA you are trying to extract only gives RomFS.bin... then theres no "Partition Type of ExeFS"
Game NSP and Update NSP both should have ExeFS...
DLCs do not have an ExeFS

so maybe your NSP file is a DLC perhaps?
 
  • Like
Reactions: Assasin1990

Beware

Well-Known Member
Member
Joined
Apr 5, 2007
Messages
1,141
Trophies
1
XP
652
Country
United States
So is there any way to get DLC into titles? This method works great, but the main games I want to play are Doom and Wolfenstein.

Compatibility is a little weird. It doesn't necessarily match up with the Awesome Table compatibility list. The games I have working with free/demos:

Ikaruga w/ Pinball FX3
Hollow Knight w/ Stern Pinball
Dead Cells - Super One More Jump
Bloodstained: CotM - Pokemon Quest
Axiom Verge - Fortnite
Skyrim - Octopath Prologue
DKCR: Tropical Freeze - Octopath Prologue
Crash Bandicoot Trilogy - The Pinball Arcade

I'm unsure if they all save, I'll update this post if it turns out they don't.
 

HoTsHoTz79

GIC-Developer
OP
Member
Joined
May 9, 2018
Messages
322
Trophies
0
Age
39
XP
964
Country
Canada
So is there any way to get DLC into titles? This method works great, but the main games I want to play are Doom and Wolfenstein.

Compatibility is a little weird. It doesn't necessarily match up with the Awesome Table compatibility list. The games I have working with free/demos:

Ikaruga w/ Pinball FX3
Hollow Knight w/ Stern Pinball
Dead Cells - Super One More Jump
Bloodstained: CotM - Pokemon Quest
Axiom Verge - Fortnite
Skyrim - Octopath Prologue
DKCR: Tropical Freeze - Octopath Prologue
Crash Bandicoot Trilogy - The Pinball Arcade

I'm unsure if they all save, I'll update this post if it turns out they don't.

DLC, couple of us tried to merge onto the base games but no luck.
My findings were that the DLCs have only one section 'Section 0 with Partition type of RomFS'
Meanwhile, the base games/updates have Partition type of RomFS in Section 1
So when you try to use hactool to merge, the Section 0 cant merge with Section 1

Anyways... i cant fully confirm Wolfenstein as i just finished chapter 1 only but i am currently playing the updated RomFS using 'XCI' merge with Update NSP

People still messing with this layeredfs SHIT, FFS just splash out, Broke back arses

yea you are right, might as well splash out and buy the games /s
 

Zumoly

GBATemp Analyst
Member
Joined
Apr 27, 2018
Messages
1,817
Trophies
0
Location
Yorosso
XP
3,099
Country
Mali
So is there any way to get DLC into titles? This method works great, but the main games I want to play are Doom and Wolfenstein.

DLC does not play nice being merged with the base game and the update as romfs (dunno why?)
But from what I can tell if you have the Card Game, the DLC will work just fine so long you have updated your game to see the DLC.
 

xHR

Well-Known Member
Member
Joined
Apr 20, 2013
Messages
125
Trophies
1
Age
36
Website
twitter.com
XP
1,000
Country
Could you give some working donors? I wrote script for unpacking xci and nsp (nsp_xci_decryptor on github), but cannot find any working pair for nsp for testing
 

HoTsHoTz79

GIC-Developer
OP
Member
Joined
May 9, 2018
Messages
322
Trophies
0
Age
39
XP
964
Country
Canada
Could you give some working donors? I wrote script for unpacking xci and nsp (nsp_xci_decryptor on github), but cannot find any working pair for nsp for testing

I've tested FastRMX, Hollow Knight and Enter the gungeon using the following donors
Happy Birthdays Demo 010069700AF9C000
Pinball FX3 0100DB7003828000

There is this script too if you haven't checked it out yet

TOOL:
Once you understand how all of this works "manually", I highly recommend following this other guide by @huma_dawii and tool created by @Assasin1990
https://gbatemp.net/threads/extract-nsp-nca-xci-update-all-in-one-tool-for-layeredfs.511156/
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    K3Nv2 @ K3Nv2: Pass