Hacking How to access your Switch's eMMC or microSD card as an USB disk on your PC

[Kairu43]

Perhaps I'm missing something major, but things don't appear to be working for me. Any help would be appreciated.

When I select ums_emmc.ini I get the following output

Read 178 bytes from 'ums_emmc.ini', parsing...
Cannot find = separator in kv pair '' on line 0, skipping

------------------------------------------------------------------------------------
I'm unable to see the emmc in HacDiskMount.

I get similar results from every .ini, and yes, I've tried the v2 release and the uboot folder and all it's contents (u-boot.elf, ums_emmc.src.img, etc...)are on the root of my sd card.

Here's the contents of ums_emmc.ini:
[loadH_0]
if=uboot/u-boot.elf
skip=0x00010000
count=0x0007c1bf
dst=0x80110000

[load:script]
if=uboot/ums_emmc.scr.img
dst=0x80100000

[boot:ENTRY]
pc=0x80110000

 

[jacopastorius]

very useful tool, thank you! Is it possible to reboot to cfw directly after copying some content to sd? Or do i need to power off with the power button, enter in rmc and push a payload?

 

[Draxzelex]

very useful tool, thank you! Is it possible to reboot to cfw directly after copying some content to sd? Or do i need to power off with the power button, enter in rmc and push a payload?

You are confused. This tool uses the same exploit as all currently available CFW. And the only way to utilize that exploit is by sending a payload in RCM. Being able to boot CFW without sending a payload requires another exploit such as Deja Vu.

 

[jacopastorius]

ok, thank you for explaining Draxzelex

 

[DeMoN]

Is there any way to connect the switch to my PC and transfer files while I'm already in CFW (reinx)? I'm just trying to avoid rebooting my switch to access the SD.

 

[hippy dave]

Is there any way to connect the switch to my PC and transfer files while I'm already in CFW (reinx)? I'm just trying to avoid rebooting my switch to access the SD.

Look for sys-ftpd

 

[dovere]

can i erase all data on my switch nand with this?? like a factory reset? i have a banned switch and i want to delete my user account (Nintendo already unlinked it serverside)

EDIT: I just did it thanks for the awesome tools

 

[EmulateLife]

This is working for me but is there no way out of it without turning off your Switch having to use your jig again to get to RCM and do it again? That sort of defeats the point for me I'm trying to limit jig use.

 

[Draxzelex]

This is working for me but is there no way out of it without turning off your Switch having to use your jig again to get to RCM and do it again? That sort of defeats the point for me I'm trying to limit jig use.

You can just use AutoRCM to reboot into RCM as opposed to a jig.

 

[Jayro]

I just want an adapter that clips the eMMC to a USB dongle directly, that can be mounted with read/write under Windows and Linux for the FAT32/exFAT partitions.

 

[hippy dave]

I just want an adapter that clips the eMMC to a USB dongle directly, that can be mounted with read/write under Windows and Linux for the FAT32/exFAT partitions.

It's been done (well via an sd card reader), but I don't know if you can just buy one.

 

[rajkosto]

memloader v3 is out, which increases UMS transfer speeds by 80% for normal users

 

[hippy dave]

memloader v3 is out, which increases UMS transfer speeds by 80% for normal users

What if I'm abnormal?

 

[rajkosto]

then you already compiled coreboot.rom yourself since the release of memloader with your own sourced copy of google's memory trainer, and always had these speeds.

 

[hippy dave]

then you already compiled coreboot.rom yourself since the release of memloader with your own sourced copy of google's memory trainer, and always had these speeds.

I guess I'm a different kind of abnormal.

 

[MK100]

so i used this tool w/ hekate and tegrarcmgui and now my switch is crashin

 

[K1ck09]

Perhaps I'm missing something major, but things don't appear to be working for me. Any help would be appreciated.

When I select ums_emmc.ini I get the following output

Read 178 bytes from 'ums_emmc.ini', parsing...
Cannot find = separator in kv pair '' on line 0, skipping

------------------------------------------------------------------------------------
I'm unable to see the emmc in HacDiskMount.

I get similar results from every .ini, and yes, I've tried the v2 release and the uboot folder and all it's contents (u-boot.elf, ums_emmc.src.img, etc...)are on the root of my sd card.

Here's the contents of ums_emmc.ini:
[loadH_0]
if=uboot/u-boot.elf
skip=0x00010000
count=0x0007c1bf
dst=0x80110000

[load:script]
if=uboot/ums_emmc.scr.img
dst=0x80100000

[boot:ENTRY]
pc=0x80110000

I'm getting a similar issue...

 

[Mickysky]

I'm getting a similar issue...

K1ck09 you managed to solve the problem, I'm in the same situation

 

[K1ck09]

K1ck09 you managed to solve the problem, I'm in the same situation

Unfortunately no, I replaced BQ24193 but now it doesn't charge. I'm getting a flashing issue in that chip.

 

[Mickysky]

I get to enter RCM and autorcm on the device, check the efuses with Hekate and it has 6 burns I presume that it must have FW 5.xx (I do not know which firmware was installed since the device was given in these conditions), if I prendo normal without RCM the console is black does not manage to reach the logo of nintendo, but in RCM mode and AUTORCM I managed to launch with tegragui payload Atmosphère Reinx but in both cases the screen remains frozen about 5 sec in the logos of Atmosphère, Reinx and then it is black.

I managed to backup Boot 0/1 and rawnand.bin, to rebuild the nand thinking that it could be bad firmware problem flashed, once I have the files ready to go to the nand when I want to mount the unit by memloader from tegragui BOOT section 'RCM' appears
pc = 0x80110000
1zma: Decoding error = 1
[MTC_LOAD] Error during 1zma decompression, got 246400 instead of 4294967295 bytes out!

when loading the memloader files to the sd and launching memloader.bin of the tegragui it appears

if = uboot / ums_emmc.scr.img
dst = 0x80100000

[boot: ENTRY]
pc = 0x80110000

and it is impossible to see in HacDiskMount this happens when trying to load Boot 0/1, emmc, sd.

Something curious happens that every time an image appears on the screen of the device, whether the reinx logo, Atmosphère or Hekate menu when the device is restarted, the images remain as a background shadow on the screen while the new image appears and the colors appear with horizontal lines, I do not know if this screen is a problem or some component of the pcb that causes this problem, thanks for the help.

excuse my bad English.