Hacking Hack SXOS

[eyeliner]

Of course. But imagine from a big N view here and devs.
XCI is only for piracy while NSPs are of course used for piracy as well, but it's also a good format for other things like homebrew etc.

Is there any indicator in which a homebrew NSP installed on the system is safe from ban?
We know that a pirated game is banner time, but has anyone been online with homebrew installed and not been banned?

My understanding is that an XCI doesn't leave a trace on the system, or something? As there is no instalation, there's no residuals on the system, but I don't don't know what telemetry Nintendo takes.

Thanks.

 

[lordelan]

Then you're free to add USB support for it and also create XCI support.

Thanks, I know I'm free to do so but I'm not capable of doing it with my current skills and I don't see me wasting my limited free time after my job to get into the subject far enough to change that.
So I'll stay here hoping someone else does the magic. I'd pay or donate for it but that's all I'm going to do.
Also I'm not offending anyone (including you). Just wanted to point out that the "XCI is for pirates only" argument is not valid and I'm tired reading/hearing that.

Btw: USB is already usable in Atmosphère. Mounting XCIs is the only unavailable feature yet.

I see this argument so many times - that's like saying CD-R/DVD-R/BD-R are all used only for piracy.
Yes, it might be used by the majority of people for piracy, but there are still people here who would use it for their personal backups.
It's also easier to handle, you don't need to install it after you copied to your switch or HDD - just mount it and play.
To me that sounds like way less "hassle" than the NSP method (which also is used by pirates for their means).

Also, you can pack your homebrews into XCIs if you want...

Thank you. I for myself am a super lazy guy and love if I setup things only once and have them running then.
On a very meticulous and stupid level (I know that) this even includes the "need to change/swap cartridges or discs" to play different games.
That's why I like digital games. I'm rather buying a 12 TB drive for my PC and download all my Steam games than spamming my bookshelf with hundreds of physical DVD boxes of games, especially when I have to get my ass up and put in different discs each time I wanna play something else.
That - and not piracy - is the reason why I'm so glad that something like USB Loader GX for the Wii exists and why Nintendo officially allowed to install games to USB on the Wii U.

That's also the reason why I'm glad digital games exist on the Switch. Even if I don't have to get up from the couch to swap my cartridges as I could put them beside me, I still dislike the "need" to do something hardware-wise between launching different games.
However the Switch has two disadvantages here:

1. The only (officially allowed) storage is the mcro SD card and that's limited/expensive
2. Digital games may disappear for good at some point (when the eShop goes offline in a few years) - this also affects physical games as they are not able to (re)download their updates and DLCs when that happens

That's why it's nice that you can dump you eShop games, updates and DLCs, merge them into a single XCI (with NSC Builder) and store them on an external USB drive forever from where you can still launch them whenever you want with SX OS, no matter what happens to the eShop and no matter how much space you have left on your SD card.
But because SX OS is a drowning ship, it would be nice to have that single nice feature ported over to Atmosphère finally.

 

[mrdude]

@Reacher17

I had a try with the keys you mentioned and wrote some scripts to dump the sections.

Put boot.dat in folder
Run dump-p90-from-bootdat.py - to get decrypted p90 file.
Dumped file will be decrypted. (you can re encrypt with p90-re-encrypt.py)
Extract payload parts - supposed to dump and decrypt sections from the payload. (use included script)

I've included the files I made - the extracted parts from p90 still look encrypted if you dump them from encrypted or decrypted p90 file.

Can you have a look please, and maybe explain a little better on what to do, as far as I know I have followed your instructions properly.

 

[tivu100]

NSPs are used for others than piracy.
XCI is ONLY for piracy.

I think you got it backward.

XCI loader and its like (such as ISO, CSO driver/loader, 3ds file loader...) main purpose is loading back up. It's preferred as it's more convenient thus being targeted by pirates.

Leaving piracy, straight forward loader is the best for backing up your game/ media, especially physical cartridge. Easier to move this digital back up version around, and call upon.

Just because piracy is doing a bad rap on homebrew, we have been taking a drastic measurement and make our lives misery with this black vs white approach.

Perhaps, we doesn't need XCI loader right now, but say in few years times, when new console comes out, and Switch gets discontinued, perhaps the homebrew developers would be more open to the idea of XCI loader?

Now where is my 3ds file loader, upgraded Loadiine?

 

[shivoooooo]

Thanks, I know I'm free to do so but I'm not capable of doing it with my current skills and I don't see me wasting my limited free time after my job to get into the subject far enough to change that.
So I'll stay here hoping someone else does the magic. I'd pay or donate for it but that's all I'm going to do.
Also I'm not offending anyone (including you). Just wanted to point out that the "XCI is for pirates only" argument is not valid and I'm tired reading/hearing that.

Btw: USB is already usable in Atmosphère. Mounting XCIs is the only unavailable feature yet.

Thank you. I for myself am a super lazy guy and love if I setup things only once and have them running then.
On a very meticulous and stupid level (I know that) this even includes the "need to change/swap cartridges or discs" to play different games.
That's why I like digital games. I'm rather buying a 12 TB drive for my PC and download all my Steam games than spamming my bookshelf with hundreds of physical DVD boxes of games, especially when I have to get my ass up and put in different discs each time I wanna play something else.
That - and not piracy - is the reason why I'm so glad that something like USB Loader GX for the Wii exists and why Nintendo officially allowed to install games to USB on the Wii U.

That's also the reason why I'm glad digital games exist on the Switch. Even if I don't have to get up from the couch to swap my cartridges as I could put them beside me, I still dislike the "need" to do something hardware-wise between launching different games.
However the Switch has two disadvantages here:

1. The only (officially allowed) storage is the mcro SD card and that's limited/expensive
2. Digital games may disappear for good at some point (when the eShop goes offline in a few years) - this also affects physical games as they are not able to (re)download their updates and DLCs when that happens

That's why it's nice that you can dump you eShop games, updates and DLCs, merge them into a single XCI (with NSC Builder) and store them on an external USB drive forever from where you can still launch them whenever you want with SX OS, no matter what happens to the eShop and no matter how much space you have left on your SD card.
But because SX OS is a drowning ship, it would be nice to have that single nice feature ported over to Atmosphère finally.

In short. The big problem of the last decade, moving your ass from the chair to the ledge.

Anyway
It's funny to read how people wonder (with a tone of complaint) that nobody is doing the adaptation of the XCI format to Atmosphere, when their greatest achievement is copying or dragging files from a sd card. It's not about ability, it's just about not being an idiot. Since it will not be you (whoever you are), the one who is persecuted with a lawsuit to make you rot and collect soaps in jail, for the simple whim of another.

 

[mspy]

Since it will not be you (whoever you are), the one who is persecuted with a lawsuit to make you rot and collect soaps in jail, for the simple whim of another.

Yes, because it is really hard to drop a bunch of code to the internet anonymously just like it is really hard to drop dozens of pirate games everyday right?

 

[Reacher17]

@Reacher17

I had a try with the keys you mentioned and wrote some scripts to dump the sections.

Put boot.dat in folder
Run dump-p90-from-bootdat.py - to get decrypted p90 file.
Dumped file will be decrypted. (you can re encrypt with p90-re-encrypt.py)
Extract payload parts - supposed to dump and decrypt sections from the payload. (use included script)

I've included the files I made - the extracted parts from p90 still look encrypted if you dump them from encrypted or decrypted p90 file.

Can you have a look please, and maybe explain a little better on what to do, as far as I know I have followed your instructions properly.

 

[whitezombie]

FYI for those that use Hekate and Atmosphere for dual booting and cracked SXOS, I found the problem why tinfoil gives you a red screen.

Tinfoil dev decided to do a license check, if this fails it assumes you are running a different CFW and checks for bootloader/patches.ini, If you press Y in tinfoil during this red screen, tinfoil removes your patches.ini file from your bootloader folder.

To overcome this minor annoyance - rename bootloader/patches.ini to bootloader/patched.ini and use the attached modded hekate files.

hekate.bin - this is the payload launcher.

Other files go into bootloader/sys folder.

Awesome work mrdude! If you wouldn't mind sharing...What file in the hekate source do you edit to change that? I appreciate the work you and Reacher17 have done!

 

[HenryMin]

Awesome work mrdude! If you wouldn't mind sharing...What file in the hekate source do you edit to change that? I appreciate the work you and Reacher17 have done!

hekate/pkg2.c at master · CTCaer/hekate (github.com)

 

[RideOnTheStorm]

Here you have an updated version of the script to change boot logo.
before launching the script you need to have an image edited for packing on boot.dat
tested with gimp :
create your image with 768x1280
Apply an horizontal mirror.
export image as 32bits ARGB bmp(uncheck compatibility options)

Open your image with an hex editor
Remove from offset 0x0 to 0x89

Save your file as fb_F0000000.bin

put this file in the same folder before calling script like usual.
your boot.dat now has custom boot logo.

 

[Sandmann]

That is the File:
https://www.bilder-upload.eu/bild-d5b71a-1618109170.jpg.html


@whitezombie

 

[whitezombie]

hekate/pkg2.c at master · CTCaer/hekate (github.com)

Thanks for that HenryMin. As a workaround I was using Goldleaf or NX-Shell to temporarily rename the patches.ini file to patches.ini1 to get Tinfoil to launch, then renaming back to patches.ini. It's good that we have so many installer options but was just trying to get Tinfoil to launch without a rename workaround.

 

[tivu100]

Thanks for that HenryMin. As a workaround I was using Goldleaf or NX-Shell to temporarily rename the patches.ini file to patches.ini1 to get Tinfoil to launch, then renaming back to patches.ini. It's good that we have so many installer options but was just trying to get Tinfoil to launch without a rename workaround.

Since it's Tinfoil doing the checking. Either you crack Tinfoil and disable that check, or stick with rename workaround after somebody have already done the heavy lifting for you.

The modded Hetake works just fine. Renaming and replacing a few files, is just like how you would update the normal Hetake.

 

[mrdude]

Here you have an updated version of the script to change boot logo.
before launching the script you need to have an image edited for packing on boot.dat
tested with gimp :
create your image with 768x1280
Apply an horizontal mirror.
export image as 32bits ARGB bmp(uncheck compatibility options)

Open your image with an hex editor
Remove from offset 0x0 to 0x89

Save your file as fb_F0000000.bin

put this file in the same folder before calling script like usual.
your boot.dat now has custom boot logo.

It works for me - kind off, Blues are now yellow though so I guess the rgb settings are messed up somehow, Here's a miserable frog boot screen.

 

[RideOnTheStorm]

It works for me - kind off, Blues are now yellow though so I guess the rgb settings are messed up somehow, Here's a miserable frog boot screen.

if you have trouble with rgb settings just switch channel in gimp.
i'm trying to have the whole thing automatic but img magick give me some garbage on conversion.

 

[chronoss]

if you have trouble with rgb settings just switch channel in gimp.
i'm trying to have the whole thing automatic but img magick give me some garbage on conversion.

Where is the channel in gimp ?

 

[Inaki]

Where is the channel in gimp ?

I don't know if there is a better way but I would split channels ( in gimp, Colors menu>Components>Decompose, choose RGB and uncheck Decomopose to layers option ) and combine channels swapping them ( being in one of the splitted images, in Colors menu>Components>Compose and there choose RGB and in Channel representations choose Red Green Blue files so that the channels you want are pointing to the file of the other channel instead of its corresponding one ).

 

[RideOnTheStorm]

simple way is componants-->mixer--> change color part in channel

 

[chronoss]

simple way is componants-->mixer--> change color part in channel

Thanks

 

[Prof0nWear]

What is currently happening i'm lost lol

I can see SXOS has been cracked but are they extracting the XCI payloads and trying to make it work on atmosphere??