Hacking Question Is it possible to backup my saved games safely?

saito1234

Well-Known Member
OP
Member
Joined
Nov 24, 2008
Messages
115
Trophies
1
XP
676
Country
United States
I'd like to back up my saved games from my Switch.
Is this possible some way so that there will be not a risk of ban?

I don't want to do anything else - just backing up my saves.
 

mranonymous

Well-Known Member
Member
Joined
Jul 22, 2018
Messages
289
Trophies
0
XP
1,212
Country
United States
I'd like to back up my saved games from my Switch.
Is this possible some way so that there will be not a risk of ban?

I don't want to do anything else - just backing up my saves.

There is a Homebrew app called Checkpoint that allows you to backup game save data.

Have you backed up your NAND yet? You can also backup games + their save data (and important system data) with a RAW NAND dump. This would kill 2 birds with one stone - backing up all of your games + saves, and protecting your system data in case you ever get bricked.
 

ichibaka

Well-Known Member
Newcomer
Joined
Jul 4, 2018
Messages
80
Trophies
0
Age
38
XP
196
Country
United States
Risk of avoiding ban = close to 0

Ideally you want to back up your NAND in a fresh state wjth nothing installed, no game played so your eMMC is blank. Now you can play games and make saves backup with Checkpoint which will make a backup of your saves o your sd card so you can restore them later.
 

Kafluke

Well-Known Member
Member
Joined
May 6, 2006
Messages
5,474
Trophies
0
Age
47
XP
4,636
Country
United States
The fact is, if you launch ANY homebrew whatsoever on your switch theres a ban risk. Period. If you're not willing to accept that risk then buy another switch. Its that simple
 

mranonymous

Well-Known Member
Member
Joined
Jul 22, 2018
Messages
289
Trophies
0
XP
1,212
Country
United States
so what if I:

1. create NAND backup

2. backup my saves with checkpoint

3. restore NAND backup
continue playing online, etc?

Yeah just create the NAND backup with Hekate, and use Checkpoint whenever you want to make a new backup of game saves in the future.

There are a couple good videos on YouTube and some really good posts here about backing up NAND. Just be sure to back up at LEAST: BOOT0, BOOT1, and eMMc SYS to have what you need to recover from a brick.

To back up your games and saves you’ll need to do a RAW dump. I believe the RAW dump includes the BOOT0, BOOT1 and eMMC SYS files.
 
Last edited by mranonymous,

Stone-D

Well-Known Member
Newcomer
Joined
Aug 9, 2018
Messages
47
Trophies
0
Age
47
Location
Jakarta, Indonesia
XP
101
Country
Indonesia
As far as I know, there is only one way to backup save games in a way that has minimal chance of a ban. This is only for backing up, no editing. No tools exist to edit these yet as far as I am aware.

  1. Get TegraRCMSmashGUI. Unpack to a folder somewhere. Call it something convenient, like Tegra.
  2. Go here and download biskeydump, memloader, and HacDiskMount.
  3. Unpack biskeydump.bin, and memloader.bin. Put in the Tegra folder.
  4. In memloader.zip, there is a folder called sample. Unpack the contents to your SD card.
  5. Turn off your Switch, get jiggy, and go into RCM mode.
  6. Launch TegraRcmGUI. It should say "RCM OK" in the bottom left of the UI. Select "biskeydump.bin" as the payload, and click Inject Payload.
  7. Note down everything manually or take a shot of the QR code, then save it somewhere.
  8. Press the power button to turn off your Switch, get jiggy, and go into RCM mode.
  9. Go back to TegraRcmGUI. It should say "RCM OK" in the bottom left of the UI. Select "memloader.bin" as the payload, and click Inject Payload.
  10. In the resulting screen, select "ums_emmc.ini". If this option is not present, you didn't do step 4 correctly. Turn off your switch, and go do it. Continue from step 8.
  11. Once selected, press power once.
  12. Launch HacDiskMount, run as Administrator. Go to File-Open physical drive.
  13. You should see "Linux UMS disk 0 (21.121 GiB)" or something very similar. Select this then click OK.
  14. Now you should see a list of items starting with PRODINFO and ending with USER. Double click USER.
  15. A window called "Operations on USER" should have appeared. At the top it should say "BIS Key 3", along with two text boxes for Crypto and Tweak.
  16. Go to the keys you noted from biskeydump. Copy the correct keys from this to the appropriate text boxes. Click Test. If the result is green with OK! Entropy, continue. Otherwise double check your keys.
  17. Below the keys section there is Virtual Drive. Click install, if it hasn't been done already after previously following a different tutorial.
  18. Select an empty/unused drive letter. Click Read Only (for safety). Click Mount.
  19. Open Explorer, navigate to the newly mounted drive. If nothing appears or Windows says it needs to be formatted, abort and check your keys.
  20. In the mounted drive, you will see five folders (Album, Contents, save, saveMeta, temp) and one file (PRF2SAFE.RCV). Copy save and saveMeta somewhere safe, and good luck identifying which one is which.
  21. Click Unmount in HacDiskTool. You can now turn off your Switch, hold down Power for 13 seconds.
Now, wasn't that fun?
 

mariogamer

Well-Known Member
Member
Joined
Aug 12, 2015
Messages
1,256
Trophies
0
Age
28
XP
790
Country
Canada
As far as I know, there is only one way to backup save games in a way that has minimal chance of a ban. This is only for backing up, no editing. No tools exist to edit these yet as far as I am aware.

  1. Get TegraRCMSmashGUI. Unpack to a folder somewhere. Call it something convenient, like Tegra.
  2. Go here and download biskeydump, memloader, and HacDiskMount.
  3. Unpack biskeydump.bin, and memloader.bin. Put in the Tegra folder.
  4. In memloader.zip, there is a folder called sample. Unpack the contents to your SD card.
  5. Turn off your Switch, get jiggy, and go into RCM mode.
  6. Launch TegraRcmGUI. It should say "RCM OK" in the bottom left of the UI. Select "biskeydump.bin" as the payload, and click Inject Payload.
  7. Note down everything manually or take a shot of the QR code, then save it somewhere.
  8. Press the power button to turn off your Switch, get jiggy, and go into RCM mode.
  9. Go back to TegraRcmGUI. It should say "RCM OK" in the bottom left of the UI. Select "memloader.bin" as the payload, and click Inject Payload.
  10. In the resulting screen, select "ums_emmc.ini". If this option is not present, you didn't do step 4 correctly. Turn off your switch, and go do it. Continue from step 8.
  11. Once selected, press power once.
  12. Launch HacDiskMount, run as Administrator. Go to File-Open physical drive.
  13. You should see "Linux UMS disk 0 (21.121 GiB)" or something very similar. Select this then click OK.
  14. Now you should see a list of items starting with PRODINFO and ending with USER. Double click USER.
  15. A window called "Operations on USER" should have appeared. At the top it should say "BIS Key 3", along with two text boxes for Crypto and Tweak.
  16. Go to the keys you noted from biskeydump. Copy the correct keys from this to the appropriate text boxes. Click Test. If the result is green with OK! Entropy, continue. Otherwise double check your keys.
  17. Below the keys section there is Virtual Drive. Click install, if it hasn't been done already after previously following a different tutorial.
  18. Select an empty/unused drive letter. Click Read Only (for safety). Click Mount.
  19. Open Explorer, navigate to the newly mounted drive. If nothing appears or Windows says it needs to be formatted, abort and check your keys.
  20. In the mounted drive, you will see five folders (Album, Contents, save, saveMeta, temp) and one file (PRF2SAFE.RCV). Copy save and saveMeta somewhere safe, and good luck identifying which one is which.
  21. Click Unmount in HacDiskTool. You can now turn off your Switch, hold down Power for 13 seconds.
Now, wasn't that fun?
You can decrypt them after with one of the bis key (either SYSTEM or USER). Does a tool exist for that? Idk.

Also restoring save in aclean nand might be risky, playlog has 0 data and you still have a save...

That might be fixed by simply going into the game a certain period of time.
There might be other logs of game tho...

In fact, the switch currently can't detect cfw (not including piracy).
 
Last edited by mariogamer,
  • Like
Reactions: Stone-D

The Real Jdbye

*is birb*
Member
Joined
Mar 17, 2010
Messages
23,256
Trophies
4
Location
Space
XP
13,812
Country
Norway
You can decrypt them after with one of the bis key (either SYSTEM or USER). Does a tool exist for that? Idk.

Also restoring save in aclean nand might be risky, playlog has 0 data and you still have a save...

That might be fixed by simply going into the game a certain period of time.
There might be other logs of game tho...

In fact, the switch currently can't detect cfw (not including piracy).
SciresM said he used custom exceptions so anything that uses Atmosphere code will be detectable by Nintendo since the logs are sent to them.
 

mariogamer

Well-Known Member
Member
Joined
Aug 12, 2015
Messages
1,256
Trophies
0
Age
28
XP
790
Country
Canada
SciresM said he used custom exceptions so anything that uses Atmosphere code will be detectable by Nintendo since the logs are sent to them.
No. Those are custom crash logs. and sciresM creport never actually report the crash (normal behaviour)

lemme explain myself, the crash report included with atmo saves crashes to the sd card. Normal one saves them to the nand and report them. This make it even more safe than deleting them on 5.x!
This is why nx-dreport is deprecated/was removed from sdfiles and creport added.
 
Last edited by mariogamer,

The Real Jdbye

*is birb*
Member
Joined
Mar 17, 2010
Messages
23,256
Trophies
4
Location
Space
XP
13,812
Country
Norway
No. Those are custom crash logs. and sciresM creport never actually report the crash (normal behaviour)

lemme explain myself, the crash report included with atmo saves crashes to the sd card. Normal one saves them to the nand and report them. This make it even more safe than deleting them on 5.x!
This is why nx-dreport is deprecated/was removed from sdfiles and creport added.
ReSwitched said:
Btw, I had assumed it went without saying -- if you're playing with unofficial builds of work in progress layeredfs stuff that is broken (and crashes frequently, consequentially), you shouldn't be anywhere near online and shouldn't even have online enabled. I use custom error codes for debugging, and if a report with one of those goes up to N's server from your console, you will almost certainly get banned from online. If you're concerned about that, don't use stuff until it's done.
It was taken from this. But that's a few weeks old so I guess things may have changed since.
 

chrisrlink

Has a PhD in dueling
Member
Joined
Aug 27, 2009
Messages
5,554
Trophies
2
Location
duel acadamia
XP
5,730
Country
United States
No. Those are custom crash logs. and sciresM creport never actually report the crash (normal behaviour)

lemme explain myself, the crash report included with atmo saves crashes to the sd card. Normal one saves them to the nand and report them. This make it even more safe than deleting them on 5.x!
This is why nx-dreport is deprecated/was removed from sdfiles and creport added.

still Imo unsafe unless atmosphere sends fake reports sending no reports has possibly flag you for a ban in the future I'm sure Nintendo thought of that
 

mariogamer

Well-Known Member
Member
Joined
Aug 12, 2015
Messages
1,256
Trophies
0
Age
28
XP
790
Country
Canada
still Imo unsafe unless atmosphere sends fake reports sending no reports has possibly flag you for a ban in the future I'm sure Nintendo thought of that
No not crash reporr. If you don't send any that means no fatal error, which is a normal behaviour.

It was taken from this. But that's a few weeks old so I guess things may have changed since.
Interesting, but in which context did he say that? I think it's about layered fs only.
 

Stone-D

Well-Known Member
Newcomer
Joined
Aug 9, 2018
Messages
47
Trophies
0
Age
47
Location
Jakarta, Indonesia
XP
101
Country
Indonesia
So I did an experiment last night. I attempted to transfer my Zelda BOTW save from my legit Switch (5.1.0) to my hacked one (4.1.0). Both switches had identical installs - Zelda original release physical game cart, plus current update plus DLCs (5.1.0 legit, 4.1.0 less so).

4.1.0 savegame:
save\0000000000000020 [64 Mb]
saveMeta\0000000000000020\00000001.meta [256 Kb]

5.1.0 savegame:
save\000000000000003a [64.1 Mb]
saveMeta\000000000000003a\00000001.meta [256 Kb]

5.1.0 save -> 4.1.0 FAIL, "Save game corrupted"
5.1.0 save + saveMeta -> 4.1.0 FAIL, "Save game corrupted"

I suspect there are differences in the way the two OS versions handle save data - the different sizes alone indicate this. I can't test going the other way (4.1.0 -> 5.1.0), but I suspect that might actually work.

The save data itself (000000000000003a) isn't further encrypted once copied via HacDiskMount. I can look at individual save data using a hex editor (see attached pic for Salt & Sanctuary save, which is 20.2 Mb - the highlighted "02" is the number of skill points for upgrading your character). It seems to be a virtual drive of some sort that gets mounted by the operating system as the game starts.
 

Attachments

  • HIEW SaltSanctuarySave.png
    HIEW SaltSanctuarySave.png
    28.7 KB · Views: 426

saito1234

Well-Known Member
OP
Member
Joined
Nov 24, 2008
Messages
115
Trophies
1
XP
676
Country
United States
Stone-D, thanks for your guide!
If I use this HacDiskMount method can I use these saves that I back up on another Switch, which has the same fw version?
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    SylverReZ @ SylverReZ: https://youtu.be/ngNaUaQOfPU