i may have overlooked something that just whacks a big fat hole in the idea, so i would await more clarification from someone more experienced, as i said though, the whole concept relies on a lot of luck that the 2 systems in question share file offsets, plus it would require a decrypted nand for pretty much each and every FW version/region available (well atleast each 9.3+ FW for each regions,model for it to be actually usable by most people) tbh i doubt most people would find it worth their effort, especially if it turns out that there is too many possible variations in the nand FS between consoles, batches, FW revisions etc