Play NSP (eShop Games) via Hekate LayeredFS (WITHOUT SX OS / DEVMENU)

Discussion in 'Switch - Tutorials' started by HoTsHoTz79, Jul 17, 2018.

  1. HoTsHoTz79
    OP

    HoTsHoTz79 GBAtemp Regular

    Member
    3
    May 9, 2018
    Canada
    WARNING! If you get banned somehow, I'm not responsible

    ------------------------------------------------------------
    ------------------------------------------------------------

    UPDATE 7/23:

    Tutorial is now outdated because you can now "Install" NSP via DevMenu
    Follow either one of these threads
    Hekate LayeredFS Full Sig Patches
    CTCaer Hekate patch

    ------------------------------------------------------------
    ------------------------------------------------------------

    UPDATE 7/22:
    The following script is a All-In-One tool, thanks to @Assasin1990 and @Ericjwg and replaces STEP 3 below (along with titlekey step)
    Simply download the script NCA-NSP-XCI To LayeredFS v1.6
    Note: You will need to have keys.ini file
    Run the .bat file and follow the commands

    ------------------------------------------------------------
    ------------------------------------------------------------

    OVERVIEW:
    This guide will explain how to play eShop games (aka NSP files) without SX OS and without Dev Menu
    Note: if this guide is too advanced for you, wait for automated tools

    REQUIREMENTS (TESTED WITH):
    Nintendo Switch Firmware 5.1.0
    Hekate - CTCaer mod v3.1
    TomGer's SDFiles v5 - Rocket Man
    Hactool 1.1.0

    Note: if you test on older SDFiles/CTCaer/Switch FW and it doesn't work, you are on your own

    DO NOT NEED:
    Dev Menu
    SX OS

    --------------------------------------------------------------

    Note: Following steps were tested successfully with Hollow Knight, Enter the Gungeon, Poly Bridge & Fast RMX (NSPs)

    STEP 1: READ
    Meet the requirements mentioned above

    STEP 2: PREP FILES
    Acquire the NSP file by whatever means
    Extract hactool files in the same folder as NSP file
    Make sure your keys file also exists in same folder
    (if you dont have keys file ready, google Maxconsole Underground Skull & Crossbones)
    Note: this guide uses "keys" as .txt file

    STEP 3: EXTRACT
    Extract the NSP file via hactool by going into command prompt and execute in your working directory;

    hactool -t pfs0 -k keys.txt game.nsp --pfs0dir=extract

    (keys.txt or keys.ini or keys.dat whatever you want to use, make sure to rename in command and as long as it contains all the keys needed)

    All the files will now be located in your currentFolder/extract

    upload_2018-7-17_23-40-48.

    Find the biggest NCA in filesize located in the 'extract' folder (Tip: rename the file into game.nca)

    Then execute one of the following;

    If you prefer 1 RomFS.bin file, execute the following:

    hactool -k keys.txt --titlekey=CopyPasteKeyHere --exefsdir=exefs --romfs=romfs.bin game.nca

    upload_2018-7-17_23-45-3.


    Otherwise if you prefer all game file extracted into a folder, execute the following:

    hactool -k keys.txt --titlekey=CopyPasteKeyHere --exefsdir=exefs --romfsdir=romfs game.nca

    -------------------------------------------------------------
    FOLLOWING STEPS ARE FOR FINDING TITLE KEY
    -------------------------------------------------------------

    Note: Following steps were tested with Hollow Knight

    PICK 1 METHOD: Web-based or Stand Alone Application

    WEB-BASED

    Go to https://hexed.it/ (or use any Hex Editor)

    upload_2018-7-17_23-50-56.

    OR Stand Alone Application
    Download HxD - Freeware Hex Editor
    Change view by going to 'VIEW > Byte group size > set it to 16
    (Able to select the entire key and copy / paste easily)

    upload_2018-7-19_12-58-9.
    (Key above modified to mask actual values)

    Open the .tik file located in your currentFolder/extract (you can even drag and drop)
    Go to address 0x180 and you will see a long string of values (16 columns, 32 characters)
    This is the unique title key for your nsp file (note it down without spaces)
    Example: 18420AE8##############E3FEAC (values masked due to legal reason)

    -------------------------------------------------------------

    STEP 4: PATCH
    Patch the main.npdm file with donor title by going to
    http://carlus.altervista.org/nx/title_id_patcher.html

    Enter the TitleID of the donor title
    Drag and Drop your main.npdm file
    Download and overwrite

    upload_2018-7-17_23-51-52.

    STEP 5: TRANSFER
    Using the donor TitleID from previous step, create a folder on your Switch SD Card
    //atmosphere/titles/<donorTitleID>/
    Copy the romfs and exefs files in this Donor TitleID folder

    STEP 6: PLAY
    Begin by launching firmware "Older LayeredFS" option (some games 'might' work in newer LayeredFS option)
    Run the Donor Title
    If any error occurs, simply patch the main.npdm with another donor title ID and rename the folder with new donor title ID

    -------------------------------------------------------

    Sample Donor Titles to use:
    Pinball FX3 - 0100DB7003828000
    Happy Birthdays Demo - 010083600AE9E000
    Octopath Demo - 010096000B3EA000
    Pokemon Quest - 01005D100807A000
    Fallout Shelter - 010043500A17A000

    -------------------------------------------------------

    TOOL:
    Once you understand how all of this works "manually", I highly recommend following this other guide by @huma_dawii and tool created by @Assasin1990
    https://gbatemp.net/threads/extract-nsp-nca-xci-update-all-in-one-tool-for-layeredfs.511156/

    -------------------------------------------------------

    TROUBLESHOOTING:

    Error:
    Invalid NCA header! Are keys correct?

    Fix 1:

    Make sure your keys file is valid, format is
    master_key_00 = C2...
    master_key_01 = 54...
    and so on

    Fix 2:
    if your keys file is .ini, make sure your hactool command mentions keys.ini (replace .txt)

    ----------------------------------------------------------------------------

    Error: section 0 is corrupted!
    Error: section 1 is corrupted!

    Fix 1:
    Wrong title key, hex edit again and grab the 0x180 address values again
    Sample entry for Sonic Mania : --titlekey=4BFF1#####DAC57#####B322 (Full value masked due to legal reasons)
     
    Last edited by HoTsHoTz79, Jul 23, 2018
    cruxers, lordelan, Mat37 and 9 others like this.
  2. huma_dawii

    huma_dawii GBAtemp Addict

    Member
    9
    Apr 3, 2014
    United States
    Planet Earth
    Nice! I'm down to test xD
     
  3. Draxzelex

    Draxzelex GBAtemp Guru

    Member
    17
    Aug 6, 2017
    United States
    New York City
    LayeredFS Title Launching or LTL?
     
  4. Ewwwww

    Ewwwww Member

    Newcomer
    2
    Feb 21, 2018
    United States
    Testing... will share results as soon as I finish!
     
  5. Mat37

    Mat37 GBAtemp Advanced Fan

    Member
    4
    Dec 3, 2016
    France
    Does it matter ?
    Titlekey can be in uppercase. Just make sure to remove the space between each set of 2 characters
     
  6. pro-pumper

    pro-pumper Member

    Newcomer
    2
    Apr 3, 2018
    Mexico
    excelent, thank's
     
  7. stingray1059

    stingray1059 GBAtemp Regular

    Member
    3
    Feb 7, 2009
    wow .. great job.. hope someone will make a GUI version soon.
     
  8. wsdyleon

    wsdyleon Member

    Newcomer
    2
    Aug 12, 2011
    United States
    good guide
     
  9. HoTsHoTz79
    OP

    HoTsHoTz79 GBAtemp Regular

    Member
    3
    May 9, 2018
    Canada
    Good point, i updated my post

    Whats LTL? This is basically like how one would run XCI titles without SX OS... so you launch FORNITE, but it runs Fast RMX

    Follow the link at the bottom of my script, its a batch command, but better then manually doing most of the work.
     
  10. Draxzelex

    Draxzelex GBAtemp Guru

    Member
    17
    Aug 6, 2017
    United States
    New York City
    I just made up a term for using LayeredFS to run eShop games similar to how LayeredFS was initially used to run .XCI games (LayeredFS Backup Launching or LBL).
     
  11. stingray1059

    stingray1059 GBAtemp Regular

    Member
    3
    Feb 7, 2009
    i got nvalid NCA header error .. when i put title key.
     
  12. HoTsHoTz79
    OP

    HoTsHoTz79 GBAtemp Regular

    Member
    3
    May 9, 2018
    Canada
    Error: Invalid NCA header! Are keys correct?

    Fix 1:

    Make sure your keys file is valid, format is
    master_key_00 = C2...
    master_key_01 = 54...
    and so on

    Fix 2:
    if your keys file is .ini, make sure your hactool command mentions keys.ini (replace .txt)

    ----------------------------------------------------------------------------

    Error: section 0 is corrupted! section 1 is corrupted!

    Fix 1:
    Wrong title key, hex edit again and grab the 0x180 address values again
    Sample entry for Sonic Mania : --titlekey=4BFF1#####DAC57#####B322
     
  13. stingray1059

    stingray1059 GBAtemp Regular

    Member
    3
    Feb 7, 2009


    how to get correct key?
     
  14. HoTsHoTz79
    OP

    HoTsHoTz79 GBAtemp Regular

    Member
    3
    May 9, 2018
    Canada
    try to google
    MaxConsole Underground Skull & Crossbones

    Copy > Notepad > Paste > Save as keys.txt
     
  15. stingray1059

    stingray1059 GBAtemp Regular

    Member
    3
    Feb 7, 2009
    after saving as keys.txt ,, whats next?
     
  16. HoTsHoTz79
    OP

    HoTsHoTz79 GBAtemp Regular

    Member
    3
    May 9, 2018
    Canada
    well thats supposed to fix the error you received before "Invalid NCA header!"

    so make sure your keys.txt is in the same folder as hactool.exe and try your command again

    also, I updated Step 2 of the guide and added screenshots ... read again and see if that helps
     
    Last edited by HoTsHoTz79, Jul 18, 2018
  17. stingray1059

    stingray1059 GBAtemp Regular

    Member
    3
    Feb 7, 2009
    still got invalid nca header... im trying to run fastrmx .. i entered the 32digit titlekey. same error.
     
  18. Ericthegreat

    Ericthegreat Not New Member

    Member
    9
    Nov 8, 2008
    United States
    Vana'diel
    I'd do this, but will it burn fuses if I used the raj method to update?
     
  19. HoTsHoTz79
    OP

    HoTsHoTz79 GBAtemp Regular

    Member
    3
    May 9, 2018
    Canada
    I PM'ed some instructions... let me know if that helps

    Rajkosto's guide specifically says WITHOUT Burning Fuses
    I was on 4.1.0 the longest time playing via LayeredFS... but i needed more donor titles and couldn't access eShop
    following Raj's guide, i'm on 5.1.0 and have bunch of donors... helps a lot because not all donors work/save for each game
     
  20. Silla79

    Silla79 Newbie

    Newcomer
    1
    Feb 26, 2017
    United States
    Midwest USA
    I am wondering how this thread has not gone crazy yet. This seems to be what many of us have been waiting for, or am I missing something?

    Is there better compatibility with this then LayeredFS with xci's? Looking forward to some results. I plan to test soon, can't just yet.
     
Loading...