Homebrew WIP nxdumptool - Nintendo Switch Dump Tool

[DarkMatterCore]

Advancements are going pretty slow, I know, but it's just me being finicky with every minor LVGL UI detail I can possibly modify. I wish I had more time to work on this.

I just fixed the highlighted element border width, added support for font resizing at runtime, added an exit prompt with gray background and also added a PNG decoder to show a nice logo at the top. Here's what it looks like at this moment:

Suggestions are always welcome. UI designing isn't really something I'm very good at.

 

[dimitriblaiddyd78]

Hey, newbie here. I can dump nsp from carts flawlessly. But whenever I try to dump updates or DLC, i get the following error

"invalid public rsa exponent for eticket data"

I have tried dumping keys from both sysnand and emunand and the prod.keys are in the Switch folder in sd card. Still I keep getting this error.

I am running latest Kosmos btw

 

[DarkMatterCore]

Hey, newbie here. I can dump nsp from carts flawlessly. But whenever I try to dump updates or DLC, i get the following error

"invalid public rsa exponent for eticket data"

I have tried dumping keys from both sysnand and emunand and the prod.keys are in the Switch folder in sd card. Still I keep getting this error.

I am running latest Kosmos btw

Are you using Lockpick_RCM to dump your keys? Vanilla Lockpick (launched from HBL) isn't enough.

 

[dimitriblaiddyd78]

Are you using Lockpick_RCM to dump your keys? Vanilla Lockpick (launched from HBL) isn't enough.

Yes. Lockpick RCM v1.8.1 using payload injector and my nxdumptool version is 1.1.8

 

[DarkMatterCore]

Yes. Lockpick RCM v1.8.1 using payload injector and my nxdumptool version is 1.1.8

This particular error only appears when the eTicket RSA key fails to be properly decrypted, either because the "eticket_rsa_kek" entry is missing in your prod.keys file, or because it isn't valid.

You must make sure to run Lockpick_RCM on the console where you intend to run nxdumptool, selecting the eMMC the data you wish to dump is linked to (e.g. if you want to dump an update installed to the SD card using your physical eMMC, you must select it).

The same requirement applies to nxdumptool: you must run it on the eMMC linked to the data you want to dump.

There's nothing else I can suggest you besides completely wiping the prod.keys file from your SD card and running Lockpick_RCM again, taking these remarks into consideration.

 

[dimitriblaiddyd78]

This particular error only appears when the eTicket RSA key fails to be properly decrypted, either because the "eticket_rsa_kek" entry is missing in your prod.keys file, or because it isn't valid.

You must make sure to run Lockpick_RCM on the console where you intend to run nxdumptool, selecting the eMMC the data you wish to dump is linked to (e.g. if you want to dump an update installed to the SD card using your physical eMMC, you must select it).

The same requirement applies to nxdumptool: you must run it on the eMMC linked to the data you want to dump.

There's nothing else I can suggest you besides completely wiping the prod.keys file from your SD card and running Lockpick_RCM again, taking these remarks into consideration.

I have the update installed to emunand. So I have to dump keys from emunand after deleting the old prod.keys?

 

[DarkMatterCore]

I have the update installed to emunand. So I have to dump keys from emunand after deleting the old prod.keys?

Yup, that's right.

 

[dimitriblaiddyd78]

I have the update installed to emunand. So I have to dump keys from emunand after deleting the old prod.keys?

still getting the error "invalid public rsa exponent for eTicket data! Wrong keys"

 

[DarkMatterCore]

still getting the error "invalid public rsa exponent for eTicket data! Wrong keys"

After talking to shchmue about this issue, it seems your console may use the new PRODINFO key generation algorithm. I'll need to take care of that.

Please feel free to open an issue in the GitHub repository. It will help me keep track of what's missing - please consider I'm working on the nxdumptool rewrite.

 

[DarkMatterCore]

@dimitriblaiddyd78

Are titlekeys dumped properly using Lockpick_RCM?

 

[dimitriblaiddyd78]

Y

@dimitriblaiddyd78

Are titlekeys dumped properly using Lockpick_RCM?

Yes the titlekeys are dumped properly. But I should let you know that incognito_rcm gives me Validation error when I try to backup my prodinfo.
Maybe it has to do with something with the serial number not updated as my Switch shows as definitely patched at ismyswitchpatched.com?

 

[dimitriblaiddyd78]

"Lockpick_RCM introduced version 1.8.1 which came with the following release note "New consoles also introduced new handling for keys in PRODINFO, so fixed titlekey regression" Versions before 1.8.1 do not work for me, but 1.8.1 is flawless.

So nxdumptool have to be updated for newer handling of prodinfo as well?

 

[DarkMatterCore]

Y

Yes the titlekeys are dumped properly. But I should let you know that incognito_rcm gives me Validation error when I try to backup my prodinfo.
Maybe it has to do with something with the serial number not updated as my Switch shows as definitely patched at ismyswitchpatched.com?

This could really mean your console uses a different PRODINFO type.

"Lockpick_RCM introduced version 1.8.1 which came with the following release note "New consoles also introduced new handling for keys in PRODINFO, so fixed titlekey regression" Versions before 1.8.1 do not work for me, but 1.8.1 is flawless.

So nxdumptool have to be updated for newer handling of prodinfo as well?

Yes, this is most likely the case. If you're willing to help me test any changes, I can release a quick bugfix - no need to wait until I finish the rewrite.

 

[dimitriblaiddyd78]

This could really mean your console uses a different PRODINFO type.



Yes, this is most likely the case. If you're willing to help me test any changes, I can release a quick bugfix - no need to wait until I finish the rewrite.

will be glad to help

 

[DarkMatterCore]

will be glad to help

Please test the attached build and let me know how it goes. I'll be waiting for your input.

 

[dimitriblaiddyd78]

Please test the attached build and let me know how it goes. I'll be waiting for your input.

It works. Thank you so much. Now I can backup my owned DLC and patches without worrying about a ban.

 

[DarkMatterCore]

It works. Thank you so much. Now I can backup my owned DLC and patches without worrying about a ban.

Excellent! Thanks for testing.

 

[AkiraKurusu]

I did a RomFS dump today, but had to split it into chunks; I now have a folder (DATA1.bin) with two files (00 and 01).

The original post has this command:

copy /b game.xc0+game.xc1 game.xci

except that it's for .xci files, when mine should be .bin files. Before I go around and screw something up, I want to double-check; would my command be:

copy /b 00+01 DATA1.bin

or something else?

 

[DarkMatterCore]

I did a RomFS dump today, but had to split it into chunks; I now have a folder (DATA1.bin) with two files (00 and 01).

The original post has this command:



except that it's for .xci files, when mine should be .bin files. Before I go around and screw something up, I want to double-check; would my command be:



or something else?

Yes, that's correct.

 

[DarkMatterCore]

Hey everyone, I intend to release a quick bugfix build to correct some small bugs I've been informed about in the last few months, so you don't have to wait until I finish the rewrite if you're affected by these problems.

I need help to fix the bugs described here:

• Unable to dump games on non-primary console.
• Unable to dump NSP; DecryptNcaHeader error.

If you can reproduce these problems and you are also willing to help me debug them until I can come up with a fix, please feel free to reply to this thread, send me a PM and/or hit me up via Discord. Thanks in advance.