1. Bug_Checker_

    Bug_Checker_ GBAtemp Advanced Fan
    Member

    Joined:
    Jun 10, 2006
    Messages:
    950
    Country:
    United States
    It appears you have found a pk zip file(starting 0X11B3931 [50 4B 03 04]).
    It looks like you need version 1.0 (0x0A) or greater to open the file.
    The file zw02.qmg is in res/drawable-xxxhdpi-v4/ .
    The file is uncompressed so both file sizes(packed and uncompressed) are 1,286,671 bytes [00 13 A2 0F].
    The CRC32 is 9F058259.
    The length of the name is 32 bytes (0x20).
    The other numbers are time and date.(before the CRC32)
     
  2. kylemsguy

    kylemsguy Newbie
    Newcomer

    Joined:
    Mar 5, 2017
    Messages:
    7
    Country:
    Canada
    -pm- likes this.
  3. studio1b

    studio1b GBAtemp Regular
    Member

    Joined:
    Mar 14, 2009
    Messages:
    131
    Country:
    United States
    only device the card was used on was a win 7 machine to format it and then stuck it in the switch.

    file has to be part of the switch as the header of it is the same as all the switch file headers
    : NAX0
     
    Last edited: May 11, 2017
  4. jt_1258

    jt_1258 Human?
    Member

    Joined:
    Aug 21, 2016
    Messages:
    2,629
    Country:
    United States
    oh boy, time to see what kinda arguing is goin on here
     
  5. JUSPOZA

    JUSPOZA Member
    Newcomer

    Joined:
    Jan 27, 2015
    Messages:
    20
    Country:
    United States
    I have no idea if this would help but what about hooking up a sd card/usb sniffing hardware?
     
  6. Sketchy1

    Sketchy1 gbatemp's shadiest warez dealer
    Member

    Joined:
    Aug 9, 2016
    Messages:
    1,553
    Country:
    United States
    that would tell us nothing more then what it is writing mostly, and at what times because the fact is, the data is still encrypted

    but theoretically speaking, it might tell us how it decrypts them when it does it (astronomically slim chance imo though...)
     
  7. dubbz82

    dubbz82 GBAtemp Advanced Maniac
    Member

    Joined:
    Feb 2, 2014
    Messages:
    1,572
    Country:
    United States
    Gotta remember what company we're dealing with. Nintendo couldn't even manage to implement RSA correctly on a console (the 3ds) after having a previous failure in implementing RSA (the wii). It's worth a stab, imo.
     
  8. kylemsguy

    kylemsguy Newbie
    Newcomer

    Joined:
    Mar 5, 2017
    Messages:
    7
    Country:
    Canada
    So I was discussing this issue with a friend, and he has the theory that the cause of other files appearing in the Nintendo Switch's files could be due to the way it implements functionality similar to Linux's ftruncate. ftruncate is a function that truncates a file to a specified length, and the Nintendo Switch could be using this to extend the length of these files. Now, since FAT32 (not sure about exFAT; perhaps someone try this with an SDXC card that was once in a smartphone?) does not support sparse files, the OS has to pre-allocate the space to the files. Normally, the OS should initialize this new space to NULs (0's), but in the interest of speed, perhaps Nintendo omitted that favour for performance in their implementation of this functionality. From what I've seen here, everyone who's tested has done a quick format, which does not wipe the old files' contents. Because of this, there is a high chance that the previous files' data still remain in this new segment of the file.

    TL;DR: this data could be left over from a previous format as a result of an implementation detail, and any foreign, recognizable data is probably a red herring.
     
    Last edited: May 19, 2017
  9. DerpyEagle

    OP DerpyEagle Member
    Newcomer

    Joined:
    Jul 4, 2015
    Messages:
    14
    Country:
    Canada
    Yup, this seems to be the case. I think that your and @Selver 's answers are correct, and I'm just glad that I got my question answered at all. Earlier, when I safe formattted an SD card, there were no out of place strings on it, just encrypted data. It probably just is wonky file allocation.
     
    Selver and pietempgba like this.
  10. pietempgba

    pietempgba GBAtemp Advanced Fan
    Member

    Joined:
    Jun 9, 2016
    Messages:
    925
    Country:
    United States
    very interesting nintendo stuff
     
  11. GerbilSoft

    GerbilSoft GBAtemp Addict
    Member

    Joined:
    Mar 8, 2012
    Messages:
    2,322
    Country:
    United States
    So I put a microSD card in my Switch, and checked the file /Nintendo/save/8000000000000000 :
    Now, I'm pretty sure the Switch doesn't bundle a copy of Decrypt9WIP or Hourglass9. However, the card in question *did* have copies of those before. So it's fairly obvious what's happening: The Switch OS is allocating space on the card, but it isn't zeroing it out. Everything in that file (except maybe the headers?) is leftover content from previously-deleted files.
     
    Last edited: May 27, 2017
    -pm- likes this.
Draft saved Draft deleted
Loading...

Hide similar threads Similar threads with keywords - relevance, Nintendo, microSD