1. ShaytheStar

    ShaytheStar 3TEETH fan
    Member

    Joined:
    Apr 30, 2018
    Messages:
    103
    Country:
    United States
    It's very stubborn.
     

    Attached Files:

  2. der:Tom

    der:Tom GBAtemp Regular
    Member

    Joined:
    Oct 3, 2008
    Messages:
    181
    Country:
    Austria
    Hey guys, prob a stupid question but can someone help me with the SD Seed?

    "Copy the hex representation of it and put it somewhere for later"

    What excactly is meant by this? The 32 hex digits?

    "Search for the contents of private"

    content is 7 hex digits

    "Copy the 16 bytes after that. This is your SD seed"

    After the content of private the file is empty.

    Can someone please explain me how i can get my SD Seed?
     
  3. FoxofGrey

    FoxofGrey Advanced Member
    Newcomer

    Joined:
    Jul 1, 2016
    Messages:
    86
    Country:
    United States
    Did you check to make sure that the SD card is the same drive letter, and make sure the nca folder is in the same folder as the hexadecimal folder?
     
  4. huma_dawii

    huma_dawii GBAtemp Psycho!
    Member

    Joined:
    Apr 3, 2014
    Messages:
    3,450
    Country:
    United States
    upload_2018-7-2_3-30-10.png
    Help please, im losing my mind T.T
     
  5. AbuLela

    AbuLela Newbie
    Newcomer

    Joined:
    Jun 21, 2018
    Messages:
    8
    Country:
    Germany
    @Khangaroo
    Could you give me the hactool syntax for extracting nca from a nsp?
    I cant find a good example...

    Greetings
     
  6. FoxofGrey

    FoxofGrey Advanced Member
    Newcomer

    Joined:
    Jul 1, 2016
    Messages:
    86
    Country:
    United States
    So, if you're looking at HxD, one line represents 16 bytes. 1 Hexadecimal letter, like let's say B, is a half of a byte. So you'll have 16 sets of two Hexadecimal characters like this, for example:
    A1 56 31 4D 8A 09 7A 3C 01 90 AC B1 51 0A 1B 11
    This is what your SD Key MIGHT look like, lengthwise. Just get rid of the spaces in-between though.


    But, yes, there will be 16 bytes within the hex contents of the "private" file. You will need to dump your eMMC and use HacDiskMount to mount the "SYSTEM" portion. Navigate to the directory (folder) the github tutorial mentions within the SYSTEM partition, open that file up with the same hex editor, and use "ctrl-f" to find the contents of the Private file in hex representation. The 16 bytes (the line below) is your SD Key. Do not show it to anyone.


    You see the slashes in your directory paths for sdpath and the "00" file? Reverse those to be "/" slashes due to how Hactool interprets the slashes.
    And make sure your key file is in the "ini" format (so make it keys.ini rather than keys.txt, as that'll have the best result).
     
    Last edited: Jul 2, 2018
    huma_dawii and PeterGemp like this.
  7. PeterGemp

    PeterGemp GBAtemp Regular
    Member

    Joined:
    Jun 28, 2018
    Messages:
    111
    Country:
    United States
    Ah yes, you're doing gods work, too, @FoxofGrey. I also explained it somewhere else. I hope you're okay if I add my wording for visibility:

    In necessary detail, since the guide (https://gist.github.com/khang06/84aabeac507fa99a676d22bb6120cea8#file-0-sd-guide-md) is too god damn vague at the most inconvenient times:

    "The hex representation of private", the only line of 16 Bytes in Hex within "private"- aka. "THE CONTENTS OF PRIVATE", for example:

    F6 67 A5 9E 8B 62 65 65 AF D5 FF 0D 9E 80 15 8E

    THEN open "save\8000000000000043" from your mounted NAND system partition that you dumped beforehand, right?
    The search for "the content of "private" " within "save\8000000000000043":
    This means nothing else than to look for the hex digit combination from "private" within "save\8000000000000043".
    Make sure that you are searching for Hex-values in the search (see open tab in "Find"-search mask, HxD editor).

    You then copy the next line that come after your matched search result (=private).

    F6 67 A5 9E 8B 62 65 65 AF D5 FF 0D 9E 80 15 8E <= Aforementioned "The hex representation of private", only one line of 16 Bytes in Hex - aka. "THE CONTENTS OF PRIVATE"
    A5 6E A5 5E 86 62 35 6D AF D5 F2 0C 9E F0 15 8E <= YOUR SD SEED, the line following "the contents of private"

    Lose the spaces and these 16 bytes become your SD Seed: A56EA55E8662356DAFD5F20C9EF0158E
     
    Last edited: Jul 2, 2018
  8. huma_dawii

    huma_dawii GBAtemp Psycho!
    Member

    Joined:
    Apr 3, 2014
    Messages:
    3,450
    Country:
    United States

    I'll try that.
     
  9. huma_dawii

    huma_dawii GBAtemp Psycho!
    Member

    Joined:
    Apr 3, 2014
    Messages:
    3,450
    Country:
    United States

    OMG IT WORKED!!!! D:
     
  10. Mat37

    Mat37 GBAtemp Advanced Fan
    Member

    Joined:
    Dec 3, 2016
    Messages:
    786
    Country:
    France
    I got this when loading get_titlekeys :
    F:\Switch\SD>"C:\Program Files (x86)\Python27\python.exe" get_titlekeys.py PRODINFO.bin common_ticketblob.bin
    Traceback (most recent call last):
    File "get_titlekeys.py", line 4, in <module>
    from Crypto.Cipher import AES
    ImportError: DLL load failed: %1 nÆest pas une application Win32 valide.
     
  11. huma_dawii

    huma_dawii GBAtemp Psycho!
    Member

    Joined:
    Apr 3, 2014
    Messages:
    3,450
    Country:
    United States
    You need to install crypto via pip command

    pip install pycrypto

    and to install that you need Visual Basic C++ 9.0.0 or something like that....
     
  12. Mat37

    Mat37 GBAtemp Advanced Fan
    Member

    Joined:
    Dec 3, 2016
    Messages:
    786
    Country:
    France
    I already have installed both
     
  13. huma_dawii

    huma_dawii GBAtemp Psycho!
    Member

    Joined:
    Apr 3, 2014
    Messages:
    3,450
    Country:
    United States
    Weird, try yo uninstall everything and re install, and reboot after installing?
     
    Mat37 likes this.
  14. supermariorick

    supermariorick GBAtemp Advanced Fan
    Member

    Joined:
    Jun 18, 2010
    Messages:
    569
    Country:
    United States
    you can actually skip mounting a nand dump as you can just use the memloader payload to access the Switch's filesystem and hacdiskmount to mount it as a drive on the computer.
     
    PeterGemp likes this.
  15. Mat37

    Mat37 GBAtemp Advanced Fan
    Member

    Joined:
    Dec 3, 2016
    Messages:
    786
    Country:
    France
    Thanks it worked ^^ but now i wonder why i have the ticket for fifa 18 cause i don't have the game or anything related to it
     
    Last edited: Jul 3, 2018
  16. huma_dawii

    huma_dawii GBAtemp Psycho!
    Member

    Joined:
    Apr 3, 2014
    Messages:
    3,450
    Country:
    United States
    :O go to eshop and try to download it? xD
     
  17. Mat37

    Mat37 GBAtemp Advanced Fan
    Member

    Joined:
    Dec 3, 2016
    Messages:
    786
    Country:
    France
    I'm banned. But i'll try with eXhop and try loading it. (first i need the FE Warriors DL to finish, i need it to get the update for layeredFS) as i have a shitty connection you may (probably) have an answer wednesday.
     
  18. supermariorick

    supermariorick GBAtemp Advanced Fan
    Member

    Joined:
    Jun 18, 2010
    Messages:
    569
    Country:
    United States
    also if you can't get hacdiskmount to run because you dont have x64 Windows then you can use @ihaveamac 's SwitchFS with Winfsp for Windows and FUSE for MacOS (requires latest python 3 and latest vcredist-x86 if u dont have x64 for Windows or Xcode for MacOS)

    oh yeah and you also need visual studio c++ build tools which the readme has a deprecated link and so you'll have to google the installation package
     
    Last edited: Jul 2, 2018
    hippy dave likes this.
  19. der:Tom

    der:Tom GBAtemp Regular
    Member

    Joined:
    Oct 3, 2008
    Messages:
    181
    Country:
    Austria
    @FoxofGrey: Thank you very much it worked! I succesfully dumped, decrypted and loaded an eShop title (Limbo) through LayeredFS :)
     
    PeterGemp likes this.
  20. Leozairus

    Leozairus Advanced Member
    Newcomer

    Joined:
    Jun 15, 2018
    Messages:
    71
    Country:
    Brazil
    Now "we" can just grab the nca/nsp game + update, use a common update key (easy to find) + LayeredFS and play any game... In skillful hands, that's will be a game changer...

    Don’t quote me on that
     
    PeterGemp likes this.
Draft saved Draft deleted
Loading...

Hide similar threads Similar threads with keywords - advanced), Dumping, titles