I suggesting xoring NUS files directly instead of this whole extracting mambo-jambo. There's two encryption layers: you remove first by using titlekey/aes and xoring second... While you can cover both encryption layers with one single xorpad.The way we do is : using the original source and apply a xorpad.
The way you want we to do is : using a forged source and apply a xorpad.