Hello guys, this is my first post here! I just got a MIG Switch card out of curiosity and I was tinkering with it. For those who don't know, it's used by placing XCI dumps as well as other game specific bin files in the sd card of the MIG Switch, and are obtained from the original cartridge by using an app like nxdumptool. Two of these bin files are mandatory to get the game to boot: Initial Data.bin and Certificate.bin. They stay the same for every cartridge of a specific game. Now, if you want to use an XCI dump from a shady website it's impossible to get it to work without those files. By using the Certificate.bin from another game it has no problem, but this does not count for the Initial Data.bin. So I looked for a way to obtain this Initial Data from an XCI file and read a bit of the XCI file documentation from switchbrew dot org. Here's what I understood so far: The Switch checks if the cartridge is valid by doing a challenge–response authentication on the Initial Data. The Package ID is contained both on the XCI and the Initial Data, on positions 0x110 and 0x0 respectively. The Initial Data hash is on the XCI at position 0x160. It is calculated by doing a SHA-256 hash on the full Initial Data content. So I was wondering, is there a way to to construct a functional Initial Data file starting from an XCI dump? I also tried a reverse approach by editing the Package ID in the Initial Data from another game, generating the Initial Data hash and putting it in the XCI file but is not enough to get the Switch believe it's a real game. Sorry if this may seem stupid but let me know what you think.

duckstation for Switch

catlover007 · 2024-04-22T04:06:40+00:00

duckstation is an excellent Playstation 1 emulator by Stenzek. It has a very good compabiility and it is quite performant. It also supports all kinds of enhancements such as high resolution rendering and PGXP which can lessen the "wobble" and...

Gaming [Suggestion]

Thread starter Deleted User
Start date Nov 16, 2018
Views 1,048
Replies 3
Likes 1

Deleted User

Guest

Nov 16, 2018

Since there's Let's Go Pikachu releases out there with the brick code and we're expecting a lot of Smash ones with it too (and it could be in any rom), how about if someone creates a website/database (if it doesn't exist already) with all of the md5 for Switch games and a simple program (maybe in Python) that would compare a provided nsp/xci's md5 with the one from the database.

Reactions: matias3ds

andyhappypants

Pika!

Member

Level 10

Nov 16, 2018

http://www.nswdb.com/ Has the hashes of scene releases listed

matias3ds

Well-Known Member

Member

Level 20

Nov 16, 2018

Like that !!

Deleted User

Guest

Nov 16, 2018

andyhappypants said:
http://www.nswdb.com/ Has the hashes of scene releases listed

"CRC checksums cannot be used to verify the authenticity of files, as CRC32 is not a collision resistant hash function -- even if the hash sum file is not tampered with, it is computationally trivial for an attacker to replace a file with the same CRC digest as the original file, meaning that a malicious change in the file is not detected by a CRC comparison."
https://en.wikipedia.org/wiki/File_verification#File_formats