Author Topic: NSW eShop EMMC Titles  (Read 1092 times)

0 Members and 1 Guest are viewing this topic.

Offline scottgl

  • Newbie
  • *
  • Posts: 7
NSW eShop EMMC Titles
« on: May 24, 2018 - 22:20:50 »
Starting a thread so that we can start a collection of titles purchased from eShop. Please do not post titles from SD card, as these are heavily encrypted in the format NAX0 which is currently unusable. Please post titles copied from your decrypted EMMC USER partition in NCA3 format, as I am working on a tool to allow installing eShop titles to the EMMC. I'm starting this thread with ChromaGun which was copied from my NSW EMMC USER partition which I purchased and downloaded from eShop. I downloaded the title without an SD card so that the title would be stored in NCA3 format on the EMMC. Here is a list of files I have uploaded:

ChromaGun/Contents/registered/00000000/5d64d4b9ea5c3869f1cb1f4bf8528717.nca/00
ChromaGun/Contents/registered/0000001F/33df84c0a83d8cec876f997062287b34.nca/00
ChromaGun/Contents/registered/00000031/3c965c68aa73838951f2492e208ce16e.nca/00
ChromaGun/Contents/registered/00000046/25add3e35e36912285dbce0a30019016.nca/00
ChromaGun/Contents/registered/00000047/a3fd43a2f7fe623e614d0d057f1698aa.nca/00
ChromaGun/Contents/registered/00000049/c621fde96e020d97d8bb53db7d5057c6.nca/00

NOTE: added missing 3c965c68aa73838951f2492e208ce16e.nca

Here is the link to the files for ChromaGun:

[You are not allowed to view links] Register or Login

« Last Edit: May 25, 2018 - 19:02:06 by scottgl »

Offline scottgl

  • Newbie
  • *
  • Posts: 7
Re: NSW eShop EMMC Titles
« Reply #1 on: May 24, 2018 - 23:35:47 »
Also here are the NCA files for Hulu:

Hulu/Contents/registered/0000007C/697f0b61eb553d36c454ca484e502e64.nca/00
Hulu/Contents/registered/0000009B/6143be20466f52df5734097426589c82.nca/00
Hulu/Contents/registered/000000AD/c351781d1a91ab629c7424e9427bacd7.nca/00
Hulu/Contents/registered/000000B7/ecd50af1381b665f4e0b4c512c705e76.nca/00

NOTE: added missing 697f0b61eb553d36c454ca484e502e64.nca

[You are not allowed to view links] Register or Login
« Last Edit: May 25, 2018 - 18:57:54 by scottgl »

Offline hellrokr

  • Newbie
  • *
  • Posts: 1
Re: NSW eShop EMMC Titles
« Reply #2 on: May 24, 2018 - 23:56:56 »
thanks a lot. This is the only updated thread on the internet!

Offline Falo

  • Newbie
  • *
  • Posts: 12
Re: NSW eShop EMMC Titles
« Reply #3 on: May 25, 2018 - 12:41:31 »
there are some missing files:
- Hulu is missing the 697F0B61EB553D36C454CA484E502E64.nca
- ChromaGun is missing the cnmt.nca from the v1.0.1 Update and the 3C965C68AA73838951F2492E208CE16E.nca

Also it is possible to decrypt NAX0 sd card content, you only need to dump your sd seed from a nand dump.

Offline Hiccup

  • Sr. Member
  • ****
  • Posts: 296
Re: NSW eShop EMMC Titles
« Reply #4 on: May 25, 2018 - 16:54:47 »
Are these files identical to the ones found on the CDN?

Offline scottgl

  • Newbie
  • *
  • Posts: 7
Re: NSW eShop EMMC Titles
« Reply #5 on: May 25, 2018 - 18:47:09 »
[You are not allowed to view links] Register or Login
there are some missing files:
- Hulu is missing the 697F0B61EB553D36C454CA484E502E64.nca
- ChromaGun is missing the cnmt.nca from the v1.0.1 Update and the 3C965C68AA73838951F2492E208CE16E.nca

Also it is possible to decrypt NAX0 sd card content, you only need to dump your sd seed from a nand dump.

Is the key private key on the EMMC different from the private key on the SD card? I tried decrypting with my sd card private key and was unable to unpack the files. Also thank you for pointing out the missing files, I've uploaded them. Also do you know the filename for the .cmt.nca of the ChromaGun update?

[You are not allowed to view links] Register or Login
Are these files identical to the ones found on the CDN?

No, the content is very different.
« Last Edit: May 25, 2018 - 19:04:45 by scottgl »

Offline scottgl

  • Newbie
  • *
  • Posts: 7
Re: NSW eShop EMMC Titles
« Reply #6 on: May 25, 2018 - 19:07:04 »
Here is example output from running hactool on the content of the EMMC user partition:

hactool ChromaGun/Contents/registered/0000001F/33df84c0a83d8cec876f997062287b34.nca/00

NCA:
Magic:                              NCA3
Fixed-Key Signature:                139080A4568160813F55C144AE069679404A10A6C72422D1FD611BEC556FC31F
                                    1F687749DE5F05DB94EB3103669DE5CABF59B35D945B847F297EC2970CD78A9A
                                    188B2C89FE3D0C220E7F3672C8DD8A7CED874BCDFA92F21381E02928AF4BF9CF
                                    678E83D34CEACD37A1A45395361A76F7E7E7E8AF50A31F4B0C86192C5064BB4E
                                    15260A7700BEDCB46D46741CE35C40F1BF89CEF86F254F199C17C181C705E04B
                                    13F3B0B61625A7D75C6D3887FA70BCA8DE36F3E6003C4CBAA6FDCE5045A9FADB
                                    6BFCF3182C8F70523A0E6599260020CFD0160F877F6B3103C0B87C7AC75ADC56
                                    4BAF377E9037F606584B5D491F03B92C401066B6BFC259E9F022FC9E47EA6BEC
NPDM Signature:                     0000000000000000000000000000000000000000000000000000000000000000
                                    0000000000000000000000000000000000000000000000000000000000000000
                                    0000000000000000000000000000000000000000000000000000000000000000
                                    0000000000000000000000000000000000000000000000000000000000000000
                                    0000000000000000000000000000000000000000000000000000000000000000
                                    0000000000000000000000000000000000000000000000000000000000000000
                                    0000000000000000000000000000000000000000000000000000000000000000
                                    0000000000000000000000000000000000000000000000000000000000000000
Content Size:                       0x000000000e00
Title ID:                           010039a008e76000
SDK Version:                        5.0.0.0
Distribution type:                  Download
Content Type:                       Meta
Master Key Revision:                2 (3.0.1-3.0.2)
Encryption Type:                    Standard crypto
Key Area Encryption Key:            0
Key Area (Encrypted):
    Key 0 (Encrypted):              AFCB709EA299895FBECFBF184DD45041
    Key 1 (Encrypted):              AFCB709EA299895FBECFBF184DD45041
    Key 2 (Encrypted):              DDB21E5AFF1028AFB5F7E07C6B76A95F
    Key 3 (Encrypted):              AFCB709EA299895FBECFBF184DD45041
Key Area (Decrypted):
    Key 0 (Decrypted):              00000000000000000000000000000000
    Key 1 (Decrypted):              00000000000000000000000000000000
    Key 2 (Decrypted):              B9E39963A6FDCFB65B69C0676F4E5FF6
    Key 3 (Decrypted):              00000000000000000000000000000000
Sections:
    Section 0:
        Offset:                     0x000000000c00
        Size:                       0x000000000200
        Partition Type:             PFS0
        Section CTR:                000000000000000000000000000000C8
        Superblock Hash:            81D1D713E4E21A436BD0C54D41C73589528A11FC6B3272F4C9ECADD0C7CBB936
        Hash Table:
            Offset:                 000000000000
            Size:                   000000000020
            Block Size:             0x1000
        PFS0 Offset:                000000000020
        PFS0 Size:                  000000000158


Done!

Offline Whovian9369

  • Full Member
  • ***
  • Posts: 138
Re: NSW eShop EMMC Titles
« Reply #7 on: May 26, 2018 - 10:39:09 »
[You are not allowed to view links] Register or Login
[You are not allowed to view links] Register or Login
there are some missing files:
- Hulu is missing the 697F0B61EB553D36C454CA484E502E64.nca
- ChromaGun is missing the cnmt.nca from the v1.0.1 Update and the 3C965C68AA73838951F2492E208CE16E.nca

Also it is possible to decrypt NAX0 sd card content, you only need to dump your sd seed from a nand dump.

Is the key private key on the EMMC different from the private key on the SD card? I tried decrypting with my sd card private key and was unable to unpack the files. Also thank you for pointing out the missing files, I've uploaded them. Also do you know the filename for the .cmt.nca of the ChromaGun update?

[You are not allowed to view links] Register or Login
Are these files identical to the ones found on the CDN?

No, the content is very different.
Why do you say that they're "quite different"? -- In my experience, the NCAs on the console tend to be the same on the CDN, with the exception of 1.0.0 files.
I am a stickler for No-intro and Redump.org verified dumps. Woo.

Offline Falo

  • Newbie
  • *
  • Posts: 12
Re: NSW eShop EMMC Titles
« Reply #8 on: May 26, 2018 - 13:44:26 »
[You are not allowed to view links] Register or Login
Is the key private key on the EMMC different from the private key on the SD card? I tried decrypting with my sd card private key and was unable to unpack the files. Also thank you for pointing out the missing files, I've uploaded them. Also do you know the filename for the .cmt.nca of the ChromaGun update?

The SD Seed is not the "private" file from the sd card, you can find your SD Seed by dumping the Nand, then decrypting SYSTEM and searching for the "private" data in it.
Do this with a hex editor, the 16 byte after the "private" data is the SD Seed.

Then you can use hactool to decrypt the NAX0, you need to specify the sd seed and the relative filepath (because that's used in the encryption).

And no i don't know the cnmt.nca filename, i found the missing files by reading their cnmt.nca.

Hulu Application_0100a66003384000.cnmt:
Code:
Only registered users can see contents. Please click here to Register or Login.
ChromaGun Application_010039a008e76000.cnmt:
Code:
Only registered users can see contents. Please click here to Register or Login.

Offline scottgl

  • Newbie
  • *
  • Posts: 7
Re: NSW eShop EMMC Titles
« Reply #9 on: May 26, 2018 - 21:03:09 »
Thank you for this information. No wonder I haven't been able to decrypt the NAX0 files.

Offline simonmkwii

  • Jr. Member
  • **
  • Posts: 99
Re: NSW eShop EMMC Titles
« Reply #10 on: June 03, 2018 - 20:29:12 »
[You are not allowed to view links] Register or Login
[You are not allowed to view links] Register or Login
Are these files identical to the ones found on the CDN?
No, the content is very different.
What a bunch of bullshit! It's literally 100% identical. Where do you think the Switch pulls the content from in the first place?
By the way, this entire thread is currently useless without these:
Hulu titlekey: 7704bed48574f50842d160f8d44d397c
ChromaGun titlekey: c213b24d83406b4c2f95a236a3dfbb83