Hacking [RELEASE] PSVita NPDRM Decryptor

[SuleMareVientu]

Download​

Features:​

Straightforward GUI to decrypt NPDRM protected apps/patches/addcont:

• Easier modding
• Allows all apps to run on all firmware versions
• Removes the need of plugins like NoNpDrm
• Full control over the content you own.

Usage:​

If you have a PKG file and not a NPDRM app in folder format you'll first need to extract the PKG with pkg2zip.exe or similar by providing the correct zRIF.

• Use the + button or drag & drop encrypted folders, select the output directory and click the blue arrow
• Adjust the options in the checkboxes to your liking
• Remove highlighted folders with the X button

Follow the Input Folder Search Structure section below to setup your input folders correctly with patches and addcont.

The program will search for patches/addcont only when decrypting the main app with the specified folder setup.​

Patches and additional content can still be decrypted separately.

Installing decrypted applications:​

App (WITHOUT head.bin) :

• Copy the VPK/folder to the PSVita (NOT inside ux0:app)
• (VPK) Open VitaShell and install the package
• (Folder) Open VitaShell and press △ on the app folder and choose More -> Install folder
• Accept extended permissions

App (WITH head.bin) :

• Copy the app folder to ux0:app/... (where you would normally place NPDRM content)
• Return to the home screen in VitaShell (where it shows os0:, ur0:, ux0: etc.), press △ and choose Refresh LiveArea™

Patch:

• Merge with main app or use rePatch

Additional content:

• Use rePatch

For now app installation must be done through VitaShell because we need to generate a fake head.bin to display the app in the livearea.

Installing decrypted applications (rePatch):​

App:

• Install as described before

Patch/Additional content:

• rePatch-reDux0 Wiki

Input Folder Search Structure:​

├───addcont
│ └───TITLE_ID
│ │ └───DLC_FOLDER
├───patch
│ └───TITLE_ID
├───app (any name or TITLE_ID)
│ └───eboot.bin
│ └───...

Software Requirements:​

• Microsoft Windows 7 or later (x64)
• .NET Framework 4.8.1 Runtime
• Microsoft Visual C++ Redistributable (2015, 2017, 2019, and 2022)
• (Optional) "TrialPatch" user plugin to bypass game trials (e.g. Rayman Legends, FEZ)
• (Optional) "rePatch-reLoaded" kernel plugin to install patches & addcont without merging

Troubleshooting - GitHub​

Changelog:​

v1.0.2:​

• Updated external tools to be more efficient and not rely on proprietary Sony software.

v1.0.1:​

• Improved UI
• Added options to output rePatch folders, copy original head.bin to the decrypted app and show terminal during decryption.
• Miscellaneous improvements

v1.0:​

• Initial release

Credits:​

PSVita DevWiki - Documentation
Team Molecule - sceutils
motoharu-gosuto - psvpfstools
LoopingAudioConverter - GUI base
BetterFolderBrowser - Folder Select Dialog
botik - guidance & help

Full Readme​

 

[botik]

I hope the utility will be updated. You can add a transition from PKG ---> ZIP---->Folder

 

[Waff]

Thanks for this! If it makes modding easier it might be really neat.

 

[SuleMareVientu]

I hope the utility will be updated. You can add a transition from PKG ---> ZIP---->Folder

That's possible but I would need an offline database with the zRIFs for the games, because they are needed for PKG extraction

 

[SuleMareVientu]

Release v1.0.1:​

• Improved UI
• Added options to output rePatch folders, copy original head.bin to the decrypted app and show terminal during decryption.
• Miscellaneous improvements

 

[Dumbfreak]

Tons of errors trying to decrypt NoNpDrm ID folder
_decrypt.exe does it without errors

I suspect it also has same problem as _decrypt.exe where it ignores licenses and decrypts to trial versions as explained here https://gbatemp.net/threads/release...s-without-plugins.548878/page-3#post-10574640

examples:

 

[SuleMareVientu]

Release v1.0.2:​

• Updated external tools to be more efficient and not rely on proprietary Sony software.

Post automatically merged: Aug 4, 2025

Tons of errors trying to decrypt NoNpDrm ID folder
_decrypt.exe does it without errors

I suspect it also has same problem as _decrypt.exe where it ignores licenses and decrypts to trial versions as explained here https://gbatemp.net/threads/release...s-without-plugins.548878/page-3#post-10574640

examples:

View attachment 480641
View attachment 480642View attachment 480643
View attachment 480644

This issue should have been fixed now, can you report back on it?

 

[botik]

Games on Unity run on console? I made a special fix for this (changed auth_id to 2F00000000000000). Did you solve this problem without changing auth_id?

 

[SuleMareVientu]

Games on Unity run on console? I made a special fix for this (changed auth_id to 2F00000000000000). Did you solve this problem without changing auth_id?

No, not without patching auth_id as you suggested. Do you kow why this is the case? When the game is in NPDRM format the auth_id is lower (0x21), but when run as an fSELF it crashes. Also using an higher id like 0x28 will automatically close the game (but not crash).

Post automatically merged: Aug 8, 2025

Also any modules can have their original id (libscexx).

Post automatically merged: Aug 8, 2025

No, not without patching auth_id as you suggested. Do you kow why this is the case? When the game is in NPDRM format the auth_id is lower (0x21), but when run as an fSELF it crashes. Also using an higher id like 0x28 will automatically close the game (but not crash).

Post automatically merged: Aug 8, 2025

Also any modules can have their original id (libscexx).

I managed to get the precise error code from the game (Hitman GO):
Mono: Failed to create main thread, errCode = 0x8002000e
3:0x9cd098e26c7c132a:0x8c2ff5fd:[coredump] start ID=PCSB00922

Error 0x8002000e is "SCE_KERNEL_ERROR_ILLEGAL_ATTR": https://docs.vitasdk.org/group__SceKernelErrorUser.html#gabcc4e561f9c1bfe7949f334464718136

 

[botik]

i know auth_id 2F00000000000000 have all homebrew applications. Maybe the Unity is one of them.

 

[LazyPreview_]

Damn so cool!

 

[blashy101]

Is it possible to go the other way and encrypt with NpDrm?