Hacking Major_Tom Explains Game Dumping/Mods on 3.60

dkabot

Better With Others' Systems Than Their Own
OP
Member
Joined
Sep 9, 2014
Messages
1,042
Trophies
0
XP
626
Country
United States
https://twitter.com/MajorTomVita/status/760595053865820166
098af5611b.png

Pastebin: http://pastebin.com/pz9FbTet

While we can't directly read game assets with the old Manual method, we can with HENKaku~
Apparently the patch directory works similar to PBOOTs in PSP-land in that anything in it is replaced... including the executable.
So we can run Manual to decrypt the game, then run MolecularShell as the game to read its data from app0: to get anything we want (barring patch data itself, apparently).

This also brings up that HENKaku lets us run unsigned EBOOTs, so if we could theoretically decrypt a game EBOOT, we could do... things. Yes, things.
 
Last edited by dkabot,

AIDA

Well-Known Member
Newcomer
Joined
Aug 3, 2016
Messages
52
Trophies
0
Location
Maritropa
Website
arks-layer.com
XP
285
Country
Can confirm this works, used it to dump two games. I'm working on modifying the text for one and creating an English patch. I just wish there were some way to avoid the WiFi speeds. D:
 
  • Like
Reactions: Shadowfied

Shrinefox

Persona Modder
Member
Joined
Sep 5, 2013
Messages
124
Trophies
1
Website
shrinefox.com
XP
511
Country
United States
This is great news. I'm having trouble getting a repacked CPK to run as a patch, however. Specifically, the data.cpk from Persona 4 Golden.
I'm using Cri Packed File Maker to create the new CPK from a directory extracted using quickBMS (no other programs will extract the CPK, saying it's invalid).
I just get an error saying the game is corrupted unless I delete it from the patch directory.

Y43wyxw.png

Here's a comparison of the original CPK and the repacked CPK. I did replace a few model files but it shouldn't account for such a big difference. The main problem seems to be the selective compression. I haven't tried without compression though, I will test that shortly.

Anyone know of any other CPK tools?

EDIT: With all this trial and error, it'd be nice if you could duplicate the bubble. Like have one be molecularshell and another actually be the game
 
Last edited by Shrinefox,

DarkSynopsis

Well-Known Member
Member
Joined
Oct 15, 2014
Messages
483
Trophies
0
Age
33
Location
New Zealand
Website
ninjasfate.com
XP
2,572
Country
New Zealand
Awesome, keep checking back into the VITA Community to see whats going on, more and more reason I might want to pick up the system but leaning towards PSTV.

Right now I mainly want a dump of Taiko no Tatsujin V so I can get a look at the song files/note chart files and maybe port them to 3DS games, Taiko DX from PSP was possible, anyone manages to dump the files drop me a PM ;)
 

Wuigi

Well-Known Member
Member
Joined
Sep 14, 2012
Messages
727
Trophies
1
XP
1,783
Country
United States
Actually it is already possible with PS Vita TV, but you have to change a few steps and you lose access to the E-Mail app until you remove the DB entries again and write them back via molecule:
You have to use the ID NPXS10072 instead of NPXS10000 in all steps it is mentioned, when you add the entries to the app.db you previously dumped with molecule.
Also you have to change in the step with the eboot path the ID from NPXS10072 to NPXS10027 which is the manual app.
For now it's best to install the whitelist to launch any game on PS vita TV and then connect it via LAN to the router, I got speeds up to 5.0 MB/s like this.
 

bache

Well-Known Member
Member
Joined
Sep 28, 2009
Messages
694
Trophies
1
XP
515
Country
Actually it is already possible with PS Vita TV, but you have to change a few steps and you lose access to the E-Mail app until you remove the DB entries again and write them back via molecule:
You have to use the ID NPXS10072 instead of NPXS10000 in all steps it is mentioned, when you add the entries to the app.db you previously dumped with molecule.
Also you have to change in the step with the eboot path the ID from NPXS10072 to NPXS10027 which is the manual app.
For now it's best to install the whitelist to launch any game on PS vita TV and then connect it via LAN to the router, I got speeds up to 5.0 MB/s like this.

I've added NPXS10072 to table_uri, and changed the eboot path to NPXS20027.

I input the path into the web browser, but it tells me it could not find the application. I've double checked the path, and it seems to be correct. Any ideas?

My path is gro0:app/PCSA00147, but I have also tried gro0:/app/PCSA00147
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • LeoTCK @ LeoTCK:
    SUPPORT LOCAL PRODUCTS, MAKE REVOLUTION
  • LeoTCK @ LeoTCK:
    THEY KEEP REMOVING LOCAL SHIt AND REPLACING WItH INFERIOR CHINESE CRAP
  • LeoTCK @ LeoTCK:
    THATS WHY MY PARTNER CANT GET A GOOTWEAR HIS SIZE ANYMORE
  • LeoTCK @ LeoTCK:
    HE HAS BIG FOOT AND BIG DUCK
  • LeoTCK @ LeoTCK:
    d*ck i mean*
  • LeoTCK @ LeoTCK:
    lol
  • Veho @ Veho:
    Mkay.
  • Veho @ Veho:
    I just ordered another package from China just to spite you.
  • SylverReZ @ SylverReZ:
    Communism lol
  • SylverReZ @ SylverReZ:
    OUR products
  • The Real Jdbye @ The Real Jdbye:
    @LeoTCK actually good quality products are dying out because they can't compete with dropshipped chinese crap
    +2
  • BakerMan @ BakerMan:
    @LeoTCK is your partner the sascrotch or smth?
  • Xdqwerty @ Xdqwerty:
    Good morning
  • Xdqwerty @ Xdqwerty:
    Out of nowhere I got several scars on my forearm and part of my arm and it really itches.
  • AdRoz78 @ AdRoz78:
    Hey, I bought a modchip today and it says "New 2040plus" in the top left corner. Is this a legit chip or was I scammed?
  • Veho @ Veho:
    @AdRoz78 start a thread and post a photo of the chip.
    +2
  • Xdqwerty @ Xdqwerty:
    Yawn
  • S @ salazarcosplay:
    and good morning everyone
    +1
  • K3Nv2 @ K3Nv2:
    @BakerMan, his partner is Luke
  • Sicklyboy @ Sicklyboy:
    Sup nerds
    +1
  • Flame @ Flame:
    oh hi, Sickly
  • K3Nv2 @ K3Nv2:
    Oh hi flame
    K3Nv2 @ K3Nv2: Oh hi flame