Hacking [Release]Decrypt and launch PSN Store Vita games without plugins

[botik]

The folder TITLEID must be located next to (in the same directory) with the file _decrypt.exe

 

[PepperWithMint]

The folder TITLEID must be located next to (in the same directory) with the file _decrypt.exe

I tried to move the TITLEID folder in the same directory as _decrypt.exe and it finally worked! Thank you very much!

 

[PepperWithMint]

And now i'm trying to decrypt a patch file and same problem happened again

 

[r1vver]

Why do I get different results for eboot.bin file when I use this tool vs. psvpfsparser.exe (from psvpfstools v2.0)?
For example, the result for Clannad (PCSG00415):
encrypted - 516688 bytes, SHA-1: 0a24d1bd86b0755312e10e69c472317660641bcf
_decrypt.exe - 948160 bytes, SHA-1: 3c9506865c8770a191a20dcc86fd35b4c5bd62e4
psvpfsparser.exe (with zRIF from NPS and public F00D service) - 516688 bytes, SHA-1: 37640e97f0f385b0e91e19dc31d675439f68bce6
VitaShell - 516688 bytes, SHA-1: 37640e97f0f385b0e91e19dc31d675439f68bce6

 

[botik]

Because the utility after the work of psvpfsparser.exe does further unpacking of eboot.bin according to the zlib algorithm.

 

[r1vver]

Because the utility after the work of psvpfsparser.exe does further unpacking of eboot.bin according to the zlib algorithm.

It's clear. It is a pity that all those patches (xdelta's) that I came across do not need such an advanced unpacking level.
In any case, this is a very handy utility.

 

[botik]

alternative to this utility emulator Vita3k when installing .pkg not unpack eboot.bin (for xdelta patch) but overwrites auth id(address 0x80 eboot.bin) need to restore auth id (hexeditor) to run on console.

 

[avans]

Thank you, botik, for developing this useful tool.

I am interested in the psvpfsparser-win64 program used by the decrypt_VITA_win64 tool.
This version is compiled from a version forked by cuevavirus,
and the difference between this version and the original (psvpfstools v2.0) is that it does not require the "-f [--f00d_url]" parameter to be specified.
However, the account associated with this version has been deleted, so it is no longer accessible.

After several days of investigation,
it has been confirmed that the original author of psvpfstools, motoharu-gosuto, has actually merged the modifications made by cuevavirus.
However, these changes were merged into the "icv-impl" and "io-api" branches and there have been no compiled releases yet.
Those who need it can compile it themselves.

/motoharu-gosuto/psvpfstools/tree/io-api

 

[SMNFXCN]

for some reason decrypting dlc does not work for me. everything else does work.
might be the dlc i'm working with. it is nonpdrm format, just tells me i'm missing work.bin in sce_sys/package/
so i place the work.bin from the base game into the dlc's folder and it still tells me it's missing. even creating the package folder and placing it in there does not solve the issue.
not sure what i'm doing wrong.
but batch decryption in a future update would be nice

 

[botik]

Each dlc has its own work.bin.Only the base game and the patch for it have the same work.bin .And need to take the DLCID folder (not TITLEID)

 

[GUEDES_et_al]

I tried to decrypt the DLC, but It only creates one file (param.sfo) inside the folder DLCID_dec. Is it really right? Where sould I put the file?

 

[Reploid]

I tried to decrypt the DLC, but It only creates one file (param.sfo) inside the folder DLCID_dec. Is it really right? Where sould I put the file?

Maybe DLC didn't have any more files beside that and some license stuff crypto. YOu know, some DLC are already ingame actually, they just need a key to be activated.

 

[GUEDES_et_al]

Maybe DLC didn't have any more files beside that and some license stuff crypto. YOu know, some DLC are already ingame actually, they just need a key to be activated.

I think it's the case. 100kb DLC, but where I should put it? addcont folder?

 

[Reploid]

I think it's the case. 100kb DLC, but where I should put it? addcont folder?

reAddcont folder. make sure you have repatch.

 

[GUEDES_et_al]

It doesnt work for me thou (game: Blue Reflection). The game is corrupt warning.

 

[Alex_racRocks]

I love this tool,
can you make a batch version for an easier dlc extraction?
Or can you compile a version without the press enter button at the end so we can use it with cmd?

 

[viperinfinity]

I love this tool,
can you make a batch version for an easier dlc extraction?
Or can you compile a version without the press enter button at the end so we can use it with cmd?

A batch version would be amazing

 

[botik]

The utility works without waiting .Copy to main folder
mega.nz/file/w24VwYDA#HSDgaYvkF_iH8DSoeJT9jA8k4Oe_D1jkzCDWxfWucTA

 

[SuleMareVientu]

Check out the GUI Tool: PSVita NPDRM Decryptor

Original (commandline): https://www.mediafire.com/file/8zcxufzppzlnc8q/decrypt_nonpdrm.zip/file

Enchanced version of the script by botik, source included.

Changes:

• You can now drag and drop files from any path, regardless if it they aren't in the same folder of the script
• psvpfsparser-win64.exe is now included in the script itself
• The script will warn you if you haven't passed any argument instead of throwing an exception

 

[Dumbfreak]

We only need a PC with Windows x64.

Download any PS Vita game to your PC via NPS Browser. It is automatically unpacked (if pkg2zip is connected) and a folder with the name TitleID and game content inside appears. This is a nonpdrm format.
Download the program archive from the link below.

Update 25 May 2020

https://mega.nz/file/kjoU1YLA#mYVOUR7n0m-FH5ddg5jSowK_2Y8V1quQMhaxmD4AObc

<Decryption of the game>
We grab the folder with the name TITLEID located in the APP folder with the mouse and throw it on _decrypt.exe and wait for the process to finish. A folder with the name TITLEID_dec will appear. Rename it to TITLEID_app.This is the pure content of the game from the developer. For its operation, the console does not require plug-ins (nonpdrm, refood, rePatch).

<Decryption of the patch>
First you need to take work.bin from the game along the path app / TITLEID / sce_sys / package / and copy it to the patch folder at patch / TITLEID / sce_sys / package / and then grab it with your mouse and throw on _decrypt.exe and wait for the process to complete. A folder named TITLEID_dec will appear. Rename to TITLEID_patch

<DLC Decryption>
We grab the folder with the name DLCID that is on the path addcont / TITLEID / DLCID with the mouse and throw it at _decrypt.exe and wait for the process to finish. A folder with the name DLCID_dec will appear.

<Bonding GAME + PATCH + REPATCH into one folder>
The contents of the TITLEID_patch folder can be copied to the TITLEID_app game folder by agreeing to a replacement. As a result, we get one folder with the game and the patch. If the game has a translation or modification, then the contents of the rePatch folder are also copied with a replacement.

<Quick on console installation>
Copy the folder through Vitashell to the console. Select this folder, click the triangle, go down to More ---> Install Folder. We are waiting for a few seconds to go out and start the game.

The issue I have with this. Is that, while it works fine for most of the games, It will turn a full game into a demo/trial.
It happens with any game that has a demo, for example: Grand Kingdom (turns into LiteDemo), Limbo, Super Stardust Delta, etc.

Looking at the files it looks like these get skipped by _decrypt.exe:
/sce_sys/clearsign
/sce_sys/keystone

Vita3k will install that same noNpDrm as a full game, but _decrypt.exe will generate a demo version from same source files.
When I tried to move those 2 files over (decrypted by vita3k), the game will still show up as demo, so idk what else I'm missing.
Regardless, it would be nice if this was looked into by the developer.