Vita:Applying ROM Patches
Introduction
Mai dumps in comparison to NoNpDRM rips use decrypted files which made game modding on VITA relatively easy, but they had their flaws such as saving issue or other general problems with certain games. These issues were caused by dumping process itself - eboots were badly dumped from vita memory and then auto-modified(relocation, plugin hooks, DLC patches, DRM removal and so on).
NoNpDRM rips are basically 1:1 unmodified and encrypted files and thanks to that they run and play just as their legally purchased counterparts.
Requirements
- PS Vita with HENkaku installed.
- RePatch Plugin.
Rules in Modding
- There can be ONLY decrypted files in /rePatch/ directory
- Only two Livearea mods (/sce_sys/ directory) are currently supported: ChangeInfo and Manuals.
- If mod requires a certain update, update the game to that version. The Game will not detect the rePatch directory as a valid official patch.
- For optimal and most stable experience please stick to this scheme:
- /app/GAMEID - Fully encrypted
- /patch/GAMEID - If present, fully encrypted
- /rePatch/GAMEID - Only decrypted AND modded files. Avoid using decrypted and unmodded update files, use untouched and encrypted /patch/GAMEID instead
- /reAddcont/GAMEID/DLCID - Only decrypted and/or modded DLC files.
- You can use either of these partitions to keep RePatch and reAddcont directories: "ux0:" "uma0:", "imc0:", "grw0:", "xmc0:" Note: it will only load files from one device PER GAME, and this is the priority order. So if ux0:rePatch/GAMEID is missing, it will load uma0:rePatch/GAMEID. A ux0:rePatch/GAMEID will prevent uma0:rePatch/GAMEID
Using RePatch to mod encrypted games
Download latest RePatch plugin from >>> HERE <<<, transfer it to your vita and add it under *KERNEL section of your config.txt (ur0:tai/repatch.skprx or ux0:tai/repatch.skprx), then reboot your Console, Make a new rePatch directory on your prefered device(listed in 5th point of Rules in Modding) for example ux0:/rePatch In /rePatch/ make new directory with GAMEID of the game you want to mod, In the directory you created (example: ux0:/rePatch/PCSE00120/) place decrypted and modded files, remember to exclude param.sfo file from sce_sys directory, That should be it, now run your game and enjoy the mod you just installed!
Using RePatch to use decrypted DLCs or mod encrypted DLCs
Download latest RePatch plugin from >>> HERE <<<, transfer it to your vita and add it under *KERNEL section of your config.txt (ur0:tai/repatch.skprx or ux0:tai/repatch.skprx), then reboot your Console, Make a new reAddcont directory on your prefered device(listed in 5th point of Rules in Modding) for example ux0:/reAddcont, In /reAddcont/ make a new directory with GAMEID of a basegame. You should end up with something like ux0:/reAddcont/GAMEID/ Inside of that /GAMEID/ place your directories with decrypted/mai/vitamin/modded DLCs (full or just modded files) using this scheme: ux0:/reAddcont/GAMEID/DLCID/ That should be it, now run your game and enjoy the DLC mods/Decrypted mods you just installed!
Games confirmed to support custom DLC
More to be added later on.
- Toukiden 2
- Hyperdimension Neptunia U - Action Unleashed
- Taiko no Tatsujin: V Version
Saving memory space while using mods
If you tested the mod and it works without issues, make sure all modded files in /rePatch/GAMEID contain the same amount of data as the original (have similar or bigger file size to the files in /app/GAMEID or /patch/GAMEID). If they do (in case of undubs for example), simply remove files from ux0:/app/GAMEID and/or in ux0:/patch/GAMEID that have their counterparts in /rePatch/GAMEID. Vita will always load files in /rePatch/ instead of /app/ or /patch/ if they are present. This applies only to the files that have been modded. Keep other files and directories like eboot.bin,/sce_modules/ and /sce_sys/ in /app/GAMEID/ and/or /patch/GAMEID/
Eboot modding and/or running 3.65+ games on 3.60 and 3.65
Thanks to CelesteBlue and Dots_tb proper eboot modding is now possible! As a side effect of DRM decryption, a game becomes playable on all firmwares (ex. you can use decrypted files to play 3.68 game/patch on 3.60 firmware). To mod an EBOOT you first need to decrypt it using FAG Dec (French-American Game Decrypter) or obtain already pre-made compatibility pack that was made using that tool by someone else. Note 1: To use compatibility packs and/or modded eboots you need to use at least version 2.71 of Repatch (Marked as Pre-Release at this point) Note 2: To decrypt an eboot and modules you need to be able to run the encrypted game (Retail or NoNpDRM), if you can't because of FW restrictions, you can use pre-made comp pack that is available on official Comp Pack repository
If you are using Pre-made compatibility pack you downloaded from the internet, you need to do step 1a). If you are decrypting eboot by yourself, do step 1b) instead
Decrypt or obtain game's eboot in SELF format: a) If you downloaded comp pack (.ppk) extract it somewhere using any archive tool (winrar, winzip, 7zip and so on). b) If you want to decrypt the eboot yourself, download FAG Dec from >>> HERE <<<, install the vpk on your vita using VITASHELL. Now run FAG Dec, select the desired game using X button and then press X button again on DECRYPT ALL(DONE). Press O to get back to main menu, select [START]Decrypt modules in list and then select START DECRYPT(SELF) to start decrypting. After it's done decrypting DRM encryption, you can exit the app and copy ux0:/FAGDec/ directory to your PC. Find the proper eboot file in either /FAGDec/app/GAMEID/ or /FAGDec/patch/GAMEID/ (depending if you want to mod basegame only or certain patch(which is highly advised to do) and use vita-unmake-fself.exe >>> HERE <<< to create eboot.bin.elf file. Mod the eboot.bin.elf using hex tool and/or IDA pro. Use vita-elf-inject >>> HERE <<< to inject back modded eboot.bin.elf into original decrypted eboot.bin ( vita-elf-inject.exe eboot.bin eboot.bin.elf ) Copy files back to vita to /RePatch/GAMEID/ and test/play the game.
Obtaining decrypted game assets from NoNpDRM rips
VitaShell Method [decryption on console]
Open VitaShell and update it to latest version possible. Go to ux0:/app/ [or ux0:/patch/] folder, using dpad select the GAMEID directory of a chosen game you want to obtain assets from and press triangle -> Open decrypted. Press SELECT to open FTP server (switch it under START key if you have USB connection chosen). Using FTP client on PC, connect to vita, then guide to ux0:/app/GAMEID [or ux0:/patch/GAMEID] directory. Make sure you open this folder and download all its contents to PC. (optional)After you are done downloading, check if files are indeed decrypted if hex of eboot.bin file, starts with SCE then you decrypted files correctly!
PSVPFSTOOLS Method [decryption on PC]
Download latest psvpfstools from >>> HERE <<< and unzip it somewhere on your pc, Obtain encrypted game/patch/DLC or update [either from your cart/vita memory/microsd or extracted from pkg] and copy it somewhere on your pc, Now run psvpfstools with those parameters: -i location_of_the_encrypted_files -o output_location_where_decrypted_files_will_be -z zRIF_string -f cma.henkaku.xyz Example (only proper zRIF is not provided because of obvious reasons): psvpfsparser.exe -i PCSE00120 -o PCSE00120_decrypted -z Actual_zRIF_string_here -f cma.henkaku.xyz When process is finished you'll be left with new directory ( PCSE00120_decrypted in provided example ) with decrypted files from the game/DLC/update.
Useful tools
Kuriimu - A general purpose game translation toolkit for authors of fan translations.
SonicAudioTools - for modifying cri audio files
QuickBMS - generic files extractor and reimporter (needs custom scripts)
The Binding of Isaac Rebirth: Mod Conversion Kit
More to be added.
Credits and thanks
- TheRadziu for making the original NoNpDRM modding guide
- Dots for his RePatch plugin, without it modding wouldn't be possible on 3.61+
- CelesteBlue for his RE and Decrypter's kernel code
- Whole Vita modding community
- s1cp for the /patch/ trick he documented a long time ago.