Fake PKG Generator for PS4 to Generate Fake Packages for Homebrew

Hot on the heels of yesterday's PS4 Fake 4.05 updates, today PlayStation 4 developer @cfwprophet shared on Twitter a Fake PKG Generator for PS4 with documentation to generate fake packages which will support homebrew once the ShellCore patches (for fake PKG support) are implemented.

Download: Fake_PKG_Generator.rar (2.85 MB - v2.89) / Fake_PKG_Generator.rar (429.72 MB - Documentation) / make_fself.py (0.2 MB) / make_fself.py (Mirror) / make_fself.py (Mirror #2) / sc.exe_hack.rar (0.28 MB) / Fake PKG Generator 3.12 hotfix.zip / Fake PKG Generator 3.12 hotfix2.zip / Fake PKG Generator 3.38.zip (4 MB) / Fake PKG Generator 3.38.zip (Mirror) / Fake PKG Generator 3.38.zip (Mirror #2 - includes orbis-pub-sfo.exe) / Mirror #3 / PS4_Fake_PKG_Tools_v3.87.rar (3.35 MB) / PS4 Fake PKG Tools with Fake PKG Generator 3.87 Patched for FPKGs by CyB1K

Note: Use '00000000000000000000000000000000' for the PKG Gen password in case others need to ever unpack it, then everyone will know the PKG password.

From Pastebin come some Orbis-pub-prx.dll patches included in Fake PKG Generator:

PS4 Fake PKG Generator for Playstation 4 -PATCHES-
Publishing Tools 2.89
Orbis-pub-prx.dll

Orig file Hash:
SHA1 = F6CBCA3FC36C81D0F91C7895775F9ABB324D7863

This difference file has been created by IDA
Patch self stuff
0000000000057228: 0F 90
0000000000057229: 84 90
000000000005722A: 61 90
000000000005722B: 04 90
000000000005722C: 00 90
000000000005722D: 00 90
000000000005722E: 80 90
000000000005722F: 78 90
0000000000057230: 05 90
0000000000057231: 00 90
0000000000057232: 0F 90
0000000000057233: 84 90
0000000000057234: 57 90
0000000000057235: 04 90
0000000000057236: 00 90
0000000000057237: 00 90

0000000000057247: 0F 90
0000000000057248: 85 90
0000000000057249: 42 90
000000000005724A: 04 90
000000000005724B: 00 90
000000000005724C: 00 90

Patch unexpected elf format
00000000000570D7: 0F 90
00000000000570D8: 85 90
00000000000570D9: 5C 90
00000000000570DA: 05 90
00000000000570DB: 00 90
00000000000570DC: 00 90

0000000000057210: 0F 90
0000000000057211: 85 90
0000000000057212: 23 90
0000000000057213: 04 90
0000000000057214: 00 90
0000000000057215: 00 90

0000000000057278: 0F 90
0000000000057279: 85 90
000000000005727A: BB 90
000000000005727B: 03 90
000000000005727C: 00 90
000000000005727D: 00 90

Patch unexpected TitleId
00000000000570FC: 0F 90
00000000000570FD: 85 90
00000000000570FE: 7F 90
00000000000570FF: 05 90
0000000000057100: 00 90
0000000000057101: 00 90
0000000000057102: 3B 90
0000000000057103: CA 90
0000000000057104: 0F 90
0000000000057105: 85 90
0000000000057106: 77 90
0000000000057107: 05 90
0000000000057108: 00 90
0000000000057109: 00 90

000000000005729B: 0F 90
000000000005729C: 85 90
000000000005729D: E0 90
000000000005729E: 03 90
000000000005729F: 00 90
00000000000572A0: 00 90
00000000000572A1: 3B 90
00000000000572A2: CA 90
00000000000572A3: 0F 90
00000000000572A4: 85 90
00000000000572A5: D8 90
00000000000572A6: 03 90
00000000000572A7: 00 90
00000000000572A8: 00 90

Patch online check (1)
0000000000282548: 68 65
000000000028254A: 74 65
000000000028254C: 74 65
000000000028254E: 70 65
0000000000282550: 3A 65
0000000000282552: 2F 65
0000000000282554: 2F 65
0000000000282556: 70 65
...
till 0x00 0x00 (but leave them)

Patch online check (2)
000000000027E3AC: 73 65
000000000027E3AD: 64 65
000000000027E3AE: 6B 65
...
till 0x00 byte (but leave it)

From Pastebin:

loc_454B16 = loc_10057EF8
Location to patch 1005828F
RIF Location 10139AC6

unexpected format crap => loc_10058239

Download: libSceFios2.prx (0.38 MB) / libSceFios2.sprx (0.35 MB)
Download: eboot.bin (16.42 MB) / libc.prx (0.88 MB)
How to build PS4 Fake PKGs

A short and easy example of how to build Fake PKGs for the PS4 to use with your homebrew on a exploited device.
Download: fself.rar (5 KB)
Cheers to @hyndrid, @Konsolenzocker, @raedoob, @seanp2500, @segobi and @SSShowmik in the PSXHAX Shoutbox for the news tips!

 

[GREEDYPESOS]

Ok... i tried to ftp rje decrypted trophy by date but there only Last modified tab on filezilla... is there a list somewhere

i realized that i have to dump a game Multiple times and Compare the Dumps.. some file sizes are different... i bet there no real way to varify that all files a correct... soo the ce 30008-1 error really means that files are missing or Bad dump files

theres no way to decrypt game disc and see all files inside Retail pkg... or at least a website to show the File structure and file sizes for ps4 games... just to double check i want to be able to sucssesfully install a ps4 Fpkg game... the process is time consuming

 

[jwooh]

Are you trying to dump the patch also? Did you put the dumper.config file on the usb you are trying to dump the game to?

 

[Archi55]

@GREEDYPESOS
Go to CUSAXXXXX-app/sce_sys/ in your dumped game, and open npbind.dat with HEX Editor to know what is NPWRXXXXX of that game.

Install original game from disc and by FTP go to /user/trophy/conf/NPWRXXXXX/TROPHY.TRP in your console. This is decrypted Trophy file. You just need to replace it with CUSAXXXXX-app/sce_sys/trophy/trophy00.trp.

Remember decrypted file should have name of old encrypted one so you need to rename it to e.g trophy00.trp. Then build fpkg.

 

[GREEDYPESOS]

Ok thanxs... i will give it another try... only if i knew if my dump 100%.. They all make the C××××××× complete file... even if incomplete (disc ripped games)...

Im assuming legal retail pkg game bought from psn store will always be 100% dumps considering there's no physical scratches like on optical discs...

Would be great if some one or the community to make a list on PS4 Games Decrypted file structure and file sizes... To compare file and avoid the hit or miss / time consuming prosses of building large Fpkg games...

 

[Archi55]

I tested this when dumped own game with encrypted trophy

 

[GREEDYPESOS]

Can i bypass building a FPKG using this method below...

i have a retail paid gta v psn game installed... i exacted retail pkg via Pkg exacter (not fpkg)... can i delete game and reinstall using the retail pkg i extracted and its dlc pkg

instead of dumping decrypted game via Vortex... and skipping building Fpkg... assuming i have the license for it... or do official licenses go away if game is deleted...

All that just to be able to test gtav mod menus ...on unpatched version .. then reinstall dlc again...

Soo i went with that method and used another purchased psn game... i had to delete game otherwise pkg sender would not send pkg threw Remote pkg installer ...got error.

i tested by deleting a Disc game, then reinstalling retail pkg of the disc game extracted pkg extacter app... game booted with licence still active ... even when deleted game.

now going to test gtav... in order to backport update file..., i would be best to reinstall base game...then update to desired update?? Instead of overwriting the update to lower ???

 

[protivakid]

@BigBas - Despite the 3.38ver of the PS4 Fake Package tool saying "Max 50GB", did you ever have issues with games larger than that size?

@AluPL - Is Fake PKG Generator for PS4 Version 3.70 (Build 3.70.7110.1152) still a WIP? Looks like in August it was put on hold

 

[Ezooa]

The version of sc.exe is invalid or missing
Fake PKG Generator

 

[PSXHAX]

@Ezooa See HERE for the sc.exe error.

 

[brianforever]

Any updates to 2018's Fake PKG Generator 3.38 ?