My Experience with Exploiting PS Vita (Gen 1) Using TN-V8 (Firmware 3.01) After Sony Releases Firmware 3.10

After missing out the TN-V exploit game last February - Persona 2 - Innocent Sin, I thought this is it. I will have to wait for the next firmware release from Sony and keep on waiting for another breed of exploit.



I'm lucky to constantly tracing any news on Wololo.net and my effort finally paid off. On March 25, Sony finally release the long awaited firmware update for PS Vita, v3.10. As predicted, this is a huge leap from the original 3.01, which implies many fixes that might make TN-V exploit no longer possible. Truth to be spoken, I am really crossing my finger when I read the following post.



Then on March 27, I immediately filled with intense joy when I read the following news. Finally a chance to bring back the homebrew (mostly retro emulators) on PSP on my PSV in their glory!



To my surprise, there is not only one game exploit, but 6! The cheapest one, NumBlast only costs $2.99! This is definitely a huge steal and I will not spare any chance to miss it. Come to think of it, I'm glad that I missed out the previous exploit (Persona 2: Innocent Sin) since it costs $9.99! Just when you started things will turn out to be worst, another opportunity arise!




Without haste, I immediately open up PS Store on my PS Vita. And then, the following message pop-up...



At that point, my joy suddenly dissipated into thin air. As most others would do, I immediately Google and found a nifty solution from a post on Wololo.net dated back on December 14, 2013 containing instruction to overcome this restriction. Not hope is all lost.



At this point I'm having doubt whether this trick might still work, since I thought Sony might have patched their system as they did with the exploited game. To recap, almost all the exploited game release on Wololo.net will be taken down from PSN one or two days after its release. And this post is almost 3 months old, well... I cannot set my hope high. Anyways, it still worth a shot.

Honoring the instruction, I disabled the Wi-Fi and enable the Airplane mode on my PS Vita. And then power it off and on again. Then, I headed to SEN Online Store (https://store.sonyentertainmentnetwork.com/) and search for NumBlast.


Good, it is still there!



After purchasing it, I quickly check my Download List and transfer the Download to my PS Vita. The game will then show up in the Download Queue.



Seeing that the NumBlast on my Download Queue is showing 'Waiting...', I then disable Airplane mode and reenabled the Wifi. Subsequently I power it off and on again. And voila, soon after few seconds I saw the spinning animation showing on the top right icon showing that it is now downloading the NumBlast game on my Download Queue directly to my PS Vita!

Having this game sitting on my PS Vita, what's next is to exploit it! Note that I do not have any prior experience to launch any exploit on PS Vita. So the overly simple instruction below is indeed very puzzling.


Casting my question aside, I immediately download the TNV Loader, TN-V Core, and OpenCMA.







As described, OpenCMA is a patch over the official CMA (Content Management Assistant) released by Sony allowing user to transfer any data (PSV/PSP/PS game, saves, application, photo, music, movies) from PC to PSV and vice versa. Sort of like a backup application. Without this patch, you won't be able to do the transfer as your PS Vita will prompt you to update the firmware since every access is validated on Sony server. This is where this patch comes into handy, it bypass the check to Sony server allowing us to use it anytime even without Internet connection.

One thing I realized is even after following their installation and patching the CMA, my PS Vita still refuses to connect to it and the prompt message asking me to update my PS Vita firmware still exist!



Apparently there are still additional steps that I must do, which is turning on the Airplane mode and restart my PS Vita. Upon next boot up, I managed to launch the Content Manager app just fine.

Having this connection setup, I browse to my Application data folder and copy the TN-V loader and TN-V Core. The readme.txt found in TN-V core (or the download site) contains very useful instructions. To make sure I don't screw things up on first try, I proceed with their instructions very carefully by paying close attention in every single step.




Copy the content of FW301-Numblast_US to PSAVEDATA folder.



Following next, I copied TN.BIN and FLASH0.TN from release_tnv8 (TN-V Core) into the NPUG80320KEXPLOIT folder which contains the H.BIN file. In addition, I also copied the PSP firmware 6.60 (renamed as 660.PBP) into the same folder. I downloaded the 660.PBP files here.



And that's it. I then launch Content Manager and navigate:
 > Copy Content > PC to PS Vita System > Applications > Saved Data > PSP/Other

I start to transfer the saves by ticking both the saves data titled NUMBLAST and then the Copy button.



While launching the NUMBLAST app, I'm still having my finger crossed hoping that nothing will go wrong.



The screen will flashes white and green briefly before showing the familiar TN-V Recovery Console very similar with the ones on PSP. The ship has finally sailed! Now then let us install the 6.60 CFW (Custom Firmware) by going to Advanced -> Install 6.60 files.




What a nostalgic XMB (Cross Media Bar) returning on my PS Vita! For a little while I actually thought this is my PSP since I'm also using the exact green background back then on my PSP-2000.




Now that I have it running smoothly, the next milestone is to install my favorite homebrew!

I hope you are also excited about this exploit just as I did!

12 comments

I tried exactly this and got An error occurred (C1-2858-3). What to do here

Reply

Hi there. Did you copied both TN.BIN and FLASH0.TN from release_tnv8 (TN-V Core) into the NPUG80320KEXPLOIT folder which contains the H.BIN file? I initially got that same error when I left out the FLASH0.TN.

Reply

thnx bro. very nice,detailed step by step tut. i use EU version but couldnt get it to work . for some reason i always got just a black screen and after MINUTES i got the (C1-2858-3) error. i own also KoP and i am not a new on this area. i use tn-v for 2 months already without any problems...
however. i redownloaded tn-v8 files again for numblast but this time i chosed the US version...did the same as with the EU version and copied all 4 folders(us versions have different folder numbers)to my vita via cma and started the game while holding r-trigger down.
now i get the white,green flash and recovery menu showed up. i installed 6.60 files and started psp xmb. i was surprised to see my (already per KoP installed) games like virtual tennis and chess. ^^
idk why it acted all like this but finally ima happy i got this to work too. i am also unsure it has something to do with mentonied folders and versions or it was just because. but somehow i think ur article helped me too. so : THANK you ! :)

Reply

Hi Kevin, I'm glad that my tutorial somewhat prove to be useful to your aid. So far I've tested homebrew emulators such as gpSP, snes9xTYL, MasterBoy and they all work wonderfully. Unfortunately I couldn't load DosBox for some exception error. Stay tuned as I am currently seeking a workaround for it. I had already gotten Win95 to load on my x86 machine running DosBox.

Reply

I am having a hard time installing the homebrews!! Ive followed the TN-V Read Me about installing .ZIPS but to no avail. Ive made sure that the extension were on and that everything was capitalized. After compressing the INSTALL.ZIP/PSP/GAME/FILER/EBOOT.PBP or any other hombrew/emulator and placing it in the kexploit folder and making sure that i chose the right file compared to its file size, it still doesnt show up under memory stick. It shows on the save data utility menu on the VSH but not under the memory stick!! The only thing that shows up on the memory stick is the game save for numblast and if i play that it just triggers the reboot of the VSH. Any help is appreciated.

Reply

Hi Frank. By right it will show up on your Memory Stick if you had the correct file structure and having the INSTALL.ZIP name capitalized. Double check that the file structure of your zipped file is indeed PSP\GAME\FILER\. One suspicion that I had is the INSTALL.ZIP file could be named as INSTALL.ZIP.ZIP instead. This could happen if you just simply rename it without turning on the 'Show known file extension' on the Control Panel. I could send you the INSTALL.ZIP file containing FILER if you are still having trouble by email.

Reply

I had a problem, when I try to install the 6.60 files a error message appears: "pspPSARInt failed (0xFFFFFED3)
What can I do or what I'm doing wrong???

Reply

Hi there. Are you sure that you had the 660.PBP all capitalized? That is the only cause that I can think of. Or perhaps redownload the .PBP file?

Reply

Hiv disease for the last 3 years and had pain hard to eat and cough are nightmares,especially the first year At this stage, the immune system is severely weakened, and the risk of contracting opportunistic infections is much greater. However, not everyone with HIV will go on to develop AIDS. The earlier you receive treatment, the better your outcome will be.I started taking ARV to avoid early death but I had faith in God that i would be healed someday.As a Hiv patent we are advise to be taking antiretroviral treatments to reduce our chance of transmitting the virus to others , few weeks ago i came on search on the internet if i could get any information on Hiv treatment with herbal medicine, on my search i saw a testimony of someone who has been healed from Hiv her name was Achima Abelard and other Herpes Virus patent Tasha Moore also giving testimony about this same man,Called Dr Itua Herbal Center.I was moved by the testimony and i contacted him by his Email.drituaherbalcenter@gmail.com We chatted and he send me a bottle of herbal medicine I drank it as he instructed me to.After drinking it he ask me to go for a test that how i ended my suffering life of Hiv patent,I'm cured and free of Arv Pills.I'm forever grateful to him Drituaherbalcenter.Here his contact Number +2348149277967...He assure me he can cure the following disease..Hiv,Cancer,Herpes Virus,Epilepsy, fibromyalgia ,ALS,Hepatitis,Copd,Parkinson disease.Diabetes,Fibroid...

Reply

I really love the iFi xDSD device because it was one of the free devices by iFi. Plus, the technical support it offers; fabulous! The quality of music it plays goes beyond anything. The most common time I use this device is during the last months of my university. I simply hire an essay writing service in San Diego and start practicing for exams while listening to music played by this. It feels so relaxing, and I feel like I can concentrate more while listening to music.

Reply

Fortune Jackets Care for your Fashion Requirements. We Uphold the Premium Quality Custom Deigns Leather jackets. Visit My site Men’s Quilted Shoulder Tanned Leather Jacket Thanks.

Reply

How to fix HP printer not printing color correctly?

You should check the printer driver to fix HP printer not printing color correctly. The driver acts as a translator between your computer and the printer. If there is an issue with the driver, the printer may not be able to interpret the information correctly and thus not be able to print in color. To ensure that the correct driver is installed, ensure it is up-to-date and matches your printer model. Finally, it is always a good idea to do a test print to ensure everything works correctly. Load some blank paper into your printer and send a test page. This should be a full page with color images or text to see if the printer is correctly interpreting the information from your computer and producing quality output. If the test page looks dull or faded, it is likely an issue with either the settings or the driver.

Steps to Turn Off Incognito Mode iPhone Chrome

Incognito mode in Chrome on your iPhone device will run separately from Chrome browser. To turn off incognito mode Chrome iPhone then check out the steps mentioned below. To start with, open Chrome browser on iPhone device and then tap to three-horizontal dots to view more options. Here, users will find out incognito mode and then click on it to open it. Lastly, it will open up new window that is a private window. This is how users can successfully disable incognito mode on your Chrome browser.

Why is the Outlook email search not working?

If you use Microsoft Outlook for your email, you may be familiar with its search feature. It’s a great way to quickly find emails in your inbox, contacts, and other folders. Unfortunately, this feature may sometimes not work as expected. This can be caused by various factors, from the computer not being connected to the Internet to a corrupt index file. The most common reason Outlook email search not working is that the indexing of the program hasn't been completed yet. The indexing process looks through your Outlook items (emails, contacts, notes, etc.) and makes them easily accessible for quick search results. If you've recently added items to your Outlook or updated the settings, it might take some time before the indexing is finished.

How does Verizon talk to a person?

Verizon customer service representatives can be reached through several channels, such as phone, email, live chat, and social media. To speak to a live agent, customers should call Verizon’s customer service number or start a live chat session for Verizon talk to a person. When starting a live chat session, customers will be connected to a customer service representative in real-time and be able to have their questions answered efficiently. When chatting with the customer service representative, customers will be asked to provide basic information such as their name, email address, and phone number. Then, the customer service representative will work to answer the customer’s questions and provide solutions to any issues they may have.

Reply

Post a Comment

If you found this article or post helpful to you, feel free to enter your comments below ;)