New HD games...

[oursonnet]

Hello,

I have purchased new HD games for Storio3s.
So I have downloaded the games using the code provided in the box.Cartridge is not recognised in the 3s so I don't need it...And games is working fine.

I found the Bin files on my temp windows folder.(+- 120mb)
I try to add it on Innob_wf db files using my UnitID to put it on a another Storio.
No way...
Another things is that the games are downloaded and installed on the internal memory of the Storio (nothing on the SD card)but When I check the 2 gb partition of the Storio, it seems to be empty.

Do you have a solution of something to test ?

[Deak Phreak]

So if I understand correctly, your question is how to get those games put on another Storio? The games and apps that are downloaded to your PC are encrypted for a single device. You won't be able to see the apps by plugging it into a PC.

[oursonnet]

So if I understand correctly, your question is how to get those games put on another Storio?  The games and apps that are downloaded to your PC are encrypted for a single device.  You won't be able to see the apps by plugging it into a PC.

In fact when you decrypt a cartridge games on your SD card you have a BIN file.
Then atfer editing the db files with unit ID etc, you can launch the games without the cartridge.

In this case as the cartridge is not recognised on my Storio 3s (new HD games series),
When I try to copy cartridge on the SD card using the spiffy tools, nothing happen.
So I used the code provided in the box of the games for the Storio (withtout HD).
This code donwload the games then install it on the Storio using explor@park.
After a "*.bin" seach on my PC I found the Bin Files (2 games) on the temp folder (+-120 mb each).
I have added the Bin on a another Storio using DB as usual, and it don't works.

I have also tried to add the games on the first Storio where the games is already downloaded and It don't work.

[Deak Phreak]

When using the app on the tablet to copy the games to the SD card, it runs them through a decrypter. The apps on your PC are before being encrypted. When it adds them to the tablet, I believe it also adds specific header information to allow it to run.

I am not familiar with the HD games, so the encryption could be different or handled different. They might also be stored in a different location on the device which is maybe why the spiffy tools did not find it. I am curious if it mounts the cartrdige, but won't read it due to incompatibility. Maybe you could still browse it via shell to dump it.

Its hard to say without me having a 3s and HD cartridge game

[oursonnet]

When using the app on the tablet to copy the games to the SD card, it runs them through a decrypter.  The apps on your PC are before being encrypted.  When it adds them to the tablet, I believe it also adds specific header information to allow it to run.

I am not familiar with the HD games, so the encryption could be different or handled different.  They might also be stored in a different location on the device which is maybe why the spiffy tools did not find it.  I am curious if it mounts the cartrdige, but won't read it due to incompatibility.  Maybe you could still browse it via shell to dump it.

Its hard to say without me having a 3s and HD cartridge game

Ok I have the games running on my Storio 3s, and I also have the 2 bin files (Dora and friends and Miles) could you help me ?

[oursonnet]

When using the app on the tablet to copy the games to the SD card, it runs them through a decrypter.  The apps on your PC are before being encrypted.  When it adds them to the tablet, I believe it also adds specific header information to allow it to run.

I am not familiar with the HD games, so the encryption could be different or handled different.  They might also be stored in a different location on the device which is maybe why the spiffy tools did not find it.  I am curious if it mounts the cartrdige, but won't read it due to incompatibility.  Maybe you could still browse it via shell to dump it.

Its hard to say without me having a 3s and HD cartridge game

Ok I have the games running on my Storio 3s, and I also have the 2 bin files (Dora and friends and Miles) could you help me ?

I also found in "C:\ProgramData\VTech\DA\InnoTab\ConsoleDB\NAND_DLG\LLN" the DB used in the internal partition of the Storio.



Of course no trace of the *.ita files on my harddrive...

I tried to edit many files on "C:\ProgramData\VTech\DA\SysData\DownloadManager" 

I found some interested links :


2015-10-17 15:35:58.473: <<[DM]>>  "QInnoTabInvokerstart to download file C:/ProgramData/VTech/DA/InnoTab/Games/58_126805_000_298/enabledIcon.png,url=http://www.vtechda.com/Data/Store/FR-fre/InnoTab2/58-126805-000-298/58-126805-000-298_57x57.png" 

2015-10-17 15:35:58.475: <<[DM]>>  "QInnoTabInvokerstart to download file C:/ProgramData/VTech/DA/InnoTab/Games/58_126805_000_298/disabledIcon.png,url=http://www.vtechda.com/Data/Store/FR-fre/InnoTab2/58-126805-000-298/58-126805-000-298_57x57_grey.png" 
2015-10-17 15:35:58.480: <<[DM]>>  "QInnoTabInvokerstart to download file C:/ProgramData/VTech/DA/InnoTab/Games/58_126805_000_298/consoleIcon.png,url=http://www.vtechda.com/Data/Store/FR-fre/InnoTab2/58-126805-000-298/58-126805-000-298_console_57x57.png" 
2015-10-17 15:35:58.482: <<[DM]>>  "QInnoTabInvokerstart to download file C:/ProgramData/VTech/DA/InnoTab/Games/58_126805_000_298/Title_58_126805_000_298_V001.bin,url=http://contentcdn.vtechda.com/Data/Store/FR-fre/InnoTab2/58-126805-000-298/58-126805-000-298_body_fd760e1ed16939166222d6e92b0fb727.bin" 

If you need some files or other Info, please tell me, I'm sure there is a way doing something :-)

[oursonnet]

[Deak Phreak]

Yes those are the paths of where it pulls down the images and bin for the apps. I have not played with the innoTab for quite some time, but if I remember right, when you purchase an app, it grabs that bin file for the game, adds some header information specific to your tablet and then downloads it to your PC. At this point, it sends it to your tablet all packaged up so it plays on your device.

If you grab that bin directly from that URL, it will not have the header information that is applied during purchase and therefore would not work. The bin file is also encrypted so you would need to decrypt it.

[is0-mick]

I'ts been a while...
But here goes from what I can remeber.
Title_58_126805_000_298_V001.bin is probably the header and
58-126805-000-298_body_fd760e1ed16939166222d6e92b0fb727.bin is the main part of the game.

The key to decrypt the body section is contained in the header, but it is encrypted with your per console key.

The .ita is basically made by
copy /b "Title_58_126805_000_298_V001.bin"+"58-126805-000-298_body_fd760e1ed16939166222d6e92b0fb727.bin" 58-126805-000-298.ita

I think they did it this way so instead of having to encrypt the game for each console, they just encrypt a small header for each one.

It is possible to decrypt it on the tablet, then run the decrypted files on the other tablet...

From what I can remember they used a command called lmaid for mounting the ITA files.
was something like lmaid /sdcard/58-126805-000-298.ita /dev/loop7 /vp_mnt/app_bin

Then go look in vp_mnt/app_bin
or
mkdir /vp_mnt/sdcard/Game
cp -aR /vp_mnt/app_bin/ /vp_mnt/sdcard/DecryptedGame
(not sure if the sd card path is correct on the above, as its been a couple of years since I messed with this stuff.

Mick

[oursonnet]

I'ts been a while...
But here goes from what I can remeber.
Title_58_126805_000_298_V001.bin is probably the header and
58-126805-000-298_body_fd760e1ed16939166222d6e92b0fb727.bin is the main part of the game.

The key to decrypt the body section is contained in the header, but it is encrypted with your per console key.

The .ita is basically made by
copy /b "Title_58_126805_000_298_V001.bin"+"58-126805-000-298_body_fd760e1ed16939166222d6e92b0fb727.bin" 58-126805-000-298.ita

I think they did it this way so instead of having to encrypt the game for each console, they just encrypt a small header for each one.

It is possible to decrypt it on the tablet, then run the decrypted files on the other tablet...

From what I can remember they used a command called lmaid for mounting the ITA files.
was something like lmaid /sdcard/58-126805-000-298.ita /dev/loop7 /vp_mnt/app_bin

Then go look in vp_mnt/app_bin
or
mkdir /vp_mnt/sdcard/Game
cp -aR /vp_mnt/app_bin/ /vp_mnt/sdcard/DecryptedGame
(not sure if the sd card path is correct on the above, as its been a couple of years since I messed with this stuff.

Mick

Hi there,

By using copy /B I succeed to create a working BIN file working on my Storio 3s.
Is this BIN file will work an all the Storio ?
If not, Is there a way to decrypt (IMAID command) the file without opening the Storio and without  the PLL usb adaptor ?