Page 6 of 8 FirstFirst ... 45678 LastLast
Results 51 to 60 of 78



  1. #51
    Contributor xr3b0rn's Avatar
    Join Date
    Feb 2012
    Posts
    8
    its not unknown and you are using my old keys ! and yes i'm the one releasing this but put it up here now ... sorry for keeping you guys outdated about my private work ... now who is the leaker ?

  2. #52
    Contributor DSwizzy145's Avatar
    Join Date
    Jun 2012
    Posts
    19
    What are your new keys now?

  3. #53
    Forum Moderator PS3 News's Avatar
    Join Date
    Apr 2005
    Posts
    26,871

    Unofficial PS3 MFW Builder v0.2.3 Pre-Release by CFWProphet Arrives

    Following up on the previous update, today PlayStation 3 developer https://twitter.com/cfwprophet/status/288239961277345792 has shared a pre-release of what he calls Unofficial MFW Builder v0.2.3 followed by v0.3 with the changes below.

    Download: Unofficial MFW Builder v0.2.3 Pre-Release / Unofficial MFW Builder v0.2.3 Pre-Release (Mirror) / Unofficial MFW Builder v0.3 (Update) / PS3MFW CFW Pro Base TCL / PS3MFW CFW Pro Base TCL (02.10.2013) (works fine with emer_init.self) by haxxxen / PS3 MFW Script Updates by haz367 (via pastie.org/6081909) / lv0_patch.zip by zecoxao / lv0tool.rar (lv0tool compiled with cygwin by u$er) / http://gitorious.ps3dev.net/mfw-tasks-custom/mfw-tasks-custom/archive-tarball/master / scetool.exe (4.46) / keys (4.46) / Patches.zip by Smhabib and Naewhert / patch_lv2.tcl (Fixed) / lv2test.rar / patch_lv0.tcl / patch_lv2.tcl (via pastie.org/8370393) by haz367 / https://github.com/anonymous-ElmerFudd/mfw/archive/master.zip by toolboy2012 / zerofill_ldrs.rar / 666_990_spoof_version.tcl / 00dummies.rar / tasks.rar / category_game.xml by haz367 / hereyougomate!.rar (ps3mfw_base.tcl / patch_lv0(actual) - Copy.tcl) by RedDot-3ND7355 / scetool.exe / lv0.SELF (patching difference is the disabling of the scrambling and added descrambled lv1ldr) by Smhabib / ps3mfw_0.3.1-tasks_updated-450cfw.part1.rar / ps3mfw_0.3.1-tasks_updated-450cfw.part2.rar / ps3mfw_0.3.1-tasks_updated-450cfw.part3.rar / tasks.rar / tasks.rar (ECDSA lv0 checks simplified task) by haz367 / https://github.com/anonymous-ElmerFudd/mfw

    Unofficial MFW Builder 0.2.3 pre release.

    I'm not done yet and need to unbrick my PS3 first before i can continue debugging the app. But this console is a problem console with a flash chip that won't let his self new written -.-

    So i want to put out the actual state of the update to get feadback. Don't install a generated pup of MFW Builder if you don't have a flasher and/or this release goes official puplic.

    What have been changed?:

    Unofficial 0.2.3 update 'cfwprpht'
    • Major Clean Up
    • Added support for 4.xx CFW
    • Added spkg tool's
    • Added new Keys to .ps3 folder
    • Added calculated private key's for 4.xx (scekrit keys - still needs disabled ECDSA check to work)
    • Added scetool to decrypt self's and to re-sign LV1, LV2, spu_pkg_rvk_verifier, they are now correctly rebuilded for 4.xx CFW
    • Merged and re-arranged tasks/commands to speed up patching process
    • Added Templat dir and templat icons for the segments in the homebrew category
    • Added templat.xml with 'AC1D CFW' pkg-mgr, homebrew and emulator segment
    • Added standalone '*Install Package Files' app to MFW
    • Added a command which will create a custom dir in dev_flash for us (to use for templat imgs or the standalone Install Packages app)
    • Updated Spoof task up to including 4.31
    • Removed standart FirmWare spoofing in case of you can use Jailbait patch and have the same result
    • Added a new Hombrew Category patch which will merge Network cat with PSN cat and use Network cat as HomeBrew cat if one of the 4 new segment patches are used
    • Merged ssl patches, nas_plugin and the nonretail patches to patch_vsh.tcl
    • Updated Jailbait patches and merged them with Patch_vsh.tcl to make it more specific and speed up patching process
    • Added patch_lv2_npdrm_ecdsa_check to the jailbait patches category
    • Added customize_mfw.tcl and merged cooldboot patches into it
    • Added patch_pup.tcl and merged broken bluray, broken bluetooth, change pup version, shop2retail and retail2shop to it
    • Added patch_cos.tcl and merged lv0, lv2, spu pkg rvk verifier and emer init patches to it to speed up patching process
    • Added patch-lv0-coreos-ecdsa-check: Patch to disable CoreOS ECDSA check in LV0 (needed for 4.xx CFW)
    • Added patch-lv1-remove-lv2-protection: Remove LV2 protection (needed for 4.xx CFW)
    • Added patch-lv2-payload-hermes-355: Patch to implement hermes LV2 payload with SC8 and /app_home/ redirection 3.55
    • Added patch-lv2-SC36-355: Patch to implement SysCall36 3.55
    • Added patch-lv2-peek-poke-4x: Patch to add Peek&Poke;system calls to LV2 4.xx
    • Added patch-lv2-lv1-peek-poke-4x: Patch to add LV1 Peek&Poke;system calls to LV2 4.xx (LV1 peek/poke patch necessary)
    • Added patch-lv2-npdrm-ecdsa-check: Jailbait - Patch to disable NPDRM ECDSA check 4.xx
    • Added patch-lv2-payload-hermes-4x: Patch to implement hermes LV2 payload SC8 /app_home/ redirection & embended app mount 4.xx
    • Added patch-lv2-SC36-4x: Patch to implement SysCall36 4.xx
    • Added patch-spkg-ecdsa-check: Patch to disable ECDSA check for spkg files (needed for 4.xx CFW)
    • Added patch-alpha-sort: Alphabetical sort Order for Games in the XMB
    • Added patch-rape-sfo: Rape the SFO Param's X0 (NeoGeo) and X4 (PCEngine) to use with the Homebrew category and custome segments
    • Added add-install-pkg: Add the standart Install Package Files Segment to the HomeBrew Category in XMB
    • Added add-pkg-mgr: Add MFW PKG Manager Segment to the HomeBrew Category in XMB
    • Added add-hb-seg: Add MFW HomeBrew Segment to the HomeBrew Category in XMB
    • Added add-emu-seg: Add MFW Emulator Segment to the HomeBrew Category in XMB
    • Added patch-vsh-react-psn-v2-debug-341: Patch to implement ReactPSN v2.0 into VSH 3.41 DEBUG
    • Added patch-vsh-react-psn-v2-debug-355: Patch to implement ReactPSN v2.0 into VSH 3.55 DEBUG
    • Added patch-vsh-react-psn-v2-341: Patch to implement ReactPSN v2.0 into VSH 3.41
    • Added patch-vsh-react-psn-v2-355: Patch to implement ReactPSN v2.0 into VSH 3.55
    • Added patch-vsh-react-psn-v2-4x: Patch to implement ReactPSN v2.0 into VSH 4.xx
    • Added customize-coldboot-health-screen: Change default coldboot Healthscreen
    • Added customize-xmb-wave: Change the default XMB wave
    • Added customize-game-boot-scelogo: Change default Gameboot scelogo
    • Added customize-game-boot-ps3logo: Change default Gameboot ps3logo
    • Added customize-trophy-sound: Change default Trophy sound
    • Added customize-system-error: Change default system error sound
    • Added customize-system-ok: Change default system ok sound
    • Added customize-cursor-click: Change default cursor click sound
    • Added customize-cursor-back: Change default cursor back sound
    • Added customize-embended-app: Change default embended app (* Install Package Files) to a custome one
    • Added customize-fw-version: Change default fw version in XMB
    • Fixed task Shop to retail, delating of promo_flags.txt was missing
    • Fixed task Change CoreOS file, just a few typo's
    • Fixed task Jailbait, just a few typo's again
    • Added version-suffix combobox to reduce string fields for FW version suffixes, Added -MFW, Promotial-to-Retail, Retail-to-Promotial, OtherOS++, AC1D
    • Added old/new * Install Package Files (rogero patch)
    • Corrected some old and new bugs
    • Greetz to euss, i fixed the self_rebuilder problem by adding scetool and a simply "if" command

    In related news today PsDev has released a Create_CFW_430 Bash Script with details below, as follows:

    With cfwprophet recent release mfwbuilder (version 0.2.3) I updated the create_cfw_355 bash script and added support for 4.xx CFW creation (4.30 in general). I like to name this create_cfw_430.sh (Original huh? lol) If you have any problems with this script, please feel free to contact me so I can correct the error/glitch (Contact: Twitter, RealPsDev)

    The script does the following:
    • Patches lv0 to disable CoreOS ECDSA Check in lv0.
    • Patches FW PKG Verifier to disable ECDSA Check for spkg files.
    • Disables searching for update packages in game disc.
    • Patch LV2 to add Peek&Poke system calls
    • Patch LV2 to add LV1 Peek&Poke system calls
    • (Jailbait) Patch LV2 to disable NPDRM ECDSA check
    • Patch LV2 to implement hermes payload SC8 /app_home/ redirection & embended app mount
    • Patch LV2 to implement SysCall36 4.xx
    • Peek/poke support (unused lv1 calls 182 and 183)
    • Remove LV2 protection
      Disables integrity check in System Manager
    • Patch CoreOS Hash check. Product mode always on
    • Adds the standard Install Package Files Segment to the HomeBrew Category in XMB
    • Patches install package files back in to xbb (4.30+)
    • Add MFW HomeBrew Segment to the HomeBrew Category in XMB
    • Add "/app_home" icon to the XMB Game Category
    • Rename /app_home/PS3_GAME/ to Discless
    • Alphabetical sort Order for Games in the XMB
    • Pathces the SFO Param's X0 (NeoGeo) and X4 (PCEngine) to use with the Homebrew category and costume segments
    • Patch to allow installation of pseudo-retail packages
    • Patch to allow installation of debug packages
    • (Jailbait) Patch to implement ReactPSN v2.0 into VSH
    Code:
    Script: 
    #!/bin/sh
    #
    # Copyright (C) 2011 glevand (geoffrey.levand@mail.ru)
    # Copyright (C) 2013 PSDev (psdev@hotmail.com)
    # All rights reserved.
    #
    # This program is free software; you can redistribute it and/or modify
    # it under the terms of the GNU General Public License as published by
    # the Free Software Foundation; version 2 of the License.
    #
    # This program is distributed in the hope that it will be useful,
    # but WITHOUT ANY WARRANTY; without even the implied warranty of
    # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    # GNU General Public License for more details.
    #
    # You should have received a copy of the GNU General Public License
    # along with this program; if not, write to the Free Software
    # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
    #
    
    OFW=$HOME/firmwares/OFW430.PUP
    CFW=$HOME/firmwares/CFW430-.PUP
    
    ./ps3mfw $OFW $CFW \
    	--gui false \
    	--debug false \
    	--patch_pup \
    		--pup-build "" \
    		--version-string "" \
    		--version-suffix "PSDev" \
    	--patch_lv1 \
    		--patch-lv1-peek-poke true \
    		--patch-lv1-remove-lv2-protection true \
    		--patch-lv1-sysmgr-disable-integrity-check-4x true \
    		--patch-lv1-coreos-hash-check true \
    	--patch_cos \
    		--patch-lv0-coreos-ecdsa-check true \
    		--patch-spkg-ecdsa-check true \
    		--patch-pup-search-in-game-disc true \
    		--patch-lv2-peek-poke-4x true \
    		--patch-lv2-lv1-peek-poke-4x true \
                    --patch-lv2-npdrm-ecdsa-check true \
    		--patch-lv2-payload-hermes-4x true \
    		--patch-lv2-SC36-4x true \
    	--patch_xmb
    	        --add-install-pkg true \
    		--patch-act-pkg true \
    		--add-hb-seg true \
    		--patch-app-home true \
    		--patch-ren-apphome true \
    		--patch-alpha-sort true \
    		--patch-rape-sfo true \
            --patch_vsh
    	        --allow-pseudoretail-pkg true \
    		--allow-debug-pkg true \
    		--patch-vsh-react-psn-v2-4x true \
    Please take note this does require version 0.2.3 of mfwbuilder.

    From eussnl: Windows oneliner:
    Code:
    ps3mfw.exe %1 "Y:\PS3-Firmwares\OFW430.PUP" ""Z:/MFWOtherOS-out/MFW430.PUP" --gui false --debug true --patch_pup --pup-build "" --version-string "" --version-suffix "PS3DEVWIKI" --patch_lv1 	--patch-lv1-peek-poke true --patch-lv1-remove-lv2-protection true --patch-lv1-sysmgr-disable-integrity-check-4x true --patch-lv1-coreos-hash-check true --patch_cos --patch-lv0-coreos-ecdsa-check true --patch-spkg-ecdsa-check true --patch-pup-search-in-game-disc true --patch-lv2-peek-poke-4x true --patch-lv2-lv1-peek-poke-4x true --patch-lv2-npdrm-ecdsa-check true --patch-lv2-payload-hermes-4x true --patch-lv2-SC36-4x true --patch_xmb --add-install-pkg true --patch-act-pkg true --add-hb-seg true --patch-app-home true --patch-ren-apphome true --patch-alpha-sort true --patch-rape-sfo true --patch_vsh --allow-pseudoretail-pkg true --allow-debug-pkg true --patch-vsh-react-psn-v2-4x true
    About Unofficial MFW Builder v0.3:

    Public release... copy the content of the .rar into the templat dir of mfw builder

    Changelog v0.3 Unofficial:

    Finally I decided to give that unofficial release the version v0.3 in case of the massive changes to MFW Builder. We have now 4.xx FW support and therefore I added a lot of new things and apps's, like new_pkg which also generate a spkg matching with the input pkg. I removed self_rebuilder and added scetool to decrypt SELF's and to rebuild the SELF's.

    For the last option I coded my own routine which checks the input SELF and sets up the correct variables to use with scetool. Then we have a new script to auto generate predefined MFW/CFW-'s like the public released one's. To make MFW Builder a bit more secure for the avarage end user I added a SHA1 checksum test on the input PUP which can also be disabled per option for the more advanced user.

    And dev's which maybe plan to release there next CFW via script for MFW Builder can enable a hidden option in the file 'mfw' to add a new SHA1 checksum of the input PUP to the db.xml. So they also can use there old CFW as input and only apply the new changes to it. So dev's don't need to share copyright protected stuff and the end user don't need to download a 200MB file every time or for every CFW and/or store more then 1 OFW on his PC.

    And that's even not all what is new. I will continue working on MFW to make it an even more useful tool then it already is right now. Big THX to git-hacks.com and Anonymous Developers (Code Monkeys) for this great tool. Please note that the download below is not the entire app but rather just the files necessary to update MFW builder.

    Haxxxen has made available (linked above) a PS3MFW CFW Pro Base TCL stating the following:

    I have enabled input of new hash checks based on your own folders, so you can put the pup in any folder. i have nothing else changed, so it is still cfwprophets's work.

    I would recommend deleting db.xml and let the app create itself a new one with your own pup locations. you have to choose disable pup hash check option. I will take another look on tasks later on, as i am not very self confident at the moment.

    PS3MFW Builder 0.2.1 SPKG Modification

    Download: _ps3mfw_mod.7z

    Still alive, but not kickin a little late, but here is something, which might find a few useful... with all the problems I had with the v0.3 release, I have made a little mod to the original ps3mfw builder v0.2.1, to include the patching of 3.56+ spkg header files, to correct the checksums of the tar/pkg files inside a PUP.

    I only have included the patches made by cfwprpht in his release, so credits go to him.. with this you can at least replace (no direct patching/resigning!) devflash/coreos files in any 4.x cfw without loosing the ability to be installed over any other 4.x CFW. for example you can replace Rebug devflash files, like modded rcos, in the PUP directly and it still will work like the original. no more MOD packages or devblind writes needed, which have to be done after the CFW firmware installation.

    Use it at your own risk and I only have tried it with a 4.21.2 REBUG REX PUP and no warranty for Rogero's. It includes the spkg tools and the keys given by cfwprpht. just replace the files in the ps3mfw builder v0.2.1 folder.. and to properly resign 4.x devflash/coreos files manually, you have to use the template option in scetool
    usage:
    Code:
    scetool.exe -v --sce-type=SELF --compress-data=TRUE --skip-sections=TRUE --template=devflash/coreos.self/sprx_orig --encrypt devflash/coreos.elf new_devflash/coreos.self/sprx
    Credits to aldostools for the hint.

    I have patched and resigned the basic_plugins.sprx for both REX versions, to bypass rsod just incase. It is based on rogero's rsod bypass patch on 4.40/4.41. I would suggest to replace them with the ps3mfw builder mod and make an installable pup from it.

    Download: no_rsod.zip

    Note: purpose to this is, being able to use the 999 downgrader from xmb instead of hardware flashing, if it is not fixable with reinstallation. i was only able to use the 999 downgrader with the toggle recovery mode option from toolbox.

    And by the way, this patch is way better than the no_rsod patch in the notheros pup. it gives no disadvantages regarding trophies/saves and i am using it now as default. all games i have, run perfectly with it. (but maybe the problems with notheros have been with the otheros++ patches, dunno)

    From haz367:
    Code:
    Patching Lv0 to disable "CoreOS ECDSA check"
    
    4.41 coreos package /content / lv0.self.elf COMPARE OFFSETS:
    
    14bytes 0x14 in hex each?!
    4bytes 0x04 hex
    
    ofw441 vs rebug441:
    
    1) lv0.self.elf: offset block: 64D68 - 64D7B
    
    ofw441: 20bytes 84 21 17 F0 0E FA 70 78 27 EA BB E7 C1 89 AB 0A 00 67 82 5F
    
    rebug441: 0B 58 72 4F 4C 50 60 B7 51 6A 94 DF 99 F1 BA 35 FB D0 BE 7E
    
    2) offset block: 64F24 - 64F37
    
    ofw441: 87 54 11 75 10 0B 01 44 AF A7 E2 BD 33 34 B6 E0 14 12 04 E0
    
    rebug441: CE 74 49 71 54 FF CA 8D D8 98 7A 8B 61 9A 61 1B 6D 73 26 E3
    
    3) offset block: 650B5 - 650C8 ( 650C9 = 99 = hetzelfde nr in beide lv0's verder met bock? of OFFSET 650CA - 650DD
    
    ofw441 block 650B5/650C8: B9 B9 22 63 C6 EB ED 1E 02 C9 14 35 84 C7 A9 9D BA 08 F4 DA
    
    rebug441 block 650B5/650C8: FF 09 52 55 B8 30 79 0C BD 1D F5 28 45 25 14 1F 91 82 6F FC
    
    !! skip 2bytes or "1BLOCK"?! = digit/value "99"
    
    4) ofw441 block 650CA/650DD: 5C 8B 6A DB 99 96 84 CB AD A8 92 8C A9 22 45 31 54 AE 9F BB
    
    rebug441 650CA/650DD: 2A F4 EA D3 74 0A A1 FF FD 7E 9B 7C 7B 31 4E A7 A2 3A C7 03
    
    volle OFFSET/BLOCK: FF 09 52 55 B8 30 79 0C BD 1D F5 28 45 25 14 1F 91 82 6F FC 99 2A F4 EA D3 74 0A A1 FF FD 7E 9B 7C 7B 31 4E A7 A2 3A C7 03
    
    5) offset block 65D08 - 650DB
    
    ofw441: 99 31 4B 5B
    
    rebug441: EA BD 21 D8
    
    6) offset block 6BF44 - 6BF4B
    
    ofw441: 36 7F FA D7 AE B3 01 DF
    
    rebug441: 64 F6 BF DD BF 4C C1 0F
    
    7) offset block: 8B9B8 - 8B9CB
    
    ofw441: 11 98 4C B1 83 F0 EE 97 62 56 2F CD 5F 38 5E 44 52 ED 4A 7F
    
    rebug441: 6E 83 2F 24 25 13 3E 2D 2E 4E F4 5F 3B 75 8E 66 FF 52 4B 6E
    
    8) offset block: 8BB74 - 8BB87
    
    ofw441: 9D D7 8C 60 D1 DF A1 4B 32 9B 64 97 14 22 2E 88 0C CB BA 1A
    
    rebug441: 53 CB 75 37 A7 58 5B F1 2A 82 31 3D 6E B5 42 C9 0F 68 25 81
    
    9) offset block: 8BD05 - 8BD18
    
    ofw441: 7D 53 AA BF 5B 3F 03 98 43 26 28 40 8A 2B CC 12 67 8A F8 AE
    
    rebug441: 8F BF 5D 50 12 F3 A5 F3 BB BB 20 91 6A FD 35 59 C0 C6 60 DA
    
    10) offset block: 8BD1A - 8BD2D
    
    ofw441: B2 90 36 8F BB 3B 49 26 EA 25 4D AF 2F 6E 05 19 D2 87 9F E3
    
    rebug441: 62 50 5B 13 D4 3F C1 2D 98 DB C0 88 C3 02 22 28 E3 C8 D4 19
    
    11) offset block: 8DFFC-8DFFF
    
    ofw441: BC 18 1F F3
    
    rebug441: CF 9C 86 F0
    
    12) offset block: 8E7E4 - 8E7E7
    
    ofw441: 06 F1 A2 03
    
    rebug441: 75 72 3E 00
    
    13) offset block: A4464 - A4477
    
    ofw441: 0C 64 C4 5C C2 44 27 E7 77 EF F5 7F 57 0C 4D 39 EF AE C3 5F
    
    rebug441: 74 C3 73 63 D6 E3 A9 A6 BC 54 6D CA 41 5C FF D9 48 FA 07 4E
    
    14) offset block: A4570 - A4583
    
    ofw1: EF D7 A0 8E F8 A1 C5 86 08 F3 BD 26 E6 D4 5D EB E1 5B FB D8
    
    rebug441: 1C D5 A7 49 64 EE 02 BE 67 EC E0 68 21 70 94 24 76 00 8F 79
    
    15) offset block: A4701 - A4714
    
    ofw441: 20 E3 BF 05 1B 7B 9F 96 16 67 69 D8 A1 8F 4C 2B CD E7 93 13
    
    rebug441: 8F 63 C5 A8 6D 5E 25 84 26 F4 C6 A9 55 BE 3A FC 16 76 86 39
    
    16) offset block: A4716 - A4729
    
    ofw441: A7 01 68 53 AD 76 32 A3 E0 59 83 25 54 F9 E2 60 E0 69 31 54
    
    rebug441: 01 2F A6 B4 83 08 E1 66 95 12 58 2E DC 24 51 9F 90 DB C8 27
    
    17) offset block: A7DF0 - A7DF3
    
    ofw441: 54 11 05 0B
    
    rebug441: 27 EF 2B 08
    
    18) offset block: A85D8 - A85DB
    
    ofw441: BC 31 A8 C3
    
    rebug441: CF CC 99 C0
    
    19) offset block: B8B94 - B8BA7
    
    ofw441: 63 FB 56 B9 64 B2 7F 05 66 7F 27 00 D0 63 60 6D 07 3E DB 70
    
    rebug441: 3E 99 CB 48 86 AA 94 93 08 4A 6D CE 0F 9E 75 AC C1 34 03 C5
    
    20) offset block: B8D50 - B8D63
    
    ofw441: A9 7D 5E A7 2F C0 2B C5 06 33 1B 3E 67 86 66 A1 C9 52 26 20
    
    rebug441: 28 06 BA 75 1C 04 BB 77 97 CF 07 4C 98 5C 4A 8D B8 70 FC E4
    
    21) offset block: B8EE1 - B8EF4
    
    ofw441: CC 9F 72 E0 6E 87 CC D1 AC E8 D4 2D E7 CB DF 33 7F D3 14 C1
    
    rebug441: A2 4B 24 C3 78 DF 36 E6 4B 9A 14 88 3A B0 A1 AF 86 25 AF 44
    
    22) offset block: B8EF6 - B8F09
    
    ofw441: FF D0 A2 CD 8F 3A A2 4F 6B D8 06 A2 B5 8E B6 56 A4 9B 93 D1
    
    rebug441: E3 55 61 81 4B 06 97 00 D1 24 7A DD 8E 94 78 44 E9 04 B7 8A
    
    23) offset block: BAEC8 - BAECB
    
    ofw441: 16 54 07 74
    
    rebug441: 0E F0 8F F4
    
    24) offset block: BCCC4 - BCCC7
    
    ofw441: 74 CF FB 95
    
    rebug441: 07 33 AF 16
    
    25) offset block: BE5F8 - BE5FF
    
    ofw441: C7 EF 6A 5A E9 08 79 A6
    
    rebug441: 9D DE C9 D0 F8 F7 B9 76
    
    26) offset block: C07D0 - C07D3
    
    ofw441: 0B 2D 40 4E
    
    rebug441: 78 D6 85 4D
    
    1) ldr1-lv1ldr.elf
    
    C14-C17
    33 0C 6A 80
    40 80 00 03
    
    6E50-6E57
    12 09 45 09 24 FF C0 D0
    40 80 00 03 35 00 00 00
    
    2)ldr2-lv2ldr.elf
    
    22B8-22BB
    33 04 99 00
    40 80 00 03
    
    2AA0-2AA3
    33 03 9C 00
    40 80 00 03
    
    3)ldr3-isoldr.elf
    
    36C0-36C3
    33 7E 2E 00
    40 80 00 03
    
    3EA8-3EAB
    33 7D 31 00
    40 80 00 03
    
    4)ldr4-appldr.elf:
    1FA8-1FAB
    58 24 88 90
    40 80 00 10
    
    3DA4-3DA7
    33 7C 54 80
    40 80 00 03
    
    56D8-56DF
    12 11 62 09 24 FF C0 D0
    48 20 C1 83 35 00 00 00
    
    78B0-78B3
    33 7B C5 00
    40 80 00 03
    Update: PS3MFW v0.3.1 + 4.xx Tasks by RedDot-3ND7355 & B7U3 C50SS, to quote: OFFICIAL by RedDot-3ND7355 & B7U3 C50SS

    Finally we had fixed and got MFW Builder 0.3 to work and made 0.3.1

    Enjoy this fix and you can add our tasks from our git (gitorious.ps3dev.net/mfw-tasks-custom) Or even your owns...

    PS3MFW 0.3.1 MFW Tasks (Custom)

    Here are our own MFW Tasks hand made! took patterns from the 4.xx features in mfw builder v3 pre-release! If any tasks dosen't work plz report back! And if your a programer that is good in this like Glevand then plz join us!

    Thanks and Enjoy!

    From Smhabib: Here you go reddot, the patches (linked above) are based on v1.00. i changed the following files in v2.05:

    1. vsh.self(reactpsn offline)
    2. basic_plugins.sprx(rsod bypass)
    3. upl.xml(no bt/bd patch)
    4. default.spp(profile patch .needed for otheros)
    5. lv1.self(otheros patches)

    To edit:

    1. lv2_kerneel.self(peek/poke)
    2. lv1(coreos hash check ,lv2 protection remove,otheros,)
    3. lv0(disable ecdsa checks of coreos)
    4. spu_pkg_rvk_verifier.self(allow updating over any 4.xx cfw .ecdsa checks disable)
    5. spu_token_processor.self(allow qa flagging on 4.xx,disable ecdsa)
    6. spp_verifier.self(disable ecdsa.fw pkg verifying disable)
    7. and the other 3 files in dev_flash enables ipf and app_home)

    Finally, from haz367: Nothing major, i never done this so to get this patch working i'm feeling pro, can i join? zecoxao is claiming we never see a 4.xx mfw builder, how come?

    only the "lv0" is a little problem atm, can't they make a task/tlc for that using ur lv0 package and adpt those batch files into a "lv0_task" then all the rest is easy modified? just guessing u know me....

    Download: fixed patch_lv2
    Code:
    ******** Running task patch_lv2 **********
    Modifying CORE_OS file lv2_kernel.self
    unpkg-ing file CORE_OS_PACKAGE.pkg
    Executing command unpkg $pkg $dest
    Executing shell unpkg {C:\Temp\PS3MFW-MFW\update_files\CORE_OS_PACKAGE.pkg} {C:\Temp\PS3MFW-MFW\update_files\CORE_OS_PACKAGE.unpkg}
    cosunpkg-ing file content
    Executing command  cosunpkg $pkg $dest 
    Executing shell cosunpkg {C:\Temp\PS3MFW-MFW\update_files\CORE_OS_PACKAGE.unpkg\content} {C:\Temp\PS3MFW-MFW\update_files\CORE_OS_PACKAGE}
    Modifying self/sprx file lv2_kernel.self
    Decrypting self file lv2_kernel.self
    Executing command unself $in $out
    Executing shell unself {C:\Temp\PS3MFW-MFW\update_files\CORE_OS_PACKAGE\lv2_kernel.self} {C:\Temp\PS3MFW-MFW\update_files\CORE_OS_PACKAGE\lv2_kernel.self.elf}
    Patching Peek&Poke Part 1
    by HABIB!
    Added by RedDot-3ND7355 -- little fix by haz367
    Executing command ::patch_elf $elf $search 0 $replace
    offset: 71424
    Sorry for the wait if it was slow, depends on RAM
    Patching Peek&Poke Part 2
    by HABIB!
    Added by RedDot-3ND7355
    Executing command ::patch_elf $elf $search 0 $replace
    offset: 3598485
    Rebuilding self file lv2_kernel.self.self
    Download: lv2test.rar

    From pastie.org/8255987:
    Code:
    #!/usr/bin/tclsh
    #
    # ps3mfw -- PS3 MFW creators
    #
    # Copyright (C) RedDot-3ND7355 (For compiling tasks that are working)
    # Copyright (C) B7U3 C50SS (For helping RedDot-3ND7355 compiling and to perfect it)
    #
    # This software is distributed under the terms of the GNU General Public
    # License ("GPL") version 3, as published by the Free Software Foundation.
    #
    
    # Priority: 300
    # Description: Patch lv2 working tasks! (4.xx)
    
    # Option --patch-lv2-features: Patch all working features of lv2 for 4.xx
    
    # Type --patch-lv2-features: boolean
    
    namespace eval ::patch_lv2 {
    
        array set ::patch_lv2::options {
    		--patch-lv2-features true
        }
        proc main { } {
            if {$::patch_lv2::options(--patch-lv2-features)} {
                set self "lv2_kernel.self"
    			
                ::modify_coreos_file $self ::patch_lv2::patch_self
            }
        }
        proc patch_self {self} {
    		if {!$::patch_lv2::options(--patch-lv2-features)} {
                log "WARNING: Lv2 havent been enabled!" 1
            } else {
                ::modify_self_file $self ::patch_lv2::patch_elf
            }
        }
        proc patch_elf {elf} {
    	if {$::patch_lv2::options(--patch-lv2-features)} {
    		    
                #Patching Peek&Poke Part 1
    			log "Patching Peek&Poke Part 1"
    			log "by HABIB!"
    			log "Added by RedDot-3ND7355 -- little fix by haz367"
             
                set search   "\x7C\x71\x43\xA6\x7C\x92\x43\xA6\x48\x00\x00\x00\x00\x00\x00\x00"
    			append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
    			append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                append search "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
                set replace "\x7C\x71\x43\xA6\x7C\x92\x43\xA6\x48\x00\x00\x00\xE8\x63\x00\x00"
                append replace "\x4E\x80\x00\x20\xF8\x83\x00\x00\x4E\x80\x00\x20\x7C\x08\x02\xA6"
                append replace "\xF8\x01\x00\x10\x39\x60\x00\xB6\x44\x00\x00\x22\x7C\x83\x23\x78"
                append replace "\xE8\x01\x00\x10\x7C\x08\x03\xA6\x4E\x80\x00\x20\x7C\x08\x02\xA6"
                append replace "\xF8\x01\x00\x10\x39\x60\x00\xB7\x44\x00\x00\x22\x38\x60\x00\x00"
                append replace "\xE8\x01\x00\x10\x7C\x08\x03\xA6\x4E\x80\x00\x20\x7C\x08\x02\xA6"
                append replace "\xF8\x01\x00\x10\x7D\x4B\x53\x78\x44\x00\x00\x22\xE8\x01\x00\x10"
                append replace "\x7C\x08\x03\xA6\x4E\x80\x00\x20\x80\x00\x00\x00\x00\x00\x17\x0C"
                append replace "\x80\x00\x00\x00\x00\x00\x17\x14\x80\x00\x00\x00\x00\x00\x17\x1C"
                append replace "\x80\x00\x00\x00\x00\x00\x17\x3C\x80\x00\x00\x00\x00\x00\x17\x5C"
             
                catch_die {::patch_elf $elf $search 0 $replace} \
                "Unable to patch self [file tail $elf]"
                
    			#Patching Peek&Poke Part 2
    			log "Sorry for the wait if it was slow, depends on RAM"
    			log "Patching Peek&Poke Part 2"
    			log "by HABIB!"
    			log "Added by RedDot-3ND7355"
    			
                set search "\x33\xCA\x08\x80\x00\x00\x00\x00\x33\xCA\x08\x80\x00\x00\x00\x00"
                append search "\x33\xCA\x08\x80\x00\x00\x00\x00\x33\xCA\x08\x80\x00\x00\x00\x00"
                append search "\x33\xCA\x08\x80\x00\x00\x00\x00\x33\xCA\x08\x80\x00\x00\x00\x00"
                append search "\x2F\xF4\xD8\x80\x00\x00\x00\x00\x2F\xF4\xC0\x80\x00\x00\x00\x00"
                append search "\x2F\xF4\x78\x80\x00\x00\x00\x00\x33\xCA\x08"
    			set replace "\x00\x17\x78\x80\x00\x00\x00\x00\x00\x17\x80\x80\x00\x00\x00\x00"
                append replace "\x00\x17\x88\x80\x00\x00\x00\x00\x00\x17\x90\x80\x00\x00\x00\x00"
                append replace "\x00\x17\x98\x80"
             
                catch_die {::patch_elf $elf $search 0 $replace} \
                "Unable to patch self [file tail $elf]"
    		}
        }
    	}
    From toolboy2012: Ok all, I've updated my GitRepo (fork from the cfwpropht master), with my latest stuff....it's NOT NOT yet complete, as still the LV2 patches need to be finished, some are still outdated/broken!! Again, this is NOT YET fully functional, but it's almost there.

    1) you will see I set it up to unpack/extract LV0 (using the lv0tool) as part of the initial PUP unpack procedure...makes more sense to do it that way....then when all 'tasks' are done, and the PUP is ready to be rebuilt, the LV0 is then re-imported, resigned etc...

    2) I made major changes to the "patch_cos.tcl" to break out the core OS changes into LV0, LV1, and LV2 sections...makes it easier to follow...

    3) I tried to organize the core_os patches better by pre-pending their display names with "[4.xx]" and "[3.xx]"....in my opinion, the "core OS" patches should be ALL patches that are necessary for the minimum modified firmware to work, ie ECDSA checks disabled, peek/poke support, etc....so that's how I organized it so far...

    4) the initial "LV0" unpacking/extraction (and final LV0 importing) is based on the initial PUP version....3.60 and above have the new LV0, so the extraction/importing is done based on initial PUP version...

    5) the lv0tool crashes when trying to extract the LV0 for firmware 3.60, i'm guessing the loaders in that version are NOT crypted, and maybe different as well?

    6) need to finish adding the rest of the "self/auth ID" types into the ps3mfw_base, for the SCETOOL/makeself routine..I will finish this soon...

    So there's much more to do, but it's at least much cleaned up, and getting closer! this is where my repo is (linked above) currently... (still learning GitHub, as I'm a newb to that tool, I'm familiar with SVN!)

    From RazorX: hey guys i noticed you had one of my tcls in the not working folder but that tcl file (add_pkg_file.tcl) does work it just requires u to have the OFW-MOD.PUP which is basically an official pup with the /dev_flash/PS3Ultimate/Packages folder added to it aswell as install package files and app_home but thats it.

    Here's the OFW-MOD.PUP for you to take a look at but i never got round to testing it by installing it on a ps3 since i dont have a flasher this is fw 3.55 btw.

    Also here is the tcl file add_pkg_file.tcl. Also i have tested jailbait.tcl on multiple occasions and it never let me actually finish building a pup file so here is a modified one i did, i have added the 4.46 info to it and set it up so you can also use it to replace CA24 and CA27.

    And here is a tcl file (rename_category.tcl) i wrote a while ago which allows you to rename settings, photo, music, video, game, friends, users, login & tv categories (English Only) to whatever you want but it wont enable the tv category i figured id leave that out since a tcl file for enabling it already exists. Enjoy..

    Hey guys forgot to mention you also need to add (via pastebin.com/nN67wuJH):
    Code:
    proc get_header_key_upl_xml { file key message } {
    debug "Getting \"$message\" information from UPL.xml"
    
    set xml [::xml::LoadFile $file]
    set data [::xml::GetData $xml "UpdatePackageList:Header:$key"]
    if {$data != ""} {
    debug "$key: $data"
    return $data
    }
    return ""
    }
    
    proc set_header_key_upl_xml { file key replace message } {
    log "Setting \"$message\" information in UPL.xml" 1
    
    set xml [::xml::LoadFile $file]
    
    set search [::xml::GetData $xml "UpdatePackageList:Header:$key"]
    if {$search != "" } {
    debug "$key: $search -> $replace"
    set fd [open $file r]
    set xml [read $fd]
    close $fd
    
    set xml [string map[list $search $replace] $xml]
    
    set fd [open $file w]
    puts -nonewline $fd $xml
    close $fd
    return $search
    }
    return ""
    }
    To your ps3mfw_base.tcl thanks, also could you tell me why this is happening when i try to use your version:
    Code:
    Command line to use to repeat this process :
    O:\PS3MFW v0.3.1 + 4.xx Tasks\mfw-tasks-custom-mfw-tasks-custom\Our MFW 0.3.1\ps3mfw.exe "O:/PS3MFW v0.3.1 + 4.xx Tasks/mfw-tasks-custom-mfw-tasks-custom/Our MFW 0.3.1/OFW/PS3UPDAT.PUP" "O:/PS3MFW v0.3.1 + 4.xx Tasks/mfw-tasks-custom-mfw-tasks-custom/Our MFW 0.3.1/CFW/MODDEDPUP.PUP" --no-sha1-check "false" --add-sha1 "true" --silent "false" --debug "true" --add-license-msg --license-auto-add-features "true" --license-features-message "PS3MFW Features Enabled:" --license-message "Modified Firmware created by RazorX using PS3MFW Builder 0.3.1.
    
    This system firmware update has been modified from the original, and is therefore unofficial and not endorsed by SCE.
    
    Installation of this system firmware update increases the risk of rendering your game system unstable or unusable.
    
    Use at your own risk. No guarantee expressed or implied. If anything bad happens as a result of installing this system update, you cannot hold anyone responsible but yourself.
    
    The creators of this system firmware modification process do not condone piracy. Use your system responsibly and only play games that you have purchased. Enjoy!
    
    " --gui false
    
    PS3MFW Creator v0.3.1
    Copyright (C) 2013 Project PS3MFW
    This program comes with ABSOLUTELY NO WARRANTY;
    This is free software, and you are welcome to redistribute it
    under certain conditions; see COPYING for details.
    
    Developed By :
    Anonymous Developers
    RedDot-3ND7355 and B7U3 C50SS
    Habib for patterns
    
    Selected tasks : add_license_msg
    HOME=C:\Users\RazorX
    USERPROFILE=C:\Users\RazorX
    PATH=C:\Program Files (x86)\AMD APP\bin\x86_64;C:\Program Files (x86)\AMD APP\bin\x86;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\Microsoft SQL Server\90\Tools\binn\;C:\Program Files (x86)\Java\jre7\bin;C:\Program Files (x86)\Git\cmd;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Users\RazorX12\AppData\Local\Smartbar\Application\;C:\Program Files (x86)\QuickTime\QTSystem\;C:\pspsdk\bin;C:\Program Files (x86)\Atmel\Flip 3.4.2\bin;O:\PS3MFW v0.3.1 + 4.xx Tasks\mfw-tasks-custom-mfw-tasks-custom\Our MFW 0.3.1\tools;O:\PS3MFW v0.3.1 + 4.xx Tasks\mfw-tasks-custom-mfw-tasks-custom\Our MFW 0.3.1\tools
    Deleting output files
    Executing command file delete -force -- ${::CUSTOM_PUP_DIR} ${::ORIGINAL_PUP_DIR} ${::OUT_FILE}
    Unpacking source PUP PS3UPDAT.PUP
    Executing command pup_extract ${pup} ${dest}
    Executing shell pupunpack {O:\PS3MFW v0.3.1 + 4.xx Tasks\mfw-tasks-custom-mfw-tasks-custom\Our MFW 0.3.1\OFW\PS3UPDAT.PUP} {O:\PS3MFW v0.3.1 + 4.xx Tasks\mfw-tasks-custom-mfw-tasks-custom\Our MFW 0.3.1\temp\PS3MFW-MFW}
    Extracting tar file update_files.tar into update_files
    Executing command ::tar::untar $tar -dir $dest
    Extracting tar file spkg_hdr.tar into spkg_hdr
    Executing command ::tar::untar $tar -dir $dest
    FATAL ERROR: Could not untar file O:/PS3MFW v0.3.1 + 4.xx Tasks/mfw-tasks-custom-mfw-tasks-custom/Our MFW 0.3.1/temp/PS3MFW-MFW/spkg_hdr.tar : couldn't open "O:/PS3MFW v0.3.1 + 4.xx Tasks/mfw-tasks-custom-mfw-tasks-custom/Our MFW 0.3.1/temp/PS3MFW-MFW/spkg_hdr.tar": no such file or directory
    See O:/PS3MFW v0.3.1 + 4.xx Tasks/mfw-tasks-custom-mfw-tasks-custom/Our MFW 0.3.1/temp/ps3mfw.log for more info
    Last lines of log :
    
    unpacking update_flags.txt (00000000_00000005 bytes; hmac: OK)...
    unpacking ps3swu.self (00000000_005663d8 bytes; hmac: OK)...
    unpacking vsh.tar (00000000_00002800 bytes; hmac: OK)...
    unpacking dots.txt (00000000_00000003 bytes; hmac: OK)...
    unpacking update_files.tar (00000000_0a4f1000 bytes; hmac: OK)...
    Extracting tar file update_files.tar into update_files
    Executing command ::tar::untar $tar -dir $dest
    Extracting tar file spkg_hdr.tar into spkg_hdr
    Executing command ::tar::untar $tar -dir $dest
    FATAL ERROR: Could not untar file O:/PS3MFW v0.3.1 + 4.xx Tasks/mfw-tasks-custom-mfw-tasks-custom/Our MFW 0.3.1/temp/PS3MFW-MFW/spkg_hdr.tar : couldn't open "O:/PS3MFW v0.3.1 + 4.xx Tasks/mfw-tasks-custom-mfw-tasks-custom/Our MFW 0.3.1/temp/PS3MFW-MFW/spkg_hdr.tar": no such file or directory
    
    Error running script: Could not untar file O:/PS3MFW v0.3.1 + 4.xx Tasks/mfw-tasks-custom-mfw-tasks-custom/Our MFW 0.3.1/temp/PS3MFW-MFW/spkg_hdr.tar : couldn't open "O:/PS3MFW v0.3.1 + 4.xx Tasks/mfw-tasks-custom-mfw-tasks-custom/Our MFW 0.3.1/temp/PS3MFW-MFW/spkg_hdr.tar": no such file or directory
    I've found where the issue lies the command doesnt have a fallback so if it doesnt find spkg_hdr like if u use a 3.55 update it fails.

    ok i've updated jailbait and added the ability to add a suffix to the version.txt in the root of the update ive done this because rather than keep adding a crap load of tcls to ps3mfw i figure why not try to cut down on some of them by adding some of the functions from the old tcls onto new ones then ur not gonna end up with an app were you gotta go through hundreds of options just to make a cfw.

    Here's the link for you to test: jailbait.tcl

    I've tried this on ur app with a 4.46 update but get this:
    Code:
    Patching vsh.self.elf
    Patching 0x315f50 unlinking of file
    Executing command :atch_elf $elf $search 4 $replace
    FATAL ERROR: Unable to patch self vsh.self.elf : Could not find pattern to patch
    See G:/ps3mfw0.2.1/tmp/ps3mfw.log for more info
    Last lines of log :
    
    Preferred POSIX equivalent is: /cygdrive/g/ps3mfw0.2.1/tmp/PS3MFW-MFW/update_files/dev_flash/dev_flash/vsh/module/vsh.self
    CYGWIN environment variable option "nodosfilewarning" turns off this warning.
    Consult the user's guide for more details about POSIX paths:
    http://cygwin.com/cygwin-ug-net/using.html#using-pathnames
    compressed self_sections[i].offset 0x900 self_sections[i].size 0x2e0ce9
    compressed self_sections[i].offset 0x2e7250 self_sections[i].size 0x1977b
    Patching vsh.self.elf
    Patching 0x315f50 unlinking of file
    Executing command :atch_elf $elf $search 4 $replace
    FATAL ERROR: Unable to patch self vsh.self.elf : Could not find pattern to patch
    
    Error running script: Unable to patch self vsh.self.elf : Could not find pattern to patch
    I don't have any experience with making 4.xx cfw so if you can help me fix this where it works for both 3.55 and 4.xx that would be great thx

    Update: ok here's my latest tcls: tasks.rar

    I've updated add_pkg_file.tcl so it doesnt require OFW-MOD.PUP u can use any pup i tested it on 3.55 OFW and 4.46 OFW (not on ps3) and what it will do is create /dev_flash/PS3Ultimate/Packages and add upto 5 pkgs in it it will also add "Install Package Files" and "app_home" and set it up so "Install Package Files" will allow you to install the pkgs from /dev_flash/PS3Ultimate/Packages so you dont have to do anything.

    I've also updated rename_category.tcl so now it works with renaming "Network" ive also added "TV/Video Services" to it aswell for 4.xx fw however a quick note, whenever renaming "Network" it will also rename "PlayStation network" for example if i rename "Network" to "TEST" i will also get "PlayStation test"

    i have also created a tcl that will allow u to alter a pkg location in "Install Package Files" on CFW so if you have ur own custom location you want to use for example "/dev_hdd0/PKGS" and you dont have a backwards compatible ps3 then simply using my tcl change "host_provider_ms" to something like "host_provider_custom" and add "/dev_hdd0/PKGS" to Custom Path i've also updated a few others.

    Enjoy.. I personally will never use usb003 to usb007 and host_provider_ms because i dont have a backwards compatible ps3 therefore i only have 2 usb slots and no ms slot so this is great for making your own custom firmware if it all works perfectly but like i said i cant test them without risking bricking my only ps3.

    I've updated rename_category to include renaming /app_home/PS3_GAME/ here: rename_category.tcl

    You can rename it to whatever you want for example you can rename it to: Launch Game Discless

    Ok there is an issue with the patterns i believe because following the exact instructions i manually decrypted the vsh.self from habibs 5.50 cfw and altered the patterens it says alter then i encrypted the altered vsh.elf the exact way it said and sent it to my ps3 and all i get after reboot is a black screen so will need the correct patterns (below):

    The replace_vsh_file does exactly what you would expect it allows you to replace the vsh.self file in a pup i created this in about 30secs lol but have tested it and it does replace the file.

    From RedDot-3ND7355 (via pastebin.com/dRACEKyA):
    Code:
    Pattern checkup by RedDot-3ND7355!
        edited/added new 4.50 offsets/patterns for vsh/lv1/lv2!
         
        [vsh.self.elf] to allow running of unsigned applications
        Part 1
        446 OFFSET: 6202756 = 450 offset: 6199536
        Part 2
        446 OFFSET: 2366528 = 450 offset: 2372508
         
        [vsh.self.elf] ReactPSN ONLINE/OFFLINE
        Part 1
        Error Patterns changed!
    4.50 =
    part1
    
    offset 243d74
    "\x7C\x08\x02\xA6\xF8\x01\x00\x80\x48\x39\x8F\xB9\x60\x00\x00\x00"
        Part 2
        Error Patterns changed!
    
    4.50 = 
    part2
    offset 2437fc
    483d45fd
    "\x7C\x08\x02\xA6\xF8\x01\x00\x80\x48\x3D\x45\xFD\x38\x03\xFF\xFF"
         
        [lv1.self.elf] core OS Hash check core os for 4.xx
        446 OFFSET: 3013240 = 450 offset: 3013232
         
        [lv1.self.elf] hypervisior to remove LV2 protection for 4.xx
        Error Patterns changed!
    
    4.50 =
    
    lv1 450
    offset 23aa9c
    
    patch-lv1-features-45x: [4.5x] Test patch!
    Patching LV1 hypervisior to remove LV2 protection for 4.xx
    "\x48\x00\xE0\x81\x2F\x83\x00\x00\x38\x60\x00\x01\x41\x9E"
         
        [lv1.self.elf] mmap out for 4.xx
        Same offset ;)
         
        [lv0 ldr's] patch ECDSA
        Same offset ;)
         
        [lv2.self.elf] Peek&Poke by HABIB
        Part 1
        Same offset ;)
        Part 2
        Error Patterns changed!
    
    4.50 =
    
    lv2 450 part2 p/p
    36f105
    33 AE 48 80 00 00 00 00 33 AE 48 80 00 00 00 00 33 AE 48 80 00 00 00 00 33 AE 48 80 00 00 00 00 33 AE 48 80 00 00 00 00 33 AE 48 80 00 00 00 00 30 15 60 80 00 00 00 00 30 15 48 80 00 00 00 00 30 15 00 80 00 00 00 00 33 AE 48
    
        [nas_plugin.sprx.elf] pseudo retail pkg's
        Same offset ;)
         
        [nas_plugin.sprx.elf] habib's patterns
        Part 1
        446 OFFSET: 146208 = 450 offset: 148280
        Part 2
        446 OFFSET: 191216 = 450 offset: 191524
         
        [spp_verifier.self.elf]
        Same offset ;)
         
        [spu_pkg_rvk_verifier.self.elf] SPKG ECDSA verifier td ECDSA chk
        Same offset ;)
         
        [spu_token_processor.self.elf] Patch spu token processor
        Same offset ;)
         
        [explore_category_game.sprx.elf] allow install pkg
        446 OFFSET: 747096 = 450 offset: 743512
         
        [explore_plugin.sprx.elf] allow install pkg
        446 OFFSET: 2093076 = 450 offset: 2085668
    From RedDot-3ND7355 (via pastebin.com/7Gjj5Ugc):
    Code:
    Pattern checkup by RedDot-3ND7355!
    
    [vsh.self.elf] to allow running of unsigned applications
    Part 1
    446 OFFSET: 6202756 = 450 offset: 6199536
    Part 2
    446 OFFSET: 2366528 = 450 offset: 2372508
    
    [vsh.self.elf] ReactPSN ONLINE/OFFLINE
    Part 1
    Error Patterns changed!
    Part 2
    Error Patterns changed!
    
    [lv1.self.elf] core OS Hash check core os for 4.xx
    446 OFFSET: 3013240 = 450 offset: 3013232
    
    [lv1.self.elf] hypervisior to remove LV2 protection for 4.xx
    Error Patterns changed!
    
    [lv1.self.elf] mmap out for 4.xx
    Same offset ;)
    
    [lv0 ldr's] patch ECDSA
    Same offset ;)
    
    [lv2.self.elf] Peek&Poke by HABIB
    Part 1
    Same offset ;)
    Part 2
    Error Patterns changed!
    
    [nas_plugin.sprx.elf] pseudo retail pkg's
    Same offset ;)
    
    [nas_plugin.sprx.elf] habib's patterns
    Part 1
    446 OFFSET: 146208 = 450 offset: 148280
    Part 2
    446 OFFSET: 191216 = 450 offset: 191524
    
    [spp_verifier.self.elf]
    Same offset ;)
    
    [spu_pkg_rvk_verifier.self.elf] SPKG ECDSA verifier td ECDSA chk
    Same offset ;)
    
    [spu_token_processor.self.elf] Patch spu token processor
    Same offset ;)
    
    [explore_category_game.sprx.elf] allow install pkg
    446 OFFSET: 747096 = 450 offset: 743512
    
    [explore_plugin.sprx.elf] allow install pkg
    446 OFFSET: 2093076 = 450 offset: 2085668
    Unofficial PS3 MFW Builder v0.2.3 Pre-Release by CFWProphet Arrives

    Unofficial PS3 MFW Builder v0.2.3 Pre-Release by CFWProphet Arrives

    More PlayStation 3 News...
    Attached Files Attached Files

  4. #54
    Contributor castman's Avatar
    Join Date
    Feb 2011
    Posts
    9
    somehow I was really missing this

  5. #55
    Contributor phuqt's Avatar
    Join Date
    Jan 2010
    Posts
    19
    How did you calculate private keys?

  6. #56
    Banned User mullac998's Avatar
    Join Date
    Jan 2011
    Posts
    9

    4.31 CFW help

    Hi i have the keys for mfw builder and i have manage to patch the lv1 and lv2_kernel.self but when i install it on my ps3 i get a error

  7. #57
    Member akimazaki's Avatar
    Join Date
    Oct 2012
    Posts
    81
    What firmware you use now??

  8. #58
    Banned User mullac998's Avatar
    Join Date
    Jan 2011
    Posts
    9
    4.31 ofw

  9. #59
    Member akimazaki's Avatar
    Join Date
    Oct 2012
    Posts
    81
    I think best way is downgrade to 3.55

  10. #60
    Banned User mullac998's Avatar
    Join Date
    Jan 2011
    Posts
    9
    but i got all the 4.31 keys why wont it install even tho i patch lv1.self and lv2_kernel.self

 


 
Page 6 of 8 FirstFirst ... 45678 LastLast