16w ago - Today Spanish PlayStation 3 developer
MiralaTijera has shared details on his PS3 CFW 4.31 OtherOS++ WIP (work-in-progress) which contains no spoofing older Custom Firmware versions and includes QAFlag and BD Emu without a controller among the features outlined below.
Download:
mod431.rar (67.7 MB) /
mod431.rar (Mirror) /
mod431.rar (Mirror #2) /
multiMAN 4.31 PKG /
multiMAN 4.31 PKG (Mirror) by
chekcoca
To quote, roughly translated: Hi, basically I stand in the community giving what I made in the dark slowly.. This is my FULL 4.31 4.31 cfw spoof's nothing, it's all ported to the 4.31, and... I give to my multitool also called "core" which is nothing more than a self that load at startup console if this is available in the right usb of your console "/ dev_usb000 /" which among other things dumpea flash console, you enable qa flags (yes in 4.31 directly) and gets you out and gets you the factory mode... I put the specs:
- CoreOS lv1 hash downgradeadas deactivated for consoles
- lv1 183/182 undocummented (LV1 peek / poke)
- lv1 OtherOS++
- VSH: nas_plugin (all pkgs installable game_ext explore_plugin and plugin to show install package and eliminate epilepsy warning message (though the latter with qa flag leaves only) and for patched vsh rif / rap fakesign) (This last with qa flag leaves only)
- default.spp: added extra memory for otheros GameOS
- lv2 peek / poke, syscall 6/7,
- lv1 lv2 peek / poke (optional syscall 8/9 via core)
- Hermes Payload with 36 ported sc
- APPLDR: lv2 memory hashing disabled from appldr (no need to have it at lv1 parcheeis) dev_flash whitelist disabled (load any keyset from dev_flash) and ECDSA Off
- ISOLDR: ECDSA Off
- SPP_VERIFIER: ECDSA Off
- spu_utoken_processor: ECDSA off (qa flag)
Payload here to include in your C fixes and managers with the hook:
- http://pastie.org/private/cxg8xvohjbh99q45jw (Payload with SC36)
- http://pastie.org/private/rbmvhgepnwlisvqm1zvchq (Lv2 lv1 calls)
Payload with SC36
lv2poke(0x8000000000003D90ULL ,0x386000014E800020ULL);
lv2poke(0x8000000000003D90ULL +8,0x386000004E800020ULL);
lv2poke(0x8000000000003D90ULL +16,0x534B313000000000ULL);
lv2poke(0x8000000000003D90ULL +24,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +32,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +40,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +48,0xF821FF317C0802A6ULL);
lv2poke(0x8000000000003D90ULL +56,0xF80100E0FBE100C8ULL);
lv2poke(0x8000000000003D90ULL +64,0x38810070481ADFF9ULL);
lv2poke(0x8000000000003D90ULL +72,0x3BE000017BFFF806ULL);
lv2poke(0x8000000000003D90ULL +80,0x67FF000063FF3E60ULL);
lv2poke(0x8000000000003D90ULL +88,0xE87F00002C230000ULL);
lv2poke(0x8000000000003D90ULL +96,0x4182000C38800027ULL);
lv2poke(0x8000000000003D90ULL +104,0x480606C538800027ULL);
lv2poke(0x8000000000003D90ULL +112,0x3860080048060229ULL);
lv2poke(0x8000000000003D90ULL +120,0xF87F0000E8810070ULL);
lv2poke(0x8000000000003D90ULL +128,0x4804A8E5E8610070ULL);
lv2poke(0x8000000000003D90ULL +136,0x38800027480606A1ULL);
lv2poke(0x8000000000003D90ULL +144,0xE87F00004804A8F9ULL);
lv2poke(0x8000000000003D90ULL +152,0xE89F00007C641A14ULL);
lv2poke(0x8000000000003D90ULL +160,0xF87F000838600000ULL);
lv2poke(0x8000000000003D90ULL +168,0xEBE100C8E80100E0ULL);
lv2poke(0x8000000000003D90ULL +176,0x382100D07C0803A6ULL);
lv2poke(0x8000000000003D90ULL +184,0x4E80002000000000ULL);
lv2poke(0x8000000000003D90ULL +192,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +200,0x8000000000003DC0ULL);
lv2poke(0x8000000000003D90ULL +208,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +216,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +224,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +232,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +240,0x7C7D1B783BE00001ULL);
lv2poke(0x8000000000003D90ULL +248,0x7BFFF80667FB0000ULL);
lv2poke(0x8000000000003D90ULL +256,0x637B4110EB5B0000ULL);
lv2poke(0x8000000000003D90ULL +264,0x283A00004182004CULL);
lv2poke(0x8000000000003D90ULL +272,0x7FA3EB78E89A0000ULL);
lv2poke(0x8000000000003D90ULL +280,0x282400004182003CULL);
lv2poke(0x8000000000003D90ULL +288,0x80BA00104804A895ULL);
lv2poke(0x8000000000003D90ULL +296,0x2823000040820024ULL);
lv2poke(0x8000000000003D90ULL +304,0x80BA00107C9D2A14ULL);
lv2poke(0x8000000000003D90ULL +312,0xE87A00087C7D1B78ULL);
lv2poke(0x8000000000003D90ULL +320,0x80BA00147C632A14ULL);
lv2poke(0x8000000000003D90ULL +328,0x4804A81D4800008CULL);
lv2poke(0x8000000000003D90ULL +336,0x3B5A00184BFFFFBCULL);
lv2poke(0x8000000000003D90ULL +344,0x67E4000060843F70ULL);
lv2poke(0x8000000000003D90ULL +352,0x38A000094804A855ULL);
lv2poke(0x8000000000003D90ULL +360,0x282300004082002CULL);
lv2poke(0x8000000000003D90ULL +368,0x67FF000063FF3E60ULL);
lv2poke(0x8000000000003D90ULL +376,0xE87F000028230000ULL);
lv2poke(0x8000000000003D90ULL +384,0x41820058E87F0008ULL);
lv2poke(0x8000000000003D90ULL +392,0x389D00094804A7D9ULL);
lv2poke(0x8000000000003D90ULL +400,0xEBBF000048000044ULL);
lv2poke(0x8000000000003D90ULL +408,0x7FA3EB7867E40000ULL);
lv2poke(0x8000000000003D90ULL +416,0x60843F7A38A00009ULL);
lv2poke(0x8000000000003D90ULL +424,0x4804A81128230000ULL);
lv2poke(0x8000000000003D90ULL +432,0x4082002867FF0000ULL);
lv2poke(0x8000000000003D90ULL +440,0x63FF3E60E87F0000ULL);
lv2poke(0x8000000000003D90ULL +448,0x2823000041820014ULL);
lv2poke(0x8000000000003D90ULL +456,0xE87F0008389D0009ULL);
lv2poke(0x8000000000003D90ULL +464,0x4804A795EBBF0000ULL);
lv2poke(0x8000000000003D90ULL +472,0x7FA3EB78482BFD9CULL);
lv2poke(0x8000000000003D90ULL +480,0x2F6465765F626476ULL);
lv2poke(0x8000000000003D90ULL +488,0x64002F6170705F68ULL);
lv2poke(0x8000000000003D90ULL +496,0x6F6D650000000000ULL);
lv2poke(0x8000000000003D90ULL +504,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +512,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +520,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +528,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +536,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +544,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +552,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +560,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +568,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +576,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +584,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +592,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +600,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +608,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +616,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +624,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +632,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +640,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +648,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +656,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +664,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +672,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +680,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +688,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +696,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +704,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +712,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +720,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +728,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +736,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +744,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +752,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +760,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +768,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +776,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +784,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +792,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +800,0x80000000000041C8ULL);
lv2poke(0x8000000000003D90ULL +808,0x80000000000041CCULL);
lv2poke(0x8000000000003D90ULL +816,0x80000000000041D4ULL);
lv2poke(0x8000000000003D90ULL +824,0x80000000000041D8ULL);
lv2poke(0x8000000000003D90ULL +832,0x80000000000041DCULL);
lv2poke(0x8000000000003D90ULL +840,0x80000000000041ECULL);
lv2poke(0x8000000000003D90ULL +848,0x80000000000041F0ULL);
lv2poke(0x8000000000003D90ULL +856,0x8000000000003D90ULL);
lv2poke(0x8000000000003D90ULL +864,0x80000000000041F4ULL);
lv2poke(0x8000000000003D90ULL +872,0x80000000000041F8ULL);
lv2poke(0x8000000000003D90ULL +880,0x8000000000004210ULL);
lv2poke(0x8000000000003D90ULL +888,0x8000000000004214ULL);
lv2poke(0x8000000000003D90ULL +896,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +904,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +912,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +920,0x8000000000004130ULL);
lv2poke(0x8000000000003D90ULL +928,0x7C0802A6F821FF61ULL);
lv2poke(0x8000000000003D90ULL +936,0xFB610078FB810080ULL);
lv2poke(0x8000000000003D90ULL +944,0xFBA10088FBC10090ULL);
lv2poke(0x8000000000003D90ULL +952,0xFBE10098F80100B0ULL);
lv2poke(0x8000000000003D90ULL +960,0x706300FF2823000CULL);
lv2poke(0x8000000000003D90ULL +968,0x408000543BE00001ULL);
lv2poke(0x8000000000003D90ULL +976,0x7BFFF80667FB0000ULL);
lv2poke(0x8000000000003D90ULL +984,0x637B40B0787C1F24ULL);
lv2poke(0x8000000000003D90ULL +992,0x7F7BE214EBBB0000ULL);
lv2poke(0x8000000000003D90ULL +1000,0x7C8323787CA42B78ULL);
lv2poke(0x8000000000003D90ULL +1008,0x7CC533784800003DULL);
lv2poke(0x8000000000003D90ULL +1016,0xEB610078EB810080ULL);
lv2poke(0x8000000000003D90ULL +1024,0xEBA10088EBC10090ULL);
lv2poke(0x8000000000003D90ULL +1032,0xEBE10098E80100B0ULL);
lv2poke(0x8000000000003D90ULL +1040,0x382100A07C0803A6ULL);
lv2poke(0x8000000000003D90ULL +1048,0x4E8000203C608001ULL);
lv2poke(0x8000000000003D90ULL +1056,0x606300034BFFFFD4ULL);
lv2poke(0x8000000000003D90ULL +1064,0x3860FFFF4BFFFFCCULL);
lv2poke(0x8000000000003D90ULL +1072,0x7FA903A64E800420ULL);
lv2poke(0x8000000000003D90ULL +1080,0x4BFFFFE438600007ULL);
lv2poke(0x8000000000003D90ULL +1088,0x4E80002048079F2CULL);
lv2poke(0x8000000000003D90ULL +1096,0x4804A3707C6903A6ULL);
lv2poke(0x8000000000003D90ULL +1104,0x7C8323787CA42B78ULL);
lv2poke(0x8000000000003D90ULL +1112,0x4E8004204805CE44ULL);
lv2poke(0x8000000000003D90ULL +1120,0x480602784BFFFFC4ULL);
lv2poke(0x8000000000003D90ULL +1128,0x7C641B7867FB0000ULL);
lv2poke(0x8000000000003D90ULL +1136,0x637B4110E87B0000ULL);
lv2poke(0x8000000000003D90ULL +1144,0xF89B00004E800020ULL);
lv2poke(0x8000000000003D90ULL +1152,0x4BFFFFA84BFFFFA4ULL);
lv2poke(0x8000000000003D90ULL +1160,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1168,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1176,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1184,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1192,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1200,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1208,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1216,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1224,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1232,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1240,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1248,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1256,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1264,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1272,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1280,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1288,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1296,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1304,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1312,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1320,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1328,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1336,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1344,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1352,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1360,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1368,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1376,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1384,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1392,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1400,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1408,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1416,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1424,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1432,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1440,0x0000000000000000ULL);
lv2poke(0x8000000000003D90ULL +1448,0x0000000000000000ULL);
lv2poke(0x80000000002C3D04ULL,0x4BD4017C4BD8AA15ULL);
lv2poke(0x800000000035DD00ULL,0x8000000000003E58ULL);
lv2poke(0x80000000000571E8ULL,0x600000002F840004ULL);//
lv2poke(0x80000000000571F0ULL,0x48000098E8629870ULL);//
lv2poke(0x800000000005ABACULL,0x60000000E8610188ULL);//
lv2poke(0x800000000005ABA0ULL,0x600000005463063EULL);//
lv2poke(0x8000000000057174ULL,0x63FF003D60000000ULL); //
lv2poke(0x800000000005723cULL,0x3FE080013BE00000ULL); //
Lv2 lv1 calls
void add_lv2_lv1_calls()
{
lv2poke(0x800000000000171CULL, 0x7C0802A6F8010010ULL);
lv2poke(0x800000000000171CULL + 8, 0x396000B644000022ULL);
lv2poke(0x800000000000171CULL + 16,0x7C832378E8010010ULL);
lv2poke(0x800000000000171CULL + 24,0x7C0803A64E800020ULL);
lv2poke(0x800000000000171CULL + 32,0x7C0802A6F8010010ULL);
lv2poke(0x800000000000171CULL + 40,0x396000B744000022ULL);
lv2poke(0x800000000000171CULL + 48,0x38600000E8010010ULL);
lv2poke(0x800000000000171CULL + 56,0x7C0803A64E800020ULL);
lv2poke(0x800000000000171CULL + 64,0x7C0802A6F8010010ULL);
lv2poke(0x800000000000171CULL + 72,0x7D4B537844000022ULL);
lv2poke(0x800000000000171CULL + 80,0xE80100107C0803A6ULL);
lv2poke(0x800000000000171CULL + 88,0x4E80002080000000ULL);
lv2poke(0x800000000000171CULL + 96,0x0000170C80000000ULL);
lv2poke(0x800000000000171CULL + 104,0x0000171480000000ULL);
lv2poke(0x800000000000171CULL + 112,0x0000171C80000000ULL);
lv2poke(0x800000000000171CULL + 120,0x0000173C80000000ULL);
lv2poke(0x800000000000171CULL + 128,0x0000175C00000000ULL);
lv2poke(0x800000000035DC20ULL , 0x8000000000001788ULL);
lv2poke(0x800000000035DC28ULL , 0x8000000000001790ULL);
lv2poke(0x800000000035DC30ULL, 0x8000000000001798ULL);
} Now the core... is an all-in-one, this cfw to start looking at the dev_usb000 if a and a file called cellftp.self and another called copy_script.txt, enable disable search whoever can do it simply by putting the original sys_init_osd.self 4.31 in dev_flash folder / sys / internal / here and no longer seek more...
Download:
PATCHFIX.xdelta (66.6 MB) /
cellftp.self (89 Kb) /
cellftp.self (89.31 Kb) /
cellftp.self (90 Kb) /
cellftp[fixed_update2].rar (175 Kb) /
core2.70.rar (4.7 MB) /
deactivatecore.rar (191 Kb) (via pastie.org/private/8yqm79ncdrr9ar3vnu2eaw and http://pastie.org/private/ix8m1u0k0hwrp8fut7u6aa and pastie.org/private/xpmnexitpzexlf6py2mrbq and pastie.org/pastes/5996917/text?key=uhamsco79eyvvporcsy5q) /
CORE 2.7.1.rar (4.94 MB)
Update 6: PS1 games now work with Update 6 / CORE 2.7.1 and mM! ReActPSN also works with the latest update. The boot_otheros flag gives me the same issue so Rebug tool box or going into recovery mode is how I get to Red Ribbon. This CFW searches for CORE (cellftp.self) on boot and it can be deactivated with sys_init_osd.self (it fixes some type of issue with "los mandos", and maybe speed up boot time as well).
Update 7: CORE 2.7.2 download and changes are outlined
HERE courtesy of
DEUSC2D.
2.7.0 Improvements:
- Cinavia protection disabled
- ReActPSN enabled (patched act.dat vsh / rif and erasure prevention act.dat)
- Added new flag = flashnor = flashea nordump file in / dev_usb000 / in the north via software (eye takes as
20 minutes) the file would be dev_usb000 dev_usb000/nordump.bin let the usb.
Instructions:
Put the pack unzipped in the root of a pendrive as it is without flags with their accompanying files in the root also, we put it in the right usb and turn on the console, the core will handle the dirty work, if all went well both. self and. sprx deletes the core once updates, Greetings!
Then developed a homebrew called core which makes everything a little, the self has to go along with pendrive root folder copy_script.txt and flags with flags (functions) as you want to within when starting the console will look and run, leave a log of what was done in the root called core.log are mention the most important and tomorrow I explain a little more.
BD emu flag is for if you have not and do not controller works if you activate this flag npdrm console will behave as if the reader enabled qa, enable you qa flag directly in 4.31:
- nand dump
- nor dump
- lv2 dump
- full ram dump
- etc.
The changelog here:
,
dM
MMr
4MMML.
MMMMM. xf
. M6MMM. MM-
Mh .. + MM5MMM. MMMM
. MMM. . MMMMML. Mmmmmh
) Hmmm. MMMMMMM MM5MMM
3MMMMx. MMM3MMf xnMMMMMM
* MMMMM MMMMMM. nMMMMMMP
* MMMMMx MMMM5M. MMMMMMM =
* Mmmmmh NMMMMM JMMMMMMP
MMMMMM IMMMMM. dMMMMMM.
MMMMMM MMMM. MMMMMM. NnMP
.. * MMMMx dMMMM MMM. NnMMMMM *
MMn ... 'MMMMr' MM MMM. NMMMMMMM *
4MMMMnn .. * MM MMM MMP. DMMMMMMM
^ MMMMMMMMx. * ML M. M *. MMMMMM **
* PMMMMMMhn. * X> M. MMMM **
MMMMhx ** / .h /. = *
3 P ...
nP * MMnx
Core 2.6.5
2.6.5 changelog:
- Added flag toggle_recovery MAKES A WIPE OF FAT darling!
- Fixed 6 flags
- Removed epilepsy warning
Core 2.6.0
2.6.0 changelog:
- Added flag to clean debris from otheros's flag (used in cases of trouble entering recovery)
2.5.0 changelog:
- Added otheros (minituto end)
- dumpnandflash fixeado dumpea bootloader flag now also have a full backup of critical data from the console.
flags:
- toggle_recovery = MAKES A WIPE OF FAT
- clear_bootparam = clean debris flag's use of otheros
- custom_boot_nor = boot at dev_usb consoles customboot.self from North
- custom_boot_nand = boot at customboot.self from nand consoles dev_usb
- boot_otheros = boot at otheros
- install_otheros = dtbImage.ps3.bin installed in cell_os_ext_area
- prepares setup_flash_for_otheros = nand / nor to be installed otheros
- enterfactory = gets you into factory ...
- load = payload from payloaderdev dev_usb000/payloads/431cex.bin
- load = payload Payloader from core to use Multiman new
- active = qa flags enableqa
- removeqa = qa flags off
- fullramdump = full ram dump
- activated bdemu = bd emulator to use the console without controller
- dumpdevflash = dumpea dev_flash partitions in the raw
- dumplv2 = dumpea lv2
- nordump = dumpea the NOR Flash
- exitfactory leaves the factory mode =
- dumpnandflash = nand flash dumpea fat consoles (including bootloader)
Tutorial OtherOS boot:
- Start with only core setup_flash_for_otheros flag, to hear a double beep is that everything went well, if you do not hear looking log
- Put this after the dtbImage.ps3.bin that corresponds to your console type dtbImage.ps3.bin.nand dtbImage.ps3.bin.nor is for nand and nor it is for renombrais to dtbImage.ps3.bin and you put it in root of pendrive as appropriate in your case and you put the flag install_otheros, same start and soon will hear 2 beeps sound if you look at the log to and that something is wrong
- Once done turn off the console and put the flag boot_otheros, when you start your petitboot will see on the screen
Hermes thanks, I used your cosunpkg and cospkg for CoreOS and payload lined with SC36 and more...
Link all this: pastie.org/5913506 / mirror thanks to "
Palestine" http://ul.to/0mp1pmbl
Function bd emu's I have also built in a 3.55 cfw I'm uploading it is always useful to dump your key root
Edit: Here is =
hilo_cfw-3-55-otheros-cex-bdemu-no-controller-integrado_1862166 to make your cfw patcher Open delta, in original file to Appoint the OFW 4.31 here:
PS3UPDAT.PUP
CFW 3.55 OtherOS++ CEX, BDemu Without Controller (Integrated)
Hi, as promised here's the integrated version for CEX BDEmulator that has all patches from
glevand for OtherOS++ and has the sha1 hash check syscon disabled for consoles for downgrades.
With this CFW because anyone with broken controller (black screen or throwing npdrm update loop etc...) can use the console as controller, you can load is APP_HOME your games from, that's something
I have the same function in the CFW 4.31 in this same subforum but got to 3.55 here too integrated for people to use and get their root key inter things... SS unpatched least trophies error
Download:
v3modnobd.pup (170.5 MB) /
v3modnobd.pup (Mirror) / http://pastie.org/5926345 /
CFW 4.31 OtherOS++ By MiralaTijera (MD5: A1781D38DC5F3D54830615ED6B6C3870)
In xdelta patch, the patch obviously apply and give the option to check and keep the original file checksum enabled, you will create another file called * NEW.pup being * the name that you do them to OFW, hashes the PUP should be good:
CRC32: 203E06EC
MD5: AD09B0CB3C09CFCCAB578E4E85969830
SHA-1: 7258E1BB84ED6E8AB0F6325A0199B65F82C7ADEF
Of course not bricked any console, hidden takes time and has been tested on all systems that can be installed
I give the core src polish it once, honestly I'm embarrassed both comment on the code
you enjoy it, just as I will update the post in these 3 days with what I forget, that sure is a lot to this fw has had his job for.. Now comes Rogero and copy
Finally, some feedback on this PS3 4.31 CFW WIP from
butnut: So I did a little testing... It installs fine on my slim 2101 and since I had left QA active the last time I was on 3.55 it is now automatically activated (still have to input button combo) The cold boot takes the same amount of time, only you don't see the epilepsy warning... It has normal install pkg files and app_home icons (just like Kmeaw 3.55)
Backup managers do not work yet because they do not have the new payloads implemented yet. I will go back to Rogero 2.04 for now. QA downgrade does not seem to work. Every firmware I try (CFW and OFW) the PS3 says it is corrupt. Luckily Rogero 4.25 to 3.55 DG pup still works.
FOR PEOPLE WITH BLUE SCREEN: I found the cause of the error and was in SPKG's generation, already fixed and I'm uploading the new delta for a new pup (linked above), yes now installable from anywhere EXCEPT ofw 3.56 + the rhythm of my connection in 30 minutes is up and available, while not install the previous advise, not pass anything that fence (only the blue screen is easily removed) if not for the whole upgrade process will be more comfortable.
PUP the resulting hash is:
CRC32: ABA07B74
MD5: A1781D38DC5F3D54830615ED6B6C3870
SHA-1: AFAD5561F03A99AD44F278DBA255127282F094C6
Devil is the size 66.6 MB.
Finally, below is a guide from
Nicolas19 as follows:
Nicolas's MiralaTijera CFW 4.31 NooB Tutorial
Step 0: Important Notes
- Use a FAT32 flash memory that has the files needed to install CFW
- Eject any disk you have in the drive because if there is a disc in the PS3,Your PS3 will be upgraded with Update File That is inside the game disc
- This CFW is installed only on consoles With OFW 1.00--3.55 and All CFW/MFW 3.55 or CFW +3.55 with spkg sig check patched
- If you're still using True Blue/JB-King dongle or any DRM dongle, Unplug and Then Put it in Recycle Bin and start Tutorial From Step 1
- If your console is Spoof to +3.55 Versions ,you do not need to disable it
- Users With Downgraded PS3 no need to dehash (Qa Flag) PS3 but if you like dehash your PS3, Use Toggle QA
- Rogero CFW 4.XX must Install Another CFW 4.XX or Downgrade to CFW 3.55.
We Installed This CFW 4.31 on 20 PS3 That were on Rebug CFW 4.30.1 Successfully So in this tutorial we assume that you are on OFW 1.00--3.55 and All CFW/MFW 3.55 or CFW +3.55 with spkg sig check patched except Rogero 4.XX CFW.
Step 1: Download MiralaTijera CFW 4.31
First to start, download MiralaTijera CFW 4.31 (linked above)
MiralaTijera CFW 4.31 MD5: AD09B0CB3C09CFCCAB578E4E85969830
MiralaTijera CFW 4.31 Size: 192 MB (201,511,634 bytes)
Step 2: Installing CFW via XMB
After Download above Package, extract it (PS3 Folder) on a FAT32 Flash memory to: PS3/UPDATE/PS3UPDAT.PUP
Go to XMB > System Setting > System Update and select Update via Storage Media. It's all done.
Step 3: Installing Your Favorite Backup Manager
I create a Package with the name of "Backup Managers For CFW 4.31" That is include Latest Version of two awesome managers multiMAN and Iris manager With Support CFW 4.31
Download:
Backup Managers for CFW 4.31
After Download extract The Package and Then:
1- Go in multiMAN folder and copy multiMAN ver 04.19.02 UPD CEX (20130130) into a FAT32 Flash memory and Go to Install Package in XMB and Install that
2- Go in Iris Manager folder and copy irismanager-4-x into a FAT32 Flash memory and Go to Install Package in XMB and Install that
Extra award:
Sure You've heard about the new features in This Custom Firmware. CORE is a great feature in This Custom Firmware. I packed a new CORE Folder that is very better than Original Release.
Download:
CORE Folder Packed by Nicolas
Just select your favorite Folder and then Copy all three files (cellftp.self, copy_script.txt, flags folder) within the selected folder into Root of a FAT32 Flash memory. Connect your Flash memory to the nearest port to Blu-ray drive. When your PS3 starts up will search for it and execute it. It will leave a log on root called core.log. Enjoy.
Thanks MiralaTijera for AweSome CFW
Thanks deank for the Best Manager (multiMAN)
Thanks Developers of Iris Manager
Yep it works fine....
I don't really care much about bdemu thing since almost everyone has working bd controller.
Download: http://www.sendspace.com/file/u7re0w (3.06 MB)
To quote, roughly translated (via pastie.org/private/gmrhneiqd1elkc9cnlczg):
Update 1: 3.1.0 Core 4.40 CFW MLT
• BDEmu without controller running 4.40 (bdemu flag)
• Beta alternative kernel load (flag anotherlv2) (ay to manually copy the kernel to load in / dev_rewrite/lv2ker.self, the console will reboot and when you turn off the usb we extract and load (beta)
• ReActPSN functioning, unsigned rif and erasure prevention act.dat
Installation: put the package files in root of a pen drive and plug it into the usb right around the console and on, will be installed and if the led from now you is solid yellow is that everything worked properly, also will have in the log before usb etc as before.
More PlayStation 3 News...
No, you'll still need to use a PS unban pkg with an unbanned console ID/PSID (and new PSN account if your current one is banned as well).
Read this thread on that subject.
Well, for some reasons you got banned, right? if you're cheating while playing online then stay way from psn. It bothers a lot of us gamers playing with cheaters online. Now if it is to play legit then go ahead and download the unban tool here.