Sponsored Links

Sponsored Links

PS3MFW Builder 1.0.0 (Our MFW 1.0.0) Build 2.0.0 is Released

Sponsored Links
51w ago - Following up on the previous updates, PlayStation 3 developers RedDot-3ND7355 and B7U3 C50SS have now released PS3MFW (PS3 Modified Firmware) Builder 1.0.0 Build 2.0.0 followed by v0.2.0.2 and Update 3 dubbed Our MFW 1.0.0 with an Installer followed by v0.2.6.0 with the changes outlined below.

Download: [Register or Login to view links] / [Register or Login to view links] / [Register or Login to view links] / [Register or Login to view links] (Hermes stuff inside) by Smhabib / [Register or Login to view links] / [Register or Login to view links] (Fixed it now to work with new routines) by haxxxen / [Register or Login to view links] / [Register or Login to view links] / [Register or Login to view links] by RedDot-3ND7355 via B7U3 C50SS / [Register or Login to view links] by haz367 / [Register or Login to view links] by littlebalup / [Register or Login to view links] by RedDot-3ND7355 / [Register or Login to view links] / [Register or Login to view links] (196 MB - 206,354,857 bytes - MD5: BD3752C037DB9F786AA445CD862C3675) by playerkp420

To quote: Hey Everyone! Its me RedDot and i'm back with my team again to release you this new build of PS3MFW Builder 1.0.0!

We managed to find all the bugs about the repack/unpack/keys/tasks! Just follow them as respected and everything WILL be fine.

This is TRULY stable, and if you patch the right features you will NOT get brick/or whatsoever... I also recommend you have a minimum requirement of knowledge on modding

I hope the video helped A LOT. Credits to all the dev's that made this project possible and finished supposedly. But of course we will maybe continue to add features if new updates are released! So keep an eye on that updater.


Original dev's

Newer Version dev's
->Anonymous Developers
->B7U3 C50SS

All people that helped A LOT!
->RazorX (For sum tasks & updater)
->Haz367 (For pin-pointing problems & many tasks)
->Habib (For allowing us to use his patterns for tasks)
->Naewhert (For his tools)
->toolboy2012 (For sharing his awesome work with us)
->Arachetous (For a special task)
->And all other people that i may had forgotten :P

List of all features for 4.xx

Patch to allow running of unsigned app's
Patch to add ReactPSN online/offline
Patch to allow Debug pkg installation
Patch SysValue's (PS2 Related)
Patch to fix removing act.dat on boot!
Patch for ingame screenshots!
Patch RSOD Bypass!

Patch lv0 ldr's
Patch lv0 CoreOS ECDSA Check&Descrambling of LV1LDR!
Patch lv0 using Rebug/ITA DEX!
Patch lv0 for Cobra Features!
Patch lv1 for many features!
Patch lv1 Mmap out!

Patch lv2 for peek&poke
Patch lv2 for POC! (only 4.50)
Patch lv2 for hermes payload!
Patch lv2 for syscalls!
Patch lv2 for QA Flag!
And many more!

Patch nas_plugin for debug pkg's&installation of retail pkg's
Patch the core_os spu's&spp
Patch default.spp for otheros! (must include otheros of lv1!)
Patch XMB for IPF&APPHOME! (includes xmb plugin mods)
Patch PUP for Cobra files! OMG
And there is a lot more options in the builder

From haz367 comes PS3MFW Builder Incl Cobracrapper 446/453 Task set for 446 Cobra MFW.

Download: [Register or Login to view links]

PS: updated oldfart-lv0 task to incl Rebug-ITA/DEX style... and Cobra compatible lv0 patching: pastie.org/8580065

[Register or Login to view code]

Update: From RedDot-3ND7355: It would seem that i forgot to put create_tar2 instead of "create_tar" for the modify_devflash_files2 My bad.. there isn't any problem in the task itself... its in the base!

Now I updated the builder! Build: now out.

From tiefputin2: From ps3dev channel on efnet, if someone can make a tcl:

[Register or Login to view code]

It should make sfo editing for remote play obsolete... and make disc games without sfo-enabled remote play-attribute flag finally work

From toolboy2012: Hi All, OK, fixes are done for the tcl version of the 'patch_file{}' and 'patch_file_multi{}' routines (called by the "patch_elf{}" func)

....so as I was saying before, you can use the modified function as is, if you don't need to mask any bytes/bits off, and the speed will not be changed..if anything the way I fixed it up is a bit faster, as I read the entire file into memory, then do the data searches, as the routine as it was before, read in '1' byte at a time from the file, so the routine was constantly accessing the hard drive non-stop until the function completed....

So when calling 'patch_elf{}' now, you just need to set a local var named 'mask' to either 0 or "" if not using it, as it's a required param to the function. If you need to actually set a mask, then actually set the mask string to the mask value....

As I said, when using the 'mask', the search will be much much slower, not too bad on small files, but for large files like the 'lv2_kernel' (3MB), the search takes 3mins. or more for each pattern match...

So I'm going to show a quick example below, for those may be a bit confused how this works:

1) Going to show an example for the patch "SysCall36 4.xx CFW part 2/3" (as in my scripts, part 2/3 & 3/3 I used the MASK setup)

2) In this example, I'm showing you the IDA disassem. for this section of the 'lv2_kernel' where the part 2/3 & 3/3 patches are,
comparing the disassem. for OFW 3.55, 4.46, & 4.55...

3) at the very bottom of this example, you can see the 3 'search strings', of the op-code patterns corresponding to each OFW version... when you look at them lined up above each other, you can see the op-codes that are identical, and where the differences are...

4) You can then look at the last string which is the 'mask', the "\xFF" byte in the real search will be AND'd with it's corresponding op-code byte, so in other words, if you need to 'ignore' where the differences are, then set those bytes or individual bits, in the mask, to "0"... hopefully this makes sense? if not, I can try to post another example?

(like I said, I'm working on a new 'patchtool.exe' now, hopefull this week it will be done, which should tremendously speed up our binary 'patching' time, makes much more sense to search/patch with a tool, rather than doing all that pattern matching/searching in TCL, as this stuff is where TCL is tremendously slow!)

[Register or Login to view code]

NOTE: When ever you need to USE a MASK, the size of the 'search' and 'mask patterns MUST be exact multiples of 4-bytes (32-bits), in order to make that search as FAST as I could. So you have to count the bytes in any of your search strings where you want to use the mask... if you need to add bytes on to make it an even amount, but don't actually want those added bytes to be 'included in the pattern match, then just make them any value, and set their corresponding values in the MASK to be '\x00'!!

i.e., in the example I showed above, the 'search' and 'mask' strings are 16-bytes in total length (ie 4 total count of '4-byte' chunks).

From haz367: whop, that's a pro way right there... it wasn't a difficult one, the updated 455 sysc36 part3,4 (from Reddot's fork) to find manually this time, it won't beat your way of doing it tho... hmm that IDA is interesting

[Register or Login to view code]

Awesome work toolboy!

From haxxxen: Just another thanks to you guys and toolboy2012, for making builder working again. it really works smoothly though i am using a modified version without cos auto repack and with selfrebuilder. maybe i will get isorebuilder also working next...

If i can recall right, there was already a demand of it, but after this forced latest ofw release i've took the chance and created once again a rebug spoofer update task. it will only update the spoofer for rebug mode and it will work for all versions 3.55.4 - 4.46.1.

Only problem is, it will not work as it is for the updated official ps3mfw builder and gives this "cannot find blabla.self.self" error. with my builder mod and selfrebuilder it works great, so maybe you can take a look at it RedDot-3ND7355 to make it fully working with your updated one and scetool. i have run it on all rebug versions, but only have flashed 4.21.2, so no guarantee for the others, but they also should work fine.

The task itself makes usage of the updated jailbait spoof task from euss, so it will spoof every entry in version.txt/index.dat and it will not update upl.xml. all other notes are remarked in the task, so it is selfexplanatory. it only includes the latest 4.55 version and a fun spoof of mine and can easily be updated.

And here my log for 4.46.1 (debug enabled): [Register or Login to view links]

Just a minor note on this, if you modify version.txt file with ps3mfw builder, the encoding changes to dos instead of unix. it works fine this way, but maybe there is a possibility to leave the encoding unchanged? ahh, and please ignore this rebug mode drex version. i have left it and it is only for personal usage...

Found now the problem. seems rebug have confused some things in their latest builds 4.41 and 4.46 some different question, but anybody knows what this secrect On/Off option from sysinfo is? it was medo from cmp who told me about it some time ago, but he also didn't know what it does. to get it, go under settings into system-settings->systeminformation hold L1+L2+R1+R2 and press select. there comes a On/Off message and it is turned off after every reboot.

Update #2: PS3MFW Builder 1.0.0 (Build Official Installer Release!

RedDot-3ND7355 and B7U3 C50SS are back to share the latest update for their PS3MFWBuilder (linked above). For those that don't recall, this tiny GUI allows users to build their own custom firmwares by ticking a few boxes.

As if the creation process wasn't simple enough, that ease now extends to the installation too. Build now includes a well-designed Windows installer to walk new users through the process. The one curious omission not found in this update is the ability to create firmwares with the 4.60 payload.

However, the developers do say that a revision is on the way to solve that shortcoming. Unless you know what you're doing, this is the kind of app to use at your own risk. Even though the building procedure is noob-friendly, any modified firmware installation technically has the potential to brick your system.

Just for fun's sake, the PUPs you make cannot be used for downgrading and do not run on OFW above 3.55.

Update #3: Update 3 of the Install Our MFW Builder.exe (linked above). This time we've updated the PS3MFW Builder have automatic configuration for your data folder which holds the keys and your TEMP folder as well!!

So settings are auto-corrected via install FROM simply installing. This includes your TEMP and data folder as stated before. Happy Building!!

About PS3MFW Builder:


For those that don't recall, this tiny GUI allows users to build their own custom firmwares by ticking a few boxes. As if the creation process wasn't simple enough, that ease now extends to the installation too. Build now includes a well-designed Windows installer to walk new users through the process.

Unless you know what you're doing, this is the kind of app to use at your own risk. Even though the building procedure is noob-friendly, any modified firmware installation technically has the potential to brick your system. The PUPs you make cannot be used for downgrading and do not run on OFW above 3.55.

Our Goal

Make people enjoy a better privacy from Sony, we do not support anti-piracy, tho the ps3 patches included in the tasks are capable of bypassing security to do so. I am truly sorry for that -Endless


[Register or Login to view code]

The Team

KaKaRoto - Founder
Code Monkeys - Founder
RedDot-3ND7355 - Developer
B7U3 C50SS - Developer
PSX Members - Contributors
Habib - Contributor

Update #4: Our team has just released a new update for the installer of PS3MFW Builder v1 which includes the latest build: 2.2.1! This new build has been set to fill your settings automatically for your needs and now installs on your C drive directly to remove errors such as black screen & packing errors!

PS3MFW updated for 4.65

* Default set for 4.65 basic/vanilla fully patched PUP like any Rogero, default HABIB:

11.B !!NEW NOBT/BD PATCH NOT ADDED!! >> Added the LV1 NoBD Patch from Zecoxao, Select from Lv1 tasklist if REQUIRED

[Register or Login to view code]

Finally, from littlebalup following the release of PS3 4.66 Firmware comes a 4.66_NO-FSM_patch.bin who states:

For those who need, I made a no-FSM patch 4.66 (linked above) with the details as follows:

  • Made out of OFW4.66 CoreOS with minimum lv0 and spu patchs to allow CFW installation.
  • Tested on NOR consoles (CECHL and 2K).
  • PS3DumpChecker should be updated with this patch as embedded one.

Thanks playerkp420 for PS3MFW tips. Of course, there is new CoreOS in this patch. So, do not update if you want stay jailbroken.

Update #4: From RedDot-3ND7355: Released Build update for 4.66 support!


  • Fixed the lv2 that was patching 4.65 and not above (now patches 4.66 too).

Report if any error occurs.

Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter, Facebook and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene and PlayStation 4 scene updates and fresh homebrew releases!

Comments 21 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles.
#6 - seeman - 63w ago
seeman's Avatar

#5 - swodniw - 63w ago
swodniw's Avatar
It is possible to add the screenshot to HABIB with this?

#4 - Cristina - 63w ago
Cristina's Avatar
Missing file "tlc" for: RSOD Bypass Feature. Downgrade to 3.55 -- RSOD PS3's and attempt fix!

#3 - seeman - 63w ago
seeman's Avatar
thx for this tool... looking forward to mamke my own cfw lol but a tutorial would be very nice becuase nobody wants to brick their ps3...

can i edit other cfw (for example ps3ultimate razor x cfw) with this? or only the original 4.50 pup?

i really would like to create a mfw with mclowmod included...

#2 - Xplic1T - 63w ago
Xplic1T's Avatar
So lets be real... So many new fw's get released everytime Sony has an update... sure you get the added capability but at the risk of a brick... which I never want to find when I can just keep getting 3.55 patches for games I actually want to play..

Have and will always will be on KMEAW 3.55 until possibly a new FW comes out supporting PS2 iso execution (Leak)... or if it just gets ported onto Deanks project I might just stay indefinitely. I just have to ask whats the point when MFW programs exist and people just rip off a CFW generated from tools like these add a name and sites front page it.. ?

Also from toolboy2012: Ok All, So I have NOT yet actually attempted to install/flash a CFW from my build, but I know you guys have been testing for quite some time, as you were mentioning the 'corruption' issue when trying to install over an existing 4.xx CFW. But I plan on doing it soon, now that hopefully we have the worst mess out of the way... (or at least I hope so!!)

Here's what is all fixed up, and all checked into my PS3MFW repo (and the associated source repos as well)

[Register or Login to view code]

NOTE: PKGTOOL and SCETOOL both NOW USE the "PS3_KEYS" environment variable (just like the PS3MFW sets the 'PS3_KEYS' build variable), so make sure you set this env. variable in your windows 'environment variable setup', or if NOT, the keys search will then look in the "./data" path for the "keys, curves, vsh_curves" files...

So you can look at my base.tcl to see how I'm calling the 'pkgtool', with the arguments (basically it was a drop-in where the old tools were, I didn't have to change any file paths/output paths, just add in the 'calling' parameters... I still have to add the "-help" option to the pkgtool with more info, I just haven't had a chance to add it yet!

The "-key" option for "pkgtool" is now just OPTIONAL, you do NOT need to specify any key names anymore, as they are
auto-loaded from the scetool 'keys' file. (although you can use this option to 'override' the auto search, and find
the exact key you want to use)

SO TWO TOTAL 'other' key types had to be put into the 'keys' file for the COS/PUP files, and for the SPKG output stuff, they are shown below for reference (especially if you want to just add to your own 'keys' file)

I DID put my keys files back (for now) into my PS3MFW repo, just so you won't be fighting with key issues for now... eventually I'll take them back out, as I hate having that stuff in with my source... here is the two keys you need to add to the latest 'keys' file: (they are ALREADY in my keys file in my repo) (I've re-upped my keys files for now, so you all can take them if you don't already have them)

This one for the PUP/COS stuff...

[Register or Login to view code]

and this one for SPKG creation:

[Register or Login to view code]

So let me know how it all goes, I hope things start working now, if not, at least we are much much closer! But I really feel the spkg hdr issues should be fixed...

BTW, one thing I noticed, still need to add support for the "unspp/spp" into the base.tcl, to use SCETOOL, rather than the old spp keys, as scetool does have suppport for SPP files... so I'll work on that as well... (was going to add the SPP code into my pkgtool, but no need, as scetool already has it!)

From RedDot-3ND7355: Is that spkg private key even good? Take a look at the spkg after using this one 00542D46E7B3DAAC8AEB81E533873AABD6D74BB710. BTW, Thanks for the huge update! Cheers!

Use these on (3.55-)PKG

[Register or Login to view code]

And use these on (3.56+)SPKG

[Register or Login to view code]


Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links

Advertising - Affiliates - Contact Us - PS3 Downloads - PS3 Forums - Privacy Statement - Site Rules - Top - © 2015 PlayStation 3 News