Sponsored Links

Sponsored Links

JaicraB on Cobra USB JIG Protection RTOC Trick for PS3

Sponsored Links
180w ago - Today Spanish PlayStation 3 developer JaicraB has explained the Cobra USB JIG protection RTOC trick implemented for the PS3 against cloning the device.

To quote, roughly translated: Flynn sent me this text explaining this protective carrying the Cobra, I hope it will open the eyes of those interested in reversing the dumps.


The JIG Cobra has several protective measures to ensure that your code could not be used correctly even if your code could be dumped.

This trick RTOC in the registry is the first used for this purpose in addition to hinder analysis.
Registration is initially RTOC stored in the battery to keep the RTOC of lv2 and power it back later:

[Register or Login to view code]

At this point we have to explain that the OFFSET DELTA. DELTA OFFSET is a method used in the x86 in its original moments in the creation of computer viruses, to calculate the memory address in which we are in the sea of ​​bytes in RAM.

In the original time a computer virus when I did not know where he was pulled into an executable,
depending on the executable it could be an initial site or another, for it was invented DELTA OFFSET.

DELTA OFFSET can be used in any system, the procedure is:

  • Using the record that indicates the current execution address (or the next depending on the system)
  • Reducing the size of the previous code we use the value obtained from the registry.

Knowing this, and taking for example the x86 processor where the EIP register can not be read directly invented the trick make a call to a "subfunction" which is simply the following line to the call:

[Register or Login to view code]

X86 call instruction saves the top of the stack the address of the next instruction to itself. Thus using pop draw from the top of the stack this value, and stored in eax for example, and having the memory address where we only subtract the above would be missing and we have the exact calculation.

The PowerPC can use this trick using the BL instruction is equivalent (LINK BRANCH), which jumps to a "subfunction" but before you save LR in the record the following address to BL.

[Register or Login to view code]

At this point we see the trick used for the creation of the RTOC of charges at this time. If you look both r0 and RTOC are passed to 0:

[Register or Login to view code]

Subsequently, given the value 0x11DE0 to RTOC:

[Register or Login to view code]

A r0 is given the value 0x920:

[Register or Login to view code]

R0 is subtracted from the value of RTOC:

[Register or Login to view code]

Unlike the PowerPC x86 LR register can be read directly with mflr instruction, we put in RTOC the value obtained by the delta offset:

[Register or Login to view code]

To calculate the delta offset subtract final instructions executed before the delta offset, which were 4, or 16 bytes:

[Register or Login to view code]

Finally we add the value of r0 at the end of the delta offset RTOC, storing the result in the RTOC and this already takes RTOC suitable for this hook:

[Register or Login to view code]

It takes having the RTOC stored in the stack 3 arguments that the hook received:

[Register or Login to view code]

You call the function of the charges where the first argument will check for command 0x8202 (a special command to the usual):

[Register or Login to view code]

After making the necessary steps as charged, the battery recovers the original RTOC, like the arguments the hook received, it executes the original instruction that was overwritten in the syscall entry 379 (in this case) to have our hook, and call the original syscall lv2:

[Register or Login to view code]

Upon returning to retrieve the original LR from the stack and returns to the prompt

[Register or Login to view code]

Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter, Facebook and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene and PlayStation 4 scene updates and fresh homebrew releases!

Comments 1203 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles.
#638 - misiozol - 58w ago
misiozol's Avatar
Well it seems that server REQUIRES to have javascript enabled other wise will not work , good DL but would be nice if there would more info on files included.

BTW you tube link is dead account closed.

#637 - osama9921 - 58w ago
osama9921's Avatar
Thanks a lot.. also an update from the Cobra Team:

Current status is that IRD support for genps3iso is finished and has been sent to webmaster and should be online in the next couple of days. This will go online with the fixed genps3extra for the more than 100 games in video category, and firmware 1.7 which increases stealth for IRD generated iso.

We are now currently handling ps1 disc support, but there is no ETA for the moment for that feature. The disc dumping bug is also being worked on in parallel. It will require an update to the FPGA images as the bug is in the FPGA so it is being handled by other members of the team. I do not have an estimate on when the fix will be available but I know it is currently being worked on.

#636 - seeman - 58w ago
seeman's Avatar
i just created a whole mod pack... everything you need is inside! with easy to install zip files and a easy guide!!!

download contains these files... CFW, multiman, webman, system manager with fan utility, custom game tab with multiman, xmbm+ and my games, flag files for faster usb booting tools for pc (fan utility, retroxmb for ps2 psp and rom pkg, netsrv for nethosting) and a how to install txt file!

Download: [Register or Login to view links] (321.36 MB)

Also below is PS3WebTemp 1.0 (aldostools.org/temp/PS3WebTemp.rar) by aldostools, who states:

This is a small semi-transparent web window that stays always on top. It can connect to your PS3 console to monitor the CPU and RSX information. Requires webMAN 1.16 running on a 4.46 COBRA 7.0 compatible CFW. The plugin and instructions are included in the XMB Manager+ (mod).

#635 - PS3 News - 59w ago
PS3 News's Avatar
Below is an XMB Manager+ 0.22.004 (Mod) for COBRA 7.0 4.46 CFW from aldostools with details as follows:

Download: [Register or Login to view links] (XMB Manager+ 0.22.011 Mod for COBRA 7.0 - Latest Version) / [Register or Login to view links] / [Register or Login to view links]

This is my modified version of the XMB Manager+ originally released by Team XMBM+. It has some new or different features and a different order of the icons. This version XMBM+ (mod) includes the files & instructions to have webMAN 1.07 and XMBM+ running on 4.46 COBRA 7.0.

This is a fork of the official XMBM+ that I originally developed for personal use on 3.55 Kmeaw. Now I adapted the category_games.xml to work with webMAN + XMB Manager Plus on 4.46 COBRA 7.0

How to install:

1.) Install Cobra 7.0 implemented into 4.46 Rogero v1.00: [Register or Login to view links]
2.) Copy webftp_server.sprx (version 1.07) to the root of /dev_hdd0/ (Latest version is always here: deanbg.com/webftp_server.sprx)
3.) Copy the included boot_plugins.txt to the root of /dev_hdd0/
4.) Copy the included category_game.xml to /dev_blind/vsh/resource/explore/xmb/
5.) Install the included xmbmanplus_hdd.pkg
6.) Enjoy XMBM+ on COBRA 7.0!

Thanks to:

  • DeanK for the awesome webftp_server.sprx
  • COBRA's lead developer for the release of the unofficial Cobra 7.0
  • user for PRX LOADER
  • Team XMBM+: andreus (coding), bitsbubba (coding, themes), DeViL303 (coding, POC/WIP) ps3Hen (coding, 4.00 port), aldostools (coding), CloneD (themes), Berion (logos)
  • dreamcat4 for the suggested .xml method and exofreak for his POC release of launch games through XMB using webMAN.

UPDATE #1 (Nov. 7th - v0.22.005)

Changes in 0.22.005:

  • Added a new section with quick links to webMAN functions:
  • Refresh My Games
  • Games, Files,
  • Eject Disc,
  • Insert Disc.

UPDATE #2 (Nov. 7th - v0.22.006)

Changes in 0.22.006:

  • Added the PS VITA application utility and Online storage icons to Game Data Manager;
  • Added "Retail" (webMAN list) to Game Manager > By type > Games.
  • Also updated category_game.xml: moved XMBM+ icon between "Install Package Files" and "My Games".

UPDATE #3 (Nov. 2013 - v0.0.22.008)

  • Mod by aldostools

UPDATE #4 (Nov. 24th - v0.22.009)

  • Added a quick link to monitor PS3 temperature of CPU and RSX and to restart PS3 (requires webMAN 1.18).

Download: xmbextras_v0.22.009.rar‎ / xmbm_mod_for_COBRA7_v0.22.009.rar‎

UPDATE #5 (Dec. 9th - v0.22.011)

This is my modified version of the XMB Manager+ originally released by Team XMBM+. It has some new or different features and a different order of the icons. This version of XMBM+ (mod) includes the files & instructions to have webMAN 1.24 and XMBM+ running on 4.46 COBRA 7.0.

  • Added "All Devices" to Install Package Files option in REBUG's Package Manager, so it will search all package locations instead of individual locations (HDD, packages, standard location);
  • Updated category_game.xml (Replaced the standard Install Package Files with REBUG's Package Manager);
  • Include webMAN 1.24 and webMAN 1.24 for CCAPI.

Download: xmbextras_v0.22.011.rar / xmbm_mod_for_COBRA7_v0.22.011.rar‎ / xmbm v011_mod_for_COBRA7-ITA.pkg / [Register or Login to view links] (Mirror)

I had promised him, and although a bit late here is the translation of the homebrew Aldo Vargas, who as we all know is arrived at version 0.22.011, adding the entry “All Devices” option to install Package Files in the Package Manager Team Rebug and changing some items on filecategory_game.xml.


  • Added “All Devices” in the Rebug Package Manager, now you can search all paths instead of one at a time.
  • Updated file category_game.xml (It was replaced the classic Install Package Files with Rebug Package Manager).
  • Added WebMan 1:24 and Webman 1.24 per CCAPI. *

Autoboot Control Fan Utility for Cobra 7.00 Tutorial by atreyu187

Install this software, I am sure you can source this part without me. Cobra 4.46 7.00 Rogero Hybrid CFW, Mulitman 4.50.04 & Last Game [Cobra] to start.

Then you need to install XMB Manager+ 0.22.006 (mod) for COBRA 7.0 and here is the supplied install guide for this application slightly modified.

1.) Copy webftp_server.sprx (version 1.11) to the root of /dev_hdd0/ Latest version is always here: deanbg.com/webftp_server.sprx (I ran into troubles with the settings not working for me on this version so I have uploaded the first build of v1.1 here for you all if the latest doesn't work for you ([Register or Login to view links])

P.S. Settings are saved as /dev_hdd0/tmp/wmconfig.bin if you need to "start fresh" in case of errors. Just delete with XMBM+, Comgenie's Filemanager or mM.

2.) Copy the included boot_plugins.txt to the root of /dev_hdd0/

3.) Copy the included category_game.xml to /dev_blind/vsh/resource/explore/xmb/ (Or you can install this one to remove app_home & IPF: [Register or Login to view links])

4.) Install the included xmbmanplus_hdd.pkg

5.) Install update XMB Manager+ (mod) for COBRA 7.0 (v 0.22.006): aldostools.org/xmbextras.pkg

6.) Reboot your PS3 after install is all done to start fresh with your new FTP/Webserver working upon boot up

7.) Now open your PS3 browser set in Tools -> Confirmation on Browser Close -> “OFF” or when choosing a game in WebMan ([Register or Login to view links]) it will make you close browser each time.

8.)Turn of "Disc Auto Start" under System Settings. Disc Auto Start ([Register or Login to view links]) on Settings > System Settings.

9.) FTP Control Fan Utility v2.00 AUTOBOOT.ISO to /dev_hdd0/PS3ISO My build has a nice new logo instead of the tired looking "official" logo I think suits the system better. Or if you don't like that aldos made one as well that can be found here (ps3tools.aldostools.org/faniso.rar) as well with the old logo.

10.) Install PSNinja v4 and open the app and press X on "Make Files Read Only" this way "Last Game" will stay as Control Fan Utility AUTOBOOT.ISO upon every boot. Or you can do this manually by FTP and going to /dev_hdd0/last_game.txt and right clicking on the file and go to properties. Then choose "Read Only" attribute with FTP client. This can also be done if you FTP txt file to HDD and right click, again go to properties and check "Read-Only" and then press "Apply" and FTP the file back over.

11.) This I am going to borrow from aldos as well as he is the one that helped me get mine setup and running.

1. Turn ON the Disc Auto Start on Settings > System Settings.

2. Go to My Games > webMAN Setup and select the devices to scan, mark all the settings in the 2nd section and at least 5 and three seconds in the 3rd and 4th sections. (I choose 0 for both as I don't use a USB drive, boot times increase dramatically so the lower the better for your "Auto Boot Times" which DeanK might give us in future updates to his fine app. It has seen more action this month then just about mM's existence and we thank him for that. It was two simple plugins that got combined)

3. Press Save on the browser and restart the PS3.

Every time that you start the PS3, the AUTOBOOT.ISO will be launched. All you have to do is press Triangle to exit.

Note about my AUTOBOOT.ISO file. Once you exit the app in "Payload" mode the LED will turn yellow allowing you to know the payload is in effect. If you choose any of the other "Modes" the LED will return to normal. I did this so one would know if in fact the settings in fact took place after exit as it is hard to tell sound wise.

Again if you do not like this option aldos made a Control Fan Utility AUTOBOOT.ISO as well that does not have the yellow LED indicator at all but in order for "Mode 2" settings to stay upon exit one must press "Start" button to set that mode to work upon exit.

And that is it folks you can boot your PS3, set your fan speed right away and have fun gaming knowing your precious PS3.5 is nice and cool to go along with all the neat new features Cobra has unleashed upon the CFW world.

From CaptainCPS-X: Try this one (psiso_tool_test_1.rar) and let me know if you still have the hanging problem:

Download: [Register or Login to view links]

GenPS3ISO GUI 1.3 by aldostools

Download: genPS3ISO_GUI.rar‎ (Mirror: ps3tools.aldostools.org/genPS3ISO_GUI.rar)

Another quick GUI for the command line tool genPS3ISO by Cobra-USB. This tool let you create a proper ISO image from a PS3 game's folder.


  • Allows drag & drop
  • Run as Administrator to auto-register as a shell-extension for Explorer.
  • Right-click on any folder to make an ISO.

Example of ISO created: AUTOBOOT.ISO of Fan Control Utility 2.0 (ps3tools.aldostools.org/faniso.rar)

PSISO Tool GUI by aldostools

Download: psiso_tool_GUI.rar‎ (Mirror: ps3tools.aldostools.org/psiso_tool_GUI.rar)

I have created this quick GUI for the command line tool made by CaptainCPS-X that allows us to patch the PS3 ISO images that were not created with genPS3ISO or multiMAN, and make them to work on COBRA 7.0 CFW. Thanks to CaptainCPS-X for this useful tool.

Fan Control Utility (ISO/No GUI) 2.01a by aldostools

Download: Fan Control Utility (ISO/No GUI) 2.01a (Mirror: ps3tools.aldostools.org/faniso.rar)

This is an unofficial version of Fan Control Utility by Estwald that auto-quits immediately to XMB after set the fan policy. Hold X for 10 seconds to enable the GUI. The settings will be saved in the internal HDD, if the included PKG is installed and dev_hdd0/game/CTRLFAN00/fan_speed.dat exists.

Note: The AUTOBOOT.ISO for COBRA 7 auto-quits. There are 2 PKG files: one has no GUI, the other always shows the GUI.

Credits: Thanks to Estwald for the PS3L1GHT environment and the open source project. Thanks to HABIB for the payloads for 4.46/4.50. This is my first compilation of an application for PS

Fan Control Utility 2.01a- Changelog

Released under GNU General Public License - Read COPYING

Version 2.01a Modified by Aldo Vargas (aka aldostools) / aldostools.org / pstools.aldostools.org

Changelog for 2.01a:

1. Fix: Saved setting now should be loaded properly
2. Added L1/R1 to switch modes and CIRCLE to exit to XMB
3. Hold L2/R2 to start the GUI with the current fan speed values
4. Added text blinking when setting is saved (Saved mode to a new file to keep compatibility with earlier versions)

Changelog for 2.01:

1. Added auto-quit ("nogui") (GUI is displayed holding X for 10 seconds while the program starts)
2. Changed code to always read settings from /dev_hdd0/game/CTRLFAN00/fan_speed.dat (if the file exists)
3. Changed background color to dark blue
4. Converted to ISO

Version 2.00 Modified by HABIB (aka smhabib) at tortuga-cove


1. added 4.46 cex
2. added 4.50 cex
3. added 4.41 dex (not tested now cause no dex here)
4. added dex 4.46 (not tested cause no dex here.dex 4.46=rebug rex 4.46 dex mode)

Official Version 1.7 by by Estwald (aka Hermes) at elotrolado

XMB Manager+ 0.23.000 (mod) for COBRA 7 -- Install PKG Files Stored on a Remote PC from XMB

Download: [Register or Login to view links]

XMB Manager + Version 0.23.000 - Changes in 0.23.000: Added new "Network Folders" menu to webMAN tools.

This new option let you mount a shared folder on the PC as a local folder (/dev_bdvd). You must have running PS3 NET Server on the PC and server address configured on webMAN.

With this option you can play (supported) remote videos, music, pictures, and install PKG files stored on a remote PC (virtually in any place of the globe) directly from XMB. You can also play shared rom files, browse remote folders and more.

Download in link above or update directly on the PS3 from the About option in XMBM+ menu.

Credits: All this is possible thanks to Cobra7's integrated network features and to deank for the marvelous webMAN.

NOTE: WiFi networks can be too slow for certain operations. A wired network is highly recommended.

#634 - PS3 News - 59w ago
PS3 News's Avatar
Below is a Simple NTFS ISO Mounter for Cobra 7.00 by CaptainCPS-X with details as follows:

Download: [Register or Login to view links] / [Register or Login to view links] / [Register or Login to view links] (Mirror) / [Register or Login to view links] (4.75 MB)

To quote: Simple NTFS ISO Mounter v1.01 (UPD)

A small update to properly support PSXISO, DVDISO and BDISO. As testing purpose I backed up my original FINAL FANTASY VII (PSX) as BIN/CUE with ImgBurn on Windows 8 x64, and as expected the game was mounted properly.

I backed up an Original DVD Movie (Karate Kid) as ISO, using once again ImgBurn for it, the results where great, the movie was available on the XMB -> Video section and I was able to watch it. Only test left is BDISO, but I guess it should be working fine


CHANGELOG: - v1.01 (November 4, 2013)

  • Fixed support for PSXISO, BDISO and DVDISO, now it should mount them correctly.

NOTE: You MUST Install BASE first v1.00 then UPD v1.01.


Simple NTFS ISO Mounter (for Cobra 7.0 / 4.46 CFW) (by CaptainCPS-X)

Simple NTFS ISO Mounter (by CaptainCPS-X, 2013)

This application will look for ISOs in your USB NTFS HDD and allow you to mount them on your PS3!

Directories scanned are:


Controls are:

[CROSS] - Select ISO / Game to Mount
[TRIANGLE] - Rescan NTFS drive

Enjoy! Merry Christmas! xD


This application will ONLY work on "Cobra 7.00 CFW (Mixed w/Rogero 4.46 v1.00)".

Do not connect more than one NTFS drive, it will only use one, plus I don't see the need of having many drives connected when you just want to mount one game.

Keep reading for more notes...


Thanks to "Eswald" for porting the NTFS library and "Cobra Dev" for improving it and releasing the Cobra 7.00 CFW along with source code.



  • Support for PS3IS0, PSXISO, BDISO and DVDISO directories scanning and listing.
  • Initial release.


This release is initial, so expect it to be very simple but functional. More improvements will eventually come, so stay tuned.

Running Iris Manager is causing issues with the mounting of ISOs, avoid running Iris Manager before booting Simple NTFS ISO Mounter. If you ran Iris Manager by accident, just restart your PS3.

PS2ISO is not supported, you must use the internal PS3 HDD and put your ISO(s) in "/dev_hdd0/PS2ISO/".

NOTE: You MUST Install BASE first v1.00 then UPD v1.01.


Simple NTFS ISO Mounter v1.02 - Progress Report #2

Spent the day organizing the code and preparing it for my GitHub. And finally the first commit has been done and pushed: github.com/CaptainCPS/Simple_NTFS_ISO_Mounter

PS: I have been working on some other things not yet integrated to the main core, but later on I will do so and commit / push it.

Stay tuned for more updates! This isn't over yet LMAO. More technical information will be added to the Git Repo later on so devs know exactly how my application works. Offtopic: Time to sleep finally!!! just look at that screenshot time LMAO and whole night didn't sleep

Simple NTFS ISO Mounter v1.02 - Progress Report #3

Good news!, Just finished coding some new modules that will add the following features very soon to Simple NTFS ISO Mounter:

  • Parsing of PlayStation 1, 2 and 3 ISOs
  • Checks for validity of proper ISO9660 formats (MODE1/2048) (MODE2/2352)
  • [PS1 / PS2 / PS3] Root Directory record checking for main system files.
  • [PS1 / PS2] Locate SYSTEM.CNF data extent and parse it.
  • [PS3] Locate PS3_DISC.SFB data extent and parse it.
  • Title ID parsing from system files (Ex. BLUS-XXXXX / SLUS_XXX.XX)
  • Acquire Game titles for all PS1, PS2 and PS3 ISOs.
  • Patch PS3 ISOs created with different applications than GenPS3iso so they are valid and detectable by the PS3 console (They MUST be in ISO9660 / MODE1 / 2048 + Joliet format).

Note: New PlayStation 1 game ID / Title database was created by me (includes all US / EU / JP Titles / IDs). PS2 and PS3 databases where acquired from aldostools ps3tools directory.

Here you can see a log of my application doing some debug output, before I port it to PS3:

[Register or Login to view code]

More info and progress soon! SeeYa!

Finally from JonahUK: Simple bat file to scan and convert your games folder:

[Register or Login to view code]

Easy to use, just put the bat file and genps3iso.exe in your "GAMES" folder and it will take each game and output an iso (iso name will be the same as the folder name).

If you want to save the iso somewhere other than the GAMES folder, edit the last "%%I.iso" to include a path such as "C:\ISO\%%I.iso"
This is handy if you are converting from a USB drive formatted to FAT32 for example.


Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links

Advertising - Affiliates - Contact Us - PS3 Downloads - PS3 Forums - Privacy Statement - Site Rules - Top - © 2015 PlayStation 3 News