Sponsored Links

Sponsored Links

SKFU Progress on PS3 Custom Firmware, More Debug Options


Sponsored Links
202w ago - Today SKFU has updated his blog (linked above) with a follow-up to his previous work and shared some new information and progress regarding PS3 custom firmware.

He was able to add several more working debug options to JailBroken retail PS3 consoles, such as Title Store preview in the network section.

To quote: "While the USB Loader by JaicraB has some trouble rebooting all correctly it seems for a final CFW we need to overwrite dev_flash instead just loading live from USB mass storage.

Some things you can already do for a nice working CFW:

1. Replace all in "/vsh/module + /sys/external + /sys/internal" with the content of a 3.41 debug dev_flash.

2. In "/vsh/resource/explore/xmb/category_game.xml" add this in the "view id=root" Items section

[Register or Login to view links]

This will bring the "/app_home/GAME" and "Install PKG" options back.

3. In "/vsh/resource/explore/xmb/category_psn.xml" switch "root" and "tool_root".

This will add Title Store previews in the network section.

4. In "/sys/external" you grab liblv2dbg_for_dex from a debug unit and rename it liblv2dbg_for_cex. Replace liblv2dbg_for_cex with your new one and also add the debug liblv2dbg_for_dex.

Now you also have the debug options enabled. I don't know how to show up the debug options icon yet, but you can modify the settings via the registry.

How2 Handle Debug Options Without Icon

All information should be free. So here another part of the Custom Firmware research.

My previous post already explained some changes they enable. One nice one I didn't mention yet is, that it activates the Debug Options.

The options are enabled now, just the icon is missing. But there is a different way you can handle them. As we already knew, the xregistry.sys (dev_flash2/etc) stores all actual settings.

With the changes mentioned in last post, if you tried those; you may have noticed a debug message in the upper right corner. This actually proves the debug options are unlocked to use.

Just extract the xregistry.sys now and find the debug options. Activate them with a 1 instead a 0. I didn't test all so far, but seems most is fine.

Needa give credits to iQD, KrisAbsinthe, Stoker25 and Comgenie."





Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

Comments 23 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles. Thanks!

WheedWhack3R's Avatar
#23 - WheedWhack3R - 192w ago
OK Major update on my part when it comes to Blu-Ray fixes on ps3! First let me say I can not fix it with my current tools as it is actually a HDCP/AACS problem. I compared slim consoles with my fat one and found only the fat ones are affected so far.

I searched diligently for for anything I could find and discovered that the Blu-Ray fails because the copy protection is disabled and the decryption keys do not line up. I tried region free Blu-Ray discs and one from every region yet none played.

I ruled the region coding out because it can play region A when it has no BD+,AACS,HDCP, ect. Even after replacing devflash 0,2,and 3 and trying different PUP files It is clear that The PS3 refuses to enable "VFLASH" when updating because the decryption keys do not match and it "(re)-disables" Blu-Ray every time it is Up/Downgraded.

Every Update_log.txt reveals that to be true. A script or payload that hooks the .PUP file before it is loaded and forces the correct flag to update the BD-Player DRM may be possible but it is unlikely. The DRM keys are specific to each console if I am not mistaken. Understanding it Like that, I have little hope of a new modified .PUP to fix this.

I think a new psgroove payload that can work around AACS/HDCP is in order at this point. The only other solution is a payload that blocks the internal BD player and loads a completely home brew one in its place. If anyone has any input or wants to try to make such a payload I will be the test subject.

Non-working Fat CECH-E01 below:
manufacturing updating start
PackageName = /dev_usb000/PS3UPDAT.PUP
settle polling interval success
vflash is disabled...
boot from nand flash...
creating flash regions...
create storage region: (region id = 2)
format partition: (region_id = 2, CELL_FS_IOS:BUILTIN_FLSH1, CELL_FS_FAT)
create storage region: (region id = 3)
format partition: (region_id = 3, CELL_FS_IOS:BUILTIN_FLSH2, CELL_FS_FAT)
create storage region: (region id = 4)
format partition: (region_id = 4, CELL_FS_IOS:BUILTIN_FLSH3, CELL_FS_FAT)
create storage region: (region id = 5)
create storage region: (region id = 6)
Initializing
taking a while...
start Updating Proccess
Initialize elapsed time = 43 msec
check UPL
Check UPL elapsed time = 38 msec
check Package Size
get package size elapsed time = 7 msec
start Updating Package
Update packages num = 19
Update packages total size = 107506567
Update Package Revoke list
read package revoke list package (576 bytes) elapsed = 9 msec
update package revoke list elapsed = 109 msec
Update Package Revoke list done(0x8002f000)
Update Core OS Package
read core os package (4051692 bytes) elapsed = 267 msec
update core os package elapsed = 160 msec
Update Core OS Package done(0x8002f14b)
update package elapsed time = 546 msec
Updating or Verifying failure 0x8002f14b
UpMng.UpdatePackage() failure
manufacturing updating FAILURE(0x8002f14b)
Total Elapsed time = 1644 msec
Working slim below:
Bul-ray Disc Player Revoke
read bdp revoke package (1905 bytes) elapsed = 25 msec
decrypt and verify bdp revoke package elapsed = 47 msec
write bdp revoke package elapsed = 48 msec
flush_cache(0x100000000000001)
flush_cache() SUCCESS
compare bdprevoke package elapsed = 61 msec
Bul-ray Disc Player Revoke done(0x8002f000)
Update Program Revoke list
read program revoke list package (736 bytes) elapsed = 24 msec
update program revoke list elapsed = 4491 msec
Update Program Revoke list done(0x8002f000)
I hope this helps! PS I'll give $50 to the first universal fix that I can verify works on my fatty.

CJPC's Avatar
#22 - CJPC - 194w ago
where can i find the debug dev_flash ?
That is the catch - short of dumping it yourself, you will have a hard time finding it, as those with debug boxes do not want to leak it (and have the value of their consoles go down the drain).

And, if you have one, you will be faced with the same dilemma!

carlocooxx's Avatar
#21 - carlocooxx - 194w ago
where can i find the debug dev_flash ?

xcjzerox's Avatar
#20 - xcjzerox - 201w ago
I agree, the only thing they need to work on is making not jailbroken anymore so we won't turn on our consoles to jailbreak it. i feel like at some point im gointo break my ps3.

Great job hope everything comes into play =D

cfwprophet's Avatar
#19 - cfwprophet - 201w ago
Ok i will embend the files into ps3 acid and upload the new version (hopefully) the next hours.

A lot of things have changed or are new like a progress bar for specific things.. also i have embended more sdk tools and rest i iwll tell when i put it on the web.

Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links







Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2014 PlayStation 3 News