Main » 2013 » February » 18 » PS3 CFW 4.31 OtherOS++ With QAFlag & BD Emu By MiralaTijera WIP
12:49 PM
PS3 CFW 4.31 OtherOS++ With QAFlag & BD Emu By MiralaTijera WIP
http://www.ps3news.com/images/ps3-cfw-4-31-otheros-with-qaflag-bd-emu-by-miralatijera-wip-33719-1.jpg


Today Spanish PlayStation 3 developer MiralaTijera has shared details on his PS3 CFW 4.31 OtherOS++ WIP (work-in-progress) which contains no spoofing older Custom Firmware versions and includes QAFlag and BD Emu without a controller among the features outlined below.

Download: mod431.rar (67.7 MB) / mod431.rar (Mirror) / mod431.rar (Mirror #2)

To quote, roughly translated: Hi, basically I stand in the community giving what I made in the dark slowly.. This is my FULL 4.31 4.31 cfw spoof's nothing, it's all ported to the 4.31, and... I give to my multitool also called "core" which is nothing more than a self that load at startup console if this is available in the right usb of your console "/ dev_usb000 /" which among other things dumpea flash console, you enable qa flags (yes in 4.31 directly) and gets you out and gets you the factory mode... I put the specs:

  • CoreOS lv1 hash downgradeadas deactivated for consoles
  • lv1 183/182 undocummented (LV1 peek / poke)
  • lv1 OtherOS++
  • VSH: nas_plugin (all pkgs installable game_ext explore_plugin and plugin to show install package and eliminate epilepsy warning message (though the latter with qa flag leaves only) and for patched vsh rif / rap fakesign) (This last with qa flag leaves only)
  • default.spp: added extra memory for otheros GameOS
  • lv2 peek / poke, syscall 6/7,
  • lv1 lv2 peek / poke (optional syscall 8/9 via core)
  • Hermes Payload with 36 ported sc
  • APPLDR: lv2 memory hashing disabled from appldr (no need to have it at lv1 parcheeis) dev_flash whitelist disabled (load any keyset from dev_flash) and ECDSA Off
  • ISOLDR: ECDSA Off
  • SPP_VERIFIER: ECDSA Off
  • spu_utoken_processor: ECDSA off (qa flag)

Payload here to include in your C fixes and managers with the hook:

  • http://pastie.org/private/cxg8xvohjbh99q45jw (Payload with SC36)
  • http://pastie.org/private/rbmvhgepnwlisvqm1zvchq (Lv2 lv1 calls)

Payload with SC36

Lv2 lv1 calls

Now the core... is an all-in-one, this cfw to start looking at the dev_usb000 if a and a file called cellftp.self and another called copy_script.txt, enable disable search whoever can do it simply by putting the original sys_init_osd.self 4.31 in dev_flash folder / sys / internal / here and no longer seek more...

Then developed a homebrew called core which makes everything a little, the self has to go along with pendrive root folder copy_script.txt and flags with flags (functions) as you want to within when starting the console will look and run, leave a log of what was done in the root called core.log are mention the most important and tomorrow I explain a little more.

BD emu flag is for if you have not and do not controller works if you activate this flag npdrm console will behave as if the reader enabled qa, enable you qa flag directly in 4.31:

  • nand dump
  • nor dump
  • lv2 dump
  • full ram dump
  • etc.

The changelog here:

Hermes thanks, I used your cosunpkg and cospkg for CoreOS and payload lined with SC36 and more...

Link all this: http://pastie.org/5913506 / mirror thanks to "Palestine" http://ul.to/0mp1pmbl

Function bd emu's I have also built in a 3.55 cfw I'm uploading it is always useful to dump your key root

Edit: Here is = hilo_cfw-3-55-otheros-cex-bdemu-no-controller-integrado_1862166 to make your cfw patcher Open delta, in original file to Appoint the OFW 4.31 here: PS3UPDAT.PUP

CFW 3.55 OtherOS++ CEX, BDemu Without Controller (Integrated)

Hi, as promised here's the integrated version for CEX BDEmulator that has all patches from glevand for OtherOS++ and has the sha1 hash check syscon disabled for consoles for downgrades.

With this CFW because anyone with broken controller (black screen or throwing npdrm update loop etc...) can use the console as controller, you can load is APP_HOME your games from, that's something I have the same function in the CFW 4.31 in this same subforum but got to 3.55 here too integrated for people to use and get their root key inter things... SS unpatched least trophies error

Download: v3modnobd.pup (170.5 MB) / v3modnobd.pup (Mirror) / http://pastie.org/5926345

In xdelta patch, the patch obviously apply and give the option to check and keep the original file checksum enabled, you will create another file called * NEW.pup being * the name that you do them to OFW, hashes the PUP should be good:

Of course not bricked any console, hidden takes time and has been tested on all systems that can be installed

I give the core src polish it once, honestly I'm embarrassed both comment on the code you enjoy it, just as I will update the post in these 3 days with what I forget, that sure is a lot to this fw has had his job for.. Now comes Rogero and copy

Finally, some feedback on this PS3 4.31 CFW WIP from butnut: So I did a little testing... It installs fine on my slim 2101 and since I had left QA active the last time I was on 3.55 it is now automatically activated (still have to input button combo) The cold boot takes the same amount of time, only you don't see the epilepsy warning... It has normal install pkg files and app_home icons (just like Kmeaw 3.55)

Backup managers do not work yet because they do not have the new payloads implemented yet. I will go back to Rogero 2.04 for now. QA downgrade does not seem to work. Every firmware I try (CFW and OFW) the PS3 says it is corrupt. Luckily Rogero 4.25 to 3.55 DG pup still works.
Category: PS3 | Views: 465 | Added by: Kenpachi | Rating: 0.0/0
Total comments: 0
Name *:
Email *:
Code *:
Section categories
Tag Board
Statistics

Total online: 1
Guests: 1
Users: 0