Main » 2013 February 18 » PS3 CFW 4.31 OtherOS++ With QAFlag & BD Emu By MiralaTijera WIP
12:49 PM PS3 CFW 4.31 OtherOS++ With QAFlag & BD Emu By MiralaTijera WIP | |
Today Spanish PlayStation 3 developer MiralaTijera has shared details on his PS3 CFW 4.31 OtherOS++ WIP (work-in-progress) which contains no spoofing older Custom Firmware versions and includes QAFlag and BD Emu without a controller among the features outlined below. Download: mod431.rar (67.7 MB) / mod431.rar (Mirror) / mod431.rar (Mirror #2) To quote, roughly translated: Hi, basically I stand in the community giving what I made in the dark slowly.. This is my FULL 4.31 4.31 cfw spoof's nothing, it's all ported to the 4.31, and... I give to my multitool also called "core" which is nothing more than a self that load at startup console if this is available in the right usb of your console "/ dev_usb000 /" which among other things dumpea flash console, you enable qa flags (yes in 4.31 directly) and gets you out and gets you the factory mode... I put the specs:
Payload here to include in your C fixes and managers with the hook:
Payload with SC36 lv2poke(0x8000000000003D90ULL ,0x386000014E800020ULL); lv2poke(0x8000000000003D90ULL +8,0x386000004E800020ULL); lv2poke(0x8000000000003D90ULL +16,0x534B313000000000ULL); lv2poke(0x8000000000003D90ULL +24,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +32,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +40,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +48,0xF821FF317C0802A6ULL); lv2poke(0x8000000000003D90ULL +56,0xF80100E0FBE100C8ULL); lv2poke(0x8000000000003D90ULL +64,0x38810070481ADFF9ULL); lv2poke(0x8000000000003D90ULL +72,0x3BE000017BFFF806ULL); lv2poke(0x8000000000003D90ULL +80,0x67FF000063FF3E60ULL); lv2poke(0x8000000000003D90ULL +88,0xE87F00002C230000ULL); lv2poke(0x8000000000003D90ULL +96,0x4182000C38800027ULL); lv2poke(0x8000000000003D90ULL +104,0x480606C538800027ULL); lv2poke(0x8000000000003D90ULL +112,0x3860080048060229ULL); lv2poke(0x8000000000003D90ULL +120,0xF87F0000E8810070ULL); lv2poke(0x8000000000003D90ULL +128,0x4804A8E5E8610070ULL); lv2poke(0x8000000000003D90ULL +136,0x38800027480606A1ULL); lv2poke(0x8000000000003D90ULL +144,0xE87F00004804A8F9ULL); lv2poke(0x8000000000003D90ULL +152,0xE89F00007C641A14ULL); lv2poke(0x8000000000003D90ULL +160,0xF87F000838600000ULL); lv2poke(0x8000000000003D90ULL +168,0xEBE100C8E80100E0ULL); lv2poke(0x8000000000003D90ULL +176,0x382100D07C0803A6ULL); lv2poke(0x8000000000003D90ULL +184,0x4E80002000000000ULL); lv2poke(0x8000000000003D90ULL +192,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +200,0x8000000000003DC0ULL); lv2poke(0x8000000000003D90ULL +208,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +216,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +224,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +232,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +240,0x7C7D1B783BE00001ULL); lv2poke(0x8000000000003D90ULL +248,0x7BFFF80667FB0000ULL); lv2poke(0x8000000000003D90ULL +256,0x637B4110EB5B0000ULL); lv2poke(0x8000000000003D90ULL +264,0x283A00004182004CULL); lv2poke(0x8000000000003D90ULL +272,0x7FA3EB78E89A0000ULL); lv2poke(0x8000000000003D90ULL +280,0x282400004182003CULL); lv2poke(0x8000000000003D90ULL +288,0x80BA00104804A895ULL); lv2poke(0x8000000000003D90ULL +296,0x2823000040820024ULL); lv2poke(0x8000000000003D90ULL +304,0x80BA00107C9D2A14ULL); lv2poke(0x8000000000003D90ULL +312,0xE87A00087C7D1B78ULL); lv2poke(0x8000000000003D90ULL +320,0x80BA00147C632A14ULL); lv2poke(0x8000000000003D90ULL +328,0x4804A81D4800008CULL); lv2poke(0x8000000000003D90ULL +336,0x3B5A00184BFFFFBCULL); lv2poke(0x8000000000003D90ULL +344,0x67E4000060843F70ULL); lv2poke(0x8000000000003D90ULL +352,0x38A000094804A855ULL); lv2poke(0x8000000000003D90ULL +360,0x282300004082002CULL); lv2poke(0x8000000000003D90ULL +368,0x67FF000063FF3E60ULL); lv2poke(0x8000000000003D90ULL +376,0xE87F000028230000ULL); lv2poke(0x8000000000003D90ULL +384,0x41820058E87F0008ULL); lv2poke(0x8000000000003D90ULL +392,0x389D00094804A7D9ULL); lv2poke(0x8000000000003D90ULL +400,0xEBBF000048000044ULL); lv2poke(0x8000000000003D90ULL +408,0x7FA3EB7867E40000ULL); lv2poke(0x8000000000003D90ULL +416,0x60843F7A38A00009ULL); lv2poke(0x8000000000003D90ULL +424,0x4804A81128230000ULL); lv2poke(0x8000000000003D90ULL +432,0x4082002867FF0000ULL); lv2poke(0x8000000000003D90ULL +440,0x63FF3E60E87F0000ULL); lv2poke(0x8000000000003D90ULL +448,0x2823000041820014ULL); lv2poke(0x8000000000003D90ULL +456,0xE87F0008389D0009ULL); lv2poke(0x8000000000003D90ULL +464,0x4804A795EBBF0000ULL); lv2poke(0x8000000000003D90ULL +472,0x7FA3EB78482BFD9CULL); lv2poke(0x8000000000003D90ULL +480,0x2F6465765F626476ULL); lv2poke(0x8000000000003D90ULL +488,0x64002F6170705F68ULL); lv2poke(0x8000000000003D90ULL +496,0x6F6D650000000000ULL); lv2poke(0x8000000000003D90ULL +504,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +512,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +520,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +528,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +536,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +544,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +552,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +560,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +568,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +576,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +584,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +592,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +600,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +608,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +616,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +624,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +632,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +640,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +648,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +656,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +664,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +672,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +680,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +688,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +696,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +704,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +712,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +720,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +728,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +736,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +744,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +752,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +760,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +768,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +776,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +784,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +792,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +800,0x80000000000041C8ULL); lv2poke(0x8000000000003D90ULL +808,0x80000000000041CCULL); lv2poke(0x8000000000003D90ULL +816,0x80000000000041D4ULL); lv2poke(0x8000000000003D90ULL +824,0x80000000000041D8ULL); lv2poke(0x8000000000003D90ULL +832,0x80000000000041DCULL); lv2poke(0x8000000000003D90ULL +840,0x80000000000041ECULL); lv2poke(0x8000000000003D90ULL +848,0x80000000000041F0ULL); lv2poke(0x8000000000003D90ULL +856,0x8000000000003D90ULL); lv2poke(0x8000000000003D90ULL +864,0x80000000000041F4ULL); lv2poke(0x8000000000003D90ULL +872,0x80000000000041F8ULL); lv2poke(0x8000000000003D90ULL +880,0x8000000000004210ULL); lv2poke(0x8000000000003D90ULL +888,0x8000000000004214ULL); lv2poke(0x8000000000003D90ULL +896,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +904,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +912,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +920,0x8000000000004130ULL); lv2poke(0x8000000000003D90ULL +928,0x7C0802A6F821FF61ULL); lv2poke(0x8000000000003D90ULL +936,0xFB610078FB810080ULL); lv2poke(0x8000000000003D90ULL +944,0xFBA10088FBC10090ULL); lv2poke(0x8000000000003D90ULL +952,0xFBE10098F80100B0ULL); lv2poke(0x8000000000003D90ULL +960,0x706300FF2823000CULL); lv2poke(0x8000000000003D90ULL +968,0x408000543BE00001ULL); lv2poke(0x8000000000003D90ULL +976,0x7BFFF80667FB0000ULL); lv2poke(0x8000000000003D90ULL +984,0x637B40B0787C1F24ULL); lv2poke(0x8000000000003D90ULL +992,0x7F7BE214EBBB0000ULL); lv2poke(0x8000000000003D90ULL +1000,0x7C8323787CA42B78ULL); lv2poke(0x8000000000003D90ULL +1008,0x7CC533784800003DULL); lv2poke(0x8000000000003D90ULL +1016,0xEB610078EB810080ULL); lv2poke(0x8000000000003D90ULL +1024,0xEBA10088EBC10090ULL); lv2poke(0x8000000000003D90ULL +1032,0xEBE10098E80100B0ULL); lv2poke(0x8000000000003D90ULL +1040,0x382100A07C0803A6ULL); lv2poke(0x8000000000003D90ULL +1048,0x4E8000203C608001ULL); lv2poke(0x8000000000003D90ULL +1056,0x606300034BFFFFD4ULL); lv2poke(0x8000000000003D90ULL +1064,0x3860FFFF4BFFFFCCULL); lv2poke(0x8000000000003D90ULL +1072,0x7FA903A64E800420ULL); lv2poke(0x8000000000003D90ULL +1080,0x4BFFFFE438600007ULL); lv2poke(0x8000000000003D90ULL +1088,0x4E80002048079F2CULL); lv2poke(0x8000000000003D90ULL +1096,0x4804A3707C6903A6ULL); lv2poke(0x8000000000003D90ULL +1104,0x7C8323787CA42B78ULL); lv2poke(0x8000000000003D90ULL +1112,0x4E8004204805CE44ULL); lv2poke(0x8000000000003D90ULL +1120,0x480602784BFFFFC4ULL); lv2poke(0x8000000000003D90ULL +1128,0x7C641B7867FB0000ULL); lv2poke(0x8000000000003D90ULL +1136,0x637B4110E87B0000ULL); lv2poke(0x8000000000003D90ULL +1144,0xF89B00004E800020ULL); lv2poke(0x8000000000003D90ULL +1152,0x4BFFFFA84BFFFFA4ULL); lv2poke(0x8000000000003D90ULL +1160,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1168,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1176,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1184,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1192,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1200,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1208,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1216,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1224,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1232,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1240,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1248,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1256,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1264,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1272,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1280,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1288,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1296,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1304,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1312,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1320,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1328,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1336,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1344,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1352,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1360,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1368,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1376,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1384,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1392,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1400,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1408,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1416,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1424,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1432,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1440,0x0000000000000000ULL); lv2poke(0x8000000000003D90ULL +1448,0x0000000000000000ULL); lv2poke(0x80000000002C3D04ULL,0x4BD4017C4BD8AA15ULL); lv2poke(0x800000000035DD00ULL,0x8000000000003E58ULL); lv2poke(0x80000000000571E8ULL,0x600000002F840004ULL);// lv2poke(0x80000000000571F0ULL,0x48000098E8629870ULL);// lv2poke(0x800000000005ABACULL,0x60000000E8610188ULL);// lv2poke(0x800000000005ABA0ULL,0x600000005463063EULL);// lv2poke(0x8000000000057174ULL,0x63FF003D60000000ULL); // lv2poke(0x800000000005723cULL,0x3FE080013BE00000ULL); // void add_lv2_lv1_calls() { lv2poke(0x800000000000171CULL, 0x7C0802A6F8010010ULL); lv2poke(0x800000000000171CULL + 8, 0x396000B644000022ULL); lv2poke(0x800000000000171CULL + 16,0x7C832378E8010010ULL); lv2poke(0x800000000000171CULL + 24,0x7C0803A64E800020ULL); lv2poke(0x800000000000171CULL + 32,0x7C0802A6F8010010ULL); lv2poke(0x800000000000171CULL + 40,0x396000B744000022ULL); lv2poke(0x800000000000171CULL + 48,0x38600000E8010010ULL); lv2poke(0x800000000000171CULL + 56,0x7C0803A64E800020ULL); lv2poke(0x800000000000171CULL + 64,0x7C0802A6F8010010ULL); lv2poke(0x800000000000171CULL + 72,0x7D4B537844000022ULL); lv2poke(0x800000000000171CULL + 80,0xE80100107C0803A6ULL); lv2poke(0x800000000000171CULL + 88,0x4E80002080000000ULL); lv2poke(0x800000000000171CULL + 96,0x0000170C80000000ULL); lv2poke(0x800000000000171CULL + 104,0x0000171480000000ULL); lv2poke(0x800000000000171CULL + 112,0x0000171C80000000ULL); lv2poke(0x800000000000171CULL + 120,0x0000173C80000000ULL); lv2poke(0x800000000000171CULL + 128,0x0000175C00000000ULL); lv2poke(0x800000000035DC20ULL , 0x8000000000001788ULL); lv2poke(0x800000000035DC28ULL , 0x8000000000001790ULL); lv2poke(0x800000000035DC30ULL, 0x8000000000001798ULL); } Then developed a homebrew called core which makes everything a little, the self has to go along with pendrive root folder copy_script.txt and flags with flags (functions) as you want to within when starting the console will look and run, leave a log of what was done in the root called core.log are mention the most important and tomorrow I explain a little more. BD emu flag is for if you have not and do not controller works if you activate this flag npdrm console will behave as if the reader enabled qa, enable you qa flag directly in 4.31:
The changelog here: , dM MMr 4MMML. MMMMM. xf . M6MMM. MM- Mh .. + MM5MMM. MMMM . MMM. . MMMMML. Mmmmmh ) Hmmm. MMMMMMM MM5MMM 3MMMMx. MMM3MMf xnMMMMMM * MMMMM MMMMMM. nMMMMMMP * MMMMMx MMMM5M. MMMMMMM = * Mmmmmh NMMMMM JMMMMMMP MMMMMM IMMMMM. dMMMMMM. MMMMMM MMMM. MMMMMM. NnMP .. * MMMMx dMMMM MMM. NnMMMMM * MMn ... 'MMMMr' MM MMM. NMMMMMMM * 4MMMMnn .. * MM MMM MMP. DMMMMMMM ^ MMMMMMMMx. * ML M. M *. MMMMMM ** * PMMMMMMhn. * X> M. MMMM ** MMMMhx ** / .h /. = * 3 P ... nP * MMnx Core 2.6.5 2.6.5 changelog:
Link all this: http://pastie.org/5913506 / mirror thanks to "Palestine" http://ul.to/0mp1pmbl Function bd emu's I have also built in a 3.55 cfw I'm uploading it is always useful to dump your key root Edit: Here is = hilo_cfw-3-55-otheros-cex-bdemu-no-controller-integrado_1862166 to make your cfw patcher Open delta, in original file to Appoint the OFW 4.31 here: PS3UPDAT.PUP CFW 3.55 OtherOS++ CEX, BDemu Without Controller (Integrated) Hi, as promised here's the integrated version for CEX BDEmulator that has all patches from glevand for OtherOS++ and has the sha1 hash check syscon disabled for consoles for downgrades. With this CFW because anyone with broken controller (black screen or throwing npdrm update loop etc...) can use the console as controller, you can load is APP_HOME your games from, that's something I have the same function in the CFW 4.31 in this same subforum but got to 3.55 here too integrated for people to use and get their root key inter things... SS unpatched least trophies error Download: v3modnobd.pup (170.5 MB) / v3modnobd.pup (Mirror) / http://pastie.org/5926345 In xdelta patch, the patch obviously apply and give the option to check and keep the original file checksum enabled, you will create another file called * NEW.pup being * the name that you do them to OFW, hashes the PUP should be good: CRC32: 203E06EC MD5: AD09B0CB3C09CFCCAB578E4E85969830 SHA-1: 7258E1BB84ED6E8AB0F6325A0199B65F82C7ADEF I give the core src polish it once, honestly I'm embarrassed both comment on the code you enjoy it, just as I will update the post in these 3 days with what I forget, that sure is a lot to this fw has had his job for.. Now comes Rogero and copy Finally, some feedback on this PS3 4.31 CFW WIP from butnut: So I did a little testing... It installs fine on my slim 2101 and since I had left QA active the last time I was on 3.55 it is now automatically activated (still have to input button combo) The cold boot takes the same amount of time, only you don't see the epilepsy warning... It has normal install pkg files and app_home icons (just like Kmeaw 3.55) Backup managers do not work yet because they do not have the new payloads implemented yet. I will go back to Rogero 2.04 for now. QA downgrade does not seem to work. Every firmware I try (CFW and OFW) the PS3 says it is corrupt. Luckily Rogero 4.25 to 3.55 DG pup still works. | |
|
Total comments: 0 | |
Section categories
APPLICATIONS [7] |
ANDROID [101] |
PC GAMES [25] |
PS3 [52] |
XBOX360 [2] |
NULLED SCRIPTS [27] |
IPHONE/IPAD/IPOD [19] |
Tag Board