PSNpatch by KW Do you have questions about PSNPATCH ? Read this document and the faqs BEFORE asking !!! (most questions are already answered there) RELEASE NOTES: 2017.01/A Added support for multiple controller ports including PS3 Media Remote; Updated syscalls cleaning list to include syscalls 15,200,201,202,203 and 204 The full list of LV2 syscalls disabled by PSNPatch is now: 6,7,8,9,10,11,15,20,35,36,200,201,202,203,204 Includes webman-mod 1.45.07 lite version for cobra and non-cobra systems (for optional installation). NOTES: More than 1 year (october 2015) since the last change. And PSNPatch is still compatible with every firmware version (CEX)! Following some users requests, changes were made to support the PS3 Media Remote in the application and updating the list of "cleanable" CFW syscalls. So, here it is the first 2017 version. If anyone has anything to report or an improvement request, please use the psx-place forum: http://www.psx-place.com/threads/psnpatch-releases-usage-information-official-support-thread.11176/ 2015.11/A PSNPatch Interceptor - PSNPatch plugin will detect other tools disabling CFW: will intercept them, do the best cfw disabling, restore psn access, and unloads itself from memory (*) Stealth3 extension extended from cobra and mamba to non-cobra systems. PSN access control was much improved and simplified, yet assuring the best protection. A lot of code clean-up and improvements. (*) PSNPatch Interceptor was initially made for a seamless integration with webman-mod (for users preferring to use webman-mod shortcuts to disable syscalls), but it should eventually work with any other tools. Read docs for further details. CHROME MAY COMPAIN ABOUT PSNPATCH.ZIP BEING MALICIOUS - THAT'S BULL***** !!!! NOTES: A quick Remember for those who preferred not to read past versions release notes: PSNPatch plugin locks PSN access until CFW is properly disabled. For the best protection, PSNPatch plugin should always be installed. PSNPatch plugin can be installed in cobra and non-cobra systems(for non-cobra use the also included plugin handler) by using the "TOOLBOX" available in PSNPatch XMB application. READ BEFORE ASKING: 99% + of the issues and questions placed from users during the past months were already answered in this document and/or the FAQ included in the distribution. THE OFFICIAL PSNPatch DISTRIBUTION AND SUPPORTING FORUM IS AT psx-place.com: http://www.psx-place.com/threads/psnpatch-releases-usage-information-official-support-thread.11176/ The download link in psx-place is always pointing to sendspace. PLEASE DON'T MIRROR ! ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " What is PSNpatch ? CORE (compatible with ALL 4.XX firmwares): - Spoofs IDPS (console ID) and PSID; - Disables cfw syscalls (emulates official firmware); - Auto-Deletes game and homebrew launch history; - BLOCKS PSN access at boot until cfw syscalls are disabled (if plug-in is running. read below); - Installs RAPs and EDATs. - Unlocks PSN (c00) game demos. - Unlocks ps2classics launcher. - It Patches new games to run in lower firmware (4.46) systems - both ISO and folder formats; - PSNPatch plug-in for easy usage with COBRA and NON-COBRA cfw including PSN access control; - Firmware version independent; - Includes a lite webMAN-mod plug-in version certified to run with PSNPatch. ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " . PLEASE READ CAREFULLY THE DOCUMENTATION BEFORE USING PSNPATCH. . BE SURE YOU UNDERSTAND WHAT CAN BE DONE WITH PSNPATCH. . AVOID PLACING QUESTIONS ALREADY ANSWERED IN THIS FILE. . NO WARRANTIES ARE GIVEN. . USE AT YOUR OWN RISK. . DON'T USE PSNPATCH FOR PIRACY. . PSNPATCH AUTHOR STRICTLY CONDEMNS PIRACY. ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " = SUMMARY: The major objective of psnpatch is to spoof the console Id and disable cfw syscalls extensions in order to make your system more "safe" to go into the psn. (Note that MORE safe doesn't mean IT IS safe!). It also deletes the boot history execution (hiding homebrew execution). The optional cobra plug-ins unloads from memory after activation and controls PSN access. Additionally, you can also install RAPs and EDATs, unlock psn game demos and patch games and apps to run in 4.46 systems. New algorithms specially made for CFW disabling and searching valid user accounts. Firmware independent. = How to use: Just install and run. A simple interface will guide you trough. Optionally you can install a prx plug-in that runs in the background and do all the "spoofing" and CFW disabling from the xmb by means of a simple shortcut (read below). The plug-in also disables PSN access until CFW is disabled and can be configured to automatically spoof IDPS at start-up. To install the plug-in, call psnpatch and go into the TOOLBOX sub-menu (by pressing the SELECT key); To update the plug-in, just run psnpatch and follow the on-screen update instructions. See the PSNPatch plug-in section for additional information. = TESTING IF PSNPATCH WORKS WITH YOUR SYSTEM: IF you want to be sure psnpatch works in your system: - (If spoofing IDPS/PSID) edit psnpatch.cfg to define new idps and psid. Put it in the root of a usb stick and place it in the rightmost ps3 usb port. - Run psnpatch keeping CROSS pressed until you ear 1 beep and got back to XMB (or press L3+R3+R2 from the XMB if you are using the PsnPatch plug-in). - If the system beeped, it means that the cfw disabling was successful. - You can re-run psnpatch. It should give you an error complaining about cfw syscalls not found and it will display the current idps and psid values (called PSN IDPS and PSN PSID). - You can also run Multiman, Irismanager or any other syscall-dependent homebrew: they will all complain about an “unsupported” or “unknown” firmware version - Some versions of newer backup managers may not complain about unknown firmware versions but SHOULD NOT be able to mount new games after PSNPatch disables the CFW syscalls. = CFW DISABLE / REMOVE SYSCALLS You can execute the app directly after install. This will allow you to remove cfw syscalls and delete execution history. Removing syscall will simulate a official firmware version improving protection level against PSN bans. Note that after doing this, some home-brew programs (like multiMAN) will fail to execute. In fact, You should avoid running any homebrew program AFTER disabling CFW. Just mount the game backup you want BEFORE using PSNPATCH to disable cfw. After CFW is disabled you can play the mounted game backup but cannot mount another one. This "cfw disabling" will only be active until next ps3 reboot. Some (few) games may fail starting when mounted by a backup manager after cfw is disabled - this can be solved by mounting those games in ISO format. Press TRIANGLE (1 beep will inform of the cfw removal success). If there were NO BEEPS it means that the CFW WAS NOT DISABLED!!! Psnpatch uses several complimentary algorithms to improve cfw disabling success rate. Note: If a mounted game in cobra gives black screen after disabling cfw, try mounting as ISO. = SPOOF CONSOLE ID (IDPS): If you want to spoof idps and psid, you need to the edit the PSNPATCH.cfg file (see example).PSNPATCH will scan locations in the following order: "/dev_usb000/psnpatch.cfg" "/dev_hdd0/game/PSNP11001/USRDIR/psnpatch.cfg" "/dev_hdd0/game/BLJS10018/USRDIR/psnpatch.cfg" Each ID is a hex string with 32 characters representing 16 bytes / 128 bit integer. IF left as Zeros, the ID's will NOT be spoofed. It cannot be any number: it MUST be a valid IDPS known by the PSN. Don't try to generate an ID by yourself !!! Press SQUARE if you want just to spoof IDPS and PSID. = "ALL IN ONE": Press CROSS to do a "ALL IN ONE": Spoof idps and psid, disable cfw syscalls and delete execution history. (1 beep will inform of the success disabling cfw). You can even start psnpatch and keep X pressed until you ear the beep, bypassing the user interface and back to XMB ! NOTE: If you are using the PsnPatch plug-in, just press L3+R3+R2 from the XMB. An on-scree message will report the success and mode used for it. No need to call PSNPatch application ! = INSTALLING RAPS AND EDATS: When PSNPATCH starts, it will search for the first valid user account (usually it will be '1', but it can be a different value). Place RAPs and/or EDATs in the folder configured in PSNPATCH.cfg (usually /dev_usb0/exdata/ in a usb stick placed on the right most ps3 port). Press: UP/DOWN to change the USB port where to get the RAPs and EDATs. LEFT/RIGHT to select the user account where to install. L1 - a log will display the list of processed games by file type. - Note 1: It is advisable not to process more than 20 files at the same time (if you sign more, they may not appear in the log). - Note 2: Once the RAPs and EDATs are installed, you can remove them from the USB stick. - Note 3: RAPs and EDATs are installed in one user account but available to all users. - Note 4: RAPs are installed with the current IDPS (original or spoofed) and will work ONLY with that IDPS active! = UNLOCK PSN GAME (C00) DEMOS: PSNpatch can unlock game demos of C00 type. For each unlocked game there will be created a new EDAT. Press R1 - A list of unlocked games will be displayed on screen. NOTE: EDATs are IDPS independent (will always work in your system. Even with spoofed IDPS). = UNLOCK PS2CLASSICS launcher When unlocking C00 demos, ps2 classics launcher will also be unlocked (if not yet unlocked). = PATCHES games to lower versions: There are still many users with 4.46, 4.53 and 4.55 systems – Rebug or Cobra addicts (that wants the full set of cobra 7.0 functionalities) These users, need to spoof their firmware versions to login into psn. Some newer games will fail to start on systems with lower firmware versions - typically a black screen at start up. PSNPatch can re-sign JB AND ISO game images, psn installed games, apps (like ps store) and new game patches to run in every 4.46 and above systems. psnpatch looks in the configured devices in the folders "/GAMES" and "/PS3ISO". * Press L2 - A menu will allow to choose where to scan. Press START. A list of patched games and the number of patched files per game will be displayed on-screen. Press START again to reboot the ps3. * The "Deep SCAN" option will scan every sub-folder it finds. This a very very slow (really slow) scan, but it is essential for games failing the normal patching method (i.e: FF X/X-2) If you have a game that still fails after being patched, try putting it alone in a /GAMES folder in an external disk (no more games in the external disk, to be faster) and patch with the deep scan option. You might have to wait 10 to 15 minutes - while the hdd light blinks, psnpatch is working. * Pressing SELECT enables a [TEST] function. This function is great to test how long the scan will take and can be interrupted at anytime without any problem, as no writing to the disk is being ade while in [TEST] mode. Note: this process patches EBOOT.BIN, *.self, *.sprx, and PARAM.SFO files. New games: Some newer games (even if working on a 4.46 system after being patched by psnpatch) may fail after updating the game from the ps3 interface. This happens because the new patches are being distributed already signed for 4.55+ and they are downloaded, installed and launched on the fly. In this cases it is needed to get the update pkg file separately - suggested to donwload the update pkg files from a tool like multiman. TEST MODE: To test which games will be patched, press the "SELECT" key. The menu will change to "TEST" mode. The list of patcheable games will be shown, but they will not be changed. = QUICK USE If you don't want the user interface, just execute PSNPATCH and keep CROSS pressed down until you ear 1 beep and get back to the XMB. = FIRMWARE VERSION COMPATIBILITY: PSNPATCH should be compatible with every 4.XX version. It should be independent of the CFW "flavor" (rebug, rogero, habib, darknet, steve, zer0 … and cobra editions!). Tested with 4.21, 4.25, 4.30, 4.41, 4.46, 4.50, 4.53, 4.55, 4.60, 4.65, 4.66, 4.70, 4.75, 4.76 It should be compatible with future firmware releases, as everything in it was made thinking in a "firmware independent" approach. Starting on 4.55, due to changes in firmware, the idps is read by the use of a special algorithm without using fixed offsets and syscall independent, so it should also keep compatibility between firmware versions. It does the cfw disabling by searching and disabling the known "unofficial” syscalls recovering the "official" syscalls table and using special processing with cobra systems. Equal to every 4.X firmware until now. The remaining functions deals with the ps3 file system and should also be compatible with every firmware version. -.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- = T O O L B O X : -.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- - Cobra and NON-COBRA systems (4.46 and above) are supported. With a list of additional functions available trough the TOOLBOX. - TOOLBOX can be used to: O PSNPatch plug-in install & remove - disable cfw / spoof idps & psid / deletes history / lock PSN access. All from the XMB !; O Additional functions (not available for REBUG versions): . webMAN install & remove; . Spoof FIRMWARE VERSION (temporary disabled); IN REBUG-COBRA the user should activate "System Mode: REBUG" in REBUG TOOLBOX for proper compatibility. = Accessing the TOOLBOX menu To access the toolbox menu, press the SELECT key from the main menu. = COBRA extensions extra-stealth: UPDATE 4.70.07 - "STEALTH3 extensions" for cobra/mamba: A payload will randomly choose a syscall from where it will run and disable every CFW syscall (including its own) bypassing every possible cobra/mamba syscall table protection and giving 99.99% assurance of a perfect CFW syscall table recovery. = COBRA VERSION spoofing : [THIS SECTION IS DISABLED UNTIL A FIRMWARE INDEPENDENT VERSIONS SPOOFER IS MADE] -.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- PSNPATCH P L U G - I N -.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- PSNPatch plug-in can be loaded at system boot in both cobra and non-cobra systems. . By the use of controller shortcuts it does run-time cfw disabling and IDPS&PSID spoofing, controls PSN access, displays current status and has an auto mode (more about this bellow - keep reading). . PSN access will be locked at plugin start-up. . The same applies to Firmware version checks and firmware updates trough web. . All blocks will report error 80710007 (unknown server). . This is a big security add-on, as the PS3 will return an error and deny PSN connections until the CFW is properly disabled by the PSNPatch plugin. . Just wait for the PSNPatch startup message to appear and confirm it says that PSNPatch was loaded and if "PSN connection locked" - now you are safe from wrongfully connect to PSN without previously disable the CFW syscalls. . After installing a new psnpatch version, if you have a previous version of the PSNPatch plug-in, just execute PSNPatch and follow the on-screen instructions to auto-update the plugin. . After installing the plug-in, it will stay resident in memory until CFW is disabled or removed with PSNPatch interface; Once you press the PSNPatch plugin shortcut L3+R3+R2, CFW will be disabled, IDPS spoofed and PSN connection unlocked. = WAIT FOR PSNPatch START-UP MESSAGE AT BOOT BEFORE USING IT (AROUND 25 SECS AFTER PS3 WELCOME SCREEN). - L3+R3+R2 shortcut: O 3 seconds, 1 beep, the cfw is disabled ! O The new IDPS will be displayed on-screen, if spoofed (or not already spoofed in auto-node - see bellow); O History will be cleaned; O PSN access will be restored; O The PSNPatch plug-in will unload itself from memory; - L3+R3+L2 shortcut: O Displays status (displays PSN access, current idps, mounted titleID, running contentID and devklic); - AUTO MODE: With AUTO MODE, IDPS will be automatically spoofed at boot time (the system will behave as if it was permanently spoofed to the new IDPS without re-writing the ps3 internal flash memory). To enable/disable AUTO MODE: 1 turn-off the ps3; 2 press the controller PS button to start the console; 3 wait until the ps3 boot up sound is issued; 4 keep pressed L3+R3+R2; 5 wait for 2 beeps and a confirmation message. 6 The system will reboot afterwards. Notes: . Auto mode will ALWAYS STAY ENABLED (even between reboots) until you disable-it or unninstall psnpatch plug-in. . AUTO MODE DOES NOT WRITE TO FLASH. . IT IS 100% SECURE. . If you get the usual psnpatch welcome message when trying to enable or disable "auto mode", the process had failed. You should reboot and try again ! NOTE: CFW WILL NOT be disabled at boot (or it wouldn't be possible to mount games) - don't forget to do it latter using L2+R3+R2 or you won't be able to connect to the PSN). -.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- PLUGINS in NON-COBRA systems -.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- PSNPatch has the ability of preparing non-cobra CFW systems to load plugins at boot. This extends non-cobra system to a "near-cobra" behaviour. = NOTES for non-cobra plugins: 1) Non-cobra plugins should be configured in /dev_hdd0/prx_plugins.txt; (psnpatch does this automatically when installing psnpatch or webman plugins); 2) Non-cobra plugins can mount games only in jailbreak format; 3) ISO support for non-cobra with irisman and mamba. 4) When in non-cobra CFW: go to new "TOOLBOX" menu in PSNPatch app to configure plugins; 5) Non-cobra plugins were tested in 4.70, 4.75 AND 4.76 but it should be compatible with several previous CFW versions; 6) Many failsafe procedures were taken in consideration to install the non-cobra plugin handler. In the event of something going wrong (a broken plugin or an error installing the plugin handler), there are 2 EASY failsafe procedures: a) Create a "failsafe" file and place it in a folder named "core_flags" in a usb stick in the right usb port of the ps3. This procedure can also be done to disable plugin loading from non-cobra cfw. b) Re-install the CFW from the Recovery menu. -.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- PSNPATCH INTERCEPTOR -.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- PSNPatch interceptor is implemented in PSNPatch plugin. PSNPatch plugin blocks PSN on start up, until CFW is disabled. But if another tool disables CFW, it was not possible to restore PSN Access. Not possible until now (psnpatch 2015.11/A). Now, PSNPatch plugin detects other tools trying to disable CFW. It will ignore the other tools changes. Then properly restores PSN access. After it, it will disable sycalls, by recovering the syscall table as of OFW was running in the system (using setalth3 approach described previously). Finally, it will unload itself from memory. PSNPatch Interceptor was initially made for a seamless integration with webman-mod (for users preferring to use webman-mod shortcuts to disable syscalls), but it should eventually work with any other tools. NOTE: Usually PSNPatch beeps once to flag that cfw was disabled. When in interceptor mode, it will NOT beep to avoid confusion with other tools. But it will still display a message in the upper right screen conner, informing about that has done the proper job. PSNPatch plugin will still beep once if the psnpatch combo key is pressed (L3+R3+R2). -.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- UNNINSTALLING PSNPATCH -.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- If you you ever want to unninstall psnpatch: a) go to psnpatch xmb application b) toolbox menu c) select remove psnpatch plugin d) apply e) after reboot, remove psnpatch xmb applicaton from the XMB -.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- = REMEMBER ! Never execute any homebrew WHILE connected to the PSN ! And the safest way to keep being banned is to be offline!!! = PIRACY PSNpatch strictly condemns piracy! Use PSNpatch only for legally obtained games and content. = WARRANTY PsnPatch comes absolutely with NO WARRANTY. Use-it at your own risk. = THANK YOU * cobra authors for the MOST FANTASTIC firmware add-ons ! * smhabib for your great work in porting COBRA into your CFW's and sharing your experiences ! * joonie for the work in the new rebug; * stoker25 for psidpatch. * user for psnope and prx-loader * deank for webMAN and multiMAN. * aldo for webMAN-mod, irisman, aldostools (including getsymbols), ISO parsing, payload handling and many information and source code sharing. * evilnat and arch by their 4.6x version spoofing approaches. * MiralaTijera for New Core; * joonie and _NZV_ for unnoficial prx-loader releases; * estwald for new core changes; * flatz, fail0verflow, snowydev, JuanNadie, EXE.trim.ALL, and all other for EDAT signing algorithms. * all others I've not listed: Without you, it would have been impossible ! * and to every psnpatch user - you are the ones that keep psnpatch project alive -.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- DOWNLOAD LINKS -.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- DON'T MIRROR. IF YOU WANT TO PUBLISH PSNPATCH IN YOUR SITE, KEEP THE DOWNLOAD LINK PSNPatch 2017.01/A = https://www.sendspace.com/file/qxfrqw PSNPatch 2015.11/A = https://www.sendspace.com/file/3q47jv DON'T MIRROR. IF YOU WANT TO PUBLISH PSNPATCH IN YOUR SITE, KEEP THE DOWNLOAD LINK -.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- = QUESTIONS ? -.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.--.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- 1. If you have any question, 1st make sure you read and understand this document. 2. You should also read the FAQ document tha tis included with the release package. 3. If you still have questions, read again AND AGAIN! 4 Most of the questions made in the past months are already answered in the docs. 5. After reading 3 times, if you still have doubts, use PSNPATCH Official support forum at psx-place http://www.psx-place.com/threads/psnpatch-releases-usage-information-official-support-thread.11176/ Someone will be glad to help.