PS3 4.88.2 Evilnat Cobra (8.3) Custom FirmWare (CFW-CEX) Released

Sheireen · Jun 26, 2021

Evilnat said:
That's perfect, thank so much for testing it my friends

It's ime to create 4.88.2 BETA

You're welcome, I'm Glad to help the scene in my little knowledge

Lwiz · Jun 26, 2021

Sheireen said:
You're welcome, I'm Glad to help the scene in my little knowledge

Participating in stuff like this is surefire way to raise your knowledge above the "used bguervilles toolset and installed XXX CFW" level - which isn't wrong at all, but sometimes it's just nice get to know bits and pieces more.

aldostools · Jun 26, 2021

Evilnat said:
That's perfect, thank so much for testing it my friends

It's ime to create 4.88.2 BETA

I wanted to suggest a small performance improvement in xreg_data() of save_games.c
The change basically is move data = malloc(0x17); and the free(data) outside of the loop.

Code:

int xreg_data(char *value, int type, int mode, int overwrite, int checkEmpty)
{
    int fd, result = -1;
    uint16_t offset = 0;
    uint64_t dummy, read, seek;
    char *buffer = malloc(0x2A);
    if(!buffer)
        return result;
    if(cellFsOpen(XREGISTRY_FILE, CELL_FS_O_RDWR, &fd, 0666, NULL, 0) != SUCCEEDED)
    {
        free(buffer);
        return result;
    }
    // Get offset
    for(int i = 0; i < 0x10000; i++)
    {
        cellFsLseek(fd, i, SEEK_SET, &seek);
        cellFsRead(fd, buffer, 0x31 + 1, &read);
        // Found offset
        if(strcmp(buffer, value) == 0)
        {
            offset = i - 0x15;
            uint8_t *data = (uint8_t *) malloc(0x17);
            // Search value from value table
            for(int i = 0x10000; i < 0x15000; i++)
            {
                cellFsLseek(fd, i, SEEK_SET, &seek);
                cellFsRead(fd, data, 0x17, &read);
                // Found value
                if (memcmp(data, &offset, 2) == 0 && data[4] == 0x00 &&
                    ((type) ? data[5] == 0x11 && data[6] == 0x02 : data[5] == 0x04 && data[6] == 0x01))
                {
                    result = 0;
                    if(type && mode) // Set/Overwrite with fake accountID
                    {
                        if(!overwrite && memcmp(data + 7, empty, 0x10) != SUCCEEDED)
                        {
                            free(data);
                            free(buffer);
                            cellFsClose(fd);
                            return 1;
                        }
                        cellFsLseek(fd, i + 7, SEEK_SET, &seek);
                        cellFsWrite(fd, fake_accountid, 0x10, &dummy);
                    }
                    else if(type && !mode) // Check if there is no accountID
                    {
                        memcpy(&account_id, data + 7, 0x10);
                        if(checkEmpty && memcmp(data + 7, empty, 0x10) != SUCCEEDED)
                            result = 1;
                    }
                    else if(!type && mode) // Disable auto sign in PSN with empty email/password
                    {
                        uint32_t disabled = 0;
                        cellFsLseek(fd, i + 7, SEEK_SET, &seek);
                        cellFsWrite(fd, &disabled, 4, &dummy);
                    }
                    else
                        memcpy(&userID, data + 7, 4);
                    free(data);
                    free(buffer);
                    cellFsClose(fd);
                    return result;
                }
            }
            free(data);
        }
    }
    free(buffer);
    cellFsClose(fd);
    return result;
}

Sheireen · Jun 26, 2021

Lwiz said:
Participating in stuff like this is surefire way to raise your knowledge above the "used bguervilles toolset and installed XXX CFW" level - which isn't wrong at all, but sometimes it's just nice get to know bits and pieces more.

surely, I always had lot of interest in modding and what's behind it; so when I have the possibility I always try to give a hand :encouragement:

Evilnat · Jun 26, 2021

aldostools said:

I wanted to suggest a small performance improvement in xreg_data() of save_games.c
The change basically is move data = malloc(0x17); and the free(data) outside of the loop.

Code:

int xreg_data(char *value, int type, int mode, int overwrite, int checkEmpty)
{
    int fd, result = -1;
    uint16_t offset = 0;
    uint64_t dummy, read, seek;
    char *buffer = malloc(0x2A);
    if(!buffer)
        return result;
    if(cellFsOpen(XREGISTRY_FILE, CELL_FS_O_RDWR, &fd, 0666, NULL, 0) != SUCCEEDED)
    {
        free(buffer);
        return result;
    }
    // Get offset
    for(int i = 0; i < 0x10000; i++)
    {
        cellFsLseek(fd, i, SEEK_SET, &seek);
        cellFsRead(fd, buffer, 0x31 + 1, &read);
        // Found offset
        if(strcmp(buffer, value) == 0)
        {
            offset = i - 0x15;
            uint8_t *data = (uint8_t *) malloc(0x17);
            // Search value from value table
            for(int i = 0x10000; i < 0x15000; i++)
            {
                cellFsLseek(fd, i, SEEK_SET, &seek);
                cellFsRead(fd, data, 0x17, &read);
                // Found value
                if (memcmp(data, &offset, 2) == 0 && data[4] == 0x00 &&
                    ((type) ? data[5] == 0x11 && data[6] == 0x02 : data[5] == 0x04 && data[6] == 0x01))
                {
                    result = 0;
                    if(type && mode) // Set/Overwrite with fake accountID
                    {
                        if(!overwrite && memcmp(data + 7, empty, 0x10) != SUCCEEDED)
                        {
                            free(data);
                            free(buffer);
                            cellFsClose(fd);
                            return 1;
                        }
                        cellFsLseek(fd, i + 7, SEEK_SET, &seek);
                        cellFsWrite(fd, fake_accountid, 0x10, &dummy);
                    }
                    else if(type && !mode) // Check if there is no accountID
                    {
                        memcpy(&account_id, data + 7, 0x10);
                        if(checkEmpty && memcmp(data + 7, empty, 0x10) != SUCCEEDED)
                            result = 1;
                    }
                    else if(!type && mode) // Disable auto sign in PSN with empty email/password
                    {
                        uint32_t disabled = 0;
                        cellFsLseek(fd, i + 7, SEEK_SET, &seek);
                        cellFsWrite(fd, &disabled, 4, &dummy);
                    }
                    else
                        memcpy(&userID, data + 7, 4);
                    free(data);
                    free(buffer);
                    cellFsClose(fd);
                    return result;
                }
            }
            free(data);
        }
    }
    free(buffer);
    cellFsClose(fd);
    return result;
}

Done, I have moved data = malloc(0x17); and free(data) outside the loop. I have uploaded a new PKG with some savedata to test this change.

https://mega.nz/file/oJknUKbK#4x0yhpmU-7ewqYQ7l5Kotl3d5u4_N-Vbb8-WJ1HQfDw

To test it, you need to put the contents of the folder USB to the root of your USB device, and select the option under [★ Custom Firmware Tools > Cobra Tools > Convert savedata] through xai_plugin

I have used these saved data for tests on my PS3 long time ago, I do not remember if any is wrong or not, but you can use any savedata but there must be at least five saves for the test. Then copy the new patched savedata through Savedata Utility (PS3) in Game tab.

If the PS3 does not freeze in the middle of the conversion, all must be fine

aldostools · Jun 26, 2021

Evilnat said:
Done, I have moved data = malloc(0x17); and free(data) outside the loop. I have uploaded a new PKG with some savedata to test this change.

https://mega.nz/file/oJknUKbK#4x0yhpmU-7ewqYQ7l5Kotl3d5u4_N-Vbb8-WJ1HQfDw

To test it, you need to put the contents of the folder USB to the root of your USB device, and select the option under [★ Custom Firmware Tools > Cobra Tools > Convert savedata] through xai_plugin

I have used these saved data for tests on my PS3 long time ago, I do not remember if any is wrong or not, but you can use any savedata but there must be at least five saves for the test. Then copy the new patched savedata through Savedata Utility (PS3) in Game tab.

If the PS3 does not freeze in the middle of the conversion, all must be fine

Are you going to include the normal and debug stage2.bin in the 4.88.2?
It would be convenient if it could be selected from CFW Tools menu.

Also it would be nice if you rearrange CFW Tools menu like the one in the attachment.
IMHO this menu has a more convenient organization of the options.

Lwiz · Jun 26, 2021

Evilnat said:
Done, I have moved data = malloc(0x17); and free(data) outside the loop. I have uploaded a new PKG with some savedata to test this change.

https://mega.nz/file/oJknUKbK#4x0yhpmU-7ewqYQ7l5Kotl3d5u4_N-Vbb8-WJ1HQfDw

To test it, you need to put the contents of the folder USB to the root of your USB device, and select the option under [★ Custom Firmware Tools > Cobra Tools > Convert savedata] through xai_plugin

I have used these saved data for tests on my PS3 long time ago, I do not remember if any is wrong or not, but you can use any savedata but there must be at least five saves for the test. Then copy the new patched savedata through Savedata Utility (PS3) in Game tab.

If the PS3 does not freeze in the middle of the conversion, all must be fine

Tested this one. First vanilla 4.88 EN -> No probs
Then with the patch take 1. -> console froze on converting, no led activity on usb stick
with patch, take 2. -> Conversion and transfer of saves went smoothly.

Take 1. might have been a fluke, but haven't got time for further testing just now, will be afk for 2-3 hours at least.

LuanTeles · Jun 26, 2021

Evilnat said:
I have created some PKG to test, release and debug version. Debug and retail versions size are lower than 0x20000 and must work fine on both types of PS3

@Coro (NOR), @aldostools (NOR), @FoxHound47 (FAT), @Lwiz (NOR), @Sheireen (NAND), @tom1tom (NOR?), @DeViL303 (NAND/NOR), @LuanTeles (NOR) can you try them?

There is no risk of brick, reboot your PS3 to load original stage2.bin with Cobra 8.3

If the PKG doesn't work for you, I have added the files too. The following files must be added/replaced:

stage9.bin: /dev_blind/sys/stage9.bin (Mount dev_blind first)

xai_plugin.sprx: /dev_blind/vsh/module/xai_plugin.sprx (Mount dev_blind first)

lv2_kernel.self: /dev_blind/lv2_kernel.self (Mount dev_blind first)

DO NOT CONFUSE STAGE2.BIN WITH STAGE9.BIN

You can copy and launch lv2_kernel.self through xai_plugin (Advanced Tools) or Rebug Toolbox after all other files have been copied/replaced. Both PKGs shows Cobra version 9.99, if you want to test release and then debug or vice versa, remember to hard reboot the PS3 to load original stage2

I have reverted part of the code to decrease the size, for example loading webMAN MOD from the following paths are removed (modulespatch.c):

/dev_flash/ps3ita/webftp_server.sprx

/dev_flash/webman/webftp_server.sprx

/dev_flash/dragon/web.sprx

Replaced some variables that stores original values with static values (qa.c/qa.h):

#define UM_PATCH_ORI 0xE8180008

#define DM_PATCH1_ORI 0xF8010098

#define DM_PATCH2_ORI 0x4BFFF0E5

#define DM_PATCH3_ORI 0x38A10070

#define DM_PATCH4_ORI 0x48006065

Replaced two lines of code to one to check if we are launching something from "/dev_hdd0/game/" (homebrew_blocker.c)

OLD: uint8_t is_hdd0 = (path[1] == 'd' && path[5] == 'h' && !strncmp(path, "/dev_hdd0/", 10));

OLD: uint8_t is_game_dir = (is_hdd0 && !strncmp(path + 10, "game/", 5));

NEW: uint8_t is_hdd0 = !strncmp(path, "/dev_hdd0/game/", 15);

And finally, I have commented some DPRINTF for debug version. I hope everything works fine with the changes

Seems i'm a little bit late, but yeap both are working fine here NOR CECH-2100B

LuanTeles · Jun 26, 2021

Evilnat said:
Done, I have moved data = malloc(0x17); and free(data) outside the loop. I have uploaded a new PKG with some savedata to test this change.

https://mega.nz/file/oJknUKbK#4x0yhpmU-7ewqYQ7l5Kotl3d5u4_N-Vbb8-WJ1HQfDw

To test it, you need to put the contents of the folder USB to the root of your USB device, and select the option under [★ Custom Firmware Tools > Cobra Tools > Convert savedata] through xai_plugin

I have used these saved data for tests on my PS3 long time ago, I do not remember if any is wrong or not, but you can use any savedata but there must be at least five saves for the test. Then copy the new patched savedata through Savedata Utility (PS3) in Game tab.

If the PS3 does not freeze in the middle of the conversion, all must be fine

It hard froze my console upon clicking

Edit: I tried a second time after manually rebooting my PS3, and it worked fine

Edit 2: I erased all the saved data from my usb device and tried again, worked fine, i don't know what caused the first time to freeeze

tom1tom · Jun 26, 2021

Evilnat said:
I have created some PKG to test, release and debug version. Debug and retail versions size are lower than 0x20000 and must work fine on both types of PS3

@tom1tom (NOR?) can you try them?

There is no risk of brick, reboot your PS3 to load original stage2.bin with Cobra 8.3

If the PKG doesn't work for you, I have added the files too. The following files must be added/replaced:

stage9.bin: /dev_blind/sys/stage9.bin (Mount dev_blind first)

xai_plugin.sprx: /dev_blind/vsh/module/xai_plugin.sprx (Mount dev_blind first)

lv2_kernel.self: /dev_blind/lv2_kernel.self (Mount dev_blind first)

DO NOT CONFUSE STAGE2.BIN WITH STAGE9.BIN

You can copy and launch lv2_kernel.self through xai_plugin (Advanced Tools) or Rebug Toolbox after all other files have been copied/replaced. Both PKGs shows Cobra version 9.99, if you want to test release and then debug or vice versa, remember to hard reboot the PS3 to load original stage2

I have reverted part of the code to decrease the size, for example loading webMAN MOD from the following paths are removed (modulespatch.c):

/dev_flash/ps3ita/webftp_server.sprx

/dev_flash/webman/webftp_server.sprx

/dev_flash/dragon/web.sprx

Replaced some variables that stores original values with static values (qa.c/qa.h):

#define UM_PATCH_ORI 0xE8180008

#define DM_PATCH1_ORI 0xF8010098

#define DM_PATCH2_ORI 0x4BFFF0E5

#define DM_PATCH3_ORI 0x38A10070

#define DM_PATCH4_ORI 0x48006065

Replaced two lines of code to one to check if we are launching something from "/dev_hdd0/game/" (homebrew_blocker.c)

OLD: uint8_t is_hdd0 = (path[1] == 'd' && path[5] == 'h' && !strncmp(path, "/dev_hdd0/", 10));

OLD: uint8_t is_game_dir = (is_hdd0 && !strncmp(path + 10, "game/", 5));

NEW: uint8_t is_hdd0 = !strncmp(path, "/dev_hdd0/game/", 15);

And finally, I have commented some DPRINTF for debug version. I hope everything works fine with the changes

here is that what i found

tungatung · Jun 27, 2021

Evilnat said:
If no accountID is found, act.dat will not be created

If this account id is created via reactPSN, then will i be able to create fake act.dat using this tutorial.

Evilnat · Jun 27, 2021

aldostools said:
Are you going to include the normal and debug stage2.bin in the 4.88.2?
It would be convenient if it could be selected from CFW Tools menu.

Also it would be nice if you rearrange CFW Tools menu like the one in the attachment.
IMHO this menu has a more convenient organization of the options.

I will add the option to toggle between Cobra debug and release versions and modify some options, but not all of them

Lwiz said:
Tested this one. First vanilla 4.88 EN -> No probs
Then with the patch take 1. -> console froze on converting, no led activity on usb stick
with patch, take 2. -> Conversion and transfer of saves went smoothly.

Take 1. might have been a fluke, but haven't got time for further testing just now, will be afk for 2-3 hours at least.

LuanTeles said:
It hard froze my console upon clicking

Edit: I tried a second time after manually rebooting my PS3, and it worked fine

Edit 2: I erased all the saved data from my usb device and tried again, worked fine, i don't know what caused the first time to freeeze

Can you try this PKG to see if the PS3 keeps freezing while converting savedata? Launch the PKG (or copy files from dev_flash folder) and convert them after the PS3 reboots

https://mega.nz/file/8F0GVTZb#rBCFRpKf1XjYwryQioDqMIBm22gMIvp9PtGohDOfnd0

tungatung said:
If this account id is created via reactPSN, then will i be able to create fake act.dat using this tutorial.

You can create a fake accountID with xai_plugin, if you have created it with reactPSN, it will work too

LuanTeles · Jun 27, 2021

Evilnat said:
I will add the option to toggle between Cobra debug and release versions and modify some options, but not all of them

Can you try this PKG to see if the PS3 keeps freezing while converting savedata? Launch the PKG (or copy files from dev_flash folder) and convert them after the PS3 reboots

https://mega.nz/file/8F0GVTZb#rBCFRpKf1XjYwryQioDqMIBm22gMIvp9PtGohDOfnd0

I installed CFW just to start it clean and this first run froze in the middle of the conversion process.

The second time it ran without issues again.

So the problem is just in the first run after the firmware has been installed.

Edit: I tested it several times and it worked fine so I thought maybe the problem was after running the PKG so I launched it again and voila, after rebooting I tried it and it froze.

Edit 2: I tried to start PKG and after the system automatically restarted I restarted again but manually (soft restart) but the same thing happened it froze again.

Edit 3: I did more tests as the "TEST 2" and if you turn off the PS3 after the PKG has been launched and the system automatically rebooted, it works.

Edit 4: Just launched the PKG ( 5 times in a row, just to be sure that was the cause) and tried the "convert sava data" option after the reboot, .

Edit 5:It seems that manually replacing files in flash avoids this problem.

Verdict:

The problem only occurs after the FIRST RUN of the "CONVERT SAVE DATA" after the PKG has been launched.

This is weird, but since the files will be packaged inside the .PUP, they will probably work fine.

Evilnat · Jun 27, 2021

So, when Cobra version is 8.3, it works fine? And with Cobra version 9.99 freezes?

9.99 will be loaded with external lv2_kernel.self and stage9.bin in dev_flash/sys, from PKG or loading it with Rebug Toolbox or xai_plugin

Edit: Can you make a LV2 dump, and send me a screenshot of offsets 0x500000 and 0x700000?

LuanTeles · Jun 27, 2021

Evilnat said:
So, when Cobra version is 8.3, it works fine? And with Cobra version 9.99 freezes?

9.99 will be loaded with external lv2_kernel.self and stage9.bin in dev_flash/sys, from PKG or loading it with Rebug Toolbox or xai_plugin

Edit: Can you make a LV2 dump, and send me a screenshot of offsets 0x500000 and 0x700000?

Facepalm:

i didn't realize that LOL, i thought it was just flashing the files

Evilnat · Jun 27, 2021

LuanTeles said:
Facepalm:

i didn't realize that LOL, i thought it was just flashing the files

Please try this PKG, it may works fine now

LuanTeles · Jun 27, 2021

Evilnat said:
Please try this PKG, it may works fine now

Same =(

Evilnat · Jun 27, 2021

@LuanTeles I created another PKG, this have the following updates:

Added option to swtich between Cobra debug/release versions in Cobra Tools (for stage9 only, it will reboot LV2 to keep changes in LV1 and Cobra must keep showing 9.99)
Test needed: Savedata conversion (at least five savedata)

LuanTeles · Jun 27, 2021

Evilnat said:
@LuanTeles I created another PKG, this have the following updates:

Added option to swtich between Cobra debug/release versions in Cobra Tools (for stage9 only, it will reboot LV2 to keep changes in LV1 and Cobra must keep showing 9.99)

Test needed: Savedata conversion (at least five savedata)

Froze again, but in the middle of the conversion.

Evilnat · Jun 27, 2021

LuanTeles said:
Froze again, but in the middle of the conversion.

It this PKG keeps freezing savedata conversion I will make a PUP instead

PS3 4.88.2 Evilnat Cobra (8.3) Custom FirmWare (CFW-CEX) Released

Sheireen

Lwiz

aldostools

Sheireen

Evilnat

aldostools

Attachments

Lwiz

LuanTeles

LuanTeles

tom1tom

Attachments

tungatung

Evilnat

LuanTeles

Evilnat

LuanTeles

Attachments

Evilnat

Attachments

LuanTeles

Evilnat

Attachments

LuanTeles

Evilnat

Attachments

Similar threads

Featured content

Trending content

Latest posts