Evilnat
Developer
New version released:
Changelog
- [CFW] Patched and enabled to update CFW via internet on CEX/DEX (depending vsh.self)
- [CFW] Patched software_update_plugin.sprx from OFW 4.84 DEX
- [CFW] Custom image background in update mode
- [CFW] Patched DEX vsh.self certificates to allow downloads
- [CFW] Patched LV1 to allow custom FAN speed on PS2 EMU (Thanks to @kozarovv and @mrjaredbeta)
- [CFW] Removed DEX and OC (overclock) CFW variants
- [CFW] Patched to bypass FW check while log in on PSN (Avoids error code with CFW update via internet)
- [COBRA] Re-added external Cobra load
- [COBRA] Added RSX overclock at boot with USB or internal HDD
- [COBRA] Removed epilepsy OPCODE (enabled as default)
- [COBRA] Removed allow restore syscalls OPCODE (enabled as default)
- [COBRA] Removed skip existing RIF files OPCODE
- [COBRA] Removed PS2 color disc OPCODE
- [COBRA] Improved code to reduce its size
- [XAI] Added Overclock Menu
- [XAI] Redesigned menu (By @aldostools)
- [GUIDE] PS2 FAN Speed
- [GUIDE] RSX Overclock
CFW 4.92.2 Evilnat release details
Tested Models
Improvements to xai plugin
RSX Overclock Tutorial
PS2 FAN Speed
Savegames / act.dat / PSN Block Tuts
Warnings
Credits & Acknowledgments
-
4.92.2 EVILNAT (Cobra 8.5)
Features
- Made out of 4.92 OFW (CEX)
- Ported Kernel and some modules from OFW 4.84 DEX
- Made manually without automatic tools
- PSN/SEN enabled
- Fixed layouts 272/480 from OFW 4.92
- Disabled deletion of unsigned act.dat and .rif files
- Allowed unsigned act.dat and .rif files
- Allowed running of unsigned applications
- Compatibility with FSELF
- C00 demo unlocker
- Disabled LIC.EDAT license check
- Can be installed over 3.55 OFW
- Can be installed over +3.56 OFW (bguerville Toolset)
- Can be installed over any CFW CEX/DEX (Depending targetID)
- Cobra 8.5 added and enabled as default
- Full PS2 Games Compatibility (Discs only in backward compatible)
- Possibility of Downgrade from any CFW with active QA Flags
- QA Flags active if previously enabled
- Disabled Epilepsy Message on Boot
- Compatibility with PSX/PSP/PS2 games in ISO
- Compatibility with PS3 games in ISO/JB folder format
- Compatibility with ReactPSN
- Display of Temperatures/FPS (depends EMU version) in XMB In-Game on PS2 Games
- RSOD Screen Bypass
- BSOD Screen Bypass
- PS3_GAME/app_home
- XMB In-Game Screenshot
- Added Package Manager
- DEX Kernel patched to prevent ambulance Brick (DEX kernel loaded with CEX TargetID)
- CoreOS Hash Check patched to prevent Brick on non-dehashed Downgradate consoles
- PS2CLASSICs work on CEX and DEX
- Patched to remove LV2 Protection
- Peek and Poke (LV2)
- Peek and Poke (LV1)
- CINAVIA protection disabled
- Option to sort games by name and date
- Allow to use 3rd party controller in Recovery Menu
- Compatibility with OtherOS
- Disabled update from OFW PUP in Recovery Mode
- Dualboot compatible
- Allowed installing of retail PKG on DEX
- Allowed installing pseudo-retail PKG
- Enabled [★Unlock], [★Lock], and [★Delete] options in Trophies
- Compatibility with Remote Play
- Added gameboot_multi.ac3
- Deleted gameboot_stereo.ac3 and coldboot_stereo.ac3
- Replace "Unlink" with "Delete Folder" in XMB
- Bypassed PAL broadcast error on BD/DVD movies
- Bypassed all error codes on BD/DVD movies
- Enabled Debug menu in PS2 games (ps2_netemu.self)
- Patched CBOMB issue
- Target Manager patched to show version 4.9.2
- Patched to update CFW via internet
- Patched LV1 to allow custom FAN speed on PS2 EMU
Cobra 8.5
- Failsafe Cobra stage2 (by bguerville/aldo)
- Restore CFW Syscalls without reboot just entering to 'Settings > System Update' on XMB (by aldo)
- Integrated Dynamic Control FAN (to control fan when webMAN is unloaded) (by aldo/Evilnat)
- Support Photo GUI integration with webMAN MOD (mount games from 'Photo' column) (by aldo/DeViL303)
- Get/Set FAN speed (by aldo)
- Enable/disable features: Photo GUI, Restore Syscalls (by aldo)
- Opcode to create CFW Syscalls (6, 7, 8, 9, 10, 11, 15, 35) (by aldo)
- Opcode to create license (RIF) (by Evilnat)
- Updated ps3mapi_load_process_modules to load custom modules and system modules (by haxxxen)
- Added ps3mapi_get_process_module_info
- Increased from 24 to 32 the max number of map paths (by aldo)
- Added sm_get_temperature patch in kernel (by Evilnat)
- Added sm_get_fan_policy patch in kernel (by Evilnat)
- Added sm_set_fan_policy patch in kernel (by Evilnat)
- Added support for REDUMP ISOs decryption on-the-fly (by Evilnat)
- Opcode to toggle coldboot animation (by Evilnat)
- Opcode to toggle gameboot animation and sound (by Evilnat)
- Opcode to toggle hidden trophy info (by Evilnat)
- Target Manager fix for DEX (By haxxxen)
- Fixed Control FAN payload, avoids loading previous mode (by Evilnat)
- Disable stage2 while Recovery Menu is loaded (by haxxxen)
- Fixed max FAN speed after shutdown (by Evilnat)
- Fixed black screen in CFW2OFW converted games (by Evilnat)
- Added cellFsMkdir symbol (by Evilnat)
- Added FAN Speed while a PS2 ISO is launched (by Evilnat)
- Creation of fake act.dat/license while launching a PSN game (by Evilnat)
- Creation of RIF license with rap.bin (by esc0rtd3w)
- Block Log In on PSN/SEN when CFW syscalls are enabled (by DeViL303)
- Toggle OFW Mode on Boot (by aldostools and Evilnat)
- Block of PSP Launchers if a PSPISO has not been mounted (by aldostools)
- Small optimizations (By aldostools)
- Removed "unnecessary" code (By aldostools)
- Opcode to toggle coldboot and sound (By Evilnat)
- Added cellUsb000_mount_symbol (By haxxxen)
- Added usb_flag flag (By aldostools and Evilnat)
- Load external stage2 and plugins from /dev_usb000 (By aldostools, haxxxen and Evilnat)
- RSX overclock at boot
Translations
- Portuguese: @jcorrea and @LuanTeles
- Polish: @KcrPLo and @Agrippa and HackZy01
- Italian: @Sheireen
- Spanish: Evilnat
- Chinese Traditional/Simplified: @xiaoyang
- Japanese: @Kyan_dudl
- Russian: @MrYadro
- French: @EimGdt and @Chronoss09
- German: @FadedHD3
-
Tested in:
- CECH-2000A
- CECH-2000B
- CECH-2001A
- CECH-2002B
- CECH-2003A
- CECH-2003B
- CECH-2004A
- CECH-2004B
- CECH-2012A
- CECH-2104B
- CECH-2500A
- CECH-2501A
- CECH-2504A
- CECH-2511A
- CECH-2511B
- CECH-L04
- CECHA01
- CECHE01
- CECHB01
- CECHC04
- CECHG01
- CECHP01
- CECHM
-
Improvements xai plugin
These options are in XMB's Network tab under [★ Custom Firmware Tools] option:
Power Options
- Soft Reboot: Reboots the PS3 softly
- Hard Reboot: Reboots the PS3 completely
- Reboot LV2: Reboots the LV2
- Turn Off: Turns off the PS3
File Manager
- Internal Hard Disk Drive 0: Manage PS3 files in /dev_hdd0
- Internal Hard Disk Drive 1: Manage PS3 cached files in /dev_hdd1
- Internal Flash Memory: Manage PS3 internal flash files
- Optical Disc: Manage optical discs
- USB Mass Storage Devices: Manage files on your USB devices
- Memory Cards: Manage memory cards
Overclock Tools
- Check GPU/VRAM clock speed: Checks current GPU/VRAM clock speed
- Default Frequencies: Sets default RSX's core and memory clock frequencies
Overclock Tools > Custom Values
- 500MHz/650MHz (Default): Overclocks RSX's current core and memory clock frequencies
- 550MHz/700MHz: Overclocks RSX's current core and memory clock frequencies
- 600MHz/750MHz: Overclocks RSX's current core and memory clock frequencies
- 650MHz/800MHz: Overclocks RSX's current core and memory clock frequencies
- 700MHz/850MHz: Overclocks RSX's current core and memory clock frequencies
- 750MHz/900MHz: Overclocks RSX's current core and memory clock frequencies
- 800MHz/950MHz: Overclocks RSX's current core and memory clock frequencies
- 850MHz/1000MHz: Overclocks RSX's current core and memory clock frequencies
- 900MHz/1050MHz: Overclocks RSX's current core and memory clock frequencies
- 1050MHz/1050MHz: Overclocks RSX's current core and memory clock frequencies
Overclock Tools > RSX Core Clock
- 300MHz: Overclocks RSX's current core clock frequency
- 350MHz: Overclocks RSX's current core clock frequency
- 400MHz: Overclocks RSX's current core clock frequency
- 450MHz: Overclocks RSX's current core clock frequency
- 500MHz (Default): Overclocks RSX's current core clock frequency
- 550MHz: Overclocks RSX's current core clock frequency
- 600MHz: Overclocks RSX's current core clock frequency
- 650MHz: Overclocks RSX's current core clock frequency
- 700MHz: Overclocks RSX's current core clock frequency
- 750MHz: Overclocks RSX's current core clock frequency
- 800MHz: Overclocks RSX's current core clock frequency
- 850MHz: Overclocks RSX's current core clock frequency
- 900MHz: Overclocks RSX's current core clock frequency
- 950MHz: Overclocks RSX's current core clock frequency
- 1000MHz: Overclocks RSX's current core clock frequency
- 1050MHz: Overclocks RSX's current core clock frequency
Overclock Tools > RSX Memory Clock
- 300MHz: Overclocks RSX's current memory clock frequency
- 325MHz: Overclocks RSX's current memory clock frequency
- 350MHz: Overclocks RSX's current memory clock frequency
- 375MHz: Overclocks RSX's current memory clock frequency
- 400MHz: Overclocks RSX's current memory clock frequency
- 425MHz: Overclocks RSX's current memory clock frequency
- 450MHz: Overclocks RSX's current memory clock frequency
- 475MHz: Overclocks RSX's current memory clock frequency
- 500MHz: Overclocks RSX's current memory clock frequency
- 500MHz: Overclocks RSX's current memory clock frequency
- 525MHz: Overclocks RSX's current memory clock frequency
- 550MHz: Overclocks RSX's current memory clock frequency
- 575MHz: Overclocks RSX's current memory clock frequency
- 600MHz: Overclocks RSX's current memory clock frequency
- 625MHz: Overclocks RSX's current memory clock frequency
- 650MHz (Default): Overclocks RSX's current memory clock frequency
- 675MHz: Overclocks RSX's current memory clock frequency
- 700MHz: Overclocks RSX's current memory clock frequency
- 725MHz: Overclocks RSX's current memory clock frequency
- 750MHz: Overclocks RSX's current memory clock frequency
- 775MHz: Overclocks RSX's current memory clock frequency
- 800MHz: Overclocks RSX's current memory clock frequency
- 825MHz: Overclocks RSX's current memory clock frequency
- 850MHz: Overclocks RSX's current memory clock frequency
- 875MHz: Overclocks RSX's current memory clock frequency
- 900MHz: Overclocks RSX's current memory clock frequency
- 925MHz: Overclocks RSX's current memory clock frequency
- 950MHz: Overclocks RSX's current memory clock frequency
- 975MHz: Overclocks RSX's current memory clock frequency
- 1000MHz: Overclocks RSX's current memory clock frequency
- 1025MHz: Overclocks RSX's current memory clock frequency
- 1050MHz: Overclocks RSX's current memory clock frequency
Basic Tools
- Show Total PS3 Usage: Shows the total days that the PS3 has been on, number of times it has been turned on and off
- Show IDs: Shows current IDPS, PSID, IP and MAC
- Fix CBOMB: Patches RTC with static value (default) or current updated PS3 system date. Useful for PS3 with dead CMOS battery
- Toggle DLNA: Allows you to share content between devices through your home WI-FI network
- Toggle Third Party BT Headset: Enables or diasbles usage of third party BT headset
- Decrypt 3k3y/Redump ISOs (HDD): Decrypts 3k3y/Redump ISOs from dev_hdd0/PS3ISO with 'd1/disc' key file if it is available
- Decrypt 3k3y/Redump ISOs (USB): Decrypts 3k3y/Redump ISOs from dev_usb/PS3ISO with 'd1/disc' key file if it is available
Basic Tools > xRegistry Tools
- Show Region Info: Shows current DVD TV mode and BDVD/DVD/PS3 region
- DVD TV System: Switch between PAL and NTSC for DVD Movies
- Backup xRegistry.sys: Creates a backup of xRegistry.sys to /dev_usb or /dev_hdd0
- Button Assignment: Switches O and X buttons
Basic Tools > xRegistry Tools > Region Tools
- Default/Disabled: Sets BDVD/DVD/PS3 region to Default in xRegistry (0x00)
- Japan: Sets BDVD/DVD/PS3 region to Japan in xRegistry (0x83)
- USA: Sets BDVD/DVD/PS3 region to USA in xRegistry (0x84)
- Europe: Sets BDVD/DVD/PS3 region to Europe in xRegistry (0x85)
- Korea: Sets BDVD/DVD/PS3 region to Korea in xRegistry (0x86)
- United Kingdom: Sets BDVD/DVD/PS3 region to United Kingdom in xRegistry (0x87)
- Mexico: Sets BDVD/DVD/PS3 region to Mexico in xRegistry (0x88)
- Australia: Sets BDVD/DVD/PS3 region to Australia in xRegistry (0x89)
- Asia: Sets BDVD/DVD/PS3 region to Asia in xRegistry (0x8A)
- Taiwan: Sets BDVD/DVD/PS3 region to Taiwan in xRegistry (0x8B)
- Russia: Sets BDVD/DVD/PS3 region to Russia in xRegistry (0x8C)
- China: Sets BDVD/DVD/PS3 region to China in xRegistry (0x8D)
- Hong Kong: Sets BDVD/DVD/PS3 region to Hong Kong in xRegistry (0x8E)
- Brazil: Sets BDVD/DVD/PS3 region to Brazil in xRegistry (0x8F)
FAN Tools
- Temperature Information: Shows current CPU and RSX temperature, FAN speed and FAN and PS2 mode
- Control FAN Mode: DISABLED: Disables Cobra's Control FAN
- Control FAN Mode: SYSCON: Allows the PS3's SYSCON to control FAN speed
- Control FAN Mode: MAX: Set Cobra FAN speed to 0xFF
FAN Tools > Dynamic FAN Control
- Maximum temperature: 60°C: Sets the fan speed dynamically to keep the system at a maximum temperature of 60°C
- Maximum Temperature: 65°C: Sets the fan speed dynamically to keep the system at a maximum temperature of 65°C
- Maximum Temperature: 70°C: Sets the fan speed dynamically to keep the system at a maximum temperature of 70°C
- Maximum Temperature: 75°C: Sets the fan speed dynamically to keep the system at a maximum temperature of 75°C
WARNING: Some PS3 cannot reach/stay some option temperatures, use with caution
FAN Tools > Manual Speed
- Manual Speed: 40%: Sets the fan speed statically at 40% (0x67)
- Manual Speed: 45%: Sets the fan speed statically at 45% (0x75)
- Manual Speed: 50%: Sets the fan speed statically at 50% (0x80)
- Manual Speed: 55%: Sets the fan speed statically at 55% (0x8E)
- Manual Speed: 60%: Sets the fan speed statically at 60% (0x9B)
- Manual Speed: 65%: Sets the fan speed statically at 65% (0xA8)
- Manual Speed: 70%: Sets the fan speed statically at 70% (0xB5)
- Manual Speed: 75%: Sets the fan speed statically at 75% (0xC0)
- Manual Speed: 80%: Sets the fan speed statically at 80% (0xCE)
- Manual Speed: 85%: Sets the fan speed statically at 85% (0xDA)
- Manual Speed: 90%: Sets the fan speed statically at 90% (0xE7)
- Manual Speed: 95%: Sets the fan speed statically at 95% (0xF4)
WARNING: The chosen speed will be static, it will not be changed at any time automatically
Cobra Tools > FAN Tools > PS2 FAN
- PS2 Fan Mode: DISABLED: Disables Control FAN on PS2 game
- PS2 Fan Mode: SYSCON: Allows the PS3's SYSCON to control FAN speed on PS2 game
- PS2 Fan Mode: 40%: Sets FAN speed to 0x66 on PS2 game
- PS2 Fan Mode: 50%: Sets FAN speed to 0x80 on PS2 game
- PS2 Fan Mode: 60%: Sets FAN speed to 0x9A on PS2 game
- PS2 Fan Mode: 70%: Sets FAN speed to 0xB4 on PS2 game
- PS2 Fan Mode: 80%: Sets FAN speed to 0xCE on PS2 game
- PS2 Fan Mode: 90%: Sets FAN speed to 0xE8 on PS2 game
WARNING: There is no Control FAN in a PS2 game, select with caution
QA Tools
- Check QA Flags: Check if QA flags are enabled or disabled
- Enable QA Flags (Normal): Enables QA Flags through "Network Settings"
- Enable QA Flags (Advanced): Enables advanced QA Flags through "Network Settings"
- Disable QA Flags: Disables QA Flags through "Network Settings"
Cobra Tools
- Cobra Information: Shows current Cobra information
- Toggle Plugins: Enables/disables Cobra plugins from /dev_hdd0/boot_plugins.txt
- Toggle Gameboot: Enables or disables original PLAYSTATION 3 gameboot when starting a game or application
- Toggle Coldboot: Toggles between custom/original coldboot.raf
- Toggle Coldboot Animation: Enables or disables the coldboot animation and sound on boot
- Toggle XMB Waves: Enables/disables FW 2.70 waves
- Toggle External Cobra: Enables/disables loading external Cobra payloads and plugins from /dev_usb000
- Toggle OFW Mode on Boot: Toggles between CFW syscalls on boot: enabled, disabled and partial
- Toggle Cobra Version: Toggles between release and debug versions (reboot is required)
- Toggle Cobra: Enables or disables Cobra (reboot is required)
PSN Tools
- Disable Syscalls: Disables syscalls and remove history files
- Create Syscalls: Create syscalls 6, 7, 8, 9, 10, 11, 15 and 35
- Toggle PSN Protection: Enables/blocks PSN login when syscalls are enabled
- Spoof TargetID: Spoofs current TargetID in LV2 with EID5's TargetID
- Spoof IDPS: Spoofs IDPS in LV2 with a valid IDPS from "/dev_usb/IDPS.txt"
- Spoof PSID: Spoofs PSID in LV2 with a valid PSID from "/dev_usb/PSID.txt"
- Spoof MAC: Spoofs MAC in LV1 with a valid MAC from "/dev_usb/MAC.txt"
Account Tools
- Show accountID: Shows current user's accountID
- Create accountID: Creates a fake accountID for current user's in xRegistry
- Overwrite accountID: Overwrites current user's accountID with a fake one in xRegistry
- Remove accountID: Removes current user's accountID in xRegistry
- Activate account: Creates act.dat file in the current local account
- Backup activation file: Creates a backup of act.dat to /dev_usb or /dev_hdd0
- Disable account: Deletes current user's activation file act.dat permanently
- Create license: Creates RIF licenses from RAP files from "x:\exdata"
- Import Licenses to rap.bin: Imports rap licenses from /dev_hdd0/exdata or /dev_usb/exdata to rap.bin file
- Export Licenses from rap.bin: Exports rap licenses from rap.bin file to /dev_hdd0/exdata or /dev_usb/exdata
- Convert savedata: Converts savedata from "/dev_usbXXX/PS3/SAVEDATA" to your own savedata
- Toggle TrophyUnlocker: Enables/disables TrophyUnlocker INGAME plugin
- Toggle Hidden Trophy Info: Enables or disables hidden trophies title, details and icon in XMB/INGAME
Dump Tools
-
View Log: http://localhost/dev_hdd0/tmp/cfw_settings.log (webMAN MOD is required for this
function) - Clean Log File: Resets /dev_hdd0/tmp/cfw_settings.log file
- Dump IDs: Saves IDPS, PSID, MAC and act.dat to /dev_hdd0/tmp or /dev_usb
- Export RAP license: Exports the RAP license from the RIF licenses installed in the current user account in /dev_usb/exdata
- Dump LV2: Dumps LV2 to /dev_usb or /dev_hdd0/tmp
- Dump LV1: Dumps LV1 to /dev_usb or /dev_hdd0/tmp
- Dump Flash: Dumps NOR/NAND Flash to dev_hdd0/tmp or /dev_usb
- Dump RAM: Dumps RAM to /dev_usb or /dev_hdd0/tmp
- Dump SYSROM: Dumps SYSROM to /dev_usb or /dev_hdd0/tmp
-
Dump EEPROM: Dumps 256 bytes of EEPROM data from offsets 0x2F00, 0x3000, 0x48000,
0x48800, 0x48C00 and 0x48D00 in /dev_usb or /dev_hdd0/tmp - Dump ERK: Dumps eid_root_key to /dev_usb or /dev_hdd0/tmp
- Dump METLDR: Dumps decrypted metldr to /dev_usb or /dev_hdd0/tmp
- Dump SYSCON Error Log: Dumps current SYSCON error log in /dev_usb or /dev_hdd0/tmp
- Dump Token Seed: Dumps current token seed in /dev_usb or /dev_hdd0/tmp
- Log KLicense usage: Saves filename and klicensee to log file
- Log Secure File ID usage: Writes save data name and file ID key to log file
- Dump Disc Hash Key: Retrieves disc hash key from an ORIGINAL game disc
CEX2DEX Tools
- Show Information: Shows current Firmware, Kernel, TargetID, VSH, XMB Host and Debug Settings
- Check TargetID: Checks current TargetID from EID0 and EID5
- Convert to CEX: Converts PS3 to CEX/RETAIL with eid_root_key from /dev_usb or /dev_hdd0
- Convert to DEX: Converts PS3 to DEX/DEBUG with eid_root_key from /dev_usb or /dev_hdd0
- Swap Kernel: Swaps between CEX and DEX Kernels
- Toggle XMB Mode: Switch between CEX and DEX XMB
- Toggle Host Information on XMB: Enables/disables host information on XMB
- Toggle Debug Settings: Switch between CEX and DEX Debug settings
Rebug Tools
- LV1 Peek/Poke Support: Patch unused LV1 syscalls 182 and 183
- LV2 Memory Protection: Patch Shutdown on LV2 modification
- HTAB Mapping With Write Protection: Enable or Disable protected HTAB mapping
- Access to all INDI Info Manager Services: Enable or Disable INDI access
- Update Manager EEPROM Write Access: Patch Update Manager access to EEPROM
- Dispatch Manager Access: Patch Dispatch Manager access to all services
- Allow ENCDEC IOCTL Command 0x85: Enable IOCTL Command 0x85
- System Manager Ability Mask of GameOS: Allow access to all system manager services
- Extract all PKG Types: Allow Update Manager to extract all PKG types
- Full Access for Repo Nodes in Any LPAR: Allow create, modify, delete for repository nodes
- LV1 Full Access to MFC_SR1 SPE Register: Allow all-bit access to the register
- LV1 Access to set Data Break Points: Enable LV1 access with lv1_set_dabr()
- LV1 Access to GPU GART Memory: Allow LV1 to use 4KB IO page size
- Storage Manager ENCDEC Keys Access: Allow Storage Manager to clear ENCDEC keys
- Skip all ACL Checks: Enable skipping of ACL checks for all storage devices
- Initial GuestOS Loader: Enable GuestOS mode 1 for GameOS
OtherOS Tools
- Install OtherOS: Will resize VFLASH/NAND regions and install petitboot
- Set OtherOS Boot Flag: Reboots the PS3 and boot OtherOS
- Set GameOS Boot Flag: Fixes issues loading PS2 games when OtherOS boot flag is set
Service Tools
- Display Applicable Version: Displays minimum downgrade version
- Show BD Drive Information: Shows current BD Drive Information
- Check File System: Reboots and allows you to check and repair filesystem
- Rebuild Database: Reboots with Database rebuilding flag set
- Toggle Recovery Mode: Reboot to Recovery Mode (Not supported on NAND models!)
Service Tools > Advanced Service Tools
- RSOD fix: Re-initialize VTRM-Region to attempt to fix RSOD
- Toggle Factory Service Mode: Enter/Exit Factory Service Mode (DON'T INSTALL CFW ON FSM)
- Remarry Bluray Drive: Requires: Enter to FSM and copy "eid_root_key" to /dev_usb
- Toggle HDD Space: Unlocks/restores 8% extra total space on the PS3 internal HDD
- Show ROS Bank: Shows active ROS bank
- Check 8th SPE: Checks if 8th SPE is currently enabled or disabled
- Toggle 8th SPE: Enables/disables 8th SPE
- Enable VSH Debugging: Enables debugging vsh.self
- Enable Support for DEX OFW: Enables OFW DEX installation on converted PS3 Retail
- Disable Support for DEX OFW: Disables OFW DEX installation on converted PS3 Retail
- Enable Support for DECR MFW: Enables MFW DECR installation on converted PS3 Retail
- Disable Support for DECR MFW: Disables MFW DECR installation on converted PS3 Retail
- Load LV2 kernel: Loads lv2_kernel.self file from /dev_usb000 or /dev_flash
Service Tools > Led Tools
- Off: Turns off the PS3's power LED
- Red (Static): Sets the PS3's power LED to static red
- Green (Static): Sets the PS3's power LED to static green
- Yellow (Static): Sets the PS3's power LED to static yellow
- Red (Slow blink): Sets the PS3's power LED to slow blink red
- Green (Slow blink): Sets the PS3's power LED to slow blink green
- Yellow (Slow blink): Sets the PS3's power LED to slow blink yellow
- Red (Fast blink): Sets the PS3's power LED to fast blink red
- Green (Fast blink): Sets the PS3's power LED to fast blink green
- Yellow (Fast blink): Sets the PS3's power LED to fast blink yellow
- Yellow + Green (Fast blink): Sets the PS3's power LED to fast blink yellow + green
- Yellow + Red (Fast blink): Sets the PS3's power LED to fast blink yellow + red
- Yellow + Green (Slow blink): Sets the PS3's power LED to slow blink yellow + green
- Yellow + Red (Slow blink): Sets the PS3's power LED to slow blink yellow + red
- Rainbow Mode: Sets the PS3's power LED to rainbow mode
- Special Mode 1: Sets the PS3's power LED to special mode 1
- Special Mode 2: Sets the PS3's power LED to special mode 2
Updates
- Show XAI Version: Shows the current version of xai_plugin
- xai_plugin: Downloads the latest update of xai plugin
- CFW 4.92 Fixes: Download fixes for modules ONLY for CFW 4.92 Evilnat
- PS2 EMUs Cobra: Downloads the latest update of PS1/PS2 EMUs Cobra
- PS2 EMUs MOD: Downloads the latest update of PS1/PS2 EMUs MOD by mrjaredbeta and kozarovv
-
RSX Overclock
With Cobra 8.5 you can overclock RSX's Core and Memory frequencies
Create a file called overclock.txt, and put the frequencies you want to use
For example, I want to overclock RSX's core to 600MHz and memory to 750MHz, this is how it would be in the file, first line is for Core and the second one for Memory:
This will overclock RSX's Core to 600MHz and Memory to 750MHz
Caution
Values must be multiple of 50 for Core and multiple of 25 for Memory
Min value: 300MHz
Max value: 1050MHz
Once you have completed the previous step, you just need to copy the overclock.txt file to the root of a USB device in FAT32 format or to the internal hard drive of the PS3
This is what the routes would be like:
PC USB: X:\overclock.txt
PS3 USB: /dev_usb000/overclock.txt
PS3 HDD: /dev_hdd0/overclock.txt
Caution
For USB, the port closest to the BD reader should be used (/dev_usb000)
Just remember to only use numbers, do not use letters or other characters
Note
Start or restart the PS3 so that Cobra loads the file, once the XMB has finished loading, go to the Network column and choose the option [Custom Firmware Tools > Overclock Tools > Check GPU/VRAM clock speed]
Note
Cobra will check if /dev_usb000 is mounted and it will overclock the PS3. If you turn on the PS3 without a USB device and you connect one after a while, Cobra will overclock
Overclocking from USB has priority over HDD, if the PS3 crashes with the file on the internal HDD, you can use the USB with smaller values to boot the PS3 and delete the file
Default values are 500MHz for Core and 650MHz for Memory
-
Many thanks to @kozarov and @mrjaredbeta for all the work and research they have done, all of this is thanks to them
Only for ps2_netemu.self, to set manual mode FAN speed, in the main menu press Square and:
- LEFT DPAD = -1%
- RIGHT DPAD = +1%
- L1 = -5%
- R1 = +5%
In manual mode, FAN speed is limited to a 21% - 80% range. Trying to go higher does nothing, trying to go lower re-enables Syscon Mode automatic FAN control
WARNING! Keeping your FAN speed in the range of 21%-30% for a longer time can be harmful to the PS3!
Remember that when the FAN is set to manual speed, it will not ramp up if the PS3 is overheating!
Use the 21%-30% range only if you are 100% sure that your PS3 is not having overheating issues
To set a new automatic FAN speed mode, in the main menu press Square and:
- START
This mode has 4 different settings available (toggle them through the next START + SQUARE presses)
Modes are 60C/65C/70C/75C. This is the maximum temperature that the new auto mode will try to maintain by changing the current FAN speed
At first, the FAN speed can be a little high, but give it 2-3 minutes and it will find the lowest FAN speed that ensures the selected temperature is maintained
When the mode is 75C, the next press of START + SQUARE will revert to syscon mode
-
Savegames conversion tutorial
WARNING: This option will overwrite your current savedata in dev_usbXXX, use it with caution
- Download someone else's savegame for your game of your choice
- Put the savedata in your pendrive in "X:\PS3\SAVEDATA" (pendrive must be in FAT32)
- Put in the pendrive in the PS3
- Select Network Tab > [★ Custom Firmware Tools] > Account Tools > Convert Savedata
- Wait until the conversion finishes
- Once finished, copy your converted savedata throught XMB "Saved Data Utility (PS3)"
- Launch your game and load your new savedata
.Creation of act.dat tutorial
WARNING: The accountID is linked to savedata and trophies, so, if your current user already have a valid accountID and you overwrite it, you will be unable to use your trophies and savedata on that account until you restore the original accountID in xRegistry.sys.
I recommend to use an empty account without trophies and savedata or an account without accountID.
To create a fake act.dat, Cobra 8.5 must be enabled, and your PS3 must have at least one account with a valid accountID and launch a game that requires a RIF/RAP license file.
Cobra will search a valid accountID in all existing accounts and create act.dat while the game is launched through the XMB. If no accountID is found, act.dat will not be created.
You can create a fake accountID (like reactPSN), to do this go to Network > ★ Custom Firmware Tools > Account Tools and choose between "Create accountID" or "Overwrite accountID" (Be careful about the last option because if you already have a fake/real accountID it will be overwritten). It is recommended to use these options in an account that does not have an ID. The PS3 will restart if everything went well.
The tutorial would be the following:
- Download your purchased PSN game from PS Store
- Put game RAP file in "X:\exdata" or "/dev_hdd0/exdata"
- Launch your purchased PSN game
- Cobra will check if any of your PS3 accounts have accountID
- Faked act.dat will be created while the game is launching
If none of your accounts have a valid accountID you will need to create it. To do this log into the local PS3 account where you want to create the accountID. You can see if your current local account has an accountID choosing Network Tab > [★ Custom Firmware Tools] > Account Tools > Show accountID.
To create a faked act.dat do the following:
- Make sure Cobra 8.5 is enabled
- Select Network Tab > [★ Custom Firmware Tools] > Account Tools > Create accountID
- Select Network Tab > [★ Custom Firmware Tools] > Account Tools > Activate account
- Launch your purchased PSN game
- Faked act.dat will be created while the game is launching
.
Block/Unblock PSN log in
This method is developed by @DeViL303, it will only work with Cobra enabled, Cobra will block log in on PSN/SEN while the CFW syscalls are enabled, to enable it again you need to disable CFW syscalls completely (you can do it with webMAN MOD, psnpatch, SEN Enabler, etc…)
If you want to enable/disable this feature, simply use the option [★ Custom Firmware Tools] > PSN Tools > Toggle PSN Protection and you will toggle PSN protection to log in or not
-
There is some information that need to be aware, are the following:
- The accountID is directly linked to savedatas and trophies data. If you have trophies or savedatas in
your current local account, THEY WILL BE CORRUPTED after setting FAKE accountID. To fix this, copy the
savedata to the root of a USB, convert it and then copy it back through XMB in 'Game' tab. To fix
corruption in trophies you need to delete it/them. Is highly recommended to do this on a local account
without trophies/savedatas
- As default you can select custom FAN speed when in a PS2 game, if you replace PS2 EMU with an old one, the FAN speed is constant when in a PS2 game, BE CAREFUL while selecting modes because it will not
change after the PS2 game is loaded. It is also static when choosing a mode in the "Manual Speed"
option. All current speeds in xai_plugin must keeping a correct temperature in CPU and RSX
- Do not rename vsh.self manually and ALWAYS use the option for it in xai_plugin, it can cause that the
PS3 can't load the XMB when you have full version of webMAN MOD, DEX Kernel and CEX vsh.self. The
CFW has a protection to avoid this
- If you want to install OtherOS on PS3's internal HDD you first need to go to Recovery Menu and select
[Restore PS3 System], this will format the HDD and create a partition for OtherOS. Remember to make
a backup of all your data before
-
DON'T TRY TO SWAP KERNEL WHEN YOU HAVE LOADED AN EXTERNAL KERNEL FROM USB/FLASH!!
This can cause brick and you may need a hardware flasher to repair the PS3
- You can unload Cobra/plugins if you have any problem with them, for this you need to go to Recovery
Menu and then reboot the PS3, this will disable both
- It is recommended to ALWAYS activate the QA Flags, it is very important, it allows you to install CFW
from versions prior to the one installed and also avoids issues - If you can't dump or make an ISO of your game disc in multiMAN, go to mmCM tab and select [Switch
to multiMAN mode], this will reboot multiMAN and now you will be able to dump/make an ISO of your
disc
- OtherOS on PS3 with NAND is very dangerous if you don't know what you are doing (for example using
the wrong image to install petitboot), it can cause brick and the only way to repair it is with a hardware
flasher. PLEASE USE IT WITH CAUTION!
- Make sure you are installing the correct image for OtherOS. xai_plugin tells you what image need to be
installed too. For NAND you need dtbImage.ps3.bin.minimal and for NOR dtbImage.ps3.bin. If the
wrong image is installed, it can brick on NAND, needing a HW flasher to repair it, in NOR you can fix it
formatting the HDD
- If your PS3 has a CFW noBD (in any of its variants) and latest versión of webMAN MOD (1.47.42 at the
time of writing this guide), there are chances that the PS3 can't read an external devices (/dev_usb000,
/dev_usb001, …) in the next two minutes. To fix this, go to webMAN Setup page, click on webMAN
MOD Setup and check noBD patch and reboot the PS3, now it may read external devices
- The option Check GPU/VRAM clock speed now should work fine without crashes
- In PEX and D-PEX versión some of the debug options pressing triangle are missing because a/some
file/s hasn't been ported yet (needs a lot of research with XMB layouts, I have patched some of them
but others not, for example, trophies entries are messed up), those options are (maybe more):- ★ Check
- ★ Owner Information
- ★ Cancel Purchase
- ★ Performance Bar
- ★ No Memory Limit
- If you have OtherOS/Petitboot installed it can created issues while loading PS2 games or rebooting the LV2, to fix this you need to use the option [OtherOS Tools > Set GameOS Boot Flag], now you can use the PS3 as always
- The CFW is meticulously tested and no bugs have been found, but that does not mean that there are
any or that it fails at any specific time. If that happens, contact me as soon as possible so that I can
solve it.
- It is recommended to use webMAN MOD, especially with some PSX games that have libCrypt (Dino Crisis for example), and for PS2 games
- The accountID is directly linked to savedatas and trophies data. If you have trophies or savedatas in
-
Credits and Acknowledgment
Credits to Team Rebug, Team Cobra, @mysis, @Joonie, @habib, @aldostools, @haxxxen, @DeViL303, @zecoxao, @3141card, @Berion, @kakaroto, @KW, @naehrwert, @flatz, @DeanK, @Rogero, @Estwald, @sguerrini97, @TheRouLetteBoi, @bucanero, @kozarovv, @mrjaredbeta, @aomsin2526 and anyone who has contributed to the PS3 scene.
Thanks to @DeViL303, @Berion, @Brandon Stump, @jcorrea, @nhie07, @NSC-Modz, @LuanTeles, @thejavigames, @raidriar, @xiaoyang, @Zwei, @haxxxen, @RetroFan_90, @SpyroMancer, @patricksouza472, @MrYadro, @CFW-Us3r, @Andrio, @KcrPLo, @nur @Rakhmadi Rajab, @Lwiz, @Sheireen, @TheWizWiki, @A79266251, @EimGdt, @Kyan_dudl, @hackzy01, @kernaltrap, @wintr, @Paweł, @ORION_games_, @Mikeclan_, @MlK3YY_, @XxalexXrey, @MurilloMadriz, @ReinSertt , @vitormoraes1903, @Pusch3l, TheNavySquidALT, SHADOWBULLET707 and all who helped me testing the CFW.
If I forgot someone, I apologize, there are many people in the PS3 scene and you are many people who
have helped me to test the CFW.
Download: MEDIAFIRE FOLDER WITH ALL 4.92.2 CFW VERSIONS JUNE 08TH, 2025
Download: MEGA FOLDER WITH ALL 4.92.2 CFW VERSIONS JUNE 08TH, 2025
Download: MEGA FOLDER WITH ALL 4.92.2 CFW VERSIONS JUNE 08TH, 2025
Download
- CFW 4.92.2 Evilnat Cobra 8.5 [CEX]
- CFW 4.92.2 Evilnat Cobra 8.5 [PEX]
- CFW 4.92.2 Evilnat Cobra 8.5 [D-PEX]
Source Code
Old versions
4.91.2 BETA 17:
+ Patched DEX kernel to bypass ambulance beep brick (DEX kernel loaded with CEX TargetID)
+ Variants PEX and D-PEX only availables atm (Due to lack of time to test every variant)
4.91.2 BETA 12:
+Added latest PS1 and PS2 emulators modded by @mrjaredbeta and @kozarovv (good work guys!) (link)
4.91.2 BETA10:
+ Added Extended Download Plugin by DeViL303
+ Reverted CEX game_ext_plugin.sprx instead DEX to avoid issues with PS Plus
4.91.2 BETA9:
+ Fixed external kernel check when using the option [Swap Kernel] in PEX/D-PEX
+ Fixed random blackscreen while enabling QA Flags
+ Updated advanced QA Flags (thanks to Zecoxao and Soul)
+ Fixed 0x800299D2 error code and blackscreen (Blu-ray/DVD playback in CEX/DEX mode)
+ Updated [Toogle OFW Mode on Boot] option to allow to restore syscalls automatically
+ Added PlayStation Home (by DeViL303)
+ Added custom eula_cddb_plugin.rco (by DeViL303)
4.91.2 BETA8:
+ Updated Cobra payload loading at different offset in LV2 Kernel
+ Re-compiled LV2 Kernel
+ Re-compiled Cobra stage2
+ Added LV2 Kernel external load check when using the option [CEX2DEX Tools > Swap Kernel]
+ Added MD5 check for dtbImage.ps3.bin and dtbImage.ps3.bin.minimal files for OtherOS
+ [XAI] Added new option to toggle between original libaudio.sprx and patched with third BT headset suuport (may fail with some)
+ [XAI] Re-enabled [Toggle External Cobra] option in xai_plugin
4.91.2 BETA7:
+ Re-compiled LV2 Kernel
+ Re-compiled Cobra stage2
+ Added support for third party BT headset
4.91.2 BETA5/6:
+ Fixed error 0x8002F155 while installing PUP
+ Fixed FAN max speed, now it shows 0xFF and 100%
+ Temporary disabled "Load External Cobra"
+ Reverted code for cobra in Kernel
4.91.2 BETA4:
+ Added option to enable full QA Flags
+ Fixed xai_plugin description for IDPS/PSID/MAC spoofing from "/dev_hdd0/tmp"
+ Added TTY output in socat using Cobra Debug
4.91.2 BETA3:
- New kernel/Cobra payload build
- Fixed random freezes/crashes (Tested for several hours thanks to @ktemanuel)
- Cobra updated to 8.5
- Fixed blackscreen/freeze while launching PS3/PSP/PSX ISOS
- Fixed freeze while installing PKGs from external exFAT/NTFS device
- Reverted patch that caused problems while playing BD movies
- Updated Trophy Unlocker to version 1.1
- Created [noBD] variants for PEX and D-PEX
- [COBRA] Added support for REDUMP ISOS decryption on-the-fly
- [COBRA/XAI] Opcode to toggle coldboot animation
- [COBRA/XAI] Opcode to toggle epilepsy warning
- [COBRA/XAI] Opcode to toggle gameboot animation and sound
- [COBRA/XAI] Opcode to toggle hidden trophy info
- [COBRA/XAI] Target Manager fix for DEX
- [COBRA/XAI] Added cellUsb000_mount_symbol
- [COBRA/XAI] Added usb_flag and no_cobra flags
- [COBRA/XAI] Option to toggle PS2 disc icon (ISO/BIN. ENC) in XMB
- [COBRA/XAI] Enabled hidden trophy's title/details/icon in XMB
- [COBRA/XAI] Enabled hidden trophy's title/details/icon INGAME
+ Patched DEX kernel to bypass ambulance beep brick (DEX kernel loaded with CEX TargetID)
+ Variants PEX and D-PEX only availables atm (Due to lack of time to test every variant)
4.91.2 BETA 12:
+Added latest PS1 and PS2 emulators modded by @mrjaredbeta and @kozarovv (good work guys!) (link)
4.91.2 BETA10:
+ Added Extended Download Plugin by DeViL303
+ Reverted CEX game_ext_plugin.sprx instead DEX to avoid issues with PS Plus
4.91.2 BETA9:
+ Fixed external kernel check when using the option [Swap Kernel] in PEX/D-PEX
+ Fixed random blackscreen while enabling QA Flags
+ Updated advanced QA Flags (thanks to Zecoxao and Soul)
+ Fixed 0x800299D2 error code and blackscreen (Blu-ray/DVD playback in CEX/DEX mode)
+ Updated [Toogle OFW Mode on Boot] option to allow to restore syscalls automatically
+ Added PlayStation Home (by DeViL303)
+ Added custom eula_cddb_plugin.rco (by DeViL303)
4.91.2 BETA8:
+ Updated Cobra payload loading at different offset in LV2 Kernel
+ Re-compiled LV2 Kernel
+ Re-compiled Cobra stage2
+ Added LV2 Kernel external load check when using the option [CEX2DEX Tools > Swap Kernel]
+ Added MD5 check for dtbImage.ps3.bin and dtbImage.ps3.bin.minimal files for OtherOS
+ [XAI] Added new option to toggle between original libaudio.sprx and patched with third BT headset suuport (may fail with some)
+ [XAI] Re-enabled [Toggle External Cobra] option in xai_plugin
4.91.2 BETA7:
+ Re-compiled LV2 Kernel
+ Re-compiled Cobra stage2
+ Added support for third party BT headset
4.91.2 BETA5/6:
+ Fixed error 0x8002F155 while installing PUP
+ Fixed FAN max speed, now it shows 0xFF and 100%
+ Temporary disabled "Load External Cobra"
+ Reverted code for cobra in Kernel
4.91.2 BETA4:
+ Added option to enable full QA Flags
+ Fixed xai_plugin description for IDPS/PSID/MAC spoofing from "/dev_hdd0/tmp"
+ Added TTY output in socat using Cobra Debug
4.91.2 BETA3:
- New kernel/Cobra payload build
- Fixed random freezes/crashes (Tested for several hours thanks to @ktemanuel)
- Cobra updated to 8.5
- Fixed blackscreen/freeze while launching PS3/PSP/PSX ISOS
- Fixed freeze while installing PKGs from external exFAT/NTFS device
- Reverted patch that caused problems while playing BD movies
- Updated Trophy Unlocker to version 1.1
- Created [noBD] variants for PEX and D-PEX
- [COBRA] Added support for REDUMP ISOS decryption on-the-fly
- [COBRA/XAI] Opcode to toggle coldboot animation
- [COBRA/XAI] Opcode to toggle epilepsy warning
- [COBRA/XAI] Opcode to toggle gameboot animation and sound
- [COBRA/XAI] Opcode to toggle hidden trophy info
- [COBRA/XAI] Target Manager fix for DEX
- [COBRA/XAI] Added cellUsb000_mount_symbol
- [COBRA/XAI] Added usb_flag and no_cobra flags
- [COBRA/XAI] Option to toggle PS2 disc icon (ISO/BIN. ENC) in XMB
- [COBRA/XAI] Enabled hidden trophy's title/details/icon in XMB
- [COBRA/XAI] Enabled hidden trophy's title/details/icon INGAME
Last edited:
