As we have been telling you since last October developer @Evilnat has been working on an epic PS3 Custom Firmware (CFW) with the upcoming release of 4.89.3 Evilnat CFW. Back in October we were detailing some of the changes coming to the custom xai_plugin that, The custom changes provides many advance features at your fingertips right from the convenience of the XMB, Since that time the developer has added more feature's to the xai_plugin, a plugin that comes embedded in Evilnat's firmware's. On his personal twitter the developer has detailed some of those new functions also many of those can be seen in the official discussion thread for 4.89 Evilnat CFW here as well.
@Evilnat has been working on some big feature's and bringing back an old feature with a new twist!!! Many people know about Team Rebug and the line of cfw's they have created on the PS3, the team is no longer active and one of it's signature PS3 Custom Firmware was Rebug REX, REX was a hybrid firmware that used the Retail (CEX) firmware's and also merged the Debug (DEX) firmware to create REX CFW. This was the preferred CFW type for many. "Why has there not been a REX style CFW since Rebug REX 4.84?" 4.84 was the last publicly available 4.84 DEX. Without a higher version of DEX firmware available there was no possibility for a hybrid of retail & debug firmware. So that got cfw dev @Evilnat thinking about other solutions and the dev wondered if he could just port 4.84 DEX firmware to 4.89.

The challenge was taken on and the developer was able to successfully port 4.84 DEX to 4.89 firmware, so this means that we can once again have a hybrid of CEX and DEX firmware for the PS3 like Rebug REX, but soon in 4.89. Now this can not be called REX (using a ported firmware) so the developer has opted for the name PEX ("P" representing the Porting of 4.84 DEX) . To quote "PEX means Ported dEX (I have used 'D' in honor to Rebug), because I have ported Kernel and some modules from 4.84 DEX OFW to 4.89." There has never been a need to port a firmware to a higher version like this, so this was a first in PS3 Custom Firmware release's.
The developer is prepping for a release soon, he hopes to be sometime this week, but you never know what can arise so take any developer's deadlines lightly. This has been a update from 4.89.2 to 4.89.3 that has been in development for several month's now with new features being detailed along the journey and we have a developer like many other's in the scene putting in tons of work,. The developer has been testing and having a BETA phase before the official release, as this firmware release has many layer's of new features and additions. Below are just some of the change's that have been detailed and not even all those have been listed. This is a HUGE ps3 Custom firmware release that is upcoming.....
Stay Tuned as developer's @Evilnat could be dropping this Custom Firmware at any moment, Until then lets take a look at what are some of the things we can expect .
Stay Tuned as developer's @Evilnat could be dropping this Custom Firmware at any moment, Until then lets take a look at what are some of the things we can expect .
-
Cobra payload updated to v8.4
.New
- Support for New PS3 Dynarec (via ps3mapi change's), Cobra now Supports the changes made by @OsirisX for PicoDrive that allows for full-speed Sega 32x emulation. With Cobra v8.4 (or MAMBA v8.4) and using RetroArch PS3 (Unofficial - CE) with latest PicoDrive update (from CE verision) (See more information here & also here)
-
Cobra Improvements to PS1/PS2 :
- Improper PSX region patching
- Cobra opcode to bypass automatic detection of video mode and force specific video mode.
- Note: there could be other changes included in the Cobra v8.4 update once released
- Cobra is a special payload injected into the firmware that expands the feature set of a CFW (see spoiler's below). Originally the payload was developed and sold by Team Cobra with the CobraUSB device injecting the payload after every boot, The product was eventually discontinued somewhere around the ps3 official firmware 4.21 release .Later on with community pressure, the project was eventually made Open Source and the former-lead developer of CobraUSB updated to v7 w/ clean source and that dev even freed the payload from the USB and injecting directly into CFW for the first time with notes for future cfw devs, with what we know as "Cobra CFW". today, since that time the community has adopted and made many changes to the payload..
Cobra v1.0 - v6.0 Was the CobraUSB Project (discontinued / made Open Source)
Cobra v7.0 -v8.4 - Now a Community Project Since being made Open Source and added directly into CFW.
Overview of features from Cobra
Cobra Payload Change's (by Community developer's v7.0 -8.4)General Overview (see spoiler below for changelog's)
- PRX plugins at boot time (sprx) - (Run in background)
- Kernel Plugin Support
- Game ISO Support: PS1/PS2/PS3/PSP/
- Video ISO Support DVD/BluRay
- Blu Ray Movie region free functionality
- Split ISO support on FAT32 drives (4GB limitation, split ISO do not need merged play like unsplitted ISO's)
- Network Support: PS1/PS3/DVD/BluRay in ISO and Remote Installation of PKGs
- NTFS HDD Support (prepNTFS, or multiMAN Required to scan contents)
- PS2 ISO Support non-BC (full software emulsion) Consoles
- PSP ISO SUpport on all PS3 (using Cobra Launcher, not all games work)
- PS1/PS2 Improvements
- Improper PSX region patching
- Cobra opcode to bypass automatic detection of video mode and force specific video mode
- PS3MAPI support, allows you to attach process on both CEX/DEX via its own API app.
- Optical media (Burned/Burnt) support (PS1/PS3 Games for all Models)
- These are just some of the features Cobra brings to your CFW (see full changes below in the spoiler since the community took over the project
V8.3 Changelog
• Added cellUsb000 symbol and data (by haxxxen and aldostools)
• Load external stage2/plugins from USB device (by haxxxen and aldostools)
• Failsafe Cobra stage2 (by bguerville/aldo)
• Restore CFW Syscalls without reboot just entering to 'Settings > System Update' on XMB (by aldo)
• Integrated Dynamic Control FAN (to control fan when webMAN is unloaded) (by aldo/Evilnat)
• Support Photo GUI integration with webMAN MOD (mount games from 'Photo' column) (by aldo/DeViL303)
• Get/Set FAN speed (by aldo)
• Enable/disable features: Photo GUI, Restore Syscalls (by aldo)
• Opcode to create CFW Syscalls (6, 7, 8, 9, 10, 11, 15, 389, 409) (by aldo)
• Opcode to set fake accountID (by Evilnat)
• Opcode to activate account (act.dat) (by Evilnat)
• Opcode to create license (RIF) (by Evilnat)
• Updated ps3mapi_load_process_modules to load custom modules and system modules (by haxxxen)
• Added ps3mapi_get_process_module_info
• Increased from 24 to 32 the max number of map paths (by aldo)
• Added sm_get_temperature patch in kernel (by Evilnat)
• Added sm_get_fan_policy patch in kernel (by Evilnat)
• Added sm_set_fan_policy patch in kernel (by Evilnat)
• Fixed Control FAN payload, avoids loading previous mode (by Evilnat)
• Disable stage2.bin while Recovery Menu is loaded (by haxxxen)
• Fixed max FAN speed after shutdown (by Evilnat)
• Improve Habib's QA flags code imported by aldostools (by Evilnat)
• Fixed black screen in CFW2OFW converted games (by Evilnat)
• Added sm_ring_buzzer with single_beep, double_beep and triple_beep (by Evilnat)
• Skip license creation (rif) if it already exists (by aldo)
• Added cellFsMkdir symbol (by Evilnat)
• Added constant FAN Speed while a PS2 ISO is launched (by Evilnat)
• Check/Disable/Enable QA Flags (by Evilnat)
• Creation of act.dat while launching a PSN game (by Evilnat)
• Convert someones's else savedata to your own savedata (by Evilnat)
• Block Log In on PSN/SEN when CFW syscalls are enabled (by DeViL303)
Contrributions by developer from v7.0 - 8.2
[ @Joonie 's Changes ]
* Firmware spoofing is disabled due to the changes of PSN Auth since 4.60
* PLS3 patches are removed from modulespatch.c since this is one of those pre-applied patches on 4.xx CFW
* unknown E3 patches are removed to fix an issue with XMB, [Originally found by rancid-0, from his PS3ITA 4.50 COBRA]
* Dual VSH supported for REBUG REX / D-REX CFW, with the proper hash check code was developed by habib and Nzv recently.
* NPDRM Fself fix is no longer used due to improved fself patches hard coded within the firmware modules on REX/D-REX
* Built-in reactPSN feature supported
[ @habib 's changes ]
* Run payload with Kernel privileges
* Boot times speed improved
* PS2 bc and semi bc consoles wont load iso when cobra disable
* Stage0 and stage0 base are merged, (Optimization on stage0 and stage1)
* Syscall 11 is added to support full lv1 peek.
* Syscall 15 is added to allow execution of any lv2 internal function.
* Allow Syscall 11 to gain full access to syscall 6/7/9/10 to prevent modification from homebrews like multiMAN.
* PS2 Launcher is no longer needed due to new codes in storage_ext, now COBRA can behave the same way that VSH does to apply configuration of DS3 controllers.
* PS2 Launcher can still be used, which allows PS2ISO with netemu on backward compatible consoles.
* PS2 Netemu toggle is added for Backward compatible consoles, it is very useful for those units with broken EE/GS chips as well.
* PS2 Netemu can now use decrypted CONFIG, place the game config file in the same game path for ex)
dev_hdd0/PS2ISO/GOW.ISO
dev_hdd0/PS2ISO/GOW.ISO.CONFIG
* HASH calculation algorithm is changed, now it uses static hashes, so the hashes will not be changed unless modules have major changes.
* Stealth extension support to disable Syscall 15
* Allows temporary LV1 peek from syscall 8 when "disabling COBRA" is not used
[ @kokotonix changes ]
* webMAN integration on boot. Also disables external webMAN plugin located in dev_hdd0 (Disabled for REBUG 4.82.1 LITE)
* PSN Patch stealth mode, it remove custom syscall from the ps3
* Homebrew blocker added, when Syscalls are disabled by plugins or homebrews, it will prevent homebrews from being launched, and it will return as 80010006 on XMB.
[ @deank 's changes ]
* Improved map_path, to fix the issue with games like Shadow of Mordor[ @_NzV_ 's changes]
* Permission protection is disabled to increase game compatiblity and full DEX support.[no more issue with Target Manager or CCAPI]
* 80010017 / 8001002B Error fix is added since 4.60, this was developed to prevent issues with games when game disc is inserted in BD Drive.
* LIC.DAT check is patched to fix the issue with launching homebrew since 4.60
* Full burned optical media support for PS3 Games. (CD-R, DVD-R SL/DL, BD-R SL/DL, BD-RE)
* PS3MAPI 1.2.2 support, it is similar feature comparing to CCAPI, but open sourced project and also can unload vsh plugins , attatch process on all type of EBOOT.[ @aldostools 's changes ]
One of those great debugging features.
* Partial disable syscall8 and unhooks all cobra hooks (Part of PS3MAPI)
* Block update from disc
* Improved PSX media type support, now it supports following disc types[ @Alexander 's changes ]
* 2048 // 2352 // 2336 // 2448 *
* Improved Video mode patch with proper region detection
Original COBRA payload was relying on ps1emu's detection method, now COBRA has extra pre-processing that can detect region properly and force apply correct refresh rate depending on the game's region.
(Improved PS3MAPI functions)
* Added PEEK/POKE (LV1/LV2) as PS3MAPI opcodes (syscall8)
* Added option to block access and request access to syscall8 using a key
(also as PS3MAPI opcodes)
* Added temporary disablement of Cobra syscall8 to allow dumpers peek 0x1000 to 0x9800
* BASIC_PLUGIN hash is commented.
* 80010006 Error fix when trying to install a game update with syscall disabled. Fix & Research @Joonie @Alexander @Aldo
* Fixed data corruption if you uninstall game/game update/homebrew with syscall disabled
[ @haxxxen 's changes ]
* Extra patch for PSP SAVE DATA is disabled by default to improve compatibility, however can be toggled by CROSS+R1 when launching PSP launcher.
[@Evilnat 's changes]
* Updated KW's code to search webMAN in flash and load it firstly if it's found in /dev_hdd0, will search in the following paths:
- /dev_flash/vsh/module/webftp_server.sprx
- /dev_flash/ps3ita/webftp_server.sprx
- /dev_flash/webman/webftp_server.sprx
- /dev_flash/dragon/web.sprx
Some Additions to xai_plugin in 4.89.3 (Features accessed directly on the XMB)
.[Convert to CEX/DEX] - Convert your PS3 to DEX/CEX
[Swap Kernel] (Swaps between CEX and DEX Kernels from CoreOS)
[Check TargetID].- Check your current TargetID through the XMB
[Dump SYSROM] (Dumps SYSROM on HDD or USB)
[Dump Flash] (Dumps current NOR/NAND)
[Dump SYSROM] (Dumps SYSROM on HDD or USB)
[Dump SYSCON Error Log]
[Dump EEPROM] (more info, how this feature in BETA has lead to new information never before obtained)
[Dump Token Seed]
[Spoof IDPS] (Spoofs IDPS in LV2)
[Spoof PSID] (Spoofs PSID in LV2)
[Check 8th SPE] and [Toggle 8th SPE] added in xai_plugin. Now you can enable or disable 8th SPE (thanks to @notzecoxao)
[Enable VSH Debugging] (Enables debugging vsh.self)
[Toggle Plugins] (Enables/disables Cobra plugins)
[Enable FTP] (Enables FTP server in port 21) / [Disable FTP] (Disables FTP server)
[Enable OtherOS] and [Boot OtherOS]
[Convert savedata] ported PS3 Cobra's function to xai_plugin. Now it works faster and freeing up space in stage2.bin
[Toggle HDD Space] (Unlocks/restores 8% extra total space on the PS3 internal HDD)
Also a number of other firmware change's:
.- Patch to enable [Video Settings] in Settings column in DEX
- Patch to enable "Lock" and "Unlock" trophies in CEX 4.89 like Debug OFW
- Patch,to enable [★ Delete] option in trophies for CEX 4.89 like Debug OFW
- Patch to enable 3rd Party Controller in Recovery Mode (via @haxxxen) :
- Patch to fix Sony XMB bug introduced in 4.89 (OFW) (via @sandungas)
-
Flavor's of 4.89.3 Evilnat CFW (Evilnat will have a variety of flavor's for his CFW Release)
.
Main CFW's
- CEX (A full Retail Firmware)
- DEX (A full Debug Firmware)
-
PEX (A Hybrid of Retail (CEX) / Ported (4.84) Debug (DEX) firmware)
- For installation on Retail (CEX) PS3s
-
D-PEX (A Hybrid of Retail (CEX) / Ported (4.84) Debug (DEX) firmware )
- For installation on Debug/Converted PS3s
CFW variants
- Overclocked (600MHz / 750MHz) - Overclock for CPU / RSX on the PS3 , Requires Seperate PuP for changes, can't be toggled in firmware, Will have to reinstall normal firmware if you want to go back and forth from Overclocking and not Overclocking. There are risk, if your PS3 is prone to heat issues, (More info here on OverClocking PS3)
For Console's with Hardware Issue's ((These hardware issue's will allow console's to boot up to the XMB but not launch any apps or content (even if installed on the HDD) there is a solution by patching out these broken Hardware Components for example if the BD drive is the problem (noBD), once your install and patch out the drive the console begins to work again, (usually its a damaged daughter board) the same thing can happen with the Bluetooth board as well (noBT),
- noBD
- noBT
- noBD + noBT -
Additional information related to CFW on PS3
.-
PS3 CFW vs PS3HEN (Comparing PS3 Exploits)
- This link is a table comparing the two PS3 Exploits CFW and PS3HEN and how the feature's differ. CFW can only install on some models (all FATs and Early Slim Models -- PS3HEN can install on all (other) PS3's)
-
PlayStation 3 FAQ (2023 Edition) WIP
- This is a constant Work in Progress Thread but offer's some of the latest Frequently Asked question in the scene, its being built but contains alot of good information for noobs
ATTENTION -
WARNING >>> The OFFICIAL bguerville's PS3 Toolset that features the FMM (Flash Memory Manager) Tool, that patches your flash with a PS3 exploit (that never has been patched) to allow for a Custom Firmware installation after the use of the toolset for PS3 CFW capable models. IS NOT CURRENTLY ONLINE (but plans to come back), there are dangerous incomplete imposter''s some call clones or mirror's but they are just dangerous imposter's using a partial code from an early incomplete version someone reversed partially and added own changes and since has been passed around to a lower level of modder's who been propping up the incomplete dangerous version online folling user's into using it. Some people will able to use and not have conflict but the problem is there is many times when you can use it and have a situation where the protections are removed to make it "work" and it ends up bricking your console and you need to get a hardware flasher to recover your now paper weight bricked PS3. So hence the strong warning we have given , So beware, PS3HEN is not as feature rich as CFW but for most user's and even advance user's it does the job very well for 99% of most of your needs, see the chart above for more information.
- What is the current status of the official PS3 Toolset? The last we heard from the creator of the toolset bgierville, that the project has had plans to go back online and the project was not canceled, This was last month we were told, we were told no timetable but just that its coming back..
- The only places where you will find official information directly about bgtoolset (bguerville's ps3 toolset) is @ ps3xploit.me & psx-place.com . Beware ps3xploit.me is the only legitimate ps3xploit website. (other somain's have been grabbed by imposter's with incomplete and dangerous tools)
-
PS3 CFW vs PS3HEN (Comparing PS3 Exploits)
- Developer's Twiiter https://twitter.com/xXEvilnatXx
- Evilnat's (4.89 CFW) Release Thread: https://www.psx-place.com/threads.....
4.89.3 Feature Request Thread: https://www.psx-place.com/threads/c....
Please be patient as development wraps up and a release is prepared,
note not all feature's have been discussed this is just a preview of some of the changes that have been detailed ihere n the forums & on Evilnat's Twitter .
Stay Tuned to the developer's twitter and psx-place.com for the latest details on 4.89.3 Evilnat CFW release and the upcoming debut of PEX
Please be patient as development wraps up and a release is prepared,
note not all feature's have been discussed this is just a preview of some of the changes that have been detailed ihere n the forums & on Evilnat's Twitter .
Stay Tuned to the developer's twitter and psx-place.com for the latest details on 4.89.3 Evilnat CFW release and the upcoming debut of PEX
Last edited:






