MiralaTijera CFW 4.31: OtherOS++, QA Flag, BD-Emu

Published on 01-31-2013 05:28 PM

37 Comments

MiralaTijera from Spanish scene site eldorado.net has created and released the first 4.31 CFW not to be confused with some of the spoofed 4.31 CFWs. This is the 4.31 CFW that both multiMAN and Iris Manager have recently added support for in yesterday's updates. MiralaTijera has enabled OtherOS++, QA Flag and BD-Emu as well has some other interesting items in this new CFW.

As always please use caution when installing a new CFW. Its always better to wait if you are afraid of a possible brick, or do not have the means to recover from one.. If Spanish is not your native language or a language you understand that is more reason to take a bit of caution as some facts can get lost in translation. However it looks like this Developer has done some interesting things with this new CFW. Check below at the translated quote for more info & details about this new CFW.

Hi, i present myself on this community showing what i been working in the darkness.

You may ask what this is all about?.
Well it’s about my CFW 4.31 FULL 4.31, nothing about spoof’s. It’s ported to 4.31. And..

I give you along with the Os also my (personal) multiTOOL called “core” it’s only a self that loads at console startup.
If it’s available on right USb port of our PS3 “/dev_usb000/” that among other things this will allow to dump console flash.
Also activates QA flags (on 4.31 = directly) and exits and start on factory mode.

Here some specs:

lv1 CoreOS hash deactivated for downgraded consoles.
lv1 183/182 undocumented ( lv1 peek / poke )
lv1 Otheros ++
VSH: nas_plugin ( all pkgs can get installed , explore_plugin y game_ext plugin to show the install package and erase that annoying warning
message of *epilepsy* (though this is automatic while with QA flag)
and patches VSH for rif / rap with fakesign.)
default.spp: added that memory extra on gameOS for otherOs.
lv2 peek / poke , syscall 6 / 7 ,
v2 lv1 peek / poke ( opcional syscall 8 / 9 via core)
Payload Hermes with ported SC 36
APPLDR: lv2 memory hash desactived from appldr ( no need to patch on lv1 ) , dev_flash whitelist deactivated ( loads any keyset from dev_flash ) and ECDSA deactivated.
ISOLDR : ECDSA deactivated
SPP_VERIFIER: ECDSA deactivated
spu_utoken_processor : ECDSA deactivated ( qa flag )

Here you have the payload to include on C for our managers with fixes and hook.

Private Paste - Pastie ( payload with sc36 )

Private Paste - Pastie (lv2 lv1 calls)

Now let’s talk about = Core.

It’s AIO (all in one) tool. This CFW at startup search on dev_usb000 if theres a files called cellftp.self and other called copy_script.txt. Also i activated *search function* you can deactivate if you want so just doing this:

You have to put an original 4.31 sys_init_osd.self inside dev_flash/sys/internal/HERE and that will stop it for search it.

So i developed a homebrew called core, that allows to end user have more options and tools.

Remember though that the self has to be on your pen-drive root along with copy_script.txt and flags folder with the flags ( functions ) that you want inside.

When your PS3 starts up will search for it and execute it. It will leave a log on root called core.log.

I will mention the more important ones and tomorrow i will explain a little more:

BD emu flag = Is for if you don’t have blu-ray drive or just don’t work npdrm if you activate this flag, the PS3 will behave as if it have the drive installed.

Enableqa = Activates those QA flag directly on 4.31 ..

Dump nand

Dump nor

Dump lv2

Dump full ram

etc..

Code:

Changelog:
core 2.6.5

changelog 2.6.5:

Added toggle_recovery flag = Warning PHAT wipe.

Fixed 6 flags.

Erased that epilepsy warning.

Core 2.6.0

Changelog 2.6.0:

añadida flag para limpiar restos de flag’s de otheros ( usar en casos de problemas al entrar recovery )

Added flag to clean otherOS flag’s ( use in case that you have problem to enter into recovery).

Changelog 2.5.0:

Added otherOS.

Fixed dumpnandflash flag, now dumps bootloader also to have a full vital backup of your PS3.

============================

OtherOS boot Tutorial:

1) Start core only with setup_flash_for_otheros flag, when you hear a double beep means that’s the process went well. If you don’t listened nothing = check log.

2) Then put dtbImage.ps3.bin (the one who corresponds to your CONSOLE)
If it’s Nand = dtbImage.ps3.bin.nand
If it’s NOR = dtbImage.ps3.bin.nor
You have to rename it to = dtbImage.ps3.bin and paste it on the your pendrive root in this case we will use install_otheros flag.

3) This will boot up and you will hear 2 beeps, if you don’t listened. Again, check the log. Something failed.

4) Once we done this, shutdown your PS3 and use boot_otheros flag. On boot you will see petitboot on your screen.

Thanks hermes, i used your cosunpkg and cospkg to align of CoreOs AND payload with sc36.

Links about all i mentioned above :

Private Paste - Pastie

Mirror thanks to “palestina” mod431.rar (67,68 MB) - uploaded.to

BD Emu function is integrated also on one CFW 3.55 that im currently uploading. This comes handy for example if you want to dump your root key.

Here =
hilo_cfw-3-55-otheros-cex-bdemu-sin-controladora-integrado_1862166

To created our own CFW, just open delta patcher. On original file choose 4.31 OFW from here:

http://dus01.ps3.update.playstation….d/PS3UPDAT.PUP

On xdelta patch, hit the patch and apply with check checksum option and keep original file tilted. This will create other file called *NEW.PUP being * name of the OFW you use.

PUP Hashes should be:

CRC32: 203E06EC
MD5: AD09B0CB3C09CFCCAB578E4E85969830
SHA-1: 7258E1BB84ED6E8AB0F6325A0199B65F82C7ADEF

Note:

THIS IS NOT A CONSOLE BRICKER.
This method was in the shadows for some time and was tested and all systems that allow this.

I think on give core src once i polish it. Honestly im ashamed about some much comments on this code xD

Enjoy it.
I will keep you guys posted on this thread for next 3 days.

Translated by hellsing9 of ps3hax

Source, Download, and Additional Info: Elotrolado.net (Spanish Site)

PSX-SCENE: The Pinnacle Scene Xenocracy

● Latest News ● Report News ● Search Forums ● Hall of Fame ●
● Facebook.com/PSXScene ● RSS ● Twitter.com/psx_scene ●

Share
- Share this post on
- Digg
- Del.icio.us
- Technorati
- Twitter

Spacerat, tthousand and dudamelo like this.

Categories:

_{Tags :

cfw,

custom firmware,

miralatijera,

miralatijera cfw 4.31,

otheros,

otheros++,

ps3}

37 Comments

CS67700 - 02-01-2013, 12:35 PM
- Reply
Stay away from this.
Wait for Rogero and Rebug to eventually release it.

Hakuoro - 02-01-2013, 02:21 PM
- Reply
Great news! I'm hoping to see a 4.31 CFW by Rogero and Rebug in the near future, with all the features we see in MiralaTijera's CFW.

dasreaper - 02-01-2013, 02:21 PM
- Reply
It has been developed and tested on all versions of ps3 for a long time. No need to be wary with this one. Kudos to miralatijera, splendid work and 100% spanish product

BahumatLord - 02-01-2013, 02:42 PM
- Reply
I've heard that "it's been tested" before. There's a lot that goes into testing firmwares. Models and regions play a big part in that, plus if you're coming from a stock firmware or a CFW or a heavily modded CFW and modded NOR flash like mine

There is no way that they could have tested on all possible combinations of setups in this short amount of time so I stand by what I said about not installing it if you don't have a flasher.

I did forget some things to add to the Q&A

Q: Do I really need that .01 firmware update?
A: No. Not in the slightest

Q: Do the benefits of this CFW outweigh the risks over that of a known CFW?
A: There are no benefits, so no. Everything that this can do can be done with Rebug

Q: Can this do anything that can't be done with MFW builder and a little reading?
A: Not that I can see

Slander - 02-02-2013, 01:39 AM
- Reply
Hi all,

Originally Posted by BahumatLord

[...]

Q: Do the benefits of this CFW outweigh the risks over that of a known CFW?
A: There are no benefits, so no. Everything that this can do can be done with Rebug

[...]

Well, I heard that Team Rebug is preparing a surprise... So the bold sentence is almost true

You should have written :

Q: Do the benefits of this CFW outweigh the risks over that of a known CFW?
A: There are only few minor benefits, so no. Everything that this can do will be done very soon by Rebug anyway

Just my 2 cents ...

Have a good day,

Slander

Blueprint88 - 02-02-2013, 01:35 PM
- Reply
Not everything this can do can be done with rebug in that you can only get BDEMU with Rebug in DEX mode, this is the first CFW to give you BDEMU in CEX and that is quite cool. I hope that feature get implemented into to Rebug and Rogero soon as that will help a lot of people out with older phats with dead drives.

Blueprint88 - 02-02-2013, 01:37 PM
- Reply
Also why dog the guy for actually providing something to the community. I agree you shouldn't be testing this without a flasher, until more people have tried and reported probably best to stick with the 'safe' Rebug and Rogero releases but I commend this dude for giving us another option and not just being some knockoff, but actually adding features

matster107 - 02-02-2013, 11:32 PM
- Reply
thanks BahumatLord that definitely answered all my concerns. I'm still on 3.55 kmeaw I appreciate all these talented coders hard work but i'm happy with my current configuration

Neptune1988 - 02-03-2013, 12:58 AM
- Reply
"MiralaTijera from Spanish scene site eldorado.net has created and released the first 4.31 CFW not to be confused with some of the spoofed 4.31 CFWs. This is the 4.31 CFW that both multiMAN and Iris Manager have recently added support for in yesterday's updates. MiralaTijera has enabled OtherOS++, QA Flag and BD-Emu as well has some other interesting items in this new CFW. "

elotrolado

How can you bomb a domain so bad like that? El Dorado = City of Gold. El Otro Lado = The Other Side

the-green - 02-04-2013, 05:47 PM
- Reply
Originally Posted by ppr2012

i too am curious to know about bd emu..does it mean games can be played diskless with special formatted pendrive like on dex?...

Me too, I am very curious about this point !! hope this is the case, it will be amazing !! all ps3 games directly diskless !!

the-green - 02-04-2013, 05:50 PM
- Reply
Originally Posted by Blueprint88

Not everything this can do can be done with rebug in that you can only get BDEMU with Rebug in DEX mode, this is the first CFW to give you BDEMU in CEX and that is quite cool. I hope that feature get implemented into to Rebug and Rogero soon as that will help a lot of people out with older phats with dead drives.

Yeah, that's it, hope this feature get included in futur Rogero & rebug CFW 4.3+ releases

BahumatLord - 02-04-2013, 10:24 PM
- Reply
Originally Posted by Blueprint88

Also why dog the guy for actually providing something to the community. I agree you shouldn't be testing this without a flasher, until more people have tried and reported probably best to stick with the 'safe' Rebug and Rogero releases but I commend this dude for giving us another option and not just being some knockoff, but actually adding features

Nowhere did I dog the guy or his work. What I was saying is that whenever something new comes out people rush in without knowing if it's safe or not. I would tell people not to use a new version of KMEAW, Rebug, or Rogero if they didn't own a flasher until it's tested on all possible setups. There's more kinds of PS3 setups then a lot of people realize. It's not as simple as Phat vs Slim or US vs UK, etc, etc

If I gotta be seen as being the ass for telling people not to use it yet without a flasher, then that's fine. It's better then seeing a bunch of people saying that they own a new paperweight

CPTDonut - 02-08-2013, 05:14 PM
- Reply
Since this has QA enabled on 4.31 could I go from this to say 3.55.4 REBUG?

dcdemon - 02-10-2013, 09:00 AM
- Reply
Hey fellas.

Ive updated to this Firmware and its works fine.
However there is a Huge problem!
All of my PSN games do not work, I get the same error code : 80010017
I have tried uninstalling the games, creating a new user, reinstalling the PKG files, and still the error code 80010017.

Any fixes for this? Do I need to edit the PKG files and somehow alter them so they support "4.31" and not "3.55" ?

Help please.

jekors - 02-13-2013, 07:49 PM
- Reply
Originally Posted by dcdemon

Hey fellas.

Ive updated to this Firmware and its works fine.
However there is a Huge problem!
All of my PSN games do not work, I get the same error code : 80010017
I have tried uninstalling the games, creating a new user, reinstalling the PKG files, and still the error code 80010017.

Any fixes for this? Do I need to edit the PKG files and somehow alter them so they support "4.31" and not "3.55" ?

Help please.

HI!
insert the update 7 of this fimware NEW vsh is work with reactpsn

piaf - 02-14-2013, 05:03 AM
- Reply
and update the psn game to get rid of the 80010017 error on 4.31CFW

Ziken - 03-10-2013, 11:48 AM
- Reply
Originally Posted by BahumatLord

Nowhere did I dog the guy or his work. What I was saying is that whenever something new comes out people rush in without knowing if it's safe or not. I would tell people not to use a new version of KMEAW, Rebug, or Rogero if they didn't own a flasher until it's tested on all possible setups. There's more kinds of PS3 setups then a lot of people realize. It's not as simple as Phat vs Slim or US vs UK, etc, etc

If I gotta be seen as being the ass for telling people not to use it yet without a flasher, then that's fine. It's better then seeing a bunch of people saying that they own a new paperweight

And I have to agree with him. There are often times when I've seen some people asked about consoles issues and nearly many of those are the bricked console. And nearly most of those are the people who updated to the "NEW" CFW that just came out.

As BahumatLord said, don't test or update it unless you're certain you complain if it brick or you have a e3flasher. There are many people who rush in without a proper e3flasher and many of them fail.