[Tutorial] PSNpatch v4.65.09

What is PSNpatch ?

CORE (compatible with ALL 4.XX firmware versions):
- Spoofs IDPS (console ID) and PSID;
- Disables cfw syscalls (emulates official firmware);
- Auto-Deletes game and homebrew launch history;
- Installs RAPs and EDATs.
- Unlocks PSN (c00) game demos.
- It Patches new games to run in 4.46+ systems.

COBRA (only for 4.xx firmwares running cobra 7):
- Cobra extensions (with stealth extensions for even better cfw disabling in COBRA systems) (*);
- Spoofs firmware version from cobra 4.XX to ANY OTHER version (*);
- PSNPatch plugin for easy usage with cobra systems;
- Includes webMAN plugin installation and XMB configuration.
- Optional Semi-permanent OFW emulator;

(*) excludes REBUG COBRA editions.


Do you like PSNPatch ?
How about help raising funds to buy a PS4 for KW ?
Just press this link and donate with paypal:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]


----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- "


. PLEASE READ CAREFULLY THE DOCUMENTATION BEFORE USING PSNPATCH.
. BE SURE YOU UNDERSTAND WHAT CAN BE DONE WITH PSNPATCH.
. AVOID PLACING QUESTIONS ALREADY ANSWERED IN THIS FILE.
. NO WARRANTIES ARE GIVEN.
. USE AT YOUR OWN RISK.
. DON'T USE PSNPATCH FOR PIRACY.
. PSNPATCH AUTHOR CONDEMNS PIRACY.




----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- " ----- "


= SUMMARY:

The major objective of psnpatch is to spoof the console Id and disable cfw syscalls extensions in order to make your system more "safe" to go into the psn.
(Note that MORE safe doesn't mean IT IS safe!).
It also deletes the boot history execution (hidding homebrew execution).
The optional cobra plug-ins unloads from memory after activation.
Additionally, you can also install RAPs and EDATs, unlock psn game demos and patch 4.50 (and above) games and apps to run in 4.46 systems.
New algorithms specially made for CFW disabling and searching valid user accounts.
Firmware independent (except for the optional cobra stealth extensions which depends on the cobra cfw implementations and the availability of its source code).


= How to use:

Just install and run. A simple interface will guide you trough.
Optionally you can install a prx plugin that runs in the background and do all the "spoofing" and CFW disabling from the xmb by means of a simple shortcut (read below).
To install the plugin, call psnpatch and go into the cobra toolbox sub-menu;
To update the plugin, just run psnpatch and follow the on-screen update instructions.



= TESTING IF PSNPATCH WORKS WITH YOUR SYSTEM:

IF you want to be sure psnpatch works in your system:
- edit psnpatch.cfg to define new idps and psid. Put it in the root of a usb stick and place it in the rightmost ps3 usb port.
- Run psnpatch keeping CROSS pressed until you ear 3 beeps or got back to XMB.
- If the system beeped, it means that the cfw disabling was successful.
- You can re-run psnpatch. It should give you an error complaining about cfw syscalls not found and it will display the current idps and psid values.
- You can also run Multiman, Irismanager or any other syscall-dependent homebrew: they will all complain about an “unsupported” or “unknown” firmware version



= CFW DISABLE / REMOVE SYSCALLS

You can execute the app directly after install.
This will allow you to remove cfw syscalls and delete execution history.
Removing syscall will simulate a official firmware version improving protection level against PSN bans.
Note that after doing this, some home-brew programs (like multiMAN) will refuse to execute.
In fact, You should avoid running any homebrew program AFTER disabling CFW.
Just mount the game backup you want BEFORE using PSNPATCH to disable cfw.
After CFW is disabled you can play the mounted game backup but cannot mount another one.
This "cfw disabling" will only be active until next ps3 reboot.

Press TRIANGLE
(3 beeps will inform of the cfw removal success).
If there were NO BEEPS it means that the CFW WAS NOT DISABLED!!!

Psnpatch uses 3 complimentary algorithms to improve cfw disabling success rate.

Note: If a mounted game in cobra gives black screen after disabling cfw, try mounting as ISO.



= SPOOF CONSOLE ID (IDPS):

If you want to spoof idps and psid, you need to the edit the PSNPATCH.cfg file
(see example).PSNPATCH will scan locations in the following order:
"/dev_usb000/psnpatch.cfg"
"/dev_hdd0/game/PSNP11001/USRDIR/psnpatch.cfg"
"/dev_hdd0/game/BLJS10018/USRDIR/psnpatch.cfg"
Each ID is a hex string with 32 characters representing 16 bytes / 128 bit integer.

Press SQUARE if you want just to spoof IDPS and PSID.



= "ALL IN ONE":

Press CROSS to do a "ALL IN ONE": Spoof idps and psid, disable cfw syscalls and delete execution history.
(3 beeps will inform of the success disabling cfw).
You can even start psnpatch and keep X pressed until you ear the 3 beeps, bypassing the user interface and back to XMB !


= INSTALLING RAPS AND EDATS:

When PSNPATCH starts, it will search for the first valid user account (usually it will be '1', but it can be a different value).
Place RAPs and/or EDATs in the folder configured in PSNPATCH.cfg (usually /dev_usb0/exdata/ in a usb stick placed on the right most ps3 port).

Press:
UP/DOWN to change the USB port where to get the RAPs and EDATs.
LEFT/RIGHT to select the user account where to install.
L1 - a log will display the list of processed games by file type.

- Note 1: It is advisable not to process more than 20 files at the same time (if you sign more, they may not appear in the log).
- Note 2: Once the RAPs and EDATs are installed, you can remove them from the USB stick.
- Note 3: RAPs and EDATs are installed in one user account but available to all users.
- Note 4: RAPs are installed with the current IDPS (original or spoofed) and will work ONLY with that IDPS active!



= UNLOCK PSN GAME (C00) DEMOS:

PSNpatch can unlock game demos of C00 type.
For each unlocked game there will be created a new EDAT.

Press R1 - A list of unlocked games will be displayed on screen.

NOTE: EDATs are IDPS independent (will always work in your system. Even with spoofed IDPS).



= PATCHES games to lower versions:

There are still many users with 4.46, 4.53 and 4.55 systems – Rebug or Cobra addicts (that wants the full set of cobra 7.0 functionalities)
These users, need to spoof their firmware versions to login into psn.
Some newer games will fail to start on systems with lower firmware versions - typically a black screen at start up.
PSNPatch can re-sign JB (not ISO) game images, psn installed games, apps (like ps store) and new game patches to run in every 4.46 and above systems.

* Press L2 - A menu will allow to choose where to scan.

Press START.

A list of patched games and the number of patched files per game will be displayed on screen.
Press START again to reboot the ps3.

* The "Deep SCAN" option will scan every sub-folder it finds.
This a very very slow (really slow) scan, but it is essential for games failing the normal patching method (i.e: FF X/X-2)
If you have a game that still fails after being patched, try putting it alone in a /GAMES folder in an external disk (no more games in the external disk, to be faster) and patch with the deep scan option.
You might have to wait 10 to 15 minutes - while the hdd light blinks, psnpatch is working.

* Pressing SELECT enables a [TEST] function.
This function is great to test how long the scan will take and can be interrupted at anytime without any problem, as no writing to the disk is being ade while in [TEST] mode.

Note: this process patches EBOOT.BIN, *.self, *.sprx, and PARAM.SFO files.

New games:
Some newer games (even if working on a 4.46 system after being patched by psnpatch) may fail after updating the game from the ps3 interface.
This happens because the new patches are being distributed already signed for 4.55+ and they are downloaded, installed and launched on the fly.
In this cases it is needed to get the update pkg file separately - suggested to donwload the update pkg files from a tool like multiman.


= QUICK USE

If you don't want the user interface, just execute PSNPATCH and keep CROSS pressed down until you ear 3 beeps and get back to the XMB.



= FIRMWARE VERSION COMPATIBILITY:

PSNPATCH should be compatible with every 4.XX version.
It is independent of the CFW "flavor" (rebug, rogero, habib, steve, zer0 … and cobra editions!), but some functions are only for cobra (available in cobra toolbox menu).
Tested with 4.21, 4.25, 4.30, 4.41, 4.46, 4.50, 4.53, 4.55, 4.60, 4.65
It should be compatible with future firmware releases, as it uses standard syscalls to process the spoofing method.
Starting on 4.55, due to changes in firmware, the idps is read by searching the lv2 memory, without using fixed offsets and syscall independent, so it should keep compatibility between firmware versions.
It does the cfw disabling by searching and disabling the known "unofficial” syscalls recovering the "official" syscalls table.
Special processing is made for Cobra editions.
Equal to every 4.X firmware until now.
The remaining functions deals with the ps3 file system and are also compatible with every firmware version.



-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-


= COBRA TOOLBOX:

- Cobra systems (4.46, 4.53, 4.55, 4.65) are supported.
With a list of additional functions available trough the COBRA TOOLBOX.

- COBRA TOOLBOX can be used to:
O Cobra extensions (for adding extra some extra functions and improved security when disabling cfw;
O PSNPatch plugin install & remove - disable cfw / spoof idps & psid / deletes history. All from the XMB !;
O webMAN install & remove;
O XMB webMAN support (add "my games" and remove "app_home" from );
O Swap PS2 emulator mode between PS2ISO and PS2 Classics;
O Spoof FIRMWARE VERSION;
O Semi-permanent "OFW MODE" ;

- PSNPatch plugin can be called with L3+R3+R2;
O 3 seconds, 3 beeps, and the cfw is disabled !
O The new IDPS will be displayed on-screen (if spoofed);
O History will be cleaned;
O After disabling syscalls the psnpatch and webman plugins unloads themselves from memory;
O PRESS L3+TRIANGLE+R2 in XMB - safety options for bad plug-ins: it disables ALL plug-ins (renames boot_plugins.txt) and reboot.


- If you have a previous version of the above plug-ins, remove using psnpatch interface, reboot and re-install.

- After installing the plug-ins, they will stay resident in memory until being uninstalled from psnpatch interface or unloaded from memory;


= COBRA extensions extra-stealth:

2 opcode extensions for cobra that allows an higher stealth approach - when called, the extensions will remove cobra's syscall table protection, allowing a PERFECT syscall table reconstruction (mimicking OFW).
Use ONLY with supported cobra versions (4.46 or HABIB's 4.53/4.55/4.65 cobra editions).
It also extends Cobra systems to support firmware version spoofing using cobra op-codes !
In habib cobra 4.55, dev_habib (writeable flash) will be unmounted after installation of stealth extensions.

These changes are made at stage2.bin level.
As it is VERY sensitive to manipulate both ps3 flash memory and cobra's stage files, psnpatch can do this for you.
It was tested toughly many different configurations without any issues.
But, again, without any warranties!

Install and remove from COBRA TOOLBOX.



= COBRA VERSION spoofing :

PSNPATCH can spoof ANY firmware version in cobra systems.
The release available at the download link is already configured to spoof firmware version 4.65.


- "NORMAL" usage:

First, make sure other softwares are not already spoofing a firmware version (as MultiMAN or webMAN).
Besides spoofing version and build number, psnpatch can also update cert files (if any).
Run COBRA TOOLBOX and select the spoofing version.
PSNPatch displays the current and the spoofed version (0.00 means no spoofing is in effect, X.XX means an error in the configuration file).
4.53 only: the NEW cobra stealth extensions (the ones that came with psnpatch 2.25+) must be activated for the version spoofing to work correctly. If old (pre-psnpatch 2.25) cobra stealth extensions are installed, you should first remove them, reboot, and re-install again.


- "ADVANCED" usage
PSNPATCH can be easily configured to spoof any firmware version.

- Future VERSIONS (OPTION A - doesn't work any more. Use OPTION C, instead):
When a new firmware version is released, we need to update the psnpatch.cfg configuration file
(in psnpatch installation folder or the root of an usb stick in the rightmost port).

Use the following syntax (example for 4.55 version):
cobra_spoof_version=0455
cobra_spoof_revision=62848

in which:
. cobra_spoof_version is the firmware version as 4 digits.
. cobra_spoof_revision is the firmware build.

(The correct version and build information can be picked from the file /dev_flash/vsh/etc/version.txt that is inside the official firmware pup file).


- Future VERSIONS (OPTION B - complete the version spoofing by also using OPTION C):
Create a file named "force_cobra_version.txt" and put-it in USRDIR of psnpatch with the following syntax (version 4.55 example):
0455 62848 #

This file is great to help advanced users creating update pkg files.
Each time psnpatch starts it scans for "force_cobra_version.txt".
If found, psnpatch assumes a new firmware version needs to be spoofed. psnpatch will re-configure itself and delete the file afterwards.


- Future VERSIONS (OPTION C - needed to spoof 4.60 and above):
Cobra version spoofing works for some days after new ps3 firmware is released.
Nowadays the "traditional" (non-cobra) version spoofing must be used (updated version.txt, updated index.dat and spoofed vsh.self).
The special cobra extensions included with psnpatch, changes stage2.bin in order to accept any future vsh.self, providing the file vsh_self_hash.txt is also included.
This approach avoids recompilation or patching stage2 in the future !

THIS CONFIGURATION IS ALREADY INCLUDED WITH PSNPATCH TO SPOOF 4.46/4.55 INTO 4.65

How to use with future versions yourself ?
(advanced users only. others users should wait for an update to be released)

Example to spoof from 4.46 to 4.65:
a) folder "files/4.46-4.65/original/" should contain the original version files (version.txt, index.dat & vsh.self);
b) folder "files/4.46-4.65/spoof/" should contain the spoof version files (updated version.txt, updated index.dat and spoofed vsh.self) plus "vsh_self_hash.txt" with the spoofed vsh.self hash.
Note: To calculate the vsh.self hash you need to use the hashcalc tool distributed with cobra.

Look into psnpatch pkg file contents and you will quickly understand how it should be done ;D


- Future VERSIONS (NOTES):
NOTE 1: Place the new cert files (if any) in files/cert/ folder.
NOTE 2: 4.53 cobra can only spoof version AFTER installing the new cobra stealth extension (psnpatch 2.25 and above).
NOTE 3: If you want to change the provided configuration: "BE SURE YOU KNOW WHAT YOU'RE DOING !!!"
NOTE 4: If you're getting a reported version "X.XX", use psnpatch to disable version spoofing and reboot.
If the version continues as "X.XX" REMOVE webman and and re-install again using psnpatch COBRA TOOLBOX.
IF you're still getting X.XX, re-install your firmware from the recovery menu.

DON'T GO ON-LINE WITH VERSION X.XX OR YOU'LL BE BANNED !!!



= COBRA "OFW MODE" Emulator

Using PSNpatch COBRA TOOLBOX, it is possible to activate a special SEMI-PERMANENT mode that truly "emulates" a OFW (official firmware).

In this mode the lv2 table is recovered exactly as the original OFW.
Additionally:
. no plug-ins are loaded;
. no install_pkg (not possible to install no pkg files);
. no app_home;
. cannot mount game images (JB, ISO, ...);
. webman's "My Games" will not be shown;
. It is NOT POSSIBLE TO SPOOF IDPS & PSID nor DELETE EXECUTION HISTORY !!!

In this mode only official functions are available plus execution of the homebrews previously installed (without the cfw extras).


NOTE: After activating this mode, to get back to COBRA CFW, psnpatch needs to be executed (or re-install the cobra firmware).


-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-



= REMEMBER !

Never execute any homebrew WHILE connected to the PSN !
And the safest way to keep being banned is to be offline!!!



= PIRACY

PSNpatch condemns piracy!
Use PSNpatch only for legally obtained games and content.



= WARRANTY

PsnPatch comes absolutely with NO WARRANTY.
Use-it at your own risk.



= THANK YOU

* smhabib for your GREAT WORK in porting COBRA into your CFW's and sharing your experiences !
* cobra authors for the MOST FANTASTIC firmware add-ons !
* stoker25 for psidpatch.
* user for psnope.
* deank for webMAN and multiMAN.
* evilnat and arch by their 4.6x version spoofing approaches.
* flatz, fail0verflow, snowydev, JuanNadie, EXE.trim.ALL, and all other for EDAT signing algorithms.
* all others I've not listed: Without you, it would have been impossible !
* and to every psnpatch user - you are the ones that keep psnpatch project alive


= DOWNLOAD LINKS

Do you like PSNPatch ?
How about help raising funds to buy a PS4 for KW ?
Just press this link and donate with paypal:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

DON'T MIRROR. IF YOU WANT TO PUBLISH PSNPATCH IN YOUR SITE, KEEP THE DOWNLOAD LINK

PSNPatch 4.65.05 = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

DON'T MIRROR. IF YOU WANT TO PUBLISH PSNPATCH IN YOUR SITE, KEEP THE DOWNLOAD LINK


= QUESTIONS ?

1. If you have any question, 1st make sure you read and understand this document.
2. If you still have questions, read again AND AGAIN!
3. After reading 3 times, if you still have doubts, use PSNPATCH topic at psx-scene or tortuga cove forums.
Someone will be glad to help.


= SOURCE CODE
Starting with version 4.65.01, the source code will be progressively released.
List of currently available psnpatch source code:
a) Cobra extensions = changes to modeulespatch.c in stage2;