PS3 4.88.2 Evilnat Cobra (8.3) Custom FirmWare (CFW-CEX) Released

UPDATE 4.88.2: PS3 Developer @Evilnat has updated and released 4.88.2 Evilnat (Cobra 8.3) CFW , there is a number of new options like an added File manager, Option to toggle Cobra version, and various other new options detailed in the changlog provided below. Also the developer has provided a number of fixes and improvements, View all the details of 4.88.2 release of this latest CFW by @Evilnat

.Original release (4.88.1) Developer @Evilnat (creator of releases like SEN Enabler and PAUD Unpacker) has created and released 4.88 EVILNAT's COBRA CFW, following the success of 4.87 Evilnat's CFW, the developer provides another trusted CFW release that provides the Cobra Payload and all the features it brings (note: MAMBA is an alternative to the Cobra Payload, Cobra is included in firmware's where as MAMBA is typically injected in a Standard CEX CFW via a homebrew app. See all the details of this CFW Release below

Also Included are: noBD / noBT / noBD & noBT CFW Builds (for damaged console's to make them usable again)
-STLcardsWS​



CFW Evilnat.png

  • 4.88.2 EVILNAT (COBRA 8.3)

    Changelog
    • Fixed memory leak in LV2 kernel while Cobra is enabled
    • Added option to dump ERK (eid_root_key) through xai_plugin (from flatz's EID root key dumper)
    • Added option to dump LV2 through xai_plugin
    • Added option to dump LV1 through xai_plugin
    • Added File Manager in xai_plugin (by DeViL303)
    • Added option to toggle Cobra version, release (default in CFW) and debug (get debug logs through socat)
    • Manual FAN speed now works with Cobra disabled too
    • Added system to block login in on PSN/SEN while CFW syscalls are enabled (by DeViL303)
    • Added sort games by name and date options (by aldostools)
    • xai_plugin translated to Brazilian (thanks to jcorrea and LuanTeles)
    • xai_plugin translated to Polish (thanks to KcrPLo and Agrippa)
    • xai_plugin translated to Italian (thanks to Sheireen)
    • xai_plugin translated to Chinese Traditional/Simplified (thanks to xiaoyang)
    • xai_plugin translated to Spanish

    Features
    • Made out of 4.88 OFW
    • Made manually without automatic tools
    • SEN/PSN enabled
    • Disabled deletion of unsigned act.dat and .rif files
    • Allowed unsigned act.dat and .rif files
    • Allowed running of unsigned applications
    • Compatibility with FSELF
    • C00 demo unlocker
    • Disabled LIC.EDAT license check
    • Can be installed over 3.55 OFW
    • Can be installed over +3.56 OFW (bguerville Toolset)
    • Can be installed over any CFW CEX
    • COBRA 8.3 added and enabled as default
    • Full PS2 Games Compatibility
    • Possibility of Downgrade from any CFW with active QA Flags
    • QA Flags active if previously enabled
    • Disabled Epilepsy Message on Boot
    • Compatibility with PSX games in ISO
    • Compatibility with PSP games in ISO
    • Compatibility with PS2 games in ISO
    • Compatibility with PS3 games in ISO/JB folder format
    • Compatibility with ReactPSN
    • Display of Temperatures in XMB In-Game on PS2 Games
    • RSOD Screen Bypass
    • BSOD Screen Bypass
    • PS3_GAME/app_home
    • XMB In-Game Screenshot
    • Added Package Manager
    • CoreOS Hash Check patched to prevent Brick on non-dehashed Downgradate consoles
    • Patched to remove LV2 Protection
    • Peek and Poke (LV2)
    • Peek and Poke (LV1)
    • CINAVIA protection disabled
    • Option to sort games by name and date

    Cobra 8.3
    • Failsafe Cobra stage2 (by bguerville/aldo)
    • Restore CFW Syscalls without reboot just entering to 'Settings > System Update' on XMB (by aldo)
    • Integrated Dynamic Control FAN (to control fan when webMAN is unloaded) (by aldo/Evilnat)
    • Support Photo GUI integration with webMAN MOD (mount games from 'Photo' column) (by aldo/DeViL303)
    • Get/Set FAN speed (by aldo)
    • Enable/disable features: Photo GUI, Restore Syscalls (by aldo)
    • Opcode to create CFW Syscalls (6, 7, 8, 9, 10, 11, 15, 35) (by aldo)
    • Opcode to set fake accountID (by Evilnat)
    • Opcode to activate account (act.dat) (by Evilnat)
    • Opcode to create license (RIF) (by Evilnat)
    • Updated ps3mapi_load_process_modules to load custom modules and system modules (by haxxxen)
    • Added ps3mapi_get_process_module_info
    • Increased from 24 to 32 the max number of map paths (by aldo)
    • Added sm_get_temperature patch in kernel (by Evilnat)
    • Added sm_get_fan_policy patch in kernel (by Evilnat)
    • Added sm_set_fan_policy patch in kernel (by Evilnat)
    • Fixed Control FAN payload, avoids loading previous mode (by Evilnat)
    • Disable stage2.bin while Recovery Menu is loaded (by haxxxen)
    • Fixed max FAN speed after shutdown (by Evilnat)
    • Improved Habib's QA flags code imported by aldostools (by Evilnat)
    • Fixed black screen in CFW2OFW converted games (by Evilnat)
    • Added sm_ring_buzzer with single_beep, double_beep and triple_beep (by Evilnat)
    • Skip license creation (rif) if it already exists (by aldo)
    • Added cellFsMkdir symbol (by Evilnat)
    • Added constant FAN Speed while a PS2 ISO is launched (by Evilnat)
    • Check/Disable/Enable QA Flags (by Evilnat)
    • Creation of act.dat while launching a PSN game (by Evilnat)
    • Convert someones's else savedata to your own savedata (by Evilnat)
    • Block Log In on PSN/SEN when CFW syscalls are enabled (by DeViL303)

    Tested in:
    • CECH-2000A
    • CECH-2000B
    • CECH-2001A
    • CECH-2002B
    • CECH-2004A
    • CECH-2012A
    • CECH-2104B
    • CECH-2500A
    • CECH-2501A
    • CECH-2504A
    • CECH-2511A
    • CECH-2511B
    • CECH-L04
    • CECHA01
    • CECHE01
    • CECHB01
    • CECHC04
    • CECHG01
    • CECHP01

    Improvements xai plugin


    These options are in Network tab under [★ Custom Firmware Tools] option:

    Power Options
    • Turn Off: Turns off the PS3
    • Hard Reboot: Reboots the PS3 completely
    • Soft Reboot: Reboots the PS3 softly
    • Reboot LV2: Reboots the LV2

    File Manager
    • Internal Hard Disk Drive 0: Manage PS3 files in /dev_hdd0
    • Internal Hard Disk Drive 1: Manage PS3 cached files in /dev_hdd1
    • USB Mass Storage Devices: Manage files on your USB devices
    • Internal Flash Memory: Manage PS3 internal flash files
    • Optical Disc: Manage optical discs
    • Memory Cards: Manage memory cards

    Basic Tools
    • FAN Speed: Shows current FAN speed
    • PS3 Temperature: Shows current CPU and RSX temperature
    • Show IDPS: Shows current IDPS
    • Show PSID: Shows current PSID
    • Toggle Coldboot: Toggles between custom/original coldboot.raf
    • Toggle System Version: Toggles between custom/original system version in "System Information"

    Basic Tools > xRegistry Tools

    • Backup xRegistry.sys: Creates a backup of xRegistry.sys to /dev_usb or /dev_hdd0
    • Button Assignment: Switches O and X buttons

    Cobra Tools
    • Cobra Information: Shows current Cobra information
    • Check Syscall 8: Checks Cobra's Syscall 8 status
    • Create Syscalls: Create syscalls 6, 7, 8, 9, 10, 11, 15 and 35
    • Allow Restore Syscalls: Allows restoring syscalls through "System Update"
    • Skip license creation: Skips overwriting license file (RIF) if it already exists
    • Toggle Cobra Version: Toggles between release and debug versions (reboot is required)
    • Toggle Cobra: Enables or disables Cobra (reboot is required)

    Cobra Tools > FAN Tools
    • Control FAN Mode: DISABLED: Disables Cobra's Control FAN
    • Control FAN Mode: SYSCON: Allows the PS3's SYSCON to control FAN speed
    • Control FAN Mode: MAX: Set Cobra FAN speed to 0xFF

    Cobra Tools > QA Tools
    • Check QA Flags: Check if QA flags are enabled or disabled
    • Enable QA Flags: Enables QA Flags
    • Disable QA Flags: Disables QA Flags

    Cobra Tools > FAN Tools > Dynamic FAN Control
    • Maximum temperature: 60°C: Sets the fan speed dynamically to keep the system at a maximum temperature of 60°C
    • Maximum Temperature: 65°C: Sets the fan speed dynamically to keep the system at a maximum temperature of 65°C
    • Maximum Temperature: 70°C: Sets the fan speed dynamically to keep the system at a maximum temperature of 70°C
    • Maximum Temperature: 75°C: Sets the fan speed dynamically to keep the system at a maximum temperature of 75°C

    WARNING: Some PS3 cannot reach/stay some option temperatures, use with caution

    Cobra Tools > FAN Tools > Manual Speed
    • Manual Speed: 40%: Sets the fan speed statically at 40% (0x67)
    • Manual Speed: 45%: Sets the fan speed statically at 45% (0x75)
    • Manual Speed: 50%: Sets the fan speed statically at 50% (0x80)
    • Manual Speed: 55%: Sets the fan speed statically at 55% (0x8E)
    • Manual Speed: 60%: Sets the fan speed statically at 60% (0x9B)
    • Manual Speed: 65%: Sets the fan speed statically at 65% (0xA8)
    • Manual Speed: 70%: Sets the fan speed statically at 70% (0xB5)
    • Manual Speed: 75%: Sets the fan speed statically at 75% (0xC0)
    • Manual Speed: 80%: Sets the fan speed statically at 80% (0xCE)
    • Manual Speed: 85%: Sets the fan speed statically at 85% (0xDA)
    • Manual Speed: 90%: Sets the fan speed statically at 90% (0xE7)
    • Manual Speed: 95%: Sets the fan speed statically at 95% (0xF4)

    WARNING: The chosen speed will be static, it will not be changed at any time automatically

    Cobra Tools > FAN Tools > PS2 FAN

    • PS2 Fan Mode: DISABLED: Disables Control FAN on PS2 game
    • PS2 Fan Mode: SYSCON: Allows the PS3's SYSCON to control FAN speed on PS2 game
    • PS2 Fan Mode: 40%: Sets FAN speed to 0x66 on PS2 game
    • PS2 Fan Mode: 50%: Sets FAN speed to 0x80 on PS2 game
    • PS2 Fan Mode: 60%: Sets FAN speed to 0x9A on PS2 game
    • PS2 Fan Mode: 70%: Sets FAN speed to 0xB4 on PS2 game
    • PS2 Fan Mode: 80%: Sets FAN speed to 0xCE on PS2 game
    • PS2 Fan Mode: 90%: Sets FAN speed to 0xE8 on PS2 game

    WARNING: There is no Control FAN in a PS2 game, select with caution

    PSN Tools
    • Disable Syscalls: Disables syscalls and remove history files
    • Show accountID: Shows current user's accountID
    • Create accountID: Creates a fake accountID for current user's in xRegistry
    • Overwrite accountID: Overwrites current user's accountID with a fake one in xRegistry
    • Activate account: Creates act.dat file in the current local account
    • Create license: Creates RIF licenses from RAP files from "x:\exdata"
    • Backup activation file: Creates a backup of act.dat to /dev_usb or /dev_hdd0
    • Disable account: Deletes current user's activation file act.dat permanently
    • Convert savedata: Converts savedata from "/dev_usbXXX/PS3/SAVEDATA" to your own savedata

    Dump Tools
    • View Log: http://localhost/dev_hdd0/tmp/cfw_settings.log (webMAN MOD is required for this function)
    • Clean Log File: Resets /dev_hdd0/tmp/cfw_settings.log file
    • Dump IDPS: Saves IDPS to log file
    • Dump PSID: Saves PSID to log file
    • Dump LV2: Dumps LV2 to /dev_usb or /dev_hdd0/tmp
    • Dump LV1: Dumps LV1 to /dev_usb or /dev_hdd0/tmp
    • Dump ERK: Dumps eid_root_key to /dev_usb or /dev_hdd0/tmp
    • Log KLicense usage: Saves filename and klicensee to log file
    • Log Secure File ID usage: Writes save data name and file ID key to log file
    • Dump Disc Hash Key: Retrieves disc hash key from an ORIGINAL game disc

    Service Tools
    • Display Applicable Version: Displays minimum downgrade version
    • Check File System: Reboots and allows you to check and repair filesystem
    • Rebuild Database: Reboots with Database rebuilding flag set
    • Toggle Recovery Mode: Reboot to Recovery Mode (Not supported on NAND models!)

    Service Tools > Advanced Service Tools
    • RSOD fix: Re-initialize VTRM-Region to attempt to fix RSOD
    • Toggle Factory Service Mode: Enter/Exit Factory Service Mode (DON'T INSTALL CFW ON FSM)
    • Remarry Bluray Drive: Requires: Enter to FSM and copy "eid_root_key" to /dev_usb
    • Load LV2 kernel: Loads lv2_kernel.self file from /dev_usb000 or /dev_flash


    Savegames conversion tutorial

    WARNING: This option will overwrite your current savedata in dev_usbXXX, use it with caution

    • Download someone else's savegame for your game of your choice
    • Put the savedata in your pendrive in "X:\PS3\SAVEDATA" (pendrive must be in FAT32)
    • Put in the pendrive in the PS3
    • Select Network Tab > [★ Custom Firmware Tools] > PSN Tools > Convert Savedata
    • Wait until the conversion finishes
    • Once finished, copy your converted savedata throught XMB "Saved Data Utility (PS3)"
    • Launch your game and load your new savedata


    Creation of act.dat tutorial

    WARNING: The accountID is linked to savedata and trophies, so, if your current user already have a valid accountID and you overwrite it, you will be unable to use your trophies and savedata on that account until you restore the original accountID in xRegistry.sys.


    I recommend to use an empty account without trophies and savedata or an account without accountID.


    To create a fake act.dat, Cobra 8.3 must be enabled, and your PS3 must have at least one account with a valid accountID and launch a game that requires a RIF/RAP license file.

    Cobra will search a valid accountID in all existing accounts and create act.dat while the game is launched through the XMB. If no accountID is found, act.dat will not be created.

    You can create a fake accountID (like reactPSN), to do this go to Network > ★ Custom Firmware Tools > PSN Tools and choose between "Create accountID" or "Overwrite accountID" (Be careful about the last option because if you already have a fake/real accountID it will be overwritten). It is recommended to use these options in an account that does not have an ID. The PS3 will restart if everything went well.

    The tutorial would be the following:
    • Download your purchased PSN game from PS Store
    • Put game RAP file in "X:\exdata" or "/dev_hdd0/exdata"
    • Launch your purchased PSN game
    • Cobra will check if any of your PS3 accounts have accountID
    • Faked act.dat will be created while the game is launching

    If none of your accounts have a valid accountID you will need to create it. To do this log into the local PS3 account where you want to create the accountID. You can see if your current local account has an accountID choosing Network Tab > [★ Custom Firmware Tools] > PSN Tools > Show accountID.

    To create a faked act.dat do the following:
    • Make sure Cobra 8.3 is enabled
    • Select Network Tab > [★ Custom Firmware Tools] > PSN Tools > Create accountID
    • Select Network Tab > [★ Custom Firmware Tools] > PSN Tools > Activate account
    • Launch your purchased PSN game
    • Faked act.dat will be created while the game is launching

    Now you have a faked act.dat and your local account is activated. The act.dat file works for every local account, you only need one file for all accounts.


    Block PSN log in

    This method is developed by @DeViL303, it will only work with Cobra enabled, Cobra will block log in on PSN/SEN while the CFW syscalls are enabled, to enable it again you need to disable CFW syscalls completely (you can do it with webMAN MOD, psnpatch, SEN Enabler, etc…).

    If you want to disable this feature, simply delete /dev_flash/vsh/resource/npsignin_plugin.lck


    Translations


    Final Words

    I hope that the CFW is working fine and without issues for everyone, but if you see any issue, please let me know in my twitter and I will try to fix it as soon as possible: @xXEvilnatXx

    Cobra 8.3 and xai_plugin source code can be found in my Github repository:


    Credits and Acknowledgment

    Credits to Team Rebug, Team Cobra, @mysis, @Joonie, @habib, @aldostools, @haxxxen, @DeViL303, @zecoxao, @3141card, @Berion, @kakaroto, @KW, @naehrwert, @flatz, @Dean, @Rogero, @Estwald and anyone who has contributed to the PS3 scene.

    Thanks to @DeViL303, @Berion, @Brandon Stump, @jcorrea, @nhie07, @NSC-Modz, @LuanTeles, @thejavigames, @raidriar, @xiaoyang, @Zwei, @haxxxen, @RetroFan_90, @SpyroMancer, @patricksouza472, @MrYadro, @CFW-Us3r, @Andrio, @KcrPLo, Nur Rakhmadi Rajab, @Lwiz, @Sheireen, @TheWizWiki and all who helped me testing the CFW 4.88.

    If I forgot someone, I apologize, there are many people in the PS3 scene and you are many people who
    have helped me to test the CFW.



Download: MEGA FOLDER WITH ALL CFW VERSION

Download: CFW EVILNAT 4.88.2 COBRA 8.3 [CEX]
MD5: 3202971E05140F24E52B36D5C443AD35

Download: CFW EVILNAT 4.88.2 COBRA 8.3 [CEX] [noBD]

MD5: 80029DC0FBD238DAF8ED45BCDFD04CD6

Download:CFW EVILNAT 4.88.2 COBRA 8.3 [CEX] [noBT]
MD5: 360569FE808B1815BD05258C8496003F

Download: CFW EVILNAT 4.88.2 COBRA 8.3 [CEX] [noBD] [noBT]
MD5: D8BB1F47B77F1737F974308B935F81B6
 
Last edited by a moderator:
Although, the first steps in the bgtoolset works, the update doesn't work
Several possible causes.

1. USB device not compatible, device fat32 partitioning not compatible (GPT), USB hub, corrupted pup file etc..
2. You loaded the no-fsm patch into the Flash Memory Manager but you forgot to apply it so the console isn't jailbroken.
3. You applied the patch but didn't reboot before trying to install the CFW PUP file, the jailbreak is fully applied only after reboot.
 
Last edited:
Seems an issue with the usb drive. Try another one, preferably a smaller one, around >256mb <4gb.

I bought a 16GB Sandisk Cruzer Blade. I thought its an issue before with my 2TB flash drive which is why I bought a smaller one because I read on some forums that PS3s only support 1TB and below
 
I bought a 16GB Sandisk Cruzer Blade. I thought its an issue before with my 2TB flash drive which is why I bought a smaller one because I read on some forums that PS3s only support 1TB and below
Generally speaking, when you need technical data & specs, you should refer to the wiki.
Regarding HDDs compatibility (internal or external storage), you can get the specs in the wiki HDD section.
https://www.psdevwiki.com/ps3/Harddrive
 
Several possible causes.

1. USB device not compatible, device fat32 partitioning not compatible (GPT), USB hub, corrupted pup file etc..
2. You loaded the no-fsm patch into the Flash Memory Manager but you forgot to apply it so the console isn't jailbroken.
3. You applied the patch but didn't reboot before trying to install the CFW PUP file, the jailbreak is fully applied only after reboot.

My answers are:
1. I bought a new flash drive; got it to FAT32 format; got it to MBR partition scheme, if the problem is the USB hub, I wonder why because it shows that it works because when I swipe to Music-Video-Photos tab, I see my flash drive shows up and when I try to update it via XMB, it shows the Evilnat CFW update but while on the process of it being copied, just before it loads up the process, it keeps on showing "An error occurred while copying files (80029C55)" which is why I guess the flash drive works but it kept on getting an error while doing an update; the PUP file is not corrupted because I have it downloaded from this thread and I just followed what you guys said to me in this thread which I am thankful for but unfortunately, I still keep on getting errors despite of the smooth process on the bgtoolset.

2. I loaded the no-fsm patch into the Flash Memory Manager and I did apply it so I thought it was jailbroken because I followed the instructions of the links you guys recommended to.

3. I applied the patch and rebooted afterwards, then I tried to install the CFW PUP file via XMB and Recovery/Safe mode but it still kept on giving me the same error.
 
Several possible causes.

1. USB device not compatible, device fat32 partitioning not compatible (GPT), USB hub, corrupted pup file etc..
2. You loaded the no-fsm patch into the Flash Memory Manager but you forgot to apply it so the console isn't jailbroken.
3. You applied the patch but didn't reboot before trying to install the CFW PUP file, the jailbreak is fully applied only after reboot.

I used Rufus to format my Flash Drive to FAT32 for referrence.
 
According to the wiki, the error 0x80029C55 is
Code:
Error occurred while accessing storage media

If you wish to verify the jailbreak status, you could boot into XMB, load the PS3 Toolset again in the browser & look at the top right of the screen once the Toolset has finished loading.
What does it say about custom syscalls?

If it says OFW, it means the no-fsm patch was not applied properly, the console is not jailbroken.

If it says Cobra or CFW, the patch was applied, the console is jailbroken & custom syscalls are installed.

Keep in mind that jailbreak through replacement of official CoreOS with a CFW CoreOS is all the PS3 Toolset patching feature guarantees, any other problem related to PUP installation or whatever is not something the PS3 Toolset can address.
 
According to the wiki, the error 0x80029C55 is
Code:
Error occurred while accessing storage media

If you wish to verify the jailbreak status, you could boot into XMB, load the PS3 Toolset again in the browser & look at the top right of the screen once the Toolset has finished loading.
What does it say about custom syscalls?

If it says OFW, it means the no-fsm patch was not applied properly, the console is not jailbroken.

If it says Cobra or CFW, the patch was applied, the console is jailbroken & custom syscalls are installed.

Keep in mind that jailbreak through replacement of official CoreOS with a CFW CoreOS is all the PS3 Toolset patching feature guarantees, any other problem related to PUP installation or whatever is not something the PS3 Toolset can address.

Oh, it says on Custom Syscalls that it is CFW
 
Oh, it says on Custom Syscalls that it is CFW
So the PS3 Toolset did its job as expected and your console is currently running on Evilnat 4.88.2 CoreOS (if you are on 4.88).
Your problems are not jailbreak related & I would assume you will experience the same problem with any PUP file, OFW, HFW (which is basically a repacked OFW) or CFW.

If you dump the Flash memory & validate it with the latest pyps3checker tool, the 2 ROS regions should come up as Evilnat 4.88 patched or something like that.
 
So the PS3 Toolset did its job as expected and your console is currently running on Evilnat 4.88.2 CoreOS (if you are on 4.88).
Your problems are not jailbreak related & I would assume you will experience the same problem with any PUP file, OFW, HFW (which is basically a repacked OFW) or CFW.

Yes, but how do I install HEN from here? I mean, I want to put some games in my PS3 but how do I do that?
 
Yes, but how do I install HEN from here?
You don't install HEN.
You have to choose, it is either CFW (full jailbreak) or HEN (partial jailbreak), not both.
If you prefer to use HEN, you have to install a HFW 4.88 pup first.
But on a CFW compatible console, it makes little sense to use HEN.

At this stage, you should first eliminate all common causes for USB based firmware update errors, remove all external devices plugged into the ps3, use only the USB stick in rightmost USB port & no USB hub, no disc in BD drive, no BT devices other than the gamepad.
You should verify the integrity of your pup file, check its md5 checksum or whatever.

In recovery mode, check file system then rebuild db to ensure that all of is good there.
Then still in recovery mode try to install the CFW using the system update feature.
If it doesn't work & gives you the same error code, try another USB device just to be sure.
And if you still cannot install, get a different error code or whatever, report here, we can explore other avenues like reformatting the internal hdd.

I mean, I want to put some games in my PS3 but how do I do that?
What do you mean?
What games?
Ps3? Ps2 for emulation? Others?
Do you have retail discs?
PSN pkg files with licenses?
Game backups?
What format? Iso images? Legacy JB folder?
 
Last edited:
So the PS3 Toolset did its job as expected and your console is currently running on Evilnat 4.88.2 CoreOS (if you are on 4.88).
Your problems are not jailbreak related & I would assume you will experience the same problem with any PUP file, OFW, HFW (which is basically a repacked OFW) or CFW.

If you dump the Flash memory & validate it with the latest pyps3checker tool, the 2 ROS regions should come up as Evilnat 4.88 patched or something like that.

It just said:
******* Getting SDK versions *******
ROS0 : 488.000
ROS1 : 488.000

and no Evilnat CFW
 
Post the entire log, this quote is not sufficient to identify the CoreOS.

This is the entire log:

PyPS3checker v0.11.x. Check log.
Checked file : D:\dump.hex
******* Getting flash type *******
Flash type : NOR
Reversed : NO
******* Getting SKU identification datas *******
idps = 0x09
metldr0 = 0xE890
metldr1 = 0x0E85
metldrkey = 0xBC78B8F02879A81184A0DA74
bootldr0 = 0x2F13
bootldr1 = 0x2F13
bootldrsize = 0x2F170
Matching SKU : OK
CECH-20xxx (DYN-001)
Minimum version 2.70
******* Getting SDK versions *******
ROS0 : 488.000
ROS1 : 488.000
******* Checking first_region_header *******
001.01 First Region Header 0x00 Filled Area 0 : OK
001.02 First Region Header Magic : OK
001.03 First Region Header 0x00 Filled Area 1 : OK
******* Checking flash_format *******
002.01 Flash Format String : OK
002.02 Flash Format Version : OK
002.03 Flash Format 0xFF Filled Area : OK
******* Checking flash_region_table *******
003.01 Flash Region Table Header : OK
003.02 asecure_loader Offset - Length : OK
003.03 asecure_loader Name : OK
003.04 eEID Offset - Length : OK
003.05 eEID Name : OK
003.06 cISD Offset - Length : OK
003.07 cISD Name : OK
003.08 cCSD Offset - Length : OK
003.09 cCSD Name : OK
003.10 trvk_prg0 Offset - Length : OK
003.11 trvk_prg0 Name : OK
003.12 trvk_prg1 Offset - Length : OK
003.13 trvk_prg1 Name : OK
003.14 trvk_pkg0 Offset - Length : OK
003.15 trvk_pkg0 Name : OK
003.16 trvk_pkg1 Offset - Length : OK
003.17 trvk_pkg1 Name : OK
003.18 ros0 Offset - Length : OK
003.19 ros0 Name : OK
003.20 ros1 Offset - Length : OK
003.21 ros1 Name : OK
003.22 cvtrm Offset - Length : OK
003.23 cvtrm Name : OK
003.24 Flash Region Table 0x00 Filled Area : OK
******* Checking asure_loader_region *******
004.01 asecure_loader Header : OK
004.02 metldr Offset : OK
004.03 metldr Length : OK
004.04 metldr Name : OK
004.05 metldr RevKey : OK
004.06 metldr Binary Size : OK
004.07 metldr Statistics : OK
004.08 asecure_loader 0x00 Filled Area : OK
******* Checking eEID_region *******
005.01 eEID Header : OK
005.02 EID0 Offset - Length : OK
005.03 EID1 Offset - Length : OK
005.04 EID2 Offset - Length : OK
005.05 EID3 Offset - Length : OK
005.06 EID4 Offset - Length : OK
005.07 EID5 Offset - Length : OK
005.08 EID0 IDPS0 : OK
005.09 EID0 IDPS1 : OK
005.10 EID0 Static : OK
005.11 EID2 BlockSize/Padding : OK
005.12 EID3 Static0 : OK
005.13 EID3 Static1 : OK
005.14 EID3 Static2 : OK
005.15 EID5 IDPS0 : OK
005.16 EID5 IDPS1 : OK
005.17 EID5 Static : OK
005.18 eEID Region 0xFF Filled Area : OK
005.19 eEID Statistics0 : OK
005.20 eEID Statistics1 : OK
******* Checking cISD_region *******
006.01 cISD Header : OK
006.02 cISD0 Offset - Length : OK
006.03 cISD1 Offset - Length : OK
006.04 cISD2 Offset - Length : OK
006.05 cISD0 0xFF Filled Area : OK
006.06 cISD1 IDLog Header : OK
006.07 cISD1 Semistatic 1 : OK
006.08 cISD1 Semistatic 2 : OK
006.09 cISD1 0xFF Filled Area 0 : OK
006.10 cISD1 Static : OK
006.11 cISD1 Semistatic 3 : OK
006.12 cISD1 0xFF Filled Area 1 : OK
006.13 cISD1 Statistics : OK
006.14 cISD2 : OK
006.15 cISD 0xFF Filled Area : OK
******* Checking cCSD_region *******
007.01 cCSD Header : OK
007.02 cCSD Entry Table : OK
007.03 cCSD 0xFF Filled Area : OK
******* Checking Revokation_region *******
008.01 trvk_prg0 SCE : OK
008.02 trvk_prg0 Hash : OK
Size = 0x2E0
MD5 = 78629D24BD721488F3A1E846938F87DF
Version = 3.55 (from PUP)
008.02 trvk_prg0 0xFF filled area : OK
008.03 trvk_prg1 SCE : OK
008.04 trvk_prg1 Hash : OK
Size = 0x2E0
MD5 = E537DE954DCF25D4DE961DF44549BAF7
Version = 3.50 (from PUP)
008.04 trvk_prg1 0xFF filled area : OK
008.05 trvk_pkg0 SCE : OK
008.06 trvk_pkg0 0xFF filled area : OK
008.07 trvk_pkg1 SCE : OK
008.08 trvk_pkg1 0xFF filled area : OK
******* Checking CoreOS_region *******
009.01 ROS0 Header : OK
009.02 ROS0 Hash : OK
Size = 0x6FFFE0
MD5 = EA9F81A031A7B6701560B3501712DF1A
Version = 4.88 CEX Patched (Evilnat based)
009.03 ROS0 unused 0xFF Filled Area : OK
009.04 ROS1 Header : OK
009.05 ROS1 Hash : OK
Size = 0x6FFFE0
MD5 = EA9F81A031A7B6701560B3501712DF1A
Version = 4.88 CEX Patched (Evilnat based)
009.06 ROS1 unused 0xFF Filled Area : OK
******* Checking cvtrm_region *******
010.01 Pre cvtrm 0xFF Filled Area : OK
010.02 cvtrm0 Header : OK
010.03 cvtrm0 0xFF Filled Area : OK
010.04 vtrm0 Magic : OK
010.05 vtrm0 Reserved Entries : OK
010.07 cvtrm1 Header : OK
010.08 cvtrm1 0xFF Filled Area : OK
010.09 vtrm1 Magic : OK
010.10 vtrm1 Reserved Entries : OK
******* Checking Second_Region_Header *******
011.01 Second Region Header 0x00 Filled Area 0 : OK
011.02 Second Region Header Magic : OK
011.03 Second Region Header Count : OK
011.04 Second Region Header 0x00 Filled Area 1 : OK
011.05 Second Region Unknown Block 0 : OK
011.06 Second Region Header 0x00 Filled Area 2 : OK
011.07 Second Region Unknown Block 1 : OK
011.08 Second Region Header 0x00 Filled Area 3 : OK
******* Checking Unreferenced_Area *******
012.01 unreferenced area 0xFF Filled : OK
******* Checking CELL_EXTNOR_AREA_Region *******
013.01 CELL_EXTNOR_AREA Header : OK
013.02 CELL_EXTNOR_AREA 0x00 Filled Area 0 : OK
013.03 CELL_EXTNOR_AREA 0x00 Filled Area 1 : OK
013.04 CELL_EXTNOR_AREA 0x00 Filled Area 2 : OK
013.05 CELL_EXTNOR_AREA 0x00 Filled Area 3 : OK
013.06 CELL_EXTNOR_AREA 0xFF Filled Area 0 : OK
013.07 CELL_EXTNOR_AREA 0x00 Filled Area 5 : OK
013.08 CELL_EXTNOR_AREA 0x00 Filled Area 6 : OK
013.09 CELL_EXTNOR_AREA 0xFF Filled Area 1 : OK
******* Checking bootldr_region *******
014.01 bootldr0 : OK
014.02 bootldr1 : OK
014.03 bootldr Rev key : OK
014.04 bootldr Statistics : OK
014.05 bootldr 0xFF Filled Area : OK
******* Checking datamatches *******
bootldr size : OK
per console nonce : OK
CELL_EXTNOR_AREA Hash1 : OK
CELL_EXTNOR_AREA Hash2 : OK
metldr size : OK
vtrm0 : OK
vtrm1 : OK
******* Checking repetitions *******
Header Magic0 Repetitions : OK
asecure_loader Repetitions : OK
eEID Repetitions : OK
cISD Repetitions : OK
cCSD Repetitions : OK
trvk_prg0 Repetitions : OK
trvk_prg1 Repetitions : OK
trvk_pkg0 Repetitions : OK
trvk_pkg1 Repetitions : OK
ros0 Repetitions : OK
ros1 Repetitions : OK
cvtrm Repetitions : OK
******* Additional information *******
HDD : Hitachi HTS545025B9SA00 090915PB4208QSKA67BH
MAC address : 00:24:8D:C0:20:54
CID : 0x00010077C738
eCID : 01C52002E20A370E1D0D5F4200000000
board_id (part of console S/N) : 27453973
kiban_id (board barcode) : 3HG14647437G
******* Checks completed *******
Total number of checks = 155
Number of dangers = 0
Number of warnings = 0
All checks done in 8.30 seconds.
----------------------------------------------------------------------------
| IMPORTANT NOTICE ! |
| Checks of late CECH-25xxx, CECH-3xxxx and CECH-4xxxx consoles dumps still |
| under development and may return false results. If you feel it's the case, |
| please post your *.checklog.txt in a new issue on my github repository: |
| https://github.com/littlebalup/PyPS3tools/issues |
| Thanks! It will help me a lot to improve that tool ;) |
----------------------------------------------------------------------------
 
No errors, no warnings & as expected, it clearly says for each ROS region where CoreOS is stored:
Code:
Version = 4.88 CEX Patched (Evilnat based)

Like I said the issue is not with the jailbreak, the PS3 Toolset did its job exactly the way it is supposed to.
 
You don't install HEN.
You have to choose, it is either CFW (full jailbreak) or HEN (partial jailbreak), not both.
If you prefer to use HEN, you have to install a HFW 4.88 pup first.
But on a CFW compatible console, it makes little sense to use HEN.

At this stage, you should first eliminate all common causes for USB based firmware update errors, remove all external devices plugged into the ps3, use only the USB stick in rightmost USB port & no USB hub, no disc in BD drive, no BT devices other than the gamepad.
You should verify the integrity of your pup file, check its md5 checksum or whatever.

In recovery mode, check file system then rebuild db to ensure that all of is good there.
Then still in recovery mode try to install the CFW using the system update feature.
If it doesn't work & gives you the same error code, try another USB device just to be sure.
And if you still cannot install, get a different error code or whatever, report here, we can explore other avenues like reformatting the internal hdd.

When it comes to removing the external devices plugged into the PS3, does it include my controller? it's a wired controller though
 
Back
Top