@aldostools , DEP,
, stupid windows, thanks aldo.
, stupid windows, thanks aldo.
, stupid windows, thanks aldo.The bdd was unplugged. Took me a week to figure that out. Thank you very much for your help. When I used the nobd version it wouldn't try to install it I assume it would try to do the update I had originally started (I suppose I'm just assuming this), because it did the same thing every time with or without USB storage. After I discovered it was slightly unplugged, it didn't even try to reinstall the update. It went straight to the date/time prompt. I had been putting off talking to this dude for a week, because I really didn't want to tell him I bricked his console. I even started putting his games on my ps3, because I knew it would be replacing his black brick! Now I can't get "the warriors" to play. Need to go down that rabbit hole. Tried pkg, encryption, and just iso. I'm used to working with HEN. Anyways thanks again, Atretu187. Live, Love, Burn, Die! Unless of course your handle is a reference to the never ending story.That is a hardware fault. Is your BT, WiFi or BD drive bad? Or did you take it apart recently? First thing I would do is ensure everything is connected and if everything is ok you could use a no-BT no-BD patched CFW.
.

Great job once again @Evilnat. Much appreciated. Legend.
I deciced to dust off the cobwebs and update my CEX system from 4.88 evilnat to 4.89 evilnat. System update failed update via storage media but successfully updated via safety/recovery mode.
I have noticed an issue that really bugs my OCD. When installing homebrew ect it always placed the newest install above the prevously installed homebrew in the XMB/Game column. However after updating to 4.89 they are now all out of order, I downgraded back to 4.88 an all went back to order, reinstalled 4.89 an same issue.
Previously when the homebrew order got messed up (usually due to getting banned) I just reinstalled the homebrew and it would correct the placement order. This method did not resolve the issue.
Any resolutions? Please & Thanks.
MODEL CECHE12
Also noticed this issue while installing homebrew on a slim system I recently jailbroke for a friend. So definitely seems to be either a issue with the firmware or a new option/setting.
View attachment 38447
OMG after trying to resolve this issue for a few weeks with no remedy, seaching the forum and chats for an answer, I gave up and finally make a post for help, within 2 mins I self resolved the issue.
select 'Sort By' then select 'Creation Date'
Yeah it's a new option to CFW. Many people with large game collections complain that its hard to find what they want when they are sorted by date as people forget the order of installation. Sony never offered alphabetical sorting for some reason.Must be a new option or at least to me it is have never noticed. OCD has been temporarily cured.
Yeah it's a new option to CFW. Many people with large game collections complain that its hard to find what they want when they are sorted by date as people forget the order of installation. Sony never offered alphabetical sorting for some reason.
So in this CFW the option to sort games by date from oldest to newest was replaced with A-Z. So now they can be sorted by date or name.
BTW: No one should be using PS Ninja anymore really, Just so you know.
Ah ok. I think I misunderstood the issue then.IIRC the sort by title/date works fine on 4.88 but in 4.89 is broken. I guess Evilnat only replaced text in the rco but forgot to replace the registory.xml
Yeah it's a new option to CFW. Many people with large game collections complain that its hard to find what they want when they are sorted by date as people forget the order of installation. Sony never offered alphabetical sorting for some reason.
So in this CFW the option to sort games by date from oldest to newest was replaced with A-Z. So now they can be sorted by date or name.
BTW: No one should be using PS Ninja anymore really, Just so you know.

NOTE: I see PSN access is blocked until syscalls are disabled. EXCELLENT ADDITION especially for newbies. But can we have an option added (or is there an option) to temporarily disable the block to PSN as some older games give a black screen and freeze on load up when syscalls are disabled e.g COD 4.
That's a bad idea. If need to play a game with syscalls enabled simply don't login to PSN.
Access PSN with syscalls enabled is a bad idea, specially to play risky games like CoD, GTA, Destiny among others.

@zecoxao I have added the option to check/enable the 8th SPE in xai_plugin. But I have a question, if the 8th SPE it's damaged the PS3 will have syscon brick?@Evilnat a suggestion (i get constantly asked this and it's starting to get annoying)
Option to the plugin: Enable 8th SPE (put this in service functions as it's a dangerous option)
Patches for writing to eeprom via lv1 must be enabled and also for reading as well (so we can check that the previous byte is effectively 0x06)
More info:
https://psdevwiki.com/ps3/Unlocking_the_8th_SPE
my twitter account is notzecoxao. and no, that won't happen.nothing bad will happen@zecoxao I have added the option to check/enable the 8th SPE in xai_plugin. But I have a question, if the 8th SPE it's damaged the PS3 will have syscon brick? Btw, your twitter account has been suspended?
![]()
Hi guys, I'm so sorry if this been answered hundreds of times.. But I was going to do my phat to CFW but I see toolset still down. But I have a slim already done on 4.88 Evilnat - Now am I right in thinking I can just update the 4.89 evilnat update pup file and all good ? I do apologise, I been updating and homebrew on multiple systems recently, it all comes a bit of a blur..
thanks you sir, evilnate its best CFW ever
CFW 4.89 Evilnat release details Tested Models Improvements to xai plugin Savegames / act.dat / PSN Block Tuts Credits & Acknowledgments
4.89 EVILNAT (COBRA 8.3)
Features
- Made out of 4.89 OFW (CEX)
- Made manually without automatic tools
- SEN/PSN enabled
- Disabled deletion of unsigned act.dat and .rif files
- Allowed unsigned act.dat and .rif files
- Allowed running of unsigned applications
- Compatibility with FSELF
- C00 demo unlocker
- Disabled LIC.EDAT license check
- Can be installed over 3.55 OFW
- Can be installed over +3.56 OFW (bguerville Toolset)
- Can be installed over any CFW CEX
- COBRA 8.3 added and enabled as default
- Full PS2 Games Compatibility
- Possibility of Downgrade from any CFW with active QA Flags
- QA Flags active if previously enabled
- Disabled Epilepsy Message on Boot
- Compatibility with PSX games in ISO
- Compatibility with PSP games in ISO
- Compatibility with PS2 games in ISO
- Compatibility with PS3 games in ISO/JB folder format
- Compatibility with ReactPSN
- Display of Temperatures in XMB In-Game on PS2 Games
- RSOD Screen Bypass
- BSOD Screen Bypass
- PS3_GAME/app_home
- XMB In-Game Screenshot
- Added Package Manager
- CoreOS Hash Check patched to prevent Brick on non-dehashed Downgradate consoles
- Patched to remove LV2 Protection
- Peek and Poke (LV2)
- Peek and Poke (LV1)
- CINAVIA protection disabled
- Option to sort games by name and date
Cobra 8.3
- Failsafe Cobra stage2 (by bguerville/aldo)
- Restore CFW Syscalls without reboot just entering to 'Settings > System Update' on XMB (by aldo)
- Integrated Dynamic Control FAN (to control fan when webMAN is unloaded) (by aldo/Evilnat)
- Support Photo GUI integration with webMAN MOD (mount games from 'Photo' column) (by aldo/DeViL303)
- Get/Set FAN speed (by aldo)
- Enable/disable features: Photo GUI, Restore Syscalls (by aldo)
- Opcode to create CFW Syscalls (6, 7, 8, 9, 10, 11, 15, 35) (by aldo)
- Opcode to set fake accountID (by Evilnat)
- Opcode to activate account (act.dat) (by Evilnat)
- Opcode to create license (RIF) (by Evilnat)
- Updated ps3mapi_load_process_modules to load custom modules and system modules (by haxxxen)
- Added ps3mapi_get_process_module_info
- Increased from 24 to 32 the max number of map paths (by aldo)
- Added sm_get_temperature patch in kernel (by Evilnat)
- Added sm_get_fan_policy patch in kernel (by Evilnat)
- Added sm_set_fan_policy patch in kernel (by Evilnat)
- Fixed Control FAN payload, avoids loading previous mode (by Evilnat)
- Disable stage2.bin while Recovery Menu is loaded (by haxxxen)
- Fixed max FAN speed after shutdown (by Evilnat)
- Improved Habib's QA flags code imported by aldostools (by Evilnat)
- Fixed black screen in CFW2OFW converted games (by Evilnat)
- Added sm_ring_buzzer with single_beep, double_beep and triple_beep (by Evilnat)
- Skip license creation (rif) if it already exists (by aldo)
- Added cellFsMkdir symbol (by Evilnat)
- Added constant FAN Speed while a PS2 ISO is launched (by Evilnat)
- Check/Disable/Enable QA Flags (by Evilnat)
- Creation of act.dat while launching a PSN game (by Evilnat)
- Convert someones's else savedata to your own savedata (by Evilnat)
- Block Log In on PSN/SEN when CFW syscalls are enabled (by DeViL303)
Translations
- Brazilian: @jcorrea and @LuanTeles
- Polish: @KcrPLo and @Agrippa
- Italian: @Sheireen
- Spanish: Evilnat
- Chinese Traditional/Simplified: @xiaoyang
Tested in:
- CECH-2000A
- CECH-2000B
- CECH-2001A
- CECH-2002B
- CECH-2004A
- CECH-2012A
- CECH-2104B
- CECH-2500A
- CECH-2501A
- CECH-2504A
- CECH-2511A
- CECH-2511B
- CECH-L04
- CECHA01
- CECHE01
- CECHB01
- CECHC04
- CECHG01
- CECHP01
Improvements xai plugin
These options are in XMB's Network tab under [★ Custom Firmware Tools] option:
Power Options
- Turn Off: Turns off the PS3
- Hard Reboot: Reboots the PS3 completely
- Soft Reboot: Reboots the PS3 softly
- Reboot LV2: Reboots the LV2
File Manager
- Internal Hard Disk Drive 0: Manage PS3 files in /dev_hdd0
- Internal Hard Disk Drive 1: Manage PS3 cached files in /dev_hdd1
- USB Mass Storage Devices: Manage files on your USB devices
- Internal Flash Memory: Manage PS3 internal flash files
- Optical Disc: Manage optical discs
- Memory Cards: Manage memory cards
Basic Tools
- FAN Speed: Shows current FAN speed
- PS3 Temperature: Shows current CPU and RSX temperature
- Show IDPS: Shows current IDPS
- Show PSID: Shows current PSID
- Toggle Coldboot: Toggles between custom/original coldboot.raf
- Toggle System Version: Toggles between custom/original system version in "System Information"
Basic Tools > xRegistry Tools
- Backup xRegistry.sys: Creates a backup of xRegistry.sys to /dev_usb or /dev_hdd0
- Button Assignment: Switches O and X buttons
Cobra Tools
- Cobra Information: Shows current Cobra information
- Check Syscall 8: Checks Cobra's Syscall 8 status
- Create Syscalls: Create syscalls 6, 7, 8, 9, 10, 11, 15 and 35
- Allow Restore Syscalls: Allows restoring syscalls through "System Update"
- Skip license creation: Skips overwriting license file (RIF) if it already exists
- Toggle Cobra Version: Toggles between release and debug versions (reboot is required)
- Toggle Cobra: Enables or disables Cobra (reboot is required)
Cobra Tools > FAN Tools
- Control FAN Mode: DISABLED: Disables Cobra's Control FAN
- Control FAN Mode: SYSCON: Allows the PS3's SYSCON to control FAN speed
- Control FAN Mode: MAX: Set Cobra FAN speed to 0xFF
Cobra Tools > QA Tools
- Check QA Flags: Check if QA flags are enabled or disabled
- Enable QA Flags: Enables QA Flags
- Disable QA Flags: Disables QA Flags
Cobra Tools > FAN Tools > Dynamic FAN Control
- Maximum temperature: 60°C: Sets the fan speed dynamically to keep the system at a maximum temperature of 60°C
- Maximum Temperature: 65°C: Sets the fan speed dynamically to keep the system at a maximum temperature of 65°C
- Maximum Temperature: 70°C: Sets the fan speed dynamically to keep the system at a maximum temperature of 70°C
- Maximum Temperature: 75°C: Sets the fan speed dynamically to keep the system at a maximum temperature of 75°C
WARNING: Some PS3 cannot reach/stay some option temperatures, use with caution
Cobra Tools > FAN Tools > Manual Speed
- Manual Speed: 40%: Sets the fan speed statically at 40% (0x67)
- Manual Speed: 45%: Sets the fan speed statically at 45% (0x75)
- Manual Speed: 50%: Sets the fan speed statically at 50% (0x80)
- Manual Speed: 55%: Sets the fan speed statically at 55% (0x8E)
- Manual Speed: 60%: Sets the fan speed statically at 60% (0x9B)
- Manual Speed: 65%: Sets the fan speed statically at 65% (0xA8)
- Manual Speed: 70%: Sets the fan speed statically at 70% (0xB5)
- Manual Speed: 75%: Sets the fan speed statically at 75% (0xC0)
- Manual Speed: 80%: Sets the fan speed statically at 80% (0xCE)
- Manual Speed: 85%: Sets the fan speed statically at 85% (0xDA)
- Manual Speed: 90%: Sets the fan speed statically at 90% (0xE7)
- Manual Speed: 95%: Sets the fan speed statically at 95% (0xF4)
WARNING: The chosen speed will be static, it will not be changed at any time automatically
Cobra Tools > FAN Tools > PS2 FAN
- PS2 Fan Mode: DISABLED: Disables Control FAN on PS2 game
- PS2 Fan Mode: SYSCON: Allows the PS3's SYSCON to control FAN speed on PS2 game
- PS2 Fan Mode: 40%: Sets FAN speed to 0x66 on PS2 game
- PS2 Fan Mode: 50%: Sets FAN speed to 0x80 on PS2 game
- PS2 Fan Mode: 60%: Sets FAN speed to 0x9A on PS2 game
- PS2 Fan Mode: 70%: Sets FAN speed to 0xB4 on PS2 game
- PS2 Fan Mode: 80%: Sets FAN speed to 0xCE on PS2 game
- PS2 Fan Mode: 90%: Sets FAN speed to 0xE8 on PS2 game
WARNING: There is no Control FAN in a PS2 game, select with caution
PSN Tools
- Disable Syscalls: Disables syscalls and remove history files
- Show accountID: Shows current user's accountID
- Create accountID: Creates a fake accountID for current user's in xRegistry
- Overwrite accountID: Overwrites current user's accountID with a fake one in xRegistry
- Activate account: Creates act.dat file in the current local account
- Create license: Creates RIF licenses from RAP files from "x:\exdata"
- Backup activation file: Creates a backup of act.dat to /dev_usb or /dev_hdd0
- Disable account: Deletes current user's activation file act.dat permanently
- Convert savedata: Converts savedata from "/dev_usbXXX/PS3/SAVEDATA" to your own savedata
Dump Tools
- View Log: http://localhost/dev_hdd0/tmp/cfw_settings.log (webMAN MOD is required for this function)
- Clean Log File: Resets /dev_hdd0/tmp/cfw_settings.log file
- Dump IDPS: Saves IDPS to log file
- Dump PSID: Saves PSID to log file
- Dump LV2: Dumps LV2 to /dev_usb or /dev_hdd0/tmp
- Dump LV1: Dumps LV1 to /dev_usb or /dev_hdd0/tmp
- Dump ERK: Dumps eid_root_key to /dev_usb or /dev_hdd0/tmp
- Log KLicense usage: Saves filename and klicensee to log file
- Log Secure File ID usage: Writes save data name and file ID key to log file
- Dump Disc Hash Key: Retrieves disc hash key from an ORIGINAL game disc
Service Tools
- Display Applicable Version: Displays minimum downgrade version
- Check File System: Reboots and allows you to check and repair filesystem
- Rebuild Database: Reboots with Database rebuilding flag set
- Toggle Recovery Mode: Reboot to Recovery Mode (Not supported on NAND models!)
Service Tools > Advanced Service Tools
- RSOD fix: Re-initialize VTRM-Region to attempt to fix RSOD
- Toggle Factory Service Mode: Enter/Exit Factory Service Mode (DON'T INSTALL CFW ON FSM)
- Remarry Bluray Drive: Requires: Enter to FSM and copy "eid_root_key" to /dev_usb
- Load LV2 kernel: Loads lv2_kernel.self file from /dev_usb000 or /dev_flash
Savegames conversion tutorial
WARNING: This option will overwrite your current savedata in dev_usbXXX, use it with caution
- Download someone else's savegame for your game of your choice
- Put the savedata in your pendrive in "X:\PS3\SAVEDATA" (pendrive must be in FAT32)
- Put in the pendrive in the PS3
- Select Network Tab > [★ Custom Firmware Tools] > PSN Tools > Convert Savedata
- Wait until the conversion finishes
- Once finished, copy your converted savedata throught XMB "Saved Data Utility (PS3)"
- Launch your game and load your new savedata
.Creation of act.dat tutorial
WARNING: The accountID is linked to savedata and trophies, so, if your current user already have a valid accountID and you overwrite it, you will be unable to use your trophies and savedata on that account until you restore the original accountID in xRegistry.sys.
I recommend to use an empty account without trophies and savedata or an account without accountID.
To create a fake act.dat, Cobra 8.3 must be enabled, and your PS3 must have at least one account with a valid accountID and launch a game that requires a RIF/RAP license file.
Cobra will search a valid accountID in all existing accounts and create act.dat while the game is launched through the XMB. If no accountID is found, act.dat will not be created.
You can create a fake accountID (like reactPSN), to do this go to Network > ★ Custom Firmware Tools > PSN Tools and choose between "Create accountID" or "Overwrite accountID" (Be careful about the last option because if you already have a fake/real accountID it will be overwritten). It is recommended to use these options in an account that does not have an ID. The PS3 will restart if everything went well.
The tutorial would be the following:
- Download your purchased PSN game from PS Store
- Put game RAP file in "X:\exdata" or "/dev_hdd0/exdata"
- Launch your purchased PSN game
- Cobra will check if any of your PS3 accounts have accountID
- Faked act.dat will be created while the game is launching
If none of your accounts have a valid accountID you will need to create it. To do this log into the local PS3 account where you want to create the accountID. You can see if your current local account has an accountID choosing Network Tab > [★ Custom Firmware Tools] > PSN Tools > Show accountID.
To create a faked act.dat do the following:
- Make sure Cobra 8.3 is enabled
- Select Network Tab > [★ Custom Firmware Tools] > PSN Tools > Create accountID
- Select Network Tab > [★ Custom Firmware Tools] > PSN Tools > Activate account
- Launch your purchased PSN game
- Faked act.dat will be created while the game is launching
Now you have a faked act.dat and your local account is activated. The act.dat file works for every local account, you only need one file for all accounts.
.Block PSN log in
This method is developed by @DeViL303, it will only work with Cobra enabled, Cobra will block log in on PSN/SEN while the CFW syscalls are enabled, to enable it again you need to disable CFW syscalls completely (you can do it with webMAN MOD, psnpatch, SEN Enabler, etc…).
If you want to disable this feature, simply delete /dev_flash/vsh/resource/npsignin_plugin.lck
Credits and Acknowledgment
Credits to Team Rebug, Team Cobra, @mysis, @Joonie, @habib, @aldostools, @haxxxen, @DeViL303, @zecoxao, @3141card, @Berion, @kakaroto, @KW, @naehrwert, @flatz, @Dean, @Rogero, @Estwald and anyone who has contributed to the PS3 scene.
Thanks to @DeViL303, @Berion, @Brandon Stump, @jcorrea, @nhie07, @NSC-Modz, @LuanTeles, @thejavigames, @raidriar, @xiaoyang, @Zwei, @haxxxen, @RetroFan_90, @SpyroMancer, @patricksouza472, @MrYadro, @CFW-Us3r, @Andrio, @KcrPLo, Nur Rakhmadi Rajab, @Lwiz, @Sheireen, @TheWizWiki, @ORION_games_, @Mikeclan_, @MlK3YY_, @XxalexXrey, @MurilloMadriz, @ReinSertt , @vitormoraes1903 and all who helped me testing the CFW 4.89.
If I forgot someone, I apologize, there are many people in the PS3 scene and you are many people who
have helped me to test the CFW.
Download: MEGA FOLDER WITH ALL CFW VERSION
Download: CFW EVILNAT 4.89 COBRA 8.3 [CEX]
MD5: 14CC1EC94488858BB85ABB335876A5CF
Download: CFW EVILNAT 4.89 COBRA 8.3 [CEX] [noBD]
MD5: 597BE74B932E8115178BB5BEC94026C7
Download:CFW EVILNAT 4.89 COBRA 8.3 [CEX] [noBT]
MD5: E4426F5338FCDE35D728F443899C7AF9
Download: CFW EVILNAT 4.89 COBRA 8.3 [CEX] [noBD] [noBT]
MD5: 2B97BED2374872A5337D593BEC9B915B
.Final Words
I hope that the CFW is working fine and without issues for everyone, but if you see any issue, please let me know in my twitter and I will try to fix it as soon as possible: @xXEvilnatXx
Cobra 8.3 and xai_plugin source code can be found in my Github repository:
- Cobra 8.3: https://github.com/Evilnat/Cobra-PS3/tree/master/8.3
- xai_plugin: https://github.com/Evilnat/xai_plugin
(void*&)(cellCryptoPuSha1HmacInit) = (void*)((int)getNIDfunc("sdk", 0x547B602C));
(void*&)(cellCryptoPuSha1HmacTransform) = (void*)((int)getNIDfunc("sdk", 0x4484A101));
(void*&)(cellCryptoPuSha1HmacFinal) = (void*)((int)getNIDfunc("sdk", 0x300B99F2));
static int (*cellCryptoPuSha1HmacInit)(uint64_t data[160], uint8_t *key, int32_t key_length) = 0;
static int (*cellCryptoPuSha1HmacTransform)(uint64_t data[160], uint8_t *data_in, int32_t data_length) = 0;
static int (*cellCryptoPuSha1HmacFinal)(uint8_t *output, uint64_t data[160]) = 0;
int sha1_hmac_starts(uint64_t data[160], uint8_t *key, int32_t key_length)
{
return cellCryptoPuSha1HmacInit(data, key, key_length);
}
int sha1_hmac_update(uint64_t data[160], uint8_t *data_in, int32_t data_length)
{
return cellCryptoPuSha1HmacTransform(data, data_in, data_length);
}
int sha1_hmac_finish(uint8_t *output, uint64_t data[160])
{
return cellCryptoPuSha1HmacFinal(output, data);
}