Team Rebug is back with a new release with 4.81.2 REBUG REX / D-REX , this update adds the new Cobra v7.50 payload that debut in 4.81 Habib Starbucks CFW, along with the changes that Cobra v7.50 has brought ( Fake Save Data Owners & Game Quit patches have been applied for us, so that means we can say good bye to those annoying popups. Rebug Toolbox has been updated with new PS2 Netemu toggler for Cobra. This Custom Firmware keeps getting better and better and be sure to checkout the complete release notes at rebug.me for its usage with the rebug toolbox​

REBUG_CFW_PS3.jpg


  • What's new in 4.81.2 REX/D-REX?
    • c00 demo content unlocker - (c00 demo contents can be unlocked without activation)
    • Syscall 15 added for Standard mode - (Allow execution of any LV2 internal functions)
    • Syscall 870 re-enabled - (IDPS can now be dumped without LV2 Peek and Poke, (It was officially patched since 4.55))
    • XMB notification removal - (Fake Save Data Owner and Game Quit: No Request Event will not be displayed)
    • REBUG TOOLBOX 2.02.12 - (PS2 Netemu toggler for COBRA 7.5 and the multi language version is also available)
    • webMAN MOD 1.45.09 - (Minor bug fixes, change notes available via Git repo)
    • COBRA 7.5 Added - (Change notes available via Git repo)

    FEATURES FOR REBUG REX/D-REX EDITION

    • FEATURE – Dual LV2 Kernels CEX/DEX
      • (Swap your EID0/LV2 kernel using Rebug Toolbox in seconds)
    • FEATURE – ALL Retail functions available in CEX mode
      • (No need to install different firmware)
    • FEATURE – ALL Debug functions available in DEX mode
      • (No need to install different firmware)
    • FEATURE – FULL ProDG Connectivity in DEX mode
      • (Full Support on both Normal mode and Cobra mode)
    • FEATURE – QA Token compatibility
    • FEATURE – OtherOS++ support enabled
      • (Use Rebug Toolbox to Boot OtherOS with different LV1 patches)
    • FEATURE – Package Manager
      • (Replacement for the standard 'Install Package Files' option)
    • FEATURE – FSELF compatibility
      • (Fake Signed ELF is supported on both CEX and DEX modes.)
    • INCLUDED – Rebug Toolbox 2.02.12 *UPDATED
      • (Install included Rebug Toolbox or higher for full compatibility)
    • PATCHED – Appldr: LV2 memory hash check is disabled
      • (Memory protection on LV2 is disabled in higher level)
    • PATCHED – LV1: Disable System Integrity Check
      • (Safe to use with mismatched COREOS/SYSCON versions or if PS3 is not QA enabled)
    • PATCHED – LV1: Undocumented function 114
      • (Allow mapping of protected memory)
    • PATCHED – LV1: Skip all ACL Checks
      • (Needed to allow booting of OtherOS)
    • PATCHED – LV1: Peek and Poke support
      • (Unused LV1 call 182 and 183)
    • PATCHED – LV2: Peek and Poke support
      • (LV2 Syscall 6 and 7)
    • PATCHED – LV2: Peek and Poke support for LV1
      • (LV2 Syscall 8 and 9)
    • PATCHED – LV2: LV1 CALL System call
      • (LV2 Syscall 10)
    • PATCHED – LV2: Allow execution of any LV2 internal function *NEW
      • (LV2 Syscall 15)
    • PATCHED – LV2: IDPS dump support without LV2 Peek *NEW
      • (LV2 Syscall 870)
    • PATCHED – Recovery: Prevent accidental OFW update while on Recovery mode
    • PATCHED – VSH: Allow Unsigned act.dat and *.rif files
    • PATCHED – VSH: Auto unlocks c00 demo contents *NEW
    • PATCHED – VSH: Disable Unlinking/Deleting of act.dat
      • (Improved patches applied)
    • PATCHED – VSH: Disable NEW PSP DRM Check
      • (Allowing unsigned PSP pkg contents on 4.75 or higher CFW)
    • PATCHED – VSH: Disable Epilepsy Warning for Faster Boot-Up Speed
    • PATCHED – VSH: XMB notification removal *NEW
      • (Fake Save Data Owner and Game Quit: No Request Event will not be displayed)
    • FUN FEATURE – Fake Save Data Owner
      • (Use Game Saves from ANY Owner)
    • FUN FEATURE – In Game Screenshot
      • (Allows taking screenshots in Game)
    • FUN FEATURE – Disabled flag check in PARAM for Remote Play
      • (For better compatibility with remote play, custom flags in PARAM is recommended)
    • FUN FEATURE – Lock/Unlock Trophies (Offline only)
    • FEATURE – Cinavia protection fully disabled
      • (Supports optical media/bd iso, AACS must be decrypted)
    • FEATURE – Full BD/DVD Playback support on both CEX/DEX mode
      • (BD/DVD movies can now be played on DEX mode, major thanks to mysis!)
    • FEATURE – COBRA 7.5 *UPDATED
      • (Disabled by default, Toolbox required to enable)
    • FEATURE – 1.45.09 MOD REBUG EDITION *UPDATED
      • (Full Webman intergration supports both CEX/DEX 4.81)
    • FEATURE – XMB CFW settings v0.1a
      • (XMB icons for simple CFW tasks available via REBUG TOOLBOX 2.02.12)
    • FEATURE – PSN/SEN Accesibility
      • (PSN /SEN Accessible , until the next OFW update)
    • FEATURE – XMBM+ Compatibility
      • (XMB Manager Plus developed by Team XMBM now supported via standalone pkgs.)



Download & Additional details about this CFW @: www.Rebug.me
 
Last edited:
Is there an example of what these CONFIG files look like? Also, how do you make them? Do you use OPL CFG Editor or something else? Thanks.
 
Never used this, but is look like config is similar to RAW code for ps2 cheat engines. http://www.psdevwiki.com/ps3/Emulation#CONFIG_File

Ps. This mean we also can use cheats that way :p
great idea, but does it really work?
something gets patched with these, but what is the question. if the elf directly gets patched, then yes, this can work with cheats. guess i have to dive into ps2 games for this again.
 
great idea, but does it really work?
something gets patched with these, but what is the question. if the elf directly gets patched, then yes, this can work with cheats. guess i have to dive into ps2 games for this again.

I think this config patches elf inside ps2iso, it uses sector offsets as well, You gotta look it up on ida to see where the original instruction is located


Sent from my iPhone using Tapatalk
 
I think this config patches elf inside ps2iso, it uses sector offsets as well, You gotta look it up on ida to see where the original instruction is located
the question is, how to write correctly such a config file. those samples on wiki do not really help to understand. and besides, that disassembly on wiki is more than confusing, like most of the times there.
 
the question is, how to write correctly such a config file. those samples on wiki do not really help to understand. and besides, that disassembly on wiki is more than confusing, like most of the times there.

PS2 elf is MIPS (Little endian) while PS3's PPC(Big Endian), so the instruction is backward due to endian difference, the CONFIG was written for PS3 to understand
 
look the table "commands", it's wrote in psdevwiki, you have a command ID then the DATA, you can have several command in one CONFIG.

for example :
3D 00 00 00 89 3D 00 00 2C 00 00 00 01 00 00 00
00 00 00 00 53 4C 45 53 2D 38 32 30 30 35

command_ID = 0x3D : netemu_revision ?
Data = 0x3D89 : 15753
command ID = 0x2C : Unknown
Data = 0x1 : Something Activated ?
command_ID : 0x00 : Game_ID ?
Data = 0x534C45532D3832303035 : SLES-82005

We can write one "random" CONFIG corretly perhaps it will be even better to create a soft to build CONFIG (with checkboxes for each command) and then to try the CONFIG files until the game works.

I want to create one included in ManaGunZ... but it's still in my head ;)
 
look the table "commands", it's wrote in psdevwiki, you have a command ID then the DATA, you can have several command in one CONFIG.

for example :
3D 00 00 00 89 3D 00 00 2C 00 00 00 01 00 00 00
00 00 00 00 53 4C 45 53 2D 38 32 30 30 35

command_ID = 0x3D : netemu_revision ?
Data = 0x3D89 : 15753
command ID = 0x2C : Unknown
Data = 0x1 : Something Activated ?
command_ID : 0x00 : Game_ID ?
Data = 0x534C45532D3832303035 : SLES-82005

We can write one "random" CONFIG corretly perhaps it will be even better to create a soft to build CONFIG (with checkboxes for each command) and then to try the CONFIG files until the game works.

I want to create one included in ManaGunZ... but it's still in my head ;)

Some games like Fatal Frame 2

upload_2017-1-11_14-55-48.png


Code:
0x3D => 0x42AF (17071)
0x21 => 0
0x48 => 0x2, 0xFFFFE69C
0x0A => 1,
  0x17701C, 0x240F0141 (li    t7,0x141)
            0x240F0161 (li    t7,0x161)
0x46
0x0B => 1
  0x4DD, (sector)
  0x2E8, (offset -> 0x26EADC in iso)
    0x04,
                  0x84734200 lh    s3,0x4200(v1),
                  0xFF020000 sd    v0,(t8)


This is the instruction that's used to patch the elf.

upload_2017-1-11_14-57-28.png



0x17701C, 0x240F0141 (li t7,0x141) <- is found in that location


I assume this replaces the existing function from the elf


upload_2017-1-11_15-3-19.png


Code:
0x4DD, (sector) 0x2E8, (offset -> 0x26EADC in iso)

This is what I understood so far..

FYI @Zar @haxxxen
 
Sweet! I've gone ahead and generated a No-BD version of both REX and D-REX which are listed below.

BOTH ARE UNTESTED, PLEASE ONLY TRY THESE IF YOU HAVE A FLASHER HOOKED UP SO THAT YOU CAN REVERT IF SOMETHING GOES HORRIBLY WRONG.


Rebug 4.81.2 REX
MD5: C5108D4A4F05EBBA05BC6B4CC4612716
Rebug 4.81.2 D-REX
MD5: 222641561432A8A7946373966DFC6408

Please let me know if they work for you, I don't have a flasher hooked up so I haven't tested these myself.

I posted this last night, but it looks like it either didn't go through or a mod removed it. If a mod removed it, please let me know and I won't post these anymore.
 
Last edited by a moderator:

Featured content

Trending content

Latest posts

Back
Top