PS3 Team Rebug Releases Their Latest CFW - 4.75.1 D-REX & REX Cobra 7.1 Editions, Updated Toolbox Too

Developer Joonie gave me the heads up about team Rebug's latest custom firmwares to hit the PlayStation scene. The most anticipated CFW has finally been made public for all to enjoy. Below you will find all the details pertaining to the release of Rebug 4.75.1 D-REX and REX Cobra 7.1 editions as well as their updated Toolbox. [break].[/break]Lets take a look.

​

FEATURES FOR REBUG REX/D-REX EDITION

FEATURE - Dual LV2 Kernels CEX/DEX (Swap your EID0/LV2 kernel using Rebug Toolbox in seconds)

FEATURE - ALL Retail functions available in CEX mode (No need to install different firmware)

FEATURE - ALL Debug functions available in DEX mode (No need to install different firmware)

FEATURE - FULL ProDG Connectivity in DEX mode (Full Support on both Normal mode and Cobra mode)

FEATURE - QA Token compatibility

FEATURE - OtherOS++ support enabled (Use Rebug Toolbox to Boot OtherOS with different LV1 patches)

FEATURE - Package Manager (Replacement for the standard 'Install Package Files' option)

INCLUDED - Rebug Toolbox 02.02.05 (Install included Rebug Toolbox or higher for full compatibility)

PATCHED - Appldr: LV2 memory hash check is disabled (Memory protection on LV2 is disabled in higher level)

PATCHED - LV1: Disable System Integrity Check (Safe to use with mismatched COREOS/SYSCON versions or if PS3 is not QA enabled)

PATCHED - LV1: Undocumented function 114 (Allow mapping of protected memory)

PATCHED - LV1: Skip all ACL Checks (Needed to allow booting of OtherOS)

PATCHED - LV1: Peek and Poke support (Unused LV1 call 182 and 183)

PATCHED - LV2: Peek and Poke support (LV2 Syscall 6 and 7)

PATCHED - LV2: Peek and Poke support for LV1 (LV2 Syscall 8 and 9)

PATCHED - LV2: LV1 CALL System call (LV2 Syscall 10)

PATCHED - Recovery: Prevent accidental OFW update while on Recovery mode

PATCHED - VSH: Allow Unsigned act.dat and *.rif files

PATCHED - VSH: Disable Unlinking/Deleting of act.dat

PATCHED - VSH: Disable NEW PSP DRM Check on Unsigned PSP packages added on OFW 4.75

PATCHED - VSH: Disable Epilepsy Warning for Faster Boot-Up Speed

FUN FEATURE - Fake Save Data Owner (Use Game Saves from ANY Owner)

FUN FEATURE - In Game Screenshot (Allows taking screenshots in Game)

FUN FEATURE - Enhanced Remote Play (This unlocks the limitation of working apps/games for remote play)

FUN FEATURE - Lock/Unlock Trophies (Offline only)

FEATURE - Cinavia protection fully disabled (Supports optical media/bd iso, AACS must be decrypted)

FEATURE - Cobra 7.1 (Disabled by default, Toolbox required to enable)

FEATURE - 1.42.04 MOD REBUG EDITION (Full Webman intergration supports both CEX/DEX 4.75)

REBUG TOOLBOX

Rebug Toolbox is application designed to complete the full function of REBUG REX EDITION firmwares. Besides from performing the CEX/DEX EID0 and LV2 Kernel Swapping it is also an FTP server and is packed with a bunch of other useful tools.

INSTALL: 1: In the PS3 XMB go to Game menu 2: Select Package Manager 3: Select Install Package Files 4: Select PS3 Hard Disk 5: Select REBUG-TOOLBOX-02.xx.xx.pkg

REWRITE TARGET ID IN FLASH: *NEW METHOD SINCE 2.02.02 / 4.65.2* TOOLBOX can dump your EID ROOT KEY without old eid root key dumper that was used for 3.55 / 4.21 while back, because it has its bulit-in eid root key dumper integrated for both CEX/DEX mode on 4.75 CFW this is universal feature, and toolbox can ensure your conversion done in less than 5 mins top, if you dumped your root key via toolbox's utility tab, then toolbox will ask you if you'd like to continue flash-less auto conversion.

Cobra 7.1 Overview

PRX plugins at boot time (sprx)

ISO Support: PS1/PS2/PS3/PSP/DVD/BluRay (Split ISO support on FAT32 drives)

Network Support: PS1/PS3/DVD/BluRay /PKGs

Blu Ray Movie region free functionality

webMAN integration, for game rips on NTFS HDD, please use latest prepNTFS 1.10 MOD version to scan/refresh game lists

NTFS HDD Support (prepNTFS, or multiMAN Required to scan contents)

PS2 ISO Support for BC (HW) / non-BC (SW) Consoles

Syscall 11 – Cobra lv1 Peek

PSNPatch stealth plugin support ISO rips are required to get 100% support; for ex) after disabling syscalls, games like Call of Duty will not be able to play unless you use ISO rips, please DO NOT expect everything to be fully functional when you are disabling the built-in features from COBRA. Folder rips are NOT compatible with PSNPatch's stealth mode due to its ability to disable COBRA's disc-less feature for folder JB rips

PS3MAPI support, allows you to attach process on both CEX/DEX via its own API app.

NPDRM FSELF support (DEX only with debug vsh), allows you to attach process on both npdrm fself and non-drm fself by disabling Kakaroto's sig patches in VSH.

Backup Protection Removal, Add full PS3 Backup support on all multiMAN/webMAN,IRIS manager forks and Managunz.

Target Manager 4.20-4.75 fully supported.

Allow modification on Syscall 6/7/8/9/10.

***IMPROVED Stability with DEX mode, the annoying issue with hanging on boot on some old converted DEX models is fixed.***

REBUG_4.75.1_REX_PS3UPDAT.PUP

MD5: 7d26f0d99a7b766ab4e95e91853ddaa3

REBUG_4.75.1_D-REX_PS3UPDAT.PUP

MD5: a09e2380830ba74f18806ede3a5fdf3d

Downloads: Rebug.me

Source: Rebug.me​

 

#define PAYLOAD_ADDR   0x3958

__base = 0x3958;

Yeah I just defined payload address 0x3958 and extended header/footer in elf the same way that [MENTION=20]habib[/MENTION] has been doing and it works fine

Thanks for your finding!

you can also use 0x13858, which i prefer, since it is some space later in file

[MENTION=29]Joonie[/MENTION]
now i am curious, how did you manage it to work? for me it always has reloaded in a loop and i couldn't get it to work, even after i had this stupid flag set

 

you can also use 0x13858, which i prefer, since it is some space later in file

[MENTION=29]Joonie[/MENTION]
now i am curious, how did you manage it to work? for me it always has reloaded in a loop and i couldn't get it to work, even after i had this stupid flag set

Search
2A 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00 44 E9 30 00 00 00 00 00 44 E9 30
Replace
2A 03 30 00 00 00 00 00 30 03 30 00 00 00 00 00 30 03 30 00 00 00 00 00 44 E6 00 00 00 00 00 00 44 E6 00

Search
30 00 00 00 00 00 00 00 2A 00 00 00 00 00 00 00 01 F0 C8
Replace
30 03 30 00 00 00 00 00 2A 03 30 00 00 00 00 00 01 ED 98

These two must be done

 

I am on Rogero 4.55, can I just instal this, or I need do do some thing first? I download CEX version, formate my USB to FAT32, made PS3 folder, than inside UPDATE folder, and rename Rebug file to PS3UPDAT.PUP. So my question is, can I now just put USB in my PS3 and update, or I need to do something else before?

 

I am on Rogero 4.55, can I just instal this, or I need do do some thing first? I download CEX version, formate my USB to FAT32, made PS3 folder, than inside UPDATE folder, and rename Rebug file to PS3UPDAT.PUP. So my question is, can I now just put USB in my PS3 and update, or I need to do something else before?

Remove BD, unmout game, disconnect internet and you can go from XMB to this CFW.

 

[MENTION=29]Joonie[/MENTION] and @haxxen it seems you guys are still corrupting elfs, i can tell that by just seeing netemugen code because code section addr is something different, its a part of how elf is made up
there should be NO need to extend header and footer in the way joonie mentioned
i have recently setted up my pc after ssd died so i have yet to take a peak at it.
ill sure give you guys an update on how to do it properly

 

ok here is the info for fw 4.76
netemu elf mod:0x9f4d8e change from 140 to 0x47f0
netemu gen mod:remove extension of code section addr everywhere(changes done both in elf header and footer)

so now you got working space from 3940-7ff0
max payload size 0x46b0
base addr 3940

 

ok here is the info for fw 4.76
netemu elf mod:0x9f4d8e change from 140 to 0x47f0
netemu gen mod:remove extension of code section addr everywhere(changes done both in elf header and footer)

so now you got working space from 3940-7ff0
max payload size 0x46b0
base addr 3940

https://github.com/Joonie86/COBRA7....CEX/SRC/ps2emu_stage2/ps2netemu_gen475/main.c

https://github.com/Joonie86/COBRA7.1/blob/master/475/Universal_CEX/SRC/ps2emu_stage2/netemu/main.c

https://github.com/Joonie86/COBRA7.1/blob/master/475/Universal_CEX/SRC/ps2emu_stage2/netemu/ldscript.ld



Applied your changes also debug payload is now fully working without looping

FYI [MENTION=46]haxxxen[/MENTION]

Thanks [MENTION=89]aldostools[/MENTION] for your awesome tip with FixELF Making my life easier hehe

copy temp.elf ps2_netemu.elf_patched
FixELF.exe ps2_netemu.elf_patched "38 00 00 00 00 00 00 01 38 00 00 00 00 00 00 00 01 40" "38 00 00 00 00 00 00 01 38 00 00 00 00 00 00 00 47 F0"
scetool.exe -v --sce-type=SELF --compress-data=TRUE --skip-sections=FALSE --self-auth-id=1020000401000001 --self-add-shdrs=TRUE --self-vendor-id=02000003 --self-type=LV2 --self-fw-version=0004003000000000 --key-revision=0 --self-app-version=0004006000000000 --encrypt ps2_netemu.elf_patched ps2_netemu.self

 

[MENTION=29]Joonie[/MENTION] and @haxxen it seems you guys are still corrupting elfs, i can tell that by just seeing netemugen code because code section addr is something different, its a part of how elf is made up
there should be NO need to extend header and footer in the way joonie mentioned
i have recently setted up my pc after ssd died so i have yet to take a peak at it.
ill sure give you guys an update on how to do it properly

who said that i am extending header??? i have no problems on 4.21, lol. and there is also no looping or ps2flag crap

 

who said that i am extending header??? i have no problems on 4.21, lol. and there is also no looping or ps2flag crap

Netemu gen?
Hmmm...

 

wtf are you talking about? cobra's payload has nothing to do with codesection or datasection and they are just pointers to it to make jumps
the problem on your side maybe is, that you have changed netemu code. i am using original 4.46 code for 4.21 and just have changed payload address. nothing more, nothing less!

 

wtf are you talking about? cobra's payload has nothing to do with codesection or datasection and they are just pointers to it to make jumps
the problem on your side maybe is, that you have changed netemu code. i am using original 4.46 code for 4.21 and just have changed payload address. nothing more, nothing less!

without his changes, I wasn't able to get debug payload working lol and yes 4.21 / 4.46 won't need those changes

 

wtf are you talking about? cobra's payload has nothing to do with codesection or datasection and they are just pointers to it to make jumps
the problem on your side maybe is, that you have changed netemu code. i am using original 4.46 code for 4.21 and just have changed payload address. nothing more, nothing less!

it really has
why extend the section header when you dont even ******* use it
thats the prob, its extra and unneeded change
and they are not pointers, they are used to change the section addr
and this was the reason causing lpar loops because of overlapping

 

it really has
why extend the section header when you dont even ******* use it
thats the prob, its extra and unneeded change
and they are not pointers, they are used to change the section addr
and this was the reason causing lpar loops because of overlapping

omg, but well, you are the expert...netemugen is just the app to patch the payload into the elf