REBUG 3.55.3 and 4.21.1 REX EDITIONS and ’999′ DOWNGRADER

[igor242 11]

It has been a long time since the last firmware release, mainly because we did not see a reason to keep releasing cfw after cfw just to changes files in ‘dev_flash’. We wanted the next release to be something different and we are quietly confident it is.

The first thing users of previous REBUG firmware will notice is the old Rebug Selector has been given a complete overhaul and facelift based off of the multiMAN XXMB engine. We added quite a few features and it has now earned itself a new name Rebug Toolbox 02.00.00 but we will explain the toolbox later in more depth. Right now….

We give you REBUG 3.55.3 and 4.21.1 REX EDITIONS and the ’999′ DOWNGRADER. All the features listed below are in ALL firmware versions unless stated otherwise.

REBUG REX EDITION FEATURES

FEATURE – Dual LV2 Kernels CEX/DEX

(Swap your EID0/LV2 kernel using Rebug Toolbox in seconds)

FEATURE – ALL Retail functions available in CEX mode

(No need to install different firmware)

FEATURE – ALL Debug functions available in DEX mode

(No need to install different firmware)

FEATURE – ProDG Connectivity in DEX mode

FEATURE – QA Token compatibility

FEATURE – OtherOS++ support enabled

(Use Rebug Toolbox to Boot OtherOS with different LV1 patches)

UPDATED – Rebug Toolbox 02.00.00

UPDATED – 4.31 Version Spoof files

(PSN/SEN Enabled for 4.21.1 REX ONLY)

PATCHED – LV1: Disable System Integrity Check

(Safe to use with mismatched COREOS/SYSCON versions or if PS3 is not QA enabled)

PATCHED – LV1: Peek and Poke support

(Unused LV1 call 182 and 183)

PATCHED - LV2: Peek and Poke support

(LV2 Syscall 6 and 7)

PATCHED - LV2: Peek and Poke support for LV1

(LV2 Syscall 8 and 9)

PATCHED - LV2: LV1 CALL System call

(LV2 Syscall 10)

PATCHED - VSH: Allow Unsigned act.dat and *.rif files

PATCHED - VSH: Disable Unlinking/Deleting of act.dat

FUN FEATURE – Fake Save Data Owner in CEX and DEX

(Use Game Saves from ANY Owner)

FUN FEATURE – Lock/Unlock Trophies in CEX and DEX

FUN FEATURE – Cinavia protection disabled in CEX and DEX mode

’999′ DOWNGRADER FEATURES

FEATURE – All 3.55.3 REX EDITION Features

(Firmware is identical)

FEATURE – Downgrade any firmware version CFW with spkg sig check patched

PACKAGE MANAGER

Package Manager is a replacement for the standard Install Package Files option under Game in the XMB. It allows for the install and deletion of .pkg files from dev_hdd0/packages, dev_usb/packages and the standard Install Package Files locations. In addition to this, your downloaded PSN content ‘bubbles’ will appear under this option instead of cluttering your Game menu with uninstalled content.

USAGE:

Navigate to Game in your XMB and click on Package Manager (It will be where Install Package Files usually is). You will find three options.

PlayStation®Network Content

Manage your downloaded PlayStation®Network Content.

Install Package Files

INSTALL package files from Storage Devices and your PS3.

PS3 Hard Disk (dev_hdd0/packages)

Package Folder (dev_usb/packages)

Standard Package Location (Standard Install Package Files locations)

NOTE: The Install All Packages is only available by pressing the TRIANGLE button when the Standard Package Location option is highlighted because the PS3 will only install ALL packages from the root of a storage device as of the moment.

Delete Package Files

DELETE package files from Storage Devices and your PS3.

PS3 Hard Disk (dev_hdd0/packages)

Package Folder (dev_usb/packages)

Standard Package Location (Standard Install Package Files locations)

DELETING FILES:

1: Highlight the file you would like to delete and press TRIANGLE. The sidebar should appear.

2: Press CROSS on either Unlink or Unlink(Folder) (Both do the same thing for now).

REBUG TOOLBOX

Rebug Toolbox is application designed to complete the full function of REBUG REX EDITION firmwares. Besides from performing the CEX/DEX EID0 and LV2 Kernel Swapping it is also an FTP server and is packed with a bunch of other useful tools.

INSTALL:

1: In the PS3 XMB go to Game menu

2: Select Package Manager

3: Select Install Package Files

4: Select PS3 Hard Disk

5: Install REBUG-TOOLBOX-02.00.00.pkg

SYSTEM

SYSTEM INFORMATION:

Displays Firmware version, Toolbox version, IP address, current LV2 Kernel and Target ID type

and free HDD space.

QUIT:

Quits Toolbox and returns you to PS3 XMB.

RESTART SYSTEM:

Perform either a Full or Soft reboot od the PS3 system.

Soft (LV2 Reboot Only)

Full (On/Off Cycle)

Boot OtherOS:

Boot OtherOS with either your currently selected LV1 patches or easily apply ALL LV1 patches and boot.

Boot (LV1 Patches: Apply All)

Boot (LV1 Patches: Use current)

Turn Off System:

Shut down your PS3.

SELECTOR

SYSTEM MODE:

Switches between NORMAL and REBUG mode

NORMAL mode which uses the DEBUG XMB is the default mode after installing Rebug.

REBUG mode sets the PS3 to the latest available version spoof (updatable in the future) and allows swapping between RETAIL and DEBUG XMB in addition to switching between the two different Debug Menu Types menus DEX (debug) and CEX QA (retail).

XMB OPERATION MODE:

This option only works in REBUG mode and lets you select either the RETAIL or DEBUG XMB.

DEBUG MENU TYPE:

Gives you the choice of the CEX QA (retail) or DEX (debug) Debug Settings menu.

LV1 PATCHES

A collection of LV1 patches that can be used for better compatibility with some PS3 tools. Any combination of these patches can be applied before booting OtherOS.

DEX/CEX

SWAP LV2 KERNEL:

Swaps between CEX and DEX LV2 Kernel. This option will only work if your Target ID is set to DEX

REWRITE TARGET ID IN FLASH:

This option requires you have a valid NOR/NAND dump named correctly on dev_usb000. Use EXPORT FLASH TO FILE function to dump your NOR/NAND to dev_usb000 and then use c2d.exe to convert your dump to DEX.

Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)

Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)

Once you have prepared your NOR/NAND dumps place them on a USB device and connect it to dev_usb000.

Now that you have your valid dumps named properly and connected to dev_usb000 it is a simple as selecting the option and following the onscreen prompts. Takes less than 10secs once you have your dumps prepared.

EXPORT FLASH TO FILE:

Backup your current NOR/NAND to file on dev_usb000. Takes about 45secs for NAND

UTILITIES

TOGGLE QA:

Enable/Disable QA flag. This option is only available in REBUG 3.55.3 REX EDITION as we are not able to set QA token at the moment from GameOS on higher firmware.

TOGGLE RECOVERY MODE:

Enable/Disable Recover Mode flag. When enabled your PS3 will reboot into Recovery Mode.

TOGGLE PRODUCT MODE:

Enable/Disable Product Mode flag. When enabled your PS3 will reboot into Factory Service Mode. This option is only available in REBUG 3.55.3 REX EDITION for safety reasons.

LOAD LV2 KERNEL:

Load lv2_kernel.self.[KERNEL_NAME] from USB or /dev_hdd0

CREATE PACKAGES FOLDER ON PS3:

Create /dev_hdd0/packages folder or your PS3 to be used with Package Manager.

EXPORT HYPERVISOR LV1 MEMORY:

Save LV1 memory to dev_usb000 or dev_usb006 or dev_hdd0 if usb is not found.

EXPORT HYPERVISOR LV2 MEMORY:

Save LV2 memory to dev_usb000 or dev_usb006 or dev_hdd0 if usb is not found.

CHANGE ACTIVE PS3ID:

Spoof IDPS in LV2 memory. Choose from a list of Target ID’s or Use EID5 which will spoof your original CEX IDPS allowing you to connect to PSN if your PS3 is running REBUG 4.21.1 REX EDITION in DEX mode.

OTHER TOOLBOX FEATURES:

L3 changes clock/temperature display

L2+R2 enable screensaver

START+R2 take a raw rgb screenshot

Remote-play via PSP/PSVITA

Auto-turn-off if idle for 1 hour

Telnet to PS3 ip at port: 8080

FTP access with writable dev_flash mounted as dev_rebug

(port: 21, user: anonymous, password: (anything))

IMPORTANT INFORMATION

QA SUPPORT

QA is supported in all REBUG REX EDITIONS but at this point in time we are unable to set the QA Token from GameOS on 3.55+ firmware.

It is good practice to enable QA in 3.55 before updating to any CFW not just REBUG.

OTHEROS++ SUPPORT

OtherOS++ is supported by all REBUG REX EDITIONS and will detect your existing OtherOS HDD partition.

However none of the REBUG REX EDITIONS have emer_init.self patched (create smaller GameOS partition). We are working on a solution to this from GameOS.

In the meantime if you do want to create an OtherOS partition you have two options:

1: Use a 3.55 firmware that already has emer_init.self patched to the size you want.

2: Patch REBUG 3.55.3 REX EDITION in PS3MFW Builder

If you choose option 2 we highly recommend that you ONLY patch emer_init.self. Also the resulting PUP will only be able to be installed on 3.55 firmware as the spkg_hdr will be mismatched.

One final thing to note about OtherOS on 4.21.1 is that it function is slightly reduced at the moment due to the fact that we are not able to map memory like in 3.55 and below. The affected modules are ps3ram and ps3sbmmio.

Hopefully this problem can be addressed without having to release another firmware.

REBUG 4.21.1 REX EDITION

INSTALL:

From XMB install REBUG 4.21.1 REX EDITION over any 3.55 OFW/CFW/MFW or the same or lower firmware version CFW with spkg sig check patched or any firmware version CFW with spkg sig check patched and QA enabled.

UNINSTALL:

From XMB REBUG 4.21.1 REX EDITION can be uninstalled with the same or higher firmware version OFW/CFW/MFW or with REBUG 3.55.3 REX EDITION on a QA enabled PS3 or with the ’999′ DOWNGRADER if QA was NOT enabled.

REBUG 3.55.3 REX EDITION

INSTALL:

From XMB install REBUG 3.55.3 REX EDITION over the same or lower firmware version OFW/CFW/MFW or any firmware version CFW/MFW with spkg sig check patched and QA enabled.

UNINSTALL:

From XMB REBUG 3.55.3 REX EDITION can be uninstalled with the same or higher firmware version OFW/CFW/MFW.

REBUG ’999′ DOWNGRADER

THIS WILL SET YOUR SYSCON COREOS VERSION TO 9.99 ON PURPOSE: DO NOT PANIC

REQUIRES SYSCON DEHASHING AFTER DOWNGRADE

INSTALL:

From XMB install ’999′ DOWNGRADER over any firmware version CFW/MFW with spkg sig check patched on a PS3 with or without QA enabled.

UNINSTALL/DEHASH: REQUIRES PS3 TO BE QA ENABLED

From XMB ’999′ DOWNGRADER can be uninstalled/dehashed with the REBUG 3.55.3 REX EDITION or from Recovery Mode with any other 3.55 OFW/CFW/MFW.

Enjoy

~Codename: REBUG Team.

Codename: REBUG would like to thank:

graf_chokolo (as always) and The Three Musketeers for the work they have done in the past and (hopefully) future.

Big thanks to:

naehrwert - For scetool (its elf compression played a big part in 4.21.1)

deank - Helping us get the Rebug Toolbox up and running.

Our BIGGEST thanks:

flatz - Helping with the OtherOS testing and well… You know what you did..

Rebug Scorpion Artwork:

by blastleaf - blastleaf@gmail.com

Rebug Customised Font:

by @GDcooya

Source and Download: Rebug.me