PS3 4.84.1 REBUG REX (w/ Cobra v8.01 + Rebug Toolbox v2.03.01) Released (+ DECR LE version)

Discussion in 'PS3 Jailbreak CFW and PS3HEN' started by STLcardsWS, Mar 10, 2019.

By STLcardsWS on Mar 10, 2019 at 12:47 PM
  1. 9,183

    STLcardsWS Administrator

    Sep 18, 2014
    Likes Received:
    Trophy Points:
    Team REBUG just recently released 4.84 REBUG LITE Edition just the other day. Now,since that time the team has aquired all the resources needed for the creation of 4.84.1 REBUG REX Custom firmware . Now that the testing phase has concluded, the team has now released 4.84 REX version of their famed Custom Firmware for the PS3. What makes REX different from LITE is that Lite is made of only CEX (retail) firmware and REX contains both retail firmware and then also contains debug (DEX) firmware elements as well. To create this powerful hybrid custom firmware. Which expands the feature list over any other CFW type with the included REBUG Toolbox (requires pkg installation),

    The updated Cobra payload of v8.00/1 that made its recent debut in habib's 4.84 Starbuged CFW has also been bundled with this latest version of REBUG REX. One of the highlights of the version 8.0 progression of the Cobra payload has been a new feature allowing Kernel payload support via plugin developed by habib, The update to Cobra also brought a number of new improvements besides that lone feature, other feature consist of a much faster boot time on start up as in Cobra 8.00+ stage 1 has been removed. Then also in this version of REX you should note COBRA is ENABLED by default where as in previous versions of REX it has not been and required a toggled "ON" via the REBUG Toolbox, that is no more, in this version its enabled "out of the box" and ready to go

    Checkout other 4.84 related releases in this thread here

    • 4.84.1 REBUG REX

      What’s new since 4.82.2 REX/D-REX?
      • Stability (This system software update improves system performance)
      • REBUG TOOLBOX 2.03.01 MULTI 17 (Payload injection feature available on Utilities category, CFW 4.83 and 4.84 Supported)
      • Cobra 8.01 (COBRA now enabled by Default - Improved boot speed/Stage1 removal, Kernel payload plugin support, PS2 Bugfix for BC and SemiBC consoles when COBRA’s disabled) More information available via this link)

      Features of 4.84.1 REBUG REX
      • FEATURE – Dual LV2 Kernels CEX/DEX (Swap your EID0/LV2 kernel using Rebug Toolbox in seconds)
      • FEATURE – ALL Retail functions available in CEX mode (No need to install different firmware)
      • FEATURE – ALL Debug functions available in DEX mode (No need to install different firmware)
      • FEATURE – COBRA v8.01 (ENABLED BY DEFAULT, a new change in 4.84 REX)
      • Background running plugins at boot time (sprx)
      • ISO Support: PS1/PS2/PS3/PSP/DVD/BluRay (Split ISO support on FAT32 drives)
      • Network Support: PS1/PS3/DVD/BluRay /PKGs
      • Blu Ray Movie region free functionality NTFS HDD Support (prepNTFS, or multiMAN Required to scan contents)
      • PS2 ISO Support for BC (HW) / non-BC (SW) Consoles
      • Syscall 11 – Cobra lv1 Peek
      • Syscall 15 – Allow execution of any LV2 internal function
      • PSNPatch stealth plugin support
        • ***ISO rips are required to get 100% support, for ex) after disabling syscalls, games like Call of Duty will not be able to play unless you use ISO rips, please DO NOT expect everything to be fully functional when you are disabling the built-in features from COBRA. Folder rips are NOT compatible with PSNPatch’s stealth mode due to its ability to disable COBRA’s disc-less feature for folder JB rips****
      • PS3MAPI support, allows you to attach process on both CEX/DEX via its own API app.
      • Backup Protection Removal, Add full PS3 Backup support on all multiMAN/sMAN/webMAN,IRIS manager forks and Managunz.
      • Allow modification on Syscall 6/7/8/9/10/11/15.
      • Burned/Burnt optical media support for PS1/PS3 Games on All models
      • Homebrew blocker – blocks homebrew access while Syscalls are disabled
      • new in 8.00 Run payload with Kernel privileges - Added option to run payload with kernel privileges like ps vita skprx. this is a big thing! one can make hooks, printf to socat, do whatever they feel like they need to do. at the current time only one payload is supported at a time. in the future i might increase this
        • New in 8.01 Added support for dynamic memory payloads, 5 of them can be started from "/dev_hdd0/boot_plugins_kernel.txt"
        • toolchain updated to support dynamic address loading.
        • For applications, you can also mount em, and unmount em separately
      • new in 8.00 Boot times vastly speed improved - as there is no stage1.
      • new in 8.00 PS2 bc and semi bc consoles wont load iso when cobra disabled - disable cobra using opcode)
      • FEATURE – FULL ProDG Connectivity in DEX mode (Full Support on both Normal mode and Cobra mode)
      • FEATUREQA Token compatibility
      • FEATUREOtherOS++ support enabled (Use Rebug Toolbox to Boot OtherOS with different LV1 patches)
      • FEATUREPackage Manager (Replacement for the standard ‘Install Package Files’ option)
      • FEATUREFSELF compatibility (Fake Signed ELF is supported on both CEX and DEX modes.)
      • FEATURE Fake Save Data Owner (Use Game Saves from ANY Owner)
      • FEATURE In Game Screenshot (Allows taking screenshots in Game)
      • FEATURE Disabled flag check in PARAM for Remote Play (For better compatibility with remote play, custom flags in PARAM is recommended)
      • FEATURELock/Unlock Trophies (Offline only)
      • FEATURE Cinavia protection fully disabled (Supports optical media/bd iso, AACS must be decrypted)
      • FEATUREFull BD/DVD Playback support on both CEX/DEX mode (BD/DVD movies can now be played on DEX mode, major thanks to mysis!)
      • FEATURE XMB CFW settings v0.1a (XMB icons for simple CFW tasks available via REBUG TOOLBOX 2.02.16)
      • FEATURE PSN/SEN Accesibility (PSN /SEN Accessible , until the next OFW update)
      • FEATUREXMBM+ Compatibility (XMB Manager Plus developed by Team XMBM now supported via standalone pkgs.)
      • FEATUREHAN Toolbox Compatibility (HAN Toolbox support added for developers)
      • PATCHED Appldr: LV2 memory hash check is disabled (Memory protection on LV2 is disabled in higher level)
      • PATCHEDLV1: Disable System Integrity Check (Safe to use with mismatched COREOS/SYSCON versions or if PS3 is not QA enabled)
      • PATCHED LV1: Undocumented function 114 (Allow mapping of protected memory)
      • PATCHED LV1: Skip all ACL Checks (Needed to allow booting of OtherOS)
      • PATCHED LV1: Peek and Poke support (Unused LV1 call 182 and 183)
      • PATCHEDLV2: Peek and Poke support (LV2 Syscall 6 and 7)
      • PATCHED LV2: Peek and Poke support for LV1 (LV2 Syscall 8 and 9)
      • PATCHED LV2: LV1 CALL System call (LV2 Syscall 10)
      • PATCHEDLV2: Allow execution of any LV2 internal function (LV2 Syscall 15)
      • PATCHED Recovery: Prevent accidental OFW update while on Recovery mode
      • PATCHED VSH: Allow Unsigned act.dat and *.rif files
      • PATCHED VSH: Auto unlocks c00 demo contents
      • PATCHED VSH: Disable Unlinking/Deleting of act.dat (Improved patches applied)
      • PATCHEDVSH: Disable NEW PSP DRM Check (Allowing unsigned PSP pkg contents on 4.75 or higher CFW)
      • PATCHEDVSH: Disable Epilepsy Warning for Faster Boot-Up Speed
      • PATCHEDVSH: XMB notification removal (Fake Save Data Owner and Game Quit: No Request Event will not be displayed)
      • INCLUDED – Rebug Toolbox 2.03.01 (Install included Rebug Toolbox or higher for full compatibility)
      • TOGGLE XMB CFW SETTINGS Enable or Disable mysis’s XMB CFW settings plugin v0.1. The feature is available via Network Column on XMB after Enabled.
      • TOGGLE COBRA MODE: COBRA mode is disabled by default NOW ENABLED BY DEFAULT in 4.84 REX, this option can toggle COBRA mode to disable/ enable COBRA 8.01 payload on boot
      • TOGGLE QA: Enable/Disable QA flag. Enable for easy downgrade and other extra features on all 3.55-4.84 CFW.
      • TOGGLE RECOVERY MODE: Enable/Disable Recover Mode flag. When enabled your PS3 will reboot into Recovery Mode.
      • LOAD LV2 KERNEL: Load lv2_kernel.self.[KERNEL_NAME] from USB or /dev_hdd0
      • BACKUP/RESTORE XREGISTRY: Backup or Restore the PS3 system settings from USB
      • RESIZE VFLASH/NAND REGIONS: Resize VFLASH/NAND Region 5 to allow install of OtherOS.
      • INSTALL PETITBOOT: Install Petitboot to VFLASH/NAND Region 5 from USB.
      • SET GAMEOS BOOT FLAG: Sets the GameOS boot flag. Use this if your PS3 is having trouble booting PS2 titles after running OtherOS or is accidentally sending you back to OtherOS when trying to enter recovery mode.
      • CREATE PACKAGES FOLDER ON PS3: Create /dev_hdd0/packages folder or your PS3 to be used with Package Manager.
      • EXPORT HYPERVISOR LV1 MEMORY: Save LV1 memory to dev_usb000 or dev_usb006 or dev_hdd0 if usb is not found.
      • EXPORT GAMEOS LV2 MEMORY: Save LV2 memory to dev_usb000 or dev_usb006 or dev_hdd0 if usb is not found.
      • EXPORT FLASH TO FILE: Backup your current NOR/NAND to file on dev_usb000. Takes about 45secs for NAND
      • DUMP EID ROOT KEY: Dump your eid root key.
      • DEBUG MENU TYPE: Gives you the choice of the CEX QA (retail) or DEX (debug) Debug Settings menu.
      • SYSTEM MODE: Switches between NORMAL and REBUG mode
        NORMAL mode which uses the DEBUG XMB is the default mode after installing Rebug.
        REBUG mode sets the PS3 to the latest available version spoof (updatable in the future) and allows swapping between RETAIL and DEBUG XMB.
      • XMB OPERATION MODE: This option only works in REBUG mode and lets you select either the RETAIL or DEBUG XMB.** RETAIL MODE ensures Media Server Connection PERMA-Enabled **
      • See all features of rebug toolbox here

    • rebug_484_rex.jpg
      Installing a Plugin (sprx)

      Support for plugins at boot time:
      • The number of vsh plugins has been increased from 1 to 7 slots.
      • Slot 0 is reserved for use for iso plugins (netiso.sprx and rawseciso.sprx).
      • Slots 1-6 are for boot plugins.
      Plugins are loaded in the following way:
      • text file: /dev_hdd0/boot_plugins.txt shall contain a single plugin path per line.
      How to Install a Plugin:
      • Copy plugin_name.sprx to you internal ps3 hdd (ex: /dev_hdd0/).
      • Create or Edit boot_plugins.txt in the root of the hdd (/dev_hd00/boot_plugins.txt) and add a line for the new plugin. Assuming you placed the sprx also in the root of the disk, add: /dev_hdd0/plugin_name.sprx). Add a new line for each plugin.
      • Then Reboot PS3 Console!
      • Find PS3 Plugins >> here <<

      Playing PlayStation 2 Games (w/ COBRA activated)

      Non-Backward Compatibility PS3 via Software Emulation
      • Software (SW) Emulation:Support for PS2 ISOs in non BC consoles was removed in Cobra 4.30 (usb), due tops2_softemu missing. It has been re-enabled now by hacking of ps2_netemu. You can use it in the same way as before, just load an ISO and launch from disc icon, Cobra core takes care of rest. No need for encrypted isos, isos patched with limg sectors, etc. Just your normal PS2 isos dumped from discs. However, there is NO SUPPORT for Optical Discs in PS2_NETEMU
      • Note 1: Don’t forget to set the memory cards in XMB, in the old memory card utility for PS/PS2, as ps2_netemu won’t let you assign them in game as long as you use the new ps2 launcher.
      • Note 2: Decrypted Config can now be used , place the CONFIG file in the same game path. An example below :
      • dev_hdd0/PS2ISO/God of WAR2.ISO
      • dev_hdd0/PS2ISO/God of WAR2.ISO.CONFIG
      Decrypted CONFIG files are available via PSDEVWIKI
      PlayStation 2 on BC and Semi-BC Consoles
      • Hardware (HW) Emulation: PS3 Models: CECHA, CECHB, CECHC and CECHE Backwards Compatible (BC) Consoles will still use their respetive emulators(ps2_emu, ps2_gxemu), which have much better compatibility and also support optical discs, original or backup. Toggle Software Emulation is available via REBUG TOOLBOX.

      OtherOS++ is supported by all REBUG REX/LITE EDITIONS and will detect your existing OtherOS HDD partition. However none of the REBUG REX/LITE EDITIONS have emer_init.self patched (create smaller GameOS partition). We are working on a solution to this from GameOS.

      In the meantime if you do want to create an OtherOS partition you have two options:​
      1: Use a ANY 3.55 or 4.xx firmware that already has emer_init.self patched to the size you want.
      2: Patch REBUG 3.xx , 4.xx REX EDITION in PS3MFW Builder MOD by Haxxxen The related thread regarding ps3mfwbuilder MOD with this MFW Builder MOD, you can make your own CFW with the feature that allows you to create regions on vFLASH/NAND for OtherOS installation If you choose option 2 we highly recommend that you ONLY patch emer_init.self (Make sure to select BASE MFW VERSION and Create OtherOS HDD Region on mfwbuilder).​

    • via Joonie's github with latest Cobra Source Code

      COBRA 8.01 Source (Available for 4.84 only at the moment)
      These changes are from developer's since CobraUSB (v1.0 - 6.0) went Open Source.
      [ @Joonie 's Changes ]
      • Firmware spoofing is disabled due to the changes of PSN Auth since 4.60
      • PLS3 patches are removed from modulespatch.c since this is one of those pre-applied patches on 4.xx CFW
      • unknown E3 patches are removed to fix an issue with XMB, [Originally found by rancid-0, from his PS3ITA 4.50 COBRA]
      • Dual VSH supported for REBUG REX / D-REX CFW, with the proper hash check code was developed by habib and Nzv recently.
      • NPDRM Fself fix is no longer used due to improved fself patches hard coded within the firmware modules on REX/D-REX
      [ @habib 's changes ]
      • Stage0 and stage0 base are merged, (Optimization on stage0 and stage1)
      • Syscall 11 is added to support full lv1 peek.
      • Syscall 15 is added to allow execution of any lv2 internal function.
      • Allow Syscall 11 to gain full access to syscall 6/7/9/10 to prevent modification from homebrews like multiMAN.
      • PS2 Launcher is no longer needed due to new codes in storage_ext, now COBRA can behave the same way that VSH does to apply configuration of DS3 controllers.
      • PS2 Launcher can still be used, which allows PS2ISO with netemu on backward compatible consoles.
      • PS2 Netemu toggle is added for Backward compatible consoles, it is very useful for those units with broken EE/GS chips as well.
      • PS2 Netemu can now use decrypted CONFIG, place the game config file in the same game path for ex) dev_hdd0/PS2ISO/GOW.ISO dev_hdd0/PS2ISO/GOW.ISO.CONFIG
      • HASH calculation algorithm is changed, now it uses static hashes, so the hashes will not be changed unless modules have major changes.
      • Stealth extension support to disable Syscall 15
      • Allows temporary LV1 peek from syscall 8 when "disabling COBRA" is not used
      • Run payload with Kernel privileges - Added option to run payload with kernel privileges like ps vita skprx. this is a big thing! one can make hooks, printf to socat, do whatever they feel like they need to do. at the current time only one payload is supported at a time. in the future i might increase this
      • Boot times speed improved - as there is no stage1.
      • PS2 bc and semi bc consoles wont load iso when cobra disabled - disable cobra using opcode)
      • Added support for dynamic memory payloads, 5 of them can be started from "/dev_hdd0/boot_plugins_kernel.txt"
      • Toolchain updated to support dynamic address loading.
      • For applications, you can also mount em, and unmount em separately
      Please review this post for further detail via

      [ KW's changes ]
      • webMAN integration on boot. Also disables external webMAN plugin located in dev_hdd0 (Disabled for REBUG 4.82.1 LITE)
      • PSN Patch stealth mode, it remove custom syscall from the ps3
      • Homebrew blocker added, when Syscalls are disabled by plugins or homebrews, it will prevent homebrews from being launched, and it will return as 80010006 on XMB.

      [ @deank 's changes ]
      • Improved map_path, to fix the issue with games like Shadow of Mordor
      • Permission protection is disabled to increase game compatiblity and full DEX support.[no more issue with Target Manager or CCAPI]
      • 80010017 / 8001002B Error fix is added since 4.60, this was developed to prevent issues with games when game disc is inserted in BD Drive.
      • LIC.DAT check is patched to fix the issue with launching homebrew since 4.60
      • Full burned optical media support for PS3 Games. (CD-R, DVD-R SL/DL, BD-R SL/DL, BD-RE)

      [ @_NzV_ 's changes]
      • PS3MAPI 1.2.2 support, it is similar feature comparing to CCAPI, but open sourced project and also can unload vsh plugins , attatch process on all type of EBOOT. One of those great debugging features.
      • Partial disable syscall8 and unhooks all cobra hooks (Part of PS3MAPI)
      • Block update from disc

      [ @aldostools 's changes ]
      • Improved PSX media type support, now it supports following disc types
      • 2048 // 2352 // 2336 // 2448 *
      • Improved Video mode patch with proper region detection Original COBRA payload was relying on ps1emu's detection method, now COBRA has extra pre-processing that can detect region properly and force apply correct refresh rate depending on the game's region. (Improved PS3MAPI functions)
      • Added PEEK/POKE (LV1/LV2) as PS3MAPI opcodes (syscall8)
      • Added option to block access and request access to syscall8 using a key (also as PS3MAPI opcodes)
      • Added temporary disablement of Cobra syscall8 to allow dumpers peek 0x1000 to 0x9800
      • BASIC_PLUGIN hash is commented.
      • 80010006 Error fix when trying to install a game update with syscall disabled. Fix & Research @Joonie @Alexander @Aldo

      [ @Alexander 's changes ]
      • Fixed data corruption if you uninstall game/game update/homebrew with syscall disabled

      [ @haxxxen 's changes ]
      • Extra patch for PSP SAVE DATA is disabled by default to improve compatibility, however can be toggled by CROSS+R1 when launching PSP launcher.

      [ @Evilnat' s changes]
      • Updated KW's code to search webMAN in flash and load it firstly if it's found in /dev_hdd0, will search in the following paths:
        • /dev_flash/vsh/module/webftp_server.sprx
        • /dev_flash/ps3ita/webftp_server.sprx
        • /dev_flash/webman/webftp_server.sprx
        • /dev_flash/dragon/web.sprx

    • Supported models
      • DECR-1000A
      • DECR-1400A
      See Download link + release info @:

      What’s new since 4.82.1 DECR ED?
      • Stability (This system software update improves system performance)
      • REBUG TOOLBOX 2.02.12 (DECR edition) (DEH 4.84 Support Added)
      • webMAN MOD support (webMAN MOD 1.45.10 is integrated due to high demand since the latest version has an issue) *** Due to the issue with WM_PROXY, 1.45.11 and below is recommended for DECR***
      • COBRA 8.01 Added - More information available via this link

    Download & Source @:

    Update >>> NoBD / NoBT Version of REBUG REX
    Last edited: Mar 17, 2019
    n00b, lord3490, Rommy667 and 26 others like this.


Discussion in 'PS3 Jailbreak CFW and PS3HEN' started by STLcardsWS, Mar 10, 2019.

    1. Cypher_CG89
      Am being serious lol :-p

      Modify the UPL.xml in the pup file by deleting the bd firmware entries, save it, repack the pup file then BOOM...REBUG 4.84.1 NoBD. But edit it right or you could cause more issues....

      Then when you install it will not install the BD Drive firmware. No black screen or error's on boot of thing's.

      Same can be done for the NoBT and NoWifi.......

      Thank's for clearing that up.

      I knew about the REX/D-REX one's just wasn't clear on the DECR one but assumed it was the same, but it's better to ask for facts than assume when it comes to things like this.
    2. notmeabug
      I too would appreciate a NoBD version for this. If someone can make one, can you please post it? I'm not much of a ps3 tech wizard, sorry.
    3. Naked_Snake1995
      I see, i am not much of firmware expert, as my main job its Graphics Design, but i always like tinkering with things, so i am curious on how this will turn out, worth the shot! Ill ask the team Rebug permission if they would like a NoBD copy of 4.84.1, thats if i manage to do it somehow and dont get flagged about it :)

      If i brick my PS3, you buy me a new one? Deal mate? lol @Cypher_CG89 :D
    4. Cypher_CG89
      Nope, you f**k it up its on your own head... :-p if you want i'll do it but still on your own head if you use it... :-p as am not testing it on a PS3 with naf all wrong with it as it can cause issue from what I have read about doing this on a PS3 with a working BD-drive..... and my 3 PS3's still have lovely working BD Drives :-p:D
    5. Naked_Snake1995
      You are one cheeky lad lol :D
    6. Cypher_CG89
    7. Naked_Snake1995
      It seems ive managed to delete all BD entries (god this its worst than my first html5 page lol), but it seems that PUAD GUI, has some trouble decrypting the firmware files such as Core_OS,but had no trouble decrypting the UPL and the PKGs along with it.

      Got any useful tool to repackage the firmware with these UPL changes mate? (first time editing a firmware,so go easy on this n00b lol) :D
    8. Cypher_CG89
      Now am just double checking if it needs a patch anywhere, it will defo install. no doubt's about that.

      Going through all the patches I have just to double check...

      Yep... use the repack option not the unpack.

      If you use the repack option it will unpack the pup wait for you to make the changes then you click repack and it will repack it for you.

      If you have edited the upl.xml just copy it in when you use the Repacker option.

      Still on your head be this is if you brick your PS3....
    9. Naked_Snake1995
      Fair enough bruv :D

      Edit: Done repacking and testing, reports soon
      Last edited: Mar 10, 2019
    10. pinky
      I believe that's due to lv 0.2. since the key isn't known, it can't be decrypted. it's a part of new bootchain that newer ps3s use.
    11. Cypher_CG89
      Well bricked your PS3 yet? It don't take nearly an hour to install the CFW then launch an app or game to see it worked ....

      I had no trouble unpacking any of 4.84 ofw (For making my own CFW) or this REBUG version with PUAD, got no errors.
    12. Naked_Snake1995
      Yep, its kinda hard to make it work! Ive got the hang of it, but twice the NoBD patch wouldnt work, even though the UPL BD regestries were erased, for the 3rd time, ive erased the BD directories,but only kept the BD Revoke 23.tar or something like that, now each time the PS3 gets to the XMB,it goes to a back screen, following by the "This software cannot start correctly" thus entering a reboot loop and vice-versa, so ive downgrade it to 4.82.2, until i figure this out :P
    13. Naked_Snake1995
      Definitely smooth sailing :D

      sandungas likes this.
    14. pinky
      not sure how that happened. if you choose to decrypt the core os or full, it should fail yet continue. if you just choose upl, it will only do the upl (not sure if does dev_flash). I've never tried doing that. the current PUAD version is 1.5, but there's a 2.0 in works.
    15. Naked_Snake1995
      Yeah,i just choose UPL, but no luck on making a NoBD patch,so ill just call it a day and keep the 4.82.2, until i figure it out what i did wrong, or someone makes a NoBD patch :)
    16. Joonie
      You weren't supposed to fiddle with dev_flash3, it only requires LV1 patch + UPL fix to build noBD FW..
      bitsbubba and SpyroMancer like this.
    17. Cypher_CG89
      derr.... I did say remove anything to do with the bd firmware from the UPL. BD Revoke...hmm think this might have something to do with the BD Drive as it has BD in it lol??? noobs :-p pfff...:-p That would let it install.

      But there is a lv1.self coreOS patch to be done...not mentioned where i got the original info from, I have 2 of the right places to patch in it, just getting the last 2 places right.

      Watch someone else dive in with one by the time am done lol.

      It does every thing to do with the pup, dev flash the lot, it will even rip apart the rco's for you so you can edit them as it uses rco mage in the tools.

      V2.0 in the works...that will keep me happy.
    18. Naked_Snake1995
      I told you "first time n00b here" what did you expect :D
    19. Joonie
    20. Naked_Snake1995
      I see, ive seen this tool before somewhere, someone wanted to make a 4.80 NoBD back in the day, unfortunately for him, it didnt work, due to something with the firmware keys (forgive my lack of knowledge on this topic).

Share This Page