Post: [Tutorial] CEX2DEX using Rebug CFW4.21
11-11-2012, 11:19 PM #1
DEREKTROTTER
You're Goddamn Right
(adsbygoogle = window.adsbygoogle || []).push({});
[Tutorial] CEX2DEX using Rebug CFW4.21


You must login or register to view this content.


Downloads:
CEX2DEX: You must login or register to view this content.
EID Root Key Dumper: You must login or register to view this content. | You must login or register to view this content. | You must login or register to view this content.


Preparation:
Dumping EID root key
First you need to dump your EID Root Key which can now be done on most CFW Version.
  • Install and run the EID PKG for your CFW, the PS3 will just show a black screen and beep several times. You can now restart the PS3 and retrieve your eid_root_key from either:
    /dev_hdd0/tmp/eid_root_key or for 4.xx in /dev_hdd0/game/FLTZ00010/USRDIR.


*You can now dump you EID Root Key directly via the Rebug Toolbox ( utilities > dump EID Root key )

Dumping NOR/NAND
You can do this on rebug CFW using the toolbox.
  • Find the option "Export Flash to File", this will dump it to USB000 (right slot).


You must login or register to view this content.


Converting your CEX dump to DEX
  • First download and extract the c2d_openssl.rar to C:/ and install openSSL, this is required for c2d to work properly. Make sure you rename the folder to "openssl".
  • Now take you eid_root_key and your NOR/NAND dump and place in the folder with c2d.

  • Rename your original CEX dump to flashCEX.bin
  • Add .bin extension to eid_root_key.


Should now have a folder like this:

You must login or register to view this content.

  • Open a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)


Usage:
    c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]

So type in CMD or copy/paste the following: c2d.exe eid_root_key.bin flashCEX.bin flashDEX.bin 82
You must login or register to view this content.

Should give you an output like this:
You must login or register to view this content.

If you are unsure you have done it correctly, you can convert back to your original target ID (mine is 87)
Then compare this one with your original and they should match.


Switching to DEX using rebug CFW
Take your two dumps (flashCEX.bin + flashDEX.bin) and rename as below:

Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Then place in the directory of your USB storage drive and insert in PS3 on USB000 (right slot)

Load up Rebug Toolbox and first click the option:
You must login or register to view this content.
A couple of warning boxes pop up, click YES to both.

Now Swap LV2 kernal, reboot and you are in DEX Mode within 10 seconds Smile
You must login or register to view this content.

Switching back to CEX
Very easy, simply rewrite target ID and it will auto swap lv2 kernal to CEX.

To access PSN in DEX mode, there is a feature in Rebug Toolbox to spoof IDPS. Choose EID5 and you will be able to sign in fine.

btw, if anything in this tut doesn't make sense - let me know so i can make it even more noob friendly.

Troubleshooting
Q: Command prompt says cant find openssl.exe in c: \openssl\bin even though i checked and openssl.exe is definately there.
A: Make sure the openssl folder is at root C:/ and is named exactly "openssl"

Q: Im having a error telling me that wrong format EID 48 bytes.
A: Make sure the filesize of your key is either 48 bytes (NOR) or 256kb (NAND)
Also dont forget you need to add the file extension .bin to the key.


How to get Online 4.21 DEX
Simply go to Rebug Toolbox > Utilities > Change Active PS3ID > EID5 CEX then go Sign in.
(adsbygoogle = window.adsbygoogle || []).push({});

The following 239 users say thank you to DEREKTROTTER for this useful post:

_L0st_my_Gh0st_, ResistTheMoon, -SuperMan, {OM}1337{OM}, ⓙω мσ∂z, Nana, ★RAMPAGE★, Eddie Mac, 1reyalp, A Friend, A1narchy.com, AcnxMods, alexis strider, AlexNGU, Asian, bandphan, BASEBALL4EVER12, bhoot-iq, TheDeadLift, BKG98, BkxRich, BoatyMcBoatFace, Britis-, BroIDontMod, byVexHD, canadiancaper, CantStopMark, celahudini, Cesei, CEXREXDEX, Chnorzy, CITYCOMET, cl_21, clossky, codmadz332, Creepz, cuartaesfera, Dan Dactyl, Dan94, DannyBoiSmith, Daweeyz, Demmonnixx, dolby1, Dr. Mayham, Durnethe3, emcrew2, EquakeCSharp, FarSideX, Luckeyy, FLIX_Hosting, flynhigh09, FOX-727, Frank Ryan, FwiskyFIFA, gaming_nation, popcornmods, GangDePlot, gatecrasher, geeklogik, Geo, Ali D Killer, Ghozt007, Gommy, GuMMyOreOs, Harry, Hate, HaTeRM4NR33T, Heaney, JLM, hibye3, HighModzz, Hori_By_Nature, I-HATE-NGU, ibombo, Callumeleyy, iDunkPingazBrah, iifire, ilasthope, iLLy-i, Im Po, ImAzazel, ImGsus, ImIrIsH, ImPiffHD, iRoyal // MoDz, Island Time, It's Kevin, JakeP0500, JamesSwagger, Jasdeep, Jimmy, JohanMoya, joni_djESP, JPClyde, juham, kazeFATALITY, Kearns- and 139 other users.
02-03-2013, 06:56 PM #173
DEREKTROTTER
You're Goddamn Right
Originally posted by Zwiik View Post
Can you help me out? It says that it successfully rewrites the target id, but when I try to swap kernels it says that the function is not available in CEX.


did you use target ID - 82 for dex ?
cant be any other

The following user thanked DEREKTROTTER for this useful post:

Zwiik
02-03-2013, 06:59 PM #174
Originally posted by DEREKTROTTER View Post
[Tutorial] CEX2DEX using Rebug CFW4.21


You must login or register to view this content.


Downloads:
You must login or register to view this content.
You must login or register to view this content.

Preparation:
Dumping EID root key
First you need to dump your EID Root Key which must be done on 3.55 cfw(downgrade using the 999 pup if needed).
  • Install and run the eEID_RKDumper.pkg, the PS3 will just show a black screen and beep several times. You can now restart the PS3 and retrieve your eid_root_key from /dev_hdd0/tmp/.


That is all you need from 3.55, you can go back to rebug 4.21.

Dumping NOR/NAND
You can do this on rebug 4.21 using the toolbox.
  • Find the option "Export Flash to File", this will dump it to USB001 (right slot).


You must login or register to view this content.


Converting your CEX dump to DEX
  • First download and extract the c2d_openssl.rar to C:/ and install openSSL, this is required for c2d to work properly.
  • Now take you eid_root_key and your NOR/NAND dump and place in the folder with c2d.

  • Rename your original CEX dump to flashCEX.bin
  • Add .bin extension to eid_root_key.


Should now have a folder like this:

You must login or register to view this content.

  • Open a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)


Usage:
    c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]

You must login or register to view this content.

Should give you an output like this:
You must login or register to view this content.

If you are unsure you have done it correctly, you can convert back to your original target ID (mine is 87)
Then compare this one with your original and they should match.

Video

You must login or register to view this content.



Switching to DEX using rebug 4.21
Take your two dumps (flashCEX.bin + flashDEX.bin) and rename as below:

Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Then place on USB001 (right slot)

Load up Rebug Toolbox and first click the option:
You must login or register to view this content.
A couple of warning boxes pop up, click YES to both.

Now Swap LV2 kernal, reboot and you are in DEX Mode within 10 seconds Smile
You must login or register to view this content.

Switching back to CEX
Very easy, simply rewrite target ID and it will auto swap lv2 kernal to CEX.

To access PSN in DEX mode, there is a feature in Rebug Toolbox to spoof IDPS. Choose EID5 and you will be able to sign in fine.

btw, if anything in this tut doesn't make sense - let me know so i can make it even more noob friendly.

Enjoy your debug You must login or register to view this content.

After converting to dex exactly how would I get back to cex? Could I use my original CEX flash to switch?
02-03-2013, 07:26 PM #175
DEREKTROTTER
You're Goddamn Right
Originally posted by Giantsfan15 View Post
After converting to dex exactly how would I get back to cex? Could I use my original CEX flash to switch?


Originally posted by another user
Switching back to CEX
Very easy, simply rewrite target ID and it will auto swap lv2 kernal to CEX.

^^^^^^^^^^^^^^6
02-03-2013, 09:15 PM #176
Zwiik
I defeated!
Originally posted by DEREKTROTTER View Post
did you use target ID - 82 for dex ?
cant be any other


Thanks, I used my target ID for cex by accident aha.
02-04-2013, 12:42 AM #177
FuroowHD
NextGenUpdate Elite
Originally posted by another user
Dumping NOR/NAND
You can do this on rebug 4.21 using the toolbox.
Find the option "Export Flash to File", this will dump it to USB001 (right slot).


I see usb000 on the picture and the right usb port is usb000 but why its does say USB001 on ur text?

---------- Post added 02-04-2013 at 12:40 AM ---------- Previous post was 02-03-2013 at 11:52 PM ----------

Originally posted by another user
Dumping NOR/NAND
You can do this on rebug 4.21 using the toolbox.
Find the option "Export Flash to File", this will dump it to USB001 (right slot).


I see usb000 on the picture and the right usb port is usb000 but why its does say USB001 on ur text?
Originally posted by another user
c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]


what is the target id please help!!!

---------- Post added at 12:42 AM ---------- Previous post was at 12:40 AM ----------

Originally posted by another user
c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]


when i do that i get this> You must login or register to view this content.

help!!! i did 82 as target id
02-04-2013, 01:07 PM #178
DEREKTROTTER
You're Goddamn Right
Originally posted by furoowhd View Post
help!!! i did 82 as target id


looks like you didnt dump your key properly, should either be 48 bytes (slim) or 256kb (phat)
02-04-2013, 03:12 PM #179
FuroowHD
NextGenUpdate Elite
NVM i just did it. THNX FOR THIS AWSOME TUT!!!<3
02-05-2013, 02:36 AM #180
KevinWinterX
< ^ > < ^ >
good job good thing this is still here Smile
02-05-2013, 07:02 AM #181
[COD]Rebug DEX
Bounty hunter
Hello Derek,

Nice Noob friendly Tutorial!

I'm on 3.55 DEX now, it work good.

I made i new unban, (banned). but it say i must update. the unban work (i got some legit console id's left),

but i didnt know it was a 4.21 R(D?)EX out before now. x)

MY QUESTION IS:

Can i install 4.21 DEX on top of what i have to get online or do i need to do it all over again?



TO ALL COMPLAINING:

Follow the TUT 100% and it will work, it took me 6 hours to do.

I run in to some problems, but READ the TUT before asking about CEX>Awesome faceEX<CEX. alot is answered in the comments.

( I did it slow so i dont brick it, or do anything wrong x) )

EDIT!!::

DONT change from CEX QA to DEX in REBUG TOOLBOX!!

I GOT RSOD!

i press the wrong button and puff lol rsod x)

cant find any fix.


Slim 320gb NOR 3.55 DEX No cooling problems yet.

Thanx again Derek, for this good TUT.

Copyright © 2026, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo