Post: [Tutorial] CEX2DEX using Rebug CFW4.21
11-11-2012, 11:19 PM #1
DEREKTROTTER
You're Goddamn Right
(adsbygoogle = window.adsbygoogle || []).push({});
[Tutorial] CEX2DEX using Rebug CFW4.21


You must login or register to view this content.


Downloads:
CEX2DEX: You must login or register to view this content.
EID Root Key Dumper: You must login or register to view this content. | You must login or register to view this content. | You must login or register to view this content.


Preparation:
Dumping EID root key
First you need to dump your EID Root Key which can now be done on most CFW Version.
  • Install and run the EID PKG for your CFW, the PS3 will just show a black screen and beep several times. You can now restart the PS3 and retrieve your eid_root_key from either:
    /dev_hdd0/tmp/eid_root_key or for 4.xx in /dev_hdd0/game/FLTZ00010/USRDIR.


*You can now dump you EID Root Key directly via the Rebug Toolbox ( utilities > dump EID Root key )

Dumping NOR/NAND
You can do this on rebug CFW using the toolbox.
  • Find the option "Export Flash to File", this will dump it to USB000 (right slot).


You must login or register to view this content.


Converting your CEX dump to DEX
  • First download and extract the c2d_openssl.rar to C:/ and install openSSL, this is required for c2d to work properly. Make sure you rename the folder to "openssl".
  • Now take you eid_root_key and your NOR/NAND dump and place in the folder with c2d.

  • Rename your original CEX dump to flashCEX.bin
  • Add .bin extension to eid_root_key.


Should now have a folder like this:

You must login or register to view this content.

  • Open a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)


Usage:
    c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]

So type in CMD or copy/paste the following: c2d.exe eid_root_key.bin flashCEX.bin flashDEX.bin 82
You must login or register to view this content.

Should give you an output like this:
You must login or register to view this content.

If you are unsure you have done it correctly, you can convert back to your original target ID (mine is 87)
Then compare this one with your original and they should match.


Switching to DEX using rebug CFW
Take your two dumps (flashCEX.bin + flashDEX.bin) and rename as below:

Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Then place in the directory of your USB storage drive and insert in PS3 on USB000 (right slot)

Load up Rebug Toolbox and first click the option:
You must login or register to view this content.
A couple of warning boxes pop up, click YES to both.

Now Swap LV2 kernal, reboot and you are in DEX Mode within 10 seconds Smile
You must login or register to view this content.

Switching back to CEX
Very easy, simply rewrite target ID and it will auto swap lv2 kernal to CEX.

To access PSN in DEX mode, there is a feature in Rebug Toolbox to spoof IDPS. Choose EID5 and you will be able to sign in fine.

btw, if anything in this tut doesn't make sense - let me know so i can make it even more noob friendly.

Troubleshooting
Q: Command prompt says cant find openssl.exe in c: \openssl\bin even though i checked and openssl.exe is definately there.
A: Make sure the openssl folder is at root C:/ and is named exactly "openssl"

Q: Im having a error telling me that wrong format EID 48 bytes.
A: Make sure the filesize of your key is either 48 bytes (NOR) or 256kb (NAND)
Also dont forget you need to add the file extension .bin to the key.


How to get Online 4.21 DEX
Simply go to Rebug Toolbox > Utilities > Change Active PS3ID > EID5 CEX then go Sign in.
(adsbygoogle = window.adsbygoogle || []).push({});

The following 239 users say thank you to DEREKTROTTER for this useful post:

_L0st_my_Gh0st_, ResistTheMoon, -SuperMan, {OM}1337{OM}, ⓙω мσ∂z, Nana, ★RAMPAGE★, Eddie Mac, 1reyalp, A Friend, A1narchy.com, AcnxMods, alexis strider, AlexNGU, Asian, bandphan, BASEBALL4EVER12, bhoot-iq, TheDeadLift, BKG98, BkxRich, BoatyMcBoatFace, Britis-, BroIDontMod, byVexHD, canadiancaper, CantStopMark, celahudini, Cesei, CEXREXDEX, Chnorzy, CITYCOMET, cl_21, clossky, codmadz332, Creepz, cuartaesfera, Dan Dactyl, Dan94, DannyBoiSmith, Daweeyz, Demmonnixx, dolby1, Dr. Mayham, Durnethe3, emcrew2, EquakeCSharp, FarSideX, Luckeyy, FLIX_Hosting, flynhigh09, FOX-727, Frank Ryan, FwiskyFIFA, gaming_nation, popcornmods, GangDePlot, gatecrasher, geeklogik, Geo, Ali D Killer, Ghozt007, Gommy, GuMMyOreOs, Harry, Hate, HaTeRM4NR33T, Heaney, JLM, hibye3, HighModzz, Hori_By_Nature, I-HATE-NGU, ibombo, Callumeleyy, iDunkPingazBrah, iifire, ilasthope, iLLy-i, Im Po, ImAzazel, ImGsus, ImIrIsH, ImPiffHD, iRoyal // MoDz, Island Time, It's Kevin, JakeP0500, JamesSwagger, Jasdeep, Jimmy, JohanMoya, joni_djESP, JPClyde, juham, kazeFATALITY, Kearns- and 139 other users.
02-18-2013, 07:46 PM #227
KCxFTW
Who’s Jim Erased?
Originally posted by iBeaTs View Post
downloads dont work


Originally posted by another user
btw, do you have all the file downloads from this thread? mediafire suspended my account and dont have em right now
thanks


Here's the c2d download link: You must login or register to view this content.
&
Here's the eEID_RKDumper.pkg download link: You must login or register to view this content.

The following 2 users say thank you to KCxFTW for this useful post:

DEREKTROTTER, Beats
02-19-2013, 02:32 AM #228
KCxFTW
Who’s Jim Erased?
Originally posted by DEREKTROTTER View Post
yes thats right, i always keep the 2 files on USB
CEX-FLASH.EID0.NORBIN
DEX-FLASH.EID0.NORBIN



Thank you so much! I wasn't sure if it was safe to switch back or not, but it's actually very simple!
02-19-2013, 09:13 PM #229
NGU GHOST
The One And Only
yo u dont have to be on dex to get your ps3 rebug ps3 online do u?
02-19-2013, 10:39 PM #230
Fall's Fait
Pokemon Trainer
Derek, could you supply me with the 999 downgrader or the eEID root key? If i cant find a 999 downgrader download, then i cant get the edi key. LOL

Also do i need to be on DEX in order to do RTE?

Nevermind, I found the 999 downgrader.
02-20-2013, 03:25 AM #231
Originally posted by DEREKTROTTER View Post
cant you read properly? look below - the 1st box is just the "command usage". Seriously if you didnt understand something this simple you are gonna end up bricking like the rest of em

Usage:
    c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]

You must login or register to view this content.

---------- Post added at 01:24 PM ---------- Previous post was at 01:22 PM ----------



ye, its a must. But once u have it no need to do it again


you had the right code derek they just didnt take the time to type in the cmd themselves(if a file is named different than the command it wont functiion and will give an error). big props on the tut, did it myself today with 100% success first try just because i like to try new stuff :P

The following user thanked eneme01 for this useful post:

DEREKTROTTER
02-20-2013, 03:57 AM #232
Fall's Fait
Pokemon Trainer
When I plug my usb into the port on the right and try to press "Rewrite Flash ID", it doesn't do anything, it acts as if I didn't press it. ANy advice, everything else went smoothly?
02-20-2013, 12:38 PM #233
DEREKTROTTER
You're Goddamn Right
Originally posted by Fall
When I plug my usb into the port on the right and try to press "Rewrite Flash ID", it doesn't do anything, it acts as if I didn't press it. ANy advice, everything else went smoothly?


make sure the files are named correctly
or try a different usb (fat32)
02-20-2013, 01:30 PM #234
Fall's Fait
Pokemon Trainer
Originally posted by xIPuertoRican View Post
when i do put it on c2d it says cannot open eid_key_file.bin

---------- Post added at 09:23 PM ---------- Previous post was at 08:50 PM ----------



when i clicked on Swap LV2 Kernel its says This Function is not available in CEX MOde Please flash a DEX nor/NAND first

---------- Post added at 09:32 PM ---------- Previous post was at 09:23 PM ----------



nvm i got it thanks dereck



What did you do to resolve the problem?
02-20-2013, 10:46 PM #235
Fall's Fait
Pokemon Trainer
Originally posted by DEREKTROTTER View Post
make sure the files are named correctly
or try a different usb (fat32)


Ok so I tried to use a different FAT32 usb and I had no luck, then I retried the whole process over again and It still didn"t work. My CEX-FLASH.EID0.NANDBIN an DEX-FLASH.EID0.NANDBIN are both 239 mb, I have tried to put those on the root of my USB and that didn't work. Am I supposed to have them in the c2d folder or does it matter at all, and is there any other way I could Rewrite Target ID?

Copyright © 2026, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo