Post: [Tutorial] CEX2DEX using Rebug CFW4.21
11-11-2012, 11:19 PM #1
DEREKTROTTER
You're Goddamn Right
(adsbygoogle = window.adsbygoogle || []).push({});
[Tutorial] CEX2DEX using Rebug CFW4.21


You must login or register to view this content.


Downloads:
CEX2DEX: You must login or register to view this content.
EID Root Key Dumper: You must login or register to view this content. | You must login or register to view this content. | You must login or register to view this content.


Preparation:
Dumping EID root key
First you need to dump your EID Root Key which can now be done on most CFW Version.
  • Install and run the EID PKG for your CFW, the PS3 will just show a black screen and beep several times. You can now restart the PS3 and retrieve your eid_root_key from either:
    /dev_hdd0/tmp/eid_root_key or for 4.xx in /dev_hdd0/game/FLTZ00010/USRDIR.


*You can now dump you EID Root Key directly via the Rebug Toolbox ( utilities > dump EID Root key )

Dumping NOR/NAND
You can do this on rebug CFW using the toolbox.
  • Find the option "Export Flash to File", this will dump it to USB000 (right slot).


You must login or register to view this content.


Converting your CEX dump to DEX
  • First download and extract the c2d_openssl.rar to C:/ and install openSSL, this is required for c2d to work properly. Make sure you rename the folder to "openssl".
  • Now take you eid_root_key and your NOR/NAND dump and place in the folder with c2d.

  • Rename your original CEX dump to flashCEX.bin
  • Add .bin extension to eid_root_key.


Should now have a folder like this:

You must login or register to view this content.

  • Open a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)


Usage:
    c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]

So type in CMD or copy/paste the following: c2d.exe eid_root_key.bin flashCEX.bin flashDEX.bin 82
You must login or register to view this content.

Should give you an output like this:
You must login or register to view this content.

If you are unsure you have done it correctly, you can convert back to your original target ID (mine is 87)
Then compare this one with your original and they should match.


Switching to DEX using rebug CFW
Take your two dumps (flashCEX.bin + flashDEX.bin) and rename as below:

Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Then place in the directory of your USB storage drive and insert in PS3 on USB000 (right slot)

Load up Rebug Toolbox and first click the option:
You must login or register to view this content.
A couple of warning boxes pop up, click YES to both.

Now Swap LV2 kernal, reboot and you are in DEX Mode within 10 seconds Smile
You must login or register to view this content.

Switching back to CEX
Very easy, simply rewrite target ID and it will auto swap lv2 kernal to CEX.

To access PSN in DEX mode, there is a feature in Rebug Toolbox to spoof IDPS. Choose EID5 and you will be able to sign in fine.

btw, if anything in this tut doesn't make sense - let me know so i can make it even more noob friendly.

Troubleshooting
Q: Command prompt says cant find openssl.exe in c: \openssl\bin even though i checked and openssl.exe is definately there.
A: Make sure the openssl folder is at root C:/ and is named exactly "openssl"

Q: Im having a error telling me that wrong format EID 48 bytes.
A: Make sure the filesize of your key is either 48 bytes (NOR) or 256kb (NAND)
Also dont forget you need to add the file extension .bin to the key.


How to get Online 4.21 DEX
Simply go to Rebug Toolbox > Utilities > Change Active PS3ID > EID5 CEX then go Sign in.
(adsbygoogle = window.adsbygoogle || []).push({});

The following 239 users say thank you to DEREKTROTTER for this useful post:

_L0st_my_Gh0st_, ResistTheMoon, -SuperMan, {OM}1337{OM}, ⓙω мσ∂z, Nana, ★RAMPAGE★, Eddie Mac, 1reyalp, A Friend, A1narchy.com, AcnxMods, alexis strider, AlexNGU, Asian, bandphan, BASEBALL4EVER12, bhoot-iq, TheDeadLift, BKG98, BkxRich, BoatyMcBoatFace, Britis-, BroIDontMod, byVexHD, canadiancaper, CantStopMark, celahudini, Cesei, CEXREXDEX, Chnorzy, CITYCOMET, cl_21, clossky, codmadz332, Creepz, cuartaesfera, Dan Dactyl, Dan94, DannyBoiSmith, Daweeyz, Demmonnixx, dolby1, Dr. Mayham, Durnethe3, emcrew2, EquakeCSharp, FarSideX, Luckeyy, FLIX_Hosting, flynhigh09, FOX-727, Frank Ryan, FwiskyFIFA, gaming_nation, popcornmods, GangDePlot, gatecrasher, geeklogik, Geo, Ali D Killer, Ghozt007, Gommy, GuMMyOreOs, Harry, Hate, HaTeRM4NR33T, Heaney, JLM, hibye3, HighModzz, Hori_By_Nature, I-HATE-NGU, ibombo, Callumeleyy, iDunkPingazBrah, iifire, ilasthope, iLLy-i, Im Po, ImAzazel, ImGsus, ImIrIsH, ImPiffHD, iRoyal // MoDz, Island Time, It's Kevin, JakeP0500, JamesSwagger, Jasdeep, Jimmy, JohanMoya, joni_djESP, JPClyde, juham, kazeFATALITY, Kearns- and 139 other users.
11-12-2013, 09:10 PM #542
Default Avatar
Brad
Guest
Originally posted by DEREKTROTTER View Post
[Tutorial] CEX2DEX using Rebug CFW4.21


NOTE: Guide is almost the same for Rebug 4.30 users, simply dump your NOR/NAND on 4.30 - though this should be obvious anyway :dumb:

You must login or register to view this content.


Downloads:
You must login or register to view this content.
You must login or register to view this content.

Preparation:
Dumping EID root key
First you need to dump your EID Root Key which must be done on 3.55 cfw(downgrade using the 999 pup if needed).
  • Install and run the eEID_RKDumper.pkg, the PS3 will just show a black screen and beep several times. You can now restart the PS3 and retrieve your eid_root_key from /dev_hdd0/tmp/.


That is all you need from 3.55, you can go back to rebug 4.21.

Dumping NOR/NAND
You can do this on rebug 4.21 using the toolbox.
  • Find the option "Export Flash to File", this will dump it to USB001 (right slot).


You must login or register to view this content.


Converting your CEX dump to DEX
  • First download and extract the c2d_openssl.rar to C:/ and install openSSL, this is required for c2d to work properly. Make sure you rename the folder to "openssl".
  • Now take you eid_root_key and your NOR/NAND dump and place in the folder with c2d.

  • Rename your original CEX dump to flashCEX.bin
  • Add .bin extension to eid_root_key.


Should now have a folder like this:

You must login or register to view this content.

  • Open a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)


Usage:
    c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]

You must login or register to view this content.

Should give you an output like this:
You must login or register to view this content.

If you are unsure you have done it correctly, you can convert back to your original target ID (mine is 87)
Then compare this one with your original and they should match.

Video

You must login or register to view this content.



Switching to DEX using rebug 4.21
Take your two dumps (flashCEX.bin + flashDEX.bin) and rename as below:

Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Then place on USB001 (right slot)

Load up Rebug Toolbox and first click the option:
You must login or register to view this content.
A couple of warning boxes pop up, click YES to both.

Now Swap LV2 kernal, reboot and you are in DEX Mode within 10 seconds Smile
You must login or register to view this content.

Switching back to CEX
Very easy, simply rewrite target ID and it will auto swap lv2 kernal to CEX.

To access PSN in DEX mode, there is a feature in Rebug Toolbox to spoof IDPS. Choose EID5 and you will be able to sign in fine.

btw, if anything in this tut doesn't make sense - let me know so i can make it even more noob friendly.

Troubleshooting
Q: Command prompt says cant find openssl.exe in c:\oppenssl\bin even though i checked and openssl.exe is definately there.
A: Make sure the openssl folder is at root C:/ and is named exactly "openssl"

Q: Im having a error telling me that wrong format EID 48 bytes.
A: Make sure the filesize of your key is either 48 bytes (NOR) or 256kb (NAND)
Also dont forget you need to add the file extension .bin to the key.


How to get Online 4.21 DEX
Simply go to Rebug Toolbox > Utilities > Change Active PS3ID > EID5 CEX then go Sign in.

Enjoy your debug [img]https://www.**************/images/smilies/sFi_hitman.gif[/img]


i follow the tut but i keep getting this error? You must login or register to view this content.
11-12-2013, 09:18 PM #543
DEREKTROTTER
You're Goddamn Right
Originally posted by Brad View Post
i follow the tut but i keep getting this error? You must login or register to view this content.


you havent added the .bin file extension properly
many do the same
11-12-2013, 09:30 PM #544
Default Avatar
Brad
Guest
Originally posted by DEREKTROTTER View Post
you havent added the .bin file extension properly
many do the same


Thanks! I just realized how newbie the mistake was! -.-
11-15-2013, 03:42 PM #545
Demmonnixx
Vault dweller
Originally posted by DEREKTROTTER View Post
you havent added the .bin file extension properly
many do the same


Hey DT, need some help bro: Here what I have going on

Different issue now. Here are the steps I took in order

3.30 OFW to 3.55 Rogero
QA Flagged
Installed Rebug Tool box
Dumped my root key
Installed 4.46 Rebug REX
Export Flash to File
Renamed original CEX dump to flashCEX.bin
Added .bin extension to eid_root_key
My folder looked identical to this
[ATTACH=CONFIG]28030[/ATTACH]
Opened a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)
Then did the following
[ATTACH=CONFIG]28031[/ATTACH]
The did this
Took my two dumps (flashCEX.bin + flashDEX.bin) and renamed them as below:
Original CEX dump to CEX-FLASH.EID0.NANDBIN
Converted DEX dump to DEX-FLASH.EID0.NANDBIN
Then place on USB001 (right slot)
This is where I think my problem is as my file type is still showing .bin and not .NANDBIN I read something about it needing to show NANDBIN as the file type but cannot get it to change.
When I originally changed the original CEX dump to flashCEX.bin it gave me a warning about changing file types but it let me do it but when I do the CEX-FLASH.EID0.NANDBIN or the DEX It does not change, it just shows in properties as CEX-FLASH.EID0.NANDBIN.bin. What am I doing wrong

Reason I ask this is because on 4.46 rebug with 4.21 rebug tool box when I go to write new target I click on it and nothing happens. The 2 files CEX-FLASH.EID0.NANDBIN and DEX-FLASH.EID0.NANDBIN are both on the root of usb0000 the right most usb.


Anyone, any help would be appreciated. I'm stuck. I posted a thread for help but no one has responded
11-15-2013, 04:33 PM #546
DEREKTROTTER
You're Goddamn Right
Originally posted by Demmonnixx View Post
Hey DT, need some help bro: Here what I have going on

Different issue now. Here are the steps I took in order

3.30 OFW to 3.55 Rogero
QA Flagged
Installed Rebug Tool box
Dumped my root key
Installed 4.46 Rebug REX
Export Flash to File
Renamed original CEX dump to flashCEX.bin
Added .bin extension to eid_root_key
My folder looked identical to this
[ATTACH=CONFIG]28030[/ATTACH]
Opened a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)
Then did the following
[ATTACH=CONFIG]28031[/ATTACH]
The did this
Took my two dumps (flashCEX.bin + flashDEX.bin) and renamed them as below:
Original CEX dump to CEX-FLASH.EID0.NANDBIN
Converted DEX dump to DEX-FLASH.EID0.NANDBIN
Then place on USB001 (right slot)
This is where I think my problem is as my file type is still showing .bin and not .NANDBIN I read something about it needing to show NANDBIN as the file type but cannot get it to change.
When I originally changed the original CEX dump to flashCEX.bin it gave me a warning about changing file types but it let me do it but when I do the CEX-FLASH.EID0.NANDBIN or the DEX It does not change, it just shows in properties as CEX-FLASH.EID0.NANDBIN.bin. What am I doing wrong

Reason I ask this is because on 4.46 rebug with 4.21 rebug tool box when I go to write new target I click on it and nothing happens. The 2 files CEX-FLASH.EID0.NANDBIN and DEX-FLASH.EID0.NANDBIN are both on the root of usb0000 the right most usb.


Anyone, any help would be appreciated. I'm stuck. I posted a thread for help but no one has responded


edit your file name on PC, you need to remove the .bin which is likely the problem

go to view > options > view

and make sure the file types box is unticked

You must login or register to view this content.

The following user thanked DEREKTROTTER for this useful post:

Demmonnixx
11-15-2013, 04:40 PM #547
Demmonnixx
Vault dweller
Thank you for the quick reply. Will try this when I get home this evening and report back if there are any other issues. Thanks again
11-16-2013, 01:23 AM #548
Demmonnixx
Vault dweller
Originally posted by DEREKTROTTER View Post
edit your file name on PC, you need to remove the .bin which is likely the problem

go to view > options > view

and make sure the file types box is unticked

You must login or register to view this content.


It worked. Thank you now another issue. How do I get online on 4.46 rex rebug? I've tried switching this:
Simply go to Rebug Toolbox > Utilities > Change Active PS3ID > EID5 CEX then go Sign in. but doesn't let me sign in and when I exit out of rebug toolbox it changes back to "No". do I need to spoof or something? This ps3 has never been online before but it did just let me restore and existing account but will not let me do anything else. This may not be the spot for this sort of question but it's as good as any Smile. Any help is much appreciated
11-16-2013, 01:30 AM #549
DEREKTROTTER
You're Goddamn Right
Originally posted by Demmonnixx View Post
It worked. Thank you now another issue. How do I get online on 4.46 rex rebug? I've tried switching this:
Simply go to Rebug Toolbox > Utilities > Change Active PS3ID > EID5 CEX then go Sign in. but doesn't let me sign in and when I exit out of rebug toolbox it changes back to "No". do I need to spoof or something? This ps3 has never been online before but it did just let me restore and existing account but will not let me do anything else. This may not be the spot for this sort of question but it's as good as any Smile. Any help is much appreciated


im not the one to ask about getting online, its been nearly a year since i last used CFW to sign. PSIDpatch will probably still do the job

The following user thanked DEREKTROTTER for this useful post:

Demmonnixx
11-16-2013, 04:48 PM #550
Mango_Knife
In my man cave
Originally posted by Demmonnixx View Post
It worked. Thank you now another issue. How do I get online on 4.46 rex rebug? I've tried switching this:
Simply go to Rebug Toolbox > Utilities > Change Active PS3ID > EID5 CEX then go Sign in. but doesn't let me sign in and when I exit out of rebug toolbox it changes back to "No". do I need to spoof or something? This ps3 has never been online before but it did just let me restore and existing account but will not let me do anything else. This may not be the spot for this sort of question but it's as good as any Smile. Any help is much appreciated


Originally posted by DEREKTROTTER View Post
im not the one to ask about getting online, its been nearly a year since i last used CFW to sign. PSIDpatch will probably still do the job


Acctualy PSIDPatch dosent support 4.41+ CFWs
Easiely just use You must login or register to view this content..

The following 2 users say thank you to Mango_Knife for this useful post:

Demmonnixx, DEREKTROTTER

Copyright © 2026, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo