Tutorial: [Tutorial] CEX2DEX using Rebug CFW4.21

11-11-2012, 11:19 PM #1

DEREKTROTTER

You're Goddamn Right

9,313

Posts

130,792

Reputation

21

Credits

Former Staff

Feb 2010

NextGenUpdate

(adsbygoogle = window.adsbygoogle || []).push({});

[Tutorial] CEX2DEX using Rebug CFW4.21

You must login or register to view this content.

Downloads:
CEX2DEX: You must login or register to view this content.
EID Root Key Dumper: You must login or register to view this content. | You must login or register to view this content. | You must login or register to view this content.

Preparation:
Dumping EID root key
First you need to dump your EID Root Key which can now be done on most CFW Version.

Install and run the EID PKG for your CFW, the PS3 will just show a black screen and beep several times. You can now restart the PS3 and retrieve your eid_root_key from either:
/dev_hdd0/tmp/eid_root_key or for 4.xx in /dev_hdd0/game/FLTZ00010/USRDIR.

*You can now dump you EID Root Key directly via the Rebug Toolbox ( utilities > dump EID Root key )

Dumping NOR/NAND
You can do this on rebug CFW using the toolbox.

Find the option "Export Flash to File", this will dump it to USB000 (right slot).

You must login or register to view this content.

Converting your CEX dump to DEX

First download and extract the c2d_openssl.rar to C:/ and install openSSL, this is required for c2d to work properly. Make sure you rename the folder to "openssl".
Now take you eid_root_key and your NOR/NAND dump and place in the folder with c2d.
Rename your original CEX dump to flashCEX.bin
Add .bin extension to eid_root_key.

Should now have a folder like this:

You must login or register to view this content.

Open a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)

Usage:

    c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]

So type in CMD or copy/paste the following: c2d.exe eid_root_key.bin flashCEX.bin flashDEX.bin 82
You must login or register to view this content.

Should give you an output like this:
You must login or register to view this content.

If you are unsure you have done it correctly, you can convert back to your original target ID (mine is 87)
Then compare this one with your original and they should match.

Switching to DEX using rebug CFW
Take your two dumps (flashCEX.bin + flashDEX.bin) and rename as below:

Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Then place in the directory of your USB storage drive and insert in PS3 on USB000 (right slot)

Load up Rebug Toolbox and first click the option:
You must login or register to view this content.
A couple of warning boxes pop up, click YES to both.

Now Swap LV2 kernal, reboot and you are in DEX Mode within 10 seconds Smile

You must login or register to view this content.

Switching back to CEX
Very easy, simply rewrite target ID and it will auto swap lv2 kernal to CEX.

To access PSN in DEX mode, there is a feature in Rebug Toolbox to spoof IDPS. Choose EID5 and you will be able to sign in fine.

btw, if anything in this tut doesn't make sense - let me know so i can make it even more noob friendly.

Troubleshooting
Q: Command prompt says cant find openssl.exe in c: \openssl\bin even though i checked and openssl.exe is definately there.
A: Make sure the openssl folder is at root C:/ and is named exactly "openssl"

Q: Im having a error telling me that wrong format EID 48 bytes.
A: Make sure the filesize of your key is either 48 bytes (NOR) or 256kb (NAND)
Also dont forget you need to add the file extension .bin to the key.

How to get Online 4.21 DEX
Simply go to Rebug Toolbox > Utilities > Change Active PS3ID > EID5 CEX then go Sign in.

Last edited by DEREKTROTTER ; 02-20-2015 at 09:14 PM.

The following 239 users say thank you to DEREKTROTTER for this useful post:

_L0st_my_Gh0st_, ResistTheMoon, -SuperMan, {OM}1337{OM}, ⓙω мσ∂z, Nana, ★RAMPAGE★, Eddie Mac, 1reyalp, A Friend, A1narchy.com, AcnxMods, alexis strider, AlexNGU, Asian, bandphan, BASEBALL4EVER12, bhoot-iq, TheDeadLift, BKG98, BkxRich, BoatyMcBoatFace, Britis-, BroIDontMod, byVexHD, canadiancaper, CantStopMark, celahudini, Cesei, CEXREXDEX, Chnorzy, CITYCOMET, cl_21, clossky, codmadz332, Creepz, cuartaesfera, Dan Dactyl, Dan94, DannyBoiSmith, Daweeyz, Demmonnixx, dolby1, Dr. Mayham, Durnethe3, emcrew2, EquakeCSharp, FarSideX, Father Luckeyy, FLIX_Hosting, flynhigh09, FOX-727, Frank Ryan, FwiskyFIFA, gaming_nation, popcornmods, GangDePlot, gatecrasher, geeklogik, Geo, Ali D Killer, Ghozt007, Gommy, GuMMyOreOs, Harry, Hate, HaTeRM4NR33T, Heaney, JLM, hibye3, HighModzz, Hori_By_Nature, I-HATE-NGU, ibombo, Callumeleyy, iDunkPingazBrah, iifire, ilasthope, iLLy-i, Im Po, ImAzazel, ImGsus, ImIrIsH, ImPiffHD, iRoyal // MoDz, Island Time, It's Kevin, JakeP0500, JamesSwagger, Jasdeep, Jimmy, JohanMoya, joni_djESP, JPClyde, juham, kazeFATALITY, Kearns- and 139 other users.

01-03-2013, 10:59 PM #38

YooYoOoN

Do a barrel roll!

140

Posts

403

Reputation

0

Credits

Member

Mar 2010

NextGenUpdate

Originally posted by DEREKTROTTER

make sure its at root C:/
then right click > run as admin

Is it normal if i follow this tutorial fully using the 3.55.5 REX Rebug?

01-03-2013, 11:01 PM #39

DEREKTROTTER

You're Goddamn Right

9,313

Posts

130,792

Reputation

21

Credits

Former Staff

Feb 2010

NextGenUpdate

Originally posted by YooYoOoN

Is it normal if i follow this tutorial fully using the 3.55.5 REX Rebug?

yes you can do this on rebug 3.55 or 4.21

01-03-2013, 11:14 PM #40

YooYoOoN

Do a barrel roll!

140

Posts

403

Reputation

0

Credits

Member

Mar 2010

NextGenUpdate

Originally posted by DEREKTROTTER

yes you can do this on rebug 3.55 or 4.21

One last thing i'm worried about.

If i have done it on 3.55 will i be able to go online? and i heard if i use the PS3 for too long it'll overheat because DEX uses a lot of the energy. that true?

01-03-2013, 11:22 PM #41

DEREKTROTTER

You're Goddamn Right

9,313

Posts

130,792

Reputation

21

Credits

Former Staff

Feb 2010

NextGenUpdate

Originally posted by YooYoOoN

One last thing i'm worried about.

If i have done it on 3.55 will i be able to go online? and i heard if i use the PS3 for too long it'll overheat because DEX uses a lot of the energy. that true?

ye shud be able to go online
and ye, it does seem to put more strain on the system

The following user thanked DEREKTROTTER for this useful post:

YooYoOoN

01-04-2013, 01:33 AM #42

YooYoOoN

Do a barrel roll!

140

Posts

403

Reputation

0

Credits

Member

Mar 2010

NextGenUpdate

Originally posted by DEREKTROTTER

ye shud be able to go online
and ye, it does seem to put more strain on the system

oh damn. i finished all, but when i try to rewrite the flash it says that i need the DEX-FLASH.EID0.NORBIN even though its on the flash on usb001

01-04-2013, 01:38 AM #43

DEREKTROTTER

You're Goddamn Right

9,313

Posts

130,792

Reputation

21

Credits

Former Staff

Feb 2010

NextGenUpdate

Originally posted by YooYoOoN

oh damn. i finished all, but when i try to rewrite the flash it says that i need the DEX-FLASH.EID0.NORBIN even though its on the flash on usb001

it will work in you have the filename exact

must be capitals, and make sure the "filetype" is infact .NORBIN

01-04-2013, 03:15 AM #44

II Dave II

Brute

209

Posts

666

Reputation

0

Credits

Member

Jan 2012

NextGenUpdate

Originally posted by DEREKTROTTER

[Tutorial] CEX2DEX using Rebug CFW4.21

You must login or register to view this content.

Downloads:
You must login or register to view this content.
You must login or register to view this content.

Preparation:
Dumping EID root key
First you need to dump your EID Root Key which must be done on 3.55 cfw(downgrade using the 999 pup if needed).

Install and run the eEID_RKDumper.pkg, the PS3 will just show a black screen and beep several times. You can now restart the PS3 and retrieve your eid_root_key from /dev_hdd0/tmp/.

That is all you need from 3.55, you can go back to rebug 4.21.

Dumping NOR/NAND
You can do this on rebug 4.21 using the toolbox.

Find the option "Export Flash to File", this will dump it to USB001 (right slot).

You must login or register to view this content.

Converting your CEX dump to DEX

First download and extract the c2d_openssl.rar to C:/ and install openSSL, this is required for c2d to work properly.
Now take you eid_root_key and your NOR/NAND dump and place in the folder with c2d.
Rename your original CEX dump to flashCEX.bin
Add .bin extension to eid_root_key.

Should now have a folder like this:

You must login or register to view this content.

Open a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)

Usage:

    c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]

You must login or register to view this content.

Should give you an output like this:
You must login or register to view this content.

If you are unsure you have done it correctly, you can convert back to your original target ID (mine is 87)
Then compare this one with your original and they should match.

Switching to DEX using rebug 4.21
Take your two dumps (flashCEX.bin + flashDEX.bin) and rename as below:

Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Then place on USB001 (right slot)

Load up Rebug Toolbox and first click the option:
You must login or register to view this content.
A couple of warning boxes pop up, click YES to both.

Now Swap LV2 kernal, reboot and you are in DEX Mode within 10 seconds Smile

You must login or register to view this content.

To access PSN in DEX mode, there is a feature in Rebug Toolbox to spoof IDPS. Choose EID5 and you will be able to sign in fine.

btw, if anything in this tut doesn't make sense - let me know so i can make it even more noob friendly.

Enjoy your debug You must login or register to view this content.

Dude thanks for the tut if i could add to your rep i would Happy

01-04-2013, 03:46 AM #45

ModsCasual

Keeper

19

Posts

290

Reputation

0

Credits

Member

Dec 2012

NextGenUpdate

I came across an easier way to Dump Your Nor/NAND . I just used a program that does everything for you.
Picture: You must login or register to view this content.

Tut for program.
1. Rename eid_root_key.bin to dump (also delete the bin part of the name)
2. Under Nor/Nand Flash Dump select your flashCEX.bin
3. Then under METLDR Dump select your "dump" file that you previously renamed.
4.Click CEX -> DEX and it will create your DEX file.
Then you can do all of the renaming steps Derek has above.

Password To File "NextGenUpdate"
Download Link To Program: You must login or register to view this content.

The following 4 users say thank you to ModsCasual for this useful post:

A1narchy.com, Ass Burgers, EternalHabit, matt0897

01-04-2013, 05:04 AM #46

xReloadedModz

Bounty hunter

189

Posts

1,171

Reputation

0

Credits

Member

Jun 2012

NextGenUpdate

Originally posted by julii

i got it working but now i get a new error .. smh.. its saying
ERROR: Cannot open [eid_key_file.bin]
ERROR: Cannot open [eid_key_file.bin]
ERROR: Cannot open [eid_key_file.bin]
Wrong format of EID key file: 48 bytes or 256KB expected, but -1 found!

ughh.. im normally good at these type of things i exploited alot of systems and i pods but now that i have a broken bd its hard for me to play games cuz of the bd drive.. im on 3.55.3 now ..got the root key but it still gives me this

I had the same problem try You must login or register to view this content.