dump the NAND/NOR backup using hardware flashser and then restore the targetid back to retail one and use rogero flash downgrade app in PC and use your NAND/NOR backup to patch it and then flash it back to your PS3. Then it will remind you to reinstall a firmware after you turn it on, install a CFW that you want to use and youre done.
First you need to dump your EID Root Key which must be done on 3.55 cfw (downgrade using the 999 pup if needed).
Install and run the eEID_RKDumper.pkg, the PS3 will just show a black screen and beep several times. You can now restart the PS3 and retrieve your eid_root_key from /dev_hdd0/tmp/.
That is all you need from 3.55, you can go back to rebug 4.21.
You can do this on rebug 4.21 using the toolbox.
Find the option "Export Flash to File", this will dump it to USB001 (right slot).
Converting your CEX dump to DEX
First download and extract the c2d_openssl.rar to C:/ and install openSSL, this is required for c2d to work properly. Make sure you rename the folder to "openssl".
Now take you eid_root_key and your NOR/NAND dump and place in the folder with c2d.
Rename your original CEX dump to flashCEX.bin
Add .bin extension to eid_root_key.
Should now have a folder like this:
Open a CMD window in the current directory (CTRL+SHIFT + right click > Open a command window here)
(Note: Do not put the brackets when typing in your target id.)
Here's an example:
Should give you an output like this:
If you are unsure you have done it correctly, you can convert back to your original target ID (mine is 87)
Then compare this one with your original and they should match.
Switching to DEX using rebug 4.21
Take your two dumps (flashCEX.bin + flashDEX.bin) and rename as below:
Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Then place on USB001 (right slot)
Load up Rebug Toolbox and first click the option:
A couple of warning boxes pop up, click YES to both.
Now Swap LV2 kernal, reboot and you are in DEX Mode within 10 seconds
Switching back to CEX
Very easy, simply rewrite target ID and it will auto swap lv2 kernal to CEX.
To access PSN in DEX mode, there is a feature in Rebug Toolbox to spoof IDPS. Choose EID5 and you will be able to sign in fine. Btw, if anything in this tut doesn't make sense - let me know so i can make it even more noob friendly.
ok im really pissed of by "A system software is required, Go to settings > system update and perform the update." I've been trying 2 figure out how to access psn wile on 4.21 DEX. any 4.46 spoofer or any help please, rebug toolbox and eid spoofer doesnt do jack for psn? after i access psn hopefully, i gonna rtm. please help me anyone?
I want to downgrade my ps3 from 4.46 to 3.55 so i can install MLT Dex firmware 4.41. The ps3 has no working bluray or logic board. There is something im worried about. Will i be able to downgrade from 4.46 to 3.55 without either bluray or logic board? i think rogero downgrade is no BT/logic board patched, but i'm wondering about the part where i need to QA Toggle the ps3. Is there a way to enable QA toggle on 4.46 or 4.50?
MLT cfw 4.46 and 4.50 has a way of launching homebrew without bluray or logic board but i dont think i can with cfw 3.55. My plan is to upgrade from 4.46 to 4.50 MLT first to pick up eid_Root_Key that is needed for dex firmware, downgrade to 3.55 then back up to dex 4.41
i really need help with this since i dont have a flasher + its PHAT 60 gb ps3 meaning if i fail then flashing it would be a lot harder/expensive. Much cheers for any replies/comments!