PS3 3.70 Downgrade with ProgSkeet or Teensy++ Tutorial

[/GriFFin]

THE FOLLOWING TUTORIAL RE-PRINTED WITH ORIGINAL AUTHOR's PERMISSION from RootedSystem (http://rootedsystem.com/2011/08/ps3-3-70-downgrade-with-progskeet-or-teensy-tutorial/)





In this tutorial I will go over the steps needed to downgrade any PS3 at 3.70. Their has been alot of updates over the past few days, this tutorial should clear them up.

Before beginning this tutorial you will need to have installed the ProgSkeet or Teensy++ to your PS3. This requires dissembling your PS3 and some soldering work. If you do not want to void your PS3′s warranty you have two options. 1. Buy a second PS3 for homebrew 2. Wait for an exploit and don’t update to any new firmwares.

Requirements

PS3 Phat or PS3 Slim at 3.70 (Must be at 3.70 if not update to it!)
ProgSkeet or Teensy++ Installed
FlowRebuilder v.4.1.3.2 (http://www.multiupload.com/L9QPX7DIY5)
Downgrade.bin (http://www.multiupload.com/EZRZ2QR98W)
Automated Hex (http://www.multiupload.com/AE8W5HADWM) (Made by psicoleo & uf6667)



Dump the NOR from your ps3 with the ProgSkeet or Teensy++ it should be exactly 16,777,216 bytes, if its not re-dump it until it is.

EDIT: WARNING: ACTUAL DUMP SIZE DOES NOT MATTER. YOU NEED TO VERIFY THE DUMPS. Just because you have the same size dumps or they're EXACTLY 16,777,216 bytes does not mean you have a valid dump. You can still have a corrupted dump.
http://rootedsystem.com/wp-content/uploads/2011/08/1_0pM2oy.png






Now open up Flow Rebuilder and select “Byte reverse and extract a NOR Dump” from the drop down and drag your dump to the “Select the input Dump File”. Click execute and it will build a new volume (bin.REV).


http://rootedsystem.com/wp-content/uploads/2011/08/2_0Ghr8w.png
Next open up Transplante, in “donador” select your nor-dump.bin.REV and for “receptor” select downgrade.bin and click go.


http://rootedsystem.com/wp-content/uploads/2011/08/3_X5uWJl.png
Now that your downgrade.bin should is successfully hexed open Flow Rebuilder back up. Select “Byte reverse and extract a NOR Dump” and drag downgrade.bin to the bottom option and click execute.


http://rootedsystem.com/wp-content/uploads/2011/08/UJvvHl.png
It will give an error but this is normal. You should be left with “downgrade.bin.REV”, this is the file you will flash to your console.
Once flashed turn on your console but don’t press anything! Shutoff the console, we’ll need to put it into factory service mode.
Download lv2diag (http://www.multiupload.com/121ZAVWC0I) and cfw (http://www.multiupload.com/4S6NGO13H4) put these onto a usb drive and plug them into the far right usb port.
Turn on the console, it should shutoff within 10-15 minutes. Once the flashing is complete and the console is off; remove the usb and turn it back on. You should now see the xmb. Shutoff your ps3 once again. Download lv2diag FILE2 (http://www.mediafire.com/?b07qrb96iz99ibb) and put it overwrite the old one your usb.
Put the usb drive back into your ps3 and turn it on again. This time it will turn on for 20sec and then shutoff. Your ps3 is now successfully on CFW 3.55 Kmeaw.

Say thanks to:

DiGiTaLAnGeL (Progskeet Tester)
Glevand & mfw builder team( cfw )
NDT (Helper) he’s a really good guy
JaiCraB ( lv2diag without reader )
Robs1 ( my guide with nor flash)
EussNL (for his great support with PS3DEVWIKI.COM which I read everyday).
Defyboy (for creating ps3devwiki)
To all the #darkps3 channel from irc-hispano.org for their help and countless hours of testing


ORIGINAL SOURCE: http://rootedsystem.com/2011/08/ps3-3-70-downgrade-with-progskeet-or-teensy-tutorial/

[MacAmb]

very nice and simple .good one .

[rednekcowboy]

Is there anywhere that has a good diagram/tut for installing progskeet?

Also does anyone know anything about this solderless solution or where to get the progskeet clip, I would greatly appreciate it.

[master737373]

Is there anywhere that has a good diagram/tut for installing progskeet?

Also does anyone know anything about this solderless solution or where to get the progskeet clip, I would greatly appreciate it.For good diagrams, check their website (http://goo.gl/WccxG). The solderless solution is for NAND only. So you'd need 2x360-clips. It isn't marketed by the progskeet team though.

[master737373]

WARNING: ACTUAL DUMP SIZE DOES NOT MATTER. YOU NEED TO VERIFY THE DUMPS. Just because you have the same size dumps or they're EXACTLY 16,777,216 bytes does not mean you have a valid dump. You can still have a corrupted dump.

Please edit that.

[master737373]

lol yeah
10char.

[JLM]

Maybe the Master has had trouble editing this tutorial because he actually has ownership of the one here:
http://www.ps3crunch.net/forum/threads/529-PS3-3.70-Downgrade-with-ProgSkeet-or-Teensy-Tutorial

His warning could be added to that one.
Maybe add a couple things to make them more obvious on a first read through:
Requirements: Automated Hex = Transplante, used in step 2
Step 5 How to turn off the console without pressing anything? Logical guess is it doesn't matter, but it is not fun to guess for someone doing it the first time.

Also, what method would you suggest to verify the dumps? Some people dump the flash twice and compare the results (with hexeditor or commandline command: fc (windows), they should match). Is that okay?

Does it matter what firmware version the console came with or does the minimum version in the syscon need to be checked first? On other threads, there seems to be some confusion about using a different CFW besides Kmeaw. Is it possible? When does a firmware like Rogero's have to be used?

[master737373]

Maybe the Master has had trouble editing this tutorial because he actually has ownership of the one here:
http://www.ps3crunch.net/forum/threads/529-PS3-3.70-Downgrade-with-ProgSkeet-or-Teensy-Tutorial

His warning could be added to that one.
Maybe add a couple things to make them more obvious on a first read through:
Requirements: Automated Hex = Transplante, used in step 2
Step 5 How to turn off the console without pressing anything? Logical guess is it doesn't matter, but it is not fun to guess for someone doing it the first time.

Also, what method would you suggest to verify the dumps? Some people dump the flash twice and compare the results (with hexeditor or commandline command: fc (windows), they should match). Is that okay?

Does it matter what firmware version the console came with or does the minimum version in the syscon need to be checked first? On other threads, there seems to be some confusion about using a different CFW besides Kmeaw. Is it possible? When does a firmware like Rogero's have to be used?Yes, it matters A LOT what the minimum version is. But it doesn't necessarily matter what firmware the PS3 came with.

The Rogero CFW v2 is the same as kmeaw, just with LV2 hash checks patched. While downgrading, you need LV1 patched, or you'll end up with RSOD, or YLOD, one of those. I'm pretty sure it's RSOD.

[TomAlek]

PS3 Phat or PS3 Slim at 3.70 (Must be at 3.70 if not update to it!) <-- edit/delete that or for god's sake tell me why the hell do I have to update it to 3.70? :|

[t_jay17]

How do you dump the nand using the progskeet and the nand clip?

Are there any solderless diagrams?

[2615863]

How would you use this for 4.00 OFW?

[afiser]

Its literally the same steps for all firmwares really.

Here is a condensed tutorial

Downgrading a NOR PS3 with 4.00

1.Dump 4.00 NOR with flasher
2.VERIFY YOUR DUMP!!!!!!!!! cannot say this enough. Use a hex editor and this page to verify: http://www.ps3devwiki.com/index.php?title=Flash
3.Patch the 4.00 image with the 3.55 downgrade patches (can be found here: http://www.ps3devwiki.com/index.php?title=Downgrading_with_NOR_flasher)
3a. You may need to use the lv2diag self files and a downgrade dongle to downgrade properly, i didn't need to use them for whatever reason so im not really aware of the steps for them
4.Install QA Flag (so you can install a firmware without lv1 checks disabled, confirmation of this method can be found here: http://www.ps3devwiki.com/index.php?title=Talk:Downgrading_with_Hardware_fla sher#Alternative_QA_way)
5.Install 3.55 OFW (probably need to do this from recovery menu or possible the QA debug downgrade way)
6.Install 3.55 MFW of your choice

[2615863]

Its literally the same steps for all firmwares really.

Here is a condensed tutorial

Downgrading a NOR PS3 with 4.00

1.Dump 4.00 NOR with flasher
2.VERIFY YOUR DUMP!!!!!!!!! cannot say this enough. Use a hex editor and this page to verify: http://www.ps3devwiki.com/index.php?title=Flash
3.Patch the 4.00 image with the 3.55 downgrade patches (can be found here: http://www.ps3devwiki.com/index.php?title=Downgrading_with_NOR_flasher)
3a. You may need to use the lv2diag self files and a downgrade dongle to downgrade properly, i didn't need to use them for whatever reason so im not really away of the steps for them
4.Install QA Flag (so you can install a firmware without lv1 checks disabled, confirmation of this method can be found here: http://www.ps3devwiki.com/index.php?title=Talk:Downgrading_with_Hardware_fla sher#Alternative_QA_way)
5.Install 3.55 OFW (probably need to do this from recovery menu or possible the QA debug downgrade way)
6.Install 3.55 MFW of your choice

So I can do this :

downgrade v2 patcher

Source: http://www.digitalangel.it/2011/09/release-progskeet-patchers-ps3-nor-downgrade-v2-patchfile/

Just extract the folder “downgrade v2 ProgSkeet” anywhere on your PC.
Open WinSkeet40000/LinuxKeet/iSkeet on your computer.
Create a dump of your 3.70 OFW if you haven’t already done it.
Call it “OFW370.bin” -IT MUST BE A BYTESWAPPED DUMP!-
Open the “Patcher” tab and select “OFW370.bin” as the input file.
Select the progskeet_patch.txt as the patch file.

But i dont get the byteswap thing? Is that what reflow builders for?
This release is based on the patchset of the downgrade v2 released by dospiedra,
and you should check BYTESWAP while reading NOR and when you flash your downgrade.bin
file back. Go for it :) Now you have a fully working downgrade.bin to flash

[afiser]

So I can do this :

downgrade v2 patcher

Source: http://www.digitalangel.it/2011/09/release-progskeet-patchers-ps3-nor-downgrade-v2-patchfile/

Just extract the folder “downgrade v2 ProgSkeet” anywhere on your PC.
Open WinSkeet40000/LinuxKeet/iSkeet on your computer.
Create a dump of your 3.70 OFW if you haven’t already done it.
Call it “OFW370.bin” -IT MUST BE A BYTESWAPPED DUMP!-
Open the “Patcher” tab and select “OFW370.bin” as the input file.
Select the progskeet_patch.txt as the patch file.

But i dont get the byteswap thing? Is that what reflow builders for?
This release is based on the patchset of the downgrade v2 released by dospiedra,
and you should check BYTESWAP while reading NOR and when you flash your downgrade.bin
file back. Go for it :) Now you have a fully working downgrade.bin to flash

yea, im not sure about the byte swap thing, i dumped with a teensy and i didn't need to byteswap anything, it might be a progskeet thing

[t_jay17]

With the progskeet solderless clips and the nand do you still need to solder the jumpers on the progskeet?

[2615863]

With the progskeet solderless clips and the nand do you still need to solder the jumpers on the progskeet?

I dont think you need to short anything out, but I could be wrong

[t_jay17]

What would be different if it is a nand ps3 you wish to downgrade?

[afiser]

What would be different if it is a nand ps3 you wish to downgrade?

i would look at these two pages to figure it out

http://www.ps3devwiki.com/index.php?title=Downgrading_with_NAND_flasher

http://www.ps3devwiki.com/index.php?title=Talk:Downgrading_with_NAND_flasher

i would think the process is fairly similar but i have no experience flashing NAND's on ps3.