3.70 - Downgrade v2 for All NOR Models - For ProgSkeet

Published on 09-01-2011 09:01 AM

19 Comments

Damox has released an English version of Dospiedras' Downgrade v2. Now compatible with all NOR FLASH, you can use this guide along with a ProgSkeet to downgrade your v3.70 PS3 consoles to v3.55. For more information on the previous method, visit the old article here. Thank you to damox for granting us permission to reproduce this wonderful guide, here on PSX-SCENE.

Can you downgrade your PS3? (click to find out!)

Playstation 3 Downgrade
(dospiedra v2)
Posted on September 1, 2011 by damox
In this quick tutorial I will cover how to downgrade your PS3 (NOR flash type only) using dospiedra’s latest downgrade method.
You will need the following:

PS3 Fat or Slim (NOR flash type only)
A USB Thumbdrive.
A method to enter your PS3 into Factory Service Mode
Firmware 3.70 OFW (.PUP MD5: 7EE6B91BBD07DDE1E65A0681DE66745B)
ProgSkeet Universal Programmer
Latest Version of the ProgSkeet Software
Downgrade V2 by dospiedra (.RAR MD5: F768F4B0E8BA1D300495C5F6A1CFB1E4)
HEX Editor – I will be using HxD (.ZIP MD5: 18DF5E00110513F15882709D06947F95)
3.55 CFW No Check by dospiedra (.PUP MD5: 89FEDBF48A4FFEB74F68D30E3E684608)
1st stage Lv2diag.self by jaicrab (.ZIP MD5: 3499B86C34D2E11D0AF74C7B125B6758)
2nd stage Lv2diag.self by jaicrab (.RAR MD5: 5A70B6019FD801554305B7A802EB9285)

–Tutorial Start–
Step 1: Dump the NOR of your PS3 using the ProgSkeet Device and Software. Make sure you dump your NOR a number of times and verify that both the read is valid and that all the dumps are exactly the same.

Make sure you have ByteSwap checked, so we can eliminate the usage of FlowRebuilder.
Your dump should be exacltly 16,777,216 bytes.
Save the dump as NOR_3.70_OFW.bin for this guide.

Spansion NOR: 128KB sector, 128 sectors
Samsung NOR: 4KB sector, 4096 sectors
Macronix NOR: 128KB sector, 128 sectors

Step 2: Open NOR_3.70_OFW.bin with HxD. Make sure OFFSET 200 reads “IFI” and nothing else (otherwise you might need to go back and ByteSwap your dump)

Step 3: Open the 6 patches found inside the downgrade v2 archive with HxD.

Step 4: Now we want to patch our NOR_3.70_OFW.bin with the 6 patches provided.

patch1: OFFSET 0C0010 LENGTH 6FFFE0
patch2: OFFSET 7C0010 LENGTH 6FFFE0
patch3: OFFSET 80000 LENGTH 20000
patch4: OFFSET A0000 LENGTH 20000
patch5: OFFSET 40000 LENGTH 20000
patch6: OFFSET 60000 LENGTH 20000

For each patch perform the following (using patch 1 as an example):

Open patch1 and select all (ctrl+a) and copy (ctrl+c).
Open NOR_3.70_OFW.bin and goto (ctrl+g) OFFSET 0C0010

Paste write with ctrl-b (not Paste Insert! – the file size should never change) the changes you make should be coloured red.

Keep repeating (using the different offsets for each patch) until all 6 patches have been applied.
Step 5: Save patched NOR_3.70_OFW.bin as NOR_downgrade.bin

Step 6: Flash NOR_downgrade.bin to the PS3 using the ProgSkeet Device and Software.

Step 7: Turn on the PS3 but do not press anything. Wait 1 minute or so, and remove power from the PS3 - we need to put it into factory service mode.

Step 8: Format a FAT32 thumb-drive and place the following files on it.

usb:\\Lv2diag.self (Get this file from the Lv2Diag-patch-par-Jaicrab.zip archive – ‘\Lv2Diag-patch-par-Jaicrab\STEP1\Lv2diag.self’)
usb:\\PS3UPDAT.PUP (Rename 355checkoff.PUP to PS3UPDAT.PUP)

Step 9: Plug the thumb-drive with the files from step 8 into the right-most USB port on the PS3.

Step 10: Boot the PS3 into Factory Service Mode (see other guides on how to achieve this)

Step 11: Wait for the PS3 to power off automatically (this should take somewhere between 10-20 minutes)

Step 12: Remove the USB from the right-most USB port on the PS3.

Step 13: Power on the PS3 – you should now see the XMB.

Step 14: Shutdown the PS3 again.

Step 15: Replace the first stage Lv2diag.self with the second stage Lv2diag.self on the thumb-drive and re-plug the thumb-drive into the right-most USB port on the PS3.

usb:\\Lv2diag.self (Get this file from the Lv2diag_355.rar archive – ‘\\Lv2diag_355\Archivo 2\Lv2diag.self’)
usb:\\PS3UPDAT.PUP (Keep from before)

Step 16: Power on the PS3 - Wait for the PS3 to power off automatically (this should take somewhere between 10-20 seconds)

Step 17: Remove the USB from the right-most USB port on the PS3.

Step 18: Boot the PS3 and enjoy your 3.55 CFW No Check by dospiedra (equivalent to 3.55 CFW by kweaw)

Source: blog.damox.net

[PSX-SCENE]

Share
- Share this post on
- Digg
- Del.icio.us
- Technorati
- Twitter

KillerDAN likes this.

Categories:

Downgrading

_{Tags :

3.70,

downgrade,

hacker,

nor flash}

19 Comments

CS67700 - 09-01-2011, 10:02 AM
- Reply
Yep ... but just a question though : What's the point of downgrading if all games will be coded with +3.70 ? LOOL

KillerDAN - 09-01-2011, 10:17 AM
- Reply
Originally Posted by CS67700

Yep ... but just a question though : What's the point of downgrading if all games will be coded with +3.70 ? LOOL

You get to play all your old backups and still all new games you get and keep the same console for it. Not good enough ?

killzone3 - 09-01-2011, 10:18 AM
- Reply
yes that is the big problem but the hackers did not solve this

unreal676 - 09-01-2011, 01:24 PM
- Reply
This is great and all, but I'd love to see the Teensy tutorial, or should I just replace the word Progskeet with "Teensy" =(. I'd love to fast switch my CFW.

damox - 09-01-2011, 07:15 PM
- Reply
Originally Posted by unreal676

This is great and all, but I'd love to see the Teensy tutorial, or should I just replace the word Progskeet with "Teensy" =(. I'd love to fast switch my CFW.

Pretty much, I might go through it later and add teensy. You can use any flasher - you might need some other things too, like byte-swapping with FlowRebuilder etc.

unreal676 - 09-01-2011, 07:33 PM
- Reply
Originally Posted by damox

Pretty much, I might go through it later and add teensy. You can use any flasher - you might need some other things too, like byte-swapping with FlowRebuilder etc.

If you do go through the Teensy later, that'd be awesome. As soon as I get a 2nd HDD for 3.7 CFW and a Teensy board, I'll update on how it all goes. A tutorial for what I need to do is all I want =).

pspmte - 09-02-2011, 12:29 AM
- Reply
I must say this Downgrade is Kudos to Keperfear and EussNLthey showed me this last week and i downgraded my slim 320 slim

Tranced - 09-02-2011, 02:33 AM
- Reply
Nice progress, keep it coming.

godlyitem - 09-02-2011, 12:21 PM
- Reply
how do i dump the NOR? where is it

gataka - 09-03-2011, 04:25 PM
- Reply
Hello,I am attempting this tutorial. I have already install progskeet on the mainboard. I will continue my work tomorrow. Can some one give me some information about this step :Step 10: Boot the PS3 into Factory Service Mode (see other guides on how to achieve this)So I guess I can use old JB USB device to get in service mod like before on 3.50?Another question : I have one newer PS3 Slim that most likely come originaly (factory) with 3.56+ can I attempt this downgrade on it.I read in one or two places that consoles with factory 3.56+ can't be downgraded but in this tutorial and many other it is not mentioned. Can some one tell me in fact.

LordX - 09-04-2011, 07:55 AM
- Reply
Originally Posted by gataka

Hello,I am attempting this tutorial. I have already install progskeet on the mainboard. I will continue my work tomorrow. Can some one give me some information about this step :Step 10: Boot the PS3 into Factory Service Mode (see other guides on how to achieve this)So I guess I can use old JB USB device to get in service mod like before on 3.50?Another question : I have one newer PS3 Slim that most likely come originaly (factory) with 3.56+ can I attempt this downgrade on it.I read in one or two places that consoles with factory 3.56+ can't be downgraded but in this tutorial and many other it is not mentioned. Can some one tell me in fact.

make a backup and try , if not works flash back the backup.
dont forget to report here if worked or not

khalkedon - 09-04-2011, 04:18 PM
- Reply
Hi damox,

* patch1: OFFSET 0C0010 LENGTH 6FFFE0
* patch2: OFFSET 7C0010 LENGTH 6FFFE0
* patch3: OFFSET 80000 LENGTH 20000
* patch4: OFFSET A0000 LENGTH 20000
* patch5: OFFSET 40000 LENGTH 20000
* patch6: OFFSET 60000 LENGTH 20000

What about the LENGTH ?

I didn't make any thing with LENGTH, how to use them ? Maybe my fault is here. There is no any explanation with LENGTH?

LordX - 09-06-2011, 04:10 PM
- Reply
Originally Posted by gataka

Hello,I am attempting this tutorial. I have already install progskeet on the mainboard. I will continue my work tomorrow. Can some one give me some information about this step :Step 10: Boot the PS3 into Factory Service Mode (see other guides on how to achieve this)So I guess I can use old JB USB device to get in service mod like before on 3.50?Another question : I have one newer PS3 Slim that most likely come originaly (factory) with 3.56+ can I attempt this downgrade on it.I read in one or two places that consoles with factory 3.56+ can't be downgraded but in this tutorial and many other it is not mentioned. Can some one tell me in fact.

Update : I downgraded from 3.60 > 3.55 , so looks like any version can be downgraded not just 3.70.
go for it , it will work.

Mickrick - 09-06-2011, 04:20 PM
- Reply
3.55 nocheck CFW, while allowing Blu-Ray movie playback, has an issue with games with trophies. It brings an error up "Registration of the trophy information could not be completed. The game will quit. (80010505)". Is this issue going to be resolved in an update?

gataka - 09-08-2011, 03:08 AM
- Reply
I had the same issue. Most of the games get this error and couldn't be played.

skaab - 09-10-2011, 09:20 PM
- Reply
Any news about trophy error?

gataka - 09-11-2011, 09:16 AM
- Reply
Yes. There is new MFW by Rogero. You can find it on the main page, it is he newest post. Just install from recovery mod and all done.

inturbo - 10-07-2011, 08:46 AM
- Reply
Anyone got luck to enter service mode with PSfreedom on iphone?

RUT Dark Ronin - 01-12-2012, 12:17 AM
- Reply
None of BM worked for me. BD-emu.bin refuses to run, Gaia & latest Rogero - quits to XMB immideately after start. Tested on 3 consoles, with 3 PUP's - Dospiedra's, Rogero v2 and Rebug 3.55.2++. Any ideas?