Before you start, find out, is your console: Downgradable? NAND or NOR? SKU Models
Use extreme caution when attempting this and be prepared to solder your console. Also, make sure you know for certain, that your model did not come with 3.56+ firmware stock. The following has been translated by jaker89:
Hello everyone, i finally got it, we have a downgrader for slims consoles , this time a bit different that i did with fat models, i made it by the two flashers, progskeet and teensy ++,dope
We need:
fat or slim console with nor updated to 3.70 “DO NOT TRY With ANOTHER VERSION”Solution to write and read the nor of the console (teensy + + flasher or progskeet)
hxd program (which I use to edit hex)
FlowRebuilder v.4.1.3.2
A cold beer (this is important)
Downgrade.bin Http://pastebin.com/yuvJ5Leh
First we dump our NOR with a flasher, the file size must be “16,777,216 bytes” no byte more or a byte less, take several to be absolutely sure of what you do.
Get the dump “example jakemcallister.bin”
and we have to get it in flowrebuilder to make it readable,the option is called bytereverse and extract nor dump
we do it and we will have a file but the extension will be bin.REV
open it with the hxd and take out our personal data of the console EID, BOOTLOADER, CSID and METLDR ,no need to put more data
We get it with the following way:in this case we get our METLDR in our prepatched image for downgrade attached in this tutorial
inside the folder where flowrebuilder had placed our.rev also has created another folder called “nameofthedump.EXT”in there are our personal files of our console and we need to get some to place em inside the pre-patched image that i attached
Open the hxd and open downgrade.bin and the metldr file that is inside the folder asecure_loader, we pick the tab on the hxd metldr and copy all the HEX content to get in inside the downgrade.bin
press control + g and write “810″thats the position(offset) of the metldr right click on the first line of the position 810
And choose “paste writing” and in the same way we introduce the other ones
the files to get in are
METLDR: offset“810″ size “E960″
BOOTLOADER_0 Offset“FC0000″ size “40000″
EID: Offset “2F000″ size “10000″
CISD: Offset“3F000″ size “800″
then we take the downgrade.bin with the saved changes and we get in flowrebuilder with the option bytereverse and extract nor dump
This time the program will give us a error, but is a normal error, in fact is okay and will give us a file called downgrade.bin.REV
And thats the file you have to get in in the “flash” console
if all went well at writing ,turn on the console and you will see in the screen press the ps button or in English push ps button, DONT PRESS ANYTHING, turn off the console and put it in factory service mode, once done we need to put the correct file system for 3.55 lv2diag of jaicrab without reader and a special cfw
lv2diag:http://www.logic-sunrise.com/telecha...r-jaicrab.html
cfw: http://pastebin.com/03MFDLGV
turn on the console with the usbstick with these two files in the right usb port (in the last) of the console and it will shut down for 10 / 15 minutes, turn on the console without any usb connected to verify that you did it correctly it will take you to xmb,
If all went well turn off the console and put your lv2diag
FILE2 of this pack:
http://pastebin.com/gGETcxMR
the console will turn on for 20 seconds will turn off itself and CONGRATULATIONS you have your console in functional 100% and kmeaw cfw 3.55 100%
Thanks to
DiGiTaLAnGeL (Tester with progskeet)
Glevand & mfw builder team (cfw)
NDT (Assistant) is a very good person
JaiCraB (lv2diag without reader)
Robs1 (my guide with the nor flash)
EussNL (his great support in the wiki that I use every day PS3DEVWIKI.COM)
Defyboy (for creating ps3devwiki)
To the whole channel #darkps3 from irc-hispano.org for their support and many hours of testing we have hit hard mother****ers!
DemonHades (because if you had not post on your website the lie you said about me, I had not met DigitalAngel or uf6667and these two helped me a lot)
and finally to the people who asked me in private to place a donate paypal button
and here its
https://www.paypal.com/cgi-bin/websc...=QJN5EYNQJ6H62
greetings and from now on I will resume my work with the dual nand and that dump 3.6x that gives me so many problems hehehe
Ive updated the position of METLDR that was misplaced offset” 810 ” E960″size]
We need:
fat or slim console with nor updated to 3.70 “DO NOT TRY With ANOTHER VERSION”Solution to write and read the nor of the console (teensy + + flasher or progskeet)
hxd program (which I use to edit hex)
FlowRebuilder v.4.1.3.2
A cold beer (this is important)
Downgrade.bin Http://pastebin.com/yuvJ5Leh
First we dump our NOR with a flasher, the file size must be “16,777,216 bytes” no byte more or a byte less, take several to be absolutely sure of what you do.
Get the dump “example jakemcallister.bin”
and we have to get it in flowrebuilder to make it readable,the option is called bytereverse and extract nor dump
we do it and we will have a file but the extension will be bin.REV
open it with the hxd and take out our personal data of the console EID, BOOTLOADER, CSID and METLDR ,no need to put more data
We get it with the following way:in this case we get our METLDR in our prepatched image for downgrade attached in this tutorial
inside the folder where flowrebuilder had placed our.rev also has created another folder called “nameofthedump.EXT”in there are our personal files of our console and we need to get some to place em inside the pre-patched image that i attached
Open the hxd and open downgrade.bin and the metldr file that is inside the folder asecure_loader, we pick the tab on the hxd metldr and copy all the HEX content to get in inside the downgrade.bin
press control + g and write “810″thats the position(offset) of the metldr right click on the first line of the position 810
And choose “paste writing” and in the same way we introduce the other ones
the files to get in are
METLDR: offset“810″ size “E960″
BOOTLOADER_0 Offset“FC0000″ size “40000″
EID: Offset “2F000″ size “10000″
CISD: Offset“3F000″ size “800″
then we take the downgrade.bin with the saved changes and we get in flowrebuilder with the option bytereverse and extract nor dump
This time the program will give us a error, but is a normal error, in fact is okay and will give us a file called downgrade.bin.REV
And thats the file you have to get in in the “flash” console
if all went well at writing ,turn on the console and you will see in the screen press the ps button or in English push ps button, DONT PRESS ANYTHING, turn off the console and put it in factory service mode, once done we need to put the correct file system for 3.55 lv2diag of jaicrab without reader and a special cfw
lv2diag:http://www.logic-sunrise.com/telecha...r-jaicrab.html
cfw: http://pastebin.com/03MFDLGV
turn on the console with the usbstick with these two files in the right usb port (in the last) of the console and it will shut down for 10 / 15 minutes, turn on the console without any usb connected to verify that you did it correctly it will take you to xmb,
If all went well turn off the console and put your lv2diag
FILE2 of this pack:
http://pastebin.com/gGETcxMR
the console will turn on for 20 seconds will turn off itself and CONGRATULATIONS you have your console in functional 100% and kmeaw cfw 3.55 100%
Thanks to
DiGiTaLAnGeL (Tester with progskeet)
Glevand & mfw builder team (cfw)
NDT (Assistant) is a very good person
JaiCraB (lv2diag without reader)
Robs1 (my guide with the nor flash)
EussNL (his great support in the wiki that I use every day PS3DEVWIKI.COM)
Defyboy (for creating ps3devwiki)
To the whole channel #darkps3 from irc-hispano.org for their support and many hours of testing we have hit hard mother****ers!
DemonHades (because if you had not post on your website the lie you said about me, I had not met DigitalAngel or uf6667and these two helped me a lot)
and finally to the people who asked me in private to place a donate paypal button
and here its
https://www.paypal.com/cgi-bin/websc...=QJN5EYNQJ6H62
greetings and from now on I will resume my work with the dual nand and that dump 3.6x that gives me so many problems hehehe
Ive updated the position of METLDR that was misplaced offset” 810 ” E960″size]
Originally Posted by dospiedras1973;
We now have a correct and actual Spanish to English translation, thanks to mximposter. The above tutorial has been changed to represent both of these Major Updates.
Originally Posted by mximposter
Dospiedras has released an application to automate the modification of the downgrade.bin file, over on PS3Hax. Also, the guide has been updated again by PSX-SCENE member jaker89 aka Mximposter.
Originally Posted by dospiedras1973
Originally Posted by jaker89
@_DiGiTaLAnGeL_ has contacted me via twitter to let me know he has uploaded a video proof/tutorial to go along with this guide, using the ProgSkeet option.
MAJOR UPDATE - 5:
New method Downgrade v2 supports all NOR FLASH
Write a new method consisting of 6 patches, this time we will use to edit the dump hxd original of your PS3 (make backup)
steps:
first check if our standards Dump bytereversed, to start patching the original dump.bin file we must first ensure that the beginning of the flash at offset 200 is readable "IFI" if instead you see "FI.I "Your rules need to patch it bytereverse before (a and go back to him to put it in bytereverse the console to be read again" FI.I "when we patched the files and offset's a patch are these
patch1: OFFSET 0C0010
Patch2: OFFSET 7C0010
patch3: OFFSET 80000
patch4: OFFSET A0000
Patch5: OFFSET 40000
patch6: OFFSET 60000
easy, normal and cojemos the patch1 for example, copy content and paste it patch1 0C0010 writing and so the rest (the file size does not vary after the stripe)
the rest of the downgrade is the same as before, factory mode, and pup jaicrab lv2diag nochecks.pup of the previous release.
multiupload.com/ZJINMAKAEP
Dontate
steps:
first check if our standards Dump bytereversed, to start patching the original dump.bin file we must first ensure that the beginning of the flash at offset 200 is readable "IFI" if instead you see "FI.I "Your rules need to patch it bytereverse before (a and go back to him to put it in bytereverse the console to be read again" FI.I "when we patched the files and offset's a patch are these
patch1: OFFSET 0C0010
Patch2: OFFSET 7C0010
patch3: OFFSET 80000
patch4: OFFSET A0000
Patch5: OFFSET 40000
patch6: OFFSET 60000
easy, normal and cojemos the patch1 for example, copy content and paste it patch1 0C0010 writing and so the rest (the file size does not vary after the stripe)
the rest of the downgrade is the same as before, factory mode, and pup jaicrab lv2diag nochecks.pup of the previous release.
multiupload.com/ZJINMAKAEP
Dontate
Original Source: elotrolado.net
Update Sources: dospiedras1973@ps3hax (TWO) mximposter@ps3hax (THREE) dospiedras1973@ps3hax (FOUR) @_DiGiTaLAnGeL_ (FIVE) DarkConsoles
NAND or NOR? SKU Models
Daily Digest
Recent Threads
Recent Comments
vBulletin Message