sounds pretty easy to me:
1- Dump flash with preloader (that would be Backuprflash.bin)
2- Patch with no checks
3- Flash with preloader (that would be rflash.bin on the port closest to the reader)
After that, just follow the normal fsm way to flash 3.55 Rogero No Checks No BD PUP
edit: just make sure you don't use the same Lv2Diag to flash the 3.55 pup, and remove the cfg from the usb disk you're using. just preventing
"Whoever has ears, let them hear."