Posted by PS3Hax Member News, on 20/08/2011, @ 06:05am
You don’t want to downgrade your PS3 on OFW 3.70 (you’ll loose all your data), but want to enjoy Homebrew and capabilities of Official Firmware 3.70 with one Console? Then this is the right tutorial for you. DiGiTaLAnGeL from Italy has managed to “fast-swap” between Custom Firmware (3.55) and Official Firmware (3.70) with the ProgSkeet Flasher and a second Harddrive.
English Version for international blogs, greetz from Italy -Google Translate sucks- (and my english too… sorry )
Today i’ll write a tutorial to “fast-swap” between CFW 3.55 and OFW 3.70, using 2 HDDs… at the end of the tutorial, you i’ll be able to swap between the firmware just flashing a dump on your PS3 using Progskeet. (instead of downgrading and loosing all data).
The first steps are not so easy, so take your time and go on, by the way, you must have some skill with Progskeet, and it must be 100% working on your console.
What we need:
PS3 Slim running with FW 3.70
2 Hard Disks
Progskeet installed and working on your PS3 Slim
Downgrade.bin edited with your personal data (there are tons of tutorials for do this)
3.55 Downgrade Dongle to do the downgrade process.
Lv2Diag “FILE 2″ to go out of Service/Factory Mode. (DOWNLOAD)
We need 2 HDD because the NOR flashes stores some parts of the current FW on the HDD… so we will need 2 HDDs, one is for 3.55, and one is for 3.70..
We will call those HDD “A” (for 3.70) and “B” (for 3.55) dont mix them up!
Starting with a PS3 Slim with OFW 3.70.
Plug in HDD “B”, format and prepare it if it’s required by the PS3 and you should have your 3.70 up and running.
DUMP your actual NOR and call it “original dump 3.70.bin”
Now flash your “downgrade.bin” (edited with the personal data found in “original dump 3.70.bin”)
Turn on your PS3 and be sure that the PS3 is asking you to press the PS button (downgrade.bin flashed correctly )
Insert a 3.55 Downgrade dongle and enter factory/service mode.
Copy Lv2Diag.self by Jaicrab and the 3.55 NO CHECK UPDATE renamed as “PS3UPDAT.PUP” in the root of your USB Stick.
Plug in the USB Stick in the most-right USB port of your PS3 and wait for it to turn OFF.
Leave the factory mode using the other Lv2Diag.self
After the reboot, you need to configure and set up your system… now you have a fully working 3.55 CFW based on KMEAW “NO CHECK”.
DUMP your actual NOR and call it “swap dump 3.55.bin”
Unplug HDD B and Plug in HDD A.
Turn on your PS3, plug in your USB Stick containing official 3.70 update and press start+select when asked.
When the PS3 reboots, check that the system is fully working and DUMP your actual NOR and call it “swap dump 3.70.bin”.
NOW IT’S OVER! You should have “swap dump 3.55.bin” and “swap dump 3.70.bin” … Now you just have to swap HDD and flash the corrispondent dump:
HDD A = swap dump 3.70.bin
HDD B = swap dump 3.55.bin
WARNING: Do not install other CFW than the “NO CHECK” one… because it’s used to make the “fast-swap” working… if you flash something different you will not be able to go between the 2 FWs. This CFW disable the Syscon checking at the startup… so it will not freeze or complain when the syscon says “3.70″ and your FW is 3.55
WARNING: In case you wanna update your console with a future “3.80″ or-so firmware. Do not update your console when you are running 3.55 firmware! You have to go to “swap dump 3.70.bin” and then update as usual (XMB or recovery)… -By the way, the downgrade is confirmed working only on 3.70… we haven’t tested it on other FWs, you could loose the possibility to go back to 3.55!-
Important updates to this article follow below. Spanish Developer dospiedras1973, has released his method to downgrade Slim PS3 Consoles on firmware 3.70, here is a roughly translated native spanish-to-english quote from the source:
Hello everyone, i finally got it, we have a downgrader for slims consoles , this time a bit different that i did with fat models, i made it by the two flashers, progskeet and teensy ++,dope
fat or slim console with nor updated to 3.70 “DO NOT TRY With ANOTHER VERSION”Solution to write and read the nor of the console ( flasher progskeet or teensy + +)
hxd program (which I use to edit hex)
a cold beer (this is important)
First we dump our NOR with a flasher, the file size must be “16,777,216 bytes” no byte more or a byte less, take several to be absolutely sure of what you do..get the dump “example jakemcallister.bin”and we have to get it in flowrebuilder to make it readable,the option is called bytereverse dump and extract
we do it and we will have a file but the extension will be bin.REV open it with the hxd and take out our personal data of the console EID, BOOTLOADER, CSID and METLDR
no need to put more data
We get it with the following way:in this case we get our METLDR in our prepatched image for downgrade attached in this tutorial
inside the folder where flowrebuilder had placed our.rev also has created another folder called “nameofthedump.EXT”in there are our personal files of our console and we need to get some to place em inside the pre-patched image that i attached
Open the hxd and open downgrade.bin and the metldr file that is inside the folder asecure_loader, we pick the tab on the hxd metldr and copy all the HEX content to get in inside the downgrade.bin
press control + g and write “820″thats the position of the metldr right click on the first line of the position 820
And choose “paste writing” and in the same way we introduce the other ones
the files to get in are
:METLDR: offset“810″ size “E960″
BOOTLOADER_0 Offset“FC0000″ size “40000″
EID: Offset “2F000″ size “10000″
CISD: Offset“3F000″ size “800″
then we take the downgrade.bin with the saved changes and we get in flowrebuilder with the option bytereverse dump and extract
This time the program will give us a error, but is a normal error, in fact is okay and will give us a file called downgrade.bin.REV
And thats the file you have to get in in the “flash” console
if all went well at writing ,turn on the console and you will see in the screen press the ps button or in English push ps button, DONT PRESS ANYTHING, turn off the console and put it in factory service mode, once done we need to put the correct file system for 3.55 lv2diag of jaicrab without reader and a special cfw
lv2diag:http://www.logic-sunrise.com/telecharge … icrab.html
cfw: http://pastebin.com/03MFDLGV turn onthe console with the usbstick with these two files in the right usb port (in the last) of the console and it will shut down for 10 / 15 minutes, turn on the console without any usb connected to verify that you did it correctly it will take you to xmb,
If all went well turn off the console and put your lv2diag
FILE2 of this pack:http://pastebin.com/gGETcxMR
the console will turn on for 20 seconds will turn off itself and CONGRATULATIONS you have your console in functional 100% and kmeaw cfw 3.55 100%
iGiTaLAnGeL (Tester with progskeet)
Glevand & mfw builder team (cfw)
NDT (Assistant) is a very good person
JaiCraB (lv2diag without reader)
Robs1 (my guide with the nor flash)
EussNL (his great support in the wiki that I use every day PS3DEVWIKI.COM)
Defyboy (for creating ps3devwiki)
To the whole channel darkps3 from irc-hispano.org for their support and many hours of testing we have hit hard mother****ers!
DemonHades (because if you had not post on your website with the lie you said about me, I had not met DigitalAngel or uf6667and these two helped me a lot)
and finally to the people who asked me in private to place a donate paypal button
greetings and from now on i will resume my work with the dual nand and that dump 3.6x that gives me so many problems hehehe
Ive updated the position of METLDR that was misplaced offset 810 ” e960″size