TUTORIAL LENGKAP cara downgrade manggunakan PROGSKEET [ NAND ]

Progskeet NAND Guide

tools needed

ProgSkeet 1.1


1a. JTAG Programmer called InJeCtuS (to update the bitstream if you’re using the Progskeet with a NAND solder less clip)

optional but recomended

1b."Y" Adaptor (NAND Adaptor PCB) 


1c. NAND 48 pin 360-clip (360-clip old type)
http://www.nh-game.com/goods.php?id=335


1d NAND 48 pin uni-clip (360-clip new type)


1e. buck transformer (variable voltage regulator) the following is a uk link but can be bought world wide. 
http://www.ebay.co.uk/itm/LM2596-Buc...-/121306382385

Downloading and installing

File Dropper
or
[url=http://www.filefactory.com/file/54fh8w24dga5/U.F.P.G. V4.60.exe]FileFactory[/url]
This will put all the needed files in the correct locations on your pc

1 Install the ProgSkeet’s drivers

Install the ProgSkeet’s drivers (called “winskeet”)


 
1. Install the ProgSkeet’s drivers (called “winskeet”):-



2. go to the "ProgSkeet NAND programs" folder and select extract here with WinZip



3. scroll to the bottom to find winskeet



4. right click and send to desktop
Plug in the Progskeet to the pc with the ps3's controller usb cable



5. the card will be detected and the install new hardware wizard will run. click not this time



6. click install from a list or specific location



7. un select (search removable media (floppy CD ROM....)) and select (Include this location in the search) then click (browse)



8. browse to (Local Disk c: ) > (ProgSkeet NAND programs) > (drivers_winusb_111121) 



9. installing



10. completed

2 Now the board needs testing for shorts.

Now the board needs testing for shorts. ( DO NOT do this with the board connected to anything but the pc.)

1. Run Winskeet from the desktop icon



2. Warning message



3. Opening screen



4. click Tools TAB



5. click Test for Shorts



6. No Shorts Found



7. if it’s not plugged in or no driver installed or you have a problem you will see this


8. now Close winskeet

Setting Up The ProgSkeet

Setting Up The ProgSkeet

wiring the injectus to the progskeet

injectus diagram from ps3devwiki
solder the pads on the injectus to the pads on the progskeet. the flat cable that comes with the injectus is not to be used.

installing the injectus usb driver

connect progskeet with usb to pc.
connect injectus with usb to pc.
found new hardware will open.


click (not this time) click (next)
screen will change to this


click (install from a list or specific location (Advanced))
click (next)
screen will change to this


un-click (Search removable media (floppy, CD-ROM...)
click (Include this location in the search.)
click ((browse) button)


goto (My Computer) > (Local Disk (c: )) > (ProgSkeet NAND programs) > (InfectusProgrammer-3.9.9.0) > (USB-Drivers3.1) > then click (ok)


then click (next)


it will install


you will get the warning just click (Continue anyway)


its done just click (finish)


you should get this bubble message.

updating the bitstreem

goto (My Computer) > (Local Disk (c: )) > (ProgSkeet NAND programs) > (InfectusProgrammer-3.9.9.0) and click (InfectusProgrammer_3.9.9.0)


the infectus program will start and you will get this message. just click (ok)


you will hear the "bing" sound of the injectus being disconected then reconected to the pc and then you will just have this screen.


close then re-start the injectus programer so it will detect the board


click (tools) > (Open Infectus)


this window will open "Actel Panel" click (Load DAT)


this window will open. NB it has a delay before opening so dont keep clicking it.


goto (My Computer) > (Local Disk (c: )) > (ProgSkeet NAND programs) > (ProgSkeet_Bitstreams_111126) > (DAT) and select the file (ProgSkeet_Retail_SL_NAND111126) then click (open)


you will be back at this screen (no changes to see)
click (Program)


it will check the dat file


then erase > write the bitstream to the progskeet


after a few min's it will finish. just click (ok) then close the 2 infectus windows and the progskeet is now ready for connecting the NAND clip(s)

NOW DESOLDER THE WIRES FROM INJECTUS TO PROGSKEET

Soldering the ProgSkeet

1. With the new Blue Boards (currently in production) there are 2 jumpers to create (bridge). The areas in YELLOW circles (R9 & R 11 the 3.3v setting) need soldering (bridge) (ignore the RED Circle) and donot remove R7 & R8.


2. it should look like this (ignore the RED line)

2. Attaching the ProgSkeet with the NAND clip

Attaching the ProgSkeet with the NAND clip

good tip from ps3hax member Dark_hades

this is the COK-001 board. i have marked which NAND is which take note which is which or print this image for reference

for COK-002 the CPU / GPU is the "BOTTOM" NAND
for SEM-001 the CPU / GPU is the "TOP" NAND


a close up of the clips in place
the clip in the blue circle will clip on no problem.
the clip in the red circle needs altering to sit flush.
the circle in red on both clips is a nipple on the clip marking pin 1 position. 
you will find the same on the NAND chips. 
just put the clip on the chip with the nipple in the same position


this NAND chip has 5 components too close for the clip to sit flush


a closeup of the NAND and components circled in red


the different types of cut needed (cut as in file very gently )


a different angle of the cuts


once done the clip will sit flush


conect the flat cables to the clip(s).

right now the progskeet can only read from the (A) side of the "Y" adaptor.
so you can only connect one clip at a time.

the one shown is the "TOP" "0 NAND chip"

you also need to conect the "3.3v" pad on the "Y" adaptor to the "3.3v" pad on the progskeet

this is done as we are not powering up the ps3 but using the progskeet to power the NAND chips

yes i still have the injectus connected to mine.

use good strong "quick clamps" to hold the clips in place

i have the mainboard sat on an angle on the ps3's base as it holds it just right with the clamps inplace

create your dump

create your dumps

Run winskeet
connect Progskeet to the pc via usb cable


you should be on the main screen so first select your NAND type



Mines the samsung 


select the NAND tab
you just want (NAND 1) ticked 
(NB both NAND 1 & NAND 2 are linked to the "A" connector on the "Y" adaptor)


click (AUTO) and the details of your NAND should be shown next to the (AUTO) button. if its not then check the clip is attached correctly.



click dump



this window will open asking where to save and what to call the dump.



create a new folder called dumps and go into that and call this dump dump 1 top then click (save)



Dumping (i found the TOP / NAND 0 takes 12 min to dump)



Complete dump. Click clear and then dump again (number your dumps i.e. dump 1 TOP , dump 2 TOP etc (repeat this 3 times)

un-plug the ProgSkeet and connect the clip to the other NAND.
this is the "bottom" "NAND 1" NAND

now re-connect the ProgSkeet to the pc



still in the NAND tab
you just want (NAND 1) ticked still
(remember both NAND 1 & NAND 2 are linked to the "A" connector on the "Y" adaptor) 
click (AUTO) and the details of your NAND should still be shown next to the (AUTO) button. if its not then check the clip is attached correctly.



click dump



the window will open asking where to save and what to call the dump again.
just select the dumps and go into that and call this dump dump 1 bottom then click (save)



Dumping (i found the bottom / NAND 1 takes 13 min to dump)



Complete dump. Click clear and then dump again (number your dumps i.e. dump 1 bottom , dump 2 bottom etc (repeat this 3 times)


Why does it give verification errors when writing or halt/freeze when dumping? 
Bad wiring 
30AWG (bad) instead of 26AWG (ok) for NOR 
Too long wires (>15cm) 
Bad PC / USB chipset, just try an old PC with Windows XP/Linux 
Bad USB cable 
Interference 
Bus not free / Halted incorrect 
Power drops 
Bad grounding

join your NAND flashes into one unified dump.

go to (local drive (c: )) > (ProgSkeet NAND programs) and run (FlowRebuilder v.4.2.2.0)


Select (UNSCRAMBLE then interleave two NAND flashes into one unified dump.)


click button next to (Select the NANDbackup "Flash0"(TOP) file.) and the above window will open.
goto (local drive (c: )) > (ProgSkeet NAND programs) > (Winskeet111205) > (dumps) and select (dump 1 top)



click button next to (Select the NANDbackup "Flash1"(BOTTOM) file.) and the above window will open.
goto (local drive (c: )) > (ProgSkeet NAND programs) > (Winskeet111205) > (dumps) and select (dump 1 bottom)



under (Select the OUTPUT (interleaved) file.) type (C:\ProgSkeet NAND programs\Winskeet111205\dumps\extracted\dump 1)

then click execute program



dump extraction complete. It will put the extracted files into (C:\ProgSkeet NAND programs\Winskeet111205\dumps\extracted\dump 1)

now do the same with the other 2 top & bottom NAND dumps (changing the destination from (dump 1) to (dump 2) then (dump 3)


now goto (local disk (C: )) > (ProgSkeet NAND programs) > (Winskeet111205) > (dumps) > (extracted) and you should see the same as above



You should now have these files in each folder
If any are missing try extracting again. if you still dont then you will have to re-dump and check the clips are on tight

verify the dumps

Check your dump with BwE_NAND_Validator NOT RELEASED YET

Check your dump with Swizzy's PS3DumpChecker

open Swizzy's PS3DumpChecker

image 1
Click on PS3DumpChecker

image 2
This Program will Open

image 3
Click "Check Image"

image 4
direct it to the dump and click the dump to open it

image 5
you will be back at the tool. just wait it's running the tests

image 6
you will get one of these pop ups. 
it will say bad / good etc as shown
click ok

image 7
back to the main tool.
it will say good or bad at the bottom
and in the left list if its green its passed the tests if its red it failed.

image 8
click on any listed item to read a description in the "Advanced view" windows

image 9 
you can now close this tool

if you recived a bad dump then re-dump and start again.
if you recived a good dump then carry on to the next strep

How to use HxD editor and some example checks

In the progskeet NAND programs folder find the HxD (hex editor) (install it like you did with Progskeet) and then run it. 


first time opening



click file click open



select all your dumps then select compare



leave the top as it is and change the bottom as you check each dump.



you should see this message after each dump has been checked. If you don’t delete all your dumps check your clips are on ok then dump again.
When there all the same just have 1 dump open (we will use this all the time now) 



get a statistics. 



The fine blue bars at either side are what need checking (the one to the left is highlighted in red put your mouse on the left line and you should get a reading between 1.43% - 2.68% (in the area circled in blue) and the line on the right should be between 18.25% - 24.54%
Now close the statistics tab



The first thing you should see at offset 00040010 is FACEOFF , DEADBEEF 



if you see AC OF FF EO , AD DE EF BE then your dump’s need byte reversing if you don’t see either then you have a bad dump. Re-do all your wiring and start again (the above is from a NOR dump its used here as an example)


If you did see the above then you need to use flowrebuilder with the byte reverse option if it says (DEAD BEEF) then you can skip this step

Byte reverse

First find the IDPS/TARGET ID & METLDR and then BOOTLDR (were still using the hex editor)
The area to find these depends on your ps3 model


IDPS/TARGET ID is at 00080877 (scroll down to 00080870 then the top row of numbers is your last digit)

CECHAxx (COK-001 boards) it should have the value 01 or 03 or 04

CECHBxx (COK-001 boards) it should have the value 01 or 02

CECHCxx (COK-002 boards) it should have the value 03

CECHExx (COK-002 boards) it should have the value 01 or 04

CECHGxx (SEM-001 boards) it should have the value 05 or 06

DECHAxx (COK-001 boards) it should have the value 01 or 02



METLDR is at 0004081E & 00040842

CECHAxx (COK-001 boards) it should have the value EE 10 at 0004081E & 0E DD at 00040842 or ED EO at 0004081E & 0E DA at 00040842

CECHBxx (COK-001 boards) it should have the value ED A0 at 0004081E & 0E D6 at 00040842

CECHCxx (COK-002 boards) it should have the value EB F0 at 0004081E & 0E BB at 00040842 or ED EO at 0004081E & 0E DA at 00040842

CECHExx (COK-002 boards) it should have the value EE 10 at 0004081E & 0E DD at 00040842 

CECHGxx (SEM-001 boards) it should have the value E7 B0 at 0004081E & 0E 77 at 00040842 or E8 C0 at 0004081E & 0E 88 at 00040842 or E8 C0 at 0004081E & 0E 88 at 00040842

DECHAxx (COK-001 boards) it should have the value ED A0 at 0004081E & 0E D6 at 00040842 



BOOTLDR is at 00000002 & 00000012

CECHAxx (COK-001 boards) it should have the value 2A 3F at 00000002 & 2A 3F at 00000012 or 2A 37 at 00000002 & 2A 37 at 00000012

CECHBxx (COK-001 boards) it should have the value 2A 2A at 00000002 & 2A 2A at 00000012

CECHCxx (COK-002 boards) it should have the value 30 44 at 00000002 & 30 44 at 00000012 or 2A 37 at 00000002 & 2A 37 at 00000012

CECHExx (COK-002 boards) it should have the value 2A 3F at 00000002 & 2A 3F at 00000012 

CECHGxx (SEM-001 boards) it should have the value 2E 8C at 00000002 & 2E 8C at 00000012 or 2F 1C at 00000002 & 2F 1C at 00000012 or 2E F4 at 00000002 & 2E F4 at 00000012

DECHAxx (COK-001 boards) it should have the value 2A 2A at 00000002 & 2A 2A at 00000012

Ok now we need to take a look and check there are no malformed headers / file names / region names. This is what we are looking for:-

Correct............................Malformed..............................location
asecure_loader...............asecure_loaher......................00040220
eEID................................eIIH........................................00040250
cISD.................................cESH.......................................00040280
cCSD................................cCSH.......................................000402B0
trvk_prg...........................trvg_prk..................................000402E0
trvk_pkg...........................trvg_prk..................................00040310
creserved_0.....................?????????...............................00040340
ros..................................??????????...............................00040370
cvtrm...............................cztrm........................................000403A0
metldr..............................mitldr........................................00040820

Now find the same positions as shown in blue in the following pictures yours should match



ASECURE LOADER (00040800)



eEID (00080800)



cISD (00090800)



cCSD (00091000)


Look for SCE on the line below the blue in the following pictures



trvk_prg (00091800)



trvk_pkg (00093800)


Make sure all the words below the blue in the following pictures match yours



ros0 (000C0020)



ros1 (007C0010)

Make sure the following in blue matches


bootldr (00000000)



now go to the ps3devwiki's validating flash dumps pages and do the checks there
MAIN VALIDATE PAGE
DISCUSSION PAGE WITH MORE CHECKS

Once it all checks out ok upload your dump NOT the file you just created. to a file share site copy the link and CLICK HERE and follow the instructions on that thread.
Once it comes back ok it’s time to patch it (don’t forget to thank the person or persons who checked it for you)

Patching the dump

Patching the dump



Open flow rebuilder and select “PATCH a Byte reversed NOR dump or an interleaved and unscrambled NAND dump”.



Select your NAND dump (the merged one that was created from the 2 you just had checked)
& Select the patch file (progskeet_patch.txt) from (C:\ProgSkeet NAND programs\NAND downgrade\progskeet_patch.txt)

then Click (execute) 



completed it will put the patched dump in the same folder as your original dump with ".patch.bin" at the end of its file name (you won’t see the word ".bin" at the end)

split the NAND dump back into 2 dumps

open FlowRebuilder and select (RE-SCRAMBLE a modified dump then de-interleave it into two new flashes.)



click the button next to (select the input NAND interleaved_modified file: )
and select your patched dump



in the box under (select the NAND backup "Flash 0 (TOP) file) select your origonal (dump 1 TOP.bin) file


in the box under (select the NAND backup "Flash 1 (BOTTOM) file) select your origonal (dump 1 BOTTOM.bin) file

then click (execute)



compleated. the new dump files are in the same location as the origonals
with "new" added to the file names:-
dump 1 TOP.bin.new.bin 
dump 1 BOTTOM.bin.new.bin

close FlowRebuilder

Flashing the ps3

Flashing the ps3

connect the progskeet to the "TOP" NAND 0 and then connect the progskeet to the pc



Open winskeet & select your NAND



click the NAND tab and click (AUTO) this will insure your clip is sat right on the chip



click the “flash” tab & select (dump 1 TOP.bin.new.bin)



it will read



flash



verify it takes 19 min's all together


Repeat the steps until you get the message "nothing to flash"


now disconnect the progskeet from the pc

then connect the progskeet to the "BOTTOM" NAND 1 and then connect the progskeet back to the pc



still in the NAND tab 
click (clear) then (AUTO) again this will insure your clip is sat right on the chip



click the “flash” tab & select (dump 1 BOTTOM.bin.new.bin)



it will read



flash



verify it takes 19 min's all together


Repeat the steps until you get the message "nothing to flash"


Now unplug the Progskeet from pc and disconnect the clip(s) from the ps3
now build your ps3 back together

Follow these steps if you patched for 3.55

Finishing the down grade in service mode

Finishing the down grade in service mode

make sure you have re-inserted the hdd then connect the ps3 to a TV the usual way



turn on your ps3 and you should have this on screen. you may also get a blank screen. acting like the tristate is still set to ground. This is common with phat ps3's and isnt a problem at this stage.

Turn the ps3 back off insert your dev usb board (programmed with the correct files) into the right usb slot.

a full list of boards are listed at the start of the main post in the second tab down called 
"Wrong you need these tools before you even think about following a guide"
inside that tab you will see the second tab down called "A development board" in there is lists of the different dev boards.


Unplug the ps3 from the mains. Wait 10 - 15 seconds then plug it back in.
(the wiki says its to discharge the capacitors but as the ps3 is not turned on the capacitors will take many months to discharge.)

Turn the ps3 back on then immediately press eject within ~200ms. Your console will turn on and if your dev usb has led's then the dongle will light up the red LED followed by the green LED and turn back off. 
if you had the black screen above and the fsm (dev board) has led's and they dont light up then see if you have hdd led activity. if you do then keep trying these steps as youe timing may not be quite right. if still nothing then reply to this thread for help.



After triggering Factory Service Mode, go to (local disk c: )) > (progskeet NAND programs) > (get into fsm) put the contents of that folder into your usb stick and plug it in the PS3's right most USB port (remove the dev usb & put your usb memory stick in its place) REPLACE YOUR HDD (the files are rogero cfw v3.2 and the normal Lv2diag.self (365.5 KB) 3.55 get in FSM )

Turn PS3 on, it will install the firmware you had put there (even though you have no screen output, you can see it is busy by looking at the activity led of the hard drive and of your USB Mass Storage Device). 

if you get the flashing green power light then this is due to the firmware not installing. first check your hdd is plugged in properly. this is usually the problem. if it still flashes remove your usb stick put it in your pc and you will see “UPDATER_LOG” as a notepad file upload this to a file share site copy the link and CLICK HERE to enter the chat room. create your nic name press enter then click the green word "#ps3downgrade" to enter the correct room.
paste your link with “can someone please check my updater log. I have followed the guide here (this guide) I cannot get rogero cfw to install in service mode.


PS3 will turn itself back off when it has finished installing the f/w (Nb this does take a while. 
So go make a cuppa or have a cig).



Now remove your usb stick put it in your pc and you will see “UPDATER_LOG” as a notepad file open it & look through it to see if it contains errors (if it does upload the log to the guide) (it should say at the bottom “0x83manufacturing updating SUCCESS(0x8002f000)”)

Now you need to get the ps3 out of service mode.



go to (local disk c: )) > (progskeet NAND programs) > (get out of fsm) put the contents of that folder into your usb stick and plug it in the PS3's right most USB port it will boot then the hdd light will flash then turn off. Remove the usb stick. (the file is Lv2diag.self (201.42 KB) get out FSM) 



turn on your ps3 and it should now boot to this screen follow the on screen instructions
nb the firmware you now have is rogero3.55 spoofed to 4.11 (for whoever decides not to follow my instructions and decides to go looking at system infomation) 

De-hashing

Now to DeHash the console so it is brick protected when / if you decide to upgrade the firmware

THIS IS THE RECOMENDED WAY

QA flag method

what is QA de-hash

What Dehashing basically does is it resets the PS3′s Syscon hashes back to 3.55 with both “ros0” and “ros1”, making your PS3 back into an original/non-downgraded state and you do not need to worry about disabling LV1 checks when you install any CEX/DEX or the latest PS3 Official Firmware.


Install and run QA-toggle and make sure it beeps 
if you just get a blank screen and nothing happens then you have a faulty bdvd and you cannot do this step. try re-marry bdvd found in the main post then try this step again.

to check you are QA flagged Set your cursor on Network Settings and press the key combo (all at the same time):L1 + L2 + L3 (press left stick) + R1 + R2 + dpad_down
if you are QA flagged a new option will show up right below network settings

Power off console 
Put unpatched official firmware (e.g. 3.55) on USB Mass Storage device as /PS3/UPDATE/PS3UPDAT.PUP and insert in PS3 

Boot into Recovery Menu:
press and hold power button you get 1 beep then a wait then a second beep then the ps3 turns off 
press and hold power button again you get 1 beep then 2 beeps let go of power button 
select "6. System Update" to reinstall firmware. 
If installation finishes without error (there will be no logs you can check!) and boots XMB OK, then dehashing was successful. 
Congrats, you now finished downgrading and dehashing. Console runs 3.55 and any firmware of choice can be installed, no longer needing to be patched for downgrader.


DO NOT DO THE SERVICE MODE WAY AS I AND OTHERS GET RLOD EVERYTIME IT IS DONE

Now you should be on 3.55ofw 

You can now install the 3.55cfw of your choice

9. Follow these steps if you patched for going direct to the latest cfw

re-insert the hdd then connect the ps3 to a TV the usual way
turn on your ps3 and it should boot into the xmb as normal

If you were on a lower firmware than the patch 
Ie
You were on 4.41 and you used 4.46 patches

Then when you turn the console back on your going to get either a black screen or it will shut off after 5 seconds
It's normal
You simply enter recovery
Hold power beep - dubble beep turns off
Hold power beep - dubble beep let go of power
Select option 6.

open the cfw folder
select the CFW version that you want
then copy the containing "PS3" folder to a fat32 formatted Mass Storage Device

plug in the Mass Storage Device into usb 0 (closest to drive / furthest right)
install the update from xmb under "update" "install fron Mass Storage Device" insure you have no disc in the blueray drive.

once done and the ps3 has booted back to xmb.
turn off the ps3 and enter "recovery menu" hold power button. ps3 turns on & beeps......keep holding power button.......short wait......beeps again & turns off.
release and re-press & hold power button. ps3 turns on & beeps.....keep holding power button.....short wait......ps3 double beeps...let go of power button.

select option 6

once done it will re-boot to xmb.