Chapter III: NOR Downgrade - Teensy Flasher

3absiso

Member
Chapter III: NOR Downgrade​
TEENSY++2.0

As mentioned before there are NAND and NOR PS3 to be downgraded, this Chapter will be dedicated for NOR PS3s and will be divided into three sections, each section for each Flasher, the first would be for Teensy++2.0 since it can be considered the best choice for downgrade, the second Part will be E3 Flasher, and the last one would be Progskeet V1.1, although Progskeet V1.1 is my preferred choice of downgrade, but it is now very rare to find for the previous mentioned reasons in Chapter II.

NOR Downgrade can be divided into the following Stages:
Stage01: Preparing the Flasher.
Stage02: Dump the NOR File.
Stage03: Verify the NOR File (it will be its own Chapter "Chapter V").
Stage04: Patch the NOR File (it will be its own Chapter "Chapter VI").
Stage05: Flash the NOR File.
Stage06: Finishing the Downgrade (it will be its own Chapter "Chapter VII").

Stage03 which is Verifying the Dump is considered the most critical and important stage in the Downgrade Process and it will have its own chapter (Chapter V).
This section will show you the necessary steps to be carried in order to finish the downgrade Using Teensy++2.0 Flasher:
1) Preparing the Flasher:
First thing is to install the necessary files and drivers for Teensy++2.0 flasher, thanks to "Coolshrimp" the creator of "Jtag Tool" has made a simple program called "Downgrade Tool V1.03" that contains all the files and drivers needed.
Run the Program located in (Chapter III/TEENSY++2.0) (or Search for it for Now) and install it on your windows, I only tested it on WinXP and Win7, so do not know the compatibility with Win8.
97e2nB1.png


Run the Program as Administrator, Go to settings as in Photo01, and start by installing Python first and wait till you finish, then install pySerial, and finally install Teensy++2.0 Driver. After installing the Driver Connect the Teensy via USB to the computer and wait till the computer recognize it (It may take some time in the first time). After Teensy being recognized by the computer Hit (Show Device Manager) Button. A new Window will appear (Photo#2: Device Manager), go to Ports and see what is the Port Number for Teensy, mine is COM9 (The new port appears only when the teensy is connected). Go back again to Setting in Photo01 and select COM Port.

Photo01: Downgrade Tool Setting Window​
oswg0mO.jpg

Photo02: Windows Device Manager​
I8vwSGN.png

After this is done, Disconnect Teensy from the Computer, Now we need to program it with the right Hex File and since we are doing the Nor Downgrade hit the Button (Flash for NOR) (Number 5 in Photo01), if we are doing the NAND Downgrade we need to hit (Flash For NAND) button.
A message box will appear (as in Photo03) instructing you to connect your Teensy, Do so and press the little black button on it (Photo04) and Hit OK, Now Your Teensy is programmed and ready.

Photo03: Teensy HeX Flash message Box​
0655taR.png

Photo04: Teensy Reset Button​
ZjBEmA5.jpg

To make your work easier it is suggested to solder Pins to the Teensy as in Photo05 rather than do direct wiring to Teensy, in this way it is clean and effective. So buy some Male/Female Pins when you buy your Teensy.
Photo05: Teensy++2.0 Male/Female Pins​
n1qmDi5.jpg

Also some modification needs to be done to Teensy regarding Powering Options, see Photo06, and cut the 5V Trace with a sharp knife and bridge 3V Pads. And connect the 3.3Volt Regulator, so not forget to buy this regulator with your Teensy.
Photo06: Teensy Voltage Regulator​
zVZ1pVM.jpg

Now Your Teensy is 100% ready to do some Downgrades.

2) Preparing the PS3:
Now it is time to open The PS3 in Hand, till you Reach the Motherboard clean it from dust and apply new thermal Paste, and put it back in its metal case as in Photo07 and connect the Power Brick.
Photo07: PS3 in Upper Metal Case​
xEBCI08.jpg

From the other side note Your PS3 Motherboard Model and screw the PS3 using peace of Cartoon as protection as in Photo08, as you can see the motherboard Model in the photo is: JTP-001. These are the Nor Motherboards Revisions:

- FAT PS3: VER-001
- FAT PS3: DIA-001 and DIA-002
- SLIM PS3: DYN-001
- SLIM PS3: SUR-001, JSD-001, and JTP-001
Photo08: PS3 Motherboard Preparation​
j6NVZEp.jpg

Open PS3 Downgrade Tool and go to Images as in Photo09 and select your motherboard Diagram (These Diagrams are done by Baileyscream). Now it is time to solder your Teensy to the motherboard. Photo10 shows Teensy hooked up to the motherboard. Please note only one GND point is needed, and 5V point on Teensy is not used.
Photo09: Downgrade Tool Images Tab​
ciiPhy1.png

Photo10: Teensy++2.0 on PS3 Motherboard​
zts5MTh.jpg

3)Dumping the Nor:
Connect the PS3 to the power and connect the eject/power Board as in Photo11:
Photo11: Connecting PS3 to Power​
ESdbpII.jpg

Power the PS3, wait for 10 seconds then connect the Teensy++2.0 Flasher to the computer Via USB, if you did not wait enough, the PS3 may shut off immediately, if this happens, repeat this step till you get the PS3 running and Teensy is hooked up on the computer.
Run Downgrade Tool again and go to setting and make sure the right Port COM is selected, in Photo12, Go to NAND Tab (1), From NAND Type Select: NOR (2) and from Write Mode Select: Write (3). Now Click: Check Connection (4), sometimes the program will crash at this point if this happened repeat the steps again. Once you Click "Check Connection" anew DOS page will open (Photo13), showing Nor Chip Manufacturer and Type as in the next image, if the DOS Window gives unknown chip, then make sure the PS3 is still powered on, if it is on and still gives Unknown Chip, then check your wiring.
Photo12: PS3 Downgrade Tool NAND TAB for Reading​
EDMqjFE.jpg

Photo13: Nor Chip Type​
6wvouCR.jpg

If everything is OK and you got the right Chip Data, Click on Read NAND (5) in Photo12, a DOS Window will show the process of reading the NOR as in Photo14:
Photo14: Teensy NOR Reading​
IjeOBn5.jpg

Wait till reading is finished and save the Dump and repeat the Reading Process at least 3 times to make sure we get identical NORs with every Read (Photo15) do not mind the CFI Files.
Photo15: NOR Reading​
qhqxJsj.png

Downgrade Tool Program compares the Dumps automatically as in Photo16; you can also chose the Dumps manually if you want to compare other Dumps:
Photo16: NOR Comparing​
p7HVOMy.jpg
If the dumps do not match, check your Wiring. If they match then you are on the right track, (Keep Your Dumps safe, Zip it and pack it up if necessary). So now dumping Stage is done.

4)Verifying the Nor:
Go to Chapter V, Verifying the Dump is the most critical and dangerous stage in the Downgrade Process, so do not proceed with the downgrade until you are 100% sure your Dump is Valid

5)Patching the Nor:
Go to Chapter VI to Patch Your Dump after you have been verified it.

6)Flashing the Nor:
After your Dump has been verified and Patched with the selected Patch, it is time to flash back the Patched dump to the PS3 (Photo17 shows the patched Dump)
Photo17: Patched Dump​
Qngl6Hj.png


Now Power the PS3 again, wait for 10 seconds then connect the Teensy++2.0 Flasher to the computer Via USB.
Run Downgrade Tool again and go to setting and make sure the right Port COM is selected again, as in Photo18, Go to NAND Tab (1), From NAND Type Select: NOR (2) and from Write Mode Select: Write (3). Now Click: Check Connection (4) Make sure the Dos Window shows Nor Chip Manufacturer.
Click on Write To NAND (5), a DOS Window will show the process of Writing the Nor and after writing Verifying (Photo19), if verifying went Fine you can power off the PS3 and remove the Teensy, we are done with the flasher.
If there is an issue with the verify stage, repeat the process, if the problem still exist, check your Wiring.
Photo18: PS3 Downgrade Tool NAND TAB For Writing​
EDMqjFE.jpg

Photo19: NOR Writing and Verifying​
IfJEbaa.png

After this is done fine, you can remove the Teensy++2.0 from the PS3 and clean the area from solder and flux. It is time now to reassemble the PS3. But before doing so, it is recommended before removing the flasher wires is to check if everything went fine, by connecting the Hard Disk into the PS3 and turn on the PS3 on TV, the PS3 will give a connect controller Screen (Photo20) or the PS3 will boot fine to the XMB (This depends on the patch you Used, to be discussed in Chapter VI)

Photo20: Connect Controller Screen​
zXYsPI8.jpg

Off course do not connect anything to PS3, just power off the PS3 and Disconnect everything now and reassemble the PS3, and let us move to Finish the downgrade process, Hardware stage is done now and it is now Software and installing CFW.

7)Finishing the Downgrade
Go to Chapter VII to Finish up your Downgrade

Wait for Other Chapters​
 
very nice, you have very extensive and thorough guides. thanks for taking the time to write all this out for everyone!
 
Nor socket to teensy offboard wiring diagram needed. I had it set years ago and tried to read the chip recently but got unkown chip (0x909090) need to reconnect but can't find the pinouts .
 
This is a very old thread. Create a new one if you need help.
You can find the Teensy wiring diagrams on the wiki.
http://www.psdevwiki.com/ps3/Teensy++_2.0
When rebuilding the page i prepared sections for the NAND and NOR sockets but never was filled with info
Now im looking at it, and it seems there is a note about connecting a couple of pins to vcc

I cant tell exactly how is made, but the overall concept needed to get is the components that needs to be added around the socket are trying to mimick the components that exists around the flash in the motherboard

It was 2 resistors and 1 capacitor
The resistors i guess goes in the pins noted in wiki as "pullups" (connected to volts line), to keep that control pins of the flash in a stable state with a logic 1
And the capacitor goes the most closer posible to the flash pin for main power... it works a bit like a buffer to hold some electricity inside and keep main flash power stable
 
When rebuilding the page i prepared sections for the NAND and NOR sockets but never was filled with info
Now im looking at it, and it seems there is a note about connecting a couple of pins to vcc

I cant tell exactly how is made, but the overall concept needed to get is the components that needs to be added around the socket are trying to mimick the components that exists around the flash in the motherboard

It was 2 resistors and 1 capacitor
The resistors i guess goes in the pins noted in wiki as "pullups" (connected to volts line), to keep that control pins of the flash in a stable state with a logic 1
And the capacitor goes the most closer posible to the flash pin for main power... it works a bit like a buffer to hold some electricity inside and keep main flash power stable
Oh dear, you are right, my mistake. I only notice now that the user was talking about offboard socket wiring & the wiki has no diagram for it.

Maybe this data can help shed some light on the matter?
https://github.com/Zeigren/NORwegianTeensy/wiki/NORwegian-Teensy-Socket-Edition
 
Last edited:
Oh dear, you are right, my mistake. I only notice now that the user was talking about offboard socket wiring & the wiki has no diagram for it.

Maybe this data can help shed some light on the matter?
https://github.com/Zeigren/NORwegianTeensy/wiki/NORwegian-Teensy-Socket-Edition
Yes, good idea, that boards should be doing the same :)
I remember to see other boards that had jumpers to configure them, that jumpers could be connected to the flash control pins too

@Kiwikev if you find a straightforward and simplistic schematic post it here, or paint the schematic with pen and paper and take a photo of it, so i can "re-draw it" to upload to wiki
 
In general forum go have started a thread called "help!" Basically my situation is I got a hold of a cecha01 which had 1.8 ofw on it . Went to upgrade to 3.55 so I could remarry BD drive. During the fw install process I got an update boot loop corrupt files. Looked on YouTube. Turned off ps3 and formatted hd. But I think I turned off ps3 during installing and went to turn on. Big fat nothing . Light is green, fan turns on for a second , no light on hdd, shuts off after 10 seconds. Any ideas?
 
That's really bad.
The recovery mode has been added in 2.5. Don't known that before.

Can't imagine sony has no service modes before 2.5.
Worst case -> hardware flasher. I think.

Greets.
 
Never had problems with updates. If while updating something goes wrong, i think there was something wrong before...

Greets.
 
I use always usb update.
Think positive, you've learned many things. Hope you will fix it with a hardware flasher.

Greets.
 
I know this thread is old but i didn't want to make a new one. :)
I recently got for free a PS3 slim with broken BD. i wanted to update it but it stuck in a updateloop.
Anyways i soldered a teensy++ 2.0 on it but i have hard time to make windows recognize it.
I tested it in both win7 and win10.
First of all the Downgrade Tool (PS3) v1.03 Setup gives me this error
Screenshot_1.png

but i can find the folder with the files (except the python msi)

Screenshot_2.png

I downloaded the latest python but at the end it gave me scripts errors so i went for the python-2.7.18.

after this i installed pySerial and after this i tried to install the teensy++ 2.0 drivers on windows 10 but i get this
Screenshot_3.png

in windows 7 i managed to install it without any problem.

Now my problem with both OS is that they detect teensy as HID device and not as a USB serial device.
Any idea ?

EDIT: I got it working, i forgot to flash the teensy with the hex file :sang banghead::sang banghead::sang banghead:
 
Last edited:
Sorry to bump an old thread, but had trouble finding the tool, but I found the direct link to the Downgrade Tool on coolshrimps website from another forum:
Code:
http://coolshrimpmodz.com/HostedFiles/DowngradeTool/Downgrade%20Tool%20(PS3)%20v1.03%20Setup.exe

Setting this up on a Windows 7 machine I had the same trouble as nickxab installing the tool, it kept giving the python 11FD error. I let it finish installing and found the program folder in "C:/Program Files (x86)/", python.msi is missing but I downloaded python-2.7.msi hosted on the python.org website:
Code:
https://www.python.org/download/releases/2.7/

When opening the tool for first time it came up with a missing .NET framework, I found link to download this on Microsofts website:
Code:
https://www.microsoft.com/en-us/download/details.aspx?id=17718

Now just waiting for delivery of a teensy from eBay
 
Back
Top