Talk:E3: Difference between revisions

From PS3 Developer wiki
Jump to navigation Jump to search
mNo edit summary
(Replaced imgur links)
 
(101 intermediate revisions by 11 users not shown)
Line 1: Line 1:
== E3 Nor dump checker ==
=== note on Clip rework ===
[http://www.multiupload.com/RV3PN9GVTA E3 Nor Dump Checker V1.0.exe (521.7 KB)] <br />
* Fat PS3 only: refit the Nor Clip by smoothing it down with a little screwdriver / sandpaper
Article: http://www.ps3hax.net/2011/11/released-e3-nor-dump-checker-v1-0-released-tested/
: on slim models [[CECH-20xx]]/[[Motherboard_Revisions#DYN-001|DYN-001]], [[CECH-21xx]]/[[Motherboard_Revisions#SUR-001|SUR-001]], [[CECH-25xx]]/[[Motherboard_Revisions#JTP-001|JTP-001]] & [[Motherboard_Revisions#JSD-001|JSD-001]], [[CECH-30xx]]/[[Motherboard_Revisions#KTE-001|KTE-001]] the SMD filter condensator(s) on VCC line and pullup resistor(s) on RY/BY line are not uncomfortably in the way demanding clip-remodelling.


=== Quick bulletproof test ===
http://s165.photobucket.com/user/playerkp420/media/IMAG0298.jpg.html <br />
http://s165.photobucket.com/user/playerkp420/media/IMAG0299.jpg.html <br />
http://s165.photobucket.com/user/playerkp420/media/IMAG0300.jpg.html <br />
http://s165.photobucket.com/user/playerkp420/media/IMAG0301.jpg.html <br />


does not test:
'''This page needs clean up and sections ready for release moved to main page.'''
* bootldr (corrupted binary not detected)
* metldr (corrupted binary not detected)
* bootldr size (both under- and oversize not detected)
* metldr size (both under- and oversize not detected)
* cISD (didn't catch brick-byte error)
* cCSD (didn't catch brick-byte error)
* trvk_prg0 (didn't catch brick-byte error)
* trvk_prg1 (didn't catch brick-byte error)
* trvk_pkg0 (didn't catch brick-byte error)
* trvk_pkg1 (didn't catch brick-byte error)
* eEID (didn't catch brick-byte error)
* cvtrm (didn't catch brick-byte error)
* CELL_EXTNOR_AREA (didn't catch brick-byte error)


partly test:
----
* ROS0 (but didn't catch brick-byte error)
* ROS1 (but didn't catch brick-byte error)


does test:
===E3 Flasher Switches Explained===
* headerprefix ("00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00")
* header ("00 00 00 00 AC 0F FF E0 00 00 00 00 AD DE EF BE")
* header ("FI.I")
* headersuffix "(FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF")
* filetable ("saceru_eoldare.." etc.)


Conclusion : '''USELESS''', brickdumps will still show as 'valid'. <br />
switch 1. only works if the NOR Tristate wire has been soldered, this is used for brick recovery. up = on / down = off and must be selected while the console is off.<br />
Recommendation: use Flowrebuilder instead and common sense like mentioned on [[Hardware_flashing#Generic_Warning|Hardware flashing]] page.
switch 2. is used for dual booting and only works if the dual boot wire has been soldered to SBCE. up = e3 nor chip / down = ps3 nor chip.<br />
switch 3. sets the e3 flasher into read or write mode. up = read from selected nor chip / down = write to selected nor chip.<br />
switch 4. selects whether to read from the microSD card or nor chip on the e3 flasher. up = read from nor chip on e3 flasher / down = read from microSD card.<br />
switch 5. used to select which chip the flasher should read or write to. up = chip onboard the e3 flasher / down = chip on ps3.<br />
switch 6. is lock or unlock? i have no idea what this actually does. i just leave it in the down position. which seems to work!<br />


==== Added 22 nov 2011 ====
{| class="wikitable sortable"
  ''New E3 flasher update released, it will backup bios 3 times automatically.
|-
  We suggest user verify those bios with E3 Nor dump checker, to assure the backup bios is no erro.''
! FLASH FUN <br /> PS3 MODE !! CFW <br /> OFW  !! BACKUP <br /> PROGRAM  !! OB FLASH <br /> MICRO SD  !! OB FLASH <br /> PS3 FLASH  !! UNLOCK <br /> LOCK !! EXPLANATION
Conclusion: Anyone with a flasher (should) know that you can dump it 1 to 1000's times the same bad. Comparing CRC/MD5/SHA1 is not any secure way to validate flash (as mentioned on [[Hardware_flashing#Generic_Warning|Hardware flashing]]). Letting the dumper do it x times, only gives endusers/customers a false sense of reassurance, always a bad idea.
|-
 
| DOWN || DOWN || UP || DOWN || DOWN || DOWN || When start is pressed data stored on the ps3 nor chip will be copied to the microSD card. a file called bkpps3.bin will be created, or three files bkpps30.bin, bkpps31.bin, bkpps32.bin if you have a latest update from e3
== manual E3 downgrade v2 ==
|-
E3 dumps are byte reversed, and so must our patches (otherwise we have to reverse, paste the v2 in the REV, reverse back again - using byte reversed patches shortcuts that 'reversing confusion' :P)
| DOWN || DOWN || UP || DOWN || UP || DOWN || When start is pressed data stored on the e3 nor chip will be copied to the microSD card. a file called bkpe3.bin will be created.
 
|-
Dump the flash with the E3, you will end up with a .bin file (e.g. bkpps3.bin)
| DOWN || DOWN || DOWN || DOWN || DOWN || DOWN || When start is pressed data stored on the microSD card to the wrote ps3 nor chip, a file named bkpps3.bin must be present. make sure you have a good backup before writing.
 
|-
Patches to insert for v2 downgrade:
| DOWN || DOWN || DOWN || DOWN || UP || DOWN ||  When start is pressed data stored on the microSD card will be wrote to the e3 nor chip, a file named bkpe3.bin must be present.
{|class="wikitable sortable"
|-
| UP || DOWN || DOWN || DOWN || DOWN || DOWN || e3 recovery mode, if console is bricked! nor tristate wire must be soldered. a file named bkpps3.bin must be on the microSD card.
|-
|-
! target area !! patch no. !! NOR Offset !! Paste length !! Remarks
| UP || DOWN || DOWN || DOWN || UP || DOWN || e3 recovery mode, if e3 nor is bricked! nor tristate wire must be soldered. a file named bkpe3.bin must be on the microSD card.
|-
|-
| ROS0 || [http://www.multiupload.com/YYOOMJYSOQ patch1.REV (7 MB)] || 0x0C0010 || 0x6FFFE0 || version string 3.55
| UP || DOWN || DOWN || UP || DOWN || DOWN || e3 recovery mode, if console is bricked. nor tristate wire soldered and you have dual boot options this setting will duplicate data from the e3 nor chip to the ps3 nor chip.  
|-
|-
| ROS1 || [http://www.multiupload.com/YYOOMJYSOQ patch1.REV (7 MB)] || 0x7C0010 || 0x6FFFE0 || same as patch1.REV
| DOWN || UP || DOWN || DOWN || DOWN || DOWN || Used for dual booting, dual boot wire must be soldered. when up is selected the console will boot using data stored on the e3 nor chip. if down is selected the console will boot using data stored on the ps3 nor chip
|-
|-
| trvk_prg0 (0x40000) <br />trvk_prg1 (0x60000)<br />trvk_pkg0 (0x80000) <br />trvk_pkg1 (0xA0000) || [http://www.multiupload.com/N3DEBFC63A rvk-040000.REV (512 KB)] || 0x40000 || 0x80000 || one big patch<br />overlapping several area's
| DOWN || DOWN || UP || UP || UP || UP || Used to update the e3 flasher, update.bin must be stored on the microSD card
|-
|-
|}
|}
save file and use that file to flash the ps3. Afterwards, use RogeroV2, or any prepatched PUP that has the lv1/hypervisor syscon hashchecks patched out - or use the TCL from the talk/discussion page to patch one yourself) and reinstall the firmware in service mode like any V2 downgrade.


Note: If you wish to extract an E3 dump: Flowrebuilder can bytereverse and extract the NOR dump for you.
TechnoDon working on wiki.. do not delete!
 
== n00b GUIDE: Downgrade from 3.56 - 4.21 OFW to 3.55 OFW w/ E3 Flasher via {{RogeroFirmware}} ==
NOTE: This is '''NOT''' my tutorial. It is a compiled version of various articles written in PSDEVWIKI.<br />
With special guidance from '''domelec''' and '''eussNL'''. Thank you for your patience.<br />
All credits goes to PSDEVWIKI, domelec, eussNL and #ps3downgrade community. And also Rogero for his awesome CFW.
<br />
<br />
 
===E3 Hardware Installation video w eng subs===
* [http://www.youtube.com/watch?v=w9ZnSobfYcw PHAT]<br />
* [http://www.youtube.com/watch?v=WHNw2E4tU6c&feature=related SLIM]<br />
 
Once hardware installation is done check that E3 Flasher LIGHTS UP when PS3 is turned on. Then turn it off.<br />
During any of the below processes, should BLUE LED not light up as stated, read [[Error_Codes]]
 
===How to update E3 Flasher===
# Insert blank microSD via any microSD card reader into PC.<br />
# Download  [http://www.psdevwiki.com/files/flash/Tools/E3/BIN/2011.10.28%20E3%20Flasher%20Samsung%20Update_Multi_consoles/update.bin update.bin (Samsung update Multi consoles)], put the file in root directory of microSD and place the prepared SD card in the TF/SD slot of the E3<br />
# Check E3 Flasher: Make sure switches 1 & 2 should be down, switch 3, 4, 5, 6 should be in the up position.<br />
# Power PS3 "ON", the process will begin automatically
# When all 8 LEDS light up, update is successfull.
Note: After the update is done, the file is removed by the E3 flasher.
 
===How to make NOR Backup===
# Insert the blank micro SD card into the e3 flasher.
# Check E3 Flasher: Make sure switches 1 & 2 is down, switch 3 should be in the up position, switches 4, 5 & 6 should also be down.
# Turn PS3 on, wait till it loads to XMB (Main Menu).
# Press START (Upper red button) on E3 Flasher to begin the process.
# Wait till all 8 BLUE LEDs light up from left to right.
# Once completed BLUE LEDs will flash, alternating between 4 a time.
 
===Checking the NOR backups for errors===
# Remove the micro SD card from the E3 Flasher and insert into your PC.
# If update is done correctly, you will see three backups on the microSD card (bkpps30.bin, bkpps31.bin & bkpps32.bin and the e3flasher text log file) or (bkpps3.bin and log file)
# Use [http://www.psdevwiki.com/files/flash/Tools/Flowrebuilder/FlowRebuilder%20v.4.2.2.0.exe Flowrebuilder4.2.2.0] to Bytereverse anyone of the files. (Operation "Byte reverse and EXTRACT a NOR dump file")
# Follow [[Validating_flash_dumps | Validating Flash Dumps]]
 
===Manual E3 downgrade===
# Download [http://www.psdevwiki.com/files/flash/patches/E3%20downgrade.rar E3%20downgrade.rar] and extract contents<br />
# Using autopatcher from [http://www.psdevwiki.com/files/flash/Tools/Flowrebuilder/FlowRebuilder%20v.4.2.2.0.exe Flowrebuilder4.2.2.0]
# Select "PATCH a Byte reversed NOR dump or an interleaved and unscrambled NAND dump."
# Select as Input Dump File: the unmodified dump -> bkpps30.bin,bkpps32.bin,bkpps32.bin or bkpps3.bin (AC 0F FF E0 / AD DE EF BE)
# Select as Patch file: progskeet_patch.txt
# You will a see bkpps31.patch.bin created in the same folder as the input dump file
# Rename it to bkpps31.bin and copy it over to your microSD card
 
===Flashing the Patched file===
# Insert the microSD card into the E3 Flasher.
# Check E3 Flasher: Switches 1, 2, 3, 4, 5 should be down and Switch 6 (lock/unlock) should be in the up position.
# Turn on PS3 and wait for XMB to load.
# Press START on the E3 flasher and the flashing will begin.
# You will see the BLUE LEDS light up one by one. (once finished the lights will flash alternatively)
 
===Entering FSM===
Download [http://www.psdevwiki.com/files/lv2diag/3.55%20downgrader/3.55%20downgrader.rar lv2diag.self files]
and {{RogeroFirmware}}<br />
 
# Insert the [[Talk:Downgrading_with_PSgrade_Dongle | FSM dongle]] into RIGHT usb port on PS3
# Press POWER ON then press EJECT as fast as possible.
# PS3 should turn on and then off automatically.
# Using a FAT32 Formatted USB, put {{RogeroFirmware}} and lv2diag.self (Enter, File 1) onto root of USB drive.
# Turn PS3 on, there should be no visual, let {{RogeroFirmware}} install. (approx 10mins)
# PS3 will automatically off.
# Take USB stick out, check for Log if process was a success.
# Again if unsure, ask for help at [http://chat.efnet.org:9090/ #ps3downgrade]. Be POLITE and PATIENT
# Once sure that the process went off correctly, turn on PS3
# PS3 should boot into XMB, look for RED box with Factory/Service Mode written.
# You are in FSM.
 
===Exiting FSM===
# Put lv2diag.self (Exit, File 2) onto root of USB drive and remove lv2diag.self (Enter, File 1)
# Turn PS3 on.
# It will turn straight back off.
# Take out USB, delete lv2diag.self. Create folders PS3\UPDATE\ put PS3UPDAT.pup ({{RogeroFirmware}}) into it
 
===Installing {{RogeroFirmware}} via Recovery===
Boot into recovery mode<br />
 
# With the system in standby mode (RED LIGHT) . Press and hold the power button down until the system ''turns on and then off again''. Release the power button.
# After about 1 - 2 seconds press and hold the power button again, until you hear 2 consecutive beeps. Release the power button. ''During this step you will actually here three beeps. There will be one single beep then a short delay followed by the 2 consecutive beeps. Only release the the power button after the 2 consecutive beeps.''
# You will then be instructed to plug in a controller, via the usb cord, and press the PS button : "Connect the controller using a USB cable and then press the PS button".
# At this point the PS3 Recovery Menu will be shown on the screen.
# Select menu option 6 : 6. System Update
# Plug USB in, follow on screen instructions.
 
===QA Toggle===
# Download [http://www.psdevwiki.com/files/flash/Tools/toggle-qa/toggle_qa.pkg QA Toggle]
# Place into root of USB.
# Plug into PS3
# Boot PS3 into XMB, install QA Toggle via XMB
# Run QA Toggle, you will hear 2 beeps if successful, this means QA Flagged.
# Turn off PS3
 
===Installing OFW 3.55===
Download OFW 3.55<br />
 
# Put PS3UPDAT.pup (OFW 3.55) into PS3\UPDATE\ and replace the {{RogeroFirmware}}
# Boot into recovery mode (same as above)
# Choose option 6. System Update.
# Plug USB in, follow on screen instructions.
# You are downgraded and dehashed now.
 
===Installing CFW===
# Put PS3UPDAT.pup ({{RogeroFirmware}}) into PS3\UPDATE\ and replace the OFW 3.55 pup
# From XMB, run System Update > Choose from storage media.
# Now you are on {{RogeroFirmware}}
 
Written by lyradblac.<br />
If this guide proves useful and you do make money through it, please donate to PSDEVWIKI.<br />
This guide belongs to PSDEVWIKI, any permissions to copy should be asked from them.
 
 
----
 
 
 
http://www.ps3hax.net/showthread.php?p=310228#post310228
http://www.ps3hax.net/showthread.php?t=30815
 
== E3 Flasher related ==
 
http://imageshack.us/f/221/coverboardfronts.jpg/
 
Front of E3:
* microSD slot
** Start button
** Stop button
** LED: flash fun?
** LED:PS1 mode
** Switch?
** LED: CFW
** LED: OFW
** Switch?
** LED: Backup
** LED: Prog
** Switch?
* marking: Backup
** LED: OB Flash
** MicroSD
** Switch?
** LED: ON Flash
** LED: PS3Flash
** Switch?
* marking: Prog
** LED: Unlock
** LED: Lock
* ESATA Plug
* microUSB Plug
 
See it all here: http://www.youtube.com/watch?v=-FJsuc_uAjc <br />
[http://www.multiupload.com/56CX8YZ7N8 ps3hax_E3 FLASHER installation manual.pdf (3.12 MB)] <br />
Maximum harddrive 2.5TB according to E3 website (currently down)
 
    Dual Boot 3.7OFW and 3.55CFW on same PS3
    Downgrade 3.7 to 3.55 in 5min
    16M NOR FLASH ON board
    3 save MODE, can save data in TF, NOR FLASH on board and PC HD
    1 KEY operation, simple is best
    Upgradable from TF card or PC USB
    Compatiable all device like PS3/WII/XBOX360/MP3/DVD/BD/MP4/Table PC which has NAND or NOR flash memory.
    Integrated lots of interface, perfectly extension, will have more function with future new E3 accessory.
    E3 flasher Limited version includes 8 accessory, suggested retail price $88 USD, total production run only 3000 units!
 
New E3 PS3 Slim NOR clip : http://oi52.tinypic.com/dh8p4z.jpg <br />
E3 still uses 4 solderpads : BVCC, VCC, SBE, SBCE:
 
https://www.psdevwiki.com/ps3/File:E3_Clip_NOR_Slim.jpg
 
https://www.psdevwiki.com/ps3/File:ST9XT.jpeg
 
https://www.psdevwiki.com/ps3/File:YrKHi.jpeg
 
 
== connector on subboard for the clip ==
 
<div style="float:right">[[File:E3 - Panasonic PCB connector 50pin.jpg|200px|thumb|left|E3 - Panasonic PCB connector 50pin]]</div>
 
[http://pewa.panasonic.com/components/connectors/narrow-pitch-board-to-board-connectors/p4-board/ P4 / Panasonic - Narrow Pitch (Board to Board) Connectors] [http://na.industrial.panasonic.com/products/relays-connectors/connectors/narrow-fine-pitch-connectors/series/p404mm-pitch/1291/model/AXK750147G AXK750147G]
 
need the Retention Fitting Socket  <br />
untested, let us know if it works <br />
 
Shops:
* http://www.digikey.com/product-detail/en/AXK750147G/255-2533-6-ND/1986756
* http://excellence-china.en.alibaba.com/product/409636072-211994488/AXK750147G.html
 
=== connector on E3 linker ===
length: 11,0 mm
width (contact to contact): 2,1mm (1.02mm x 0.145mm innerspace for the "H" profile mating)
thickness: 2,5mm (including board) 
board thickness: 1,2mm
 
=== connector on E3 clipsuit ribbon ===
length: 11,0mm
width (contact to contact): 2,1mm (1.02mm x 0.145mm innerspace for the "H" profile mating)
thickness: 1.5mm  (including ribbon)
ribbon thickness: 0.10mm
 
== STMicroelectronics ARM used for the e3 board  ==
<table width="100%" align="left"><tr>
<td align="left">[[File:E3-Flasher-jtag.jpg|200px|thumb|left|JTG pin  (with JTAG? (if so, then the pins would be 'GND, TRST, 3,3V, TDO, TMS, TDI, TCK. see also [[:File:Injectus-jtag-bottompads.png|Injectus pinout]])]]</td>
<td align="left">[[File:E3-Flasher-chip-micro.jpg|200px|thumb|left|STMicroelectronics ARM]]</td>
<td align="left">[[File:E3_flasher.jpg|200px|thumb|left|E3 Board]]</td>
</tr></table>
 
== Some pics of soldered E3 linker ==


== normal E3 downgrade ==
A few pics of soldered E3 linker to DYN-001 motherboard, maybe could be useful for gallery. :P
=== Update and dump ===
# Update your playstation 3 to the latest downgradeable firmware 4.x
# Make a backup onto a blank micro SD card, use the following flasher settings: switch 1 & 2 should be down, switch 3 should be in the up position, switch 4, 5 & 6 should also be down
# Turn on your playstation 3 console
# Once in the xmb press start on the flasher and i will begin to backup (you will see a progess indicator on the flasher and once finished it will flash alternatively)
# Switch your console off and remove the micro SD card from the e3 flasher, put the SD card into your computer and you should see two files bkpps3.bin and a e3flasher text file.
# Check that the backup was sucessfull. The file size of the backup should be 16.0 MB (16,777,216 bytes) exactly. Copy the files onto your computer and keep them safe.
=== Downgrade flash ===
# You need to download the downgrade files from the e3 website and copy them to your micro SD Card
# Power off your playstation and change the flasher settings. Switch 1, 2, 3, 4, 5 should be down and switch 6 should be up.
# Hold the start button on the flasher and turn on your console it will begin flashing the downgrade files. When the flash has completed the lights will flash alternately
=== Reinstall FW in factory service mode ===
(see also [[Downgrading with PSgrade Dongle]])
# Switch your playstation off at the power switch unplug or what ever method you like to use
# Insert your PSGrade dongle/jig that gets you into factory service mode in the far right usb port closest to the blu ray drive, your console will turn off again, then remove your downgrade jig
# Copy the first set of downgrader files to a usb mass storage device: Lv2diag.self, PS3UPDAT.PUP
# Put your prepared usb stick in the usb port closest to the blu ray drive again and it will begin to downgrade. this takes quite a while.
# Once finished your console will turn off again.
# Delete the files from your usb and copy Lv2diag.self from the second step of the downgrader files.
# Put your usb stick back in the same port and turn on your console once again to leave factory service mode. Your console will turn off again.
# Now you can remove your usb stick and turn your console on again and it will boot you into 3.55 rogero v2 custom firmware (or any prepatched PS3UPDAT.PUP you used earlier


== E3 debricking notes ==
rghost.net/48291855
* Requires soldering wire from SBE (solderpad on NOR flatcable) to TRISTATE (NORpoint on PS3 motherboard)
rghost.net/48291933
* Make sure you have correct firmware on SD/TF card
rghost.net/48291965
* E3 switches set as 1:Flash fun, 2: OFW, 3: Prog, 4: microSD, 5: PS3 Flash, 6: Lock with the console power disconnected.
* Turn on console to restore (progress LEDs will light up one by one and blink if successfully).
* Unplug powercable and set 1:Flash fun down to PS3 Mode and turn on the PS3, if everything went fine, it will now be debricked (remember: in case syscon has 3.56+ hashes, you need prepatched LV1, see downgrader guides).<br />
[http://www.multiupload.com/3IHN3VZYZG English-E3 FLASHER repair method if console bricked.pdf (424.95 KB)]

Latest revision as of 05:10, 5 May 2023

note on Clip rework[edit source]

  • Fat PS3 only: refit the Nor Clip by smoothing it down with a little screwdriver / sandpaper
on slim models CECH-20xx/DYN-001, CECH-21xx/SUR-001, CECH-25xx/JTP-001 & JSD-001, CECH-30xx/KTE-001 the SMD filter condensator(s) on VCC line and pullup resistor(s) on RY/BY line are not uncomfortably in the way demanding clip-remodelling.

http://s165.photobucket.com/user/playerkp420/media/IMAG0298.jpg.html
http://s165.photobucket.com/user/playerkp420/media/IMAG0299.jpg.html
http://s165.photobucket.com/user/playerkp420/media/IMAG0300.jpg.html
http://s165.photobucket.com/user/playerkp420/media/IMAG0301.jpg.html

This page needs clean up and sections ready for release moved to main page.


E3 Flasher Switches Explained[edit source]

switch 1. only works if the NOR Tristate wire has been soldered, this is used for brick recovery. up = on / down = off and must be selected while the console is off.
switch 2. is used for dual booting and only works if the dual boot wire has been soldered to SBCE. up = e3 nor chip / down = ps3 nor chip.
switch 3. sets the e3 flasher into read or write mode. up = read from selected nor chip / down = write to selected nor chip.
switch 4. selects whether to read from the microSD card or nor chip on the e3 flasher. up = read from nor chip on e3 flasher / down = read from microSD card.
switch 5. used to select which chip the flasher should read or write to. up = chip onboard the e3 flasher / down = chip on ps3.
switch 6. is lock or unlock? i have no idea what this actually does. i just leave it in the down position. which seems to work!

FLASH FUN
PS3 MODE
CFW
OFW
BACKUP
PROGRAM
OB FLASH
MICRO SD
OB FLASH
PS3 FLASH
UNLOCK
LOCK
EXPLANATION
DOWN DOWN UP DOWN DOWN DOWN When start is pressed data stored on the ps3 nor chip will be copied to the microSD card. a file called bkpps3.bin will be created, or three files bkpps30.bin, bkpps31.bin, bkpps32.bin if you have a latest update from e3
DOWN DOWN UP DOWN UP DOWN When start is pressed data stored on the e3 nor chip will be copied to the microSD card. a file called bkpe3.bin will be created.
DOWN DOWN DOWN DOWN DOWN DOWN When start is pressed data stored on the microSD card to the wrote ps3 nor chip, a file named bkpps3.bin must be present. make sure you have a good backup before writing.
DOWN DOWN DOWN DOWN UP DOWN When start is pressed data stored on the microSD card will be wrote to the e3 nor chip, a file named bkpe3.bin must be present.
UP DOWN DOWN DOWN DOWN DOWN e3 recovery mode, if console is bricked! nor tristate wire must be soldered. a file named bkpps3.bin must be on the microSD card.
UP DOWN DOWN DOWN UP DOWN e3 recovery mode, if e3 nor is bricked! nor tristate wire must be soldered. a file named bkpe3.bin must be on the microSD card.
UP DOWN DOWN UP DOWN DOWN e3 recovery mode, if console is bricked. nor tristate wire soldered and you have dual boot options this setting will duplicate data from the e3 nor chip to the ps3 nor chip.
DOWN UP DOWN DOWN DOWN DOWN Used for dual booting, dual boot wire must be soldered. when up is selected the console will boot using data stored on the e3 nor chip. if down is selected the console will boot using data stored on the ps3 nor chip
DOWN DOWN UP UP UP UP Used to update the e3 flasher, update.bin must be stored on the microSD card

TechnoDon working on wiki.. do not delete!

== n00b GUIDE: Downgrade from 3.56 - 4.21 OFW to 3.55 OFW w/ E3 Flasher via Rogero V3.7 (mirror / MD5:8f8166b25d6bed891f292c77de5c4b28)

for noFSM, use 9.99 downgrader instead: MD5:b67747f529d047d63151786544a58b50

==

NOTE: This is NOT my tutorial. It is a compiled version of various articles written in PSDEVWIKI.
With special guidance from domelec and eussNL. Thank you for your patience.
All credits goes to PSDEVWIKI, domelec, eussNL and #ps3downgrade community. And also Rogero for his awesome CFW.

E3 Hardware Installation video w eng subs[edit source]

Once hardware installation is done check that E3 Flasher LIGHTS UP when PS3 is turned on. Then turn it off.
During any of the below processes, should BLUE LED not light up as stated, read Error_Codes

How to update E3 Flasher[edit source]

  1. Insert blank microSD via any microSD card reader into PC.
  2. Download update.bin (Samsung update Multi consoles), put the file in root directory of microSD and place the prepared SD card in the TF/SD slot of the E3
  3. Check E3 Flasher: Make sure switches 1 & 2 should be down, switch 3, 4, 5, 6 should be in the up position.
  4. Power PS3 "ON", the process will begin automatically
  5. When all 8 LEDS light up, update is successfull.

Note: After the update is done, the file is removed by the E3 flasher.

How to make NOR Backup[edit source]

  1. Insert the blank micro SD card into the e3 flasher.
  2. Check E3 Flasher: Make sure switches 1 & 2 is down, switch 3 should be in the up position, switches 4, 5 & 6 should also be down.
  3. Turn PS3 on, wait till it loads to XMB (Main Menu).
  4. Press START (Upper red button) on E3 Flasher to begin the process.
  5. Wait till all 8 BLUE LEDs light up from left to right.
  6. Once completed BLUE LEDs will flash, alternating between 4 a time.

Checking the NOR backups for errors[edit source]

  1. Remove the micro SD card from the E3 Flasher and insert into your PC.
  2. If update is done correctly, you will see three backups on the microSD card (bkpps30.bin, bkpps31.bin & bkpps32.bin and the e3flasher text log file) or (bkpps3.bin and log file)
  3. Use Flowrebuilder4.2.2.0 to Bytereverse anyone of the files. (Operation "Byte reverse and EXTRACT a NOR dump file")
  4. Follow Validating Flash Dumps

Manual E3 downgrade[edit source]

  1. Download E3%20downgrade.rar and extract contents
  2. Using autopatcher from Flowrebuilder4.2.2.0
  3. Select "PATCH a Byte reversed NOR dump or an interleaved and unscrambled NAND dump."
  4. Select as Input Dump File: the unmodified dump -> bkpps30.bin,bkpps32.bin,bkpps32.bin or bkpps3.bin (AC 0F FF E0 / AD DE EF BE)
  5. Select as Patch file: progskeet_patch.txt
  6. You will a see bkpps31.patch.bin created in the same folder as the input dump file
  7. Rename it to bkpps31.bin and copy it over to your microSD card

Flashing the Patched file[edit source]

  1. Insert the microSD card into the E3 Flasher.
  2. Check E3 Flasher: Switches 1, 2, 3, 4, 5 should be down and Switch 6 (lock/unlock) should be in the up position.
  3. Turn on PS3 and wait for XMB to load.
  4. Press START on the E3 flasher and the flashing will begin.
  5. You will see the BLUE LEDS light up one by one. (once finished the lights will flash alternatively)

Entering FSM[edit source]

Download lv2diag.self files and Rogero V3.7 (mirror / MD5:8f8166b25d6bed891f292c77de5c4b28)

for noFSM, use 9.99 downgrader instead: MD5:b67747f529d047d63151786544a58b50

  1. Insert the FSM dongle into RIGHT usb port on PS3
  2. Press POWER ON then press EJECT as fast as possible.
  3. PS3 should turn on and then off automatically.
  4. Using a FAT32 Formatted USB, put Rogero V3.7 (mirror / MD5:8f8166b25d6bed891f292c77de5c4b28)

for noFSM, use 9.99 downgrader instead: MD5:b67747f529d047d63151786544a58b50

and lv2diag.self (Enter, File 1) onto root of USB drive.
  1. Turn PS3 on, there should be no visual, let Rogero V3.7 (mirror / MD5:8f8166b25d6bed891f292c77de5c4b28)

for noFSM, use 9.99 downgrader instead: MD5:b67747f529d047d63151786544a58b50

install. (approx 10mins)
  1. PS3 will automatically off.
  2. Take USB stick out, check for Log if process was a success.
  3. Again if unsure, ask for help at #ps3downgrade. Be POLITE and PATIENT
  4. Once sure that the process went off correctly, turn on PS3
  5. PS3 should boot into XMB, look for RED box with Factory/Service Mode written.
  6. You are in FSM.

Exiting FSM[edit source]

  1. Put lv2diag.self (Exit, File 2) onto root of USB drive and remove lv2diag.self (Enter, File 1)
  2. Turn PS3 on.
  3. It will turn straight back off.
  4. Take out USB, delete lv2diag.self. Create folders PS3\UPDATE\ put PS3UPDAT.pup (Rogero V3.7 (mirror / MD5:8f8166b25d6bed891f292c77de5c4b28)

for noFSM, use 9.99 downgrader instead: MD5:b67747f529d047d63151786544a58b50 ) into it

===Installing Rogero V3.7 (mirror / MD5:8f8166b25d6bed891f292c77de5c4b28)

for noFSM, use 9.99 downgrader instead: MD5:b67747f529d047d63151786544a58b50

via Recovery===

Boot into recovery mode

  1. With the system in standby mode (RED LIGHT) . Press and hold the power button down until the system turns on and then off again. Release the power button.
  2. After about 1 - 2 seconds press and hold the power button again, until you hear 2 consecutive beeps. Release the power button. During this step you will actually here three beeps. There will be one single beep then a short delay followed by the 2 consecutive beeps. Only release the the power button after the 2 consecutive beeps.
  3. You will then be instructed to plug in a controller, via the usb cord, and press the PS button : "Connect the controller using a USB cable and then press the PS button".
  4. At this point the PS3 Recovery Menu will be shown on the screen.
  5. Select menu option 6 : 6. System Update
  6. Plug USB in, follow on screen instructions.

QA Toggle[edit source]

  1. Download QA Toggle
  2. Place into root of USB.
  3. Plug into PS3
  4. Boot PS3 into XMB, install QA Toggle via XMB
  5. Run QA Toggle, you will hear 2 beeps if successful, this means QA Flagged.
  6. Turn off PS3

Installing OFW 3.55[edit source]

Download OFW 3.55

  1. Put PS3UPDAT.pup (OFW 3.55) into PS3\UPDATE\ and replace the Rogero V3.7 (mirror / MD5:8f8166b25d6bed891f292c77de5c4b28)

for noFSM, use 9.99 downgrader instead: MD5:b67747f529d047d63151786544a58b50

  1. Boot into recovery mode (same as above)
  2. Choose option 6. System Update.
  3. Plug USB in, follow on screen instructions.
  4. You are downgraded and dehashed now.

Installing CFW[edit source]

  1. Put PS3UPDAT.pup (Rogero V3.7 (mirror / MD5:8f8166b25d6bed891f292c77de5c4b28)

for noFSM, use 9.99 downgrader instead: MD5:b67747f529d047d63151786544a58b50 ) into PS3\UPDATE\ and replace the OFW 3.55 pup

  1. From XMB, run System Update > Choose from storage media.
  2. Now you are on Rogero V3.7 (mirror / MD5:8f8166b25d6bed891f292c77de5c4b28)

for noFSM, use 9.99 downgrader instead: MD5:b67747f529d047d63151786544a58b50


Written by lyradblac.
If this guide proves useful and you do make money through it, please donate to PSDEVWIKI.
This guide belongs to PSDEVWIKI, any permissions to copy should be asked from them.




http://www.ps3hax.net/showthread.php?p=310228#post310228 http://www.ps3hax.net/showthread.php?t=30815

E3 Flasher related[edit source]

http://imageshack.us/f/221/coverboardfronts.jpg/

Front of E3:

  • microSD slot
    • Start button
    • Stop button
    • LED: flash fun?
    • LED:PS1 mode
    • Switch?
    • LED: CFW
    • LED: OFW
    • Switch?
    • LED: Backup
    • LED: Prog
    • Switch?
  • marking: Backup
    • LED: OB Flash
    • MicroSD
    • Switch?
    • LED: ON Flash
    • LED: PS3Flash
    • Switch?
  • marking: Prog
    • LED: Unlock
    • LED: Lock
  • ESATA Plug
  • microUSB Plug

See it all here: http://www.youtube.com/watch?v=-FJsuc_uAjc
ps3hax_E3 FLASHER installation manual.pdf (3.12 MB)
Maximum harddrive 2.5TB according to E3 website (currently down)

   Dual Boot 3.7OFW and 3.55CFW on same PS3
   Downgrade 3.7 to 3.55 in 5min
   16M NOR FLASH ON board
   3 save MODE, can save data in TF, NOR FLASH on board and PC HD
   1 KEY operation, simple is best
   Upgradable from TF card or PC USB
   Compatiable all device like PS3/WII/XBOX360/MP3/DVD/BD/MP4/Table PC which has NAND or NOR flash memory.
   Integrated lots of interface, perfectly extension, will have more function with future new E3 accessory.
   E3 flasher Limited version includes 8 accessory, suggested retail price $88 USD, total production run only 3000 units!

New E3 PS3 Slim NOR clip : http://oi52.tinypic.com/dh8p4z.jpg
E3 still uses 4 solderpads : BVCC, VCC, SBE, SBCE:

https://www.psdevwiki.com/ps3/File:E3_Clip_NOR_Slim.jpg

https://www.psdevwiki.com/ps3/File:ST9XT.jpeg

https://www.psdevwiki.com/ps3/File:YrKHi.jpeg


connector on subboard for the clip[edit source]

E3 - Panasonic PCB connector 50pin

P4 / Panasonic - Narrow Pitch (Board to Board) Connectors AXK750147G

need the Retention Fitting Socket
untested, let us know if it works

Shops:

connector on E3 linker[edit source]

length: 11,0 mm
width (contact to contact): 2,1mm (1.02mm x 0.145mm innerspace for the "H" profile mating)
thickness: 2,5mm (including board)  
board thickness: 1,2mm

connector on E3 clipsuit ribbon[edit source]

length: 11,0mm
width (contact to contact): 2,1mm (1.02mm x 0.145mm innerspace for the "H" profile mating)
thickness: 1.5mm  (including ribbon)
ribbon thickness: 0.10mm

STMicroelectronics ARM used for the e3 board[edit source]

JTG pin (with JTAG? (if so, then the pins would be 'GND, TRST, 3,3V, TDO, TMS, TDI, TCK. see also Injectus pinout)
STMicroelectronics ARM
E3 Board

Some pics of soldered E3 linker[edit source]

A few pics of soldered E3 linker to DYN-001 motherboard, maybe could be useful for gallery. :P

rghost.net/48291855 rghost.net/48291933 rghost.net/48291965