PS4 News on Facebook! PS4 News on Twitter! PS4 News on YouTube! PS4 News RSS Feed!

Home PS4 News - Latest PlayStation 4 and PS3 News

July 26, 2011 // 6:06 pm - Following up on the previous PS3 NOR Flash dumping updates from uf6667 and No_One, today judges has released Teensy++ 2.0 Flasher Software called NORway for PlayStation 3 developers.

Download: NORway v0.1 for PS3 / NORway v0.1 for PS3 (Mirror) / PS3 NOR Testpoints / NORway v0.2 for PS3 / NORway v0.3 for PS3 / NORway (Python Script) v0.3 for PS3 by jevin / NORway v0.4 for PS3 / NORway v0.5 for PS3 / PS3 NOR Dump with Teensy 2.0++ Guide / GIT

To quote: Here comes my initial release of a NOR flasher soft for the PS3 called "NORway". I know, there are other "WIP" projects, but I got a little impatient, so I've decided to create my own solution. It's a port of "noralizer" by marcan, a pretty good working NOR flasher implementation for another FPGA board.

Anyway, here's the README.txt, which should explain everything: NORway v0.1

This project has been ported for the Teensy++ 2.0 from the original NOR flasher tool ("noralizer" by Hector Martin "marcan" ) that was used to flash AsbestOS onto the demo PS3 at 27C3, and for experimentation.

Contents:

\teensy\NORway.avrsln - Source code for the Teensy++ 2.0 (AVR Studio 5.0)
\teensy\default\NORway.hex - Compiled hex-file for the Teensy++ 2.0 (AT90USB1286)
\hwinstall\install-*.jpg - Some pics of how I've mounted the Teensy (CECH-2504A/B)
\hwinstall\nor_testpoints.png - Connection diagram of the NOR testpoints (CECH-2504A/B)
\serial_install.exe - Teensy serial drivers for Windows
\README.txt - this file
\NORway.py - PC Python client

Hardware connections (see "\hwinstall\nor_testpoints.png"):

PS3 Teensy
A0-7 PF0-7
A8-15 PA0-7
A16-22 PB0-7
D0-7 PD0-7
D8-15 PC0-7
CE# PE0
OE# PE1
RESET# PE4
WE# PE5
RY/BY# PE6
TRISTATE# PE7
GND GND

There are no modifications to the Teensy itself required. Don't install any power regulators, don't cut any traces.

DON'T CONNECT THE VCC SOLDER PADS TO ANYTHING!

Connection diagrams for other boards can be found at: http://ps3devwiki.com/index.php?title=Hardware_flashing

Prerequisites for Windows:

Python 2.7.2 (http://www.python.org/ftp/python/2.7.2/python-2.7.2.msi)
pyserial 2.5 (http://pypi.python.org/packages/any/p/pyserial/pyserial-2.5.win32.exe)

Usage:

Install Python + pyserial (see "Prerequisites for Windows"). Install drivers. Connect Teensy to your PC. Flash Teensy with "\teensy\default\NORway.hex" and reset it after completion. Start Windows' "Device Manager", expand the "Ports (COM & LPT)" node, you should see something like "USB Serial (Communication Class, Abstract Control Model) (COM4)". This tells you that "COM4" (or whatever shows up) is the COM port used by Teensy.

At the command prompt enter "NORway.py" to display help.

Procedure to dump your flash:

- PS3 is turned off
- At the command prompt enter:

NORway.py
- Turn on your PS3, it shouldn't boot
- At the command prompt enter:
NORway.py dump flash.bin
- When dumping is finished enter:
NORway.py release
- Power off your PS3 (disconnect Teensy if PS3 doesn't boot when restarted)

Dumping takes about 3 minutes. A file "flash.bin" with a size of exactly 16 MB (16.777.216 bytes) has been created in your current directory.

Flashing is rather slow. Writing a complete flash with the "write" command takes about 2 hours. Might be improved in future versions...

IMPORTANT:

Before you flash your PS3 with anything new, make sure that the content of your dump is correct (e.g. compare ros0/ros1 area of your dump against "CORE_OS_PACKAGE.bin" from an actual PS3UPDAT.PUP of your current firmware). And keep your original dump in a safe place. You might need it.

It's tested on Win7 x86, but should also work just fine on any x86 Windows >=XP. Basically it should also work on Linux, but I didn't test. If you're running Linux, you probably know what to do. Serial drivers are not required for Linux.

Unfortunately I couldn't manage to make it work on any x64 version of Windows, because of the Python pyserial module.

Thanks to "marcan" for the original implementation.

-- judges (judges at eEcho.com)

P.S: I've already managed to downgrade my OFW 3.61 to CFW 3.55. There're minor things to rule out, but expect a downgrade tutorial coming soon..
PPS: Thanks to defyboy for the original idea of using a Teensy for flashing!

Update 28th July, 2011: v0.2 released! Documentation updated to include the required 3.3V voltage regulator plus Teensy clock rate changed to 8 MHz!

Update 9th August, 2011: NORway v0.3 has been released!

Dumping now only takes 45 secs instead of over 5 mins! Writing now only takes about 8.5 mins instead of over 2 hours!

[jevin] judges check out http://pastie.org/2527251
[jevin] its modified to support samsung chips
[jevin] it does chip erase twice (a22 low/high)
[jevin] and does single-word, unlocked programming of the entire chip
[jevin] it doesnt support programming ranges because i haven't bothered with partial erases yet
[jevin] 99% untested
[jevin] it executes when not hooked up to my ps3


NORway PS3 NOR Flasher Software for Teensy++ 2.0 Dev Boards

NORway PS3 NOR Flasher Software for Teensy++ 2.0 Dev Boards

NORway PS3 NOR Flasher Software for Teensy++ 2.0 Dev Boards

Follow us on Twitter, Facebook and drop by the PS3 Hacks and PS3 CFW forums for the latest PlayStation 3 scene and PS4 Hacks & JailBreak updates with PlayStation 4 homebrew PS4 Downloads.



#21 - cvp - September 21, 2011 // 5:02 pm
cvp's Avatar
is there a testpint plan for PS3 Slim CECH-2004B? Can't find it

#20 - moja - August 13, 2011 // 6:02 pm
moja's Avatar
Wow, this is great news, and thanks for the version updates throughout the thread.

This is very exciting - it's like the JTAG hack for 360s, but without the fuse limitations. Do we know if the install diagram is similar for all models?

Perhaps a good homebrew software flasher will be worked on, especially with the new SDK leak. If this method proves reliable, I think I'll mount my Teensy inside and put a mini USB port on the case.

#19 - PS4 News - August 9, 2011 // 10:45 am
PS4 News's Avatar
For those following, NORway - Teensy++ 2.0 NOR flasher for PS3 v0.3 is now released by judges:

Download: NORway v0.3 for PS3 / NORway v0.3 for PS3 (Mirror) / GIT

Changelog:

  • Speed optimizations
  • Dumping now only takes 45 secs instead of over 5 mins!
  • Writing now only takes about 8.5 mins instead of over 2 hours!

#18 - PS4 News - July 28, 2011 // 6:09 pm
PS4 News's Avatar
Below is a roughly translated guide from calimba on how to do a PS3 NOR dump with a Teensy 2.0++ device: demonhades.org/foro/viewtopic.php?f=224&t=4892#p31010. I have also added the NORway v0.2 for PS3 update to the first post.

Community well this is my first tutorial I hope you understand me. I'll be putting images to be more clear, then began:

Requirements:

  • Teensy 2.0 + +
  • Norway 0.1
  • Obviously a PC

1. Unzip the Norway where we want and install the serial_install.exe that comes inside the zip then download it and install it.

Python 2.7.2 (http://www.python.org/ftp/python/2.7.2/python-2.7.2.msi)
pyserial 2.5 (http://pypi.python.org/packages/any/p/pyserial/pyserial-2.5.win32.exe)

2. Program with the Teensy hex that is inside the folder "default" of Norway


3. Solder to play the 3 because of the review board is different from the diagram, here are a few. I used this:


And these are the points of the teensy:


4. Ya all welded to the plate and console ps3 off with the red LED and connect the usb to pc teensy then went into the Device Manager and look for Ports (COM & LPT) as you can see the next image to I really teensy detected in COM3


5. Open the windows command line CMD and go as far as Norway and unpack the NORway.py write in my case COM3


6. Then ignition internal green LED console and type in CMD flash.bin NORway.py COM3 dump and start making the dump, as you'll see in the image does not take much 2 minutes 38 seconds



7. Last step. After the dump CMD wrote in COM3 NORway.py NOR release to reset and turn off the console and disconnect the teensy and ready and we have the dump of the NOR


PS: I'm not very good with photocase this
PD2: I did everything in windows 7 x64

I want to thank Demonhades, Jaicrab rather the entire mark HadesTeam also thank the Judges and Norway

#17 - Bulldogzz - July 28, 2011 // 4:32 am
Bulldogzz's Avatar
Couldn't we use this to flash a DEBUG FW onto Retail PS3's?

Also does this mean we can modify the QA Flag on new FW's?

Sorry for the newby questions.

#16 - severusx - July 27, 2011 // 1:42 pm
severusx's Avatar
That is a lot of soldering, but at least it is all on points or pads so it shouldn't be that hard for someone with a moderate amount of experience. At least you don't have to solder onto any of the traces directly. I had to do that to fix my custom fight stick (toodles based stick for 360/PS3/PC) for MvC3 and it was a bitch trying to get a wire to stick to a trace the size of a human hair.

#15 - spawnofjago - July 27, 2011 // 8:49 am
spawnofjago's Avatar
Can this be possible with a minimus avr, if so can someone offer a tut. Really appreciate it, Thanks!

#14 - HeyManHRU - July 27, 2011 // 6:03 am
HeyManHRU's Avatar
Nice, So I can play all the latest games and on PSN whilst 3.66 OFW (Or the newest FW), and after a month or so I can downgrade to 3.55 CFW.

Both Sony and Hackers are winners.

#13 - rocha160 - July 27, 2011 // 4:14 am
rocha160's Avatar
Quote Originally Posted by PS3 News View Post
According to judges it seems possible, as he stated "I've already managed to downgrade my OFW 3.61 to CFW 3.55."

Keep in mind the crazy install soldering required to do it though.

thanks for answering my stupid noob questions.

#12 - Mantagtj - July 27, 2011 // 3:56 am
Mantagtj's Avatar
LOL , Soldering is a problem tho it looks really pretty when it is done, wishing I kept the teensy++ now but I kept the other usb - we wont mention names lol, shame I havent friends that solder they all turn to me for mad stuff like this, congratulations tho, I might wait until I goto college for 10 years to learn to solder (my soldering looks like welding pmsl)!