PS3 Frankenstein PHAT PS3: CECHA with 40nm RSX

And here I was thinking all we need is a modchip and no further modifications :D. Notice that in the video he did install a 47k resistor on to COK002 board, even though his guide says it's only for COK001.
 
Last edited:
At 11:54 he starts making the changes to CG reset. Now something @squeept and I have been assuming is that R2054 (0 Ohms) is being turned diagonally to GND. However, it looks like he took R2153 (10K Ohms) and used it to make the diagonal connection. By using a 10K Ohm He's pulling the voltage up. That could explain @squeept's failure. I didn't notice before that the values were different. Essentially what we did was short CGreset to ground, which pulls the voltage to 0v = Pull-Down Resistor. The complete opposite thing.
View attachment 32000
Also, here's a pic I whipped together from that video to make it easier to see what he's doing:
View attachment 32005
Smart cat, this is promising, at this point im guessing you got it :encouragement:
We just need the definitive confirmation from @squeept ...and it would mean the software side of his previous test was fine
 
Moving it back to normal gets rid of the 2120. Still gets 3034 and 4001 at once.
Yeah, what we tried was doomed to fail, because we were essentially holding the RSX in reset when it was supposed to begin communicating during bittraining. Using the 0K Resistor (R2054) for the diagonal to GND explains the 40 3034 & 40 4001. They both occur in the off state because the RSX can't initialize! Basically the same as if it had a BGA defect. It should have been a 10K!!! The 2120 error went away when he put it back to normal, meaning it was the 0K. So @squeept never had the HW changes correct. That would definitely explain the errors!

I mean, theses videos are a revelation. How would we have ever known that from a few pictures?! Of course, we'd assume that was the same resistor if no one measured it!

And here I was thinking all we need is a modchip and no further modifications :D. Notice that in the video he did install a 47k resistor on to COK002 board, even though his guide says it's only for COK001.
No, he means that they are only populated on a COK-001. In the video, he was working on a COK-002, so he had to populate that resistor.
 
Last edited:
I mean, theses videos are a revelation. How would we have ever known that from a few pictures?! Of course, we'd assume that was the same resistor if no one measured it!
At this point is clear that is needed a resistor of 10K to ground in diagonal in R2054
But im wondering if is really needed to remove the resistor from R2153. It makes sense to you to "recycle" the 10K resistor by removing it from R2153 ?

What is the purpose of the other resitor of 47K btw ? (not sure if has been mentioned before and i missed it, but for me that 47K resistor is something new)
 
...im wondering if is really needed to remove the resistor from R2153. It makes sense to you to "recycle" the 10K resistor by removing it from R2153 ?
Ok, i think i can answer myself by reviewing the thread, in this post there is a photo where @LeoTW630 marked the differences in that area
This is an official sony work, so yeah... is needed to remove R2153
2020-7-6-05-15-25-jpg.26667

 
@sandungas I remember I igonored this kind of exchange back years on ps3hax there was some kind of yt videos and a short thread on ps3hax , we may find wayback something about?
Not sure if is going to be needed, it seems we have all the ingredients for the recipe :D
Im a bit excited, but we have to wait a bit for someone to comfirn that what @RIP-Felix said is correct, but i bet is it because matches perfectly with the video and the photos, also it explains why the previous test from @squeept was not working
 
@sandungas I remember I igonored this kind of exchange back years on ps3hax there was some kind of yt videos and a short thread on ps3hax , we may find wayback something about?
OMG..I got my start there. Drilled holes in the bottom for cold air to fan, spliced some wires for 12V Fan controller + thermal probes. Those were my cut mod days, I cringe thinking about it now. Those were the dark ages.
 
In a event of exchange I wold personaly try with 2500/3000 model of rsx delided because 4000 without ihs ic die is lower and wont take good contact when we add back ihs on top.Did swap 4000 rsx to 3000 and got panic heat in 2~3 minutes . I will give it a go when all data are logic for me and everyone here.
 
I mean first I have to collect all data from thread then I will do it, meantime probably someone will compress all in a short description . If I don't understand something easier, somebody else/new starters neither, I am still technician, not engineer.
Edit
Example of each modified locotion/hardware id for each phat syscon?

Edit 2
Most engineers will simplify/compress entire process. Is here someone good enough to do this? All appreciation and a donation from me if it will work.
 
Last edited:
In a event of exchange I wold personaly try with 2500/3000 model of rsx delided because 4000 without ihs ic die is lower and wont take good contact when we add back ihs on top.Did swap 4000 rsx to 3000 and got panic heat in 2~3 minutes . I will give it a go when all data are logic for me and everyone here.
If we're going the whole nine yards to make the most dependable ps3 wouldn't it be worthwhile to figure out if we can fabricate a new ihs to make up the height difference on the 4xxx series rsx to make heatsink contact? After all at the end of the day the ihs is just nickel plated copper, wouldn't it be viable to machine some new ones if we can get accurate measurements? Further this would help maximize the availability of replacement rsx, no?

Just a thought from someone with little else to add to the discussion.
 
If we're going the whole nine yards to make the most dependable ps3 wouldn't it be worthwhile to figure out if we can fabricate a new ihs to make up the height difference on the 4xxx series rsx to make heatsink contact? After all at the end of the day the ihs is just nickel plated copper, wouldn't it be viable to machine some new ones if we can get accurate measurements? Further this would help maximize the availability of replacement rsx, no?

Just a thought from someone with little else to add to the discussion.
I don't believe that there is nearly as many 28nm RSX chips as 40nm, and I bet it would be hard to cut. Also I don't believe the syscon in a fat will even do a 28nm as idk if any research has been put into i

Sent from my SM-S102DL using Tapatalk
 
If we're going the whole nine yards to make the most dependable ps3 wouldn't it be worthwhile to figure out if we can fabricate a new ihs to make up the height difference on the 4xxx series rsx to make heatsink contact? After all at the end of the day the ihs is just nickel plated copper, wouldn't it be viable to machine some new ones if we can get accurate measurements? Further this would help maximize the availability of replacement rsx, no?

Just a thought from someone with little else to add to the discussion.
4 problems with that: It assumes that the 28nm RSX is significantly more reliable which we don't know is true especially since the power draw on those chips really isn't hugely lower than the power draw of the 40nm chips. I did some power tests recently on a CECH-2501 and a CECH-4301, from what I measured the largest gap in power draw was only around ~15W.

The 40nm RSXs are significantly more common and therefore not only cheaper but also don't need to be pulled from working consoles. The bigger issue with this is actually just sourcing the 28nm chips since there's no known model of PS3 aside from the CECH-43XX that has it for sure and broken 43XXs still go for a decent amount.

All the guides so far have only shown it working with 40nm RSXs, and the descriptions only mention it working with the 5300 series RSXs. It might work fine but I think we would probably have seen one example or mention of it if it did.

I may be incorrect on this point but I don't believe that 3.55 or any other CFWable firmware supports the 28nm RSX meaning you would need to have CFW'd your console before you installed the 28nm RSX or replace it with a 40nm RSX, CFW it, then take that 40nm RSX off and put the 28nm one in it's place.
 
Last edited:
Ok probably I have created little bit confusion, I meant about 40 nm on 2500/3000 and 4000.
Some 4000 have 40nm rsx without ihs.
Previous rsx 40nm on 2100/2500/3000 have similar rsx 40 nm but with ihs on top quite tied by epoxy on rams.
Now if I take out from board 4000 rsx and solder to 3000 board, it will work and start but in few minutes heat panic(ylod).
Took out rsx (4000model) from this board and cleaned thermal paste, applied only ihs without thermal paste and looking to light I could see light between ihs and ic die in middle.
Took rsx for 3000, (already out of board model from factory) applied ihs and looked at light there was no space. Soldered back original from factory. So differences is on ic die level only.
They look so identical delided but they are not. My bad and sorry for misunderstanding created/not fully explained.
 
I placed an order for two of these bad boys through an indonesian person on fiverr. Let's see if it ever arrives.
By now are useful, the best thing of the indonesian modchip is that it allows to replace the RSX while keeping the original syscon from factory
You know... finding a syscon of the "F" type (flasheable) on sale is not easy, and it was a requirement for what we was discussing before we knew about the indonesian modchip

But... dont forget this wise words:
https://www.psx-place.com/threads/f...cecha-with-40nm-rsx.28069/page-21#post-284485
...if the modchip changes the communication only a little bit (and not just replay everything) then we might have a chance to just create a dirty patch for the syscon itself, but that requires reversing the communication first.

He is talking about creating a patch using the official patch format (aplicable to all the retail syscon models, because all them are vulnerables, we can delete the current patch and apply our custom patch)
This would allow to replace the RSX without doing any hardware modification to syscon, and without the modchip
But this is just speculation because we dont know yet:
1) If is posible to create a syscon patch in a "hacky" way that modifyes the SPI communications with RSX
2) Wtf is doing the indonesian modchip, we need to "clone" his SPI communications
 
Last edited:
Back
Top