PS3 Frankenstein PHAT PS3: CECHA with 40nm RSX

I don't know much about ps3 development (and gaming consoles in general) but I do have a logic analyzer and I'd love to check what's going on with that chip.
I thought about hooking up my oscilloscope to capture the SPI communication coming off the modchip to see exactly when and what signals it sends. Might be able to see how many bytes of data it sends/receives. A logic analyzer might be more useful.
If I do had one of those, I could check with my logic analyzer, but I dunno if @lusianaliu would buy a couple of them for me...
From my understanding the developer of the modchip doesn't want it to be reverse engineered. We know what it does (modifying the SC <-> RSX communication). You don't even need to reverse it, just have a look at the syscon firmware (that's way easier if you actually want to understand the communication) or just copy the modchip (It's possible to glitch these CPLDs to get the bitstream).

I think that if it were possible to make it work swaping RSX+Syscon from a 40nm console to a 90nm and doing the voltage modification... that would be perfect for me. I'm more than ready to sacrifice a couple of slim consoles for my phattys
I should check more info about this syscon stuff to know how it works... because, besides giving to cell the initial instructions/configuration (thing I guess it does) does it anything else? (power management?) and, if between syscon versions the pinout is different, wouldn't be a solution to make an adapter board to just solder the 40nm version?
Syscon does a lot of different things, not only hardware related stuff. Yes, the Syscon used on the 40nm models isn't pin compatible with the older variant but it also doesn't support the older 90nm CELL and 90nm SB.

I've tried different ways of doing with patches in mullion syscon with DeadEnd and help of M4j0r, sandungas. We need more space inside syscon for each rsx or at least for the one is charged. Orbis modchip will do it on fly over spi as auticonfig righ after boot. It is more complex, not a simple line code execution as simple microcontroller.
Yes, that's right, the modchip just has more space for patches, we're very limited on Syscon. But it can't patch the Syscon firmware.

mod chip is the best way. its only 4 wires, complete syscon swap meens more bga work. also after syscon swap you need to mary cell to new syscon chip. a lot of work and for what to avoid the chip? the only flaw to this modchip is that for now on some bc consoles (the reasson is not completly specified propably the syscon version) ps2 games goes black screen and stay there untill you exit from from game via ps button.
You don't need to remarry Syscon if you copy the EEPROM. As I mentioned before the modchip doesn't 100% convert the console to be 40nm compatible, it's possible to use the Syscon configuration service to detect the modchip and softlock the system.
 
I'm a proud owner of a CECHA00. I don't want this thing to die on me. Is anyone able to do this chip swap for me? I'm located in Germany.

I'm willing to pay very good money. I will also add 4 additional orbis chips on top for additional testing.

Cheers
 
Yes, they added a new config service packet id on the 304 syscon firmware, the modchip can't emulate that.
No, I meant a system update. So for example, when they release 4.89 could SONY brick frankensteins with the modchip?
nah they stop preventing cfw to be install why bother with this mod? after all its not piracy related
They shouldn't care about the orbis modchip, it doesn't facilitate piracy in any way. All it does is make it possible to fix consoles with more available chips. But when has that stopped SONY from being petty? I don't trust them. They clearly don't want the PS3 to still be operating. All obsolete consoles do from their perspective is undermine current sales. The sooner your PS3 dies, forcing you to buy a PS5 and current games, the sooner they get paid.
 
@RIP-Felix do you know if this 90nm to 40nm can be done without the need of the voltage modification? I'm thinking on "reviving" my old CECHA01 by replacing it's RSX to a 40nm one, but as far as I know, I need another IC for the voltage mod (? .. I may be wrong, I don't know). Can you (or anybody reading this) clarify this to me, please?
 
I'm a proud owner of a CECHA00. I don't want this thing to die on me. Is anyone able to do this chip swap for me? I'm located in Germany.

I'm willing to pay very good money. I will also add 4 additional orbis chips on top for additional testing.

Cheers
sent you a pm
 
@RIP-Felix do you know if this 90nm to 40nm can be done without the need of the voltage modification? I'm thinking on "reviving" my old CECHA01 by replacing it's RSX to a 40nm one, but as far as I know, I need another IC for the voltage mod (? .. I may be wrong, I don't know). Can you (or anybody reading this) clarify this to me, please?
Yes, it'll work. But it over volts the memory and won't last as long as it would otherwise. How long it can last, IDK. @botakompong might know, he makes and installs the chip on a daily basis. I kinda wish he were more active on the forum because he's a wealth of experience.

sent you a pm
No offense intended. This is just a general PSA. You haven't posted that much and I for one would want to see you post a few successful installs before shelling out bank. I am curious about your process, equipment, skills, etc.

@ad-min, you should know this is a very difficult install requiring the highest category of rework skill. You should vet anyone you hire to do this mod work. And they should willingly provide pictures and examples of their body of work to assure you of their competence.
 
Yes, it'll work. But it over volts the memory and won't last as long as it would otherwise. How long it can last, IDK. @botakompong might know, he makes and installs the chip on a daily basis. I kinda wish he were more active on the forum

No offense intended. This is just a general PSA. You haven't posted that much and I would want to see you post a few successful installs before shelling out bank. I am curious about your process, equipment, skills, etc.

@ad-min, you should know this is a very difficult install requiring the highest category of rework skill. You should vet anyone you hire to do this mod work. And they should willingly provide pictures and examples of their body of work to assure you of their competence.

You know... I have more than 20 years working as IT and... almost 15 reballing laptops (or more). You better ask first before be mistaken.

Yeah, never worked with gaming consoles (I did a few x360 for friends/family though), so... what? do I need new rework profiles? ok, no problem, can figure that out. Do not worry for me.

Anyway and finally, you have nooooo ideeeea about for what I pmed she/he for.

No ofense.
 
Last edited:
You know... I have more than 20 years working as IT and... almost 15 reballing laptops (or more). You better ask first before be mistaken.

Yeah, never worked with gaming consoles (I did a few x360 for friends/family though), so... what? do I need new rework profiles? ok, no problem, can figure that out. Do not worry for me.

Anyway and finally, you have nooooo ideeeea about for what I pmed she/he for.

No ofense.
Now you may have my support for free with condition to help others around here when you get time.
 
No, I meant a system update. So for example, when they release 4.89 could SONY brick frankensteins with the modchip?
Yes, I meant it that way. Sony implemented a new function on the 304 syscon. If Sony would release e.g. 4.89 they could check for that syscon function. They could also just check for the soft id and compare it to the RSX version.
I guess they will never do that since they don't even use the new functions.
Yes, it'll work. But it over volts the memory and won't last as long as it would otherwise.
It over volts the Rambus FlexIO core, not the memory. The mod normally also sets a new Core VDD power limit.
 
You know... I have more than 20 years working as IT and... almost 15 reballing laptops (or more). You better ask first before be mistaken.

Yeah, never worked with gaming consoles (I did a few x360 for friends/family though), so... what? do I need new rework profiles? ok, no problem, can figure that out. Do not worry for me.

Anyway and finally, you have nooooo ideeeea about for what I pmed she/he for.

No ofense.
I was just reminding people to be careful and ask questions before exchanging money. That's all. It was not in any way critical of you or your ability. We just haven't seen your body of work here.

I gotta say your reaction to my very tactful (I rewrote it a few times to remove potentially offensive language) and general warning concerns me. I did not say anything negative about you or make any sort of assumption about your experiance or the content of your PM. I even stated that it was not directed at you and no offense was intended. You seem to have read into that the opposite. As if by saying no offence, I meant it...WTF? There is no reason for you become defensive.

Yes, your post count and offer to @ad-min prompted me to make this reminder, but try not to read anymore into that.

Any professional with 20+ years of experiance should agree 100% that people should be careful and ask questions before exchanging money. Especially on internet forums!

Sorry for any confusion. And I look forward to seeing your progress with this mod.
 
It over volts the Rambus FlexIO core, not the memory. The mod normally also sets a new Core VDD power limit.
I think he was referring to the 0.95v VDDR (RSXRam) mod, which requires HW modification to reduce from 1.2v. Not VDDC, which is dynamically set as you say.

My understanding is the 40nm RSX RAM voltage was reduced in accordane with smaller manufacturing process and stability requirements. Also that the voltage is set with resistors internal to the MOSFET driver. That's why SONY replaces that driver with one that can set it with external resistors.
 
He asked me if I could sell him a few orbis chips. The answer is no for now.

I will donate them to anyone offering to do this mod for me though (+additional payment of course).
 
I was just reminding people to be careful and ask questions before exchanging money. That's all. It was not in any way critical of you or your ability. We just haven't seen your body of work here.

I gotta say your reaction to my very tactful (I rewrote it a few times to remove potentially offensive language) and general warning concerns me. I did not say anything negative about you or make any sort of assumption about your experiance or the content of your PM. I even stated that it was not directed at you and no offense was intended. You seem to have read into that the opposite. As if by saying no offence, I meant it...WTF? There is no reason for you become defensive.

Yes, your post count and offer to @ad-min prompted me to make this reminder, but try not to read anymore into that.

Any professional with 20+ years of experiance should agree 100% that people should be careful and ask questions before exchanging money. Especially on internet forums!

Sorry for any confusion. And I look forward to seeing your progress with this mod.

Ummm well, maybe I went to far... I was tired (working at night lately), but you really like to talk too much.

Now you may have my support for free with condition to help others around here when you get time.

If is in my hands, Id love to help.
 
Back
Top