Nascar1243
Member
A few years ago we got our first Cell Overclock on the DECR-1000A thanks to M4j0r and his incredible syscon knowledge. We were able to push the Cell to 4.8GHz, a huge step up from the original 3.2GHz but it wasn't perfectly stable. A few months after that he released some more codes for Mullion and Sherwood and for the last 3 years I've been trying to decrypt those codes to no avail.
Jump to 2026 and Kafuu said he was going to try enabling cell overclocking via his modchip but that's when I noticed something familiar in his codes. So I went back and tried it again and then we had our first cell overclock on Mullion via only syscon, after that Sage took the syscon and decrypted it to figure out where the XDR and Master Clock addresses were, what other values work for what frequencies, among many other things.
With that we had full variable cell overclocking on Mullion with both Cell Core and XDR. But I also wanted to figure out Sherwood as I only knew one of the addresses. Thankfully I figured it out quickly and we also had full overclocking via Sherwood for both Cell Core and XDR. Master Clock is still unknown for Sherwood at the time of writing this but on my L01 I was able to push 4.4GHz which is a huge jump from stock.
Only a couple models are compatible as Sony changed the clock gen on later models, CECHAxx, CECHBxx, CECHCxx, CECHExx, CECHGxx, CECHHxx, CECHJxx, CECHKxx, CECHLxx, CECHMxx, CECHQxx, CECHPxx, and CECH20xx are all compatible with Cell overclocking via syscon so far, for the other models you will have to use the modchip (when that becomes available) for overclocking Cell.
You will need access to syscon UART and a good guide for that is linked here:
Remember you are doing this at your own risk, I am not responsible for what happens to your console at all. This can reduce the lifespan of the cell but since this is such a new concept no long term testing has been done.
Now with that out of the way here are the addresses for Mullion.
x3122 is your Master Clock
x3128 is your Cell Core
x312c is your XDR
Now for Sherwood.
x61 is your XDR
x63 is your Cell Core
All the info you need for what clock speed to go to will be at this link here:
https://github.com/sagemono/cell-xdr-overclocking
If you have any questions you can ask me.
Credit goes to:
Jump to 2026 and Kafuu said he was going to try enabling cell overclocking via his modchip but that's when I noticed something familiar in his codes. So I went back and tried it again and then we had our first cell overclock on Mullion via only syscon, after that Sage took the syscon and decrypted it to figure out where the XDR and Master Clock addresses were, what other values work for what frequencies, among many other things.
With that we had full variable cell overclocking on Mullion with both Cell Core and XDR. But I also wanted to figure out Sherwood as I only knew one of the addresses. Thankfully I figured it out quickly and we also had full overclocking via Sherwood for both Cell Core and XDR. Master Clock is still unknown for Sherwood at the time of writing this but on my L01 I was able to push 4.4GHz which is a huge jump from stock.
Only a couple models are compatible as Sony changed the clock gen on later models, CECHAxx, CECHBxx, CECHCxx, CECHExx, CECHGxx, CECHHxx, CECHJxx, CECHKxx, CECHLxx, CECHMxx, CECHQxx, CECHPxx, and CECH20xx are all compatible with Cell overclocking via syscon so far, for the other models you will have to use the modchip (when that becomes available) for overclocking Cell.
You will need access to syscon UART and a good guide for that is linked here:
Remember you are doing this at your own risk, I am not responsible for what happens to your console at all. This can reduce the lifespan of the cell but since this is such a new concept no long term testing has been done.
Now with that out of the way here are the addresses for Mullion.
x3122 is your Master Clock
x3128 is your Cell Core
x312c is your XDR
Now for Sherwood.
x61 is your XDR
x63 is your Cell Core
All the info you need for what clock speed to go to will be at this link here:
https://github.com/sagemono/cell-xdr-overclocking
If you have any questions you can ask me.
Credit goes to:
- M4j0r - For discovering that CELL can be overclocked in the first place via a DECR-1000A Reference Tool back in 2021.
- Nascar1243 - Figuring out the offets for the CELL clock generator registers
- aomsin2526 - For his CellOCPico project and spearheading the idea for this to be possible without requiring external hardware
- RIP Felix - Attempting different values for the CELL clock generator registers
- villahed94 - Attempting different values for the CELL clock generator registers
- Sampsonay - Attempting different values for the CELL clock generator registers
- gypsy - Attempting different values for the CELL clock generator registers
- RGBeter - Attempting different values for the CELL clock generator registers
- sage - This document and extensive reverse engineering of the syscon firmware
