M4j0r
Developer
I don't know much about ps3 development (and gaming consoles in general) but I do have a logic analyzer and I'd love to check what's going on with that chip.
I thought about hooking up my oscilloscope to capture the SPI communication coming off the modchip to see exactly when and what signals it sends. Might be able to see how many bytes of data it sends/receives. A logic analyzer might be more useful.
From my understanding the developer of the modchip doesn't want it to be reverse engineered. We know what it does (modifying the SC <-> RSX communication). You don't even need to reverse it, just have a look at the syscon firmware (that's way easier if you actually want to understand the communication) or just copy the modchip (It's possible to glitch these CPLDs to get the bitstream).If I do had one of those, I could check with my logic analyzer, but I dunno if @lusianaliu would buy a couple of them for me...
I think that if it were possible to make it work swaping RSX+Syscon from a 40nm console to a 90nm and doing the voltage modification... that would be perfect for me. I'm more than ready to sacrifice a couple of slim consoles for my phattys
Syscon does a lot of different things, not only hardware related stuff. Yes, the Syscon used on the 40nm models isn't pin compatible with the older variant but it also doesn't support the older 90nm CELL and 90nm SB.I should check more info about this syscon stuff to know how it works... because, besides giving to cell the initial instructions/configuration (thing I guess it does) does it anything else? (power management?) and, if between syscon versions the pinout is different, wouldn't be a solution to make an adapter board to just solder the 40nm version?
Yes, that's right, the modchip just has more space for patches, we're very limited on Syscon. But it can't patch the Syscon firmware.I've tried different ways of doing with patches in mullion syscon with DeadEnd and help of M4j0r, sandungas. We need more space inside syscon for each rsx or at least for the one is charged. Orbis modchip will do it on fly over spi as auticonfig righ after boot. It is more complex, not a simple line code execution as simple microcontroller.
You don't need to remarry Syscon if you copy the EEPROM. As I mentioned before the modchip doesn't 100% convert the console to be 40nm compatible, it's possible to use the Syscon configuration service to detect the modchip and softlock the system.mod chip is the best way. its only 4 wires, complete syscon swap meens more bga work. also after syscon swap you need to mary cell to new syscon chip. a lot of work and for what to avoid the chip? the only flaw to this modchip is that for now on some bc consoles (the reasson is not completly specified propably the syscon version) ps2 games goes black screen and stay there untill you exit from from game via ps button.