PS3 Frankenstein PHAT PS3: CECHA with 40nm RSX

Anyone had any luck fixing A01 black screen in PS2 games? I do have the ingame menu and can exit. I dont remeber seeing this on other consoles but when I exit the game the red LED flashes 4 times but no beeps or error codes are present.

First I found a missing cap C6612 which appears to be for the gate control of Q6600 which makes 1.2V_EEGS_VDD. No change
Replace 5301DGB RSX with 5302A1GB No change
One of the rambus chips was cracked all around the die so I swapped that out and no change
Swapped PS2 bridge chip no change
Used different BR drive that plays PS2 games in another console.

Could it have anything to do with me remarrying a BD board?

Doesnt CFW have include a software emulator for PS2 games? How do you enable or disable it?

I only fixed mine by swapping EE/GS. I also could quit through menus. LED didn't flash though. In your case seems there were other problems on the board, be sure to make a thorough visual inspection if anything else happens to be missing. You could also check all the voltages when ps2 game is launched. There was an image of voltage points somewhere in RIp-Felix's posts.

I don't believe bd drive can affect ps2 games only. It would then not work with any games at all .

About the software emu, I think it's got something to do with cobra settings. Someone else might know better.
 
Anyone had any luck fixing A01 black screen in PS2 games? I do have the ingame menu and can exit. I dont remeber seeing this on other consoles but when I exit the game the red LED flashes 4 times but no beeps or error codes are present.

First I found a missing cap C6612 which appears to be for the gate control of Q6600 which makes 1.2V_EEGS_VDD. No change
Replace 5301DGB RSX with 5302A1GB No change
One of the rambus chips was cracked all around the die so I swapped that out and no change
Swapped PS2 bridge chip no change
Used different BR drive that plays PS2 games in another console.

Could it have anything to do with me remarrying a BD board?

Doesnt CFW have include a software emulator for PS2 games? How do you enable or disable it?
i had a CECHA01 console with this issue, my solution was kinda strange at all...., when the console boots ( 45C CELL/36C RSX) ps2 games don't work (black screen) and with some restarts... freezes after a few minutes...(ps2 logo freezes), for some reason i tried syscon fan settings (maybe for some software issues?) and.. worked.., i tried webman 35%-40% fan speeds again.. and.., the issue returned, i noticed that when the console was about... 70-75C, the ps2 works fine, but if the console stays at 60C, ps2 doesn't work.
 
Last edited:
i had a CECHA01 console with this issue, my solution was kinda strange at all...., when the console boots ( 45C CELL/36C RSX) ps2 games don't work (black screen) and with some restarts... freezes after a few minutes...(ps2 logo freezes), for some reason i tried syscon fan settings (maybe for some software issues?) and.. worked.., i tried webman 35%-40% fan speeds again.. and.., the issue returned, i noticed that when the console was about... 70-75C, the ps2 works fine, but if the console stays at 60C, ps2 doesn't work.

Something is failing, so this isn't really a solution. Eventually it will stop booting no matter what temperatures the chip is at. Most likely RSX or EE-GS is failing
 
hi guys, I would like to carry out the 40 Nm RSX gearbox, when reading the Syscon it gives me error A0203010, it seems like a CELL error, can you give me some advice on where to start the repair?
hi guys, updates, I reballed the cpu, in fact I found broken tracks under the cpu, they definitely tried the thermal pad mod, now the ps3 turns on with glod error and black screen, I read the syscon and it doesn't show any errors, do you think the dead cpu could give a glod error?, so I avoid reballing the rsx.
 
Tutorial - Frankenstein Phat PlayStation 3
(How to Swap an unreliable 90nm RSX with a more reliable 65nn or 40nm)​

This is not an upgrade! It's is a path forward for repair when your RSX dies! The process is EXTREMELY difficult and likely to cause damage to the motherboard. There is a high chance your motherboard will be destroyed in the attempt. So it's better to consider performing this ONLY to repair a MB that already has a dead RSX.
If your console is running a FW revision below that which supports your RSX, then the MOD will cause a Green Light Of Death (GLOD)! You can enter safe mode, but can't see any video.
  • 40nm RSX will not work with Firmware below 3.40. It should work from 3.40+, but we have only confirmed it as low as FW 3.55. So 3.55 should be considered the lowest safe FW for the 40nm RSX install.
  • 65nm RSX "should" work with Firmware 3.20, but we're not sure how low you can downgrade. Possibly as low as 2.30, but we don't recommend it!
Why this matters:
  1. You need to check that the console you are installing it on has a compatible firmware revision before performing the mod. Sometimes you can't because the console was YLOD and you are replacing the RSX to repair it. If that console was running a FW revision that's too low then you may get a GLOD. In this special case, you will need to use a Hardware Flasher to install a supported Firmware onto the NAND/NOR. Alternatively you can use a Factory Service Mode (FSM) JIG, but YOU MUST BE SURE THE FW IS NOT HIGHER THAN 3.55!!! Otherwise, you will be stuck in Factory Service Mode! Once you confirm the FW is too low, you can used the FSM JIG to update to 3.55, but DO NOT UPDATE TO 3.56 OR HIGHER! If you do you'll be stuck in service mode!!!
    • Don't assume that the GLOD is caused by the FW being too low. You need to be sure! Use the Southbridge UART output to see what FW revision is installed! If it's 3.55 or higher then the RSX should be working and this doesn't explain your GLOD. It's likly the reflow failed or the RSX you installed is dead.
  2. OtherOS was removed after Firmware 3.20. Some people want to downgrade to 3.20 in order to enable it. If that's the case then you can't use the 40nm RSX. It isn't supported! The 65nm RSX should be, however. So that's your hucklberry.
Many thank to @mathieulh and @vyktormvmpay25 for bringing this to my attention and for helping me get the above information correct.
Let's face it, the launch model PS3's are awesome! Whether you have the A/B models with Full Hardware based Backwards compatibility with PS2 games or the C/E models with Hybrid backwards compatibility, these are the most desirable consoles to own. However, due to their high launch price, SONY only sold 5.63 Million Backwards Compatible PS3's (models A - E). But there's a catch - the Dreaded Yellow Light of Death (YLOD)!

Sadly these early "Phat" model PS3's are dropping like flies! Their hot 90nm Graphics Processor, the "Reality Synthesizer (RSX)," has a flawed thermal design. You can read more about it here, but this post isn't about the problem, it's about the solution! Suffice it to say that you beloved Backwards compatible PlayStation 3 is going to crap out on you at some point, no matter what you do to prolong the inevitable. For the longest time you had to replace the 90nm RSX with another 90nm RSX...if you could find a working one! And that's the problem!

SONY sold 14.41 million PS3's with 90nm RSXs. G & H models for example have a 90nm and are not backwards compatible. So they have been a source of working 90nm RSX's for those who are willing to sacrifice a working console for it's GPU. But those consoles also go bad right and left. So the supply of 90nm RSX's has been steadily shrinking. And it's a crap shoot how long that used 90nm RSX will last! At one time there may have been "New Old Stock (NOS)" 90nm RSXs produced, but never installed. However, those were all bought up by reballers long ago. So now, 90nm RSXs are in short supply and those that are available are either bad or plucked from a working, albeit less desirable console - killing the living to resurrect the dead (Technomancer non-sense). It ain't natural!

That's just skirting the issue though. It's a war of attrition! Eventually the supply of 90nm RSX's will be gone. Then what?

Enter the Frankenstein Phat Playstation 3....

Around 2012 SONY's hardware and repair division had a problem. Early model PlayStation 3's were failing with bad RSXs. However by this time the 90nm RSX was out of production and not available anymore. Later model Phats with 65nm RSXs and then Slim models with 40nm RSXs were being manufactured. So SONY repair technicians had to find a way to replace the failing 90nm RSX with a more reliable, but really more available, 65nm RSX. Then again with 40nm RSX's.

About 2 years ago the OP started this thread. That's when we first became aware of he fact SONY had done this. Of course we were super stoked! The idea that we might be able to reverse engineer this method meant that we could finally resurrect and save these desirable consoles. But more than that, make it as reliable as the slim model!

A year went by. We knew what Sony had done, but hadn't been able to replicate the mod yet. Then we learned about the ORBIS modchip! 4-5 years before we even learned it was possable to swap a 90nm, @botakompong's brother "Kiaw" made a modchip that allows it! He and @botakompong could interchange 90nm, 65nm, and 40nm RSX's by just installing a chip and moving a few resistors! That wasn't possible before, because the console would recognize there wasn't a 90nm chip and refuse to boot (YLOD). The mod chip spoofs the RSX_ID and tricks the system into booting. An amazing accomplishment way before any of us had any idea this was going on!

Unfortunately, Kiaw passed away a few years ago and we never got to pick his talented brain about the modchip. His brother @botakompong has carried on the torch selling/installing the modchip out of his shop in Jakarta, Indonesia. @botakompong had been offering this service for years before we knew it was possible.

The ORBIS modchip made the swap even easier than SONY's method, which at the time we thought required replacing the SYSCON with a variant flashed with custom firmware. That's on top of the resistor and voltage mods. Kiaw's ORBIS modechip doesn't require any changes to the SYSCON at all! So it's an easier install.

We thought the ORBIS modchip was the ultimate solution! There are 21.5 Million 65nm RSXs in J -20xx model PS3s and at least 30 million 40nm RSXs in 21xx - 40xx models! And we can still source NOS 40nm RSX's! For the longest time we thought that those RSX's weren't compatible with the Backward Compatible models. They're pin compatible, yes. But they would just error in BitTraining with A0403034 if you tried. The SYSCON could not train the RSX. That's wht the ORBIS mod fixed! It allows the SYSCON to train a 65nm or 40nm RSX and get the system to boot!

There are many, MANY more Slim PS3's than there are BC models. This modchip makes sourcing replacement RSX's for BC PS3's sustainable. Every single BC model could easily get a 40nm RSX, since there are so many more slims out there! We don't have to throw Backward compatible PS3's away anymore!

Here is a good video summary of the above, for those interested in the details. @DeadEnd explains what SONY did in their official refurbished boards and summarizes our struggle to understand. Up to this point in the story...

Fast forward another year and @vyktormvmpay25 and @M4j0r made a MAJOR breakthrough! @M4j0r had sucessfully replicated SONY's method, but improved upon it! We thought that it would require a new SYSCON chip flashed with a special firmware to accomplish. That made it much more difficult than the ORBIS modchip. But @M4j0r's method only required a couple of writes to the eeprom over UART!

What this means is that it's now possible to replicate SONY's method! And more than that, we don't even need to flash custom firmware on a special variant SYSCON chip! We can leave the stock SYSCON on the on the board. We only need to write a few changes to the EEPROM over UART. That make this method cheaper and easier than the ORBIS mod! WOW!

That's the backstory. Now for the tutorials...

Note:
  • I don't see the appeal of doing this mod to any console other than the Backwards compatible models, but if for some reason you want to install a 65nm or 40nm RSX on a non-BC model, you can. I'm just not familiar with those model revisions. They may follow the same general procedure or be very different. It's up to you to do your homework.
  • The Tutorial below is written for COK-001 and COK-002 Motherboards. You will need to adapt it for your model, if you choose to do it on a different model MB. You have been warned!
  1. Remove R2054 & R2001*. They are not needed anymore.
    • Note: R2001 is only present on COK-001 motherboards. It is not populated on a COK-002 Motherboard. If you have a COK-002 Motherboard, you don't have to do anything to R2001.
    • Note 2: In official SONY refirbs they replace R2002 (49.9 ohm) with a 47k resistor. However, I don't understand why. It works fine leaving the 49.9 ohm in place. Removing R2001 effectively cuts off +1.5V_RSX_VDDIO to CGCLKI. The only thing I can remotely think of is that they wanted to increase the resistance to GND from 49.9 to 47k. Perhaps to prevent noise or shorting? But then, why not just remove it entirely? IDK
  2. Scratch the GND plane next to R2054 to expose bare copper. We will use this to attach R2153. View attachment 36347
  3. Move R2153 (10kΩ) to the lower pad of R2054. Solder it diagonally to the GND pad you made in step 2. Confirm with a multimeter that the upper pad is not bridging, that it is isolated.View attachment 36348
  1. Remove the 90nm RSX and replace with either a 65nm or 40nm RSX. This is a very difficult process and is only recommended for experts. It takes great skill and confidence in your equipment.
nos-rsx-1-jpg.33655
nos-rsx-2-jpg.33651
nos-rsx-3-jpg.33652


Masking the Bottom side of board to protect tokins, CPU and resistor mod...
mask-underside-jpg.34131


Masking top side to prevent Flux from dripping through the Thermal Vias onto the preheater and catching fire! It also keeps the surrounding SMD's in place. However, the adhesive on the aluminum tape does leave a gross sticky residue that's harder to clean off. I think the trade off is worth it, but everyone's process is different.
mask-rsx-jpg.34130


This is my Ghetto Reballing setup. I don't recommend it, but it does work for me. It took alot of practice, and requires more babysitting than a proper SMD rework station, but can yield good result with practice. It cost me about $350 total to put together. And I've ruined 3 consoles learning to use it (so far)!
ghetto-reflow-setup-jpg.34129


Prevent drafting air currents underneath the board...
prevent-drafts-jpg.34126


Beyond this, I'm not going to bore you with the details. If you are contemplating this, you should already be familiar with reballing. To finish off show an tell, here's a Frankie with a 40...
View attachment 36454
The SYSCON is expecting the original Model RSX to be installed. You can replace the RSX with the same model no problem. The SYSCON sees the same model is there and will go about it's merry business. However, now that you have replaced it with a 65nm or 40nm RSX, it will see there's an incompatible RSX model and loose it's mind!

We have to convince the SYSCON to accept the new RSX. There are 2 ways to do this.
It works by spoofing the RSX_ID so the SCSCON believes there is still a 90nm RSX installed. As of February 2022 you can buy these from @David Rainer if you are in the United States. He purchased 100 of them to make them easily available to the community. Otherwise, @feel2death can hook you up.
View attachment 36353

Note:
  • You will get a 3034/4xxx error if you do not hook the ORBIS up right. If you did it right, try another ORBIS chip. You may have damaged it or it may be defective.
Connect a UART adapter to the SYSCON. You will need to write some changes to the eeprom so the SYSCON can train the new RSX. If you don't already know how to do this, here is a SYSCON Tutorial.

The following sections contain the commands you will need to write to swap any 65nm or 40nm RSX into any motherboard revision. First, find the section that corresponds to the RSX you want to swap into your motherboard. Make sure your motherboard revision and SYSCON model number matches that section! Then write the commands listed there. Make note of the address where you need to fix the checksum. It's in the bullet point beneath each section.

There is an example of how to fix the checksum at the end.
________________________________________________________________
PS3 Models
: CECHAxx, CECHBxx, CECHCxx, CECHExx, CECHGxx, CECHHxx, CECHJxx, CECHKxx, DECR-1400
Motherboards: COK-001, COK-002, SEM-001, DIA-001, DIA-002, DEB-001
Syscons: CXR713120-201GB, CXR713120-202GB, CXR713120-203GB, CXR714120-301GB, CXR714120-302GB
65nm RSX Series (with IHS): CXD2982xxx, CXD2991xxx
w 3242 03 A2 03 B0 07 71
w 3254 21 E8
w 348B 88
w 34AF 88
40nm RSX Series: CXD5300xxx, CDX5301xxx, & CXD5302xxx
w 3242 03 61 82 80 01 91
w 3254 21 EC
w 348B 8B
w 34AF 8B
  • Fix checksums at addresses 32FE and 34FE
  • Note: "EC" may not work with all 40nm RSX's. If you still get an error, try "EB." It has been noted that the CXD5300GGB needed the EB command
________________________________________________________________
PS3 Models
: CECHLxx, CECHMxx, CECHPxx, CECHQxx, CECH-20xx
Motherboards: VER-001, DYN-001
Syscons: SW-301, SW-302, SW2-301
40nm RSX Series: CXD5300xxx, CXD5301xxx, & CXD5302xxx
w 182 03 61 82 80 01 91
w 194 21 EC
w 3AC 8B
  • Fix checksum at address 7FE
  • Note: "EC" may not work with all 40nm RSX's. If you get a 3034 error (often with 4002 and a BitTraining FlexIO_ID error), try "EB." It has been noted that the CXD5300GGB needed the EB command.
________________________________________________________________
PS3 Models
: CECH-21xx
Motherboards: SUR-001
Syscons: SW2-302
40nm RSX Series (without IHS): CXD5302xxx
w 182 03 61 82 80 01 91
w 194 21 EC
  • Fix checksum at address 7FE
  • Note: "EC" may not work with all 40nm RSX's. If you get a 3034 error (often with 4002 and a BitTraining FlexIO_ID error), try "EB." It has been noted that the CXD5300GGB needed the EB command.
    ________________________________________________________________
PS3 Models: CECH-25xx, CECH-30xx
Motherboards: JTP-001, JSD-001, KTE-001
Syscons: SW2-303, SW3-301
40nm RSX Series (without IHS): CXD5302xxx
w 224 21 EC
  • Fix checksum at address 7FE
  • Note: "EC" may not work with all 40nm RSX's. If you get a 3034 error (often with 4002 and a BitTraining FlexIO_ID error), try "EB." It has been noted that the CXD5300GGB needed the EB command.
________________________________________________________________
PS3 Models
: CECH-40xx
Motherboards: MPX-001, MSX-001
Syscons: SW3-302
40nm RSX Series: CXD5300xxx, CXD5301xxx, & CXD5302xxx
w 224 21 EC
  • Fix checksum at address 7FE
  • Note: "EC" may not work with all 40nm RSX's. If you get a 3034 error (often with 4002 and a BitTraining FlexIO_ID error), try "EB." It has been noted that the CXD5300GGB needed the EB command.
________________________________________________________________
Note: These changes will cause a checksum mismatch. You need to Fix the checksums at the addresses listed in the bullet point beneath each section above.

Here is an example of me fixing the checksum at address 32FE on a COK-001 after a 40nm swap :
>$ eepcsum
eepcsum
sum:0xee10
Addr:0x000032fe should be 0xffff64a7
Addr:0x000034fe should be 0x7115
Addr:0x000039fe should be 0x0f38
Addr:0x00003dfe should be 0x00ff
Addr:0x00003ffe should be 0x00ff
You can see the line after "sum:0xee10" says that the checksum at address "32fe" should be "0xffff64a7." You can ignore the "ffff." 64a7 is what I needed to write to fix the checksum, but yours may be different. So you need to read what your checksum should be and write that.

However, endian byte swapping requires us to write it "a7 64." They are just flipped around...

>$ w 32fe a7 64
w 32fe a7 64
w complete!
[mullion]$​

I command I needed to write was "w 32fe a7 64." It completed successfully! I then used the eepcsum command again to see if there were any more checksum mismatches.

>$ eepcsum
eepcsum
Addr:0x000032fe should be 0x64a7
Addr:0x000034fe should be 0x7115
Addr:0x000039fe should be 0x0f38
Addr:0x00003dfe should be 0x00ff
Addr:0x00003ffe should be 0x00ff
>$​

You can see this time the "sum:0xee10" line disappeared. That means I had no mismatches. I have successfully written the change to enable the new 40nm RSX and fixed the checksum so the console will boot. However, that's only because I didn't make any changes at address 34FE. You will need to repeat this procedure one more time for address 34FE to fix there checksum you change there. But the procedure is the same.

Note: You can choose either option, but you must choose 1 of the 2 methods or you will get a YLOD with SYSCON errors 3034/4002.
If replacing with a 40nm RSX, VDDR needs a voltage mod to reduce the nominal 1.2V to 0.95V. For a 65nm RSX, VDDR needs to be reduced to 1.0v. Both 40nm and 65nm will function without doing this, but reduce it's lifespan. We want the lifespan of the RSX to be as long as possible, that's the whole point! So you should do this.

There are 2 ways to accomplish this for the 40nm (1.2v --> 0.95v). For 65nm (1.2v --> 1.0v), you'll have to use option 2.
  • NOTE: If either of these fail and the RSX_VDDR voltage does not form, is short, or not soldered correctly, you will get an A0403034 (often with A0404002) and a BitTraining FlexIO_ID error. This is the same error you would get if you input the wrong SYSCON training data or did not do so at all. If you perform the VDDR voltage mod before testing the console 1st, it can be hard to know if the SYSCON training went wrong, or the voltage mod did. Therefore it's advisable to train the syscon to accept the new RSX 1st and then test to see if it worked, before continuing to the voltage mod. Just so you know that the replacement is good and training is successful. Then if you have an issue during the voltage mod, you know it's related to the voltage mod, not the RSX training or soldering.
  1. @botakompong's method works and is easier. But it's also hackier. It only works on 40nm RSX.
    We need to remove the Voltage regulator that supplies VDDR from a slim model that has a 40nm RSX. The Regulator you are looking for will be in the same location next to the RSX. It's the only one so you can't miss itView attachment 36349
    1. Lift Pins 2, 3, and 4 so they will be floating.
    2. Remove Q6200 from the phat and replace it with the Regulator you harvested from the slim. Pins 2, 3, & 4 should be floatingView attachment 36345
    3. Bridge Pins 2 & 3 and run a jumper wire to C6202 as seen in the image above. Pin 4 should be floating.
    4. This will will reduce the voltage to 0.95V and extend the operating life of the 40nm RSX. But this IC only outputs 0.95v. I can't be used on a 65nm that needs 1.0v.
    Note: This method dissconnects the SYSCON's control of this voltage. IC6200 is a MOSFET controller that drives Q6200 (The MOSFET you removed). SYSCON enables the controller, which in turn gates the MOSFET. By removing the MOSFET and replacing it with a Voltage regulator, the SYSCON in non the wiser. It's still connected to the controller and assumes all is fine.

    The Voltage regulator bypasses the controller. It doesn't wait to be turned on by the controller. It regulates as soon as it is powered. I have done some voltage testing and found that VDDR is one of the earliest voltages enabled. It turns on almost as soon as it's supply voltage is. So it just so happens that removing the control doesn't matter in this case. In general, it would be a bad idea, because voktages are supposed to be sequenced. Brought up in order. It just doesn't matter here.

    That's what I mean by it works, but is hacky.​
  2. SONY's Method is cleaner and more proper, but requires difficult micro-soldering.
    1. SONY's approach was to replace IC6200 (BD3520 N-Channel MOSFET controller) with a model that allows user selected output voltage using external resistors (BD3504). IC6200 drives MOSFET Q6200. So SONY's method is better because it doesn't circumvent the circuit protection and control. But it works for both the 40nm and 65nm RSX. You just need to use different resistors. View attachment 36588
    2. Here are where you can harvest BD3504's on a COK-00X motherboard. Also the locations of 3.9k, 2.2k, and 4.7k resistors for the voltage mods Myself and @DeadEnd calculated. They are not exactly equal to what SONY did, but they are close enough to not matter.
    3. Replace BD3520 with BD3504 and populate a few resistors to Set Vout to approximately 0.95 Volts (for 40nm RSX) or 1.0v (for 65nm RSX).
      • Math:
        • R1 = R6216 (3900) = VFB/GND
        • R2 = R6222 (1800) = VFB/VS
        • R1'= R6214 (3900) = VD/GND
        • R2' = R6219 (1800) = VD/Vin
      • Vout = VFB ( [R1' + R2] / R1' ), where VFB is 0.65v.
        • Vout 40nm RSX = 0.65 ( [3900+1800] / 3900) = 0.95v_VDDR
        • Vout 65nm RSX = 0.65 ( [3900 +2100] / 3900) = 1.00v_VDDR
      • SONY's method above works well, but you need to buy resistors for it to work, since 1.8k and 2.1k resistors can't be found on COK-00X motherboards. @DeadEnd and I have calculated the following resistor networks to come close, but with the added advantage that all the resistors can be harvested from COK-00X donor boards.
        • Vout 40nm RSX = 0.65 ( [4.7k+2.2k] / 4.7k) = 0.951v_VDDR
        • Vout 65nm RSX = 0.65 ( [3.9k+2.2k] / 3.9k) = 1.02v_VDDR
SONY Adjusted the Power Good Low Voltage Threshold in some of their Frankenstein Phat PS3s. My hypothesis is SONY did this to reduce the frequency of 1001 and 1002's errors, which can be caused by bad TOKINS (among other VRM related issues). That would explain why they did it to the buck controllers for both the CPU and GPU. A sort of admission of guilt that they either set it too aggressively or were compensating for bad NEC/TOKINs, without replacing them.

The benefit is reduce the likelyhood that failing NEC/TOKIN's cause a YLOD. Essentially, it allows more voltage ripple into the CELL and RSX before triggering an error. Replacing aged bulk filter capacitors certainly works, but just because replacing NEC/TOKIN works doesn't mean that's the only way to prevent a YLOD.

Power good low voltage threshold protects the system from instability. Evidently, SONY repair technicians decided it was "preferable " (for them) to lower it in some of these officially refurbished consoles.

Vid pins VID0-5 on IC6201 and IC6103 (RSX & CELL Buck controllers respectively) form a 6-digit code corresponding to the Vout No load setpoint. Power Good Vmin and Vmax thresholds are relative to that set point. With the stock COK-00X (A - E models) voltage divider values (15K and 20k), Vmin = -163mV. Vmax is always +100mV. The Vout voltage cannot deviate more than that. If it does power good goes low and the SYSCON will error.



In some official SONY refurbished consoles, new resistor values (27K and 10K) change Vmin = -400mV. So the Low Voltage threshold is now more than twice as low, allowing much more voltage ripple before it triggers an error.

It is my opinion this modification is harmful, not proper. Just because SONY authorized service center performed this "repair" doesn't mean it's a good idea. I think SONY technitions chose to go this route on some consoles, rather than replace the NEC/TOKINs. Perhaps because they were expensive or unavailable, but more likely because they are very difficult to replace without risking damage to the board.

I believe it is irresponsible to allow more ripple/noise to enter the processors before the SYSCON registers an error. That is lazy and will cause the console to die sooner! The real solution to bad capacitors is to REPLACE THEM! By way of analogy, "if the check engine light on your car is on, this hack is like unplugging the bulb instead of getting the car serviced!" You didn't fix the problem, you disabled the warning!

If you choose to perform this hack, you'll need to figure it out on your own. It will force you to become somewhat familiar with what I'm talking about. Perhaps you'll rethink your decision. I will not help you any further with this hack, because it believe it does more harm to the console and any future owner, than good. If you can't figure it out without help, good! You shouldn't be performing this anyway!

Shame on SONY for charging customers the refurbishing fee, only to disable a safety feature that protects much more critical components, without which the console is truly unfixable. Killing the GPU and CPU to avoid a recap is irresponsible and unprofessional. If not libelous!


Hey Felix.
Thanks for this information it's very valuable. I do have spare motherboards but instead of harvesting the 4.7k and 2.2k resistors i'd prefer just to buy like 100 each of the 3.9k and 1.8k resistors. Do you know the watts and tolerance of each resistor by any chance? EG:

1.8 kOhms ±5% 0.25W, 1/4W Chip Resistor 1206

Or does it not matter just needs to be the specific value 1.8k?
 
Something is failing, so this isn't really a solution. Eventually it will stop booting no matter what temperatures the chip is at. Most likely RSX or EE-GS is failing
yeah... but idk if the RSX was bad or the EE-GS itself, ps3 games worked with no issues, but the ps2 games freezes or in some cases the PS2 logo freezes. the only way to play ps2 was to set syscon fan settings and keep the console at 70C. Unfortunately ''no-ps2'' is a very annoying issue and its really hard to find a solution.
 
Hi guys, I continue my repair from the last post, now the console starts but with a black screen GLOD error, I think the mobile CPU is knocked out, I wonder if it can be replaced with another CPU?
 
Last edited:
Anyone had any luck fixing A01 black screen in PS2 games? I do have the ingame menu and can exit. I dont remeber seeing this on other consoles but when I exit the game the red LED flashes 4 times but no beeps or error codes are present.

First I found a missing cap C6612 which appears to be for the gate control of Q6600 which makes 1.2V_EEGS_VDD. No change
Replace 5301DGB RSX with 5302A1GB No change
One of the rambus chips was cracked all around the die so I swapped that out and no change
Swapped PS2 bridge chip no change
Used different BR drive that plays PS2 games in another console.

Could it have anything to do with me remarrying a BD board?

Doesnt CFW have include a software emulator for PS2 games? How do you enable or disable it?
I have same problem with my CECHB (NTSC-J) 40nm frankenstein console. Only difference is that i am not able to open ingame menu and need to force shutdown console. I cannot see white ps2 logo, just black screen. However, I am able to sync controller. Could it be also bad EE based on these symptoms? PS3 games working normal etc.

I also tried to set netemu in the webman settings and after that ps2 games working perfectly. When I am running default hardware settings ps2 isos or ps2 game discs not working.

I am considering to replace EE GS and CXD9208 ics. Any thoughts?
 
Last edited:
Are you trying to play a European game by chance? If so try turning off the PS2 upscaler. If not, try instilling the latest Evilnat CFW again as it might cause your PS3 to have issues going into PS2 mode if you mess around with different emulator configs with say Ultimate Toolbox

yeah... but idk if the RSX was bad or the EE-GS itself, ps3 games worked with no issues, but the ps2 games freezes or in some cases the PS2 logo freezes. the only way to play ps2 was to set syscon fan settings and keep the console at 70C. Unfortunately ''no-ps2'' is a very annoying issue and its really hard to find a solution.

Yeah it's a pain. It seems to be a CELL issue on my console. Maybe it's somehow not providing enough power to the EE at low temps? Netemu self works perfectly at all temps so no issue there and the EE chip is fine with no errors in syscon about it at least.
 
Last edited by a moderator:
hi guys, updates, I reballed the cpu, in fact I found broken tracks under the cpu, they definitely tried the thermal pad mod, now the ps3 turns on with glod error and black screen, I read the syscon and it doesn't show any errors, do you think the dead cpu could give a glod error?, so I avoid reballing the rsx.

Most likely if you read uart from SB, it might show that the system is booted. Then it sounds sounds like rsx issue.
 
Molto probabilmente, se si legge uart da SB, potrebbe mostrare che il sistema è avviato. Quindi suona come un problema rsx. [/CITAZIONE]
when I try to turn on the Ps3 from UART, it shows no error.

here's what it shows when I boot the Ps3 from UART.

>$ AUTH
Auth successful
Press Ctrl+C to exit
>$ bringup
bringup
[SSM] state: 0000 -> 0101
Bringup Mode #0 (0xFF)
[SSM] ssmCb_OnStartingBePowOn() called.
[SSM] First Boot.
[SSM] Bringup mode : syspm_stat=00000000/00000000
[POWSEQ] PowerSeq_Setup called.
[SSM] state: 0101 -> 0201
[POWSEQ] AV Backend Setup
[SSM] state: 0201 -> 0102
[SSM] state: 0102 -> 0202
[SSM] state: 0202 -> 0103
[SSM] state: 0103 -> 0203
[SSM] ssmCb_BeforeBeOn() called.
[SSM] state: 0203 -> 0104
Psbd_SbTransMode_Half:0x21e2
Press Ctrl+C to exit
>$
 
Last edited by a moderator:
I have same problem with my CECHB (NTSC-J) 40nm frankenstein console. Only difference is that i am not able to open ingame menu and need to force shutdown console. I cannot see white ps2 logo, just black screen. However, I am able to sync controller. Could it be also bad EE based on these symptoms? PS3 games working normal etc.

I also tried to set netemu in the webman settings and after that ps2 games working perfectly. When I am running default hardware settings ps2 isos or ps2 game discs not working.

I am considering to replace EE GS and CXD9208 ics. Any thoughts?
As I know it is RSX. As I have one Cecha00 40nm with ps2 black screen, so I can sync controller, open ps3 menu and exit to xmb
 
what does this error indicate, dead cell?

>$ bestat
[SSM] state: 0104 -> 0204
[SSM] state: 0204 -> 0105
[SSM] state: 0105 -> 0400
(PowerOn State)
[SERV NVS] READ CMD
Boot Loader SE Version 1.6.0 (Build ID: 2040,21378, Build Data: 2007-04-17_20:46:43)
Copyright(C) 2006 Sony Computer Entertainment Inc.All Rights Reserved.
[SERV SETCFG] XDR (CH0,CH1) ASSERT
[SERV SETCFG] XDR (CH0,CH1) DEASSERT
[ERROR]: 0xb0002001 (FATAL) XDR Link not initilized.
ITC_DUMP000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
PTC_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
MIC_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
XIO_DUMP000100020009000002070000036f0000000000160000000000000208000710e109410000000f000f00200000a08000080001e10f000008540c540000000000010bad000000000000000000000000000c000c000c000c00580058005800580000000000000000007f007f007f007f4438
Press Ctrl+C to exit
>$
 
what does this error indicate, dead cell?

>$ bestat
[SSM] state: 0104 -> 0204
[SSM] state: 0204 -> 0105
[SSM] state: 0105 -> 0400
(PowerOn State)
[SERV NVS] READ CMD
Boot Loader SE Version 1.6.0 (Build ID: 2040,21378, Build Data: 2007-04-17_20:46:43)
Copyright(C) 2006 Sony Computer Entertainment Inc.All Rights Reserved.
[SERV SETCFG] XDR (CH0,CH1) ASSERT
[SERV SETCFG] XDR (CH0,CH1) DEASSERT
[ERROR]: 0xb0002001 (FATAL) XDR Link not initilized.
ITC_DUMP000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
PTC_DUMP0000000009ce0a2e000000000a730ad9000000000a850aed000000000a770ae30000000009c70a2d0000000009d70a360000000009d00a30000000000a820ae60000000000000000000000000a6a0ad4000000000a630ace00000000099b0a06000000000a620aca0000000009a80a0f0000000009980a040000000000000000000000000a710ad100000000000000000000000009ae0a0f00000000099009f9000000000a150a8300000000098309f100000000097909e700000000098709ec0000000009a80a0d000000000a090a720000000000000000000000000a050a6d000000000a090a730000000009b40a15000000000a2a0a930000000009a80a0a000000000a2a0a8b000000000a290a8c000000000a2d0a9600000000000000000000000009bb0a22000000000a4b0ab2000000000a180a8800000000099209fb000000000a3a0aa4000000000a340a9c0000000009b00a1300000000000000000000000000000000000000000a330aa300000000000000000000000009cc0a2e000000000a410aaa0000000009ae0a140000000009c70a2b0000000009a70a0e0000000009970a0500000000000000000000000009d40a3a0000000009aa0a0e000000000a570ac5000000000a530abc00000000099709f90000000009a109fc00000000099f0a04000000000a580ac60000000000000000000000000a730adc000000000a4d0ab90000000009d00a36000000000a720ae00000000009e50a470000000009d60a3a000000000a680ace000000000a780ae20000000000000000
MIC_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
XIO_DUMP000100020009000002070000036f0000000000160000000000000208000710e109410000000f000f00200000a08000080001e10f000008540c540000000000010bad000000000000000000000000000c000c000c000c00580058005800580000000000000000007f007f007f007f4438
Press Ctrl+C to exit
>$
Corner of the cell to xdr memory damaged, or need to reball if not scalped yet (do scalp after reball, cause if you dont have exp. It will be difficult to reball)
 
Back
Top