brad-lin / FreePSXBoot

Exploit to allow loading arbitrary code on the PSX using only a memory card (no game needed)
MIT License
614 stars 46 forks source link

Unsupported bios version 2.1 A34802C0 SCPH-7000 #124

Closed chris-ukk closed 5 months ago

chris-ukk commented 5 months ago

IMG_20240617_182145

SCPH-7000 japanese console , but doesnt have a region locked bios. mayumi v4 if fitted and programmed by me , works fine all region Console is odd SCPH-7000 But has bios 2.1 with a CRC that doesnt match anything A34802C0

booting the exploit does nothing , loading unirom from disk doesnt have the bios as of 8.0k either

nicolasnoble commented 5 months ago

Can you dump this bios?

chris-ukk commented 5 months ago

yes im on it , wont be long

chris-ukk commented 5 months ago

IMG_20240617_193910 IMG_20240617_193927

bios chip doesnt have anything on it other than SE-55 , is that normal ? Dump.zip

ramapcsx2 commented 5 months ago

No, it's not. This is very curious indeed!

chris-ukk commented 5 months ago

The shielding cut and missing makes me think it's a bios hack from back in the day . No need to be in that area for the modchip ..it had a 3 wire mod installed . With the wobble signal cut on the board . Can see that just above the mod in there now where I had to fix the cut .

nicolasnoble commented 5 months ago

This bios is a tiny change from the bios with the CRC32 aff00f2f:

--- "Playstation -b/Redump Sony PlayStation - BIOS Images (21) (v2007-09-30) [Region Free_PSX_1999]/ps-21a.bin.hex" 2024-06-17 13:13:11.756807372 -0700
+++ bios.bin.hex    2024-06-17 13:13:22.952789188 -0700
@@ -1,5 +1,5 @@
 00000000  13 00 08 3c 3f 24 08 35  80 1f 01 3c 10 10 28 ac  |...<?$.5...<..(.|
-00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
+00000010  00 00 00 00 88 0b 08 24  80 1f 01 3c 60 10 28 ac  |.......$...<`.(.|
 00000020  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
 00000030  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
 00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
@@ -60,7 +60,7 @@
 000003b0  01 a0 03 3c 60 c1 63 24  00 00 40 ac 04 00 42 20  |...<`.c$..@...B |
 000003c0  2b 08 43 00 fc ff 20 14  00 00 00 00 1f 80 1d 3c  |+.C... ........<|
 000003d0  00 ff bd 37 01 a0 1c 3c  f0 0f 9c 27 21 f0 a0 03  |...7...<...'!...|
-000003e0  80 0b 08 24 80 1f 01 3c  60 10 28 ac 02 00 08 24  |...$...<`.(....$|
+000003e0  88 0b 08 24 80 1f 01 3c  60 10 28 ac 02 00 08 24  |...$...<`.(....$|
 000003f0  60 00 08 ac 00 00 02 24  64 00 02 ac ff 00 08 24  |`......$d......$|
 00000400  80 1f 09 3c 68 00 08 ac  00 1c 29 35 80 01 20 a5  |...<h.....)5.. .|
 00000410  82 01 20 a5 84 01 20 a5  b1 1b f0 0b 86 01 20 a5  |.. ... ....... .|

So you should be able to use this version of the exploit.

chris-ukk commented 5 months ago

Thank you👍

On Mon, 17 Jun 2024, 21:17 Nicolas Noble, @.***> wrote:

This bios is a tiny change from the bios with the CRC32 aff00f2f:

--- "Playstation -b/Redump Sony PlayStation - BIOS Images (21) (v2007-09-30) [Region Free_PSX_1999]/ps-21a.bin.hex" 2024-06-17 13:13:11.756807372 -0700 +++ bios.bin.hex 2024-06-17 13:13:22.952789188 -0700 @@ -1,5 +1,5 @@ 00000000 13 00 08 3c 3f 24 08 35 80 1f 01 3c 10 10 28 ac |...<?$.5...<..(.| -00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| +00000010 00 00 00 00 88 0b 08 24 80 1f 01 3c 60 10 28 ac |.......$...<.(.| 00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| @@ -60,7 +60,7 @@ 000003b0 01 a0 03 3c 60 c1 63 24 00 00 40 ac 04 00 42 20 ***@***.*** | 000003c0 2b 08 43 00 fc ff 20 14 00 00 00 00 1f 80 1d 3c |+.C... ........<| 000003d0 00 ff bd 37 01 a0 1c 3c f0 0f 9c 27 21 f0 a0 03 |...7...<...'!...| -000003e0 80 0b 08 24 80 1f 01 3c 60 10 28 ac 02 00 08 24 |...$...<.(....$| +000003e0 88 0b 08 24 80 1f 01 3c 60 10 28 ac 02 00 08 24 |...$...<.(....$| 000003f0 60 00 08 ac 00 00 02 24 64 00 02 ac ff 00 08 24 |......$d......$| 00000400 80 1f 09 3c 68 00 08 ac 00 1c 29 35 80 01 20 a5 |...<h.....)5.. .| 00000410 82 01 20 a5 84 01 20 a5 b1 1b f0 0b 86 01 20 a5 |.. ... ....... .|

So you should be able to use this version of the exploit.

— Reply to this email directly, view it on GitHub https://github.com/brad-lin/FreePSXBoot/issues/124#issuecomment-2174347975, or unsubscribe https://github.com/notifications/unsubscribe-auth/BJBJ3LZ5ACQK5RIKGPC4HLDZH4767AVCNFSM6AAAAABJOOBK66VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCNZUGM2DOOJXGU . You are receiving this because you authored the thread.Message ID: @.***>