Tonyhax International: Backup Loader For All Japanese, USA, and PAL PS1 Consoles/Early PS2 Consoles + GameShark Flasher

[alexfree]

Tonyhax International is the first universal softmod that works on all regions of Playstation 1 consoles, and all regions of PS2 consoles up to the SCPH-39000. Building off of the original Tonyhax, Tonyhax International includes even more features and capabilities then it's predecessor.

The biggest new feature is the Tonyhax International ROM (https://alex-free.github.io/tonyhax-international#rom). A BIN+CUE format CD image is provided that can flash a GameShark or similar cheat device to boot into the Tonyhax International loader when the PS1 console is powered on. Once you flash the GameShark/Cheat cart with the flasher CD-R, the cheat cart can be plugged into any SCPH-1000 to SCPH-750X console of any region (all the models that have the parallel IO port on the back for plugging in the cheat cart) and you can instantly gain the ability to play backup and import discs.

If you don't have a cheat cart/GameShark to flash or all of the stuff required to do so, there are so many more options to access the Tonyhax International backup loader on completely stock unmodified PS1/PS2 hardware!

All consoles will play PS1 games containing CD audio perfectly when using Tonyhax International. If you have an American or European console, the CD/DVD drive will also be unlocked allowing you to swap discs in games that span multiple discs with ease.

Tonyhax International is the first solution available for SCPH-10000 to SCPH-39000 Japanese PS2 consoles to play backup/import PS1 games to the best of my knowledge. It is also the first to provide correct CD audio playback in games that contain CD audio on the SCPH-1000 and SCPH-3000 PS1 consoles.

I could of never of done this without MottZilla, Socram8888, and many others! This is a team effort, the scene will never die! https://alex-free.github.io/tonyhax-int ... al#credits

Homepage: https://alex-free.github.io/tonyhax-international

Github: https://github.com/alex-free/tonyhax

[karehaani]

Please use this too
https://mega.nz/file/jHpDUSIb#0F7YbCKHR ... KqgDwpgsjg
PS1 japan entrypoint
title dokiouki
disc ID SLPS-00130

?game wiki
https://ja.wikipedia.org/wiki/%E5%9C%9F ... B%E7%B4%80


My weak point is English.......

[alexfree]

Please use this too
https://mega.nz/file/jHpDUSIb#0F7YbCKHR ... KqgDwpgsjg
PS1 japan entrypoint
title dokiouki
disc ID SLPS-00130

?game wiki
https://ja.wikipedia.org/wiki/%E5%9C%9F ... B%E7%B4%80


My weak point is English.......

Great work, I will credit you and include your entrypoint into the next update of Tonyhax International! How did you come up with the save file so fast? This now means 2 Japanese games have save game exploits available (Crash 2 and now Dokiouki). More save game exploit files/entrypoints are much needed (they are necessary as they are the only real way to boot into Tonyhax International on Japanese PS2 consoles) and me and MottZilla want to eventually get all the NTSC/PAL games that have Japanese versions supported.

If you can come up with more entrypoints or info on them please do, thanks again!

[karehaani]

Please use this as well
https://mega.nz/file/KegTwYyY#8qchPpYwi ... XTK4arRCTY
title Crash Bandicoot2
disc id SCPS10047
language JPN
load=-
title Crash Bandicoot3
disc id SCPS10073
language JPN
load=AAA

https://mega.nz/file/KTIxjLTK#S5FvJf5uf ... 5YMijpC8NU
title The Legend of Heroes I&II
Disc id SLPS01323
language JPN
I=load
II=not load
Fixed a file mistake


Debug environment NO$PSX

I rooting Tonyhax from the bottom of my heart
I'm not good at English

Looking forward to a better evolution of tonyhax

my account name Patchouli(karehaani)

[alexfree]

Please use this as well
https://mega.nz/file/KegTwYyY#8qchPpYwi ... XTK4arRCTY
title Crash Bandicoot2
disc id SCPS10047
language JPN
load=-
title Crash Bandicoot3
disc id SCPS10073
language JPN
load=AAA

https://mega.nz/file/KTIxjLTK#S5FvJf5uf ... 5YMijpC8NU
title The Legend of Heroes I&II
Disc id SLPS01323
language JPN
I=load
II=not load
Fixed a file mistake


Debug environment NO$PSX

I rooting Tonyhax from the bottom of my heart
I'm not good at English

Looking forward to a better evolution of tonyhax

my account name Patchouli(karehaani)

Thank you very much again. Tonyhax International v1.0.5 (https://github.com/alex-free/tonyhax/re ... tional.zip) is now available with save game exploit files for all the entrypoints you submitted and you are in the credits (https://alex-free.github.io/tonyhax-int ... al#credits).

You can now use the Japanese PS1 games:
- Crash Bandicoot 2
- Crash Bandicoot 3
- Doki Oki
- The Legend Of Heroes I&II
To start the Tonyhax International loader using the save game exploit (https://alex-free.github.io/tonyhax-int ... l#savegame) The save game exploit is the only method available for Japanese PS2s, so the more games that are supported the better.

If anyone else wants to submit more entrypoint/save game exploit files for any region or for any new game please let me know.

[karehaani]

Please use this as well
https://mega.nz/file/KegTwYyY#8qchPpYwi ... XTK4arRCTY
title Crash Bandicoot2
disc id SCPS10047
language JPN
load=-
title Crash Bandicoot3
disc id SCPS10073
language JPN
load=AAA

https://mega.nz/file/KTIxjLTK#S5FvJf5uf ... 5YMijpC8NU
title The Legend of Heroes I&II
Disc id SLPS01323
language JPN
I=load
II=not load
Fixed a file mistake


Debug environment NO$PSX

I rooting Tonyhax from the bottom of my heart
I'm not good at English

Looking forward to a better evolution of tonyhax

my account name Patchouli(karehaani)

Thank you very much again. Tonyhax International v1.0.5 (https://github.com/alex-free/tonyhax/re ... tional.zip) is now available with save game exploit files for all the entrypoints you submitted and you are in the credits (https://alex-free.github.io/tonyhax-int ... al#credits).

You can now use the Japanese PS1 games:
- Crash Bandicoot 2
- Crash Bandicoot 3
- Doki Oki
- The Legend Of Heroes I&II
To start the Tonyhax International loader using the save game exploit (https://alex-free.github.io/tonyhax-int ... l#savegame) The save game exploit is the only method available for Japanese PS2s, so the more games that are supported the better.

If anyone else wants to submit more entrypoint/save game exploit files for any region or for any new game please let me know.

Thank you very much
Thank you for the update work!

[karehaani]

https://mega.nz/file/zbok3DpI#4Z3Ch8yGh ... vHNWI9w6Ck

FINAL FANTASY IX
Region japan
Stop at blue screen

80000000-81000000 =Crush.dump / blueScreenload.dump

https://mega.nz/file/bDYFVaoD#XW7w3hUOy ... NzcgHISxgE

801FA3BC lhu 90621800 lhu v0 $1800(v1)
801FA3C0 nop
801FA3C4 sll 00021600 v0 $18
801FA3C8 sra 00021603 v0 $18
801FA3CC bltz 0440FFFB v0 $801FA3BC
loop........ bulescreen

I didn't understand the reason for the suspension from my own knowledge
jalr v0 exploit
jalr v0 803FC23C
803FC23C nop
803FC240 loader
bluescreen…………

If you know the reason for the suspension, please give me some advice

[MottZilla]

Final Fantasy 9 seems to use the same memory that TonyHax is loaded into. Maybe this is conflicting with the exploit. Or maybe the game is having an interrupt occur while the exploit is in progress and causing problems. I may try to look at it again, but if you can share anymore details on your exploit for Final Fantasy IX it would be helpful.

[karehaani]

https://mega.nz/file/SKIDBB5A#sVU6sYEep ... X9gLlfSCkI
title tekken2
Region japan
DISC ID SLPS00300
survival mode lose=crash

800A2EA0
800A2FD0 (4bye $ra)

800A2EC0-800A2EF0= 160byte loader point only (tonyhax loader size 292byte) size over... loader cannot be injected....

$ra is operable, but
Not enough free space to insert loader.....

I can't seem to solve the problem myself.
For the time being, I uploaded incomplete exploit data



Finalfantasy IX
jalr $v0 801F4A14 (801FB284-801FB288)=4byte (exploit) v0 control
$ra 801F4A1C
loader point 801FC23C
Memory card block load star (801FB250)
game program 801fxxxx
free address 80100000-80190000

tonyahax bulescreen 801FA3BC

Thank you for your advice
I don't think I have the power to solve it yet.

I don't understand well with my knowledge.....
that's all i know now
I'm sorry for my lack of strength



I'm sorry for being hard to understand with my poor English

[karehaani]

Final Fantasy 9 seems to use the same memory that TonyHax is loaded into. Maybe this is conflicting with the exploit. Or maybe the game is having an interrupt occur while the exploit is in progress and causing problems. I may try to look at it again, but if you can share anymore details on your exploit for Final Fantasy IX it would be helpful.

USA ver and japan ver had almost the same data
JPN Finalfantasy IX disc id SLPS02000
https://mega.nz/file/SS5EjR6I#k66CbUyku ... _bBq6N_g4k
USA Finalfantasy IX disc id SLUS01251
https://mega.nz/file/6Dhz0ApK#9BB3ifVL2 ... oFI2MBguN4

801F0000 was used by a game program
80100000-80190000 is free space



I would appreciate it if you could check this data

[karehaani]

https://mega.nz/file/TSxBSRwR#7h4jA5JIO ... Qhtfw5Wjmk
title Tekken3
Region japan
DISC ID SLPS-01300
80099454=4byte $ra(exploit) bufferoverflow
survival mode=lose=crash

Not enough space to insert loader.......
The loader should be placed inside the area of the string buffer overflow
but not possible due to lack of space.....
At present, the exploit data is not enough, but I will upload it just in case.

[alexfree]

https://mega.nz/file/TSxBSRwR#7h4jA5JIO ... Qhtfw5Wjmk
title Tekken3
Region japan
DISC ID SLPS-01300
80099454=4byte $ra(exploit) bufferoverflow
survival mode=lose=crash

Not enough space to insert loader.......
The loader should be placed inside the area of the string buffer overflow
but not possible due to lack of space.....
At present, the exploit data is not enough, but I will upload it just in case.

Thank you my friend! I am going to release an update which will bring the total number of supported Japanese games up to 8.
I will look into your partial exploits.
There are ways to make the loader smaller: https://github.com/socram8888/tonyhax/pull/20 so all may not be lost. I will explain more on how soon...

[alexfree]

https://mega.nz/file/TSxBSRwR#7h4jA5JIO ... Qhtfw5Wjmk
title Tekken3
Region japan
DISC ID SLPS-01300
80099454=4byte $ra(exploit) bufferoverflow
survival mode=lose=crash

Not enough space to insert loader.......
The loader should be placed inside the area of the string buffer overflow
but not possible due to lack of space.....
At present, the exploit data is not enough, but I will upload it just in case.

Thank you my friend! I am going to release an update which will bring the total number of supported Japanese games up to 8.
I will look into your partial exploits.
There are ways to make the loader smaller: https://github.com/socram8888/tonyhax/pull/20 so all may not be lost. I will explain more on how soon...

Tonyhax International v1.0.6 https://github.com/alex-free/tonyhax/re ... tional.zip
Added support for:
Castlevania Chronicle Japan (first release only (rev 0), rev 1 is not supported... yet)
Castrol Honda SuperBike Racing Japan
Castrol Honda VTR Japan
Tony Hawk Pro Skater 2 Japan (now it's actually tonyhax )

Castrol Honda VTR Japan and Tony Hawk Pro Skater 2 Japan use checksum byte(s) to validate the memory card saves (unlike the other releases in other regions which don't have any checksums). Me and MottZilla created a checksum updater program for these games which is included in the source here: https://github.com/alex-free/tonyhax/bl ... uccesscu.c
So now we are at 8 games! I am looking into making a smaller loader for specifically titles that don't have enough space to contain the full loader and will let you know the results

[karehaani]

https://mega.nz/file/KGhQxZRb#hOW8F-HeF ... Qc3yoywO_k
title Cool Boarders 4
Region japan
disc id SLPS-02527

[karehaani]

https://mega.nz/file/TSxBSRwR#7h4jA5JIO ... Qhtfw5Wjmk
title Tekken3
Region japan
DISC ID SLPS-01300
80099454=4byte $ra(exploit) bufferoverflow
survival mode=lose=crash

Not enough space to insert loader.......
The loader should be placed inside the area of the string buffer overflow
but not possible due to lack of space.....
At present, the exploit data is not enough, but I will upload it just in case.

Thank you my friend! I am going to release an update which will bring the total number of supported Japanese games up to 8.
I will look into your partial exploits.
There are ways to make the loader smaller: https://github.com/socram8888/tonyhax/pull/20 so all may not be lost. I will explain more on how soon...

thank you for your advice

[karehaani]

https://mega.nz/file/TSxBSRwR#7h4jA5JIO ... Qhtfw5Wjmk
title Tekken3
Region japan
DISC ID SLPS-01300
80099454=4byte $ra(exploit) bufferoverflow
survival mode=lose=crash

Not enough space to insert loader.......
The loader should be placed inside the area of the string buffer overflow
but not possible due to lack of space.....
At present, the exploit data is not enough, but I will upload it just in case.

Thank you my friend! I am going to release an update which will bring the total number of supported Japanese games up to 8.
I will look into your partial exploits.
There are ways to make the loader smaller: https://github.com/socram8888/tonyhax/pull/20 so all may not be lost. I will explain more on how soon...

Tonyhax International v1.0.6 https://github.com/alex-free/tonyhax/re ... tional.zip
Added support for:
Castlevania Chronicle Japan (first release only (rev 0), rev 1 is not supported... yet)
Castrol Honda SuperBike Racing Japan
Castrol Honda VTR Japan
Tony Hawk Pro Skater 2 Japan (now it's actually tonyhax )

Castrol Honda VTR Japan and Tony Hawk Pro Skater 2 Japan use checksum byte(s) to validate the memory card saves (unlike the other releases in other regions which don't have any checksums). Me and MottZilla created a checksum updater program for these games which is included in the source here: https://github.com/alex-free/tonyhax/bl ... uccesscu.c
So now we are at 8 games! I am looking into making a smaller loader for specifically titles that don't have enough space to contain the full loader and will let you know the results

That's excellent
Thank you for your update work

[alexfree]

https://mega.nz/file/KGhQxZRb#hOW8F-HeF ... Qc3yoywO_k
title Cool Boarders 4
Region japan
disc id SLPS-02527

Thanks for another game! We are getting really close to having all the possible save game exploits ported to the Japanese versions.

Is there a checksum for the save game file? If there is, is it the same as the USA version (as in we can use the fix-cb4-checksum.sh script in the tonyhax source to make the save game valid and accepted by cool boarders 4 japan).

[karehaani]

https://mega.nz/file/KGhQxZRb#hOW8F-HeF ... Qc3yoywO_k
title Cool Boarders 4
Region japan
disc id SLPS-02527

Thanks for another game! We are getting really close to having all the possible save game exploits ported to the Japanese versions.

Is there a checksum for the save game file? If there is, is it the same as the USA version (as in we can use the fix-cb4-checksum.sh script in the tonyhax source to make the save game valid and accepted by cool boarders 4 japan).

I tried it, but the checksum is different from usa ver
manipulated data directly while the game was running
using no$psx
I rewrote the value manually when saving.
The save data address seems to be slightly different from USA ver
I basically use no$psx
bypass the checksum
I am manually rewriting everything during the save process
Sorry for my lack of technique...

[alexfree]

https://mega.nz/file/KGhQxZRb#hOW8F-HeF ... Qc3yoywO_k
title Cool Boarders 4
Region japan
disc id SLPS-02527

Thanks for another game! We are getting really close to having all the possible save game exploits ported to the Japanese versions.

Is there a checksum for the save game file? If there is, is it the same as the USA version (as in we can use the fix-cb4-checksum.sh script in the tonyhax source to make the save game valid and accepted by cool boarders 4 japan).

Don't be sorry. Hopefully mottzilla will be able to figure out how it works. You and mottzilla know about more about the exploit stuff then I do. I have only ported 2 exploits (castlevania Chronicle and Castrol Honda superbike).

Also I will send you a smaller loader for you to play with soon.

I tried it, but the checksum is different from usa ver
manipulated data directly while the game was running
using no$psx
I rewrote the value manually when saving.
The save data address seems to be slightly different from USA ver
I basically use no$psx
bypass the checksum
I am manually rewriting everything during the save process
Sorry for my lack of technique...

[karehaani]

I'm sorry for your inconvenience
thank you