I've looked through the files on the Programmer Tool CDROMs. And, yes, it's rather difficult to extract the BIOS ROM-images from there. There are at least two different file formats (neither one being raw ROM-images), and different BIOSes for different purposes, and different CDROM versions (which have the files in different locations, like older PSYQ folder, or newer PSSN folder, and maybe (I haven't checked) different BIOS revisions on different CDROMs).
What is there...
In particular, these files on the Programmer Tool CDROM seem to contain BIOSes:
Code: Select all
PSYQ\PFLASH.BAT\KERNEL.BIN,KROMGDAT.BIN,KROMDAT.BIN,SN.BIN --> on older CDROMs in PSYQ folder
3RDPARTY\METROWER\DECI\FLASH25\H2500.IMG
PA\DTLH2700\H2700*.BIN --> Performance Analyzer BIOSes for PAL and NTSC
PSX\BIN\DTLH2500\H25DRV\H25*.IMG
PSSN\BIN\DTLH2500\H25BIOS\H2500.IMG
PSSN\WINDEBUG\PFLASH\KERNEL.BIN,KROMDAT.BIN,KROMGDAT.BIN,SN.BIN
The KERNEL.BIN,KROMDAT.BIN,KROMGDAT.BIN,SN.BIN files contain the kernel, gui, fonts, and are apparently used to compose the final ROM-image on the fly.
Most of the .IMG files seem to be PSX EXE files, which should apparently reflash the BIOS when executing them on the console. Examining that files in an emulator/debugger isn't so easy because they to require more than 2Mbyte RAM (in particular, they are loaded to a memory location that would contain the CPU STACK in retail consoles).
I dont know if any of those files contains "the whole" 512Kbyte BIOS image, or if they do all contain unused memory sections with uninitialized data (so any attempt to dump the BIOS would include leftovers from previous BIOS versions). Although, there's that CLEANMEM binary (in COFF format) that seems to be used to remove leftovers, but I don't know if it's 00h-filling or FFh-filling everything or whatever else.
Could it be dumped...
The easiest way would be to reflash the BIOS, then remove the FLASH chip, and dump it with external tools, like eprom burners. Alongsides, one could also dump that mysterious EPROM chip (it might be something related to the debugging hardware, or if it's similar to the DTL-H2000, then the EPROM might contain the "real" bootrom, which would then switch to the updated FLASH firmware at some point after booting).
One could perhaps use the debugger to dump the FLASH content (but as far as I understand, the debugger stops working when not having the "correct" BIOS version installed). Or use some old-fashioned "copy BIOS to memory card" tools (if that's easier).
Dumping the version string...
Normally, there is an ASCII version string at address BFC7FF32. I guess
that small memory snippet could be easily viewed in the DTL-H2500 debugger?
I am curious if that string exists at all, and if it does change for PAL/NTSC mode (and if it changes in different BIOS versions, but that does probably bring up problems with the debugger not working with wrong BIOS versions).