Copy protection string of the Yaroze boot disk

I sent Bad_Ad84 my Net Yaroze boot disc. If he finds the relevant string on the disc I'm sure he'll share the news as and when.

 

Is it a PAL disc?

 

All indications are that the American and European Yaroze boot disks and PC SDKs are exactly the same. Like, the disk can switch between NTSC and PAL modes, I hear.

 

I can't remember, but propbably yes.

 

As Myria said (and was already mentioned in the forum several times IIRC), there was only one Net Yaroze boot disc for both US and PAL territories.

 

If you have a Yaroze boot disk, getting this information is fairly simple if you have a Yaroze, Debugging Station, or unmodded retail PS1. Using any of these with the "PSX ROM ID v1.7.0" disk will work. The easiest, of course, is a Debugging Station, because it will boot the PSX ROM ID disk outright. You'd have to use the swap trick on a Yaroze or unmodded retail system in order to boot PSX ROM ID. The Debugging Station is the easiest to use to boot the CD, but an unmodded retail PS1 has the easiest method to get the data once the program is started.

Once you get PSX ROM ID started, what you do diverges depending on what system you have.

Unmodded PS1:
1. Eject PSX ROM ID, put in the Yaroze boot disk, and close the door. Note that the CD controller needs to see this eject, so you'll have to remove the spring if you used one for the swap trick.
2. Wait for the disk to be rejected (10 seconds should be enough).
3. Hold L1 and R1, and press circle.
4. Write down the hex string shown under "ID 1A". That's all I need. The 5th through 8th hex bytes are the SCEx string. Write down the hex rather than the ASCII, because PSX ROM ID doesn't have a lowercase font.

Debugging Station or Yaroze:
1. Eject PSX ROM ID, put in the Yaroze boot disk, and close the door. Note that the CD controller needs to see this eject, so you'll have to remove the spring if you used one for the swap trick on a Yaroze.
2. Wait for the disk to be accepted (10 seconds should be enough).
3. Hold square and press up 6 times so that the cursor (> <) shows as >60<.
4. Press right to move the cursor to the right by one.
5. Hold square and press up 13 times so that the cursor shows as >D0<.
6. Press right to move the cursor to the right be one.
7. Press up once without holding square so that the cursor shows as >01<. The entire command now reads 19 60 D0 01.
8. Press circle.
9. Write down the top-leftmost hex byte, right under the "TE" of "TEST".
10. Press left to return to the D0 byte.
11. Press up once without holding square to change the value at the cursor to >D1<; the command now reads 19 60 D1 01.
12. Press right to highlight >01<, but don't change it. (Because the CD controller is little-endian.)
13. Press circle, and again write down the top-leftmost hex byte.
14. Repeat steps 10-13 two more times, for the commands 19 60 D2 01 and 19 60 D3 01.
15. The four hex bytes are the SCEx string of the Yaroze boot disk.

 

I had the same idea. Sadly, this wont work for me. I mentioned previously, I have a Japanese disc
I will need a Japanese console to boot it, then again, this would only prove the fact that it is SCEI.

I am out of options so it is up to Bad. Good luck Bad

 

You can actually use an unmodded American or European PS1 for this. It doesn't have to *pass* the copy/import protection, it just has to be seen by it.

 

I have unmodded ps1's and a debugging console.

Give me time, soon as I have a free moment, I will sort it out.

 

Thanks for the lulz Tails
Good post.

It wont boot at all on an normal PSX. That's why I can't do anything.

 

You don't need to boot the Yaroze disk. You need to boot a CD-R with PSX ROM ID using the swap trick, then switch to the Yaroze disk. I explained exactly what would need to be done above =)

 

Maybe, as mentioned above, with stealth modchip this method work the same...

 

Uhm, correct me if I am mistaken, but you need to use the Yaroze disc as the swap disc to get the wobble info from it. That's how the swap trick works. It uses the wobble from the first disc to boot the following CD-R.
If you use another disc (Crash Bandicoot (PAL) for example) to boot the PSX ROM ID CD-R, then the wobble from Crash Bandicoot will be shown in the PSX ROM ID tool.
Unless the PSX ROM ID tool re-reads the wobble groove on command from a button pressed on the controller, it wont work.

 

Or when you do the bit that Myria said.... let the console see the eject (remove the spring) so it can ID the disc again.

Keep up.

 

How can it ID the Yaroze disc if yet alone it can't boot or read from the wobble on a hard reset?

 

Even in the wrong console It reads the wobble everytime, regardless of if its the correct one or not.... if it didnt read it, how would the console know the disc has the correct or incorrect string?

Data is read, compared, then boots or not boots... Of course it can read the wobble data, it just refuses it as being wrong in the wrong console region/type.


Wobble data read from disc -> CD Controllers RAM -> Compared to valid string -> console boots or not boots.

Now, the data will be in ram, the disc you have already booted can dump the ram contents - so you can see what was read.

 

Well I followed your steps, and I got:

TEST
5320: $
4320: C
4520: E
4520: E

Thats spells, SCEE

Seems as if the modchip left SCEE in RAM and it did not refresh.
Problem? :>

 

Its been said about 439835 times not to use a modchip and then you go and specifically use a console with a chip...

 

Sorry, that's my bad. I had a little too much to drink :>

Okay. I did it without a modchipped system, and I got SCEW.


The myth is now busted. SCEW does not boot on any system.