GUIDE The many unusual types of TEST ps2.

Discussion in 'Sony Programming and Development' started by ASSEMbler, Nov 1, 2005.

  1. l_oliveira

    l_oliveira Officer at Arms

    Joined:
    Nov 24, 2007
    Messages:
    3,879
    Likes Received:
    245
    Actually... There's a mechanism on the Mechanics Controller which prevents the use of DVD Video media types under certain circumstances. The goal was obviously prevent things like MEMOR32 or ESR+FMCB from happening.

    But the funny thing is that the vector of attack is the DVD player Magic Gate encrypted elf. And the act of decrypting it for execution is exactly what unlocks the Mechanics Controller to allow for DVD Video playback. DTL units have decryption of DVD player MG files blacklisted so the unlocking action never happens.

    That's why you can't play DVD Video on DTL consoles (that includes the PS2 TOOL FYI).
     
  2. smf

    smf mamedev

    Joined:
    Apr 14, 2005
    Messages:
    1,255
    Likes Received:
    88
    Blacklisted, or is whatever is needed to decrypt them just missing?
     
  3. sp193

    sp193 Site Soldier

    Joined:
    Mar 28, 2012
    Messages:
    2,217
    Likes Received:
    1,052
    I doubt that they would have been able to forsee that stuff like FMCB would ever get created, since MG was new (unheard of) and uncracked in year 1999. Instead, I think that it was meant to prevent DVD video playback... by unauthorized DVD players (especially region-free players!). Unprotected code can run, which means that non-Sony DVD players could be used to play DVD video discs if they can run.

    Since DVD video playback is only enabled if the OSD loads a legal DVD player, the console is always in a state of having DVD video playback disabled when games are started (so hijacking a game or even the OSD will not allow DVD video discs to be played)

    If they really wanted to prevent things like ESR+FMCB from ever getting created, they would have blocked off CDDA playback as well because there's a way to get CDDA discs to store data. Or even just come up with a nastier protection system that didn't have the flaws that MagicGate has. After all, the ForbidDVDP command exists in even the SCPH-10000, which means that it was there all this while even though they still had the chance to strengthen MagicGate before the PlayStation 2 went live in year 2000.

    Both, but it depends on the debugstation model. The SECRMAN module in the ROMs of the DTL-H100xx and DTL-H300xx are missing all KELF decryption functions, but all debugstation consoles will fail to decrypt DVD player KELFs.
     
    Last edited: Oct 21, 2014
  4. l_oliveira

    l_oliveira Officer at Arms

    Joined:
    Nov 24, 2007
    Messages:
    3,879
    Likes Received:
    245
    The one I have here only ever refused files with DVD player file type. Everything else worked. I didn't test but I do believe it will refuse files if system type isn't 0x00(kelfs for PSX DVR for example?)...
     
  5. smf

    smf mamedev

    Joined:
    Apr 14, 2005
    Messages:
    1,255
    Likes Received:
    88
    I don't have any clue what is different about the KELFS, but the reason why they can't be decrypted might not be due to being blacklisted. However that would be arguing over semantics of the word blacklisted.

    If the player update disc could be used to install the DVD player software then Sony might have been worried that the 4% license fee would then be due. There may also have been some concern that developers would just watch DVD videos all day when they should be working.
     
  6. l_oliveira

    l_oliveira Officer at Arms

    Joined:
    Nov 24, 2007
    Messages:
    3,879
    Likes Received:
    245
    They are actively blacklisted, because the unit actively refuses to execute any kind of activity with the file when it's type flag is 0x07.

    I think they were more worried about how these machines are capable of running arbitrary code (from master discs) as they could be used as decryption oracle for the MG encrypted files.

    Also, any USA or EU PS2 console and Japanese SCPH-10000 PS2 consoles of the 2nd batch actually have the DVD Player 1.00 file key blacklisted. Any Japanese PS2 console will allow you to bind the MC driver from the Utility DISC 1.00 to a memory card but when you try to use it (even if you fake the version to an version higher than the one in the console, if any) the console will actively refuse to execute it.

    If you try to use a homebrew decryption oracle tool as, for example the custom build of "HD Project" which can decrypt KELF and KIRX files you won't get anything out of the file unless you use an actual SCPH-10000 of the kind which works with the 1.00 DVD driver.

    So yes, the blacklisting is actually there.
     
  7. sp193

    sp193 Site Soldier

    Joined:
    Mar 28, 2012
    Messages:
    2,217
    Likes Received:
    1,052
    Has anybody examined a DTL-H10000S's boot ROM? I got dumps from a DTL-H10000, DTL-H30001 and DTL-H30101, and they seem normal: non-MG units have a lite SECRMAN module, while the MG-enabled units have a full one. Except that the DTL-H30101 has a mismatched boot ROM (ROM v1.50AD, while boot certification is done with a hardcoded version of v1.10AD).

    I have never examined a dump from a DTL-H10000S, and neither have I ever read of anyone doing so.
     
    Last edited: Oct 27, 2014
  8. vash32

    vash32 Spirited Member

    Joined:
    Jun 19, 2012
    Messages:
    186
    Likes Received:
    5
    Are you using your PS2Ident ELF to dump the boot ROM or a other program to do so on the TEST models as I'm not getting it to work on my DTL-H50001. I'm not sure why.. Its mostly the same as a SCPH-50001 so I think it will work the same, as I know you got some ROM dumps from that before.

    Also does anyone know if the TEST models have anything for stopping Third party Memory Cards from being used. I've tired using my 128mb card on my TEST as well as a 32mb & 8mb and none of them worked, but all my Sony 8mb cards worked fine. I test the same cards an a retail PS2 and they all worked. I'm not sure, maybe its just me... or maybe something on MG is doing it. (Don't know)

    Anyway, Thanks for you time.
     
    Last edited: Oct 27, 2014
  9. sp193

    sp193 Site Soldier

    Joined:
    Mar 28, 2012
    Messages:
    2,217
    Likes Received:
    1,052
    The dumps were not made by me, as none of those consoles belong to me. They were made using the PCSX2 dumper and some early versions of PS2Ident, and donated to me for science.

    Just saying: some of these cards are advertised to work with only slimlines. Why is there such a requirement? Who knows. :p
    My point here is that crap hardware is crap hardware. If they break the standards that SONY set, undefined behaviour is expected.

    My own 64MB cards sometimes not work properly with my consoles. Sometimes, it seems like I have to insert a different card before swapping back to one of the 64MB cards, just for the 64MB card to get detected.

    My SCPH-10000 consoles hate the 64MB cards a lot: they get detected, but only after a while (and are hence very unsuitable for FMCB, especially since the Protokernel sets have some system updates to run). My SCPH-39006 hates them even more (most of the time, it will fail to detect these cards).

    Only my SCPH-77006 is more "compatible" here. And yes, my cards were advertised (not on their boxes, but on the eBay page that I purchased them from) to be compatible with only slimline consoles.

    I got these cards because I wanted cheap storage. Two of my 8MB SONY cards (each of them cost nearly half as much as a new PS3 game) died around the same time in 2011, during the development of the FMCB installer. Since they were lightly used prior to the development of the FMCB installer, you could say that they died because of some buggy prototype installer. And so I decided to go with something really expandable...
     
    Last edited: Oct 28, 2014
  10. l_oliveira

    l_oliveira Officer at Arms

    Joined:
    Nov 24, 2007
    Messages:
    3,879
    Likes Received:
    245
    I never got a fake card to work with the TEST. It might have to do with the kelf binding being different on those. That probably means these TESTs do different challenges to the memory card and the firmware on the fake cards aren't aware of that.
     
    Last edited: Oct 28, 2014
  11. jedman

    jedman Member

    Joined:
    Dec 10, 2014
    Messages:
    7
    Likes Received:
    0
    Hi

    I got a H30001 Test console today, but I tried some PAL PS1 games and the screen doesn't display properly with the bottom of the screen being cut off, anyone else noticed this?
     
  12. sp193

    sp193 Site Soldier

    Joined:
    Mar 28, 2012
    Messages:
    2,217
    Likes Received:
    1,052
  13. jedman

    jedman Member

    Joined:
    Dec 10, 2014
    Messages:
    7
    Likes Received:
    0
    Started reading that thread and felt like my head was going to explode, think i'll just use my PS1 instead.
     
    Last edited: Dec 11, 2014
  14. sp193

    sp193 Site Soldier

    Joined:
    Mar 28, 2012
    Messages:
    2,217
    Likes Received:
    1,052
    Hmm. I think that the original content was already lost. :/
    Basically, the OP there wanted to do the same thing as you did, although he was trying to play NTSC games on his PAL debugstation unit.

    It's caused by the debugstation's boot ROM being designed for playing only either PAL or NTSC games, and not both. I made a piece of software called PS1VModeNeg (http://www.assemblergames.com/forums/showthread.php?52777-PS1VModeNeg-release-thread), which would "negate" the video mode that is used by the console's PlayStation driver (For PAL consoles, NTSC will be used, while PAL will be used on NTSC sets).

    Anyway, it's more economical to play your games on a retail set (PlayStation or PlayStation 2). These debugstation consoles are fairly rare.
     
  15. jedman

    jedman Member

    Joined:
    Dec 10, 2014
    Messages:
    7
    Likes Received:
    0
    ah ok that makes more sense thanks.

    What I was hoping was that PAL PS1 games would convert to NTSC format and be displayed at 60hz with no borders, but by the sounds of it that isn't possible, strange that PAL PS2 games run in 50hz but PS1 games try to run in 60hz but don't display properly.
     
  16. M54B25

    M54B25 Spirited Member

    Joined:
    Mar 17, 2014
    Messages:
    151
    Likes Received:
    22
    I bought DTL-H30001 NTSC, 120 volts and I want to replace power board from normal PS2 (230V, PAL). Which model of PS2 I need to find to do this without any modifications?
     
  17. l_oliveira

    l_oliveira Officer at Arms

    Joined:
    Nov 24, 2007
    Messages:
    3,879
    Likes Received:
    245
    10 screws SCPH-30002(Australia)/30003(England)/30004(Europe)
     
  18. M54B25

    M54B25 Spirited Member

    Joined:
    Mar 17, 2014
    Messages:
    151
    Likes Received:
    22
    I don't know what does it mean "10 screws (...)"?
    I found something like this (on the left):
    [​IMG]
    I don't have console yet, it will be shipped tomorrow.
     
  19. l_oliveira

    l_oliveira Officer at Arms

    Joined:
    Nov 24, 2007
    Messages:
    3,879
    Likes Received:
    245
    There's earlier PS2 models whose shell opens in three plastic parts. They have four screws securing the top and six securing the bottom (10 screws).

    Newer units have eight screws securing just two halves of plastic.

    A 10 screws PS2 PSU looks like this:

    [​IMG]
     
    Last edited: Jan 5, 2015
  20. M54B25

    M54B25 Spirited Member

    Joined:
    Mar 17, 2014
    Messages:
    151
    Likes Received:
    22
    Ok, now I understand. I will try to find that power suppply.
    Thanks!
     
sonicdude10
Draft saved Draft deleted
Insert every image as a...
  1.  0%

Share This Page