Brought to you by MottZilla, Alex Free, and Patchouli (karehaani). Built on the work of many others.
Tonyhax International is a fork of the Tonyhax “Software backup loader exploit thing for the Sony PlayStation 1” originally created by Socram8888. Tonyhax International is developed by Alex Free and MottZilla with many new features and upgrades compared to the original Tonyhax, some of which are listed below:
Supports all PS1 Consoles (Japanese, American, European, SCPH-1000-SCPH-102) and Early PS2 Consoles (Japanese, American, European, SCPH-10000-SCPH-39004).
Supports more save game exploits, enabling the use of even more PSX game discs to start the Tonyhax International loader.
Supports flashing the Tonyhax International backup/import loader to a GameShark/Action Reply/cheat cartridge. Whenever the flashed cartridge is plugged into the back of a SCPH-1000-SCPH-7502 PS1 console when you power it on the Tonyhax International will boot instead of the shell program/BIOS (Sony screens/CD Player/Memory Card Manager).
Uses the newer FreePSXBoot exploit/patching methods to disable FreePSXBoot memory cards that boot Tonyhax International after the FreePSXBoot exploit starts the loader from the memory card on all BIOS versions.
Supports more games with additonal copy protection routines using a new anti-piracy bypass system.
Completely automated testing/building/development suite of scripts in the source that supports building Tonyhax International on virtually any *nix like OS.
Japanese PS1 Consoles (SCPH-1000-SCPH-100)
Japanese PS2 Consoles (SCPH-10000-SCPH-39000)
American/European PS1/PS2 Consoles (SCPH-1001-SCPH-39004)
Boot Methods
More Info
Changes:
Changes:
-fastload option on to improve how fast Tonyhax International starts with the FreePSXBoot exploit. The -fastload option also provides that cool loading screen you can see in Unirom.Changes:
tonyhax-rom-flasher.bin+tonyhax-rom-flasher.cue files just fine.Changes:
HAX instead of BESLEM-99999TONYHAX to allow for more exploitable games. You will need to update both the save game exploit file for your game as well as the Tonyhax International loader file to use v1.0.7 if you are using a previou version of the save game exploit file for your game that is already on a memory card.Changes:
Changes:
The Tonyhax International loader is the program that is booted on any PS1 or an early PS2 that enables the use of backup CD-Rs or import PS1 discs. The Tonyhax International loader can be booted on your PS1 with a GameShark/cheat cart, flashed memory card, save game exploit, or CD-R. It provides the ability to properly play backup and import discs on all PS1 consoles, and early PS2 consoles (Japanese, USA, and PAL models SCPH-10000-SCPH-39004).
If you are using any Japanese console, at least one real Japanese NTSC-J PS1 game disc is required (any officially licensed Japanese PS1 disc will do). If you are using a Japanese PS2 console (SCPH-10000-SCPH-3900-) a Swap Magic Tool is also required. Neither of these are needed if you are using an American or European PS1/PS2 console.
Boot into the Tonyhax International loader using one of the boot methods below:
If you see the text Put in a real NTSC-J PSX game disc, then block the lid sensor:
After blocking the lid sensor, your real Japanese PS1 game will spin up and then stop. Once you see the text Put in a backup/import disc, then press X remove either the real NTSC-J PSX game disc or Boot CD from your PS1 console’s CD drive. Put in the backup CD-R or import PSX game disc you want to play without unblocking the lid sensor. Once you press X, the console will run some commands automatically, followed by the game booting with perfect CD audio playback. Note that you can not unblock the lid sensor while playing the game on Japanese consoles, if you do so the game will stop working.
There are some games which span multiple discs. And some of these games (such as Parasite Eve, Fear Effect, and Crono Cross) that span multiple discs require you to open the CD drive, remove disc 1, insert disc 2, and close the CD drive at some point in the game without providing a save game option at the disc swap. If you encounter this type of game on a Japanese PS1 console you have to do the “mid-game hot-swap trick”:
It is important to note however that most games that span multiple discs allow you to load a game save created on disc 1 while playing disc 2. This means you just need to save at the last point possible on disc 1, and then you can just boot disc 2 like normal and load your game save created earlier on disc 1. Some games however do not allow this as previously mentioned, so for those games you must use the mid-game hot-swap trick described above.
Available Boot Methods:
Japanese PS2 consoles must have the DVD drive tray front panel removed to use Tonyhax International. For the SCPH-10000, you can follow the method below (some newer consoles may slightly differ in the way to remove the DVD drive’s front panel).
Turn on the Japanese PS2 console. Eject the DVD drive tray, and while it is open power off the console by either pulling the plug from the wall or PSU in the back of the console, or by flicking the power switch for the PSU on the back of the console. You can not use the power button because then the DVD drive tray will close before the console turns off. Now, flip the Japanese PS2 console upside down like in the image below:
Now bring your focus to the bottom of the opened DVD drive tray. At the very top edge (highlighted in the picture above) is a tab. You want to jam a thin flat head screwdriver in between this tab and the DVD drive tray face plate as shown in the image below. Now, push with the flat head screwdriver to separate the DVD drive face plate from the rest of the DVD drive tray. Be very gentle and only use a direct straight force towards the face plate. Do not go side to side when doing this or you risk breaking off an edge of the DVD drive tray. I am obviously not responsible for any damage you may do by doing this! Once successful, the face plate will become removable. You are free to slide it back on at a later time, it just needs to be off for you to use the Japanese PS2 to boot backup/import PS1 games with Tonyhax International.
With the DVD drive face plate off, flip over the Japanese PS2 console right side up. You can now see a gap at the bottom of the DVD drive. This is where you place the Swap Magic Tool in when using Tonyhax International on your Japanese PS2 console.
You can now use one of the supported boot methods to start the Tonyhax International loader on the Japanese PS2 console. You will most likely be using the Save Game Exploit, however you could be using some kind of intermediate boot disc to boot the Boot CD as well if you find one that supports Japanese PS1 consoles. Once you see the text Put in a backup/import disc, then press X appear, you need to use a Swap Magic Slide Tool to release the DVD drive to gain access to it without pressing the eject switch. A video tutorial is available that shows how to use the Swap Magic Tool (in general), although the exact steps are also explained below. Once you use the Swap Magic Tool to swap in your import/backup CD-R while booted in the Tonyhax International loader, just press the cross button on your PS2 or PS1 controller to boot and play your game.
Important note: do not eject the PS1 import or backup CD-R from the Japanese PS2 console until your done playing the game. Unlike American and European consoles (which do not have this limitation), if you do so your game will stop working, and you will have to start Tonyhax International all over again to boot your import/backup CD-R and start playing again.
Slide in the Swap Magic Tool like shown in the image below by the arrow. You need to feel around with the Swap Magic Tool to get the hook to latch on internally inside the DVD drive.
Now that your Swap Magic Tool is latched on internally inside the DVD drive, move it straight to the right side. This movement will feel correct and nice when you are properly using the Swap Magic Tool, reassuring you are using it correctly. Once you get to the end of this movement the DVD drive tray will begin to move forward out of the DVD drive, “releasing” it from it’s locked state.
Use your hand to pull out the DVD drive tray to gain access to the disc in it. Remove the original NTSC-J PSX game disc, and put in your import/backup CD-R.
With your import/backup CD-R in the Japanese PS2 console, use your hand to push in the DVD drive tray as far as it will go back into the DVD drive.
Now that the DVD drive tray is pushed all the way back in, the Swap Magic Tool can be used to “lock” the drive. Like before, slide in the Swap Magic Tool to the right most position like shown in the image below. Remember to feel around with the Swap Magic Tool to get the hook to latch on internally inside the DVD drive. Now that your Swap Magic Tool is once again latched on internally inside the DVD drive, move it straight to the left side. This movement will feel correct and nice when you are properly using the Swap Magic Tool, reassuring you are using it correctly. Once you get to the end of this movement (when you can’t go any more to the left) the DVD drive tray will fully go back inside the DVD drive to put the DVD drive into the “locked” state.
There are some games which span multiple discs. And some of these games (such as Parasite Eve, Fear Effect, and Crono Cross) that span multiple discs require you to open the CD drive, remove disc 1, insert disc 2, and close the CD drive at some point in the game. Unfortunately only for Japanese PS2 consoles, you can not do this with Tonyhax International. If you get to a point in a game that requires ejecting the drive and putting in a new game, you have to play this part of the game on a different console (Any PS1 or American/European PS2 works). It is important to note however that most games that span multiple discs allow you to load a game save created on disc 1 while playing disc 2. This means you just need to save at the last point possible on disc 1, and then you can just boot disc 2 with Tonyhax International like normal and load your game save created earlier on disc 1, bypassing this limitation for certain games that allow saving right at disc swap mid-game.
The early PS2 models that Tonyhax International supports have the PS1 mode which runs PS1 software hard-coded to NTSC video mode. This can cause a problem with Tonyhax International if you want to play a European/PAL PS1 backup CD-R or import disc on a Japanese PS2 in PAL video mode. Since PS1 software can not change the video mode correctly from PS1 mode running on a PS2, you have to resort to the PS1 homebrew software known as PSVModeNeg. This software allows you to explicitly change the video mode to PAL. An older version of PSVModeNeg is required if you want to use it’s effects with Tonyhax International, specifically v1.0.1. This version simply inverses the current video mode of the console, rather then reading the PS1 game disc to figure out what video mode the disc itself expects. Here are the steps below to change your Japanese PS2 console to PAL video mode for Tonyhax International:
PS1VModeNeg.elf.PS1VModeNeg.elf to a FAT32 formatted USB flash drive that works with your soft-modded PS2. You can soft-mod your PS2 with FreeHDBoot, FreeDVDBoot or FreeMCBoot to be able to use PS1VModeNEG on your PS2 console.PS1VModeNeg.elf file from the mass device (your flash drive).Available boot methods for American and European PS2 consoles:
Available boot methods for American and European PS1 consoles:
Once you see the text Put in a backup/import disc appear, eject the DVD drive (PS2) or open the CD drive (PS1).
All other boot methods don’t have a disc usually in the drive already, so there is no disc to remove. With no disc currently in your console, you can now put in the backup CD-R or import PSX game disc you want to play. Close the CD drive (PS1) or DVD drive (PS2). The console will detect that the drive has been closed and will spin up your disc. The console will then send some commands and boot the disc.
All American and European consoles do not have the same limitations as the Japanese consoles and can play games that span multiple discs like normal.
The early PS2 models that Tonyhax International supports have the PS1 mode which runs PS1 software hard-coded to NTSC video mode. This can cause a problem with Tonyhax International if you want to play a European/PAL PS1 backup CD-R or import disc on a American PS2 in PAL video mode. Since PS1 software can not change the video mode correctly from PS1 mode running on a PS2, you have to resort to the PS1 homebrew software known as PSVModeNeg. This software allows you to explicitly change the video mode to PAL. An older version of PSVModeNeg is required if you want to use it’s effects with Tonyhax International, specifically v1.0.1. This version simply inverses the current video mode of the console, rather then reading the PS1 game disc to figure out what video mode the disc itself expects. Here are the steps below to change your American PS2 console to PAL video mode for Tonyhax International:
PS1VModeNeg.elf.PS1VModeNeg.elf to a FAT32 formatted USB flash drive that works with your soft-modded PS2. You can soft-mod your PS2 with FreeHDBoot, FreeDVDBoot or FreeMCBoot to be able to use PS1VModeNEG on your PS2 console.PS1VModeNeg.elf file from the mass device (your flash drive).PS1VModeNeg.elf file from the mass device (your flash drive).The early PS2 models that Tonyhax International supports have the PS1 mode which runs PS1 software hard-coded to NTSC video mode. This can cause a problem with Tonyhax International if you want to play a Japanese/American PS1 backup CD-R or import discs on a PAL PS2 in NTSC video mode. Since PS1 software can not change the video mode correctly from PS1 mode running on a PS2, you have to resort to the PS1 homebrew software known as PSVModeNeg. This software allows you to explicitly change the video mode to PAL. An older version of PSVModeNeg is required if you want to use it’s effects with Tonyhax International, specifically v1.0.1. This version simply inverses the current video mode of the console, rather then reading the PS1 game disc to figure out what video mode the disc itself expects. Here are the steps below to change your PAL PS2 console to NTSC video mode for Tonyhax International:
PS1VModeNeg.elf.PS1VModeNeg.elf to a FAT32 formatted USB flash drive that works with your soft-modded PS2. You can soft-mod your PS2 with FreeHDBoot, FreeDVDBoot or FreeMCBoot to be able to use PS1VModeNEG on your PS2 console.PS1VModeNeg.elf file from the mass device (your flash drive).You can overwrite the contents of a GameShark, Action Reply, or other PS1 cheat cartridge with the Tonyhax International ROM using a simple flasher CD-R that you burn or a combination of a home-made serial to USB cable, PC, and special program booted on your target PS1 console that supports flashing cheat cartridges over serial.
When you turn on any PS1 console with the flashed GameShark/Action Reply/cheat device installed to it’s parallel port at the back the console, the system will instead boot into the Tonyhax International loader, rather then the BIOS/Shell (Sony screens/Memory Card/CD Player menu). A PS1 cheat cartridge flashed with the Tonyhax International ROM is essentially a plug and play modchip without any hardware modifications whatsoever.
Inside the Tonyhax International releases (download above) in the rom directory are the following files:
The BIN+CUE files can be burned to a CD-R. The BIN+CUE files contain the NXFlash PS1 executable with the tonyhax-v1.0.8-international.rom file. This means when you boot the burned flasher CD-R on your PS1 console, you can connect your GameShark/cheat device and press the R2 button (RE-DETECT EEPROM) to allow NXFLASH to detect the newly connected cheat cart. Next press the start button (FLASH EEPROM FROM CD), and then press X to flash your GameShark/Cheat device. Now you can simply reset or power off then power on your PS1 console and it will boot Tonyhax International from the GameShark/cheat cart immediately.
If you have an old enough PlayStation console you can simply use the CD Player Swap Trick method to start the NXFlasher CD containing the Tonyahx International ROM. These PlayStation models have the CD Player Swap Trick:
A6956171. Incompatible consoles have System BIOS v2.1J and CDROM Controller VC1B (example serial number: A7543968).U592XXXX (where X can be any number) according to the original Swap Trick Guide from 1996. These consoles are either System BIOS v2.0A and CDROM Controller VC1A (example serial number: U5361469, July 1995 manufacture date) or System BIOS v2.1A and CDROM Controller VC1A (example serial number: U5860989, October 1995 manufacture date).To boot the ROM Flasher CD with the CD Player Swap Trick:
Memory card files are included in the freepsxboot directory found in the Tonyhax International releases (downloadable above) for all BIOS versions. These memory card files must be ‘restored’ (a.k.a. written raw) to a PSX memory card. One such way to do this is to use Memory Card Annihilator v2.0 with a modded PS2 console and USB flash drive containing the memory card file. Please note that at this time Memory Card Annihilator v2.0 does not work on the SCPH-10000 or SCPH-18000 due to not having an expansion bay (which is not accounted for by the software). Anyways for all SCPH-30000 and newer PS2 consoles here are the steps below to flash your PS1 memory card with the Memory Card Annihilator homebrew software:
Copy the correct memory card file for your PSX console’s BIOS version from the freepsxboot directory found in Tonyhax international releases downloadable above to a FAT32 formatted USB flash drive that your PS2 console can read. It is highly recommend to use the slot 2 memory card files as they do not require you to remove the memory card once booted into the Tonyhax International loader.
Console models and the BIOS versions they contain are listed below:
If you have a PSX console that can have multiple different BIOS versions, you may have to try each different memory card file one by one until you figure out what BIOS version you need for your PSX console.
After the correct memory card file is copied to the USB flash drive that your PS2 can read:
Now you can turn on your PSX console without a disc in it, and then select the Memory Card option in the PS1’s startup menu. This will start the Tonyhax international loader. At this point, if you are using a FreePSXBoot memory card in slot 1 you must remove the FreePSXBoot memory card from slot 1 once the loader starts to ensure successful booting of your backup or import. If you are using a FreePSXBoot memory card in slot 2 you can just leave it in your console at all times, no need to remove it! It will be disabled from use after booting a game with Tonyhax International.
CD BIN+CUE files containing the Tonyhax International loader are available. The Boot CD can be booted by a swap trick, or an unofficial boot disc (i.e. PSX Change v2). Inside the Tonyhax International releases (downloadable above) in the boot-cd directory are the following files:
If you have a SCPH-102 use the European BIN+CUE files. For everything else you can use the Japanese BIN+CUE file set.
If you have an old enough PlayStation console you can simply use the CD Player Swap Trick method to start the Tonyhax International Boot CD. These PlayStation models have the CD Player Swap Trick:
A6956171. Incompatible consoles have System BIOS v2.1J and CDROM Controller VC1B (example serial number: A7543968).U592XXXX (where X can be any number) according to the original Swap Trick Guide from 1996. These consoles are either System BIOS v2.0A and CDROM Controller VC1A (example serial number: U5361469, July 1995 manufacture date) or System BIOS v2.1A and CDROM Controller VC1A (example serial number: U5860989, October 1995 manufacture date).To boot the Tonyhax International Boot CD-R with the CD Player Swap Trick:
The original way to boot the Tonyhax International loader is through a special game save on a PS1 memory card that you load while in a specific, supported real PS1 game that you can play normally on your PS1 or early PS2 console (SCPH-10000-SCPH-39004 models). You need to copy the HAX file and the game exploit file specific to the original real PS1 game you own to the PS1 memory card, then load the save in a specific way in the exploitable game. Described below are 2 different methods to copy these files to a PS1 memory card. One involves using a PS2, the other involves using special hardware that allows you to write to the PS1 memory card directly from your computer.
You can use a PS2 console to copy the save game exploit files to a PS1 memory card from a USB flash drive. This method of getting the required files on the PS1 memory card requires:
You want to use the Raw save game exploit file for your exploitable game (in the entrypoints directory) and the Raw loader file HAX (in the loader directory) when using the uLaunchELF/PS2 installation method. The Raw filenames for each save game exploit is available in the table below.
Instead of using a PS2 to copy the save game exploit files, you can use a Dex Drive or similar with a visual memory card editor (such as OrionSoft’s PS1 Memory Card Manager or Dex-plorer), to modify a PS1 memory card’s contents directly with a computer. This way of adding the required save game exploit files would only require:
You want to use the MCS save game exploit file for your exploitable game (in the entrypoints directory) and the MCS loader file tonyhax.mcs (in the loader directory) when using the uLaunchELF/PS2 installation method. The MCS filenames for each save game exploit is available in the table below.
| Game | Region | Code | MCS file | Raw file |
|---|---|---|---|---|
| Brunswick Circuit Pro Bowling | NTSC-U | SLUS-00571 | brunswick1-us.mcs | BASLUS-00571 |
| Brunswick Circuit Pro Bowling | PAL-E | SLES-01376 | brunswick1-eu.mcs | BESLES-01376 |
| Brunswick Circuit Pro Bowling 2 | NTSC-U | SLUS-00856 | brunswick2-us.mcs | BASLUS-00856 |
| Brunswick Circuit Pro Bowling 2 | PAL-E | SLES-02618 | brunswick2-eu.mcs | BESLES-02618 |
| Castlevania Chronicle - Akumajou Dracula (only first release of the game (rev 0), rev 1 does not work right now) | NTSC-J | SLPM-86754 | cc-jp.mcs | BISLPM-86754DRACULA |
| Castrol Honda Superbike [SuperLite 1500 Series] | NTSC-J | SLPM-86489 | castrolsb-jp.mcs | BISLPM-86489CHSv1 |
| Castrol Honda Superbike Racing | NTSC-U | SLUS-00882 | castrolsb-us.mcs | BASLUS-00882CHSv1 |
| Castrol Honda Superbike Racing | PAL-E | SLES-01182 | castrolsb-eu.mcs | BESLES_01182CHSv1 |
| Castrol Honda VTR [SuperLite 1500 Series] | NTSC-J | SLPM-86922 | castrolvtr-jp.mcs | BISLPM-86922CHSVTRv1 |
| Castrol Honda VTR | PAL-E | SLES-02942 | castrolvtr-eu.mcs | BESLES-02942CHSVTRv1 |
| Cool Boarders 4 | NTSC-U | SCUS-94559 | coolbrd4-us.mcs | BASCUS-9455916 |
| Cool Boarders 4 | PAL-E | SCES-02283 | coolbrd4-eu.mcs | BESCES-0228316 |
| Crash Bandicoot 2: Cortex Strikes Back | NTSC-J | SCPS-10047 | crash2-jp.mcs | BISCPS-1004700000000 |
| Crash Bandicoot 2: Cortex Strikes Back | NTSC-U | SCUS-94154 | crash2-us.mcs | BASCUS-9415400047975 |
| Crash Bandicoot 2: Cortex Strikes Back | PAL-E | SCES-00967 | crash2-eu.mcs | BESCES-0096700765150 |
| Crash Bandicoot 3: Warped | NTSC-J | SCPS-10073 | crash3-jp.mcs | BISCPS-1007300000000 |
| Crash Bandicoot 3: Warped | NTSC-U | SCUS-94244 | crash3-us.mcs | BASCUS-9424400000000 |
| Crash Bandicoot 3: Warped | PAL-E | SCES-01420 | crash3-eu.mcs | BESCES-0142000000000 |
| Doki Oki | NTSC-J | SLPS-00130 | doki-oki-jp.mcs | BISLPS-00130DOKIOH |
| Downhill Snow | NTSC-J | SLPS-01391 | downhill-snow-jp.mcs | BISLPS-01391SKI00S |
| Sports Superbike | PAL-E | SLES-03057 | superbike1-eu.mcs | BESLES-03057SSBv1 |
| Sports Superbike 2 | PAL-E | SLES-03827 | superbike2-eu.mcs | BESLES-03827SSII |
| Tekken 2 (only second release of the game (rev 1), rev 0 does not work right now) | NTSC-J | SLPS-00300 | tekken2-jp.mcs | BISLPS-00300TEKKEN-2 |
| Tekken 2 (only first release of the game (rev 0), rev 1 does not work right now) | NTSC-U | SLUS-00213 | tekken2-us.mcs | BASLUS-00213TEKKEN-2 |
| Tekken 2 | PAL-E | SCES-00255 | tekken2-eu.mcs | BESCES-00255TEKKEN-2 |
| Tekken 3 | NTSC-J | SLPS-01300 | tekken3-jp.mcs | BISLPS-01300TEKKEN-3 |
| Tekken 3 | NTSC-U | SLUS-00402 | tekken3-us.mcs | BASLUS-00402TEKKEN-3 |
| Tekken 3 | PAL-E | SCES-01237 | tekken3-eu.mcs | BESCES-01237TEKKEN-3 |
| The Legend Of Heroes I&II | NTSC-J | SLPS-01323 | the-legend-of-heros-1-and-2-jp.mcs | BISLPS-01323010001 |
| Tony Hawk’s Pro Skater 2 | NTSC-J | SLPM-86751 | thps2-jp.mcs | BISLPM-86751CEEAG01 |
| Tony Hawk’s Pro Skater 2 | NTSC-U | SLUS-01066 | thps2-us.mcs | BASLUS-01066TNHXG01 |
| Tony Hawk’s Pro Skater 2 | PAL-DE | SLES-02910 | thps2-de.mcs | BESLES-02910TNHXG01 |
| Tony Hawk’s Pro Skater 2 | PAL-E | SLES-02908 | thps2-eu.mcs | BESLES-02908TNHXG01 |
| Tony Hawk’s Pro Skater 2 | PAL-FR | SLES-02909 | thps2-fr.mcs | BESLES-02909TNHXG01 |
| Tony Hawk’s Pro Skater 3 | NTSC-U | SLUS-01419 | thps3-us.mcs | BASLUS-01419TNHXG01 |
| Tony Hawk’s Pro Skater 3 | PAL-DE | SLES-03647 | thps3-de.mcs | BESLES-03647TNHXG01 |
| Tony Hawk’s Pro Skater 3 | PAL-E | SLES-03645 | thps3-eu.mcs | BESLES-03645TNHXG01 |
| Tony Hawk’s Pro Skater 3 | PAL-FR | SLES-03646 | thps3-fr.mcs | BESLES-03646TNHXG01 |
| Tony Hawk’s Pro Skater 4 | NTSC-U | SLUS-01485 | thps4-us.mcs | BASLUS-01485TNHXG01 |
| Tony Hawk’s Pro Skater 4 | PAL-DE | SLES-03955 | thps4-de.mcs | BESLES-03955TNHXG01 |
| Tony Hawk’s Pro Skater 4 | PAL-E | SLES-03954 | thps4-eu.mcs | BESLES-03954TNHXG01 |
| Tony Hawk’s Pro Skater 4 | PAL-FR | SLES-03956 | thps4-fr.mcs | BESLES-03956TNHXG01 |
| XS Moto | NTSC-U | SLUS-01506 | xsmoto-us.mcs | BASLUS-01506XSMOTOv1 |
| XS Moto | PAL-E | SLES-04095 | xsmoto-eu.mcs | BESLES-04095XSMOTO |
When using the PS2 to copy the files over, first copy the Raw loader file named HAX (found in the loader directory in each Tonyhax International release) and the Raw file for your compatible exploitable game (named in the table above, found in the entrypoints directory) to the FAT32 USB flash drive that your PS2 can read using a computer.
After the correct memory card save game exploit Raw file and the HAX file is copied to the FAT32 formatted USB flash drive that your PS2 can read, eject the USB flash drive from your computer and insert it and a PS1 memory card into the PS2. Start the uLaunchElf program and navigate to the mass device (this is your USB flash drive) with the DPAD on the controller, then select it with the circle button. Using the DPAD to navigate, press the cross button on the controller to highlight both the HAX and the Raw save game exploit file that you previously copied to the USB flash drive. Now Press the R1 button on the controller to make the file operations menu appear in uLaunchELF. Use the DPAD to move to the copy function and then press the circle button to select it. Now press the triangle button to navigate out of the mass device and then use the DPAD and then the circle button to navigate into either the MC0 (if the PS1 memory card is in slot 1 of the PS2) or MC1 (if the PS1 memory card is in slot 2 of the PS2) device. Press the R1 button to again make the file operations menu appear in uLaunchElF. Use the DPAD to navigate to the paste option and press the circle button to finally paste both the HAX and the raw save game exploit file. Now you can press the triangle button to navigate out of the PS1 memory card device, and remove the memory card from the PS2 console.
Now that you have the save game exploit files on the PS1 memory card, start the real PS1 game on your console with the PS1 memory card containing the save game files inserted in it. If you are using a Japanese PS1, it is recommended that you power off the console, put in the Japanese version of the game that has a save game exploit file available, block the lid sensor, and then turn on the console and have it boot the game. In either case, follow the instructions for the real PS1 game you are using described below:
| Game | Specific Instructions |
|---|---|
| Cool Boarders 4 | Boot the game. It should say the records and settings have been automatically loaded. Click on ONE PLAYER. |
| Crash Bandicoot games | Boot the game, on the title menu, choose LOAD GAME. On the save game list, select TONYHAX and press X. |
| Brunswick games | Boot the game as you’d normally do. On the main menu, select LOAD GAME, then Select MEMORY CARD 1. After about three seconds tonyhax should be running. |
| Castrol Honda Superbike Racing and Sports Superbike 1 | On the language selection screen, if prompted to, select the English language. Enter the Memory Card menu. Load game from the Memory Card. Click accept after it’s done loading. On the main menu, select Race, then Single race. |
| Castrol Honda VTR, Sports Superbike 2 and XS Moto | If you are using the European version, on the language selection screen select the English language. On the main menu, choose Options. Select Load game and choose the memory card where the save is stored. Back on the main menu, click on either Single Race or Championship. |
| Downhill Snow | Boot the game as you’d normally do. Use the X button to select SCENARIO, then CONTINUE, now select the save file in slot 1 or slot2. On the next screen after loading the save file select CONFIG, then RANKING, then Moguls. Immeditely after select Moguls press the right directional key until the blue screen appears, then let go of all buttons on the controller. |
| The Legend Of Heroes I&II (single game compilation) | Boot the game as you’d normally do. On the main menu, select the Legend Of Heroes I (the I button on the left), not The Legend Of Heroes II (the II button on the right). Once in The Legend Of Heroes I load the save file. |
| Tony Hawk Pro Skater games | Boot the game as you’d normally do. On the main menu, wait until the save file is automatically loaded (it should say Loading TONYHAX EU/US/DE/FR, depending on the game’s region). After it’s done, choose the CREATE SKATER menu and press X. |
Only use high-quality CD-R media. If you want good results burning backups for your PS1 your CD-R media should contain:
I have found Verbatim DataLifePlus CD-Rs to be really good with PS1 consoles. Here is the ATIP information displayed by cdrecord -atip for a Verbatim DataLifePlus CD-R:
ATIP info from disk:
Indicated writing power: 4
Disk Is not unrestricted
Disk Is not erasable
Disk sub type: Medium Type A, high Beta category (A+) (3)
ATIP start of lead in: -11077 (97:34/23)
ATIP start of lead out: 359848 (79:59/73)
Disk type: Long strategy type (Cyanine, AZO or similar)
Manuf. index: 11
Manufacturer: Mitsubishi Chemical CorporationVerbatim UltraLife Archival Grade Gold CD-Rs also are really good, although they are more expensive then Verbatim DataLifePlus. I think Verbatim DataLifePlus CD-Rs are slightly better with the PS1 as well, but they are an option. Here is the ATIP information displayed by cdrecord -atip for a Verbatim DataLifePlus CD-R:
ATIP info from disk:
Indicated writing power: 5
Disk Is not unrestricted
Disk Is not erasable
Disk sub type: Medium Type B, low Beta category (B-) (4)
ATIP start of lead in: -12520 (97:15/05)
ATIP start of lead out: 359849 (79:59/74)
Disk type: Short strategy type (Phthalocyanine or similar)
Manuf. index: 26
Manufacturer: TDK CorporationDo not use cheap/poor quality CD-R media, which is almost always all that is available in retail stores and most likely any CD-R that is not “archival grade”. Poor quality cheap CD-R media can result in:
Later PS1 consoles (starting at the SCPH-5000 series and newer) and all PS2 consoles have a much greater tolerance to poor quality CD-R media, and may work fine with it however in general it is still best to just always use Verbatim DataLifePlus/UltraLife CD-Rs or something of similar quality. Here is the ATIP information displayed by cdrecord -atip for a Maxell Music CD-R:
ATIP info from disk:
Indicated writing power: 4
Disk Is unrestricted
Disk Is not erasable
Disk sub type: Medium Type A, low Beta category (A-) (2)
ATIP start of lead in: -12508 (97:15/17)
ATIP start of lead out: 359845 (79:59/70)
Disk type: Short strategy type (Phthalocyanine or similar)
Manuf. index: 22
Manufacturer: Ritek Co.If you are having issues booting discs in Tonyhax International, consider wiping with a clean microfiber cloth from the inner ring to the outer edge of the disc in all directions and then trying to boot the disc again.
If you use cdrdao, you must use the --swap argument for discs with CDDA audio or the game will have no music! Example:
cdrdao write --speed 1 --swap --eject yourgame.cueStarting in late 1998, some PSX games began including additional copy protection code that is designed to prevent playing backup CD-R copies of a game. This additional copy protection originally could only detect the first type of mod-chips (known as ‘non-stealth’) and would only fail if it detected one. Tonyhax International does not trigger this type of anti-piracy copy protection on stock consoles and these games don’t require any patching by Tonyhax International.
Starting in early 1999, the additional copy protection code was upgraded to detect both and ‘non-stealth’ mod-chips and ‘traditional’ swap tricks (which don’t update TOC data). Tonyhax International also does not trigger this type of anti-piracy copy protection on stock consoles and these games don’t require any patching by Tonyhax International.
However, starting in mid 1999, the additional copy protection code was upgraded again. This updated copy protection code can detect ‘non-stealth’ mod-chips, ‘traditional’ swap tricks (which don’t update TOC data), and the authenticity of the disc currently running in the PSX console. This last check causes the anti-piracy copy protection routine to trigger on games booted with Tonyhax International unless you are using a SCPH-1000 or early SCPH-3000 Japanese PSX console model. All is not lost however, Tonyhax International is now capable of game-specific on the fly patching to bypass this type of anti-piracy copy protection routine on ALL consoles. Below is a list of games which require explicit game-specific anti-piracy bypass support to work and their current status of support as of the latest version of Tonyhax International.
If you find a game which triggers the ‘anti-piracy screen of death’ that is not listed below, or you want support to be added for a game that is not yet currently supported but is listed below, please open an Anti-Piracy issue on the Tonyhax International Github. I would eventually like every game that can trigger the anti-piracy copy protection routine when booted via Tonyhax International on a stock console to have a game specific bypass implemented for 100% compatibility.
Some PAL games are using a different copy protection scheme known as LibCrypt protection. This protection can be bypassed by burning a backup CD-R in a very specific way to keep the protection working, or just by using an original authentic PAL PSX disc. Some PAL games may include both anti-piracy detection and LibCrypt detection, please open an Anti-Piracy issue on the Tonyhax International Github in such a case so that I can add support.
You can compile Tonyhax International from source using any operating system which supports Crosstool-NG using a script that builds a local tool-chain within the source directory that does not install anything into your system.
If you are running Fedora or Debian (Windows Subsystem For Linux can run these operating systems on Windows to provide a sufficient build environment), you can download the build dependencies automatically with the get-deps script, which is in the scripts folder found in the Tonyhax International source. The only dependency the get-deps script does not install is wine.Wine is currently required because the ROM file must be made into a NXFlash compatible format for the flasher CD, and currently that is done by the Windows program romfile.exe found in NXFlash.
If you are running some other Linux distribution, a *BSD operating system, or something else that supports Crosstool-NG but is not yet supported by the get-deps script, you need to install the equivelent packages or software, including wine. Then everything should work nicely in the next step.
Now that all the dependencies are installed, you can build the tool chain which compiles Tonyhax International. The way this works is actually highly unusual, but I think extremely elegant and clean. First execute the build-local-tool-chain script, which is in the scripts folder found in the Tonyhax International source. As long as you installed all the required dependencies a tool chain will be built and configured to be locally installed within the crosstool-ng sub module folder found in the Tonyhax International source. This means that nothing is changed on your system by installing the tool chain with the build-local-tool-chain script as it is completely portable accessible in the Tonyhax International source itself.
The build-local-tool-chain script also ensures that all sub modules are downloaded by running git submodule update --init --recursive. Now we can finally use the local tool chain to build Tonyhax International by running the script ./build-with-local-tool-chain, found in the scripts directory of each Tonyhax International release. After you build Tonyhax International a release .zip file will be generated in the root of the source directory.
Alex Free * Discovered a way to trigger the VC0 behavior in the anti-piracy module type which triggers on Tonyhax International, that defeats most anti-piracy copy protection routines found in some PSX games when explicit support is added. * Implemented all of the gameshark code integration, and wrote quite a few custom gameshark codes to bypass anti-piracy in games without codes previously being available. * Created the original TOCPerfect concept, first released as TOCPerfect v1.0. * First discovered that SetSession is bugged on the VC0 A, VC0 B, and VC1 A CDROM BIOS versions, and came up with the initial bypass idea by mashing SetSession in frustration on MottZilla’s PSX CDROM Debugger program that was created to debug the SetSession command on a early SCPH-1001, SCPH-1000, and SCPH-3000 consoles specifically. Since then Martin Korth has confirmed that SetSession is bugged on VC0 A, VC0 B, and VC1 A CDROM BIOS versions. * Later discovered that SetSession’s bug on early hardware can be bypassed by sending SetSession for a non-existant Session 2, waiting for 2 out of 3 expected interrupts, and then immediately sending SetSession 1. The idea to involve SetSession 2 however was MottZilla’s. * Wrote PSEXE2ROM to MottZilla’s specifications so that it could be integrated into the source tree for ROM support. * Integrated support for all Japanese PS1 and early PS2 consoles (SCPH-1000-SCPH-39000). * Integrated support for all new save game exploits from MottZilla and Patchouli. * Wrote TOCPerfect support in the loader. * Ported the famous Castlevania Chronicles stack overflow exploit from the USA version to the Japanese Rev 0 version. * Ported the 1500 Lite Series Castrol Honda Super Bike Racing stack overflow exploit from the USA version to the Japanese version.
MottZilla * Guidance on increasing the size of the Tonyhax International loader. * Wrote the GameShark Code Engine now used by the anti-piracy bypass features and explained how to use it. * The original sole creator of PS1 DemoSwap Patcher v1.0. MottZilla re-implemented the TOCPerfect concept into a much superior method, and included his implementation alongside of his DemoSwap idea in PS1 DemoSwap Patcher. * Wrote the controller input support for Tonyhax International. * Wrote the laser re-calibration function for VC2 and VC3 CDROM controllers. * Developed the first Japanese save game exploit for Crash Bandicoot 2. * Developed the PS-EXE loader used on GameShark/cheat cartridges to run Tonyhax International. * Came up with reset+unlock technique for TOCPerfect booting on USA/PAL consoles. * Helped debug the FreePSXBoot builder’s own patch to disable a FreePSXBoot memory card in slot 2. * Originally came up with the idea to involve the SetSession 2 command in a fix for the older CDROM controllers. * Explained the save game checksum routines in both Tonyhawk Pro Skater 2 (Japanese version) & Castrol Honda VTR (Japanese version) to help me create SuccessCheckSumUpdater (SuccessCU). * Explained to myself how to find/port save game exploits to new games or to different versions of games available in different regions (i.e. Japanese version).
Patchouli(karehaani)
Socram8888 is the original developer of the Tonyhax loader. The original Tonyhax loader credits are below, in alphabetical order: