Skip to content

Exploits > SCPH-18K to SCPH-90K 2.20 BOOTROM and PSX > Sony/Other Memcard

Great! Here is your PS2BBL download for Sony/other memcards:

Step 1 - Download KELFBinder

Step 2 - KELFBinder Tutorial

KELFBinder MagicGate test fails, and/or my bootrom is 2.30 or later!

If the MagicGate test fails or your bootrom is 2.30 or later, you need to use OpenTuna. You can still run KELFBinder, but chose to install OpenTuna via the KELFBinder Installer or OpenTuna Installers found here.

Using the wrong OpenTuna version:

Using the incorrect OpenTuna version for your memory card may corrupt the file system. If you are unsure, run ROM Version Check to see your BOOTROM info version to help choose the correct OpenTuna exploit! This is included in the KELFBinder download labeled in KELFBinder-UMCS/INSTALL/CORE/BACKDOOR.ELF

Otherwise if installing for another console use these below:

PSU Paste Tutorial

OpenTuna 1.10-1.60 SCPH-18XXX to 3XXXX

OpenTuna 1.70 SCPH-50XXX (some)

OpenTuna 1.90-2.50 SCPH-50xxx (some) / 7xxxx / 9xxxx and KDL

These 2 folders BOOT and SYS-CONF are needed to complete a manual OpenTuna installation

BOOT, BOOT MMCE or BOOT MX4SIO

SYS-CONF

And to complete the install to align with the configs in SYS-CONF

OSDMenu

NHDDL (selct nightly!)

OPL 1.2.0 Beta 2241

Neutrino (NOT a PSU. Unzip to root of USB and MC Paste via wLE)

DKWDRV

Restart

PowerOff

Step 4 - OSDMenu Configurator

  • OSDMenu COnfigurator

  • Download OSDMenu Configurator and place on device of choice (usb, mx4sio, mmce) at device:/APPS/
    You should end up with device:/APPS/SYS_OSDMENU-CONFIGURATOR/osdmenu-configurator.elf
    You will launch OSDMenu Configurator to configure your new hacked OSDSYS (OSDMenu) to show, hide, and edit options as desired once your PS2 is up and running in next step.

Step 5 - Reboot

  • Reboot your PS2. You may need to remove the exploit or memory card you used to create this card. See the screenshots below:
Example of what you will encounter:
  • PS2BBL_Pic

Step 1: Press controller button here for hotkeys or wait for it to autoboot what you have set for LK_AUTO_E? in mc?:/SYS-CONF/PS2BBL.INI

  • OSDMenu_Pic

Step 2: OSDMenu which is hacked OSDSYS. Edit mc?:/SYS-CONF/OSDMENU.CNF as desired. Simply remove # per entry to show items that are hidden.

  • protopwn-browser_pic

TIP: You can launch apps from here!

Step 5 (FOR PSX DESR-XXXX owners)

Boot Process:

---
config:
  theme: mc
  layout: elk.forced
  look: classic
---
graph LR
    A(["PS2 Power On/Reset"]) L_A_B_0@-- "BOOTROM 1.00-2.20" --> B["OSDSYS UPDATE<br>B?EXEC-SYSTEM<br>(PS2BBL/ProtoPwn UMCS)<br>./CONFIG.INI <br>DOES NOT EXIST!"]
    A L_A_n1_0@-- "BOOTROM 2.30,2.50<br>and DEV 1 Modchips" --> n1["OPENTUNA/DEV 1 CHIPS<br>mc?:/BOOT/BOOT.ELF<br>(PS2BBL)<br>./CONFIG.INI <br>DOES NOT EXIST!"]
    B L_B_n5_0@-- "Fall back to SYS-CONF" --> n5@{ label: "<pre style=\"font-family:\"><code style=\"font-family:\">mc?:/SYS-CONF/PS2BBL.INI</code></pre>" }
    n1 L_n1_n5_0@-- "Fall back to SYS-CONF" --> n5
    n5 --> n6["AutoLaunch<br>or<br>Hotkeys"]
    n6 --> n7@{ label: "<span style=\"--tw-scale-x:\"><b><span style=\"--tw-scale-x:\">PS2BBL.INI AUTOLAUNCH</span><br style=\"--tw-scale-x:\"></b></span><br style=\"--tw-scale-x:\"><span style=\"background-color:\">1: EMPTY</span><br style=\"--tw-scale-x:\"><br style=\"--tw-scale-x:\"><span style=\"background-color:\">2: EMPTY</span><br style=\"--tw-scale-x:\"><br style=\"--tw-scale-x:\"><span style=\"--tw-scale-x:\">3: SYS_OSDMENU</span><br style=\"--tw-scale-x:\"><br style=\"--tw-scale-x:\"><span style=\"--tw-scale-x:\">4: SYS_FMCBD-1966</span><br style=\"--tw-scale-x:\"><br style=\"--tw-scale-x:\"><span style=\"--tw-scale-x:\">5: SYS_FMCBD-1965</span><br style=\"--tw-scale-x:\"><br style=\"--tw-scale-x:\"><span style=\"--tw-scale-x:\">6: SYS_FMCBD-1955<br style=\"--tw-scale-x:\"></span><br style=\"--tw-scale-x:\"><span style=\"background-color:\">7: SYS_FMCBD-18C</span><br style=\"--tw-scale-x:\"><br style=\"--tw-scale-x:\"><span style=\"--tw-scale-x:\">8: BOOT/BOOT2.ELF<br style=\"--tw-scale-x:\"><br style=\"--tw-scale-x:\">9: OSDSYS</span>" }
    B@{ shape: rect}
    n1@{ shape: rect}
    n5@{ shape: proc}
    n6@{ shape: diam}
    n7@{ shape: lin-proc}
     A:::Ash
    classDef Ash stroke-width:1px, stroke-dasharray:none, stroke:#999999, fill:#EEEEEE, color:#000000
    style A stroke:#00C853,fill:#00C853,color:none
    style B color:#D50000,fill:transparent
    style n1 color:#D50000,fill:transparent
    style n5 fill:transparent,color:#00C853
    style n6 fill:#00C853,color:#000000
    style n7 fill:#FFF9C4
    linkStyle 0 stroke:#00C853,fill:none
    linkStyle 1 stroke:#00C853,fill:none
    L_A_B_0@{ animation: slow } 
    L_A_n1_0@{ animation: slow } 
    L_B_n5_0@{ animation: slow } 
    L_n1_n5_0@{ animation: slow }

Landing on your hacked OSDSYS of choice:

PS2BBL.INI and PSXBBL.INI are setup so that minimal config changes are needed if at all. To land on your hacked OSDSYS of choice, install the OSDMenu/ FMCB Version XXXX as needed. If multiple are installed (such as the MMCE AIO downloads), you can delete in order from first to last to land on the desired app. This is especially useful for modchip users as they may not play well or at all with some or all of the OSDSYS such as I believe Mars Pro. In that case, just delete all of the SYS_OSDMENU and SYS_FMCB-XXXX folders. Modchip users may need to disable chip to do so.

PS2BBL Hotkeys:

PS2BBL-Hotkeys_Pic

Config @ mc?:/SYS-CONF/PS2BBL.INI

Emergency Mode

If something breaks on your setup but PS2BBL still boots, just hold R1+START. It will trigger emergency mode where PS2BBL will try to boot RESCUE.ELF from USB device Root on an endless loop. Recommended to rename wLE ISR Exfat to RESCUE.ELF