Skip to content

Exploits > SCPH-90K 2.30 BOOTROM and PS2TV > SD2PSX

Great! Here is your OpenTuna download for SD2PSX / PSxMemCard Gen2:

Step 1 - Update Firmware

  • Download firmware.
  • Update the firmware: Press and hold either button, plug USB-C in via your computer, drag and drop the sd2psx.uf2 file you downloaded above to the "storage" device that popped up. Within ~10 seconds it should reboot and be safe to unplug.

Step 2 - MMCE Download

BOOT channels may be lost!

Caution, this will overwrite channels 1-7! Backup as needed. If you have saves, recommended to copy and PSU paste to usb and then convert to individual cards via GDX Save Converter

Step 3 - Set BOOT Channel

  • Plug MMCE device into USB-C (Recommended) or PS2 (and power on PS2).
  • Set to channel 3: OpenTuna by short press of either button until you reach channel 3. You should see this splash screen:
    ProtoPwn_Spash

Step 4 - Reboot

  • Plug device into PS2 if you have not, then boot/reboot the PS2. You should see the screenshots below:
Example of what you will encounter:
  • unhacked_Pic

Step 1: Select Browser

  • memcard_Pic

Step 2: Select Memory Card 1

  • corrupted-icon_Pic

Step 3: Press Back

  • corrupted-icon-2_Pic

Step 4: Press Back

  • PS2BBL_Pic

Step 5: Press controller button here for hotkeys or wait for it to autoboot what you have set for LK_AUTO_E? in mc?:/SYS-CONF/PS2BBL.INI

  • OSDMenu_Pic

Step 6: OSDMenu which is hacked OSDSYS. Edit mc?:/SYS-CONF/OSDMENU.CNF as desired. Simply remove # per entry to show items that are hidden.

  • protopwn-browser_pic

TIP: You can launch apps from here!

Step 5 - OSDMenu Configurator

  • Scroll down to the 3rd from bottom entry: OSDMenu Configurator
    You will use this to show, hide, and edit your OSDMenu configuration. As OSDMenu shows all enabled entries, not just all found paths, we have configured a clean minimal setup that you may wish to change.

Boot Process:

---
config:
  theme: mc
  layout: elk.forced
  look: classic
---
graph LR
    A(["PS2 Power On/Reset"]) L_A_B_0@-- "BOOTROM 1.00-2.20" --> B["OSDSYS UPDATE<br>B?EXEC-SYSTEM<br>(PS2BBL/ProtoPwn UMCS)<br>./CONFIG.INI <br>DOES NOT EXIST!"]
    A L_A_n1_0@-- "BOOTROM 2.30,2.50<br>and DEV 1 Modchips" --> n1["OPENTUNA/DEV 1 CHIPS<br>mc?:/BOOT/BOOT.ELF<br>(PS2BBL)<br>./CONFIG.INI <br>DOES NOT EXIST!"]
    B L_B_n5_0@-- "Fall back to SYS-CONF" --> n5@{ label: "<pre style=\"font-family:\"><code style=\"font-family:\">mc?:/SYS-CONF/PS2BBL.INI</code></pre>" }
    n1 L_n1_n5_0@-- "Fall back to SYS-CONF" --> n5
    n5 --> n6["AutoLaunch<br>or<br>Hotkeys"]
    n6 --> n7@{ label: "<span style=\"--tw-scale-x:\"><b><span style=\"--tw-scale-x:\">PS2BBL.INI AUTOLAUNCH</span><br style=\"--tw-scale-x:\"></b></span><br style=\"--tw-scale-x:\"><span style=\"background-color:\">1: EMPTY</span><br style=\"--tw-scale-x:\"><br style=\"--tw-scale-x:\"><span style=\"background-color:\">2: EMPTY</span><br style=\"--tw-scale-x:\"><br style=\"--tw-scale-x:\"><span style=\"--tw-scale-x:\">3: SYS_OSDMENU</span><br style=\"--tw-scale-x:\"><br style=\"--tw-scale-x:\"><span style=\"--tw-scale-x:\">4: SYS_FMCBD-1966</span><br style=\"--tw-scale-x:\"><br style=\"--tw-scale-x:\"><span style=\"--tw-scale-x:\">5: SYS_FMCBD-1965</span><br style=\"--tw-scale-x:\"><br style=\"--tw-scale-x:\"><span style=\"--tw-scale-x:\">6: SYS_FMCBD-1955<br style=\"--tw-scale-x:\"></span><br style=\"--tw-scale-x:\"><span style=\"background-color:\">7: SYS_FMCBD-18C</span><br style=\"--tw-scale-x:\"><br style=\"--tw-scale-x:\"><span style=\"--tw-scale-x:\">8: BOOT/BOOT2.ELF<br style=\"--tw-scale-x:\"><br style=\"--tw-scale-x:\">9: OSDSYS</span>" }
    B@{ shape: rect}
    n1@{ shape: rect}
    n5@{ shape: proc}
    n6@{ shape: diam}
    n7@{ shape: lin-proc}
     A:::Ash
    classDef Ash stroke-width:1px, stroke-dasharray:none, stroke:#999999, fill:#EEEEEE, color:#000000
    style A stroke:#00C853,fill:#00C853,color:none
    style B color:#D50000,fill:transparent
    style n1 color:#D50000,fill:transparent
    style n5 fill:transparent,color:#00C853
    style n6 fill:#00C853,color:#000000
    style n7 fill:#FFF9C4
    linkStyle 0 stroke:#00C853,fill:none
    linkStyle 1 stroke:#00C853,fill:none
    L_A_B_0@{ animation: slow } 
    L_A_n1_0@{ animation: slow } 
    L_B_n5_0@{ animation: slow } 
    L_n1_n5_0@{ animation: slow }

Landing on your hacked OSDSYS of choice:

PS2BBL.INI and PSXBBL.INI are setup so that minimal config changes are needed if at all. To land on your hacked OSDSYS of choice, install the OSDMenu/ FMCB Version XXXX as needed. If multiple are installed (such as the MMCE AIO downloads), you can delete in order from first to last to land on the desired app. This is especially useful for modchip users as they may not play well or at all with some or all of the OSDSYS such as I believe Mars Pro. In that case, just delete all of the SYS_OSDMENU and SYS_FMCB-XXXX folders. Modchip users may need to disable chip to do so.

PS2BBL Hotkeys:

PS2BBL-Hotkeys_Pic

Config @ mc?:/SYS-CONF/PS2BBL.INI

Emergency Mode

If something breaks on your setup but PS2BBL still boots, just hold R1+START. It will trigger emergency mode where PS2BBL will try to boot RESCUE.ELF from USB device Root on an endless loop. Recommended to rename wLE ISR Exfat to RESCUE.ELF

Channels included:

ProtoPwn_Spash ProtoPwn_Spash ProtoPwn_Spash ProtoPwn_Spash ProtoPwn_Spash ProtoPwn_Spash ProtoPwn_Spash

Lite? What does that mean?

"Lite" VMCs only have exploit+UMCS installed. These will autoboot PS2BBL (hotkeys and autolaunch) to wLE ISR XF (file manager and elf loader).

Otherwise VMCs come pre-installed with exploit+UMCS+homebrew. Homebrew that cannot be installed due to licensing or device requirements are not included: for example XEB+ and RETROLauncher.