PS1 tonyhax - A Software backup loader exploit leverages save game exploit

Looks like those Classic PlayStation Consoles are still making waves in the homebrew scene

Presenting tonyhax - a softmod backup loader for the Sony PlayStation 1. This is a backup loader that leverages a save game exploit present on Tony Hawk's Pro Skater 2 and 3, in both the European PAL and American NTSC-U versions. For more information, see https://orca.pet/tonyhax.

Why?

The first question that might pop up on your mind regarding this project is “why the F%$# didn’t you just install a modchip?”.
- The answer is simple: I didn’t want to mod my mint, boxed PSone, but I didn’t want to leave it rotting on a shelf either.
Also, as an owner of a SCPH-102 console, these are a pain in the ass when it comes to chipping - in addition to the generic SCEx wobble check performed by the CD controller that is easily patchable, the boot menu on these also checks for the region string, which involve installing even more wires and a full sized Arduino Pro Mini or AtMega328 chip to patch the CPU BIOS to play out of region games. Not cool.

Installation

To install this exploit, you’d need a means of copying the save file to a PS1 memory card. Personally, I’ve used a PS2 with Free McBoot and uLaunchELF.
All you have to do is copy the game’s crafted save file and the TONYHAX-SPL file into the card. That’s it.
Once installed, you can freely copy it to other cards using the PS1 and the memory card management menu, and distribute it freely amongst friends.

Usage

Once installed, all you have to do is boot the game like you’d normally do.
Once you get to the main menu, it’ll load the save game (it should say “Loading TONYHAX”). After it’s done, go to the “CREATE SKATER” function and press X. After a couple seconds, tonyhax should boot.

Save games

Save files:

BASLUS-00571: Brunswick Circuit Pro Bowling (NTSC-US) (SLUS-00571) NEW
BASLUS-00856: Brunswick Circuit Pro Bowling 2 (NTSC-US) (SLUS-00856) NEW
BASLUS-01066TNHXG01: Tony Hawk's Pro Skater 2 (NTSC-US) (SLUS-01066)
BASLUS-01419TNHXG01: Tony Hawk's Pro Skater 3 (NTSC-US) (SLUS-01419)
BASLUS-01485TNHXG01: Tony Hawk's Pro Skater 4 (NTSC-US) (SLUS-01485) NEW
BESLES-01376: Brunswick Circuit Pro Bowling (PAL-E) (SLES-01376) NEW
BESLES-02618: Brunswick Circuit Pro Bowling 2 (PAL-E) (SLES-02618) NEW
BESLES-02908TNHXG01: Tony Hawk's Pro Skater 2 (PAL-EU) (SLES-02908)
BESLES-02909TNHXG01: Tony Hawk's Pro Skater 2 (PAL-FR) (SLES-02909) NEW
BESLES-02910TNHXG01: Tony Hawk's Pro Skater 2 (PAL-DE) (SLES-02910) NEW
BESLES-03645TNHXG01: Tony Hawk's Pro Skater 3 (PAL-EU) (SLES-03645)
BESLES-03646TNHXG01: Tony Hawk's Pro Skater 3 (PAL-FR) (SLES-03646) NEW
BESLES-03647TNHXG01: Tony Hawk's Pro Skater 3 (PAL-DE) (SLES-03647) NEW
BESLES-03954TNHXG01: Tony Hawk's Pro Skater 4 (PAL-EU) (SLES-03954) NEW
BESLES-03955TNHXG01: Tony Hawk's Pro Skater 4 (PAL-DE) (SLES-03955) NEW
BESLES-03956TNHXG01: Tony Hawk's Pro Skater 4 (PAL-FR) (SLES-03956) NEW
TONYHAX-SPL: tonyhax's secondary program loader (SPL)

Compatibility

I’ve personally only attempted this with a PAL SCPH-102 PSone, but according to Martin Korth’s documentation this should work with: