program loader from PAR

[Daniel Eriksson]

What if we put a program loader on a PAR. The program in the PAR would boot, and then games from a cd could be booted from the PAR program. Is this possible? Someone has probably already asked, but ive never heard of it.

 

[IBarracudaI]

I think that is what PAR's already does...

But to unlock the cd-drive to allow reading from cds a security check must be perfomed... 🙁

 

[vbt]

I think it's possible but there are things to do in order to use the CD player (unloock it for instance). Unfortunatly, I don't have a PAR and a Commlink, I can give you a working text bootloader bin file to make some tests. Also it means that the CD must have FLD_KNL.BIN at its root folder, etc ...

 

[vbt]

Originally posted by IBarracudaI@Aug 24, 2003 @ 11:16 PM

I think that is what PAR's already do...

But to unlock the cd-drive to allow reading from cds a security check must be perfomed... 🙁

Normally the security check is not a problem becausewhen you use the PAR and th CD player the security process is not called, also there is the CDunlock function in a topic of this forum.

 

[IBarracudaI]

Originally posted by vbt@Aug 24, 2003 @ 10:29 PM

Normally the security check is not a problem becausewhen you use the PAR and th CD player the security process is not called, also there is the CDunlock function in a topic of this forum.

Are you sure?

When booting a game from the PAR menus, when you select start game, security track is read. the same happens when you change cds by opening the cd drive door, it drops to the cd-player and when you use the start app button, it checks for the protection.

Or do you mean other "security process" ?

I know about that code you are referring, and if I remember correcty the problem was that the drive has to be unlocked to use that unlocking code...

 

[slinga]

What's the benefit to this?

 

[vbt]

Originally posted by slinga@Aug 25, 2003 @ 12:05 AM

What's the benefit to this?

It seems IBarracudaI is right, when the CD is unlocked the security process is called. So there is no benefits of doing that if it doesn't bypass the read of the security area.

Also it would be interesting to make a CD without an IP.BIN but with a data track and read its content with the program loaded in memory. I just hope that the saturn don't try to read the security area when there is a data track without an IP.BIN

 

[IBarracudaI]

I'm almost sure saturn won't ask for a security check if IP.BIN isn't found, after all, that way saturn won't consider it a valid game cd.

hmm, probably some code that runs the file indicated in IP.BIN as being the first file to boot...

 

[ExCyber]

As I understand it (based on info from TyRaNiD), the main program controls when the security check happens (it's a separate CD block command), but the CD block will return garbage data beyond the first 32K or so of data tracks. In theory it should be possible to develop an alternate mastering program and CD library that works by encoding/decoding data in audio tracks, but whether or not that would be worth it is questionable given the limited compatibility it would result in.

 

[mrkotfw]

i may have something special, http://ss_snk_359.atheos.net/tmp/security.c - maybe that will help? see this may sound stupid but if we somehow add some code and compile, upload it with a PAR, put in a modified cd to make it work with the compiled bin... and feed it to the saturn when its looking for it. or... put it all the way at the end, injecting it into the last sectors possible of a CD and see if the saturn will actually load it. those are theories 🙂 dont flame me

 

[antime]

Isn't that just the block of data that must be present in the IP?

 

[AntiPasta]

well, if the bootdisc can bypass the whole security ring check procedure with some code in its AIP there's prolly some undocumented CD block command to ignore the security ring, or rather the absence thereof...

 

[antime]

Try loading the code from the disc using a PAR, then you'll know if it can bypass security checks or not.

 

[mrkotfw]

compile the security.c ? -- i checked a Ip.bin from saturn and if you look at the end of the array it has something the Ip.bin doesnt have anywhere... but it resemeble the text on the security ring... he would Have to probably enable the cd-drive... but how? assembly?

 

[antime]

No, that code (sega_security_code[]) is definitely the same as the block of data the bios checks for (sys_sec.o in SGL). The second array (area_code_us[]) is the area code for the U region (sys_areu.o in SGL).