Would someone who own such cart able to dump the bios/firmware at [0x22000000, 0x22020000], 128KB
There is something more than the SATxxx.CPE firmware
Maybe that's the ROM on the target interface.
Dumping the region (0x22000000-0x22020000) VBT specified is already possible with Save Game Copier. If you have a MODE or Satiator you can dump it directly to an SD card. If you don't have MODE/Satiator you can dump that region to internal memory (in small chunks as internal memory is only ~32kb) and use Save Game Extractor to extract the firmware over audio.Ive thinked about it and there is not a simple way for dump the rom. Or you got an Mode or a Satiator like slinga said or you need to setup all psy-q tools, code some kind of dumper and use scsi, or hotswap the cart, or using serial port.