Il noto Dark_Alex, torna di prepotenza sulla scena hacking per PSP, rilasciando un'applicazione che ci permette di avviare programmi homebrew su PSP 2.71, direttamente dalla dash della console ( un pò come avviene sulle PSP con firmware 1.50). L'applicazione da lui sviluppata, necessita di copiare alcuni files di piccole dimensioni direttamente sulla flash, ma il rischio di brick è fortunatamente scongiurato poichè questi files non andranno a sovrascrivere alcun dato già esistente o di vitale importanza per la console. Inoltre è necessario apportare delle modifiche ai files Eboot.PBP delle applicazioni, affinchè queste siano correttamente eseguite. Di seguito viene riportato il readme del programma ed il link per il download.

Homebrew Enabler For PSP 2.71 Firmware (Revision A)

This program enables homebrew to be run in 2.71 through the XMB. It makes a patch that remains permanent until hardwar reset. Sleep mode won't remove the patch.

Note: this program writes some small files in the flash, ONLY the first time is executed. IT does NOY rewrite any existing file in the system, it writes new files, so the probabilities of breaking are practically null.

It doesn't work on DevHook, because the patch methods that it does interphere with DevHook. I may release in the future a special version for 2.71 DevHook that only does the extended patches for the kernel PRX loading. It would be added to the pspbtcnf* files, so no need for the TIFF when I port it to DevHook.

Instructions
------------

- Copy all contents inside MS_ROOT to the root of your memory stick.
- Go to the PHOTO viewer of the XMB and enter in the folder "HEN".
- If the PSP just freeze, reboot your psp and try again. Currently the TIFF is very unstable and it
is only executed sometimes. I'll try to improve that in the future.

- The first time you run the program, you will see quickly a blue screen, and after that a screen
that can be of two colors:

* Red: the files couldn't be written to the flash (it hapens a few times). Just keep trying.
* Green: The files were written succesfully. After that, the xmb will be rebooted. Now you can run
the homebrew in format prepared for 2.71. (see details below).

- As mentioned before, the patch will remain resident in memory, and even entering sleep mode
won't delete it. Only a hardware reset will remove the program from memory.

- When you do a hardware reset, you'll have to run the TIFF again.
This time there won't be green or red screen, just a blue screen and xmb reboot, since
this time there is no need to write to the flash.

Note: the files pspbtknf.txt, pspbtknf_game.txt, pspbtknf_updater, and systemctrl.prx in the root
of the memory stick are only needed the first time the program is executed. After that you
can delete those. However, don't delete patch.bin, h.bin and the folder with the TIFF, since
you will need those the next time you do a hard reset and want to run the program again.

Note2: Once the program is loaded, it is independant of the memory stick contents. So you can
freely swap memory sticks.


Notes about homebrew running
-----------------------------

- Current homebrews are not supported. Since current homebrews are in static ELF format, they
won't run (they are rejected by the 2.71 kernel). Homebrews for 2.71 have to be in PRX format.
Programmers see the programming notes.
In future versions i may patch the kernel to allow it to accept static ELF's.

- There are some samples in the "GAME" directory, all of them ported from the psp sdk samples,
except the nanddumper written by me.

* polyphonic, psp sdk sample (user mode).
* cube, psp sdk sample (user mode). It shows a cube rotating.
* kdumper, psp sdk sample (kernel mode). It dumps kernel memory to the memory stick.
* ipldumper, psp sdk sample (kernel mode). It dumps the ipl to the memory stick.
* systemparam, psp sdk sample (user mode). It displays info about the system
* nanddumper, by me. (kernel mode). It dumps the full nand content to the file
"nandimage.flash" in the memory stick. The format of the dump is compliant with U.P. chip.
(It requires 33 MB of free space in the memory stick).



Programming notes for developers
--------------------------------

- As mentioned before, homebrew has to be in PRX format, at least atm. Furthermore, the main PRX, the one in
the PBP, has to be an user PRX. However this user PRX can load unsigned kernel modules from
the memory stick, allowing kernel mode apps.

- There is no need for noplainmodule check patch or nodevicecheck patch, since those are done
by the homebrew enabler.

- Try to use USE_KERNEL_LIBS = 1 in your kernel PRX's. In 2.XX, the separation between user
and kernel mode is higher than in 1.XX.
Some functions in "*ForUser" are now totally separated (different address) from their
"*ForKernel" equivalents. A good example is ModuleMgr. If you are in a kernel prx and
you call the sceKernelLoadModule of ModuleMgrForUser, you will get a "ILLEGA_PERMANENT_CALL" error.

- Currently DevHook emulated 2.71 is not supported. I'll try to add support to DevHook, so
programs for 2.71 can be developed in a 1.50

- See the source code of the samples to have a hint on how to program for 2.71.

Credits and thanks.
-------------------

- Coded by Dark_AleX

Thanks to:

- Booster for creating devhook. HEN reboot method is based on devhook one.
- Nopx86 of the TIFF exploit.
- hitchhikr for the kernel exploit of 2.50-2.71.

Download: Homebrew Enabler for 2.71