Homebrew Enabler ("HEN") for 3.11 by Noobz / Dark_AleX
-------------------------------------------------------

This program enables homebrew and downgraders to be run on 3.11 using the US or EU version of lumines. It makes a patch that remains permanent until hardware reset. Sleep mode won't remove the patch.

This is based on the source for HEN 2.71 provided by Dark_Alex, thanks for the code and the help.

Note: this program writes some small files in the flash, ONLY the first time is executed. It does NOT rewrite any existing file in the system, it writes new files, so the probabilities of bricking are practically null.

Note that this package also includes a key restorer for v3.11 HEN - this key restorer is designed for TA-082/TA-086 motherboard PSPs that have previously been downgraded to v1.50. It allows you to restore your PSP's idstorage to its original factory settings, so that it can be upgraded to official Sony firmwares, if required. See the enclosed idstorage_release.txt for details.

You can also use this HEN to run a downgrader, which will automatically perform any necessary idstorage patches and install v1.50 firmware on your PSP. See the enclosed Downgrader_HOWTO.txt for details.


Instructions
------------
- Change the language to English, under System Settings -> System Language
- Copy all contents inside MS_ROOT to the root of your memory stick.
- Load Lumines
- When you run the program, you'll see a coloured screen that can be one of two colors:
* Red: the files couldn't be written to the flash (it happens a few times). Just keep trying.
* Pale Blue: The files were written succesfully, and HEN is active. After that, the xmb will
be rebooted. Now you can run the homebrew in format prepared for 2.71. (see details below).
Note that a pale blue screen will appear again every time the PSP reboots with HEN active.

- As mentioned before, the patch will remain resident in memory, and even entering sleep mode
won't delete it. Only a hardware reset will remove the program from memory.

- When you do a hardware reset, you'll have to run Lumines again.
This time there will just be the pale blue screen and xmb reboot, since this time there is
no need to write to the flash.

Note: Ensure that you leave the PSP/HEN_311 and PSP/SAVEDATA directories that are used for HEN
as some of the files are used each time you enter HEN.
Note2: Once the program is loaded, it is independant of the memory stick contents. So you can
freely swap memory sticks.


Notes about homebrew running
-----------------------------

- Current homebrews are not supported. Since current homebrews are in static elf format, they
won't run (they are rejected by the 3.11 kernel). Homebrews for 3.11 have to be in prx format.
Programmers see the programming notes.
In future versions i may patch the kernel to allow it to accept static elf's.

- You can try using the PatchSFO tool from www.noobz.eu to patch homebrew to HEN format.

- There are some samples in the "GAME" directory, all of them ported from the pspsdk samples,
except the nanddumper written by Dark_AleX.

* polyphonic, pspsdk sample (user mode).
* cube, pspsdk sample (user mode). It shows a cube rotating.
* kdumper, pspsdk sample (kernel mode). It dumps kernel memory to the memory stick.
* ipldumper, pspsdk sample (kernel mode). It dumps the ipl to the memory stick.
* systemparam, pspsdk sample (user mode). It displays info about the system
* nanddumper, by Dark_AleX. (kernel mode). It dumps the full nand content to the file
"nandimage.flash" in the memory stick. The format of the dump is compliant with u.p. chip.
(It requires 33 MB of free space in the memory stick).



Programming notes for developers
--------------------------------

- As mentioned before, homebrew has to be in prx format, at least atm. Furthermore, the main prx, the one in
the pbp, has to be an user prx. However this user prx can load unsigned kernel modules from
the memory stick, allowing kernel mode apps.

- There is no need for noplainmodule check patch or nodevicecheck patch, since those are done
by the homebrew enabler.

- Try to use USE_KERNEL_LIBS = 1 in your kernel prx's. In 2.XX, the separation between user
and kernel mode is higher than in 1.XX.
Some functions in "*ForUser" are now totally separated (different address) from their
"*ForKernel" equivalents. A good example is ModuleMgr. If you are in a kernel prx and
you call the sceKernelLoadModule of ModuleMgrForUser, you will get a "ILLEGA_PERMANENT_CALL" error.

- See the source code of the samples to have a hint on how to program for 3.11.

Credits and thanks.
-------------------
- Noobz team for porting to 3.50
- Noobz team for porting to 3.03
- Noobz team for porting to 2.80

Thanks to:
- Original code for 2.71 HEN supplied by Dark_AleX

- Booster for creating devhook. HEN reboot method is based on devhook one.

- Mathieulh for the help provided to Dark_AleX for the two months that he was without psp.

311 HEN Noobz Downgrader Guide
------------------------------

Here is a guide for downgrading any current PSP hardware version
(TA-079 - TA-086) stuck on firmwares 3.10 or 3.11 to 1.50.

IMPORTANT:
The Noobz team is strongly against piracy, and we're not just
saying that to cover our butts. When you pirate games, you're
removing the incentive for game and console makers to continue
making fun things for us to play with. We are releasing this
downgrader because we believe that using your PSP to its full
potential and being able to customize it and run homebrew code
is a fair use right that should be available to everyone.
Please purchase games that you intend to play. Thanks!

Requirements
------------
In order to downgrade a stuck PSP in 3.10 / 3.11 firmware you will need the following:

- Lumines (EU or US version only currently)

- 3.11 Downgrader (this package)

- 1.50 Update
http://dl.qj.net/PSP-Firmware-1.50-F.../163/catid/163

- 3.11 Update if you are on firmware 3.10
http://dl.qj.net/PSP-Firmware-3.11-P...2601/catid/163

******************************************************************
* WARNING, ANY DOWNGRADER HAS A CHANCE OF BRICKING A PSP. WHEN A *
* PSP IS BRICKED YOU WILL NOT BE ABLE TO USE IT ANYMORE. WE HAVE *
* DONE A LOT TO TRY AND MINIMISE THE RISK, BUT THERE IS ALWAYS *
* SOME LEVEL OF RISK WHICH YOU MUST ACCEPT IF YOU WANT TO *
* DOWNGRADE *
******************************************************************

Instructions
------------
Here are the steps to downgrade any stuck PSP in 3.10 / 3.11 firmware to 1.50:

1 - If you have a 3.11 PSP skip to step 6

2 - Download 3.11 update from here:
http://dl.qj.net/PSP-Firmware-3.11-P...2601/catid/163

3 - Rename the file from 12601_EBOOT.PSP to EBOOT.PSP and place the file in <pspdrive>:/PSP/GAME/UPDATE

4 - On the PSP, run the 3.11 update from the memory stick under the Game menu.

5 - Delete <pspdrive>:/PSP/GAME/UPDATE

6 - Copy the contents of the folder MS_ROOT from the 3.11 downgrader ZIP to
the memory stick

7 - Unzip the 1.50 update to a temporary folder. Rename the EBOOT.PBP to
UPDATE.PBP and copy it to <pspdrive>:/PSP/GAME/UPDATE/ . DO NOT
OVERWRITE PSP/GAME/UPDATE/EBOOT.PBP!

8 - Load Lumines and press x to start the game

9 - The screen will clear to black and fill with a light blue colour, then
the PSP will reset itself

10 - Check that HEN is running by going to system settings, then to
"System Information" and it should show up as system version
311 HEN

11 - If it is showing up as HEN then go to the memory stick and
run the x.yz update

12 - If you have an unpatched TA-082 or higher motherboard, you will be
prompted to allow the downgrader to patch your motherboard so it
can be safely downgraded. The downgrader will not let you proceed
without patching, if your motherboard requires it.

13 - Before the downgrader does anything to your PSP it will ask
for you to agree to what it is doing, if you no longer want to
continue press the Right Shoulder Button (R-TRIGGER).

14 - Once you have agreed to start the downgrade do not unplug the
PSP, or try and restart it

15 - Once finished the PSP will ask you to press X, and reset itself

16 - If it comes up saying that the settings are corrupt, press x
to continue, this will mean you will need to re-enter the
settings for network connections into your PSP, otherwise go to
step 18

17 - Load the included NetConfigBackup application in your PSP, and select to
restore, this will take the backup that was done of the network config
that was done automatically during the downgrade.

18 - All done now :-) Hopefully you now have a 1.50 PSP. Enjoy it responsibly.


Troubleshooting
---------------
- If when trying to restore the network config using netconf backup you
find that it gives you an error on the downgraded 1.50 PSP, try adding
a temporary network config, then deleting it and run the netconf backup
again.

- Note that the network config restore is only intended for v1.50 firmware.

ID Storage Restorer
===================

This program is used to restore the common keys that get changed in TA-082+ PSPs
during downgrades in order to allow Official Sony Firmwares above 3.11 to be installed
on TA-082+ patched PSPs.

This is just for TA082+ PSPs (it will not run on others). This includes setting key5
back to normal value, which will mean that it will cause 150 to no longer be able to
run, based on this we have ensured that it will only run on HEN311.

Usage:
------
Just run the EBOOT (which is included in the v3.11 HEN package, and shows up
in your PSP's XMB GAME menu as "ID STORAGE RESTORER") and it will patch the keys
back to what they should be.


Noobz