Exploits - Downgrading Your Firmware

There is a downgrader availible for versions 1.50 - 2.71; NOT v2.80 or over, so please don't ask me about those firmware revisions.

On this page is (In order):

The 1.51-2.00 MPH downgrader;
The "Noobz" 2.01 downgrader;
The 2.50/2.60 GTA method downgrader;
0okm's 2.80 downgrader
Dark_AleX's TA-082 downgrader
The 2.71 Non-GTA method downgrader;
And the v1.50 to v1.00 downgrader.

Downgrading 1.51, 1.52, or 2.00 (Non-Ta-082)

These are the easiest and safest firmware's to downgrade. Follow these steps:

----

1. If you have 1.51 or 1.52, please upgrade to 2.0, NOT BEYOND!

2. Download the MPH downgrader from HERE, Place the "index.dat" file and the "h.bin" files from the archive into the ROOT of the PSP's memory Stick.

3. In the PSP>Photo directory in the archive, place the "overflow.tif" file in the PSP>PHOTO folder on the PSP.

4. Download the Firmware 1.50 update from HERE. Create a new folder in the "PSP>GAME" directory called "UPDATE". Place the EBOOT.PBP from the archive in that folder.

5. Ensure you have followed the instructions above correctly, and disconnect your PSP from USB.

6. Go to the PHOTO section of the PSP's menu, and scroll down until the PSP freezes *. If all goes correctly, after a few seconds, you should see strings of white text appear on the screen, and the memory stick light should start flashing. If not, Restart the PSP and try again. If it still doesn't work, follow the previous steps again.

7. When the memory stick light has stopped flashing, wait 30-40 seconds and turn off the PSP.

8. When you restart the PSP, the system will believe you are firmware version 1.00. Go to the "Game > Memory Stick" menu on the PSP, and select "PSP update ver. 1.50". Plug in the AC power adapter.

9. When it boots, go through the instructions and start the update. It will continue till 99%, and you will get an error. This is normal, so just wait about 10 seconds and restart the PSP.

10. When you boot, you will get an error on a blue screen, just press the circle button, as it instructs.

11. It will restart, and you will have Firmware 1.50!

Enjoy!

Downgrading v2.01 (Non TA-082; No GTA; Safest method)

First, a little history lesson. The 2.00 MPH downgrader replaced the PSP's version file with that of v1.00, allowing us to boot the v1.50 update. When v2.01 was released, the only thing new was a fix for the TIFF exploit used for v2.00. When v2.50 came out, Sony changed the structure of the version file in such a way that if it is replaced with an older one, it will result in a brick. So, in v2.01, we still have the ability to replace the version file.

Until now, that method has been ignored because of the v2.50/v2.60 downgrader, so that was considered easier. Now, however, Fanjita has released the first ever v2.01 "Noobz" downgrader. So, without further adú, let's get cracking!

------

1a. First, you will need to downgrade the Eloader "Porter", version v0.9.8. You can find it at the hompage of Fanjita [LINK]. Install it using the EXE installer if you're on Windows, or use the ZIP archive download if you're on another platform.
You will also need the 1.50 update EBOOT, availible here: [LINK]. You should place it in "X:\PSP\GAME\UPDATE\". (Where 'X' is the drive letter of your PSP ).
Lastly, you also need the downgrader; (Surprised?). You can find them here [LINK]. Drag the "PSP" folder from the archive into your PSP's memory stick via USB. If you're on Windows, it will ask you if you want to replace the files. Click "Yes To All". (Don't fret - nothing will be overwritten/deleted). It also wouldn't hurt to skim through the readme.

-------

1b. Start up the PSP. Go to the photo viewer in the main menu ( the XMB), and select the "eLoader 098" folder. Your PSP should freeze if the eloader was correctly installed. Then the eLoader's menu should pop up. Press [X] on the "v2.01 Downgrader" .

2. The downgrader will now boot. If all the security checks are successful, you should see a little menu. Select the "Set to v1.00" option by pressing the [O] button *. When it's finished, wait about 30 seconds, (It's always wise to wait), and exit the eLoader, (By rebooting or by other means). When you restart the PSP, the system will believe you are firmware version 1.00.

3. Go to the "Game" tab in the PSP's main menu, and press [X] on memory stick. Press [X] on the "PSP Update ver. 1.50". Follow the instructions, (Once loaded), and start the update. When it get's to 99%, the PSP will get an error. This is 100% normal; don't worry. Wait about 30 seconds, and hold up the power switch until the system shuts off.

4. You will then get a blue error screen, which is similar to the "BSOD" on a Windows PC. This means that the system settings are corrupted. Press [O] as it instructs, and the PSP will boot normally. (This time without the "Network" icon in the menu).

Treasure your v1.50 PSP, as it's the ultimate firmware for homebrew. Enjoy yourself, but be careful. =p

Downgrading v2.50, and v2.60 (Non TA-082; With GTA; Safer than non-GTA mehod)

WARNING: DO NOT USE THIS TUTORIAL IF YOU HAVE A TA-082 MOTHERBOARD, AS SONY BLOCKED ANY 1.50 FIRMWARE INSTALLATION. TO FIND OUT IF YOU HAVE THIS MOTHERBOARD, GO HERE: [Link].

This has a 99% success rate at the current stage of development, so please don't complain if something goes wrong.

This requires GTA. If you don't have it, upgrade to v2.71 and downgrade from there.

-----

1. Download the "Downdater final" from HERE. The password for the archive is " I_Use_It_At_My_Own_Risk", without the quotes.

2. You need a dump of the 1.50 flash, which HAS to be dumped from a 1.50, by DOWNDATER HELPER, which is included in the archive. If you know someone with a 1.50, please ask them to run the program on that (Ensuring there is about 30mb of free space on the memory stick) and taking it from them, because distributing the files is illegal. Or aquire it from somewhere online. I don't suggest going to torrents or P2P, but hunt around some of the more reliable and reputable PSP sites or from a fellow PSP user. (Please don't contact me for the dump)

3. Place the folder which you "legally aquired" called "DOWNDATER" into the root of your memory stick.

4. Place the folder "DOWNDATER FINAL AUTO EBOOT" into the PSP>GAME folder on your memory stick.

5. Ensure the GTA eloader is installed and working.

6. Plug in the AC power adaptor

6. Boot up GTA and the Eloader, and select "Downdater test" *

7. The Memory stick light will immediately start flashing, and will do so for a while.

8. The PSP should reboot itself into the screen you saw the first time you switch on a PSP; Set the basic preferances.

9. Your PSP should now be a v1.50.

You may encounter UMD errors that say "The disk could not be read". This is because the Drive hasnt reset properly, so remove the battery pack for 5-10 minutes, and they will stop. We suggest upgrading to 2.00 and downgrading back to 1.50 using the tutorial above, because the actual downgrade method we used is messy. This way, you will have a clean installation.

Of course, you can also use the "2.50/2.60 Easy Downgrader" by "Xtrusion", availible HERE. You will still need the Flash dump, however.

Enjoy 1.50!

Downgrading 2.80 with 0okm's downgrader (built on exploit by team C+D)

0okm, a key player in the PSP scene, released a downgrader for the last firmware affected by the LIBTIFF exploit, and the last one for a while. I must warn you though, this downgrader works like the GTA downgrader; it flasher a raw firmware dump, and there are no safety checks. The amount of bricked PSP's that have resulted from this software is fairly high, so use at your own risk! Also, 0okm failed to put any checks into the downgrader; any missing files won't be noticed and you may end up with a brick.

Let's get started!

Verify that you're not a TA-082 user. Go [HERE]
Find a friend with a 1.50 PSP or one that can easily downgrade to 1.50. Get them to upgrade/downgrade to ensure they have a fresh firmware. (ie, if they already have 1.50, get them to update to 2.00 and downgrade).
Have your friend back up the contents or their memory stick, and then format it. (Settings>System settings>Fomat memory stick).
They will need to install [THIS] homebrew onto their PSP. Inside the "1.50 helper" folder in the archive is a folder named "GAME". They will need to extract it to the "PSP" directory on the memory stick. If your computer asks you to replace any files, click 'yes to all'.
They will also need to install [THIS] onto their PSP. Inside the "1.50 HELPER" folder are two folders, "downhelper" and "downhelper%" (there's actually a SRC folder which we don't need). Extract those two to PSP\GAME on the memory stick.
Get them to reboot the PSP, and have them run the DownHelper program from game>memory stick on the PSP. When it's finished, they should reboot and run the IPL dumper program from the game>memory stick menu on the PSP.
They must now connect their PSP to their PC and copy the "downdater" folder from the root of the memory stick somewhere safe. Go into the folder, and then into the PRX folder; if there's a FW150_ipl.bin file, good. If not, re-run the IPL dumper. (it should be around 220kb). If you're unsure, find the MD5 hash of the file and compare it to this: [6661d06e24d1aea75c1c92446ee20650].
Format your memory stick (not the memory stick belonging to the person who has been doing the above for you; that person's job is done).
Download these files and extract the contents to the PSP directory on your memory stick. Again, replacing all files.
Copy the 'DOWNDATER' folder that the other person obtained for you to the root of your memory stick. (That's the place you're located as soon as you start browsing your PSP's drive on your PC. You're not in any folders, but there are PSP and MP_ROOT folders that you can see). So, you should have a drive like [this].
Some people have recommended restoring default settings now, so do so. Reboot your PSP.
Go to the Photo area on your PSP's XMB. Wait until you see all the icons, and press [X] on the xLoader folder. MAKE SURE YOU DO NOT SELECT ANYTHING ELSE, ESPECIALLY ELOADER. Once you see a corrupted data icon, it's alright to exit. If your PSP crashed, reboot and keep trying. If something tried to load as soon as you entered the photo area, do [THIS] and try again.
Check you have at leat 2 bars of battery left, and plug in the AC adapter. Go to the Game section in the XMB, and press [X] on the only icon that should be in there.
This is the risky bit; please only continue if you are willing to take the risk of rendering your PSP useless. Any malfunctions or brickages are the fault of the user. Press [O] to flash the dump, and cross your fingers.
When it's finished, it should reboot you into firmware 1.50. If it didn't you've either got a brick or nothing happened. Check in system settings>system information.

Enjoy!

Downgrading a TA-082! (Up to firmware 2.71)

Wow, after months of disappointments of downgraders for people cursed with a TA-082 PSP motherboard, Dark_AleX, the man with the master plan, released a downgrader for those very people. Yep, after 0okm's service that he had to discontinue because of hackers, and a fake downgrader, D_A took advantage of the IDstorage area of the flash to create the very first 100% public, working firmware rollback software. Once again, you accept all the reprocussions of your actions!

First, check whether you have that no-longer-so-evil motherboard, you can do that with this picture.

If you do, follow these relatively simple instructions (this tutorial was actually donated by 'Lostprophet'); Text in orange is added by me.

Here are the files you'll need: TA082DOWN.RAR

Instructions
------------

- Copy the UPDATE and idstoragechange folders into /PSP/GAME/
- Get the official sony 1.50 eboot and put it in the /PSP/GAME/UPDATE folder with the name of
UPDATE.PBP (Can be found here: http://dl.qj.net/PSP-Firmware-1.50-File-(EBOOT)-North-America-PSP/pg/12/fid/163/catid/163)

- Run HEN-D if you are not already running it. (You can find Hen-D here, please read the readme to learn how to use it and launch homebrew from it: http://dax.lan.st/hend.rar)

- Execute the idstoragechange from the XMB after launching HEN; It needs 75% battery.
It will change some keyes of your idstorage needed to downgrade the ta-082.

- The program will exit to the XMB. Now execute the generic downgrader, which will show in the xmb
as "Update X.YX" in the PSP's Game menu.

- The generic downgrader will also need 75% battery. This is the program that will downgrade your psp to firmware v1.50.

- When it's finished, you will be asked to press [X] to restart the PSP. Do as it says!

- If your PSP survived (which it should have done), your PSP will scream a blue screen error in your face; Press [O] and continue. You should now be in the 1.50 XMB, with no network icon.
If things didn't go so well, you'll either have a looping blue screen error, or a permanent black screen. You have a brick, a dead thing, a paperweight, a stone, a beer matt, and God knows whatever else you can do with a broken PSP... Sorry!

Downgrading v2.50, v2.60, v2.70, and v2.71 (Non TA-082; GTA not required; TIFF)

Please note that this is the older downgrading method; I'll be adding the Generic downgrader method very soon! (It's much safer).

Come on, you have to respect the hard work of the PSP hackers. Another firmware downgrader has been released, this time without the need for GTA, and using a bug in the LibTIFF of the PSP. Don't worry yourself if you're not sure what LibTIFF is, just enjoy what's coming! WARNING: DO NOT USE THIS TUTORIAL IF YOU HAVE A TA-082 MOTHERBOARD, AS SONY BLOCKED ANY 1.50 FIRMWARE INSTALLATION. TO FIND OUT IF YOU HAVE THIS MOTHERBOARD, GO HERE: [Link].

This downgrader is a little more risky than the other downgraders, but it does the job. Here is what you need:

A v2.71 PSP (Upgrade to this version, [no further], if you don't have GTA and want to downgrade). If you need the update file, you can find it here: [LINK] (Click on "Downloads"). Place it in a folder called "UPDATE" in the "PSP/GAME" folder on your memory stick. Run it from the "Game>Memory Stick" menu.
The 2.71 downgrader files. You can find them here: [LINK].
A 1.50 dump. This HAS to be dumped from a 1.50, by DOWNDATER HELPER, which can be obtained here: [LINK]. If you know someone with a 1.50, please ask them to run the program on their PSP (Ensuring there is about 30mb of free space on the memory stick) and taking it from them, because distributing the files is illegal. Or aquire it from somewhere online. I don't suggest going to torrents or P2P, but hunt around some of the more reliable and reputable PSP sites or from a fellow PSP user. (Please don't contact me for the dump). There is also the "easy downgrader full version" for v2.71 by "Xtrusion", which includes a dump, but I'm not going to link to it.

------

STEP 1: Download the 2.71 downgrader/downdater files. Once the archive is downloaded, open it in WinRAR. Find the "MS_ROOT" folder inside. Inside, you'll find a file called "D.bin" and another folder called "PSP". Place that, AND the folder called "PSP", in the root of the PSP's memory stick via USB. If it asks you to replace anything, click "Yes To All".

The root is the very first thing you see when you double-click on the removable drive in "My Computer" in Windows. It contains the folders "PSP" and usually "MP_ROOT".

STEP 2: Obtain a v1.50 firmware dump. It should be in a folder called "DOWNDATER". It should contain three ".BIN" files and two folders. Place the entire "DOWNDATER" folder into the same place on the PSP as we put "D.bin" (The root).

STEP 3: Disconnect the system from USB. On the PSP's main menu, (XMB), go to the photo viewer*. Press [X] on the "Memory Stick" icon, and scroll down until your PSP freezes. This is what's meant to happen.

With any luck, after a few seconds the screen should turn red, and the memory stick light will flash vigorously. If the red screen doesn't appear when you try, don't worry. Because of the nature of the TIFF we're using, there's about a 15% chance of it working. You just have to keep trying. If you've tried at least 20 times and it's still not working, or if you see the red screen for a very short time, and then the screen turns black, or the process isn't working in some other way, re-follow the steps and try again.

When the downgrade has finished, the PSP should crash on purpose. If it doesn't, wait a few minutes and then take out the battery or hold up the power swtich until it turns off.

STEP 4: Turn on the PSP. With any luck, you should see the main menu, but slightly different. If you see a web browser in the menu, the PSP hasn't downgraded. Redo the steps and try again. If you don't you have a v1.50 PSP. To confirm this, go to "Settings>System Settings>System Information" on the PSP. You should see something like the following:

"MAC Address: xx.xxx.xx System Software version 1.50 Nickname XXXXX"

Enjoy v1.50!

Downgrading to v1.50 to v1.00

If the 2.60 downdater wasnt enough, there has been another devolopment, allowing PSP users to downgrade to v1.00, the first ever firmware, and also the supposed "ultimate" firmware. This is true in some ways, as no exploit is needed to launch homebrew, so just install the homebrew and go! However, the downsides are numerous and quite bad. The firmware is buggy, it supports next-to-no UMD games, and there is no ISO loading, Firmware Modification, and some other homebrew is incompatible with 1.00. That said, the following tutorial will guide you through downgrading to 1.00.

---

1. Download the 1.50-1.00 downgrader from HERE. The Password for the archive is "I_Use_It_At_My_Own_Risk" without the quotes.

2. Place the "__SCE__DOWNDATER100" and "%__SCE__DOWNDATER100" folders into the PSP>GAME folder in the PSP's memory stick.

3. You need a dump of the 1.00 flash, which HAS to be dumped from a 1.00, by "downhelper100", which is included in the archive. If you know someone with a 1.00, please get them to run the program (Ensuring there's about 20-30mb free space), and take it from their memory stick, because distributing the files is illegal. Or aquire it from somewhere online. I don't suggest going to torrents or P2P, but hunt around some of the more reliable and reputable PSP sites or from a fellow PSP user. (Please don't contact me for the dump). The dump is in a folder called "Downdater". Place that folder into the ROOT of the PSP's memory stick. (That means the first thing you see when you open the drive in windows, IE the "MP_ROOT" and "PSP" folders etc.)

The folder I just mentioned should contain the folders: "Dump" and "PRX", and the files "inputfl.bin", "ipl.bin", and "outputfl.bin". Enusure that everything is there before you continue!

4. Now, we're ready to go! Exit out of USB mode, and plug in your AC power/charging cable. (IMPORTANT).

5. The final stage you're really involved in. Feeling nervous? No need! Simply navigate to the PSP>GAME section in the main PSP menu (XMB) and press [X] on the red-looking update icon. It will check that you have the power cable connected. If everything is OK, then it will prompt you to press [X]*. From this point on, don't touch the PSP, power cable, memory stick, or anything else, until it's finished!!!

6. When you do so, amounts of red text will fly across the screen. When it's finished, it'll prompt you to shut off the PSP. Wait about 20-30 seconds and do so by holding up the power switch until the screen turns off.

7. Reboot your PSP. If everything went as planned, you won't notice any big GUI differences, but if you go to "system settings" under the "Settings" tab in the XMB, you'll notice that you have PSP v1.00.

Great! Enjoy 1.00!

Notes

* At this point, (Where I put an asterisk), you are taking the risk of damaging the PSP system. Although unlikely, any damage is almost always the fault of the user, because they have followed a step incorrectly. Any damage cause to you're property through use of the files I've linked to and explained cannot be blamed on me. You have been warned.