from Readme:

Hello World for PSP firmware 5.03

The days of TIFF based exploits aren't long gone, at least not yet ;)
Here's the third TIFF exploit for the PSP, enjoy.

Just copy the files to the memory stick root, disconnect USB and go to photo menu.
Don't dismiss the exploit even if it doesn't work on the first time, it's *very* unstable.
You might get it working on the first time, but you might as well have to try it 20 times!

The h.bin is loaded to 0x08800000, and the text address of paf.prx is passed in $a0 to the
binary code. You can then trick out function imports, like for example sceDisplayWaitVblankStart:

sceDisplayWaitVblankStart = (void*)(paf_addr+0x15F068);


Instructions:
1. Copy either slim.tiff or phat.tiff to /PSP/PHOTO/ folder on the memory stick, depending on
your PSP model. Do NOT copy both!
2. Copy h.bin to the root of the memory stick.

Thanks to malloxis, FreePlay, Archaemic, wololo, Cloudy, Davee and everyone else who was involved.

Have fun!

P.S. Just wait a few days, there's a bit of awesomeness coming up. :)

- MaTiAz