PS4-Patches

Gathering some of the snippets I've seen posted around the interwebs. This is not my work, but I'll try to keep credits where possible.

Feel free to submit PRs!

4.05

// Kernel base
void* kernel_base = &((uint8_t*)__readmsr(0xC0000082))[-0x30EB30];
uint8_t* kernel_ptr = (uint8_t*)kernel_base;
void** got_prison0 =   (void**)&kernel_ptr[0xF26010];
void** got_rootvnode = (void**)&kernel_ptr[0x206D250];

// 2much4u @2much4ux
Kernel patch to disable process ASLR on 4.05
*(uint16_t*)(kernelBase + 0x2862D6) = 0x9090;

// <WildCard - KernelDumper>
// uart enabler
*(char *)(kernel_base + 0x186b0a0) = 0; // set the console disable console output bool

// specters debug settings patchs
*(char *)(kernel_base + 0x2001516) |= 0x14;
*(char *)(kernel_base + 0x2001539) |= 1;
*(char *)(kernel_base + 0x2001539) |= 2;
*(char *)(kernel_base + 0x200153A) |= 1;
*(char *)(kernel_base + 0x2001558) |= 1;	

// debug menu full patches thanks to sealab
*(uint32_t *)(kernel_base + 0x4CECB7) = 0;
*(uint32_t *)(kernel_base + 0x4CFB9B) = 0;

// Target ID Patches :)
*(uint16_t *)(kernel_base + 0x1FE59E4) = 0x8101;
*(uint16_t *)(kernel_base + 0X1FE5A2C) = 0x8101;
*(uint16_t *)(kernel_base + 0x200151C) = 0x8101;
// </WildCard - KernelDumper>

// Correct patches to enable mmap of all SELF
*(uint8_t*)(kernel_base + 0x31EE40) = 0x90;
*(uint8_t*)(kernel_base + 0x31EE41) = 0xE9;
*(uint8_t*)(kernel_base + 0x31EF98) = 0x90;
*(uint8_t*)(kernel_base + 0x31EF99) = 0x90;

4.55

// flatz 4.55
// Disable RSA signature check for PFS.
kernel_text_base + 0x69F4E0: 55 48 89 E5 -> 31 C0 C3 90
// Enable debug RIFs.
kernel_text_base + 0x62D30D: E8 0E 04 00 00 EB 38 3D -> B8 01 00 00 00 EB 38 3D

// Joonie86
// TargetID patches for 4.55 (Spoofs to Devkit)
*(uint16_t *)(kernel_base + 0x1AF82C4) = 0x8101;
*(uint16_t *)(kernel_base + 0X1AF85A4) = 0x8101;
*(uint16_t *)(kernel_base + 0x1B6D08C) = 0x8101;

// 2much4u
// Full debug settings offsets for 4.55
*(char *)(kernel_base + 0x1B6D086) |= 0x14;
*(char *)(kernel_base + 0x1B6D0A9) |= 3;
*(char *)(kernel_base + 0x1B6D0AA) |= 1;
*(char *)(kernel_base + 0x1B6D0C8) |= 1;	

// debug menu full patches
*(uint32_t *)(kernel_base + 0x4D70F7) = 0;
*(uint32_t *)(kernel_base + 0x4D7F81) = 0;

// Xvortex
// enable mmap of all SELF
*(uint8_t*)(kernel_base + 0x143BF2) = 0x90;
*(uint8_t*)(kernel_base + 0x143BF3) = 0xE9;
*(uint8_t*)(kernel_base + 0x143E0E) = 0x90;
*(uint8_t*)(kernel_base + 0x143E0F) = 0x90;

//Vultra UART Enabler 4.55
*(char *)(kernel_base + 0x1997BC8) = 0;