Following his GTA V Native Caller PS4 1.32 Port and updates, PlayStation 4 Scene developer @2much4u (Twitter) recently updated his PS4 GTA V Native Updater IDA Pro 7.0+ Script on Github adding nativeUpdater.java for use with Ghidra to analyze and update native addresses via ethylamine. 
Download: nativeUpdater.py / PS4-GTA-V-Native-Updater-main.zip / GIT
This comes proceeding both the GhidraPS4Loader and GhidraOrbisTools, and from the README.md to quote: PS4 GTA V Native Updater
An IDA Pro script to update native addresses for new versions. Check out the Ghidra version by ethylamine here!
Purpose
Rockstar randomizes native hashes every GTA V version. Modding tools need these new hashes to determine what address to call for a given native function. This IDA script will generate natives.h for any new version of GTA V to be used in projects like Native Caller or Menu Base. You can read more about what natives are and why they are useful in the README for Native Caller.
Usage
1. Load GTA V EBOOT into IDA Pro (7.0+)
2. Select File -> Script File and select this script
3. Select a crossmap file
A crossmap file is a text file representing a map from a previous GTA V version's native hashes to a new version's native hashes. These can commonly be found online with a quick Google search for any version of GTA V. The file format is expected to be:
4. Select the registerNative function
This is a function used in the game binary to register natives. You will need to find it yourself, but it is fairly easy to find. To find it, byte search with ALT+B in IDA for any of the new hashes in the crossmap file. Any hash will do besides SYSTEM natives. See more info on SYSTEM natives later. After searching for the byte pattern, you should come across a result that looks somewhat like this:
In this example, sub_228BC10 is the registerNative function. That is the function you want to select when prompted by this script.
5. Select a natives header file
This is a clean natives.h downloaded from nativedb. You can always find the latest version of this at http://www.dev-c.com/nativedb/natives.h
6. That's it! The script is done
You should expect an output from IDA that looks somewhat like:
The file newHeader.h can be found in the same directory as your IDA database. The hex value 0XDEADBEEF will put in place for any native this script is unable to find a function address for.
7. (Optional) Fix header for use in Native Caller
For use in my PS4 GTA V Native Caller, you will need to replace
in the newHeader.h output from this script with
before replacing the file PS4-GTA-V-Native-Caller/gtaPayload/include/natives.h
Notes about SYSTEM natives
Some crossmaps include SYSTEM natives and some do not. These natives do not change hashes across GTA V versions and are registered using a different function than the registerNative noted earlier. This script will automatically find this different registration function and find the SYSTEM natives using a hardcoded list of hashes.
Download: BeefQueefMod-672-702-v133.zip (323 KB)
Download: BeefQueefMod-PS4-900-133.zip (165 KB - includes BeefQueefMod-PS4.bin)
Download: nativeUpdater.py / PS4-GTA-V-Native-Updater-main.zip / GIT
This comes proceeding both the GhidraPS4Loader and GhidraOrbisTools, and from the README.md to quote: PS4 GTA V Native Updater
An IDA Pro script to update native addresses for new versions. Check out the Ghidra version by ethylamine here!
Purpose
Rockstar randomizes native hashes every GTA V version. Modding tools need these new hashes to determine what address to call for a given native function. This IDA script will generate natives.h for any new version of GTA V to be used in projects like Native Caller or Menu Base. You can read more about what natives are and why they are useful in the README for Native Caller.
Usage
1. Load GTA V EBOOT into IDA Pro (7.0+)
2. Select File -> Script File and select this script
3. Select a crossmap file
A crossmap file is a text file representing a map from a previous GTA V version's native hashes to a new version's native hashes. These can commonly be found online with a quick Google search for any version of GTA V. The file format is expected to be:
Code:
0xOLDHASH,0xNEWHASH
0xOLDHASH2,0xNEWHASH2
0xOLDHASH3,0xNEWHASH3
...This is a function used in the game binary to register natives. You will need to find it yourself, but it is fairly easy to find. To find it, byte search with ALT+B in IDA for any of the new hashes in the crossmap file. Any hash will do besides SYSTEM natives. See more info on SYSTEM natives later. After searching for the byte pattern, you should come across a result that looks somewhat like this:
Code:
...
lea rsi, sub_1065770 # native function
mov rdi, 97C63D95072367BAh # hash searched for
call sub_228BC10 # registerNative
lea rdi, loc_1065260
call nullsub_581
lea rsi, loc_1065850 # native function
mov rdi, 0AFEFADC285965BBEh # native hash
call sub_228BC10 # registerNative
lea rdi, sub_1065270
call nullsub_581
lea rsi, sub_1065870 # native function
mov rdi, 89F38C325D9E03E7h # native hash
call sub_228BC10 # registerNative
...5. Select a natives header file
This is a clean natives.h downloaded from nativedb. You can always find the latest version of this at http://www.dev-c.com/nativedb/natives.h
6. That's it! The script is done
You should expect an output from IDA that looks somewhat like:
Code:
Found 6166 natives in crossmap
Found 6160 natives in EBOOT
Merged 6140 natives in the maps
Failed to find address for 0xae3fee8709b39dcbL
Failed to find address for 0x64e630faf5f60f44L
Failed to find address for 0x7eec2a316c250073L
Failed to find address for 0x80e4a6eddb0be8d9L
Failed to find address for 0xa306f470d1660581L
Failed to find address for 0x966c2bc2a7fe3f30L
Failed to find address for 0x676ed266aadd31e0L
Failed to find address for 0x77faddcbe3499df7L
newHeader.h created
Unable to replace 8 natives7. (Optional) Fix header for use in Native Caller
For use in my PS4 GTA V Native Caller, you will need to replace
Code:
#include "types.h"
#include "nativeCaller.h"
Code:
#include "invoker.h"Notes about SYSTEM natives
Some crossmaps include SYSTEM natives and some do not. These natives do not change hashes across GTA V versions and are registered using a different function than the registerNative noted earlier. This script will automatically find this different registration function and find the SYSTEM natives using a hardcoded list of hashes.
Download: BeefQueefMod-672-702-v133.zip (323 KB)
Download: BeefQueefMod-PS4-900-133.zip (165 KB - includes BeefQueefMod-PS4.bin)
