Join Us and become a Member for a Verified Badge to access private areas with the latest PS4 PKGs.
PS4 CFW and Hacks       Thread starter PSXHAX       Start date Jul 6, 2023 at 8:23 PM       15      
Not open for further replies.
Since the recent PS4 Syscon Tools release comes PS4 Wee Tools for NOR and Syscon manipulations by AndyManDev on Twitter for those in the PlayStation 4 Scene working with PS4 NOR and Syscon dumps. :geek:

Download: PS4 Wee Tools (Latest Version) / GIT / Wiki / PS4 EAP EMC Torus GIT / PS4 IC FW GIT (PS4 Southbridge/Torus firmware collection) / UART Pinout for PS4 Motherboard Models

Here's further details from the PS4 Wee Tools

PS4 wee tools help to work with PS4 nor and syscon dumps.

It is free open source alternative for @BwE's PS4-NOR-Validator & Syscon-Patcher written in Python to keep it simple.

Currently it provides base functional and can not fully replace those tools.

Was tested with Python 3.8



  • Multy files compare
NOR tool
  • PS4 Nor dump info
  • Toggle UART
  • Toggle Memory test, RNG/Keystorage test
  • System flags cleaning
  • Memory clock editing (GDDR5)
  • SAMU boot flag edit
  • Downgrade by slot switch
  • Entropy stats
Syscon tool
  • Syscon check
  • Patchable check
  • Show active SNVS slot
  • Manual SNVS patch
  • Auto SNVS patch (upcoming)
⚠️ Don't use if you don't understand what is it for


This wouldn't be possible without work of these folks:
  • fail0verflow
  • BwE
  • Darknesmonk
  • pearlxcore
And of course PSDevWiki



  • NOR: Southbridge patcher
  • NOR: Torus (WiFi+BT) patcher
  • NOR: Partition analyze and recovery
  • NOR: Quick/Expert mode for partition recovery
  • NOR: active slot flag toggle
  • NOR: quick legitimate patch (drag&drop 2 dumps on run.bat)
  • SCFlasher: Safe syscon erase
  • SC: "full" clean
  • SC: autopatch now works with any* syscon
  • SC: Method B bugfix
  • SC: manual patch now works with flatdata
  • SC: shows line counter
  • Util lib update
  • Utils bugfix
  • Code optimization
  • Syscon Flasher
  • Legitimate CoreOS Patch
  • Terminal: title shows rx/tx bytes, show hidden bytes (switch), log to file
  • Syscon tool: Added FW md5 check, patchable status bugfix
  • Batch rename (extract dump info to filename)
  • Code optimization
  • Some bugfixes
  • +board_id info
  • +mb version (just assumption)
  • with minor changes
  • + emc cmd support for UART terminal (adds csum to commands)
  • UART terminal with syntax highlighting
  • Integrated syscon reader (Arduino Nano V3)
  • Preps for integrated R/W support (SPIway & SysconTools)
  • SNVS rebuilding (Syscon)
  • Manual syscon patch allows to remove entire block
  • Tips for syscon patching
  • Extra syscon patch (stuck on FW update)
  • NVStorage class improvements
  • EAP key recovery
  • Some optimization
  • Added 6 patterns to slot switcher
  • EMC CFW patcher for Aeolia
  • UI bugs fixed
  • 2BLS pack / unpack
  • File selection screen upgrade
  • Preparations for EMC cfw (Aeolia)
  • FW2 version assumption
  • Validation screen update
  • Base validation (header, mbrs, emc, eap, wifi)
  • Southbridge and torus Info
  • Code refactoring
  • Minor bugs fix
  • Extract NOR's partitions
  • Build dump from extracted files
  • Get HDD EAP keys [keys.bin]
  • File selection screen fix
  • Now with color highlighting
  • Dialog improvements
  • New screen "Flags toggle"
  • boot mode, safe boot, update mode, arcade mode, kiosk mode (idu)
  • registry recovery, manu, button swap, memory budget, slow hdd mode
  • Syscon auto SNVS patch (4 modes)
  • New FW detection (experimental)
  • Region info
  • Minor improvements
  • Syscon patchable check
  • Manual patch bug fix
  • Minor errors fix
  • NOR Entropy stats
  • Syscon manual patch
  • Minor errors fix
  • Syscon DEBUG toggle
  • Syscon NVStorage class
  • Syscon show active slot
  • Files compare
  • UART, Memtest toggle
  • Sys flags clean
  • Edit mem clock and SAMU
  • Downgrade switch patterns
  • Syscon base check
Spoiler: Related Tweets
PS4 Wee Tools for NOR and Syscon Manipulations by AndyManDev.png


Thank you very much for excellent work. I would like to report a possible bug, I only work with linux (Void Linux), I use the python 3.11.4.

The problem is that the dump is not extracted in the additional extras menu, option 1 - Extract Nor's partitions, it tells me: Incorrect Input, and returns me to the dump selection menu. Nor does it create the directory with the name of the dump (serial number).

I changed the lines where it is: os.system('cls') to os.system('clear'). I don't have much experience in Python to help but I can translate the file into Spanish. Greetings and thanks again.
Amazing work. Thank you for contributing to the community unselfishly!

To add to the above work below are some manual offset patches:
UART Patch:
001C931f - change 00 to 01

Arcade patch:
001CA609 - change FF to 01

Update Mode Patch:
001CA601 - change 00 to 10

Boot Parameter patch:
001C9000 - change FF to FB

Memory Budget Patch:
001C9003 - change FF to FE

Registry Recover Patch:
001CA603 - change 00 to 01

Slow HHD Mode Patch:
001C9005 - change FF to FE
manual debug patch for the syscon is found here:

change offset
000000C3 from 04 (orig) to 85 (debug)
This enables OCD onchipdebug and no more glitching is needed.

Afterwards you only need to connect 3 pins and have the ps4 in standby with its own psu/ or bench power supply to read and write to the syscon.

Only ground and pins 5 and 6 {on slim or pro} or pins 12 and 13 {fat}
I am getting a different file while UART patching in BwE nor validator 1.8.8 and wee tools 0.8. 1CC31F is also made '1' in BwE. While using weetools 0.4 and below, the files are identical with BwE. Can someone explain why wee tools is only changing 1C931F from version 0.5 onwards?
Not open for further replies.