PS4 Wee Tools for NOR and Syscon Manipulations by AndyManDev

Since the recent PS4 Syscon Tools release comes PS4 Wee Tools for NOR and Syscon manipulations by AndyManDev on Twitter for those in the PlayStation 4 Scene working with PS4 NOR and Syscon dumps.

Download: PS4 Wee Tools (Latest Version) / GIT / Wiki / PS4 EAP EMC Torus GIT / PS4 IC FW GIT (PS4 Southbridge/Torus firmware collection) / UART Pinout for PS4 Motherboard Models / PS4 Wee Tool v0.9.9 via Andy_maN's Kofi Page

Here's further details from the README.md: PS4 Wee Tools

PS4 wee tools help to work with PS4 nor and syscon dumps.

It is free open source alternative for @BwE's PS4-NOR-Validator & Syscon-Patcher written in Python to keep it simple.

Currently it provides base functional and can not fully replace those tools.

Was tested with Python 3.8

Features

Common

• Multy files compare

NOR tool

• PS4 Nor dump info
• Toggle UART
• Toggle Memory test, RNG/Keystorage test
• System flags cleaning
• Memory clock editing (GDDR5)
• SAMU boot flag edit
• Downgrade by slot switch
• Entropy stats

Syscon tool

• Syscon check
• Patchable check
• Show active SNVS slot
• Manual SNVS patch
• Auto SNVS patch (upcoming)

Don't use if you don't understand what is it for

Credits

This wouldn't be possible without work of these folks:

• fail0verflow
• BwE
• Darknesmonk
• pearlxcore

And of course PSDevWiki

Donate

• Patreon
• Boosty
• YandexMoney
• Bitcoin: 39VaMnFqCQo751mvDc3M7ADVty71q2tWDm

Links

• Twitter

PS4 Wee Tool Changelog

v0.9.9

• 11.02 support
• NVS areas recovery
• More info for validation
• Lang optimization
• Flag: resolution
• UART bugfix
• Assets update
• Root path bugfix

v0.9.5

• NOR: Southbridge patcher
• NOR: Torus (WiFi+BT) patcher
• NOR: Partition analyze and recovery
• NOR: Quick/Expert mode for partition recovery
• NOR: active slot flag toggle
• NOR: quick legitimate patch (drag&drop 2 dumps on run.bat)
• SCFlasher: Safe syscon erase
• SC: "full" clean
• SC: autopatch now works with any* syscon
• SC: Method B bugfix
• SC: manual patch now works with flatdata
• SC: shows line counter
• Util lib update
• Utils bugfix
• Code optimization

v0.9.0

• Syscon Flasher
• Legitimate CoreOS Patch
• Terminal: title shows rx/tx bytes, show hidden bytes (switch), log to file
• Syscon tool: Added FW md5 check, patchable status bugfix
• Batch rename (extract dump info to filename)
• Code optimization
• Some bugfixes

v0.8.7

• +board_id info
• +mb version (just assumption)

v0.8.6

• with minor changes
• + emc cmd support for UART terminal (adds csum to commands)

v0.8.5

• UART terminal with syntax highlighting
• Integrated syscon reader (Arduino Nano V3)
• Preps for integrated R/W support (SPIway & SysconTools)

v0.8

• SNVS rebuilding (Syscon)
• Manual syscon patch allows to remove entire block
• Tips for syscon patching
• Extra syscon patch (stuck on FW update)
• NVStorage class improvements

v0.7.9

• EAP key recovery
• Some optimization

v0.7.8

• Added 6 patterns to slot switcher
• EMC CFW patcher for Aeolia
• UI bugs fixed

v0.7.7

• 2BLS pack / unpack
• File selection screen upgrade
• Preparations for EMC cfw (Aeolia)

v0.7.6

• FW2 version assumption
• Validation screen update

v0.7.5

• Base validation (header, mbrs, emc, eap, wifi)
• Southbridge and torus Info
• Code refactoring
• Minor bugs fix

v0.7

• Extract NOR's partitions
• Build dump from extracted files
• Get HDD EAP keys [keys.bin]
• File selection screen fix

v0.6

• Now with color highlighting
• Dialog improvements

v0.5

• New screen "Flags toggle"
• boot mode, safe boot, update mode, arcade mode, kiosk mode (idu)
• registry recovery, manu, button swap, memory budget, slow hdd mode
• Syscon auto SNVS patch (4 modes)
• New FW detection (experimental)
• Region info
• Minor improvements

v0.4

• Syscon patchable check
• Manual patch bug fix
• Minor errors fix

v0.3

• NOR Entropy stats
• Syscon manual patch
• Minor errors fix

v0.2

• Syscon DEBUG toggle
• Syscon NVStorage class
• Syscon show active slot

v0.1

• Files compare
• UART, Memtest toggle
• Sys flags clean
• Edit mem clock and SAMU
• Downgrade switch patterns
• Syscon base check

Spoiler: Related Tweets

 

[sonyweb]

Making the scene free once again, thanks to you and the other devs helping the PS4 scene.

 

[TheDexterIstvan]

can we use other consoles dump to downgrade?

 

[stinger101mg]

noie, will def help those who want to perform uart enabling and other things as well as slot switching. good work!

 

[BigglesUK]

appreciate your time and effort, Thanks

 

[RekkGaming]

Thank you, will be trying this soon.

 

[marvicdigital]

Thank you very much for excellent work. I would like to report a possible bug, I only work with linux (Void Linux), I use the python 3.11.4.

The problem is that the dump is not extracted in the additional extras menu, option 1 - Extract Nor's partitions, it tells me: Incorrect Input, and returns me to the dump selection menu. Nor does it create the directory with the name of the dump (serial number).

I changed the lines where it is: os.system('cls') to os.system('clear'). I don't have much experience in Python to help but I can translate the lang.py file into Spanish. Greetings and thanks again.

 

[neob0rn]

Nice

 

[xanadu247]

Amazing work. Thank you for contributing to the community unselfishly!

To add to the above work below are some manual offset patches:

UART Patch:
--------------------------
001C931f - change 00 to 01


Arcade patch:
--------------------------
001CA609 - change FF to 01


Update Mode Patch:
--------------------------
001CA601 - change 00 to 10


Boot Parameter patch:
--------------------------
001C9000 - change FF to FB


Memory Budget Patch:
--------------------------
001C9003 - change FF to FE


Registry Recover Patch:
--------------------------
001CA603 - change 00 to 01


Slow HHD Mode Patch:
--------------------------
001C9005 - change FF to FE

manual debug patch for the syscon is found here:

change offset

000000C3 from 04 (orig) to 85 (debug)

This enables OCD onchipdebug and no more glitching is needed.

Afterwards you only need to connect 3 pins and have the ps4 in standby with its own psu/ or bench power supply to read and write to the syscon.

Only ground and pins 5 and 6 {on slim or pro} or pins 12 and 13 {fat}

 

[jetuaime81]

I am getting a different file while UART patching in BwE nor validator 1.8.8 and wee tools 0.8. 1CC31F is also made '1' in BwE. While using weetools 0.4 and below, the files are identical with BwE. Can someone explain why wee tools is only changing 1C931F from version 0.5 onwards?