diff --git a/prosper0gdb/offsets.c b/prosper0gdb/offsets.c
index 17307f3..3fda9f0 100644
--- a/prosper0gdb/offsets.c
+++ b/prosper0gdb/offsets.c
@@ -1,1103 +1,1261 @@
-#include "r0gdb.h"
-#include "offsets.h"
-
-struct offset_table offsets;
-extern uint64_t kdata_base;
-
-#define OFFSET(x) offsets.x = kdata_base + x;
-#define DEF(x, y) enum { x = (y) + 0 * sizeof(offsets.x) };
-
-#define START_FW(fw) void set_offsets_ ## fw(void) {
-#define END_FW() }
-
-START_FW(300)
-DEF(allproc, 0x276dc58)
-DEF(idt, 0x642dc80)
-DEF(gdt_array, 0x642ee20)
-DEF(tss_array, 0x6430820)
-DEF(pcpu_array, 0x6432280)
-DEF(doreti_iret, -0x9aefbc)
-DEF(add_rsp_iret, doreti_iret - 7)
-DEF(swapgs_add_rsp_iret, doreti_iret - 10)
-DEF(rep_movsb_pop_rbp_ret, -0x96f79a)
-DEF(rdmsr_start, -0x9b046a)
-DEF(wrmsr_ret, -0x9b183c)
-DEF(dr2gpr_start, -0x9b6513)
-DEF(gpr2dr_1_start, -0x9b63fa)
-DEF(gpr2dr_2_start, -0x9b6307)
-DEF(mov_cr3_rax, -0x39099e)
-DEF(mov_rdi_cr3, -0x390a0e)
-DEF(nop_ret, wrmsr_ret + 2)
-DEF(cpu_switch, -0x9b6700)
-DEF(mprotect_fix_start, -0x8ee651)
-DEF(mprotect_fix_end, mprotect_fix_start+6)
-DEF(mmap_self_fix_1_start, -0x2c92bd)
-DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
-DEF(mmap_self_fix_2_start, -0x1dd21e)
-DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
-DEF(sigaction_fix_start, -0x6b549f)
-DEF(sigaction_fix_end, -0x6b5449)
-DEF(sysents, 0x16f720)
-DEF(sysents_ps4, 0x167170)
-DEF(sysentvec, 0xca0cd8)
-DEF(sysentvec_ps4, 0xca0e50)
-DEF(sceSblServiceMailbox, -0x675df0)
-DEF(sceSblAuthMgrSmIsLoadable2, -0x88a540)
-DEF(mdbg_call_fix, -0x626d49)
-DEF(syscall_before, -0x7e91bf)
-DEF(syscall_after, -0x7e919c)
-DEF(malloc, -0xaa2a0)
-DEF(M_something, 0x12d3d70)
-DEF(loadSelfSegment_epilogue, -0x889e0d)
-DEF(loadSelfSegment_watchpoint, -0x2c88a8)
-DEF(loadSelfSegment_watchpoint_lr, -0x88a067)
-DEF(decryptSelfBlock_watchpoint_lr, -0x889cca)
-DEF(decryptSelfBlock_epilogue, -0x889c03)
-DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x889595)
-DEF(decryptMultipleSelfBlocks_epilogue, -0x889112)
-DEF(sceSblServiceMailbox_lr_verifyHeader, -0x88a1bc)
-DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x889e81)
-DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x889954)
-DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8891cc)
-DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x88a5be)
-DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x92d9b0)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x92df7b)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x92df05)
-DEF(sceSblPfsSetKeys, -0x92dc60)
-DEF(sceSblServiceCryptAsync, -0x8d1e30)
-DEF(sceSblServiceCryptAsync_deref_singleton, -0x8d1df2)
-DEF(copyin, -0x970050)
-DEF(copyout, -0x970100)
-DEF(crypt_message_resolve, -0x475790)
-DEF(justreturn, -0x9af100)
-DEF(justreturn_pop, justreturn+8)
-DEF(mini_syscore_header, 0xd4fe88)
-DEF(pop_all_iret, -0x9af01b)
-DEF(pop_all_except_rdi_iret, pop_all_iret+4)
-DEF(push_pop_all_iret, -0x94f570)
-DEF(kernel_pmap_store, 0x31be218)
-DEF(crypt_singleton_array, 0x2d99830)
-DEF(security_flags, 0x6466474)
-DEF(targetid, 0x646647d)
-DEF(qa_flags, 0x6466498)
-DEF(utoken, 0x6466500)
-#include "offset_list.txt"
-END_FW()
-
-START_FW(310)
-DEF(allproc, 0x276dc58)
-DEF(idt, 0x642dc80)
-DEF(gdt_array, 0x642ee20)
-DEF(tss_array, 0x6430820)
-DEF(pcpu_array, 0x6432280)
-DEF(doreti_iret, -0x9aefbc)
-DEF(add_rsp_iret, doreti_iret - 7)
-DEF(swapgs_add_rsp_iret, doreti_iret - 10)
-DEF(rep_movsb_pop_rbp_ret, -0x96f79a)
-DEF(rdmsr_start, -0x9b046a)
-DEF(wrmsr_ret, -0x9b183c)
-DEF(dr2gpr_start, -0x9b6513)
-DEF(gpr2dr_1_start, -0x9b63fa)
-DEF(gpr2dr_2_start, -0x9b6307)
-DEF(mov_cr3_rax, -0x39095e)
-DEF(mov_rdi_cr3, -0x3909ce)
-DEF(nop_ret, wrmsr_ret + 2)
-DEF(cpu_switch, -0x9b6700)
-DEF(mprotect_fix_start, -0x8ee651)
-DEF(mprotect_fix_end, mprotect_fix_start+6)
-DEF(mmap_self_fix_1_start, -0x2c927d)
-DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
-DEF(mmap_self_fix_2_start, -0x1dd1de)
-DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
-DEF(sigaction_fix_start, -0x6b545f)
-DEF(sigaction_fix_end, -0x6b5409)
-DEF(sysents, 0x16f720)
-DEF(sysents_ps4, 0x167170)
-DEF(sysentvec, 0xca0cd8)
-DEF(sysentvec_ps4, 0xca0e50)
-DEF(sceSblServiceMailbox, -0x675db0)
-DEF(sceSblAuthMgrSmIsLoadable2, -0x88a540)
-DEF(mdbg_call_fix, -0x626d09)
-DEF(syscall_before, -0x7e917f)
-DEF(syscall_after, -0x7e915c)
-DEF(malloc, -0xaa260)
-DEF(M_something, 0x12d3d70)
-DEF(loadSelfSegment_epilogue, -0x889dcd)
-DEF(loadSelfSegment_watchpoint, -0x2c8868)
-DEF(loadSelfSegment_watchpoint_lr, -0x88a027)
-DEF(decryptSelfBlock_watchpoint_lr, -0x889c8a)
-DEF(decryptSelfBlock_epilogue, -0x889bc3)
-DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x889555)
-DEF(decryptMultipleSelfBlocks_epilogue, -0x8890d2)
-DEF(sceSblServiceMailbox_lr_verifyHeader, -0x88a1bc)
-DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x889e41)
-DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x889914)
-DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x88918c)
-DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x88a5be)
-DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x92d9b0)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x92df7b)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x92df05)
-DEF(sceSblPfsSetKeys, -0x92dc60)
-DEF(sceSblServiceCryptAsync, -0x8d1e30)
-DEF(sceSblServiceCryptAsync_deref_singleton, -0x8d1df2)
-DEF(copyin, -0x970050)
-DEF(copyout, -0x970100)
-DEF(crypt_message_resolve, -0x475750)
-DEF(justreturn, -0x9af100)
-DEF(justreturn_pop, justreturn+8)
-DEF(mini_syscore_header, 0xd4fe88)
-DEF(pop_all_iret, -0x9af01b)
-DEF(pop_all_except_rdi_iret, pop_all_iret+4)
-DEF(push_pop_all_iret, -0x94f6b8)
-DEF(kernel_pmap_store, 0x31be218)
-DEF(crypt_singleton_array, 0x2d99830)
-DEF(security_flags, 0x6466474)
-DEF(targetid, 0x646647d)
-DEF(qa_flags, 0x6466490)
-DEF(utoken, 0x6466500)
-#include "offset_list.txt"
-END_FW()
-
-START_FW(320)
-DEF(allproc, 0x276dc58)
-DEF(idt, 0x642dc80)
-DEF(gdt_array, 0x642ee20)
-DEF(tss_array, 0x6430820)
-DEF(pcpu_array, 0x6432280)
-DEF(doreti_iret, -0x9aec7c)
-DEF(add_rsp_iret, doreti_iret - 7)
-DEF(swapgs_add_rsp_iret, doreti_iret - 10)
-DEF(rep_movsb_pop_rbp_ret, -0x96f45a)
-DEF(rdmsr_start, -0x9b012a)
-DEF(wrmsr_ret, -0x9b14fc)
-DEF(dr2gpr_start, -0x9b61d3)
-DEF(gpr2dr_1_start, -0x9b60ba)
-DEF(gpr2dr_2_start, -0x9b5fc7)
-DEF(mov_cr3_rax, -0x39060e)
-DEF(mov_rdi_cr3, -0x39067e)
-DEF(nop_ret, wrmsr_ret + 2)
-DEF(cpu_switch, -0x9b63c0)
-DEF(mprotect_fix_start, -0x8ee311)
-DEF(mprotect_fix_end, mprotect_fix_start+6)
-DEF(mmap_self_fix_1_start, -0x2c8f2d)
-DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
-DEF(mmap_self_fix_2_start, -0x1dcd1e)
-DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
-DEF(sigaction_fix_start, -0x6b510f)
-DEF(sigaction_fix_end, -0x6b50b9)
-DEF(sysents, 0x16f720)
-DEF(sysents_ps4, 0x167170)
-DEF(sysentvec, 0xca0cd8)
-DEF(sysentvec_ps4, 0xca0e50)
-DEF(sceSblServiceMailbox, -0x675a60)
-DEF(sceSblAuthMgrSmIsLoadable2, -0x88a200)
-DEF(mdbg_call_fix, -0x6269b9)
-DEF(syscall_before, -0x7e8e2f)
-DEF(syscall_after, -0x7e8e0c)
-DEF(malloc, -0xa9da0)
-DEF(M_something, 0x12d3d70)
-DEF(loadSelfSegment_epilogue, -0x889a7d)
-DEF(loadSelfSegment_watchpoint, -0x2c8518)
-DEF(loadSelfSegment_watchpoint_lr, -0x889cd7)
-DEF(decryptSelfBlock_watchpoint_lr, -0x88993a)
-DEF(decryptSelfBlock_epilogue, -0x889873)
-DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x889205)
-DEF(decryptMultipleSelfBlocks_epilogue, -0x888d82)
-DEF(sceSblServiceMailbox_lr_verifyHeader, -0x889e7c)
-DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x889af1)
-DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8895c4)
-DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x888e3c)
-DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x88a27e)
-DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x92d670)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x92dc3b)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x92dbc5)
-DEF(sceSblPfsSetKeys, -0x92d920)
-DEF(sceSblServiceCryptAsync, -0x8d1af0)
-DEF(sceSblServiceCryptAsync_deref_singleton, -0x8d1ab2)
-DEF(copyin, -0x96fd10)
-DEF(copyout, -0x96fdc0)
-DEF(crypt_message_resolve, -0x475400)
-DEF(justreturn, -0x9aedc0)
-DEF(justreturn_pop, justreturn+8)
-DEF(mini_syscore_header, 0xd4fe88)
-DEF(pop_all_iret, -0x9aecdb)
-DEF(pop_all_except_rdi_iret, pop_all_iret+4)
-DEF(push_pop_all_iret, -0x94e7d0)
-DEF(kernel_pmap_store, 0x31be218)
-DEF(crypt_singleton_array, 0x2d99830)
-DEF(security_flags, 0x6466474)
-DEF(targetid, 0x646647d)
-DEF(qa_flags, 0x6466498)
-DEF(utoken, 0x6466500)
-#include "offset_list.txt"
-END_FW()
-
-START_FW(321)
-DEF(allproc, 0x276dc58)
-DEF(idt, 0x642dc80)
-DEF(gdt_array, 0x642ee20)
-DEF(tss_array, 0x6430820)
-DEF(pcpu_array, 0x6432280)
-DEF(doreti_iret, -0x9aec7c)
-DEF(add_rsp_iret, doreti_iret - 7)
-DEF(swapgs_add_rsp_iret, doreti_iret - 10)
-DEF(rep_movsb_pop_rbp_ret, -0x96f45a)
-DEF(rdmsr_start, -0x9b012a)
-DEF(wrmsr_ret, -0x9b14fc)
-DEF(dr2gpr_start, -0x9b61d3)
-DEF(gpr2dr_1_start, -0x9b60ba)
-DEF(gpr2dr_2_start, -0x9b5fc7)
-DEF(mov_cr3_rax, -0x39060e)
-DEF(mov_rdi_cr3, -0x39067e)
-DEF(nop_ret, wrmsr_ret + 2)
-DEF(cpu_switch, -0x9b63c0)
-DEF(mprotect_fix_start, -0x8ee311)
-DEF(mprotect_fix_end, mprotect_fix_start+6)
-DEF(mmap_self_fix_1_start, -0x2c8f2d)
-DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
-DEF(mmap_self_fix_2_start, -0x1dcd1e)
-DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
-DEF(sigaction_fix_start, -0x6b510f)
-DEF(sigaction_fix_end, -0x6b50b9)
-DEF(sysents, 0x16f720)
-DEF(sysents_ps4, 0x167170)
-DEF(sysentvec, 0xca0cd8)
-DEF(sysentvec_ps4, 0xca0e50)
-DEF(sceSblServiceMailbox, -0x675a60)
-DEF(sceSblAuthMgrSmIsLoadable2, -0x88a200)
-DEF(mdbg_call_fix, -0x6269b9)
-DEF(syscall_before, -0x7e8e2f)
-DEF(syscall_after, -0x7e8e0c)
-DEF(malloc, -0xa9da0)
-DEF(M_something, 0x12d3d70)
-DEF(loadSelfSegment_epilogue, -0x889a7d)
-DEF(loadSelfSegment_watchpoint, -0x2c8518)
-DEF(loadSelfSegment_watchpoint_lr, -0x889cd7)
-DEF(decryptSelfBlock_watchpoint_lr, -0x88993a)
-DEF(decryptSelfBlock_epilogue, -0x889873)
-DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x889205)
-DEF(decryptMultipleSelfBlocks_epilogue, -0x888d82)
-DEF(sceSblServiceMailbox_lr_verifyHeader, -0x889e7c)
-DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x889af1)
-DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8895c4)
-DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x888e3c)
-DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x88a27e)
-DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x92d670)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x92dc3b)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x92dbc5)
-DEF(sceSblPfsSetKeys, -0x92d920)
-DEF(sceSblServiceCryptAsync, -0x8d1af0)
-DEF(sceSblServiceCryptAsync_deref_singleton, -0x8d1ab2)
-DEF(copyin, -0x96fd10)
-DEF(copyout, -0x96fdc0)
-DEF(crypt_message_resolve, -0x475400)
-DEF(justreturn, -0x9aedc0)
-DEF(justreturn_pop, justreturn+8)
-DEF(mini_syscore_header, 0xd4fe88)
-DEF(pop_all_iret, -0x9aecdb)
-DEF(pop_all_except_rdi_iret, pop_all_iret+4)
-DEF(push_pop_all_iret, -0x94e4d0)
-DEF(kernel_pmap_store, 0x31be218)
-DEF(crypt_singleton_array, 0x2d99830)
-DEF(security_flags, 0x6466474)
-DEF(targetid, 0x646647d)
-DEF(qa_flags, 0x6466498)
-DEF(utoken, 0x6466500)
-#include "offset_list.txt"
-END_FW()
-
-START_FW(400)
-DEF(allproc, 0x27edcb8)
-DEF(idt, 0x64cdc80)
-DEF(gdt_array, 0x64cee30)
-DEF(tss_array, 0x64d0830)
-DEF(pcpu_array, 0x64d2280)
-DEF(doreti_iret, -0x9cf84c)
-DEF(add_rsp_iret, doreti_iret - 7)
-DEF(swapgs_add_rsp_iret, doreti_iret - 10)
-DEF(rep_movsb_pop_rbp_ret, -0x99002a)
-DEF(rdmsr_start, -0x9d0cfa)
-DEF(wrmsr_ret, -0x9d20cc)
-DEF(dr2gpr_start, -0x9d6d93)
-DEF(gpr2dr_1_start, -0x9d6c7a)
-DEF(gpr2dr_2_start, -0x9d6b87)
-DEF(mov_cr3_rax, -0x39707e)
-DEF(mov_rdi_cr3, -0x3970ee)
-DEF(nop_ret, wrmsr_ret + 2)
-DEF(cpu_switch, -0x9d6f80)
-DEF(mprotect_fix_start, -0x90ac61)
-DEF(mprotect_fix_end, mprotect_fix_start+6)
-DEF(mmap_self_fix_1_start, -0x2cd3fd)
-DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
-DEF(mmap_self_fix_2_start, -0x1df3ae)
-DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
-DEF(sigaction_fix_start, -0x6c2989)
-DEF(sigaction_fix_end, -0x6c2933)
-DEF(sysents, 0x1709c0)
-DEF(sysents_ps4, 0x168410)
-DEF(sysentvec, 0xd11bb8)
-DEF(sysentvec_ps4, 0xd11d30)
-DEF(sceSblServiceMailbox, -0x6824c0)
-DEF(sceSblAuthMgrSmIsLoadable2, -0x8a5c40)
-DEF(mdbg_call_fix, -0x631eb9)
-DEF(syscall_before, -0x802311)
-DEF(syscall_after, -0x8022ee)
-DEF(malloc, -0xa9be0)
-DEF(M_something, 0x1346080)
-DEF(loadSelfSegment_epilogue, -0x8a54cd)
-DEF(loadSelfSegment_watchpoint, -0x2cc9f8)
-DEF(loadSelfSegment_watchpoint_lr, -0x8a5727)
-DEF(decryptSelfBlock_watchpoint_lr, -0x8a538a)
-DEF(decryptSelfBlock_epilogue, -0x8a52c3)
-DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8a4c55)
-DEF(decryptMultipleSelfBlocks_epilogue, -0x8a47d2)
-DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8a58bc)
-DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8a5541)
-DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8a5014)
-DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8a488c)
-DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8a5cbe)
-DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x94a7f0)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x94ada4)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x94ad2e)
-DEF(sceSblPfsSetKeys, -0x94aaa0)
-DEF(sceSblServiceCryptAsync, -0x8ed940)
-DEF(sceSblServiceCryptAsync_deref_singleton, -0x8ed902)
-DEF(copyin, -0x9908e0)
-DEF(copyout, -0x990990)
-DEF(crypt_message_resolve, -0x479e40)
-DEF(justreturn, -0x9cf990)
-DEF(justreturn_pop, justreturn+8)
-DEF(mini_syscore_header, 0xdc16e8)
-DEF(pop_all_iret, -0x9cf8ab)
-DEF(pop_all_except_rdi_iret, pop_all_iret+4)
-DEF(push_pop_all_iret, -0x96bc30)
-DEF(kernel_pmap_store, 0x3257a78)
-DEF(crypt_singleton_array, 0x2e31830)
-DEF(security_flags, 0x6506474)
-DEF(targetid, 0x650647d)
-DEF(qa_flags, 0x6506498)
-DEF(utoken, 0x6506500)
-#include "offset_list.txt"
-END_FW()
-
-START_FW(402)
-DEF(allproc, 0x27edcb8)
-DEF(idt, 0x64cdc80)
-DEF(gdt_array, 0x64cee30)
-DEF(tss_array, 0x64d0830)
-DEF(pcpu_array, 0x64d2280)
-DEF(doreti_iret, -0x9cf84c)
-DEF(add_rsp_iret, doreti_iret - 7)
-DEF(swapgs_add_rsp_iret, doreti_iret - 10)
-DEF(rep_movsb_pop_rbp_ret, -0x99002a)
-DEF(rdmsr_start, -0x9d0cfa)
-DEF(wrmsr_ret, -0x9d20cc)
-DEF(dr2gpr_start, -0x9d6d93)
-DEF(gpr2dr_1_start, -0x9d6c7a)
-DEF(gpr2dr_2_start, -0x9d6b87)
-DEF(mov_cr3_rax, -0x39702e)
-DEF(mov_rdi_cr3, -0x39709e)
-DEF(nop_ret, wrmsr_ret + 2)
-DEF(cpu_switch, -0x9d6f80)
-DEF(mprotect_fix_start, -0x90ac61)
-DEF(mprotect_fix_end, mprotect_fix_start+6)
-DEF(mmap_self_fix_1_start, -0x2cd3ad)
-DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
-DEF(mmap_self_fix_2_start, -0x1df35e)
-DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
-DEF(sigaction_fix_start, -0x6c2989)
-DEF(sigaction_fix_end, -0x6c2933)
-DEF(sysents, 0x1709c0)
-DEF(sysents_ps4, 0x168410)
-DEF(sysentvec, 0xd11bb8)
-DEF(sysentvec_ps4, 0xd11d30)
-DEF(sceSblServiceMailbox, -0x6824c0)
-DEF(sceSblAuthMgrSmIsLoadable2, -0x8a5c40)
-DEF(mdbg_call_fix, -0x631e99)
-DEF(syscall_before, -0x802311)
-DEF(syscall_after, -0x8022ee)
-DEF(malloc, -0xa9b90)
-DEF(M_something, 0x1346080)
-DEF(loadSelfSegment_epilogue, -0x8a54cd)
-DEF(loadSelfSegment_watchpoint, -0x2cc9a8)
-DEF(loadSelfSegment_watchpoint_lr, -0x8a5727)
-DEF(decryptSelfBlock_watchpoint_lr, -0x8a538a)
-DEF(decryptSelfBlock_epilogue, -0x8a52c3)
-DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8a4c55)
-DEF(decryptMultipleSelfBlocks_epilogue, -0x8a47d2)
-DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8a58bc)
-DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8a5541)
-DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8a5014)
-DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8a488c)
-DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8a5cbe)
-DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x94a7f0)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x94ada4)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x94ad2e)
-DEF(sceSblPfsSetKeys, -0x94aaa0)
-DEF(sceSblServiceCryptAsync, -0x8ed940)
-DEF(sceSblServiceCryptAsync_deref_singleton, -0x8ed902)
-DEF(copyin, -0x9908e0)
-DEF(copyout, -0x990990)
-DEF(crypt_message_resolve, -0x479df0)
-DEF(justreturn, -0x9cf990)
-DEF(justreturn_pop, justreturn+8)
-DEF(mini_syscore_header, 0xdc16e8)
-DEF(pop_all_iret, -0x9cf8ab)
-DEF(pop_all_except_rdi_iret, pop_all_iret+4)
-DEF(push_pop_all_iret, -0x96d208)
-DEF(kernel_pmap_store, 0x3257a78)
-DEF(crypt_singleton_array, 0x2e31830)
-DEF(security_flags, 0x6505474)
-DEF(targetid, 0x650547d)
-DEF(qa_flags, 0x6505498)
-DEF(utoken, 0x6505500)
-#include "offset_list.txt"
-END_FW()
-
-START_FW(403)
-DEF(allproc, 0x27edcb8) //data 0x33EDCB8
-DEF(idt, 0x64cdc80) //data 0x70CDC80
-DEF(gdt_array, 0x64cee30) //data 0x70CEE30
-DEF(tss_array, 0x64d0830) //data 0x70D0830
-DEF(pcpu_array, 0x64d2280) //data 0x70D2280
-DEF(doreti_iret, -0x9cf84c) //data 0x2307B4
-DEF(add_rsp_iret, doreti_iret - 7) //data 0x2307AD
-DEF(swapgs_add_rsp_iret, doreti_iret - 10) //data 0x2307B4
-DEF(rep_movsb_pop_rbp_ret, -0x99002a) //data 0x26FFD6
-DEF(rdmsr_start, -0x9d0cfa) //data 0x22F306
-DEF(wrmsr_ret, -0x9d20cc) //data 0x22DF34
-DEF(dr2gpr_start, -0x9d6d93) //data 0x22926D
-DEF(gpr2dr_1_start, -0x9d6c7a) //data 0x229386
-DEF(gpr2dr_2_start, -0x9d6b87) //data 0x229479
-DEF(mov_cr3_rax, -0x396f9e) //data 0x869062
-DEF(mov_rdi_cr3, -0x39700e) //data 0x868FF2
-DEF(nop_ret, wrmsr_ret + 2) //data 0x22DF36
-DEF(cpu_switch, -0x9d6f80) //data 0x229080
-DEF(mprotect_fix_start, -0x90ac61) //data 0x2F539F
-DEF(mprotect_fix_end, mprotect_fix_start+6)
-DEF(mmap_self_fix_1_start, -0x2cd31d)
-DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
-DEF(mmap_self_fix_2_start, -0x1df2ce)
-DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
-DEF(sigaction_fix_start, -0x6c2989) //data 0x53D677
-DEF(sigaction_fix_end, -0x6c2933) //data 0x53D6CD
-DEF(sysents, 0x1709c0) //data 0xD709C0
-DEF(sysents_ps4, 0x168410) //data 0xD68410
-DEF(sysentvec, 0xd11bb8) //data 0x1911BB8
-DEF(sysentvec_ps4, 0xd11d30) //data 0x1911D30
-DEF(sceSblServiceMailbox, -0x6824c0) //data 0x57DB40
-DEF(sceSblAuthMgrSmIsLoadable2, -0x8a5c40) //data 0x35A3C0
-DEF(mdbg_call_fix, -0x631ea9) //data 0x5CE157
-DEF(syscall_before, -0x802311) //data 0x3FDCEF
-DEF(syscall_after, -0x8022ee) //data 0x3FDD12
-DEF(malloc, -0xa9b00) //data 0xB56500
-DEF(M_something, 0x1346080) //data 0x1F46080
-DEF(loadSelfSegment_epilogue, -0x8a54cd) //data 0x35AB33
-DEF(loadSelfSegment_watchpoint, -0x2cc918) //data 0x9336E8
-DEF(loadSelfSegment_watchpoint_lr, -0x8a5727) //data 0x35A8D9
-DEF(decryptSelfBlock_watchpoint_lr, -0x8a538a) //data 0x35AC76
-DEF(decryptSelfBlock_epilogue, -0x8a52c3) //data 0x35AD3D
-DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8a4c55) //data 0x35B3AB
-DEF(decryptMultipleSelfBlocks_epilogue, -0x8a47d2) //data 0x35B82E
-DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8a58bc) //data 0x35A744
-DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8a5541) //data 0x35AABF
-DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8a5014) //data 0x35AFEC
-DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8a488c) //data 0x35B774
-DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8a5cbe) //data 0x35A342
-DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x94a7f0) //data 0x2B5810
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x94ada4) //data 0x2B525C
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x94ad2e) //data 0x2B52D2
-DEF(sceSblPfsSetKeys, -0x94aaa0) //data 0x2B5560
-DEF(sceSblServiceCryptAsync, -0x8ed940) //data 0x3126C0
-DEF(sceSblServiceCryptAsync_deref_singleton, -0x8ed902) //data 0x3126FE
-DEF(copyin, -0x9908e0) //data 0x26F720
-DEF(copyout, -0x990990) //data 0x26F670
-DEF(crypt_message_resolve, -0x479d60) //data 0x7862A0
-DEF(justreturn, -0x9cf990) //data 0x230670
-DEF(justreturn_pop, justreturn+8) //data 0x230678
-DEF(mini_syscore_header, 0xdc16e8) //data 0x19C16E8
-DEF(pop_all_iret, -0x9cf8ab) //data 0x230755
-DEF(pop_all_except_rdi_iret, pop_all_iret+4) //data 0x230759
-DEF(push_pop_all_iret, -0x96be70) //data 0x294190
-DEF(kernel_pmap_store, 0x3257a78) //data 0x3E57A78
-DEF(crypt_singleton_array, 0x2e31830) //data 0x3A31830
-DEF(security_flags, 0x6506474) //data 0x7106474
-DEF(targetid, 0x650647d) //data 0x710647D
-DEF(qa_flags, 0x6506498) //data 0x7106498
-DEF(utoken, 0x6506500) //data 0x7106500
-#include "offset_list.txt"
-END_FW()
-
-START_FW(450)
-DEF(allproc, 0x27edcb8)
-DEF(idt, 0x64cdc80)
-DEF(gdt_array, 0x64cee30)
-DEF(tss_array, 0x64d0830)
-DEF(pcpu_array, 0x64d2280)
-DEF(doreti_iret, -0x9cf84c)
-DEF(add_rsp_iret, doreti_iret - 7)
-DEF(swapgs_add_rsp_iret, doreti_iret - 10)
-DEF(rep_movsb_pop_rbp_ret, -0x99002a /*-0x990a55*/)
-DEF(rdmsr_start, -0x9d0cfa /*-0x9d6d02*/)
-//DEF(rdmsr_end, -0x9d6cf9)
-DEF(wrmsr_ret, -0x9d20cc)
-DEF(dr2gpr_start, -0x9d6d93)
-//DEF(dr2gpr_end, -0x9d6d7c)
-DEF(gpr2dr_1_start, -0x9d6c7a)
-//DEF(gpr2dr_1_end, -0x9d6c55)
-DEF(gpr2dr_2_start, -0x9d6b87)
-//DEF(gpr2dr_2_end, -0x9d6de9)
-DEF(mov_cr3_rax, -0x396e4e)
-DEF(mov_rdi_cr3, -0x396ebe)
-DEF(nop_ret, -0x396de1)
-DEF(cpu_switch, -0x9d6f80)
-DEF(mprotect_fix_start, -0x90ac61)
-DEF(mprotect_fix_end, mprotect_fix_start+6)
-DEF(mmap_self_fix_1_start, -0x2cd16d)
-DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
-DEF(mmap_self_fix_2_start, -0x1df11e)
-DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
-DEF(sigaction_fix_start, -0x6c2959)
-DEF(sigaction_fix_end, -0x6c2903)
-DEF(sysents, 0x1709c0)
-DEF(sysents_ps4, 0x168410)
-DEF(sysentvec, 0xd11bb8)
-DEF(sysentvec_ps4, 0xd11d30)
-DEF(sceSblServiceMailbox, -0x682490)
-DEF(sceSblAuthMgrSmIsLoadable2, -0x8a5be0)
-DEF(mdbg_call_fix, -0x631e79)
-DEF(syscall_before, -0x8022e1)
-DEF(syscall_after, -0x8022be)
-DEF(malloc, -0xa9940)
-DEF(M_something, 0x1346080)
-DEF(loadSelfSegment_epilogue, -0x8a546d)
-DEF(loadSelfSegment_watchpoint, -0x2cc768)
-DEF(loadSelfSegment_watchpoint_lr, -0x8a56c7)
-//DEF(decryptSelfBlock_watchpoint, -0x2cc6de)
-DEF(decryptSelfBlock_watchpoint_lr, -0x8a532a)
-DEF(decryptSelfBlock_epilogue, -0x8a5263)
-DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8a4bf5)
-DEF(decryptMultipleSelfBlocks_epilogue, -0x8a4772)
-DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8a585c)
-DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8a54e1)
-DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8a4fb4)
-DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8a482c)
-DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8a5c5e)
-DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x94a7f0)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x94ada4)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x94ad2e)
-DEF(sceSblPfsSetKeys, -0x94aaa0)
-//DEF(panic, -0x20e40)
-DEF(sceSblServiceCryptAsync, -0x8ed930)
-DEF(sceSblServiceCryptAsync_deref_singleton, -0x8ed8f2)
-DEF(copyin, -0x9908e0)
-DEF(copyout, -0x990990)
-DEF(crypt_message_resolve, -0x479c30)
-DEF(justreturn, -0x9cf990)
-DEF(justreturn_pop, justreturn+8)
-DEF(mini_syscore_header, 0xdc16e8)
-DEF(pop_all_iret, -0x9cf8ab)
-DEF(pop_all_except_rdi_iret, pop_all_iret+4)
-DEF(push_pop_all_iret, -0x96db88)
-DEF(kernel_pmap_store, 0x3257a78)
-DEF(crypt_singleton_array, 0x2e31830)
-DEF(security_flags, 0x6506474)
-DEF(targetid, 0x650647d)
-DEF(qa_flags, 0x6506498)
-DEF(utoken, 0x6506500)
-#include "offset_list.txt"
-END_FW()
-
-START_FW(451)
-DEF(allproc, 0x27edcb8)
-DEF(idt, 0x64cdc80)
-DEF(gdt_array, 0x64cee30)
-DEF(tss_array, 0x64d0830)
-DEF(pcpu_array, 0x64d2280)
-DEF(doreti_iret, -0x9cf84c)
-DEF(add_rsp_iret, doreti_iret - 7)
-DEF(swapgs_add_rsp_iret, doreti_iret - 10)
-DEF(rep_movsb_pop_rbp_ret, -0x99002a)
-DEF(rdmsr_start, -0x9d0cfa)
-//DEF(rdmsr_end, -0x9d6cf9)
-DEF(wrmsr_ret, -0x9d20cc)
-DEF(dr2gpr_start, -0x9d6d93)
-//DEF(dr2gpr_end, -0x9d6d7c)
-DEF(gpr2dr_1_start, -0x9d6c7a)
-//DEF(gpr2dr_1_end, -0x9d6c55)
-DEF(gpr2dr_2_start, -0x9d6b87)
-//DEF(gpr2dr_2_end, -0x9d6de9)
-DEF(mov_cr3_rax, -0x396aae)
-DEF(mov_rdi_cr3, -0x396b1e)
-DEF(nop_ret, wrmsr_ret + 2)
-DEF(cpu_switch, -0x9d6f80)
-DEF(mprotect_fix_start, -0x90ac61)
-DEF(mprotect_fix_end, mprotect_fix_start+6)
-DEF(mmap_self_fix_1_start, -0x2ccdcd)
-DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
-DEF(mmap_self_fix_2_start, -0x1ded7e)
-DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
-DEF(sigaction_fix_start, -0x6c2959)
-DEF(sigaction_fix_end, -0x6c2903)
-DEF(sysents, 0x1709c0)
-DEF(sysents_ps4, 0x168410)
-DEF(sysentvec, 0xd11bb8)
-DEF(sysentvec_ps4, 0xd11d30)
-DEF(sceSblServiceMailbox, -0x682490)
-DEF(sceSblAuthMgrSmIsLoadable2, -0x8a5be0)
-DEF(mdbg_call_fix, -0x631e79)
-DEF(syscall_before, -0x8022e1)
-DEF(syscall_after, -0x8022be)
-DEF(malloc, -0xa9510)
-DEF(M_something, 0x1346080)
-DEF(loadSelfSegment_epilogue, -0x8a546d)
-DEF(loadSelfSegment_watchpoint, -0x2cc3c8)
-DEF(loadSelfSegment_watchpoint_lr, -0x8a56c7)
-//DEF(decryptSelfBlock_watchpoint, -0x2cc33e)
-DEF(decryptSelfBlock_watchpoint_lr, -0x8a532a)
-DEF(decryptSelfBlock_epilogue, -0x8a5263)
-DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8a4bf5)
-DEF(decryptMultipleSelfBlocks_epilogue, -0x8a4772)
-DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8a585c)
-DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8a54e1)
-DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8a4fb4)
-DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8a482c)
-DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8a5c5e)
-DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x94a7f0)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x94ada4)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x94ad2e)
-DEF(sceSblPfsSetKeys, -0x94aaa0)
-//DEF(panic, -0x20a10)
-DEF(sceSblServiceCryptAsync, -0x8ed930)
-DEF(sceSblServiceCryptAsync_deref_singleton, -0x8ed8f2)
-DEF(copyin, -0x9908e0)
-DEF(copyout, -0x990990)
-DEF(crypt_message_resolve, -0x479890)
-DEF(justreturn, -0x9cf990)
-DEF(justreturn_pop, justreturn+8)
-DEF(mini_syscore_header, 0xdc16e8)
-DEF(pop_all_iret, -0x9cf8ab)
-DEF(pop_all_except_rdi_iret, pop_all_iret+4)
-DEF(push_pop_all_iret, -0x96d488)
-DEF(kernel_pmap_store, 0x3257a78)
-DEF(crypt_singleton_array, 0x2e31830)
-DEF(security_flags, 0x6506474)
-DEF(targetid, 0x650647d)
-DEF(qa_flags, 0x6506498)
-DEF(utoken, 0x6506500)
-#include "offset_list.txt"
-END_FW()
-
-START_FW(500)
-DEF(allproc, 0x291dd00) //data 0x355DD00
-DEF(idt, 0x660dca0) //data 0x724DCA0
-DEF(gdt_array, 0x660ee50) //data 0x724EE50
-DEF(tss_array, 0x6610850) //data 0x7250850
-DEF(pcpu_array, 0x6622680) //data 0x7262680
-DEF(doreti_iret, -0xa04f93) //data 0x23B06D
-DEF(add_rsp_iret, doreti_iret - 7)
-DEF(swapgs_add_rsp_iret, doreti_iret - 10)
-DEF(rep_movsb_pop_rbp_ret, -0x9c576a) //data 0x27A896
-DEF(rdmsr_start, -0xa0652a) //data 0x239AD6
-DEF(wrmsr_ret, -0xa078fc) //data 0x238704
-DEF(dr2gpr_start, -0xa0bf13) //data 0x2340ED
-DEF(gpr2dr_1_start, -0xa0bdfa) //data 0x234206
-DEF(gpr2dr_2_start, -0xa0bd07) //data 0x2342F9
-DEF(mov_cr3_rax, -0x3a982e) //data 0x8967D2
-DEF(mov_rdi_cr3, -0x3a989e) //data 0x896762
-DEF(nop_ret, wrmsr_ret + 2)
-DEF(cpu_switch, -0xa0c100) //data 0x233F00
-DEF(mprotect_fix_start, -0x93efa2) //data 0x30105E
-DEF(mprotect_fix_end, mprotect_fix_start+6)
-
-DEF(mmap_self_fix_1_start, 0x0)
-DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
-DEF(mmap_self_fix_2_start, 0x0)
-DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
-
-DEF(sigaction_fix_start, -0x6e7db0) //data 0x558250
-DEF(sigaction_fix_end, -0x6e7d6e) //data 0x558292
-DEF(sysents, 0x1b1ef0) //data 0xDF1EF0
-DEF(sysents_ps4, 0x1a9940) //data 0xDE9940
-DEF(sysentvec, 0xe00be8) //data 0x1A40BE8
-DEF(sysentvec_ps4, 0xe00d60) //data 0x1A40D60
-DEF(sceSblServiceMailbox, -0x6a5de0) //data 0x59A220
-DEF(sceSblAuthMgrSmIsLoadable2, -0x8d90d0) //data 0x366F30
-DEF(mdbg_call_fix, -0x650049) //data 0x5EFFB7
-DEF(syscall_before, -0x8357e1) //data 0x40A81F
-DEF(syscall_after, -0x8357be) //data 0x40A842
-DEF(malloc, -0xb4df0) //data 0xB8B210
-DEF(M_something, 0x14355a0) //data 0x20755A0
-DEF(loadSelfSegment_epilogue, -0x8d898d) //data 0x367673
-DEF(loadSelfSegment_watchpoint, -0x2dd358) //data 0x962CA8
-DEF(loadSelfSegment_watchpoint_lr, -0x8d8be7) //data 0x367419
-DEF(decryptSelfBlock_watchpoint_lr, -0x8d885f) //data 0x3677A1
-DEF(decryptSelfBlock_epilogue, -0x8d87a2) //data 0x36785E
-//DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8d8112) //data 0x367EEE //403
-DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8d8119) //data 0x367EE7 //550
-DEF(decryptMultipleSelfBlocks_epilogue, -0x8d7ee4) //data 0x36811C
-DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8d8d76) //data 0x36728A
-DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8d8a01) //data 0x3675FF
-DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8d8439) //data 0x367BC7
-DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8d7c58) //data 0x3683A8
-DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8d914e) //data 0x366EB2
-DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x97f430) //data 0x2C0BD0
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x97f9df) //data 0x2C0621
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x97f969) //data 0x2C0697
-//DEF(sceSblPfsSetKeys, -0x97f6e0) //data 0x2C0920 // 403
-DEF(sceSblPfsSetKeys, -0x9805e0) //data 0x2BFA20 // 550
-DEF(sceSblServiceCryptAsync, -0x921ac0) //data 0x31E540
-DEF(sceSblServiceCryptAsync_deref_singleton, -0x921a82) //data 0x31E57E
-DEF(copyin, -0x9c6020) //data 0x279FE0
-DEF(copyout, -0x9c60d0) //data 0x279F30
-DEF(crypt_message_resolve, -0x48c080) //data 0x7B3F80
-DEF(justreturn, -0xa051c0) //data 0x23AE40
-DEF(justreturn_pop, justreturn+8)
-DEF(mini_syscore_header, 0xeaf938) //data 0x1AEF938
-DEF(pop_all_iret, -0xa04ff2) //data 0x23B00E
-DEF(pop_all_except_rdi_iret, pop_all_iret+4)
-DEF(push_pop_all_iret, -0x9a2d78) //data 0x29D288
-DEF(kernel_pmap_store, 0x3398a88) //data 0x3FD8A88
-DEF(crypt_singleton_array, 0x2f51830) //data 0x3B91830
-DEF(security_flags, 0x66466ec) //data 0x72866EC
-DEF(targetid, 0x66466f5) //data 0x72866F5
-DEF(qa_flags, 0x6646710) //data 0x7286710
-DEF(utoken, 0x6646778) //data 0x7286778
-#include "offset_list.txt"
-END_FW()
-
-START_FW(502)
-DEF(allproc, 0x291dd00) //data 0x355DD00
-DEF(idt, 0x660dca0) //data 0x724DCA0
-DEF(gdt_array, 0x660ee50) //data 0x724EE50
-DEF(tss_array, 0x6610850) //data 0x7250850
-DEF(pcpu_array, 0x6622680) //data 0x7262680
-DEF(doreti_iret, -0xa04f93) //data 0x23B06D
-DEF(add_rsp_iret, doreti_iret - 7)
-DEF(swapgs_add_rsp_iret, doreti_iret - 10)
-DEF(rep_movsb_pop_rbp_ret, -0x9c576a) //data 0x27A896
-DEF(rdmsr_start, -0xa0652a) //data 0x239AD6
-DEF(wrmsr_ret, -0xa078fc) //data 0x238704
-DEF(dr2gpr_start, -0xa0bf13) //data 0x2340ED
-DEF(gpr2dr_1_start, -0xa0bdfa) //data 0x234206
-DEF(gpr2dr_2_start, -0xa0bd07) //data 0x2342F9
-DEF(mov_cr3_rax, -0x3a982e) //data 0x8967D2
-DEF(mov_rdi_cr3, -0x3a989e) //data 0x896762
-DEF(nop_ret, wrmsr_ret + 2)
-DEF(cpu_switch, -0xa0c100) //data 0x233F00
-DEF(mprotect_fix_start, -0x93efa2) //data 0x30105E
-DEF(mprotect_fix_end, mprotect_fix_start+6)
-
-DEF(mmap_self_fix_1_start, 0x0)
-DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
-DEF(mmap_self_fix_2_start, 0x0)
-DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
-
-DEF(sigaction_fix_start, -0x6e7db0) //data 0x558250
-DEF(sigaction_fix_end, -0x6e7d6e) //data 0x558292
-DEF(sysents, 0x1b1ef0) //data 0xDF1EF0
-DEF(sysents_ps4, 0x1a9940) //data 0xDE9940
-DEF(sysentvec, 0xe00be8) //data 0x1A40BE8
-DEF(sysentvec_ps4, 0xe00d60) //data 0x1A40D60
-DEF(sceSblServiceMailbox, -0x6a5de0) //data 0x59A220
-DEF(sceSblAuthMgrSmIsLoadable2, -0x8d90d0) //data 0x366F30
-DEF(mdbg_call_fix, -0x650049) //data 0x5EFFB7
-DEF(syscall_before, -0x8357e1) //data 0x40A81F
-DEF(syscall_after, -0x8357be) //data 0x40A842
-DEF(malloc, -0xb4df0) //data 0xB8B210
-DEF(M_something, 0x14355a0) //data 0x20755A0
-DEF(loadSelfSegment_epilogue, -0x8d898d) //data 0x367673
-DEF(loadSelfSegment_watchpoint, -0x2dd358) //data 0x962CA8
-DEF(loadSelfSegment_watchpoint_lr, -0x8d8be7) //data 0x367419
-DEF(decryptSelfBlock_watchpoint_lr, -0x8d885f) //data 0x3677A1
-DEF(decryptSelfBlock_epilogue, -0x8d87a2) //data 0x36785E
-//DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8d8112) //data 0x367EEE //403
-DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8d8119) //data 0x367EE7 //550
-DEF(decryptMultipleSelfBlocks_epilogue, -0x8d7ee4) //data 0x36811C
-DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8d8d76) //data 0x36728A
-DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8d8a01) //data 0x3675FF
-DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8d8439) //data 0x367BC7
-DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8d7c58) //data 0x3683A8
-DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8d914e) //data 0x366EB2
-DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x97f430) //data 0x2C0BD0
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x97f9df) //data 0x2C0621
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x97f969) //data 0x2C0697
-//DEF(sceSblPfsSetKeys, -0x97f6e0) //data 0x2C0920 // 403
-DEF(sceSblPfsSetKeys, -0x9805e0) //data 0x2BFA20 // 550
-DEF(sceSblServiceCryptAsync, -0x921ac0) //data 0x31E540
-DEF(sceSblServiceCryptAsync_deref_singleton, -0x921a82) //data 0x31E57E
-DEF(copyin, -0x9c6020) //data 0x279FE0
-DEF(copyout, -0x9c60d0) //data 0x279F30
-DEF(crypt_message_resolve, -0x48c080) //data 0x7B3F80
-DEF(justreturn, -0xa051c0) //data 0x23AE40
-DEF(justreturn_pop, justreturn+8)
-DEF(mini_syscore_header, 0xeaf938) //data 0x1AEF938
-DEF(pop_all_iret, -0xa04ff2) //data 0x23B00E
-DEF(pop_all_except_rdi_iret, pop_all_iret+4)
-DEF(push_pop_all_iret, -0x9a33c8) //data 0x29CC38
-DEF(kernel_pmap_store, 0x3398a88) //data 0x3FD8A88
-DEF(crypt_singleton_array, 0x2f51830) //data 0x3B91830
-DEF(security_flags, 0x66466ec) //data 0x72866EC
-DEF(targetid, 0x66466f5) //data 0x72866F5
-DEF(qa_flags, 0x6646710) //data 0x7286710
-DEF(utoken, 0x6646778) //data 0x7286778
-#include "offset_list.txt"
-END_FW()
-
-START_FW(510)
-DEF(allproc, 0x291dd00)
-DEF(idt, 0x660dca0)
-DEF(gdt_array, 0x660ee50)
-DEF(tss_array, 0x6610850)
-DEF(pcpu_array, 0x6622680)
-DEF(doreti_iret, -0xa04f93)
-DEF(add_rsp_iret, doreti_iret - 7)
-DEF(swapgs_add_rsp_iret, doreti_iret - 10)
-DEF(rep_movsb_pop_rbp_ret, -0x9c576a)
-DEF(rdmsr_start, -0xa0652a)
-DEF(wrmsr_ret, -0xa078fc)
-DEF(dr2gpr_start, -0xa0bf13)
-DEF(gpr2dr_1_start, -0xa0bdfa)
-DEF(gpr2dr_2_start, -0xa0bd07)
-DEF(mov_cr3_rax, -0x3a965e)
-DEF(mov_rdi_cr3, -0x3a96ce)
-DEF(nop_ret, wrmsr_ret + 2)
-DEF(cpu_switch, -0xa0c100)
-DEF(mprotect_fix_start, -0x93efa2)
-DEF(mprotect_fix_end, mprotect_fix_start+6)
-
-DEF(mmap_self_fix_1_start, 0x0)
-DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
-DEF(mmap_self_fix_2_start, 0x0)
-DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
-
-DEF(sigaction_fix_start, -0x6e7be0)
-DEF(sigaction_fix_end, -0x6e7b9e)
-DEF(sysents, 0x1b2040)
-DEF(sysents_ps4, 0x1a9a90)
-DEF(sysentvec, 0xe00be8)
-DEF(sysentvec_ps4, 0xe00d60)
-DEF(sceSblServiceMailbox, -0x6a5c10)
-DEF(sceSblAuthMgrSmIsLoadable2, -0x8d90d0)
-DEF(mdbg_call_fix, -0x64fe79)
-DEF(syscall_before, -0x8357e1)
-DEF(syscall_after, -0x8357be)
-DEF(malloc, -0xb4ac0)
-DEF(M_something, 0x14355a0)
-DEF(loadSelfSegment_epilogue, -0x8d898d)
-DEF(loadSelfSegment_watchpoint, -0x2dd108)
-DEF(loadSelfSegment_watchpoint_lr, -0x8d8be7)
-DEF(decryptSelfBlock_watchpoint_lr, -0x8d885f)
-DEF(decryptSelfBlock_epilogue, -0x8d87a2)
-DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8d8119)
-DEF(decryptMultipleSelfBlocks_epilogue, -0x8d7ee4)
-DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8d8d76)
-DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8d8A01)
-DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8d8439)
-DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8d7C58)
-DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8d914E)
-DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x97F430)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x97F9DF)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x97F969)
-DEF(sceSblPfsSetKeys, -0x9805E0)
-DEF(sceSblServiceCryptAsync, -0x921AC0)
-DEF(sceSblServiceCryptAsync_deref_singleton, -0x921A82)
-DEF(copyin, -0x9c6020)
-DEF(copyout, -0x9c60D0)
-DEF(crypt_message_resolve, -0x48BEB0)
-DEF(justreturn, -0xa051c0)
-DEF(justreturn_pop, justreturn+8)
-DEF(mini_syscore_header, 0xeb0938)
-DEF(pop_all_iret, -0xa04ff2)
-DEF(pop_all_except_rdi_iret, pop_all_iret+4)
-DEF(push_pop_all_iret, -0x9a3e70)
-DEF(kernel_pmap_store, 0x3398a88)
-DEF(crypt_singleton_array, 0x2f51830)
-DEF(security_flags, 0x66466EC)
-DEF(targetid, 0x66466F5)
-DEF(qa_flags, 0x6646710)
-DEF(utoken, 0x6646778)
-#include "offset_list.txt"
-END_FW()
-
-START_FW(550)
-DEF(allproc, 0x291dd00)
-DEF(idt, 0x660dca0)
-DEF(gdt_array, 0x660ee50)
-DEF(tss_array, 0x6610850)
-DEF(pcpu_array, 0x6622680)
-DEF(doreti_iret, -0xa04fd3)
-DEF(add_rsp_iret, doreti_iret - 7)
-DEF(swapgs_add_rsp_iret, doreti_iret - 10)
-DEF(rep_movsb_pop_rbp_ret, -0x9c57aa)
-DEF(rdmsr_start, -0xa0656a)
-DEF(wrmsr_ret, -0xa0793c)
-DEF(dr2gpr_start, -0xa0bf53)
-DEF(gpr2dr_1_start, -0xa0be3a)
-DEF(gpr2dr_2_start, -0xa0bd47)
-DEF(mov_cr3_rax, -0x3a886e)
-DEF(mov_rdi_cr3, -0x3a88de)
-DEF(nop_ret, wrmsr_ret + 2)
-DEF(cpu_switch, -0xa0c140)
-DEF(mprotect_fix_start, -0x93EFE2)
-DEF(mprotect_fix_end, mprotect_fix_start+6)
-
-DEF(mmap_self_fix_1_start, 0x0)
-DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
-DEF(mmap_self_fix_2_start, 0x0)
-DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
-
-DEF(sigaction_fix_start, -0x6e7b30)
-DEF(sigaction_fix_end, -0x6e7aee)
-DEF(sysents, 0x1b2210)
-DEF(sysents_ps4, 0x1a9c60)
-DEF(sysentvec, 0xe00be8)
-DEF(sysentvec_ps4, 0xe00d60)
-DEF(sceSblServiceMailbox, -0x6a5b60)
-DEF(sceSblAuthMgrSmIsLoadable2, -0x8d9110)
-DEF(mdbg_call_fix, -0x64fb79)
-DEF(syscall_before, -0x835731)
-DEF(syscall_after, -0x83570e)
-DEF(malloc, -0xb3cd0)
-DEF(M_something, 0x14355a0)
-DEF(loadSelfSegment_epilogue, -0x8d89CD)
-DEF(loadSelfSegment_watchpoint, -0x2dC318)
-DEF(loadSelfSegment_watchpoint_lr, -0x8d8C27)
-DEF(decryptSelfBlock_watchpoint_lr, -0x8d889F)
-DEF(decryptSelfBlock_epilogue, -0x8d87E2)
-DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8d8159)
-DEF(decryptMultipleSelfBlocks_epilogue, -0x8d7F24)
-DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8d8DB6)
-DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8d8A41)
-DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8d8479)
-DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8d7C98)
-DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8d918E)
-DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x97F470)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x97FA1F)
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x97F9A9)
-DEF(sceSblPfsSetKeys, -0x980620)
-DEF(sceSblServiceCryptAsync, -0x921B00)
-DEF(sceSblServiceCryptAsync_deref_singleton, -0x921AC2)
-DEF(copyin, -0x9c6060)
-DEF(copyout, -0x9c6110)
-DEF(crypt_message_resolve, -0x48B0C0)
-DEF(justreturn, -0xa05200)
-DEF(justreturn_pop, justreturn+8)
-DEF(mini_syscore_header, 0xeaf938)
-DEF(pop_all_iret, -0xa05032)
-DEF(pop_all_except_rdi_iret, pop_all_iret+4)
-DEF(push_pop_all_iret, -0x99fc70)
-DEF(kernel_pmap_store, 0x3394a88)
-DEF(crypt_singleton_array, 0x2f4d830)
-DEF(security_flags, 0x66466EC)
-DEF(targetid, 0x66466F5)
-DEF(qa_flags, 0x6646710)
-DEF(utoken, 0x6646778)
-#include "offset_list.txt"
-END_FW()
-
-START_FW(650)
-DEF(allproc, 0x2869d20) //data 0x34C9D20
-DEF(idt, 0x655dde0) //data 0x71BDDE0
-DEF(gdt_array, 0x655f000) //data 0x71BF000
-DEF(tss_array, 0x6560a00) //data 0x71C0A00
-DEF(pcpu_array, 0x6572880) //data 0x71D2880
-DEF(doreti_iret, -0xa1b813) //data 0x2447ED
-DEF(add_rsp_iret, doreti_iret - 7) //data 0x2247E6
-DEF(swapgs_add_rsp_iret, doreti_iret - 10) //data 0x2247E3
-DEF(rep_movsb_pop_rbp_ret, -0x9dbfea) //data 0x284016
-DEF(rdmsr_start, -0xa1cdaa) //data 0x243256
-DEF(wrmsr_ret, -0xa1e17c) //data 0x241E84
-DEF(dr2gpr_start, -0xa22793) //data 0x23D86D
-DEF(gpr2dr_1_start, -0xa2267a) //data 0x23D986
-DEF(gpr2dr_2_start, -0xa22587) //data 0x23DA79
-DEF(mov_cr3_rax, -0x3aa0de) //data 0x8B5F22
-DEF(mov_rdi_cr3, -0x3aa14e) //data 0x8B5EB2
-DEF(nop_ret, wrmsr_ret + 2) //data 0x241E86
-DEF(cpu_switch, -0xa22980) //data 0x23D680
-DEF(mprotect_fix_start, -0x9546e2) //data 0x30B91E
-DEF(mprotect_fix_end, mprotect_fix_start+6) //data 0x30B924
-
-DEF(mmap_self_fix_1_start, 0x0)
-DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
-DEF(mmap_self_fix_2_start, 0x0)
-DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
-
-DEF(sigaction_fix_start, -0x6f6b12) //data 0x5694EE
-DEF(sigaction_fix_end, -0x6f6ae8) //data 0x569518
-DEF(sysents, 0x1b49f0) //data 0xE149F0
-DEF(sysents_ps4, 0x1ac440) //data 0xE0C440
-DEF(sysentvec, 0xe210a8) //data 0x1A810A8
-DEF(sysentvec_ps4, 0xe21220) //data 0x1A81220
-DEF(sceSblServiceMailbox, -0x6b2790) //data 0x5AD870
-DEF(sceSblAuthMgrSmIsLoadable2, -0x8ed100) //data 0x372F00
-DEF(mdbg_call_fix, -0x65c199) //data 0x603E67
-DEF(syscall_before, -0x844a51) //data 0x41B5AF
-DEF(syscall_after, -0x844a2e) //data 0x41B5D2
-DEF(malloc, -0xa9d40) //data 0xBB62C0
-DEF(M_something, 0x1456690) //data 0x20B6690
-DEF(loadSelfSegment_epilogue, -0x8ec9cd) //data 0x373633
-DEF(loadSelfSegment_watchpoint, -0x2da218) //data 0x985DE8
-DEF(loadSelfSegment_watchpoint_lr, -0x8ecc27) //data 0x3733D9
-DEF(decryptSelfBlock_watchpoint_lr, -0x8ec89f) //data 0x373761
-DEF(decryptSelfBlock_epilogue, -0x8ec7e2) //data 0x37381E
-//DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8ec152) //data 0x373EAE //403
-DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8ec159) //data 0x373EA7 //550
-DEF(decryptMultipleSelfBlocks_epilogue, -0x8ebf24) //data 0x3740DC
-DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8ecdb9) //data 0x373247
-DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8eca41) //data 0x3735BF
-DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8ec479) //data 0x373B87
-DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8ebc88) //data 0x374378
-DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8ed17e) //data 0x372E82
-DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x995381) //data 0x2CAC7F
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x995931) //data 0x2CA6CF
-DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x9958bb) //data 0x2CA745
-//DEF(sceSblPfsSetKeys, -0x995630) //data 0x2CA9D0 //403
-DEF(sceSblPfsSetKeys, -0x996400) //data 0x2C9C00 //550
-DEF(sceSblServiceCryptAsync, -0x936090) //data 0x329F70
-DEF(sceSblServiceCryptAsync_deref_singleton, -0x936052) //data 0x329FAE
-DEF(copyin, -0x9dc8a0) //data 0x283760
-DEF(copyout, -0x9dc950) //data 0x2836B0
-DEF(crypt_message_resolve, -0x490060) //data 0x7CFFA0
-DEF(justreturn, -0xa1ba40) //data 0x2445C0
-DEF(justreturn_pop, justreturn+8) //data 0x2445C8
-DEF(mini_syscore_header, 0xed2048) //data 0x1B32048
-DEF(pop_all_iret, -0xa1b872) //data 0x24478E
-DEF(pop_all_except_rdi_iret, pop_all_iret+4) //data 0x244792
-DEF(push_pop_all_iret, -0x9ba368) //data 0x2A5C98
-DEF(kernel_pmap_store, 0x32e4358) //data 0x3F44358
-DEF(crypt_singleton_array, 0x2e9d830) //data 0x3AFD830
-DEF(security_flags, 0x65968ec) //data 0x71F68EC
-DEF(targetid, 0x65968f5) //data 0x71F68F5
-DEF(qa_flags, 0x6596910) //data 0x71F6910
-DEF(utoken, 0x6596978) //data 0x71F6978
-#include "offset_list.txt"
-END_FW()
-
-void* dlsym(void*, const char*);
-
-int set_offsets(void)
-{
-    uint32_t ver = r0gdb_get_fw_version() >> 16;
-    switch(ver)
-    {
-#ifndef NO_BUILTIN_OFFSETS
-    case 0x300: set_offsets_300(); break;
-    case 0x310: set_offsets_310(); break;
-    case 0x320: set_offsets_320(); break;
-    case 0x321: set_offsets_321(); break;
-    case 0x400: set_offsets_400(); break;
-    case 0x402: set_offsets_402(); break;
-    case 0x403: set_offsets_403(); break;
-    case 0x450: set_offsets_450(); break;
-    case 0x451: set_offsets_451(); break;
-    case 0x500: set_offsets_500(); break;
-    case 0x502: set_offsets_502(); break;
-    case 0x510: set_offsets_510(); break;
-    case 0x550: set_offsets_550(); break;
-    case 0x650: set_offsets_650(); break;
-#endif
-    default: return -1;
-    }
-    return 0;
-}
+#include "r0gdb.h"
+#include "offsets.h"
+
+struct offset_table offsets;
+extern uint64_t kdata_base;
+
+#define OFFSET(x) offsets.x = kdata_base + x;
+#define DEF(x, y) enum { x = (y) + 0 * sizeof(offsets.x) };
+
+#define START_FW(fw) void set_offsets_ ## fw(void) {
+#define END_FW() }
+
+START_FW(300)
+DEF(allproc, 0x276dc58)
+DEF(idt, 0x642dc80)
+DEF(gdt_array, 0x642ee20)
+DEF(tss_array, 0x6430820)
+DEF(pcpu_array, 0x6432280)
+DEF(doreti_iret, -0x9aefbc)
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0x96f79a)
+DEF(rdmsr_start, -0x9b046a)
+DEF(wrmsr_ret, -0x9b183c)
+DEF(dr2gpr_start, -0x9b6513)
+DEF(gpr2dr_1_start, -0x9b63fa)
+DEF(gpr2dr_2_start, -0x9b6307)
+DEF(mov_cr3_rax, -0x39099e)
+DEF(mov_rdi_cr3, -0x390a0e)
+DEF(nop_ret, wrmsr_ret + 2)
+DEF(cpu_switch, -0x9b6700)
+DEF(mprotect_fix_start, -0x8ee651)
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+DEF(mmap_self_fix_1_start, -0x2c92bd)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, -0x1dd21e)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+DEF(sigaction_fix_start, -0x6b549f)
+DEF(sigaction_fix_end, -0x6b5449)
+DEF(sysents, 0x16f720)
+DEF(sysents_ps4, 0x167170)
+DEF(sysentvec, 0xca0cd8)
+DEF(sysentvec_ps4, 0xca0e50)
+DEF(sceSblServiceMailbox, -0x675df0)
+DEF(sceSblAuthMgrSmIsLoadable2, -0x88a540)
+DEF(mdbg_call_fix, -0x626d49)
+DEF(syscall_before, -0x7e91bf)
+DEF(syscall_after, -0x7e919c)
+DEF(malloc, -0xaa2a0)
+DEF(M_something, 0x12d3d70)
+DEF(loadSelfSegment_epilogue, -0x889e0d)
+DEF(loadSelfSegment_watchpoint, -0x2c88a8)
+DEF(loadSelfSegment_watchpoint_lr, -0x88a067)
+DEF(decryptSelfBlock_watchpoint_lr, -0x889cca)
+DEF(decryptSelfBlock_epilogue, -0x889c03)
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x889595)
+DEF(decryptMultipleSelfBlocks_epilogue, -0x889112)
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x88a1bc)
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x889e81)
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x889954)
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8891cc)
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x88a5be)
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x92d9b0)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x92df7b)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x92df05)
+DEF(sceSblPfsSetKeys, -0x92dc60)
+DEF(sceSblServiceCryptAsync, -0x8d1e30)
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x8d1df2)
+DEF(copyin, -0x970050)
+DEF(copyout, -0x970100)
+DEF(crypt_message_resolve, -0x475790)
+DEF(justreturn, -0x9af100)
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xd4fe88)
+DEF(pop_all_iret, -0x9af01b)
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x94f570)
+DEF(kernel_pmap_store, 0x31be218)
+DEF(crypt_singleton_array, 0x2d99830)
+DEF(security_flags, 0x6466474)
+DEF(targetid, 0x646647d)
+DEF(qa_flags, 0x6466498)
+DEF(utoken, 0x6466500)
+#include "offset_list.txt"
+END_FW()
+
+START_FW(310)
+DEF(allproc, 0x276dc58)
+DEF(idt, 0x642dc80)
+DEF(gdt_array, 0x642ee20)
+DEF(tss_array, 0x6430820)
+DEF(pcpu_array, 0x6432280)
+DEF(doreti_iret, -0x9aefbc)
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0x96f79a)
+DEF(rdmsr_start, -0x9b046a)
+DEF(wrmsr_ret, -0x9b183c)
+DEF(dr2gpr_start, -0x9b6513)
+DEF(gpr2dr_1_start, -0x9b63fa)
+DEF(gpr2dr_2_start, -0x9b6307)
+DEF(mov_cr3_rax, -0x39095e)
+DEF(mov_rdi_cr3, -0x3909ce)
+DEF(nop_ret, wrmsr_ret + 2)
+DEF(cpu_switch, -0x9b6700)
+DEF(mprotect_fix_start, -0x8ee651)
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+DEF(mmap_self_fix_1_start, -0x2c927d)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, -0x1dd1de)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+DEF(sigaction_fix_start, -0x6b545f)
+DEF(sigaction_fix_end, -0x6b5409)
+DEF(sysents, 0x16f720)
+DEF(sysents_ps4, 0x167170)
+DEF(sysentvec, 0xca0cd8)
+DEF(sysentvec_ps4, 0xca0e50)
+DEF(sceSblServiceMailbox, -0x675db0)
+DEF(sceSblAuthMgrSmIsLoadable2, -0x88a540)
+DEF(mdbg_call_fix, -0x626d09)
+DEF(syscall_before, -0x7e917f)
+DEF(syscall_after, -0x7e915c)
+DEF(malloc, -0xaa260)
+DEF(M_something, 0x12d3d70)
+DEF(loadSelfSegment_epilogue, -0x889dcd)
+DEF(loadSelfSegment_watchpoint, -0x2c8868)
+DEF(loadSelfSegment_watchpoint_lr, -0x88a027)
+DEF(decryptSelfBlock_watchpoint_lr, -0x889c8a)
+DEF(decryptSelfBlock_epilogue, -0x889bc3)
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x889555)
+DEF(decryptMultipleSelfBlocks_epilogue, -0x8890d2)
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x88a1bc)
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x889e41)
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x889914)
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x88918c)
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x88a5be)
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x92d9b0)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x92df7b)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x92df05)
+DEF(sceSblPfsSetKeys, -0x92dc60)
+DEF(sceSblServiceCryptAsync, -0x8d1e30)
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x8d1df2)
+DEF(copyin, -0x970050)
+DEF(copyout, -0x970100)
+DEF(crypt_message_resolve, -0x475750)
+DEF(justreturn, -0x9af100)
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xd4fe88)
+DEF(pop_all_iret, -0x9af01b)
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x94f6b8)
+DEF(kernel_pmap_store, 0x31be218)
+DEF(crypt_singleton_array, 0x2d99830)
+DEF(security_flags, 0x6466474)
+DEF(targetid, 0x646647d)
+DEF(qa_flags, 0x6466490)
+DEF(utoken, 0x6466500)
+#include "offset_list.txt"
+END_FW()
+
+START_FW(320)
+DEF(allproc, 0x276dc58)
+DEF(idt, 0x642dc80)
+DEF(gdt_array, 0x642ee20)
+DEF(tss_array, 0x6430820)
+DEF(pcpu_array, 0x6432280)
+DEF(doreti_iret, -0x9aec7c)
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0x96f45a)
+DEF(rdmsr_start, -0x9b012a)
+DEF(wrmsr_ret, -0x9b14fc)
+DEF(dr2gpr_start, -0x9b61d3)
+DEF(gpr2dr_1_start, -0x9b60ba)
+DEF(gpr2dr_2_start, -0x9b5fc7)
+DEF(mov_cr3_rax, -0x39060e)
+DEF(mov_rdi_cr3, -0x39067e)
+DEF(nop_ret, wrmsr_ret + 2)
+DEF(cpu_switch, -0x9b63c0)
+DEF(mprotect_fix_start, -0x8ee311)
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+DEF(mmap_self_fix_1_start, -0x2c8f2d)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, -0x1dcd1e)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+DEF(sigaction_fix_start, -0x6b510f)
+DEF(sigaction_fix_end, -0x6b50b9)
+DEF(sysents, 0x16f720)
+DEF(sysents_ps4, 0x167170)
+DEF(sysentvec, 0xca0cd8)
+DEF(sysentvec_ps4, 0xca0e50)
+DEF(sceSblServiceMailbox, -0x675a60)
+DEF(sceSblAuthMgrSmIsLoadable2, -0x88a200)
+DEF(mdbg_call_fix, -0x6269b9)
+DEF(syscall_before, -0x7e8e2f)
+DEF(syscall_after, -0x7e8e0c)
+DEF(malloc, -0xa9da0)
+DEF(M_something, 0x12d3d70)
+DEF(loadSelfSegment_epilogue, -0x889a7d)
+DEF(loadSelfSegment_watchpoint, -0x2c8518)
+DEF(loadSelfSegment_watchpoint_lr, -0x889cd7)
+DEF(decryptSelfBlock_watchpoint_lr, -0x88993a)
+DEF(decryptSelfBlock_epilogue, -0x889873)
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x889205)
+DEF(decryptMultipleSelfBlocks_epilogue, -0x888d82)
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x889e7c)
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x889af1)
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8895c4)
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x888e3c)
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x88a27e)
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x92d670)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x92dc3b)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x92dbc5)
+DEF(sceSblPfsSetKeys, -0x92d920)
+DEF(sceSblServiceCryptAsync, -0x8d1af0)
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x8d1ab2)
+DEF(copyin, -0x96fd10)
+DEF(copyout, -0x96fdc0)
+DEF(crypt_message_resolve, -0x475400)
+DEF(justreturn, -0x9aedc0)
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xd4fe88)
+DEF(pop_all_iret, -0x9aecdb)
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x94e7d0)
+DEF(kernel_pmap_store, 0x31be218)
+DEF(crypt_singleton_array, 0x2d99830)
+DEF(security_flags, 0x6466474)
+DEF(targetid, 0x646647d)
+DEF(qa_flags, 0x6466498)
+DEF(utoken, 0x6466500)
+#include "offset_list.txt"
+END_FW()
+
+START_FW(321)
+DEF(allproc, 0x276dc58)
+DEF(idt, 0x642dc80)
+DEF(gdt_array, 0x642ee20)
+DEF(tss_array, 0x6430820)
+DEF(pcpu_array, 0x6432280)
+DEF(doreti_iret, -0x9aec7c)
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0x96f45a)
+DEF(rdmsr_start, -0x9b012a)
+DEF(wrmsr_ret, -0x9b14fc)
+DEF(dr2gpr_start, -0x9b61d3)
+DEF(gpr2dr_1_start, -0x9b60ba)
+DEF(gpr2dr_2_start, -0x9b5fc7)
+DEF(mov_cr3_rax, -0x39060e)
+DEF(mov_rdi_cr3, -0x39067e)
+DEF(nop_ret, wrmsr_ret + 2)
+DEF(cpu_switch, -0x9b63c0)
+DEF(mprotect_fix_start, -0x8ee311)
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+DEF(mmap_self_fix_1_start, -0x2c8f2d)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, -0x1dcd1e)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+DEF(sigaction_fix_start, -0x6b510f)
+DEF(sigaction_fix_end, -0x6b50b9)
+DEF(sysents, 0x16f720)
+DEF(sysents_ps4, 0x167170)
+DEF(sysentvec, 0xca0cd8)
+DEF(sysentvec_ps4, 0xca0e50)
+DEF(sceSblServiceMailbox, -0x675a60)
+DEF(sceSblAuthMgrSmIsLoadable2, -0x88a200)
+DEF(mdbg_call_fix, -0x6269b9)
+DEF(syscall_before, -0x7e8e2f)
+DEF(syscall_after, -0x7e8e0c)
+DEF(malloc, -0xa9da0)
+DEF(M_something, 0x12d3d70)
+DEF(loadSelfSegment_epilogue, -0x889a7d)
+DEF(loadSelfSegment_watchpoint, -0x2c8518)
+DEF(loadSelfSegment_watchpoint_lr, -0x889cd7)
+DEF(decryptSelfBlock_watchpoint_lr, -0x88993a)
+DEF(decryptSelfBlock_epilogue, -0x889873)
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x889205)
+DEF(decryptMultipleSelfBlocks_epilogue, -0x888d82)
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x889e7c)
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x889af1)
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8895c4)
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x888e3c)
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x88a27e)
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x92d670)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x92dc3b)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x92dbc5)
+DEF(sceSblPfsSetKeys, -0x92d920)
+DEF(sceSblServiceCryptAsync, -0x8d1af0)
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x8d1ab2)
+DEF(copyin, -0x96fd10)
+DEF(copyout, -0x96fdc0)
+DEF(crypt_message_resolve, -0x475400)
+DEF(justreturn, -0x9aedc0)
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xd4fe88)
+DEF(pop_all_iret, -0x9aecdb)
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x94e4d0)
+DEF(kernel_pmap_store, 0x31be218)
+DEF(crypt_singleton_array, 0x2d99830)
+DEF(security_flags, 0x6466474)
+DEF(targetid, 0x646647d)
+DEF(qa_flags, 0x6466498)
+DEF(utoken, 0x6466500)
+#include "offset_list.txt"
+END_FW()
+
+START_FW(400)
+DEF(allproc, 0x27edcb8)
+DEF(idt, 0x64cdc80)
+DEF(gdt_array, 0x64cee30)
+DEF(tss_array, 0x64d0830)
+DEF(pcpu_array, 0x64d2280)
+DEF(doreti_iret, -0x9cf84c)
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0x99002a)
+DEF(rdmsr_start, -0x9d0cfa)
+DEF(wrmsr_ret, -0x9d20cc)
+DEF(dr2gpr_start, -0x9d6d93)
+DEF(gpr2dr_1_start, -0x9d6c7a)
+DEF(gpr2dr_2_start, -0x9d6b87)
+DEF(mov_cr3_rax, -0x39707e)
+DEF(mov_rdi_cr3, -0x3970ee)
+DEF(nop_ret, wrmsr_ret + 2)
+DEF(cpu_switch, -0x9d6f80)
+DEF(mprotect_fix_start, -0x90ac61)
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+DEF(mmap_self_fix_1_start, -0x2cd3fd)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, -0x1df3ae)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+DEF(sigaction_fix_start, -0x6c2989)
+DEF(sigaction_fix_end, -0x6c2933)
+DEF(sysents, 0x1709c0)
+DEF(sysents_ps4, 0x168410)
+DEF(sysentvec, 0xd11bb8)
+DEF(sysentvec_ps4, 0xd11d30)
+DEF(sceSblServiceMailbox, -0x6824c0)
+DEF(sceSblAuthMgrSmIsLoadable2, -0x8a5c40)
+DEF(mdbg_call_fix, -0x631eb9)
+DEF(syscall_before, -0x802311)
+DEF(syscall_after, -0x8022ee)
+DEF(malloc, -0xa9be0)
+DEF(M_something, 0x1346080)
+DEF(loadSelfSegment_epilogue, -0x8a54cd)
+DEF(loadSelfSegment_watchpoint, -0x2cc9f8)
+DEF(loadSelfSegment_watchpoint_lr, -0x8a5727)
+DEF(decryptSelfBlock_watchpoint_lr, -0x8a538a)
+DEF(decryptSelfBlock_epilogue, -0x8a52c3)
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8a4c55)
+DEF(decryptMultipleSelfBlocks_epilogue, -0x8a47d2)
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8a58bc)
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8a5541)
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8a5014)
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8a488c)
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8a5cbe)
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x94a7f0)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x94ada4)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x94ad2e)
+DEF(sceSblPfsSetKeys, -0x94aaa0)
+DEF(sceSblServiceCryptAsync, -0x8ed940)
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x8ed902)
+DEF(copyin, -0x9908e0)
+DEF(copyout, -0x990990)
+DEF(crypt_message_resolve, -0x479e40)
+DEF(justreturn, -0x9cf990)
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xdc16e8)
+DEF(pop_all_iret, -0x9cf8ab)
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x96bc30)
+DEF(kernel_pmap_store, 0x3257a78)
+DEF(crypt_singleton_array, 0x2e31830)
+DEF(security_flags, 0x6506474)
+DEF(targetid, 0x650647d)
+DEF(qa_flags, 0x6506498)
+DEF(utoken, 0x6506500)
+#include "offset_list.txt"
+END_FW()
+
+START_FW(402)
+DEF(allproc, 0x27edcb8)
+DEF(idt, 0x64cdc80)
+DEF(gdt_array, 0x64cee30)
+DEF(tss_array, 0x64d0830)
+DEF(pcpu_array, 0x64d2280)
+DEF(doreti_iret, -0x9cf84c)
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0x99002a)
+DEF(rdmsr_start, -0x9d0cfa)
+DEF(wrmsr_ret, -0x9d20cc)
+DEF(dr2gpr_start, -0x9d6d93)
+DEF(gpr2dr_1_start, -0x9d6c7a)
+DEF(gpr2dr_2_start, -0x9d6b87)
+DEF(mov_cr3_rax, -0x39702e)
+DEF(mov_rdi_cr3, -0x39709e)
+DEF(nop_ret, wrmsr_ret + 2)
+DEF(cpu_switch, -0x9d6f80)
+DEF(mprotect_fix_start, -0x90ac61)
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+DEF(mmap_self_fix_1_start, -0x2cd3ad)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, -0x1df35e)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+DEF(sigaction_fix_start, -0x6c2989)
+DEF(sigaction_fix_end, -0x6c2933)
+DEF(sysents, 0x1709c0)
+DEF(sysents_ps4, 0x168410)
+DEF(sysentvec, 0xd11bb8)
+DEF(sysentvec_ps4, 0xd11d30)
+DEF(sceSblServiceMailbox, -0x6824c0)
+DEF(sceSblAuthMgrSmIsLoadable2, -0x8a5c40)
+DEF(mdbg_call_fix, -0x631e99)
+DEF(syscall_before, -0x802311)
+DEF(syscall_after, -0x8022ee)
+DEF(malloc, -0xa9b90)
+DEF(M_something, 0x1346080)
+DEF(loadSelfSegment_epilogue, -0x8a54cd)
+DEF(loadSelfSegment_watchpoint, -0x2cc9a8)
+DEF(loadSelfSegment_watchpoint_lr, -0x8a5727)
+DEF(decryptSelfBlock_watchpoint_lr, -0x8a538a)
+DEF(decryptSelfBlock_epilogue, -0x8a52c3)
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8a4c55)
+DEF(decryptMultipleSelfBlocks_epilogue, -0x8a47d2)
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8a58bc)
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8a5541)
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8a5014)
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8a488c)
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8a5cbe)
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x94a7f0)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x94ada4)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x94ad2e)
+DEF(sceSblPfsSetKeys, -0x94aaa0)
+DEF(sceSblServiceCryptAsync, -0x8ed940)
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x8ed902)
+DEF(copyin, -0x9908e0)
+DEF(copyout, -0x990990)
+DEF(crypt_message_resolve, -0x479df0)
+DEF(justreturn, -0x9cf990)
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xdc16e8)
+DEF(pop_all_iret, -0x9cf8ab)
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x96d208)
+DEF(kernel_pmap_store, 0x3257a78)
+DEF(crypt_singleton_array, 0x2e31830)
+DEF(security_flags, 0x6505474)
+DEF(targetid, 0x650547d)
+DEF(qa_flags, 0x6505498)
+DEF(utoken, 0x6505500)
+#include "offset_list.txt"
+END_FW()
+
+START_FW(403)
+DEF(allproc, 0x27edcb8) //data 0x33EDCB8
+DEF(idt, 0x64cdc80) //data 0x70CDC80
+DEF(gdt_array, 0x64cee30) //data 0x70CEE30
+DEF(tss_array, 0x64d0830) //data 0x70D0830
+DEF(pcpu_array, 0x64d2280) //data 0x70D2280
+DEF(doreti_iret, -0x9cf84c) //data 0x2307B4
+DEF(add_rsp_iret, doreti_iret - 7) //data 0x2307AD
+DEF(swapgs_add_rsp_iret, doreti_iret - 10) //data 0x2307B4
+DEF(rep_movsb_pop_rbp_ret, -0x99002a) //data 0x26FFD6
+DEF(rdmsr_start, -0x9d0cfa) //data 0x22F306
+DEF(wrmsr_ret, -0x9d20cc) //data 0x22DF34
+DEF(dr2gpr_start, -0x9d6d93) //data 0x22926D
+DEF(gpr2dr_1_start, -0x9d6c7a) //data 0x229386
+DEF(gpr2dr_2_start, -0x9d6b87) //data 0x229479
+DEF(mov_cr3_rax, -0x396f9e) //data 0x869062
+DEF(mov_rdi_cr3, -0x39700e) //data 0x868FF2
+DEF(nop_ret, wrmsr_ret + 2) //data 0x22DF36
+DEF(cpu_switch, -0x9d6f80) //data 0x229080
+DEF(mprotect_fix_start, -0x90ac61) //data 0x2F539F
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+DEF(mmap_self_fix_1_start, -0x2cd31d)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, -0x1df2ce)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+DEF(sigaction_fix_start, -0x6c2989) //data 0x53D677
+DEF(sigaction_fix_end, -0x6c2933) //data 0x53D6CD
+DEF(sysents, 0x1709c0) //data 0xD709C0
+DEF(sysents_ps4, 0x168410) //data 0xD68410
+DEF(sysentvec, 0xd11bb8) //data 0x1911BB8
+DEF(sysentvec_ps4, 0xd11d30) //data 0x1911D30
+DEF(sceSblServiceMailbox, -0x6824c0) //data 0x57DB40
+DEF(sceSblAuthMgrSmIsLoadable2, -0x8a5c40) //data 0x35A3C0
+DEF(mdbg_call_fix, -0x631ea9) //data 0x5CE157
+DEF(syscall_before, -0x802311) //data 0x3FDCEF
+DEF(syscall_after, -0x8022ee) //data 0x3FDD12
+DEF(malloc, -0xa9b00) //data 0xB56500
+DEF(M_something, 0x1346080) //data 0x1F46080
+DEF(loadSelfSegment_epilogue, -0x8a54cd) //data 0x35AB33
+DEF(loadSelfSegment_watchpoint, -0x2cc918) //data 0x9336E8
+DEF(loadSelfSegment_watchpoint_lr, -0x8a5727) //data 0x35A8D9
+DEF(decryptSelfBlock_watchpoint_lr, -0x8a538a) //data 0x35AC76
+DEF(decryptSelfBlock_epilogue, -0x8a52c3) //data 0x35AD3D
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8a4c55) //data 0x35B3AB
+DEF(decryptMultipleSelfBlocks_epilogue, -0x8a47d2) //data 0x35B82E
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8a58bc) //data 0x35A744
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8a5541) //data 0x35AABF
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8a5014) //data 0x35AFEC
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8a488c) //data 0x35B774
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8a5cbe) //data 0x35A342
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x94a7f0) //data 0x2B5810
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x94ada4) //data 0x2B525C
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x94ad2e) //data 0x2B52D2
+DEF(sceSblPfsSetKeys, -0x94aaa0) //data 0x2B5560
+DEF(sceSblServiceCryptAsync, -0x8ed940) //data 0x3126C0
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x8ed902) //data 0x3126FE
+DEF(copyin, -0x9908e0) //data 0x26F720
+DEF(copyout, -0x990990) //data 0x26F670
+DEF(crypt_message_resolve, -0x479d60) //data 0x7862A0
+DEF(justreturn, -0x9cf990) //data 0x230670
+DEF(justreturn_pop, justreturn+8) //data 0x230678
+DEF(mini_syscore_header, 0xdc16e8) //data 0x19C16E8
+DEF(pop_all_iret, -0x9cf8ab) //data 0x230755
+DEF(pop_all_except_rdi_iret, pop_all_iret+4) //data 0x230759
+DEF(push_pop_all_iret, -0x96be70) //data 0x294190
+DEF(kernel_pmap_store, 0x3257a78) //data 0x3E57A78
+DEF(crypt_singleton_array, 0x2e31830) //data 0x3A31830
+DEF(security_flags, 0x6506474) //data 0x7106474
+DEF(targetid, 0x650647d) //data 0x710647D
+DEF(qa_flags, 0x6506498) //data 0x7106498
+DEF(utoken, 0x6506500) //data 0x7106500
+#include "offset_list.txt"
+END_FW()
+
+START_FW(450)
+DEF(allproc, 0x27edcb8)
+DEF(idt, 0x64cdc80)
+DEF(gdt_array, 0x64cee30)
+DEF(tss_array, 0x64d0830)
+DEF(pcpu_array, 0x64d2280)
+DEF(doreti_iret, -0x9cf84c)
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0x99002a /*-0x990a55*/)
+DEF(rdmsr_start, -0x9d0cfa /*-0x9d6d02*/)
+//DEF(rdmsr_end, -0x9d6cf9)
+DEF(wrmsr_ret, -0x9d20cc)
+DEF(dr2gpr_start, -0x9d6d93)
+//DEF(dr2gpr_end, -0x9d6d7c)
+DEF(gpr2dr_1_start, -0x9d6c7a)
+//DEF(gpr2dr_1_end, -0x9d6c55)
+DEF(gpr2dr_2_start, -0x9d6b87)
+//DEF(gpr2dr_2_end, -0x9d6de9)
+DEF(mov_cr3_rax, -0x396e4e)
+DEF(mov_rdi_cr3, -0x396ebe)
+DEF(nop_ret, -0x396de1)
+DEF(cpu_switch, -0x9d6f80)
+DEF(mprotect_fix_start, -0x90ac61)
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+DEF(mmap_self_fix_1_start, -0x2cd16d)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, -0x1df11e)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+DEF(sigaction_fix_start, -0x6c2959)
+DEF(sigaction_fix_end, -0x6c2903)
+DEF(sysents, 0x1709c0)
+DEF(sysents_ps4, 0x168410)
+DEF(sysentvec, 0xd11bb8)
+DEF(sysentvec_ps4, 0xd11d30)
+DEF(sceSblServiceMailbox, -0x682490)
+DEF(sceSblAuthMgrSmIsLoadable2, -0x8a5be0)
+DEF(mdbg_call_fix, -0x631e79)
+DEF(syscall_before, -0x8022e1)
+DEF(syscall_after, -0x8022be)
+DEF(malloc, -0xa9940)
+DEF(M_something, 0x1346080)
+DEF(loadSelfSegment_epilogue, -0x8a546d)
+DEF(loadSelfSegment_watchpoint, -0x2cc768)
+DEF(loadSelfSegment_watchpoint_lr, -0x8a56c7)
+//DEF(decryptSelfBlock_watchpoint, -0x2cc6de)
+DEF(decryptSelfBlock_watchpoint_lr, -0x8a532a)
+DEF(decryptSelfBlock_epilogue, -0x8a5263)
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8a4bf5)
+DEF(decryptMultipleSelfBlocks_epilogue, -0x8a4772)
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8a585c)
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8a54e1)
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8a4fb4)
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8a482c)
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8a5c5e)
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x94a7f0)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x94ada4)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x94ad2e)
+DEF(sceSblPfsSetKeys, -0x94aaa0)
+//DEF(panic, -0x20e40)
+DEF(sceSblServiceCryptAsync, -0x8ed930)
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x8ed8f2)
+DEF(copyin, -0x9908e0)
+DEF(copyout, -0x990990)
+DEF(crypt_message_resolve, -0x479c30)
+DEF(justreturn, -0x9cf990)
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xdc16e8)
+DEF(pop_all_iret, -0x9cf8ab)
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x96db88)
+DEF(kernel_pmap_store, 0x3257a78)
+DEF(crypt_singleton_array, 0x2e31830)
+DEF(security_flags, 0x6506474)
+DEF(targetid, 0x650647d)
+DEF(qa_flags, 0x6506498)
+DEF(utoken, 0x6506500)
+#include "offset_list.txt"
+END_FW()
+
+START_FW(451)
+DEF(allproc, 0x27edcb8)
+DEF(idt, 0x64cdc80)
+DEF(gdt_array, 0x64cee30)
+DEF(tss_array, 0x64d0830)
+DEF(pcpu_array, 0x64d2280)
+DEF(doreti_iret, -0x9cf84c)
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0x99002a)
+DEF(rdmsr_start, -0x9d0cfa)
+//DEF(rdmsr_end, -0x9d6cf9)
+DEF(wrmsr_ret, -0x9d20cc)
+DEF(dr2gpr_start, -0x9d6d93)
+//DEF(dr2gpr_end, -0x9d6d7c)
+DEF(gpr2dr_1_start, -0x9d6c7a)
+//DEF(gpr2dr_1_end, -0x9d6c55)
+DEF(gpr2dr_2_start, -0x9d6b87)
+//DEF(gpr2dr_2_end, -0x9d6de9)
+DEF(mov_cr3_rax, -0x396aae)
+DEF(mov_rdi_cr3, -0x396b1e)
+DEF(nop_ret, wrmsr_ret + 2)
+DEF(cpu_switch, -0x9d6f80)
+DEF(mprotect_fix_start, -0x90ac61)
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+DEF(mmap_self_fix_1_start, -0x2ccdcd)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, -0x1ded7e)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+DEF(sigaction_fix_start, -0x6c2959)
+DEF(sigaction_fix_end, -0x6c2903)
+DEF(sysents, 0x1709c0)
+DEF(sysents_ps4, 0x168410)
+DEF(sysentvec, 0xd11bb8)
+DEF(sysentvec_ps4, 0xd11d30)
+DEF(sceSblServiceMailbox, -0x682490)
+DEF(sceSblAuthMgrSmIsLoadable2, -0x8a5be0)
+DEF(mdbg_call_fix, -0x631e79)
+DEF(syscall_before, -0x8022e1)
+DEF(syscall_after, -0x8022be)
+DEF(malloc, -0xa9510)
+DEF(M_something, 0x1346080)
+DEF(loadSelfSegment_epilogue, -0x8a546d)
+DEF(loadSelfSegment_watchpoint, -0x2cc3c8)
+DEF(loadSelfSegment_watchpoint_lr, -0x8a56c7)
+//DEF(decryptSelfBlock_watchpoint, -0x2cc33e)
+DEF(decryptSelfBlock_watchpoint_lr, -0x8a532a)
+DEF(decryptSelfBlock_epilogue, -0x8a5263)
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8a4bf5)
+DEF(decryptMultipleSelfBlocks_epilogue, -0x8a4772)
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8a585c)
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8a54e1)
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8a4fb4)
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8a482c)
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8a5c5e)
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x94a7f0)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x94ada4)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x94ad2e)
+DEF(sceSblPfsSetKeys, -0x94aaa0)
+//DEF(panic, -0x20a10)
+DEF(sceSblServiceCryptAsync, -0x8ed930)
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x8ed8f2)
+DEF(copyin, -0x9908e0)
+DEF(copyout, -0x990990)
+DEF(crypt_message_resolve, -0x479890)
+DEF(justreturn, -0x9cf990)
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xdc16e8)
+DEF(pop_all_iret, -0x9cf8ab)
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x96d488)
+DEF(kernel_pmap_store, 0x3257a78)
+DEF(crypt_singleton_array, 0x2e31830)
+DEF(security_flags, 0x6506474)
+DEF(targetid, 0x650647d)
+DEF(qa_flags, 0x6506498)
+DEF(utoken, 0x6506500)
+#include "offset_list.txt"
+END_FW()
+
+START_FW(500)
+DEF(allproc, 0x291dd00) //data 0x355DD00
+DEF(idt, 0x660dca0) //data 0x724DCA0
+DEF(gdt_array, 0x660ee50) //data 0x724EE50
+DEF(tss_array, 0x6610850) //data 0x7250850
+DEF(pcpu_array, 0x6622680) //data 0x7262680
+DEF(doreti_iret, -0xa04f93) //data 0x23B06D
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0x9c576a) //data 0x27A896
+DEF(rdmsr_start, -0xa0652a) //data 0x239AD6
+DEF(wrmsr_ret, -0xa078fc) //data 0x238704
+DEF(dr2gpr_start, -0xa0bf13) //data 0x2340ED
+DEF(gpr2dr_1_start, -0xa0bdfa) //data 0x234206
+DEF(gpr2dr_2_start, -0xa0bd07) //data 0x2342F9
+DEF(mov_cr3_rax, -0x3a982e) //data 0x8967D2
+DEF(mov_rdi_cr3, -0x3a989e) //data 0x896762
+DEF(nop_ret, wrmsr_ret + 2)
+DEF(cpu_switch, -0xa0c100) //data 0x233F00
+DEF(mprotect_fix_start, -0x93efa2) //data 0x30105E
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+
+DEF(mmap_self_fix_1_start, 0x0)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, 0x0)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+
+DEF(sigaction_fix_start, -0x6e7db0) //data 0x558250
+DEF(sigaction_fix_end, -0x6e7d6e) //data 0x558292
+DEF(sysents, 0x1b1ef0) //data 0xDF1EF0
+DEF(sysents_ps4, 0x1a9940) //data 0xDE9940
+DEF(sysentvec, 0xe00be8) //data 0x1A40BE8
+DEF(sysentvec_ps4, 0xe00d60) //data 0x1A40D60
+DEF(sceSblServiceMailbox, -0x6a5de0) //data 0x59A220
+DEF(sceSblAuthMgrSmIsLoadable2, -0x8d90d0) //data 0x366F30
+DEF(mdbg_call_fix, -0x650049) //data 0x5EFFB7
+DEF(syscall_before, -0x8357e1) //data 0x40A81F
+DEF(syscall_after, -0x8357be) //data 0x40A842
+DEF(malloc, -0xb4df0) //data 0xB8B210
+DEF(M_something, 0x14355a0) //data 0x20755A0
+DEF(loadSelfSegment_epilogue, -0x8d898d) //data 0x367673
+DEF(loadSelfSegment_watchpoint, -0x2dd358) //data 0x962CA8
+DEF(loadSelfSegment_watchpoint_lr, -0x8d8be7) //data 0x367419
+DEF(decryptSelfBlock_watchpoint_lr, -0x8d885f) //data 0x3677A1
+DEF(decryptSelfBlock_epilogue, -0x8d87a2) //data 0x36785E
+//DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8d8112) //data 0x367EEE //403
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8d8119) //data 0x367EE7 //550
+DEF(decryptMultipleSelfBlocks_epilogue, -0x8d7ee4) //data 0x36811C
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8d8d76) //data 0x36728A
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8d8a01) //data 0x3675FF
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8d8439) //data 0x367BC7
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8d7c58) //data 0x3683A8
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8d914e) //data 0x366EB2
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x97f430) //data 0x2C0BD0
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x97f9df) //data 0x2C0621
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x97f969) //data 0x2C0697
+//DEF(sceSblPfsSetKeys, -0x97f6e0) //data 0x2C0920 // 403
+DEF(sceSblPfsSetKeys, -0x9805e0) //data 0x2BFA20 // 550
+DEF(sceSblServiceCryptAsync, -0x921ac0) //data 0x31E540
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x921a82) //data 0x31E57E
+DEF(copyin, -0x9c6020) //data 0x279FE0
+DEF(copyout, -0x9c60d0) //data 0x279F30
+DEF(crypt_message_resolve, -0x48c080) //data 0x7B3F80
+DEF(justreturn, -0xa051c0) //data 0x23AE40
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xeaf938) //data 0x1AEF938
+DEF(pop_all_iret, -0xa04ff2) //data 0x23B00E
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x9a2d78) //data 0x29D288
+DEF(kernel_pmap_store, 0x3398a88) //data 0x3FD8A88
+DEF(crypt_singleton_array, 0x2f51830) //data 0x3B91830
+DEF(security_flags, 0x66466ec) //data 0x72866EC
+DEF(targetid, 0x66466f5) //data 0x72866F5
+DEF(qa_flags, 0x6646710) //data 0x7286710
+DEF(utoken, 0x6646778) //data 0x7286778
+#include "offset_list.txt"
+END_FW()
+
+START_FW(502)
+DEF(allproc, 0x291dd00) //data 0x355DD00
+DEF(idt, 0x660dca0) //data 0x724DCA0
+DEF(gdt_array, 0x660ee50) //data 0x724EE50
+DEF(tss_array, 0x6610850) //data 0x7250850
+DEF(pcpu_array, 0x6622680) //data 0x7262680
+DEF(doreti_iret, -0xa04f93) //data 0x23B06D
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0x9c576a) //data 0x27A896
+DEF(rdmsr_start, -0xa0652a) //data 0x239AD6
+DEF(wrmsr_ret, -0xa078fc) //data 0x238704
+DEF(dr2gpr_start, -0xa0bf13) //data 0x2340ED
+DEF(gpr2dr_1_start, -0xa0bdfa) //data 0x234206
+DEF(gpr2dr_2_start, -0xa0bd07) //data 0x2342F9
+DEF(mov_cr3_rax, -0x3a982e) //data 0x8967D2
+DEF(mov_rdi_cr3, -0x3a989e) //data 0x896762
+DEF(nop_ret, wrmsr_ret + 2)
+DEF(cpu_switch, -0xa0c100) //data 0x233F00
+DEF(mprotect_fix_start, -0x93efa2) //data 0x30105E
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+
+DEF(mmap_self_fix_1_start, 0x0)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, 0x0)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+
+DEF(sigaction_fix_start, -0x6e7db0) //data 0x558250
+DEF(sigaction_fix_end, -0x6e7d6e) //data 0x558292
+DEF(sysents, 0x1b1ef0) //data 0xDF1EF0
+DEF(sysents_ps4, 0x1a9940) //data 0xDE9940
+DEF(sysentvec, 0xe00be8) //data 0x1A40BE8
+DEF(sysentvec_ps4, 0xe00d60) //data 0x1A40D60
+DEF(sceSblServiceMailbox, -0x6a5de0) //data 0x59A220
+DEF(sceSblAuthMgrSmIsLoadable2, -0x8d90d0) //data 0x366F30
+DEF(mdbg_call_fix, -0x650049) //data 0x5EFFB7
+DEF(syscall_before, -0x8357e1) //data 0x40A81F
+DEF(syscall_after, -0x8357be) //data 0x40A842
+DEF(malloc, -0xb4df0) //data 0xB8B210
+DEF(M_something, 0x14355a0) //data 0x20755A0
+DEF(loadSelfSegment_epilogue, -0x8d898d) //data 0x367673
+DEF(loadSelfSegment_watchpoint, -0x2dd358) //data 0x962CA8
+DEF(loadSelfSegment_watchpoint_lr, -0x8d8be7) //data 0x367419
+DEF(decryptSelfBlock_watchpoint_lr, -0x8d885f) //data 0x3677A1
+DEF(decryptSelfBlock_epilogue, -0x8d87a2) //data 0x36785E
+//DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8d8112) //data 0x367EEE //403
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8d8119) //data 0x367EE7 //550
+DEF(decryptMultipleSelfBlocks_epilogue, -0x8d7ee4) //data 0x36811C
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8d8d76) //data 0x36728A
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8d8a01) //data 0x3675FF
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8d8439) //data 0x367BC7
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8d7c58) //data 0x3683A8
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8d914e) //data 0x366EB2
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x97f430) //data 0x2C0BD0
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x97f9df) //data 0x2C0621
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x97f969) //data 0x2C0697
+//DEF(sceSblPfsSetKeys, -0x97f6e0) //data 0x2C0920 // 403
+DEF(sceSblPfsSetKeys, -0x9805e0) //data 0x2BFA20 // 550
+DEF(sceSblServiceCryptAsync, -0x921ac0) //data 0x31E540
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x921a82) //data 0x31E57E
+DEF(copyin, -0x9c6020) //data 0x279FE0
+DEF(copyout, -0x9c60d0) //data 0x279F30
+DEF(crypt_message_resolve, -0x48c080) //data 0x7B3F80
+DEF(justreturn, -0xa051c0) //data 0x23AE40
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xeaf938) //data 0x1AEF938
+DEF(pop_all_iret, -0xa04ff2) //data 0x23B00E
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x9a33c8) //data 0x29CC38
+DEF(kernel_pmap_store, 0x3398a88) //data 0x3FD8A88
+DEF(crypt_singleton_array, 0x2f51830) //data 0x3B91830
+DEF(security_flags, 0x66466ec) //data 0x72866EC
+DEF(targetid, 0x66466f5) //data 0x72866F5
+DEF(qa_flags, 0x6646710) //data 0x7286710
+DEF(utoken, 0x6646778) //data 0x7286778
+#include "offset_list.txt"
+END_FW()
+
+START_FW(510)
+DEF(allproc, 0x291dd00)
+DEF(idt, 0x660dca0)
+DEF(gdt_array, 0x660ee50)
+DEF(tss_array, 0x6610850)
+DEF(pcpu_array, 0x6622680)
+DEF(doreti_iret, -0xa04f93)
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0x9c576a)
+DEF(rdmsr_start, -0xa0652a)
+DEF(wrmsr_ret, -0xa078fc)
+DEF(dr2gpr_start, -0xa0bf13)
+DEF(gpr2dr_1_start, -0xa0bdfa)
+DEF(gpr2dr_2_start, -0xa0bd07)
+DEF(mov_cr3_rax, -0x3a965e)
+DEF(mov_rdi_cr3, -0x3a96ce)
+DEF(nop_ret, wrmsr_ret + 2)
+DEF(cpu_switch, -0xa0c100)
+DEF(mprotect_fix_start, -0x93efa2)
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+
+DEF(mmap_self_fix_1_start, 0x0)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, 0x0)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+
+DEF(sigaction_fix_start, -0x6e7be0)
+DEF(sigaction_fix_end, -0x6e7b9e)
+DEF(sysents, 0x1b2040)
+DEF(sysents_ps4, 0x1a9a90)
+DEF(sysentvec, 0xe00be8)
+DEF(sysentvec_ps4, 0xe00d60)
+DEF(sceSblServiceMailbox, -0x6a5c10)
+DEF(sceSblAuthMgrSmIsLoadable2, -0x8d90d0)
+DEF(mdbg_call_fix, -0x64fe79)
+DEF(syscall_before, -0x8357e1)
+DEF(syscall_after, -0x8357be)
+DEF(malloc, -0xb4ac0)
+DEF(M_something, 0x14355a0)
+DEF(loadSelfSegment_epilogue, -0x8d898d)
+DEF(loadSelfSegment_watchpoint, -0x2dd108)
+DEF(loadSelfSegment_watchpoint_lr, -0x8d8be7)
+DEF(decryptSelfBlock_watchpoint_lr, -0x8d885f)
+DEF(decryptSelfBlock_epilogue, -0x8d87a2)
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8d8119)
+DEF(decryptMultipleSelfBlocks_epilogue, -0x8d7ee4)
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8d8d76)
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8d8A01)
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8d8439)
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8d7C58)
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8d914E)
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x97F430)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x97F9DF)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x97F969)
+DEF(sceSblPfsSetKeys, -0x9805E0)
+DEF(sceSblServiceCryptAsync, -0x921AC0)
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x921A82)
+DEF(copyin, -0x9c6020)
+DEF(copyout, -0x9c60D0)
+DEF(crypt_message_resolve, -0x48BEB0)
+DEF(justreturn, -0xa051c0)
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xeb0938)
+DEF(pop_all_iret, -0xa04ff2)
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x9a3e70)
+DEF(kernel_pmap_store, 0x3398a88)
+DEF(crypt_singleton_array, 0x2f51830)
+DEF(security_flags, 0x66466EC)
+DEF(targetid, 0x66466F5)
+DEF(qa_flags, 0x6646710)
+DEF(utoken, 0x6646778)
+#include "offset_list.txt"
+END_FW()
+
+START_FW(550)
+DEF(allproc, 0x291dd00)
+DEF(idt, 0x660dca0)
+DEF(gdt_array, 0x660ee50)
+DEF(tss_array, 0x6610850)
+DEF(pcpu_array, 0x6622680)
+DEF(doreti_iret, -0xa04fd3)
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0x9c57aa)
+DEF(rdmsr_start, -0xa0656a)
+DEF(wrmsr_ret, -0xa0793c)
+DEF(dr2gpr_start, -0xa0bf53)
+DEF(gpr2dr_1_start, -0xa0be3a)
+DEF(gpr2dr_2_start, -0xa0bd47)
+DEF(mov_cr3_rax, -0x3a886e)
+DEF(mov_rdi_cr3, -0x3a88de)
+DEF(nop_ret, wrmsr_ret + 2)
+DEF(cpu_switch, -0xa0c140)
+DEF(mprotect_fix_start, -0x93EFE2)
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+
+DEF(mmap_self_fix_1_start, 0x0)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, 0x0)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+
+DEF(sigaction_fix_start, -0x6e7b30)
+DEF(sigaction_fix_end, -0x6e7aee)
+DEF(sysents, 0x1b2210)
+DEF(sysents_ps4, 0x1a9c60)
+DEF(sysentvec, 0xe00be8)
+DEF(sysentvec_ps4, 0xe00d60)
+DEF(sceSblServiceMailbox, -0x6a5b60)
+DEF(sceSblAuthMgrSmIsLoadable2, -0x8d9110)
+DEF(mdbg_call_fix, -0x64fb79)
+DEF(syscall_before, -0x835731)
+DEF(syscall_after, -0x83570e)
+DEF(malloc, -0xb3cd0)
+DEF(M_something, 0x14355a0)
+DEF(loadSelfSegment_epilogue, -0x8d89CD)
+DEF(loadSelfSegment_watchpoint, -0x2dC318)
+DEF(loadSelfSegment_watchpoint_lr, -0x8d8C27)
+DEF(decryptSelfBlock_watchpoint_lr, -0x8d889F)
+DEF(decryptSelfBlock_epilogue, -0x8d87E2)
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8d8159)
+DEF(decryptMultipleSelfBlocks_epilogue, -0x8d7F24)
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8d8DB6)
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8d8A41)
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8d8479)
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8d7C98)
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8d918E)
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x97F470)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x97FA1F)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x97F9A9)
+DEF(sceSblPfsSetKeys, -0x980620)
+DEF(sceSblServiceCryptAsync, -0x921B00)
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x921AC2)
+DEF(copyin, -0x9c6060)
+DEF(copyout, -0x9c6110)
+DEF(crypt_message_resolve, -0x48B0C0)
+DEF(justreturn, -0xa05200)
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xeaf938)
+DEF(pop_all_iret, -0xa05032)
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x99fc70)
+DEF(kernel_pmap_store, 0x3394a88)
+DEF(crypt_singleton_array, 0x2f4d830)
+DEF(security_flags, 0x66466EC)
+DEF(targetid, 0x66466F5)
+DEF(qa_flags, 0x6646710)
+DEF(utoken, 0x6646778)
+#include "offset_list.txt"
+END_FW()
+
+START_FW(600)
+DEF(allproc, 0x2869d20) //data 0x34C9D20
+DEF(idt, 0x655dde0) //data 0x71BDDE0
+DEF(gdt_array, 0x655f000) //data 0x71BF000
+DEF(tss_array, 0x6560a00) //data 0x71C0A00
+DEF(pcpu_array, 0x6572880) //data 0x71D2880
+DEF(doreti_iret, -0xa1b813) //data 0x2447ED
+DEF(add_rsp_iret, doreti_iret - 7) //data 0x2247E6
+DEF(swapgs_add_rsp_iret, doreti_iret - 10) //data 0x2247E3
+DEF(rep_movsb_pop_rbp_ret, -0x9dbfea) //data 0x284016
+DEF(rdmsr_start, -0xa1cdaa) //data 0x243256
+DEF(wrmsr_ret, -0xa1e17c) //data 0x241E84
+DEF(dr2gpr_start, -0xa22793) //data 0x23D86D
+DEF(gpr2dr_1_start, -0xa2267a) //data 0x23D986
+DEF(gpr2dr_2_start, -0xa22587) //data 0x23DA79
+DEF(mov_cr3_rax, -0x3aa34e) //data 0x8B5CB2
+DEF(mov_rdi_cr3, -0x3aa3be) //data 0x8B5C42
+DEF(nop_ret, wrmsr_ret + 2) //data 0x241E86
+DEF(cpu_switch, -0xa22980) //data 0x23D680
+DEF(mprotect_fix_start, -0x9546d2) //data 0x30B92E
+DEF(mprotect_fix_end, mprotect_fix_start+6) //data 0x30B934
+
+DEF(mmap_self_fix_1_start, 0x0)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, 0x0)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+
+DEF(sigaction_fix_start, -0x6f6b92) //data 0x56946E
+DEF(sigaction_fix_end, -0x6f6b68) //data 0x569498
+DEF(sysents, 0x1b49a0) //data 0xE149A0
+DEF(sysents_ps4, 0x1ac3f0) //data 0xE0C3F0
+DEF(sysentvec, 0xe210a8) //data 0x1A810A8
+DEF(sysentvec_ps4, 0xe21220) //data 0x1A81220
+DEF(sceSblServiceMailbox, -0x6b28c0) //data 0x5AD740
+DEF(sceSblAuthMgrSmIsLoadable2, -0x8ed120) //data 0x372EE0
+DEF(mdbg_call_fix, -0x65c2a9) //data 0x603D57
+DEF(syscall_before, -0x844a71) //data 0x41B58F
+DEF(syscall_after, -0x844a4e) //data 0x41B5B2
+DEF(malloc, -0xaa4c0) //data 0xBB5B40
+DEF(M_something, 0x1456690) //data 0x20B6690
+DEF(loadSelfSegment_epilogue, -0x8ec9ed) //data 0x373613
+DEF(loadSelfSegment_watchpoint, -0x2da988) //data 0x985678
+DEF(loadSelfSegment_watchpoint_lr, -0x8ecc47) //data 0x3733B9
+DEF(decryptSelfBlock_watchpoint_lr, -0x8ec8bf) //data 0x373741
+DEF(decryptSelfBlock_epilogue, -0x8ec802) //data 0x3737FE
+//DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8ec172) //data 0x373E8E //403
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8ec179) //data 0x373E87 //550
+DEF(decryptMultipleSelfBlocks_epilogue, -0x8ebf44) //data 0x3740BC
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8ecdd9) //data 0x373227
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8eca61) //data 0x37359F
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8ec499) //data 0x373B67
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8ebca8) //data 0x374358
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8ed19e) //data 0x372E62
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x995381) //data 0x2CAC7F
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x995931) //data 0x2CA6CF
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x9958bb) //data 0x2CA745
+//DEF(sceSblPfsSetKeys, -0x995630) //data 0x2CA9D0 //403
+DEF(sceSblPfsSetKeys, -0x996400) //data 0x2C9C00 //550
+DEF(sceSblServiceCryptAsync, -0x936080) //data 0x329F80
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x936042) //data 0x329FBE
+DEF(copyin, -0x9dc8a0) //data 0x283760
+DEF(copyout, -0x9dc950) //data 0x2836B0
+DEF(crypt_message_resolve, -0x490200) //data 0x7CFE00
+DEF(justreturn, -0xa1ba40) //data 0x2445C0
+DEF(justreturn_pop, justreturn+8) //data 0x2445C8
+DEF(mini_syscore_header, 0xed2048) //data 0x1B32048
+DEF(pop_all_iret, -0xa1b872) //data 0x24478E
+DEF(pop_all_except_rdi_iret, pop_all_iret+4) //data 0x244792
+DEF(push_pop_all_iret, -0x9b99e0) //data 0x2A6620
+DEF(kernel_pmap_store, 0x32e4358) //data 0x3F44358
+DEF(crypt_singleton_array, 0x2e9d830) //data 0x3AFD830
+DEF(security_flags, 0x65968ec) //data 0x71F68EC
+DEF(targetid, 0x65968f5) //data 0x71F68F5
+DEF(qa_flags, 0x6596910) //data 0x71F6910
+DEF(utoken, 0x6596978) //data 0x71F6978
+#include "offset_list.txt"
+END_FW()
+
+START_FW(602)
+DEF(allproc, 0x2869d20) //data 0x34C9D20
+DEF(idt, 0x655dde0) //data 0x71BDDE0
+DEF(gdt_array, 0x655f000) //data 0x71BF000
+DEF(tss_array, 0x6560a00) //data 0x71C0A00
+DEF(pcpu_array, 0x6572880) //data 0x71D2880
+DEF(doreti_iret, -0xa1b813) //data 0x2447ED
+DEF(add_rsp_iret, doreti_iret - 7) //data 0x2247E6
+DEF(swapgs_add_rsp_iret, doreti_iret - 10) //data 0x2247E3
+DEF(rep_movsb_pop_rbp_ret, -0x9dbfea) //data 0x284016
+DEF(rdmsr_start, -0xa1cdaa) //data 0x243256
+DEF(wrmsr_ret, -0xa1e17c) //data 0x241E84
+DEF(dr2gpr_start, -0xa22793) //data 0x23D86D
+DEF(gpr2dr_1_start, -0xa2267a) //data 0x23D986
+DEF(gpr2dr_2_start, -0xa22587) //data 0x23DA79
+DEF(mov_cr3_rax, -0x3aa36e) //data 0x8B5C92
+DEF(mov_rdi_cr3, -0x3aa3de) //data 0x8B5C22
+DEF(nop_ret, wrmsr_ret + 2) //data 0x241E86
+DEF(cpu_switch, -0xa22980) //data 0x23D680
+DEF(mprotect_fix_start, -0x9546d2) //data 0x30B92E
+DEF(mprotect_fix_end, mprotect_fix_start+6) //data 0x30B934
+
+DEF(mmap_self_fix_1_start, 0x0)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, 0x0)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+
+DEF(sigaction_fix_start, -0x6f6b92) //data 0x56946E
+DEF(sigaction_fix_end, -0x6f6b68) //data 0x569498
+DEF(sysents, 0x1b49f0) //data 0xE149F0
+DEF(sysents_ps4, 0x1ac440) //data 0xE0C440
+DEF(sysentvec, 0xe210a8) //data 0x1A810A8
+DEF(sysentvec_ps4, 0xe21220) //data 0x1A81220
+DEF(sceSblServiceMailbox, -0x6b28c0) //data 0x5AD740
+DEF(sceSblAuthMgrSmIsLoadable2, -0x8ed120) //data 0x372EE0
+DEF(mdbg_call_fix, -0x65c2c9) //data 0x603D37
+DEF(syscall_before, -0x844a71) //data 0x41B58F
+DEF(syscall_after, -0x844a4e) //data 0x41B5B2
+DEF(malloc, -0xaa4e0) //data 0xBB5B20
+DEF(M_something, 0x1456690) //data 0x20B6690
+DEF(loadSelfSegment_epilogue, -0x8ec9ed) //data 0x373613
+DEF(loadSelfSegment_watchpoint, -0x2da9a8) //data 0x985658
+DEF(loadSelfSegment_watchpoint_lr, -0x8ecc47) //data 0x3733B9
+DEF(decryptSelfBlock_watchpoint_lr, -0x8ec8bf) //data 0x373741
+DEF(decryptSelfBlock_epilogue, -0x8ec802) //data 0x3737FE
+//DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8ec172) //data 0x373E8E //403
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8ec179) //data 0x373E87 //550
+DEF(decryptMultipleSelfBlocks_epilogue, -0x8ebf44) //data 0x3740BC
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8ecdd9) //data 0x373227
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8eca61) //data 0x37359F
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8ec499) //data 0x373B67
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8ebca8) //data 0x374358
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8ed19e) //data 0x372E62
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x995381) //data 0x2CAC7F
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x995931) //data 0x2CA6CF
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x9958bb) //data 0x2CA745
+//DEF(sceSblPfsSetKeys, -0x995630) //data 0x2CA9D0 //403
+DEF(sceSblPfsSetKeys, -0x996400) //data 0x2C9C00 //550
+DEF(sceSblServiceCryptAsync, -0x936080) //data 0x329F80
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x936042) //data 0x329FBE
+DEF(copyin, -0x9dc8a0) //data 0x283760
+DEF(copyout, -0x9dc950) //data 0x2836B0
+DEF(crypt_message_resolve, -0x490220) //data 0x7CFDE0
+DEF(justreturn, -0xa1ba40) //data 0x2445C0
+DEF(justreturn_pop, justreturn+8) //data 0x2445C8
+DEF(mini_syscore_header, 0xed2048) //data 0x1B32048
+DEF(pop_all_iret, -0xa1b872) //data 0x24478E
+DEF(pop_all_except_rdi_iret, pop_all_iret+4) //data 0x244792
+DEF(push_pop_all_iret, -0x9b9e20) //data 0x2A61E0
+DEF(kernel_pmap_store, 0x32e4358) //data 0x3F44358
+DEF(crypt_singleton_array, 0x2e9d830) //data 0x3AFD830
+DEF(security_flags, 0x65968ec) //data 0x71F68EC
+DEF(targetid, 0x65968f5) //data 0x71F68F5
+DEF(qa_flags, 0x6596910) //data 0x71F6910
+DEF(utoken, 0x6596978) //data 0x71F6978
+#include "offset_list.txt"
+END_FW()
+
+START_FW(650)
+DEF(allproc, 0x2869d20) //data 0x34C9D20
+DEF(idt, 0x655dde0) //data 0x71BDDE0
+DEF(gdt_array, 0x655f000) //data 0x71BF000
+DEF(tss_array, 0x6560a00) //data 0x71C0A00
+DEF(pcpu_array, 0x6572880) //data 0x71D2880
+DEF(doreti_iret, -0xa1b813) //data 0x2447ED
+DEF(add_rsp_iret, doreti_iret - 7) //data 0x2247E6
+DEF(swapgs_add_rsp_iret, doreti_iret - 10) //data 0x2247E3
+DEF(rep_movsb_pop_rbp_ret, -0x9dbfea) //data 0x284016
+DEF(rdmsr_start, -0xa1cdaa) //data 0x243256
+DEF(wrmsr_ret, -0xa1e17c) //data 0x241E84
+DEF(dr2gpr_start, -0xa22793) //data 0x23D86D
+DEF(gpr2dr_1_start, -0xa2267a) //data 0x23D986
+DEF(gpr2dr_2_start, -0xa22587) //data 0x23DA79
+DEF(mov_cr3_rax, -0x3aa0de) //data 0x8B5F22
+DEF(mov_rdi_cr3, -0x3aa14e) //data 0x8B5EB2
+DEF(nop_ret, wrmsr_ret + 2) //data 0x241E86
+DEF(cpu_switch, -0xa22980) //data 0x23D680
+DEF(mprotect_fix_start, -0x9546e2) //data 0x30B91E
+DEF(mprotect_fix_end, mprotect_fix_start+6) //data 0x30B924
+
+DEF(mmap_self_fix_1_start, 0x0)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, 0x0)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+
+DEF(sigaction_fix_start, -0x6f6b12) //data 0x5694EE
+DEF(sigaction_fix_end, -0x6f6ae8) //data 0x569518
+DEF(sysents, 0x1b49f0) //data 0xE149F0
+DEF(sysents_ps4, 0x1ac440) //data 0xE0C440
+DEF(sysentvec, 0xe210a8) //data 0x1A810A8
+DEF(sysentvec_ps4, 0xe21220) //data 0x1A81220
+DEF(sceSblServiceMailbox, -0x6b2790) //data 0x5AD870
+DEF(sceSblAuthMgrSmIsLoadable2, -0x8ed100) //data 0x372F00
+DEF(mdbg_call_fix, -0x65c199) //data 0x603E67
+DEF(syscall_before, -0x844a51) //data 0x41B5AF
+DEF(syscall_after, -0x844a2e) //data 0x41B5D2
+DEF(malloc, -0xa9d40) //data 0xBB62C0
+DEF(M_something, 0x1456690) //data 0x20B6690
+DEF(loadSelfSegment_epilogue, -0x8ec9cd) //data 0x373633
+DEF(loadSelfSegment_watchpoint, -0x2da218) //data 0x985DE8
+DEF(loadSelfSegment_watchpoint_lr, -0x8ecc27) //data 0x3733D9
+DEF(decryptSelfBlock_watchpoint_lr, -0x8ec89f) //data 0x373761
+DEF(decryptSelfBlock_epilogue, -0x8ec7e2) //data 0x37381E
+//DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8ec152) //data 0x373EAE //403
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x8ec159) //data 0x373EA7 //550
+DEF(decryptMultipleSelfBlocks_epilogue, -0x8ebf24) //data 0x3740DC
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x8ecdb9) //data 0x373247
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x8eca41) //data 0x3735BF
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x8ec479) //data 0x373B87
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x8ebc88) //data 0x374378
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x8ed17e) //data 0x372E82
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x995381) //data 0x2CAC7F
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x995931) //data 0x2CA6CF
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x9958bb) //data 0x2CA745
+//DEF(sceSblPfsSetKeys, -0x995630) //data 0x2CA9D0 //403
+DEF(sceSblPfsSetKeys, -0x996400) //data 0x2C9C00 //550
+DEF(sceSblServiceCryptAsync, -0x936090) //data 0x329F70
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x936052) //data 0x329FAE
+DEF(copyin, -0x9dc8a0) //data 0x283760
+DEF(copyout, -0x9dc950) //data 0x2836B0
+DEF(crypt_message_resolve, -0x490060) //data 0x7CFFA0
+DEF(justreturn, -0xa1ba40) //data 0x2445C0
+DEF(justreturn_pop, justreturn+8) //data 0x2445C8
+DEF(mini_syscore_header, 0xed2048) //data 0x1B32048
+DEF(pop_all_iret, -0xa1b872) //data 0x24478E
+DEF(pop_all_except_rdi_iret, pop_all_iret+4) //data 0x244792
+DEF(push_pop_all_iret, -0x9ba368) //data 0x2A5C98
+DEF(kernel_pmap_store, 0x32e4358) //data 0x3F44358
+DEF(crypt_singleton_array, 0x2e9d830) //data 0x3AFD830
+DEF(security_flags, 0x65968ec) //data 0x71F68EC
+DEF(targetid, 0x65968f5) //data 0x71F68F5
+DEF(qa_flags, 0x6596910) //data 0x71F6910
+DEF(utoken, 0x6596978) //data 0x71F6978
+#include "offset_list.txt"
+END_FW()
+
+void* dlsym(void*, const char*);
+
+int set_offsets(void)
+{
+    uint32_t ver = r0gdb_get_fw_version() >> 16;
+    switch(ver)
+    {
+#ifndef NO_BUILTIN_OFFSETS
+    case 0x300: set_offsets_300(); break;
+    case 0x310: set_offsets_310(); break;
+    case 0x320: set_offsets_320(); break;
+    case 0x321: set_offsets_321(); break;
+    case 0x400: set_offsets_400(); break;
+    case 0x402: set_offsets_402(); break;
+    case 0x403: set_offsets_403(); break;
+    case 0x450: set_offsets_450(); break;
+    case 0x451: set_offsets_451(); break;
+    case 0x500: set_offsets_500(); break;
+    case 0x502: set_offsets_502(); break;
+    case 0x510: set_offsets_510(); break;
+    case 0x550: set_offsets_550(); break;
+    case 0x600: set_offsets_600(); break;
+    case 0x602: set_offsets_602(); break;
+    case 0x650: set_offsets_650(); break;
+#endif
+    default: return -1;
+    }
+    return 0;
+}
diff --git a/ps5-kstuff/main.c b/ps5-kstuff/main.c
index a92c3b6..4a1f262 100644
--- a/ps5-kstuff/main.c
+++ b/ps5-kstuff/main.c
@@ -1,1535 +1,1651 @@
-#define sysctl __sysctl
-#include <sys/types.h>
-#include <sys/mman.h>
-#include <sys/sysctl.h>
-#include <signal.h>
-#include <stdint.h>
-#include <stdarg.h>
-#include <unistd.h>
-#include <fcntl.h>
-#include "../prosper0gdb/r0gdb.h"
-#include "../prosper0gdb/offsets.h"
-#include "../gdb_stub/dbg.h"
-#include "uelf/structs.h"
-#include "uelf/parasite_desc.h"
-
-void* dlsym(void*, const char*);
-
-void notify(const char* s)
-{
-    struct
-    {
-        char pad1[0x10];
-        int f1;
-        char pad2[0x19];
-        char msg[0xc03];
-    } notification = {.f1 = -1};
-    char* d = notification.msg;
-    while(*d++ = *s++);
-    int fd = open("/dev/notification0", 1);
-    write(fd, &notification, 0xc30);
-    close(fd);
-}
-
-void die(int line)
-{
-    char buf[64] = "problem encountered on main.c line ";
-    char* p = buf;
-    while(*p)
-        p++;
-    int q = 1;
-    while(line / 10 > q)
-        q *= 10;
-    while(q)
-    {
-        *p++ = '0' + (line / q) % 10;
-        q /= 10;
-    }
-    notify(buf);
-    asm volatile("ud2");
-}
-
-#define die() die(__LINE__)
-
-extern uint64_t kdata_base;
-
-void kmemcpy(void* dst, const void* src, size_t sz);
-
-static void kpoke64(void* dst, uint64_t src)
-{
-    kmemcpy(dst, &src, 8);
-}
-
-static void kmemzero(void* dst, size_t sz)
-{
-    char* umem = mmap(0, sz, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, -1, 0);
-    mlock(umem, sz);
-    kmemcpy(dst, umem, sz);
-    munmap(umem, sz);
-}
-
-static int strcmp(const char* a, const char* b)
-{
-    while(*a && *a == *b)
-    {
-        a++;
-        b++;
-    }
-    return *a - *b;
-}
-
-#define kmalloc my_kmalloc
-
-static uint64_t mem_blocks[8];
-
-static void* kmalloc(size_t sz)
-{
-    for(int i = 0; i < 8; i += 2)
-    {
-        if(mem_blocks[i] + sz <= mem_blocks[i+1])
-        {
-            uint64_t ans = mem_blocks[i];
-            mem_blocks[i] += sz;
-            return (void*)ans;
-        }
-    }
-    die();
-    return 0;
-}
-
-#define NCPUS 16
-#define IDT (offsets.idt)
-#define GDT(i) (offsets.gdt_array+0x68*(i))
-#define TSS(i) (offsets.tss_array+0x68*(i))
-#define PCPU(i) (offsets.pcpu_array+0x900*(i))
-
-size_t virt2file(uint64_t* phdr, uint16_t phnum, uintptr_t addr)
-{
-    for(size_t i = 0; i < phnum; i++)
-    {
-        uint64_t* h = phdr + 7*i;
-        if((uint32_t)h[0] != 1)
-            continue;
-        if(h[2] <= addr && h[2] + h[4] > addr)
-            return addr + h[1] - h[2];
-    }
-    return -1;
-}
-
-void* load_kelf(void* ehdr, const char** symbols, uint64_t* values, void** base, void** entry, uint64_t mapped_kptr)
-{
-    uint64_t* phdr = (void*)((char*)ehdr + *(uint64_t*)((char*)ehdr + 32));
-    uint16_t phnum = *(uint16_t*)((char*)ehdr + 56);
-    uint64_t* dynamic = 0;
-    size_t sz_dynamic = 0;
-    uint64_t kernel_size = 0;
-    for(size_t i = 0; i < phnum; i++)
-    {
-        uint64_t* h = phdr + 7*i;
-        if((uint32_t)h[0] == 2)
-        {
-            dynamic = (void*)((char*)ehdr + h[1]);
-            sz_dynamic = h[4];
-        }
-        else if((uint32_t)h[0] == 1)
-        {
-            uint64_t limit = h[2] + h[5];
-            if(limit > kernel_size)
-                kernel_size = limit;
-        }
-    }
-    kernel_size = ((kernel_size + 4095) | 4095) - 4095;
-    char* kptr = kmalloc(kernel_size+4096);
-    kptr = (char*)((((uint64_t)kptr - 1) | 4095) + 1);
-    if(!mapped_kptr)
-        mapped_kptr = (uint64_t)kptr;
-    base[0] = kptr;
-    base[1] = kptr + kernel_size;
-    for(size_t i = 0; i < phnum; i++)
-    {
-        uint64_t* h = phdr + 7*i;
-        if((uint32_t)h[0] != 1)
-            continue;
-        kmemcpy(kptr+h[2], (char*)ehdr + h[1], h[4]);
-        kmemzero(kptr+h[2]+h[4], h[5]-h[4]);
-    }
-    char* strtab = 0;
-    uint64_t* symtab = 0;
-    uint64_t* rela = 0;
-    size_t relasz = 0;
-    for(size_t i = 0; i < sz_dynamic / 16; i++)
-    {
-        uint64_t* kv = dynamic + 2*i;
-        if(kv[0] == 5)
-            strtab = (char*)ehdr + virt2file(phdr, phnum, kv[1]);
-        else if(kv[0] == 6)
-            symtab = (void*)((char*)ehdr + virt2file(phdr, phnum, kv[1]));
-        else if(kv[0] == 7)
-            rela = (void*)((char*)ehdr + virt2file(phdr, phnum, kv[1]));
-        else if(kv[0] == 8)
-            relasz = kv[1];
-    }
-    for(size_t i = 0; i < relasz / 24; i++)
-    {
-        uint64_t* oia = rela + 3*i;
-        if((uint32_t)oia[1] == 1 || (uint32_t)oia[1] == 6)
-        {
-            uint64_t* sym = symtab + 3 * (oia[1] >> 32);
-            const char* name = strtab + (uint32_t)sym[0];
-            uint64_t value = sym[1];
-            if(!value)
-            {
-                for(size_t i = 0; symbols[i]; i++)
-                    if(!strcmp(symbols[i], name))
-                        sym[1] = value = values[i];
-                    else if(symbols[i][0] == '.' && !strcmp(symbols[i]+1, name))
-                        value = values[i];
-#ifndef FIRMWARE_PORTING
-                if(!value)
-                    die();
-#endif
-            }
-            if((uint32_t)oia[1] == 6 && oia[2])
-                die();
-            if(oia[0] + 8 > kernel_size)
-                die();
-            kpoke64(kptr+oia[0], oia[2]+value);
-        }
-        else if((uint32_t)oia[1] == 8)
-        {
-            if(oia[0] + 8 > kernel_size)
-                die();
-            kpoke64(kptr+oia[0], (uint64_t)(mapped_kptr+oia[2]));
-        }
-        else
-            die();
-    }
-    *entry = kptr + *(uint64_t*)((char*)ehdr + 24);
-    return kptr;
-}
-
-asm(".section .data\nkek:\n.incbin \"kelf\"\nkek_end:");
-extern char kek[];
-extern char kek_end[];
-
-asm(".section .data\nuek:\n.incbin \"uelf/uelf.bin\"\nuek_end:");
-extern char uek[];
-extern char uek_end[];
-
-asm(".section .text\nkekcall:\nmov 8(%rsp), %rax\njmp *p_kekcall(%rip)");
-
-uint64_t kekcall(uint64_t a, uint64_t b, uint64_t c, uint64_t d, uint64_t e, uint64_t f, uint64_t nr);
-
-#define KEKCALL_GETPPID        0x000000027
-#define KEKCALL_READ_DR        0x100000027
-#define KEKCALL_WRITE_DR       0x200000027
-#define KEKCALL_RDMSR          0x300000027
-#define KEKCALL_REMOTE_SYSCALL 0x500000027
-#define KEKCALL_CHECK          0xffffffff00000027
-
-void* p_kekcall;
-
-void* malloc(size_t sz)
-{
-    return mmap(0, sz, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, -1, 0);
-}
-
-uint64_t get_dmap_base(void)
-{
-    uint64_t ptrs[2];
-    copyout(ptrs, offsets.kernel_pmap_store+32, sizeof(ptrs));
-    return ptrs[0] - ptrs[1];
-}
-
-uint64_t virt2phys(uintptr_t addr)
-{
-    uint64_t dmap = get_dmap_base();
-    uint64_t pml = r0gdb_read_cr3();
-    for(int i = 39; i >= 12; i -= 9)
-    {
-        uint64_t inner_pml;
-        copyout(&inner_pml, dmap+pml+((addr & (0x1ffull << i)) >> (i - 3)), 8);
-        if(!(inner_pml & 1)) //not present
-            return -1;
-        if((inner_pml & 128) || i == 12) //hugepage
-        {
-            inner_pml &= (1ull << 52) - (1ull << i);
-            inner_pml |= addr & ((1ull << i) - 1);
-            return inner_pml;
-        }
-        inner_pml &= (1ull << 52) - (1ull << 12);
-        pml = inner_pml;
-    }
-    //unreachable
-}
-
-uint64_t find_empty_pml4_index(int idx)
-{
-    uint64_t dmap = get_dmap_base();
-    uint64_t cr3 = r0gdb_read_cr3();
-    uint64_t pml4[512];
-    copyout(pml4, dmap+cr3, 4096);
-    for(int i = 256; i < 512; i++)
-        if(!pml4[i] && !idx--)
-            return i;
-}
-
-void build_uelf_cr3(uint64_t uelf_cr3, void* uelf_base[2], uint64_t uelf_virt_base, uint64_t dmap_virt_base)
-{
-    static char zeros[4096];
-    uint64_t dmap = get_dmap_base();
-    uint64_t cr3 = r0gdb_read_cr3();
-    uint64_t user_start = (uint64_t)uelf_base[0];
-    uint64_t user_end = (uint64_t)uelf_base[1];
-    if((uelf_virt_base & 0x1fffff) || (dmap_virt_base & ((1ull << 39) - 1)) || user_end - user_start > 0x200000)
-        die();
-    uint64_t pml4_virt = uelf_cr3;
-    copyin(pml4_virt, zeros, 4096);
-    kmemcpy((void*)(pml4_virt+2048), (void*)(dmap+cr3+2048), 2048);
-    uint64_t pml3_virt = uelf_cr3 + 4096;
-    uint64_t pml3_dmap = uelf_cr3 + 16384; //user-accessible direct mapping of physical memory
-    copyin(pml4_virt + 8 * ((uelf_virt_base >> 39) & 511), &(uint64_t[1]){virt2phys(pml3_virt) | 7}, 8);
-    copyin(pml4_virt + 8 * ((dmap_virt_base >> 39) & 511), &(uint64_t[1]){virt2phys(pml3_dmap) | 7}, 8);
-    copyin(pml3_virt, zeros, 4096);
-    uint64_t pml2_virt = uelf_cr3 + 8192;
-    copyin(pml3_virt + 8 * ((uelf_virt_base >> 30) & 511), &(uint64_t[1]){virt2phys(pml2_virt) | 7}, 8);
-    copyin(pml2_virt, zeros, 4096);
-    uint64_t pml1_virt = uelf_cr3 + 12288;
-    copyin(pml2_virt + 8 * ((uelf_virt_base >> 21) & 511), &(uint64_t[1]){virt2phys(pml1_virt) | 7}, 8);
-    copyin(pml1_virt, zeros, 4096);
-    for(uint64_t i = 0; i * 4096 + user_start < user_end; i++)
-        copyin(pml1_virt+8*i, &(uint64_t[1]){virt2phys(i*4096+user_start) | 7}, 8);
-    for(uint64_t i = 0; i < 512; i++)
-        copyin(pml3_dmap+8*i, &(uint64_t[1]){(i<<30) | 135}, 8);
-}
-
-int find_proc(const char* name)
-{
-    for(int pid = 1; pid < 1024; pid++)
-    {
-        size_t sz = 1096;
-        int key[4] = {CTL_KERN, KERN_PROC, KERN_PROC_PID, pid};
-        char buf[1097] = {0};
-        sysctl(key, 4, buf, &sz, 0, 0);
-        const char* a = buf + 447;
-        const char* b = name;
-        while(*a && *a++ == *b++);
-        if(!*a && !*b)
-            return pid;
-    }
-    return -1;
-}
-
-static uint64_t remote_syscall(int pid, int nr, ...)
-{
-    va_list va;
-    va_start(va, nr);
-    uint64_t args[6];
-    for(int i = 0; i < 6; i++)
-        args[i] = va_arg(va, uint64_t);
-    va_end(va);
-    return kekcall(pid, nr, (uint64_t)args, 0, 0, 0, KEKCALL_REMOTE_SYSCALL);
-}
-
-#define SYS_mdbg_call 573
-#define SYS_dynlib_get_info_ex 608
-
-struct module_segment
-{
-    uint64_t addr;
-    uint32_t size;
-    uint32_t flags;
-};
-
-struct module_info_ex
-{
-    size_t st_size;
-    char name[256];
-    int id;
-    uint32_t tls_index;
-    uint64_t tls_init_addr;
-    uint32_t tls_init_size;
-    uint32_t tls_size;
-    uint32_t tls_offset;
-    uint32_t tls_align;
-    uint64_t init_proc_addr;
-    uint64_t fini_proc_addr;
-    uint64_t reserved1;
-    uint64_t reserved2;
-    uint64_t eh_frame_hdr_addr;
-    uint64_t eh_frame_addr;
-    uint32_t eh_frame_hdr_size;
-    uint32_t eh_frame_size;
-    struct module_segment segments[4];
-    uint32_t segment_count;
-    uint32_t ref_count;
-};
-
-struct shellcore_patch
-{
-    uint64_t offset;
-    char* data;
-    size_t sz;
-};
-
-static struct shellcore_patch shellcore_patches_300[] = {
-    {0x9d1cae, "\x52\xeb\x08\x66\x90", 5},
-    {0x9d1cb9, "\xe8\x02\xfc\xff\xff\x58\xc3", 7},
-    {0x9d18b1, "\x31\xc0\x50\xeb\xe3", 5},
-    {0x9d1899, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
-    {0x4dcfb4, "\xeb\x04", 2},
-    {0x2569b1, "\xeb\x04", 2},
-    {0x25af5a, "\xeb\x04", 2},
-    {0x4fafca, "\x90\x90", 2},
-    {0x4e335d, "\x90\xe9", 2},
-    {0x4fbb63, "\xeb", 1},
-    {0x4ff329, "\xd0\x00\x00\x00", 4},
-    {0x1968c1, "\xe8\x4a\xde\x42\x00\x31\xc9\xff\xc1\xe9\x12\x01\x00\x00", 14},
-    {0x1969e1, "\x83\xf8\x02\x0f\x43\xc1\xe9\xff\xfb\xff\xff", 11},
-    {0x1965c9, "\xe9\xf3\x02\x00\x00", 5},
-    {0x25284B, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
-    {0x2528C8, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
-    {0x2529CB, "\xEB", 1}, //PS4 PKG Installer Patch 1
-    {0x252A9F, "\xEB", 1}, //PS5 PKG Installer Patch 1
-    {0x252F35, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
-    {0x253120, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
-    {0x2534E5, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
-    {0x253582, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
-    {0x4DEF37, "\xEB", 1}, //PS4 PKG Installer Patch 4
-    {0x4DF04C, "\xEB", 1}, //PS5 PKG Installer Patch 4
-    {0x4E0F87, "\x48\x31\xC0\xC3", 4}, //PKG Installer
-};
-
-static struct shellcore_patch shellcore_patches_310[] = {
-    {0x9d1cee, "\x52\xeb\x08\x66\x90", 5},
-    {0x9d1cf9, "\xe8\x02\xfc\xff\xff\x58\xc3", 7},
-    {0x9d18f1, "\x31\xc0\x50\xeb\xe3", 5},
-    {0x9d18d9, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
-    {0x4dcff4, "\xeb\x04", 2},
-    {0x2569f1, "\xeb\x04", 2},
-    {0x25af9a, "\xeb\x04", 2},
-    {0x4fb00a, "\x90\x90", 2},
-    {0x4e339d, "\x90\xe9", 2},
-    {0x4fbba3, "\xeb", 1},
-    {0x4ff369, "\xd0\x00\x00\x00", 4},
-    {0x1968c1, "\xe8\x8a\xde\x42\x00\x31\xc9\xff\xc1\xe9\x12\x01\x00\x00", 14},
-    {0x1969e1, "\x83\xf8\x02\x0f\x43\xc1\xe9\xff\xfb\xff\xff", 11},
-    {0x1965c9, "\xe9\xf3\x02\x00\x00", 5},
-};
-
-static struct shellcore_patch shellcore_patches_320[] = {
-    {0x9d1f9e, "\x52\xeb\x08\x66\x90", 5},
-    {0x9d1fa9, "\xe8\x02\xfc\xff\xff\x58\xc3", 7},
-    {0x9d1ba1, "\x31\xc0\x50\xeb\xe3", 5},
-    {0x9d1b89, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
-    {0x4dd284, "\xeb\x04", 2},
-    {0x256aa1, "\xeb\x04", 2},
-    {0x25b04a, "\xeb\x04", 2},
-    {0x4fb29a, "\x90\x90", 2},
-    {0x4e362d, "\x90\xe9", 2},
-    {0x4fbe33, "\xeb", 1},
-    {0x4ff5f9, "\xd0\x00\x00\x00", 4},
-    {0x1968c1, "\xe8\x3a\xe1\x42\x00\x31\xc9\xff\xc1\xe9\x12\x01\x00\x00", 14},
-    {0x1969e1, "\x83\xf8\x02\x0f\x43\xc1\xe9\xff\xfb\xff\xff", 11},
-    {0x1965c9, "\xe9\xf3\x02\x00\x00", 5},
-    {0x25293B, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
-    {0x2529B8, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
-    {0x252ABB, "\xEB", 1}, //PS4 PKG Installer Patch 1
-    {0x252B8F, "\xEB", 1}, //PS5 PKG Installer Patch 1
-    {0x253025, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
-    {0x253210, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
-    {0x2535D5, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
-    {0x253672, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
-    {0x4DF207, "\xEB", 1}, //PS4 PKG Installer Patch 4
-    {0x4DF31C, "\xEB", 1}, //PS5 PKG Installer Patch 4
-    {0x4E1257, "\x48\x31\xC0\xC3", 4}, //PKG Installer
-};
-
-static struct shellcore_patch shellcore_patches_321[] = {
-    {0x9d1f9e, "\x52\xeb\x08\x66\x90", 5},
-    {0x9d1fa9, "\xe8\x02\xfc\xff\xff\x58\xc3", 7},
-    {0x9d1ba1, "\x31\xc0\x50\xeb\xe3", 5},
-    {0x9d1b89, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
-    {0x4dd284, "\xeb\x04", 2},
-    {0x256aa1, "\xeb\x04", 2},
-    {0x25b04a, "\xeb\x04", 2},
-    {0x4fb29a, "\x90\x90", 2},
-    {0x4e362d, "\x90\xe9", 2},
-    {0x4fbe33, "\xeb", 1},
-    {0x4ff5f9, "\xd0\x00\x00\x00", 4},
-    {0x1968c1, "\xe8\x3a\xe1\x42\x00\x31\xc9\xff\xc1\xe9\x12\x01\x00\x00", 14},
-    {0x1969e1, "\x83\xf8\x02\x0f\x43\xc1\xe9\xff\xfb\xff\xff", 11},
-    {0x1965c9, "\xe9\xf3\x02\x00\x00", 5},
-    {0x25293B, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
-    {0x2529B8, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
-    {0x252ABB, "\xEB", 1}, //PS4 PKG Installer Patch 1
-    {0x252B8F, "\xEB", 1}, //PS5 PKG Installer Patch 1
-    {0x253025, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
-    {0x253210, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
-    {0x2535D5, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
-    {0x253672, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
-    {0x4DF207, "\xEB", 1}, //PS4 PKG Installer Patch 4
-    {0x4DF31C, "\xEB", 1}, //PS5 PKG Installer Patch 4
-    {0x4E1257, "\x48\x31\xC0\xC3", 4}, //PKG Installer
-};
-
-static struct shellcore_patch shellcore_patches_400[] = {
-    {0x974fee, "\x52\xeb\x08\x66\x90", 5},
-    {0x974ff9, "\xe8\xd2\xfb\xff\xff\x58\xc3", 7},
-    {0x974bc1, "\x31\xc0\x50\xeb\xe3", 5},
-    {0x974ba9, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
-    {0x5307f9, "\xeb\x04", 2},
-    {0x26f35c, "\xeb\x04", 2},
-    {0x26f76c, "\xeb\x04", 2},
-    {0x54e1f0, "\xeb", 1},
-    {0x536e1d, "\x90\xe9", 2},
-    {0x54db8f, "\xeb", 1},
-    {0x55137a, "\xc8\x00\x00\x00", 4},
-    {0x1a12d1, "\xe8\xea\x88\x47\x00\x31\xc9\xff\xc1\xe9\xf4\x02\x00\x00", 14},
-    {0x1a15d3, "\x83\xf8\x02\x0f\x43\xc1\xe9\x29\xfa\xff\xff", 11},
-    {0x1a0fe5, "\xe9\xe7\x02\x00\x00", 5},
-    {0x267DBB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
-    {0x267E52, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
-    {0x267F6B, "\xEB", 1}, //PS4 PKG Installer Patch 1
-    {0x26803F, "\xEB", 1}, //PS5 PKG Installer Patch 1
-    {0x2684A8, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
-    {0x268679, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
-    {0x268A45, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
-    {0x268AE2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
-    {0x532897, "\xEB", 1}, //PS4 PKG Installer Patch 4
-    {0x5329AC, "\xEB", 1}, //PS5 PKG Installer Patch 4
-    {0x534937, "\x48\x31\xC0\xC3", 4}, //PKG Installer
-};
-
-static struct shellcore_patch shellcore_patches_402[] = {
-    {0x974fee, "\x52\xeb\x08\x66\x90", 5},
-    {0x974ff9, "\xe8\xd2\xfb\xff\xff\x58\xc3", 7},
-    {0x974bc1, "\x31\xc0\x50\xeb\xe3", 5},
-    {0x974ba9, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
-    {0x5307f9, "\xeb\x04", 2},
-    {0x26f35c, "\xeb\x04", 2},
-    {0x26f76c, "\xeb\x04", 2},
-    {0x54e1f0, "\xeb", 1},
-    {0x536e1d, "\x90\xe9", 2},
-    {0x54db8f, "\xeb", 1},
-    {0x55137a, "\xc8\x00\x00\x00", 4},
-    {0x1a12d1, "\xe8\xea\x88\x47\x00\x31\xc9\xff\xc1\xe9\xf4\x02\x00\x00", 14},
-    {0x1a15d3, "\x83\xf8\x02\x0f\x43\xc1\xe9\x29\xfa\xff\xff", 11},
-    {0x1a0fe5, "\xe9\xe7\x02\x00\x00", 5},
-    {0x267DBB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
-    {0x267E52, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
-    {0x267F6B, "\xEB", 1}, //PS4 PKG Installer Patch 1
-    {0x26803F, "\xEB", 1}, //PS5 PKG Installer Patch 1
-    {0x2684A8, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
-    {0x268679, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
-    {0x268A45, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
-    {0x268AE2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
-    {0x532897, "\xEB", 1}, //PS4 PKG Installer Patch 4
-    {0x5329AC, "\xEB", 1}, //PS5 PKG Installer Patch 4
-    {0x534937, "\x48\x31\xC0\xC3", 4}, //PKG Installer
-};
-
-static struct shellcore_patch shellcore_patches_403[] = {
-    {0x974fee, "\x52\xeb\x08\x66\x90", 5}, //push rdx; jmp 0x974ff9; 2-byte nop
-    {0x974ff9, "\xe8\xd2\xfb\xff\xff\x58\xc3", 7}, //call 0x974bd0; pop rax; ret
-    {0x974bc1, "\x31\xc0\x50\xeb\xe3", 5}, //xor eax, eax; push rax; jmp 0x974ba9
-    {0x974ba9, "\xe8\x22\x00\x00\x00\x58\xc3", 7}, //call 0x974bd0; pop rax; ret
-    {0x5307f9, "\xeb\x04", 2}, //jmp 0x5307ff
-    {0x26f35c, "\xeb\x04", 2}, //jmp 0x26f362
-    {0x26f76c, "\xeb\x04", 2}, //jmp 0x26f772
-    {0x54e1f0, "\xeb", 1}, //jmp (destination unchanged)
-    {0x536e1d, "\x90\xe9", 2}, //nop; jmp (destination unchanged)
-    {0x54db8f, "\xeb", 1}, //jmp (destination unchanged)
-    {0x55137a, "\xc8\x00\x00\x00", 4}, //(jmp opcode unchanged) 0x551446
-    {0x1a12d1, "\xe8\xea\x88\x47\x00\x31\xc9\xff\xc1\xe9\xf4\x02\x00\x00", 14}, //call 0x619bc0; xor ecx, ecx; inc ecx; jmp 0x1a15d3
-    {0x1a15d3, "\x83\xf8\x02\x0f\x43\xc1\xe9\x29\xfa\xff\xff", 11}, //cmp eax, 2; cmovae eax, ecx; jmp 0x1a1007
-    {0x1a0fe5, "\xe9\xe7\x02\x00\x00", 5}, //jmp 0x1a12d1
-    {0x267DBB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
-    {0x267E52, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
-    {0x267F6B, "\xEB", 1}, //PS4 PKG Installer Patch 1
-    {0x26803F, "\xEB", 1}, //PS5 PKG Installer Patch 1
-    {0x2684A8, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
-    {0x268679, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
-    {0x268A45, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
-    {0x268AE2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
-    {0x532897, "\xEB", 1}, //PS4 PKG Installer Patch 4
-    {0x5329AC, "\xEB", 1}, //PS5 PKG Installer Patch 4
-    {0x534937, "\x48\x31\xC0\xC3", 4}, //PKG Installer
-};
-
-static struct shellcore_patch shellcore_patches_450[] = {
-    {0x97595e, "\x52\xeb\x08\x66\x90", 5}, //push rdx; jmp 0x975969; 2-byte nop
-    {0x975969, "\xe8\xd2\xfb\xff\xff\x58\xc3", 7}, //call 0x975540; pop rax; ret
-    {0x975531, "\x31\xc0\x50\xeb\xe3", 5}, //xor eax, eax; push rax; jmp 0x975519
-    {0x975519, "\xe8\x22\x00\x00\x00\x58\xc3", 7}, //call 0x975540; pop rax; ret
-    {0x530f42, "\xeb\x04", 2}, //jmp 0x530f48
-    {0x26fa8c, "\xeb\x04", 2}, //jmp 0x26fa16
-    {0x54eb60, "\xeb", 1}, //jmp (destination unchanged)
-    {0x5376bd, "\x90\xe9", 2}, //nop; jmp (destination unchanged)
-    {0x54e4ff, "\xeb", 1}, //jmp (destination unchanged)
-    {0x551cea, "\xc8\x00\x00\x00", 4}, //(jmp opcode unchanged) 0x551db6
-    {0x1a12d1, "\xe8\xfa\x88\x47\x00\x31\xc9\xff\xc1\xe9\xf4\x02\x00\x00", 14}, //call 0x619bd0; xor ecx, ecx; inc ecx; jmp 0x1a15d3
-    {0x1a15d3, "\x83\xf8\x02\x0f\x43\xc1\xe9\x29\xfa\xff\xff", 11}, //cmp eax, 2; cmovae eax, ecx; jmp 0x1a1007
-    {0x1a0fe5, "\xe9\xe7\x02\x00\x00", 5}, //jmp 0x1a12d1
-    {0x2684EB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
-    {0x268582, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
-    {0x26869B, "\xEB", 1}, //PS4 PKG Installer Patch 1
-    {0x26876F, "\xEB", 1}, //PS5 PKG Installer Patch 1
-    {0x268BD8, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
-    {0x268DA9, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
-    {0x269175, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
-    {0x269212, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
-    {0x533147, "\xEB", 1}, //PS4 PKG Installer Patch 4
-    {0x53325C, "\xEB", 1}, //PS5 PKG Installer Patch 4
-    {0x5351E7, "\x48\x31\xC0\xC3", 4}, //PKG Installer
-};
-
-static struct shellcore_patch shellcore_patches_451[] = {
-    {0x97596e, "\x52\xeb\x08\x66\x90", 5}, //push rdx; jmp 0x975979; 2-byte nop
-    {0x975979, "\xe8\xd2\xfb\xff\xff\x58\xc3", 7}, //call 0x975550; pop rax; ret
-    {0x975541, "\x31\xc0\x50\xeb\xe3", 5}, //xor eax, eax; push rax; jmp 0x975529
-    {0x975529, "\xe8\x22\x00\x00\x00\x58\xc3", 7}, //call 0x975550; pop rax; ret
-    {0x530f52, "\xeb\x04", 2}, //jmp 0x530f58
-    {0x26fa8c, "\xeb\x04", 2}, //jmp 0x26fa16
-    {0x54eb70, "\xeb", 1}, //jmp (destination unchanged)
-    {0x5376cd, "\x90\xe9", 2}, //nop; jmp (destination unchanged)
-    {0x54e50f, "\xeb", 1}, //jmp (destination unchanged)
-    {0x551cfa, "\xc8\x00\x00\x00", 4}, //(jmp opcode unchanged) 0x551dc6
-    {0x1a12d1, "\xe8\x0a\x89\x47\x00\x31\xc9\xff\xc1\xe9\xf4\x02\x00\x00", 14}, //call 0x619be0; xor ecx, ecx; inc ecx; jmp 0x1a15d3
-    {0x1a15d3, "\x83\xf8\x02\x0f\x43\xc1\xe9\x29\xfa\xff\xff", 11}, //cmp eax, 2; cmovae eax, ecx; jmp 0x1a1007
-    {0x1a0fe5, "\xe9\xe7\x02\x00\x00", 5}, //jmp 0x1a12d1
-    {0x2684EB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
-    {0x268582, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
-    {0x26869B, "\xEB", 1}, //PS4 PKG Installer Patch 1
-    {0x26876F, "\xEB", 1}, //PS5 PKG Installer Patch 1
-    {0x268BD8, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
-    {0x268DA9, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
-    {0x269175, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
-    {0x269212, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
-    {0x533137, "\xEB", 1}, //PS4 PKG Installer Patch 4
-    {0x53324C, "\xEB", 1}, //PS5 PKG Installer Patch 4
-    {0x5351D7, "\x48\x31\xC0\xC3", 4}, //PKG Installer
-};
-
-static struct shellcore_patch shellcore_patches_500[] = {
-    {0xa2e62e, "\x52\xeb\x08\x66\x90", 5},
-    {0xa2e639, "\xe8\x22\xfb\xff\xff\x58\xc3", 7},
-    {0xa2e151, "\x31\xc0\x50\xeb\xe3", 5},
-    {0xa2e139, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
-    {0x59c2b8, "\xeb\x04", 2},
-    {0x2a013c, "\xeb\x04", 2},
-    {0x2a054c, "\xeb\x04", 2},
-    {0x5b9377, "\xeb", 1},
-    {0x5a2f1d, "\x90\xe9", 2},
-    {0x5ba0af, "\xeb", 1},
-    {0x5bb613, "\x3b\x01\x00\x00", 4},
-    {0x1c33c1, "\xe8\xea\x7d\x4c\x00\x31\xc9\xff\xc1\xe9\x24\x02\x00\x00", 14},
-    {0x1c35f3, "\x83\xf8\x02\x0f\x43\xc1\xe9\xca\xfb\xff\xff", 11},
-    {0x1c30ee, "\xe9\xce\x02\x00\x00", 5},
-    {0x298CDB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
-    {0x298D58, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
-    {0x298E5B, "\xEB", 1}, //PS4 PKG Installer Patch 1
-    {0x298F2F, "\xEB", 1}, //PS5 PKG Installer Patch 1
-    {0x299396, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
-    {0x299567, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
-    {0x299935, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
-    {0x2999D2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
-    {0x59D747, "\xEB", 1}, //PS4 PKG Installer Patch 4
-    {0x59D85C, "\xEB", 1}, //PS5 PKG Installer Patch 4
-    {0x5A02E0, "\x48\x31\xC0\xC3", 4}, //PKG Installer
-};
-
-static struct shellcore_patch shellcore_patches_502[] = {
-    {0xa2e61e, "\x52\xeb\x08\x66\x90", 5},
-    {0xa2e629, "\xe8\x22\xfb\xff\xff\x58\xc3", 7},
-    {0xa2e141, "\x31\xc0\x50\xeb\xe3", 5},
-    {0xa2e129, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
-    {0x59c2a8, "\xeb\x04", 2},
-    {0x2a013c, "\xeb\x04", 2},
-    {0x2a054c, "\xeb\x04", 2},
-    {0x5b9367, "\xeb", 1},
-    {0x5a2f0d, "\x90\xe9", 2},
-    {0x5ba09f, "\xeb", 1},
-    {0x5bb603, "\x3b\x01\x00\x00", 4},
-    {0x1c33c1, "\xe8\xda\x7d\x4c\x00\x31\xc9\xff\xc1\xe9\x24\x02\x00\x00", 14},
-    {0x1c35f3, "\x83\xf8\x02\x0f\x43\xc1\xe9\xca\xfb\xff\xff", 11},
-    {0x1c30ee, "\xe9\xce\x02\x00\x00", 5},
-    {0x298CDB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
-    {0x298D58, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
-    {0x298E5B, "\xEB", 1}, //PS4 PKG Installer Patch 1
-    {0x298F2F, "\xEB", 1}, //PS5 PKG Installer Patch 1
-    {0x299396, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
-    {0x299567, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
-    {0x299935, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
-    {0x2999D2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
-    {0x59D737, "\xEB", 1}, //PS4 PKG Installer Patch 4
-    {0x59D84C, "\xEB", 1}, //PS5 PKG Installer Patch 4
-    {0x5A02D0, "\x48\x31\xC0\xC3", 4}, //PKG Installer
-};
-
-static struct shellcore_patch shellcore_patches_510[] = {
-    {0xa30fde, "\x52\xeb\x08\x66\x90", 5},
-    {0xa30fe9, "\xe8\x22\xfb\xff\xff\x58\xc3", 7},
-    {0xa30b01, "\x31\xc0\x50\xeb\xe3", 5},
-    {0xa30ae9, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
-    {0x59ed78, "\xeb\x04", 2},
-    {0x2a100c, "\xeb\x04", 2},
-    {0x2a141c, "\xeb\x04", 2},
-    {0x5bbe37, "\xeb", 1},
-    {0x5a59dd, "\x90\xe9", 2},
-    {0x5bcb6f, "\xeb", 1},
-    {0x5be0d3, "\x3b\x01\x00\x00", 4},
-    {0x1c3511, "\xe8\xea\xac\x4c\x00\x31\xc9\xff\xc1\xe9\x24\x02\x00\x00", 14},
-    {0x1c3743, "\x83\xf8\x02\x0f\x43\xc1\xe9\xca\xfb\xff\xff", 11},
-    {0x1c323e, "\xe9\xce\x02\x00\x00", 5},
-    {0x299BAB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
-    {0x299C28, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
-    {0x299D2B, "\xEB", 1}, //PS4 PKG Installer Patch 1
-    {0x298F2F, "\xEB", 1}, //PS5 PKG Installer Patch 1
-    {0x29A266, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
-    {0x29A437, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
-    {0x29A805, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
-    {0x29A8A2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
-    {0x5A0207, "\xEB", 1}, //PS4 PKG Installer Patch 4
-    {0x5A031C, "\xEB", 1}, //PS5 PKG Installer Patch 4
-    {0x5A2DA0, "\x48\x31\xC0\xC3", 4}, //PKG Installer
-};
-
-static struct shellcore_patch shellcore_patches_550[] = {
-    {0xa319ee, "\x52\xeb\x08\x66\x90", 5},
-    {0xa319f9, "\xe8\x22\xfb\xff\xff\x58\xc3", 7},
-    {0xa31511, "\x31\xc0\x50\xeb\xe3", 5},
-    {0xa314f9, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
-    {0x59ed78, "\xeb\x04", 2},
-    {0x2a100c, "\xeb\x04", 2},
-    {0x2a141c, "\xeb\x04", 2},
-    {0x5bbe37, "\xeb", 1},
-    {0x5a59dd, "\x90\xe9", 2},
-    {0x5bcb6f, "\xeb", 1},
-    {0x5be0d3, "\x3b\x01\x00\x00", 4},
-    {0x1c3511, "\xe8\xba\xb4\x4c\x00\x31\xc9\xff\xc1\xe9\x24\x02\x00\x00", 14},
-    {0x1c3743, "\x83\xf8\x02\x0f\x43\xc1\xe9\xca\xfb\xff\xff", 11},
-    {0x1c323e, "\xe9\xce\x02\x00\x00", 5},
-    {0x299BAB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
-    {0x299C28, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
-    {0x299D2B, "\xEB", 1}, //PS4 PKG Installer Patch 1
-    {0x299DFF, "\xEB", 1}, //PS5 PKG Installer Patch 1
-    {0x29A266, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
-    {0x29A437, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
-    {0x29A805, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
-    {0x29A8A2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
-    {0x5A0207, "\xEB", 1}, //PS4 PKG Installer Patch 4
-    {0x5A031C, "\xEB", 1}, //PS5 PKG Installer Patch 4
-    {0x5A2DA0, "\x48\x31\xC0\xC3", 4}, //PKG Installer
-};
-
-static struct shellcore_patch shellcore_patches_650[] = {
-    {0xa7dade, "\x52\xeb\x08\x66\x90", 3}, // NOTE: Shouldn't need the \x66\x90.... on any FW
-    {0xa7dae9, "\xe8\x82\xfa\xff\xff\x58\xc3", 7},
-    {0xa7d561, "\x31\xc0\x50\xeb\xe3", 5},
-    {0xa7d549, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
-    {0x5d2c24, "\xeb\x04", 2},
-    {0x2c09f2, "\xeb\x04", 2},
-    {0x2c0e32, "\xeb\x04", 2},
-    {0x5f022f, "\xeb", 1},
-    {0x5d9c7d, "\x90\xe9", 2},
-    {0x5f0f60, "\xeb", 1},
-    {0x5f24fa, "\x3b\x01\x00\x00", 4},
-    {0x1d8c71, "\xe8\xea\xaf\x4e\x00\x31\xc9\xff\xc1\xe9\x24\x02\x00\x00", 14},
-    {0x1d8ea3, "\x83\xf8\x02\x0f\x43\xc1\xe9\xc5\xfb\xff\xff", 11},
-    {0x1d897e, "\xe9\xee\x02\x00\x00", 5},
-    {0x2b943b, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
-    {0x2b94b8, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
-    {0x2b95bb, "\xEB", 1}, //PS4 PKG Installer Patch 1
-    {0x2b968f, "\xEB", 1}, //PS5 PKG Installer Patch 1
-    {0x2b9af0, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
-    {0x2b9cc0, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
-    {0x2ba095, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
-    {0x2ba132, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
-    {0x5d4367, "\xEB", 1}, //PS4 PKG Installer Patch 4
-    {0x5d447c, "\xEB", 1}, //PS5 PKG Installer Patch 4
-    {0x5d72e0, "\x48\x31\xC0\xC3", 4}, //PKG Installer
-};
-
-extern char _start[];
-
-static void relocate_shellcore_patches(struct shellcore_patch* patches, size_t n_patches)
-{
-    static uint64_t start_nonreloc = (uint64_t)_start;
-    uint64_t start = (uint64_t)_start;
-    for(size_t i = 0; i < n_patches; i++)
-        patches[i].data += start - start_nonreloc;
-}
-
-uint64_t get_eh_frame_offset(const char* path)
-{
-    int fd = open(path, O_RDONLY);
-    if(!fd)
-        return 0;
-    unsigned long long shit[4];
-    if(read(fd, shit, sizeof(shit)) != sizeof(shit))
-    {
-        close(fd);
-        return 0;
-    }
-    off_t o2 = 0x20*((shit[3]&0xffff)+1);
-    lseek(fd, o2, SEEK_SET);
-    unsigned long long ehdr[8];
-    if(read(fd, ehdr, sizeof(ehdr)) != sizeof(ehdr))
-    {
-        close(fd);
-        return 0;
-    }
-    off_t phdr_offset = o2 + ehdr[4];
-    int nphdr = ehdr[7] & 0xffff;
-    unsigned long long eh_frame = 0;
-    lseek(fd, phdr_offset, SEEK_SET);
-    for(int i = 0; i < nphdr; i++)
-    {
-        unsigned long long phdr[7];
-        if(read(fd, phdr, sizeof(phdr)) != sizeof(phdr))
-        {
-            close(fd);
-            return 0;
-        }
-        unsigned long long addr = phdr[2];
-        int ptype = phdr[0] & 0xffffffff;
-        if(ptype == 0x6474e550)
-            eh_frame = addr;
-    }
-    close(fd);
-    return eh_frame;
-}
-
-static const struct shellcore_patch* get_shellcore_patches(size_t* n_patches)
-{
-#ifdef FIRMWARE_PORTING
-    *n_patches = 1;
-    return 0;
-#endif
-#define FW(x)\
-    case 0x ## x:\
-        *n_patches = sizeof(shellcore_patches_ ## x) / sizeof(*shellcore_patches_ ## x);\
-        patches = shellcore_patches_ ## x;\
-        break
-    uint32_t ver = r0gdb_get_fw_version() >> 16;
-    struct shellcore_patch* patches;
-    switch(ver)
-    {
-    FW(300);
-    FW(310);
-    FW(320);
-    FW(321);
-    FW(400);
-    FW(402);
-    FW(403);
-    FW(450);
-    FW(451);
-    FW(500);
-    FW(502);
-    FW(510);
-    FW(550);
-    FW(650);
-    default:
-        *n_patches = 1;
-        return 0;
-    }
-#undef FW
-    relocate_shellcore_patches(patches, *n_patches);
-    return patches;
-}
-
-static void patch_shellcore(const struct shellcore_patch* patches, size_t n_patches, uint64_t eh_frame_offset)
-{
-    int pid = find_proc("SceShellCore");
-    struct module_info_ex mod_info;
-    mod_info.st_size = sizeof(mod_info);
-    remote_syscall(pid, SYS_dynlib_get_info_ex, 0, 0, &mod_info);
-    uint64_t shellcore_base = mod_info.eh_frame_hdr_addr - eh_frame_offset;
-    for(int i = 0; i < n_patches; i++)
-    {
-        uint64_t arg1[4] = {1, 0x13};
-        uint64_t arg2[8] = {pid, shellcore_base + patches[i].offset, (uint64_t)patches[i].data, patches[i].sz};
-        uint64_t arg3[4] = {0};
-        kekcall((uint64_t)arg1, (uint64_t)arg2, (uint64_t)arg3, 0, 0, 0, SYS_mdbg_call);
-    }
-}
-
-#ifndef DEBUG
-#define dbg_enter()
-#define gdb_remote_syscall(...)
-#endif
-
-void patch_app_db(void);
-
-#ifdef FIRMWARE_PORTING
-static struct PARASITES(100) parasites_empty = {};
-#endif
-
-static struct PARASITES(12) parasites_300 = {
-    .lim_syscall = 3,
-    .lim_fself = 12,
-    .lim_total = 12,
-    .parasites = {
-        /* syscall parasites */
-        {-0x7e96ad, RDI},
-        {-0x38214c, RSI},
-        {-0x38210c, RSI},
-        /* fself parasites */
-        {-0x970280, RDI},
-        {-0x2c922a, RAX},
-        {-0x2c90f0, RAX},
-        {-0x2c8e0e, RAX},
-        {-0x2c8cc6, R10},
-        {-0x2c8b8d, RAX},
-        {-0x2c881e, RDX},
-        {-0x2c8812, RCX},
-        {-0x2c86a6, RAX},
-        /* unsorted parasites */
-    }
-};
-
-static struct PARASITES(12) parasites_310 = {
-    .lim_syscall = 3,
-    .lim_fself = 12,
-    .lim_total = 12,
-    .parasites = {
-        /* syscall parasites */
-        {-0x7e966d, RDI},
-        {-0x38210c, RSI},
-        {-0x3820cc, RSI},
-        /* fself parasites */
-        {-0x970280, RDI},
-        {-0x2c91ea, RAX},
-        {-0x2c90b0, RAX},
-        {-0x2c8dce, RAX},
-        {-0x2c8c86, R10},
-        {-0x2c8b4d, RAX},
-        {-0x2c87de, RDX},
-        {-0x2c87d2, RCX},
-        {-0x2c8666, RAX},
-        /* unsorted parasites */
-    }
-};
-
-static struct PARASITES(12) parasites_320 = {
-    .lim_syscall = 3,
-    .lim_fself = 12,
-    .lim_total = 12,
-    .parasites = {
-        /* syscall parasites */
-        {-0x7e931d, RDI},
-        {-0x381dbc, RSI},
-        {-0x381d7c, RSI},
-        /* fself parasites */
-        {-0x96ff40, RDI},
-        {-0x2c8e9a, RAX},
-        {-0x2c8d60, RAX},
-        {-0x2c8a7e, RAX},
-        {-0x2c8936, R10},
-        {-0x2c87fd, RAX},
-        {-0x2c848e, RDX},
-        {-0x2c8482, RCX},
-        {-0x2c8316, RAX},
-        /* unsorted parasites */
-    }
-};
-
-static struct PARASITES(12) parasites_321 = {
-    .lim_syscall = 3,
-    .lim_fself = 12,
-    .lim_total = 12,
-    .parasites = {
-        /* syscall parasites */
-        {-0x7e931d, RDI},
-        {-0x381dbc, RSI},
-        {-0x381d7c, RSI},
-        /* fself parasites */
-        {-0x96ff40, RDI},
-        {-0x2c8e9a, RAX},
-        {-0x2c8d60, RAX},
-        {-0x2c8a7e, RAX},
-        {-0x2c8936, R10},
-        {-0x2c87fd, RAX},
-        {-0x2c848e, RDX},
-        {-0x2c8482, RCX},
-        {-0x2c8316, RAX},
-        /* unsorted parasites */
-    }
-};
-
-static struct PARASITES(12) parasites_400 = {
-    .lim_syscall = 3,
-    .lim_fself = 12,
-    .lim_total = 12,
-    .parasites = {
-        /* syscall parasites */
-        {-0x80284d, RDI},
-        {-0x388a8c, RSI},
-        {-0x388a4c, RSI},
-        /* fself parasites */
-        {-0x990b10, RDI},
-        {-0x2cd36a, RAX},
-        {-0x2cd230, RAX},
-        {-0x2ccf53, RAX},
-        {-0x2cce16, R10},
-        {-0x2cccdd, RAX},
-        {-0x2cc96e, RDX},
-        {-0x2cc962, RCX},
-        {-0x2cc7f6, RAX},
-        /* unsorted parasites */
-    }
-};
-
-static struct PARASITES(12) parasites_402 = {
-    .lim_syscall = 3,
-    .lim_fself = 12,
-    .lim_total = 12,
-    .parasites = {
-        /* syscall parasites */
-        {-0x80284d, RDI},
-        {-0x388a3c, RSI},
-        {-0x3889fc, RSI},
-        /* fself parasites */
-        {-0x990b10, RDI},
-        {-0x2cd31a, RAX},
-        {-0x2cd1e0, RAX},
-        {-0x2ccf03, RAX},
-        {-0x2ccdc6, R10},
-        {-0x2ccc8d, RAX},
-        {-0x2cc91e, RDX},
-        {-0x2cc912, RCX},
-        {-0x2cc7a6, RAX},
-        /* unsorted parasites */
-    }
-};
-
-static struct PARASITES(14) parasites_403 = {
-    .lim_syscall = 3,
-    .lim_fself = 12,
-    .lim_total = 14,
-    .parasites = {
-        /* syscall parasites */
-        {-0x80284d, RDI},
-        {-0x3889ac, RSI},
-        {-0x38896c, RSI},
-        /* fself parasites */
-        {-0x2cc716, RAX},
-        {-0x2cd28a, RAX},
-        {-0x2cd150, RAX},
-        {-0x2cce73, RAX},
-        {-0x2ccbfd, RAX},
-        {-0x2cc88e, RDX},
-        {-0x2cc882, RCX},
-        {-0x990b10, RDI},
-        {-0x2ccd36, R10},
-        /* unsorted parasites */
-        {-0x479a0e, RAX},
-        {-0x479a0e, R15},
-    }
-};
-
-static struct PARASITES(14) parasites_450 = {
-    .lim_syscall = 3,
-    .lim_fself = 12,
-    .lim_total = 14,
-    .parasites = {
-        /* syscall parasites */
-        {-0x80281d, RDI},
-        {-0x38885c, RSI},
-        {-0x38881c, RSI},
-        /* fself parasites */
-        {-0x2cc566, RAX},
-        {-0x2cd0da, RAX},
-        {-0x2ccfa0, RAX},
-        {-0x2cccc3, RAX},
-        {-0x2cca4d, RAX},
-        {-0x2cc6de, RDX},
-        {-0x2cc6d2, RCX},
-        {-0x990b10, RDI},
-        {-0x2ccb86, R10},
-        /* unsorted parasites */
-        {-0x4798de, RAX},
-        {-0x4798de, R15},
-    }
-};
-
-static struct PARASITES(14) parasites_451 = {
-    .lim_syscall = 3,
-    .lim_fself = 12,
-    .lim_total = 14,
-    .parasites = {
-        /* syscall parasites */
-        {-0x80281d, RDI},
-        {-0x3884bc, RSI},
-        {-0x38847c, RSI},
-        /* fself parasites */
-        {-0x2cc1c6, RAX},
-        {-0x2ccd3a, RAX},
-        {-0x2ccc00, RAX},
-        {-0x2cc923, RAX},
-        {-0x2cc6ad, RAX},
-        {-0x2cc33e, RDX},
-        {-0x2cc332, RCX},
-        {-0x990b10, RDI},
-        {-0x2cc7e6, R10},
-        /* unsorted parasites */
-        {-0x47953e, RAX},
-        {-0x47953e, R15},
-    }
-};
-
-static struct PARASITES(14) parasites_500 = {
-    .lim_syscall = 3,
-    .lim_fself = 12,
-    .lim_total = 14,
-    .parasites = {
-        /* syscall parasites */
-        //{-0x845d3c, RDI},  //?
-        {-0x835D3C, R13}, // ? 
-        {-0x39B0EC, RSI},
-        {-0x39B0AC, RSI},
-        /* fself parasites */
-        {-0x2DD156, RAX},
-        {-0x2DDCAA, RAX},
-        {-0x2DDB70, RAX},
-        {-0x2DD8D3, RAX},
-        {-0x2DD5ED, RAX},
-        {-0x2DD2CE, RDX},
-        {-0x2DD2C2, RCX},
-        {-0x9C6250, RDI},
-        {-0x2DD726, R10},
-        /* unsorted parasites */
-        {-0x48BD2E, RAX},
-        {-0x48BD2E, R15},
-    }
-};
-
-//Dont Have 5.02 Kernel Using Same As 5.00
-static struct PARASITES(14) parasites_502 = {
-    .lim_syscall = 3,
-    .lim_fself = 12,
-    .lim_total = 14,
-    .parasites = {
-        /* syscall parasites */
-        //{-0x845d3c, RDI},  //?
-        {-0x835D3C, R13}, // ? 
-        {-0x39B0EC, RSI},
-        {-0x39B0AC, RSI},
-        /* fself parasites */
-        {-0x2DD156, RAX},
-        {-0x2DDCAA, RAX},
-        {-0x2DDB70, RAX},
-        {-0x2DD8D3, RAX},
-        {-0x2DD5ED, RAX},
-        {-0x2DD2CE, RDX},
-        {-0x2DD2C2, RCX},
-        {-0x9C6250, RDI},
-        {-0x2DD726, R10},
-        /* unsorted parasites */
-        {-0x48BD2E, RAX},
-        {-0x48BD2E, R15},
-    }
-};
-
-static struct PARASITES(14) parasites_510 = {
-    .lim_syscall = 3,
-    .lim_fself = 12,
-    .lim_total = 14,
-    .parasites = {
-        /* syscall parasites */
-        //{-0x845d3c, RDI},  //?
-        {-0x835d3c, R13}, // ? 
-        {-0x39AF1C, RSI},
-        {-0x39AEDC, RSI},
-        /* fself parasites */
-        {-0x2DCF06, RAX},
-        {-0x2DDA5A, RAX},
-        {-0x2DD920, RAX},
-        {-0x2DD683, RAX},
-        {-0x2DD39D, RAX},
-        {-0x2DD07E, RDX},
-        {-0x2DD072, RCX},
-        {-0x9C6250, RDI},
-        {-0x2DD4D6, R10},
-        /* unsorted parasites */
-        {-0x48BB5E, RAX},
-        {-0x48BB5E, R15},
-    }
-};
-
-static struct PARASITES(14) parasites_550 = {
-    .lim_syscall = 3,
-    .lim_fself = 12,
-    .lim_total = 14,
-    .parasites = {
-        /* syscall parasites */
-        // {-0x845c8c, RDI}, //data 0x40A374
-        {-0x835c8c, R13}, //data 0x40A374
-        {-0x39a12c, RSI}, //data 0x8A5ED4
-        {-0x39a0ec, RSI}, //data 0x8A5F14
-        /* fself parasites */
-        {-0x2dc116, RAX}, //data 0x963EEA
-        {-0x2dcc6a, RAX}, //data 0x963396
-        {-0x2dcb30, RAX}, //data 0x9634D0
-        {-0x2dc893, RAX}, //data 0x96376D
-        {-0x2dc5ad, RAX}, //data 0x963A53
-        {-0x2dc28e, RDX}, //data 0x963D72
-        {-0x2dc282, RCX}, //data 0x963D7E
-        {-0x9c6290, RDI}, //data 0x279D70
-        {-0x2dc6e6, R10}, //data 0x96391A
-        /* unsorted parasites */
-        {-0x48ad6e, RAX}, //data 0x7B5292
-        {-0x48ad6e, R15}, //data 0x7B5292
-    }
-};
-
-static struct PARASITES(14) parasites_650 = {
-    .lim_syscall = 3,
-    .lim_fself = 12,
-    .lim_total = 14,
-    .parasites = {
-        /* syscall parasites */
-        //{-0x844fac, RDI}, //data 0x41B054
-        {-0x844fac, R13}, //data 0x41B054
-        {-0x39b92c, RSI}, //data 0x8C46D4
-        {-0x39b8ec, RSI}, //data 0x8C4714
-        /* fself parasites */
-        {-0x2da016, RAX}, //data 0x985FEA
-        {-0x2dab6a, RAX}, //data 0x985496
-        {-0x2daa30, RAX}, //data 0x9855D0
-        {-0x2da793, RAX}, //data 0x98586D
-        {-0x2da4ad, RAX}, //data 0x985B53
-        {-0x2da18e, RDX}, //data 0x985E72
-        {-0x2da182, RCX}, //data 0x985E7E
-        {-0x9dcad0, RDI}, //data 0x283530
-        {-0x2da5e6, R10}, //data 0x985A1A
-        /* unsorted parasites */
-        {-0x48fd0e, RAX}, //data 0x7D02F2
-        {-0x48fd0e, R15}, //data 0x7D02F2
-    }
-};
-
-static struct parasite_desc* get_parasites(size_t* desc_size)
-{
-    uint32_t ver = r0gdb_get_fw_version() >> 16;
-    switch(ver)
-    {
-#ifndef FIRMWARE_PORTING
-    case 0x300:
-        *desc_size = sizeof(parasites_300);
-        return (void*)&parasites_300;
-    case 0x310:
-        *desc_size = sizeof(parasites_310);
-        return (void*)&parasites_310;
-    case 0x320:
-        *desc_size = sizeof(parasites_320);
-        return (void*)&parasites_320;
-    case 0x321:
-        *desc_size = sizeof(parasites_321);
-        return (void*)&parasites_321;
-    case 0x400:
-        *desc_size = sizeof(parasites_400);
-        return (void*)&parasites_400;
-    case 0x402:
-        *desc_size = sizeof(parasites_402);
-        return (void*)&parasites_402;
-    case 0x403:
-        *desc_size = sizeof(parasites_403);
-        return (void*)&parasites_403;
-    case 0x450:
-        *desc_size = sizeof(parasites_450);
-        return (void*)&parasites_450;
-    case 0x451:
-        *desc_size = sizeof(parasites_451);
-        return (void*)&parasites_451;
-    case 0x500:
-        *desc_size = sizeof(parasites_500);
-        return (void*)&parasites_500;
-    case 0x502:
-        *desc_size = sizeof(parasites_502);
-        return (void*)&parasites_502;
-    case 0x510:
-        *desc_size = sizeof(parasites_510);
-        return (void*)&parasites_510;
-    case 0x550:
-        *desc_size = sizeof(parasites_550);
-        return (void*)&parasites_550;
-    case 0x650:
-        *desc_size = sizeof(parasites_650);
-        return (void*)&parasites_650;
-    default:
-        return 0;
-#else
-    default:
-        *desc_size = sizeof(parasites_empty);
-        return (void*)&parasites_empty;
-#endif
-    }
-}
-
-static inline uint64_t rdtsc(void)
-{
-    uint32_t eax, edx;
-    asm volatile("rdtsc":"=a"(eax),"=d"(edx)::"memory");
-    return (uint64_t)edx << 32 | eax;
-}
-
-//without kstuff = 2308259098
-//with kstuff and in-kelf checks = 86633419408 (37.5 times slower)
-//with kstuff and no in-kelf checks = 68129284331 (39.5 times slower)
-uint64_t bench(void)
-{
-    uint64_t start = rdtsc();
-    for(int i = 0; i < 1000000; i++)
-        getpid();
-    return rdtsc() - start;
-}
-
-int main(void* ds, int a, int b, uintptr_t c, uintptr_t d)
-{
-    if(r0gdb_init(ds, a, b, c, d))
-    {
-        #ifndef FIRMWARE_PORTING
-        notify("your firmware is not supported (prosper0gdb)");
-        return 1;
-        #endif
-    }
-#ifdef PS5KEK
-    extern uint64_t p_syscall;
-    getpid();
-    p_kekcall = (void*)p_syscall;
-#else    
-    p_kekcall = (char*)dlsym((void*)0x1, "getpid") + 7;
-#endif
-    if(!kekcall(0, 0, 0, 0, 0, 0, 0xffffffff00000027))
-    {
-        notify("ps5-kstuff is already loaded");
-        return 1;
-    }
-    size_t desc_size = 0;
-    struct parasite_desc* desc = get_parasites(&desc_size);
-    if(!desc)
-    {
-        notify("your firmware is not supported (ps5-kstuff)");
-        return 1;
-    }
-    size_t n_shellcore_patches;
-    uint64_t shellcore_eh_frame_offset = get_eh_frame_offset("/system/vsh/SceShellCore.elf");
-    const struct shellcore_patch* shellcore_patches = get_shellcore_patches(&n_shellcore_patches);
-    if(n_shellcore_patches && !shellcore_patches)
-    {
-#ifdef FIRMWARE_PORTING
-        n_shellcore_patches = 0;
-#else
-        notify("your firmware is not supported (shellcore)");
-        return 1;
-#endif
-    }
-#ifdef FIRMWARE_PORTING
-    dbg_enter();
-#endif
-    uint64_t percpu_ist4[NCPUS];
-    for(int cpu = 0; cpu < NCPUS; cpu++)
-        copyout(&percpu_ist4[cpu], TSS(cpu)+28+4*8, 8);
-    uint64_t int1_handler;
-    copyout(&int1_handler, IDT+16*1, 2);
-    copyout((char*)&int1_handler + 2, IDT+16*1+6, 6);
-    uint64_t int13_handler;
-    copyout(&int13_handler, IDT+16*13, 2);
-    copyout((char*)&int13_handler + 2, IDT+16*13+6, 6);
-#ifndef FIRMWARE_PORTING
-    dbg_enter();
-#endif
-    gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)"allocating kernel memory... ", (uintptr_t)28);
-    for(int i = 0; i < 0x300; i += 2)
-        r0gdb_kmalloc(0x100);
-    for(int i = 0; i < 2; i += 2)
-    {
-        while(!mem_blocks[i])
-            mem_blocks[i] = r0gdb_kmalloc(1<<23);
-        mem_blocks[i+1] = (mem_blocks[i] ? mem_blocks[i] + (1<<23) : 0);
-    }
-    gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)"done\n", (uintptr_t)5);
-    uint64_t comparison_table_base = (uint64_t)kmalloc(131072);
-    uint64_t comparison_table = ((comparison_table_base - 1) | 65535) + 1;
-    uint8_t* comparison_table_data = mmap(0, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, -1, 0);
-    for(size_t i = 0; i < 256; i++)
-        for(size_t j = 0; j < 256; j++)
-            comparison_table_data[256*i+j] = 8*(1+(i>j)-(i<j));
-    //trying to copyin the whole 64k at once hangs here for some reason
-    for(size_t i = 0; i < 256; i++)
-        copyin(comparison_table+256*i, comparison_table_data+256*i, 256);
-    uint64_t shared_area;
-    if(comparison_table - comparison_table_base > 4096)
-        shared_area = comparison_table - 4096;
-    else
-        shared_area = comparison_table + 65536;
-    kmemzero((void*)shared_area, 4096);
-    uint64_t uelf_virt_base = (find_empty_pml4_index(0) << 39) | (-1ull << 48);
-    uint64_t dmem_virt_base = (find_empty_pml4_index(1) << 39) | (-1ull << 48);
-    shared_area = virt2phys(shared_area) + dmem_virt_base;
-    uint64_t kelf_parasite_desc = (uint64_t)kmalloc(8192);
-    kelf_parasite_desc = ((kelf_parasite_desc - 1) | 4095) + 1;
-    for(int i = 0; i < desc->lim_total; i++)
-        desc->parasites[i].address += kdata_base;
-    kmemcpy((void*)kelf_parasite_desc, desc, desc_size);
-    uint64_t uelf_parasite_desc = virt2phys(kelf_parasite_desc) + dmem_virt_base;
-    volatile int zero = 0; //hack to force runtime calculation of string pointers
-    const char* symbols[] = {
-        "comparison_table"+zero,
-        "dmem"+zero,
-        "parasites"+zero,
-        "parasites_kmem"+zero,
-        "int1_handler"+zero,
-        "int13_handler"+zero,
-        ".ist_errc"+zero,
-        ".ist_noerrc"+zero,
-        ".ist4"+zero,
-        ".pcpu"+zero,
-        "shared_area"+zero,
-        ".tss"+zero,
-        ".uelf_cr3"+zero,
-        ".uelf_entry"+zero,
-        ".fwver"+zero,
-#define OFFSET(x) (#x)+zero,
-#include "../prosper0gdb/offset_list.txt"
-#undef OFFSET
-        0,
-    };
-    uint64_t values[] = {
-        comparison_table,      // comparison_table
-        dmem_virt_base,        // dmem
-        uelf_parasite_desc,    // parasites
-        kelf_parasite_desc,    // parasites_kmem
-        int1_handler,          // int1_handler
-        int13_handler,         // int13_handler
-        0x1237,                // .ist_errc
-        0x1238,                // .ist_noerrc
-        0x1239,                // .ist4
-        0x1234,                // .pcpu
-        shared_area,           // shared_area
-        0x123a,                // .tss
-        0x1235,                // .uelf_cr3
-        0x1236,                // .uelf_entry
-        (uint64_t) r0gdb_get_fw_version() >> 16, // .fwver
-#define OFFSET(x) offsets.x,
-#include "../prosper0gdb/offset_list.txt"
-#undef OFFSET
-        0,
-    };
-    size_t pcpu_idx, uelf_cr3_idx, uelf_entry_idx, ist_errc_idx, ist_noerrc_idx, ist4_idx, tss_idx;
-    for(size_t i = 0; values[i]; i++)
-        switch(values[i])
-        {
-        case 0x1234: pcpu_idx = i; break;
-        case 0x1235: uelf_cr3_idx = i; break;
-        case 0x1236: uelf_entry_idx = i; break;
-        case 0x1237: ist_errc_idx = i; break;
-        case 0x1238: ist_noerrc_idx = i; break;
-        case 0x1239: ist4_idx = i; break;
-        case 0x123a: tss_idx = i; break;
-        }
-    uint64_t uelf_bases[NCPUS];
-    uint64_t kelf_bases[NCPUS];
-    uint64_t kelf_entries[NCPUS];
-    uint64_t uelf_cr3s[NCPUS];
-    for(int cpu = 0; cpu < NCPUS; cpu++)
-    {
-        char buf[] = "loading on cpu ..\n";
-        if(cpu >= 10)
-        {
-            buf[15] = '1';
-            buf[16] = (cpu - 10) + '0';
-            gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)buf, (uintptr_t)18);
-        }
-        else
-        {
-            buf[15] = cpu + '0';
-            buf[16] = '\n';
-            gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)buf, (uintptr_t)17);
-        }
-        values[pcpu_idx] = PCPU(cpu);
-        values[uelf_cr3_idx] = 0;
-        values[uelf_entry_idx] = 0;
-        values[ist_errc_idx] = TSS(cpu)+28+3*8;
-        values[ist_noerrc_idx] = TSS(cpu)+28+7*8;
-        values[ist4_idx] = percpu_ist4[cpu];
-        values[tss_idx] = TSS(cpu);
-        void* uelf_entry = 0;
-        void* uelf_base[2] = {0};
-        char* uelf = load_kelf(uek, symbols, values, uelf_base, &uelf_entry, uelf_virt_base);
-        uintptr_t uelf_cr3 = (uintptr_t)kmalloc(24576);
-        uelf_cr3 = ((uelf_cr3 + 4095) | 4095) - 4095;
-        uelf_cr3s[cpu] = uelf_cr3;
-        values[uelf_cr3_idx] = virt2phys(uelf_cr3);
-        values[uelf_entry_idx] = (uintptr_t)uelf_entry - (uintptr_t)uelf_base[0] + uelf_virt_base;
-        void* entry = 0;
-        void* base[2] = {0};
-        char* kelf = load_kelf(kek, symbols, values, base, &entry, 0);
-        build_uelf_cr3(uelf_cr3, uelf_base, uelf_virt_base, dmem_virt_base);
-        uelf_bases[cpu] = (uintptr_t)uelf;
-        kelf_bases[cpu] = (uint64_t)kelf;
-        kelf_entries[cpu] = (uint64_t)entry;
-    }
-    r0gdb_wrmsr(0xc0000084, r0gdb_rdmsr(0xc0000084) | 0x100);
-    gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)"done loading\npatching idt... ", (uintptr_t)29);
-    uint64_t cr3 = r0gdb_read_cr3();
-    for(int cpu = 0; cpu < NCPUS; cpu++)
-    {
-        uint64_t entry = kelf_entries[cpu];
-        kmemcpy((char*)IDT+16*13, (char*)entry, 2);
-        kmemcpy((char*)IDT+16*13+6, (char*)entry+2, 6);
-        kmemcpy((char*)IDT+16*13+4, "\x03", 1);
-        kmemcpy((char*)IDT+16*1, (char*)entry+16, 2);
-        kmemcpy((char*)IDT+16*1+6, (char*)entry+18, 6);
-        kmemcpy((char*)IDT+16*1+4, "\x07", 1);
-        kmemcpy((char*)TSS(cpu)+28+3*8, (char*)entry+8, 8);
-        kmemcpy((char*)TSS(cpu)+28+7*8, (char*)entry+24, 8);
-    }
-    uint64_t iret = offsets.doreti_iret;
-    kmemcpy((char*)(IDT+16*2), (char*)&iret, 2);
-    kmemcpy((char*)(IDT+16*2+6), (char*)&iret+2, 6);
-    //kmemzero((char*)(IDT+16*1), 16);
-    gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)"done\napplying kdata patches... ", (uintptr_t)31);
-    copyin(offsets.sysentvec + 14, &(const uint16_t[1]){0xdeb7}, 2); //native sysentvec
-    copyin(offsets.sysentvec_ps4 + 14, &(const uint16_t[1]){0xdeb7}, 2); //ps4 sysentvec
-    copyin(offsets.crypt_singleton_array + 11*8 + 2*8 + 6, &(const uint16_t[1]){0xdeb7}, 2); //crypt xts
-    copyin(offsets.crypt_singleton_array + 11*8 + 9*8 + 6, &(const uint16_t[1]){0xdeb7}, 2); //crypt hmac
-    {
-        //enable debug settings & spoof target
-        uint32_t q = 0;
-        copyout(&q, offsets.security_flags, 4);
-        q |= 0x14;        
-        copyin(offsets.security_flags, &q, 4);
-        copyin(offsets.targetid, "\x82", 1);
-        copyout(&q, offsets.qa_flags, 4);
-        q |= 0x1030300;
-        copyin(offsets.qa_flags, &q, 4);
-        copyout(&q, offsets.utoken, 4);
-        q |= 1;
-        copyin(offsets.utoken, &q, 4);
-    }
-    gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)"done\npatching shellcore... ", (uintptr_t)27);
-    //restore the gdb_stub's SIGTRAP handler
-    struct sigaction sa;
-    sigaction(SIGBUS, 0, &sa);
-    sigaction(SIGTRAP, &sa, 0);
-#ifndef FIRMWARE_PORTING
-    sigaction(SIGPIPE, &sa, 0);
-#endif
-    copyin(IDT+16*9+5, "\x8e", 1);
-    copyin(IDT+16*179+5, "\x8e", 1);
-    patch_shellcore(shellcore_patches, n_shellcore_patches, shellcore_eh_frame_offset);
-    gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)"done\npatching app.db... ", (uintptr_t)24);
-    #ifndef FIRMWARE_PORTING
-    //patch_app_db();
-    #endif
-    gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)"done\n", (uintptr_t)5);
-    #ifndef DEBUG
-    notify("ps5-kstuff successfully loaded");
-    return 0;
-#endif
-    asm volatile("ud2");
-    return 0;
-}
+#define sysctl __sysctl
+#include <sys/types.h>
+#include <sys/mman.h>
+#include <sys/sysctl.h>
+#include <signal.h>
+#include <stdint.h>
+#include <stdarg.h>
+#include <unistd.h>
+#include <fcntl.h>
+#include "../prosper0gdb/r0gdb.h"
+#include "../prosper0gdb/offsets.h"
+#include "../gdb_stub/dbg.h"
+#include "uelf/structs.h"
+#include "uelf/parasite_desc.h"
+
+void* dlsym(void*, const char*);
+
+void notify(const char* s)
+{
+    struct
+    {
+        char pad1[0x10];
+        int f1;
+        char pad2[0x19];
+        char msg[0xc03];
+    } notification = {.f1 = -1};
+    char* d = notification.msg;
+    while(*d++ = *s++);
+    int fd = open("/dev/notification0", 1);
+    write(fd, &notification, 0xc30);
+    close(fd);
+}
+
+void die(int line)
+{
+    char buf[64] = "problem encountered on main.c line ";
+    char* p = buf;
+    while(*p)
+        p++;
+    int q = 1;
+    while(line / 10 > q)
+        q *= 10;
+    while(q)
+    {
+        *p++ = '0' + (line / q) % 10;
+        q /= 10;
+    }
+    notify(buf);
+    asm volatile("ud2");
+}
+
+#define die() die(__LINE__)
+
+extern uint64_t kdata_base;
+
+void kmemcpy(void* dst, const void* src, size_t sz);
+
+static void kpoke64(void* dst, uint64_t src)
+{
+    kmemcpy(dst, &src, 8);
+}
+
+static void kmemzero(void* dst, size_t sz)
+{
+    char* umem = mmap(0, sz, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, -1, 0);
+    mlock(umem, sz);
+    kmemcpy(dst, umem, sz);
+    munmap(umem, sz);
+}
+
+static int strcmp(const char* a, const char* b)
+{
+    while(*a && *a == *b)
+    {
+        a++;
+        b++;
+    }
+    return *a - *b;
+}
+
+#define kmalloc my_kmalloc
+
+static uint64_t mem_blocks[8];
+
+static void* kmalloc(size_t sz)
+{
+    for(int i = 0; i < 8; i += 2)
+    {
+        if(mem_blocks[i] + sz <= mem_blocks[i+1])
+        {
+            uint64_t ans = mem_blocks[i];
+            mem_blocks[i] += sz;
+            return (void*)ans;
+        }
+    }
+    die();
+    return 0;
+}
+
+#define NCPUS 16
+#define IDT (offsets.idt)
+#define GDT(i) (offsets.gdt_array+0x68*(i))
+#define TSS(i) (offsets.tss_array+0x68*(i))
+#define PCPU(i) (offsets.pcpu_array+0x900*(i))
+
+size_t virt2file(uint64_t* phdr, uint16_t phnum, uintptr_t addr)
+{
+    for(size_t i = 0; i < phnum; i++)
+    {
+        uint64_t* h = phdr + 7*i;
+        if((uint32_t)h[0] != 1)
+            continue;
+        if(h[2] <= addr && h[2] + h[4] > addr)
+            return addr + h[1] - h[2];
+    }
+    return -1;
+}
+
+void* load_kelf(void* ehdr, const char** symbols, uint64_t* values, void** base, void** entry, uint64_t mapped_kptr)
+{
+    uint64_t* phdr = (void*)((char*)ehdr + *(uint64_t*)((char*)ehdr + 32));
+    uint16_t phnum = *(uint16_t*)((char*)ehdr + 56);
+    uint64_t* dynamic = 0;
+    size_t sz_dynamic = 0;
+    uint64_t kernel_size = 0;
+    for(size_t i = 0; i < phnum; i++)
+    {
+        uint64_t* h = phdr + 7*i;
+        if((uint32_t)h[0] == 2)
+        {
+            dynamic = (void*)((char*)ehdr + h[1]);
+            sz_dynamic = h[4];
+        }
+        else if((uint32_t)h[0] == 1)
+        {
+            uint64_t limit = h[2] + h[5];
+            if(limit > kernel_size)
+                kernel_size = limit;
+        }
+    }
+    kernel_size = ((kernel_size + 4095) | 4095) - 4095;
+    char* kptr = kmalloc(kernel_size+4096);
+    kptr = (char*)((((uint64_t)kptr - 1) | 4095) + 1);
+    if(!mapped_kptr)
+        mapped_kptr = (uint64_t)kptr;
+    base[0] = kptr;
+    base[1] = kptr + kernel_size;
+    for(size_t i = 0; i < phnum; i++)
+    {
+        uint64_t* h = phdr + 7*i;
+        if((uint32_t)h[0] != 1)
+            continue;
+        kmemcpy(kptr+h[2], (char*)ehdr + h[1], h[4]);
+        kmemzero(kptr+h[2]+h[4], h[5]-h[4]);
+    }
+    char* strtab = 0;
+    uint64_t* symtab = 0;
+    uint64_t* rela = 0;
+    size_t relasz = 0;
+    for(size_t i = 0; i < sz_dynamic / 16; i++)
+    {
+        uint64_t* kv = dynamic + 2*i;
+        if(kv[0] == 5)
+            strtab = (char*)ehdr + virt2file(phdr, phnum, kv[1]);
+        else if(kv[0] == 6)
+            symtab = (void*)((char*)ehdr + virt2file(phdr, phnum, kv[1]));
+        else if(kv[0] == 7)
+            rela = (void*)((char*)ehdr + virt2file(phdr, phnum, kv[1]));
+        else if(kv[0] == 8)
+            relasz = kv[1];
+    }
+    for(size_t i = 0; i < relasz / 24; i++)
+    {
+        uint64_t* oia = rela + 3*i;
+        if((uint32_t)oia[1] == 1 || (uint32_t)oia[1] == 6)
+        {
+            uint64_t* sym = symtab + 3 * (oia[1] >> 32);
+            const char* name = strtab + (uint32_t)sym[0];
+            uint64_t value = sym[1];
+            if(!value)
+            {
+                for(size_t i = 0; symbols[i]; i++)
+                    if(!strcmp(symbols[i], name))
+                        sym[1] = value = values[i];
+                    else if(symbols[i][0] == '.' && !strcmp(symbols[i]+1, name))
+                        value = values[i];
+#ifndef FIRMWARE_PORTING
+                if(!value)
+                    die();
+#endif
+            }
+            if((uint32_t)oia[1] == 6 && oia[2])
+                die();
+            if(oia[0] + 8 > kernel_size)
+                die();
+            kpoke64(kptr+oia[0], oia[2]+value);
+        }
+        else if((uint32_t)oia[1] == 8)
+        {
+            if(oia[0] + 8 > kernel_size)
+                die();
+            kpoke64(kptr+oia[0], (uint64_t)(mapped_kptr+oia[2]));
+        }
+        else
+            die();
+    }
+    *entry = kptr + *(uint64_t*)((char*)ehdr + 24);
+    return kptr;
+}
+
+asm(".section .data\nkek:\n.incbin \"kelf\"\nkek_end:");
+extern char kek[];
+extern char kek_end[];
+
+asm(".section .data\nuek:\n.incbin \"uelf/uelf.bin\"\nuek_end:");
+extern char uek[];
+extern char uek_end[];
+
+asm(".section .text\nkekcall:\nmov 8(%rsp), %rax\njmp *p_kekcall(%rip)");
+
+uint64_t kekcall(uint64_t a, uint64_t b, uint64_t c, uint64_t d, uint64_t e, uint64_t f, uint64_t nr);
+
+#define KEKCALL_GETPPID        0x000000027
+#define KEKCALL_READ_DR        0x100000027
+#define KEKCALL_WRITE_DR       0x200000027
+#define KEKCALL_RDMSR          0x300000027
+#define KEKCALL_REMOTE_SYSCALL 0x500000027
+#define KEKCALL_CHECK          0xffffffff00000027
+
+void* p_kekcall;
+
+void* malloc(size_t sz)
+{
+    return mmap(0, sz, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, -1, 0);
+}
+
+uint64_t get_dmap_base(void)
+{
+    uint64_t ptrs[2];
+    copyout(ptrs, offsets.kernel_pmap_store+32, sizeof(ptrs));
+    return ptrs[0] - ptrs[1];
+}
+
+uint64_t virt2phys(uintptr_t addr)
+{
+    uint64_t dmap = get_dmap_base();
+    uint64_t pml = r0gdb_read_cr3();
+    for(int i = 39; i >= 12; i -= 9)
+    {
+        uint64_t inner_pml;
+        copyout(&inner_pml, dmap+pml+((addr & (0x1ffull << i)) >> (i - 3)), 8);
+        if(!(inner_pml & 1)) //not present
+            return -1;
+        if((inner_pml & 128) || i == 12) //hugepage
+        {
+            inner_pml &= (1ull << 52) - (1ull << i);
+            inner_pml |= addr & ((1ull << i) - 1);
+            return inner_pml;
+        }
+        inner_pml &= (1ull << 52) - (1ull << 12);
+        pml = inner_pml;
+    }
+    //unreachable
+}
+
+uint64_t find_empty_pml4_index(int idx)
+{
+    uint64_t dmap = get_dmap_base();
+    uint64_t cr3 = r0gdb_read_cr3();
+    uint64_t pml4[512];
+    copyout(pml4, dmap+cr3, 4096);
+    for(int i = 256; i < 512; i++)
+        if(!pml4[i] && !idx--)
+            return i;
+}
+
+void build_uelf_cr3(uint64_t uelf_cr3, void* uelf_base[2], uint64_t uelf_virt_base, uint64_t dmap_virt_base)
+{
+    static char zeros[4096];
+    uint64_t dmap = get_dmap_base();
+    uint64_t cr3 = r0gdb_read_cr3();
+    uint64_t user_start = (uint64_t)uelf_base[0];
+    uint64_t user_end = (uint64_t)uelf_base[1];
+    if((uelf_virt_base & 0x1fffff) || (dmap_virt_base & ((1ull << 39) - 1)) || user_end - user_start > 0x200000)
+        die();
+    uint64_t pml4_virt = uelf_cr3;
+    copyin(pml4_virt, zeros, 4096);
+    kmemcpy((void*)(pml4_virt+2048), (void*)(dmap+cr3+2048), 2048);
+    uint64_t pml3_virt = uelf_cr3 + 4096;
+    uint64_t pml3_dmap = uelf_cr3 + 16384; //user-accessible direct mapping of physical memory
+    copyin(pml4_virt + 8 * ((uelf_virt_base >> 39) & 511), &(uint64_t[1]){virt2phys(pml3_virt) | 7}, 8);
+    copyin(pml4_virt + 8 * ((dmap_virt_base >> 39) & 511), &(uint64_t[1]){virt2phys(pml3_dmap) | 7}, 8);
+    copyin(pml3_virt, zeros, 4096);
+    uint64_t pml2_virt = uelf_cr3 + 8192;
+    copyin(pml3_virt + 8 * ((uelf_virt_base >> 30) & 511), &(uint64_t[1]){virt2phys(pml2_virt) | 7}, 8);
+    copyin(pml2_virt, zeros, 4096);
+    uint64_t pml1_virt = uelf_cr3 + 12288;
+    copyin(pml2_virt + 8 * ((uelf_virt_base >> 21) & 511), &(uint64_t[1]){virt2phys(pml1_virt) | 7}, 8);
+    copyin(pml1_virt, zeros, 4096);
+    for(uint64_t i = 0; i * 4096 + user_start < user_end; i++)
+        copyin(pml1_virt+8*i, &(uint64_t[1]){virt2phys(i*4096+user_start) | 7}, 8);
+    for(uint64_t i = 0; i < 512; i++)
+        copyin(pml3_dmap+8*i, &(uint64_t[1]){(i<<30) | 135}, 8);
+}
+
+int find_proc(const char* name)
+{
+    for(int pid = 1; pid < 1024; pid++)
+    {
+        size_t sz = 1096;
+        int key[4] = {CTL_KERN, KERN_PROC, KERN_PROC_PID, pid};
+        char buf[1097] = {0};
+        sysctl(key, 4, buf, &sz, 0, 0);
+        const char* a = buf + 447;
+        const char* b = name;
+        while(*a && *a++ == *b++);
+        if(!*a && !*b)
+            return pid;
+    }
+    return -1;
+}
+
+static uint64_t remote_syscall(int pid, int nr, ...)
+{
+    va_list va;
+    va_start(va, nr);
+    uint64_t args[6];
+    for(int i = 0; i < 6; i++)
+        args[i] = va_arg(va, uint64_t);
+    va_end(va);
+    return kekcall(pid, nr, (uint64_t)args, 0, 0, 0, KEKCALL_REMOTE_SYSCALL);
+}
+
+#define SYS_mdbg_call 573
+#define SYS_dynlib_get_info_ex 608
+
+struct module_segment
+{
+    uint64_t addr;
+    uint32_t size;
+    uint32_t flags;
+};
+
+struct module_info_ex
+{
+    size_t st_size;
+    char name[256];
+    int id;
+    uint32_t tls_index;
+    uint64_t tls_init_addr;
+    uint32_t tls_init_size;
+    uint32_t tls_size;
+    uint32_t tls_offset;
+    uint32_t tls_align;
+    uint64_t init_proc_addr;
+    uint64_t fini_proc_addr;
+    uint64_t reserved1;
+    uint64_t reserved2;
+    uint64_t eh_frame_hdr_addr;
+    uint64_t eh_frame_addr;
+    uint32_t eh_frame_hdr_size;
+    uint32_t eh_frame_size;
+    struct module_segment segments[4];
+    uint32_t segment_count;
+    uint32_t ref_count;
+};
+
+struct shellcore_patch
+{
+    uint64_t offset;
+    char* data;
+    size_t sz;
+};
+
+static struct shellcore_patch shellcore_patches_300[] = {
+    {0x9d1cae, "\x52\xeb\x08\x66\x90", 5},
+    {0x9d1cb9, "\xe8\x02\xfc\xff\xff\x58\xc3", 7},
+    {0x9d18b1, "\x31\xc0\x50\xeb\xe3", 5},
+    {0x9d1899, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
+    {0x4dcfb4, "\xeb\x04", 2},
+    {0x2569b1, "\xeb\x04", 2},
+    {0x25af5a, "\xeb\x04", 2},
+    {0x4fafca, "\x90\x90", 2},
+    {0x4e335d, "\x90\xe9", 2},
+    {0x4fbb63, "\xeb", 1},
+    {0x4ff329, "\xd0\x00\x00\x00", 4},
+    {0x1968c1, "\xe8\x4a\xde\x42\x00\x31\xc9\xff\xc1\xe9\x12\x01\x00\x00", 14},
+    {0x1969e1, "\x83\xf8\x02\x0f\x43\xc1\xe9\xff\xfb\xff\xff", 11},
+    {0x1965c9, "\xe9\xf3\x02\x00\x00", 5},
+    {0x25284B, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x2528C8, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x2529CB, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x252A9F, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x252F35, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x253120, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x2534E5, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x253582, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x4DEF37, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x4DF04C, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x4E0F87, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+static struct shellcore_patch shellcore_patches_310[] = {
+    {0x9d1cee, "\x52\xeb\x08\x66\x90", 5},
+    {0x9d1cf9, "\xe8\x02\xfc\xff\xff\x58\xc3", 7},
+    {0x9d18f1, "\x31\xc0\x50\xeb\xe3", 5},
+    {0x9d18d9, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
+    {0x4dcff4, "\xeb\x04", 2},
+    {0x2569f1, "\xeb\x04", 2},
+    {0x25af9a, "\xeb\x04", 2},
+    {0x4fb00a, "\x90\x90", 2},
+    {0x4e339d, "\x90\xe9", 2},
+    {0x4fbba3, "\xeb", 1},
+    {0x4ff369, "\xd0\x00\x00\x00", 4},
+    {0x1968c1, "\xe8\x8a\xde\x42\x00\x31\xc9\xff\xc1\xe9\x12\x01\x00\x00", 14},
+    {0x1969e1, "\x83\xf8\x02\x0f\x43\xc1\xe9\xff\xfb\xff\xff", 11},
+    {0x1965c9, "\xe9\xf3\x02\x00\x00", 5},
+};
+
+static struct shellcore_patch shellcore_patches_320[] = {
+    {0x9d1f9e, "\x52\xeb\x08\x66\x90", 5},
+    {0x9d1fa9, "\xe8\x02\xfc\xff\xff\x58\xc3", 7},
+    {0x9d1ba1, "\x31\xc0\x50\xeb\xe3", 5},
+    {0x9d1b89, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
+    {0x4dd284, "\xeb\x04", 2},
+    {0x256aa1, "\xeb\x04", 2},
+    {0x25b04a, "\xeb\x04", 2},
+    {0x4fb29a, "\x90\x90", 2},
+    {0x4e362d, "\x90\xe9", 2},
+    {0x4fbe33, "\xeb", 1},
+    {0x4ff5f9, "\xd0\x00\x00\x00", 4},
+    {0x1968c1, "\xe8\x3a\xe1\x42\x00\x31\xc9\xff\xc1\xe9\x12\x01\x00\x00", 14},
+    {0x1969e1, "\x83\xf8\x02\x0f\x43\xc1\xe9\xff\xfb\xff\xff", 11},
+    {0x1965c9, "\xe9\xf3\x02\x00\x00", 5},
+    {0x25293B, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x2529B8, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x252ABB, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x252B8F, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x253025, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x253210, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x2535D5, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x253672, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x4DF207, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x4DF31C, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x4E1257, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+static struct shellcore_patch shellcore_patches_321[] = {
+    {0x9d1f9e, "\x52\xeb\x08\x66\x90", 5},
+    {0x9d1fa9, "\xe8\x02\xfc\xff\xff\x58\xc3", 7},
+    {0x9d1ba1, "\x31\xc0\x50\xeb\xe3", 5},
+    {0x9d1b89, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
+    {0x4dd284, "\xeb\x04", 2},
+    {0x256aa1, "\xeb\x04", 2},
+    {0x25b04a, "\xeb\x04", 2},
+    {0x4fb29a, "\x90\x90", 2},
+    {0x4e362d, "\x90\xe9", 2},
+    {0x4fbe33, "\xeb", 1},
+    {0x4ff5f9, "\xd0\x00\x00\x00", 4},
+    {0x1968c1, "\xe8\x3a\xe1\x42\x00\x31\xc9\xff\xc1\xe9\x12\x01\x00\x00", 14},
+    {0x1969e1, "\x83\xf8\x02\x0f\x43\xc1\xe9\xff\xfb\xff\xff", 11},
+    {0x1965c9, "\xe9\xf3\x02\x00\x00", 5},
+    {0x25293B, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x2529B8, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x252ABB, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x252B8F, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x253025, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x253210, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x2535D5, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x253672, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x4DF207, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x4DF31C, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x4E1257, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+static struct shellcore_patch shellcore_patches_400[] = {
+    {0x974fee, "\x52\xeb\x08\x66\x90", 5},
+    {0x974ff9, "\xe8\xd2\xfb\xff\xff\x58\xc3", 7},
+    {0x974bc1, "\x31\xc0\x50\xeb\xe3", 5},
+    {0x974ba9, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
+    {0x5307f9, "\xeb\x04", 2},
+    {0x26f35c, "\xeb\x04", 2},
+    {0x26f76c, "\xeb\x04", 2},
+    {0x54e1f0, "\xeb", 1},
+    {0x536e1d, "\x90\xe9", 2},
+    {0x54db8f, "\xeb", 1},
+    {0x55137a, "\xc8\x00\x00\x00", 4},
+    {0x1a12d1, "\xe8\xea\x88\x47\x00\x31\xc9\xff\xc1\xe9\xf4\x02\x00\x00", 14},
+    {0x1a15d3, "\x83\xf8\x02\x0f\x43\xc1\xe9\x29\xfa\xff\xff", 11},
+    {0x1a0fe5, "\xe9\xe7\x02\x00\x00", 5},
+    {0x267DBB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x267E52, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x267F6B, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x26803F, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x2684A8, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x268679, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x268A45, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x268AE2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x532897, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x5329AC, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x534937, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+static struct shellcore_patch shellcore_patches_402[] = {
+    {0x974fee, "\x52\xeb\x08\x66\x90", 5},
+    {0x974ff9, "\xe8\xd2\xfb\xff\xff\x58\xc3", 7},
+    {0x974bc1, "\x31\xc0\x50\xeb\xe3", 5},
+    {0x974ba9, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
+    {0x5307f9, "\xeb\x04", 2},
+    {0x26f35c, "\xeb\x04", 2},
+    {0x26f76c, "\xeb\x04", 2},
+    {0x54e1f0, "\xeb", 1},
+    {0x536e1d, "\x90\xe9", 2},
+    {0x54db8f, "\xeb", 1},
+    {0x55137a, "\xc8\x00\x00\x00", 4},
+    {0x1a12d1, "\xe8\xea\x88\x47\x00\x31\xc9\xff\xc1\xe9\xf4\x02\x00\x00", 14},
+    {0x1a15d3, "\x83\xf8\x02\x0f\x43\xc1\xe9\x29\xfa\xff\xff", 11},
+    {0x1a0fe5, "\xe9\xe7\x02\x00\x00", 5},
+    {0x267DBB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x267E52, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x267F6B, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x26803F, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x2684A8, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x268679, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x268A45, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x268AE2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x532897, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x5329AC, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x534937, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+static struct shellcore_patch shellcore_patches_403[] = {
+    {0x974fee, "\x52\xeb\x08\x66\x90", 5}, //push rdx; jmp 0x974ff9; 2-byte nop
+    {0x974ff9, "\xe8\xd2\xfb\xff\xff\x58\xc3", 7}, //call 0x974bd0; pop rax; ret
+    {0x974bc1, "\x31\xc0\x50\xeb\xe3", 5}, //xor eax, eax; push rax; jmp 0x974ba9
+    {0x974ba9, "\xe8\x22\x00\x00\x00\x58\xc3", 7}, //call 0x974bd0; pop rax; ret
+    {0x5307f9, "\xeb\x04", 2}, //jmp 0x5307ff
+    {0x26f35c, "\xeb\x04", 2}, //jmp 0x26f362
+    {0x26f76c, "\xeb\x04", 2}, //jmp 0x26f772
+    {0x54e1f0, "\xeb", 1}, //jmp (destination unchanged)
+    {0x536e1d, "\x90\xe9", 2}, //nop; jmp (destination unchanged)
+    {0x54db8f, "\xeb", 1}, //jmp (destination unchanged)
+    {0x55137a, "\xc8\x00\x00\x00", 4}, //(jmp opcode unchanged) 0x551446
+    {0x1a12d1, "\xe8\xea\x88\x47\x00\x31\xc9\xff\xc1\xe9\xf4\x02\x00\x00", 14}, //call 0x619bc0; xor ecx, ecx; inc ecx; jmp 0x1a15d3
+    {0x1a15d3, "\x83\xf8\x02\x0f\x43\xc1\xe9\x29\xfa\xff\xff", 11}, //cmp eax, 2; cmovae eax, ecx; jmp 0x1a1007
+    {0x1a0fe5, "\xe9\xe7\x02\x00\x00", 5}, //jmp 0x1a12d1
+    {0x267DBB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x267E52, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x267F6B, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x26803F, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x2684A8, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x268679, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x268A45, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x268AE2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x532897, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x5329AC, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x534937, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+static struct shellcore_patch shellcore_patches_450[] = {
+    {0x97595e, "\x52\xeb\x08\x66\x90", 5}, //push rdx; jmp 0x975969; 2-byte nop
+    {0x975969, "\xe8\xd2\xfb\xff\xff\x58\xc3", 7}, //call 0x975540; pop rax; ret
+    {0x975531, "\x31\xc0\x50\xeb\xe3", 5}, //xor eax, eax; push rax; jmp 0x975519
+    {0x975519, "\xe8\x22\x00\x00\x00\x58\xc3", 7}, //call 0x975540; pop rax; ret
+    {0x530f42, "\xeb\x04", 2}, //jmp 0x530f48
+    {0x26fa8c, "\xeb\x04", 2}, //jmp 0x26fa16
+    {0x54eb60, "\xeb", 1}, //jmp (destination unchanged)
+    {0x5376bd, "\x90\xe9", 2}, //nop; jmp (destination unchanged)
+    {0x54e4ff, "\xeb", 1}, //jmp (destination unchanged)
+    {0x551cea, "\xc8\x00\x00\x00", 4}, //(jmp opcode unchanged) 0x551db6
+    {0x1a12d1, "\xe8\xfa\x88\x47\x00\x31\xc9\xff\xc1\xe9\xf4\x02\x00\x00", 14}, //call 0x619bd0; xor ecx, ecx; inc ecx; jmp 0x1a15d3
+    {0x1a15d3, "\x83\xf8\x02\x0f\x43\xc1\xe9\x29\xfa\xff\xff", 11}, //cmp eax, 2; cmovae eax, ecx; jmp 0x1a1007
+    {0x1a0fe5, "\xe9\xe7\x02\x00\x00", 5}, //jmp 0x1a12d1
+    {0x2684EB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x268582, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x26869B, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x26876F, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x268BD8, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x268DA9, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x269175, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x269212, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x533147, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x53325C, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x5351E7, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+static struct shellcore_patch shellcore_patches_451[] = {
+    {0x97596e, "\x52\xeb\x08\x66\x90", 5}, //push rdx; jmp 0x975979; 2-byte nop
+    {0x975979, "\xe8\xd2\xfb\xff\xff\x58\xc3", 7}, //call 0x975550; pop rax; ret
+    {0x975541, "\x31\xc0\x50\xeb\xe3", 5}, //xor eax, eax; push rax; jmp 0x975529
+    {0x975529, "\xe8\x22\x00\x00\x00\x58\xc3", 7}, //call 0x975550; pop rax; ret
+    {0x530f52, "\xeb\x04", 2}, //jmp 0x530f58
+    {0x26fa8c, "\xeb\x04", 2}, //jmp 0x26fa16
+    {0x54eb70, "\xeb", 1}, //jmp (destination unchanged)
+    {0x5376cd, "\x90\xe9", 2}, //nop; jmp (destination unchanged)
+    {0x54e50f, "\xeb", 1}, //jmp (destination unchanged)
+    {0x551cfa, "\xc8\x00\x00\x00", 4}, //(jmp opcode unchanged) 0x551dc6
+    {0x1a12d1, "\xe8\x0a\x89\x47\x00\x31\xc9\xff\xc1\xe9\xf4\x02\x00\x00", 14}, //call 0x619be0; xor ecx, ecx; inc ecx; jmp 0x1a15d3
+    {0x1a15d3, "\x83\xf8\x02\x0f\x43\xc1\xe9\x29\xfa\xff\xff", 11}, //cmp eax, 2; cmovae eax, ecx; jmp 0x1a1007
+    {0x1a0fe5, "\xe9\xe7\x02\x00\x00", 5}, //jmp 0x1a12d1
+    {0x2684EB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x268582, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x26869B, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x26876F, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x268BD8, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x268DA9, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x269175, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x269212, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x533137, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x53324C, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x5351D7, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+static struct shellcore_patch shellcore_patches_500[] = {
+    {0xa2e62e, "\x52\xeb\x08\x66\x90", 5},
+    {0xa2e639, "\xe8\x22\xfb\xff\xff\x58\xc3", 7},
+    {0xa2e151, "\x31\xc0\x50\xeb\xe3", 5},
+    {0xa2e139, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
+    {0x59c2b8, "\xeb\x04", 2},
+    {0x2a013c, "\xeb\x04", 2},
+    {0x2a054c, "\xeb\x04", 2},
+    {0x5b9377, "\xeb", 1},
+    {0x5a2f1d, "\x90\xe9", 2},
+    {0x5ba0af, "\xeb", 1},
+    {0x5bb613, "\x3b\x01\x00\x00", 4},
+    {0x1c33c1, "\xe8\xea\x7d\x4c\x00\x31\xc9\xff\xc1\xe9\x24\x02\x00\x00", 14},
+    {0x1c35f3, "\x83\xf8\x02\x0f\x43\xc1\xe9\xca\xfb\xff\xff", 11},
+    {0x1c30ee, "\xe9\xce\x02\x00\x00", 5},
+    {0x298CDB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x298D58, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x298E5B, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x298F2F, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x299396, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x299567, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x299935, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x2999D2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x59D747, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x59D85C, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x5A02E0, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+static struct shellcore_patch shellcore_patches_502[] = {
+    {0xa2e61e, "\x52\xeb\x08\x66\x90", 5},
+    {0xa2e629, "\xe8\x22\xfb\xff\xff\x58\xc3", 7},
+    {0xa2e141, "\x31\xc0\x50\xeb\xe3", 5},
+    {0xa2e129, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
+    {0x59c2a8, "\xeb\x04", 2},
+    {0x2a013c, "\xeb\x04", 2},
+    {0x2a054c, "\xeb\x04", 2},
+    {0x5b9367, "\xeb", 1},
+    {0x5a2f0d, "\x90\xe9", 2},
+    {0x5ba09f, "\xeb", 1},
+    {0x5bb603, "\x3b\x01\x00\x00", 4},
+    {0x1c33c1, "\xe8\xda\x7d\x4c\x00\x31\xc9\xff\xc1\xe9\x24\x02\x00\x00", 14},
+    {0x1c35f3, "\x83\xf8\x02\x0f\x43\xc1\xe9\xca\xfb\xff\xff", 11},
+    {0x1c30ee, "\xe9\xce\x02\x00\x00", 5},
+    {0x298CDB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x298D58, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x298E5B, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x298F2F, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x299396, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x299567, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x299935, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x2999D2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x59D737, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x59D84C, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x5A02D0, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+static struct shellcore_patch shellcore_patches_510[] = {
+    {0xa30fde, "\x52\xeb\x08\x66\x90", 5},
+    {0xa30fe9, "\xe8\x22\xfb\xff\xff\x58\xc3", 7},
+    {0xa30b01, "\x31\xc0\x50\xeb\xe3", 5},
+    {0xa30ae9, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
+    {0x59ed78, "\xeb\x04", 2},
+    {0x2a100c, "\xeb\x04", 2},
+    {0x2a141c, "\xeb\x04", 2},
+    {0x5bbe37, "\xeb", 1},
+    {0x5a59dd, "\x90\xe9", 2},
+    {0x5bcb6f, "\xeb", 1},
+    {0x5be0d3, "\x3b\x01\x00\x00", 4},
+    {0x1c3511, "\xe8\xea\xac\x4c\x00\x31\xc9\xff\xc1\xe9\x24\x02\x00\x00", 14},
+    {0x1c3743, "\x83\xf8\x02\x0f\x43\xc1\xe9\xca\xfb\xff\xff", 11},
+    {0x1c323e, "\xe9\xce\x02\x00\x00", 5},
+    {0x299BAB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x299C28, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x299D2B, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x298F2F, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x29A266, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x29A437, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x29A805, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x29A8A2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x5A0207, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x5A031C, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x5A2DA0, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+static struct shellcore_patch shellcore_patches_550[] = {
+    {0xa319ee, "\x52\xeb\x08\x66\x90", 5},
+    {0xa319f9, "\xe8\x22\xfb\xff\xff\x58\xc3", 7},
+    {0xa31511, "\x31\xc0\x50\xeb\xe3", 5},
+    {0xa314f9, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
+    {0x59ed78, "\xeb\x04", 2},
+    {0x2a100c, "\xeb\x04", 2},
+    {0x2a141c, "\xeb\x04", 2},
+    {0x5bbe37, "\xeb", 1},
+    {0x5a59dd, "\x90\xe9", 2},
+    {0x5bcb6f, "\xeb", 1},
+    {0x5be0d3, "\x3b\x01\x00\x00", 4},
+    {0x1c3511, "\xe8\xba\xb4\x4c\x00\x31\xc9\xff\xc1\xe9\x24\x02\x00\x00", 14},
+    {0x1c3743, "\x83\xf8\x02\x0f\x43\xc1\xe9\xca\xfb\xff\xff", 11},
+    {0x1c323e, "\xe9\xce\x02\x00\x00", 5},
+    {0x299BAB, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x299C28, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x299D2B, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x299DFF, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x29A266, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x29A437, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x29A805, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x29A8A2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x5A0207, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x5A031C, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x5A2DA0, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+static struct shellcore_patch shellcore_patches_600[] = {
+    {0xa7d30e, "\x52\xeb\x08\x66\x90", 5}, // NOTE: Shouldn't need the \x66\x90.... on any FW
+    {0xa7d319, "\xe8\x82\xfa\xff\xff\x58\xc3", 7},
+    {0xa7cd91, "\x31\xc0\x50\xeb\xe3", 5},
+    {0xa7cd79, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
+    {0x5d2bb4, "\xeb\x04", 2},
+    {0x2c0982, "\xeb\x04", 2},
+    {0x2c0dc2, "\xeb\x04", 2},
+    {0x5f01bf, "\xeb", 1},
+    {0x5d9c0d, "\x90\xe9", 2},
+    {0x5f0ef0, "\xeb", 1},
+    {0x5f248a, "\x3b\x01\x00\x00", 4},
+    {0x1d8c71, "\xe8\x7a\xb4\x4e\x00\x31\xc9\xff\xc1\xe9\x24\x02\x00\x00", 14},
+    {0x1d8ea3, "\x83\xf8\x02\x0f\x43\xc1\xe9\xc5\xfb\xff\xff", 11},
+    {0x1d897e, "\xe9\xee\x02\x00\x00", 5},
+    {0x2b93cb, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x2b9448, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x2b954b, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x2b961f, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x2b9a80, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x2b9c50, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x2ba025, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x2ba0c2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x5d42f7, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x5d440c, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x5d7270, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+static struct shellcore_patch shellcore_patches_602[] = {
+    {0xa7d2ae, "\x52\xeb\x08\x66\x90", 5}, // NOTE: Shouldn't need the \x66\x90.... on any FW
+    {0xa7d2b9, "\xe8\x82\xfa\xff\xff\x58\xc3", 7},
+    {0xa7cd31, "\x31\xc0\x50\xeb\xe3", 5},
+    {0xa7cd19, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
+    {0x5d2bb4, "\xeb\x04", 2},
+    {0x2c0982, "\xeb\x04", 2},
+    {0x2c0dc2, "\xeb\x04", 2},
+    {0x5f01bf, "\xeb", 1},
+    {0x5d9c0d, "\x90\xe9", 2},
+    {0x5f0ef0, "\xeb", 1},
+    {0x5f248a, "\x3b\x01\x00\x00", 4},
+    {0x1d8c71, "\xe8\x1a\xb4\x4e\x00\x31\xc9\xff\xc1\xe9\x24\x02\x00\x00", 14},
+    {0x1d8ea3, "\x83\xf8\x02\x0f\x43\xc1\xe9\xc5\xfb\xff\xff", 11},
+    {0x1d897e, "\xe9\xee\x02\x00\x00", 5},
+    {0x2b93cb, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x2b9448, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x2b954b, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x2b961f, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x2b9a80, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x2b9c50, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x2ba025, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x2ba0c2, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x5d42f7, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x5d440c, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x5d7270, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+static struct shellcore_patch shellcore_patches_650[] = {
+    {0xa7dade, "\x52\xeb\x08\x66\x90", 3}, // NOTE: Shouldn't need the \x66\x90.... on any FW
+    {0xa7dae9, "\xe8\x82\xfa\xff\xff\x58\xc3", 7},
+    {0xa7d561, "\x31\xc0\x50\xeb\xe3", 5},
+    {0xa7d549, "\xe8\x22\x00\x00\x00\x58\xc3", 7},
+    {0x5d2c24, "\xeb\x04", 2},
+    {0x2c09f2, "\xeb\x04", 2},
+    {0x2c0e32, "\xeb\x04", 2},
+    {0x5f022f, "\xeb", 1},
+    {0x5d9c7d, "\x90\xe9", 2},
+    {0x5f0f60, "\xeb", 1},
+    {0x5f24fa, "\x3b\x01\x00\x00", 4},
+    {0x1d8c71, "\xe8\xea\xaf\x4e\x00\x31\xc9\xff\xc1\xe9\x24\x02\x00\x00", 14},
+    {0x1d8ea3, "\x83\xf8\x02\x0f\x43\xc1\xe9\xc5\xfb\xff\xff", 11},
+    {0x1d897e, "\xe9\xee\x02\x00\x00", 5},
+    {0x2b943b, "\x90\xE9", 2}, //PS4 Disc Installer Patch 1
+    {0x2b94b8, "\x90\xE9", 2}, //PS5 Disc Installer Patch 1
+    {0x2b95bb, "\xEB", 1}, //PS4 PKG Installer Patch 1
+    {0x2b968f, "\xEB", 1}, //PS5 PKG Installer Patch 1
+    {0x2b9af0, "\x90\xE9", 2}, //PS4 PKG Installer Patch 2
+    {0x2b9cc0, "\x90\xE9", 2}, //PS5 PKG Installer Patch 2
+    {0x2ba095, "\x90\xE9", 2}, //PS4 PKG Installer Patch 3
+    {0x2ba132, "\x90\xE9", 2}, //PS5 PKG Installer Patch 3
+    {0x5d4367, "\xEB", 1}, //PS4 PKG Installer Patch 4
+    {0x5d447c, "\xEB", 1}, //PS5 PKG Installer Patch 4
+    {0x5d72e0, "\x48\x31\xC0\xC3", 4}, //PKG Installer
+};
+
+extern char _start[];
+
+static void relocate_shellcore_patches(struct shellcore_patch* patches, size_t n_patches)
+{
+    static uint64_t start_nonreloc = (uint64_t)_start;
+    uint64_t start = (uint64_t)_start;
+    for(size_t i = 0; i < n_patches; i++)
+        patches[i].data += start - start_nonreloc;
+}
+
+uint64_t get_eh_frame_offset(const char* path)
+{
+    int fd = open(path, O_RDONLY);
+    if(!fd)
+        return 0;
+    unsigned long long shit[4];
+    if(read(fd, shit, sizeof(shit)) != sizeof(shit))
+    {
+        close(fd);
+        return 0;
+    }
+    off_t o2 = 0x20*((shit[3]&0xffff)+1);
+    lseek(fd, o2, SEEK_SET);
+    unsigned long long ehdr[8];
+    if(read(fd, ehdr, sizeof(ehdr)) != sizeof(ehdr))
+    {
+        close(fd);
+        return 0;
+    }
+    off_t phdr_offset = o2 + ehdr[4];
+    int nphdr = ehdr[7] & 0xffff;
+    unsigned long long eh_frame = 0;
+    lseek(fd, phdr_offset, SEEK_SET);
+    for(int i = 0; i < nphdr; i++)
+    {
+        unsigned long long phdr[7];
+        if(read(fd, phdr, sizeof(phdr)) != sizeof(phdr))
+        {
+            close(fd);
+            return 0;
+        }
+        unsigned long long addr = phdr[2];
+        int ptype = phdr[0] & 0xffffffff;
+        if(ptype == 0x6474e550)
+            eh_frame = addr;
+    }
+    close(fd);
+    return eh_frame;
+}
+
+static const struct shellcore_patch* get_shellcore_patches(size_t* n_patches)
+{
+#ifdef FIRMWARE_PORTING
+    *n_patches = 1;
+    return 0;
+#endif
+#define FW(x)\
+    case 0x ## x:\
+        *n_patches = sizeof(shellcore_patches_ ## x) / sizeof(*shellcore_patches_ ## x);\
+        patches = shellcore_patches_ ## x;\
+        break
+    uint32_t ver = r0gdb_get_fw_version() >> 16;
+    struct shellcore_patch* patches;
+    switch(ver)
+    {
+    FW(300);
+    FW(310);
+    FW(320);
+    FW(321);
+    FW(400);
+    FW(402);
+    FW(403);
+    FW(450);
+    FW(451);
+    FW(500);
+    FW(502);
+    FW(510);
+    FW(550);
+    FW(600);
+    FW(602);
+    FW(650);
+    default:
+        *n_patches = 1;
+        return 0;
+    }
+#undef FW
+    relocate_shellcore_patches(patches, *n_patches);
+    return patches;
+}
+
+static void patch_shellcore(const struct shellcore_patch* patches, size_t n_patches, uint64_t eh_frame_offset)
+{
+    int pid = find_proc("SceShellCore");
+    struct module_info_ex mod_info;
+    mod_info.st_size = sizeof(mod_info);
+    remote_syscall(pid, SYS_dynlib_get_info_ex, 0, 0, &mod_info);
+    uint64_t shellcore_base = mod_info.eh_frame_hdr_addr - eh_frame_offset;
+    for(int i = 0; i < n_patches; i++)
+    {
+        uint64_t arg1[4] = {1, 0x13};
+        uint64_t arg2[8] = {pid, shellcore_base + patches[i].offset, (uint64_t)patches[i].data, patches[i].sz};
+        uint64_t arg3[4] = {0};
+        kekcall((uint64_t)arg1, (uint64_t)arg2, (uint64_t)arg3, 0, 0, 0, SYS_mdbg_call);
+    }
+}
+
+#ifndef DEBUG
+#define dbg_enter()
+#define gdb_remote_syscall(...)
+#endif
+
+void patch_app_db(void);
+
+#ifdef FIRMWARE_PORTING
+static struct PARASITES(100) parasites_empty = {};
+#endif
+
+static struct PARASITES(12) parasites_300 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 12,
+    .parasites = {
+        /* syscall parasites */
+        {-0x7e96ad, RDI},
+        {-0x38214c, RSI},
+        {-0x38210c, RSI},
+        /* fself parasites */
+        {-0x970280, RDI},
+        {-0x2c922a, RAX},
+        {-0x2c90f0, RAX},
+        {-0x2c8e0e, RAX},
+        {-0x2c8cc6, R10},
+        {-0x2c8b8d, RAX},
+        {-0x2c881e, RDX},
+        {-0x2c8812, RCX},
+        {-0x2c86a6, RAX},
+        /* unsorted parasites */
+    }
+};
+
+static struct PARASITES(12) parasites_310 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 12,
+    .parasites = {
+        /* syscall parasites */
+        {-0x7e966d, RDI},
+        {-0x38210c, RSI},
+        {-0x3820cc, RSI},
+        /* fself parasites */
+        {-0x970280, RDI},
+        {-0x2c91ea, RAX},
+        {-0x2c90b0, RAX},
+        {-0x2c8dce, RAX},
+        {-0x2c8c86, R10},
+        {-0x2c8b4d, RAX},
+        {-0x2c87de, RDX},
+        {-0x2c87d2, RCX},
+        {-0x2c8666, RAX},
+        /* unsorted parasites */
+    }
+};
+
+static struct PARASITES(12) parasites_320 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 12,
+    .parasites = {
+        /* syscall parasites */
+        {-0x7e931d, RDI},
+        {-0x381dbc, RSI},
+        {-0x381d7c, RSI},
+        /* fself parasites */
+        {-0x96ff40, RDI},
+        {-0x2c8e9a, RAX},
+        {-0x2c8d60, RAX},
+        {-0x2c8a7e, RAX},
+        {-0x2c8936, R10},
+        {-0x2c87fd, RAX},
+        {-0x2c848e, RDX},
+        {-0x2c8482, RCX},
+        {-0x2c8316, RAX},
+        /* unsorted parasites */
+    }
+};
+
+static struct PARASITES(12) parasites_321 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 12,
+    .parasites = {
+        /* syscall parasites */
+        {-0x7e931d, RDI},
+        {-0x381dbc, RSI},
+        {-0x381d7c, RSI},
+        /* fself parasites */
+        {-0x96ff40, RDI},
+        {-0x2c8e9a, RAX},
+        {-0x2c8d60, RAX},
+        {-0x2c8a7e, RAX},
+        {-0x2c8936, R10},
+        {-0x2c87fd, RAX},
+        {-0x2c848e, RDX},
+        {-0x2c8482, RCX},
+        {-0x2c8316, RAX},
+        /* unsorted parasites */
+    }
+};
+
+static struct PARASITES(12) parasites_400 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 12,
+    .parasites = {
+        /* syscall parasites */
+        {-0x80284d, RDI},
+        {-0x388a8c, RSI},
+        {-0x388a4c, RSI},
+        /* fself parasites */
+        {-0x990b10, RDI},
+        {-0x2cd36a, RAX},
+        {-0x2cd230, RAX},
+        {-0x2ccf53, RAX},
+        {-0x2cce16, R10},
+        {-0x2cccdd, RAX},
+        {-0x2cc96e, RDX},
+        {-0x2cc962, RCX},
+        {-0x2cc7f6, RAX},
+        /* unsorted parasites */
+    }
+};
+
+static struct PARASITES(12) parasites_402 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 12,
+    .parasites = {
+        /* syscall parasites */
+        {-0x80284d, RDI},
+        {-0x388a3c, RSI},
+        {-0x3889fc, RSI},
+        /* fself parasites */
+        {-0x990b10, RDI},
+        {-0x2cd31a, RAX},
+        {-0x2cd1e0, RAX},
+        {-0x2ccf03, RAX},
+        {-0x2ccdc6, R10},
+        {-0x2ccc8d, RAX},
+        {-0x2cc91e, RDX},
+        {-0x2cc912, RCX},
+        {-0x2cc7a6, RAX},
+        /* unsorted parasites */
+    }
+};
+
+static struct PARASITES(14) parasites_403 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 14,
+    .parasites = {
+        /* syscall parasites */
+        {-0x80284d, RDI},
+        {-0x3889ac, RSI},
+        {-0x38896c, RSI},
+        /* fself parasites */
+        {-0x2cc716, RAX},
+        {-0x2cd28a, RAX},
+        {-0x2cd150, RAX},
+        {-0x2cce73, RAX},
+        {-0x2ccbfd, RAX},
+        {-0x2cc88e, RDX},
+        {-0x2cc882, RCX},
+        {-0x990b10, RDI},
+        {-0x2ccd36, R10},
+        /* unsorted parasites */
+        {-0x479a0e, RAX},
+        {-0x479a0e, R15},
+    }
+};
+
+static struct PARASITES(14) parasites_450 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 14,
+    .parasites = {
+        /* syscall parasites */
+        {-0x80281d, RDI},
+        {-0x38885c, RSI},
+        {-0x38881c, RSI},
+        /* fself parasites */
+        {-0x2cc566, RAX},
+        {-0x2cd0da, RAX},
+        {-0x2ccfa0, RAX},
+        {-0x2cccc3, RAX},
+        {-0x2cca4d, RAX},
+        {-0x2cc6de, RDX},
+        {-0x2cc6d2, RCX},
+        {-0x990b10, RDI},
+        {-0x2ccb86, R10},
+        /* unsorted parasites */
+        {-0x4798de, RAX},
+        {-0x4798de, R15},
+    }
+};
+
+static struct PARASITES(14) parasites_451 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 14,
+    .parasites = {
+        /* syscall parasites */
+        {-0x80281d, RDI},
+        {-0x3884bc, RSI},
+        {-0x38847c, RSI},
+        /* fself parasites */
+        {-0x2cc1c6, RAX},
+        {-0x2ccd3a, RAX},
+        {-0x2ccc00, RAX},
+        {-0x2cc923, RAX},
+        {-0x2cc6ad, RAX},
+        {-0x2cc33e, RDX},
+        {-0x2cc332, RCX},
+        {-0x990b10, RDI},
+        {-0x2cc7e6, R10},
+        /* unsorted parasites */
+        {-0x47953e, RAX},
+        {-0x47953e, R15},
+    }
+};
+
+static struct PARASITES(14) parasites_500 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 14,
+    .parasites = {
+        /* syscall parasites */
+        //{-0x845d3c, RDI},  //?
+        {-0x835D3C, R13}, // ? 
+        {-0x39B0EC, RSI},
+        {-0x39B0AC, RSI},
+        /* fself parasites */
+        {-0x2DD156, RAX},
+        {-0x2DDCAA, RAX},
+        {-0x2DDB70, RAX},
+        {-0x2DD8D3, RAX},
+        {-0x2DD5ED, RAX},
+        {-0x2DD2CE, RDX},
+        {-0x2DD2C2, RCX},
+        {-0x9C6250, RDI},
+        {-0x2DD726, R10},
+        /* unsorted parasites */
+        {-0x48BD2E, RAX},
+        {-0x48BD2E, R15},
+    }
+};
+
+//Dont Have 5.02 Kernel Using Same As 5.00
+static struct PARASITES(14) parasites_502 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 14,
+    .parasites = {
+        /* syscall parasites */
+        //{-0x845d3c, RDI},  //?
+        {-0x835D3C, R13}, // ? 
+        {-0x39B0EC, RSI},
+        {-0x39B0AC, RSI},
+        /* fself parasites */
+        {-0x2DD156, RAX},
+        {-0x2DDCAA, RAX},
+        {-0x2DDB70, RAX},
+        {-0x2DD8D3, RAX},
+        {-0x2DD5ED, RAX},
+        {-0x2DD2CE, RDX},
+        {-0x2DD2C2, RCX},
+        {-0x9C6250, RDI},
+        {-0x2DD726, R10},
+        /* unsorted parasites */
+        {-0x48BD2E, RAX},
+        {-0x48BD2E, R15},
+    }
+};
+
+static struct PARASITES(14) parasites_510 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 14,
+    .parasites = {
+        /* syscall parasites */
+        //{-0x845d3c, RDI},  //?
+        {-0x835d3c, R13}, // ? 
+        {-0x39AF1C, RSI},
+        {-0x39AEDC, RSI},
+        /* fself parasites */
+        {-0x2DCF06, RAX},
+        {-0x2DDA5A, RAX},
+        {-0x2DD920, RAX},
+        {-0x2DD683, RAX},
+        {-0x2DD39D, RAX},
+        {-0x2DD07E, RDX},
+        {-0x2DD072, RCX},
+        {-0x9C6250, RDI},
+        {-0x2DD4D6, R10},
+        /* unsorted parasites */
+        {-0x48BB5E, RAX},
+        {-0x48BB5E, R15},
+    }
+};
+
+static struct PARASITES(14) parasites_550 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 14,
+    .parasites = {
+        /* syscall parasites */
+        // {-0x845c8c, RDI}, //data 0x40A374
+        {-0x835c8c, R13}, //data 0x40A374
+        {-0x39a12c, RSI}, //data 0x8A5ED4
+        {-0x39a0ec, RSI}, //data 0x8A5F14
+        /* fself parasites */
+        {-0x2dc116, RAX}, //data 0x963EEA
+        {-0x2dcc6a, RAX}, //data 0x963396
+        {-0x2dcb30, RAX}, //data 0x9634D0
+        {-0x2dc893, RAX}, //data 0x96376D
+        {-0x2dc5ad, RAX}, //data 0x963A53
+        {-0x2dc28e, RDX}, //data 0x963D72
+        {-0x2dc282, RCX}, //data 0x963D7E
+        {-0x9c6290, RDI}, //data 0x279D70
+        {-0x2dc6e6, R10}, //data 0x96391A
+        /* unsorted parasites */
+        {-0x48ad6e, RAX}, //data 0x7B5292
+        {-0x48ad6e, R15}, //data 0x7B5292
+    }
+};
+
+static struct PARASITES(14) parasites_600 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 14,
+    .parasites = {
+        /* syscall parasites */
+        //{-0x844fcc, RDI}, //data 0x41B034
+        {-0x844fcc, R13}, //data 0x41B034
+        {-0x39bb9c, RSI}, //data 0x8C4464
+        {-0x39bb5c, RSI}, //data 0x8C44A4
+        /* fself parasites */
+        {-0x2da786, RAX}, //data 0x98587A
+        {-0x2db2da, RAX}, //data 0x984D26
+        {-0x2db1a0, RAX}, //data 0x984E60
+        {-0x2daf03, RAX}, //data 0x9850FD
+        {-0x2dac1d, RAX}, //data 0x9853E3
+        {-0x2da8fe, RDX}, //data 0x985702
+        {-0x2da8f2, RCX}, //data 0x98570E
+        {-0x9dcad0, RDI}, //data 0x283530
+        {-0x2dad56, R10}, //data 0x9852AA
+        /* unsorted parasites */
+        {-0x48feae, RAX}, //data 0x7D0152
+        {-0x48feae, R15}, //data 0x7D0152
+    }
+};
+
+static struct PARASITES(14) parasites_602 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 14,
+    .parasites = {
+        /* syscall parasites */
+        //{-0x844fcc, RDI}, //data 0x41B034
+        {-0x844fcc, R13}, //data 0x41B034
+        {-0x39bbbc, RSI}, //data 0x8C4444
+        {-0x39bb7c, RSI}, //data 0x8C4484
+        /* fself parasites */
+        {-0x2da7a6, RAX}, //data 0x98585A
+        {-0x2db2fa, RAX}, //data 0x984D06
+        {-0x2db1c0, RAX}, //data 0x984E40
+        {-0x2daf23, RAX}, //data 0x9850DD
+        {-0x2dac3d, RAX}, //data 0x9853C3
+        {-0x2da91e, RDX}, //data 0x9856E2
+        {-0x2da912, RCX}, //data 0x9856EE
+        {-0x9dcad0, RDI}, //data 0x283530
+        {-0x2dad76, R10}, //data 0x98528A
+        /* unsorted parasites */
+        {-0x48fece, RAX}, //data 0x7D0132
+        {-0x48fece, R15}, //data 0x7D0132
+    }
+};
+
+static struct PARASITES(14) parasites_650 = {
+    .lim_syscall = 3,
+    .lim_fself = 12,
+    .lim_total = 14,
+    .parasites = {
+        /* syscall parasites */
+        //{-0x844fac, RDI}, //data 0x41B054
+        {-0x844fac, R13}, //data 0x41B054
+        {-0x39b92c, RSI}, //data 0x8C46D4
+        {-0x39b8ec, RSI}, //data 0x8C4714
+        /* fself parasites */
+        {-0x2da016, RAX}, //data 0x985FEA
+        {-0x2dab6a, RAX}, //data 0x985496
+        {-0x2daa30, RAX}, //data 0x9855D0
+        {-0x2da793, RAX}, //data 0x98586D
+        {-0x2da4ad, RAX}, //data 0x985B53
+        {-0x2da18e, RDX}, //data 0x985E72
+        {-0x2da182, RCX}, //data 0x985E7E
+        {-0x9dcad0, RDI}, //data 0x283530
+        {-0x2da5e6, R10}, //data 0x985A1A
+        /* unsorted parasites */
+        {-0x48fd0e, RAX}, //data 0x7D02F2
+        {-0x48fd0e, R15}, //data 0x7D02F2
+    }
+};
+
+static struct parasite_desc* get_parasites(size_t* desc_size)
+{
+    uint32_t ver = r0gdb_get_fw_version() >> 16;
+    switch(ver)
+    {
+#ifndef FIRMWARE_PORTING
+    case 0x300:
+        *desc_size = sizeof(parasites_300);
+        return (void*)&parasites_300;
+    case 0x310:
+        *desc_size = sizeof(parasites_310);
+        return (void*)&parasites_310;
+    case 0x320:
+        *desc_size = sizeof(parasites_320);
+        return (void*)&parasites_320;
+    case 0x321:
+        *desc_size = sizeof(parasites_321);
+        return (void*)&parasites_321;
+    case 0x400:
+        *desc_size = sizeof(parasites_400);
+        return (void*)&parasites_400;
+    case 0x402:
+        *desc_size = sizeof(parasites_402);
+        return (void*)&parasites_402;
+    case 0x403:
+        *desc_size = sizeof(parasites_403);
+        return (void*)&parasites_403;
+    case 0x450:
+        *desc_size = sizeof(parasites_450);
+        return (void*)&parasites_450;
+    case 0x451:
+        *desc_size = sizeof(parasites_451);
+        return (void*)&parasites_451;
+    case 0x500:
+        *desc_size = sizeof(parasites_500);
+        return (void*)&parasites_500;
+    case 0x502:
+        *desc_size = sizeof(parasites_502);
+        return (void*)&parasites_502;
+    case 0x510:
+        *desc_size = sizeof(parasites_510);
+        return (void*)&parasites_510;
+    case 0x550:
+        *desc_size = sizeof(parasites_550);
+        return (void*)&parasites_550;
+    case 0x600:
+        *desc_size = sizeof(parasites_600);
+        return (void*)&parasites_600;
+    case 0x602:
+        *desc_size = sizeof(parasites_602);
+        return (void*)&parasites_602;
+    case 0x650:
+        *desc_size = sizeof(parasites_650);
+        return (void*)&parasites_650;
+    default:
+        return 0;
+#else
+    default:
+        *desc_size = sizeof(parasites_empty);
+        return (void*)&parasites_empty;
+#endif
+    }
+}
+
+static inline uint64_t rdtsc(void)
+{
+    uint32_t eax, edx;
+    asm volatile("rdtsc":"=a"(eax),"=d"(edx)::"memory");
+    return (uint64_t)edx << 32 | eax;
+}
+
+//without kstuff = 2308259098
+//with kstuff and in-kelf checks = 86633419408 (37.5 times slower)
+//with kstuff and no in-kelf checks = 68129284331 (39.5 times slower)
+uint64_t bench(void)
+{
+    uint64_t start = rdtsc();
+    for(int i = 0; i < 1000000; i++)
+        getpid();
+    return rdtsc() - start;
+}
+
+int main(void* ds, int a, int b, uintptr_t c, uintptr_t d)
+{
+    if(r0gdb_init(ds, a, b, c, d))
+    {
+        #ifndef FIRMWARE_PORTING
+        notify("your firmware is not supported (prosper0gdb)");
+        return 1;
+        #endif
+    }
+#ifdef PS5KEK
+    extern uint64_t p_syscall;
+    getpid();
+    p_kekcall = (void*)p_syscall;
+#else    
+    p_kekcall = (char*)dlsym((void*)0x1, "getpid") + 7;
+#endif
+    if(!kekcall(0, 0, 0, 0, 0, 0, 0xffffffff00000027))
+    {
+        notify("ps5-kstuff is already loaded");
+        return 1;
+    }
+    size_t desc_size = 0;
+    struct parasite_desc* desc = get_parasites(&desc_size);
+    if(!desc)
+    {
+        notify("your firmware is not supported (ps5-kstuff)");
+        return 1;
+    }
+    size_t n_shellcore_patches;
+    uint64_t shellcore_eh_frame_offset = get_eh_frame_offset("/system/vsh/SceShellCore.elf");
+    const struct shellcore_patch* shellcore_patches = get_shellcore_patches(&n_shellcore_patches);
+    if(n_shellcore_patches && !shellcore_patches)
+    {
+#ifdef FIRMWARE_PORTING
+        n_shellcore_patches = 0;
+#else
+        notify("your firmware is not supported (shellcore)");
+        return 1;
+#endif
+    }
+#ifdef FIRMWARE_PORTING
+    dbg_enter();
+#endif
+    uint64_t percpu_ist4[NCPUS];
+    for(int cpu = 0; cpu < NCPUS; cpu++)
+        copyout(&percpu_ist4[cpu], TSS(cpu)+28+4*8, 8);
+    uint64_t int1_handler;
+    copyout(&int1_handler, IDT+16*1, 2);
+    copyout((char*)&int1_handler + 2, IDT+16*1+6, 6);
+    uint64_t int13_handler;
+    copyout(&int13_handler, IDT+16*13, 2);
+    copyout((char*)&int13_handler + 2, IDT+16*13+6, 6);
+#ifndef FIRMWARE_PORTING
+    dbg_enter();
+#endif
+    gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)"allocating kernel memory... ", (uintptr_t)28);
+    for(int i = 0; i < 0x300; i += 2)
+        r0gdb_kmalloc(0x100);
+    for(int i = 0; i < 2; i += 2)
+    {
+        while(!mem_blocks[i])
+            mem_blocks[i] = r0gdb_kmalloc(1<<23);
+        mem_blocks[i+1] = (mem_blocks[i] ? mem_blocks[i] + (1<<23) : 0);
+    }
+    gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)"done\n", (uintptr_t)5);
+    uint64_t comparison_table_base = (uint64_t)kmalloc(131072);
+    uint64_t comparison_table = ((comparison_table_base - 1) | 65535) + 1;
+    uint8_t* comparison_table_data = mmap(0, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, -1, 0);
+    for(size_t i = 0; i < 256; i++)
+        for(size_t j = 0; j < 256; j++)
+            comparison_table_data[256*i+j] = 8*(1+(i>j)-(i<j));
+    //trying to copyin the whole 64k at once hangs here for some reason
+    for(size_t i = 0; i < 256; i++)
+        copyin(comparison_table+256*i, comparison_table_data+256*i, 256);
+    uint64_t shared_area;
+    if(comparison_table - comparison_table_base > 4096)
+        shared_area = comparison_table - 4096;
+    else
+        shared_area = comparison_table + 65536;
+    kmemzero((void*)shared_area, 4096);
+    uint64_t uelf_virt_base = (find_empty_pml4_index(0) << 39) | (-1ull << 48);
+    uint64_t dmem_virt_base = (find_empty_pml4_index(1) << 39) | (-1ull << 48);
+    shared_area = virt2phys(shared_area) + dmem_virt_base;
+    uint64_t kelf_parasite_desc = (uint64_t)kmalloc(8192);
+    kelf_parasite_desc = ((kelf_parasite_desc - 1) | 4095) + 1;
+    for(int i = 0; i < desc->lim_total; i++)
+        desc->parasites[i].address += kdata_base;
+    kmemcpy((void*)kelf_parasite_desc, desc, desc_size);
+    uint64_t uelf_parasite_desc = virt2phys(kelf_parasite_desc) + dmem_virt_base;
+    volatile int zero = 0; //hack to force runtime calculation of string pointers
+    const char* symbols[] = {
+        "comparison_table"+zero,
+        "dmem"+zero,
+        "parasites"+zero,
+        "parasites_kmem"+zero,
+        "int1_handler"+zero,
+        "int13_handler"+zero,
+        ".ist_errc"+zero,
+        ".ist_noerrc"+zero,
+        ".ist4"+zero,
+        ".pcpu"+zero,
+        "shared_area"+zero,
+        ".tss"+zero,
+        ".uelf_cr3"+zero,
+        ".uelf_entry"+zero,
+        ".fwver"+zero,
+#define OFFSET(x) (#x)+zero,
+#include "../prosper0gdb/offset_list.txt"
+#undef OFFSET
+        0,
+    };
+    uint64_t values[] = {
+        comparison_table,      // comparison_table
+        dmem_virt_base,        // dmem
+        uelf_parasite_desc,    // parasites
+        kelf_parasite_desc,    // parasites_kmem
+        int1_handler,          // int1_handler
+        int13_handler,         // int13_handler
+        0x1237,                // .ist_errc
+        0x1238,                // .ist_noerrc
+        0x1239,                // .ist4
+        0x1234,                // .pcpu
+        shared_area,           // shared_area
+        0x123a,                // .tss
+        0x1235,                // .uelf_cr3
+        0x1236,                // .uelf_entry
+        (uint64_t) r0gdb_get_fw_version() >> 16, // .fwver
+#define OFFSET(x) offsets.x,
+#include "../prosper0gdb/offset_list.txt"
+#undef OFFSET
+        0,
+    };
+    size_t pcpu_idx, uelf_cr3_idx, uelf_entry_idx, ist_errc_idx, ist_noerrc_idx, ist4_idx, tss_idx;
+    for(size_t i = 0; values[i]; i++)
+        switch(values[i])
+        {
+        case 0x1234: pcpu_idx = i; break;
+        case 0x1235: uelf_cr3_idx = i; break;
+        case 0x1236: uelf_entry_idx = i; break;
+        case 0x1237: ist_errc_idx = i; break;
+        case 0x1238: ist_noerrc_idx = i; break;
+        case 0x1239: ist4_idx = i; break;
+        case 0x123a: tss_idx = i; break;
+        }
+    uint64_t uelf_bases[NCPUS];
+    uint64_t kelf_bases[NCPUS];
+    uint64_t kelf_entries[NCPUS];
+    uint64_t uelf_cr3s[NCPUS];
+    for(int cpu = 0; cpu < NCPUS; cpu++)
+    {
+        char buf[] = "loading on cpu ..\n";
+        if(cpu >= 10)
+        {
+            buf[15] = '1';
+            buf[16] = (cpu - 10) + '0';
+            gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)buf, (uintptr_t)18);
+        }
+        else
+        {
+            buf[15] = cpu + '0';
+            buf[16] = '\n';
+            gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)buf, (uintptr_t)17);
+        }
+        values[pcpu_idx] = PCPU(cpu);
+        values[uelf_cr3_idx] = 0;
+        values[uelf_entry_idx] = 0;
+        values[ist_errc_idx] = TSS(cpu)+28+3*8;
+        values[ist_noerrc_idx] = TSS(cpu)+28+7*8;
+        values[ist4_idx] = percpu_ist4[cpu];
+        values[tss_idx] = TSS(cpu);
+        void* uelf_entry = 0;
+        void* uelf_base[2] = {0};
+        char* uelf = load_kelf(uek, symbols, values, uelf_base, &uelf_entry, uelf_virt_base);
+        uintptr_t uelf_cr3 = (uintptr_t)kmalloc(24576);
+        uelf_cr3 = ((uelf_cr3 + 4095) | 4095) - 4095;
+        uelf_cr3s[cpu] = uelf_cr3;
+        values[uelf_cr3_idx] = virt2phys(uelf_cr3);
+        values[uelf_entry_idx] = (uintptr_t)uelf_entry - (uintptr_t)uelf_base[0] + uelf_virt_base;
+        void* entry = 0;
+        void* base[2] = {0};
+        char* kelf = load_kelf(kek, symbols, values, base, &entry, 0);
+        build_uelf_cr3(uelf_cr3, uelf_base, uelf_virt_base, dmem_virt_base);
+        uelf_bases[cpu] = (uintptr_t)uelf;
+        kelf_bases[cpu] = (uint64_t)kelf;
+        kelf_entries[cpu] = (uint64_t)entry;
+    }
+    r0gdb_wrmsr(0xc0000084, r0gdb_rdmsr(0xc0000084) | 0x100);
+    gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)"done loading\npatching idt... ", (uintptr_t)29);
+    uint64_t cr3 = r0gdb_read_cr3();
+    for(int cpu = 0; cpu < NCPUS; cpu++)
+    {
+        uint64_t entry = kelf_entries[cpu];
+        kmemcpy((char*)IDT+16*13, (char*)entry, 2);
+        kmemcpy((char*)IDT+16*13+6, (char*)entry+2, 6);
+        kmemcpy((char*)IDT+16*13+4, "\x03", 1);
+        kmemcpy((char*)IDT+16*1, (char*)entry+16, 2);
+        kmemcpy((char*)IDT+16*1+6, (char*)entry+18, 6);
+        kmemcpy((char*)IDT+16*1+4, "\x07", 1);
+        kmemcpy((char*)TSS(cpu)+28+3*8, (char*)entry+8, 8);
+        kmemcpy((char*)TSS(cpu)+28+7*8, (char*)entry+24, 8);
+    }
+    uint64_t iret = offsets.doreti_iret;
+    kmemcpy((char*)(IDT+16*2), (char*)&iret, 2);
+    kmemcpy((char*)(IDT+16*2+6), (char*)&iret+2, 6);
+    //kmemzero((char*)(IDT+16*1), 16);
+    gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)"done\napplying kdata patches... ", (uintptr_t)31);
+    copyin(offsets.sysentvec + 14, &(const uint16_t[1]){0xdeb7}, 2); //native sysentvec
+    copyin(offsets.sysentvec_ps4 + 14, &(const uint16_t[1]){0xdeb7}, 2); //ps4 sysentvec
+    copyin(offsets.crypt_singleton_array + 11*8 + 2*8 + 6, &(const uint16_t[1]){0xdeb7}, 2); //crypt xts
+    copyin(offsets.crypt_singleton_array + 11*8 + 9*8 + 6, &(const uint16_t[1]){0xdeb7}, 2); //crypt hmac
+    {
+        //enable debug settings & spoof target
+        uint32_t q = 0;
+        copyout(&q, offsets.security_flags, 4);
+        q |= 0x14;        
+        copyin(offsets.security_flags, &q, 4);
+        copyin(offsets.targetid, "\x82", 1);
+        copyout(&q, offsets.qa_flags, 4);
+        q |= 0x1030300;
+        copyin(offsets.qa_flags, &q, 4);
+        copyout(&q, offsets.utoken, 4);
+        q |= 1;
+        copyin(offsets.utoken, &q, 4);
+    }
+    gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)"done\npatching shellcore... ", (uintptr_t)27);
+    //restore the gdb_stub's SIGTRAP handler
+    struct sigaction sa;
+    sigaction(SIGBUS, 0, &sa);
+    sigaction(SIGTRAP, &sa, 0);
+#ifndef FIRMWARE_PORTING
+    sigaction(SIGPIPE, &sa, 0);
+#endif
+    copyin(IDT+16*9+5, "\x8e", 1);
+    copyin(IDT+16*179+5, "\x8e", 1);
+    patch_shellcore(shellcore_patches, n_shellcore_patches, shellcore_eh_frame_offset);
+    gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)"done\npatching app.db... ", (uintptr_t)24);
+    #ifndef FIRMWARE_PORTING
+    //patch_app_db();
+    #endif
+    gdb_remote_syscall("write", 3, 0, (uintptr_t)1, (uintptr_t)"done\n", (uintptr_t)5);
+    #ifndef DEBUG
+    notify("ps5-kstuff successfully loaded");
+    return 0;
+#endif
+    asm volatile("ud2");
+    return 0;
+}