Added 9.xx Full Support

Author: EchoStretch

prosper0gdb/offsets.c

@@ -2597,6 +2597,288 @@ DEF(lapic_map, 0x27af838)
 #include "offset_list.txt"
 END_FW()
 
+START_FW(920)
+DEF(allproc, 0x2755d50)
+DEF(idt, 0x2d94300)
+DEF(gdt_array, 0x2d955e0)
+DEF(tss_array, 0x2d96fe0)
+DEF(pcpu_array, 0x2da8f00)
+DEF(doreti_iret, -0xa52e93)
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0xa167e6)
+DEF(rdmsr_start, -0xa545ca)
+DEF(wrmsr_ret, -0xa5599c)
+DEF(nop_ret, wrmsr_ret + 2)
+DEF(dr2gpr_start, -0xa59fd3)
+DEF(gpr2dr_1_start, -0xa59eba)
+DEF(gpr2dr_2_start, -0xa59dc7)
+DEF(mov_cr3_rax_mov_ds, -0xa59a29)
+DEF(mov_rax_cr3, -0x3C63CF)
+DEF(cpu_switch, -0xa5a1c0)
+DEF(mprotect_fix_start, -0x98e1b3)
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+
+DEF(mmap_self_fix_1_start, 0x0)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, 0x0)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+
+DEF(aslr_fix_start, -0x8D9074)
+DEF(aslr_fix_end, aslr_fix_start+2)
+
+DEF(sigaction_fix_start, -0x72b7f0)
+DEF(sigaction_fix_end, -0x72b7d1)
+DEF(sysents, 0x1aac60)
+DEF(sysents_ps4, 0x1a2650)
+DEF(sysentvec, 0xdba648)
+DEF(sysentvec_ps4, 0xdba7c0)
+DEF(sceSblServiceMailbox, -0x6e7d50)
+DEF(sceSblAuthMgrSmIsLoadable2, -0x928cf0)
+DEF(mdbg_call_fix, -0x68aa99)
+DEF(syscall_before, -0x87e2c1)
+DEF(syscall_after, -0x87e29d)
+DEF(malloc, -0xbd1b0)
+DEF(M_something, 0x14070d0)
+DEF(loadSelfSegment_epilogue, -0x928561)
+DEF(loadSelfSegment_watchpoint, -0x2F9208)
+DEF(loadSelfSegment_watchpoint_lr, -0x928837)
+DEF(decryptSelfBlock_watchpoint_lr, -0x9284CE)
+DEF(decryptSelfBlock_epilogue, -0x928410)
+//DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x92FF91) //403
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x927D98) //505
+DEF(decryptMultipleSelfBlocks_epilogue, -0x927B67)
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x9289d7)
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x928663)
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x9280ad)
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x9278C3)
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x928d68)
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x9CF360)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x9CF8E1)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x9CF875)
+DEF(sceSblServiceMailbox_lr_npdrm_cmd_5, -0x34AC83)
+DEF(sceSblServiceMailbox_lr_npdrm_cmd_6, -0x34AA55)
+//DEF(sceSblPfsSetKeys, -0x9D5940) //403
+DEF(sceSblPfsSetKeys, -0x9D0450) //505
+DEF(sceSblServiceCryptAsync, -0x970030)
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x96FFF3)
+DEF(copyin, -0xa170b0)
+DEF(copyout, -0xa17160)
+DEF(crypt_message_resolve, -0x4AED70)
+DEF(justreturn, -0xa530c0)
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xe89518)
+DEF(pop_all_iret, -0xa52ef2)
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x9f4bf0)
+DEF(kernel_pmap_store, 0x2d28b78)
+DEF(crypt_singleton_array, 0x2c6da30)
+DEF(security_flags, 0xD73064)
+DEF(targetid, 0xD7306D)
+DEF(qa_flags, 0xD73088)
+DEF(utoken, 0xD730F0)
+DEF(mov_rax_cr0, -0xa5a121)
+DEF(mov_cr0_rax, -0xa5a11c)
+DEF(mov_rdi_cr2, -0xa5634a)
+DEF(lgdt_rdi, -0xa169c0)
+DEF(lidt_lldt, -0xa59971)
+DEF(ltr_ax, -0xa5994f)
+DEF(kproc_shutdown, -0x9f29d0)
+DEF(s_shutdown_final, 0x36b109)
+DEF(eventhandler_register, -0x55f070)
+DEF(strlen_trap, -0x47d6f8)
+DEF(lapic_map, 0x27af838)
+#include "offset_list.txt"
+END_FW()
+
+START_FW(940)
+DEF(allproc, 0x2755d50)
+DEF(idt, 0x2d94300)
+DEF(gdt_array, 0x2d955e0)
+DEF(tss_array, 0x2d96fe0)
+DEF(pcpu_array, 0x2da8f00)
+DEF(doreti_iret, -0xa52e93)
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0xa167e6)
+DEF(rdmsr_start, -0xa545ca)
+DEF(wrmsr_ret, -0xa5599c)
+DEF(nop_ret, wrmsr_ret + 2)
+DEF(dr2gpr_start, -0xa59fd3)
+DEF(gpr2dr_1_start, -0xa59eba)
+DEF(gpr2dr_2_start, -0xa59dc7)
+DEF(mov_cr3_rax_mov_ds, -0xa59a29)
+DEF(mov_rax_cr3, -0x3C5E5F)
+DEF(cpu_switch, -0xa5a1c0)
+DEF(mprotect_fix_start, -0x98e0d3)
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+
+DEF(mmap_self_fix_1_start, 0x0)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, 0x0)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+
+DEF(aslr_fix_start, -0x8D8EE4)
+DEF(aslr_fix_end, aslr_fix_start+2)
+
+DEF(sigaction_fix_start, -0x72b370)
+DEF(sigaction_fix_end, -0x72b351)
+DEF(sysents, 0x1aac60)
+DEF(sysents_ps4, 0x1a2650)
+DEF(sysentvec, 0xdba648)
+DEF(sysentvec_ps4, 0xdba7c0)
+DEF(sceSblServiceMailbox, -0x6e78d0)
+DEF(sceSblAuthMgrSmIsLoadable2, -0x928b80)
+DEF(mdbg_call_fix, -0x68a5b9)
+DEF(syscall_before, -0x87e131)
+DEF(syscall_after, -0x87e10d)
+DEF(malloc, -0xbcc40)
+DEF(M_something, 0x14070d0)
+DEF(loadSelfSegment_epilogue, -0x9283F1)
+DEF(loadSelfSegment_watchpoint, -0x2F8C98)
+DEF(loadSelfSegment_watchpoint_lr, -0x9286C7)
+DEF(decryptSelfBlock_watchpoint_lr, -0x92835E)
+DEF(decryptSelfBlock_epilogue, -0x9282A0)
+//DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x92FF81) //403
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x927C28) //505
+DEF(decryptMultipleSelfBlocks_epilogue, -0x9279F7)
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x928867)
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x9284f3)
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x927f3d)
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x927753)
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x928bf8)
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x9CF360)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x9CF8E1)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x9CF875)
+DEF(sceSblServiceMailbox_lr_npdrm_cmd_5, -0x34A713)
+DEF(sceSblServiceMailbox_lr_npdrm_cmd_6, -0x34A4E5)
+//DEF(sceSblPfsSetKeys, -0x9D5930) //403
+DEF(sceSblPfsSetKeys, -0x9D0450) //505
+DEF(sceSblServiceCryptAsync, -0x96FF50)
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x96FF13)
+DEF(copyin, -0xa170b0)
+DEF(copyout, -0xa17160)
+DEF(crypt_message_resolve, -0x4AE890)
+DEF(justreturn, -0xa530c0)
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xe89518)
+DEF(pop_all_iret, -0xa52ef2)
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x9f4798)
+DEF(kernel_pmap_store, 0x2d28b78)
+DEF(crypt_singleton_array, 0x2c6da30)
+DEF(security_flags, 0xD73064)
+DEF(targetid, 0xD7306D)
+DEF(qa_flags, 0xD73088)
+DEF(utoken, 0xD730F0)
+DEF(mov_rax_cr0, -0xa5a121)
+DEF(mov_cr0_rax, -0xa5a11c)
+DEF(mov_rdi_cr2, -0xa5634a)
+DEF(lgdt_rdi, -0xa169c0)
+DEF(lidt_lldt, -0xa59971)
+DEF(ltr_ax, -0xa5994f)
+DEF(kproc_shutdown, -0x9f0088)
+DEF(s_shutdown_final, 0x36b109)
+DEF(eventhandler_register, -0x55eb90)
+DEF(strlen_trap, -0x47D218)
+DEF(lapic_map, 0x27af838)
+#include "offset_list.txt"
+END_FW()
+
+START_FW(960)
+DEF(allproc, 0x2755d50)
+DEF(idt, 0x2d94300)
+DEF(gdt_array, 0x2d955e0)
+DEF(tss_array, 0x2d96fe0)
+DEF(pcpu_array, 0x2da8f00)
+DEF(doreti_iret, -0xa52e93)
+DEF(add_rsp_iret, doreti_iret - 7)
+DEF(swapgs_add_rsp_iret, doreti_iret - 10)
+DEF(rep_movsb_pop_rbp_ret, -0xa167e6)
+DEF(rdmsr_start, -0xa545ca)
+DEF(wrmsr_ret, -0xa5599c)
+DEF(nop_ret, wrmsr_ret + 2)
+DEF(dr2gpr_start, -0xa59fd3)
+DEF(gpr2dr_1_start, -0xa59eba)
+DEF(gpr2dr_2_start, -0xa59dc7)
+DEF(mov_cr3_rax_mov_ds, -0xa59a29)
+DEF(mov_rax_cr3, -0x3C5C7F)
+DEF(cpu_switch, -0xa5a1c0)
+DEF(mprotect_fix_start, -0x98e0d3)
+DEF(mprotect_fix_end, mprotect_fix_start+6)
+
+DEF(mmap_self_fix_1_start, 0x0)
+DEF(mmap_self_fix_1_end, mmap_self_fix_1_start+2)
+DEF(mmap_self_fix_2_start, 0x0)
+DEF(mmap_self_fix_2_end, mmap_self_fix_2_start+2)
+
+DEF(aslr_fix_start, -0x8D8EE4)
+DEF(aslr_fix_end, aslr_fix_start+2)
+
+DEF(sigaction_fix_start, -0x72b270)
+DEF(sigaction_fix_end, -0x72b251)
+DEF(sysents, 0x1aac60)
+DEF(sysents_ps4, 0x1a2650)
+DEF(sysentvec, 0xdba648)
+DEF(sysentvec_ps4, 0xdba7c0)
+DEF(sceSblServiceMailbox, -0x6e77d0)
+DEF(sceSblAuthMgrSmIsLoadable2, -0x928b80)
+DEF(mdbg_call_fix, -0x68a4a9)
+DEF(syscall_before, -0x87e101)
+DEF(syscall_after, -0x87e0dd)
+DEF(malloc, -0xbca60)
+DEF(M_something, 0x14070d0)
+DEF(loadSelfSegment_epilogue, -0x9283F1)
+DEF(loadSelfSegment_watchpoint, -0x2F8AB8)
+DEF(loadSelfSegment_watchpoint_lr, -0x9286C7)
+DEF(decryptSelfBlock_watchpoint_lr, -0x92835E)
+DEF(decryptSelfBlock_epilogue, -0x9282A0)
+//DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x92FF81) //403
+DEF(decryptMultipleSelfBlocks_watchpoint_lr, -0x927C28) //505
+DEF(decryptMultipleSelfBlocks_epilogue, -0x9279F7)
+DEF(sceSblServiceMailbox_lr_verifyHeader, -0x928867)
+DEF(sceSblServiceMailbox_lr_loadSelfSegment, -0x9284f3)
+DEF(sceSblServiceMailbox_lr_decryptSelfBlock, -0x927f3d)
+DEF(sceSblServiceMailbox_lr_decryptMultipleSelfBlocks, -0x927753)
+DEF(sceSblServiceMailbox_lr_sceSblAuthMgrSmFinalize, -0x928bf8)
+DEF(sceSblServiceMailbox_lr_verifySuperBlock, -0x9CF360)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_1, -0x9CF8E1)
+DEF(sceSblServiceMailbox_lr_sceSblPfsClearKey_2, -0x9CF875)
+DEF(sceSblServiceMailbox_lr_npdrm_cmd_5, -0x34A533)
+DEF(sceSblServiceMailbox_lr_npdrm_cmd_6, -0x34A305)
+//DEF(sceSblPfsSetKeys, -0x9D5930) //403
+DEF(sceSblPfsSetKeys, -0x9D0450) //505
+DEF(sceSblServiceCryptAsync, -0x96FF50)
+DEF(sceSblServiceCryptAsync_deref_singleton, -0x96FF13)
+DEF(copyin, -0xa170b0)
+DEF(copyout, -0xa17160)
+DEF(crypt_message_resolve, -0x4AE6D0)
+DEF(justreturn, -0xa530c0)
+DEF(justreturn_pop, justreturn+8)
+DEF(mini_syscore_header, 0xe89518)
+DEF(pop_all_iret, -0xa52ef2)
+DEF(pop_all_except_rdi_iret, pop_all_iret+4)
+DEF(push_pop_all_iret, -0x9f36c8)
+DEF(kernel_pmap_store, 0x2d28b78)
+DEF(crypt_singleton_array, 0x2c6da30)
+DEF(security_flags, 0xD73064)
+DEF(targetid, 0xD7306D)
+DEF(qa_flags, 0xD73088)
+DEF(utoken, 0xD730F0)
+DEF(mov_rax_cr0, -0xa5a121)
+DEF(mov_cr0_rax, -0xa5a11c)
+DEF(mov_rdi_cr2, -0xa5634a)
+DEF(lgdt_rdi, -0xa169c0)
+DEF(lidt_lldt, -0xa59971)
+DEF(ltr_ax, -0xa5994f)
+DEF(kproc_shutdown, -0x9f23b8)
+DEF(s_shutdown_final, 0x36b109)
+DEF(eventhandler_register, -0x55e9d0)
+DEF(strlen_trap, -0x47d058)
+DEF(lapic_map, 0x27af838)
+#include "offset_list.txt"
+END_FW()
+
 void* dlsym(void*, const char*);
 
 int set_offsets(void)
@@ -2632,6 +2914,9 @@ int set_offsets(void)
     case 0x840: set_offsets_840(); break;
     case 0x860: set_offsets_860(); break;
     case 0x900: set_offsets_900(); break;
+    case 0x920: set_offsets_920(); break;
+    case 0x940: set_offsets_940(); break;
+    case 0x960: set_offsets_960(); break;
 #endif
     default: return -1;
     }