Originally Posted by bryscomat

Here are the offsets to patch in the binary. hope it helps someone

0x97b4 = 00 00 a0 e1
0xa178 = 00 00 a0 e1
0xa184 = 00 00 a0 e1
0xa18c = 00 00 a0 e1
0x4f890 = 00 00 a0 e1
0x4fbf0 = 00 00 a0 e1
0x53110 = 31 00 00 ea

-EDIT-
This is for FW 2.2 only. Make sure that after any edits to the binary, you run "ldid" to resign, and double check permissions (chmod +x, chmod 777)

-EDIT- Apparently it works for 2.2.1 as well. Happy hacking.

There is a known bug with this patch. It doesn't properly route the sound back to the operating system when the cable is unplugged, until the phone is rebooted. For most, this will only be a minor annoyance. I am looking into a fix for that.
If anyone is interested in investigating themselves, it is due to the patch at 0x53110 bypassing the volume controls. It was the only way I found that would avoid the crash when the cable was unplugged, but there's a better patch somewhere.