2016-11-11 06:47:56 +01:00
|
|
|
|
|
|
|
|
; game stack return address
|
2019-08-14 22:06:31 +02:00
|
|
|
HAX_TARGET_ADDRESS equ (0x1079B6A4-0xC8)
|
2016-11-15 01:49:12 +01:00
|
|
|
; application memory pointer
|
2019-08-14 22:06:31 +02:00
|
|
|
HACHI_APPLICATION_PTR equ (0x10C91938)
|
2016-11-15 01:49:12 +01:00
|
|
|
; arm9 rom location address
|
2019-08-14 22:06:31 +02:00
|
|
|
ARM9_ROM_LOCATION equ (0x16440F00)
|
2016-11-11 06:47:56 +01:00
|
|
|
|
|
|
|
|
; constants for position calcs
|
|
|
|
|
RPX_OFFSET equ (0x01800000)
|
2016-11-15 01:49:12 +01:00
|
|
|
ARM7_ROM_MEM2_START equ (0xF0000000 - ARM9_ROM_LOCATION + 0x12000000)
|
2016-11-11 06:47:56 +01:00
|
|
|
|
|
|
|
|
; rop-gadgets part 1 (used for all sorts of different things)
|
2019-08-14 22:06:31 +02:00
|
|
|
LMW_R21R1xC_LWZ_R0R1x3C_MTLR_R0_ADDI_R1_x38_BLR equ (RPX_OFFSET + 0x0200369C)
|
|
|
|
|
BCTRL equ (RPX_OFFSET + 0x020041D8)
|
|
|
|
|
MTCTR_R27_ADDI_R31x2_MR_R3R31_R4R30_R5R29_R6R28_BCTRL_LMW_R26R1x18_MTLR_R1x34_ADDI_R1x30_BLR equ (RPX_OFFSET + 0x020A9DC4)
|
|
|
|
|
LWZ_R0xAFC_MTLR_R0_ADDI_R1xAF8_BLR equ (RPX_OFFSET + 0x020A999C)
|
|
|
|
|
LWZ_R0R1x14_LWZ_R30R1x8_R31R1xC_MTLR_R0_ADDI_R1x10_BLR equ (RPX_OFFSET + 0x02001AF8)
|
|
|
|
|
MR_R11R31_LMW_R26R1x8_LWZ_R0x24_MTLR_R0_ADDI_R1x20_CLRLWI_R3R11x18_BLR equ (RPX_OFFSET + 0x0217F924)
|
|
|
|
|
LWZ_R0R11x4_R31R11xM4_MTLR_R0_MR_R1R11_BLR equ (RPX_OFFSET + 0x0227F310)
|
2016-11-11 06:47:56 +01:00
|
|
|
|
|
|
|
|
; rop-gadgets part 2 (only used to set up core 0 thread stack)
|
2019-08-14 22:06:31 +02:00
|
|
|
LWZ_R3_8_R1_LWZ_R0x14_MTLR_R0_ADDI_R1x10_BLR equ (RPX_OFFSET + 0x02018AB0)
|
|
|
|
|
MR_R12_R3_CMPLW_R12_R0_LI_R3_0_BEQ_ADDI_R3_R12x10_LWZ_R0_R1x14_MTLR_R0_ADDI_R1x10_BLR equ (RPX_OFFSET + 0x020B5204)
|
|
|
|
|
LWZ_R5_R1x8_CMPLW_R5_R31_BNE_MR_R3_R5_LWZ_R0_R1x1C_LWZ_R30_R1x10_MTLR_R0_LWZ_R31_R1x14_ADDI_R1x18_BLR equ (RPX_OFFSET + 0x0200F624)
|
|
|
|
|
LWZ_R4_R1xC_STW_R12_R1x8_LWZ_R3_R1x8_LWZ_R0_R1x1C_MTLR_R0_ADDI_R1x18_BLR equ (RPX_OFFSET + 0x020862CC)
|
|
|
|
|
LWZ_R7_R1x10_LWZ_R8_R1x14_STW_R7_R31x0_STW_R8_R31x0_LWZ_R0_R1x2C_LWZ_R31_R0x24_MTLR_R0_LWZ_R30_R0x20_ADDI_R1x28_BLR equ (RPX_OFFSET + 0x0205A454)
|
|
|
|
|
LWZ_R3_4_R3_LWZ_R0xC_MTLR_R0_ADDI_R1x8_BLR equ (RPX_OFFSET + 0x02018B38)
|
|
|
|
|
LWZ_R0_R1x1C_LWZ_R30_R1x10_MTLR_R0_LWZ_R31_R1x14_ADDI_R1x18_ADD_R3_R7_BLR equ (RPX_OFFSET + 0x0214FA58)
|
|
|
|
|
MTCTR_R12_BCTRL_LI_R3_0_LWZ_R0_R1x14_LWZ_R31_R1xC_MTLR_R0_ADDI_R1x10_BLR equ (RPX_OFFSET + 0x020244B4)
|
2016-11-11 06:47:56 +01:00
|
|
|
|
|
|
|
|
; functions used from game
|
2019-08-14 22:06:31 +02:00
|
|
|
NERD_CREATETHREAD equ (RPX_OFFSET + 0x022290AC)
|
|
|
|
|
NERD_STARTTHREAD equ (RPX_OFFSET + 0x022294C8)
|
|
|
|
|
NERD_JOINTHREAD equ (RPX_OFFSET + 0x02228F58)
|
|
|
|
|
HACHI_APPLICATION_SHUTDOWNANDDESTROY equ (RPX_OFFSET + 0x02006E2C)
|
|
|
|
|
NERD_FASTWIIU_SHUTDOWN equ (RPX_OFFSET + 0x0201FF0C)
|
|
|
|
|
CORE_SHUTDOWN equ (RPX_OFFSET + 0x02228B9C)
|
|
|
|
|
_START_EXIT equ (RPX_OFFSET + 0x020265DC)
|
