.386
.model flat, stdcall
option casemap :none

include \masm32\include\msvcrt.inc
include \masm32\include\kernel32.inc
include \masm32\include\user32.inc
include \masm32\include\masm32.inc
includelib \masm32\lib\msvcrt.lib
includelib \masm32\lib\masm32.lib
includelib \masm32\lib\kernel32.lib
includelib \masm32\lib\user32.lib 
include PS3.inc

system equ <_imp__system>

.data
	str_connecting db "Connecting to PS3...", 0Ah, 0
	str_con_s db "Successfully connected", 0Ah, 0
	str_con_f db "Failed to connect", 0Ah, 0
	str_atc_s db "Successfully attached", 0Ah, 0
	str_atc_f db "Failed to attach", 0Ah, 0

	game_target dd 0FFFFFFFEh
	game_proc_id dd 0
	game_pucount dd 0

	buttons_addr dd 1FC7C90h
	textstate_addr dd 2057217h
	textstr_addr dd 2056B04h

	mem_input dd ?
	mem_output dd ?
	
	og_menu_text db "~g~Menu Title!", 0Ah, 0Ah, "~w~God Mode |~w~Super Jump |~w~Unlimited Ammo |~w~Option 4 |~w~Option 5", 0
	menu_text db "~g~Menu Title!", 0Ah, 0Ah, "~w~God Mode |~w~Super Jump |~w~Unlimited Ammo |~w~Option 4 |~w~Option 5", 0
	
	menu_option dd 0
	menu_option_count dd 0
	menu_isopen db 0
	
	str_button_x db "Pressed Square", 0Ah, 0
	str_button_up db "Pressed Up", 0Ah, 0
	str_button_down db "Pressed Down", 0Ah, 0
	str_button_a db "Pressed Cross", 0Ah, 0
	
	str_opened_menu db "Opened menu", 0Ah, 0
	str_closed_menu db "Closed menu", 0Ah, 0
	
	godmode_bytes db 038h, 060h, 07Fh, 0FFh, 0B0h, 07Fh, 0h, 0B4h
	nop_bytes db 060h, 0, 0, 0
	ammo1_bytes db 03Bh, 0A0h, 003h, 0E7h
	ammo2_bytes db 038h, 0E0h, 000h, 063h
	
.code
Main:
_ConnectPS3:
	push offset str_connecting
	call StdOut

	call SNPS3InitTargetComms
	push 0
	push game_target
	call SNPS3Connect
	cmp eax, 0
	je _con_success
	cmp eax, 6
	je _con_success
	push offset str_con_f
	call StdOut
	jmp _Exit

_con_success:
	push offset str_con_s
	call StdOut

	push offset game_proc_id
	push offset game_pucount
	push game_target
	call SNPS3ProcessList

	push offset game_proc_id
	push offset game_pucount
	push game_target
	call SNPS3ProcessList

	push game_proc_id
	push 0
	push game_target
	call SNPS3ProcessAttach
	cmp eax, 0
	je _atc_success
	push offset str_atc_f
	call StdOut
	jmp _Exit

_atc_success:
	push offset str_atc_s
	call StdOut
	push game_proc_id
	push game_target
	call SNPS3ProcessContinue

	_looop:
	call MenuMonitor
	push 100
	call Sleep
	jmp _looop
	
_Exit:
	push 0
	call ExitProcess

DrawMenu proc _input
	mov eax, -1
	mov ebx, lengthof menu_text
	mov ecx, 0
	
	_loop:
	inc eax
	cmp eax, ebx
	je _end
	cmp byte ptr [og_menu_text+eax], '~'
	jne _next
	cmp byte ptr [og_menu_text+eax+1], 'w'
	jne _next
	cmp byte ptr [og_menu_text+eax+2], '~'
	jne _next
	cmp ecx, _input
	jne _next
	mov byte ptr [menu_text+eax+1], 'r'
	_next:
	cmp byte ptr [og_menu_text+eax], '|'
	jne _next2
	mov byte ptr [menu_text+eax], 0Ah
	inc ecx
	_next2:
	cmp ebx, eax
	jne _loop
	_end:
	mov menu_option_count, ecx
	push offset menu_text
	push lengthof menu_text
	push textstr_addr
	call SetMemory
	
	cld
    mov esi, offset og_menu_text
    mov edi, offset menu_text
    mov ecx, lengthof og_menu_text
    rep movsb
	
	ret
DrawMenu endp

ToggleText proc _state
	mov byte ptr mem_input, 3h
	cmp _state, 0
	jne _end
	mov byte ptr mem_input, 2h
	_end:
	push offset mem_input
	push 1
	push textstate_addr
	call SetMemory
	ret
ToggleText endp

GetButton proc
	push 4
	push buttons_addr
	call GetMemory
	ret
GetButton endp

ExecuteOption proc _input
	cmp _input, 0
	je _option0
	cmp _input, 1
	je _option1
	cmp _input, 2
	je _option2
	cmp _input, 3
	je _option3
	
	_option0:
	push offset godmode_bytes
	push lengthof godmode_bytes
	push 1185D08h
	call SetMemory
	ret
	
	_option1:
	push offset nop_bytes
	push lengthof nop_bytes
	push 5EE6A0h
	call SetMemory
	ret
	
	_option2:
	push offset ammo1_bytes
	push lengthof ammo1_bytes
	push 0FBF0A4h
	call SetMemory
	
	push offset ammo2_bytes
	push lengthof ammo2_bytes
	push 0FDA420h
	call SetMemory
	ret
	
	_option3:
	ret
	
	ret
ExecuteOption endp

MenuMonitor proc
	call GetButton
	cmp byte ptr [eax+1], 10h
	je PressedUp
	cmp byte ptr [eax+1], 40h
	je PressedDown
	cmp byte ptr [eax+3], 80h
	je PressedSquare
	cmp byte ptr [eax+3], 40h
	je PressedCross
	jmp _end2
	
	PressedUp:
	cmp menu_isopen, 0
	je _end
	cmp menu_option, 0
	je _end
	dec menu_option
	push offset str_button_up
	call StdOut
	jmp _end
	
	PressedDown:
	cmp menu_isopen, 0
	je _end2
	mov ebx, menu_option_count
	cmp menu_option, ebx
	je _end
	inc menu_option
	push offset str_button_down
	call StdOut
	jmp _end
	
	PressedSquare:
	cmp menu_isopen, 0
	je _end2
	cmp menu_isopen, 1
	jne _end2
	jmp _close
	push offset str_button_x
	call StdOut
	jmp _end
	
	PressedCross:
	cmp menu_isopen, 0
	je _end2
	push menu_option
	call ExecuteOption
	push offset str_button_a
	call StdOut
	jmp _end
	
	_close:
	push offset str_closed_menu
	call StdOut
	mov menu_isopen, 0
	push 0
	call ToggleText
	jmp _end2
	
	_end:
	cmp menu_isopen, 0
	jne _end3
	push offset str_opened_menu
	call StdOut
	_end3:
	mov menu_isopen, 1
	push menu_option
	call DrawMenu
	push 1
	call ToggleText
	
	_end2:
	ret
MenuMonitor endp

SetMemory proc _address, _length, _input
	push _input
	push _length
	push 0
	push _address
	push 0
	push 0
	push dword ptr game_proc_id
	push 0
	push dword ptr game_target
	call SNPS3ProcessSetMemory
	mov eax, 0
	ret
SetMemory endp

GetMemory proc _address, _length
	push offset mem_output
	push _length
	push 0
	push _address
	push 0
	push 0
	push dword ptr game_proc_id
	push 0
	push dword ptr game_target
	call SNPS3ProcessGetMemory
	mov eax, offset mem_output
	ret
GetMemory endp

end Main