fuzep.lua

--[[
Fuze+ 2.36.8 hacking
required argument (in order):
- path to firmware
]]-- 

if #arg < 2 then
    error("not enough argument to fuzep patcher")
end

local fw = hwp.load_file(arg[1])
local patch_addr = arm.to_thumb(hwp.make_addr(0x40fa419a))
local proxy_addr = arm.to_arm(hwp.make_addr(0x40efb248))
-- parse old jump
local inst = arm.parse_branch(fw, patch_addr)
print("Old jump: ", inst)
-- introduce jump to proxy
local new_jump = arm.make_branch(proxy_addr, true)
arm.write_branch(fw, patch_addr, new_jump)
print("New jump: ", arm.parse_branch(fw, patch_addr))
-- do return in proxy
arm.write_return(fw, proxy_addr)
-- write result
hwp.save_file(fw, arg[2])