So, here it is for different firmwares
For 4.0.0 (same for 4.0.2 and 4.0.3) :
Memory right (BAT, SR, etc.) : 0xFFF1A440
prepare title function : 0xFFF15E70
Then these function addresses in coreinit.rpl ("magic" number : 0xFE4400) and loader.elf
ADDRESS_OSTitle_main_entry_ptr 0x1005A600
ADDRESS_main_entry_hook 0x0101BD4C
ADDRESS_LiWaitOneChunk 0x010007F8
ADDRESS_LiWaitIopComplete 0x0100F78C
ADDRESS_LiWaitIopCompleteWithInterrupts 0x0100F678
For 4.1.0 :
Memory right (BAT, SR, etc.) : 0xFFF1AD00
prepare title function : 0xFFF166DC
Then these function addresses in coreinit.rpl ("magic" number : 0xFE4400) and loader.elf
ADDRESS_OSTitle_main_entry_ptr 0x1005A8C0
ADDRESS_main_entry_hook 0x0101BD4C
ADDRESS_LiWaitOneChunk 0x010007F8
ADDRESS_LiWaitIopComplete 0x0100F78C
ADDRESS_LiWaitIopCompleteWithInterrupts 0x0100F678
For 5.0.0 (same for 5.1.0) :
Memory right (BAT, SR, etc.) : 0xFFF1D518
prepare title function : 0xFFF18534
Then these function addresses in coreinit.rpl ("magic" number : 0xFE4000) and loader.elf
ADDRESS_OSTitle_main_entry_ptr 0x1005CB00
ADDRESS_main_entry_hook 0x0101C15C
ADDRESS_LiWaitOneChunk 0x010007EC
ADDRESS_LiWaitIopComplete 0x0100FBC4
ADDRESS_LiWaitIopCompleteWithInterrupts 0x0100FAB0
For 4.0.0 (same for 4.0.2 and 4.0.3) :
Memory right (BAT, SR, etc.) : 0xFFF1A440
prepare title function : 0xFFF15E70
Then these function addresses in coreinit.rpl ("magic" number : 0xFE4400) and loader.elf
ADDRESS_OSTitle_main_entry_ptr 0x1005A600
ADDRESS_main_entry_hook 0x0101BD4C
ADDRESS_LiWaitOneChunk 0x010007F8
ADDRESS_LiWaitIopComplete 0x0100F78C
ADDRESS_LiWaitIopCompleteWithInterrupts 0x0100F678
For 4.1.0 :
Memory right (BAT, SR, etc.) : 0xFFF1AD00
prepare title function : 0xFFF166DC
Then these function addresses in coreinit.rpl ("magic" number : 0xFE4400) and loader.elf
ADDRESS_OSTitle_main_entry_ptr 0x1005A8C0
ADDRESS_main_entry_hook 0x0101BD4C
ADDRESS_LiWaitOneChunk 0x010007F8
ADDRESS_LiWaitIopComplete 0x0100F78C
ADDRESS_LiWaitIopCompleteWithInterrupts 0x0100F678
For 5.0.0 (same for 5.1.0) :
Memory right (BAT, SR, etc.) : 0xFFF1D518
prepare title function : 0xFFF18534
Then these function addresses in coreinit.rpl ("magic" number : 0xFE4000) and loader.elf
ADDRESS_OSTitle_main_entry_ptr 0x1005CB00
ADDRESS_main_entry_hook 0x0101C15C
ADDRESS_LiWaitOneChunk 0x010007EC
ADDRESS_LiWaitIopComplete 0x0100FBC4
ADDRESS_LiWaitIopCompleteWithInterrupts 0x0100FAB0
Last edited by ptitleray,