| External Interface |
| Access |
|---|
| Broadway | Partial |
|---|
| Starlet | Full |
|---|
| Registers |
|---|
| Base | 0x0d806800 |
|---|
| Length | 0x480 |
|---|
| Access size | 32 bits |
|---|
| Byte order | Big Endian |
|---|
| IRQs |
|---|
| Broadway | 4 |
|---|
|
the External Interface (EXI) is an interface to communicate with external devices like the Gamecube memory cards slots, which can be used for memory cards, usb gecko, sdgecko, or nintendo's waikiki's debug adaptor.
On the wii, the PowerPC's reset vector (0xfff00000) is mapped to memory within the EXI while on the gamecube this was mapped to the IPL masked bootrom.
Since there is no IPL on the wii, this memory is written to by IOS when it bootstraps the Broadway.
Registry List
| EXI
|
| Address
|
Bits
|
Name
|
Description
|
| 0x0d806800
|
32
|
EXI0_CSR
|
EXI Channel 0 Parameter Register
|
| 0x0d806800
|
32
|
EXI0_MAR
|
EXI Channel 0 DMA Start Address
|
| 0x0d806800
|
32
|
EXI0_LENGTH
|
EXI EXI Channel 0 DMA Transfer Length
|
| 0x0d806800
|
32
|
EXI0_CR
|
EXI Channel 0 Control Register
|
| 0x0d806810
|
32
|
EXI0_DATA
|
EXI Channel 0 Immediate Data
|
| 0x0d806814
|
32
|
EXI1_CSR
|
EXI Channel 1 Parameter Register
|
| 0x0d806818
|
32
|
EXI1_MAR
|
EXI Channel 1 DMA Start Address
|
| 0x0d80681c
|
32
|
EXI1_LENGTH
|
EXI EXI Channel 1 DMA Transfer Length
|
| 0x0d806820
|
32
|
EXI0_CR
|
EXI Channel 1 Control Register
|
| 0x0d806824
|
32
|
EXI0_DATA
|
EXI Channel 1 Immediate Data
|
| 0x0d806828
|
32
|
EXI2_CSR
|
EXI Channel 2 Parameter Register
|
| 0x0d80682c
|
32
|
EXI2_MAR
|
EXI Channel 2 DMA Start Address
|
| 0x0d806830
|
32
|
EXI2_LENGTH
|
EXI EXI Channel 2 DMA Transfer Length
|
| 0x0d806834
|
32
|
EXI2_CR
|
EXI Channel 2 Control Register
|
| 0x0d806838
|
32
|
EXI2_DATA
|
EXI Channel 2 Immediate Data
|
EXI boot vector
As mentioned, there is small amount of memory in the EXI that is used as the PowerPC reset vector.
IOS's function to initialize the EXI reset vector has 2 default boot vectors depending on the parameters, but a custom boot vector is used by the IOS_StartPPC syscall.
| Start Address
|
End Address
|
Size
|
Description
|
| 0x0d806840
|
0x0d806880
|
0x40
|
PPC Reset vector
|
IOS_StartPPC vector
fff00100 3c 60 00 00 lis r3, 0
fff00104 60 63 34 00 ori r3, r3, 0x3400
fff00108 7c 7a 03 a6 mtspr SRR0, r3
fff0010c 38 60 00 00 li r3, 0
fff00110 7c 7b 03 a6 mtspr SRR1, r3
fff00114 4c 00 00 64 rfi
Default vector (with HID4 initialization)
fff00100 7c 63 1a 78 xor r3, r3, r3
fff00104 64 63 d7 b0 oris r3, r3, 0xd7b0
fff00108 7c 73 fb a6 mtspr HID4, r3
fff0010c 4c 00 01 2c isync
fff00110 3c 40 00 00 lis r2, 0x0
fff00114 60 42 01 00 ori r2, r2, 0x100
fff00118 7c 5a 03 a6 mtspr SRR0, r2
fff0011c 38 a0 00 00 li r5, 0
fff00120 7c bb 03 a6 mtspr SRR1, r5
fff00124 4c 00 00 64 rfi
fff00128 60 00 00 00 nop
fff0012c 60 00 00 00 nop
fff00130 60 00 00 00 nop
Default vector (without HID4 initialization)
fff00100 7c 63 1a 78 xor r3, r3, r3
fff00104 7c 73 fb a6 mtspr HID4, r3
fff00108 4c 00 01 2c isync
fff0010c 3c 40 00 00 lis r2, 0
fff00110 60 42 01 00 ori r2, r2, 0x100
fff00114 7c 5a 03 a6 mtspr SRR0, r2
fff00118 38 a0 00 00 li r5, 0
fff0010c 7c bb 03 a6 mtspr SRR1, r5
fff00120 4c 00 00 64 rfi
fff00124 60 00 00 00 nop
fff00128 60 00 00 00 nop
fff0012c 60 00 00 00 nop