root/platform/a3400/sub/101a/capt_seq.c

/* [<][>][^][v][top][bottom][index][help] */

DEFINITIONS

This source file includes following definitions.
  1. capt_seq_task
  2. sub_FF968CAC_my
  3. exp_drv_task
  4. sub_FF8AE6BC_my
  5. sub_FF89E38C_my

   1 #include "lolevel.h"
   2 #include "platform.h"
   3 #include "core.h"
   4 #include "conf.h"
   5 
   6 static long *nrflag = (long*)(0x8b64+0x00);  // Found @ ff9f7100 & ff9f7148
   7 #define NR_AUTO (0)                          // have to explictly reset value back to 0 to enable auto
   8 
   9 #define PAUSE_FOR_FILE_COUNTER 150           // Enable delay in capt_seq_hook_raw_here to ensure file counter is updated
  10 #include "../../../generic/capt_seq.c"
  11 
  12 //** capt_seq_task  @ 0xFF872424
  13 
  14 void __attribute__((naked,noinline)) capt_seq_task() {
  15 asm volatile (
  16       "STMFD   SP!, {R3-R9,LR} \n"
  17       "LDR     R4, =0x376AC \n"
  18       "LDR     R7, =0x2BA8 \n"
  19       "MOV     R6, #0 \n"
  20 "loc_FF872434:\n"
  21       "LDR     R0, [R7, #4] \n"
  22       "MOV     R2, #0 \n"
  23       "MOV     R1, SP \n"
  24       "BL      sub_003F7218 \n" // RAM
  25       "TST     R0, #1 \n"
  26       "BEQ     loc_FF872460 \n"
  27       "LDR     R1, =0x493 \n"
  28       "LDR     R0, =0xFF871F90 \n" // "SsShootTask.c"
  29       "BL      _DebugAssert \n"
  30       "BL      _ExitTask \n"
  31       "LDMFD   SP!, {R3-R9,PC} \n"
  32 "loc_FF872460:\n"
  33       "LDR     R0, [SP] \n"
  34       "LDR     R1, [R0] \n"
  35       "CMP     R1, #0x20 \n"
  36       "ADDCC   PC, PC, R1, LSL #2 \n"
  37       "B       loc_FF8726BC \n"
  38       "B       loc_FF8724F4 \n"
  39       "B       loc_FF87250C \n"
  40       "B       loc_FF872570 \n"
  41       "B       loc_FF872584 \n"
  42       "B       loc_FF87257C \n"
  43       "B       loc_FF872590 \n"
  44       "B       loc_FF872598 \n"
  45       "B       loc_FF8725A0 \n"
  46       "B       loc_FF8725BC \n"
  47       "B       loc_FF8725E8 \n"
  48       "B       loc_FF8725C8 \n"
  49       "B       loc_FF8725D4 \n"
  50       "B       loc_FF8725DC \n"
  51       "B       loc_FF8725F0 \n"
  52       "B       loc_FF8725F8 \n"
  53       "B       loc_FF872600 \n"
  54       "B       loc_FF872608 \n"
  55       "B       loc_FF872610 \n"
  56       "B       loc_FF87261C \n"
  57       "B       loc_FF872624 \n"
  58       "B       loc_FF87262C \n"
  59       "B       loc_FF872634 \n"
  60       "B       loc_FF87263C \n"
  61       "B       loc_FF872648 \n"
  62       "B       loc_FF872650 \n"
  63       "B       loc_FF872658 \n"
  64       "B       loc_FF872660 \n"
  65       "B       loc_FF872668 \n"
  66       "B       loc_FF872674 \n"
  67       "B       loc_FF87267C \n"
  68       "B       loc_FF872688 \n"
  69       "B       loc_FF8726C8 \n"
  70 "loc_FF8724F4:\n"
  71       "BL               shooting_expo_iso_override\n"       // added
  72       "BL      sub_FF872C3C \n"
  73       "BL      shooting_expo_param_override\n"      // added
  74       "BL      sub_FF870230 \n"
  75 //      "LDR     R0, [R4, #0x28] \n"
  76 //      "CMP     R0, #0 \n"
  77 //      "BLNE    sub_FF968D48 \n" // above 3 lines removed - redundant with added lines below
  78       "MOV     R0, #0\n"          // patch added
  79       "STR     R0, [R4,#0x28]\n"  //fixes overrides  behavior at short shutter press
  80       "B       loc_FF8726C8 \n"
  81 "loc_FF87250C:\n"
  82       "LDR     R5, [R0, #0x10] \n"
  83       "LDR     R0, [R4, #0x28] \n"
  84       "CMP     R0, #0 \n"
  85       "BNE     loc_FF872548 \n"
  86       "BL      sub_FF873B4C \n"
  87       "MOV     R1, R5 \n"
  88       "BL      sub_FF873BA4 \n"
  89       "LDR     R0, =0x10F \n"
  90       "MOV     R2, #4 \n"
  91       "ADD     R1, R5, #0x24 \n"
  92       "BL      _SetPropertyCase \n"
  93       "MOV     R2, #4 \n"
  94       "ADD     R1, R5, #0x28 \n"
  95       "MOV     R0, #0x2C \n"
  96       "BL      _SetPropertyCase \n"
  97 "loc_FF872548:\n"
  98       "MOV     R0, R5 \n"
  99 //      "BL      sub_FF968CAC \n" //original
 100       "BL      sub_FF968CAC_my \n" //patched
 101       "BL      capt_seq_hook_raw_here \n" // patch
 102       "MOV     R8, R0 \n"
 103       "MOV     R2, R5 \n"
 104       "MOV     R1, #1 \n"
 105       "BL      sub_FF8706E0 \n"
 106       "TST     R8, #1 \n"
 107       "MOVEQ   R0, R5 \n"
 108       "BLEQ    sub_FF968628 \n"
 109       "B       loc_FF8726C8 \n"
 110 "loc_FF872570:\n"
 111       "MOV     R0, #1 \n"
 112       "BL      sub_FF872F0C \n"
 113       "B       loc_FF8726C8 \n"
 114 "loc_FF87257C:\n"
 115       "BL      sub_FF872890 \n"
 116       "B       loc_FF872588 \n"
 117 "loc_FF872584:\n"
 118       "BL      sub_FF872C1C \n"
 119 "loc_FF872588:\n"
 120       "STR     R6, [R4, #0x28] \n"
 121       "B       loc_FF8726C8 \n"
 122 "loc_FF872590:\n"
 123       "BL      sub_FF872C24 \n"
 124       "B       loc_FF8726C8 \n"
 125 "loc_FF872598:\n"
 126       "BL      sub_FF872DF4 \n"
 127       "B       loc_FF8725C0 \n"
 128 "loc_FF8725A0:\n"
 129       "LDR     R5, [R0, #0x10] \n"
 130       "MOV     R0, R5 \n"
 131       "BL      sub_FF968DE0 \n"
 132       "MOV     R2, R5 \n"
 133       "MOV     R1, #9 \n"
 134       "BL      sub_FF8706E0 \n"
 135       "B       loc_FF8726C8 \n"
 136 "loc_FF8725BC:\n"
 137       "BL      sub_FF872E74 \n"
 138 "loc_FF8725C0:\n"
 139       "BL      sub_FF870230 \n"
 140       "B       loc_FF8726C8 \n"
 141 "loc_FF8725C8:\n"
 142       "LDR     R0, [R4, #0x58] \n"
 143       "BL      sub_FF8732FC \n"
 144       "B       loc_FF8726C8 \n"
 145 "loc_FF8725D4:\n"
 146       "BL      sub_FF8736BC \n"
 147       "B       loc_FF8726C8 \n"
 148 "loc_FF8725DC:\n"
 149       "MOV     R0, #0 \n"
 150       "BL      sub_FF873720 \n"
 151       "B       loc_FF8726C8 \n"
 152 "loc_FF8725E8:\n"
 153       "BL      sub_FF872C1C \n"
 154       "B       loc_FF8726C8 \n"
 155 "loc_FF8725F0:\n"
 156       "BL      sub_FF9679CC \n"
 157       "B       loc_FF8726C8 \n"
 158 "loc_FF8725F8:\n"
 159       "BL      sub_FF967C2C \n"
 160       "B       loc_FF8726C8 \n"
 161 "loc_FF872600:\n"
 162       "BL      sub_FF967CE4 \n"
 163       "B       loc_FF8726C8 \n"
 164 "loc_FF872608:\n"
 165       "BL      sub_FF967DB8 \n"
 166       "B       loc_FF8726C8 \n"
 167 "loc_FF872610:\n"
 168       "MOV     R0, #0 \n"
 169       "BL      sub_FF968018 \n"
 170       "B       loc_FF8726C8 \n"
 171 "loc_FF87261C:\n"
 172       "BL      sub_FF968188 \n"
 173       "B       loc_FF8726C8 \n"
 174 "loc_FF872624:\n"
 175       "BL      sub_FF96821C \n"
 176       "B       loc_FF8726C8 \n"
 177 "loc_FF87262C:\n"
 178       "BL      sub_FF9682D8 \n"
 179       "B       loc_FF8726C8 \n"
 180 "loc_FF872634:\n"
 181       "BL      sub_FF873080 \n"
 182       "B       loc_FF8726C8 \n"
 183 "loc_FF87263C:\n"
 184       "BL      sub_FF873104 \n"
 185       "BL      sub_FF8322CC \n"
 186       "B       loc_FF8726C8 \n"
 187 "loc_FF872648:\n"
 188       "BL      sub_FF967E88 \n"
 189       "B       loc_FF8726C8 \n"
 190 "loc_FF872650:\n"
 191       "BL      sub_FF967EC8 \n"
 192       "B       loc_FF8726C8 \n"
 193 "loc_FF872658:\n"
 194       "BL      sub_FF875028 \n"
 195       "B       loc_FF8726C8 \n"
 196 "loc_FF872660:\n"
 197       "BL      sub_FF87509C \n"
 198       "B       loc_FF8726C8 \n"
 199 "loc_FF872668:\n"
 200       "LDR     R0, [R0, #0xC] \n"
 201       "BL      sub_FF968400 \n"
 202       "B       loc_FF8726C8 \n"
 203 "loc_FF872674:\n"
 204       "BL      sub_FF968470 \n"
 205       "B       loc_FF8726C8 \n"
 206 "loc_FF87267C:\n"
 207       "BL      sub_FF875104 \n"
 208       "BL      sub_FF8750BC \n"
 209       "B       loc_FF8726C8 \n"
 210 "loc_FF872688:\n"
 211       "MOV     R0, #1 \n"
 212       "BL      sub_FF9694E0 \n"
 213       "MOV     R0, #1 \n"
 214       "BL      sub_FF969608 \n"
 215       "LDRH    R0, [R4, #0x9C] \n"
 216       "CMP     R0, #4 \n"
 217       "LDRNEH  R0, [R4] \n"
 218       "SUBNE   R1, R0, #0x8200 \n"
 219       "SUBNES  R1, R1, #0x2E \n"
 220       "BNE     loc_FF8726C8 \n"
 221       "BL      sub_FF87509C \n"
 222       "BL      sub_FF875560 \n"
 223       "B       loc_FF8726C8 \n"
 224 "loc_FF8726BC:\n"
 225       "LDR     R1, =0x5F4 \n"
 226       "LDR     R0, =0xFF871F90 \n" // "SsShootTask.c"
 227       "BL      _DebugAssert \n"
 228 "loc_FF8726C8:\n"
 229       "LDR     R0, [SP] \n"
 230       "LDR     R1, [R0, #4] \n"
 231       "LDR     R0, [R7] \n"
 232       "BL      sub_003FAC6C \n"
 233       "LDR     R5, [SP] \n"
 234       "LDR     R0, [R5, #8] \n"
 235       "CMP     R0, #0 \n"
 236       "LDREQ   R1, =0x117 \n"
 237       "LDREQ   R0, =0xFF871F90 \n" // "SsShootTask.c"
 238       "BLEQ    _DebugAssert \n"
 239       "STR     R6, [R5, #8] \n"
 240       "B       loc_FF872434 \n"
 241         );
 242 }
 243 
 244 //** sub_FF968CAC_my  @ 0xFF968CAC
 245 //CHECK THIS!!!
 246 void __attribute__((naked,noinline)) sub_FF968CAC_my() {
 247 asm volatile (
 248       "STMFD   SP!, {R4-R6,LR} \n"
 249       "LDR     R5, =0x376AC \n"
 250       "MOV     R6, R0 \n"
 251       "LDR     R0, [R5, #0x28] \n"
 252       "MOV     R4, #0 \n"
 253       "CMP     R0, #0 \n"
 254       "BNE     loc_FF968CDC \n"
 255       "MOV     R0, #0xC \n"
 256       "BL      sub_FF876C00 \n"
 257       "TST     R0, #1 \n"
 258       "MOVNE   R0, #1 \n"
 259       "LDMNEFD SP!, {R4-R6,PC} \n"
 260 "loc_FF968CDC:\n"
 261       "BL      sub_FF872C2C \n"
 262       "LDR     R0, [R5, #0x28] \n"
 263       "CMP     R0, #0 \n"
 264       "BNE     loc_FF968D2C \n"
 265       "MOV     R0, R6 \n"
 266       "BL      sub_FF968568 \n"
 267       "TST     R0, #1 \n"
 268       "LDMNEFD SP!, {R4-R6,PC} \n"
 269       "MOV     R0, R6 \n"
 270       "BL      sub_FF9688FC \n"
 271       "BL      sub_FF9692C0 \n"
 272 
 273 //This was not tested:
 274 //begin patch
 275       "BL      wait_until_remote_button_is_released\n"  
 276       "BL      capt_seq_hook_set_nr\n"      
 277 //end patch            
 278       "MOV     R0, #2 \n"
 279       "BL      sub_FF878360 \n"
 280       "LDR     R0, [R5, #0x8C] \n"
 281       "TST     R0, #0x10 \n"
 282       "BNE     loc_FF968D3C \n"
 283       "MOV     R0, R6 \n"
 284       "BL      sub_FFA8745C \n" //This function calls *"SsStandardCaptureSeq.c"
 285 //      "BL      sub_FFA8745C_my \n" //This function calls "SsStandardCaptureSeq.c"
 286       "MOV     R4, R0 \n"
 287       "B       loc_FF968D40 \n"
 288 "loc_FF968D2C:\n"
 289       "LDR     R0, =0x694C \n"
 290       "LDR     R0, [R0] \n"
 291       "CMP     R0, #0 \n"
 292       "BEQ     loc_FF968D40 \n"
 293 "loc_FF968D3C:\n"
 294       "MOV     R4, #0x1D \n"
 295 "loc_FF968D40:\n"
 296       "MOV     R0, R4 \n"
 297       "LDMFD   SP!, {R4-R6,PC} \n"
 298         );
 299 }
 300 
 301 
 302 //** exp_drv_task  @ 0xFF8B1A4C 
 303 
 304 void __attribute__((naked,noinline)) exp_drv_task() {
 305 asm volatile (
 306       "STMFD   SP!, {R4-R9,LR} \n"
 307       "SUB     SP, SP, #0x2C \n"
 308       "LDR     R6, =0x3E3C \n"
 309       "LDR     R7, =0xBB8 \n"
 310       "LDR     R4, =0x5465C \n"
 311       "MOV     R0, #0 \n"
 312       "ADD     R5, SP, #0x1C \n"
 313       "STR     R0, [SP, #0xC] \n"
 314 "loc_FF8B1A6C:\n"
 315       "LDR     R0, [R6, #0x20] \n"
 316       "MOV     R2, #0 \n"
 317       "ADD     R1, SP, #0x28 \n"
 318       "BL      sub_003F7218 \n"
 319       "LDR     R0, [SP, #0xC] \n"
 320       "CMP     R0, #1 \n"
 321       "BNE     loc_FF8B1AB8 \n"
 322       "LDR     R0, [SP, #0x28] \n"
 323       "LDR     R0, [R0] \n"
 324       "CMP     R0, #0x14 \n"
 325       "CMPNE   R0, #0x15 \n"
 326       "CMPNE   R0, #0x16 \n"
 327       "CMPNE   R0, #0x17 \n"
 328       "BEQ     loc_FF8B1C18 \n"
 329       "CMP     R0, #0x2A \n"
 330       "BEQ     loc_FF8B1BA0 \n"
 331       "ADD     R1, SP, #0xC \n"
 332       "MOV     R0, #0 \n"
 333       "BL      sub_FF8B19FC \n"
 334 "loc_FF8B1AB8:\n"
 335       "LDR     R0, [SP, #0x28] \n"
 336       "LDR     R1, [R0] \n"
 337       "CMP     R1, #0x30 \n"
 338       "BNE     loc_FF8B1AE4 \n"
 339       "BL      sub_FF8B2E2C \n"
 340       "LDR     R0, [R6, #0x1C] \n"
 341       "MOV     R1, #1 \n"
 342       "BL      sub_003FAC6C \n"
 343       "BL      _ExitTask \n"
 344       "ADD     SP, SP, #0x2C \n"
 345       "LDMFD   SP!, {R4-R9,PC} \n"
 346 "loc_FF8B1AE4:\n"
 347       "CMP     R1, #0x2F \n"
 348       "BNE     loc_FF8B1B00 \n"
 349       "LDR     R2, [R0, #0x8C]! \n"
 350       "LDR     R1, [R0, #4] \n"
 351       "MOV     R0, R1 \n"
 352       "BLX     R2 \n"
 353       "B       loc_FF8B20D4 \n"
 354 "loc_FF8B1B00:\n"
 355       "CMP     R1, #0x28 \n"
 356       "BNE     loc_FF8B1B50 \n"
 357       "LDR     R0, [R6, #0x1C] \n"
 358       "MOV     R1, #0x80 \n"
 359       "BL      sub_003FACA0 \n"
 360       "LDR     R0, =0xFF8AD360 \n"
 361       "MOV     R1, #0x80 \n"
 362       "BL      sub_FF959A4C \n"
 363       "LDR     R0, [R6, #0x1C] \n"
 364       "MOV     R2, R7 \n"
 365       "MOV     R1, #0x80 \n"
 366       "BL      sub_003FABAC \n"
 367       "TST     R0, #1 \n"
 368       "LDRNE   R1, =0x157A \n"
 369       "BNE     loc_FF8B1C0C \n"
 370 "loc_FF8B1B3C:\n"
 371       "LDR     R1, [SP, #0x28] \n"
 372       "LDR     R0, [R1, #0x90] \n"
 373       "LDR     R1, [R1, #0x8C] \n"
 374       "BLX     R1 \n"
 375       "B       loc_FF8B20D4 \n"
 376 "loc_FF8B1B50:\n"
 377       "CMP     R1, #0x29 \n"
 378       "BNE     loc_FF8B1B98 \n"
 379       "ADD     R1, SP, #0xC \n"
 380       "BL      sub_FF8B19FC \n"
 381       "LDR     R0, [R6, #0x1C] \n"
 382       "MOV     R1, #0x100 \n"
 383       "BL      sub_003FACA0 \n"
 384       "LDR     R0, =0xFF8AD370 \n"
 385       "MOV     R1, #0x100 \n"
 386       "BL      sub_FF959BEC \n"
 387       "LDR     R0, [R6, #0x1C] \n"
 388       "MOV     R2, R7 \n"
 389       "MOV     R1, #0x100 \n"
 390       "BL      sub_003FABAC \n"
 391       "TST     R0, #1 \n"
 392       "BEQ     loc_FF8B1B3C \n"
 393       "LDR     R1, =0x1584 \n"
 394       "B       loc_FF8B1C0C \n"
 395 "loc_FF8B1B98:\n"
 396       "CMP     R1, #0x2A \n"
 397       "BNE     loc_FF8B1BB0 \n"
 398 "loc_FF8B1BA0:\n"
 399       "LDR     R0, [SP, #0x28] \n"
 400       "ADD     R1, SP, #0xC \n"
 401       "BL      sub_FF8B19FC \n"
 402       "B       loc_FF8B1B3C \n"
 403 "loc_FF8B1BB0:\n"
 404       "CMP     R1, #0x2D \n"
 405       "BNE     loc_FF8B1BC8 \n"
 406       "BL      sub_FF89E640 \n"
 407       "BL      sub_FF89F328 \n"
 408       "BL      sub_FF89EE90 \n"
 409       "B       loc_FF8B1B3C \n"
 410 "loc_FF8B1BC8:\n"
 411       "CMP     R1, #0x2E \n"
 412       "BNE     loc_FF8B1C18 \n"
 413       "LDR     R0, [R6, #0x1C] \n"
 414       "MOV     R1, #4 \n"
 415       "BL      sub_003FACA0 \n"
 416       "LDR     R1, =0xFF8AD390 \n"
 417       "LDR     R0, =0xFFFFF400 \n"
 418       "MOV     R2, #4 \n"
 419       "BL      sub_FF89E090 \n"
 420       "BL      sub_FF89E320 \n"
 421       "LDR     R0, [R6, #0x1C] \n"
 422       "MOV     R2, R7 \n"
 423       "MOV     R1, #4 \n"
 424       "BL      sub_003FAAC8 \n"
 425       "TST     R0, #1 \n"
 426       "BEQ     loc_FF8B1B3C \n"
 427       "LDR     R1, =0x15AC \n"
 428 "loc_FF8B1C0C:\n"
 429       "LDR     R0, =0xFF8ADA84 \n"
 430       "BL      _DebugAssert \n"
 431       "B       loc_FF8B1B3C \n"
 432 "loc_FF8B1C18:\n"
 433       "LDR     R0, [SP, #0x28] \n"
 434       "MOV     R8, #1 \n"
 435       "LDR     R1, [R0] \n"
 436       "CMP     R1, #0x12 \n"
 437       "CMPNE   R1, #0x13 \n"
 438       "BNE     loc_FF8B1C80 \n"
 439       "LDR     R1, [R0, #0x7C] \n"
 440       "ADD     R1, R1, R1, LSL #1 \n"
 441       "ADD     R1, R0, R1, LSL #2 \n"
 442       "SUB     R1, R1, #8 \n"
 443       "LDMIA   R1, {R2,R3,R9} \n"
 444       "STMIA   R5, {R2,R3,R9} \n"
 445       "BL      sub_FF8AFF9C \n"
 446       "LDR     R0, [SP, #0x28] \n"
 447       "LDR     R1, [R0, #0x7C] \n"
 448       "LDR     R3, [R0, #0x8C] \n"
 449       "LDR     R2, [R0, #0x90] \n"
 450       "ADD     R0, R0, #4 \n"
 451       "BLX     R3 \n"
 452       "LDR     R0, [SP, #0x28] \n"
 453       "BL      sub_FF8B3230 \n"
 454       "LDR     R0, [SP, #0x28] \n"
 455       "LDR     R1, [R0, #0x7C] \n"
 456       "LDR     R2, [R0, #0x98] \n"
 457       "LDR     R3, [R0, #0x94] \n"
 458       "B       loc_FF8B1F98 \n"
 459 "loc_FF8B1C80:\n"
 460       "CMP     R1, #0x14 \n"
 461       "CMPNE   R1, #0x15 \n"
 462       "CMPNE   R1, #0x16 \n"
 463       "CMPNE   R1, #0x17 \n"
 464       "BNE     loc_FF8B1D38 \n"
 465       "ADD     R3, SP, #0xC \n"
 466       "MOV     R2, SP \n"
 467       "ADD     R1, SP, #0x1C \n"
 468       "BL      sub_FF8B01FC \n"
 469       "CMP     R0, #1 \n"
 470       "MOV     R9, R0 \n"
 471       "CMPNE   R9, #5 \n"
 472       "BNE     loc_FF8B1CD4 \n"
 473       "LDR     R0, [SP, #0x28] \n"
 474       "MOV     R2, R9 \n"
 475       "LDR     R1, [R0, #0x7C]! \n"
 476       "LDR     R12, [R0, #0x10]! \n"
 477       "LDR     R3, [R0, #4] \n"
 478       "MOV     R0, SP \n"
 479       "BLX     R12 \n"
 480       "B       loc_FF8B1D0C \n"
 481 "loc_FF8B1CD4:\n"
 482       "LDR     R0, [SP, #0x28] \n"
 483       "CMP     R9, #2 \n"
 484       "LDR     R3, [R0, #0x90] \n"
 485       "CMPNE   R9, #6 \n"
 486       "BNE     loc_FF8B1D20 \n"
 487       "LDR     R12, [R0, #0x8C] \n"
 488       "MOV     R2, R9 \n"
 489       "MOV     R1, #1 \n"
 490       "MOV     R0, SP \n"
 491       "BLX     R12 \n"
 492       "LDR     R0, [SP, #0x28] \n"
 493       "MOV     R2, SP \n"
 494       "ADD     R1, SP, #0x1C \n"
 495       "BL      sub_FF8B16EC \n"
 496 "loc_FF8B1D0C:\n"
 497       "LDR     R0, [SP, #0x28] \n"
 498       "LDR     R2, [SP, #0xC] \n"
 499       "MOV     R1, R9 \n"
 500       "BL      sub_FF8B193C \n"
 501       "B       loc_FF8B1FA0 \n"
 502 "loc_FF8B1D20:\n"
 503       "LDR     R1, [R0, #0x7C] \n"
 504       "LDR     R12, [R0, #0x8C] \n"
 505       "MOV     R2, R9 \n"
 506       "ADD     R0, R0, #4 \n"
 507       "BLX     R12 \n"
 508       "B       loc_FF8B1FA0 \n"
 509 "loc_FF8B1D38:\n"
 510       "CMP     R1, #0x24 \n"
 511       "CMPNE   R1, #0x25 \n"
 512       "BNE     loc_FF8B1D84 \n"
 513       "LDR     R1, [R0, #0x7C] \n"
 514       "ADD     R1, R1, R1, LSL #1 \n"
 515       "ADD     R1, R0, R1, LSL #2 \n"
 516       "SUB     R1, R1, #8 \n"
 517       "LDMIA   R1, {R2,R3,R9} \n"
 518       "STMIA   R5, {R2,R3,R9} \n"
 519       "BL      sub_FF8AEF88 \n"
 520       "LDR     R0, [SP, #0x28] \n"
 521       "LDR     R1, [R0, #0x7C] \n"
 522       "LDR     R3, [R0, #0x8C] \n"
 523       "LDR     R2, [R0, #0x90] \n"
 524       "ADD     R0, R0, #4 \n"
 525       "BLX     R3 \n"
 526       "LDR     R0, [SP, #0x28] \n"
 527       "BL      sub_FF8AF3C8 \n"
 528       "B       loc_FF8B1FA0 \n"
 529 "loc_FF8B1D84:\n"
 530       "ADD     R1, R0, #4 \n"
 531       "LDMIA   R1, {R2,R3,R9} \n"
 532       "STMIA   R5, {R2,R3,R9} \n"
 533       "LDR     R1, [R0] \n"
 534       "CMP     R1, #0x28 \n"
 535       "ADDCC   PC, PC, R1, LSL #2 \n"
 536       "B       loc_FF8B1F88 \n"
 537       "B       loc_FF8B1E40 \n"
 538       "B       loc_FF8B1E40 \n"
 539       "B       loc_FF8B1E48 \n"
 540       "B       loc_FF8B1E50 \n"
 541       "B       loc_FF8B1E50 \n"
 542       "B       loc_FF8B1E50 \n"
 543       "B       loc_FF8B1E40 \n"
 544       "B       loc_FF8B1E48 \n"
 545       "B       loc_FF8B1E50 \n"
 546       "B       loc_FF8B1E50 \n"
 547       "B       loc_FF8B1E68 \n"
 548       "B       loc_FF8B1E68 \n"
 549       "B       loc_FF8B1F74 \n"
 550       "B       loc_FF8B1F7C \n"
 551       "B       loc_FF8B1F7C \n"
 552       "B       loc_FF8B1F7C \n"
 553       "B       loc_FF8B1F7C \n"
 554       "B       loc_FF8B1F84 \n"
 555       "B       loc_FF8B1F88 \n"
 556       "B       loc_FF8B1F88 \n"
 557       "B       loc_FF8B1F88 \n"
 558       "B       loc_FF8B1F88 \n"
 559       "B       loc_FF8B1F88 \n"
 560       "B       loc_FF8B1F88 \n"
 561       "B       loc_FF8B1E58 \n"
 562       "B       loc_FF8B1E60 \n"
 563       "B       loc_FF8B1E60 \n"
 564       "B       loc_FF8B1E60 \n"
 565       "B       loc_FF8B1E74 \n"
 566       "B       loc_FF8B1E74 \n"
 567       "B       loc_FF8B1E7C \n"
 568       "B       loc_FF8B1EB4 \n"
 569       "B       loc_FF8B1EEC \n"
 570       "B       loc_FF8B1F24 \n"
 571       "B       loc_FF8B1F5C \n"
 572       "B       loc_FF8B1F5C \n"
 573       "B       loc_FF8B1F88 \n"
 574       "B       loc_FF8B1F88 \n"
 575       "B       loc_FF8B1F64 \n"
 576       "B       loc_FF8B1F6C \n"
 577 "loc_FF8B1E40:\n"
 578       "BL      sub_FF8AD908 \n"
 579       "B       loc_FF8B1F88 \n"
 580 "loc_FF8B1E48:\n"
 581       "BL      sub_FF8ADBAC \n"
 582       "B       loc_FF8B1F88 \n"
 583 "loc_FF8B1E50:\n"
 584       "BL      sub_FF8ADDD4 \n"
 585       "B       loc_FF8B1F88 \n"
 586 "loc_FF8B1E58:\n"
 587       "BL      sub_FF8AE0F8 \n"
 588       "B       loc_FF8B1F88 \n"
 589 "loc_FF8B1E60:\n"
 590       "BL      sub_FF8AE310 \n"
 591       "B       loc_FF8B1F88 \n"
 592 "loc_FF8B1E68:\n"
 593 //      "BL      sub_FF8AE6BC \n"  //original
 594       "BL      sub_FF8AE6BC_my \n" //patched
 595       "MOV     R8, #0 \n"
 596       "B       loc_FF8B1F88 \n"
 597 "loc_FF8B1E74:\n"
 598       "BL      sub_FF8AE7FC \n"
 599       "B       loc_FF8B1F88 \n"
 600 "loc_FF8B1E7C:\n"
 601       "LDRH    R1, [R0, #4] \n"
 602       "STRH    R1, [SP, #0x1C] \n"
 603       "LDRH    R1, [R4, #2] \n"
 604       "STRH    R1, [SP, #0x1E] \n"
 605       "LDRH    R1, [R4, #4] \n"
 606       "STRH    R1, [SP, #0x20] \n"
 607       "LDRH    R1, [R4, #6] \n"
 608       "STRH    R1, [SP, #0x22] \n"
 609       "LDRH    R1, [R0, #0xC] \n"
 610       "STRH    R1, [SP, #0x24] \n"
 611       "LDRH    R1, [R4, #0xA] \n"
 612       "STRH    R1, [SP, #0x26] \n"
 613       "BL      sub_FF8B2EC0 \n"
 614       "B       loc_FF8B1F88 \n"
 615 "loc_FF8B1EB4:\n"
 616       "LDRH    R1, [R0, #4] \n"
 617       "STRH    R1, [SP, #0x1C] \n"
 618       "LDRH    R1, [R4, #2] \n"
 619       "STRH    R1, [SP, #0x1E] \n"
 620       "LDRH    R1, [R4, #4] \n"
 621       "STRH    R1, [SP, #0x20] \n"
 622       "LDRH    R1, [R4, #6] \n"
 623       "STRH    R1, [SP, #0x22] \n"
 624       "LDRH    R1, [R4, #8] \n"
 625       "STRH    R1, [SP, #0x24] \n"
 626       "LDRH    R1, [R4, #0xA] \n"
 627       "STRH    R1, [SP, #0x26] \n"
 628       "BL      sub_FF8B3030 \n"
 629       "B       loc_FF8B1F88 \n"
 630 "loc_FF8B1EEC:\n"
 631       "LDRH    R1, [R4] \n"
 632       "STRH    R1, [SP, #0x1C] \n"
 633       "LDRH    R1, [R0, #6] \n"
 634       "STRH    R1, [SP, #0x1E] \n"
 635       "LDRH    R1, [R4, #4] \n"
 636       "STRH    R1, [SP, #0x20] \n"
 637       "LDRH    R1, [R4, #6] \n"
 638       "STRH    R1, [SP, #0x22] \n"
 639       "LDRH    R1, [R4, #8] \n"
 640       "STRH    R1, [SP, #0x24] \n"
 641       "LDRH    R1, [R4, #0xA] \n"
 642       "STRH    R1, [SP, #0x26] \n"
 643       "BL      sub_FF8B30E4 \n"
 644       "B       loc_FF8B1F88 \n"
 645 "loc_FF8B1F24:\n"
 646       "LDRH    R1, [R4] \n"
 647       "STRH    R1, [SP, #0x1C] \n"
 648       "LDRH    R1, [R4, #2] \n"
 649       "STRH    R1, [SP, #0x1E] \n"
 650       "LDRH    R1, [R4, #4] \n"
 651       "STRH    R1, [SP, #0x20] \n"
 652       "LDRH    R1, [R4, #6] \n"
 653       "STRH    R1, [SP, #0x22] \n"
 654       "LDRH    R1, [R0, #0xC] \n"
 655       "STRH    R1, [SP, #0x24] \n"
 656       "LDRH    R1, [R4, #0xA] \n"
 657       "STRH    R1, [SP, #0x26] \n"
 658       "BL      sub_FF8B318C \n"
 659       "B       loc_FF8B1F88 \n"
 660 "loc_FF8B1F5C:\n"
 661       "BL      sub_FF8AED3C \n"
 662       "B       loc_FF8B1F88 \n"
 663 "loc_FF8B1F64:\n"
 664       "BL      sub_FF8AF4CC \n"
 665       "B       loc_FF8B1F88 \n"
 666 "loc_FF8B1F6C:\n"
 667       "BL      sub_FF8AF7B0 \n"
 668       "B       loc_FF8B1F88 \n"
 669 "loc_FF8B1F74:\n"
 670       "BL      sub_FF8AFA70 \n"
 671       "B       loc_FF8B1F88 \n"
 672 "loc_FF8B1F7C:\n"
 673       "BL      sub_FF8AFC2C \n"
 674       "B       loc_FF8B1F88 \n"
 675 "loc_FF8B1F84:\n"
 676       "BL      sub_FF8AFD94 \n"
 677 "loc_FF8B1F88:\n"
 678       "LDR     R0, [SP, #0x28] \n"
 679       "LDR     R1, [R0, #0x7C] \n"
 680       "LDR     R2, [R0, #0x90] \n"
 681       "LDR     R3, [R0, #0x8C] \n"
 682 "loc_FF8B1F98:\n"
 683       "ADD     R0, R0, #4 \n"
 684       "BLX     R3 \n"
 685 "loc_FF8B1FA0:\n"
 686       "LDR     R0, [SP, #0x28] \n"
 687       "LDR     R0, [R0] \n"
 688       "CMP     R0, #0x10 \n"
 689       "BEQ     loc_FF8B1FD8 \n"
 690       "BGT     loc_FF8B1FC8 \n"
 691       "CMP     R0, #1 \n"
 692       "CMPNE   R0, #4 \n"
 693       "CMPNE   R0, #0xE \n"
 694       "BNE     loc_FF8B200C \n"
 695       "B       loc_FF8B1FD8 \n"
 696 "loc_FF8B1FC8:\n"
 697       "CMP     R0, #0x13 \n"
 698       "CMPNE   R0, #0x17 \n"
 699       "CMPNE   R0, #0x1A \n"
 700       "BNE     loc_FF8B200C \n"
 701 "loc_FF8B1FD8:\n"
 702       "LDRSH   R0, [R4] \n"
 703       "CMN     R0, #0xC00 \n"
 704       "LDRNESH R1, [R4, #8] \n"
 705       "CMNNE   R1, #0xC00 \n"
 706       "STRNEH  R0, [SP, #0x1C] \n"
 707       "STRNEH  R1, [SP, #0x24] \n"
 708       "BNE     loc_FF8B200C \n"
 709       "ADD     R0, SP, #0x10 \n"
 710       "BL      sub_FF8B343C \n"
 711       "LDRH    R0, [SP, #0x10] \n"
 712       "STRH    R0, [SP, #0x1C] \n"
 713       "LDRH    R0, [SP, #0x18] \n"
 714       "STRH    R0, [SP, #0x24] \n"
 715 "loc_FF8B200C:\n"
 716       "LDR     R0, [SP, #0x28] \n"
 717       "CMP     R8, #1 \n"
 718       "BNE     loc_FF8B205C \n"
 719       "LDR     R1, [R0, #0x7C] \n"
 720       "MOV     R2, #0xC \n"
 721       "ADD     R1, R1, R1, LSL #1 \n"
 722       "ADD     R0, R0, R1, LSL #2 \n"
 723       "SUB     R8, R0, #8 \n"
 724       "LDR     R0, =0x5465C \n"
 725       "ADD     R1, SP, #0x1C \n"
 726       "BL      sub_003FC17C \n"
 727       "LDR     R0, =0x54668 \n"
 728       "MOV     R2, #0xC \n"
 729       "ADD     R1, SP, #0x1C \n"
 730       "BL      sub_003FC17C \n"
 731       "LDR     R0, =0x54674 \n"
 732       "MOV     R2, #0xC \n"
 733       "MOV     R1, R8 \n"
 734       "BL      sub_003FC17C \n"
 735       "B       loc_FF8B20D4 \n"
 736 "loc_FF8B205C:\n"
 737       "LDR     R0, [R0] \n"
 738       "MOV     R3, #1 \n"
 739       "CMP     R0, #0xB \n"
 740       "BNE     loc_FF8B20A0 \n"
 741       "MOV     R2, #0 \n"
 742       "STRD    R2, [SP] \n"
 743       "MOV     R2, R3 \n"
 744       "MOV     R1, R3 \n"
 745       "MOV     R0, #0 \n"
 746       "BL      sub_FF8AD6E8 \n"
 747       "MOV     R3, #1 \n"
 748       "MOV     R2, #0 \n"
 749       "STRD    R2, [SP] \n"
 750       "MOV     R2, R3 \n"
 751       "MOV     R1, R3 \n"
 752       "MOV     R0, #0 \n"
 753       "B       loc_FF8B20D0 \n"
 754 "loc_FF8B20A0:\n"
 755       "MOV     R2, #1 \n"
 756       "STRD    R2, [SP] \n"
 757       "MOV     R3, R2 \n"
 758       "MOV     R1, R2 \n"
 759       "MOV     R0, R2 \n"
 760       "BL      sub_FF8AD6E8 \n"
 761       "MOV     R3, #1 \n"
 762       "MOV     R2, R3 \n"
 763       "MOV     R1, R3 \n"
 764       "MOV     R0, R3 \n"
 765       "STR     R3, [SP] \n"
 766       "STR     R3, [SP, #4] \n"
 767 "loc_FF8B20D0:\n"
 768       "BL      sub_FF8AD854 \n"
 769 "loc_FF8B20D4:\n"
 770       "LDR     R0, [SP, #0x28] \n"
 771       "BL      sub_FF8B2E2C \n"
 772       "B       loc_FF8B1A6C \n"
 773         );
 774 }
 775 
 776 //** sub_FF8AE6BC_my  @ 0xFF8AE6BC 
 777 
 778 void __attribute__((naked,noinline)) sub_FF8AE6BC_my() {
 779 asm volatile (
 780       "STMFD   SP!, {R4-R8,LR} \n"
 781       "LDR     R7, =0x3E3C \n"
 782       "MOV     R4, R0 \n"
 783       "LDR     R0, [R7, #0x1C] \n"
 784       "MOV     R1, #0x3E \n"
 785       "BL      sub_003FACA0 \n"
 786       "MOV     R2, #0 \n"
 787       "LDRSH   R0, [R4, #4] \n"
 788       "MOV     R1, R2 \n"
 789       "BL      sub_FF8AD3F0 \n"
 790       "MOV     R6, R0 \n"
 791       "LDRSH   R0, [R4, #6] \n"
 792       "BL      sub_FF8AD540 \n"
 793       "LDRSH   R0, [R4, #8] \n"
 794       "BL      sub_FF8AD598 \n"
 795       "LDRSH   R0, [R4, #0xA] \n"
 796       "BL      sub_FF8AD5F0 \n"
 797       "LDRSH   R0, [R4, #0xC] \n"
 798       "MOV     R1, #0 \n"
 799       "BL      sub_FF8AD648 \n"
 800       "MOV     R5, R0 \n"
 801       "LDR     R0, [R4] \n"
 802       "LDR     R8, =0x54674 \n"
 803       "CMP     R0, #0xB \n"
 804       "MOVEQ   R6, #0 \n"
 805       "MOVEQ   R5, R6 \n"
 806       "BEQ     loc_FF8AE750 \n"
 807       "CMP     R6, #1 \n"
 808       "BNE     loc_FF8AE750 \n"
 809       "LDRSH   R0, [R4, #4] \n"
 810       "LDR     R1, =0xFF8AD350 \n"
 811       "MOV     R2, #2 \n"
 812       "BL      sub_FF959AD0 \n"
 813       "STRH    R0, [R4, #4] \n"
 814       "MOV     R0, #0 \n"
 815       "STR     R0, [R7, #0x28] \n"
 816       "B       loc_FF8AE758 \n"
 817 "loc_FF8AE750:\n"
 818       "LDRH    R0, [R8] \n"
 819       "STRH    R0, [R4, #4] \n"
 820 "loc_FF8AE758:\n"
 821       "CMP     R5, #1 \n"
 822       "LDRNEH  R0, [R8, #8] \n"
 823       "BNE     loc_FF8AE774 \n"
 824       "LDRSH   R0, [R4, #0xC] \n"
 825       "LDR     R1, =0xFF8AD3D4 \n"
 826       "MOV     R2, #0x20 \n"
 827       "BL      sub_FF8B2E7C \n"
 828 "loc_FF8AE774:\n"
 829       "STRH    R0, [R4, #0xC] \n"
 830       "LDRSH   R0, [R4, #6] \n"
 831 //      "BL      sub_FF89E38C \n" //original
 832       "BL      sub_FF89E38C_my\n" //patched
 833       "B       sub_FF8AE780 \n" // continue in firmware
 834         );
 835 }
 836 
 837 //** sub_FF89E38C_my  @ 0xFF89E38C 
 838 
 839 void __attribute__((naked,noinline)) sub_FF89E38C_my() {
 840 asm volatile (
 841       "STMFD   SP!, {R4-R6,LR} \n"
 842       "LDR     R5, =0x3AC8 \n"
 843       "MOV     R4, R0 \n"
 844       "LDR     R0, [R5, #4] \n"
 845       "CMP     R0, #1 \n"
 846       "LDRNE   R1, =0x14D \n"
 847       "LDRNE   R0, =0xFF89E1C4 \n"
 848       "BLNE    _DebugAssert \n"
 849       "CMN     R4, #0xC00 \n"
 850       "LDREQSH R4, [R5, #2] \n"
 851       "CMN     R4, #0xC00 \n"
 852       "LDREQ   R1, =0x153 \n"
 853       "LDREQ   R0, =0xFF89E1C4 \n"
 854       "STRH    R4, [R5, #2] \n"
 855       "BLEQ    _DebugAssert \n"
 856       "MOV     R0, R4 \n"
 857 //      "BL      _apex2us \n" //original apex2us function
 858       "BL      apex2us \n"    //patch
 859       "MOV     R4, R0 \n"
 860       "BL      sub_FF8EC460 \n"
 861       "MOV     R0, R4 \n"
 862       "BL      sub_FF8F4C68 \n"
 863       "TST     R0, #1 \n"
 864       "LDMEQFD SP!, {R4-R6,PC} \n"
 865       "LDMFD   SP!, {R4-R6,LR} \n"
 866       "MOV     R1, #0x158 \n"
 867       "LDR     R0, =0xFF89E1C4 \n"
 868       "B       _DebugAssert \n"
 869         );
 870 }

/* [<][>][^][v][top][bottom][index][help] */