root/platform/ixus105_sd1300/sub/100c/capt_seq.c

/* [<][>][^][v][top][bottom][index][help] */

DEFINITIONS

This source file includes following definitions.
  1. capt_seq_task
  2. sub_FFD203C4_my
  3. sub_FFC5FE18_my
  4. exp_drv_task
  5. sub_FFC96EB4_my
  6. sub_FFC88B9C_my

   1 #include "lolevel.h"
   2 #include "platform.h"
   3 #include "core.h"
   4 #include "conf.h"
   5 
   6 static long *nrflag = (long*)(0x5b10-0x08);  // Found @ ffd20454 & ffd20470
   7 
   8 #include "../../../generic/capt_seq.c"
   9 
  10 //** capt_seq_task  @ 0xFFC5FA2C
  11 
  12 void __attribute__((naked,noinline)) capt_seq_task(  ) { 
  13 asm volatile (
  14       "STMFD   SP!, {R3-R9,LR} \n"
  15       "LDR     R6, =0x2850 \n"
  16       "LDR     R4, =0x349A0 \n"
  17       "MOV     R9, #1 \n"
  18       "MOV     R7, #0 \n"
  19 "loc_FFC5FA40:\n"
  20       "LDR     R0, [R6, #4] \n"
  21       "MOV     R2, #0 \n"
  22       "MOV     R1, SP \n"
  23       "BL      sub_FFC2936C \n"
  24       "TST     R0, #1 \n"
  25       "BEQ     loc_FFC5FA6C \n"
  26       "LDR     R1, =0x5B4 \n"
  27       "LDR     R0, =0xFFC5F5E4 \n"
  28       "BL      sub_FFC0EB14 \n"
  29       "BL      sub_FFC0EACC \n"
  30       "LDMFD   SP!, {R3-R9,PC} \n"
  31 "loc_FFC5FA6C:\n"
  32       "LDR     R0, [SP] \n"
  33       "LDR     R1, [R0] \n"
  34       "CMP     R1, #0x1D \n"
  35       "ADDLS   PC, PC, R1, LSL #2 \n"
  36       "B       loc_FFC5FCF4 \n" 
  37       "B       loc_FFC5FAF8 \n" //(01)
  38       "B       loc_FFC5FB5C \n" //(02)
  39       "B       loc_FFC5FB98 \n" //(03)
  40       "B       loc_FFC5FBAC \n" //(04)
  41       "B       loc_FFC5FBA4 \n"
  42       "B       loc_FFC5FBB4 \n"
  43       "B       loc_FFC5FBBC \n"
  44       "B       loc_FFC5FBC4 \n"
  45       "B       loc_FFC5FC1C \n"
  46       "B       loc_FFC5FC44 \n"
  47       "B       loc_FFC5FC28 \n"
  48       "B       loc_FFC5FC34 \n"
  49       "B       loc_FFC5FC3C \n"
  50       "B       loc_FFC5FC4C \n"
  51       "B       loc_FFC5FC54 \n"
  52       "B       loc_FFC5FC5C \n"
  53       "B       loc_FFC5FC64 \n"
  54       "B       loc_FFC5FC6C \n"
  55       "B       loc_FFC5FC78 \n"
  56       "B       loc_FFC5FC80 \n"
  57       "B       loc_FFC5FC88 \n"
  58       "B       loc_FFC5FC90 \n"
  59       "B       loc_FFC5FC98 \n"
  60       "B       loc_FFC5FCA4 \n"
  61       "B       loc_FFC5FCAC \n"
  62       "B       loc_FFC5FCB4 \n"
  63       "B       loc_FFC5FCBC \n"
  64       "B       loc_FFC5FCC4 \n"
  65       "B       loc_FFC5FCD0 \n"
  66       "B       loc_FFC5FD00 \n"
  67 "loc_FFC5FAF8:\n" //Jump table entry (01)
  68       "BL      shooting_expo_iso_override\n"            //added
  69       "BL      sub_FFC6033C \n"
  70       "BL      shooting_expo_param_override\n"                  // added
  71       "BL      sub_FFC5DB3C \n"
  72       "LDR     R0, [R4, #0x24] \n"
  73       "CMP     R0, #0 \n"
  74       "BEQ     loc_FFC5FD00 \n"
  75       "BL      sub_FFC5F2C4 \n"
  76       "MOV     R5, R0 \n"
  77       "LDR     R0, [R4, #0x24] \n"
  78       "CMP     R0, #0 \n"
  79       "BEQ     loc_FFC5FB40 \n"
  80       "MOV     R0, #0xC \n"
  81       "BL      sub_FFC64130 \n"
  82       "TST     R0, #1 \n"
  83       "STRNE   R9, [R6, #0x10] \n"
  84       "LDRNE   R0, [R5, #8] \n"
  85       "ORRNE   R0, R0, #0x40000000 \n"
  86       "STRNE   R0, [R5, #8] \n"
  87       "BNE     loc_FFC5FD00 \n"
  88 "loc_FFC5FB40:\n"
  89       "MOV     R0, R5 \n"
  90       "BL      sub_FFC5F568 \n"
  91       "MOV     R0, R5 \n"
  92 //      "BL      sub_FFD203C4 \n"    //original
  93       "BL      sub_FFD203C4 \n"      //patched ---------- nr setup quick press------>
  94       "TST     R0, #1 \n"
  95       "STRNE   R9, [R6, #0x10] \n"
  96       "B       loc_FFC5FD00 \n"
  97 "loc_FFC5FB5C:\n" //Jump table entry (02)
  98       "LDR     R0, [R4, #0x24] \n"
  99       "CMP     R0, #0 \n"
 100       "BNE     loc_FFC5FB88 \n"
 101       "MOV     R0, #0xC \n"
 102       "BL      sub_FFC64130 \n"
 103       "TST     R0, #1 \n"
 104       "LDRNE   R0, [SP] \n"
 105       "MOVNE   R1, #1 \n"
 106       "LDRNE   R2, [R0, #0xC] \n"
 107       "MOVNE   R0, #1 \n"
 108       "BNE     loc_FFC5FC14 \n"
 109 "loc_FFC5FB88:\n"
 110       "LDR     R0, [SP] \n"
 111 //      "BL      sub_FFC5FE18 \n"  //original
 112       "BL      sub_FFC5FE18_my \n" //patched
 113 "loc_FFC5FB90:\n"
 114       "STR     R7, [R4, #0x24] \n"
 115       "B       loc_FFC5FD00 \n"
 116 "loc_FFC5FB98:\n"
 117       "MOV     R0, #1 \n"
 118       "BL      sub_FFC605C4 \n"
 119       "B       loc_FFC5FD00 \n"
 120 "loc_FFC5FBA4:\n"
 121       "BL      sub_FFC5FF90 \n"
 122       "B       loc_FFC5FB90 \n"
 123 "loc_FFC5FBAC:\n"
 124       "BL      sub_FFC6031C \n"
 125       "B       loc_FFC5FB90 \n"
 126 "loc_FFC5FBB4:\n"
 127       "BL      sub_FFC60324 \n"
 128       "B       loc_FFC5FD00 \n"
 129 "loc_FFC5FBBC:\n"
 130       "BL      sub_FFC604D4 \n"
 131       "B       loc_FFC5FC20 \n"
 132 "loc_FFC5FBC4:\n"
 133       "LDR     R5, [R0, #0xC] \n"
 134       "BL      sub_FFC6032C \n"
 135       "MOV     R0, R5 \n"
 136       "BL      sub_FFD1F3BC \n"
 137       "TST     R0, #1 \n"
 138       "MOV     R8, R0 \n"
 139       "BNE     loc_FFC5FC04 \n"
 140       "BL      sub_FFC70D8C \n"
 141       "STR     R0, [R5, #0x18] \n"
 142       "MOV     R0, R5 \n"
 143       "BL      sub_FFD202FC \n"
 144       "MOV     R0, R5 \n"
 145       "BL      sub_FFD206A0 \n"
 146       "MOV     R8, R0 \n"
 147       "LDR     R0, [R5, #0x18] \n"
 148       "BL      sub_FFC70FC4 \n"
 149 "loc_FFC5FC04:\n"
 150       "BL      sub_FFC6031C \n"
 151       "MOV     R2, R5 \n"
 152       "MOV     R1, #9 \n"
 153       "MOV     R0, R8 \n"
 154 "loc_FFC5FC14:\n"
 155       "BL      sub_FFC5DFB0 \n"
 156       "B       loc_FFC5FD00 \n"
 157 "loc_FFC5FC1C:\n"
 158       "BL      sub_FFC6053C \n"
 159 "loc_FFC5FC20:\n"
 160       "BL      sub_FFC5DB3C \n"
 161       "B       loc_FFC5FD00 \n"
 162 "loc_FFC5FC28:\n"
 163       "LDR     R0, [R4, #0x54] \n"
 164       "BL      sub_FFC6092C \n"
 165       "B       loc_FFC5FD00 \n"
 166 "loc_FFC5FC34:\n"
 167       "BL      sub_FFC60BE0 \n"
 168       "B       loc_FFC5FD00 \n"
 169 "loc_FFC5FC3C:\n"
 170       "BL      sub_FFC60C74 \n"
 171       "B       loc_FFC5FD00 \n"
 172 "loc_FFC5FC44:\n"
 173       "BL      sub_FFC6031C \n"
 174       "B       loc_FFC5FD00 \n"
 175 "loc_FFC5FC4C:\n"
 176       "BL      sub_FFD1F5E8 \n"
 177       "B       loc_FFC5FD00 \n"
 178 "loc_FFC5FC54:\n"
 179       "BL      sub_FFD1F7E0 \n"
 180       "B       loc_FFC5FD00 \n"
 181 "loc_FFC5FC5C:\n"
 182       "BL      sub_FFD1F874 \n"
 183       "B       loc_FFC5FD00 \n"
 184 "loc_FFC5FC64:\n"
 185       "BL      sub_FFD1F934 \n"
 186       "B       loc_FFC5FD00 \n"
 187 "loc_FFC5FC6C:\n"
 188       "MOV     R0, #0 \n"
 189       "BL      sub_FFD1FB2C \n"
 190       "B       loc_FFC5FD00 \n"
 191 "loc_FFC5FC78:\n"
 192       "BL      sub_FFD1FC7C \n"
 193       "B       loc_FFC5FD00 \n"
 194 "loc_FFC5FC80:\n"
 195       "BL      sub_FFD1FD0C \n"
 196       "B       loc_FFC5FD00 \n"
 197 "loc_FFC5FC88:\n"
 198       "BL      sub_FFD1FDCC \n"
 199       "B       loc_FFC5FD00 \n"
 200 "loc_FFC5FC90:\n"
 201       "BL      sub_FFC60718 \n"
 202       "B       loc_FFC5FD00 \n"
 203 "loc_FFC5FC98:\n"
 204       "BL      sub_FFC607AC \n"
 205       "BL      sub_FFC276BC \n"
 206       "B       loc_FFC5FD00 \n"
 207 "loc_FFC5FCA4:\n"
 208       "BL      sub_FFD1FA00 \n"
 209       "B       loc_FFC5FD00 \n"
 210 "loc_FFC5FCAC:\n"
 211       "BL      sub_FFD1FA44 \n"
 212       "B       loc_FFC5FD00 \n"
 213 "loc_FFC5FCB4:\n"
 214       "BL      sub_FFC62900 \n"
 215       "B       loc_FFC5FD00 \n"
 216 "loc_FFC5FCBC:\n"
 217       "BL      sub_FFC62980 \n"
 218       "B       loc_FFC5FD00 \n"
 219 "loc_FFC5FCC4:\n"
 220       "BL      sub_FFC629DC \n"
 221       "BL      sub_FFC6299C \n"
 222       "B       loc_FFC5FD00 \n"
 223 "loc_FFC5FCD0:\n"
 224       "LDRH    R0, [R4, #0x94] \n"
 225       "CMP     R0, #4 \n"
 226       "LDRNEH  R0, [R4] \n"
 227       "SUBNE   R12, R0, #0x8200 \n"
 228       "SUBNES  R12, R12, #0x2A \n"
 229       "BNE     loc_FFC5FD00 \n"
 230       "BL      sub_FFC62980 \n"
 231       "BL      sub_FFC62DA0 \n"
 232       "B       loc_FFC5FD00 \n"
 233 "loc_FFC5FCF4:\n"
 234       "LDR     R1, =0x70B \n"
 235       "LDR     R0, =0xFFC5F5E4 \n"
 236       "BL      sub_FFC0EB14 \n"
 237 "loc_FFC5FD00:\n"
 238       "LDR     R0, [SP] \n"
 239       "LDR     R1, [R0, #4] \n"
 240       "LDR     R0, [R6] \n"
 241       "BL      sub_FFC68C70 \n"
 242       "LDR     R5, [SP] \n"
 243       "LDR     R0, [R5, #8] \n"
 244       "CMP     R0, #0 \n"
 245       "LDREQ   R1, =0x132 \n"
 246       "LDREQ   R0, =0xFFC5F5E4 \n"
 247       "BLEQ    sub_FFC0EB14 \n"
 248       "STR     R7, [R5, #8] \n"
 249       "B       loc_FFC5FA40 \n"
 250         );
 251 }
 252 
 253 //** sub_FFD203C4_my  @ 0xFFD203C4 
 254 
 255 void __attribute__((naked,noinline)) sub_FFD203C4_my(  ) { 
 256 asm volatile (
 257       "STMFD   SP!, {R0-R8,LR} \n"
 258       "MOV     R4, R0 \n"
 259       "BL      sub_FFD210D8 \n"
 260       "MVN     R1, #0 \n"
 261       "BL      sub_FFC68CA4 \n"
 262       "LDR     R5, =0x5B08 \n"
 263       "LDR     R0, [R5, #0xC] \n"
 264       "CMP     R0, #0 \n"
 265       "BNE     loc_FFD20414 \n"
 266       "MOV     R1, #1 \n"
 267       "MOV     R0, #0 \n"
 268       "BL      sub_FFC29BB4 \n"
 269       "STR     R0, [R5, #0xC] \n"
 270       "MOV     R3, #0 \n"
 271       "STR     R3, [SP] \n"
 272       "LDR     R3, =0xFFD1FEBC \n"
 273       "LDR     R0, =0xFFD2062C \n"
 274       "MOV     R2, #0x400 \n"
 275       "MOV     R1, #0x17 \n"
 276       "BL      sub_FFC29B80 \n"
 277 "loc_FFD20414:\n"
 278       "MOV     R2, #4 \n"
 279       "ADD     R1, SP, #0x8 \n"
 280       "MOV     R0, #0x8A \n"
 281       "BL      sub_FFC70BFC \n"
 282       "TST     R0, #1 \n"
 283       "MOVNE   R1, #0x3B4 \n"
 284       "LDRNE   R0, =0xFFD20128 \n"
 285       "BLNE    sub_FFC0EB14 \n"
 286       "LDR     R6, =0x34A64 \n"
 287       "LDR     R7, =0x349A0 \n"
 288       "LDR     R3, [R6] \n"
 289       "LDRSH   R2, [R6, #0xC] \n"
 290       "LDRSH   R1, [R6, #0xE] \n"
 291       "LDR     R0, [R7, #0x88] \n"
 292       "BL      sub_FFCEF168 \n"
 293       "BL      sub_FFC49E68 \n"
 294       "LDR     R3, =0x5B10 \n"
 295       "STRH    R0, [R4, #0xA4] \n"
 296       "SUB     R2, R3, #4 \n"
 297       "STRD    R2, [SP] \n"
 298       "MOV     R1, R0 \n"
 299       "LDRH    R0, [R7, #0x5C] \n"
 300       "LDRSH   R2, [R6, #0xC] \n"
 301       "SUB     R3, R3, #8 \n"
 302       "BL      sub_FFD21744 \n"
 303       "BL      wait_until_remote_button_is_released\n"
 304       "BL      capt_seq_hook_set_nr\n"                     // +
 305       "B       sub_FFD20478\n"                             // continue function in firmware
 306         );
 307 }
 308 
 309 //** sub_FFC5FE18_my  @ 0xFFC5FE18
 310 
 311 void __attribute__((naked,noinline)) sub_FFC5FE18_my() {
 312 asm volatile (
 313       "STMFD   SP!, {R4-R6,LR} \n"
 314       "LDR     R4, [R0, #0xC] \n"
 315       "LDR     R6, =0x349A0 \n"
 316       "LDR     R0, [R4, #8] \n"
 317       "MOV     R5, #0 \n"
 318       "ORR     R0, R0, #1 \n"
 319       "STR     R0, [R4, #8] \n"
 320       "LDR     R0, [R6, #0x24] \n"
 321       "CMP     R0, #0 \n"
 322       "MOVEQ   R0, #2 \n"
 323       "BLEQ    sub_FFC5C330 \n"
 324       "BL      sub_FFC6032C \n"
 325       "LDR     R0, [R6, #0x24] \n"
 326       "CMP     R0, #0 \n"
 327       "BNE     loc_FFC5FEB4 \n"
 328       "MOV     R0, R4 \n"
 329       "BL      sub_FFC606CC \n"
 330       "MOV     R0, R4 \n"
 331       "BL      sub_FFD1F028 \n"
 332       "CMP     R0, #0 \n"
 333       "MOV     R0, R4 \n"
 334       "BEQ     loc_FFC5FE8C \n"
 335       "BL      sub_FFD1F0B4 \n"
 336       "TST     R0, #1 \n"
 337       "MOVNE   R2, R4 \n"
 338       "LDMNEFD SP!, {R4-R6,LR} \n"
 339       "MOVNE   R1, #1 \n"
 340       "BNE     sub_FFC5DFB0 \n"
 341       "B       loc_FFC5FE90 \n"
 342 "loc_FFC5FE8C:\n"
 343       "BL      sub_FFD1F078 \n"
 344 "loc_FFC5FE90:\n"
 345       "MOV     R0, R4 \n"
 346       "BL      sub_FFC5F568 \n"
 347       "MOV     R0, R4 \n"
 348       "BL      sub_FFD202FC \n"
 349       "BL      sub_FFD20F44 \n"
 350       "MOV     R0, R4 \n"
 351 //      "BL      sub_FFD203C4 \n"  //original
 352       "BL      sub_FFD203C4_my \n" //patched ----------nr setup -------->
 353       "MOV     R5, R0 \n"
 354       "B       loc_FFC5FEC4 \n"
 355 "loc_FFC5FEB4:\n"
 356       "LDR     R0, =0x2850 \n"
 357       "LDR     R0, [R0, #0x10] \n"
 358       "CMP     R0, #0 \n"
 359       "MOVNE   R5, #0x1D \n"
 360 "loc_FFC5FEC4:\n"
 361       "BL      capt_seq_hook_raw_here\n" // ++++->
 362       "BL      sub_FFC62980 \n"
 363       "BL      sub_FFC629C8 \n"
 364       "BL      sub_FFC62A08 \n"
 365       "MOV     R2, R4 \n"
 366       "MOV     R1, #1 \n"
 367       "MOV     R0, R5 \n"
 368       "BL      sub_FFC5DFB0 \n"
 369       "BL      sub_FFD20654 \n"
 370       "CMP     R0, #0 \n"
 371       "LDRNE   R0, [R4, #8] \n"
 372       "ORRNE   R0, R0, #0x2000 \n"
 373       "STRNE   R0, [R4, #8] \n"
 374       "LDMFD   SP!, {R4-R6,PC} \n"
 375         );
 376 }
 377 
 378 
 379 //** exp_drv_task  @ 0xFFC99668 
 380 
 381 void __attribute__((naked,noinline)) exp_drv_task(  ) { 
 382 asm volatile (
 383       "STMFD   SP!, {R4-R8,LR}\n"
 384       "SUB     SP, SP, #0x20\n"
 385       "LDR     R8, =0xBB8 \n"
 386       "LDR     R7, =0x3A74 \n"
 387       "LDR     R5, =0x3DDB4 \n"
 388       "MOV     R0, #0 \n"
 389       "ADD     R6, SP, #0x10 \n"
 390       "STR     R0, [SP, #0xC] \n"
 391 "loc_FFC99688:\n"
 392       "LDR     R0, [R7, #0x20] \n"
 393       "MOV     R2, #0 \n"
 394       "ADD     R1, SP, #0x1C \n"
 395       "BL      sub_FFC2936C \n"
 396       "LDR     R0, [SP, #0xC] \n"
 397       "CMP     R0, #1 \n"
 398       "BNE     loc_FFC996D4 \n"
 399       "LDR     R0, [SP, #0x1C] \n"
 400       "LDR     R0, [R0] \n"
 401       "CMP     R0, #0x13 \n"
 402       "CMPNE   R0, #0x14 \n"
 403       "CMPNE   R0, #0x15 \n"
 404       "CMPNE   R0, #0x16 \n"
 405       "BEQ     loc_FFC99838 \n"
 406       "CMP     R0, #0x28 \n"
 407       "BEQ     loc_FFC997C0 \n"
 408       "ADD     R1, SP, #0xC \n"
 409       "MOV     R0, #0 \n"
 410       "BL      sub_FFC99618 \n"
 411 "loc_FFC996D4:\n"
 412       "LDR     R0, [SP, #0x1C] \n"
 413       "LDR     R1, [R0] \n"
 414       "CMP     R1, #0x2E \n"
 415       "BNE     loc_FFC99704 \n"
 416       "LDR     R0, [SP, #0x1C] \n"
 417       "BL      sub_FFC9A970 \n"
 418       "LDR     R0, [R7, #0x1C] \n"
 419       "MOV     R1, #1 \n"
 420       "BL      sub_FFC68C70 \n"
 421       "BL      sub_FFC0EACC \n"
 422       "ADD     SP, SP, #0x20 \n"
 423       "LDMFD   SP!, {R4-R8,PC} \n"
 424 "loc_FFC99704:\n"
 425       "CMP     R1, #0x2D \n"
 426       "BNE     loc_FFC99720 \n"
 427       "LDR     R2, [R0, #0x8C]! \n"
 428       "LDR     R1, [R0, #4] \n"
 429       "MOV     R0, R1 \n"
 430       "BLX     R2 \n"
 431       "B       loc_FFC99C60 \n"
 432 "loc_FFC99720:\n"
 433       "CMP     R1, #0x26 \n"
 434       "BNE     loc_FFC99770 \n"
 435       "LDR     R0, [R7, #0x1C] \n"
 436       "MOV     R1, #0x80 \n"
 437       "BL      sub_FFC68CA4 \n"
 438       "LDR     R0, =0xFFC95DE4 \n"
 439       "MOV     R1, #0x80 \n"
 440       "BL      sub_FFD14BD0 \n"
 441       "LDR     R0, [R7, #0x1C] \n"
 442       "MOV     R2, R8 \n"
 443       "MOV     R1, #0x80 \n"
 444       "BL      sub_FFC68BB0 \n"
 445       "TST     R0, #1 \n"
 446       "LDRNE   R1, =0xE5F \n"
 447       "BNE     loc_FFC9982C \n"
 448 "loc_FFC9975C:\n"
 449       "LDR     R1, [SP, #0x1C] \n"
 450       "LDR     R0, [R1, #0x90] \n"
 451       "LDR     R1, [R1, #0x8C] \n"
 452       "BLX     R1 \n"
 453       "B       loc_FFC99C60 \n"
 454 "loc_FFC99770:\n"
 455       "CMP     R1, #0x27 \n"
 456       "BNE     loc_FFC997B8 \n"
 457       "ADD     R1, SP, #0xC \n"
 458       "BL      sub_FFC99618 \n"
 459       "LDR     R0, [R7, #0x1C] \n"
 460       "MOV     R1, #0x100 \n"
 461       "BL      sub_FFC68CA4 \n"
 462       "LDR     R0, =0xFFC95DF4 \n"
 463       "MOV     R1, #0x100 \n"
 464       "BL      sub_FFD14E58 \n"
 465       "LDR     R0, [R7, #0x1C] \n"
 466       "MOV     R2, R8 \n"
 467       "MOV     R1, #0x100 \n"
 468       "BL      sub_FFC68BB0 \n"
 469       "TST     R0, #1 \n"
 470       "BEQ     loc_FFC9975C \n"
 471       "LDR     R1, =0xE69 \n"
 472       "B       loc_FFC9982C \n"
 473 "loc_FFC997B8:\n"
 474       "CMP     R1, #0x28 \n"
 475       "BNE     loc_FFC997D0 \n"
 476 "loc_FFC997C0:\n"
 477       "LDR     R0, [SP, #0x1C] \n"
 478       "ADD     R1, SP, #0xC \n"
 479       "BL      sub_FFC99618 \n"
 480       "B       loc_FFC9975C \n"
 481 "loc_FFC997D0:\n"
 482       "CMP     R1, #0x2B \n"
 483       "BNE     loc_FFC997E8 \n"
 484       "BL      sub_FFC88E2C \n"
 485       "BL      sub_FFC89A54 \n"
 486       "BL      sub_FFC895A4 \n"
 487       "B       loc_FFC9975C \n"
 488 "loc_FFC997E8:\n"
 489       "CMP     R1, #0x2C \n"
 490       "BNE     loc_FFC99838 \n"
 491       "LDR     R0, [R7, #0x1C] \n"
 492       "MOV     R1, #4 \n"
 493       "BL      sub_FFC68CA4 \n"
 494       "LDR     R1, =0xFFC95E14 \n"
 495       "LDR     R0, =0xFFFFF400 \n"
 496       "MOV     R2, #4 \n"
 497       "BL      sub_FFC888A8 \n"
 498       "BL      sub_FFC88B30 \n"
 499       "LDR     R0, [R7, #0x1C] \n"
 500       "MOV     R2, R8 \n"
 501       "MOV     R1, #4 \n"
 502       "BL      sub_FFC68ACC \n"
 503       "TST     R0, #1 \n"
 504       "BEQ     loc_FFC9975C \n"
 505       "LDR     R1, =0xE91 \n"
 506 "loc_FFC9982C:\n"
 507       "LDR     R0, =0xFFC96454 \n"
 508       "BL      sub_FFC0EB14 \n"
 509       "B       loc_FFC9975C \n"
 510 "loc_FFC99838:\n"
 511       "LDR     R0, [SP, #0x1C] \n"
 512       "MOV     R4, #1 \n"
 513       "LDR     R1, [R0] \n"
 514       "CMP     R1, #0x11 \n"
 515       "CMPNE   R1, #0x12 \n"
 516       "BNE     loc_FFC998A8 \n"
 517       "LDR     R1, [R0, #0x7C] \n"
 518       "ADD     R1, R1, R1, LSL #1 \n"
 519       "ADD     R1, R0, R1, LSL #2 \n"
 520       "SUB     R1, R1, #8 \n"
 521       "LDMIA   R1, {R2-R4} \n"
 522       "STMIA   R6, {R2-R4} \n"
 523       "BL      sub_FFC97FA4 \n"
 524       "LDR     R0, [SP, #0x1C] \n"
 525       "LDR     R1, [R0, #0x7C] \n"
 526       "LDR     R3, [R0, #0x8C] \n"
 527       "LDR     R2, [R0, #0x90] \n"
 528       "ADD     R0, R0, #4 \n"
 529       "BLX     R3 \n"
 530       "LDR     R0, [SP, #0x1C] \n"
 531       "BL      sub_FFC9AD38 \n"
 532       "LDR     R0, [SP, #0x1C] \n"
 533       "LDR     R1, [R0, #0x7C] \n"
 534       "LDR     R3, [R0, #0x94] \n"
 535       "LDR     R2, [R0, #0x98] \n"
 536       "ADD     R0, R0, #4 \n"
 537       "BLX     R3 \n"
 538       "B       loc_FFC99BA0 \n"
 539 "loc_FFC998A8:\n"
 540       "CMP     R1, #0x13 \n"
 541       "CMPNE   R1, #0x14 \n"
 542       "CMPNE   R1, #0x15 \n"
 543       "CMPNE   R1, #0x16 \n"
 544       "BNE     loc_FFC99960 \n"
 545       "ADD     R3, SP, #0xC \n"
 546       "MOV     R2, SP \n"
 547       "ADD     R1, SP, #0x10 \n"
 548       "BL      sub_FFC98280 \n"
 549       "CMP     R0, #1 \n"
 550       "MOV     R4, R0 \n"
 551       "CMPNE   R4, #5 \n"
 552       "BNE     loc_FFC998FC \n"
 553       "LDR     R0, [SP, #0x1C] \n"
 554       "MOV     R2, R4 \n"
 555       "LDR     R1, [R0, #0x7C]! \n"
 556       "LDR     R12, [R0, #0x10]! \n"
 557       "LDR     R3, [R0, #4] \n"
 558       "MOV     R0, SP \n"
 559       "BLX     R12 \n"
 560       "B       loc_FFC99934 \n"
 561 "loc_FFC998FC:\n"
 562       "LDR     R0, [SP, #0x1C] \n"
 563       "CMP     R4, #2 \n"
 564       "LDR     R3, [R0, #0x90] \n"
 565       "CMPNE   R4, #6 \n"
 566       "BNE     loc_FFC99948 \n"
 567       "LDR     R12, [R0, #0x8C] \n"
 568       "MOV     R0, SP \n"
 569       "MOV     R2, R4 \n"
 570       "MOV     R1, #1 \n"
 571       "BLX     R12 \n"
 572       "LDR     R0, [SP, #0x1C] \n"
 573       "MOV     R2, SP \n"
 574       "ADD     R1, SP, #0x10 \n"
 575       "BL      sub_FFC99320 \n"
 576 "loc_FFC99934:\n"
 577       "LDR     R0, [SP, #0x1C] \n"
 578       "LDR     R2, [SP, #0xC] \n"
 579       "MOV     R1, R4 \n"
 580       "BL      sub_FFC995B8 \n"
 581       "B       loc_FFC99BA0 \n"
 582 "loc_FFC99948:\n"
 583       "LDR     R1, [R0, #0x7C] \n"
 584       "LDR     R12, [R0, #0x8C] \n"
 585       "ADD     R0, R0, #4 \n"
 586       "MOV     R2, R4 \n"
 587       "BLX     R12 \n"
 588       "B       loc_FFC99BA0 \n"
 589 "loc_FFC99960:\n"
 590       "CMP     R1, #0x22 \n"
 591       "CMPNE   R1, #0x23 \n"
 592       "BNE     loc_FFC999AC \n"
 593       "LDR     R1, [R0, #0x7C] \n"
 594       "ADD     R1, R1, R1, LSL #1 \n"
 595       "ADD     R1, R0, R1, LSL #2 \n"
 596       "SUB     R1, R1, #8 \n"
 597       "LDMIA   R1, {R2-R4} \n"
 598       "STMIA   R6, {R2-R4} \n"
 599       "BL      sub_FFC974F4 \n"
 600       "LDR     R0, [SP, #0x1C] \n"
 601       "LDR     R1, [R0, #0x7C] \n"
 602       "LDR     R3, [R0, #0x8C] \n"
 603       "LDR     R2, [R0, #0x90] \n"
 604       "ADD     R0, R0, #4 \n"
 605       "BLX     R3 \n"
 606       "LDR     R0, [SP, #0x1C] \n"
 607       "BL      sub_FFC977E8 \n"
 608       "B       loc_FFC99BA0 \n"
 609 "loc_FFC999AC:\n"
 610       "ADD     R1, R0, #4 \n"
 611       "LDMIA   R1, {R2,R3,R12} \n"
 612       "STMIA   R6, {R2,R3,R12} \n"
 613       "LDR     R1, [R0] \n"
 614       "CMP     R1, #0x25 \n"
 615       "ADDLS   PC, PC, R1, LSL #2 \n"
 616       "B       loc_FFC99B80 \n"
 617       "B       loc_FFC99A60 \n"
 618       "B       loc_FFC99A60 \n"
 619       "B       loc_FFC99A68 \n"
 620       "B       loc_FFC99A70 \n"
 621       "B       loc_FFC99A70 \n"
 622       "B       loc_FFC99A70 \n"
 623       "B       loc_FFC99A60 \n"
 624       "B       loc_FFC99A68 \n"
 625       "B       loc_FFC99A70 \n"
 626       "B       loc_FFC99A70 \n"
 627       "B       loc_FFC99A88 \n"
 628       "B       loc_FFC99A88 \n"
 629       "B       loc_FFC99B74 \n"
 630       "B       loc_FFC99B7C \n"
 631       "B       loc_FFC99B7C \n"
 632       "B       loc_FFC99B7C \n"
 633       "B       loc_FFC99B7C \n"
 634       "B       loc_FFC99B80 \n"
 635       "B       loc_FFC99B80 \n"
 636       "B       loc_FFC99B80 \n"
 637       "B       loc_FFC99B80 \n"
 638       "B       loc_FFC99B80 \n"
 639       "B       loc_FFC99B80 \n"
 640       "B       loc_FFC99A78 \n"
 641       "B       loc_FFC99A80 \n"
 642       "B       loc_FFC99A80 \n"
 643       "B       loc_FFC99A94 \n"
 644       "B       loc_FFC99A94 \n"
 645       "B       loc_FFC99A9C \n"
 646       "B       loc_FFC99ACC \n"
 647       "B       loc_FFC99AFC \n"
 648       "B       loc_FFC99B2C \n"
 649       "B       loc_FFC99B5C \n"
 650       "B       loc_FFC99B5C \n"
 651       "B       loc_FFC99B80 \n"
 652       "B       loc_FFC99B80 \n"
 653       "B       loc_FFC99B64 \n"
 654       "B       loc_FFC99B6C \n"
 655 "loc_FFC99A60:\n"
 656       "BL      sub_FFC962FC \n"
 657       "B       loc_FFC99B80 \n"
 658 "loc_FFC99A68:\n"
 659       "BL      sub_FFC96580 \n"
 660       "B       loc_FFC99B80 \n"
 661 "loc_FFC99A70:\n"
 662       "BL      sub_FFC96788 \n"
 663       "B       loc_FFC99B80 \n"
 664 "loc_FFC99A78:\n"
 665       "BL      sub_FFC96A00 \n"
 666       "B       loc_FFC99B80 \n"
 667 "loc_FFC99A80:\n"
 668       "BL      sub_FFC96BF8 \n"
 669       "B       loc_FFC99B80 \n"
 670 "loc_FFC99A88:\n"
 671 //      "BL      sub_FFC96EB4 \n"   //original
 672       "BL      sub_FFC96EB4_my \n"     //patched
 673       "MOV     R4, #0 \n"
 674       "B       loc_FFC99B80 \n"
 675 "loc_FFC99A94:\n"
 676       "BL      sub_FFC96FF4 \n"
 677       "B       loc_FFC99B80 \n"
 678 "loc_FFC99A9C:\n"
 679       "LDRH    R1, [R0, #4] \n"
 680       "STRH    R1, [SP, #0x10] \n"
 681       "LDRH    R1, [R5, #2] \n"
 682       "STRH    R1, [SP, #0x12] \n"
 683       "LDRH    R1, [R5, #4] \n"
 684       "STRH    R1, [SP, #0x14] \n"
 685       "LDRH    R1, [R5, #6] \n"
 686       "STRH    R1, [SP, #0x16] \n"
 687       "LDRH    R1, [R0, #0xC] \n"
 688       "STRH    R1, [SP, #0x18] \n"
 689       "BL      sub_FFC9A9E4 \n"
 690       "B       loc_FFC99B80 \n"
 691 "loc_FFC99ACC:\n"
 692       "LDRH    R1, [R0, #4] \n"
 693       "STRH    R1, [SP, #0x10] \n"
 694       "LDRH    R1, [R5, #2] \n"
 695       "STRH    R1, [SP, #0x12] \n"
 696       "LDRH    R1, [R5, #4] \n"
 697       "STRH    R1, [SP, #0x14] \n"
 698       "LDRH    R1, [R5, #6] \n"
 699       "STRH    R1, [SP, #0x16] \n"
 700       "LDRH    R1, [R5, #8] \n"
 701       "STRH    R1, [SP, #0x18] \n"
 702       "BL      sub_FFC9AB50 \n"
 703       "B       loc_FFC99B80 \n"
 704 "loc_FFC99AFC:\n"
 705       "LDRH    R1, [R5] \n"
 706       "STRH    R1, [SP, #0x10] \n"
 707       "LDRH    R1, [R0, #6] \n"
 708       "STRH    R1, [SP, #0x12] \n"
 709       "LDRH    R1, [R5, #4] \n"
 710       "STRH    R1, [SP, #0x14] \n"
 711       "LDRH    R1, [R5, #6] \n"
 712       "STRH    R1, [SP, #0x16] \n"
 713       "LDRH    R1, [R5, #8] \n"
 714       "STRH    R1, [SP, #0x18] \n"
 715       "BL      sub_FFC9ABFC \n"
 716       "B       loc_FFC99B80 \n"
 717 "loc_FFC99B2C:\n"
 718       "LDRH    R1, [R5] \n"
 719       "STRH    R1, [SP, #0x10] \n"
 720       "LDRH    R1, [R5, #2] \n"
 721       "STRH    R1, [SP, #0x12] \n"
 722       "LDRH    R1, [R5, #4] \n"
 723       "STRH    R1, [SP, #0x14] \n"
 724       "LDRH    R1, [R5, #6] \n"
 725       "STRH    R1, [SP, #0x16] \n"
 726       "LDRH    R1, [R0, #0xC] \n"
 727       "STRH    R1, [SP, #0x18] \n"
 728       "BL      sub_FFC9AC9C \n"
 729       "B       loc_FFC99B80 \n"
 730 "loc_FFC99B5C:\n"
 731       "BL      sub_FFC9734C \n"
 732       "B       loc_FFC99B80 \n"
 733 "loc_FFC99B64:\n"
 734       "BL      sub_FFC978EC \n"
 735       "B       loc_FFC99B80 \n"
 736 "loc_FFC99B6C:\n"
 737       "BL      sub_FFC97B28 \n"
 738       "B       loc_FFC99B80 \n"
 739 "loc_FFC99B74:\n"
 740       "BL      sub_FFC97CA4 \n"
 741       "B       loc_FFC99B80 \n"
 742 "loc_FFC99B7C:\n"
 743       "BL      sub_FFC97E40 \n"
 744 "loc_FFC99B80:\n"
 745       "LDR     R0, [SP, #0x1C] \n"
 746       "LDR     R1, [R0, #0x7C] \n"
 747       "LDR     R3, [R0, #0x8C] \n"
 748       "LDR     R2, [R0, #0x90] \n"
 749       "ADD     R0, R0, #4 \n"
 750       "BLX     R3 \n"
 751       "CMP     R4, #1 \n"
 752       "BNE     loc_FFC99BE8 \n"
 753 "loc_FFC99BA0:\n"
 754       "LDR     R0, [SP, #0x1C] \n"
 755       "MOV     R2, #0xC \n"
 756       "LDR     R1, [R0, #0x7C] \n"
 757       "ADD     R1, R1, R1, LSL #1 \n"
 758       "ADD     R0, R0, R1, LSL #2 \n"
 759       "SUB     R4, R0, #8 \n"
 760       "LDR     R0, =0x3DDB4 \n"
 761       "ADD     R1, SP, #0x10 \n"
 762       "BL      sub_FFEA2E04 \n"
 763       "LDR     R0, =0x3DDC0 \n"
 764       "MOV     R2, #0xC \n"
 765       "ADD     R1, SP, #0x10 \n"
 766       "BL      sub_FFEA2E04 \n"
 767       "LDR     R0, =0x3DDCC \n"
 768       "MOV     R2, #0xC \n"
 769       "MOV     R1, R4 \n"
 770       "BL      sub_FFEA2E04 \n"
 771       "B       loc_FFC99C60 \n"
 772 "loc_FFC99BE8:\n"
 773       "LDR     R0, [SP, #0x1C] \n"
 774       "LDR     R0, [R0] \n"
 775       "CMP     R0, #0xB \n"
 776       "BNE     loc_FFC99C30 \n"
 777       "MOV     R3, #0 \n"
 778       "STR     R3, [SP] \n"
 779       "MOV     R3, #1 \n"
 780       "MOV     R2, #1 \n"
 781       "MOV     R1, #1 \n"
 782       "MOV     R0, #0 \n"
 783       "BL      sub_FFC96104 \n"
 784       "MOV     R3, #0 \n"
 785       "STR     R3, [SP] \n"
 786       "MOV     R3, #1 \n"
 787       "MOV     R2, #1 \n"
 788       "MOV     R1, #1 \n"
 789       "MOV     R0, #0 \n"
 790       "B       loc_FFC99C5C \n"
 791 "loc_FFC99C30:\n"
 792       "MOV     R3, #1 \n"
 793       "MOV     R2, #1 \n"
 794       "MOV     R1, #1 \n"
 795       "MOV     R0, #1 \n"
 796       "STR     R3, [SP] \n"
 797       "BL      sub_FFC96104 \n"
 798       "MOV     R3, #1 \n"
 799       "MOV     R2, #1 \n"
 800       "MOV     R1, #1 \n"
 801       "MOV     R0, #1 \n"
 802       "STR     R3, [SP] \n"
 803 "loc_FFC99C5C:\n"
 804       "BL      sub_FFC96244 \n"
 805 "loc_FFC99C60:\n"
 806       "LDR     R0, [SP, #0x1C] \n"
 807       "BL      sub_FFC9A970 \n"
 808       "B       loc_FFC99688 \n"
 809         );
 810 }
 811 
 812 //** sub_FFC96EB4_my  @ 0xFFC96EB4 
 813 
 814 void __attribute__((naked,noinline)) sub_FFC96EB4_my(  ) { 
 815 asm volatile (
 816       "STMFD   SP!, {R4-R8,LR} \n"
 817       "LDR     R7, =0x3A74 \n"
 818       "MOV     R4, R0 \n"
 819       "LDR     R0, [R7, #0x1C] \n"
 820       "MOV     R1, #0x3E \n"
 821       "BL      sub_FFC68CA4 \n"
 822       "LDRSH   R0, [R4, #4] \n"
 823       "MOV     R2, #0 \n"
 824       "MOV     R1, #0 \n"
 825       "BL      sub_FFC95E68 \n"
 826       "MOV     R6, R0 \n"
 827       "LDRSH   R0, [R4, #6] \n"
 828       "BL      sub_FFC95F78 \n"
 829       "LDRSH   R0, [R4, #8] \n"
 830       "BL      sub_FFC95FD0 \n"
 831       "LDRSH   R0, [R4, #0xA] \n"
 832       "BL      sub_FFC96028 \n"
 833       "LDRSH   R0, [R4, #0xC] \n"
 834       "MOV     R1, #0 \n"
 835       "BL      sub_FFC96080 \n"
 836       "MOV     R5, R0 \n"
 837       "LDR     R0, [R4] \n"
 838       "LDR     R8, =0x3DDCC \n"
 839       "CMP     R0, #0xB \n"
 840       "MOVEQ   R6, #0 \n"
 841       "MOVEQ   R5, #0 \n"
 842       "BEQ     loc_FFC96F48 \n"
 843       "CMP     R6, #1 \n"
 844       "BNE     loc_FFC96F48 \n"
 845       "LDRSH   R0, [R4, #4] \n"
 846       "LDR     R1, =0xFFC95DD4 \n"
 847       "MOV     R2, #2 \n"
 848       "BL      sub_FFD14D24 \n"
 849       "STRH    R0, [R4, #4] \n"
 850       "MOV     R0, #0 \n"
 851       "STR     R0, [R7, #0x28] \n"
 852       "B       loc_FFC96F50 \n"
 853 "loc_FFC96F48:\n"
 854       "LDRH    R0, [R8] \n"
 855       "STRH    R0, [R4, #4] \n"
 856 "loc_FFC96F50:\n"
 857       "CMP     R5, #1 \n"
 858       "LDRNEH  R0, [R8, #8] \n"
 859       "BNE     loc_FFC96F6C \n"
 860       "LDRSH   R0, [R4, #0xC] \n"
 861       "LDR     R1, =0xFFC95E58 \n"
 862       "MOV     R2, #0x20 \n"
 863       "BL      sub_FFC9A9A0 \n"
 864 "loc_FFC96F6C:\n"
 865       "STRH    R0, [R4, #0xC] \n"
 866       "LDRSH   R0, [R4, #6] \n"
 867 //      "BL      sub_FFC88B9C \n"   //original
 868       "BL      sub_FFC88B9C_my \n"  //patched
 869       "LDRSH   R0, [R4, #8] \n"
 870       "MOV     R1, #1 \n"
 871       "BL      sub_FFC892EC \n"
 872       "MOV     R1, #0 \n"
 873       "ADD     R0, R4, #8 \n"
 874       "BL      sub_FFC89374 \n"
 875       "LDRSH   R0, [R4, #0xE] \n"
 876       "BL      sub_FFC911C8 \n"
 877       "LDR     R4, =0xBB8 \n"
 878       "CMP     R6, #1 \n"
 879       "BNE     loc_FFC96FC4 \n"
 880       "LDR     R0, [R7, #0x1C] \n"
 881       "MOV     R2, R4 \n"
 882       "MOV     R1, #2 \n"
 883       "BL      sub_FFC68BB0 \n"
 884       "TST     R0, #1 \n"
 885       "LDRNE   R1, =0x5A3 \n"
 886       "LDRNE   R0, =0xFFC96454 \n"
 887       "BLNE    sub_FFC0EB14 \n"
 888 "loc_FFC96FC4:\n"
 889       "CMP     R5, #1 \n"
 890       "LDMNEFD SP!, {R4-R8,PC} \n"
 891       "LDR     R0, [R7, #0x1C] \n"
 892       "MOV     R2, R4 \n"
 893       "MOV     R1, #0x20 \n"
 894       "BL      sub_FFC68BB0 \n"
 895       "TST     R0, #1 \n"
 896       "LDRNE   R1, =0x5A8 \n"
 897       "LDRNE   R0, =0xFFC96454 \n"
 898       "LDMNEFD SP!, {R4-R8,LR} \n"
 899       "BNE     sub_FFC0EB14 \n"
 900       "LDMFD   SP!, {R4-R8,PC} \n"
 901         );
 902 }
 903 
 904 //** sub_FFC88B9C_my  @ 0xFFC88B9C 
 905 
 906 void __attribute__((naked,noinline)) sub_FFC88B9C_my() {
 907 asm volatile (
 908       "STMFD   SP!, {R4-R6,LR} \n"
 909       "LDR     R5, =0x3760 \n"
 910       "MOV     R4, R0 \n"
 911       "LDR     R0, [R5, #4] \n"
 912       "CMP     R0, #1 \n"
 913       "LDRNE   R1, =0x146 \n"
 914       "LDRNE   R0, =0xFFC889A0 \n"
 915       "BLNE    sub_FFC0EB14 \n"
 916       "CMN     R4, #0xC00 \n"
 917       "LDREQSH R4, [R5, #2] \n"
 918       "CMN     R4, #0xC00 \n"
 919       "MOVEQ   R1, #0x14C \n"
 920       "LDREQ   R0, =0xFFC889A0 \n"
 921       "STRH    R4, [R5, #2] \n"
 922       "BLEQ    sub_FFC0EB14 \n"
 923       "MOV     R0, R4 \n"
 924 //      "BL      sub_FFD8F4B8 \n"  //original _apex2us
 925        "BL      apex2us\n"         //patched
 926       "MOV     R4, R0 \n"
 927       "BL      sub_FFCBB824 \n"
 928       "MOV     R0, R4 \n"
 929       "BL      sub_FFCBF680 \n"
 930       "TST     R0, #1 \n"
 931       "LDRNE   R1, =0x151 \n"
 932       "LDMNEFD SP!, {R4-R6,LR} \n"
 933       "LDRNE   R0, =0xFFC889A0 \n"
 934       "BNE     sub_FFC0EB14 \n"
 935       "LDMFD   SP!, {R4-R6,PC} \n"
 936         );
 937 }

/* [<][>][^][v][top][bottom][index][help] */