1 #include "lolevel.h"
2 #include "platform.h"
3 #include "core.h"
4 #include "conf.h"
5
6 //static long *nrflag = (long*)0x6cb4;
7 static long *nrflag = (long*)(0x6cb8-0x08); // Found @ ff9500c0 & ff9500dc
8
9 #include "../../../generic/capt_seq.c"
10
11 //** capt_seq_task @ 0xFF876EC0
12
13 void __attribute__((naked,noinline)) capt_seq_task( ) {
14 asm volatile (
15 " STMFD SP!, {R3-R9,LR} \n"
16 " LDR R6, =0x2B04 \n"
17 " LDR R4, =0x4A5C8 \n"
18 " MOV R9, #1 \n"
19 " MOV R7, #0 \n"
20 "loc_FF876ED4:\n"
21 " LDR R0, [R6, #4] \n"
22 " MOV R2, #0 \n"
23 " MOV R1, SP \n"
24 " BL sub_FF837F08 \n"
25 " TST R0, #1 \n"
26 " BEQ loc_FF876F00 \n"
27 " LDR R1, =0x5B3 \n"
28 " LDR R0, =0xFF876A00 \n"
29 " BL sub_FF81E88C \n"
30 " BL sub_FF81E844 \n"
31 " LDMFD SP!, {R3-R9,PC} \n"
32 "loc_FF876F00:\n"
33 " LDR R0, [SP] \n"
34 " LDR R1, [R0] \n"
35 " CMP R1, #0x1F \n"
36 " ADDLS PC, PC, R1, LSL #2 \n"
37 " B loc_FF8771A4 \n"
38 " B loc_FF876F94 \n"
39 " B loc_FF876FF8 \n"
40 " B loc_FF877034 \n"
41 " B loc_FF877048 \n"
42 " B loc_FF877040 \n"
43 " B loc_FF877050 \n"
44 " B loc_FF877058 \n"
45 " B loc_FF877060 \n"
46 " B loc_FF8770B8 \n"
47 " B loc_FF8770E0 \n"
48 " B loc_FF8770C4 \n"
49 " B loc_FF8770D0 \n"
50 " B loc_FF8770D8 \n"
51 " B loc_FF8770E8 \n"
52 " B loc_FF8770F0 \n"
53 " B loc_FF8770F8 \n"
54 " B loc_FF877100 \n"
55 " B loc_FF877108 \n"
56 " B loc_FF877114 \n"
57 " B loc_FF87711C \n"
58 " B loc_FF877124 \n"
59 " B loc_FF87712C \n"
60 " B loc_FF877134 \n"
61 " B loc_FF877140 \n"
62 " B loc_FF877148 \n"
63 " B loc_FF877150 \n"
64 " B loc_FF877158 \n"
65 " B loc_FF877160 \n"
66 " B loc_FF877168 \n"
67 " B loc_FF877170 \n"
68 " B loc_FF87717C \n"
69 " B loc_FF8771B0 \n"
70 "loc_FF876F94:\n"
71 " BL sub_FF877844 \n"
72 " BL shooting_expo_param_override\n"
73 " BL sub_FF874CBC \n"
74
75 // this code added to avoid some incorrect behavior if overrides are used.
76 // but it can cause some unexpected side effects. In this case, remove this code!
77 "MOV R0, #0\n"
78 "STR R0, [R4,#0x24]\n" // fixes overrides behavior at short shutter press
79 //end of modified code
80
81 " LDR R0, [R4, #0x24] \n"
82 " CMP R0, #0 \n"
83 " BEQ loc_FF8771B0 \n"
84 " BL sub_FF8766DC \n"
85 " MOV R5, R0 \n"
86 " LDR R0, [R4, #0x24] \n"
87 " CMP R0, #0 \n"
88 " BEQ loc_FF876FDC \n"
89 " MOV R0, #0xC \n"
90 " BL sub_FF87BB64 \n"
91 " TST R0, #1 \n"
92 " STRNE R9, [R6, #0x10] \n"
93 " LDRNE R0, [R5, #8] \n"
94 " ORRNE R0, R0, #0x40000000 \n"
95 " STRNE R0, [R5, #8] \n"
96 " BNE loc_FF8771B0 \n"
97 "loc_FF876FDC:\n"
98 " MOV R0, R5 \n"
99 " BL sub_FF876980 \n"
100 " MOV R0, R5 \n"
101 " BL sub_FF950030_my \n" //----------------->
102 " BL capt_seq_hook_raw_here\n"
103 " TST R0, #1 \n"
104 " STRNE R9, [R6, #0x10] \n"
105 " B loc_FF8771B0 \n"
106 "loc_FF876FF8:\n"
107 " LDR R0, [R4, #0x24] \n"
108 " CMP R0, #0 \n"
109 " BNE loc_FF877024 \n"
110 " MOV R0, #0xC \n"
111 " BL sub_FF87BB64 \n"
112 " TST R0, #1 \n"
113 " LDRNE R0, [SP] \n"
114 " MOVNE R1, #1 \n"
115 " LDRNE R2, [R0, #0xC] \n"
116 " MOVNE R0, #1 \n"
117 " BNE loc_FF8770B0 \n"
118 "loc_FF877024:\n"
119 " LDR R0, [SP] \n"
120 " BL sub_FF8772C8_my \n" //----------------->
121 "loc_FF87702C:\n"
122 " STR R7, [R4, #0x24] \n"
123 " B loc_FF8771B0 \n"
124 "loc_FF877034:\n"
125 " MOV R0, #1 \n"
126 " BL sub_FF877AA0 \n"
127 " B loc_FF8771B0 \n"
128 "loc_FF877040:\n"
129 " BL sub_FF877480 \n"
130 " B loc_FF87702C \n"
131 "loc_FF877048:\n"
132 " BL sub_FF877824 \n"
133 " B loc_FF87702C \n"
134 "loc_FF877050:\n"
135 " BL sub_FF87782C \n"
136 " B loc_FF8771B0 \n"
137 "loc_FF877058:\n"
138 " BL sub_FF8779C0 \n"
139 " B loc_FF8770BC \n"
140 "loc_FF877060:\n"
141 " LDR R5, [R0, #0xC] \n"
142 " BL sub_FF877834 \n"
143 " MOV R0, R5 \n"
144 " BL sub_FF94ECEC \n"
145 " TST R0, #1 \n"
146 " MOV R8, R0 \n"
147 " BNE loc_FF8770A0 \n"
148 " BL sub_FF888D28 \n"
149 " STR R0, [R5, #0x18] \n"
150 " MOV R0, R5 \n"
151 " BL sub_FF94FF48 \n"
152 " MOV R0, R5 \n"
153 " BL sub_FF950348 \n"
154 " MOV R8, R0 \n"
155 " LDR R0, [R5, #0x18] \n"
156 " BL sub_FF888F3C \n"
157 "loc_FF8770A0:\n"
158 " BL sub_FF877824 \n"
159 " MOV R2, R5 \n"
160 " MOV R1, #9 \n"
161 " MOV R0, R8 \n"
162 "loc_FF8770B0:\n"
163 " BL sub_FF8751A8 \n"
164 " B loc_FF8771B0 \n"
165 "loc_FF8770B8:\n"
166 " BL sub_FF877A20 \n"
167 "loc_FF8770BC:\n"
168 " BL sub_FF874CBC \n"
169 " B loc_FF8771B0 \n"
170 "loc_FF8770C4:\n"
171 " LDR R0, [R4, #0x54] \n"
172 " BL sub_FF877E30 \n"
173 " B loc_FF8771B0 \n"
174 "loc_FF8770D0:\n"
175 " BL sub_FF8780E4 \n"
176 " B loc_FF8771B0 \n"
177 "loc_FF8770D8:\n"
178 " BL sub_FF878178 \n"
179 " B loc_FF8771B0 \n"
180 "loc_FF8770E0:\n"
181 " BL sub_FF877824 \n"
182 " B loc_FF8771B0 \n"
183 "loc_FF8770E8:\n"
184 " BL sub_FF94EF04 \n"
185 " B loc_FF8771B0 \n"
186 "loc_FF8770F0:\n"
187 " BL sub_FF94F118 \n"
188 " B loc_FF8771B0 \n"
189 "loc_FF8770F8:\n"
190 " BL sub_FF94F1B0 \n"
191 " B loc_FF8771B0 \n"
192 "loc_FF877100:\n"
193 " BL sub_FF94F280 \n"
194 " B loc_FF8771B0 \n"
195 "loc_FF877108:\n"
196 " MOV R0, #0 \n"
197 " BL sub_FF94F4D0 \n"
198 " B loc_FF8771B0 \n"
199 "loc_FF877114:\n"
200 " BL sub_FF94F62C \n"
201 " B loc_FF8771B0 \n"
202 "loc_FF87711C:\n"
203 " BL sub_FF94F6BC \n"
204 " B loc_FF8771B0 \n"
205 "loc_FF877124:\n"
206 " BL sub_FF94F77C \n"
207 " B loc_FF8771B0 \n"
208 "loc_FF87712C:\n"
209 " BL sub_FF877C1C \n"
210 " B loc_FF8771B0 \n"
211 "loc_FF877134:\n"
212 " BL sub_FF877CBC \n"
213 " BL sub_FF835F60 \n"
214 " B loc_FF8771B0 \n"
215 "loc_FF877140:\n"
216 " BL sub_FF94F34C \n"
217 " B loc_FF8771B0 \n"
218 "loc_FF877148:\n"
219 " BL sub_FF94F3B8 \n"
220 " B loc_FF8771B0 \n"
221 "loc_FF877150:\n"
222 " BL sub_FF87A238 \n"
223 " B loc_FF8771B0 \n"
224 "loc_FF877158:\n"
225 " BL sub_FF87A2A4 \n"
226 " B loc_FF8771B0 \n"
227 "loc_FF877160:\n"
228 " BL sub_FF94F8FC \n"
229 " B loc_FF8771B0 \n"
230 "loc_FF877168:\n"
231 " BL sub_FF94F968 \n"
232 " B loc_FF8771B0 \n"
233 "loc_FF877170:\n"
234 " BL sub_FF87A300 \n"
235 " BL sub_FF87A2C0 \n"
236 " B loc_FF8771B0 \n"
237 "loc_FF87717C:\n"
238 " MOV R0, #1 \n"
239 " BL sub_FF950BC0 \n"
240 " MOV R0, #1 \n"
241 " BL sub_FF950CD0 \n"
242 " LDRH R0, [R4, #0x98] \n"
243 " CMP R0, #4 \n"
244 " BNE loc_FF8771B0 \n"
245 " BL sub_FF87A2A4 \n"
246 " BL sub_FF87A778 \n"
247 " B loc_FF8771B0 \n"
248 "loc_FF8771A4:\n"
249 " LDR R1, =0x708 \n"
250 " LDR R0, =0xFF876A00 \n"
251 " BL sub_FF81E88C \n"
252 "loc_FF8771B0:\n"
253 " LDR R0, [SP] \n"
254 " LDR R1, [R0, #4] \n"
255 " LDR R0, [R6] \n"
256 " BL sub_FF880A14 \n"
257 " LDR R5, [SP] \n"
258 " LDR R0, [R5, #8] \n"
259 " CMP R0, #0 \n"
260 " LDREQ R1, =0x131 \n"
261 " LDREQ R0, =0xFF876A00 \n"
262 " BLEQ sub_FF81E88C \n"
263 " STR R7, [R5, #8] \n"
264 " B loc_FF876ED4 \n"
265 " STMFD SP!, {R3-R5,LR} \n"
266 " LDR R2, =0x4A514 \n"
267 " MOV R0, #0 \n"
268 " MOV R1, #0 \n"
269 "loc_FF8771F0:\n"
270 " ADD R3, R2, R0, LSL #4 \n"
271 " ADD R0, R0, #1 \n"
272 " CMP R0, #5 \n"
273 " STR R1, [R3, #8] \n"
274 " BCC loc_FF8771F0 \n"
275 " BL sub_FF877D6C \n"
276 " BL sub_FF950E6C \n"
277 " MOV R1, #5 \n"
278 " MOV R0, #0 \n"
279 " BL sub_FF838750 \n"
280 " LDR R4, =0x2B04 \n"
281 " LDR R1, =0x101DFF \n"
282 " STR R0, [R4, #4] \n"
283 " MOV R0, #0 \n"
284 " BL sub_FF838774 \n"
285 " STR R0, [R4] \n"
286 );
287 }
288
289 //** sub_FF94FE74_my @ 0xFF950030
290
291 void __attribute__((naked,noinline)) sub_FF950030_my( ) {
292 asm volatile (
293 " STMFD SP!, {R0-R8,LR} \n"
294 " MOV R4, R0 \n"
295 " BL sub_FF950EBC \n"
296 " MVN R1, #0 \n"
297 " BL sub_FF880A48 \n"
298 " LDR R5, =0x6CB0 \n"
299 " LDR R0, [R5, #0xC] \n"
300 " CMP R0, #0 \n"
301 " BNE loc_FF950080 \n"
302 " MOV R1, #1 \n"
303 " MOV R0, #0 \n"
304 " BL sub_FF838750 \n"
305 " STR R0, [R5, #0xC] \n"
306 " MOV R3, #0 \n"
307 " STR R3, [SP] \n"
308 " LDR R3, =0xFF94F9BC \n"
309 " LDR R0, =0xFF9502B0 \n"
310 " MOV R2, #0x400 \n"
311 " MOV R1, #0x17 \n"
312 " BL sub_FF83871C \n"
313 "loc_FF950080:\n"
314 " MOV R2, #4 \n"
315 " ADD R1, SP, #8 \n"
316 " MOV R0, #0x8A \n"
317 " BL sub_FF888B98 \n"
318 " TST R0, #1 \n"
319 " LDRNE R1, =0x3C5 \n"
320 " LDRNE R0, =0xFF94FC54 \n"
321 " BLNE sub_FF81E88C \n"
322 " LDR R6, =0x4A690 \n"
323 " LDR R8, =0x4A5C8 \n"
324 " LDR R3, [R6] \n"
325 " LDRSH R2, [R6, #0xC] \n"
326 " LDRSH R1, [R6, #0xE] \n"
327 " LDR R0, [R8, #0x8C] \n"
328 " BL sub_FF916370 \n"
329 " BL sub_FF85E238 \n"
330 " LDR R3, =0x6CB8 \n"
331 " STRH R0, [R4, #0xA4] \n"
332 " SUB R2, R3, #4 \n"
333 " STRD R2, [SP] \n"
334 " MOV R1, R0 \n"
335 " LDRH R0, [R8, #0x5C] \n"
336 " LDRSH R2, [R6, #0xC] \n"
337 " SUB R3, R3, #8 \n"
338 " BL sub_FF952578 \n"
339 " BL wait_until_remote_button_is_released\n"
340 " BL capt_seq_hook_set_nr\n"
341 " B sub_FF9500E4\n"//go to the ROM
342
343 );
344 }
345
346 //** sub_FF877278_my @ 0xFF8772C8
347
348 void __attribute__((naked,noinline)) sub_FF8772C8_my( ) {
349 asm volatile (
350 " STMFD SP!, {R4-R6,LR} \n"
351 " LDR R4, [R0, #0xC] \n"
352 " LDR R6, =0x4A5C8 \n"
353 " LDR R0, [R4, #8] \n"
354 " MOV R5, #0 \n"
355 " ORR R0, R0, #1 \n"
356 " STR R0, [R4, #8] \n"
357 " LDR R0, [R6, #0x24] \n"
358 " CMP R0, #0 \n"
359 " MOVEQ R0, #2 \n"
360 " BLEQ sub_FF8733C0 \n"
361 " BL sub_FF877834 \n"
362 " LDR R0, [R6, #0x24] \n"
363 " CMP R0, #0 \n"
364 " BNE loc_FF8773A4 \n"
365 " MOV R0, #0 \n"
366 " BL sub_FF950BC0 \n"
367 " MOV R0, #0 \n"
368 " BL sub_FF950CD0 \n"
369 " MOV R0, R4 \n"
370 " BL sub_FF877BC4 \n"
371 " MOV R0, R4 \n"
372 " BL sub_FF94E93C \n"
373 " CMP R0, #0 \n"
374 " BEQ loc_FF877358 \n"
375 " BL sub_FF950C00 \n"
376 " BL sub_FF950D14 \n"
377 " BL sub_FF950D64 \n"
378 " MOV R0, R4 \n"
379 " BL sub_FF94EA20 \n"
380 " TST R0, #1 \n"
381 " MOVNE R2, R4 \n"
382 " LDMNEFD SP!, {R4-R6,LR} \n"
383 " MOVNE R1, #1 \n"
384 " BNE sub_FF8751A8 \n"
385 " B loc_FF87736C \n"
386 "loc_FF877358:\n"
387 " MOV R0, R4 \n"
388 " BL sub_FF94E9BC \n"
389 " BL sub_FF950C00 \n"
390 " BL sub_FF950D14 \n"
391 " BL sub_FF950D64 \n"
392 "loc_FF87736C:\n"
393 " MOV R0, R4 \n"
394 " BL sub_FF876980 \n"
395 " LDRH R0, [R6] \n"
396 " SUB R12, R0, #0x8200 \n"
397 " SUBS R12, R12, #0xF \n"
398 " LDREQ R0, [R4, #0x18] \n"
399 " BLEQ sub_FF872E88 \n"
400 " MOV R0, R4 \n"
401 " BL sub_FF94FF48 \n"
402 " BL sub_FF9509C8 \n"
403 " MOV R0, R4 \n"
404 " BL sub_FF950030_my \n" //----------------->
405 " MOV R5, R0 \n"
406 " BL capt_seq_hook_raw_here\n" //----------------->
407 " B loc_FF8773B4 \n"
408 "loc_FF8773A4:\n"
409 " LDR R0, =0x2B04 \n"
410 " LDR R0, [R0, #0x10] \n"
411 " CMP R0, #0 \n"
412 " MOVNE R5, #0x1D \n"
413 "loc_FF8773B4:\n"
414 " BL sub_FF87A2A4 \n"
415 " BL sub_FF87A2EC \n"
416 " BL sub_FF87A32C \n"
417 " MOV R2, R4 \n"
418 " MOV R1, #1 \n"
419 " MOV R0, R5 \n"
420 " BL sub_FF8751A8 \n"
421 " BL sub_FF9502EC \n"
422 " CMP R0, #0 \n"
423 " LDRNE R0, [R4, #8] \n"
424 " ORRNE R0, R0, #0x2000 \n"
425 " STRNE R0, [R4, #8] \n"
426 " LDMFD SP!, {R4-R6,PC} \n"
427 );
428 }
429
430
431 //** exp_drv_task @ 0xFF8BA324
432
433 void __attribute__((naked,noinline)) exp_drv_task( ) {
434 asm volatile (
435 " STMFD SP!, {R4-R8,LR} \n"
436 " SUB SP, SP, #0x20 \n"
437 " LDR R8, =0xBB8 \n"
438 " LDR R7, =0x4130 \n"
439 " LDR R5, =0x4F45C \n"
440 " MOV R0, #0 \n"
441 " ADD R6, SP, #0x10 \n"
442 " STR R0, [SP, #0xC] \n"
443 "loc_FF8BA344:\n"
444 " LDR R0, [R7, #0x20] \n"
445 " MOV R2, #0 \n"
446 " ADD R1, SP, #0x1C \n"
447 " BL sub_FF837F08 \n"
448 " LDR R0, [SP, #0xC] \n"
449 " CMP R0, #1 \n"
450 " BNE loc_FF8BA390 \n"
451 " LDR R0, [SP, #0x1C] \n"
452 " LDR R0, [R0] \n"
453 " CMP R0, #0x13 \n"
454 " CMPNE R0, #0x14 \n"
455 " CMPNE R0, #0x15 \n"
456 " CMPNE R0, #0x16 \n"
457 " BEQ loc_FF8BA4AC \n"
458 " CMP R0, #0x28 \n"
459 " BEQ loc_FF8BA484 \n"
460 " ADD R1, SP, #0xC \n"
461 " MOV R0, #0 \n"
462 " BL sub_FF8BA2D4 \n"
463 "loc_FF8BA390:\n"
464 " LDR R0, [SP, #0x1C] \n"
465 " LDR R1, [R0] \n"
466 " CMP R1, #0x2D \n"
467 " BNE loc_FF8BA3C0 \n"
468 " LDR R0, [SP, #0x1C] \n"
469 " BL sub_FF8BB594 \n"
470 " LDR R0, [R7, #0x1C] \n"
471 " MOV R1, #1 \n"
472 " BL sub_FF880A14 \n"
473 " BL sub_FF81E844 \n"
474 " ADD SP, SP, #0x20 \n"
475 " LDMFD SP!, {R4-R8,PC} \n"
476 "loc_FF8BA3C0:\n"
477 " CMP R1, #0x2C \n"
478 " BNE loc_FF8BA3DC \n"
479 " LDR R2, [R0, #0x8C]! \n"
480 " LDR R1, [R0, #4] \n"
481 " MOV R0, R1 \n"
482 " BLX R2 \n"
483 " B loc_FF8BA8D4 \n"
484 "loc_FF8BA3DC:\n"
485 " CMP R1, #0x26 \n"
486 " BNE loc_FF8BA42C \n"
487 " LDR R0, [R7, #0x1C] \n"
488 " MOV R1, #0x80 \n"
489 " BL sub_FF880A48 \n"
490 " LDR R0, =0xFF8B6A14 \n"
491 " MOV R1, #0x80 \n"
492 " BL sub_FF943A58 \n"
493 " LDR R0, [R7, #0x1C] \n"
494 " MOV R2, R8 \n"
495 " MOV R1, #0x80 \n"
496 " BL sub_FF880954 \n"
497 " TST R0, #1 \n"
498 " LDRNE R1, =0xE57 \n"
499 " BNE loc_FF8BA470 \n"
500 "loc_FF8BA418:\n"
501 " LDR R1, [SP, #0x1C] \n"
502 " LDR R0, [R1, #0x90] \n"
503 " LDR R1, [R1, #0x8C] \n"
504 " BLX R1 \n"
505 " B loc_FF8BA8D4 \n"
506 "loc_FF8BA42C:\n"
507 " CMP R1, #0x27 \n"
508 " BNE loc_FF8BA47C \n"
509 " ADD R1, SP, #0xC \n"
510 " BL sub_FF8BA2D4 \n"
511 " LDR R0, [R7, #0x1C] \n"
512 " MOV R1, #0x100 \n"
513 " BL sub_FF880A48 \n"
514 " LDR R0, =0xFF8B6A24 \n"
515 " MOV R1, #0x100 \n"
516 " BL sub_FF9443E8 \n"
517 " LDR R0, [R7, #0x1C] \n"
518 " MOV R2, R8 \n"
519 " MOV R1, #0x100 \n"
520 " BL sub_FF880954 \n"
521 " TST R0, #1 \n"
522 " BEQ loc_FF8BA418 \n"
523 " LDR R1, =0xE61 \n"
524 "loc_FF8BA470:\n"
525 " LDR R0, =0xFF8B7084 \n"
526 " BL sub_FF81E88C \n"
527 " B loc_FF8BA418 \n"
528 "loc_FF8BA47C:\n"
529 " CMP R1, #0x28 \n"
530 " BNE loc_FF8BA494 \n"
531 "loc_FF8BA484:\n"
532 " LDR R0, [SP, #0x1C] \n"
533 " ADD R1, SP, #0xC \n"
534 " BL sub_FF8BA2D4 \n"
535 " B loc_FF8BA418 \n"
536 "loc_FF8BA494:\n"
537 " CMP R1, #0x2B \n"
538 " BNE loc_FF8BA4AC \n"
539 " BL sub_FF8AA4D0 \n"
540 " BL sub_FF8AB0F4 \n"
541 " BL sub_FF8AAC48 \n"
542 " B loc_FF8BA418 \n"
543 "loc_FF8BA4AC:\n"
544 " LDR R0, [SP, #0x1C] \n"
545 " MOV R4, #1 \n"
546 " LDR R1, [R0] \n"
547 " CMP R1, #0x11 \n"
548 " CMPNE R1, #0x12 \n"
549 " BNE loc_FF8BA51C \n"
550 " LDR R1, [R0, #0x7C] \n"
551 " ADD R1, R1, R1, LSL #1 \n"
552 " ADD R1, R0, R1, LSL #2 \n"
553 " SUB R1, R1, #8 \n"
554 " LDMIA R1, {R2-R4} \n"
555 " STMIA R6, {R2-R4} \n"
556 " BL sub_FF8B8BF0 \n"
557 " LDR R0, [SP, #0x1C] \n"
558 " LDR R1, [R0, #0x7C] \n"
559 " LDR R3, [R0, #0x8C] \n"
560 " LDR R2, [R0, #0x90] \n"
561 " ADD R0, R0, #4 \n"
562 " BLX R3 \n"
563 " LDR R0, [SP, #0x1C] \n"
564 " BL sub_FF8BB950 \n"
565 " LDR R0, [SP, #0x1C] \n"
566 " LDR R1, [R0, #0x7C] \n"
567 " LDR R3, [R0, #0x94] \n"
568 " LDR R2, [R0, #0x98] \n"
569 " ADD R0, R0, #4 \n"
570 " BLX R3 \n"
571 " B loc_FF8BA814 \n"
572 "loc_FF8BA51C:\n"
573 " CMP R1, #0x13 \n"
574 " CMPNE R1, #0x14 \n"
575 " CMPNE R1, #0x15 \n"
576 " CMPNE R1, #0x16 \n"
577 " BNE loc_FF8BA5D4 \n"
578 " ADD R3, SP, #0xC \n"
579 " MOV R2, SP \n"
580 " ADD R1, SP, #0x10 \n"
581 " BL sub_FF8B8ECC \n"
582 " CMP R0, #1 \n"
583 " MOV R4, R0 \n"
584 " CMPNE R4, #5 \n"
585 " BNE loc_FF8BA570 \n"
586 " LDR R0, [SP, #0x1C] \n"
587 " MOV R2, R4 \n"
588 " LDR R1, [R0, #0x7C]! \n"
589 " LDR R12, [R0, #0x10]! \n"
590 " LDR R3, [R0, #4] \n"
591 " MOV R0, SP \n"
592 " BLX R12 \n"
593 " B loc_FF8BA5A8 \n"
594 "loc_FF8BA570:\n"
595 " LDR R0, [SP, #0x1C] \n"
596 " CMP R4, #2 \n"
597 " LDR R3, [R0, #0x90] \n"
598 " CMPNE R4, #6 \n"
599 " BNE loc_FF8BA5BC \n"
600 " LDR R12, [R0, #0x8C] \n"
601 " MOV R0, SP \n"
602 " MOV R2, R4 \n"
603 " MOV R1, #1 \n"
604 " BLX R12 \n"
605 " LDR R0, [SP, #0x1C] \n"
606 " MOV R2, SP \n"
607 " ADD R1, SP, #0x10 \n"
608 " BL sub_FF8B9FE8 \n"
609 "loc_FF8BA5A8:\n"
610 " LDR R0, [SP, #0x1C] \n"
611 " LDR R2, [SP, #0xC] \n"
612 " MOV R1, R4 \n"
613 " BL sub_FF8BA274 \n"
614 " B loc_FF8BA814 \n"
615 "loc_FF8BA5BC:\n"
616 " LDR R1, [R0, #0x7C] \n"
617 " LDR R12, [R0, #0x8C] \n"
618 " ADD R0, R0, #4 \n"
619 " MOV R2, R4 \n"
620 " BLX R12 \n"
621 " B loc_FF8BA814 \n"
622 "loc_FF8BA5D4:\n"
623 " CMP R1, #0x22 \n"
624 " CMPNE R1, #0x23 \n"
625 " BNE loc_FF8BA620 \n"
626 " LDR R1, [R0, #0x7C] \n"
627 " ADD R1, R1, R1, LSL #1 \n"
628 " ADD R1, R0, R1, LSL #2 \n"
629 " SUB R1, R1, #8 \n"
630 " LDMIA R1, {R2-R4} \n"
631 " STMIA R6, {R2-R4} \n"
632 " BL sub_FF8B8134 \n"
633 " LDR R0, [SP, #0x1C] \n"
634 " LDR R1, [R0, #0x7C] \n"
635 " LDR R3, [R0, #0x8C] \n"
636 " LDR R2, [R0, #0x90] \n"
637 " ADD R0, R0, #4 \n"
638 " BLX R3 \n"
639 " LDR R0, [SP, #0x1C] \n"
640 " BL sub_FF8B8434 \n"
641 " B loc_FF8BA814 \n"
642 "loc_FF8BA620:\n"
643 " ADD R1, R0, #4 \n"
644 " LDMIA R1, {R2,R3,R12} \n"
645 " STMIA R6, {R2,R3,R12} \n"
646 " LDR R1, [R0] \n"
647 " CMP R1, #0x25 \n"
648 " ADDLS PC, PC, R1, LSL #2 \n"
649 " B loc_FF8BA7F4 \n"
650 " B loc_FF8BA6D4 \n"
651 " B loc_FF8BA6D4 \n"
652 " B loc_FF8BA6DC \n"
653 " B loc_FF8BA6E4 \n"
654 " B loc_FF8BA6E4 \n"
655 " B loc_FF8BA6E4 \n"
656 " B loc_FF8BA6D4 \n"
657 " B loc_FF8BA6DC \n"
658 " B loc_FF8BA6E4 \n"
659 " B loc_FF8BA6E4 \n"
660 " B loc_FF8BA6FC \n"
661 " B loc_FF8BA6FC \n"
662 " B loc_FF8BA7E8 \n"
663 " B loc_FF8BA7F0 \n"
664 " B loc_FF8BA7F0 \n"
665 " B loc_FF8BA7F0 \n"
666 " B loc_FF8BA7F0 \n"
667 " B loc_FF8BA7F4 \n"
668 " B loc_FF8BA7F4 \n"
669 " B loc_FF8BA7F4 \n"
670 " B loc_FF8BA7F4 \n"
671 " B loc_FF8BA7F4 \n"
672 " B loc_FF8BA7F4 \n"
673 " B loc_FF8BA6EC \n"
674 " B loc_FF8BA6F4 \n"
675 " B loc_FF8BA6F4 \n"
676 " B loc_FF8BA708 \n"
677 " B loc_FF8BA708 \n"
678 " B loc_FF8BA710 \n"
679 " B loc_FF8BA740 \n"
680 " B loc_FF8BA770 \n"
681 " B loc_FF8BA7A0 \n"
682 " B loc_FF8BA7D0 \n"
683 " B loc_FF8BA7D0 \n"
684 " B loc_FF8BA7F4 \n"
685 " B loc_FF8BA7F4 \n"
686 " B loc_FF8BA7D8 \n"
687 " B loc_FF8BA7E0 \n"
688 "loc_FF8BA6D4:\n"
689 " BL sub_FF8B6F2C \n"
690 " B loc_FF8BA7F4 \n"
691 "loc_FF8BA6DC:\n"
692 " BL sub_FF8B71B0 \n"
693 " B loc_FF8BA7F4 \n"
694 "loc_FF8BA6E4:\n"
695 " BL sub_FF8B73B8 \n"
696 " B loc_FF8BA7F4 \n"
697 "loc_FF8BA6EC:\n"
698 " BL sub_FF8B7630 \n"
699 " B loc_FF8BA7F4 \n"
700 "loc_FF8BA6F4:\n"
701 " BL sub_FF8B7828 \n"
702 " B loc_FF8BA7F4 \n"
703 "loc_FF8BA6FC:\n"
704 " BL sub_FF8B7AE4_my \n" //----------------->
705 " MOV R4, #0 \n"
706 " B loc_FF8BA7F4 \n"
707 "loc_FF8BA708:\n"
708 " BL sub_FF8B7C24 \n"
709 " B loc_FF8BA7F4 \n"
710 "loc_FF8BA710:\n"
711 " LDRH R1, [R0, #4] \n"
712 " STRH R1, [SP, #0x10] \n"
713 " LDRH R1, [R5, #2] \n"
714 " STRH R1, [SP, #0x12] \n"
715 " LDRH R1, [R5, #4] \n"
716 " STRH R1, [SP, #0x14] \n"
717 " LDRH R1, [R5, #6] \n"
718 " STRH R1, [SP, #0x16] \n"
719 " LDRH R1, [R0, #0xC] \n"
720 " STRH R1, [SP, #0x18] \n"
721 " BL sub_FF8BB608 \n"
722 " B loc_FF8BA7F4 \n"
723 "loc_FF8BA740:\n"
724 " LDRH R1, [R0, #4] \n"
725 " STRH R1, [SP, #0x10] \n"
726 " LDRH R1, [R5, #2] \n"
727 " STRH R1, [SP, #0x12] \n"
728 " LDRH R1, [R5, #4] \n"
729 " STRH R1, [SP, #0x14] \n"
730 " LDRH R1, [R5, #6] \n"
731 " STRH R1, [SP, #0x16] \n"
732 " LDRH R1, [R5, #8] \n"
733 " STRH R1, [SP, #0x18] \n"
734 " BL sub_FF8BB768 \n"
735 " B loc_FF8BA7F4 \n"
736 "loc_FF8BA770:\n"
737 " LDRH R1, [R5] \n"
738 " STRH R1, [SP, #0x10] \n"
739 " LDRH R1, [R0, #6] \n"
740 " STRH R1, [SP, #0x12] \n"
741 " LDRH R1, [R5, #4] \n"
742 " STRH R1, [SP, #0x14] \n"
743 " LDRH R1, [R5, #6] \n"
744 " STRH R1, [SP, #0x16] \n"
745 " LDRH R1, [R5, #8] \n"
746 " STRH R1, [SP, #0x18] \n"
747 " BL sub_FF8BB814 \n"
748 " B loc_FF8BA7F4 \n"
749 "loc_FF8BA7A0:\n"
750 " LDRH R1, [R5] \n"
751 " STRH R1, [SP, #0x10] \n"
752 " LDRH R1, [R5, #2] \n"
753 " STRH R1, [SP, #0x12] \n"
754 " LDRH R1, [R5, #4] \n"
755 " STRH R1, [SP, #0x14] \n"
756 " LDRH R1, [R5, #6] \n"
757 " STRH R1, [SP, #0x16] \n"
758 " LDRH R1, [R0, #0xC] \n"
759 " STRH R1, [SP, #0x18] \n"
760 " BL sub_FF8BB8B4 \n"
761 " B loc_FF8BA7F4 \n"
762 "loc_FF8BA7D0:\n"
763 " BL sub_FF8B7F70 \n"
764 " B loc_FF8BA7F4 \n"
765 "loc_FF8BA7D8:\n"
766 " BL sub_FF8B8538 \n"
767 " B loc_FF8BA7F4 \n"
768 "loc_FF8BA7E0:\n"
769 " BL sub_FF8B8774 \n"
770 " B loc_FF8BA7F4 \n"
771 "loc_FF8BA7E8:\n"
772 " BL sub_FF8B88F0 \n"
773 " B loc_FF8BA7F4 \n"
774 "loc_FF8BA7F0:\n"
775 " BL sub_FF8B8A8C \n"
776 "loc_FF8BA7F4:\n"
777 " LDR R0, [SP, #0x1C] \n"
778 " LDR R1, [R0, #0x7C] \n"
779 " LDR R3, [R0, #0x8C] \n"
780 " LDR R2, [R0, #0x90] \n"
781 " ADD R0, R0, #4 \n"
782 " BLX R3 \n"
783 " CMP R4, #1 \n"
784 " BNE loc_FF8BA85C \n"
785 "loc_FF8BA814:\n"
786 " LDR R0, [SP, #0x1C] \n"
787 " MOV R2, #0xC \n"
788 " LDR R1, [R0, #0x7C] \n"
789 " ADD R1, R1, R1, LSL #1 \n"
790 " ADD R0, R0, R1, LSL #2 \n"
791 " SUB R4, R0, #8 \n"
792 " LDR R0, =0x4F45C \n"
793 " ADD R1, SP, #0x10 \n"
794 " BL sub_FFB3A548 \n"
795 " LDR R0, =0x4F468 \n"
796 " MOV R2, #0xC \n"
797 " ADD R1, SP, #0x10 \n"
798 " BL sub_FFB3A548 \n"
799 " LDR R0, =0x4F474 \n"
800 " MOV R2, #0xC \n"
801 " MOV R1, R4 \n"
802 " BL sub_FFB3A548 \n"
803 " B loc_FF8BA8D4 \n"
804 "loc_FF8BA85C:\n"
805 " LDR R0, [SP, #0x1C] \n"
806 " LDR R0, [R0] \n"
807 " CMP R0, #0xB \n"
808 " BNE loc_FF8BA8A4 \n"
809 " MOV R3, #0 \n"
810 " STR R3, [SP] \n"
811 " MOV R3, #1 \n"
812 " MOV R2, #1 \n"
813 " MOV R1, #1 \n"
814 " MOV R0, #0 \n"
815 " BL sub_FF8B6D34 \n"
816 " MOV R3, #0 \n"
817 " STR R3, [SP] \n"
818 " MOV R3, #1 \n"
819 " MOV R2, #1 \n"
820 " MOV R1, #1 \n"
821 " MOV R0, #0 \n"
822 " B loc_FF8BA8D0 \n"
823 "loc_FF8BA8A4:\n"
824 " MOV R3, #1 \n"
825 " MOV R2, #1 \n"
826 " MOV R1, #1 \n"
827 " MOV R0, #1 \n"
828 " STR R3, [SP] \n"
829 " BL sub_FF8B6D34 \n"
830 " MOV R3, #1 \n"
831 " MOV R2, #1 \n"
832 " MOV R1, #1 \n"
833 " MOV R0, #1 \n"
834 " STR R3, [SP] \n"
835 "loc_FF8BA8D0:\n"
836 " BL sub_FF8B6E74 \n"
837 "loc_FF8BA8D4:\n"
838 " LDR R0, [SP, #0x1C] \n"
839 " BL sub_FF8BB594 \n"
840 " B loc_FF8BA344 \n"
841 );
842 }
843
844
845 //** sub_FF8B7A94_my @ 0xFF8B7AE4
846
847 void __attribute__((naked,noinline)) sub_FF8B7AE4_my( ) {
848 asm volatile (
849 " STMFD SP!, {R4-R8,LR} \n"
850 " LDR R7, =0x4130 \n"
851 " MOV R4, R0 \n"
852 " LDR R0, [R7, #0x1C] \n"
853 " MOV R1, #0x3E \n"
854 " BL sub_FF880A48 \n"
855 " LDRSH R0, [R4, #4] \n"
856 " MOV R2, #0 \n"
857 " MOV R1, #0 \n"
858 " BL sub_FF8B6A98 \n"
859 " MOV R6, R0 \n"
860 " LDRSH R0, [R4, #6] \n"
861 " BL sub_FF8B6BA8 \n"
862 " LDRSH R0, [R4, #8] \n"
863 " BL sub_FF8B6C00 \n"
864 " LDRSH R0, [R4, #0xA] \n"
865 " BL sub_FF8B6C58 \n"
866 " LDRSH R0, [R4, #0xC] \n"
867 " MOV R1, #0 \n"
868 " BL sub_FF8B6CB0 \n"
869 " MOV R5, R0 \n"
870 " LDR R0, [R4] \n"
871 " LDR R8, =0x4F474 \n"
872 " CMP R0, #0xB \n"
873 " MOVEQ R6, #0 \n"
874 " MOVEQ R5, #0 \n"
875 " BEQ loc_FF8B7B78 \n"
876 " CMP R6, #1 \n"
877 " BNE loc_FF8B7B78 \n"
878 " LDRSH R0, [R4, #4] \n"
879 " LDR R1, =0xFF8B6A04 \n"
880 " MOV R2, #2 \n"
881 " BL sub_FF943DA4 \n"
882 " STRH R0, [R4, #4] \n"
883 " MOV R0, #0 \n"
884 " STR R0, [R7, #0x28] \n"
885 " B loc_FF8B7B80 \n"
886 "loc_FF8B7B78:\n"
887 " LDRH R0, [R8] \n"
888 " STRH R0, [R4, #4] \n"
889 "loc_FF8B7B80:\n"
890 " CMP R5, #1 \n"
891 " LDRNEH R0, [R8, #8] \n"
892 " BNE loc_FF8B7B9C \n"
893 " LDRSH R0, [R4, #0xC] \n"
894 " LDR R1, =0xFF8B6A88 \n"
895 " MOV R2, #0x20 \n"
896 " BL sub_FF8BB5C4 \n"
897 "loc_FF8B7B9C:\n"
898 " STRH R0, [R4, #0xC] \n"
899 " LDRSH R0, [R4, #6] \n"
900 " BL sub_FF8AA240_my \n" //----------------->
901 " LDRSH R0, [R4, #8] \n"
902 " MOV R1, #1 \n"
903 " BL sub_FF8AA990 \n"
904 " MOV R1, #0 \n"
905 " ADD R0, R4, #8 \n"
906 " BL sub_FF8AAA18 \n"
907 " LDRSH R0, [R4, #0xE] \n"
908 " BL sub_FF8B2500 \n"
909 " LDR R4, =0xBB8 \n"
910 " CMP R6, #1 \n"
911 " BNE loc_FF8B7BF4 \n"
912 " LDR R0, [R7, #0x1C] \n"
913 " MOV R2, R4 \n"
914 " MOV R1, #2 \n"
915 " BL sub_FF880954 \n"
916 " TST R0, #1 \n"
917 " LDRNE R1, =0x59B \n"
918 " LDRNE R0, =0xFF8B7084 \n"
919 " BLNE sub_FF81E88C \n"
920 "loc_FF8B7BF4:\n"
921 " CMP R5, #1 \n"
922 " LDMNEFD SP!, {R4-R8,PC} \n"
923 " LDR R0, [R7, #0x1C] \n"
924 " MOV R2, R4 \n"
925 " MOV R1, #0x20 \n"
926 " BL sub_FF880954 \n"
927 " TST R0, #1 \n"
928 " LDRNE R0, =0xFF8B7084 \n"
929 " LDMNEFD SP!, {R4-R8,LR} \n"
930 " MOVNE R1, #0x5A0 \n"
931 " BNE sub_FF81E88C \n"
932 " LDMFD SP!, {R4-R8,PC} \n"
933 );
934 }
935
936
937 //** sub_FF8AA1F0_my @ 0xFF8AA240
938
939 void __attribute__((naked,noinline)) sub_FF8AA240_my( ) {
940 asm volatile (
941 " STMFD SP!, {R4-R6,LR} \n"
942 " LDR R5, =0x3E48 \n"
943 " MOV R4, R0 \n"
944 " LDR R0, [R5, #4] \n"
945 " CMP R0, #1 \n"
946 " LDRNE R1, =0x146 \n"
947 " LDRNE R0, =0xFF8AA044 \n"
948 " BLNE sub_FF81E88C \n"
949 " CMN R4, #0xC00 \n"
950 " LDREQSH R4, [R5, #2] \n"
951 " CMN R4, #0xC00 \n"
952 " MOVEQ R1, #0x14C \n"
953 " LDREQ R0, =0xFF8AA044 \n"
954 " STRH R4, [R5, #2] \n"
955 " BLEQ sub_FF81E88C \n"
956 " MOV R0, R4 \n"
957 " BL sub_FF9FD5E8 \n"
958 " MOV R4, R0 \n"
959 " BL sub_FF8DF618 \n"
960 " MOV R0, R4 \n"
961 " BL sub_FF8E3310 \n"
962 " TST R0, #1 \n"
963 " LDRNE R1, =0x151 \n"
964 " LDMNEFD SP!, {R4-R6,LR} \n"
965 " LDRNE R0, =0xFF8AA044 \n"
966 " BNE sub_FF81E88C \n"
967 " LDMFD SP!, {R4-R6,PC} \n"
968 );
969 }