root/platform/s95/sub/100e/capt_seq.c

/* [<][>][^][v][top][bottom][index][help] */

DEFINITIONS

This source file includes following definitions.
  1. capt_seq_task
  2. sub_FF98ACE0_my
  3. exp_drv_task
  4. sub_FF8CC1CC_my
  5. sub_FF8BD350_my

   1 #include "lolevel.h"
   2 #include "platform.h"
   3 #include "core.h"
   4 
   5 static long *nrflag = (long*)(0x757c+0x08);  // Found @ ff98e1fc & ff98e214
   6 #define NR_AUTO (0)                          // have to explictly reset value back to 0 to enable auto
   7 
   8 #include "../../../generic/capt_seq.c"
   9 
  10 
  11 /*----------------------------------------------------------------------
  12         capt_seq_task()
  13 -----------------------------------------------------------------------*/
  14 void __attribute__((naked,noinline)) capt_seq_task()
  15 {
  16         asm volatile (
  17 "               STMFD   SP!, {R3-R7,LR} \n"
  18 "               LDR     R7, =0x2E6C \n"
  19 "               LDR     R4, =0x3CFBC \n"
  20 "               MOV     R6, #0 \n"
  21 "loc_FF88323C: \n"
  22 "               LDR     R0, [R7,#4] \n"
  23 "               MOV     R2, #0 \n"
  24 "               MOV     R1, SP \n"
  25 "               BL      sub_FF83A2F8 \n"
  26 "               TST     R0, #1 \n"
  27 "               BEQ     loc_FF883268 \n"
  28 "               LDR     R1, =0x43F \n"
  29 "               LDR     R0, =0xFF882CF4 \n"                                     // aSsshoottask_c
  30 "               BL      sub_FF81EB78 \n"                                        // DebugAssert
  31 "               BL      sub_FF81EB30 \n"                                        // eventproc_export_ExitTask
  32 "               LDMFD   SP!, {R3-R7,PC} \n"
  33 "loc_FF883268: \n"
  34 "               LDR     R0, [SP] \n"
  35 "               LDR     R1, [R0] \n"
  36 "               CMP     R1, #0x23 \n"
  37 "               ADDLS   PC, PC, R1,LSL#2 \n"
  38 "               B       loc_FF8834A0 \n"
  39 "loc_FF88327C: \n"
  40 "               B       loc_FF88330C \n"
  41 "loc_FF883280: \n"
  42 "               B       loc_FF883324 \n"
  43 "loc_FF883284: \n"
  44 "               B       loc_FF883348 \n"
  45 "loc_FF883288: \n"
  46 "               B       loc_FF88335C \n"
  47 "loc_FF88328C: \n"
  48 "               B       loc_FF883354 \n"
  49 "loc_FF883290: \n"
  50 "               B       loc_FF883368 \n"
  51 "loc_FF883294: \n"
  52 "               B       loc_FF883370 \n"
  53 "loc_FF883298: \n"
  54 "               B       loc_FF883378 \n"
  55 "loc_FF88329C: \n"
  56 "               B       loc_FF883384 \n"
  57 "loc_FF8832A0: \n"
  58 "               B       loc_FF8833AC \n"
  59 "loc_FF8832A4: \n"
  60 "               B       loc_FF883390 \n"
  61 "loc_FF8832A8: \n"
  62 "               B       loc_FF88339C \n"
  63 "loc_FF8832AC: \n"
  64 "               B       loc_FF8833A4 \n"
  65 "loc_FF8832B0: \n"
  66 "               B       loc_FF8833B4 \n"
  67 "loc_FF8832B4: \n"
  68 "               B       loc_FF8833BC \n"
  69 "loc_FF8832B8: \n"
  70 "               B       loc_FF8833C4 \n"
  71 "loc_FF8832BC: \n"
  72 "               B       loc_FF8833CC \n"
  73 "loc_FF8832C0: \n"
  74 "               B       loc_FF8833D4 \n"
  75 "loc_FF8832C4: \n"
  76 "               B       loc_FF8833DC \n"
  77 "loc_FF8832C8: \n"
  78 "               B       loc_FF8833E4 \n"
  79 "loc_FF8832CC: \n"
  80 "               B       loc_FF8833EC \n"
  81 "loc_FF8832D0: \n"
  82 "               B       loc_FF8833F4 \n"
  83 "loc_FF8832D4: \n"
  84 "               B       loc_FF8833FC \n"
  85 "loc_FF8832D8: \n"
  86 "               B       loc_FF883408 \n"
  87 "loc_FF8832DC: \n"
  88 "               B       loc_FF883410 \n"
  89 "loc_FF8832E0: \n"
  90 "               B       loc_FF88341C \n"
  91 "loc_FF8832E4: \n"
  92 "               B       loc_FF883424 \n"
  93 "loc_FF8832E8: \n"
  94 "               B       loc_FF88342C \n"
  95 "loc_FF8832EC: \n"
  96 "               B       loc_FF883434 \n"
  97 "loc_FF8832F0: \n"
  98 "               B       loc_FF88343C \n"
  99 "loc_FF8832F4: \n"
 100 "               B       loc_FF883444 \n"
 101 "loc_FF8832F8: \n"
 102 "               B       loc_FF88344C \n"
 103 "loc_FF8832FC: \n"
 104 "               B       loc_FF883454 \n"
 105 "loc_FF883300: \n"
 106 "               B       loc_FF88345C \n"
 107 "loc_FF883304: \n"
 108 "               B       loc_FF883468 \n"
 109 "loc_FF883308: \n"
 110 "               B       loc_FF8834AC \n"
 111 
 112 // jump table entry 0
 113 // half-press / shot setup
 114 "loc_FF88330C: \n"
 115 "               BL      sub_FF8839D4 \n"
 116 
 117 "               BL      shooting_expo_param_override\n"                 // added
 118 
 119 "               BL      sub_FF880B34 \n"
 120 
 121 // force call to next function
 122 "               MOV     R0, #0\n"
 123 "               STR     R0, [R4,#0x24]\n"                       // fixes overrides  behavior at short shutter press
 124 
 125 "               LDR     R0, [R4,#0x24] \n"
 126 "               CMP     R0, #0 \n"
 127 "               BLNE    sub_FF98AEB4 \n"
 128 "               B       loc_FF8834AC \n"
 129 
 130 // jump table entry 1
 131 // capture image
 132 "loc_FF883324: \n"
 133 "               LDRH    R1, [R4] \n"
 134 "               LDR     R0, [R0,#0xC] \n"
 135 "               SUB     R12, R1, #0x4200 \n"
 136 "               SUBS    R12, R12, #0x2E \n"
 137 "               BNE     loc_FF883340 \n"
 138 "               BL      sub_FF98BC9C \n"
 139 "               B       loc_FF8834AC \n"
 140 "loc_FF883340: \n"
 141 
 142 //"             BL      sub_FF98ACE0 \n"
 143 "               BL      sub_FF98ACE0_my \n"                                     // patched
 144 
 145 "               B       loc_FF8834AC \n"
 146 
 147 // jump table entry 2
 148 "loc_FF883348: \n"
 149 "               MOV     R0, #1 \n"
 150 "               BL      sub_FF883CB8 \n"
 151 "               B       loc_FF8834AC \n"
 152 
 153 // jump table entry 4
 154 "loc_FF883354: \n"
 155 "               BL      sub_FF88366C \n"
 156 "               B       loc_FF883360 \n"
 157 
 158 // jump table entry 3
 159 "loc_FF88335C: \n"
 160 "               BL      sub_FF8839B4 \n"
 161 "loc_FF883360: \n"
 162 "               STR     R6, [R4,#0x24] \n"
 163 "               B       loc_FF8834AC \n"
 164 
 165 // jump table entry 5
 166 "loc_FF883368: \n"
 167 "               BL      sub_FF8839BC \n"
 168 "               B       loc_FF8834AC \n"
 169 
 170 // jump table entry 6
 171 "loc_FF883370: \n"
 172 "               BL      sub_FF883BBC \n"
 173 "               B       loc_FF883388 \n"
 174 
 175 // jump table entry 7
 176 "loc_FF883378: \n"
 177 "               LDR     R0, [R0,#0xC] \n"
 178 "               BL      sub_FF98AF1C \n"
 179 "               B       loc_FF8834AC \n"
 180 
 181 // jump table entry 8
 182 "loc_FF883384: \n"
 183 "               BL      sub_FF883C28 \n"
 184 "loc_FF883388: \n"
 185 "               BL      sub_FF880B34 \n"
 186 "               B       loc_FF8834AC \n"
 187 
 188 // jump table entry 10
 189 "loc_FF883390: \n"
 190 "               LDR     R0, [R4,#0x54] \n"
 191 "               BL      sub_FF884614 \n"
 192 "               B       loc_FF8834AC \n"
 193 
 194 // jump table entry 11
 195 "loc_FF88339C: \n"
 196 "               BL      sub_FF884968 \n"
 197 "               B       loc_FF8834AC \n"
 198 
 199 // jump table entry 12
 200 "loc_FF8833A4: \n"
 201 "               BL      sub_FF8849CC \n"
 202 "               B       loc_FF8834AC \n"
 203 
 204 // jump table entry 9
 205 "loc_FF8833AC: \n"
 206 "               BL      sub_FF8839B4 \n"
 207 "               B       loc_FF8834AC \n"
 208 
 209 // jump table entry 13
 210 "loc_FF8833B4: \n"
 211 "               BL      sub_FF989FF0 \n"
 212 "               B       loc_FF8834AC \n"
 213 
 214 // jump table entry 14
 215 "loc_FF8833BC: \n"
 216 "               BL      sub_FF98A1FC \n"
 217 "               B       loc_FF8834AC \n"
 218 
 219 // jump table entry 15
 220 "loc_FF8833C4: \n"
 221 "               BL      sub_FF98A294 \n"
 222 "               B       loc_FF8834AC \n"
 223 
 224 // jump table entry 16
 225 "loc_FF8833CC: \n"
 226 "               BL      sub_FF98A380 \n"
 227 "               B       loc_FF8834AC \n"
 228 
 229 // jump table entry 17
 230 "loc_FF8833D4: \n"
 231 "               BL      sub_FF98A478 \n"
 232 "               B       loc_FF8834AC \n"
 233 
 234 // jump table entry 18
 235 "loc_FF8833DC: \n"
 236 "               MOV     R0, #0 \n"
 237 "               B       loc_FF883400 \n"
 238 
 239 // jump table entry 19
 240 "loc_FF8833E4: \n"
 241 "               BL      sub_FF98A6B4 \n"
 242 "               B       loc_FF8834AC \n"
 243 
 244 // jump table entry 20
 245 "loc_FF8833EC: \n"
 246 "               BL      sub_FF98A758 \n"
 247 "               B       loc_FF8834AC \n"
 248 
 249 // jump table entry 21
 250 "loc_FF8833F4: \n"
 251 "               BL      sub_FF98A838 \n"
 252 "               B       loc_FF8834AC \n"
 253 
 254 // jump table entry 22
 255 "loc_FF8833FC: \n"
 256 "               MOV     R0, #1 \n"
 257 "loc_FF883400: \n"
 258 "               BL      sub_FF98A53C \n"
 259 "               B       loc_FF8834AC \n"
 260 
 261 // jump table entry 23
 262 "loc_FF883408: \n"
 263 "               BL      sub_FF883EC4 \n"
 264 "               B       loc_FF8834AC \n"
 265 
 266 // jump table entry 24
 267 "loc_FF883410: \n"
 268 "               BL      sub_FF883F6C \n"
 269 "               BL      sub_FF98C1C4 \n"
 270 "               B       loc_FF8834AC \n"
 271 
 272 // jump table entry 25
 273 // gets called frequently (SsChgExpSeq.c)
 274 "loc_FF88341C: \n"
 275 "               BL      sub_FF884350 \n"
 276 "               B       loc_FF8834AC \n"
 277 
 278 // jump table entry 26
 279 "loc_FF883424: \n"
 280 "               BL      sub_FF884490 \n"
 281 "               B       loc_FF8834AC \n"
 282 
 283 // jump table entry 27
 284 "loc_FF88342C: \n"
 285 "               BL      sub_FF98C294 \n"
 286 "               B       loc_FF8834AC \n"
 287 
 288 // jump table entry 28
 289 "loc_FF883434: \n"
 290 "               BL      sub_FF837C6C \n"
 291 "               B       loc_FF8834AC \n"
 292 
 293 // jump table entry 29
 294 "loc_FF88343C: \n"
 295 "               BL      sub_FF886FE4 \n"
 296 "               B       loc_FF8834AC \n"
 297 
 298 // jump table entry 30
 299 "loc_FF883444: \n"
 300 "               BL      sub_FF887070 \n"
 301 "               B       loc_FF8834AC \n"
 302 
 303 // jump table entry 31
 304 "loc_FF88344C: \n"
 305 "               BL      sub_FF98A970 \n"
 306 "               B       loc_FF8834AC \n"
 307 
 308 // jump table entry 32
 309 "loc_FF883454: \n"
 310 "               BL      sub_FF98A9D4 \n"
 311 "               B       loc_FF8834AC \n"
 312 
 313 // jump table entry 33
 314 // gets called after each shot
 315 // live image ?
 316 "loc_FF88345C: \n"
 317 "               BL      sub_FF8870CC \n"
 318 "               BL      sub_FF88708C \n"
 319 "               B       loc_FF8834AC \n"
 320 
 321 // jump table entry 34
 322 "loc_FF883468: \n"
 323 "               MOV     R0, #1 \n"
 324 "               BL      sub_FF98B6C4 \n"
 325 "               MOV     R0, #1 \n"
 326 "               BL      sub_FF98B7F4 \n"
 327 "               LDRH    R0, [R4,#0x9C] \n"
 328 "               CMP     R0, #4 \n"
 329 "               LDRNEH  R0, [R4] \n"
 330 "               SUBNE   R12, R0, #0x4200 \n"
 331 "               SUBNES  R12, R12, #0x2A \n"
 332 "               BNE     loc_FF8834AC \n"
 333 "               BL      sub_FF887070 \n"
 334 "               BL      sub_FF887670 \n"
 335 "               BL      sub_FF8874EC \n"
 336 "               B       loc_FF8834AC \n"
 337 
 338 // jump table entry default
 339 "loc_FF8834A0: \n"
 340 "               LDR     R1, =0x591 \n"
 341 "               LDR     R0, =0xFF882CF4 \n"                             // "SsShootTask.c"
 342 "               BL      sub_FF81EB78 \n"                                // DebugAssert
 343 
 344 // jump table entry 35
 345 "loc_FF8834AC: \n"
 346 "               LDR     R0, [SP] \n"
 347 "               LDR     R1, [R0,#4] \n"
 348 "               LDR     R0, [R7] \n"
 349 "               BL      sub_FF88E1E4 \n"
 350 "               LDR     R5, [SP] \n"
 351 "               LDR     R0, [R5,#8] \n"
 352 "               CMP     R0, #0 \n"
 353 "               LDREQ   R1, =0x115 \n"
 354 "               LDREQ   R0, =0xFF882CF4 \n"                     // "SsShootTask.c"
 355 "               BLEQ    sub_FF81EB78 \n"                        // DebugAssert
 356 "               STR     R6, [R5,#8] \n"
 357 "               B       loc_FF88323C \n"
 358         );
 359 }
 360 
 361 
 362 /*----------------------------------------------------------------------
 363         sub_FF98ACE0_my()
 364         image capture
 365 -----------------------------------------------------------------------*/
 366 void __attribute__((naked,noinline)) sub_FF98ACE0_my()
 367 {
 368         asm volatile (
 369 "               STMFD   SP!, {R3-R7,LR} \n"
 370 
 371 // HDR and non-HDR modes
 372 // all single shots
 373 // all bracket
 374 // all contin shots
 375 "               LDR     R5, =0x3CFBC \n"
 376 "               MOV     R4, R0 \n"
 377 "               LDR     R0, [R5,#0x24] \n"
 378 "               MOV     R6, #0 \n"
 379 "               CMP     R0, #0 \n"
 380 "               BNE     loc_FF98AD1C \n"
 381 
 382 // HDR processing only
 383 "               MOV     R0, #0xC \n"
 384 "               BL      sub_FF889040 \n"
 385 "               TST     R0, #1 \n"
 386 "               MOVNE   R2, R4 \n"
 387 "               LDMNEFD SP!, {R3-R7,LR} \n"
 388 "               MOVNE   R1, #1 \n"
 389 "               MOVNE   R0, #1 \n"
 390 "               BNE     sub_FF8811F8 \n"
 391 // end of HDR only
 392 
 393 // HDR and non-HDR modes
 394 // all single shots
 395 // all bracket
 396 // all contin shots
 397 "loc_FF98AD1C: \n"
 398 "               LDR     R0, [R4,#8] \n"
 399 "               LDR     R7, =0x420C \n"
 400 "               ORR     R0, R0, #1 \n"
 401 "               STR     R0, [R4,#8] \n"
 402 "               LDRH    R0, [R5] \n"
 403 "               CMP     R0, R7 \n"
 404 "               BEQ     loc_FF98ADAC \n"                        // takes branch if HDR
 405 
 406 // non-HDR modes
 407 // all single shots
 408 // all bracket
 409 // all contin shots
 410 "               LDRH    R0, [R5,#0x9A] \n"
 411 "               CMP     R0, #3 \n"
 412 "               BEQ     loc_FF98ADF4 \n"
 413 
 414 // non-HDR modes
 415 // all single shots
 416 // all bracket
 417 // all contin shots
 418 "               LDR     R0, [R4,#0xC] \n"
 419 "               CMP     R0, #1 \n"
 420 "               BLS     loc_FF98ADB8 \n"
 421 
 422 // non-HDR modes
 423 // no single shots
 424 // 2+ bracket
 425 // 2+ contin shots
 426 "               LDRH    R0, [R5,#0x98] \n"
 427 "               CMP     R0, #0 \n"
 428 "               BNE     loc_FF98ADF4 \n"
 429 
 430 // non-HDR modes
 431 // no single shots
 432 // no bracket
 433 // 2+ contin shots
 434 "               LDRH    R0, [R5,#0x94] \n"
 435 "               CMP     R0, #2 \n"
 436 "               BNE     loc_FF98ADC4 \n"
 437 "               BL      sub_FF88402C \n"
 438 "               LDRH    R0, [R5] \n"
 439 "               CMP     R0, R7 \n"
 440 "               BEQ     loc_FF98ADAC \n"
 441 "               LDRH    R0, [R5,#0x9A] \n"
 442 "               CMP     R0, #3 \n"
 443 "               BEQ     loc_FF98ADF4 \n"
 444 "               LDR     R0, [R4,#0xC] \n"
 445 "               CMP     R0, #1 \n"
 446 "               BLS     loc_FF98ADB8 \n"
 447 "               LDRH    R0, [R5,#0x98] \n"
 448 "               CMP     R0, #0 \n"
 449 "               BNE     loc_FF98ADF4 \n"
 450 "               LDRH    R0, [R5,#0x94] \n"
 451 "               CMP     R0, #2 \n"
 452 "               BEQ     loc_FF98ADF0 \n"
 453 "               B       loc_FF98ADC4 \n"
 454 
 455 "loc_FF98ADAC: \n"
 456 // HDR proccessing only
 457 "               LDRH    R0, [R5,#0x9A] \n"
 458 "               CMP     R0, #3 \n"
 459 "               BEQ     loc_FF98ADF4 \n"
 460 
 461 "loc_FF98ADB8: \n"
 462 
 463 // non-HDR modes
 464 // single shots
 465 // no bracket
 466 // no contin
 467 "               LDRH    R0, [R5,#0x98] \n"
 468 "               CMP     R0, #0 \n"
 469 "               BNE     loc_FF98ADF4 \n"
 470 
 471 // non-HDR modes
 472 // single shots
 473 // no bracket
 474 // no contin
 475 "loc_FF98ADC4: \n"
 476 
 477 // non-HDR modes
 478 // single shots
 479 // no bracket
 480 // all contin. shots
 481 "               LDRH    R0, [R5,#0x94] \n"
 482 "               CMP     R0, #1 \n"
 483 "               BNE     loc_FF98ADF4 \n"
 484 
 485 // non-HDR modes
 486 // single shots
 487 // no bracket
 488 // all contin. shots
 489 "               LDRH    R0, [R5] \n"
 490 "               CMP     R0, R7 \n"
 491 "               LDRNE   R0, [R4,#0xC] \n"
 492 "               CMPNE   R0, #1 \n"
 493 "               BLS     loc_FF98ADF4 \n"
 494 
 495 // non-HDR modes
 496 // no single shots
 497 // no bracket
 498 // 2+ contin. shots
 499 "               LDR     R0, [R4,#0x10] \n"
 500 "               CMP     R0, #1 \n"
 501 "               BNE     loc_FF98ADF4 \n"
 502 
 503 // never gets here ?
 504 "loc_FF98ADF0: \n"
 505 
 506 // never gets here ?
 507 "               BL      sub_FF98C2CC \n"
 508 
 509 "loc_FF98ADF4: \n"
 510 
 511 // non-HDR modes
 512 // single shots
 513 // 2+ bracket
 514 // all contin
 515 "               BL      sub_FF98C294 \n"
 516 "               BL      sub_FF8839C4 \n"
 517 "               LDR     R0, [R5,#0x24] \n"
 518 "               CMP     R0, #0 \n"
 519 "               BNE     loc_FF98AE8C \n"
 520 
 521 // non-HDR modes
 522 // single shots
 523 // all bracket
 524 // all contin
 525 "               MOV     R0, R4 \n"
 526 "               BL      sub_FFAF8ECC \n"
 527 "               TST     R0, #1 \n"
 528 "               BNE     locret_FF98AEB0 \n"
 529 
 530 // non-HDR modes
 531 // single shots
 532 // all bracket
 533 // all contin
 534 "               MOV     R0, R4 \n"
 535 "               BL      sub_FFAF92EC \n"
 536 "               BL      sub_FF98B48C \n"
 537 "               MOV     R6, #1 \n"
 538 "               MOV     R0, #2 \n"
 539 "               BL      sub_FF87EFF8 \n"
 540 
 541 // non-HDR modes
 542 // single shots
 543 // all bracket
 544 // all contin
 545 
 546 "               BL      wait_until_remote_button_is_released \n"        // added
 547 "               BL      capt_seq_hook_set_nr \n"                                        // added
 548 
 549 "               LDRH    R0, [R5] \n"
 550 "               SUB     R12, R0, #0x8200 \n"
 551 "               SUBS    R12, R12, #0x2D \n"
 552 "               BNE     loc_FF98AE7C \n"
 553 
 554 // never gets here ?
 555 
 556 "               MOV     R2, #2 \n"
 557 "               ADD     R0, R2, #0x15C \n"
 558 "               MOV     R1, SP \n"
 559 "               STR     R6, [SP] \n"
 560 "               BL      sub_FF896414 \n"                                // PT_GetPropertyCaseString
 561 "               TST     R0, #1 \n"
 562 "               MOVNE   R1, #0xC3 \n"
 563 "               LDRNE   R0, =0xFF98AF90 \n"                     // "SsCaptureSeq.c"
 564 "               BLNE    sub_FF81EB78 \n"                        // DebugAssert
 565 "               LDRH    R0, [SP] \n"
 566 "               CMP     R0, #1 \n"
 567 "               STRHI   R6, [R4,#0xE4] \n"
 568 "               BHI     loc_FF98AE9C \n"
 569 "               MOV     R0, #0 \n"
 570 "               STR     R0, [R4,#0xE4] \n"
 571 "loc_FF98AE7C: \n"
 572 
 573 // HDR and non-HDR modes
 574 // single shots
 575 // all bracket
 576 // all contin
 577 "               MOV     R0, R4 \n"
 578 
 579 // ** the following function captures the image **
 580 "               BL      sub_FFAF97E0 \n"
 581 
 582 "               BL     capt_seq_hook_raw_here \n"               // added
 583 
 584 "               MOV     R6, R0 \n"
 585 "               B       loc_FF98AEA0 \n"
 586 
 587 "loc_FF98AE8C: \n"
 588 "               LDR     R0, =0x7514 \n"
 589 "               LDR     R0, [R0] \n"
 590 "               CMP     R0, #0 \n"
 591 "               BEQ     loc_FF98AEA0 \n"
 592 
 593 "loc_FF98AE9C: \n"
 594 "               MOV     R6, #0x1D \n"
 595 
 596 "loc_FF98AEA0: \n"
 597 "               MOV     R1, R6 \n"
 598 "               MOV     R0, R4 \n"
 599 "               LDMFD   SP!, {R3-R7,LR} \n"
 600 "               B       sub_FFAF8FD8 \n"
 601 "locret_FF98AEB0: \n"
 602 "               LDMFD   SP!, {R3-R7,PC} \n"
 603         );
 604 }
 605 
 606 
 607 /*----------------------------------------------------------------------
 608         exp_drv_task()
 609 -----------------------------------------------------------------------*/
 610 void __attribute__((naked,noinline)) exp_drv_task()
 611 {
 612         asm volatile(
 613 "               STMFD   SP!, {R4-R8,LR} \n"
 614 "               SUB     SP, SP, #0x20 \n"
 615 "               LDR     R8, =0xBB8 \n"
 616 "               LDR     R7, =0x4888 \n"
 617 "               LDR     R5, =0x59818 \n"
 618 "               MOV     R0, #0 \n"
 619 "               ADD     R6, SP, #0x10 \n"
 620 "               STR     R0, [SP,#0x0c] \n"
 621 
 622 "loc_FF8CF1C8: \n"
 623 "               LDR     R0, [R7,#0x20] \n"
 624 "               MOV     R2, #0 \n"
 625 "               ADD     R1, SP, #0x1c \n"
 626 "               BL      sub_FF83A2F8 \n"
 627 "               LDR     R0, [SP,#0x0C] \n"
 628 "               CMP     R0, #1 \n"
 629 "               BNE     loc_FF8CF214 \n"
 630 "               LDR     R0, [SP,#0x1c] \n"
 631 "               LDR     R0, [R0] \n"
 632 "               CMP     R0, #0x14 \n"
 633 "               CMPNE   R0, #0x15 \n"
 634 "               CMPNE   R0, #0x16 \n"
 635 "               CMPNE   R0, #0x17 \n"
 636 "               BEQ     loc_FF8CF378 \n"
 637 "               CMP     R0, #0x29 \n"
 638 "               BEQ     loc_FF8CF300 \n"
 639 "               ADD     R1, SP, #0x0c \n"
 640 "               MOV     R0, #0 \n"
 641 "               BL      sub_FF8CF158 \n"
 642 
 643 "loc_FF8CF214: \n"
 644 "               LDR     R0, [SP,#0x1c] \n"
 645 "               LDR     R1, [R0] \n"
 646 "               CMP     R1, #0x2F \n"
 647 "               BNE     loc_FF8CF244 \n"
 648 "               LDR     R0, [SP,#0x1c] \n"
 649 "               BL      sub_FF8D053C \n"
 650 "               LDR     R0, [R7,#0x1C] \n"
 651 "               MOV     R1, #1 \n"
 652 "               BL      sub_FF88E1E4 \n"
 653 "               BL      sub_FF81EB30 \n"                        // eventproc_export_ExitTask
 654 "               ADD     SP, SP, #0x20 \n"
 655 "               LDMFD   SP!, {R4-R8,PC} \n"
 656 
 657 "loc_FF8CF244: \n"
 658 "               CMP     R1, #0x2E \n"
 659 "               BNE     loc_FF8CF260 \n"
 660 "               LDR     R2, [R0,#0x8C]! \n"
 661 "               LDR     R1, [R0,#4] \n"
 662 "               MOV     R0, R1 \n"
 663 "               BLX     R2 \n"
 664 "               B       loc_FF8CF824 \n"
 665 
 666 "loc_FF8CF260: \n"
 667 "               CMP     R1, #0x27 \n"
 668 "               BNE     loc_FF8CF2B0 \n"
 669 "               LDR     R0, [R7,#0x1C] \n"
 670 "               MOV     R1, #0x80 \n"
 671 "               BL      sub_FF88E218 \n"
 672 "               LDR     R0, =0xFF8CAFB4 \n"
 673 "               MOV     R1, #0x80 \n"
 674 "               BL      sub_FF97D684 \n"
 675 "               LDR     R0, [R7,#0x1C] \n"
 676 "               MOV     R2, R8 \n"
 677 "               MOV     R1, #0x80 \n"
 678 "               BL      sub_FF88E124 \n"
 679 "               TST     R0, #1 \n"
 680 "               LDRNE   R1, =0x1096 \n"
 681 "               BNE     loc_FF8CF36C \n"
 682 
 683 "loc_FF8CF29C: \n"
 684 "               LDR     R1, [SP,#0x1c] \n"
 685 "               LDR     R0, [R1,#0x90] \n"
 686 "               LDR     R1, [R1,#0x8C] \n"
 687 "               BLX     R1 \n"
 688 "               B       loc_FF8CF824 \n"
 689 
 690 "loc_FF8CF2B0: \n"
 691 "               CMP     R1, #0x28 \n"
 692 "               BNE     loc_FF8CF2F8 \n"
 693 "               ADD     R1, SP, #0x0c \n"
 694 "               BL      sub_FF8CF158 \n"
 695 "               LDR     R0, [R7,#0x1C] \n"
 696 "               MOV     R1, #0x100 \n"
 697 "               BL      sub_FF88E218 \n"
 698 "               LDR     R0, =0xFF8CAFC4 \n"
 699 "               MOV     R1, #0x100 \n"
 700 "               BL      sub_FF97E014 \n"
 701 "               LDR     R0, [R7,#0x1C] \n"
 702 "               MOV     R2, R8 \n"
 703 "               MOV     R1, #0x100 \n"
 704 "               BL      sub_FF88E124 \n"
 705 "               TST     R0, #1 \n"
 706 "               BEQ     loc_FF8CF29C \n"
 707 "               LDR     R1, =0x10A0 \n"
 708 "               B       loc_FF8CF36C \n"
 709 
 710 "loc_FF8CF2F8: \n"
 711 "               CMP     R1, #0x29 \n"
 712 "               BNE     loc_FF8CF310 \n"
 713 
 714 "loc_FF8CF300: \n"
 715 "               LDR     R0, [SP,#0x1c] \n"
 716 "               ADD     R1, SP, #0x0c \n"
 717 "               BL      sub_FF8CF158 \n"
 718 "               B       loc_FF8CF29C \n"
 719 
 720 "loc_FF8CF310: \n"
 721 "               CMP     R1, #0x2C \n"
 722 "               BNE     loc_FF8CF328 \n"
 723 "               BL      sub_FF8BD5E0 \n"
 724 "               BL      sub_FF8BE1EC \n"
 725 "               BL      sub_FF8BDD58 \n"
 726 "               B       loc_FF8CF29C \n"
 727 
 728 "loc_FF8CF328: \n"
 729 "               CMP     R1, #0x2D \n"
 730 "               BNE     loc_FF8CF378 \n"
 731 "               LDR     R0, [R7,#0x1C] \n"
 732 "               MOV     R1, #4 \n"
 733 "               BL      sub_FF88E218 \n"
 734 "               LDR     R1, =0xFF8CAFE4 \n"
 735 "               LDR     R0, =0xFFFFF400 \n"
 736 "               MOV     R2, #4 \n"
 737 "               BL      sub_FF8BD05C \n"
 738 "               BL      sub_FF8BD2E4 \n"
 739 "               LDR     R0, [R7,#0x1C] \n"
 740 "               MOV     R2, R8 \n"
 741 "               MOV     R1, #4 \n"
 742 "               BL      sub_FF88E040 \n"
 743 "               TST     R0, #1 \n"
 744 "               BEQ     loc_FF8CF29C \n"
 745 "               LDR     R1, =0x10C8 \n"
 746 
 747 "loc_FF8CF36C: \n"
 748 "               LDR     R0, =0xFF8CB66C  \n"                    // "ExpDrv.c
 749 "               BL      sub_FF81EB78 \n"                                // DebugAssert
 750 "               B       loc_FF8CF29C \n"
 751 
 752 "loc_FF8CF378: \n"
 753 "               LDR     R0, [SP,#0x1c] \n"
 754 "               MOV     R4, #1 \n"
 755 "               LDR     R1, [R0] \n"
 756 "               CMP     R1, #0x12 \n"
 757 "               CMPNE   R1, #0x13 \n"
 758 "               BNE     loc_FF8CF3E8 \n"
 759 "               LDR     R1, [R0,#0x7C] \n"
 760 "               ADD     R1, R1, R1,LSL#1 \n"
 761 "               ADD     R1, R0, R1,LSL#2 \n"
 762 "               SUB     R1, R1, #8 \n"
 763 "               LDMIA   R1, {R2-R4} \n"
 764 "               STMIA   R6, {R2-R4} \n"
 765 "               BL      sub_FF8CD8C0 \n"
 766 "               LDR     R0, [SP,#0x1c] \n"
 767 "               LDR     R1, [R0,#0x7C] \n"
 768 "               LDR     R3, [R0,#0x8C] \n"
 769 "               LDR     R2, [R0,#0x90] \n"
 770 "               ADD     R0, R0, #4 \n"
 771 "               BLX     R3 \n"
 772 "               LDR     R0, [SP,#0x1c] \n"
 773 "               BL      sub_FF8D0950 \n"
 774 "               LDR     R0, [SP,#0x1c] \n"
 775 "               LDR     R1, [R0,#0x7C] \n"
 776 "               LDR     R3, [R0,#0x94] \n"
 777 "               LDR     R2, [R0,#0x98] \n"
 778 "               ADD     R0, R0, #4 \n"
 779 "               BLX     R3 \n"
 780 "               B       loc_FF8CF760 \n"
 781 
 782 "loc_FF8CF3E8: \n"
 783 "               CMP     R1, #0x14 \n"
 784 "               CMPNE   R1, #0x15 \n"
 785 "               CMPNE   R1, #0x16 \n"
 786 "               CMPNE   R1, #0x17 \n"
 787 "               BNE     loc_FF8CF4A0 \n"
 788 "               ADD     R3, SP, #0x0c \n"
 789 "               MOV     R2, SP \n"
 790 "               ADD     R1, SP, #0x10 \n"
 791 "               BL      sub_FF8CDB2C \n"
 792 "               CMP     R0, #1 \n"
 793 "               MOV     R4, R0 \n"
 794 "               CMPNE   R4, #5 \n"
 795 "               BNE     loc_FF8CF43C \n"
 796 "               LDR     R0, [SP,#0x1c] \n"
 797 "               MOV     R2, R4 \n"
 798 "               LDR     R1, [R0,#0x7C]! \n"
 799 "               LDR     R12, [R0,#0x10]! \n"
 800 "               LDR     R3, [R0,#4] \n"
 801 "               MOV     R0, SP \n"
 802 "               BLX     R12 \n"
 803 "               B       loc_FF8CF474 \n"
 804 
 805 "loc_FF8CF43C: \n"
 806 "               LDR     R0, [SP,#0x1c] \n"
 807 "               CMP     R4, #2 \n"
 808 "               LDR     R3, [R0,#0x90] \n"
 809 "               CMPNE   R4, #6 \n"
 810 "               BNE     loc_FF8CF488 \n"
 811 "               LDR     R12, [R0,#0x8C] \n"
 812 "               MOV     R0, SP \n"
 813 "               MOV     R2, R4 \n"
 814 "               MOV     R1, #1 \n"
 815 "               BLX     R12 \n"
 816 "               LDR     R0, [SP,#0x1c] \n"
 817 "               MOV     R2, SP \n"
 818 "               ADD     R1, SP, #0x10 \n"
 819 "               BL      sub_FF8CEEA4 \n"
 820 
 821 "loc_FF8CF474: \n"
 822 "               LDR     R0, [SP,#0x1c] \n"
 823 "               LDR     R2, [SP,#0x0c] \n"
 824 "               MOV     R1, R4 \n"
 825 "               BL      sub_FF8CF0F8 \n"
 826 "               B       loc_FF8CF760 \n"
 827 
 828 "loc_FF8CF488: \n"
 829 "               LDR     R1, [R0,#0x7C] \n"
 830 "               LDR     R12, [R0,#0x8C] \n"
 831 "               ADD     R0, R0, #4 \n"
 832 "               MOV     R2, R4 \n"
 833 "               BLX     R12 \n"
 834 "               B       loc_FF8CF760 \n"
 835 
 836 "loc_FF8CF4A0: \n"
 837 "               CMP     R1, #0x23 \n"
 838 "               CMPNE   R1, #0x24 \n"
 839 "               BNE     loc_FF8CF540 \n"
 840 "               LDR     R1, [R0,#0x7C] \n"
 841 "               ADD     R1, R1, R1,LSL#1 \n"
 842 "               ADD     R1, R0, R1,LSL#2 \n"
 843 "               SUB     R1, R1, #8 \n"
 844 "               LDMIA   R1, {R2-R4} \n"
 845 "               STMIA   R6, {R2-R4} \n"
 846 "               BL      sub_FF8CC948 \n"
 847 "               LDR     R0, [SP,#0x1c] \n"
 848 "               LDR     R1, [R0,#0x7C] \n"
 849 "               LDR     R3, [R0,#0x8C] \n"
 850 "               LDR     R2, [R0,#0x90] \n"
 851 "               ADD     R0, R0, #4 \n"
 852 "               BLX     R3 \n"
 853 "               LDR     R0, [SP,#0x1c] \n"
 854 "               BL      sub_FF8CCD94 \n"
 855 "               B       loc_FF8CF760 \n"
 856 
 857 "loc_FF8CF540: \n"
 858 "               ADD     R1, R0, #4 \n"
 859 "               LDMIA   R1, {R2,R3,R12} \n"
 860 "               STMIA   R6, {R2,R3,R12} \n"
 861 "               LDR     R1, [R0] \n"
 862 "               CMP     R1, #0x26 \n"
 863 "               ADDLS   PC, PC, R1,LSL#2 \n"
 864 "               B       loc_FF8CF740 \n"
 865 
 866 "loc_FF8CF55C: \n"
 867 "               B       loc_FF8CF5F8 \n"
 868 
 869 "loc_FF8CF560: \n"
 870 "               B       loc_FF8CF5F8 \n"
 871 
 872 "loc_FF8CF564: \n"
 873 "               B       loc_FF8CF600 \n"
 874 
 875 "loc_FF8CF568: \n"
 876 "               B       loc_FF8CF608 \n"
 877 
 878 "loc_FF8CF56C: \n"
 879 "               B       loc_FF8CF608 \n"
 880 
 881 "loc_FF8CF570: \n"
 882 "               B       loc_FF8CF608 \n"
 883 
 884 "loc_FF8CF574: \n"
 885 "               B       loc_FF8CF5F8 \n"
 886 
 887 "loc_FF8CF578: \n"
 888 "               B       loc_FF8CF600 \n"
 889 
 890 "loc_FF8CF57C: \n"
 891 "               B       loc_FF8CF608 \n"
 892 
 893 "loc_FF8CF580: \n"
 894 "               B       loc_FF8CF608 \n"
 895 
 896 "loc_FF8CF584: \n"
 897 "               B       loc_FF8CF620 \n"
 898 
 899 "loc_FF8CF588: \n"
 900 "               B       loc_FF8CF620 \n"
 901 
 902 "loc_FF8CF58C: \n"
 903 "               B       loc_FF8CF72C \n"
 904 
 905 "loc_FF8CF590: \n"
 906 "               B       loc_FF8CF734 \n"
 907 
 908 "loc_FF8CF594: \n"
 909 "               B       loc_FF8CF734 \n"
 910 
 911 "loc_FF8CF598: \n"
 912 "               B       loc_FF8CF734 \n"
 913 
 914 "loc_FF8CF59C: \n"
 915 "               B       loc_FF8CF734 \n"
 916 
 917 "loc_FF8CF5A0: \n"
 918 "               B       loc_FF8CF73C \n"
 919 
 920 "loc_FF8CF5A4: \n"
 921 "               B       loc_FF8CF740 \n"
 922 
 923 "loc_FF8CF5A8: \n"
 924 "               B       loc_FF8CF740 \n"
 925 
 926 "loc_FF8CF5AC: \n"
 927 "               B       loc_FF8CF740 \n"
 928 
 929 "loc_FF8CF5B0: \n"
 930 "               B       loc_FF8CF740 \n"
 931 
 932 "loc_FF8CF5B4: \n"
 933 "               B       loc_FF8CF740 \n"
 934 
 935 "loc_FF8CF5B8: \n"
 936 "               B       loc_FF8CF740 \n"
 937 
 938 "loc_FF8CF5BC: \n"
 939 "               B       loc_FF8CF610 \n"
 940 
 941 "loc_FF8CF5C0: \n"
 942 "               B       loc_FF8CF618 \n"
 943 
 944 "loc_FF8CF5C4: \n"
 945 "               B       loc_FF8CF618 \n"
 946 
 947 "loc_FF8CF5C8: \n"
 948 "               B       loc_FF8CF62C \n"
 949 
 950 "loc_FF8CF5CC: \n"
 951 "               B       loc_FF8CF62C \n"
 952 
 953 "loc_FF8CF5D0: \n"
 954 "               B       loc_FF8CF634 \n"
 955 
 956 "loc_FF8CF5D4: \n"
 957 "               B       loc_FF8CF66C \n"
 958 
 959 "loc_FF8CF5D8: \n"
 960 "               B       loc_FF8CF6A4 \n"
 961 
 962 "loc_FF8CF5DC: \n"
 963 "               B       loc_FF8CF6DC \n"
 964 
 965 "loc_FF8CF5E0: \n"
 966 "               B       loc_FF8CF714 \n"
 967 
 968 "loc_FF8CF5E4: \n"
 969 "               B       loc_FF8CF714 \n"
 970 
 971 "loc_FF8CF5E8: \n"
 972 "               B       loc_FF8CF740 \n"
 973 
 974 "loc_FF8CF5EC: \n"
 975 "               B       loc_FF8CF740 \n"
 976 
 977 "loc_FF8CF5F0: \n"
 978 "               B       loc_FF8CF71C \n"
 979 
 980 "loc_FF8CF5F4: \n"
 981 "               B       loc_FF8CF724 \n"
 982 
 983 "loc_FF8CF5F8: \n"
 984 // jumptable FF8CF554 entries 0,1,6
 985 "               BL      sub_FF8CB4F4 \n"
 986 "               B       loc_FF8CF740 \n"
 987 
 988 "loc_FF8CF600: \n"
 989 // jumptable FF8CF554 entries 2,7
 990 "               BL      sub_FF8CB790 \n"
 991 "               B       loc_FF8CF740 \n"
 992 
 993 "loc_FF8CF608: \n"
 994 // jumptable FF8CF554 entries 3-5,8,9
 995 "               BL      sub_FF8CB9B8 \n"
 996 "               B       loc_FF8CF740 \n"
 997 
 998 "loc_FF8CF610: \n"
 999 // jumptable FF8CF554 entry 24
1000 "               BL      sub_FF8CBC90 \n"
1001 "               B       loc_FF8CF740 \n"
1002 
1003 "loc_FF8CF618: \n"
1004 // jumptable FF8CF554 entries 25,26
1005 "               BL      sub_FF8CBEA8 \n"
1006 "               B       loc_FF8CF740 \n"
1007 
1008 "loc_FF8CF620: \n"
1009 // jumptable FF8CF554 entries 10,11
1010 
1011 //"             BL      sub_FF8CC1CC \n"
1012 "               BL      sub_FF8CC1CC_my \n"                             // patched
1013 
1014 "               MOV     R4, #0 \n"
1015 "               B       loc_FF8CF740 \n"
1016 
1017 "loc_FF8CF62C: \n"
1018 // jumptable FF8CF554 entries 27,28
1019 "               BL      sub_FF8CC314 \n"
1020 "               B       loc_FF8CF740 \n"
1021 
1022 "loc_FF8CF634: \n"
1023 // jumptable FF8CF554 entry 29
1024 "               LDRH    R1, [R0,#4] \n"
1025 "               STRH    R1, [SP,#0x10] \n"
1026 "               LDRH    R1, [R5,#2] \n"
1027 "               STRH    R1, [SP,#0x12] \n"
1028 "               LDRH    R1, [R5,#4] \n"
1029 "               STRH    R1, [SP,#0x14] \n"
1030 "               LDRH    R1, [R5,#6] \n"
1031 "               STRH    R1, [SP,#0x16] \n"
1032 "               LDRH    R1, [R0,#0xC] \n"
1033 "               STRH    R1, [SP,#0x18] \n"
1034 "               LDRH    R1, [R5,#0xA] \n"
1035 "               STRH    R1, [SP,#0x1a] \n"
1036 "               BL      sub_FF8D0648 \n"
1037 "               B       loc_FF8CF740 \n"
1038 
1039 "loc_FF8CF66C: \n"
1040 // jumptable FF8CF554 entry 30
1041 "               LDRH    R1, [R0,#4] \n"
1042 "               STRH    R1, [SP,#0x10] \n"
1043 "               LDRH    R1, [R5,#2] \n"
1044 "               STRH    R1, [SP,#0x12] \n"
1045 "               LDRH    R1, [R5,#4] \n"
1046 "               STRH    R1, [SP,#0x14] \n"
1047 "               LDRH    R1, [R5,#6] \n"
1048 "               STRH    R1, [SP,#0x16] \n"
1049 "               LDRH    R1, [R5,#8] \n"
1050 "               STRH    R1, [SP,#0x18] \n"
1051 "               LDRH    R1, [R5,#0xA] \n"
1052 "               STRH    R1, [SP,#0x1a] \n"
1053 "               BL      sub_FF8D0750 \n"
1054 "               B       loc_FF8CF740 \n"
1055 
1056 "loc_FF8CF6A4: \n"
1057 // jumptable FF8CF554 entry 31
1058 "               LDRH    R1, [R5] \n"
1059 "               STRH    R1, [SP,#0x10] \n"
1060 "               LDRH    R1, [R0,#6] \n"
1061 "               STRH    R1, [SP,#0x12] \n"
1062 "               LDRH    R1, [R5,#4] \n"
1063 "               STRH    R1, [SP,#0x14] \n"
1064 "               LDRH    R1, [R5,#6] \n"
1065 "               STRH    R1, [SP,#0x16] \n"
1066 "               LDRH    R1, [R5,#8] \n"
1067 "               STRH    R1, [SP,#0x18] \n"
1068 "               LDRH    R1, [R5,#0xA] \n"
1069 "               STRH    R1, [SP,#0x1a] \n"
1070 "               BL      sub_FF8D0804 \n"
1071 "               B       loc_FF8CF740 \n"
1072 
1073 "loc_FF8CF6DC: \n"
1074 // jumptable FF8CF554 entry 32
1075 "               LDRH    R1, [R5] \n"
1076 "               STRH    R1, [SP,#0x10] \n"
1077 "               LDRH    R1, [R5,#2] \n"
1078 "               STRH    R1, [SP,#0x12] \n"
1079 "               LDRH    R1, [R5,#4] \n"
1080 "               STRH    R1, [SP,#0x14] \n"
1081 "               LDRH    R1, [R5,#6] \n"
1082 "               STRH    R1, [SP,#0x16] \n"
1083 "               LDRH    R1, [R0,#0xC] \n"
1084 "               STRH    R1, [SP,#0x18] \n"
1085 "               LDRH    R1, [R5,#0xA] \n"
1086 "               STRH    R1, [SP,#0x1a] \n"
1087 "               BL      sub_FF8D08AC \n"
1088 "               B       loc_FF8CF740 \n"
1089 
1090 "loc_FF8CF714: \n"
1091 // jumptable FF8CF554 entries 33,34
1092 "               BL      sub_FF8CC720 \n"
1093 "               B       loc_FF8CF740 \n"
1094 
1095 "loc_FF8CF71C: \n"
1096 // jumptable FF8CF554 entry 37
1097 "               BL      sub_FF8CCE98 \n"
1098 "               B       loc_FF8CF740 \n"
1099 
1100 "loc_FF8CF724: \n"
1101 // jumptable FF8CF554 entry 38
1102 "               BL      sub_FF8CD134 \n"
1103 "               B       loc_FF8CF740 \n"
1104 
1105 "loc_FF8CF72C: \n"
1106 // jumptable FF8CF554 entry 12
1107 "               BL      sub_FF8CD314 \n"
1108 "               B       loc_FF8CF740 \n"
1109 
1110 "loc_FF8CF734: \n"
1111 // jumptable FF8CF554 entries 13-16
1112 "               BL      sub_FF8CD548 \n"
1113 "               B       loc_FF8CF740 \n"
1114 
1115 "loc_FF8CF73C: \n"
1116 // jumptable FF8CF554 entry 17
1117 "               BL      sub_FF8CD6B8 \n"
1118 
1119 "loc_FF8CF740: \n"
1120 // jumptable FF8CF554 default entry
1121 // jumptable FF8CF554 entries 18-23,35,36
1122 "               LDR     R0, [SP,#0x1c] \n"
1123 "               LDR     R1, [R0,#0x7C] \n"
1124 "               LDR     R3, [R0,#0x8C] \n"
1125 "               LDR     R2, [R0,#0x90] \n"
1126 "               ADD     R0, R0, #4 \n"
1127 "               BLX     R3 \n"
1128 "               CMP     R4, #1 \n"
1129 "               BNE     loc_FF8CF7A8 \n"
1130 
1131 "loc_FF8CF760: \n"
1132 "               LDR     R0, [SP,#0x1c] \n"
1133 "               MOV     R2, #0xC \n"
1134 "               LDR     R1, [R0,#0x7C] \n"
1135 "               ADD     R1, R1, R1,LSL#1 \n"
1136 "               ADD     R0, R0, R1,LSL#2 \n"
1137 "               SUB     R4, R0, #8 \n"
1138 "               LDR     R0, =0x59818 \n"
1139 "               ADD     R1, SP, #0x10 \n"
1140 "               BL      sub_FFB9EF24 \n"
1141 "               LDR     R0, =0x59824 \n"
1142 "               MOV     R2, #0xC \n"
1143 "               ADD     R1, SP, #0x10 \n"
1144 "               BL      sub_FFB9EF24 \n"
1145 "               LDR     R0, =0x59830 \n"
1146 "               MOV     R2, #0xC \n"
1147 "               MOV     R1, R4 \n"
1148 "               BL      sub_FFB9EF24 \n"
1149 "               B       loc_FF8CF824 \n"
1150 
1151 "loc_FF8CF7A8: \n"
1152 "               LDR     R0, [SP,#0x1c] \n"
1153 "               MOV     R3, #1 \n"
1154 "               LDR     R0, [R0] \n"
1155 "               CMP     R0, #0xB \n"
1156 "               BNE     loc_FF8CF7F0 \n"
1157 "               MOV     R2, #0 \n"
1158 "               STRD    R2, [SP] \n"
1159 "               MOV     R2, #1 \n"
1160 "               MOV     R1, #1 \n"
1161 "               MOV     R0, #0 \n"
1162 "               BL      sub_FF8CB2D4 \n"
1163 "               MOV     R3, #1 \n"
1164 "               MOV     R2, #0 \n"
1165 "               STRD    R2, [SP] \n"
1166 "               MOV     R2, #1 \n"
1167 "               MOV     R1, #1 \n"
1168 "               MOV     R0, #0 \n"
1169 "               B       loc_FF8CF820 \n"
1170 
1171 "loc_FF8CF7F0: \n"
1172 "               MOV     R2, #1 \n"
1173 "               STRD    R2, [SP] \n"
1174 "               MOV     R3, #1 \n"
1175 "               MOV     R1, #1 \n"
1176 "               MOV     R0, #1 \n"
1177 "               BL      sub_FF8CB2D4 \n"
1178 "               MOV     R3, #1 \n"
1179 "               MOV     R2, #1 \n"
1180 "               MOV     R1, #1 \n"
1181 "               MOV     R0, #1 \n"
1182 "               STR     R3, [SP] \n"
1183 "               STR     R3, [SP,#0x04] \n"
1184 
1185 "loc_FF8CF820: \n"
1186 "               BL      sub_FF8CB43C \n"
1187 
1188 "loc_FF8CF824: \n"
1189 "               LDR     R0, [SP,#0x1c] \n"
1190 "               BL      sub_FF8D053C \n"
1191 "               B       loc_FF8CF1C8 \n"
1192         );
1193 }
1194 
1195 
1196 /*----------------------------------------------------------------------
1197         sub_FF8CC1CC_my()
1198 -----------------------------------------------------------------------*/
1199 void __attribute__((naked,noinline)) sub_FF8CC1CC_my()
1200 {
1201         asm volatile (
1202 "               STMFD   SP!, {R4-R8,LR} \n"
1203 "               LDR     R7, =0x4888 \n"
1204 "               MOV     R4, R0 \n"
1205 "               LDR     R0, [R7,#0x1C] \n"
1206 "               MOV     R1, #0x3E \n"
1207 "               BL      sub_FF88E218 \n"
1208 "               LDRSH   R0, [R4,#4] \n"
1209 "               MOV     R2, #0 \n"
1210 "               MOV     R1, #0 \n"
1211 "               BL      sub_FF8CB038 \n"
1212 "               MOV     R5, R0 \n"
1213 "               LDRSH   R0, [R4,#6] \n"
1214 "               BL      sub_FF8CB148 \n"
1215 "               LDRSH   R0, [R4,#8] \n"
1216 "               BL      sub_FF8CB1A0 \n"
1217 "               LDRSH   R0, [R4,#0xA] \n"
1218 "               BL      sub_FF8CB1F8 \n"
1219 "               LDRSH   R0, [R4,#0xC] \n"
1220 "               MOV     R1, #0 \n"
1221 "               BL      sub_FF8CB250 \n"
1222 "               MOV     R6, R0 \n"
1223 "               LDRSH   R0, [R4,#0xE] \n"
1224 "               BL      sub_FF8D05E8 \n"
1225 "               LDR     R0, [R4] \n"
1226 "               LDR     R8, =0x59830 \n"
1227 "               CMP     R0, #0xB \n"
1228 "               MOVEQ   R5, #0 \n"
1229 "               MOVEQ   R6, #0 \n"
1230 "               BEQ     loc_FF8CC268 \n"
1231 "               CMP     R5, #1 \n"
1232 "               BNE     loc_FF8CC268 \n"
1233 "               LDRSH   R0, [R4,#4] \n"
1234 "               LDR     R1, =0xFF8CAFA4 \n"
1235 "               MOV     R2, #2 \n"
1236 "               BL      sub_FF97D9D0 \n"
1237 "               STRH    R0, [R4,#4] \n"
1238 "               MOV     R0, #0 \n"
1239 "               STR     R0, [R7,#0x28] \n"
1240 "               B       loc_FF8CC270 \n"
1241 
1242 "loc_FF8CC268: \n"
1243 "               LDRH    R0, [R8] \n"
1244 "               STRH    R0, [R4,#4] \n"
1245 
1246 "loc_FF8CC270: \n"
1247 "               CMP     R6, #1 \n"
1248 "               LDRNEH  R0, [R8,#8] \n"
1249 "               BNE     loc_FF8CC28C \n"
1250 "               LDRSH   R0, [R4,#0xC] \n"
1251 "               LDR     R1, =0xFF8CB028 \n"
1252 "               MOV     R2, #0x20 \n"
1253 "               BL      sub_FF8D0604 \n"
1254 
1255 "loc_FF8CC28C: \n"
1256 "               STRH    R0, [R4,#0xC] \n"
1257 "               LDRSH   R0, [R4,#6] \n"
1258 
1259 //"             BL      sub_FF8BD350 \n"
1260 "               BL      sub_FF8BD350_my \n"                             // patched
1261 
1262 "               LDRSH   R0, [R4,#8] \n"
1263 "               MOV     R1, #1 \n"
1264 "               BL      sub_FF8BDAA0 \n"
1265 "               MOV     R1, #0 \n"
1266 "               ADD     R0, R4, #8 \n"
1267 "               BL      sub_FF8BDB28 \n"
1268 "               LDRSH   R0, [R4,#0xE] \n"
1269 "               BL      sub_FF8C5F98 \n"
1270 "               LDR     R4, =0xBB8 \n"
1271 "               CMP     R5, #1 \n"
1272 "               BNE     loc_FF8CC2E4 \n"
1273 "               LDR     R0, [R7,#0x1C] \n"
1274 "               MOV     R2, R4 \n"
1275 "               MOV     R1, #2 \n"
1276 "               BL      sub_FF88E124 \n"
1277 "               TST     R0, #1 \n"
1278 "               LDRNE   R1, =0x61E \n"
1279 "               LDRNE   R0, =0xFF8CB66C \n"             // "ExpDrv.c"
1280 "               BLNE    sub_FF81EB78 \n"                // DebugAssert
1281 
1282 "loc_FF8CC2E4: \n"
1283 "               CMP     R6, #1 \n"
1284 "               LDMNEFD SP!, {R4-R8,PC} \n"
1285 "               LDR     R0, [R7,#0x1C] \n"
1286 "               MOV     R2, R4 \n"
1287 "               MOV     R1, #0x20 \n"
1288 "               BL      sub_FF88E124 \n"
1289 "               TST     R0, #1 \n"
1290 "               LDRNE   R1, =0x623 \n"
1291 "               LDRNE   R0, =0xFF8CB66C \n"             // "ExpDrv.c"
1292 "               LDMNEFD SP!, {R4-R8,LR} \n"
1293 "               BNE     sub_FF81EB78 \n"                        // DebugAssert
1294 "               LDMFD   SP!, {R4-R8,PC} \n"
1295         );
1296 }
1297 
1298 
1299 /*----------------------------------------------------------------------
1300         sub_FF8BD350_my()
1301 -----------------------------------------------------------------------*/
1302 void __attribute__((naked,noinline)) sub_FF8BD350_my() {
1303         asm volatile (
1304 "               STMFD   SP!, {R4-R6,LR} \n"
1305 "               LDR     R5, =0x456C \n"
1306 "               MOV     R4, R0 \n"
1307 "               LDR     R0, [R5,#4] \n"
1308 "               CMP     R0, #1 \n"
1309 "               LDRNE   R1, =0x146 \n"
1310 "               LDRNE   R0, =0xFF8BD154 \n"             // "Shutter.c"
1311 "               BLNE    sub_FF81EB78 \n"                // DebugAssert
1312 "               CMN     R4, #0xC00 \n"
1313 "               LDREQSH R4, [R5,#2] \n"
1314 "               CMN     R4, #0xC00 \n"
1315 "               MOVEQ   R1, #0x14C \n"
1316 "               LDREQ   R0, =0xFF8BD154 \n"             // "Shutter.c"
1317 "               STRH    R4, [R5,#2] \n"
1318 "               BLEQ    sub_FF81EB78 \n"                // DebugAssert
1319 "               MOV     R0, R4 \n"
1320 
1321 //"             BL      sub_FFA50D88 \n"
1322 "               BL      apex2us \n"                             // patched
1323 
1324 "               MOV     R4, R0 \n"
1325 "               BL      sub_FF90988C \n"                        // nullsub_203
1326 "               MOV     R0, R4 \n"
1327 "               BL      sub_FF9162BC \n"
1328 "               TST     R0, #1 \n"
1329 "               LDRNE   R1, =0x151 \n"
1330 "               LDMNEFD SP!, {R4-R6,LR} \n"
1331 "               LDRNE   R0, =0xFF8BD154 \n"             // "Shutter.c"
1332 "               BNE     sub_FF81EB78 \n"                        // DebugAssert
1333 "               LDMFD   SP!, {R4-R6,PC} \n"
1334         );
1335 }

/* [<][>][^][v][top][bottom][index][help] */