#include "lolevel.h"
#include "platform.h"
#include "core.h"

Include-Abhängigkeitsdiagramm für boot.c:

Funktionen
void	createHook (void *pNewTcb)

void	deleteHook (void *pTcb)

void	boot ()

void	__attribute__ ((naked, noinline))
	*-------------------------------------------------------------------— Mehr ...

void	h_usrInit ()

void	h_usrKernelInit ()

void	h_usrRoot ()

Variablen
long	wrs_kernel_bss_start

long	wrs_kernel_bss_end

const char *const	new_sa = &_end

Dokumentation der Funktionen

void __attribute__ ( (naked, noinline) )

*-------------------------------------------------------------------—

!!

IS_ERROR( hSoundHandle )

IS_ERROR( RetCode )

"MOV R3, #0\n" "STR R3, [R9]\n"

TODO! below is from sd400

Definiert in Zeile 17 der Datei boot.c.

 {
     long *canon_data_src = (void*)0xFFAD7700; // This is the address of the "Startofdata" string on the firmware
     long *canon_data_dst = (void*)0x1900; // This is where the boot data is copiedduring firmware update
     long canon_data_len = 0xEB60; // This is the length of data from "Startofdata" to the end of the firmware dump
     long *canon_bss_start = (void*)0x10460; //  = 0xEB60 + 0x1900,  just after data
     long canon_bss_len = 0x72DC0 - 0x10460; // The original address of h_usrKernelInit - bss start
     long i;
 
     asm volatile (
     "MRC     p15, 0, R0,c1,c0\n"
     "ORR     R0, R0, #0x1000\n"
     "ORR     R0, R0, #4\n"
     "ORR     R0, R0, #1\n"
     "MCR     p15, 0, R0,c1,c0\n"
     :::"r0");
 
 
     for(i=0;i<canon_data_len/4;i++)
     canon_data_dst[i]=canon_data_src[i];
 
     for(i=0;i<canon_bss_len/4;i++)
     canon_bss_start[i]=0;
 
     asm volatile (
     "MRC     p15, 0, R0,c1,c0\n"
     "ORR     R0, R0, #0x1000\n"
     "BIC     R0, R0, #4\n"
     "ORR     R0, R0, #1\n"
     "MCR     p15, 0, R0,c1,c0\n"
     :::"r0");
     
     h_usrInit();
 }

void boot ( )

Definiert in Zeile 43 der Datei boot.c.

             {
 
     long *canon_data_src = (void*)0xFFEDAC70;   // value taken at ROM:FFC00188
     long *canon_data_dst = (void*)0x1900;
     long canon_data_len = 0xDF84 - 0x1900; // data_end - data_start 0xDF7C taken at ROM:FFC00138
     long *canon_bss_start = (void*)0xDF84; // just after data 
     long canon_bss_len = 0xD4F38 - 0xDF84; // d4ec8 taken at ROM:FFC00FB4
 
     long i;
 
     // enable caches and write buffer...
     // this is a carryover from old dryos ports, may not be useful
     asm volatile (
             "MRC     p15, 0, R0,c1,c0\n"
             "ORR     R0, R0, #0x1000\n"
             "ORR     R0, R0, #4\n"
             "ORR     R0, R0, #1\n"
             "MCR     p15, 0, R0,c1,c0\n"
         :::"r0"
       );
 
     for(i=0;i<canon_data_len/4;i++)
             canon_data_dst[i]=canon_data_src[i];
 
     for(i=0;i<canon_bss_len/4;i++)
             canon_bss_start[i]=0;
 
     asm volatile ("B      sub_FFC001A4_my\n");
 };

void createHook ( void * pNewTcb)

Definiert in Zeile 110 der Datei main.c.

 {
     char *name = (char*)(*(long*)((char*)pNewTcb+0x34));
     long *entry = (long*)((char*)pNewTcb+0x74);
 
     // always hook first task creation
     // to create SpyProc
     if (!stop_hooking){
         task_prev = (void*)(*entry);
         *entry = (long)task_start_hook;
         stop_hooking = 1;
     } else {
         // hook/replace another tasks
         if (my_ncmp(name, "tPhySw", 6) == 0){
             *entry = (long)physw_hook;
         }
 
         if (my_ncmp(name, "tInitFileM", 10) == 0){
             init_file_modules_prev = (void*)(*entry);
 #if CAM_MULTIPART
             *entry = (long)init_file_modules_task;
 #else
             *entry = (long)init_file_modules_hook;
 #endif
         }
 
         if (my_ncmp(name, "tCaptSeqTa", 10) == 0){
             *entry = (long)capt_seq_hook;
         }
 
 #if CAM_CHDK_HAS_EXT_VIDEO_MENU
         if (my_ncmp(name, "tMovieReco", 10) == 0){
             *entry = (long)movie_record_hook;
         }
 #endif
 
 #if CAM_EXT_TV_RANGE
         if (my_ncmp(name, "tExpDrvTas", 10) == 0){
             *entry = (long)exp_drv_task;
         }
 #endif
 
 #if CAM_HAS_FILEWRITETASK_HOOK
         if (my_ncmp(name, "tFileWrite", 10) == 0){
             *entry = (long)filewritetask;
         }
 #endif
 
 // for cameras that have a "touch control dial" with 'TouchW' task.
 // some cameras may use a different task name
 #ifdef HOOK_TOUCHW
         if (my_ncmp(name, "tTouchW", 7) == 0){
             *entry = (long)my_touchw_task;
         }
 #endif
 
         core_hook_task_create(pNewTcb);
     }
 }

void deleteHook ( void * pTcb)

Definiert in Zeile 170 der Datei main.c.

 {
     core_hook_task_delete(pTcb);
 }

void h_usrInit ( )

Definiert in Zeile 59 der Datei boot.c.

 {
     asm volatile (
     "STR     LR, [SP,#-4]!\n"
     "BL      sub_FF811B20\n"
     "MOV     R0, #2\n"
     "MOV     R1, R0\n"
     "BL      sub_FFABDC68\n"
     "BL      sub_FFAAA238\n"
     "BL      sub_FF81125C\n"
     "BL      sub_FF811838\n"
     "LDR     LR, [SP],#4\n"
     "B       h_usrKernelInit\n"
     );
 
 }

void h_usrKernelInit ( )

Definiert in Zeile 76 der Datei boot.c.

 {
     asm volatile (
     "STMFD   SP!, {R4,LR}\n"
     "SUB     SP, SP, #8\n"
     "BL      sub_FFABE168\n"
     "BL      sub_FFAD0C28\n"
     "LDR     R3, =0xF894\n"
     "LDR     R2, =0x704A0\n"
     "LDR     R1, [R3]\n"
     "LDR     R0, =0x7278C\n"
     "MOV     R3, #0x100\n"
     "BL      sub_FFACC464\n"
     "LDR     R3, =0xF854\n"
     "LDR     R0, =0xFC74\n"
     "LDR     R1, [R3]\n"
     "BL      sub_FFACC464\n"
     "LDR     R3, =0xF910\n"
     "LDR     R0, =0x72760\n"
     "LDR     R1, [R3]\n"
     "BL      sub_FFACC464\n"
     "BL      sub_FFAD57A8\n"
     "BL      sub_FF811348\n"
     "MOV     R4, #0\n"
     "MOV     R3, R0\n"
     "MOV     R12, #0x800\n"
     "LDR     R0, =h_usrRoot\n"
     "MOV     R1, #0x4000\n"
     );
 
     //"LDR     R2, =0xB2DC0\n" // 0x72DC0 + 0x40000
     asm volatile (
     "LDR     R2, =new_sa\n"
     "LDR     R2, [R2]\n"
     );
 
     asm volatile (
     "STR     R12, [SP]\n"
     "STR     R4, [SP,#4]\n"
     "BL      sub_FFACDE68\n"
     "ADD     SP, SP, #8\n"
     "LDMFD   SP!, {R4,PC}\n"
     );
  
 }

void h_usrRoot ( )

Definiert in Zeile 123 der Datei boot.c.

 {
 //  volatile long *p;
     
     asm volatile (
     "STMFD   SP!, {R4,R5,LR}\n"
     "MOV     R5, R0\n"
     "MOV     R4, R1\n"
     "BL      sub_FF811BA0\n"
     "MOV     R1, R4\n"
     "MOV     R0, R5\n"
     "BL      sub_FFAC4450\n" // memInit
     "MOV     R1, R4\n"
     "MOV     R0, R5\n"
     "BL      sub_FFAC4EC8\n" // mmPartLibInit <----- OK up to here!!
     
     //"BL      sub_FF811928\n" // Here something BAD happens! It initializes the MMU, but SD500 has this replaced by a NULLSUB call...
 
     "BL      sub_FF811814\n"
     "MOV     R0, #0x32\n"
     "BL      sub_FFAC6938\n" // selectInit
     "BL      sub_FF811BE4\n"
     "BL      sub_FF811BC4\n"
     "BL      sub_FF811C10\n"
     "BL      sub_FFAC61F8\n" //selTaskDeleteHookAdd
     "BL      sub_FF811B94\n"
     );
     
     _taskCreateHookAdd(createHook);
     _taskDeleteHookAdd(deleteHook);
 
     drv_self_hide();
 
     asm volatile (
     "LDMFD   SP!, {R4,R5,LR}\n"
     "B       sub_FF811408\n"
     );
 
 }

Variablen-Dokumentation

const char* const new_sa = &_end

Definiert in Zeile 12 der Datei boot.c.

long wrs_kernel_bss_end

long wrs_kernel_bss_start