| 1 | #include "stubs_asm.h" |
|---|
| 2 | |
|---|
| 3 | // This stuff is mostly memory (RAM) related |
|---|
| 4 | // some things are based on quietschi's port to SD1000 |
|---|
| 5 | |
|---|
| 6 | /******************* physw_status & physw_run |
|---|
| 7 | ROM:FF827EFC sub_FF827EFC ; CODE XREF: ROM:FF827EF4 |
|---|
| 8 | ROM:FF827EFC LDR R3, =0xFBA0 ; <--- ### physw_status ### |
|---|
| 9 | ROM:FF827F00 LDR R0, [R3,R4,LSL#2] |
|---|
| 10 | ROM:FF827F04 LDMFD SP!, {R4,PC} |
|---|
| 11 | ROM:FF827F04 ; End of function sub_FF827EFC |
|---|
| 12 | ROM:FF827F08 off_FF827F08 DCD aPhysw_c ; DATA XREF: ROM:FF827EF0 "PhySw.c" |
|---|
| 13 | ROM:FF827F0C dword_FF827F0C DCD 0xFBA0 ; DATA XREF: sub_FF827EFC |
|---|
| 14 | ROM:FF827F10 PhySw_task ; DATA XREF: ROM:off_FF827ED4 |
|---|
| 15 | ROM:FF827F10 STMFD SP!, {R4,LR} |
|---|
| 16 | ROM:FF827F14 LDR R2, =0x1FDC ; <--- ### physw_run ### |
|---|
| 17 | ROM:FF827F18 LDR R3, [R2] |
|---|
| 18 | ROM:FF827F1C CMP R3, #0 |
|---|
| 19 | ROM:FF827F20 BEQ loc_FF827F4C |
|---|
| 20 | ROM:FF827F24 MOV R4, R2 |
|---|
| 21 | *******************/ |
|---|
| 22 | DEF(physw_status, 0xFBA0) // ROM:FF827F0C search function "PhySw_task" # |
|---|
| 23 | DEF(physw_run, 0x1FDC) // ROM:FF827F54 look one function above function "PhySw_task" # |
|---|
| 24 | |
|---|
| 25 | |
|---|
| 26 | /******************* zoom_busy |
|---|
| 27 | ROM:FFAF04C4 dword_FFAF04C4 DCD 0xAB18 ; DATA XREF: sub_FFAF04B4 |
|---|
| 28 | ROM:FFAF04C8 aZoomlens DCB "ZoomLens",0 ; DATA XREF: ROM:off_FFAF0578 |
|---|
| 29 | ROM:FFAF04D4 sub_FFAF04D4 ; CODE XREF: sub_FFAE9F90+18 |
|---|
| 30 | ROM:FFAF04D4 STMFD SP!, {R4-R7,LR} |
|---|
| 31 | ROM:FFAF04D8 LDR R7, =0xAB1C |
|---|
| 32 | ROM:FFAF04DC LDR R5, [R7] |
|---|
| 33 | ROM:FFAF04E0 CMP R5, #0 |
|---|
| 34 | ROM:FFAF04E4 LDR R6, =0x823E8 |
|---|
| 35 | ROM:FFAF04E8 LDMNEFD SP!, {R4-R7,PC} |
|---|
| 36 | ROM:FFAF04EC BL RegisterEventProcedureForLcdDrv |
|---|
| 37 | ROM:FFAF04F0 MOV R1, #1 |
|---|
| 38 | ROM:FFAF04F4 MOV R0, R5 |
|---|
| 39 | ROM:FFAF04F8 BL CreateBinarySemaphoreStrictly ; LOCATION: StrictWrapper.c:61 |
|---|
| 40 | ROM:FFAF04FC LDR R3, =0x823E4 |
|---|
| 41 | ROM:FFAF0500 LDR R12, =0x823C0 ; <--- ### zoom_busy_0 ### |
|---|
| 42 | ROM:FFAF0504 LDR R4, =0x823BC |
|---|
| 43 | ROM:FFAF0508 STR R0, [R3] |
|---|
| 44 | ROM:FFAF050C MOV R2, #0x10 |
|---|
| 45 | ROM:FFAF0510 STR R5, [R12] |
|---|
| 46 | ROM:FFAF0514 MOV R1, #0xA |
|---|
| 47 | ROM:FFAF0518 LDR R0, =aZoomlens |
|---|
| 48 | ROM:FFAF051C STR R5, [R4] |
|---|
| 49 | ROM:FFAF0520 BL sub_FFAEA214 |
|---|
| 50 | ROM:FFAF0524 STR R0, [R6] |
|---|
| 51 | ROM:FFAF0528 BL taskcreate_ZoomEvent |
|---|
| 52 | *******************/ |
|---|
| 53 | DEF(zoom_busy, 0x823C0) // ROM:FFAF0500 search above string "ZoomLens" # |
|---|
| 54 | |
|---|
| 55 | |
|---|
| 56 | DEF(focus_busy, 0x82E18) // ROM:FFB00A90 search below string "FocusLensController" # |
|---|
| 57 | |
|---|
| 58 | |
|---|
| 59 | /******************* playrec_mode |
|---|
| 60 | ROM:FF991D80 ; LOCATION: StartupTask.c:360 |
|---|
| 61 | ROM:FF991D80 task_SsStartupTask ; DATA XREF: ROM:off_FF991C44 |
|---|
| 62 | ROM:FF991D80 STMFD SP!, {R4-R6,LR} |
|---|
| 63 | ROM:FF991D84 BL unknown_libname_449 ; "Canon A-Series Firmware" ; <--- ### follow this call, look at ROM:FF99CD0C ### |
|---|
| 64 | ROM:FF991D88 CMP R0, #1 |
|---|
| 65 | ROM:FF991D8C BEQ loc_FF991DA0 |
|---|
| 66 | ROM:FF991D90 MOV R1, #0x168 |
|---|
| 67 | ROM:FF991D94 LDR R0, =aStartuptask_c |
|---|
| 68 | ROM:FF991D98 ADD R1, R1, #1 |
|---|
| 69 | ROM:FF991D9C BL DebugAssert |
|---|
| 70 | ROM:FF991DA0 loc_FF991DA0 ; CODE XREF: task_SsStartupTask+C |
|---|
| 71 | ROM:FF991DA0 LDR R6, =0x76B14 |
|---|
| 72 | ROM:FF991DA4 MOV R1, #0x10 |
|---|
| 73 | ROM:FF991DA8 LDR R0, [R6] |
|---|
| 74 | ROM:FF991DAC MOV R2, #0 |
|---|
| 75 | ROM:FF991DB0 BL unknown_libname_22 ; "Canon A-Series Firmware" |
|---|
| 76 | ROM:FF991DB4 ANDS R4, R0, #1 |
|---|
| 77 | ROM:FF991DB8 BEQ loc_FF991DD0 |
|---|
| 78 | ROM:FF991DBC MOV R1, #0x17C |
|---|
| 79 | ROM:FF991DC0 LDR R0, =aStartuptask_c |
|---|
| 80 | ROM:FF991DC4 ADD R1, R1, #2 |
|---|
| 81 | ROM:FF991DC8 BL DebugAssert |
|---|
| 82 | ROM:FF991DCC B loc_FF991EB0 |
|---|
| 83 | ROM:FF99CD0C unknown_libname_449 ; CODE XREF: ROM:FF98ED98 |
|---|
| 84 | ROM:FF99CD0C LDR R3, =0x6F6C ; <--- ### playrec_mode ## |
|---|
| 85 | ROM:FF99CD10 LDR R0, [R3] |
|---|
| 86 | ROM:FF99CD14 RET |
|---|
| 87 | *******************/ |
|---|
| 88 | DEF(playrec_mode, 0x6F6C) // ROM:FF99CD0C look at function unknown_libname_449 # |
|---|
| 89 | |
|---|
| 90 | |
|---|
| 91 | /******************* FlashParamsTable |
|---|
| 92 | ROM:FF9AE938 _sub_FF9AE938__ParameterManager.c__148 ; CODE XREF: GetParameterData+A4 |
|---|
| 93 | ROM:FF9AE938 MOV R0, R0,LSL#16 |
|---|
| 94 | ROM:FF9AE93C MOV R3, R3,LSL#16 |
|---|
| 95 | ROM:FF9AE940 MOV R0, R0,LSR#16 |
|---|
| 96 | ROM:FF9AE944 STMFD SP!, {R4-R8,LR} |
|---|
| 97 | ROM:FF9AE948 MOV R7, R2 |
|---|
| 98 | ROM:FF9AE94C MOV R8, R1 |
|---|
| 99 | ROM:FF9AE950 MOV R4, R3,ASR#16 |
|---|
| 100 | ROM:FF9AE954 BL _sub_FF9AB204__PropertyTable.c__4928 ; follow call for FlashParamsTable |
|---|
| 101 | ROM:FF9AE958 MOV R5, R0 |
|---|
| 102 | ROM:FF9AE95C LDRH R3, [R5,#4] |
|---|
| 103 | ROM:FF9AE960 BIC R3, R3, #3 |
|---|
| 104 | ROM:FF9AE964 MOV R3, R3,LSL#16 |
|---|
| 105 | ROM:FF9AE968 LDR R2, =0x7BAB8 |
|---|
| 106 | ROM:FF9AE96C MOV R3, R3,LSR#16 |
|---|
| 107 | ROM:FF9AE970 ADD R3, R3, R2 |
|---|
| 108 | ROM:FF9AE974 CMP R7, #0 |
|---|
| 109 | ROM:FF9AE978 LDR R0, =aParametermanager_c |
|---|
| 110 | ROM:FF9AE97C MOV R1, #0x94 |
|---|
| 111 | ROM:FF9AE980 ADD R6, R3, #5 |
|---|
| 112 | ROM:FF9AE984 BNE loc_FF9AE98C |
|---|
| 113 | ROM:FF9AE988 BL DebugAssert |
|---|
| 114 | ROM:FF9B0A18 _sub_FF9B0A18__PropertyTable.c__4928 ; CODE XREF: sub_FF9B3FB8+18 |
|---|
| 115 | ROM:FF9B0A18 STMFD SP!, {R4,LR} |
|---|
| 116 | ROM:FF9B0A1C MOV R4, R0 |
|---|
| 117 | ROM:FF9B0A20 MOV R1, #0x1340 |
|---|
| 118 | ROM:FF9B0A24 CMP R4, #0x6D |
|---|
| 119 | ROM:FF9B0A28 ADD R1, R1, #0x1E |
|---|
| 120 | ROM:FF9B0A2C LDR R0, =aPropertytable_c |
|---|
| 121 | ROM:FF9B0A30 BLS loc_FF9B0A38 |
|---|
| 122 | ROM:FF9B0A34 BL DebugAssert |
|---|
| 123 | ROM:FF9B0A38 loc_FF9B0A38 ; CODE XREF: _sub_FF9B0A18__PropertyTable.c__4928+18 |
|---|
| 124 | ROM:FF9B0A38 LDR R3, =off_FF9B0860 ; FlashParamsTable |
|---|
| 125 | ROM:FF9B0A3C LDR R0, [R3,R4,LSL#2] |
|---|
| 126 | ROM:FF9B0A40 LDMFD SP!, {R4,PC} |
|---|
| 127 | ROM:FF9B0A40 ; End of function _sub_FF9B0A18__PropertyTable.c__4928 |
|---|
| 128 | *******************/ |
|---|
| 129 | DEF(FlashParamsTable, 0xFF9AB04C) // ROM:FF9AB224 # |
|---|
| 130 | |
|---|
| 131 | |
|---|
| 132 | /******************* canon_menu_active |
|---|
| 133 | ROM:FFA536DC eventproc_StartRecModeMenu ; CODE XREF: sub_FF9DAA88+28 |
|---|
| 134 | ROM:FFA536DC STMFD SP!, {R4-R7,LR} |
|---|
| 135 | ROM:FFA536E0 LDR R5, =0x9278 ; <--- ### canon_menu_active ### |
|---|
| 136 | ROM:FFA536E4 LDR R2, =0x9274 ; <--- canon_menu_active2 |
|---|
| 137 | ROM:FFA536E8 LDR R3, [R5] |
|---|
| 138 | ROM:FFA536EC CMP R3, R2 |
|---|
| 139 | ROM:FFA536F0 MOV R7, #0x840 |
|---|
| 140 | ROM:FFA536F4 LDMNEFD SP!, {R4-R7,PC} |
|---|
| 141 | ROM:FFA536F8 BL sub_FFA535A4 |
|---|
| 142 | ROM:FFA536FC MOVL R0, 0xFFFFFFFF |
|---|
| 143 | ROM:FFA53700 BL sub_FF9A5798 |
|---|
| 144 | ROM:FFA53704 BL eventproc_export_LockPhysicalScreen |
|---|
| 145 | ROM:FFA53708 BL sub_FF9F3E34 |
|---|
| 146 | ROM:FFA5370C BL eventproc_export_IsEnableRefreshPhysicalScreen |
|---|
| 147 | ROM:FFA53710 MOV R6, R0 |
|---|
| 148 | ROM:FFA53714 CMP R6, #1 |
|---|
| 149 | ROM:FFA53718 BNE loc_FFA53720 |
|---|
| 150 | ROM:FFA5371C BL eventproc_export_DisableRefreshPhysicalScreen |
|---|
| 151 | ROM:FFA53720 loc_FFA53720 ; CODE XREF: eventproc_StartRecModeMenu+3C |
|---|
| 152 | *******************/ |
|---|
| 153 | DEF(canon_menu_active,0x9278) // ROM:FFA536E0 look for function "eventproc_StartRecModeMenu" # |
|---|
| 154 | |
|---|
| 155 | |
|---|
| 156 | /******************* canon_shoot_menu_active |
|---|
| 157 | ROM:FF9EF87C taskcreate_DSITask ; CODE XREF: sub_FF9DA020+3C |
|---|
| 158 | ROM:FF9EF87C var_10 = -0x10 |
|---|
| 159 | ROM:FF9EF87C STMFD SP!, {R4,R5,LR} |
|---|
| 160 | ROM:FF9EF880 LDR R5, =0x809C ; <--- ### canon_shoot_menu_active ### |
|---|
| 161 | ROM:FF9EF884 LDR R4, [R5] |
|---|
| 162 | ROM:FF9EF888 SUB SP, SP, #4 |
|---|
| 163 | ROM:FF9EF88C CMP R4, #0 |
|---|
| 164 | ROM:FF9EF890 MOV R1, #0xA |
|---|
| 165 | ROM:FF9EF894 MOV R0, R4 |
|---|
| 166 | ROM:FF9EF898 BNE loc_FF9EF8E0 |
|---|
| 167 | ROM:FF9EF89C BL CreateMessageQueueStrictly ; LOCATION: StrictWrapper.c:37 |
|---|
| 168 | ROM:FF9EF8A0 MOV R1, #0x19 |
|---|
| 169 | ROM:FF9EF8A4 STR R0, [R5,#8] |
|---|
| 170 | ROM:FF9EF8A8 LDR R3, =task_DSITask |
|---|
| 171 | ROM:FF9EF8AC LDR R0, =aDsitask |
|---|
| 172 | ROM:FF9EF8B0 MOV R2, #0x1000 |
|---|
| 173 | ROM:FF9EF8B4 STR R4, [SP] |
|---|
| 174 | ROM:FF9EF8B8 BL CreateTaskStrictly ; LOCATION: StrictWrapper.c:25 |
|---|
| 175 | ROM:FF9EF8BC MOV R3, R0 |
|---|
| 176 | ROM:FF9EF8C0 TST R3, #1 |
|---|
| 177 | ROM:FF9EF8C4 MOV R1, #0xF9 |
|---|
| 178 | ROM:FF9EF8C8 LDR R0, =aDsitask_c |
|---|
| 179 | ROM:FF9EF8CC STR R3, [R5,#4] |
|---|
| 180 | ROM:FF9EF8D0 BEQ loc_FF9EF8D8 |
|---|
| 181 | ROM:FF9EF8D4 BL DebugAssert |
|---|
| 182 | *******************/ |
|---|
| 183 | DEF(canon_shoot_menu_active,0x8099) // ROM:FF9EF880 in taskcreate_DSITask() , LDR R5, =0x809C; then 0x809C - 0x4 + 0x1 = 0x8099 (quietschi's prescription, SD1000) # |
|---|
| 184 | |
|---|
| 185 | |
|---|
| 186 | /******************* recreview_hold |
|---|
| 187 | ROM:FF9E1F14 sub_FF9E1F14 ; CODE XREF: sub_FF9E20C0-11C |
|---|
| 188 | ROM:FF9E1F14 var_D = -0xD |
|---|
| 189 | ROM:FF9E1F14 STMFD SP!, {R4,R5,LR} |
|---|
| 190 | ROM:FF9E1F18 LDR R3, =0x7EB4 ; <--- ### recreview_hold ### |
|---|
| 191 | ROM:FF9E1F1C SUB SP, SP, #4 |
|---|
| 192 | ROM:FF9E1F20 LDRH R12, [R3] |
|---|
| 193 | ROM:FF9E1F24 MOV R5, #0 |
|---|
| 194 | ROM:FF9E1F28 MOV R3, R0,LSL#16 |
|---|
| 195 | ROM:FF9E1F2C CMP R12, #0 |
|---|
| 196 | ROM:FF9E1F30 MOV R0, #0x4000 |
|---|
| 197 | ROM:FF9E1F34 ADD R1, SP, #0x10+var_D |
|---|
| 198 | ROM:FF9E1F38 MOV R2, #1 |
|---|
| 199 | ROM:FF9E1F3C ADD R0, R0, #0xE |
|---|
| 200 | ROM:FF9E1F40 MOV R4, R3,ASR#16 |
|---|
| 201 | ROM:FF9E1F44 STRB R5, [SP,#0x10+var_D] |
|---|
| 202 | ROM:FF9E1F48 BEQ loc_FF9E1F80 |
|---|
| 203 | ROM:FF9E1F4C BL eventproc_export_PTM_RestoreUIProperty ; LOCATION: BootParam.c:316 |
|---|
| 204 | *******************/ |
|---|
| 205 | DEF(recreview_hold, 0x7EB0) // ROM:FF9E1F18 after function string "AR:Snd:0x%04x", LDR R3, =0x7EB4; then 0x7EB4 - 0x4 = 0x7EB0 (quietschi's prescription, SD1000) |
|---|
| 206 | |
|---|
| 207 | |
|---|
| 208 | //DEF(zoom_status, 0x7DB0) // from SD800 ROM:FF9EAADC ? |
|---|
| 209 | DEF(zoom_status, 0x7F70) |
|---|
| 210 | |
|---|
| 211 | |
|---|
| 212 | //DEF(movie_status, 0x8BC00) // from SD800 ROM:FF98BE98 ? |
|---|
| 213 | DEF(movie_status, 0x76410) |
|---|
| 214 | |
|---|
| 215 | |
|---|
| 216 | //DEF(some_flag_for_af_scan, 0x6AE0) // from SD800 ROM:FF99923C or ROM:FF99B358 ? |
|---|
| 217 | DEF(some_flag_for_af_scan, 0x6B8C) // ??? ROM:FF992F68 or ROM:FF99524C |
|---|
| 218 | |
|---|
| 219 | |
|---|
| 220 | // DEF(some_f_for_dng, 0x9A68) // ??? from SD800 ROM:FFAB182C ? |
|---|
| 221 | //DEF(some_f_for_dng, 0x9CD4) // ??? ROM:FFAB1180 |
|---|
| 222 | DEF(some_f_for_dng, 0x9C84) // ??? ROM:FFAB1184 |
|---|
| 223 | |
|---|
| 224 | //DEF(second_ext_for_dng, 0x9A8C) // from SD800 (0x9A8C does not exist in SD800 -> wrong?) |
|---|
| 225 | //DEF(second_ext_for_dng, 0x9CD4) // ??? ROM:FFAB1180 |
|---|
| 226 | DEF(second_ext_for_dng, 0x9CA8) // ??? some_f_for_dng + 0x24 |
|---|
| 227 | |
|---|
| 228 | // Key values for 'Feather' on joystic |
|---|
| 229 | // Could be retrieved from 'PhySW' Task function |
|---|
| 230 | DEF(touch_keys_angle, 0x429F4) |
|---|
| 231 | |
|---|
| 232 | // Semaphore address to disable Feather processing |
|---|
| 233 | DEF(touch_keys_sema, 0x9C2C) // 0x9C10 + 0x1C |
|---|
| 234 | |
|---|
| 235 | // ROM:FF8286DC eventproc_ShowPhySwStatus() |
|---|
| 236 | DEF(NotifyMask, 0x0000FB70) |
|---|
| 237 | DEF(SwitchMask, 0x0000FB80) |
|---|
| 238 | DEF(InvertData, 0x0000FB90) |
|---|
| 239 | // This is the real name for 'physw_status' |
|---|
| 240 | DEF(GpioStatus, 0x0000FBA0) |
|---|
| 241 | DEF(SwitchStatus, 0x0000FBB0) |
|---|
| 242 | |
|---|
| 243 | // Logical Event Table |
|---|
| 244 | DEF(levent_table,0xFF9A1124) // search for "DCD aPressrightbutton" and look above |
|---|
