/* * 650D 1.0.1 consts */ /* * Initial constants as found by Indy */ #define CARD_DRIVE "B:/" #define CARD_LED_ADDRESS 0xC022C188 // like 5dm3 and EOS-M #define LEDON 0x138800 #define LEDOFF 0x838C00 //~ Format dialog consts #define FORMAT_BTN "[Q]" #define STR_LOC 11 // RESTARTSTART 0x7e100 #define HIJACK_INSTR_BL_CSTART 0xFF0C0D80 #define HIJACK_INSTR_BSS_END 0xFF0C1CBC #define HIJACK_FIXBR_BZERO32 0xFF0C1C20 #define HIJACK_FIXBR_CREATE_ITASK 0xFF0C1CAC #define HIJACK_INSTR_MY_ITASK 0xFF0C1CC8 #define HIJACK_TASK_ADDR 0x233D8 /* * Most of the stuff that follows is taken directly from the EOSM or 5D3 */ // no idea if it's overflowing, need to check experimentally #define ARMLIB_OVERFLOWING_BUFFER 0x4A824 // in AJ_armlib_setup_related3 #define DRYOS_ASSERT_HANDLER 0x233B8 // dec TH_assert or assert_0 #define YUV422_LV_BUFFER_1 0x4bde7800 #define YUV422_LV_BUFFER_2 0x4b9d7800 #define YUV422_LV_BUFFER_3 0x4c1f7800 #define REG_EDMAC_WRITE_LV_ADDR 0xc0f04208 // SDRAM address of LV buffer (aka VRAM) #define REG_EDMAC_WRITE_HD_ADDR 0xc0f04108 // SDRAM address of HD buffer (aka YUV) // http://magiclantern.wikia.com/wiki/VRAM_ADDR_from_code // stateobj_disp[1] #define YUV422_LV_BUFFER_DISPLAY_ADDR (*(uint32_t*)(0x23C10+0x11c)) #define YUV422_HD_BUFFER_DMA_ADDR (shamem_read(REG_EDMAC_WRITE_HD_ADDR)) // first line from DMA is dummy // http://magiclantern.wikia.com/wiki/ASM_Zedbra #define YUV422_HD_BUFFER_1 0x463cc080 #define YUV422_HD_BUFFER_2 0x46000080 #define IS_HD_BUFFER(x) (1) // quick check if x looks like a valid HD buffer // see "focusinfo" and Wiki:Struct_Guessing #define FOCUS_CONFIRMATION (*(int*)0x275A0) //~ look for string "[MC] permit LV instant", it's the struct refrenced in this function. #define HALFSHUTTER_PRESSED (*(int*)0x24878) #define DISPLAY_SENSOR_POWERED (*(int*)0x24874) //~ Near HALFSHUTTER_PRESSED. Use Memspy // for gui_main_task #define GMT_NFUNCS 7 #define GMT_FUNCTABLE 0xFF7EFE40 // dec gui_main_task #define SENSOR_RES_X 5184 #define SENSOR_RES_Y 3456 #define CURRENT_DIALOG_MAYBE (*(int*)0x264DC) // in SetGUIRequestMode #define LV_BOTTOM_BAR_DISPLAYED UNAVI_FEEDBACK_TIMER_ACTIVE #define ISO_ADJUSTMENT_ACTIVE ((*(int*)(0x31184)) == 0xF) // dec ptpNotifyOlcInfoChanged and look for: if arg1 == 1: MEM(0x79B8) = *(arg2) // from a screenshot #define COLOR_FG_NONLV 1 #define MVR_516_STRUCT (*(void**)0x2372C) // look in MVR_Initialize for AllocateMemory call; decompile it and see where ret_AllocateMemory is stored. #define div_maybe(a,b) ((a)/(b)) // see mvrGetBufferUsage, which is not really safe to call => err70 // macros copied from arm-console #define MVR_BUFFER_USAGE_FRAME MAX(MEM(MVR_516_STRUCT + 0x580), MEM(MVR_516_STRUCT + 0x57C)) #define MVR_BUFFER_USAGE_SOUND 0 // not sure #define MVR_BUFFER_USAGE MAX(MVR_BUFFER_USAGE_FRAME, MVR_BUFFER_USAGE_SOUND) #define MVR_FRAME_NUMBER (*(int*)(0x1F4 + MVR_516_STRUCT)) // in mvrExpStarted #define MVR_BYTES_WRITTEN (*(int*)(0xb0 + MVR_516_STRUCT)) #define MOV_RES_AND_FPS_COMBINATIONS 9 #define MOV_OPT_NUM_PARAMS 2 #define MOV_GOP_OPT_NUM_PARAMS 5 #define MOV_OPT_STEP 5 #define MOV_GOP_OPT_STEP 5 #define AE_STATE (*(int8_t*)(0x366B8 + 0x1C)) #define AE_VALUE (*(int8_t*)(0x366B8 + 0x1D)) #define DLG_PLAY 1 #define DLG_MENU 2 #define DLG_FOCUS_MODE 0x123456 /* these don't exist in the M */ #define DLG_MOVIE_ENSURE_A_LENS_IS_ATTACHED (CURRENT_DIALOG_MAYBE == 0x24) #define DLG_MOVIE_PRESS_LV_TO_RESUME 0 /*--------------*/ #define PLAY_MODE (gui_state == GUISTATE_PLAYMENU && CURRENT_DIALOG_MAYBE == DLG_PLAY) #define MENU_MODE (gui_state == GUISTATE_PLAYMENU && CURRENT_DIALOG_MAYBE == DLG_MENU) #define AUDIO_MONITORING_HEADPHONES_CONNECTED 0 #define HOTPLUG_VIDEO_OUT_PROP_DELIVER_ADDR 0 #define HOTPLUG_VIDEO_OUT_STATUS_ADDR 0 // position for ML ISO disp outside LV #define MENU_DISP_ISO_POS_X 527 #define MENU_DISP_ISO_POS_Y 45 //position for ML MAX ISO #define MAX_ISO_POS_X 590 #define MAX_ISO_POS_Y 28 // for ML hdr display #define HDR_STATUS_POS_X 562 #define HDR_STATUS_POS_Y 100 //for HTP mode on display #define HTP_STATUS_POS_X 500 #define HTP_STATUS_POS_Y 233 //for Mirror Lock Up enabled on display #define MLU_STATUS_POS_X 316 #define MLU_STATUS_POS_Y 310 #define WBS_GM_POS_X 365 #define WBS_GM_POS_Y 230 #define WBS_POS_X 365 #define WBS_POS_Y 260 // Audio remote shot position info photo mode #define AUDIO_REM_SHOT_POS_X 200 #define AUDIO_REM_SHOT_POS_Y 386 // position for displaying clock outside LV #define DISPLAY_CLOCK_POS_X 300 #define DISPLAY_CLOCK_POS_Y 410 // position for displaying K icon in photo info display #define WB_K_ICON_POS_X 192 #define WB_K_ICON_POS_Y 226 // position for displaying K values in photo info display #define WB_KELVIN_POS_X 192 #define WB_KELVIN_POS_Y 260 // position for displaying card size remain outside LV #define DISPLAY_GB_POS_X (DISPLAY_CLOCK_POS_X - 135) #define DISPLAY_GB_POS_Y 410 // for displaying TRAP FOCUS msg outside LV #define DISPLAY_TRAP_FOCUS_POS_X 65 #define DISPLAY_TRAP_FOCUS_POS_Y 360 #define DISPLAY_TRAP_FOCUS_MSG "TRAP FOCUS" #define DISPLAY_TRAP_FOCUS_MSG_BLANK " " // In bindGUIEventFromGUICBR, look for "LV Set" => arg0 = 8 // Next, in SetGUIRequestMode, look at what code calls NotifyGUIEvent(8, something) #define GUIMODE_ML_MENU (RECORDING ? 0 : lv ? 90 : 2) // any from 88...98 ?! #define NUM_PICSTYLES 10 #define PROP_PICSTYLE_SETTINGS(i) (PROP_PICSTYLE_SETTINGS_STANDARD - 1 + i) #define FLASH_MAX_EV 3 #define FLASH_MIN_EV -10 // not sure if it actually works #define FASTEST_SHUTTER_SPEED_RAW 152 #define MAX_AE_EV 5 #define DIALOG_MnCardFormatBegin (0x44C38) // ret_CreateDialogBox(...DlgMnCardFormatBegin_handler...) is stored there #define DIALOG_MnCardFormatExecute (0x48CFC) // similar #define BULB_MIN_EXPOSURE 1000 // http://magiclantern.wikia.com/wiki/Fonts #define BFNT_CHAR_CODES 0xf8cca8a8 #define BFNT_BITMAP_OFFSET 0xf8ccd7b4 #define BFNT_BITMAP_DATA 0xffcd06c0 #define DLG_SIGNATURE 0x4c414944 // from CFn #define AF_BTN_HALFSHUTTER 0 #define AF_BTN_STAR 3 #define IMGPLAY_ZOOM_LEVEL_ADDR (0x3689C+0xC) // dec GuiImageZoomDown and look for a negative counter #define IMGPLAY_ZOOM_LEVEL_MAX 14 #define IMGPLAY_ZOOM_POS_X MEM(0x6E504) // CentrePos #define IMGPLAY_ZOOM_POS_Y MEM(0x6E508) #define IMGPLAY_ZOOM_POS_X_CENTER 0x144 #define IMGPLAY_ZOOM_POS_Y_CENTER 0xd8 #define IMGPLAY_ZOOM_POS_DELTA_X (0x144 - 0x93) #define IMGPLAY_ZOOM_POS_DELTA_Y (0xd8 - 0x7d) #define BULB_EXPOSURE_CORRECTION 150 // min value for which bulb exif is OK [not tested] // see http://magiclantern.wikia.com/wiki/VRAM/BMP #define WINSYS_BMP_DIRTY_BIT_NEG MEM(0x3d914+0x2c) // manual exposure overrides #define LVAE_STRUCT 0x77B2C #define CONTROL_BV (*(uint16_t*)(LVAE_STRUCT+0x20)) // EP_SetControlBv #define CONTROL_BV_TV (*(uint16_t*)(LVAE_STRUCT+0x22)) // EP_SetControlParam #define CONTROL_BV_AV (*(uint16_t*)(LVAE_STRUCT+0x24)) #define CONTROL_BV_ISO (*(uint16_t*)(LVAE_STRUCT+0x26)) #define CONTROL_BV_ZERO (*(uint16_t*)(LVAE_STRUCT+0x28)) #define LVAE_ISO_SPEED (*(uint8_t* )(LVAE_STRUCT)) // offset 0x0; at 3 it changes iso very slowly //~ #define LVAE_ISO_MIN (*(uint8_t* )(LVAE_STRUCT+0x28)) // string: ISOMin:%d //~ #define LVAE_ISO_HIS (*(uint8_t* )(LVAE_STRUCT+0x2a)) // no idea what this is #define LVAE_DISP_GAIN (*(uint16_t*)(LVAE_STRUCT+0x3c)) // lvae_setdispgain #define LVAE_MOV_M_CTRL (*(uint8_t* )(LVAE_STRUCT+0x1c)) // lvae_setmoviemanualcontrol #define MIN_MSLEEP 10 #define INFO_BTN_NAME "INFO" #define Q_BTN_NAME "[Q]" #define ARROW_MODE_TOGGLE_KEY "LCD SENSOR" #define DISPLAY_STATEOBJ (*(struct state_object **)0x23D1C) #define DISPLAY_IS_ON (DISPLAY_STATEOBJ->current_state != 0) #define VIDEO_PARAMETERS_SRC_3 MEM(0x25AE4) // Look for MAX_FRAMEDATA_DEBUGMEMBER then go up -> 0x25AA4 + 0x40 #define FRAME_ISO (*(uint8_t*)(VIDEO_PARAMETERS_SRC_3+0)) #define FRAME_APERTURE (*(uint8_t*)(VIDEO_PARAMETERS_SRC_3+1)) #define FRAME_SHUTTER (*(uint8_t*)(VIDEO_PARAMETERS_SRC_3+2)) #define FRAME_SHUTTER_TIMER (*(uint16_t*)(VIDEO_PARAMETERS_SRC_3+6)) #define FRAME_BV ((int)FRAME_SHUTTER + (int)FRAME_APERTURE - (int)FRAME_ISO) // see "Malloc Information" #define MALLOC_STRUCT 0x4b428 #define MALLOC_FREE_MEMORY (MEM(MALLOC_STRUCT + 8) - MEM(MALLOC_STRUCT + 0x1C)) // "Total Size" - "Allocated Size" #define UNAVI (MEM(0x4188c)) // dec CancelUnaviFeedBackTimer, then look around that memory area for a location that changes when you keep HS pressed #define UNAVI_AV (MEM(0x418C0)) //Same as above, but this location is linked to the exp comp button #define UNAVI_FEEDBACK_TIMER_ACTIVE ((UNAVI == 2) || (UNAVI_AV != 0)) #define DISPLAY_ORIENTATION MEM(0x23C10+0xB8) // read-only; string: UpdateReverseTFT. /****************************************************************************************************************** * touch_num_fingers_ptr: * --> value=0x11100 when screen isn't being touched, value=0x11101 when 1 finger is held touching the screen * --> value=0x11102 with 2 fingers touching the screen * --> value=0x11103 with 3 fingers * --> value=0x1104 with 4 fingers! Note: only the LSB seems to be used here, other bits seem to change sometimes. * but the rightmost bit always changes to match how many fingers are touching the screen. We can recognize up to * 2 touch points active. Looks like canon doesn't utilize more than 2 finger gestures, it does't report the * coordinates of the 3rd-6th fingers. * * touch_coord_ptr: * --> top left corner = 0x0000000 * --> top right corner = 0x00002CF * --> bottom right corner = 0x1DF02CF * --> bottom left corner = 0x1DF0000 * * [**] lower 3 bits represent the X coordinates, from 0 to 719 (720px wide) * [**] middle bit is always 0 * [**] upper 3 bits represent the Y coordinates, from 0 to 479 (480px tall) * * And that's how Canon's touch screen works :) *******************************************************************************************************************/ //~ max volume supported for beeps #define ASIF_MAX_VOL 5 // temperature convertion from raw-temperature to celsius // http://www.magiclantern.fm/forum/index.php?topic=9673.0 #define EFIC_CELSIUS ((int)efic_temp - 128)