1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
|
.include "asm/macros.inc"
.include "global.inc"
.extern NNSi_FndInitHeapHead
.extern NNSi_FndFinalizeHeap
.text
arm_func_start NNS_FndGetSizeForMBlockExpHeap
NNS_FndGetSizeForMBlockExpHeap: ; 0x020ADDC0
ldr r0, [r0, #-0xc]
bx lr
arm_func_end NNS_FndGetSizeForMBlockExpHeap
arm_func_start NNS_FndGetTotalFreeSizeForExpHeap
NNS_FndGetTotalFreeSizeForExpHeap: ; 0x020ADDC8
ldr r2, [r0, #0x24]
mov r0, #0x0
cmp r2, #0x0
bxeq lr
_020ADDD8:
ldr r1, [r2, #0x4]
ldr r2, [r2, #0xc]
add r0, r0, r1
cmp r2, #0x0
bne _020ADDD8
bx lr
arm_func_end NNS_FndGetTotalFreeSizeForExpHeap
arm_func_start NNS_FndFreeToExpHeap
NNS_FndFreeToExpHeap: ; 0x020ADDF0
stmdb sp!, {r4-r5,lr}
sub sp, sp, #0xc
sub r4, r1, #0x10
add r5, r0, #0x24
add r0, sp, #0x0
mov r1, r4
bl GetRegionOfMBlock
mov r1, r4
add r0, r5, #0x8
bl RemoveMBlock
add r1, sp, #0x0
mov r0, r5
bl RecycleRegion
add sp, sp, #0xc
ldmia sp!, {r4-r5,pc}
arm_func_end NNS_FndFreeToExpHeap
arm_func_start NNS_FndResizeForMBlockExpHeap
NNS_FndResizeForMBlockExpHeap: ; 0x020ADE2C
stmdb sp!, {r4-r10,lr}
sub sp, sp, #0x10
mov r4, r1
mov r10, r2
sub r6, r4, #0x10
add r1, r10, #0x3
mov r5, r0
ldr r8, [r6, #0x4]
bic r10, r1, #0x3
cmp r10, r8
add r7, r5, #0x24
addeq sp, sp, #0x10
moveq r0, r10
ldmeqia sp!, {r4-r10,pc}
cmp r10, r8
bls _020ADF60
ldr r9, [r7, #0x0]
add r0, r6, #0x10
cmp r9, #0x0
add r0, r8, r0
beq _020ADE94
_020ADE80:
cmp r9, r0
beq _020ADE94
ldr r9, [r9, #0xc]
cmp r9, #0x0
bne _020ADE80
_020ADE94:
cmp r9, #0x0
beq _020ADEB0
ldr r0, [r9, #0x4]
add r1, r8, #0x10
add r0, r1, r0
cmp r10, r0
bls _020ADEBC
_020ADEB0:
add sp, sp, #0x10
mov r0, #0x0
ldmia sp!, {r4-r10,pc}
_020ADEBC:
add r0, sp, #0x0
mov r1, r9
bl GetRegionOfMBlock
mov r0, r7
mov r1, r9
bl RemoveMBlock
ldr r2, [sp, #0x4]
add r3, r10, r4
ldr r9, [sp, #0x0]
sub r1, r2, r3
str r3, [sp, #0x0]
cmp r1, #0x10
strcc r2, [sp, #0x0]
mov r8, r0
ldr r0, [sp, #0x0]
sub r0, r0, r4
str r0, [r6, #0x4]
ldr r1, [sp, #0x4]
ldr r0, [sp, #0x0]
sub r0, r1, r0
cmp r0, #0x10
blo _020ADF30
ldr r1, _020ADF9C ; =0x00004652
add r0, sp, #0x0
bl InitMBlock
mov r1, r0
mov r0, r7
mov r2, r8
bl InsertMBlock
_020ADF30:
ldr r0, [r5, #0x20]
ldr r1, [sp, #0x0]
and r0, r0, #0xff
mov r0, r0, lsl #0x10
mov r0, r0, lsr #0x10
sub r2, r1, r9
ands r0, r0, #0x1
beq _020ADF90
mov r1, r9
mov r0, #0x0
bl MIi_CpuClear32
b _020ADF90
_020ADF60:
add r0, r10, r4
str r0, [sp, #0x8]
ldr r1, [r6, #0x4]
add r0, r6, #0x10
add r0, r1, r0
str r0, [sp, #0xc]
add r1, sp, #0x8
mov r0, r7
str r10, [r6, #0x4]
bl RecycleRegion
cmp r0, #0x0
streq r8, [r6, #0x4]
_020ADF90:
ldr r0, [r6, #0x4]
add sp, sp, #0x10
ldmia sp!, {r4-r10,pc}
.balign 4
_020ADF9C: .word 0x00004652
arm_func_end NNS_FndResizeForMBlockExpHeap
arm_func_start NNS_FndAllocFromExpHeapEx
NNS_FndAllocFromExpHeapEx: ; 0x020ADFA0
stmdb sp!, {lr}
sub sp, sp, #0x4
cmp r1, #0x0
moveq r1, #0x1
add r1, r1, #0x3
cmp r2, #0x0
bic r1, r1, #0x3
blt _020ADFCC
bl AllocFromHead
add sp, sp, #0x4
ldmia sp!, {pc}
_020ADFCC:
rsb r2, r2, #0x0
bl AllocFromTail
add sp, sp, #0x4
ldmia sp!, {pc}
arm_func_end NNS_FndAllocFromExpHeapEx
arm_func_start NNS_FndDestroyExpHeap
NNS_FndDestroyExpHeap: ; 0x020ADFDC
ldr ip, _020ADFE4 ; =NNSi_FndFinalizeHeap
bx r12
.balign 4
_020ADFE4: .word NNSi_FndFinalizeHeap
arm_func_end NNS_FndDestroyExpHeap
arm_func_start NNS_FndCreateExpHeapEx
NNS_FndCreateExpHeapEx: ; 0x020ADFE8
stmdb sp!, {lr}
sub sp, sp, #0x4
add r1, r1, r0
add r0, r0, #0x3
bic r1, r1, #0x3
bic r0, r0, #0x3
cmp r0, r1
bhi _020AE014
sub r3, r1, r0
cmp r3, #0x4c
bhs _020AE020
_020AE014:
add sp, sp, #0x4
mov r0, #0x0
ldmia sp!, {pc}
_020AE020:
bl InitExpHeap
add sp, sp, #0x4
ldmia sp!, {pc}
arm_func_end NNS_FndCreateExpHeapEx
arm_func_start RecycleRegion
RecycleRegion:
stmdb sp!, {r4-r6,lr}
sub sp, sp, #0x8
mov r5, r1
ldr r2, [r5, #0x0]
ldr r1, [r5, #0x4]
mov r6, r0
str r2, [sp, #0x0]
str r1, [sp, #0x4]
ldr r1, [r6, #0x0]
mov r4, #0x0
cmp r1, #0x0
beq _020AE0A0
ldr r0, [r5, #0x0]
_020AE060:
cmp r1, r0
movcc r4, r1
blo _020AE094
ldr r0, [r5, #0x4]
cmp r1, r0
bne _020AE0A0
ldr r2, [r1, #0x4]
add r0, r1, #0x10
add r2, r2, r0
mov r0, r6
str r2, [sp, #0x4]
bl RemoveMBlock
b _020AE0A0
_020AE094:
ldr r1, [r1, #0xc]
cmp r1, #0x0
bne _020AE060
_020AE0A0:
cmp r4, #0x0
beq _020AE0D4
ldr r2, [r4, #0x4]
add r1, r4, #0x10
ldr r0, [r5, #0x0]
add r1, r2, r1
cmp r1, r0
bne _020AE0D4
mov r0, r6
mov r1, r4
str r4, [sp, #0x0]
bl RemoveMBlock
mov r4, r0
_020AE0D4:
ldr r1, [sp, #0x4]
ldr r0, [sp, #0x0]
sub r0, r1, r0
cmp r0, #0x10
addcc sp, sp, #0x8
movcc r0, #0x0
ldmccia sp!, {r4-r6,pc}
ldr r1, _020AE118 ; =0x00004652
add r0, sp, #0x0
bl InitMBlock
mov r1, r0
mov r0, r6
mov r2, r4
bl InsertMBlock
mov r0, #0x1
add sp, sp, #0x8
ldmia sp!, {r4-r6,pc}
.balign 4
_020AE118: .word 0x00004652
arm_func_end RecycleRegion
local_arm_func_start AllocFromTail
AllocFromTail: ; 0x020AE11C
stmdb sp!, {r4-r9,lr}
sub sp, sp, #0x4
add r0, r0, #0x24
ldrh r4, [r0, #0x12]
mov r3, r1
mvn lr, #0x0
and r1, r4, #0x1
mov r1, r1, lsl #0x10
movs r1, r1, lsr #0x10
moveq r5, #0x1
mov r1, #0x0
ldr r4, [r0, #0x4]
movne r5, #0x0
mov r12, r1
cmp r4, #0x0
beq _020AE1B0
sub r2, r2, #0x1
mvn r2, r2
_020AE164:
ldr r8, [r4, #0x4]
add r9, r4, #0x10
add r6, r8, r9
sub r6, r6, r3
and r7, r2, r6
subs r6, r7, r9
bmi _020AE1A4
cmp lr, r8
bls _020AE1A4
mov r1, r4
mov lr, r8
mov r12, r7
cmp r5, #0x0
bne _020AE1B0
cmp r8, r3
beq _020AE1B0
_020AE1A4:
ldr r4, [r4, #0x8]
cmp r4, #0x0
bne _020AE164
_020AE1B0:
cmp r1, #0x0
addeq sp, sp, #0x4
moveq r0, #0x0
ldmeqia sp!, {r4-r9,pc}
mov r4, #0x1
mov r2, r12
str r4, [sp, #0x0]
bl AllocUsedBlockFromFreeBlock
add sp, sp, #0x4
ldmia sp!, {r4-r9,pc}
arm_func_end AllocFromTail
local_arm_func_start AllocFromHead
AllocFromHead: ; 0x020AE1D8
stmdb sp!, {r4-r9,lr}
sub sp, sp, #0x4
add r0, r0, #0x24
ldrh r4, [r0, #0x12]
mov r3, r1
ldr r5, [r0, #0x0]
and r1, r4, #0x1
mov r1, r1, lsl #0x10
movs r1, r1, lsr #0x10
moveq r6, #0x1
mov r1, #0x0
movne r6, #0x0
mov lr, r1
cmp r5, #0x0
mvn r4, #0x0
beq _020AE270
sub r12, r2, #0x1
mvn r2, r12
_020AE220:
add r8, r5, #0x10
add r7, r12, r8
and r9, r2, r7
sub r7, r9, r8
ldr r8, [r5, #0x4]
add r7, r3, r7
cmp r8, r7
blo _020AE264
cmp r4, r8
bls _020AE264
mov r1, r5
mov r4, r8
mov lr, r9
cmp r6, #0x0
bne _020AE270
cmp r8, r3
beq _020AE270
_020AE264:
ldr r5, [r5, #0xc]
cmp r5, #0x0
bne _020AE220
_020AE270:
cmp r1, #0x0
addeq sp, sp, #0x4
moveq r0, #0x0
ldmeqia sp!, {r4-r9,pc}
mov r4, #0x0
mov r2, lr
str r4, [sp, #0x0]
bl AllocUsedBlockFromFreeBlock
add sp, sp, #0x4
ldmia sp!, {r4-r9,pc}
arm_func_end AllocFromHead
arm_func_start AllocUsedBlockFromFreeBlock
AllocUsedBlockFromFreeBlock: ; 0x020AE298
stmdb sp!, {r4-r8,lr}
sub sp, sp, #0x18
mov r7, r0
add r0, sp, #0x0
mov r8, r1
mov r6, r2
mov r5, r3
bl GetRegionOfMBlock
ldr r3, [sp, #0x4]
sub r4, r6, #0x10
add r2, r5, r6
mov r0, r7
mov r1, r8
str r4, [sp, #0x4]
str r3, [sp, #0xc]
str r2, [sp, #0x8]
bl RemoveMBlock
ldr r2, [sp, #0x0]
ldr r1, [sp, #0x4]
mov r5, r0
sub r0, r1, r2
cmp r0, #0x10
strcc r2, [sp, #0x4]
blo _020AE318
ldr r1, _020AE418 ; =0x00004652
add r0, sp, #0x0
bl InitMBlock
mov r1, r0
mov r0, r7
mov r2, r5
bl InsertMBlock
mov r5, r0
_020AE318:
ldr r1, [sp, #0xc]
ldr r0, [sp, #0x8]
sub r0, r1, r0
cmp r0, #0x10
strcc r1, [sp, #0x8]
blo _020AE34C
ldr r1, _020AE418 ; =0x00004652
add r0, sp, #0x8
bl InitMBlock
mov r1, r0
mov r0, r7
mov r2, r5
bl InsertMBlock
_020AE34C:
ldr r0, [r7, #-0x4]
ldr r1, [sp, #0x4]
and r0, r0, #0xff
mov r0, r0, lsl #0x10
ldr r2, [sp, #0x8]
mov r0, r0, lsr #0x10
sub r2, r2, r1
ands r0, r0, #0x1
beq _020AE378
mov r0, #0x0
bl MIi_CpuClear32
_020AE378:
ldr r2, [sp, #0x8]
ldr r1, _020AE41C ; =0x00005544
add r0, sp, #0x10
str r4, [sp, #0x10]
str r2, [sp, #0x14]
bl InitMBlock
mov r1, r0
ldrh r3, [r1, #0x2]
ldrh r2, [sp, #0x30]
add r0, r7, #0x8
bic r3, r3, #0x8000
strh r3, [r1, #0x2]
ldrh r3, [r1, #0x2]
and r2, r2, #0x1
orr r2, r3, r2, lsl #0xf
strh r2, [r1, #0x2]
ldrh r2, [r1, #0x2]
ldr r3, [sp, #0x4]
bic r2, r2, #0x7f00
strh r2, [r1, #0x2]
sub r2, r1, r3
mov r2, r2, lsl #0x10
mov r2, r2, lsr #0x10
ldrh r3, [r1, #0x2]
and r2, r2, #0x7f
orr r2, r3, r2, lsl #0x8
strh r2, [r1, #0x2]
ldrh r2, [r1, #0x2]
ldrh r3, [r7, #0x10]
bic r2, r2, #0xff
strh r2, [r1, #0x2]
ldrh r2, [r1, #0x2]
and r3, r3, #0xff
orr r2, r2, r3
strh r2, [r1, #0x2]
ldr r2, [r7, #0xc]
bl InsertMBlock
mov r0, r6
add sp, sp, #0x18
ldmia sp!, {r4-r8,pc}
.balign 4
_020AE418: .word 0x00004652
_020AE41C: .word 0x00005544
arm_func_end AllocUsedBlockFromFreeBlock
arm_func_start InitExpHeap
InitExpHeap: ; 0x020AE420
stmdb sp!, {r4-r5,lr}
sub sp, sp, #0xc
mov r5, r0
mov r3, r1
add r4, r5, #0x24
str r2, [sp, #0x0]
ldr r1, _020AE498 ; =0x45585048
add r2, r4, #0x14
bl NNSi_FndInitHeapHead
mov r0, #0x0
strh r0, [r4, #0x10]
strh r0, [r4, #0x12]
ldrh r2, [r4, #0x12]
ldr r1, _020AE49C ; =0x00004652
add r0, sp, #0x4
bic r2, r2, #0x1
strh r2, [r4, #0x12]
ldr r2, [r5, #0x18]
str r2, [sp, #0x4]
ldr r2, [r5, #0x1c]
str r2, [sp, #0x8]
bl InitMBlock
str r0, [r5, #0x24]
str r0, [r4, #0x4]
mov r1, #0x0
str r1, [r4, #0x8]
mov r0, r5
str r1, [r4, #0xc]
add sp, sp, #0xc
ldmia sp!, {r4-r5,pc}
.balign 4
_020AE498: .word 0x45585048
_020AE49C: .word 0x00004652
arm_func_end InitExpHeap
arm_func_start InitMBlock
InitMBlock: ; 0x020AE4A0
ldr r3, [r0, #0x0]
mov r2, #0x0
strh r1, [r3, #0x0]
strh r2, [r3, #0x2]
ldr r1, [r0, #0x4]
add r0, r3, #0x10
sub r0, r1, r0
str r0, [r3, #0x4]
str r2, [r3, #0x8]
mov r0, r3
str r2, [r3, #0xc]
bx lr
arm_func_end InitMBlock
arm_func_start InsertMBlock
InsertMBlock: ; 0x020AE4D0
str r2, [r1, #0x8]
cmp r2, #0x0
ldrne r3, [r2, #0xc]
strne r1, [r2, #0xc]
ldreq r3, [r0, #0x0]
streq r1, [r0, #0x0]
str r3, [r1, #0xc]
cmp r3, #0x0
strne r1, [r3, #0x8]
streq r1, [r0, #0x4]
mov r0, r1
bx lr
arm_func_end InsertMBlock
arm_func_start RemoveMBlock
RemoveMBlock: ; 0x020AE500
ldr r2, [r1, #0x8]
ldr r1, [r1, #0xc]
cmp r2, #0x0
strne r1, [r2, #0xc]
streq r1, [r0, #0x0]
cmp r1, #0x0
strne r2, [r1, #0x8]
streq r2, [r0, #0x4]
mov r0, r2
bx lr
arm_func_end RemoveMBlock
arm_func_start GetRegionOfMBlock
GetRegionOfMBlock: ; 0x020AE528
ldrh r2, [r1, #0x2]
add r3, r1, #0x10
mov r2, r2, asr #0x8
and r2, r2, #0x7f
mov r2, r2, lsl #0x10
sub r2, r1, r2, lsr #0x10
str r2, [r0, #0x0]
ldr r1, [r1, #0x4]
add r1, r1, r3
str r1, [r0, #0x4]
bx lr
arm_func_end GetRegionOfMBlock
|