c) The "modemap" table. Since I am quite the newbie, I dont know how to map the values, the values can be found at address 0xFF87AFE0 in the firmware though.
d) Still need to make sure the hook_raw_image_addr() is correct. Rather sure about 0x107D68C0, the alternative address seems hard to determine; currently I have:
- return *((int *)0x54F4) ? 0x11B97B60 : 0x107D68C0;
c) look at propertycase #49 value (in debug menu) in different modes
d) Search table like this (example for SX10)
FFB0B4E8 dword_FFB0B4E8 DCD 1 ; DATA XREF: ROM:off_FF86A67Co
ROM:FFB0B4EC DCD 0x41D7054A
ROM:FFB0B4F0 DCD
0x40F65B18ROM:FFB0B4F4 DCD 0x411379A0
ROM:FFB0B4F8 DCD 0
ROM:FFB0B4FC DCD 0
ROM:FFB0B500 DCD 0
ROM:FFB0B504 DCD 2
ROM:FFB0B508 DCD 0x41D7054A
ROM:FFB0B50C DCD
0x40F65B18ROM:FFB0B510 DCD 0x411379A0
ROM:FFB0B514 DCD 0x4332FC32
ROM:FFB0B518 DCD
0x424F1948ROM:FFB0B51C DCD 0x41ED67C0
ROM:FFB0B520 DCD 1
ROM:FFB0B524 DCD 0x41D7054A
ROM:FFB0B528 DCD
0x40F65B18ROM:FFB0B52C DCD 0x411379A0
ROM:FFB0B530 DCD 0
ROM:FFB0B534 DCD 0
ROM:FFB0B538 DCD 0
ROM:FFB0B53C DCD 1
ROM:FFB0B540 DCD 0x41D7054A
ROM:FFB0B544 DCD 0x409968E0
ROM:FFB0B548 DCD 0x40D6C660
ROM:FFB0B54C DCD 0
ROM:FFB0B550 DCD 0
ROM:FFB0B554 DCD 0
First address (0x40F65B18) is known from 'CRAW Bufffer', second (0x424F1948) can be found using this table (third item after first address).