In a720, the keyboard functions are above <<DCB "PhySwGpio.c",0>> and the function Task_AudioTsk, in this order (that's how IDA labeled them automatically, using the scripts mentioned in the wiki page):
FFC37068 kbd_pwr_on
FFC370C0 kbd_pwr_off
FFC370E8 kbd_pwr_on_short
FFC370FC kbd_pwr_off_0
In a580 it's
FFC318FC kbd_pwr_on
FFC31968 nullsub_216
FFC3196C nullsub_18
In a720 the kbd_pwr_off is
ROM:FFC370C0 kbd_pwr_off ; CODE XREF: kbd_read_keys+34p
ROM:FFC370C0 LDR R0, =0xC0220000
ROM:FFC370C4 LDR R1, [R0,#0xE0]
ROM:FFC370C8 BIC R1, R1, #2
ROM:FFC370CC STR R1, [R0,#0xE0]
ROM:FFC370D0 BX LR
ROM:FFC370D0 ; End of function kbd_pwr_off
In a580, where it's supposed to be, it's this:
ROM:FFC3194C sub_FFC3194C ; CODE XREF: kbd_read_keys+34p
ROM:FFC3194C MOV R0, #0
ROM:FFC31950 B sub_FFC3134C
ROM:FFC31950 ; End of function sub_FFC3194C
ROM:FFC3134C sub_FFC3134C ; CODE XREF: sub_FFC318FC+8p
ROM:FFC3134C ; sub_FFC3194C+4j
ROM:FFC3134C
ROM:FFC3134C arg_4 = 4
ROM:FFC3134C
ROM:FFC3134C STR LR, [SP,#unk_FFFFFFFC]!
ROM:FFC31350 LDR LR, =0xC0220000
ROM:FFC31354 LDR R12, =unk_FFE5C62C
ROM:FFC31358 MOV R1, #0
ROM:FFC3135C
ROM:FFC3135C loc_FFC3135C ; CODE XREF: sub_FFC3134C+30j
ROM:FFC3135C ADD R2, R1, R1,LSL#1
ROM:FFC31360 ADD R3, R12, R2,LSL#2
ROM:FFC31364 LDRB R3, [R3,#8]
ROM:FFC31368 CMP R3, #1
ROM:FFC3136C LDREQB R2, [R12,R2,LSL#2]
ROM:FFC31370 STREQ R0, [LR,R2,LSL#2]
ROM:FFC31374 ADD R1, R1, #1
ROM:FFC31378 CMP R1, #0x1C
ROM:FFC3137C BLT loc_FFC3135C
ROM:FFC31380 LDR PC, [SP],#arg_4
ROM:FFC31380 ; End of function sub_FFC3134C
Doesn't look like a match to me.
Regarding PT_Playsound there is DCB "PlaySound" but it it's used anywhere. The only other interesting functions I see are two that use "MyCamFunc_PlaySound_MYCAM_COVER_OPEN" and one that contains "PLAYSOUNDDATA" which I assume plays a sound buffer or something
I did search for postledmessage in all the sourcecode but I only found it in a header file, i just asked to be sure.
ok... just one more question...
I found a sub called in taskcreate_LEDCon, that I think it contains the LED addresses:
in a720
sub_FFCC9150 ; CODE XREF: taskcreate_LEDCon+54p
ROM:FFCC9150 LDR R2, =0xC02200CC
ROM:FFCC9154 MOV R1, #0
ROM:FFCC9158 STRB R1, [R0]
ROM:FFCC915C STR R2, [R0,#4]
ROM:FFCC9160 SUB R2, R2, #4
ROM:FFCC9164 STRB R1, [R0,#0x40]
ROM:FFCC9168 STR R2, [R0,#0x44]
ROM:FFCC916C LDR R2, =0xC02200D0
ROM:FFCC9170 STRB R1, [R0,#0x80]
ROM:FFCC9174 STR R2, [R0,#0x84]
ROM:FFCC9178 ADD R2, R2, #4
ROM:FFCC917C STRB R1, [R0,#0xC0]
ROM:FFCC9180 STR R2, [R0,#0xC4]
ROM:FFCC9184 STRB R1, [R0,#0x200]
ROM:FFCC9188 LDR R1, =0xC02200C4
ROM:FFCC918C LDR R2, =0xC02200C0
ROM:FFCC9190 STR R1, [R0,#0x204]
ROM:FFCC9194 MOV R1, #1
ROM:FFCC9198 STRB R1, [R0,#0x240]
ROM:FFCC919C STR R2, [R0,#0x244]
ROM:FFCC91A0 STRB R1, [R0,#0x280]
ROM:FFCC91A4 STRB R1, [R0,#0x2C0]
ROM:FFCC91A8 B sub_FFD9B940
ROM:FFCC91A8 ; End of function sub_FFCC9150
so :
ROM:FFCC91C8 dword_FFCC91C8 DCD 0xC02200CC ; DATA XREF: sub_FFCC9150r
ROM:FFCC91CC dword_FFCC91CC DCD 0xC02200D0 ; DATA XREF: sub_FFCC9150+1Cr
ROM:FFCC91D0 dword_FFCC91D0 DCD 0xC02200C4 ; DATA XREF: sub_FFCC9150+38r
ROM:FFCC91D4 dword_FFCC91D4 DCD 0xC02200C0 ; DATA XREF: sub_FFCC9150+3Cr
in a580
ROM:FFCC5A6C sub_FFCC5A6C ; CODE XREF: taskcreate_LEDCon+54p
ROM:FFCC5A6C LDR R2, =0xC02200CC
ROM:FFCC5A70 MOV R1, #0
ROM:FFCC5A74 STRB R1, [R0]
ROM:FFCC5A78 STR R2, [R0,#4]
ROM:FFCC5A7C SUB R2, R2, #4
ROM:FFCC5A80 STRB R1, [R0,#0x40]
ROM:FFCC5A84 STR R2, [R0,#0x44]
ROM:FFCC5A88 LDR R2, =0xC02200D0
ROM:FFCC5A8C STRB R1, [R0,#0x80]
ROM:FFCC5A90 STR R2, [R0,#0x84]
ROM:FFCC5A94 STRB R1, [R0,#0x200]
ROM:FFCC5A98 SUB R1, R2, #0xC
ROM:FFCC5A9C STR R1, [R0,#0x204]
ROM:FFCC5AA0 MOV R1, #1
ROM:FFCC5AA4 SUB R2, R2, #0x10
ROM:FFCC5AA8 STRB R1, [R0,#0x240]
ROM:FFCC5AAC STR R2, [R0,#0x244]
ROM:FFCC5AB0 STRB R1, [R0,#0x280]
ROM:FFCC5AB4 STRB R1, [R0,#0x2C0]
ROM:FFCC5AB8 B sub_FFDAF0CC
ROM:FFCC5AB8 ; End of function sub_FFCC5A6C
so
ROM:FFCC5AD8 dword_FFCC5AD8 DCD 0xC02200CC ; DATA XREF: sub_FFCC5A6Cr
ROM:FFCC5ADC dword_FFCC5ADC DCD 0xC02200D0 ; DATA XREF: sub_FFCC5A6C+1Cr
I see in platform/a720 code LED_PR 0xc02200C4 and LED_AF 0xc0220080 so I think I'm on the right tracks here, this is where I can determine the led addresses from.
Could you determine them just from the code above?