darkstone knight wrote: patch the os directly on the calc
make a program to mod flash
You mean.. like this (look down)?
I had been thinking of making something like this for a bit, even previous to this conversation. I just hammered out most of it.
(DISCLAIMER: it's not finished; I got tired of working on it, but it's understandable as-is. I also left unlockFlash to your imagination for implementation.  )
Code:
.nolist
.include "ti83plus.inc"
;=====bcalls=====
_FindSwapSector = 5095h
_EraseFlashPage = 8084h
_WriteFlash = 80C9h
;=====My RAM locations and others=====
writeAddr = appBackUpScreen
writePage = writeAddr+2
readAddr = writePage+1
readPage = readAddr+2
swapSector = readPage+1
strLen = swapSector+1 ;length of string, excluding terminator
strBuf = saveSScreen
strBufLen = 768
rwBuf = statVars
rwBufLen = 512
.list
.org 9D93h
.db 0BBh,6Dh
BEGIN:
;prompt for address and page to patch
ld b,4
ld hl,M_addr
call hexInput
ld (writeAddr),hl
ld b,2
ld hl,M_page
call hexInput
ld a,l
ld (writePage),a
;display memory at location, ensure is OK
ld de,strBuf
ld hl,(writeAddr)
ld bc,strBufLen
ld a,(writePage)
bcall(_FlashToRAM)
ld hl,strBuf
bcall(_PutS)
bcall(_NewLine)
ld hl,M_addrOK
bcall(_PutS)
call yesNoPrompt
ret nz
;get string length
ld hl,strBuf
bcall(_StrLength)
ld (strLen),bc
ld hl,strBufLen-1 ;StrLength doesn't include the terminator
or a
sbc hl,bc
jr nc,_LenOK
ld hl,M_lenAbort
bcall(_PutS)
ret
_lenOK:;take string input
ld hl,strBuf
call strInput
ld hl,M_isSure
call yesNoPrompt
ret nz
ld hl,M_reallySure
call yesNoPrompt
ret nz
;find and erase swap sector
call unlockFlash
bcall(_FindSwapSector)
ld (swapSector),a
bcall(_EraseFlashPage)
;copy all of sector to temp sector, excluding string
ld hl,4000h
ld (readAddr),hl
ld a,(writePage)
and 11111100b ;masks out page to get sector start
ld (readPage),a
_sectorCopyLoop:
ld a,(readPage)
and 03h ;page offset in sector
ld b,a
ld a,(writePage)
and 03h
cp b
jr nz,_sectorCopy_Normal
_sectorCopy_ReplacePage:
;This is the page containing the string to be replaced.
;We must not copy it
ld de,rwBuf
;... finish me?
_sectorCopy_Normal:
ld a,(readPage)
ld de,rwBuf
ld hl,(readAddr)
ld bc,rwBufLen
push bc
bcall(_FlashToRAM)
pop bc
ld hl,(readAddr)
add hl,bc
ld bc,8000h
or a
sbc hl,bc
jr nz,_sectorCopyToTemp
ld hl,4000h
ld (readAddr),hl
ld hl,readPage
inc (hl)
_sectorCopyToTemp:
;...
bcall(_WriteFlash)
;...
;erase original sector
call eraseSector
;copy temp back to original sector
;read from temp to rwBuf, rwBuf back to original page
;write new string back to page
;done
ret
;write new string
M_addr:
.db "Address:",0
M_page:
.db "Page:",0
M_addrOK:
.db "Address OK?",0
M_isSure:
.db "Are you SURE?",0
M_reallySure:
.db "REALLY sure?",0
M_lenAbort:
.db "String too long,"
.db "giving up.",0
;;Prompts the user for OK
;;Inputs:
;; HL->prompt string
;;Outputs:
;; ZF set if OK, reset otherwise
yesNoPrompt:
bcall(_Puts)
bcall(_NewLine)
ld hl,M_OK
bcall(_PutS)
call waitSK
cp skEnter
ret
M_OK:
.db "ENTER = OK, any "
.db "other key aborts",0
;;Takes input from the user as a hex number
;;Inputs:
;; b=number of nibbles to accept
;; hl=address of prompt to display
;;Outputs:
;; hl=inputted number
hexInput:
bcall(_PutS)
set CurAble,(IY+CurFlags)
_waitKey:
call waitSK
_keyLookup:
cp skDel
jr z,_keyDelete
push hl
ld hl,_keyLookupTab
push bc
ld b,0Fh
_keyLookupLoop:
cp (hl)
inc hl
jr z,_keyLookup_Found
inc hl
djnz _keyLookupLoop
_notFound:
pop bc
pop hl
jr _waitKey
_keyDelete:
push bc
ld b,4
_delLoop:
rl l
rl h
djnz _delLoop
pop bc
ld a,' '
push hl
ld hl,curCol
dec (hl)
bcall(_PutMap)
pop hl
inc b
jr _waitKey
_keyLookup_Found:
ld a,(hl)
pop hl
ld b,4
_found_ShiftLoop:
rra
rr h
rr l
djnz _found_ShiftLoop
pop bc
djnz _waitKey
_inputDone:
call waitSK
cp skEnter
jr nz,_inputDone
res CurAble,(IY+CurFlags)
bcall(_NewLine)
ret
_keyLookupTab:
.db sk0,0
.db sk1,1
.db sk2,2
.db sk3,3
.db sk4,4
.db sk5,5
.db sk6,6
.db sk7,7
.db sk8,8
.db sk9,9
.db skMath,0Ah
.db skMatrix,0Bh;actually APPS
.db skPrgm,0Ch
.db skRecip,0Dh
.db skSin,0Eh
.db skCos,0Fh
;;Takes string input from the user
;;Inputs:
;; HL->buffer
;; BC=max length
;;Outputs:
;; HL->inputted string (tokens converted to characters)
strInput:
bcall(_GetKey)
;;unfinished routine
ret
waitSK:
halt
bcall(_GetCSC)
or a
ret z
jr waitSK
unlockFlash:
;ohai!
ret
;erases flash sector containing page in A
eraseSector:
push af
ld a,2
out (6),a
ld a,0AAh
ld (6AAAh),a
ld a,1
out (6),a
ld a,$55
ld ($5555),a
ld a,2
out (6),a
ld a,80h
ld (6AAAh),a
ld a,0AAh
ld (6AAAh),a
ld a,1
out (6),a
ld a,55h
ld (5555h),a
pop af
out (6),a
ld a,30h
ld hl,4000h
ld (hl),a
_eraseWait:;wait for the erase operation to finish
ld a,(hl)
bit 7,a
jr nz,_eraseReset
bit 5,a
jr z,_eraseWait
ld a,(hl)
rla
_eraseReset:;reset Flash chip
ld a,$F0
ld (0),a
ret
.end
END
Last edited by Guest on 01 Apr 2009 09:02:39 pm; edited 1 time in total |
Open Topic & United-TI Talk => General Open Topic
