patcher.setwstring(0x080d0b6c, "MD380Tools Ver.")
#Fix some bad grammar
patcher.setwstring(0x080f9a94, "No Fix")
#Change the manufacturer string. *Never Worked...*
# patcher.setstring(0x080f9588,
# "Travis Goodspeed KK4VCZ");
#Change the device name.
patcher.setstring(0x080d0eb4, "Patched MD-380/390G")
# freeing ~200k for code patches
patcher.ffrange(0x0809bda8, 0x80d0614)
#This mirrors the RESET vector to 0x080C020, for use in booting.
patcher.setword(0x0800C020, patcher.getword(0x0800C004), 0x00000000)
#This makes RESET point to our stub below.
patcher.setword(0x0800C004, 0x0809bf00 + 1)
# app start @ 0x0809c000
patcher.sethword(0x0809bf00, 0x4840)
patcher.sethword(0x0809bf02, 0x2100)
patcher.sethword(0x0809bf04, 0x3901)
patcher.sethword(0x0809bf06, 0x4508)
patcher.sethword(0x0809bf08, 0xd100)
patcher.sethword(0x0809bf0a, 0x483c)
patcher.sethword(0x0809bf0c, 0x4700)
#Stores the RESET handler for our stub.
patcher.setword(0x0809bffc, patcher.getword(0x0800C020), 0xFFFFFFFF)
# This should be changed to only show missed calls for private
# calls directed at the user, and to decode others without
# triggering a missed call.
patcher.nopout(0x0803ef10,0xd11f); #Matches all private calls.
patcher.export("prom-private.img");
#Everything after here is experimental.
#Everything after here is experimental.
#Everything after here is experimental.
#This cuts out the Chinese font, freeing ~200k for code patches.
patcher.ffrange(0x809c714,0x80d0f80);
#This mirrors the RESET vector to 0x080C020, for use in booting.
patcher.setword(0x0800C020,
patcher.getword(0x0800C004),
0x00000000);
#This makes the app its own sideload. Don't ship with it!
#patcher.setword(0x0809D004,
# patcher.getword(0x0800C020),
# 0xFFFFFFFF);
#This makes RESET point to our stub below.
patcher.setword(0x0800C004,
0x0809cf00+1
);
#This stub calls the target RESET vector,
#if it's not FFFFFFFF.
patcher.setwstring(0x080f9a94,
"No Fix")
# Change the manufacturer string. *Never Worked...*
# patcher.setstring(0x080f9588,
# "Travis Goodspeed KK4VCZ");
# Change the device name.
patcher.setstring(0x080d0eb4,
"Patched MD-380/390G")
# freeing ~200k for code patches
patcher.ffrange(0x0809bda8, 0x80d0614)
# This mirrors the RESET vector to 0x080C020, for use in booting.
patcher.setword(0x0800C020,
patcher.getword(0x0800C004),
0x00000000)
# This makes RESET point to our stub below.
patcher.setword(0x0800C004,
0x0809bf00 + 1
)
# app start @ 0x0809c000
patcher.sethword(0x0809bf00, 0x4840)
patcher.sethword(0x0809bf02, 0x2100)
patcher.sethword(0x0809bf04, 0x3901)
patcher.sethword(0x0809bf06, 0x4508)
patcher.sethword(0x0809bf08, 0xd100)
patcher.sethword(0x0809bf0a, 0x483c)
patcher.sethword(0x0809bf0c, 0x4700)
patcher.nopout(0x0803fd98); #dmr_dll_parser CC check.
patcher.nopout(0x0803fd9a);
patcher.sethword(0x0803fd8e,0xe02d, #Check in dmr_dll_parser().
0xd02d);
patcher.nopout(0x0803eafe,0xf100); #Disable CRC check, in case CC is included.
patcher.nopout(0x0803eb00,0x80af);
# Patches after here allow for an included applet.
#This cuts out the Chinese font, freeing ~200k for code patches.
patcher.ffrange(0x809c714,0x80d0f80);
#This mirrors the RESET vector to 0x080C020, for use in booting.
patcher.setword(0x0800C020,
patcher.getword(0x0800C004),
0x00000000);
#This makes RESET point to our stub below.
patcher.setword(0x0800C004,
0x0809cf00+1
);
#This stub calls the target RESET vector,
#if it's not FFFFFFFF.
patcher.sethword(0x0809cf00, 0x4840);
patcher.sethword(0x0809cf02, 0x2100);
patcher.sethword(0x0809cf04, 0x3901);
patcher.sethword(0x0809cf06, 0x4508);
