patcher.setwstring(0x080f9a94, "No Fix") #Change the manufacturer string. *Never Worked...* # patcher.setstring(0x080f9588, # "Travis Goodspeed KK4VCZ"); #Change the device name. patcher.setstring(0x080d0eb4, "Patched MD-380/390G") # freeing ~200k for code patches patcher.ffrange(0x0809bda8, 0x80d0614) #This mirrors the RESET vector to 0x080C020, for use in booting. patcher.setword(0x0800C020, patcher.getword(0x0800C004), 0x00000000) #This makes RESET point to our stub below. patcher.setword(0x0800C004, 0x0809bf00 + 1) # app start @ 0x0809c000 patcher.sethword(0x0809bf00, 0x4840) patcher.sethword(0x0809bf02, 0x2100) patcher.sethword(0x0809bf04, 0x3901) patcher.sethword(0x0809bf06, 0x4508) patcher.sethword(0x0809bf08, 0xd100) patcher.sethword(0x0809bf0a, 0x483c) patcher.sethword(0x0809bf0c, 0x4700) #Stores the RESET handler for our stub. patcher.setword(0x0809bffc, patcher.getword(0x0800C020), 0xFFFFFFFF) patcher.export("patched.img")
"Patched MD-380/390G") # freeing ~200k for code patches patcher.ffrange(0x0809bda8, 0x80d0614) # This mirrors the RESET vector to 0x080C020, for use in booting. patcher.setword(0x0800C020, patcher.getword(0x0800C004), 0x00000000) # This makes RESET point to our stub below. patcher.setword(0x0800C004, 0x0809bf00 + 1 ) # app start @ 0x0809c000 patcher.sethword(0x0809bf00, 0x4840) patcher.sethword(0x0809bf02, 0x2100) patcher.sethword(0x0809bf04, 0x3901) patcher.sethword(0x0809bf06, 0x4508) patcher.sethword(0x0809bf08, 0xd100) patcher.sethword(0x0809bf0a, 0x483c) patcher.sethword(0x0809bf0c, 0x4700) # Stores the RESET handler for our stub. patcher.setword(0x0809bffc, patcher.getword(0x0800C020), 0xFFFFFFFF) patcher.export("patched.img")
patcher.sethword(0x0809cf06, 0x4508) patcher.sethword(0x0809cf08, 0xd100) patcher.sethword(0x0809cf0a, 0x483c) patcher.sethword(0x0809cf0c, 0x4700) # [0x0809cf00]> pd 7 # 0x0809cf00 4048 ldr r0, [pc, 0x100] ; [0x809d004:4]=-1 # 0x0809cf02 0021 movs r1, 0 # 0x0809cf04 0139 subs r1, 1 # 0x0809cf06 0845 cmp r0, r1 # ,=< 0x0809cf08 00d1 bne 0x809cf0c # | 0x0809cf0a 3c48 ldr r0, [pc, 0xf0] ; [0x809cffc:4]=0x80fa969 # `-> 0x0809cf0c 0047 bx r0 # [0x0809cf00]> #Stores the RESET handler for our stub. patcher.setword(0x809cffc, patcher.getword(0x0800C020), 0xFFFFFFFF) #Marks the version as "md380tools" patcher.setwstring(0x080d14d8, "MD380Tools Ver.") #Change the manufacturer string. patcher.setstring(0x080f9e4c, "Travis Goodspeed KK4VCZ") #Change the device name. patcher.setstring(0x080d1820, "Patched MD380") #Fixes a typo in 2.032. Unneeded in 2.034. patcher.setwstring(0x080d17e8, "Repeater Slot") #was 'Repeatar Slot' patcher.export("experiment.img")
#hello=fhello.read(); #patcher.str2sprite(0x08094610,hello); #print patcher.sprite2str(0x08094610,0x14,760); #Old patch, matching on the first talkgroup. #We don't use this anymore, because the new patch is better. #patcher.nopout(0x0803ee36,0xd1ef); # New patch for monitoring all talk groups , matched on first # entry iff no other match. #wa mov r5, 0 @ 0x0803ee86 # So the radio thinks it matched at zero. patcher.sethword(0x0803ee86, 0x2500); #wa b 0x0803ee38 @ 0x0803ee88 # Branch back to perform that match. patcher.sethword(0x0803ee88,0xe7d6); #Jump back to matched condition. patcher.export("prom-public.img"); # This should be changed to only show missed calls for private # calls directed at the user, and to decode others without # triggering a missed call. patcher.nopout(0x0803ef10,0xd11f); #Matches all private calls. patcher.export("prom-private.img"); #Everything after here is experimental. #Everything after here is experimental. #Everything after here is experimental. #This cuts out the Chinese font, freeing ~200k for code patches. patcher.ffrange(0x809c714,0x80d0f80); #This mirrors the RESET vector to 0x080C020, for use in booting.
# 0x0809cf06 0845 cmp r0, r1 # ,=< 0x0809cf08 00d1 bne 0x809cf0c # | 0x0809cf0a 3c48 ldr r0, [pc, 0xf0] ; [0x809cffc:4]=0x80fa969 # `-> 0x0809cf0c 0047 bx r0 # [0x0809cf00]> #Stores the RESET handler for our stub. patcher.setword(0x809cffc, patcher.getword(0x0800C020), 0xFFFFFFFF); #Marks the version as "md380tools" patcher.setwstring(0x080d14d8, "MD380Tools Ver."); #Change the manufacturer string. patcher.setstring(0x080f9e4c, "Travis Goodspeed KK4VCZ"); #Change the device name. patcher.setstring(0x080d1820, "Patched MD380"); #Fixes a typo in 2.032. Unneeded in 2.034. patcher.setwstring(0x080d17e8, "Repeater Slot"); #was 'Repeatar Slot' patcher.export("experiment.img");