Betty init
From Bettyhacks.com - Hack BettyTV-Remote
(made a typo, base 0x80000000 for lcd was wrong, base is 0x81000000) |
|||
| Line 1: | Line 1: | ||
here is a part of the disassembly of the original firmware.<br> | here is a part of the disassembly of the original firmware.<br> | ||
it should show you how to init the chip, memory banks, and<br> | it should show you how to init the chip, memory banks, and<br> | ||
| − | also initializes the | + | also initializes the lc-display.<br> |
the functions are stripped down, so that only the code needed<br> | the functions are stripped down, so that only the code needed<br> | ||
to show the init sequence remains.<br> | to show the init sequence remains.<br> | ||
| Line 22: | Line 22: | ||
CS0:80000C14 RSB R0, R0, R0,LSL#4 -> (1600*16)-1600 = 24000 | CS0:80000C14 RSB R0, R0, R0,LSL#4 -> (1600*16)-1600 = 24000 | ||
CS0:80000C18 STR R3, [R2,#4] | CS0:80000C18 STR R3, [R2,#4] | ||
| − | CS0:80000C1C MOV R0, R0,LSL R3 -> 24000* | + | CS0:80000C1C MOV R0, R0,LSL R3 -> 24000*2 = 48000 |
CS0:80000C20 | CS0:80000C20 | ||
CS0:80000C20 loc_80000C20 ; CODE XREF: pause+38�j | CS0:80000C20 loc_80000C20 ; CODE XREF: pause+38�j | ||
| Line 44: | Line 44: | ||
CS0:80000058 MOV R1, #0xAA ; '¬' | CS0:80000058 MOV R1, #0xAA ; '¬' | ||
CS0:8000005C MOV R2, #0x55 ; 'U' | CS0:8000005C MOV R2, #0x55 ; 'U' | ||
| − | CS0:80000060 LDR R4, =dword_800029AC =0x42, = | + | CS0:80000060 LDR R4, =dword_800029AC =0x42, =30mhz @ 10mhz input |
CS0:80000064 LDR R3, [R4] | CS0:80000064 LDR R3, [R4] | ||
CS0:80000068 STR R3, [R0,#4] PLLCFG = 0100.0010<br> | CS0:80000068 STR R3, [R0,#4] PLLCFG = 0100.0010<br> | ||
| Line 73: | Line 73: | ||
<br> | <br> | ||
<br> | <br> | ||
| − | this snippet initializes bank#1, where the | + | this snippet initializes bank#1, where the lc-display is connected to.<br> |
0x81000000 is the command interface, 0x81000001 is for data<br> | 0x81000000 is the command interface, 0x81000001 is for data<br> | ||
<br> | <br> | ||
