Re: A86: Customizable Stuff

To: assembly-86@lists.ticalc.org
Subject: Re: A86: Customizable Stuff
From: Dux Gregis <assets@eden.rutgers.edu>
Date: Sat, 21 Feb 1998 13:34:15 -0500
References: <34EEDC69.MD-0.196.Doggett@zetnet.co.uk>
Reply-To: assembly-86@lists.ticalc.org




A Doggett wrote:

> assets@eden.rutgers.edu wrote on Fri, 20 Feb 1998 15:28:40 -0500:
> >
> >
> >
> > A Doggett wrote:
> > >
> > > Perhaps instead of working backwards, my best method might be to work
> > > forwards - calling every single call/jp on $0D?  (Starting in the
> > > most-likely area, of course).
> >
> > That would be helpful.  I think you should.
>
> But in this case, going forwards would probably not have found it.
>
> I have tried about 100 or so with a quick-test program & produced many
> interesting results, but I'm going to need to extend it to monitor
> op1, & other registers & flags for it to be very useful.
>
> > >
> > >
> > > Don't suppose that someone's found it already?
> >
> > I found it last night and I posted it.  It is actually two
> > successive calls ...
>
> How did you find it?  (Neither working forwards or backwards has
> worked for me...)

I disassembled the uninstall code in Inferential Statistics.  (I had to do it
by hand, though; I don't have an emulator.)
The code is strange.  It does alot of seemingly useless things, I think that
TI was trying to make it difficult to hack.

References:

Re: A86: Customizable Stuff

From: "A Doggett" <Doggett@zetnet.co.uk>