TTD Forum

Code: Alles auswählen

     0r	8018f0b4:    27bdffe0	addiu	$sp,-32			
     4r	8018f0b8:    afbe001c	sw	$fp,28($sp)		
     8r	8018f0bc:    3c1e8018	lui	$fp,0x8018		
     cr	8018f0c0:    afbf0014	sw	$ra,20($sp)		
    10r	8018f0c4:    27de6674	addiu	$fp,26228=0x6674	# 80186674 VAR_TabIdent -> 0
    14r	8018f0c8:    afb60018	sw	$s6,24($sp)		
    18r	8018f0cc:    8fcf0000	lw	$t7,0($fp)		
    1cr	8018f0d0:    3c168018	lui	$s6,0x8018		
    20r	8018f0d4:    26d66474	addiu	$s6,25716=0x6474	# 80186474 VAR_TabTable -> 0
    24r	8018f0d8:    000f7940	sll	$t7,5			
    28r	8018f0dc:    02cf7821	addu	$t7,$s6			
    2cr	8018f0e0:    8de30000	lw	$v1,0($t7)		
    30r	8018f0e4:    00000000	nop				
    34r	8018f0e8:    00000000	nop				
    38r	8018f0ec:    03801025	move	$v0,$gp			
    3cr	8018f0f0:    00000000	nop				
    40r	8018f0f4:    00000000	nop				
    44r	8018f0f8:    0060e025	move	$gp,$v1			
    48r	8018f0fc:    8f999ec4	lw	$t9,-24892($gp)		# 803814f4 @ptrEepromETC
    4cr	8018f100:    27a50010	addiu	$a1,$sp,16=0x0010	
    50r	8018f104:    0c06c07b	jal	0x801b01ec		#
    54r	8018f108:    93240015	lbu	$a0,21($t9)		
    58r	8018f10c:    8fcf0000	lw	$t7,0($fp)		
    5cr	8018f110:    000f7940	sll	$t7,5			
    60r	8018f114:    02cf7821	addu	$t7,$s6			
    64r	8018f118:    8dfe0004	lw	$fp,4($t7)		
    68r	8018f11c:    00000000	nop				
    6cr	8018f120:    00000000	nop				
    70r	8018f124:    03801025	move	$v0,$gp			
    74r	8018f128:    00000000	nop				
    78r	8018f12c:    00000000	nop				
    7cr	8018f130:    03c0e025	move	$gp,$fp			
    80r	8018f134:    93a20010	lbu	$v0,16($sp)		
    84r	8018f138:    8fbf0014	lw	$ra,20($sp)		
    88r	8018f13c:    8fb60018	lw	$s6,24($sp)		
    8cr	8018f140:    8fbe001c	lw	$fp,28($sp)		
    90r	8018f144:    03e00008	jr	$ra			
    94r	8018f148:    27bd0020	addiu	$sp,32			

Code: Alles auswählen

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include "tap.h"

#define CMD_MASK 0xfc000000 
#define REG_MASK 0x03ff0000 
#define LOAD_TYPE 0x9000000b 
#define LOAD_TUNER 0x90000015 
#define JR_CMD 0x03e00008 
#define SHIFT_CMD 0 
#define NOP_CMD 0 

//----------------------------------------------------------------------------- 
// function pointer definitions for the wrapped code 
// The returned tuner number is zero-based (i.e. 0 = Tuner 1, 1 = Tuner 2). 
// The return value contains the channel number (as in TAP_Channel_GetCurrent). 
typedef dword (*GetTuner)(dword* tuner, dword* chNum); 
GetTuner getTuner = NULL; 

//----------------------------------------------------------------------------- 
// initCodeWrapper() creates a code wrapper based on TAP_Channel_GetCurrent. The 
// function allocates a buffer and copies the code of TAP_Channel_GetCurrent into 
// it except for the actual memory access operations. 
// initCodeWrapper() returns a buffer with code returning the current tuner number. 
// The initialization is to be done only once. 
// For simplicity reasons the function signature remains unchanged (that is, two 
// parameters and a return value). 
// The returned tuner number is zero-based (i.e. 0 = Tuner 1, 1 = Tuner 2). 
// The return value contains the channel number (as in TAP_Channel_GetCurrent). 
dword* initCodeWrapper() 
{ 
  int i; 
  dword *pSrc = (dword*)TAP_Channel_GetCurrent; 
  dword *pBuffer; 
  bool found = FALSE; 
  int bufSize = 0; 
  int count = 0; 

  // find the return statement 
  while(pSrc[bufSize] != JR_CMD) 
  { 
    bufSize++; 
  } 

  // the buffer should include the return statement and the command following 
  // the return statement 
  bufSize += 2; 

  // allocate memory 
  pBuffer = malloc(sizeof(dword) * bufSize); 

  if(pBuffer == NULL) 
  { 
    return NULL; 
  } 

  for(i = 0; i < bufSize; i++, pSrc++) 
  { 
    if((*pSrc & ~REG_MASK) == LOAD_TYPE) 
    { 
      // the command loads the service type (offset 11(0x000b) in the structure) 
      // replace it with loading the tuner number (offset 21(0x0015) in the structure) 
      // preserve used registers 
      pBuffer[i] = LOAD_TUNER | (*pSrc & REG_MASK); 
      found = TRUE; 
    } 
    else 
    { 
      // replace the two shift operations following the load operation 
      if(found  && (count < 2) && ((*pSrc & CMD_MASK) == SHIFT_CMD)) 
      { 
        pBuffer[i] = NOP_CMD; 
        count++; 
      } 
      else 
      { 
        pBuffer[i] = *pSrc; 
      } 
    } 
  } 

  if(!found) 
  { 
    free(pBuffer); 
    pBuffer = NULL; 
  } 

  return pBuffer; 
} 

void InitTuner()
{
	getTuner = (GetTuner)initCodeWrapper();
}

int GetCurrentTuner()
{
	dword tuner = -1, chNum;
	if (getTuner == NULL) return -1;
	getTuner(&tuner, &chNum);
	if (tuner > 1) return -1;
	return (int)tuner;
}

Code: Alles auswählen

$sp=803ac3e8
$at=00000000	$v0=82154ca0	$v1=80190000	$a0=803ac474
$a1=803ac478	$a2=8018b424	$a3=0000000f	$t0=801e7924
$t1=803ac6d8	$t2=803ac6d4	$t3=8018b224	$t4=82cf5e78
$t5=00000000	$t6=803ac383	$t7=00000000	$t8=0000000d
$t9=82154ca0	$s0=00000001	$s1=0000000a	$s2=00000000
$s3=00000000	$s4=8018b224	$s5=8018b224	$s6=82cf5e78
$s7=82cf5e78	$s8=00000000	$ra=82cd1b40	$t0=00000000
$t1=00000000	$gp=82cf5e78	$k1=82154cbc


<<< Unexpected Exception >>>

CAUSE   = 00008428
  EPC = 82154cbc
 *EPC   = 8de70000
   SR   = 10000403
badVAddr = 2d7be400
 task = 0
_runCount=1
lastTask(0) = 0
memory monitor
cmd number = 10

>