Skip to content

Latest commit

 

History

History
56 lines (49 loc) · 1.8 KB

ANNOTATION_SUMMARY.md

File metadata and controls

56 lines (49 loc) · 1.8 KB

ROM Annotation Summary

This folder contains a cleaned copy of the recovered ROM listing with stronger labels around the serial protocol and the front-panel scan/beeper paths.

Key Addresses

  • F0F9: SciParser
    • top-level serial parser
    • dispatches immediate commands, raw little-endian setters, and decimal CR-terminated setters
  • F2B3: Cmd_G_or_p
    • loads the 3-chirp pattern counters and arms the beeper state machine
  • F2D1: Cmd_C_or_e
    • clears the active probe/plate target mode bits
  • F2DE: Cmd_a_or_b
    • decimal probe target setter
  • F2E9: Cmd_c_or_d
    • decimal plate target setter
  • F342: Cmd_E_or_g_or_h
    • raw/decimal ramp setter
  • F3D9: Cmd_F_Snapshot
    • builds the 10-byte binary F reply
  • F3F6, F3FA
    • probe temperature formatters (i, j)
  • F3FE, F407
    • plate temperature formatters (k, l)
  • F410
    • measured stir formatter (m)
  • F418, F41F
    • ramp formatters (n, o)
  • FE16, FE1B
    • front-panel scan helpers
  • FE6C
    • IRQ ISR body in the recovered listing

Important RAM Fields

  • Status_B1
    • serial-visible target-mode byte
    • 0x08 = probe target mode
    • 0x10 = plate target mode
  • StirTarget / StirMeasured
    • target and measured stir values in raw 10 RPM units
  • Value_0091
    • active temperature target raw value
  • Value_0098
    • ramp raw value
  • Value_007D
    • plate temperature raw value
  • Value_007F
    • probe temperature raw value
  • Snapshot_*
    • staging buffer for the F reply and formatted ASCII replies

Beeper Path

G and p do not manipulate timer state directly. They preload L0077, L0078, and L0079, then set L004C bit 0x08. The periodic service path around F956..F996 consumes those counters to generate the audible 3-chirp pattern. The timer-expiry path calls the same routine.