Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!mnetor!seismo!rutgers!ames!sdcsvax!ucsdhub!jack!man!crash!pnet01!billk
From: billk@pnet01.CTS.COM (Bill Kelly)
Newsgroups: comp.sys.amiga
Subject: Re: Hacking the WCS
Message-ID: <1337@crash.CTS.COM>
Date: Sat, 4-Jul-87 15:16:52 EDT
Article-I.D.: crash.1337
Posted: Sat Jul  4 15:16:52 1987
Date-Received: Sun, 5-Jul-87 01:21:20 EDT
Sender: news@crash.CTS.COM
Organization: People-Net [pnet01], El Cajon, CA
Lines: 68

About change Kickstart:

It's about 14 instructions long. (I re-wrote mine to not flash the diskpay
first.)
<this may be a slightly garbled message -- lots of line noise>

Basically it does a loop $300000 (I think) times to flash the display. (Writes
the loop count to $DFF180)  

Then it re-vectors the privilege violation trap to point to it's own code.
(Trap number eight, address $20)  It then commits a privilege violation by
trying to write to the status register.  The 68000 goes "hey!" and jumps to
the privilege violation trap handeling code.  This code moves to the stastatus
register to disable all interrupts.  (If I remember correctly) and then puts
the addresses $F80000 in a0 and $F00000 in a1 (or vice-versa?) and does a
RESET.  I think.  What the heck -- I'll try to find it...

* QuicKick -- Re-KickStart without wasting time       Bill Kelly
*             by 'rainbowing' the CRT.                19-Mar-87

      CODE
            lea      $C(pc),a0
            move.l   a0,$20
            move     #$2700,sr
            nop                     ; Why?????
            nop                     ; Why?????
            move     #$2700,sr
            lea      $FC0000,a0
            lea      $F80000,a1
            moveq    #0,d0
            reset
      END

NOTE: I am not the original author of this code!  I just disassembled it, 
      looked at it, typed it in using Ed (omitting the initial loop in my
      code so that the CRT wouldn't flash), and re-assembled it.
      (And added a big .doc file)
      For a disassembley of the original code and some discussion about
      the way it works, see QuicKick.doc

      Bill Kelly
 
-----

Well, I was close...  BTW, since then I have found out why those nop's have to
be there.  If they're omitted, QuicKick will not work with FAST RAM:

Interesting, huh?  <darn line noise -- I hope it came through ok!??>

Bill

Arrgh!  that's messed up!  after the lea $Fc0000,a0  it should read:

        lea $F80000,a1
        moveq #0,d0
        reset


Arrgh.  I can't tell if it's messed or not.  If it is, and you're interested,
leave me EMail and I'll mail the source to you..

Sorry,
Bill
--
Bill Kelly      {akgua, hplabs!hp-sdd, sdcsvax}!crash!pnet01!billk
                (Don't use pnet01!billk; try crash!pnet01!billk -- Thanks!)

                "When your IQ reaches 28, sell."