I've analyzed the D variant firmware and calculated memory address offsets:
- frameno: +0x258 (0x80f8214c → 0x80f823a4)
- nvm_base: +0x1E74 (0x80E0B78C → 0x80E0D600)
- active_settings: +0xE20 (0x80DDC11C → 0x80DDCF3C)
I've compiled a test mod with these addresses. Can you provide guidance on:
- Where to inject the code in D variant firmware?
- What tools/process to use for injection?
Happy to test on my hardware once injection methodology is confirmed.