From d9e8e958b37cc91e5bbeaf070fb4698e1089a1fa Mon Sep 17 00:00:00 2001
From: akuker <34318535+akuker@users.noreply.github.com>
Date: Sat, 8 Jan 2022 21:43:13 -0600
Subject: [PATCH] Updated Radius PowerView Commands (markdown)

---
 Radius-PowerView-Commands.md | 53 ++++++++++++++++++++++++------------
 1 file changed, 36 insertions(+), 17 deletions(-)

diff --git a/Radius-PowerView-Commands.md b/Radius-PowerView-Commands.md
index e7a824f..1de533b 100644
--- a/Radius-PowerView-Commands.md
+++ b/Radius-PowerView-Commands.md
@@ -144,40 +144,59 @@ C9 comes repeatedly during a long spurt at startup.
 
 
 ## Write to frame buffer (CA)
+`CA00095E 00010020 009E00`
+`CAffffff wwwwhhhh ??????`
 
-640x400 Black & White
-0: 	wc: (
-
-640x480 Black & White Command:
-0:	wc: (0xb
-
-800x600 Black & White Command:
-``
+where
+fffffff = offset into frame buffer
+wwww = width or height of update in bytes (Not sure which)
+hhhh = width or height of update in bytes (Not sure which)
 
+### Full Frame Buffer transfer
 
 |       |640x400   | 640x480    | 800x600   |
 |-------|----------|------------|-----------|
 | Black & White| `CA000000 00500190 000000` (0x80d7) | `CA000000 005001E0 000000` (0x99c2)  | `CA000000 00640258 000000` (0xf0b0)|
-| 16 Colors    | `CA000000 00500190 000000` (0x80ba) <br> `CA000000 01400190 000000` (0x203a0)| `CA000000 014001E0 000000` (0x267ee) | `CA000000 00640258 000000` (0xf127) <br> ` CA000000 01900258 000000` (0x3c39a)|
-| 256 Colors   | `CA000000 00500190 000000` (0x809b) <br> `CA000000 02800190 000000` (0x40206) | `CA000000 005001E0 000000` (0x9a0f) <br> `CA000000 028001E0 000000` (0x3f886) | `CA000000 00640258 000000` (0xf126) <br> `CA000000 03200258 000000` (0x78361)|
+| 16 Colors (4 bit color) | `CA000000 01400190 000000` (0x203a0)| `CA000000 014001E0 000000` (0x267ee) | `CA000000 01900258 000000` (0x3c39a)|
+| 256 Colors (8 bit color)  | `CA000000 02800190 000000` (0x40206) | `CA000000 028001E0 000000` (0x3f886) | `CA000000 03200258 000000` (0x78361)|
 
+## Frame Buffer Update
 
+Black & White
+ * `CA000000 00500190 000000` (0x5d26) - 640x400
+ * `CA00095E 00010020 009E00` (0x20) - 640x400
+ * `CA00095E 00010020 009E00` (0x20) - 640x400
+ * `CA000818 00040020 009800` (0x80) - 640x400
+ * `CA000814 00050020 009600` (0xa2) - 640x400
+ * `CA000814 00050020 009600` (0xa0) - 640x400
+ * `CA000812 00050020 009600` (0xa1) - 640x400
+ * `CA00076E 00050020 009600` (0xa2) - 640x400
+ * `CA0007FC 00050020 009600` (0x9e) - 640x400
+ * `CA000A7E 00050020 009600` (0xa5) - 640x400
 
+640x480 bw
+ * `CA000000 00020010 009C00` (0x20)
+ * `CA00351E 00010020 009E00` (0x20)
+ * `CA00365A 00030020 009A00` (0x60)
+ * `CA003796 00050020 009600` (0xa3)
+ * `CA003A0C 00050020 009600` (0xa0)
+ * `CA003C82 00050020 009600` (0xa0)
 
-Command: `CA 00 00 00 00 50 01 E0`
+800x600 bw
+ * `CA000000 00020010 00C400` (0x20)
+ * `CA01D238 00020004 00C400` (0x8)
+ * `CA01D0A8 00030006 00C200` (0x12)
+ * `CA01CF18 00030008 00C200` (0x18)
+ * `CA01CD88 0003000A 00C200` (0x1e)
 
-or
+Function: Update the framebuffer
 
-Command: `CA 01 1E A8 00 01 00 LL 00 9E 00` - Size 3
- * LL = Length
-
-Function: ***Unknown at this time***
 Currently guessing that this updates the framebuffer.
 - The messages come at different sizes. Some huge, some tiny. 
 - Where I *think* the screensaver was showing the screensaver (Pyro fireworks), it was sending mostly FFFFFFF, with a few zeros sprinkled throughout.
 - I also think that a huge buffer of all F's was sent (approximately size 96D7 bytes). This happens to be approximately (640x480)/8 bits (with one bit color)
 
-Type:     XXXXInput (Transitions to DATAOUT)
+Type:     Input (Transitions to DATAOUT)
 
 Host then sends: `XXXX00 09 00 07 FF FF FF 00` (The last 00 might not actually be there?)