Initial commit

Based on
https://www.mikrocontroller.net/topic/avr-bootloader-mit-verschluesselung?page=single#1820493
https://www.mikrocontroller.net/topic/avr-bootloader-mit-verschluesselung?page=single#1195903

Author: damadmai

.gitignore

@@ -0,0 +1,31 @@
+AvrBuild.bat
+*.a
+*.acy
+*.atsuo
+*.avrsuo
+*.aws
+*.cfg
+*.d
+*.dep
+*.depend
+*.i
+*.layout
+*.log
+*.lss
+*.lst
+*.map
+*.mk
+*.o
+*.obj
+*.srec
+*.suo
+*.sym
+*.tmp
+*.xml
+*.xslt
+
+# AVR programming files
+
+# *.eep
+# *.elf
+# *.hex

1-Wire.png

@@ -0,0 +1,175 @@
+unit AVRootIntf;
+
+interface
+
+uses Windows, Classes;
+
+const
+// IApplication.Output() Code
+  ocInfo              = $10000000;
+  ocError             = $11000000;
+  ocOthers            = $12000000;
+// RetCode Flags
+  msCrypt             = $01;
+  msCryptFlash        = $02;
+  msCryptEeprom       = $04;
+  msVersioning        = $08;
+// Return Codes of AVR Bootloader Software
+  SUCCESS             = $30;
+  ERRORVERIFY         = $C0;
+  ERRORCOMMAND        = $C1;
+  ERRORCRC            = $C2;
+  ERRORBOUNDS         = $C3;
+  ERRORCRYPT          = $C4;
+  ERRORPROG           = $C5;
+  ERRORVERSION        = $C6;
+  ERRORUNKNOWN        = $CF;
+
+  RETMASK             = $F0;
+
+// IDevice.Support Flags
+  sfCrypt             = $0001;  // Cryptography supported
+  sfCryptFlash        = $0002;  // FLASH Write must be encrypted, unencrypted FLASH write not supported
+  sfCryptEeprom       = $0004;  // EEPROM Write must be encrypted, unencrypted EEPROM write not supported
+  sfVersioning        = $0008;  // Versioning supported
+  sfReadEeprom        = $0100;  // command EEPROM Read supported, examined at runtime
+  sfWriteEeprom       = $0200;  // command EEPROM Write supported, examined at runtime
+  sfReadRam           = $0400;  // command RAM Read supported, examined at runtime
+  sfVerifyFlash       = $0800;  // command Verify FLASH supported, examined at runtime
+
+type
+  // RS232 encapsulation of windows COM port
+  TCRCFlag  = (crcReset, crcSend);
+  TCRCFlags = set of TCRCFlag;
+
+  ICOM = interface
+    procedure Flush; stdcall;
+    procedure Purge; stdcall;
+
+    procedure SetTimeout(Value: Cardinal; const ProcName: WideString = ''); stdcall;
+    procedure SetParams(Baudrate: Cardinal; Parity: Byte = NOPARITY; Databits: Byte = 8; Stopbits: Byte = ONESTOPBIT; const ProcName: WideString = ''); stdcall;
+    procedure SetEchoMode(Value: Bool); stdcall;
+    function  EchoMode: Bool; stdcall;
+
+    procedure SetDTR(Value: Bool); stdcall;
+    procedure SetRTS(Value: Bool); stdcall;
+    procedure WriteData(Buffer: Pointer; Size: Integer; Flags: TCRCFlags = []; const ProcName: WideString = ''); stdcall;
+    procedure WriteByte(Value: Byte; Flags: TCRCFlags = []; const ProcName: WideString = ''); stdcall;
+    procedure WriteChar(Value: Char; Flags: TCRCFlags = []; const ProcName: WideString = ''); stdcall;
+    procedure WriteWord(Value: Word; Flags: TCRCFlags = []; const ProcName: WideString = ''); stdcall;
+    procedure WriteLong(Value: Cardinal; Flags: TCRCFlags = []; const ProcName: WideString = ''); stdcall;
+    procedure WriteCRC(const ProcName: WideString = ''); stdcall;
+    procedure ResetCRC; stdcall;
+
+    procedure ReadData(Buffer: Pointer; Size: Integer; Flags: TCRCFlags = []; const ProcName: WideString = ''); stdcall;
+    function  ReadByte(Flags: TCRCFlags = []; const ProcName: WideString = ''): Byte; stdcall;
+    function  ReadChar(Flags: TCRCFlags = []; const ProcName: WideString = ''): Char; stdcall;
+    function  ReadWord(Flags: TCRCFlags = []; const ProcName: WideString = ''): Word; stdcall;
+    function  ReadLong(Flags: TCRCFlags = []; const ProcName: WideString = ''): Cardinal; stdcall;
+    function  ReadCRC(const ProcName: WideString = ''): Bool; stdcall;
+  end;
+
+  // Timeout Record for IApplication
+  TTimeouts = packed record
+    Baudrate: Integer;
+    Connect: Integer;
+    Base: Integer;
+    Erase: Integer;
+    Flash: Integer;
+    Eeprom: Integer;
+    Buffer: Integer;
+    AppCmd: Integer;
+    KeepAlive: Integer;
+    RTSPulse: Integer;
+    RTSInterval: Integer;
+    ConnectTrials: Integer;
+    MaxPacketSize: Integer;
+    Options: Integer;
+  end;
+
+  // Application Callback Interface, must be provided to OpenAVRootloader()
+  IApplication = interface
+    ['{62DEB67D-8AB2-476E-9CB6-F582A508B1F7}']
+    function ProcessMessages: Bool; stdcall;
+    procedure Changed; stdcall;
+    procedure Output(const Msg: WideString; Code: Integer); stdcall;
+
+    function GetFLASHFileName: WideString; stdcall;
+    function GetEEPROMFileName: WideString; stdcall;
+    function GetACYFileName: WideString; stdcall;
+    function GetPassword: WideString; stdcall;
+    function GetBootSign: WideString; stdcall;
+    function GetTimeouts: TTimeouts; stdcall;
+    function GetAppCmd: WideString; stdcall;
+    function GetAppCmdResponse: WideString; stdcall;
+    function GetAppVersion(Masked: Bool = False): Integer; stdcall;
+    function GetACYInfo: WideString; stdcall;
+
+    function OpenCommunication(Index: Integer): ICOM; stdcall;
+  end;
+
+  // individual Commands to send to AVR Bootloader software, part of IAVRootloader
+  ICommandSet = interface
+    ['{E9C64A3F-306C-4694-B250-FC57D2CB2DEB}']
+    function SetAddr(Address: Integer): Bool; stdcall;
+    function SetBuffer(Buffer: Pointer; Size: Integer; Code: Byte = 0): Bool; stdcall;
+    function Run(Code: Byte = 1): Bool; stdcall;
+    function EraseFlash(Pages: Byte = 1): Bool; stdcall;
+    function VerifyFlash(Pages: Byte = 1): Bool; stdcall;
+    function WriteFlash(Pages: Byte = 1): Bool; stdcall;
+    function WriteEeprom(Size: Integer; Pages: Byte = 1): Bool; stdcall;
+    function ReadEeprom(Buffer: Pointer; Size: Integer; Address: Integer = 0): Bool; stdcall;
+    function ReadRam(Buffer: Pointer; Size: Integer; Address: Integer = 0): Bool; stdcall;
+  end;
+
+  // connected Device Information, part of IAVRootloader
+  IDevice = interface
+    ['{9EC8A92B-F6BB-47F3-A9C9-DF8F4F481F49}']
+    function Signature: Integer; stdcall;
+    function Name: WideString; stdcall;
+    function Info: WideString; stdcall;
+    function FlashSize: Integer; stdcall;
+    function AppFlashSize: Integer; stdcall;
+    function AppVersion: Integer; stdcall;
+    function AppVersionString: WideString; stdcall;
+    function EepromSize: Integer; stdcall;
+    function RamSize: Integer; stdcall;
+    function RamStartAddress: Integer; stdcall;
+    function PageSize: Integer; stdcall;
+    function BufferSize: Integer; stdcall;
+    function Version: Integer; stdcall;
+    function UseBootSection: Bool; stdcall;
+    function RetCode: Byte; stdcall;
+    function Support: Integer; stdcall;
+    function XMLFileName: WideString; stdcall;
+  end;
+
+  TMode = (moDisconnected, moConnecting, moConnected, moWorking, moTimer, moAbort);
+
+  // Bootloader Interface
+  IAVRootloader = interface            
+    ['{3A2E99C2-CE9E-407B-8943-A6D5EB1F6B7A}']
+    function  Mode: TMode; stdcall;
+
+    function  DoConnect(Working: Bool = False): Bool; stdcall;
+    procedure DoDisconnect; stdcall;
+    procedure DoAbort; stdcall;
+
+    function  DoProgram(EraseFlash: Bool; VerifyFlash: Bool): Bool; stdcall;
+    function  DoCompile(EraseFlash: Bool; VerifyFlash: Bool): Bool; stdcall;
+    function  DoVerifyFlash: Bool; stdcall;
+    function  DoEraseFlash: Bool; stdcall;
+    function  DoEraseEeprom: Bool; stdcall;
+
+    function  COM: ICOM; stdcall;
+    function  Device: IDevice; stdcall;
+    function  Command: ICommandSet; stdcall;
+  end;
+
+
+function OpenCOM(const Port: WideString; const Application: IApplication): ICOM; stdcall; external 'AVRootloader.dll';
+function OpenAVRootloader(const Application: IApplication): IAVRootloader; stdcall; external 'AVRootloader.dll';
+
+implementation
+
+end.

AVRootIntf.pas

@@ -0,0 +1 @@
+<AVRStudio><MANAGEMENT><Created>06-Mar-2008 17:30:47</Created><LastEdit>22-Apr-2009 19:16:07</LastEdit><ProjectType>0</ProjectType><Created>06-Mar-2008 17:30:47</Created><Version>4</Version><Build>4, 13, 0, 528</Build><ProjectTypeName>Atmel AVR Assembler</ProjectTypeName><ICON>208</ICON><ProjectName>AVRootloader</ProjectName><Created>14-Mar-2008 23:47:09</Created><LastEdit>14-Mar-2008 23:47:09</LastEdit><ICON>208</ICON><ProjectType>0</ProjectType><Created>14-Mar-2008 23:47:09</Created><Version>4</Version><Build>4, 13, 0, 528</Build><ProjectTypeName>Atmel AVR Assembler</ProjectTypeName></MANAGEMENT><CODE_CREATION><ObjectFile>AVRootloader.obj</ObjectFile><EntryFile>C:\Programme\Atmel\AVRootloader\AVR\AVRootloader.asm</EntryFile><ObjectFile></ObjectFile><EntryFile></EntryFile><SaveFolder>C:\Programme\Atmel\AVRootloader\AVR\</SaveFolder></CODE_CREATION><DEBUG_TARGET><CURRENT_PART>ATmega162</CURRENT_PART><BREAKPOINTS></BREAKPOINTS><IO_EXPAND><HIDE>false</HIDE></IO_EXPAND><REGISTERNAMES><Register>R00</Register><Register>R01</Register><Register>R02</Register><Register>R03</Register><Register>R04</Register><Register>R05</Register><Register>R06</Register><Register>R07</Register><Register>R08</Register><Register>R09</Register><Register>R10</Register><Register>R11</Register><Register>R12</Register><Register>R13</Register><Register>R14</Register><Register>R15</Register><Register>R16</Register><Register>R17</Register><Register>R18</Register><Register>R19</Register><Register>R20</Register><Register>R21</Register><Register>R22</Register><Register>R23</Register><Register>R24</Register><Register>R25</Register><Register>R26</Register><Register>R27</Register><Register>R28</Register><Register>R29</Register><Register>R30</Register><Register>R31</Register></REGISTERNAMES><CURRENT_TARGET>JTAGICE mkII</CURRENT_TARGET><CURRENT_TARGET>AVR Simulator</CURRENT_TARGET><CURRENT_PART>ATmega162.xml</CURRENT_PART><BREAKPOINTS></BREAKPOINTS><IO_EXPAND></IO_EXPAND><REGISTERNAMES></REGISTERNAMES><COM>COM8</COM><COMType>1</COMType><WATCHNUM>0</WATCHNUM><WATCHNAMES><Pane0><Variables>zx</Variables></Pane0><Pane1></Pane1><Pane2></Pane2><Pane3></Pane3></WATCHNAMES><BreakOnTrcaeFull>0</BreakOnTrcaeFull></DEBUG_TARGET><Debugger><modules><module></module></modules><Triggers></Triggers></Debugger><AvrAssembler><Folder>C:\Programme\Atmel\AVRootloader\AVR\</Folder><RelPath>AVRootloader.asm</RelPath><EntryFile>C:\Programme\Atmel\AVRootloader\AVR\AVRootloader.asm</EntryFile><IncludePath>C:\Programme\Atmel\AVR Tools\AvrAssembler\AppNotes</IncludePath><V2IncludePath></V2IncludePath><V2Parameters></V2Parameters><FileType>I</FileType><ObjectName>AVRootloader</ObjectName><Wrap>1</Wrap><ErrorAsWarning>0</ErrorAsWarning><MapFile>1</MapFile><ListFile>1</ListFile><Version1>0</Version1><PreCompile></PreCompile><PostCompile></PostCompile><SourceFiles>,</SourceFiles></AvrAssembler><JTAG_ICE><BAUDRATE>19200</BAUDRATE><OCD_FREQUENCY>250000</OCD_FREQUENCY><PRESERVE_EEPROM>0</PRESERVE_EEPROM><RUN_TIMERS>0</RUN_TIMERS><REPROGRAM>0</REPROGRAM><EXT_RESET>0</EXT_RESET><RESTORE>1</RESTORE><DAISY_CHAIN>0</DAISY_CHAIN><DEVS_BEFORE>0</DEVS_BEFORE><DEVS_AFTER>0</DEVS_AFTER><INSTRBITS_BEFORE>0</INSTRBITS_BEFORE><INSTRBITS_AFTER>0</INSTRBITS_AFTER><NOJTAGIN_RUNMODE>0</NOJTAGIN_RUNMODE><BREAKON_CHANGEOFFLOW>0</BREAKON_CHANGEOFFLOW><ALLOW_BREAKINSTR>0</ALLOW_BREAKINSTR><PRINT_BREAKCAUSE>1</PRINT_BREAKCAUSE><ENTRY_FUNCTION>main</ENTRY_FUNCTION><STOPIF_ENTRYFUNC_NOTFOUND>1</STOPIF_ENTRYFUNC_NOTFOUND><PRINT_BREAKWARNING>1</PRINT_BREAKWARNING><CURRENT_BUILDTIME>39531.6</CURRENT_BUILDTIME></JTAG_ICE><JTAGICEmkII><DAISY_CHAIN>0</DAISY_CHAIN><DEVS_BEFORE>0</DEVS_BEFORE><DEVS_AFTER>0</DEVS_AFTER><INSTRBITS_BEFORE>0</INSTRBITS_BEFORE><INSTRBITS_AFTER>0</INSTRBITS_AFTER><BAUDRATE>115200</BAUDRATE><JTAG_FREQ>1000000</JTAG_FREQ><TIMERS_RUNNING>0</TIMERS_RUNNING><PRESERVE_EEPROM>0</PRESERVE_EEPROM><ALWAYS_EXT_RESET>0</ALWAYS_EXT_RESET><PRINT_BRK_CAUSE>0</PRINT_BRK_CAUSE><ENABLE_IDR_IN_RUN_MODE>0</ENABLE_IDR_IN_RUN_MODE><STOPIF_ENTRYFUNC_NOTFOUND>1</STOPIF_ENTRYFUNC_NOTFOUND><ENTRY_FUNCTION>main</ENTRY_FUNCTION><REPROGRAM>1</REPROGRAM></JTAGICEmkII><ProjectIncludeDirs><Dirs><Dir>C:\Programme\Atmel\AVR Tools\AvrAssembler2\Appnotes</Dir></Dirs></ProjectIncludeDirs><ProjectFiles><Files><Name>\AVRootloader.asm</Name><Name>C:\Programme\Atmel\AVR Tools\AvrAssembler2\Appnotes\m162def.inc</Name><Name>\AVRootloader.inc</Name><Name>\Special.inc</Name></Files></ProjectFiles><IOView><usergroups/><sort sorted="0" column="0" ordername="1" orderaddress="1" ordergroup="1"/></IOView><Files><File00000><FileId>00000</FileId><FileName>AVRootloader.asm</FileName><Status>257</Status></File00000><File00001><FileId>00001</FileId><FileName>AVRootloader.lst</FileName><Status>1</Status></File00001></Files><Events><Bookmarks></Bookmarks></Events><Trace><Filters></Filters></Trace></AVRStudio>

AVRootloader.aps

@@ -0,0 +1,108 @@
+ID  =Sign. , Devicename   ,  Flash,  E2P, SRAM, Ofs,Page,BZ1,BZ2,BZ3,BZ4
+9007=1E9007, ATtiny13     ,   1024,   64,   64,  96,  32,  0,  0,  0,  0
+9007=1E9007, ATtiny13A    ,   1024,   64,   64,  96,  32,  0,  0,  0,  0
+9108=1E9108, ATtiny25     ,   2048,  128,  128,  96,  32,  0,  0,  0,  0
+910A=1E910A, ATtiny2313   ,   2048,  128,  128,  96,  32,  0,  0,  0,  0
+910B=1E910B, ATtiny24     ,   2048,  128,  128,  96,  32,  0,  0,  0,  0
+910B=1E910B, ATtiny24A    ,   2048,  128,  128,  96,  32,  0,  0,  0,  0
+910C=1E910C, ATtiny261    ,   2048,  128,  128,  96,  32,  0,  0,  0,  0
+9205=1E9205, ATmega48     ,   4096,  256,  512, 256,  64,  0,  0,  0,  0
+9206=1E9206, ATtiny45     ,   4096,  256,  256,  96,  64,  0,  0,  0,  0
+9207=1E9207, ATtiny44     ,   4096,  256,  256,  96,  64,  0,  0,  0,  0
+9207=1E9207, ATtiny44A    ,   4096,  256,  256,  96,  64,  0,  0,  0,  0
+9208=1E9208, ATtiny461    ,   4096,  256,  256,  96,  64,  0,  0,  0,  0
+9209=1E9209, ATtiny48     ,   4096,   64,  256, 256,  64,  0,  0,  0,  0
+920A=1E920A, ATmega48P    ,   4096,  256,  512, 256,  64,  0,  0,  0,  0
+920A=1E920A, ATmega48P    ,   4096,  256,  512, 256,  64,  0,  0,  0,  0
+920A=1E920A, ATmega48PA   ,   4096,  256,  512, 256,  64,  0,  0,  0,  0
+920C=1E920C, ATtiny43U    ,   4096,   64,  256,  96,  32,  0,  0,  0,  0
+9301=1E9301, AT90S8515comp,   8192,  512,  512,  96,  64,  4,  8, 16, 32
+9303=1E9303, AT90S8535comp,   8192,  512,  512,  96,  64,  2,  4,  8, 16
+9306=1E9306, ATmega8515   ,   8192,  512,  512,  96,  64,  4,  8, 16, 32
+9307=1E9307, ATmega8      ,   8192,  512, 1024,  96,  64,  4,  8, 16, 32
+9307=1E9307, ATmega8A     ,   8192,  512, 1024,  96,  64,  4,  8, 16, 32
+9308=1E9308, ATmega8535   ,   8192,  512,  512,  96,  64,  2,  4,  8, 16
+930A=1E930A, ATmega88     ,   8192,  512, 1024, 256,  64,  4,  8, 16, 32
+930B=1E930B, ATtiny85     ,   8192,  512,  512,  96,  64,  0,  0,  0,  0
+930C=1E930C, ATtiny84     ,   8192,  512,  512,  96,  64,  0,  0,  0,  0
+930D=1E930D, ATtiny861    ,   8192,  512,  512,  96,  64,  0,  0,  0,  0
+930F=1E930F, ATmega88P    ,   8192,  512, 1024, 256,  64,  4,  8, 16, 32
+930F=1E930F, ATmega88PA   ,   8192,  512, 1024, 256,  64,  4,  8, 16, 32
+9310=1E9310, ATmega8HVA   ,   8192,  256,  512, 256, 128,  0,  0,  0,  0
+9311=1E9311, ATtiny88     ,   8192,   64,  512, 256,  64,  0,  0,  0,  0
+9381=1E9381, AT90PWM2     ,   8192,  512,  512, 256,  64,  4,  8, 16, 32
+9381=1E9381, AT90PWM3     ,   8192,  512,  512, 256,  64,  4,  8, 16, 32
+9382=1E9382, AT90USB82    ,   8192,  512,  512, 256, 128,  4,  8, 16, 32
+9383=1E9383, AT90PWM2B    ,   8192,  512,  512, 256,  64,  4,  8, 16, 32
+9383=1E9383, AT90PWM3B    ,   8192,  512,  512, 256,  64,  4,  8, 16, 32
+9387=1E9387, ATtiny87     ,   8192,  512,  512, 256, 128,  0,  0,  0,  0
+9401=1E9401, ATmega161    ,  16384,  512, 1024,  96, 128,  2,  4,  8, 16
+9401=1E9401, ATmega161comp,  16384,  512, 1024,  96, 128,  2,  4,  8, 16
+9402=1E9402, ATmega163    ,  16384,  512, 1024,  96, 128,  2,  4,  8, 16
+9403=1E9403, ATmega16     ,  16384,  512, 1024,  96, 128,  2,  4,  8, 16
+9403=1E9403, ATmega16A    ,  16384,  512, 1024,  96, 128,  2,  4,  8, 16
+9404=1E9404, ATmega162    ,  16384,  512, 1024, 256, 128,  2,  4,  8, 16
+9405=1E9405, ATmega169    ,  16384,  512, 1024, 256, 128,  2,  4,  8, 16
+9405=1E9405, ATmega169P   ,  16384,  512, 1024, 256, 128,  2,  4,  8, 16
+9406=1E9406, ATmega168    ,  16384,  512, 1024, 256, 128,  2,  4,  8, 16
+9407=1E9407, ATmega165    ,  16384,  512, 1024, 256, 128,  2,  4,  8, 16
+9407=1E9407, ATmega165P   ,  16384,  512, 1024, 256, 128,  2,  4,  8, 16
+940A=1E940A, ATmega164P   ,  16384,  512, 1024, 256, 128,  2,  4,  8, 16
+940B=1E940B, ATmega168P   ,  16384,  512, 1024, 256, 128,  2,  4,  8, 16
+940B=1E940B, ATmega168PA  ,  16384,  512, 1024, 256, 128,  2,  4,  8, 16
+940C=1E940C, ATmega16HVA  ,  16384,  256,  512, 256, 128,  0,  0,  0,  0
+9482=1E9482, AT90USB162   ,  16384,  512,  512, 256, 128,  4,  8, 16, 32
+9483=1E9483, AT90PWM216   ,  16384,  512, 1024, 256, 128,  4,  8, 16, 32
+9483=1E9483, AT90PWM316   ,  16384,  512, 1024, 256, 128,  4,  8, 16, 32
+9484=1E9484, ATmega16M1   ,  16384,  512, 1024, 256, 128,  4,  8, 16, 32
+9487=1E9487, ATtiny167    ,  16384,  512,  512, 256, 128,  0,  0,  0,  0
+9488=1E9488, ATmega16U4   ,  16384,  512, 1280, 256, 128,  4,  8, 16, 32
+9489=1E9489, ATmega16U2   ,  16384,  512,  512, 256, 128,  4,  8, 16, 32
+9501=1E9501, ATmega323    ,  32768, 1024, 2048,  96, 128,  4,  8, 16, 32
+9502=1E9502, ATmega32     ,  32768, 1024, 2048,  96, 128,  4,  8, 16, 32
+9502=1E9502, ATmega32A    ,  32768, 1024, 2048,  96, 128,  4,  8, 16, 32
+9503=1E9503, ATmega329    ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+9503=1E9503, ATmega329P   ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+9504=1E9504, ATmega3290   ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+9505=1E9505, ATmega325    ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+9506=1E9506, ATmega3250   ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+9507=1E9507, ATmega406    ,  40960,  512, 2048, 256, 128,  4,  8, 16, 32
+9508=1E9508, ATmega324P   ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+950C=1E950C, ATmega3290P  ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+950D=1E950D, ATmega325P   ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+950E=1E950E, ATmega3250P  ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+950F=1E950F, ATmega328P   ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+9510=1E9510, ATmega32HVB  ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+9511=1E9511, ATmega324PA  ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+956E=1E956E, ATmega3250P  ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+9581=1E9581, AT90CAN32    ,  32768, 1024, 2048, 256, 256,  4,  8, 16, 32
+9584=1E9584, AT90PWM324   ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+9584=1E9584, ATmega32M1   ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+9586=1E9586, ATmega32C1   ,  32768, 1024, 2048, 256, 128,  4,  8, 16, 32
+9587=1E9587, ATmega32U4   ,  32768, 1024, 2560, 256, 128,  4,  8, 16, 32
+9588=1E9588, ATmega32U6   ,  32768, 1024, 2560, 256, 128,  4,  8, 16, 32
+958A=1E958A, ATmega32U2   ,  32768, 1024, 1024, 256, 128,  4,  8, 16, 32
+9602=1E9602, ATmega64     ,  65536, 2048, 4096, 256, 256,  4,  8, 16, 32
+9602=1E9602, ATmega64A    ,  65536, 2048, 4096, 256, 256,  4,  8, 16, 32
+9603=1E9603, ATmega649    ,  65536, 2048, 4096, 256, 256,  4,  8, 16, 32
+9604=1E9604, ATmega6490   ,  65536, 2048, 4096, 256, 256,  4,  8, 16, 32
+9605=1E9605, ATmega645    ,  65536, 2048, 4096, 256, 256,  4,  8, 16, 32
+9606=1E9606, ATmega6450   ,  65536, 2048, 4096, 256, 256,  4,  8, 16, 32
+9608=1E9608, ATmega640    ,  65536, 4096, 8192, 512, 256,  4,  8, 16, 32
+9609=1E9609, ATmega644    ,  65536, 2048, 4096, 256, 256,  4,  8, 16, 32
+960A=1E960A, ATmega644P   ,  65536, 2048, 4096, 256, 256,  4,  8, 16, 32
+9681=1E9681, AT90CAN64    ,  65536, 2048, 4096, 256, 256,  4,  8, 16, 32
+9682=1E9682, AT90USB646   ,  65536, 2048, 4096, 256, 256,  4,  8, 16, 32
+9682=1E9682, AT90USB647   ,  65536, 2048, 4096, 256, 256,  4,  8, 16, 32
+9684=1E9684, ATmega64M1   ,  65536, 2048, 4096, 256, 256,  4,  8, 16, 32
+9686=1E9686, ATmega64C1   ,  65536, 2048, 4096, 256, 256,  4,  8, 16, 32
+9702=1E9702, ATmega128    , 131072, 4096, 4096, 256, 256,  4,  8, 16, 32
+9702=1E9702, ATmega128A   , 131072, 4096, 4096, 256, 256,  4,  8, 16, 32
+9703=1E9703, ATmega1280   , 131072, 4096, 8192, 512, 256,  4,  8, 16, 32
+9704=1E9704, ATmega1281   , 131072, 4096, 8192, 512, 256,  4,  8, 16, 32
+9705=1E9705, ATmega1284P  , 131072, 4096,16384, 256, 256,  4,  8, 16, 32
+9781=1E9781, AT90CAN128   , 131072, 4096, 4096, 256, 256,  4,  8, 16, 32
+9782=1E9782, AT90USB1286  , 131072, 4096, 8192, 256, 256,  4,  8, 16, 32
+9782=1E9782, AT90USB1287  , 131072, 4096, 8192, 256, 256,  4,  8, 16, 32
+9801=1E9801, ATmega2560   , 262144, 4096, 8192, 512, 256,  4,  8, 16, 32
+9802=1E9802, ATmega2561   , 262144, 4096, 8192, 512, 256,  4,  8, 16, 32

AVRootloader.asm

@@ -0,0 +1,94 @@
+#ifndef AVRootloader_H
+#define AVRootloader_H
+
+#include <avr/io.h>
+#include <avr/wdt.h>
+#include <avr/pgmspace.h>
+#include "intcast.h"
+
+// start bootloader with direct jump
+static inline void bootloader_start_jump(void) __attribute__((always_inline, noreturn));
+// start bootloader trough watchdog reset
+static inline void bootloader_start_wdt(void) __attribute__((always_inline, noreturn));
+// retrieve size in bytes of bootmsg
+static inline uint16_t bootmsg_size(void) __attribute__((always_inline));
+// retrieve flash address of bootmsg
+static inline uint32_t bootmsg_addr(void) __attribute__((always_inline));
+// retrieve application version number, if not supported return 0xFFFFFFFF
+static inline uint32_t get_appversion(void) __attribute__((always_inline));
+// read FLASH from address, size bytes into SRAM buffer
+static inline void read_flash(uint32_t address, uint16_t size, const uint8_t* buffer) __attribute__((always_inline));
+// write FLASH to address, size bytes from SRAM buffer, there is no limitation for alignment address and size
+static inline void write_flash(uint32_t address, uint16_t size, const uint8_t* buffer) __attribute__((always_inline));
+// write FLASH, but we can write into bootloader section if SPM is not locked by lockbi fuses
+static inline void write_flash_boot(uint32_t address, uint16_t size, const uint8_t* buffer) __attribute__((always_inline));
+// execute SPM opcode
+static inline void dospm(uint8_t command) __attribute__((always_inline));
+
+#define GETBOOTMSG_VEC      FLASHEND -9
+#define READFLASH_VEC       FLASHEND -7
+#define WRITEFLASH_VEC      FLASHEND -5
+#define DOSPM_VEC           FLASHEND -3
+#define BOOTSTART_VEC       FLASHEND -1
+
+
+void bootloader_start_jump(void) {
+
+    asm volatile("jmp -2");
+    for (;;);
+}
+
+void bootloader_start_wdt(void) {
+
+    wdt_reset();
+    _WD_CONTROL_REG = (1 << WDE) | (1 << _WD_CHANGE_BIT);
+    _WD_CONTROL_REG = (1 << WDE);
+    for (;;);
+}
+
+uint16_t bootmsg_size(void) {
+
+    uint16_t (*proc)(void) = (void*)GETBOOTMSG_VEC;
+    return H8(proc());
+}
+
+uint32_t bootmsg_addr(void) {
+
+    uint32_t (*proc)(void) = (void*)GETBOOTMSG_VEC;
+    uint32_t res = proc();
+    asm volatile("clr %D0" : "+&r" (res) : "r" (res));
+    return res;
+}
+
+uint32_t get_appversion(void) {
+
+    uint8_t pagecount;
+    read_flash(bootmsg_addr() + bootmsg_size() + 3, 1, &pagecount);
+    return pgm_read_dword((FLASHEND - 3) - SPM_PAGESIZE * pagecount);
+}
+
+void read_flash(uint32_t address, uint16_t size, const uint8_t* buffer) {
+
+    void (*proc)(uint32_t address, uint16_t size, const uint8_t* buffer) = (void*)READFLASH_VEC;
+    proc(address, size, buffer);
+}
+
+void write_flash(uint32_t address, uint16_t size, const uint8_t* buffer) {
+
+    void (*proc)(uint32_t address, uint16_t size, const uint8_t* buffer) = (void*)WRITEFLASH_VEC;
+    proc(address, size, buffer);
+}
+
+void write_flash_boot(uint32_t address, uint16_t size, const uint8_t* buffer) {
+
+    void (*proc)(uint32_t address, uint16_t size, const uint8_t* buffer) = (void*)WRITEFLASH_VEC;
+    asm volatile("ldi %D0, 0xAC" : "+&r" (address) : "r" (address));  // magic code, address |= 0xAC000000
+    proc(address, size, buffer);
+}
+
+void dospm(uint8_t command) {
+
+    void (*proc)(uint8_t command) = (void*)DOSPM_VEC;
+    proc(command);
+}
+#endif

AVRootloader.dev

@@ -0,0 +1,390 @@
+; copyright HR
+
+.equ	RX_DDR			= RX_PORT -1
+.equ	RX_PIN			= RX_PORT -2
+.equ	TX_DDR			= TX_PORT -1
+.equ	TX_PIN			= TX_PORT -2
+
+.if UseRS485
+.equ	DE_DDR			= DE_PORT -1
+.endif
+
+.if RX_PORT == TX_PORT && RX == TX
+.set	Use1Wire		= 1
+.else
+.set	Use1Wire		= 0
+.endif ; .if RX_PORT == TX_PORT && RX == TX
+
+.equ	UartLoop		= 29 			; don't change, except timing of putc, getc are changed
+.equ	BaudTolerance	= 3
+
+.if !UseAutobaud
+.set	Baudrate		= XTAL / BootBaudrate - UartLoop
+.endif ; .if !UseAutobaud
+
+.set	SUCCESS			= 0x30
+.set	ERRORVERIFY		= 0xC0
+.set	ERRORCOMMAND	= 0xC1
+.set	ERRORCRC		= 0xC2
+.set	ERRORBOUNDS		= 0xC3
+.set	ERRORCRYPT		= 0xC4
+.set	ERRORPROG		= 0xC5
+.set	ERRORVERSION	= 0xC6
+
+.if UseCrypt
+.set	SUCCESS			= SUCCESS | 0x01
+.if UseCryptFLASH
+.set	SUCCESS			= SUCCESS | 0x02
+.endif ; .if UseCryptFLASH
+.if UseCryptE2
+.set	SUCCESS			= SUCCESS | 0x04
+.endif ; .if UseCryptE2
+.endif ; .if UseCrypt
+.if UseVersioning
+.set	SUCCESS			= SUCCESS | 0x08
+.endif ; .if UseVersioning
+
+.equ	POLYNOM			= 0xA001		; CRC Polynom
+
+.def	feedl			= r4			; feedback pointer
+.def	feedh			= r5
+.def	zx				= r7			; RAMPZ			
+.def	crcl			= r8			; CRC 16Bit
+.def	crch			= r9
+.def	zerol			= r10			; zero
+.def	zeroh			= r11
+.def	baudl			= r12			; baudrate
+.def	baudh			= r13
+.def	sraml			= r14			; SRAM buffer start 
+.def	sramh			= r15
+.def	paral			= r16			; params for UART
+.def	parah			= r17
+.def	polyl			= r18			; Polynom CRC
+.def	polyh			= r19
+.def	cnt				= r20			; counter in UART loops
+.def	flag			= r21			; flag for crypto
+.def	cmdl			= r22			; commands
+.def	cmdh			= r23
+.def	cntl			= r24			; temp/baudrate
+.def	cnth			= r25
+
+.if FlashEnd > 0x7FFF
+.set	BigMega			= 1				; ATMega with big FLASH
+.else
+.set	BigMega			= 0
+.endif ; .if FlashEnd > 0x7FFF
+
+.ifdef FirstBootStart
+.set	BLS				= 1				; Bootloader Section supported
+.else
+.set	BLS				= 0
+.endif ; .ifdef FirstBootStart
+
+; calculate Bootloader start address
+.ifdef FirstBootStart
+.set	FirstBoot		= FirstBootStart
+.else
+.set	FirstBoot		= FlashEnd +1
+.endif ; .ifdef FirstBootStart
+
+.ifdef SecondBootStart
+.set	SecondBoot		= SecondBootStart
+.else
+.set	SecondBoot		= FlashEnd +1
+.endif ; .ifdef SecondBootStart
+
+.ifdef ThirdBootStart
+.set	ThirdBoot		= ThirdBootStart
+.else
+.set	ThirdBoot		= FlashEnd +1
+.endif ; .ifdef ThirdBootStart
+
+.ifdef FourthBootStart
+.set	FourthBoot		= FourthBootStart
+.else
+.set	FourthBoot		= FlashEnd +1
+.endif ; .ifdef FourthBootStart
+
+.if BootCodeSize
+.if BLS
+.set 	FlashSize		= FlashEnd +1
+.if FlashSize - FirstBoot >= BootCodeSize >> 1
+.equ 	BootStart		= FirstBoot
+.message "Please program Boot Fuse to First Boot Start !"
+.elif FlashSize - SecondBoot >= BootCodeSize >> 1
+.equ 	BootStart		= SecondBoot
+.message "Please program Boot Fuse to Second Boot Start !"
+.elif FlashSize - ThirdBoot >= BootCodeSize >> 1
+.equ 	BootStart		= ThirdBoot
+.message "Please program Boot Fuse to Third Boot Start !"
+.elif FlashSize - FourthBoot >= BootCodeSize >> 1
+.equ 	BootStart		= FourthBoot
+.message "Please program Boot Fuse to Fourth Boot Start !"
+.else
+.equ 	BootStart		= 0
+.error "BootStart is undefinied !"
+.endif ; .if FlashSize ...
+.else
+.set 	FlashSize		= ((FlashEnd +1) * 2 - BootCodeSize) >> 1
+.equ 	BootStart		= FlashSize - FlashSize % PageSize
+.message "Compile Bootloader without Boot Section !"
+.endif ; .if BLS
+.else
+.if (FLASHEND > 1023)
+.equ 	BootStart		= ((FlashEnd +1) * 2 - 2048) / 2
+.else
+.equ 	BootStart		= 0
+.endif
+.message "Please set used CSEG to BootSize !"
+.endif ; .if BootCodeSize
+
+; fix bug with parsing HEX files in AVRStudio 4.16
+.if BootCodeSize
+.org 0
+.db		0xFF, 0xFF
+.endif
+
+.set	BootPages		= (FlashEnd +1 - BootStart) / PageSize
+
+.if UseVersioning  
+.if BLS
+.set	AppVerAddr		= BootStart * 2 - 4		
+.else
+.set	AppVerAddr		= BootStart * 2 - 6
+.endif ; .if BLS
+.endif ; .if UseVersioning  
+
+; examine special handling for SPM
+.if BLS && (SIGNATURE_000 == 0x1e)
+.if (SIGNATURE_001 == 0x94) && (SIGNATURE_002 == 0x01)  ; ATmega161
+.set	SPMspecial		= 1
+.endif
+.if (SIGNATURE_001 == 0x94) && (SIGNATURE_002 == 0x02)  ; ATmega163
+.set	SPMspecial		= 2
+.endif
+.if (SIGNATURE_001 == 0x95) && (SIGNATURE_002 == 0x01)  ; ATmega323
+.set	SPMspecial		= 3
+.endif
+.endif
+
+; BootMode flags
+.if UseBootMode == 1
+.set	BootModeFlag	= PORF
+.elif UseBootMode == 2
+.set	BootModeFlag	= EXTRF
+.elif UseBootMode == 3
+.set	BootModeFlag	= WDRF
+.elif UseBootMode == 4
+.ifndef USBRF
+.error "Device provable do not support USB reset, take a look into datasheet and include file if USBRF is defined"
+.else
+.set	BootModeFlag	= USBRF
+.endif
+.endif 
+
+.set ResetFlags = (1 << PORF) | (1 << EXTRF) | (1 << WDRF)
+.ifdef BORF
+.set ResetFlags = ResetFlags | (1 << BORF)
+.endif
+.ifdef JTRF
+.set ResetFlags = ResetFlags | (1 << JTRF)
+.endif
+.ifdef BODRF
+.set ResetFlags = ResetFlags | (1 << BODRF)
+.endif
+.ifdef OCDRF
+.set ResetFlags = ResetFlags | (1 << OCDRF)
+.endif
+.ifdef USBRF
+.set ResetFlags = ResetFlags | (1 << USBRF)
+.endif
+
+
+; some redefinition of register names or bits
+.ifndef	MCUSR
+.ifndef MCUCSR
+.error "no definition for MCU Control Status Register found, look into AVRootloader.inc"
+.else
+.equ	MCUSR			= MCUCSR
+.endif
+.endif ; .ifndef	MCUCSR
+
+.ifndef	WDCE
+.ifndef WDDE
+.equ	WDCE			= WDTOE	
+.else
+.equ	WDCE			= WDDE
+.endif ; .ifndef WDDE
+.endif ; .ifndef WDCE
+
+.ifndef	WDTCR
+.equ	WDTCR			= WDTCSR
+.endif ; .ifndef WDTCR
+
+.ifndef	SPMCSR
+.equ	SPMCSR			= SPMCR
+.endif ; .ifndef SPMCSR
+
+.ifndef	RWWSRE
+.ifdef	ASRE
+.equ	RWWSRE			= ASRE
+.endif ; .ifdef	ASRE
+.endif ; .ifndef RWWSRE
+
+.ifndef	SPMEN
+.equ	SPMEN			= SELFPRGEN
+.endif ; .ifndef SPMEN
+
+
+.ifndef EEMWE
+.equ	EEMWE			= EEMPE
+.endif ; .ifndef EEMWE
+
+.ifndef EEWE
+.equ	EEWE			= EEPE
+.endif ; .ifndef EEWE
+
+.ifndef EEARL
+.equ	EEARL			= EEAR	
+.endif ; .ifndef EEARL
+
+; macros
+.macro	xout
+.ifdef @0
+.if	@0 > 0x3F
+	sts	@0, @1
+.else
+	out	@0, @1
+.endif
+.endif
+.endmacro
+
+.macro	xin
+.ifdef @1
+.if	@1 > 0x3F
+	lds	@0, @1
+.else
+	in	@0, @1
+.endif
+.endif
+.endmacro
+
+.macro	xwdr
+.if UseWDR
+		wdr
+.endif ; .if UseWDR
+.endmacro
+
+.macro	xlpm
+.if BigMega
+        elpm    @0, @1
+.else
+        lpm     @0, @1
+.endif
+.endmacro
+
+.macro	jmpapp
+.if BLS
+		rjmp	FLASHEND +1							; run application
+.elif BootStart
+		rjmp	BootStart -1						; run application
+.else
+		rjmp	BootStart							; dummy
+.endif ; .if BLS
+.endmacro
+
+.macro	bjmp
+.if @1		
+		rjmp	@0
+.else
+		ret
+.endif
+.endmacro
+
+.macro  rx_0
+.if UseUartInvert
+		sbic    RX_PIN, RX			
+.else
+		sbis    RX_PIN, RX			
+.endif ; .if UseUartInvert
+.endmacro
+
+.macro  rx_1
+.if UseUartInvert
+		sbis    RX_PIN, RX			
+.else
+		sbic    RX_PIN, RX			
+.endif ; .if UseUartInvert
+.endmacro
+
+
+.macro tx_1
+
+.if (RX != TX) && (RX_PORT == TX_PORT)
+.if UseUartInvert
+.set	tx1 = (1 << RX)
+.else
+.set	tx1 = (1 << TX) | (1 << RX)
+.endif ; .if UseUartInvert
+.elif UseUartInvert && !Use1Wire
+.set	tx1 = 0
+.else
+.set	tx1 = (1 << TX)
+.endif ; .if (RX != TX) && (RX_PORT == TX_PORT)
+.ifdef DE_PORT
+.if !UseRS485Invert && (DE_PORT == TX_PORT)
+.set	tx1 = tx1 | (1 << DE)
+.endif 
+.endif
+		ldi		cnth, tx1
+.endmacro
+
+.macro tx_0
+.if (RX != TX) && (RX_PORT == TX_PORT)
+.if UseUartInvert
+.set	tx0 = (1 << TX) | (1 << RX)
+.else
+.set	tx0 = (1 << RX)
+.endif ; .if UseUartInvert
+.elif UseUartInvert && !Use1Wire
+.set	tx0 = (1 << TX)
+.else
+.set	tx0 = 0
+.endif ; .if (RX != TX) && (RX_PORT == TX_PORT)
+.ifdef DE_PORT
+.if !UseRS485Invert && (DE_PORT == TX_PORT)
+.set	tx0 = tx0 | (1 << DE)
+.endif 
+.endif
+		ldi		cnth, tx0
+.endmacro
+
+
+.macro tx_out
+.if Use1Wire
+		xout	TX_DDR, cnth						
+.else
+		xout	TX_PORT, cnth						
+.endif ; .if Use1Wire
+.endmacro
+
+.macro	de_0
+.if UseRS485
+.if UseRS485Invert
+		sbi		DE_PORT, DE
+.else
+		cbi		DE_PORT, DE
+.endif
+.endif
+.endmacro
+
+.macro  de_1
+.if UseRS485
+.if UseRS485Invert
+		cbi		DE_PORT, DE
+.else
+		sbi		DE_PORT, DE
+.endif
+.endif
+.endmacro
+

AVRootloader.dll

@@ -0,0 +1,77 @@
+[System]
+Sign=BOOTLOADER
+Port=AUTO
+Baudrate=115200
+ConnectTrials=3
+FLASH=
+EEPROM=
+ASMFile=AVRootloader.asm
+Erase=1
+Verify=1
+Protocol=0
+Password=
+AppCmd=
+AppCmdResponse=
+AppVersion=$01020000
+AppVersionFlag=$0C
+ACYInfo=
+
+[Timeouts]
+Connect=0
+Base=50
+Erase=10
+Flash=15
+Eeprom=10
+Buffer=1
+AppCmd=0
+KeepAlive=250
+MaxPacketSize=0
+RTSPulse=0
+RTSInterval=0
+Options=0
+
+; Timeouts in Millisekunden
+; Base = Minimum Timeout für 1 Zeichen über UART, bei hohen Baudraten stellt dieser Wert das Minimum an Timeout dar
+; Erase = Timeout zum Löschen einer FLASH Page, normalerweise 5 ms laut Datenblätter
+; Flash = Timeout zum Löschen und Programmieren eienr FLASH Page, normalerweise 2*5ms
+; Eeprom = Timeout zum Programmieren eines Bytes im EEPROM, normalerweise 5 ms
+; Buffer = Timeout beim Warten auf ein Fehlercodebyte beim Schreiben von Bufferdaten, sollte mit 1ms immer gehen
+; RTSPulse = PC-Sofwtare pulst für RTSPulse Millisekunden die RTS Leitung, bei RTSPulse=0 ist das deaktiviert
+; bei RTSPulse > 0 wird von HIGH->LOW->HIGH und bei RTSPulse < 0 von LOW->HIGH->LOW gepulst.
+; Bsp: RTSPulse=20 bedeutet HIGH->20ms LOW ->HIGH
+; RTSInterval, wenn RTSPulse <> 0 ist bestimmt dieser Wert in welchem Interval das Pulsen von RTS erfolgen soll.
+; Beim Wert 0 wird nur einmalig beim Verbindungsaufbau RTS gepulst. Beim Wert 1 vor jedem einzlenen Connect Versuch zum AVR.
+; Bei Wert 2 jedes zweitemal usw. Ein Wert von 4 bedeutet also das nach einem RTS Puls exakt 4 Connect Versuche folgen 
+; bis es wieder von vorne losgeht.
+
+[GUI]
+Left=601
+Top=241
+Width=563
+Height=513
+
+[Baudrates]
+0=2400
+1=4800
+2=9600
+3=14400
+4=19200
+5=28800
+6=38400
+7=56000
+8=57600
+9=115200
+10=128000
+11=230400
+12=256000
+13=921600
+
+[Signs]
+0=BOOTLOADER
+1=BOOT
+
+[FLASH]
+0=
+
+[EEPROM]
+0=

AVRootloader.exe

@@ -0,0 +1,259 @@
+; copyright HR
+; decryption code, XTEA with special double CBC ciphermode to get a CMAC, cipher message authentication code
+.nolist
+
+.undef	feedl
+.undef	feedh
+.undef	crcl
+.undef	crch
+.undef	paral
+.undef	parah
+.undef	polyl
+.undef	polyh
+.undef	zx
+.undef	cmdl
+.undef	cmdh
+.undef	cntl
+.undef	cnth
+
+.def	a0				= r0
+.def	a1				= r1
+.def	a2				= r2
+.def	a3				= r3 
+.def	b0				= r4			; feedl				
+.def	b1				= r5			; feedh
+.def	b2				= r6			
+.def	b3				= r7			; zx
+.def	t0				= r8			; crcl
+.def	t1				= r9			; crch
+;.def	zerol			= r10			; zerol
+;.def	zeroh			= r11			; zeroh
+;.def	baudl			= r12			; baudl
+;.def	baudh			= r13			; baudl
+;.def	sraml			= r14			; SRAM buffer start
+;.def	sramh			= r15
+.def	s0				= r16			; paral
+.def	s1				= r17			; parah
+.def	s2				= r18			; polyl, restored
+.def	s3				= r19			; polyh, restored
+;.def	cnt				= r20			; cnt
+;.def	flag			= r21			; flag
+.def	round			= r22			; cmdl
+.def	t4				= r23			; cmdh
+.def	t2				= r24			; cntl
+.def	t3				= r25			; cnth
+;.def	XL				= r26			; buffer_endl
+;.def	XH				= r27			; buffer_endh
+;.def	YL				= r28			; unused	
+;.def	YH				= r29			; unused	
+;.def	ZL				= r30			; overwritten Address
+;.def	ZH				= r31			; 	
+.list
+
+
+; XTEA decryption with spezial CBC feedback modus, final checksum/signature block with 24 Bit FLASH Address setup
+; SRAML points to start of buffer, SRAML-16 points to feedback, SRAML-8 points to buffer of next used feedback
+; X points after buffer
+; T flag = 0 = CMDL = 0xFE = decryption init, = 1 = CMDL = 0xFF = normal data decryption
+; cycles:
+; 698 * 8 Bytes -1 = 5583 one data block
+; + 98 for CMDL=0xFE=init
+; + 76 for CMDL=0xFF=data
+; thus average throughput by 8Mhz is 11kByte/sec
+
+decrypt:
+		movw	yl, sraml
+		sbiw	yl, 16
+		movw	sraml, yl
+		sbiw	xl, 16
+.if BigMega
+		ldi		cnt, byte3(BootKey * 2)
+		xout	RAMPZ, cnt
+.endif ; .if BigMega
+
+tea1:	ldi		cnt, 8
+		movw	zl, zerol				; zerol, z points to register file r0-r7 = a,b
+tea2:	ldd		t0, y +0				; buffer = feedback xor cipherblock
+		ldd     t1, y +16				; in next round buffer is feedback
+		eor		t0, t1
+		std		y +8, t0
+		st		z+, t1					; setup a,b = cipherblock
+		adiw	yl, 1
+		dec		cnt
+		brne	tea2
+
+		ldi		s0, 0x20				; sum = 32 * delta
+		ldi		s1, 0x37
+		ldi		s2, 0xef
+		ldi		s3,	0xc6
+
+		rcall	teadec					; first 16 rounds
+
+tea3:	ld		t0, z					; ciphertext = ciphertext xor feedback
+		ld		t1, y+
+		eor		t0, t1
+		st		z+, t0
+		dec		cnt
+		brne	tea3
+
+		rcall	teadec					; second 16 rounds
+
+tea4:	ld		t0, z+					; plaintext = ciphertext xor feedback
+		ld		t1, y
+		eor		t0, t1
+		st		y+, t0
+		dec		cnt
+		brne	tea4 
+
+		cp		yl, xl					; sram buffer end reached ?
+		cpc		yh, xh
+		brlo	tea1
+		ldi		s0, ERRORCRYPT			
+		brcs	tea7					; overflow, datasize not a multiple of 8
+
+		sbiw	yl, 8					; points to signature + dummy + address
+
+.if UseVersioning
+		brts	tea80			
+
+		ldi		zl, byte1(AppVerAddr)	; check version number
+		ldi		zh,	byte2(AppVerAddr)
+		ldi		cnt, 4
+		sbiw	yl, 4
+		ldi		s2, 0xFF
+		ldi		s3, 0xFF
+
+tea8:	ld		r0, y+					
+		xlpm	r1, z+
+		and		s3, r1
+		cpse	r0, s2
+		cpc		r0, r1
+		dec		cnt
+		brne	tea8
+
+		ldi		s0, ERRORVERSION
+		cpse	s3, s2
+		brcs	tea7
+		ldi		s0, ERRORCRYPT			
+tea80:
+.endif ;.if UseVersioning
+
+		ori		flag, 0x02				; success crypt
+
+		ldi		zl, byte1(BootKey * 2)
+		ldi		zh, byte2(BootKey * 2)
+		movw	xl, yl
+		ldi		cnt, 4					; check signature
+		brts	tea5
+		sbiw	zl, 4
+		ldi		cnt, 8					; check BootInfo and signature
+tea5:	ld		r0, y+
+		xlpm	r1, z+
+		cpse	r0, r1
+		clr		flag					; signature don't match
+		dec		cnt
+		brne	tea5
+
+		movw	b0, xl					; feedback
+
+		brtc	tea6
+		ldd		s1, y +0				; correct XH:XL = bufferend pointer for non-multiple-of-8 data
+		sub		xl, s1
+		sbc		xh, zerol
+		ldd		b3, y +1				; ZX:ZH:ZL, new FLASH/EEPROM Address, only valid if cmdl = 0xFF
+		ldd		zh, y +2
+		ldd		zl, y +3		
+
+tea6:	sbrc	flag, 1
+		ldi		s0, SUCCESS
+tea7:	ldi		s2, byte1(POLYNOM)		; restore CRC polynom
+		ldi		s3, byte2(POLYNOM)
+		rjmp	mai1
+
+
+; plain XTEA decryption
+teadec:	ldi		round, 32				; 16 round XTEA, r0-r7=a,b ciphertext
+		movw	t0, a0
+		movw	t2, a2
+
+dec1:   clr		t4						; t = (a shr 4) xor (a shl 5)
+		ldi		cnt, 3
+dec2:	lsl		t0
+		rol		t1
+		rol		t2
+		rol		t3
+		rol		t4
+		dec		cnt
+		brne	dec2
+
+		lsl		t0
+		eor		t0, t1
+		rol		t1
+		eor		t1, t2
+		rol		t2
+		eor		t2, t3
+		rol		t3
+		eor		t3, t4
+		
+		add		t0, a0					; t = ((a shr 4) xor (a shl 5)) + a
+		adc		t1, a1
+		adc		t2, a2
+		adc		t3, a3
+
+		ldi		zl, low(BootKey *2)
+		ldi		zh, high(BootKey *2)
+
+		sbrc	round, 0
+		rjmp	dec3
+
+		sbrc	s1, 3					; k = key[(sum shr 11) and 3]
+		adiw	zl, 4
+		sbrc	s1, 4
+		adiw	zl, 8
+	
+		rjmp	dec4
+
+dec3:	subi	s0, 0xB9				; sum = sum - delta
+		sbci	s1, 0x79	
+		sbci	s2, 0x37
+		sbci	s3, 0x9E
+
+		sbrc	s0, 0					; k = key[sum and 3]
+		adiw	zl, 4
+		sbrc	s0, 1
+		adiw	zl, 8
+	
+dec4:	xlpm	t4, z+					; t = t xor (sum + k)
+		add		t4, s0
+		eor		t0, t4
+		xlpm	t4, z+
+		adc		t4, s1
+		eor		t1, t4
+		xlpm	t4, z+
+		adc		t4, s2
+		eor		t2, t4
+		xlpm	t4, z+
+		adc		t4, s3
+		eor		t3, t4
+
+		sub		b0, t0					; b = b - t
+		sbc		b1, t1
+		sbc		b2, t2
+		sbc		b3, t3
+
+		movw	t0, b0					; b = a, a = b
+		movw	t2, b2
+		movw	b0, a0
+		movw	b2, a2
+		movw	a0, t0
+		movw	a2, t2		
+	
+		dec		round
+		brne	dec1
+
+		ldi		cnt, 8
+		movw	zl, zerol
+		sbiw	yl, 8
+
+		ret
+

AVRootloader.h

@@ -0,0 +1,259 @@
+.nolist
+; copyright HR
+; special functions to provide for application code access to FLASH
+; can be expanded with own functions and place a rjmp vector at end of this file
+
+; First calculate size of code to align code at end of FLASH, better solution possible ?
+
+; Align all follow function at end of FLASH get us to posibility to reprogram a new bootloader.
+; For minimal solutions use UseSpecialBootVect=1 to include a rjmp bootstart, rjmp dospm
+; vector and the dospm function at end of bootloader section. This cost 16 bytes of FLASH and
+; thus the last FLASH page should be always unchanged. With a own application and help of
+; dospm function can the remaining bootloader section repogrammed. Please remember that
+; all stuff like ISR blocking, waiting for EEPROM write finish and so on must be done in own
+; application that wants to update the bootloader (including sanity checks not to overwrite last FLASH page)
+; For more comfortable solution set UseSpecialWrite=1 and UseSpecialWriteBoot=1. Now with function
+; write_flash() a ways exists to write from SRAM buffer to any address on FLASH without to consider
+; page aligment or data size. If the application read access to bootloader section is prohibited by lockbits 
+; then set UseSpecialRead=1. Now with read_flash() it's possible to read the entire full flash.
+; These feature are only usefull on AVRs with bootloader sections. On Tiny AVRs there is always the possibility to
+; use SPM in application code.
+
+
+.set SpecialSize = 0
+
+.if UseSpecialWrite
+.set SpecialSize = SpecialSize +48
+.if UseSpecialWriteBoot
+.set SpecialSize = SpecialSize +5
+.endif
+.if BigMega
+.set SpecialSize = SpecialSize +4
+.endif
+.if BLS
+.set SpecialSize = SpecialSize +5
+.ifdef SPMSpecial
+.set SpecialSize = SpecialSize +3
+.endif
+.ifdef RWWSRE
+.set SpecialSize = SpecialSize +2
+.endif
+.else
+.set SpecialSize = SpecialSize +8
+.endif
+.if UseWDR
+.set SpecialSize = SpecialSize +1
+.endif
+.endif
+
+.if UseSpecialRead
+.set SpecialSize = SpecialSize +9
+.if BigMega
+.set SpecialSize = SpecialSize +1
+.endif
+.endif
+
+.if UseSpecialMsg
+.set SpecialSize = SpecialSize +5
+.endif
+
+; rjmp vector table
+.if UseSpecialWrite || UseSpecialRead || UseSpecialMsg
+.set SpecialSize = SpecialSize +5
+.elif UseSpecialBootVect
+.set SpecialSize = SpecialSize +1
+.if BLS
+.set SpecialSize = SpecialSize +1
+.endif
+.endif
+
+; dospm
+.if SpecialSize > 0
+.if BLS
+.set SpecialSize = SpecialSize +6
+.ifdef SPMSpecial
+.set SpecialSize = SpecialSize +3
+.endif
+.endif
+
+; align follow code at flash end
+.if BootCodeSize
+.org (FLASHEND +1) - SpecialSize
+.endif
+.endif ; .if SpecialSize > 0
+
+; end of size calculation
+.list
+
+
+.if UseSpecialMsg
+getbootmsg:
+; return address and size of BootMsg, can be used in application to read out BootMsg and follow datas
+		ldi		r22, byte1(BootMsg * 2)
+		ldi		r23, byte2(BootMsg * 2)
+		ldi		r24, byte3(BootMsg * 2)
+		ldi		r25, (BootInfo - BootMsg) * 2
+		ret
+.endif ;.if UseSpecialMsg
+
+
+.if UseSpecialRead
+readflash:
+; void readflash(uint32_t address, uint16_t size, const uint8_t* buffer);
+; r25:r24:r23:r22, r21:r20, r19:r18
+.if BigMega
+		xout	RAMPZ, r24
+.endif	
+		movw	zl, r22
+		movw	xl, r18
+		movw	r24, r20
+rf1:	sbiw	r24, 1
+		brcs	rf2
+		xlpm	r23, z+
+		st		x+, r23
+		rjmp	rf1
+rf2:	ret
+.endif ;.if UseSpecialRead
+
+
+.if UseSpecialWrite
+writeflash:
+; void write_flash(uint32_t address, uint16_t size, const uint8_t* buffer);
+; r25:r24:r23:r22, r21:r20, r19:r18
+
+.if PageSize * 2 > 256
+.error "PageSize is greater as 256 bytes, check programing loops"
+.endif
+
+		movw	zl, r22									; address to r24:Z
+		movw	xl, r18									; SRAM buffer to X
+		movw	r18, yl									; save Y to r18
+		movw	yl, r20									; size to Y
+		movw	r20, r16								; save r17:r16 to r21:r20
+		movw	r16, r24								;
+		xin		r23, SREG								; save SREG to r23
+		cli												; disable IRQs
+.if UseSpecialWriteBoot
+		clt												; set T flag if MSB of address is a magic to deactivate 
+		cpi		r17, 0xAC								; write cheks to bootloader section	
+		brne	wf1
+		set		
+.endif ; .if UseSpecialWriteBoot
+
+wf1:	sbic 	EECR, EEWE								; wait for EEPROM
+		rjmp 	wf1
+
+		andi	r22, PageSize *2 -1						; align address
+		sub		zl, r22
+
+wf2:	ldi		r17, PageSize
+.if UseSpecialWriteBoot
+		brts	wf3										; if T flag is set ignore sanity check
+.endif
+		cpi		zl, byte1(BootStart *2)					; sanity check to ensure not to overwrite bootloader
+		ldi		r24, byte2(BootStart *2)				
+		cpc		zh, r24
+.if BigMega
+		ldi		r24, byte3(BootStart * 2)
+		cpc		r16, r24
+.endif
+		brsh	wf8
+
+wf3:	ldi		r24, (1 << SPMEN)
+.if BigMega
+		xout	RAMPZ, r16
+.endif
+wf4:	xlpm	r0, z+									; first load word from FLASH
+		xlpm	r1, z
+		sbiw	z, 1
+		sbiw	yl, 0									; size = 0 ?
+		breq	wf7
+		cpi		r22, 1
+		brlo	wf5
+		breq	wf6
+		subi	r22, 2
+		rjmp	wf7
+wf5:	ld		r0, x+			
+		sbiw	yl, 1
+		breq	wf7
+wf6:	ld		r1, x+
+		sbiw	yl, 1
+		clr		r22
+wf7:	xwdr
+.if BLS
+		rcall	dospm									; fill FLASH buffer
+.else
+		xout	SPMCSR, r24
+		spm
+.endif
+		adiw	z, 2		
+		dec		r17										; PageSize
+		brne	wf4
+
+		subi	zl, byte1(PageSize *2)
+		sbci	zh, byte2(PageSize *2)
+.if BLS
+		ldi		r24, (1 << PGERS) | (1 << SPMEN)		; erase FLASH page
+		rcall	dospm
+		ldi		r24, (1 << PGWRT) | (1 << SPMEN)		; program FLASH page
+		rcall	dospm
+.ifdef RWWSRE
+		ldi		r24, (1 << RWWSRE) | (1 << SPMEN)		; unlock FLASH page
+		rcall	dospm
+.endif
+.else
+		ldi		r24, (1 << PGERS) | (1 << SPMEN)		; erase FLASH page
+		xout	SPMCSR, r24
+		spm
+		ldi		r24, (1 << PGWRT) | (1 << SPMEN)		; program FLASH page
+		xout	SPMCSR, r24
+		spm
+.endif
+		subi	zl, byte1(-PageSize *2)
+		sbci	zh, byte2(-PageSize *2)
+.if BigMega
+		sbci	r16, byte3(-PageSize *2)
+.endif
+		sbiw	yl, 0									; size = 0 ?
+		brne	wf2
+
+wf8:	clr		r1										; restore r1=zero
+		movw	yl, r18									; restore Y
+		movw	r16, r20								; restore r17:r16
+		xout	SREG, r23								; restore SREG
+		ret												
+.endif ;.if UseSpecialWrite
+
+
+; SPM helper function, put in here to support updates of bootloader code, programmed into last FLASH page
+; r25=cnth destroyed, r24=cntl unchanged
+.if BLS
+dospm:	xout	SPMCSR, r24
+		spm
+.ifdef SPMspecial
+.dw		$FFFF
+		nop
+.endif
+dspm1:	xin		r25, SPMCSR
+		sbrc	r25, SPMEN
+		rjmp	dspm1
+		ret
+.endif ; .if BLS
+
+
+.if UseSpecialWrite || UseSpecialRead || UseSpecialMsg
+; rjmp vectors for support from application code
+; can be expanded with own vectors to own code, look into AVRootloader.h how to call
+; please don't reorder this jump table, but you can expand it to own code
+; if you expand it remember to update above SpecialSize calculation
+		bjmp	getbootmsg, UseSpecialMsg				; rjmp getbootmsg if UseSpecial else ret
+		bjmp	readflash, UseSpecialRead
+		bjmp	writeflash, UseSpecialWrite
+		bjmp	dospm, BLS
+		rjmp	bootstart
+.elif UseSpecialBootVect
+.if BLS
+		rjmp	dospm
+.endif
+		rjmp	bootstart
+.endif

AVRootloader.inc

@@ -0,0 +1,37 @@
+#ifndef INTCAST_H
+#define INTCAST_H
+
+typedef union {
+  uint16_t word;
+  struct {
+    uint8_t a,b;
+  };
+} uint16_t_u;
+
+typedef union {
+  uint32_t dword;
+  struct {
+    uint8_t a,b,c,d;
+  };
+} uint32_t_u;
+
+typedef union {
+  uint32_t dword;
+  struct {
+    uint16_t a,b;
+  };
+} uint32_t_s;
+
+#define L8(v)    (((uint16_t_u)v).a)
+#define H8(v)    (((uint16_t_u)v).b)
+
+#define L16(v)   (((uint32_t_s)v).a)
+#define H16(v)   (((uint32_t_s)v).b)
+
+#define LL8(v)   (((uint32_t_u)v).a)
+#define LH8(v)   (((uint32_t_u)v).b)
+#define HL8(v)   (((uint32_t_u)v).c)
+#define HH8(v)   (((uint32_t_u)v).d)
+
+
+#endif