The following information has been submitted by Robert Prins (prino@onetel.net.uk), who writes: "After TI sent me a TI-95, it took me just about an hour to find a way of getting into the ROMs, despite the fact that TI built a check into the RCB function to disable access to addresses above 0c000 and a few weeks later, after getting a TMS7000 Family Data Manual, I dumped the stack and found the code that manages the access to the 4 0c000-0dfff pages. However, it was only after TI sent me a PC Interface that I wrote a disassembler and started the process of disassembling (easy) and commenting (pretty hard) the code."

ROM-C0.TXT	-	Tables from page 0
ROM-CD0.95U	-	Keystroke coded functions from page 0
ROM-CD1.95U	-	Keystroke coded functions from page 1
ROM-CD1.ASM	-	TMS7000 assembly language code from page 1
ROM-CD2.ASM	-	TMS7000 assembly language code from page 2
ROM-CD3.ASM	-	TMS7000 assembly language code from page 3
ROM-F.ASM	-	TMS7000 assembly language code from on-CPU ROM
FLAGBITS.95	-	Description of flagbits used in table in ROM-C0.TXT
FLAGS.95	-	Description of many more flags than in the manual
SBA'S.95	-	Description of many more SBA's than in the manual

Or, you can download the ZIP archive containing all of the above using FTP.