> I will try to get the picture.
> The package type is TQFP (Thin Quad Flat Pack)
> I don't have schematic.
Do you have an ohmmeter, pencil, paper, and time? If so, you can
generate a schematic. The old Tocom/General Instruments 5503 cable box
had a house numbered processor. I drew a schematic and then compared it
to all the standard micro pinouts I could find. Turned out it was a
Zilog Z8, and the address/data lines were scrambled.
Even a partial schematic showing the CPU to memory connections can be a
big help.
>
> Hitachi has a Mark but this one don't.
Reply by Wayne Farmer●June 24, 20082008-06-24
On Jun 22, 7:57=A0pm, Mark McDougall <ma...@vl.com.au> wrote:
> PowerOne wrote:
> > The board is from an Archade machine made in Spain.
>
> Do you mean "arcade"? Whay didn't you say it was so important earlier???
> I'm assuming this particular machine isn't yet implemented in MAME?
>
> A *lot* of arcade boards (depending on the era) used varying degrees of
> design protection, ranging from simply switching address/data lines or a
> simple xor-matrix PAL to custom encrypting processors with volatile key
> storage. Cross your fingers it's not the latter! ;)
>
> I'd run with the H8 suggestion first. Run it thru a disassembler and see
> if there are any areas that look sane (start with the reset vector address=
> of course). However, I'm pretty sure that there were a number of machines
> that used custom Hitachi processors for design protection. Is this the
> main game processor? I don't recall any games using H8 off the top of my
> head (I could be wrong), but rather using H8 parts as secondary processors=
> The board is from an Archade machine made in Spain.
Do you mean "arcade"? Whay didn't you say it was so important earlier???
I'm assuming this particular machine isn't yet implemented in MAME?
A *lot* of arcade boards (depending on the era) used varying degrees of
design protection, ranging from simply switching address/data lines or a
simple xor-matrix PAL to custom encrypting processors with volatile key
storage. Cross your fingers it's not the latter! ;)
I'd run with the H8 suggestion first. Run it thru a disassembler and see
if there are any areas that look sane (start with the reset vector address
of course). However, I'm pretty sure that there were a number of machines
that used custom Hitachi processors for design protection. Is this the
main game processor? I don't recall any games using H8 off the top of my
head (I could be wrong), but rather using H8 parts as secondary processors
for I/O controllers...
Regards,
--
Mark McDougall, Engineer
Virtual Logic Pty Ltd, <http://www.vl.com.au>
21-25 King St, Rockdale, 2216
Ph: +612-9599-3255 Fax: +612-9599-3266
Reply by ●June 20, 20082008-06-20
On Jun 19, 2:41 am, Mark McDougall <ma...@vl.com.au> wrote:
> For some common micros, an experienced disassembler with enough data can
> recognise code areas of his/her favourite micro (eg. I could probably do
> so with Z80 code), but with so little info and (I'm assuming) experience I
> don't like your chances.
I think it's kind of a fun question actually. Almost worth posting
some examples as intentional challenges to the group just for the fun
of it.
Sure, their are snippets that would be undecipherable, or very
difficult such as half of a 16 bit pair as mentioned, but I bet many
real world examples could be identified. At least by ancestry if not
by precise variant.
Reply by PowerOne●June 20, 20082008-06-20
The board is from an Archade machine made in Spain.
Reply by Robert Adsett●June 20, 20082008-06-20
In article <1af33$485a1ba2$54f63171$14124@publishnet.news-service.com>,
Stef says...
> In comp.arch.embedded,
> mengxipeng@gmail.com <mengxipeng@gmail.com> wrote:
> > On Jun 19, 10:04 am, PowerOne <salazar.wi...@gmail.com> wrote:
> >> Hi,
> >> I want to identify a microprocessor from the code because
> >> I dont have the micro number. This micro uses an EPROM 27C4001.
> >>
> >> These are the first part of code staring from line 500h:
> >> 01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00
> >> 6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00
> >> 6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00
> >> 6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6
> >> 54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5
> >> 0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5
> >> 55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10
> >>
> >> The micro has the part number B4F2398 but I can not find it
> >> on the web.
> >>
> >> I want to decompile the code.
> >>
> >> Thank you.
> >
> > are you sue the date you listed is code ?
> > i do not think so,
> > i think storing the code in a eeprom is a bad design
> > if you want identity this microprocessor, maybe you should find some
> > hint from it's pins and the mark on it surface.
>
> Why would storing code in EEPROM be bad design?
> Furthermore, this code is stored in EPROM (one 'E'). This used to be the
> defacto standard for storing code until FLASH chips and controllers with
> big internal FLASH became common.
>
> Starting from 500h sound a bit funny though, most CPU's start executing
> from zero or from their highest address.
It would be reasonable for a 80C196 variant. The reset address IIRC was
2080H. Executable code could be place before or after that with some
memory reserved for the micro's internal memory. The amount reserved
varies with the variant.
Robert
** Posted from http://www.teranews.com **
Reply by donald●June 19, 20082008-06-19
>> Hi,
>> I want to identify a microprocessor from the code because
>> I dont have the micro number. This micro uses an EPROM 27C4001.
>>
>>
>> The micro has the part number B4F2398 but I can not find it
>> on the web.
Ok, so whats on the outside of the box.
Did you just get a PCB without a box/case and power supply ??
donald
Reply by Mike Harrison●June 19, 20082008-06-19
On Wed, 18 Jun 2008 19:04:22 -0700 (PDT), PowerOne <salazar.willy@gmail.com> wrote:
>Hi,
>I want to identify a microprocessor from the code because
>I dont have the micro number. This micro uses an EPROM 27C4001.
>
>These are the first part of code staring from line 500h:
>01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00
>6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00
>6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00
>6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6
>54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5
>0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5
>55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10
>
>The micro has the part number B4F2398 but I can not find it
>on the web.
>
>I want to decompile the code.
>
>Thank you.
Why do you think that it is code, not just data in the eprom?
Could the micro have on-chip rom/flash?
Reply by CBFalconer●June 19, 20082008-06-19
PowerOne wrote:
>
> I will try to get the picture.
> The package type is TQFP (Thin Quad Flat Pack)
> I don't have schematic.
>
> Hitachi has a Mark but this one don't.
This makes no sense. If you want to post a followup via
groups.google.com, ensure you quote enough for the article to make
sense. Google is only an interface to Usenet; it's not Usenet
itself. Don't assume your readers can, or ever will, see any
previous articles.
More details at: <http://cfaj.freeshell.org/google/>
--
[mail]: Chuck F (cbfalconer at maineline dot net)
[page]: <http://cbfalconer.home.att.net>
Try the download section.
** Posted from http://www.teranews.com **
Reply by PowerOne●June 19, 20082008-06-19
I will try to get the picture.
The package type is TQFP (Thin Quad Flat Pack)
I don't have schematic.
Hitachi has a Mark but this one don't.