Hi,
I want to identify a microprocessor from the code because
I dont have the micro number. This micro uses an EPROM 27C4001.
These are the first part of code staring from line 500h:
01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00
6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00
6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00
6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6
54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5
0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5
55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10
The micro has the part number B4F2398 but I can not find it
on the web.
I want to decompile the code.
Thank you.
Reply by meng...@gmail.com●June 19, 20082008-06-19
On Jun 19, 10:04 am, PowerOne <salazar.wi...@gmail.com> wrote:
> Hi,
> I want to identify a microprocessor from the code because
> I dont have the micro number. This micro uses an EPROM 27C4001.
>
> These are the first part of code staring from line 500h:
> 01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00
> 6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00
> 6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00
> 6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6
> 54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5
> 0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5
> 55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10
>
> The micro has the part number B4F2398 but I can not find it
> on the web.
>
> I want to decompile the code.
>
> Thank you.
are you sue the date you listed is code ?
i do not think so,
i think storing the code in a eeprom is a bad design
if you want identity this microprocessor, maybe you should find some
hint from it's pins and the mark on it surface.
Simon
Reply by Neil●June 19, 20082008-06-19
mengxipeng@gmail.com wrote:
> On Jun 19, 10:04 am, PowerOne <salazar.wi...@gmail.com> wrote:
>> Hi,
>> I want to identify a microprocessor from the code because
>> I dont have the micro number. This micro uses an EPROM 27C4001.
>>
>> These are the first part of code staring from line 500h:
>> 01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00
>> 6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00
>> 6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00
>> 6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6
>> 54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5
>> 0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5
>> 55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10
>>
>> The micro has the part number B4F2398 but I can not find it
>> on the web.
>>
>> I want to decompile the code.
>>
>> Thank you.
>
> are you sue the date you listed is code ?
> i do not think so,
> i think storing the code in a eeprom is a bad design
> if you want identity this microprocessor, maybe you should find some
> hint from it's pins and the mark on it surface.
>
> Simon
It is a 4meg EPROM , And it is a very common design.
I am not sure how you can tell what the CPU is from a hex dump.
You have no way of identifying what is code, and what isn't. Also, do you
know if this EPROM was half of a 16-bit wide ROM image - 4Mb is a lot for
an 8-bit design)? And does the board use some sort of design protection,
eg. scrambling bit lines or decrypting EPROM data using a PAL? Do you have
schematics?
Also, some manufacturers supplied custom variations of micros with masked
bootstrap roms and even built-in encryption, most of which also had custom
part numbers.
For some common micros, an experienced disassembler with enough data can
recognise code areas of his/her favourite micro (eg. I could probably do
so with Z80 code), but with so little info and (I'm assuming) experience I
don't like your chances.
Regards,
--
Mark McDougall, Engineer
Virtual Logic Pty Ltd, <http://www.vl.com.au>
21-25 King St, Rockdale, 2216
Ph: +612-9599-3255 Fax: +612-9599-3266
Reply by Didi●June 19, 20082008-06-19
Neil wrote:
>
> I am not sure how you can tell what the CPU is from a hex dump.
Oh one can if one speaks the language. Or has spoken it, that is...
I would have known instantly if it had been a 6800 or a 6809 -
although
I have not spoken much of these languages for well over a decade.
So it is not one of these (and not a HC11 either, which is an enhanced
6800).
Someone else might know what it is - unless it is some newer core
which noone has ever dealt with manually...
Didi
------------------------------------------------------
Dimiter Popoff Transgalactic Instruments
http://www.tgi-sci.com
------------------------------------------------------
http://www.flickr.com/photos/didi_tgi/sets/72157600228621276/
Original message: http://groups.google.com/group/comp.arch.embedded/msg/cad2e11aaab78ac6?dmode=source
Reply by Don McKenzie●June 19, 20082008-06-19
PowerOne wrote:
> Hi,
> I want to identify a microprocessor from the code because
> I dont have the micro number. This micro uses an EPROM 27C4001.
>
> These are the first part of code staring from line 500h:
> 01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00
> 6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00
> 6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00
> 6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6
> 54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5
> 0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5
> 55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10
>
> The micro has the part number B4F2398 but I can not find it
> on the web.
>
> I want to decompile the code.
>
> Thank you.
"PowerOne" <salazar.willy@gmail.com> wrote in message
news:f9b1c9eb-15fe-4a23-adbf-ebe147222406@79g2000hsk.googlegroups.com...
> Hi,
> I want to identify a microprocessor from the code because
> I dont have the micro number. This micro uses an EPROM 27C4001.
>
> These are the first part of code staring from line 500h:
> 01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00
> 6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00
> 6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00
> 6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6
> 54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5
> 0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5
> 55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10
>
> The micro has the part number B4F2398 but I can not find it
> on the web.
Looks a bit like Hitachi H8! (5470 == RTS, 6D7{0x} POP, 6DF{0x} PUSH. )
--
Stuart
Reply by Stef●June 19, 20082008-06-19
In comp.arch.embedded,
mengxipeng@gmail.com <mengxipeng@gmail.com> wrote:
> On Jun 19, 10:04 am, PowerOne <salazar.wi...@gmail.com> wrote:
>> Hi,
>> I want to identify a microprocessor from the code because
>> I dont have the micro number. This micro uses an EPROM 27C4001.
>>
>> These are the first part of code staring from line 500h:
>> 01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00
>> 6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00
>> 6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00
>> 6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6
>> 54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5
>> 0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5
>> 55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10
>>
>> The micro has the part number B4F2398 but I can not find it
>> on the web.
>>
>> I want to decompile the code.
>>
>> Thank you.
>
> are you sue the date you listed is code ?
> i do not think so,
> i think storing the code in a eeprom is a bad design
> if you want identity this microprocessor, maybe you should find some
> hint from it's pins and the mark on it surface.
Why would storing code in EEPROM be bad design?
Furthermore, this code is stored in EPROM (one 'E'). This used to be the
defacto standard for storing code until FLASH chips and controllers with
big internal FLASH became common.
Starting from 500h sound a bit funny though, most CPU's start executing
from zero or from their highest address.
If there was any deliberate attempt to hide the type of processor or
otherwise hinder reverse engineering, data- and addressbusses may have
been mixed up as well.
--
Stef (remove caps, dashes and .invalid from e-mail address to reply by mail)
Reply by PowerOne●June 19, 20082008-06-19
I will try to get the picture.
The package type is TQFP (Thin Quad Flat Pack)
I don't have schematic.
Hitachi has a Mark but this one don't.
Signal Processing Engineer Seeking a DSP Engineer to tackle complex technical challenges. Requires expertise in DSP algorithms, EW, anti-jam, and datalink vulnerability. Qualifications: Bachelor's degree, Secret Clearance, and proficiency in waveform modulation, LPD waveforms, signal detection, MATLAB, algorithm development, RF, data links, and EW systems. The position is on-site in Huntsville, AL and can support candidates at 3+ or 10+ years of experience.