EmbeddedRelated.com
Forums
The 2024 Embedded Online Conference

Identify microprocessor from code.

Started by PowerOne June 18, 2008
Hi,
I want to identify a microprocessor from the code because
I dont have the micro number. This micro uses an EPROM 27C4001.

These are the first part of code staring from line 500h:
01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00
6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00
6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00
6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6
54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5
0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5
55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10

The micro has the part number B4F2398 but I can not find it
on the web.

I want to decompile the code.

Thank you.
On Jun 19, 10:04 am, PowerOne <salazar.wi...@gmail.com> wrote:
> Hi, > I want to identify a microprocessor from the code because > I dont have the micro number. This micro uses an EPROM 27C4001. > > These are the first part of code staring from line 500h: > 01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00 > 6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00 > 6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00 > 6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6 > 54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5 > 0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5 > 55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10 > > The micro has the part number B4F2398 but I can not find it > on the web. > > I want to decompile the code. > > Thank you.
are you sue the date you listed is code ? i do not think so, i think storing the code in a eeprom is a bad design if you want identity this microprocessor, maybe you should find some hint from it's pins and the mark on it surface. Simon
mengxipeng@gmail.com wrote:
> On Jun 19, 10:04 am, PowerOne <salazar.wi...@gmail.com> wrote: >> Hi, >> I want to identify a microprocessor from the code because >> I dont have the micro number. This micro uses an EPROM 27C4001. >> >> These are the first part of code staring from line 500h: >> 01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00 >> 6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00 >> 6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00 >> 6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6 >> 54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5 >> 0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5 >> 55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10 >> >> The micro has the part number B4F2398 but I can not find it >> on the web. >> >> I want to decompile the code. >> >> Thank you. > > are you sue the date you listed is code ? > i do not think so, > i think storing the code in a eeprom is a bad design > if you want identity this microprocessor, maybe you should find some > hint from it's pins and the mark on it surface. > > Simon
It is a 4meg EPROM , And it is a very common design. I am not sure how you can tell what the CPU is from a hex dump.
PowerOne wrote:

> These are the first part of code staring from line 500h: > 01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00 > 6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00 > 6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00 > 6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6 > 54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5 > 0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5 > 55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10
You have no way of identifying what is code, and what isn't. Also, do you know if this EPROM was half of a 16-bit wide ROM image - 4Mb is a lot for an 8-bit design)? And does the board use some sort of design protection, eg. scrambling bit lines or decrypting EPROM data using a PAL? Do you have schematics? Also, some manufacturers supplied custom variations of micros with masked bootstrap roms and even built-in encryption, most of which also had custom part numbers. For some common micros, an experienced disassembler with enough data can recognise code areas of his/her favourite micro (eg. I could probably do so with Z80 code), but with so little info and (I'm assuming) experience I don't like your chances. Regards, -- Mark McDougall, Engineer Virtual Logic Pty Ltd, <http://www.vl.com.au> 21-25 King St, Rockdale, 2216 Ph: +612-9599-3255 Fax: +612-9599-3266
Neil wrote:
> > I am not sure how you can tell what the CPU is from a hex dump.
Oh one can if one speaks the language. Or has spoken it, that is... I would have known instantly if it had been a 6800 or a 6809 - although I have not spoken much of these languages for well over a decade. So it is not one of these (and not a HC11 either, which is an enhanced 6800). Someone else might know what it is - unless it is some newer core which noone has ever dealt with manually... Didi ------------------------------------------------------ Dimiter Popoff Transgalactic Instruments http://www.tgi-sci.com ------------------------------------------------------ http://www.flickr.com/photos/didi_tgi/sets/72157600228621276/ Original message: http://groups.google.com/group/comp.arch.embedded/msg/cad2e11aaab78ac6?dmode=source
PowerOne wrote:
> Hi, > I want to identify a microprocessor from the code because > I dont have the micro number. This micro uses an EPROM 27C4001. > > These are the first part of code staring from line 500h: > 01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00 > 6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00 > 6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00 > 6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6 > 54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5 > 0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5 > 55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10 > > The micro has the part number B4F2398 but I can not find it > on the web. > > I want to decompile the code. > > Thank you.
Take a picture of the board, put it up on the web somewhere, and link to it. The support chips, or board layout may give enough of a clue to someone experienced with the board. When the choice is minimal, some decent answers may fall out. Don... -- Don McKenzie Site Map: http://www.dontronics.com/sitemap E-Mail Contact Page: http://www.dontronics.com/email Intelligent 2.83" AMOLED with touch screen for micros: http://www.dontronics-shop.com/product.php?productid=16699
PowerOne a &#4294967295;crit :
> Hi, > I want to identify a microprocessor from the code because > I dont have the micro number. This micro uses an EPROM 27C4001. > > These are the first part of code staring from line 500h: > 01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00 > 6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00 > 6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00 > 6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6 > 54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5 > 0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5 > 55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10 > > The micro has the part number B4F2398 but I can not find it > on the web. > > I want to decompile the code. >
H8300, possibly http://www.bi.a.u-tokyo.ac.jp/~uaa/gomitext/2007/20071021/timer-h8300.txt
"PowerOne" <salazar.willy@gmail.com> wrote in message 
news:f9b1c9eb-15fe-4a23-adbf-ebe147222406@79g2000hsk.googlegroups.com...
> Hi, > I want to identify a microprocessor from the code because > I dont have the micro number. This micro uses an EPROM 27C4001. > > These are the first part of code staring from line 500h: > 01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00 > 6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00 > 6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00 > 6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6 > 54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5 > 0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5 > 55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10 > > The micro has the part number B4F2398 but I can not find it > on the web.
Looks a bit like Hitachi H8! (5470 == RTS, 6D7{0x} POP, 6DF{0x} PUSH. ) -- Stuart
In comp.arch.embedded,
mengxipeng@gmail.com <mengxipeng@gmail.com> wrote:
> On Jun 19, 10:04 am, PowerOne <salazar.wi...@gmail.com> wrote: >> Hi, >> I want to identify a microprocessor from the code because >> I dont have the micro number. This micro uses an EPROM 27C4001. >> >> These are the first part of code staring from line 500h: >> 01 00 6D F5 52 E5 6D 7D 6D F6 52 D6 09 65 01 00 >> 6D 76 52 E6 09 5E 54 70 01 00 6D F5 0F E5 01 00 >> 6D 76 55 5C 0F D6 54 70 01 00 6D F5 0F E5 01 00 >> 6D 76 0F E6 4B 0C 0F D5 4A 10 17 B5 55 42 17 B6 >> 54 70 17 B6 0F D5 4A F4 17 B5 40 34 01 00 6D F5 >> 0F E5 01 00 6D 76 0F E6 4B 0C 0F D5 4A 02 17 B5 >> 55 1E 0F D6 54 70 17 B6 0F D5 4A 02 17 B5 55 10 >> >> The micro has the part number B4F2398 but I can not find it >> on the web. >> >> I want to decompile the code. >> >> Thank you. > > are you sue the date you listed is code ? > i do not think so, > i think storing the code in a eeprom is a bad design > if you want identity this microprocessor, maybe you should find some > hint from it's pins and the mark on it surface.
Why would storing code in EEPROM be bad design? Furthermore, this code is stored in EPROM (one 'E'). This used to be the defacto standard for storing code until FLASH chips and controllers with big internal FLASH became common. Starting from 500h sound a bit funny though, most CPU's start executing from zero or from their highest address. If there was any deliberate attempt to hide the type of processor or otherwise hinder reverse engineering, data- and addressbusses may have been mixed up as well. -- Stef (remove caps, dashes and .invalid from e-mail address to reply by mail)
I will try to get the picture.
The package type is TQFP (Thin Quad Flat Pack)
I don't have schematic.

Hitachi has a Mark but this one don't.

The 2024 Embedded Online Conference