how to trace a microcontroller running it's app ?

address

on the

board without

servo

time with

this with

to sight

oops my reply went too early i had not finished so this is just continue of previos.

ok, i believe it. i thought maybe step through the real program in PAUMON with real feedback

my brain lapse/over active imagination/etc I see your point, the paulmonis not going to be doing any translation for me and certainly not clearing a path to all the I/O , i guess my hopes for paulmon (monitor) were too high

run

have the

:( alas another project i am working on

have built

which company

well i am trying to do this hobby style so probably will not progress to that point sorry to put a wrench in your potential windfall earnibngs :)

thanks for help and ideas Ian, robb

it's

"Paulmon"

and

to

program

run

require you to

will be a great

used. You

to various

parameters for

instructions.This will

instructions in the

letters. i.e

output.

the keys are

discover this....

basic OP codes

Thanks for the help and reply TT_Man,

I've started a bit down the path you suggest already. I printed out data sheets for all the onboard ICs for quick reference to what the inputs and outputs should look like. i started on creating a schematic/circuit diagram for the micro-board for understanding and easy lookup of interconnections.

i have dis-asembled the ROM code with a dis52 from the 8052 web site and i also used another dasmx130 that someone suggested but i get two different dis-assembles ?

one treats the (02096f) in the first 3 bytes as a (long jump to

0000 : 02 " " db 002H ;

so that can not be a good sign , and leads to confusion so i suppose i will need to hand dis-asemble aways and confirm which dis-assembler is more accurate.

Looking at some used books on 8051 by MacKenzie and others

Thanks again for advice TT_MAN, robb

Thanks Chris for the help and ideas, robb

run

you'll need a

do the

essentially

to do

is a good

cables and

target...

trace

a 2K

system.

E.E., with

analytical mind

Thanks Chris for the help and ideas, robb

it's

purpose

the

execution on the

preferably

in-circuit

logic analyzer

American-Arium) called

family, etc.

several 8031

exactly how the

our local

don't know

anymore...

Thanks Dave, lots of good info heer in usenet.

thanks again for info and reply, robb

I ran into quite a number of problems of that sort in APPLE II assembly code where whatever system generated the code would intersperse defined constants with the generated code. The disassembler would try to disassemble string constants and debugging data (such as function names, etc.) and would then miss the first instruction of the next function.

Sometimes you may have to look at instructions such as LJMP 096F and make sure that the bytes at 096F really are executable code.

It's little things like that which make disassembling and reverse engineering a non-trivial excercise. Which is OK by me as it paid the bills for almost half a year back in the '80s.

Mark Borgerson

If you have copied the rom then get an emulator and load the code. Then run step by step to know where it is going.

If you wish you can provide me a munged email id and I will send you the emulator, (freeware) which will show the ram, rom etc and you can see what happens at each step.

ClueLess, but not this time.