Re: [time-nuts] FE-5680A firmware dump (at last!)

2012-11-08 Thread Elio C
From: paul swed paulswedb@... Just downloaded the information. The schematic really is shaping up very nicely. On the dumps any suggestion for looking at them? You have to use an 8051 disassembler to look at the FLASH dump: I have been using IDA

Re: [time-nuts] FE-5680A firmware dump (at last!)

2012-11-08 Thread paul swed
I have no idea on a free disassembler. But there has to be one. Will look later tonight. Regards Paul. On Thu, Nov 8, 2012 at 8:44 AM, Elio C elio...@gmail.com wrote: From: paul swed paulswedb@... Just downloaded the information. The schematic really is shaping up very nicely. On the

Re: [time-nuts] FE-5680A firmware dump (at last!)

2012-11-08 Thread Azelio Boriani
I have found this: http://home.earthlink.net/~davesullins/software/dis51.html not tested, but it seems good On Thu, Nov 8, 2012 at 3:12 PM, paul swed paulsw...@gmail.com wrote: I have no idea on a free disassembler. But there has to be one. Will look later tonight. Regards Paul. On Thu,

Re: [time-nuts] FE-5680A firmware dump (at last!)

2012-11-08 Thread Chuck Harris
http://lmgtfy.com/?q=8051+disassembler paul swed wrote: I have no idea on a free disassembler. But there has to be one. Will look later tonight. Regards Paul. On Thu, Nov 8, 2012 at 8:44 AM, Elio C elio...@gmail.com wrote: From: paul swed paulswedb@... Just downloaded the information. The

Re: [time-nuts] FE-5680A firmware dump (at last!)

2012-11-08 Thread Elio C
http://lmgtfy.com/?q=8051+disassembler http://lmgtfy.com/?q=8051+disassembler Dear Chuck, I appreciate your ironic comment, but I was really serious regarding the suggestions for a 8051 disassembler for several reasons: - I think I'm already able to use Google - I have very few time to spare

Re: [time-nuts] FE-5680A firmware dump (at last!)

2012-11-08 Thread Chuck Harris
Elio, The problem with diassemblers is they only do what the author needed. And, different people have different needs, and different ideas of what is best. I find that I use different disassemblers at different times. Some handle one problem very well, others handle others better. For a

Re: [time-nuts] FE-5680A firmware dump (at last!)

2012-11-08 Thread Chris Albertson
On Thu, Nov 8, 2012 at 7:32 AM, Chuck Harris cfhar...@erols.com wrote: If I need something different from what one of the open source projects can supply, I put on my coding hat and do it my way. That is the major advantage of Open Source. If the program does not have some feature

[time-nuts] FE-5680A firmware dump

2012-11-08 Thread Murray Greenman
Disassemblers are hardly rocket science. They are only a parser with a pile of memory to remember labels. Why not write your own? I've written them in the past (a long way in the past, and I've written cross-assemblers too), so I don't see anything difficult about writing one for the 8051.

Re: [time-nuts] FE-5680A firmware dump

2012-11-08 Thread Poul-Henning Kamp
In message 69463259C455458FAE691C4D0DC8FF75@EEPC, Murray Greenman writes: Disassemblers are hardly rocket science. They are only a parser with a pile of memory to remember labels. Why not write your own? I wrote a framework for such reverse engineering, where the disassembler just has

Re: [time-nuts] FE-5680A firmware dump

2012-11-08 Thread paul swed
Murray not rocket science for some is to others and actually I would just like to know how the RB actually works. So I am staying clear of another endless project. Because I am not that smart. ;-) Regards Paul WB8TSL On Thu, Nov 8, 2012 at 11:56 AM, Murray Greenman denw...@orcon.net.nzwrote:

Re: [time-nuts] FE-5680A firmware dump

2012-11-08 Thread Elio C
Just to be clear, I thanks all of you for the warm suggestions on writing an 8051 disassembler by myself, but it is not exactly what I was asking for... I asked for some _suggestions_ on a reasonable good disassembler. Even if I have the expertise to write my own disassembler, I just do not want

Re: [time-nuts] FE-5680A firmware dump

2012-11-08 Thread Poul-Henning Kamp
In message CA+FhqXcodUuLvDMiHTs8Fe-grLPqYf3Q=m8k2hmxpqnc1+p...@mail.gmail.com, Elio C writes: Just to be clear, I thanks all of you for the warm suggestions on writing an 8051 disassembler by myself, but it is not exactly what I was asking for... I asked for some _suggestions_ on a

Re: [time-nuts] FE-5680A firmware dump

2012-11-08 Thread paul swed
Poul Tried looking this up and have pretty odd results. A link please On Thu, Nov 8, 2012 at 1:13 PM, Poul-Henning Kamp p...@phk.freebsd.dkwrote: In message CA+FhqXcodUuLvDMiHTs8Fe-grLPqYf3Q= m8k2hmxpqnc1+p...@mail.gmail.com, Elio C writes: Just to be clear, I thanks all of you for

Re: [time-nuts] FE-5680A firmware dump

2012-11-08 Thread Bob Camp
Hi A disassembler is only going to give you a steaming pile of assembly code. Assuming the origin of the code was a high(er) level language, you will have a major task ahead to turn it into anything rational. Writing a 8051 disassembler is likely a much easier project. Bob On Nov 8, 2012,

Re: [time-nuts] FE-5680A firmware dump

2012-11-08 Thread Poul-Henning Kamp
In message cad2jfahjxbmuvqvydvah90l9ntlpkoeapdytz5fbaa75ceg...@mail.gmail.com, paul swed writes: Poul Tried looking this up and have pretty odd results. A link please https://github.com/bsdphk/PyRevEng -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 p...@freebsd.org

Re: [time-nuts] FE-5680A firmware dump

2012-11-08 Thread Peter Gottlieb
I've done lots of disassembly and strongly prefer an interactive disassembler. The reason is that code frequently combines tables and instructions and if you just try to straight disassemble you will get large sections of nonsense which even extend beyond the data due to multiple byte

Re: [time-nuts] FE-5680A firmware dump

2012-11-08 Thread Poul-Henning Kamp
In message 509c3858.6050...@verizon.net, Peter Gottlieb writes: The reason is that code frequently combines tables and instructions [...] What I do in PyRevEng is try to automate this and many other steps. The disassembler gets pointed at an address were we know there is an

[time-nuts] FE-5680A firmware dump (at last!)

2012-11-07 Thread Elio C
I'm sorry for the long delay (due to personal reasons) but at last I was able to dump the contents of the PSD chips which contains the firmware of the FEI FE-5680A rubidium frequency standard! I have also updated the schematics with some more details/information. You will find the new schematics

Re: [time-nuts] FE-5680A firmware dump (at last!)

2012-11-07 Thread paul swed
Elio Just downloaded the information. The schematic really is shaping up very nicely. On the dumps any suggestion for looking at them? Thanks for your hard work. Regards Paul WB8TSL On Wed, Nov 7, 2012 at 7:24 PM, Elio C elio...@gmail.com wrote: I'm sorry for the long delay (due to personal

Re: [time-nuts] FE-5680A firmware dump

2012-02-17 Thread Elio Corbolante
From: Mike McCauley I've been considering ripping the firmware from the mcu as well. I've not got beyond the consideration stages, but i have all the equipment here at work. When you say that the read option is not available. is this because the chip has protection fuses enabled? Id like to

Re: [time-nuts] FE-5680A firmware dump

2012-02-17 Thread Azelio Boriani
In my opinion you don't need the power of an IDA-class disassembler to process an 8051-like code. The MCS51 family processors have only 128 or 256 bytes of RAM (and at most 64K ROM) and cannot host complex code. On Fri, Feb 17, 2012 at 10:27 AM, Elio Corbolante elio...@gmail.com wrote: From:

Re: [time-nuts] FE-5680A firmware dump

2012-02-17 Thread Javier Herrero
Don forget the PSD813 :) It provides 128KB Flash and 8KB RAM... so it can be a bit more complicated Regards, Javier El 17/02/2012 11:09, Azelio Boriani escribió: In my opinion you don't need the power of an IDA-class disassembler to process an 8051-like code. The MCS51 family processors have

Re: [time-nuts] FE-5680A firmware dump

2012-02-17 Thread Azelio Boriani
OK, then maybe there are ROM bank switching as the MCS51 can't execute beyon the 64K limit. It can be very challenging to follow a code that jumps between 64K ROM banks. Moreover the MCS51 has to address the external RAM by massive pointer use (the famous MOVX @DPTR,A and MOVX A,@DPTR

Re: [time-nuts] FE-5680A firmware dump

2012-02-17 Thread Bob Camp
-nuts-boun...@febo.com] On Behalf Of Azelio Boriani Sent: Friday, February 17, 2012 6:06 AM To: Discussion of precise time and frequency measurement Subject: Re: [time-nuts] FE-5680A firmware dump OK, then maybe there are ROM bank switching as the MCS51 can't execute beyon the 64K limit. It can be very

Re: [time-nuts] FE-5680A firmware dump

2012-02-17 Thread Azelio Boriani
...@febo.com] On Behalf Of Azelio Boriani Sent: Friday, February 17, 2012 6:06 AM To: Discussion of precise time and frequency measurement Subject: Re: [time-nuts] FE-5680A firmware dump OK, then maybe there are ROM bank switching as the MCS51 can't execute beyon the 64K limit. It can be very

Re: [time-nuts] FE-5680A firmware dump

2012-02-17 Thread Bob Camp
of precise time and frequency measurement Subject: Re: [time-nuts] FE-5680A firmware dump Maybe. Take into account that MCS51 OTP processors usually are 8K of code. I use, among the others, the AT89C55 that has 20K of flash ROM. It seems better to use a ROMless 8051 and place the code/tables in the PSD

Re: [time-nuts] FE-5680A firmware dump

2012-02-16 Thread Mike McCauley
El 07/02/2012 0:30, Elio Corbolante wrote: From: Steve .iteration69 at gmail.com I've been considering ripping the firmware from the mcu as well. I've not got beyond the consideration stages, but i have all the equipment here at work. When you say that the read option is not available. is

Re: [time-nuts] FE-5680A firmware dump

2012-02-14 Thread Elio Corbolante
From: Chris Albertson albertson.ch...@gmail.com Email some of the sellers in China and offer to buy a returned unit. they must have some On Mon, Feb 13, 2012 at 5:55 PM, EB4APL eb4...@cembreros.jazztel.es wrote: I don't mind sending something like $5 to a buy group and we'll have enough

Re: [time-nuts] FE-5680A firmware dump

2012-02-14 Thread EB4APL
Elio, Let us contribute to the buy. If you can receive money by Paypal it wold be very easy. Best regards, Ignacio, EB4APL El 14/02/2012 13:26, Elio Corbolante escribió: From: Chris Albertsonalbertson.ch...@gmail.com Email some of the sellers in China and offer to buy a returned unit.

Re: [time-nuts] FE-5680A firmware dump

2012-02-13 Thread EB4APL
I don't mind sending something like $5 to a buy group and we'll have enough with a few of us. But if I were Elio I'll not feel very happy using a working unit for this kind of use, I would try to not break anything and he is even talking of removing the programmable chips to read them in a

Re: [time-nuts] FE-5680A firmware dump

2012-02-13 Thread Chris Albertson
Email some of the sellers in China and offer to buy a returned unit. they must have some On Mon, Feb 13, 2012 at 5:55 PM, EB4APL eb4...@cembreros.jazztel.es wrote: I don't mind sending something like $5 to a buy group and we'll have enough with a few of us.  But if I were Elio I'll not feel

Re: [time-nuts] FE-5680A firmware dump

2012-02-12 Thread EB4APL
Hi, Has anybody tried to ask the guy who made the forensics in Youtube if he could send the remnants to Elio? He could make a very good use of them. Regards, Ignacio, EB4APL El 07/02/2012 0:30, Elio Corbolante wrote: From: Steve .iteratio...@gmail.com I've been considering ripping the

Re: [time-nuts] FE-5680A firmware dump

2012-02-12 Thread Peter Gottlieb
Better idea. Let's all donate a few bucks each and buy Elio an intact one. Peter On 2/12/2012 8:08 PM, EB4APL wrote: Hi, Has anybody tried to ask the guy who made the forensics in Youtube if he could send the remnants to Elio? He could make a very good use of them. Regards, Ignacio,

[time-nuts] FE-5680A firmware dump

2012-02-06 Thread Elio Corbolante
Unfortunately my programmer is only able to erase/program/verify the PSD chip. The read option is not available! :-( To dump the firmware I need to desolder the chip and prepare a dedicated testbed: before doing this on a working FE-5680A, is there anyone of you who want to sell me a *nonworking*

Re: [time-nuts] FE-5680A firmware dump

2012-02-06 Thread Steve .
I've been considering ripping the firmware from the mcu as well. I've not got beyond the consideration stages, but i have all the equipment here at work. When you say that the read option is not available. is this because the chip has protection fuses enabled? Also, what programmer do you have,

Re: [time-nuts] FE-5680A firmware dump

2012-02-06 Thread Elio Corbolante
From: Steve . iteratio...@gmail.com I've been considering ripping the firmware from the mcu as well. I've not got beyond the consideration stages, but i have all the equipment here at work. When you say that the read option is not available. is this because the chip has protection fuses