Decompiler help please

Guest
I'm pretty bsure this is a real long shot. I have looked online but
have not yet found something that will help. So I ask here.
The EPROM reader/programmer arrived yesterday and it works fine.
The UV EPROM eraser should be here in a day or two. Amazon apologized
for the delay. So I can copy the EPROMs just fine but I would really
like the ladder programs so that I can make some changes to the
machine.
I understand that the decompiled ladder will noit have mnemonics
but maybe I can decipher it anyway.
The control in question is a FANUC 3T.
Thanks,
Eric
 
On 22/11/19 12:35 pm, etpm@whidbey.com wrote:
I'm pretty bsure this is a real long shot. I have looked online but
have not yet found something that will help. So I ask here.
The EPROM reader/programmer arrived yesterday and it works fine.
The UV EPROM eraser should be here in a day or two. Amazon apologized
for the delay. So I can copy the EPROMs just fine but I would really
like the ladder programs so that I can make some changes to the
machine.
I understand that the decompiled ladder will noit have mnemonics
but maybe I can decipher it anyway.
The control in question is a FANUC 3T.
Thanks,
Eric
Click to expand...

How in heck do yu expect help with a decompiler when you haven't told
anyone what type of CPU it is?
 
On 11/21/19 6:09 PM, Clifford Heath wrote:
On 22/11/19 12:35 pm, etpm@whidbey.com wrote:
    I'm pretty bsure this is a real long shot. I have looked online but
have not yet found something that will help. So I ask here.
    The EPROM reader/programmer arrived yesterday and it works fine.
The UV EPROM eraser should be here in a day or two. Amazon apologized
for the delay. So I can copy the EPROMs just fine but I would really
like the ladder programs so that I can make some changes to the
machine.
    I understand that the decompiled ladder will noit have mnemonics
but maybe I can decipher it anyway.
    The control in question is a FANUC 3T.
Thanks,
Eric


How in heck do yu expect help with a decompiler when you haven't told
anyone what type of CPU it is?
Click to expand...
It's even harder...ladder logic isn't a "cpu machine language" as such,
it's an interpreter running in some native cpu machine language...so
there would be a whole other layer of translation involved in order to
produce anything a human might be able to comprehend. Unless your
computer is made from relays...but why bother.
 
On 11/21/19 8:09 PM, Clifford Heath wrote:
On 22/11/19 12:35 pm, etpm@whidbey.com wrote:
    I'm pretty bsure this is a real long shot. I have looked online but
have not yet found something that will help. So I ask here.
    The EPROM reader/programmer arrived yesterday and it works fine.
The UV EPROM eraser should be here in a day or two. Amazon apologized
for the delay. So I can copy the EPROMs just fine but I would really
like the ladder programs so that I can make some changes to the
machine.
    I understand that the decompiled ladder will noit have mnemonics
but maybe I can decipher it anyway.
    The control in question is a FANUC 3T.
Thanks,
Eric


How in heck do yu expect help with a decompiler when you haven't told
anyone what type of CPU it is?
Click to expand...

Please try to pay attention.
"The control in question is a FANUC 3T."



--
"I am a river to my people."
Jeff-1.0
WA6FWi
http:foxsmercantile.com
 
On 22/11/19 1:33 pm, Fox's Mercantile wrote:
On 11/21/19 8:09 PM, Clifford Heath wrote:
On 22/11/19 12:35 pm, etpm@whidbey.com wrote:
    I'm pretty bsure this is a real long shot. I have looked online but
have not yet found something that will help. So I ask here.
    The EPROM reader/programmer arrived yesterday and it works fine.
The UV EPROM eraser should be here in a day or two. Amazon apologized
for the delay. So I can copy the EPROMs just fine but I would really
like the ladder programs so that I can make some changes to the
machine.
    I understand that the decompiled ladder will noit have mnemonics
but maybe I can decipher it anyway.
    The control in question is a FANUC 3T.
Thanks,
Eric


How in heck do yu expect help with a decompiler when you haven't told
anyone what type of CPU it is?

Please try to pay attention.
"The control in question is a FANUC 3T."
Click to expand...

That's the packaged controller.
It contains a CPU.
The CPU interprets some ladder codes.

It's highly unlikely that the information required to decode the EPROM
has ever been published. This sort of thing is usually trade secret.

If the CPU is known, and the interpreter ROM is read, there's some
possibility of using a decompiler.
 
On Thursday, November 21, 2019 at 8:23:03 PM UTC-8, Clifford Heath wrote:
On 22/11/19 1:33 pm, Fox's Mercantile wrote:
On 11/21/19 8:09 PM, Clifford Heath wrote:
On 22/11/19 12:35 pm, etpm@whidbey.com wrote:

    I understand that the decompiled ladder will noit have mnemonics
but maybe I can decipher it anyway.
    The control in question is a FANUC 3T.

How in heck do yu expect help with a decompiler when you haven't told
anyone what type of CPU it is?

"The control in question is a FANUC 3T."
Click to expand...

A manual found online says the 3T master board uses an 8086, so it'll decompile
as an 8088 would (different bus, but same opcodes).
 
On Fri, 22 Nov 2019 13:09:58 +1100, Clifford Heath
<no.spam@please.net> wrote:

On 22/11/19 12:35 pm, etpm@whidbey.com wrote:
I'm pretty bsure this is a real long shot. I have looked online but
have not yet found something that will help. So I ask here.
The EPROM reader/programmer arrived yesterday and it works fine.
The UV EPROM eraser should be here in a day or two. Amazon apologized
for the delay. So I can copy the EPROMs just fine but I would really
like the ladder programs so that I can make some changes to the
machine.
I understand that the decompiled ladder will noit have mnemonics
but maybe I can decipher it anyway.
The control in question is a FANUC 3T.
Thanks,
Eric


How in heck do yu expect help with a decompiler when you haven't told
anyone what type of CPU it is?
Click to expand...
Well, that's why I'm asking for help. I know hardly anything about
this stuff.
Eric
 
On Thu, 21 Nov 2019 23:59:31 -0800 (PST), whit3rd <whit3rd@gmail.com>
wrote:

On Thursday, November 21, 2019 at 8:23:03 PM UTC-8, Clifford Heath wrote:
On 22/11/19 1:33 pm, Fox's Mercantile wrote:
On 11/21/19 8:09 PM, Clifford Heath wrote:
On 22/11/19 12:35 pm, etpm@whidbey.com wrote:

    I understand that the decompiled ladder will noit have mnemonics
but maybe I can decipher it anyway.
    The control in question is a FANUC 3T.

How in heck do yu expect help with a decompiler when you haven't told
anyone what type of CPU it is?

"The control in question is a FANUC 3T."

A manual found online says the 3T master board uses an 8086, so it'll decompile
as an 8088 would (different bus, but same opcodes).
Click to expand...
Thanks You. Now maybe I can find something to work. This stuff is way
out of my experience but with some guidance I'm hoping to be able to
decipher the ladder.
Eric
 
On 11/22/2019 9:07 AM, etpm@whidbey.com wrote:
On Thu, 21 Nov 2019 23:59:31 -0800 (PST), whit3rd <whit3rd@gmail.com
wrote:

On Thursday, November 21, 2019 at 8:23:03 PM UTC-8, Clifford Heath wrote:
On 22/11/19 1:33 pm, Fox's Mercantile wrote:
On 11/21/19 8:09 PM, Clifford Heath wrote:
On 22/11/19 12:35 pm, etpm@whidbey.com wrote:

    I understand that the decompiled ladder will noit have mnemonics
but maybe I can decipher it anyway.
    The control in question is a FANUC 3T.

How in heck do yu expect help with a decompiler when you haven't told
anyone what type of CPU it is?

"The control in question is a FANUC 3T."

A manual found online says the 3T master board uses an 8086, so it'll decompile
as an 8088 would (different bus, but same opcodes).
Thanks You. Now maybe I can find something to work. This stuff is way
out of my experience but with some guidance I'm hoping to be able to
decipher the ladder.
Eric
Click to expand...
Just be aware that sometimes trash is included in EPROMS to stop what
you are trying to do!

Paul
 
On Sunday, November 24, 2019 at 5:33:08 PM UTC-8, Paul Drahn wrote:

On 22/11/19 12:35 pm, etpm@whidbey.com wrote:

    I understand that the decompiled ladder will noit have mnemonics
but maybe I can decipher it anyway.
Click to expand...

Just be aware that sometimes trash is included in EPROMS to stop what
you are trying to do!
Click to expand...

Three things to look out for:
the ordering of the data bits can be scrambled; probably you can trace those to the CPU pins
the ordering of the address bits can be scrambled, and some may be
hard to trace to the CPU pins
the data and/or the address might go through inverting transceivers, which changes
the bit-is-a-one /bit-is-a-zero identity.
 
On Thursday, November 21, 2019 at 8:35:22 PM UTC-5, et...@whidbey.com wrote:
The EPROM reader/programmer arrived yesterday and it works fine.
The UV EPROM eraser should be here in a day or two. Amazon apologized
for the delay. So I can copy the EPROMs just fine but I would really
like the ladder programs so that I can make some changes to the
machine.
Click to expand...

I'm sure you know this but I've been bitten once and it may be worth mentioning.

I understand you're trying to back up your EPROM holding your program. We had a similar problem in a manufacturing plant, probably with an Allen Bradley PLC or similar. (it's been a while) The program went bad, we got the backup EPROM, and uploaded the saved program.

Except we didn't. The wording of upload and download was ambiguous and we accidentally saved the bad program from the machine onto the EPROM. We had one extra EPROM in the safe, got that out and ………… did exactly the same thing.

Everything was ladder logic and I came to hate those hardcopy printouts, but with enough time and patience we could type it back in. Ladder logic was theoretically understandable to the electricians but it violates every single concept in programming. Every line can refer to any other line - no modular programming, no single entry single exit, etc.
 
On Thursday, November 21, 2019 at 9:33:26 PM UTC-5, Fox's Mercantile wrote:
On 11/21/19 8:09 PM, Clifford Heath wrote:
On 22/11/19 12:35 pm, etpm@whidbey.com wrote:
    I'm pretty bsure this is a real long shot. I have looked online but
have not yet found something that will help. So I ask here.
    The EPROM reader/programmer arrived yesterday and it works fine.
The UV EPROM eraser should be here in a day or two. Amazon apologized
for the delay. So I can copy the EPROMs just fine but I would really
like the ladder programs so that I can make some changes to the
machine.
    I understand that the decompiled ladder will noit have mnemonics
but maybe I can decipher it anyway.
    The control in question is a FANUC 3T.
Thanks,
Eric


How in heck do yu expect help with a decompiler when you haven't told
anyone what type of CPU it is?

Please try to pay attention.
"The control in question is a FANUC 3T."



--
"I am a river to my people."
Jeff-1.0
WA6FWi
http:foxsmercantile.com
Click to expand...

In this case, the 'river to the ppl' took a wrong turn.
with all due respect, FANUC 3T tells you almost nothing wrt what the OP is trying to do. One needs to open the box and find out what CPU is on the main board e.g. intel iX, ARM X, Atmel, etc. etc.
Knowing the CPU defines the ISA of the machine, and one can begin to figure out how to set up a logic analyzer to look at the machine instructions and execution. Configuring a small, simple ladder logic example or 5 and observing the instruction and address trace will provide some insight into what is being R/W to memory, EPROMS, etc. which can then be used to identify and decode the ladder login mnemonics used by the mfg.
From what I know, the approach taken to codify and execute ladder logic mnemonics is unique to the mfg. There are some general schemes/patterns used to execute the ladder program but again, every mfg has their own way of doing things.
If you really need to do things at this level, it is a LOT of work and a fair amount of guessing.
There have been a number of academic papers looking at various issues wrt Ladder Logic in general and in some cases, manufacturer specific details are sometimes contained in the paper. Perhaps googling may help you.
A JTAG connection and associated diagnostic software may be helpful as well..
Good luck
J
 
On Wednesday, December 4, 2019 at 1:13:59 PM UTC-5, three_jeeps wrote:
On Thursday, November 21, 2019 at 9:33:26 PM UTC-5, Fox's Mercantile wrote:
On 11/21/19 8:09 PM, Clifford Heath wrote:
On 22/11/19 12:35 pm, etpm@whidbey.com wrote:
    I'm pretty bsure this is a real long shot. I have looked online but
have not yet found something that will help. So I ask here.
    The EPROM reader/programmer arrived yesterday and it works fine.
The UV EPROM eraser should be here in a day or two. Amazon apologized
for the delay. So I can copy the EPROMs just fine but I would really
like the ladder programs so that I can make some changes to the
machine.
    I understand that the decompiled ladder will noit have mnemonics
but maybe I can decipher it anyway.
    The control in question is a FANUC 3T.
Thanks,
Eric


How in heck do yu expect help with a decompiler when you haven't told
anyone what type of CPU it is?

Please try to pay attention.
"The control in question is a FANUC 3T."



--
"I am a river to my people."
Jeff-1.0
WA6FWi
http:foxsmercantile.com

In this case, the 'river to the ppl' took a wrong turn.
with all due respect, FANUC 3T tells you almost nothing wrt what the OP is trying to do. One needs to open the box and find out what CPU is on the main board e.g. intel iX, ARM X, Atmel, etc. etc.
Knowing the CPU defines the ISA of the machine, and one can begin to figure out how to set up a logic analyzer to look at the machine instructions and execution. Configuring a small, simple ladder logic example or 5 and observing the instruction and address trace will provide some insight into what is being R/W to memory, EPROMS, etc. which can then be used to identify and decode the ladder login mnemonics used by the mfg.
From what I know, the approach taken to codify and execute ladder logic mnemonics is unique to the mfg. There are some general schemes/patterns used to execute the ladder program but again, every mfg has their own way of doing things.
If you really need to do things at this level, it is a LOT of work and a fair amount of guessing.
There have been a number of academic papers looking at various issues wrt Ladder Logic in general and in some cases, manufacturer specific details are sometimes contained in the paper. Perhaps googling may help you.
A JTAG connection and associated diagnostic software may be helpful as well.
Good luck
J
Click to expand...

I just saw the reference to the 8086 processor. the good news is that there is lots of knowledge about this processor, including how to use a logic analyizer with it. I believe that looking at a static ROM dump of contents may not provide you with the insight for what you want to do. Looking at execution of the system would be more beneficial. But again, a LOT of work
J
 
You must log in or register to reply here.

Welcome to EDABoard.com

Sponsor

Back
Top