background image

HP 64784

H8/3003 Emulator
Terminal Interface

User’s Guide

HP Part No. 64784-97010
August 1995

Edition 6

Summary of Contents for H8/3003

Page 1: ...HP 64784 H8 3003 Emulator Terminal Interface User s Guide HP Part No 64784 97010 August 1995 Edition 6 ...

Page 2: ......

Page 3: ... reproduced or translated to another language without the prior written consent of Hewlett Packard Company The information contained in this document is subject to change without notice HP is a trademark of Hewlett Packard Company UNIX is a registered trademark in the United States and other countries licensed exclusively through X Open Company Limited H8 3003 is a registered trademark of Hitachi ...

Page 4: ... time the manual was issued Many product updates and fixes do not require manual changes and manual corrections may be done without accompanying product changes Therefore do not expect a one to one correspondence between product updates and manual revisions Edition 1 64784 97000 July 1993 Edition 2 64784 97002 March 1994 Edition 3 64784 97004 August 1994 Edition 4 64784 97006 April 1995 Edition 5 ...

Page 5: ...iffer from other HP 64700 Emulators This manual will give you an introduction to using the emulator explore various ways of applying the emulator to accomplish your tasks show you emulator commands which are specific to the H8 3003 Emulator This manual will not tell you how to use each and every emulator analyzer command refer to the User s Reference manual ...

Page 6: ...f introduction to using the H8 3003 Emulator You will load and execute a short program and make some measurements using the emulation analyzer Chapter 3 How to plug the emulator probe into a target system Chapter 4 Configuring the emulator to adapt it to your specific measurement needs Appendix A H8 3003 Emulator Specific Command Syntax and Error Message ...

Page 7: ...Foreground Monitor 1 9 DMA Support 1 9 Internal RAM of H8 3005 1 9 Watch Dog Timer in Background 1 9 Monitor Break at Sleep Standby Mode 1 9 Hardware Standby Mode 1 9 Interrupts in Background Cycles 1 9 Reset Output Enable Bit 1 9 Evaluation chip 1 10 2 Getting Started Introduction 2 1 Before You Begin 2 2 A Look at the Sample Program 2 3 Using the Help Facility 2 7 Initialize the Emulator to a Kn...

Page 8: ...for Strings or Numeric Expressions 2 29 Making Program Coverage Measurements 2 29 Trace Analysis Considerations 2 30 How to Specify the Trigger Condition 2 30 Store Condition and Disassembling 2 32 Triggering the Analyzer by Data 2 34 3 In Circuit Emulation Installing the Target System Probe 3 2 QFP adaptor 3 3 PGA adaptor 3 3 QFP socket adaptor 3 4 Installing the QFP Adaptor 3 5 Installing the 64...

Page 9: ... 4 18 Where to Find More Information 4 19 A H8 3003 Emulator Specific Command Syntax CONFIG_ITEMS A 2 Summary A 2 Syntax A 2 Description A 3 Examples A 4 Related information A 4 ACCESS MODE and DISPLAY MODE A 4 Summary A 4 Syntax A 4 Defaults A 5 Related Information A 5 ADDRESS A 6 Summary A 6 Description A 6 Examples A 6 REGISTER CLASS and NAME A 7 Summary A 7 Emulator Specific Error Messages A 1...

Page 10: ...tor General 3 11 Tables Table 1 1 Supported Microprocessors 1 3 Table 1 2 Clock Speeds 1 6 Table 3 1 DC Characteristics of input high voltage 3 10 Table 3 2 Bus timing Vcc 5 0V f 16MHz 3 13 Table 3 3 Refresh controller timing Vcc 5 0V f 16MHz 3 16 Table 3 4 Control signal timing Vcc 5 0V f 16MHz 3 17 Table 3 5 Timing condition of On chip supporting modules Vcc 5 0V f 16MHz 3 18 Table 3 6 Bus timin...

Page 11: ...our target system so you can control operation of the microprocessor in your application hardware usually refer to as the target system The H8 3003 emulator performs just like the H8 3003 microprocessor but is a device that allows you to control the H8 3003 microprocessor directly These features allow you to easily debug software before any hardware is available and ease the task of integrating ha...

Page 12: ...Figure 1 1 HP 64784 Emulator for the H8 3003 1 2 Introduction to the H8 3003 Emulator ...

Page 13: ...ckage System Clock Divider On chip ROM Supply Voltage H8 3005 80pinQFP 4 75 to 5 25V HP64784E HP64784K 1 2 7 to 5 25V H8 3004 80pinQFP 4 75 to 5 25V HP64784E HP64784K 1 2 7 to 5 25V H8 3003 112 pin QFP 1 2 4 75 to 5 25V HP64784C HP64784E HP64784F 2 7 to 5 25V 4 75 to 5 25V 2 7 to 5 25V H8 3002 100 pin QFP 4 75 to 5 25V HP64784D HP64784E HP64784G 2 7 to 5 25V H8 3001 80 pin QFP 4 75 to 5 25V HP6478...

Page 14: ...75 to 5 25 V HP64784E HP64784H 2 7 to 5 25 V H8 3042 100 pin QFP PROM 4 75 to 5 25V HP64784D HP64784E HP64784G 2 7 to 5 25V Masked ROM 4 75 to 5 25V 2 7 to 5 25V H8 3041 100 pin QFP Masked ROM 4 75 to 5 25V HP64784D HP64784E HP64784G 2 7 to 5 5V H8 3040 100 pin QFP Masked ROM 4 752 to 5 25V HP64784D HP64784E HP64784G 2 7 to 5 25V 1 When you do in circuit emulation for H8 3001 with mode 3 4 or H8 3...

Page 15: ...2 7 up to 5 25V input in your target system To buy HP 64797B contact your local HP sales representative The list of supported microprocessors in Table 1 1 is not necessarily complete To determine if your microprocessor is supported or not contact Hewlett Packard Clock Speeds You can select whether the emulator will be clocked by the internal clock source or by the external clock source on your tar...

Page 16: ...ith system clock divider 8MHz System clock 8MHz System clock External H8 3001 H8 3002 H8 3003T H8 3004 H8 3005 H8 3030 H8 3031 H8 3032 H8 3040 H8 3041 H8 3042 From 0 5 up to 16MHz System clock From 0 5 up to 10MHz System clock H8 3003 with system clock divider From 1 up to 24MHz System clock is from 0 5 up to 12MHz From 1 up to 20MHz System clock is from 0 5 up to 10MHz 1 6 Introduction to the H8 ...

Page 17: ...The H8 3003 emulator is used with one of the following analyzers which allows you to trace code execution and processor activity HP 64704A 80 channel Emulation Bus Analyzer HP 64703A 64 channel Emulation Bus Analyzer and 16 channel State Timing Analyzer HP 64794A C D Deep Emulation Bus Analyzer The Emulation Bus Analyzer monitors the emulation processor using an internal analysis bus The HP 64703A...

Page 18: ...me signifies continuous execution of your program at full rated processor speed without interference from the emulator Such interference occurs when the emulator needs to break to the monitor to perform an action you requested such as displaying target system memory Emulator features performed in real time include running and analyzer tracing Emulator features not performed in real time include di...

Page 19: ...mode is released Then PC indicates next address of SLEEP instruction Hardware Standby Mode Hardware standby mode is not supported for the H8 3003 emulator Hardware standby request from target system will give the emulator reset signal Interrupts in Background Cycles The H8 3003 emulator does not accept any interrupts while in background monitor Such interrupts are suspended while running the backg...

Page 20: ...Evaluation chip Hewlett Packard makes no warranty of the problenm caused by the H8 3003 Evaluation chip in the emulator 1 10 Introduction to the H8 3003 Emulator ...

Page 21: ...tion configuration for out of circuit emulation use Map memory Transfer a small program into emulation memory Use run stop controls to control operation of your program Use memory manipulation features to alter the program s operation Use analyzer commands to view the real time execution of your program Use software breakpoint feature to stop program execution at specific address Search memory for...

Page 22: ...ork the examples in this chapter 3 If you have properly completed steps 1 and 2 above you should be able to hit RETURN or ENTER on some keyboards and get one of the following command prompts on your terminal screen U R M If you do not see one of these command prompts retrace your steps through the hardware and software installation procedures outlined in the manuals above verifying all connections...

Page 23: ...tine continuously reads the byte at location of Cmd_Input until it is something other than a null character 00 hex when this occurs the Exe_Cmd routine is executed Exe_Cmd Compares the input byte now something other than a null to the possible command bytes of A ASCII 41 hex and B ASCII 42 hex then jumps to the appropriate set up routine for the command message If the input byte does not match eit...

Page 24: ...oper message is written to the output area by the Write_Loop routine When done Write_Loop jumps back to Clear and the command monitoring process begins again Using the various features of the emulator we will show you how to load this program into emulation memory execute it monitor the program s operation with the analyzer and simulate entry of different commands utilizing the memory access comma...

Page 25: ...een 21 entered continue to scan for it 22 001014 6A2A000FF800 23 Scan MOV B Cmd_Input R2L 00101A AA00 24 CMP B H 00 R2L 00101C 47F6 25 BEQ Scan 26 27 A command has been entered Check if it is 28 command A command B or invalid command 29 00101E AA41 30 Exe_Cmd CMP B H 41 R2L 001020 5870000A 31 BEQ Cmd_A 001024 AA42 32 CMP B H 42 R2L 001026 58700010 33 BEQ Cmd_B 00102A 58000018 34 BRA Cmd_I 35 36 Co...

Page 26: ...age is written to the destination 65 00105E 7A05000FF804 66 MOV L Msg_Dest ER5 001064 6C4E 67 Write_Loop MOV B ER4 R6L 001066 68DE 68 MOV B R6L ER5 001068 0B05 69 ADDS L 1 ER5 00106A 1A0B 70 DEC B R3L 00106C 46F6 71 BNE Write_Loop 72 73 Go back and scan for next command 74 00106E 409C 75 BRA Clear 76 0FF800 77 SECTION Data DATA LOCATE H FF800 78 79 Command input area 80 0FF800 00000004 81 Cmd_Inpu...

Page 27: ...p s group print short help for desired group help command print help for desired command help print this help screen VALID group NAMES gram system grammar proc processor specific grammar sys system commands emul emulation commands hl highlevel commands hp internal use only trc analyzer trace commands all command groups emul emulation commands b break to monitor cp copy memory mo modes bc break con...

Page 28: ...ize the emulator by typing the command R init load download absolute file into processor memory space load i download intel hex format load m download motorola S record format load t download extended tek hex format load S download sysmbol file load h download hp format requires transfer protocol load a reserved for internal hp use load e write only to emulation memory load u write only to target ...

Page 29: ... cf dbc en cf drst dis cf mode 7 cf nmi en cf rrt dis cf rsp 9 cf tdma en cf trfsh en cf trst en Note The individual configuration items won t be explained in this example refer to Chapter 4 of this manual and the User s Reference manual for details 2 If the configuration items displayed on your screen don t match the ones listed above here is how to make them agree For each configuration item tha...

Page 30: ... up stack pointer Type R cf rsp 0ff904 4 Let s go ahead and set up the proper break conditions Type R bc You will see bc d bp disable bc e rom enable bc d bnct disable bc d cmbt disable bc d trig1 disable bc d trig2 disable For each break condition that does not match the one listed use one of the following commands To enable break conditions that are currently disabled type R bc e breakpoint type...

Page 31: ...le in 512 byte blocks The monitor occupies 2K bytes and the emulator maps 4K bytes for internal RAM as emulation RAM automatically leaving 122K 506K 1018K or 2042K bytes of emulation memory which you may use The memory mapper allows you to characterize memory locations It allows you specify whether a certain range of memory is present in the target system or whether you will be using emulation mem...

Page 32: ...inal In Standalone Configuration To transfer code into emulation memory from a data terminal running in standalone mode you must use the modify memory commands This is necessary because you have no host computer transfer facilities to automatically download the code for you as if you would if you were using the transparent configuration or the remote configuration To minimize the effects of typing...

Page 33: ...f 54 48 49 53 20 20 49 53 20 4d 45 53 53 41 47 45 you can correct this row of memory by typing R m 002000 00200f 54 48 49 53 20 49 53 20 4d 45 53 53 41 47 45 20 Or you might need to modify only one location as in the instance where address 00200f equals 22 hex rather than 20 hex Type R m 00200f 22 3 Enter the program information by typing the following commands Note the hex letters must be precede...

Page 34: ... aa 42 58 70 00 10 58 00 00 18 fb 11 001030 00103f 7a 04 00 00 20 00 58 00 00 14 fb 11 7a 04 00 00 001040 00104f 20 11 58 00 00 08 fb 0f 7a 04 00 00 20 22 7a 05 001050 00105f 00 0f f8 04 fe 20 68 d8 0b 05 1a 0e 46 f8 7a 05 001060 00106f 00 0f f8 04 6c 4e 68 de 0b 05 1a 0b 46 f6 40 9c If this is not correct you can correct the errors by re entering only the modify memory commands for the particular...

Page 35: ...asier and faster than modifying memory locations especially for large programs 1 First you must establish communications with your host computer through the transparent mode link provided in the HP 64700 Type R xp s 02a This sets the second escape character to The first escape character remains at the HP 64700 powerup default of hex 01b which is the ASCII ESC character The sequence ESC toggles the...

Page 36: ... to load the file into the emulator h83cnvhp x sampprog An HP format absolute file sampprog X will be generated Now it s time to transfer your code into the emulator Do the following 1 Disable the transparent mode so that your terminal will talk directly to the emulator Type ESC xp d The ESC sequence temporarily toggles the transparent mode so that the emulator will accept commands xp d then fully...

Page 37: ...this point you should examine a portion of memory to verify that your code was loaded correctly Type R m 2000 2030 You should see 002000 00200f 54 48 49 53 20 49 53 20 4d 45 53 53 41 47 45 20 002010 00201f 41 54 48 49 53 20 49 53 20 4d 45 53 53 41 47 45 002020 00202f 20 42 49 4e 56 41 4c 49 44 20 43 4f 4d 4d 41 4e 002030 002030 44 If your system does not match verify 1 that you entered the source ...

Page 38: ... BEQ 00102e 0001024 CMP B 42 R2L 0001026 BEQ 00103a 000102a BRA 001046 000102e MOV B 11 R3L 0001030 MOV L 00002000 ER4 0001036 BRA 00104e 000103a MOV B 11 R3L 000103c MOV L 00002011 ER4 0001042 BRA 00104e 0001046 MOV B 0f R3L 0001048 MOV L 00002022 ER4 000104e MOV L 000ff804 ER5 0001054 MOV B 20 R6L 0001056 MOV B R0L ER5 0001058 ADDS 1 ER5 000105a DEC B R6L 000105c BNE 001056 000105e MOV L 000ff80...

Page 39: ...ain some familiarity with the HP 64700 emulator command prompts by doing the following 1 Ignore the current command prompt Type rst You will see R The rst command resets the emulation processor and holds it in the reset state The R prompt indicates that the processor is reset 2 Type R r 1000 You will see U The r command runs the processor from address 1000 hex 3 Type U b You will see M The b comma...

Page 40: ...fault number base for address and data values within HP 64700 is hexadecimal Other number bases may be specified Refer to the Tutorials chapter of this manual or the HP 64700 User s Reference manual for further details 5 Let s look at the registers to verify that the address registers were properly initialized with the pointers to the input and output areas Type U reg You will see reg pc 001014 cc...

Page 41: ...0 41 This modifies the input byte location to the hex value for an ASCII A Now let s check the output area for a message U m 0ff804 0ff823 You will see 00ff804 00ff813 54 48 49 53 20 49 53 20 4d 45 53 53 41 47 45 20 00ff814 00ff823 41 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 These are the ASCII values for Msg_A Repeat the last two commands twice The first time use 42 instead of 41 at location ...

Page 42: ...04 mdcr c7 Notice that PC contains 1006 hex 9 To step one instruction from present PC you only need to type s at prompt Type M s reg You will see 0001006 MOV L 000ff800 ER1 PC 000100c reg pc 00100c ccr 80 er0 00000000 er1 000ff800 er2 00000000 er3 00000000 reg er4 00000000 er5 00000000 er6 00000000 er7 000ff904 sp 000ff904 mdcr c7 Tracing Program Execution Predefined Trace Labels Three trace label...

Page 43: ...ecification Note For this example you will be using the analyzer in the easy configuration which simplifies the process of analyzer measurement setup The complex configuration allows more powerful measurements but requires more interaction from you to set up those measurements For more information on easy and complex analyzer configurations and the analyzer refer to the HP 64700 Analyzer User s Gu...

Page 44: ...es displayed in ASCII format M tf addr h data A count R seq Start the trace by typing M t You will see Emulation trace started To start the emulation run type M r 1000 Now you need to have a command input to the program so that the program will jump to the output routines otherwise the trigger will not be found since the program will never access address ff804 hex Type U m 0ff800 41 To display the...

Page 45: ... addr H data A count R seq 0 0ff804 1 0ff805 0 760 uS 2 0ff806 0 720 uS 3 0ff807 0 760 uS 4 0ff808 0 760 uS 5 0ff809 0 760 uS 6 0ff80a 0 720 uS 7 0ff80b 0 760 uS 8 0ff80c 0 760 uS 9 0ff80d 0 760 uS 10 0ff80e 0 720 uS 11 0ff80f 0 760 uS 12 0ff810 0 760 uS 13 0ff811 0 760 uS 14 0ff812 0 720 uS 15 0ff813 0 760 uS 16 0ff814 0 760 uS 17 0ff815 0 760 uS 18 0ff804 TT 12 00 uS 19 0ff805 HH 1 120 uS 20 0ff...

Page 46: ... 0 760 uS 12 0ff810 0 760 uS 13 0ff811 0 760 uS 14 0ff812 0 720 uS 15 0ff813 0 760 uS 16 0ff814 0 760 uS 17 0ff815 0 760 uS 18 0ff804 TT 12 00 uS 19 0ff805 HH 1 120 uS 20 0ff806 II 1 120 uS 21 0ff807 SS 1 120 uS 22 0ff808 1 120 uS 23 0ff809 II 1 120 uS 24 0ff80a SS 1 120 uS 25 0ff80b 1 120 uS 26 0ff80c MM 1 160 uS 27 0ff80d EE 1 120 uS 28 0ff80e SS 1 120 uS 29 0ff80f SS 1 120 uS 30 0ff810 AA 1 120...

Page 47: ...y at memory locations which contain instruction opcodes not operands or data If a software breakpoint is set at a memory location which is not an instruction opcode the software breakpoint instruction will never be executed and the break will never occur Note Because software breakpoints are implemented by replacing opcodes with the software breakpoint instruction you cannot define software breakp...

Page 48: ...000104e M reg reg pc 00104e ccr 80 er0 00000000 er1 000ff800 er2 00000041 er3 00000011 reg er4 00002000 er5 00000000 er6 00000000 er7 000ff904 sp 000ff904 mdcr c7 Notice that PC contains 104e When a breakpoint is hit it becomes disabled You can use the e option to the bp command to re enable the software breakpoint M bp BREAKPOINT FEATURE IS ENABLED bp 000104e disabled M bp e 104e M bp BREAKPOINT ...

Page 49: ...o find all of the CMP B instructions in the sample program Since a CMP B instruction begins with aa hex you can search for that value by typing M ser db 10000 106f 0aa pattern match at address 000101a pattern match at address 000101e pattern match at address 0001024 Making Program Coverage Measurements In testing your program you will often want to verify that all possible code segments are execut...

Page 50: ... 1000 106f percentage of memory accessed 100 0 Trace Analysis Considerations There are some points you need to attend to in using the emulation analyzer The following section describes such points How to Specify the Trigger Condition Suppose that you would like to start the trace when the program begins executing Exe_Cmd routine To initialize the emulation analyzer type U tinit To set the trigger ...

Page 51: ...l 10 10 As you can see the analyzer captured the execution of Exe_Cmd routine which starts from line 2 of the trace list Line addr H H8 3042 mnemonic H count R seq 0 00101e aa41 fetch mem 1 001014 MOV B 0ff800 R2L 0 120 uS 2 001016 000f fetch mem 0 120 uS 3 001018 f800 fetch mem 0 120 uS 4 00101a CMP B 00 R2L 0 120 uS 5 0ff800 00xx read mem byte 0 120 uS 6 00101c BEQ 001014 0 120 uS 7 00101e aa41 ...

Page 52: ...mem 0 120 uS 5 00101a CMP B 00 R2L 0 160 uS 4 0ff800 41xx read mem byte 0 120 uS 3 00101c BEQ 001014 0 120 uS 2 00101e CMP B 41 R2L 0 120 uS 1 001014 6a2a unused fetch mem 0 120 uS 0 001020 BEQ 00102e 0 120 uS 1 001022 000a fetch mem 0 120 uS 2 00102e MOV B 11 R3L 0 280 uS 3 001030 MOV L 00002000 ER4 0 120 uS 4 001032 0000 fetch mem 0 120 uS 5 001034 2000 fetch mem 0 120 uS 6 001036 BRA 00104e 0 1...

Page 53: ...20 uS 15 001018 f800 fetch mem 0 120 uS 16 00101a CMP B 00 R2L 0 120 uS 17 0ff800 00xx read mem byte 0 120 uS 18 00101c BEQ 001014 0 160 uS 19 00101e aa41 fetch mem 0 120 uS 20 001014 MOV B 0ff800 R2L 0 120 uS Line addr H H8 3042 mnemonic H count R seq 0 00101c BEQ 001014 1 00101e aa41 fetch mem 0 120 uS 2 001014 MOV B 0ff800 R2L 0 120 uS 3 001016 000f fetch mem 0 120 uS 4 001018 f800 fetch mem 0 ...

Page 54: ...he data is performed by byte access This is because the analyzer is designed so that it can capture data on internal data bus which has 16 bits width The following table shows the way to specify the trigger condition by data For example to trigger the analyzer when the processor performs word access to data 1234 hex in 16 bit bus area you can specify the following U tg data 1234 To trigger the ana...

Page 55: ...to specify xx value to capture byte access to 8 bit data bus area Be careful to trigger the analyzer by data You re now finished with the Getting Started example You can proceed on with using the emulator and use this manual and the Terminal Interface Reference manual as needed to answer your questions Getting Started 2 35 ...

Page 56: ...Notes 2 36 Getting Started ...

Page 57: ...l target system hardware there are some special considerations you should keep in mind installing the emulator probe properly configure the emulator We will cover the first topic in this chapter For complete details on in circuit emulation configuration refer to Chapter 4 3 1 In Circuit Emulation ...

Page 58: ...he QFP adaptor the QFP socket adaptor Failure to do so may result in damage to the emulator circuitry Protect Against Static Discharge The H8 3003 emulator and the QFP adaptor contain devices which are susceptible to damage by static discharge Therefore operators should take precautionary measures before handling the user plug to avoid emulator damage Compatibility of VOLTAGE CURRENCY Please be su...

Page 59: ... with your target system you need to use HP 64784E PGA adaptor as shown in Figure 3 2 The PGA adaptor allows you to connect the emulation probe to QFP socket adapter on your target system through the QFP probe listed in Table 1 1 Caution Do not apply strong force to QFP probe as that might damage the QFP probe To emulate H8 3001 processor with mode 3 4 or H8 3004 05 processor with mode 3 you must ...

Page 60: ...in circuit emulation you must attach the QFP socket adaptor to your target system and connect with the QFP adaptor or PGA adaptor Note You can order additional QFP socket adaptor with part No HP 64784 61611 for H8 3003 HP 64784 61612 for H8 3002 4x HP 64784 61613 for H8 3004 05 3x or HP 64784 61614 for H8 3001 3 4 In Circuit Emulation ...

Page 61: ...socket adaptor to your target system 2 Connect the QFP adaptor to the emulation probe 3 Install the QFP adaptor to the QFP socket adaptor on your target system as shown in Figure 3 1 Figure 3 1 Installing the QFP adaptor 3 5 In Circuit Emulation ...

Page 62: ... Connect the 64784E PGA adaptor to the emulation probe 3 Install the 64784E PGA adaptor to the QFP socket adaptor on your target system through QFP probe or QFP probe and HP 64784 66509 as shown in Figure 3 2 3 3 and 3 4 Figure 3 2 Installing the PGA adaptor General 3 6 In Circuit Emulation ...

Page 63: ...Figure 3 3 Installing the PGA adaptor 3001 mode 3 4 3 7 In Circuit Emulation ...

Page 64: ...Figure 3 4 Installing the PGA adaptor 3004 5 mode 3 3 8 In Circuit Emulation ...

Page 65: ...Installing the H8 3003 microprocessor You can replace the QFP PGA adaptor with H8 3003 microprocessor Refer to the Figure 3 5 Figure 3 5 Installing the H8 3003 microprocessor 3 9 In Circuit Emulation ...

Page 66: ...cification of Table 3 1 when you use the low voltage adaptor with the H8 3003 emulator Table 3 1 DC Characteristics of input high voltage Item Minimum V P1 P5 D0 D15 Vcc x 0 7 or 2 4 1 Others Vcc x 0 7 or 2 0 1 1 Higher of the two Note This is different from the target processor s specification Note You must also use a clock conforming to the specification of Table 4 1 when you use the low voltage...

Page 67: ...tem 2 Connect the 64797B PGA adaptor to the emulation probe 3 Install the 64797B PGA adaptor to the QFP socket adaptor on your target system through QFP probe or QFP probe and HP 64784 66509 as shown in Figure 3 6 Figure 3 6 Installing the PGA adaptor General 3 11 In Circuit Emulation ...

Page 68: ... T system prompt when you enter r rst In this status the emulator accept target system reset Then program starts if reset signal from target system is released Note In the Awaiting target reset status T you can not break into the monitor If you enter r rst in out of circuit or in the configuration that emulator does not accept target system reset cf trst dis you must reset the emulator 3 12 In Cir...

Page 69: ... 8 13 3 ns Clock pulse high width tCH 20 28 3 12 9 28 3 13 3 ns Clock rise time tCR 10 5 6 17 1 5 0 16 7 ns Clock fall time tCF 10 5 4 17 1 5 4 16 7 ns Address delay time tAD 30 24 0 33 5 23 6 32 0 ns Address hold time tAH 10 41 0 4 8 41 2 5 2 ns Address strobe delay time tASD 30 7 4 35 8 6 6 34 7 ns Write strobe delay time tWSD 30 10 0 35 8 9 6 34 7 ns Strobe delay time tSD 30 2 8 35 8 3 0 34 7 n...

Page 70: ...me tRDH 0 27 0 29 7 20 6 33 3 ns Write data delay time tWDD 60 29 0 68 7 29 8 69 9 ns Write data setup time 1 tWDS1 35 31 0 4 8 30 0 6 6 ns Write data setup time 2 tWDS2 5 3 2 36 0 2 4 37 8 ns Write data hold time tWDH 20 47 2 4 4 47 6 5 8 ns Read data access time 1 tACC1 55 42 4 21 3 51 2 24 8 ns Read data access time 2 tACC2 115 104 0 83 8 112 8 87 2 ns Read data access time 3 tACC3 25 25 8 12 3...

Page 71: ...yp 1 worst WAIT setup time tWTS 25 26 2 60 9 22 6 54 7 ns WAIT set hold time tWTH 5 23 6 11 0 20 0 6 1 ns BREQ setup time tBRQS 40 75 9 69 7 ns BACK delay time 1 tBACD1 30 10 4 35 8 10 0 34 7 ns BACK delay time 2 tBACD2 30 4 2 35 8 4 0 34 7 ns Bus floating time tBZD 40 19 0 46 2 20 4 44 7 ns 1 Typical outputs measured with 50pF load 3 15 In Circuit Emulation ...

Page 72: ...RAH 15 22 0 10 5 27 0 9 5 ns RAS pre charge time tRP 35 60 8 25 8 61 4 26 7 ns CAS to RAS pre charge time tCRP 35 61 4 28 6 60 2 29 1 ns CAS pulse width tCAS 40 52 8 33 6 53 2 34 1 ns RAS access time tRAC 85 74 4 44 4 82 8 49 0 ns Address access time tAA 55 42 4 21 3 51 2 24 8 ns CAS access time tCAC 25 23 0 12 3 30 6 9 2 ns Write data setup time 3 tWDS3 40 33 8 4 8 33 4 6 6 ns CAS setup time tCSR...

Page 73: ...ES pulse width tRESW 10 tcyc RESO output delay time tRESD 100 109 6 108 4 ns RESO output pulse width tRESOW 132 tcyc NMI setup time tNMIS 150 231 9 225 7 ns NMI hold time tNMIH 10 9 0 4 1 ns Interrupt pulse width tNMIW 200 209 2 208 3 ns Crystal oscillator setting time reset tOSC1 20 ms Crystal oscillator setting time software standby tOSC2 8 ms 1 Typical outputs measured with 50pF load 3 17 In Ci...

Page 74: ...ime tDRQS 30 65 9 59 7 ns DREQ hold time tDRQH 10 6 0 1 1 ns TEND delay time 1 tTED1 50 61 6 59 0 ns TEND delay time 2 tTED2 50 61 6 59 0 ns ITU Timer outputdelay time tTOCD 100 111 6 109 0 ns Timer input setup time tTICS 50 85 9 79 7 ns Timer clock input setup time tTCKS 50 85 9 79 7 ns Timer clock pulse width single edge tTCKWH 1 5 tcyc Timer clock pulse width both edge tTCKWL 2 5 tcyc 3 18 In C...

Page 75: ...nput clock rise time tSCKr 1 5 tscyc Input clock fall time tSCKf 1 5 tscyc Input clock pulse width tSCKw 0 4 0 6 tscyc Transmit data delay time tTXD 100 105 8 104 7 ns Received data setup time tRXS 100 136 8 128 4 ns Received data hold time Clock input tRXH 100 109 2 108 3 ns PORT TPC Output data delay time tPWD 100 111 6 109 0 ns Input data setup time tPRS 50 85 9 79 7 ns Input data hold time tPR...

Page 76: ...dth tCH 30 46 0 31 5 ns Clock rise time tCR 15 4 8 17 3 ns Clock fall time tCF 15 6 4 17 3 ns Address delay time tAD 50 23 0 33 9 ns Address hold time tAH 20 42 2 12 6 ns Address strobe delay time tASD 40 7 8 36 6 ns Write strobe delay time tWSD 50 10 4 36 6 ns Strobe delay time tSD 50 3 4 36 6 ns Write data strobe pulse width 1 tWSW1 60 88 7 64 7 ns Write data strobe pulse width 2 tWSW2 110 137 5...

Page 77: ... Read data hold time tRDH 0 35 0 28 7 ns Write data delay time tWDD 75 27 8 69 4 ns Write data setup time 1 tWDS1 65 68 1 31 4 ns Write data setup time 2 tWDS2 10 23 1 18 6 ns Write data hold time tWDH 20 66 3 22 0 ns Read data access time 1 tACC1 100 107 8 74 4 ns Read data access time 2 tACC2 200 206 9 174 4 ns Read data access time 3 tACC3 50 72 2 21 7 ns Read data access time 4 tACC4 150 171 1...

Page 78: ...4784x min max typ 1 worst WAIT setup time tWTS 40 30 2 63 1 ns WAIT set hold time tWTH 10 27 6 13 0 ns BREQ setup time tBRQS 40 78 1 ns BACK delay time 1 tBACD1 50 10 8 36 6 ns BACK delay time 2 tBACD2 50 4 0 36 6 ns Bus floating time tBZD 70 17 8 46 6 ns 1 Typical outputs measured with 50pF load 3 22 In Circuit Emulation ...

Page 79: ...pulse width tRESW 10 tcyc RESO output delay time tRESD 100 110 3 ns RESO output pulse width tRESOW 132 tcyc NMI setup time tNMIS 150 234 1 ns NMI hold time tNMIH 10 11 0 ns Interrupt pulse width tNMIW 200 209 2 ns Crystal oscillator setting time reset tOSC1 20 ns Crystal oscillator setting time software standby tOSC2 8 ns 1 Typical outputs measured with 50pF load 3 23 In Circuit Emulation ...

Page 80: ... time tTCKS 50 88 1 ns Timer clock pulse width single edge tTCKWH 1 5 tcyc Timer clock pulse width both edge tTCKWL 2 5 tcyc SCI Input clock cycle Async tSCYC 4 tcyc Input clock cycle Sync tSCYC 6 tcyc Input clock rise time tSCKr 1 5 tcsyc Input clock fall time tSCKf 1 5 tscyc Input clock pulse width tSCKw 0 4 0 6 tscyc Transmit data delay time tTXD 100 106 6 ns Received data setup time tRXS 100 1...

Page 81: ...teristics Symbol H8 3003 Vcc 3V f 10MHz Probe Type Unit HP 64797B HP 64784x min max typ 1 worst PORT TPC Output data delay time tPWD 100 111 6 ns Input data setup time tPRS 50 88 1 ns Input data hold time tPRH 50 35 6 ns 1 Typical outputs measured with 50pF load 3 25 In Circuit Emulation ...

Page 82: ...Target System Interface ø RES STBY NMI MD0 2 3 26 In Circuit Emulation ...

Page 83: ... RESO P1 P2 P5 A0 23 P3 P4 D0 15 3 27 In Circuit Emulation ...

Page 84: ...P6 P8 P9 PA PB PC 3 28 In Circuit Emulation ...

Page 85: ...P7 AVcc Vref AVss 3 29 In Circuit Emulation ...

Page 86: ...ght of as configuration items in the context of other HP 64700 emulator systems The commands in this group set up the relationships between the emulation processor and the target system such as determining how the emulator responds to requests for the processor bus Also these commands determine how the emulation processor interacts with the emulator itself memory mapping and the emulator s respons...

Page 87: ...the CMB Coordinated Measurement Bus These commands are covered in the HP 64700 CMB User s Guide and in the HP 64700 Terminal Interface Reference Manual Analyzer The analyzer configuration commands are those commands which actually specify what type of measurement the analyzer is to make Some of the analyzer commands are covered earlier in this manual You can also refer to the HP 64700 Terminal Int...

Page 88: ...tion processor will respond to certain target system signals To see the default configuration settings defined by the cf command type M cf You will see cf ba en cf chip 3042 cf clk int cf dbc en cf drst dis cf mode 7 cf nmi en cf rrt dis cf rsp 9 cf tdma en cf trfsh en cf trst en Let s examine each of these emulator configuration options with a view towards how they affect the processor s interact...

Page 89: ...bitration by entering the above command the emulator ignores the BREQ signal from the target system The emulation processor will never drive the BACK line true nor will it place the address data and control signals into the tri state mode Enabling and disabling bus master arbitration can be useful to you in isolating target system problems For example you may have a situation where the processor n...

Page 90: ...ssor 3002 Emulate H8 3002 microprocessor 3003t Emulate H8 3003 microprocessor 3003 Emulate H8 3003 microprocessor with system clock divider 3004 Emulate H8 3004 microprocessor 3005 Emulate H8 3005 microprocessor 3030 Emulate H8 3030 microprocessor 3031 Emulate H8 3031 microprocessor 3032 Emulate H8 3032 microprocessor 3040 Emulate H8 3040 microprocessor 3041 Emulate H8 3041 microprocessor 3042 Emu...

Page 91: ...command M cf clk ext You can specify that the emulator should use the clock input to the emulator probe from the target system You must use a clock input conforming to the specifications of Table 4 1 Table 4 1 Clock Speeds Clock source Chip Without 64797B With 64797B Internal H8 3001 H8 3002 H8 3003T H8 3004 H8 3005 H8 3030 H8 3031 H8 3032 H8 3040 H8 3041 H8 3042 16MHz System clock 8MHz System clo...

Page 92: ...or into the reset state cf dbc The dbc drive background cycles option allows you to select whether or not the emulator will drive the target system bus on background cycles M cf dbc en You can enable background cycle drive to target system by entering the above command Emulation processor s address and control strobes except LWR and HWR are driven during background cycles Background write cycles w...

Page 93: ... this configuration Note When dbc is disabled the emulator can t respond to WAIT signal Note Executing this command will drive the emulator into the reset state cf drst The drst drive reset configuration item allows you to specify whether or not the emulator drives the RESO signal to the target system by the Watchdog Timer M cf drst dis The above command configures the emulator not to drive the re...

Page 94: ...MD0 MD1 and MD2 M cf mode mode_num When mode_num is selected the emulator will operate in selected mode regardless of the mode setting by the target system Valid mode_num are following mode_num Description 1 The emulator will operate in mode 1 expanded 1M bytes mode without internal ROM 8 bit data bus 2 The emulator will operate in mode 2 expanded 1M bytes mode without internal ROM 16 bit data bus...

Page 95: ... the emulator does not work fine when MD0 MD1 and MD2 are not steady Note When you emulate H8 3004 05 cf mode ext is not available You have to configure processor mode using cf mode mode_num Note When mismatch takes place between cf chip and cf mode the emulator will operate in mode which you don t specify Note Executing this command will drive the emulator into the reset state 4 10 Configuring th...

Page 96: ... this command will drive the emulator into the reset state cf rrt The rrt restrict to real time option lets you configure the emulator so that commands which cause the emulator to break to monitor and return to the user program will be rejected by the emulator command interpreter M cf rrt en You can restrict the emulator to accepting only commands which don t cause temporary breaks to the monitor ...

Page 97: ...er or not they require a break to the emulation monitor are accepted by the emulator cf rsp The rsp reset stack pointer configuration item allows you to specify a value to which the stack pointer will be set upon the transition from emulation reset into the emulation monitor R cf rsp XXXXXXXX where XXXXXXXX is a 32 bit even address will set the stack pointer to that value upon entry to the emulati...

Page 98: ...nd each time DMA performed one emulation analyzer state will be generated to recognize the DMA cycle M cf tdma dis When disabled no analyzer state will be generated at the occurrence of DMA Therefore any DMA cycle will be ignored by the analyzer Note Internal DMA cycles may be traced regardless of this configuration in order to disassemble the trace list correctly cf trfsh The trfsh trace refresh ...

Page 99: ...operation When running the background monitor the emulator ignores such signals M cf trst en When you enable target system reset with the above command the emulator will respond to RES input during foreground operation M cf trst dis When disabled the emulator won t respond to RES and STBY inputs from the target system Note RES and STBY signals are always ignored during background operation regardl...

Page 100: ...sor are proper for the memory type being accessed For example if the processor tries to write to a emulation memory location mapped as ROM the emulator will not permit the write even if the memory at the given location is actually RAM You can optionally configure the emulator to break to the monitor upon such occurrence with the bc e rom command Also if the emulation processor attempts to access a...

Page 101: ...am R map 1000 3fff eram R map remaining number of terms 14 remaining emulation memory 7e800h bytes map 001000 003fff eram term 1 map 00f000 00f1ff tram term 2 map other tram As you can see the mapper rounded up the second term to 512 bytes block since those are minimum size blocks supported by the H8 3003 emulator Note When you use the internal ROM you must map that area to emulation memory When y...

Page 102: ...nd if you map internal RAM as guarded memory the emulator prohibits to access to this area by m commands Note When you emulate H8 3005 processor you can t use address 0fef10h 0ff00fh mode 1 and 0ffef10h 0fff00fh mode 3 as internal RAM These area are worked as external 8bit 3state area and you have to map these area as emulation RAM Note You should map all memory ranges except internal RAM used by ...

Page 103: ...abled the emulator will not break to the monitor upon a write to ROM Note If emualator writes to the memory mapped as ROM or guarded area in internal DMA cycles the emulator will not break to the monitor regardless of this configuration Software Breakpoints The bp command allows you to insert software traps in your code which will cause a break to the emulation monitor when encountered during prog...

Page 104: ...in this situation you must also configure the analyzer to drive the trig1 signal upon finding its trigger by entering tgout trig1 Where to Find More Information Due to the architecture of the HP 64700 emulators there are a wide variety of items that affect how the emulator interacts with your system controller and other measuring instruments If you need more configuration information we suggest th...

Page 105: ...Notes 4 20 Configuring the Emulator ...

Page 106: ... help cf commands ACCESS_MODE May be specified in the mo display and access mode m memory and ser search memory for data commands The display mode is used when memory locations are displayed or modified ADDRESS May be specified in emulation commands which allow addresses to be entered REG_NAME May be specified in the reg register command Command and error messages which are specific to the H8 3003...

Page 107: ...CONFIG_ITEMS Summary H8 3003 emulator configuration items Syntax A 2 H8 3003 Emulator Specific Command Syntax ...

Page 108: ...target system drst Enable disable to drive reset to target system mode Determine emulator processor operation mode nmi Enable disable NMI non maskable interrupt from target system rrt Restrict emulator to real time runs rsp Specify system stack pointer value to load upon each transition from emulation reset to the monitor tdma Enable disable tracing internal DMA cycles trfsh Enable disable tracing...

Page 109: ... ext Related information Refer to the cf syntax pages in the User s Reference manual Also refer to chapter 3 of this manual for complete information about each configuration item ACCESS MODE and DISPLAY MODE Summary Specify the memory display format or the size of memory locations to be modified Syntax b Byte Memory is accessed in a byte format and when memory locations are modified bytes are chan...

Page 110: ...the ser search memory for data command Note When the ACCESS_MODE is w modifying target memory will fail if you try to modify memory from an odd address or with data which byte count is odd Also you can t load file which byte count is odd Therefore it is recommended to use the emulator with the default ACCESS_MODE b Defaults The ACCESS_MODE is b at power up initialization Display mode specification...

Page 111: ...s specification used in emulation commands Description The ADDRESS parameter used in emulation commands is specified in 24 bits address information Examples m 1000 m 200000 2000ff A 6 H8 3003 Emulator Specific Command Syntax ...

Page 112: ...egister Register ER0 Register ER1 Register ER2 Register ER3 Register ER4 Register ER5 Register ER6 Register ER7 Stack pointer Mode control register Read Only sys System control mdcr syscr Mode control register Read Only System control register intc Interrupt controller iscr ier isr ipra iprb IRQ sense control register IRQ enable register IRQ status register Interrupt priority register A Interrupt ...

Page 113: ...or Refresh control register Refresh timer control status register Refresh timer counter Refresh time constant register dmac0 DMA controller 0 The following registers does not exist in 3030 3031 and 3032 mar0a etcr0a ioar0a dtcr0a mar0b etcr0b ioar0b dtcr 0b Memory address register 0A Transfer count register 0A I O address register 0A Data transfer control register 0A Memory address register 0B Tra...

Page 114: ... dtcr2a mar2b etcr2b ioar2b dtcr 2b Memory address register 2A Transfer count register 2A I O address register 2A Data transfer control register 2A Memory address register 2B Transfer count register 2B I O address register 2B Data transfer control register 2B dmac3 DMA controller 3 The following registers does not exist in 3002 3030 3031 3032 and 3042 mar3a etcr3a ioar3a dtcr3a mar3b etcr3b ioar3b...

Page 115: ...ter Write Only Port A data direction register Write Only Port B data direction register Write Only Port C data direction register Write Only 1 3 5 Port 1 data register 1 2 Port 2 data register 1 2 Port 3 data register 1 2 Port 4 data register 5 Port 5 data register 1 Port 6 data register Port 7 data register Write Only Port 8 data register Port 9 data register Port A data register Port B data regi...

Page 116: ... status register 0 Timer counter 0 General register A0 General register B0 itu1 16 bit integrated timer pulse unit 1 tcr1 tior1 tier1 tsr1 tcnt1 gra1 grb1 Timer control register 1 Timer I O control register 1 Timer interrupt enable register 1 Timer status register 1 Timer counter 1 General register A1 General register B1 itu2 16 bit integrated timer pulse unit 2 tcr2 tior2 tier2 tsr2 tcnt2 gra2 gr...

Page 117: ...errupt enable register 4 Timer status register 4 Timer counter 4 General register A4 General register B4 Buffer register A4 Buffer register B4 tpc Programable timing pattern controller tpmr tpcr ndera ndra ndra0 nderb ndrb ndrb2 TPC output mode register TPC output control register Next data enable register A Next data register A address 0xxffa5h Next data register A address 0xxffa7h Next date enab...

Page 118: ...er 1 Bit rate register 1 Serial control register 1 Transmit data register 1 Serial status register 1 Receive data register 1 Read Only adc A D converter addra addrb addrc addrd adcsr adcr A D data register A Read Only A D data register B Read Only A D data register C Read Only A D data register D Read Only A D control status register A D control register dac D A converter The following registers d...

Page 119: ...ister R2 Register R3 Register R4 Register R5 Register R6 Register R7 Register E0 Register E1 Register E2 Register E3 Register E4 Register E5 Register E6 Register E7 Register R0H Register R0L Register R1H Register R1L Register R2H Register R2L Register R3H Register R3L Register R4H Register R4L Register R5H Register R5L Register R6H Register R6L Register R7H Register R7L A 14 H8 3003 Emulator Speci...

Page 120: ...nal I O register area Action Set up the stack pointer with cf rsp command Refer to chapter 3 of this manual for more information Message 141 Invalid address for run or step in current mode Cause This error occurs when you attempt to execute user program with r or s command from address over area of current mode Message 170 Emulation memory card not found in card cage Cause This error occurs when y...

Page 121: ...Notes A 16 H8 3003 Emulator Specific Command Syntax ...

Page 122: ...cation 2 23 triggering by data 2 34 analyzer status predefined equates 2 23 Analyzer trace starting 2 24 B b Command 2 19 bc Command 2 10 2 27 4 18 Before using the emulator 2 2 bp Command 2 27 4 18 Break write to ROM 4 18 Break condition 2 27 Breaks 4 18 Bus arbitration configure emulator s response 4 4 using configuration to isolate target problem 4 4 C cf ba Command 4 4 cf chip Command 4 5 cf c...

Page 123: ...Command prompts 2 19 Command syntax specific to H8 3003 emulator A 1 Commands analyzer configuration 4 2 b 2 19 bc 2 10 2 27 4 18 bp 2 27 4 18 cf 2 9 4 3 cf ba 4 4 cf chip 4 5 cf clk 4 6 cf dbc 4 7 cf drst 4 8 cf mode 4 9 cf nmi 4 11 cf rrt 4 11 cf rsp 4 12 cf tdma 4 13 cf trfsh 4 13 cf trst 4 14 cim 2 27 configuration 4 1 coordinated measurement 4 2 cov 2 29 help 2 7 init 2 8 load 2 16 m 2 13 2 2...

Page 124: ...et to target 4 8 enable disable target interrupts 4 11 enable disable target system reset 4 14 enable disable to trace DMA cycles 4 13 enable disable to trace refresh cycles 4 13 for getting started 2 9 2 11 hardware standby 4 14 internal RAM 4 17 measurement commands 4 2 memory mapping 4 15 microprocessor operation mode 4 9 microprocessor selection 4 5 processor to emulator target system 4 1 4 3 ...

Page 125: ...zer 1 7 breakpoints 1 7 clock speeds 1 5 emulation memory 1 7 processor reset control 1 8 register display modify 1 7 restrict to real time runs 1 8 supported microprocessors 1 3 Emulator limitations 1 9 Emulator specific command syntax A 1 equates predefined for analyzer status 2 23 Evaluation chip 1 10 F Function codes memory mapping 4 15 H H8 3003 microprocessor installation procedure 3 9 Halti...

Page 126: ... system 4 11 L labels trace predefined 2 22 limitations DMA support 1 9 Hardware standby mode 1 9 4 14 internal RAM of H8 3005 1 9 Interrupts in background 1 9 Reset output enable bit 1 9 Sleep standby mode 1 9 store condition and trace 2 32 Watch dog timer in background 1 9 load Command 2 16 Loading programs 2 12 for Standalone Configuration 2 12 for Transparent Configuration 2 15 load command 2 ...

Page 127: ...ls 2 22 Predefining stack pointer 4 12 Prerequisites for using the emulator 2 2 Processor clock selection 4 6 Program loads 2 12 Program tracing 2 22 Prompts emulator command 2 19 Purpose of the Emulator 1 1 Q QFP adaptor 3 3 installation procedure 3 5 QFP probe 3 4 QFP socket adaptor 3 4 R r Command 2 19 2 20 Real time runs restricting emulator to 4 11 Refresh cycles enable disable tracing refres...

Page 128: ...age qualifier 2 24 Syntax command specific to H8 3003 emulator A 1 System commands 4 2 T t Command 2 24 target system H8 3001 with mode 3 4 3 3 H8 3004 5 with mode 3 3 3 interface 3 26 PGA adaptor 3 3 QFP adaptor 3 3 3 4 Target system dependency on executing code 4 12 Target system interrupts enable disable 4 11 Target system probe installation 3 2 target system reset 4 14 run from reset 3 12 tf C...

Page 129: ...display 2 24 Trace list format 2 24 Tracing program execution 2 22 Transfer utility 2 15 Transparent mode 2 15 Trigger signals break upon 4 19 tsto Command 2 24 effect on the analyzer 2 32 Types of configuration 4 1 X xp Command 2 15 8 Index ...

Reviews: