WARNING: I'M NOT RESPONSIBLE FOR ANY ILLEGAL ACTIVITIES ,
         This stuff is to be used for test applications 
         or educational purposes for free, if this project
         used commercially , please refer to Copyrights .
         ( none organized )




=======================================================
Title  :  Synchronous Memory card (ISO7816-2G) Emulation
Author :  SHAMOUN.eg <SilentMODE>
Project:  TeleDump 2000-2004
Contact:  [email protected]
Imprint:  436F7079726967687420284329203230
          30302D32303034205348414D4F554E2E
          6567203C53696C656E744D4F44453E2E
=======================================================



Regards :
 HackersRussia.ru 
 NewOrder.box.sk


Intro :
 I'm too late writing this stuff , while I worked with phreaking projects
 (wired line BOXiering) since 1997 ,
 this old school in most has no longer does exist !
 I'm not talking about switching systems or payphone wiring , 
 but I'll focus on modern y2k payphones which based on Smart Mermory cards ,
 so I assume you've already right understood the primitive ideas of elder
 cards (magnetic strips , AFNOR smartcards) and so you had collected all
 related documents were raised before ..
 Anyways this is the only finalized helpfull document you'll find because
 most of published stuff either is incomplete or jammed ! 
 by the way DaveX said in his phreaking manual "Why the fuck should I do all
 the research and prototyping and then give it to you on a plate? Next thing
 you'll be wanting me to build you one" .



Note on this document :
 I covered some parts in abstracts to drop nonsense , so they're enough
 to be used as search key words, if you still need more info .



Established projects :
 - Payphone Core/Reader tray Tester: (1)
    Used to measure electronic characteristic of payphone reader
    signals , and to probe mechanic triggers .
    \\PhoneCore leaked diagram.pdf
 - Synch Memory card Interface : (2) 2001
    Failed , because of out of date guides (Anfor programmer refrence) .
    \\Wasted
 - Payphone Core traffic Logger: 2001
    I was up to analyze each cough happens following that sequence 
    starting with card detection wake-up, ATR, identification, validity, 
    ready/busy/reject modes ..I thought traffic won't be in this dense !
    would you imagine what hardware and equipment did I use ? sure I did
    not stand in the street misuseing the payphone , got it ?
  * I left some parts incomplete when I found the leaked Sych ISO7816-2
    programming guide for access-contol terminals, helped me so much with
    less effort .
    \\imaginary picture (access control) 
 - Payphone Core Bomber : (3) 2001
    Failed , I tried to use invasive attack using power glitchs ,
    but failing was ok to give up thinking in this LAME way ,
    * that caused a harmful damage to payphone !
 - Synch Memory card Emulator : (4) 2002
    Succeeded , built with simple logic treating , based on risc
    microcontroller (intel 8032) .
    \\image for TeleDump v4.0 
    \\image for TeleDump v4.1 (Silver Case) 
 - Synch Memory card Emulator : (5) 2003
    Succeeded , built with more complicated logic treating , based on
    risc microcontroller (PIC16F84A) .
    \\image for TeleDump v5.0 (silver case)
 - Synch Memory card Dumper : (6 beta) 2004
    Succeeded Perfectly , this is the final project , using a smart
    technique mixing-up both of clone and emulation in real time , that
    means no more chips burning .. Original chip mit co-controller .
 - Synch Memory card Dumper : (6.1)  2004
    Actually I turned proud after tunning up last Dumper , I added 
    a small smart card socket , know what ? now use it freely with any
    application for any provider , yes plug any original chip you want
    to clone .
    \\Dumper diagram ( with chip socket )

Been frustrated for two years..
 - TeleDump v4.5
    BG main core, EEPROM bugs with credit counter . 
 - TeleDump v4.6 
    PDIP PIC16F84A again, i always felt comfort with this piece ..
    \\Stands Elegantly
    \\Cold reset button
    \\mit iPOD
    \\for Real


Other devices and software :
 EPS.E PC100 interface with re-assembled softwre PC250 . (2003)
 \\PC250 PCB + green Schematic
 SLAB 1.08 with DumpLAB reader interface. (2004)
 Synch Pre-Tester , little device checks how far emulator's tasking well,
 especially timimg diagram . (2004)
 \\PC100,250.exe 
 
 Note on PC250 reader : 
  I ignored usage of DP25 connector to reduce expense of projects and
  so to make it easier to change LPT wires arrangement , the reason is
  you may use a specific software defines LPT lines in various ways ,
  same I built small outline chip socket in the PCB with springy pins
  if you still use full card slot just expand it with wires .
  \\software and useful tools (port checker , LPTs , .. )
 * Check this manual "PCB tips for easier buid by SHAMOUN.eg"
  \\to be updated
   


Interesting spot :
 OTP memory chip (One Time Programmable) .. may I remind you in ultra-
 violet programmable ROM , they called it also OTP while we could erase 
 it completely and re-flash in a little few seconds ! 
 OTP electronic chips , still too hard to break its protection , I did
 not say impossible , but because of the complex security algorithm no
 way to program them with normal known readers ..
 I took a wide tour searching "break OTP chips protection" , 
 now I'm saying it's possible .. but that needs too expensive laboratory
 equipment . (*)
 I insisted to've a try , finished with burned chips , damaged devices , 
 wastage of much time and mony with no results :)
 \\Photos of chips from Lab
 * Check this stuff "Copy Protection in Modern Microcontrollers"
   by Sergei P. Skorobogatov 



Relative projects :
 I stuck searching , reading , testing , understanding and trying for more
 than four years .. too much time but I worked solitary , along lack of
 money and knowledge resources , beside performing another GSM projects ..
 or may I'm that stupid ..
 sometimes I had to verify each bit of long code manually ,
 in the course of time , less than eight similar projects were rarely found ,
 even deficient projects I found , guided with one word or a byte value !

 I appraise these efforts :
 - Documentation and essential tools by Stephane Bausson
 - Greece Payphone card Emulator by George Vastianos
 - TPR Payphone card Emulator by Illan Ivanovich
 - Slovakia Payphone card Reader by noMaX & mbTroNiX
 - Russian card Reader by Alperez 
 - Phrack Organization boards



Declaration :
 Honestly and not to be an impostor the ONLY close similar project is TPR
 by Illan Ivanovich I ESTEEMED that project , 
 * Illan confessed that he refined a project originally created by
   Mr.Flower ..



Warning :
 If you are a lame tweaker please do not try this ,
 I'm responsible for NOTHING , wrong implementation may cause system malfunction
 or probably distroy your machines and devices completely .
 This stuff is to be used for legal applications or educational purposes for free
 if this project used commercially , please refer to Copyrights .



=================================================================================
Copyrights :
 - Copyright (C) 2000-2004 SHAMOUN.eg <SilentMODE> All rights reserved for
   own projects , tools and documents .
 - Same way All rights reserved to mentioned buddies and groups for their 
   projects , tools and documents .
 - This package is a TeleDump full project created by SHAMOUN.eg <SilentMODE>
 - This project is free for commercial and non-commercial use as long as
   the following conditions are adhered to :
    Copyright remains SHAMOUN.eg , and as such any Copyright notices in the
    code, schematic, diagram and PCB are not to be removed , If this Project
    is used in another project or product , SHAMOUN.eg should be given attribution
    as the author of the parts of the Project used , This can be in the form of a
    textual message at program startup or in documentation (online or textual)
    provided or printed on the Project.
 - Redistribution and use in source, diagrams, PCBs and binary forms with or
   without modification are permitted provided that the following conditions
   are met:
   1. Redistributions of source code must retain the copyright notice, this
      list of conditions and the following disclaimer.
   2. Redistributions in schematic must reproduce the above copyright notice,
      this list of conditions and the following disclaimer in the documentation
      and/or other materials provided with the distribution.
   3. All advertising materials mentioning features or use of this Project must
      display the following acknowledgement: "This product includes synchronous 
      smartcard software/schematic/PCB created by SHAMOUN.eg <SilentMODE> .
 - THIS PROJECT IS PROVIDED BY SHAMOUN ``AS IS'' AND ANY EXPRESS OR IMPLIED
   WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 
   MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
   EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT , INDIRECT,
   INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
   LIMITED TO ,PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES ; LOSS OF USE, DATA,
   OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
   LIABILITY, WHETHER INCONTRACT,STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
   OR OTHERWISE) RAISING IN ANY WAY OUT OF THE USE OF THIS PROJECT , EVEN IF
   ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 - The licence and distribution terms for any publically available version or
   derivative of this project cannot be changed. i.e. this project contents 
   cannot simply be copied and put under another distribution licence [including
   the GNU Public Licence.]
 * The reason behind this being stated in this direct manner is past experience
   in projects simply being copied and the attribution removed from it and then
   being distributed as part of other packages. This implementation was a non-
   trivial and unpaid effort.
=================================================================================



Explanation :
 TeleDump v6.1 is a PayPhone memory card Emulator , it Emulates ISO7816-2
 Synchronized transmission protocol , built simply mit few parts .
 It workes in a very smart and new technique "don't call me exaggerator"
 because it's pretty different than all other emulators , it uses
 the original chip card , so it reads card ID , serial # , manufacturer  
 code and more from the original card , that means NO fraud detection from 
 provider , the microcontroller will keep watching traffic between payphone 
 and smartcard passively till credit counter value begins to change , that
 triggers the microcontroller to start tasking , and so to stop the orignal
 chip from trasmitting (IO line controlled by FET transistor) , it takes
 down the payphone to a dummy loop counter equivalent the original credit 
 value , so you'll keep talking till (dummy) credit expires , once you 
 remove the emulator and enter it again you'll find the credit from 
 original card did not changed . 
 One more thing to integrate your work perfectly is to use an expired card
 as an alternate for the copper board to avoid faked cards detectors .



More Technical details :
  WriteCarry operation: 
   WriteCarry sequence used to write to the adressed bit and to
   erase the next counter stage (set all bits to "1") simultaneosly.
   It is not possible to erase the next counter stage if adressed bit is
   already written to (set to "0").
   The WriteCarry sequence is as follows:
   1. RST is raised while CLK is low, to disable address counter increment.
   2. CLK is raised for a minimum of 10ms to write to the addressed bit.
   3. RST is raised again while CLK low to disable address increment for
      next two clock pulses.
   4. CLK is raised for a minimum of 10ms to erase the next counter stage.
      All bits in the next counter stage are now set to "1".
   5. CLK is raised again for a minimum of 1ms finishing writecarry operation.
 * (From WriteCarry operation (c) 1998-99 Syrius Dire Service)



TeleDump v6.0/v6.1 Components :
 1- 1x PIC16F84A risc microcontroller (recommended with socket)
 2- 1x Original memory chip separated from full card
 3- 1x 5k resistor 0.25watt 
 4- 1x 680ohm resistor 0.25watt 
 5- 1x Diode 1N4148 
 6- 1x 20pF ceramic condenser
 7- Photo-Copper board (use an expired chip card if you got the skill)
 8- 3x 3.3v LEDs (Optional)
 9- SIM socket (Optional)
 \\ TeleDump diagrams , PCB
 



TeleDump v6.1 Code :
 No problem to find Register/Bit Definitions for the PIC16F84A (16F84.INC) ,
 I supposed you're using MPasm compiler that includes basic PIC libraries ,
 I wrote the code carefully signed ports in arranged way , that serves the
 end-look of the project , and so makes it easier building takes less space
 of board .
 \\TeleDump.obj



Important notes for PIC16F84A :
 - Read the chip manual carefully before starting your work .
 - Most of other presented projects are based on 16C84 , so use only TeleDump
   v6.1 code for (F) series , or modify it yourself for (C) series .
 - Pay attention wtih these Fuses in (F): 
    CP_ON        EQU  H'000F'
    CP_OFF       EQU  H'3FFF'
    PWRTE_ON     EQU  H'3FF7'
    PWRTE_OFF    EQU  H'3FFF'
 \\*.INC,*.EQU,Samples



Other relative Codes :
 Here's all sources which I tested and found them true ,
 I must say they are NOT MY OWN , I collected them via the undernet , warez and
 boards libraries , all of them are based on Microchip Technology System 
 asm samples  but I had never removed or modified licenses attached with
 any code I found , got it ?!
 \\xx4406 programmers 



Only three Steps to clone/emulate synch memory card :
 1- Reading :
    Build sync card reader , insert original card
    run compatible software ex. PC250 , scan card ,
    save memory .
 2- Cloneing :
    Build pic programmer ex. LudiPiPO ,
    burn the PIC with the maintained code from reader , "while primary
    code length exacts 16 bytes only you may write them manually in the 
    PIC tool" .
 3- Assembling the emulator :
    Build the PCB , plug components and solder them ,
    pay attention with dimensions and the insulated area around ISO
    contacts .
 
 Now you're ready , ( DO NOT MAKE A TOLL-FREE CALLS , USE THIS FOR TEST
 OR EDUCATIONAL PURPOSES ONLY ) .
    \\True Photo of Payphone counting amazing credit


Tested Mermoy Cards and providers :
 Chips : GEMplus, SOLAIC, SIEMENS, G&D, Uniqa, ODS, Schlumberger and Orga .
 Providers : MenaTel (FranceTelecom/ASCOM) , Ringo (Schlumberger) .
 \\photos of their cards and phones
  ftp.ascom.com/ thanks admin :) 
  
 * Theoretically it must work with other providers with No modifications ,
   except those still using AFNOR 7816(T1G) for sure !
   if you found contrary troubles send me a binary image of your card .





Ending :
 I hope this stuff could profit , my english sux but I did my best !
 great pleasure to receive your requests .



Contacts :
 send memo to SilentMODE @ http://NewOrder.box.sk
 send memo to SilentMODE @ irc.DAL.net
 send mail to [email protected] 



Links :
 http://HackersRussia.ru/Cards/Shamoun
 http://Hack.gr/Phreak/Shamoun
 http://www.SilentMODE.s5.com
 http://NewOrder.box.sk/phreak/doc/emulation
 http://Phrack.pl/projects/Shamoun
 or search the web !
Grand Links :
 http://Digital-Laboratory.de
 http://TextFiles.com



Next releases :
 Access Freed "breaking access control terminals"
 BigEAR "analog sniffer could be integrated with digital decoders"
 GSM interceptor "passive traffic interceptor/exploiter"
 soon in prime of 2004 ,exclusive projects by SHAMOUN.eg .



Sign :
 SHAMOUN.eg
<SilentMODE>



======================================================
TeleDump Package contents :
 - Photos for all my own projects ever failing 
 - TeleDump diagrams and PCBs 
 - This document 
 - TeleDump.asm source
 - TeleDump.hex in 8bit intel format

Other 
 - Readers 
 - Tools
 - Dumps
 - Sources
 - schematics , diagrams and PCBs
 - Photos

Package size 21.4MB
\\Download 
======================================================



MPASM 02.15 Released         TELEDUMP.ASM   1-30-2004  4:24:32         PAGE  1
LOC  OBJECT CODE     LINE SOURCE TEXT
  VALUE

                    00001         TITLE "TeleDump v6.1 by SHAMOUN.eg"
                    00002         LIST P=PIC16F84, R=HEX
                    00003         INCLUDE "P16F84.INC"
                    00001         LIST
                    00002 ; P16F84.INC  Standard Header File, Version 2.00    Microchip Technology, Inc.
                    00136         LIST
  00000000          00004 RST             EQU     0
  00000000          00005 WRITECARRY      EQU     0
  00000001          00006 ACTIVEPIC       EQU     1
  00000002          00007 ACTIVECHIP      EQU     2
  00000003          00008 UNBIT           EQU     3 
  00000003          00009 CONTROL         EQU     3
  00000004          00010 DTA             EQU     4
  00000005          00011 PA              EQU     PORTA
  00000006          00012 PB              EQU     PORTB
  00000007          00013 CLK             EQU     7
000C                00014                 ORG     0XC
000C                00015 HEADER          RES     5
0011                00016 LOOPCNT         RES     1
0012                00017 PRUEBA          RES     1
0013                00018 BYTE            RES     1
0014                00019 BITCNT          RES     1
0015                00020 POSCNT          RES     1
0016                00021 BYTECNT         RES     1
0017                00022 BYTETEMP        RES     1
2007                00023         ORG     0X2007
2007 0013           00024         DATA    0X13
2100                00025         ORG     0X2100
2100 0008 0000 0001 00026         DE      0X08,0X00,0X01,0X1F,0X00
     001F 0000 
0000                00027         ORG     0               
0000 2847           00028         GOTO    INIT        
0004                00029         ORG     0X04
0004 1205           00030         BCF     PA,4
0005 1B86           00031 RSTW    BTFSC   PB,7
0006 2858           00032         GOTO    RESET
0007 1806           00033         BTFSC   PB,0
0008 2805           00034         GOTO    RSTW
0009 1B97           00035         BTFSC   BYTETEMP,7
000A 1605           00036         BSF     PA,4
000B 1812           00037         BTFSC   PRUEBA,0
000C 283F           00038         GOTO    WRITECA
000D 1C92           00039         BTFSS   PRUEBA,ACTIVEPIC
000E 28A1           00040         GOTO    CLKLOW
000F 3090           00041 WRITE   MOVLW   B'10010000'
0010 008B           00042         MOVWF   INTCON 
0011 1F86           00043         BTFSS   PB,7
0012 280F           00044         GOTO    WRITE
0013 018B           00045         CLRF    INTCON
0014 1F97           00046         BTFSS   BYTETEMP,7
0015 283D           00047         GOTO    NOWRITE
0016 018B           00048         CLRF    INTCON
.MPASM 02.15 Released         TELEDUMP.ASM   1-30-2004  4:24:32         PAGE  2
TeleDump v6.1 by SHAMOUN.eg

LOC  OBJECT CODE     LINE SOURCE TEXT
  VALUE

0017 018A           00049         CLRF    PCLATH
0018 1412           00050         BSF     PRUEBA,0
0019 1397           00051         BCF     BYTETEMP,7
001A 018A           00052         CLRF    PCLATH
001B 0815           00053         MOVF    POSCNT,W
001C 0782           00054         ADDWF   PCL,F
001D 0000           00055         NOP
001E 2834           00056          GOTO    BIT7
001F 2832           00057          GOTO    BIT6
0020 2830           00058          GOTO    BIT5
0021 282E           00059          GOTO    BIT4
0022 282C           00060          GOTO    BIT3
0023 282A           00061          GOTO    BIT2
0024 2828           00062          GOTO    BIT1
0025 1013           00063 BIT0    BCF     BYTE,0
0026 0A95           00064         INCF    POSCNT,F
0027 2835           00065         GOTO    ENDBIT
0028 1093           00066 BIT1    BCF     BYTE,1
0029 2835           00067         GOTO    ENDBIT
002A 1113           00068 BIT2    BCF     BYTE,2
002B 2835           00069         GOTO    ENDBIT
002C 1193           00070 BIT3    BCF     BYTE,3
002D 2835           00071         GOTO    ENDBIT
002E 1213           00072 BIT4    BCF     BYTE,4
002F 2835           00073         GOTO    ENDBIT
0030 1293           00074 BIT5    BCF     BYTE,5
0031 2835           00075         GOTO    ENDBIT
0032 1313           00076 BIT6    BCF     BYTE,6
0033 2835           00077         GOTO    ENDBIT
0034 1393           00078 BIT7    BCF     BYTE,7        
0035                00079 ENDBIT  
0035 0813           00080         MOVFW   BYTE
0036 0080           00081         MOVWF   INDF        
0037 1B86           00082 WOFF    BTFSC   PB,7
0038 2837           00083         GOTO    WOFF
0039 1205           00084         BCF     PA,4
003A 3090           00085         MOVLW   B'10010000'
003B 008B           00086         MOVWF   INTCON            
003C 286C           00087         GOTO    CLOCK 
003D 1F86           00088 NOWRITE BTFSS   PB,7
003E 283D           00089         GOTO    NOWRITE         
003F                00090 WRITECA
003F                00091 WRITECA 
003F 1F86           00092         BTFSS   PB,7
0040 283F           00093         GOTO    WRITECA        
0041 1012           00094         BCF     PRUEBA,WRITECARRY
0042 0A84           00095         INCF    FSR,1
0043 30FF           00096         MOVLW   0XFF
0044 0080           00097         MOVWF   INDF
0045 0384           00098         DECF    FSR,1
0046 2837           00099         GOTO    WOFF        
0047                00100 INIT
0047 1683           00101         BSF     STATUS,5
.MPASM 02.15 Released         TELEDUMP.ASM   1-30-2004  4:24:32         PAGE  3
TeleDump v6.1 by SHAMOUN.eg

LOC  OBJECT CODE     LINE SOURCE TEXT
  VALUE

0048 30FF           00102         MOVLW   0XFF
0049 0085           00103         MOVWF   TRISA
004A 1283           00104         BCF     STATUS,5        
004B 018B           00105         CLRF    INTCON      
004C 1605           00106         BSF     PA,4
004D 300C           00107         MOVLW   HEADER
004E 0084           00108         MOVWF   FSR
004F 3005           00109         MOVLW   .5
0050 0091           00110         MOVWF   LOOPCNT
0051 0189           00111         CLRF    EEADR
0052 0196           00112         CLRF    BYTECNT
0053                00113 COPYHEADER 
0053 20B2           00114         CALL    CARDID
0054 0080           00115         MOVWF   INDF         
0055 0A84           00116         INCF    FSR,1             
0056 0B91           00117         DECFSZ  LOOPCNT,1  
0057 2853           00118         GOTO    COPYHEADER
0058                00119 RESET   
0058 1186           00120         BCF     PB,CONTROL
0059 1605           00121         BSF     PA,DTA
005A 1806           00122         BTFSC   PB,0
005B 2858           00123         GOTO    RESET 
005C 300C           00124         MOVLW   HEADER
005D 0084           00125         MOVWF   FSR
005E 0800           00126         MOVFW   INDF
005F 0097           00127         MOVWF   BYTETEMP
0060 0093           00128         MOVWF   BYTE
0061 1806           00129 RSTOFF  BTFSC   PB,0
0062 2861           00130         GOTO    RSTOFF
0063 1683           00131         BSF     STATUS,5
0064 30FF           00132         MOVLW   0XFF
0065 0085           00133         MOVWF   TRISA
0066 1283           00134         BCF     STATUS,5             
0067 0194           00135         CLRF    BITCNT
0068 0195           00136         CLRF    POSCNT
0069 0192           00137         CLRF    PRUEBA       
006A 3090           00138         MOVLW   B'10010000'
006B 008B           00139         MOVWF   INTCON
006C 1F86           00140 CLOCK   BTFSS   PB,7
006D 286C           00141         GOTO    CLOCK
006E 1892           00142         BTFSC   PRUEBA,ACTIVEPIC
006F 2883           00143         GOTO    ACTIVAPIC
0070 1912           00144         BTFSC   PRUEBA,ACTIVECHIP
0071 28A4           00145         GOTO    ACTIVACHIP      
0072 1012           00146         BCF     PRUEBA,0
0073 303F           00147         MOVLW   .63
0074 0214           00148         SUBWF   BITCNT,W
0075 1D03           00149         BTFSS   STATUS,Z
0076 287F           00150         GOTO    CLOCKOFF
0077 0194           00151         CLRF    BITCNT
0078 1492           00152         BSF     PRUEBA,ACTIVEPIC
.MPASM 02.15 Released         TELEDUMP.ASM   1-30-2004  4:24:32         PAGE  4
TeleDump v6.1 by SHAMOUN.eg

LOC  OBJECT CODE     LINE SOURCE TEXT
  VALUE

0079 1586           00153         BSF     PB,CONTROL
007A 1683           00154         BSF     STATUS,5
007B 0185           00155         CLRF    TRISA
007C 1283           00156         BCF     STATUS,5  
007D 1205           00157         BCF     PA,DTA   
007E 0A95           00158         INCF    POSCNT 
007F                00159 CLOCKOFF
007F 1B86           00160         BTFSC   PB,7          
0080 287F           00161         GOTO    CLOCKOFF  
0081 0A94           00162         INCF    BITCNT,F
0082 286C           00163         GOTO    CLOCK
0083                00164 ACTIVAPIC
0083 0D97           00165         RLF     BYTETEMP,F 
0084 3008           00166         MOVLW   .8
0085 0215           00167         SUBWF   POSCNT,W
0086 1D03           00168         BTFSS   STATUS,Z
0087 288E           00169         GOTO    LECTURA
0088 0A84           00170         INCF    FSR,1
0089 0800           00171         MOVFW   INDF
008A 0097           00172         MOVWF   BYTETEMP
008B 0093           00173         MOVWF   BYTE
008C 0A96           00174         INCF    BYTECNT,F
008D 0195           00175         CLRF    POSCNT
008E                00176 LECTURA
008E 1B97           00177         BTFSC   BYTETEMP,7
008F 1605           00178         BSF     PA,DTA
0090 1F97           00179         BTFSS   BYTETEMP,7
0091 1205           00180         BCF     PA,DTA
0092 0A95           00181         INCF    POSCNT
0093 3028           00182         MOVLW   .40
0094 0214           00183         SUBWF   BITCNT,W
0095 1D03           00184         BTFSS   STATUS,Z
0096 287F           00185         GOTO    CLOCKOFF
0097 1092           00186         BCF     PRUEBA,ACTIVEPIC
0098 1512           00187         BSF     PRUEBA,ACTIVECHIP
0099 0196           00188         CLRF    BYTECNT
009A 0194           00189         CLRF    BITCNT
009B 1683           00190         BSF     STATUS,5
009C 30FF           00191         MOVLW   0XFF
009D 0085           00192         MOVWF   TRISA
009E 1283           00193         BCF     STATUS,5 
009F 1186           00194         BCF     PB,CONTROL
00A0 1592           00195         BSF     PRUEBA,UNBIT
00A1 1B86           00196 CLKLOW  BTFSC   PB,7
00A2 28A1           00197         GOTO    CLKLOW
00A3 286C           00198         GOTO    CLOCK
00A4                00199 ACTIVACHIP
00A4 3033           00200         MOVLW   .51
00A5 0216           00201         SUBWF   BYTECNT,W
.MPASM 02.15 Released         TELEDUMP.ASM   1-30-2004  4:24:32         PAGE  5
TeleDump v6.1 by SHAMOUN.eg

LOC  OBJECT CODE     LINE SOURCE TEXT
  VALUE

00A6 1903           00202         BTFSC   STATUS,Z
00A7 2858           00203         GOTO    RESET
00A8 1D92           00204         BTFSS   PRUEBA,UNBIT
00A9 0A95           00205         INCF    POSCNT
00AA 1192           00206         BCF     PRUEBA,UNBIT 
00AB 3008           00207         MOVLW   8
00AC 0215           00208         SUBWF   POSCNT,W
00AD 1D03           00209         BTFSS   STATUS,Z
00AE 287F           00210         GOTO    CLOCKOFF
00AF 0A96           00211         INCF    BYTECNT
00B0 0195           00212         CLRF    POSCNT
00B1 287F           00213         GOTO    CLOCKOFF
00B2                00214 CARDID                  
00B2 1683           00215          BSF     STATUS,RP0
00B3 1408           00216          BSF     EECON1,RD
00B4 1283           00217          BCF     STATUS,RP0
00B5 0A89           00218          INCF    EEADR,F
00B6 0808           00219          MOVF    EEDATA,W
00B7 0008           00220          RETURN
                    00221         END
.MPASM 02.15 Released         TELEDUMP.ASM   1-30-2004  4:24:32         PAGE  6
TeleDump v6.1 by SHAMOUN.eg

SYMBOL TABLE
  LABEL                             VALUE 

ACTIVACHIP                        000000A4
ACTIVAPIC                         00000083
ACTIVECHIP                        00000002
ACTIVEPIC                         00000001
BIT0                              00000025
BIT1                              00000028
BIT2                              0000002A
BIT3                              0000002C
BIT4                              0000002E
BIT5                              00000030
BIT6                              00000032
BIT7                              00000034
BITCNT                            00000014
BYTE                              00000013
BYTECNT                           00000016
BYTETEMP                          00000017
C                                 00000000
CARDID                            000000B2
CLK                               00000007
CLKLOW                            000000A1
CLOCK                             0000006C
CLOCKOFF                          0000007F
CONTROL                           00000003
COPYHEADER                        00000053
DC                                00000001
DTA                               00000004
EEADR                             00000009
EECON1                            00000088
EECON2                            00000089
EEDATA                            00000008
EEIE                              00000006
EEIF                              00000004
ENDBIT                            00000035
F                                 00000001
FSR                               00000004
GIE                               00000007
HEADER                            0000000C
INDF                              00000000
INIT                              00000047
INTCON                            0000000B
INTE                              00000004
INTEDG                            00000006
INTF                              00000001
IRP                               00000007
LECTURA                           0000008E
LOOPCNT                           00000011
NOT_PD                            00000003
NOT_RBPU                          00000007
NOT_TO                            00000004
NOWRITE                           0000003D
OPTION_REG                        00000081
PA                                00000005
PB                                00000006
.MPASM 02.15 Released         TELEDUMP.ASM   1-30-2004  4:24:32         PAGE  7
TeleDump v6.1 by SHAMOUN.eg

SYMBOL TABLE
  LABEL                             VALUE 

PCL                               00000002
PCLATH                            0000000A
PORTA                             00000005
PORTB                             00000006
POSCNT                            00000015
PRUEBA                            00000012
PS0                               00000000
PS1                               00000001
PS2                               00000002
PSA                               00000003
RBIE                              00000003
RBIF                              00000000
RD                                00000000
RESET                             00000058
RP0                               00000005
RP1                               00000006
RST                               00000000
RSTOFF                            00000061
RSTW                              00000005
STATUS                            00000003
T0CS                              00000005
T0IE                              00000005
T0IF                              00000002
T0SE                              00000004
TMR0                              00000001
TRISA                             00000085
TRISB                             00000086
UNBIT                             00000003
W                                 00000000
WOFF                              00000037
WR                                00000001
WREN                              00000002
WRERR                             00000003
WRITE                             0000000F
WRITECA                           0000003F
WRITECARRY                        00000000
Z                                 00000002
_CP_OFF                           00003FFF
_CP_ON                            0000000F
_HS_OSC                           00003FFE
_LP_OSC                           00003FFC
_PWRTE_OFF                        00003FFF
_PWRTE_ON                         00003FF7
_RC_OSC                           00003FFF
_WDT_OFF                          00003FFB
_WDT_ON                           00003FFF
_XT_OSC                           00003FFD
__16F84                           00000001
.MPASM 02.15 Released         TELEDUMP.ASM   1-30-2004  4:24:32         PAGE  8
TeleDump v6.1 by SHAMOUN.eg

MEMORY USAGE MAP ('X' = Used,  '-' = Unused)


0000 : X---XXXXXXXXXXXX XXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXX
0040 : XXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXX
0080 : XXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXX XXXXXXXX--------
2000 : -------X-------- ---------------- ---------------- ----------------
2100 : XXXXX----------- ---------------- ---------------- ----------------

All other memory blocks unused.

Program Memory Words Used:   181
Program Memory Words Free:   843


Errors   :     0
Warnings :     0 reported,     0 suppressed
Messages :     0 reported,     0 suppressed

.

======================================================
TeleDump.hex
:0200000047288F
:080008000512861B582806189A
:100010000528971B051612183F28921CA12890301E
:100020008B00861F0F288B01971D3D288B018A01AB
:10003000121497138A011508820700003428322809
:1000400030282E282C282A2828281310950A3528ED
:10005000931035281311352893113528131235289C
:100060009312352813133528931313088000861B29
:100070003728051290308B006C28861F3D28861F7C
:100080003F281210840AFA3080008403372183162B
:10009000FF30850083128B0105160C20840005307B
:1000A000910089019601B2208000840A910B5328A7
:1000B00086110516061858280C3084000008970091
:1000C0009300061861288316FF308500831294017F
:1000D0009501920190308B00861F6C28921883281E
:1000E0001219A42812103F301402031D7F28940116
:1000F000921486158316850183120512950A861BB4
:100100007F28940A6C28970D08301502031D8E284D
:10011000840A000897009300960A9501971B05161C
:10012000971E0512950A28301402031D7F2892108C
:100130001215960194018316FF30850083128611F3
:100140009215861BA1286C283330160203195828F3
:10015000921D950A921108301502031C7F28960AF8
:1001600095017F28831608148312890A080808005D
:02400E0013009D
:0A4200000800000001001F0000008C
:00000001FF


































Hosted by www.Geocities.ws