Bc2000 (for the BCF2000 & BCR2000) group photo

Yahoo Groups archive

Bc2000 (for the BCF2000 & BCR2000)

Index last updated: 2026-04-28 23:16 UTC

Message

Re: Firmware decoding ?

2007-10-26 by rpcfender

Hi Jay
> Has anybody here ever tried to decompile the firmware syx file to
study it ?
> Is it at least possible ?
Yes, but...
1.  sysex works by having an 8bit header byte $F0 and ending with $F7
and everything else in between is 7 bits (0 to $7F)
So to send, say, 8 bit opcodes (programs) you need to pack the 8 bit
into the 7 bits. There are a couple of ways to do this .
You can divide the 8 bits into 2 4bit parts and send each of those as a
7 bit number. The 4 lower bits would usually be in the 4 lower bits of
the sent byte but the upper nibble (4bits) could be placed anywhere in
the 7 bits.
Which comes first the lower nibble or the upper nibble?
The micro controller could also be a 16bit chip which would make it even
more interesting.

A favorite of Emu systems is to have 7    8bit bytes lined up (imagine
the bytes joined end to end so the binary ones and zeros are in a long
line) and cut the binary number up into 7 bit bytes to send. This means
you can send 7bytes of program in 8 bytes of MIDI, the quickest
transmission possible.

You need to find out the micro controller for the unit (strangely the
BCR is one device I am yet to pull apart) and get the op code reference.
Easy to do off the web. Then either take the code byte by byte and
disassemble it or find a program to do this.

Xavier took many hours to do this for the FCB1010, but the result was a
much better coded unit with lots of extra functions.
He was kind enough to give me a very early copy of his dissembled code
so I could add the little bit of new functionality that I was interested
in.

>
> There are so many things that could be added to the emulation modes
(among
> other things) that it would be smashing if someone could do that.
Absolutely, but it requires a very skilled person to donate a hell of a
lot of time.

>
> Obviously, I cannot program, so I might not well realise how difficult
this
> might be........
>
The difficulty really lies in the time involved.
The was some chat a while ago about someone trying to do it, but I'm not
sure what has happened.
It might have been Mark, but he has been so busy with the graphic editor
that I haven't heard from him for a while.

Feel free to dive in. Perhaps you could find out what the micro
controller is and/or persuade Behringer to give you a copy of the
circuit diagram. (Someone managed to do this with the FCB1010 and it
made the re-coding much easier)

All the best
Royce

Attachments

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.