couldn't you *force* such a chip to yield up it's internal code by utilizing all of a keypad's functions? A combination of that and *watching* the outputs of pins upon startup. I have this thing in my head, I'm having, obviously, a bit of an awkward time putting it in print. Some sort of logic analyzer would be necessary, but even a home brewed job would seem to be in the trivial category by today's speeds. ?In Hacking the Xbox ,I believe (it's been a while) Bunnie Huang did something like this. The dude I obtained a stack of Tandy 2000s years ago said he had worked on a mod that would spy on interrupts as they were generated (via a pal chip) and revert to a different set of routines that would, according to him, make the 2000 completely pc compatible. He never finished. An extremely interesting premise though. --- On Wed, 5/6/09, John Robertson <jrr at flippers.com> wrote: From: John Robertson <jrr at flippers.com> Subject: Re: Extracting a 8049 (ROM) program To: General at invalid.domain, "On-Topic Posts Only" <cctech at classiccmp.org> Date: Wednesday, May 6, 2009, 1:39 PM Alexandre Souza wrote: The 8049 appears to have the same pinout as the 8041 and as such probably can be read on my Xeltek burner...I just don't have an 8049 to check... The 8041 ROM code is not protected and can be read with any Eprom Programmer that handles that series. My Xeltek SuperPro can handle that as can any other burner that shows the 8041 in its list of supported devices. John :-#)# -- John's Jukes Ltd. 2343 Main St., Vancouver, BC, Canada V5T 3C9 Call (604)872-5757 or Fax 872-2010 (Pinballs, Jukes, VideoGames) ? ? ? ? ? ? ? ? www.flippers.com "Old pinballers never die, they just flip out"