trs80gp -m4 -ee program.cmdAnd it will go through its paces writing output to trs80-printer.txt. If trs80gp doesn't exit then you know your program went wrong.
In batch mode many of the menu entries switch to saving files without prompting. In most cases those files are named in sequence starting with file-0.txt, file-1.txt and so on. Those are represented by file-%d.txt.
Menu | Output file(s) |
---|---|
Bus Use | bus-use-%d.txt |
Backtrace | backtrace-%d.txt |
Text VRAM | trs80-text-%d.bin |
Character Generator VRAM | trs80-char-%d.bin |
Graphics VRAM | trs80-graphics-%d.bin |
RAM | trs80-ram-%d.bin |
RAM16 | trs80-ram16-%d.bin |
Expansion RAM | trs80-expram-%d.bin |
XLR8er RAM | trs80-xlr8er-ram-%d.bin |
Cassette → Auto Save | trs80-cassette-%d.bin |
Audio | trs80-%d.wav |
MHz Audio | trs80-%d-mhz.wav |
CPU Profile | profile-%d.txt |
Trace | bus-trace-%d.txt |
Flash Video | trs80-%d.flv |
Video | trs80-%d.avi |
Animated GIF | trs80-%d.gif |
Screenshot | trs80-%d.gif |
Printer | trs80-printer.txt |
Diskette (on exit) | trs80-drive%d-%d.dsk |
Hard Drive | trs80-hard-disk-%d.dsk |
Wafer (on exit) | trs80-wafer%d-%d.tape |
It is worth re-iterating that automated input options are tantamount to scripting control over the emulated TRS-80 and can be used to build up automated tests of your TRS-80 programs.
The Z-80 debugger may be activated at any time using Debug → Z-80 Debugger... It will also come up automatically when a breakpoint is hit. Breakpoints can be set interactively in the debugger window in the section just below the "Go" button. Breakpoints cover a range of addresses from the value in the left box to the one in the right which will be filled in semi-automatically to specify a single address. Make sure to tick the checkbox next to the start address/label to enable the breakpoint. PC breakpoints can also be set by double-clicking on the Disassembly sub-window.
You may set up to 4 breakpoints of each type. A "PC Breakpoint" is the traditional kind which is triggered whenever a program executes in the given address range. Other types trigger whenever memory is read or written in the range or I/O is performed. These types are useful to find when particular variables are changed or accessed and finding when devices are accessed.
Breakpoints may also be set on the command line by the -b, -bm, -bio and related options. For Z-80 machines use -b 0 to start the debugger immediately at machine startup or reset. On 6800, 6803 and 6809 machines use -bmr fffe to achieve the same effect.
A > appears in the disassembly window to indicate the next instruction to execute and an asterisk (*) to show any active PC breakpoints.
Memory and I/O breakpoints show extra information in the debug window when they are triggered. The Disassembly sub-window will show a ! to indicate the instruction that caused the fault and additional letter codes indicating what kind of fault or faults occurred. The > will point to the next instruction to execute as usual.
R Read protected memory W Write protected memory E Execute protected memory S Stack protected memory I Input protected I/O O Output protected I/O
The debugger window title will indicate the CPU has stopped, give the memory or I/O address involved and the breakpoint that triggered the stoppage, if any. Programs loaded in .bds form come with memory protection and the debugger will show ".bds file" as the source of a fault. Or "program" if the program itself set up protected memory with emulator extensions.
Various sub-windows show the current Z-80 register contents with them displayed in red if they changed during the previous step. All values are displayed in hexadecimal except for the T-state and cycles counters. There is also a view of the top of the stack and a T-state counter which can be changed as desired to measure intervals interactively.
The Step button moves execution forward a single instruction. Step Over sets a breakpoint after the current instruction and resumes execution. This is useful for CALLs to run quickly though a subroutine. Grizzled Z-80 programmers know there's no guarantee a CALL will return right after itself so caveat emptor. "Go" resumes execution until the next breakpoint or protection violation. The "Emulator Extensions" checkbox may be turned off to disable protection checks.
When single stepping the display will turn gray to give an indication where the CRT beam is at that moment in execution. There are also boxes in the lower left which give the CRT beam raster Y and X coordinates. The debugger is still operational when the TRS-80 is running. You can change registers and memory locations which will show a light-blue background to indicate you've frozen your view of them so you may change it.
Since the screen shows the contents of the previous frame and the drawing of the current frame you will not usually see an immediate change when writing to screen memory. It only shows up when the CRT beam reads and draws it. The debugger memory view gives you the ability to see immediate changes to the various different RAM systems. The defaults is "Z-80 Memory" which shows the Z-80's view of its 65536 memory locations. In the Model 1 and 3 this will show the BASIC ROM in the first 12 or 14 K or memory, the keyboard matrix from $3800 to $3BFF, the video RAM from $3C00 to $3FFF and ordinary RAM from $4000 up to $FFFF or less if a value lower than 48 was given to the -mem command line option. There may be no memory for some of the address space (e.g., $3000 .. $37FF on the Model I). Such regions will display as ~ff (or ~00 on the Model II) and cannot be changed.
You can also select just the RAM to focus on the 48K of memory. But keep in mind these other views use their own addressing. The RAM view starts at 0 but that is seen (by the Model 1 and 3) as starting at $4000. The amount and type of each varies depending on the Model but you'll typically see Text VRAM for the usual character display, and Hires VRAM for the high resolution graphics option (which is usually only accessible to the Z-80 through I/O ports).
You can search through memory by typing a string into the search box. The usual backslash escapes can be used for control and graphics characters: \n, \r, \t and \HH for any hexadecimal value. If the string starts with $ then the rest is taken to be hexadecimal digits with spaces ignored. The < and > buttons cycle through the matches which are highlighted in the memory window below.
In a clunky way RAM can be changed. The easiest approach to to select a memory byte and write a new hexadecimal value for it. The emulator simply reads back the memory dump so you can also delete a line and enter any address followed by a colon and a series of space-separated hexadecimal bytes to change memory locations without having to look at them.
A few pseudo-memory regions are viewable but not changeable. They are intended to give a partial view of the TRS-80 hardware state.
Z-80 Device What the Z-80 would return if an I/O were read. Z-80 Port Writes The last value written by the Z-80 to a port. Z-80 Port Reads The last value read from an I/O port by the Z-80.
At the bottom of the window are line of check boxes and drop-downs to control bus tracing which is discussed later.
Most of the Z-80 register state shown is familiar to Z-80 programmers and can be directly altered by Z-80 programs. The IFF1 checkbox is checked when interrupts are enabled (by an EI) instruction and not when they are disabled by a DI instruction or entry into an interrupt routine. Relatedly, IM shows the interrupt mode of the processor which pretty much has to be 1 for Model 1, 3 and 4 computers and 2 for the Model 2 line. The I register is mostly only relevant in interrupt mode 2.
Other state is not directly accessible and pretty much just showing off how accurate trs80gp's Z-80 emulation is.
WZ is an internal temporary register used by Z-80 during various 16 bit operations. In an officially undocumented but reliable quirk of implementation bits 3 and 5 of this register are put into bits 3 and 5 of the flag register F whenever a BIT test is done on (HL)). Early investigators of this called the register MEMPTR. Google "Z80 MEMPTR" or try this link to learn more.
EXX, AFAF', DEHL and DE'HL' show the state of internal flip-flops that select different banks of registers when EXX, EX AF,AF' and EX DE,HL instructions are executed. Effectively they show the number of times modulo 2 each instruction has been executed but the Z-80 program and trs80gp's Z-80 debugger show the currently active sets are you would expect.
The dropdown shows special Z-80 processor states and will spend 99.999% of its time in Normal mode. The other modes are:
The debugger also provides a sub-window for watching expressions. For each expression you choose what result to show: The memory byte or word at the calculated value, or the value itself (or the high/or low byte of the value)
Expressions use C-like syntax consisting of:
Use Debug → Source Code to bring up the source code that has been loaded. It will look a bit like an assembler listing file. The current program location will be highlighted and follow the execution of the Z-80.
The format also defines symbolic labels so you can type these labels in to the breakpoint or register windows instead of having to look up the hexadecimal values yourself. You can also use labels for the -b and other command line option to set breakpoints.
In certain situations you may want to have symbols available for a program but don't wish to load it into memory. The -ls command line option and File → Load Symbols... menu entry are used to only load the symbols from a .bds file. Doing so allows you to use symbolic names in the debugger but does not alter RAM contents in case the program is already underway.
Some models have built-in symbols and source code which are automatically loaded. While often helpful this sometimes gets in the way of debugging programs. Use the -nrs option or File → Unload Symbols to stop this. Though "Unload Symbols" will drop any other symbols or source code you have loaded.
Use the drop downs to select disk images, sides, tracks and sectors. The sector dropdown presents both the physical and logical sector numbers. The logical number is the value written on the disk and is what is used when we generically refer to reading or writing sector N. The physical number is the relative position of the sector in the track.
The feature is experimental mainly because it doesn't yet display all the emulator implicitly knows about the address space. For example, the Model I does not have any memory mapped from $3000 to $36FF but the map will display that as read-only RAM. And it says nothing at all about the memory mapped printer and floppy disk devices accessible in the $3700 - $37FF range. In other words, the map can be incomplete or misleading. But it seems more handy having it around even with its current shortcomings.
The normal recording options can assist debugging. It may be helpful to step through a video a frame at a time to see some graphical glitch in detail. The "MHz Audio" option takes this to the extreme by recording audio output a sample rate equal to the speed of the Z-80. In effect this lets you see exactly when the audio changes.
The Trace option is the most useful so I've dedicated section to it. The other options attempt to self-document in their output. Unlike the Trace option these other options don't record everything. Typically they'll just track the PC values to keep overhead low. When they do their final output the use whatever value is in RAM at the time for the disassembly. If the program changes you may seen confusing output. This gets even worse if the memory mapping changes.
All these recording options can be activated and stopped at any time. It is useful and often desirable to start them when the program is stopped in the debugger and then stop them at the next breakpoint after an interesting subroutine or full step of a game simulation has run.
Record → Z-80 Profile tracks every instruction executed and shows you a list of those instructions, the number of times each instruction was executed and the total T-States spent on each instruction. It is intended to help measure where your program spends its time to be used as a guide for optimization. It can also be used to simply track what a program as done during an interval. However, "Bus Use" is better for that task and Trace will show every instruction in order.
Record → Backtrace show the last 65536 instructions executed. In theory you can use this to respond to a crash. But practically speaking that many instructions is at most a tenth of a second so you're not likely to be quick enough to catch it.
Record → Bus Use tracks the execution of a program. The output is much like a disassembler but with markup indicating how memory was accessed: read, written, executed, jumped to, called and so on. The disassembly tends to be better than a static disassembly since it uses the Z-80's execution path to point out what is code and what is data.
The disassembly will be entirely commented out except for any areas where a program was loaded by the command line (or using File → Load/Run) into memory. The intent here is to distinguish the loaded program from the ROM or operating system routines it uses. If the program is sufficiently put through its paces the result should be a good disassembly that can be assembled to produce the original code. Unlike the other trace options any data uncommented in the disassembly is based on the original data loaded so it won't be fooled by simple self-modifying code. However, this is a problem if the program relocates itself. In which case you'll have to get a relocated version of the program loaded. At least "Bus Use" will help understand the relocator code.
0 Set bus permissions for address HL to DE to B 2 Trigger bus fault B 3 Disable (B=0) or enable (B=1) bus permissions 4 Trigger execute fault (i.e., drop into the debugger) 5 Reset (B=0) or get (B=1, into DEHL) T-state counter 6 Control recording B=$41 - toggle audio recording B=$4D - toggle Mhz Audio recording B=$47 - toggle animated GIF recording B=$46 - toggle Flash video recording B=$56 - toggle video recording B=$53 - take screenshot B=$47 - take cleanshot 64..127 Set parameter (see below) 128 exit emulator with return code BC 255 set carry flag (to detect if extensions active)Function 5 allows for automated profiling of Z-80 code. Function 128 is typically used to end a test in batch mode. The bus permissions are very helpful in tracking down nasty bugs. For example, you can set your code section to execute-only. The emulator will trap into the debugger the instant something tries to overwrite over your code. Or even read it. Another useful technique is turning off stack permissions at the bottom and top of your stack to detect stack overflow or underflow.
For function 0 the lower 7 bits in B are set to indicate what Z-80 operation is allowed on that memory location. Or for the first 256 addresses what I/O operation is allowed on a port. Those bits are:
Mask Operation Z-80 Debugger letter indicator 1 Read R 2 Write W 4 Execute E 8 Stack S 16 In I 32 Out O 64 DMA D
Stack permission is required for CALL, RET, PUSH, POP, RETI and RETN.
For BASIC where OUT is readily available but setting register contents is difficult there a way to trigger any function with just OUT commands.
OUT 71,32+n will trigger function n using whatever parameters were previously set. A parameter is set by first doing an OUT 71,64+p where p is the parameter number and then doing OUT 71,x to set the value. If a command requires a register then the parameter triggered version of the command will read parameter 2 for register B, parameter 3 for register C, parameter 8 for H and so on. Or put another way, you select the parameter for register R by sending the ascii value of the register letter.
For example, this will toggle animated GIF recording:
OUT 71,66:OUT 71,71:OUT 71,32+6
INP(71) is used to get results from emulator extensions. Only detection (code 255) and T-state counter read (code 7, B=1) return results. Here is a simple Model III example that checks the emulator extensions are installed. If so, it then reads the number of T-States to execute the little FOR loop and shows them as a raw value and translated to milliseconds.
10 OUT 71,255:IF INP(71)<>1 THEN ?"You forgot -ee":END 20 OUT 71,66:OUT 71,0:OUT 71,37 30 FOR I=1 TO 10:NEXT 40 OUT 71,66:OUT 71,1:OUT 71,37 50 T=0:FOR I=0 TO 3:T=T*256:T=T+INP(71):NEXT 60 ?T;"T states";T/2027.52;"ms"
The output can be voluminous. You'll want to use breakpoints to turn tracing on and off for as short a period as possible. The "Tracing" checkpoint in the Z-80 Debugger is a convenient shortcut. And there are additional check boxes to enable or disable tracing for Z-80 instruction, I/O accesses, memory accesses and interrupts.
For even finer control I/O logging can be enabled on a per-device basis. This is handled by the device drop-down. The interface is awkward. As you select each device in the drop-down the checkmark to the right changes to indicate if that device is being logged. But you still must check the I/O box to enable I/O logging. To make it more confusing but usable the best course is to turn I/O off, select the device you're interested in, enable it and then turn I/O back on. If you turn I/O on first it will enable all devices by default.
Yes, it's bad but at least it gives some way to target particular devices. Obviously these controls should be in some other window but the debugger happened to be handy at the time. trs80gp wasn't built in a day.
The actual logging looks something like this:
8033317 @3018 z ex jp $35c2 8033327 @35c2 z ex push af +11 @35c2 z wr _ffb4 00 ram[ffb4] +11 @35c2 z wr _ffb3 44 ram[ffb3] 8033338 @35c3 z ex in a,($e0) +11 @35c3 z in _e0 fb 8033349 @35c5 z ex rra 8033353 @35c6 z ex jp nc,$3365 8033363 @35c9 z ex rra 8033367 @35ca z ex jp nc,$3369 8033377 @35cd z ex push bc +11 @35cd z wr _ffb2 38 ram[ffb2] +11 @35cd z wr _ffb1 80 ram[ffb1]The first column is the T-State counter. The second is the PC of the Z-80 when the operation occurred. Next a letter code shows the device responsible ('z' for Z-80 and 'd' for DMA chip). The type of access follows. Most are "ex" for instruction execution with a disassembly of the instruction following. But for reads, writes, ins and outs (rd, wr, in, ot) the memory or I/O address is shown followed by the value read or written. Other possible operations are:
ht Fetch during Z-80 halt i0 Interrupt mode 0 bus read i1 Interrupt mode 1 bus read i2 Interrupt mode 2 bus read ni NMI (non-maskable interrupt) bus readAfter any access there may be a description of what the value means to that device and possibly the internal state of the device. A good example is the CRTC video controller chip used in the Model 2 and 4. An I/O write (out) to its address register will be annotated with the name of the register selected. An I/O write will show the name of the register changed and its current value. Some devices are very simple in that any byte read or written can only have one meaning. But for the CRTC a write to a register depends on which register was previously selected. Without the annotation you would have to search backwards for the last register selection. And if the register is 16 bits wide you'd also have to look back for the last time that other 8 bits were changed. This is tedious and may not even appear in the bus trace you've made.
Not all devices provide annotations. If they do then you can bet they were giving us trouble in developing the emulator. Most of the Model 2 devices have annotations.
By the way, the underscore and @ signs in front of addresses are intentional and useful. vi (and maybe other editors) make it easy to search on words. So starting a search on _ffb2 will only find other references to that memory location being read or written. But searching the word ffb2 will find instructions that reference the address. Or you can search for @ffb2 explicitly to restrict your search to only instructions executed at that address.