What's in the box?

A project log for Brother Super PowerNote Reverse Engineering

Can we turn a cheap 90s word processor into a CP/M laptop?

Lincoln R.Lincoln R. 02/15/2020 at 06:230 Comments

Before we try writing code, it makes sense to figure out what we can learn about the hardware we're dealing with.  A good first start is to look at the motherboard and see what chips and other interesting components are there.  Fortunately it's pretty easy to get to the board, just remove 3 screws from the bottom of the machine and lift the keyboard out.  Below is a close-up photo of the main interesting part of the PCB, the rest of it mostly seems to be power electronics, passive components, and jacks.

Helpfully, Brother actually put the full part numbers of some of the smaller chips on the silkscreen.  There's a piezo speaker, and the Tetris game on floppy disk is capable of playing some simple music, so we know the hardware is capable of more than just fixed-frequency beeps.  The ROM is a small 32 pin SOIC but there are unpopulated pads for a 32 pin DIP labeled "8M ROM", perhaps some models used a DIP ROM instead of the SOIC or DIP EPROMs were used in development.  The large gray ribbon cable goes to the floppy drive, the small thin one is for the keyboard.

The largest chip is a Hitachi HG62F33R32FH UC2836-A.  You might expect this to be the CPU, but a quick search reveals it to be a semi-custom CMOS gate array.  Given how few other chips are in the board I suspect this chip handles a lot of "glue logic", possibly interfacing to the LCD and keyboard, etc.  Since this is a custom gate array the datasheet doesn't tell us much other than that the gate count is 3,297 and 128 pins are available for I/O since this is the 136 pin version of the chip.  Figuring out exactly what's implemented in this would be difficult to impossible without trying to decap the chip, but that is destructive and time intensive, and something I don't have the tools for.  We can probably figure out the important bits by tracing pins and looking at firmware.

To the left of the gate array is a Hitachi HD64180RF6X - This is the CPU.  It's a 6 MHz Z80 derivative with a few handy built-in peripherals:  Two UARTs, an MMU supporting up to 1 megabyte of memory, a two-channel DMA controller, a two-channel "programmable reload timer for output wave generation", and a few other interesting goodies.  Maybe one of those programmable timers is being used as the audio output?  We could probably detect that by looking for writes to the I/O ports for the timers in something that we know plays music.

Other components of note include: