General commands of µCsim

conf

 Conf command can be used to display different kind of information about µCsim. It can be followed by a subcommand:

conf
conf objects

conf

 This command (without a subcommand) prints out configuration of the simulator: 
0> conf
ucsim version 0.5.0-pre3
Type of microcontroller: 51 CMOS
Controller has 9 hardware element(s).
  timer0[0]
  timer1[1]
  uart[0]
  port[0]
  port[1]
  port[2]
  port[3]
  irq[0]
  _51_dummy[0]
0>
First line contains version number of the program. Second line informs about type of the simulated microcontroller. Third line prints out how many hardware elements are simulated.

conf objects

 This command is for development only.

?,help [command]

 Help command. It prints out short description of the commands.

If a command name is given as parameter then µCsim prints out all command that has similar names: 

0> ? s
show subcommand    Generic command for showing things about the uCsim
set subcommand     Set, see `set' command for more help
stop               Stop
step               Step
state              State of microcontroller
statistic [mem [startaddr [endaddr]]]
                   Statistic of memory accesses
0> ? s o
show option [name] Show internal data of options
set option name|nr value
                   Set value of an option
0>
Some commands have more than one name which can produce interesting result: 
0> ? t r
timer delete id    Delete a timer
timer start id     Start a timer
0>
It looks that names of listed subcommands start with no "r" but take a closer look on that commands: 
0> ? t d
timer delete id    Delete a timer
Names of command: delete remove
long help of timer delete
0> ? t start
timer start id     Start a timer
Names of command: run start
long help of timer run
0>

If parameter is unique name of a command then long description of the command is printed out.

quit

 Quit. This command terminates actual console, it does not ask you to confirm your intention. Simulator always reads commands from a file so end of file condition finishes too. If command console is on standard input/output, pressing the CTRL-D will quit just like the quit command.

Note that if -Z option was used at invokation then the quit command does not terminate the simulator program. In this case kill command can be used to terminate the simulator. See for more information about using multiple consoles. 

$ s51
ucsim 0.2.24, Copyright (C) 1997 Daniel Drotos, Talker Bt.
ucsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
> q
$

kill

 This kommand terminates the simulator. It does not ask for confirmation. It doesn't matter how many consoles are used and what commands are running on them.

exec file

 Reads commands from "file" and executes them. This command opens a new console (which will use same in/out file as the actual one) to execute the file. This means the "quit" command in the file will not exit the simulator: 
drdani@emma:~$ cat /tmp/x
get opt
quit
conf
drdani@emma:~$ s51
uCsim 0.5.0-pre3, Copyright (C) 1997 Daniel Drotos, Talker Bt.
uCsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
0> exec "/tmp/x"
1> get opt
 0. config_file(by application) is hidden!
 1. console_on(by application) is hidden!
 2. cpu_type(by application) is hidden!
 3. debug(by console1): FALSE - Debug messages to console1
 4. debug(by console0): FALSE - Debug messages to console0
 5. debug(by application): FALSE - Print debug messages (-V)
 6. irq_stop(by mcs51_controller): FALSE - Stop when IRQ accepted
 7. null_prompt(by application): FALSE - Use \0 as prompt (-P)
 8. prompt(by console1): "" - Prompt string of console1
 9. prompt(by console0): "" - Prompt string of console0
10. prompt(by application): (null) - String of prompt (-p)
11. serial_in_file(by application) is hidden!
12. serial_out_file(by application) is hidden!
13. xtal(by application): 11059200.000 - Frequency of XTAL in Hz
1> quit
0>

expression expr

 Executes "expr" as an expression. For more about expressions, see command syntax. 
0> expr 1 + 2
3
0> expr xram[256*dph+dpl]= &sp
129
0>

show

 Show command can be used to display different kind of information. It must be followed by a subcommand. Subcommands are:

show copying
show warranty
show option
show error

show copying

 This command can be used to list licensing information. It is first 10 point of the version 2 of GNU Genral Public License. If you do not accept GPL simply do not use the program.

show warranty

 This command prints out last 2 point of the license ("NO WARRANTY" message).

show option

 This command is for development only.

show error

 Errors or warnings are events which can happen in the simulated system during simulation. Report of that events can be turned on or off using set error command. Errors are organized in parent-child relationship. Childs are listed under the parent: 
0> sh er
Error: non-classified [on/ON]
  Error: memory [on/ON]
    Error: invalid_address [unset/ON]
    Error: non_decoded [unset/ON]
  Error: stack [off/OFF]
    Error: stack_tracker [unset/OFF]
      Error: stack_tracker_wrong_handle [unset/OFF]
      Error: operation_on_empty_stack [unset/OFF]
      Warning: stack_operation_unmatched_to_top_of_stack [unset/OFF]
      Warning: stack_looks_corrupted [unset/OFF]
0>
First element is the type (Error or Warning). Error stops the simulation. Warning is just reported and simulation goes on. Next element is the name of the error. Last element shows actual value and state. Value can be:
on
state is ON
off
state is OFF
unset
state is inherited from the parent.
If state is ON and the event happens, it is reported. If state is OFF then the event is silently ignored.

get

 This command can be used to get value of various kind of things. It requires a subcommand to specify what is going to be set. Known subcommands are:

get sfr
get option

get sfr address...

 This command can be used to check values of SFR location(s) if SFR exists in simulated memory. Note that dump memory or ds can be used as well.

Parameters are interpreted as SFR names or addresses and values of addressed locations are dumped out. 

$ s51 
ucsim 0.5.0-pre3, Copyright (C) 1997 Daniel Drotos, Talker Bt.
ucsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
0> get sfr pcon p1 0 0x80 kahd scon 256
0x87 00 .
0x90 ff .
Warning: Invalid address 0
0x80 ff .
Warning: Invalid address kahd
0x98 00 .
Warning: Invalid address 256
0>

get option [name]

 Get actual value of option(s). Some options can be set by set option to modify behavior of the simulator. Using get option you can get actual value of these options. If you use this command without parameter you get list of all options known by the program. In this way you can figure out which options can be used. 
$ s51 -V
ucsim 0.5.0, Copyright (C) 1997 Daniel Drotos, Talker Bt.
ucsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
0> get opt
 3. debug(by console0): FALSE - Debug messages to console0
 4. debug(by application): FALSE - Print debug messages (-V)
 5. irq_stop(by mcs51_controller): FALSE - Stop when IRQ accepted
 6. null_prompt(by application): FALSE - Use \0 as prompt (-P)
 7. prompt(by console0): "" - Prompt string of console0
 8. prompt(by application): (null) - String of prompt (-p)
11. xtal(by application): 11059200.000 - Frequency of XTAL in Hz
0>
First element of the list is the number of the option. It is followed by name of the option (debug, irq_stop, etc.). Number or the name can be used to identify the option in get option and set option command. Next element shows which part of the simulator created the option.

Next element of the list is the value of the option. It can be an integer or a floating point number, a string or a boolean value.

Last part describes the option.

Some options can have same name. An example is the debug option. One is created by the application to store value given by -V (see invokation). This will be used as default value when a new instance of a console is created: 

$ cat /tmp/x
get opt debug
$ s51
uCsim 0.5.0-pre3, Copyright (C) 1997 Daniel Drotos, Talker Bt.
uCsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
0> get opt debug
 3. debug(by console0): FALSE - Debug messages to console0
 4. debug(by application): FALSE - Print debug messages (-V)
0> set opt 4 1
0> get opt debug
 3. debug(by console0): FALSE - Debug messages to console0
 4. debug(by application): TRUE - Print debug messages (-V)
0> exec "/tmp/x"
1> get opt debug
 3. debug(by console1): TRUE - Debug messages to console1
 4. debug(by console0): FALSE - Debug messages to console0
 5. debug(by application): TRUE - Print debug messages (-V)
1> 
0>

set

 This command can be used to set various kind of things. It requires a subcommand to specify what is going to be set. Known subcommands are:

set option
set error
set memory
set bit
set hardware

set option name|nr value

Set option value. Options described at (get option) command can be set using this command. First parameter must be an option name or number and second the new value. Interpretation of the value depends on type of the option. Value for a boolean type of option interpreted as follows: if first character of the value is one of 1, t, T, y, Y then value will be TRUE otherwise it will be FALSE. 

$ s51 -V
uCsim 0.5.0-pre3, Copyright (C) 1997 Daniel Drotos, Talker Bt.
uCsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
> get opt
 0. config_file(by application) is hidden!
 1. console_on(by application) is hidden!
 2. cpu_type(by application) is hidden!
 3. debug(by console0): TRUE - Debug messages to console0
 4. debug(by application): TRUE - Print debug messages (-V)
 5. irq_stop(by mcs51_controller): FALSE - Stop when IRQ accepted
 6. null_prompt(by application): FALSE - Use \0 as prompt (-P)
 7. prompt(by console0): "" - Prompt string of console0
 8. prompt(by application): (null) - String of prompt (-p)
 9. serial_in_file(by application) is hidden!
10. serial_out_file(by application) is hidden!
11. xtal(by application): 11059200.000 - Frequency of XTAL in Hz
> set opt debug f
Ambiguous option name, use number instead
> set opt 3 f
> get opt debug
 3. debug(by console0): FALSE - Debug messages to console0
 4. debug(by application): TRUE - Print debug messages (-V)
>

set error error_name on|off|unset

 This command can be used to set if an error event should be reported or not. Actual settings can be retrieved by show error command.

set memory memory_type address data...

 This command can be used to modify content of any simulated memory. First parameter must be a class name to specify type of memory. Class names can de checked by info memory command. Chips and address spaces can be used as well.

Second parameter specifies start address of the modification.

Remaining parameters will be written into the memory starting at address specified by second parameter. Data list can include numbers as well as strings. See syntax for more details.

Modified memory locations will be dumped out. 

0> set mem xram 1 "ab\tcd\0ef\012ghq" 2 "ABC"
0x0001 61 62 09 63 64 00 65 66 ab.cd.ef
0x0009 0a 67 68 71 02 41 42 43 .ghq.ABC
0> set mem sfr pcon 0x34
0x87 34                      4
0> set mem xram_chip 1 2
0x0001 02                      .
0>

set bit address 0|1

 Set one bit to 0 or 1. First parameter specifies the bit. It can be the address of the bit (number or syqmbolic name) or it can be specified in address.bitnumber format where address addresses SFR area and bitnumber is number of bit in specified SFR location. Using this syntax any SFR (and 8051's internal RAM) location can be modified it need not be really bit addressable.

Second parameter interpreted as 1 if it is not zero.

Modified memory location is dumped out. 

$ s51 
ucsim 0.2.38-pre2, Copyright (C) 1997 Daniel Drotos, Talker Bt.
ucsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
> set bit tf1 1
0x88 80 .
> set bit 130 0
0x80 fb .
> set bit pcon.2 1
0x87 04 .
> set bit 10.7 1
0x0a 80 .
>

set hardware hardware_id data

 This command can be used to set value into a hardware element of the controller (conf command lists them).

Actually only port element of MCS51 accepts this method. It can be used to set value of external circuits which connected to ports of simulated controller. First parameter specifies port element (as an array), second is the new value. 

0> conf
Type of microcontroller: 51 CMOS
Controller has 9 hardware element(s).
  timer0[0]
  timer1[1]
  uart[0]
  port[0]
  port[1]
  port[2]
  port[3]
  irq[0]
  _51_dummy[0]
0> set hw port[0] 12
0> i h po[0]
port[0]
P0    11111111 0xff 255 . (Value in SFR register)
Pin0  00001100 0x0c  12 . (Output of outside circuits)
Port0 00001100 0x0c  12 . (Value on the port pins)
0> set hw port[0] 23
0> i h po[0]
port[0]
P0    11111111 0xff 255 . (Value in SFR register)
Pin0  00010111 0x17  23 . (Output of outside circuits)
Port0 00010111 0x17  23 . (Value on the port pins)
0> set hw irq[0] 12
Nothing to do
0>

state

 State of the simulator and the simulated microcontroller: 
> state
CPU state= OK PC= 0x004349 XTAL= 1.10592e+07
Total time since last reset= 0.614873 sec (6800004 clks)
Time in isr = 0.0144227 sec (159504 clks) 2.3%
Time in idle= 0 sec (0 clks)   0%
Max value of stack pointer= 0x000049, avg= 0x000026
>
The "CPU state" in the first line is an internal information. PC is value of the program counter. First line shows XTAL frequency too.

Following lines contain information about simulated time. First, full simulated time (elapsed from last reset) is printed out in seconds and number of clock periods then same data is printed out about time spent in interrupt service routines as well as in idle mode. Last data in lines of ISR and IDLE time shows ratio of ISRs, Idle times and main program.

Last line infroms about maximum value of the stack pointer and a "not very well" calculated average value of it.

reset

 Reset command. It resets the microcontroller. It has same effect as active signal on the RST pin. 
$ s51 -V remoansi.hex
ucsim 0.2.24, Copyright (C) 1997 Daniel Drotos, Talker Bt.
ucsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
58659 bytes read from remoansi.hex
> i r
000000 00 00 00 00 00 00 00 00 ........
000000 00 .  ACC= 0x00   0 .  B= 0x00   DPTR= 0x0000 @DPTR= 0x00   0 .
000000 00 .  PSW= 0x00 CY=0 AC=0 OV=0 P=0
   000000 02 01 60 LJMP  0160
> s
000000 00 00 00 00 00 00 00 00 ........
000000 00 .  ACC= 0x00   0 .  B= 0x00   DPTR= 0x0000 @DPTR= 0x00   0 .
000000 00 .  PSW= 0x00 CY=0 AC=0 OV=0 P=0
   000160 c2 90    CLR   P1.0
> s
000000 00 00 00 00 00 00 00 00 ........
000000 00 .  ACC= 0x00   0 .  B= 0x00   DPTR= 0x0000 @DPTR= 0x00   0 .
000000 00 .  PSW= 0x00 CY=0 AC=0 OV=0 P=0
   000162 c2 97    CLR   P1.7
> res
> i r
000000 00 00 00 00 00 00 00 00 ........
000000 00 .  ACC= 0x00   0 .  B= 0x00   DPTR= 0x0000 @DPTR= 0x00   0 .
000000 00 .  PSW= 0x00 CY=0 AC=0 OV=0 P=0
   000000 02 01 60 LJMP  0160
>

info

 This command prints out information about different things which must be specified as paramater to the command. Following subcommands are known:

info breakpoints
info registers
info hardware
info stack
info memory

info breakpoints

 This subcommand prints out information about breakpoints: 
0> b 12
Breakpoint 1 at 0x00000c: MOV   R7,A
0> tb 43
Breakpoint 2 at 0x00002b: MOV   R7,A
0> b sfr w 0x80
0> i b
Num Type       Disp Hit   Cnt   Address  What
1   fetch      keep 1     1     0x00000c MOV   R7,A
2   fetch      del  1     1     0x00002b MOV   R7,A
3   event      keep 1     1     0x000080 write
0>
As you see above, the command can be shortened to "i b". The list of breakpoints contains 7 columns:
Num
Number of the breakpoint.
Type
This column shows type of the breakpoint. It can be fetch for normal breakpoints or event for event breakpoints. First the normal breakpoints are listed and then the event breakpoints.
Disp
This shows if the breakpoint is temporary (del) or not (keep).
Hit
How many times the breakpoint must be hit before it really stops the program.
Cnt
Counter of breakpint hits. This counter decrements and the breakpoint is activated if it reaches zero.
Address
Address where the breakpoint is set.
What
For normal breakpoints this field contains disassembled instruction where the breakpoint is set. For event breakpoints it contains type of event.

info registers

 This subcommand prints out full register set of the CPU. Output of this command depends of type of CPU.
Registers of MCS51 family
$ s51 remoansi.hex 
ucsim 0.2.12, Copyright (C) 1997 Daniel Drotos, Talker Bt.
ucsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
58659 bytes read from remoansi.hex
> sopt stopit 1
> g
5
 * 000023 02 01 1c LJMP  011c
> i r
000000 18 02 16 ba 00 02 00 0a ........
000018 4a J  ACC= 0x0a  10 .  B= 0x00   DPTR= 0x16ba @DPTR= 0x00   0 .
000002 16 .  PSW= 0x00 CY=0 AC=0 OV=0 P=0
 * 000023 02 01 1c LJMP  011c
>
In first line the actual register bank is dumped out. Register banks reside in internal RAM, address at the begining of the line shows start address of actual register bank selected by RS0 and RS1 bits of PSW register.

Next two lines begin with value of indirectly addressed internal RAM cells. Second line shows IRAM cell pointed by R0 while third line shows IRAM addressed by R1.

Second line displays some important registers. First one is the accumulator. Its value dumped out in hexadecimal, decimal form and then the ASCII character of its value. It is followed by value of the B register which is dumped out in hexadecimal form only. Next is DPTR register in hexadecimal and then external RAM cell which is addressed by DPTR. This is dumped out in hexadecimal, decimal and ASCII too.

In third line you find program status word in hexadecimal and then some flag bits of PSW register. Last line is disassembled instruction at PC.

Registers of AVR family
$ savr test_arith.hex
ucsim 0.2.37, Copyright (C) 1997 Daniel Drotos, Talker Bt.
ucsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
> 83 words read from test_arith.hex
83 words read from test_arith.hex
> run

Stop at 0x000047: (105) User stopped
F 0x000047
> i r
000000 00 2c 21 23 20 35 19 14 03 00 00 00 00 00 00 00 .,!# 5..........
000010 00 01 1e 89 01 00 10 e2 14 00 01 10 00 00 00 00 ................
ITHSVNZC  SREG= 0x03   3 .
00000011  SP  = 0x000000
X= 0x1001 [X]= 0x00   0 .  Y= 0x0000 [Y]= 0x00   0 .  Z= 0x0000 [Z]= 0x00   0 .
 * 000047 940c 0047 jmp   0x000047
>
First two lines show first 32 bytes of internal RAM which is the register set of AVR controllers.

At the beginning of next two lines bits of status register are printed. These lines present hexadecimal, decimal and ASCII values of the status register too, and value of the stack pointer.

Following line shows indirect addressing registers X, Y, and Z as well as pointed memory values.

Last line is disassembled instruction at PC.

Registers of Z80 family
$ sz80
uCsim 0.5.0-pre3, Copyright (C) 1997 Daniel Drotos, Talker Bt.
uCsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
0> i r
SZ-A--P-C  Flags= 0x00   0 .  A= 0x00   0 .
00-0--0-0
BC= 0x0000 [BC]= 00   0 .  DE= 0x0000 [DE]= 00   0 .  HL= 0x0000 [HL]= 00   0 .
IX= 0x0000 [IX]= 00   0 .  IY= 0x0000 [IY]= 00   0 .  SP= 0x0000 [SP]= 00   0 .
 ? 0x0000 00          NOP
0>
Registers of XA family
$ sxa
uCsim 0.5.0-pre3, Copyright (C) 1997 Daniel Drotos, Talker Bt.
uCsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
The XA Simulator is in development, UNSTABLE, DEVELOPERS ONLY!
0> i r
CA---VNZ | R0:0100 R1:0302 R2:0504 R3:0706
00---000 | R4:0908 R5:0b0a R6:0d0c SP:0100 ES:0000  DS:0000
 ? 0x0302 02 03             ADD   R0l,[R3]
0>
Registers of HC08 family
$ shc08
uCsim 0.5.0-pre3, Copyright (C) 1997 Daniel Drotos, Talker Bt.
uCsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
0> i r
V--HINZC  Flags= 0x60  96 `  A= 0x00   0 .
0--00000      H= 0x00   0 .  X= 0x00   0 .
SP= 0x00ff [SP+1]= 00   0 .
 ? 0x0000 00 01 02    brset #0,*0x01,0x0005
0>

info hardware|hw identifier

 This subcommand prints out information about a unit of the controller. identifier specifies hardware element. One form of it is a name. Names of hardware elements can be checked by conf command. This form is accepted only when name is unique. If more than one element exists with the same name then name must be followed by id number in squere brackets in same form as it is listed by conf command.

Ouput format of this command depends on CPU family and type of the CPU too because requested unit can be different in different type of controller even in the same CPU family. 

$ s51 -t 51
ucsim 0.5.0-pre3, Copyright (C) 1997 Daniel Drotos, Talker Bt.
ucsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
0> conf
ucsim version 0.5.0-pre3
Type of microcontroller: 51 CMOS
Controller has 8 hardware element(s).
  timer0[0]
  timer1[1]
  uart[0]
  port[0]
  port[1]
  port[2]
  port[3]
  irq[0]
  _51_dummy[0]
0> i h port[2]
port[2]
P2    11111111 0xff 255 . (Value in SFR register)
Pin2  11111111 0xff 255 . (Output of outside circuits)
Port2 11111111 0xff 255 . (Value on the port pins)
0> i h t[0]
timer0[0] 0x0000 13 bit timer OFF irq=0 dis prio=0
0> i h u
uart[0] Shift, fixed clock MultiProc=none irq=dis prio=0
Receiver OFF RB8=0 irq=0
Transmitter TB8=0 irq=0
0>
Timer #2 differs a little bit from other timers of MCS51: 
$ s51 -t 52
ucsim 0.5.0-pre3, Copyright (C) 1997 Daniel Drotos, Talker Bt.
ucsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
0> i h timer0
timer0[0] 0x0000 13 bit timer OFF irq=0 dis prio=0
0> i h t[2]
timer2[2] 0x0000 reload 0x0000 timer OFF irq=0 dis prio=0
0>

info stack

 This command prints out information about data stored in the CPU's stack and operations which put them there. 
$ s51 ~/remo.hex
uCsim 0.5.0-pre3, Copyright (C) 1997 Daniel Drotos, Talker Bt.
uCsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
55470 words read from /home/staff/drdani/remo.hex
0> set opt irq_stop true
0> r
Simulation started, PC=0x000000
Stop at 0x000023: (2) Interrupt
F 0x000023
0> i s
OP   SP before-after   L DATA/ADDR   INSTRUCTION
call 0x000022-0x000024 2 0x002976    0x022a 12 29 76 LCALL 2976
call 0x000024-0x000026 2 0x002379    0x2976 12 23 79 LCALL 2379
call 0x000026-0x000028 2 0x003612    0x2517 12 36 12 LCALL 3612
intr 0x000028-0x00002a 2 0x000023    0x366f 20 0c 02 JB    21.4,3674
0>
First column shows the operation which can be call or push or intr (interrupt call). Next column contains value of the SP register before and after the operation. Column "L" shows size of the data, and the next column the data itself. Note, that for call operations (call, and intr) the called address is printed, not the pushed one! Last column is the instruction which has been executed when the operation occured.

info memory

 This command shows information about memory system: chips, address spaces and address decoders. 
$ s51
uCsim 0.5.0-pre3, Copyright (C) 1997 Daniel Drotos, Talker Bt.
uCsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
0> i m
Memory chips:
  0x000000-0x010000    65536 rom_chip (8,%02x,0x%04x)
  0x000000-0x000080      128 iram_chip (8,%02x,0x%02x)
  0x000000-0x010000    65536 xram_chip (8,%02x,0x%04x)
  0x000000-0x000080      128 sfr_chip (8,%02x,0x%02x)
Address spaces:
  0x000000-0x010000    65536 rom (8,%02x,0x%04x)
  0x000000-0x000080      128 iram (8,%02x,0x%02x)
  0x000080-0x000080      128 sfr (8,%02x,0x%02x)
  0x000000-0x010000    65536 xram (8,%02x,0x%04x)
Address decoders:
 0 rom 0x0000 0xffff -> rom_chip 0x0000 activated
 0 iram 0x00 0x7f -> iram_chip 0x00 activated
 0 sfr 0x80 0xff -> sfr_chip 0x00 activated
 0 xram 0x0000 0xffff -> xram_chip 0x0000 activated
0>
First column shows address ranges, next one is the size followed by the name of the memory. This name can be used in other commands (such as dump, set memory, etc.). Last column shows some technical information (width in bits, format specifier to print out content and address).

Address decoders are associated with address spaces. Each address space has a list of decoders. First column of the address decoder information is the number of the decoder. Next three columns specifies name and area of the address space which is handled by the decoder. After "->" sign the name and the address of the memory chip is printed where the decoder maps the area of the address space.

Memory system of other controller family can be different. 

$ savr
uCsim 0.5.0-pre3, Copyright (C) 1997 Daniel Drotos, Talker Bt.
uCsim comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
0> i m
Memory chips:
  0x000000-0x00ffff    65536 rom_chip (16,%04x,0x%04x)
  0x000000-0x00007f      128 iram_chip (8,%02x,0x%02x)
Address spaces:
  0x000000-0x00ffff    65536 rom (16,%04x,0x%04x)
  0x000000-0x00ffff    65536 iram (8,%02x,0x%04x)
Address decoders:
 0 rom 0x0000 0xffff -> rom_chip 0x0000 activated
 0 iram 0x0000 0x007f -> iram_chip 0x00 activated
0>

timer

 Handling of timers. Don't be confused! This command doesn't handle timer element of the controller. It manages "clock counters" which can be used to profile applications.

Known subcommands are:

timer add
timer delete
timer get
timer start
timer stop
timer set

Each subcommand can (some must) be followed by a timer id which can be a number or a string. Timers are numbered from 1. You can use any number greater than 0 to identify a timer. Or you can use a simbolic name, in this case simulator uses the first unused number to allocate a new timer.

timer add|create|make id [direction [in_isr]]

 To create a new timer. New timers are turned ON by default and initialized to value 0. Direction is an integer (can be positive or negative) number which is added to the actual value in every step. If in_isr is TRUE the timer counts only when execution is in an interrupt handler.

timer delete|remove id

 To remove a timer if you don't need it any more.

timer get [id]

 To get value of timers. If you don't use timer id in this command simulator prints out value of all timers including predefined ones. See example below.

timer start|run id

 To turn a timer ON.

timer stop id

 To turn a timer OFF. It still exist but doesn't count xtal periods.

timer set|value id value

 To set value of the timer (number of xtal periods). value is the new value. 
0> tim a 3
0> tim g
timer #0("time") ON: 0.463255 sec (5123232 clks)
timer #0("isr") ON: 0.0051888 sec (57384 clks)
timer #0("idle") ON,ISR: 0 sec (0 clks)
timer #3("unnamed") ON: 0 sec (0 clks)
0> tim a "a"
0> tim g
timer #0("time") ON: 0.463255 sec (5123232 clks)
timer #0("isr") ON: 0.0051888 sec (57384 clks)
timer #0("idle") ON,ISR: 0 sec (0 clks)
timer #1("a") ON: 0 sec (0 clks)
timer #3("unnamed") ON: 0 sec (0 clks)
0>