Five Hundred Twelve Words In A SOT-23
The PIC10F322 doubles the PIC10F320 array to 512 words (0x0000-0x01FF) while keeping the six-pin package, the 64 bytes of SRAM, the 128-byte High-Endurance Flash window, the three-channel eight-bit ADC, the CLC, the two PWM modules, the NCO and the CWG. The core is classic mid-range: 35 instructions, an 8-level stack, an internal 16 MHz oscillator. Boards use it as a smart gate driver, an LED sequencer or a watchdog companion.
Lock Model
Mid-range configuration: CONFIG at 0x2007 with the single CP bit; ID at 0x2006. Sweep rules:
– 0x0000-0x01FF: array, 0x000 under CP, 0x3FFF when erased. – 0x0180-0x01FF: HEF window, swept with the array. – Above 0x01FF: unmapped, 0x000.
The erased-state value of 0x3FFF – fourteen-bit words – is the detail most often misread by tooling from other families. The configuration word read at session start is the authoritative lock record; one bit decides the array’s visibility.
What The Image Contains
The doubled array usually holds two logic banks: a primary control path and a fallback or sequencing routine. The NCO increment and CLC function maps sit in the constants region and reproduce the board’s timing behavior exactly. The 8-bit ADC sampling is short; decisions live in software on the 64-byte SRAM. HEF contents – thresholds and counters – show the wear of self-writes over the product’s life and are delivered as their own annotated table.
The Session
Identify, read the configuration word, sweep 0x0000-0x01FF over two-wire ICSP, verify every word against the 35-instruction set, deliver. Nothing is erased; the part returns to service. Supply-range handling (2.3-5.5 V on the F variant, 1.8-3.6 V on the LF) affects replacement selection only.
Deliverables
HEX at word addresses, annotated disassembly, configuration report, checksum tied to the die. Clone policy documented as found and as applied.
Reading A Baseline Core
The twelve-bit instruction word changes both the disassembler and the HEX convention. Addresses are words, the programmer reports them as such, and a file produced with a mid-range convention reads as garbage. Verification is correspondingly simple: with 512 words there is only one page, so a single checksum covers the entire user array and any mismatch means the read is wrong rather than the part being unusual.
What These Parts Are Used For
Six pins, three ADC channels and two PWM outputs cover LED dimming, small motor drive and battery protection. The firmware is a few hundred instructions with a lookup table for the dimming curve, and that curve is the design content – it encodes the perceived-brightness response the product was tuned for. The report reproduces the table and the routine that indexes it.
The Adapter Question
Six-pin parts ship in SOT-23 and 2×3 DFN, and neither is socketable without a dedicated adapter. The DFN variant in particular has no leads to clip: it has to be reflowed onto a breakout before any probe touches it, and that step is usually the longest part of the job. Clients sending a bare board rather than a loose part avoid it entirely, because the programming pads are already routed.
What To Include With The Shipment
A photo of the marking, the product function, and – if it exists – any host software that talks to the device. The last item is optional but it often resolves an ambiguity in the disassembly faster than any amount of static analysis, since the command set on the host side mirrors the dispatch table inside the part.
Delivery
The image arrives as a HEX in twelve-bit word format with the calibration word called out separately, plus a checksum. No decapsulation is involved, so the unit goes back into its package unchanged.
To read out a locked 10F322, write to the services desk or the contact form.