[ischmitz]

So your code is LJMP 0x028B. You should see the EPROM being accessed at 0x0000, 0x0001, 0x0002, 0x028B, 0x028C and so forth. Disassemble the code to understand what it does and when it jumps.

I don’t know what software options you have but you need to sample 10 address lines (A0 - A9) to decode the LJMP destination. I can assign what lines will be considered for the decoding to hex. If your SW doesn’t allow that check if sigrok works with your analyzer hardware