Exetools

Exetools (https://forum.exetools.com/index.php)
-   Electric Section (https://forum.exetools.com/forumdisplay.php?f=53)
-   -   Loading of an UPSD3354DV Flash dump into IDA Pro (https://forum.exetools.com/showthread.php?t=20816)

rcer 01-12-2024 04:11

Loading of an UPSD3354DV Flash dump into IDA Pro
 
1 Attachment(s)
I dumped the flash from a UPSD3354DV MCU from an embedded Programmable Counter and this produced two files:

1) Main-Flash.obj, which is Intel HEX
2) Main-Flash.osf, which is Ascii HEX

Converted the Ascii Hex file to binary by removing the sections headers, and pasting the contents into HxD.
This produced a binary file of exactly 256 KB which is matches the size of the main flash.

I tried to extract some information from the binary by parsing it with binwalk, but this yields no result.
Also loading the file into IDA Pro does not produce anything useful, becaus I don't know the entry point.

The UPSD3354DV, is an 8bit 8032 MCU with programmable logic, compatible with 3rd party 8051 tools
256KB primary flash & 32KB secondary flash

Can anybody give me a hint as to why Binwalk does not yield any results, and how to load this binary into IDA Pro?

For some reason the files which I attached do not appear, so here is the link to the main-flash.rar file

https://mega.nz/file/IR0ijTLR#exDCc1OB_JRgHj3KvQW_rm7zeom0cXGKjCeJRmBmcz0

rcer 01-13-2024 00:31

I should have read the datasheet before asking the question.
From the datasheet:" After a power-up or reset, the 8032 begins program execution from location 0x0000 where the reset vector is stored, causing a jump to an initialization routine in firmware.

souz 01-13-2024 03:25

Start from this:

After a power-up or reset, the 8032 begins program execution from location 0x0000 where the
reset vector is stored, causing a jump to an initialization routine in firmware. At address 0x0003, just
following the reset vector are the interrupt service
locations

Quote:

code:0000D548 RESET_0: ; CODE XREF: RESET↑j
code:0000D548 movx A, @DPTR
code:0000D549 jnz code_D552
Are you sure you dumped correctly all flash memory?

rcer 01-13-2024 20:21

You are right, that's what I figured as well after reading the datasheet.

This is not the complete dump. The UPSD3354DV MCU has one main flash of 256KB, and a 2nd flash of 32KB. The dump provided is from the main flash.
The 2nd flash contains the boot-loader, and some user code


All times are GMT +8. The time now is 08:54.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX