Cortex M4 Firmware

[UniSoft]

Originally Posted by eychei

why you created a ram section?

This somewhat helps with reverse engineering.
IDA creates cross-references.
for example jump to: RAM:1FFFE1C8
you will see all references to this variable.

Originally Posted by eychei

How did you find the rom start address?

This is not the ROM start address.
This is the start address of the firmware.
The starting address of the ROM is 0x00000000.
And the first 0x00004800 bytes are very likely occupied by a custom bootloader.

where from I got 0x00004800

typedef struct
{
    uint16_t addr; // <<<<<<<<<<<<< from here
    uint16_t length;
    uint32_t chksum;
    uint8_t data[0x60]; 
} chunk_t;