Exetools  

Go Back   Exetools > General > Electric Section

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 01-12-2024, 04:11
rcer rcer is offline
Friend
 
Join Date: Dec 2008
Posts: 163
Rept. Given: 5
Rept. Rcvd 9 Times in 8 Posts
Thanks Given: 4
Thanks Rcvd at 24 Times in 20 Posts
rcer Reputation: 9
Loading of an UPSD3354DV Flash dump into IDA Pro

I dumped the flash from a UPSD3354DV MCU from an embedded Programmable Counter and this produced two files:

1) Main-Flash.obj, which is Intel HEX
2) Main-Flash.osf, which is Ascii HEX

Converted the Ascii Hex file to binary by removing the sections headers, and pasting the contents into HxD.
This produced a binary file of exactly 256 KB which is matches the size of the main flash.

I tried to extract some information from the binary by parsing it with binwalk, but this yields no result.
Also loading the file into IDA Pro does not produce anything useful, becaus I don't know the entry point.

The UPSD3354DV, is an 8bit 8032 MCU with programmable logic, compatible with 3rd party 8051 tools
256KB primary flash & 32KB secondary flash

Can anybody give me a hint as to why Binwalk does not yield any results, and how to load this binary into IDA Pro?

For some reason the files which I attached do not appear, so here is the link to the main-flash.rar file

https://mega.nz/file/IR0ijTLR#exDCc1OB_JRgHj3KvQW_rm7zeom0cXGKjCeJRmBmcz0
Attached Files
File Type: rar Main-Flash.rar (130.2 KB, 11 views)

Last edited by rcer; 01-13-2024 at 20:22. Reason: Files did not attach
Reply With Quote
  #2  
Old 01-13-2024, 00:31
rcer rcer is offline
Friend
 
Join Date: Dec 2008
Posts: 163
Rept. Given: 5
Rept. Rcvd 9 Times in 8 Posts
Thanks Given: 4
Thanks Rcvd at 24 Times in 20 Posts
rcer Reputation: 9
I should have read the datasheet before asking the question.
From the datasheet:" After a power-up or reset, the 8032 begins program execution from location 0x0000 where the reset vector is stored, causing a jump to an initialization routine in firmware.
Reply With Quote
  #3  
Old 01-13-2024, 03:25
souz souz is offline
Friend
 
Join Date: Jan 2005
Posts: 131
Rept. Given: 0
Rept. Rcvd 25 Times in 17 Posts
Thanks Given: 10
Thanks Rcvd at 84 Times in 34 Posts
souz Reputation: 25
Start from this:

After a power-up or reset, the 8032 begins program execution from location 0x0000 where the
reset vector is stored, causing a jump to an initialization routine in firmware. At address 0x0003, just
following the reset vector are the interrupt service
locations

Quote:
code:0000D548 RESET_0: ; CODE XREF: RESET↑j
code:0000D548 movx A, @DPTR
code:0000D549 jnz code_D552
Are you sure you dumped correctly all flash memory?
Reply With Quote
  #4  
Old 01-13-2024, 20:21
rcer rcer is offline
Friend
 
Join Date: Dec 2008
Posts: 163
Rept. Given: 5
Rept. Rcvd 9 Times in 8 Posts
Thanks Given: 4
Thanks Rcvd at 24 Times in 20 Posts
rcer Reputation: 9
You are right, that's what I figured as well after reading the datasheet.

This is not the complete dump. The UPSD3354DV MCU has one main flash of 256KB, and a 2nd flash of 32KB. The dump provided is from the main flash.
The 2nd flash contains the boot-loader, and some user code
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On



All times are GMT +8. The time now is 18:23.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )