NefMoto

Technical => Reverse Engineering => Topic started by: zweistein on March 11, 2019, 03:47:43 AM



Title: ME 7.8 in ida pro
Post by: zweistein on March 11, 2019, 03:47:43 AM
Hi to all,

I am trying to load a Bosch ME7.8 (996tt) into ida pro.  Following the video from Andy Whittaker where he loads a ME7.5.  I can replicate his load of a ME7.5, but when I try to do on the ME7.8 things are different.

I cannot see the Reset_Handler that Andy Whittaker identifies in the ME7.5

Any ideas how to identify the Reset_Handler and then the DPP assignments?

Thank you
Andreas



Title: Re: ME 7.8 in ida pro
Post by: zweistein on March 11, 2019, 01:36:54 PM
ok, so the A2L gives the following

 MEMORY_LAYOUT PRG_CODE 0x800000 0x10000 -1 -1 -1 -1 -1
    MEMORY_LAYOUT PRG_CODE 0x820000 0xE0000 -1 -1 -1 -1 -1
    MEMORY_LAYOUT PRG_DATA 0x810000 0x10000 -1 -1 -1 -1 -1

So how to load the flash file correctly. Do I just load into 0x8000000 ?

Do I need to map also the second Prog_Code at 0x820000 und how to load the Prog_Data?

Any hints?

Andreas


Title: Re: ME 7.8 in ida pro
Post by: gt-innovation on March 11, 2019, 02:03:36 PM
ok, so the A2L gives the following

 MEMORY_LAYOUT PRG_CODE 0x800000 0x10000 -1 -1 -1 -1 -1
    MEMORY_LAYOUT PRG_CODE 0x820000 0xE0000 -1 -1 -1 -1 -1
    MEMORY_LAYOUT PRG_DATA 0x810000 0x10000 -1 -1 -1 -1 -1

So how to load the flash file correctly. Do I just load into 0x8000000 ?

Do I need to map also the second Prog_Code at 0x820000 und how to load the Prog_Data?

Any hints?

Andreas

Check my Posts for ME7.1.1 st10f and you will get the idea...