NefMoto

Technical => Reverse Engineering => Topic started by: Alex02rus on June 19, 2018, 04:57:21 AM



Title: IDA PRO and processor SPC56XX - MPC56XX
Post by: Alex02rus on June 19, 2018, 04:57:21 AM
who than dismantles the firmware with the processor SPC56XX - MPC56XX ?
i have a problem, IDA v7.0 can not parse code flash MPC5674, who faced such a problem?
attached a file citroen C4 2.0 hdi ecu DCM6.2


Title: Re: IDA PRO and processor SPC56XX - MPC56XX
Post by: ozzy_rp on June 19, 2018, 05:20:46 AM
I have a similar problem.
I can not disassemble flash from IAW9GV ECU with MPC5634... :(


Title: Re: IDA PRO and processor SPC56XX - MPC56XX
Post by: jcsbanks on June 19, 2018, 05:36:24 AM
Interesting. I know very little about PPC, but wanted to have a look at MDG1 to see if it was Tricore as I've done a lot with Bosch Tricore and understood that MDG1 could be built for Tricore or PPC, but the binary I have is not Tricore but I could not get official (but out of sub) IDA 6.95 to make any sense of it, probably an MPC57xx.


Title: Re: IDA PRO and processor SPC56XX - MPC56XX
Post by: prj on June 19, 2018, 06:13:06 AM
PPC supports instruction compression, it can be that the file is compressed, in this case you need to somehow dump the dictionary from the processor that was used to compress the data.
For example gearbox files (GS19) have the same issue, the code is compressed and decompressed in-place during execution...


Title: Re: IDA PRO and processor SPC56XX - MPC56XX
Post by: wangyanjun on June 29, 2018, 06:26:08 PM
No compression, it is VLE, so you have to select VLE