|
RomRaider
Documentation
Community
Developers
|
| Author |
Message |
|
ilarson007
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Mon Dec 08, 2014 4:24 pm |
|
 |
| Newbie |
Joined: Wed Dec 05, 2012 3:00 pm Posts: 94
|
Professwrx wrote: ilarson007 wrote: NSFW wrote: 6) Unfold the startup/reset code. The first 4 bytes of ROM are a pointer to the code that runs when the ECU is powered up. Jump to that location (AAC in the ROM I'm looking at) and press 'c' to mark it as 'code.' You'll see a small portion of the ROM disassembled. So, I will admit that I don't know the first thing about ROM disassembly. I am trying to open up the 710J (04 STi) ROM in Ida, and am stuck on this step... First of all, how long is 4 bytes in hex? Second, how do I determine where this pointer is pointing to? Open the Rom. While at the top click the rom address. press d three times. You should have made the first four bytes (8hex digits) clickable. Double click, press c. I was going to take some screenshots, but my copy of IDA is not working right now. Where exactly do I click? Just on the ROM:00000000, or on line 1, or ?? Also, where would I double click, on the 'data.l,' on the address, or ??
|
|
| Top |
|
 |
|
®@©E®
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Mon Dec 08, 2014 4:27 pm |
|
 |
| Experienced |
Joined: Sat Mar 10, 2007 5:16 pm Posts: 212 Location: Ukraine
|
|
Just on ROM:00000000, doubleclick on value after 'data.l'
|
|
| Top |
|
 |
|
Professwrx
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Mon Dec 08, 2014 4:35 pm |
|
 |
| Experienced |
Joined: Thu Jan 09, 2014 10:17 pm Posts: 394
|
ilarson007 wrote: I was going to take some screenshots, but my copy of IDA is not working right now. Where exactly do I click? Just on the ROM:00000000, or on line 1, or ?? Also, where would I double click, on the 'data.l,' on the address, or ??
You can select the line you want to change the data type on by clicking on the rom address you want to change. ROM:00000000 When you press "d" to cycle through the types you'll notice the bytes start to bunch together and the "data.b" cycles through the types. When you change the type of the first set of bytes in the rom to data.l you can now click on the bytes themselves something like h'B68. That is your link to where you are trying to go. Double click that and when it takes you there press "c" That should change the subroutine you are now looking at into code for you.
|
|
| Top |
|
 |
|
ilarson007
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Mon Dec 08, 2014 5:19 pm |
|
 |
| Newbie |
Joined: Wed Dec 05, 2012 3:00 pm Posts: 94
|
Professwrx wrote: ilarson007 wrote: I was going to take some screenshots, but my copy of IDA is not working right now. Where exactly do I click? Just on the ROM:00000000, or on line 1, or ?? Also, where would I double click, on the 'data.l,' on the address, or ??
You can select the line you want to change the data type on by clicking on the rom address you want to change. ROM:00000000 When you press "d" to cycle through the types you'll notice the bytes start to bunch together and the "data.b" cycles through the types. When you change the type of the first set of bytes in the rom to data.l you can now click on the bytes themselves something like h'B68. That is your link to where you are trying to go. Double click that and when it takes you there press "c" That should change the subroutine you are now looking at into code for you. Okay, I will try again later when I get IDA to open for me again.
|
|
| Top |
|
 |
|
Obeisance
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Sat Feb 13, 2016 2:27 pm |
|
 |
| Newbie |
Joined: Wed Jul 09, 2014 4:11 pm Posts: 24
|
|
Thank you for posting this thread; there is a lot that is not clear to someone beginning to learn assembly/disassembly. This thread has given me renewed hope in my endeavor.
I have an interest in learning how the machine code in my Motorola MC68376 processor functions. When I began I didn't know anything about assembly language or disassembly. In order to learn assembly (because I did not want to purchase IDA since it is expensive and my lack of knowledge would preclude its effective use), I decided to write my own disassembler. I found documentation for the 68000 and the individual processor's machine instructions and have written a simple script which looks for the first exception table (which shows where the code begins) and linearly translates code from there on (accounting for branching possibilities).
On short examples of code posted online (and in the snippets from this processor/application which others have translated using IDA), I can get a perfect match in disassembly of commands on the first run through the file. Unfortunately, I don't yet know how to handle data types and tables, so these are incorrectly translated into instructions. My end goal is to understand a file with something like a million bytes, so there is a lot of room for error. I'm sure you're all familiar with this.
At first, I was quite disappointed that I could not get the full disassembly with a single pass. After seeing this thread, and realizing that not even IDA can do such a feat, I can adjust my disassembly strategy based upon how you use IDA to disassemble binary files.
I will certainly share more of what I've done if anyone is interested; I would benefit greatly from a conversation about disassembly and how code is organized in memory.
|
|
| Top |
|
 |
|
dschultz
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Sat Feb 13, 2016 2:47 pm |
|
 |
| RomRaider Developer |
Joined: Thu May 21, 2009 1:49 am Posts: 7323 Location: Canada eh!
|
|
| Top |
|
 |
|
Obeisance
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Sat Feb 13, 2016 5:48 pm |
|
 |
| Newbie |
Joined: Wed Jul 09, 2014 4:11 pm Posts: 24
|
|
Thanks for your reply. Unfortunately, the link you provided leads to a 404 error when trying to download the 68k binutils for MinGW (what I'm most familiar with). I already have the binutils that come with the MinGW implementation of gcc, but I assume that it does not have the m68k instructions built in.
Even still, I'm not sure how to properly use that. I guess I could try to use the objdump to get binutils to disassemble for me, right?
Alternately, I could try to figure out how to use the BDM interface on the board (using the tools in that link).. but I was hoping I would not have to pry off the sealed lid from the ECU.
|
|
| Top |
|
 |
|
dschultz
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Sat Feb 13, 2016 7:08 pm |
|
 |
| RomRaider Developer |
Joined: Thu May 21, 2009 1:49 am Posts: 7323 Location: Canada eh!
|
|
Yes objdump would provide a disassembly for you. If it's not in the core binutils now I'm sure with some searching you could find what you need in an old version of the tools.
|
|
| Top |
|
 |
|
mavstang73
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Tue Feb 23, 2016 4:47 am |
|
 |
| Newbie |
Joined: Thu Apr 30, 2009 6:05 am Posts: 38
|
Can anyone offer some guidance on using IDA with a ROM from the 92-95 SVX? Viewed in Hex I can see many patterns that surely signify tables but determining what they are is another question. Thanks to Merp I've had some luck in getting the ecu defs to work in Romraider. See description below from http://www.alcyone.org.uk/"The ECU is made by JECS and based around the Mitsubishi M37791 CPU (7700 family). There is 32K of ROM and 1280 bytes of RAM. 16-bit values are stored in little-endian form." I've attached a ROM from a 94 SVX.
You do not have the required permissions to view the files attached to this post.
|
|
| Top |
|
 |
|
big_dims
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Mon Sep 16, 2019 7:22 pm |
|
 |
| Newbie |
Joined: Mon Sep 02, 2019 11:51 am Posts: 10
|
Hello, I have a n00b question. Attachment: Capture.PNG I don't see motorola 6816 in my processors list in Ida Pro. What am I missing? Will one of the processor types I have work as well?
You do not have the required permissions to view the files attached to this post.
|
|
| Top |
|
 |
|
dschultz
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Mon Sep 16, 2019 11:21 pm |
|
 |
| RomRaider Developer |
Joined: Thu May 21, 2009 1:49 am Posts: 7323 Location: Canada eh!
|
|
Motorola 6800 should work fine.
|
|
| Top |
|
 |
|
Rick2014
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Sat Apr 18, 2020 10:25 am |
|
 |
| RomRaider Donator |
Joined: Wed Feb 04, 2015 8:41 pm Posts: 163
|
|
For people like my self who are learning ida pro is expensive . Could even be a waste of money if it doesn't pan out right .
Guidra I think its called the file was huge with a lot of content
|
|
| Top |
|
 |
|
Rick2014
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Tue Apr 21, 2020 5:12 pm |
|
 |
| RomRaider Donator |
Joined: Wed Feb 04, 2015 8:41 pm Posts: 163
|
|
Hi i have ida now at last .I pressed the G button and a box popped up i put 0x200 in and pressed C then another box popped up. I was presented with the box below . Further up it says in a so many words have a idea of what your looking for .How do i no the start of the table I'm looking for (ie) name of table full address etc? at this moment in time i really would like to no the size of my injectors . and form wjhat i gather the info is in ida. Can some one with more experience please give me a hand or advice please
You do not have the required permissions to view the files attached to this post.
|
|
| Top |
|
 |
|
05Pzev
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Thu Feb 04, 2021 11:55 pm |
|
 |
| RomRaider Donator |
Joined: Sun Jan 03, 2016 2:05 pm Posts: 217
|
Are any of the "IDA HOME" licenses relevant to the Subaru ROMs? Quote: DAARMNW IDA Home ARM [Windows] 365 USD IDAM68KNW IDA Home M68K [Windows] 365 USD IDAMIPSNW IDA Home MIPS [Windows] 365 USD IDAPCNW IDA Home PC [Windows] 365 USD IDAPPCNW IDA Home PPC [Windows] 365 USD
|
|
| Top |
|
 |
|
dschultz
|
Post subject: Re: How To: Get started with IDA and disassembly Posted: Fri Feb 05, 2021 12:13 am |
|
 |
| RomRaider Developer |
Joined: Thu May 21, 2009 1:49 am Posts: 7323 Location: Canada eh!
|
05Pzev wrote: Are any of the "IDA HOME" licenses relevant to the Subaru ROMs? Quote: DAARMNW IDA Home ARM [Windows] 365 USD IDAM68KNW IDA Home M68K [Windows] 365 USD IDAMIPSNW IDA Home MIPS [Windows] 365 USD IDAPCNW IDA Home PC [Windows] 365 USD IDAPPCNW IDA Home PPC [Windows] 365 USD
You need the version that includes Renesas SH process support.
|
|
| Top |
|
 |
Who is online |
Users browsing this forum: No registered users and 6 guests |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot post attachments in this forum
|
|