Hey everyone,

I know that this forum is about tunning, however, I hoped that maybe experts like you could help me :)

I'm more interested in reverse engineering the ECU - to statically analysis code in IDA Pro or another disassembler.

I saw here and in other tuning sites ECU files to download. Are the files that reference as 'original' are just the firmware image downloaded from the ECU?

If yes, Most of the files that I looked at I couldn't recognize the CPU architecture (I guess that the ECU is run on a microcontroller?). Is this information available somewhere? (for example, if it's ARM, PPC, Renesas...)
Or do you have any tips for recognizing the CPU architecture for further research?

Another thing is that most of the files have very specific sizes - most of them are powers of 2 (1024KB, 2048KB..). Why is that? It's very different from any other firmware that I saw..

Thank you very much!

ORI is the image of the flash chip from ECU. Usualy it contines program, librarys and data for the ecu's MCU. Most of ecu's MCU is Von Neumann architecture and flash chip is the part of common memory address area. You must use settings for MCU from the ecu in IDA . For example, Bosch EDC15 ecus based on Infineon C167 MCU family. Infineon site contins enought info about this MCU.

BR. Alex

Any ideas what is the best approach of a given ECU to find on what MCU is it based on?

Do you know if some of the ECUs are based on ARM/PPC/MIPS architecture? And if yes, any suggestions to how to find them out of all the ECUs?

Basically, I'm looking for MCUs to reverse engineer, but I look to the more common CPU architectures like ARM/PPC/MIPS.

Open ecu and look :)
Or search in Internet.
AFAIK in ecu used MCU from industrial application line, not common.

See attached file.

2xded wrote:See attached file.

Thanks, it's really helpful!