CalvinBackup/Embedded-Hacking
1
0
Fork 0
mirror of https://github.com/mytechnotalent/Embedded-Hacking.git synced 2026-08-28 05:40:36 +02:00
Code Issues Packages Projects Releases Wiki Activity

Refactor E and S

Browse Source
This commit is contained in:
Kevin Thomas
2026-03-19 15:01:07 -04:00
parent f524f5b86b
commit 1784a107ae
81 changed files with 2986 additions and 247 deletions
Download Patch File Download Diff File Expand all files Collapse all files
WEEK03/WEEK03-04.md
+17 -17
View File
@@ -1,10 +1,10 @@
# Embedded Systems Reverse Engineering
# Embedded Systems Reverse Engineering
[Repository](https://github.com/mytechnotalent/Embedded-Hacking)
## Week 3
Embedded System Analysis: Understanding the RP2350 Architecture w/ Comprehensive Firmware Analysis
### Exercise 4: Find Your Main Function and Trace Back
### Non-Credit Practice Exercise 4: Find Your Main Function and Trace Back
#### Objective
Locate the `main()` function, examine its first instructions, identify the first function call, and trace backward to discover where `main()` was called from.
@@ -129,8 +129,8 @@ Subtract 1 to remove the Thumb bit and disassemble:
```
0x10000186 <platform_entry>: ldr r1, [pc, #80]
0x10000188 <platform_entry+2>: blx r1
0x1000018a <platform_entry+4>: ldr r1, [pc, #80] ← LR points here
0x1000018c <platform_entry+6>: blx r1 ← This called main
0x1000018a <platform_entry+4>: ldr r1, [pc, #80] ? LR points here
0x1000018c <platform_entry+6>: blx r1 ? This called main
0x1000018e <platform_entry+8>: ldr r1, [pc, #80]
0x10000190 <platform_entry+10>: blx r1
0x10000192 <platform_entry+12>: bkpt 0x0000
@@ -142,11 +142,11 @@ Working backward from `main()`:
```
platform_entry (0x10000186)
↓ calls (blx at +2)
? calls (blx at +2)
runtime_init() (0x1000024c)
↓ calls (blx at +6)
main() (0x10000234) ← We are here
↓ will call (blx at +6)
? calls (blx at +6)
main() (0x10000234) ? We are here
? will call (blx at +6)
stdio_init_all() (0x100012c4)
```
@@ -173,21 +173,21 @@ You've now traced the complete path:
```
1. Reset (Power-on)
↓
?
2. Bootrom (0x00000000)
↓
?
3. Vector Table (0x10000000)
↓
?
4. _reset_handler (0x1000015c)
↓
?
5. Data Copy & BSS Clear
↓
?
6. platform_entry (0x10000186)
↓
?
7. runtime_init() (first call)
↓
8. main() (second call) ← Exercise focus
↓
?
8. main() (second call) ? Exercise focus
?
9. stdio_init_all() (first line of main)
```