I have a U-Boot image file which was extracted from flash memory of a board with an Hi3520D ARM CPU. I would like to load this file into IDA Pro and dig out the password that is required for accessing the U-Boot shell so that I could flash a modified firmware back onto the board.

The problem is that I don't know how to find out the values that IDA needs in the "Disassembly memory organization" window. I have used IDA before with normal x86 and ARM executables but binary files are new to me in this context so guidance would be greatly appreciated. Here is the file if it helps: dropbox link

This is mostly a learning project so as much detail as possible would be good.

  • does the vendor provide GPL source code as they're supposed to?
    – Igor Skochinsky
    Apr 23, 2021 at 23:14
  • They do provide source code for u-boot but it doesn't include the password protection code at all and while I can compile the u-boot sources just fine, I cant flash it to the board because it needs some special device config files that they don't provide.
    – nyaol9
    Apr 24, 2021 at 7:07
  • I mean you can probably look up the memory layout in the source code
    – Igor Skochinsky
    Apr 24, 2021 at 9:31


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.