Hi
I started playing with libnodave in order to reverse engineer simatic.
I have managed to get microcode of a 313C CPU (almost all instructions - except jumps).
Anyone else has experience on disassembling/reversing & would like to give a hint as to how to proceed? (methodology etc.?)
Has anyone else tried anything similar?
I am not able to get my hands on other CPUs, so I'm a bit limited on that, but my focus is on S7-300(maybe 400 too).
Maybe get a shot on S7-1200 as well, depending on how S7-300 is progressing.
Here are some screenshots of a _very_basic_ program I did in C# in order to assist me in the task. It is using libnodave library.
If anyone has any ideas, proposals, let me know what do you think.
[?]: Reverse Engineering SIMATIC
-
- Site Admin
- Posts: 3992
- Joined: Thu Feb 16, 2006 3:25 pm
- Location: Russia
Re: [?]: Reverse Engineering SIMATIC
Some usefull info in
http://www.symantec.com/connect/de/blog ... et-dossier
http://www.symantec.com/content/en/us/e ... ossier.pdf
IDA 5 Pro multi-processor disassembler and debugger
http://www.plcforum.uz.ua/viewtopic.php ... datarescue
http://www.symantec.com/connect/de/blog ... et-dossier
http://www.symantec.com/content/en/us/e ... ossier.pdf
IDA 5 Pro multi-processor disassembler and debugger
http://www.plcforum.uz.ua/viewtopic.php ... datarescue
-
- Posts: 6
- Joined: Sat Aug 21, 2010 11:26 am