Services/Firmware
Firmware reverse engineering
When the interesting behaviour lives in flash rather than a public datasheet, we extract the firmware, map the CPU and memory, and turn that into something you can calibrate or patch.
Typical targets are Infineon TriCore ECUs — that is the architecture we know in the most depth — along with the MCUs we design around them. We have also worked on PowerPC and Renesas controllers when the job needed it.
We work from bench dumps, boot-mode readouts and files you already have. Analysis is done in Ghidra with our own scripts. Delivery is a report, a patched binary, or both — depending on the engagement.
A public example is MG1 sound tuning on MG1CS163 — custom overrun sound code in firmware, not a map-only change.
- Firmware extraction and comparison
- TriCore specialists; PowerPC and Renesas experience
- MCU disassembly and tracing
- Boot and bench readout support