MCU reverse engineering

Mosel Vitelic Microcontroller Unlock

General Questions About Microcontroller Firmware Extraction

---

• Is it safe to send payment to MikaTech ?

  If MikaTech was a bad company, you could find tons of bad reputations about its service on the internet over the 28 years history

  So, the answer is YES! We are good people.

  Why choose Mikatech, please click here to find out
  

  
  
• Can Mikatech break ics not listed on this site ?

  Different chip manufacturers have different part numbers, but the inner core of the chip can be make with same technology, it would be quite impossible to list all the part numbers where our technology can apply such as MYSON, STK, FEELING, ANALOG, FUJITSU, NOVATEK, LG/HYNDAI.
  
  Also by the advancing of the technology, everyday we gain more and more experience and develope new methods for reverse engineering for different Intergated Circuit parts. Full list of Integrated Circuit part numbers which is within our scope of capability is always getting bigger, please contact us to find out.

• Will my privacy be protected ?

  Mikatech Innovative Limited understands the importance of its clients' privacy. At the moment you contact Mikatech, the personal information from you will be put under protection by our management regulations which was developed by our years of practice, Mikatech uses these information to customize its service to you, it will never disclose these information to third party out of any reason.
  Every project we did, we will delete all the data, materials, and codes 60days after deliverig the files, it iwll protect us and protect your privacy.

• Is it legal to get service from Mikatech ?

  Yes, it is totally legal.
  Mikatech deliver its reverse engineering services for educational purposes only, it can be illegal to use above mentioned services in some coutries or regions, please check your local laws. Mikatech does not take any responsibility in relation to the use of above mentioned services that may be considered illegal.

  
  
• EEPROM and Flash Dumping Techniques for Firmware Recovery

  The extraction of firmware from microcontroller memory—whether flash, EEPROM, or other non-volatile storage—is the foundational step in any reverse engineering effort. Successful firmware extraction enables security researchers to analyze code for vulnerabilities, recover cryptographic keys, understand proprietary protocols, and develop patches or exploits. However, microcontroller manufacturers have implemented numerous protections to prevent unauthorized reading of memory contents, including read-out protection, lock bits, and fuse-based security mechanisms. For unprotected microcontrollers, dumping flash and EEPROM is relatively straightforward. Tools such as avrdude for AVR devices, stm8flash for STM8 microcontrollers, and various JTAG/SWD programmers can read memory contents through standard programming interfaces. These tools typically support dumping entire memory regions to binary files that can then be loaded into disassemblers and reverse engineering frameworks such as Ghidra, Binary Ninja, or IDA Pro. The availability of these open-source tools has democratized firmware extraction, enabling independent researchers to analyze embedded systems that were previously accessible only to manufacturers and their authorized partners. When read-out protection is enabled, the challenge becomes considerably more difficult. The STM8 series, for example, implements Read Out Protection that blocks reading and modifying flash program memory and data EEPROM through the debug interface. Attempting to disable this protection typically triggers a global erase of the program memory, destroying the very firmware the attacker seeks to recover. To overcome this obstacle, researchers have developed techniques such as voltage glitching during the protection check routine, exploiting race conditions in the SWD protocol, and leveraging bootloader vulnerabilities to access memory without triggering the erase mechanism. The emergence of dedicated hardware for flash dumping has further expanded the capabilities available to researchers. The DUMPTRUCK project, for instance, provides an open-hardware platform designed to interface with and dump almost any flash or non-volatile memory device. This device streamlines the process of reverse engineering devices through flash content analysis, making it easier to recover firmware even from challenging targets. As embedded systems continue to proliferate across industries, the importance of robust firmware extraction techniques—and the corresponding need for effective protection mechanisms—will only continue to grow.