Renesas Microcomputer R5F64167DFB Flash Memory Cloning is a process to reverse engineering microcontroller and figure out the circuitry pattern of internal electrical connection, extract the firmware out from its flash memory;
Below Figure shows the memory map of the R32C/111 Group.
The R32C/111 Group provides a 4-Gbyte address space from 00000000h to FFFFFFFFh.
The internal ROM is mapped from address FFFFFFFFh in the inferior direction. For example, the 512-Kbyte internal ROM is mapped from FFF80000h to FFFFFFFFh.
The fixed interrupt vector table contains the start address of interrupt handlers and is mapped from FFFFFFDCh to FFFFFFFFh.
The internal RAM is mapped from address 00000400h in the superior direction. For example, the 63-Kbyte internal RAM is mapped from 00000400h to 0000FFFFh. Besides being used for data storage, the internal RAM functions as a stack(s) for subroutine calls and/or interrupt handlers.
Special function registers (SFRs), which are control registers for peripheral functions, are mapped from 00000000h to 000003FFh, and from 00040000h to 0004FFFFh. Unoccupied SFR locations are reserved, and no access is allowed.
In memory expansion mode or microprocessor mode, some spaces are reserved for internal use and should not be accessed.
The flash memory version provides two additional 4-Kbyte spaces (blocks A and B) for storing data.This space can be used in memory expansion mode or microprocessor mode. Addresses from 02000000h to FDFFFFFFh are inaccessible.
This space is reserved in memory expansion mode. It becomes an external space in microprocessor mode. This space can be used in single-chip mode or memory expansion mode. It becomes an external space in microprocessor mode to Unlock MCU PIC16F59 Eeprom.
The watchdog timer interrupt shares a vector with the oscillator stop detection interrupt and low voltage detection interrupt.