Also, I tried with "-datawidth 8" in the script below. I get the right addresses, but the image is half the size it should be and only the lowest 8 bits of each word is copied. For example, if I debug with CCS, I see at address 0x300000: 0070 4F1D FFFF FFFF 761B FFF0. ...