RomRaider

I put together this register definition for the SH7055 / SH7058 / SH72531 & SH72543R for use with IDA.
Let me know if you see any errors.

Thanks so much! Going through the manual to find all of these addresses is pretty tedious, this will definitely make things much easier. Should have some time to try it out later.

Everything worked great with the exception of some HCAN registers:

I got a huge list of these for them:
FFFFDCF2: can't rename byte as 'HCAN1_MB31[17],[18]_W' because it contains a bad character ','.

Edit: I was looking for a way to get Xrefs for the registers, but I realized that instead of binary pattern searching for the address and parsing all of the hits, a text pattern search only hits the actual uses, making things just as easy as Xrefs.

Thanks!

Shoot, I thought I cleaned all those out... try the new version in the OP.
I'll add in the SH7055 in the next day or two.

Added SH7055, now in the OP zip file.

This is really useful, thanks!

Probably a stupid question but how do you use this configuration file? Do you rename it to IDA.cfg and put it in the IDA's root directory? I don't see a menu command for loading the configuration file. I'm a IDA newb, so it's probably something simple.

Thanks!

Just replace the current file with the one you downloaded from here.

Oh my god I'm such a newb. I completely missed the CFG directory...lol. Sorry and thanks.

Following corrections in sh3.cfg make evident where AUD debugging is disabled inside the ROM.

.SH7055
; Power-down State
SYSCR_B 0xFFFFF708
MSTCR_[W]_W 0xFFFFF70A
MSTCR_[R]_B 0xFFFFF70B

.SH7058
; Power-Down State
SYSCR1_B 0xFFFFF708
SYSCR2_[W]_W 0xFFFFF70A
SYSCR2_[R]_B 0xFFFFF70B

.SH7058S
; Power-Down State
SYSCR1_B 0xFFFFF708
SYSCR2_[W]_W 0xFFFFF70A
SYSCR2_[R]_B 0xFFFFF70B

OS is configured to disable AUD debugging just after secondary bootloader (using SCI2 communication port) transfers control to OS.

Update complete.

IDA newb here.

I don't see any addresses beyond the end of the RAM that ends at 0xFFFFBFFF

Should I see this stuff somewhere when looking at the ROM or is it related to some other function within IDA?

from here: http://www.romraider.com/forum/viewtopi ... =25&t=6303

RAM segment:

For 7055, Start is 0xFFFF6000 and Length is 0x8000
For 7058, Start is 0xFFFF0000 and Length is 0xC000
Be sure to check the box to make the RAM segment.

it is documented in the spec sheet.

Mart

Ya I got that part. My question was what does this register listing do for me? Should I be able to see the addresses above 0xFFFFBFFE (I'm looking at a 7058)? Will this just label references in the ROM to these registers with nicer names?

If you made the RAM segment from 0xFFFF0000 to 0xFFFFFFFF before you did the analysis then you can see them at the high end of RAM, otherwise not.

If you used a RAM segment of 0xFFFF0000 to 0xFFFFBFFFF then you will only see them referenced in code like this sample.