RomRaider

Well, I think I finally got something. Converted to mem file (finally found the converter, freely available, I was looking all over his site to purchase), then tried the instructions.

*.bin to *.mem Converter - viewtopic.php?f=42&t=11321








This is hilarious to me, I guess I'll be the idiot in class that had the courage and raise my hand to say we don't all understand. At the expense of peoples' perception of me.
Baby steps. You may change my forum title from "Experienced" to "Still a Newbie".

You get this prompt if you try to open the binary without selecting a Processor Type in the drop down list first.

I know how that feels... oh i know it

If anyone has a project file setup that they could share, i'd really appreciate it

Just confirming that per the attached screenshot, i click the reference where the red line starts (x200C2) and presss 'P' and continue to do this each time i come across a red line?

You press P while on the first line of the code you wish to change to a function, where the code address prefix is red.

thanks. thats more clear now. the dark red and black text are pretty hard to differentiate on this old laptop screen

Followed instruction on setting up Ida, seems to be working correctly but how do I go about labeling everything and making use of it? Sorry for the newb question

Press N to name subs and locations, press ; to write comments etc.

I understand that part but I guess maybe I'm looking for a getting started guide. What the best way to figure out which sub is which? Should I start but entering in the known addresses of data to help me find the sub routines? I guess that's where I'm lost

Yes, take what you know from the logger and editor defs and start marking the ROM.
If you could convince the XmlToIdc utility to accept your defs it would speed that part of the process.

Is the processor able to handle dword application? Moving, OR'ing etc.

Visiting this topic again -- Thanks for laying this out so clearly. I've gotten an MS41.2 mem file loaded up in IDA and have had partial success with the XmlToIdc utility. I was able to get the table defs and extended defs loaded (see screen) which is very helpful in browsing subroutines.

However I lost you at 'convert the data to words'... Forgive me, first time working in IDA and haven't had an assembly class since college some years ago. I believe I've located what you're referring to, at ~0x2100 (see attached). Also, your link to the DPP read has gone bad over the years, but I found a copy floating around (attached).

My goal is to find post overrun enrichment, and I believe with enough poking I just might have a chance at success

XML to IDC has failed you. The data section gets mapped at 0x10000 so you would need to add that to every address to convert from a "just cal" address to a full read address.

At some point the IDA people added decoding for long addresses like the SubR table (see attachment). Just hit D enough times to make the address correct and then hit O to tell IDA it's an offset.

"convert data to words" also means hitting D until the value you are on is represented correctly in IDA.

Looks right to me. I wish someone had showed me this in about 2009.

0xD800 is the CAN controller, it's on the bus with the memory instead of inside the processor like we use now. (Old school)