RomRaider

Interesting, that hasn't been my experience... Have an example ? I recently loaded 6Z68A, 4M860, and ghidra is picking up nearly everything. Not saying it's perfect, but it's at least as good as IDA .


Do you mean like what I described here https://github.com/NationalSecurityAgen ... ssues/4387 ?


Agreed. Currently I'm using almost defaults, but I disabled
ASCII strings
Demangler GNU
Embedded Media

Sometimes I enable "Scalar Operand References" but I haven't really paid attention to what exactly changes.

Can't believe I forgot to get back to this lol


Yea, stuff like this happens with every ROM. For CF48D I spent a few hours manually going through the entire ROM just to ensure that I created all the proper functions, as Ghidra missed quite a few. And it's not like it's missing complex things either, it's missing basic functions like shown below.



Not quite. IIRC, I was just referring to Ghidra not being able to figure out what a RAM address would be if it was called using offsets. So if r4 = 0xFFFF1234, r5 = 0x01, a line that used r4 + r5 as the address would result in Ghidra just not showing any address at all, rather than the expected result of 0xFFFF1235. But I haven't found why Ghidra does a great job most of the time, then randomly just can't figure it out no matter what in a few sections.


I leave that disabled, as it causes Ghidra to interpret waaayy too many data bytes as addresses. Even with it disabled, Ghidra still does it, but just not as frequently.

Made some progress on this. Seems to be directly caused by "SuperH4 Constant Reference Analyzer" or "Basic Constant Reference Analyzer" for SH2. So what you need to do is disable "Stored Value Pointer Analysis" within "SuperH4 Constant Reference Analyzer". When comparing CF48D with and without this change, it appears that it mostly works as intended. There are still a few addresses that get wrongfully shown, but it seems to remove most of them at the very least.

On the left is CF48D with the adjusted options, on the right is CF48D without them. As you can see, it looks MUCH nicer lol The worst part is those addresses are counted as legitimate references. So common hex values like 0x8000 end up causing there to be 200+ references to the address 0x8000, it's insane lol