I finally got some time to twiddle with IDA PRO...

I'm trying to figure out this

http://nefariousmotorsports.com/forum/index.php?topic=3562.0title=

Here are the first few RAM locations (trying to trace bgmszs) I didn't have that I found.

Can some of the pros take a look and see if i got them right? (2.7t mbox of course)

 0000:F9EE       mste?
 0000:380C77       pspvdsmx?
 0000:38215C       mlhfmf_w?
 0000:3821A6       fwrldk_w?
 0000:3821AE       msdkalm_w?
 0000:3821CA       rlfdkroh_w?
 0000:3821D2       umsrln_w?

 0000:FD66.5 or .6 B_ehfm? (DHFM is at 0x851560?)

how am I doing?

a few stupid noob idapro questions:

Is there a way to set up bitfields in IDA Pro?

How do you tag map locations? Just add a comment? The constants that are set up before map lookup are rarely the location itself.

If I use comments, i can't figure out how to search for them.

Also, what kind of function naming convention do you use?

Finally, would it be worth it to start some sort of shared db of ram and function locations?

You can enumerate bitfields, but commenting is better for x-refing.

For maps, I usually manually adjust the address to accurately represent the DPP and comment the name.

Text search will find comments, but there isn't a need really. When do you find the need to search for comments?

I label functions in the flash per the FR.

What kind of shared DB did you have in mind?

OK, i am a TOTAL noob, so be gentle


I'm not sure how comments interact with x-refs.. i'll have to play with that more. especially dont undersand the difference between ":" and ";"


So. I totally don't get what you are saying... can you cut and paste an example? Keep in mind that while i understand the c166 pretty well at this point, IDA pro still baffles me.

 

e.g. say it says "jb 0xFD66.5 blah" and i want to comment it as '; B_ehfm' because i can't name "0xfd66.5" B_ehfm...

how do i search for B_ehfm? or are you saying if i do it right, B_ehfm will show up somehow as a x-ref?


Basically, some sort of editable/import/exportable db of function and ram locations.. I know IDAPro can export symbol tables... not sure about importing, but I know i can probably write some sort of plugin for it (once i figure out how plugins work etc). Also, would need some sort of metadata format so we can include conversions...

Altho we should really do it ASAP2 style, and have some sort of DB of "types" rather than repeat conversions for every damn item... then i could write a script to convert that to an .ecu file (and back) for ME7L, etc.

Not sure how to handle merging etc. but if i can do it all with a git repo with text files, i think it can work. I could also write a website/sql type of thing for it, but that would be a lot of work and probably beyond what i'm willing to work on solo.

This all depends, of course, if there is enough interest in some sort of shared effort.

yea, its super slow (and doesn't work?) and i like the "xref" thing (where you highlight something then hit x).. does that work with comments? actually, don't answer that, I think i just need to experiment more..

if you say it works, i must just not be doing it right.

"super slow" is very subjective. Can you put that in context, compare to something else. But sure, in my "car laptop" it takes 10sec to search from top to bottom of a 512mb flash idb. But it works well to find comments (no search parameters set).

There is a native linux version of IDA Pro... have not tried it yet though.

Does anyone have a commented (or especially) commented IDA file they can share?

I'd like something to compare with whilst trying to IDA my Volvo ME7 file.