This was before I had the docs so didn't know the memory map.

what mem we can look at in windows..

00000000 - ? mostly blank
00002000 - locks
10000000 - has stuff in, ~0x200 of counting, right through to 20000000
20000000 - locks

40000000 - registers, valid to 4f

50000000 - ? mostly blank
51000000 - deaddead
52000000 - deaddead
53000000 - deaddead
54000000 - mostly blank
55000000 - deaddead

56000000 - (mapped in mmu) locks

56300000 - locks

56400000 - deaddead

57000000 - deaddead
58000000 - blank
58010000 - deaddead
59000000 - deaddead
5a000000 - deaddead
5b000000 - deaddead


5c000000 - SRAM
5c040000 - blank
5c100000 - SRAM repeat
5d000000 - SRAM repeat
5e000000 - different, but locks if SRAM clock off



60000000 - deaddead
70000000 - deaddead

80000000 + 1st 0x04000000(65MB) block repeating
C0000000 + 2nd 0x04000000(65MB) block repeating

and again from linux:
all exactly the same, hmmm...

Offset	Phys	
180	40a00000	timers
1c0	44000000	lcd
240	41000000	ssp
280	40e00000	gpios
980	40e10000	mfps
9c0	41500000	keypad
a000	40e00000	gpios
a40	41340000	accr
a80	40a00000	timers
8ac0	40f40000	app subsys power



14-04-08:
Things that look like L2 entries for GPIOs:
000d8280  f2 0f e0 40 
000d8a00  f2 0f e0 40 
000d8c40  f2 0f e0 40 
000d8d40  f2 0f e0 40 
007a3240  f2 0f e0 40 
007a34c0  f2 0f e0 40 
007a3a40  f2 0f e0 40 
007a3b40  f2 0f e0 40 
007a3c00  f2 0f e0 40 
007a3f00  f2 0f e0 40 
007a3f80  f2 0f e0 40 
008c50c0  f2 0f e0 40 
008c5240  f2 0f e0 40 f0 ff ff ff  f0 ff ff ff f0 ff ff ff  |...@............|
008c5800  f2 0f e0 40 f0 ff ff ff  f0 ff ff ff f0 ff ff ff  |...@............|
008c5c80  f2 0f e0 40 f0 ff ff ff  f0 ff ff ff f0 ff ff ff  |...@............|
008c5e00  f2 0f e0 40 f0 ff ff ff  f0 ff ff ff f0 ff ff ff  |...@............|
008c5f80  f2 0f e0 40 f0 ff ff ff  f0 ff ff ff f0 ff ff ff  |...@............|
00c9b4c0  f2 0f e0 40 f0 ff ff ff  f0 ff ff ff f0 ff ff ff  |...@............|
00c9b9c0  f2 0f e0 40 f0 ff ff ff  f0 ff ff ff f0 ff ff ff  |...@............|
00c9bb00  f2 0f e0 40 f0 ff ff ff  f0 ff ff ff f0 ff ff ff  |...@............|
00c9bb40  f2 0f e0 40 f0 ff ff ff  f0 ff ff ff f0 ff ff ff  |...@............|


Finding the ROM:
4a000000+
on resume, after rom, rom clock is on and...					boot		normal
MSC0		(0x08)	/* Static Memory Controller Register 0 */		7ff07ff0	00000ffc
MSC1		(0x0C)	/* Static Memory Controller Register 1 */		7ff07ff0	7ffc7ff8
SXCNFG		(0x1C)	/* Synchronous Static Memory Control Register */	00880008	00883009
MEMCLKCFG	(0x68)	/* Clock Configuration */				00030003	00020002
CSADRCFG0	(0x80)	/* Address Configuration Register for CS0 */		00020000	003e480b
CSADRCFG1	(0x84)	/* Address Configuration Register for CS1 */		00020000	00020000
CSADRCFG2	(0x88)	/* Address Configuration Register for CS2 */		00020000	00320919
CSADRCFG3	(0x8C)	/* Address Configuration Register for CS3 */		00020000	003e080b

MSCx (in 16 bits sets):

4: rROM bus width, 0=32, 1=16
0-3:
000 = Synchronous flash or non-burst ROM or non-burst flash
001 = SRAM
010 = Burst-of-four ROM or burst-of-four flash (with non-burst writes)
011 = Burst-of-eight ROM or burst-of-eight flash (with non-burst writes)
100 = Variable-latency I/O (VLIO)
101 = reserved
110 = reserved
111 = reserved