Finding entry point/device loading address in firmware for Renesas 7144 Series?

Question

We need to find out how some logic, created by others, work. Logic is implemented in firmware for 64F7144F50V SH2 CPU (probably, part from Renesas SH7144 family).

Device firmware is unencrypted (clear). BTW, here is firmware file.

But because we have never worked with SuperH (SH-1/SH-2/SH-DSP), we stuck with it.

Could you please point us to the right direction? Namely, we need to find entry point / address where device starts loading from.

Any help will be appreciated.

P.S. We are not dummies, and do assembler, ARM, .net, etc. Just have never come across with such kind of processors.