shoot! i just realized! you were right! it's SUPPOSED to be writing 0000 to the address! those check to see if the enemy is onscreen or destroyed! i hit run repeatedly, and all i got was this junk:
before hitting run
80D504FC: 98850000 stb r4,0(r5) 80D50500: 98850001 stb r4,1(r5) 80D50504: 98850002 stb r4,2(r5) 80D50508: 98850003 stb r4,3(r5) 80D5050C: 98850004 stb r4,4(r5) 80D50510: 98850005 stb r4,5(r5) 80D50514: 38A50006 addi r5,r5,6 80D50518: 4200FFE4 bdnz+ 0x80d504fc 80D5051C: 3CA080B3 lis r5,-32589 80D50520: 3C80A41A lis r4,-23526 80D50524: 38054880 addi r0,r5,18560 80D50528: 39000000 li r8,0 80D5052C: 7C001850 sub r0,r3,r0 80D50530: 388441A5 addi r4,r4,16805 80D50534: 7CE40016 mulhwu r7,r4,r0 80D50538: 91030050 stw r8,80(r3)
after hitting run once
80D504FC: 98850000 stb r4,0(r5) 80D50500: 98850001 stb r4,1(r5) 80D50504: 98850002 stb r4,2(r5) 80D50508: 98850003 stb r4,3(r5) 80D5050C: 98850004 stb r4,4(r5) 80D50510: 98850005 stb r4,5(r5) 80D50514: 38A50006 addi r5,r5,6 80D50518: 4200FFE4 bdnz+ 0x80d504fc 80D5051C: 3CA080B3 lis r5,-32589 80D50520: 3C80A41A lis r4,-23526 80D50524: 38054880 addi r0,r5,18560 80D50528: 39000000 li r8,0 80D5052C: 7C001850 sub r0,r3,r0 80D50530: 388441A5 addi r4,r4,16805 80D50534: 7CE40016 mulhwu r7,r4,r0 80D50538: 91030050 stw r8,80(r3)
after hitting run twice
80D504FC: 98850000 stb r4,0(r5) 80D50500: 98850001 stb r4,1(r5) 80D50504: 98850002 stb r4,2(r5) 80D50508: 98850003 stb r4,3(r5) 80D5050C: 98850004 stb r4,4(r5) 80D50510: 98850005 stb r4,5(r5) 80D50514: 38A50006 addi r5,r5,6 80D50518: 4200FFE4 bdnz+ 0x80d504fc 80D5051C: 3CA080B3 lis r5,-32589 80D50520: 3C80A41A lis r4,-23526 80D50524: 38054880 addi r0,r5,18560 80D50528: 39000000 li r8,0 80D5052C: 7C001850 sub r0,r3,r0 80D50530: 388441A5 addi r4,r4,16805 80D50534: 7CE40016 mulhwu r7,r4,r0 80D50538: 91030050 stw r8,80(r3)
but here's what's interesting! i set the same breakpoint, to read instead of write, and without even MOVING to get the enemy on screen, this crap came up!
top screen
[General Purpose Registers] r0 : 00000000 sp : 801AE8B0 rtoc: 801A6340 r3 : 80B34880 r4 : 80A20000 r5 : 80B34880 r6 : 0000018A r7 : 80D8D650 r8 : 00000119 r9 : 00000000 r10 : 00000000 r11 : 800F3064 r12 : 80D44B04 r13 : 801A5BC0 r14 : 00000000 r15 : 00000000 r16 : 00000000 r17 : 00000000 r18 : 00000000 r19 : 00000000 r20 : 00000000 r21 : 00000000 r22 : 00000000 r23 : 00000000 r24 : 00000000 r25 : 00000000 r26 : 00000000 r27 : 00000000 r28 : 80B365C0 r29 : 80B36924 r30 : 80A1DF78 r31 : 80B367D0
cr : 88824082 lr : 80D12C18 ctr: 80D44B04 xer: 00000000
[Floating Point Registers, Approximate Real Numbers] f00: 58 f01: 4.5036e+015 f02: 2.18965 f03: 360 f04: -1.#IND f05: 1.548 f06: -1.#IND f07: -1.#IND f08: 4.5036e+015 f09: 2 f10: 1 f11: -0.00416667 f12: 0.003125 f13: 2560 f14: 0 f15: 0 f16: 0 f17: 0 f18: 0 f19: 0 f20: 0 f21: 0 f22: 0 f23: 0 f24: 0 f25: 0 f26: 0 f27: 0 f28: 0 f29: 0 f30: 0 f31: 0
[Floating Point Registers, Single Precision] f00: 42680000 f01: 59800000 f02: 400C2348 f03: 43B40000 f04: FFC00000 f05: 3FC624D8 f06: FFC00000 f07: FFC00000 f08: 59800000 f09: 40000000 f10: 3F800000 f11: BB888888 f12: 3B4CCCC8 f13: 45200000 f14: 00000000 f15: 00000000 f16: 00000000 f17: 00000000 f18: 00000000 f19: 00000000 f20: 00000000 f21: 00000000 f22: 00000000 f23: 00000000 f24: 00000000 f25: 00000000 f26: 00000000 f27: 00000000 f28: 00000000 f29: 00000000 f30: 00000000 f31: 00000000
[Floating Point Registers, Double Precision] f00: 404D0000-00000000 f01: 43300000-80000000 f02: 40018469-E0000000 f03: 40768000-00000000 f04: FFF80000-FFFFFFFF f05: 3FF8C49B-A5E353F8 f06: FFF80000-00000000 f07: FFF80000-00000000 f08: 43300000-80000000 f09: 40000000-00000000 f10: 3FF00000-00000000 f11: BF711111-20000000 f12: 3F699999-A0000000 f13: 40A40000-00000000 f14: 00000000-00000000 f15: 00000000-00000000 f16: 00000000-00000000 f17: 00000000-00000000 f18: 00000000-00000000 f19: 00000000-00000000 f20: 00000000-00000000 f21: 00000000-00000000 f22: 00000000-00000000 f23: 00000000-00000000 f24: 00000000-00000000 f25: 00000000-00000000 f26: 00000000-00000000 f27: 00000000-00000000 f28: 00000000-00000000 f29: 00000000-00000000 f30: 00000000-00000000 f31: 00000000-00000000
fpscr: FFF80000
srr0: 80D12C90 srr1: 0000A032
gqr00: 00000000 gqr01: 00000000 gqr02: 00040004 gqr03: 00050005 gqr04: 00060006 gqr05: 00070007 gqr06: 00000000 gqr07: 00000000
psf00: B80BD096-BF800117 psf01: BC088889-3F800000 psf02: 3BCCCCCD-BF800000 psf03: BF800000-BF800000 psf04: BC088889-BC088889 psf05: 380BD096-380BD096 psf06: 46EA6000-46EA6000 psf07: 00000000-00000000 psf08: 3BCCCCCD-3BCCCCCD psf09: 40000000-40000000 psf10: 3F800000-3F800000 psf11: BB888889-BB888889 psf12: 3B4CCCCD-3B4CCCCD psf13: 45200000-45200000 psf14: 00000000-00000000 psf15: 00000000-00000000 psf16: 00000000-00000000 psf17: 00000000-00000000 psf18: 00000000-00000000 psf19: 00000000-00000000 psf20: 00000000-00000000 psf21: 00000000-00000000 psf22: 00000000-00000000 psf23: 00000000-00000000 psf24: 00000000-00000000 psf25: 00000000-00000000 psf26: 00000000-00000000 psf27: 00000000-00000000 psf28: 00000000-00000000 psf29: 00000000-00000000 psf30: 00000000-43800000 psf31: 00000000-00000000
bottom window
80D12C90: 88830000 lbz r4,0(r3) 80D12C94: 7C800775 extsb. r0,r4 80D12C98: 41820054 beq- 0x80d12cec 80D12C9C: 881F00CC lbz r0,204(r31) 80D12CA0: 7C000775 extsb. r0,r0 80D12CA4: 40820018 bne- 0x80d12cbc 80D12CA8: 881D0012 lbz r0,18(r29) 80D12CAC: 7C000775 extsb. r0,r0 80D12CB0: 41820020 beq- 0x80d12cd0 80D12CB4: 54800739 rlwinm. r0,r4,0,28,28 80D12CB8: 40820018 bne- 0x80d12cd0 80D12CBC: 88030003 lbz r0,3(r3) 80D12CC0: 7C000775 extsb. r0,r0 80D12CC4: 41820028 beq- 0x80d12cec 80D12CC8: 4803C4AD bl 0x80d4f174 80D12CCC: 48000020 b 0x80d12cec
and after hitting run once:
80D12C90: 88830000 lbz r4,0(r3) 80D12C94: 7C800775 extsb. r0,r4 80D12C98: 41820054 beq- 0x80d12cec 80D12C9C: 881F00CC lbz r0,204(r31) 80D12CA0: 7C000775 extsb. r0,r0 80D12CA4: 40820018 bne- 0x80d12cbc 80D12CA8: 881D0012 lbz r0,18(r29) 80D12CAC: 7C000775 extsb. r0,r0 80D12CB0: 41820020 beq- 0x80d12cd0 80D12CB4: 54800739 rlwinm. r0,r4,0,28,28 80D12CB8: 40820018 bne- 0x80d12cd0 80D12CBC: 88030003 lbz r0,3(r3) 80D12CC0: 7C000775 extsb. r0,r0 80D12CC4: 41820028 beq- 0x80d12cec 80D12CC8: 4803C4AD bl 0x80d4f174 80D12CCC: 48000020 b 0x80d12cec
so, when it's writing to the address, it's telling it to set to 0000, for a reason. so question is, what on earth do i do with this now? try a read/write search? try an execute search? so it's noted, the enemy was not on screen with this run. however, here is a search where the enemy IS on screen.
top window:
[General Purpose Registers] r0 : 00000000 sp : 801AE8B0 rtoc: 801A6340 r3 : 80B34880 r4 : 80A20000 r5 : 80B34880 r6 : 0000018A r7 : 80D8D650 r8 : 00000137 r9 : 00000000 r10 : 00000000 r11 : 800F3064 r12 : 80D44A00 r13 : 801A5BC0 r14 : 00000000 r15 : 00000000 r16 : 00000000 r17 : 00000000 r18 : 00000000 r19 : 00000000 r20 : 00000000 r21 : 00000000 r22 : 00000000 r23 : 00000000 r24 : 00000000 r25 : 00000000 r26 : 00000000 r27 : 00000000 r28 : 80B365C0 r29 : 80B36924 r30 : 80A1DF78 r31 : 80B367D0
cr : 88824082 lr : 80D12C18 ctr: 80D44A00 xer: 00000000
[Floating Point Registers, Approximate Real Numbers] f00: 58 f01: 4.5036e+015 f02: 2.18965 f03: 360 f04: -1.#IND f05: 1.548 f06: -1.#IND f07: -1.#IND f08: 4.5036e+015 f09: 2 f10: 1 f11: -0.00416667 f12: 0.003125 f13: 2560 f14: 0 f15: 0 f16: 0 f17: 0 f18: 0 f19: 0 f20: 0 f21: 0 f22: 0 f23: 0 f24: 0 f25: 0 f26: 0 f27: 0 f28: 0 f29: 0 f30: 0 f31: 0
[Floating Point Registers, Single Precision] f00: 42680000 f01: 59800000 f02: 400C2348 f03: 43B40000 f04: FFC00000 f05: 3FC624D8 f06: FFC00000 f07: FFC00000 f08: 59800000 f09: 40000000 f10: 3F800000 f11: BB888888 f12: 3B4CCCC8 f13: 45200000 f14: 00000000 f15: 00000000 f16: 00000000 f17: 00000000 f18: 00000000 f19: 00000000 f20: 00000000 f21: 00000000 f22: 00000000 f23: 00000000 f24: 00000000 f25: 00000000 f26: 00000000 f27: 00000000 f28: 00000000 f29: 00000000 f30: 00000000 f31: 00000000
[Floating Point Registers, Double Precision] f00: 404D0000-00000000 f01: 43300000-80000000 f02: 40018469-E0000000 f03: 40768000-00000000 f04: FFF80000-FFFFFFFF f05: 3FF8C49B-A5E353F8 f06: FFF80000-00000000 f07: FFF80000-00000000 f08: 43300000-80000000 f09: 40000000-00000000 f10: 3FF00000-00000000 f11: BF711111-20000000 f12: 3F699999-A0000000 f13: 40A40000-00000000 f14: 00000000-00000000 f15: 00000000-00000000 f16: 00000000-00000000 f17: 00000000-00000000 f18: 00000000-00000000 f19: 00000000-00000000 f20: 00000000-00000000 f21: 00000000-00000000 f22: 00000000-00000000 f23: 00000000-00000000 f24: 00000000-00000000 f25: 00000000-00000000 f26: 00000000-00000000 f27: 00000000-00000000 f28: 00000000-00000000 f29: 00000000-00000000 f30: 00000000-00000000 f31: 00000000-00000000
fpscr: FFF80000
srr0: 80D12C90 srr1: 00008032
gqr00: 00000000 gqr01: 00000000 gqr02: 00040004 gqr03: 00050005 gqr04: 00060006 gqr05: 00070007 gqr06: 00000000 gqr07: 00000000
psf00: 42680000-42680000 psf01: 59800004-00000000 psf02: 400C234F-400C234F psf03: 43B40000-43B40000 psf04: FFC00007-BC088889 psf05: 3FC624DD-380BD096 psf06: FFC00000-46EA6000 psf07: FFC00000-00000000 psf08: 59800004-3BCCCCCD psf09: 40000000-40000000 psf10: 3F800000-3F800000 psf11: BB888889-BB888889 psf12: 3B4CCCCD-3B4CCCCD psf13: 45200000-45200000 psf14: 00000000-00000000 psf15: 00000000-00000000 psf16: 00000000-00000000 psf17: 00000000-00000000 psf18: 00000000-00000000 psf19: 00000000-00000000 psf20: 00000000-00000000 psf21: 00000000-00000000 psf22: 00000000-00000000 psf23: 00000000-00000000 psf24: 00000000-00000000 psf25: 00000000-00000000 psf26: 00000000-00000000 psf27: 00000000-00000000 psf28: 00000000-00000000 psf29: 00000000-00000000 psf30: 00000000-43800000 psf31: 00000000-00000000
80D12C90: 88830000 lbz r4,0(r3) 80D12C94: 7C800775 extsb. r0,r4 80D12C98: 41820054 beq- 0x80d12cec 80D12C9C: 881F00CC lbz r0,204(r31) 80D12CA0: 7C000775 extsb. r0,r0 80D12CA4: 40820018 bne- 0x80d12cbc 80D12CA8: 881D0012 lbz r0,18(r29) 80D12CAC: 7C000775 extsb. r0,r0 80D12CB0: 41820020 beq- 0x80d12cd0 80D12CB4: 54800739 rlwinm. r0,r4,0,28,28 80D12CB8: 40820018 bne- 0x80d12cd0 80D12CBC: 88030003 lbz r0,3(r3) 80D12CC0: 7C000775 extsb. r0,r0 80D12CC4: 41820028 beq- 0x80d12cec 80D12CC8: 4803C4AD bl 0x80d4f174 80D12CCC: 48000020 b 0x80d12cec
after hitting run once:
80D12C90: 88830000 lbz r4,0(r3) 80D12C94: 7C800775 extsb. r0,r4 80D12C98: 41820054 beq- 0x80d12cec 80D12C9C: 881F00CC lbz r0,204(r31) 80D12CA0: 7C000775 extsb. r0,r0 80D12CA4: 40820018 bne- 0x80d12cbc 80D12CA8: 881D0012 lbz r0,18(r29) 80D12CAC: 7C000775 extsb. r0,r0 80D12CB0: 41820020 beq- 0x80d12cd0 80D12CB4: 54800739 rlwinm. r0,r4,0,28,28 80D12CB8: 40820018 bne- 0x80d12cd0 80D12CBC: 88030003 lbz r0,3(r3) 80D12CC0: 7C000775 extsb. r0,r0 80D12CC4: 41820028 beq- 0x80d12cec 80D12CC8: 4803C4AD bl 0x80d4f174 80D12CCC: 48000020 b 0x80d12cec
ok, that's all i got. let me know what you think.
Last edited by bowsersenemy on Fri May 08, 2009 4:22 pm, edited 1 time in total.
|