Difference between revisions of "001264dc - 0012656c"
Jump to navigation
Jump to search
(Created page with "<font face='Courier New'> 001264dc: 27bdffe0 addiu r29,r29,0xffe0 001264e0: afbf0018 sw r31,0x0018(r29) 001264e4: afb10014 sw r17,0x0014(r29) 001264e8: afb00010 sw r16,0...") |
m |
||
Line 25: | Line 25: | ||
00126534: 8c420000 lw r2,0x0000(r2) | 00126534: 8c420000 lw r2,0x0000(r2) | ||
00126538: 00000000 nop | 00126538: 00000000 nop | ||
− | 0012653c: 0040f809 jalr r2,r31 | + | 0012653c: 0040f809 jalr r2,r31 #jumps here are not necessarily done in consecutive order. this process continuously produces a valid pointer in r2, which is then used to get the next jump. |
+ | jump locations from here: | ||
+ | 0x00: 80126c30 [[00126c30 - 001274d4]] | ||
+ | 0x01: 801265c0 [[001265c0 - 001266e4]] | ||
+ | 0x02: 801266e8 [[001266e8 - 00126884]] | ||
+ | 0x03: 80126888 [[00126888 - 00126964]] | ||
+ | 0x04: 80126968 [[00126968 - 00126a94]] | ||
+ | 0x05: 80126968 [[00126968 - 00126a94]] | ||
+ | 0x06: 80126b14 [[00126b14 - 00126c2c]] | ||
+ | 0x07: 80126a98 [[00126a98 - 00126b10]] | ||
+ | 0x08: 00000000 null | ||
+ | 0x09: 801279fc [[001279fc - 00127a50]] | ||
+ | 0x0a: 80127a54 [[00127a54 - 00127acc]] | ||
+ | 0x0b: 80127ba4 [[00127ba4 - 00127c18]] | ||
+ | 0x0c: 80127ad0 [[00127ad0 - 00127b20]] | ||
+ | 0x0d: 80127c34 [[00127c34 - 001280f8]] | ||
+ | 0x0e: 80127b24 [[00127b24 - 00127b38]] | ||
+ | 0x0f: 80127c1c [[00127c1c - 00127c30]] | ||
+ | 0x10: 80128ce0 [[00128ce0 - 00129870]] | ||
+ | 0x11: 80127620 [[00127620 - 001279f8]] | ||
+ | 0x12: 801274d8 [[001274d8 - 0012761c]] | ||
+ | 0x13: 801299c8 [[001299c8 - 00129a2c]] | ||
+ | 0x14: 80129a30 [[00129a30 - 00129ab0]] | ||
+ | 0x15: 80129ab4 [[00129ab4 - 00129b10]] | ||
+ | 0x16: 80129b34 [[00129b34 - 00129b68]] | ||
+ | 0x17: 801280fc [[001280fc - 001282d8]] | ||
+ | 0x18: 80127b3c [[00127b3c - 00127ba0]] | ||
+ | 0x18: 80127c34 [[00127c34 - 001280f8]] | ||
+ | 0x19: 80127c34 [[00127c34 - 001280f8]] | ||
+ | 0x1a: 80127c34 [[00127c34 - 001280f8]] | ||
+ | |||
00126540: 00000000 nop | 00126540: 00000000 nop | ||
00126544: 00402021 addu r4,r2,r0 | 00126544: 00402021 addu r4,r2,r0 |
Latest revision as of 04:23, 10 June 2022
001264dc: 27bdffe0 addiu r29,r29,0xffe0 001264e0: afbf0018 sw r31,0x0018(r29) 001264e4: afb10014 sw r17,0x0014(r29) 001264e8: afb00010 sw r16,0x0010(r29) 001264ec: 3c01801d lui r1,0x801d 001264f0: a4209e88 sh r0,-0x6178(r1) 001264f4: 3c01801d lui r1,0x801d 001264f8: a4209ea0 sh r0,-0x6160(r1) 001264fc: 3c01801d lui r1,0x801d 00126500: ac259e8c sw r5,-0x6174(r1) 00126504: 3c01801d lui r1,0x801d 00126508: a0209ed0 sb r0,-0x6130(r1) 0012650c: 90830000 lbu r3,0x0000(r4) 00126510: 3402001c ori r2,r0,0x001c 00126514: 10620010 beq r3,r2,0x00126558 00126518: 3410001c ori r16,r0,0x001c 0012651c: 3c118019 lui r17,0x8019 00126520: 2631dfb8 addiu r17,r17,0xdfb8 00126524: 90820000 lbu r2,0x0000(r4) 00126528: 00000000 nop 0012652c: 00021080 sll r2,r2,0x02 00126530: 00511021 addu r2,r2,r17 00126534: 8c420000 lw r2,0x0000(r2) 00126538: 00000000 nop 0012653c: 0040f809 jalr r2,r31 #jumps here are not necessarily done in consecutive order. this process continuously produces a valid pointer in r2, which is then used to get the next jump. jump locations from here: 0x00: 80126c30 00126c30 - 001274d4 0x01: 801265c0 001265c0 - 001266e4 0x02: 801266e8 001266e8 - 00126884 0x03: 80126888 00126888 - 00126964 0x04: 80126968 00126968 - 00126a94 0x05: 80126968 00126968 - 00126a94 0x06: 80126b14 00126b14 - 00126c2c 0x07: 80126a98 00126a98 - 00126b10 0x08: 00000000 null 0x09: 801279fc 001279fc - 00127a50 0x0a: 80127a54 00127a54 - 00127acc 0x0b: 80127ba4 00127ba4 - 00127c18 0x0c: 80127ad0 00127ad0 - 00127b20 0x0d: 80127c34 00127c34 - 001280f8 0x0e: 80127b24 00127b24 - 00127b38 0x0f: 80127c1c 00127c1c - 00127c30 0x10: 80128ce0 00128ce0 - 00129870 0x11: 80127620 00127620 - 001279f8 0x12: 801274d8 001274d8 - 0012761c 0x13: 801299c8 001299c8 - 00129a2c 0x14: 80129a30 00129a30 - 00129ab0 0x15: 80129ab4 00129ab4 - 00129b10 0x16: 80129b34 00129b34 - 00129b68 0x17: 801280fc 001280fc - 001282d8 0x18: 80127b3c 00127b3c - 00127ba0 0x18: 80127c34 00127c34 - 001280f8 0x19: 80127c34 00127c34 - 001280f8 0x1a: 80127c34 00127c34 - 001280f8
00126540: 00000000 nop 00126544: 00402021 addu r4,r2,r0 00126548: 90820000 lbu r2,0x0000(r4) 0012654c: 00000000 nop 00126550: 1450fff7 bne r2,r16,0x00126530 00126554: 00021080 sll r2,r2,0x02 00126558: 8fbf0018 lw r31,0x0018(r29) 0012655c: 8fb10014 lw r17,0x0014(r29) 00126560: 8fb00010 lw r16,0x0010(r29) 00126564: 27bd0020 addiu r29,r29,0x0020 00126568: 03e00008 jr r31 0012656c: 00000000 nop