

I think it was b5 and 4c7 or something like that.Ĥ - Did a RAM search on the calibrated values in RAM which would get me to the area where the gun calibration is being performed.ĥ - Added the first value which looks "about" right and right clicked to monitor memory address area.Ħ - Adjust RAM Refresh rate to 20ms so that the memory updates are reasonably close to real time for me to watch them.ħ - To find the P1 axis, I just moved the mouse and watched the memory locations around that area for +/- change and stopping when I moved the mouse. Noting that the original address didn't change because it was the committed calibration value and not the actual mouse locations.

I knew I was close, so when watching I noticed a slight delay on which locations were getting an X and Y update first, because as you know there are several copies of the XY in memory. The one that updates first was the one receiving the original mouse input. Once that was spotted easily, lock in the P1 Axis locations.Ĩ - I exit out of service menu and went to the game and threw in a couple credits and started the game.ĩ - Monitoring the memory area I noticed several patterns in addition to the mouse movement. Watch for toggling memory locations, values that change to different numbers and return again in a pattern.ġ0- Noticed a Value changing from 12 to 00 and back again in time with the Start button flashing. I started player 1 and the values changed. let it go back to the beginning where P1 and P2 can press start and it returned to 0C.

Lock in the Player start flashing output.
