===== 09 TRD T3 MODE READS | BIOS 19951204 System ROM Version 3.0 11/18/96 A BadVaddr as the group starts: 800154CE Mode 0018h | source << 8 with target 0010h (0004h for hblank), 20000 cycles to run, then the mode read twice (timers.txt:36-37 "Reset after Reading"): T0 source 0: 1C18 then 0418 T0 source 1: 0D18 then 0518 T0 source 2: 0E18 then 0E18 T0 source 3: 0F18 then 0718 T1 source 0: 0C18 then 0418 T1 source 1: 0D18 then 0518 T1 source 2: 0E18 then 0E18 T1 source 3: 0F18 then 0718 T2 source 0: 1C18 then 0C18 T2 source 1: 0D18 then 0D18 T2 source 2: 0E18 then 0618 T2 source 3: 0F18 then 0718 Flags against other reads, timer 2 at the system clock, target 0010h, reset, after 20000 cycles: the counter read 8 times, then the mode twice; the target read, then the mode; a lw of the mode, then lhu; lbu of mode+1, then lhu: counter reads then mode 0C08 0C08; target read then mode 0C08; lw 0C040C08 then 0408 lbu mode+1 0C then 0C08; lbu mode 08 then 0408 Target FFFFh with reset (mode 0008h): both flags at once? Reads 70000 cycles in: reset at target: 1C08 then 0408; no reset: 1C00 then 0400 Done.