If run thru IDA, it crashes at following EPC:
PCSX2 14.04.05
.text:004A5528 mov [esp+28h+var_28], offset aBiosCallA0SXXX ; "Bios call a0: %s (%x) %x,%x,%x,%x\n"
...
.text:004A55B5 sub eax, 403FFE80h ; red means IDA doesn't like that piece of code
If that's a float, it's a pretty fishy value: 2.99991 :???:
...
.text:004A55E4 mov edx, [ecx+ebx] ; here it crashes
...
.text:004A569E mov [esp+28h+var_28], offset aBiosCallB0SXXX ; "Bios call b0: %s (%x) %x,%x,%x,%x\n"
Maybe someone can take a look at R3000A.c ?
=============================================
How did you know about the SPU problem?
Here is a patch to trade the crash against a cputlbmiss
// 7a51f86e.pnach
gametitle= DOA 2 PAL SCES50003
comment= patch by nachbrenner.pcsx2.net
//skip init sound
patch=0,EE,002b88a8,byte,00000000
PCSX2 14.04.05
.text:004A5528 mov [esp+28h+var_28], offset aBiosCallA0SXXX ; "Bios call a0: %s (%x) %x,%x,%x,%x\n"
...
.text:004A55B5 sub eax, 403FFE80h ; red means IDA doesn't like that piece of code
If that's a float, it's a pretty fishy value: 2.99991 :???:
...
.text:004A55E4 mov edx, [ecx+ebx] ; here it crashes
...
.text:004A569E mov [esp+28h+var_28], offset aBiosCallB0SXXX ; "Bios call b0: %s (%x) %x,%x,%x,%x\n"
Maybe someone can take a look at R3000A.c ?
=============================================
How did you know about the SPU problem?
Here is a patch to trade the crash against a cputlbmiss
// 7a51f86e.pnach
gametitle= DOA 2 PAL SCES50003
comment= patch by nachbrenner.pcsx2.net
//skip init sound
patch=0,EE,002b88a8,byte,00000000