I get what you're saying, but that one value fixes it! Karst moves around perfectly. The word "mirrored" does make sense here now that I think about it, but I know it can be done in VBA's memory viewer. It has to be somewhere in the ROM, even if not at 08300000. I'll keep at it. I'm so close I can taste it

Next question: would I be able to use breakpoints to find the 0x08?????? address that 02000454 reads from? Or will threplacement) through a loop as well? Lol