Gecko dotNET Bugs and Requests

Started by Mal1t1a, January 19, 2010, 12:08:54 AM

Previous topic - Next topic

dcx2

#660
Yes, Riivolution supports the USB Gecko.

http://rvlution.net/wiki/Ocarina_Codes

Riivolution also supports wifi redirection.  So you can keep the code handler binary on your computer, so you can easily swap in new code handlers.  But you would have to restart (EDIT: restart Riivolution not the PC), because Riivolution copies the codehandler.bin file into memory when the game is loaded.  About as brain-dead simple as it gets in terms of upgrading your code handler, but that's if you get Riivolution working, and it doesn't support channel cheats or GC games.

Hence why I lean more toward using gameconfig pokes, because it's widely supported due to Brawl+.

Bully@Wiiplaza

#661
@dcx2:
there are still some issues with monster hunter and gecko.net!
If I set a breakpoint, before the game goes into a black screen loading thing, windows says that "gecko.net doesn´t work anymore"
And on Breakpoints tab it writes "invalid address" where the instructions are supposed to be put.
Therefore, gecko.net closes itself. If I open it up to connect again and switch to memory viewer, it freezes the game for at least 15 seconds and continues after a while. Setting an execute breakpoint recovers.
However, the freezing issue through auto-update is fixed ;D

(gecko.net version 0.66.7.)

EDIT:

damn, it´s fixed in 0.66.8. cool O0
My Wii hacking site...
http://bullywiihacks.com/

My youtube account with a lot of hacking videos...
http://www.youtube.com/user/BullyWiiPlaza

~Bully

Deathwolf

Quote from: dcx2 on August 21, 2011, 06:51:28 PM
Yes, Riivolution supports the USB Gecko.

http://rvlution.net/wiki/Ocarina_Codes

Riivolution also supports wifi redirection.  So you can keep the code handler binary on your computer, so you can easily swap in new code handlers.  But you would have to restart (EDIT: restart Riivolution not the PC), because Riivolution copies the codehandler.bin file into memory when the game is loaded.  About as brain-dead simple as it gets in terms of upgrading your code handler, but that's if you get Riivolution working, and it doesn't support channel cheats or GC games.

Hence why I lean more toward using gameconfig pokes, because it's widely supported due to Brawl+.
For Project M too?
lolz

Bully@Wiiplaza

yes, it also improved the ability to catch breakpoints. 8)
Great, I just made a crash fix code that wasn´t possible before. :p
No problems so far.
My Wii hacking site...
http://bullywiihacks.com/

My youtube account with a lot of hacking videos...
http://www.youtube.com/user/BullyWiiPlaza

~Bully

Stuff

Without permanently modifying a dump, I would like for the disassemble tab to work with dumps So I can jump to an instruction's address and see the asm there. With assemble working like usual, just not modifying the dump.

Also, in addition to the gct code option in the context menu, I want it to do a 'copy code'. So instead of having to go to the gct tab an make a new code, I can just have it in my clipboard for pasting everywhere.
.make Stuff happen.
Dropbox. If you don't have one, get it NOW! +250MB free if you follow my link :p.

Mod code Generator ~50% complete but very usable:
http://dl.dropbox.com/u/24514984/modcodes/modcodes.htm

Bully@Wiiplaza

switching to memory viewer while gecko.net is doing a ram dump disconnects gecko.net and freezes the game.
No BP or reconnect is possible.
My Wii hacking site...
http://bullywiihacks.com/

My youtube account with a lot of hacking videos...
http://www.youtube.com/user/BullyWiiPlaza

~Bully

dcx2

@Stuff

You're the second person to ask for dumps to be read-only.  Believe it or not, I actually assemble dumps on purpose all the time.  I have yet to find a really good way to calculate branch offsets for codes from dumps.  Pasting the branch into a dump is pretty much the best solution I can think of because the branch displacement operand will depend upon the address being assembled.

I'm not really sure what you're asking though.  You can already load other dumps into disasm and jump to ASM.

So, instead of making a new code on the GCT tab you want the code put into the clipboard?  That should be easy enough.  The context menu is getting pretty long though...

---

@Bully Doing *anything* while dumping will crash the game.  That's why it disables all the buttons while it's dumping.  Were you doing a Tools tab dump?  Because search should lock you to that tab...

Bully@Wiiplaza

yes, as I said, it was a "RAM dump" (therefore: tools tab)
you may want to fix the freezing OR disable tab switching.
My Wii hacking site...
http://bullywiihacks.com/

My youtube account with a lot of hacking videos...
http://www.youtube.com/user/BullyWiiPlaza

~Bully

dcx2

Technically, search tab can dump, pointer tab can dump, tools tab can dump.  I guess I should verify all those are tab-locked while dumping, because there's no way to fix that freeze.

Bully@Wiiplaza

It was pointer tab, but same thing I guess...
My Wii hacking site...
http://bullywiihacks.com/

My youtube account with a lot of hacking videos...
http://www.youtube.com/user/BullyWiiPlaza

~Bully

Stuff

disassemble tab: Oh I didn't see the source dropdown in that tab XD. nvm then. Well. Guess I could make a backup dump then. :/

context menu: I guess if size is an issue, you could put the gct related stuff in a sub menu. :/ Don't really want that, though. And it's only one more option. Give it a kb shortcut if it has to go in a sub menu. I think it would be one of the more used options. The gct tab could use a button for that too. Right next to Store Immediately, Copy to Clipboard. This one would copy the current code with the name as well. I'd say one for the gct wizard, but I've never used that. :p How come add to gct is only available in the disassemble tab?(I don't use that either. Just wanna know. It's not all that serious.)
.make Stuff happen.
Dropbox. If you don't have one, get it NOW! +250MB free if you follow my link :p.

Mod code Generator ~50% complete but very usable:
http://dl.dropbox.com/u/24514984/modcodes/modcodes.htm

dcx2

Yeah, I make backups of the original dumps before I do any working on them.

If size starts to become an issue, I'll try to use lesser-moved functions like the F2 XOR, SRR0 stuff to a sub-menu.

Store Immediately is kinda obsolete now that GCT's autosave.  Heh.

I created Add to GCT because when I was making a long list of 04 ASM patches, I got tired of copying and pasting from "New Code"'s into the code I was adding to.  Some codes are just a dozen or so 04 ASM patches.  So I made the Add to GCT, and I populate the dropdown with the reverse list of the GCT codes so the most recent code (which is usually at the bottom of the GCT list) is what pops up first.  It's not anywhere else because...well...99% of my hacks are ASM so I end up using either disasm GCT or PyiiASMH/ASMWiiRD.

Bully@Wiiplaza

#672
errgh.. >.<
gecko.net 0.66.8 still freezes on some C2 codes... (tried on 1931)
" Wii Exception caught, switch to BP tab"

The destination/source register is always 00000001 (or 00000000) when that happened (I noticed...)
I used an old built (r93) and sending the same code didn´t crash. It just worked :eek:
There´s definetely something wrong with the checkexisend command... :(

[spoiler]  CR:20200828  XER:00000000  CTR:80575F44 DSIS:06000000
DAR:00000041 SRR0:8074F674 SRR1:00009032   LR:80575FD8
 r0:80575FD8   r1:8024DD28   r2:802459C0   r3:FFFFFFFF
 r4:807D021C   r5:80EA77D8   r6:80EA77D8   r7:00000000
 r8:3F800000   r9:80EA77E4  r10:80EA77E4  r11:8024DDF8
r12:80575F44  r13:80244680  r14:00010005  r15:8017D510
r16:806329A0  r17:00000000  r18:00000000  r19:00000004
r20:00000000  r21:8036F000  r22:73433744  r23:00010005
r24:73433744  r25:00000000  r26:808F0C1C  r27:00000055
r28:80EA7668  r29:00000001  r30:80793C68  r31:808045C8[/spoiler]

[spoiler]8074F654:  9421FEF0   stwu   r1,-272(r1)
8074F658:  7C0802A6   mflr   r0
8074F65C:  90010114   stw   r0,276(r1)
8074F660:  DBE10100   stfd   f31,256(r1)
8074F664:  F3E10108   psq_st   f31,264(r1),0,0
8074F668:  DBC100F0   stfd   f30,240(r1)
8074F66C:  F3C100F8   psq_st   f30,248(r1),0,0
8074F670:  DBA100E0   stfd   f29,224(r1)
8074F674:  909D0040   stw   r4,64(r29)
8074F678:  DB8100D0   stfd   f28,208(r1)
8074F67C:  F38100D8   psq_st   f28,216(r1),0,0
8074F680:  396100D0   addi   r11,r1,208
8074F684:  4B90E7E5   bl   0x8005de68
8074F688:  3F608080   lis   r27,-32640
8074F68C:  3B7B4898   addi   r27,r27,18584
8074F690:  3F808079   lis   r28,-32647
8074F694:  3B9C3FC8   addi   r28,r28,16328
8074F698:  901D0054   stw   r0,84(r29)
8074F69C:  3C6080A1   lis   r3,-32607
8074F6A0:  9803EE6C   stb   r0,-4500(r3)
8074F6A4:  3FA080A1   lis   r29,-32607
8074F6A8:  807DF108   lwz   r3,-3832(r29)
8074F6AC:  3BC00000   li   r30,0
8074F6B0:  97C30054   stwu   r30,84(r3)
8074F6B4:  90630004   stw   r3,4(r3)
8074F6B8:  93C30008   stw   r30,8(r3)
8074F6BC:  4BFFFF09   bl   0x8074f5c4
8074F6C0:  C3FC0044   lfs   f31,68(r28)
8074F6C4:  807DF108   lwz   r3,-3832(r29)
8074F6C8:  82E3002C   lwz   r23,44(r3)
8074F6CC:  3BE30028   addi   r31,r3,40
8074F6D0:  3AC10058   addi   r22,r1,88
8074F6D4:  C39C004C   lfs   f28,76(r28)
8074F6D8:  C3BC0050   lfs   f29,80(r28)
8074F6DC:  FFC0F890   fmr   f30,f31
8074F6E0:  480001F8   b   0x8074f8d8
8074F6E4:  80B7000C   lwz   r5,12(r23)
8074F6E8:  80970008   lwz   r4,8(r23)
8074F6EC:  C0240020   lfs   f1,32(r4)
8074F6F0:  C0050020   lfs   f0,32(r5)
8074F6F4:  EC010028   fsubs   f0,f1,f0
8074F6F8:  D0010058   stfs   f0,88(r1)
8074F6FC:  C0240024   lfs   f1,36(r4)
8074F700:  C0050024   lfs   f0,36(r5)
8074F704:  EC010028   fsubs   f0,f1,f0
8074F708:  D001005C   stfs   f0,92(r1)
8074F70C:  C0240028   lfs   f1,40(r4)
8074F710:  C0050028   lfs   f0,40(r5)
8074F714:  EC010028   fsubs   f0,f1,f0
8074F718:  D0010060   stfs   f0,96(r1)
8074F71C:  C024002C   lfs   f1,44(r4)
8074F720:  C005002C   lfs   f0,44(r5)
8074F724:  EC010028   fsubs   f0,f1,f0
8074F728:  D0010064   stfs   f0,100(r1)
8074F72C:  38C50010   addi   r6,r5,16
8074F730:  38E40010   addi   r7,r4,16
8074F734:  C09C0044   lfs   f4,68(r28)
8074F738:  C07C0038   lfs   f3,56(r28)
8074F73C:  38600000   li   r3,0
8074F740:  38000003   li   r0,3
8074F744:  7C0903A6   mtctr   r0
8074F748:  7C251C2E   lfsx   f1,r5,r3
8074F74C:  7C071C2E   lfsx   f0,r7,r3
8074F750:  EC410028   fsubs   f2,f1,f0
8074F754:  7C261C2E   lfsx   f1,r6,r3
8074F758:  7C041C2E   lfsx   f0,r4,r3
8074F75C:  EC210028   fsubs   f1,f1,f0
8074F760:  7C161C2E   lfsx   f0,r22,r3
8074F764:  FC00E040   fcmpo   cr0,f0,f28
8074F768:  40810034   ble-   0x8074f79c
8074F76C:  EC020024   fdivs   f0,f2,f0
8074F770:  FC040040   fcmpo   cr0,f4,f0
8074F774:  40810008   ble-   0x8074f77c
8074F778:  48000008   b   0x8074f780
8074F77C:  FC800090   fmr   f4,f0
8074F780:  7C161C2E   lfsx   f0,r22,r3
8074F784:  EC010024   fdivs   f0,f1,f0
8074F788:  FC030040   fcmpo   cr0,f3,f0
8074F78C:  40800008   bge-   0x8074f794
8074F790:  4800005C   b   0x8074f7ec
8074F794:  FC600090   fmr   f3,f0
8074F798:  48000054   b   0x8074f7ec
8074F79C:  FC00E840   fcmpo   cr0,f0,f29
8074F7A0:  40800034   bge-   0x8074f7d4
8074F7A4:  EC020024   fdivs   f0,f2,f0
8074F7A8:  FC030040   fcmpo   cr0,f3,f0
8074F7AC:  40800008   bge-   0x8074f7b4
8074F7B0:  48000008   b   0x8074f7b8
8074F7B4:  FC600090   fmr   f3,f0
8074F7B8:  7C161C2E   lfsx   f0,r22,r3
8074F7BC:  EC010024   fdivs   f0,f1,f0
8074F7C0:  FC040040   fcmpo   cr0,f4,f0
8074F7C4:  40810008   ble-   0x8074f7cc
8074F7C8:  48000024   b   0x8074f7ec
8074F7CC:  FC800090   fmr   f4,f0
8074F7D0:  4800001C   b   0x8074f7ec
8074F7D4:  FC02F040   fcmpo   cr0,f2,f30
8074F7D8:  4181000C   bgt-   0x8074f7e4
8074F7DC:  FC01F040   fcmpo   cr0,f1,f30
8074F7E0:  4080000C   bge-   0x8074f7ec
8074F7E4:  38000000   li   r0,0
8074F7E8:  48000024   b   0x8074f80c
8074F7EC:  FC041840   fcmpo   cr0,f4,f3
8074F7F0:  4081000C   ble-   0x8074f7fc
8074F7F4:  38000000   li   r0,0
8074F7F8:  48000014   b   0x8074f80c
8074F7FC:  38630004   addi   r3,r3,4
8074F800:  4200FF48   bdnz+   0x8074f748
8074F804:  FFE02090   fmr   f31,f4
8074F808:  38000001   li   r0,1
8074F80C:  2C000000   cmpwi   r0,0
8074F810:  418200C4   beq-   0x8074f8d4
8074F814:  8337000C   lwz   r25,12(r23)
8074F818:  83570008   lwz   r26,8(r23)
8074F81C:  82BB008C   lwz   r21,140(r27)
8074F820:  801B0088   lwz   r0,136(r27)
8074F824:  7C00A800   cmpw   r0,r21
8074F828:  40810008   ble-   0x8074f830
8074F82C:  7C150378   mr   r21,r0
8074F830:  807DF108   lwz   r3,-3832(r29)
8074F834:  3B030060   addi   r24,r3,96
8074F838:  3875FFFF   subi   r3,r21,1
8074F83C:  7C7418F8   not   r20,r3
8074F840:  80180004   lwz   r0,4(r24)
8074F844:  7C001A14   add   r0,r0,r3
8074F848:  7E850038   and   r5,r20,r0
8074F84C:  38650014   addi   r3,r5,20
8074F850:  80180008   lwz   r0,8(r24)
8074F854:  7C030040   cmplw   r3,r0
8074F858:  4081000C   ble-   0x8074f864
8074F85C:  38A00000   li   r5,0
8074F860:  48000008   b   0x8074f868
8074F864:  90780004   stw   r3,4(r24)
8074F868:  2C050000   cmpwi   r5,0
8074F86C:  40820038   bne-   0x8074f8a4
8074F870:  7F03C378   mr   r3,r24
8074F874:  480146D1   bl   0x80763f44
8074F878:  3875FFFF   subi   r3,r21,1
8074F87C:  80180004   lwz   r0,4(r24)
8074F880:  7C001A14   add   r0,r0,r3
8074F884:  7E850038   and   r5,r20,r0
8074F888:  38650014   addi   r3,r5,20
8074F88C:  80180008   lwz   r0,8(r24)
8074F890:  7C030040   cmplw   r3,r0
8074F894:  4081000C   ble-   0x8074f8a0
8074F898:  38A00000   li   r5,0
8074F89C:  48000008   b   0x8074f8a4
8074F8A0:  90780004   stw   r3,4(r24)
8074F8A4:  93450004   stw   r26,4(r5)
8074F8A8:  93250008   stw   r25,8(r5)
8074F8AC:  D3E5000C   stfs   f31,12(r5)
8074F8B0:  93C50010   stw   r30,16(r5)
8074F8B4:  809DF108   lwz   r4,-3832(r29)
8074F8B8:  93C50000   stw   r30,0(r5)
8074F8BC:  8064005C   lwz   r3,92(r4)
8074F8C0:  38030001   addi   r0,r3,1
8074F8C4:  9004005C   stw   r0,92(r4)
8074F8C8:  80640058   lwz   r3,88(r4)
8074F8CC:  90A30000   stw   r5,0(r3)
8074F8D0:  90A40058   stw   r5,88(r4)
8074F8D4:  82F70004   lwz   r23,4(r23)
8074F8D8:  7C1FB840   cmplw   r31,r23
8074F8DC:  4082FE08   bne+   0x8074f6e4
8074F8E0:  3C6080A1   lis   r3,-32607
8074F8E4:  8063F108   lwz   r3,-3832(r3)
8074F8E8:  80C30048   lwz   r6,72(r3)
8074F8EC:  480001D8   b   0x8074fac4
8074F8F0:  80A6003C   lwz   r5,60(r6)
8074F8F4:  2C050000   cmpwi   r5,0
8074F8F8:  418201C8   beq-   0x8074fac0
8074F8FC:  80850000   lwz   r4,0(r5)
8074F900:  C0640000   lfs   f3,0(r4)
8074F904:  C0040020   lfs   f0,32(r4)
8074F908:  EC43002A   fadds   f2,f3,f0
8074F90C:  D0410028   stfs   f2,40(r1)
8074F910:  C0240004   lfs   f1,4(r4)
8074F914:  C0040024   lfs   f0,36(r4)
8074F918:  EC01002A   fadds   f0,f1,f0
8074F91C:  D001002C   stfs   f0,44(r1)
8074F920:  C0240008   lfs   f1,8(r4)
8074F924:  C0040028   lfs   f0,40(r4)
8074F928:  EC01002A   fadds   f0,f1,f0
8074F92C:  D0010030   stfs   f0,48(r1)
8074F930:  C024000C   lfs   f1,12(r4)
8074F934:  C004002C   lfs   f0,44(r4)
8074F938:  EC01002A   fadds   f0,f1,f0
8074F93C:  D0010034   stfs   f0,52(r1)
8074F940:  FC031040   fcmpo   cr0,f3,f2
8074F944:  40800008   bge-   0x8074f94c
8074F948:  48000008   b   0x8074f950
8074F94C:  FC601090   fmr   f3,f2
8074F950:  D0610018   stfs   f3,24(r1)
8074F954:  C0240004   lfs   f1,4(r4)
8074F958:  C001002C   lfs   f0,44(r1)
8074F95C:  FC010040   fcmpo   cr0,f1,f0
8074F960:  40800008   bge-   0x8074f968
8074F964:  48000008   b   0x8074f96c
8074F968:  FC200090   fmr   f1,f0
8074F96C:  D021001C   stfs   f1,28(r1)
8074F970:  C0240008   lfs   f1,8(r4)
8074F974:  C0010030   lfs   f0,48(r1)
8074F978:  FC010040   fcmpo   cr0,f1,f0
8074F97C:  40800008   bge-   0x8074f984
8074F980:  48000008   b   0x8074f988
8074F984:  FC200090   fmr   f1,f0
8074F988:  D0210020   stfs   f1,32(r1)
8074F98C:  C024000C   lfs   f1,12(r4)
8074F990:  C0010034   lfs   f0,52(r1)
8074F994:  FC010040   fcmpo   cr0,f1,f0
8074F998:  40800008   bge-   0x8074f9a0
8074F99C:  48000008   b   0x8074f9a4
8074F9A0:  FC200090   fmr   f1,f0
8074F9A4:  D0210024   stfs   f1,36(r1)
8074F9A8:  80610018   lwz   r3,24(r1)
8074F9AC:  8001001C   lwz   r0,28(r1)
8074F9B0:  90610080   stw   r3,128(r1)
8074F9B4:  90010084   stw   r0,132(r1)
8074F9B8:  80610020   lwz   r3,32(r1)
8074F9BC:  80010024   lwz   r0,36(r1)
8074F9C0:  90610088   stw   r3,136(r1)
8074F9C4:  9001008C   stw   r0,140(r1)
8074F9C8:  C0640010   lfs   f3,16(r4)
8074F9CC:  C0040020   lfs   f0,32(r4)
8074F9D0:  EC43002A   fadds   f2,f3,f0
8074F9D4:  D0410048   stfs   f2,72(r1)
8074F9D8:  C0240014   lfs   f1,20(r4)
8074F9DC:  C0040024   lfs   f0,36(r4)
8074F9E0:  EC01002A   fadds   f0,f1,f0
8074F9E4:  D001004C   stfs   f0,76(r1)
8074F9E8:  C0240018   lfs   f1,24(r4)
8074F9EC:  C0040028   lfs   f0,40(r4)
8074F9F0:  EC01002A   fadds   f0,f1,f0
8074F9F4:  D0010050   stfs   f0,80(r1)
8074F9F8:  C024001C   lfs   f1,28(r4)
8074F9FC:  C004002C   lfs   f0,44(r4)
8074FA00:  EC01002A   fadds   f0,f1,f0
8074FA04:  D0010054   stfs   f0,84(r1)
8074FA08:  FC031040   fcmpo   cr0,f3,f2
8074FA0C:  40810008   ble-   0x8074fa14
8074FA10:  48000008   b   0x8074fa18
8074FA14:  FC601090   fmr   f3,f2
8074FA18:  D0610038   stfs   f3,56(r1)
8074FA1C:  C0240014   lfs   f1,20(r4)
8074FA20:  C001004C   lfs   f0,76(r1)
8074FA24:  FC010040   fcmpo   cr0,f1,f0
8074FA28:  40810008   ble-   0x8074fa30
8074FA2C:  48000008   b   0x8074fa34
8074FA30:  FC200090   fmr   f1,f0
8074FA34:  D021003C   stfs   f1,60(r1)
8074FA38:  C0240018   lfs   f1,24(r4)
8074FA3C:  C0010050   lfs   f0,80(r1)
8074FA40:  FC010040   fcmpo   cr0,f1,f0
8074FA44:  40810008   ble-   0x8074fa4c
8074FA48:  48000008   b   0x8074fa50
8074FA4C:  FC200090   fmr   f1,f0
8074FA50:  D0210040   stfs   f1,64(r1)
8074FA54:  C024001C   lfs   f1,28(r4)
8074FA58:  C0010054   lfs   f0,84(r1)
8074FA5C:  FC010040   fcmpo   cr0,f1,f0
8074FA60:  40810008   ble-   0x8074fa68
8074FA64:  48000008   b   0x8074fa6c
8074FA68:  FC200090   fmr   f1,f0
8074FA6C:  D0210044   stfs   f1,68(r1)
8074FA70:  80610038   lwz   r3,56(r1)
8074FA74:  8001003C   lwz   r0,60(r1)
8074FA78:  90610090   stw   r3,144(r1)
8074FA7C:  90010094   stw   r0,148(r1)
8074FA80:  80610040   lwz   r3,64(r1)
8074FA84:  80010044   lwz   r0,68(r1)
8074FA88:  90610098   stw   r3,152(r1)
8074FA8C:  9001009C   stw   r0,156(r1)
8074FA90:  C0010080   lfs   f0,128(r1)
8074FA94:  D005000C   stfs   f0,12(r5)
8074FA98:  C0010090   lfs   f0,144(r1)
8074FA9C:  D0050020   stfs   f0,32(r5)
8074FAA0:  C0010084   lfs   f0,132(r1)
8074FAA4:  D0050034   stfs   f0,52(r5)
8074FAA8:  C0010094   lfs   f0,148(r1)
8074FAAC:  D0050048   stfs   f0,72(r5)
8074FAB0:  C0010088   lfs   f0,136(r1)
8074FAB4:  D005005C   stfs   f0,92(r5)
8074FAB8:  C0010098   lfs   f0,152(r1)
8074FABC:  D0050070   stfs   f0,112(r5)
8074FAC0:  80C60034   lwz   r6,52(r6)
8074FAC4:  2C060000   cmpwi   r6,0
8074FAC8:  4082FE28   bne+   0x8074f8f0
8074FACC:  3C6080A1   lis   r3,-32607
8074FAD0:  8283F10C   lwz   r20,-3828(r3)
8074FAD4:  7E83A378   mr   r3,r20
8074FAD8:  48001189   bl   0x80750c60
8074FADC:  5479083D   rlwinm.   r25,r3,1,0,30
8074FAE0:  408101AC   ble-   0x8074fc8c
8074FAE4:  38610068   addi   r3,r1,104
8074FAE8:  48001155   bl   0x80750c3c
8074FAEC:  5737103A   rlwinm   r23,r25,2,0,29
8074FAF0:  387B00C0   addi   r3,r27,192
8074FAF4:  389B00C4   addi   r4,r27,196
8074FAF8:  4BC3E1ED   bl   0x8038dce4
8074FAFC:  7C651B78   mr   r5,r3
8074FB00:  38610068   addi   r3,r1,104
8074FB04:  7EE4BB78   mr   r4,r23
8074FB08:  38C00000   li   r6,0
8074FB0C:  38FB0104   addi   r7,r27,260
8074FB10:  48001075   bl   0x80750b84
8074FB14:  7C751B78   mr   r21,r3
8074FB18:  387B00C8   addi   r3,r27,200
8074FB1C:  389B00CC   addi   r4,r27,204
8074FB20:  4BC3E1C5   bl   0x8038dce4
8074FB24:  7C651B78   mr   r5,r3
8074FB28:  38610068   addi   r3,r1,104
8074FB2C:  7EE4BB78   mr   r4,r23
8074FB30:  38C00000   li   r6,0
8074FB34:  38FB0104   addi   r7,r27,260
8074FB38:  4800104D   bl   0x80750b84
8074FB3C:  7C761B78   mr   r22,r3
8074FB40:  387B00D0   addi   r3,r27,208
8074FB44:  389B00D4   addi   r4,r27,212
8074FB48:  4BC3E19D   bl   0x8038dce4
8074FB4C:  7C651B78   mr   r5,r3
8074FB50:  38610068   addi   r3,r1,104
8074FB54:  7EE4BB78   mr   r4,r23
8074FB58:  38C00000   li   r6,0
8074FB5C:  38FB0104   addi   r7,r27,260
8074FB60:  48001025   bl   0x80750b84
8074FB64:  7C771B78   mr   r23,r3
8074FB68:  81340004   lwz   r9,4(r20)
8074FB6C:  81140008   lwz   r8,8(r20)
8074FB70:  80F4000C   lwz   r7,12(r20)
8074FB74:  7EA6AB78   mr   r6,r21
8074FB78:  7EC5B378   mr   r5,r22
8074FB7C:  7EE4BB78   mr   r4,r23
8074FB80:  5720103A   rlwinm   r0,r25,2,0,29
8074FB84:  7F150214   add   r24,r21,r0
8074FB88:  38600000   li   r3,0
8074FB8C:  48000038   b   0x8074fbc4
8074FB90:  91260000   stw   r9,0(r6)
8074FB94:  9069000C   stw   r3,12(r9)
8074FB98:  81290010   lwz   r9,16(r9)
8074FB9C:  91050000   stw   r8,0(r5)
8074FBA0:  9068000C   stw   r3,12(r8)
8074FBA4:  81080010   lwz   r8,16(r8)
8074FBA8:  90E40000   stw   r7,0(r4)
8074FBAC:  9067000C   stw   r3,12(r7)
8074FBB0:  80E70010   lwz   r7,16(r7)
8074FBB4:  38630001   addi   r3,r3,1
8074FBB8:  38C60004   addi   r6,r6,4
8074FBBC:  38A50004   addi   r5,r5,4
8074FBC0:  38840004   addi   r4,r4,4
8074FBC4:  7C06C040   cmplw   r6,r24
8074FBC8:  4082FFC8   bne+   0x8074fb90
8074FBCC:  7E83A378   mr   r3,r20
8074FBD0:  7EA4AB78   mr   r4,r21
8074FBD4:  7F25CB78   mr   r5,r25
8074FBD8:  4BFFB2CD   bl   0x8074aea4
8074FBDC:  7E83A378   mr   r3,r20
8074FBE0:  7EC4B378   mr   r4,r22
8074FBE4:  7F25CB78   mr   r5,r25
8074FBE8:  4BFFB2BD   bl   0x8074aea4
8074FBEC:  7E83A378   mr   r3,r20
8074FBF0:  7EE4BB78   mr   r4,r23
8074FBF4:  7F25CB78   mr   r5,r25
8074FBF8:  4BFFB2AD   bl   0x8074aea4
8074FBFC:  80150000   lwz   r0,0(r21)
8074FC00:  90140004   stw   r0,4(r20)
8074FC04:  80160000   lwz   r0,0(r22)
8074FC08:  90140008   stw   r0,8(r20)
8074FC0C:  80170000   lwz   r0,0(r23)
8074FC10:  9014000C   stw   r0,12(r20)
8074FC14:  48000040   b   0x8074fc54
8074FC18:  38950004   addi   r4,r21,4
8074FC1C:  80150004   lwz   r0,4(r21)
8074FC20:  80750000   lwz   r3,0(r21)
8074FC24:  90030010   stw   r0,16(r3)
8074FC28:  7C952378   mr   r21,r4
8074FC2C:  38960004   addi   r4,r22,4
8074FC30:  80160004   lwz   r0,4(r22)
8074FC34:  80760000   lwz   r3,0(r22)
8074FC38:  90030010   stw   r0,16(r3)
8074FC3C:  7C962378   mr   r22,r4
8074FC40:  38970004   addi   r4,r23,4
8074FC44:  80170004   lwz   r0,4(r23)
8074FC48:  80770000   lwz   r3,0(r23)
8074FC4C:  90030010   stw   r0,16(r3)
8074FC50:  7C972378   mr   r23,r4
8074FC54:  7C15C040   cmplw   r21,r24
8074FC58:  4082FFC0   bne+   0x8074fc18
8074FC5C:  38000000   li   r0,0
8074FC60:  8075FFFC   lwz   r3,-4(r21)
8074FC64:  90030010   stw   r0,16(r3)
8074FC68:  8076FFFC   lwz   r3,-4(r22)
8074FC6C:  90030010   stw   r0,16(r3)
8074FC70:  8077FFFC   lwz   r3,-4(r23)
8074FC74:  90030010   stw   r0,16(r3)
8074FC78:  38610068   addi   r3,r1,104
8074FC7C:  48014351   bl   0x80763fcc
8074FC80:  38610068   addi   r3,r1,104
8074FC84:  3880FFFF   li   r4,-1
8074FC88:  4BC3D6A1   bl   0x8038d328
8074FC8C:  7E83A378   mr   r3,r20
8074FC90:  48000239   bl   0x8074fec8
8074FC94:  3EA080A1   lis   r21,-32607
8074FC98:  8075F108   lwz   r3,-3832(r21)
8074FC9C:  83230054   lwz   r25,84(r3)
8074FCA0:  3A800000   li   r20,0
8074FCA4:  480000D4   b   0x8074fd78
8074FCA8:  80190010   lwz   r0,16(r25)
8074FCAC:  2C000000   cmpwi   r0,0
8074FCB0:  408200C4   bne-   0x8074fd74
8074FCB4:  80790008   lwz   r3,8(r25)
8074FCB8:  80030060   lwz   r0,96(r3)
8074FCBC:  90010008   stw   r0,8(r1)
8074FCC0:  80790004   lwz   r3,4(r25)
8074FCC4:  80630060   lwz   r3,96(r3)
8074FCC8:  9061000C   stw   r3,12(r1)
8074FCCC:  82D5F108   lwz   r22,-3832(r21)
8074FCD0:  7C030040   cmplw   r3,r0
8074FCD4:  40810014   ble-   0x8074fce8
8074FCD8:  3B000001   li   r24,1
8074FCDC:  9001000C   stw   r0,12(r1)
8074FCE0:  90610008   stw   r3,8(r1)
8074FCE4:  48000008   b   0x8074fcec
8074FCE8:  3B000000   li   r24,0
8074FCEC:  38610010   addi   r3,r1,16
8074FCF0:  3881000C   addi   r4,r1,12
8074FCF4:  38A10008   addi   r5,r1,8
8074FCF8:  4BE1D4B9   bl   0x8056d1b0
8074FCFC:  38760004   addi   r3,r22,4
8074FD00:  38810010   addi   r4,r1,16
8074FD04:  4BE1D41D   bl   0x8056d120
8074FD08:  7C771B78   mr   r23,r3
8074FD0C:  2C030000   cmpwi   r3,0
8074FD10:  41820010   beq-   0x8074fd20
8074FD14:  7F04C378   mr   r4,r24
8074FD18:  4BE1D251   bl   0x8056cf68
8074FD1C:  48000054   b   0x8074fd70
8074FD20:  7EC3B378   mr   r3,r22
8074FD24:  4BE1D23D   bl   0x8056cf60
8074FD28:  80160008   lwz   r0,8(r22)
8074FD2C:  7C030000   cmpw   r3,r0
8074FD30:  40800040   bge-   0x8074fd70
8074FD34:  7EC3B378   mr   r3,r22
8074FD38:  4BE1D1C1   bl   0x8056cef8
8074FD3C:  7C771B78   mr   r23,r3
8074FD40:  2C030000   cmpwi   r3,0
8074FD44:  4182002C   beq-   0x8074fd70
8074FD48:  38810010   addi   r4,r1,16
8074FD4C:  7F05C378   mr   r5,r24
8074FD50:  4BE1D175   bl   0x8056cec4
8074FD54:  38760004   addi   r3,r22,4
8074FD58:  38810010   addi   r4,r1,16
8074FD5C:  7EE5BB78   mr   r5,r23
8074FD60:  4BE1CE69   bl   0x8056cbc8
8074FD64:  8016000C   lwz   r0,12(r22)
8074FD68:  9017008C   stw   r0,140(r23)
8074FD6C:  92F6000C   stw   r23,12(r22)
8074FD70:  92F90010   stw   r23,16(r25)
8074FD74:  83390000   lwz   r25,0(r25)
8074FD78:  7C14C840   cmplw   r20,r25
8074FD7C:  4082FF2C   bne+   0x8074fca8
8074FD80:  3C6080A1   lis   r3,-32607
8074FD84:  8083F108   lwz   r4,-3832(r3)
8074FD88:  8064006C   lwz   r3,108(r4)
8074FD8C:  80040050   lwz   r0,80(r4)
8074FD90:  7C001800   cmpw   r0,r3
8074FD94:  40810008   ble-   0x8074fd9c
8074FD98:  48000008   b   0x8074fda0
8074FD9C:  7C601B78   mr   r0,r3
8074FDA0:  90040050   stw   r0,80(r4)
8074FDA4:  3E8080A1   lis   r20,-32607
8074FDA8:  8074F108   lwz   r3,-3832(r20)
8074FDAC:  38630054   addi   r3,r3,84
8074FDB0:  4800A1B5   bl   0x80759f64
8074FDB4:  8074F108   lwz   r3,-3832(r20)
8074FDB8:  38000000   li   r0,0
8074FDBC:  94030054   stwu   r0,84(r3)
8074FDC0:  90630004   stw   r3,4(r3)
8074FDC4:  90030008   stw   r0,8(r3)
8074FDC8:  3C6080A1   lis   r3,-32607
8074FDCC:  9803EE6C   stb   r0,-4500(r3)
8074FDD0:  82D4F108   lwz   r22,-3832(r20)
8074FDD4:  3AB6000C   addi   r21,r22,12
8074FDD8:  8296000C   lwz   r20,12(r22)
8074FDDC:  4800005C   b   0x8074fe38
8074FDE0:  7E83A378   mr   r3,r20
8074FDE4:  38800001   li   r4,1
8074FDE8:  4BC3E88D   bl   0x8038e674
8074FDEC:  2C030000   cmpwi   r3,0
8074FDF0:  4182001C   beq-   0x8074fe0c
8074FDF4:  3AB4008C   addi   r21,r20,140
8074FDF8:  7E83A378   mr   r3,r20
8074FDFC:  38800001   li   r4,1
8074FE00:  38A00000   li   r5,0
8074FE04:  4BC3E849   bl   0x8038e64c
8074FE08:  4800002C   b   0x8074fe34
8074FE0C:  8014008C   lwz   r0,140(r20)
8074FE10:  90150000   stw   r0,0(r21)
8074FE14:  7E83A378   mr   r3,r20
8074FE18:  4BC3DE05   bl   0x8038dc1c
8074FE1C:  7C641B78   mr   r4,r3
8074FE20:  38760004   addi   r3,r22,4
8074FE24:  4BC3DA45   bl   0x8038d868
8074FE28:  7EC3B378   mr   r3,r22
8074FE2C:  7E84A378   mr   r4,r20
8074FE30:  4BC3D9F9   bl   0x8038d828
8074FE34:  82950000   lwz   r20,0(r21)
8074FE38:  2C140000   cmpwi   r20,0
8074FE3C:  4082FFA4   bne+   0x8074fde0
8074FE40:  3C6080A1   lis   r3,-32607
8074FE44:  8063F108   lwz   r3,-3832(r3)
8074FE48:  3AA30034   addi   r21,r3,52
8074FE4C:  3AD50008   addi   r22,r21,8
8074FE50:  8083003C   lwz   r4,60(r3)
8074FE54:  3A800000   li   r20,0
8074FE58:  48000030   b   0x8074fe88
8074FE5C:  80040000   lwz   r0,0(r4)
8074FE60:  2C000000   cmpwi   r0,0
8074FE64:  40820018   bne-   0x8074fe7c
8074FE68:  80040008   lwz   r0,8(r4)
8074FE6C:  90160000   stw   r0,0(r22)
8074FE70:  7EA3AB78   mr   r3,r21
8074FE74:  4BC3D575   bl   0x8038d3e8
8074FE78:  4800000C   b   0x8074fe84
8074FE7C:  3AC40008   addi   r22,r4,8
8074FE80:  92840000   stw   r20,0(r4)
8074FE84:  80960000   lwz   r4,0(r22)
8074FE88:  2C040000   cmpwi   r4,0
8074FE8C:  4082FFD0   bne+   0x8074fe5c
8074FE90:  E3E10108   psq_l   f31,264(r1),0,0
8074FE94:  CBE10100   lfd   f31,256(r1)
8074FE98:  E3C100F8   psq_l   f30,248(r1),0,0
8074FE9C:  CBC100F0   lfd   f30,240(r1)
8074FEA0:  E3A100E8   psq_l   f29,232(r1),0,0
8074FEA4:  CBA100E0   lfd   f29,224(r1)
8074FEA8:  E38100D8   psq_l   f28,216(r1),0,0
8074FEAC:  CB8100D0   lfd   f28,208(r1)
8074FEB0:  396100D0   addi   r11,r1,208
8074FEB4:  4B90E001   bl   0x8005deb4
8074FEB8:  80010114   lwz   r0,276(r1)
8074FEBC:  7C0803A6   mtlr   r0
8074FEC0:  38210110   addi   r1,r1,272
8074FEC4:  4E800020   blr   
[/spoiler]
My Wii hacking site...
http://bullywiihacks.com/

My youtube account with a lot of hacking videos...
http://www.youtube.com/user/BullyWiiPlaza

~Bully

dcx2

#673
What game?  What loader/code handler? (look at Tools tab to identify handler)  What C2 code?

There's something fishy about that ASM.  Look at the pattern.  I'm going to insert line breaks so that the pattern becomes obvious.

8074F660:  DBE10100   stfd   f31,256(r1)
8074F664:  F3E10108   psq_st   f31,264(r1),0,0

8074F668:  DBC100F0   stfd   f30,240(r1)
8074F66C:  F3C100F8   psq_st   f30,248(r1),0,0

8074F670:  DBA100E0   stfd   f29,224(r1)
8074F674:  909D0040   stw   r4,64(r29)   # ????  Should be psq_st f29,232(r1),0,0

8074F678:  DB8100D0   stfd   f28,208(r1)
8074F67C:  F38100D8   psq_st   f28,216(r1),0,0

This stands out to me because it's the "right" way to push/pop the float registers on the Wii.  The Wii supports Paired Singles (ps*) instructions, which operate on two single-precision floats in one float register.  The float regs are actually 64-bits, but the code handler only displays the first 32-bits.  It is an error to load a double (= 64-bit float) and then store as a Paired Singles (= two 32-bit floats).  Therefore, to ensure there are no errors, float regs are pushed and popped as both doubles and paired singles.

Something is over-writing your ASM.  Check 8074F674 without any codes activated and I bet you'll see psq_st f29,232(r1),0,0

EDIT3:

Another fishy thing to look for.  Where did r29 come from?  Arguments are passed in using r3-r10.  Arguments are never passed in using r14-r31.  Nothing in the beginning of the function has loaded r29.  A compiler following the EABI would never do this.

EDIT4:

Look at the function epilogue, which pops the float regs off the stack.  Notice the symmetry with the function prologue.

8074FE90:  E3E10108   psq_l   f31,264(r1),0,0
8074FE94:  CBE10100   lfd   f31,256(r1)

8074FE98:  E3C100F8   psq_l   f30,248(r1),0,0
8074FE9C:  CBC100F0   lfd   f30,240(r1)

8074FEA0:  E3A100E8   psq_l   f29,232(r1),0,0
8074FEA4:  CBA100E0   lfd   f29,224(r1)

8074FEA8:  E38100D8   psq_l   f28,216(r1),0,0
8074FEAC:  CB8100D0   lfd   f28,208(r1)


EDIT:

You should avoid speculating about what happens in the code handler unless you have studied it.  This crash is nowhere near checkexisend, which exists way down in 80002XXX range.

EDIT2:

Check for GCT Code Undo which is poking something it shouldn't be.

Bully@Wiiplaza

#674
Quote from: dcx2 on August 22, 2011, 11:36:58 PM
There's something fishy about that ASM.  Look at the pattern.  I'm going to insert line breaks so that the pattern becomes obvious.

8074F674:  909D0040   stw   r4,64(r29)   # ????  Should be psq_st f29,232(r1),0,0

Something is over-writing your ASM.  Check 8074F674 without any codes activated and I bet you'll see psq_st f29,232(r1),0,0

you´re right, it´s a psq_st on disassembly (when game is running) but it froze on that stw that popped up on breakpoints tab.
I sent a C2 code to hook the button address on main screen.
It´s handler 1931. Weird thing is that it doesn´t freeze anymore when the ASM has changed due to selecting a different spot in-game (8074F674 has different instructions now) Even though, the actual code is hooking "base" assembly. Undo was correct.
My Wii hacking site...
http://bullywiihacks.com/

My youtube account with a lot of hacking videos...
http://www.youtube.com/user/BullyWiiPlaza

~Bully