int CheckInstallationData(){
File file;
char str[64];
switch (getMpInfo()) {
case MPINFO_CTR:
getFirmPath(str, TID_CTR_NATIVE_FIRM);
if(!FileOpen(&file, str, 0)) return -1;
FileClose(&file);
getFirmPath(str, TID_CTR_TWL_FIRM);
if(!FileOpen(&file, str, 0)) return -2;
FileClose(&file);
getFirmPath(str, TID_CTR_AGB_FIRM);
if(!FileOpen(&file, str, 0)) return -3;
FileClose(&file);
if(!FileOpen(&file, "rxTools/data/data.bin", 0)) return -4;
FileRead(&file, str, 32, 0);
FileClose(&file);
if(memcmp(str, __DATE__, 11)) return -5;
if(memcmp(&str[12], __TIME__, 8)) return -5;
return 0;
case MPINFO_KTR:
getFirmPath(str, TID_KTR_NATIVE_FIRM);
if(!FileOpen(&file, str, 0)) return -1;
FileClose(&file);
default:
return 0;
}
}
static void setAgbBios()
{
File agb_firm;
char path[64];
unsigned char svc = (cfgs[CFG_AGB].val.i ? 0x26 : 0x01);
getFirmPath(path, TID_CTR_AGB_FIRM);
if (FileOpen(&agb_firm, path, 0))
{
FileWrite(&agb_firm, &svc, 1, 0xD7A12);
FileClose(&agb_firm);
}
}
int rxMode(int emu)
{
if (!checkEmuNAND() && emu)
{
ConsoleInit();
ConsoleSetTitle(L"EMUNAND NOT FOUND!");
print(L"The emunand was not found on\n");
print(L"your SDCard. \n");
print(L"\n");
print(L"Press A to boot SYSNAND\n");
ConsoleShow();
WaitForButton(BUTTON_A);
emu = 0;
char s[32];
sprintf(s, "/rxTools/Theme/%u/boot.bin", cfgs[CFG_THEME].val.i);
DrawBottomSplash(s);
}
static const char patchNandPrefix[] = ".patch.p9.nand";
unsigned int cur, offset, shstrSize;
char path[64], shstrtab[512], *sh_name;
const char *platformDir;
const wchar_t *msg;
int r, sector;
void *p;
Elf32_Ehdr ehdr;
Elf32_Shdr shdr;
FIL fd, keyxFd;
UINT br, fsz;
setAgbBios();
getFirmPath(path, getMpInfo() == MPINFO_KTR ?
TID_KTR_NATIVE_FIRM : TID_CTR_NATIVE_FIRM);
strcpy(path + strlen(path) - 4, "orig.bin");
r = loadFirm(path, &fsz);
if (r) {
msg = L"Failed to load NATIVE_FIRM: %d\n"
L"Reboot rxTools and try again.\n";
goto fail;
}
r = getMpInfo();
switch (r) {
case MPINFO_KTR:
platformDir = "ktr";
break;
case MPINFO_CTR:
platformDir = "ctr";
break;
default:
msg = L"Unknown Platform: %d";
goto fail;
}
sprintf(path, SYS_PATH "/patches/%s/native_firm.elf", platformDir);
r = f_open(&fd, path, FA_READ);
if (r != FR_OK)
goto patchFail;
r = f_read(&fd, &ehdr, sizeof(ehdr), &br);
if (r != FR_OK)
goto patchFail;
r = f_lseek(&fd, ehdr.e_shoff + ehdr.e_shstrndx * sizeof(Elf32_Shdr));
if (r != FR_OK)
goto patchFail;
r = f_read(&fd, &shdr, sizeof(shdr), &br);
if (r != FR_OK)
goto patchFail;
r = f_lseek(&fd, shdr.sh_offset);
if (r != FR_OK)
goto patchFail;
r = f_read(&fd, shstrtab, shdr.sh_size > sizeof(shstrtab) ?
sizeof(shstrtab) : shdr.sh_size, &shstrSize);
if (r != FR_OK)
goto patchFail;
if (emu) {
sector = checkEmuNAND();
if (sector == 0) {
msg = L"Failed to find EmuNAND.\n"
L"Check your EmuNAND.\n";
goto fail;
}
} else
sector = 0;
cur = ehdr.e_shoff;
for (; ehdr.e_shnum; ehdr.e_shnum--, cur += sizeof(shdr)) {
if (f_lseek(&fd, cur) != FR_OK)
continue;
if (f_read(&fd, &shdr, sizeof(shdr), &br) != FR_OK)
continue;
if (!(shdr.sh_flags & SHF_ALLOC) || shdr.sh_name >= shstrSize)
continue;
offset = locateSecInFirm(&shdr, (FirmHdr *)FIRM_ADDR);
if (offset == 0)
continue;
p = (void *)(FIRM_ADDR + offset);
sh_name = shstrtab + shdr.sh_name;
if (!strcmp(sh_name, ".rodata.keyx")) {
if (sysver >= 7)
continue;
if (f_open(&keyxFd, "slot0x25KeyX.bin", FA_READ) != FR_OK)
continue;
f_read(&keyxFd, p, shdr.sh_size, &br);
f_close(&keyxFd);
} else if (!strcmp(sh_name, ".rodata.nand.sector")) {
if (sector)
*(uint32_t *)p = (sector / 0x200) - 1;
} else if (!strcmp(sh_name, ".rodata.label")) {
*(uint32_t *)p = sector ? 'E-XR' : 'S-XR';
} else if (shdr.sh_type == SHT_PROGBITS
&& (sector || memcmp(sh_name, patchNandPrefix, sizeof(patchNandPrefix) - 1))
&& (sysver < 7 || strcmp(sh_name, ".patch.p9.keyx")))
{
if (f_lseek(&fd, shdr.sh_offset) != FR_OK)
continue;
f_read(&fd, p, shdr.sh_size, &br);
}
}
getFirmPath(path, getMpInfo() == MPINFO_KTR ?
TID_KTR_NATIVE_FIRM : TID_CTR_NATIVE_FIRM);
f_open(&fd, path, FA_WRITE | FA_CREATE_ALWAYS);
f_write(&fd, (void *)FIRM_ADDR, fsz, &br);
f_close(&fd);
r = loadExecReboot(); // This won't return if it succeeds.
msg = L"Failed to load reboot.bin: %d\n"
L"Check your installation.\n";
fail:
ConsoleInit();
ConsoleSetTitle(L"rxMode");
print(msg, r);
print(L"\n");
print(strings[STR_PRESS_BUTTON_ACTION],
strings[STR_BUTTON_A], strings[STR_CONTINUE]);
ConsoleShow();
WaitForButton(BUTTON_A);
return r;
patchFail:
msg = L"Failed to load native_firm.elf: %d\n"
L"Check your installation.\n";
goto fail;
}
int rxMode(int emu)
{
wchar_t path[64];
const char *shstrtab;
const wchar_t *msg;
uint8_t keyx[16];
uint32_t tid;
int r, sector;
Elf32_Ehdr *ehdr;
Elf32_Shdr *shdr, *btm;
void *keyxArg;
FIL fd;
UINT br, fsz;
if (emu) {
sector = checkEmuNAND();
if (sector == 0) {
ConsoleInit();
ConsoleSetTitle(L"EMUNAND NOT FOUND!");
print(L"The emunand was not found on\n");
print(L"your SDCard. \n");
print(L"\n");
print(L"Press A to boot SYSNAND\n");
ConsoleShow();
WaitForButton(BUTTON_A);
swprintf(path, _MAX_LFN, L"/rxTools/Theme/%u/boot.bin",
cfgs[CFG_THEME].val.i);
DrawBottomSplash(path);
}
} else
sector = 0;
r = getMpInfo();
switch (r) {
case MPINFO_KTR:
tid = TID_KTR_NATIVE_FIRM;
break;
case MPINFO_CTR:
tid = TID_CTR_NATIVE_FIRM;
break;
default:
msg = L"Unknown Platform: %d";
goto fail;
}
setAgbBios();
if (sysver < 7 && f_open(&fd, _T("slot0x25KeyX.bin"), FA_READ) == FR_OK) {
f_read(&fd, keyx, sizeof(keyx), &br);
f_close(&fd);
keyxArg = keyx;
} else
keyxArg = NULL;
getFirmPath(path, tid);
r = loadFirm(path, &fsz);
if (r) {
msg = L"Failed to load NATIVE_FIRM: %d\n"
L"Reboot rxTools and try again.\n";
goto fail;
}
((FirmHdr *)FIRM_ADDR)->arm9Entry = 0x0801B01C;
getFirmPatchPath(path, tid);
r = f_open(&fd, path, FA_READ);
if (r != FR_OK)
goto patchFail;
r = f_read(&fd, (void *)PATCH_ADDR, PATCH_SIZE, &br);
if (r != FR_OK)
goto patchFail;
f_close(&fd);
ehdr = (void *)PATCH_ADDR;
shdr = (void *)(PATCH_ADDR + ehdr->e_shoff);
shstrtab = (char *)PATCH_ADDR + shdr[ehdr->e_shstrndx].sh_offset;
for (btm = shdr + ehdr->e_shnum; shdr != btm; shdr++) {
if (!strcmp(shstrtab + shdr->sh_name, ".patch.p9.reboot.body")) {
execReboot(sector, keyxArg, ehdr->e_entry, shdr);
__builtin_unreachable();
}
}
msg = L".patch.p9.reboot.body not found\n"
L"Please check your installation.\n";
fail:
ConsoleInit();
ConsoleSetTitle(L"rxMode");
print(msg, r);
print(L"\n");
print(strings[STR_PRESS_BUTTON_ACTION],
strings[STR_BUTTON_A], strings[STR_CONTINUE]);
ConsoleShow();
WaitForButton(BUTTON_A);
return r;
patchFail:
msg = L"Failed to load the patch: %d\n"
L"Check your installation.\n";
goto fail;
}
int InstallData(char* drive){
static const FirmInfo agb_info = { 0x8B800, 0x4CE00, 0x08006800, 0xD600, 0xE200, 0x08020000};
static const FirmInfo twl_info = { 0x153600, 0x4D200, 0x08006800, 0xD600, 0xE200, 0x08020000};
FIL firmfile;
unsigned int progressWidth, progressX;
wchar_t progressbar[8] = {0,};
wchar_t *progress = progressbar;
int i;
progressWidth = getMpInfo() == MPINFO_CTR ? 7 : 3;
progressX = (BOT_SCREEN_WIDTH - progressWidth * FONT_WIDTH) / 2;
for (i = 0; i < progressWidth; i++)
wcscat(progressbar, strings[STR_PROGRESS]);
print(L"%ls", progressbar);
ConsolePrevLine();
//Create the workdir
sprintf(tmpstr, "%s:%s", drive, DATAFOLDER);
f_mkdir(tmpstr);
//Read firmware data
if (f_open(&firmfile, "firmware.bin", FA_READ | FA_OPEN_EXISTING) != FR_OK) return CONF_NOFIRMBIN;
wcsncpy(progress, strings[STR_PROGRESS_OK], wcslen(strings[STR_PROGRESS_OK]));
progress += wcslen(strings[STR_PROGRESS_OK]);
DrawString(BOT_SCREEN, progressbar, progressX, 50, ConsoleGetTextColor(), ConsoleGetBackgroundColor());
//Create decrypted native_firm
f_read(&firmfile, WORKBUF, NAT_SIZE, &tmpu32);
uint8_t* n_firm = decryptFirmTitle(WORKBUF, NAT_SIZE, 0x00000002, 1);
wcsncpy(progress, strings[STR_PROGRESS_OK], wcslen(strings[STR_PROGRESS_OK]));
progress += wcslen(strings[STR_PROGRESS_OK]);
DrawString(BOT_SCREEN, progressbar, progressX, 50, ConsoleGetTextColor(), ConsoleGetBackgroundColor());
getFirmPath(tmpstr, getMpInfo() == MPINFO_KTR ?
TID_KTR_NATIVE_FIRM : TID_CTR_NATIVE_FIRM);
if(FileOpen(&tempfile, tmpstr, 1)){
FileWrite(&tempfile, n_firm, NAT_SIZE, 0);
FileClose(&tempfile);
}else {
f_close(&firmfile);
return CONF_ERRNFIRM;
}
wcsncpy(progress, strings[STR_PROGRESS_OK], wcslen(strings[STR_PROGRESS_OK]));
progress += wcslen(strings[STR_PROGRESS_OK]);
DrawString(BOT_SCREEN, progressbar, progressX, 50, ConsoleGetTextColor(), ConsoleGetBackgroundColor());
if (getMpInfo() != MPINFO_CTR)
goto end;
//Create AGB patched firmware
f_read(&firmfile, WORKBUF, AGB_SIZE, &tmpu32);
uint8_t* a_firm = decryptFirmTitle(WORKBUF, AGB_SIZE, 0x00000202, 1);
if (!a_firm && checkEmuNAND())
{
/* Try to get the Title Key from the EmuNAND */
a_firm = decryptFirmTitle(WORKBUF, AGB_SIZE, 0x00000202, 2);
if (!a_firm) {
/* If we cannot decrypt it from firmware.bin because of titlekey messed up,
it probably means that AGB has been modified in some way. */
//So we read it from his installed ncch...
FindApp(0x00040138, 0x00000202, 1);
char* path = getContentAppPath();
if (!FileOpen(&tempfile, path, 0) && checkEmuNAND())
{
/* Try with EmuNAND */
FindApp(0x00040138, 0x00000202, 2);
path = getContentAppPath();
if (!FileOpen(&tempfile, path, 0))
{
f_close(&firmfile);
return CONF_ERRNFIRM;
}
}
FileRead(&tempfile, WORKBUF, AGB_SIZE, 0);
FileClose(&tempfile);
a_firm = decryptFirmTitleNcch(WORKBUF, AGB_SIZE);
}
}
if (a_firm) {
if (applyPatch(a_firm, "/rxTools/system/patches/ctr/agb_firm.elf", &agb_info))
return CONF_ERRPATCH;
getFirmPath(tmpstr, TID_CTR_TWL_FIRM);
if(FileOpen(&tempfile, tmpstr, 1)){
FileWrite(&tempfile, a_firm, AGB_SIZE, 0);
FileClose(&tempfile);
}else {
f_close(&firmfile);
return CONF_ERRNFIRM;
}
wcsncpy(progress, strings[STR_PROGRESS_OK], wcslen(strings[STR_PROGRESS_OK]));
progress += wcslen(strings[STR_PROGRESS_OK]);
} else {
wcsncpy(progress, strings[STR_PROGRESS_FAIL], wcslen(strings[STR_PROGRESS_FAIL]));
progress += wcslen(strings[STR_PROGRESS_FAIL]); //If we get here, then we'll play without AGB, lol
}
DrawString(BOT_SCREEN, progressbar, progressX, 50, ConsoleGetTextColor(), ConsoleGetBackgroundColor());
//Create TWL patched firmware
f_read(&firmfile, WORKBUF, TWL_SIZE, &tmpu32);
uint8_t* t_firm = decryptFirmTitle(WORKBUF, TWL_SIZE, 0x00000102, 1);
if(t_firm){
if (applyPatch(t_firm, "/rxTools/system/patches/ctr/twl_firm.elf", &twl_info))
return CONF_ERRPATCH;
getFirmPath(tmpstr, TID_CTR_TWL_FIRM);
if(FileOpen(&tempfile, tmpstr, 1)){
FileWrite(&tempfile, t_firm, TWL_SIZE, 0);
FileClose(&tempfile);
//FileCopy("0004013800000102.bin", tmpstr);
}else {
f_close(&firmfile);
return CONF_ERRNFIRM;
}
wcsncpy(progress, strings[STR_PROGRESS_OK], wcslen(strings[STR_PROGRESS_OK]));
progress += wcslen(strings[STR_PROGRESS_OK]);
}else{
wcsncpy(progress, strings[STR_PROGRESS_FAIL], wcslen(strings[STR_PROGRESS_FAIL]));
progress += wcslen(strings[STR_PROGRESS_FAIL]);
}
DrawString(BOT_SCREEN, progressbar, progressX, 50, ConsoleGetTextColor(), ConsoleGetBackgroundColor());
sprintf(tmpstr, "%s:%s/data.bin", drive, DATAFOLDER);
if(FileOpen(&tempfile, tmpstr, 1)){
FileWrite(&tempfile, __DATE__, 12, 0);
FileWrite(&tempfile, __TIME__, 9, 12);
FileClose(&tempfile);
}else {
f_close(&firmfile);
return CONF_CANTOPENFILE;
}
wcsncpy(progress, strings[STR_PROGRESS_OK], wcslen(strings[STR_PROGRESS_OK]));
progress += wcslen(strings[STR_PROGRESS_OK]);
DrawString(BOT_SCREEN, progressbar, progressX, 50, ConsoleGetTextColor(), ConsoleGetBackgroundColor());
end:
f_close(&firmfile);
return 0;
}
int rxMode(int emu)
{
const Elf32_Addr line = 32;
wchar_t path[64];
const char *shstrtab;
const wchar_t *msg;
uint8_t keyx[16];
uint32_t tid;
int r, sector;
Elf32_Ehdr *ehdr;
Elf32_Shdr *shdr, *btmShdr;
Elf32_Addr cur, btm;
void *keyxArg;
FIL fd;
UINT br, fsz;
if (emu) {
sector = checkEmuNAND();
if (sector == 0) {
ConsoleInit();
ConsoleSetTitle(L"EMUNAND NOT FOUND!");
print(L"The emunand was not found on\n");
print(L"your SDCard. \n");
print(L"\n");
print(L"Press A to boot SYSNAND\n");
ConsoleShow();
WaitForButton(BUTTON_A);
swprintf(path, _MAX_LFN, L"/rxTools/Theme/%u/boot.bin",
cfgs[CFG_THEME].val.i);
DrawBottomSplash(path);
}
} else
sector = 0;
r = getMpInfo();
switch (r) {
case MPINFO_KTR:
tid = TID_KTR_NATIVE_FIRM;
break;
case MPINFO_CTR:
tid = TID_CTR_NATIVE_FIRM;
break;
default:
msg = L"Unknown Platform: %d";
goto fail;
}
setAgbBios();
if (sysver < 7 && f_open(&fd, _T("slot0x25KeyX.bin"), FA_READ) == FR_OK) {
f_read(&fd, keyx, sizeof(keyx), &br);
f_close(&fd);
keyxArg = keyx;
} else
keyxArg = NULL;
getFirmPath(path, tid);
r = loadFirm(path, &fsz);
if (r) {
msg = L"Failed to load NATIVE_FIRM: %d\n"
L"Reboot rxTools and try again.\n";
goto fail;
}
((FirmHdr *)FIRM_ADDR)->arm9Entry = 0x0801B01C;
getFirmPatchPath(path, tid);
r = f_open(&fd, path, FA_READ);
if (r != FR_OK)
goto patchFail;
r = f_read(&fd, (void *)PATCH_ADDR, PATCH_SIZE, &br);
if (r != FR_OK)
goto patchFail;
f_close(&fd);
ehdr = (void *)PATCH_ADDR;
shdr = (void *)(PATCH_ADDR + ehdr->e_shoff);
shstrtab = (char *)PATCH_ADDR + shdr[ehdr->e_shstrndx].sh_offset;
for (btmShdr = shdr + ehdr->e_shnum; shdr != btmShdr; shdr++) {
if (!strcmp(shstrtab + shdr->sh_name, ".patch.p9.reboot.body")) {
memcpy((void *)ehdr->e_entry,
(void *)(PATCH_ADDR + shdr->sh_offset),
shdr->sh_size);
// Drain write buffer
__asm__ volatile ("mcr p15, 0, %0, c7, c10, 4" :: "r"(0));
cur = ehdr->e_entry & ~(line - 1);
btm = ehdr->e_entry + shdr->sh_size;
while (cur < btm) {
__asm__ volatile (
// Clean Dcache
"mcr p15, 0, %0, c7, c10, 1\n\t"
// Flush Icache
"mcr p15, 0, %0, c7, c5, 1"
:: "r"(cur));
cur += line;
}
((void (*)(uint32_t, void *, uintptr_t))ehdr->e_entry)(
sector, keyxArg, 0x1FFFFFF8);
__builtin_unreachable();
}
}
