WiiFlow_Lite/source/loader/nk.c

155 lines
3.9 KiB
C

/***************************************************************************
* Copyright (C) 2012 OverjoY for Wiiflow
*
* This software is provided 'as-is', without any express or implied
* warranty. In no event will the authors be held liable for any
* damages arising from the use of this software.
*
* Permission is granted to anyone to use this software for any
* purpose, including commercial applications, and to alter it and
* redistribute it freely, subject to the following restrictions:
*
* 1. The origin of this software must not be misrepresented; you
* must not claim that you wrote the original software. If you use
* this software in a product, an acknowledgment in the product
* documentation would be appreciated but is not required.
*
* 2. Altered source versions must be plainly marked as such, and
* must not be misrepresented as being the original software.
*
* 3. This notice may not be removed or altered from any source
* distribution.
*
* nk.c
*
***************************************************************************/
#include <stdio.h>
#include <ogcsys.h>
#include <string.h>
#include <malloc.h>
#include "nk.h"
#include "sys.h"
#include "armboot.h"
#include "fileOps/fileOps.h"
#include "memory/mem2.hpp"
#include "gecko/gecko.hpp"
u32 kernelSize = 0;
void *Kernel = NULL;
bool Load_Neek2o_Kernel()
{
bool ret = true;
if(IsOnWiiU())
Kernel = fsop_ReadFile("usb1:/sneek/vwiikernel.bin", &kernelSize);
else
{
Kernel = fsop_ReadFile("usb1:/sneek/kernel.bin", &kernelSize);
if(Kernel == NULL)
Kernel = fsop_ReadFile("sd:/sneek/kernel.bin", &kernelSize);
}
if(Kernel == NULL)
ret = false;
return ret;
}
s32 Launch_nk(u64 TitleID, const char *nandpath, u64 ReturnTo)
{
memcpy((void*)0x91000000, Kernel, kernelSize);
DCFlushRange((void*)0x91000000, kernelSize);
free(Kernel);
memcfg *MC = (memcfg*)malloc(sizeof(memcfg));
if(MC == NULL)
return 0;
memset(MC, 0, sizeof(memcfg));
MC->magic = 0x666c6f77;
if(TitleID)
MC->titleid = TitleID;
if(ReturnTo)
{
MC->returnto = ReturnTo;
MC->config |= NCON_EXT_RETURN_TO;
}
if(nandpath != NULL)
{
strcpy(MC->nandpath, nandpath);
MC->config |= NCON_EXT_NAND_PATH;
}
memcpy((void *)0x81200000, MC, sizeof(memcfg));
DCFlushRange((void *)(0x81200000), sizeof(memcfg));
free(MC);
/*** Thnx giantpune! ***/
void *mini = MEM1_memalign(32, armboot_size);
if(!mini)
return 0;
// uses bootmii mini to run wiiflow internal armboot.bin for neek2o
memcpy(mini, armboot, armboot_size);
DCFlushRange(mini, armboot_size);
*(u32*)0xc150f000 = 0x424d454d;//BMEM
asm volatile("eieio");
*(u32*)0xc150f004 = MEM_VIRTUAL_TO_PHYSICAL(mini);
asm volatile("eieio");
IOS_ReloadIOS(0xfe);// IOS254 bootmii
MEM1_free(mini);
return 1;
}
/*
void NKKeyCreate(u8 *tik)
{
u32 *TKeyID = (u32*)MEM1_memalign(32, sizeof(u32));
u8 *TitleID = (u8*)MEM1_memalign(32, 0x10);
u8 *EncTitleKey = (u8*)MEM1_memalign(32, 0x10);
memset(TitleID, 0, 0x10);
memset(EncTitleKey, 0, 0x10);
memcpy(TitleID, tik + 0x1DC, 8);
memcpy(EncTitleKey, tik + 0x1BF, 16);
static ioctlv v[3] ATTRIBUTE_ALIGN(32);
v[0].data = TitleID;
v[0].len = 0x10;
v[1].data = EncTitleKey;
v[1].len = 0x10;
v[2].data = TKeyID;
v[2].len = sizeof(u32);
s32 ESHandle = IOS_Open("/dev/es", 0);
IOS_Ioctlv(ESHandle, 0x50, 2, 1, (ioctlv *)v);
IOS_Close(ESHandle);
KeyID = *(u32*)(TKeyID);
MEM1_free(TKeyID);
MEM1_free(EncTitleKey);
MEM1_free(TitleID);
}
void NKAESDecryptBlock(u8 *in, u8 *out)
{
static ioctlv v[5] ATTRIBUTE_ALIGN(32);
v[0].data = &KeyID;
v[0].len = sizeof(u32);
v[1].data = in + 0x3d0;
v[1].len = 0x10;
v[2].data = in + 0x400;
v[2].len = 0x7c00;
v[3].data = 0;
v[3].len = 0;
v[4].data = out;
v[4].len = 0x7c00;
s32 ESHandle = IOS_Open("/dev/es", 0);
IOS_Ioctlv(ESHandle, 0x2D, 3, 2, (ioctlv *)v);
IOS_Close(ESHandle);
}
*/