YAWM-ModMii-Edition/source/sys.c

#include <stdio.h>
#include <stdlib.h>
#include <ogcsys.h>
#include <ogc/es.h>

#include "sys.h"
#include "aes.h"
#include "nand.h"
#include "mini_seeprom.h"
#include "malloc.h"
#include "mload.h"
#include "ehcmodule_elf.h"

/* Constants */
#define CERTS_LEN 0x280

/* Variables */
static const char certs_fs[] ATTRIBUTE_ALIGN(32) = "/sys/cert.sys";
u32 boot2version;
static bool gDisablePRButtons = false;

void __Sys_ResetCallback(__attribute__((unused)) u32 irq, __attribute__((unused)) void *ctx)
{
	/* Reboot console */
	if (!gDisablePRButtons)
		Sys_Reboot();
}

void __Sys_PowerCallback(void)
{
	/* Poweroff console */
	if (!gDisablePRButtons)
		Sys_Shutdown();
}

bool tmdIsStubIOS(tmd* p_tmd)
{
	return
		p_tmd->sys_version >> 32 == 0
	&&	p_tmd->num_contents == 3
	&&	p_tmd->contents[0].type == 0x0001
	&&	p_tmd->contents[1].type == 0x8001
	&&	p_tmd->contents[2].type == 0x8001;
}

bool ES_CheckHasKoreanKey(void)
{
	aeskey korean_key;
	unsigned char iv[16] = {};

	__attribute__ ((__aligned__(0x10)))
	unsigned char data[16] = {0x56, 0x52, 0x6f, 0x63, 0xa1, 0x2c, 0xd1, 0x32, 0x07, 0x99, 0x82, 0x3b, 0x1b, 0x08, 0x17, 0xd0};

	if (seeprom_read(korean_key, offsetof(struct SEEPROM, korean_key), sizeof(korean_key)) != sizeof(korean_key))
		return false;

	AES_Decrypt(korean_key, 0x10, iv, 0x10, data, data, sizeof(data));

	//	return (!strcmp((char*) data, "thepikachugamer")) Just remembered that this is how the Trucha bug came to be
	return (!memcmp(data, "thepikachugamer", sizeof(data)));
}

bool isIOSstub(u8 ios_number)
{
	u32 tmd_size = 0;
	tmd_view *ios_tmd;

	if ((boot2version >= 5) && (ios_number == 202 || ios_number == 222 || ios_number == 223 || ios_number == 224))
		return true;

	ES_GetTMDViewSize(0x0000000100000000ULL | ios_number, &tmd_size);
	if (!tmd_size)
	{
		// getting size failed. invalid or fake tmd for sure!
		// gprintf("failed to get tmd for ios %d\n",ios_number);
		return true;
	}
	ios_tmd = memalign32(tmd_size);
	if (!ios_tmd)
	{
		// gprintf("failed to mem align the TMD struct!\n");
		return true;
	}
	memset(ios_tmd, 0, tmd_size);
	ES_GetTMDView(0x0000000100000000ULL | ios_number, (u8 *)ios_tmd, tmd_size);
	// gprintf("IOS %d is rev %d(0x%x) with tmd size of %u and %u contents\n",ios_number,ios_tmd->title_version,ios_tmd->title_version,tmd_size,ios_tmd->num_contents);
	/*Stubs have a few things in common:
	- title version : it is mostly 65280 , or even better : in hex the last 2 digits are 0.
			example : IOS 60 rev 6400 = 0x1900 = 00 = stub
	- exception for IOS21 which is active, the tmd size is 592 bytes (or 140 with the views)
	- the stub ios' have 1 app of their own (type 0x1) and 2 shared apps (type 0x8001).
	eventho the 00 check seems to work fine , we'll only use other knowledge as well cause some
	people/applications install an ios with a stub rev >_> ...*/
	u8 Version = ios_tmd->title_version;

	if ((boot2version >= 5) && (ios_number == 249 || ios_number == 250) && (Version < 18))
		return true;
	if ((ios_number == 202 || ios_number == 222 || ios_number == 223 || ios_number == 224) && (Version < 4))
		return true;
	// version now contains the last 2 bytes. as said above, if this is 00, its a stub
	if (Version == 0)
	{
		if ((ios_tmd->num_contents == 3) && (ios_tmd->contents[0].type == 1 && ios_tmd->contents[1].type == 0x8001 && ios_tmd->contents[2].type == 0x8001))
		{
			// gprintf("IOS %d is a stub\n",ios_number);
			free(ios_tmd);
			return true;
		}
		else
		{
			// gprintf("IOS %d is active\n",ios_number);
			free(ios_tmd);
			return false;
		}
	}
	// gprintf("IOS %d is active\n",ios_number);
	free(ios_tmd);
	return false;
}

bool loadIOS(int ios)
{
	if (isIOSstub(ios))
		return false;
	mload_close();
	if (IOS_ReloadIOS(ios) >= 0)
	{
		if (IOS_GetVersion() != 249 && IOS_GetVersion() != 250)
		{
			if (mload_init() >= 0)
			{
				data_elf my_data_elf;
				mload_elf((void *)ehcmodule_elf, &my_data_elf);
				mload_run_thread(my_data_elf.start, my_data_elf.stack, my_data_elf.size_stack, 0x47);
			}
		}
		return true;
	}
	return false;
}

void Sys_Init(void)
{
	/* Initialize video subsytem */
	VIDEO_Init();

	/* Set RESET/POWER button callback */
	SYS_SetResetCallback(__Sys_ResetCallback);
	SYS_SetPowerCallback(__Sys_PowerCallback);
}

void Sys_Reboot(void)
{
	/* Restart console */
	STM_RebootSystem();
}

void Sys_Shutdown(void)
{
	/* Poweroff console */
#if 0
	/*
	STM_SetLedMode is causing a crash, and I don't even like the concept of shutting down to WiiConnect24 standby anyways,
	so let's just remove this overall

	- thepikachugamer
	*/
	if (CONF_GetShutdownMode() == CONF_SHUTDOWN_IDLE)
	{
		s32 ret;

		/* Set LED mode */
		ret = CONF_GetIdleLedMode();
		if (ret >= 0 && ret <= 2)
			STM_SetLedMode(ret);

		/* Shutdown to idle */
		STM_ShutdownToIdle();
	}
#endif

	/* Shutdown to standby */
	STM_ShutdownToStandby();

}

s32 Sys_GetCerts(signed_blob **certs, u32 *len)
{
	static signed_blob certificates[CERTS_LEN] ATTRIBUTE_ALIGN(32);

	s32 fd, ret;

	/* Open certificates file */
	fd = IOS_Open(certs_fs, 1);
	if (fd < 0)
		return fd;

	/* Read certificates */
	ret = IOS_Read(fd, certificates, sizeof(certificates));

	/* Close file */
	IOS_Close(fd);

	/* Set values */
	if (ret > 0)
	{
		*certs = certificates;
		*len = sizeof(certificates);
	}

	return ret;
}

s32 Sys_GetSharedContents(SharedContent** out, u32* count)
{
	if (!out || !count) return false;

	u32 size;
	SharedContent* buf = (SharedContent*)NANDLoadFile("/shared1/content.map", &size);

	if (!buf)
		return (s32)size;

	else if (size % sizeof(SharedContent) != 0) {
		free(buf);
		return -996;
	}

	*out = buf;
	*count = size / sizeof(SharedContent);

	return 0;
}

bool Sys_SharedContentPresent(tmd_content* content, SharedContent shared[], u32 count)
{
	if (!shared || !content || !count)
		return false;

	if (!(content->type & 0x8000))
		return false;

	for (SharedContent* s_content = shared; s_content < shared + count; s_content++)
	{
		if (memcmp(s_content->hash, content->hash, sizeof(sha1)) == 0)
			return true;
	}

	return false;
}

bool Sys_GetcIOSInfo(int IOS, cIOSInfo* out)
{
	u64 titleID = 0x0000000100000000ULL | IOS;
	ATTRIBUTE_ALIGN(0x20) char path[ISFS_MAXPATH];
	u32 size;
	cIOSInfo* buf = NULL;

	u32 view_size = 0;
	if (ES_GetTMDViewSize(titleID, &view_size) < 0)
		return false;

	tmd_view* view = memalign32(view_size);
	if (!view)
		return false;

	if (ES_GetTMDView(titleID, (u8*)view, view_size) < 0)
		goto fail;

	tmd_view_content* content0 = NULL;

	for (tmd_view_content* con = view->contents; con < view->contents + view->num_contents; con++)
	{
		if (con->index == 0)
			content0 = con;
	}

	if (!content0)
		goto fail;

	sprintf(path, "/title/00000001/%08x/content/%08x.app", IOS, content0->cid);
	buf = (cIOSInfo*)NANDLoadFile(path, &size);

	if (!buf || size != 0x40 || buf->hdr_magic != CIOS_INFO_MAGIC || buf->hdr_version != CIOS_INFO_VERSION)
		goto fail;

	*out = *buf;
	free(view);
	free(buf);
	return true;

fail:
	free(view);
	free(buf);
	return false;
}

void SetPRButtons(bool enabled)
{
	gDisablePRButtons = !enabled;
}