From 9bc7a3809b4d565be347a02cd8a96df1d344c59b Mon Sep 17 00:00:00 2001 From: Toshifumi NISHINAGA Date: Tue, 20 Sep 2022 22:05:26 +0900 Subject: [PATCH] Add support 1st generation Brain Address information was given by pepepper. Thank you! --- .gitignore | 2 + BrainLILODrv.cpp | 176 ++++++++++++++++++++++++++++------------ EDNA2_physicalInvoker.S | 30 +++++++ Makefile | 4 +- models.h | 14 ++++ 5 files changed, 174 insertions(+), 52 deletions(-) create mode 100644 EDNA2_physicalInvoker.S diff --git a/.gitignore b/.gitignore index 8620bdd..02edcd9 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,4 @@ *.dll *.exe +*.o + diff --git a/BrainLILODrv.cpp b/BrainLILODrv.cpp index 64ead8c..f35fbf3 100644 --- a/BrainLILODrv.cpp +++ b/BrainLILODrv.cpp @@ -47,6 +47,30 @@ typedef void (*FileSystemPowerFunctionProc)(DWORD); static FileSystemPowerFunctionProc FileSystemPowerFunction; +// GEN1 +// VA +#define BOOTLOADER_PRELOADADDR_GEN1 (uint8_t *)0xa0250000 +#define BOOTLOADER_LOADADDR_GEN1 (uint8_t *)0xa3f00000 +#define PHYSICAL_INVOKER_INSTALLADDR_GEN1 (uint8_t *)0xb0000000 +#define TMPA910_REMAP_REGISTER_ADDRESS (uint32_t *)0xaa000004 +// PA +#define BOOTLOADER_LOADADDR_GEN1_PA (uint8_t *)0x43f00000 + +// DEFAULT(GEN2) +// VA +#define BOOTLOADER_PRELOADADDR (uint8_t *)0xa0250000 +#define BOOTLOADER_LOADADDR (uint8_t *)0xa0200000 +#define PHYSICAL_INVOKER_INSTALLADDR (uint8_t *)0xb0000000 +// PA +#define BOOTLOADER_LOADADDR_PA (uint8_t *)0x40200000 + +// VA +uint8_t *bootloader_preload_address = NULL; +uint8_t *bootloader_load_address = NULL; +uint8_t *physical_invoker_install_address = NULL; +// PA +uint8_t *bootloader_load_address_pa = NULL; + DWORD fileSize; int row; int screenW; @@ -56,20 +80,14 @@ static void outputDebugMessage(const wchar_t *format, ...) { wchar_t buffer[256] = {0}; va_list args; - RECT rcScreen = { - .left = 0, - .top = 0, - .right = screenW, - .bottom = screenH - }; + RECT rcScreen = {.left = 0, .top = 0, .right = screenW, .bottom = screenH}; va_start(args, format); vswprintf(buffer, format, args); va_end(args); OutputDebugString(buffer); - ExtTextOut(GetDC(NULL), 0, row * 14, ETO_CLIPPED, &rcScreen, - buffer, wcslen(buffer), NULL); + ExtTextOut(GetDC(NULL), 0, row * 14, ETO_CLIPPED, &rcScreen, buffer, wcslen(buffer), NULL); row++; } @@ -83,42 +101,23 @@ static void disableInterrupts() : "r0"); } -static void EDNA2_physicalInvoker() +extern "C" void EDNA2_physicalInvoker(); + +static void EnableMemoryRemapGen1() { - // r0-r7=params - // r8=proc address - asm volatile("nop\n" // who cares interrupt vectors? - "nop\n" - "nop\n" - "nop\n" - "nop\n" - "nop\n" - "nop\n" - "nop\n" - "nop\n" - "nop\n" - "msr cpsr_c, #211\n" // to supervisor mode - "mov r9, #0\n" - "mcr p15,0,r9,c13,c0,0\n" // clear fcse PID - "mrc p15,0,r9,c1,c0,0\n" // read ctrl regs - "bic r9, r9, #5\n" // disable MMU/DCache - "bic r9, r9, #4096\n" // disable ICache - "orr r9, r9, #8192\n" // and reset vectors to upper - "mcr p15,0,r9,c1,c0,0\n" // write ctrl regs - "mov r9, #0\n" - "mcr p15,0,r9,c7,c7,0\n" // invalidate cache - "mcr p15,0,r9,c8,c7,0\n" // invalidate tlb - "mov pc, r8\n" - "nop\n" - "nop\n"); + *TMPA910_REMAP_REGISTER_ADDRESS = 1; + outputDebugMessage(L"BrainLILO: memory remap enable for Gen1\n"); } -static void EDNA2_installPhysicalInvoker() +static void EDNA2_installPhysicalInvoker(Brain_Gen gen) { - void *ptr = (void *)0xa8000000; - outputDebugMessage(L"BrainLILO: copying PhysicalInvoker to 0x%p from 0x%p\n", - ptr, &EDNA2_physicalInvoker); - memcpy(ptr, (const void *)&EDNA2_physicalInvoker, 64 * 4); + if (gen == Gen1) + { + EnableMemoryRemapGen1(); + } + outputDebugMessage(L"BrainLILO: copying PhysicalInvoker to 0x%p from 0x%p\n", physical_invoker_install_address, + &EDNA2_physicalInvoker); + memcpy(physical_invoker_install_address, (const void *)&EDNA2_physicalInvoker, 64 * 4); // clearCache(); } @@ -131,8 +130,7 @@ __attribute__((noreturn)) static void EDNA2_runPhysicalInvoker() "mcr p15,0,r0,c1,c0,0\n" // write ctrl regs ); - for (DWORD i = 0; i < fileSize; i++) - *((char *)(0xa0200000 + i)) = *((char *)(0xa0000000 + i)); + memcpy(bootloader_load_address, bootloader_preload_address, fileSize); asm volatile("ldr r0, =0x0000\n" "ldr r1, =0x0000\n" @@ -142,26 +140,28 @@ __attribute__((noreturn)) static void EDNA2_runPhysicalInvoker() "ldr r5, =0x0000\n" "ldr r6, =0x0000\n" "ldr r7, =0x0000\n" - "ldr r8, =0x40200000\n" + "mov r8, %[textbase]\n" "ldr r9, =0x0000\n" "mrc p15,0,r10,c1,c0,0\n" // read ctrl regs "bic r10, r10, #5\n" // disable MMU/DCache "mcr p15,0,r10,c1,c0,0\n" // write ctrl regs "swi #0\n" // jump! - ); + : /* no outputs */ + : [textbase] "r"(bootloader_load_address_pa) + : "r0", "r1", "r2", "r3", "r4", "r5", "r6", "r7", "r8", "r9", "r10"); // never reach here while (true) ; } -__attribute__((noreturn)) static DWORD EDNA2_callKernelEntryPoint() +__attribute__((noreturn)) static DWORD EDNA2_callKernelEntryPoint(Brain_Gen gen) { outputDebugMessage(L"BrainLILO: disabling interrupts"); disableInterrupts(); outputDebugMessage(L"BrainLILO: injecting code to internal ram"); - EDNA2_installPhysicalInvoker(); + EDNA2_installPhysicalInvoker(gen); outputDebugMessage(L"BrainLILO: invoking"); Sleep(1000); @@ -173,12 +173,82 @@ static void ShowMessage(std::wstring msg, std::wstring title, UINT typ) MessageBox(NULL, msg.c_str(), title.c_str(), typ); } +static void SetAddress(Brain_Gen gen) +{ + switch (gen) + { + case Gen1: + // VA + bootloader_preload_address = BOOTLOADER_PRELOADADDR_GEN1; + bootloader_load_address = BOOTLOADER_LOADADDR_GEN1; + physical_invoker_install_address = PHYSICAL_INVOKER_INSTALLADDR_GEN1; + // PA + bootloader_load_address_pa = BOOTLOADER_LOADADDR_GEN1_PA; + break; + default: + // Gen2? + // VA + bootloader_preload_address = BOOTLOADER_PRELOADADDR; + bootloader_load_address = BOOTLOADER_LOADADDR; + physical_invoker_install_address = PHYSICAL_INVOKER_INSTALLADDR; + // PA + bootloader_load_address_pa = BOOTLOADER_LOADADDR_PA; + } +} + +static Brain_Gen SelectGen(std::wstring model) +{ + Brain_Gen brain_gen = UnknownGen; + if (model == L"gen1.bin") + { + brain_gen = Gen1; + } + else if (model == L"gen2.bin") + { + brain_gen = Gen2; + } + else if (model == L"gen3_1.bin") + { + brain_gen = Gen3_1; + } + else if (model == L"gen3_2.bin") + { + brain_gen = Gen3_2; + } + else if (model == L"gen3_3.bin") + { + brain_gen = Gen3_3; + } + else if (model == L"gen3_4.bin") + { + brain_gen = Gen3_4; + } + else if (model == L"gen3_5.bin") + { + brain_gen = Gen3_5; + } + else if (model == L"gen3_6.bin") + { + brain_gen = Gen3_6; + } + else if (model == L"gen3_7.bin") + { + brain_gen = Gen3_7; + } + else + { + brain_gen = UnknownGen; + } + return brain_gen; +} + static bool doLinux() { std::wifstream iVersion; std::wstring line, model; std::wregex modelRe(L"[A-Z]{2}-[A-Z0-9]+"); std::wsmatch match; + Brain_Gen brain_gen = UnknownGen; std::wstring fn(L"\\Storage Card\\loader\\"); HANDLE hUBoot; @@ -207,7 +277,9 @@ static bool doLinux() if (iter != models.end()) { model = iter->second; - } else { + } + else + { outputDebugMessage(L"BrainLILO: internal model name %s is unknown, falling back to u-boot.bin", model.c_str()); model = L"u-boot.bin"; } @@ -215,6 +287,10 @@ static bool doLinux() fn += model; outputDebugMessage(L"BrainLILO: opening Bootloader file: %s", fn.c_str()); + brain_gen = SelectGen(model); + outputDebugMessage(L"BrainLILO: This is %d generation Brain", brain_gen); + SetAddress(brain_gen); + hUBoot = CreateFile(fn.c_str(), GENERIC_READ, 0, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL); if (hUBoot == INVALID_HANDLE_VALUE) { @@ -228,8 +304,8 @@ static bool doLinux() fileSize = GetFileSize(hUBoot, NULL); outputDebugMessage(L"BrainLILO: bootloader file size %d Byte", fileSize); - outputDebugMessage(L"BrainLILO: preloading bootloader to 0x%p...", 0xa0000000); - if (!ReadFile(hUBoot, (void *)0xa0000000, fileSize, &wReadSize, NULL)) + outputDebugMessage(L"BrainLILO: preloading bootloader to 0x%p...", bootloader_preload_address); + if (!ReadFile(hUBoot, (void *)bootloader_preload_address, fileSize, &wReadSize, NULL)) { outputDebugMessage(L"BrainLILO: could not read the bootloader"); ShowMessage(L"Could not read the bootloader", L"BrainLILO", MB_ICONWARNING); @@ -243,7 +319,7 @@ static bool doLinux() FileSystemPowerFunction(FSNOTIFY_POWER_OFF); outputDebugMessage(L"BrainLILO: starting bootloader call sequence..."); - EDNA2_callKernelEntryPoint(); + EDNA2_callKernelEntryPoint(brain_gen); return true; } diff --git a/EDNA2_physicalInvoker.S b/EDNA2_physicalInvoker.S new file mode 100644 index 0000000..119e26f --- /dev/null +++ b/EDNA2_physicalInvoker.S @@ -0,0 +1,30 @@ +.align 4 + +.global EDNA2_physicalInvoker +EDNA2_physicalInvoker: + // r0-r7=params + // r8=proc address + nop + nop + nop + nop + nop + nop + nop + nop + nop + nop + msr cpsr_c, #211 // to supervisor mode + mov r9, #0 + mcr p15,0,r9,c13,c0,0 // clear fcse PID + mrc p15,0,r9,c1,c0,0 // read ctrl regs + bic r9, r9, #5 // disable MMU/DCache + bic r9, r9, #4096 // disable ICache + orr r9, r9, #8192 // and reset vectors to upper + mcr p15,0,r9,c1,c0,0 // write ctrl regs + mov r9, #0 + mcr p15,0,r9,c7,c7,0 // invalidate cache + mcr p15,0,r9,c8,c7,0 // invalidate tlb + mov pc, r8 + nop + nop diff --git a/Makefile b/Makefile index 2c473b1..a3d2d57 100644 --- a/Makefile +++ b/Makefile @@ -42,8 +42,8 @@ BrainLILO.dll: BrainLILO.cpp $(CXX) BrainLILO.cpp -o BrainLILO.dll $(DLLFLAGS) $(STRIP) BrainLILO.dll -BrainLILODrv.dll: BrainLILODrv.cpp - $(CXX) BrainLILODrv.cpp -o BrainLILODrv.dll $(DRVFLAGS) +BrainLILODrv.dll: BrainLILODrv.cpp EDNA2_physicalInvoker.S + $(CXX) BrainLILODrv.cpp EDNA2_physicalInvoker.S -o BrainLILODrv.dll $(DRVFLAGS) $(STRIP) BrainLILODrv.dll BrainLILO.exe: bootloader.cpp diff --git a/models.h b/models.h index 45512d1..63a8de4 100644 --- a/models.h +++ b/models.h @@ -72,3 +72,17 @@ const std::map models = { {L"ED-SB7", L"gen3_7.bin"}, // SB7 {L"ED-SR3", L"gen3_7.bin"}, // SR3 }; + +typedef enum +{ + UnknownGen, + Gen1, + Gen2, + Gen3_1, + Gen3_2, + Gen3_3, + Gen3_4, + Gen3_5, + Gen3_6, + Gen3_7, +} Brain_Gen; \ No newline at end of file