-
-
Notifications
You must be signed in to change notification settings - Fork 6
/
make_patched_firmware.py
203 lines (180 loc) · 8.12 KB
/
make_patched_firmware.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
if __name__ == "__main__":
import argparse
from pathlib import Path
import tarfile
import shutil
import subprocess
from tarlist_decrypt import decrypt_tarlist
from parse_tarlist import parse_tarlist, generate_tarlist
from parse_ver import parse_ver, generate_ver
from decrypt_navi import decrypt_navi
from patch_navi import patch_ExSLNavi
from encrypt_navi import encrypt_navi
from utils.calc_crc32 import calc_crc32
from sha224_gen import generate_hash
from utils.unsigned_to_signed import unsigned_to_signed
ap = argparse.ArgumentParser()
ap.add_argument(
"firmware_dir", help="firmware directory path", type=Path, default=Path(".")
)
ap.add_argument("-s", "--skip", help="skip patching", action="store_true")
args = ap.parse_args()
firmware_dir: Path = args.firmware_dir.resolve()
skip_patching: bool = args.skip
if firmware_dir.exists():
# Check if every necessary file exists
print("Checking if every necessary file exists...")
tarlist_enc_path = firmware_dir / "TarList.txt_encrypted"
tarlist_path = firmware_dir / "TarList.txt"
ver_path = None
if len(list(firmware_dir.glob("*.ver"))) > 0:
ver_path = next(firmware_dir.glob("*.ver"))
tar_path = firmware_dir / "sw_backup.tar"
if not tarlist_enc_path.exists() and not tarlist_path.exists():
tarlist_enc_path = firmware_dir / "NEW_TarList.txt_encrypted"
tarlist_path = firmware_dir / "NEW_TarList.txt"
if not tarlist_enc_path.exists() and not tarlist_path.exists():
raise FileNotFoundError(
"TarList.txt_encrypted or TarList.txt does not exist in firmware directory."
)
if not tar_path.exists():
raise FileNotFoundError(
"sw_backup.tar does not exist in firmware directory."
)
# Decrypt TarList.txt_encrypted to TarList.txt
print("Decrypting TarList.txt_encrypted to TarList.txt...")
if tarlist_enc_path.exists():
decrypt_tarlist(tarlist_enc_path, tarlist_path)
tarlist = parse_tarlist(tarlist_path.read_text())
print(
f"SW Version: {tarlist['sw_version']['region']}.{tarlist['sw_version']['year']:02d}{tarlist['sw_version']['month']:02d}{tarlist['sw_version']['day']:02d}.{tarlist['sw_version']['ver1']:x}"
)
# Untar sw_backup.tar in sw_backup/
print("Untaring sw_backup.tar in sw_backup/...")
with tarfile.open(tar_path, "r") as tar:
tar.extractall(firmware_dir / "sw_backup")
# Search Navi_Version.txt in sw_backup/
print("Searching Navi_Version.txt in sw_backup/...")
navi_version_paths = list(
(firmware_dir / "sw_backup").glob("**/Navi_Version.txt")
)
if len(navi_version_paths) == 0:
raise FileNotFoundError(
"Necessary files do not exist in sw_backup directory. The firmware might be corrupted."
)
# Patch Navi_Version.txt
print("Patching Navi_Version.txt...")
tarlist["sw_version"]["day"] += 1
tarlist["sw_version"]["ver1"] += 1
print(
f"Bumping version to {tarlist['sw_version']['year']:02d}{tarlist['sw_version']['month']:02d}{tarlist['sw_version']['day']:02d}.{tarlist['sw_version']['ver1']:x}..."
)
for navi_version_path in navi_version_paths:
navi_version_tags = navi_version_path.read_text().split(".")
navi_version_tags[
3
] = f"{tarlist['sw_version']['year']:02d}{tarlist['sw_version']['month']:02d}{tarlist['sw_version']['day']:02d}"
navi_version_tags[4] = f"{tarlist['sw_version']['ver1']:x}\n"
navi_version_path.write_text(".".join(navi_version_tags))
if not skip_patching:
# Search ExSLNavi in sw_backup/
print("Searching ExSLNavi in sw_backup/...")
library_paths = list(
(firmware_dir / "sw_backup").glob("**/enc_libExSLAndroidJNI.so")
)
if len(library_paths) == 0:
raise FileNotFoundError(
"Necessary libraries do not exist in sw_backup directory. The firmware might be corrupted."
)
for library_path in library_paths:
# Decrypt ExSLNavi
print(f"Decrypting {library_path}...")
decrypted_library_path = library_path.with_name(library_path.name[4:])
decrypted_library_path.write_bytes(
decrypt_navi(library_path.read_bytes())
)
# Patch ExSLNavi
print(f"Patching {decrypted_library_path}...")
patched_library_path = decrypted_library_path.with_name(
decrypted_library_path.name[:-3] + "_p.so"
)
patch_ExSLNavi(
str(decrypted_library_path.resolve()),
str(patched_library_path.resolve()),
)
# Encrypt ExSLNavi
print(f"Encrypting {patched_library_path}...")
encrypted_library_path = patched_library_path.with_name(
patched_library_path.name[:-5] + "_e.so"
)
encrypted_library_path.write_bytes(
encrypt_navi(patched_library_path.read_bytes())
)
# Replace ExSLNavi
print(f"Replacing {library_path}...")
library_path.unlink()
encrypted_library_path.rename(library_path)
# Remove decrypted and patched ExSLNavi
decrypted_library_path.unlink()
patched_library_path.unlink()
# Tar sw_backup/ to sw_backup.tar
print("Taring sw_backup/ to sw_backup.tar...")
tar_args = [
"libtar",
"-C",
str(firmware_dir / "sw_backup"),
"-c",
str(tar_path),
]
for f in (firmware_dir / "sw_backup").glob("**/*"):
if not f.name.startswith(".") and f.is_file():
tar_args.append(str(f.relative_to(firmware_dir / "sw_backup")))
tar_process = subprocess.run(
tar_args,
# shell=True,
check=True,
)
# Update hash in TarList.txt
print("Updating hash in TarList.txt...")
for f in tarlist["file_list"]:
if f["file_name"] == "sw_backup.tar":
f["sha224"] = generate_hash(tar_path)
# Write TarList.txt
print("Writing TarList.txt...")
tarlist_path.write_text(generate_tarlist(tarlist))
# Encrypt TarList.txt to TarList.txt_encrypted
print("Encrypting TarList.txt to TarList.txt_encrypted...")
if tarlist_enc_path.exists():
tarlist_enc_path.unlink()
decrypt_tarlist(
tarlist_path, tarlist_enc_path
) # it uses XOR, so it's reversible
tarlist_path.unlink()
if ver_path is not None and ver_path.exists():
# Parse .ver
print("Parsing .ver...")
ver = parse_ver(ver_path.read_text())
# Update CRC32 in .ver
print("Updating CRC32 and size in .ver...")
for f in ver["files"]:
if f["file_name"] in ["sw_backup.tar", tarlist_enc_path.name]:
crc32 = calc_crc32((firmware_dir / f["file_name"]).read_bytes())
f["crc32"] = crc32
size = unsigned_to_signed(
(firmware_dir / f["file_name"]).stat().st_size
)
f["file_size"] = size
# Write .ver
print("Writing .ver...")
ver_path.write_text(generate_ver(ver))
# Remove sw_backup/
print("Removing sw_backup/...")
shutil.rmtree(firmware_dir / "sw_backup")
# Copy run.sh
print("Copying run.sh...")
shutil.copyfile("run.sh", firmware_dir / "run.sh")
print("Done.")
else:
raise FileNotFoundError(
"firmware directory does not exist. Please check again."
)