1 #include "../generic/check_compat.c"
2
3 // static void __attribute__((noreturn)) shutdown();
4 // static void __attribute__((noreturn)) panic(int cnt);
5
6 extern long *blob_chdk_core;
7 // extern long *blob_copy_and_reset;
8 extern long blob_chdk_core_size;
9 // extern long blob_copy_and_reset_size;
10
11
12
13 void __attribute__((noreturn)) my_restart()
14 {
15
16 {
17 // char *dst = dst_void;
18 // const char *src = src_void;
19 long *dst = (long*)MEMISOSTART;
20 const long *src = blob_chdk_core;
21 long length = (blob_chdk_core_size + 3) >> 2;
22
23 core_copy(src, dst, length);
24
25 }
26
27 // DEBUG: jump to regular firmware-boot (causing a boot loop)
28 //dst_void = (void*) 0xFF810000;
29
30 //IXUS220HS found at FF83D8F0
31 asm volatile (
32 "LDR R1, =0xC0200000\n"
33 "MVN R0, #0\n"
34 "STR R0, [R1,#0x10C]\n"
35 "STR R0, [R1,#0xC]\n"
36 "STR R0, [R1,#0x1C]\n"
37 "STR R0, [R1,#0x2C]\n"
38 "STR R0, [R1,#0x3C]\n"
39 "STR R0, [R1,#0x4C]\n"
40 "STR R0, [R1,#0x5C]\n"
41 "STR R0, [R1,#0x6C]\n"
42 "STR R0, [R1,#0x7C]\n"
43 "STR R0, [R1,#0x8C]\n"
44 "STR R0, [R1,#0x9C]\n"
45 "STR R0, [R1,#0xAC]\n"
46 "STR R0, [R1,#0xBC]\n"
47 "STR R0, [R1,#0xCC]\n"
48 "STR R0, [R1,#0xDC]\n"
49 "STR R0, [R1,#0xEC]\n"
50 // "CMP R4, #7\n"
51 "STR R0, [R1,#0xFC]\n"
52 //"LDMEQFD SP!, {R4,PC}\n"
53 "MOV R0, #0x78\n"
54 "MCR p15, 0, R0,c1,c0\n"
55 "MOV R0, #0\n"
56 "MCR p15, 0, R0,c7,c10, 4\n"
57 "MCR p15, 0, R0,c7,c5\n"
58 "MCR p15, 0, R0,c7,c6\n"
59 "MOV R0, #0x80000006\n"
60 "MCR p15, 0, R0,c9,c1\n"
61 "MCR p15, 0, R0,c9,c1, 1\n"
62 "MRC p15, 0, R0,c1,c0\n"
63 "ORR R0, R0, #0x50000\n"
64 "MCR p15, 0, R0,c1,c0\n"
65 "LDR R0, =0x12345678\n"
66 "MOV R1, #0x80000000\n"
67 "STR R0, [R1,#0xFFC]\n"
68 //"LDR R0, =0xFF810000\n" //original jump-vector
69 "MOV R0, %0\n" //new jump-vector
70 // "LDMFD SP!, {R4,LR}\n"
71 "BX R0\n"
72 : : "r"(MEMISOSTART) : "memory","r0","r1","r2","r3","r4"
73 );
74 while(1);
75
76 }
77
78 // #define LED_PR 0xC0220130 // -> ASM1989 08.24.2010 found at FF91E080 in sx200 was FF8E73D0
79
80
81 // static void __attribute__((noreturn)) shutdown()
82 // {
83 //
84 // asm(
85 // "MRS R1, CPSR\n"
86 // "AND R0, R1, #0x80\n"
87 // "ORR R1, R1, #0x80\n"
88 // "MSR CPSR_cf, R1\n"
89 // :::"r1","r0");
90 //
91 // *p = 0x44; // led off.
92 //
93 // while(1);
94 // }
95 //
96 //
97 // static void __attribute__((noreturn)) panic(int cnt)
98 // {
99 // volatile long *p=(void*)LED_PR;
100 // int i;
101 //
102 // for(;cnt>0;cnt--){
103 // p[0]=0x46;
104 //
105 // for(i=0;i<0x200000;i++){
106 // asm ("nop\n");
107 // asm ("nop\n");
108 // }
109 // p[0]=0x44;
110 // for(i=0;i<0x200000;i++){
111 // asm ("nop\n");
112 // asm ("nop\n");
113 // }
114 // }
115 // shutdown();
116 // }