easylinux/cam-reverse
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

stop masking commands

Browse Source
This commit is contained in:
DavidVentura
2024-02-01 13:14:39 +01:00
parent 85a4b71e46
commit 94070b6e33
1 changed files with 30 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
func_replacements.js
+30 -19
View File
@@ -207,16 +207,26 @@ const dbg_create_Drw = (og_func) => {
};
const dbg__ZN12CPPPPChannel10CmdSndPushEiiPci = (og_func) => {
const CmdSndPush = (_this, dest, cmdtype, idk, cmdlen) => {
console.log("CmdSndPush", _this, dest.toString(16), cmdtype.toString(16), idk, cmdlen);
console.log("CmdSndPushPre", _this, dest.toString(16), cmdtype.toString(16), idk, cmdlen);
// CmdSndPush 0x1020 ret: 172
// CmdSndPush 0x1040 ret: 92
// CmdSndPush 0x50ff ret: 564
// CmdSndPush 0x1008 ret: 12
//
if (cmdtype == 0x1040) return 92; // mask
if (cmdtype == 0x1020) return 172; // mask
if (cmdtype == 0x50ff) return 564; // mask
// if (cmdtype == 0x1008) return 12; // battery
//if (cmdtype == 0x1020) return 172; // login
// maybe these brick it
//if (cmdtype == 0x1040) return 92; // mask
//if (cmdtype == 0x50ff) return 564; // mask
//if (cmdtype == 0x1008) return 12; // battery + status online?
//// new
////if (cmdtype == 0x6003) return 12; // wifilist
//if (cmdtype == 0x6002) return 12; // wifisettings
//if (cmdtype == 0x1031) return 44; // "open settings panel" ??
//if (cmdtype == 0x1032) return 12; //idk
//// mb reboot
//if (cmdtype == 0x2005) return 20; //idk
let ret = og_func(_this, dest, cmdtype, idk, cmdlen);
console.log(`CmdSndPush 0x${cmdtype.toString(16)} ret: ${ret}`);
@@ -225,19 +235,23 @@ const dbg__ZN12CPPPPChannel10CmdSndPushEiiPci = (og_func) => {
return CmdSndPush;
};
const dbg__Z6NetCmdP7_JNIEnvPciiP8_jobject = (og_func) => {
// "pointer", "pointer", "uint32", "uint32", "pointer"
const NetCmd = (java_class, p2pid, sit, cmd, java_param) => {
console.log("NetCmd", java_class, p2pid.readCString(), sit, cmd.toString(16), java_param);
// if (cmd == 0x0000) return 0;
let ret = og_func(java_class, p2pid, sit, cmd, java_param);
console.log(`NetCmd 0x${cmd.toString(16)} ret: ${ret}`);
return ret;
};
return NetCmd;
};
const dbg__Z9SystemCmdP7_JNIEnvPciiP8_jobject = (og_func) => {
// "pointer", "pointer", "uint32", "uint32", "pointer"
const SystemCmd = (java_class, p2pid, sit, cmd, java_param) => {
console.log("SystemCmd", java_class, p2pid.readCString(), sit, cmd.toString(16), java_param);
if (cmd == 0x3018) return 20; // mask
if (cmd == 0x3019) return 12; // mask
if (cmd == 0x3005) return 12; // mask
if (cmd == 0x3026) return 0; // mask
if (cmd == 0x3001) return 12;
if (cmd == 0x3003) return 12;
// if (cmd == 0x3011) return 272; // this is STOP !!
// if (cmd == 0x3010) return 272; // borks
let ret = og_func(java_class, p2pid, sit, cmd, java_param);
console.log(`SystemCmd 0x${cmd.toString(16)} ret: ${ret}`);
return ret;
@@ -248,12 +262,6 @@ const dbg__Z5AvCmdP7_JNIEnvPciiP8_jobject = (og_func) => {
// "pointer", "pointer", "uint32", "uint32", "pointer"
const AvCmd = (java_class, p2pid, sit, cmd, java_param) => {
console.log("AvCmd", java_class, p2pid.readCString(), sit, cmd.toString(16), java_param);
if (cmd == 0x3018) return 20; // mask
if (cmd == 0x3019) return 12; // mask
if (cmd == 0x3005) return 12; // mask
if (cmd == 0x3026) return 0; // mask
if (cmd == 0x3001) return 12;
if (cmd == 0x3003) return 12;
// if (cmd == 0x3011) return 272; // this is STOP !!
// if (cmd == 0x3010) return 272; // borks
@@ -379,6 +387,7 @@ const replace_func = (stub, ret, args) => {
// CSession_CtrlPkt_Proc(struct, *cmd) == control?
export const replaceFunctions = () => {
const replacements = [
/*
[create_P2pAlive, "uint8", ["pointer"]],
[create_P2pAliveAck, "uint8", ["pointer"]],
[create_LanSearch, "uint8", ["pointer"]],
@@ -398,6 +407,8 @@ export const replaceFunctions = () => {
[dbg_pack_ClntPkt, "uint32", ["uint32", "pointer", "pointer"]],
[dbg__Z5AvCmdP7_JNIEnvPciiP8_jobject, "uint32", ["pointer", "pointer", "uint32", "uint32", "pointer"]],
[dbg__Z9SystemCmdP7_JNIEnvPciiP8_jobject, "uint32", ["pointer", "pointer", "uint32", "uint32", "pointer"]],
*/
[dbg__Z6NetCmdP7_JNIEnvPciiP8_jobject, "uint32", ["pointer", "pointer", "uint32", "uint32", "pointer"]],
[dbg__ZN12CPPPPChannel10CmdSndPushEiiPci, "uint64", ["pointer", "uint32", "uint32", "pointer", "uint32"]],
];