Last edit by timschu at 24 Jul 2022, 10:11 AM

Last edit by shenron at 26 Oct 2022, 04:35 PM

// Contents will be written to the editor buffer
{$ READ_TO_EDITOR}
begin
    blocks:=$10000;                        // 64K blocks
    block_sz:=4;                           // each block is 4 bytes
    block:=0;                              // read block address
    address:=0;                            // Output buffer position
    readBuf:=CreateByteArray(block_sz);
    OutBuf:=CreateByteArray(blocks*block_sz);
    LogPrint('--------------------------------------------------------------------------------------------------');
    if not SPIEnterProgMode (_SPI_SPEED_MAX) then
    begin
        LogPrint ('SPI Error!');
        exit;
    end;
    LogPrint('Block Start: ' + inttohex(0,4) + ', End: ' + inttohex(blocks-1,4));
    LogPrint('Reading...');
    while address < (blocks*block_sz) do
    begin
        if (block and $FFF)=0 then
            LogPrint('BLOCK: ' + inttohex(block,4));
        SPIWrite (0, 3, $22, (block shr 8), block);
        SPIRead(1, block_sz, readBuf);
        for i:=0 to (block_sz-1) do
            SetArrayItem(OutBuf, address+i, GetArrayItem(readBuf, i));
        Inc(block, 1);
        Inc(address, block_sz);
    end;
    ReadToEditor((blocks*block_sz), 0, OutBuf);
    SPIExitProgMode();
    LogPrint('Success!');
    LogPrint('--------------------------------------------------------------------------------------------------');
end

// You must open a file in the editor before writing!
{$ WRITE_FROM_EDITOR}
begin
    blocks:=$10000;                        // 64K blocks
    block_sz:=4;                           // each block is 4 bytes
    block:=0;                              // write block address
    address:=0;                            // Input buffer position
    stop_on_error:=0;                      // Choose whether to stop on first error
    verify:=1;                             // Choose whether to verify
    error:=0;
    cs:=0;
    readBuf:=CreateByteArray(block_sz*4);
    writeBuf:=CreateByteArray(blocks*block_sz);
    WriteFromEditor(blocks*block_sz, 0, writeBuf);
    LogPrint('--------------------------------------------------------------------------------------------------');
    if not SPIEnterProgMode (_SPI_SPEED_MAX) then
    begin
        LogPrint ('SPI Error!');
        exit;
    end;
    LogPrint ('Erasing chip...');
    SPIWrite (1, 3, $31, $02, $A5);    // Unlock flash
    SPIWrite (1, 3, $31, $03, $C3);
    SPIWrite (1, 1, $25);
    LogPrint ('Wait 100ms...');
    Delay (100);
    LogPrint('Block Start: ' + inttohex(0,4) + ', End: ' + inttohex(blocks-1,4));
    LogPrint('Writing...');
    while address < (blocks*block_sz) do
    begin
        if (block and $FFF)=0 then
            LogPrint('BLOCK: ' + inttohex(block,4));

        SPIWrite (1, 7, $21, (block shr 8), block,   // Write 4 bytes
            GetArrayItem(writeBuf, address), GetArrayItem(writeBuf, address+1),
            GetArrayItem(writeBuf, address+2), GetArrayItem(writeBuf, address+3));
        if(verify) then
        begin
            SPIWrite (0, 3, $22, (block shr 8), block); // Read back 4 bytes
            SPIRead(1, block_sz, readBuf);
            for i:=0 to (block_sz-1) do                 // Verify what we just sent
            begin
                if not (GetArrayItem(readBuf, i) = GetArrayItem(writeBuf, address+i)) then
                begin
                    LogPrint('ERROR at address: ' + inttohex(address+i,4) +
                        ', Written: ' + inttohex(GetArrayItem(writeBuf, address+i),2) +
                        ', Read: ' + inttohex(GetArrayItem(readBuf, i),2));
                    if (stop_on_error) then
                    begin
                        error:=1;
                        break;
                    end;
                end;
            end;
        end;
        if error then break;
        Inc(block, 1);
        Inc(address, block_sz);
    end;                                                                          
    SPIWrite (1, 3, $31, $02, $00);    // Lock flash
    SPIWrite (1, 3, $31, $03, $00); 
    SPIExitProgMode();
    if error then LogPrint('Error!')
    else LogPrint('Success!');
    LogPrint('--------------------------------------------------------------------------------------------------');
end

// Verify contents. You must first open a file in the editor!
{$ VERIFY}
begin
    blocks:=$10000;                        // 64K blocks
    block_sz:=4;                           // each block is 4 bytes
    block:=0;                              // write block address
    address:=0;                            // Input buffer position
    stop_on_error:=0;                      // Choose whether to stop on first error
    error:=0;
    readBuf:=CreateByteArray(block_sz);
    editBuf:=CreateByteArray(blocks*block_sz);
    WriteFromEditor(blocks*block_sz, 0, editBuf); 
    LogPrint('--------------------------------------------------------------------------------------------------');
    if not SPIEnterProgMode (_SPI_SPEED_MAX) then
    begin
        LogPrint ('SPI Error!');
        exit;
    end;
    LogPrint('Block Start: ' + inttohex(0,4) + ', End: ' + inttohex(blocks-1,4));
    LogPrint('Verifying...');
    while address < (blocks*block_sz) do
    begin
        if (block and $FFF)=0 then
            LogPrint('BLOCK: ' + inttohex(block,4));
        SPIWrite (0, 3, $22, (block shr 8), block);
        SPIRead(1, block_sz, readBuf);
        for i:=0 to (block_sz-1) do
        begin
            if not (GetArrayItem(readBuf, i) = GetArrayItem(editBuf, address+i)) then
            begin
                if (stop_on_error) then
                begin
                    error:=1;
                    break;
                end;
            end;
        end;
        if error then break;
        Inc(block, 1);
        Inc(address, block_sz);
    end;
    SPIExitProgMode();
    if error then LogPrint('Error!')
    else LogPrint('Success!');
    LogPrint('--------------------------------------------------------------------------------------------------');
end

// Erases the entire chip
{$ ERASE_CHIP}
begin                                             
    LogPrint('--------------------------------------------------------------------------------------------------');
    if not SPIEnterProgMode (_SPI_SPEED_MAX) then
    begin
        LogPrint ('SPI Error!');
        exit;
    end;
    LogPrint ('Erasing chip...');
    SPIWrite (1, 3, $31, $02, $A5);
    SPIWrite (1, 3, $31, $03, $C3);
    SPIWrite (1, 1, $25);
    LogPrint ('Wait 200ms...');
    Delay (200);
    SPIWrite (1, 3, $31, $02, $00);
    SPIWrite (1, 3, $31, $03, $00);
    LogPrint('Run a blank check if you want to ensure correct erase operation!');
    LogPrint('Success!');   
    LogPrint('--------------------------------------------------------------------------------------------------');
end

// Verify contents. You must first open a file in the editor!
{$ BLANK_CHECK}
begin
    blocks:=$10000;                        // 64K blocks
    block_sz:=4;                           // each block is 4 bytes
    block:=0;                              // write block address
    address:=0;                            // Input buffer position
    stop_on_error:=0;                      // Choose whether to stop on first error
    error:=0;
    readBuf:=CreateByteArray(block_sz);            
    LogPrint('--------------------------------------------------------------------------------------------------');
    if not SPIEnterProgMode (_SPI_SPEED_MAX) then
    begin
        LogPrint ('SPI Error!');
        exit;
    end;
    LogPrint('Block Start: ' + inttohex(0,4) + ', End: ' + inttohex(blocks-1,4));
    LogPrint('Performing blank check...');
    while address < (blocks*block_sz) do
    begin
        if (block and $FFF)=0 then
            LogPrint('BLOCK: ' + inttohex(block,4));
        SPIWrite (0, 3, $22, (block shr 8), block);
        SPIRead(1, block_sz, readBuf);
        for i:=0 to (block_sz-1) do
        begin
            if not (GetArrayItem(readBuf, i) = $FF) then
            begin
                LogPrint('Blank check failed at address: ' + inttohex(address+i,4) +
                    ', Read: ' + inttohex(GetArrayItem(readBuf, i),2));
                if (stop_on_error) then
                begin
                    error:=1;
                    break;
                end;
            end;
        end;
        if error then break;
        Inc(block, 1);
        Inc(address, block_sz);
    end;
    SPIExitProgMode();
    if error then LogPrint('Error!')
    else LogPrint('Success!');    
    LogPrint('--------------------------------------------------------------------------------------------------');
end                                                        

Last edit by davidalfa at 27 Dec 2022, 01:23 PM

00000000: 18F0 9FE5 18F0 9FE5 18F0 9FE5 18F0 9FE5  ................
00000010: 18F0 9FE5 00A0 E118 18F0 9FE5 18F0 9FE5  ................

ar -x BK3231S_LIB.lib

     97K feb 19 13:24 bt_addr_sync.o
     91K feb 19 13:24 bt_fhs_impl.o
     335K feb 19 13:24 bt_init.o
     339K feb 19 13:24 bt_mini_sched.o
     317K feb 19 13:24 bt_pump.o
     365K feb 19 13:24 bt_tester.o
     325K feb 19 13:24 bt_test.o
     247K feb 19 13:24 bt_timer.o
     4,5K feb 19 13:24 devicebtj_adapter.o
     183K feb 19 13:24 devicebtj_debuger.o
     194K feb 19 13:24 devicebtj_endians.o
     186K feb 19 13:24 devicebtj_fcs.o
     4,4K feb 19 13:24 devicebtj.o
     209K feb 19 13:24 devicebtj_stack_hci_cmd.o
     228K feb 19 13:24 devicebtj_stack_hci_evt.o
     194K feb 19 13:24 devicebtj_stack_hid.o
     213K feb 19 13:24 devicebtj_stack_l2c.o
     213K feb 19 13:24 devicebtj_stack_rfc.o
     189K feb 19 13:24 devicebtj_stack_sdpdb_parser.o
     197K feb 19 13:24 devicebtj_stack_sdp.o
     185K feb 19 13:24 devicebtj_utils_key.o
     187K feb 19 13:24 devicebtj_utils.o
     314K feb 19 13:24 dl_dev_impl.o
     406K feb 19 13:24 hc_cmd_disp.o
     353K feb 19 13:24 hc_event_gen.o
     336K feb 19 13:24 hc_flow_control.o
     90K feb 19 13:24 hci_generic.o
     91K feb 19 13:24 hci_params_impl.o
     239K feb 19 13:24 hw_delay.o
     91K feb 19 13:24 hw_lc_impl.o
     306K feb 19 13:24 hw_lc.o
     227K feb 19 13:24 hw_pta.o
     574K feb 19 13:24 lc_interface.o
     309K feb 19 13:24 lc_log.o
     318K feb 19 13:24 lmp_acl_connection.o
     327K feb 19 13:24 lmp_acl_container.o
     384K feb 19 13:24 lmp_afh.o
     477K feb 19 13:24 lmp_ch.o
     343K feb 19 13:24 lmp_cmd_disp.o
     327K feb 19 13:24 lmp_config.o
     313K feb 19 13:24 lmp_con_filter.o
     367K feb 19 13:24 lmp_ecc.o
     338K feb 19 13:24 lmp_encode_pdu.o
     314K feb 19 13:24 lmp_init.o
     353K feb 19 13:24 lmp_inquiry.o
     354K feb 19 13:24 lmp_link_control_protocol.o
     318K feb 19 13:24 lmp_link_key_db.o
     534K feb 19 13:24 lmp_link_policy.o
     442K feb 19 13:24 lmp_link_policy_protocol.o
     91K feb 19 13:24 lmp_link_power_control.o
     479K feb 19 13:24 lmp_link_qos.o
     365K feb 19 13:24 lmp_scan.o
     91K feb 19 13:24 lmp_sco_container.o
     378K feb 19 13:24 lmp_sec_core.o
     140K feb 19 13:24 lmp_sec_engine.o
     396K feb 19 13:24 lmp_sec_peer.o
     348K feb 19 13:24 lmp_sec_upper.o
     146K feb 19 13:24 lmp_ssp_engine.o
     407K feb 19 13:24 lmp_ssp.o
     325K feb 19 13:24 lmp_timer.o
     130K feb 19 13:24 lmp_utils.o
     429K feb 19 13:24 lslc_access.o
     319K feb 19 13:24 lslc_afh.o
     350K feb 19 13:24 lslc_assmnt.o
     293K feb 19 13:24 lslc_class.o
     235K feb 19 13:24 lslc_clk.o
     331K feb 19 13:24 lslc_freq.o
     263K feb 19 13:24 lslc_hop.o
     309K feb 19 13:24 lslc_irq.o
     364K feb 19 13:24 lslc_pkt.o
     370K feb 19 13:24 lslc_slot.o
     302K feb 19 13:24 lslc_stat.o
     184K feb 19 13:24 sys_atomic.o
     90K feb 19 13:24 sys_config_impl.o
     104K feb 19 13:24 sys_config.o
     99K feb 19 13:24 sys_rand_num_gen.o
     328K feb 19 13:24 tc_cmd_disp.o
     321K feb 19 13:24 tc_event_gen.o
     513K feb 19 13:24 tc_interface.o
     90K feb 19 13:24 tra_combined.o
     342K feb 19 13:24 tra_hcit.o
     352K feb 19 13:24 tra_queue.o
     270K feb 19 13:24 tra_uart.o
     150K feb 19 13:24 tra_usb.o
     351K feb 19 13:24 uslc_chan_ctrl.o
     325K feb 19 13:24 uslc_inquiry.o
     333K feb 19 13:24 uslc_inquiryscan.o
     375K feb 19 13:24 uslc_master_slave_switch.o
     337K feb 19 13:24 uslc_page.o
     363K feb 19 13:24 uslc_pagescan.o
     319K feb 19 13:24 uslc_park_master.o
     316K feb 19 13:24 uslc_park_slave.o
     347K feb 19 13:24 uslc_return_to_piconet.o
     354K feb 19 13:24 uslc_scheduler.o
     433K feb 19 13:24 uslc_sleep.o
     91K feb 19 13:24 uslc_switch_piconet.o
     347K feb 19 13:24 uslc_testmode.o

# by mr_woggle - 2024
# free for all :D
import os

POLY = 0x8005
START_VAL = 0xFFFF

IN_FILE = "test.bin"
OUT_FILE = "test_encrypted.bin"

def crc16(data, poly, init_value=0):
    crc = init_value
    for byte in data:
        crc ^= byte << 8
        for _ in range(8):
            if crc & 0x8000:
                crc = (crc << 1) ^ poly
            else:
                crc <<= 1
    return crc & 0xFFFF

test_message = bytearray(b'\x00' * 3 + b'\x02' + b'\x00' * 28)  # test message, ignore

def add_crc16(input_file, output_file):
    val = START_VAL
    with open(input_file, 'rb') as infile, open(output_file, 'wb') as outfile:
        chunk_size = 32
        while True:
            chunk = infile.read(chunk_size)
            if not chunk:
                break
            if len(chunk) < chunk_size:
                chunk += b'\xFF' * (chunk_size - len(chunk))
                chunk = chunk[:-1] + b'\xFF' # last byte also 0xFF?
            outfile.write(chunk)
            out = crc16(chunk, POLY, val)
            crc_bytes = out.to_bytes(length=2, byteorder='big')
            outfile.write(crc_bytes)  # Add two bytes (16-bit crc)

add_crc16(IN_FILE, OUT_FILE)
print("size after adding crc: ", hex(os.path.getsize(OUT_FILE)))

#crc = crc16(message, POLY, START_VAL)
#print("crc value:", hex(crc))

Last edit by mr_woggle at 23 Feb 2024, 12:43 AM

$ dd if=/dev/zero of=zero.bin bs=1 count=32
$ wine encrypt.exe zero.bin 
$ wine encrypt.exe zero.bin zero_crc.bin
$ ./crchack -v -w16 -p 0x8005 -i 0xFFFF zero.bin
len(msg) = 32 bytes = 256 bits
CRC(msg) = 8029
8029