]> git.zerfleddert.de Git - proxmark3-svn/blame - armsrc/apps.h
Experimenting with hacking iclass
[proxmark3-svn] / armsrc / apps.h
CommitLineData
15c4dc5a 1//-----------------------------------------------------------------------------
15c4dc5a 2// Jonathan Westhues, Aug 2005
cee5a30d 3// Gerhard de Koning Gans, April 2008, May 2011
bd20f8f4 4//
5// This code is licensed to you under the terms of the GNU GPL, version 2 or,
6// at your option, any later version. See the LICENSE.txt file for the text of
7// the license.
8//-----------------------------------------------------------------------------
9// Definitions internal to the app source.
15c4dc5a 10//-----------------------------------------------------------------------------
11
12#ifndef __APPS_H
13#define __APPS_H
14
f7e3ed82 15#include <stdint.h>
16#include <stddef.h>
d19929cb 17#include "common.h"
18#include "hitag2.h"
902cb3c0 19#include "mifare.h"
15c4dc5a 20
21// The large multi-purpose buffer, typically used to hold A/D samples,
22// maybe processed in some way.
81cd0474 23uint32_t BigBuf[10000];
24// BIG CHANGE - UNDERSTAND THIS BEFORE WE COMMIT
25#define TRACE_OFFSET 0
26#define TRACE_SIZE 3000
27#define RECV_CMD_OFFSET 3032
28#define RECV_CMD_SIZE 64
29#define RECV_RES_OFFSET 3096
30#define RECV_RES_SIZE 64
31#define DMA_BUFFER_OFFSET 3160
32#define DMA_BUFFER_SIZE 4096
33#define FREE_BUFFER_OFFSET 7256
34#define FREE_BUFFER_SIZE 2744
35
1e262141 36extern const uint8_t OddByteParity[256];
37extern uint8_t *trace; // = (uint8_t *) BigBuf;
38extern int traceLen; // = 0;
39extern int rsamples; // = 0;
40extern int tracing; // = TRUE;
41extern uint8_t trigger;
15c4dc5a 42
6c1e2d95 43// This may be used (sparingly) to declare a function to be copied to
44// and executed from RAM
45#define RAMFUNC __attribute((long_call, section(".ramfunc")))
46
15c4dc5a 47/// appmain.h
48void ReadMem(int addr);
49void __attribute__((noreturn)) AppMain(void);
50void SamyRun(void);
51//void DbpIntegers(int a, int b, int c);
52void DbpString(char *str);
53void Dbprintf(const char *fmt, ...);
d19929cb 54void Dbhexdump(int len, uint8_t *d, bool bAsci);
15c4dc5a 55
9ca155ba
M
56int AvgAdc(int ch);
57
15c4dc5a 58void ToSendStuffBit(int b);
59void ToSendReset(void);
60void ListenReaderField(int limit);
f7e3ed82 61void AcquireRawAdcSamples125k(int at134khz);
15c4dc5a 62void DoAcquisition125k(void);
63extern int ToSendMax;
f7e3ed82 64extern uint8_t ToSend[];
65extern uint32_t BigBuf[];
15c4dc5a 66
67/// fpga.h
f7e3ed82 68void FpgaSendCommand(uint16_t cmd, uint16_t v);
69void FpgaWriteConfWord(uint8_t v);
15c4dc5a 70void FpgaDownloadAndGo(void);
71void FpgaGatherVersion(char *dst, int len);
72void FpgaSetupSsc(void);
73void SetupSpi(int mode);
d19929cb 74bool FpgaSetupSscDma(uint8_t *buf, int len);
75#define FpgaDisableSscDma(void) AT91C_BASE_PDC_SSC->PDC_PTCR = AT91C_PDC_RXTDIS;
76#define FpgaEnableSscDma(void) AT91C_BASE_PDC_SSC->PDC_PTCR = AT91C_PDC_RXTEN;
f7e3ed82 77void SetAdcMuxFor(uint32_t whichGpio);
15c4dc5a 78
79// Definitions for the FPGA commands.
80#define FPGA_CMD_SET_CONFREG (1<<12)
81#define FPGA_CMD_SET_DIVISOR (2<<12)
82// Definitions for the FPGA configuration word.
83#define FPGA_MAJOR_MODE_LF_READER (0<<5)
d19929cb 84#define FPGA_MAJOR_MODE_LF_EDGE_DETECT (1<<5)
15c4dc5a 85#define FPGA_MAJOR_MODE_HF_READER_TX (2<<5)
86#define FPGA_MAJOR_MODE_HF_READER_RX_XCORR (3<<5)
87#define FPGA_MAJOR_MODE_HF_SIMULATOR (4<<5)
88#define FPGA_MAJOR_MODE_HF_ISO14443A (5<<5)
89#define FPGA_MAJOR_MODE_LF_PASSTHRU (6<<5)
90#define FPGA_MAJOR_MODE_OFF (7<<5)
d19929cb 91// Options for LF_EDGE_DETECT
92#define FPGA_LF_EDGE_DETECT_READER_FIELD (1<<0)
15c4dc5a 93// Options for the HF reader, tx to tag
94#define FPGA_HF_READER_TX_SHALLOW_MOD (1<<0)
95// Options for the HF reader, correlating against rx from tag
96#define FPGA_HF_READER_RX_XCORR_848_KHZ (1<<0)
97#define FPGA_HF_READER_RX_XCORR_SNOOP (1<<1)
d19929cb 98#define FPGA_HF_READER_RX_XCORR_QUARTER_FREQ (1<<2)
15c4dc5a 99// Options for the HF simulated tag, how to modulate
100#define FPGA_HF_SIMULATOR_NO_MODULATION (0<<0)
101#define FPGA_HF_SIMULATOR_MODULATE_BPSK (1<<0)
102#define FPGA_HF_SIMULATOR_MODULATE_212K (2<<0)
103// Options for ISO14443A
104#define FPGA_HF_ISO14443A_SNIFFER (0<<0)
105#define FPGA_HF_ISO14443A_TAGSIM_LISTEN (1<<0)
106#define FPGA_HF_ISO14443A_TAGSIM_MOD (2<<0)
107#define FPGA_HF_ISO14443A_READER_LISTEN (3<<0)
108#define FPGA_HF_ISO14443A_READER_MOD (4<<0)
109
110/// lfops.h
bf7163bd 111void AcquireRawAdcSamples125k(int divisor);
f7e3ed82 112void ModThenAcquireRawAdcSamples125k(int delay_off,int period_0,int period_1,uint8_t *command);
15c4dc5a 113void ReadTItag(void);
f7e3ed82 114void WriteTItag(uint32_t idhi, uint32_t idlo, uint16_t crc);
15c4dc5a 115void AcquireTiType(void);
116void AcquireRawBitsTI(void);
117void SimulateTagLowFrequency(int period, int gap, int ledcontrol);
118void CmdHIDsimTAG(int hi, int lo, int ledcontrol);
119void CmdHIDdemodFSK(int findone, int *high, int *low, int ledcontrol);
a1f3bb12 120void CmdIOdemodFSK(int findone, int *high, int *low, int ledcontrol);
121void CopyIOtoT55x7(uint32_t hi, uint32_t lo, uint8_t longFMT); // Clone an ioProx card to T5557/T5567
15c4dc5a 122void SimulateTagLowFrequencyBidir(int divisor, int max_bitlen);
54a942b0 123void CopyHIDtoT55x7(uint32_t hi2, uint32_t hi, uint32_t lo, uint8_t longFMT); // Clone an HID card to T5557/T5567
2d4eae76 124void WriteEM410x(uint32_t card, uint32_t id_hi, uint32_t id_lo);
2414f978 125void CopyIndala64toT55x7(int hi, int lo); // Clone Indala 64-bit tag by UID to T55x7
126void CopyIndala224toT55x7(int uid1, int uid2, int uid3, int uid4, int uid5, int uid6, int uid7); // Clone Indala 224-bit tag by UID to T55x7
54a942b0 127void T55xxWriteBlock(uint32_t Data, uint32_t Block, uint32_t Pwd, uint8_t PwdMode);
128void T55xxReadBlock(uint32_t Block, uint32_t Pwd, uint8_t PwdMode );
129void T55xxReadTrace(void);
130int DemodPCF7931(uint8_t **outBlocks);
131int IsBlock0PCF7931(uint8_t *Block);
132int IsBlock1PCF7931(uint8_t *Block);
133void ReadPCF7931();
134void EM4xReadWord(uint8_t Address, uint32_t Pwd, uint8_t PwdMode);
135void EM4xWriteWord(uint32_t Data, uint8_t Address, uint32_t Pwd, uint8_t PwdMode);
15c4dc5a 136
137/// iso14443.h
138void SimulateIso14443Tag(void);
f7e3ed82 139void AcquireRawAdcSamplesIso14443(uint32_t parameter);
7cf3ef20 140void ReadSTMemoryIso14443(uint32_t);
0f7f9edc 141void RAMFUNC SnoopIso14443(void);
7cf3ef20 142void SendRawCommand14443B(uint32_t, uint32_t, uint8_t, uint8_t[]);
15c4dc5a 143
144/// iso14443a.h
5cd9ec01 145void RAMFUNC SnoopIso14443a(uint8_t param);
28afbd2b 146void SimulateIso14443aTag(int tagType, int uid_1st, int uid_2nd, byte_t* data);
902cb3c0 147void ReaderIso14443a(UsbCommand * c);
1e262141 148// Also used in iclass.c
7bc95e2e 149bool RAMFUNC LogTrace(const uint8_t * btBytes, uint8_t iLen, uint32_t iSamples, uint32_t dwParity, bool bReader);
1e262141 150uint32_t GetParity(const uint8_t * pbtCmd, int iLen);
902cb3c0 151void iso14a_set_trigger(bool enable);
152void iso14a_clear_trace();
153void iso14a_set_tracing(bool enable);
5cd9ec01 154void RAMFUNC SniffMifare(uint8_t param);
8556b852 155
5acd09bd 156/// epa.h
902cb3c0 157void EPA_PACE_Collect_Nonce(UsbCommand * c);
5acd09bd 158
8556b852 159// mifarecmd.h
1c611bbd 160void ReaderMifare(bool first_try);
9492e0b0 161int32_t dist_nt(uint32_t nt1, uint32_t nt2);
20f9a2a1 162void MifareReadBlock(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *data);
981bd429 163void MifareUReadBlock(uint8_t arg0,uint8_t *datain);
164void MifareUReadCard(uint8_t arg0,uint8_t *datain);
20f9a2a1
M
165void MifareReadSector(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain);
166void MifareWriteBlock(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain);
981bd429 167void MifareUWriteBlock(uint8_t arg0,uint8_t *datain);
168void MifareUWriteBlock_Special(uint8_t arg0,uint8_t *datain);
f397b5cc
M
169void MifareNested(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
170void MifareChkKeys(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain);
20f9a2a1 171void Mifare1ksim(uint8_t arg0, uint8_t arg1, uint8_t arg2, uint8_t *datain);
8556b852
M
172void MifareSetDbgLvl(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
173void MifareEMemClr(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
174void MifareEMemSet(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
175void MifareEMemGet(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
176void MifareECardLoad(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
0675f200 177void MifareCSetBlock(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain); // Work with "magic Chinese" card
545a1f38 178void MifareCGetBlock(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
15c4dc5a 179
180/// iso15693.h
9455b51c 181void RecordRawAdcSamplesIso15693(void);
15c4dc5a 182void AcquireRawAdcSamplesIso15693(void);
f7e3ed82 183void ReaderIso15693(uint32_t parameter); // Simulate an ISO15693 reader - greg
184void SimTagIso15693(uint32_t parameter); // simulate an ISO15693 tag - greg
9455b51c 185void BruteforceIso15693Afi(uint32_t speed); // find an AFI of a tag - atrox
186void DirectTag15693Command(uint32_t datalen,uint32_t speed, uint32_t recv, uint8_t data[]); // send arbitrary commands from CLI - atrox
187void SetDebugIso15693(uint32_t flag);
15c4dc5a 188
cee5a30d 189/// iclass.h
190void RAMFUNC SnoopIClass(void);
ff7bb4ef 191void SimulateIClass(uint32_t arg0, uint32_t arg1, uint32_t arg2, uint8_t *datain);
1e262141 192void ReaderIClass(uint8_t arg0);
ff7bb4ef 193void doIClassSimulation(uint8_t csn[], int breakAfterMacReceived);
d19929cb 194// hitag2.h
195void SnoopHitag(uint32_t type);
196void SimulateHitagTag(bool tag_mem_supplied, byte_t* data);
197void ReaderHitag(hitag_function htf, hitag_data* htd);
198
6e82300d 199// cmd.h
200bool cmd_receive(UsbCommand* cmd);
79a73ab2 201bool cmd_send(uint32_t cmd, uint32_t arg0, uint32_t arg1, uint32_t arg2, void* data, size_t len);
6e82300d 202
15c4dc5a 203/// util.h
15c4dc5a 204
205#endif
Impressum, Datenschutz