]> git.zerfleddert.de Git - proxmark3-svn/blame - include/usb_cmd.h
CHG: 'lf cotag demod' - now finds FC/CN Thanks to @marshmellow42
[proxmark3-svn] / include / usb_cmd.h
CommitLineData
e30c654b 1//-----------------------------------------------------------------------------
e30c654b 2// Jonathan Westhues, Mar 2006
3// Edits by Gerhard de Koning Gans, Sep 2007
bd20f8f4 4//
5// This code is licensed to you under the terms of the GNU GPL, version 2 or,
6// at your option, any later version. See the LICENSE.txt file for the text of
7// the license.
8//-----------------------------------------------------------------------------
9// Definitions for all the types of commands that may be sent over USB; our
10// own protocol.
e30c654b 11//-----------------------------------------------------------------------------
12
13#ifndef __USB_CMD_H
14#define __USB_CMD_H
793c3012 15
e30c654b 16#ifdef _MSC_VER
048324d6 17 typedef DWORD uint32_t;
18 typedef BYTE uint8_t;
19 #define PACKED
20 // stuff
e30c654b 21#else
048324d6 22 #include <stdint.h>
23 #include <stdbool.h>
24 #define PACKED __attribute__((packed))
e30c654b 25#endif
26
902cb3c0 27#define USB_CMD_DATA_SIZE 512
28
29typedef struct {
9440213d 30 uint64_t cmd;
80501bad 31 uint64_t arg[3];
902cb3c0 32 union {
9440213d 33 uint8_t asBytes[USB_CMD_DATA_SIZE];
902cb3c0 34 uint32_t asDwords[USB_CMD_DATA_SIZE/4];
35 } d;
e30c654b 36} PACKED UsbCommand;
31abe49f
MHS
37// A struct used to send sample-configs over USB
38typedef struct{
39 uint8_t decimation;
40 uint8_t bits_per_sample;
41 bool averaging;
42 int divisor;
43 int trigger_threshold;
44} sample_config;
e30c654b 45
46// For the bootloader
3ebf4b3d 47#define CMD_DEVICE_INFO 0x0000
48#define CMD_SETUP_WRITE 0x0001
49#define CMD_FINISH_WRITE 0x0003
50#define CMD_HARDWARE_RESET 0x0004
51#define CMD_START_FLASH 0x0005
52#define CMD_NACK 0x00fe
53#define CMD_ACK 0x00ff
e30c654b 54
55// For general mucking around
3ebf4b3d 56#define CMD_DEBUG_PRINT_STRING 0x0100
57#define CMD_DEBUG_PRINT_INTEGERS 0x0101
58#define CMD_DEBUG_PRINT_BYTES 0x0102
59#define CMD_LCD_RESET 0x0103
60#define CMD_LCD 0x0104
61#define CMD_BUFF_CLEAR 0x0105
62#define CMD_READ_MEM 0x0106
63#define CMD_VERSION 0x0107
7838f4be 64#define CMD_STATUS 0x0108
65#define CMD_PING 0x0109
e30c654b 66
aaa1a9a2 67#define CMD_DOWNLOAD_EML_BIGBUF 0x0110
68#define CMD_DOWNLOADED_EML_BIGBUF 0x0111
69
e30c654b 70// For low-frequency tags
3ebf4b3d 71#define CMD_READ_TI_TYPE 0x0202
72#define CMD_WRITE_TI_TYPE 0x0203
73#define CMD_DOWNLOADED_RAW_BITS_TI_TYPE 0x0204
74#define CMD_ACQUIRE_RAW_ADC_SAMPLES_125K 0x0205
75#define CMD_MOD_THEN_ACQUIRE_RAW_ADC_SAMPLES_125K 0x0206
76#define CMD_DOWNLOAD_RAW_ADC_SAMPLES_125K 0x0207
77#define CMD_DOWNLOADED_RAW_ADC_SAMPLES_125K 0x0208
78#define CMD_DOWNLOADED_SIM_SAMPLES_125K 0x0209
79#define CMD_SIMULATE_TAG_125K 0x020A
80#define CMD_HID_DEMOD_FSK 0x020B
81#define CMD_HID_SIM_TAG 0x020C
82#define CMD_SET_LF_DIVISOR 0x020D
83#define CMD_LF_SIMULATE_BIDIR 0x020E
84#define CMD_SET_ADC_MUX 0x020F
85#define CMD_HID_CLONE_TAG 0x0210
86#define CMD_EM410X_WRITE_TAG 0x0211
87#define CMD_INDALA_CLONE_TAG 0x0212
88// for 224 bits UID
89#define CMD_INDALA_CLONE_TAG_L 0x0213
54a942b0 90#define CMD_T55XX_READ_BLOCK 0x0214
91#define CMD_T55XX_WRITE_BLOCK 0x0215
94422fa2 92#define CMD_T55XX_RESET_READ 0x0216
54a942b0 93#define CMD_PCF7931_READ 0x0217
e98572a1 94#define CMD_PCF7931_WRITE 0x0223
54a942b0 95#define CMD_EM4X_READ_WORD 0x0218
96#define CMD_EM4X_WRITE_WORD 0x0219
a1f3bb12 97#define CMD_IO_DEMOD_FSK 0x021A
98#define CMD_IO_CLONE_TAG 0x021B
abd6112f 99#define CMD_EM410X_DEMOD 0x021c
31abe49f
MHS
100// Sampling configuration for LF reader/snooper
101#define CMD_SET_LF_SAMPLING_CONFIG 0x021d
abd6112f 102#define CMD_FSK_SIM_TAG 0x021E
103#define CMD_ASK_SIM_TAG 0x021F
872e3d4d 104#define CMD_PSK_SIM_TAG 0x0220
db25599d 105#define CMD_AWID_DEMOD_FSK 0x0221
0de8e387 106#define CMD_VIKING_CLONE_TAG 0x0222
9276e859 107#define CMD_T55XX_WAKEUP 0x0224
4653da43 108#define CMD_COTAG 0x0225
6ff6ade2 109
e30c654b 110/* CMD_SET_ADC_MUX: ext1 is 0 for lopkd, 1 for loraw, 2 for hipkd, 3 for hiraw */
111
112// For the 13.56 MHz tags
3ebf4b3d 113#define CMD_ACQUIRE_RAW_ADC_SAMPLES_ISO_15693 0x0300
6fc68747 114#define CMD_READ_SRI_TAG 0x0303
7cf3ef20 115#define CMD_ISO_14443B_COMMAND 0x0305
3ebf4b3d 116#define CMD_READER_ISO_15693 0x0310
117#define CMD_SIMTAG_ISO_15693 0x0311
118#define CMD_RECORD_RAW_ADC_SAMPLES_ISO_15693 0x0312
119#define CMD_ISO_15693_COMMAND 0x0313
120#define CMD_ISO_15693_COMMAND_DONE 0x0314
121#define CMD_ISO_15693_FIND_AFI 0x0315
122#define CMD_ISO_15693_DEBUG 0x0316
b014c96d 123#define CMD_LF_SNOOP_RAW_ADC_SAMPLES 0x0317
d19929cb 124
125// For Hitag2 transponders
126#define CMD_SNOOP_HITAG 0x0370
127#define CMD_SIMULATE_HITAG 0x0371
128#define CMD_READER_HITAG 0x0372
129
0db11b71 130// For HitagS
131#define CMD_TEST_HITAGS_TRACES 0x0367
132#define CMD_SIMULATE_HITAG_S 0x0368
133#define CMD_READ_HITAG_S 0x0373
134#define CMD_WR_HITAG_S 0x0375
135#define CMD_EMU_HITAG_S 0x0376
136
137
22e24700 138#define CMD_SIMULATE_TAG_ISO_14443B 0x0381
139#define CMD_SNOOP_ISO_14443B 0x0382
3ebf4b3d 140#define CMD_SNOOP_ISO_14443a 0x0383
141#define CMD_SIMULATE_TAG_ISO_14443a 0x0384
142#define CMD_READER_ISO_14443a 0x0385
83dad64b 143#define CMD_RAW_WRITER_LEGIC_RF 0x0386
3ebf4b3d 144#define CMD_SIMULATE_TAG_LEGIC_RF 0x0387
145#define CMD_READER_LEGIC_RF 0x0388
146#define CMD_WRITER_LEGIC_RF 0x0389
3e750be3 147
5acd09bd 148#define CMD_EPA_PACE_COLLECT_NONCE 0x038A
d0f3338e 149#define CMD_EPA_PACE_REPLAY 0x038B
3ebf4b3d 150
3e750be3 151#define CMD_LEGIC_INFO 0x03BC
0e8cabed 152#define CMD_LEGIC_ESET 0x03BD
153#define CMD_LEGIC_EGET 0x03BE
3e750be3 154
e98572a1 155#define CMD_ICLASS_READCHECK 0x038F
156#define CMD_ICLASS_CLONE 0x0390
157#define CMD_ICLASS_DUMP 0x0391
3ebf4b3d 158#define CMD_SNOOP_ICLASS 0x0392
159#define CMD_SIMULATE_TAG_ICLASS 0x0393
160#define CMD_READER_ICLASS 0x0394
f168b263 161#define CMD_READER_ICLASS_REPLAY 0x0395
e98572a1 162#define CMD_ICLASS_READBLOCK 0x0396
163#define CMD_ICLASS_WRITEBLOCK 0x0397
7781a656 164#define CMD_ICLASS_EML_MEMSET 0x0398
e98572a1 165#define CMD_ICLASS_AUTHENTICATION 0x0399
e30c654b 166
167// For measurements of the antenna tuning
3ebf4b3d 168#define CMD_MEASURE_ANTENNA_TUNING 0x0400
169#define CMD_MEASURE_ANTENNA_TUNING_HF 0x0401
170#define CMD_MEASURED_ANTENNA_TUNING 0x0410
171#define CMD_LISTEN_READER_FIELD 0x0420
e30c654b 172
173// For direct FPGA control
3ebf4b3d 174#define CMD_FPGA_MAJOR_MODE_OFF 0x0500
9ca155ba
M
175
176// For mifare commands
3ebf4b3d 177#define CMD_MIFARE_SET_DBGMODE 0x0600
178#define CMD_MIFARE_EML_MEMCLR 0x0601
179#define CMD_MIFARE_EML_MEMSET 0x0602
180#define CMD_MIFARE_EML_MEMGET 0x0603
181#define CMD_MIFARE_EML_CARDLOAD 0x0604
d52e4e88 182
183// magic chinese card commands
184#define CMD_MIFARE_CSETBLOCK 0x0605
185#define CMD_MIFARE_CGETBLOCK 0x0606
186#define CMD_MIFARE_CIDENT 0x0607
9ca155ba 187
3ebf4b3d 188#define CMD_SIMULATE_MIFARE_CARD 0x0610
9ca155ba 189
3ebf4b3d 190#define CMD_READER_MIFARE 0x0611
191#define CMD_MIFARE_NESTED 0x0612
c188b1b9 192#define CMD_MIFARE_ACQUIRE_ENCRYPTED_NONCES 0x0613
9ca155ba 193
3ebf4b3d 194#define CMD_MIFARE_READBL 0x0620
f168b263 195#define CMD_MIFAREU_READBL 0x0720
3ebf4b3d 196#define CMD_MIFARE_READSC 0x0621
f168b263 197#define CMD_MIFAREU_READCARD 0x0721
3ebf4b3d 198#define CMD_MIFARE_WRITEBL 0x0622
b1329a02 199#define CMD_MIFAREU_WRITEBL 0x0722
200#define CMD_MIFAREU_WRITEBL_COMPAT 0x0723
313ee67e 201
3ebf4b3d 202#define CMD_MIFARE_CHKKEYS 0x0623
e30c654b 203
3ebf4b3d 204#define CMD_MIFARE_SNIFFER 0x0630
f38a1528 205//ultralightC
9d87eb66 206#define CMD_MIFAREUC_AUTH 0x0724
e7e95088 207//0x0725 and 0x0726 no longer used
f168b263 208#define CMD_MIFAREUC_SETPWD 0x0727
e7e95088 209
f38a1528 210// mifare desfire
211#define CMD_MIFARE_DESFIRE_READBL 0x0728
212#define CMD_MIFARE_DESFIRE_WRITEBL 0x0729
213#define CMD_MIFARE_DESFIRE_AUTH1 0x072a
214#define CMD_MIFARE_DESFIRE_AUTH2 0x072b
215#define CMD_MIFARE_DES_READER 0x072c
216#define CMD_MIFARE_DESFIRE_INFO 0x072d
313ee67e 217#define CMD_MIFARE_DESFIRE 0x072e
b62a5a84 218
add0504d 219#define CMD_MIFARE_COLLECT_NONCES 0x072f
220
1d0ccbe0 221#define CMD_HF_SNIFFER 0x0800
222
83dad64b 223// For EMV Commands
224#define CMD_EMV_READ_RECORD 0x0700
225#define CMD_EMV_TRANSACTION 0x0701
226#define CMD_EMV_CLONE 0x0702
227#define CMD_EMV_SIM 0x0703
228#define CMD_EMV_TEST 0x0704
229#define CMD_EMV_FUZZ_RATS 0x0705
230#define CMD_EMV_GET_RANDOM_NUM 0x0706
231#define CMD_EMV_LOAD_VALUE 0x0707
232#define CMD_EMV_DUMP_CARD 0x0708
233
3ebf4b3d 234#define CMD_UNKNOWN 0xFFFF
e30c654b 235
d2f487af 236//Mifare simulation flags
0194ce8f 237#define FLAG_INTERACTIVE 0x01
238#define FLAG_4B_UID_IN_DATA 0x02
239#define FLAG_7B_UID_IN_DATA 0x04
240#define FLAG_10B_UID_IN_DATA 0x08
241#define FLAG_UID_IN_EMUL 0x10
ce211cef 242#define FLAG_NR_AR_ATTACK 0x20
bf5d7992 243//#define FLAG_RANDOM_NONCE 0x40
d2f487af 244
f38a1528 245//Iclass reader flags
246#define FLAG_ICLASS_READER_ONLY_ONCE 0x01
caaf9618
MHS
247#define FLAG_ICLASS_READER_CC 0x02
248#define FLAG_ICLASS_READER_CSN 0x04
249#define FLAG_ICLASS_READER_CONF 0x08
250#define FLAG_ICLASS_READER_AA 0x10
8949bb5d 251#define FLAG_ICLASS_READER_ONE_TRY 0x20
e98572a1 252#define FLAG_ICLASS_READER_CEDITKEY 0x40
caaf9618 253
e30c654b 254// CMD_DEVICE_INFO response packet has flags in arg[0], flag definitions:
255/* Whether a bootloader that understands the common_area is present */
256#define DEVICE_INFO_FLAG_BOOTROM_PRESENT (1<<0)
257
258/* Whether a osimage that understands the common_area is present */
259#define DEVICE_INFO_FLAG_OSIMAGE_PRESENT (1<<1)
260
261/* Set if the bootloader is currently executing */
262#define DEVICE_INFO_FLAG_CURRENT_MODE_BOOTROM (1<<2)
263
264/* Set if the OS is currently executing */
265#define DEVICE_INFO_FLAG_CURRENT_MODE_OS (1<<3)
266
267/* Set if this device understands the extend start flash command */
268#define DEVICE_INFO_FLAG_UNDERSTANDS_START_FLASH (1<<4)
269
270/* CMD_START_FLASH may have three arguments: start of area to flash,
271 end of area to flash, optional magic.
272 The bootrom will not allow to overwrite itself unless this magic
273 is given as third parameter */
274
275#define START_FLASH_MAGIC 0x54494f44 // 'DOIT'
276
277#endif
Impressum, Datenschutz