]> cvs.zerfleddert.de Git - proxmark3-svn/blame - armsrc/appmain.c
fix rare bug in tlv.c (#788)
[proxmark3-svn] / armsrc / appmain.c
CommitLineData
15c4dc5a 1//-----------------------------------------------------------------------------
15c4dc5a 2// Jonathan Westhues, Mar 2006
3// Edits by Gerhard de Koning Gans, Sep 2007 (##)
bd20f8f4 4//
5// This code is licensed to you under the terms of the GNU GPL, version 2 or,
6// at your option, any later version. See the LICENSE.txt file for the text of
7// the license.
8//-----------------------------------------------------------------------------
9// The main application code. This is the first thing called after start.c
10// executes.
15c4dc5a 11//-----------------------------------------------------------------------------
12
b8e461ff 13#include <stdarg.h>
14
902cb3c0 15#include "usb_cdc.h"
16#include "cmd.h"
e30c654b 17#include "proxmark3.h"
15c4dc5a 18#include "apps.h"
472345da 19#include "fpga.h"
f7e3ed82 20#include "util.h"
9ab7a6c7 21#include "printf.h"
22#include "string.h"
15c4dc5a 23#include "legicrf.h"
1b902aa0 24#include "legicrfsim.h"
b8e461ff 25#include "hitag2.h"
26#include "hitagS.h"
d9de20fa 27#include "iso15693.h"
31abe49f 28#include "lfsampling.h"
3000dc4e 29#include "BigBuf.h"
c89274cc 30#include "mifareutil.h"
d10e08ae 31#include "pcf7931.h"
050aa18b 32#include "i2c.h"
15c4dc5a 33#ifdef WITH_LCD
902cb3c0 34 #include "LCD.h"
15c4dc5a 35#endif
43591e64 36
a9104f7e 37static uint32_t hw_capabilities;
15c4dc5a 38
e46fe044 39// Craig Young - 14a stand-alone code
854fdf15 40#ifdef WITH_ISO14443a
e46fe044
CY
41 #include "iso14443a.h"
42#endif
43
15c4dc5a 44//=============================================================================
45// A buffer where we can queue things up to be sent through the FPGA, for
46// any purpose (fake tag, as reader, whatever). We go MSB first, since that
47// is the order in which they go out on the wire.
48//=============================================================================
49
6a1f2d82 50#define TOSEND_BUFFER_SIZE (9*MAX_FRAME_SIZE + 1 + 1 + 2) // 8 data bits and 1 parity bit per payload byte, 1 correction bit, 1 SOC bit, 2 EOC bits
51uint8_t ToSend[TOSEND_BUFFER_SIZE];
15c4dc5a 52int ToSendMax;
53static int ToSendBit;
54struct common_area common_area __attribute__((section(".commonarea")));
55
15c4dc5a 56void ToSendReset(void)
57{
58 ToSendMax = -1;
59 ToSendBit = 8;
60}
61
62void ToSendStuffBit(int b)
63{
64 if(ToSendBit >= 8) {
65 ToSendMax++;
66 ToSend[ToSendMax] = 0;
67 ToSendBit = 0;
68 }
69
70 if(b) {
71 ToSend[ToSendMax] |= (1 << (7 - ToSendBit));
72 }
73
74 ToSendBit++;
75
6a1f2d82 76 if(ToSendMax >= sizeof(ToSend)) {
15c4dc5a 77 ToSendBit = 0;
78 DbpString("ToSendStuffBit overflowed!");
79 }
80}
81
82//=============================================================================
83// Debug print functions, to go out over USB, to the usual PC-side client.
84//=============================================================================
85
86void DbpString(char *str)
87{
9440213d 88 byte_t len = strlen(str);
89 cmd_send(CMD_DEBUG_PRINT_STRING,len,0,0,(byte_t*)str,len);
15c4dc5a 90}
91
92#if 0
93void DbpIntegers(int x1, int x2, int x3)
94{
902cb3c0 95 cmd_send(CMD_DEBUG_PRINT_INTEGERS,x1,x2,x3,0,0);
15c4dc5a 96}
97#endif
98
99void Dbprintf(const char *fmt, ...) {
100// should probably limit size here; oh well, let's just use a big buffer
101 char output_string[128];
102 va_list ap;
103
104 va_start(ap, fmt);
105 kvsprintf(fmt, output_string, 10, ap);
106 va_end(ap);
e30c654b 107
15c4dc5a 108 DbpString(output_string);
109}
110
9455b51c 111// prints HEX & ASCII
d19929cb 112void Dbhexdump(int len, uint8_t *d, bool bAsci) {
9455b51c 113 int l=0,i;
114 char ascii[9];
d19929cb 115
9455b51c 116 while (len>0) {
117 if (len>8) l=8;
118 else l=len;
119
120 memcpy(ascii,d,l);
d19929cb 121 ascii[l]=0;
9455b51c 122
123 // filter safe ascii
d19929cb 124 for (i=0;i<l;i++)
9455b51c 125 if (ascii[i]<32 || ascii[i]>126) ascii[i]='.';
d19929cb 126
127 if (bAsci) {
128 Dbprintf("%-8s %*D",ascii,l,d," ");
129 } else {
130 Dbprintf("%*D",l,d," ");
131 }
132
9455b51c 133 len-=8;
134 d+=8;
135 }
136}
137
15c4dc5a 138//-----------------------------------------------------------------------------
139// Read an ADC channel and block till it completes, then return the result
140// in ADC units (0 to 1023). Also a routine to average 32 samples and
141// return that.
142//-----------------------------------------------------------------------------
143static int ReadAdc(int ch)
2d51da38 144{
3b692427 145 // Note: ADC_MODE_PRESCALE and ADC_MODE_SAMPLE_HOLD_TIME are set to the maximum allowed value.
050aa18b 146 // AMPL_HI is a high impedance (10MOhm || 1MOhm) output, the input capacitance of the ADC is 12pF (typical). This results in a time constant
9b32625c 147 // of RC = (0.91MOhm) * 12pF = 10.9us. Even after the maximum configurable sample&hold time of 40us the input capacitor will not be fully charged.
3b692427 148 //
149 // The maths are:
150 // If there is a voltage v_in at the input, the voltage v_cap at the capacitor (this is what we are measuring) will be
151 //
9b32625c 152 // v_cap = v_in * (1 - exp(-SHTIM/RC)) = v_in * (1 - exp(-40us/10.9us)) = v_in * 0,97 (i.e. an error of 3%)
15c4dc5a 153
2d51da38
I
154 AT91C_BASE_ADC->ADC_CR = AT91C_ADC_SWRST;
155 AT91C_BASE_ADC->ADC_MR =
9b32625c 156 ADC_MODE_PRESCALE(63) | // ADC_CLK = MCK / ((63+1) * 2) = 48MHz / 128 = 375kHz
157 ADC_MODE_STARTUP_TIME(1) | // Startup Time = (1+1) * 8 / ADC_CLK = 16 / 375kHz = 42,7us Note: must be > 20us
158 ADC_MODE_SAMPLE_HOLD_TIME(15); // Sample & Hold Time SHTIM = 15 / ADC_CLK = 15 / 375kHz = 40us
3b692427 159
2d51da38
I
160 AT91C_BASE_ADC->ADC_CHER = ADC_CHANNEL(ch);
161 AT91C_BASE_ADC->ADC_CR = AT91C_ADC_START;
15c4dc5a 162
2d51da38
I
163 while(!(AT91C_BASE_ADC->ADC_SR & ADC_END_OF_CONVERSION(ch))) {};
164
050aa18b 165 return AT91C_BASE_ADC->ADC_CDR[ch] & 0x3ff;
15c4dc5a 166}
167
9ca155ba 168int AvgAdc(int ch) // was static - merlok
15c4dc5a 169{
170 int i;
171 int a = 0;
172
173 for(i = 0; i < 32; i++) {
174 a += ReadAdc(ch);
175 }
176
177 return (a + 15) >> 5;
178}
179
050aa18b 180static int AvgAdc_Voltage_HF(void)
181{
182 int AvgAdc_Voltage_Low, AvgAdc_Voltage_High;
183
184 AvgAdc_Voltage_Low= (MAX_ADC_HF_VOLTAGE_LOW * AvgAdc(ADC_CHAN_HF_LOW)) >> 10;
185 // if voltage range is about to be exceeded, use high voltage ADC channel if available (RDV40 only)
186 if (AvgAdc_Voltage_Low > MAX_ADC_HF_VOLTAGE_LOW - 300) {
187 AvgAdc_Voltage_High = (MAX_ADC_HF_VOLTAGE_HIGH * AvgAdc(ADC_CHAN_HF_HIGH)) >> 10;
188 if (AvgAdc_Voltage_High >= AvgAdc_Voltage_Low) {
189 return AvgAdc_Voltage_High;
190 }
191 }
192 return AvgAdc_Voltage_Low;
193}
194
195static int AvgAdc_Voltage_LF(void)
196{
197 return (MAX_ADC_LF_VOLTAGE * AvgAdc(ADC_CHAN_LF)) >> 10;
198}
199
fdcfbdcc 200void MeasureAntennaTuningLfOnly(int *vLf125, int *vLf134, int *peakf, int *peakv, uint8_t LF_Results[])
15c4dc5a 201{
9b32625c 202 int i, adcval = 0, peak = 0;
15c4dc5a 203
204/*
205 * Sweeps the useful LF range of the proxmark from
206 * 46.8kHz (divisor=255) to 600kHz (divisor=19) and
207 * read the voltage in the antenna, the result left
208 * in the buffer is a graph which should clearly show
209 * the resonating frequency of your LF antenna
210 * ( hopefully around 95 if it is tuned to 125kHz!)
211 */
fdcfbdcc
RAB
212
213 FpgaDownloadAndGo(FPGA_BITSTREAM_LF);
b014c96d 214 FpgaWriteConfWord(FPGA_MAJOR_MODE_LF_ADC | FPGA_LF_ADC_READER_FIELD);
2d51da38
I
215 SpinDelay(50);
216
2bdd68c3 217 for (i=255; i>=19; i--) {
fdcfbdcc 218 WDT_HIT();
15c4dc5a 219 FpgaSendCommand(FPGA_CMD_SET_DIVISOR, i);
220 SpinDelay(20);
050aa18b 221 adcval = AvgAdc_Voltage_LF();
fdcfbdcc
RAB
222 if (i==95) *vLf125 = adcval; // voltage at 125Khz
223 if (i==89) *vLf134 = adcval; // voltage at 134Khz
15c4dc5a 224
2d51da38 225 LF_Results[i] = adcval >> 9; // scale int to fit in byte for graphing purposes
2bdd68c3 226 if(LF_Results[i] > peak) {
fdcfbdcc 227 *peakv = adcval;
2bdd68c3 228 peak = LF_Results[i];
fdcfbdcc 229 *peakf = i;
9f693930 230 //ptr = i;
15c4dc5a 231 }
232 }
233
2bdd68c3 234 for (i=18; i >= 0; i--) LF_Results[i] = 0;
fdcfbdcc
RAB
235
236 return;
237}
238
239void MeasureAntennaTuningHfOnly(int *vHf)
240{
15c4dc5a 241 // Let the FPGA drive the high-frequency antenna around 13.56 MHz.
fdcfbdcc
RAB
242 LED_A_ON();
243 FpgaDownloadAndGo(FPGA_BITSTREAM_HF);
15c4dc5a 244 FpgaWriteConfWord(FPGA_MAJOR_MODE_HF_READER_RX_XCORR);
245 SpinDelay(20);
050aa18b 246 *vHf = AvgAdc_Voltage_HF();
fdcfbdcc 247 LED_A_OFF();
fdcfbdcc
RAB
248 return;
249}
250
251void MeasureAntennaTuning(int mode)
252{
253 uint8_t LF_Results[256] = {0};
254 int peakv = 0, peakf = 0;
255 int vLf125 = 0, vLf134 = 0, vHf = 0; // in mV
256
257 LED_B_ON();
258
259 if (((mode & FLAG_TUNE_ALL) == FLAG_TUNE_ALL) && (FpgaGetCurrent() == FPGA_BITSTREAM_HF)) {
260 // Reverse "standard" order if HF already loaded, to avoid unnecessary swap.
261 MeasureAntennaTuningHfOnly(&vHf);
262 MeasureAntennaTuningLfOnly(&vLf125, &vLf134, &peakf, &peakv, LF_Results);
263 } else {
264 if (mode & FLAG_TUNE_LF) {
265 MeasureAntennaTuningLfOnly(&vLf125, &vLf134, &peakf, &peakv, LF_Results);
266 }
267 if (mode & FLAG_TUNE_HF) {
268 MeasureAntennaTuningHfOnly(&vHf);
269 }
270 }
15c4dc5a 271
d040cb90 272 cmd_send(CMD_MEASURED_ANTENNA_TUNING, vLf125>>1 | (vLf134>>1<<16), vHf, peakf | (peakv>>1<<16), LF_Results, 256);
d19929cb 273 FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);
2bdd68c3 274 LED_B_OFF();
275 return;
15c4dc5a 276}
277
278void MeasureAntennaTuningHf(void)
279{
280 int vHf = 0; // in mV
281
282 DbpString("Measuring HF antenna, press button to exit");
283
3b692427 284 // Let the FPGA drive the high-frequency antenna around 13.56 MHz.
285 FpgaDownloadAndGo(FPGA_BITSTREAM_HF);
286 FpgaWriteConfWord(FPGA_MAJOR_MODE_HF_READER_RX_XCORR);
287
15c4dc5a 288 for (;;) {
050aa18b 289 SpinDelay(500);
290 vHf = AvgAdc_Voltage_HF();
e30c654b 291
15c4dc5a 292 Dbprintf("%d mV",vHf);
293 if (BUTTON_PRESS()) break;
294 }
295 DbpString("cancelled");
3b692427 296
297 FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);
298
15c4dc5a 299}
300
301
15c4dc5a 302void ReadMem(int addr)
303{
f7e3ed82 304 const uint8_t *data = ((uint8_t *)addr);
15c4dc5a 305
306 Dbprintf("%x: %02x %02x %02x %02x %02x %02x %02x %02x",
307 addr, data[0], data[1], data[2], data[3], data[4], data[5], data[6], data[7]);
308}
309
310/* osimage version information is linked in */
311extern struct version_information version_information;
312/* bootrom version information is pointed to from _bootphase1_version_pointer */
0fa01ec7 313extern char *_bootphase1_version_pointer, _flash_start, _flash_end, _bootrom_start, _bootrom_end, __data_src_start__;
472345da 314
050aa18b 315
a9104f7e 316void set_hw_capabilities(void)
317{
318 if (I2C_is_available()) {
319 hw_capabilities |= HAS_SMARTCARD_SLOT;
320 }
321
322 if (false) { // TODO: implement a test
323 hw_capabilities |= HAS_EXTRA_FLASH_MEM;
324 }
325}
326
327
15c4dc5a 328void SendVersion(void)
329{
a9104f7e 330 set_hw_capabilities();
331
8e074056 332 char temp[USB_CMD_DATA_SIZE]; /* Limited data payload in USB packets */
333 char VersionString[USB_CMD_DATA_SIZE] = { '\0' };
e30c654b 334
335 /* Try to find the bootrom version information. Expect to find a pointer at
15c4dc5a 336 * symbol _bootphase1_version_pointer, perform slight sanity checks on the
337 * pointer, then use it.
338 */
339 char *bootrom_version = *(char**)&_bootphase1_version_pointer;
340 if( bootrom_version < &_flash_start || bootrom_version >= &_flash_end ) {
8e074056 341 strcat(VersionString, "bootrom version information appears invalid\n");
15c4dc5a 342 } else {
343 FormatVersionInformation(temp, sizeof(temp), "bootrom: ", bootrom_version);
8e074056 344 strncat(VersionString, temp, sizeof(VersionString) - strlen(VersionString) - 1);
15c4dc5a 345 }
e30c654b 346
15c4dc5a 347 FormatVersionInformation(temp, sizeof(temp), "os: ", &version_information);
8e074056 348 strncat(VersionString, temp, sizeof(VersionString) - strlen(VersionString) - 1);
e30c654b 349
472345da 350 for (int i = 0; i < fpga_bitstream_num; i++) {
351 strncat(VersionString, fpga_version_information[i], sizeof(VersionString) - strlen(VersionString) - 1);
050aa18b 352 strncat(VersionString, "\n", sizeof(VersionString) - strlen(VersionString) - 1);
472345da 353 }
050aa18b 354
355 // test availability of SmartCard slot
356 if (I2C_is_available()) {
357 strncat(VersionString, "SmartCard Slot: available\n", sizeof(VersionString) - strlen(VersionString) - 1);
358 } else {
359 strncat(VersionString, "SmartCard Slot: not available\n", sizeof(VersionString) - strlen(VersionString) - 1);
360 }
361
e6153040 362 // Send Chip ID and used flash memory
0fa01ec7 363 uint32_t text_and_rodata_section_size = (uint32_t)&__data_src_start__ - (uint32_t)&_flash_start;
364 uint32_t compressed_data_section_size = common_area.arg1;
a9104f7e 365 cmd_send(CMD_ACK, *(AT91C_DBGU_CIDR), text_and_rodata_section_size + compressed_data_section_size, hw_capabilities, VersionString, strlen(VersionString));
15c4dc5a 366}
367
bfb01844 368// measure the USB Speed by sending SpeedTestBufferSize bytes to client and measuring the elapsed time.
369// Note: this mimics GetFromBigbuf(), i.e. we have the overhead of the UsbCommand structure included.
67b7d6fa 370void printUSBSpeed(void)
bfb01844 371{
372 Dbprintf("USB Speed:");
67b7d6fa 373 Dbprintf(" Sending USB packets to client...");
bfb01844 374
67b7d6fa 375 #define USB_SPEED_TEST_MIN_TIME 1500 // in milliseconds
bfb01844 376 uint8_t *test_data = BigBuf_get_addr();
67b7d6fa 377 uint32_t end_time;
bfb01844 378
67b7d6fa 379 uint32_t start_time = end_time = GetTickCount();
380 uint32_t bytes_transferred = 0;
381
bfb01844 382 LED_B_ON();
67b7d6fa 383 while(end_time < start_time + USB_SPEED_TEST_MIN_TIME) {
384 cmd_send(CMD_DOWNLOADED_RAW_ADC_SAMPLES_125K, 0, USB_CMD_DATA_SIZE, 0, test_data, USB_CMD_DATA_SIZE);
385 end_time = GetTickCount();
386 bytes_transferred += USB_CMD_DATA_SIZE;
bfb01844 387 }
388 LED_B_OFF();
389
67b7d6fa 390 Dbprintf(" Time elapsed: %dms", end_time - start_time);
391 Dbprintf(" Bytes transferred: %d", bytes_transferred);
392 Dbprintf(" USB Transfer Speed PM3 -> Client = %d Bytes/s",
393 1000 * bytes_transferred / (end_time - start_time));
bfb01844 394
395}
396
c89274cc
CY
397/**
398 * Prints runtime information about the PM3.
399**/
67b7d6fa 400void SendStatus(void)
c89274cc
CY
401{
402 BigBuf_print_status();
403 Fpga_print_status();
43591e64 404#ifdef WITH_SMARTCARD
405 I2C_print_status();
406#endif
c89274cc 407 printConfig(); //LF Sampling config
67b7d6fa 408 printUSBSpeed();
c89274cc 409 Dbprintf("Various");
43591e64 410 Dbprintf(" MF_DBGLEVEL........%d", MF_DBGLEVEL);
411 Dbprintf(" ToSendMax..........%d", ToSendMax);
412 Dbprintf(" ToSendBit..........%d", ToSendBit);
bfb01844 413
414 cmd_send(CMD_ACK,1,0,0,0,0);
c89274cc 415}
15c4dc5a 416
a2937cea 417#if defined(WITH_ISO14443a_StandAlone) || defined(WITH_LF_StandAlone)
15c4dc5a 418
15c4dc5a 419#define OPTS 2
420
86a83668
MHS
421void StandAloneMode()
422{
423 DbpString("Stand-alone mode! No PC necessary.");
15c4dc5a 424 // Oooh pretty -- notify user we're in elite samy mode now
425 LED(LED_RED, 200);
426 LED(LED_ORANGE, 200);
427 LED(LED_GREEN, 200);
428 LED(LED_ORANGE, 200);
429 LED(LED_RED, 200);
430 LED(LED_ORANGE, 200);
431 LED(LED_GREEN, 200);
432 LED(LED_ORANGE, 200);
433 LED(LED_RED, 200);
434
86a83668
MHS
435}
436
437#endif
438
439
440
441#ifdef WITH_ISO14443a_StandAlone
442void StandAloneMode14a()
443{
444 StandAloneMode();
445 FpgaDownloadAndGo(FPGA_BITSTREAM_HF);
446
15c4dc5a 447 int selected = 0;
44964fd1 448 bool playing = false, GotoRecord = false, GotoClone = false;
449 bool cardRead[OPTS] = {false};
86a83668
MHS
450 uint8_t readUID[10] = {0};
451 uint32_t uid_1st[OPTS]={0};
452 uint32_t uid_2nd[OPTS]={0};
c89274cc
CY
453 uint32_t uid_tmp1 = 0;
454 uint32_t uid_tmp2 = 0;
455 iso14a_card_select_t hi14a_card[OPTS];
15c4dc5a 456
15c4dc5a 457 LED(selected + 1, 0);
458
459 for (;;)
460 {
6e82300d 461 usb_poll();
86a83668 462 WDT_HIT();
15c4dc5a 463 SpinDelay(300);
464
44964fd1 465 if (GotoRecord || !cardRead[selected])
15c4dc5a 466 {
44964fd1 467 GotoRecord = false;
15c4dc5a 468 LEDsoff();
469 LED(selected + 1, 0);
470 LED(LED_RED2, 0);
471
472 // record
86a83668 473 Dbprintf("Enabling iso14443a reader mode for [Bank: %u]...", selected);
15c4dc5a 474 /* need this delay to prevent catching some weird data */
475 SpinDelay(500);
86a83668
MHS
476 /* Code for reading from 14a tag */
477 uint8_t uid[10] ={0};
478 uint32_t cuid;
479 iso14443a_setup(FPGA_HF_ISO14443A_READER_MOD);
15c4dc5a 480
86a83668
MHS
481 for ( ; ; )
482 {
483 WDT_HIT();
c89274cc
CY
484 if (BUTTON_PRESS()) {
485 if (cardRead[selected]) {
486 Dbprintf("Button press detected -- replaying card in bank[%d]", selected);
487 break;
488 }
489 else if (cardRead[(selected+1)%OPTS]) {
490 Dbprintf("Button press detected but no card in bank[%d] so playing from bank[%d]", selected, (selected+1)%OPTS);
491 selected = (selected+1)%OPTS;
44964fd1 492 break;
c89274cc
CY
493 }
494 else {
495 Dbprintf("Button press detected but no stored tag to play. (Ignoring button)");
496 SpinDelay(300);
497 }
498 }
c04a4b60 499 if (!iso14443a_select_card(uid, &hi14a_card[selected], &cuid, true, 0, true))
86a83668
MHS
500 continue;
501 else
502 {
503 Dbprintf("Read UID:"); Dbhexdump(10,uid,0);
504 memcpy(readUID,uid,10*sizeof(uint8_t));
c89274cc 505 uint8_t *dst = (uint8_t *)&uid_tmp1;
86a83668
MHS
506 // Set UID byte order
507 for (int i=0; i<4; i++)
508 dst[i] = uid[3-i];
c89274cc 509 dst = (uint8_t *)&uid_tmp2;
86a83668
MHS
510 for (int i=0; i<4; i++)
511 dst[i] = uid[7-i];
c89274cc
CY
512 if (uid_1st[(selected+1)%OPTS] == uid_tmp1 && uid_2nd[(selected+1)%OPTS] == uid_tmp2) {
513 Dbprintf("Card selected has same UID as what is stored in the other bank. Skipping.");
514 }
515 else {
516 if (uid_tmp2) {
517 Dbprintf("Bank[%d] received a 7-byte UID",selected);
518 uid_1st[selected] = (uid_tmp1)>>8;
519 uid_2nd[selected] = (uid_tmp1<<24) + (uid_tmp2>>8);
520 }
521 else {
522 Dbprintf("Bank[%d] received a 4-byte UID",selected);
523 uid_1st[selected] = uid_tmp1;
524 uid_2nd[selected] = uid_tmp2;
525 }
526 break;
527 }
86a83668
MHS
528 }
529 }
c89274cc
CY
530 Dbprintf("ATQA = %02X%02X",hi14a_card[selected].atqa[0],hi14a_card[selected].atqa[1]);
531 Dbprintf("SAK = %02X",hi14a_card[selected].sak);
86a83668
MHS
532 LEDsoff();
533 LED(LED_GREEN, 200);
534 LED(LED_ORANGE, 200);
535 LED(LED_GREEN, 200);
536 LED(LED_ORANGE, 200);
15c4dc5a 537
538 LEDsoff();
539 LED(selected + 1, 0);
15c4dc5a 540
c89274cc 541 // Next state is replay:
44964fd1 542 playing = true;
3fe4ff4f 543
44964fd1 544 cardRead[selected] = true;
86a83668 545 }
c89274cc 546 /* MF Classic UID clone */
44964fd1 547 else if (GotoClone)
3fe4ff4f 548 {
44964fd1 549 GotoClone=false;
c89274cc
CY
550 LEDsoff();
551 LED(selected + 1, 0);
552 LED(LED_ORANGE, 250);
3fe4ff4f 553
3fe4ff4f 554
c89274cc
CY
555 // record
556 Dbprintf("Preparing to Clone card [Bank: %x]; uid: %08x", selected, uid_1st[selected]);
3fe4ff4f 557
c89274cc
CY
558 // wait for button to be released
559 while(BUTTON_PRESS())
560 {
561 // Delay cloning until card is in place
562 WDT_HIT();
563 }
564 Dbprintf("Starting clone. [Bank: %u]", selected);
565 // need this delay to prevent catching some weird data
566 SpinDelay(500);
567 // Begin clone function here:
568 /* Example from client/mifarehost.c for commanding a block write for "magic Chinese" cards:
569 UsbCommand c = {CMD_MIFARE_CSETBLOCK, {wantWipe, params & (0xFE | (uid == NULL ? 0:1)), blockNo}};
570 memcpy(c.d.asBytes, data, 16);
571 SendCommand(&c);
572
573 Block read is similar:
574 UsbCommand c = {CMD_MIFARE_CGETBLOCK, {params, 0, blockNo}};
575 We need to imitate that call with blockNo 0 to set a uid.
576
577 The get and set commands are handled in this file:
578 // Work with "magic Chinese" card
579 case CMD_MIFARE_CSETBLOCK:
580 MifareCSetBlock(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
581 break;
582 case CMD_MIFARE_CGETBLOCK:
583 MifareCGetBlock(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
584 break;
585
586 mfCSetUID provides example logic for UID set workflow:
587 -Read block0 from card in field with MifareCGetBlock()
588 -Configure new values without replacing reserved bytes
589 memcpy(block0, uid, 4); // Copy UID bytes from byte array
590 // Mifare UID BCC
591 block0[4] = block0[0]^block0[1]^block0[2]^block0[3]; // BCC on byte 5
592 Bytes 5-7 are reserved SAK and ATQA for mifare classic
593 -Use mfCSetBlock(0, block0, oldUID, wantWipe, CSETBLOCK_SINGLE_OPER) to write it
594 */
595 uint8_t oldBlock0[16] = {0}, newBlock0[16] = {0}, testBlock0[16] = {0};
596 // arg0 = Flags == CSETBLOCK_SINGLE_OPER=0x1F, arg1=returnSlot, arg2=blockNo
597 MifareCGetBlock(0x3F, 1, 0, oldBlock0);
598 if (oldBlock0[0] == 0 && oldBlock0[0] == oldBlock0[1] && oldBlock0[1] == oldBlock0[2] && oldBlock0[2] == oldBlock0[3]) {
599 Dbprintf("No changeable tag detected. Returning to replay mode for bank[%d]", selected);
44964fd1 600 playing = true;
c89274cc
CY
601 }
602 else {
603 Dbprintf("UID from target tag: %02X%02X%02X%02X", oldBlock0[0],oldBlock0[1],oldBlock0[2],oldBlock0[3]);
604 memcpy(newBlock0,oldBlock0,16);
605 // Copy uid_1st for bank (2nd is for longer UIDs not supported if classic)
606
607 newBlock0[0] = uid_1st[selected]>>24;
608 newBlock0[1] = 0xFF & (uid_1st[selected]>>16);
609 newBlock0[2] = 0xFF & (uid_1st[selected]>>8);
610 newBlock0[3] = 0xFF & (uid_1st[selected]);
611 newBlock0[4] = newBlock0[0]^newBlock0[1]^newBlock0[2]^newBlock0[3];
612 // arg0 = needWipe, arg1 = workFlags, arg2 = blockNo, datain
613 MifareCSetBlock(0, 0xFF,0, newBlock0);
614 MifareCGetBlock(0x3F, 1, 0, testBlock0);
615 if (memcmp(testBlock0,newBlock0,16)==0)
616 {
617 DbpString("Cloned successfull!");
44964fd1 618 cardRead[selected] = false; // Only if the card was cloned successfully should we clear it
619 playing = false;
620 GotoRecord = true;
c89274cc
CY
621 selected = (selected+1) % OPTS;
622 }
623 else {
624 Dbprintf("Clone failed. Back to replay mode on bank[%d]", selected);
44964fd1 625 playing = true;
c89274cc
CY
626 }
627 }
628 LEDsoff();
629 LED(selected + 1, 0);
15c4dc5a 630
86a83668 631 }
15c4dc5a 632 // Change where to record (or begin playing)
44964fd1 633 else if (playing) // button_pressed == BUTTON_SINGLE_CLICK && cardRead[selected])
15c4dc5a 634 {
15c4dc5a 635 LEDsoff();
636 LED(selected + 1, 0);
637
638 // Begin transmitting
44964fd1 639 LED(LED_GREEN, 0);
640 DbpString("Playing");
641 for ( ; ; ) {
642 WDT_HIT();
643 int button_action = BUTTON_HELD(1000);
644 if (button_action == 0) { // No button action, proceed with sim
645 uint8_t data[512] = {0}; // in case there is a read command received we shouldn't break
646 Dbprintf("Simulating ISO14443a tag with uid[0]: %08x, uid[1]: %08x [Bank: %u]", uid_1st[selected],uid_2nd[selected],selected);
647 if (hi14a_card[selected].sak == 8 && hi14a_card[selected].atqa[0] == 4 && hi14a_card[selected].atqa[1] == 0) {
648 DbpString("Mifare Classic");
649 SimulateIso14443aTag(1,uid_1st[selected], uid_2nd[selected], data); // Mifare Classic
c89274cc 650 }
44964fd1 651 else if (hi14a_card[selected].sak == 0 && hi14a_card[selected].atqa[0] == 0x44 && hi14a_card[selected].atqa[1] == 0) {
652 DbpString("Mifare Ultralight");
653 SimulateIso14443aTag(2,uid_1st[selected],uid_2nd[selected],data); // Mifare Ultralight
15c4dc5a 654 }
44964fd1 655 else if (hi14a_card[selected].sak == 20 && hi14a_card[selected].atqa[0] == 0x44 && hi14a_card[selected].atqa[1] == 3) {
656 DbpString("Mifare DESFire");
657 SimulateIso14443aTag(3,uid_1st[selected],uid_2nd[selected],data); // Mifare DESFire
658 }
659 else {
660 Dbprintf("Unrecognized tag type -- defaulting to Mifare Classic emulation");
661 SimulateIso14443aTag(1,uid_1st[selected], uid_2nd[selected], data);
c89274cc 662 }
c89274cc 663 }
44964fd1 664 else if (button_action == BUTTON_SINGLE_CLICK) {
665 selected = (selected + 1) % OPTS;
666 Dbprintf("Done playing. Switching to record mode on bank %d",selected);
667 GotoRecord = true;
668 break;
669 }
670 else if (button_action == BUTTON_HOLD) {
671 Dbprintf("Playtime over. Begin cloning...");
672 GotoClone = true;
673 break;
674 }
675 WDT_HIT();
15c4dc5a 676 }
44964fd1 677
678 /* We pressed a button so ignore it here with a delay */
679 SpinDelay(300);
680 LEDsoff();
681 LED(selected + 1, 0);
15c4dc5a 682 }
683 }
684}
a2937cea 685#elif WITH_LF_StandAlone
86a83668
MHS
686// samy's sniff and repeat routine
687void SamyRun()
e46fe044 688{
86a83668
MHS
689 StandAloneMode();
690 FpgaDownloadAndGo(FPGA_BITSTREAM_LF);
e46fe044 691
53e2f2fa 692 int tops[OPTS], high[OPTS], low[OPTS];
15c4dc5a 693 int selected = 0;
694 int playing = 0;
3fe4ff4f 695 int cardRead = 0;
15c4dc5a 696
697 // Turn on selected LED
698 LED(selected + 1, 0);
699
700 for (;;)
701 {
6e82300d 702 usb_poll();
86a83668 703 WDT_HIT();
15c4dc5a 704
705 // Was our button held down or pressed?
706 int button_pressed = BUTTON_HELD(1000);
707 SpinDelay(300);
708
709 // Button was held for a second, begin recording
3fe4ff4f 710 if (button_pressed > 0 && cardRead == 0)
15c4dc5a 711 {
712 LEDsoff();
713 LED(selected + 1, 0);
714 LED(LED_RED2, 0);
715
716 // record
717 DbpString("Starting recording");
718
719 // wait for button to be released
720 while(BUTTON_PRESS())
721 WDT_HIT();
722
723 /* need this delay to prevent catching some weird data */
724 SpinDelay(500);
725
53e2f2fa 726 CmdHIDdemodFSK(1, &tops[selected], &high[selected], &low[selected], 0);
727 if (tops[selected] > 0)
728 Dbprintf("Recorded %x %x%08x%08x", selected, tops[selected], high[selected], low[selected]);
729 else
730 Dbprintf("Recorded %x %x%08x", selected, high[selected], low[selected]);
15c4dc5a 731
732 LEDsoff();
733 LED(selected + 1, 0);
734 // Finished recording
735
736 // If we were previously playing, set playing off
737 // so next button push begins playing what we recorded
738 playing = 0;
3fe4ff4f 739
740 cardRead = 1;
741
742 }
743
744 else if (button_pressed > 0 && cardRead == 1)
745 {
746 LEDsoff();
747 LED(selected + 1, 0);
748 LED(LED_ORANGE, 0);
749
750 // record
53e2f2fa 751 if (tops[selected] > 0)
752 Dbprintf("Cloning %x %x%08x%08x", selected, tops[selected], high[selected], low[selected]);
753 else
754 Dbprintf("Cloning %x %x%08x", selected, high[selected], low[selected]);
3fe4ff4f 755
756 // wait for button to be released
757 while(BUTTON_PRESS())
758 WDT_HIT();
759
760 /* need this delay to prevent catching some weird data */
761 SpinDelay(500);
762
5f84531b 763 CopyHIDtoT55x7(tops[selected] & 0x000FFFFF, high[selected], low[selected], (tops[selected] != 0 && ((high[selected]& 0xFFFFFFC0) != 0)), 0x1D);
53e2f2fa 764 if (tops[selected] > 0)
765 Dbprintf("Cloned %x %x%08x%08x", selected, tops[selected], high[selected], low[selected]);
766 else
767 Dbprintf("Cloned %x %x%08x", selected, high[selected], low[selected]);
3fe4ff4f 768
769 LEDsoff();
770 LED(selected + 1, 0);
771 // Finished recording
772
773 // If we were previously playing, set playing off
774 // so next button push begins playing what we recorded
775 playing = 0;
776
777 cardRead = 0;
778
15c4dc5a 779 }
780
781 // Change where to record (or begin playing)
782 else if (button_pressed)
783 {
784 // Next option if we were previously playing
785 if (playing)
786 selected = (selected + 1) % OPTS;
787 playing = !playing;
788
789 LEDsoff();
790 LED(selected + 1, 0);
791
792 // Begin transmitting
793 if (playing)
794 {
795 LED(LED_GREEN, 0);
796 DbpString("Playing");
797 // wait for button to be released
798 while(BUTTON_PRESS())
799 WDT_HIT();
53e2f2fa 800 if (tops[selected] > 0)
801 Dbprintf("%x %x%08x%08x", selected, tops[selected], high[selected], low[selected]);
802 else
803 Dbprintf("%x %x%08x", selected, high[selected], low[selected]);
804
805 CmdHIDsimTAG(tops[selected], high[selected], low[selected], 0);
15c4dc5a 806 DbpString("Done playing");
807 if (BUTTON_HELD(1000) > 0)
808 {
809 DbpString("Exiting");
810 LEDsoff();
811 return;
812 }
813
814 /* We pressed a button so ignore it here with a delay */
815 SpinDelay(300);
816
817 // when done, we're done playing, move to next option
818 selected = (selected + 1) % OPTS;
819 playing = !playing;
820 LEDsoff();
821 LED(selected + 1, 0);
822 }
823 else
824 while(BUTTON_PRESS())
825 WDT_HIT();
826 }
827 }
828}
15c4dc5a 829
e46fe044 830#endif
15c4dc5a 831/*
832OBJECTIVE
833Listen and detect an external reader. Determine the best location
834for the antenna.
835
836INSTRUCTIONS:
837Inside the ListenReaderField() function, there is two mode.
838By default, when you call the function, you will enter mode 1.
839If you press the PM3 button one time, you will enter mode 2.
840If you press the PM3 button a second time, you will exit the function.
841
842DESCRIPTION OF MODE 1:
843This mode just listens for an external reader field and lights up green
844for HF and/or red for LF. This is the original mode of the detectreader
845function.
846
847DESCRIPTION OF MODE 2:
848This mode will visually represent, using the LEDs, the actual strength of the
849current compared to the maximum current detected. Basically, once you know
850what kind of external reader is present, it will help you spot the best location to place
851your antenna. You will probably not get some good results if there is a LF and a HF reader
852at the same place! :-)
853
854LIGHT SCHEME USED:
855*/
856static const char LIGHT_SCHEME[] = {
857 0x0, /* ---- | No field detected */
858 0x1, /* X--- | 14% of maximum current detected */
859 0x2, /* -X-- | 29% of maximum current detected */
860 0x4, /* --X- | 43% of maximum current detected */
861 0x8, /* ---X | 57% of maximum current detected */
862 0xC, /* --XX | 71% of maximum current detected */
863 0xE, /* -XXX | 86% of maximum current detected */
864 0xF, /* XXXX | 100% of maximum current detected */
865};
866static const int LIGHT_LEN = sizeof(LIGHT_SCHEME)/sizeof(LIGHT_SCHEME[0]);
867
868void ListenReaderField(int limit)
869{
050aa18b 870 int lf_av, lf_av_new=0, lf_baseline= 0, lf_max;
871 int hf_av, hf_av_new=0, hf_baseline= 0, hf_max;
15c4dc5a 872 int mode=1, display_val, display_max, i;
873
050aa18b 874#define LF_ONLY 1
875#define HF_ONLY 2
876#define REPORT_CHANGE_PERCENT 5 // report new values only if they have changed at least by REPORT_CHANGE_PERCENT
877#define MIN_HF_FIELD 300 // in mode 1 signal HF field greater than MIN_HF_FIELD above baseline
878#define MIN_LF_FIELD 1200 // in mode 1 signal LF field greater than MIN_LF_FIELD above baseline
3b692427 879
880
881 // switch off FPGA - we don't want to measure our own signal
882 FpgaDownloadAndGo(FPGA_BITSTREAM_HF);
883 FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);
15c4dc5a 884
885 LEDsoff();
886
050aa18b 887 lf_av = lf_max = AvgAdc_Voltage_LF();
15c4dc5a 888
889 if(limit != HF_ONLY) {
050aa18b 890 Dbprintf("LF 125/134kHz Baseline: %dmV", lf_av);
15c4dc5a 891 lf_baseline = lf_av;
892 }
893
050aa18b 894 hf_av = hf_max = AvgAdc_Voltage_HF();
895
15c4dc5a 896 if (limit != LF_ONLY) {
050aa18b 897 Dbprintf("HF 13.56MHz Baseline: %dmV", hf_av);
15c4dc5a 898 hf_baseline = hf_av;
899 }
900
901 for(;;) {
050aa18b 902 SpinDelay(500);
15c4dc5a 903 if (BUTTON_PRESS()) {
15c4dc5a 904 switch (mode) {
905 case 1:
906 mode=2;
907 DbpString("Signal Strength Mode");
908 break;
909 case 2:
910 default:
911 DbpString("Stopped");
912 LEDsoff();
913 return;
914 break;
915 }
050aa18b 916 while (BUTTON_PRESS());
15c4dc5a 917 }
918 WDT_HIT();
919
920 if (limit != HF_ONLY) {
3b692427 921 if(mode == 1) {
050aa18b 922 if (lf_av - lf_baseline > MIN_LF_FIELD)
3b692427 923 LED_D_ON();
924 else
925 LED_D_OFF();
15c4dc5a 926 }
e30c654b 927
050aa18b 928 lf_av_new = AvgAdc_Voltage_LF();
15c4dc5a 929 // see if there's a significant change
050aa18b 930 if (ABS((lf_av - lf_av_new)*100/(lf_av?lf_av:1)) > REPORT_CHANGE_PERCENT) {
931 Dbprintf("LF 125/134kHz Field Change: %5dmV", lf_av_new);
15c4dc5a 932 lf_av = lf_av_new;
933 if (lf_av > lf_max)
934 lf_max = lf_av;
15c4dc5a 935 }
936 }
937
938 if (limit != LF_ONLY) {
939 if (mode == 1){
050aa18b 940 if (hf_av - hf_baseline > MIN_HF_FIELD)
3b692427 941 LED_B_ON();
942 else
943 LED_B_OFF();
15c4dc5a 944 }
e30c654b 945
050aa18b 946 hf_av_new = AvgAdc_Voltage_HF();
947
15c4dc5a 948 // see if there's a significant change
050aa18b 949 if (ABS((hf_av - hf_av_new)*100/(hf_av?hf_av:1)) > REPORT_CHANGE_PERCENT) {
950 Dbprintf("HF 13.56MHz Field Change: %5dmV", hf_av_new);
15c4dc5a 951 hf_av = hf_av_new;
952 if (hf_av > hf_max)
953 hf_max = hf_av;
15c4dc5a 954 }
955 }
e30c654b 956
15c4dc5a 957 if(mode == 2) {
958 if (limit == LF_ONLY) {
959 display_val = lf_av;
960 display_max = lf_max;
961 } else if (limit == HF_ONLY) {
962 display_val = hf_av;
963 display_max = hf_max;
964 } else { /* Pick one at random */
965 if( (hf_max - hf_baseline) > (lf_max - lf_baseline) ) {
966 display_val = hf_av;
967 display_max = hf_max;
968 } else {
969 display_val = lf_av;
970 display_max = lf_max;
971 }
972 }
973 for (i=0; i<LIGHT_LEN; i++) {
974 if (display_val >= ((display_max/LIGHT_LEN)*i) && display_val <= ((display_max/LIGHT_LEN)*(i+1))) {
975 if (LIGHT_SCHEME[i] & 0x1) LED_C_ON(); else LED_C_OFF();
976 if (LIGHT_SCHEME[i] & 0x2) LED_A_ON(); else LED_A_OFF();
977 if (LIGHT_SCHEME[i] & 0x4) LED_B_ON(); else LED_B_OFF();
978 if (LIGHT_SCHEME[i] & 0x8) LED_D_ON(); else LED_D_OFF();
979 break;
980 }
981 }
982 }
983 }
984}
985
f7e3ed82 986void UsbPacketReceived(uint8_t *packet, int len)
15c4dc5a 987{
988 UsbCommand *c = (UsbCommand *)packet;
15c4dc5a 989
902cb3c0 990// Dbprintf("received %d bytes, with command: 0x%04x and args: %d %d %d",len,c->cmd,c->arg[0],c->arg[1],c->arg[2]);
991
15c4dc5a 992 switch(c->cmd) {
993#ifdef WITH_LF
31abe49f
MHS
994 case CMD_SET_LF_SAMPLING_CONFIG:
995 setSamplingConfig((sample_config *) c->d.asBytes);
996 break;
15c4dc5a 997 case CMD_ACQUIRE_RAW_ADC_SAMPLES_125K:
b9957414 998 cmd_send(CMD_ACK,SampleLF(c->arg[0], c->arg[1]),0,0,0,0);
15c4dc5a 999 break;
15c4dc5a 1000 case CMD_MOD_THEN_ACQUIRE_RAW_ADC_SAMPLES_125K:
1001 ModThenAcquireRawAdcSamples125k(c->arg[0],c->arg[1],c->arg[2],c->d.asBytes);
1002 break;
b014c96d 1003 case CMD_LF_SNOOP_RAW_ADC_SAMPLES:
31abe49f 1004 cmd_send(CMD_ACK,SnoopLF(),0,0,0,0);
b014c96d 1005 break;
7e67e42f 1006 case CMD_HID_DEMOD_FSK:
be59094d 1007 CmdHIDdemodFSK(c->arg[0], 0, 0, 0, 1);
7e67e42f 1008 break;
1009 case CMD_HID_SIM_TAG:
be59094d 1010 CmdHIDsimTAG(c->arg[0], c->arg[1], c->arg[2], 1);
7e67e42f 1011 break;
abd6112f 1012 case CMD_FSK_SIM_TAG:
1013 CmdFSKsimTAG(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
1014 break;
1015 case CMD_ASK_SIM_TAG:
1016 CmdASKsimTag(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
1017 break;
872e3d4d 1018 case CMD_PSK_SIM_TAG:
1019 CmdPSKsimTag(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
1020 break;
1021 case CMD_HID_CLONE_TAG:
5f84531b
SS
1022 CopyHIDtoT55x7(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes[0], 0x1D);
1023 break;
1024 case CMD_PARADOX_CLONE_TAG:
1025 // Paradox cards are the same as HID, with a different preamble, so we can reuse the same function
1026 CopyHIDtoT55x7(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes[0], 0x0F);
7e67e42f 1027 break;
a1f3bb12 1028 case CMD_IO_DEMOD_FSK:
3fe4ff4f 1029 CmdIOdemodFSK(c->arg[0], 0, 0, 1);
a1f3bb12 1030 break;
3fe4ff4f 1031 case CMD_IO_CLONE_TAG:
9f669cb2 1032 CopyIOtoT55x7(c->arg[0], c->arg[1]);
a1f3bb12 1033 break;
66707a3b 1034 case CMD_EM410X_DEMOD:
1035 CmdEM410xdemod(c->arg[0], 0, 0, 1);
1036 break;
2d4eae76 1037 case CMD_EM410X_WRITE_TAG:
1038 WriteEM410x(c->arg[0], c->arg[1], c->arg[2]);
1039 break;
7e67e42f 1040 case CMD_READ_TI_TYPE:
1041 ReadTItag();
1042 break;
1043 case CMD_WRITE_TI_TYPE:
1044 WriteTItag(c->arg[0],c->arg[1],c->arg[2]);
1045 break;
1046 case CMD_SIMULATE_TAG_125K:
31d1caa5 1047 LED_A_ON();
7e67e42f 1048 SimulateTagLowFrequency(c->arg[0], c->arg[1], 1);
31d1caa5 1049 LED_A_OFF();
7e67e42f 1050 break;
1051 case CMD_LF_SIMULATE_BIDIR:
1052 SimulateTagLowFrequencyBidir(c->arg[0], c->arg[1]);
1053 break;
3fe4ff4f 1054 case CMD_INDALA_CLONE_TAG:
2414f978 1055 CopyIndala64toT55x7(c->arg[0], c->arg[1]);
1056 break;
3fe4ff4f 1057 case CMD_INDALA_CLONE_TAG_L:
2414f978 1058 CopyIndala224toT55x7(c->d.asDwords[0], c->d.asDwords[1], c->d.asDwords[2], c->d.asDwords[3], c->d.asDwords[4], c->d.asDwords[5], c->d.asDwords[6]);
1059 break;
1c611bbd 1060 case CMD_T55XX_READ_BLOCK:
8e99ec25 1061 T55xxReadBlock(c->arg[0], c->arg[1], c->arg[2]);
1c611bbd 1062 break;
1063 case CMD_T55XX_WRITE_BLOCK:
1064 T55xxWriteBlock(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes[0]);
1065 break;
be2d41b7 1066 case CMD_T55XX_WAKEUP:
1067 T55xxWakeUp(c->arg[0]);
1c611bbd 1068 break;
66837a03 1069 case CMD_T55XX_RESET_READ:
1070 T55xxResetRead();
1071 break;
3fe4ff4f 1072 case CMD_PCF7931_READ:
1c611bbd 1073 ReadPCF7931();
1c611bbd 1074 break;
dc4300ba 1075 case CMD_PCF7931_WRITE:
d10e08ae 1076 WritePCF7931(c->d.asBytes[0],c->d.asBytes[1],c->d.asBytes[2],c->d.asBytes[3],c->d.asBytes[4],c->d.asBytes[5],c->d.asBytes[6], c->d.asBytes[9], c->d.asBytes[7]-128,c->d.asBytes[8]-128, c->arg[0], c->arg[1], c->arg[2]);
dc4300ba 1077 break;
818e15b0
S
1078 case CMD_PCF7931_BRUTEFORCE:
1079 BruteForcePCF7931(c->arg[0], (c->arg[1] & 0xFF), c->d.asBytes[9], c->d.asBytes[7]-128,c->d.asBytes[8]-128);
1080 break;
1c611bbd 1081 case CMD_EM4X_READ_WORD:
7666f460 1082 EM4xReadWord(c->arg[0], c->arg[1],c->arg[2]);
1c611bbd 1083 break;
1084 case CMD_EM4X_WRITE_WORD:
7666f460 1085 EM4xWriteWord(c->arg[0], c->arg[1], c->arg[2]);
1c611bbd 1086 break;
dbf6e824
CY
1087 case CMD_AWID_DEMOD_FSK: // Set realtime AWID demodulation
1088 CmdAWIDdemodFSK(c->arg[0], 0, 0, 1);
7cfc777b 1089 break;
709665b5 1090 case CMD_VIKING_CLONE_TAG:
1091 CopyVikingtoT55xx(c->arg[0], c->arg[1], c->arg[2]);
1092 break;
e04475c4 1093 case CMD_COTAG:
1094 Cotag(c->arg[0]);
1095 break;
15c4dc5a 1096#endif
1097
d19929cb 1098#ifdef WITH_HITAG
1099 case CMD_SNOOP_HITAG: // Eavesdrop Hitag tag, args = type
1100 SnoopHitag(c->arg[0]);
1101 break;
1102 case CMD_SIMULATE_HITAG: // Simulate Hitag tag, args = memory content
1103 SimulateHitagTag((bool)c->arg[0],(byte_t*)c->d.asBytes);
1104 break;
1105 case CMD_READER_HITAG: // Reader for Hitag tags, args = type and function
1106 ReaderHitag((hitag_function)c->arg[0],(hitag_data*)c->d.asBytes);
1107 break;
4e12287d
RS
1108 case CMD_SIMULATE_HITAG_S:// Simulate Hitag s tag, args = memory content
1109 SimulateHitagSTag((bool)c->arg[0],(byte_t*)c->d.asBytes);
1110 break;
1111 case CMD_TEST_HITAGS_TRACES:// Tests every challenge within the given file
7b6e3205 1112 check_challenges_cmd((bool)c->arg[0], (byte_t*)c->d.asBytes, (uint8_t)c->arg[1]);
4e12287d
RS
1113 break;
1114 case CMD_READ_HITAG_S://Reader for only Hitag S tags, args = key or challenge
7b6e3205 1115 ReadHitagSCmd((hitag_function)c->arg[0], (hitag_data*)c->d.asBytes, (uint8_t)c->arg[1], (uint8_t)c->arg[2], false);
1116 break;
1117 case CMD_READ_HITAG_S_BLK:
1118 ReadHitagSCmd((hitag_function)c->arg[0], (hitag_data*)c->d.asBytes, (uint8_t)c->arg[1], (uint8_t)c->arg[2], true);
4e12287d
RS
1119 break;
1120 case CMD_WR_HITAG_S://writer for Hitag tags args=data to write,page and key or challenge
52244230
HJ
1121 if ((hitag_function)c->arg[0] < 10) {
1122 WritePageHitagS((hitag_function)c->arg[0],(hitag_data*)c->d.asBytes,c->arg[2]);
1123 }
1124 else if ((hitag_function)c->arg[0] >= 10) {
1125 WriterHitag((hitag_function)c->arg[0],(hitag_data*)c->d.asBytes, c->arg[2]);
1126 }
4e12287d 1127 break;
d19929cb 1128#endif
f168b263 1129
15c4dc5a 1130#ifdef WITH_ISO15693
1131 case CMD_ACQUIRE_RAW_ADC_SAMPLES_ISO_15693:
1132 AcquireRawAdcSamplesIso15693();
1133 break;
d9de20fa 1134
1135 case CMD_SNOOP_ISO_15693:
1136 SnoopIso15693();
9455b51c 1137 break;
1138
1139 case CMD_ISO_15693_COMMAND:
1140 DirectTag15693Command(c->arg[0],c->arg[1],c->arg[2],c->d.asBytes);
1141 break;
1142
1143 case CMD_ISO_15693_FIND_AFI:
1144 BruteforceIso15693Afi(c->arg[0]);
1145 break;
1146
1147 case CMD_ISO_15693_DEBUG:
1148 SetDebugIso15693(c->arg[0]);
1149 break;
15c4dc5a 1150
15c4dc5a 1151 case CMD_READER_ISO_15693:
1152 ReaderIso15693(c->arg[0]);
1153 break;
7e67e42f 1154 case CMD_SIMTAG_ISO_15693:
3fe4ff4f 1155 SimTagIso15693(c->arg[0], c->d.asBytes);
7e67e42f 1156 break;
15c4dc5a 1157#endif
1158
7e67e42f 1159#ifdef WITH_LEGICRF
1160 case CMD_SIMULATE_TAG_LEGIC_RF:
1b902aa0 1161 LegicRfSimulate(c->arg[0]);
7e67e42f 1162 break;
3612a8a8 1163
7e67e42f 1164 case CMD_WRITER_LEGIC_RF:
1165 LegicRfWriter(c->arg[1], c->arg[0]);
1166 break;
3612a8a8 1167
15c4dc5a 1168 case CMD_READER_LEGIC_RF:
1169 LegicRfReader(c->arg[0], c->arg[1]);
1170 break;
15c4dc5a 1171#endif
1172
1173#ifdef WITH_ISO14443b
15c4dc5a 1174 case CMD_READ_SRI512_TAG:
51d4f6f1 1175 ReadSTMemoryIso14443b(0x0F);
15c4dc5a 1176 break;
7e67e42f 1177 case CMD_READ_SRIX4K_TAG:
51d4f6f1 1178 ReadSTMemoryIso14443b(0x7F);
7e67e42f 1179 break;
132a0217 1180 case CMD_SNOOP_ISO_14443B:
51d4f6f1 1181 SnoopIso14443b();
7e67e42f 1182 break;
132a0217 1183 case CMD_SIMULATE_TAG_ISO_14443B:
51d4f6f1 1184 SimulateIso14443bTag();
7e67e42f 1185 break;
7cf3ef20 1186 case CMD_ISO_14443B_COMMAND:
1187 SendRawCommand14443B(c->arg[0],c->arg[1],c->arg[2],c->d.asBytes);
1188 break;
15c4dc5a 1189#endif
1190
1191#ifdef WITH_ISO14443a
7e67e42f 1192 case CMD_SNOOP_ISO_14443a:
5cd9ec01 1193 SnoopIso14443a(c->arg[0]);
7e67e42f 1194 break;
15c4dc5a 1195 case CMD_READER_ISO_14443a:
902cb3c0 1196 ReaderIso14443a(c);
15c4dc5a 1197 break;
7e67e42f 1198 case CMD_SIMULATE_TAG_ISO_14443a:
28afbd2b 1199 SimulateIso14443aTag(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes); // ## Simulate iso14443a tag - pass tag type & UID
7e67e42f 1200 break;
3fe4ff4f 1201
5acd09bd 1202 case CMD_EPA_PACE_COLLECT_NONCE:
902cb3c0 1203 EPA_PACE_Collect_Nonce(c);
5acd09bd 1204 break;
3bb07d96
FM
1205 case CMD_EPA_PACE_REPLAY:
1206 EPA_PACE_Replay(c);
1207 break;
7e67e42f 1208
15c4dc5a 1209 case CMD_READER_MIFARE:
f168b263 1210 ReaderMifare(c->arg[0]);
15c4dc5a 1211 break;
20f9a2a1
M
1212 case CMD_MIFARE_READBL:
1213 MifareReadBlock(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
1214 break;
981bd429 1215 case CMD_MIFAREU_READBL:
f168b263 1216 MifareUReadBlock(c->arg[0],c->arg[1], c->d.asBytes);
981bd429 1217 break;
8258f409 1218 case CMD_MIFAREUC_AUTH:
1219 MifareUC_Auth(c->arg[0],c->d.asBytes);
a631936e 1220 break;
981bd429 1221 case CMD_MIFAREU_READCARD:
75377d29 1222 MifareUReadCard(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
117d9ec2 1223 break;
f168b263 1224 case CMD_MIFAREUC_SETPWD:
1225 MifareUSetPwd(c->arg[0], c->d.asBytes);
1226 break;
20f9a2a1
M
1227 case CMD_MIFARE_READSC:
1228 MifareReadSector(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
1229 break;
1230 case CMD_MIFARE_WRITEBL:
1231 MifareWriteBlock(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
1232 break;
4973f23d 1233 //case CMD_MIFAREU_WRITEBL_COMPAT:
1234 //MifareUWriteBlockCompat(c->arg[0], c->d.asBytes);
1235 //break;
981bd429 1236 case CMD_MIFAREU_WRITEBL:
4973f23d 1237 MifareUWriteBlock(c->arg[0], c->arg[1], c->d.asBytes);
f168b263 1238 break;
c48c4d78 1239 case CMD_MIFARE_ACQUIRE_ENCRYPTED_NONCES:
1240 MifareAcquireEncryptedNonces(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
1241 break;
20f9a2a1
M
1242 case CMD_MIFARE_NESTED:
1243 MifareNested(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
f397b5cc
M
1244 break;
1245 case CMD_MIFARE_CHKKEYS:
1246 MifareChkKeys(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
20f9a2a1
M
1247 break;
1248 case CMD_SIMULATE_MIFARE_CARD:
1249 Mifare1ksim(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
1250 break;
8556b852
M
1251
1252 // emulator
1253 case CMD_MIFARE_SET_DBGMODE:
1254 MifareSetDbgLvl(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
1255 break;
1256 case CMD_MIFARE_EML_MEMCLR:
1257 MifareEMemClr(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
1258 break;
1259 case CMD_MIFARE_EML_MEMSET:
1260 MifareEMemSet(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
1261 break;
1262 case CMD_MIFARE_EML_MEMGET:
1263 MifareEMemGet(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
1264 break;
1265 case CMD_MIFARE_EML_CARDLOAD:
1266 MifareECardLoad(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
0675f200
M
1267 break;
1268
1269 // Work with "magic Chinese" card
3a05a1e7
OM
1270 case CMD_MIFARE_CWIPE:
1271 MifareCWipe(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
1272 break;
3fe4ff4f 1273 case CMD_MIFARE_CSETBLOCK:
0675f200 1274 MifareCSetBlock(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
545a1f38 1275 break;
3fe4ff4f 1276 case CMD_MIFARE_CGETBLOCK:
545a1f38 1277 MifareCGetBlock(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
8556b852 1278 break;
3fe4ff4f 1279 case CMD_MIFARE_CIDENT:
1280 MifareCIdent();
1281 break;
b62a5a84
M
1282
1283 // mifare sniffer
1284 case CMD_MIFARE_SNIFFER:
5cd9ec01 1285 SniffMifare(c->arg[0]);
b62a5a84 1286 break;
a631936e 1287
20f9a2a1
M
1288#endif
1289
7e67e42f 1290#ifdef WITH_ICLASS
cee5a30d 1291 // Makes use of ISO14443a FPGA Firmware
1292 case CMD_SNOOP_ICLASS:
1293 SnoopIClass();
1294 break;
1e262141 1295 case CMD_SIMULATE_TAG_ICLASS:
ff7bb4ef 1296 SimulateIClass(c->arg[0], c->arg[1], c->arg[2], c->d.asBytes);
1e262141 1297 break;
1298 case CMD_READER_ICLASS:
1299 ReaderIClass(c->arg[0]);
1300 break;
c3963755 1301 case CMD_READER_ICLASS_REPLAY:
aa53efc3 1302 ReaderIClass_Replay(c->arg[0], c->d.asBytes);
c3963755 1303 break;
aa53efc3 1304 case CMD_ICLASS_EML_MEMSET:
e80aeb96
MHS
1305 emlSet(c->d.asBytes,c->arg[0], c->arg[1]);
1306 break;
aa53efc3 1307 case CMD_ICLASS_WRITEBLOCK:
3ac22ee1 1308 iClass_WriteBlock(c->arg[0], c->d.asBytes);
1309 break;
1310 case CMD_ICLASS_READCHECK: // auth step 1
1311 iClass_ReadCheck(c->arg[0], c->arg[1]);
aa53efc3 1312 break;
1313 case CMD_ICLASS_READBLOCK:
3ac22ee1 1314 iClass_ReadBlk(c->arg[0]);
aa53efc3 1315 break;
3ac22ee1 1316 case CMD_ICLASS_AUTHENTICATION: //check
aa53efc3 1317 iClass_Authentication(c->d.asBytes);
1318 break;
1319 case CMD_ICLASS_DUMP:
3ac22ee1 1320 iClass_Dump(c->arg[0], c->arg[1]);
aa53efc3 1321 break;
1322 case CMD_ICLASS_CLONE:
3ac22ee1 1323 iClass_Clone(c->arg[0], c->arg[1], c->d.asBytes);
aa53efc3 1324 break;
cee5a30d 1325#endif
0472d76d 1326#ifdef WITH_HFSNOOP
1327 case CMD_HF_SNIFFER:
1328 HfSnoop(c->arg[0], c->arg[1]);
1329 break;
1330#endif
43591e64 1331#ifdef WITH_SMARTCARD
1332 case CMD_SMART_ATR: {
1333 SmartCardAtr();
1334 break;
1335 }
1336 case CMD_SMART_SETCLOCK:{
1337 SmartCardSetClock(c->arg[0]);
1338 break;
1339 }
1340 case CMD_SMART_RAW: {
1341 SmartCardRaw(c->arg[0], c->arg[1], c->d.asBytes);
1342 break;
1343 }
1344 case CMD_SMART_UPLOAD: {
1345 // upload file from client
1346 uint8_t *mem = BigBuf_get_addr();
1347 memcpy( mem + c->arg[0], c->d.asBytes, USB_CMD_DATA_SIZE);
1348 cmd_send(CMD_ACK,1,0,0,0,0);
1349 break;
1350 }
1351 case CMD_SMART_UPGRADE: {
1352 SmartCardUpgrade(c->arg[0]);
1353 break;
1354 }
1355#endif
cee5a30d 1356
7e67e42f 1357 case CMD_BUFF_CLEAR:
117d9ec2 1358 BigBuf_Clear();
15c4dc5a 1359 break;
15c4dc5a 1360
1361 case CMD_MEASURE_ANTENNA_TUNING:
fdcfbdcc 1362 MeasureAntennaTuning(c->arg[0]);
15c4dc5a 1363 break;
1364
1365 case CMD_MEASURE_ANTENNA_TUNING_HF:
1366 MeasureAntennaTuningHf();
1367 break;
1368
1369 case CMD_LISTEN_READER_FIELD:
1370 ListenReaderField(c->arg[0]);
1371 break;
1372
15c4dc5a 1373 case CMD_FPGA_MAJOR_MODE_OFF: // ## FPGA Control
1374 FpgaWriteConfWord(FPGA_MAJOR_MODE_OFF);
1375 SpinDelay(200);
1376 LED_D_OFF(); // LED D indicates field ON or OFF
1377 break;
1378
1c611bbd 1379 case CMD_DOWNLOAD_RAW_ADC_SAMPLES_125K:
902cb3c0 1380
1c611bbd 1381 LED_B_ON();
117d9ec2 1382 uint8_t *BigBuf = BigBuf_get_addr();
1c611bbd 1383 for(size_t i=0; i<c->arg[1]; i += USB_CMD_DATA_SIZE) {
1384 size_t len = MIN((c->arg[1] - i),USB_CMD_DATA_SIZE);
3000dc4e 1385 cmd_send(CMD_DOWNLOADED_RAW_ADC_SAMPLES_125K,i,len,BigBuf_get_traceLen(),BigBuf+c->arg[0]+i,len);
1c611bbd 1386 }
1387 // Trigger a finish downloading signal with an ACK frame
3000dc4e 1388 cmd_send(CMD_ACK,1,0,BigBuf_get_traceLen(),getSamplingConfig(),sizeof(sample_config));
d3b1f4e4 1389 LED_B_OFF();
1c611bbd 1390 break;
15c4dc5a 1391
1392 case CMD_DOWNLOADED_SIM_SAMPLES_125K: {
8c8317a5 1393 // iceman; since changing fpga_bitstreams clears bigbuff, Its better to call it before.
1394 // to be able to use this one for uploading data to device
1395 // arg1 = 0 upload for LF usage
1396 // 1 upload for HF usage
1397 if (c->arg[1] == 0)
1398 FpgaDownloadAndGo(FPGA_BITSTREAM_LF);
1399 else
1400 FpgaDownloadAndGo(FPGA_BITSTREAM_HF);
1401
117d9ec2 1402 uint8_t *b = BigBuf_get_addr();
3fe4ff4f 1403 memcpy(b+c->arg[0], c->d.asBytes, USB_CMD_DATA_SIZE);
1c611bbd 1404 cmd_send(CMD_ACK,0,0,0,0,0);
1405 break;
1406 }
15c4dc5a 1407 case CMD_READ_MEM:
1408 ReadMem(c->arg[0]);
1409 break;
1410
1411 case CMD_SET_LF_DIVISOR:
8c8317a5 1412 FpgaDownloadAndGo(FPGA_BITSTREAM_LF);
15c4dc5a 1413 FpgaSendCommand(FPGA_CMD_SET_DIVISOR, c->arg[0]);
1414 break;
1415
1416 case CMD_SET_ADC_MUX:
1417 switch(c->arg[0]) {
1418 case 0: SetAdcMuxFor(GPIO_MUXSEL_LOPKD); break;
1419 case 1: SetAdcMuxFor(GPIO_MUXSEL_LORAW); break;
1420 case 2: SetAdcMuxFor(GPIO_MUXSEL_HIPKD); break;
1421 case 3: SetAdcMuxFor(GPIO_MUXSEL_HIRAW); break;
1422 }
1423 break;
1424
1425 case CMD_VERSION:
1426 SendVersion();
1427 break;
c89274cc 1428 case CMD_STATUS:
67b7d6fa 1429 SendStatus();
c89274cc
CY
1430 break;
1431 case CMD_PING:
1432 cmd_send(CMD_ACK,0,0,0,0,0);
1433 break;
15c4dc5a 1434#ifdef WITH_LCD
1435 case CMD_LCD_RESET:
1436 LCDReset();
1437 break;
1438 case CMD_LCD:
1439 LCDSend(c->arg[0]);
1440 break;
1441#endif
1442 case CMD_SETUP_WRITE:
1443 case CMD_FINISH_WRITE:
1c611bbd 1444 case CMD_HARDWARE_RESET:
1445 usb_disable();
15c4dc5a 1446 SpinDelay(1000);
1447 SpinDelay(1000);
1448 AT91C_BASE_RSTC->RSTC_RCR = RST_CONTROL_KEY | AT91C_RSTC_PROCRST;
1449 for(;;) {
1450 // We're going to reset, and the bootrom will take control.
1451 }
1c611bbd 1452 break;
15c4dc5a 1453
1c611bbd 1454 case CMD_START_FLASH:
15c4dc5a 1455 if(common_area.flags.bootrom_present) {
1456 common_area.command = COMMON_AREA_COMMAND_ENTER_FLASH_MODE;
1457 }
1c611bbd 1458 usb_disable();
15c4dc5a 1459 AT91C_BASE_RSTC->RSTC_RCR = RST_CONTROL_KEY | AT91C_RSTC_PROCRST;
1460 for(;;);
1c611bbd 1461 break;
e30c654b 1462
15c4dc5a 1463 case CMD_DEVICE_INFO: {
902cb3c0 1464 uint32_t dev_info = DEVICE_INFO_FLAG_OSIMAGE_PRESENT | DEVICE_INFO_FLAG_CURRENT_MODE_OS;
1465 if(common_area.flags.bootrom_present) dev_info |= DEVICE_INFO_FLAG_BOOTROM_PRESENT;
1c611bbd 1466 cmd_send(CMD_DEVICE_INFO,dev_info,0,0,0,0);
1467 break;
1468 }
1469 default:
15c4dc5a 1470 Dbprintf("%s: 0x%04x","unknown command:",c->cmd);
1c611bbd 1471 break;
15c4dc5a 1472 }
1473}
1474
1475void __attribute__((noreturn)) AppMain(void)
1476{
1477 SpinDelay(100);
9e8255d4 1478 clear_trace();
15c4dc5a 1479 if(common_area.magic != COMMON_AREA_MAGIC || common_area.version != 1) {
1480 /* Initialize common area */
1481 memset(&common_area, 0, sizeof(common_area));
1482 common_area.magic = COMMON_AREA_MAGIC;
1483 common_area.version = 1;
1484 }
1485 common_area.flags.osimage_present = 1;
1486
1487 LED_D_OFF();
1488 LED_C_OFF();
1489 LED_B_OFF();
1490 LED_A_OFF();
1491
3fe4ff4f 1492 // Init USB device
050aa18b 1493 usb_enable();
15c4dc5a 1494
1495 // The FPGA gets its clock from us from PCK0 output, so set that up.
1496 AT91C_BASE_PIOA->PIO_BSR = GPIO_PCK0;
1497 AT91C_BASE_PIOA->PIO_PDR = GPIO_PCK0;
1498 AT91C_BASE_PMC->PMC_SCER = AT91C_PMC_PCK0;
1499 // PCK0 is PLL clock / 4 = 96Mhz / 4 = 24Mhz
1500 AT91C_BASE_PMC->PMC_PCKR[0] = AT91C_PMC_CSS_PLL_CLK |
0472d76d 1501 AT91C_PMC_PRES_CLK_4; // 4 for 24Mhz pck0, 2 for 48 MHZ pck0
15c4dc5a 1502 AT91C_BASE_PIOA->PIO_OER = GPIO_PCK0;
1503
1504 // Reset SPI
1505 AT91C_BASE_SPI->SPI_CR = AT91C_SPI_SWRST;
1506 // Reset SSC
1507 AT91C_BASE_SSC->SSC_CR = AT91C_SSC_SWRST;
1508
1509 // Load the FPGA image, which we have stored in our flash.
7cc204bf 1510 // (the HF version by default)
1511 FpgaDownloadAndGo(FPGA_BITSTREAM_HF);
15c4dc5a 1512
9ca155ba 1513 StartTickCount();
902cb3c0 1514
15c4dc5a 1515#ifdef WITH_LCD
15c4dc5a 1516 LCDInit();
15c4dc5a 1517#endif
1518
902cb3c0 1519 byte_t rx[sizeof(UsbCommand)];
1520 size_t rx_len;
1521
15c4dc5a 1522 for(;;) {
902cb3c0 1523 if (usb_poll()) {
1524 rx_len = usb_read(rx,sizeof(UsbCommand));
1525 if (rx_len) {
1526 UsbPacketReceived(rx,rx_len);
1527 }
1528 }
15c4dc5a 1529 WDT_HIT();
1530
a2937cea 1531#ifdef WITH_LF_StandAlone
e46fe044 1532#ifndef WITH_ISO14443a_StandAlone
15c4dc5a 1533 if (BUTTON_HELD(1000) > 0)
1534 SamyRun();
e46fe044
CY
1535#endif
1536#endif
1537#ifdef WITH_ISO14443a
1538#ifdef WITH_ISO14443a_StandAlone
1539 if (BUTTON_HELD(1000) > 0)
1540 StandAloneMode14a();
1541#endif
15c4dc5a 1542#endif
1543 }
1544}
Impressum, Datenschutz