[proxmark3-svn] / client / hid-flasher / usb_cmd.h

//-----------------------------------------------------------------------------
// Jonathan Westhues, Mar 2006
// Edits by Gerhard de Koning Gans, Sep 2007
//
// This code is licensed to you under the terms of the GNU GPL, version 2 or,
// at your option, any later version. See the LICENSE.txt file for the text of
// the license.
//-----------------------------------------------------------------------------
// Definitions for all the types of commands that may be sent over USB; our
// own protocol.
//-----------------------------------------------------------------------------

#ifndef __USB_CMD_H
#define __USB_CMD_H
#ifdef _MSC_VER
typedef DWORD uint32_t;
typedef BYTE uint8_t;
#define PACKED
// stuff
#else
#include <stdint.h>
#include <stdbool.h>
#define PACKED __attribute__((packed))
#endif

typedef struct {
	uint32_t	cmd;
	uint32_t	arg[3];
	union {
		uint8_t		asBytes[48];
		uint32_t	asDwords[12];
	} d;
} PACKED UsbCommand;

// For the bootloader
#define CMD_DEVICE_INFO                                                   0x0000
#define CMD_SETUP_WRITE                                                   0x0001
#define CMD_FINISH_WRITE                                                  0x0003
#define CMD_HARDWARE_RESET                                                0x0004
#define CMD_START_FLASH                                                   0x0005
#define CMD_NACK                                                          0x00fe
#define CMD_ACK                                                           0x00ff

// For general mucking around
#define CMD_DEBUG_PRINT_STRING                                            0x0100
#define CMD_DEBUG_PRINT_INTEGERS                                          0x0101
#define CMD_DEBUG_PRINT_BYTES                                             0x0102
#define CMD_LCD_RESET                                                     0x0103
#define CMD_LCD                                                           0x0104
#define CMD_BUFF_CLEAR                                                    0x0105
#define CMD_READ_MEM                                                      0x0106
#define CMD_VERSION                                                       0x0107
#define CMD_STATUS														  0x0108
#define CMD_PING														  0x0109
 
// For low-frequency tags
#define CMD_READ_TI_TYPE                                                  0x0202
#define CMD_WRITE_TI_TYPE                                                 0x0203
#define CMD_DOWNLOADED_RAW_BITS_TI_TYPE                                   0x0204
#define CMD_ACQUIRE_RAW_ADC_SAMPLES_125K                                  0x0205
#define CMD_MOD_THEN_ACQUIRE_RAW_ADC_SAMPLES_125K                         0x0206
#define CMD_DOWNLOAD_RAW_ADC_SAMPLES_125K                                 0x0207
#define CMD_DOWNLOADED_RAW_ADC_SAMPLES_125K                               0x0208
#define CMD_DOWNLOADED_SIM_SAMPLES_125K                                   0x0209
#define CMD_SIMULATE_TAG_125K                                             0x020A
#define CMD_HID_DEMOD_FSK                                                 0x020B
#define CMD_HID_SIM_TAG                                                   0x020C
#define CMD_SET_LF_DIVISOR                                                0x020D
#define CMD_LF_SIMULATE_BIDIR                                             0x020E
#define CMD_SET_ADC_MUX                                                   0x020F
#define CMD_HID_CLONE_TAG                                                 0x0210
#define CMD_EM410X_WRITE_TAG                                              0x0211
#define CMD_INDALA_CLONE_TAG                                              0x0212
// for 224 bits UID
#define CMD_INDALA_CLONE_TAG_L                                            0x0213
#define CMD_T55XX_READ_BLOCK                                              0x0214
#define CMD_T55XX_WRITE_BLOCK                                             0x0215
#define CMD_T55XX_RESET_READ                                              0x0216
#define CMD_T55XX_WAKEUP	                                              0x0224

#define CMD_PCF7931_READ                                                  0x0217
#define CMD_PCF7931_WRITE                                                 0x0223
#define CMD_EM4X_READ_WORD                                                0x0218
#define CMD_EM4X_WRITE_WORD                                               0x0219
#define CMD_IO_DEMOD_FSK                                                  0x021A
#define CMD_IO_CLONE_TAG                                                  0x021B
#define CMD_EM410X_DEMOD                                                  0x021c
// Sampling configuration for LF reader/snooper
#define CMD_SET_LF_SAMPLING_CONFIG                                        0x021d
#define CMD_FSK_SIM_TAG                                                   0x021E
#define CMD_ASK_SIM_TAG                                                   0x021F
#define CMD_PSK_SIM_TAG                                                   0x0220
#define CMD_AWID_DEMOD_FSK                                                0x0221
#define CMD_VIKING_CLONE_TAG                                              0x0222


/* CMD_SET_ADC_MUX: ext1 is 0 for lopkd, 1 for loraw, 2 for hipkd, 3 for hiraw */

// For the 13.56 MHz tags
#define CMD_ACQUIRE_RAW_ADC_SAMPLES_ISO_15693                             0x0300
#define CMD_READ_SRI512_TAG                                               0x0303
#define CMD_READ_SRIX4K_TAG                                               0x0304
#define CMD_ISO_14443B_COMMAND                                            0x0305
#define CMD_READER_ISO_15693                                              0x0310
#define CMD_SIMTAG_ISO_15693                                              0x0311
#define CMD_RECORD_RAW_ADC_SAMPLES_ISO_15693                              0x0312
#define CMD_ISO_15693_COMMAND                                             0x0313
#define CMD_ISO_15693_COMMAND_DONE                                        0x0314
#define CMD_ISO_15693_FIND_AFI                                            0x0315
#define CMD_ISO_15693_DEBUG                                               0x0316
#define CMD_LF_SNOOP_RAW_ADC_SAMPLES                                      0x0317

// For Hitag2 transponders
#define CMD_SNOOP_HITAG                                                   0x0370
#define CMD_SIMULATE_HITAG                                                0x0371
#define CMD_READER_HITAG                                                  0x0372

#define CMD_SIMULATE_TAG_ISO_14443B                                       0x0381
#define CMD_SNOOP_ISO_14443B                                              0x0382
#define CMD_SNOOP_ISO_14443a                                              0x0383
#define CMD_SIMULATE_TAG_ISO_14443a                                       0x0384
#define CMD_READER_ISO_14443a                                             0x0385
#define CMD_SIMULATE_TAG_LEGIC_RF                                         0x0387
#define CMD_READER_LEGIC_RF                                               0x0388
#define CMD_WRITER_LEGIC_RF                                               0x0389
#define CMD_EPA_PACE_COLLECT_NONCE                                        0x038A
#define CMD_EPA_PACE_REPLAY                                               0x038B

#define CMD_SNOOP_ICLASS                                                  0x0392
#define CMD_SIMULATE_TAG_ICLASS                                           0x0393
#define CMD_READER_ICLASS                                                 0x0394
#define CMD_READER_ICLASS_REPLAY                                          0x0395
#define CMD_ICLASS_ISO14443A_WRITE										  0x0397
#define CMD_ICLASS_EML_MEMSET                                             0x0398

// For measurements of the antenna tuning
#define CMD_MEASURE_ANTENNA_TUNING                                        0x0400
#define CMD_MEASURE_ANTENNA_TUNING_HF                                     0x0401
#define CMD_MEASURED_ANTENNA_TUNING                                       0x0410
#define CMD_LISTEN_READER_FIELD                                           0x0420

// For direct FPGA control
#define CMD_FPGA_MAJOR_MODE_OFF                                           0x0500

// For mifare commands
#define CMD_MIFARE_SET_DBGMODE                                            0x0600
#define CMD_MIFARE_EML_MEMCLR                                             0x0601
#define CMD_MIFARE_EML_MEMSET                                             0x0602
#define CMD_MIFARE_EML_MEMGET                                             0x0603
#define CMD_MIFARE_EML_CARDLOAD                                           0x0604

// magic chinese card commands
#define CMD_MIFARE_CSETBLOCK                                              0x0605
#define CMD_MIFARE_CGETBLOCK                                              0x0606
#define CMD_MIFARE_CIDENT                                                 0x0607

#define CMD_SIMULATE_MIFARE_CARD                                          0x0610

#define CMD_READER_MIFARE                                                 0x0611
#define CMD_MIFARE_NESTED                                                 0x0612
#define	CMD_MIFARE_ACQUIRE_ENCRYPTED_NONCES                               0x0613


#define CMD_MIFARE_READBL                                                 0x0620
#define CMD_MIFAREU_READBL                                                0x0720
#define CMD_MIFARE_READSC                                                 0x0621
#define CMD_MIFAREU_READCARD                                              0x0721
#define CMD_MIFARE_WRITEBL                                                0x0622
#define CMD_MIFAREU_WRITEBL						                          0x0722
#define CMD_MIFAREU_WRITEBL_COMPAT					                      0x0723

#define CMD_MIFARE_CHKKEYS                                                0x0623

#define CMD_MIFARE_SNIFFER                                                0x0630
//ultralightC
#define CMD_MIFAREUC_AUTH                                                 0x0724
//0x0725 and 0x0726 no longer used 
#define CMD_MIFAREUC_SETPWD                                               0x0727


// mifare desfire
#define CMD_MIFARE_DESFIRE_READBL                                         0x0728
#define CMD_MIFARE_DESFIRE_WRITEBL                                        0x0729
#define CMD_MIFARE_DESFIRE_AUTH1                                          0x072a
#define CMD_MIFARE_DESFIRE_AUTH2                                          0x072b
#define CMD_MIFARE_DES_READER                                             0x072c
#define CMD_MIFARE_DESFIRE_INFO                                           0x072d
#define CMD_MIFARE_DESFIRE                                                0x072e

#define CMD_MIFARE_COLLECT_NONCES										  0x072f
				 
#define CMD_HF_SNIFFER                                                    0x0800

#define CMD_UNKNOWN                                                       0xFFFF


//Mifare simulation flags
#define FLAG_INTERACTIVE 0x01
#define FLAG_4B_UID_IN_DATA 0x02
#define FLAG_7B_UID_IN_DATA 0x04
#define FLAG_NR_AR_ATTACK 0x08


//Iclass reader flags
#define FLAG_ICLASS_READER_ONLY_ONCE 0x01
#define FLAG_ICLASS_READER_CC       0x02
#define FLAG_ICLASS_READER_CSN		0x04
#define FLAG_ICLASS_READER_CONF		0x08
#define FLAG_ICLASS_READER_AA		0x10
#define FLAG_ICLASS_READER_ONE_TRY      0x20


// CMD_DEVICE_INFO response packet has flags in arg[0], flag definitions:
/* Whether a bootloader that understands the common_area is present */
#define DEVICE_INFO_FLAG_BOOTROM_PRESENT         	(1<<0)

/* Whether a osimage that understands the common_area is present */
#define DEVICE_INFO_FLAG_OSIMAGE_PRESENT         	(1<<1)

/* Set if the bootloader is currently executing */
#define DEVICE_INFO_FLAG_CURRENT_MODE_BOOTROM    	(1<<2)

/* Set if the OS is currently executing */
#define DEVICE_INFO_FLAG_CURRENT_MODE_OS         	(1<<3)

/* Set if this device understands the extend start flash command */
#define DEVICE_INFO_FLAG_UNDERSTANDS_START_FLASH 	(1<<4)

/* CMD_START_FLASH may have three arguments: start of area to flash,
   end of area to flash, optional magic.
   The bootrom will not allow to overwrite itself unless this magic
   is given as third parameter */

#define START_FLASH_MAGIC 0x54494f44 // 'DOIT'

#endif
Commit	Line	Data
e9281ae8 JH	1	//-----------------------------------------------------------------------------
	2	// Jonathan Westhues, Mar 2006
	3	// Edits by Gerhard de Koning Gans, Sep 2007
	4	//
	5	// This code is licensed to you under the terms of the GNU GPL, version 2 or,
	6	// at your option, any later version. See the LICENSE.txt file for the text of
	7	// the license.
	8	//-----------------------------------------------------------------------------
	9	// Definitions for all the types of commands that may be sent over USB; our
	10	// own protocol.
	11	//-----------------------------------------------------------------------------
	12
	13	#ifndef __USB_CMD_H
	14	#define __USB_CMD_H
	15	#ifdef _MSC_VER
	16	typedef DWORD uint32_t;
	17	typedef BYTE uint8_t;
	18	#define PACKED
	19	// stuff
	20	#else
	21	#include <stdint.h>
	22	#include <stdbool.h>
	23	#define PACKED __attribute__((packed))
	24	#endif
	25
	26	typedef struct {
e66ff99c	27	uint32_t cmd;
e66ff99c	28	uint32_t arg[3];
e9281ae8	29	union {
e66ff99c	30	uint8_t asBytes[48];
e66ff99c	31	uint32_t asDwords[12];
e9281ae8 JH	32	} d;
	33	} PACKED UsbCommand;
	34
	35	// For the bootloader
	36	#define CMD_DEVICE_INFO 0x0000
	37	#define CMD_SETUP_WRITE 0x0001
	38	#define CMD_FINISH_WRITE 0x0003
	39	#define CMD_HARDWARE_RESET 0x0004
	40	#define CMD_START_FLASH 0x0005
	41	#define CMD_NACK 0x00fe
	42	#define CMD_ACK 0x00ff
	43
	44	// For general mucking around
	45	#define CMD_DEBUG_PRINT_STRING 0x0100
	46	#define CMD_DEBUG_PRINT_INTEGERS 0x0101
	47	#define CMD_DEBUG_PRINT_BYTES 0x0102
	48	#define CMD_LCD_RESET 0x0103
	49	#define CMD_LCD 0x0104
	50	#define CMD_BUFF_CLEAR 0x0105
	51	#define CMD_READ_MEM 0x0106
	52	#define CMD_VERSION 0x0107
7838f4be	53	#define CMD_STATUS 0x0108
	54	#define CMD_PING 0x0109
	55
e9281ae8 JH	56	// For low-frequency tags
	57	#define CMD_READ_TI_TYPE 0x0202
	58	#define CMD_WRITE_TI_TYPE 0x0203
	59	#define CMD_DOWNLOADED_RAW_BITS_TI_TYPE 0x0204
	60	#define CMD_ACQUIRE_RAW_ADC_SAMPLES_125K 0x0205
	61	#define CMD_MOD_THEN_ACQUIRE_RAW_ADC_SAMPLES_125K 0x0206
	62	#define CMD_DOWNLOAD_RAW_ADC_SAMPLES_125K 0x0207
	63	#define CMD_DOWNLOADED_RAW_ADC_SAMPLES_125K 0x0208
	64	#define CMD_DOWNLOADED_SIM_SAMPLES_125K 0x0209
	65	#define CMD_SIMULATE_TAG_125K 0x020A
	66	#define CMD_HID_DEMOD_FSK 0x020B
	67	#define CMD_HID_SIM_TAG 0x020C
	68	#define CMD_SET_LF_DIVISOR 0x020D
	69	#define CMD_LF_SIMULATE_BIDIR 0x020E
	70	#define CMD_SET_ADC_MUX 0x020F
	71	#define CMD_HID_CLONE_TAG 0x0210
	72	#define CMD_EM410X_WRITE_TAG 0x0211
	73	#define CMD_INDALA_CLONE_TAG 0x0212
	74	// for 224 bits UID
	75	#define CMD_INDALA_CLONE_TAG_L 0x0213
abd6112f	76	#define CMD_T55XX_READ_BLOCK 0x0214
abd6112f	77	#define CMD_T55XX_WRITE_BLOCK 0x0215
94422fa2	78	#define CMD_T55XX_RESET_READ 0x0216
9276e859	79	#define CMD_T55XX_WAKEUP 0x0224
9276e859	80
abd6112f	81	#define CMD_PCF7931_READ 0x0217
f3cfe428	82	#define CMD_PCF7931_WRITE 0x0223
abd6112f	83	#define CMD_EM4X_READ_WORD 0x0218
	84	#define CMD_EM4X_WRITE_WORD 0x0219
	85	#define CMD_IO_DEMOD_FSK 0x021A
	86	#define CMD_IO_CLONE_TAG 0x021B
	87	#define CMD_EM410X_DEMOD 0x021c
5de79e20	88	// Sampling configuration for LF reader/snooper
abd6112f	89	#define CMD_SET_LF_SAMPLING_CONFIG 0x021d
	90	#define CMD_FSK_SIM_TAG 0x021E
	91	#define CMD_ASK_SIM_TAG 0x021F
872e3d4d	92	#define CMD_PSK_SIM_TAG 0x0220
db25599d	93	#define CMD_AWID_DEMOD_FSK 0x0221
0de8e387	94	#define CMD_VIKING_CLONE_TAG 0x0222
e9281ae8	95
9276e859	96
e9281ae8 JH	97	/* CMD_SET_ADC_MUX: ext1 is 0 for lopkd, 1 for loraw, 2 for hipkd, 3 for hiraw */
	98
	99	// For the 13.56 MHz tags
	100	#define CMD_ACQUIRE_RAW_ADC_SAMPLES_ISO_15693 0x0300
e9281ae8 JH	101	#define CMD_READ_SRI512_TAG 0x0303
e9281ae8 JH	102	#define CMD_READ_SRIX4K_TAG 0x0304
5de79e20	103	#define CMD_ISO_14443B_COMMAND 0x0305
e9281ae8 JH	104	#define CMD_READER_ISO_15693 0x0310
	105	#define CMD_SIMTAG_ISO_15693 0x0311
	106	#define CMD_RECORD_RAW_ADC_SAMPLES_ISO_15693 0x0312
	107	#define CMD_ISO_15693_COMMAND 0x0313
	108	#define CMD_ISO_15693_COMMAND_DONE 0x0314
	109	#define CMD_ISO_15693_FIND_AFI 0x0315
	110	#define CMD_ISO_15693_DEBUG 0x0316
5de79e20	111	#define CMD_LF_SNOOP_RAW_ADC_SAMPLES 0x0317
e9281ae8 JH	112
	113	// For Hitag2 transponders
	114	#define CMD_SNOOP_HITAG 0x0370
	115	#define CMD_SIMULATE_HITAG 0x0371
	116	#define CMD_READER_HITAG 0x0372
	117
132a0217	118	#define CMD_SIMULATE_TAG_ISO_14443B 0x0381
132a0217	119	#define CMD_SNOOP_ISO_14443B 0x0382
e9281ae8 JH	120	#define CMD_SNOOP_ISO_14443a 0x0383
	121	#define CMD_SIMULATE_TAG_ISO_14443a 0x0384
	122	#define CMD_READER_ISO_14443a 0x0385
	123	#define CMD_SIMULATE_TAG_LEGIC_RF 0x0387
	124	#define CMD_READER_LEGIC_RF 0x0388
	125	#define CMD_WRITER_LEGIC_RF 0x0389
	126	#define CMD_EPA_PACE_COLLECT_NONCE 0x038A
d0f3338e	127	#define CMD_EPA_PACE_REPLAY 0x038B
e9281ae8 JH	128
	129	#define CMD_SNOOP_ICLASS 0x0392
	130	#define CMD_SIMULATE_TAG_ICLASS 0x0393
	131	#define CMD_READER_ICLASS 0x0394
5de79e20	132	#define CMD_READER_ICLASS_REPLAY 0x0395
	133	#define CMD_ICLASS_ISO14443A_WRITE 0x0397
	134	#define CMD_ICLASS_EML_MEMSET 0x0398
e9281ae8 JH	135
	136	// For measurements of the antenna tuning
	137	#define CMD_MEASURE_ANTENNA_TUNING 0x0400
	138	#define CMD_MEASURE_ANTENNA_TUNING_HF 0x0401
	139	#define CMD_MEASURED_ANTENNA_TUNING 0x0410
	140	#define CMD_LISTEN_READER_FIELD 0x0420
	141
	142	// For direct FPGA control
	143	#define CMD_FPGA_MAJOR_MODE_OFF 0x0500
	144
	145	// For mifare commands
	146	#define CMD_MIFARE_SET_DBGMODE 0x0600
	147	#define CMD_MIFARE_EML_MEMCLR 0x0601
	148	#define CMD_MIFARE_EML_MEMSET 0x0602
	149	#define CMD_MIFARE_EML_MEMGET 0x0603
	150	#define CMD_MIFARE_EML_CARDLOAD 0x0604
5de79e20	151
	152	// magic chinese card commands
	153	#define CMD_MIFARE_CSETBLOCK 0x0605
	154	#define CMD_MIFARE_CGETBLOCK 0x0606
	155	#define CMD_MIFARE_CIDENT 0x0607
e9281ae8 JH	156
	157	#define CMD_SIMULATE_MIFARE_CARD 0x0610
	158
	159	#define CMD_READER_MIFARE 0x0611
	160	#define CMD_MIFARE_NESTED 0x0612
c188b1b9	161	#define CMD_MIFARE_ACQUIRE_ENCRYPTED_NONCES 0x0613
c188b1b9	162
e9281ae8 JH	163
e9281ae8 JH	164	#define CMD_MIFARE_READBL 0x0620
5de79e20	165	#define CMD_MIFAREU_READBL 0x0720
e9281ae8	166	#define CMD_MIFARE_READSC 0x0621
5de79e20	167	#define CMD_MIFAREU_READCARD 0x0721
e9281ae8	168	#define CMD_MIFARE_WRITEBL 0x0622
5de79e20	169	#define CMD_MIFAREU_WRITEBL 0x0722
	170	#define CMD_MIFAREU_WRITEBL_COMPAT 0x0723
	171
e9281ae8 JH	172	#define CMD_MIFARE_CHKKEYS 0x0623
	173
	174	#define CMD_MIFARE_SNIFFER 0x0630
5de79e20	175	//ultralightC
	176	#define CMD_MIFAREUC_AUTH 0x0724
	177	//0x0725 and 0x0726 no longer used
	178	#define CMD_MIFAREUC_SETPWD 0x0727
	179
	180
	181	// mifare desfire
	182	#define CMD_MIFARE_DESFIRE_READBL 0x0728
	183	#define CMD_MIFARE_DESFIRE_WRITEBL 0x0729
	184	#define CMD_MIFARE_DESFIRE_AUTH1 0x072a
	185	#define CMD_MIFARE_DESFIRE_AUTH2 0x072b
	186	#define CMD_MIFARE_DES_READER 0x072c
	187	#define CMD_MIFARE_DESFIRE_INFO 0x072d
	188	#define CMD_MIFARE_DESFIRE 0x072e
	189
	190	#define CMD_MIFARE_COLLECT_NONCES 0x072f
1d0ccbe0	191
1d0ccbe0	192	#define CMD_HF_SNIFFER 0x0800
e9281ae8 JH	193
	194	#define CMD_UNKNOWN 0xFFFF
	195
5de79e20	196
	197	//Mifare simulation flags
	198	#define FLAG_INTERACTIVE 0x01
	199	#define FLAG_4B_UID_IN_DATA 0x02
	200	#define FLAG_7B_UID_IN_DATA 0x04
	201	#define FLAG_NR_AR_ATTACK 0x08
	202
	203
	204	//Iclass reader flags
	205	#define FLAG_ICLASS_READER_ONLY_ONCE 0x01
	206	#define FLAG_ICLASS_READER_CC 0x02
	207	#define FLAG_ICLASS_READER_CSN 0x04
	208	#define FLAG_ICLASS_READER_CONF 0x08
	209	#define FLAG_ICLASS_READER_AA 0x10
	210	#define FLAG_ICLASS_READER_ONE_TRY 0x20
	211
	212
	213
e9281ae8 JH	214	// CMD_DEVICE_INFO response packet has flags in arg[0], flag definitions:
	215	/* Whether a bootloader that understands the common_area is present */
	216	#define DEVICE_INFO_FLAG_BOOTROM_PRESENT (1<<0)
	217
	218	/* Whether a osimage that understands the common_area is present */
	219	#define DEVICE_INFO_FLAG_OSIMAGE_PRESENT (1<<1)
	220
	221	/* Set if the bootloader is currently executing */
	222	#define DEVICE_INFO_FLAG_CURRENT_MODE_BOOTROM (1<<2)
	223
	224	/* Set if the OS is currently executing */
	225	#define DEVICE_INFO_FLAG_CURRENT_MODE_OS (1<<3)
	226
	227	/* Set if this device understands the extend start flash command */
	228	#define DEVICE_INFO_FLAG_UNDERSTANDS_START_FLASH (1<<4)
	229
	230	/* CMD_START_FLASH may have three arguments: start of area to flash,
	231	end of area to flash, optional magic.
	232	The bootrom will not allow to overwrite itself unless this magic
	233	is given as third parameter */
	234
	235	#define START_FLASH_MAGIC 0x54494f44 // 'DOIT'
	236
	237	#endif