[proxmark3-svn] / client / scripts / tnp3sim.lua

local cmds = require('commands')
local getopt = require('getopt')
local bin = require('bin')
local lib14a = require('read14a')
local utils = require('utils')
local md5 = require('md5')
local toys = require('default_toys')

example =[[
	1. script run tnp3sim
	2. script run tnp3sim -m
	3. script run tnp3sim -m -i myfile
]]
author = "Iceman"
usage = "script run tnp3sim -h -m -i <filename>"
desc =[[
This script will try to load a binary datadump of a Mifare TNP3xxx card.
It vill try to validate all checksums and view some information stored in the dump
For an experimental mode, it tries to manipulate some data.
At last it sends all data to the PM3 device memory where it can be used in the command  "hf mf sim"

Arguments:
	-h             : this help
	-m             : Maxed out items (experimental)
	-i             : filename for the datadump to read (bin)

	]]

local TIMEOUT = 2000 -- Shouldn't take longer than 2 seconds
local DEBUG = false -- the debug flag
local RANDOM = '20436F707972696768742028432920323031302041637469766973696F6E2E20416C6C205269676874732052657365727665642E20'

local band = bit32.band
local bor = bit32.bor
local lshift = bit32.lshift
local rshift = bit32.rshift
local byte = string.byte
local char = string.char
local sub = string.sub
local format = string.format

--- 
-- A debug printout-function
function dbg(args)
	if not DEBUG then
		return
	end
	
    if type(args) == "table" then
		local i = 1
		while result[i] do
			dbg(result[i])
			i = i+1
		end
	else
		print("###", args)
	end	
end	
--- 
-- This is only meant to be used when errors occur
function oops(err)
	print("ERROR: ",err)
	return nil,err
end
--- 
-- Usage help
function help()
	print(desc)
	print("Example usage")
	print(example)
end
--
-- Exit message
function ExitMsg(msg)
	print( string.rep('--',20) )
	print( string.rep('--',20) )
	print(msg)
	print()
end

local function writedumpfile(infile)
	 t = infile:read("*all")
	 len = string.len(t)
	 local len,hex = bin.unpack(("H%d"):format(len),t)
	 return hex
end
-- blocks with data
-- there are two dataareas, in block 8 or block 36,   ( 1==8 ,
-- checksum type =  0, 1, 2, 3
local function GetCheckSum(blocks, dataarea, chksumtype)

	local crc
	local area = 36
	if  dataarea == 1 then
		area = 8
	end
	
	if chksumtype == 0 then
		crc = blocks[1]:sub(29,32)
	elseif chksumtype == 1 then
		crc = blocks[area]:sub(29,32)
	elseif chksumtype == 2 then	
		crc = blocks[area]:sub(25,28)
	elseif chksumtype == 3 then
		crc = blocks[area]:sub(21,24)		
	end
	return utils.SwapEndianness(crc,16)
end

local function SetCheckSum(blocks, chksumtype)

	if blocks == nil then return nil, 'Argument \"blocks\" nil' end
	local newcrc
	local area1 = 8
	local area2 = 36
	
	if chksumtype == 0 then
		newcrc = ('%04X'):format(CalcCheckSum(blocks,1,0))	
		blocks[1] = blocks[1]:sub(1,28)..newcrc:sub(3,4)..newcrc:sub(1,2)
	elseif chksumtype == 1 then
		newcrc = ('%04X'):format(CalcCheckSum(blocks,1,1))	
		blocks[area1] = blocks[area1]:sub(1,28)..newcrc:sub(3,4)..newcrc:sub(1,2)
		newcrc = ('%04X'):format(CalcCheckSum(blocks,2,1))	
		blocks[area2] = blocks[area2]:sub(1,28)..newcrc:sub(3,4)..newcrc:sub(1,2)
	elseif chksumtype == 2 then	
		newcrc = ('%04X'):format(CalcCheckSum(blocks,1,2))	
		blocks[area1] = blocks[area1]:sub(1,24)..newcrc:sub(3,4)..newcrc:sub(1,2)..blocks[area1]:sub(29,32)
		newcrc = ('%04X'):format(CalcCheckSum(blocks,2,2))	
		blocks[area2] = blocks[area2]:sub(1,24)..newcrc:sub(3,4)..newcrc:sub(1,2)..blocks[area2]:sub(29,32)
	elseif chksumtype == 3 then
		newcrc = ('%04X'):format(CalcCheckSum(blocks,1,3))	
		blocks[area1] = blocks[area1]:sub(1,20)..newcrc:sub(3,4)..newcrc:sub(1,2)..blocks[area1]:sub(25,32)
		newcrc = ('%04X'):format(CalcCheckSum(blocks,2,3))	
		blocks[area2] = blocks[area2]:sub(1,20)..newcrc:sub(3,4)..newcrc:sub(1,2)..blocks[area2]:sub(25,32)
	end
end

function CalcCheckSum(blocks, dataarea, chksumtype)
	local area = 36
	if dataarea == 1 then
		area = 8
	end
	
	if chksumtype == 0 then
		data = blocks[0]..blocks[1]:sub(1,28)
	elseif chksumtype == 1 then
		data = blocks[area]:sub(1,28)..'0500'
	elseif chksumtype == 2 then	
		data =	blocks[area+1]..blocks[area+2]..blocks[area+4]
	elseif chksumtype == 3 then
		data =  blocks[area+5]..blocks[area+6]..blocks[area+8]..string.rep('00',0xe0)	
	end
	return utils.Crc16(data)
end

local function ValidateCheckSums(blocks)

	local isOk, crc, calc
	-- Checksum Type 0
	crc = GetCheckSum(blocks,1,0)
	calc = CalcCheckSum(blocks, 1, 0)
	if crc == calc then isOk='Ok' else isOk = 'Error' end
	io.write( ('TYPE 0       : %04x = %04x -- %s\n'):format(crc,calc,isOk))

	-- Checksum Type 1 (DATAAREAHEADER 1)
	crc = GetCheckSum(blocks,1,1)
	calc = CalcCheckSum(blocks,1,1)
	if crc == calc then isOk='Ok' else isOk = 'Error' end
	io.write( ('TYPE 1 area 1: %04x = %04x -- %s\n'):format(crc,calc,isOk))
	
	-- Checksum Type 1 (DATAAREAHEADER 2)
	crc = GetCheckSum(blocks,2,1)
	calc = CalcCheckSum(blocks,2,1)
	if crc == calc then isOk='Ok' else isOk = 'Error' end
	io.write( ('TYPE 1 area 2: %04x = %04x -- %s\n'):format(crc,calc,isOk))
	
	-- Checksum Type 2 (DATAAREA 1)
	crc = GetCheckSum(blocks,1,2)
	calc = CalcCheckSum(blocks,1,2)
	if crc == calc then isOk='Ok' else isOk = 'Error' end	
	io.write( ('TYPE 2 area 1: %04x = %04x -- %s\n'):format(crc,calc,isOk))

	-- Checksum Type 2 (DATAAREA 2)
	crc = GetCheckSum(blocks,2,2)
	calc = CalcCheckSum(blocks,2,2)
	if crc == calc then isOk='Ok' else isOk = 'Error' end	
	io.write( ('TYPE 2 area 2: %04x = %04x -- %s\n'):format(crc,calc,isOk))

	-- Checksum Type 3 (DATAAREA 1)
	crc = GetCheckSum(blocks,1,3)
	calc = CalcCheckSum(blocks,1,3)
	if crc == calc then isOk='Ok' else isOk = 'Error' end	
	io.write( ('TYPE 3 area 1: %04x = %04x -- %s\n'):format(crc,calc,isOk))

	-- Checksum Type 3 (DATAAREA 2)
	crc = GetCheckSum(blocks,2,3)
	calc = CalcCheckSum(blocks,2,3)
	if crc == calc then isOk='Ok' else isOk = 'Error' end	
	io.write( ('TYPE 3 area 2: %04x = %04x -- %s\n'):format(crc,calc,isOk))
end

	local cmd
	local blockdata
	for _,b in pairs(blocks) do 
		
		blockdata = b
		
		if  _%4 ~= 3 then
			if (_ >= 8 and _<=21)  or  (_ >= 36 and _<=49) then
				local base = ('%s%s%02x%s'):format(blocks[0], blocks[1], _ , RANDOM)	
				local baseStr = utils.ConvertHexToAscii(base)
				local key = md5.sumhexa(baseStr)
				local enc = core.aes128_encrypt(key, blockdata)
				local hex = utils.ConvertAsciiToBytes(enc)
				hex = utils.ConvertBytesToHex(hex)
			
				blockdata = hex
				io.write( _..',')
			end
		end

		cmd = Command:new{cmd = cmds.CMD_MIFARE_EML_MEMSET, arg1 = _ ,arg2 = 1,arg3 = 0, data = blockdata}
		local err = core.SendCommand(cmd:getBytes())
		if err then 
			return err
		end
	end
	io.write('\n')
end

local function Num2Card(m, l)

	local k = {
		0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38, 0x39,0x42, 0x43, 0x44, 0x46, 0x47, 0x48, 0x4A, 0x4B,
		0x4C, 0x4D, 0x4E, 0x50, 0x51, 0x52, 0x53, 0x54,0x56, 0x57, 0x58, 0x59, 0x5A, 0x00
	}
	local msw = tonumber(utils.SwapEndiannessStr(m,32),16)
	local lsw = tonumber(utils.SwapEndiannessStr(l,32),16)

	if msw > 0x17ea1 then
		return "too big"
	end

	if msw == 0x17ea1 and lsw > 0x8931fee8 then
		return "out of range"
	end

	local s = ""
	local index
	for i = 1,10 do
		index, msw, lsw = DivideByK( msw, lsw)
		if ( index <= 1 ) then
			s = char(k[index]) .. s
		else
			s = char(k[index-1]) .. s
		end 
		print (index-1, msw, lsw)
	end
    return s
end
--33LRT-LM9Q9
--7, 122, 3474858630
--20, 4, 1008436634
--7, 0, 627182959
--17, 0, 21626998
--16, 0, 745758
--23, 0, 25715
--21, 0, 886
--16, 0, 30
--1, 0, 1
--1, 0, 0

function DivideByK(msw, lsw)

	local lowLSW
	local highLSW
	local remainder = 0
	local RADIX = 29

	--local num = 0 | band( rshift(msw,16), 0xffff)
	local num = band( rshift(msw, 16), 0xffff)
 
	--highLSW = 0 | lshift( (num / RADIX) , 16)
	highLSW = lshift( (num / RADIX) , 16)
	remainder = num % RADIX

	num =  bor( lshift(remainder,16), band(msw, 0xffff))

	--highLSW |= num / RADIX
	highLSW = highLSW or (num / RADIX)
	remainder = num % RADIX

	num =  bor( lshift(remainder,16), ( band(rshift(lsw,16), 0xffff)))

	--lowLSW = 0 | (num / RADIX) << 16
	lowLSW = 0 or (lshift( (num / RADIX), 16))
	remainder = num % RADIX

	num =  bor( lshift(remainder,16) , band(lsw, 0xffff) )

	lowLSW = bor(lowLSW, (num / RADIX))
	remainder = num % RADIX
	return remainder, highLSW, lowLSW
	
	            -- uint num = 0 | (msw >> 16) & 0xffff;
 
            -- highLSW = 0 | (num / RADIX) << 16;
            -- remainder = num % RADIX;

            -- num = (remainder << 16) | (msw & 0xffff);
 
            -- highLSW |= num / RADIX;
            -- remainder = num % RADIX;

            -- num = (remainder << 16) | ((lsw >> 16) & 0xffff);

            -- lowLSW = 0 | (num / RADIX) << 16;
            -- remainder = num % RADIX;

            -- num = (remainder << 16) | (lsw & 0xffff);

            -- lowLSW |= num / RADIX;
            -- remainder = num % RADIX;

end

local function main(args)

	print( string.rep('--',20) )
	print( string.rep('--',20) )
	
	local result, err, hex
	local maxed = false
	local inputTemplate = "dumpdata.bin"
	local outputTemplate = os.date("toydump_%Y-%m-%d_%H%M");
	
		-- Arguments for the script
	for o, a in getopt.getopt(args, 'hmi:o:') do
		if o == "h" then return help() end		
		if o == "m" then maxed = true end
		if o == "o" then outputTemplate = a end		
		if o == "i" then inputTemplate = a end
	end
	
	-- Turn off Debug
	local cmdSetDbgOff = "hf mf dbg 0"
	core.console( cmdSetDbgOff) 
	
	-- Load dump.bin file
	print( (' Load data from %s'):format(inputTemplate))
	hex, err = utils.ReadDumpFile(inputTemplate)
	if not hex then return oops(err) end
	
	local blocks = {}
	local blockindex = 0
	for i = 1, #hex, 32 do
		blocks[blockindex] = hex:sub(i,i+31)
		blockindex = blockindex + 1
	end

	if DEBUG then
		print(' Validating checksums')
		ValidateCheckSums(blocks)
	end
	
	--
	print( string.rep('--',20) )	
	print(' Gathering info')
	local uid = blocks[0]:sub(1,8)
	local toytype = blocks[1]:sub(1,4)
	local cardidLsw = blocks[1]:sub(9,16)
	local cardidMsw = blocks[1]:sub(17,24)
	local subtype  = blocks[1]:sub(25,28)

	-- Show info 
	print( string.rep('--',20) )
	
	local item = toys.Find( toytype, subtype)
	if item then
		local itemStr = ('%s - %s (%s)'):format(item[6],item[5], item[4])
		print(' ITEM TYPE : '..itemStr )
	else
		print( (' ITEM TYPE : 0x%s 0x%s'):format(toytype, subtype) )
	end	
	
	print( ('       UID : 0x%s'):format(uid) )
	print( ('    CARDID : 0x%s %s [%s]'):format(
								cardidMsw,cardidLsw, 
								--Num2Card(cardidMsw, cardidLsw))
								'')
								)
	print( string.rep('--',20) )


	-- Experience should be:  	
	local experience = blocks[8]:sub(1,6)
	print(('Experience  : %d'):format(utils.SwapEndianness(experience,16)))
	
	local money = blocks[8]:sub(7,10)
	print(('Money       : %d'):format(utils.SwapEndianness(money,16)))

	-- 
	
	-- Sequence number
	local seqnum = blocks[8]:sub(18,19)
	print(('Sequence number : %d'):format( tonumber(seqnum,16)))
	
	local fairy = blocks[9]:sub(1,8)
	--FD0F = Left, FF0F = Right
	local path = 'not choosen'
	if fairy:sub(2,2) == 'D' then
		path = 'Left'
	elseif fairy:sub(2,2) == 'F' then
		path = 'Right'
	end
	print(('Fairy       : %d [Path: %s] '):format(utils.SwapEndianness(fairy,24),path))
	
	local hat = blocks[9]:sub(8,11)
	print(('Hat         : %d'):format(utils.SwapEndianness(hat,16)))

	local level = blocks[13]:sub(27,28)
	print(('LEVEL : %d'):format( tonumber(level,16)))
Commit	Line	Data
b915fda3	1	local cmds = require('commands')
	2	local getopt = require('getopt')
	3	local bin = require('bin')
	4	local lib14a = require('read14a')
	5	local utils = require('utils')
	6	local md5 = require('md5')
cff17e78	7	local toys = require('default_toys')
b915fda3	8
	9	example =[[
	10	1. script run tnp3sim
	11	2. script run tnp3sim -m
	12	3. script run tnp3sim -m -i myfile
	13	]]
	14	author = "Iceman"
	15	usage = "script run tnp3sim -h -m -i <filename>"
	16	desc =[[
	17	This script will try to load a binary datadump of a Mifare TNP3xxx card.
	18	It vill try to validate all checksums and view some information stored in the dump
	19	For an experimental mode, it tries to manipulate some data.
	20	At last it sends all data to the PM3 device memory where it can be used in the command "hf mf sim"
	21
	22	Arguments:
	23	-h : this help
	24	-m : Maxed out items (experimental)
	25	-i : filename for the datadump to read (bin)
b915fda3	26
1b3c567d	27	]]
04a6113f	28
1b3c567d	29	local TIMEOUT = 2000 -- Shouldn't take longer than 2 seconds
	30	local DEBUG = false -- the debug flag
	31	local RANDOM = '20436F707972696768742028432920323031302041637469766973696F6E2E20416C6C205269676874732052657365727665642E20'
04a6113f	32
	33	local band = bit32.band
	34	local bor = bit32.bor
	35	local lshift = bit32.lshift
	36	local rshift = bit32.rshift
	37	local byte = string.byte
	38	local char = string.char
	39	local sub = string.sub
	40	local format = string.format
	41
b915fda3	42	---
	43	-- A debug printout-function
	44	function dbg(args)
	45	if not DEBUG then
	46	return
	47	end
	48
	49	if type(args) == "table" then
	50	local i = 1
	51	while result[i] do
	52	dbg(result[i])
	53	i = i+1
	54	end
	55	else
	56	print("###", args)
	57	end
	58	end
	59	---
	60	-- This is only meant to be used when errors occur
	61	function oops(err)
	62	print("ERROR: ",err)
3b4fa542	63	return nil,err
b915fda3	64	end
	65	---
	66	-- Usage help
	67	function help()
	68	print(desc)
	69	print("Example usage")
	70	print(example)
	71	end
	72	--
	73	-- Exit message
	74	function ExitMsg(msg)
	75	print( string.rep('--',20) )
	76	print( string.rep('--',20) )
	77	print(msg)
	78	print()
	79	end
	80
b915fda3	81	local function writedumpfile(infile)
	82	t = infile:read("*all")
	83	len = string.len(t)
	84	local len,hex = bin.unpack(("H%d"):format(len),t)
	85	return hex
	86	end
	87	-- blocks with data
	88	-- there are two dataareas, in block 8 or block 36, ( 1==8 ,
	89	-- checksum type = 0, 1, 2, 3
	90	local function GetCheckSum(blocks, dataarea, chksumtype)
	91
	92	local crc
	93	local area = 36
	94	if dataarea == 1 then
	95	area = 8
	96	end
	97
	98	if chksumtype == 0 then
	99	crc = blocks[1]:sub(29,32)
	100	elseif chksumtype == 1 then
	101	crc = blocks[area]:sub(29,32)
	102	elseif chksumtype == 2 then
	103	crc = blocks[area]:sub(25,28)
	104	elseif chksumtype == 3 then
	105	crc = blocks[area]:sub(21,24)
	106	end
	107	return utils.SwapEndianness(crc,16)
	108	end
	109
	110	local function SetCheckSum(blocks, chksumtype)
	111
	112	if blocks == nil then return nil, 'Argument \"blocks\" nil' end
	113	local newcrc
	114	local area1 = 8
	115	local area2 = 36
	116
	117	if chksumtype == 0 then
	118	newcrc = ('%04X'):format(CalcCheckSum(blocks,1,0))
	119	blocks[1] = blocks[1]:sub(1,28)..newcrc:sub(3,4)..newcrc:sub(1,2)
	120	elseif chksumtype == 1 then
	121	newcrc = ('%04X'):format(CalcCheckSum(blocks,1,1))
	122	blocks[area1] = blocks[area1]:sub(1,28)..newcrc:sub(3,4)..newcrc:sub(1,2)
	123	newcrc = ('%04X'):format(CalcCheckSum(blocks,2,1))
	124	blocks[area2] = blocks[area2]:sub(1,28)..newcrc:sub(3,4)..newcrc:sub(1,2)
	125	elseif chksumtype == 2 then
	126	newcrc = ('%04X'):format(CalcCheckSum(blocks,1,2))
	127	blocks[area1] = blocks[area1]:sub(1,24)..newcrc:sub(3,4)..newcrc:sub(1,2)..blocks[area1]:sub(29,32)
	128	newcrc = ('%04X'):format(CalcCheckSum(blocks,2,2))
	129	blocks[area2] = blocks[area2]:sub(1,24)..newcrc:sub(3,4)..newcrc:sub(1,2)..blocks[area2]:sub(29,32)
	130	elseif chksumtype == 3 then
	131	newcrc = ('%04X'):format(CalcCheckSum(blocks,1,3))
	132	blocks[area1] = blocks[area1]:sub(1,20)..newcrc:sub(3,4)..newcrc:sub(1,2)..blocks[area1]:sub(25,32)
	133	newcrc = ('%04X'):format(CalcCheckSum(blocks,2,3))
	134	blocks[area2] = blocks[area2]:sub(1,20)..newcrc:sub(3,4)..newcrc:sub(1,2)..blocks[area2]:sub(25,32)
	135	end
	136	end
	137
	138	function CalcCheckSum(blocks, dataarea, chksumtype)
	139	local area = 36
	140	if dataarea == 1 then
	141	area = 8
	142	end
	143
	144	if chksumtype == 0 then
145	data = blocks[0]..blocks[1]:sub(1,28)
146	elseif chksumtype == 1 then
147	data = blocks[area]:sub(1,28)..'0500'
148	elseif chksumtype == 2 then
149	data = blocks[area+1]..blocks[area+2]..blocks[area+4]
150	elseif chksumtype == 3 then
151	data = blocks[area+5]..blocks[area+6]..blocks[area+8]..string.rep('00',0xe0)
152	end
153	return utils.Crc16(data)
154	end
155
156	local function ValidateCheckSums(blocks)
157
158	local isOk, crc, calc
159	-- Checksum Type 0
160	crc = GetCheckSum(blocks,1,0)
161	calc = CalcCheckSum(blocks, 1, 0)
162	if crc == calc then isOk='Ok' else isOk = 'Error' end
163	io.write( ('TYPE 0 : %04x = %04x -- %s\n'):format(crc,calc,isOk))
164
165	-- Checksum Type 1 (DATAAREAHEADER 1)
166	crc = GetCheckSum(blocks,1,1)
167	calc = CalcCheckSum(blocks,1,1)
168	if crc == calc then isOk='Ok' else isOk = 'Error' end
169	io.write( ('TYPE 1 area 1: %04x = %04x -- %s\n'):format(crc,calc,isOk))
170
171	-- Checksum Type 1 (DATAAREAHEADER 2)
172	crc = GetCheckSum(blocks,2,1)
173	calc = CalcCheckSum(blocks,2,1)
174	if crc == calc then isOk='Ok' else isOk = 'Error' end
175	io.write( ('TYPE 1 area 2: %04x = %04x -- %s\n'):format(crc,calc,isOk))
176
177	-- Checksum Type 2 (DATAAREA 1)
178	crc = GetCheckSum(blocks,1,2)
179	calc = CalcCheckSum(blocks,1,2)
180	if crc == calc then isOk='Ok' else isOk = 'Error' end
181	io.write( ('TYPE 2 area 1: %04x = %04x -- %s\n'):format(crc,calc,isOk))
182
183	-- Checksum Type 2 (DATAAREA 2)
184	crc = GetCheckSum(blocks,2,2)
185	calc = CalcCheckSum(blocks,2,2)
186	if crc == calc then isOk='Ok' else isOk = 'Error' end
187	io.write( ('TYPE 2 area 2: %04x = %04x -- %s\n'):format(crc,calc,isOk))
188
189	-- Checksum Type 3 (DATAAREA 1)
190	crc = GetCheckSum(blocks,1,3)
191	calc = CalcCheckSum(blocks,1,3)
192	if crc == calc then isOk='Ok' else isOk = 'Error' end
193	io.write( ('TYPE 3 area 1: %04x = %04x -- %s\n'):format(crc,calc,isOk))
194
195	-- Checksum Type 3 (DATAAREA 2)
196	crc = GetCheckSum(blocks,2,3)
197	calc = CalcCheckSum(blocks,2,3)
198	if crc == calc then isOk='Ok' else isOk = 'Error' end
199	io.write( ('TYPE 3 area 2: %04x = %04x -- %s\n'):format(crc,calc,isOk))
200	end
201
b915fda3	202	local cmd
	203	local blockdata
	204	for _,b in pairs(blocks) do
	205
	206	blockdata = b
	207
	208	if _%4 ~= 3 then
	209	if (_ >= 8 and _<=21) or (_ >= 36 and _<=49) then
1b3c567d	210	local base = ('%s%s%02x%s'):format(blocks[0], blocks[1], _ , RANDOM)
b915fda3	211	local baseStr = utils.ConvertHexToAscii(base)
b915fda3	212	local key = md5.sumhexa(baseStr)
1b3c567d	213	local enc = core.aes128_encrypt(key, blockdata)
b915fda3	214	local hex = utils.ConvertAsciiToBytes(enc)
	215	hex = utils.ConvertBytesToHex(hex)
	216
	217	blockdata = hex
	218	io.write( _..',')
	219	end
	220	end
	221
	222	cmd = Command:new{cmd = cmds.CMD_MIFARE_EML_MEMSET, arg1 = _ ,arg2 = 1,arg3 = 0, data = blockdata}
	223	local err = core.SendCommand(cmd:getBytes())
	224	if err then
	225	return err
	226	end
	227	end
	228	io.write('\n')
	229	end
	230
04a6113f	231	local function Num2Card(m, l)
	232
	233	local k = {
	234	0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38, 0x39,0x42, 0x43, 0x44, 0x46, 0x47, 0x48, 0x4A, 0x4B,
	235	0x4C, 0x4D, 0x4E, 0x50, 0x51, 0x52, 0x53, 0x54,0x56, 0x57, 0x58, 0x59, 0x5A, 0x00
	236	}
	237	local msw = tonumber(utils.SwapEndiannessStr(m,32),16)
	238	local lsw = tonumber(utils.SwapEndiannessStr(l,32),16)
	239
	240	if msw > 0x17ea1 then
	241	return "too big"
	242	end
	243
	244	if msw == 0x17ea1 and lsw > 0x8931fee8 then
	245	return "out of range"
	246	end
	247
	248	local s = ""
	249	local index
	250	for i = 1,10 do
	251	index, msw, lsw = DivideByK( msw, lsw)
	252	if ( index <= 1 ) then
	253	s = char(k[index]) .. s
	254	else
	255	s = char(k[index-1]) .. s
	256	end
	257	print (index-1, msw, lsw)
	258	end
	259	return s
	260	end
	261	--33LRT-LM9Q9
	262	--7, 122, 3474858630
	263	--20, 4, 1008436634
	264	--7, 0, 627182959
	265	--17, 0, 21626998
	266	--16, 0, 745758
	267	--23, 0, 25715
	268	--21, 0, 886
	269	--16, 0, 30
	270	--1, 0, 1
	271	--1, 0, 0
	272
	273	function DivideByK(msw, lsw)
	274
	275	local lowLSW
	276	local highLSW
	277	local remainder = 0
	278	local RADIX = 29
	279
	280	--local num = 0 \| band( rshift(msw,16), 0xffff)
	281	local num = band( rshift(msw, 16), 0xffff)
	282
	283	--highLSW = 0 \| lshift( (num / RADIX) , 16)
	284	highLSW = lshift( (num / RADIX) , 16)
	285	remainder = num % RADIX
	286
	287	num = bor( lshift(remainder,16), band(msw, 0xffff))
	288
	289	--highLSW \|= num / RADIX
	290	highLSW = highLSW or (num / RADIX)
	291	remainder = num % RADIX
	292
	293	num = bor( lshift(remainder,16), ( band(rshift(lsw,16), 0xffff)))
	294
295	--lowLSW = 0 \| (num / RADIX) << 16
296	lowLSW = 0 or (lshift( (num / RADIX), 16))
297	remainder = num % RADIX
298
299	num = bor( lshift(remainder,16) , band(lsw, 0xffff) )
300
301	lowLSW = bor(lowLSW, (num / RADIX))
302	remainder = num % RADIX
303	return remainder, highLSW, lowLSW
304
40762506	305	-- uint num = 0 \| (msw >> 16) & 0xffff;
04a6113f	306
40762506	307	-- highLSW = 0 \| (num / RADIX) << 16;
40762506	308	-- remainder = num % RADIX;
04a6113f	309
40762506	310	-- num = (remainder << 16) \| (msw & 0xffff);
04a6113f	311
40762506	312	-- highLSW \|= num / RADIX;
40762506	313	-- remainder = num % RADIX;
04a6113f	314
40762506	315	-- num = (remainder << 16) \| ((lsw >> 16) & 0xffff);
04a6113f	316
40762506	317	-- lowLSW = 0 \| (num / RADIX) << 16;
40762506	318	-- remainder = num % RADIX;
04a6113f	319
40762506	320	-- num = (remainder << 16) \| (lsw & 0xffff);
04a6113f	321
40762506	322	-- lowLSW \|= num / RADIX;
40762506	323	-- remainder = num % RADIX;
04a6113f	324
	325	end
	326
b915fda3	327	local function main(args)
	328
	329	print( string.rep('--',20) )
	330	print( string.rep('--',20) )
	331
	332	local result, err, hex
	333	local maxed = false
	334	local inputTemplate = "dumpdata.bin"
	335	local outputTemplate = os.date("toydump_%Y-%m-%d_%H%M");
	336
	337	-- Arguments for the script
	338	for o, a in getopt.getopt(args, 'hmi:o:') do
	339	if o == "h" then return help() end
	340	if o == "m" then maxed = true end
	341	if o == "o" then outputTemplate = a end
	342	if o == "i" then inputTemplate = a end
	343	end
	344
	345	-- Turn off Debug
	346	local cmdSetDbgOff = "hf mf dbg 0"
	347	core.console( cmdSetDbgOff)
	348
b915fda3	349	-- Load dump.bin file
	350	print( (' Load data from %s'):format(inputTemplate))
	351	hex, err = utils.ReadDumpFile(inputTemplate)
	352	if not hex then return oops(err) end
	353
	354	local blocks = {}
	355	local blockindex = 0
	356	for i = 1, #hex, 32 do
	357	blocks[blockindex] = hex:sub(i,i+31)
	358	blockindex = blockindex + 1
	359	end
	360
	361	if DEBUG then
1b3c567d	362	print(' Validating checksums')
b915fda3	363	ValidateCheckSums(blocks)
	364	end
	365
	366	--
	367	print( string.rep('--',20) )
	368	print(' Gathering info')
	369	local uid = blocks[0]:sub(1,8)
c3fe354b	370	local toytype = blocks[1]:sub(1,4)
04a6113f	371	local cardidLsw = blocks[1]:sub(9,16)
04a6113f	372	local cardidMsw = blocks[1]:sub(17,24)
c3fe354b	373	local subtype = blocks[1]:sub(25,28)
b915fda3	374
	375	-- Show info
	376	print( string.rep('--',20) )
c3fe354b	377
	378	local item = toys.Find( toytype, subtype)
	379	if item then
	380	local itemStr = ('%s - %s (%s)'):format(item[6],item[5], item[4])
1b3c567d	381	print(' ITEM TYPE : '..itemStr )
c3fe354b	382	else
	383	print( (' ITEM TYPE : 0x%s 0x%s'):format(toytype, subtype) )
	384	end
	385
b915fda3	386	print( (' UID : 0x%s'):format(uid) )
04a6113f	387	print( (' CARDID : 0x%s %s [%s]'):format(
04a6113f	388	cardidMsw,cardidLsw,
40762506	389	--Num2Card(cardidMsw, cardidLsw))
40762506	390	'')
04a6113f	391	)
b915fda3	392	print( string.rep('--',20) )
b915fda3	393
04a6113f	394
1b3c567d	395	-- Experience should be:
b915fda3	396	local experience = blocks[8]:sub(1,6)
1b3c567d	397	print(('Experience : %d'):format(utils.SwapEndianness(experience,16)))
1b3c567d	398
b915fda3	399	local money = blocks[8]:sub(7,10)
b915fda3	400	print(('Money : %d'):format(utils.SwapEndianness(money,16)))
1b3c567d	401
	402	--
	403
	404	-- Sequence number
	405	local seqnum = blocks[8]:sub(18,19)
	406	print(('Sequence number : %d'):format( tonumber(seqnum,16)))
	407
b915fda3	408	local fairy = blocks[9]:sub(1,8)
	409	--FD0F = Left, FF0F = Right
	410	local path = 'not choosen'
	411	if fairy:sub(2,2) == 'D' then
	412	path = 'Left'
	413	elseif fairy:sub(2,2) == 'F' then
	414	path = 'Right'
	415	end
	416	print(('Fairy : %d [Path: %s] '):format(utils.SwapEndianness(fairy,24),path))
	417
	418	local hat = blocks[9]:sub(8,11)
	419	print(('Hat : %d'):format(utils.SwapEndianness(hat,16)))
1b3c567d	420
	421	local level = blocks[13]:sub(27,28)
	422	print(('LEVEL : %d'):format( tonumber(level,16)))
fb2d2488	423