1 //----------------------------------------------------------------------------- 
   2 // Copyright (C) 2010 iZsh <izsh at fail0verflow.com> 
   4 // This code is licensed to you under the terms of the GNU GPL, version 2 or, 
   5 // at your option, any later version. See the LICENSE.txt file for the text of 
   7 //----------------------------------------------------------------------------- 
   8 // Data and Graph commands 
   9 //----------------------------------------------------------------------------- 
  11 #include <stdio.h>    // also included in util.h 
  12 #include <string.h>   // also included in util.h 
  13 #include <limits.h>   // for CmdNorm INT_MIN && INT_MAX 
  14 #include "data.h"     // also included in util.h 
  18 #include "proxmark3.h" 
  19 #include "ui.h"       // for show graph controls 
  20 #include "graph.h"    // for graph data 
  21 #include "cmdparser.h"// already included in cmdmain.h 
  22 #include "usb_cmd.h"  // already included in cmdmain.h and proxmark3.h 
  23 #include "lfdemod.h"  // for demod code 
  24 #include "crc.h"      // for pyramid checksum maxim 
  25 #include "crc16.h"    // for FDXB demod checksum 
  26 #include "loclass/cipherutils.h" // for decimating samples in getsamples 
  28 uint8_t DemodBuffer
[MAX_DEMOD_BUF_LEN
]; 
  29 uint8_t g_debugMode 
= 0; 
  30 size_t DemodBufferLen 
= 0; 
  31 static int CmdHelp(const char *Cmd
); 
  33 int usage_data_printdemodbuf(void){ 
  34         PrintAndLog("Usage: data printdemodbuffer x o <offset> l <length>"); 
  35         PrintAndLog("Options:"); 
  36         PrintAndLog("       h          This help"); 
  37         PrintAndLog("       x          output in hex (omit for binary output)"); 
  38         PrintAndLog("       o <offset> enter offset in # of bits"); 
  39         PrintAndLog("       l <length> enter length to print in # of bits or hex characters respectively"); 
  42 int usage_data_askem410xdemod(void){ 
  43         PrintAndLog("Usage:  data askem410xdemod [clock] <0|1> [maxError]"); 
  44         PrintAndLog("     [set clock as integer] optional, if not set, autodetect."); 
  45         PrintAndLog("     <invert>, 1 for invert output"); 
  46         PrintAndLog("     [set maximum allowed errors], default = 100."); 
  48         PrintAndLog("    sample: data askem410xdemod        = demod an EM410x Tag ID from GraphBuffer"); 
  49         PrintAndLog("          : data askem410xdemod 32     = demod an EM410x Tag ID from GraphBuffer using a clock of RF/32"); 
  50         PrintAndLog("          : data askem410xdemod 32 1   = demod an EM410x Tag ID from GraphBuffer using a clock of RF/32 and inverting data"); 
  51         PrintAndLog("          : data askem410xdemod 1      = demod an EM410x Tag ID from GraphBuffer while inverting data"); 
  52         PrintAndLog("          : data askem410xdemod 64 1 0 = demod an EM410x Tag ID from GraphBuffer using a clock of RF/64 and inverting data and allowing 0 demod errors"); 
  55 int usage_data_manrawdecode(void){ 
  56         PrintAndLog("Usage:  data manrawdecode [invert] [maxErr]"); 
  57         PrintAndLog("     Takes 10 and 01 and converts to 0 and 1 respectively"); 
  58         PrintAndLog("     --must have binary sequence in demodbuffer (run data askrawdemod first)"); 
  59         PrintAndLog("  [invert]  invert output");                
  60         PrintAndLog("  [maxErr]  set number of errors allowed (default = 20)");          
  62         PrintAndLog("    sample: data manrawdecode   = decode manchester bitstream from the demodbuffer"); 
  65 int usage_data_biphaserawdecode(void){ 
  66         PrintAndLog("Usage:  data biphaserawdecode [offset] [invert] [maxErr]"); 
  67         PrintAndLog("     Converts 10 or 01 to 1 and 11 or 00 to 0"); 
  68         PrintAndLog("     --must have binary sequence in demodbuffer (run data askrawdemod first)"); 
  69         PrintAndLog("     --invert for Conditional Dephase Encoding (CDP) AKA Differential Manchester"); 
  71         PrintAndLog("     [offset <0|1>], set to 0 not to adjust start position or to 1 to adjust decode start position"); 
  72         PrintAndLog("     [invert <0|1>], set to 1 to invert output"); 
  73         PrintAndLog("     [maxErr int],   set max errors tolerated - default=20"); 
  75         PrintAndLog("    sample: data biphaserawdecode     = decode biphase bitstream from the demodbuffer"); 
  76         PrintAndLog("    sample: data biphaserawdecode 1 1 = decode biphase bitstream from the demodbuffer, set offset, and invert output"); 
  79 int usage_data_rawdemod(void){ 
  80         PrintAndLog("Usage:  data rawdemod [modulation] <help>|<options>"); 
  81         PrintAndLog("   [modulation] as 2 char, 'ab' for ask/biphase, 'am' for ask/manchester, 'ar' for ask/raw, 'fs' for fsk, ...");            
  82         PrintAndLog("         'nr' for nrz/direct, 'p1' for psk1, 'p2' for psk2"); 
  83         PrintAndLog("   <help> as 'h', prints the help for the specific modulation");    
  84         PrintAndLog("   <options> see specific modulation help for optional parameters");                                
  86         PrintAndLog("    sample: data rawdemod fs h         = print help specific to fsk demod"); 
  87         PrintAndLog("          : data rawdemod fs           = demod GraphBuffer using: fsk - autodetect"); 
  88         PrintAndLog("          : data rawdemod ab           = demod GraphBuffer using: ask/biphase - autodetect"); 
  89         PrintAndLog("          : data rawdemod am           = demod GraphBuffer using: ask/manchester - autodetect"); 
  90         PrintAndLog("          : data rawdemod ar           = demod GraphBuffer using: ask/raw - autodetect"); 
  91         PrintAndLog("          : data rawdemod nr           = demod GraphBuffer using: nrz/direct - autodetect"); 
  92         PrintAndLog("          : data rawdemod p1           = demod GraphBuffer using: psk1 - autodetect"); 
  93         PrintAndLog("          : data rawdemod p2           = demod GraphBuffer using: psk2 - autodetect"); 
  96 int usage_data_rawdemod_am(void){ 
  97         PrintAndLog("Usage:  data rawdemod am <s> [clock] <invert> [maxError] [maxLen] [amplify]"); 
  98         PrintAndLog("     ['s'] optional, check for Sequence Terminator"); 
  99         PrintAndLog("     [set clock as integer] optional, if not set, autodetect"); 
 100         PrintAndLog("     <invert>, 1 to invert output"); 
 101         PrintAndLog("     [set maximum allowed errors], default = 100"); 
 102         PrintAndLog("     [set maximum Samples to read], default = 32768 (512 bits at rf/64)"); 
 103         PrintAndLog("     <amplify>, 'a' to attempt demod with ask amplification, default = no amp"); 
 105         PrintAndLog("    sample: data rawdemod am        = demod an ask/manchester tag from GraphBuffer"); 
 106         PrintAndLog("          : data rawdemod am 32     = demod an ask/manchester tag from GraphBuffer using a clock of RF/32"); 
 107         PrintAndLog("          : data rawdemod am 32 1   = demod an ask/manchester tag from GraphBuffer using a clock of RF/32 and inverting data"); 
 108         PrintAndLog("          : data rawdemod am 1      = demod an ask/manchester tag from GraphBuffer while inverting data"); 
 109         PrintAndLog("          : data rawdemod am 64 1 0 = demod an ask/manchester tag from GraphBuffer using a clock of RF/64, inverting data and allowing 0 demod errors"); 
 112 int usage_data_rawdemod_ab(void){ 
 113         PrintAndLog("Usage:  data rawdemod ab [offset] [clock] <invert> [maxError] [maxLen] <amplify>"); 
 114         PrintAndLog("     [offset], offset to begin biphase, default=0"); 
 115         PrintAndLog("     [set clock as integer] optional, if not set, autodetect"); 
 116         PrintAndLog("     <invert>, 1 to invert output"); 
 117         PrintAndLog("     [set maximum allowed errors], default = 100"); 
 118         PrintAndLog("     [set maximum Samples to read], default = 32768 (512 bits at rf/64)"); 
 119         PrintAndLog("     <amplify>, 'a' to attempt demod with ask amplification, default = no amp"); 
 120         PrintAndLog("     NOTE: <invert>  can be entered as second or third argument"); 
 121         PrintAndLog("     NOTE: <amplify> can be entered as first, second or last argument"); 
 122         PrintAndLog("     NOTE: any other arg must have previous args set to work"); 
 124         PrintAndLog("     NOTE: --invert for Conditional Dephase Encoding (CDP) AKA Differential Manchester"); 
 126         PrintAndLog("    sample: data rawdemod ab              = demod an ask/biph tag from GraphBuffer"); 
 127         PrintAndLog("          : data rawdemod ab 0 a          = demod an ask/biph tag from GraphBuffer, amplified"); 
 128         PrintAndLog("          : data rawdemod ab 1 32         = demod an ask/biph tag from GraphBuffer using an offset of 1 and a clock of RF/32"); 
 129         PrintAndLog("          : data rawdemod ab 0 32 1       = demod an ask/biph tag from GraphBuffer using a clock of RF/32 and inverting data"); 
 130         PrintAndLog("          : data rawdemod ab 0 1          = demod an ask/biph tag from GraphBuffer while inverting data"); 
 131         PrintAndLog("          : data rawdemod ab 0 64 1 0     = demod an ask/biph tag from GraphBuffer using a clock of RF/64, inverting data and allowing 0 demod errors"); 
 132         PrintAndLog("          : data rawdemod ab 0 64 1 0 0 a = demod an ask/biph tag from GraphBuffer using a clock of RF/64, inverting data and allowing 0 demod errors, and amp"); 
 135 int usage_data_rawdemod_ar(void){ 
 136         PrintAndLog("Usage:  data rawdemod ar [clock] <invert> [maxError] [maxLen] [amplify]"); 
 137         PrintAndLog("     [set clock as integer] optional, if not set, autodetect"); 
 138         PrintAndLog("     <invert>, 1 to invert output"); 
 139         PrintAndLog("     [set maximum allowed errors], default = 100"); 
 140         PrintAndLog("     [set maximum Samples to read], default = 32768 (1024 bits at rf/64)"); 
 141         PrintAndLog("     <amplify>, 'a' to attempt demod with ask amplification, default = no amp"); 
 143         PrintAndLog("    sample: data rawdemod ar            = demod an ask tag from GraphBuffer"); 
 144         PrintAndLog("          : data rawdemod ar a          = demod an ask tag from GraphBuffer, amplified"); 
 145         PrintAndLog("          : data rawdemod ar 32         = demod an ask tag from GraphBuffer using a clock of RF/32"); 
 146         PrintAndLog("          : data rawdemod ar 32 1       = demod an ask tag from GraphBuffer using a clock of RF/32 and inverting data"); 
 147         PrintAndLog("          : data rawdemod ar 1          = demod an ask tag from GraphBuffer while inverting data"); 
 148         PrintAndLog("          : data rawdemod ar 64 1 0     = demod an ask tag from GraphBuffer using a clock of RF/64, inverting data and allowing 0 demod errors"); 
 149         PrintAndLog("          : data rawdemod ar 64 1 0 0 a = demod an ask tag from GraphBuffer using a clock of RF/64, inverting data and allowing 0 demod errors, and amp"); 
 152 int usage_data_rawdemod_fs(void){ 
 153         PrintAndLog("Usage:  data rawdemod fs [clock] <invert> [fchigh] [fclow]"); 
 154         PrintAndLog("     [set clock as integer] optional, omit for autodetect."); 
 155         PrintAndLog("     <invert>, 1 for invert output, can be used even if the clock is omitted"); 
 156         PrintAndLog("     [fchigh], larger field clock length, omit for autodetect"); 
 157         PrintAndLog("     [fclow], small field clock length, omit for autodetect"); 
 159         PrintAndLog("    sample: data rawdemod fs           = demod an fsk tag from GraphBuffer using autodetect"); 
 160         PrintAndLog("          : data rawdemod fs 32        = demod an fsk tag from GraphBuffer using a clock of RF/32, autodetect fc"); 
 161         PrintAndLog("          : data rawdemod fs 1         = demod an fsk tag from GraphBuffer using autodetect, invert output");    
 162         PrintAndLog("          : data rawdemod fs 32 1      = demod an fsk tag from GraphBuffer using a clock of RF/32, invert output, autodetect fc"); 
 163         PrintAndLog("          : data rawdemod fs 64 0 8 5  = demod an fsk1 RF/64 tag from GraphBuffer"); 
 164         PrintAndLog("          : data rawdemod fs 50 0 10 8 = demod an fsk2 RF/50 tag from GraphBuffer"); 
 165         PrintAndLog("          : data rawdemod fs 50 1 10 8 = demod an fsk2a RF/50 tag from GraphBuffer"); 
 168 int usage_data_rawdemod_nr(void){ 
 169         PrintAndLog("Usage:  data rawdemod nr [clock] <0|1> [maxError]"); 
 170         PrintAndLog("     [set clock as integer] optional, if not set, autodetect."); 
 171         PrintAndLog("     <invert>, 1 for invert output"); 
 172         PrintAndLog("     [set maximum allowed errors], default = 100."); 
 174         PrintAndLog("    sample: data rawdemod nr        = demod a nrz/direct tag from GraphBuffer"); 
 175         PrintAndLog("          : data rawdemod nr 32     = demod a nrz/direct tag from GraphBuffer using a clock of RF/32"); 
 176         PrintAndLog("          : data rawdemod nr 32 1   = demod a nrz/direct tag from GraphBuffer using a clock of RF/32 and inverting data"); 
 177         PrintAndLog("          : data rawdemod nr 1      = demod a nrz/direct tag from GraphBuffer while inverting data"); 
 178         PrintAndLog("          : data rawdemod nr 64 1 0 = demod a nrz/direct tag from GraphBuffer using a clock of RF/64, inverting data and allowing 0 demod errors"); 
 181 int usage_data_rawdemod_p1(void){ 
 182         PrintAndLog("Usage:  data rawdemod p1 [clock] <0|1> [maxError]"); 
 183         PrintAndLog("     [set clock as integer] optional, if not set, autodetect."); 
 184         PrintAndLog("     <invert>, 1 for invert output"); 
 185         PrintAndLog("     [set maximum allowed errors], default = 100."); 
 187         PrintAndLog("    sample: data rawdemod p1        = demod a psk1 tag from GraphBuffer"); 
 188         PrintAndLog("          : data rawdemod p1 32     = demod a psk1 tag from GraphBuffer using a clock of RF/32"); 
 189         PrintAndLog("          : data rawdemod p1 32 1   = demod a psk1 tag from GraphBuffer using a clock of RF/32 and inverting data"); 
 190         PrintAndLog("          : data rawdemod p1 1      = demod a psk1 tag from GraphBuffer while inverting data"); 
 191         PrintAndLog("          : data rawdemod p1 64 1 0 = demod a psk1 tag from GraphBuffer using a clock of RF/64, inverting data and allowing 0 demod errors"); 
 194 int usage_data_rawdemod_p2(void){ 
 195         PrintAndLog("Usage:  data rawdemod p2 [clock] <0|1> [maxError]"); 
 196         PrintAndLog("     [set clock as integer] optional, if not set, autodetect."); 
 197         PrintAndLog("     <invert>, 1 for invert output"); 
 198         PrintAndLog("     [set maximum allowed errors], default = 100."); 
 200         PrintAndLog("    sample: data rawdemod p2         = demod a psk2 tag from GraphBuffer, autodetect clock"); 
 201         PrintAndLog("          : data rawdemod p2 32      = demod a psk2 tag from GraphBuffer using a clock of RF/32"); 
 202         PrintAndLog("          : data rawdemod p2 32 1    = demod a psk2 tag from GraphBuffer using a clock of RF/32 and inverting output"); 
 203         PrintAndLog("          : data rawdemod p2 1       = demod a psk2 tag from GraphBuffer, autodetect clock and invert output"); 
 204         PrintAndLog("          : data rawdemod p2 64 1 0  = demod a psk2 tag from GraphBuffer using a clock of RF/64, inverting output and allowing 0 demod errors"); 
 207 int usage_data_autocorr(void) { 
 208         PrintAndLog("Usage: data autocorr [window] [g]"); 
 209         PrintAndLog("Options:"); 
 210         PrintAndLog("       h              This help"); 
 211         PrintAndLog("       [window]       window length for correlation - default = 4000"); 
 212         PrintAndLog("       g              save back to GraphBuffer (overwrite)"); 
 215 int usage_data_undecimate(void){ 
 216         PrintAndLog("Usage: data undec [factor]"); 
 217         PrintAndLog("This function performs un-decimation, by repeating each sample N times"); 
 218         PrintAndLog("Options:        "); 
 219         PrintAndLog("       h            This help"); 
 220         PrintAndLog("       factor       The number of times to repeat each sample.[default:2]"); 
 221         PrintAndLog("Example: 'data undec 3'"); 
 224 int usage_data_detectclock(void){ 
 225         PrintAndLog("Usage:  data detectclock [modulation] <clock>"); 
 226         PrintAndLog("     [modulation as char], specify the modulation type you want to detect the clock of"); 
 227         PrintAndLog("     <clock>             , specify the clock (optional - to get best start position only)"); 
 228         PrintAndLog("       'a' = ask, 'f' = fsk, 'n' = nrz/direct, 'p' = psk"); 
 230         PrintAndLog("    sample: data detectclock a    = detect the clock of an ask modulated wave in the GraphBuffer"); 
 231         PrintAndLog("            data detectclock f    = detect the clock of an fsk modulated wave in the GraphBuffer"); 
 232         PrintAndLog("            data detectclock p    = detect the clock of an psk modulated wave in the GraphBuffer"); 
 233         PrintAndLog("            data detectclock n    = detect the clock of an nrz/direct modulated wave in the GraphBuffer"); 
 236 int usage_data_hex2bin(void){ 
 237         PrintAndLog("Usage: data hex2bin <hex_digits>"); 
 238         PrintAndLog("       This function will ignore all non-hexadecimal characters (but stop reading on whitespace)"); 
 241 int usage_data_bin2hex(void){ 
 242         PrintAndLog("Usage: data bin2hex <binary_digits>"); 
 243         PrintAndLog("       This function will ignore all characters not 1 or 0 (but stop reading on whitespace)"); 
 246 int usage_data_buffclear(void){ 
 247         PrintAndLog("This function clears the bigbuff on deviceside"); 
 248         PrintAndLog("Usage: data buffclear [h]"); 
 249         PrintAndLog("Options:"); 
 250         PrintAndLog("       h              This help"); 
 254 //set the demod buffer with given array of binary (one bit per byte) 
 256 void setDemodBuf(uint8_t *buff
, size_t size
, size_t startIdx
) 
 258         if (buff 
== NULL
) return; 
 260         if (size 
>= MAX_DEMOD_BUF_LEN
) 
 261                 size 
= MAX_DEMOD_BUF_LEN
; 
 263         for (size_t i 
= 0; i 
< size
; i
++) 
 264                 DemodBuffer
[i
] = buff
[startIdx
++]; 
 266         DemodBufferLen 
= size
; 
 269 int CmdSetDebugMode(const char *Cmd
) { 
 271         sscanf(Cmd
, "%i", &demod
); 
 272         g_debugMode 
= (uint8_t)demod
; 
 277 void printDemodBuff(void) 
 279         int bitLen 
= DemodBufferLen
; 
 281                 PrintAndLog("no bits found in demod buffer"); 
 284         if (bitLen 
> 512) bitLen
=512; //max output to 512 bits if we have more - should be plenty 
 286         char *bin 
= sprint_bin_break(DemodBuffer
, bitLen
,16); 
 287         PrintAndLog("%s",bin
); 
 290 int CmdPrintDemodBuff(const char *Cmd
) 
 292         char hex
[512] = {0x00}; 
 293         bool hexMode 
= false; 
 295         uint32_t offset 
= 0; //could be size_t but no param_get16... 
 296         uint32_t length 
= 512; 
 298         while(param_getchar(Cmd
, cmdp
) != 0x00) 
 300                 switch(param_getchar(Cmd
, cmdp
)) 
 304                         return usage_data_printdemodbuf(); 
 312                         offset 
= param_get32ex(Cmd
, cmdp
+1, 0, 10); 
 313                         if (!offset
) errors 
= true; 
 318                         length 
= param_get32ex(Cmd
, cmdp
+1, 512, 10); 
 319                         if (!length
) errors 
= true; 
 323                         PrintAndLog("Unknown parameter '%c'", param_getchar(Cmd
, cmdp
)); 
 330         if(errors
) return usage_data_printdemodbuf(); 
 332         if (DemodBufferLen 
== 0) { 
 333                 PrintAndLog("Demodbuffer is empty"); 
 336         length 
= (length 
> (DemodBufferLen
-offset
)) ? DemodBufferLen
-offset 
: length
;  
 337         int numBits 
= (length
) & 0x00FFC; //make sure we don't exceed our string 
 340                 char *buf 
= (char *) (DemodBuffer 
+ offset
); 
 341                 numBits 
= (numBits 
> sizeof(hex
)) ? sizeof(hex
) : numBits
; 
 342                 numBits 
= binarraytohex(hex
, buf
, numBits
); 
 343                 if (numBits
==0) return 0; 
 344                 PrintAndLog("DemodBuffer: %s",hex
);              
 346                 PrintAndLog("DemodBuffer:\n%s", sprint_bin_break(DemodBuffer
+offset
,numBits
,16)); 
 352 //this function strictly converts >1 to 1 and <1 to 0 for each sample in the graphbuffer 
 353 int CmdGetBitStream(const char *Cmd
) 
 356         for (uint32_t i 
= 0; i 
< GraphTraceLen
; i
++) 
 357                 GraphBuffer
[i
] = (GraphBuffer
[i
] >= 1) ? 1 : 0; 
 359         RepaintGraphWindow(); 
 364 //print 64 bit EM410x ID in multiple formats 
 365 void printEM410x(uint32_t hi
, uint64_t id
) 
 367         //if (!id && !hi) return; 
 369         PrintAndLog("EM410x %s pattern found", (hi
) ? "XL" : "" ); 
 375         for (ii
=5; ii
>0;ii
--){ 
 377                         id2lo
=(id2lo
<<1LL) | ((id 
& (iii 
<< (i
+((ii
-1)*8)))) >> (i
+((ii
-1)*8))); 
 382                 //output 88 bit em id 
 383                 PrintAndLog("\nEM TAG ID      : %06X%016" PRIX64
, hi
, id
); 
 385                 //output 40 bit em id 
 386                 PrintAndLog("\nEM TAG ID      : %010" PRIX64
, id
); 
 387                 PrintAndLog("\nPossible de-scramble patterns"); 
 388                 PrintAndLog("Unique TAG ID  : %010" PRIX64
, id2lo
); 
 389                 PrintAndLog("HoneyWell IdentKey {"); 
 390                 PrintAndLog("DEZ 8          : %08" PRIu64
, id 
& 0xFFFFFF); 
 391                 PrintAndLog("DEZ 10         : %010" PRIu64
, id 
& 0xFFFFFFFF); 
 392                 PrintAndLog("DEZ 5.5        : %05" PRIu64 
".%05" PRIu64
, (id
>>16LL) & 0xFFFF, (id 
& 0xFFFF)); 
 393                 PrintAndLog("DEZ 3.5A       : %03" PRIu64 
".%05" PRIu64
, (id
>>32ll), (id 
& 0xFFFF)); 
 394                 PrintAndLog("DEZ 3.5B       : %03" PRIu64 
".%05" PRIu64
, (id 
& 0xFF000000) >> 24, (id 
& 0xFFFF)); 
 395                 PrintAndLog("DEZ 3.5C       : %03" PRIu64 
".%05" PRIu64
, (id 
& 0xFF0000) >> 16, (id 
& 0xFFFF)); 
 396                 PrintAndLog("DEZ 14/IK2     : %014" PRIu64
, id
); 
 397                 PrintAndLog("DEZ 15/IK3     : %015" PRIu64
, id2lo
); 
 398                 PrintAndLog("DEZ 20/ZK      : %02" PRIu64 
"%02" PRIu64 
"%02" PRIu64 
"%02" PRIu64 
"%02" PRIu64 
"%02" PRIu64 
"%02" PRIu64 
"%02" PRIu64 
"%02" PRIu64 
"%02" PRIu64
, 
 399                         (id2lo 
& 0xf000000000) >> 36, 
 400                         (id2lo 
& 0x0f00000000) >> 32, 
 401                         (id2lo 
& 0x00f0000000) >> 28, 
 402                         (id2lo 
& 0x000f000000) >> 24, 
 403                         (id2lo 
& 0x0000f00000) >> 20, 
 404                         (id2lo 
& 0x00000f0000) >> 16, 
 405                         (id2lo 
& 0x000000f000) >> 12, 
 406                         (id2lo 
& 0x0000000f00) >> 8, 
 407                         (id2lo 
& 0x00000000f0) >> 4, 
 408                         (id2lo 
& 0x000000000f) 
 410                 uint64_t paxton 
= (((id
>>32) << 24) | (id 
& 0xffffff))  + 0x143e00; 
 411                 PrintAndLog("}\nOther          : %05" PRIu64 
"_%03" PRIu64 
"_%08" PRIu64
, (id
&0xFFFF), ((id
>>16LL) & 0xFF), (id 
& 0xFFFFFF));   
 412                 PrintAndLog("Pattern Paxton : %" PRIu64 
" [0x%" PRIX64 
"]", paxton
, paxton
); 
 414                 uint32_t p1id 
= (id 
& 0xFFFFFF); 
 415                 uint8_t arr
[32] = {0x00}; 
 418                 for (; i 
< 24; ++i
, --j 
){ 
 419                         arr
[i
] = (p1id 
>> i
) & 1; 
 453                 PrintAndLog("Pattern 1      : %d [0x%X]", p1
, p1
); 
 455                 uint16_t sebury1 
= id 
& 0xFFFF; 
 456                 uint8_t  sebury2 
= (id 
>> 16) & 0x7F; 
 457                 uint32_t sebury3 
= id 
& 0x7FFFFF; 
 458                 PrintAndLog("Pattern Sebury : %d %d %d  [0x%X 0x%X 0x%X]", sebury1
, sebury2
, sebury3
, sebury1
, sebury2
, sebury3
); 
 463 int AskEm410xDecode(bool verbose
, uint32_t *hi
, uint64_t *lo 
) 
 466         size_t size 
= DemodBufferLen
; 
 467         uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
] = {0}; 
 468         memcpy(BitStream
, DemodBuffer
, size
);  
 469         int ans 
= Em410xDecode(BitStream
, &size
, &idx
, hi
, lo
); 
 473                                 PrintAndLog("DEBUG: Error - Em410x not only 0|1 in decoded bitstream"); 
 475                                 PrintAndLog("DEBUG: Error - Em410x Size not correct: %d", size
); 
 477                                 PrintAndLog("DEBUG: Error - Em410x preamble not found"); 
 479                                 PrintAndLog("DEBUG: Error - Em410x parity failed"); 
 484                 PrintAndLog("DEBUG: Error - Em410x decoded to all zeros"); 
 488         //set GraphBuffer for clone or sim command 
 489         setDemodBuf(BitStream
, size
, idx
); 
 491                 PrintAndLog("DEBUG: Em410x idx: %d, Len: %d, Printing Demod Buffer:", idx
, size
); 
 496                 printEM410x(*hi
, *lo
); 
 501 int AskEm410xDemod(const char *Cmd
, uint32_t *hi
, uint64_t *lo
, bool verbose
) 
 504         if (!ASKDemod_ext(Cmd
, FALSE
, FALSE
, 1, &st
)) return 0; 
 505         return AskEm410xDecode(verbose
, hi
, lo
); 
 509 //takes 3 arguments - clock, invert and maxErr as integers 
 510 //attempts to demodulate ask while decoding manchester 
 511 //prints binary found and saves in graphbuffer for further commands 
 512 int CmdAskEM410xDemod(const char *Cmd
) 
 514         char cmdp 
= param_getchar(Cmd
, 0); 
 515         if (strlen(Cmd
) > 10 || cmdp 
== 'h' || cmdp 
== 'H')              
 516                 return usage_data_askem410xdemod(); 
 520         return AskEm410xDemod(Cmd
, &hi
, &lo
, true); 
 524 //Cmd Args: Clock, invert, maxErr, maxLen as integers and amplify as char == 'a' 
 525 //   (amp may not be needed anymore) 
 526 //verbose will print results and demoding messages 
 527 //emSearch will auto search for EM410x format in bitstream 
 528 //askType switches decode: ask/raw = 0, ask/manchester = 1  
 529 int ASKDemod_ext(const char *Cmd
, bool verbose
, bool emSearch
, uint8_t askType
, bool *stCheck
) { 
 534         char amp 
= param_getchar(Cmd
, 0); 
 535         uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
] = {0}; 
 536         sscanf(Cmd
, "%i %i %i %i %c", &clk
, &invert
, &maxErr
, &maxLen
, &
); 
 537         if (!maxLen
) maxLen 
= BIGBUF_SIZE
; 
 538         if (invert 
!= 0 && invert 
!= 1) { 
 539                 PrintAndLog("Invalid argument: %s", Cmd
); 
 546         size_t BitLen 
= getFromGraphBuf(BitStream
); 
 547         if (g_debugMode
) PrintAndLog("DEBUG: Bitlen from grphbuff: %d", BitLen
); 
 548         if (BitLen
<255) return 0; 
 549         if (maxLen
<BitLen 
&& maxLen 
!= 0) BitLen 
= maxLen
; 
 551         //amp before ST check 
 552         if (amp 
== 'a' || amp 
== 'A') 
 553                 askAmp(BitStream
, BitLen
);  
 556         if (*stCheck
) st 
= DetectST(BitStream
, &BitLen
, &foundclk
); 
 559                 clk 
= (clk 
== 0) ? foundclk 
: clk
; 
 560                 if (verbose 
|| g_debugMode
) PrintAndLog("\nFound Sequence Terminator"); 
 563         int errCnt 
= askdemod(BitStream
, &BitLen
, &clk
, &invert
, maxErr
, 0, askType
); 
 564         if (errCnt
<0 || BitLen
<16){  //if fatal error (or -1) 
 565                 if (g_debugMode
) PrintAndLog("DEBUG: no data found %d, errors:%d, bitlen:%d, clock:%d",errCnt
,invert
,BitLen
,clk
); 
 568         if (errCnt 
> maxErr
){ 
 569                 if (g_debugMode
) PrintAndLog("DEBUG: Too many errors found, errors:%d, bits:%d, clock:%d",errCnt
, BitLen
, clk
); 
 572         if (verbose 
|| g_debugMode
) PrintAndLog("\nUsing Clock:%d, Invert:%d, Bits Found:%d",clk
,invert
,BitLen
); 
 575         setDemodBuf(BitStream
,BitLen
,0); 
 576         if (verbose 
|| g_debugMode
){ 
 578                         PrintAndLog("# Errors during Demoding (shown as 7 in bit stream): %d",errCnt
); 
 580                         PrintAndLog("ASK/Manchester - Clock: %d - Decoded bitstream:",clk
); 
 582                         PrintAndLog("ASK/Raw - Clock: %d - Decoded bitstream:",clk
); 
 583                 // Now output the bitstream to the scrollback by line of 16 bits 
 589                 AskEm410xDecode(true, &hi
, &lo
); 
 593 int ASKDemod(const char *Cmd
, bool verbose
, bool emSearch
, uint8_t askType
) { 
 595         return ASKDemod_ext(Cmd
, verbose
, emSearch
, askType
, &st
); 
 599 //takes 5 arguments - clock, invert, maxErr, maxLen as integers and amplify as char == 'a' 
 600 //attempts to demodulate ask while decoding manchester 
 601 //prints binary found and saves in graphbuffer for further commands 
 602 int Cmdaskmandemod(const char *Cmd
) 
 604         char cmdp 
= param_getchar(Cmd
, 0); 
 605         if (strlen(Cmd
) > 45 || cmdp 
== 'h' || cmdp 
== 'H') return usage_data_rawdemod_am(); 
 609                 return ASKDemod_ext(Cmd
++, TRUE
, TRUE
, 1, &st
); 
 610         else if (Cmd
[1] == 's') 
 611                 return ASKDemod_ext(Cmd
+=2, TRUE
, TRUE
, 1, &st
); 
 613         return ASKDemod(Cmd
, TRUE
, TRUE
, 1); 
 618 //stricktly take 10 and 01 and convert to 0 and 1 
 619 int Cmdmandecoderaw(const char *Cmd
) 
 626         char cmdp 
= param_getchar(Cmd
, 0); 
 627         if (strlen(Cmd
) > 5 || cmdp 
== 'h' || cmdp 
== 'H') return usage_data_manrawdecode(); 
 629         if (DemodBufferLen
==0) return 0; 
 631         uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
] = {0}; 
 632         int high 
= 0, low 
= 0; 
 633         for (; i 
< DemodBufferLen
; ++i
){ 
 634                 if (DemodBuffer
[i
] > high
)  
 636                 else if(DemodBuffer
[i
] < low
)  
 638                 BitStream
[i
] = DemodBuffer
[i
]; 
 640         if (high
>7 || low 
<0 ){ 
 641                 PrintAndLog("Error: please raw demod the wave first then manchester raw decode"); 
 645         sscanf(Cmd
, "%i %i", &invert
, &maxErr
); 
 647         errCnt 
= manrawdecode(BitStream
, &size
, invert
); 
 648         if (errCnt 
>= maxErr
){ 
 649                 PrintAndLog("Too many errors: %d",errCnt
); 
 652         PrintAndLog("Manchester Decoded - # errors:%d - data:",errCnt
); 
 653         PrintAndLog("%s", sprint_bin_break(BitStream
, size
, 16)); 
 658                 if (Em410xDecode(BitStream
, &size
, &idx
, &hi
, &id
)){ 
 659                         //need to adjust to set bitstream back to manchester encoded data 
 660                         //setDemodBuf(BitStream, size, idx); 
 669 //take 01 or 10 = 0 and 11 or 00 = 1 
 670 //takes 2 arguments "offset" default = 0 if 1 it will shift the decode by one bit 
 671 // and "invert" default = 0 if 1 it will invert output 
 672 //  the argument offset allows us to manually shift if the output is incorrect - [EDIT: now auto detects] 
 673 int CmdBiphaseDecodeRaw(const char *Cmd
) 
 676         int offset
=0, invert
=0, maxErr
=20, errCnt
=0; 
 677         char cmdp 
= param_getchar(Cmd
, 0); 
 678         if (strlen(Cmd
) > 3 || cmdp 
== 'h' || cmdp 
== 'H') return usage_data_biphaserawdecode(); 
 680         sscanf(Cmd
, "%i %i %i", &offset
, &invert
, &maxErr
); 
 681         if (DemodBufferLen
==0){ 
 682                 PrintAndLog("DemodBuffer Empty - run 'data rawdemod ar' first"); 
 685         uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
 686         memcpy(BitStream
, DemodBuffer
, DemodBufferLen
);  
 687         size 
= DemodBufferLen
; 
 688         errCnt
=BiphaseRawDecode(BitStream
, &size
, offset
, invert
); 
 690                 PrintAndLog("Error during decode:%d", errCnt
); 
 693         if (errCnt 
> maxErr
){ 
 694                 PrintAndLog("Too many errors attempting to decode: %d",errCnt
); 
 699                 PrintAndLog("# Errors found during Demod (shown as 7 in bit stream): %d",errCnt
); 
 701         PrintAndLog("Biphase Decoded using offset: %d - # invert:%d - data:",offset
,invert
); 
 702         PrintAndLog("%s", sprint_bin_break(BitStream
, size
, 16)); 
 705                 setDemodBuf(DemodBuffer
,DemodBufferLen
-offset
, offset
);  //remove first bit from raw demod 
 710 // - ASK Demod then Biphase decode GraphBuffer samples 
 711 int ASKbiphaseDemod(const char *Cmd
, bool verbose
) 
 713         //ask raw demod GraphBuffer first 
 714         int offset
=0, clk
=0, invert
=0, maxErr
=0; 
 715         sscanf(Cmd
, "%i %i %i %i", &offset
, &clk
, &invert
, &maxErr
); 
 717         uint8_t BitStream
[MAX_DEMOD_BUF_LEN
]; 
 718         size_t size 
= getFromGraphBuf(BitStream
);        
 720                 if (g_debugMode
) PrintAndLog("DEBUG: no data in graphbuf");   
 723         //invert here inverts the ask raw demoded bits which has no effect on the demod, but we need the pointer 
 724         int errCnt 
= askdemod(BitStream
, &size
, &clk
, &invert
, maxErr
, 0, 0);   
 725         if ( errCnt 
< 0 || errCnt 
> maxErr 
) {    
 726                 if (g_debugMode
) PrintAndLog("DEBUG: no data or error found %d, clock: %d", errCnt
, clk
);   
 730         //attempt to Biphase decode BitStream 
 731         errCnt 
= BiphaseRawDecode(BitStream
, &size
, offset
, invert
); 
 733                 if (g_debugMode 
|| verbose
) PrintAndLog("DEBUG: Error BiphaseRawDecode: %d", errCnt
); 
 736         if (errCnt 
> maxErr
) { 
 737                 if (g_debugMode 
|| verbose
) PrintAndLog("DEBUG: Error BiphaseRawDecode too many errors: %d", errCnt
); 
 740         //success set DemodBuffer and return 
 741         setDemodBuf(BitStream
, size
, 0); 
 742         if (g_debugMode 
|| verbose
){ 
 743                 PrintAndLog("Biphase Decoded using offset: %d - clock: %d - # errors:%d - data:",offset
,clk
,errCnt
); 
 748 //by marshmellow - see ASKbiphaseDemod 
 749 int Cmdaskbiphdemod(const char *Cmd
) 
 751         char cmdp 
= param_getchar(Cmd
, 0); 
 752         if (strlen(Cmd
) > 25 || cmdp 
== 'h' || cmdp 
== 'H') return usage_data_rawdemod_ab(); 
 754         return ASKbiphaseDemod(Cmd
, TRUE
); 
 758 //attempts to demodulate and identify a G_Prox_II verex/chubb card 
 759 //WARNING: if it fails during some points it will destroy the DemodBuffer data 
 760 // but will leave the GraphBuffer intact. 
 761 //if successful it will push askraw data back to demod buffer ready for emulation 
 762 int CmdG_Prox_II_Demod(const char *Cmd
) 
 764         if (!ASKbiphaseDemod(Cmd
, FALSE
)){ 
 765                 if (g_debugMode
) PrintAndLog("DEBUG: Error - gProxII ASKbiphaseDemod failed 1st try"); 
 768         size_t size 
= DemodBufferLen
; 
 769         //call lfdemod.c demod for gProxII 
 770         int ans 
= gProxII_Demod(DemodBuffer
, &size
); 
 772                 if (g_debugMode
) PrintAndLog("DEBUG: Error - gProxII demod"); 
 775         //got a good demod of 96 bits 
 776         uint8_t ByteStream
[8] = {0x00}; 
 778         size_t startIdx 
= ans 
+ 6; //start after 6 bit preamble 
 780         uint8_t bits_no_spacer
[90]; 
 781         //so as to not mess with raw DemodBuffer copy to a new sample array 
 782         memcpy(bits_no_spacer
, DemodBuffer 
+ startIdx
, 90); 
 783         // remove the 18 (90/5=18) parity bits (down to 72 bits (96-6-18=72)) 
 784         size_t bitLen 
= removeParity(bits_no_spacer
, 0, 5, 3, 90); //source, startloc, paritylen, ptype, length_to_run 
 787                         PrintAndLog("DEBUG: Error - gProxII spacer removal did not produce 72 bits: %u, start: %u", bitLen
, startIdx
); 
 790         // get key and then get all 8 bytes of payload decoded 
 791         xorKey 
= (uint8_t)bytebits_to_byteLSBF(bits_no_spacer
, 8); 
 792         for (size_t idx 
= 0; idx 
< 8; idx
++) { 
 793                 ByteStream
[idx
] = ((uint8_t)bytebits_to_byteLSBF(bits_no_spacer
+8 + (idx
*8),8)) ^ xorKey
; 
 794                 if (g_debugMode
) PrintAndLog("DEBUG: gProxII byte %u after xor: %02x", (unsigned int)idx
, ByteStream
[idx
]); 
 797         //ByteStream contains 8 Bytes (64 bits) of decrypted raw tag data 
 798         uint8_t fmtLen 
= ByteStream
[0]>>2; 
 801         //get raw 96 bits to print 
 802         uint32_t raw1 
= bytebits_to_byte(DemodBuffer
+ans
,32); 
 803         uint32_t raw2 
= bytebits_to_byte(DemodBuffer
+ans
+32, 32); 
 804         uint32_t raw3 
= bytebits_to_byte(DemodBuffer
+ans
+64, 32); 
 805         bool unknown 
= FALSE
; 
 808                         FC 
= ((ByteStream
[3] & 0x7F)<<7) | (ByteStream
[4]>>1); 
 809                         Card 
= ((ByteStream
[4]&1)<<19) | (ByteStream
[5]<<11) | (ByteStream
[6]<<3) | (ByteStream
[7]>>5); 
 812                         FC 
= ((ByteStream
[3] & 0x7F)<<1) | (ByteStream
[4]>>7); 
 813                         Card 
= ((ByteStream
[4]&0x7F)<<9) | (ByteStream
[5]<<1) | (ByteStream
[6]>>7); 
 820                 PrintAndLog("G-Prox-II Found: Format Len: %ubit - FC: %u - Card: %u, Raw: %08x%08x%08x", fmtLen
, FC
, Card
, raw1
, raw2
, raw3
); 
 822                 PrintAndLog("Unknown G-Prox-II Fmt Found: Format Len: %u, Raw: %08x%08x%08x", fmtLen
, raw1
, raw2
, raw3
); 
 824         setDemodBuf(DemodBuffer
+ans
, 96, 0); 
 829 //see ASKDemod for what args are accepted 
 830 int CmdVikingDemod(const char *Cmd
) 
 832         if (!ASKDemod(Cmd
, false, false, 1)) { 
 833                 if (g_debugMode
) PrintAndLog("DEBUG: Error - Viking ASKDemod failed"); 
 836         size_t size 
= DemodBufferLen
; 
 837         //call lfdemod.c demod for Viking 
 838         int ans 
= VikingDemod_AM(DemodBuffer
, &size
); 
 840                 if (g_debugMode
) PrintAndLog("DEBUG: Error - Viking Demod %d %s", ans
, (ans 
== -5)?"[chksum error]":""); 
 844         uint32_t raw1 
= bytebits_to_byte(DemodBuffer
+ans
, 32); 
 845         uint32_t raw2 
= bytebits_to_byte(DemodBuffer
+ans
+32, 32); 
 846         uint32_t cardid 
= bytebits_to_byte(DemodBuffer
+ans
+24, 32); 
 847         uint8_t  checksum 
= bytebits_to_byte(DemodBuffer
+ans
+32+24, 8); 
 848         PrintAndLog("Viking Tag Found: Card ID %08X, Checksum: %02X", cardid
, checksum
); 
 849         PrintAndLog("Raw: %08X%08X", raw1
,raw2
); 
 850         setDemodBuf(DemodBuffer
+ans
, 64, 0); 
 854 //by marshmellow - see ASKDemod 
 855 int Cmdaskrawdemod(const char *Cmd
) 
 857         char cmdp 
= param_getchar(Cmd
, 0); 
 858         if (strlen(Cmd
) > 25 || cmdp 
== 'h' || cmdp 
== 'H')     return usage_data_rawdemod_ar(); 
 860         return ASKDemod(Cmd
, TRUE
, FALSE
, 0); 
 863 int AutoCorrelate(int window
, bool SaveGrph
, bool verbose
) 
 865         static int CorrelBuffer
[MAX_GRAPH_TRACE_LEN
]; 
 866         size_t Correlation 
= 0; 
 869         if (verbose
) PrintAndLog("performing %d correlations", GraphTraceLen 
- window
); 
 870         for (int i 
= 0; i 
< GraphTraceLen 
- window
; ++i
) { 
 872                 for (int j 
= 0; j 
< window
; ++j
) { 
 873                         sum 
+= (GraphBuffer
[j
]*GraphBuffer
[i 
+ j
]) / 256; 
 875                 CorrelBuffer
[i
] = sum
; 
 876                 if (sum 
>= maxSum
-100 && sum 
<= maxSum
+100){ 
 878                         Correlation 
= i
-lastMax
; 
 880                         if (sum 
> maxSum
) maxSum 
= sum
; 
 881                 } else if (sum 
> maxSum
){ 
 887                 //try again with wider margin 
 888                 for (int i 
= 0; i 
< GraphTraceLen 
- window
; i
++){ 
 889                         if (CorrelBuffer
[i
] >= maxSum
-(maxSum
*0.05) && CorrelBuffer
[i
] <= maxSum
+(maxSum
*0.05)){ 
 891                                 Correlation 
= i
-lastMax
; 
 893                                 //if (CorrelBuffer[i] > maxSum) maxSum = sum; 
 897         if (verbose 
&& Correlation 
> 0) PrintAndLog("Possible Correlation: %d samples",Correlation
); 
 900                 GraphTraceLen 
= GraphTraceLen 
- window
; 
 901                 memcpy(GraphBuffer
, CorrelBuffer
, GraphTraceLen 
* sizeof (int)); 
 902                 RepaintGraphWindow();   
 907 int CmdAutoCorr(const char *Cmd
) 
 909         char cmdp 
= param_getchar(Cmd
, 0); 
 910         if (cmdp 
== 'h' || cmdp 
== 'H') return usage_data_autocorr(); 
 911         int window 
= 4000; //set default 
 913         bool updateGrph 
= FALSE
; 
 914         sscanf(Cmd
, "%i %c", &window
, &grph
); 
 916         if (window 
>= GraphTraceLen
) { 
 917                 PrintAndLog("window must be smaller than trace (%d samples)", GraphTraceLen
); 
 920         if (grph 
== 'g') updateGrph 
= TRUE
; 
 921         return AutoCorrelate(window
, updateGrph
, TRUE
); 
 924 int CmdBitsamples(const char *Cmd
) 
 929         GetFromBigBuf(got
, sizeof(got
), 0); 
 930         WaitForResponse(CMD_ACK
, NULL
); 
 932         for (int j 
= 0; j 
< sizeof(got
); j
++) { 
 933                 for (int k 
= 0; k 
< 8; k
++) { 
 934                         if(got
[j
] & (1 << (7 - k
))) 
 935                                 GraphBuffer
[cnt
++] = 1; 
 937                                 GraphBuffer
[cnt
++] = 0; 
 941         RepaintGraphWindow(); 
 945 int CmdBuffClear(const char *Cmd
) 
 947         char cmdp 
= param_getchar(Cmd
, 0); 
 948         if (cmdp 
== 'h' || cmdp 
== 'H') return usage_data_buffclear(); 
 950         UsbCommand c 
= {CMD_BUFF_CLEAR
, {0,0,0}}; 
 956 int CmdDec(const char *Cmd
) 
 958         for (int i 
= 0; i 
< (GraphTraceLen 
>> 2); ++i
) 
 959                 GraphBuffer
[i
] = GraphBuffer
[i 
* 2]; 
 962         PrintAndLog("decimated by 2"); 
 963         RepaintGraphWindow(); 
 967  * Undecimate - I'd call it 'interpolate', but we'll save that 
 968  * name until someone does an actual interpolation command, not just 
 969  * blindly repeating samples 
 973 int CmdUndec(const char *Cmd
) 
 975         char cmdp 
= param_getchar(Cmd
, 0); 
 976         if (cmdp 
== 'h' || cmdp 
== 'H') return usage_data_undecimate(); 
 978         uint8_t factor 
= param_get8ex(Cmd
, 0, 2, 10); 
 980         //We have memory, don't we? 
 981         int swap
[MAX_GRAPH_TRACE_LEN
] = {0}; 
 982         uint32_t g_index 
= 0, s_index 
= 0; 
 983         while(g_index 
< GraphTraceLen 
&& s_index 
+ factor 
< MAX_GRAPH_TRACE_LEN
) 
 986                 for (count 
= 0; count 
< factor 
&& s_index 
+ count 
< MAX_GRAPH_TRACE_LEN
; count
++) 
 987                         swap
[s_index
+count
] = GraphBuffer
[g_index
]; 
 992         memcpy(GraphBuffer
, swap
, s_index 
* sizeof(int)); 
 993         GraphTraceLen 
= s_index
; 
 994         RepaintGraphWindow(); 
 999 //shift graph zero up or down based on input + or - 
1000 int CmdGraphShiftZero(const char *Cmd
) 
1002         int shift 
= 0, shiftedVal 
= 0; 
1003         //set options from parameters entered with the command 
1004         sscanf(Cmd
, "%i", &shift
); 
1006         for(int i 
= 0; i 
< GraphTraceLen
; i
++){ 
1007                 if ( i
+shift 
>= GraphTraceLen
) 
1008                         shiftedVal 
= GraphBuffer
[i
]; 
1010                         shiftedVal 
= GraphBuffer
[i
] + shift
; 
1012                 if (shiftedVal 
> 127)  
1014                 else if (shiftedVal 
< -127)  
1016                 GraphBuffer
[i
] = shiftedVal
; 
1023 //use large jumps in read samples to identify edges of waves and then amplify that wave to max 
1024 //similar to dirtheshold, threshold commands  
1025 //takes a threshold length which is the measured length between two samples then determines an edge 
1026 int CmdAskEdgeDetect(const char *Cmd
) 
1030         sscanf(Cmd
, "%i", &thresLen
);  
1032         for(int i 
= 1; i 
< GraphTraceLen
; ++i
){ 
1033                 if (GraphBuffer
[i
] - GraphBuffer
[i
-1] >= thresLen
) //large jump up 
1035                 else if(GraphBuffer
[i
] - GraphBuffer
[i
-1] <= -1 * thresLen
) //large jump down 
1038                 GraphBuffer
[i
-1] = last
; 
1040         RepaintGraphWindow(); 
1044 /* Print our clock rate */ 
1045 // uses data from graphbuffer 
1046 // adjusted to take char parameter for type of modulation to find the clock - by marshmellow. 
1047 int CmdDetectClockRate(const char *Cmd
) 
1049         char cmdp 
= param_getchar(Cmd
, 0); 
1050         if (strlen(Cmd
) > 6 || strlen(Cmd
) == 0 || cmdp 
== 'h' || cmdp 
== 'H') 
1051                 return usage_data_detectclock(); 
1057                         ans 
= GetAskClock(Cmd
+1, true, false); 
1061                         ans 
= GetFskClock("", true, false); 
1065                         ans 
= GetNrzClock("", true, false); 
1069                         ans 
= GetPskClock("", true, false); 
1072                         PrintAndLog ("Please specify a valid modulation to detect the clock of - see option h for help"); 
1078 char *GetFSKType(uint8_t fchigh
, uint8_t fclow
, uint8_t invert
) 
1080         static char fType
[8]; 
1081         memset(fType
, 0x00, 8);  
1082         char *fskType 
= fType
; 
1083         if (fchigh
==10 && fclow
==8){ 
1085                         memcpy(fskType
, "FSK2a", 5); 
1087                         memcpy(fskType
, "FSK2", 4); 
1088         } else if (fchigh 
== 8 && fclow 
== 5) { 
1090                         memcpy(fskType
, "FSK1", 4); 
1092                         memcpy(fskType
, "FSK1a", 5); 
1094                 memcpy(fskType
, "FSK??", 5); 
1100 //fsk raw demod and print binary 
1101 //takes 4 arguments - Clock, invert, fchigh, fclow 
1102 //defaults: clock = 50, invert=1, fchigh=10, fclow=8 (RF/10 RF/8 (fsk2a)) 
1103 int FSKrawDemod(const char *Cmd
, bool verbose
) 
1105         //raw fsk demod  no manchester decoding no start bit finding just get binary from wave 
1106         uint8_t rfLen
, invert
, fchigh
, fclow
; 
1109         //set options from parameters entered with the command 
1110         rfLen 
= param_get8(Cmd
, 0); 
1111         invert 
= param_get8(Cmd
, 1); 
1112         fchigh 
= param_get8(Cmd
, 2); 
1113         fclow 
= param_get8(Cmd
, 3); 
1114         if (strlen(Cmd
)>0 && strlen(Cmd
)<=2) { 
1116                         invert 
= 1;   //if invert option only is used 
1121         uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
1122         size_t BitLen 
= getFromGraphBuf(BitStream
); 
1123         if (BitLen
==0) return 0; 
1124         //get field clock lengths 
1126         if (!fchigh 
|| !fclow
) { 
1127                 fcs 
= countFC(BitStream
, BitLen
, 1); 
1132                         fchigh 
= (fcs 
>> 8) & 0x00FF; 
1133                         fclow 
= fcs 
& 0x00FF; 
1136         //get bit clock length 
1138                 rfLen 
= detectFSKClk(BitStream
, BitLen
, fchigh
, fclow
); 
1139                 if (!rfLen
) rfLen 
= 50; 
1141         int size 
= fskdemod(BitStream
, BitLen
, rfLen
, invert
, fchigh
, fclow
); 
1143                 setDemodBuf(BitStream
, size
, 0); 
1145                 // Now output the bitstream to the scrollback by line of 16 bits 
1146                 if (verbose 
|| g_debugMode
) { 
1147                         PrintAndLog("\nUsing Clock:%u, invert:%u, fchigh:%u, fclow:%u", rfLen
, invert
, fchigh
, fclow
); 
1148                         PrintAndLog("%s decoded bitstream:", GetFSKType(fchigh
, fclow
, invert
)); 
1153                 if (g_debugMode
) PrintAndLog("no FSK data found"); 
1159 //fsk raw demod and print binary 
1160 //takes 4 arguments - Clock, invert, fchigh, fclow 
1161 //defaults: clock = 50, invert=1, fchigh=10, fclow=8 (RF/10 RF/8 (fsk2a)) 
1162 int CmdFSKrawdemod(const char *Cmd
) 
1164         char cmdp 
= param_getchar(Cmd
, 0); 
1165         if (strlen(Cmd
) > 20 || cmdp 
== 'h' || cmdp 
== 'H') return usage_data_rawdemod_fs(); 
1167         return FSKrawDemod(Cmd
, TRUE
); 
1170 //by marshmellow (based on existing demod + holiman's refactor) 
1171 //HID Prox demod - FSK RF/50 with preamble of 00011101 (then manchester encoded) 
1172 //print full HID Prox ID and some bit format details if found 
1173 int CmdFSKdemodHID(const char *Cmd
) 
1175         //raw fsk demod no manchester decoding no start bit finding just get binary from wave 
1176         uint32_t hi2
=0, hi
=0, lo
=0; 
1178         uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
] = {0}; 
1179         size_t BitLen 
= getFromGraphBuf(BitStream
); 
1180         if (BitLen
==0) return 0; 
1181         //get binary from fsk wave 
1182         int idx 
= HIDdemodFSK(BitStream
,&BitLen
,&hi2
,&hi
,&lo
); 
1186                                 PrintAndLog("DEBUG: Error - HID just noise detected"); 
1187                         } else if (idx 
== -2) { 
1188                                 PrintAndLog("DEBUG: Error - HID problem during FSK demod"); 
1189                         } else if (idx 
== -3) { 
1190                                 PrintAndLog("DEBUG: Error - HID preamble not found"); 
1191                         } else if (idx 
== -4) { 
1192                                 PrintAndLog("DEBUG: Error - HID error in Manchester data, SIZE: %d", BitLen
); 
1194                                 PrintAndLog("DEBUG: Error - HID error demoding fsk %d", idx
); 
1199         if (hi2
==0 && hi
==0 && lo
==0) { 
1200                 if (g_debugMode
) PrintAndLog("DEBUG: Error - HID no values found"); 
1203         if (hi2 
!= 0){ //extra large HID tags 
1204                 PrintAndLog("HID Prox TAG ID: %x%08x%08x (%u)", hi2
, hi
, lo
, (lo
>>1) & 0xFFFF); 
1206         else {  //standard HID tags <38 bits 
1209                 uint32_t cardnum 
= 0; 
1210                 if (((hi
>>5)&1)==1){//if bit 38 is set then < 37 bit format is used 
1212                         lo2
=(((hi 
& 31) << 12) | (lo
>>20)); //get bits 21-37 to check for format len bit 
1214                         while(lo2
>1){ //find last bit set to 1 (format len bit) 
1222                                 cardnum 
= (lo
>>1)&0xFFFF; 
1226                                 cardnum 
= (lo
>>1)&0xFFFF; 
1227                                 fc
= ((hi
&1)<<15)|(lo
>>17); 
1230                                 cardnum 
= (lo
>>1)&0xFFFFF; 
1231                                 fc 
= ((hi
&1)<<11)|(lo
>>21); 
1234                 else { //if bit 38 is not set then 37 bit format is used 
1239                                 cardnum 
= (lo
>>1)&0x7FFFF; 
1240                                 fc 
= ((hi
&0xF)<<12)|(lo
>>20); 
1243                 PrintAndLog("HID Prox TAG ID: %x%08x (%u) - Format Len: %ubit - FC: %u - Card: %u", hi
, lo
, (lo
>>1) & 0xFFFF, fmtLen
, fc
, cardnum
); 
1245         setDemodBuf(BitStream
,BitLen
,idx
); 
1247                 PrintAndLog("DEBUG: HID idx: %d, Len: %d, Printing Demod Buffer:", idx
, BitLen
); 
1254 //Paradox Prox demod - FSK RF/50 with preamble of 00001111 (then manchester encoded) 
1255 //print full Paradox Prox ID and some bit format details if found 
1256 int CmdFSKdemodParadox(const char *Cmd
) 
1258         //raw fsk demod no manchester decoding no start bit finding just get binary from wave 
1259         uint32_t hi2
=0, hi
=0, lo
=0; 
1261         uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
1262         size_t BitLen 
= getFromGraphBuf(BitStream
); 
1263         if (BitLen
==0) return 0; 
1264         //get binary from fsk wave 
1265         int idx 
= ParadoxdemodFSK(BitStream
,&BitLen
,&hi2
,&hi
,&lo
); 
1269                                 PrintAndLog("DEBUG: Error - Paradox just noise detected");      
1270                         } else if (idx 
== -2) { 
1271                                 PrintAndLog("DEBUG: Error - Paradox error demoding fsk"); 
1272                         } else if (idx 
== -3) { 
1273                                 PrintAndLog("DEBUG: Error - Paradox preamble not found"); 
1274                         } else if (idx 
== -4) { 
1275                                 PrintAndLog("DEBUG: Error - Paradox error in Manchester data"); 
1277                                 PrintAndLog("DEBUG: Error - Paradox error demoding fsk %d", idx
); 
1282         if (hi2
==0 && hi
==0 && lo
==0){ 
1283                 if (g_debugMode
) PrintAndLog("DEBUG: Error - Paradox no value found"); 
1286         uint32_t fc 
= ((hi 
& 0x3)<<6) | (lo
>>26); 
1287         uint32_t cardnum 
= (lo
>>10)&0xFFFF; 
1288         uint32_t rawLo 
= bytebits_to_byte(BitStream
+idx
+64,32); 
1289         uint32_t rawHi 
= bytebits_to_byte(BitStream
+idx
+32,32); 
1290         uint32_t rawHi2 
= bytebits_to_byte(BitStream
+idx
,32); 
1292         PrintAndLog("Paradox TAG ID: %x%08x - FC: %d - Card: %d - Checksum: %02x - RAW: %08x%08x%08x", 
1293                 hi
>>10, (hi 
& 0x3)<<26 | (lo
>>10), fc
, cardnum
, (lo
>>2) & 0xFF, rawHi2
, rawHi
, rawLo
); 
1294         setDemodBuf(BitStream
,BitLen
,idx
); 
1296                 PrintAndLog("DEBUG: Paradox idx: %d, len: %d, Printing Demod Buffer:", idx
, BitLen
); 
1303 //IO-Prox demod - FSK RF/64 with preamble of 000000001 
1304 //print ioprox ID and some format details 
1305 int CmdFSKdemodIO(const char *Cmd
) 
1310         memset(crcStr
, 0x00, sizeof(crcStr
) ); 
1312         //something in graphbuffer? 
1313         if (GraphTraceLen 
< 65) { 
1314                 if (g_debugMode
)PrintAndLog("DEBUG: Error - IO prox not enough samples in GraphBuffer"); 
1317         uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
1318         size_t bitlen 
= getFromGraphBuf(BitStream
); 
1319         if (bitlen 
== 0) return retval
; 
1321         //get binary from fsk wave 
1322         idx 
= IOdemodFSK(BitStream
, bitlen
); 
1326                                 PrintAndLog("DEBUG: Error - IO prox just noise detected");      
1327                         } else if (idx 
== -2) { 
1328                                 PrintAndLog("DEBUG: Error - IO prox not enough samples"); 
1329                         } else if (idx 
== -3) { 
1330                                 PrintAndLog("DEBUG: Error - IO prox error during fskdemod");         
1331                         } else if (idx 
== -4) { 
1332                                 PrintAndLog("DEBUG: Error - IO prox preamble not found"); 
1333                         } else if (idx 
== -5) { 
1334                                 PrintAndLog("DEBUG: Error - IO prox separator bits not found"); 
1336                                 PrintAndLog("DEBUG: Error - IO prox error demoding fsk %d", idx
); 
1343                         PrintAndLog("DEBUG: Error - IO prox data not found - FSK Bits: %d", bitlen
); 
1344                         if (bitlen 
> 92) PrintAndLog("%s", sprint_bin_break(BitStream
,92,16)); 
1349                 //0           10          20          30          40          50          60 
1351                 //01234567 8 90123456 7 89012345 6 78901234 5 67890123 4 56789012 3 45678901 23 
1352                 //----------------------------------------------------------------------------- 
1353                 //00000000 0 11110000 1 facility 1 version* 1 code*one 1 code*two 1 ???????? 11 
1355                 //XSF(version)facility:codeone+codetwo (raw) 
1357         if (idx 
+ 64 > bitlen
) { 
1358                 if (g_debugMode
) PrintAndLog("DEBUG: Error - IO prox not enough bits found - bitlen: %d", bitlen
); 
1363                 PrintAndLog("%d%d%d%d%d%d%d%d %d", BitStream
[idx
], BitStream
[idx
+1], BitStream
[idx
+2], BitStream
[idx
+3], BitStream
[idx
+4], BitStream
[idx
+5], BitStream
[idx
+6], BitStream
[idx
+7], BitStream
[idx
+8]); 
1364                 PrintAndLog("%d%d%d%d%d%d%d%d %d", BitStream
[idx
+9], BitStream
[idx
+10], BitStream
[idx
+11],BitStream
[idx
+12],BitStream
[idx
+13],BitStream
[idx
+14],BitStream
[idx
+15],BitStream
[idx
+16],BitStream
[idx
+17]); 
1365                 PrintAndLog("%d%d%d%d%d%d%d%d %d facility", BitStream
[idx
+18], BitStream
[idx
+19], BitStream
[idx
+20],BitStream
[idx
+21],BitStream
[idx
+22],BitStream
[idx
+23],BitStream
[idx
+24],BitStream
[idx
+25],BitStream
[idx
+26]); 
1366                 PrintAndLog("%d%d%d%d%d%d%d%d %d version", BitStream
[idx
+27], BitStream
[idx
+28], BitStream
[idx
+29],BitStream
[idx
+30],BitStream
[idx
+31],BitStream
[idx
+32],BitStream
[idx
+33],BitStream
[idx
+34],BitStream
[idx
+35]); 
1367                 PrintAndLog("%d%d%d%d%d%d%d%d %d code1", BitStream
[idx
+36], BitStream
[idx
+37], BitStream
[idx
+38],BitStream
[idx
+39],BitStream
[idx
+40],BitStream
[idx
+41],BitStream
[idx
+42],BitStream
[idx
+43],BitStream
[idx
+44]); 
1368                 PrintAndLog("%d%d%d%d%d%d%d%d %d code2", BitStream
[idx
+45], BitStream
[idx
+46], BitStream
[idx
+47],BitStream
[idx
+48],BitStream
[idx
+49],BitStream
[idx
+50],BitStream
[idx
+51],BitStream
[idx
+52],BitStream
[idx
+53]); 
1369                 PrintAndLog("%d%d%d%d%d%d%d%d %d%d checksum", BitStream
[idx
+54],BitStream
[idx
+55],BitStream
[idx
+56],BitStream
[idx
+57],BitStream
[idx
+58],BitStream
[idx
+59],BitStream
[idx
+60],BitStream
[idx
+61],BitStream
[idx
+62],BitStream
[idx
+63]); 
1372         uint32_t code 
= bytebits_to_byte(BitStream
+idx
,32); 
1373         uint32_t code2 
= bytebits_to_byte(BitStream
+idx
+32,32); 
1374         uint8_t version 
= bytebits_to_byte(BitStream
+idx
+27,8); //14,4 
1375         uint8_t facilitycode 
= bytebits_to_byte(BitStream
+idx
+18,8) ; 
1376         uint16_t number 
= (bytebits_to_byte(BitStream
+idx
+36,8)<<8)|(bytebits_to_byte(BitStream
+idx
+45,8)); //36,9 
1377         uint8_t crc 
= bytebits_to_byte(BitStream
+idx
+54,8); 
1378         uint16_t calccrc 
= 0; 
1380         for (uint8_t i 
= 1; i 
< 6; ++i
){ 
1381                 calccrc 
+= bytebits_to_byte(BitStream 
+ idx 
+ 9 * i 
,8); 
1384         calccrc 
= 0xff - calccrc
; 
1386         if  (crc 
== calccrc
) { 
1387                 snprintf(crcStr
, 3, "ok"); 
1390                 if (g_debugMode
) PrintAndLog("DEBUG: Error - IO prox crc failed"); 
1392                 snprintf(crcStr
, 20, "failed 0x%02X != 0x%02X", crc
, calccrc
); 
1396         PrintAndLog("IO Prox XSF(%02d)%02x:%05d (%08x%08x) [crc %s]",version
,facilitycode
,number
,code
,code2
, crcStr
); 
1397         setDemodBuf(BitStream
,64,idx
); 
1399                 PrintAndLog("DEBUG: IO prox idx: %d, Len: %d, Printing demod buffer:", idx
, 64); 
1406 //AWID Prox demod - FSK RF/50 with preamble of 00000001  (always a 96 bit data stream) 
1407 //print full AWID Prox ID and some bit format details if found 
1408 int CmdFSKdemodAWID(const char *Cmd
) 
1410         uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
1411         size_t size 
= getFromGraphBuf(BitStream
); 
1412         if (size
==0) return 0; 
1414         //get binary from fsk wave 
1415         int idx 
= AWIDdemodFSK(BitStream
, &size
); 
1419                                 PrintAndLog("DEBUG: Error - AWID not enough samples"); 
1421                                 PrintAndLog("DEBUG: Error - AWID only noise found"); 
1423                                 PrintAndLog("DEBUG: Error - AWID problem during FSK demod"); 
1425                                 PrintAndLog("DEBUG: Error - AWID preamble not found"); 
1427                                 PrintAndLog("DEBUG: Error - AWID size not correct: %d", size
); 
1429                                 PrintAndLog("DEBUG: Error - AWID error %d",idx
); 
1435         // 0            10            20            30              40            50              60 
1437         // 01234567 890 1 234 5 678 9 012 3 456 7 890 1 234 5 678 9 012 3 456 7 890 1 234 5 678 9 012 3 - to 96 
1438         // ----------------------------------------------------------------------------- 
1439         // 00000001 000 1 110 1 101 1 011 1 101 1 010 0 000 1 000 1 010 0 001 0 110 1 100 0 000 1 000 1 
1440         // premable bbb o bbb o bbw o fff o fff o ffc o ccc o ccc o ccc o ccc o ccc o wxx o xxx o xxx o - to 96 
1441         //          |---26 bit---|    |-----117----||-------------142-------------| 
1442         // b = format bit len, o = odd parity of last 3 bits 
1443         // f = facility code, c = card number 
1444         // w = wiegand parity 
1445         // (26 bit format shown) 
1447         //get raw ID before removing parities 
1448         uint32_t rawLo 
= bytebits_to_byte(BitStream
+idx
+64,32); 
1449         uint32_t rawHi 
= bytebits_to_byte(BitStream
+idx
+32,32); 
1450         uint32_t rawHi2 
= bytebits_to_byte(BitStream
+idx
,32); 
1451         setDemodBuf(BitStream
,96,idx
); 
1453         size 
= removeParity(BitStream
, idx
+8, 4, 1, 88); 
1455                 if (g_debugMode
) PrintAndLog("DEBUG: Error - AWID at parity check-tag size does not match AWID format"); 
1458         // ok valid card found! 
1461         // 0           10         20        30          40        50        60 
1463         // 01234567 8 90123456 7890123456789012 3 456789012345678901234567890123456 
1464         // ----------------------------------------------------------------------------- 
1465         // 00011010 1 01110101 0000000010001110 1 000000000000000000000000000000000 
1466         // bbbbbbbb w ffffffff cccccccccccccccc w xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
1467         // |26 bit|   |-117--| |-----142------| 
1469         // 00110010 0 0000111110100000 00000000000100010010100010000111 1 000000000  
1470         // bbbbbbbb w ffffffffffffffff cccccccccccccccccccccccccccccccc w xxxxxxxxx 
1471         // |50 bit|   |----4000------| |-----------2248975------------|  
1472         // b = format bit len, o = odd parity of last 3 bits 
1473         // f = facility code, c = card number 
1474         // w = wiegand parity 
1477         uint32_t cardnum 
= 0; 
1480         uint8_t fmtLen 
= bytebits_to_byte(BitStream
, 8); 
1484                         fc 
= bytebits_to_byte(BitStream 
+ 9, 8); 
1485                         cardnum 
= bytebits_to_byte(BitStream 
+ 17, 16); 
1486                         code1 
= bytebits_to_byte(BitStream 
+ 8,fmtLen
); 
1487                         PrintAndLog("AWID Found - BitLength: %d, FC: %d, Card: %u - Wiegand: %x, Raw: %08x%08x%08x", fmtLen
, fc
, cardnum
, code1
, rawHi2
, rawHi
, rawLo
); 
1490                         fc 
= bytebits_to_byte(BitStream 
+ 9, 8); 
1491                         cardnum 
= bytebits_to_byte(BitStream 
+ 17, 24); 
1492                         code1 
= bytebits_to_byte(BitStream 
+ 8, (fmtLen
-32) ); 
1493                         code2 
= bytebits_to_byte(BitStream 
+ 8 + (fmtLen
-32), 32);                       
1494                         PrintAndLog("AWID Found - BitLength: %d, FC: %d, Card: %u - Wiegand: %x%08x, Raw: %08x%08x%08x", fmtLen
, fc
, cardnum
, code1
, code2
, rawHi2
, rawHi
, rawLo
);                       
1497                         fc 
= bytebits_to_byte(BitStream 
+ 9, 13); 
1498                         cardnum 
= bytebits_to_byte(BitStream 
+ 22, 18); 
1499                         code1 
= bytebits_to_byte(BitStream 
+ 8, (fmtLen
-32) ); 
1500                         code2 
= bytebits_to_byte(BitStream 
+ 8 + (fmtLen
-32), 32);                       
1501                         PrintAndLog("AWID Found - BitLength: %d, FC: %d, Card: %u - Wiegand: %x%08x, Raw: %08x%08x%08x", fmtLen
, fc
, cardnum
, code1
, code2
, rawHi2
, rawHi
, rawLo
); 
1506                         fc 
= bytebits_to_byte(BitStream 
+ 9, 16); 
1507                         cardnum 
= bytebits_to_byte(BitStream 
+ 25, 32); 
1508                         code1 
= bytebits_to_byte(BitStream 
+ 8, (fmtLen
-32) ); 
1509                         code2 
= bytebits_to_byte(BitStream 
+ 8 + (fmtLen
-32), 32); 
1510                         PrintAndLog("AWID Found - BitLength: %d, FC: %d, Card: %u - Wiegand: %x%08x, Raw: %08x%08x%08x", fmtLen
, fc
, cardnum
, code1
, code2
, rawHi2
, rawHi
, rawLo
); 
1514                                 cardnum 
= bytebits_to_byte(BitStream
+8+(fmtLen
-17), 16); 
1515                                 code1 
= bytebits_to_byte(BitStream
+8,fmtLen
-32); 
1516                                 code2 
= bytebits_to_byte(BitStream
+8+(fmtLen
-32),32); 
1517                                 PrintAndLog("AWID Found - BitLength: %d -unknown BitLength- (%u) - Wiegand: %x%08x, Raw: %08x%08x%08x", fmtLen
, cardnum
, code1
, code2
, rawHi2
, rawHi
, rawLo
); 
1519                                 cardnum 
= bytebits_to_byte(BitStream
+8+(fmtLen
-17), 16); 
1520                                 code1 
= bytebits_to_byte(BitStream
+8,fmtLen
); 
1521                                 PrintAndLog("AWID Found - BitLength: %d -unknown BitLength- (%u) - Wiegand: %x, Raw: %08x%08x%08x", fmtLen
, cardnum
, code1
, rawHi2
, rawHi
, rawLo
); 
1527                 PrintAndLog("DEBUG: AWID idx: %d, Len: %d Printing Demod Buffer:", idx
, 96); 
1534 //Pyramid Prox demod - FSK RF/50 with preamble of 0000000000000001  (always a 128 bit data stream) 
1535 //print full Farpointe Data/Pyramid Prox ID and some bit format details if found 
1536 int CmdFSKdemodPyramid(const char *Cmd
) 
1538         //raw fsk demod no manchester decoding no start bit finding just get binary from wave 
1539         uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
1540         size_t size 
= getFromGraphBuf(BitStream
); 
1541         if (size
==0) return 0; 
1543         //get binary from fsk wave 
1544         int idx 
= PyramiddemodFSK(BitStream
, &size
); 
1548                                 PrintAndLog("DEBUG: Error - Pyramid: not enough samples"); 
1550                                 PrintAndLog("DEBUG: Error - Pyramid: only noise found"); 
1552                                 PrintAndLog("DEBUG: Error - Pyramid: problem during FSK demod"); 
1554                                 PrintAndLog("DEBUG: Error - Pyramid: size not correct: %d", size
); 
1556                                 PrintAndLog("DEBUG: Error - Pyramid: preamble not found"); 
1558                                 PrintAndLog("DEBUG: Error - Pyramid: idx: %d",idx
); 
1563         // 0           10          20          30            40          50          60 
1565         // 0123456 7 8901234 5 6789012 3 4567890 1 2345678 9 0123456 7 8901234 5 6789012 3 
1566         // ----------------------------------------------------------------------------- 
1567         // 0000000 0 0000000 1 0000000 1 0000000 1 0000000 1 0000000 1 0000000 1 0000000 1 
1568         // premable  xxxxxxx o xxxxxxx o xxxxxxx o xxxxxxx o xxxxxxx o xxxxxxx o xxxxxxx o 
1570         // 64    70            80          90          100         110           120 
1572         // 4567890 1 2345678 9 0123456 7 8901234 5 6789012 3 4567890 1 2345678 9 0123456 7 
1573         // ----------------------------------------------------------------------------- 
1574         // 0000000 1 0000000 1 0000000 1 0110111 0 0011000 1 0000001 0 0001100 1 1001010 0 
1575         // xxxxxxx o xxxxxxx o xxxxxxx o xswffff o ffffccc o ccccccc o ccccccw o ppppppp o 
1576         //                                  |---115---||---------71---------| 
1577         // s = format start bit, o = odd parity of last 7 bits 
1578         // f = facility code, c = card number 
1579         // w = wiegand parity, x = extra space for other formats 
1580         // p = CRC8maxim checksum 
1581         // (26 bit format shown) 
1583         //get bytes for checksum calc 
1584         uint8_t checksum 
= bytebits_to_byte(BitStream 
+ idx 
+ 120, 8); 
1585         uint8_t csBuff
[14] = {0x00}; 
1586         for (uint8_t i 
= 0; i 
< 13; i
++){ 
1587                 csBuff
[i
] = bytebits_to_byte(BitStream 
+ idx 
+ 16 + (i
*8), 8); 
1589         //check checksum calc 
1590         //checksum calc thanks to ICEMAN!! 
1591         uint32_t checkCS 
=  CRC8Maxim(csBuff
, 13); 
1593         //get raw ID before removing parities 
1594         uint32_t rawLo 
= bytebits_to_byte(BitStream
+idx
+96, 32); 
1595         uint32_t rawHi 
= bytebits_to_byte(BitStream
+idx
+64, 32); 
1596         uint32_t rawHi2 
= bytebits_to_byte(BitStream
+idx
+32, 32); 
1597         uint32_t rawHi3 
= bytebits_to_byte(BitStream
+idx
, 32); 
1598         setDemodBuf(BitStream
, 128, idx
); 
1600         size 
= removeParity(BitStream
, idx
+8, 8, 1, 120); 
1604                                 PrintAndLog("DEBUG: Error - Pyramid: parity check failed - IDX: %d, hi3: %08X", idx
, rawHi3
); 
1606                                 PrintAndLog("DEBUG: Error - Pyramid: at parity check - tag size does not match Pyramid format, SIZE: %d, IDX: %d, hi3: %08X", size
, idx
, rawHi3
); 
1611         // ok valid card found! 
1614         // 0         10        20        30        40        50        60        70 
1616         // 01234567890123456789012345678901234567890123456789012345678901234567890 
1617         // ----------------------------------------------------------------------- 
1618         // 00000000000000000000000000000000000000000000000000000000000000000000000 
1619         // xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
1623         // 1 2 34567890 1234567890123456 7 8901234 
1624         // --------------------------------------- 
1625         // 1 1 01110011 0000000001000110 0 1001010 
1626         // s w ffffffff cccccccccccccccc w ppppppp 
1627         //     |--115-| |------71------| 
1628         // s = format start bit, o = odd parity of last 7 bits 
1629         // f = facility code, c = card number 
1630         // w = wiegand parity, x = extra space for other formats 
1631         // p = CRC8-Maxim checksum 
1632         // (26 bit format shown) 
1634         //find start bit to get fmtLen 
1636         for (j
=0; j 
< size
; ++j
){ 
1637                 if(BitStream
[j
]) break; 
1640         uint8_t fmtLen 
= size
-j
-8; 
1642         uint32_t cardnum 
= 0; 
1645         if ( fmtLen 
== 26 ){ 
1646                 fc 
= bytebits_to_byte(BitStream
+73, 8); 
1647                 cardnum 
= bytebits_to_byte(BitStream
+81, 16); 
1648                 code1 
= bytebits_to_byte(BitStream
+72,fmtLen
); 
1649                 PrintAndLog("Pyramid ID Found - BitLength: %d, FC: %d, Card: %d - Wiegand: %x, Raw: %08x%08x%08x%08x", fmtLen
, fc
, cardnum
, code1
, rawHi3
, rawHi2
, rawHi
, rawLo
); 
1650         } else if (fmtLen 
== 45) { 
1651                 fmtLen 
= 42; //end = 10 bits not 7 like 26 bit fmt 
1652                 fc 
= bytebits_to_byte(BitStream
+53, 10); 
1653                 cardnum 
= bytebits_to_byte(BitStream
+63, 32); 
1654                 PrintAndLog("Pyramid ID Found - BitLength: %d, FC: %d, Card: %d - Raw: %08x%08x%08x%08x", fmtLen
, fc
, cardnum
, rawHi3
, rawHi2
, rawHi
, rawLo
); 
1656                 cardnum 
= bytebits_to_byte(BitStream
+81, 16); 
1657                 PrintAndLog("Pyramid ID Found - BitLength: %d -unknown BitLength- (%d), Raw: %08x%08x%08x%08x", fmtLen
, cardnum
, rawHi3
, rawHi2
, rawHi
, rawLo
); 
1659         if (checksum 
== checkCS
) 
1660                 PrintAndLog("Checksum %02x passed", checksum
); 
1662                 PrintAndLog("Checksum %02x failed - should have been %02x", checksum
, checkCS
); 
1665                 PrintAndLog("DEBUG: Pyramid: idx: %d, Len: %d, Printing Demod Buffer:", idx
, 128); 
1671 // FDX-B ISO11784/85 demod  (aka animal tag)  BIPHASE, inverted, rf/32,  with preamble of 00000000001 (128bits) 
1672 // 8 databits + 1 parity (1) 
1674 // NATIONAL CODE, ICAR database 
1675 // COUNTRY CODE (ISO3166) or http://cms.abvma.ca/uploads/ManufacturersISOsandCountryCodes.pdf 
1676 // FLAG (animal/non-animal) 
1683 16 ccitt CRC chksum over 64bit ID CODE. 
1686 -- sample: 985121004515220  [ 37FF65B88EF94 ] 
1688 int CmdFDXBdemodBI(const char *Cmd
){ 
1694         uint8_t BitStream
[MAX_DEMOD_BUF_LEN
];    
1695         size_t size 
= getFromGraphBuf(BitStream
);        
1697         errCnt 
= askdemod(BitStream
, &size
, &clk
, &invert
, maxErr
, 0, 0); 
1698         if ( errCnt 
< 0 || errCnt 
> maxErr 
) {  
1699                 if (g_debugMode
) PrintAndLog("DEBUG: Error - FDXB no data or error found %d, clock: %d", errCnt
, clk
); 
1703         errCnt 
= BiphaseRawDecode(BitStream
, &size
, maxErr
, 1); 
1704         if (errCnt 
< 0 || errCnt 
> maxErr 
) { 
1705                 if (g_debugMode
) PrintAndLog("DEBUG: Error - FDXB BiphaseRawDecode: %d", errCnt
); 
1709         int preambleIndex 
= FDXBdemodBI(BitStream
, &size
); 
1710         if (preambleIndex 
< 0){ 
1711                 if (g_debugMode
) PrintAndLog("DEBUG: Error - FDXB preamble not found :: %d",preambleIndex
); 
1715                 if (g_debugMode
) PrintAndLog("DEBUG: Error - FDXB incorrect data length found"); 
1719         setDemodBuf(BitStream
, 128, preambleIndex
); 
1721         // remove marker bits (1's every 9th digit after preamble) (pType = 2) 
1722         size 
= removeParity(BitStream
, preambleIndex 
+ 11, 9, 2, 117); 
1723         if ( size 
!= 104 ) { 
1724                 if (g_debugMode
) PrintAndLog("DEBUG: Error - FDXB error removeParity:: %d", size
); 
1727         PrintAndLog("\nFDX-B / ISO 11784/5 Animal Tag ID Found:"); 
1730         uint64_t NationalCode 
= ((uint64_t)(bytebits_to_byteLSBF(BitStream
+32,6)) << 32) | bytebits_to_byteLSBF(BitStream
,32); 
1731         uint32_t countryCode 
= bytebits_to_byteLSBF(BitStream
+38,10); 
1732         uint8_t dataBlockBit 
= BitStream
[48]; 
1733         uint32_t reservedCode 
= bytebits_to_byteLSBF(BitStream
+49,14); 
1734         uint8_t animalBit 
= BitStream
[63]; 
1735         uint32_t crc16 
= bytebits_to_byteLSBF(BitStream
+64,16); 
1736         uint32_t extended 
= bytebits_to_byteLSBF(BitStream
+80,24); 
1738         uint64_t rawid 
= ((uint64_t)bytebits_to_byte(BitStream
,32)<<32) | bytebits_to_byte(BitStream
+32,32); 
1740         num_to_bytes(rawid
, 8, raw
); 
1742         if (g_debugMode
) PrintAndLog("Raw ID Hex: %s", sprint_hex(raw
,8)); 
1744         uint16_t calcCrc 
= crc16_ccitt_kermit(raw
, 8); 
1745         PrintAndLog("Animal ID:     %04u-%012" PRIu64
, countryCode
, NationalCode
); 
1746         PrintAndLog("National Code: %012" PRIu64
, NationalCode
); 
1747         PrintAndLog("CountryCode:   %04u", countryCode
); 
1749         PrintAndLog("Reserved/RFU:      %u", reservedCode
); 
1750         PrintAndLog("Animal Tag:        %s", animalBit 
? "True" : "False"); 
1751         PrintAndLog("Has extended data: %s [0x%X]", dataBlockBit 
? "True" : "False", extended
); 
1752         PrintAndLog("CRC:           0x%04X - [%04X] - %s", crc16
, calcCrc
, (calcCrc 
== crc16
) ? "Passed" : "Failed"); 
1755                 PrintAndLog("Start marker %d;   Size %d", preambleIndex
, size
); 
1756                 char *bin 
= sprint_bin_break(BitStream
,size
,16); 
1757                 PrintAndLog("DEBUG BinStream:\n%s",bin
); 
1764 //attempt to psk1 demod graph buffer 
1765 int PSKDemod(const char *Cmd
, bool verbose
) 
1767         int invert 
= 0, clk 
= 0, maxErr 
= 100; 
1768         sscanf(Cmd
, "%i %i %i", &clk
, &invert
, &maxErr
); 
1773         if (invert 
!= 0 && invert 
!= 1) { 
1774                 if (g_debugMode 
|| verbose
) PrintAndLog("Invalid argument: %s", Cmd
); 
1777         uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
] = {0}; 
1778         size_t BitLen 
= getFromGraphBuf(BitStream
); 
1779         if (BitLen
==0) return 0; 
1781         uint8_t carrier 
= countFC(BitStream
, BitLen
, 0); 
1782         if (carrier
!=2 && carrier
!=4 && carrier
!=8){ 
1787         if (g_debugMode
) PrintAndLog("Carrier: rf/%d",carrier
); 
1790         errCnt 
= pskRawDemod(BitStream
, &BitLen
, &clk
, &invert
); 
1791         if (errCnt 
> maxErr
){ 
1792                 if (g_debugMode 
|| verbose
) PrintAndLog("Too many errors found, clk: %d, invert: %d, numbits: %d, errCnt: %d", clk
, invert
, BitLen
, errCnt
); 
1795         if (errCnt
<0|| BitLen
<16){  //throw away static - allow 1 and -1 (in case of threshold command first) 
1796                 if (g_debugMode 
|| verbose
) PrintAndLog("no data found, clk: %d, invert: %d, numbits: %d, errCnt: %d", clk
, invert
, BitLen
, errCnt
); 
1799         if (verbose 
|| g_debugMode
){ 
1800                 PrintAndLog("\nUsing Clock:%d, invert:%d, Bits Found:%d",clk
,invert
,BitLen
); 
1802                         PrintAndLog("# Errors during Demoding (shown as 7 in bit stream): %d",errCnt
); 
1805         //prime demod buffer for output 
1806         setDemodBuf(BitStream
, BitLen
, 0); 
1810 // Indala 26 bit decode 
1812 // optional arguments - same as CmdpskNRZrawDemod (clock & invert) 
1813 int CmdIndalaDecode(const char *Cmd
) 
1817                 ans 
= PSKDemod(Cmd
, 0); 
1818         } else{ //default to RF/32 
1819                 ans 
= PSKDemod("32", 0); 
1823                 if (g_debugMode
) PrintAndLog("DEBUG: Error - Indala can't demod signal: %d",ans
); 
1828         size_t size 
= DemodBufferLen
; 
1829         int startIdx 
= indala26decode(DemodBuffer
, &size
, &invert
); 
1830         if (startIdx 
< 0 || size 
> 224) { 
1831                 if (g_debugMode
) PrintAndLog("DEBUG: Error - Indala wrong size, expected [64|224] got: %d", size
); 
1834         setDemodBuf(DemodBuffer
, size
, (size_t)startIdx
); 
1836                 if (g_debugMode
) PrintAndLog("DEBUG: Error - Indala had to invert bits"); 
1838         //convert UID to HEX 
1839         uint32_t uid1
, uid2
, uid3
, uid4
, uid5
, uid6
, uid7
; 
1840         uid1 
= bytebits_to_byte(DemodBuffer
,32); 
1841         uid2 
= bytebits_to_byte(DemodBuffer
+32,32); 
1842         if (DemodBufferLen
==64){ 
1843                 PrintAndLog("Indala Found - Bitlength %d, UID = (%x%08x)\n%s", 
1844                         DemodBufferLen
, uid1
, uid2
, sprint_bin_break(DemodBuffer
,DemodBufferLen
,32) 
1847                 uid3 
= bytebits_to_byte(DemodBuffer
+64,32); 
1848                 uid4 
= bytebits_to_byte(DemodBuffer
+96,32); 
1849                 uid5 
= bytebits_to_byte(DemodBuffer
+128,32); 
1850                 uid6 
= bytebits_to_byte(DemodBuffer
+160,32); 
1851                 uid7 
= bytebits_to_byte(DemodBuffer
+192,32); 
1852                 PrintAndLog("Indala Found - Bitlength %d, UID = (%x%08x%08x%08x%08x%08x%08x)\n%s",  
1854                     uid1
, uid2
, uid3
, uid4
, uid5
, uid6
, uid7
, sprint_bin_break(DemodBuffer
,DemodBufferLen
,32) 
1858                 PrintAndLog("DEBUG: Indala - printing demodbuffer:"); 
1864 int CmdPSKNexWatch(const char *Cmd
) 
1866         if (!PSKDemod("", false)) return 0; 
1868         uint8_t preamble
[28] = {0,0,0,0,0,1,0,1,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0}; 
1869         size_t startIdx 
= 0, size 
= DemodBufferLen
;  
1872         if ( size 
< sizeof(preamble
) + 100) return 0; 
1874         bool invert 
= false; 
1875         if (!preambleSearch(DemodBuffer
, preamble
, sizeof(preamble
), &size
, &startIdx
)){ 
1876                 // if didn't find preamble try again inverting 
1877                 if (!PSKDemod("1", false)) return 0;  
1879                 size 
= DemodBufferLen
; 
1880                 if (!preambleSearch(DemodBuffer
, preamble
, sizeof(preamble
), &size
, &startIdx
)) return 0; 
1883         if (size 
!= 128) return 0; 
1884         setDemodBuf(DemodBuffer
, size
, startIdx
+4); 
1885         startIdx 
= 8+32; //4 = extra i added, 8 = preamble, 32 = reserved bits (always 0) 
1888         for (uint8_t wordIdx
=0; wordIdx
<4; wordIdx
++){ 
1889                 for (uint8_t idx
=0; idx
<8; idx
++){ 
1890                         ID 
= (ID 
<< 1) | DemodBuffer
[startIdx
+wordIdx
+(idx
*4)]; 
1893         //parity check (TBD) 
1895         //checksum check (TBD) 
1898         PrintAndLog("NexWatch ID: %d", ID
); 
1900                 PrintAndLog("DEBUG: Error - NexWatch had to Invert - probably NexKey"); 
1901                 for (uint8_t idx
=0; idx
<size
; idx
++) 
1902                         DemodBuffer
[idx
] ^= 1; 
1905         CmdPrintDemodBuff("x"); 
1909 int CmdPSKIdteck(const char *Cmd
) { 
1911         if (!PSKDemod("", false)) { 
1912                 if (g_debugMode
) PrintAndLog("DEBUG: Error - Idteck PSKDemod failed"); 
1915         size_t size 
= DemodBufferLen
; 
1917         //get binary from PSK1 wave 
1918         int idx 
= IdteckDemodPSK(DemodBuffer
, &size
); 
1922                                 PrintAndLog("DEBUG: Error - Idteck: not enough samples"); 
1924                                 PrintAndLog("DEBUG: Error - Idteck: preamble not found"); 
1926                                 PrintAndLog("DEBUG: Error - Idteck: size not correct: %d", size
); 
1928                                 PrintAndLog("DEBUG: Error - Idteck: idx: %d",idx
); 
1931                 // if didn't find preamble try again inverting 
1932                 if (!PSKDemod("1", false)) { 
1933                         if (g_debugMode
) PrintAndLog("DEBUG: Error - Idteck PSKDemod failed"); 
1936                 idx 
= IdteckDemodPSK(DemodBuffer
, &size
); 
1940                                         PrintAndLog("DEBUG: Error - Idteck: not enough samples"); 
1942                                         PrintAndLog("DEBUG: Error - Idteck: preamble not found"); 
1944                                         PrintAndLog("DEBUG: Error - Idteck: size not correct: %d", size
); 
1946                                         PrintAndLog("DEBUG: Error - Idteck: idx: %d",idx
); 
1951         setDemodBuf(DemodBuffer
, 64, idx
); 
1955         uint32_t raw1 
= bytebits_to_byte(DemodBuffer
, 32); 
1956         uint32_t raw2 
= bytebits_to_byte(DemodBuffer
+32, 32); 
1958         //parity check (TBD) 
1959         //checksum check (TBD) 
1962         PrintAndLog("IDTECK Tag Found: Card ID %u ,  Raw: %08X%08X", id
, raw1
, raw2
); 
1967 // takes 3 arguments - clock, invert, maxErr as integers 
1968 // attempts to demodulate nrz only 
1969 // prints binary found and saves in demodbuffer for further commands 
1970 int NRZrawDemod(const char *Cmd
, bool verbose
) 
1975         sscanf(Cmd
, "%i %i %i", &clk
, &invert
, &maxErr
); 
1980         if (invert 
!= 0 && invert 
!= 1) { 
1981                 PrintAndLog("Invalid argument: %s", Cmd
); 
1984         uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
1985         size_t BitLen 
= getFromGraphBuf(BitStream
); 
1986         if (BitLen
==0) return 0; 
1988         errCnt 
= nrzRawDemod(BitStream
, &BitLen
, &clk
, &invert
); 
1989         if (errCnt 
> maxErr
){ 
1990                 if (g_debugMode
) PrintAndLog("Too many errors found, clk: %d, invert: %d, numbits: %d, errCnt: %d",clk
,invert
,BitLen
,errCnt
); 
1993         if (errCnt
<0 || BitLen
<16){  //throw away static - allow 1 and -1 (in case of threshold command first) 
1994                 if (g_debugMode
) PrintAndLog("no data found, clk: %d, invert: %d, numbits: %d, errCnt: %d",clk
,invert
,BitLen
,errCnt
); 
1997         if (verbose 
|| g_debugMode
) PrintAndLog("Tried NRZ Demod using Clock: %d - invert: %d - Bits Found: %d",clk
,invert
,BitLen
); 
1998         //prime demod buffer for output 
1999         setDemodBuf(BitStream
,BitLen
,0); 
2001         if (errCnt
>0 && (verbose 
|| g_debugMode
)) PrintAndLog("# Errors during Demoding (shown as 7 in bit stream): %d",errCnt
); 
2002         if (verbose 
|| g_debugMode
) { 
2003                 PrintAndLog("NRZ demoded bitstream:"); 
2004                 // Now output the bitstream to the scrollback by line of 16 bits 
2010 int CmdNRZrawDemod(const char *Cmd
) 
2012         char cmdp 
= param_getchar(Cmd
, 0); 
2013         if (strlen(Cmd
) > 16 || cmdp 
== 'h' || cmdp 
== 'H') return usage_data_rawdemod_nr(); 
2015         return NRZrawDemod(Cmd
, TRUE
); 
2019 // takes 3 arguments - clock, invert, maxErr as integers 
2020 // attempts to demodulate psk only 
2021 // prints binary found and saves in demodbuffer for further commands 
2022 int CmdPSK1rawDemod(const char *Cmd
) 
2025         char cmdp 
= param_getchar(Cmd
, 0); 
2026         if (strlen(Cmd
) > 16 || cmdp 
== 'h' || cmdp 
== 'H') return usage_data_rawdemod_p1(); 
2028         ans 
= PSKDemod(Cmd
, TRUE
); 
2031                 if (g_debugMode
) PrintAndLog("Error demoding: %d",ans
);  
2034         PrintAndLog("PSK1 demoded bitstream:"); 
2035         // Now output the bitstream to the scrollback by line of 16 bits 
2041 // takes same args as cmdpsk1rawdemod 
2042 int CmdPSK2rawDemod(const char *Cmd
) 
2045         char cmdp 
= param_getchar(Cmd
, 0); 
2046         if (strlen(Cmd
) > 16 || cmdp 
== 'h' || cmdp 
== 'H')     return usage_data_rawdemod_p2(); 
2048         ans 
= PSKDemod(Cmd
, TRUE
); 
2050                 if (g_debugMode
) PrintAndLog("Error demoding: %d",ans
);   
2053         psk1TOpsk2(DemodBuffer
, DemodBufferLen
); 
2054         PrintAndLog("PSK2 demoded bitstream:"); 
2055         // Now output the bitstream to the scrollback by line of 16 bits 
2060 // by marshmellow - combines all raw demod functions into one menu command 
2061 int CmdRawDemod(const char *Cmd
) 
2063         char cmdp 
= Cmd
[0]; //param_getchar(Cmd, 0); 
2064         char cmdp2 
= Cmd
[1]; 
2067         if (strlen(Cmd
) > 35 || cmdp 
== 'h' || cmdp 
== 'H' || strlen(Cmd
) < 2) 
2068                 return usage_data_rawdemod(); 
2070         if (cmdp 
== 'f' && cmdp2 
== 's') 
2071                 ans 
= CmdFSKrawdemod(Cmd
+2); 
2072         else if(cmdp 
== 'a' && cmdp2 
== 'b') 
2073                 ans 
= Cmdaskbiphdemod(Cmd
+2); 
2074         else if(cmdp 
== 'a' && cmdp2 
== 'm') 
2075                 ans 
= Cmdaskmandemod(Cmd
+2); 
2076         else if(cmdp 
== 'a' && cmdp2 
== 'r') 
2077                 ans 
= Cmdaskrawdemod(Cmd
+2); 
2078         else if(cmdp 
== 'n' && cmdp2 
== 'r') 
2079                 ans 
= CmdNRZrawDemod(Cmd
+2); 
2080         else if(cmdp 
== 'p' && cmdp2 
== '1') 
2081                 ans 
= CmdPSK1rawDemod(Cmd
+2); 
2082         else if(cmdp 
== 'p' && cmdp2 
== '2') 
2083                 ans 
= CmdPSK2rawDemod(Cmd
+2); 
2085                 PrintAndLog("unknown modulation entered - see help ('h') for parameter structure"); 
2089 //iceman: diff sizes on the plotwindow? 
2090 int CmdGrid(const char *Cmd
) 
2092         sscanf(Cmd
, "%i %i", &PlotGridX
, &PlotGridY
); 
2093         PlotGridXdefault 
= PlotGridX
; 
2094         PlotGridYdefault 
= PlotGridY
; 
2095         RepaintGraphWindow(); 
2099 int CmdHexsamples(const char *Cmd
) 
2104         char string_buf
[25]; 
2105         char* string_ptr 
= string_buf
; 
2106         uint8_t got
[BIGBUF_SIZE
]; 
2108         sscanf(Cmd
, "%i %i", &requested
, &offset
); 
2110         /* if no args send something */ 
2111         if (requested 
== 0) { 
2114         if (offset 
+ requested 
> sizeof(got
)) { 
2115                 PrintAndLog("Tried to read past end of buffer, <bytes> + <offset> > %d", BIGBUF_SIZE
); 
2119         GetFromBigBuf(got
,requested
,offset
); 
2120         WaitForResponse(CMD_ACK
,NULL
); 
2123         for (j 
= 0; j 
< requested
; j
++) { 
2125                 string_ptr 
+= sprintf(string_ptr
, "%02x ", got
[j
]); 
2127                         *(string_ptr 
- 1) = '\0';    // remove the trailing space 
2128                         PrintAndLog("%s", string_buf
); 
2129                         string_buf
[0] = '\0'; 
2130                         string_ptr 
= string_buf
; 
2133                 if (j 
== requested 
- 1 && string_buf
[0] != '\0') { // print any remaining bytes 
2134                         *(string_ptr 
- 1) = '\0'; 
2135                         PrintAndLog("%s", string_buf
); 
2136                         string_buf
[0] = '\0'; 
2142 int CmdHide(const char *Cmd
) 
2148 //zero mean GraphBuffer 
2149 int CmdHpf(const char *Cmd
) 
2154         for (i 
= 10; i 
< GraphTraceLen
; ++i
) 
2155                 accum 
+= GraphBuffer
[i
]; 
2157         accum 
/= (GraphTraceLen 
- 10); 
2159         for (i 
= 0; i 
< GraphTraceLen
; ++i
) 
2160                 GraphBuffer
[i
] -= accum
; 
2162         RepaintGraphWindow(); 
2166 bool _headBit( BitstreamOut 
*stream
) 
2168         int bytepos 
= stream
->position 
>> 3; // divide by 8 
2169         int bitpos 
= (stream
->position
++) & 7; // mask out 00000111 
2170         return (*(stream
->buffer 
+ bytepos
) >> (7-bitpos
)) & 1; 
2173 uint8_t getByte(uint8_t bits_per_sample
, BitstreamOut
* b
) 
2177         for(i 
= 0 ; i 
< bits_per_sample
; i
++) 
2178                 val 
|= (_headBit(b
) << (7-i
)); 
2183 int getSamples(const char *Cmd
, bool silent
) 
2185         //If we get all but the last byte in bigbuf, 
2186         // we don't have to worry about remaining trash 
2187         // in the last byte in case the bits-per-sample 
2188         // does not line up on byte boundaries 
2190         uint8_t got
[BIGBUF_SIZE
-1] = { 0 }; 
2192         int n 
= strtol(Cmd
, NULL
, 0); 
2194         if ( n 
== 0 || n 
> sizeof(got
)) 
2197         if (!silent
) PrintAndLog("Reading %d bytes from device memory\n", n
); 
2198         GetFromBigBuf(got
,n
,0); 
2199         if (!silent
) PrintAndLog("Data fetched"); 
2200         UsbCommand response
; 
2201         if ( !WaitForResponseTimeout(CMD_ACK
, &response
, 10000) ) { 
2202         PrintAndLog("timeout while waiting for reply."); 
2206         uint8_t bits_per_sample 
= 8; 
2208         //Old devices without this feature would send 0 at arg[0] 
2209         if (response
.arg
[0] > 0) { 
2210                 sample_config 
*sc 
= (sample_config 
*) response
.d
.asBytes
; 
2211                 if (!silent
) PrintAndLog("Samples @ %d bits/smpl, decimation 1:%d ", sc
->bits_per_sample
, sc
->decimation
); 
2212                 bits_per_sample 
= sc
->bits_per_sample
; 
2215         if (bits_per_sample 
< 8) { 
2216                 if (!silent
) PrintAndLog("Unpacking..."); 
2217                 BitstreamOut bout 
= { got
, bits_per_sample 
* n
,  0}; 
2219                 for (j 
= 0; j 
* bits_per_sample 
< n 
* 8 && j 
< n
; j
++) { 
2220                         uint8_t sample 
= getByte(bits_per_sample
, &bout
); 
2221                         GraphBuffer
[j
] = ((int) sample 
)- 128; 
2224                 if (!silent
) PrintAndLog("Unpacked %d samples" , j 
); 
2226                 for (int j 
= 0; j 
< n
; j
++) { 
2227                         GraphBuffer
[j
] = ((int)got
[j
]) - 128; 
2232         RepaintGraphWindow(); 
2236 int CmdSamples(const char *Cmd
) 
2238         return getSamples(Cmd
, false); 
2241 int CmdTuneSamples(const char *Cmd
) 
2244         printf("\nMeasuring antenna characteristics, please wait..."); 
2246         UsbCommand c 
= {CMD_MEASURE_ANTENNA_TUNING
, {0,0,0}}; 
2247         clearCommandBuffer(); 
2250         while(!WaitForResponseTimeout(CMD_MEASURED_ANTENNA_TUNING
, &resp
, 2000)) { 
2255                         PrintAndLog("\nNo response from Proxmark. Aborting..."); 
2260 #define NON_VOLTAGE             999 
2261 #define LF_UNUSABLE_V   2948            // was 2000. Changed due to bugfix in voltage measurements. LF results are now 47% higher. 
2262 #define LF_MARGINAL_V   14739           // was 10000. Changed due to bugfix bug in voltage measurements. LF results are now 47% higher. 
2263 #define HF_UNUSABLE_V   3167            // was 2000. Changed due to bugfix in voltage measurements. HF results are now 58% higher. 
2264 #define HF_MARGINAL_V   7917            // was 5000. Changed due to bugfix in voltage measurements. HF results are now 58% higher. 
2267         int vLf125
, vLf134
, vHf
; 
2268         vLf125 
= resp
.arg
[0] & 0xffff; 
2269         vLf134 
= resp
.arg
[0] >> 16; 
2270         vHf 
= resp
.arg
[1] & 0xffff;; 
2271         peakf 
= resp
.arg
[2] & 0xffff; 
2272         peakv 
= resp
.arg
[2] >> 16; 
2274         if ( vLf125 
> NON_VOLTAGE 
) 
2275                 PrintAndLog("# LF antenna: %5.2f V @   125.00 kHz", vLf125
/1000.0); 
2276         if ( vLf134 
> NON_VOLTAGE 
) 
2277                 PrintAndLog("# LF antenna: %5.2f V @   134.00 kHz", vLf134
/1000.0); 
2278         if ( peakv 
> NON_VOLTAGE 
&& peakf 
> 0 ) 
2279                 PrintAndLog("# LF optimal: %5.2f V @%9.2f kHz", peakv
/1000.0, 12000.0/(peakf
+1)); 
2280         if ( vHf 
> NON_VOLTAGE 
) 
2281                 PrintAndLog("# HF antenna: %5.2f V @    13.56 MHz", vHf
/1000.0); 
2285         if (peakv 
< LF_UNUSABLE_V
) 
2286                 PrintAndLog("# Your LF antenna is unusable."); 
2287         else if (peakv 
< LF_MARGINAL_V
) 
2288                 PrintAndLog("# Your LF antenna is marginal."); 
2289         if (vHf 
< HF_UNUSABLE_V
) 
2290                 PrintAndLog("# Your HF antenna is unusable."); 
2291         else if (vHf 
< HF_MARGINAL_V
) 
2292                 PrintAndLog("# Your HF antenna is marginal."); 
2294         if (peakv 
>= LF_UNUSABLE_V
)     { 
2295                 for (int i 
= 0; i 
< 256; i
++) { 
2296                         GraphBuffer
[i
] = resp
.d
.asBytes
[i
] - 128; 
2298                 PrintAndLog("Displaying LF tuning graph. Divisor 89 is 134khz, 95 is 125khz.\n"); 
2300                 GraphTraceLen 
= 256; 
2302                 RepaintGraphWindow(); 
2307 int CmdLoad(const char *Cmd
) 
2309         char filename
[FILE_PATH_SIZE
] = {0x00}; 
2313         if (len 
> FILE_PATH_SIZE
) len 
= FILE_PATH_SIZE
; 
2314         memcpy(filename
, Cmd
, len
); 
2316         FILE *f 
= fopen(filename
, "r"); 
2318                 PrintAndLog("couldn't open '%s'", filename
); 
2324         while (fgets(line
, sizeof (line
), f
)) { 
2325                 GraphBuffer
[GraphTraceLen
] = atoi(line
); 
2331         PrintAndLog("loaded %d samples", GraphTraceLen
); 
2332         RepaintGraphWindow(); 
2336 int CmdLtrim(const char *Cmd
) 
2340         if (GraphTraceLen 
<= 0) return 0; 
2342         for (int i 
= ds
; i 
< GraphTraceLen
; ++i
) 
2343                 GraphBuffer
[i
-ds
] = GraphBuffer
[i
]; 
2345         GraphTraceLen 
-= ds
; 
2346         RepaintGraphWindow(); 
2350 // trim graph to input argument length 
2351 int CmdRtrim(const char *Cmd
) 
2355         RepaintGraphWindow(); 
2359 int CmdNorm(const char *Cmd
) 
2362         int max 
= INT_MIN
, min 
= INT_MAX
; 
2364         for (i 
= 10; i 
< GraphTraceLen
; ++i
) { 
2365                 if (GraphBuffer
[i
] > max
) max 
= GraphBuffer
[i
]; 
2366                 if (GraphBuffer
[i
] < min
) min 
= GraphBuffer
[i
]; 
2370                 for (i 
= 0; i 
< GraphTraceLen
; ++i
) { 
2371                         GraphBuffer
[i
] = (GraphBuffer
[i
] - ((max 
+ min
) / 2)) * 256 / (max 
- min
); 
2372                         //marshmelow: adjusted *1000 to *256 to make +/- 128 so demod commands still work 
2375         RepaintGraphWindow(); 
2379 int CmdPlot(const char *Cmd
) 
2385 int CmdSave(const char *Cmd
) 
2387         char filename
[FILE_PATH_SIZE
] = {0x00}; 
2391         if (len 
> FILE_PATH_SIZE
) len 
= FILE_PATH_SIZE
; 
2392         memcpy(filename
, Cmd
, len
); 
2394         FILE *f 
= fopen(filename
, "w"); 
2396                 PrintAndLog("couldn't open '%s'", filename
); 
2400         for (int i 
= 0; i 
< GraphTraceLen
; i
++) 
2401                 fprintf(f
, "%d\n", GraphBuffer
[i
]); 
2406         PrintAndLog("saved to '%s'", Cmd
); 
2410 int CmdScale(const char *Cmd
) 
2412         CursorScaleFactor 
= atoi(Cmd
); 
2413         if (CursorScaleFactor 
== 0) { 
2414                 PrintAndLog("bad, can't have zero scale"); 
2415                 CursorScaleFactor 
= 1; 
2417         RepaintGraphWindow(); 
2421 int CmdDirectionalThreshold(const char *Cmd
) 
2423         int8_t upThres 
= param_get8(Cmd
, 0); 
2424         int8_t downThres 
= param_get8(Cmd
, 1); 
2426         printf("Applying Up Threshold: %d, Down Threshold: %d\n", upThres
, downThres
); 
2428         int lastValue 
= GraphBuffer
[0]; 
2429         GraphBuffer
[0] = 0; // Will be changed at the end, but init 0 as we adjust to last samples value if no threshold kicks in. 
2431         for (int i 
= 1; i 
< GraphTraceLen
; ++i
) { 
2432                 // Apply first threshold to samples heading up 
2433                 if (GraphBuffer
[i
] >= upThres 
&& GraphBuffer
[i
] > lastValue
) 
2435                         lastValue 
= GraphBuffer
[i
]; // Buffer last value as we overwrite it. 
2438                 // Apply second threshold to samples heading down 
2439                 else if (GraphBuffer
[i
] <= downThres 
&& GraphBuffer
[i
] < lastValue
) 
2441                         lastValue 
= GraphBuffer
[i
]; // Buffer last value as we overwrite it. 
2442                         GraphBuffer
[i
] = -1; 
2446                         lastValue 
= GraphBuffer
[i
]; // Buffer last value as we overwrite it. 
2447                         GraphBuffer
[i
] = GraphBuffer
[i
-1]; 
2450         GraphBuffer
[0] = GraphBuffer
[1]; // Aline with first edited sample. 
2451         RepaintGraphWindow(); 
2455 int CmdZerocrossings(const char *Cmd
) 
2457         // Zero-crossings aren't meaningful unless the signal is zero-mean. 
2464         for (int i 
= 0; i 
< GraphTraceLen
; ++i
) { 
2465                 if (GraphBuffer
[i
] * sign 
>= 0) { 
2466                         // No change in sign, reproduce the previous sample count. 
2468                         GraphBuffer
[i
] = lastZc
; 
2470                         // Change in sign, reset the sample count. 
2472                         GraphBuffer
[i
] = lastZc
; 
2480         RepaintGraphWindow(); 
2485  * @brief Utility for conversion via cmdline. 
2489 int Cmdbin2hex(const char *Cmd
) 
2492         if(param_getptr(Cmd
, &bg
, &en
, 0)) 
2493                 return usage_data_bin2hex(); 
2495         //Number of digits supplied as argument 
2496         size_t length 
= en  
- bg 
+1; 
2497         size_t bytelen 
= (length
+7) / 8; 
2498         uint8_t* arr 
= (uint8_t *) malloc(bytelen
); 
2499         memset(arr
, 0, bytelen
); 
2500         BitstreamOut bout 
= { arr
, 0, 0 }; 
2502         for (; bg 
<= en 
;bg
++) { 
2504                 if( c 
== '1')   pushBit(&bout
, 1); 
2505                 else if( c 
== '0')      pushBit(&bout
, 0); 
2506                 else PrintAndLog("Ignoring '%c'", c
); 
2509         if (bout
.numbits 
% 8 != 0) 
2510                 printf("[padded with %d zeroes]\n", 8-(bout
.numbits 
% 8)); 
2512         //Uses printf instead of PrintAndLog since the latter 
2513         // adds linebreaks to each printout - this way was more convenient since we don't have to 
2514         // allocate a string and write to that first... 
2515         for(size_t x 
= 0; x  
< bytelen 
; x
++) 
2516                 printf("%02X", arr
[x
]); 
2523 int Cmdhex2bin(const char *Cmd
) 
2526         if(param_getptr(Cmd
, &bg
, &en
, 0))  return usage_data_hex2bin(); 
2531                 if (x 
>= 'a' && x 
<= 'f') 
2533                 // convert to numeric value 
2534                 if (x 
>= '0' && x 
<= '9') 
2536                 else if (x 
>= 'A' && x 
<= 'F') 
2541                 //Uses printf instead of PrintAndLog since the latter 
2542                 // adds linebreaks to each printout - this way was more convenient since we don't have to 
2543                 // allocate a string and write to that first... 
2545                 for(int i
= 0 ; i 
< 4 ; ++i
) 
2546                         printf("%d",(x 
>> (3 - i
)) & 1); 
2553 int CmdDataIIR(const char *Cmd
){ 
2554         uint8_t k 
= param_get8(Cmd
,0); 
2555         //iceIIR_Butterworth(GraphBuffer, GraphTraceLen); 
2556         iceSimple_Filter(GraphBuffer
, GraphTraceLen
, k
); 
2557         RepaintGraphWindow(); 
2561 static command_t CommandTable
[] = 
2563         {"help",            CmdHelp
,            1, "This help"}, 
2564         {"askedgedetect",   CmdAskEdgeDetect
,   1, "[threshold] Adjust Graph for manual ASK demod using the length of sample differences to detect the edge of a wave (use 20-45, def:25)"}, 
2565         {"askem410xdemod",  CmdAskEM410xDemod
,  1, "[clock] [invert<0|1>] [maxErr] -- Demodulate an EM410x tag from GraphBuffer (args optional)"}, 
2566         {"askgproxiidemod", CmdG_Prox_II_Demod
, 1, "Demodulate a G Prox II tag from GraphBuffer"}, 
2567         {"askvikingdemod",  CmdVikingDemod
,     1, "Demodulate a Viking AM tag from GraphBuffer"}, 
2568         {"autocorr",        CmdAutoCorr
,        1, "[window length] [g] -- Autocorrelation over window - g to save back to GraphBuffer (overwrite)"}, 
2569         {"biphaserawdecode",CmdBiphaseDecodeRaw
,1, "[offset] [invert<0|1>] [maxErr] -- Biphase decode bin stream in DemodBuffer (offset = 0|1 bits to shift the decode start)"}, 
2570         {"bin2hex",         Cmdbin2hex
,         1, "<digits> -- Converts binary to hexadecimal"}, 
2571         {"bitsamples",      CmdBitsamples
,      0, "Get raw samples as bitstring"}, 
2572         {"buffclear",       CmdBuffClear
,       1, "Clears bigbuff on deviceside. d graph window"}, 
2573         {"dec",             CmdDec
,             1, "Decimate samples"}, 
2574         {"detectclock",     CmdDetectClockRate
, 1, "[<a|f|n|p>] Detect ASK, FSK, NRZ, PSK clock rate of wave in GraphBuffer"}, 
2575         {"fdxbdemod",       CmdFDXBdemodBI    
, 1, "Demodulate a FDX-B ISO11784/85 Biphase tag from GraphBuffer"}, 
2576         {"fskawiddemod",    CmdFSKdemodAWID
,    1, "Demodulate an AWID FSK tag from GraphBuffer"}, 
2577         //{"fskfcdetect",   CmdFSKfcDetect,     1, "Try to detect the Field Clock of an FSK wave"}, 
2578         {"fskhiddemod",     CmdFSKdemodHID
,     1, "Demodulate a HID FSK tag from GraphBuffer"}, 
2579         {"fskiodemod",      CmdFSKdemodIO
,      1, "Demodulate an IO Prox FSK tag from GraphBuffer"}, 
2580         {"fskpyramiddemod", CmdFSKdemodPyramid
, 1, "Demodulate a Pyramid FSK tag from GraphBuffer"}, 
2581         {"fskparadoxdemod", CmdFSKdemodParadox
, 1, "Demodulate a Paradox FSK tag from GraphBuffer"}, 
2582         {"getbitstream",    CmdGetBitStream
,    1, "Convert GraphBuffer's >=1 values to 1 and <1 to 0"}, 
2583         {"grid",            CmdGrid
,            1, "<x> <y> -- overlay grid on graph window, use zero value to turn off either"}, 
2584         {"hexsamples",      CmdHexsamples
,      0, "<bytes> [<offset>] -- Dump big buffer as hex bytes"}, 
2585         {"hex2bin",         Cmdhex2bin
,         1, "<hexadecimal> -- Converts hexadecimal to binary"}, 
2586         {"hide",            CmdHide
,            1, "Hide graph window"}, 
2587         {"hpf",             CmdHpf
,             1, "Remove DC offset from trace"}, 
2588         {"load",            CmdLoad
,            1, "<filename> -- Load trace (to graph window"}, 
2589         {"ltrim",           CmdLtrim
,           1, "<samples> -- Trim samples from left of trace"}, 
2590         {"rtrim",           CmdRtrim
,           1, "<location to end trace> -- Trim samples from right of trace"}, 
2591         {"manrawdecode",    Cmdmandecoderaw
,    1, "[invert] [maxErr] -- Manchester decode binary stream in DemodBuffer"}, 
2592         {"norm",            CmdNorm
,            1, "Normalize max/min to +/-128"}, 
2593         {"plot",            CmdPlot
,            1, "Show graph window (hit 'h' in window for keystroke help)"}, 
2594         {"printdemodbuffer",CmdPrintDemodBuff
,  1, "[x] [o] <offset> [l] <length> -- print the data in the DemodBuffer - 'x' for hex output"}, 
2595         {"pskindalademod",  CmdIndalaDecode
,    1, "[clock] [invert<0|1>] -- Demodulate an indala tag (PSK1) from GraphBuffer (args optional)"}, 
2596         {"psknexwatchdemod",CmdPSKNexWatch
,     1, "Demodulate a NexWatch tag (nexkey, quadrakey) (PSK1) from GraphBuffer"}, 
2597         {"rawdemod",        CmdRawDemod
,        1, "[modulation] ... <options> -see help (h option) -- Demodulate the data in the GraphBuffer and output binary"},   
2598         {"samples",         CmdSamples
,         0, "[512 - 40000] -- Get raw samples for graph window (GraphBuffer)"}, 
2599         {"save",            CmdSave
,            1, "<filename> -- Save trace (from graph window)"}, 
2600         {"scale",           CmdScale
,           1, "<int> -- Set cursor display scale"}, 
2601         {"setdebugmode",    CmdSetDebugMode
,    1, "<0|1|2> -- Turn on or off Debugging Level for lf demods"}, 
2602         {"shiftgraphzero",  CmdGraphShiftZero
,  1, "<shift> -- Shift 0 for Graphed wave + or - shift value"}, 
2603         {"dirthreshold",    CmdDirectionalThreshold
,   1, "<thres up> <thres down> -- Max rising higher up-thres/ Min falling lower down-thres, keep rest as prev."}, 
2604         {"tune",            CmdTuneSamples
,     0, "Get hw tune samples for graph window"}, 
2605         {"undec",           CmdUndec
,           1, "Un-decimate samples by 2"}, 
2606         {"zerocrossings",   CmdZerocrossings
,   1, "Count time between zero-crossings"}, 
2607         {"iir",                         CmdDataIIR
,                     0, "apply IIR buttersworth filter on plotdata"}, 
2608         {NULL
, NULL
, 0, NULL
} 
2611 int CmdData(const char *Cmd
){ 
2612         clearCommandBuffer(); 
2613         CmdsParse(CommandTable
, Cmd
); 
2617 int CmdHelp(const char *Cmd
) 
2619         CmdsHelp(CommandTable
);