1 //----------------------------------------------------------------------------- 
   2 // Copyright (C) 2010 iZsh <izsh at fail0verflow.com> 
   4 // This code is licensed to you under the terms of the GNU GPL, version 2 or, 
   5 // at your option, any later version. See the LICENSE.txt file for the text of 
   7 //----------------------------------------------------------------------------- 
   8 // Data and Graph commands 
   9 //----------------------------------------------------------------------------- 
  15 #include "proxmark3.h" 
  19 #include "cmdparser.h" 
  24 uint8_t DemodBuffer
[MAX_DEMOD_BUF_LEN
]; 
  26 static int CmdHelp(const char *Cmd
); 
  28 //set the demod buffer with given array of binary (one bit per byte) 
  30 void setDemodBuf(uint8_t *buff
,int size
) 
  33         for (; i 
< size
; ++i
){ 
  34                 DemodBuffer
[i
]=buff
[i
]; 
  44         int bitLen 
= DemodBufferLen
; 
  46                 PrintAndLog("no bits found in demod buffer"); 
  49         if (bitLen
>512) bitLen
=512; //max output to 512 bits if we have more - should be plenty 
  50         for (i 
= 0; i 
<= (bitLen
-16); i
+=16) { 
  51                 PrintAndLog("%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i", 
  73 int CmdAmp(const char *Cmd
) 
  75   int i
, rising
, falling
; 
  76   int max 
= INT_MIN
, min 
= INT_MAX
; 
  78   for (i 
= 10; i 
< GraphTraceLen
; ++i
) { 
  79     if (GraphBuffer
[i
] > max
) 
  81     if (GraphBuffer
[i
] < min
) 
  87     for (i 
= 0; i 
< GraphTraceLen
; ++i
) { 
  88       if (GraphBuffer
[i 
+ 1] < GraphBuffer
[i
]) { 
  95       if (GraphBuffer
[i 
+ 1] > GraphBuffer
[i
]) { 
 104   RepaintGraphWindow(); 
 109  * Generic command to demodulate ASK. 
 111  * Argument is convention: positive or negative (High mod means zero 
 112  * or high mod means one) 
 114  * Updates the Graph trace with 0/1 values 
 119  //this method is dependant on all highs and lows to be the same(or clipped)  this creates issues[marshmellow] it also ignores the clock 
 120 int Cmdaskdemod(const char *Cmd
) 
 123   int c
, high 
= 0, low 
= 0; 
 125   // TODO: complain if we do not give 2 arguments here ! 
 126   // (AL - this doesn't make sense! we're only using one argument!!!) 
 127   sscanf(Cmd
, "%i", &c
); 
 129   /* Detect high and lows and clock */ 
 131   for (i 
= 0; i 
< GraphTraceLen
; ++i
) 
 133     if (GraphBuffer
[i
] > high
) 
 134       high 
= GraphBuffer
[i
]; 
 135     else if (GraphBuffer
[i
] < low
) 
 136       low 
= GraphBuffer
[i
]; 
 140   if (c 
!= 0 && c 
!= 1) { 
 141     PrintAndLog("Invalid argument: %s", Cmd
); 
 145   if (GraphBuffer
[0] > 0) { 
 146     GraphBuffer
[0] = 1-c
; 
 150   for (i 
= 1; i 
< GraphTraceLen
; ++i
) { 
 151     /* Transitions are detected at each peak 
 152      * Transitions are either: 
 153      * - we're low: transition if we hit a high 
 154      * - we're high: transition if we hit a low 
 155      * (we need to do it this way because some tags keep high or 
 156      * low for long periods, others just reach the peak and go 
 159     //[marhsmellow] change == to >= for high and <= for low for fuzz 
 160     if ((GraphBuffer
[i
] == high
) && (GraphBuffer
[i 
- 1] == c
)) { 
 161       GraphBuffer
[i
] = 1 - c
; 
 162     } else if ((GraphBuffer
[i
] == low
) && (GraphBuffer
[i 
- 1] == (1 - c
))){ 
 166       GraphBuffer
[i
] = GraphBuffer
[i 
- 1]; 
 169   RepaintGraphWindow(); 
 174 void printBitStream(uint8_t BitStream
[], uint32_t bitLen
) 
 178     PrintAndLog("Too few bits found: %d",bitLen
); 
 181   if (bitLen
>512) bitLen
=512; 
 182    for (i 
= 0; i 
<= (bitLen
-16); i
+=16) { 
 183     PrintAndLog("%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i", 
 204 //print EM410x ID in multiple formats 
 205 void printEM410x(uint64_t id
) 
 209       uint64_t id2lo
=0; //id2hi=0, 
 212       for (ii
=5; ii
>0;ii
--){ 
 214                                         id2lo
=(id2lo
<<1LL) | ((id 
& (iii 
<< (i
+((ii
-1)*8)))) >> (i
+((ii
-1)*8))); 
 218       PrintAndLog("EM TAG ID    : %010llx", id
); 
 219       PrintAndLog("Unique TAG ID: %010llx",  id2lo
); //id2hi, 
 220       PrintAndLog("DEZ 8        : %08lld",id 
& 0xFFFFFF); 
 221       PrintAndLog("DEZ 10       : %010lld",id 
& 0xFFFFFF); 
 222       PrintAndLog("DEZ 5.5      : %05lld.%05lld",(id
>>16LL) & 0xFFFF,(id 
& 0xFFFF)); 
 223       PrintAndLog("DEZ 3.5A     : %03lld.%05lld",(id
>>32ll),(id 
& 0xFFFF)); 
 224       PrintAndLog("DEZ 14/IK2   : %014lld",id
); 
 225       PrintAndLog("DEZ 15/IK3   : %015lld",id2lo
); 
 226       PrintAndLog("Other        : %05lld_%03lld_%08lld",(id
&0xFFFF),((id
>>16LL) & 0xFF),(id 
& 0xFFFFFF)); 
 232 //take binary from demod buffer and see if we can find an EM410x ID 
 233 int CmdEm410xDecode(const char *Cmd
) 
 236  // uint8_t BitStream[MAX_GRAPH_TRACE_LEN]={0}; 
 238  // i=getFromGraphBuf(BitStream); 
 239         id 
= Em410xDecode(DemodBuffer
,DemodBufferLen
); 
 247 //takes 2 arguments - clock and invert both as integers 
 248 //attempts to demodulate ask while decoding manchester 
 249 //prints binary found and saves in graphbuffer for further commands 
 250 int Cmdaskmandemod(const char *Cmd
) 
 254   uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
 255         sscanf(Cmd
, "%i %i", &clk
, &invert
); 
 256   if (invert 
!= 0 && invert 
!= 1) { 
 257     PrintAndLog("Invalid argument: %s", Cmd
); 
 261         size_t BitLen 
= getFromGraphBuf(BitStream
); 
 262   //  PrintAndLog("DEBUG: Bitlen from grphbuff: %d",BitLen); 
 264    errCnt 
= askmandemod(BitStream
, &BitLen
,&clk
,&invert
); 
 265         if (errCnt
<0||BitLen
<16){  //if fatal error (or -1) 
 266                 // PrintAndLog("no data found %d, errors:%d, bitlen:%d, clock:%d",errCnt,invert,BitLen,clk); 
 269   PrintAndLog("\nUsing Clock: %d - Invert: %d - Bits Found: %d",clk
,invert
,BitLen
); 
 273     PrintAndLog("# Errors during Demoding (shown as 77 in bit stream): %d",errCnt
); 
 275   PrintAndLog("ASK/Manchester decoded bitstream:"); 
 276   // Now output the bitstream to the scrollback by line of 16 bits 
 277         setDemodBuf(BitStream
,BitLen
); 
 280   lo 
= Em410xDecode(BitStream
,BitLen
); 
 282     //set GraphBuffer for clone or sim command 
 283     PrintAndLog("EM410x pattern found: "); 
 287   //if (BitLen>16) return 1; 
 293 //stricktly take 10 and 01 and convert to 0 and 1 
 294 int Cmdmandecoderaw(const char *Cmd
) 
 299   uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
 301         for (;i
<DemodBufferLen
;++i
){ 
 302                 if (DemodBuffer
[i
]>high
) high
=DemodBuffer
[i
]; 
 303                 else if(DemodBuffer
[i
]<low
) low
=DemodBuffer
[i
]; 
 304                 BitStream
[i
]=DemodBuffer
[i
]; 
 306   if (high
>1 || low 
<0 ){ 
 307     PrintAndLog("Error: please raw demod the wave first then mancheseter raw decode"); 
 311         errCnt
=manrawdecode(BitStream
, &size
); 
 313     PrintAndLog("Too many errors: %d",errCnt
); 
 316   PrintAndLog("Manchester Decoded - # errors:%d - data:",errCnt
); 
 317         printBitStream(BitStream
, size
); 
 320                 id 
= Em410xDecode(BitStream
, size
); 
 321                 if (id
>0) setDemodBuf(BitStream
, size
); 
 329 //take 01 or 10 = 0 and 11 or 00 = 1 
 330 //takes 1 argument "offset" default = 0 if 1 it will shift the decode by one bit 
 331 //  since it is not like manchester and doesn't have an incorrect bit pattern we 
 332 //  cannot determine if our decode is correct or if it should be shifted by one bit 
 333 //  the argument offset allows us to manually shift if the output is incorrect 
 334 //  (better would be to demod and decode at the same time so we can distinguish large 
 335 //    width waves vs small width waves to help the decode positioning) or askbiphdemod 
 336 int CmdBiphaseDecodeRaw(const char *Cmd
) 
 343         sscanf(Cmd
, "%i", &offset
); 
 344   uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
 345   //get graphbuffer & high and low 
 346         for (;i
<DemodBufferLen
;++i
){ 
 347                 if(DemodBuffer
[i
]>high
)high
=DemodBuffer
[i
]; 
 348                 else if(DemodBuffer
[i
]<low
)low
=DemodBuffer
[i
]; 
 349                 BitStream
[i
]=DemodBuffer
[i
]; 
 351   if (high
>1 || low 
<0){ 
 352     PrintAndLog("Error: please raw demod the wave first then decode"); 
 356         errCnt
=BiphaseRawDecode(BitStream
, &size
, offset
); 
 358     PrintAndLog("Too many errors attempting to decode: %d",errCnt
); 
 361   PrintAndLog("Biphase Decoded using offset: %d - # errors:%d - data:",offset
,errCnt
); 
 362         printBitStream(BitStream
, size
); 
 363   PrintAndLog("\nif bitstream does not look right try offset=1"); 
 369 //takes 2 arguments - clock and invert both as integers 
 370 //attempts to demodulate ask only 
 371 //prints binary found and saves in graphbuffer for further commands 
 372 int Cmdaskrawdemod(const char *Cmd
) 
 376   uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
 377         sscanf(Cmd
, "%i %i", &clk
, &invert
); 
 378   if (invert 
!= 0 && invert 
!= 1) { 
 379     PrintAndLog("Invalid argument: %s", Cmd
); 
 382         size_t BitLen 
= getFromGraphBuf(BitStream
); 
 384         errCnt 
= askrawdemod(BitStream
, &BitLen
,&clk
,&invert
); 
 385         if (errCnt
==-1||BitLen
<16){  //throw away static - allow 1 and -1 (in case of threshold command first) 
 386                 PrintAndLog("no data found"); 
 389   PrintAndLog("Using Clock: %d - invert: %d - Bits Found: %d",clk
,invert
,BitLen
); 
 390     //PrintAndLog("Data start pos:%d, lastBit:%d, stop pos:%d, numBits:%d",iii,lastBit,i,bitnum); 
 391                 //move BitStream back to DemodBuffer 
 392         setDemodBuf(BitStream
,BitLen
); 
 396     PrintAndLog("# Errors during Demoding (shown as 77 in bit stream): %d",errCnt
); 
 398   PrintAndLog("ASK demoded bitstream:"); 
 399   // Now output the bitstream to the scrollback by line of 16 bits 
 400   printBitStream(BitStream
,BitLen
); 
 405 int CmdAutoCorr(const char *Cmd
) 
 407   static int CorrelBuffer
[MAX_GRAPH_TRACE_LEN
]; 
 409   int window 
= atoi(Cmd
); 
 412     PrintAndLog("needs a window"); 
 415   if (window 
>= GraphTraceLen
) { 
 416     PrintAndLog("window must be smaller than trace (%d samples)", 
 421   PrintAndLog("performing %d correlations", GraphTraceLen 
- window
); 
 423   for (int i 
= 0; i 
< GraphTraceLen 
- window
; ++i
) { 
 425     for (int j 
= 0; j 
< window
; ++j
) { 
 426       sum 
+= (GraphBuffer
[j
]*GraphBuffer
[i 
+ j
]) / 256; 
 428     CorrelBuffer
[i
] = sum
; 
 430   GraphTraceLen 
= GraphTraceLen 
- window
; 
 431   memcpy(GraphBuffer
, CorrelBuffer
, GraphTraceLen 
* sizeof (int)); 
 433   RepaintGraphWindow(); 
 437 int CmdBitsamples(const char *Cmd
) 
 442   GetFromBigBuf(got
,sizeof(got
),0); 
 443   WaitForResponse(CMD_ACK
,NULL
); 
 445     for (int j 
= 0; j 
< sizeof(got
); j
++) { 
 446       for (int k 
= 0; k 
< 8; k
++) { 
 447         if(got
[j
] & (1 << (7 - k
))) { 
 448           GraphBuffer
[cnt
++] = 1; 
 450           GraphBuffer
[cnt
++] = 0; 
 455   RepaintGraphWindow(); 
 460  * Convert to a bitstream 
 462 int CmdBitstream(const char *Cmd
) 
 470   int hithigh
, hitlow
, first
; 
 472   /* Detect high and lows and clock */ 
 473   for (i 
= 0; i 
< GraphTraceLen
; ++i
) 
 475     if (GraphBuffer
[i
] > high
) 
 476       high 
= GraphBuffer
[i
]; 
 477     else if (GraphBuffer
[i
] < low
) 
 478       low 
= GraphBuffer
[i
]; 
 482   clock 
= GetClock(Cmd
, high
, 1); 
 486   for (i 
= 0; i 
< (int)(gtl 
/ clock
); ++i
) 
 491     /* Find out if we hit both high and low peaks */ 
 492     for (j 
= 0; j 
< clock
; ++j
) 
 494       if (GraphBuffer
[(i 
* clock
) + j
] == high
) 
 496       else if (GraphBuffer
[(i 
* clock
) + j
] == low
) 
 498       /* it doesn't count if it's the first part of our read 
 499          because it's really just trailing from the last sequence */ 
 500       if (first 
&& (hithigh 
|| hitlow
)) 
 501         hithigh 
= hitlow 
= 0; 
 505       if (hithigh 
&& hitlow
) 
 509     /* If we didn't hit both high and low peaks, we had a bit transition */ 
 510     if (!hithigh 
|| !hitlow
) 
 513     AppendGraph(0, clock
, bit
); 
 514         //    for (j = 0; j < (int)(clock/2); j++) 
 515         //      GraphBuffer[(i * clock) + j] = bit ^ 1; 
 516         //    for (j = (int)(clock/2); j < clock; j++) 
 517         //      GraphBuffer[(i * clock) + j] = bit; 
 520   RepaintGraphWindow(); 
 524 int CmdBuffClear(const char *Cmd
) 
 526   UsbCommand c 
= {CMD_BUFF_CLEAR
}; 
 532 int CmdDec(const char *Cmd
) 
 534   for (int i 
= 0; i 
< (GraphTraceLen 
/ 2); ++i
) 
 535     GraphBuffer
[i
] = GraphBuffer
[i 
* 2]; 
 537   PrintAndLog("decimated by 2"); 
 538   RepaintGraphWindow(); 
 542 /* Print our clock rate */ 
 543 // uses data from graphbuffer 
 544 int CmdDetectClockRate(const char *Cmd
) 
 547         //int clock = DetectASKClock(0); 
 548         //PrintAndLog("Auto-detected clock rate: %d", clock); 
 553 //fsk raw demod and print binary 
 554 //takes 4 arguments - Clock, invert, rchigh, rclow 
 555 //defaults: clock = 50, invert=0, rchigh=10, rclow=8 (RF/10 RF/8 (fsk2a)) 
 556 int CmdFSKrawdemod(const char *Cmd
) 
 558   //raw fsk demod  no manchester decoding no start bit finding just get binary from wave 
 564   //set options from parameters entered with the command 
 565         sscanf(Cmd
, "%i %i %i %i", &rfLen
, &invert
, &fchigh
, &fclow
); 
 567   if (strlen(Cmd
)>0 && strlen(Cmd
)<=2) { 
 568      //rfLen=param_get8(Cmd, 0); //if rfLen option only is used 
 570       invert
=1;   //if invert option only is used 
 572      } else if(rfLen
==0) rfLen
=50; 
 574   PrintAndLog("Args invert: %d - Clock:%d - fchigh:%d - fclow: %d",invert
,rfLen
,fchigh
, fclow
); 
 575   uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
 576         size_t BitLen 
= getFromGraphBuf(BitStream
); 
 577         int size  
= fskdemod(BitStream
,BitLen
,(uint8_t)rfLen
,(uint8_t)invert
,(uint8_t)fchigh
,(uint8_t)fclow
); 
 579     PrintAndLog("FSK decoded bitstream:"); 
 580                 setDemodBuf(BitStream
,size
); 
 582     // Now output the bitstream to the scrollback by line of 16 bits 
 583     if(size 
> (8*32)+2) size 
= (8*32)+2; //only output a max of 8 blocks of 32 bits  most tags will have full bit stream inside that sample size 
 584     printBitStream(BitStream
,size
); 
 586     PrintAndLog("no FSK data found"); 
 591 //by marshmellow (based on existing demod + holiman's refactor) 
 592 //HID Prox demod - FSK RF/50 with preamble of 00011101 (then manchester encoded) 
 593 //print full HID Prox ID and some bit format details if found 
 594 int CmdFSKdemodHID(const char *Cmd
) 
 596   //raw fsk demod no manchester decoding no start bit finding just get binary from wave 
 597   uint32_t hi2
=0, hi
=0, lo
=0; 
 599   uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
 600         size_t BitLen 
= getFromGraphBuf(BitStream
); 
 601   //get binary from fsk wave 
 602         size_t size  
= HIDdemodFSK(BitStream
,BitLen
,&hi2
,&hi
,&lo
); 
 604     PrintAndLog("Error demoding fsk"); 
 607   if (hi2
==0 && hi
==0 && lo
==0) return 0; 
 608   if (hi2 
!= 0){ //extra large HID tags 
 609                 PrintAndLog("HID Prox TAG ID: %x%08x%08x (%d)", 
 610        (unsigned int) hi2
, (unsigned int) hi
, (unsigned int) lo
, (unsigned int) (lo
>>1) & 0xFFFF); 
 611                 setDemodBuf(BitStream
,BitLen
); 
 614   else {  //standard HID tags <38 bits 
 615     //Dbprintf("TAG ID: %x%08x (%d)",(unsigned int) hi, (unsigned int) lo, (unsigned int) (lo>>1) & 0xFFFF); //old print cmd 
 618     uint32_t cardnum 
= 0; 
 619     if (((hi
>>5)&1)==1){//if bit 38 is set then < 37 bit format is used 
 621       lo2
=(((hi 
& 31) << 12) | (lo
>>20)); //get bits 21-37 to check for format len bit 
 623       while(lo2
>1){ //find last bit set to 1 (format len bit) 
 631         cardnum 
= (lo
>>1)&0xFFFF; 
 635         cardnum 
= (lo
>>1)&0xFFFF; 
 636         fc
= ((hi
&1)<<15)|(lo
>>17); 
 639         cardnum 
= (lo
>>1)&0xFFFFF; 
 640         fc 
= ((hi
&1)<<11)|(lo
>>21); 
 643     else { //if bit 38 is not set then 37 bit format is used 
 648         cardnum 
= (lo
>>1)&0x7FFFF; 
 649         fc 
= ((hi
&0xF)<<12)|(lo
>>20); 
 652                 PrintAndLog("HID Prox TAG ID: %x%08x (%d) - Format Len: %dbit - FC: %d - Card: %d", 
 653       (unsigned int) hi
, (unsigned int) lo
, (unsigned int) (lo
>>1) & 0xFFFF, 
 654       (unsigned int) fmtLen
, (unsigned int) fc
, (unsigned int) cardnum
); 
 655                 setDemodBuf(BitStream
,BitLen
); 
 662 //IO-Prox demod - FSK RF/64 with preamble of 000000001 
 663 //print ioprox ID and some format details 
 664 int CmdFSKdemodIO(const char *Cmd
) 
 666   //raw fsk demod no manchester decoding no start bit finding just get binary from wave 
 669   //something in graphbuffer 
 670   if (GraphTraceLen 
< 65) return 0; 
 671   uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
 672         size_t BitLen 
= getFromGraphBuf(BitStream
); 
 673   //get binary from fsk wave 
 674  // PrintAndLog("DEBUG: got buff"); 
 675         idx 
= IOdemodFSK(BitStream
,BitLen
); 
 677     //PrintAndLog("Error demoding fsk"); 
 680  // PrintAndLog("DEBUG: Got IOdemodFSK"); 
 682     //PrintAndLog("IO Prox Data not found - FSK Data:"); 
 683     //if (BitLen > 92) printBitStream(BitStream,92); 
 687     //0           10          20          30          40          50          60 
 689     //01234567 8 90123456 7 89012345 6 78901234 5 67890123 4 56789012 3 45678901 23 
 690     //----------------------------------------------------------------------------- 
 691     //00000000 0 11110000 1 facility 1 version* 1 code*one 1 code*two 1 ???????? 11 
 693     //XSF(version)facility:codeone+codetwo (raw) 
 695   if (idx
+64>BitLen
) return 0; 
 696   PrintAndLog("%d%d%d%d%d%d%d%d %d",BitStream
[idx
],    BitStream
[idx
+1],  BitStream
[idx
+2], BitStream
[idx
+3], BitStream
[idx
+4], BitStream
[idx
+5], BitStream
[idx
+6], BitStream
[idx
+7], BitStream
[idx
+8]); 
 697         PrintAndLog("%d%d%d%d%d%d%d%d %d",BitStream
[idx
+9],  BitStream
[idx
+10], BitStream
[idx
+11],BitStream
[idx
+12],BitStream
[idx
+13],BitStream
[idx
+14],BitStream
[idx
+15],BitStream
[idx
+16],BitStream
[idx
+17]); 
 698   PrintAndLog("%d%d%d%d%d%d%d%d %d facility",BitStream
[idx
+18], BitStream
[idx
+19], BitStream
[idx
+20],BitStream
[idx
+21],BitStream
[idx
+22],BitStream
[idx
+23],BitStream
[idx
+24],BitStream
[idx
+25],BitStream
[idx
+26]); 
 699   PrintAndLog("%d%d%d%d%d%d%d%d %d version",BitStream
[idx
+27], BitStream
[idx
+28], BitStream
[idx
+29],BitStream
[idx
+30],BitStream
[idx
+31],BitStream
[idx
+32],BitStream
[idx
+33],BitStream
[idx
+34],BitStream
[idx
+35]); 
 700   PrintAndLog("%d%d%d%d%d%d%d%d %d code1",BitStream
[idx
+36], BitStream
[idx
+37], BitStream
[idx
+38],BitStream
[idx
+39],BitStream
[idx
+40],BitStream
[idx
+41],BitStream
[idx
+42],BitStream
[idx
+43],BitStream
[idx
+44]); 
 701   PrintAndLog("%d%d%d%d%d%d%d%d %d code2",BitStream
[idx
+45], BitStream
[idx
+46], BitStream
[idx
+47],BitStream
[idx
+48],BitStream
[idx
+49],BitStream
[idx
+50],BitStream
[idx
+51],BitStream
[idx
+52],BitStream
[idx
+53]); 
 702   PrintAndLog("%d%d%d%d%d%d%d%d %d%d checksum",BitStream
[idx
+54],BitStream
[idx
+55],BitStream
[idx
+56],BitStream
[idx
+57],BitStream
[idx
+58],BitStream
[idx
+59],BitStream
[idx
+60],BitStream
[idx
+61],BitStream
[idx
+62],BitStream
[idx
+63]); 
 704   uint32_t code 
= bytebits_to_byte(BitStream
+idx
,32); 
 705         uint32_t code2 
= bytebits_to_byte(BitStream
+idx
+32,32); 
 706   uint8_t version 
= bytebits_to_byte(BitStream
+idx
+27,8); //14,4 
 707   uint8_t facilitycode 
= bytebits_to_byte(BitStream
+idx
+18,8) ; 
 708   uint16_t number 
= (bytebits_to_byte(BitStream
+idx
+36,8)<<8)|(bytebits_to_byte(BitStream
+idx
+45,8)); //36,9 
 709         PrintAndLog("IO Prox XSF(%02d)%02x:%05d (%08x%08x)",version
,facilitycode
,number
,code
,code2
); 
 712                 DemodBuffer
[i
]=BitStream
[idx
++]; 
 717 int CmdFSKdemod(const char *Cmd
) //old CmdFSKdemod needs updating 
 719   static const int LowTone
[]  = { 
 720     1,  1,  1,  1,  1, -1, -1, -1, -1, -1, 
 721     1,  1,  1,  1,  1, -1, -1, -1, -1, -1, 
 722     1,  1,  1,  1,  1, -1, -1, -1, -1, -1, 
 723     1,  1,  1,  1,  1, -1, -1, -1, -1, -1, 
 724     1,  1,  1,  1,  1, -1, -1, -1, -1, -1 
 726   static const int HighTone
[] = { 
 727     1,  1,  1,  1,  1,     -1, -1, -1, -1, 
 728     1,  1,  1,  1,         -1, -1, -1, -1, 
 729     1,  1,  1,  1,         -1, -1, -1, -1, 
 730     1,  1,  1,  1,         -1, -1, -1, -1, 
 731     1,  1,  1,  1,         -1, -1, -1, -1, 
 732     1,  1,  1,  1,     -1, -1, -1, -1, -1, 
 735   int lowLen 
= sizeof (LowTone
) / sizeof (int); 
 736   int highLen 
= sizeof (HighTone
) / sizeof (int); 
 737   int convLen 
= (highLen 
> lowLen
) ? highLen 
: lowLen
; 
 738   uint32_t hi 
= 0, lo 
= 0; 
 741   int minMark 
= 0, maxMark 
= 0; 
 743   for (i 
= 0; i 
< GraphTraceLen 
- convLen
; ++i
) { 
 744     int lowSum 
= 0, highSum 
= 0; 
 746     for (j 
= 0; j 
< lowLen
; ++j
) { 
 747       lowSum 
+= LowTone
[j
]*GraphBuffer
[i
+j
]; 
 749     for (j 
= 0; j 
< highLen
; ++j
) { 
 750       highSum 
+= HighTone
[j
] * GraphBuffer
[i 
+ j
]; 
 752     lowSum 
= abs(100 * lowSum 
/ lowLen
); 
 753     highSum 
= abs(100 * highSum 
/ highLen
); 
 754     GraphBuffer
[i
] = (highSum 
<< 16) | lowSum
; 
 757   for(i 
= 0; i 
< GraphTraceLen 
- convLen 
- 16; ++i
) { 
 758     int lowTot 
= 0, highTot 
= 0; 
 759     // 10 and 8 are f_s divided by f_l and f_h, rounded 
 760     for (j 
= 0; j 
< 10; ++j
) { 
 761       lowTot 
+= (GraphBuffer
[i
+j
] & 0xffff); 
 763     for (j 
= 0; j 
< 8; j
++) { 
 764       highTot 
+= (GraphBuffer
[i 
+ j
] >> 16); 
 766     GraphBuffer
[i
] = lowTot 
- highTot
; 
 767     if (GraphBuffer
[i
] > maxMark
) maxMark 
= GraphBuffer
[i
]; 
 768     if (GraphBuffer
[i
] < minMark
) minMark 
= GraphBuffer
[i
]; 
 771   GraphTraceLen 
-= (convLen 
+ 16); 
 772   RepaintGraphWindow(); 
 774   // Find bit-sync (3 lo followed by 3 high) (HID ONLY) 
 775   int max 
= 0, maxPos 
= 0; 
 776   for (i 
= 0; i 
< 6000; ++i
) { 
 778     for (j 
= 0; j 
< 3 * lowLen
; ++j
) { 
 779       dec 
-= GraphBuffer
[i 
+ j
]; 
 781     for (; j 
< 3 * (lowLen 
+ highLen 
); ++j
) { 
 782       dec 
+= GraphBuffer
[i 
+ j
]; 
 790   // place start of bit sync marker in graph 
 791   GraphBuffer
[maxPos
] = maxMark
; 
 792   GraphBuffer
[maxPos 
+ 1] = minMark
; 
 796   // place end of bit sync marker in graph 
 797   GraphBuffer
[maxPos
] = maxMark
; 
 798   GraphBuffer
[maxPos
+1] = minMark
; 
 800   PrintAndLog("actual data bits start at sample %d", maxPos
); 
 801   PrintAndLog("length %d/%d", highLen
, lowLen
); 
 804         bits
[sizeof(bits
)-1] = '\0'; 
 806   // find bit pairs and manchester decode them 
 807   for (i 
= 0; i 
< arraylen(bits
) - 1; ++i
) { 
 809     for (j 
= 0; j 
< lowLen
; ++j
) { 
 810       dec 
-= GraphBuffer
[maxPos 
+ j
]; 
 812     for (; j 
< lowLen 
+ highLen
; ++j
) { 
 813       dec 
+= GraphBuffer
[maxPos 
+ j
]; 
 816     // place inter bit marker in graph 
 817     GraphBuffer
[maxPos
] = maxMark
; 
 818     GraphBuffer
[maxPos 
+ 1] = minMark
; 
 820     // hi and lo form a 64 bit pair 
 821     hi 
= (hi 
<< 1) | (lo 
>> 31); 
 823     // store decoded bit as binary (in hi/lo) and text (in bits[]) 
 831   PrintAndLog("bits: '%s'", bits
); 
 832   PrintAndLog("hex: %08x %08x", hi
, lo
); 
 836 int CmdDetectNRZpskClockRate(const char *Cmd
) 
 838         GetNRZpskClock("",0,0); 
 842 int PSKnrzDemod(const char *Cmd
){ 
 845         sscanf(Cmd
, "%i %i", &clk
, &invert
); 
 846         if (invert 
!= 0 && invert 
!= 1) { 
 847                 PrintAndLog("Invalid argument: %s", Cmd
); 
 850         uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
 851         size_t BitLen 
= getFromGraphBuf(BitStream
); 
 853         errCnt 
= pskNRZrawDemod(BitStream
, &BitLen
,&clk
,&invert
); 
 854         if (errCnt
<0|| BitLen
<16){  //throw away static - allow 1 and -1 (in case of threshold command first) 
 855                 //PrintAndLog("no data found, clk: %d, invert: %d, numbits: %d, errCnt: %d",clk,invert,BitLen,errCnt); 
 858         PrintAndLog("Tried PSK/NRZ Demod using Clock: %d - invert: %d - Bits Found: %d",clk
,invert
,BitLen
); 
 860         //prime demod buffer for output 
 861         setDemodBuf(BitStream
,BitLen
); 
 864 // Indala 26 bit decode 
 866 // optional arguments - same as CmdpskNRZrawDemod (clock & invert) 
 867 int CmdIndalaDecode(const char *Cmd
) 
 874       ans 
= PSKnrzDemod("32"); 
 876       ans 
= PSKnrzDemod(Cmd
); 
 878   } else{ //default to RF/32 
 879     ans 
= PSKnrzDemod("32"); 
 884       PrintAndLog("Error1: %d",ans
); 
 888         ans 
= indala26decode(DemodBuffer
,(size_t *) &DemodBufferLen
, &invert
); 
 891       PrintAndLog("Error2: %d",ans
); 
 897       PrintAndLog("Had to invert bits"); 
 899         uint32_t uid1
, uid2
, uid3
, uid4
, uid5
, uid6
, uid7
; 
 903         PrintAndLog("BitLen: %d",DemodBufferLen
); 
 904         if (DemodBufferLen
==64){ 
 905                 for( idx
=0; idx
<64; idx
++) { 
 906                         uid1
=(uid1
<<1)|(uid2
>>31); 
 907                         if (DemodBuffer
[idx
] == 0) { 
 916                 PrintAndLog("Indala UID=%s (%x%08x)", showbits
, uid1
, uid2
); 
 924                 for( idx
=0; idx
<DemodBufferLen
; idx
++) { 
 925                         uid1
=(uid1
<<1)|(uid2
>>31); 
 926                         uid2
=(uid2
<<1)|(uid3
>>31); 
 927                         uid3
=(uid3
<<1)|(uid4
>>31); 
 928                         uid4
=(uid4
<<1)|(uid5
>>31); 
 929                         uid5
=(uid5
<<1)|(uid6
>>31); 
 930                         uid6
=(uid6
<<1)|(uid7
>>31); 
 931                         if (DemodBuffer
[idx
] == 0) { 
 941                 PrintAndLog("Indala UID=%s (%x%08x%08x%08x%08x%08x%08x)", showbits
, uid1
, uid2
, uid3
, uid4
, uid5
, uid6
, uid7
); 
 946 int CmdPskClean(const char *Cmd
) 
 948         uint8_t bitStream
[MAX_GRAPH_TRACE_LEN
]={0}; 
 949         size_t bitLen 
= getFromGraphBuf(bitStream
); 
 950         pskCleanWave(bitStream
, bitLen
); 
 951         setGraphBuf(bitStream
, bitLen
); 
 956 //takes 2 arguments - clock and invert both as integers 
 957 //attempts to demodulate ask only 
 958 //prints binary found and saves in graphbuffer for further commands 
 959 int CmdpskNRZrawDemod(const char *Cmd
) 
 968   errCnt 
= PSKnrzDemod(Cmd
); 
 970         if (errCnt
<0) return 0; 
 973       PrintAndLog("# Errors during Demoding (shown as 77 in bit stream): %d",errCnt
); 
 975         PrintAndLog("PSK or NRZ demoded bitstream:"); 
 976         // Now output the bitstream to the scrollback by line of 16 bits 
 982 int CmdGrid(const char *Cmd
) 
 984   sscanf(Cmd
, "%i %i", &PlotGridX
, &PlotGridY
); 
 985   PlotGridXdefault
= PlotGridX
; 
 986   PlotGridYdefault
= PlotGridY
; 
 987   RepaintGraphWindow(); 
 991 int CmdHexsamples(const char *Cmd
) 
 997   char* string_ptr 
= string_buf
; 
1000   sscanf(Cmd
, "%i %i", &requested
, &offset
); 
1002   /* if no args send something */ 
1003   if (requested 
== 0) { 
1006   if (offset 
+ requested 
> sizeof(got
)) { 
1007     PrintAndLog("Tried to read past end of buffer, <bytes> + <offset> > 40000"); 
1011   GetFromBigBuf(got
,requested
,offset
); 
1012   WaitForResponse(CMD_ACK
,NULL
); 
1015   for (j 
= 0; j 
< requested
; j
++) { 
1017     string_ptr 
+= sprintf(string_ptr
, "%02x ", got
[j
]); 
1019       *(string_ptr 
- 1) = '\0';    // remove the trailing space 
1020       PrintAndLog("%s", string_buf
); 
1021       string_buf
[0] = '\0'; 
1022       string_ptr 
= string_buf
; 
1025     if (j 
== requested 
- 1 && string_buf
[0] != '\0') { // print any remaining bytes 
1026       *(string_ptr 
- 1) = '\0'; 
1027       PrintAndLog("%s", string_buf
); 
1028       string_buf
[0] = '\0'; 
1034 int CmdHide(const char *Cmd
) 
1040 int CmdHpf(const char *Cmd
) 
1045   for (i 
= 10; i 
< GraphTraceLen
; ++i
) 
1046     accum 
+= GraphBuffer
[i
]; 
1047   accum 
/= (GraphTraceLen 
- 10); 
1048   for (i 
= 0; i 
< GraphTraceLen
; ++i
) 
1049     GraphBuffer
[i
] -= accum
; 
1051   RepaintGraphWindow(); 
1060 bool _headBit( BitstreamOut 
*stream
) 
1062         int bytepos 
= stream
->position 
>> 3; // divide by 8 
1063         int bitpos 
= (stream
->position
++) & 7; // mask out 00000111 
1064         return (*(stream
->buffer 
+ bytepos
) >> (7-bitpos
)) & 1; 
1067 uint8_t getByte(uint8_t bits_per_sample
, BitstreamOut
* b
) 
1071         for(i 
=0 ; i 
< bits_per_sample
; i
++) 
1073                 val 
|= (_headBit(b
) << (7-i
)); 
1078 int CmdSamples(const char *Cmd
) 
1082         int n 
= strtol(Cmd
, NULL
, 0); 
1086         if (n 
> sizeof(got
)) 
1089         PrintAndLog("Reading %d bytes from device memory\n", n
); 
1090         GetFromBigBuf(got
,n
,0); 
1091         PrintAndLog("Data fetched"); 
1092         UsbCommand response
; 
1093         WaitForResponse(CMD_ACK
, &response
); 
1094         uint8_t bits_per_sample 
= response
.arg
[0]; 
1095         PrintAndLog("Samples packed at %d bits per sample", bits_per_sample
); 
1096         if(bits_per_sample 
< 8) 
1098                 PrintAndLog("Unpacking..."); 
1099                 BitstreamOut bout 
= { got
, bits_per_sample 
* n
,  0}; 
1101                 for (j 
= 0; j 
* bits_per_sample 
< n 
* 8 && j 
< GraphTraceLen
; j
++) { 
1102                         uint8_t sample 
= getByte(bits_per_sample
, &bout
); 
1103                         GraphBuffer
[j
] = ((int) sample 
)- 128; 
1106                 PrintAndLog("Unpacked %d samples" , j 
); 
1109                 for (int j 
= 0; j 
< n
; j
++) { 
1110                         GraphBuffer
[j
] = ((int)got
[j
]) - 128; 
1116         RepaintGraphWindow(); 
1120 int CmdTuneSamples(const char *Cmd
) 
1123         printf("\nMeasuring antenna characteristics, please wait..."); 
1125         UsbCommand c 
= {CMD_MEASURE_ANTENNA_TUNING
}; 
1129         while(!WaitForResponseTimeout(CMD_MEASURED_ANTENNA_TUNING
,&resp
,1000)) { 
1133                         PrintAndLog("\nNo response from Proxmark. Aborting..."); 
1139         int vLf125
, vLf134
, vHf
; 
1140         vLf125 
= resp
.arg
[0] & 0xffff; 
1141         vLf134 
= resp
.arg
[0] >> 16; 
1142         vHf 
= resp
.arg
[1] & 0xffff;; 
1143         peakf 
= resp
.arg
[2] & 0xffff; 
1144         peakv 
= resp
.arg
[2] >> 16; 
1146         PrintAndLog("# LF antenna: %5.2f V @   125.00 kHz", vLf125
/1000.0); 
1147         PrintAndLog("# LF antenna: %5.2f V @   134.00 kHz", vLf134
/1000.0); 
1148         PrintAndLog("# LF optimal: %5.2f V @%9.2f kHz", peakv
/1000.0, 12000.0/(peakf
+1)); 
1149         PrintAndLog("# HF antenna: %5.2f V @    13.56 MHz", vHf
/1000.0); 
1151                 PrintAndLog("# Your LF antenna is unusable."); 
1152         else if (peakv
<10000) 
1153                 PrintAndLog("# Your LF antenna is marginal."); 
1155                 PrintAndLog("# Your HF antenna is unusable."); 
1157                 PrintAndLog("# Your HF antenna is marginal."); 
1159         for (int i 
= 0; i 
< 256; i
++) { 
1160                 GraphBuffer
[i
] = resp
.d
.asBytes
[i
] - 128; 
1163   PrintAndLog("Done! Divisor 89 is 134khz, 95 is 125khz.\n"); 
1165         GraphTraceLen 
= 256; 
1172 int CmdLoad(const char *Cmd
) 
1174    char filename
[FILE_PATH_SIZE
] = {0x00}; 
1178    if (len 
> FILE_PATH_SIZE
) len 
= FILE_PATH_SIZE
; 
1179    memcpy(filename
, Cmd
, len
); 
1181    FILE *f 
= fopen(filename
, "r"); 
1183      PrintAndLog("couldn't open '%s'", filename
); 
1189   while (fgets(line
, sizeof (line
), f
)) { 
1190     GraphBuffer
[GraphTraceLen
] = atoi(line
); 
1194   PrintAndLog("loaded %d samples", GraphTraceLen
); 
1195   RepaintGraphWindow(); 
1199 int CmdLtrim(const char *Cmd
) 
1203   for (int i 
= ds
; i 
< GraphTraceLen
; ++i
) 
1204     GraphBuffer
[i
-ds
] = GraphBuffer
[i
]; 
1205   GraphTraceLen 
-= ds
; 
1207   RepaintGraphWindow(); 
1210 int CmdRtrim(const char *Cmd
) 
1216   RepaintGraphWindow(); 
1221  * Manchester demodulate a bitstream. The bitstream needs to be already in 
1222  * the GraphBuffer as 0 and 1 values 
1224  * Give the clock rate as argument in order to help the sync - the algorithm 
1225  * resyncs at each pulse anyway. 
1227  * Not optimized by any means, this is the 1st time I'm writing this type of 
1228  * routine, feel free to improve... 
1230  * 1st argument: clock rate (as number of samples per clock rate) 
1231  *               Typical values can be 64, 32, 128... 
1233 int CmdManchesterDemod(const char *Cmd
) 
1235   int i
, j
, invert
= 0; 
1241   int hithigh
, hitlow
, first
; 
1247   /* check if we're inverting output */ 
1250     PrintAndLog("Inverting output"); 
1255     while(*Cmd 
== ' '); // in case a 2nd argument was given 
1258   /* Holds the decoded bitstream: each clock period contains 2 bits       */ 
1259   /* later simplified to 1 bit after manchester decoding.                 */ 
1260   /* Add 10 bits to allow for noisy / uncertain traces without aborting   */ 
1261   /* int BitStream[GraphTraceLen*2/clock+10]; */ 
1263   /* But it does not work if compiling on WIndows: therefore we just allocate a */ 
1265   uint8_t BitStream
[MAX_GRAPH_TRACE_LEN
] = {0}; 
1267   /* Detect high and lows */ 
1268   for (i 
= 0; i 
< GraphTraceLen
; i
++) 
1270     if (GraphBuffer
[i
] > high
) 
1271       high 
= GraphBuffer
[i
]; 
1272     else if (GraphBuffer
[i
] < low
) 
1273       low 
= GraphBuffer
[i
]; 
1277   clock 
= GetClock(Cmd
, high
, 1); 
1279   int tolerance 
= clock
/4; 
1281   /* Detect first transition */ 
1282   /* Lo-Hi (arbitrary)       */ 
1283   /* skip to the first high */ 
1284   for (i
= 0; i 
< GraphTraceLen
; i
++) 
1285     if (GraphBuffer
[i
] == high
) 
1287   /* now look for the first low */ 
1288   for (; i 
< GraphTraceLen
; i
++) 
1290     if (GraphBuffer
[i
] == low
) 
1297   /* If we're not working with 1/0s, demod based off clock */ 
1300     bit 
= 0; /* We assume the 1st bit is zero, it may not be 
1301               * the case: this routine (I think) has an init problem. 
1304     for (; i 
< (int)(GraphTraceLen 
/ clock
); i
++) 
1310       /* Find out if we hit both high and low peaks */ 
1311       for (j 
= 0; j 
< clock
; j
++) 
1313         if (GraphBuffer
[(i 
* clock
) + j
] == high
) 
1315         else if (GraphBuffer
[(i 
* clock
) + j
] == low
) 
1318         /* it doesn't count if it's the first part of our read 
1319            because it's really just trailing from the last sequence */ 
1320         if (first 
&& (hithigh 
|| hitlow
)) 
1321           hithigh 
= hitlow 
= 0; 
1325         if (hithigh 
&& hitlow
) 
1329       /* If we didn't hit both high and low peaks, we had a bit transition */ 
1330       if (!hithigh 
|| !hitlow
) 
1333       BitStream
[bit2idx
++] = bit 
^ invert
; 
1337   /* standard 1/0 bitstream */ 
1341     /* Then detect duration between 2 successive transitions */ 
1342     for (bitidx 
= 1; i 
< GraphTraceLen
; i
++) 
1344       if (GraphBuffer
[i
-1] != GraphBuffer
[i
]) 
1349         // Error check: if bitidx becomes too large, we do not 
1350         // have a Manchester encoded bitstream or the clock is really 
1352         if (bitidx 
> (GraphTraceLen
*2/clock
+8) ) { 
1353           PrintAndLog("Error: the clock you gave is probably wrong, aborting."); 
1356         // Then switch depending on lc length: 
1357         // Tolerance is 1/4 of clock rate (arbitrary) 
1358         if (abs(lc
-clock
/2) < tolerance
) { 
1359           // Short pulse : either "1" or "0" 
1360           BitStream
[bitidx
++]=GraphBuffer
[i
-1]; 
1361         } else if (abs(lc
-clock
) < tolerance
) { 
1362           // Long pulse: either "11" or "00" 
1363           BitStream
[bitidx
++]=GraphBuffer
[i
-1]; 
1364           BitStream
[bitidx
++]=GraphBuffer
[i
-1]; 
1368           PrintAndLog("Warning: Manchester decode error for pulse width detection."); 
1369           PrintAndLog("(too many of those messages mean either the stream is not Manchester encoded, or clock is wrong)"); 
1373             PrintAndLog("Error: too many detection errors, aborting."); 
1380     // At this stage, we now have a bitstream of "01" ("1") or "10" ("0"), parse it into final decoded bitstream 
1381     // Actually, we overwrite BitStream with the new decoded bitstream, we just need to be careful 
1382     // to stop output at the final bitidx2 value, not bitidx 
1383     for (i 
= 0; i 
< bitidx
; i 
+= 2) { 
1384       if ((BitStream
[i
] == 0) && (BitStream
[i
+1] == 1)) { 
1385         BitStream
[bit2idx
++] = 1 ^ invert
; 
1386       } else if ((BitStream
[i
] == 1) && (BitStream
[i
+1] == 0)) { 
1387         BitStream
[bit2idx
++] = 0 ^ invert
; 
1389         // We cannot end up in this state, this means we are unsynchronized, 
1393         PrintAndLog("Unsynchronized, resync..."); 
1394         PrintAndLog("(too many of those messages mean the stream is not Manchester encoded)"); 
1398           PrintAndLog("Error: too many decode errors, aborting."); 
1405   PrintAndLog("Manchester decoded bitstream"); 
1406   // Now output the bitstream to the scrollback by line of 16 bits 
1407   for (i 
= 0; i 
< (bit2idx
-16); i
+=16) { 
1408     PrintAndLog("%i %i %i %i %i %i %i %i %i %i %i %i %i %i %i %i", 
1429 /* Modulate our data into manchester */ 
1430 int CmdManchesterMod(const char *Cmd
) 
1434   int bit
, lastbit
, wave
; 
1437   clock 
= GetClock(Cmd
, 0, 1); 
1441   for (i 
= 0; i 
< (int)(GraphTraceLen 
/ clock
); i
++) 
1443     bit 
= GraphBuffer
[i 
* clock
] ^ 1; 
1445     for (j 
= 0; j 
< (int)(clock
/2); j
++) 
1446       GraphBuffer
[(i 
* clock
) + j
] = bit 
^ lastbit 
^ wave
; 
1447     for (j 
= (int)(clock
/2); j 
< clock
; j
++) 
1448       GraphBuffer
[(i 
* clock
) + j
] = bit 
^ lastbit 
^ wave 
^ 1; 
1450     /* Keep track of how we start our wave and if we changed or not this time */ 
1451     wave 
^= bit 
^ lastbit
; 
1455   RepaintGraphWindow(); 
1459 int CmdNorm(const char *Cmd
) 
1462   int max 
= INT_MIN
, min 
= INT_MAX
; 
1464   for (i 
= 10; i 
< GraphTraceLen
; ++i
) { 
1465     if (GraphBuffer
[i
] > max
) 
1466       max 
= GraphBuffer
[i
]; 
1467     if (GraphBuffer
[i
] < min
) 
1468       min 
= GraphBuffer
[i
]; 
1472     for (i 
= 0; i 
< GraphTraceLen
; ++i
) { 
1473                         GraphBuffer
[i
] = (GraphBuffer
[i
] - ((max 
+ min
) / 2)) * 256 / 
1475                                 //marshmelow: adjusted *1000 to *256 to make +/- 128 so demod commands still work 
1478   RepaintGraphWindow(); 
1482 int CmdPlot(const char *Cmd
) 
1488 int CmdSave(const char *Cmd
) 
1490    char filename
[FILE_PATH_SIZE
] = {0x00}; 
1494    if (len 
> FILE_PATH_SIZE
) len 
= FILE_PATH_SIZE
; 
1495    memcpy(filename
, Cmd
, len
); 
1498   FILE *f 
= fopen(filename
, "w"); 
1500     PrintAndLog("couldn't open '%s'", filename
); 
1504   for (i 
= 0; i 
< GraphTraceLen
; i
++) { 
1505     fprintf(f
, "%d\n", GraphBuffer
[i
]); 
1508   PrintAndLog("saved to '%s'", Cmd
); 
1512 int CmdScale(const char *Cmd
) 
1514   CursorScaleFactor 
= atoi(Cmd
); 
1515   if (CursorScaleFactor 
== 0) { 
1516     PrintAndLog("bad, can't have zero scale"); 
1517     CursorScaleFactor 
= 1; 
1519   RepaintGraphWindow(); 
1523 int CmdThreshold(const char *Cmd
) 
1525   int threshold 
= atoi(Cmd
); 
1527   for (int i 
= 0; i 
< GraphTraceLen
; ++i
) { 
1528     if (GraphBuffer
[i
] >= threshold
) 
1531       GraphBuffer
[i
] = -1; 
1533   RepaintGraphWindow(); 
1537 int CmdDirectionalThreshold(const char *Cmd
) 
1539         int8_t upThres 
= param_get8(Cmd
, 0); 
1540         int8_t downThres 
= param_get8(Cmd
, 1); 
1542   printf("Applying Up Threshold: %d, Down Threshold: %d\n", upThres
, downThres
); 
1544   int lastValue 
= GraphBuffer
[0]; 
1545   GraphBuffer
[0] = 0; // Will be changed at the end, but init 0 as we adjust to last samples value if no threshold kicks in. 
1547   for (int i 
= 1; i 
< GraphTraceLen
; ++i
) { 
1548     // Apply first threshold to samples heading up 
1549     if (GraphBuffer
[i
] >= upThres 
&& GraphBuffer
[i
] > lastValue
) 
1551       lastValue 
= GraphBuffer
[i
]; // Buffer last value as we overwrite it. 
1554     // Apply second threshold to samples heading down 
1555     else if (GraphBuffer
[i
] <= downThres 
&& GraphBuffer
[i
] < lastValue
) 
1557       lastValue 
= GraphBuffer
[i
]; // Buffer last value as we overwrite it. 
1558       GraphBuffer
[i
] = -1; 
1562       lastValue 
= GraphBuffer
[i
]; // Buffer last value as we overwrite it. 
1563       GraphBuffer
[i
] = GraphBuffer
[i
-1]; 
1567   GraphBuffer
[0] = GraphBuffer
[1]; // Aline with first edited sample. 
1568   RepaintGraphWindow(); 
1572 int CmdZerocrossings(const char *Cmd
) 
1574   // Zero-crossings aren't meaningful unless the signal is zero-mean. 
1581   for (int i 
= 0; i 
< GraphTraceLen
; ++i
) { 
1582     if (GraphBuffer
[i
] * sign 
>= 0) { 
1583       // No change in sign, reproduce the previous sample count. 
1585       GraphBuffer
[i
] = lastZc
; 
1587       // Change in sign, reset the sample count. 
1589       GraphBuffer
[i
] = lastZc
; 
1597   RepaintGraphWindow(); 
1601 static command_t CommandTable
[] = 
1603   {"help",          CmdHelp
,            1, "This help"}, 
1604   {"amp",           CmdAmp
,             1, "Amplify peaks"}, 
1605   {"askdemod",      Cmdaskdemod
,        1, "<0 or 1> -- Attempt to demodulate simple ASK tags"}, 
1606         {"askmandemod",   Cmdaskmandemod
,     1, "[clock] [invert<0|1>] -- Attempt to demodulate ASK/Manchester tags and output binary (args optional[clock will try Auto-detect])"}, 
1607         {"askrawdemod",   Cmdaskrawdemod
,     1, "[clock] [invert<0|1>] -- Attempt to demodulate ASK tags and output binary (args optional[clock will try Auto-detect])"}, 
1608   {"autocorr",      CmdAutoCorr
,        1, "<window length> -- Autocorrelation over window"}, 
1609   {"biphaserawdecode",CmdBiphaseDecodeRaw
,1,"[offset] Biphase decode binary stream already in graph buffer (offset = bit to start decode from)"}, 
1610   {"bitsamples",    CmdBitsamples
,      0, "Get raw samples as bitstring"}, 
1611   {"bitstream",     CmdBitstream
,       1, "[clock rate] -- Convert waveform into a bitstream"}, 
1612   {"buffclear",     CmdBuffClear
,       1, "Clear sample buffer and graph window"}, 
1613   {"dec",           CmdDec
,             1, "Decimate samples"}, 
1614         {"detectclock",   CmdDetectClockRate
, 1, "Detect ASK clock rate"}, 
1615   {"fskdemod",      CmdFSKdemod
,        1, "Demodulate graph window as a HID FSK"}, 
1616   {"fskhiddemod",   CmdFSKdemodHID
,     1, "Demodulate graph window as a HID FSK using raw"}, 
1617   {"fskiodemod",    CmdFSKdemodIO
,      1, "Demodulate graph window as an IO Prox FSK using raw"}, 
1618         {"fskrawdemod",   CmdFSKrawdemod
,     1, "[clock rate] [invert] [rchigh] [rclow] Demodulate graph window from FSK to binary (clock = 50)(invert = 1|0)(rchigh = 10)(rclow=8)"}, 
1619   {"grid",          CmdGrid
,            1, "<x> <y> -- overlay grid on graph window, use zero value to turn off either"}, 
1620         {"hexsamples",    CmdHexsamples
,      0, "<bytes> [<offset>] -- Dump big buffer as hex bytes"}, 
1621   {"hide",          CmdHide
,            1, "Hide graph window"}, 
1622   {"hpf",           CmdHpf
,             1, "Remove DC offset from trace"}, 
1623   {"load",          CmdLoad
,            1, "<filename> -- Load trace (to graph window"}, 
1624   {"ltrim",         CmdLtrim
,           1, "<samples> -- Trim samples from left of trace"}, 
1625   {"rtrim",         CmdRtrim
,           1, "<location to end trace> -- Trim samples from right of trace"}, 
1626   {"mandemod",      CmdManchesterDemod
, 1, "[i] [clock rate] -- Manchester demodulate binary stream (option 'i' to invert output)"}, 
1627   {"manrawdecode",  Cmdmandecoderaw
,    1, "Manchester decode binary stream already in graph buffer"}, 
1628   {"manmod",        CmdManchesterMod
,   1, "[clock rate] -- Manchester modulate a binary stream"}, 
1629         {"norm",          CmdNorm
,            1, "Normalize max/min to +/-128"}, 
1630   {"plot",          CmdPlot
,            1, "Show graph window (hit 'h' in window for keystroke help)"}, 
1631         {"pskclean",      CmdPskClean
,        1, "Attempt to clean psk wave"}, 
1632         {"pskdetectclock",CmdDetectNRZpskClockRate
, 1, "Detect ASK, PSK, or NRZ clock rate"}, 
1633         {"pskindalademod",CmdIndalaDecode
,    1, "[clock] [invert<0|1>] -- Attempt to demodulate psk indala tags and output ID binary & hex (args optional[clock will try Auto-detect])"}, 
1634         {"psknrzrawdemod",CmdpskNRZrawDemod
,  1, "[clock] [invert<0|1>] -- Attempt to demodulate psk or nrz tags and output binary (args optional[clock will try Auto-detect])"}, 
1635   {"samples",       CmdSamples
,         0, "[512 - 40000] -- Get raw samples for graph window"}, 
1636   {"save",          CmdSave
,            1, "<filename> -- Save trace (from graph window)"}, 
1637   {"scale",         CmdScale
,           1, "<int> -- Set cursor display scale"}, 
1638   {"threshold",     CmdThreshold
,       1, "<threshold> -- Maximize/minimize every value in the graph window depending on threshold"}, 
1639         {"dirthreshold",  CmdDirectionalThreshold
,   1, "<thres up> <thres down> -- Max rising higher up-thres/ Min falling lower down-thres, keep rest as prev."}, 
1640         {"tune",          CmdTuneSamples
,     0, "Get hw tune samples for graph window"}, 
1641   {"zerocrossings", CmdZerocrossings
,   1, "Count time between zero-crossings"}, 
1642   {NULL
, NULL
, 0, NULL
} 
1645 int CmdData(const char *Cmd
) 
1647   CmdsParse(CommandTable
, Cmd
); 
1651 int CmdHelp(const char *Cmd
) 
1653   CmdsHelp(CommandTable
);