2 These are command definitions. This file should correspond exactly to usb_cmd.h.
4 --// For the bootloader
6 CMD_DEVICE_INFO = 0x0000,
7 CMD_SETUP_WRITE = 0x0001,
8 CMD_FINISH_WRITE = 0x0003,
9 CMD_HARDWARE_RESET = 0x0004,
10 CMD_START_FLASH = 0x0005,
14 --// For general mucking around
15 CMD_DEBUG_PRINT_STRING = 0x0100,
16 CMD_DEBUG_PRINT_INTEGERS = 0x0101,
17 CMD_DEBUG_PRINT_BYTES = 0x0102,
18 CMD_LCD_RESET = 0x0103,
20 CMD_BUFF_CLEAR = 0x0105,
21 CMD_READ_MEM = 0x0106,
25 CMD_DOWNLOAD_EML_BIGBUF = 0x0110,
26 CMD_DOWNLOADED_EML_BIGBUF = 0x0111,
28 --// For low-frequency tags
29 CMD_READ_TI_TYPE = 0x0202,
30 CMD_WRITE_TI_TYPE = 0x0203,
31 CMD_DOWNLOADED_RAW_BITS_TI_TYPE = 0x0204,
32 CMD_ACQUIRE_RAW_ADC_SAMPLES_125K = 0x0205,
33 CMD_MOD_THEN_ACQUIRE_RAW_ADC_SAMPLES_125K = 0x0206,
34 CMD_DOWNLOAD_RAW_ADC_SAMPLES_125K = 0x0207,
35 CMD_DOWNLOADED_RAW_ADC_SAMPLES_125K = 0x0208,
36 CMD_DOWNLOADED_SIM_SAMPLES_125K = 0x0209,
37 CMD_SIMULATE_TAG_125K = 0x020A,
38 CMD_HID_DEMOD_FSK = 0x020B,
39 CMD_HID_SIM_TAG = 0x020C,
40 CMD_SET_LF_DIVISOR = 0x020D,
41 CMD_LF_SIMULATE_BIDIR = 0x020E,
42 CMD_SET_ADC_MUX = 0x020F,
43 CMD_HID_CLONE_TAG = 0x0210,
44 CMD_EM410X_WRITE_TAG = 0x0211,
45 CMD_INDALA_CLONE_TAG = 0x0212,
47 CMD_INDALA_CLONE_TAG_L = 0x0213,
48 CMD_T55XX_READ_BLOCK = 0x0214,
49 CMD_T55XX_WRITE_BLOCK = 0x0215,
50 CMD_T55XX_RESET_READ = 0x0216,
51 CMD_PCF7931_READ = 0x0217,
52 CMD_PCF7931_WRITE = 0x0223,
53 CMD_EM4X_READ_WORD = 0x0218,
54 CMD_EM4X_WRITE_WORD = 0x0219,
55 CMD_IO_DEMOD_FSK = 0x021A,
56 CMD_IO_CLONE_TAG = 0x021B,
57 CMD_EM410X_DEMOD = 0x021c,
58 CMD_SET_LF_SAMPLING_CONFIG = 0x021d,
59 CMD_FSK_SIM_TAG = 0x021E,
60 CMD_ASK_SIM_TAG = 0x021F,
61 CMD_PSK_SIM_TAG = 0x0220,
62 CMD_AWID_DEMOD_FSK = 0x0221,
63 CMD_VIKING_CLONE_TAG = 0x0222,
64 CMD_T55XX_WAKEUP = 0x0224,
66 --/* CMD_SET_ADC_MUX: ext1 is 0 for lopkd, 1 for loraw, 2 for hipkd, 3 for hiraw */
68 --// For the 13.56 MHz tags
69 CMD_ACQUIRE_RAW_ADC_SAMPLES_ISO_15693 = 0x0300,
70 CMD_READ_SRI_TAG = 0x0303,
71 CMD_ISO_14443B_COMMAND = 0x0305,
72 CMD_READER_ISO_15693 = 0x0310,
73 CMD_SIMTAG_ISO_15693 = 0x0311,
74 CMD_RECORD_RAW_ADC_SAMPLES_ISO_15693 = 0x0312,
75 CMD_ISO_15693_COMMAND = 0x0313,
76 CMD_ISO_15693_COMMAND_DONE = 0x0314,
77 CMD_ISO_15693_FIND_AFI = 0x0315,
78 CMD_ISO_15693_DEBUG = 0x0316,
79 CMD_LF_SNOOP_RAW_ADC_SAMPLES = 0x0317,
81 --// For Hitag2 transponders
82 CMD_SNOOP_HITAG = 0x0370,
83 CMD_SIMULATE_HITAG = 0x0371,
84 CMD_READER_HITAG = 0x0372,
87 CMD_TEST_HITAGS_TRACES = 0x0367,
88 CMD_SIMULATE_HITAG_S = 0x0368,
89 CMD_READ_HITAG_S = 0x0373,
90 CMD_WR_HITAG_S = 0x0375,
91 CMD_EMU_HITAG_S = 0x0376,
93 CMD_SIMULATE_TAG_ISO_14443B = 0x0381,
94 CMD_SNOOP_ISO_14443B = 0x0382,
95 CMD_SNOOP_ISO_14443a = 0x0383,
96 CMD_SIMULATE_TAG_ISO_14443a = 0x0384,
97 CMD_READER_ISO_14443a = 0x0385,
98 CMD_RAW_WRITER_LEGIC_RF = 0x0386,
99 CMD_SIMULATE_TAG_LEGIC_RF = 0x0387,
100 CMD_READER_LEGIC_RF = 0x0388,
101 CMD_WRITER_LEGIC_RF = 0x0389,
103 CMD_EPA_PACE_COLLECT_NONCE = 0x038A,
104 CMD_EPA_PACE_REPLAY = 0x038B,
106 CMD_LEGIC_INFO = 0x03BC,
107 CMD_LEGIC_ESET = 0x03BD,
108 CMD_LEGIC_EGET = 0x03BE,
111 CMD_ICLASS_READCHECK = 0x038F,
112 CMD_ICLASS_CLONE = 0x0390,
113 CMD_ICLASS_DUMP = 0x0391,
114 CMD_SNOOP_ICLASS = 0x0392,
115 CMD_SIMULATE_TAG_ICLASS = 0x0393,
116 CMD_READER_ICLASS = 0x0394,
117 CMD_READER_ICLASS_REPLAY = 0x0395,
118 CMD_ICLASS_READBLOCK = 0x0396,
119 CMD_ICLASS_WRITEBLOCK = 0x0397,
120 CMD_ICLASS_EML_MEMSET = 0x0398,
121 CMD_ICLASS_AUTHENTICATION = 0x0399,
123 --// For measurements of the antenna tuning
124 CMD_MEASURE_ANTENNA_TUNING = 0x0400,
125 CMD_MEASURE_ANTENNA_TUNING_HF = 0x0401,
126 CMD_MEASURED_ANTENNA_TUNING = 0x0410,
127 CMD_LISTEN_READER_FIELD = 0x0420,
129 --// For direct FPGA control
130 CMD_FPGA_MAJOR_MODE_OFF = 0x0500,
132 --// For mifare commands
133 CMD_MIFARE_SET_DBGMODE = 0x0600,
134 CMD_MIFARE_EML_MEMCLR = 0x0601,
135 CMD_MIFARE_EML_MEMSET = 0x0602,
136 CMD_MIFARE_EML_MEMGET = 0x0603,
137 CMD_MIFARE_EML_CARDLOAD = 0x0604,
139 --// magic chinese card commands
140 CMD_MIFARE_CSETBLOCK = 0x0605,
141 CMD_MIFARE_CGETBLOCK = 0x0606,
142 CMD_MIFARE_CIDENT = 0x0607,
144 CMD_SIMULATE_MIFARE_CARD = 0x0610,
146 CMD_READER_MIFARE = 0x0611,
147 CMD_MIFARE_NESTED = 0x0612,
148 CMD_MIFARE_ACQUIRE_ENCRYPTED_NONCES = 0x0613,
150 CMD_MIFARE_READBL = 0x0620,
151 CMD_MIFAREU_READBL = 0x0720,
153 CMD_MIFARE_READSC = 0x0621,
154 CMD_MIFAREU_READCARD = 0x0721,
156 CMD_MIFARE_WRITEBL = 0x0622,
157 CMD_MIFAREU_WRITEBL = 0x0722,
158 CMD_MIFAREU_WRITEBL_COMPAT = 0x0723,
160 CMD_MIFARE_CHKKEYS = 0x0623,
162 CMD_MIFARE_SNIFFER = 0x0630,
165 CMD_MIFAREUC_AUTH = 0x0724,
166 CMD_MIFAREUC_SETPWD = 0x0727,
167 CMD_MIFAREU_SETUID = 0x0728,
170 CMD_MIFARE_DESFIRE_READBL = 0x0728,
171 CMD_MIFARE_DESFIRE_WRITEBL = 0x0729,
172 CMD_MIFARE_DESFIRE_AUTH1 = 0x072a,
173 CMD_MIFARE_DESFIRE_AUTH2 = 0x072b,
174 CMD_MIFARE_DES_READER = 0x072c,
175 CMD_MIFARE_DESFIRE_INFO = 0x072d,
176 CMD_MIFARE_DESFIRE = 0x072e,
177 CMD_HF_SNIFFER = 0x0800,
180 --// For EMV Commands
181 CMD_EMV_READ_RECORD = 0x0700,
182 CMD_EMV_TRANSACTION = 0x0701,
183 CMD_EMV_CLONE = 0x0702,
184 CMD_EMV_SIM = 0x0703,
185 CMD_EMV_TEST = 0x0704,
186 CMD_EMV_FUZZ_RATS = 0x0705,
187 CMD_EMV_GET_RANDOM_NUM = 0x0706,
188 CMD_EMV_LOAD_VALUE = 0x0707,
189 CMD_EMV_DUMP_CARD = 0x0708,
191 CMD_UNKNOWN = 0xFFFF,
195 local _reverse_lookup,k,v = {}
196 for k, v in pairs(_commands) do
197 _reverse_lookup[v] = k
199 _commands.tostring = function(command)
200 if(type(command) == 'number') then
201 return ("%s (%d)"):format(_reverse_lookup[command]or "ERROR UNDEFINED!", command)
203 return ("Error, numeric argument expected, got : %s"):format(tostring(command))
208 new = function(self, o)
210 local o = o or {} -- create object if user does not provide one
211 setmetatable(o, self) -- DIY inheritance a'la javascript
214 o.cmd = o.cmd or _commands.CMD_UNKNOWN
218 local data = o.data or "0"
220 if(type(data) == 'string') then
221 -- We need to check if it is correct length, otherwise pad it
222 local len = string.len(data)
224 --Should be 1024 hex characters to represent 512 bytes of data
225 data = data .. string.rep("0",1024 - len )
228 -- OOps, a bit too much data here
229 print( ( "WARNING: data size too large, was %s chars, will be truncated "):format(len) )
231 data = data:sub(1,1024)
234 print(("WARNING; data was NOT a (hex-) string, but was %s"):format(type(data)))
239 parse = function(packet)
240 local count, cmd, arg1, arg2, arg3, data = bin.unpack('LLLLH511', packet)
241 return Command:new{cmd = cmd, arg1 = arg1, arg2 = arg2, arg3 = arg3, data = data}
245 function Command:__tostring()
246 local output = ("%s\r\nargs : (%s, %s, %s)\r\ndata:\r\n%s\r\n"):format(
247 _commands.tostring(self.cmd),
254 function Command:getBytes()
255 --If a hex-string has been used
256 local data = self.data
258 local arg1, arg2, arg3 = self.arg1, self.arg2, self.arg3
259 return bin.pack("LLLLH", cmd, arg1, arg2, arg3, data);