+
+ char line[80];
+ int offset = 0;
+ uint8_t data[USB_CMD_DATA_SIZE] = {0x00};
+ int index = 0;
+ int totalbytes = 0;
+ while ( fgets(line, sizeof(line), f) ) {
+ int res = sscanf(line, "%x %x %x %x %x %x %x %x",
+ (unsigned int *)&data[index],
+ (unsigned int *)&data[index + 1],
+ (unsigned int *)&data[index + 2],
+ (unsigned int *)&data[index + 3],
+ (unsigned int *)&data[index + 4],
+ (unsigned int *)&data[index + 5],
+ (unsigned int *)&data[index + 6],
+ (unsigned int *)&data[index + 7]);
+
+ if(res != 8) {
+ PrintAndLog("Error: could not read samples");
+ fclose(f);
+ return -1;
+ }
+ index += res;
+
+ if ( index == USB_CMD_DATA_SIZE ){
+// PrintAndLog("sent %d | %d | %d", index, offset, totalbytes);
+ UsbCommand c = { CMD_DOWNLOADED_SIM_SAMPLES_125K, {offset, 0, 0}};
+ memcpy(c.d.asBytes, data, sizeof(data));
+ clearCommandBuffer();
+ SendCommand(&c);
+ if ( !WaitForResponseTimeout(CMD_ACK, NULL, 1500)){
+ PrintAndLog("Command execute timeout");
+ fclose(f);
+ return 1;
+ }
+ offset += index;
+ totalbytes += index;
+ index = 0;
+ }
+ }
+ fclose(f);
+
+ // left over bytes?
+ if ( index != 0 ) {
+ UsbCommand c = { CMD_DOWNLOADED_SIM_SAMPLES_125K, {offset, 0, 0}};
+ memcpy(c.d.asBytes, data, 8);
+ clearCommandBuffer();
+ SendCommand(&c);
+ if ( !WaitForResponseTimeout(CMD_ACK, NULL, 1500)){
+ PrintAndLog("Command execute timeout");
+ return 1;
+ }
+ totalbytes += index;
+ }
+
+ PrintAndLog("loaded %u samples", totalbytes);
+ return 0;
+}
+
+int CmdLegicSave(const char *Cmd) {
+ int requested = 1024;
+ int offset = 0;
+ int delivered = 0;
+ char filename[FILE_PATH_SIZE] = {0x00};
+ uint8_t got[1024] = {0x00};
+
+ memset(filename, 0, FILE_PATH_SIZE);
+
+ sscanf(Cmd, " %s %i %i", filename, &requested, &offset);
+
+ /* If no length given save entire legic read buffer */
+ /* round up to nearest 8 bytes so the saved data can be used with legicload */
+ if (requested == 0)
+ requested = 1024;
+
+ if (requested % 8 != 0) {
+ int remainder = requested % 8;
+ requested = requested + 8 - remainder;
+ }
+
+ if (offset + requested > sizeof(got)) {
+ PrintAndLog("Tried to read past end of buffer, <bytes> + <offset> > 1024");
+ return 0;
+ }
+
+ GetFromBigBuf(got, requested, offset);
+ if ( !WaitForResponseTimeout(CMD_ACK, NULL, 2000)){
+ PrintAndLog("Command execute timeout");
+ return 1;
+ }
+
+ FILE *f = fopen(filename, "w");
+ if(!f) {
+ PrintAndLog("couldn't open '%s'", Cmd+1);
+ return -1;
+ }
+
+ for (int j = 0; j < requested; j += 8) {
+ fprintf(f, "%02x %02x %02x %02x %02x %02x %02x %02x\n",
+ got[j+0], got[j+1], got[j+2], got[j+3],
+ got[j+4], got[j+5], got[j+6], got[j+7]
+ );
+ delivered += 8;
+ if (delivered >= requested) break;
+ }
+
+ fclose(f);
+ PrintAndLog("saved %u samples", delivered);
+ return 0;
+}
+
+//TODO: write a help text (iceman)
+int CmdLegicRfSim(const char *Cmd) {
+ UsbCommand c = {CMD_SIMULATE_TAG_LEGIC_RF, {6,3,0}};
+ sscanf(Cmd, " %"lli" %"lli" %"lli, &c.arg[0], &c.arg[1], &c.arg[2]);
+ clearCommandBuffer();
+ SendCommand(&c);
+ return 0;
+}
+
+int CmdLegicRfWrite(const char *Cmd) {
+
+ // params:
+ // offset - in tag memory
+ // length - num of bytes to be written
+ // IV - initialisation vector
+
+ char cmdp = param_getchar(Cmd, 0);
+ if ( cmdp == 'H' || cmdp == 'h' ) return usage_legic_write();
+
+ uint32_t offset = 0, len = 0, IV = 0;
+
+ UsbCommand c = {CMD_WRITER_LEGIC_RF, {0,0,0}};
+ int res = sscanf(Cmd, "%x %x %x", &offset, &len, &IV);
+ if(res < 2) {
+ PrintAndLog("Please specify the offset and length as two hex strings and, optionally, the IV also as an hex string");
+ return -1;
+ }
+
+ // OUT-OF-BOUNDS check
+ if(len + offset > MAX_LENGTH) len = MAX_LENGTH - offset;
+
+ if ( (IV & 0x7F) != IV ){
+ IV &= 0x7F;
+ PrintAndLog("Truncating IV to 7bits");
+ }
+ if ( (IV & 1) == 0 ){
+ IV |= 0x01; // IV must be odd
+ PrintAndLog("LSB of IV must be SET");
+ }
+
+ PrintAndLog("Current IV: 0x%02x", IV);
+
+ c.arg[0] = offset;
+ c.arg[1] = len;
+ c.arg[2] = IV;
+
+ clearCommandBuffer();
+ SendCommand(&c);
+ return 0;
+}
+
+int CmdLegicRfRawWrite(const char *Cmd) {
+
+ char cmdp = param_getchar(Cmd, 0);
+ if ( cmdp == 'H' || cmdp == 'h' ) return usage_legic_rawwrite();
+
+ uint32_t address = 0, data = 0, IV = 0;
+ char answer;
+
+ UsbCommand c = { CMD_RAW_WRITER_LEGIC_RF, {0,0,0} };
+ int res = sscanf(Cmd, "%x %x %x", &address, &data, &IV);
+ if(res < 2)
+ return usage_legic_rawwrite();
+
+ // OUT-OF-BOUNDS check
+ if(address > MAX_LENGTH)
+ return usage_legic_rawwrite();
+
+ if ( (IV & 0x7F) != IV ){
+ IV &= 0x7F;
+ PrintAndLog("Truncating IV to 7bits");
+ }
+ if ( (IV & 1) == 0 ){
+ IV |= 0x01; // IV must be odd
+ PrintAndLog("LSB of IV must be SET");
+ }
+ PrintAndLog("Current IV: 0x%02x", IV);
+
+ c.arg[0] = address;
+ c.arg[1] = data;
+ c.arg[2] = IV;
+
+ if (c.arg[0] == 0x05 || c.arg[0] == 0x06) {
+ PrintAndLog("############# DANGER !! #############");
+ PrintAndLog("# changing the DCF is irreversible #");
+ PrintAndLog("#####################################");
+ PrintAndLog("do youe really want to continue? y(es) n(o)");
+ if (scanf(" %c", &answer) > 0 && (answer == 'y' || answer == 'Y')) {
+ SendCommand(&c);
+ return 0;
+ }
+ return -1;
+ }
+
+ clearCommandBuffer();
+ SendCommand(&c);
+ return 0;
+}
+
+//TODO: write a help text (iceman)
+int CmdLegicRfFill(const char *Cmd) {
+ UsbCommand cmd = {CMD_WRITER_LEGIC_RF, {0,0,0} };
+ int res = sscanf(Cmd, " 0x%"llx" 0x%"llx" 0x%"llx, &cmd.arg[0], &cmd.arg[1], &cmd.arg[2]);
+ if(res != 3) {
+ PrintAndLog("Please specify the offset, length and value as two hex strings");
+ return -1;
+ }
+
+ int i;
+ UsbCommand c = {CMD_DOWNLOADED_SIM_SAMPLES_125K, {0, 0, 0}};
+ memset(c.d.asBytes, cmd.arg[2], 48);
+
+ for(i = 0; i < 22; i++) {
+ c.arg[0] = i*48;
+
+ clearCommandBuffer();
+ SendCommand(&c);
+ WaitForResponse(CMD_ACK, NULL);
+ }
+ clearCommandBuffer();
+ SendCommand(&cmd);
+ return 0;
+ }
+
+void static calc4(uint8_t *cmd, uint8_t len){
+ crc_t crc;
+ //crc_init_ref(&crc, 4, 0x19 >> 1, 0x5, 0, TRUE, TRUE);
+ crc_init(&crc, 4, 0x19 >> 1, 0x5, 0);
+
+ crc_clear(&crc);
+ crc_update(&crc, 1, 1); /* CMD_READ */
+ crc_update(&crc, cmd[0], 8);
+ crc_update(&crc, cmd[1], 8);
+ printf("crc4 %X\n", reflect(crc_finish(&crc), 4) ) ;
+
+ crc_clear(&crc);
+ crc_update(&crc, 1, 1); /* CMD_READ */
+ crc_update(&crc, cmd[0], 8);
+ crc_update(&crc, cmd[1], 8);
+ printf("crc4 %X\n", crc_finish(&crc) ) ;
+
+ printf("---- old ---\n");
+ crc_update2(&crc, 1, 1); /* CMD_READ */
+ crc_update2(&crc, cmd[0], 8);
+ crc_update2(&crc, cmd[1], 8);
+ printf("crc4 %X \n", reflect(crc_finish(&crc), 4) ) ;
+
+
+ crc_clear(&crc);
+ crc_update2(&crc, 1, 1); /* CMD_READ */
+ crc_update2(&crc, cmd[0], 8);
+ crc_update2(&crc, cmd[1], 8);
+ printf("crc4 %X\n", crc_finish(&crc) ) ;
+}
+
+int CmdLegicCalcCrc8(const char *Cmd){
+
+ uint8_t *data = NULL;
+ uint8_t cmdp = 0, uidcrc = 0, type=0;
+ bool errors = false;
+ int len = 0;
+ int bg, en;
+
+ while(param_getchar(Cmd, cmdp) != 0x00) {
+ switch(param_getchar(Cmd, cmdp)) {
+ case 'b':
+ case 'B':
+ // peek at length of the input string so we can
+ // figure out how many elements to malloc in "data"
+ bg=en=0;
+ if (param_getptr(Cmd, &bg, &en, cmdp+1)) {
+ errors = true;
+ break;
+ }
+ len = (en - bg + 1);
+
+ // check that user entered even number of characters
+ // for hex data string
+ if (len & 1) {
+ errors = true;
+ break;
+ }
+
+ // it's possible for user to accidentally enter "b" parameter
+ // more than once - we have to clean previous malloc
+ if (data) free(data);
+ data = malloc(len >> 1);
+ if ( data == NULL ) {
+ PrintAndLog("Can't allocate memory. exiting");
+ errors = true;
+ break;
+ }
+
+ if (param_gethex(Cmd, cmdp+1, data, len)) {
+ errors = true;
+ break;
+ }
+
+ len >>= 1;
+ cmdp += 2;
+ break;
+ case 'u':
+ case 'U':
+ uidcrc = param_get8ex(Cmd, cmdp+1, 0, 16);
+ cmdp += 2;
+ break;
+ case 'c':
+ case 'C':
+ type = param_get8ex(Cmd, cmdp+1, 0, 10);
+ cmdp += 2;
+ break;
+ case 'h':
+ case 'H':
+ errors = true;
+ break;
+ default:
+ PrintAndLog("Unknown parameter '%c'", param_getchar(Cmd, cmdp));
+ errors = true;
+ break;
+ }
+ if (errors) break;
+ }
+ //Validations
+ if (errors){
+ if (data) free(data);
+ return usage_legic_calccrc8();
+ }
+
+ switch (type){
+ case 16:
+ PrintAndLog("Legic crc16: %X", CRC16Legic(data, len, uidcrc));
+ break;
+ case 4:
+ calc4(data, 0);
+ break;
+ default:
+ PrintAndLog("Legic crc8: %X", CRC8Legic(data, len) );
+ break;
+ }
+
+ if (data) free(data);
+ return 0;
+}
+
+int HFLegicInfo(const char *Cmd, bool verbose) {
+
+ char cmdp = param_getchar(Cmd, 0);
+ if ( cmdp == 'H' || cmdp == 'h' ) return usage_legic_info();
+
+ UsbCommand c = {CMD_LEGIC_INFO, {0,0,0}};
+ clearCommandBuffer();
+ SendCommand(&c);
+ UsbCommand resp;
+ if (WaitForResponseTimeout(CMD_ACK, &resp, 1000)) {
+ uint8_t isOK = resp.arg[0] & 0xFF;
+ uint16_t tagtype = resp.arg[1] & 0xFFF;
+ if ( isOK ) {
+ PrintAndLog(" UID : %s", sprint_hex(resp.d.asBytes, 4));
+ switch(tagtype) {
+ case 22: PrintAndLog("MIM22 card (22bytes)"); break;
+ case 256: PrintAndLog("MIM256 card (256bytes)"); break;
+ case 1024: PrintAndLog("MIM1024 card (1024bytes)"); break;
+ default: {
+ PrintAndLog("Unknown card format: %x", tagtype);
+ return 1;
+ }
+ }
+ } else {
+ if ( verbose ) PrintAndLog("legic card select failed");
+ return 1;
+ }
+ } else {
+ if ( verbose ) PrintAndLog("command execution time out");
+ return 1;
+ }
+ return 0;
projects / proxmark3-svn / blobdiff