mirror of
https://github.com/RfidResearchGroup/proxmark3.git
synced 2024-11-15 14:20:51 +08:00
6658905f18
It is identical to the popular 20081211, with the doob addition (20090301), a linux client, and two additional commands for LF analysis. Let me know if you find issues here!
379 lines
8.2 KiB
C++
379 lines
8.2 KiB
C++
#include <windows.h>
|
|
#include <setupapi.h>
|
|
#include <stdio.h>
|
|
#include <ctype.h>
|
|
#include <stdlib.h>
|
|
extern "C" {
|
|
#include "include/hidsdi.h"
|
|
#include "include/hidpi.h"
|
|
}
|
|
|
|
#include "prox.h"
|
|
|
|
#define OUR_VID 0x9ac4
|
|
#define OUR_PID 0x4b8f
|
|
|
|
HANDLE UsbHandle;
|
|
|
|
static void ShowError(void)
|
|
{
|
|
char buf[1024];
|
|
FormatMessage(FORMAT_MESSAGE_FROM_SYSTEM, NULL, GetLastError(), 0,
|
|
buf, sizeof(buf), NULL);
|
|
printf("ERROR: %s", buf);
|
|
}
|
|
|
|
static BOOL UsbConnect(void)
|
|
{
|
|
typedef void (__stdcall *GetGuidProc)(GUID *);
|
|
typedef BOOLEAN (__stdcall *GetAttrProc)(HANDLE, HIDD_ATTRIBUTES *);
|
|
typedef BOOLEAN (__stdcall *GetPreparsedProc)(HANDLE,
|
|
PHIDP_PREPARSED_DATA *);
|
|
typedef NTSTATUS (__stdcall *GetCapsProc)(PHIDP_PREPARSED_DATA, PHIDP_CAPS);
|
|
GetGuidProc getGuid;
|
|
GetAttrProc getAttr;
|
|
GetPreparsedProc getPreparsed;
|
|
GetCapsProc getCaps;
|
|
|
|
HMODULE h = LoadLibrary("hid.dll");
|
|
getGuid = (GetGuidProc)GetProcAddress(h, "HidD_GetHidGuid");
|
|
getAttr = (GetAttrProc)GetProcAddress(h, "HidD_GetAttributes");
|
|
getPreparsed = (GetPreparsedProc)GetProcAddress(h, "HidD_GetPreparsedData");
|
|
getCaps = (GetCapsProc)GetProcAddress(h, "HidP_GetCaps");
|
|
|
|
GUID hidGuid;
|
|
getGuid(&hidGuid);
|
|
|
|
HDEVINFO devInfo;
|
|
devInfo = SetupDiGetClassDevs(&hidGuid, NULL, NULL,
|
|
DIGCF_PRESENT | DIGCF_INTERFACEDEVICE);
|
|
|
|
SP_DEVICE_INTERFACE_DATA devInfoData;
|
|
devInfoData.cbSize = sizeof(devInfoData);
|
|
|
|
int i;
|
|
for(i = 0;; i++) {
|
|
if(!SetupDiEnumDeviceInterfaces(devInfo, 0, &hidGuid, i, &devInfoData))
|
|
{
|
|
if(GetLastError() != ERROR_NO_MORE_ITEMS) {
|
|
// printf("SetupDiEnumDeviceInterfaces failed\n");
|
|
}
|
|
// printf("done list\n");
|
|
SetupDiDestroyDeviceInfoList(devInfo);
|
|
return FALSE;
|
|
}
|
|
|
|
// printf("item %d:\n", i);
|
|
|
|
DWORD sizeReqd = 0;
|
|
if(!SetupDiGetDeviceInterfaceDetail(devInfo, &devInfoData,
|
|
NULL, 0, &sizeReqd, NULL))
|
|
{
|
|
if(GetLastError() != ERROR_INSUFFICIENT_BUFFER) {
|
|
// printf("SetupDiGetDeviceInterfaceDetail (0) failed\n");
|
|
continue;
|
|
}
|
|
}
|
|
|
|
SP_DEVICE_INTERFACE_DETAIL_DATA *devInfoDetailData =
|
|
(SP_DEVICE_INTERFACE_DETAIL_DATA *)malloc(sizeReqd);
|
|
devInfoDetailData->cbSize = sizeof(*devInfoDetailData);
|
|
|
|
if(!SetupDiGetDeviceInterfaceDetail(devInfo, &devInfoData,
|
|
devInfoDetailData, 87, NULL, NULL))
|
|
{
|
|
// printf("SetupDiGetDeviceInterfaceDetail (1) failed\n");
|
|
continue;
|
|
}
|
|
|
|
char *path = devInfoDetailData->DevicePath;
|
|
|
|
UsbHandle = CreateFile(path, /*GENERIC_READ |*/ GENERIC_WRITE,
|
|
FILE_SHARE_READ | FILE_SHARE_WRITE, NULL, OPEN_EXISTING,
|
|
FILE_FLAG_OVERLAPPED, NULL);
|
|
|
|
if(UsbHandle == INVALID_HANDLE_VALUE) {
|
|
ShowError();
|
|
// printf("CreateFile failed: for '%s'\n", path);
|
|
continue;
|
|
}
|
|
|
|
HIDD_ATTRIBUTES attr;
|
|
attr.Size = sizeof(attr);
|
|
if(!getAttr(UsbHandle, &attr)) {
|
|
ShowError();
|
|
// printf("HidD_GetAttributes failed\n");
|
|
continue;
|
|
}
|
|
|
|
// printf("VID: %04x PID %04x\n", attr.VendorID, attr.ProductID);
|
|
|
|
if(attr.VendorID != OUR_VID || attr.ProductID != OUR_PID) {
|
|
CloseHandle(UsbHandle);
|
|
// printf(" nope, not us\n");
|
|
continue;
|
|
}
|
|
|
|
// printf ("got it!\n");
|
|
CloseHandle(UsbHandle);
|
|
|
|
UsbHandle = CreateFile(path, GENERIC_READ | GENERIC_WRITE,
|
|
FILE_SHARE_READ | FILE_SHARE_WRITE, NULL, OPEN_EXISTING,
|
|
FILE_FLAG_OVERLAPPED, NULL);
|
|
|
|
if(UsbHandle == INVALID_HANDLE_VALUE) {
|
|
ShowError();
|
|
// printf("Error, couldn't open our own handle as desired.\n");
|
|
return FALSE;
|
|
}
|
|
|
|
PHIDP_PREPARSED_DATA pp;
|
|
getPreparsed(UsbHandle, &pp);
|
|
HIDP_CAPS caps;
|
|
|
|
if(getCaps(pp, &caps) != HIDP_STATUS_SUCCESS) {
|
|
// printf("getcaps failed\n");
|
|
return FALSE;
|
|
}
|
|
|
|
// printf("input/out report %d/%d\n", caps.InputReportByteLength,
|
|
// caps.OutputReportByteLength);
|
|
|
|
|
|
return TRUE;
|
|
}
|
|
return FALSE;
|
|
}
|
|
|
|
BOOL ReceiveCommandPoll(UsbCommand *c)
|
|
{
|
|
static BOOL ReadInProgress = FALSE;
|
|
static OVERLAPPED Ov;
|
|
static BYTE Buf[65];
|
|
static DWORD HaveRead;
|
|
|
|
if(!ReadInProgress) {
|
|
memset(&Ov, 0, sizeof(Ov));
|
|
ReadFile(UsbHandle, Buf, 65, &HaveRead, &Ov);
|
|
if(GetLastError() != ERROR_IO_PENDING) {
|
|
ShowError();
|
|
exit(-1);
|
|
}
|
|
ReadInProgress = TRUE;
|
|
}
|
|
|
|
if(HasOverlappedIoCompleted(&Ov)) {
|
|
ReadInProgress = FALSE;
|
|
|
|
if(!GetOverlappedResult(UsbHandle, &Ov, &HaveRead, FALSE)) {
|
|
ShowError();
|
|
exit(-1);
|
|
}
|
|
|
|
memcpy(c, Buf+1, 64);
|
|
|
|
return TRUE;
|
|
} else {
|
|
return FALSE;
|
|
}
|
|
}
|
|
|
|
void ReceiveCommand(UsbCommand *c)
|
|
{
|
|
while(!ReceiveCommandPoll(c)) {
|
|
Sleep(0);
|
|
}
|
|
}
|
|
|
|
void SendCommand(UsbCommand *c, BOOL wantAck)
|
|
{
|
|
BYTE buf[65];
|
|
buf[0] = 0;
|
|
memcpy(buf+1, c, 64);
|
|
|
|
DWORD written;
|
|
OVERLAPPED ov;
|
|
memset(&ov, 0, sizeof(ov));
|
|
WriteFile(UsbHandle, buf, 65, &written, &ov);
|
|
if(GetLastError() != ERROR_IO_PENDING) {
|
|
ShowError();
|
|
exit(-1);
|
|
}
|
|
|
|
while(!HasOverlappedIoCompleted(&ov)) {
|
|
Sleep(0);
|
|
}
|
|
|
|
if(!GetOverlappedResult(UsbHandle, &ov, &written, FALSE)) {
|
|
ShowError();
|
|
exit(-1);
|
|
}
|
|
|
|
if(wantAck) {
|
|
UsbCommand ack;
|
|
ReceiveCommand(&ack);
|
|
if(ack.cmd != CMD_ACK) {
|
|
printf("bad ACK\n");
|
|
exit(-1);
|
|
}
|
|
}
|
|
}
|
|
|
|
static DWORD ExpectedAddr;
|
|
static BYTE QueuedToSend[256];
|
|
static BOOL AllWritten;
|
|
|
|
static void FlushPrevious(void)
|
|
{
|
|
UsbCommand c;
|
|
memset(&c, 0, sizeof(c));
|
|
|
|
printf("expected = %08x flush, ", ExpectedAddr);
|
|
|
|
int i;
|
|
for(i = 0; i < 240; i += 48) {
|
|
c.cmd = CMD_SETUP_WRITE;
|
|
memcpy(c.d.asBytes, QueuedToSend+i, 48);
|
|
c.ext1 = (i/4);
|
|
SendCommand(&c, TRUE);
|
|
}
|
|
|
|
c.cmd = CMD_FINISH_WRITE;
|
|
c.ext1 = (ExpectedAddr-1) & (~255);
|
|
printf("c.ext1 = %08x\r", c.ext1);
|
|
memcpy(c.d.asBytes, QueuedToSend+240, 16);
|
|
SendCommand(&c, TRUE);
|
|
|
|
AllWritten = TRUE;
|
|
}
|
|
|
|
static void GotByte(DWORD where, BYTE which)
|
|
{
|
|
AllWritten = FALSE;
|
|
|
|
if(where != ExpectedAddr) {
|
|
printf("bad: got at %08x, expected at %08x\n", where, ExpectedAddr);
|
|
exit(-1);
|
|
}
|
|
QueuedToSend[where & 255] = which;
|
|
ExpectedAddr++;
|
|
|
|
if((where & 255) == 255) {
|
|
// we have completed a full page
|
|
FlushPrevious();
|
|
}
|
|
}
|
|
|
|
static int HexVal(int c)
|
|
{
|
|
c = tolower(c);
|
|
if(c >= '0' && c <= '9') {
|
|
return c - '0';
|
|
} else if(c >= 'a' && c <= 'f') {
|
|
return (c - 'a') + 10;
|
|
} else {
|
|
printf("bad hex digit '%c'\n", c);
|
|
exit(-1);
|
|
}
|
|
}
|
|
|
|
static BYTE HexByte(char *s)
|
|
{
|
|
return (HexVal(s[0]) << 4) | HexVal(s[1]);
|
|
}
|
|
|
|
static void LoadFlashFromSRecords(char *file, int addr)
|
|
{
|
|
ExpectedAddr = addr;
|
|
|
|
FILE *f = fopen(file, "r");
|
|
if(!f) {
|
|
printf("couldn't open file\n");
|
|
exit(-1);
|
|
}
|
|
|
|
char line[512];
|
|
while(fgets(line, sizeof(line), f)) {
|
|
if(memcmp(line, "S3", 2)==0) {
|
|
char *s = line + 2;
|
|
int len = HexByte(s) - 5;
|
|
s += 2;
|
|
|
|
char addrStr[9];
|
|
memcpy(addrStr, s, 8);
|
|
addrStr[8] = '\0';
|
|
DWORD addr;
|
|
sscanf(addrStr, "%x", &addr);
|
|
s += 8;
|
|
|
|
int i;
|
|
for(i = 0; i < len; i++) {
|
|
while((addr+i) > ExpectedAddr) {
|
|
GotByte(ExpectedAddr, 0xff);
|
|
}
|
|
GotByte(addr+i, HexByte(s));
|
|
s += 2;
|
|
}
|
|
}
|
|
}
|
|
|
|
if(!AllWritten) FlushPrevious();
|
|
|
|
fclose(f);
|
|
printf("\ndone.\n");
|
|
}
|
|
|
|
int main(int argc, char **argv)
|
|
{
|
|
int i = 0;
|
|
|
|
if(argc < 2) {
|
|
printf("Usage: %s bootrom file.s19\n", argv[0]);
|
|
printf(" %s load osimage.s19\n", argv[0]);
|
|
printf(" %s fpga fpgaimg.s19\n", argv[0]);
|
|
printf(" %s gui\n", argv[0]);
|
|
return -1;
|
|
}
|
|
|
|
for(;;) {
|
|
if(UsbConnect()) {
|
|
break;
|
|
}
|
|
if(i == 0) {
|
|
printf("...no device connected, polling for it now\n");
|
|
}
|
|
if(i > 50000) {
|
|
printf("Could not connect to USB device; exiting.\n");
|
|
return -1;
|
|
}
|
|
i++;
|
|
Sleep(5);
|
|
}
|
|
|
|
if(strcmp(argv[1], "bootrom")==0 || strcmp(argv[1], "load")==0 || strcmp(argv[1], "fpga")==0) {
|
|
if(argc != 3) {
|
|
printf("Need filename.\n");
|
|
return -1;
|
|
}
|
|
if(strcmp(argv[1], "bootrom")==0) {
|
|
LoadFlashFromSRecords(argv[2], 0);
|
|
} else if(strcmp(argv[1], "fpga")==0) {
|
|
LoadFlashFromSRecords(argv[2], 0x2000);
|
|
} else {
|
|
LoadFlashFromSRecords(argv[2], 0x10000);
|
|
}
|
|
} else if(strcmp(argv[1], "gui")==0) {
|
|
ShowGui();
|
|
} else if(strcmp(argv[1], "cmd")==0) {
|
|
if(argc != 3) {
|
|
printf("Need command.\n");
|
|
return -1;
|
|
}
|
|
ExecCmd(argv[2]);
|
|
} else {
|
|
printf("Command '%s' not recognized.\n", argv[1]);
|
|
return -1;
|
|
}
|
|
|
|
return 0;
|
|
}
|