weebo_scene_write.c 8.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222
  1. #include "../weebo_i.h"
  2. #include <nfc/protocols/mf_ultralight/mf_ultralight_poller.h>
  3. #define TAG "SceneWrite"
  4. static uint8_t SLB[] = {0x00, 0x00, 0x0F, 0xE0};
  5. static uint8_t CC[] = {0xf1, 0x10, 0xff, 0xee};
  6. static uint8_t DLB[] = {0x01, 0x00, 0x0f, 0xbd};
  7. static uint8_t CFG0[] = {0x00, 0x00, 0x00, 0x04};
  8. static uint8_t CFG1[] = {0x5f, 0x00, 0x00, 0x00};
  9. static uint8_t PACKRFUI[] = {0x80, 0x80, 0x00, 0x00};
  10. enum NTAG215Pages {
  11. staticLockBits = 2,
  12. capabilityContainer = 3,
  13. userMemoryFirst = 4,
  14. userMemoryLast = 129,
  15. dynamicLockBits = 130,
  16. cfg0 = 131,
  17. cfg1 = 132,
  18. pwd = 133,
  19. pack = 134,
  20. total = 135
  21. };
  22. NfcCommand weebo_scene_write_poller_callback(NfcGenericEvent event, void* context) {
  23. furi_assert(event.protocol == NfcProtocolMfUltralight);
  24. Weebo* weebo = context;
  25. NfcCommand ret = NfcCommandContinue;
  26. const MfUltralightPollerEvent* mf_ultralight_event = event.event_data;
  27. MfUltralightPoller* poller = event.instance;
  28. if(mf_ultralight_event->type == MfUltralightPollerEventTypeRequestMode) {
  29. // no-op
  30. } else if(mf_ultralight_event->type == MfUltralightPollerEventTypeAuthRequest) {
  31. mf_ultralight_event->data->auth_context.skip_auth = true;
  32. } else if(mf_ultralight_event->type == MfUltralightPollerEventTypeReadSuccess) {
  33. nfc_device_set_data(
  34. weebo->nfc_device, NfcProtocolMfUltralight, nfc_poller_get_data(weebo->poller));
  35. const MfUltralightData* data =
  36. nfc_device_get_data(weebo->nfc_device, NfcProtocolMfUltralight);
  37. if(!mf_ultralight_is_all_data_read(data)) {
  38. view_dispatcher_send_custom_event(weebo->view_dispatcher, WeeboCustomEventWrongCard);
  39. ret = NfcCommandStop;
  40. return ret;
  41. }
  42. if(data->type != MfUltralightTypeNTAG215) {
  43. view_dispatcher_send_custom_event(weebo->view_dispatcher, WeeboCustomEventWrongCard);
  44. ret = NfcCommandStop;
  45. return ret;
  46. }
  47. view_dispatcher_send_custom_event(weebo->view_dispatcher, WeeboCustomEventCardDetected);
  48. uint8_t PWD[4];
  49. weebo_calculate_pwd(data->iso14443_3a_data->uid, PWD);
  50. for(size_t p = 0; p < 2; p++) {
  51. for(size_t i = 0; i < MF_ULTRALIGHT_PAGE_SIZE; i++) {
  52. weebo->figure[NFC3D_UID_OFFSET + p * MF_ULTRALIGHT_PAGE_SIZE + i] =
  53. data->page[p].data[i];
  54. }
  55. }
  56. uint8_t modified[NTAG215_SIZE];
  57. nfc3d_amiibo_pack(&weebo->amiiboKeys, weebo->figure, modified);
  58. MfUltralightError error;
  59. MfUltralightPage page;
  60. // You might think it odd that I'm doing this writing "by hand" and not using the flipper SDK, but this is for two reasons:
  61. // 1. The flipper SDK doesn't write beyond user memory
  62. // 2. I order the writes from least destructive to most destructive, so that if something goes wrong, recovery _might_ be possible
  63. do {
  64. // user data
  65. view_dispatcher_send_custom_event(
  66. weebo->view_dispatcher, WeeboCustomEventWritingUserData);
  67. for(size_t i = userMemoryFirst; i <= userMemoryLast; i++) {
  68. memcpy(
  69. page.data, modified + (i * MF_ULTRALIGHT_PAGE_SIZE), MF_ULTRALIGHT_PAGE_SIZE);
  70. FURI_LOG_D(TAG, "Writing page %zu", i);
  71. error = mf_ultralight_poller_write_page(poller, i, &page);
  72. if(error != MfUltralightErrorNone) {
  73. FURI_LOG_E(TAG, "Error writing page %zu: %d", i, error);
  74. ret = NfcCommandStop;
  75. break;
  76. }
  77. }
  78. if(error != MfUltralightErrorNone) {
  79. ret = NfcCommandStop;
  80. break;
  81. }
  82. view_dispatcher_send_custom_event(
  83. weebo->view_dispatcher, WeeboCustomEventWritingConfigData);
  84. // pwd
  85. memcpy(page.data, PWD, sizeof(PWD));
  86. error = mf_ultralight_poller_write_page(poller, pwd, &page);
  87. if(error != MfUltralightErrorNone) {
  88. FURI_LOG_E(TAG, "Error writing PWD: %d", error);
  89. ret = NfcCommandStop;
  90. break;
  91. }
  92. // pack
  93. memcpy(page.data, PACKRFUI, sizeof(PACKRFUI));
  94. error = mf_ultralight_poller_write_page(poller, pack, &page);
  95. if(error != MfUltralightErrorNone) {
  96. FURI_LOG_E(TAG, "Error writing PACKRFUI: %d", error);
  97. ret = NfcCommandStop;
  98. break;
  99. }
  100. // capability container
  101. memcpy(page.data, CC, sizeof(CC));
  102. error = mf_ultralight_poller_write_page(poller, capabilityContainer, &page);
  103. if(error != MfUltralightErrorNone) {
  104. FURI_LOG_E(TAG, "Error writing CC: %d", error);
  105. ret = NfcCommandStop;
  106. break;
  107. }
  108. // cfg0
  109. memcpy(page.data, CFG0, sizeof(CFG0));
  110. error = mf_ultralight_poller_write_page(poller, cfg0, &page);
  111. if(error != MfUltralightErrorNone) {
  112. FURI_LOG_E(TAG, "Error writing CFG0: %d", error);
  113. ret = NfcCommandStop;
  114. break;
  115. }
  116. // cfg1
  117. memcpy(page.data, CFG1, sizeof(CFG1));
  118. error = mf_ultralight_poller_write_page(poller, cfg1, &page);
  119. if(error != MfUltralightErrorNone) {
  120. FURI_LOG_E(TAG, "Error writing CFG1: %d", error);
  121. ret = NfcCommandStop;
  122. break;
  123. }
  124. // dynamic lock bits
  125. memcpy(page.data, DLB, sizeof(DLB));
  126. error = mf_ultralight_poller_write_page(poller, dynamicLockBits, &page);
  127. if(error != MfUltralightErrorNone) {
  128. FURI_LOG_E(TAG, "Error writing DLB: %d", error);
  129. ret = NfcCommandStop;
  130. break;
  131. }
  132. // static lock bits
  133. memcpy(page.data, SLB, sizeof(SLB));
  134. error = mf_ultralight_poller_write_page(poller, staticLockBits, &page);
  135. if(error != MfUltralightErrorNone) {
  136. FURI_LOG_E(TAG, "Error writing SLB: %d", error);
  137. ret = NfcCommandStop;
  138. break;
  139. }
  140. } while(false);
  141. ret = NfcCommandStop;
  142. view_dispatcher_send_custom_event(weebo->view_dispatcher, WeeboCustomEventWriteSuccess);
  143. } else {
  144. FURI_LOG_D(TAG, "Unhandled event type: %d", mf_ultralight_event->type);
  145. }
  146. return ret;
  147. }
  148. void weebo_scene_write_on_enter(void* context) {
  149. Weebo* weebo = context;
  150. Popup* popup = weebo->popup;
  151. popup_set_header(popup, "Present NTAG215", 58, 28, AlignCenter, AlignCenter);
  152. weebo->poller = nfc_poller_alloc(weebo->nfc, NfcProtocolMfUltralight);
  153. nfc_poller_start(weebo->poller, weebo_scene_write_poller_callback, weebo);
  154. weebo_blink_start(weebo);
  155. view_dispatcher_switch_to_view(weebo->view_dispatcher, WeeboViewPopup);
  156. }
  157. bool weebo_scene_write_on_event(void* context, SceneManagerEvent event) {
  158. Weebo* weebo = context;
  159. bool consumed = false;
  160. if(event.type == SceneManagerEventTypeCustom) {
  161. scene_manager_set_scene_state(weebo->scene_manager, WeeboSceneWrite, event.event);
  162. if(event.event == WeeboCustomEventCardDetected) {
  163. popup_set_text(weebo->popup, "Card detected", 64, 36, AlignCenter, AlignTop);
  164. consumed = true;
  165. } else if(event.event == WeeboCustomEventWritingUserData) {
  166. popup_set_text(weebo->popup, "Writing user data", 64, 36, AlignCenter, AlignTop);
  167. consumed = true;
  168. } else if(event.event == WeeboCustomEventWritingConfigData) {
  169. popup_set_text(weebo->popup, "Writing config data", 64, 36, AlignCenter, AlignTop);
  170. consumed = true;
  171. } else if(event.event == WeeboCustomEventWriteSuccess) {
  172. popup_set_text(weebo->popup, "Write success", 64, 36, AlignCenter, AlignTop);
  173. consumed = true;
  174. scene_manager_next_scene(weebo->scene_manager, WeeboSceneWriteCardSuccess);
  175. } else if(event.event == WeeboCustomEventWrongCard) {
  176. popup_set_text(weebo->popup, "Wrong card", 64, 36, AlignCenter, AlignTop);
  177. consumed = true;
  178. }
  179. }
  180. return consumed;
  181. }
  182. void weebo_scene_write_on_exit(void* context) {
  183. Weebo* weebo = context;
  184. if(weebo->poller) {
  185. nfc_poller_stop(weebo->poller);
  186. nfc_poller_free(weebo->poller);
  187. weebo->poller = NULL;
  188. }
  189. popup_reset(weebo->popup);
  190. weebo_blink_stop(weebo);
  191. }