search

kaipyroami / cats-hate-drm

You don't tell a cat that they can't do something.
MIT License
2 stars 0 forks source link

Locking the counter. #4

Closed kaipyroami closed 1 year ago

kaipyroami commented 1 year ago

It is possible to lock any field on the SRI/SRT512 devices. Is it possible to lock the counter and have the device not error out?

Need to run:

hf 14b sriwrite 2 FF ffff9fff

The contents will be displayed in the format 12345678 and to write the format 78563412 must be used. The counters are in addresses 5 and 6 and the corresponding register bits 21 and 22. Writing xxxx9Fxx will lock them.

kaipyroami commented 1 year ago

Locking the counter does not work. The device will not error until the cycle is started. The device must be confirming that it can decrement the counter before it proceeds.

kaipyroami commented 1 year ago 
[usb] pm3 --> hf 14b sriwrite 2 FF ffff9fff
[+] [SRI512] Write special block FF [ FF FF 9F FF  ]
[+] received SOF only (maybe iCLASS/Picopass)

Nikola.D: 0
[usb] pm3 --> hf 14b sriread 2

Nikola.D: 0
[usb] pm3 -->
[#] Address=00, Contents=00000000, CRC=defc
[#] Address=01, Contents=ffffffff, CRC=470f
[#] Address=02, Contents=ffffffff, CRC=470f
[#] Address=03, Contents=ffffffff, CRC=470f
[#] Address=04, Contents=ffffffff, CRC=470f
[#] Address=05, Contents=00000060, CRC=3a65
[#] Address=06, Contents=00000060, CRC=3a65
[#] Address=07, Contents=00003015, CRC=86d7
[#] Address=08, Contents=00780001, CRC=61de
[#] Address=09, Contents=00780001, CRC=61de
[#] Address=0a, Contents=00780001, CRC=61de
[#] Address=0b, Contents=00000f04, CRC=f5c4
[#] Address=0c, Contents=00000f04, CRC=f5c4
[#] Address=0d, Contents=4e32014e, CRC=9f30
[#] Address=0e, Contents=4e32014e, CRC=9f30
[#] Address=0f, Contents=fc790f04, CRC=cade
[#] Address=ff, Contents=ff9fffff, CRC=126a