Author: temskiy Frequency: LF (125 kHz) Hardware: RDV4 (flash memory for slot storage)
Back to Standalone Modes Index | Source Code | Development Guide
Read, simulate, and clone EM4100 tags with 16 storage slots. Pre-loaded with 3 sample IDs. Provides the largest card storage capacity of any EM4100 standalone mode.
When you need to collect and manage many EM4100 IDs on a single assessment — for example, reading badges from multiple employees — having 16 slots lets you capture a full team's credentials on-device. Each slot is independently selectable for simulation or cloning.
- SELECT: Navigate between the 16 slots using button clicks
- READ: Read an EM4100 tag and store it in the currently selected slot
- SIMULATE: Broadcast the selected slot's ID
- WRITE: Clone the selected slot's ID to a T5555 card
The mode cycles through these four states with button holds to switch modes and clicks to execute within a mode.
| LED | Meaning |
|---|---|
| A/B/C/D (binary) | Slot number in binary (0–15) |
| Blink patterns | Operation success/failure |
| State | Action | Effect |
|---|---|---|
| SELECT | Single click | Next slot |
| SELECT | Hold | Switch to SIMULATE mode |
| READ | Single click | Read tag into current slot |
| READ | Hold | Switch to WRITE mode |
| SIMULATE | Single click | Start simulation |
| SIMULATE | Hold | Switch to READ mode |
| WRITE | Single click | Write current slot to T5555 |
| WRITE | Hold | Switch to SELECT mode |
stateDiagram-v2
[*] --> SELECT : Startup
SELECT --> SIMULATE : Hold
SIMULATE --> READ : Hold
READ --> WRITE : Hold
WRITE --> SELECT : Hold
SELECT --> SELECT : Click (next slot)
READ --> READ : Click (read tag)
SIMULATE --> SIMULATE : Click (simulate)
WRITE --> WRITE : Click (write)
SELECT --> [*] : USB data received
make clean
make STANDALONE=LF_EM4100RWC -j
./pm3-flash-fullimage
- EM4100 RSWB — 4-slot variant with brute force
- EM4100 Emulator — Simple predefined simulator
- EM4100 RSWW — Read/sim/write/wipe/validate