EM4233 dump reference

You can find an example dump in Dumps/EM4233_example.dmp and a template for 010 Editor in Software/EM4233_010Editor_Template.bt

Where not specified (regarding lock statuses):

• 0b means unlocked
• 1b means locked

Table 1 - Dump

Memory address (in hex)	Lenght (in bytes)	Content
0x00	0xFF	Tag dump data
0xD0	0x08	UID (0xE0 0x16 0x24 ...)
0xD8	0x01	AFI
0xD9	0x01	DSFID
0xDC	0x04	Info bits (see Table 2)
0xE0	0x34	Lock status byte (see Table 3)
0x0114	0x04	level 0 security password
0x0118	0x0C	level 1 security key

Table 2 - Info bits

	MSB								LSB
Byte 0	RFU	RFU	RFU	RFU	RFU	RFU	RFU	DSFID lock status	AFI lock status
Byte 1	RFU	RFU	RFU	RFU	RFU	RFU	RFU	RFU	RFU
Byte 2	RFU	RFU	RFU	RFU	RFU	RFU	RFU	RFU	RFU
Byte 3	RFU	RFU	RFU	RFU	RFU	RFU	RFU	RFU	RFU

Examples

01 00 00 00 AFI locked - DSFID unlocked

03 00 00 00 AFI locked - DSFID locked

Table 3 - Block status

MSB								LSB
RFU	RFU	RFU	RFU	RFU	Write protection	Read protection	Factory lock	User lock

Examples

0x01 User locked

0x0C Write protected - Read protected

---

Terms:

• MSB: Most Significant Bit
• LSB: Least Significant Bit
• RFU: Reserved for Future Usage - Shall be 0b
• Write/Read protected: According to EM datasheet