Found this thread by @TomHarkness. Linking for future reference.
Not sure if it will work, will update after I’m able to try it…
=======================================
This is the output I received. Suggested commands did partially work. It appears the failure is due to a poor coupling of my chip with my LF antenna. Working on a solution. The link above provides the best info I can find on this forum for writing to the xEM with a proxmark3 with specific focus on the RDV2 version.
pm3 → lf t55xx detect
Chip Type : T55x7
Modulation : BIPHASEa - (CDP)
Bit Rate : 5 - RF/64
Inverted : Yes
Offset : 58
Seq. Term. : No
Block0 : 0xE0178093
pm3 → lf t55xx dump
Reading Page 0:
blk | hex data | binary | ascii
----±---------±---------------------------------±------
00 | E0178093 | 11100000000101111000000010010011 | …
01 | E0178093 | 11100000000101111000000010010011 | …
02 | E0178093 | 11100000000101111000000010010011 | …
03 | C02F0126 | 11000000001011110000000100100110 | ./.&
04 | E0178093 | 11100000000101111000000010010011 | …
05 | C02F0126 | 11000000001011110000000100100110 | ./.&
06 | C02F0126 | 11000000001011110000000100100110 | ./.&
07 | C02F0126 | 11000000001011110000000100100110 | ./.&
Reading Page 1:
blk | hex data | binary | ascii
----±---------±---------------------------------±------
00 | E0178093 | 11100000000101111000000010010011 | …
01 | C02F0126 | 11000000001011110000000100100110 | ./.&
02 | C02F0126 | 11000000001011110000000100100110 | ./.&
03 | C02F0126 | 11000000001011110000000100100110 | ./.&
pm3 → lf t55xx wipe
[=] Beginning Wipe of a T55xx tag (assuming the tag is not password protected)
[=] Writing page 0 block: 00 data: 0x000880E0 pwd: 0x00000000
[=] Writing page 0 block: 01 data: 0x00000000
[=] Writing page 0 block: 02 data: 0x00000000
[=] Writing page 0 block: 03 data: 0x00000000
[=] Writing page 0 block: 04 data: 0x00000000
[=] Writing page 0 block: 05 data: 0x00000000
[=] Writing page 0 block: 06 data: 0x00000000
[=] Writing page 0 block: 07 data: 0x00000000
pm3 → lf conf b 2 L
#db# LF Sampling config
#db# [q] divisor…95 (125 kHz)
#db# [b] bps…2
#db# [d] decimation…1
#db# [a] averaging…Yes
#db# [t] trigger threshold…0
pm3 → lf hid clone 2004840534
[=] Preparing to clone HID tag with ID 2004840534
pm3 → lf hid clone 2004840534
[=] Preparing to clone HID tag with ID 2004840534
pm3 → hw reset
[=] Proxmark3 has been reset.
[=] Running in OFFLINE mode. Use “hw connect” to reconnect
[offline] pm3 → exit
root@test-system:/opt/proxmark3/client# ./proxmark3 /dev/ttyACM0
██████╗ ███╗ ███╗ ████╗ …iceman fork
██╔══██╗████╗ ████║ ══█║ …dedicated to RDV40
██████╔╝██╔████╔██║ ████╔╝
██╔═══╝ ██║╚██╔╝██║ ══█║ iceman@icesql.net
██║ ██║ ╚═╝ ██║ ████╔╝ GitHub - RfidResearchGroup/proxmark3: Iceman Fork - Proxmark3
╚═╝ ╚═╝ ╚═╝ ╚═══╝ pre-release v4.0
Support iceman on patreon, https://www.patreon.com/iceman1001/
[=] Using UART port /dev/ttyACM0
[=] Communicating with PM3 over USB-CDC
[ Proxmark3 RFID instrument ]
[ CLIENT ]
client: RRG/Iceman
[ PROXMARK RDV4 ]
external flash: absent
smartcard reader: absent
[ PROXMARK RDV4 Extras ]
FPC USART for BT add-on support: absent
[ ARM ]
bootrom: RRG/Iceman/master/d4c3d077 2019-05-15 15:03:25
os: RRG/Iceman/master/d4c3d077 2019-05-15 15:03:39
[ FPGA ]
LF image built for 2s30vq100 on 2019/ 4/18 at 9:35:32
HF image built for 2s30vq100 on 2018/ 9/ 3 at 21:40:23
[ Hardware ]
–= uC: AT91SAM7S512 Rev A
–= Embedded Processor: ARM7TDMI
–= Nonvolatile Program Memory Size: 512K bytes, Used: 248458 bytes (47%) Free: 275830 bytes (53%)
–= Second Nonvolatile Program Memory Size: None
–= Internal SRAM Size: 64K bytes
–= Architecture Identifier: AT91SAM7Sxx Series
–= Nonvolatile Program Memory Type: Embedded Flash Memory
pm3 → lf search
[=] NOTE: some demods output possible binary
[=] if it finds something that looks like a tag
[=] False Positives ARE possible
[=]
[=] Checking for known tags…
[+] EM410x pattern found
EM TAG ID : 2018070414
Possible de-scramble patterns
Unique TAG ID : 0418E02028
HoneyWell IdentKey {
DEZ 8 : 00459796
DEZ 10 : 0403112980
DEZ 5.5 : 06151.01044
DEZ 3.5A : 032.01044
DEZ 3.5B : 024.01044
DEZ 3.5C : 007.01044
DEZ 14/IK2 : 00137842066452
DEZ 15/IK3 : 000017597210664
DEZ 20/ZK : 00040108140002000208
}
Other : 01044_007_00459796
Pattern Paxton : 538657300 [0x201B4214]
Pattern 1 : 720924 [0xB001C]
Pattern Sebury : 1044 7 459796 [0x414 0x7 0x70414]
[+] Valid EM410x ID found!