From c8783414ffb358ae2e087eb3826e4c210135f112 Mon Sep 17 00:00:00 2001
From: Philippe Teuwen <phil@teuwen.org>
Date: Sun, 8 Feb 2026 19:13:11 +0100
Subject: [PATCH] hf mfu wipe ulaes: fix quirks

---
 client/src/cmdhfmfu.c | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/client/src/cmdhfmfu.c b/client/src/cmdhfmfu.c
index c9a301490..a34f702e9 100644
--- a/client/src/cmdhfmfu.c
+++ b/client/src/cmdhfmfu.c
@@ -6649,15 +6649,21 @@ static int CmdHF14AMfuWipe(const char *Cmd) {
 
         // UL_AES specific
         if ((tagtype & MFU_TT_UL_AES)) {
-            // default config? TODO:
+            // default config?
 
             switch (i) {
                 case 41:
                     memcpy(data, "\x00\x00\x00\x3C", 4);
                     break;
                 case 42:
+                    // schann disabled by previous write on block 41
+                    use_schann = false;
                     memcpy(data, "\x8C\x05\x00\x00", 4);
                     break;
+                case 46:
+                    // RFU OTP, write will break if already set to non zero
+                    i = 47;
+                    break;
                 case 48:
                     goto ulaes;
             }