Posts

Optimizing Uniden bearmock srecutils

https://techcoderadio.blogspot.com/2025/04/bearmock-for-python-3.html Some optimizations   # srecutils.py # # Copyright (C) 2011 Gabriel Tremblay - initnull hat gmail.com # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA """     Motorola S-Record utis     - Kudos to Montreal CISSP Groupies """ from functools...

BT scans 2026 #1

Image
Pump   Bar sound sys   Unprovisioned Mesh in hypermarket  

Guidelines for inspecting old (circa 1998 - 2007) receiver control and updater software

Image
Old control/updater programs are usually written in VB6, Delphi/C++ Builder or .NET VB, C#. DetectItEasy can show PE32 info which usually and almost allways shows which development tool/framework is used. DetectItEasy strings function shows ASCII strings inside .EXE file. Sometimes there is code embedded inside exe, usually as Motorola S-Record format. E.g. with Python script is easy to extract it and remove unnecessary characters. import re re.sub(r'[^S0-9A-F\r\n]+', '', text) ...  or use Linux stings command.  Installers are usually msi or innoextract. Can be extracted e.g with unzip, msiexec, msiextract (Linux) or innoextract (Linux). Sometimes embedded code is inside in a one of the extracted files. SRecord is a set of tools for inspecting/converting etc. S-Record data. VB6 programs can be further examined e.g. with VB6 decompiler lite. .NET programs, dotPeek can export to VS solution. Even in deobfuscated .NET programs it is possible to find some quite clean code (...

Monitor with Python and RTL-SDR

Python, RTL-SDR, numpy This is modified version based on rtl-sdr-close-call-monitor  https://github.com/nootedandrooted/rtl-sdr-close-call-monitor It scans tetra uplink european frequencies. import sys import time import numpy as np from rtlsdr import RtlSdr sdr = RtlSdr() sr = 2.4e6 shift = 1.2e6 start_freq = 380.0125e6 end_freq = 0 freq = 381.2125e6 sdr.sample_rate = sr  # Hz sdr.freq_correction = 1  # PPM sdr.gain = 30  # dB num_samples = 2**16 squelch_level = -30 n = 0 while True:     gain_question = str(input("Do you want to use the default gain? (30dB) (y/n): "))     if gain_question == 'y':         print("Using the default gain (30 dB)")         break     elif gain_question == 'n':         gain_custom = int(input("Please enter the gain (in dB): "))         sdr.gain = gain_custom         break     else:      ...

Inspecting a discontinued portable amateur radio memory control program

Image
Detect It Easy   De4dot   dotPeek export to VS project. VS 2026 converted successfully to .NET 4.8 level. Weird and obfuscated source files but also a dir in project that contains clean code files. Changed configuration to x86.   Build failed with many C# 7.3 nullable disable errors. added to .csproj     <Nullable>Enable</Nullable>     <LangVersion>preview</LangVersion> still one CSC nullable disable error c# 7.3 changed to wrong configuration x86 -> x64 and back to x86 then clean and successful build.   

Inspecting firmware updater of a old discontinued handheld mobile HAM transceiver

Image
Firmware updater exe : DetectItEasy  De4dot: VS Code ILSpy decompiled cleaned code  dotPeek created VS solution   Firmware ROM binary file inside VS solution, DetectItEasy: CPU is probably R8C. Some Ghidra R8 processor modules exists: https://github.com/silverchris/m16c  

Inspecting firmwares of some receivers and transceivers

Image
Some radio scanner firmwares contains lots of debugging strings and code, e.g. debug19 debug20 debug21 . C . sjis MOT TST test_control_ch  and some are based on NORTi RTOS. Some receiver model firmwares are probably encrypted but e.g. binwalk can show something        Some devs have multiple firmwares, e.g. one for the DSP and one for the display. Ghidra TMS320c28x   Ghidra Fujitsu MB91F