Posts

Reversing some radio control Android apps

Image
I downloaded two Android apps from APKPure.com M-Radio Control MOTOTRBO.xapk and M-Radio Control TETRA.xapk Unzipped xapks and decompiled with Apktool (Linux) and used grep to search in src files, e.g. grep -ri "cpin" . --include="*.java" grep -ri "trunk" . Search finds AT commands etc.  

Testing Rayhunter with cheap 4G LTE Wifi UFI modems

Image
DragonOS VirtualBox   Cheap UFI variants of UZ801 work by default in Asian bands. It is possible to set European bands. https://github.com/hkfuertes/msm8916-openwrt/tree/enable_bands#band-configuration-uf02     Rayhunter  

Inspecting Alinco DJ-G29T firmware

Image
Alinco DJ-G29T firmware updater softwate  DJ-G29T ver.1.10NEW.msi => unzip, Instal01,cab => unzip File named PO1_A3 ... contains compiled code and data section in Motorola S-record format. Remove lines before and after data section and with some Python scripts clean the data section. import re import argparse import sys def clean_file(path: str) -> None:     try:         with open(path, 'r', encoding='ansi') as f:             text = f.read()     except FileNotFoundError:         print(f"File not found: {path}", file=sys.stderr)         sys.exit(1)     cleaned = re.sub(r'[^S0-9A-F\r\n]+', '', text)     with open(path, 'w', encoding='ansi', newline='') as f:         f.write(cleaned) def main() -> None:     parser = argparse.ArgumentParser(         description='Keep characters S,0-9,A-F'   ...

Inspecting some Uniden scanners firmware strings

Image
with srecparser.py https://techcoderadio.blogspot.com/2026/04/motorola-s-record-old-python-code.html     Uniden BR330T BCT15 BCD396T  

Inspecting Uniden BC898T firmware

Image
run BearMock to get decoded Motorola S-record format file https://techcoderadio.blogspot.com/2025/04/bearmock-for-python-3.html CPU is probably M16C/60N Ghidra:

Inspecting Uniden BCT8 firmware

Image
run BearMock to get decoded Motorola S-record format file https://techcoderadio.blogspot.com/2025/04/bearmock-for-python-3.html CPU is probably M16C/60N Ghidra: