Posts

Showing posts from July, 2026

Inspecting firmwares of some receivers and transceivers

Image
Some radio scanner firmwares contains lots of debugging strings and code, e.g. debug19 debug20 debug21 . C . sjis MOT TST test_control_ch  and some are based on NORTi RTOS. Some receiver model firmwares are probably encrypted but e.g. binwalk can show something        Some devs have multiple firmwares, e.g. one for the DSP and one for the display. Ghidra TMS320c28x   Ghidra Fujitsu MB91F    

Quick and super simple RDS log mod for the SDRAngel

rdsparser.cpp Append group data to log file in hex format. void RDSParser::parseGroup(unsigned int *group) {     unsigned int group_type = (unsigned int)((group[1] >> 12) & 0xf);     bool ab = (group[1] >> 11 ) & 0x1;      // add this     {         std::ofstream ofs("rdslog.txt", std::ios::app);         if (ofs)         {             ofs << std::hex << std::uppercase;             // print each 16-bit word as zero-padded 4-digit hex when possible             ofs << std::setw(4) << std::setfill('0') << (group[0] & 0xFFFF);             ofs << std::setw(4) << std::setfill('0') << (group[1] & 0xFFFF);             ofs << std::setw(4) << std::setfill('0') ...

Inspecting Alinco DX-R8 firmware updater

Image
DX-SR8 Flash Writer Ver01.12.zip Unzip  extract DX-SR8 Flash Writer Ver01.12.msi extract Instal01.cab CPU: R8C R8C/Lx/3AA Microcontroller IC 16-Bit 20MHz 128KB (128K x 8) FLASH 100-LFQFP (14x14) Flash code is embedded as Motorola S-record format in _B... file (many _xxx files without extension in package). It can be extracted and cleaned (rem non-printing chars etc.) e.g. with Python. srec_info: