Inspecting firmwares of some receivers and transceivers

Some radio scanner firmwares contains lots of debugging strings and code, e.g. debug19 debug20 debug21 . C . sjis MOT TST test_control_ch 
and some are based on NORTi RTOS.

Some receiver model firmwares are probably encrypted but e.g. binwalk can show something

  


 



 

Some devs have multiple firmwares, e.g. one for the DSP and one for the display.

Ghidra TMS320c28x


 

Ghidra Fujitsu MB91F


 

 

Comments

Post a Comment

Popular posts from this blog

Telive-2 how-to

Image
Oracle VirtualBox Debian 12 clean install sudo apt install rtl-sdr sudo apt install wireshark sudo apt install xterm sudo apt install audacious https://github.com/sq5bpf/telive-2 download: https://github.com/sq5bpf/telive-2/tree/main/scripts/install_telive.sh or wget it chmod 755 install_telive.sh ./install_telive.sh set desired frequency teliveusr@debian:~/tetra/telive-2/gnuradio-companion/python3_based_gnuradio$ nano telive_1ch_simple_gr310_udp_xmlrpc.grc     open 2 terminal windows run GNU Radio Companion, load and execute the grc in terminal window 1 run teliveusr@debian:~/tetra/osmo-tetra-sq5bpf-2/src$ ./receiver1udp in terminal window 2 run teliveusr@debian:~/tetra/telive-2$ ./rxx   receiver1 and receiver2 require simdemod2.py. It can maybe copied from original telive src teliveusr@debian:~/tetra/osmo-tetra-sq5bpf-2/src/demod$ ls __pycache__  simdemod3_telive.grc  simdemod3_telive.py  simdemod3_telive_send_udp_to_telive.py
Read more

Modifying LILYGO T3 LoRa32 RTL_433 ESP OOK receiver example - log found devices to file

https://techcoderadio.blogspot.com/2025/10/modifying-lilygo-t3-lora32-rtl433-esp.html   https://github.com/NorthernMan54/rtl_433_ESP   Log found devices to file (SD card) appendFile(SD, "/rtl433data.txt", JSONmessageBuffer); bin files: https://github.com/OH1GIU-P/ESP32-RTL433ESP-logger-firmware   /*  Basic rtl_433_ESP example for OOK/ASK Devices */ #include <ArduinoJson.h> #include <ArduinoLog.h> #include <rtl_433_ESP.h> #include <wire.h> #include <Adafruit_GFX.h> #include <Adafruit_SSD1306.h> #include <SD.h> #include <FS.h> #include <SPI.h> #ifndef RF_MODULE_FREQUENCY #  define RF_MODULE_FREQUENCY 433.92 #endif #define JSON_MSG_BUFFER 512 #define LED_SDA 21 #define LED_SCL 22 #define LED_RST -1 #define SD_CS   13 #define SD_MOSI 15 #define SD_SCK  14 #define SD_MISO 2 #define SCR_W 128 #define SCR_H 64 Adafruit_SSD1306 display(SCR_W, SCR_H, &Wire, LED_RST); bool bLED = false; bool bSD = fa...
Read more

Modifying LILYGO T3 LoRa32 RTL_433 ESP OOK receiver example

Image
  https://github.com/NorthernMan54/rtl_433_ESP Visual Studio Code PlatformIO It would be easy to add e.g. saving found devices data to TF card ... /*  Basic rtl_433_ESP example for OOK/ASK Devices */ #include <ArduinoJson.h> #include <ArduinoLog.h> #include <rtl_433_ESP.h> #include <wire.h> #include <Adafruit_GFX.h> #include <Adafruit_SSD1306.h> #ifndef RF_MODULE_FREQUENCY #  define RF_MODULE_FREQUENCY 433.92 #endif #define JSON_MSG_BUFFER 512 #define LED_SDA 21 #define LED_SCL 22 #define LED_RST -1 #define SCR_W 128 #define SCR_H 64 Adafruit_SSD1306 display(SCR_W, SCR_H, &Wire, LED_RST); bool bLED = false; char messageBuffer[JSON_MSG_BUFFER]; rtl_433_ESP rf; // use -1 to disable transmitter int count = 0; void rtl_433_Callback(char* message) {   JsonDocument jsonDocument;   deserializeJson(jsonDocument,message);   logJson(jsonDocument);   count++; } void logJson(JsonDocument jsondata) { #if defined(ESP8266) || d...
Read more