pro92b said:
The firmware binary could be encrypted
I've done some investigation on this and I do not believe the firmware binary is encrypted. However, I could be wrong.
There are Motorola S-records embedded within the upgrade executable (BCi96UPDT.exe and BC296UPDT.exe, I believe they're called) and many, many long ASCII strings of hexadecimal data that follow the S8 command. Each string is preceded by a three-byte address. If you take this data, write it to a binary file in the correct order according to the address, and then look at the binary file you just created, you will see a number of interesting ASCII strings, many of which seem to imply a hidden diagnostic mode is available. (I haven't figured out how or if it can be enabled.) At any rate, if this were part of the upgrade, then it must not be encrypted because it's possible to read and understand the data in it.
On the other hand, each of the updates has been shipped with a .DAT file, also consisting of hexadecimal data encoded as ASCII strings, that might be the update data itself. However, I have not taken a look at that in a while to see whether or not it might be encrypted.
I'm just hoping that these upgrades improve reception on Austin-Travis County's CQPSK system. Right now, the BC296D does a wretched job on the simulcast sites, but does very well on the weaker C4FM Intellirepeater sites.