Zhentar

Yeah, I have been considering the brute force approach, but unfortunately it won't work for Windows 10 symbols (since they use reproducible build hashes rather than actual timestamps). And definitely...

Unicode includes a block of characters for visual representations of control characters: https://www.fileformat.info/info/unicode/block/control_pictures/images.htm

SYSTXCCITC01 has an 8MB ROM mapped from addresses 0x40000 to 0x00800000. SYSTXCCITC01-B has a 16MB ROM mapped from addresses 0x18040000 to 0x18F40000. SH7269 has a 64kB region of "fast" RAM...

I was noticing a lot of strings had punctuation for their first character... for example, `DATE*ANUARY&EBRUARY-ARCH!PRIL-AY*UNE*ULY!UGUST3EPTEMBER/CTOBER.OVEMBER$ECEMBERDAYLIGHT`. I was confused; even if my ihex converter had corrupted the data, always hitting...

BINF0130's wireless stack was compiled in debug mode, which means it includes strings like "C:\VirtualBox_Shared_1\UTC\Bing\ClarinoxSoftFrame_UTC_Bing\Build\embOS\Projects\Bing\SHC\..\..\..\..\..\System\Common\ClxStaticPointer.h". So it looks like the thermostat is running embOS. ("UTC" is "United Technologies Corporation", for...

A correction on my previous code size statement - The "A" models only have about 250kB of code. The "B" versions have the 1.25MB claimed. Curiously, the "A" models have...

Operator error, I just wasn't looking right! brybus stopped scanning at table `3F` - but there were ten more tables hiding in the 0x40s! Table | Name | Row count...

SCHEDULE rows: 0x2-0x9: 1 row for each zone, 10 bytes per day of week 0xA-0x11: 1 row for each zone, 5 bytes per day of week 0x16: 7 bytes for...

It looks like "SYSCTRL" serves as a replacement for SAMINFO. So then SAMINFO being all zeros for SYSTXCCITC01-B is probably why the older SAM modules aren't compatible with it, and...

Or maybe SAMINFO equivalents are spread across TEMP, SCHEDULE, and SYSCTRL. I haven't looked at SCHEDULE at all yet. SYSCTRL and possibly TEMP have changed from SAMINFO's convention of eight...