GQ GMC-800V2: Support

[StaticBR]

I can not install RadPro on my GMC-800 via the Web Installer.

Device

• GQ GMC-800, stock firmware Re2.00

What happens

The installer detects my device correctly ("GQ GMC-800, S/N 17 00 31 36 36 35 92, running Re2.00"), language selection works, but Step 3 (Flashing Firmware) immediately fails with:

Failed to execute 'open' on 'SerialPort': Failed to open serial port.

At that moment the device drops the serial interface and re-enumerates as a USB mass-storage drive labeled BOOTLOADER containing a single firmware.bin (241,664 bytes, 2020-04-28). No other info files.

USB IDs observed

• Normal mode: VID_0483 / PID_5740 (STM32 USB CDC) - Windows binds usbser.sys
• Bootloader mode: USB MSC, hardware ID STM_____Product_________0.01

What I tried

• Tried multiple USB data cables and multiple USB ports
• Power-cycled the device
• Closed all other apps that could hold the port, single Chrome tab.
• manually forced the CH340 driver onto the device > port appeared as "USB-SERIAL CH340 (COM9)" with Code 10 / STATUS_DEVICE_DATA_ERROR, device could not start.
• Cleanly uninstalled the CH340 driver. Windows rebound the correct usbser.sys and the Code 10 was gone - but the installer still fails at Step 3 with the same error.
• Tried manually replacing firmware.bin on the BOOTLOADER drive with a Rad Pro .bin > bricked the device. Recovered via PowerUp while holding the back button > Mass Storage Mode > Pasted old firmware.

Debug:

Browser console Log:

[Gissio]

Thanks for your detailed report! It clearly shows that GQ released a new GMC-800 hardware revision.

Could you please go to Security and quality and Report a vulnerability? Let’s continue the conversation there.

[ullix]

GeigerLog also has several issues with this counter, which reports itself as GMC-800Re2.00.
An initial problem was the use of a different USB-To-Serial chip. The old type is:

#   idVendor             0x1a86 QinHeng Electronics
#   idProduct            0x7523 HL-340 USB-Serial adapter

so far had been used for all of GQ's devices for well over a decade. The new type is:

#   idVendor             0x0483 STMicroelectronics
#   idProduct            0x5740 Virtual COM Port

If I am not mistaken, it is the same one as used in the Fnirsi GC-01?

This is annoying but easily correctable in GeigerLog. However, on top this the new firmware is significantly slower on various calls. I was forced to put in delays into GeigerLog code to accomodate this chip!

E.g. updating the counter time takes now 779 ms, while on an old GMC-300 takes 101 ms! Or, updating the config of an 800 (512 bytes) takes 1024 ms, while on an 300 (256 bytes) takes 78 ms. Further, I cannot call for CPM and CPS in succession, because even Python (interoreted!) is too fast, and have to insert a delay!

I doubt that the new chip in the 800 is that much slower; probably just an awfully bad programming.

And who knows, perhaps all changes are done to fend off RadPro???

[ullix]

@thei85 did you notice a difference between the "DE" and "non-DE" model? I'd expect just a language pre-set, as "DE" is country code for Germany? My GMC-800Re2.00 model allows to config 1 of 5 languages. I choose English for the biggest chance of error-free wordings ;-//

The GQ firmware has some issues, but GeigerLog is now able to run it. Though you must chose the latest devel version from here: https://sourceforge.net/p/geigerlog/discussion/devel2/

[ullix]

Indeed, this works! After opening firmware.bin with GHex, and serching for GMC-800, I found 2 places.

The first shows WiFi busy a few spots later. This is funny, because this message comes up on the counter screen every now and then - while to my knowledge this counter has no WiFi? I also cannot see any WiFi hardware on the circuit board, after I removed the back side?

The 2nd found shows the firmware version "Re2.00". Do you see the same? It would be very surprising if you had the same fw yet different performance?

I also looked for the serial number, but this not seem to be in the fw (but may be encryped?).

[greywolf76]

High resolution photo Rev.2.0

[Gissio]

@greywolf76: These photos are extremely helpful. Porting Rad Pro to the GMC-800V2 shouldn’t be too hard, since the electronics are virtually identical except for the comms.

That said, my time is very limited these days, so I don’t know when I’ll be able to work on it.

Would you mind if I added your photos to the repository?

[greywolf76]

Hello Gissio, Of course, you can use it without any problem. If you need the factory-saved bin.file, I'd be happy to share it. Thank you for your work! As time permits, I hope you'll succeed in decrypting it. If so, I'd be happy to help you test it. Gissio ***@***.***> (időpont: 2026. júl. 27., H, 8:57) ezt írta:

…

*Gissio* left a comment (Gissio/radpro#404) <#404 (comment)> @greywolf76 <https://github.com/greywolf76>: These photos are extremely helpful. Porting Rad Pro to the GMC-800V2 shouldn’t be too hard, since the electronics are virtually identical except for the comms. That said, my time is very limited these days, so I don’t know when I’ll be able to work on it. Would you mind if I added your photos to the repository? — Reply to this email directly, view it on GitHub <#404?email_source=notifications&email_token=BFNHXG3WW3WMRSX5HOWDA6L5G34MXA5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTKMBYHAZDENBRGAZKM4TFMFZW63VHNVSW45DJN5XKKZLWMVXHJLDGN5XXIZLSL5RWY2LDNM#issuecomment-5088224102>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BFNHXG3FQTC2E2SI2S5SBLL5G34MXAVCNFSNUABFKJSXA33TNF2G64TZHM2TOMZSGU4TQOBRHNEXG43VMU5TINJTGI4DAMBWGEZ2C5QC> . Triage notifications, keep track of coding agent tasks and review pull requests on the go with GitHub Mobile for iOS <https://github.com/notifications/mobile/ios/BFNHXG426TB6CBY6OGPK53T5G34MXA5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTKMBYHAZDENBRGAZKM4TFMFZW63VHNVSW45DJN5XKKZLWMVXHJKTGN5XXIZLSL5UW64Y> and Android <https://github.com/notifications/mobile/android/BFNHXG6WNXGSWVUSCJW7DP35G34MXA5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTKMBYHAZDENBRGAZKM4TFMFZW63VHNVSW45DJN5XKKZLWMVXHJLTGN5XXIZLSL5QW4ZDSN5UWI>. Download it today! You are receiving this because you were mentioned.Message ID: ***@***.***>

[Gissio]

@greywolf76 I stripped the location data from your first photo and uploaded it to the repository. You may want to delete the photos you posted above - they carry EXIF data that reveals exactly where they were taken.

Also, could you try the following:

1. Download and unzip radpro-gq-gmc800v2-en-3.1.2test2.bin.zip
2. Disconnect your GQ GMC-800V2 from USB and turn it off.
3. Hold the Back button while connecting the device to your computer.
4. A drive should appear containing a firmware.bin file. Copy it somewhere safe. That's your backup of the original firmware, so don't skip this step.
5. Copy the uncompressed .bin file to the device.

To set expectations: the odds of this working are low. I haven't reverse-engineered anything, I'm just assuming the new hardware only swaps the external CH340 for the MCU's internal USB stack.

Let us know how it goes.

[greywolf76]

@Gissio Unfortunately it didn't work. The copy was successful and there was a beep, but when I restarted it was just a dark LCD. It works after reloading the original .bin file.

[Gissio]

Can you try again with test3?

radpro-gq-gmc800v2-en-3.1.2test3.bin.zip

[greywolf76]

Unfortunately it still doesn't work.

[greywolf76]

If you want, I can send you the original .bin firmware file.